{"name":"aws-native","displayName":"AWS Cloud Control","version":"1.58.0","description":"A native Pulumi package for creating and managing Amazon Web Services (AWS) resources.","keywords":["pulumi","aws","aws-native","cloud control","ccapi","category/cloud","kind/native"],"homepage":"https://pulumi.com","license":"Apache-2.0","repository":"https://github.com/pulumi/pulumi-aws-native","publisher":"Pulumi","language":{"csharp":{"namespaces":{"accessanalyzer":"AccessAnalyzer","acmpca":"Acmpca","aiops":"AiOps","amazonmq":"AmazonMq","amplify":"Amplify","amplifyuibuilder":"AmplifyUiBuilder","apigateway":"ApiGateway","apigatewayv2":"ApiGatewayV2","appconfig":"AppConfig","appflow":"AppFlow","appintegrations":"AppIntegrations","applicationautoscaling":"ApplicationAutoScaling","applicationinsights":"ApplicationInsights","applicationsignals":"ApplicationSignals","apprunner":"AppRunner","appstream":"AppStream","appsync":"AppSync","aps":"Aps","arcregionswitch":"ArcRegionSwitch","arczonalshift":"ArcZonalShift","athena":"Athena","auditmanager":"AuditManager","autoscaling":"AutoScaling","aws-native":"AwsNative","b2bi":"B2bi","backup":"Backup","backupgateway":"BackupGateway","batch":"Batch","bedrock":"Bedrock","bedrockagentcore":"BedrockAgentCore","bedrockmantle":"BedrockMantle","billing":"Billing","budgets":"Budgets","cases":"Cases","cassandra":"Cassandra","ce":"Ce","certificatemanager":"CertificateManager","chatbot":"Chatbot","cleanrooms":"CleanRooms","cleanroomsml":"CleanRoomsMl","cloudformation":"CloudFormation","cloudfront":"CloudFront","cloudtrail":"CloudTrail","cloudwatch":"CloudWatch","codeartifact":"CodeArtifact","codebuild":"CodeBuild","codeconnections":"CodeConnections","codedeploy":"CodeDeploy","codeguruprofiler":"CodeGuruProfiler","codegurureviewer":"CodeGuruReviewer","codepipeline":"CodePipeline","codestarconnections":"CodeStarConnections","codestarnotifications":"CodeStarNotifications","cognito":"Cognito","comprehend":"Comprehend","computeoptimizer":"ComputeOptimizer","configuration":"Configuration","connect":"Connect","connectcampaigns":"ConnectCampaigns","connectcampaignsv2":"ConnectCampaignsV2","controltower":"ControlTower","customerprofiles":"CustomerProfiles","databrew":"DataBrew","datapipeline":"DataPipeline","datasync":"DataSync","datazone":"DataZone","dax":"Dax","deadline":"Deadline","detective":"Detective","devicefarm":"DeviceFarm","devopsguru":"DevOpsGuru","directconnect":"DirectConnect","directoryservice":"DirectoryService","dms":"Dms","docdb":"DocDb","docdbelastic":"DocDbElastic","dsql":"Dsql","dynamodb":"DynamoDb","ec2":"Ec2","ecr":"Ecr","ecs":"Ecs","efs":"Efs","eks":"Eks","elasticache":"ElastiCache","elasticbeanstalk":"ElasticBeanstalk","elasticloadbalancingv2":"ElasticLoadBalancingV2","elementalinference":"ElementalInference","emr":"Emr","emrcontainers":"EmrContainers","emrserverless":"EmrServerless","entityresolution":"EntityResolution","events":"Events","eventschemas":"EventSchemas","evidently":"Evidently","evs":"Evs","finspace":"FinSpace","fis":"Fis","fms":"Fms","forecast":"Forecast","frauddetector":"FraudDetector","fsx":"FSx","gamelift":"GameLift","gameliftstreams":"GameLiftStreams","globalaccelerator":"GlobalAccelerator","glue":"Glue","grafana":"Grafana","greengrassv2":"GreengrassV2","groundstation":"GroundStation","guardduty":"GuardDuty","healthimaging":"HealthImaging","healthlake":"HealthLake","iam":"Iam","identitystore":"IdentityStore","imagebuilder":"ImageBuilder","inspector":"Inspector","inspectorv2":"InspectorV2","internetmonitor":"InternetMonitor","invoicing":"Invoicing","iot":"IoT","iotanalytics":"IoTAnalytics","iotcoredeviceadvisor":"IoTCoreDeviceAdvisor","iotevents":"IoTEvents","iotfleethub":"IoTFleetHub","iotsitewise":"IoTSiteWise","iottwinmaker":"IoTTwinMaker","iotwireless":"IoTWireless","ivs":"Ivs","ivschat":"IvsChat","kafkaconnect":"KafkaConnect","kendra":"Kendra","kendraranking":"KendraRanking","kinesis":"Kinesis","kinesisanalyticsv2":"KinesisAnalyticsV2","kinesisfirehose":"KinesisFirehose","kinesisvideo":"KinesisVideo","kms":"Kms","lakeformation":"LakeFormation","lambda":"Lambda","launchwizard":"LaunchWizard","lex":"Lex","licensemanager":"LicenseManager","lightsail":"Lightsail","location":"Location","logs":"Logs","lookoutvision":"LookoutVision","m2":"M2","macie":"Macie","mediaconnect":"MediaConnect","medialive":"MediaLive","mediapackage":"MediaPackage","mediapackagev2":"MediaPackageV2","mediatailor":"MediaTailor","memorydb":"MemoryDb","msk":"Msk","mwaa":"Mwaa","mwaaserverless":"MwaaServerless","neptune":"Neptune","neptunegraph":"NeptuneGraph","networkfirewall":"NetworkFirewall","networkmanager":"NetworkManager","nimblestudio":"NimbleStudio","oam":"Oam","observabilityadmin":"ObservabilityAdmin","odb":"Odb","omics":"Omics","opensearchserverless":"OpenSearchServerless","opensearchservice":"OpenSearchService","opsworkscm":"OpsWorksCm","organizations":"Organizations","osis":"Osis","panorama":"Panorama","paymentcryptography":"PaymentCryptography","pcaconnectorad":"PcaConnectorAd","pcaconnectorscep":"PcaConnectorScep","pcs":"Pcs","personalize":"Personalize","pinpoint":"Pinpoint","pipes":"Pipes","proton":"Proton","qbusiness":"QBusiness","qldb":"Qldb","quicksight":"QuickSight","ram":"Ram","rbin":"Rbin","rds":"Rds","redshift":"Redshift","redshiftserverless":"RedshiftServerless","refactorspaces":"RefactorSpaces","rekognition":"Rekognition","resiliencehub":"ResilienceHub","resourceexplorer2":"ResourceExplorer2","resourcegroups":"ResourceGroups","rolesanywhere":"RolesAnywhere","route53":"Route53","route53globalresolver":"Route53GlobalResolver","route53profiles":"Route53Profiles","route53recoverycontrol":"Route53RecoveryControl","route53recoveryreadiness":"Route53RecoveryReadiness","route53resolver":"Route53Resolver","rtbfabric":"RtbFabric","rum":"Rum","s3":"S3","s3express":"S3Express","s3objectlambda":"S3ObjectLambda","s3outposts":"S3Outposts","s3tables":"S3Tables","s3vectors":"S3Vectors","sagemaker":"SageMaker","scheduler":"Scheduler","secretsmanager":"SecretsManager","securityhub":"SecurityHub","securitylake":"SecurityLake","servicecatalog":"ServiceCatalog","servicecatalogappregistry":"ServiceCatalogAppRegistry","servicediscovery":"ServiceDiscovery","ses":"Ses","shield":"Shield","signer":"Signer","simspaceweaver":"SimSpaceWeaver","smsvoice":"Smsvoice","sns":"Sns","sqs":"Sqs","ssm":"Ssm","ssmcontacts":"SsmContacts","ssmguiconnect":"SsmGuiConnect","ssmincidents":"SsmIncidents","ssmquicksetup":"SsmQuickSetup","sso":"Sso","stepfunctions":"StepFunctions","supportapp":"SupportApp","synthetics":"Synthetics","systemsmanagersap":"SystemsManagerSap","timestream":"Timestream","transfer":"Transfer","verifiedpermissions":"VerifiedPermissions","voiceid":"VoiceId","vpclattice":"VpcLattice","wafv2":"WaFv2","wisdom":"Wisdom","workspaces":"WorkSpaces","workspacesinstances":"WorkspacesInstances","workspacesthinclient":"WorkSpacesThinClient","workspacesweb":"WorkSpacesWeb","xray":"XRay"},"packageReferences":{"Pulumi":"3.*"},"respectSchemaVersion":true},"go":{"importBasePath":"github.com/pulumi/pulumi-aws-native/sdk/go/aws","packageImportAliases":{"github.com/pulumi/pulumi-aws-native/sdk/go/aws/aws-native":"aws"},"respectSchemaVersion":true},"java":{"packages":{"aws-native":"awsnative"}},"nodejs":{"respectSchemaVersion":true},"python":{"pyproject":{"enabled":true},"respectSchemaVersion":true}},"config":{"variables":{"accessKey":{"type":"string","description":"The access key for API operations. You can retrieve this from the ‘Security \u0026 Credentials’ section of the AWS console.","secret":true},"allowedAccountIds":{"type":"array","items":{"type":"string"},"description":"List of allowed AWS account IDs to prevent you from mistakenly using an incorrect one. Conflicts with `forbiddenAccountIds`."},"assumeRole":{"$ref":"#/types/aws-native:config:AssumeRole","description":"Configuration for retrieving temporary credentials from the STS service."},"autoNaming":{"$ref":"#/types/aws-native:config:AutoNaming","description":"The configuration for automatically naming resources."},"defaultTags":{"$ref":"#/types/aws-native:config:DefaultTags","description":"Configuration block with resource tag settings to apply across all resources handled by this provider. This is designed to replace redundant per-resource `tags` configurations. Provider tags can be overridden with new values, but not excluded from specific resources. To override provider tag values, use the `tags` argument within a resource to configure new tag values for matching keys."},"endpoints":{"$ref":"#/types/aws-native:config:Endpoints","description":"Configuration block for customizing service endpoints."},"forbiddenAccountIds":{"type":"array","items":{"type":"string"},"description":"List of forbidden AWS account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with `allowedAccountIds`."},"ignoreTags":{"$ref":"#/types/aws-native:config:IgnoreTags","description":"Configuration block with resource tag settings to ignore across all resources handled by this provider (except any individual service tag resources such as `ec2.Tag`) for situations where external systems are managing certain resource tags."},"insecure":{"type":"boolean","description":"Explicitly allow the provider to perform \"insecure\" SSL requests. If omitted,default value is `false`."},"maxRetries":{"type":"integer","description":"The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown."},"profile":{"type":"string","description":"The profile for API operations. If not set, the default profile created with `aws configure` will be used."},"region":{"type":"string","$ref":"#/types/aws-native:index/region:Region","description":"The region where AWS operations will take place. Examples are `us-east-1`, `us-west-2`, etc."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role for Cloud Control API to use when performing this resource operation. Note, this is a unique feature for server side security enforcement, not to be confused with assumeRole, which is used to obtain temporary client credentials. If you do not specify a role, Cloud Control API uses a temporary session created using your AWS user credentials instead."},"s3UsePathStyle":{"type":"boolean","description":"Set this to true to use path-style addressing, i.e., `http://s3.amazonaws.com/BUCKET/KEY`. By default, the S3 client will use virtual hosted bucket addressing when possible (`http://BUCKET.s3.amazonaws.com/KEY`). Specific to the Amazon S3 service."},"secretKey":{"type":"string","description":"The secret key for API operations. You can retrieve this from the 'Security \u0026 Credentials' section of the AWS console.","secret":true},"sharedCredentialsFile":{"type":"string","description":"The path to the shared credentials file. If not set this defaults to `~/.aws/credentials`."},"skipCredentialsValidation":{"type":"boolean","description":"Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.","default":true},"skipGetEc2Platforms":{"type":"boolean","description":"Skip getting the supported EC2 platforms. Used by users that don't have `ec2:DescribeAccountAttributes` permissions.","default":true},"skipMetadataApiCheck":{"type":"boolean","description":"Skip the AWS Metadata API check. Useful for AWS API implementations that do not have a metadata API endpoint. Setting to true prevents Pulumi from authenticating via the Metadata API. You may need to use other authentication methods like static credentials, configuration variables, or environment variables.","default":true},"skipRegionValidation":{"type":"boolean","description":"Skip static validation of region name. Used by users of alternative AWS-like APIs or users with access to regions that are not public.","default":true},"skipRequestingAccountId":{"type":"boolean","description":"Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API."},"token":{"type":"string","description":"Session token for validating temporary credentials. Typically provided after successful identity federation or Multi-Factor Authentication (MFA) login. With MFA login, this is the session token provided afterward, not the 6 digit MFA code used to get temporary credentials.","secret":true}},"defaults":["region"]},"types":{"aws-native:accessanalyzer:AnalyzerAnalysisRuleCriteria":{"description":"The criteria for an analysis rule for an analyzer.","properties":{"accountIds":{"type":"array","items":{"type":"string"},"description":"A list of AWS account IDs to apply to the analysis rule criteria. The accounts cannot include the organization analyzer owner account. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers."},"resourceTags":{"type":"array","items":{"type":"array","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerTag"}},"description":"An array of key-value pairs to match for your resources. You can use the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.\n\nFor the tag key, you can specify a value that is 1 to 128 characters in length and cannot be prefixed with aws:.\n\nFor the tag value, you can specify a value that is 0 to 256 characters in length. If the specified tag value is 0 characters, the rule is applied to all principals with the specified tag key."}},"type":"object"},"aws-native:accessanalyzer:AnalyzerArchiveRule":{"description":"An Access Analyzer archive rule. Archive rules automatically archive new findings that meet the criteria you define when you create the rule.","properties":{"filter":{"type":"array","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerFilter"},"description":"The criteria for the rule."},"ruleName":{"type":"string","description":"The archive rule name"}},"type":"object","required":["filter","ruleName"]},"aws-native:accessanalyzer:AnalyzerConfigurationProperties":{"description":"The configuration for the analyzer","properties":{"internalAccessConfiguration":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerInternalAccessConfiguration","description":"Specifies the configuration of an internal access analyzer for an AWS organization or account. This configuration determines how the analyzer evaluates access within your AWS environment."},"unusedAccessConfiguration":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerUnusedAccessConfiguration","description":"Specifies the configuration of an unused access analyzer for an AWS organization or account."}},"type":"object"},"aws-native:accessanalyzer:AnalyzerFilter":{"properties":{"contains":{"type":"array","items":{"type":"string"},"description":"A \"contains\" condition to match for the rule."},"eq":{"type":"array","items":{"type":"string"},"description":"An \"equals\" condition to match for the rule."},"exists":{"type":"boolean","description":"An \"exists\" condition to match for the rule."},"neq":{"type":"array","items":{"type":"string"},"description":"A \"not equal\" condition to match for the rule."},"property":{"type":"string","description":"The property used to define the criteria in the filter for the rule."}},"type":"object","required":["property"]},"aws-native:accessanalyzer:AnalyzerInternalAccessAnalysisRuleCriteria":{"description":"The criteria for an analysis rule for an internal access analyzer.","properties":{"accountIds":{"type":"array","items":{"type":"string"},"description":"A list of AWS account IDs to apply to the internal access analysis rule criteria. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers and cannot include the organization owner account."},"resourceArns":{"type":"array","items":{"type":"string"},"description":"A list of resource ARNs to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources that match these ARNs."},"resourceTypes":{"type":"array","items":{"type":"string"},"description":"A list of resource types to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources of these types."}},"type":"object"},"aws-native:accessanalyzer:AnalyzerInternalAccessConfiguration":{"description":"Specifies the configuration of an internal access analyzer for an AWS organization or account. This configuration determines how the analyzer evaluates internal access within your AWS environment.","properties":{"internalAccessAnalysisRule":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerInternalAccessConfigurationInternalAccessAnalysisRuleProperties","description":"Contains information about analysis rules for the internal access analyzer. Analysis rules determine which entities will generate findings based on the criteria you define when you create the rule."}},"type":"object"},"aws-native:accessanalyzer:AnalyzerInternalAccessConfigurationInternalAccessAnalysisRuleProperties":{"description":"Contains information about analysis rules for the internal access analyzer. Analysis rules determine which entities will generate findings based on the criteria you define when you create the rule.","properties":{"inclusions":{"type":"array","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerInternalAccessAnalysisRuleCriteria"},"description":"A list of rules for the internal access analyzer containing criteria to include in analysis. Only resources that meet the rule criteria will generate findings."}},"type":"object"},"aws-native:accessanalyzer:AnalyzerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:accessanalyzer:AnalyzerUnusedAccessConfiguration":{"description":"The Configuration for Unused Access Analyzer","properties":{"analysisRule":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerUnusedAccessConfigurationAnalysisRuleProperties","description":"Contains information about rules for the analyzer."},"unusedAccessAge":{"type":"integer","description":"The specified access age in days for which to generate findings for unused access. For example, if you specify 90 days, the analyzer will generate findings for IAM entities within the accounts of the selected organization for any access that hasn't been used in 90 or more days since the analyzer's last scan. You can choose a value between 1 and 365 days."}},"type":"object"},"aws-native:accessanalyzer:AnalyzerUnusedAccessConfigurationAnalysisRuleProperties":{"description":"Contains information about rules for the analyzer.","properties":{"exclusions":{"type":"array","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerAnalysisRuleCriteria"},"description":"A list of rules for the analyzer containing criteria to exclude from analysis. Entities that meet the rule criteria will not generate findings."}},"type":"object"},"aws-native:acmpca:CertificateApiPassthrough":{"description":"Contains X.509 certificate information to be placed in an issued certificate. An ``APIPassthrough`` or ``APICSRPassthrough`` template variant must be selected, or else this parameter is ignored. \n If conflicting or duplicate certificate information is supplied from other sources, AWS Private CA applies [order of operation rules](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations) to determine what information is used.","properties":{"extensions":{"$ref":"#/types/aws-native:acmpca:CertificateExtensions","description":"Specifies X.509 extension information for a certificate."},"subject":{"$ref":"#/types/aws-native:acmpca:CertificateSubject","description":"Contains information about the certificate subject. The Subject field in the certificate identifies the entity that owns or controls the public key in the certificate. The entity can be a user, computer, device, or service. The Subject must contain an X.500 distinguished name (DN). A DN is a sequence of relative distinguished names (RDNs). The RDNs are separated by commas in the certificate."}},"type":"object"},"aws-native:acmpca:CertificateAuthorityAccessDescription":{"description":"Structure that contains X.509 AccessDescription information.","properties":{"accessLocation":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityGeneralName"},"accessMethod":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityAccessMethod"}},"type":"object","required":["accessLocation","accessMethod"]},"aws-native:acmpca:CertificateAuthorityAccessMethod":{"description":"Structure that contains X.509 AccessMethod information. Assign one and ONLY one field.","properties":{"accessMethodType":{"type":"string"},"customObjectIdentifier":{"type":"string"}},"type":"object"},"aws-native:acmpca:CertificateAuthorityCrlConfiguration":{"description":"Your certificate authority can create and maintain a certificate revocation list (CRL). A CRL contains information about certificates that have been revoked.","properties":{"crlDistributionPointExtensionConfiguration":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityCrlDistributionPointExtensionConfiguration","description":"Configures the default behavior of the CRL Distribution Point extension for certificates issued by your CA. If this field is not provided, then the CRL Distribution Point extension will be present and contain the default CRL URL."},"crlType":{"type":"string","description":"Specifies the type of CRL. This setting determines the maximum number of certificates that the certificate authority can issue and revoke. For more information, see [AWS Private CA quotas](https://docs.aws.amazon.com/general/latest/gr/pca.html#limits_pca) .\n\n- `COMPLETE` - The default setting. AWS Private CA maintains a single CRL file for all unexpired certificates issued by a CA that have been revoked for any reason. Each certificate that AWS Private CA issues is bound to a specific CRL through the CRL distribution point (CDP) defined in [RFC 5280](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280) .\n- `PARTITIONED` - Compared to complete CRLs, partitioned CRLs dramatically increase the number of certificates your private CA can issue.\n\n\u003e When using partitioned CRLs, you must validate that the CRL's associated issuing distribution point (IDP) URI matches the certificate's CDP URI to ensure the right CRL has been fetched. AWS Private CA marks the IDP extension as critical, which your client must be able to process."},"customCname":{"type":"string","description":"Name inserted into the certificate *CRL Distribution Points* extension that enables the use of an alias for the CRL distribution point. Use this value if you don't want the name of your S3 bucket to be public.\n\n\u003e The content of a Canonical Name (CNAME) record must conform to [RFC2396](https://docs.aws.amazon.com/https://www.ietf.org/rfc/rfc2396.txt) restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as \"http://\" or \"https://\"."},"customPath":{"type":"string","description":"Designates a custom file path in S3 for CRL(s). For example, `http://\u003cCustomName\u003e/\u003cCustomPath\u003e/\u003cCrlPartition_GUID\u003e.crl` ."},"enabled":{"type":"boolean","description":"Boolean value that specifies whether certificate revocation lists (CRLs) are enabled. You can use this value to enable certificate revocation for a new CA when you call the `CreateCertificateAuthority` operation or for an existing CA when you call the `UpdateCertificateAuthority` operation."},"expirationInDays":{"type":"integer","description":"Validity period of the CRL in days."},"s3BucketName":{"type":"string","description":"Name of the S3 bucket that contains the CRL. If you do not provide a value for the *CustomCname* argument, the name of your S3 bucket is placed into the *CRL Distribution Points* extension of the issued certificate. You can change the name of your bucket by calling the [UpdateCertificateAuthority](https://docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html) operation. You must specify a [bucket policy](https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-policies) that allows AWS Private CA to write the CRL to your bucket.\n\n\u003e The `S3BucketName` parameter must conform to the [S3 bucket naming rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html) ."},"s3ObjectAcl":{"type":"string","description":"Determines whether the CRL will be publicly readable or privately held in the CRL Amazon S3 bucket. If you choose PUBLIC_READ, the CRL will be accessible over the public internet. If you choose BUCKET_OWNER_FULL_CONTROL, only the owner of the CRL S3 bucket can access the CRL, and your PKI clients may need an alternative method of access.\n\nIf no value is specified, the default is PUBLIC_READ.\n\n*Note:* This default can cause CA creation to fail in some circumstances. If you have have enabled the Block Public Access (BPA) feature in your S3 account, then you must specify the value of this parameter as `BUCKET_OWNER_FULL_CONTROL` , and not doing so results in an error. If you have disabled BPA in S3, then you can specify either `BUCKET_OWNER_FULL_CONTROL` or `PUBLIC_READ` as the value.\n\nFor more information, see [Blocking public access to the S3 bucket](https://docs.aws.amazon.com/privateca/latest/userguide/PcaCreateCa.html#s3-bpa) ."}},"type":"object","required":["enabled"]},"aws-native:acmpca:CertificateAuthorityCrlDistributionPointExtensionConfiguration":{"description":"Configures the default behavior of the CRL Distribution Point extension for certificates issued by your certificate authority","properties":{"omitExtension":{"type":"boolean","description":"Configures whether the CRL Distribution Point extension should be populated with the default URL to the CRL. If set to `true` , then the CDP extension will not be present in any certificates issued by that CA unless otherwise specified through CSR or API passthrough.\n\n\u003e Only set this if you have another way to distribute the CRL Distribution Points for certificates issued by your CA, such as the Matter Distributed Compliance Ledger.\n\u003e \n\u003e This configuration cannot be enabled with a custom CNAME set."}},"type":"object","required":["omitExtension"]},"aws-native:acmpca:CertificateAuthorityCsrExtensions":{"description":"Structure that contains CSR pass though extensions information.","properties":{"keyUsage":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityKeyUsage","description":"Indicates the purpose of the certificate and of the key contained in the certificate."},"subjectInformationAccess":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityAccessDescription"},"description":"For CA certificates, provides a path to additional information pertaining to the CA, such as revocation and policy. For more information, see [Subject Information Access](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.2.2) in RFC 5280."}},"type":"object"},"aws-native:acmpca:CertificateAuthorityCustomAttribute":{"description":"Structure that contains X.500 attribute type and value.","properties":{"objectIdentifier":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["objectIdentifier","value"]},"aws-native:acmpca:CertificateAuthorityEdiPartyName":{"description":"Structure that contains X.509 EdiPartyName information.","properties":{"nameAssigner":{"type":"string"},"partyName":{"type":"string"}},"type":"object","required":["partyName"]},"aws-native:acmpca:CertificateAuthorityGeneralName":{"description":"Structure that contains X.509 GeneralName information. Assign one and ONLY one field.","properties":{"directoryName":{"$ref":"#/types/aws-native:acmpca:CertificateAuthoritySubject"},"dnsName":{"type":"string"},"ediPartyName":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityEdiPartyName"},"ipAddress":{"type":"string"},"otherName":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityOtherName"},"registeredId":{"type":"string"},"rfc822Name":{"type":"string"},"uniformResourceIdentifier":{"type":"string"}},"type":"object"},"aws-native:acmpca:CertificateAuthorityKeyUsage":{"description":"Structure that contains X.509 KeyUsage information.","properties":{"crlSign":{"type":"boolean","description":"Key can be used to sign CRLs."},"dataEncipherment":{"type":"boolean","description":"Key can be used to decipher data."},"decipherOnly":{"type":"boolean","description":"Key can be used only to decipher data."},"digitalSignature":{"type":"boolean","description":"Key can be used for digital signing."},"encipherOnly":{"type":"boolean","description":"Key can be used only to encipher data."},"keyAgreement":{"type":"boolean","description":"Key can be used in a key-agreement protocol."},"keyCertSign":{"type":"boolean","description":"Key can be used to sign certificates."},"keyEncipherment":{"type":"boolean","description":"Key can be used to encipher data."},"nonRepudiation":{"type":"boolean","description":"Key can be used for non-repudiation."}},"type":"object"},"aws-native:acmpca:CertificateAuthorityOcspConfiguration":{"description":"Helps to configure online certificate status protocol (OCSP) responder for your certificate authority","properties":{"enabled":{"type":"boolean","description":"Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status."},"ocspCustomCname":{"type":"string","description":"By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.\n\n\u003e The content of a Canonical Name (CNAME) record must conform to [RFC2396](https://docs.aws.amazon.com/https://www.ietf.org/rfc/rfc2396.txt) restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as \"http://\" or \"https://\"."}},"type":"object","required":["enabled"]},"aws-native:acmpca:CertificateAuthorityOtherName":{"description":"Structure that contains X.509 OtherName information.","properties":{"typeId":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["typeId","value"]},"aws-native:acmpca:CertificateAuthorityRevocationConfiguration":{"description":"Certificate Authority revocation information.","properties":{"crlConfiguration":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityCrlConfiguration","description":"Configuration of the certificate revocation list (CRL), if any, maintained by your private CA."},"ocspConfiguration":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityOcspConfiguration","description":"Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA."}},"type":"object"},"aws-native:acmpca:CertificateAuthoritySubject":{"description":"Structure that contains X.500 distinguished name information for your CA.","properties":{"commonName":{"type":"string"},"country":{"type":"string"},"customAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityCustomAttribute"}},"distinguishedNameQualifier":{"type":"string"},"generationQualifier":{"type":"string"},"givenName":{"type":"string"},"initials":{"type":"string"},"locality":{"type":"string"},"organization":{"type":"string"},"organizationalUnit":{"type":"string"},"pseudonym":{"type":"string"},"serialNumber":{"type":"string"},"state":{"type":"string"},"surname":{"type":"string"},"title":{"type":"string"}},"type":"object"},"aws-native:acmpca:CertificateAuthorityTag":{"properties":{"key":{"type":"string","description":"Key (name) of the tag."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key"]},"aws-native:acmpca:CertificateCustomAttribute":{"description":"Defines the X.500 relative distinguished name (RDN).","properties":{"objectIdentifier":{"type":"string","description":"Specifies the object identifier (OID) of the attribute type of the relative distinguished name (RDN)."},"value":{"type":"string","description":"Specifies the attribute value of relative distinguished name (RDN)."}},"type":"object","required":["objectIdentifier","value"]},"aws-native:acmpca:CertificateCustomExtension":{"description":"Specifies the X.509 extension information for a certificate.\n Extensions present in ``CustomExtensions`` follow the ``ApiPassthrough``[template rules](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html#template-order-of-operations).","properties":{"critical":{"type":"boolean","description":"Specifies the critical flag of the X.509 extension."},"objectIdentifier":{"type":"string","description":"Specifies the object identifier (OID) of the X.509 extension. For more information, see the [Global OID reference database.](https://docs.aws.amazon.com/https://oidref.com/2.5.29)"},"value":{"type":"string","description":"Specifies the base64-encoded value of the X.509 extension."}},"type":"object","required":["objectIdentifier","value"]},"aws-native:acmpca:CertificateEdiPartyName":{"description":"Describes an Electronic Data Interchange (EDI) entity as described in as defined in [Subject Alternative Name](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280) in RFC 5280.","properties":{"nameAssigner":{"type":"string","description":"Specifies the name assigner."},"partyName":{"type":"string","description":"Specifies the party name."}},"type":"object","required":["nameAssigner","partyName"]},"aws-native:acmpca:CertificateExtendedKeyUsage":{"description":"Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the ``KeyUsage`` extension.","properties":{"extendedKeyUsageObjectIdentifier":{"type":"string","description":"Specifies a custom ``ExtendedKeyUsage`` with an object identifier (OID)."},"extendedKeyUsageType":{"type":"string","description":"Specifies a standard ``ExtendedKeyUsage`` as defined as in [RFC 5280](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12)."}},"type":"object"},"aws-native:acmpca:CertificateExtensions":{"description":"Contains X.509 extension information for a certificate.","properties":{"certificatePolicies":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificatePolicyInformation"},"description":"Contains a sequence of one or more policy information terms, each of which consists of an object identifier (OID) and optional qualifiers. For more information, see NIST's definition of [Object Identifier (OID)](https://docs.aws.amazon.com/https://csrc.nist.gov/glossary/term/Object_Identifier).\n In an end-entity certificate, these terms indicate the policy under which the certificate was issued and the purposes for which it may be used. In a CA certificate, these terms limit the set of policies for certification paths that include this certificate."},"customExtensions":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificateCustomExtension"},"description":"Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the [Global OID reference database.](https://docs.aws.amazon.com/https://oidref.com/2.5.29)"},"extendedKeyUsage":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificateExtendedKeyUsage"},"description":"Specifies additional purposes for which the certified public key may be used other than basic purposes indicated in the ``KeyUsage`` extension."},"keyUsage":{"$ref":"#/types/aws-native:acmpca:CertificateKeyUsage","description":"Defines one or more purposes for which the key contained in the certificate can be used. Default value for each option is false."},"subjectAlternativeNames":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificateGeneralName"},"description":"The subject alternative name extension allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate."}},"type":"object"},"aws-native:acmpca:CertificateGeneralName":{"description":"Describes an ASN.1 X.400 ``GeneralName`` as defined in [RFC 5280](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280). Only one of the following naming options should be provided. Providing more than one option results in an ``InvalidArgsException`` error.","properties":{"directoryName":{"$ref":"#/types/aws-native:acmpca:CertificateSubject","description":"Contains information about the certificate subject. The certificate can be one issued by your private certificate authority (CA) or it can be your private CA certificate. The Subject field in the certificate identifies the entity that owns or controls the public key in the certificate. The entity can be a user, computer, device, or service. The Subject must contain an X.500 distinguished name (DN). A DN is a sequence of relative distinguished names (RDNs). The RDNs are separated by commas in the certificate. The DN must be unique for each entity, but your private CA can issue more than one certificate with the same DN to the same entity."},"dnsName":{"type":"string","description":"Represents ``GeneralName`` as a DNS name."},"ediPartyName":{"$ref":"#/types/aws-native:acmpca:CertificateEdiPartyName","description":"Represents ``GeneralName`` as an ``EdiPartyName`` object."},"ipAddress":{"type":"string","description":"Represents ``GeneralName`` as an IPv4 or IPv6 address."},"otherName":{"$ref":"#/types/aws-native:acmpca:CertificateOtherName","description":"Represents ``GeneralName`` using an ``OtherName`` object."},"registeredId":{"type":"string","description":"Represents ``GeneralName`` as an object identifier (OID)."},"rfc822Name":{"type":"string","description":"Represents ``GeneralName`` as an [RFC 822](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc822) email address."},"uniformResourceIdentifier":{"type":"string","description":"Represents ``GeneralName`` as a URI."}},"type":"object"},"aws-native:acmpca:CertificateKeyUsage":{"description":"Defines one or more purposes for which the key contained in the certificate can be used. Default value for each option is false.","properties":{"crlSign":{"type":"boolean","description":"Key can be used to sign CRLs."},"dataEncipherment":{"type":"boolean","description":"Key can be used to decipher data."},"decipherOnly":{"type":"boolean","description":"Key can be used only to decipher data."},"digitalSignature":{"type":"boolean","description":"Key can be used for digital signing."},"encipherOnly":{"type":"boolean","description":"Key can be used only to encipher data."},"keyAgreement":{"type":"boolean","description":"Key can be used in a key-agreement protocol."},"keyCertSign":{"type":"boolean","description":"Key can be used to sign certificates."},"keyEncipherment":{"type":"boolean","description":"Key can be used to encipher data."},"nonRepudiation":{"type":"boolean","description":"Key can be used for non-repudiation."}},"type":"object"},"aws-native:acmpca:CertificateOtherName":{"description":"Defines a custom ASN.1 X.400 ``GeneralName`` using an object identifier (OID) and value. The OID must satisfy the regular expression shown below. For more information, see NIST's definition of [Object Identifier (OID)](https://docs.aws.amazon.com/https://csrc.nist.gov/glossary/term/Object_Identifier).","properties":{"typeId":{"type":"string","description":"Specifies an OID."},"value":{"type":"string","description":"Specifies an OID value."}},"type":"object","required":["typeId","value"]},"aws-native:acmpca:CertificatePolicyInformation":{"description":"Defines the X.509 ``CertificatePolicies`` extension.","properties":{"certPolicyId":{"type":"string","description":"Specifies the object identifier (OID) of the certificate policy under which the certificate was issued. For more information, see NIST's definition of [Object Identifier (OID)](https://docs.aws.amazon.com/https://csrc.nist.gov/glossary/term/Object_Identifier)."},"policyQualifiers":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificatePolicyQualifierInfo"},"description":"Modifies the given ``CertPolicyId`` with a qualifier. AWS Private CA supports the certification practice statement (CPS) qualifier."}},"type":"object","required":["certPolicyId"]},"aws-native:acmpca:CertificatePolicyQualifierInfo":{"description":"Modifies the ``CertPolicyId`` of a ``PolicyInformation`` object with a qualifier. AWS Private CA supports the certification practice statement (CPS) qualifier.","properties":{"policyQualifierId":{"type":"string","description":"Identifies the qualifier modifying a ``CertPolicyId``."},"qualifier":{"$ref":"#/types/aws-native:acmpca:CertificateQualifier","description":"Defines the qualifier type. AWS Private CA supports the use of a URI for a CPS qualifier in this field."}},"type":"object","required":["policyQualifierId","qualifier"]},"aws-native:acmpca:CertificateQualifier":{"description":"Defines a ``PolicyInformation`` qualifier. AWS Private CA supports the [certification practice statement (CPS) qualifier](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.4) defined in RFC 5280.","properties":{"cpsUri":{"type":"string","description":"Contains a pointer to a certification practice statement (CPS) published by the CA."}},"type":"object","required":["cpsUri"]},"aws-native:acmpca:CertificateSubject":{"description":"Contains information about the certificate subject. The ``Subject`` field in the certificate identifies the entity that owns or controls the public key in the certificate. The entity can be a user, computer, device, or service. The ``Subject``must contain an X.500 distinguished name (DN). A DN is a sequence of relative distinguished names (RDNs). The RDNs are separated by commas in the certificate.","properties":{"commonName":{"type":"string","description":"For CA and end-entity certificates in a private PKI, the common name (CN) can be any string within the length limit.\n Note: In publicly trusted certificates, the common name must be a fully qualified domain name (FQDN) associated with the certificate subject."},"country":{"type":"string","description":"Two-digit code that specifies the country in which the certificate subject located."},"customAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:acmpca:CertificateCustomAttribute"},"description":"Contains a sequence of one or more X.500 relative distinguished names (RDNs), each of which consists of an object identifier (OID) and a value. For more information, see NIST’s definition of [Object Identifier (OID)](https://docs.aws.amazon.com/https://csrc.nist.gov/glossary/term/Object_Identifier).\n  Custom attributes cannot be used in combination with standard attributes."},"distinguishedNameQualifier":{"type":"string","description":"Disambiguating information for the certificate subject."},"generationQualifier":{"type":"string","description":"Typically a qualifier appended to the name of an individual. Examples include Jr. for junior, Sr. for senior, and III for third."},"givenName":{"type":"string","description":"First name."},"initials":{"type":"string","description":"Concatenation that typically contains the first letter of the *GivenName*, the first letter of the middle name if one exists, and the first letter of the *Surname*."},"locality":{"type":"string","description":"The locality (such as a city or town) in which the certificate subject is located."},"organization":{"type":"string","description":"Legal name of the organization with which the certificate subject is affiliated."},"organizationalUnit":{"type":"string","description":"A subdivision or unit of the organization (such as sales or finance) with which the certificate subject is affiliated."},"pseudonym":{"type":"string","description":"Typically a shortened version of a longer *GivenName*. For example, Jonathan is often shortened to John. Elizabeth is often shortened to Beth, Liz, or Eliza."},"serialNumber":{"type":"string","description":"The certificate serial number."},"state":{"type":"string","description":"State in which the subject of the certificate is located."},"surname":{"type":"string","description":"Family name. In the US and the UK, for example, the surname of an individual is ordered last. In Asian cultures the surname is typically ordered first."},"title":{"type":"string","description":"A title such as Mr. or Ms., which is pre-pended to the name to refer formally to the certificate subject."}},"type":"object"},"aws-native:acmpca:CertificateValidity":{"description":"Length of time for which the certificate issued by your private certificate authority (CA), or by the private CA itself, is valid in days, months, or years. You can issue a certificate by calling the ``IssueCertificate`` operation.","properties":{"type":{"type":"string","description":"Specifies whether the ``Value`` parameter represents days, months, or years."},"value":{"type":"number","description":"A long integer interpreted according to the value of ``Type``, below."}},"type":"object","required":["type","value"]},"aws-native:aiops:InvestigationGroupChatbotNotificationChannel":{"properties":{"chatConfigurationArns":{"type":"array","items":{"type":"string"},"description":"Returns the Amazon Resource Name (ARN) of any third-party chat integrations configured for the account."},"snsTopicArn":{"type":"string","description":"Returns the ARN of an Amazon  topic used for third-party chat integrations."}},"type":"object"},"aws-native:aiops:InvestigationGroupCrossAccountConfiguration":{"properties":{"sourceRoleArn":{"type":"string","description":"The ARN of an existing role which will be used to do investigations on your behalf."}},"type":"object"},"aws-native:aiops:InvestigationGroupEncryptionConfigMap":{"properties":{"encryptionConfigurationType":{"type":"string","description":"Displays whether investigation data is encrypted by a customer managed key or an AWS owned key."},"kmsKeyId":{"type":"string","description":"If the investigation group uses a customer managed key for encryption, this field displays the ID of that key."}},"type":"object"},"aws-native:aiops:InvestigationGroupTag":{"properties":{"key":{"type":"string","description":"Assigns one or more tags (key-value pairs) to the specified resource.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.\n\nTags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters.\n\nYou can associate as many as 50 tags with a resource."},"value":{"type":"string","description":"A list of key-value pairs to associate with the investigation group. You can associate as many as 50 tags with an investigation group. To be able to associate tags when you create the investigation group, you must have the `cloudwatch:TagResource` permission.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values."}},"type":"object","required":["key","value"]},"aws-native:amazonmq:BrokerConfigurationId":{"properties":{"id":{"type":"string","description":"Required. The unique ID that Amazon MQ generates for the configuration."},"revision":{"type":"integer","description":"The revision number of the configuration."}},"type":"object","required":["id","revision"]},"aws-native:amazonmq:BrokerDataReplicationMode":{"description":"Defines whether this broker is a part of a data replication pair.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Crdr","value":"CRDR"}]},"aws-native:amazonmq:BrokerDataReplicationMode0":{"description":"Defines whether this broker is a part of a data replication pair.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Crdr","value":"CRDR"}]},"aws-native:amazonmq:BrokerDeploymentMode":{"description":"Required. The broker's deployment mode.","type":"string","enum":[{"name":"SingleInstance","value":"SINGLE_INSTANCE"},{"name":"ActiveStandbyMultiAz","value":"ACTIVE_STANDBY_MULTI_AZ"},{"name":"ClusterMultiAz","value":"CLUSTER_MULTI_AZ"}]},"aws-native:amazonmq:BrokerDeploymentMode0":{"description":"Required. The broker's deployment mode.","type":"string","enum":[{"name":"SingleInstance","value":"SINGLE_INSTANCE"},{"name":"ActiveStandbyMultiAz","value":"ACTIVE_STANDBY_MULTI_AZ"},{"name":"ClusterMultiAz","value":"CLUSTER_MULTI_AZ"}]},"aws-native:amazonmq:BrokerEncryptionOptions":{"properties":{"kmsKeyId":{"type":"string","description":"The customer master key (CMK) to use for the A KMS (KMS). \nThis key is used to encrypt your data at rest. If not provided, Amazon MQ will use a default CMK to encrypt your data.\nThe Key ARN is recommended so that drift can be detected,\nbut a key ID or key alias will also be accepted for API compatibility reasons.\n"},"useAwsOwnedKey":{"type":"boolean","description":"Enables the use of an AWS owned CMK using AWS  (KMS). Set to `true` by default, if no value is provided, for example, for RabbitMQ brokers."}},"type":"object","required":["useAwsOwnedKey"]},"aws-native:amazonmq:BrokerEngineType":{"description":"Required. The type of broker engine. Currently, Amazon MQ supports `ACTIVEMQ` and `RABBITMQ` .","type":"string","enum":[{"name":"Activemq","value":"ACTIVEMQ"},{"name":"Rabbitmq","value":"RABBITMQ"}]},"aws-native:amazonmq:BrokerEngineType0":{"description":"Required. The type of broker engine. Currently, Amazon MQ supports `ACTIVEMQ` and `RABBITMQ` .","type":"string","enum":[{"name":"Activemq","value":"ACTIVEMQ"},{"name":"Rabbitmq","value":"RABBITMQ"}]},"aws-native:amazonmq:BrokerLdapServerMetadata":{"properties":{"hosts":{"type":"array","items":{"type":"string"}},"roleBase":{"type":"string"},"roleName":{"type":"string"},"roleSearchMatching":{"type":"string"},"roleSearchSubtree":{"type":"boolean"},"serviceAccountPassword":{"type":"string"},"serviceAccountUsername":{"type":"string"},"userBase":{"type":"string"},"userRoleName":{"type":"string"},"userSearchMatching":{"type":"string"},"userSearchSubtree":{"type":"boolean"}},"type":"object","required":["hosts","roleBase","roleSearchMatching","serviceAccountUsername","userBase","userSearchMatching"]},"aws-native:amazonmq:BrokerLogList":{"properties":{"audit":{"type":"boolean","description":"Enables audit logging. Every user management action made using JMX or the ActiveMQ Web Console is logged. Does not apply to RabbitMQ brokers."},"general":{"type":"boolean","description":"Enables general logging."}},"type":"object"},"aws-native:amazonmq:BrokerMaintenanceWindow":{"properties":{"dayOfWeek":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerMaintenanceWindowDayOfWeek"},{"type":"string"}],"description":"_Allowed Values_: \u003ccode\u003eMONDAY\u003c/code\u003e | \u003ccode\u003eTUESDAY\u003c/code\u003e | \u003ccode\u003eWEDNESDAY\u003c/code\u003e | \u003ccode\u003eTHURSDAY\u003c/code\u003e | \u003ccode\u003eFRIDAY\u003c/code\u003e | \u003ccode\u003eSATURDAY\u003c/code\u003e | \u003ccode\u003eSUNDAY\u003c/code\u003e\n"},"timeOfDay":{"type":"string","description":"The time, in 24-hour format, and use only numbers separated by a colon, HH:MM or HH:MM:SS. Example: 13:05.\nWhen writing YAML this may need to be quoted to prevent a timestamp being read and converted to a number of minutes or seconds.\n"},"timeZone":{"type":"string","description":"The time zone, UTC by default, in either the Country/City format, or the UTC offset format."}},"type":"object","required":["dayOfWeek","timeOfDay","timeZone"]},"aws-native:amazonmq:BrokerMaintenanceWindowDayOfWeek":{"description":"_Allowed Values_: \u003ccode\u003eMONDAY\u003c/code\u003e | \u003ccode\u003eTUESDAY\u003c/code\u003e | \u003ccode\u003eWEDNESDAY\u003c/code\u003e | \u003ccode\u003eTHURSDAY\u003c/code\u003e | \u003ccode\u003eFRIDAY\u003c/code\u003e | \u003ccode\u003eSATURDAY\u003c/code\u003e | \u003ccode\u003eSUNDAY\u003c/code\u003e\n","type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:amazonmq:BrokerMaintenanceWindowDayOfWeek0":{"description":"_Allowed Values_: \u003ccode\u003eMONDAY\u003c/code\u003e | \u003ccode\u003eTUESDAY\u003c/code\u003e | \u003ccode\u003eWEDNESDAY\u003c/code\u003e | \u003ccode\u003eTHURSDAY\u003c/code\u003e | \u003ccode\u003eFRIDAY\u003c/code\u003e | \u003ccode\u003eSATURDAY\u003c/code\u003e | \u003ccode\u003eSUNDAY\u003c/code\u003e\n","type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:amazonmq:BrokerStorageType":{"description":"The broker's storage type.","type":"string","enum":[{"name":"Ebs","value":"EBS"},{"name":"Efs","value":"EFS"}]},"aws-native:amazonmq:BrokerStorageType0":{"description":"The broker's storage type.","type":"string","enum":[{"name":"Ebs","value":"EBS"},{"name":"Efs","value":"EFS"}]},"aws-native:amazonmq:BrokerTagsEntry":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:amazonmq:BrokerUser":{"properties":{"consoleAccess":{"type":"boolean","description":"Enables access to the ActiveMQ Web Console for the ActiveMQ user. Does not apply to RabbitMQ brokers."},"groups":{"type":"array","items":{"type":"string"},"description":"The list of groups (20 maximum) to which the ActiveMQ user belongs. This value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). This value must be 2-100 characters long. Does not apply to RabbitMQ brokers."},"password":{"type":"string","description":"Required. The password of the user. This value must be at least 12 characters long, must contain at least 4 unique characters, and must not contain commas, colons, or equal signs (,:=)."},"replicationUser":{"type":"boolean","description":"Defines if this user is intended for CRDR replication purposes."},"username":{"type":"string","description":"The username of the broker user. The following restrictions apply to broker usernames:\n\n- For Amazon MQ for ActiveMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). This value must be 2-100 characters long.\n- For Amazon MQ for RabbitMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores (- . _). This value must not contain a tilde (~) character. Amazon MQ prohibts using `guest` as a valid usename. This value must be 2-100 characters long.\n\n\u003e Do not add personally identifiable information (PII) or other confidential or sensitive information in broker usernames. Broker usernames are accessible to other AWS services, including CloudWatch Logs . Broker usernames are not intended to be used for private or sensitive data."}},"type":"object","required":["password","username"]},"aws-native:amazonmq:ConfigurationTagsEntry":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:amplify:AppAutoBranchCreationConfig":{"properties":{"autoBranchCreationPatterns":{"type":"array","items":{"type":"string"},"description":"Automated branch creation glob patterns for the Amplify app."},"basicAuthConfig":{"$ref":"#/types/aws-native:amplify:AppBasicAuthConfig","description":"Sets password protection for your auto created branch."},"buildSpec":{"type":"string","description":"The build specification (build spec) for the autocreated branch."},"enableAutoBranchCreation":{"type":"boolean","description":"Enables automated branch creation for the Amplify app."},"enableAutoBuild":{"type":"boolean","description":"Enables auto building for the auto created branch."},"enablePerformanceMode":{"type":"boolean","description":"Enables performance mode for the branch.\n\nPerformance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out."},"enablePullRequestPreview":{"type":"boolean","description":"Sets whether pull request previews are enabled for each branch that Amplify Hosting automatically creates for your app. Amplify creates previews by deploying your app to a unique URL whenever a pull request is opened for the branch. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch.\n\nTo provide backend support for your preview, Amplify Hosting automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the `PullRequestEnvironmentName` property.\n\nFor more information, see [Web Previews](https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html) in the *AWS Amplify Hosting User Guide* ."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:AppEnvironmentVariable"},"description":"The environment variables for the autocreated branch."},"framework":{"type":"string","description":"The framework for the autocreated branch."},"pullRequestEnvironmentName":{"type":"string","description":"If pull request previews are enabled, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named `prod` , `test` , or `dev` that you initialized with the Amplify CLI.\n\nTo enable pull request previews, set the `EnablePullRequestPreview` property to `true` .\n\nIf you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify deletes this environment when the pull request is closed.\n\nFor more information about creating backend environments, see [Feature Branch Deployments and Team Workflows](https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html) in the *AWS Amplify Hosting User Guide* ."},"stage":{"$ref":"#/types/aws-native:amplify:AppAutoBranchCreationConfigStage","description":"Stage for the auto created branch."}},"type":"object"},"aws-native:amplify:AppAutoBranchCreationConfigStage":{"description":"Stage for the auto created branch.","type":"string","enum":[{"name":"Experimental","value":"EXPERIMENTAL"},{"name":"Beta","value":"BETA"},{"name":"PullRequest","value":"PULL_REQUEST"},{"name":"Production","value":"PRODUCTION"},{"name":"Development","value":"DEVELOPMENT"}]},"aws-native:amplify:AppBasicAuthConfig":{"properties":{"enableBasicAuth":{"type":"boolean","description":"Enables basic authorization for the Amplify app's branches."},"password":{"type":"string","description":"The password for basic authorization."},"username":{"type":"string","description":"The user name for basic authorization."}},"type":"object"},"aws-native:amplify:AppCacheConfig":{"properties":{"type":{"$ref":"#/types/aws-native:amplify:AppCacheConfigType","description":"The type of cache configuration to use for an Amplify app.\n\nThe `AMPLIFY_MANAGED` cache configuration automatically applies an optimized cache configuration for your app based on its platform, routing rules, and rewrite rules.\n\nThe `AMPLIFY_MANAGED_NO_COOKIES` cache configuration type is the same as `AMPLIFY_MANAGED` , except that it excludes all cookies from the cache key. This is the default setting."}},"type":"object"},"aws-native:amplify:AppCacheConfigType":{"description":"The type of cache configuration to use for an Amplify app.\n\nThe `AMPLIFY_MANAGED` cache configuration automatically applies an optimized cache configuration for your app based on its platform, routing rules, and rewrite rules.\n\nThe `AMPLIFY_MANAGED_NO_COOKIES` cache configuration type is the same as `AMPLIFY_MANAGED` , except that it excludes all cookies from the cache key. This is the default setting.","type":"string","enum":[{"name":"AmplifyManaged","value":"AMPLIFY_MANAGED"},{"name":"AmplifyManagedNoCookies","value":"AMPLIFY_MANAGED_NO_COOKIES"}]},"aws-native:amplify:AppCustomRule":{"properties":{"condition":{"type":"string","description":"The condition for a URL rewrite or redirect rule, such as a country code."},"source":{"type":"string","description":"The source pattern for a URL rewrite or redirect rule."},"status":{"type":"string","description":"The status code for a URL rewrite or redirect rule.\n\n- **200** - Represents a 200 rewrite rule.\n- **301** - Represents a 301 (moved pemanently) redirect rule. This and all future requests should be directed to the target URL.\n- **302** - Represents a 302 temporary redirect rule.\n- **404** - Represents a 404 redirect rule.\n- **404-200** - Represents a 404 rewrite rule."},"target":{"type":"string","description":"The target pattern for a URL rewrite or redirect rule."}},"type":"object","required":["source","target"]},"aws-native:amplify:AppEnvironmentVariable":{"properties":{"name":{"type":"string","description":"The environment variable name."},"value":{"type":"string","description":"The environment variable value."}},"type":"object","required":["name","value"]},"aws-native:amplify:AppJobConfig":{"properties":{"buildComputeType":{"$ref":"#/types/aws-native:amplify:AppJobConfigBuildComputeType","description":"Specifies the size of the build instance. Amplify supports three instance sizes: `STANDARD_8GB` , `LARGE_16GB` , and `XLARGE_72GB` . If you don't specify a value, Amplify uses the `STANDARD_8GB` default.\n\nThe following list describes the CPU, memory, and storage capacity for each build instance type:\n\n- **STANDARD_8GB** - - vCPUs: 4\n- Memory: 8 GiB\n- Disk space: 128 GB\n- **LARGE_16GB** - - vCPUs: 8\n- Memory: 16 GiB\n- Disk space: 128 GB\n- **XLARGE_72GB** - - vCPUs: 36\n- Memory: 72 GiB\n- Disk space: 256 GB"}},"type":"object","required":["buildComputeType"]},"aws-native:amplify:AppJobConfigBuildComputeType":{"description":"Specifies the size of the build instance. Amplify supports three instance sizes: `STANDARD_8GB` , `LARGE_16GB` , and `XLARGE_72GB` . If you don't specify a value, Amplify uses the `STANDARD_8GB` default.\n\nThe following list describes the CPU, memory, and storage capacity for each build instance type:\n\n- **STANDARD_8GB** - - vCPUs: 4\n- Memory: 8 GiB\n- Disk space: 128 GB\n- **LARGE_16GB** - - vCPUs: 8\n- Memory: 16 GiB\n- Disk space: 128 GB\n- **XLARGE_72GB** - - vCPUs: 36\n- Memory: 72 GiB\n- Disk space: 256 GB","type":"string","enum":[{"name":"Standard8gb","value":"STANDARD_8GB"},{"name":"Large16gb","value":"LARGE_16GB"},{"name":"Xlarge72gb","value":"XLARGE_72GB"}]},"aws-native:amplify:AppPlatform":{"description":"The platform for the Amplify app. For a static app, set the platform type to `WEB` . For a dynamic server-side rendered (SSR) app, set the platform type to `WEB_COMPUTE` . For an app requiring Amplify Hosting's original SSR support only, set the platform type to `WEB_DYNAMIC` .\n\nIf you are deploying an SSG only app with Next.js version 14 or later, you must set the platform type to `WEB_COMPUTE` and set the artifacts `baseDirectory` to `.next` in the application's build settings. For an example of the build specification settings, see [Amplify build settings for a Next.js 14 SSG application](https://docs.aws.amazon.com/amplify/latest/userguide/deploy-nextjs-app.html#build-setting-detection-ssg-14) in the *Amplify Hosting User Guide* .","type":"string","enum":[{"name":"Web","value":"WEB"},{"name":"WebDynamic","value":"WEB_DYNAMIC"},{"name":"WebCompute","value":"WEB_COMPUTE"}]},"aws-native:amplify:AppTag":{"properties":{"key":{"type":"string","description":"Specifies the key for the tag."},"value":{"type":"string","description":"Specifies the value for the tag."}},"type":"object","required":["key","value"]},"aws-native:amplify:BranchBackend":{"properties":{"stackArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the CloudFormation stack."}},"type":"object"},"aws-native:amplify:BranchBasicAuthConfig":{"properties":{"enableBasicAuth":{"type":"boolean","description":"Enables basic authorization for the branch."},"password":{"type":"string","description":"The password for basic authorization."},"username":{"type":"string"}},"type":"object","required":["password","username"]},"aws-native:amplify:BranchEnvironmentVariable":{"properties":{"name":{"type":"string","description":"The environment variable name."},"value":{"type":"string","description":"The environment variable value."}},"type":"object","required":["name","value"]},"aws-native:amplify:BranchStage":{"description":"Describes the current stage for the branch.","type":"string","enum":[{"name":"Experimental","value":"EXPERIMENTAL"},{"name":"Beta","value":"BETA"},{"name":"PullRequest","value":"PULL_REQUEST"},{"name":"Production","value":"PRODUCTION"},{"name":"Development","value":"DEVELOPMENT"}]},"aws-native:amplify:BranchTag":{"properties":{"key":{"type":"string","description":"Specifies the key for the tag."},"value":{"type":"string","description":"Specifies the value for the tag."}},"type":"object","required":["key","value"]},"aws-native:amplify:DomainCertificate":{"properties":{"certificateArn":{"type":"string","description":"The Amazon resource name (ARN) for a custom certificate that you have already added to Certificate Manager in your AWS account .\n\nThis field is required only when the certificate type is `CUSTOM` ."},"certificateType":{"$ref":"#/types/aws-native:amplify:DomainCertificateCertificateType","description":"The type of SSL/TLS certificate that you want to use.\n\nSpecify `AMPLIFY_MANAGED` to use the default certificate that Amplify provisions for you.\n\nSpecify `CUSTOM` to use your own certificate that you have already added to Certificate Manager in your AWS account . Make sure you request (or import) the certificate in the US East (N. Virginia) Region (us-east-1). For more information about using ACM, see [Importing certificates into Certificate Manager](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *ACM User guide* ."},"certificateVerificationDnsRecord":{"type":"string","description":"The DNS record for certificate verification."}},"type":"object"},"aws-native:amplify:DomainCertificateCertificateType":{"description":"The type of SSL/TLS certificate that you want to use.\n\nSpecify `AMPLIFY_MANAGED` to use the default certificate that Amplify provisions for you.\n\nSpecify `CUSTOM` to use your own certificate that you have already added to Certificate Manager in your AWS account . Make sure you request (or import) the certificate in the US East (N. Virginia) Region (us-east-1). For more information about using ACM, see [Importing certificates into Certificate Manager](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *ACM User guide* .","type":"string","enum":[{"name":"AmplifyManaged","value":"AMPLIFY_MANAGED"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:amplify:DomainCertificateSettings":{"properties":{"certificateType":{"$ref":"#/types/aws-native:amplify:DomainCertificateSettingsCertificateType","description":"The certificate type.\n\nSpecify `AMPLIFY_MANAGED` to use the default certificate that Amplify provisions for you.\n\nSpecify `CUSTOM` to use your own certificate that you have already added to Certificate Manager in your AWS account . Make sure you request (or import) the certificate in the US East (N. Virginia) Region (us-east-1). For more information about using ACM, see [Importing certificates into Certificate Manager](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *ACM User guide* ."},"customCertificateArn":{"type":"string","description":"The Amazon resource name (ARN) for the custom certificate that you have already added to Certificate Manager in your AWS account .\n\nThis field is required only when the certificate type is `CUSTOM` ."}},"type":"object"},"aws-native:amplify:DomainCertificateSettingsCertificateType":{"description":"The certificate type.\n\nSpecify `AMPLIFY_MANAGED` to use the default certificate that Amplify provisions for you.\n\nSpecify `CUSTOM` to use your own certificate that you have already added to Certificate Manager in your AWS account . Make sure you request (or import) the certificate in the US East (N. Virginia) Region (us-east-1). For more information about using ACM, see [Importing certificates into Certificate Manager](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *ACM User guide* .","type":"string","enum":[{"name":"AmplifyManaged","value":"AMPLIFY_MANAGED"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:amplify:DomainSubDomainSetting":{"properties":{"branchName":{"type":"string","description":"The branch name setting for the subdomain.\n\n*Length Constraints:* Minimum length of 1. Maximum length of 255.\n\n*Pattern:* (?s).+"},"prefix":{"type":"string","description":"The prefix setting for the subdomain."}},"type":"object","required":["branchName","prefix"]},"aws-native:amplifyuibuilder:ComponentActionParameters":{"properties":{"anchor":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The HTML anchor link to the location to open. Specify this value for a navigation action."},"fields":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty"},"description":"A dictionary of key-value pairs mapping Amplify Studio properties to fields in a data model. Use when the action performs an operation on an Amplify DataStore model."},"global":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"Specifies whether the user should be signed out globally. Specify this value for an auth sign out action."},"id":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The unique ID of the component that the `ActionParameters` apply to."},"model":{"type":"string","description":"The name of the data model. Use when the action performs an operation on an Amplify DataStore model."},"state":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentMutationActionSetStateParameter","description":"A key-value pair that specifies the state property name and its initial value."},"target":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The element within the same component to modify when the action occurs."},"type":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The type of navigation action. Valid values are `url` and `anchor` . This value is required for a navigation action."},"url":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The URL to the location to open. Specify this value for a navigation action."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentBindingPropertiesValue":{"properties":{"bindingProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentBindingPropertiesValueProperties","description":"Describes the properties to customize with data at runtime."},"defaultValue":{"type":"string","description":"The default value of the property."},"type":{"type":"string","description":"The property type."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentBindingPropertiesValueProperties":{"properties":{"bucket":{"type":"string","description":"An Amazon S3 bucket."},"defaultValue":{"type":"string","description":"The default value to assign to the property."},"field":{"type":"string","description":"The field to bind the data to."},"key":{"type":"string","description":"The storage key for an Amazon S3 bucket."},"model":{"type":"string","description":"An Amplify DataStore model."},"predicates":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentPredicate"},"description":"A list of predicates for binding a component's properties to data."},"slotName":{"type":"string","description":"The name of a component slot."},"userAttribute":{"type":"string","description":"An authenticated user attribute."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentChild":{"properties":{"children":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentChild"},"description":"The list of `ComponentChild` instances for this component."},"componentType":{"type":"string","description":"The type of the child component."},"events":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentEvent"},"description":"Describes the events that can be raised on the child component. Use for the workflow feature in Amplify Studio that allows you to bind events and actions to components."},"name":{"type":"string","description":"The name of the child component."},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty"},"description":"Describes the properties of the child component. You can't specify `tags` as a valid property for `properties` ."},"sourceId":{"type":"string","description":"The unique ID of the child component in its original source system, such as Figma."}},"type":"object","required":["componentType","name","properties"]},"aws-native:amplifyuibuilder:ComponentConditionProperty":{"properties":{"else":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The value to assign to the property if the condition is not met."},"field":{"type":"string","description":"The name of a field. Specify this when the property is a data model."},"operand":{"type":"string","description":"The value of the property to evaluate."},"operandType":{"type":"string","description":"The type of the property to evaluate."},"operator":{"type":"string","description":"The operator to use to perform the evaluation, such as `eq` to represent equals."},"property":{"type":"string","description":"The name of the conditional property."},"then":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The value to assign to the property if the condition is met."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentDataConfiguration":{"properties":{"identifiers":{"type":"array","items":{"type":"string"},"description":"A list of IDs to use to bind data to a component. Use this property to bind specifically chosen data, rather than data retrieved from a query."},"model":{"type":"string","description":"The name of the data model to use to bind data to a component."},"predicate":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentPredicate","description":"Represents the conditional logic to use when binding data to a component. Use this property to retrieve only a subset of the data in a collection."},"sort":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentSortProperty"},"description":"Describes how to sort the component's properties."}},"type":"object","required":["model"]},"aws-native:amplifyuibuilder:ComponentEvent":{"properties":{"action":{"type":"string","description":"The action to perform when a specific event is raised."},"bindingEvent":{"type":"string","description":"Binds an event to an action on a component. When you specify a `bindingEvent` , the event is called when the action is performed."},"parameters":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentActionParameters","description":"Describes information about the action."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentFormBindingElement":{"properties":{"element":{"type":"string","description":"The name of the component to retrieve a value from."},"property":{"type":"string","description":"The property to retrieve a value from."}},"type":"object","required":["element","property"]},"aws-native:amplifyuibuilder:ComponentMutationActionSetStateParameter":{"properties":{"componentName":{"type":"string","description":"The name of the component that is being modified."},"property":{"type":"string","description":"The name of the component property to apply the state configuration to."},"set":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty","description":"The state configuration to assign to the property."}},"type":"object","required":["componentName","property","set"]},"aws-native:amplifyuibuilder:ComponentPredicate":{"properties":{"and":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentPredicate"},"description":"A list of predicates to combine logically."},"field":{"type":"string","description":"The field to query."},"operand":{"type":"string","description":"The value to use when performing the evaluation."},"operandType":{"type":"string","description":"The type of value to use when performing the evaluation."},"operator":{"type":"string","description":"The operator to use to perform the evaluation."},"or":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentPredicate"},"description":"A list of predicates to combine logically."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentProperty":{"properties":{"bindingProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentPropertyBindingProperties","description":"The information to bind the component property to data at runtime."},"bindings":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentFormBindingElement"},"description":"The information to bind the component property to form data."},"collectionBindingProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentPropertyBindingProperties","description":"The information to bind the component property to data at runtime. Use this for collection components."},"componentName":{"type":"string","description":"The name of the component that is affected by an event."},"concat":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty"},"description":"A list of component properties to concatenate to create the value to assign to this component property."},"condition":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentConditionProperty","description":"The conditional expression to use to assign a value to the component property."},"configured":{"type":"boolean","description":"Specifies whether the user configured the property in Amplify Studio after importing it."},"defaultValue":{"type":"string","description":"The default value to assign to the component property."},"event":{"type":"string","description":"An event that occurs in your app. Use this for workflow data binding."},"importedValue":{"type":"string","description":"The default value assigned to the property when the component is imported into an app."},"model":{"type":"string","description":"The data model to use to assign a value to the component property."},"property":{"type":"string","description":"The name of the component's property that is affected by an event."},"type":{"type":"string","description":"The component type."},"userAttribute":{"type":"string","description":"An authenticated user attribute to use to assign a value to the component property."},"value":{"type":"string","description":"The value to assign to the component property."}},"type":"object"},"aws-native:amplifyuibuilder:ComponentPropertyBindingProperties":{"properties":{"field":{"type":"string","description":"The data field to bind the property to."},"property":{"type":"string","description":"The component property to bind to the data field."}},"type":"object","required":["property"]},"aws-native:amplifyuibuilder:ComponentSortDirection":{"type":"string","enum":[{"name":"Asc","value":"ASC"},{"name":"Desc","value":"DESC"}]},"aws-native:amplifyuibuilder:ComponentSortProperty":{"properties":{"direction":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentSortDirection","description":"The direction of the sort, either ascending or descending."},"field":{"type":"string","description":"The field to perform the sort on."}},"type":"object","required":["direction","field"]},"aws-native:amplifyuibuilder:ComponentVariant":{"properties":{"overrides":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The properties of the component variant that can be overriden when customizing an instance of the component. You can't specify `tags` as a valid property for `overrides` ."},"variantValues":{"type":"object","additionalProperties":{"type":"string"},"description":"The combination of variants that comprise this variant."}},"type":"object"},"aws-native:amplifyuibuilder:FormActionType":{"type":"string","enum":[{"name":"Create","value":"create"},{"name":"Update","value":"update"}]},"aws-native:amplifyuibuilder:FormButton":{"properties":{"children":{"type":"string","description":"Describes the button's properties."},"excluded":{"type":"boolean","description":"Specifies whether the button is visible on the form."},"position":{"oneOf":[{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition0Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition1Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition2Properties"}],"description":"The position of the button."}},"type":"object"},"aws-native:amplifyuibuilder:FormButtonsPosition":{"type":"string","enum":[{"name":"Top","value":"top"},{"name":"Bottom","value":"bottom"},{"name":"TopAndBottom","value":"top_and_bottom"}]},"aws-native:amplifyuibuilder:FormCta":{"properties":{"cancel":{"$ref":"#/types/aws-native:amplifyuibuilder:FormButton","description":"Displays a cancel button."},"clear":{"$ref":"#/types/aws-native:amplifyuibuilder:FormButton","description":"Displays a clear button."},"position":{"$ref":"#/types/aws-native:amplifyuibuilder:FormButtonsPosition","description":"The position of the button."},"submit":{"$ref":"#/types/aws-native:amplifyuibuilder:FormButton","description":"Displays a submit button."}},"type":"object"},"aws-native:amplifyuibuilder:FormDataSourceType":{"type":"string","enum":[{"name":"DataStore","value":"DataStore"},{"name":"Custom","value":"Custom"}]},"aws-native:amplifyuibuilder:FormDataTypeConfig":{"properties":{"dataSourceType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormDataSourceType","description":"The data source type, either an Amplify DataStore model or a custom data type."},"dataTypeName":{"type":"string","description":"The unique name of the data type you are using as the data source for the form."}},"type":"object","required":["dataSourceType","dataTypeName"]},"aws-native:amplifyuibuilder:FormFieldConfig":{"properties":{"excluded":{"type":"boolean","description":"Specifies whether to hide a field."},"inputType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldInputConfig","description":"Describes the configuration for the default input value to display for a field."},"label":{"type":"string","description":"The label for the field."},"position":{"oneOf":[{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition0Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition1Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition2Properties"}],"description":"Specifies the field position."},"validations":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldValidationConfiguration"},"description":"The validations to perform on the value in the field."}},"type":"object"},"aws-native:amplifyuibuilder:FormFieldInputConfig":{"properties":{"defaultChecked":{"type":"boolean","description":"Specifies whether a field has a default value."},"defaultCountryCode":{"type":"string","description":"The default country code for a phone number."},"defaultValue":{"type":"string","description":"The default value for the field."},"descriptiveText":{"type":"string","description":"The text to display to describe the field."},"fileUploaderConfig":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFileUploaderFieldConfig","description":"The configuration for the file uploader field."},"isArray":{"type":"boolean","description":"Specifies whether to render the field as an array. This property is ignored if the `dataSourceType` for the form is a Data Store."},"maxValue":{"type":"number","description":"The maximum value to display for the field."},"minValue":{"type":"number","description":"The minimum value to display for the field."},"name":{"type":"string","description":"The name of the field."},"placeholder":{"type":"string","description":"The text to display as a placeholder for the field."},"readOnly":{"type":"boolean","description":"Specifies a read only field."},"required":{"type":"boolean","description":"Specifies a field that requires input."},"step":{"type":"number","description":"The stepping increment for a numeric value in a field."},"type":{"type":"string","description":"The input type for the field."},"value":{"type":"string","description":"The value for the field."},"valueMappings":{"$ref":"#/types/aws-native:amplifyuibuilder:FormValueMappings","description":"The information to use to customize the input fields with data at runtime."}},"type":"object","required":["type"]},"aws-native:amplifyuibuilder:FormFieldPosition0Properties":{"properties":{"fixed":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFixedPosition"}},"type":"object","required":["fixed"]},"aws-native:amplifyuibuilder:FormFieldPosition1Properties":{"properties":{"rightOf":{"type":"string"}},"type":"object","required":["rightOf"]},"aws-native:amplifyuibuilder:FormFieldPosition2Properties":{"properties":{"below":{"type":"string"}},"type":"object","required":["below"]},"aws-native:amplifyuibuilder:FormFieldValidationConfiguration":{"properties":{"numValues":{"type":"array","items":{"type":"number"},"description":"The validation to perform on a number value."},"strValues":{"type":"array","items":{"type":"string"},"description":"The validation to perform on a string value."},"type":{"type":"string","description":"The validation to perform on an object type. ``"},"validationMessage":{"type":"string","description":"The validation message to display."}},"type":"object","required":["type"]},"aws-native:amplifyuibuilder:FormFileUploaderFieldConfig":{"properties":{"acceptedFileTypes":{"type":"array","items":{"type":"string"},"description":"The file types that are allowed to be uploaded by the file uploader. Provide this information in an array of strings specifying the valid file extensions."},"accessLevel":{"$ref":"#/types/aws-native:amplifyuibuilder:FormStorageAccessLevel","description":"The access level to assign to the uploaded files in the Amazon S3 bucket where they are stored. The valid values for this property are `private` , `protected` , or `public` . For detailed information about the permissions associated with each access level, see [File access levels](https://docs.aws.amazon.com/https://docs.amplify.aws/lib/storage/configureaccess/q/platform/js/) in the *Amplify documentation* ."},"isResumable":{"type":"boolean","description":"Allows the file upload operation to be paused and resumed. The default value is `false` .\n\nWhen `isResumable` is set to `true` , the file uploader uses a multipart upload to break the files into chunks before upload. The progress of the upload isn't continuous, because the file uploader uploads a chunk at a time."},"maxFileCount":{"type":"number","description":"Specifies the maximum number of files that can be selected to upload. The default value is an unlimited number of files."},"maxSize":{"type":"number","description":"The maximum file size in bytes that the file uploader will accept. The default value is an unlimited file size."},"showThumbnails":{"type":"boolean","description":"Specifies whether to display or hide the image preview after selecting a file for upload. The default value is `true` to display the image preview."}},"type":"object","required":["acceptedFileTypes","accessLevel"]},"aws-native:amplifyuibuilder:FormFixedPosition":{"type":"string","enum":[{"name":"First","value":"first"}]},"aws-native:amplifyuibuilder:FormInputBindingPropertiesValue":{"properties":{"bindingProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormInputBindingPropertiesValueProperties","description":"Describes the properties to customize with data at runtime."},"type":{"type":"string","description":"The property type."}},"type":"object"},"aws-native:amplifyuibuilder:FormInputBindingPropertiesValueProperties":{"properties":{"model":{"type":"string","description":"An Amplify DataStore model."}},"type":"object"},"aws-native:amplifyuibuilder:FormInputValueProperty":{"properties":{"bindingProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormInputValuePropertyBindingProperties","description":"The information to bind fields to data at runtime."},"concat":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:FormInputValueProperty"},"description":"A list of form properties to concatenate to create the value to assign to this field property."},"value":{"type":"string","description":"The value to assign to the input field."}},"type":"object"},"aws-native:amplifyuibuilder:FormInputValuePropertyBindingProperties":{"properties":{"field":{"type":"string","description":"The data field to bind the property to."},"property":{"type":"string","description":"The form property to bind to the data field."}},"type":"object","required":["property"]},"aws-native:amplifyuibuilder:FormLabelDecorator":{"type":"string","enum":[{"name":"Required","value":"required"},{"name":"Optional","value":"optional"},{"name":"None","value":"none"}]},"aws-native:amplifyuibuilder:FormSectionalElement":{"properties":{"excluded":{"type":"boolean","description":"Excludes a sectional element that was generated by default for a specified data model."},"level":{"type":"number","description":"Specifies the size of the font for a `Heading` sectional element. Valid values are `1 | 2 | 3 | 4 | 5 | 6` ."},"orientation":{"type":"string","description":"Specifies the orientation for a `Divider` sectional element. Valid values are `horizontal` or `vertical` ."},"position":{"oneOf":[{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition0Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition1Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldPosition2Properties"}],"description":"Specifies the position of the text in a field for a `Text` sectional element."},"text":{"type":"string","description":"The text for a `Text` sectional element."},"type":{"type":"string","description":"The type of sectional element. Valid values are `Heading` , `Text` , and `Divider` ."}},"type":"object","required":["type"]},"aws-native:amplifyuibuilder:FormStorageAccessLevel":{"type":"string","enum":[{"name":"Public","value":"public"},{"name":"Protected","value":"protected"},{"name":"Private","value":"private"}]},"aws-native:amplifyuibuilder:FormStyle":{"properties":{"horizontalGap":{"oneOf":[{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyleConfig0Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyleConfig1Properties"}],"description":"The spacing for the horizontal gap."},"outerPadding":{"oneOf":[{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyleConfig0Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyleConfig1Properties"}],"description":"The size of the outer padding for the form."},"verticalGap":{"oneOf":[{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyleConfig0Properties"},{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyleConfig1Properties"}],"description":"The spacing for the vertical gap."}},"type":"object"},"aws-native:amplifyuibuilder:FormStyleConfig0Properties":{"properties":{"tokenReference":{"type":"string"}},"type":"object","required":["tokenReference"]},"aws-native:amplifyuibuilder:FormStyleConfig1Properties":{"properties":{"value":{"type":"string"}},"type":"object","required":["value"]},"aws-native:amplifyuibuilder:FormValueMapping":{"properties":{"displayValue":{"$ref":"#/types/aws-native:amplifyuibuilder:FormInputValueProperty","description":"The value to display for the complex object."},"value":{"$ref":"#/types/aws-native:amplifyuibuilder:FormInputValueProperty","description":"The complex object."}},"type":"object","required":["value"]},"aws-native:amplifyuibuilder:FormValueMappings":{"properties":{"bindingProperties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormInputBindingPropertiesValue"},"description":"The information to bind fields to data at runtime."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:FormValueMapping"},"description":"The value and display value pairs."}},"type":"object","required":["values"]},"aws-native:amplifyuibuilder:ThemeValue":{"properties":{"children":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"description":"A list of key-value pairs that define the theme's properties."},"value":{"type":"string","description":"The value of a theme property."}},"type":"object"},"aws-native:amplifyuibuilder:ThemeValues":{"properties":{"key":{"type":"string","description":"The name of the property."},"value":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValue","description":"The value of the property."}},"type":"object"},"aws-native:apigateway:ApiKeyStageKey":{"description":"``StageKey`` is a property of the [AWS::ApiGateway::ApiKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-apikey.html) resource that specifies the stage to associate with the API key. This association allows only clients with the key to make requests to methods in that stage.","properties":{"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"stageName":{"type":"string","description":"The stage name associated with the stage key."}},"type":"object"},"aws-native:apigateway:ApiKeyTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:ClientCertificateTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:DeploymentAccessLogSetting":{"description":"The ``AccessLogSetting`` property type specifies settings for logging access in this stage.\n ``AccessLogSetting`` is a property of the [StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type.","properties":{"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudWatch Logs log group or Kinesis Data Firehose delivery stream to receive access logs. If you specify a Kinesis Data Firehose delivery stream, the stream name must begin with `amazon-apigateway-` ."},"format":{"type":"string","description":"A single line format of the access logs of data, as specified by selected $context variables. The format must include at least `$context.requestId` ."}},"type":"object"},"aws-native:apigateway:DeploymentCanarySetting":{"description":"The ``CanarySetting`` property type specifies settings for the canary deployment in this stage.\n ``CanarySetting`` is a property of the [StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type.","properties":{"percentTraffic":{"type":"number","description":"The percent (0-100) of traffic diverted to a canary deployment."},"stageVariableOverrides":{"type":"object","additionalProperties":{"type":"string"},"description":"Stage variables overridden for a canary release deployment, including new stage variables introduced in the canary. These stage variables are represented as a string-to-string map between stage variable names and their values."},"useStageCache":{"type":"boolean","description":"A Boolean flag to indicate whether the canary deployment uses the stage cache or not."}},"type":"object"},"aws-native:apigateway:DeploymentCanarySettings":{"description":"The ``DeploymentCanarySettings`` property type specifies settings for the canary deployment.","properties":{"percentTraffic":{"type":"number","description":"The percentage (0.0-100.0) of traffic routed to the canary deployment."},"stageVariableOverrides":{"type":"object","additionalProperties":{"type":"string"},"description":"A stage variable overrides used for the canary release deployment. They can override existing stage variables or add new stage variables for the canary release deployment. These stage variables are represented as a string-to-string map between stage variable names and their values."},"useStageCache":{"type":"boolean","description":"A Boolean flag to indicate whether the canary release deployment uses the stage cache or not."}},"type":"object"},"aws-native:apigateway:DeploymentMethodSetting":{"description":"The ``MethodSetting`` property type configures settings for all methods in a stage.\n The ``MethodSettings`` property of the [Amazon API Gateway Deployment StageDescription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html) property type contains a list of ``MethodSetting`` property types.","properties":{"cacheDataEncrypted":{"type":"boolean","description":"Specifies whether the cached responses are encrypted."},"cacheTtlInSeconds":{"type":"integer","description":"Specifies the time to live (TTL), in seconds, for cached responses. The higher the TTL, the longer the response will be cached."},"cachingEnabled":{"type":"boolean","description":"Specifies whether responses should be cached and returned for requests. A cache cluster must be enabled on the stage for responses to be cached."},"dataTraceEnabled":{"type":"boolean","description":"Specifies whether data trace logging is enabled for this method, which affects the log entries pushed to Amazon CloudWatch Logs. This can be useful to troubleshoot APIs, but can result in logging sensitive data. We recommend that you don't enable this option for production APIs."},"httpMethod":{"type":"string","description":"The HTTP method."},"loggingLevel":{"type":"string","description":"Specifies the logging level for this method, which affects the log entries pushed to Amazon CloudWatch Logs. Valid values are `OFF` , `ERROR` , and `INFO` . Choose `ERROR` to write only error-level entries to CloudWatch Logs, or choose `INFO` to include all `ERROR` events as well as extra informational events."},"metricsEnabled":{"type":"boolean","description":"Specifies whether Amazon CloudWatch metrics are enabled for this method."},"resourcePath":{"type":"string","description":"The resource path for this method. Forward slashes (``/``) are encoded as ``~1`` and the initial slash must include a forward slash. For example, the path value ``/resource/subresource`` must be encoded as ``/~1resource~1subresource``. To specify the root path, use only a slash (``/``)."},"throttlingBurstLimit":{"type":"integer","description":"Specifies the throttling burst limit."},"throttlingRateLimit":{"type":"number","description":"Specifies the throttling rate limit."}},"type":"object"},"aws-native:apigateway:DeploymentStageDescription":{"description":"``StageDescription`` is a property of the [AWS::ApiGateway::Deployment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-deployment.html) resource that configures a deployment stage.","properties":{"accessLogSetting":{"$ref":"#/types/aws-native:apigateway:DeploymentAccessLogSetting","description":"Specifies settings for logging access in this stage."},"cacheClusterEnabled":{"type":"boolean","description":"Specifies whether a cache cluster is enabled for the stage. To activate a method-level cache, set `CachingEnabled` to `true` for a method."},"cacheClusterSize":{"type":"string","description":"The size of the stage's cache cluster. For more information, see [cacheClusterSize](https://docs.aws.amazon.com/apigateway/latest/api/API_CreateStage.html#apigw-CreateStage-request-cacheClusterSize) in the *API Gateway API Reference*."},"cacheDataEncrypted":{"type":"boolean","description":"Indicates whether the cached responses are encrypted."},"cacheTtlInSeconds":{"type":"integer","description":"The time-to-live (TTL) period, in seconds, that specifies how long API Gateway caches responses."},"cachingEnabled":{"type":"boolean","description":"Indicates whether responses are cached and returned for requests. You must enable a cache cluster on the stage to cache responses. For more information, see [Enable API Gateway Caching in a Stage to Enhance API Performance](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html) in the *API Gateway Developer Guide*."},"canarySetting":{"$ref":"#/types/aws-native:apigateway:DeploymentCanarySetting","description":"Specifies settings for the canary deployment in this stage."},"clientCertificateId":{"type":"string","description":"The identifier of the client certificate that API Gateway uses to call your integration endpoints in the stage."},"dataTraceEnabled":{"type":"boolean","description":"Indicates whether data trace logging is enabled for methods in the stage. API Gateway pushes these logs to Amazon CloudWatch Logs."},"description":{"type":"string","description":"A description of the purpose of the stage."},"documentationVersion":{"type":"string","description":"The version identifier of the API documentation snapshot."},"loggingLevel":{"type":"string","description":"The logging level for this method. For valid values, see the ``loggingLevel`` property of the [MethodSetting](https://docs.aws.amazon.com/apigateway/latest/api/API_MethodSetting.html) resource in the *Amazon API Gateway API Reference*."},"methodSettings":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:DeploymentMethodSetting"},"description":"Configures settings for all of the stage's methods."},"metricsEnabled":{"type":"boolean","description":"Indicates whether Amazon CloudWatch metrics are enabled for methods in the stage."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:DeploymentTag"},"description":"An array of arbitrary tags (key-value pairs) to associate with the stage."},"throttlingBurstLimit":{"type":"integer","description":"The target request burst rate limit. This allows more requests through for a period of time than the target rate limit. For more information, see [Manage API Request Throttling](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-request-throttling.html) in the *API Gateway Developer Guide*."},"throttlingRateLimit":{"type":"number","description":"The target request steady-state rate limit. For more information, see [Manage API Request Throttling](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-request-throttling.html) in the *API Gateway Developer Guide*."},"tracingEnabled":{"type":"boolean","description":"Specifies whether active tracing with X-ray is enabled for this stage.\n For more information, see [Trace API Gateway API Execution with X-Ray](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-xray.html) in the *API Gateway Developer Guide*."},"variables":{"type":"object","additionalProperties":{"type":"string"},"description":"A map that defines the stage variables. Variable names must consist of alphanumeric characters, and the values must match the following regular expression: ``[A-Za-z0-9-._~:/?#\u0026=,]+``."}},"type":"object"},"aws-native:apigateway:DeploymentTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:DocumentationPartLocation":{"description":"The ``Location`` property specifies the location of the Amazon API Gateway API entity that the documentation applies to. ``Location`` is a property of the [AWS::ApiGateway::DocumentationPart](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-documentationpart.html) resource.\n  For more information about each property, including constraints and valid values, see [DocumentationPart](https://docs.aws.amazon.com/apigateway/latest/api/API_DocumentationPartLocation.html) in the *Amazon API Gateway REST API Reference*.","properties":{"method":{"type":"string","description":"The HTTP verb of a method. It is a valid field for the API entity types of `METHOD` , `PATH_PARAMETER` , `QUERY_PARAMETER` , `REQUEST_HEADER` , `REQUEST_BODY` , `RESPONSE` , `RESPONSE_HEADER` , and `RESPONSE_BODY` . The default value is `*` for any method. When an applicable child entity inherits the content of an entity of the same type with more general specifications of the other `location` attributes, the child entity's `method` attribute must match that of the parent entity exactly."},"name":{"type":"string","description":"The name of the targeted API entity. It is a valid and required field for the API entity types of `AUTHORIZER` , `MODEL` , `PATH_PARAMETER` , `QUERY_PARAMETER` , `REQUEST_HEADER` , `REQUEST_BODY` and `RESPONSE_HEADER` . It is an invalid field for any other entity type."},"path":{"type":"string","description":"The URL path of the target. It is a valid field for the API entity types of `RESOURCE` , `METHOD` , `PATH_PARAMETER` , `QUERY_PARAMETER` , `REQUEST_HEADER` , `REQUEST_BODY` , `RESPONSE` , `RESPONSE_HEADER` , and `RESPONSE_BODY` . The default value is `/` for the root resource. When an applicable child entity inherits the content of another entity of the same type with more general specifications of the other `location` attributes, the child entity's `path` attribute must match that of the parent entity as a prefix."},"statusCode":{"type":"string","description":"The HTTP status code of a response. It is a valid field for the API entity types of `RESPONSE` , `RESPONSE_HEADER` , and `RESPONSE_BODY` . The default value is `*` for any status code. When an applicable child entity inherits the content of an entity of the same type with more general specifications of the other `location` attributes, the child entity's `statusCode` attribute must match that of the parent entity exactly."},"type":{"$ref":"#/types/aws-native:apigateway:DocumentationPartLocationType","description":"The type of API entity to which the documentation content applies. Valid values are `API` , `AUTHORIZER` , `MODEL` , `RESOURCE` , `METHOD` , `PATH_PARAMETER` , `QUERY_PARAMETER` , `REQUEST_HEADER` , `REQUEST_BODY` , `RESPONSE` , `RESPONSE_HEADER` , and `RESPONSE_BODY` . Content inheritance does not apply to any entity of the `API` , `AUTHORIZER` , `METHOD` , `MODEL` , `REQUEST_BODY` , or `RESOURCE` type."}},"type":"object"},"aws-native:apigateway:DocumentationPartLocationType":{"description":"The type of API entity to which the documentation content applies. Valid values are `API` , `AUTHORIZER` , `MODEL` , `RESOURCE` , `METHOD` , `PATH_PARAMETER` , `QUERY_PARAMETER` , `REQUEST_HEADER` , `REQUEST_BODY` , `RESPONSE` , `RESPONSE_HEADER` , and `RESPONSE_BODY` . Content inheritance does not apply to any entity of the `API` , `AUTHORIZER` , `METHOD` , `MODEL` , `REQUEST_BODY` , or `RESOURCE` type.","type":"string","enum":[{"name":"Api","value":"API"},{"name":"Authorizer","value":"AUTHORIZER"},{"name":"Model","value":"MODEL"},{"name":"Resource","value":"RESOURCE"},{"name":"Method","value":"METHOD"},{"name":"PathParameter","value":"PATH_PARAMETER"},{"name":"QueryParameter","value":"QUERY_PARAMETER"},{"name":"RequestHeader","value":"REQUEST_HEADER"},{"name":"RequestBody","value":"REQUEST_BODY"},{"name":"Response","value":"RESPONSE"},{"name":"ResponseHeader","value":"RESPONSE_HEADER"},{"name":"ResponseBody","value":"RESPONSE_BODY"}]},"aws-native:apigateway:DomainNameAccessAssociationAccessAssociationSourceType":{"description":"The source type of the domain name access association resource.","type":"string","enum":[{"name":"Vpce","value":"VPCE"}]},"aws-native:apigateway:DomainNameAccessAssociationTag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:DomainNameEndpointConfiguration":{"description":"The ``EndpointConfiguration`` property type specifies the endpoint types and IP address types of an Amazon API Gateway domain name.\n ``EndpointConfiguration`` is a property of the [AWS::ApiGateway::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html) resource.","properties":{"ipAddressType":{"type":"string","description":"The IP address types that can invoke this DomainName. Use `ipv4` to allow only IPv4 addresses to invoke this DomainName, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke this DomainName. For the `PRIVATE` endpoint type, only `dualstack` is supported."},"types":{"type":"array","items":{"type":"string"},"description":"A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is `\"EDGE\"` . For a regional API and its custom domain name, the endpoint type is `REGIONAL` . For a private API, the endpoint type is `PRIVATE` ."}},"type":"object"},"aws-native:apigateway:DomainNameMutualTlsAuthentication":{"properties":{"truststoreUri":{"type":"string","description":"An Amazon S3 URL that specifies the truststore for mutual TLS authentication, for example `s3://bucket-name/key-name` . The truststore can contain certificates from public or private certificate authorities. To update the truststore, upload a new version to S3, and then update your custom domain name to use the new version. To update the truststore, you must have permissions to access the S3 object."},"truststoreVersion":{"type":"string","description":"The version of the S3 object that contains your truststore. To specify a version, you must have versioning enabled for the S3 bucket."}},"type":"object"},"aws-native:apigateway:DomainNameRoutingMode":{"description":"The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs.","type":"string","enum":[{"name":"BasePathMappingOnly","value":"BASE_PATH_MAPPING_ONLY"},{"name":"RoutingRuleThenBasePathMapping","value":"ROUTING_RULE_THEN_BASE_PATH_MAPPING"},{"name":"RoutingRuleOnly","value":"ROUTING_RULE_ONLY"}]},"aws-native:apigateway:DomainNameTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object"},"aws-native:apigateway:DomainNameV2EndpointConfiguration":{"properties":{"ipAddressType":{"type":"string","description":"The IP address types that can invoke an API (RestApi) or a DomainName. Use `ipv4` to allow only IPv4 addresses to invoke an API or DomainName, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke an API or a DomainName. For the `PRIVATE` endpoint type, only `dualstack` is supported."},"types":{"type":"array","items":{"type":"string"},"description":"A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is `\"EDGE\"` . For a regional API and its custom domain name, the endpoint type is `REGIONAL` . For a private API, the endpoint type is `PRIVATE` ."}},"type":"object"},"aws-native:apigateway:DomainNameV2RoutingMode":{"description":"The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY]. All other inputs are invalid.","type":"string","enum":[{"name":"BasePathMappingOnly","value":"BASE_PATH_MAPPING_ONLY"},{"name":"RoutingRuleThenBasePathMapping","value":"ROUTING_RULE_THEN_BASE_PATH_MAPPING"},{"name":"RoutingRuleOnly","value":"ROUTING_RULE_ONLY"}]},"aws-native:apigateway:DomainNameV2Tag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object"},"aws-native:apigateway:MethodIntegration":{"description":"``Integration`` is a property of the [AWS::ApiGateway::Method](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-method.html) resource that specifies information about the target backend that a method calls.","properties":{"cacheKeyParameters":{"type":"array","items":{"type":"string"},"description":"A list of request parameters whose values API Gateway caches. To be valid values for `cacheKeyParameters` , these parameters must also be specified for Method `requestParameters` ."},"cacheNamespace":{"type":"string","description":"Specifies a group of related cached parameters. By default, API Gateway uses the resource ID as the `cacheNamespace` . You can specify the same `cacheNamespace` across resources to return the same cached data for requests to different resources."},"connectionId":{"type":"string","description":"The ID of the VpcLink used for the integration when `connectionType=VPC_LINK` and undefined, otherwise."},"connectionType":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationConnectionType","description":"The type of the network connection to the integration endpoint. The valid value is `INTERNET` for connections through the public routable internet or `VPC_LINK` for private connections between API Gateway and a network load balancer in a VPC. The default value is `INTERNET` ."},"contentHandling":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationContentHandling","description":"Specifies how to handle request payload content type conversions. Supported values are `CONVERT_TO_BINARY` and `CONVERT_TO_TEXT` , with the following behaviors:\n\nIf this property is not defined, the request payload will be passed through from the method request to integration request without modification, provided that the `passthroughBehavior` is configured to support payload pass-through."},"credentials":{"type":"string","description":"Specifies the credentials required for the integration, if any. For AWS integrations, three options are available. To specify an IAM Role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To require that the caller's identity be passed through from the request, specify the string `arn:aws:iam::\\*:user/\\*` . To use resource-based permissions on supported AWS services, specify null."},"integrationHttpMethod":{"type":"string","description":"Specifies the integration's HTTP method type. For the Type property, if you specify `MOCK` , this property is optional. For Lambda integrations, you must set the integration method to `POST` . For all other types, you must specify this property."},"integrationResponses":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationResponse"},"description":"Specifies the integration's responses."},"integrationTarget":{"type":"string","description":"The ALB or NLB listener to send the request to. Only supported for private integrations that use VPC links V2."},"passthroughBehavior":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationPassthroughBehavior","description":"Specifies how the method request body of an unmapped content type will be passed through the integration request to the back end without transformation. A content type is unmapped if no mapping template is defined in the integration or the content type does not match any of the mapped content types, as specified in `requestTemplates` . The valid value is one of the following: `WHEN_NO_MATCH` : passes the method request body through the integration request to the back end without transformation when the method request content type does not match any content type associated with the mapping templates defined in the integration request. `WHEN_NO_TEMPLATES` : passes the method request body through the integration request to the back end without transformation when no mapping template is defined in the integration request. If a template is defined when this option is selected, the method request of an unmapped content-type will be rejected with an HTTP 415 Unsupported Media Type response. `NEVER` : rejects the method request with an HTTP 415 Unsupported Media Type response when either the method request content type does not match any content type associated with the mapping templates defined in the integration request or no mapping template is defined in the integration request."},"requestParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value map specifying request parameters that are passed from the method request to the back end. The key is an integration request parameter name and the associated value is a method request parameter value or static value that must be enclosed within single quotes and pre-encoded as required by the back end. The method request parameter value must match the pattern of `method.request.{location}.{name}` , where `location` is `querystring` , `path` , or `header` and `name` must be a valid and unique method request parameter name."},"requestTemplates":{"type":"object","additionalProperties":{"type":"string"},"description":"Represents a map of Velocity templates that are applied on the request payload based on the value of the Content-Type header sent by the client. The content type value is the key in this map, and the template (as a String) is the value."},"responseTransferMode":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationResponseTransferMode","description":"The response transfer mode of the integration. Use `STREAM` to have API Gateway stream response your back to you or use `BUFFERED` to have API Gateway wait to receive the complete response before beginning transmission."},"timeoutInMillis":{"type":"integer","description":"Custom timeout between 50 and 29,000 milliseconds. The default value is 29,000 milliseconds or 29 seconds. You can increase the default value to longer than 29 seconds for Regional or private APIs only."},"type":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationType","description":"Specifies an API method integration type. The valid value is one of the following:\n\nFor the HTTP and HTTP proxy integrations, each integration can specify a protocol ( `http/https` ), port and path. Standard 80 and 443 ports are supported as well as custom ports above 1024. An HTTP or HTTP proxy integration with a `connectionType` of `VPC_LINK` is referred to as a private integration and uses a VpcLink to connect API Gateway to a network load balancer of a VPC."},"uri":{"type":"string","description":"Specifies Uniform Resource Identifier (URI) of the integration endpoint.\n\nFor `HTTP` or `HTTP_PROXY` integrations, the URI must be a fully formed, encoded HTTP(S) URL according to the RFC-3986 specification for standard integrations. If `connectionType` is `VPC_LINK` specify the Network Load Balancer DNS name. For `AWS` or `AWS_PROXY` integrations, the URI is of the form `arn:aws:apigateway:{region}:{subdomain.service|service}:path|action/{service_api}` . Here, {Region} is the API Gateway region (e.g., us-east-1); {service} is the name of the integrated AWS service (e.g., s3); and {subdomain} is a designated subdomain supported by certain AWS service for fast host-name lookup. action can be used for an AWS service action-based API, using an Action={name}\u0026{p1}={v1}\u0026p2={v2}... query string. The ensuing {service_api} refers to a supported action {name} plus any required input parameters. Alternatively, path can be used for an AWS service path-based API. The ensuing service_api refers to the path to an AWS service resource, including the region of the integrated AWS service, if applicable. For example, for integration with the S3 API of GetObject, the uri can be either `arn:aws:apigateway:us-west-2:s3:action/GetObject\u0026Bucket={bucket}\u0026Key={key}` or `arn:aws:apigateway:us-west-2:s3:path/{bucket}/{key}`"}},"type":"object","required":["type"]},"aws-native:apigateway:MethodIntegrationConnectionType":{"description":"The type of the network connection to the integration endpoint. The valid value is `INTERNET` for connections through the public routable internet or `VPC_LINK` for private connections between API Gateway and a network load balancer in a VPC. The default value is `INTERNET` .","type":"string","enum":[{"name":"Internet","value":"INTERNET"},{"name":"VpcLink","value":"VPC_LINK"}]},"aws-native:apigateway:MethodIntegrationContentHandling":{"description":"Specifies how to handle request payload content type conversions. Supported values are `CONVERT_TO_BINARY` and `CONVERT_TO_TEXT` , with the following behaviors:\n\nIf this property is not defined, the request payload will be passed through from the method request to integration request without modification, provided that the `passthroughBehavior` is configured to support payload pass-through.","type":"string","enum":[{"name":"ConvertToBinary","value":"CONVERT_TO_BINARY"},{"name":"ConvertToText","value":"CONVERT_TO_TEXT"}]},"aws-native:apigateway:MethodIntegrationPassthroughBehavior":{"description":"Specifies how the method request body of an unmapped content type will be passed through the integration request to the back end without transformation. A content type is unmapped if no mapping template is defined in the integration or the content type does not match any of the mapped content types, as specified in `requestTemplates` . The valid value is one of the following: `WHEN_NO_MATCH` : passes the method request body through the integration request to the back end without transformation when the method request content type does not match any content type associated with the mapping templates defined in the integration request. `WHEN_NO_TEMPLATES` : passes the method request body through the integration request to the back end without transformation when no mapping template is defined in the integration request. If a template is defined when this option is selected, the method request of an unmapped content-type will be rejected with an HTTP 415 Unsupported Media Type response. `NEVER` : rejects the method request with an HTTP 415 Unsupported Media Type response when either the method request content type does not match any content type associated with the mapping templates defined in the integration request or no mapping template is defined in the integration request.","type":"string","enum":[{"name":"WhenNoMatch","value":"WHEN_NO_MATCH"},{"name":"WhenNoTemplates","value":"WHEN_NO_TEMPLATES"},{"name":"Never","value":"NEVER"}]},"aws-native:apigateway:MethodIntegrationResponse":{"description":"``IntegrationResponse`` is a property of the [Amazon API Gateway Method Integration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apitgateway-method-integration.html) property type that specifies the response that API Gateway sends after a method's backend finishes processing a request.","properties":{"contentHandling":{"$ref":"#/types/aws-native:apigateway:MethodIntegrationResponseContentHandling","description":"Specifies how to handle response payload content type conversions. Supported values are `CONVERT_TO_BINARY` and `CONVERT_TO_TEXT` , with the following behaviors:\n\nIf this property is not defined, the response payload will be passed through from the integration response to the method response without modification."},"responseParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value map specifying response parameters that are passed to the method response from the back end. The key is a method response header parameter name and the mapped value is an integration response header value, a static value enclosed within a pair of single quotes, or a JSON expression from the integration response body. The mapping key must match the pattern of `method.response.header.{name}` , where `name` is a valid and unique header name. The mapped non-static value must match the pattern of `integration.response.header.{name}` or `integration.response.body.{JSON-expression}` , where `name` is a valid and unique response header name and `JSON-expression` is a valid JSON expression without the `$` prefix."},"responseTemplates":{"type":"object","additionalProperties":{"type":"string"},"description":"Specifies the templates used to transform the integration response body. Response templates are represented as a key/value map, with a content-type as the key and a template as the value."},"selectionPattern":{"type":"string","description":"Specifies the regular expression (regex) pattern used to choose an integration response based on the response from the back end. For example, if the success response returns nothing and the error response returns some string, you could use the `.+` regex to match error response. However, make sure that the error response does not contain any newline ( `\\n` ) character in such cases. If the back end is an AWS Lambda function, the AWS Lambda function error header is matched. For all other HTTP and AWS back ends, the HTTP status code is matched."},"statusCode":{"type":"string","description":"Specifies the status code that is used to map the integration response to an existing MethodResponse."}},"type":"object","required":["statusCode"]},"aws-native:apigateway:MethodIntegrationResponseContentHandling":{"description":"Specifies how to handle response payload content type conversions. Supported values are `CONVERT_TO_BINARY` and `CONVERT_TO_TEXT` , with the following behaviors:\n\nIf this property is not defined, the response payload will be passed through from the integration response to the method response without modification.","type":"string","enum":[{"name":"ConvertToBinary","value":"CONVERT_TO_BINARY"},{"name":"ConvertToText","value":"CONVERT_TO_TEXT"}]},"aws-native:apigateway:MethodIntegrationResponseTransferMode":{"description":"The response transfer mode of the integration. Use `STREAM` to have API Gateway stream response your back to you or use `BUFFERED` to have API Gateway wait to receive the complete response before beginning transmission.","type":"string","enum":[{"name":"Buffered","value":"BUFFERED"},{"name":"Stream","value":"STREAM"}]},"aws-native:apigateway:MethodIntegrationType":{"description":"Specifies an API method integration type. The valid value is one of the following:\n\nFor the HTTP and HTTP proxy integrations, each integration can specify a protocol ( `http/https` ), port and path. Standard 80 and 443 ports are supported as well as custom ports above 1024. An HTTP or HTTP proxy integration with a `connectionType` of `VPC_LINK` is referred to as a private integration and uses a VpcLink to connect API Gateway to a network load balancer of a VPC.","type":"string","enum":[{"name":"Aws","value":"AWS"},{"name":"AwsProxy","value":"AWS_PROXY"},{"name":"Http","value":"HTTP"},{"name":"HttpProxy","value":"HTTP_PROXY"},{"name":"Mock","value":"MOCK"}]},"aws-native:apigateway:MethodResponse":{"properties":{"responseModels":{"type":"object","additionalProperties":{"type":"string"},"description":"Specifies the Model resources used for the response's content-type. Response models are represented as a key/value map, with a content-type as the key and a Model name as the value."},"responseParameters":{"type":"object","additionalProperties":{"oneOf":[{"type":"boolean"},{"type":"string"}]},"description":"A key-value map specifying required or optional response parameters that API Gateway can send back to the caller. A key defines a method response header and the value specifies whether the associated method response header is required or not. The expression of the key must match the pattern `method.response.header.{name}` , where `name` is a valid and unique header name. API Gateway passes certain integration response data to the method response headers specified here according to the mapping you prescribe in the API's IntegrationResponse. The integration response data that can be mapped include an integration response header expressed in `integration.response.header.{name}` , a static value enclosed within a pair of single quotes (e.g., `'application/json'` ), or a JSON expression from the back-end response payload in the form of `integration.response.body.{JSON-expression}` , where `JSON-expression` is a valid JSON expression without the `$` prefix.)"},"statusCode":{"type":"string","description":"The method response's status code."}},"type":"object","required":["statusCode"]},"aws-native:apigateway:RestApiEndpointConfiguration":{"description":"The ``EndpointConfiguration`` property type specifies the endpoint types and IP address types of a REST API.\n ``EndpointConfiguration`` is a property of the [AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html) resource.","properties":{"ipAddressType":{"type":"string","description":"The IP address types that can invoke an API (RestApi). Use `ipv4` to allow only IPv4 addresses to invoke an API, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke an API. For the `PRIVATE` endpoint type, only `dualstack` is supported."},"types":{"type":"array","items":{"type":"string"},"description":"A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is `\"EDGE\"` . For a regional API and its custom domain name, the endpoint type is `REGIONAL` . For a private API, the endpoint type is `PRIVATE` ."},"vpcEndpointIds":{"type":"array","items":{"type":"string"},"description":"A list of VpcEndpointIds of an API (RestApi) against which to create Route53 ALIASes. It is only supported for `PRIVATE` endpoint type."}},"type":"object"},"aws-native:apigateway:RestApiS3Location":{"description":"``S3Location`` is a property of the [AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html) resource that specifies the Amazon S3 location of a OpenAPI (formerly Swagger) file that defines a set of RESTful APIs in JSON or YAML.\n  On January 1, 2016, the Swagger Specification was donated to the [OpenAPI initiative](https://docs.aws.amazon.com/https://www.openapis.org/), becoming the foundation of the OpenAPI Specification.","properties":{"bucket":{"type":"string","description":"The name of the S3 bucket where the OpenAPI file is stored."},"eTag":{"type":"string","description":"The Amazon S3 ETag (a file checksum) of the OpenAPI file. If you don't specify a value, API Gateway skips ETag validation of your OpenAPI file."},"key":{"type":"string","description":"The file name of the OpenAPI file (Amazon S3 object name)."},"version":{"type":"string","description":"For versioning-enabled buckets, a specific version of the OpenAPI file."}},"type":"object"},"aws-native:apigateway:RestApiTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:StageAccessLogSetting":{"description":"The ``AccessLogSetting`` property type specifies settings for logging access in this stage.\n ``AccessLogSetting`` is a property of the [AWS::ApiGateway::Stage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-stage.html) resource.","properties":{"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudWatch Logs log group or Kinesis Data Firehose delivery stream to receive access logs. If you specify a Kinesis Data Firehose delivery stream, the stream name must begin with ``amazon-apigateway-``. This parameter is required to enable access logging."},"format":{"type":"string","description":"A single line format of the access logs of data, as specified by selected [$context variables](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-mapping-template-reference.html#context-variable-reference). The format must include at least ``$context.requestId``. This parameter is required to enable access logging."}},"type":"object"},"aws-native:apigateway:StageCanarySetting":{"properties":{"deploymentId":{"type":"string","description":"The ID of the canary deployment."},"percentTraffic":{"type":"number","description":"The percent (0-100) of traffic diverted to a canary deployment."},"stageVariableOverrides":{"type":"object","additionalProperties":{"type":"string"},"description":"Stage variables overridden for a canary release deployment, including new stage variables introduced in the canary. These stage variables are represented as a string-to-string map between stage variable names and their values."},"useStageCache":{"type":"boolean","description":"A Boolean flag to indicate whether the canary deployment uses the stage cache or not."}},"type":"object"},"aws-native:apigateway:StageMethodSetting":{"description":"The ``MethodSetting`` property type configures settings for all methods in a stage.\n The ``MethodSettings`` property of the ``AWS::ApiGateway::Stage`` resource contains a list of ``MethodSetting`` property types.","properties":{"cacheDataEncrypted":{"type":"boolean","description":"Specifies whether the cached responses are encrypted."},"cacheTtlInSeconds":{"type":"integer","description":"Specifies the time to live (TTL), in seconds, for cached responses. The higher the TTL, the longer the response will be cached."},"cachingEnabled":{"type":"boolean","description":"Specifies whether responses should be cached and returned for requests. A cache cluster must be enabled on the stage for responses to be cached."},"dataTraceEnabled":{"type":"boolean","description":"Specifies whether data trace logging is enabled for this method, which affects the log entries pushed to Amazon CloudWatch Logs. This can be useful to troubleshoot APIs, but can result in logging sensitive data. We recommend that you don't enable this option for production APIs."},"httpMethod":{"type":"string","description":"The HTTP method. To apply settings to multiple resources and methods, specify an asterisk (``*``) for the ``HttpMethod`` and ``/*`` for the ``ResourcePath``. This parameter is required when you specify a ``MethodSetting``."},"loggingLevel":{"type":"string","description":"Specifies the logging level for this method, which affects the log entries pushed to Amazon CloudWatch Logs. Valid values are `OFF` , `ERROR` , and `INFO` . Choose `ERROR` to write only error-level entries to CloudWatch Logs, or choose `INFO` to include all `ERROR` events as well as extra informational events."},"metricsEnabled":{"type":"boolean","description":"Specifies whether Amazon CloudWatch metrics are enabled for this method."},"resourcePath":{"type":"string","description":"The resource path for this method. Forward slashes (``/``) are encoded as ``~1`` and the initial slash must include a forward slash. For example, the path value ``/resource/subresource`` must be encoded as ``/~1resource~1subresource``. To specify the root path, use only a slash (``/``). To apply settings to multiple resources and methods, specify an asterisk (``*``) for the ``HttpMethod`` and ``/*`` for the ``ResourcePath``. This parameter is required when you specify a ``MethodSetting``."},"throttlingBurstLimit":{"type":"integer","description":"Specifies the throttling burst limit."},"throttlingRateLimit":{"type":"number","description":"Specifies the throttling rate limit."}},"type":"object"},"aws-native:apigateway:StageTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:UsagePlanApiStage":{"properties":{"apiId":{"type":"string","description":"API Id of the associated API stage in a usage plan."},"stage":{"type":"string","description":"API stage name of the associated API stage in a usage plan."},"throttle":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:apigateway:UsagePlanThrottleSettings"},"description":"Map containing method level throttling information for API stage in a usage plan."}},"type":"object"},"aws-native:apigateway:UsagePlanKeyKeyType":{"description":"The type of a UsagePlanKey resource for a plan customer.","type":"string","enum":[{"name":"ApiKey","value":"API_KEY"}]},"aws-native:apigateway:UsagePlanQuotaSettings":{"description":"``QuotaSettings`` is a property of the [AWS::ApiGateway::UsagePlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-usageplan.html) resource that specifies a target for the maximum number of requests users can make to your REST APIs.\n In some cases clients can exceed the targets that you set. Don’t rely on usage plans to control costs. Consider using [](https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html) to monitor costs and [](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) to manage API requests.","properties":{"limit":{"type":"integer","description":"The target maximum number of requests that can be made in a given time period."},"offset":{"type":"integer","description":"The number of requests subtracted from the given limit in the initial time period."},"period":{"type":"string","description":"The time period in which the limit applies. Valid values are \"DAY\", \"WEEK\" or \"MONTH\"."}},"type":"object"},"aws-native:apigateway:UsagePlanTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigateway:UsagePlanThrottleSettings":{"description":"``ThrottleSettings`` is a property of the [AWS::ApiGateway::UsagePlan](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-usageplan.html) resource that specifies the overall request rate (average requests per second) and burst capacity when users call your REST APIs.","properties":{"burstLimit":{"type":"integer"},"rateLimit":{"type":"number"}},"type":"object"},"aws-native:apigateway:VpcLinkTag":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:apigatewayv2:ApiBodyS3Location":{"description":"The ``BodyS3Location`` property specifies an S3 location from which to import an OpenAPI definition. Supported only for HTTP APIs.","properties":{"bucket":{"type":"string","description":"The S3 bucket that contains the OpenAPI definition to import. Required if you specify a ``BodyS3Location`` for an API."},"etag":{"type":"string","description":"The Etag of the S3 object."},"key":{"type":"string","description":"The key of the S3 object. Required if you specify a ``BodyS3Location`` for an API."},"version":{"type":"string","description":"The version of the S3 object."}},"type":"object"},"aws-native:apigatewayv2:ApiCors":{"description":"The ``Cors`` property specifies a CORS configuration for an API. Supported only for HTTP APIs. See [Configuring CORS](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-cors.html) for more information.","properties":{"allowCredentials":{"type":"boolean","description":"Specifies whether credentials are included in the CORS request. Supported only for HTTP APIs."},"allowHeaders":{"type":"array","items":{"type":"string"},"description":"Represents a collection of allowed headers. Supported only for HTTP APIs."},"allowMethods":{"type":"array","items":{"type":"string"},"description":"Represents a collection of allowed HTTP methods. Supported only for HTTP APIs."},"allowOrigins":{"type":"array","items":{"type":"string"},"description":"Represents a collection of allowed origins. Supported only for HTTP APIs."},"exposeHeaders":{"type":"array","items":{"type":"string"},"description":"Represents a collection of exposed headers. Supported only for HTTP APIs."},"maxAge":{"type":"integer","description":"The number of seconds that the browser should cache preflight request results. Supported only for HTTP APIs."}},"type":"object"},"aws-native:apigatewayv2:AuthorizerJwtConfiguration":{"description":"The ``JWTConfiguration`` property specifies the configuration of a JWT authorizer. Required for the ``JWT`` authorizer type. Supported only for HTTP APIs.","properties":{"audience":{"type":"array","items":{"type":"string"},"description":"A list of the intended recipients of the JWT. A valid JWT must provide an ``aud`` that matches at least one entry in this list. See [RFC 7519](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc7519#section-4.1.3). Required for the ``JWT`` authorizer type. Supported only for HTTP APIs."},"issuer":{"type":"string","description":"The base domain of the identity provider that issues JSON Web Tokens. For example, an Amazon Cognito user pool has the following format: ``https://cognito-idp.{region}.amazonaws.com/{userPoolId}``. Required for the ``JWT`` authorizer type. Supported only for HTTP APIs."}},"type":"object"},"aws-native:apigatewayv2:DomainNameConfiguration":{"description":"The ``DomainNameConfiguration`` property type specifies the configuration for an API's domain name.\n  ``DomainNameConfiguration`` is a property of the [AWS::ApiGatewayV2::DomainName](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-domainname.html) resource.","properties":{"certificateArn":{"type":"string","description":"An AWS-managed certificate that will be used by the edge-optimized endpoint for this domain name. AWS Certificate Manager is the only supported source."},"certificateName":{"type":"string","description":"The user-friendly name of the certificate that will be used by the edge-optimized endpoint for this domain name."},"endpointType":{"type":"string","description":"The endpoint type."},"ipAddressType":{"type":"string","description":"The IP address types that can invoke the domain name. Use `ipv4` to allow only IPv4 addresses to invoke your domain name, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke your domain name."},"ownershipVerificationCertificateArn":{"type":"string","description":"The Amazon resource name (ARN) for the public certificate issued by ACMlong. This ARN is used to validate custom domain ownership. It's required only if you configure mutual TLS and use either an ACM-imported or a private CA certificate ARN as the regionalCertificateArn."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version of the security policy for this domain name. The valid values are ``TLS_1_0`` and ``TLS_1_2``."}},"type":"object"},"aws-native:apigatewayv2:DomainNameMutualTlsAuthentication":{"description":"If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API.","properties":{"truststoreUri":{"type":"string","description":"An Amazon S3 URL that specifies the truststore for mutual TLS authentication, for example, ``s3://bucket-name/key-name``. The truststore can contain certificates from public or private certificate authorities. To update the truststore, upload a new version to S3, and then update your custom domain name to use the new version. To update the truststore, you must have permissions to access the S3 object."},"truststoreVersion":{"type":"string","description":"The version of the S3 object that contains your truststore. To specify a version, you must have versioning enabled for the S3 bucket."}},"type":"object"},"aws-native:apigatewayv2:DomainNameRoutingMode":{"description":"The routing mode API Gateway uses to route traffic to your APIs.","type":"string","enum":[{"name":"ApiMappingOnly","value":"API_MAPPING_ONLY"},{"name":"RoutingRuleThenApiMapping","value":"ROUTING_RULE_THEN_API_MAPPING"},{"name":"RoutingRuleOnly","value":"ROUTING_RULE_ONLY"}]},"aws-native:apigatewayv2:IntegrationResponseParameter":{"description":"response parameter","properties":{"destination":{"type":"string"},"source":{"type":"string"}},"type":"object"},"aws-native:apigatewayv2:IntegrationResponseParameterMap":{"description":"map of response parameter lists","properties":{"responseParameters":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationResponseParameter"}}},"type":"object"},"aws-native:apigatewayv2:IntegrationTlsConfig":{"description":"The TlsConfig property specifies the TLS configuration for a private integration. Supported only for HTTP APIs.","properties":{"serverNameToVerify":{"type":"string","description":"If you specify a server name, API Gateway uses it to verify the hostname on the integration's certificate. The server name is also included in the TLS handshake to support Server Name Indication (SNI) or virtual hosting."}},"type":"object"},"aws-native:apigatewayv2:RouteParameterConstraints":{"properties":{"required":{"type":"boolean"}},"type":"object","required":["required"]},"aws-native:apigatewayv2:RouteResponseParameterConstraints":{"description":"Specifies whether the parameter is required.","properties":{"required":{"type":"boolean","description":"Specifies whether the parameter is required."}},"type":"object","required":["required"]},"aws-native:apigatewayv2:RoutingRuleAction":{"properties":{"invokeApi":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleActionInvokeApi","description":"Represents an InvokeApi action."}},"type":"object","required":["invokeApi"]},"aws-native:apigatewayv2:RoutingRuleActionInvokeApi":{"properties":{"apiId":{"type":"string","description":"The API identifier of the target API."},"stage":{"type":"string","description":"The name of the target stage."},"stripBasePath":{"type":"boolean","description":"The strip base path setting. When true, API Gateway strips the incoming matched base path when forwarding the request to the target API."}},"type":"object","required":["apiId","stage"]},"aws-native:apigatewayv2:RoutingRuleCondition":{"properties":{"matchBasePaths":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleMatchBasePaths","description":"The base path to be matched."},"matchHeaders":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleMatchHeaders","description":"The headers to be matched."}},"type":"object"},"aws-native:apigatewayv2:RoutingRuleMatchBasePaths":{"properties":{"anyOf":{"type":"array","items":{"type":"string"},"description":"The string of the case sensitive base path to be matched."}},"type":"object","required":["anyOf"]},"aws-native:apigatewayv2:RoutingRuleMatchHeaderValue":{"properties":{"header":{"type":"string","description":"The case insensitive header name to be matched. The header name must be less than 40 characters and the only allowed characters are `a-z` , `A-Z` , `0-9` , and the following special characters: `*?-!#$%\u0026'.^_`|~.` ."},"valueGlob":{"type":"string","description":"The case sensitive header glob value to be matched against entire header value. The header glob value must be less than 128 characters and the only allowed characters are `a-z` , `A-Z` , `0-9` , and the following special characters: `*?-!#$%\u0026'.^_`|~` . Wildcard matching is supported for header glob values but must be for `*prefix-match` , `suffix-match*` , or `*infix*-match` ."}},"type":"object","required":["header","valueGlob"]},"aws-native:apigatewayv2:RoutingRuleMatchHeaders":{"properties":{"anyOf":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleMatchHeaderValue"},"description":"The header name and header value glob to be matched. The matchHeaders condition is matched if any of the header name and header value globs are matched."}},"type":"object","required":["anyOf"]},"aws-native:appconfig:ApplicationTags":{"description":"Metadata to assign to the application. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","properties":{"key":{"type":"string","description":"The key-value string map. The valid character set is [a-zA-Z1-9 +-=._:/-]. The tag key can be up to 128 characters and must not start with aws:."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object","required":["key","value"]},"aws-native:appconfig:ConfigurationProfileDeletionProtectionCheck":{"description":"On resource deletion this controls whether the Deletion Protection check should be applied, bypassed, or (the default) whether the behavior should be controlled by the account-level Deletion Protection setting. See https://docs.aws.amazon.com/appconfig/latest/userguide/deletion-protection.html","type":"string","enum":[{"name":"AccountDefault","value":"ACCOUNT_DEFAULT"},{"name":"Apply","value":"APPLY"},{"name":"Bypass","value":"BYPASS"}]},"aws-native:appconfig:ConfigurationProfileTags":{"description":"Metadata to assign to the configuration profile. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","properties":{"key":{"type":"string","description":"The key-value string map. The tag key can be up to 128 characters and must not start with aws:."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object"},"aws-native:appconfig:ConfigurationProfileValidators":{"description":"A list of methods for validating the configuration.","properties":{"content":{"type":"string","description":"Either the JSON Schema content or the Amazon Resource Name (ARN) of an Lambda function."},"type":{"type":"string","description":"AWS AppConfig supports validators of type JSON_SCHEMA and LAMBDA."}},"type":"object"},"aws-native:appconfig:DeploymentDynamicExtensionParameters":{"properties":{"extensionReference":{"type":"string","description":"The ARN or ID of the extension for which you are inserting a dynamic parameter."},"parameterName":{"type":"string","description":"The parameter name."},"parameterValue":{"type":"string","description":"The parameter value."}},"type":"object"},"aws-native:appconfig:DeploymentState":{"description":"The state of the deployment.","type":"string","enum":[{"name":"Baking","value":"BAKING"},{"name":"Validating","value":"VALIDATING"},{"name":"Deploying","value":"DEPLOYING"},{"name":"Complete","value":"COMPLETE"},{"name":"RollingBack","value":"ROLLING_BACK"},{"name":"RolledBack","value":"ROLLED_BACK"},{"name":"Reverted","value":"REVERTED"}]},"aws-native:appconfig:DeploymentStrategyGrowthType":{"description":"The algorithm used to define how percentage grows over time. AWS AppConfig supports the following growth types:\n\nLinear: For this type, AWS AppConfig processes the deployment by dividing the total number of targets by the value specified for Step percentage. For example, a linear deployment that uses a Step percentage of 10 deploys the configuration to 10 percent of the hosts. After those deployments are complete, the system deploys the configuration to the next 10 percent. This continues until 100% of the targets have successfully received the configuration.\n\nExponential: For this type, AWS AppConfig processes the deployment exponentially using the following formula: G*(2^N). In this formula, G is the growth factor specified by the user and N is the number of steps until the configuration is deployed to all targets. For example, if you specify a growth factor of 2, then the system rolls out the configuration as follows:\n\n2*(2^0)\n\n2*(2^1)\n\n2*(2^2)\n\nExpressed numerically, the deployment rolls out as follows: 2% of the targets, 4% of the targets, 8% of the targets, and continues until the configuration has been deployed to all targets.","type":"string","enum":[{"name":"Exponential","value":"EXPONENTIAL"},{"name":"Linear","value":"LINEAR"}]},"aws-native:appconfig:DeploymentStrategyReplicateTo":{"description":"Save the deployment strategy to a Systems Manager (SSM) document.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"SsmDocument","value":"SSM_DOCUMENT"}]},"aws-native:appconfig:DeploymentStrategyTag":{"description":"Metadata to assign to the deployment strategy. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object"},"aws-native:appconfig:DeploymentTag":{"description":"Metadata to assign to the deployment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","properties":{"key":{"type":"string","description":"The key-value string map. The valid character set is [a-zA-Z1-9+-=._:/]. The tag key can be up to 128 characters and must not start with aws:."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object"},"aws-native:appconfig:EnvironmentDeletionProtectionCheck":{"description":"On resource deletion this controls whether the Deletion Protection check should be applied, bypassed, or (the default) whether the behavior should be controlled by the account-level Deletion Protection setting. See https://docs.aws.amazon.com/appconfig/latest/userguide/deletion-protection.html","type":"string","enum":[{"name":"AccountDefault","value":"ACCOUNT_DEFAULT"},{"name":"Apply","value":"APPLY"},{"name":"Bypass","value":"BYPASS"}]},"aws-native:appconfig:EnvironmentMonitor":{"description":"Amazon CloudWatch alarm to monitor during the deployment process.","properties":{"alarmArn":{"type":"string","description":"Amazon Resource Name (ARN) of the Amazon CloudWatch alarm."},"alarmRoleArn":{"type":"string","description":"ARN of an AWS Identity and Access Management (IAM) role for AWS AppConfig to monitor AlarmArn."}},"type":"object","required":["alarmArn"]},"aws-native:appconfig:EnvironmentTag":{"description":"Metadata to assign to the environment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","properties":{"key":{"type":"string","description":"The key-value string map. The valid character set is [a-zA-Z1-9+-=._:/]. The tag key can be up to 128 characters and must not start with aws:."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object","required":["key","value"]},"aws-native:appconfig:ExtensionAction":{"description":"An action for an extension to take at a specific action point.","properties":{"description":{"type":"string","description":"The description of the extension Action."},"name":{"type":"string","description":"The name of the extension action."},"roleArn":{"type":"string","description":"The ARN of the role for invoking the extension action."},"uri":{"type":"string","description":"The URI of the extension action."}},"type":"object","required":["name","uri"]},"aws-native:appconfig:ExtensionAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:appconfig:ExtensionParameter":{"description":"A parameter for the extension to send to a specific action.","properties":{"description":{"type":"string","description":"The description of the extension Parameter."},"dynamic":{"type":"boolean"},"required":{"type":"boolean"}},"type":"object","required":["required"]},"aws-native:appconfig:ExtensionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:appflow:ConnectorLambdaConnectorProvisioningConfig":{"description":"Contains information about the configuration of the lambda which is being registered as the connector.","properties":{"lambdaArn":{"type":"string","description":"Lambda ARN of the connector being registered."}},"type":"object","required":["lambdaArn"]},"aws-native:appflow:ConnectorProfileAmplitudeConnectorProfileCredentials":{"properties":{"apiKey":{"type":"string","description":"A unique alphanumeric identifier used to authenticate a user, developer, or calling program to your API."},"secretKey":{"type":"string","description":"The Secret Access Key portion of the credentials."}},"type":"object","required":["apiKey","secretKey"]},"aws-native:appflow:ConnectorProfileApiKeyCredentials":{"properties":{"apiKey":{"type":"string","description":"The API key required for API key authentication."},"apiSecretKey":{"type":"string","description":"The API secret key required for API key authentication."}},"type":"object","required":["apiKey"]},"aws-native:appflow:ConnectorProfileAuthenticationType":{"type":"string","enum":[{"name":"Oauth2","value":"OAUTH2"},{"name":"Apikey","value":"APIKEY"},{"name":"Basic","value":"BASIC"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:appflow:ConnectorProfileBasicAuthCredentials":{"properties":{"password":{"type":"string","description":"The password to use to connect to a resource."},"username":{"type":"string","description":"The username to use to connect to a resource."}},"type":"object","required":["password","username"]},"aws-native:appflow:ConnectorProfileConfig":{"description":"Connector specific configurations needed to create connector profile","properties":{"connectorProfileCredentials":{"$ref":"#/types/aws-native:appflow:ConnectorProfileCredentials","description":"The connector-specific credentials required by each connector."},"connectorProfileProperties":{"$ref":"#/types/aws-native:appflow:ConnectorProfileProperties","description":"The connector-specific properties of the profile configuration."}},"type":"object"},"aws-native:appflow:ConnectorProfileConnectionMode":{"description":"Mode in which data transfer should be enabled. Private connection mode is currently enabled for Salesforce, Snowflake, Trendmicro and Singular","type":"string","enum":[{"name":"Public","value":"Public"},{"name":"Private","value":"Private"}]},"aws-native:appflow:ConnectorProfileConnectorOAuthRequest":{"properties":{"authCode":{"type":"string","description":"The code provided by the connector when it has been authenticated via the connected app."},"redirectUri":{"type":"string","description":"The URL to which the authentication server redirects the browser after authorization has been\ngranted."}},"type":"object"},"aws-native:appflow:ConnectorProfileConnectorType":{"type":"string","enum":[{"name":"Salesforce","value":"Salesforce"},{"name":"Pardot","value":"Pardot"},{"name":"Singular","value":"Singular"},{"name":"Slack","value":"Slack"},{"name":"Redshift","value":"Redshift"},{"name":"Marketo","value":"Marketo"},{"name":"Googleanalytics","value":"Googleanalytics"},{"name":"Zendesk","value":"Zendesk"},{"name":"Servicenow","value":"Servicenow"},{"name":"SapoData","value":"SAPOData"},{"name":"Datadog","value":"Datadog"},{"name":"Trendmicro","value":"Trendmicro"},{"name":"Snowflake","value":"Snowflake"},{"name":"Dynatrace","value":"Dynatrace"},{"name":"Infornexus","value":"Infornexus"},{"name":"Amplitude","value":"Amplitude"},{"name":"Veeva","value":"Veeva"},{"name":"CustomConnector","value":"CustomConnector"}]},"aws-native:appflow:ConnectorProfileCredentials":{"description":"Connector specific configuration needed to create connector profile based on Authentication mechanism","properties":{"amplitude":{"$ref":"#/types/aws-native:appflow:ConnectorProfileAmplitudeConnectorProfileCredentials","description":"The connector-specific credentials required when using Amplitude."},"customConnector":{"$ref":"#/types/aws-native:appflow:ConnectorProfileCustomConnectorProfileCredentials","description":"The connector-specific profile credentials that are required when using the custom connector."},"datadog":{"$ref":"#/types/aws-native:appflow:ConnectorProfileDatadogConnectorProfileCredentials","description":"The connector-specific credentials required when using Datadog."},"dynatrace":{"$ref":"#/types/aws-native:appflow:ConnectorProfileDynatraceConnectorProfileCredentials","description":"The connector-specific credentials required when using Dynatrace."},"googleAnalytics":{"$ref":"#/types/aws-native:appflow:ConnectorProfileGoogleAnalyticsConnectorProfileCredentials","description":"The connector-specific credentials required when using Google Analytics."},"inforNexus":{"$ref":"#/types/aws-native:appflow:ConnectorProfileInforNexusConnectorProfileCredentials","description":"The connector-specific credentials required when using Infor Nexus."},"marketo":{"$ref":"#/types/aws-native:appflow:ConnectorProfileMarketoConnectorProfileCredentials","description":"The connector-specific credentials required when using Marketo."},"pardot":{"$ref":"#/types/aws-native:appflow:ConnectorProfilePardotConnectorProfileCredentials","description":"The connector-specific credentials required when using Salesforce Pardot."},"redshift":{"$ref":"#/types/aws-native:appflow:ConnectorProfileRedshiftConnectorProfileCredentials","description":"The connector-specific credentials required when using Amazon Redshift."},"salesforce":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSalesforceConnectorProfileCredentials","description":"The connector-specific credentials required when using Salesforce."},"sapoData":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSapoDataConnectorProfileCredentials","description":"The connector-specific profile credentials required when using SAPOData."},"serviceNow":{"$ref":"#/types/aws-native:appflow:ConnectorProfileServiceNowConnectorProfileCredentials","description":"The connector-specific credentials required when using ServiceNow."},"singular":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSingularConnectorProfileCredentials","description":"The connector-specific credentials required when using Singular."},"slack":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSlackConnectorProfileCredentials","description":"The connector-specific credentials required when using Slack."},"snowflake":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSnowflakeConnectorProfileCredentials","description":"The connector-specific credentials required when using Snowflake."},"trendmicro":{"$ref":"#/types/aws-native:appflow:ConnectorProfileTrendmicroConnectorProfileCredentials","description":"The connector-specific credentials required when using Trend Micro."},"veeva":{"$ref":"#/types/aws-native:appflow:ConnectorProfileVeevaConnectorProfileCredentials","description":"The connector-specific credentials required when using Veeva."},"zendesk":{"$ref":"#/types/aws-native:appflow:ConnectorProfileZendeskConnectorProfileCredentials","description":"The connector-specific credentials required when using Zendesk."}},"type":"object"},"aws-native:appflow:ConnectorProfileCustomAuthCredentials":{"properties":{"credentialsMap":{"type":"object","additionalProperties":{"type":"string"},"description":"A map that holds custom authentication credentials."},"customAuthenticationType":{"type":"string","description":"The custom authentication type that the connector uses."}},"type":"object","required":["customAuthenticationType"]},"aws-native:appflow:ConnectorProfileCustomConnectorProfileCredentials":{"properties":{"apiKey":{"$ref":"#/types/aws-native:appflow:ConnectorProfileApiKeyCredentials","description":"The API keys required for the authentication of the user."},"authenticationType":{"$ref":"#/types/aws-native:appflow:ConnectorProfileAuthenticationType","description":"The authentication type that the custom connector uses for authenticating while creating a connector profile."},"basic":{"$ref":"#/types/aws-native:appflow:ConnectorProfileBasicAuthCredentials","description":"The basic credentials that are required for the authentication of the user."},"custom":{"$ref":"#/types/aws-native:appflow:ConnectorProfileCustomAuthCredentials","description":"If the connector uses the custom authentication mechanism, this holds the required credentials."},"oauth2":{"$ref":"#/types/aws-native:appflow:ConnectorProfileOAuth2Credentials","description":"The OAuth 2.0 credentials required for the authentication of the user."}},"type":"object","required":["authenticationType"]},"aws-native:appflow:ConnectorProfileCustomConnectorProfileProperties":{"properties":{"oAuth2Properties":{"$ref":"#/types/aws-native:appflow:ConnectorProfileOAuth2Properties","description":"The OAuth 2.0 properties required for OAuth 2.0 authentication."},"profileProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of properties that are required to create a profile for the custom connector."}},"type":"object"},"aws-native:appflow:ConnectorProfileDatadogConnectorProfileCredentials":{"properties":{"apiKey":{"type":"string","description":"A unique alphanumeric identifier used to authenticate a user, developer, or calling program to your API."},"applicationKey":{"type":"string","description":"Application keys, in conjunction with your API key, give you full access to Datadog’s programmatic API. Application keys are associated with the user account that created them. The application key is used to log all requests made to the API."}},"type":"object","required":["apiKey","applicationKey"]},"aws-native:appflow:ConnectorProfileDatadogConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Datadog resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileDynatraceConnectorProfileCredentials":{"properties":{"apiToken":{"type":"string","description":"The API tokens used by Dynatrace API to authenticate various API calls."}},"type":"object","required":["apiToken"]},"aws-native:appflow:ConnectorProfileDynatraceConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Dynatrace resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileGoogleAnalyticsConnectorProfileCredentials":{"properties":{"accessToken":{"type":"string","description":"The credentials used to access protected resources."},"clientId":{"type":"string","description":"The identifier for the desired client."},"clientSecret":{"type":"string","description":"The client secret used by the oauth client to authenticate to the authorization server."},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest","description":"The oauth needed to request security tokens from the connector endpoint."},"refreshToken":{"type":"string","description":"The credentials used to acquire new access tokens."}},"type":"object","required":["clientId","clientSecret"]},"aws-native:appflow:ConnectorProfileInforNexusConnectorProfileCredentials":{"properties":{"accessKeyId":{"type":"string","description":"The Access Key portion of the credentials."},"datakey":{"type":"string","description":"The encryption keys used to encrypt data."},"secretAccessKey":{"type":"string","description":"The secret key used to sign requests."},"userId":{"type":"string","description":"The identifier for the user."}},"type":"object","required":["accessKeyId","datakey","secretAccessKey","userId"]},"aws-native:appflow:ConnectorProfileInforNexusConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the InforNexus resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileMarketoConnectorProfileCredentials":{"properties":{"accessToken":{"type":"string","description":"The credentials used to access protected resources."},"clientId":{"type":"string","description":"The identifier for the desired client."},"clientSecret":{"type":"string","description":"The client secret used by the oauth client to authenticate to the authorization server."},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest","description":"The oauth needed to request security tokens from the connector endpoint."}},"type":"object","required":["clientId","clientSecret"]},"aws-native:appflow:ConnectorProfileMarketoConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Marketo resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileOAuth2Credentials":{"properties":{"accessToken":{"type":"string","description":"The access token used to access the connector on your behalf."},"clientId":{"type":"string","description":"The identifier for the desired client."},"clientSecret":{"type":"string","description":"The client secret used by the OAuth client to authenticate to the authorization server."},"oAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest"},"refreshToken":{"type":"string","description":"The refresh token used to refresh an expired access token."}},"type":"object"},"aws-native:appflow:ConnectorProfileOAuth2GrantType":{"type":"string","enum":[{"name":"ClientCredentials","value":"CLIENT_CREDENTIALS"},{"name":"AuthorizationCode","value":"AUTHORIZATION_CODE"},{"name":"JwtBearer","value":"JWT_BEARER"}]},"aws-native:appflow:ConnectorProfileOAuth2Properties":{"properties":{"oAuth2GrantType":{"$ref":"#/types/aws-native:appflow:ConnectorProfileOAuth2GrantType","description":"The OAuth 2.0 grant type used by connector for OAuth 2.0 authentication."},"tokenUrl":{"type":"string","description":"The token URL required for OAuth 2.0 authentication."},"tokenUrlCustomProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"Associates your token URL with a map of properties that you define. Use this parameter to provide any additional details that the connector requires to authenticate your request."}},"type":"object"},"aws-native:appflow:ConnectorProfileOAuthProperties":{"properties":{"authCodeUrl":{"type":"string","description":"The authorization code url required to redirect to SAP Login Page to fetch authorization code for OAuth type authentication."},"oAuthScopes":{"type":"array","items":{"type":"string"},"description":"The OAuth scopes required for OAuth type authentication."},"tokenUrl":{"type":"string","description":"The token url required to fetch access/refresh tokens using authorization code and also to refresh expired access token using refresh token."}},"type":"object"},"aws-native:appflow:ConnectorProfilePardotConnectorProfileCredentials":{"properties":{"accessToken":{"type":"string","description":"The credentials used to access protected resources."},"clientCredentialsArn":{"type":"string","description":"The client credentials to fetch access token and refresh token."},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest","description":"The oauth needed to request security tokens from the connector endpoint."},"refreshToken":{"type":"string","description":"The credentials used to acquire new access tokens."}},"type":"object"},"aws-native:appflow:ConnectorProfilePardotConnectorProfileProperties":{"properties":{"businessUnitId":{"type":"string","description":"The Business unit id of Salesforce Pardot instance to be connected"},"instanceUrl":{"type":"string","description":"The location of the Salesforce Pardot resource"},"isSandboxEnvironment":{"type":"boolean","description":"Indicates whether the connector profile applies to a demo or production environment"}},"type":"object","required":["businessUnitId"]},"aws-native:appflow:ConnectorProfileProperties":{"description":"Connector specific properties needed to create connector profile - currently not needed for Amplitude, Trendmicro, Googleanalytics and Singular","properties":{"customConnector":{"$ref":"#/types/aws-native:appflow:ConnectorProfileCustomConnectorProfileProperties","description":"The properties required by the custom connector."},"datadog":{"$ref":"#/types/aws-native:appflow:ConnectorProfileDatadogConnectorProfileProperties","description":"The connector-specific properties required by Datadog."},"dynatrace":{"$ref":"#/types/aws-native:appflow:ConnectorProfileDynatraceConnectorProfileProperties","description":"The connector-specific properties required by Dynatrace."},"inforNexus":{"$ref":"#/types/aws-native:appflow:ConnectorProfileInforNexusConnectorProfileProperties","description":"The connector-specific properties required by Infor Nexus."},"marketo":{"$ref":"#/types/aws-native:appflow:ConnectorProfileMarketoConnectorProfileProperties","description":"The connector-specific properties required by Marketo."},"pardot":{"$ref":"#/types/aws-native:appflow:ConnectorProfilePardotConnectorProfileProperties","description":"The connector-specific properties required by Salesforce Pardot."},"redshift":{"$ref":"#/types/aws-native:appflow:ConnectorProfileRedshiftConnectorProfileProperties","description":"The connector-specific properties required by Amazon Redshift."},"salesforce":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSalesforceConnectorProfileProperties","description":"The connector-specific properties required by Salesforce."},"sapoData":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSapoDataConnectorProfileProperties","description":"The connector-specific profile properties required when using SAPOData."},"serviceNow":{"$ref":"#/types/aws-native:appflow:ConnectorProfileServiceNowConnectorProfileProperties","description":"The connector-specific properties required by serviceNow."},"slack":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSlackConnectorProfileProperties","description":"The connector-specific properties required by Slack."},"snowflake":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSnowflakeConnectorProfileProperties","description":"The connector-specific properties required by Snowflake."},"veeva":{"$ref":"#/types/aws-native:appflow:ConnectorProfileVeevaConnectorProfileProperties","description":"The connector-specific properties required by Veeva."},"zendesk":{"$ref":"#/types/aws-native:appflow:ConnectorProfileZendeskConnectorProfileProperties","description":"The connector-specific properties required by Zendesk."}},"type":"object"},"aws-native:appflow:ConnectorProfileRedshiftConnectorProfileCredentials":{"properties":{"password":{"type":"string","description":"The password that corresponds to the username."},"username":{"type":"string","description":"The name of the user."}},"type":"object"},"aws-native:appflow:ConnectorProfileRedshiftConnectorProfileProperties":{"properties":{"bucketName":{"type":"string","description":"The name of the Amazon S3 bucket associated with Redshift."},"bucketPrefix":{"type":"string","description":"The object key for the destination bucket in which Amazon AppFlow will place the files."},"clusterIdentifier":{"type":"string","description":"The unique identifier of the Amazon Redshift cluster."},"dataApiRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon AppFlow access to the data through the Amazon Redshift Data API."},"databaseName":{"type":"string","description":"The name of the Amazon Redshift database that will store the transferred data."},"databaseUrl":{"type":"string","description":"The JDBC URL of the Amazon Redshift cluster."},"isRedshiftServerless":{"type":"boolean","description":"If Amazon AppFlow will connect to Amazon Redshift Serverless or Amazon Redshift cluster."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role."},"workgroupName":{"type":"string","description":"The name of the Amazon Redshift serverless workgroup"}},"type":"object","required":["bucketName","roleArn"]},"aws-native:appflow:ConnectorProfileSalesforceConnectorProfileCredentials":{"properties":{"accessToken":{"type":"string","description":"The credentials used to access protected resources."},"clientCredentialsArn":{"type":"string","description":"The client credentials to fetch access token and refresh token."},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest","description":"The oauth needed to request security tokens from the connector endpoint."},"jwtToken":{"type":"string","description":"The credentials used to access your Salesforce records"},"oAuth2GrantType":{"$ref":"#/types/aws-native:appflow:ConnectorProfileOAuth2GrantType","description":"The grant types to fetch an access token"},"refreshToken":{"type":"string","description":"The credentials used to acquire new access tokens."}},"type":"object"},"aws-native:appflow:ConnectorProfileSalesforceConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Salesforce resource"},"isSandboxEnvironment":{"type":"boolean","description":"Indicates whether the connector profile applies to a sandbox or production environment"},"usePrivateLinkForMetadataAndAuthorization":{"type":"boolean","description":"Indicates whether to make Metadata And Authorization calls over Pivate Network"}},"type":"object"},"aws-native:appflow:ConnectorProfileSapoDataConnectorProfileCredentials":{"properties":{"basicAuthCredentials":{"$ref":"#/types/aws-native:appflow:ConnectorProfileBasicAuthCredentials","description":"The SAPOData basic authentication credentials."},"oAuthCredentials":{"$ref":"#/types/aws-native:appflow:ConnectorProfileSapoDataConnectorProfileCredentialsOAuthCredentialsProperties","description":"The SAPOData OAuth type authentication credentials."}},"type":"object"},"aws-native:appflow:ConnectorProfileSapoDataConnectorProfileCredentialsOAuthCredentialsProperties":{"description":"The SAPOData OAuth type authentication credentials.","properties":{"accessToken":{"type":"string"},"clientId":{"type":"string"},"clientSecret":{"type":"string"},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest"},"refreshToken":{"type":"string"}},"type":"object"},"aws-native:appflow:ConnectorProfileSapoDataConnectorProfileProperties":{"properties":{"applicationHostUrl":{"type":"string","description":"The location of the SAPOData resource."},"applicationServicePath":{"type":"string","description":"The application path to catalog service."},"clientNumber":{"type":"string","description":"The client number for the client creating the connection."},"disableSso":{"type":"boolean","description":"If you set this parameter to true, Amazon AppFlow bypasses the single sign-on (SSO) settings in your SAP account when it accesses your SAP OData instance."},"logonLanguage":{"type":"string","description":"The logon language of SAPOData instance."},"oAuthProperties":{"$ref":"#/types/aws-native:appflow:ConnectorProfileOAuthProperties","description":"The SAPOData OAuth properties required for OAuth type authentication."},"portNumber":{"type":"integer","description":"The port number of the SAPOData instance."},"privateLinkServiceName":{"type":"string","description":"The SAPOData Private Link service name to be used for private data transfers."}},"type":"object"},"aws-native:appflow:ConnectorProfileServiceNowConnectorProfileCredentials":{"properties":{"oAuth2Credentials":{"$ref":"#/types/aws-native:appflow:ConnectorProfileOAuth2Credentials","description":"The OAuth 2.0 credentials required to authenticate the user."},"password":{"type":"string","description":"The password that corresponds to the username."},"username":{"type":"string","description":"The name of the user."}},"type":"object"},"aws-native:appflow:ConnectorProfileServiceNowConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the ServiceNow resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileSingularConnectorProfileCredentials":{"properties":{"apiKey":{"type":"string","description":"A unique alphanumeric identifier used to authenticate a user, developer, or calling program to your API."}},"type":"object","required":["apiKey"]},"aws-native:appflow:ConnectorProfileSlackConnectorProfileCredentials":{"properties":{"accessToken":{"type":"string","description":"The credentials used to access protected resources."},"clientId":{"type":"string","description":"The identifier for the desired client."},"clientSecret":{"type":"string","description":"The client secret used by the oauth client to authenticate to the authorization server."},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest","description":"The oauth needed to request security tokens from the connector endpoint."}},"type":"object","required":["clientId","clientSecret"]},"aws-native:appflow:ConnectorProfileSlackConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Slack resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileSnowflakeConnectorProfileCredentials":{"properties":{"password":{"type":"string","description":"The password that corresponds to the username."},"username":{"type":"string","description":"The name of the user."}},"type":"object","required":["password","username"]},"aws-native:appflow:ConnectorProfileSnowflakeConnectorProfileProperties":{"properties":{"accountName":{"type":"string","description":"The name of the account."},"bucketName":{"type":"string","description":"The name of the Amazon S3 bucket associated with Snowflake."},"bucketPrefix":{"type":"string","description":"The bucket prefix that refers to the Amazon S3 bucket associated with Snowflake."},"privateLinkServiceName":{"type":"string","description":"The Snowflake Private Link service name to be used for private data transfers."},"region":{"type":"string","description":"The region of the Snowflake account."},"stage":{"type":"string","description":"The name of the Amazon S3 stage that was created while setting up an Amazon S3 stage in the\nSnowflake account. This is written in the following format: \u003c Database\u003e\u003c Schema\u003e\u003cStage Name\u003e."},"warehouse":{"type":"string","description":"The name of the Snowflake warehouse."}},"type":"object","required":["bucketName","stage","warehouse"]},"aws-native:appflow:ConnectorProfileTrendmicroConnectorProfileCredentials":{"properties":{"apiSecretKey":{"type":"string","description":"The Secret Access Key portion of the credentials."}},"type":"object","required":["apiSecretKey"]},"aws-native:appflow:ConnectorProfileVeevaConnectorProfileCredentials":{"properties":{"password":{"type":"string","description":"The password that corresponds to the username."},"username":{"type":"string","description":"The name of the user."}},"type":"object","required":["password","username"]},"aws-native:appflow:ConnectorProfileVeevaConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Veeva resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProfileZendeskConnectorProfileCredentials":{"properties":{"accessToken":{"type":"string","description":"The credentials used to access protected resources."},"clientId":{"type":"string","description":"The identifier for the desired client."},"clientSecret":{"type":"string","description":"The client secret used by the oauth client to authenticate to the authorization server."},"connectorOAuthRequest":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorOAuthRequest","description":"The oauth needed to request security tokens from the connector endpoint."}},"type":"object","required":["clientId","clientSecret"]},"aws-native:appflow:ConnectorProfileZendeskConnectorProfileProperties":{"properties":{"instanceUrl":{"type":"string","description":"The location of the Zendesk resource"}},"type":"object","required":["instanceUrl"]},"aws-native:appflow:ConnectorProvisioningConfig":{"description":"Contains information about the configuration of the connector being registered.","properties":{"lambda":{"$ref":"#/types/aws-native:appflow:ConnectorLambdaConnectorProvisioningConfig","description":"Contains information about the configuration of the lambda which is being registered as the connector."}},"type":"object"},"aws-native:appflow:FlowAggregationConfig":{"properties":{"aggregationType":{"$ref":"#/types/aws-native:appflow:FlowAggregationType","description":"Specifies whether Amazon AppFlow aggregates the flow records into a single file, or leave them unaggregated."},"targetFileSize":{"type":"integer","description":"The desired file size, in MB, for each output file that Amazon AppFlow writes to the flow destination. For each file, Amazon AppFlow attempts to achieve the size that you specify. The actual file sizes might differ from this target based on the number and size of the records that each file contains."}},"type":"object"},"aws-native:appflow:FlowAggregationType":{"type":"string","enum":[{"name":"None","value":"None"},{"name":"SingleFile","value":"SingleFile"}]},"aws-native:appflow:FlowAmplitudeConnectorOperator":{"type":"string","enum":[{"name":"Between","value":"BETWEEN"}]},"aws-native:appflow:FlowAmplitudeSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Amplitude flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowConnectorOperator":{"description":"Operation to be performed on provided source fields","properties":{"amplitude":{"$ref":"#/types/aws-native:appflow:FlowAmplitudeConnectorOperator","description":"The operation to be performed on the provided Amplitude source fields."},"customConnector":{"$ref":"#/types/aws-native:appflow:FlowOperator","description":"Operators supported by the custom connector."},"datadog":{"$ref":"#/types/aws-native:appflow:FlowDatadogConnectorOperator","description":"The operation to be performed on the provided Datadog source fields."},"dynatrace":{"$ref":"#/types/aws-native:appflow:FlowDynatraceConnectorOperator","description":"The operation to be performed on the provided Dynatrace source fields."},"googleAnalytics":{"$ref":"#/types/aws-native:appflow:FlowGoogleAnalyticsConnectorOperator","description":"The operation to be performed on the provided Google Analytics source fields."},"inforNexus":{"$ref":"#/types/aws-native:appflow:FlowInforNexusConnectorOperator","description":"The operation to be performed on the provided Infor Nexus source fields."},"marketo":{"$ref":"#/types/aws-native:appflow:FlowMarketoConnectorOperator","description":"The operation to be performed on the provided Marketo source fields."},"pardot":{"$ref":"#/types/aws-native:appflow:FlowPardotConnectorOperator","description":"The operation to be performed on the provided Salesforce Pardot source fields."},"s3":{"$ref":"#/types/aws-native:appflow:FlowS3ConnectorOperator","description":"The operation to be performed on the provided Amazon S3 source fields."},"salesforce":{"$ref":"#/types/aws-native:appflow:FlowSalesforceConnectorOperator","description":"The operation to be performed on the provided Salesforce source fields."},"sapoData":{"$ref":"#/types/aws-native:appflow:FlowSapoDataConnectorOperator","description":"The operation to be performed on the provided SAPOData source fields."},"serviceNow":{"$ref":"#/types/aws-native:appflow:FlowServiceNowConnectorOperator","description":"The operation to be performed on the provided ServiceNow source fields."},"singular":{"$ref":"#/types/aws-native:appflow:FlowSingularConnectorOperator","description":"The operation to be performed on the provided Singular source fields."},"slack":{"$ref":"#/types/aws-native:appflow:FlowSlackConnectorOperator","description":"The operation to be performed on the provided Slack source fields."},"trendmicro":{"$ref":"#/types/aws-native:appflow:FlowTrendmicroConnectorOperator","description":"The operation to be performed on the provided Trend Micro source fields."},"veeva":{"$ref":"#/types/aws-native:appflow:FlowVeevaConnectorOperator","description":"The operation to be performed on the provided Veeva source fields."},"zendesk":{"$ref":"#/types/aws-native:appflow:FlowZendeskConnectorOperator","description":"The operation to be performed on the provided Zendesk source fields."}},"type":"object"},"aws-native:appflow:FlowConnectorType":{"type":"string","enum":[{"name":"SapoData","value":"SAPOData"},{"name":"Salesforce","value":"Salesforce"},{"name":"Pardot","value":"Pardot"},{"name":"Singular","value":"Singular"},{"name":"Slack","value":"Slack"},{"name":"Redshift","value":"Redshift"},{"name":"S3","value":"S3"},{"name":"Marketo","value":"Marketo"},{"name":"Googleanalytics","value":"Googleanalytics"},{"name":"Zendesk","value":"Zendesk"},{"name":"Servicenow","value":"Servicenow"},{"name":"Datadog","value":"Datadog"},{"name":"Trendmicro","value":"Trendmicro"},{"name":"Snowflake","value":"Snowflake"},{"name":"Dynatrace","value":"Dynatrace"},{"name":"Infornexus","value":"Infornexus"},{"name":"Amplitude","value":"Amplitude"},{"name":"Veeva","value":"Veeva"},{"name":"CustomConnector","value":"CustomConnector"},{"name":"EventBridge","value":"EventBridge"},{"name":"Upsolver","value":"Upsolver"},{"name":"LookoutMetrics","value":"LookoutMetrics"}]},"aws-native:appflow:FlowCustomConnectorDestinationProperties":{"properties":{"customProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"The custom properties that are specific to the connector when it's used as a destination in the flow."},"entityName":{"type":"string","description":"The entity specified in the custom connector as a destination in the flow."},"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the custom connector as destination."},"idFieldNames":{"type":"array","items":{"type":"string"},"description":"List of fields used as ID when performing a write operation."},"writeOperationType":{"$ref":"#/types/aws-native:appflow:FlowWriteOperationType","description":"Specifies the type of write operation to be performed in the custom connector when it's used as destination."}},"type":"object","required":["entityName"]},"aws-native:appflow:FlowCustomConnectorSourceProperties":{"properties":{"customProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"Custom properties that are required to use the custom connector as a source."},"dataTransferApi":{"$ref":"#/types/aws-native:appflow:FlowCustomConnectorSourcePropertiesDataTransferApiProperties","description":"The API of the connector application that Amazon AppFlow uses to transfer your data."},"entityName":{"type":"string","description":"The entity specified in the custom connector as a source in the flow."}},"type":"object","required":["entityName"]},"aws-native:appflow:FlowCustomConnectorSourcePropertiesDataTransferApiProperties":{"description":"The API of the connector application that Amazon AppFlow uses to transfer your data.","properties":{"name":{"type":"string"},"type":{"$ref":"#/types/aws-native:appflow:FlowCustomConnectorSourcePropertiesDataTransferApiPropertiesType"}},"type":"object","required":["name","type"]},"aws-native:appflow:FlowCustomConnectorSourcePropertiesDataTransferApiPropertiesType":{"type":"string","enum":[{"name":"Sync","value":"SYNC"},{"name":"Async","value":"ASYNC"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:appflow:FlowDataTransferApi":{"type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Bulkv2","value":"BULKV2"},{"name":"RestSync","value":"REST_SYNC"}]},"aws-native:appflow:FlowDatadogConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"Between","value":"BETWEEN"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowDatadogSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Datadog flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowDestinationConnectorProperties":{"description":"Destination connector details","properties":{"customConnector":{"$ref":"#/types/aws-native:appflow:FlowCustomConnectorDestinationProperties","description":"The properties that are required to query the custom Connector."},"eventBridge":{"$ref":"#/types/aws-native:appflow:FlowEventBridgeDestinationProperties","description":"The properties required to query Amazon EventBridge."},"lookoutMetrics":{"$ref":"#/types/aws-native:appflow:FlowLookoutMetricsDestinationProperties","description":"The properties required to query Amazon Lookout for Metrics."},"marketo":{"$ref":"#/types/aws-native:appflow:FlowMarketoDestinationProperties","description":"The properties required to query Marketo."},"redshift":{"$ref":"#/types/aws-native:appflow:FlowRedshiftDestinationProperties","description":"The properties required to query Amazon Redshift."},"s3":{"$ref":"#/types/aws-native:appflow:FlowS3DestinationProperties","description":"The properties required to query Amazon S3."},"salesforce":{"$ref":"#/types/aws-native:appflow:FlowSalesforceDestinationProperties","description":"The properties required to query Salesforce."},"sapoData":{"$ref":"#/types/aws-native:appflow:FlowSapoDataDestinationProperties","description":"The properties required to query SAPOData."},"snowflake":{"$ref":"#/types/aws-native:appflow:FlowSnowflakeDestinationProperties","description":"The properties required to query Snowflake."},"upsolver":{"$ref":"#/types/aws-native:appflow:FlowUpsolverDestinationProperties","description":"The properties required to query Upsolver."},"zendesk":{"$ref":"#/types/aws-native:appflow:FlowZendeskDestinationProperties","description":"The properties required to query Zendesk."}},"type":"object"},"aws-native:appflow:FlowDestinationFlowConfig":{"description":"Configurations of destination connector.","properties":{"apiVersion":{"type":"string","description":"The API version that the destination connector uses."},"connectorProfileName":{"type":"string","description":"Name of destination connector profile"},"connectorType":{"$ref":"#/types/aws-native:appflow:FlowConnectorType","description":"Destination connector type"},"destinationConnectorProperties":{"$ref":"#/types/aws-native:appflow:FlowDestinationConnectorProperties","description":"Destination connector details"}},"type":"object","required":["connectorType","destinationConnectorProperties"]},"aws-native:appflow:FlowDynatraceConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"Between","value":"BETWEEN"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowDynatraceSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Dynatrace flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowErrorHandlingConfig":{"properties":{"bucketName":{"type":"string","description":"Specifies the name of the Amazon S3 bucket."},"bucketPrefix":{"type":"string","description":"Specifies the Amazon S3 bucket prefix."},"failOnFirstError":{"type":"boolean","description":"Specifies if the flow should fail after the first instance of a failure when attempting to place data in the destination."}},"type":"object"},"aws-native:appflow:FlowEventBridgeDestinationProperties":{"properties":{"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The object specified in the Amplitude flow source."},"object":{"type":"string","description":"The object specified in the Amazon EventBridge flow destination."}},"type":"object","required":["object"]},"aws-native:appflow:FlowFileType":{"type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Json","value":"JSON"},{"name":"Parquet","value":"PARQUET"}]},"aws-native:appflow:FlowGlueDataCatalog":{"description":"Trigger settings of the flow.","properties":{"databaseName":{"type":"string","description":"A string containing the value for the tag"},"roleArn":{"type":"string","description":"A string containing the value for the tag"},"tablePrefix":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["databaseName","roleArn","tablePrefix"]},"aws-native:appflow:FlowGoogleAnalyticsConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"Between","value":"BETWEEN"}]},"aws-native:appflow:FlowGoogleAnalyticsSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Google Analytics flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowIncrementalPullConfig":{"description":"Configuration for scheduled incremental data pull","properties":{"datetimeTypeFieldName":{"type":"string","description":"A field that specifies the date time or timestamp field as the criteria to use when importing incremental records from the source."}},"type":"object"},"aws-native:appflow:FlowInforNexusConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"Between","value":"BETWEEN"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowInforNexusSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Infor Nexus flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowLookoutMetricsDestinationProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Amazon Lookout for Metrics flow destination."}},"type":"object"},"aws-native:appflow:FlowMarketoConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowMarketoDestinationProperties":{"properties":{"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the destination. For example, this setting would determine if the flow should fail after one insertion error, or continue and attempt to insert every record regardless of the initial failure. `ErrorHandlingConfig` is a part of the destination connector details."},"object":{"type":"string","description":"The object specified in the Marketo flow destination."}},"type":"object","required":["object"]},"aws-native:appflow:FlowMarketoSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Marketo flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowMetadataCatalogConfig":{"description":"Configurations of metadata catalog of the flow.","properties":{"glueDataCatalog":{"$ref":"#/types/aws-native:appflow:FlowGlueDataCatalog","description":"Configurations of glue data catalog of the flow."}},"type":"object"},"aws-native:appflow:FlowOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Contains","value":"CONTAINS"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowOperatorPropertiesKeys":{"type":"string","enum":[{"name":"Value","value":"VALUE"},{"name":"Values","value":"VALUES"},{"name":"DataType","value":"DATA_TYPE"},{"name":"UpperBound","value":"UPPER_BOUND"},{"name":"LowerBound","value":"LOWER_BOUND"},{"name":"SourceDataType","value":"SOURCE_DATA_TYPE"},{"name":"DestinationDataType","value":"DESTINATION_DATA_TYPE"},{"name":"ValidationAction","value":"VALIDATION_ACTION"},{"name":"MaskValue","value":"MASK_VALUE"},{"name":"MaskLength","value":"MASK_LENGTH"},{"name":"TruncateLength","value":"TRUNCATE_LENGTH"},{"name":"MathOperationFieldsOrder","value":"MATH_OPERATION_FIELDS_ORDER"},{"name":"ConcatFormat","value":"CONCAT_FORMAT"},{"name":"SubfieldCategoryMap","value":"SUBFIELD_CATEGORY_MAP"},{"name":"ExcludeSourceFieldsList","value":"EXCLUDE_SOURCE_FIELDS_LIST"},{"name":"IncludeNewFields","value":"INCLUDE_NEW_FIELDS"},{"name":"OrderedPartitionKeysList","value":"ORDERED_PARTITION_KEYS_LIST"}]},"aws-native:appflow:FlowPardotConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NoOp","value":"NO_OP"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"}]},"aws-native:appflow:FlowPardotSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Salesforce Pardot flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowPathPrefix":{"type":"string","enum":[{"name":"ExecutionId","value":"EXECUTION_ID"},{"name":"SchemaVersion","value":"SCHEMA_VERSION"}]},"aws-native:appflow:FlowPrefixConfig":{"properties":{"pathPrefixHierarchy":{"type":"array","items":{"$ref":"#/types/aws-native:appflow:FlowPathPrefix"},"description":"Specifies whether the destination file path includes either or both of the following elements:\n\n- **EXECUTION_ID** - The ID that Amazon AppFlow assigns to the flow run.\n- **SCHEMA_VERSION** - The version number of your data schema. Amazon AppFlow assigns this version number. The version number increases by one when you change any of the following settings in your flow configuration:\n\n- Source-to-destination field mappings\n- Field data types\n- Partition keys"},"prefixFormat":{"$ref":"#/types/aws-native:appflow:FlowPrefixFormat","description":"Determines the level of granularity for the date and time that's included in the prefix."},"prefixType":{"$ref":"#/types/aws-native:appflow:FlowPrefixType","description":"Determines the format of the prefix, and whether it applies to the file name, file path, or both."}},"type":"object"},"aws-native:appflow:FlowPrefixFormat":{"type":"string","enum":[{"name":"Year","value":"YEAR"},{"name":"Month","value":"MONTH"},{"name":"Day","value":"DAY"},{"name":"Hour","value":"HOUR"},{"name":"Minute","value":"MINUTE"}]},"aws-native:appflow:FlowPrefixType":{"type":"string","enum":[{"name":"Filename","value":"FILENAME"},{"name":"Path","value":"PATH"},{"name":"PathAndFilename","value":"PATH_AND_FILENAME"}]},"aws-native:appflow:FlowRedshiftDestinationProperties":{"properties":{"bucketPrefix":{"type":"string","description":"The object key for the bucket in which Amazon AppFlow places the destination files."},"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the Amazon Redshift destination. For example, this setting would determine if the flow should fail after one insertion error, or continue and attempt to insert every record regardless of the initial failure. `ErrorHandlingConfig` is a part of the destination connector details."},"intermediateBucketName":{"type":"string","description":"The intermediate bucket that Amazon AppFlow uses when moving data into Amazon Redshift."},"object":{"type":"string","description":"The object specified in the Amazon Redshift flow destination."}},"type":"object","required":["intermediateBucketName","object"]},"aws-native:appflow:FlowS3ConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowS3DestinationProperties":{"properties":{"bucketName":{"type":"string","description":"The Amazon S3 bucket name in which Amazon AppFlow places the transferred data."},"bucketPrefix":{"type":"string","description":"The object key for the destination bucket in which Amazon AppFlow places the files."},"s3OutputFormatConfig":{"$ref":"#/types/aws-native:appflow:FlowS3OutputFormatConfig","description":"The configuration that determines how Amazon AppFlow should format the flow output data when Amazon S3 is used as the destination."}},"type":"object","required":["bucketName"]},"aws-native:appflow:FlowS3InputFormatConfig":{"properties":{"s3InputFileType":{"$ref":"#/types/aws-native:appflow:FlowS3InputFormatConfigS3InputFileType","description":"The file type that Amazon AppFlow gets from your Amazon S3 bucket."}},"type":"object"},"aws-native:appflow:FlowS3InputFormatConfigS3InputFileType":{"description":"The file type that Amazon AppFlow gets from your Amazon S3 bucket.","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Json","value":"JSON"}]},"aws-native:appflow:FlowS3OutputFormatConfig":{"properties":{"aggregationConfig":{"$ref":"#/types/aws-native:appflow:FlowAggregationConfig","description":"The aggregation settings that you can use to customize the output format of your flow data."},"fileType":{"$ref":"#/types/aws-native:appflow:FlowFileType","description":"Indicates the file type that Amazon AppFlow places in the Amazon S3 bucket."},"prefixConfig":{"$ref":"#/types/aws-native:appflow:FlowPrefixConfig","description":"Determines the prefix that Amazon AppFlow applies to the folder name in the Amazon S3 bucket. You can name folders according to the flow frequency and date."},"preserveSourceDataTyping":{"type":"boolean","description":"If your file output format is Parquet, use this parameter to set whether Amazon AppFlow preserves the data types in your source data when it writes the output to Amazon S3.\n\n- `true` : Amazon AppFlow preserves the data types when it writes to Amazon S3. For example, an integer or `1` in your source data is still an integer in your output.\n- `false` : Amazon AppFlow converts all of the source data into strings when it writes to Amazon S3. For example, an integer of `1` in your source data becomes the string `\"1\"` in the output."}},"type":"object"},"aws-native:appflow:FlowS3SourceProperties":{"properties":{"bucketName":{"type":"string","description":"The Amazon S3 bucket name where the source files are stored."},"bucketPrefix":{"type":"string","description":"The object key for the Amazon S3 bucket in which the source files are stored."},"s3InputFormatConfig":{"$ref":"#/types/aws-native:appflow:FlowS3InputFormatConfig","description":"When you use Amazon S3 as the source, the configuration format that you provide the flow input data."}},"type":"object","required":["bucketName","bucketPrefix"]},"aws-native:appflow:FlowSalesforceConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"Contains","value":"CONTAINS"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowSalesforceDestinationProperties":{"properties":{"dataTransferApi":{"$ref":"#/types/aws-native:appflow:FlowDataTransferApi","description":"Specifies which Salesforce API is used by Amazon AppFlow when your flow transfers data to Salesforce.\n\n- **AUTOMATIC** - The default. Amazon AppFlow selects which API to use based on the number of records that your flow transfers to Salesforce. If your flow transfers fewer than 1,000 records, Amazon AppFlow uses Salesforce REST API. If your flow transfers 1,000 records or more, Amazon AppFlow uses Salesforce Bulk API 2.0.\n\nEach of these Salesforce APIs structures data differently. If Amazon AppFlow selects the API automatically, be aware that, for recurring flows, the data output might vary from one flow run to the next. For example, if a flow runs daily, it might use REST API on one day to transfer 900 records, and it might use Bulk API 2.0 on the next day to transfer 1,100 records. For each of these flow runs, the respective Salesforce API formats the data differently. Some of the differences include how dates are formatted and null values are represented. Also, Bulk API 2.0 doesn't transfer Salesforce compound fields.\n\nBy choosing this option, you optimize flow performance for both small and large data transfers, but the tradeoff is inconsistent formatting in the output.\n- **BULKV2** - Amazon AppFlow uses only Salesforce Bulk API 2.0. This API runs asynchronous data transfers, and it's optimal for large sets of data. By choosing this option, you ensure that your flow writes consistent output, but you optimize performance only for large data transfers.\n\nNote that Bulk API 2.0 does not transfer Salesforce compound fields.\n- **REST_SYNC** - Amazon AppFlow uses only Salesforce REST API. By choosing this option, you ensure that your flow writes consistent output, but you decrease performance for large data transfers that are better suited for Bulk API 2.0. In some cases, if your flow attempts to transfer a vary large set of data, it might fail with a timed out error."},"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the Salesforce destination. For example, this setting would determine if the flow should fail after one insertion error, or continue and attempt to insert every record regardless of the initial failure. `ErrorHandlingConfig` is a part of the destination connector details."},"idFieldNames":{"type":"array","items":{"type":"string"},"description":"List of fields used as ID when performing a write operation."},"object":{"type":"string","description":"The object specified in the Salesforce flow destination."},"writeOperationType":{"$ref":"#/types/aws-native:appflow:FlowWriteOperationType","description":"This specifies the type of write operation to be performed in Salesforce. When the value is `UPSERT` , then `idFieldNames` is required."}},"type":"object","required":["object"]},"aws-native:appflow:FlowSalesforceSourceProperties":{"properties":{"dataTransferApi":{"$ref":"#/types/aws-native:appflow:FlowDataTransferApi","description":"Specifies which Salesforce API is used by Amazon AppFlow when your flow transfers data from Salesforce.\n\n- **AUTOMATIC** - The default. Amazon AppFlow selects which API to use based on the number of records that your flow transfers from Salesforce. If your flow transfers fewer than 1,000,000 records, Amazon AppFlow uses Salesforce REST API. If your flow transfers 1,000,000 records or more, Amazon AppFlow uses Salesforce Bulk API 2.0.\n\nEach of these Salesforce APIs structures data differently. If Amazon AppFlow selects the API automatically, be aware that, for recurring flows, the data output might vary from one flow run to the next. For example, if a flow runs daily, it might use REST API on one day to transfer 900,000 records, and it might use Bulk API 2.0 on the next day to transfer 1,100,000 records. For each of these flow runs, the respective Salesforce API formats the data differently. Some of the differences include how dates are formatted and null values are represented. Also, Bulk API 2.0 doesn't transfer Salesforce compound fields.\n\nBy choosing this option, you optimize flow performance for both small and large data transfers, but the tradeoff is inconsistent formatting in the output.\n- **BULKV2** - Amazon AppFlow uses only Salesforce Bulk API 2.0. This API runs asynchronous data transfers, and it's optimal for large sets of data. By choosing this option, you ensure that your flow writes consistent output, but you optimize performance only for large data transfers.\n\nNote that Bulk API 2.0 does not transfer Salesforce compound fields.\n- **REST_SYNC** - Amazon AppFlow uses only Salesforce REST API. By choosing this option, you ensure that your flow writes consistent output, but you decrease performance for large data transfers that are better suited for Bulk API 2.0. In some cases, if your flow attempts to transfer a vary large set of data, it might fail wituh a timed out error."},"enableDynamicFieldUpdate":{"type":"boolean","description":"The flag that enables dynamic fetching of new (recently added) fields in the Salesforce objects while running a flow."},"includeDeletedRecords":{"type":"boolean","description":"Indicates whether Amazon AppFlow includes deleted files in the flow run."},"object":{"type":"string","description":"The object specified in the Salesforce flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowSapoDataConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"Contains","value":"CONTAINS"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowSapoDataDestinationProperties":{"properties":{"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the destination. For example, this setting would determine if the flow should fail after one insertion error, or continue and attempt to insert every record regardless of the initial failure. `ErrorHandlingConfig` is a part of the destination connector details."},"idFieldNames":{"type":"array","items":{"type":"string"},"description":"List of fields used as ID when performing a write operation."},"objectPath":{"type":"string","description":"The object path specified in the SAPOData flow destination."},"successResponseHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowSuccessResponseHandlingConfig","description":"Determines how Amazon AppFlow handles the success response that it gets from the connector after placing data.\n\nFor example, this setting would determine where to write the response from a destination connector upon a successful insert operation."},"writeOperationType":{"$ref":"#/types/aws-native:appflow:FlowWriteOperationType","description":"The possible write operations in the destination connector. When this value is not provided, this defaults to the `INSERT` operation."}},"type":"object","required":["objectPath"]},"aws-native:appflow:FlowSapoDataPaginationConfig":{"description":"SAP Source connector page size","properties":{"maxPageSize":{"type":"integer","description":"The maximum number of records that Amazon AppFlow receives in each page of the response from your SAP application. For transfers of OData records, the maximum page size is 3,000. For transfers of data that comes from an ODP provider, the maximum page size is 10,000."}},"type":"object","required":["maxPageSize"]},"aws-native:appflow:FlowSapoDataParallelismConfig":{"description":"SAP Source connector parallelism factor","properties":{"maxParallelism":{"type":"integer","description":"The maximum number of processes that Amazon AppFlow runs at the same time when it retrieves your data from your SAP application."}},"type":"object","required":["maxParallelism"]},"aws-native:appflow:FlowSapoDataSourceProperties":{"properties":{"objectPath":{"type":"string","description":"The object path specified in the SAPOData flow source."},"paginationConfig":{"$ref":"#/types/aws-native:appflow:FlowSapoDataPaginationConfig","description":"Sets the page size for each concurrent process that transfers OData records from your SAP instance."},"parallelismConfig":{"$ref":"#/types/aws-native:appflow:FlowSapoDataParallelismConfig","description":"Sets the number of concurrent processes that transfers OData records from your SAP instance."}},"type":"object","required":["objectPath"]},"aws-native:appflow:FlowScheduledTriggerProperties":{"description":"Details required for scheduled trigger type","properties":{"dataPullMode":{"$ref":"#/types/aws-native:appflow:FlowScheduledTriggerPropertiesDataPullMode","description":"Specifies whether a scheduled flow has an incremental data transfer or a complete data transfer for each flow run."},"firstExecutionFrom":{"type":"number","description":"Specifies the date range for the records to import from the connector in the first flow run."},"flowErrorDeactivationThreshold":{"type":"integer","description":"Defines how many times a scheduled flow fails consecutively before Amazon AppFlow deactivates it."},"scheduleEndTime":{"type":"number","description":"The time at which the scheduled flow ends. The time is formatted as a timestamp that follows the ISO 8601 standard, such as `2022-04-27T13:00:00-07:00` ."},"scheduleExpression":{"type":"string","description":"The scheduling expression that determines the rate at which the schedule will run, for example `rate(5minutes)` ."},"scheduleOffset":{"type":"number","description":"Specifies the optional offset that is added to the time interval for a schedule-triggered flow."},"scheduleStartTime":{"type":"number","description":"The time at which the scheduled flow starts. The time is formatted as a timestamp that follows the ISO 8601 standard, such as `2022-04-26T13:00:00-07:00` ."},"timeZone":{"type":"string","description":"Specifies the time zone used when referring to the dates and times of a scheduled flow, such as `America/New_York` . This time zone is only a descriptive label. It doesn't affect how Amazon AppFlow interprets the timestamps that you specify to schedule the flow.\n\nIf you want to schedule a flow by using times in a particular time zone, indicate the time zone as a UTC offset in your timestamps. For example, the UTC offsets for the `America/New_York` timezone are `-04:00` EDT and `-05:00 EST` ."}},"type":"object","required":["scheduleExpression"]},"aws-native:appflow:FlowScheduledTriggerPropertiesDataPullMode":{"description":"Specifies whether a scheduled flow has an incremental data transfer or a complete data transfer for each flow run.","type":"string","enum":[{"name":"Incremental","value":"Incremental"},{"name":"Complete","value":"Complete"}]},"aws-native:appflow:FlowServiceNowConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"Contains","value":"CONTAINS"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowServiceNowSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the ServiceNow flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowSingularConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowSingularSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Singular flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowSlackConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"Between","value":"BETWEEN"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowSlackSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Slack flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowSnowflakeDestinationProperties":{"properties":{"bucketPrefix":{"type":"string","description":"The object key for the destination bucket in which Amazon AppFlow places the files."},"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the Snowflake destination. For example, this setting would determine if the flow should fail after one insertion error, or continue and attempt to insert every record regardless of the initial failure. `ErrorHandlingConfig` is a part of the destination connector details."},"intermediateBucketName":{"type":"string","description":"The intermediate bucket that Amazon AppFlow uses when moving data into Snowflake."},"object":{"type":"string","description":"The object specified in the Snowflake flow destination."}},"type":"object","required":["intermediateBucketName","object"]},"aws-native:appflow:FlowSourceConnectorProperties":{"description":"Source connector details required to query a connector","properties":{"amplitude":{"$ref":"#/types/aws-native:appflow:FlowAmplitudeSourceProperties","description":"Specifies the information that is required for querying Amplitude."},"customConnector":{"$ref":"#/types/aws-native:appflow:FlowCustomConnectorSourceProperties","description":"The properties that are applied when the custom connector is being used as a source."},"datadog":{"$ref":"#/types/aws-native:appflow:FlowDatadogSourceProperties","description":"Specifies the information that is required for querying Datadog."},"dynatrace":{"$ref":"#/types/aws-native:appflow:FlowDynatraceSourceProperties","description":"Specifies the information that is required for querying Dynatrace."},"googleAnalytics":{"$ref":"#/types/aws-native:appflow:FlowGoogleAnalyticsSourceProperties","description":"Specifies the information that is required for querying Google Analytics."},"inforNexus":{"$ref":"#/types/aws-native:appflow:FlowInforNexusSourceProperties","description":"Specifies the information that is required for querying Infor Nexus."},"marketo":{"$ref":"#/types/aws-native:appflow:FlowMarketoSourceProperties","description":"Specifies the information that is required for querying Marketo."},"pardot":{"$ref":"#/types/aws-native:appflow:FlowPardotSourceProperties","description":"Specifies the information that is required for querying Salesforce Pardot."},"s3":{"$ref":"#/types/aws-native:appflow:FlowS3SourceProperties","description":"Specifies the information that is required for querying Amazon S3."},"salesforce":{"$ref":"#/types/aws-native:appflow:FlowSalesforceSourceProperties","description":"Specifies the information that is required for querying Salesforce."},"sapoData":{"$ref":"#/types/aws-native:appflow:FlowSapoDataSourceProperties","description":"The properties that are applied when using SAPOData as a flow source."},"serviceNow":{"$ref":"#/types/aws-native:appflow:FlowServiceNowSourceProperties","description":"Specifies the information that is required for querying ServiceNow."},"singular":{"$ref":"#/types/aws-native:appflow:FlowSingularSourceProperties","description":"Specifies the information that is required for querying Singular."},"slack":{"$ref":"#/types/aws-native:appflow:FlowSlackSourceProperties","description":"Specifies the information that is required for querying Slack."},"trendmicro":{"$ref":"#/types/aws-native:appflow:FlowTrendmicroSourceProperties","description":"Specifies the information that is required for querying Trend Micro."},"veeva":{"$ref":"#/types/aws-native:appflow:FlowVeevaSourceProperties","description":"Specifies the information that is required for querying Veeva."},"zendesk":{"$ref":"#/types/aws-native:appflow:FlowZendeskSourceProperties","description":"Specifies the information that is required for querying Zendesk."}},"type":"object"},"aws-native:appflow:FlowSourceFlowConfig":{"description":"Configurations of Source connector of the flow.","properties":{"apiVersion":{"type":"string","description":"The API version that the destination connector uses."},"connectorProfileName":{"type":"string","description":"Name of source connector profile"},"connectorType":{"$ref":"#/types/aws-native:appflow:FlowConnectorType","description":"Type of source connector"},"incrementalPullConfig":{"$ref":"#/types/aws-native:appflow:FlowIncrementalPullConfig","description":"Configuration for scheduled incremental data pull"},"sourceConnectorProperties":{"$ref":"#/types/aws-native:appflow:FlowSourceConnectorProperties","description":"Source connector details required to query a connector"}},"type":"object","required":["connectorType","sourceConnectorProperties"]},"aws-native:appflow:FlowStatus":{"description":"Flow activation status for Scheduled- and Event-triggered flows","type":"string","enum":[{"name":"Active","value":"Active"},{"name":"Suspended","value":"Suspended"},{"name":"Draft","value":"Draft"}]},"aws-native:appflow:FlowSuccessResponseHandlingConfig":{"properties":{"bucketName":{"type":"string","description":"The name of the Amazon S3 bucket."},"bucketPrefix":{"type":"string","description":"The Amazon S3 bucket prefix."}},"type":"object"},"aws-native:appflow:FlowTag":{"description":"A label for tagging AppFlow resources","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:appflow:FlowTask":{"properties":{"connectorOperator":{"$ref":"#/types/aws-native:appflow:FlowConnectorOperator","description":"Operation to be performed on provided source fields"},"destinationField":{"type":"string","description":"A field value on which source field should be validated"},"sourceFields":{"type":"array","items":{"type":"string"},"description":"Source fields on which particular task will be applied"},"taskProperties":{"type":"array","items":{"$ref":"#/types/aws-native:appflow:FlowTaskPropertiesObject"},"description":"A Map used to store task related info"},"taskType":{"$ref":"#/types/aws-native:appflow:FlowTaskType","description":"Type of task"}},"type":"object","required":["sourceFields","taskType"]},"aws-native:appflow:FlowTaskPropertiesObject":{"description":"An object used to store task related info","properties":{"key":{"$ref":"#/types/aws-native:appflow:FlowOperatorPropertiesKeys","description":"The task property key."},"value":{"type":"string","description":"The task property value."}},"type":"object","required":["key","value"]},"aws-native:appflow:FlowTaskType":{"type":"string","enum":[{"name":"Arithmetic","value":"Arithmetic"},{"name":"Filter","value":"Filter"},{"name":"Map","value":"Map"},{"name":"MapAll","value":"Map_all"},{"name":"Mask","value":"Mask"},{"name":"Merge","value":"Merge"},{"name":"Passthrough","value":"Passthrough"},{"name":"Truncate","value":"Truncate"},{"name":"Validate","value":"Validate"},{"name":"Partition","value":"Partition"}]},"aws-native:appflow:FlowTrendmicroConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowTrendmicroSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Trend Micro flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowTriggerConfig":{"description":"Trigger settings of the flow.","properties":{"triggerProperties":{"$ref":"#/types/aws-native:appflow:FlowScheduledTriggerProperties","description":"Details required based on the type of trigger"},"triggerType":{"$ref":"#/types/aws-native:appflow:FlowTriggerType","description":"Trigger type of the flow"}},"type":"object","required":["triggerType"]},"aws-native:appflow:FlowTriggerType":{"type":"string","enum":[{"name":"Scheduled","value":"Scheduled"},{"name":"Event","value":"Event"},{"name":"OnDemand","value":"OnDemand"}]},"aws-native:appflow:FlowUpsolverDestinationProperties":{"properties":{"bucketName":{"type":"string","description":"The Upsolver Amazon S3 bucket name in which Amazon AppFlow places the transferred data."},"bucketPrefix":{"type":"string","description":"The object key for the destination Upsolver Amazon S3 bucket in which Amazon AppFlow places the files."},"s3OutputFormatConfig":{"$ref":"#/types/aws-native:appflow:FlowUpsolverS3OutputFormatConfig","description":"The configuration that determines how data is formatted when Upsolver is used as the flow destination."}},"type":"object","required":["bucketName","s3OutputFormatConfig"]},"aws-native:appflow:FlowUpsolverS3OutputFormatConfig":{"properties":{"aggregationConfig":{"$ref":"#/types/aws-native:appflow:FlowAggregationConfig","description":"The aggregation settings that you can use to customize the output format of your flow data."},"fileType":{"$ref":"#/types/aws-native:appflow:FlowFileType","description":"Indicates the file type that Amazon AppFlow places in the Upsolver Amazon S3 bucket."},"prefixConfig":{"$ref":"#/types/aws-native:appflow:FlowPrefixConfig","description":"Specifies elements that Amazon AppFlow includes in the file and folder names in the flow destination."}},"type":"object","required":["prefixConfig"]},"aws-native:appflow:FlowVeevaConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowVeevaSourceProperties":{"properties":{"documentType":{"type":"string","description":"The document type specified in the Veeva document extract flow."},"includeAllVersions":{"type":"boolean","description":"Boolean value to include All Versions of files in Veeva document extract flow."},"includeRenditions":{"type":"boolean","description":"Boolean value to include file renditions in Veeva document extract flow."},"includeSourceFiles":{"type":"boolean","description":"Boolean value to include source files in Veeva document extract flow."},"object":{"type":"string","description":"The object specified in the Veeva flow source."}},"type":"object","required":["object"]},"aws-native:appflow:FlowWriteOperationType":{"type":"string","enum":[{"name":"Insert","value":"INSERT"},{"name":"Upsert","value":"UPSERT"},{"name":"Update","value":"UPDATE"},{"name":"Delete","value":"DELETE"}]},"aws-native:appflow:FlowZendeskConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:appflow:FlowZendeskDestinationProperties":{"properties":{"errorHandlingConfig":{"$ref":"#/types/aws-native:appflow:FlowErrorHandlingConfig","description":"The settings that determine how Amazon AppFlow handles an error when placing data in the destination. For example, this setting would determine if the flow should fail after one insertion error, or continue and attempt to insert every record regardless of the initial failure. `ErrorHandlingConfig` is a part of the destination connector details."},"idFieldNames":{"type":"array","items":{"type":"string"},"description":"List of fields used as ID when performing a write operation."},"object":{"type":"string","description":"The object specified in the Zendesk flow destination."},"writeOperationType":{"$ref":"#/types/aws-native:appflow:FlowWriteOperationType","description":"The possible write operations in the destination connector. When this value is not provided, this defaults to the `INSERT` operation."}},"type":"object","required":["object"]},"aws-native:appflow:FlowZendeskSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Zendesk flow source."}},"type":"object","required":["object"]},"aws-native:appintegrations:ApplicationConfig":{"properties":{"contactHandling":{"$ref":"#/types/aws-native:appintegrations:ApplicationContactHandling"}},"type":"object"},"aws-native:appintegrations:ApplicationContactHandling":{"properties":{"scope":{"$ref":"#/types/aws-native:appintegrations:ApplicationContactHandlingScope"}},"type":"object","required":["scope"]},"aws-native:appintegrations:ApplicationContactHandlingScope":{"type":"string","enum":[{"name":"CrossContacts","value":"CROSS_CONTACTS"},{"name":"PerContact","value":"PER_CONTACT"}]},"aws-native:appintegrations:ApplicationExternalUrlConfig":{"properties":{"accessUrl":{"type":"string","description":"The URL to access the application."},"approvedOrigins":{"type":"array","items":{"type":"string"},"description":"Additional URLs to allow list if different than the access URL."}},"type":"object","required":["accessUrl"]},"aws-native:appintegrations:ApplicationIframeConfig":{"properties":{"allow":{"type":"array","items":{"type":"string"}},"sandbox":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:appintegrations:ApplicationSourceConfigProperties":{"description":"Application source config","properties":{"externalUrlConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationExternalUrlConfig","description":"The external URL source for the application."}},"type":"object","required":["externalUrlConfig"]},"aws-native:appintegrations:ApplicationTag":{"description":"A label for tagging Application resources","properties":{"key":{"type":"string","description":"A key to identify the tag."},"value":{"type":"string","description":"Corresponding tag value for the key."}},"type":"object","required":["key","value"]},"aws-native:appintegrations:DataIntegrationFileConfiguration":{"description":"The configuration for what files should be pulled from the source.","properties":{"filters":{"type":"object","additionalProperties":{"type":"array","items":{"type":"string"}},"description":"Restrictions for what files should be pulled from the source."},"folders":{"type":"array","items":{"type":"string"},"description":"Identifiers for the source folders to pull all files from recursively."}},"type":"object","required":["folders"]},"aws-native:appintegrations:DataIntegrationScheduleConfig":{"properties":{"firstExecutionFrom":{"type":"string","description":"The start date for objects to import in the first flow run. Epoch or ISO timestamp format is supported."},"object":{"type":"string","description":"The name of the object to pull from the data source."},"scheduleExpression":{"type":"string","description":"How often the data should be pulled from data source."}},"type":"object","required":["scheduleExpression"]},"aws-native:appintegrations:DataIntegrationTag":{"description":"A label for tagging DataIntegration resources","properties":{"key":{"type":"string","description":"A key to identify the tag."},"value":{"type":"string","description":"Corresponding tag value for the key."}},"type":"object","required":["key","value"]},"aws-native:appintegrations:EventIntegrationEventFilter":{"properties":{"source":{"type":"string","description":"The source of the events."}},"type":"object","required":["source"]},"aws-native:appintegrations:EventIntegrationTag":{"properties":{"key":{"type":"string","description":"A key to identify the tag."},"value":{"type":"string","description":"Corresponding tag value for the key."}},"type":"object","required":["key","value"]},"aws-native:applicationautoscaling:ScalableTargetAction":{"description":"``ScalableTargetAction`` specifies the minimum and maximum capacity for the ``ScalableTargetAction`` property of the [AWS::ApplicationAutoScaling::ScalableTarget ScheduledAction](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalabletarget-scheduledaction.html) property type.","properties":{"maxCapacity":{"type":"integer","description":"The maximum capacity."},"minCapacity":{"type":"integer","description":"The minimum capacity."}},"type":"object"},"aws-native:applicationautoscaling:ScalableTargetScheduledAction":{"description":"``ScheduledAction`` is a property of the [AWS::ApplicationAutoScaling::ScalableTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationautoscaling-scalabletarget.html) resource that specifies a scheduled action for a scalable target. \n For more information, see [Scheduled scaling](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-scheduled-scaling.html) in the *Application Auto Scaling User Guide*.","properties":{"endTime":{"type":"string","description":"The date and time that the action is scheduled to end, in UTC."},"scalableTargetAction":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetAction","description":"The new minimum and maximum capacity. You can set both values or just one. At the scheduled time, if the current capacity is below the minimum capacity, Application Auto Scaling scales out to the minimum capacity. If the current capacity is above the maximum capacity, Application Auto Scaling scales in to the maximum capacity."},"schedule":{"type":"string","description":"The schedule for this action. The following formats are supported:\n  +  At expressions - \"``at(yyyy-mm-ddThh:mm:ss)``\"\n  +  Rate expressions - \"``rate(valueunit)``\"\n  +  Cron expressions - \"``cron(fields)``\"\n  \n At expressions are useful for one-time schedules. Cron expressions are useful for scheduled actions that run periodically at a specified date and time, and rate expressions are useful for scheduled actions that run at a regular interval.\n At and cron expressions use Universal Coordinated Time (UTC) by default.\n The cron format consists of six fields separated by white spaces: [Minutes] [Hours] [Day_of_Month] [Month] [Day_of_Week] [Year].\n For rate expressions, *value* is a positive integer and *unit* is ``minute`` | ``minutes`` | ``hour`` | ``hours`` | ``day`` | ``days``."},"scheduledActionName":{"type":"string","description":"The name of the scheduled action. This name must be unique among all other scheduled actions on the specified scalable target."},"startTime":{"type":"string","description":"The date and time that the action is scheduled to begin, in UTC."},"timezone":{"type":"string","description":"The time zone used when referring to the date and time of a scheduled action, when the scheduled action uses an at or cron expression."}},"type":"object","required":["schedule","scheduledActionName"]},"aws-native:applicationautoscaling:ScalableTargetSuspendedState":{"description":"``SuspendedState`` is a property of the [AWS::ApplicationAutoScaling::ScalableTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationautoscaling-scalabletarget.html) resource that specifies whether the scaling activities for a scalable target are in a suspended state.\n For more information, see [Suspending and resuming scaling](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-suspend-resume-scaling.html) in the *Application Auto Scaling User Guide*.","properties":{"dynamicScalingInSuspended":{"type":"boolean","description":"Whether scale in by a target tracking scaling policy or a step scaling policy is suspended. Set the value to ``true`` if you don't want Application Auto Scaling to remove capacity when a scaling policy is triggered. The default is ``false``."},"dynamicScalingOutSuspended":{"type":"boolean","description":"Whether scale out by a target tracking scaling policy or a step scaling policy is suspended. Set the value to ``true`` if you don't want Application Auto Scaling to add capacity when a scaling policy is triggered. The default is ``false``."},"scheduledScalingSuspended":{"type":"boolean","description":"Whether scheduled scaling is suspended. Set the value to ``true`` if you don't want Application Auto Scaling to add or remove capacity by initiating scheduled actions. The default is ``false``."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyCustomizedMetricSpecification":{"description":"Contains customized metric specification information for a target tracking scaling policy for Application Auto Scaling. \n For information about the available metrics for a service, see [services that publish CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html) in the *Amazon CloudWatch User Guide*.\n To create your customized metric specification:\n  +  Add values for each required parameter from CloudWatch. You can use an existing metric, or a new metric that you create. To use your own metric, you must first publish the metric to CloudWatch. For more information, see [Publish custom metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publishingMetrics.html) in the *Amazon CloudWatch User Guide*.\n  +  Choose a metric that changes proportionally with capacity. The value of the metric should increase or decrease in inverse proportion to the number of capacity units. That is, the value of the metric should decrease when capacity increases, and increase when capacity decreases. \n  \n For an example of how creating new metrics can be useful, see [Scaling based on Amazon SQS](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-using-sqs-queue.html) in the *Amazon EC2 Auto Scaling User Guide*. This topic mentions Auto Scaling groups, but the same scenario for Amazon SQS can apply to the target tracking scaling policies that you create for a Spot Fleet by using Application Auto Scaling.\n For more information about the CloudWatch terminology below, see [Amazon CloudWatch concepts](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html). \n ``CustomizedMetricSpecification`` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingScalingPolicyConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingscalingpolicyconfiguration.html) property type.","properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyMetricDimension"},"description":"The dimensions of the metric. \n Conditional: If you published your metric with dimensions, you must specify the same dimensions in your scaling policy."},"metricName":{"type":"string","description":"The name of the metric. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that's returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html)."},"metrics":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetricDataQuery"},"description":"The metrics to include in the target tracking scaling policy, as a metric data query. This can include both raw metric and metric math expressions."},"namespace":{"type":"string","description":"The namespace of the metric."},"statistic":{"type":"string","description":"The statistic of the metric."},"unit":{"type":"string","description":"The unit of the metric. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference*."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyMetricDimension":{"description":"``MetricDimension`` specifies a name/value pair that is part of the identity of a CloudWatch metric for the ``Dimensions`` property of the [AWS::ApplicationAutoScaling::ScalingPolicy CustomizedMetricSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-customizedmetricspecification.html) property type. Duplicate dimensions are not allowed.","properties":{"name":{"type":"string","description":"The name of the dimension."},"value":{"type":"string","description":"The value of the dimension."}},"type":"object","required":["name","value"]},"aws-native:applicationautoscaling:ScalingPolicyPredefinedMetricSpecification":{"description":"Contains predefined metric specification information for a target tracking scaling policy for Application Auto Scaling.\n ``PredefinedMetricSpecification`` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingScalingPolicyConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingscalingpolicyconfiguration.html) property type.","properties":{"predefinedMetricType":{"type":"string","description":"The metric type. The ``ALBRequestCountPerTarget`` metric type applies only to Spot fleet requests and ECS services."},"resourceLabel":{"type":"string","description":"Identifies the resource associated with the metric type. You can't specify a resource label unless the metric type is ``ALBRequestCountPerTarget`` and there is a target group attached to the Spot Fleet or ECS service.\n You create the resource label by appending the final portion of the load balancer ARN and the final portion of the target group ARN into a single value, separated by a forward slash (/). The format of the resource label is:\n ``app/my-alb/778d41231b141a0f/targetgroup/my-alb-target-group/943f017f100becff``.\n Where:\n  +  app/\u003cload-balancer-name\u003e/\u003cload-balancer-id\u003e is the final portion of the load balancer ARN\n  +  targetgroup/\u003ctarget-group-name\u003e/\u003ctarget-group-id\u003e is the final portion of the target group ARN.\n  \n To find the ARN for an Application Load Balancer, use the [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operation. To find the ARN for the target group, use the [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) API operation."}},"type":"object","required":["predefinedMetricType"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedCapacityMetric":{"description":"Represents a CloudWatch metric of your choosing for a predictive scaling policy.","properties":{"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDataQuery"},"description":"One or more metric data queries to provide data points for a metric specification."}},"type":"object","required":["metricDataQueries"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedLoadMetric":{"description":"The customized load metric specification.","properties":{"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDataQuery"}}},"type":"object","required":["metricDataQueries"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedScalingMetric":{"description":"One or more metric data queries to provide data points for a metric specification.","properties":{"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDataQuery"},"description":"One or more metric data queries to provide data points for a metric specification."}},"type":"object","required":["metricDataQueries"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetric":{"description":"Describes the scaling metric.","properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDimension"},"description":"Describes the dimensions of the metric."},"metricName":{"type":"string","description":"The name of the metric."},"namespace":{"type":"string","description":"The namespace of the metric."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDataQuery":{"description":"The metric data to return. Also defines whether this call is returning data for one metric only, or whether it is performing a math expression on the values of returned metric statistics to create a new time series. A time series is a series of data points, each of which is associated with a timestamp.","properties":{"expression":{"type":"string","description":"The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the ``Id`` of the other metrics to refer to those metrics, and can also use the ``Id`` of other expressions to use the result of those expressions. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."},"id":{"type":"string","description":"A short name that identifies the object's results in the response. This name must be unique among all ``MetricDataQuery`` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter."},"label":{"type":"string","description":"A human-readable label for this metric or expression. This is especially useful if this is a math expression, so that you know what the value represents."},"metricStat":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricStat","description":"Information about the metric data to return. \n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."},"returnData":{"type":"boolean","description":"Indicates whether to return the timestamps and raw data values of this metric. \n If you use any math expressions, specify ``true`` for this value for only the final math expression that the metric specification is based on. You must specify ``false`` for ``ReturnData`` for all the other metrics and expressions used in the metric specification.\n If you are only retrieving metrics and not performing any math expressions, do not specify anything for ``ReturnData``. This sets it to its default (``true``)."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricDimension":{"description":"Describes the dimension of a metric.","properties":{"name":{"type":"string","description":"The name of the dimension."},"value":{"type":"string","description":"The value of the dimension."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricSpecification":{"description":"This structure specifies the metrics and target utilization settings for a predictive scaling policy. \n You must specify either a metric pair, or a load metric and a scaling metric individually. Specifying a metric pair instead of individual metrics provides a simpler way to configure metrics for a scaling policy. You choose the metric pair, and the policy automatically knows the correct sum and average statistics to use for the load metric and the scaling metric.","properties":{"customizedCapacityMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedCapacityMetric","description":"The customized capacity metric specification."},"customizedLoadMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedLoadMetric","description":"The customized load metric specification."},"customizedScalingMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingCustomizedScalingMetric","description":"The customized scaling metric specification."},"predefinedLoadMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedLoadMetric","description":"The predefined load metric specification."},"predefinedMetricPairSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedMetricPair","description":"The predefined metric pair specification that determines the appropriate scaling metric and load metric to use."},"predefinedScalingMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedScalingMetric","description":"The predefined scaling metric specification."},"targetValue":{"type":"number","description":"Specifies the target utilization."}},"type":"object","required":["targetValue"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricStat":{"description":"This structure defines the CloudWatch metric to return, along with the statistic and unit.","properties":{"metric":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetric","description":"The CloudWatch metric to return, including the metric name, namespace, and dimensions. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html)."},"stat":{"type":"string","description":"The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide*. \n The most commonly used metrics for predictive scaling are ``Average`` and ``Sum``."},"unit":{"type":"string","description":"The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference*."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPolicyConfiguration":{"description":"Represents a predictive scaling policy configuration. Predictive scaling is supported on Amazon ECS services.","properties":{"maxCapacityBreachBehavior":{"type":"string","description":"Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity. Defaults to ``HonorMaxCapacity`` if not specified."},"maxCapacityBuffer":{"type":"integer","description":"The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55. \n Required if the ``MaxCapacityBreachBehavior`` property is set to ``IncreaseMaxCapacity``, and cannot be used otherwise."},"metricSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingMetricSpecification"},"description":"This structure includes the metrics and target utilization to use for predictive scaling. \n This is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric."},"mode":{"type":"string","description":"The predictive scaling mode. Defaults to ``ForecastOnly`` if not specified."},"schedulingBufferTime":{"type":"integer","description":"The amount of time, in seconds, that the start time can be advanced. \n The value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified."}},"type":"object","required":["metricSpecifications"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedLoadMetric":{"description":"Describes a load metric for a predictive scaling policy. \n When returned in the output of ``DescribePolicies``, it indicates that a predictive scaling policy uses individually specified load and scaling metrics instead of a metric pair.\n The following predefined metrics are available for predictive scaling:\n  +   ``ECSServiceAverageCPUUtilization`` \n  +   ``ECSServiceAverageMemoryUtilization`` \n  +   ``ECSServiceCPUUtilization`` \n  +   ``ECSServiceMemoryUtilization`` \n  +   ``ECSServiceTotalCPUUtilization`` \n  +   ``ECSServiceTotalMemoryUtilization`` \n  +   ``ALBRequestCount`` \n  +   ``ALBRequestCountPerTarget`` \n  +   ``TotalALBRequestCount``","properties":{"predefinedMetricType":{"type":"string","description":"The metric type."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a target group."}},"type":"object","required":["predefinedMetricType"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedMetricPair":{"description":"Represents a metric pair for a predictive scaling policy. \n The following predefined metrics are available for predictive scaling:\n  +   ``ECSServiceAverageCPUUtilization`` \n  +   ``ECSServiceAverageMemoryUtilization`` \n  +   ``ECSServiceCPUUtilization`` \n  +   ``ECSServiceMemoryUtilization`` \n  +   ``ECSServiceTotalCPUUtilization`` \n  +   ``ECSServiceTotalMemoryUtilization`` \n  +   ``ALBRequestCount`` \n  +   ``ALBRequestCountPerTarget`` \n  +   ``TotalALBRequestCount``","properties":{"predefinedMetricType":{"type":"string","description":"Indicates which metrics to use. There are two different types of metrics for each metric type: one is a load metric and one is a scaling metric."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a specific target group from which to determine the total and average request count."}},"type":"object","required":["predefinedMetricType"]},"aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPredefinedScalingMetric":{"description":"Describes a scaling metric for a predictive scaling policy. \n When returned in the output of ``DescribePolicies``, it indicates that a predictive scaling policy uses individually specified load and scaling metrics instead of a metric pair.\n The following predefined metrics are available for predictive scaling:\n  +   ``ECSServiceAverageCPUUtilization`` \n  +   ``ECSServiceAverageMemoryUtilization`` \n  +   ``ECSServiceCPUUtilization`` \n  +   ``ECSServiceMemoryUtilization`` \n  +   ``ECSServiceTotalCPUUtilization`` \n  +   ``ECSServiceTotalMemoryUtilization`` \n  +   ``ALBRequestCount`` \n  +   ``ALBRequestCountPerTarget`` \n  +   ``TotalALBRequestCount``","properties":{"predefinedMetricType":{"type":"string","description":"The metric type."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a specific target group from which to determine the average request count."}},"type":"object","required":["predefinedMetricType"]},"aws-native:applicationautoscaling:ScalingPolicyStepAdjustment":{"description":"``StepAdjustment`` specifies a step adjustment for the ``StepAdjustments`` property of the [AWS::ApplicationAutoScaling::ScalingPolicy StepScalingPolicyConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-stepscalingpolicyconfiguration.html) property type. \n For the following examples, suppose that you have an alarm with a breach threshold of 50: \n  +  To trigger a step adjustment when the metric is greater than or equal to 50 and less than 60, specify a lower bound of 0 and an upper bound of 10. \n  +  To trigger a step adjustment when the metric is greater than 40 and less than or equal to 50, specify a lower bound of -10 and an upper bound of 0. \n  \n For more information, see [Step adjustments](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-step-scaling-policies.html#as-scaling-steps) in the *Application Auto Scaling User Guide*.\n You can find a sample template snippet in the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationautoscaling-scalingpolicy.html#aws-resource-applicationautoscaling-scalingpolicy--examples) section of the ``AWS::ApplicationAutoScaling::ScalingPolicy`` documentation.","properties":{"metricIntervalLowerBound":{"type":"number","description":"The lower bound for the difference between the alarm threshold and the CloudWatch metric. If the metric value is above the breach threshold, the lower bound is inclusive (the metric must be greater than or equal to the threshold plus the lower bound). Otherwise, it is exclusive (the metric must be greater than the threshold plus the lower bound). A null value indicates negative infinity.\n You must specify at least one upper or lower bound."},"metricIntervalUpperBound":{"type":"number","description":"The upper bound for the difference between the alarm threshold and the CloudWatch metric. If the metric value is above the breach threshold, the upper bound is exclusive (the metric must be less than the threshold plus the upper bound). Otherwise, it is inclusive (the metric must be less than or equal to the threshold plus the upper bound). A null value indicates positive infinity.\n You must specify at least one upper or lower bound."},"scalingAdjustment":{"type":"integer","description":"The amount by which to scale. The adjustment is based on the value that you specified in the ``AdjustmentType`` property (either an absolute number or a percentage). A positive value adds to the current capacity and a negative number subtracts from the current capacity."}},"type":"object","required":["scalingAdjustment"]},"aws-native:applicationautoscaling:ScalingPolicyStepScalingPolicyConfiguration":{"description":"``StepScalingPolicyConfiguration`` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationautoscaling-scalingpolicy.html) resource that specifies a step scaling policy configuration for Application Auto Scaling. \n For more information, see [Step scaling policies](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-step-scaling-policies.html) in the *Application Auto Scaling User Guide*.","properties":{"adjustmentType":{"type":"string","description":"Specifies whether the ``ScalingAdjustment`` value in the ``StepAdjustment`` property is an absolute number or a percentage of the current capacity."},"cooldown":{"type":"integer","description":"The amount of time, in seconds, to wait for a previous scaling activity to take effect. If not specified, the default value is 300. For more information, see [Cooldown period](https://docs.aws.amazon.com/autoscaling/application/userguide/step-scaling-policy-overview.html#step-scaling-cooldown) in the *Application Auto Scaling User Guide*."},"metricAggregationType":{"type":"string","description":"The aggregation type for the CloudWatch metrics. Valid values are ``Minimum``, ``Maximum``, and ``Average``. If the aggregation type is null, the value is treated as ``Average``."},"minAdjustmentMagnitude":{"type":"integer","description":"The minimum value to scale by when the adjustment type is ``PercentChangeInCapacity``. For example, suppose that you create a step scaling policy to scale out an Amazon ECS service by 25 percent and you specify a ``MinAdjustmentMagnitude`` of 2. If the service has 4 tasks and the scaling policy is performed, 25 percent of 4 is 1. However, because you specified a ``MinAdjustmentMagnitude`` of 2, Application Auto Scaling scales out the service by 2 tasks."},"stepAdjustments":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyStepAdjustment"},"description":"A set of adjustments that enable you to scale based on the size of the alarm breach.\n At least one step adjustment is required if you are adding a new step scaling policy configuration."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetric":{"description":"Represents a specific metric for a target tracking scaling policy for Application Auto Scaling.\n Metric is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingMetricStat](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingmetricstat.html) property type.","properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetricDimension"},"description":"The dimensions for the metric. For the list of available dimensions, see the AWS documentation available from the table in [services that publish CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html) in the *Amazon CloudWatch User Guide*. \n Conditional: If you published your metric with dimensions, you must specify the same dimensions in your scaling policy."},"metricName":{"type":"string","description":"The name of the metric."},"namespace":{"type":"string","description":"The namespace of the metric. For more information, see the table in [services that publish CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html) in the *Amazon CloudWatch User Guide*."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetricDataQuery":{"description":"The metric data to return. Also defines whether this call is returning data for one metric only, or whether it is performing a math expression on the values of returned metric statistics to create a new time series. A time series is a series of data points, each of which is associated with a timestamp.\n You can call for a single metric or perform math expressions on multiple metrics. Any expressions used in a metric specification must eventually return a single time series.\n For more information and examples, see [Create a target tracking scaling policy for Application Auto Scaling using metric math](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-target-tracking-metric-math.html) in the *Application Auto Scaling User Guide*.\n ``TargetTrackingMetricDataQuery`` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy CustomizedMetricSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-customizedmetricspecification.html) property type.","properties":{"expression":{"type":"string","description":"The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the ``Id`` of the other metrics to refer to those metrics, and can also use the ``Id`` of other expressions to use the result of those expressions. \n Conditional: Within each ``TargetTrackingMetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."},"id":{"type":"string","description":"A short name that identifies the object's results in the response. This name must be unique among all ``MetricDataQuery`` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter."},"label":{"type":"string","description":"A human-readable label for this metric or expression. This is especially useful if this is a math expression, so that you know what the value represents."},"metricStat":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetricStat","description":"Information about the metric data to return.\n Conditional: Within each ``MetricDataQuery`` object, you must specify either ``Expression`` or ``MetricStat``, but not both."},"returnData":{"type":"boolean","description":"Indicates whether to return the timestamps and raw data values of this metric. \n If you use any math expressions, specify ``true`` for this value for only the final math expression that the metric specification is based on. You must specify ``false`` for ``ReturnData`` for all the other metrics and expressions used in the metric specification.\n If you are only retrieving metrics and not performing any math expressions, do not specify anything for ``ReturnData``. This sets it to its default (``true``)."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetricDimension":{"description":"``TargetTrackingMetricDimension`` specifies a name/value pair that is part of the identity of a CloudWatch metric for the ``Dimensions`` property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingMetric](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingmetric.html) property type. Duplicate dimensions are not allowed.","properties":{"name":{"type":"string","description":"The name of the dimension."},"value":{"type":"string","description":"The value of the dimension."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetricStat":{"description":"This structure defines the CloudWatch metric to return, along with the statistic and unit.\n ``TargetTrackingMetricStat`` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy TargetTrackingMetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-applicationautoscaling-scalingpolicy-targettrackingmetricdataquery.html) property type.\n For more information about the CloudWatch terminology below, see [Amazon CloudWatch concepts](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html) in the *Amazon CloudWatch User Guide*.","properties":{"metric":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingMetric","description":"The CloudWatch metric to return, including the metric name, namespace, and dimensions. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html)."},"stat":{"type":"string","description":"The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide*.\n The most commonly used metric for scaling is ``Average``."},"unit":{"type":"string","description":"The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference*."}},"type":"object"},"aws-native:applicationautoscaling:ScalingPolicyTargetTrackingScalingPolicyConfiguration":{"description":"``TargetTrackingScalingPolicyConfiguration`` is a property of the [AWS::ApplicationAutoScaling::ScalingPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-applicationautoscaling-scalingpolicy.html) resource that specifies a target tracking scaling policy configuration for Application Auto Scaling. Use a target tracking scaling policy to adjust the capacity of the specified scalable target in response to actual workloads, so that resource utilization remains at or near the target utilization value. \n For more information, see [Target tracking scaling policies](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-target-tracking.html) in the *Application Auto Scaling User Guide*.","properties":{"customizedMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyCustomizedMetricSpecification","description":"A customized metric. You can specify either a predefined metric or a customized metric."},"disableScaleIn":{"type":"boolean","description":"Indicates whether scale in by the target tracking scaling policy is disabled. If the value is ``true``, scale in is disabled and the target tracking scaling policy won't remove capacity from the scalable target. Otherwise, scale in is enabled and the target tracking scaling policy can remove capacity from the scalable target. The default value is ``false``."},"predefinedMetricSpecification":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredefinedMetricSpecification","description":"A predefined metric. You can specify either a predefined metric or a customized metric."},"scaleInCooldown":{"type":"integer","description":"The amount of time, in seconds, after a scale-in activity completes before another scale-in activity can start. For more information and for default values, see [Define cooldown periods](https://docs.aws.amazon.com/autoscaling/application/userguide/target-tracking-scaling-policy-overview.html#target-tracking-cooldown) in the *Application Auto Scaling User Guide*."},"scaleOutCooldown":{"type":"integer","description":"The amount of time, in seconds, to wait for a previous scale-out activity to take effect. For more information and for default values, see [Define cooldown periods](https://docs.aws.amazon.com/autoscaling/application/userguide/target-tracking-scaling-policy-overview.html#target-tracking-cooldown) in the *Application Auto Scaling User Guide*."},"targetValue":{"type":"number","description":"The target value for the metric. Although this property accepts numbers of type Double, it won't accept values that are either too small or too large. Values must be in the range of -2^360 to 2^360. The value must be a valid number based on the choice of metric. For example, if the metric is CPU utilization, then the target value is a percent value that represents how much of the CPU can be used before scaling out."}},"type":"object","required":["targetValue"]},"aws-native:applicationinsights:ApplicationAlarm":{"description":"A CloudWatch alarm to be monitored for the component.","properties":{"alarmName":{"type":"string","description":"The name of the CloudWatch alarm to be monitored for the component."},"severity":{"$ref":"#/types/aws-native:applicationinsights:ApplicationAlarmSeverity","description":"Indicates the degree of outage when the alarm goes off."}},"type":"object","required":["alarmName"]},"aws-native:applicationinsights:ApplicationAlarmMetric":{"description":"A metric to be monitored for the component.","properties":{"alarmMetricName":{"type":"string","description":"The name of the metric to be monitored for the component."}},"type":"object","required":["alarmMetricName"]},"aws-native:applicationinsights:ApplicationAlarmSeverity":{"description":"Indicates the degree of outage when the alarm goes off.","type":"string","enum":[{"name":"High","value":"HIGH"},{"name":"Medium","value":"MEDIUM"},{"name":"Low","value":"LOW"}]},"aws-native:applicationinsights:ApplicationComponentConfiguration":{"description":"The configuration settings of the component.","properties":{"configurationDetails":{"$ref":"#/types/aws-native:applicationinsights:ApplicationConfigurationDetails","description":"The configuration settings"},"subComponentTypeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationSubComponentTypeConfiguration"},"description":"Sub component configurations of the component."}},"type":"object"},"aws-native:applicationinsights:ApplicationComponentMonitoringSetting":{"description":"The monitoring setting of the component.","properties":{"componentArn":{"type":"string","description":"The ARN of the compnonent."},"componentConfigurationMode":{"$ref":"#/types/aws-native:applicationinsights:ApplicationComponentMonitoringSettingComponentConfigurationMode","description":"The component monitoring configuration mode."},"componentName":{"type":"string","description":"The name of the component."},"customComponentConfiguration":{"$ref":"#/types/aws-native:applicationinsights:ApplicationComponentConfiguration","description":"The monitoring configuration of the component."},"defaultOverwriteComponentConfiguration":{"$ref":"#/types/aws-native:applicationinsights:ApplicationComponentConfiguration","description":"The overwritten settings on default component monitoring configuration."},"tier":{"type":"string","description":"The tier of the application component."}},"type":"object","required":["componentConfigurationMode","tier"]},"aws-native:applicationinsights:ApplicationComponentMonitoringSettingComponentConfigurationMode":{"description":"The component monitoring configuration mode.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"DefaultWithOverwrite","value":"DEFAULT_WITH_OVERWRITE"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:applicationinsights:ApplicationConfigurationDetails":{"description":"The configuration settings.","properties":{"alarmMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationAlarmMetric"},"description":"A list of metrics to monitor for the component."},"alarms":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationAlarm"},"description":"A list of alarms to monitor for the component."},"haClusterPrometheusExporter":{"$ref":"#/types/aws-native:applicationinsights:ApplicationHaClusterPrometheusExporter","description":"The HA cluster Prometheus Exporter settings."},"hanaPrometheusExporter":{"$ref":"#/types/aws-native:applicationinsights:ApplicationHanaPrometheusExporter","description":"The HANA DB Prometheus Exporter settings."},"jmxPrometheusExporter":{"$ref":"#/types/aws-native:applicationinsights:ApplicationJmxPrometheusExporter","description":"The JMX Prometheus Exporter settings."},"logs":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationLog"},"description":"A list of logs to monitor for the component."},"netWeaverPrometheusExporter":{"$ref":"#/types/aws-native:applicationinsights:ApplicationNetWeaverPrometheusExporter","description":"The NetWeaver Prometheus Exporter settings."},"processes":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationProcess"},"description":"A list of processes to monitor for the component. Only Windows EC2 instances can have a processes section."},"sqlServerPrometheusExporter":{"$ref":"#/types/aws-native:applicationinsights:ApplicationSqlServerPrometheusExporter","description":"The SQL Prometheus Exporter settings."},"windowsEvents":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationWindowsEvent"},"description":"A list of Windows Events to log."}},"type":"object"},"aws-native:applicationinsights:ApplicationCustomComponent":{"description":"The custom grouped component.","properties":{"componentName":{"type":"string","description":"The name of the component."},"resourceList":{"type":"array","items":{"type":"string"},"description":"The list of resource ARNs that belong to the component."}},"type":"object","required":["componentName","resourceList"]},"aws-native:applicationinsights:ApplicationEventLevel":{"description":"The level of event to log.","type":"string","enum":[{"name":"Information","value":"INFORMATION"},{"name":"Warning","value":"WARNING"},{"name":"Error","value":"ERROR"},{"name":"Critical","value":"CRITICAL"},{"name":"Verbose","value":"VERBOSE"}]},"aws-native:applicationinsights:ApplicationGroupingType":{"description":"The grouping type of the application","type":"string","enum":[{"name":"AccountBased","value":"ACCOUNT_BASED"}]},"aws-native:applicationinsights:ApplicationHaClusterPrometheusExporter":{"description":"The HA cluster Prometheus Exporter settings.","properties":{"prometheusPort":{"type":"string","description":"Prometheus exporter port."}},"type":"object"},"aws-native:applicationinsights:ApplicationHanaPrometheusExporter":{"description":"The HANA DB Prometheus Exporter settings.","properties":{"agreeToInstallHanadbClient":{"type":"boolean","description":"A flag which indicates agreeing to install SAP HANA DB client."},"hanaPort":{"type":"string","description":"The HANA DB port."},"hanaSecretName":{"type":"string","description":"The secret name which manages the HANA DB credentials e.g. {\n  \"username\": \"\u003c\u003e\",\n  \"password\": \"\u003c\u003e\"\n}."},"hanasid":{"type":"string","description":"HANA DB SID."},"prometheusPort":{"type":"string","description":"Prometheus exporter port."}},"type":"object","required":["agreeToInstallHanadbClient","hanaPort","hanaSecretName","hanasid"]},"aws-native:applicationinsights:ApplicationJmxPrometheusExporter":{"description":"The JMX Prometheus Exporter settings.","properties":{"hostPort":{"type":"string","description":"Java agent host port"},"jmxurl":{"type":"string","description":"JMX service URL."},"prometheusPort":{"type":"string","description":"Prometheus exporter port."}},"type":"object"},"aws-native:applicationinsights:ApplicationLog":{"description":"A log to be monitored for the component.","properties":{"encoding":{"$ref":"#/types/aws-native:applicationinsights:ApplicationLogEncoding","description":"The type of encoding of the logs to be monitored."},"logGroupName":{"type":"string","description":"The CloudWatch log group name to be associated to the monitored log."},"logPath":{"type":"string","description":"The path of the logs to be monitored."},"logType":{"type":"string","description":"The log type decides the log patterns against which Application Insights analyzes the log."},"patternSet":{"type":"string","description":"The name of the log pattern set."}},"type":"object","required":["logType"]},"aws-native:applicationinsights:ApplicationLogEncoding":{"description":"The type of encoding of the logs to be monitored.","type":"string","enum":[{"name":"Utf8","value":"utf-8"},{"name":"Utf16","value":"utf-16"},{"name":"Ascii","value":"ascii"}]},"aws-native:applicationinsights:ApplicationLogPattern":{"description":"The log pattern.","properties":{"pattern":{"type":"string","description":"The log pattern."},"patternName":{"type":"string","description":"The name of the log pattern."},"rank":{"type":"integer","description":"Rank of the log pattern."}},"type":"object","required":["pattern","patternName","rank"]},"aws-native:applicationinsights:ApplicationLogPatternSet":{"description":"The log pattern set.","properties":{"logPatterns":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationLogPattern"},"description":"The log patterns of a set."},"patternSetName":{"type":"string","description":"The name of the log pattern set."}},"type":"object","required":["logPatterns","patternSetName"]},"aws-native:applicationinsights:ApplicationNetWeaverPrometheusExporter":{"description":"The NetWeaver Prometheus Exporter Settings.","properties":{"instanceNumbers":{"type":"array","items":{"type":"string"},"description":"SAP instance numbers for ASCS, ERS, and App Servers."},"prometheusPort":{"type":"string","description":"Prometheus exporter port."},"sapsid":{"type":"string","description":"SAP NetWeaver SID."}},"type":"object","required":["instanceNumbers","sapsid"]},"aws-native:applicationinsights:ApplicationProcess":{"description":"A process to be monitored for the component.","properties":{"alarmMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationAlarmMetric"},"description":"A list of metrics to monitor for the component."},"processName":{"type":"string","description":"The name of the process to be monitored for the component."}},"type":"object","required":["alarmMetrics","processName"]},"aws-native:applicationinsights:ApplicationSqlServerPrometheusExporter":{"description":"The SQL prometheus exporter settings.","properties":{"prometheusPort":{"type":"string","description":"Prometheus exporter port."},"sqlSecretName":{"type":"string","description":"Secret name which managers SQL exporter connection. e.g. {\"data_source_name\": \"sqlserver://\u003cUSERNAME\u003e:\u003cPASSWORD\u003e@localhost:1433\"}"}},"type":"object","required":["prometheusPort","sqlSecretName"]},"aws-native:applicationinsights:ApplicationSubComponentConfigurationDetails":{"description":"The configuration settings of sub components.","properties":{"alarmMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationAlarmMetric"},"description":"A list of metrics to monitor for the component."},"logs":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationLog"},"description":"A list of logs to monitor for the component."},"processes":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationProcess"},"description":"A list of processes to monitor for the component. Only Windows EC2 instances can have a processes section."},"windowsEvents":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationWindowsEvent"},"description":"A list of Windows Events to log."}},"type":"object"},"aws-native:applicationinsights:ApplicationSubComponentTypeConfiguration":{"description":"One type sub component configurations for the component.","properties":{"subComponentConfigurationDetails":{"$ref":"#/types/aws-native:applicationinsights:ApplicationSubComponentConfigurationDetails","description":"The configuration settings of sub components."},"subComponentType":{"$ref":"#/types/aws-native:applicationinsights:ApplicationSubComponentTypeConfigurationSubComponentType","description":"The sub component type."}},"type":"object","required":["subComponentConfigurationDetails","subComponentType"]},"aws-native:applicationinsights:ApplicationSubComponentTypeConfigurationSubComponentType":{"description":"The sub component type.","type":"string","enum":[{"name":"Awsec2Instance","value":"AWS::EC2::Instance"},{"name":"Awsec2Volume","value":"AWS::EC2::Volume"}]},"aws-native:applicationinsights:ApplicationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:applicationinsights:ApplicationWindowsEvent":{"description":"A Windows Event to be monitored for the component.","properties":{"eventLevels":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationEventLevel"},"description":"The levels of event to log. "},"eventName":{"type":"string","description":"The type of Windows Events to log."},"logGroupName":{"type":"string","description":"The CloudWatch log group name to be associated to the monitored log."},"patternSet":{"type":"string","description":"The name of the log pattern set."}},"type":"object","required":["eventLevels","eventName","logGroupName"]},"aws-native:applicationsignals:GroupingConfigurationGroupingAttributeDefinition":{"properties":{"defaultGroupingValue":{"type":"string"},"groupingName":{"type":"string"},"groupingSourceKeys":{"type":"array","items":{"type":"string"}}},"type":"object","required":["groupingName","groupingSourceKeys"]},"aws-native:applicationsignals:ServiceLevelObjectiveBurnRateConfiguration":{"description":"This object defines the length of the look-back window used to calculate one burn rate metric for this SLO. The burn rate measures how fast the service is consuming the error budget, relative to the attainment goal of the SLO. A burn rate of exactly 1 indicates that the SLO goal will be met exactly.\nFor example, if you specify 60 as the number of minutes in the look-back window, the burn rate is calculated as the following:\nburn rate = error rate over the look-back window / (1 - attainment goal percentage)","properties":{"lookBackWindowMinutes":{"type":"integer","description":"The number of minutes to use as the look-back window."}},"type":"object","required":["lookBackWindowMinutes"]},"aws-native:applicationsignals:ServiceLevelObjectiveCalendarInterval":{"description":"If the interval for this service level objective is a calendar interval, this structure contains the interval specifications.","properties":{"duration":{"type":"integer","description":"Specifies the duration of each calendar interval. For example, if `Duration` is `1` and `DurationUnit` is `MONTH` , each interval is one month, aligned with the calendar."},"durationUnit":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveDurationUnit","description":"Specifies the calendar interval unit."},"startTime":{"type":"integer","description":"Epoch time in seconds you want the first interval to start. Be sure to choose a time that configures the intervals the way that you want. For example, if you want weekly intervals starting on Mondays at 6 a.m., be sure to specify a start time that is a Monday at 6 a.m.\nAs soon as one calendar interval ends, another automatically begins."}},"type":"object","required":["duration","durationUnit","startTime"]},"aws-native:applicationsignals:ServiceLevelObjectiveDependencyConfig":{"description":"Configuration for identifying a dependency and its operation","properties":{"dependencyKeyAttributes":{"type":"object","additionalProperties":{"type":"string"},"description":"If this SLO is related to a metric collected by Application Signals, you must use this field to specify which dependency the SLO metric is related to.\n\n- `Type` designates the type of object this is.\n- `ResourceType` specifies the type of the resource. This field is used only when the value of the `Type` field is `Resource` or `AWS::Resource` .\n- `Name` specifies the name of the object. This is used only if the value of the `Type` field is `Service` , `RemoteService` , or `AWS::Service` .\n- `Identifier` identifies the resource objects of this resource. This is used only if the value of the `Type` field is `Resource` or `AWS::Resource` .\n- `Environment` specifies the location where this object is hosted, or what it belongs to."},"dependencyOperationName":{"type":"string","description":"When the SLO monitors a specific operation of the dependency, this field specifies the name of that operation in the dependency."}},"type":"object","required":["dependencyKeyAttributes","dependencyOperationName"]},"aws-native:applicationsignals:ServiceLevelObjectiveDimension":{"description":"A dimension is a name/value pair that is part of the identity of a metric. Because dimensions are part of the unique identifier for a metric, whenever you add a unique name/value pair to one of your metrics, you are creating a new variation of that metric. For example, many Amazon EC2 metrics publish `InstanceId` as a dimension name, and the actual instance ID as the value for that dimension. You can assign up to 30 dimensions to a metric.","properties":{"name":{"type":"string","description":"The name of the dimension. Dimension names must contain only ASCII characters, must include at least one non-whitespace character, and cannot start with a colon (:). ASCII control characters are not supported as part of dimension names."},"value":{"type":"string","description":"The value of the dimension. Dimension values must contain only ASCII characters and must include at least one non-whitespace character. ASCII control characters are not supported as part of dimension values"}},"type":"object","required":["name","value"]},"aws-native:applicationsignals:ServiceLevelObjectiveDurationUnit":{"description":"Specifies the interval unit.","type":"string","enum":[{"name":"Minute","value":"MINUTE"},{"name":"Hour","value":"HOUR"},{"name":"Day","value":"DAY"},{"name":"Month","value":"MONTH"}]},"aws-native:applicationsignals:ServiceLevelObjectiveEvaluationType":{"description":"Displays whether this is a period-based SLO or a request-based SLO.","type":"string","enum":[{"name":"PeriodBased","value":"PeriodBased"},{"name":"RequestBased","value":"RequestBased"}]},"aws-native:applicationsignals:ServiceLevelObjectiveExclusionWindow":{"description":"This object defines a time exclusion window for this SLO. The time exclusion window is used to exclude breaching data points from affecting attainment rate, error budget, and burn rate metrics.","properties":{"reason":{"type":"string","description":"An optional reason for scheduling this time exclusion window. Default is 'No reason'."},"recurrenceRule":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRecurrenceRule"},"startTime":{"type":"string","description":"The time you want the exclusion window to start at. Note that time exclusion windows can only be scheduled in the future, not the past."},"window":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveWindow"}},"type":"object","required":["window"]},"aws-native:applicationsignals:ServiceLevelObjectiveGoal":{"description":"A structure that contains the attributes that determine the goal of the SLO. This includes the time period for evaluation and the attainment threshold.","properties":{"attainmentGoal":{"type":"number","description":"The threshold that determines if the goal is being met. An attainment goal is the ratio of good periods that meet the threshold requirements to the total periods within the interval. For example, an attainment goal of 99.9% means that within your interval, you are targeting 99.9% of the periods to be in healthy state.\nIf you omit this parameter, 99 is used to represent 99% as the attainment goal."},"interval":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveInterval","description":"The time period used to evaluate the SLO. It can be either a calendar interval or rolling interval.\n\nIf you omit this parameter, a rolling interval of 7 days is used."},"warningThreshold":{"type":"number","description":"The percentage of remaining budget over total budget that you want to get warnings for. If you omit this parameter, the default of 50.0 is used."}},"type":"object"},"aws-native:applicationsignals:ServiceLevelObjectiveInterval":{"description":"The time period used to evaluate the SLO. It can be either a calendar interval or rolling interval.\nIf you omit this parameter, a rolling interval of 7 days is used.","properties":{"calendarInterval":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveCalendarInterval","description":"If the interval is a calendar interval, this structure contains the interval specifications."},"rollingInterval":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRollingInterval","description":"If the interval is a rolling interval, this structure contains the interval specifications."}},"type":"object"},"aws-native:applicationsignals:ServiceLevelObjectiveMetric":{"description":"This structure defines the metric used for a service level indicator, including the metric name, namespace, and dimensions.","properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveDimension"},"description":"An array of one or more dimensions to use to define the metric that you want to use."},"metricName":{"type":"string","description":"The name of the metric to use."},"namespace":{"type":"string","description":"The namespace of the metric."}},"type":"object"},"aws-native:applicationsignals:ServiceLevelObjectiveMetricDataQuery":{"description":"Use this structure to define a metric or metric math expression that you want to use as for a service level objective.\nEach `MetricDataQuery` in the `MetricDataQueries` array specifies either a metric to retrieve, or a metric math expression to be performed on retrieved metrics. A single `MetricDataQueries` array can include as many as 20 `MetricDataQuery` structures in the array. The 20 structures can include as many as 10 structures that contain a `MetricStat` parameter to retrieve a metric, and as many as 10 structures that contain the `Expression` parameter to perform a math expression. Of those Expression structures, exactly one must have true as the value for `ReturnData`. The result of this expression used for the SLO.","properties":{"accountId":{"type":"string","description":"The ID of the account where the metrics are located, if this is a cross-account alarm."},"expression":{"type":"string","description":"The math expression to be performed on the returned data."},"id":{"type":"string","description":"A short name used to tie this object to the results in the response."},"metricStat":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMetricStat","description":"A metric to be used directly for the SLO, or to be used in the math expression that will be used for the SLO. Within one MetricDataQuery, you must specify either Expression or MetricStat but not both."},"returnData":{"type":"boolean","description":"This option indicates whether to return the timestamps and raw data values of this metric."}},"type":"object","required":["id"]},"aws-native:applicationsignals:ServiceLevelObjectiveMetricStat":{"description":"A metric to be used directly for the SLO, or to be used in the math expression that will be used for the SLO. Within one MetricDataQuery object, you must specify either Expression or MetricStat but not both.","properties":{"metric":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMetric"},"period":{"type":"integer","description":"The granularity, in seconds, to be used for the metric."},"stat":{"type":"string","description":"The statistic to use for comparison to the threshold. It can be any CloudWatch statistic or extended statistic."},"unit":{"type":"string","description":"If you omit Unit then all data that was collected with any unit is returned, along with the corresponding units that were specified when the data was reported to CloudWatch. If you specify a unit, the operation returns only data that was collected with that unit specified. If you specify a unit that does not match the data collected, the results of the operation are null. CloudWatch does not perform unit conversions."}},"type":"object","required":["metric","period","stat"]},"aws-native:applicationsignals:ServiceLevelObjectiveMonitoredRequestCountMetric":{"description":"This structure defines the metric that is used as the \"good request\" or \"bad request\" value for a request-based SLO. This value observed for the metric defined in `TotalRequestCountMetric` is divided by the number found for `MonitoredRequestCountMetric` to determine the percentage of successful requests that this SLO tracks.","properties":{"badCountMetric":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMetricDataQuery"},"description":"If you want to count \"bad requests\" to determine the percentage of successful requests for this request-based SLO, specify the metric to use as \"bad requests\" in this structure."},"goodCountMetric":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMetricDataQuery"},"description":"If you want to count \"good requests\" to determine the percentage of successful requests for this request-based SLO, specify the metric to use as \"good requests\" in this structure."}},"type":"object"},"aws-native:applicationsignals:ServiceLevelObjectiveRecurrenceRule":{"description":"This object defines how often to repeat a time exclusion window.","properties":{"expression":{"type":"string","description":"A cron or rate expression denoting how often to repeat this exclusion window."}},"type":"object","required":["expression"]},"aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSli":{"description":"This structure contains information about the performance metric that a request-based SLO monitors.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSliComparisonOperator","description":"The arithmetic operation used when comparing the specified metric to the threshold."},"metricThreshold":{"type":"number","description":"The value that the SLI metric is compared to."},"requestBasedSliMetric":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSliMetric","description":"A structure that contains information about the metric that the SLO monitors."}},"type":"object","required":["requestBasedSliMetric"]},"aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSliComparisonOperator":{"description":"The arithmetic operation used when comparing the specified metric to the threshold.","type":"string","enum":[{"name":"GreaterThanOrEqualTo","value":"GreaterThanOrEqualTo"},{"name":"LessThanOrEqualTo","value":"LessThanOrEqualTo"},{"name":"LessThan","value":"LessThan"},{"name":"GreaterThan","value":"GreaterThan"}]},"aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSliMetric":{"description":"This structure contains the information about the metric that is used for a request-based SLO.","properties":{"dependencyConfig":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveDependencyConfig","description":"Identifies the dependency using the `DependencyKeyAttributes` and `DependencyOperationName` ."},"keyAttributes":{"type":"object","additionalProperties":{"type":"string"},"description":"This is a string-to-string map that contains information about the type of object that this SLO is related to. It can include the following fields.\n\n- `Type` designates the type of object that this SLO is related to.\n- `ResourceType` specifies the type of the resource. This field is used only when the value of the `Type` field is `Resource` or `AWS::Resource` .\n- `Name` specifies the name of the object. This is used only if the value of the `Type` field is `Service` , `RemoteService` , or `AWS::Service` .\n- `Identifier` identifies the resource objects of this resource. This is used only if the value of the `Type` field is `Resource` or `AWS::Resource` .\n- `Environment` specifies the location where this object is hosted, or what it belongs to.\n- `AwsAccountId` allows you to create an SLO for an object that exists in another account."},"metricType":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSliMetricMetricType","description":"If the SLO monitors either the LATENCY or AVAILABILITY metric that Application Signals collects, this field displays which of those metrics is used."},"monitoredRequestCountMetric":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMonitoredRequestCountMetric","description":"Use this structure to define the metric that you want to use as the \"good request\" or \"bad request\" value for a request-based SLO. This value observed for the metric defined in `TotalRequestCountMetric` will be divided by the number found for `MonitoredRequestCountMetric` to determine the percentage of successful requests that this SLO tracks."},"operationName":{"type":"string","description":"If the SLO monitors a specific operation of the service, this field displays that operation name."},"totalRequestCountMetric":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMetricDataQuery"},"description":"This structure defines the metric that is used as the \"total requests\" number for a request-based SLO. The number observed for this metric is divided by the number of \"good requests\" or \"bad requests\" that is observed for the metric defined in `MonitoredRequestCountMetric`."}},"type":"object"},"aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSliMetricMetricType":{"description":"If the SLO monitors either the LATENCY or AVAILABILITY metric that Application Signals collects, this field displays which of those metrics is used.","type":"string","enum":[{"name":"Latency","value":"LATENCY"},{"name":"Availability","value":"AVAILABILITY"}]},"aws-native:applicationsignals:ServiceLevelObjectiveRollingInterval":{"description":"If the interval is a calendar interval, this structure contains the interval specifications.","properties":{"duration":{"type":"integer","description":"Specifies the duration of each rolling interval. For example, if `Duration` is `7` and `DurationUnit` is `DAY` , each rolling interval is seven days."},"durationUnit":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveDurationUnit","description":"Specifies the rolling interval unit."}},"type":"object","required":["duration","durationUnit"]},"aws-native:applicationsignals:ServiceLevelObjectiveSli":{"description":"This structure contains information about the performance metric that an SLO monitors.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveSliComparisonOperator","description":"The arithmetic operation used when comparing the specified metric to the threshold."},"metricThreshold":{"type":"number","description":"The value that the SLI metric is compared to."},"sliMetric":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveSliMetric","description":"Use this structure to specify the metric to be used for the SLO."}},"type":"object","required":["comparisonOperator","metricThreshold","sliMetric"]},"aws-native:applicationsignals:ServiceLevelObjectiveSliComparisonOperator":{"description":"The arithmetic operation used when comparing the specified metric to the threshold.","type":"string","enum":[{"name":"GreaterThanOrEqualTo","value":"GreaterThanOrEqualTo"},{"name":"LessThanOrEqualTo","value":"LessThanOrEqualTo"},{"name":"LessThan","value":"LessThan"},{"name":"GreaterThan","value":"GreaterThan"}]},"aws-native:applicationsignals:ServiceLevelObjectiveSliMetric":{"description":"A structure that contains information about the metric that the SLO monitors.","properties":{"dependencyConfig":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveDependencyConfig","description":"Identifies the dependency using the `DependencyKeyAttributes` and `DependencyOperationName` ."},"keyAttributes":{"type":"object","additionalProperties":{"type":"string"},"description":"If this SLO is related to a metric collected by Application Signals, you must use this field to specify which service the SLO metric is related to. To do so, you must specify at least the `Type` , `Name` , and `Environment` attributes.\n\nThis is a string-to-string map. It can include the following fields.\n\n- `Type` designates the type of object this is.\n- `ResourceType` specifies the type of the resource. This field is used only when the value of the `Type` field is `Resource` or `AWS::Resource` .\n- `Name` specifies the name of the object. This is used only if the value of the `Type` field is `Service` , `RemoteService` , or `AWS::Service` .\n- `Identifier` identifies the resource objects of this resource. This is used only if the value of the `Type` field is `Resource` or `AWS::Resource` .\n- `Environment` specifies the location where this object is hosted, or what it belongs to."},"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveMetricDataQuery"},"description":"If this SLO monitors a CloudWatch metric or the result of a CloudWatch metric math expression, use this structure to specify that metric or expression."},"metricType":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveSliMetricMetricType","description":"If the SLO monitors either the LATENCY or AVAILABILITY metric that Application Signals collects, this field displays which of those metrics is used."},"operationName":{"type":"string","description":"If the SLO monitors a specific operation of the service, this field displays that operation name."},"periodSeconds":{"type":"integer","description":"The number of seconds to use as the period for SLO evaluation. Your application's performance is compared to the SLI during each period. For each period, the application is determined to have either achieved or not achieved the necessary performance."},"statistic":{"type":"string","description":"The statistic to use for comparison to the threshold. It can be any CloudWatch statistic or extended statistic"}},"type":"object"},"aws-native:applicationsignals:ServiceLevelObjectiveSliMetricMetricType":{"description":"If the SLO monitors either the LATENCY or AVAILABILITY metric that Application Signals collects, this field displays which of those metrics is used.","type":"string","enum":[{"name":"Latency","value":"LATENCY"},{"name":"Availability","value":"AVAILABILITY"}]},"aws-native:applicationsignals:ServiceLevelObjectiveTag":{"properties":{"key":{"type":"string","description":"A string that you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:applicationsignals:ServiceLevelObjectiveWindow":{"description":"This object defines the length of time an exclusion window should span.","properties":{"duration":{"type":"integer"},"durationUnit":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveDurationUnit"}},"type":"object","required":["duration","durationUnit"]},"aws-native:apprunner:AutoScalingConfigurationTag":{"properties":{"key":{"type":"string","description":"The key of the tag assigned to the `AutoScalingConfiguration` resource of the App Runner service."},"value":{"type":"string","description":"The value of the tag assigned to the `AutoScalingConfiguration` resource of the App Runner service."}},"type":"object"},"aws-native:apprunner:ObservabilityConfigurationTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object"},"aws-native:apprunner:ObservabilityConfigurationTraceConfiguration":{"description":"Describes the configuration of the tracing feature within an AWS App Runner observability configuration.","properties":{"vendor":{"$ref":"#/types/aws-native:apprunner:ObservabilityConfigurationTraceConfigurationVendor","description":"The implementation provider chosen for tracing App Runner services."}},"type":"object","required":["vendor"]},"aws-native:apprunner:ObservabilityConfigurationTraceConfigurationVendor":{"description":"The implementation provider chosen for tracing App Runner services.","type":"string","enum":[{"name":"Awsxray","value":"AWSXRAY"}]},"aws-native:apprunner:ServiceAuthenticationConfiguration":{"description":"Authentication Configuration","properties":{"accessRoleArn":{"type":"string","description":"Access Role Arn"},"connectionArn":{"type":"string","description":"Connection Arn"}},"type":"object"},"aws-native:apprunner:ServiceCodeConfiguration":{"description":"Code Configuration","properties":{"codeConfigurationValues":{"$ref":"#/types/aws-native:apprunner:ServiceCodeConfigurationValues","description":"The basic configuration for building and running the App Runner service. Use it to quickly launch an App Runner service without providing a `apprunner.yaml` file in the source code repository (or ignoring the file if it exists)."},"configurationSource":{"$ref":"#/types/aws-native:apprunner:ServiceCodeConfigurationConfigurationSource","description":"Configuration Source"}},"type":"object","required":["configurationSource"]},"aws-native:apprunner:ServiceCodeConfigurationConfigurationSource":{"description":"Configuration Source","type":"string","enum":[{"name":"Repository","value":"REPOSITORY"},{"name":"Api","value":"API"}]},"aws-native:apprunner:ServiceCodeConfigurationValues":{"description":"Code Configuration Values","properties":{"buildCommand":{"type":"string","description":"Build Command"},"port":{"type":"string","description":"Port"},"runtime":{"$ref":"#/types/aws-native:apprunner:ServiceCodeConfigurationValuesRuntime","description":"Runtime"},"runtimeEnvironmentSecrets":{"type":"array","items":{"$ref":"#/types/aws-native:apprunner:ServiceKeyValuePair"},"description":"The secrets and parameters that get referenced by your service as environment variables"},"runtimeEnvironmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:apprunner:ServiceKeyValuePair"},"description":"The environment variables that are available to your running AWS App Runner service. An array of key-value pairs."},"startCommand":{"type":"string","description":"Start Command"}},"type":"object","required":["runtime"]},"aws-native:apprunner:ServiceCodeConfigurationValuesRuntime":{"description":"Runtime","type":"string","enum":[{"name":"Python3","value":"PYTHON_3"},{"name":"Nodejs12","value":"NODEJS_12"},{"name":"Nodejs14","value":"NODEJS_14"},{"name":"Corretto8","value":"CORRETTO_8"},{"name":"Corretto11","value":"CORRETTO_11"},{"name":"Nodejs16","value":"NODEJS_16"},{"name":"Go1","value":"GO_1"},{"name":"Dotnet6","value":"DOTNET_6"},{"name":"Php81","value":"PHP_81"},{"name":"Ruby31","value":"RUBY_31"},{"name":"Python311","value":"PYTHON_311"},{"name":"Nodejs18","value":"NODEJS_18"},{"name":"Nodejs22","value":"NODEJS_22"}]},"aws-native:apprunner:ServiceCodeRepository":{"description":"Source Code Repository","properties":{"codeConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceCodeConfiguration","description":"Configuration for building and running the service from a source code repository.\n\n\u003e `CodeConfiguration` is required only for `CreateService` request."},"repositoryUrl":{"type":"string","description":"Repository Url"},"sourceCodeVersion":{"$ref":"#/types/aws-native:apprunner:ServiceSourceCodeVersion","description":"The version that should be used within the source code repository."},"sourceDirectory":{"type":"string","description":"Source Directory"}},"type":"object","required":["repositoryUrl","sourceCodeVersion"]},"aws-native:apprunner:ServiceEgressConfiguration":{"description":"Network egress configuration","properties":{"egressType":{"$ref":"#/types/aws-native:apprunner:ServiceEgressConfigurationEgressType","description":"Network egress type."},"vpcConnectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the App Runner VpcConnector."}},"type":"object","required":["egressType"]},"aws-native:apprunner:ServiceEgressConfigurationEgressType":{"description":"Network egress type.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Vpc","value":"VPC"}]},"aws-native:apprunner:ServiceEncryptionConfiguration":{"description":"Encryption configuration (KMS key)","properties":{"kmsKey":{"type":"string","description":"The KMS Key"}},"type":"object","required":["kmsKey"]},"aws-native:apprunner:ServiceHealthCheckConfiguration":{"description":"Health check configuration","properties":{"healthyThreshold":{"type":"integer","description":"Health check Healthy Threshold"},"interval":{"type":"integer","description":"Health check Interval"},"path":{"type":"string","description":"Health check Path"},"protocol":{"$ref":"#/types/aws-native:apprunner:ServiceHealthCheckConfigurationProtocol","description":"Health Check Protocol"},"timeout":{"type":"integer","description":"Health check Timeout"},"unhealthyThreshold":{"type":"integer","description":"Health check Unhealthy Threshold"}},"type":"object"},"aws-native:apprunner:ServiceHealthCheckConfigurationProtocol":{"description":"Health Check Protocol","type":"string","enum":[{"name":"Tcp","value":"TCP"},{"name":"Http","value":"HTTP"}]},"aws-native:apprunner:ServiceImageConfiguration":{"description":"Image Configuration","properties":{"port":{"type":"string","description":"Port"},"runtimeEnvironmentSecrets":{"type":"array","items":{"$ref":"#/types/aws-native:apprunner:ServiceKeyValuePair"},"description":"The secrets and parameters that get referenced by your service as environment variables"},"runtimeEnvironmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:apprunner:ServiceKeyValuePair"},"description":"Environment variables that are available to your running App Runner service. An array of key-value pairs."},"startCommand":{"type":"string","description":"Start Command"}},"type":"object"},"aws-native:apprunner:ServiceImageRepository":{"description":"Image Repository","properties":{"imageConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceImageConfiguration","description":"Configuration for running the identified image."},"imageIdentifier":{"type":"string","description":"Image Identifier"},"imageRepositoryType":{"$ref":"#/types/aws-native:apprunner:ServiceImageRepositoryImageRepositoryType","description":"Image Repository Type"}},"type":"object","required":["imageIdentifier","imageRepositoryType"]},"aws-native:apprunner:ServiceImageRepositoryImageRepositoryType":{"description":"Image Repository Type","type":"string","enum":[{"name":"Ecr","value":"ECR"},{"name":"EcrPublic","value":"ECR_PUBLIC"}]},"aws-native:apprunner:ServiceIngressConfiguration":{"description":"Network ingress configuration","properties":{"isPubliclyAccessible":{"type":"boolean","description":"It's set to true if the Apprunner service is publicly accessible. It's set to false otherwise."}},"type":"object","required":["isPubliclyAccessible"]},"aws-native:apprunner:ServiceInstanceConfiguration":{"description":"Instance Configuration","properties":{"cpu":{"type":"string","description":"CPU"},"instanceRoleArn":{"type":"string","description":"Instance Role Arn"},"memory":{"type":"string","description":"Memory"}},"type":"object"},"aws-native:apprunner:ServiceKeyValuePair":{"properties":{"name":{"type":"string","description":"The key name string to map to a value."},"value":{"type":"string","description":"The value string to which the key name is mapped."}},"type":"object"},"aws-native:apprunner:ServiceNetworkConfiguration":{"description":"Network configuration","properties":{"egressConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceEgressConfiguration","description":"Network configuration settings for outbound message traffic."},"ingressConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceIngressConfiguration","description":"Network configuration settings for inbound message traffic."},"ipAddressType":{"$ref":"#/types/aws-native:apprunner:ServiceNetworkConfigurationIpAddressType","description":"App Runner service endpoint IP address type"}},"type":"object"},"aws-native:apprunner:ServiceNetworkConfigurationIpAddressType":{"description":"App Runner service endpoint IP address type","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"DualStack","value":"DUAL_STACK"}]},"aws-native:apprunner:ServiceObservabilityConfiguration":{"description":"Service observability configuration","properties":{"observabilityConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the App Runner ObservabilityConfiguration."},"observabilityEnabled":{"type":"boolean","description":"Observability enabled"}},"type":"object","required":["observabilityEnabled"]},"aws-native:apprunner:ServiceSourceCodeVersion":{"description":"Source Code Version","properties":{"type":{"$ref":"#/types/aws-native:apprunner:ServiceSourceCodeVersionType","description":"Source Code Version Type"},"value":{"type":"string","description":"Source Code Version Value"}},"type":"object","required":["type","value"]},"aws-native:apprunner:ServiceSourceCodeVersionType":{"description":"Source Code Version Type","type":"string","enum":[{"name":"Branch","value":"BRANCH"}]},"aws-native:apprunner:ServiceSourceConfiguration":{"description":"Source Code configuration","properties":{"authenticationConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceAuthenticationConfiguration","description":"Describes the resources that are needed to authenticate access to some source repositories."},"autoDeploymentsEnabled":{"type":"boolean","description":"Auto Deployment enabled"},"codeRepository":{"$ref":"#/types/aws-native:apprunner:ServiceCodeRepository","description":"The description of a source code repository.\n\nYou must provide either this member or `ImageRepository` (but not both)."},"imageRepository":{"$ref":"#/types/aws-native:apprunner:ServiceImageRepository","description":"The description of a source image repository.\n\nYou must provide either this member or `CodeRepository` (but not both)."}},"type":"object"},"aws-native:apprunner:ServiceTag":{"properties":{"key":{"type":"string","description":"The key of the tag assigned to an App Runner service."},"value":{"type":"string","description":"The value of the tag assigned to an App Runner service."}},"type":"object"},"aws-native:apprunner:VpcConnectorTag":{"properties":{"key":{"type":"string","description":"The key of the tag assigned to the `VpcConnector` resource of the App Runner service."},"value":{"type":"string","description":"The value of the tag assigned to the `VpcConnector` resource of the App Runner service."}},"type":"object"},"aws-native:apprunner:VpcIngressConnectionIngressVpcConfiguration":{"description":"The configuration of customer’s VPC and related VPC endpoint","properties":{"vpcEndpointId":{"type":"string","description":"The ID of the VPC endpoint that your App Runner service connects to."},"vpcId":{"type":"string","description":"The ID of the VPC that the VPC endpoint is used in."}},"type":"object","required":["vpcEndpointId","vpcId"]},"aws-native:apprunner:VpcIngressConnectionStatus":{"description":"The current status of the VpcIngressConnection.","type":"string","enum":[{"name":"Available","value":"AVAILABLE"},{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"FailedCreation","value":"FAILED_CREATION"},{"name":"FailedUpdate","value":"FAILED_UPDATE"},{"name":"FailedDeletion","value":"FAILED_DELETION"},{"name":"Deleted","value":"DELETED"}]},"aws-native:apprunner:VpcIngressConnectionTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag assigned to `VpcIngressConnection` resource of the App Runner service."}},"type":"object"},"aws-native:appstream:AppBlockBuilderAccessEndpoint":{"properties":{"endpointType":{"type":"string","description":"The type of interface endpoint."},"vpceId":{"type":"string","description":"The identifier (ID) of the VPC in which the interface endpoint is used."}},"type":"object","required":["endpointType","vpceId"]},"aws-native:appstream:AppBlockBuilderTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:appstream:AppBlockBuilderVpcConfig":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The identifiers of the security groups for the fleet or image builder."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The identifiers of the subnets to which a network interface is attached from the fleet instance or image builder instance. Fleet instances use one or more subnets. Image builder instances use one subnet."}},"type":"object"},"aws-native:appstream:AppBlockS3Location":{"properties":{"s3Bucket":{"type":"string","description":"The S3 bucket of the app block."},"s3Key":{"type":"string","description":"The S3 key of the S3 object of the virtual hard disk.\n\nThis is required when it's used by `SetupScriptDetails` and `PostSetupScriptDetails` ."}},"type":"object","required":["s3Bucket"]},"aws-native:appstream:AppBlockScriptDetails":{"properties":{"executableParameters":{"type":"string","description":"The parameters used in the run path for the script."},"executablePath":{"type":"string","description":"The run path for the script."},"scriptS3Location":{"$ref":"#/types/aws-native:appstream:AppBlockS3Location","description":"The S3 object location of the script."},"timeoutInSeconds":{"type":"integer","description":"The run timeout, in seconds, for the script."}},"type":"object","required":["executablePath","scriptS3Location","timeoutInSeconds"]},"aws-native:appstream:AppBlockTag0Properties":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:appstream:AppBlockTag1Properties":{"properties":{"tagKey":{"type":"string"},"tagValue":{"type":"string"}},"type":"object","required":["tagKey","tagValue"]},"aws-native:appstream:ApplicationS3Location":{"properties":{"s3Bucket":{"type":"string","description":"The S3 bucket of the S3 object."},"s3Key":{"type":"string","description":"The S3 key of the S3 object."}},"type":"object","required":["s3Bucket","s3Key"]},"aws-native:appstream:ApplicationTag0Properties":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:appstream:ApplicationTag1Properties":{"properties":{"tagKey":{"type":"string"},"tagValue":{"type":"string"}},"type":"object","required":["tagKey","tagValue"]},"aws-native:appstream:DirectoryConfigCertificateBasedAuthProperties":{"properties":{"certificateAuthorityArn":{"type":"string","description":"The ARN of the AWS Certificate Manager Private CA resource."},"status":{"type":"string","description":"The status of the certificate-based authentication properties. Fallback is turned on by default when certificate-based authentication is *Enabled* . Fallback allows users to log in using their AD domain password if certificate-based authentication is unsuccessful, or to unlock a desktop lock screen. *Enabled_no_directory_login_fallback* enables certificate-based authentication, but does not allow users to log in using their AD domain password. Users will be disconnected to re-authenticate using certificates."}},"type":"object"},"aws-native:appstream:DirectoryConfigServiceAccountCredentials":{"properties":{"accountName":{"type":"string","description":"The user name of the account. This account must have the following privileges: create computer objects, join computers to the domain, and change/reset the password on descendant computer objects for the organizational units specified."},"accountPassword":{"type":"string","description":"The password for the account."}},"type":"object","required":["accountName","accountPassword"]},"aws-native:appstream:EntitlementAttribute":{"properties":{"name":{"type":"string","description":"A supported AWS IAM SAML PrincipalTag attribute that is matched to a value when a user identity federates to an AppStream 2.0 SAML application.\n\nThe following are supported values:\n\n- roles\n- department\n- organization\n- groups\n- title\n- costCenter\n- userType"},"value":{"type":"string","description":"A value that is matched to a supported SAML attribute name when a user identity federates to an AppStream 2.0 SAML application."}},"type":"object","required":["name","value"]},"aws-native:appstream:ImageBuilderAccessEndpoint":{"properties":{"endpointType":{"type":"string","description":"The type of interface endpoint."},"vpceId":{"type":"string","description":"The identifier (ID) of the VPC in which the interface endpoint is used."}},"type":"object","required":["endpointType","vpceId"]},"aws-native:appstream:ImageBuilderDomainJoinInfo":{"properties":{"directoryName":{"type":"string","description":"The fully qualified name of the directory (for example, corp.example.com)."},"organizationalUnitDistinguishedName":{"type":"string","description":"The distinguished name of the organizational unit for computer accounts."}},"type":"object"},"aws-native:appstream:ImageBuilderTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:appstream:ImageBuilderVolumeConfig":{"properties":{"volumeSizeInGb":{"type":"integer"}},"type":"object"},"aws-native:appstream:ImageBuilderVpcConfig":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The identifiers of the security groups for the image builder."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The identifier of the subnet to which a network interface is attached from the image builder instance. An image builder instance can use one subnet."}},"type":"object"},"aws-native:appsync:ApiAuthMode":{"description":"An auth mode.","properties":{"authType":{"$ref":"#/types/aws-native:appsync:ApiAuthenticationType"}},"type":"object"},"aws-native:appsync:ApiAuthProvider":{"description":"An auth provider for the AppSync API.","properties":{"authType":{"$ref":"#/types/aws-native:appsync:ApiAuthenticationType"},"cognitoConfig":{"$ref":"#/types/aws-native:appsync:ApiCognitoConfig"},"lambdaAuthorizerConfig":{"$ref":"#/types/aws-native:appsync:ApiLambdaAuthorizerConfig"},"openIdConnectConfig":{"$ref":"#/types/aws-native:appsync:ApiOpenIdConnectConfig"}},"type":"object","required":["authType"]},"aws-native:appsync:ApiAuthenticationType":{"description":"Security configuration for your AppSync API.","type":"string","enum":[{"name":"AmazonCognitoUserPools","value":"AMAZON_COGNITO_USER_POOLS"},{"name":"AwsIam","value":"AWS_IAM"},{"name":"ApiKey","value":"API_KEY"},{"name":"OpenidConnect","value":"OPENID_CONNECT"},{"name":"AwsLambda","value":"AWS_LAMBDA"}]},"aws-native:appsync:ApiCognitoConfig":{"description":"Optional authorization configuration for using Amazon Cognito user pools with your API endpoint.","properties":{"appIdClientRegex":{"type":"string"},"awsRegion":{"type":"string"},"userPoolId":{"type":"string"}},"type":"object","required":["awsRegion","userPoolId"]},"aws-native:appsync:ApiDnsMap":{"description":"A map of DNS names for the AppSync API.","properties":{"http":{"type":"string","description":"The domain name of the Api's HTTP endpoint."},"realtime":{"type":"string","description":"The domain name of the Api's real-time endpoint."}},"type":"object"},"aws-native:appsync:ApiEventConfig":{"description":"The configuration for an Event Api","properties":{"authProviders":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ApiAuthProvider"},"description":"A list of authorization providers."},"connectionAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ApiAuthMode"},"description":"A list of valid authorization modes for the Event API connections."},"defaultPublishAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ApiAuthMode"},"description":"A list of valid authorization modes for the Event API publishing."},"defaultSubscribeAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ApiAuthMode"},"description":"A list of valid authorization modes for the Event API subscriptions."},"logConfig":{"$ref":"#/types/aws-native:appsync:ApiEventLogConfig","description":"The CloudWatch Logs configuration for the Event API."}},"type":"object","required":["authProviders","connectionAuthModes","defaultPublishAuthModes","defaultSubscribeAuthModes"]},"aws-native:appsync:ApiEventLogConfig":{"description":"The log config for the AppSync API.","properties":{"cloudWatchLogsRoleArn":{"type":"string","description":"The IAM service role that AWS AppSync assumes to publish CloudWatch Logs in your account."},"logLevel":{"$ref":"#/types/aws-native:appsync:ApiEventLogLevel","description":"The type of information to log for the Event API."}},"type":"object","required":["cloudWatchLogsRoleArn","logLevel"]},"aws-native:appsync:ApiEventLogLevel":{"description":"Logging level for the AppSync API.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Error","value":"ERROR"},{"name":"All","value":"ALL"},{"name":"Info","value":"INFO"},{"name":"Debug","value":"DEBUG"}]},"aws-native:appsync:ApiLambdaAuthorizerConfig":{"description":"A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time.","properties":{"authorizerResultTtlInSeconds":{"type":"integer"},"authorizerUri":{"type":"string"},"identityValidationExpression":{"type":"string"}},"type":"object","required":["authorizerUri"]},"aws-native:appsync:ApiOpenIdConnectConfig":{"description":"The OpenID Connect configuration.","properties":{"authTtl":{"type":"number"},"clientId":{"type":"string"},"iatTtl":{"type":"number"},"issuer":{"type":"string"}},"type":"object","required":["issuer"]},"aws-native:appsync:ApiTag":{"description":"An arbitrary set of tags (key-value pairs) for this AppSync API.","properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 128 characters for a tag key."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:appsync:ChannelNamespaceAuthMode":{"description":"An auth mode.","properties":{"authType":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthenticationType"}},"type":"object"},"aws-native:appsync:ChannelNamespaceAuthenticationType":{"description":"Security configuration for your AppSync API.","type":"string","enum":[{"name":"AmazonCognitoUserPools","value":"AMAZON_COGNITO_USER_POOLS"},{"name":"AwsIam","value":"AWS_IAM"},{"name":"ApiKey","value":"API_KEY"},{"name":"OpenidConnect","value":"OPENID_CONNECT"},{"name":"AwsLambda","value":"AWS_LAMBDA"}]},"aws-native:appsync:ChannelNamespaceHandlerBehavior":{"description":"Integration behavior for a handler configuration.","type":"string","enum":[{"name":"Code","value":"CODE"},{"name":"Direct","value":"DIRECT"}]},"aws-native:appsync:ChannelNamespaceHandlerConfig":{"properties":{"behavior":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceHandlerBehavior","description":"The behavior for the handler."},"integration":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceIntegration","description":"The integration data source configuration for the handler."}},"type":"object","required":["behavior","integration"]},"aws-native:appsync:ChannelNamespaceHandlerConfigs":{"properties":{"onPublish":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceHandlerConfig","description":"The configuration for the `OnPublish` handler."},"onSubscribe":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceHandlerConfig","description":"The configuration for the `OnSubscribe` handler."}},"type":"object"},"aws-native:appsync:ChannelNamespaceIntegration":{"properties":{"dataSourceName":{"type":"string","description":"Data source to invoke for this integration."},"lambdaConfig":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceLambdaConfig","description":"The configuration for a Lambda data source."}},"type":"object","required":["dataSourceName"]},"aws-native:appsync:ChannelNamespaceInvokeType":{"description":"Invocation type for direct lambda integrations.","type":"string","enum":[{"name":"RequestResponse","value":"REQUEST_RESPONSE"},{"name":"Event","value":"EVENT"}]},"aws-native:appsync:ChannelNamespaceLambdaConfig":{"properties":{"invokeType":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceInvokeType","description":"The invocation type for a Lambda data source."}},"type":"object","required":["invokeType"]},"aws-native:appsync:ChannelNamespaceTag":{"description":"An arbitrary set of tags (key-value pairs) for this AppSync API.","properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 128 characters for a tag key."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:appsync:DataSourceAuthorizationConfig":{"properties":{"authorizationType":{"type":"string","description":"The authorization type that the HTTP endpoint requires."},"awsIamConfig":{"$ref":"#/types/aws-native:appsync:DataSourceAwsIamConfig","description":"The AWS Identity and Access Management settings."}},"type":"object","required":["authorizationType"]},"aws-native:appsync:DataSourceAwsIamConfig":{"properties":{"signingRegion":{"type":"string","description":"The signing Region for AWS Identity and Access Management authorization."},"signingServiceName":{"type":"string","description":"The signing service name for AWS Identity and Access Management authorization."}},"type":"object"},"aws-native:appsync:DataSourceDeltaSyncConfig":{"properties":{"baseTableTtl":{"type":"string","description":"The number of minutes that an Item is stored in the data source."},"deltaSyncTableName":{"type":"string","description":"The Delta Sync table name."},"deltaSyncTableTtl":{"type":"string","description":"The number of minutes that a Delta Sync log entry is stored in the Delta Sync table."}},"type":"object","required":["baseTableTtl","deltaSyncTableName","deltaSyncTableTtl"]},"aws-native:appsync:DataSourceDynamoDbConfig":{"properties":{"awsRegion":{"type":"string","description":"The AWS Region."},"deltaSyncConfig":{"$ref":"#/types/aws-native:appsync:DataSourceDeltaSyncConfig","description":"The DeltaSyncConfig for a versioned datasource."},"tableName":{"type":"string","description":"The table name."},"useCallerCredentials":{"type":"boolean","description":"Set to TRUE to use AWS Identity and Access Management with this data source."},"versioned":{"type":"boolean","description":"Set to TRUE to use Conflict Detection and Resolution with this data source."}},"type":"object","required":["awsRegion","tableName"]},"aws-native:appsync:DataSourceElasticsearchConfig":{"properties":{"awsRegion":{"type":"string","description":"The AWS Region."},"endpoint":{"type":"string","description":"The endpoint."}},"type":"object","required":["awsRegion","endpoint"]},"aws-native:appsync:DataSourceEventBridgeConfig":{"properties":{"eventBusArn":{"type":"string","description":"ARN for the EventBridge bus."}},"type":"object","required":["eventBusArn"]},"aws-native:appsync:DataSourceHttpConfig":{"properties":{"authorizationConfig":{"$ref":"#/types/aws-native:appsync:DataSourceAuthorizationConfig","description":"The authorization configuration."},"endpoint":{"type":"string","description":"The endpoint."}},"type":"object","required":["endpoint"]},"aws-native:appsync:DataSourceLambdaConfig":{"properties":{"lambdaFunctionArn":{"type":"string","description":"The ARN for the Lambda function."}},"type":"object","required":["lambdaFunctionArn"]},"aws-native:appsync:DataSourceMetricsConfig":{"description":"Enables or disables enhanced data source metrics for specified data sources. Note that `MetricsConfig` won't be used unless the `dataSourceLevelMetricsBehavior` value is set to `PER_DATA_SOURCE_METRICS` . If the `dataSourceLevelMetricsBehavior` is set to `FULL_REQUEST_DATA_SOURCE_METRICS` instead, `MetricsConfig` will be ignored. However, you can still set its value.\n\n`MetricsConfig` can be `ENABLED` or `DISABLED` .","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:appsync:DataSourceOpenSearchServiceConfig":{"properties":{"awsRegion":{"type":"string","description":"The AWS Region."},"endpoint":{"type":"string","description":"The endpoint."}},"type":"object","required":["awsRegion","endpoint"]},"aws-native:appsync:DataSourceRdsHttpEndpointConfig":{"properties":{"awsRegion":{"type":"string","description":"AWS Region for RDS HTTP endpoint."},"awsSecretStoreArn":{"type":"string","description":"The ARN for database credentials stored in AWS Secrets Manager."},"databaseName":{"type":"string","description":"Logical database name."},"dbClusterIdentifier":{"type":"string","description":"Amazon RDS cluster Amazon Resource Name (ARN)."},"schema":{"type":"string","description":"Logical schema name."}},"type":"object","required":["awsRegion","awsSecretStoreArn","dbClusterIdentifier"]},"aws-native:appsync:DataSourceRelationalDatabaseConfig":{"properties":{"rdsHttpEndpointConfig":{"$ref":"#/types/aws-native:appsync:DataSourceRdsHttpEndpointConfig","description":"Information about the Amazon RDS resource."},"relationalDatabaseSourceType":{"type":"string","description":"The type of relational data source."}},"type":"object","required":["relationalDatabaseSourceType"]},"aws-native:appsync:DomainNameTag":{"description":"An arbitrary set of tags (key-value pairs) for this Domain Name.","properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:appsync:FunctionConfigurationAppSyncRuntime":{"description":"Describes a runtime used by an AWS AppSync pipeline resolver or AWS AppSync function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified.","properties":{"name":{"type":"string","description":"The name of the runtime to use. Currently, the only allowed value is APPSYNC_JS."},"runtimeVersion":{"type":"string","description":"The version of the runtime to use. Currently, the only allowed version is 1.0.0."}},"type":"object","required":["name","runtimeVersion"]},"aws-native:appsync:FunctionConfigurationLambdaConflictHandlerConfig":{"description":"The LambdaConflictHandlerConfig when configuring LAMBDA as the Conflict Handler.","properties":{"lambdaConflictHandlerArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Lambda function to use as the Conflict Handler."}},"type":"object"},"aws-native:appsync:FunctionConfigurationSyncConfig":{"description":"Describes a Sync configuration for a resolver. Specifies which Conflict Detection strategy and Resolution strategy to use when the resolver is invoked.","properties":{"conflictDetection":{"type":"string","description":"The Conflict Detection strategy to use."},"conflictHandler":{"type":"string","description":"The Conflict Resolution strategy to perform in the event of a conflict."},"lambdaConflictHandlerConfig":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationLambdaConflictHandlerConfig","description":"The `LambdaConflictHandlerConfig` when configuring `LAMBDA` as the Conflict Handler."}},"type":"object","required":["conflictDetection"]},"aws-native:appsync:GraphQlApiAdditionalAuthenticationProvider":{"properties":{"authenticationType":{"type":"string","description":"The authentication type for API key, AWS Identity and Access Management, OIDC, Amazon Cognito user pools, or AWS Lambda."},"lambdaAuthorizerConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLambdaAuthorizerConfig","description":"Configuration for AWS Lambda function authorization."},"openIdConnectConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiOpenIdConnectConfig","description":"The OIDC configuration."},"userPoolConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiCognitoUserPoolConfig","description":"The Amazon Cognito user pool configuration."}},"type":"object","required":["authenticationType"]},"aws-native:appsync:GraphQlApiCognitoUserPoolConfig":{"properties":{"appIdClientRegex":{"type":"string","description":"A regular expression for validating the incoming Amazon Cognito user pool app client ID. "},"awsRegion":{"type":"string","description":"The AWS Region in which the user pool was created."},"userPoolId":{"type":"string","description":"The user pool ID"}},"type":"object"},"aws-native:appsync:GraphQlApiEnhancedMetricsConfig":{"properties":{"dataSourceLevelMetricsBehavior":{"type":"string","description":"Controls how data source metrics will be emitted to CloudWatch. Data source metrics include:\n\n"},"operationLevelMetricsConfig":{"type":"string","description":"Controls how operation metrics will be emitted to CloudWatch. Operation metrics include:\n\n"},"resolverLevelMetricsBehavior":{"type":"string","description":"Controls how resolver metrics will be emitted to CloudWatch. Resolver metrics include:\n\n"}},"type":"object","required":["dataSourceLevelMetricsBehavior","operationLevelMetricsConfig","resolverLevelMetricsBehavior"]},"aws-native:appsync:GraphQlApiLambdaAuthorizerConfig":{"properties":{"authorizerResultTtlInSeconds":{"type":"integer","description":"The number of seconds a response should be cached for."},"authorizerUri":{"type":"string","description":"The ARN of the Lambda function to be called for authorization."},"identityValidationExpression":{"type":"string","description":"A regular expression for validation of tokens before the Lambda function is called."}},"type":"object"},"aws-native:appsync:GraphQlApiLogConfig":{"properties":{"cloudWatchLogsRoleArn":{"type":"string","description":"The service role that AWS AppSync will assume to publish to Amazon CloudWatch Logs in your account."},"excludeVerboseContent":{"type":"boolean","description":"Set to TRUE to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level."},"fieldLogLevel":{"type":"string","description":"The field logging level. Values can be NONE, ERROR, INFO, DEBUG, or ALL."}},"type":"object"},"aws-native:appsync:GraphQlApiOpenIdConnectConfig":{"properties":{"authTtl":{"type":"number","description":"The number of milliseconds that a token is valid after being authenticated."},"clientId":{"type":"string","description":"The client identifier of the Relying party at the OpenID identity provider."},"iatTtl":{"type":"number","description":"The number of milliseconds that a token is valid after it's issued to a user.\n\n"},"issuer":{"type":"string","description":"The issuer for the OIDC configuration. "}},"type":"object"},"aws-native:appsync:GraphQlApiTag":{"properties":{"key":{"type":"string","description":"Describes the key of the tag."},"value":{"type":"string","description":"Describes the value of the tag."}},"type":"object","required":["key","value"]},"aws-native:appsync:GraphQlApiUserPoolConfig":{"properties":{"appIdClientRegex":{"type":"string","description":"A regular expression for validating the incoming Amazon Cognito user pool app client ID."},"awsRegion":{"type":"string","description":"The AWS Region in which the user pool was created."},"defaultAction":{"type":"string","description":"The action that you want your GraphQL API to take when a request that uses Amazon Cognito user pool authentication doesn't match the Amazon Cognito user pool configuration."},"userPoolId":{"type":"string","description":"The user pool ID."}},"type":"object"},"aws-native:appsync:ResolverAppSyncRuntime":{"description":"Describes a runtime used by an APSYlong resolver or APSYlong function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified.","properties":{"name":{"type":"string","description":"The ``name`` of the runtime to use. Currently, the only allowed value is ``APPSYNC_JS``."},"runtimeVersion":{"type":"string","description":"The ``version`` of the runtime to use. Currently, the only allowed version is ``1.0.0``."}},"type":"object","required":["name","runtimeVersion"]},"aws-native:appsync:ResolverCachingConfig":{"description":"The caching configuration for a resolver that has caching activated.","properties":{"cachingKeys":{"type":"array","items":{"type":"string"},"description":"The caching keys for a resolver that has caching activated.\n Valid values are entries from the ``$context.arguments``, ``$context.source``, and ``$context.identity`` maps."},"ttl":{"type":"number","description":"The TTL in seconds for a resolver that has caching activated.\n Valid values are 1–3,600 seconds."}},"type":"object","required":["ttl"]},"aws-native:appsync:ResolverLambdaConflictHandlerConfig":{"description":"The ``LambdaConflictHandlerConfig`` when configuring LAMBDA as the Conflict Handler.","properties":{"lambdaConflictHandlerArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Lambda function to use as the Conflict Handler."}},"type":"object"},"aws-native:appsync:ResolverMetricsConfig":{"description":"Enables or disables enhanced resolver metrics for specified resolvers. Note that ``MetricsConfig`` won't be used unless the ``resolverLevelMetricsBehavior`` value is set to ``PER_RESOLVER_METRICS``. If the ``resolverLevelMetricsBehavior`` is set to ``FULL_REQUEST_RESOLVER_METRICS`` instead, ``MetricsConfig`` will be ignored. However, you can still set its value.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:appsync:ResolverPipelineConfig":{"description":"Use the ``PipelineConfig`` property type to specify ``PipelineConfig`` for an APSYlong resolver.\n ``PipelineConfig`` is a property of the [AWS::AppSync::Resolver](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-appsync-resolver.html) resource.","properties":{"functions":{"type":"array","items":{"type":"string"},"description":"A list of ``Function`` objects."}},"type":"object"},"aws-native:appsync:ResolverSyncConfig":{"description":"Describes a Sync configuration for a resolver.\n Specifies which Conflict Detection strategy and Resolution strategy to use when the resolver is invoked.","properties":{"conflictDetection":{"type":"string","description":"The Conflict Detection strategy to use.\n  +  *VERSION*: Detect conflicts based on object versions for this resolver.\n  +  *NONE*: Do not detect conflicts when invoking this resolver."},"conflictHandler":{"type":"string","description":"The Conflict Resolution strategy to perform in the event of a conflict.\n  +  *OPTIMISTIC_CONCURRENCY*: Resolve conflicts by rejecting mutations when versions don't match the latest version at the server.\n  +  *AUTOMERGE*: Resolve conflicts with the Automerge conflict resolution strategy.\n  +  *LAMBDA*: Resolve conflicts with an LAMlong function supplied in the ``LambdaConflictHandlerConfig``."},"lambdaConflictHandlerConfig":{"$ref":"#/types/aws-native:appsync:ResolverLambdaConflictHandlerConfig","description":"The ``LambdaConflictHandlerConfig`` when configuring ``LAMBDA`` as the Conflict Handler."}},"type":"object","required":["conflictDetection"]},"aws-native:appsync:SourceApiAssociationConfig":{"properties":{"mergeType":{"$ref":"#/types/aws-native:appsync:SourceApiAssociationConfigMergeType","description":"Configuration of the merged behavior for the association. For example when it could be auto or has to be manual."}},"type":"object"},"aws-native:appsync:SourceApiAssociationConfigMergeType":{"description":"Configuration of the merged behavior for the association. For example when it could be auto or has to be manual.","type":"string","enum":[{"name":"AutoMerge","value":"AUTO_MERGE"},{"name":"ManualMerge","value":"MANUAL_MERGE"}]},"aws-native:appsync:SourceApiAssociationStatus":{"description":"Current status of SourceApiAssociation.","type":"string","enum":[{"name":"MergeScheduled","value":"MERGE_SCHEDULED"},{"name":"MergeFailed","value":"MERGE_FAILED"},{"name":"MergeSuccess","value":"MERGE_SUCCESS"},{"name":"MergeInProgress","value":"MERGE_IN_PROGRESS"},{"name":"AutoMergeScheduleFailed","value":"AUTO_MERGE_SCHEDULE_FAILED"},{"name":"DeletionScheduled","value":"DELETION_SCHEDULED"},{"name":"DeletionInProgress","value":"DELETION_IN_PROGRESS"},{"name":"DeletionFailed","value":"DELETION_FAILED"}]},"aws-native:aps:AnomalyDetectorConfiguration":{"properties":{"randomCutForest":{"$ref":"#/types/aws-native:aps:AnomalyDetectorRandomCutForestConfiguration","description":"The Random Cut Forest algorithm configuration for anomaly detection."}},"type":"object","required":["randomCutForest"]},"aws-native:aps:AnomalyDetectorIgnoreNearExpected":{"properties":{"amount":{"type":"number"},"ratio":{"type":"number"}},"type":"object"},"aws-native:aps:AnomalyDetectorLabel":{"description":"A key-value pair to provide meta-data and multi-dimensional data analysis for filtering and aggregation.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:aps:AnomalyDetectorMissingDataAction":{"properties":{"markAsAnomaly":{"type":"boolean"},"skip":{"type":"boolean"}},"type":"object"},"aws-native:aps:AnomalyDetectorRandomCutForestConfiguration":{"properties":{"ignoreNearExpectedFromAbove":{"$ref":"#/types/aws-native:aps:AnomalyDetectorIgnoreNearExpected","description":"Configuration for ignoring values that are near expected values from above during anomaly detection."},"ignoreNearExpectedFromBelow":{"$ref":"#/types/aws-native:aps:AnomalyDetectorIgnoreNearExpected","description":"Configuration for ignoring values that are near expected values from below during anomaly detection."},"query":{"type":"string","description":"The Prometheus query used to retrieve the time-series data for anomaly detection.\n\n\u003e Random Cut Forest queries must be wrapped by a supported PromQL aggregation operator. For more information, see [Aggregation operators](https://docs.aws.amazon.com/https://prometheus.io/docs/prometheus/latest/querying/operators/#aggregation-operators) on the *Prometheus docs* website.\n\u003e \n\u003e *Supported PromQL aggregation operators* : `avg` , `count` , `group` , `max` , `min` , `quantile` , `stddev` , `stdvar` , and `sum` ."},"sampleSize":{"type":"integer","description":"The number of data points sampled from the input stream for the Random Cut Forest algorithm. The default number is 256 consecutive data points."},"shingleSize":{"type":"integer","description":"The number of consecutive data points used to create a shingle for the Random Cut Forest algorithm. The default number is 8 consecutive data points."}},"type":"object","required":["query"]},"aws-native:aps:AnomalyDetectorTag":{"description":"A key-value pair to associate a tag level security for the resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:aps:RuleGroupsNamespaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:aps:ScraperCloudWatchLogDestination":{"description":"Represents a cloudwatch logs destination for scraper logging","properties":{"logGroupArn":{"type":"string","description":"ARN of the CloudWatch log group"}},"type":"object"},"aws-native:aps:ScraperComponent":{"properties":{"config":{"$ref":"#/types/aws-native:aps:ScraperComponentConfig","description":"The configuration settings for the scraper component."},"type":{"$ref":"#/types/aws-native:aps:ScraperComponentType","description":"The type of the scraper component."}},"type":"object","required":["type"]},"aws-native:aps:ScraperComponentConfig":{"properties":{"options":{"type":"object","additionalProperties":{"type":"string"},"description":"Configuration options for the scraper component."}},"type":"object"},"aws-native:aps:ScraperComponentType":{"description":"Type of scraper component","type":"string","enum":[{"name":"ServiceDiscovery","value":"SERVICE_DISCOVERY"},{"name":"Collector","value":"COLLECTOR"},{"name":"Exporter","value":"EXPORTER"}]},"aws-native:aps:ScraperDestination":{"description":"Scraper metrics destination","properties":{"ampConfiguration":{"$ref":"#/types/aws-native:aps:ScraperDestinationAmpConfigurationProperties","description":"Configuration for Amazon Managed Prometheus metrics destination"}},"type":"object"},"aws-native:aps:ScraperDestinationAmpConfigurationProperties":{"description":"Configuration for Amazon Managed Prometheus metrics destination","properties":{"workspaceArn":{"type":"string","description":"ARN of an Amazon Managed Prometheus workspace"}},"type":"object","required":["workspaceArn"]},"aws-native:aps:ScraperLoggingConfiguration":{"description":"Configuration for scraper logging","properties":{"loggingDestination":{"$ref":"#/types/aws-native:aps:ScraperLoggingDestination"},"scraperComponents":{"type":"array","items":{"$ref":"#/types/aws-native:aps:ScraperComponent"}}},"type":"object","required":["loggingDestination","scraperComponents"]},"aws-native:aps:ScraperLoggingDestination":{"description":"Destination for scraper logging","properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:aps:ScraperCloudWatchLogDestination","description":"The CloudWatch Logs configuration for the scraper logging destination."}},"type":"object"},"aws-native:aps:ScraperRoleConfiguration":{"description":"Role configuration","properties":{"sourceRoleArn":{"type":"string","description":"IAM Role in source account"},"targetRoleArn":{"type":"string","description":"IAM Role in the target account"}},"type":"object"},"aws-native:aps:ScraperScrapeConfiguration":{"description":"Scraper configuration","properties":{"configurationBlob":{"type":"string","description":"Prometheus compatible scrape configuration in base64 encoded blob format"}},"type":"object"},"aws-native:aps:ScraperSource":{"description":"Scraper metrics source","properties":{"eksConfiguration":{"$ref":"#/types/aws-native:aps:ScraperSourceEksConfigurationProperties","description":"Configuration for EKS metrics source"},"vpcConfiguration":{"$ref":"#/types/aws-native:aps:ScraperSourceVpcConfigurationProperties","description":"Configuration for VPC metrics source"}},"type":"object"},"aws-native:aps:ScraperSourceEksConfigurationProperties":{"description":"Configuration for EKS metrics source","properties":{"clusterArn":{"type":"string","description":"ARN of an EKS cluster"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"List of security group IDs"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"List of subnet IDs"}},"type":"object","required":["clusterArn","subnetIds"]},"aws-native:aps:ScraperSourceVpcConfigurationProperties":{"description":"Configuration for VPC metrics source","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"List of security group IDs"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"List of subnet IDs"}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:aps:ScraperTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:aps:WorkspaceCloudWatchLogDestination":{"description":"Represents a cloudwatch logs destination for query logging","properties":{"logGroupArn":{"type":"string","description":"The ARN of the CloudWatch Logs log group"}},"type":"object","required":["logGroupArn"]},"aws-native:aps:WorkspaceConfiguration":{"description":"Workspace configuration","properties":{"limitsPerLabelSets":{"type":"array","items":{"$ref":"#/types/aws-native:aps:WorkspaceLimitsPerLabelSet"},"description":"An array of label set and associated limits"},"retentionPeriodInDays":{"type":"integer","description":"How many days that metrics are retained in the workspace"}},"type":"object"},"aws-native:aps:WorkspaceLabel":{"description":"Series label","properties":{"name":{"type":"string","description":"Name of the label"},"value":{"type":"string","description":"Value of the label"}},"type":"object","required":["name","value"]},"aws-native:aps:WorkspaceLimitsPerLabelSet":{"description":"Label set and its associated limits","properties":{"labelSet":{"type":"array","items":{"$ref":"#/types/aws-native:aps:WorkspaceLabel"},"description":"An array of series labels"},"limits":{"$ref":"#/types/aws-native:aps:WorkspaceLimitsPerLabelSetEntry","description":"This structure contains the information about the limits that apply to time series that match this label set."}},"type":"object","required":["labelSet","limits"]},"aws-native:aps:WorkspaceLimitsPerLabelSetEntry":{"description":"Limits that can be applied to a label set","properties":{"maxSeries":{"type":"integer","description":"The maximum number of active series that can be ingested for this label set"}},"type":"object"},"aws-native:aps:WorkspaceLoggingConfiguration":{"description":"Logging configuration","properties":{"logGroupArn":{"type":"string","description":"CloudWatch log group ARN"}},"type":"object"},"aws-native:aps:WorkspaceLoggingDestination":{"description":"Destinations for query logging","properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:aps:WorkspaceCloudWatchLogDestination","description":"Configuration details for logging to CloudWatch Logs."},"filters":{"$ref":"#/types/aws-native:aps:WorkspaceLoggingFilter","description":"Filtering criteria that determine which queries are logged."}},"type":"object","required":["cloudWatchLogs","filters"]},"aws-native:aps:WorkspaceLoggingFilter":{"description":"Filters for logging","properties":{"qspThreshold":{"type":"integer","description":"Query logs with QSP above this limit are vended"}},"type":"object","required":["qspThreshold"]},"aws-native:aps:WorkspaceQueryLoggingConfiguration":{"description":"Query logging configuration","properties":{"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:aps:WorkspaceLoggingDestination"},"description":"The destinations configuration for query logging"}},"type":"object","required":["destinations"]},"aws-native:aps:WorkspaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:arcregionswitch:PlanAlarmCondition":{"type":"string","enum":[{"name":"Red","value":"red"},{"name":"Green","value":"green"}]},"aws-native:arcregionswitch:PlanAlarmType":{"type":"string","enum":[{"name":"ApplicationHealth","value":"applicationHealth"},{"name":"Trigger","value":"trigger"}]},"aws-native:arcregionswitch:PlanArcRoutingControlConfiguration":{"properties":{"crossAccountRole":{"type":"string"},"externalId":{"type":"string"},"regionAndRoutingControls":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"}},"timeoutMinutes":{"type":"number"}},"type":"object","required":["regionAndRoutingControls"]},"aws-native:arcregionswitch:PlanArcRoutingControlState":{"properties":{"routingControlArn":{"type":"string"},"state":{"$ref":"#/types/aws-native:arcregionswitch:PlanRoutingControlStateChange"}},"type":"object","required":["routingControlArn","state"]},"aws-native:arcregionswitch:PlanAsg":{"properties":{"arn":{"type":"string"},"crossAccountRole":{"type":"string"},"externalId":{"type":"string"}},"type":"object"},"aws-native:arcregionswitch:PlanAssociatedAlarm":{"properties":{"alarmType":{"$ref":"#/types/aws-native:arcregionswitch:PlanAlarmType","description":"The alarm type for an associated alarm. An associated CloudWatch alarm can be an application health alarm or a trigger alarm."},"crossAccountRole":{"type":"string","description":"The cross account role for the configuration."},"externalId":{"type":"string","description":"The external ID (secret key) for the configuration."},"resourceIdentifier":{"type":"string","description":"The resource identifier for alarms that you associate with a plan."}},"type":"object","required":["alarmType","resourceIdentifier"]},"aws-native:arcregionswitch:PlanCustomActionLambdaConfiguration":{"properties":{"lambdas":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanLambdas"}},"regionToRun":{"$ref":"#/types/aws-native:arcregionswitch:PlanRegionToRunIn"},"retryIntervalMinutes":{"type":"number"},"timeoutMinutes":{"type":"number"},"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanLambdaUngraceful"}},"type":"object","required":["lambdas","regionToRun","retryIntervalMinutes"]},"aws-native:arcregionswitch:PlanDocumentDbConfiguration":{"properties":{"behavior":{"$ref":"pulumi.json#/Any"},"crossAccountRole":{"type":"string"},"databaseClusterArns":{"type":"array","items":{"type":"string"}},"externalId":{"type":"string"},"globalClusterIdentifier":{"type":"string"},"timeoutMinutes":{"type":"number"},"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanDocumentDbUngraceful"}},"type":"object","required":["behavior","databaseClusterArns","globalClusterIdentifier"]},"aws-native:arcregionswitch:PlanDocumentDbUngraceful":{"properties":{"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanDocumentDbUngracefulBehavior"}},"type":"object"},"aws-native:arcregionswitch:PlanDocumentDbUngracefulBehavior":{"type":"string","enum":[{"name":"Failover","value":"failover"}]},"aws-native:arcregionswitch:PlanEc2AsgCapacityIncreaseConfiguration":{"properties":{"asgs":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanAsg"}},"capacityMonitoringApproach":{"$ref":"pulumi.json#/Any"},"targetPercent":{"type":"number"},"timeoutMinutes":{"type":"number"},"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanEc2Ungraceful"}},"type":"object","required":["asgs"]},"aws-native:arcregionswitch:PlanEc2Ungraceful":{"properties":{"minimumSuccessPercentage":{"type":"number"}},"type":"object","required":["minimumSuccessPercentage"]},"aws-native:arcregionswitch:PlanEcsCapacityIncreaseConfiguration":{"properties":{"capacityMonitoringApproach":{"$ref":"pulumi.json#/Any"},"services":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanService"}},"targetPercent":{"type":"number"},"timeoutMinutes":{"type":"number"},"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanEcsUngraceful"}},"type":"object","required":["services"]},"aws-native:arcregionswitch:PlanEcsUngraceful":{"properties":{"minimumSuccessPercentage":{"type":"number"}},"type":"object","required":["minimumSuccessPercentage"]},"aws-native:arcregionswitch:PlanEksCluster":{"properties":{"clusterArn":{"type":"string"},"crossAccountRole":{"type":"string"},"externalId":{"type":"string"}},"type":"object","required":["clusterArn"]},"aws-native:arcregionswitch:PlanEksResourceScalingConfiguration":{"properties":{"capacityMonitoringApproach":{"$ref":"pulumi.json#/Any"},"eksClusters":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanEksCluster"}},"kubernetesResourceType":{"$ref":"#/types/aws-native:arcregionswitch:PlanKubernetesResourceType"},"scalingResources":{"type":"array","items":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"}}},"targetPercent":{"type":"number"},"timeoutMinutes":{"type":"number"},"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanEksResourceScalingUngraceful"}},"type":"object","required":["kubernetesResourceType"]},"aws-native:arcregionswitch:PlanEksResourceScalingUngraceful":{"properties":{"minimumSuccessPercentage":{"type":"number"}},"type":"object","required":["minimumSuccessPercentage"]},"aws-native:arcregionswitch:PlanExecutionApprovalConfiguration":{"properties":{"approvalRole":{"type":"string"},"timeoutMinutes":{"type":"number"}},"type":"object","required":["approvalRole"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration0Properties":{"properties":{"customActionLambdaConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanCustomActionLambdaConfiguration"}},"type":"object","required":["customActionLambdaConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration10Properties":{"properties":{"documentDbConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanDocumentDbConfiguration"}},"type":"object","required":["documentDbConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration11Properties":{"properties":{"rdsPromoteReadReplicaConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanRdsPromoteReadReplicaConfiguration"}},"type":"object","required":["rdsPromoteReadReplicaConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration12Properties":{"properties":{"rdsCreateCrossRegionReadReplicaConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanRdsCreateCrossRegionReplicaConfiguration"}},"type":"object","required":["rdsCreateCrossRegionReadReplicaConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration1Properties":{"properties":{"ec2AsgCapacityIncreaseConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanEc2AsgCapacityIncreaseConfiguration"}},"type":"object","required":["ec2AsgCapacityIncreaseConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration2Properties":{"properties":{"executionApprovalConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionApprovalConfiguration"}},"type":"object","required":["executionApprovalConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration3Properties":{"properties":{"arcRoutingControlConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanArcRoutingControlConfiguration"}},"type":"object","required":["arcRoutingControlConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration4Properties":{"properties":{"globalAuroraConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanGlobalAuroraConfiguration"}},"type":"object","required":["globalAuroraConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration5Properties":{"properties":{"parallelConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanParallelExecutionBlockConfiguration"}},"type":"object","required":["parallelConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration6Properties":{"properties":{"regionSwitchPlanConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanRegionSwitchPlanConfiguration"}},"type":"object","required":["regionSwitchPlanConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration7Properties":{"properties":{"ecsCapacityIncreaseConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanEcsCapacityIncreaseConfiguration"}},"type":"object","required":["ecsCapacityIncreaseConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration8Properties":{"properties":{"eksResourceScalingConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanEksResourceScalingConfiguration"}},"type":"object","required":["eksResourceScalingConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockConfiguration9Properties":{"properties":{"route53HealthCheckConfig":{"$ref":"#/types/aws-native:arcregionswitch:PlanRoute53HealthCheckConfiguration"}},"type":"object","required":["route53HealthCheckConfig"]},"aws-native:arcregionswitch:PlanExecutionBlockType":{"type":"string","enum":[{"name":"CustomActionLambda","value":"CustomActionLambda"},{"name":"ManualApproval","value":"ManualApproval"},{"name":"AuroraGlobalDatabase","value":"AuroraGlobalDatabase"},{"name":"Ec2AutoScaling","value":"EC2AutoScaling"},{"name":"ArcRoutingControl","value":"ARCRoutingControl"},{"name":"ArcRegionSwitchPlan","value":"ARCRegionSwitchPlan"},{"name":"Parallel","value":"Parallel"},{"name":"EcsServiceScaling","value":"ECSServiceScaling"},{"name":"EksResourceScaling","value":"EKSResourceScaling"},{"name":"Route53HealthCheck","value":"Route53HealthCheck"},{"name":"DocumentDb","value":"DocumentDb"},{"name":"RdsPromoteReadReplica","value":"RdsPromoteReadReplica"},{"name":"RdsCreateCrossRegionReplica","value":"RdsCreateCrossRegionReplica"}]},"aws-native:arcregionswitch:PlanGlobalAuroraConfiguration":{"properties":{"behavior":{"$ref":"pulumi.json#/Any"},"crossAccountRole":{"type":"string"},"databaseClusterArns":{"type":"array","items":{"type":"string"}},"externalId":{"type":"string"},"globalClusterIdentifier":{"type":"string"},"timeoutMinutes":{"type":"number"},"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanGlobalAuroraUngraceful"}},"type":"object","required":["behavior","databaseClusterArns","globalClusterIdentifier"]},"aws-native:arcregionswitch:PlanGlobalAuroraUngraceful":{"properties":{"ungraceful":{"$ref":"#/types/aws-native:arcregionswitch:PlanGlobalAuroraUngracefulBehavior"}},"type":"object"},"aws-native:arcregionswitch:PlanGlobalAuroraUngracefulBehavior":{"type":"string","enum":[{"name":"Failover","value":"failover"}]},"aws-native:arcregionswitch:PlanHealthCheckState":{"properties":{"healthCheckId":{"type":"string"},"region":{"type":"string"}},"type":"object"},"aws-native:arcregionswitch:PlanKubernetesResourceType":{"properties":{"apiVersion":{"type":"string"},"kind":{"type":"string"}},"type":"object","required":["apiVersion","kind"]},"aws-native:arcregionswitch:PlanKubernetesScalingResource":{"properties":{"hpaName":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"}},"type":"object","required":["name","namespace"]},"aws-native:arcregionswitch:PlanLambdaUngraceful":{"properties":{"behavior":{"$ref":"pulumi.json#/Any"}},"type":"object"},"aws-native:arcregionswitch:PlanLambdas":{"properties":{"arn":{"type":"string"},"crossAccountRole":{"type":"string"},"externalId":{"type":"string"}},"type":"object"},"aws-native:arcregionswitch:PlanParallelExecutionBlockConfiguration":{"properties":{"steps":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanStep"}}},"type":"object","required":["steps"]},"aws-native:arcregionswitch:PlanRdsCreateCrossRegionReplicaConfiguration":{"properties":{"crossAccountRole":{"type":"string"},"dbInstanceArnMap":{"type":"object","additionalProperties":{"type":"string"}},"externalId":{"type":"string"},"timeoutMinutes":{"type":"number"}},"type":"object","required":["dbInstanceArnMap"]},"aws-native:arcregionswitch:PlanRdsPromoteReadReplicaConfiguration":{"properties":{"crossAccountRole":{"type":"string"},"dbInstanceArnMap":{"type":"object","additionalProperties":{"type":"string"}},"externalId":{"type":"string"},"timeoutMinutes":{"type":"number"}},"type":"object","required":["dbInstanceArnMap"]},"aws-native:arcregionswitch:PlanRecoveryApproach":{"type":"string","enum":[{"name":"ActiveActive","value":"activeActive"},{"name":"ActivePassive","value":"activePassive"}]},"aws-native:arcregionswitch:PlanRegionSwitchPlanConfiguration":{"properties":{"arn":{"type":"string"},"crossAccountRole":{"type":"string"},"externalId":{"type":"string"}},"type":"object","required":["arn"]},"aws-native:arcregionswitch:PlanRegionToRunIn":{"type":"string","enum":[{"name":"ActivatingRegion","value":"activatingRegion"},{"name":"DeactivatingRegion","value":"deactivatingRegion"},{"name":"ActiveRegion","value":"activeRegion"},{"name":"InactiveRegion","value":"inactiveRegion"}]},"aws-native:arcregionswitch:PlanReportConfiguration":{"properties":{"reportOutput":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanReportOutputConfigurationProperties"},"description":"The output configuration for the report."}},"type":"object"},"aws-native:arcregionswitch:PlanReportOutputConfiguration0Properties":{"properties":{"s3Configuration":{"$ref":"#/types/aws-native:arcregionswitch:PlanS3ReportOutputConfiguration"}},"type":"object","required":["s3Configuration"]},"aws-native:arcregionswitch:PlanReportOutputConfigurationProperties":{"properties":{"s3Configuration":{"$ref":"#/types/aws-native:arcregionswitch:PlanS3ReportOutputConfiguration"}},"type":"object","required":["s3Configuration"]},"aws-native:arcregionswitch:PlanRoute53HealthCheckConfiguration":{"properties":{"crossAccountRole":{"type":"string"},"externalId":{"type":"string"},"hostedZoneId":{"type":"string"},"recordName":{"type":"string"},"recordSets":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanRoute53ResourceRecordSet"}},"timeoutMinutes":{"type":"number"}},"type":"object","required":["hostedZoneId","recordName"]},"aws-native:arcregionswitch:PlanRoute53ResourceRecordSet":{"properties":{"recordSetIdentifier":{"type":"string"},"region":{"type":"string"}},"type":"object"},"aws-native:arcregionswitch:PlanRoutingControlStateChange":{"type":"string","enum":[{"name":"On","value":"On"},{"name":"Off","value":"Off"}]},"aws-native:arcregionswitch:PlanS3ReportOutputConfiguration":{"properties":{"bucketOwner":{"type":"string"},"bucketPath":{"type":"string"}},"type":"object"},"aws-native:arcregionswitch:PlanService":{"properties":{"clusterArn":{"type":"string"},"crossAccountRole":{"type":"string"},"externalId":{"type":"string"},"serviceArn":{"type":"string"}},"type":"object"},"aws-native:arcregionswitch:PlanStep":{"properties":{"description":{"type":"string","description":"The description of a step in a workflow."},"executionBlockConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration0Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration1Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration2Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration3Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration4Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration5Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration6Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration7Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration8Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration9Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration10Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration11Properties"},{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockConfiguration12Properties"}],"description":"The configuration for an execution block in a workflow."},"executionBlockType":{"$ref":"#/types/aws-native:arcregionswitch:PlanExecutionBlockType","description":"The type of an execution block in a workflow."},"name":{"type":"string","description":"The name of a step in a workflow."}},"type":"object","required":["executionBlockConfiguration","executionBlockType","name"]},"aws-native:arcregionswitch:PlanTrigger":{"properties":{"action":{"$ref":"#/types/aws-native:arcregionswitch:PlanWorkflowTargetAction","description":"The action to perform when the trigger fires. Valid values include ACTIVATE and DEACTIVATE."},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanTriggerCondition"},"description":"The conditions that must be met for the trigger to fire."},"description":{"type":"string","description":"The description for a trigger."},"minDelayMinutesBetweenExecutions":{"type":"number","description":"The minimum time, in minutes, that must elapse between automatic executions of the plan."},"targetRegion":{"type":"string","description":"The AWS Region for a trigger."}},"type":"object","required":["action","conditions","minDelayMinutesBetweenExecutions","targetRegion"]},"aws-native:arcregionswitch:PlanTriggerCondition":{"properties":{"associatedAlarmName":{"type":"string","description":"The name of the CloudWatch alarm associated with the condition."},"condition":{"$ref":"#/types/aws-native:arcregionswitch:PlanAlarmCondition","description":"The condition that must be met. Valid values include ALARM and OK."}},"type":"object","required":["associatedAlarmName","condition"]},"aws-native:arcregionswitch:PlanWorkflow":{"properties":{"steps":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanStep"},"description":"The steps that make up the workflow."},"workflowDescription":{"type":"string","description":"The description of the workflow."},"workflowTargetAction":{"$ref":"#/types/aws-native:arcregionswitch:PlanWorkflowTargetAction","description":"The action that the workflow performs. Valid values include ACTIVATE and DEACTIVATE."},"workflowTargetRegion":{"type":"string","description":"The AWS Region that the workflow targets."}},"type":"object","required":["workflowTargetAction"]},"aws-native:arcregionswitch:PlanWorkflowTargetAction":{"type":"string","enum":[{"name":"Activate","value":"activate"},{"name":"Deactivate","value":"deactivate"},{"name":"PostRecovery","value":"postRecovery"}]},"aws-native:arcregionswitch:Route53HealthChecksProperties":{"properties":{"healthCheckIds":{"type":"array","items":{"type":"string"}},"hostedZoneIds":{"type":"array","items":{"type":"string"}},"recordNames":{"type":"array","items":{"type":"string"}},"regions":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:arczonalshift:AutoshiftObserverNotificationStatusEnum":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"}]},"aws-native:arczonalshift:ZonalAutoshiftConfigurationControlCondition":{"properties":{"alarmIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) for an Amazon CloudWatch alarm that you specify as a control condition for a practice run."},"type":{"type":"string","description":"The type of alarm specified for a practice run. You can only specify Amazon CloudWatch alarms for practice runs, so the only valid value is `CLOUDWATCH` ."}},"type":"object","required":["alarmIdentifier","type"]},"aws-native:arczonalshift:ZonalAutoshiftConfigurationPracticeRunConfiguration":{"properties":{"blockedDates":{"type":"array","items":{"type":"string"},"description":"An array of one or more dates that you can specify when AWS does not start practice runs for a resource. Dates are in UTC.\n\nSpecify blocked dates in the format `YYYY-MM-DD` , separated by spaces."},"blockedWindows":{"type":"array","items":{"type":"string"},"description":"An array of one or more days and times that you can specify when ARC does not start practice runs for a resource. Days and times are in UTC.\n\nSpecify blocked windows in the format `DAY:HH:MM-DAY:HH:MM` , separated by spaces. For example, `MON:18:30-MON:19:30 TUE:18:30-TUE:19:30` .\n\n\u003e Blocked windows have to start and end on the same day. Windows that span multiple days aren't supported."},"blockingAlarms":{"type":"array","items":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationControlCondition"},"description":"An optional alarm that you can specify that blocks practice runs when the alarm is in an `ALARM` state. When a blocking alarm goes into an `ALARM` state, it prevents practice runs from being started, and ends practice runs that are in progress."},"outcomeAlarms":{"type":"array","items":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationControlCondition"},"description":"The alarm that you specify to monitor the health of your application during practice runs. When the outcome alarm goes into an `ALARM` state, the practice run is ended and the outcome is set to `FAILED` ."}},"type":"object","required":["outcomeAlarms"]},"aws-native:arczonalshift:ZonalAutoshiftConfigurationZonalAutoshiftStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"}]},"aws-native:athena:CapacityReservationCapacityAssignment":{"properties":{"workgroupNames":{"type":"array","items":{"type":"string"}}},"type":"object","required":["workgroupNames"]},"aws-native:athena:CapacityReservationCapacityAssignmentConfiguration":{"description":"Assignment configuration to assign workgroups to a reservation","properties":{"capacityAssignments":{"type":"array","items":{"$ref":"#/types/aws-native:athena:CapacityReservationCapacityAssignment"},"description":"The list of assignments that make up the capacity assignment configuration."}},"type":"object","required":["capacityAssignments"]},"aws-native:athena:CapacityReservationStatus":{"type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Active","value":"ACTIVE"},{"name":"Cancelling","value":"CANCELLING"},{"name":"Cancelled","value":"CANCELLED"},{"name":"Failed","value":"FAILED"},{"name":"UpdatePending","value":"UPDATE_PENDING"}]},"aws-native:athena:CapacityReservationTag":{"properties":{"key":{"type":"string","description":"A tag key. The tag key length is from 1 to 128 Unicode characters in UTF-8. You can use letters and numbers representable in UTF-8, and the following characters: + - = . _ : / @. Tag keys are case-sensitive and must be unique per resource."},"value":{"type":"string","description":"A tag value. The tag value length is from 0 to 256 Unicode characters in UTF-8. You can use letters and numbers representable in UTF-8, and the following characters: + - = . _ : / @. Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:athena:DataCatalogStatus":{"description":"The status of the creation or deletion of the data catalog. LAMBDA, GLUE, and HIVE data catalog types are created synchronously. Their status is either CREATE_COMPLETE or CREATE_FAILED. The FEDERATED data catalog type is created asynchronously.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"CreateComplete","value":"CREATE_COMPLETE"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"CreateFailedCleanupInProgress","value":"CREATE_FAILED_CLEANUP_IN_PROGRESS"},{"name":"CreateFailedCleanupComplete","value":"CREATE_FAILED_CLEANUP_COMPLETE"},{"name":"CreateFailedCleanupFailed","value":"CREATE_FAILED_CLEANUP_FAILED"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"DeleteComplete","value":"DELETE_COMPLETE"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:athena:DataCatalogTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:athena:DataCatalogType":{"description":"The type of data catalog to create: LAMBDA for a federated catalog, GLUE for AWS Glue Catalog, or HIVE for an external hive metastore. FEDERATED is a federated catalog for which Athena creates the connection and the Lambda function for you based on the parameters that you pass.","type":"string","enum":[{"name":"Lambda","value":"LAMBDA"},{"name":"Glue","value":"GLUE"},{"name":"Hive","value":"HIVE"},{"name":"Federated","value":"FEDERATED"}]},"aws-native:athena:WorkGroupAclConfiguration":{"description":"Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results","properties":{"s3AclOption":{"$ref":"#/types/aws-native:athena:WorkGroupS3AclOption","description":"The Amazon S3 canned ACL that Athena should specify when storing query results, including data files inserted by Athena as the result of statements like CTAS or INSERT INTO. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL` . If a query runs in a workgroup and the workgroup overrides client-side settings, then the Amazon S3 canned ACL specified in the workgroup's settings is used for all queries that run in the workgroup. For more information about Amazon S3 canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl) in the *Amazon S3 User Guide* ."}},"type":"object","required":["s3AclOption"]},"aws-native:athena:WorkGroupClassification":{"description":"A classification refers to a set of specific configurations.","properties":{"name":{"type":"string","description":"The name of the configuration classification."},"properties":{"type":"object","additionalProperties":{"type":"string"},"description":"A set of properties specified within a configuration classification."}},"type":"object"},"aws-native:athena:WorkGroupCloudWatchLoggingConfiguration":{"description":"Configuration settings for delivering logs to Amazon CloudWatch log groups.","properties":{"enabled":{"type":"boolean","description":"Enables CloudWatch logging."},"logGroup":{"type":"string","description":"The name of the log group in Amazon CloudWatch Logs where you want to publish your logs."},"logStreamNamePrefix":{"type":"string","description":"Prefix for the CloudWatch log stream name."},"logTypes":{"type":"object","additionalProperties":{"type":"array","items":{"type":"string"}},"description":"The types of logs that you want to publish to CloudWatch."}},"type":"object"},"aws-native:athena:WorkGroupConfiguration":{"properties":{"additionalConfiguration":{"type":"string","description":"Specifies a user defined JSON string that is passed to the session engine."},"bytesScannedCutoffPerQuery":{"type":"integer","description":"The upper limit (cutoff) for the amount of bytes a single query in a workgroup is allowed to scan. No default is defined.\n\n\u003e This property currently supports integer types. Support for long values is planned."},"customerContentEncryptionConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupCustomerContentEncryptionConfiguration","description":"Specifies the KMS key that is used to encrypt the user's data stores in Athena. This setting does not apply to Athena SQL workgroups."},"enforceWorkGroupConfiguration":{"type":"boolean","description":"If set to \"true\", the settings for the workgroup override client-side settings. If set to \"false\", client-side settings are used. For more information, see [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."},"engineConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupEngineConfiguration"},"engineVersion":{"$ref":"#/types/aws-native:athena:WorkGroupEngineVersion","description":"The engine version that all queries running on the workgroup use."},"executionRole":{"type":"string","description":"Role used to access user resources in an Athena for Apache Spark session. This property applies only to Spark-enabled workgroups in Athena."},"managedQueryResultsConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupManagedQueryResultsConfiguration","description":"The configuration for storing results in Athena owned storage, which includes whether this feature is enabled; whether encryption configuration, if any, is used for encrypting query results."},"monitoringConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupMonitoringConfiguration","description":"Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc."},"publishCloudWatchMetricsEnabled":{"type":"boolean","description":"Indicates that the Amazon CloudWatch metrics are enabled for the workgroup."},"requesterPaysEnabled":{"type":"boolean","description":"If set to `true` , allows members assigned to a workgroup to reference Amazon S3 Requester Pays buckets in queries. If set to `false` , workgroup members cannot query data from Requester Pays buckets, and queries that retrieve data from Requester Pays buckets cause an error. The default is `false` . For more information about Requester Pays buckets, see [Requester Pays Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) in the *Amazon Simple Storage Service Developer Guide* ."},"resultConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupResultConfiguration","description":"Specifies the location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) ."}},"type":"object"},"aws-native:athena:WorkGroupConfigurationUpdates":{"description":"The configuration information that will be updated for this workgroup, which includes the location in Amazon S3 where query results are stored, the encryption option, if any, used for query results, whether the Amazon CloudWatch Metrics are enabled for the workgroup, whether the workgroup settings override the client-side settings, and the data usage limit for the amount of bytes scanned per query, if it is specified. ","properties":{"additionalConfiguration":{"type":"string"},"bytesScannedCutoffPerQuery":{"type":"integer"},"customerContentEncryptionConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupCustomerContentEncryptionConfiguration"},"enforceWorkGroupConfiguration":{"type":"boolean"},"engineConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupEngineConfiguration"},"engineVersion":{"$ref":"#/types/aws-native:athena:WorkGroupEngineVersion"},"executionRole":{"type":"string"},"managedQueryResultsConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupManagedQueryResultsConfiguration"},"monitoringConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupMonitoringConfiguration"},"publishCloudWatchMetricsEnabled":{"type":"boolean"},"removeBytesScannedCutoffPerQuery":{"type":"boolean"},"removeCustomerContentEncryptionConfiguration":{"type":"boolean"},"requesterPaysEnabled":{"type":"boolean"},"resultConfigurationUpdates":{"$ref":"#/types/aws-native:athena:WorkGroupResultConfigurationUpdates"}},"type":"object"},"aws-native:athena:WorkGroupCustomerContentEncryptionConfiguration":{"description":"Indicates the KMS key for encrypting notebook content.","properties":{"kmsKey":{"type":"string","description":"The customer managed KMS key that is used to encrypt the user's data stores in Athena."}},"type":"object","required":["kmsKey"]},"aws-native:athena:WorkGroupEncryptionConfiguration":{"description":"If query results are encrypted in Amazon S3, indicates the encryption option used (for example, SSE-KMS or CSE-KMS) and key information.","properties":{"encryptionOption":{"$ref":"#/types/aws-native:athena:WorkGroupEncryptionOption","description":"Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys ( `SSE_S3` ), server-side encryption with KMS-managed keys ( `SSE_KMS` ), or client-side encryption with KMS-managed keys ( `CSE_KMS` ) is used.\n\nIf a query runs in a workgroup and the workgroup overrides client-side settings, then the workgroup's setting for encryption is used. It specifies whether query results must be encrypted, for all queries that run in this workgroup."},"kmsKey":{"type":"string","description":"For `SSE_KMS` and `CSE_KMS` , this is the KMS key ARN or ID."}},"type":"object","required":["encryptionOption"]},"aws-native:athena:WorkGroupEncryptionOption":{"description":"Indicates whether Amazon S3 server-side encryption with Amazon S3-managed keys (SSE-S3), server-side encryption with KMS-managed keys (SSE-KMS), or client-side encryption with KMS-managed keys (CSE-KMS) is used.","type":"string","enum":[{"name":"SseS3","value":"SSE_S3"},{"name":"SseKms","value":"SSE_KMS"},{"name":"CseKms","value":"CSE_KMS"}]},"aws-native:athena:WorkGroupEngineConfiguration":{"description":"The engine configuration for running queries.","properties":{"additionalConfigs":{"type":"object","additionalProperties":{"type":"string"},"description":"Contains additional notebook engine MAP\u003cstring, string\u003e parameter mappings in the form of key-value pairs. To specify an Athena notebook that the Jupyter server will download and serve, specify a value for the StartSessionRequest$NotebookVersion field, and then add a key named NotebookId to AdditionalConfigs that has the value of the Athena notebook ID."},"classifications":{"type":"array","items":{"$ref":"#/types/aws-native:athena:WorkGroupClassification"},"description":"The configuration classifications that can be specified for the engine."},"coordinatorDpuSize":{"type":"integer","description":"The number of DPUs to use for the coordinator. A coordinator is a special executor that orchestrates processing work and manages other executors in a notebook session. The default is 1."},"defaultExecutorDpuSize":{"type":"integer","description":"The default number of DPUs to use for executors. An executor is the smallest unit of compute that a notebook session can request from Athena. The default is 1."},"maxConcurrentDpus":{"type":"integer","description":"The maximum number of DPUs that can run concurrently."},"sparkProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"Specifies custom jar files and Spark properties for use cases like cluster encryption, table formats, and general Spark tuning."}},"type":"object"},"aws-native:athena:WorkGroupEngineVersion":{"description":"The Athena engine version for running queries.","properties":{"effectiveEngineVersion":{"type":"string","description":"Read only. The engine version on which the query runs. If the user requests a valid engine version other than Auto, the effective engine version is the same as the engine version that the user requested. If the user requests Auto, the effective engine version is chosen by Athena. When a request to update the engine version is made by a `CreateWorkGroup` or `UpdateWorkGroup` operation, the `EffectiveEngineVersion` field is ignored."},"selectedEngineVersion":{"type":"string","description":"The engine version requested by the user. Possible values are determined by the output of `ListEngineVersions` , including AUTO. The default is AUTO."}},"type":"object"},"aws-native:athena:WorkGroupManagedLoggingConfiguration":{"description":"Configuration settings for managed log persistence.","properties":{"enabled":{"type":"boolean","description":"Enables managed log persistence."},"kmsKey":{"type":"string","description":"The KMS key ARN to encrypt the logs stored in managed log persistence."}},"type":"object"},"aws-native:athena:WorkGroupManagedQueryResultsConfiguration":{"description":"The configuration for the managed query results and encryption option. ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time","properties":{"enabled":{"type":"boolean","description":"If set to true, allows you to store query results in Athena owned storage. If set to false, workgroup member stores query results in location specified under `ResultConfiguration$OutputLocation` . The default is false. A workgroup cannot have the `ResultConfiguration$OutputLocation` parameter when you set this field to true."},"encryptionConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupManagedStorageEncryptionConfiguration","description":"If you encrypt query and calculation results in Athena owned storage, this field indicates the encryption option (for example, SSE_KMS or CSE_KMS) and key information."}},"type":"object"},"aws-native:athena:WorkGroupManagedStorageEncryptionConfiguration":{"description":"Indicates the encryption configuration for Athena Managed Storage. If not setting this field, Managed Storage will encrypt the query results with Athena's encryption key","properties":{"kmsKey":{"type":"string"}},"type":"object"},"aws-native:athena:WorkGroupMonitoringConfiguration":{"description":"Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.","properties":{"cloudWatchLoggingConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupCloudWatchLoggingConfiguration","description":"Configuration settings for delivering logs to Amazon CloudWatch log groups."},"managedLoggingConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupManagedLoggingConfiguration","description":"Configuration settings for managed log persistence."},"s3LoggingConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupS3LoggingConfiguration","description":"Configuration settings for delivering logs to Amazon S3 buckets."}},"type":"object"},"aws-native:athena:WorkGroupResultConfiguration":{"description":"The location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. These are known as \"client-side settings\". If workgroup settings override client-side settings, then the query uses the workgroup settings.\n","properties":{"aclConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupAclConfiguration","description":"Indicates that an Amazon S3 canned ACL should be set to control ownership of stored query results. Currently the only supported canned ACL is `BUCKET_OWNER_FULL_CONTROL` . This is a client-side setting. If workgroup settings override client-side settings, then the query uses the ACL configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` ."},"encryptionConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupEncryptionConfiguration","description":"If query results are encrypted in Amazon S3, indicates the encryption option used (for example, `SSE_KMS` or `CSE_KMS` ) and key information. This is a client-side setting. If workgroup settings override client-side settings, then the query uses the encryption configuration that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` and [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."},"expectedBucketOwner":{"type":"string","description":"The account ID that you expect to be the owner of the Amazon S3 bucket specified by `ResultConfiguration:OutputLocation` . If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.\n\nThis is a client-side setting. If workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See `EnforceWorkGroupConfiguration` ."},"outputLocation":{"type":"string","description":"The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/` . To run a query, you must specify the query results location using either a client-side setting for individual queries or a location specified by the workgroup. If workgroup settings override client-side settings, then the query uses the location specified for the workgroup. If no query location is set, Athena issues an error. For more information, see [Work with query results and recent queries](https://docs.aws.amazon.com/athena/latest/ug/querying.html) and `EnforceWorkGroupConfiguration` ."}},"type":"object"},"aws-native:athena:WorkGroupResultConfigurationUpdates":{"description":"The result configuration information about the queries in this workgroup that will be updated. Includes the updated results location and an updated option for encrypting query results. ","properties":{"aclConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupAclConfiguration","description":"The ACL configuration for the query results."},"encryptionConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupEncryptionConfiguration","description":"The encryption configuration for the query results."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that you expect to be the owner of the Amazon S3 bucket specified by [](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-outputlocation) . If set, Athena uses the value for `ExpectedBucketOwner` when it makes Amazon S3 calls to your specified output location. If the `ExpectedBucketOwner` AWS account ID does not match the actual owner of the Amazon S3 bucket, the call fails with a permissions error.\n\nIf workgroup settings override client-side settings, then the query uses the `ExpectedBucketOwner` setting that is specified for the workgroup, and also uses the location for storing query results specified in the workgroup. See [](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-workgroupconfiguration.html#cfn-athena-workgroup-workgroupconfiguration-enforceworkgroupconfiguration) and [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."},"outputLocation":{"type":"string","description":"The location in Amazon S3 where your query results are stored, such as `s3://path/to/query/bucket/` . For more information, see [Query Results](https://docs.aws.amazon.com/athena/latest/ug/querying.html) If workgroup settings override client-side settings, then the query uses the location for the query results and the encryption configuration that are specified for the workgroup. The \"workgroup settings override\" is specified in EnforceWorkGroupConfiguration (true/false) in the WorkGroupConfiguration. See `EnforceWorkGroupConfiguration` ."},"removeAclConfiguration":{"type":"boolean","description":"If set to `true` , indicates that the previously-specified ACL configuration for queries in this workgroup should be ignored and set to null. If set to `false` or not set, and a value is present in the `AclConfiguration` of `ResultConfigurationUpdates` , the `AclConfiguration` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."},"removeEncryptionConfiguration":{"type":"boolean","description":"If set to \"true\", indicates that the previously-specified encryption configuration (also known as the client-side setting) for queries in this workgroup should be ignored and set to null. If set to \"false\" or not set, and a value is present in the EncryptionConfiguration in ResultConfigurationUpdates (the client-side setting), the EncryptionConfiguration in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."},"removeExpectedBucketOwner":{"type":"boolean","description":"If set to \"true\", removes the AWS account ID previously specified for [](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-athena-workgroup-resultconfiguration.html#cfn-athena-workgroup-resultconfiguration-expectedbucketowner) . If set to \"false\" or not set, and a value is present in the `ExpectedBucketOwner` in `ResultConfigurationUpdates` (the client-side setting), the `ExpectedBucketOwner` in the workgroup's `ResultConfiguration` is updated with the new value. For more information, see [Workgroup Settings Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."},"removeOutputLocation":{"type":"boolean","description":"If set to \"true\", indicates that the previously-specified query results location (also known as a client-side setting) for queries in this workgroup should be ignored and set to null. If set to \"false\" or not set, and a value is present in the OutputLocation in ResultConfigurationUpdates (the client-side setting), the OutputLocation in the workgroup's ResultConfiguration will be updated with the new value. For more information, see [Override Client-Side Settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) ."}},"type":"object"},"aws-native:athena:WorkGroupS3AclOption":{"description":"The Amazon S3 canned ACL that Athena should specify when storing query results. Currently the only supported canned ACL is BUCKET_OWNER_FULL_CONTROL","type":"string","enum":[{"name":"BucketOwnerFullControl","value":"BUCKET_OWNER_FULL_CONTROL"}]},"aws-native:athena:WorkGroupS3LoggingConfiguration":{"description":"Configuration settings for delivering logs to Amazon S3 buckets.","properties":{"enabled":{"type":"boolean","description":"Enables S3 log delivery."},"kmsKey":{"type":"string","description":"The KMS key ARN to encrypt the logs published to the given Amazon S3 destination."},"logLocation":{"type":"string","description":"The Amazon S3 destination URI for log publishing."}},"type":"object"},"aws-native:athena:WorkGroupState":{"description":"The state of the workgroup: ENABLED or DISABLED.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:athena:WorkGroupTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:auditmanager:AssessmentAwsAccount":{"description":"The AWS account associated with the assessment.","properties":{"emailAddress":{"type":"string","description":"The email address that's associated with the AWS account ."},"id":{"type":"string","description":"The identifier for the AWS account ."},"name":{"type":"string","description":"The name of the AWS account ."}},"type":"object"},"aws-native:auditmanager:AssessmentAwsService":{"description":"An AWS service such as Amazon S3, AWS CloudTrail, and so on.","properties":{"serviceName":{"type":"string","description":"The name of the AWS service ."}},"type":"object"},"aws-native:auditmanager:AssessmentDelegation":{"description":"The assignment of a control set to a delegate for review.","properties":{"assessmentId":{"type":"string","description":"The identifier for the assessment that's associated with the delegation."},"assessmentName":{"type":"string","description":"The name of the assessment that's associated with the delegation."},"comment":{"type":"string","description":"The comment that's related to the delegation."},"controlSetId":{"type":"string","description":"The identifier for the control set that's associated with the delegation."},"createdBy":{"type":"string","description":"The user or role that created the delegation.\n\n*Minimum* : `1`\n\n*Maximum* : `100`\n\n*Pattern* : `^[a-zA-Z0-9-_()\\\\[\\\\]\\\\s]+$`"},"creationTime":{"type":"number","description":"Specifies when the delegation was created."},"id":{"type":"string","description":"The unique identifier for the delegation."},"lastUpdated":{"type":"number","description":"Specifies when the delegation was last updated."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role."},"roleType":{"$ref":"#/types/aws-native:auditmanager:AssessmentRoleType","description":"The type of customer persona.\n\n\u003e In `CreateAssessment` , `roleType` can only be `PROCESS_OWNER` .\n\u003e \n\u003e In `UpdateSettings` , `roleType` can only be `PROCESS_OWNER` .\n\u003e \n\u003e In `BatchCreateDelegationByAssessment` , `roleType` can only be `RESOURCE_OWNER` ."},"status":{"$ref":"#/types/aws-native:auditmanager:AssessmentDelegationStatus","description":"The status of the delegation."}},"type":"object"},"aws-native:auditmanager:AssessmentDelegationStatus":{"description":"The status of the delegation.","type":"string","enum":[{"name":"InProgress","value":"IN_PROGRESS"},{"name":"UnderReview","value":"UNDER_REVIEW"},{"name":"Complete","value":"COMPLETE"}]},"aws-native:auditmanager:AssessmentReportDestinationType":{"description":"The destination type, such as Amazon S3.","type":"string","enum":[{"name":"S3","value":"S3"}]},"aws-native:auditmanager:AssessmentReportsDestination":{"description":"The destination in which evidence reports are stored for the specified assessment.","properties":{"destination":{"type":"string","description":"The destination bucket where Audit Manager stores assessment reports."},"destinationType":{"$ref":"#/types/aws-native:auditmanager:AssessmentReportDestinationType","description":"The destination type, such as Amazon S3."}},"type":"object"},"aws-native:auditmanager:AssessmentRole":{"description":"The wrapper that contains AWS Audit Manager role information, such as the role type and IAM ARN.","properties":{"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role."},"roleType":{"$ref":"#/types/aws-native:auditmanager:AssessmentRoleType","description":"The type of customer persona.\n\n\u003e In `CreateAssessment` , `roleType` can only be `PROCESS_OWNER` .\n\u003e \n\u003e In `UpdateSettings` , `roleType` can only be `PROCESS_OWNER` .\n\u003e \n\u003e In `BatchCreateDelegationByAssessment` , `roleType` can only be `RESOURCE_OWNER` ."}},"type":"object"},"aws-native:auditmanager:AssessmentRoleType":{"description":" The IAM role type.","type":"string","enum":[{"name":"ProcessOwner","value":"PROCESS_OWNER"},{"name":"ResourceOwner","value":"RESOURCE_OWNER"}]},"aws-native:auditmanager:AssessmentScope":{"description":"The wrapper that contains the AWS accounts and AWS services in scope for the assessment.","properties":{"awsAccounts":{"type":"array","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentAwsAccount"},"description":"The AWS accounts included in scope."},"awsServices":{"type":"array","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentAwsService"},"description":"The AWS services included in scope."}},"type":"object"},"aws-native:auditmanager:AssessmentStatus":{"description":"The status of the specified assessment. ","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:auditmanager:AssessmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:autoscaling:AutoScalingGroupAcceleratorCountRequest":{"description":"``AcceleratorCountRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum number of accelerators for an instance type.","properties":{"max":{"type":"integer","description":"The maximum value."},"min":{"type":"integer","description":"The minimum value."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupAcceleratorTotalMemoryMiBRequest":{"description":"``AcceleratorTotalMemoryMiBRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum total memory size for the accelerators for an instance type, in MiB.","properties":{"max":{"type":"integer","description":"The memory maximum in MiB."},"min":{"type":"integer","description":"The memory minimum in MiB."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupAvailabilityZoneDistribution":{"description":"``AvailabilityZoneDistribution`` is a property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource.","properties":{"capacityDistributionStrategy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneDistributionCapacityDistributionStrategy","description":"If launches fail in an Availability Zone, the following strategies are available. The default is ``balanced-best-effort``. \n  +  ``balanced-only`` - If launches fail in an Availability Zone, Auto Scaling will continue to attempt to launch in the unhealthy zone to preserve a balanced distribution.\n  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupAvailabilityZoneDistributionCapacityDistributionStrategy":{"description":"If launches fail in an Availability Zone, the following strategies are available. The default is ``balanced-best-effort``. \n  +  ``balanced-only`` - If launches fail in an Availability Zone, Auto Scaling will continue to attempt to launch in the unhealthy zone to preserve a balanced distribution.\n  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead.","type":"string","enum":[{"name":"BalancedBestEffort","value":"balanced-best-effort"},{"name":"BalancedOnly","value":"balanced-only"}]},"aws-native:autoscaling:AutoScalingGroupAvailabilityZoneImpairmentPolicy":{"description":"Describes an Availability Zone impairment policy.","properties":{"impairedZoneHealthCheckBehavior":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneImpairmentPolicyImpairedZoneHealthCheckBehavior","description":"Specifies the health check behavior for the impaired Availability Zone in an active zonal shift. If you select ``Replace unhealthy``, instances that appear unhealthy will be replaced in all Availability Zones. If you select ``Ignore unhealthy``, instances will not be replaced in the Availability Zone with the active zonal shift. For more information, see [Auto Scaling group zonal shift](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-zonal-shift.html) in the *Amazon EC2 Auto Scaling User Guide*."},"zonalShiftEnabled":{"type":"boolean","description":"If ``true``, enable zonal shift for your Auto Scaling group."}},"type":"object","required":["impairedZoneHealthCheckBehavior","zonalShiftEnabled"]},"aws-native:autoscaling:AutoScalingGroupAvailabilityZoneImpairmentPolicyImpairedZoneHealthCheckBehavior":{"description":"Specifies the health check behavior for the impaired Availability Zone in an active zonal shift. If you select ``Replace unhealthy``, instances that appear unhealthy will be replaced in all Availability Zones. If you select ``Ignore unhealthy``, instances will not be replaced in the Availability Zone with the active zonal shift. For more information, see [Auto Scaling group zonal shift](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-zonal-shift.html) in the *Amazon EC2 Auto Scaling User Guide*.","type":"string","enum":[{"name":"IgnoreUnhealthy","value":"IgnoreUnhealthy"},{"name":"ReplaceUnhealthy","value":"ReplaceUnhealthy"}]},"aws-native:autoscaling:AutoScalingGroupBaselineEbsBandwidthMbpsRequest":{"description":"``BaselineEbsBandwidthMbpsRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum baseline bandwidth performance for an instance type, in Mbps.","properties":{"max":{"type":"integer","description":"The maximum value in Mbps."},"min":{"type":"integer","description":"The minimum value in Mbps."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupBaselinePerformanceFactorsRequest":{"description":"The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Auto Scaling uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. \n Currently, this parameter only supports CPU performance as a baseline performance factor. For example, specifying ``c6i`` uses the CPU performance of the ``c6i`` family as the baseline reference.","properties":{"cpu":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupCpuPerformanceFactorRequest","description":"The CPU performance to consider, using an instance family as the baseline reference."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupCapacityReservationSpecification":{"description":"Describes the Capacity Reservation preference and targeting options. If you specify ``open`` or ``none`` for ``CapacityReservationPreference``, do not specify a ``CapacityReservationTarget``.","properties":{"capacityReservationPreference":{"type":"string","description":"The capacity reservation preference. The following options are available: \n  +  ``capacity-reservations-only`` - Auto Scaling will only launch instances into a Capacity Reservation or Capacity Reservation resource group. If capacity isn't available, instances will fail to launch.\n  +  ``capacity-reservations-first`` - Auto Scaling will try to launch instances into a Capacity Reservation or Capacity Reservation resource group first. If capacity isn't available, instances will run in On-Demand capacity.\n  +  ``none`` - Auto Scaling will not launch instances into a Capacity Reservation. Instances will run in On-Demand capacity. \n  +  ``default`` - Auto Scaling uses the Capacity Reservation preference from your launch template or an open Capacity Reservation."},"capacityReservationTarget":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupCapacityReservationTarget","description":"Describes a target Capacity Reservation or Capacity Reservation resource group."}},"type":"object","required":["capacityReservationPreference"]},"aws-native:autoscaling:AutoScalingGroupCapacityReservationTarget":{"description":"The target for the Capacity Reservation. Specify Capacity Reservations IDs or Capacity Reservation resource group ARNs.","properties":{"capacityReservationIds":{"type":"array","items":{"type":"string"},"description":"The Capacity Reservation IDs to launch instances into."},"capacityReservationResourceGroupArns":{"type":"array","items":{"type":"string"},"description":"The resource group ARNs of the Capacity Reservation to launch instances into."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupCpuPerformanceFactorRequest":{"description":"The CPU performance to consider, using an instance family as the baseline reference.","properties":{"references":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupPerformanceFactorReferenceRequest"},"description":"Specify an instance family to use as the baseline reference for CPU performance. All instance types that match your specified attributes will be compared against the CPU performance of the referenced instance family, regardless of CPU manufacturer or architecture differences. \n  Currently only one instance family can be specified in the list."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupInstanceLifecyclePolicy":{"description":"The instance lifecycle policy for the Auto Scaling group. This policy controls instance behavior when an instance transitions through its lifecycle states. Configure retention triggers to specify when instances should move to a ``Retained`` state instead of automatic termination. \n For more information, see [Control instance retention with instance lifecycle policies](https://docs.aws.amazon.com/autoscaling/ec2/userguide/instance-lifecycle-policy.html) in the *Amazon EC2 Auto Scaling User Guide*.","properties":{"retentionTriggers":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupRetentionTriggers","description":"Specifies the conditions that trigger instance retention behavior. These triggers determine when instances should move to a ``Retained`` state instead of automatic termination. This allows you to maintain control over instance management when lifecycles transition and operations fail."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupInstanceMaintenancePolicy":{"description":"``InstanceMaintenancePolicy`` is a property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource.\n For more information, see [Instance maintenance policies](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-maintenance-policy.html) in the *Amazon EC2 Auto Scaling User Guide*.","properties":{"maxHealthyPercentage":{"type":"integer","description":"Specifies the upper threshold as a percentage of the desired capacity of the Auto Scaling group. It represents the maximum percentage of the group that can be in service and healthy, or pending, to support your workload when replacing instances. Value range is 100 to 200. To clear a previously set value, specify a value of ``-1``.\n Both ``MinHealthyPercentage`` and ``MaxHealthyPercentage`` must be specified, and the difference between them cannot be greater than 100. A large range increases the number of instances that can be replaced at the same time."},"minHealthyPercentage":{"type":"integer","description":"Specifies the lower threshold as a percentage of the desired capacity of the Auto Scaling group. It represents the minimum percentage of the group to keep in service, healthy, and ready to use to support your workload when replacing instances. Value range is 0 to 100. To clear a previously set value, specify a value of ``-1``."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupInstanceRequirements":{"description":"The attributes for the instance types for a mixed instances policy. Amazon EC2 Auto Scaling uses your specified requirements to identify instance types. Then, it uses your On-Demand and Spot allocation strategies to launch instances from these instance types.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 Auto Scaling can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n  +  ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n  +  ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n  \n  You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n  For an example template, see [Configure Amazon EC2 Auto Scaling resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-ec2-auto-scaling.html).\n For more information, see [Creating an Auto Scaling group using attribute-based instance type selection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-asg-instance-type-requirements.html) in the *Amazon EC2 Auto Scaling User Guide*. For help determining which instance types match your attributes before you apply them to your Auto Scaling group, see [Preview instance types with specified attributes](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-get-instance-types-from-instance-requirements) in the *Amazon EC2 User Guide for Linux Instances*.\n ``InstanceRequirements`` is a property of the ``LaunchTemplateOverrides`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplate.html) property type.","properties":{"acceleratorCount":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAcceleratorCountRequest","description":"The minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) for an instance type.\n To exclude accelerator-enabled instance types, set ``Max`` to ``0``.\n Default: No minimum or maximum limits"},"acceleratorManufacturers":{"type":"array","items":{"type":"string"},"description":"Indicates whether instance types must have accelerators by specific manufacturers.\n  +  For instance types with NVIDIA devices, specify ``nvidia``.\n  +  For instance types with AMD devices, specify ``amd``.\n  +  For instance types with AWS devices, specify ``amazon-web-services``.\n  +  For instance types with Xilinx devices, specify ``xilinx``.\n  \n Default: Any manufacturer"},"acceleratorNames":{"type":"array","items":{"type":"string"},"description":"Lists the accelerators that must be on an instance type.\n  +  For instance types with NVIDIA A100 GPUs, specify ``a100``.\n  +  For instance types with NVIDIA V100 GPUs, specify ``v100``.\n  +  For instance types with NVIDIA K80 GPUs, specify ``k80``.\n  +  For instance types with NVIDIA T4 GPUs, specify ``t4``.\n  +  For instance types with NVIDIA M60 GPUs, specify ``m60``.\n  +  For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520``.\n  +  For instance types with Xilinx VU9P FPGAs, specify ``vu9p``.\n  \n Default: Any accelerator"},"acceleratorTotalMemoryMiB":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAcceleratorTotalMemoryMiBRequest","description":"The minimum and maximum total memory size for the accelerators on an instance type, in MiB.\n Default: No minimum or maximum limits"},"acceleratorTypes":{"type":"array","items":{"type":"string"},"description":"Lists the accelerator types that must be on an instance type.\n  +  For instance types with GPU accelerators, specify ``gpu``.\n  +  For instance types with FPGA accelerators, specify ``fpga``.\n  +  For instance types with inference accelerators, specify ``inference``.\n  \n Default: Any accelerator type"},"allowedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes.\n You can use strings with one or more wild cards, represented by an asterisk (``*``), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge``, ``c5*.*``, ``m5a.*``, ``r*``, ``*3*``.\n For example, if you specify ``c5*``, Amazon EC2 Auto Scaling will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*``, Amazon EC2 Auto Scaling will allow all the M5a instance types, but not the M5n instance types.\n  If you specify ``AllowedInstanceTypes``, you can't specify ``ExcludedInstanceTypes``.\n  Default: All instance types"},"bareMetal":{"type":"string","description":"Indicates whether bare metal instance types are included, excluded, or required.\n Default: ``excluded``"},"baselineEbsBandwidthMbps":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupBaselineEbsBandwidthMbpsRequest","description":"The minimum and maximum baseline bandwidth performance for an instance type, in Mbps. For more information, see [Amazon EBS–optimized instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html) in the *Amazon EC2 User Guide*.\n Default: No minimum or maximum limits"},"baselinePerformanceFactors":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupBaselinePerformanceFactorsRequest","description":"The baseline performance factors for the instance requirements."},"burstablePerformance":{"type":"string","description":"Indicates whether burstable performance instance types are included, excluded, or required. For more information, see [Burstable performance instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html) in the *Amazon EC2 User Guide*.\n Default: ``excluded``"},"cpuManufacturers":{"type":"array","items":{"type":"string"},"description":"Lists which specific CPU manufacturers to include.\n  +  For instance types with Intel CPUs, specify ``intel``.\n  +  For instance types with AMD CPUs, specify ``amd``.\n  +  For instance types with AWS CPUs, specify ``amazon-web-services``.\n  +  For instance types with Apple CPUs, specify ``apple``.\n  \n  Don't confuse the CPU hardware manufacturer with the CPU hardware architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. \n  Default: Any manufacturer"},"excludedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk (``*``), to exclude an instance family, type, size, or generation. The following are examples: ``m5.8xlarge``, ``c5*.*``, ``m5a.*``, ``r*``, ``*3*``. \n For example, if you specify ``c5*``, you are excluding the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*``, Amazon EC2 Auto Scaling will exclude all the M5a instance types, but not the M5n instance types.\n  If you specify ``ExcludedInstanceTypes``, you can't specify ``AllowedInstanceTypes``.\n  Default: No excluded instance types"},"instanceGenerations":{"type":"array","items":{"type":"string"},"description":"Indicates whether current or previous generation instance types are included.\n  +  For current generation instance types, specify ``current``. The current generation includes EC2 instance types currently recommended for use. This typically includes the latest two to three generations in each instance family. For more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide*.\n  +  For previous generation instance types, specify ``previous``.\n  \n Default: Any current or previous generation"},"localStorage":{"type":"string","description":"Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, see [Amazon EC2 instance store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html) in the *Amazon EC2 User Guide*.\n Default: ``included``"},"localStorageTypes":{"type":"array","items":{"type":"string"},"description":"Indicates the type of local storage that is required.\n  +  For instance types with hard disk drive (HDD) storage, specify ``hdd``.\n  +  For instance types with solid state drive (SSD) storage, specify ``ssd``.\n  \n Default: Any local storage type"},"maxSpotPriceAsPercentageOfOptimalOnDemandPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold.\n The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage.\n If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib``, the price protection threshold is based on the per-vCPU or per-memory price instead of the per instance price. \n  Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, Amazon EC2 Auto Scaling will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as ``999999``."},"memoryGiBPerVCpu":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMemoryGiBPerVCpuRequest","description":"The minimum and maximum amount of memory per vCPU for an instance type, in GiB.\n Default: No minimum or maximum limits"},"memoryMiB":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMemoryMiBRequest","description":"The minimum and maximum instance memory size for an instance type, in MiB."},"networkBandwidthGbps":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNetworkBandwidthGbpsRequest","description":"The minimum and maximum amount of network bandwidth, in gigabits per second (Gbps).\n Default: No minimum or maximum limits"},"networkInterfaceCount":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNetworkInterfaceCountRequest","description":"The minimum and maximum number of network interfaces for an instance type.\n Default: No minimum or maximum limits"},"onDemandMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold. \n The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage.\n To turn off price protection, specify a high value, such as ``999999``. \n If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib``, the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per instance price. \n Default: ``20``"},"requireHibernateSupport":{"type":"boolean","description":"Indicates whether instance types must provide On-Demand Instance hibernation support.\n Default: ``false``"},"spotMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage higher than an identified Spot price. The identified Spot price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold.\n The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. \n If you set ``DesiredCapacityType`` to ``vcpu`` or ``memory-mib``, the price protection threshold is based on the per-vCPU or per-memory price instead of the per instance price. \n  Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, Amazon EC2 Auto Scaling will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as ``999999``."},"totalLocalStorageGb":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTotalLocalStorageGbRequest","description":"The minimum and maximum total local storage size for an instance type, in GB.\n Default: No minimum or maximum limits"},"vCpuCount":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupVCpuCountRequest","description":"The minimum and maximum number of vCPUs for an instance type."}},"type":"object","required":["memoryMiB","vCpuCount"]},"aws-native:autoscaling:AutoScalingGroupInstancesDistribution":{"description":"Use this structure to specify the distribution of On-Demand Instances and Spot Instances and the allocation strategies used to fulfill On-Demand and Spot capacities for a mixed instances policy.\n For more information, see [Auto Scaling groups with multiple instance types and purchase options](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups.html) in the *Amazon EC2 Auto Scaling User Guide*.\n ``InstancesDistribution`` is a property of the [AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html) property type.","properties":{"onDemandAllocationStrategy":{"type":"string","description":"The allocation strategy to apply to your On-Demand Instances when they are launched. Possible instance types are determined by the launch template overrides that you specify.\n The following lists the valid values:\n  + lowest-price Uses price to determine which instance types are the highest priority, launching the lowest priced instance types within an Availability Zone first. This is the default value for Auto Scaling groups that specify InstanceRequirements. + prioritized You set the order of instance types for the launch template overrides from highest to lowest priority (from first to last in the list). Amazon EC2 Auto Scaling launches your highest priority instance types first. If all your On-Demand capacity cannot be fulfilled using your highest priority instance type, then Amazon EC2 Auto Scaling launches the remaining capacity using the second priority instance type, and so on. This is the default value for Auto Scaling groups that don't specify InstanceRequirements and cannot be used for groups that do."},"onDemandBaseCapacity":{"type":"integer","description":"The minimum amount of the Auto Scaling group's capacity that must be fulfilled by On-Demand Instances. This base portion is launched first as your group scales.\n This number has the same unit of measurement as the group's desired capacity. If you change the default unit of measurement (number of instances) by specifying weighted capacity values in your launch template overrides list, or by changing the default desired capacity type setting of the group, you must specify this number using the same unit of measurement.\n Default: 0\n  An update to this setting means a gradual replacement of instances to adjust the current On-Demand Instance levels. When replacing instances, Amazon EC2 Auto Scaling launches new instances before terminating the previous ones."},"onDemandPercentageAboveBaseCapacity":{"type":"integer","description":"Controls the percentages of On-Demand Instances and Spot Instances for your additional capacity beyond ``OnDemandBaseCapacity``. Expressed as a number (for example, 20 specifies 20% On-Demand Instances, 80% Spot Instances). If set to 100, only On-Demand Instances are used.\n Default: 100\n  An update to this setting means a gradual replacement of instances to adjust the current On-Demand and Spot Instance levels for your additional capacity higher than the base capacity. When replacing instances, Amazon EC2 Auto Scaling launches new instances before terminating the previous ones."},"spotAllocationStrategy":{"type":"string","description":"The allocation strategy to apply to your Spot Instances when they are launched. Possible instance types are determined by the launch template overrides that you specify.\n The following lists the valid values:\n  + capacity-optimized Requests Spot Instances using pools that are optimally chosen based on the available Spot capacity. This strategy has the lowest risk of interruption. To give certain instance types a higher chance of launching first, use capacity-optimized-prioritized. + capacity-optimized-prioritized You set the order of instance types for the launch template overrides from highest to lowest priority (from first to last in the list). Amazon EC2 Auto Scaling honors the instance type priorities on a best effort basis but optimizes for capacity first. Note that if the On-Demand allocation strategy is set to prioritized, the same priority is applied when fulfilling On-Demand capacity. This is not a valid value for Auto Scaling groups that specify InstanceRequirements. + lowest-price Requests Spot Instances using the lowest priced pools within an Availability Zone, across the number of Spot pools that you specify for the SpotInstancePools property. To ensure that your desired capacity is met, you might receive Spot Instances from several pools. This is the default value, but it might lead to high interruption rates because this strategy only considers instance price and not available capacity. + price-capacity-optimized (recommended) The price and capacity optimized allocation strategy looks at both price and capacity to select the Spot Instance pools that are the least likely to be interrupted and have the lowest possible price."},"spotInstancePools":{"type":"integer","description":"The number of Spot Instance pools across which to allocate your Spot Instances. The Spot pools are determined from the different instance types in the overrides. Valid only when the ``SpotAllocationStrategy`` is ``lowest-price``. Value must be in the range of 1–20.\n Default: 2"},"spotMaxPrice":{"type":"string","description":"The maximum price per unit hour that you are willing to pay for a Spot Instance. If your maximum price is lower than the Spot price for the instance types that you selected, your Spot Instances are not launched. We do not recommend specifying a maximum price because it can lead to increased interruptions. When Spot Instances launch, you pay the current Spot price. To remove a maximum price that you previously set, include the property but specify an empty string (\"\") for the value.\n  If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify one.\n  Valid Range: Minimum value of 0.001"}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupLaunchTemplate":{"description":"Use this structure to specify the launch templates and instance types (overrides) for a mixed instances policy.\n ``LaunchTemplate`` is a property of the [AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html) property type.","properties":{"launchTemplateSpecification":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplateSpecification","description":"The launch template."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplateOverrides"},"description":"Any properties that you specify override the same properties in the launch template."}},"type":"object","required":["launchTemplateSpecification"]},"aws-native:autoscaling:AutoScalingGroupLaunchTemplateOverrides":{"description":"Use this structure to let Amazon EC2 Auto Scaling do the following when the Auto Scaling group has a mixed instances policy:\n  +  Override the instance type that is specified in the launch template.\n  +  Use multiple instance types.\n  \n Specify the instance types that you want, or define your instance requirements instead and let Amazon EC2 Auto Scaling provision the available instance types that meet your requirements. This can provide Amazon EC2 Auto Scaling with a larger selection of instance types to choose from when fulfilling Spot and On-Demand capacities. You can view which instance types are matched before you apply the instance requirements to your Auto Scaling group.\n After you define your instance requirements, you don't have to keep updating these settings to get new EC2 instance types automatically. Amazon EC2 Auto Scaling uses the instance requirements of the Auto Scaling group to determine whether a new EC2 instance type can be used.\n ``LaunchTemplateOverrides`` is a property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplate.html) property type.","properties":{"imageId":{"type":"string","description":"The ID of the Amazon Machine Image (AMI) to use for instances launched with this override. When using Instance Refresh with ``ReplaceRootVolume`` strategy, this specifies the AMI for root volume replacement operations. \n  For ``ReplaceRootVolume`` operations: \n  +  All overrides in the ``MixedInstancesPolicy`` must specify an ImageId\n  +  The AMI must contain only a single root volume\n  +  Root volume replacement doesn't support multi-volume AMIs"},"instanceRequirements":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceRequirements","description":"The instance requirements. Amazon EC2 Auto Scaling uses your specified requirements to identify instance types. Then, it uses your On-Demand and Spot allocation strategies to launch instances from these instance types.\n You can specify up to four separate sets of instance requirements per Auto Scaling group. This is useful for provisioning instances from different Amazon Machine Images (AMIs) in the same Auto Scaling group. To do this, create the AMIs and create a new launch template for each AMI. Then, create a compatible set of instance requirements for each launch template. \n  If you specify ``InstanceRequirements``, you can't specify ``InstanceType``."},"instanceType":{"type":"string","description":"The instance type, such as ``m3.xlarge``. You must specify an instance type that is supported in your requested Region and Availability Zones. For more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide*.\n You can specify up to 40 instance types per Auto Scaling group."},"launchTemplateSpecification":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplateSpecification","description":"Provides a launch template for the specified instance type or set of instance requirements. For example, some instance types might require a launch template with a different AMI. If not provided, Amazon EC2 Auto Scaling uses the launch template that's specified in the ``LaunchTemplate`` definition. For more information, see [Specifying a different launch template for an instance type](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups-launch-template-overrides.html) in the *Amazon EC2 Auto Scaling User Guide*. \n You can specify up to 20 launch templates per Auto Scaling group. The launch templates specified in the overrides and in the ``LaunchTemplate`` definition count towards this limit."},"weightedCapacity":{"type":"string","description":"If you provide a list of instance types to use, you can specify the number of capacity units provided by each instance type in terms of virtual CPUs, memory, storage, throughput, or other relative performance characteristic. When a Spot or On-Demand Instance is launched, the capacity units count toward the desired capacity. Amazon EC2 Auto Scaling launches instances until the desired capacity is totally fulfilled, even if this results in an overage. For example, if there are two units remaining to fulfill capacity, and Amazon EC2 Auto Scaling can only launch an instance with a ``WeightedCapacity`` of five units, the instance is launched, and the desired capacity is exceeded by three units. For more information, see [Configure instance weighting for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups-instance-weighting.html) in the *Amazon EC2 Auto Scaling User Guide*. Value must be in the range of 1-999. \n If you specify a value for ``WeightedCapacity`` for one instance type, you must specify a value for ``WeightedCapacity`` for all of them.\n  Every Auto Scaling group has three size parameters (``DesiredCapacity``, ``MaxSize``, and ``MinSize``). Usually, you set these sizes based on a specific number of instances. However, if you configure a mixed instances policy that defines weights for the instance types, you must specify these sizes with the same units that you use for weighting instances."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupLaunchTemplateSpecification":{"description":"Specifies a launch template to use when provisioning EC2 instances for an Auto Scaling group.\n You must specify the following:\n  +  The ID or the name of the launch template, but not both.\n  +  The version of the launch template.\n  \n ``LaunchTemplateSpecification`` is property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource. It is also a property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplate.html) and [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property types.\n For information about creating a launch template, see [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html) and [Create a launch template for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-launch-template.html) in the *Amazon EC2 Auto Scaling User Guide*.\n For examples of launch templates, see [Create launch templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-ec2-launch-templates.html).","properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template.\n You must specify the ``LaunchTemplateID`` or the ``LaunchTemplateName``, but not both."},"launchTemplateName":{"type":"string","description":"The name of the launch template.\n You must specify the ``LaunchTemplateName`` or the ``LaunchTemplateID``, but not both."},"version":{"type":"string","description":"The version number of the launch template.\n Specifying ``$Latest`` or ``$Default`` for the template version number is not supported. However, you can specify ``LatestVersionNumber`` or ``DefaultVersionNumber`` using the ``Fn::GetAtt`` intrinsic function. For more information, see [Fn::GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html).\n  For an example of using the ``Fn::GetAtt`` function, see the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html#aws-resource-autoscaling-autoscalinggroup--examples) section of the ``AWS::AutoScaling::AutoScalingGroup`` resource."}},"type":"object","required":["version"]},"aws-native:autoscaling:AutoScalingGroupLifecycleHookSpecification":{"description":"``LifecycleHookSpecification`` specifies a lifecycle hook for the ``LifecycleHookSpecificationList`` property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource. A lifecycle hook specifies actions to perform when Amazon EC2 Auto Scaling launches or terminates instances. \n For more information, see [Amazon EC2 Auto Scaling lifecycle hooks](https://docs.aws.amazon.com/autoscaling/ec2/userguide/lifecycle-hooks.html) in the *Amazon EC2 Auto Scaling User Guide*. You can find a sample template snippet in the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-as-lifecyclehook.html#aws-resource-as-lifecyclehook--examples) section of the ``AWS::AutoScaling::LifecycleHook`` resource.","properties":{"defaultResult":{"type":"string","description":"The action the Auto Scaling group takes when the lifecycle hook timeout elapses or if an unexpected failure occurs. The default value is ``ABANDON``.\n Valid values: ``CONTINUE`` | ``ABANDON``"},"heartbeatTimeout":{"type":"integer","description":"The maximum time, in seconds, that can elapse before the lifecycle hook times out. The range is from ``30`` to ``7200`` seconds. The default value is ``3600`` seconds (1 hour)."},"lifecycleHookName":{"type":"string","description":"The name of the lifecycle hook."},"lifecycleTransition":{"type":"string","description":"The lifecycle transition. For Auto Scaling groups, there are two major lifecycle transitions.\n  +  To create a lifecycle hook for scale-out events, specify ``autoscaling:EC2_INSTANCE_LAUNCHING``.\n  +  To create a lifecycle hook for scale-in events, specify ``autoscaling:EC2_INSTANCE_TERMINATING``."},"notificationMetadata":{"type":"string","description":"Additional information that you want to include any time Amazon EC2 Auto Scaling sends a message to the notification target."},"notificationTargetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the notification target that Amazon EC2 Auto Scaling sends notifications to when an instance is in a wait state for the lifecycle hook. You can specify an Amazon SNS topic or an Amazon SQS queue."},"roleArn":{"type":"string","description":"The ARN of the IAM role that allows the Auto Scaling group to publish to the specified notification target. For information about creating this role, see [Prepare to add a lifecycle hook to your Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/prepare-for-lifecycle-notifications.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Valid only if the notification target is an Amazon SNS topic or an Amazon SQS queue."}},"type":"object","required":["lifecycleHookName","lifecycleTransition"]},"aws-native:autoscaling:AutoScalingGroupMemoryGiBPerVCpuRequest":{"description":"``MemoryGiBPerVCpuRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum amount of memory per vCPU for an instance type, in GiB.","properties":{"max":{"type":"number","description":"The memory maximum in GiB."},"min":{"type":"number","description":"The memory minimum in GiB."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupMemoryMiBRequest":{"description":"``MemoryMiBRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum instance memory size for an instance type, in MiB.","properties":{"max":{"type":"integer","description":"The memory maximum in MiB."},"min":{"type":"integer","description":"The memory minimum in MiB."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupMetricsCollection":{"description":"``MetricsCollection`` is a property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource that describes the group metrics that an Amazon EC2 Auto Scaling group sends to Amazon CloudWatch. These metrics describe the group rather than any of its instances. \n For more information, see [Monitor CloudWatch metrics for your Auto Scaling groups and instances](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-instance-monitoring.html) in the *Amazon EC2 Auto Scaling User Guide*. You can find a sample template snippet in the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html#aws-resource-autoscaling-autoscalinggroup--examples) section of the ``AWS::AutoScaling::AutoScalingGroup`` resource.","properties":{"granularity":{"type":"string","description":"The frequency at which Amazon EC2 Auto Scaling sends aggregated data to CloudWatch. The only valid value is ``1Minute``."},"metrics":{"type":"array","items":{"type":"string"},"description":"Identifies the metrics to enable.\n You can specify one or more of the following metrics:\n  +   ``GroupMinSize`` \n  +   ``GroupMaxSize`` \n  +   ``GroupDesiredCapacity`` \n  +   ``GroupInServiceInstances`` \n  +   ``GroupPendingInstances`` \n  +   ``GroupStandbyInstances`` \n  +   ``GroupTerminatingInstances`` \n  +   ``GroupTotalInstances`` \n  +   ``GroupInServiceCapacity`` \n  +   ``GroupPendingCapacity`` \n  +   ``GroupStandbyCapacity`` \n  +   ``GroupTerminatingCapacity`` \n  +   ``GroupTotalCapacity`` \n  +   ``WarmPoolDesiredCapacity`` \n  +   ``WarmPoolWarmedCapacity`` \n  +   ``WarmPoolPendingCapacity`` \n  +   ``WarmPoolTerminatingCapacity`` \n  +   ``WarmPoolTotalCapacity`` \n  +   ``GroupAndWarmPoolDesiredCapacity`` \n  +   ``GroupAndWarmPoolTotalCapacity`` \n  \n If you specify ``Granularity`` and don't specify any metrics, all metrics are enabled.\n For more information, see [Amazon CloudWatch metrics for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-metrics.html) in the *Amazon EC2 Auto Scaling User Guide*."}},"type":"object","required":["granularity"]},"aws-native:autoscaling:AutoScalingGroupMixedInstancesPolicy":{"description":"Use this structure to launch multiple instance types and On-Demand Instances and Spot Instances within a single Auto Scaling group.\n A mixed instances policy contains information that Amazon EC2 Auto Scaling can use to launch instances and help optimize your costs. For more information, see [Auto Scaling groups with multiple instance types and purchase options](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups.html) in the *Amazon EC2 Auto Scaling User Guide*.\n You can create a mixed instances policy for new and existing Auto Scaling groups. You must use a launch template to configure the policy. You cannot use a launch configuration.\n There are key differences between Spot Instances and On-Demand Instances:\n  +  The price for Spot Instances varies based on demand\n  +  Amazon EC2 can terminate an individual Spot Instance as the availability of, or price for, Spot Instances changes\n  \n When a Spot Instance is terminated, Amazon EC2 Auto Scaling group attempts to launch a replacement instance to maintain the desired capacity for the group. \n ``MixedInstancesPolicy`` is a property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource.","properties":{"instancesDistribution":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstancesDistribution","description":"The instances distribution."},"launchTemplate":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplate","description":"One or more launch templates and the instance types (overrides) that are used to launch EC2 instances to fulfill On-Demand and Spot capacities."}},"type":"object","required":["launchTemplate"]},"aws-native:autoscaling:AutoScalingGroupNetworkBandwidthGbpsRequest":{"description":"``NetworkBandwidthGbpsRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum network bandwidth for an instance type, in Gbps.\n  Setting the minimum bandwidth does not guarantee that your instance will achieve the minimum bandwidth. Amazon EC2 will identify instance types that support the specified minimum bandwidth, but the actual bandwidth of your instance might go below the specified minimum at times. For more information, see [Available instance bandwidth](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html#available-instance-bandwidth) in the *Amazon EC2 User Guide for Linux Instances*.","properties":{"max":{"type":"number","description":"The maximum amount of network bandwidth, in gigabits per second (Gbps)."},"min":{"type":"number","description":"The minimum amount of network bandwidth, in gigabits per second (Gbps)."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupNetworkInterfaceCountRequest":{"description":"``NetworkInterfaceCountRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum number of network interfaces for an instance type.","properties":{"max":{"type":"integer","description":"The maximum number of network interfaces."},"min":{"type":"integer","description":"The minimum number of network interfaces."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupNotificationConfiguration":{"description":"A structure that specifies an Amazon SNS notification configuration for the ``NotificationConfigurations`` property of the [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource.\n For an example template snippet, see [Configure Amazon EC2 Auto Scaling resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-ec2-auto-scaling.html).\n For more information, see [Get Amazon SNS notifications when your Auto Scaling group scales](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ASGettingNotifications.html) in the *Amazon EC2 Auto Scaling User Guide*.","properties":{"notificationTypes":{"type":"array","items":{"type":"string"},"description":"A list of event types that send a notification. Event types can include any of the following types. \n *Allowed values*:\n  +   ``autoscaling:EC2_INSTANCE_LAUNCH`` \n  +   ``autoscaling:EC2_INSTANCE_LAUNCH_ERROR`` \n  +   ``autoscaling:EC2_INSTANCE_TERMINATE`` \n  +   ``autoscaling:EC2_INSTANCE_TERMINATE_ERROR`` \n  +   ``autoscaling:TEST_NOTIFICATION``"},"topicArn":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) of the Amazon SNS topic."}},"type":"object","required":["topicArn"]},"aws-native:autoscaling:AutoScalingGroupPerformanceFactorReferenceRequest":{"description":"Specify an instance family to use as the baseline reference for CPU performance. All instance types that All instance types that match your specified attributes will be compared against the CPU performance of the referenced instance family, regardless of CPU manufacturer or architecture differences. \n  Currently only one instance family can be specified in the list.","properties":{"instanceFamily":{"type":"string","description":"The instance family to use as a baseline reference. \n  Make sure that you specify the correct value for the instance family. The instance family is everything before the period (.) in the instance type name. For example, in the instance ``c6i.large``, the instance family is ``c6i``, not ``c6``. For more information, see [Amazon EC2 instance type naming conventions](https://docs.aws.amazon.com/ec2/latest/instancetypes/instance-type-names.html) in *Amazon EC2 Instance Types*.\n  The following instance types are *not supported* for performance protection.\n  +   ``c1`` \n  +   ``g3| g3s`` \n  +   ``hpc7g`` \n  +   ``m1| m2`` \n  +   ``mac1 | mac2 | mac2-m1ultra | mac2-m2 | mac2-m2pro`` \n  +   ``p3dn | p4d | p5`` \n  +   ``t1`` \n  +   ``u-12tb1 | u-18tb1 | u-24tb1 | u-3tb1 | u-6tb1 | u-9tb1 | u7i-12tb | u7in-16tb | u7in-24tb | u7in-32tb`` \n  \n If you performance protection by specifying a supported instance family, the returned instance types will exclude the preceding unsupported instance families.\n If you specify an unsupported instance family as a value for baseline performance, the API returns an empty response."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupRetentionTriggers":{"description":"Defines the specific triggers that cause instances to be retained in a Retained state rather than terminated. Each trigger corresponds to a different failure scenario during the instance lifecycle. This allows fine-grained control over when to preserve instances for manual intervention.","properties":{"terminateHookAbandon":{"type":"string","description":"Specifies the action when a termination lifecycle hook is abandoned due to failure, timeout, or explicit abandonment (calling CompleteLifecycleAction). \n  Set to ``retain`` to move instances to a retained state. Set to ``terminate`` for default termination behavior. \n  Retained instances don't count toward desired capacity and remain until you call ``TerminateInstanceInAutoScalingGroup``."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupTagProperty":{"description":"A structure that specifies a tag for the ``Tags`` property of [AWS::AutoScaling::AutoScalingGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html) resource.\n For more information, see [Tag Auto Scaling groups and instances](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-tagging.html) in the *Amazon EC2 Auto Scaling User Guide*. You can find a sample template snippet in the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-autoscaling-autoscalinggroup.html#aws-resource-autoscaling-autoscalinggroup--examples) section of the ``AWS::AutoScaling::AutoScalingGroup`` resource.\n CloudFormation adds the following tags to all Auto Scaling groups and associated instances: \n  +  aws:cloudformation:stack-name\n  +  aws:cloudformation:stack-id\n  +  aws:cloudformation:logical-id","properties":{"key":{"type":"string","description":"The tag key."},"propagateAtLaunch":{"type":"boolean","description":"Set to ``true`` if you want CloudFormation to copy the tag to EC2 instances that are launched as part of the Auto Scaling group. Set to ``false`` if you want the tag attached only to the Auto Scaling group and not copied to any instances launched as part of the Auto Scaling group."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","propagateAtLaunch","value"]},"aws-native:autoscaling:AutoScalingGroupTotalLocalStorageGbRequest":{"description":"``TotalLocalStorageGBRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum total local storage size for an instance type, in GB.","properties":{"max":{"type":"number","description":"The storage maximum in GB."},"min":{"type":"number","description":"The storage minimum in GB."}},"type":"object"},"aws-native:autoscaling:AutoScalingGroupTrafficSourceIdentifier":{"description":"Identifying information for a traffic source.","properties":{"identifier":{"type":"string","description":"Identifies the traffic source.\n For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the Amazon Resource Name (ARN) for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.\n For example: \n  +  Application Load Balancer ARN: ``arn:aws:elasticloadbalancing:us-west-2:123456789012:targetgroup/my-targets/1234567890123456``\n  +  Classic Load Balancer name: ``my-classic-load-balancer``\n  +  VPC Lattice ARN: ``arn:aws:vpc-lattice:us-west-2:123456789012:targetgroup/tg-1234567890123456``\n  \n To get the ARN of a target group for a Application Load Balancer, Gateway Load Balancer, or Network Load Balancer, or the name of a Classic Load Balancer, use the Elastic Load Balancing [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) and [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operations.\n To get the ARN of a target group for VPC Lattice, use the VPC Lattice [GetTargetGroup](https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetTargetGroup.html) API operation."},"type":{"type":"string","description":"Provides additional context for the value of ``Identifier``.\n The following lists the valid values:\n  +  ``elb`` if ``Identifier`` is the name of a Classic Load Balancer.\n  +  ``elbv2`` if ``Identifier`` is the ARN of an Application Load Balancer, Gateway Load Balancer, or Network Load Balancer target group.\n  +  ``vpc-lattice`` if ``Identifier`` is the ARN of a VPC Lattice target group.\n  \n Required if the identifier is the name of a Classic Load Balancer."}},"type":"object","required":["identifier","type"]},"aws-native:autoscaling:AutoScalingGroupVCpuCountRequest":{"description":"``VCpuCountRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum number of vCPUs for an instance type.","properties":{"max":{"type":"integer","description":"The maximum number of vCPUs."},"min":{"type":"integer","description":"The minimum number of vCPUs."}},"type":"object"},"aws-native:autoscaling:LaunchConfigurationBlockDevice":{"description":"BlockDevice is a subproperty of BlockDeviceMapping that describes an Amazon EBS volume.","properties":{"deleteOnTermination":{"type":"boolean","description":"Indicates whether the volume is deleted on instance termination. "},"encrypted":{"type":"boolean","description":"Specifies whether the volume should be encrypted. "},"iops":{"type":"integer","description":"The number of input/output (I/O) operations per second (IOPS) to provision for the volume. "},"snapshotId":{"type":"string","description":"The snapshot ID of the volume to use."},"throughput":{"type":"integer","description":"The throughput (MiBps) to provision for a gp3 volume."},"volumeSize":{"type":"integer","description":"The volume size, in GiBs."},"volumeType":{"type":"string","description":"The volume type."}},"type":"object"},"aws-native:autoscaling:LaunchConfigurationBlockDeviceMapping":{"description":"BlockDeviceMapping is a property of AWS::AutoScaling::LaunchConfiguration that describes a block device mapping for an Auto Scaling group.","properties":{"deviceName":{"type":"string","description":"The device name exposed to the EC2 instance (for example, /dev/sdh or xvdh). "},"ebs":{"$ref":"#/types/aws-native:autoscaling:LaunchConfigurationBlockDevice","description":"Parameters used to automatically set up EBS volumes when an instance is launched."},"noDevice":{"type":"boolean","description":"Setting this value to true suppresses the specified device included in the block device mapping of the AMI."},"virtualName":{"type":"string","description":"The name of the virtual device."}},"type":"object","required":["deviceName"]},"aws-native:autoscaling:LaunchConfigurationMetadataOptions":{"description":"MetadataOptions is a property of AWS::AutoScaling::LaunchConfiguration that describes metadata options for the instances.","properties":{"httpEndpoint":{"type":"string","description":"This parameter enables or disables the HTTP metadata endpoint on your instances."},"httpPutResponseHopLimit":{"type":"integer","description":"The desired HTTP PUT response hop limit for instance metadata requests."},"httpTokens":{"type":"string","description":"The state of token usage for your instance metadata requests."}},"type":"object"},"aws-native:autoscaling:ScalingPolicyCustomizedMetricSpecification":{"properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetricDimension"},"description":"The dimensions of the metric.\n\nConditional: If you published your metric with dimensions, you must specify the same dimensions in your scaling policy."},"metricName":{"type":"string","description":"The name of the metric. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html) ."},"metrics":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyTargetTrackingMetricDataQuery"},"description":"The metrics to include in the target tracking scaling policy, as a metric data query. This can include both raw metric and metric math expressions."},"namespace":{"type":"string","description":"The namespace of the metric."},"period":{"type":"integer","description":"The period of the metric in seconds. The default value is 60. Accepted values are 10, 30, and 60. For high resolution metric, set the value to less than 60. For more information, see [Create a target tracking policy using high-resolution metrics for faster response](https://docs.aws.amazon.com/autoscaling/ec2/userguide/policy-creating-high-resolution-metrics.html) ."},"statistic":{"type":"string","description":"The statistic of the metric."},"unit":{"type":"string","description":"The unit of the metric. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference* ."}},"type":"object"},"aws-native:autoscaling:ScalingPolicyMetric":{"properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetricDimension"},"description":"The dimensions for the metric. For the list of available dimensions, see the AWS documentation available from the table in [AWS services that publish CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html) in the *Amazon CloudWatch User Guide* .\n\nConditional: If you published your metric with dimensions, you must specify the same dimensions in your scaling policy."},"metricName":{"type":"string","description":"The name of the metric."},"namespace":{"type":"string","description":"The namespace of the metric. For more information, see the table in [AWS services that publish CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html) in the *Amazon CloudWatch User Guide* ."}},"type":"object","required":["metricName","namespace"]},"aws-native:autoscaling:ScalingPolicyMetricDataQuery":{"properties":{"expression":{"type":"string","description":"The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the `Id` of the other metrics to refer to those metrics, and can also use the `Id` of other expressions to use the result of those expressions.\n\nConditional: Within each `MetricDataQuery` object, you must specify either `Expression` or `MetricStat` , but not both."},"id":{"type":"string","description":"A short name that identifies the object's results in the response. This name must be unique among all `MetricDataQuery` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter."},"label":{"type":"string","description":"A human-readable label for this metric or expression. This is especially useful if this is a math expression, so that you know what the value represents."},"metricStat":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetricStat","description":"Information about the metric data to return.\n\nConditional: Within each `MetricDataQuery` object, you must specify either `Expression` or `MetricStat` , but not both."},"returnData":{"type":"boolean","description":"Indicates whether to return the timestamps and raw data values of this metric.\n\nIf you use any math expressions, specify `true` for this value for only the final math expression that the metric specification is based on. You must specify `false` for `ReturnData` for all the other metrics and expressions used in the metric specification.\n\nIf you are only retrieving metrics and not performing any math expressions, do not specify anything for `ReturnData` . This sets it to its default ( `true` )."}},"type":"object","required":["id"]},"aws-native:autoscaling:ScalingPolicyMetricDimension":{"properties":{"name":{"type":"string","description":"The name of the dimension."},"value":{"type":"string","description":"The value of the dimension."}},"type":"object","required":["name","value"]},"aws-native:autoscaling:ScalingPolicyMetricStat":{"properties":{"metric":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetric","description":"The CloudWatch metric to return, including the metric name, namespace, and dimensions. To get the exact metric name, namespace, and dimensions, inspect the [Metric](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_Metric.html) object that is returned by a call to [ListMetrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListMetrics.html) ."},"stat":{"type":"string","description":"The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide* .\n\nThe most commonly used metrics for predictive scaling are `Average` and `Sum` ."},"unit":{"type":"string","description":"The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference* ."}},"type":"object","required":["metric","stat"]},"aws-native:autoscaling:ScalingPolicyPredefinedMetricSpecification":{"properties":{"predefinedMetricType":{"type":"string","description":"The metric type. The following predefined metrics are available:\n\n- `ASGAverageCPUUtilization` - Average CPU utilization of the Auto Scaling group.\n- `ASGAverageNetworkIn` - Average number of bytes received on all network interfaces by the Auto Scaling group.\n- `ASGAverageNetworkOut` - Average number of bytes sent out on all network interfaces by the Auto Scaling group.\n- `ALBRequestCountPerTarget` - Average Application Load Balancer request count per target for your Auto Scaling group."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a specific Application Load Balancer target group from which to determine the average request count served by your Auto Scaling group. You can't specify a resource label unless the target group is attached to the Auto Scaling group.\n\nYou create the resource label by appending the final portion of the load balancer ARN and the final portion of the target group ARN into a single value, separated by a forward slash (/). The format of the resource label is:\n\n`app/my-alb/778d41231b141a0f/targetgroup/my-alb-target-group/943f017f100becff` .\n\nWhere:\n\n- app/\u003cload-balancer-name\u003e/\u003cload-balancer-id\u003e is the final portion of the load balancer ARN\n- targetgroup/\u003ctarget-group-name\u003e/\u003ctarget-group-id\u003e is the final portion of the target group ARN.\n\nTo find the ARN for an Application Load Balancer, use the [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operation. To find the ARN for the target group, use the [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) API operation."}},"type":"object","required":["predefinedMetricType"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingConfiguration":{"properties":{"maxCapacityBreachBehavior":{"type":"string","description":"Defines the behavior that should be applied if the forecast capacity approaches or exceeds the maximum capacity of the Auto Scaling group. Defaults to `HonorMaxCapacity` if not specified.\n\nThe following are possible values:\n\n- `HonorMaxCapacity` - Amazon EC2 Auto Scaling can't increase the maximum capacity of the group when the forecast capacity is close to or exceeds the maximum capacity.\n- `IncreaseMaxCapacity` - Amazon EC2 Auto Scaling can increase the maximum capacity of the group when the forecast capacity is close to or exceeds the maximum capacity. The upper limit is determined by the forecasted capacity and the value for `MaxCapacityBuffer` .\n\n\u003e Use caution when allowing the maximum capacity to be automatically increased. This can lead to more instances being launched than intended if the increased maximum capacity is not monitored and managed. The increased maximum capacity then becomes the new normal maximum capacity for the Auto Scaling group until you manually update it. The maximum capacity does not automatically decrease back to the original maximum."},"maxCapacityBuffer":{"type":"integer","description":"The size of the capacity buffer to use when the forecast capacity is close to or exceeds the maximum capacity. The value is specified as a percentage relative to the forecast capacity. For example, if the buffer is 10, this means a 10 percent buffer, such that if the forecast capacity is 50, and the maximum capacity is 40, then the effective maximum capacity is 55.\n\nIf set to 0, Amazon EC2 Auto Scaling may scale capacity higher than the maximum capacity to equal but not exceed forecast capacity.\n\nRequired if the `MaxCapacityBreachBehavior` property is set to `IncreaseMaxCapacity` , and cannot be used otherwise."},"metricSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingMetricSpecification"},"description":"This structure includes the metrics and target utilization to use for predictive scaling.\n\nThis is an array, but we currently only support a single metric specification. That is, you can specify a target value and a single metric pair, or a target value and one scaling metric and one load metric."},"mode":{"type":"string","description":"The predictive scaling mode. Defaults to `ForecastOnly` if not specified."},"schedulingBufferTime":{"type":"integer","description":"The amount of time, in seconds, by which the instance launch time can be advanced. For example, the forecast says to add capacity at 10:00 AM, and you choose to pre-launch instances by 5 minutes. In that case, the instances will be launched at 9:55 AM. The intention is to give resources time to be provisioned. It can take a few minutes to launch an EC2 instance. The actual amount of time required depends on several factors, such as the size of the instance and whether there are startup scripts to complete.\n\nThe value must be less than the forecast interval duration of 3600 seconds (60 minutes). Defaults to 300 seconds if not specified."}},"type":"object","required":["metricSpecifications"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingCustomizedCapacityMetric":{"properties":{"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetricDataQuery"},"description":"One or more metric data queries to provide the data points for a capacity metric. Use multiple metric data queries only if you are performing a math expression on returned data."}},"type":"object","required":["metricDataQueries"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingCustomizedLoadMetric":{"properties":{"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetricDataQuery"},"description":"One or more metric data queries to provide the data points for a load metric. Use multiple metric data queries only if you are performing a math expression on returned data."}},"type":"object","required":["metricDataQueries"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingCustomizedScalingMetric":{"properties":{"metricDataQueries":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetricDataQuery"},"description":"One or more metric data queries to provide the data points for a scaling metric. Use multiple metric data queries only if you are performing a math expression on returned data."}},"type":"object","required":["metricDataQueries"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingMetricSpecification":{"properties":{"customizedCapacityMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingCustomizedCapacityMetric","description":"The customized capacity metric specification."},"customizedLoadMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingCustomizedLoadMetric","description":"The customized load metric specification."},"customizedScalingMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingCustomizedScalingMetric","description":"The customized scaling metric specification."},"predefinedLoadMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingPredefinedLoadMetric","description":"The predefined load metric specification."},"predefinedMetricPairSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingPredefinedMetricPair","description":"The predefined metric pair specification from which Amazon EC2 Auto Scaling determines the appropriate scaling metric and load metric to use."},"predefinedScalingMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingPredefinedScalingMetric","description":"The predefined scaling metric specification."},"targetValue":{"type":"number","description":"Specifies the target utilization.\n\n\u003e Some metrics are based on a count instead of a percentage, such as the request count for an Application Load Balancer or the number of messages in an SQS queue. If the scaling policy specifies one of these metrics, specify the target utilization as the optimal average request or message count per instance during any one-minute interval."}},"type":"object","required":["targetValue"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingPredefinedLoadMetric":{"properties":{"predefinedMetricType":{"type":"string","description":"The metric type."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a specific Application Load Balancer target group from which to determine the request count served by your Auto Scaling group. You can't specify a resource label unless the target group is attached to the Auto Scaling group.\n\nYou create the resource label by appending the final portion of the load balancer ARN and the final portion of the target group ARN into a single value, separated by a forward slash (/). The format of the resource label is:\n\n`app/my-alb/778d41231b141a0f/targetgroup/my-alb-target-group/943f017f100becff` .\n\nWhere:\n\n- app/\u003cload-balancer-name\u003e/\u003cload-balancer-id\u003e is the final portion of the load balancer ARN\n- targetgroup/\u003ctarget-group-name\u003e/\u003ctarget-group-id\u003e is the final portion of the target group ARN.\n\nTo find the ARN for an Application Load Balancer, use the [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operation. To find the ARN for the target group, use the [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) API operation."}},"type":"object","required":["predefinedMetricType"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingPredefinedMetricPair":{"properties":{"predefinedMetricType":{"type":"string","description":"Indicates which metrics to use. There are two different types of metrics for each metric type: one is a load metric and one is a scaling metric. For example, if the metric type is `ASGCPUUtilization` , the Auto Scaling group's total CPU metric is used as the load metric, and the average CPU metric is used for the scaling metric."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a specific Application Load Balancer target group from which to determine the total and average request count served by your Auto Scaling group. You can't specify a resource label unless the target group is attached to the Auto Scaling group.\n\nYou create the resource label by appending the final portion of the load balancer ARN and the final portion of the target group ARN into a single value, separated by a forward slash (/). The format of the resource label is:\n\n`app/my-alb/778d41231b141a0f/targetgroup/my-alb-target-group/943f017f100becff` .\n\nWhere:\n\n- app/\u003cload-balancer-name\u003e/\u003cload-balancer-id\u003e is the final portion of the load balancer ARN\n- targetgroup/\u003ctarget-group-name\u003e/\u003ctarget-group-id\u003e is the final portion of the target group ARN.\n\nTo find the ARN for an Application Load Balancer, use the [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operation. To find the ARN for the target group, use the [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) API operation."}},"type":"object","required":["predefinedMetricType"]},"aws-native:autoscaling:ScalingPolicyPredictiveScalingPredefinedScalingMetric":{"properties":{"predefinedMetricType":{"type":"string","description":"The metric type."},"resourceLabel":{"type":"string","description":"A label that uniquely identifies a specific Application Load Balancer target group from which to determine the average request count served by your Auto Scaling group. You can't specify a resource label unless the target group is attached to the Auto Scaling group.\n\nYou create the resource label by appending the final portion of the load balancer ARN and the final portion of the target group ARN into a single value, separated by a forward slash (/). The format of the resource label is:\n\n`app/my-alb/778d41231b141a0f/targetgroup/my-alb-target-group/943f017f100becff` .\n\nWhere:\n\n- app/\u003cload-balancer-name\u003e/\u003cload-balancer-id\u003e is the final portion of the load balancer ARN\n- targetgroup/\u003ctarget-group-name\u003e/\u003ctarget-group-id\u003e is the final portion of the target group ARN.\n\nTo find the ARN for an Application Load Balancer, use the [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operation. To find the ARN for the target group, use the [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) API operation."}},"type":"object","required":["predefinedMetricType"]},"aws-native:autoscaling:ScalingPolicyStepAdjustment":{"properties":{"metricIntervalLowerBound":{"type":"number","description":"The lower bound for the difference between the alarm threshold and the CloudWatch metric. If the metric value is above the breach threshold, the lower bound is inclusive (the metric must be greater than or equal to the threshold plus the lower bound). Otherwise, it is exclusive (the metric must be greater than the threshold plus the lower bound). A null value indicates negative infinity."},"metricIntervalUpperBound":{"type":"number","description":"The upper bound for the difference between the alarm threshold and the CloudWatch metric. If the metric value is above the breach threshold, the upper bound is exclusive (the metric must be less than the threshold plus the upper bound). Otherwise, it is inclusive (the metric must be less than or equal to the threshold plus the upper bound). A null value indicates positive infinity.\n\nThe upper bound must be greater than the lower bound."},"scalingAdjustment":{"type":"integer","description":"The amount by which to scale, based on the specified adjustment type. A positive value adds to the current capacity while a negative number removes from the current capacity. For exact capacity, you must specify a non-negative value."}},"type":"object","required":["scalingAdjustment"]},"aws-native:autoscaling:ScalingPolicyTargetTrackingConfiguration":{"properties":{"customizedMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyCustomizedMetricSpecification","description":"A customized metric. You must specify either a predefined metric or a customized metric."},"disableScaleIn":{"type":"boolean","description":"Indicates whether scaling in by the target tracking scaling policy is disabled. If scaling in is disabled, the target tracking scaling policy doesn't remove instances from the Auto Scaling group. Otherwise, the target tracking scaling policy can remove instances from the Auto Scaling group. The default is `false` ."},"predefinedMetricSpecification":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredefinedMetricSpecification","description":"A predefined metric. You must specify either a predefined metric or a customized metric."},"targetValue":{"type":"number","description":"The target value for the metric.\n\n\u003e Some metrics are based on a count instead of a percentage, such as the request count for an Application Load Balancer or the number of messages in an SQS queue. If the scaling policy specifies one of these metrics, specify the target utilization as the optimal average request or message count per instance during any one-minute interval."}},"type":"object","required":["targetValue"]},"aws-native:autoscaling:ScalingPolicyTargetTrackingMetricDataQuery":{"properties":{"expression":{"type":"string","description":"The math expression to perform on the returned data, if this object is performing a math expression. This expression can use the `Id` of the other metrics to refer to those metrics, and can also use the `Id` of other expressions to use the result of those expressions.\n\nConditional: Within each `TargetTrackingMetricDataQuery` object, you must specify either `Expression` or `MetricStat` , but not both."},"id":{"type":"string","description":"A short name that identifies the object's results in the response. This name must be unique among all `TargetTrackingMetricDataQuery` objects specified for a single scaling policy. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscores. The first character must be a lowercase letter."},"label":{"type":"string","description":"A human-readable label for this metric or expression. This is especially useful if this is a math expression, so that you know what the value represents."},"metricStat":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyTargetTrackingMetricStat","description":"Information about the metric data to return.\n\nConditional: Within each `TargetTrackingMetricDataQuery` object, you must specify either `Expression` or `MetricStat` , but not both."},"period":{"type":"integer","description":"The period of the metric in seconds. The default value is 60. Accepted values are 10, 30, and 60. For high resolution metric, set the value to less than 60. For more information, see [Create a target tracking policy using high-resolution metrics for faster response](https://docs.aws.amazon.com/autoscaling/ec2/userguide/policy-creating-high-resolution-metrics.html) ."},"returnData":{"type":"boolean","description":"Indicates whether to return the timestamps and raw data values of this metric.\n\nIf you use any math expressions, specify `true` for this value for only the final math expression that the metric specification is based on. You must specify `false` for `ReturnData` for all the other metrics and expressions used in the metric specification.\n\nIf you are only retrieving metrics and not performing any math expressions, do not specify anything for `ReturnData` . This sets it to its default ( `true` )."}},"type":"object","required":["id"]},"aws-native:autoscaling:ScalingPolicyTargetTrackingMetricStat":{"properties":{"metric":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyMetric","description":"The metric to use."},"period":{"type":"integer","description":"The period of the metric in seconds. The default value is 60. Accepted values are 10, 30, and 60. For high resolution metric, set the value to less than 60. For more information, see [Create a target tracking policy using high-resolution metrics for faster response](https://docs.aws.amazon.com/autoscaling/ec2/userguide/policy-creating-high-resolution-metrics.html) ."},"stat":{"type":"string","description":"The statistic to return. It can include any CloudWatch statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *Amazon CloudWatch User Guide* .\n\nThe most commonly used metric for scaling is `Average` ."},"unit":{"type":"string","description":"The unit to use for the returned data points. For a complete list of the units that CloudWatch supports, see the [MetricDatum](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_MetricDatum.html) data type in the *Amazon CloudWatch API Reference* ."}},"type":"object","required":["metric","stat"]},"aws-native:autoscaling:WarmPoolInstanceReusePolicy":{"properties":{"reuseOnScaleIn":{"type":"boolean","description":"Specifies whether instances in the Auto Scaling group can be returned to the warm pool on scale in."}},"type":"object"},"aws-native:b2bi:CapabilityConfiguration0Properties":{"properties":{"edi":{"$ref":"#/types/aws-native:b2bi:CapabilityEdiConfiguration"}},"type":"object","required":["edi"]},"aws-native:b2bi:CapabilityConfigurationProperties":{"properties":{"edi":{"$ref":"#/types/aws-native:b2bi:CapabilityEdiConfiguration"}},"type":"object","required":["edi"]},"aws-native:b2bi:CapabilityDirection":{"type":"string","enum":[{"name":"Inbound","value":"INBOUND"},{"name":"Outbound","value":"OUTBOUND"}]},"aws-native:b2bi:CapabilityEdiConfiguration":{"properties":{"capabilityDirection":{"$ref":"#/types/aws-native:b2bi:CapabilityDirection"},"inputLocation":{"$ref":"#/types/aws-native:b2bi:CapabilityS3Location"},"outputLocation":{"$ref":"#/types/aws-native:b2bi:CapabilityS3Location"},"transformerId":{"type":"string"},"type":{"$ref":"#/types/aws-native:b2bi:CapabilityEdiTypeProperties"}},"type":"object","required":["inputLocation","outputLocation","transformerId","type"]},"aws-native:b2bi:CapabilityEdiType0Properties":{"properties":{"x12Details":{"$ref":"#/types/aws-native:b2bi:CapabilityX12Details"}},"type":"object","required":["x12Details"]},"aws-native:b2bi:CapabilityEdiTypeProperties":{"properties":{"x12Details":{"$ref":"#/types/aws-native:b2bi:CapabilityX12Details"}},"type":"object","required":["x12Details"]},"aws-native:b2bi:CapabilityS3Location":{"properties":{"bucketName":{"type":"string"},"key":{"type":"string"}},"type":"object"},"aws-native:b2bi:CapabilityTag":{"properties":{"key":{"type":"string","description":"Specifies the name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name that you create."}},"type":"object","required":["key","value"]},"aws-native:b2bi:CapabilityType":{"type":"string","enum":[{"name":"Edi","value":"edi"}]},"aws-native:b2bi:CapabilityX12Details":{"properties":{"transactionSet":{"$ref":"#/types/aws-native:b2bi:CapabilityX12TransactionSet"},"version":{"$ref":"#/types/aws-native:b2bi:CapabilityX12Version"}},"type":"object"},"aws-native:b2bi:CapabilityX12TransactionSet":{"type":"string","enum":[{"name":"X12100","value":"X12_100"},{"name":"X12101","value":"X12_101"},{"name":"X12102","value":"X12_102"},{"name":"X12103","value":"X12_103"},{"name":"X12104","value":"X12_104"},{"name":"X12105","value":"X12_105"},{"name":"X12106","value":"X12_106"},{"name":"X12107","value":"X12_107"},{"name":"X12108","value":"X12_108"},{"name":"X12109","value":"X12_109"},{"name":"X12110","value":"X12_110"},{"name":"X12111","value":"X12_111"},{"name":"X12112","value":"X12_112"},{"name":"X12113","value":"X12_113"},{"name":"X12120","value":"X12_120"},{"name":"X12121","value":"X12_121"},{"name":"X12124","value":"X12_124"},{"name":"X12125","value":"X12_125"},{"name":"X12126","value":"X12_126"},{"name":"X12127","value":"X12_127"},{"name":"X12128","value":"X12_128"},{"name":"X12129","value":"X12_129"},{"name":"X12130","value":"X12_130"},{"name":"X12131","value":"X12_131"},{"name":"X12132","value":"X12_132"},{"name":"X12133","value":"X12_133"},{"name":"X12135","value":"X12_135"},{"name":"X12138","value":"X12_138"},{"name":"X12139","value":"X12_139"},{"name":"X12140","value":"X12_140"},{"name":"X12141","value":"X12_141"},{"name":"X12142","value":"X12_142"},{"name":"X12143","value":"X12_143"},{"name":"X12144","value":"X12_144"},{"name":"X12146","value":"X12_146"},{"name":"X12147","value":"X12_147"},{"name":"X12148","value":"X12_148"},{"name":"X12149","value":"X12_149"},{"name":"X12150","value":"X12_150"},{"name":"X12151","value":"X12_151"},{"name":"X12152","value":"X12_152"},{"name":"X12153","value":"X12_153"},{"name":"X12154","value":"X12_154"},{"name":"X12155","value":"X12_155"},{"name":"X12157","value":"X12_157"},{"name":"X12158","value":"X12_158"},{"name":"X12159","value":"X12_159"},{"name":"X12160","value":"X12_160"},{"name":"X12161","value":"X12_161"},{"name":"X12163","value":"X12_163"},{"name":"X12170","value":"X12_170"},{"name":"X12175","value":"X12_175"},{"name":"X12176","value":"X12_176"},{"name":"X12179","value":"X12_179"},{"name":"X12180","value":"X12_180"},{"name":"X12185","value":"X12_185"},{"name":"X12186","value":"X12_186"},{"name":"X12187","value":"X12_187"},{"name":"X12188","value":"X12_188"},{"name":"X12189","value":"X12_189"},{"name":"X12190","value":"X12_190"},{"name":"X12191","value":"X12_191"},{"name":"X12194","value":"X12_194"},{"name":"X12195","value":"X12_195"},{"name":"X12196","value":"X12_196"},{"name":"X12197","value":"X12_197"},{"name":"X12198","value":"X12_198"},{"name":"X12199","value":"X12_199"},{"name":"X12200","value":"X12_200"},{"name":"X12201","value":"X12_201"},{"name":"X12202","value":"X12_202"},{"name":"X12203","value":"X12_203"},{"name":"X12204","value":"X12_204"},{"name":"X12205","value":"X12_205"},{"name":"X12206","value":"X12_206"},{"name":"X12210","value":"X12_210"},{"name":"X12211","value":"X12_211"},{"name":"X12212","value":"X12_212"},{"name":"X12213","value":"X12_213"},{"name":"X12214","value":"X12_214"},{"name":"X12215","value":"X12_215"},{"name":"X12216","value":"X12_216"},{"name":"X12217","value":"X12_217"},{"name":"X12218","value":"X12_218"},{"name":"X12219","value":"X12_219"},{"name":"X12220","value":"X12_220"},{"name":"X12222","value":"X12_222"},{"name":"X12223","value":"X12_223"},{"name":"X12224","value":"X12_224"},{"name":"X12225","value":"X12_225"},{"name":"X12227","value":"X12_227"},{"name":"X12228","value":"X12_228"},{"name":"X12240","value":"X12_240"},{"name":"X12242","value":"X12_242"},{"name":"X12244","value":"X12_244"},{"name":"X12245","value":"X12_245"},{"name":"X12248","value":"X12_248"},{"name":"X12249","value":"X12_249"},{"name":"X12250","value":"X12_250"},{"name":"X12251","value":"X12_251"},{"name":"X12252","value":"X12_252"},{"name":"X12255","value":"X12_255"},{"name":"X12256","value":"X12_256"},{"name":"X12259","value":"X12_259"},{"name":"X12260","value":"X12_260"},{"name":"X12261","value":"X12_261"},{"name":"X12262","value":"X12_262"},{"name":"X12263","value":"X12_263"},{"name":"X12264","value":"X12_264"},{"name":"X12265","value":"X12_265"},{"name":"X12266","value":"X12_266"},{"name":"X12267","value":"X12_267"},{"name":"X12268","value":"X12_268"},{"name":"X12269","value":"X12_269"},{"name":"X12270","value":"X12_270"},{"name":"X12271","value":"X12_271"},{"name":"X12272","value":"X12_272"},{"name":"X12273","value":"X12_273"},{"name":"X12274","value":"X12_274"},{"name":"X12275","value":"X12_275"},{"name":"X12276","value":"X12_276"},{"name":"X12277","value":"X12_277"},{"name":"X12278","value":"X12_278"},{"name":"X12280","value":"X12_280"},{"name":"X12283","value":"X12_283"},{"name":"X12284","value":"X12_284"},{"name":"X12285","value":"X12_285"},{"name":"X12286","value":"X12_286"},{"name":"X12288","value":"X12_288"},{"name":"X12290","value":"X12_290"},{"name":"X12300","value":"X12_300"},{"name":"X12301","value":"X12_301"},{"name":"X12303","value":"X12_303"},{"name":"X12304","value":"X12_304"},{"name":"X12309","value":"X12_309"},{"name":"X12310","value":"X12_310"},{"name":"X12311","value":"X12_311"},{"name":"X12312","value":"X12_312"},{"name":"X12313","value":"X12_313"},{"name":"X12315","value":"X12_315"},{"name":"X12317","value":"X12_317"},{"name":"X12319","value":"X12_319"},{"name":"X12322","value":"X12_322"},{"name":"X12323","value":"X12_323"},{"name":"X12324","value":"X12_324"},{"name":"X12325","value":"X12_325"},{"name":"X12326","value":"X12_326"},{"name":"X12350","value":"X12_350"},{"name":"X12352","value":"X12_352"},{"name":"X12353","value":"X12_353"},{"name":"X12354","value":"X12_354"},{"name":"X12355","value":"X12_355"},{"name":"X12356","value":"X12_356"},{"name":"X12357","value":"X12_357"},{"name":"X12358","value":"X12_358"},{"name":"X12361","value":"X12_361"},{"name":"X12362","value":"X12_362"},{"name":"X12404","value":"X12_404"},{"name":"X12410","value":"X12_410"},{"name":"X12412","value":"X12_412"},{"name":"X12414","value":"X12_414"},{"name":"X12417","value":"X12_417"},{"name":"X12418","value":"X12_418"},{"name":"X12419","value":"X12_419"},{"name":"X12420","value":"X12_420"},{"name":"X12421","value":"X12_421"},{"name":"X12422","value":"X12_422"},{"name":"X12423","value":"X12_423"},{"name":"X12424","value":"X12_424"},{"name":"X12425","value":"X12_425"},{"name":"X12426","value":"X12_426"},{"name":"X12429","value":"X12_429"},{"name":"X12431","value":"X12_431"},{"name":"X12432","value":"X12_432"},{"name":"X12433","value":"X12_433"},{"name":"X12434","value":"X12_434"},{"name":"X12435","value":"X12_435"},{"name":"X12436","value":"X12_436"},{"name":"X12437","value":"X12_437"},{"name":"X12440","value":"X12_440"},{"name":"X12451","value":"X12_451"},{"name":"X12452","value":"X12_452"},{"name":"X12453","value":"X12_453"},{"name":"X12455","value":"X12_455"},{"name":"X12456","value":"X12_456"},{"name":"X12460","value":"X12_460"},{"name":"X12463","value":"X12_463"},{"name":"X12466","value":"X12_466"},{"name":"X12468","value":"X12_468"},{"name":"X12470","value":"X12_470"},{"name":"X12475","value":"X12_475"},{"name":"X12485","value":"X12_485"},{"name":"X12486","value":"X12_486"},{"name":"X12490","value":"X12_490"},{"name":"X12492","value":"X12_492"},{"name":"X12494","value":"X12_494"},{"name":"X12500","value":"X12_500"},{"name":"X12501","value":"X12_501"},{"name":"X12503","value":"X12_503"},{"name":"X12504","value":"X12_504"},{"name":"X12511","value":"X12_511"},{"name":"X12517","value":"X12_517"},{"name":"X12521","value":"X12_521"},{"name":"X12527","value":"X12_527"},{"name":"X12536","value":"X12_536"},{"name":"X12540","value":"X12_540"},{"name":"X12561","value":"X12_561"},{"name":"X12567","value":"X12_567"},{"name":"X12568","value":"X12_568"},{"name":"X12601","value":"X12_601"},{"name":"X12602","value":"X12_602"},{"name":"X12620","value":"X12_620"},{"name":"X12625","value":"X12_625"},{"name":"X12650","value":"X12_650"},{"name":"X12715","value":"X12_715"},{"name":"X12753","value":"X12_753"},{"name":"X12754","value":"X12_754"},{"name":"X12805","value":"X12_805"},{"name":"X12806","value":"X12_806"},{"name":"X12810","value":"X12_810"},{"name":"X12811","value":"X12_811"},{"name":"X12812","value":"X12_812"},{"name":"X12813","value":"X12_813"},{"name":"X12814","value":"X12_814"},{"name":"X12815","value":"X12_815"},{"name":"X12816","value":"X12_816"},{"name":"X12818","value":"X12_818"},{"name":"X12819","value":"X12_819"},{"name":"X12820","value":"X12_820"},{"name":"X12821","value":"X12_821"},{"name":"X12822","value":"X12_822"},{"name":"X12823","value":"X12_823"},{"name":"X12824","value":"X12_824"},{"name":"X12826","value":"X12_826"},{"name":"X12827","value":"X12_827"},{"name":"X12828","value":"X12_828"},{"name":"X12829","value":"X12_829"},{"name":"X12830","value":"X12_830"},{"name":"X12831","value":"X12_831"},{"name":"X12832","value":"X12_832"},{"name":"X12833","value":"X12_833"},{"name":"X12834","value":"X12_834"},{"name":"X12835","value":"X12_835"},{"name":"X12836","value":"X12_836"},{"name":"X12837","value":"X12_837"},{"name":"X12838","value":"X12_838"},{"name":"X12839","value":"X12_839"},{"name":"X12840","value":"X12_840"},{"name":"X12841","value":"X12_841"},{"name":"X12842","value":"X12_842"},{"name":"X12843","value":"X12_843"},{"name":"X12844","value":"X12_844"},{"name":"X12845","value":"X12_845"},{"name":"X12846","value":"X12_846"},{"name":"X12847","value":"X12_847"},{"name":"X12848","value":"X12_848"},{"name":"X12849","value":"X12_849"},{"name":"X12850","value":"X12_850"},{"name":"X12851","value":"X12_851"},{"name":"X12852","value":"X12_852"},{"name":"X12853","value":"X12_853"},{"name":"X12854","value":"X12_854"},{"name":"X12855","value":"X12_855"},{"name":"X12856","value":"X12_856"},{"name":"X12857","value":"X12_857"},{"name":"X12858","value":"X12_858"},{"name":"X12859","value":"X12_859"},{"name":"X12860","value":"X12_860"},{"name":"X12861","value":"X12_861"},{"name":"X12862","value":"X12_862"},{"name":"X12863","value":"X12_863"},{"name":"X12864","value":"X12_864"},{"name":"X12865","value":"X12_865"},{"name":"X12866","value":"X12_866"},{"name":"X12867","value":"X12_867"},{"name":"X12868","value":"X12_868"},{"name":"X12869","value":"X12_869"},{"name":"X12870","value":"X12_870"},{"name":"X12871","value":"X12_871"},{"name":"X12872","value":"X12_872"},{"name":"X12873","value":"X12_873"},{"name":"X12874","value":"X12_874"},{"name":"X12875","value":"X12_875"},{"name":"X12876","value":"X12_876"},{"name":"X12877","value":"X12_877"},{"name":"X12878","value":"X12_878"},{"name":"X12879","value":"X12_879"},{"name":"X12880","value":"X12_880"},{"name":"X12881","value":"X12_881"},{"name":"X12882","value":"X12_882"},{"name":"X12883","value":"X12_883"},{"name":"X12884","value":"X12_884"},{"name":"X12885","value":"X12_885"},{"name":"X12886","value":"X12_886"},{"name":"X12887","value":"X12_887"},{"name":"X12888","value":"X12_888"},{"name":"X12889","value":"X12_889"},{"name":"X12891","value":"X12_891"},{"name":"X12893","value":"X12_893"},{"name":"X12894","value":"X12_894"},{"name":"X12895","value":"X12_895"},{"name":"X12896","value":"X12_896"},{"name":"X12920","value":"X12_920"},{"name":"X12924","value":"X12_924"},{"name":"X12925","value":"X12_925"},{"name":"X12926","value":"X12_926"},{"name":"X12928","value":"X12_928"},{"name":"X12940","value":"X12_940"},{"name":"X12943","value":"X12_943"},{"name":"X12944","value":"X12_944"},{"name":"X12945","value":"X12_945"},{"name":"X12947","value":"X12_947"},{"name":"X12980","value":"X12_980"},{"name":"X12990","value":"X12_990"},{"name":"X12993","value":"X12_993"},{"name":"X12996","value":"X12_996"},{"name":"X12997","value":"X12_997"},{"name":"X12998","value":"X12_998"},{"name":"X12999","value":"X12_999"},{"name":"X12270x279","value":"X12_270_X279"},{"name":"X12271x279","value":"X12_271_X279"},{"name":"X12275x210","value":"X12_275_X210"},{"name":"X12275x211","value":"X12_275_X211"},{"name":"X12276x212","value":"X12_276_X212"},{"name":"X12277x212","value":"X12_277_X212"},{"name":"X12277x214","value":"X12_277_X214"},{"name":"X12277x364","value":"X12_277_X364"},{"name":"X12278x217","value":"X12_278_X217"},{"name":"X12820x218","value":"X12_820_X218"},{"name":"X12820x306","value":"X12_820_X306"},{"name":"X12824x186","value":"X12_824_X186"},{"name":"X12834x220","value":"X12_834_X220"},{"name":"X12834x307","value":"X12_834_X307"},{"name":"X12834x318","value":"X12_834_X318"},{"name":"X12835x221","value":"X12_835_X221"},{"name":"X12837x222","value":"X12_837_X222"},{"name":"X12837x223","value":"X12_837_X223"},{"name":"X12837x224","value":"X12_837_X224"},{"name":"X12837x291","value":"X12_837_X291"},{"name":"X12837x292","value":"X12_837_X292"},{"name":"X12837x298","value":"X12_837_X298"},{"name":"X12999x231","value":"X12_999_X231"}]},"aws-native:b2bi:CapabilityX12Version":{"type":"string","enum":[{"name":"Version4010","value":"VERSION_4010"},{"name":"Version4030","value":"VERSION_4030"},{"name":"Version4050","value":"VERSION_4050"},{"name":"Version4060","value":"VERSION_4060"},{"name":"Version5010","value":"VERSION_5010"},{"name":"Version5010Hipaa","value":"VERSION_5010_HIPAA"}]},"aws-native:b2bi:PartnershipCapabilityOptions":{"properties":{"inboundEdi":{"$ref":"#/types/aws-native:b2bi:PartnershipInboundEdiOptions","description":"A structure that contains the inbound EDI options for the capability."},"outboundEdi":{"$ref":"#/types/aws-native:b2bi:PartnershipOutboundEdiOptionsProperties","description":"A structure that contains the outbound EDI options."}},"type":"object"},"aws-native:b2bi:PartnershipInboundEdiOptions":{"properties":{"x12":{"$ref":"#/types/aws-native:b2bi:PartnershipX12InboundEdiOptions","description":"A structure that contains X12-specific options for processing inbound X12 EDI files."}},"type":"object"},"aws-native:b2bi:PartnershipLineTerminator":{"type":"string","enum":[{"name":"Crlf","value":"CRLF"},{"name":"Lf","value":"LF"},{"name":"Cr","value":"CR"}]},"aws-native:b2bi:PartnershipOutboundEdiOptions0Properties":{"properties":{"x12":{"$ref":"#/types/aws-native:b2bi:PartnershipX12Envelope"}},"type":"object","required":["x12"]},"aws-native:b2bi:PartnershipOutboundEdiOptionsProperties":{"properties":{"x12":{"$ref":"#/types/aws-native:b2bi:PartnershipX12Envelope"}},"type":"object","required":["x12"]},"aws-native:b2bi:PartnershipTag":{"properties":{"key":{"type":"string","description":"Specifies the name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name that you create."}},"type":"object","required":["key","value"]},"aws-native:b2bi:PartnershipWrapFormat":{"type":"string","enum":[{"name":"Segment","value":"SEGMENT"},{"name":"OneLine","value":"ONE_LINE"},{"name":"LineLength","value":"LINE_LENGTH"}]},"aws-native:b2bi:PartnershipWrapOptions":{"properties":{"lineLength":{"type":"number"},"lineTerminator":{"$ref":"#/types/aws-native:b2bi:PartnershipLineTerminator"},"wrapBy":{"$ref":"#/types/aws-native:b2bi:PartnershipWrapFormat"}},"type":"object"},"aws-native:b2bi:PartnershipX12AcknowledgmentOptions":{"properties":{"functionalAcknowledgment":{"$ref":"#/types/aws-native:b2bi:PartnershipX12FunctionalAcknowledgment","description":"Specifies whether functional acknowledgments (997/999) should be generated for incoming X12 transactions. Valid values are `DO_NOT_GENERATE` , `GENERATE_ALL_SEGMENTS` and `GENERATE_WITHOUT_TRANSACTION_SET_RESPONSE_LOOP` .\n\nIf you choose `GENERATE_WITHOUT_TRANSACTION_SET_RESPONSE_LOOP` , AWS B2B Data Interchange skips the AK2_Loop when generating an acknowledgment document."},"technicalAcknowledgment":{"$ref":"#/types/aws-native:b2bi:PartnershipX12TechnicalAcknowledgment","description":"Specifies whether technical acknowledgments (TA1) should be generated for incoming X12 interchanges. Valid values are `DO_NOT_GENERATE` and `GENERATE_ALL_SEGMENTS` and."}},"type":"object","required":["functionalAcknowledgment","technicalAcknowledgment"]},"aws-native:b2bi:PartnershipX12ControlNumbers":{"properties":{"startingFunctionalGroupControlNumber":{"type":"number"},"startingInterchangeControlNumber":{"type":"number"},"startingTransactionSetControlNumber":{"type":"number"}},"type":"object"},"aws-native:b2bi:PartnershipX12Delimiters":{"properties":{"componentSeparator":{"type":"string"},"dataElementSeparator":{"type":"string"},"segmentTerminator":{"type":"string"}},"type":"object"},"aws-native:b2bi:PartnershipX12Envelope":{"properties":{"common":{"$ref":"#/types/aws-native:b2bi:PartnershipX12OutboundEdiHeaders"},"wrapOptions":{"$ref":"#/types/aws-native:b2bi:PartnershipWrapOptions"}},"type":"object"},"aws-native:b2bi:PartnershipX12FunctionalAcknowledgment":{"type":"string","enum":[{"name":"DoNotGenerate","value":"DO_NOT_GENERATE"},{"name":"GenerateAllSegments","value":"GENERATE_ALL_SEGMENTS"},{"name":"GenerateWithoutTransactionSetResponseLoop","value":"GENERATE_WITHOUT_TRANSACTION_SET_RESPONSE_LOOP"}]},"aws-native:b2bi:PartnershipX12FunctionalGroupHeaders":{"properties":{"applicationReceiverCode":{"type":"string"},"applicationSenderCode":{"type":"string"},"responsibleAgencyCode":{"type":"string"}},"type":"object"},"aws-native:b2bi:PartnershipX12InboundEdiOptions":{"properties":{"acknowledgmentOptions":{"$ref":"#/types/aws-native:b2bi:PartnershipX12AcknowledgmentOptions","description":"Specifies acknowledgment options for inbound X12 EDI files. These options control how functional and technical acknowledgments are handled."}},"type":"object"},"aws-native:b2bi:PartnershipX12InterchangeControlHeaders":{"properties":{"acknowledgmentRequestedCode":{"type":"string"},"receiverId":{"type":"string"},"receiverIdQualifier":{"type":"string"},"repetitionSeparator":{"type":"string"},"senderId":{"type":"string"},"senderIdQualifier":{"type":"string"},"usageIndicatorCode":{"type":"string"}},"type":"object"},"aws-native:b2bi:PartnershipX12OutboundEdiHeaders":{"properties":{"controlNumbers":{"$ref":"#/types/aws-native:b2bi:PartnershipX12ControlNumbers"},"delimiters":{"$ref":"#/types/aws-native:b2bi:PartnershipX12Delimiters"},"functionalGroupHeaders":{"$ref":"#/types/aws-native:b2bi:PartnershipX12FunctionalGroupHeaders"},"gs05TimeFormat":{"$ref":"#/types/aws-native:b2bi:PartnershipX12gs05TimeFormat"},"interchangeControlHeaders":{"$ref":"#/types/aws-native:b2bi:PartnershipX12InterchangeControlHeaders"},"validateEdi":{"type":"boolean"}},"type":"object"},"aws-native:b2bi:PartnershipX12TechnicalAcknowledgment":{"type":"string","enum":[{"name":"DoNotGenerate","value":"DO_NOT_GENERATE"},{"name":"GenerateAllSegments","value":"GENERATE_ALL_SEGMENTS"}]},"aws-native:b2bi:PartnershipX12gs05TimeFormat":{"type":"string","enum":[{"name":"Hhmm","value":"HHMM"},{"name":"Hhmmss","value":"HHMMSS"},{"name":"Hhmmssdd","value":"HHMMSSDD"}]},"aws-native:b2bi:ProfileLogging":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:b2bi:ProfileTag":{"properties":{"key":{"type":"string","description":"Specifies the name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name that you create."}},"type":"object","required":["key","value"]},"aws-native:b2bi:TransformerAdvancedOptions":{"properties":{"x12":{"$ref":"#/types/aws-native:b2bi:TransformerX12AdvancedOptions","description":"A structure that contains X12-specific advanced options, such as split options for processing X12 EDI files."}},"type":"object"},"aws-native:b2bi:TransformerEdiType0Properties":{"properties":{"x12Details":{"$ref":"#/types/aws-native:b2bi:TransformerX12Details"}},"type":"object","required":["x12Details"]},"aws-native:b2bi:TransformerEdiTypeProperties":{"properties":{"x12Details":{"$ref":"#/types/aws-native:b2bi:TransformerX12Details"}},"type":"object","required":["x12Details"]},"aws-native:b2bi:TransformerElementRequirement":{"type":"string","enum":[{"name":"Optional","value":"OPTIONAL"},{"name":"Mandatory","value":"MANDATORY"}]},"aws-native:b2bi:TransformerFileFormat":{"type":"string","enum":[{"name":"Xml","value":"XML"},{"name":"Json","value":"JSON"},{"name":"NotUsed","value":"NOT_USED"}]},"aws-native:b2bi:TransformerFormatOptions0Properties":{"properties":{"x12":{"$ref":"#/types/aws-native:b2bi:TransformerX12Details"}},"type":"object","required":["x12"]},"aws-native:b2bi:TransformerFormatOptionsProperties":{"properties":{"x12":{"$ref":"#/types/aws-native:b2bi:TransformerX12Details"}},"type":"object","required":["x12"]},"aws-native:b2bi:TransformerFromFormat":{"type":"string","enum":[{"name":"X12","value":"X12"}]},"aws-native:b2bi:TransformerInputConversion":{"properties":{"advancedOptions":{"$ref":"#/types/aws-native:b2bi:TransformerAdvancedOptions","description":"Specifies advanced options for the input conversion process. These options provide additional control over how EDI files are processed during transformation."},"formatOptions":{"$ref":"#/types/aws-native:b2bi:TransformerFormatOptionsProperties","description":"A structure that contains the formatting options for an inbound transformer."},"fromFormat":{"$ref":"#/types/aws-native:b2bi:TransformerFromFormat","description":"The format for the transformer input: currently on `X12` is supported."}},"type":"object","required":["fromFormat"]},"aws-native:b2bi:TransformerMapping":{"properties":{"template":{"type":"string","description":"A string that represents the mapping template, in the transformation language specified in `templateLanguage` ."},"templateLanguage":{"$ref":"#/types/aws-native:b2bi:TransformerMappingTemplateLanguage","description":"The transformation language for the template, either XSLT or JSONATA."}},"type":"object","required":["templateLanguage"]},"aws-native:b2bi:TransformerMappingTemplateLanguage":{"type":"string","enum":[{"name":"Xslt","value":"XSLT"},{"name":"Jsonata","value":"JSONATA"}]},"aws-native:b2bi:TransformerOutputConversion":{"properties":{"advancedOptions":{"$ref":"#/types/aws-native:b2bi:TransformerAdvancedOptions"},"formatOptions":{"$ref":"#/types/aws-native:b2bi:TransformerFormatOptionsProperties","description":"A structure that contains the X12 transaction set and version for the transformer output."},"toFormat":{"$ref":"#/types/aws-native:b2bi:TransformerToFormat","description":"The format for the output from an outbound transformer: only X12 is currently supported."}},"type":"object","required":["toFormat"]},"aws-native:b2bi:TransformerSampleDocumentKeys":{"properties":{"input":{"type":"string","description":"An array of keys for your input sample documents."},"output":{"type":"string","description":"An array of keys for your output sample documents."}},"type":"object"},"aws-native:b2bi:TransformerSampleDocuments":{"properties":{"bucketName":{"type":"string","description":"Contains the Amazon S3 bucket that is used to hold your sample documents."},"keys":{"type":"array","items":{"$ref":"#/types/aws-native:b2bi:TransformerSampleDocumentKeys"},"description":"Contains an array of the Amazon S3 keys used to identify the location for your sample documents."}},"type":"object","required":["bucketName","keys"]},"aws-native:b2bi:TransformerStatus":{"type":"string","enum":[{"name":"Active","value":"active"},{"name":"Inactive","value":"inactive"}]},"aws-native:b2bi:TransformerTag":{"properties":{"key":{"type":"string","description":"Specifies the name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name that you create."}},"type":"object","required":["key","value"]},"aws-native:b2bi:TransformerToFormat":{"type":"string","enum":[{"name":"X12","value":"X12"}]},"aws-native:b2bi:TransformerX12AdvancedOptions":{"properties":{"splitOptions":{"$ref":"#/types/aws-native:b2bi:TransformerX12SplitOptions","description":"Specifies options for splitting X12 EDI files. These options control how large X12 files are divided into smaller, more manageable units."},"validationOptions":{"$ref":"#/types/aws-native:b2bi:TransformerX12ValidationOptions","description":"Specifies validation options for X12 EDI processing. These options control how validation rules are applied during EDI document processing, including custom validation rules for element length constraints, code list validations, and element requirement checks."}},"type":"object"},"aws-native:b2bi:TransformerX12CodeListValidationRule":{"properties":{"codesToAdd":{"type":"array","items":{"type":"string"}},"codesToRemove":{"type":"array","items":{"type":"string"}},"elementId":{"type":"string"}},"type":"object","required":["elementId"]},"aws-native:b2bi:TransformerX12Details":{"properties":{"transactionSet":{"$ref":"#/types/aws-native:b2bi:TransformerX12TransactionSet"},"version":{"$ref":"#/types/aws-native:b2bi:TransformerX12Version"}},"type":"object"},"aws-native:b2bi:TransformerX12ElementLengthValidationRule":{"properties":{"elementId":{"type":"string"},"maxLength":{"type":"number"},"minLength":{"type":"number"}},"type":"object","required":["elementId","maxLength","minLength"]},"aws-native:b2bi:TransformerX12ElementRequirementValidationRule":{"properties":{"elementPosition":{"type":"string"},"requirement":{"$ref":"#/types/aws-native:b2bi:TransformerElementRequirement"}},"type":"object","required":["elementPosition","requirement"]},"aws-native:b2bi:TransformerX12SplitBy":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Transaction","value":"TRANSACTION"}]},"aws-native:b2bi:TransformerX12SplitOptions":{"properties":{"splitBy":{"$ref":"#/types/aws-native:b2bi:TransformerX12SplitBy","description":"Specifies the method used to split X12 EDI files. Valid values include `TRANSACTION` (split by individual transaction sets), or `NONE` (no splitting)."}},"type":"object"},"aws-native:b2bi:TransformerX12TransactionSet":{"type":"string","enum":[{"name":"X12100","value":"X12_100"},{"name":"X12101","value":"X12_101"},{"name":"X12102","value":"X12_102"},{"name":"X12103","value":"X12_103"},{"name":"X12104","value":"X12_104"},{"name":"X12105","value":"X12_105"},{"name":"X12106","value":"X12_106"},{"name":"X12107","value":"X12_107"},{"name":"X12108","value":"X12_108"},{"name":"X12109","value":"X12_109"},{"name":"X12110","value":"X12_110"},{"name":"X12111","value":"X12_111"},{"name":"X12112","value":"X12_112"},{"name":"X12113","value":"X12_113"},{"name":"X12120","value":"X12_120"},{"name":"X12121","value":"X12_121"},{"name":"X12124","value":"X12_124"},{"name":"X12125","value":"X12_125"},{"name":"X12126","value":"X12_126"},{"name":"X12127","value":"X12_127"},{"name":"X12128","value":"X12_128"},{"name":"X12129","value":"X12_129"},{"name":"X12130","value":"X12_130"},{"name":"X12131","value":"X12_131"},{"name":"X12132","value":"X12_132"},{"name":"X12133","value":"X12_133"},{"name":"X12135","value":"X12_135"},{"name":"X12138","value":"X12_138"},{"name":"X12139","value":"X12_139"},{"name":"X12140","value":"X12_140"},{"name":"X12141","value":"X12_141"},{"name":"X12142","value":"X12_142"},{"name":"X12143","value":"X12_143"},{"name":"X12144","value":"X12_144"},{"name":"X12146","value":"X12_146"},{"name":"X12147","value":"X12_147"},{"name":"X12148","value":"X12_148"},{"name":"X12149","value":"X12_149"},{"name":"X12150","value":"X12_150"},{"name":"X12151","value":"X12_151"},{"name":"X12152","value":"X12_152"},{"name":"X12153","value":"X12_153"},{"name":"X12154","value":"X12_154"},{"name":"X12155","value":"X12_155"},{"name":"X12157","value":"X12_157"},{"name":"X12158","value":"X12_158"},{"name":"X12159","value":"X12_159"},{"name":"X12160","value":"X12_160"},{"name":"X12161","value":"X12_161"},{"name":"X12163","value":"X12_163"},{"name":"X12170","value":"X12_170"},{"name":"X12175","value":"X12_175"},{"name":"X12176","value":"X12_176"},{"name":"X12179","value":"X12_179"},{"name":"X12180","value":"X12_180"},{"name":"X12185","value":"X12_185"},{"name":"X12186","value":"X12_186"},{"name":"X12187","value":"X12_187"},{"name":"X12188","value":"X12_188"},{"name":"X12189","value":"X12_189"},{"name":"X12190","value":"X12_190"},{"name":"X12191","value":"X12_191"},{"name":"X12194","value":"X12_194"},{"name":"X12195","value":"X12_195"},{"name":"X12196","value":"X12_196"},{"name":"X12197","value":"X12_197"},{"name":"X12198","value":"X12_198"},{"name":"X12199","value":"X12_199"},{"name":"X12200","value":"X12_200"},{"name":"X12201","value":"X12_201"},{"name":"X12202","value":"X12_202"},{"name":"X12203","value":"X12_203"},{"name":"X12204","value":"X12_204"},{"name":"X12205","value":"X12_205"},{"name":"X12206","value":"X12_206"},{"name":"X12210","value":"X12_210"},{"name":"X12211","value":"X12_211"},{"name":"X12212","value":"X12_212"},{"name":"X12213","value":"X12_213"},{"name":"X12214","value":"X12_214"},{"name":"X12215","value":"X12_215"},{"name":"X12216","value":"X12_216"},{"name":"X12217","value":"X12_217"},{"name":"X12218","value":"X12_218"},{"name":"X12219","value":"X12_219"},{"name":"X12220","value":"X12_220"},{"name":"X12222","value":"X12_222"},{"name":"X12223","value":"X12_223"},{"name":"X12224","value":"X12_224"},{"name":"X12225","value":"X12_225"},{"name":"X12227","value":"X12_227"},{"name":"X12228","value":"X12_228"},{"name":"X12240","value":"X12_240"},{"name":"X12242","value":"X12_242"},{"name":"X12244","value":"X12_244"},{"name":"X12245","value":"X12_245"},{"name":"X12248","value":"X12_248"},{"name":"X12249","value":"X12_249"},{"name":"X12250","value":"X12_250"},{"name":"X12251","value":"X12_251"},{"name":"X12252","value":"X12_252"},{"name":"X12255","value":"X12_255"},{"name":"X12256","value":"X12_256"},{"name":"X12259","value":"X12_259"},{"name":"X12260","value":"X12_260"},{"name":"X12261","value":"X12_261"},{"name":"X12262","value":"X12_262"},{"name":"X12263","value":"X12_263"},{"name":"X12264","value":"X12_264"},{"name":"X12265","value":"X12_265"},{"name":"X12266","value":"X12_266"},{"name":"X12267","value":"X12_267"},{"name":"X12268","value":"X12_268"},{"name":"X12269","value":"X12_269"},{"name":"X12270","value":"X12_270"},{"name":"X12271","value":"X12_271"},{"name":"X12272","value":"X12_272"},{"name":"X12273","value":"X12_273"},{"name":"X12274","value":"X12_274"},{"name":"X12275","value":"X12_275"},{"name":"X12276","value":"X12_276"},{"name":"X12277","value":"X12_277"},{"name":"X12278","value":"X12_278"},{"name":"X12280","value":"X12_280"},{"name":"X12283","value":"X12_283"},{"name":"X12284","value":"X12_284"},{"name":"X12285","value":"X12_285"},{"name":"X12286","value":"X12_286"},{"name":"X12288","value":"X12_288"},{"name":"X12290","value":"X12_290"},{"name":"X12300","value":"X12_300"},{"name":"X12301","value":"X12_301"},{"name":"X12303","value":"X12_303"},{"name":"X12304","value":"X12_304"},{"name":"X12309","value":"X12_309"},{"name":"X12310","value":"X12_310"},{"name":"X12311","value":"X12_311"},{"name":"X12312","value":"X12_312"},{"name":"X12313","value":"X12_313"},{"name":"X12315","value":"X12_315"},{"name":"X12317","value":"X12_317"},{"name":"X12319","value":"X12_319"},{"name":"X12322","value":"X12_322"},{"name":"X12323","value":"X12_323"},{"name":"X12324","value":"X12_324"},{"name":"X12325","value":"X12_325"},{"name":"X12326","value":"X12_326"},{"name":"X12350","value":"X12_350"},{"name":"X12352","value":"X12_352"},{"name":"X12353","value":"X12_353"},{"name":"X12354","value":"X12_354"},{"name":"X12355","value":"X12_355"},{"name":"X12356","value":"X12_356"},{"name":"X12357","value":"X12_357"},{"name":"X12358","value":"X12_358"},{"name":"X12361","value":"X12_361"},{"name":"X12362","value":"X12_362"},{"name":"X12404","value":"X12_404"},{"name":"X12410","value":"X12_410"},{"name":"X12412","value":"X12_412"},{"name":"X12414","value":"X12_414"},{"name":"X12417","value":"X12_417"},{"name":"X12418","value":"X12_418"},{"name":"X12419","value":"X12_419"},{"name":"X12420","value":"X12_420"},{"name":"X12421","value":"X12_421"},{"name":"X12422","value":"X12_422"},{"name":"X12423","value":"X12_423"},{"name":"X12424","value":"X12_424"},{"name":"X12425","value":"X12_425"},{"name":"X12426","value":"X12_426"},{"name":"X12429","value":"X12_429"},{"name":"X12431","value":"X12_431"},{"name":"X12432","value":"X12_432"},{"name":"X12433","value":"X12_433"},{"name":"X12434","value":"X12_434"},{"name":"X12435","value":"X12_435"},{"name":"X12436","value":"X12_436"},{"name":"X12437","value":"X12_437"},{"name":"X12440","value":"X12_440"},{"name":"X12451","value":"X12_451"},{"name":"X12452","value":"X12_452"},{"name":"X12453","value":"X12_453"},{"name":"X12455","value":"X12_455"},{"name":"X12456","value":"X12_456"},{"name":"X12460","value":"X12_460"},{"name":"X12463","value":"X12_463"},{"name":"X12466","value":"X12_466"},{"name":"X12468","value":"X12_468"},{"name":"X12470","value":"X12_470"},{"name":"X12475","value":"X12_475"},{"name":"X12485","value":"X12_485"},{"name":"X12486","value":"X12_486"},{"name":"X12490","value":"X12_490"},{"name":"X12492","value":"X12_492"},{"name":"X12494","value":"X12_494"},{"name":"X12500","value":"X12_500"},{"name":"X12501","value":"X12_501"},{"name":"X12503","value":"X12_503"},{"name":"X12504","value":"X12_504"},{"name":"X12511","value":"X12_511"},{"name":"X12517","value":"X12_517"},{"name":"X12521","value":"X12_521"},{"name":"X12527","value":"X12_527"},{"name":"X12536","value":"X12_536"},{"name":"X12540","value":"X12_540"},{"name":"X12561","value":"X12_561"},{"name":"X12567","value":"X12_567"},{"name":"X12568","value":"X12_568"},{"name":"X12601","value":"X12_601"},{"name":"X12602","value":"X12_602"},{"name":"X12620","value":"X12_620"},{"name":"X12625","value":"X12_625"},{"name":"X12650","value":"X12_650"},{"name":"X12715","value":"X12_715"},{"name":"X12753","value":"X12_753"},{"name":"X12754","value":"X12_754"},{"name":"X12805","value":"X12_805"},{"name":"X12806","value":"X12_806"},{"name":"X12810","value":"X12_810"},{"name":"X12811","value":"X12_811"},{"name":"X12812","value":"X12_812"},{"name":"X12813","value":"X12_813"},{"name":"X12814","value":"X12_814"},{"name":"X12815","value":"X12_815"},{"name":"X12816","value":"X12_816"},{"name":"X12818","value":"X12_818"},{"name":"X12819","value":"X12_819"},{"name":"X12820","value":"X12_820"},{"name":"X12821","value":"X12_821"},{"name":"X12822","value":"X12_822"},{"name":"X12823","value":"X12_823"},{"name":"X12824","value":"X12_824"},{"name":"X12826","value":"X12_826"},{"name":"X12827","value":"X12_827"},{"name":"X12828","value":"X12_828"},{"name":"X12829","value":"X12_829"},{"name":"X12830","value":"X12_830"},{"name":"X12831","value":"X12_831"},{"name":"X12832","value":"X12_832"},{"name":"X12833","value":"X12_833"},{"name":"X12834","value":"X12_834"},{"name":"X12835","value":"X12_835"},{"name":"X12836","value":"X12_836"},{"name":"X12837","value":"X12_837"},{"name":"X12838","value":"X12_838"},{"name":"X12839","value":"X12_839"},{"name":"X12840","value":"X12_840"},{"name":"X12841","value":"X12_841"},{"name":"X12842","value":"X12_842"},{"name":"X12843","value":"X12_843"},{"name":"X12844","value":"X12_844"},{"name":"X12845","value":"X12_845"},{"name":"X12846","value":"X12_846"},{"name":"X12847","value":"X12_847"},{"name":"X12848","value":"X12_848"},{"name":"X12849","value":"X12_849"},{"name":"X12850","value":"X12_850"},{"name":"X12851","value":"X12_851"},{"name":"X12852","value":"X12_852"},{"name":"X12853","value":"X12_853"},{"name":"X12854","value":"X12_854"},{"name":"X12855","value":"X12_855"},{"name":"X12856","value":"X12_856"},{"name":"X12857","value":"X12_857"},{"name":"X12858","value":"X12_858"},{"name":"X12859","value":"X12_859"},{"name":"X12860","value":"X12_860"},{"name":"X12861","value":"X12_861"},{"name":"X12862","value":"X12_862"},{"name":"X12863","value":"X12_863"},{"name":"X12864","value":"X12_864"},{"name":"X12865","value":"X12_865"},{"name":"X12866","value":"X12_866"},{"name":"X12867","value":"X12_867"},{"name":"X12868","value":"X12_868"},{"name":"X12869","value":"X12_869"},{"name":"X12870","value":"X12_870"},{"name":"X12871","value":"X12_871"},{"name":"X12872","value":"X12_872"},{"name":"X12873","value":"X12_873"},{"name":"X12874","value":"X12_874"},{"name":"X12875","value":"X12_875"},{"name":"X12876","value":"X12_876"},{"name":"X12877","value":"X12_877"},{"name":"X12878","value":"X12_878"},{"name":"X12879","value":"X12_879"},{"name":"X12880","value":"X12_880"},{"name":"X12881","value":"X12_881"},{"name":"X12882","value":"X12_882"},{"name":"X12883","value":"X12_883"},{"name":"X12884","value":"X12_884"},{"name":"X12885","value":"X12_885"},{"name":"X12886","value":"X12_886"},{"name":"X12887","value":"X12_887"},{"name":"X12888","value":"X12_888"},{"name":"X12889","value":"X12_889"},{"name":"X12891","value":"X12_891"},{"name":"X12893","value":"X12_893"},{"name":"X12894","value":"X12_894"},{"name":"X12895","value":"X12_895"},{"name":"X12896","value":"X12_896"},{"name":"X12920","value":"X12_920"},{"name":"X12924","value":"X12_924"},{"name":"X12925","value":"X12_925"},{"name":"X12926","value":"X12_926"},{"name":"X12928","value":"X12_928"},{"name":"X12940","value":"X12_940"},{"name":"X12943","value":"X12_943"},{"name":"X12944","value":"X12_944"},{"name":"X12945","value":"X12_945"},{"name":"X12947","value":"X12_947"},{"name":"X12980","value":"X12_980"},{"name":"X12990","value":"X12_990"},{"name":"X12993","value":"X12_993"},{"name":"X12996","value":"X12_996"},{"name":"X12997","value":"X12_997"},{"name":"X12998","value":"X12_998"},{"name":"X12999","value":"X12_999"},{"name":"X12270x279","value":"X12_270_X279"},{"name":"X12271x279","value":"X12_271_X279"},{"name":"X12275x210","value":"X12_275_X210"},{"name":"X12275x211","value":"X12_275_X211"},{"name":"X12276x212","value":"X12_276_X212"},{"name":"X12277x212","value":"X12_277_X212"},{"name":"X12277x214","value":"X12_277_X214"},{"name":"X12277x364","value":"X12_277_X364"},{"name":"X12278x217","value":"X12_278_X217"},{"name":"X12820x218","value":"X12_820_X218"},{"name":"X12820x306","value":"X12_820_X306"},{"name":"X12824x186","value":"X12_824_X186"},{"name":"X12834x220","value":"X12_834_X220"},{"name":"X12834x307","value":"X12_834_X307"},{"name":"X12834x318","value":"X12_834_X318"},{"name":"X12835x221","value":"X12_835_X221"},{"name":"X12837x222","value":"X12_837_X222"},{"name":"X12837x223","value":"X12_837_X223"},{"name":"X12837x224","value":"X12_837_X224"},{"name":"X12837x291","value":"X12_837_X291"},{"name":"X12837x292","value":"X12_837_X292"},{"name":"X12837x298","value":"X12_837_X298"},{"name":"X12999x231","value":"X12_999_X231"}]},"aws-native:b2bi:TransformerX12ValidationOptions":{"properties":{"validationRules":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:b2bi:TransformerX12ValidationRule0Properties"},{"$ref":"#/types/aws-native:b2bi:TransformerX12ValidationRule1Properties"},{"$ref":"#/types/aws-native:b2bi:TransformerX12ValidationRule2Properties"}]},"description":"Specifies a list of validation rules to apply during EDI document processing. These rules can include code list modifications, element length constraints, and element requirement changes."}},"type":"object"},"aws-native:b2bi:TransformerX12ValidationRule0Properties":{"properties":{"codeListValidationRule":{"$ref":"#/types/aws-native:b2bi:TransformerX12CodeListValidationRule"}},"type":"object","required":["codeListValidationRule"]},"aws-native:b2bi:TransformerX12ValidationRule1Properties":{"properties":{"elementLengthValidationRule":{"$ref":"#/types/aws-native:b2bi:TransformerX12ElementLengthValidationRule"}},"type":"object","required":["elementLengthValidationRule"]},"aws-native:b2bi:TransformerX12ValidationRule2Properties":{"properties":{"elementRequirementValidationRule":{"$ref":"#/types/aws-native:b2bi:TransformerX12ElementRequirementValidationRule"}},"type":"object","required":["elementRequirementValidationRule"]},"aws-native:b2bi:TransformerX12Version":{"type":"string","enum":[{"name":"Version4010","value":"VERSION_4010"},{"name":"Version4030","value":"VERSION_4030"},{"name":"Version4050","value":"VERSION_4050"},{"name":"Version4060","value":"VERSION_4060"},{"name":"Version5010","value":"VERSION_5010"},{"name":"Version5010Hipaa","value":"VERSION_5010_HIPAA"}]},"aws-native:backup:BackupPlanAdvancedBackupSettingResourceType":{"properties":{"backupOptions":{"$ref":"pulumi.json#/Any","description":"The backup option for the resource. Each option is a key-value pair. This option is only available for Windows VSS backup jobs.\n\nValid values:\n\nSet to `\"WindowsVSS\":\"enabled\"` to enable the `WindowsVSS` backup option and create a Windows VSS backup.\n\nSet to `\"WindowsVSS\":\"disabled\"` to create a regular backup. The `WindowsVSS` option is not enabled by default.\n\nIf you specify an invalid option, you get an `InvalidParameterValueException` exception.\n\nFor more information about Windows VSS backups, see [Creating a VSS-Enabled Windows Backup](https://docs.aws.amazon.com/aws-backup/latest/devguide/windows-backups.html) ."},"resourceType":{"type":"string","description":"The name of a resource type. The only supported resource type is EC2."}},"type":"object","required":["backupOptions","resourceType"]},"aws-native:backup:BackupPlanBackupRuleResourceType":{"properties":{"completionWindowMinutes":{"type":"number","description":"A value in minutes after a backup job is successfully started before it must be completed or it is canceled by AWS Backup ."},"copyActions":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupPlanCopyActionResourceType"},"description":"An array of CopyAction objects, which contains the details of the copy operation."},"enableContinuousBackup":{"type":"boolean","description":"Enables continuous backup and point-in-time restores (PITR)."},"indexActions":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupPlanIndexActionsResourceType"},"description":"There can up to one IndexAction in each BackupRule, as each backup can have 0 or 1 backup index associated with it.\n\nWithin the array is ResourceTypes. Only 1 resource type will be accepted for each BackupRule. Valid values:\n\n- `EBS` for Amazon Elastic Block Store\n- `S3` for Amazon Simple Storage Service (Amazon S3)"},"lifecycle":{"$ref":"#/types/aws-native:backup:BackupPlanLifecycleResourceType","description":"The lifecycle defines when a protected resource is transitioned to cold storage and when it expires. AWS Backup transitions and expires backups automatically according to the lifecycle that you define."},"recoveryPointTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the resources."},"ruleName":{"type":"string","description":"A display name for a backup rule."},"scanActions":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupPlanScanActionResourceType"}},"scheduleExpression":{"type":"string","description":"A CRON expression specifying when AWS Backup initiates a backup job."},"scheduleExpressionTimezone":{"type":"string","description":"This is the timezone in which the schedule expression is set. By default, ScheduleExpressions are in UTC. You can modify this to a specified timezone."},"startWindowMinutes":{"type":"number","description":"An optional value that specifies a period of time in minutes after a backup is scheduled before a job is canceled if it doesn't start successfully.\n\nIf this value is included, it must be at least 60 minutes to avoid errors."},"targetBackupVault":{"type":"string","description":"The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created. They consist of letters, numbers, and hyphens."},"targetLogicallyAirGappedBackupVaultArn":{"type":"string","description":"The ARN of a logically air-gapped vault. ARN must be in the same account and Region. If provided, supported fully managed resources back up directly to logically air-gapped vault, while other supported resources create a temporary (billable) snapshot in backup vault, then copy it to logically air-gapped vault. Unsupported resources only back up to the specified backup vault."}},"type":"object","required":["ruleName","targetBackupVault"]},"aws-native:backup:BackupPlanCopyActionResourceType":{"properties":{"destinationBackupVaultArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies the destination backup vault for the copied backup. For example, `arn:aws:backup:us-east-1:123456789012:vault:aBackupVault.`"},"lifecycle":{"$ref":"#/types/aws-native:backup:BackupPlanLifecycleResourceType","description":"Defines when a protected resource is transitioned to cold storage and when it expires. AWS Backup transitions and expires backups automatically according to the lifecycle that you define. If you do not specify a lifecycle, AWS Backup applies the lifecycle policy of the source backup to the destination backup.\n\nBackups transitioned to cold storage must be stored in cold storage for a minimum of 90 days."}},"type":"object","required":["destinationBackupVaultArn"]},"aws-native:backup:BackupPlanIndexActionsResourceType":{"properties":{"resourceTypes":{"type":"array","items":{"type":"string"},"description":"0 or 1 index action will be accepted for each BackupRule.\n\nValid values:\n\n- `EBS` for Amazon Elastic Block Store\n- `S3` for Amazon Simple Storage Service (Amazon S3)"}},"type":"object"},"aws-native:backup:BackupPlanLifecycleResourceType":{"properties":{"deleteAfterDays":{"type":"number","description":"The number of days after creation that a recovery point is deleted. This value must be at least 90 days after the number of days specified in `MoveToColdStorageAfterDays` ."},"moveToColdStorageAfterDays":{"type":"number","description":"The number of days after creation that a recovery point is moved to cold storage."},"optInToArchiveForSupportedResources":{"type":"boolean","description":"If the value is true, your backup plan transitions supported resources to archive (cold) storage tier in accordance with your lifecycle settings."}},"type":"object"},"aws-native:backup:BackupPlanMalwareScanner":{"type":"string","enum":[{"name":"Guardduty","value":"GUARDDUTY"}]},"aws-native:backup:BackupPlanResourceType":{"properties":{"advancedBackupSettings":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupPlanAdvancedBackupSettingResourceType"},"description":"A list of backup options for each resource type."},"backupPlanName":{"type":"string","description":"The display name of a backup plan."},"backupPlanRule":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupPlanBackupRuleResourceType"},"description":"An array of `BackupRule` objects, each of which specifies a scheduled task that is used to back up a selection of resources."},"scanSettings":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupPlanScanSettingResourceType"}}},"type":"object","required":["backupPlanName","backupPlanRule"]},"aws-native:backup:BackupPlanScanActionResourceType":{"properties":{"malwareScanner":{"$ref":"#/types/aws-native:backup:BackupPlanMalwareScanner"},"scanMode":{"$ref":"#/types/aws-native:backup:BackupPlanScanMode"}},"type":"object"},"aws-native:backup:BackupPlanScanMode":{"type":"string","enum":[{"name":"FullScan","value":"FULL_SCAN"},{"name":"IncrementalScan","value":"INCREMENTAL_SCAN"}]},"aws-native:backup:BackupPlanScanSettingResourceType":{"properties":{"malwareScanner":{"$ref":"#/types/aws-native:backup:BackupPlanMalwareScanner"},"resourceTypes":{"type":"array","items":{"type":"string"}},"scannerRoleArn":{"type":"string"}},"type":"object"},"aws-native:backup:BackupSelectionConditionParameter":{"properties":{"conditionKey":{"type":"string","description":"The key in a key-value pair. For example, in the tag `Department: Accounting` , `Department` is the key."},"conditionValue":{"type":"string","description":"The value in a key-value pair. For example, in the tag `Department: Accounting` , `Accounting` is the value."}},"type":"object"},"aws-native:backup:BackupSelectionConditionResourceType":{"properties":{"conditionKey":{"type":"string","description":"The key in a key-value pair. For example, in `\"Department\": \"accounting\"` , `\"Department\"` is the key."},"conditionType":{"type":"string","description":"An operation, such as `STRINGEQUALS` , that is applied to a key-value pair used to filter resources in a selection."},"conditionValue":{"type":"string","description":"The value in a key-value pair. For example, in `\"Department\": \"accounting\"` , `\"accounting\"` is the value."}},"type":"object","required":["conditionKey","conditionType","conditionValue"]},"aws-native:backup:BackupSelectionResourceType":{"properties":{"conditions":{"$ref":"#/types/aws-native:backup:BackupSelectionResourceTypeConditionsProperties","description":"A list of conditions that you define to assign resources to your backup plans using tags. For example, `\"StringEquals\": { \"ConditionKey\": \"aws:ResourceTag/CreatedByCryo\", \"ConditionValue\": \"true\" },` . Condition operators are case sensitive.\n\n`Conditions` differs from `ListOfTags` as follows:\n\n- When you specify more than one condition, you only assign the resources that match ALL conditions (using AND logic).\n- `Conditions` supports `StringEquals` , `StringLike` , `StringNotEquals` , and `StringNotLike` . `ListOfTags` only supports `StringEquals` ."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that AWS Backup uses to authenticate when backing up the target resource; for example, `arn:aws:iam::123456789012:role/S3Access` ."},"listOfTags":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupSelectionConditionResourceType"},"description":"A list of conditions that you define to assign resources to your backup plans using tags. For example, `\"StringEquals\": { \"ConditionKey\": \"aws:ResourceTag/CreatedByCryo\", \"ConditionValue\": \"true\" },` . Condition operators are case sensitive.\n\n`ListOfTags` differs from `Conditions` as follows:\n\n- When you specify more than one condition, you assign all resources that match AT LEAST ONE condition (using OR logic).\n- `ListOfTags` only supports `StringEquals` . `Conditions` supports `StringEquals` , `StringLike` , `StringNotEquals` , and `StringNotLike` ."},"notResources":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARNs) to exclude from a backup plan. The maximum number of ARNs is 500 without wildcards, or 30 ARNs with wildcards.\n\nIf you need to exclude many resources from a backup plan, consider a different resource selection strategy, such as assigning only one or a few resource types or refining your resource selection using tags."},"resources":{"type":"array","items":{"type":"string"},"description":"An array of strings that contain Amazon Resource Names (ARNs) of resources to assign to a backup plan."},"selectionName":{"type":"string","description":"The display name of a resource selection document."}},"type":"object","required":["iamRoleArn","selectionName"]},"aws-native:backup:BackupSelectionResourceTypeConditionsProperties":{"description":"A list of conditions that you define to assign resources to your backup plans using tags. For example, `\"StringEquals\": { \"ConditionKey\": \"aws:ResourceTag/CreatedByCryo\", \"ConditionValue\": \"true\" },` . Condition operators are case sensitive.\n\n`Conditions` differs from `ListOfTags` as follows:\n\n- When you specify more than one condition, you only assign the resources that match ALL conditions (using AND logic).\n- `Conditions` supports `StringEquals` , `StringLike` , `StringNotEquals` , and `StringNotLike` . `ListOfTags` only supports `StringEquals` .","properties":{"stringEquals":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupSelectionConditionParameter"}},"stringLike":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupSelectionConditionParameter"}},"stringNotEquals":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupSelectionConditionParameter"}},"stringNotLike":{"type":"array","items":{"$ref":"#/types/aws-native:backup:BackupSelectionConditionParameter"}}},"type":"object"},"aws-native:backup:BackupVaultLockConfigurationType":{"properties":{"changeableForDays":{"type":"integer","description":"The AWS Backup Vault Lock configuration that specifies the number of days before the lock date. For example, setting `ChangeableForDays` to 30 on Jan. 1, 2022 at 8pm UTC will set the lock date to Jan. 31, 2022 at 8pm UTC.\n\nAWS Backup enforces a 72-hour cooling-off period before Vault Lock takes effect and becomes immutable. Therefore, you must set `ChangeableForDays` to 3 or greater.\n\nBefore the lock date, you can delete Vault Lock from the vault using `DeleteBackupVaultLockConfiguration` or change the Vault Lock configuration using `PutBackupVaultLockConfiguration` . On and after the lock date, the Vault Lock becomes immutable and cannot be changed or deleted.\n\nIf this parameter is not specified, you can delete Vault Lock from the vault using `DeleteBackupVaultLockConfiguration` or change the Vault Lock configuration using `PutBackupVaultLockConfiguration` at any time."},"maxRetentionDays":{"type":"integer","description":"The AWS Backup Vault Lock configuration that specifies the maximum retention period that the vault retains its recovery points. This setting can be useful if, for example, your organization's policies require you to destroy certain data after retaining it for four years (1460 days).\n\nIf this parameter is not included, Vault Lock does not enforce a maximum retention period on the recovery points in the vault. If this parameter is included without a value, Vault Lock will not enforce a maximum retention period.\n\nIf this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected."},"minRetentionDays":{"type":"integer","description":"The AWS Backup Vault Lock configuration that specifies the minimum retention period that the vault retains its recovery points. This setting can be useful if, for example, your organization's policies require you to retain certain data for at least seven years (2555 days).\n\nIf this parameter is not specified, Vault Lock will not enforce a minimum retention period.\n\nIf this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or longer than the minimum retention period. If the job's retention period is shorter than that minimum retention period, then the vault fails that backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected."}},"type":"object","required":["minRetentionDays"]},"aws-native:backup:BackupVaultNotificationObjectType":{"properties":{"backupVaultEvents":{"type":"array","items":{"type":"string"},"description":"An array of events that indicate the status of jobs to back up resources to the backup vault. For valid events, see [BackupVaultEvents](https://docs.aws.amazon.com/aws-backup/latest/devguide/API_PutBackupVaultNotifications.html#API_PutBackupVaultNotifications_RequestSyntax) in the *AWS Backup API Guide* ."},"snsTopicArn":{"type":"string","description":"An ARN that uniquely identifies an Amazon Simple Notification Service (Amazon SNS) topic; for example, `arn:aws:sns:us-west-2:111122223333:MyTopic` ."}},"type":"object","required":["backupVaultEvents","snsTopicArn"]},"aws-native:backup:FrameworkControl":{"properties":{"controlInputParameters":{"type":"array","items":{"$ref":"#/types/aws-native:backup:FrameworkControlInputParameter"},"description":"A list of ParameterName and ParameterValue pairs."},"controlName":{"type":"string","description":"The name of a control. This name is between 1 and 256 characters."},"controlScope":{"$ref":"#/types/aws-native:backup:FrameworkControlControlScopeProperties","description":"The scope of a control. The control scope defines what the control will evaluate. Three examples of control scopes are: a specific backup plan, all backup plans with a specific tag, or all backup plans."}},"type":"object","required":["controlName"]},"aws-native:backup:FrameworkControlControlScopeProperties":{"description":"The scope of a control. The control scope defines what the control will evaluate. Three examples of control scopes are: a specific backup plan, all backup plans with a specific tag, or all backup plans.","properties":{"complianceResourceIds":{"type":"array","items":{"type":"string"},"description":"The ID of the only AWS resource that you want your control scope to contain."},"complianceResourceTypes":{"type":"array","items":{"type":"string"},"description":"Describes whether the control scope includes one or more types of resources, such as `EFS` or `RDS`."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:backup:FrameworkTag"},"description":"Describes whether the control scope includes resources with one or more tags. Each tag is a key-value pair."}},"type":"object"},"aws-native:backup:FrameworkControlInputParameter":{"properties":{"parameterName":{"type":"string","description":"The name of a parameter, for example, `BackupPlanFrequency` ."},"parameterValue":{"type":"string","description":"The value of parameter, for example, `hourly` ."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:backup:FrameworkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object"},"aws-native:backup:LogicallyAirGappedBackupVaultNotificationObjectType":{"properties":{"backupVaultEvents":{"type":"array","items":{"type":"string"},"description":"An array of events that indicate the status of jobs to back up resources to the backup vault."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the topic for a backup vault’s events; for example, `arn:aws:sns:us-west-2:111122223333:MyVaultTopic` ."}},"type":"object","required":["backupVaultEvents","snsTopicArn"]},"aws-native:backup:ReportDeliveryChannelProperties":{"description":"A structure that contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports.","properties":{"formats":{"type":"array","items":{"type":"string"},"description":"A list of the format of your reports: CSV, JSON, or both. If not specified, the default format is CSV."},"s3BucketName":{"type":"string","description":"The unique name of the S3 bucket that receives your reports."},"s3KeyPrefix":{"type":"string","description":"The prefix for where AWS Backup Audit Manager delivers your reports to Amazon S3. The prefix is this part of the following path: s3://your-bucket-name/prefix/Backup/us-west-2/year/month/day/report-name. If not specified, there is no prefix."}},"type":"object","required":["s3BucketName"]},"aws-native:backup:ReportPlanTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object"},"aws-native:backup:ReportSettingProperties":{"description":"Identifies the report template for the report. Reports are built using a report template.","properties":{"accounts":{"type":"array","items":{"type":"string"},"description":"The list of AWS accounts that a report covers."},"frameworkArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the frameworks a report covers."},"organizationUnits":{"type":"array","items":{"type":"string"},"description":"The list of AWS organization units that a report covers."},"regions":{"type":"array","items":{"type":"string"},"description":"The list of AWS regions that a report covers."},"reportTemplate":{"type":"string","description":"Identifies the report template for the report. Reports are built using a report template. The report templates are: `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`"}},"type":"object","required":["reportTemplate"]},"aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointSelection":{"properties":{"algorithm":{"$ref":"#/types/aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointSelectionAlgorithm","description":"Acceptable values include \"LATEST_WITHIN_WINDOW\" or \"RANDOM_WITHIN_WINDOW\""},"excludeVaults":{"type":"array","items":{"type":"string"},"description":"Accepted values include specific ARNs or list of selectors. Defaults to empty list if not listed."},"includeVaults":{"type":"array","items":{"type":"string"},"description":"Accepted values include wildcard [\"*\"] or by specific ARNs or ARN wilcard replacement [\"arn:aws:backup:us-west-2:123456789012:backup-vault:asdf\", ...] [\"arn:aws:backup:*:*:backup-vault:asdf-*\", ...]"},"recoveryPointTypes":{"type":"array","items":{"$ref":"#/types/aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointType"},"description":"These are the types of recovery points.\n\nInclude `SNAPSHOT` to restore only snapshot recovery points; include `CONTINUOUS` to restore continuous recovery points (point in time restore / PITR); use both to restore either a snapshot or a continuous recovery point. The recovery point will be determined by the value for `Algorithm` ."},"selectionWindowDays":{"type":"integer","description":"Accepted values are integers from 1 to 365."}},"type":"object","required":["algorithm","includeVaults","recoveryPointTypes"]},"aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointSelectionAlgorithm":{"type":"string","enum":[{"name":"LatestWithinWindow","value":"LATEST_WITHIN_WINDOW"},{"name":"RandomWithinWindow","value":"RANDOM_WITHIN_WINDOW"}]},"aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointType":{"type":"string","enum":[{"name":"Snapshot","value":"SNAPSHOT"},{"name":"Continuous","value":"CONTINUOUS"}]},"aws-native:backup:RestoreTestingPlanTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:backup:RestoreTestingSelectionKeyValue":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:backup:RestoreTestingSelectionProtectedResourceConditions":{"properties":{"stringEquals":{"type":"array","items":{"$ref":"#/types/aws-native:backup:RestoreTestingSelectionKeyValue"},"description":"Filters the values of your tagged resources for only those resources that you tagged with the same value. Also called \"exact matching.\""},"stringNotEquals":{"type":"array","items":{"$ref":"#/types/aws-native:backup:RestoreTestingSelectionKeyValue"},"description":"Filters the values of your tagged resources for only those resources that you tagged that do not have the same value. Also called \"negated matching.\""}},"type":"object"},"aws-native:backup:TieringConfigurationResourceSelection":{"properties":{"resourceType":{"type":"string"},"resources":{"type":"array","items":{"type":"string"}},"tieringDownSettingsInDays":{"type":"integer"}},"type":"object","required":["resourceType","resources","tieringDownSettingsInDays"]},"aws-native:backupgateway:HypervisorTag":{"properties":{"key":{"type":"string","description":"The key part of a tag's key-value pair. The key can't start with `aws:` ."},"value":{"type":"string","description":"The value part of a tag's key-value pair."}},"type":"object","required":["key","value"]},"aws-native:batch:ComputeEnvironmentComputeResources":{"properties":{"allocationStrategy":{"type":"string","description":"The allocation strategy to use for the compute resource if not enough instances of the best fitting instance type can be allocated. This might be because of availability of the instance type in the Region or [Amazon EC2 service limits](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-resource-limits.html) . For more information, see [Allocation strategies](https://docs.aws.amazon.com/batch/latest/userguide/allocation-strategies.html) in the *AWS Batch User Guide* .\n\nWhen updating a compute environment, changing the allocation strategy requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* . `BEST_FIT` is not supported when updating a compute environment.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources, and shouldn't be specified. \n\n- **BEST_FIT (default)** - AWS Batch selects an instance type that best fits the needs of the jobs with a preference for the lowest-cost instance type. If additional instances of the selected instance type aren't available, AWS Batch waits for the additional instances to be available. If there aren't enough instances available, or if the user is reaching [Amazon EC2 service limits](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-resource-limits.html) then additional jobs aren't run until the currently running jobs have completed. This allocation strategy keeps costs lower but can limit scaling. If you are using Spot Fleets with `BEST_FIT` then the Spot Fleet IAM role must be specified.\n- **BEST_FIT_PROGRESSIVE** - AWS Batch will select additional instance types that are large enough to meet the requirements of the jobs in the queue, with a preference for instance types with a lower cost per unit vCPU. If additional instances of the previously selected instance types aren't available, AWS Batch will select new instance types.\n- **SPOT_CAPACITY_OPTIMIZED** - AWS Batch will select one or more instance types that are large enough to meet the requirements of the jobs in the queue, with a preference for instance types that are less likely to be interrupted. This allocation strategy is only available for Spot Instance compute resources.\n- **SPOT_PRICE_CAPACITY_OPTIMIZED** - The price and capacity optimized allocation strategy looks at both price and capacity to select the Spot Instance pools that are the least likely to be interrupted and have the lowest possible price. This allocation strategy is only available for Spot Instance compute resources.\n\n\u003e We recommend that you use `SPOT_PRICE_CAPACITY_OPTIMIZED` rather than `SPOT_CAPACITY_OPTIMIZED` in most instances.\n\nWith `BEST_FIT_PROGRESSIVE` , `SPOT_CAPACITY_OPTIMIZED` , and `SPOT_PRICE_CAPACITY_OPTIMIZED` allocation strategies using On-Demand or Spot Instances, and the `BEST_FIT` strategy using Spot Instances, AWS Batch might need to go above `maxvCpus` to meet your capacity requirements. In this event, AWS Batch never exceeds `maxvCpus` by more than a single instance."},"bidPercentage":{"type":"integer","description":"The maximum percentage that a Spot Instance price can be when compared with the On-Demand price for that instance type before instances are launched. For example, if your maximum percentage is 20%, the Spot price must be less than 20% of the current On-Demand price for that Amazon EC2 instance. You always pay the lowest (market) price and never more than your maximum percentage. For most use cases, we recommend leaving this field empty.\n\nWhen updating a compute environment, changing the bid percentage requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it."},"desiredvCpus":{"type":"integer","description":"The desired number of vCPUS in the compute environment. AWS Batch modifies this value between the minimum and maximum values based on job queue demand.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it. \u003e AWS Batch doesn't support changing the desired number of vCPUs of an existing compute environment. Don't specify this parameter for compute environments using Amazon EKS clusters. \u003e When you update the `desiredvCpus` setting, the value must be between the `minvCpus` and `maxvCpus` values.\n\u003e \n\u003e Additionally, the updated `desiredvCpus` value must be greater than or equal to the current `desiredvCpus` value. For more information, see [Troubleshooting AWS Batch](https://docs.aws.amazon.com/batch/latest/userguide/troubleshooting.html#error-desired-vcpus-update) in the *AWS Batch User Guide* ."},"ec2Configuration":{"type":"array","items":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentEc2ConfigurationObject"},"description":"Provides information used to select Amazon Machine Images (AMIs) for Amazon EC2 instances in the compute environment. If `Ec2Configuration` isn't specified, the default is `ECS_AL2` .\n\nWhen updating a compute environment, changing this setting requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* . To remove the Amazon EC2 configuration and any custom AMI ID specified in `imageIdOverride` , set this value to an empty string.\n\nOne or two values can be provided.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it."},"ec2KeyPair":{"type":"string","description":"The Amazon EC2 key pair that's used for instances launched in the compute environment. You can use this key pair to log in to your instances with SSH. To remove the Amazon EC2 key pair, set this value to an empty string.\n\nWhen updating a compute environment, changing the Amazon EC2 key pair requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it."},"imageId":{"type":"string","description":"The Amazon Machine Image (AMI) ID used for instances launched in the compute environment. This parameter is overridden by the `imageIdOverride` member of the `Ec2Configuration` structure. To remove the custom AMI ID and use the default AMI ID, set this value to an empty string.\n\nWhen updating a compute environment, changing the AMI ID requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it. \u003e The AMI that you choose for a compute environment must match the architecture of the instance types that you intend to use for that compute environment. For example, if your compute environment uses A1 instance types, the compute resource AMI that you choose must support ARM instances. Amazon ECS vends both x86 and ARM versions of the Amazon ECS-optimized Amazon Linux 2 AMI. For more information, see [Amazon ECS-optimized Amazon Linux 2 AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#ecs-optimized-ami-linux-variants.html) in the *Amazon Elastic Container Service Developer Guide* ."},"instanceRole":{"type":"string","description":"The Amazon ECS instance profile applied to Amazon EC2 instances in a compute environment. Required for Amazon EC2 instances. You can specify the short name or full Amazon Resource Name (ARN) of an instance profile. For example, `*ecsInstanceRole*` or `arn:aws:iam:: *\u003caws_account_id\u003e* :instance-profile/ *ecsInstanceRole*` . For more information, see [Amazon ECS instance role](https://docs.aws.amazon.com/batch/latest/userguide/instance_IAM_role.html) in the *AWS Batch User Guide* .\n\nWhen updating a compute environment, changing this setting requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it."},"instanceTypes":{"type":"array","items":{"type":"string"},"description":"The instances types that can be launched. You can specify instance families to launch any instance type within those families (for example, `c5` or `p3` ), or you can specify specific sizes within a family (such as `c5.8xlarge` ).\n\nAWS Batch can select the instance type for you if you choose one of the following:\n\n- `optimal` to select instance types (from the `c4` , `m4` , `r4` , `c5` , `m5` , and `r5` instance families) that match the demand of your job queues.\n- `default_x86_64` to choose x86 based instance types (from the `m6i` , `c6i` , `r6i` , and `c7i` instance families) that matches the resource demands of the job queue.\n- `default_arm64` to choose x86 based instance types (from the `m6g` , `c6g` , `r6g` , and `c7g` instance families) that matches the resource demands of the job queue.\n\n\u003e Starting on 11/01/2025 the behavior of `optimal` is going to be changed to match `default_x86_64` . During the change your instance families could be updated to a newer generation. You do not need to perform any actions for the upgrade to happen. For more information about change, see [Optimal instance type configuration to receive automatic instance family updates](https://docs.aws.amazon.com/batch/latest/userguide/optimal-default-instance-troubleshooting.html) . \u003e Instance family availability varies by AWS Region . For example, some AWS Region s may not have any fourth generation instance families but have fifth and sixth generation instance families.\n\u003e \n\u003e When using `default_x86_64` or `default_arm64` instance bundles, AWS Batch selects instance families based on a balance of cost-effectiveness and performance. While newer generation instances often provide better price-performance, AWS Batch may choose an earlier generation instance family if it provides the optimal combination of availability, cost, and performance for your workload. For example, in an AWS Region where both c6i and c7i instances are available, AWS Batch might select c6i instances if they offer better cost-effectiveness for your specific job requirements. For more information on AWS Batch instance types and AWS Region availability, see [Instance type compute table](https://docs.aws.amazon.com/batch/latest/userguide/instance-type-compute-table.html) in the *AWS Batch User Guide* .\n\u003e \n\u003e AWS Batch periodically updates your instances in default bundles to newer, more cost-effective options. Updates happen automatically without requiring any action from you. Your workloads continue running during updates with no interruption \u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it. \u003e When you create a compute environment, the instance types that you select for the compute environment must share the same architecture. For example, you can't mix x86 and ARM instances in the same compute environment."},"launchTemplate":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentLaunchTemplateSpecification","description":"The launch template to use for your compute resources. Any other compute resource parameters that you specify in a [CreateComputeEnvironment](https://docs.aws.amazon.com/batch/latest/APIReference/API_CreateComputeEnvironment.html) API operation override the same parameters in the launch template. You must specify either the launch template ID or launch template name in the request, but not both. For more information, see [Launch Template Support](https://docs.aws.amazon.com/batch/latest/userguide/launch-templates.html) in the ** . Removing the launch template from a compute environment will not remove the AMI specified in the launch template. In order to update the AMI specified in a launch template, the `updateToLatestImageVersion` parameter must be set to `true` .\n\nWhen updating a compute environment, changing the launch template requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the ** .\n\n\u003e This parameter isn't applicable to jobs running on Fargate resources, and shouldn't be specified."},"maxvCpus":{"type":"integer","description":"The maximum number of Amazon EC2 vCPUs that an environment can reach.\n\n\u003e With `BEST_FIT_PROGRESSIVE` , `SPOT_CAPACITY_OPTIMIZED` and `SPOT_PRICE_CAPACITY_OPTIMIZED` (recommended) strategies using On-Demand or Spot Instances, and the `BEST_FIT` strategy using Spot Instances, AWS Batch might need to exceed `maxvCpus` to meet your capacity requirements. In this event, AWS Batch never exceeds `maxvCpus` by more than a single instance."},"minvCpus":{"type":"integer","description":"The minimum number of vCPUs that an environment should maintain (even if the compute environment is `DISABLED` ).\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it."},"placementGroup":{"type":"string","description":"The Amazon EC2 placement group to associate with your compute resources. If you intend to submit multi-node parallel jobs to your compute environment, you should consider creating a cluster placement group and associate it with your compute resources. This keeps your multi-node parallel job on a logical grouping of instances within a single Availability Zone with high network flow potential. For more information, see [Placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html) in the *Amazon EC2 User Guide for Linux Instances* .\n\nWhen updating a compute environment, changing the placement group requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it."},"scalingPolicy":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentComputeScalingPolicy"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 security groups that are associated with instances launched in the compute environment. This parameter is required for Fargate compute resources, where it can contain up to 5 security groups. For Fargate compute resources, providing an empty list is handled as if this parameter wasn't specified and no change is made. For Amazon EC2 compute resources, providing an empty list removes the security groups from the compute resource.\n\nWhen updating a compute environment, changing the Amazon EC2 security groups requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* ."},"spotIamFleetRole":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon EC2 Spot Fleet IAM role applied to a `SPOT` compute environment. This role is required if the allocation strategy set to `BEST_FIT` or if the allocation strategy isn't specified. For more information, see [Amazon EC2 spot fleet role](https://docs.aws.amazon.com/batch/latest/userguide/spot_fleet_IAM_role.html) in the *AWS Batch User Guide* .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't specify it. \u003e To tag your Spot Instances on creation, the Spot Fleet IAM role specified here must use the newer *AmazonEC2SpotFleetTaggingRole* managed policy. The previously recommended *AmazonEC2SpotFleetRole* managed policy doesn't have the required permissions to tag Spot Instances. For more information, see [Spot instances not tagged on creation](https://docs.aws.amazon.com/batch/latest/userguide/troubleshooting.html#spot-instance-no-tag) in the *AWS Batch User Guide* .","replaceOnChanges":true},"subnets":{"type":"array","items":{"type":"string"},"description":"The VPC subnets where the compute resources are launched. Fargate compute resources can contain up to 16 subnets. For Fargate compute resources, providing an empty list will be handled as if this parameter wasn't specified and no change is made. For Amazon EC2 compute resources, providing an empty list removes the VPC subnets from the compute resource. For more information, see [VPCs and subnets](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html) in the *Amazon VPC User Guide* .\n\nWhen updating a compute environment, changing the VPC subnets requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\n\u003e AWS Batch on Amazon EC2 and AWS Batch on Amazon EKS support Local Zones. For more information, see [Local Zones](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-local-zones) in the *Amazon EC2 User Guide for Linux Instances* , [Amazon EKS and AWS Local Zones](https://docs.aws.amazon.com/eks/latest/userguide/local-zones.html) in the *Amazon EKS User Guide* and [Amazon ECS clusters in Local Zones, Wavelength Zones, and AWS Outposts](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-regions-zones.html#clusters-local-zones) in the *Amazon ECS Developer Guide* .\n\u003e \n\u003e AWS Batch on Fargate doesn't currently support Local Zones."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"type":{"type":"string","description":"The type of compute environment: `EC2` , `SPOT` , `FARGATE` , or `FARGATE_SPOT` . For more information, see [Compute environments](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html) in the *AWS Batch User Guide* .\n\nIf you choose `SPOT` , you must also specify an Amazon EC2 Spot Fleet role with the `spotIamFleetRole` parameter. For more information, see [Amazon EC2 spot fleet role](https://docs.aws.amazon.com/batch/latest/userguide/spot_fleet_IAM_role.html) in the *AWS Batch User Guide* .\n\nWhen updating compute environment, changing the type of a compute environment requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .\n\nWhen updating the type of a compute environment, changing between `EC2` and `SPOT` or between `FARGATE` and `FARGATE_SPOT` will initiate an infrastructure update, but if you switch between `EC2` and `FARGATE` , CloudFormation will create a new compute environment."},"updateToLatestImageVersion":{"type":"boolean","description":"Specifies whether the AMI ID is updated to the latest one that's supported by AWS Batch when the compute environment has an infrastructure update. The default value is `false` .\n\n\u003e An AMI ID can either be specified in the `imageId` or `imageIdOverride` parameters or be determined by the launch template that's specified in the `launchTemplate` parameter. If an AMI ID is specified any of these ways, this parameter is ignored. For more information about to update AMI IDs during an infrastructure update, see [Updating the AMI ID](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html#updating-compute-environments-ami) in the *AWS Batch User Guide* . \n\nWhen updating a compute environment, changing this setting requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* ."}},"type":"object","required":["maxvCpus","subnets","type"]},"aws-native:batch:ComputeEnvironmentComputeScalingPolicy":{"properties":{"minScaleDownDelayMinutes":{"type":"integer"}},"type":"object"},"aws-native:batch:ComputeEnvironmentEc2ConfigurationObject":{"properties":{"imageIdOverride":{"type":"string","description":"The AMI ID used for instances launched in the compute environment that match the image type. This setting overrides the `imageId` set in the `computeResource` object.\n\n\u003e The AMI that you choose for a compute environment must match the architecture of the instance types that you intend to use for that compute environment. For example, if your compute environment uses A1 instance types, the compute resource AMI that you choose must support ARM instances. Amazon ECS vends both x86 and ARM versions of the Amazon ECS-optimized Amazon Linux 2 AMI. For more information, see [Amazon ECS-optimized Amazon Linux 2 AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#ecs-optimized-ami-linux-variants.html) in the *Amazon Elastic Container Service Developer Guide* ."},"imageKubernetesVersion":{"type":"string","description":"The Kubernetes version for the compute environment. If you don't specify a value, the latest version that AWS Batch supports is used."},"imageType":{"type":"string","description":"The image type to match with the instance type to select an AMI. The supported values are different for `ECS` and `EKS` resources.\n\n- **ECS** - If the `imageIdOverride` parameter isn't specified, then a recent [Amazon ECS-optimized Amazon Linux 2 AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#al2ami) ( `ECS_AL2` ) is used. If a new image type is specified in an update, but neither an `imageId` nor a `imageIdOverride` parameter is specified, then the latest Amazon ECS optimized AMI for that image type that's supported by AWS Batch is used.\n\n\u003e AWS will end support for Amazon ECS optimized AL2-optimized and AL2-accelerated AMIs. Starting in January 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. For more information on upgrading from AL2 to AL2023, see [How to migrate from ECS AL2 to ECS AL2023](https://docs.aws.amazon.com/batch/latest/userguide/ecs-migration-2023.html) in the *AWS Batch User Guide* . \n\n- **ECS_AL2** - [Amazon Linux 2](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#al2ami) : Default for all non-GPU instance families.\n- **ECS_AL2_NVIDIA** - [Amazon Linux 2 (GPU)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#gpuami) : Default for all GPU instance families (for example `P4` and `G4` ) and can be used for all non AWS Graviton-based instance types.\n- **ECS_AL2023** - [Amazon Linux 2023](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) : AWS Batch supports Amazon Linux 2023.\n\n\u003e Amazon Linux 2023 does not support `A1` instances.\n- **ECS_AL2023_NVIDIA** - [Amazon Linux 2023 (GPU)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#gpuami) : For all GPU instance families and can be used for all non AWS Graviton-based instance types.\n\n\u003e ECS_AL2023_NVIDIA doesn't support `p3` and `g3` instance types.\n- **EKS** - If the `imageIdOverride` parameter isn't specified, then a recent [Amazon EKS-optimized Amazon Linux 2023 AMI](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) ( `EKS_AL2023` ) is used. If a new image type is specified in an update, but neither an `imageId` nor a `imageIdOverride` parameter is specified, then the latest Amazon EKS optimized AMI for that image type that AWS Batch supports is used.\n\n\u003e Amazon Linux 2023 AMIs are the default on AWS Batch for Amazon EKS.\n\u003e \n\u003e AWS will end support for Amazon EKS AL2-optimized and AL2-accelerated AMIs, starting 11/26/25. You can continue using AWS Batch -provided Amazon EKS optimized Amazon Linux 2 AMIs on your Amazon EKS compute environments beyond the 11/26/25 end-of-support date, these compute environments will no longer receive any new software updates, security patches, or bug fixes from AWS . For more information on upgrading from AL2 to AL2023, see [How to upgrade from EKS AL2 to EKS AL2023](https://docs.aws.amazon.com/batch/latest/userguide/eks-migration-2023.html) in the *AWS Batch User Guide* . \n\n- **EKS_AL2** - [Amazon Linux 2](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Used for non-GPU instance families.\n- **EKS_AL2_NVIDIA** - [Amazon Linux 2 (accelerated)](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Used for GPU instance families (for example, `P4` and `G4` ) and can be used for all non AWS Graviton-based instance types.\n- **EKS_AL2023** - [Amazon Linux 2023](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Default for non-GPU instance families.\n\n\u003e Amazon Linux 2023 does not support `A1` instances.\n- **EKS_AL2023_NVIDIA** - [Amazon Linux 2023 (accelerated)](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Default for GPU instance families and can be used for all non AWS Graviton-based instance types."}},"type":"object","required":["imageType"]},"aws-native:batch:ComputeEnvironmentEksConfiguration":{"properties":{"eksClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon EKS cluster. An example is `arn: *aws* :eks: *us-east-1* : *123456789012* :cluster/ *ClusterForBatch*` ."},"kubernetesNamespace":{"type":"string","description":"The namespace of the Amazon EKS cluster. AWS Batch manages pods in this namespace. The value can't left empty or null. It must be fewer than 64 characters long, can't be set to `default` , can't start with \" `kube-` ,\" and must match this regular expression: `^[a-z0-9]([-a-z0-9]*[a-z0-9])?$` . For more information, see [Namespaces](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/) in the Kubernetes documentation."}},"type":"object","required":["eksClusterArn","kubernetesNamespace"]},"aws-native:batch:ComputeEnvironmentLaunchTemplateSpecification":{"properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template."},"launchTemplateName":{"type":"string","description":"The name of the launch template."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentLaunchTemplateSpecificationOverride"},"description":"A launch template to use in place of the default launch template. You must specify either the launch template ID or launch template name in the request, but not both.\n\nYou can specify up to ten (10) launch template overrides that are associated to unique instance types or families for each compute environment.\n\n\u003e To unset all override templates for a compute environment, you can pass an empty array to the [UpdateComputeEnvironment.overrides](https://docs.aws.amazon.com/batch/latest/APIReference/API_UpdateComputeEnvironment.html) parameter, or not include the `overrides` parameter when submitting the `UpdateComputeEnvironment` API operation."},"userdataType":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentLaunchTemplateSpecificationUserdataType","description":"The EKS node initialization process to use. You only need to specify this value if you are using a custom AMI. The default value is `EKS_BOOTSTRAP_SH` . If *imageType* is a custom AMI based on EKS_AL2023 or EKS_AL2023_NVIDIA then you must choose `EKS_NODEADM` ."},"version":{"type":"string","description":"The version number of the launch template, `$Default` , or `$Latest` .\n\nIf the value is `$Default` , the default version of the launch template is used. If the value is `$Latest` , the latest version of the launch template is used.\n\n\u003e If the AMI ID that's used in a compute environment is from the launch template, the AMI isn't changed when the compute environment is updated. It's only changed if the `updateToLatestImageVersion` parameter for the compute environment is set to `true` . During an infrastructure update, if either `$Default` or `$Latest` is specified, AWS Batch re-evaluates the launch template version, and it might use a different version of the launch template. This is the case even if the launch template isn't specified in the update. When updating a compute environment, changing the launch template requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* . \n\nDefault: `$Default`\n\nLatest: `$Latest`"}},"type":"object"},"aws-native:batch:ComputeEnvironmentLaunchTemplateSpecificationOverride":{"properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template.\n\n*Note:* If you specify the `launchTemplateId` you can't specify the `launchTemplateName` as well."},"launchTemplateName":{"type":"string","description":"The name of the launch template.\n\n*Note:* If you specify the `launchTemplateName` you can't specify the `launchTemplateId` as well."},"targetInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance type or family that this override launch template should be applied to.\n\nThis parameter is required when defining a launch template override.\n\nInformation included in this parameter must meet the following requirements:\n\n- Must be a valid Amazon EC2 instance type or family.\n- The following AWS Batch `InstanceTypes` are not allowed: `optimal` , `default_x86_64` , and `default_arm64` .\n- `targetInstanceTypes` can target only instance types and families that are included within the [`ComputeResource.instanceTypes`](https://docs.aws.amazon.com/batch/latest/APIReference/API_ComputeResource.html#Batch-Type-ComputeResource-instanceTypes) set. `targetInstanceTypes` doesn't need to include all of the instances from the `instanceType` set, but at least a subset. For example, if `ComputeResource.instanceTypes` includes `[m5, g5]` , `targetInstanceTypes` can include `[m5.2xlarge]` and `[m5.large]` but not `[c5.large]` .\n- `targetInstanceTypes` included within the same launch template override or across launch template overrides can't overlap for the same compute environment. For example, you can't define one launch template override to target an instance family and another define an instance type within this same family."},"userdataType":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentLaunchTemplateSpecificationOverrideUserdataType","description":"The EKS node initialization process to use. You only need to specify this value if you are using a custom AMI. The default value is `EKS_BOOTSTRAP_SH` . If *imageType* is a custom AMI based on EKS_AL2023 or EKS_AL2023_NVIDIA then you must choose `EKS_NODEADM` ."},"version":{"type":"string","description":"The version number of the launch template, `$Default` , or `$Latest` .\n\nIf the value is `$Default` , the default version of the launch template is used. If the value is `$Latest` , the latest version of the launch template is used.\n\n\u003e If the AMI ID that's used in a compute environment is from the launch template, the AMI isn't changed when the compute environment is updated. It's only changed if the `updateToLatestImageVersion` parameter for the compute environment is set to `true` . During an infrastructure update, if either `$Default` or `$Latest` is specified, AWS Batch re-evaluates the launch template version, and it might use a different version of the launch template. This is the case even if the launch template isn't specified in the update. When updating a compute environment, changing the launch template requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* . \n\nDefault: `$Default`\n\nLatest: `$Latest`"}},"type":"object"},"aws-native:batch:ComputeEnvironmentLaunchTemplateSpecificationOverrideUserdataType":{"description":"The EKS node initialization process to use. You only need to specify this value if you are using a custom AMI. The default value is `EKS_BOOTSTRAP_SH` . If *imageType* is a custom AMI based on EKS_AL2023 or EKS_AL2023_NVIDIA then you must choose `EKS_NODEADM` .","type":"string","enum":[{"name":"EksBootstrapSh","value":"EKS_BOOTSTRAP_SH"},{"name":"EksNodeadm","value":"EKS_NODEADM"}]},"aws-native:batch:ComputeEnvironmentLaunchTemplateSpecificationUserdataType":{"description":"The EKS node initialization process to use. You only need to specify this value if you are using a custom AMI. The default value is `EKS_BOOTSTRAP_SH` . If *imageType* is a custom AMI based on EKS_AL2023 or EKS_AL2023_NVIDIA then you must choose `EKS_NODEADM` .","type":"string","enum":[{"name":"EksBootstrapSh","value":"EKS_BOOTSTRAP_SH"},{"name":"EksNodeadm","value":"EKS_NODEADM"}]},"aws-native:batch:ComputeEnvironmentUpdatePolicy":{"properties":{"jobExecutionTimeoutMinutes":{"type":"integer","description":"Specifies the job timeout (in minutes) when the compute environment infrastructure is updated. The default value is 30."},"terminateJobsOnUpdate":{"type":"boolean","description":"Specifies whether jobs are automatically terminated when the compute environment infrastructure is updated. The default value is `false` ."}},"type":"object"},"aws-native:batch:ConsumableResourceResourceType":{"description":"Type of Consumable Resource.","type":"string","enum":[{"name":"Replenishable","value":"REPLENISHABLE"},{"name":"NonReplenishable","value":"NON_REPLENISHABLE"}]},"aws-native:batch:JobDefinitionConsumableResourceProperties":{"properties":{"consumableResourceList":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionConsumableResourceRequirement"},"description":"The list of consumable resources required by a job."}},"type":"object","required":["consumableResourceList"]},"aws-native:batch:JobDefinitionConsumableResourceRequirement":{"properties":{"consumableResource":{"type":"string","description":"The ARN of the consumable resource the job definition should consume."},"quantity":{"type":"integer","description":"The quantity of the consumable resource that is needed."}},"type":"object","required":["consumableResource","quantity"]},"aws-native:batch:JobDefinitionContainerProperties":{"properties":{"command":{"type":"array","items":{"type":"string"},"description":"The command that's passed to the container. This parameter maps to `Cmd` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `COMMAND` parameter to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . For more information, see [https://docs.docker.com/engine/reference/builder/#cmd](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/builder/#cmd) ."},"enableExecuteCommand":{"type":"boolean","description":"Determines whether execute command functionality is turned on for this task. If `true` , execute command functionality is turned on all the containers in the task."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEnvironment"},"description":"The environment variables to pass to a container. This parameter maps to `Env` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--env` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e We don't recommend using plaintext environment variables for sensitive information, such as credential data. \u003e Environment variables cannot start with \" `AWS_BATCH` \". This naming convention is reserved for variables that AWS Batch sets."},"ephemeralStorage":{"$ref":"#/types/aws-native:batch:JobDefinitionEphemeralStorage","description":"The amount of ephemeral storage to allocate for the task. This parameter is used to expand the total amount of ephemeral storage available, beyond the default amount, for tasks hosted on AWS Fargate ."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the execution role that AWS Batch can assume. For jobs that run on Fargate resources, you must provide an execution role. For more information, see [AWS Batch execution IAM role](https://docs.aws.amazon.com/batch/latest/userguide/execution-IAM-role.html) in the *AWS Batch User Guide* ."},"fargatePlatformConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionContainerPropertiesFargatePlatformConfigurationProperties","description":"The platform configuration for jobs that are running on Fargate resources. Jobs that are running on Amazon EC2 resources must not specify this parameter."},"image":{"type":"string","description":"Required. The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with `*repository-url* / *image* : *tag*` . It can be 255 characters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), underscores (_), colons (:), periods (.), forward slashes (/), and number signs (#). This parameter maps to `Image` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `IMAGE` parameter of [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e Docker image architecture must match the processor architecture of the compute resources that they're scheduled on. For example, ARM-based Docker images can only run on ARM-based compute resources. \n\n- Images in Amazon ECR Public repositories use the full `registry/repository[:tag]` or `registry/repository[@digest]` naming conventions. For example, `public.ecr.aws/ *registry_alias* / *my-web-app* : *latest*` .\n- Images in Amazon ECR repositories use the full registry and repository URI (for example, `123456789012.dkr.ecr.\u003cregion-name\u003e.amazonaws.com/\u003crepository-name\u003e` ).\n- Images in official repositories on Docker Hub use a single name (for example, `ubuntu` or `mongo` ).\n- Images in other repositories on Docker Hub are qualified with an organization name (for example, `amazon/amazon-ecs-agent` ).\n- Images in other online repositories are qualified further by a domain name (for example, `quay.io/assemblyline/ubuntu` )."},"jobRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the container can assume for AWS permissions. For more information, see [IAM roles for tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide* ."},"linuxParameters":{"$ref":"#/types/aws-native:batch:JobDefinitionLinuxParameters","description":"Linux-specific modifications that are applied to the container, such as details for device mappings."},"logConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionLogConfiguration","description":"The log configuration specification for the container.\n\nThis parameter maps to `LogConfig` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--log-driver` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . By default, containers use the same logging driver that the Docker daemon uses. However the container might use a different logging driver than the Docker daemon by specifying a log driver with this parameter in the container definition. To use a different logging driver for a container, the log system must be configured properly on the container instance (or on a different log server for remote logging options). For more information on the options for different supported log drivers, see [Configure logging drivers](https://docs.aws.amazon.com/https://docs.docker.com/engine/admin/logging/overview/) in the Docker documentation.\n\n\u003e AWS Batch currently supports a subset of the logging drivers available to the Docker daemon (shown in the [LogConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties-logconfiguration.html) data type). \n\nThis parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: `sudo docker version | grep \"Server API version\"`\n\n\u003e The Amazon ECS container agent running on a container instance must register the logging drivers available on that instance with the `ECS_AVAILABLE_LOGGING_DRIVERS` environment variable before containers placed on that instance can use these log configuration options. For more information, see [Amazon ECS container agent configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Amazon Elastic Container Service Developer Guide* ."},"memory":{"type":"integer","description":"This parameter is deprecated, use `resourceRequirements` to specify the memory requirements for the job definition. It's not supported for jobs running on Fargate resources. For jobs that run on Amazon EC2 resources, it specifies the memory hard limit (in MiB) for a container. If your container attempts to exceed the specified number, it's terminated. You must specify at least 4 MiB of memory for a job using this parameter. The memory hard limit can be specified in several places. It must be specified for each node at least once."},"mountPoints":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionMountPoint"},"description":"The mount points for data volumes in your container. This parameter maps to `Volumes` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--volume` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) ."},"networkConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionNetworkConfiguration","description":"The network configuration for jobs that are running on Fargate resources. Jobs that are running on Amazon EC2 resources must not specify this parameter."},"privileged":{"type":"boolean","description":"When this parameter is true, the container is given elevated permissions on the host container instance (similar to the `root` user). This parameter maps to `Privileged` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--privileged` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . The default value is false.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources and shouldn't be provided, or specified as false."},"readonlyRootFilesystem":{"type":"boolean","description":"When this parameter is true, the container is given read-only access to its root file system. This parameter maps to `ReadonlyRootfs` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--read-only` option to `docker run` ."},"repositoryCredentials":{"$ref":"#/types/aws-native:batch:JobDefinitionRepositoryCredentials","description":"The private repository authentication credentials to use."},"resourceRequirements":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionResourceRequirement"},"description":"The type and amount of resources to assign to a container. The supported resources include `GPU` , `MEMORY` , and `VCPU` ."},"runtimePlatform":{"$ref":"#/types/aws-native:batch:JobDefinitionRuntimePlatform","description":"An object that represents the compute environment architecture for AWS Batch jobs on Fargate."},"secrets":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionSecret"},"description":"The secrets for the container. For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/batch/latest/userguide/specifying-sensitive-data.html) in the *AWS Batch User Guide* ."},"ulimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionUlimit"},"description":"A list of `ulimits` to set in the container. This parameter maps to `Ulimits` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--ulimit` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources and shouldn't be provided."},"user":{"type":"string","description":"The user name to use inside the container. This parameter maps to `User` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--user` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) ."},"vcpus":{"type":"integer","description":"This parameter is deprecated, use `resourceRequirements` to specify the vCPU requirements for the job definition. It's not supported for jobs running on Fargate resources. For jobs running on Amazon EC2 resources, it specifies the number of vCPUs reserved for the job.\n\nEach vCPU is equivalent to 1,024 CPU shares. This parameter maps to `CpuShares` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--cpu-shares` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . The number of vCPUs must be specified but can be specified in several places. You must specify it at least once for each node."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionVolume"},"description":"A list of data volumes used in a job."}},"type":"object","required":["image"]},"aws-native:batch:JobDefinitionContainerPropertiesFargatePlatformConfigurationProperties":{"description":"The platform configuration for jobs that are running on Fargate resources. Jobs that are running on Amazon EC2 resources must not specify this parameter.","properties":{"platformVersion":{"type":"string"}},"type":"object"},"aws-native:batch:JobDefinitionDevice":{"properties":{"containerPath":{"type":"string","description":"The path inside the container that's used to expose the host device. By default, the `hostPath` value is used."},"hostPath":{"type":"string","description":"The path for the device on the host container instance."},"permissions":{"type":"array","items":{"type":"string"},"description":"The explicit permissions to provide to the container for the device. By default, the container has permissions for `read` , `write` , and `mknod` for the device."}},"type":"object"},"aws-native:batch:JobDefinitionEcsProperties":{"properties":{"taskProperties":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEcsTaskProperties"},"description":"An object that contains the properties for the Amazon ECS task definition of a job.\n\n\u003e This object is currently limited to one task element. However, the task element can run up to 10 containers."}},"type":"object","required":["taskProperties"]},"aws-native:batch:JobDefinitionEcsTaskProperties":{"properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionTaskContainerProperties"},"description":"This object is a list of containers."},"enableExecuteCommand":{"type":"boolean","description":"Determines whether execute command functionality is turned on for this task. If `true` , execute command functionality is turned on all the containers in the task."},"ephemeralStorage":{"$ref":"#/types/aws-native:batch:JobDefinitionEphemeralStorage","description":"The amount of ephemeral storage to allocate for the task. This parameter is used to expand the total amount of ephemeral storage available, beyond the default amount, for tasks hosted on AWS Fargate ."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the execution role that AWS Batch can assume. For jobs that run on Fargate resources, you must provide an execution role. For more information, see [AWS Batch execution IAM role](https://docs.aws.amazon.com/batch/latest/userguide/execution-IAM-role.html) in the *AWS Batch User Guide* ."},"ipcMode":{"type":"string","description":"The IPC resource namespace to use for the containers in the task. The valid values are `host` , `task` , or `none` .\n\nIf `host` is specified, all containers within the tasks that specified the `host` IPC mode on the same container instance share the same IPC resources with the host Amazon EC2 instance.\n\nIf `task` is specified, all containers within the specified `task` share the same IPC resources.\n\nIf `none` is specified, the IPC resources within the containers of a task are private, and are not shared with other containers in a task or on the container instance.\n\nIf no value is specified, then the IPC resource namespace sharing depends on the Docker daemon setting on the container instance. For more information, see [IPC settings](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#ipc-settings---ipc) in the Docker run reference."},"networkConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionNetworkConfiguration","description":"The network configuration for jobs that are running on Fargate resources. Jobs that are running on Amazon EC2 resources must not specify this parameter."},"pidMode":{"type":"string","description":"The process namespace to use for the containers in the task. The valid values are `host` or `task` . For example, monitoring sidecars might need `pidMode` to access information about other containers running in the same task.\n\nIf `host` is specified, all containers within the tasks that specified the `host` PID mode on the same container instance share the process namespace with the host Amazon EC2 instance.\n\nIf `task` is specified, all containers within the specified task share the same process namespace.\n\nIf no value is specified, the default is a private namespace for each container. For more information, see [PID settings](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#pid-settings---pid) in the Docker run reference."},"platformVersion":{"type":"string","description":"The Fargate platform version where the jobs are running. A platform version is specified only for jobs that are running on Fargate resources. If one isn't specified, the `LATEST` platform version is used by default. This uses a recent, approved version of the Fargate platform for compute resources. For more information, see [AWS Fargate platform versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html) in the *Amazon Elastic Container Service Developer Guide* ."},"runtimePlatform":{"$ref":"#/types/aws-native:batch:JobDefinitionRuntimePlatform","description":"An object that represents the compute environment architecture for AWS Batch jobs on Fargate."},"taskRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) that's associated with the Amazon ECS task.\n\n\u003e This is object is comparable to [ContainerProperties:jobRoleArn](https://docs.aws.amazon.com/batch/latest/APIReference/API_ContainerProperties.html) ."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionVolume"},"description":"A list of volumes that are associated with the job."}},"type":"object"},"aws-native:batch:JobDefinitionEfsAuthorizationConfig":{"properties":{"accessPointId":{"type":"string","description":"The Amazon EFS access point ID to use. If an access point is specified, the root directory value specified in the `EFSVolumeConfiguration` must either be omitted or set to `/` which enforces the path set on the EFS access point. If an access point is used, transit encryption must be enabled in the `EFSVolumeConfiguration` . For more information, see [Working with Amazon EFS access points](https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html) in the *Amazon Elastic File System User Guide* ."},"iam":{"type":"string","description":"Whether or not to use the AWS Batch job IAM role defined in a job definition when mounting the Amazon EFS file system. If enabled, transit encryption must be enabled in the `EFSVolumeConfiguration` . If this parameter is omitted, the default value of `DISABLED` is used. For more information, see [Using Amazon EFS access points](https://docs.aws.amazon.com/batch/latest/userguide/efs-volumes.html#efs-volume-accesspoints) in the *AWS Batch User Guide* . EFS IAM authorization requires that `TransitEncryption` be `ENABLED` and that a `JobRoleArn` is specified."}},"type":"object"},"aws-native:batch:JobDefinitionEfsVolumeConfiguration":{"properties":{"authorizationConfig":{"$ref":"#/types/aws-native:batch:JobDefinitionEfsAuthorizationConfig","description":"The authorization configuration details for the Amazon EFS file system."},"fileSystemId":{"type":"string","description":"The Amazon EFS file system ID to use."},"rootDirectory":{"type":"string","description":"The directory within the Amazon EFS file system to mount as the root directory inside the host. If this parameter is omitted, the root of the Amazon EFS volume is used instead. Specifying `/` has the same effect as omitting this parameter. The maximum length is 4,096 characters.\n\n\u003e If an EFS access point is specified in the `authorizationConfig` , the root directory parameter must either be omitted or set to `/` , which enforces the path set on the Amazon EFS access point."},"transitEncryption":{"type":"string","description":"Determines whether to enable encryption for Amazon EFS data in transit between the Amazon ECS host and the Amazon EFS server. Transit encryption must be enabled if Amazon EFS IAM authorization is used. If this parameter is omitted, the default value of `DISABLED` is used. For more information, see [Encrypting data in transit](https://docs.aws.amazon.com/efs/latest/ug/encryption-in-transit.html) in the *Amazon Elastic File System User Guide* ."},"transitEncryptionPort":{"type":"integer","description":"The port to use when sending encrypted data between the Amazon ECS host and the Amazon EFS server. If you don't specify a transit encryption port, it uses the port selection strategy that the Amazon EFS mount helper uses. The value must be between 0 and 65,535. For more information, see [EFS mount helper](https://docs.aws.amazon.com/efs/latest/ug/efs-mount-helper.html) in the *Amazon Elastic File System User Guide* ."}},"type":"object","required":["fileSystemId"]},"aws-native:batch:JobDefinitionEksContainer":{"properties":{"args":{"type":"array","items":{"type":"string"},"description":"An array of arguments to the entrypoint. If this isn't specified, the `CMD` of the container image is used. This corresponds to the `args` member in the [Entrypoint](https://docs.aws.amazon.com/https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#entrypoint) portion of the [Pod](https://docs.aws.amazon.com/https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/) in Kubernetes. Environment variable references are expanded using the container's environment.\n\nIf the referenced environment variable doesn't exist, the reference in the command isn't changed. For example, if the reference is to \" `$(NAME1)` \" and the `NAME1` environment variable doesn't exist, the command string will remain \" `$(NAME1)` .\" `$$` is replaced with `$` , and the resulting string isn't expanded. For example, `$$(VAR_NAME)` is passed as `$(VAR_NAME)` whether or not the `VAR_NAME` environment variable exists. For more information, see [Dockerfile reference: CMD](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/builder/#cmd) and [Define a command and arguments for a pod](https://docs.aws.amazon.com/https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/) in the *Kubernetes documentation* ."},"command":{"type":"array","items":{"type":"string"},"description":"The entrypoint for the container. This isn't run within a shell. If this isn't specified, the `ENTRYPOINT` of the container image is used. Environment variable references are expanded using the container's environment.\n\nIf the referenced environment variable doesn't exist, the reference in the command isn't changed. For example, if the reference is to \" `$(NAME1)` \" and the `NAME1` environment variable doesn't exist, the command string will remain \" `$(NAME1)` .\" `$$` is replaced with `$` and the resulting string isn't expanded. For example, `$$(VAR_NAME)` will be passed as `$(VAR_NAME)` whether or not the `VAR_NAME` environment variable exists. The entrypoint can't be updated. For more information, see [ENTRYPOINT](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/builder/#entrypoint) in the *Dockerfile reference* and [Define a command and arguments for a container](https://docs.aws.amazon.com/https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/) and [Entrypoint](https://docs.aws.amazon.com/https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#entrypoint) in the *Kubernetes documentation* ."},"env":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEksContainerEnvironmentVariable"},"description":"The environment variables to pass to a container.\n\n\u003e Environment variables cannot start with \" `AWS_BATCH` \". This naming convention is reserved for variables that AWS Batch sets."},"image":{"type":"string","description":"The Docker image used to start the container."},"imagePullPolicy":{"type":"string","description":"The image pull policy for the container. Supported values are `Always` , `IfNotPresent` , and `Never` . This parameter defaults to `IfNotPresent` . However, if the `:latest` tag is specified, it defaults to `Always` . For more information, see [Updating images](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/containers/images/#updating-images) in the *Kubernetes documentation* ."},"name":{"type":"string","description":"The name of the container. If the name isn't specified, the default name \" `Default` \" is used. Each container in a pod must have a unique name."},"resources":{"$ref":"#/types/aws-native:batch:JobDefinitionEksContainerResourceRequirements","description":"The type and amount of resources to assign to a container. The supported resources include `memory` , `cpu` , and `nvidia.com/gpu` . For more information, see [Resource management for pods and containers](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/) in the *Kubernetes documentation* ."},"securityContext":{"$ref":"#/types/aws-native:batch:JobDefinitionEksContainerSecurityContext","description":"The security context for a job. For more information, see [Configure a security context for a pod or container](https://docs.aws.amazon.com/https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) in the *Kubernetes documentation* ."},"volumeMounts":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEksContainerVolumeMount"},"description":"The volume mounts for the container. AWS Batch supports `emptyDir` , `hostPath` , and `secret` volume types. For more information about volumes and volume mounts in Kubernetes, see [Volumes](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/volumes/) in the *Kubernetes documentation* ."}},"type":"object","required":["image"]},"aws-native:batch:JobDefinitionEksContainerEnvironmentVariable":{"properties":{"name":{"type":"string","description":"The name of the environment variable."},"value":{"type":"string","description":"The value of the environment variable."}},"type":"object","required":["name"]},"aws-native:batch:JobDefinitionEksContainerResourceRequirements":{"properties":{"limits":{"type":"object","additionalProperties":{"type":"string"},"description":"The type and quantity of the resources to reserve for the container. The values vary based on the `name` that's specified. Resources can be requested using either the `limits` or the `requests` objects.\n\n- **memory** - The memory hard limit (in MiB) for the container, using whole integers, with a \"Mi\" suffix. If your container attempts to exceed the memory specified, the container is terminated. You must specify at least 4 MiB of memory for a job. `memory` can be specified in `limits` , `requests` , or both. If `memory` is specified in both places, then the value that's specified in `limits` must be equal to the value that's specified in `requests` .\n\n\u003e To maximize your resource utilization, provide your jobs with as much memory as possible for the specific instance type that you are using. To learn how, see [Memory management](https://docs.aws.amazon.com/batch/latest/userguide/memory-management.html) in the *AWS Batch User Guide* .\n- **cpu** - The number of CPUs that's reserved for the container. Values must be an even multiple of `0.25` . `cpu` can be specified in `limits` , `requests` , or both. If `cpu` is specified in both places, then the value that's specified in `limits` must be at least as large as the value that's specified in `requests` .\n- **nvidia.com/gpu** - The number of GPUs that's reserved for the container. Values must be a whole integer. `memory` can be specified in `limits` , `requests` , or both. If `memory` is specified in both places, then the value that's specified in `limits` must be equal to the value that's specified in `requests` ."},"requests":{"type":"object","additionalProperties":{"type":"string"},"description":"The type and quantity of the resources to request for the container. The values vary based on the `name` that's specified. Resources can be requested by using either the `limits` or the `requests` objects.\n\n- **memory** - The memory hard limit (in MiB) for the container, using whole integers, with a \"Mi\" suffix. If your container attempts to exceed the memory specified, the container is terminated. You must specify at least 4 MiB of memory for a job. `memory` can be specified in `limits` , `requests` , or both. If `memory` is specified in both, then the value that's specified in `limits` must be equal to the value that's specified in `requests` .\n\n\u003e If you're trying to maximize your resource utilization by providing your jobs as much memory as possible for a particular instance type, see [Memory management](https://docs.aws.amazon.com/batch/latest/userguide/memory-management.html) in the *AWS Batch User Guide* .\n- **cpu** - The number of CPUs that are reserved for the container. Values must be an even multiple of `0.25` . `cpu` can be specified in `limits` , `requests` , or both. If `cpu` is specified in both, then the value that's specified in `limits` must be at least as large as the value that's specified in `requests` .\n- **nvidia.com/gpu** - The number of GPUs that are reserved for the container. Values must be a whole integer. `nvidia.com/gpu` can be specified in `limits` , `requests` , or both. If `nvidia.com/gpu` is specified in both, then the value that's specified in `limits` must be equal to the value that's specified in `requests` ."}},"type":"object"},"aws-native:batch:JobDefinitionEksContainerSecurityContext":{"properties":{"allowPrivilegeEscalation":{"type":"boolean","description":"Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is `false` ."},"privileged":{"type":"boolean","description":"When this parameter is `true` , the container is given elevated permissions on the host container instance. The level of permissions are similar to the `root` user permissions. The default value is `false` . This parameter maps to `privileged` policy in the [Privileged pod security policies](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#privileged) in the *Kubernetes documentation* ."},"readOnlyRootFilesystem":{"type":"boolean","description":"When this parameter is `true` , the container is given read-only access to its root file system. The default value is `false` . This parameter maps to `ReadOnlyRootFilesystem` policy in the [Volumes and file systems pod security policies](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#volumes-and-file-systems) in the *Kubernetes documentation* ."},"runAsGroup":{"type":"integer","description":"When this parameter is specified, the container is run as the specified group ID ( `gid` ). If this parameter isn't specified, the default is the group that's specified in the image metadata. This parameter maps to `RunAsGroup` and `MustRunAs` policy in the [Users and groups pod security policies](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups) in the *Kubernetes documentation* ."},"runAsNonRoot":{"type":"boolean","description":"When this parameter is specified, the container is run as a user with a `uid` other than 0. If this parameter isn't specified, so such rule is enforced. This parameter maps to `RunAsUser` and `MustRunAsNonRoot` policy in the [Users and groups pod security policies](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups) in the *Kubernetes documentation* ."},"runAsUser":{"type":"integer","description":"When this parameter is specified, the container is run as the specified user ID ( `uid` ). If this parameter isn't specified, the default is the user that's specified in the image metadata. This parameter maps to `RunAsUser` and `MustRanAs` policy in the [Users and groups pod security policies](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups) in the *Kubernetes documentation* ."}},"type":"object"},"aws-native:batch:JobDefinitionEksContainerVolumeMount":{"properties":{"mountPath":{"type":"string","description":"The path on the container where the volume is mounted."},"name":{"type":"string","description":"The name the volume mount. This must match the name of one of the volumes in the pod."},"readOnly":{"type":"boolean","description":"If this value is `true` , the container has read-only access to the volume. Otherwise, the container can write to the volume. The default value is `false` ."},"subPath":{"type":"string","description":"A sub-path inside the referenced volume instead of its root."}},"type":"object"},"aws-native:batch:JobDefinitionEksEmptyDir":{"properties":{"medium":{"type":"string","description":"The medium to store the volume. The default value is an empty string, which uses the storage of the node.\n\n- **\"\"** - *(Default)* Use the disk storage of the node.\n- **\"Memory\"** - Use the `tmpfs` volume that's backed by the RAM of the node. Contents of the volume are lost when the node reboots, and any storage on the volume counts against the container's memory limit."},"sizeLimit":{"type":"string","description":"The maximum size of the volume. By default, there's no maximum size defined."}},"type":"object"},"aws-native:batch:JobDefinitionEksHostPath":{"properties":{"path":{"type":"string","description":"The path of the file or directory on the host to mount into containers on the pod."}},"type":"object"},"aws-native:batch:JobDefinitionEksMetadata":{"properties":{"annotations":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs used to attach arbitrary, non-identifying metadata to Kubernetes objects. Valid annotation keys have two segments: an optional prefix and a name, separated by a slash (/).\n\n- The prefix is optional and must be 253 characters or less. If specified, the prefix must be a DNS subdomain− a series of DNS labels separated by dots (.), and it must end with a slash (/).\n- The name segment is required and must be 63 characters or less. It can include alphanumeric characters ([a-z0-9A-Z]), dashes (-), underscores (_), and dots (.), but must begin and end with an alphanumeric character.\n\n\u003e Annotation values must be 255 characters or less. \n\nAnnotations can be added or modified at any time. Each resource can have multiple annotations."},"labels":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs used to identify, sort, and organize cube resources. Can contain up to 63 uppercase letters, lowercase letters, numbers, hyphens (-), and underscores (_). Labels can be added or modified at any time. Each resource can have multiple labels, but each key must be unique for a given object."},"namespace":{"type":"string","description":"The namespace of the Amazon EKS cluster. In Kubernetes, namespaces provide a mechanism for isolating groups of resources within a single cluster. Names of resources need to be unique within a namespace, but not across namespaces. AWS Batch places Batch Job pods in this namespace. If this field is provided, the value can't be empty or null. It must meet the following requirements:\n\n- 1-63 characters long\n- Can't be set to default\n- Can't start with `kube`\n- Must match the following regular expression: `^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`\n\nFor more information, see [Namespaces](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/) in the *Kubernetes documentation* . This namespace can be different from the `kubernetesNamespace` set in the compute environment's `EksConfiguration` , but must have identical role-based access control (RBAC) roles as the compute environment's `kubernetesNamespace` . For multi-node parallel jobs, the same value must be provided across all the node ranges."}},"type":"object"},"aws-native:batch:JobDefinitionEksPersistentVolumeClaim":{"properties":{"claimName":{"type":"string","description":"The name of the `persistentVolumeClaim` bounded to a `persistentVolume` . For more information, see [Persistent Volume Claims](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims) in the *Kubernetes documentation* ."},"readOnly":{"type":"boolean","description":"An optional boolean value indicating if the mount is read only. Default is false. For more information, see [Read Only Mounts](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/volumes/#read-only-mounts) in the *Kubernetes documentation* ."}},"type":"object","required":["claimName"]},"aws-native:batch:JobDefinitionEksPodProperties":{"properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEksContainer"},"description":"The properties of the container that's used on the Amazon EKS pod.\n\n\u003e This object is limited to 10 elements."},"dnsPolicy":{"type":"string","description":"The DNS policy for the pod. The default value is `ClusterFirst` . If the `hostNetwork` parameter is not specified, the default is `ClusterFirstWithHostNet` . `ClusterFirst` indicates that any DNS query that does not match the configured cluster domain suffix is forwarded to the upstream nameserver inherited from the node. For more information, see [Pod's DNS policy](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy) in the *Kubernetes documentation* .\n\nValid values: `Default` | `ClusterFirst` | `ClusterFirstWithHostNet`"},"hostNetwork":{"type":"boolean","description":"Indicates if the pod uses the hosts' network IP address. The default value is `true` . Setting this to `false` enables the Kubernetes pod networking model. Most AWS Batch workloads are egress-only and don't require the overhead of IP allocation for each pod for incoming connections. For more information, see [Host namespaces](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/security/pod-security-policy/#host-namespaces) and [Pod networking](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/workloads/pods/#pod-networking) in the *Kubernetes documentation* ."},"imagePullSecrets":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionImagePullSecret"},"description":"References a Kubernetes secret resource. It holds a list of secrets. These secrets help to gain access to pull an images from a private registry.\n\n`ImagePullSecret$name` is required when this object is used."},"initContainers":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEksContainer"},"description":"These containers run before application containers, always runs to completion, and must complete successfully before the next container starts. These containers are registered with the Amazon EKS Connector agent and persists the registration information in the Kubernetes backend data store. For more information, see [Init Containers](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/workloads/pods/init-containers/) in the *Kubernetes documentation* .\n\n\u003e This object is limited to 10 elements."},"metadata":{"$ref":"#/types/aws-native:batch:JobDefinitionEksMetadata","description":"Metadata about the Kubernetes pod. For more information, see [Understanding Kubernetes Objects](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/overview/working-with-objects/kubernetes-objects/) in the *Kubernetes documentation* ."},"serviceAccountName":{"type":"string","description":"The name of the service account that's used to run the pod. For more information, see [Kubernetes service accounts](https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html) and [Configure a Kubernetes service account to assume an IAM role](https://docs.aws.amazon.com/eks/latest/userguide/associate-service-account-role.html) in the *Amazon EKS User Guide* and [Configure service accounts for pods](https://docs.aws.amazon.com/https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/) in the *Kubernetes documentation* ."},"shareProcessNamespace":{"type":"boolean","description":"Indicates if the processes in a container are shared, or visible, to other containers in the same pod. For more information, see [Share Process Namespace between Containers in a Pod](https://docs.aws.amazon.com/https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/) ."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEksVolume"},"description":"Specifies the volumes for a job definition that uses Amazon EKS resources."}},"type":"object"},"aws-native:batch:JobDefinitionEksProperties":{"properties":{"podProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEksPodProperties","description":"The properties for the Kubernetes pod resources of a job."}},"type":"object"},"aws-native:batch:JobDefinitionEksSecret":{"properties":{"optional":{"type":"boolean","description":"Specifies whether the secret or the secret's keys must be defined."},"secretName":{"type":"string","description":"The name of the secret. The name must be allowed as a DNS subdomain name. For more information, see [DNS subdomain names](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#dns-subdomain-names) in the *Kubernetes documentation* ."}},"type":"object","required":["secretName"]},"aws-native:batch:JobDefinitionEksVolume":{"properties":{"emptyDir":{"$ref":"#/types/aws-native:batch:JobDefinitionEksEmptyDir","description":"Specifies the configuration of a Kubernetes `emptyDir` volume. For more information, see [emptyDir](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/volumes/#emptydir) in the *Kubernetes documentation* ."},"hostPath":{"$ref":"#/types/aws-native:batch:JobDefinitionEksHostPath","description":"Specifies the configuration of a Kubernetes `hostPath` volume. For more information, see [hostPath](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/volumes/#hostpath) in the *Kubernetes documentation* ."},"name":{"type":"string","description":"The name of the volume. The name must be allowed as a DNS subdomain name. For more information, see [DNS subdomain names](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#dns-subdomain-names) in the *Kubernetes documentation* ."},"persistentVolumeClaim":{"$ref":"#/types/aws-native:batch:JobDefinitionEksPersistentVolumeClaim","description":"Specifies the configuration of a Kubernetes `persistentVolumeClaim` bounded to a `persistentVolume` . For more information, see [Persistent Volume Claims](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/persistent-volumes/#persistentvolumeclaims) in the *Kubernetes documentation* ."},"secret":{"$ref":"#/types/aws-native:batch:JobDefinitionEksSecret","description":"Specifies the configuration of a Kubernetes `secret` volume. For more information, see [secret](https://docs.aws.amazon.com/https://kubernetes.io/docs/concepts/storage/volumes/#secret) in the *Kubernetes documentation* ."}},"type":"object","required":["name"]},"aws-native:batch:JobDefinitionEnvironment":{"properties":{"name":{"type":"string","description":"The name of the environment variable."},"value":{"type":"string","description":"The value of the environment variable."}},"type":"object"},"aws-native:batch:JobDefinitionEphemeralStorage":{"properties":{"sizeInGiB":{"type":"integer","description":"The total amount, in GiB, of ephemeral storage to set for the task. The minimum supported value is `21` GiB and the maximum supported value is `200` GiB."}},"type":"object","required":["sizeInGiB"]},"aws-native:batch:JobDefinitionEvaluateOnExit":{"properties":{"action":{"type":"string","description":"Specifies the action to take if all of the specified conditions ( `onStatusReason` , `onReason` , and `onExitCode` ) are met. The values aren't case sensitive."},"onExitCode":{"type":"string","description":"Contains a glob pattern to match against the decimal representation of the `ExitCode` returned for a job. The pattern can be up to 512 characters long. It can contain only numbers, and can end with an asterisk (*) so that only the start of the string needs to be an exact match.\n\nThe string can contain up to 512 characters."},"onReason":{"type":"string","description":"Contains a glob pattern to match against the `Reason` returned for a job. The pattern can contain up to 512 characters. It can contain letters, numbers, periods (.), colons (:), and white space (including spaces and tabs). It can optionally end with an asterisk (*) so that only the start of the string needs to be an exact match."},"onStatusReason":{"type":"string","description":"Contains a glob pattern to match against the `StatusReason` returned for a job. The pattern can contain up to 512 characters. It can contain letters, numbers, periods (.), colons (:), and white spaces (including spaces or tabs). It can optionally end with an asterisk (*) so that only the start of the string needs to be an exact match."}},"type":"object","required":["action"]},"aws-native:batch:JobDefinitionHost":{"properties":{"sourcePath":{"type":"string","description":"The path on the host container instance that's presented to the container. If this parameter is empty, then the Docker daemon has assigned a host path for you. If this parameter contains a file location, then the data volume persists at the specified location on the host container instance until you delete it manually. If the source path location doesn't exist on the host container instance, the Docker daemon creates it. If the location does exist, the contents of the source path folder are exported.\n\n\u003e This parameter isn't applicable to jobs that run on Fargate resources. Don't provide this for these jobs."}},"type":"object"},"aws-native:batch:JobDefinitionImagePullSecret":{"properties":{"name":{"type":"string","description":"Provides a unique identifier for the `ImagePullSecret` . This object is required when `EksPodProperties$imagePullSecrets` is used."}},"type":"object"},"aws-native:batch:JobDefinitionJobTimeout":{"properties":{"attemptDurationSeconds":{"type":"integer","description":"The job timeout time (in seconds) that's measured from the job attempt's `startedAt` timestamp. After this time passes, AWS Batch terminates your jobs if they aren't finished. The minimum value for the timeout is 60 seconds.\n\nFor array jobs, the timeout applies to the child jobs, not to the parent array job.\n\nFor multi-node parallel (MNP) jobs, the timeout applies to the whole job, not to the individual nodes."}},"type":"object"},"aws-native:batch:JobDefinitionLinuxParameters":{"properties":{"devices":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionDevice"},"description":"Any of the host devices to expose to the container. This parameter maps to `Devices` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--device` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't provide it for these jobs."},"initProcessEnabled":{"type":"boolean","description":"If true, run an `init` process inside the container that forwards signals and reaps processes. This parameter maps to the `--init` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . This parameter requires version 1.25 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: `sudo docker version | grep \"Server API version\"`"},"maxSwap":{"type":"integer","description":"The total amount of swap memory (in MiB) a container can use. This parameter is translated to the `--memory-swap` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) where the value is the sum of the container memory plus the `maxSwap` value. For more information, see [`--memory-swap` details](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/resource_constraints/#--memory-swap-details) in the Docker documentation.\n\nIf a `maxSwap` value of `0` is specified, the container doesn't use swap. Accepted values are `0` or any positive integer. If the `maxSwap` parameter is omitted, the container doesn't use the swap configuration for the container instance on which it runs. A `maxSwap` value must be set for the `swappiness` parameter to be used.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't provide it for these jobs."},"sharedMemorySize":{"type":"integer","description":"The value for the size (in MiB) of the `/dev/shm` volume. This parameter maps to the `--shm-size` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't provide it for these jobs."},"swappiness":{"type":"integer","description":"You can use this parameter to tune a container's memory swappiness behavior. A `swappiness` value of `0` causes swapping to not occur unless absolutely necessary. A `swappiness` value of `100` causes pages to be swapped aggressively. Valid values are whole numbers between `0` and `100` . If the `swappiness` parameter isn't specified, a default value of `60` is used. If a value isn't specified for `maxSwap` , then this parameter is ignored. If `maxSwap` is set to 0, the container doesn't use swap. This parameter maps to the `--memory-swappiness` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\nConsider the following when you use a per-container swap configuration.\n\n- Swap space must be enabled and allocated on the container instance for the containers to use.\n\n\u003e By default, the Amazon ECS optimized AMIs don't have swap enabled. You must enable swap on the instance to use this feature. For more information, see [Instance store swap volumes](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-store-swap-volumes.html) in the *Amazon EC2 User Guide for Linux Instances* or [How do I allocate memory to work as swap space in an Amazon EC2 instance by using a swap file?](https://docs.aws.amazon.com/premiumsupport/knowledge-center/ec2-memory-swap-file/)\n- The swap space parameters are only supported for job definitions using EC2 resources.\n- If the `maxSwap` and `swappiness` parameters are omitted from a job definition, each container has a default `swappiness` value of 60. Moreover, the total swap usage is limited to two times the memory reservation of the container.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't provide it for these jobs."},"tmpfs":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionTmpfs"},"description":"The container path, mount options, and size (in MiB) of the `tmpfs` mount. This parameter maps to the `--tmpfs` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources. Don't provide this parameter for this resource type."}},"type":"object"},"aws-native:batch:JobDefinitionLogConfiguration":{"properties":{"logDriver":{"type":"string","description":"The log driver to use for the container. The valid values that are listed for this parameter are log drivers that the Amazon ECS container agent can communicate with by default.\n\nThe supported log drivers are `awsfirelens` , `awslogs` , `fluentd` , `gelf` , `json-file` , `journald` , `logentries` , `syslog` , and `splunk` .\n\n\u003e Jobs that are running on Fargate resources are restricted to the `awslogs` and `splunk` log drivers. \n\n- **awsfirelens** - Specifies the firelens logging driver. For more information on configuring Firelens, see [Send Amazon ECS logs to an AWS service or AWS Partner](https://docs.aws.amazon.com//AmazonECS/latest/developerguide/using_firelens.html) in the *Amazon Elastic Container Service Developer Guide* .\n- **awslogs** - Specifies the Amazon CloudWatch Logs logging driver. For more information, see [Using the awslogs log driver](https://docs.aws.amazon.com/batch/latest/userguide/using_awslogs.html) in the *AWS Batch User Guide* and [Amazon CloudWatch Logs logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/awslogs/) in the Docker documentation.\n- **fluentd** - Specifies the Fluentd logging driver. For more information including usage and options, see [Fluentd logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/fluentd/) in the *Docker documentation* .\n- **gelf** - Specifies the Graylog Extended Format (GELF) logging driver. For more information including usage and options, see [Graylog Extended Format logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/gelf/) in the *Docker documentation* .\n- **journald** - Specifies the journald logging driver. For more information including usage and options, see [Journald logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/journald/) in the *Docker documentation* .\n- **json-file** - Specifies the JSON file logging driver. For more information including usage and options, see [JSON File logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/json-file/) in the *Docker documentation* .\n- **splunk** - Specifies the Splunk logging driver. For more information including usage and options, see [Splunk logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/splunk/) in the *Docker documentation* .\n- **syslog** - Specifies the syslog logging driver. For more information including usage and options, see [Syslog logging driver](https://docs.aws.amazon.com/https://docs.docker.com/config/containers/logging/syslog/) in the *Docker documentation* .\n\n\u003e If you have a custom driver that's not listed earlier that you want to work with the Amazon ECS container agent, you can fork the Amazon ECS container agent project that's [available on GitHub](https://docs.aws.amazon.com/https://github.com/aws/amazon-ecs-agent) and customize it to work with that driver. We encourage you to submit pull requests for changes that you want to have included. However, Amazon Web Services doesn't currently support running modified copies of this software. \n\nThis parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: `sudo docker version | grep \"Server API version\"`"},"options":{"type":"object","additionalProperties":{"type":"string"},"description":"The configuration options to send to the log driver. This parameter requires version 1.19 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: `sudo docker version | grep \"Server API version\"`"},"secretOptions":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionSecret"},"description":"The secrets to pass to the log configuration. For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/batch/latest/userguide/specifying-sensitive-data.html) in the *AWS Batch User Guide* ."}},"type":"object","required":["logDriver"]},"aws-native:batch:JobDefinitionMountPoint":{"properties":{"containerPath":{"type":"string","description":"The path on the container where the host volume is mounted."},"readOnly":{"type":"boolean","description":"If this value is `true` , the container has read-only access to the volume. Otherwise, the container can write to the volume. The default value is `false` ."},"sourceVolume":{"type":"string","description":"The name of the volume to mount."}},"type":"object"},"aws-native:batch:JobDefinitionMultiNodeContainerProperties":{"properties":{"command":{"type":"array","items":{"type":"string"},"description":"The command that's passed to the container. This parameter maps to `Cmd` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `COMMAND` parameter to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . For more information, see [https://docs.docker.com/engine/reference/builder/#cmd](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/builder/#cmd) ."},"enableExecuteCommand":{"type":"boolean","description":"Determines whether execute command functionality is turned on for this task. If `true` , execute command functionality is turned on all the containers in the task."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEnvironment"},"description":"The environment variables to pass to a container. This parameter maps to `Env` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--env` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e We don't recommend using plaintext environment variables for sensitive information, such as credential data. \u003e Environment variables cannot start with \" `AWS_BATCH` \". This naming convention is reserved for variables that AWS Batch sets."},"ephemeralStorage":{"$ref":"#/types/aws-native:batch:JobDefinitionEphemeralStorage","description":"The amount of ephemeral storage to allocate for the task. This parameter is used to expand the total amount of ephemeral storage available, beyond the default amount, for tasks hosted on AWS Fargate ."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the execution role that AWS Batch can assume. For jobs that run on Fargate resources, you must provide an execution role. For more information, see [AWS Batch execution IAM role](https://docs.aws.amazon.com/batch/latest/userguide/execution-IAM-role.html) in the *AWS Batch User Guide* ."},"image":{"type":"string","description":"Required. The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with `*repository-url* / *image* : *tag*` . It can be 255 characters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), underscores (_), colons (:), periods (.), forward slashes (/), and number signs (#). This parameter maps to `Image` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `IMAGE` parameter of [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e Docker image architecture must match the processor architecture of the compute resources that they're scheduled on. For example, ARM-based Docker images can only run on ARM-based compute resources. \n\n- Images in Amazon ECR Public repositories use the full `registry/repository[:tag]` or `registry/repository[@digest]` naming conventions. For example, `public.ecr.aws/ *registry_alias* / *my-web-app* : *latest*` .\n- Images in Amazon ECR repositories use the full registry and repository URI (for example, `123456789012.dkr.ecr.\u003cregion-name\u003e.amazonaws.com/\u003crepository-name\u003e` ).\n- Images in official repositories on Docker Hub use a single name (for example, `ubuntu` or `mongo` ).\n- Images in other repositories on Docker Hub are qualified with an organization name (for example, `amazon/amazon-ecs-agent` ).\n- Images in other online repositories are qualified further by a domain name (for example, `quay.io/assemblyline/ubuntu` )."},"instanceType":{"type":"string","description":"The instance type to use for a multi-node parallel job. All node groups in a multi-node parallel job must use the same instance type.\n\n\u003e This parameter isn't applicable to single-node container jobs or jobs that run on Fargate resources, and shouldn't be provided."},"jobRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the container can assume for AWS permissions. For more information, see [IAM roles for tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide* ."},"linuxParameters":{"$ref":"#/types/aws-native:batch:JobDefinitionLinuxParameters","description":"Linux-specific modifications that are applied to the container, such as details for device mappings."},"logConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionLogConfiguration","description":"The log configuration specification for the container.\n\nThis parameter maps to `LogConfig` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--log-driver` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . By default, containers use the same logging driver that the Docker daemon uses. However the container might use a different logging driver than the Docker daemon by specifying a log driver with this parameter in the container definition. To use a different logging driver for a container, the log system must be configured properly on the container instance (or on a different log server for remote logging options). For more information on the options for different supported log drivers, see [Configure logging drivers](https://docs.aws.amazon.com/https://docs.docker.com/engine/admin/logging/overview/) in the Docker documentation.\n\n\u003e AWS Batch currently supports a subset of the logging drivers available to the Docker daemon (shown in the [LogConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-containerproperties-logconfiguration.html) data type). \n\nThis parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: `sudo docker version | grep \"Server API version\"`\n\n\u003e The Amazon ECS container agent running on a container instance must register the logging drivers available on that instance with the `ECS_AVAILABLE_LOGGING_DRIVERS` environment variable before containers placed on that instance can use these log configuration options. For more information, see [Amazon ECS container agent configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Amazon Elastic Container Service Developer Guide* ."},"memory":{"type":"integer","description":"This parameter is deprecated, use `resourceRequirements` to specify the memory requirements for the job definition. It's not supported for jobs running on Fargate resources. For jobs that run on Amazon EC2 resources, it specifies the memory hard limit (in MiB) for a container. If your container attempts to exceed the specified number, it's terminated. You must specify at least 4 MiB of memory for a job using this parameter. The memory hard limit can be specified in several places. It must be specified for each node at least once."},"mountPoints":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionMountPoint"},"description":"The mount points for data volumes in your container.\n\nThis parameter maps to `Volumes` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the [--volume](https://docs.aws.amazon.com/) option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) .\n\nWindows containers can mount whole directories on the same drive as `$env:ProgramData` . Windows containers can't mount directories on a different drive, and mount point can't be across drives."},"privileged":{"type":"boolean","description":"When this parameter is true, the container is given elevated permissions on the host container instance (similar to the `root` user). This parameter maps to `Privileged` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--privileged` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . The default value is false.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources and shouldn't be provided, or specified as false."},"readonlyRootFilesystem":{"type":"boolean","description":"When this parameter is true, the container is given read-only access to its root file system. This parameter maps to `ReadonlyRootfs` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--read-only` option to `docker run` ."},"repositoryCredentials":{"$ref":"#/types/aws-native:batch:JobDefinitionRepositoryCredentials","description":"The private repository authentication credentials to use."},"resourceRequirements":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionResourceRequirement"},"description":"The type and amount of resources to assign to a container. The supported resources include `GPU` , `MEMORY` , and `VCPU` ."},"runtimePlatform":{"$ref":"#/types/aws-native:batch:JobDefinitionRuntimePlatform","description":"An object that represents the compute environment architecture for AWS Batch jobs on Fargate."},"secrets":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionSecret"},"description":"The secrets for the container. For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/batch/latest/userguide/specifying-sensitive-data.html) in the *AWS Batch User Guide* ."},"ulimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionUlimit"},"description":"A list of `ulimits` to set in the container. This parameter maps to `Ulimits` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--ulimit` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources and shouldn't be provided."},"user":{"type":"string","description":"The user name to use inside the container. This parameter maps to `User` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--user` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) ."},"vcpus":{"type":"integer","description":"This parameter is deprecated, use `resourceRequirements` to specify the vCPU requirements for the job definition. It's not supported for jobs running on Fargate resources. For jobs running on Amazon EC2 resources, it specifies the number of vCPUs reserved for the job.\n\nEach vCPU is equivalent to 1,024 CPU shares. This parameter maps to `CpuShares` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--cpu-shares` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . The number of vCPUs must be specified but can be specified in several places. You must specify it at least once for each node."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionVolume"},"description":"A list of data volumes used in a job."}},"type":"object","required":["image"]},"aws-native:batch:JobDefinitionMultiNodeEcsProperties":{"properties":{"taskProperties":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionMultiNodeEcsTaskProperties"},"description":"An object that contains the properties for the Amazon ECS task definition of a job.\n\n\u003e This object is currently limited to one task element. However, the task element can run up to 10 containers."}},"type":"object","required":["taskProperties"]},"aws-native:batch:JobDefinitionMultiNodeEcsTaskProperties":{"properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionTaskContainerProperties"},"description":"This object is a list of containers."},"enableExecuteCommand":{"type":"boolean","description":"Determines whether execute command functionality is turned on for this task. If `true` , execute command functionality is turned on all the containers in the task."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the execution role that AWS Batch can assume. For jobs that run on Fargate resources, you must provide an execution role. For more information, see [AWS Batch execution IAM role](https://docs.aws.amazon.com/batch/latest/userguide/execution-IAM-role.html) in the *AWS Batch User Guide* ."},"ipcMode":{"type":"string","description":"The IPC resource namespace to use for the containers in the task. The valid values are `host` , `task` , or `none` .\n\nIf `host` is specified, all containers within the tasks that specified the `host` IPC mode on the same container instance share the same IPC resources with the host Amazon EC2 instance.\n\nIf `task` is specified, all containers within the specified `task` share the same IPC resources.\n\nIf `none` is specified, the IPC resources within the containers of a task are private, and are not shared with other containers in a task or on the container instance.\n\nIf no value is specified, then the IPC resource namespace sharing depends on the Docker daemon setting on the container instance. For more information, see [IPC settings](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#ipc-settings---ipc) in the Docker run reference."},"pidMode":{"type":"string","description":"The process namespace to use for the containers in the task. The valid values are `host` or `task` . For example, monitoring sidecars might need `pidMode` to access information about other containers running in the same task.\n\nIf `host` is specified, all containers within the tasks that specified the `host` PID mode on the same container instance share the process namespace with the host Amazon EC2 instance.\n\nIf `task` is specified, all containers within the specified task share the same process namespace.\n\nIf no value is specified, the default is a private namespace for each container. For more information, see [PID settings](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#pid-settings---pid) in the Docker run reference."},"taskRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) that's associated with the Amazon ECS task.\n\n\u003e This is object is comparable to [ContainerProperties:jobRoleArn](https://docs.aws.amazon.com/batch/latest/APIReference/API_ContainerProperties.html) ."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionVolume"},"description":"A list of volumes that are associated with the job."}},"type":"object"},"aws-native:batch:JobDefinitionNetworkConfiguration":{"properties":{"assignPublicIp":{"type":"string","description":"Indicates whether the job has a public IP address. For a job that's running on Fargate resources in a private subnet to send outbound traffic to the internet (for example, to pull container images), the private subnet requires a NAT gateway be attached to route requests to the internet. For more information, see [Amazon ECS task networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide* . The default value is \" `DISABLED` \"."}},"type":"object"},"aws-native:batch:JobDefinitionNodeProperties":{"properties":{"mainNode":{"type":"integer","description":"Specifies the node index for the main node of a multi-node parallel job. This node index value must be fewer than the number of nodes."},"nodeRangeProperties":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionNodeRangeProperty"},"description":"A list of node ranges and their properties that are associated with a multi-node parallel job."},"numNodes":{"type":"integer","description":"The number of nodes that are associated with a multi-node parallel job."}},"type":"object","required":["mainNode","nodeRangeProperties","numNodes"]},"aws-native:batch:JobDefinitionNodeRangeProperty":{"properties":{"consumableResourceProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionConsumableResourceProperties","description":"Contains a list of consumable resources required by a job."},"container":{"$ref":"#/types/aws-native:batch:JobDefinitionMultiNodeContainerProperties","description":"The container details for the node range."},"ecsProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionMultiNodeEcsProperties","description":"This is an object that represents the properties of the node range for a multi-node parallel job."},"eksProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEksProperties","description":"This is an object that represents the properties of the node range for a multi-node parallel job."},"instanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types of the underlying host infrastructure of a multi-node parallel job.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources.\n\u003e \n\u003e In addition, this list object is currently limited to one element."},"targetNodes":{"type":"string","description":"The range of nodes, using node index values. A range of `0:3` indicates nodes with index values of `0` through `3` . If the starting range value is omitted ( `:n` ), then `0` is used to start the range. If the ending range value is omitted ( `n:` ), then the highest possible node index is used to end the range. Your accumulative node ranges must account for all nodes ( `0:n` ). You can nest node ranges (for example, `0:10` and `4:5` ). In this case, the `4:5` range properties override the `0:10` properties."}},"type":"object","required":["targetNodes"]},"aws-native:batch:JobDefinitionRepositoryCredentials":{"properties":{"credentialsParameter":{"type":"string","description":"The Amazon Resource Name (ARN) of the secret containing the private repository credentials."}},"type":"object","required":["credentialsParameter"]},"aws-native:batch:JobDefinitionResourceRequirement":{"properties":{"type":{"type":"string","description":"The type of resource to assign to a container. The supported resources include `GPU` , `MEMORY` , and `VCPU` ."},"value":{"type":"string","description":"The quantity of the specified resource to reserve for the container. The values vary based on the `type` specified.\n\n- **type=\"GPU\"** - The number of physical GPUs to reserve for the container. Make sure that the number of GPUs reserved for all containers in a job doesn't exceed the number of available GPUs on the compute resource that the job is launched on.\n\n\u003e GPUs aren't available for jobs that are running on Fargate resources.\n- **type=\"MEMORY\"** - The memory hard limit (in MiB) present to the container. This parameter is supported for jobs that are running on Amazon EC2 resources. If your container attempts to exceed the memory specified, the container is terminated. This parameter maps to `Memory` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--memory` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . You must specify at least 4 MiB of memory for a job. This is required but can be specified in several places for multi-node parallel (MNP) jobs. It must be specified for each node at least once. This parameter maps to `Memory` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--memory` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e If you're trying to maximize your resource utilization by providing your jobs as much memory as possible for a particular instance type, see [Memory management](https://docs.aws.amazon.com/batch/latest/userguide/memory-management.html) in the *AWS Batch User Guide* . \n\nFor jobs that are running on Fargate resources, then `value` is the hard limit (in MiB), and must match one of the supported values and the `VCPU` values must be one of the values supported for that memory value.\n\n- **value = 512** - `VCPU` = 0.25\n- **value = 1024** - `VCPU` = 0.25 or 0.5\n- **value = 2048** - `VCPU` = 0.25, 0.5, or 1\n- **value = 3072** - `VCPU` = 0.5, or 1\n- **value = 4096** - `VCPU` = 0.5, 1, or 2\n- **value = 5120, 6144, or 7168** - `VCPU` = 1 or 2\n- **value = 8192** - `VCPU` = 1, 2, or 4\n- **value = 9216, 10240, 11264, 12288, 13312, 14336, or 15360** - `VCPU` = 2 or 4\n- **value = 16384** - `VCPU` = 2, 4, or 8\n- **value = 17408, 18432, 19456, 21504, 22528, 23552, 25600, 26624, 27648, 29696, or 30720** - `VCPU` = 4\n- **value = 20480, 24576, or 28672** - `VCPU` = 4 or 8\n- **value = 36864, 45056, 53248, or 61440** - `VCPU` = 8\n- **value = 32768, 40960, 49152, or 57344** - `VCPU` = 8 or 16\n- **value = 65536, 73728, 81920, 90112, 98304, 106496, 114688, or 122880** - `VCPU` = 16\n- **type=\"VCPU\"** - The number of vCPUs reserved for the container. This parameter maps to `CpuShares` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--cpu-shares` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . Each vCPU is equivalent to 1,024 CPU shares. For Amazon EC2 resources, you must specify at least one vCPU. This is required but can be specified in several places; it must be specified for each node at least once.\n\nThe default for the Fargate On-Demand vCPU resource count quota is 6 vCPUs. For more information about Fargate quotas, see [AWS Fargate quotas](https://docs.aws.amazon.com/general/latest/gr/ecs-service.html#service-quotas-fargate) in the *AWS General Reference* .\n\nFor jobs that are running on Fargate resources, then `value` must match one of the supported values and the `MEMORY` values must be one of the values supported for that `VCPU` value. The supported values are 0.25, 0.5, 1, 2, 4, 8, and 16\n\n- **value = 0.25** - `MEMORY` = 512, 1024, or 2048\n- **value = 0.5** - `MEMORY` = 1024, 2048, 3072, or 4096\n- **value = 1** - `MEMORY` = 2048, 3072, 4096, 5120, 6144, 7168, or 8192\n- **value = 2** - `MEMORY` = 4096, 5120, 6144, 7168, 8192, 9216, 10240, 11264, 12288, 13312, 14336, 15360, or 16384\n- **value = 4** - `MEMORY` = 8192, 9216, 10240, 11264, 12288, 13312, 14336, 15360, 16384, 17408, 18432, 19456, 20480, 21504, 22528, 23552, 24576, 25600, 26624, 27648, 28672, 29696, or 30720\n- **value = 8** - `MEMORY` = 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, or 61440\n- **value = 16** - `MEMORY` = 32768, 40960, 49152, 57344, 65536, 73728, 81920, 90112, 98304, 106496, 114688, or 122880"}},"type":"object"},"aws-native:batch:JobDefinitionResourceRetentionPolicy":{"properties":{"skipDeregisterOnUpdate":{"type":"boolean","description":"Specifies whether the previous revision of the job definition is retained in an active status after UPDATE events for the resource. The default value is `false` . When the property is set to `false` , the previous revision of the job definition is de-registered after a new revision is created. When the property is set to `true` , the previous revision of the job definition is not de-registered."}},"type":"object"},"aws-native:batch:JobDefinitionRetryStrategy":{"properties":{"attempts":{"type":"integer","description":"The number of times to move a job to the `RUNNABLE` status. You can specify between 1 and 10 attempts. If the value of `attempts` is greater than one, the job is retried on failure the same number of attempts as the value."},"evaluateOnExit":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEvaluateOnExit"},"description":"Array of up to 5 objects that specify the conditions where jobs are retried or failed. If this parameter is specified, then the `attempts` parameter must also be specified. If none of the listed conditions match, then the job is retried."}},"type":"object"},"aws-native:batch:JobDefinitionRuntimePlatform":{"properties":{"cpuArchitecture":{"type":"string","description":"The vCPU architecture. The default value is `X86_64` . Valid values are `X86_64` and `ARM64` .\n\n\u003e This parameter must be set to `X86_64` for Windows containers. \u003e Fargate Spot is not supported on Windows-based containers on Fargate. A job queue will be blocked if a Windows job is submitted to a job queue with only Fargate Spot compute environments. However, you can attach both `FARGATE` and `FARGATE_SPOT` compute environments to the same job queue."},"operatingSystemFamily":{"type":"string","description":"The operating system for the compute environment. Valid values are: `LINUX` (default), `WINDOWS_SERVER_2019_CORE` , `WINDOWS_SERVER_2019_FULL` , `WINDOWS_SERVER_2022_CORE` , and `WINDOWS_SERVER_2022_FULL` .\n\n\u003e The following parameters can’t be set for Windows containers: `linuxParameters` , `privileged` , `user` , `ulimits` , `readonlyRootFilesystem` , and `efsVolumeConfiguration` . \u003e The AWS Batch Scheduler checks the compute environments that are attached to the job queue before registering a task definition with Fargate. In this scenario, the job queue is where the job is submitted. If the job requires a Windows container and the first compute environment is `LINUX` , the compute environment is skipped and the next compute environment is checked until a Windows-based compute environment is found. \u003e Fargate Spot is not supported on Windows-based containers on Fargate. A job queue will be blocked if a Windows job is submitted to a job queue with only Fargate Spot compute environments. However, you can attach both `FARGATE` and `FARGATE_SPOT` compute environments to the same job queue."}},"type":"object"},"aws-native:batch:JobDefinitionSecret":{"properties":{"name":{"type":"string","description":"The name of the secret."},"valueFrom":{"type":"string","description":"The secret to expose to the container. The supported values are either the full Amazon Resource Name (ARN) of the AWS Secrets Manager secret or the full ARN of the parameter in the AWS Systems Manager Parameter Store.\n\n\u003e If the AWS Systems Manager Parameter Store parameter exists in the same Region as the job you're launching, then you can use either the full Amazon Resource Name (ARN) or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified."}},"type":"object","required":["name","valueFrom"]},"aws-native:batch:JobDefinitionTaskContainerDependency":{"properties":{"condition":{"type":"string","description":"The dependency condition of the container. The following are the available conditions and their behavior:\n\n- `START` - This condition emulates the behavior of links and volumes today. It validates that a dependent container is started before permitting other containers to start.\n- `COMPLETE` - This condition validates that a dependent container runs to completion (exits) before permitting other containers to start. This can be useful for nonessential containers that run a script and then exit. This condition can't be set on an essential container.\n- `SUCCESS` - This condition is the same as `COMPLETE` , but it also requires that the container exits with a zero status. This condition can't be set on an essential container."},"containerName":{"type":"string","description":"A unique identifier for the container."}},"type":"object","required":["condition","containerName"]},"aws-native:batch:JobDefinitionTaskContainerProperties":{"properties":{"command":{"type":"array","items":{"type":"string"},"description":"The command that's passed to the container. This parameter maps to `Cmd` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `COMMAND` parameter to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . For more information, see [Dockerfile reference: CMD](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/builder/#cmd) ."},"dependsOn":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionTaskContainerDependency"},"description":"A list of containers that this container depends on."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionEnvironment"},"description":"The environment variables to pass to a container. This parameter maps to Env in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--env` parameter to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e We don't recommend using plaintext environment variables for sensitive information, such as credential data. \u003e Environment variables cannot start with `AWS_BATCH` . This naming convention is reserved for variables that AWS Batch sets."},"essential":{"type":"boolean","description":"If the essential parameter of a container is marked as `true` , and that container fails or stops for any reason, all other containers that are part of the task are stopped. If the `essential` parameter of a container is marked as false, its failure doesn't affect the rest of the containers in a task. If this parameter is omitted, a container is assumed to be essential.\n\nAll jobs must have at least one essential container. If you have an application that's composed of multiple containers, group containers that are used for a common purpose into components, and separate the different components into multiple task definitions. For more information, see [Application Architecture](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/application_architecture.html) in the *Amazon Elastic Container Service Developer Guide* ."},"firelensConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionTaskContainerPropertiesFirelensConfigurationProperties","description":"The FireLens configuration for the container. This is used to specify and configure a log router for container logs. For more information, see [Custom log](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html) routing in the *Amazon Elastic Container Service Developer Guide* ."},"image":{"type":"string","description":"The image used to start a container. This string is passed directly to the Docker daemon. By default, images in the Docker Hub registry are available. Other repositories are specified with either `repository-url/image:tag` or `repository-url/image@digest` . Up to 255 letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs are allowed. This parameter maps to `Image` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the `IMAGE` parameter of the [*docker run*](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) ."},"linuxParameters":{"$ref":"#/types/aws-native:batch:JobDefinitionLinuxParameters","description":"Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information, see [KernelCapabilities](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html) ."},"logConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionLogConfiguration","description":"The log configuration specification for the container.\n\nThis parameter maps to `LogConfig` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the `--log-driver` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) .\n\nBy default, containers use the same logging driver that the Docker daemon uses. However the container can use a different logging driver than the Docker daemon by specifying a log driver with this parameter in the container definition. To use a different logging driver for a container, the log system must be configured properly on the container instance (or on a different log server for remote logging options). For more information about the options for different supported log drivers, see [Configure logging drivers](https://docs.aws.amazon.com/https://docs.docker.com/engine/admin/logging/overview/) in the *Docker documentation* .\n\n\u003e Amazon ECS currently supports a subset of the logging drivers available to the Docker daemon (shown in the `LogConfiguration` data type). Additional log drivers may be available in future releases of the Amazon ECS container agent. \n\nThis parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: sudo docker version `--format '{{.Server.APIVersion}}'`\n\n\u003e The Amazon ECS container agent running on a container instance must register the logging drivers available on that instance with the `ECS_AVAILABLE_LOGGING_DRIVERS` environment variable before containers placed on that instance can use these log configuration options. For more information, see [Amazon ECS container agent configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Amazon Elastic Container Service Developer Guide* ."},"mountPoints":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionMountPoint"},"description":"The mount points for data volumes in your container.\n\nThis parameter maps to `Volumes` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the [--volume](https://docs.aws.amazon.com/) option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) .\n\nWindows containers can mount whole directories on the same drive as `$env:ProgramData` . Windows containers can't mount directories on a different drive, and mount point can't be across drives."},"name":{"type":"string","description":"The name of a container. The name can be used as a unique identifier to target your `dependsOn` and `Overrides` objects."},"privileged":{"type":"boolean","description":"When this parameter is `true` , the container is given elevated privileges on the host container instance (similar to the `root` user). This parameter maps to `Privileged` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the `--privileged` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) .\n\n\u003e This parameter is not supported for Windows containers or tasks run on Fargate."},"readonlyRootFilesystem":{"type":"boolean","description":"When this parameter is true, the container is given read-only access to its root file system. This parameter maps to `ReadonlyRootfs` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the `--read-only` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) .\n\n\u003e This parameter is not supported for Windows containers."},"repositoryCredentials":{"$ref":"#/types/aws-native:batch:JobDefinitionRepositoryCredentials","description":"The private repository authentication credentials to use."},"resourceRequirements":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionResourceRequirement"},"description":"The type and amount of a resource to assign to a container. The only supported resource is a GPU."},"secrets":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionSecret"},"description":"The secrets to pass to the container. For more information, see [Specifying Sensitive Data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the Amazon Elastic Container Service Developer Guide."},"ulimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobDefinitionUlimit"},"description":"A list of `ulimits` to set in the container. If a `ulimit` value is specified in a task definition, it overrides the default values set by Docker. This parameter maps to `Ulimits` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the `--ulimit` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration) .\n\nAmazon ECS tasks hosted on Fargate use the default resource limit values set by the operating system with the exception of the nofile resource limit parameter which Fargate overrides. The `nofile` resource limit sets a restriction on the number of open files that a container can use. The default `nofile` soft limit is `1024` and the default hard limit is `65535` .\n\nThis parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: sudo docker version `--format '{{.Server.APIVersion}}'`\n\n\u003e This parameter is not supported for Windows containers."},"user":{"type":"string","description":"The user to use inside the container. This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.\n\n\u003e When running tasks using the `host` network mode, don't run containers using the `root user (UID 0)` . We recommend using a non-root user for better security. \n\nYou can specify the `user` using the following formats. If specifying a UID or GID, you must specify it as a positive integer.\n\n- `user`\n- `user:group`\n- `uid`\n- `uid:gid`\n- `user:gi`\n- `uid:group`\n\n\u003e This parameter is not supported for Windows containers."}},"type":"object","required":["image"]},"aws-native:batch:JobDefinitionTaskContainerPropertiesFirelensConfigurationProperties":{"description":"The FireLens configuration for the container. This is used to specify and configure a log router for container logs. For more information, see [Custom log](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html) routing in the *Amazon Elastic Container Service Developer Guide* .","properties":{"options":{"type":"object","additionalProperties":{"type":"string"}},"type":{"type":"string"}},"type":"object","required":["type"]},"aws-native:batch:JobDefinitionTmpfs":{"properties":{"containerPath":{"type":"string","description":"The absolute file path in the container where the `tmpfs` volume is mounted."},"mountOptions":{"type":"array","items":{"type":"string"},"description":"The list of `tmpfs` volume mount options.\n\nValid values: \" `defaults` \" | \" `ro` \" | \" `rw` \" | \" `suid` \" | \" `nosuid` \" | \" `dev` \" | \" `nodev` \" | \" `exec` \" | \" `noexec` \" | \" `sync` \" | \" `async` \" | \" `dirsync` \" | \" `remount` \" | \" `mand` \" | \" `nomand` \" | \" `atime` \" | \" `noatime` \" | \" `diratime` \" | \" `nodiratime` \" | \" `bind` \" | \" `rbind\" | \"unbindable\" | \"runbindable\" | \"private\" | \"rprivate\" | \"shared\" | \"rshared\" | \"slave\" | \"rslave\" | \"relatime` \" | \" `norelatime` \" | \" `strictatime` \" | \" `nostrictatime` \" | \" `mode` \" | \" `uid` \" | \" `gid` \" | \" `nr_inodes` \" | \" `nr_blocks` \" | \" `mpol` \""},"size":{"type":"integer","description":"The size (in MiB) of the `tmpfs` volume."}},"type":"object","required":["containerPath","size"]},"aws-native:batch:JobDefinitionUlimit":{"properties":{"hardLimit":{"type":"integer","description":"The hard limit for the `ulimit` type."},"name":{"type":"string","description":"The `type` of the `ulimit` . Valid values are: `core` | `cpu` | `data` | `fsize` | `locks` | `memlock` | `msgqueue` | `nice` | `nofile` | `nproc` | `rss` | `rtprio` | `rttime` | `sigpending` | `stack` ."},"softLimit":{"type":"integer","description":"The soft limit for the `ulimit` type."}},"type":"object","required":["hardLimit","name","softLimit"]},"aws-native:batch:JobDefinitionVolume":{"properties":{"efsVolumeConfiguration":{"$ref":"#/types/aws-native:batch:JobDefinitionEfsVolumeConfiguration","description":"This parameter is specified when you're using an Amazon Elastic File System file system for job storage. Jobs that are running on Fargate resources must specify a `platformVersion` of at least `1.4.0` ."},"host":{"$ref":"#/types/aws-native:batch:JobDefinitionHost","description":"The contents of the `host` parameter determine whether your data volume persists on the host container instance and where it's stored. If the host parameter is empty, then the Docker daemon assigns a host path for your data volume. However, the data isn't guaranteed to persist after the containers that are associated with it stop running.\n\n\u003e This parameter isn't applicable to jobs that are running on Fargate resources and shouldn't be provided."},"name":{"type":"string","description":"The name of the volume. It can be up to 255 characters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), and underscores (_). This name is referenced in the `sourceVolume` parameter of container definition `mountPoints` ."}},"type":"object"},"aws-native:batch:JobQueueComputeEnvironmentOrder":{"properties":{"computeEnvironment":{"type":"string","description":"The Amazon Resource Name (ARN) of the compute environment."},"order":{"type":"integer","description":"The order of the compute environment. Compute environments are tried in ascending order. For example, if two compute environments are associated with a job queue, the compute environment with a lower `order` integer value is tried for job placement first."}},"type":"object","required":["computeEnvironment","order"]},"aws-native:batch:JobQueueJobStateTimeLimitAction":{"properties":{"action":{"$ref":"#/types/aws-native:batch:JobQueueJobStateTimeLimitActionAction","description":"The action to take when a job is at the head of the job queue in the specified state for the specified period of time. The only supported value is `CANCEL` , which will cancel the job."},"maxTimeSeconds":{"type":"integer","description":"The approximate amount of time, in seconds, that must pass with the job in the specified state before the action is taken. The minimum value is 600 (10 minutes) and the maximum value is 86,400 (24 hours)."},"reason":{"type":"string","description":"The reason to log for the action being taken."},"state":{"$ref":"#/types/aws-native:batch:JobQueueJobStateTimeLimitActionState","description":"The state of the job needed to trigger the action. The only supported value is `RUNNABLE` ."}},"type":"object","required":["action","maxTimeSeconds","reason","state"]},"aws-native:batch:JobQueueJobStateTimeLimitActionAction":{"description":"The action to take when a job is at the head of the job queue in the specified state for the specified period of time. The only supported value is `CANCEL` , which will cancel the job.","type":"string","enum":[{"name":"Cancel","value":"CANCEL"},{"name":"Terminate","value":"TERMINATE"}]},"aws-native:batch:JobQueueJobStateTimeLimitActionState":{"description":"The state of the job needed to trigger the action. The only supported value is `RUNNABLE` .","type":"string","enum":[{"name":"Runnable","value":"RUNNABLE"}]},"aws-native:batch:JobQueueServiceEnvironmentOrder":{"properties":{"order":{"type":"integer","description":"The order of the service environment. Job queues with a higher priority are evaluated first when associated with the same service environment."},"serviceEnvironment":{"type":"string","description":"The name or ARN of the service environment."}},"type":"object","required":["order","serviceEnvironment"]},"aws-native:batch:JobQueueState":{"description":"The state of the job queue. If the job queue state is `ENABLED` , it is able to accept jobs. If the job queue state is `DISABLED` , new jobs can't be added to the queue, but jobs already in the queue can finish.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:batch:QuotaShareCapacityLimit":{"properties":{"capacityUnit":{"type":"string","description":"The unit of compute capacity for the capacityLimit."},"maxCapacity":{"type":"integer","description":"The maximum capacity available for the quota share. This value represents the maximum amount of resources that can be allocated to jobs in the quota share without borrowing"}},"type":"object","required":["capacityUnit","maxCapacity"]},"aws-native:batch:QuotaSharePreemptionConfiguration":{"properties":{"inSharePreemption":{"$ref":"#/types/aws-native:batch:QuotaSharePreemptionConfigurationInSharePreemption","description":"Whether preemption is enabled within the quota share."}},"type":"object","required":["inSharePreemption"]},"aws-native:batch:QuotaSharePreemptionConfigurationInSharePreemption":{"description":"Whether preemption is enabled within the quota share.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:batch:QuotaShareResourceSharingConfiguration":{"properties":{"borrowLimit":{"type":"integer","description":"The maximum amount of compute capacity that can be borrowed. Use -1 for unlimited borrowing."},"strategy":{"$ref":"#/types/aws-native:batch:QuotaShareResourceSharingConfigurationStrategy","description":"The resource sharing strategy."}},"type":"object","required":["strategy"]},"aws-native:batch:QuotaShareResourceSharingConfigurationStrategy":{"description":"The resource sharing strategy.","type":"string","enum":[{"name":"Reserve","value":"RESERVE"},{"name":"Lend","value":"LEND"},{"name":"LendAndBorrow","value":"LEND_AND_BORROW"}]},"aws-native:batch:QuotaShareState":{"description":"The state of the quota share.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:batch:SchedulingPolicyFairsharePolicy":{"description":"Fair Share Policy for the Job Queue.","properties":{"computeReservation":{"type":"number","description":"A value used to reserve some of the available maximum vCPU for share identifiers that aren't already used.\n\nThe reserved ratio is `( *computeReservation* /100)^ *ActiveFairShares*` where `*ActiveFairShares*` is the number of active share identifiers.\n\nFor example, a `computeReservation` value of 50 indicates that AWS Batch reserves 50% of the maximum available vCPU if there's only one share identifier. It reserves 25% if there are two share identifiers. It reserves 12.5% if there are three share identifiers. A `computeReservation` value of 25 indicates that AWS Batch should reserve 25% of the maximum available vCPU if there's only one share identifier, 6.25% if there are two fair share identifiers, and 1.56% if there are three share identifiers.\n\nThe minimum value is 0 and the maximum value is 99."},"shareDecaySeconds":{"type":"number","description":"The amount of time (in seconds) to use to calculate a fair-share percentage for each share identifier in use. A value of zero (0) indicates the default minimum time window (600 seconds). The maximum supported value is 604800 (1 week).\n\nThe decay allows for more recently run jobs to have more weight than jobs that ran earlier. Consider adjusting this number if you have jobs that (on average) run longer than ten minutes, or a large difference in job count or job run times between share identifiers, and the allocation of resources doesn't meet your needs."},"shareDistribution":{"type":"array","items":{"$ref":"#/types/aws-native:batch:SchedulingPolicyShareAttributes"},"description":"List of Share Attributes"}},"type":"object"},"aws-native:batch:SchedulingPolicyQuotaSharePolicy":{"description":"Quota Share Policy for the Job Queue.","properties":{"idleResourceAssignmentStrategy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyQuotaSharePolicyIdleResourceAssignmentStrategy"}},"type":"object"},"aws-native:batch:SchedulingPolicyQuotaSharePolicyIdleResourceAssignmentStrategy":{"type":"string","enum":[{"name":"Fifo","value":"FIFO"}]},"aws-native:batch:SchedulingPolicyShareAttributes":{"properties":{"shareIdentifier":{"type":"string","description":"A share identifier or share identifier prefix. If the string ends with an asterisk (*), this entry specifies the weight factor to use for share identifiers that start with that prefix. The list of share identifiers in a fair-share policy can't overlap. For example, you can't have one that specifies a `shareIdentifier` of `UserA*` and another that specifies a `shareIdentifier` of `UserA1` .\n\nThere can be no more than 500 share identifiers active in a job queue.\n\nThe string is limited to 255 alphanumeric characters, and can be followed by an asterisk (*)."},"weightFactor":{"type":"number","description":"The weight factor for the share identifier. The default value is 1.0. A lower value has a higher priority for compute resources. For example, jobs that use a share identifier with a weight factor of 0.125 (1/8) get 8 times the compute resources of jobs that use a share identifier with a weight factor of 1.\n\nThe smallest supported value is 0.0001, and the largest supported value is 999.9999."}},"type":"object"},"aws-native:batch:ServiceEnvironmentCapacityLimit":{"properties":{"capacityUnit":{"type":"string"},"maxCapacity":{"type":"integer"}},"type":"object"},"aws-native:bedrock:AgentActionGroup":{"description":"Contains the information of an Agent Action Group","properties":{"actionGroupExecutor":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:AgentActionGroupExecutor0Properties"},{"$ref":"#/types/aws-native:bedrock:AgentActionGroupExecutor1Properties"}],"description":"The Amazon Resource Name (ARN) of the Lambda function containing the business logic that is carried out upon invoking the action or the custom control method for handling the information elicited from the user."},"actionGroupName":{"type":"string","description":"Name of the action group"},"actionGroupState":{"$ref":"#/types/aws-native:bedrock:AgentActionGroupState","description":"Specifies whether the action group is available for the agent to invoke or not when sending an [InvokeAgent](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeAgent.html) request."},"apiSchema":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:AgentApiSchema0Properties"},{"$ref":"#/types/aws-native:bedrock:AgentApiSchema1Properties"}],"description":"Contains either details about the S3 object containing the OpenAPI schema for the action group or the JSON or YAML-formatted payload defining the schema. For more information, see [Action group OpenAPI schemas](https://docs.aws.amazon.com//bedrock/latest/userguide/agents-api-schema.html) ."},"description":{"type":"string","description":"Description of action group"},"functionSchema":{"$ref":"#/types/aws-native:bedrock:AgentFunctionSchema","description":"Contains details about the function schema for the action group or the JSON or YAML-formatted payload defining the schema."},"parentActionGroupSignature":{"$ref":"#/types/aws-native:bedrock:AgentActionGroupSignature","description":"If this field is set as `AMAZON.UserInput` , the agent can request the user for additional information when trying to complete a task. The `description` , `apiSchema` , and `actionGroupExecutor` fields must be blank for this action group.\n\nDuring orchestration, if the agent determines that it needs to invoke an API in an action group, but doesn't have enough information to complete the API request, it will invoke this action group instead and return an [Observation](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_Observation.html) reprompting the user for more information."},"skipResourceInUseCheckOnDelete":{"type":"boolean","description":"Specifies whether to allow deleting action group while it is in use."}},"type":"object","required":["actionGroupName"]},"aws-native:bedrock:AgentActionGroupExecutor0Properties":{"description":"Type of Executors for an Action Group","properties":{"lambda":{"type":"string","description":"ARN of a Lambda."}},"type":"object","required":["lambda"]},"aws-native:bedrock:AgentActionGroupExecutor1Properties":{"description":"Type of Executors for an Action Group","properties":{"customControl":{"$ref":"#/types/aws-native:bedrock:AgentCustomControlMethod"}},"type":"object","required":["customControl"]},"aws-native:bedrock:AgentActionGroupSignature":{"description":"Action Group Signature for a BuiltIn Action","type":"string","enum":[{"name":"AmazonUserInput","value":"AMAZON.UserInput"},{"name":"AmazonCodeInterpreter","value":"AMAZON.CodeInterpreter"}]},"aws-native:bedrock:AgentActionGroupState":{"description":"State of the action group","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrock:AgentAdditionalModelRequestFields":{"description":"Additional Model Request Fields for Prompt Configuration","type":"object"},"aws-native:bedrock:AgentAliasHistoryEvent":{"description":"History event for an alias for an Agent.","properties":{"endDate":{"type":"string","description":"Time Stamp."},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentAliasRoutingConfigurationListItem"},"description":"Routing configuration for an Agent alias."},"startDate":{"type":"string","description":"Time Stamp."}},"type":"object"},"aws-native:bedrock:AgentAliasRoutingConfigurationListItem":{"description":"Details about the routing configuration for an Agent alias.","properties":{"agentVersion":{"type":"string","description":"Agent Version."}},"type":"object","required":["agentVersion"]},"aws-native:bedrock:AgentAliasStatus":{"description":"The statuses an Agent Alias can be in.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Prepared","value":"PREPARED"},{"name":"Failed","value":"FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrock:AgentApiSchema0Properties":{"description":"Contains information about the API Schema for the Action Group","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:AgentS3Identifier"}},"type":"object","required":["s3"]},"aws-native:bedrock:AgentApiSchema1Properties":{"description":"Contains information about the API Schema for the Action Group","properties":{"payload":{"type":"string","description":"String OpenAPI Payload"}},"type":"object","required":["payload"]},"aws-native:bedrock:AgentCollaboration":{"description":"Agent collaboration state","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Supervisor","value":"SUPERVISOR"},{"name":"SupervisorRouter","value":"SUPERVISOR_ROUTER"}]},"aws-native:bedrock:AgentCollaborator":{"description":"Agent Collaborator","properties":{"agentDescriptor":{"$ref":"#/types/aws-native:bedrock:AgentCollaboratorAgentDescriptorProperties","description":"Agent descriptor for agent collaborator"},"collaborationInstruction":{"type":"string","description":"Agent collaborator instruction"},"collaboratorName":{"type":"string","description":"Agent collaborator name"},"relayConversationHistory":{"$ref":"#/types/aws-native:bedrock:AgentRelayConversationHistory","description":"The collaborator's relay conversation history."}},"type":"object","required":["agentDescriptor","collaborationInstruction","collaboratorName"]},"aws-native:bedrock:AgentCollaboratorAgentDescriptorProperties":{"description":"Agent descriptor for agent collaborator","properties":{"aliasArn":{"type":"string","description":"Alias ARN for agent descriptor"}},"type":"object"},"aws-native:bedrock:AgentCreationMode":{"description":"Creation Mode for Prompt Configuration.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Overridden","value":"OVERRIDDEN"}]},"aws-native:bedrock:AgentCustomControlMethod":{"description":"Custom control of action execution","type":"string","enum":[{"name":"ReturnControl","value":"RETURN_CONTROL"}]},"aws-native:bedrock:AgentCustomOrchestration":{"description":"Structure for custom orchestration","properties":{"executor":{"$ref":"#/types/aws-native:bedrock:AgentOrchestrationExecutor","description":"The structure of the executor invoking the actions in custom orchestration."}},"type":"object"},"aws-native:bedrock:AgentFunction":{"description":"Function definition","properties":{"description":{"type":"string","description":"Description of function"},"name":{"type":"string","description":"Name for a resource."},"parameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:bedrock:AgentParameterDetail"},"description":"The parameters that the agent elicits from the user to fulfill the function."},"requireConfirmation":{"$ref":"#/types/aws-native:bedrock:AgentRequireConfirmation","description":"Contains information if user confirmation is required to invoke the function."}},"type":"object","required":["name"]},"aws-native:bedrock:AgentFunctionSchema":{"description":"Schema of Functions","properties":{"functions":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentFunction"},"description":"List of Function definitions"}},"type":"object","required":["functions"]},"aws-native:bedrock:AgentGuardrailConfiguration":{"description":"Configuration for a guardrail.","properties":{"guardrailIdentifier":{"type":"string","description":"Identifier for the guardrail, could be the id or the arn"},"guardrailVersion":{"type":"string","description":"Version of the guardrail"}},"type":"object"},"aws-native:bedrock:AgentInferenceConfiguration":{"description":"Configuration for inference in prompt configuration","properties":{"maximumLength":{"type":"number","description":"Maximum length of output"},"stopSequences":{"type":"array","items":{"type":"string"},"description":"List of stop sequences"},"temperature":{"type":"number","description":"Controls randomness, higher values increase diversity"},"topK":{"type":"number","description":"Sample from the k most likely next tokens"},"topP":{"type":"number","description":"Cumulative probability cutoff for token selection"}},"type":"object"},"aws-native:bedrock:AgentKnowledgeBase":{"description":"Agent Knowledge Base","properties":{"description":{"type":"string","description":"Description of the Resource."},"knowledgeBaseId":{"type":"string","description":"Identifier for a resource."},"knowledgeBaseState":{"$ref":"#/types/aws-native:bedrock:AgentKnowledgeBaseState","description":"Specifies whether to use the knowledge base or not when sending an [InvokeAgent](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeAgent.html) request."}},"type":"object","required":["description","knowledgeBaseId"]},"aws-native:bedrock:AgentKnowledgeBaseState":{"description":"State of the knowledge base; whether it is enabled or disabled","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrock:AgentMemoryConfiguration":{"description":"Configuration for memory storage","properties":{"enabledMemoryTypes":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentMemoryType"},"description":"The type of memory that is stored."},"sessionSummaryConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentSessionSummaryConfiguration","description":"Contains the configuration for SESSION_SUMMARY memory type enabled for the agent."},"storageDays":{"type":"number","description":"Maximum number of days to store session details"}},"type":"object"},"aws-native:bedrock:AgentMemoryType":{"description":"Memory type","type":"string","enum":[{"name":"SessionSummary","value":"SESSION_SUMMARY"}]},"aws-native:bedrock:AgentOrchestrationExecutor":{"description":"Types of executors for custom orchestration strategy","properties":{"lambda":{"type":"string","description":"ARN of a Lambda."}},"type":"object","required":["lambda"]},"aws-native:bedrock:AgentOrchestrationType":{"description":"Types of orchestration strategy for agents","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"CustomOrchestration","value":"CUSTOM_ORCHESTRATION"}]},"aws-native:bedrock:AgentParameterDetail":{"description":"Parameter detail","properties":{"description":{"type":"string","description":"Description of function parameter."},"required":{"type":"boolean","description":"Information about if a parameter is required for function call. Default to false."},"type":{"$ref":"#/types/aws-native:bedrock:AgentType","description":"The data type of the parameter."}},"type":"object","required":["type"]},"aws-native:bedrock:AgentPromptConfiguration":{"description":"BasePromptConfiguration per Prompt Type.","properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:AgentAdditionalModelRequestFields","description":"If the Converse or ConverseStream operations support the model, `additionalModelRequestFields` contains additional inference parameters, beyond the base set of inference parameters in the `inferenceConfiguration` field.\n\nFor more information, see [Inference request parameters and response fields for foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-parameters.html) ."},"basePromptTemplate":{"type":"string","description":"Base Prompt Template."},"foundationModel":{"type":"string","description":"The agent's foundation model."},"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentInferenceConfiguration","description":"Contains inference parameters to use when the agent invokes a foundation model in the part of the agent sequence defined by the `promptType` . For more information, see [Inference parameters for foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-parameters.html) ."},"parserMode":{"$ref":"#/types/aws-native:bedrock:AgentCreationMode","description":"Specifies whether to override the default parser Lambda function when parsing the raw foundation model output in the part of the agent sequence defined by the `promptType` . If you set the field as `OVERRIDDEN` , the `overrideLambda` field in the [PromptOverrideConfiguration](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PromptOverrideConfiguration.html) must be specified with the ARN of a Lambda function."},"promptCreationMode":{"$ref":"#/types/aws-native:bedrock:AgentCreationMode","description":"Specifies whether to override the default prompt template for this `promptType` . Set this value to `OVERRIDDEN` to use the prompt that you provide in the `basePromptTemplate` . If you leave it as `DEFAULT` , the agent uses a default prompt template."},"promptState":{"$ref":"#/types/aws-native:bedrock:AgentPromptState","description":"Specifies whether to allow the inline agent to carry out the step specified in the `promptType` . If you set this value to `DISABLED` , the agent skips that step. The default state for each `promptType` is as follows.\n\n- `PRE_PROCESSING` – `ENABLED`\n- `ORCHESTRATION` – `ENABLED`\n- `KNOWLEDGE_BASE_RESPONSE_GENERATION` – `ENABLED`\n- `POST_PROCESSING` – `DISABLED`"},"promptType":{"$ref":"#/types/aws-native:bedrock:AgentPromptType","description":"The step in the agent sequence that this prompt configuration applies to."}},"type":"object"},"aws-native:bedrock:AgentPromptOverrideConfiguration":{"description":"Configuration for prompt override.","properties":{"overrideLambda":{"type":"string","description":"ARN of a Lambda."},"promptConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentPromptConfiguration"},"description":"List of BasePromptConfiguration"}},"type":"object","required":["promptConfigurations"]},"aws-native:bedrock:AgentPromptState":{"description":"Prompt State.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrock:AgentPromptType":{"description":"Prompt Type.","type":"string","enum":[{"name":"PreProcessing","value":"PRE_PROCESSING"},{"name":"Orchestration","value":"ORCHESTRATION"},{"name":"PostProcessing","value":"POST_PROCESSING"},{"name":"RoutingClassifier","value":"ROUTING_CLASSIFIER"},{"name":"MemorySummarization","value":"MEMORY_SUMMARIZATION"},{"name":"KnowledgeBaseResponseGeneration","value":"KNOWLEDGE_BASE_RESPONSE_GENERATION"}]},"aws-native:bedrock:AgentRelayConversationHistory":{"description":"Relay conversation history state","type":"string","enum":[{"name":"ToCollaborator","value":"TO_COLLABORATOR"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrock:AgentRequireConfirmation":{"description":"ENUM to check if action requires user confirmation","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrock:AgentS3Identifier":{"description":"The identifier for the S3 resource.","properties":{"s3BucketName":{"type":"string","description":"A bucket in S3."},"s3ObjectKey":{"type":"string","description":"A object key in S3."}},"type":"object"},"aws-native:bedrock:AgentSessionSummaryConfiguration":{"description":"Configuration for Session Summarization","properties":{"maxRecentSessions":{"type":"number","description":"Maximum number of Sessions to Summarize"}},"type":"object"},"aws-native:bedrock:AgentStatus":{"description":"Schema Type for Action APIs.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Preparing","value":"PREPARING"},{"name":"Prepared","value":"PREPARED"},{"name":"NotPrepared","value":"NOT_PREPARED"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"Versioning","value":"VERSIONING"},{"name":"Updating","value":"UPDATING"}]},"aws-native:bedrock:AgentType":{"description":"Parameter Type","type":"string","enum":[{"name":"String","value":"string"},{"name":"Number","value":"number"},{"name":"Integer","value":"integer"},{"name":"Boolean","value":"boolean"},{"name":"Array","value":"array"}]},"aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModel":{"description":"Model configuration","properties":{"modelArn":{"type":"string","description":"ARN for Foundation Models in Bedrock. These models can be used as base models for model customization jobs"}},"type":"object"},"aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModelSource0Properties":{"description":"Various ways to encode a list of models in a CreateInferenceProfile request","properties":{"copyFrom":{"type":"string","description":"Source arns for a custom inference profile to copy its regional load balancing config from. This\ncan either be a foundation model or predefined inference profile ARN."}},"type":"object","required":["copyFrom"]},"aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModelSourceProperties":{"description":"Various ways to encode a list of models in a CreateInferenceProfile request","properties":{"copyFrom":{"type":"string","description":"Source arns for a custom inference profile to copy its regional load balancing config from. This\ncan either be a foundation model or predefined inference profile ARN."}},"type":"object","required":["copyFrom"]},"aws-native:bedrock:ApplicationInferenceProfileInferenceProfileStatus":{"description":"Status of the Inference Profile","type":"string","enum":[{"name":"Active","value":"ACTIVE"}]},"aws-native:bedrock:ApplicationInferenceProfileInferenceProfileType":{"description":"Type of the Inference Profile","type":"string","enum":[{"name":"Application","value":"APPLICATION"},{"name":"SystemDefined","value":"SYSTEM_DEFINED"}]},"aws-native:bedrock:ApplicationInferenceProfileTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Tag Key"},"value":{"type":"string","description":"Tag Value"}},"type":"object","required":["key","value"]},"aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinition":{"properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionRule"},"description":"The rules definition block of an AutomatedReasoningPolicyDefinition."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionType"},"description":"The types definition block of an AutomatedReasoningPolicyDefinition."},"variables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionVariable"},"description":"The variables definition block of an AutomatedReasoningPolicyDefinition."},"version":{"type":"string","description":"The policy format version."}},"type":"object"},"aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionRule":{"properties":{"alternateExpression":{"type":"string","description":"An alternate expression for this rule"},"expression":{"type":"string","description":"The SMT expression for this rule"},"id":{"type":"string","description":"A unique id within the PolicyDefinition"}},"type":"object","required":["expression","id"]},"aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionType":{"properties":{"description":{"type":"string","description":"A natural language description of this type."},"name":{"type":"string","description":"A name for this type."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionTypeValue"},"description":"A list of valid values for this type."}},"type":"object","required":["name","values"]},"aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionTypeValue":{"properties":{"description":{"type":"string","description":"A natural language description of the type's value."},"value":{"type":"string","description":"The value of the type value."}},"type":"object","required":["value"]},"aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinitionVariable":{"properties":{"description":{"type":"string","description":"A natural language description of this variable."},"name":{"type":"string","description":"A name from this variable."},"type":{"type":"string","description":"A type for this variable."}},"type":"object","required":["description","name","type"]},"aws-native:bedrock:AutomatedReasoningPolicyTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Tag Key"},"value":{"type":"string","description":"Tag Value"}},"type":"object","required":["key","value"]},"aws-native:bedrock:AutomatedReasoningPolicyVersionTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Tag Key"},"value":{"type":"string","description":"Tag Value"}},"type":"object","required":["key","value"]},"aws-native:bedrock:BlueprintStage":{"description":"Stage of the Blueprint","type":"string","enum":[{"name":"Development","value":"DEVELOPMENT"},{"name":"Live","value":"LIVE"}]},"aws-native:bedrock:BlueprintTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Key for the tag"},"value":{"type":"string","description":"Value for the tag"}},"type":"object","required":["key","value"]},"aws-native:bedrock:BlueprintType":{"description":"Modality Type","type":"string","enum":[{"name":"Document","value":"DOCUMENT"},{"name":"Image","value":"IMAGE"},{"name":"Audio","value":"AUDIO"},{"name":"Video","value":"VIDEO"}]},"aws-native:bedrock:DataAutomationProjectAudioExtractionCategory":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating categorical data from audio is enabled."},"typeConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioExtractionCategoryTypeConfiguration","description":"This element contains information about extractions from different types. Used to enable speaker and channel labeling for transcripts."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioExtractionCategoryType"},"description":"The types of data to generate."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectAudioExtractionCategoryType":{"type":"string","enum":[{"name":"AudioContentModeration","value":"AUDIO_CONTENT_MODERATION"},{"name":"Transcript","value":"TRANSCRIPT"},{"name":"TopicContentModeration","value":"TOPIC_CONTENT_MODERATION"}]},"aws-native:bedrock:DataAutomationProjectAudioExtractionCategoryTypeConfiguration":{"properties":{"transcript":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectTranscriptConfiguration","description":"This element allows you to configure different extractions for your transcript data, such as speaker and channel labeling."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectAudioGenerativeOutputLanguage":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"En","value":"EN"}]},"aws-native:bedrock:DataAutomationProjectAudioLanguageConfiguration":{"properties":{"generativeOutputLanguage":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioGenerativeOutputLanguage","description":"The output language of your processing results. This can either be set to `EN` (English) or `DEFAULT` which will output the results in the dominant language of the audio. The dominant language is determined as the language in the audio, spoken the longest in the input audio."},"identifyMultipleLanguages":{"type":"boolean","description":"The toggle determining if you want to detect multiple languages from your audio."},"inputLanguages":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectLanguage"},"description":"The input language of your audio. This can be set to any of the currently supported languages via the language codes."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectAudioOverrideConfiguration":{"properties":{"languageConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioLanguageConfiguration","description":"The output and input language configuration for your audio."},"modalityProcessing":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectModalityProcessingConfiguration","description":"Sets modality processing for audio files. All modalities are enabled by default."},"sensitiveDataConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSensitiveDataConfiguration","description":"Configuration for sensitive data detection and redaction for audio files."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectAudioStandardExtraction":{"properties":{"category":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioExtractionCategory","description":"Settings for generating data from audio."}},"type":"object","required":["category"]},"aws-native:bedrock:DataAutomationProjectAudioStandardGenerativeField":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating descriptions is enabled for audio."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioStandardGenerativeFieldType"},"description":"The types of description to generate."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectAudioStandardGenerativeFieldType":{"type":"string","enum":[{"name":"AudioSummary","value":"AUDIO_SUMMARY"},{"name":"Iab","value":"IAB"},{"name":"TopicSummary","value":"TOPIC_SUMMARY"}]},"aws-native:bedrock:DataAutomationProjectAudioStandardOutputConfiguration":{"properties":{"extraction":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioStandardExtraction","description":"Settings for populating data fields that describe the audio."},"generativeField":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioStandardGenerativeField","description":"Whether to generate descriptions of the data."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectBlueprintItem":{"properties":{"blueprintArn":{"type":"string","description":"ARN of a Blueprint"},"blueprintStage":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectBlueprintStage","description":"The blueprint's stage."},"blueprintVersion":{"type":"string","description":"Blueprint Version"}},"type":"object","required":["blueprintArn"]},"aws-native:bedrock:DataAutomationProjectBlueprintStage":{"description":"Stage of the Blueprint","type":"string","enum":[{"name":"Development","value":"DEVELOPMENT"},{"name":"Live","value":"LIVE"}]},"aws-native:bedrock:DataAutomationProjectChannelLabelingConfiguration":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"State of channel labeling, either enabled or disabled."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectCustomOutputConfiguration":{"description":"Custom output configuration","properties":{"blueprints":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectBlueprintItem"},"description":"A list of blueprints."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectDesiredModality":{"type":"string","enum":[{"name":"Document","value":"DOCUMENT"},{"name":"Image","value":"IMAGE"},{"name":"Video","value":"VIDEO"},{"name":"Audio","value":"AUDIO"}]},"aws-native:bedrock:DataAutomationProjectDocumentBoundingBox":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether bounding boxes are enabled for documents."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectDocumentExtractionGranularity":{"properties":{"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentExtractionGranularityType"},"description":"Granularity settings for documents."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectDocumentExtractionGranularityType":{"type":"string","enum":[{"name":"Document","value":"DOCUMENT"},{"name":"Page","value":"PAGE"},{"name":"Element","value":"ELEMENT"},{"name":"Word","value":"WORD"},{"name":"Line","value":"LINE"}]},"aws-native:bedrock:DataAutomationProjectDocumentOutputAdditionalFileFormat":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether additional file formats are enabled for a project."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectDocumentOutputFormat":{"properties":{"additionalFileFormat":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentOutputAdditionalFileFormat","description":"Output settings for additional file formats."},"textFormat":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentOutputTextFormat","description":"An output text format."}},"type":"object","required":["additionalFileFormat","textFormat"]},"aws-native:bedrock:DataAutomationProjectDocumentOutputTextFormat":{"properties":{"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentOutputTextFormatType"},"description":"The types of output text to generate."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectDocumentOutputTextFormatType":{"type":"string","enum":[{"name":"PlainText","value":"PLAIN_TEXT"},{"name":"Markdown","value":"MARKDOWN"},{"name":"Html","value":"HTML"},{"name":"Csv","value":"CSV"}]},"aws-native:bedrock:DataAutomationProjectDocumentOverrideConfiguration":{"properties":{"modalityProcessing":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectModalityProcessingConfiguration","description":"Sets modality processing for document files. All modalities are enabled by default."},"sensitiveDataConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSensitiveDataConfiguration","description":"Configuration for sensitive data detection and redaction for document files."},"splitter":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSplitterConfiguration","description":"Whether document splitter is enabled for a project."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectDocumentStandardExtraction":{"properties":{"boundingBox":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentBoundingBox","description":"Whether to generate bounding boxes."},"granularity":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentExtractionGranularity","description":"Which granularities to generate data for."}},"type":"object","required":["boundingBox","granularity"]},"aws-native:bedrock:DataAutomationProjectDocumentStandardGenerativeField":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating descriptions is enabled for documents."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectDocumentStandardOutputConfiguration":{"properties":{"extraction":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentStandardExtraction","description":"Settings for populating data fields that describe the document."},"generativeField":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentStandardGenerativeField","description":"Whether to generate descriptions."},"outputFormat":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentOutputFormat","description":"The output format to generate."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectImageBoundingBox":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Bounding box settings for a project."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectImageExtractionCategory":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating categorical data from images is enabled."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageExtractionCategoryType"},"description":"The types of data to generate."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectImageExtractionCategoryType":{"type":"string","enum":[{"name":"ContentModeration","value":"CONTENT_MODERATION"},{"name":"TextDetection","value":"TEXT_DETECTION"},{"name":"Logos","value":"LOGOS"}]},"aws-native:bedrock:DataAutomationProjectImageOverrideConfiguration":{"properties":{"modalityProcessing":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectModalityProcessingConfiguration","description":"Sets modality processing for image files. All modalities are enabled by default."},"sensitiveDataConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSensitiveDataConfiguration","description":"Configuration for sensitive data detection and redaction for image files."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectImageStandardExtraction":{"properties":{"boundingBox":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageBoundingBox","description":"Settings for generating bounding boxes."},"category":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageExtractionCategory","description":"Settings for generating categorical data."}},"type":"object","required":["boundingBox","category"]},"aws-native:bedrock:DataAutomationProjectImageStandardGenerativeField":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating descriptions is enabled for images."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageStandardGenerativeFieldType"},"description":"Settings for generating descriptions of images."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectImageStandardGenerativeFieldType":{"type":"string","enum":[{"name":"ImageSummary","value":"IMAGE_SUMMARY"},{"name":"Iab","value":"IAB"}]},"aws-native:bedrock:DataAutomationProjectImageStandardOutputConfiguration":{"properties":{"extraction":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageStandardExtraction","description":"Settings for populating data fields that describe the image."},"generativeField":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageStandardGenerativeField","description":"Whether to generate descriptions of the data."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectLanguage":{"type":"string","enum":[{"name":"En","value":"EN"},{"name":"De","value":"DE"},{"name":"Es","value":"ES"},{"name":"Fr","value":"FR"},{"name":"It","value":"IT"},{"name":"Pt","value":"PT"},{"name":"Ja","value":"JA"},{"name":"Ko","value":"KO"},{"name":"Cn","value":"CN"},{"name":"Tw","value":"TW"},{"name":"Hk","value":"HK"}]},"aws-native:bedrock:DataAutomationProjectModalityProcessingConfiguration":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Stores the state of the modality for your project, set to either enabled or disabled"}},"type":"object"},"aws-native:bedrock:DataAutomationProjectModalityRoutingConfiguration":{"description":"Modality routing configuration","properties":{"jpeg":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDesiredModality","description":"Sets whether JPEG files are routed to document or image processing."},"mov":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDesiredModality","description":"Sets whether MOV files are routed to audio or video processing."},"mp4":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDesiredModality","description":"Sets whether MP4 files are routed to audio or video processing."},"png":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDesiredModality","description":"Sets whether PNG files are routed to document or image processing."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectOverrideConfiguration":{"description":"Override configuration","properties":{"audio":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioOverrideConfiguration","description":"This element declares whether your project will process audio files."},"document":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentOverrideConfiguration","description":"Additional settings for a project."},"image":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageOverrideConfiguration","description":"This element declares whether your project will process image files."},"modalityRouting":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectModalityRoutingConfiguration","description":"Lets you set which modalities certain file types are processed as."},"video":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoOverrideConfiguration","description":"This element declares whether your project will process video files."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectPiiEntitiesConfiguration":{"properties":{"piiEntityTypes":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectPiiEntityTypes"},"description":"List of PII entity types to detect/redact in the output. Choose from specific entity types (such as ADDRESS, NAME, EMAIL, PHONE, US_SOCIAL_SECURITY_NUMBER) or specify ALL to detect all supported PII types. If not specified, defaults to ALL."},"redactionMaskMode":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectPiiRedactionMaskMode","description":"Defines how detected PII entities are masked in redacted output files. Set to PII to replace all detected entities with a generic [PII] marker regardless of entity type. Set to ENTITY_TYPE to replace each detected entity with its specific type marker (for example, [NAME], [EMAIL], [ADDRESS]). This setting only applies when detectionMode is set to DETECTION_AND_REDACTION. If not specified, defaults to ENTITY_TYPE."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectPiiEntityTypes":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Address","value":"ADDRESS"},{"name":"Age","value":"AGE"},{"name":"Name","value":"NAME"},{"name":"Email","value":"EMAIL"},{"name":"Phone","value":"PHONE"},{"name":"Username","value":"USERNAME"},{"name":"Password","value":"PASSWORD"},{"name":"DriverId","value":"DRIVER_ID"},{"name":"LicensePlate","value":"LICENSE_PLATE"},{"name":"VehicleIdentificationNumber","value":"VEHICLE_IDENTIFICATION_NUMBER"},{"name":"CreditDebitCardCvv","value":"CREDIT_DEBIT_CARD_CVV"},{"name":"CreditDebitCardExpiry","value":"CREDIT_DEBIT_CARD_EXPIRY"},{"name":"CreditDebitCardNumber","value":"CREDIT_DEBIT_CARD_NUMBER"},{"name":"Pin","value":"PIN"},{"name":"InternationalBankAccountNumber","value":"INTERNATIONAL_BANK_ACCOUNT_NUMBER"},{"name":"SwiftCode","value":"SWIFT_CODE"},{"name":"IpAddress","value":"IP_ADDRESS"},{"name":"MacAddress","value":"MAC_ADDRESS"},{"name":"Url","value":"URL"},{"name":"AwsAccessKey","value":"AWS_ACCESS_KEY"},{"name":"AwsSecretKey","value":"AWS_SECRET_KEY"},{"name":"UsBankAccountNumber","value":"US_BANK_ACCOUNT_NUMBER"},{"name":"UsBankRoutingNumber","value":"US_BANK_ROUTING_NUMBER"},{"name":"UsIndividualTaxIdentificationNumber","value":"US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER"},{"name":"UsPassportNumber","value":"US_PASSPORT_NUMBER"},{"name":"UsSocialSecurityNumber","value":"US_SOCIAL_SECURITY_NUMBER"},{"name":"CaHealthNumber","value":"CA_HEALTH_NUMBER"},{"name":"CaSocialInsuranceNumber","value":"CA_SOCIAL_INSURANCE_NUMBER"},{"name":"UkNationalHealthServiceNumber","value":"UK_NATIONAL_HEALTH_SERVICE_NUMBER"},{"name":"UkNationalInsuranceNumber","value":"UK_NATIONAL_INSURANCE_NUMBER"},{"name":"UkUniqueTaxpayerReferenceNumber","value":"UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER"}]},"aws-native:bedrock:DataAutomationProjectPiiRedactionMaskMode":{"type":"string","enum":[{"name":"Pii","value":"PII"},{"name":"EntityType","value":"ENTITY_TYPE"}]},"aws-native:bedrock:DataAutomationProjectProjectType":{"description":"Type of the DataAutomationProject - Sync or Async","type":"string","enum":[{"name":"Async","value":"ASYNC"},{"name":"Sync","value":"SYNC"}]},"aws-native:bedrock:DataAutomationProjectSensitiveDataConfiguration":{"properties":{"detectionMode":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSensitiveDataDetectionMode","description":"Specifies the mode for handling sensitive data detection. Set to DETECTION to only identify sensitive data without modifying content - this produces one output file per detection scope containing detection information with original unredacted content. Set to DETECTION_AND_REDACTION to both identify and mask sensitive data - this produces two output files per detection scope: one unredacted file with detection information and one redacted file with masking applied to sensitive content. For example, if detectionScope includes both STANDARD and CUSTOM with DETECTION_AND_REDACTION mode, four output files will be generated (two for standard output and two for custom output)."},"detectionScope":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSensitiveDataDetectionScope"},"description":"Defines which BDA output types to apply sensitive data detection to. Specify STANDARD to detect sensitive data in standard output, CUSTOM to detect in custom output (blueprint-based extraction), or both to apply detection to both output types. If not specified, defaults to both STANDARD and CUSTOM. The number of output files generated depends on both the detection mode and the scopes selected - each scope specified will produce its own set of output files according to the detection mode configured."},"piiEntitiesConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectPiiEntitiesConfiguration","description":"Configuration for detecting and redacting Personally Identifiable Information (PII) entities."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectSensitiveDataDetectionMode":{"type":"string","enum":[{"name":"Detection","value":"DETECTION"},{"name":"DetectionAndRedaction","value":"DETECTION_AND_REDACTION"}]},"aws-native:bedrock:DataAutomationProjectSensitiveDataDetectionScope":{"type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:bedrock:DataAutomationProjectSpeakerLabelingConfiguration":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"State of speaker labeling, either enabled or disabled."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectSplitterConfiguration":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether document splitter is enabled for a project."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectStage":{"description":"Stage of the Project","type":"string","enum":[{"name":"Development","value":"DEVELOPMENT"},{"name":"Live","value":"LIVE"}]},"aws-native:bedrock:DataAutomationProjectStandardOutputConfiguration":{"description":"Standard output configuration","properties":{"audio":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectAudioStandardOutputConfiguration","description":"Settings for processing audio."},"document":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectDocumentStandardOutputConfiguration","description":"Settings for processing documents."},"image":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectImageStandardOutputConfiguration","description":"Settings for processing images."},"video":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoStandardOutputConfiguration","description":"Settings for processing video."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrock:DataAutomationProjectStatus":{"type":"string","enum":[{"name":"Completed","value":"COMPLETED"},{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrock:DataAutomationProjectTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Key for the tag"},"value":{"type":"string","description":"Value for the tag"}},"type":"object","required":["key","value"]},"aws-native:bedrock:DataAutomationProjectTranscriptConfiguration":{"properties":{"channelLabeling":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectChannelLabelingConfiguration","description":"Enables channel labeling. Each audio channel will be labeled with a number, and the transcript will indicate which channel is being used."},"speakerLabeling":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSpeakerLabelingConfiguration","description":"Enables speaker labeling. Each speaker within a transcript will recieve a number, and the transcript will note which speaker is talking."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectVideoBoundingBox":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether bounding boxes are enabled for video."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectVideoExtractionCategory":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating categorical data from video is enabled."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoExtractionCategoryType"},"description":"The types of data to generate."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectVideoExtractionCategoryType":{"type":"string","enum":[{"name":"ContentModeration","value":"CONTENT_MODERATION"},{"name":"TextDetection","value":"TEXT_DETECTION"},{"name":"Transcript","value":"TRANSCRIPT"},{"name":"Logos","value":"LOGOS"}]},"aws-native:bedrock:DataAutomationProjectVideoOverrideConfiguration":{"properties":{"modalityProcessing":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectModalityProcessingConfiguration","description":"Sets modality processing for video files. All modalities are enabled by default."},"sensitiveDataConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectSensitiveDataConfiguration","description":"Configuration for sensitive data detection and redaction for video files."}},"type":"object"},"aws-native:bedrock:DataAutomationProjectVideoStandardExtraction":{"properties":{"boundingBox":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoBoundingBox","description":"Settings for generating bounding boxes."},"category":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoExtractionCategory","description":"Settings for generating categorical data."}},"type":"object","required":["boundingBox","category"]},"aws-native:bedrock:DataAutomationProjectVideoStandardGenerativeField":{"properties":{"state":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectState","description":"Whether generating descriptions is enabled for video."},"types":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoStandardGenerativeFieldType"},"description":"The types of description to generate."}},"type":"object","required":["state"]},"aws-native:bedrock:DataAutomationProjectVideoStandardGenerativeFieldType":{"type":"string","enum":[{"name":"VideoSummary","value":"VIDEO_SUMMARY"},{"name":"Iab","value":"IAB"},{"name":"ChapterSummary","value":"CHAPTER_SUMMARY"}]},"aws-native:bedrock:DataAutomationProjectVideoStandardOutputConfiguration":{"properties":{"extraction":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoStandardExtraction","description":"Settings for populating data fields that describe the video."},"generativeField":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectVideoStandardGenerativeField","description":"Whether to generate descriptions of the video."}},"type":"object"},"aws-native:bedrock:DataSourceBedrockDataAutomationConfiguration":{"description":"Settings for a Bedrock Data Automation used to parse documents for a data source.","properties":{"parsingModality":{"$ref":"#/types/aws-native:bedrock:DataSourceParsingModality","description":"Specifies whether to enable parsing of multimodal data, including both text and/or images."}},"type":"object"},"aws-native:bedrock:DataSourceBedrockFoundationModelConfiguration":{"description":"Settings for a foundation model used to parse documents for a data source.","properties":{"modelArn":{"type":"string","description":"The ARN of the foundation model to use for parsing."},"parsingModality":{"$ref":"#/types/aws-native:bedrock:DataSourceParsingModality","description":"Specifies whether to enable parsing of multimodal data, including both text and/or images."},"parsingPrompt":{"$ref":"#/types/aws-native:bedrock:DataSourceParsingPrompt","description":"Instructions for interpreting the contents of a document."}},"type":"object","required":["modelArn"]},"aws-native:bedrock:DataSourceBedrockFoundationModelContextEnrichmentConfiguration":{"description":"Bedrock Foundation Model configuration to be used for Context Enrichment.","properties":{"enrichmentStrategyConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceEnrichmentStrategyConfiguration","description":"The enrichment stategy used to provide additional context. For example, Neptune GraphRAG uses Amazon Bedrock foundation models to perform chunk entity extraction."},"modelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the model used to create vector embeddings for the knowledge base."}},"type":"object","required":["enrichmentStrategyConfiguration","modelArn"]},"aws-native:bedrock:DataSourceChunkingConfiguration":{"description":"Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.","properties":{"chunkingStrategy":{"$ref":"#/types/aws-native:bedrock:DataSourceChunkingStrategy","description":"Knowledge base can split your source data into chunks. A *chunk* refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried. You have the following options for chunking your data. If you opt for `NONE` , then you may want to pre-process your files by splitting them up such that each file corresponds to a chunk.\n\n- `FIXED_SIZE` – Amazon Bedrock splits your source data into chunks of the approximate size that you set in the `fixedSizeChunkingConfiguration` .\n- `HIERARCHICAL` – Split documents into layers of chunks where the first layer contains large chunks, and the second layer contains smaller chunks derived from the first layer.\n- `SEMANTIC` – Split documents into chunks based on groups of similar content derived with natural language processing.\n- `NONE` – Amazon Bedrock treats each file as one chunk. If you choose this option, you may want to pre-process your documents by splitting them into separate files."},"fixedSizeChunkingConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceFixedSizeChunkingConfiguration","description":"Configurations for when you choose fixed-size chunking. If you set the `chunkingStrategy` as `NONE` , exclude this field."},"hierarchicalChunkingConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceHierarchicalChunkingConfiguration","description":"Settings for hierarchical document chunking for a data source. Hierarchical chunking splits documents into layers of chunks where the first layer contains large chunks, and the second layer contains smaller chunks derived from the first layer."},"semanticChunkingConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSemanticChunkingConfiguration","description":"Settings for semantic document chunking for a data source. Semantic chunking splits a document into into smaller documents based on groups of similar content derived from the text with natural language processing."}},"type":"object","required":["chunkingStrategy"]},"aws-native:bedrock:DataSourceChunkingStrategy":{"description":"Knowledge base can split your source data into chunks. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried. You have the following options for chunking your data. If you opt for NONE, then you may want to pre-process your files by splitting them up such that each file corresponds to a chunk.","type":"string","enum":[{"name":"FixedSize","value":"FIXED_SIZE"},{"name":"None","value":"NONE"},{"name":"Hierarchical","value":"HIERARCHICAL"},{"name":"Semantic","value":"SEMANTIC"}]},"aws-native:bedrock:DataSourceConfiguration":{"description":"Specifies a raw data source location to ingest.","properties":{"confluenceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceConfluenceDataSourceConfiguration","description":"The configuration information to connect to Confluence as your data source.\n\n\u003e Confluence data source connector is in preview release and is subject to change."},"s3Configuration":{"$ref":"#/types/aws-native:bedrock:DataSourceS3DataSourceConfiguration","description":"The configuration information to connect to Amazon S3 as your data source."},"salesforceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSalesforceDataSourceConfiguration","description":"The configuration information to connect to Salesforce as your data source.\n\n\u003e Salesforce data source connector is in preview release and is subject to change."},"sharePointConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSharePointDataSourceConfiguration","description":"The configuration information to connect to SharePoint as your data source.\n\n\u003e SharePoint data source connector is in preview release and is subject to change."},"type":{"$ref":"#/types/aws-native:bedrock:DataSourceType","description":"The type of data source.","replaceOnChanges":true},"webConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceWebDataSourceConfiguration","description":"The configuration of web URLs to crawl for your data source. You should be authorized to crawl the URLs.\n\n\u003e Crawling web URLs as your data source is in preview release and is subject to change."}},"type":"object","required":["type"]},"aws-native:bedrock:DataSourceConfluenceCrawlerConfiguration":{"description":"The configuration of the Confluence content. For example, configuring specific types of Confluence content.","properties":{"filterConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceCrawlFilterConfiguration","description":"The configuration of filtering the Confluence content. For example, configuring regular expression patterns to include or exclude certain content."}},"type":"object"},"aws-native:bedrock:DataSourceConfluenceDataSourceConfiguration":{"description":"The configuration information to connect to Confluence as your data source.","properties":{"crawlerConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceConfluenceCrawlerConfiguration","description":"The configuration of the Confluence content. For example, configuring specific types of Confluence content."},"sourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceConfluenceSourceConfiguration","description":"The endpoint information to connect to your Confluence data source."}},"type":"object","required":["sourceConfiguration"]},"aws-native:bedrock:DataSourceConfluenceSourceConfiguration":{"description":"The endpoint information to connect to your Confluence data source.","properties":{"authType":{"$ref":"#/types/aws-native:bedrock:DataSourceConfluenceSourceConfigurationAuthType","description":"The supported authentication type to authenticate and connect to your Confluence instance."},"credentialsSecretArn":{"type":"string","description":"The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your Confluence instance URL. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see Confluence connection configuration."},"hostType":{"$ref":"#/types/aws-native:bedrock:DataSourceConfluenceSourceConfigurationHostType","description":"The supported host type, whether online/cloud or server/on-premises."},"hostUrl":{"type":"string","description":"The Confluence host URL or instance URL."}},"type":"object","required":["authType","credentialsSecretArn","hostType","hostUrl"]},"aws-native:bedrock:DataSourceConfluenceSourceConfigurationAuthType":{"description":"The supported authentication type to authenticate and connect to your Confluence instance.","type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Oauth2ClientCredentials","value":"OAUTH2_CLIENT_CREDENTIALS"}]},"aws-native:bedrock:DataSourceConfluenceSourceConfigurationHostType":{"description":"The supported host type, whether online/cloud or server/on-premises.","type":"string","enum":[{"name":"Saas","value":"SAAS"}]},"aws-native:bedrock:DataSourceContextEnrichmentConfiguration":{"description":"Additional Enrichment Configuration for example when using GraphRag.","properties":{"bedrockFoundationModelConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceBedrockFoundationModelContextEnrichmentConfiguration","description":"The configuration of the Amazon Bedrock foundation model used for context enrichment."},"type":{"$ref":"#/types/aws-native:bedrock:DataSourceContextEnrichmentType","description":"The method used for context enrichment. It must be Amazon Bedrock foundation models."}},"type":"object","required":["type"]},"aws-native:bedrock:DataSourceContextEnrichmentType":{"description":"Enrichment type to be used for the vector database.","type":"string","enum":[{"name":"BedrockFoundationModel","value":"BEDROCK_FOUNDATION_MODEL"}]},"aws-native:bedrock:DataSourceCrawlFilterConfiguration":{"description":"The type of filtering that you want to apply to certain objects or content of the data source. For example, the PATTERN type is regular expression patterns you can apply to filter your content.","properties":{"patternObjectFilter":{"$ref":"#/types/aws-native:bedrock:DataSourcePatternObjectFilterConfiguration","description":"The configuration of filtering certain objects or content types of the data source."},"type":{"$ref":"#/types/aws-native:bedrock:DataSourceCrawlFilterConfigurationType","description":"The crawl filter type."}},"type":"object","required":["type"]},"aws-native:bedrock:DataSourceCrawlFilterConfigurationType":{"description":"The crawl filter type.","type":"string","enum":[{"name":"Pattern","value":"PATTERN"}]},"aws-native:bedrock:DataSourceCustomTransformationConfiguration":{"description":"Settings for customizing steps in the data source content ingestion pipeline.","properties":{"intermediateStorage":{"$ref":"#/types/aws-native:bedrock:DataSourceIntermediateStorage","description":"An S3 bucket path for input and output objects."},"transformations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataSourceTransformation"},"description":"A list of Lambda functions that process documents."}},"type":"object","required":["intermediateStorage","transformations"]},"aws-native:bedrock:DataSourceDataDeletionPolicy":{"description":"The deletion policy for the data source.","type":"string","enum":[{"name":"Retain","value":"RETAIN"},{"name":"Delete","value":"DELETE"}]},"aws-native:bedrock:DataSourceEnrichmentStrategyConfiguration":{"description":"Strategy to be used when using Bedrock Foundation Model for Context Enrichment.","properties":{"method":{"$ref":"#/types/aws-native:bedrock:DataSourceEnrichmentStrategyMethod","description":"The method used for the context enrichment strategy."}},"type":"object","required":["method"]},"aws-native:bedrock:DataSourceEnrichmentStrategyMethod":{"description":"Enrichment Strategy method.","type":"string","enum":[{"name":"ChunkEntityExtraction","value":"CHUNK_ENTITY_EXTRACTION"}]},"aws-native:bedrock:DataSourceFixedSizeChunkingConfiguration":{"description":"Configurations for when you choose fixed-size chunking. If you set the chunkingStrategy as NONE, exclude this field.","properties":{"maxTokens":{"type":"integer","description":"The maximum number of tokens to include in a chunk."},"overlapPercentage":{"type":"integer","description":"The percentage of overlap between adjacent chunks of a data source."}},"type":"object","required":["maxTokens","overlapPercentage"]},"aws-native:bedrock:DataSourceHierarchicalChunkingConfiguration":{"description":"Configurations for when you choose hierarchical chunking. If you set the chunkingStrategy as NONE, exclude this field.","properties":{"levelConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataSourceHierarchicalChunkingLevelConfiguration"},"description":"Token settings for each layer."},"overlapTokens":{"type":"integer","description":"The number of tokens to repeat across chunks in the same layer."}},"type":"object","required":["levelConfigurations","overlapTokens"]},"aws-native:bedrock:DataSourceHierarchicalChunkingLevelConfiguration":{"description":"Token settings for a layer in a hierarchical chunking configuration.","properties":{"maxTokens":{"type":"integer","description":"The maximum number of tokens that a chunk can contain in this layer."}},"type":"object","required":["maxTokens"]},"aws-native:bedrock:DataSourceIntermediateStorage":{"description":"A location for storing content from data sources temporarily as it is processed by custom components in the ingestion pipeline.","properties":{"s3Location":{"$ref":"#/types/aws-native:bedrock:DataSourceS3Location","description":"An S3 bucket path."}},"type":"object","required":["s3Location"]},"aws-native:bedrock:DataSourceParsingConfiguration":{"description":"Settings for parsing document contents","properties":{"bedrockDataAutomationConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceBedrockDataAutomationConfiguration","description":"If you specify `BEDROCK_DATA_AUTOMATION` as the parsing strategy for ingesting your data source, use this object to modify configurations for using the Amazon Bedrock Data Automation parser."},"bedrockFoundationModelConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceBedrockFoundationModelConfiguration","description":"If you specify `BEDROCK_FOUNDATION_MODEL` as the parsing strategy for ingesting your data source, use this object to modify configurations for using a foundation model to parse documents."},"parsingStrategy":{"$ref":"#/types/aws-native:bedrock:DataSourceParsingStrategy","description":"The parsing strategy for the data source."}},"type":"object","required":["parsingStrategy"]},"aws-native:bedrock:DataSourceParsingModality":{"description":"Determine how will parsed content be stored.","type":"string","enum":[{"name":"Multimodal","value":"MULTIMODAL"}]},"aws-native:bedrock:DataSourceParsingPrompt":{"description":"Instructions for interpreting the contents of a document.","properties":{"parsingPromptText":{"type":"string","description":"Instructions for interpreting the contents of a document."}},"type":"object","required":["parsingPromptText"]},"aws-native:bedrock:DataSourceParsingStrategy":{"description":"The parsing strategy for the data source.","type":"string","enum":[{"name":"BedrockFoundationModel","value":"BEDROCK_FOUNDATION_MODEL"},{"name":"BedrockDataAutomation","value":"BEDROCK_DATA_AUTOMATION"}]},"aws-native:bedrock:DataSourcePatternObjectFilter":{"description":"The specific filters applied to your data source content. You can filter out or include certain content.","properties":{"exclusionFilters":{"type":"array","items":{"type":"string"}},"inclusionFilters":{"type":"array","items":{"type":"string"}},"objectType":{"type":"string","description":"The supported object type or content type of the data source."}},"type":"object","required":["objectType"]},"aws-native:bedrock:DataSourcePatternObjectFilterConfiguration":{"description":"The configuration of specific filters applied to your data source content. You can filter out or include certain content.","properties":{"filters":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataSourcePatternObjectFilter"},"description":"The configuration of specific filters applied to your data source content. You can filter out or include certain content."}},"type":"object","required":["filters"]},"aws-native:bedrock:DataSourceS3DataSourceConfiguration":{"description":"The configuration information to connect to Amazon S3 as your data source.","properties":{"bucketArn":{"type":"string","description":"The ARN of the bucket that contains the data source."},"bucketOwnerAccountId":{"type":"string","description":"The account ID for the owner of the S3 bucket."},"inclusionPrefixes":{"type":"array","items":{"type":"string"},"description":"A list of S3 prefixes that define the object containing the data sources."}},"type":"object","required":["bucketArn"]},"aws-native:bedrock:DataSourceS3Location":{"description":"An Amazon S3 location.","properties":{"uri":{"type":"string","description":"The location's URI"}},"type":"object","required":["uri"]},"aws-native:bedrock:DataSourceSalesforceCrawlerConfiguration":{"description":"The configuration of filtering the Salesforce content. For example, configuring regular expression patterns to include or exclude certain content.","properties":{"filterConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceCrawlFilterConfiguration","description":"The configuration of filtering the Salesforce content. For example, configuring regular expression patterns to include or exclude certain content."}},"type":"object"},"aws-native:bedrock:DataSourceSalesforceDataSourceConfiguration":{"description":"The configuration information to connect to Salesforce as your data source.","properties":{"crawlerConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSalesforceCrawlerConfiguration","description":"The configuration of the Salesforce content. For example, configuring specific types of Salesforce content."},"sourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSalesforceSourceConfiguration","description":"The endpoint information to connect to your Salesforce data source."}},"type":"object","required":["sourceConfiguration"]},"aws-native:bedrock:DataSourceSalesforceSourceConfiguration":{"description":"The endpoint information to connect to your Salesforce data source.","properties":{"authType":{"$ref":"#/types/aws-native:bedrock:DataSourceSalesforceSourceConfigurationAuthType","description":"The supported authentication type to authenticate and connect to your Salesforce instance."},"credentialsSecretArn":{"type":"string","description":"The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your Salesforce instance URL. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see Salesforce connection configuration."},"hostUrl":{"type":"string","description":"The Salesforce host URL or instance URL."}},"type":"object","required":["authType","credentialsSecretArn","hostUrl"]},"aws-native:bedrock:DataSourceSalesforceSourceConfigurationAuthType":{"description":"The supported authentication type to authenticate and connect to your Salesforce instance.","type":"string","enum":[{"name":"Oauth2ClientCredentials","value":"OAUTH2_CLIENT_CREDENTIALS"}]},"aws-native:bedrock:DataSourceSeedUrl":{"description":"A seed url object.","properties":{"url":{"type":"string","description":"A web url."}},"type":"object","required":["url"]},"aws-native:bedrock:DataSourceSemanticChunkingConfiguration":{"description":"Configurations for when you choose semantic chunking. If you set the chunkingStrategy as NONE, exclude this field.","properties":{"breakpointPercentileThreshold":{"type":"integer","description":"The dissimilarity threshold for splitting chunks."},"bufferSize":{"type":"integer","description":"The buffer size."},"maxTokens":{"type":"integer","description":"The maximum number of tokens that a chunk can contain."}},"type":"object","required":["breakpointPercentileThreshold","bufferSize","maxTokens"]},"aws-native:bedrock:DataSourceServerSideEncryptionConfiguration":{"description":"Contains details about the server-side encryption for the data source.","properties":{"kmsKeyArn":{"type":"string","description":"The ARN of the AWS KMS key used to encrypt the resource."}},"type":"object"},"aws-native:bedrock:DataSourceSharePointCrawlerConfiguration":{"description":"The configuration of the SharePoint content. For example, configuring specific types of SharePoint content.","properties":{"filterConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceCrawlFilterConfiguration","description":"The configuration of filtering the SharePoint content. For example, configuring regular expression patterns to include or exclude certain content."}},"type":"object"},"aws-native:bedrock:DataSourceSharePointDataSourceConfiguration":{"description":"The configuration information to connect to SharePoint as your data source.","properties":{"crawlerConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSharePointCrawlerConfiguration","description":"The configuration of the SharePoint content. For example, configuring specific types of SharePoint content."},"sourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceSharePointSourceConfiguration","description":"The endpoint information to connect to your SharePoint data source."}},"type":"object","required":["sourceConfiguration"]},"aws-native:bedrock:DataSourceSharePointSourceConfiguration":{"description":"The endpoint information to connect to your SharePoint data source.","properties":{"authType":{"$ref":"#/types/aws-native:bedrock:DataSourceSharePointSourceConfigurationAuthType","description":"The supported authentication type to authenticate and connect to your SharePoint site/sites."},"credentialsSecretArn":{"type":"string","description":"The Amazon Resource Name of an AWS Secrets Manager secret that stores your authentication credentials for your SharePoint site/sites. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see SharePoint connection configuration."},"domain":{"type":"string","description":"The domain of your SharePoint instance or site URL/URLs."},"hostType":{"$ref":"#/types/aws-native:bedrock:DataSourceSharePointSourceConfigurationHostType","description":"The supported host type, whether online/cloud or server/on-premises."},"siteUrls":{"type":"array","items":{"type":"string"},"description":"A list of one or more SharePoint site URLs."},"tenantId":{"type":"string","description":"The identifier of your Microsoft 365 tenant."}},"type":"object","required":["authType","credentialsSecretArn","domain","hostType","siteUrls"]},"aws-native:bedrock:DataSourceSharePointSourceConfigurationAuthType":{"description":"The supported authentication type to authenticate and connect to your SharePoint site/sites.","type":"string","enum":[{"name":"Oauth2ClientCredentials","value":"OAUTH2_CLIENT_CREDENTIALS"},{"name":"Oauth2SharepointAppOnlyClientCredentials","value":"OAUTH2_SHAREPOINT_APP_ONLY_CLIENT_CREDENTIALS"}]},"aws-native:bedrock:DataSourceSharePointSourceConfigurationHostType":{"description":"The supported host type, whether online/cloud or server/on-premises.","type":"string","enum":[{"name":"Online","value":"ONLINE"}]},"aws-native:bedrock:DataSourceStatus":{"description":"The status of a data source.","type":"string","enum":[{"name":"Available","value":"AVAILABLE"},{"name":"Deleting","value":"DELETING"},{"name":"DeleteUnsuccessful","value":"DELETE_UNSUCCESSFUL"}]},"aws-native:bedrock:DataSourceTransformation":{"description":"A Lambda function that processes documents.","properties":{"stepToApply":{"$ref":"#/types/aws-native:bedrock:DataSourceTransformationStepToApply","description":"When the service applies the transformation."},"transformationFunction":{"$ref":"#/types/aws-native:bedrock:DataSourceTransformationFunction","description":"A Lambda function that processes documents."}},"type":"object","required":["stepToApply","transformationFunction"]},"aws-native:bedrock:DataSourceTransformationFunction":{"description":"A Lambda function that processes documents.","properties":{"transformationLambdaConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceTransformationLambdaConfiguration","description":"The Lambda function."}},"type":"object","required":["transformationLambdaConfiguration"]},"aws-native:bedrock:DataSourceTransformationLambdaConfiguration":{"description":"A Lambda function that processes documents.","properties":{"lambdaArn":{"type":"string","description":"The function's ARN identifier."}},"type":"object","required":["lambdaArn"]},"aws-native:bedrock:DataSourceTransformationStepToApply":{"description":"When the service applies the transformation.","type":"string","enum":[{"name":"PostChunking","value":"POST_CHUNKING"}]},"aws-native:bedrock:DataSourceType":{"description":"The type of the data source location.","type":"string","enum":[{"name":"S3","value":"S3"},{"name":"Confluence","value":"CONFLUENCE"},{"name":"Salesforce","value":"SALESFORCE"},{"name":"Sharepoint","value":"SHAREPOINT"},{"name":"Web","value":"WEB"},{"name":"Custom","value":"CUSTOM"},{"name":"RedshiftMetadata","value":"REDSHIFT_METADATA"}]},"aws-native:bedrock:DataSourceUrlConfiguration":{"description":"A url configuration.","properties":{"seedUrls":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:DataSourceSeedUrl"},"description":"One or more seed or starting point URLs."}},"type":"object","required":["seedUrls"]},"aws-native:bedrock:DataSourceVectorIngestionConfiguration":{"description":"Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.","properties":{"chunkingConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceChunkingConfiguration","description":"Details about how to chunk the documents in the data source. A *chunk* refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.","replaceOnChanges":true},"contextEnrichmentConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceContextEnrichmentConfiguration","description":"The context enrichment configuration used for ingestion of the data into the vector store."},"customTransformationConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceCustomTransformationConfiguration","description":"A custom document transformer for parsed data source documents."},"parsingConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceParsingConfiguration","description":"Configurations for a parser to use for parsing documents in your data source. If you exclude this field, the default parser will be used.","replaceOnChanges":true}},"type":"object"},"aws-native:bedrock:DataSourceWebCrawlerConfiguration":{"description":"Configuration for the web crawler.","properties":{"crawlerLimits":{"$ref":"#/types/aws-native:bedrock:DataSourceWebCrawlerLimits","description":"The configuration of crawl limits for the web URLs."},"exclusionFilters":{"type":"array","items":{"type":"string"},"description":"A list of one or more exclusion regular expression patterns to exclude certain URLs. If you specify an inclusion and exclusion filter/pattern and both match a URL, the exclusion filter takes precedence and the web content of the URL isn’t crawled."},"inclusionFilters":{"type":"array","items":{"type":"string"},"description":"A list of one or more inclusion regular expression patterns to include certain URLs. If you specify an inclusion and exclusion filter/pattern and both match a URL, the exclusion filter takes precedence and the web content of the URL isn’t crawled."},"scope":{"$ref":"#/types/aws-native:bedrock:DataSourceWebScopeType","description":"The scope of what is crawled for your URLs.\n\nYou can choose to crawl only web pages that belong to the same host or primary domain. For example, only web pages that contain the seed URL \"https://docs.aws.amazon.com/bedrock/latest/userguide/\" and no other domains. You can choose to include sub domains in addition to the host or primary domain. For example, web pages that contain \"aws.amazon.com\" can also include sub domain \"docs.aws.amazon.com\"."},"userAgent":{"type":"string","description":"The suffix that will be included in the user agent header."},"userAgentHeader":{"type":"string","description":"The full user agent header, including UUID and suffix."}},"type":"object"},"aws-native:bedrock:DataSourceWebCrawlerLimits":{"description":"Limit settings for the web crawler.","properties":{"maxPages":{"type":"integer","description":"Maximum number of pages the crawler can crawl."},"rateLimit":{"type":"integer","description":"Rate of web URLs retrieved per minute."}},"type":"object"},"aws-native:bedrock:DataSourceWebDataSourceConfiguration":{"description":"Configures a web data source location.","properties":{"crawlerConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceWebCrawlerConfiguration","description":"The Web Crawler configuration details for the web data source."},"sourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceWebSourceConfiguration","description":"The source configuration details for the web data source."}},"type":"object","required":["sourceConfiguration"]},"aws-native:bedrock:DataSourceWebScopeType":{"description":"The scope that a web crawl job will be restricted to.","type":"string","enum":[{"name":"HostOnly","value":"HOST_ONLY"},{"name":"Subdomains","value":"SUBDOMAINS"}]},"aws-native:bedrock:DataSourceWebSourceConfiguration":{"description":"A web source configuration.","properties":{"urlConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceUrlConfiguration","description":"The configuration of the URL/URLs."}},"type":"object","required":["urlConfiguration"]},"aws-native:bedrock:FlowAdditionalModelRequestFields":{"type":"object"},"aws-native:bedrock:FlowAgentFlowNodeConfiguration":{"description":"Agent flow node configuration","properties":{"agentAliasArn":{"type":"string","description":"Arn representation of the Agent Alias."}},"type":"object","required":["agentAliasArn"]},"aws-native:bedrock:FlowAliasConcurrencyConfiguration":{"properties":{"maxConcurrency":{"type":"number","description":"Number of nodes executed concurrently at a time"},"type":{"$ref":"#/types/aws-native:bedrock:FlowAliasConcurrencyType","description":"The type of concurrency to use for parallel node execution. Specify one of the following options:\n\n- `Automatic` - Amazon Bedrock determines which nodes can be executed in parallel based on the flow definition and its dependencies.\n- `Manual` - You specify which nodes can be executed in parallel."}},"type":"object","required":["type"]},"aws-native:bedrock:FlowAliasConcurrencyType":{"type":"string","enum":[{"name":"Automatic","value":"Automatic"},{"name":"Manual","value":"Manual"}]},"aws-native:bedrock:FlowAliasRoutingConfigurationListItem":{"description":"Details about the routing configuration for a Flow alias.","properties":{"flowVersion":{"type":"string","description":"Version."}},"type":"object"},"aws-native:bedrock:FlowCollectorFlowNodeConfiguration":{"description":"Collector flow node configuration","type":"object"},"aws-native:bedrock:FlowCondition":{"description":"Condition branch for a condition node","properties":{"expression":{"type":"string","description":"Expression for a condition in a flow"},"name":{"type":"string","description":"Name of a condition in a flow"}},"type":"object","required":["name"]},"aws-native:bedrock:FlowConditionFlowNodeConfiguration":{"description":"Condition flow node configuration","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowCondition"},"description":"List of conditions in a condition node"}},"type":"object","required":["conditions"]},"aws-native:bedrock:FlowConditionalConnectionConfiguration":{"description":"Conditional connection configuration","properties":{"condition":{"type":"string","description":"Name of a condition in a flow"}},"type":"object","required":["condition"]},"aws-native:bedrock:FlowConnection":{"description":"Flow connection","properties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowConnectionConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowConnectionConfiguration1Properties"}],"description":"The configuration of the connection."},"name":{"type":"string","description":"Name of a connection in a flow"},"source":{"type":"string","description":"Name of a node in a flow"},"target":{"type":"string","description":"Name of a node in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowConnectionType","description":"Whether the source node that the connection begins from is a condition node ( `Conditional` ) or not ( `Data` )."}},"type":"object","required":["name","source","target","type"]},"aws-native:bedrock:FlowConnectionConfiguration0Properties":{"description":"Connection configuration","properties":{"data":{"$ref":"#/types/aws-native:bedrock:FlowDataConnectionConfiguration"}},"type":"object","required":["data"]},"aws-native:bedrock:FlowConnectionConfiguration1Properties":{"description":"Connection configuration","properties":{"conditional":{"$ref":"#/types/aws-native:bedrock:FlowConditionalConnectionConfiguration"}},"type":"object","required":["conditional"]},"aws-native:bedrock:FlowConnectionType":{"description":"Connection type","type":"string","enum":[{"name":"Data","value":"Data"},{"name":"Conditional","value":"Conditional"}]},"aws-native:bedrock:FlowDataConnectionConfiguration":{"description":"Data connection configuration","properties":{"sourceOutput":{"type":"string","description":"Name of a node output in a flow"},"targetInput":{"type":"string","description":"Name of a node input in a flow"}},"type":"object","required":["sourceOutput","targetInput"]},"aws-native:bedrock:FlowDefinition":{"description":"Flow definition","properties":{"connections":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowConnection"},"description":"List of connections"},"nodes":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowNode"},"description":"List of nodes in a flow"}},"type":"object"},"aws-native:bedrock:FlowFieldForReranking":{"description":"Field name for reranking","properties":{"fieldName":{"type":"string","description":"Field name for reranking"}},"type":"object","required":["fieldName"]},"aws-native:bedrock:FlowGuardrailConfiguration":{"description":"Configuration for a guardrail","properties":{"guardrailIdentifier":{"type":"string","description":"Identifier for the guardrail, could be the id or the arn"},"guardrailVersion":{"type":"string","description":"Version of the guardrail"}},"type":"object"},"aws-native:bedrock:FlowInlineCodeFlowNodeConfiguration":{"description":"Inline code config strucuture, contains code configs","properties":{"code":{"type":"string","description":"The inline code entered by customers. max size is 5MB."},"language":{"$ref":"#/types/aws-native:bedrock:FlowSupportedLanguages"}},"type":"object","required":["code","language"]},"aws-native:bedrock:FlowInputFlowNodeConfiguration":{"description":"Input flow node configuration","type":"object"},"aws-native:bedrock:FlowIteratorFlowNodeConfiguration":{"description":"Iterator flow node configuration","type":"object"},"aws-native:bedrock:FlowKnowledgeBaseFlowNodeConfiguration":{"description":"Knowledge base flow node configuration","properties":{"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowGuardrailConfiguration"},"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowPromptInferenceConfigurationProperties"},"knowledgeBaseId":{"type":"string","description":"Identifier of the KnowledgeBase"},"modelId":{"type":"string","description":"ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models."},"numberOfResults":{"type":"number","description":"Number Of Results to Retrieve"},"orchestrationConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowKnowledgeBaseOrchestrationConfiguration"},"promptTemplate":{"$ref":"#/types/aws-native:bedrock:FlowKnowledgeBasePromptTemplateProperties"},"rerankingConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVectorSearchRerankingConfiguration"}},"type":"object","required":["knowledgeBaseId"]},"aws-native:bedrock:FlowKnowledgeBaseOrchestrationConfiguration":{"properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:FlowAdditionalModelRequestFields"},"inferenceConfig":{"$ref":"#/types/aws-native:bedrock:FlowPromptInferenceConfigurationProperties"},"performanceConfig":{"$ref":"#/types/aws-native:bedrock:FlowPerformanceConfiguration"},"promptTemplate":{"$ref":"#/types/aws-native:bedrock:FlowKnowledgeBasePromptTemplateProperties"}},"type":"object"},"aws-native:bedrock:FlowKnowledgeBasePromptTemplate0Properties":{"description":"Knowledge Base Prompt template","properties":{"textPromptTemplate":{"type":"string"}},"type":"object","required":["textPromptTemplate"]},"aws-native:bedrock:FlowKnowledgeBasePromptTemplateProperties":{"description":"Knowledge Base Prompt template","properties":{"textPromptTemplate":{"type":"string"}},"type":"object","required":["textPromptTemplate"]},"aws-native:bedrock:FlowLambdaFunctionFlowNodeConfiguration":{"description":"Lambda function flow node configuration","properties":{"lambdaArn":{"type":"string","description":"ARN of a Lambda."}},"type":"object","required":["lambdaArn"]},"aws-native:bedrock:FlowLexFlowNodeConfiguration":{"description":"Lex flow node configuration","properties":{"botAliasArn":{"type":"string","description":"ARN of a Lex bot alias"},"localeId":{"type":"string","description":"Lex bot locale id"}},"type":"object","required":["botAliasArn","localeId"]},"aws-native:bedrock:FlowLoopControllerFlowNodeConfiguration":{"description":"Configuration for the LoopController node, which manages loop execution","properties":{"continueCondition":{"$ref":"#/types/aws-native:bedrock:FlowCondition"},"maxIterations":{"type":"number","description":"Maximum number of iterations the loop can perform"}},"type":"object","required":["continueCondition"]},"aws-native:bedrock:FlowLoopFlowNodeConfiguration":{"description":"Loop node config, contains loop's internal definition","properties":{"definition":{"$ref":"#/types/aws-native:bedrock:FlowDefinition"}},"type":"object","required":["definition"]},"aws-native:bedrock:FlowLoopInputFlowNodeConfiguration":{"description":"Configuration for the LoopInput node","type":"object"},"aws-native:bedrock:FlowMetadataConfigurationForReranking":{"properties":{"selectionMode":{"$ref":"#/types/aws-native:bedrock:FlowRerankingMetadataSelectionMode"},"selectiveModeConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowRerankingMetadataSelectiveModeConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowRerankingMetadataSelectiveModeConfiguration1Properties"}]}},"type":"object","required":["selectionMode"]},"aws-native:bedrock:FlowNode":{"description":"Internal mixin for flow node","properties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration1Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration2Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration3Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration4Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration5Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration6Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration7Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration8Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration9Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration10Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration11Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration12Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration13Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration14Properties"},{"$ref":"#/types/aws-native:bedrock:FlowNodeConfiguration15Properties"}],"description":"Contains configurations for the node."},"inputs":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowNodeInput"},"description":"List of node inputs in a flow"},"name":{"type":"string","description":"Name of a node in a flow"},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowNodeOutput"},"description":"List of node outputs in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowNodeType","description":"The type of node. This value must match the name of the key that you provide in the configuration you provide in the `FlowNodeConfiguration` field."}},"type":"object","required":["name","type"]},"aws-native:bedrock:FlowNodeConfiguration0Properties":{"description":"Node configuration in a flow","properties":{"input":{"$ref":"#/types/aws-native:bedrock:FlowInputFlowNodeConfiguration"}},"type":"object","required":["input"]},"aws-native:bedrock:FlowNodeConfiguration10Properties":{"description":"Node configuration in a flow","properties":{"collector":{"$ref":"#/types/aws-native:bedrock:FlowCollectorFlowNodeConfiguration"}},"type":"object","required":["collector"]},"aws-native:bedrock:FlowNodeConfiguration11Properties":{"description":"Node configuration in a flow","properties":{"retrieval":{"$ref":"#/types/aws-native:bedrock:FlowRetrievalFlowNodeConfiguration"}},"type":"object","required":["retrieval"]},"aws-native:bedrock:FlowNodeConfiguration12Properties":{"description":"Node configuration in a flow","properties":{"inlineCode":{"$ref":"#/types/aws-native:bedrock:FlowInlineCodeFlowNodeConfiguration"}},"type":"object","required":["inlineCode"]},"aws-native:bedrock:FlowNodeConfiguration13Properties":{"description":"Node configuration in a flow","properties":{"loop":{"$ref":"#/types/aws-native:bedrock:FlowLoopFlowNodeConfiguration"}},"type":"object","required":["loop"]},"aws-native:bedrock:FlowNodeConfiguration14Properties":{"description":"Node configuration in a flow","properties":{"loopInput":{"$ref":"#/types/aws-native:bedrock:FlowLoopInputFlowNodeConfiguration"}},"type":"object","required":["loopInput"]},"aws-native:bedrock:FlowNodeConfiguration15Properties":{"description":"Node configuration in a flow","properties":{"loopController":{"$ref":"#/types/aws-native:bedrock:FlowLoopControllerFlowNodeConfiguration"}},"type":"object","required":["loopController"]},"aws-native:bedrock:FlowNodeConfiguration1Properties":{"description":"Node configuration in a flow","properties":{"output":{"$ref":"#/types/aws-native:bedrock:FlowOutputFlowNodeConfiguration"}},"type":"object","required":["output"]},"aws-native:bedrock:FlowNodeConfiguration2Properties":{"description":"Node configuration in a flow","properties":{"knowledgeBase":{"$ref":"#/types/aws-native:bedrock:FlowKnowledgeBaseFlowNodeConfiguration"}},"type":"object","required":["knowledgeBase"]},"aws-native:bedrock:FlowNodeConfiguration3Properties":{"description":"Node configuration in a flow","properties":{"condition":{"$ref":"#/types/aws-native:bedrock:FlowConditionFlowNodeConfiguration"}},"type":"object","required":["condition"]},"aws-native:bedrock:FlowNodeConfiguration4Properties":{"description":"Node configuration in a flow","properties":{"lex":{"$ref":"#/types/aws-native:bedrock:FlowLexFlowNodeConfiguration"}},"type":"object","required":["lex"]},"aws-native:bedrock:FlowNodeConfiguration5Properties":{"description":"Node configuration in a flow","properties":{"prompt":{"$ref":"#/types/aws-native:bedrock:FlowPromptFlowNodeConfiguration"}},"type":"object","required":["prompt"]},"aws-native:bedrock:FlowNodeConfiguration6Properties":{"description":"Node configuration in a flow","properties":{"lambdaFunction":{"$ref":"#/types/aws-native:bedrock:FlowLambdaFunctionFlowNodeConfiguration"}},"type":"object","required":["lambdaFunction"]},"aws-native:bedrock:FlowNodeConfiguration7Properties":{"description":"Node configuration in a flow","properties":{"agent":{"$ref":"#/types/aws-native:bedrock:FlowAgentFlowNodeConfiguration"}},"type":"object","required":["agent"]},"aws-native:bedrock:FlowNodeConfiguration8Properties":{"description":"Node configuration in a flow","properties":{"storage":{"$ref":"#/types/aws-native:bedrock:FlowStorageFlowNodeConfiguration"}},"type":"object","required":["storage"]},"aws-native:bedrock:FlowNodeConfiguration9Properties":{"description":"Node configuration in a flow","properties":{"iterator":{"$ref":"#/types/aws-native:bedrock:FlowIteratorFlowNodeConfiguration"}},"type":"object","required":["iterator"]},"aws-native:bedrock:FlowNodeInput":{"description":"Input to a node in a flow","properties":{"category":{"$ref":"#/types/aws-native:bedrock:FlowNodeInputCategory","description":"Specifies how input data flows between iterations in a DoWhile loop.\n\n- `LoopCondition` - Controls whether the loop continues by evaluating condition expressions against the input data. Use this category to define the condition that determines if the loop should continue.\n- `ReturnValueToLoopStart` - Defines data to pass back to the start of the loop's next iteration. Use this category for variables that you want to update for each loop iteration.\n- `ExitLoop` - Defines the value that's available once the loop ends. Use this category to expose loop results to nodes outside the loop."},"expression":{"type":"string","description":"Expression for a node input in a flow"},"name":{"type":"string","description":"Name of a node input in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowNodeIoDataType","description":"Specifies the data type of the input. If the input doesn't match this type at runtime, a validation error will be thrown."}},"type":"object","required":["expression","name","type"]},"aws-native:bedrock:FlowNodeInputCategory":{"description":"Optional tag to classify input type, currently exclusive to LoopNode","type":"string","enum":[{"name":"LoopCondition","value":"LoopCondition"},{"name":"ReturnValueToLoopStart","value":"ReturnValueToLoopStart"},{"name":"ExitLoop","value":"ExitLoop"}]},"aws-native:bedrock:FlowNodeIoDataType":{"description":"Type of input/output for a node in a flow","type":"string","enum":[{"name":"String","value":"String"},{"name":"Number","value":"Number"},{"name":"Boolean","value":"Boolean"},{"name":"Object","value":"Object"},{"name":"Array","value":"Array"}]},"aws-native:bedrock:FlowNodeOutput":{"description":"Output of a node in a flow","properties":{"name":{"type":"string","description":"Name of a node output in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowNodeIoDataType","description":"The data type of the output. If the output doesn't match this type at runtime, a validation error will be thrown."}},"type":"object","required":["name","type"]},"aws-native:bedrock:FlowNodeType":{"description":"Flow node types","type":"string","enum":[{"name":"InputType","value":"Input"},{"name":"OutputType","value":"Output"},{"name":"KnowledgeBase","value":"KnowledgeBase"},{"name":"Condition","value":"Condition"},{"name":"Lex","value":"Lex"},{"name":"Prompt","value":"Prompt"},{"name":"LambdaFunction","value":"LambdaFunction"},{"name":"Agent","value":"Agent"},{"name":"Storage","value":"Storage"},{"name":"Retrieval","value":"Retrieval"},{"name":"Iterator","value":"Iterator"},{"name":"Collector","value":"Collector"},{"name":"InlineCode","value":"InlineCode"},{"name":"Loop","value":"Loop"},{"name":"LoopInput","value":"LoopInput"},{"name":"LoopController","value":"LoopController"}]},"aws-native:bedrock:FlowOutputFlowNodeConfiguration":{"description":"Output flow node configuration","type":"object"},"aws-native:bedrock:FlowPerformanceConfiguration":{"properties":{"latency":{"$ref":"#/types/aws-native:bedrock:FlowPerformanceConfigurationLatency"}},"type":"object"},"aws-native:bedrock:FlowPerformanceConfigurationLatency":{"description":"Performance Configuration Latency","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Optimized","value":"optimized"}]},"aws-native:bedrock:FlowPromptFlowNodeConfiguration":{"description":"Prompt flow node configuration","properties":{"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowGuardrailConfiguration"},"sourceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowPromptFlowNodeSourceConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowPromptFlowNodeSourceConfiguration1Properties"}]}},"type":"object","required":["sourceConfiguration"]},"aws-native:bedrock:FlowPromptFlowNodeInlineConfiguration":{"description":"Inline prompt configuration for prompt node","properties":{"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowPromptInferenceConfigurationProperties"},"modelId":{"type":"string","description":"ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models."},"templateConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowPromptTemplateConfigurationProperties"},"templateType":{"$ref":"#/types/aws-native:bedrock:FlowPromptTemplateType"}},"type":"object","required":["modelId","templateConfiguration","templateType"]},"aws-native:bedrock:FlowPromptFlowNodeResourceConfiguration":{"description":"Resource prompt configuration for prompt node","properties":{"promptArn":{"type":"string","description":"ARN of a prompt resource possibly with a version"}},"type":"object","required":["promptArn"]},"aws-native:bedrock:FlowPromptFlowNodeSourceConfiguration0Properties":{"description":"Prompt source configuration for prompt node","properties":{"resource":{"$ref":"#/types/aws-native:bedrock:FlowPromptFlowNodeResourceConfiguration"}},"type":"object","required":["resource"]},"aws-native:bedrock:FlowPromptFlowNodeSourceConfiguration1Properties":{"description":"Prompt source configuration for prompt node","properties":{"inline":{"$ref":"#/types/aws-native:bedrock:FlowPromptFlowNodeInlineConfiguration"}},"type":"object","required":["inline"]},"aws-native:bedrock:FlowPromptInferenceConfiguration0Properties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowPromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowPromptInferenceConfigurationProperties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowPromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowPromptInputVariable":{"description":"Input variable","properties":{"name":{"type":"string","description":"Name for an input variable"}},"type":"object"},"aws-native:bedrock:FlowPromptModelInferenceConfiguration":{"description":"Prompt model inference configuration","properties":{"maxTokens":{"type":"number","description":"Maximum length of output"},"stopSequences":{"type":"array","items":{"type":"string"},"description":"List of stop sequences"},"temperature":{"type":"number","description":"Controls randomness, higher values increase diversity"},"topP":{"type":"number","description":"Cumulative probability cutoff for token selection"}},"type":"object"},"aws-native:bedrock:FlowPromptTemplateConfiguration0Properties":{"description":"Prompt template configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowTextPromptTemplateConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowPromptTemplateConfigurationProperties":{"description":"Prompt template configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowTextPromptTemplateConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowPromptTemplateType":{"description":"Prompt template type","type":"string","enum":[{"name":"Text","value":"TEXT"}]},"aws-native:bedrock:FlowRerankingMetadataSelectionMode":{"description":"Reranking Metadata Selection Mode","type":"string","enum":[{"name":"Selective","value":"SELECTIVE"},{"name":"All","value":"ALL"}]},"aws-native:bedrock:FlowRerankingMetadataSelectiveModeConfiguration0Properties":{"description":"Reranking Metadata Selective Mode Configuration","properties":{"fieldsToInclude":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowFieldForReranking"}}},"type":"object","required":["fieldsToInclude"]},"aws-native:bedrock:FlowRerankingMetadataSelectiveModeConfiguration1Properties":{"description":"Reranking Metadata Selective Mode Configuration","properties":{"fieldsToExclude":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowFieldForReranking"}}},"type":"object","required":["fieldsToExclude"]},"aws-native:bedrock:FlowRetrievalFlowNodeConfiguration":{"description":"Retrieval flow node configuration","properties":{"serviceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowRetrievalFlowNodeServiceConfigurationProperties"}},"type":"object","required":["serviceConfiguration"]},"aws-native:bedrock:FlowRetrievalFlowNodeS3Configuration":{"description":"s3 Retrieval configuration for Retrieval node","properties":{"bucketName":{"type":"string","description":"bucket name of an s3 that will be used for Retrieval flow node configuration"}},"type":"object","required":["bucketName"]},"aws-native:bedrock:FlowRetrievalFlowNodeServiceConfiguration0Properties":{"description":"Retrieval service configuration for Retrieval node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowRetrievalFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowRetrievalFlowNodeServiceConfigurationProperties":{"description":"Retrieval service configuration for Retrieval node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowRetrievalFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowS3Location":{"description":"A bucket, key and optional version pointing to an S3 object containing a UTF-8 encoded JSON string Definition with the same schema as the Definition property of this resource","properties":{"bucket":{"type":"string","description":"A bucket in S3"},"key":{"type":"string","description":"A object key in S3"},"version":{"type":"string","description":"The version of the the S3 object to use"}},"type":"object","required":["bucket","key"]},"aws-native:bedrock:FlowStatus":{"description":"Schema Type for Flow APIs","type":"string","enum":[{"name":"Failed","value":"Failed"},{"name":"Prepared","value":"Prepared"},{"name":"Preparing","value":"Preparing"},{"name":"NotPrepared","value":"NotPrepared"}]},"aws-native:bedrock:FlowStorageFlowNodeConfiguration":{"description":"Storage flow node configuration","properties":{"serviceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowStorageFlowNodeServiceConfigurationProperties"}},"type":"object","required":["serviceConfiguration"]},"aws-native:bedrock:FlowStorageFlowNodeS3Configuration":{"description":"s3 storage configuration for storage node","properties":{"bucketName":{"type":"string","description":"bucket name of an s3 that will be used for storage flow node configuration"}},"type":"object","required":["bucketName"]},"aws-native:bedrock:FlowStorageFlowNodeServiceConfiguration0Properties":{"description":"storage service configuration for storage node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowStorageFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowStorageFlowNodeServiceConfigurationProperties":{"description":"storage service configuration for storage node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowStorageFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowSupportedLanguages":{"description":"Enum encodes the supported language type","type":"string","enum":[{"name":"Python3","value":"Python_3"}]},"aws-native:bedrock:FlowTextPromptTemplateConfiguration":{"description":"Configuration for text prompt template","properties":{"inputVariables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowPromptInputVariable"},"description":"List of input variables"},"text":{"type":"string","description":"Prompt content for String prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowValidation":{"description":"Validation for Flow","properties":{"message":{"type":"string","description":"validation message"}},"type":"object","required":["message"]},"aws-native:bedrock:FlowVectorSearchBedrockRerankingConfiguration":{"properties":{"metadataConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowMetadataConfigurationForReranking"},"modelConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVectorSearchBedrockRerankingModelConfiguration"},"numberOfRerankedResults":{"type":"number","description":"Number Of Results For Reranking"}},"type":"object","required":["modelConfiguration"]},"aws-native:bedrock:FlowVectorSearchBedrockRerankingModelConfiguration":{"properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:FlowAdditionalModelRequestFields"},"modelArn":{"type":"string"}},"type":"object","required":["modelArn"]},"aws-native:bedrock:FlowVectorSearchRerankingConfiguration":{"properties":{"bedrockRerankingConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVectorSearchBedrockRerankingConfiguration"},"type":{"$ref":"#/types/aws-native:bedrock:FlowVectorSearchRerankingConfigurationType"}},"type":"object","required":["type"]},"aws-native:bedrock:FlowVectorSearchRerankingConfigurationType":{"description":"Enum of Rerank Configuration Types","type":"string","enum":[{"name":"BedrockRerankingModel","value":"BEDROCK_RERANKING_MODEL"}]},"aws-native:bedrock:FlowVersionAdditionalModelRequestFields":{"type":"object"},"aws-native:bedrock:FlowVersionAgentFlowNodeConfiguration":{"description":"Agent flow node configuration","properties":{"agentAliasArn":{"type":"string","description":"Arn representation of the Agent Alias."}},"type":"object","required":["agentAliasArn"]},"aws-native:bedrock:FlowVersionCollectorFlowNodeConfiguration":{"description":"Collector flow node configuration","type":"object"},"aws-native:bedrock:FlowVersionConditionFlowNodeConfiguration":{"description":"Condition flow node configuration","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowCondition"},"description":"List of conditions in a condition node"}},"type":"object","required":["conditions"]},"aws-native:bedrock:FlowVersionFieldForReranking":{"description":"Field name for reranking","properties":{"fieldName":{"type":"string","description":"Field name for reranking"}},"type":"object","required":["fieldName"]},"aws-native:bedrock:FlowVersionFlowCondition":{"description":"Condition branch for a condition node","properties":{"expression":{"type":"string","description":"Expression for a condition in a flow"},"name":{"type":"string","description":"Name of a condition in a flow"}},"type":"object","required":["name"]},"aws-native:bedrock:FlowVersionFlowConditionalConnectionConfiguration":{"description":"Conditional connection configuration","properties":{"condition":{"type":"string","description":"Name of a condition in a flow"}},"type":"object","required":["condition"]},"aws-native:bedrock:FlowVersionFlowConnection":{"description":"Flow connection","properties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowConnectionConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowConnectionConfiguration1Properties"}],"description":"The configuration of the connection."},"name":{"type":"string","description":"Name of a connection in a flow"},"source":{"type":"string","description":"Name of a node in a flow"},"target":{"type":"string","description":"Name of a node in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowConnectionType","description":"Whether the source node that the connection begins from is a condition node ( `Conditional` ) or not ( `Data` )."}},"type":"object","required":["name","source","target","type"]},"aws-native:bedrock:FlowVersionFlowConnectionConfiguration0Properties":{"description":"Connection configuration","properties":{"data":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowDataConnectionConfiguration"}},"type":"object","required":["data"]},"aws-native:bedrock:FlowVersionFlowConnectionConfiguration1Properties":{"description":"Connection configuration","properties":{"conditional":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowConditionalConnectionConfiguration"}},"type":"object","required":["conditional"]},"aws-native:bedrock:FlowVersionFlowConnectionType":{"description":"Connection type","type":"string","enum":[{"name":"Data","value":"Data"},{"name":"Conditional","value":"Conditional"}]},"aws-native:bedrock:FlowVersionFlowDataConnectionConfiguration":{"description":"Data connection configuration","properties":{"sourceOutput":{"type":"string","description":"Name of a node output in a flow"},"targetInput":{"type":"string","description":"Name of a node input in a flow"}},"type":"object","required":["sourceOutput","targetInput"]},"aws-native:bedrock:FlowVersionFlowDefinition":{"description":"Flow definition","properties":{"connections":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowConnection"},"description":"List of connections"},"nodes":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNode"},"description":"List of nodes in a flow"}},"type":"object"},"aws-native:bedrock:FlowVersionFlowNode":{"description":"Internal mixin for flow node","properties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration1Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration2Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration3Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration4Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration5Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration6Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration7Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration8Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration9Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration10Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration11Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration12Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration13Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration14Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeConfiguration15Properties"}],"description":"Contains configurations for the node."},"inputs":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeInput"},"description":"List of node inputs in a flow"},"name":{"type":"string","description":"Name of a node in a flow"},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeOutput"},"description":"List of node outputs in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeType","description":"The type of node. This value must match the name of the key that you provide in the configuration you provide in the `FlowNodeConfiguration` field."}},"type":"object","required":["name","type"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration0Properties":{"description":"Node configuration in a flow","properties":{"input":{"$ref":"#/types/aws-native:bedrock:FlowVersionInputFlowNodeConfiguration"}},"type":"object","required":["input"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration10Properties":{"description":"Node configuration in a flow","properties":{"iterator":{"$ref":"#/types/aws-native:bedrock:FlowVersionIteratorFlowNodeConfiguration"}},"type":"object","required":["iterator"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration11Properties":{"description":"Node configuration in a flow","properties":{"collector":{"$ref":"#/types/aws-native:bedrock:FlowVersionCollectorFlowNodeConfiguration"}},"type":"object","required":["collector"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration12Properties":{"description":"Node configuration in a flow","properties":{"inlineCode":{"$ref":"#/types/aws-native:bedrock:FlowVersionInlineCodeFlowNodeConfiguration"}},"type":"object","required":["inlineCode"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration13Properties":{"description":"Node configuration in a flow","properties":{"loop":{"$ref":"#/types/aws-native:bedrock:FlowVersionLoopFlowNodeConfiguration"}},"type":"object","required":["loop"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration14Properties":{"description":"Node configuration in a flow","properties":{"loopInput":{"$ref":"#/types/aws-native:bedrock:FlowVersionLoopInputFlowNodeConfiguration"}},"type":"object","required":["loopInput"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration15Properties":{"description":"Node configuration in a flow","properties":{"loopController":{"$ref":"#/types/aws-native:bedrock:FlowVersionLoopControllerFlowNodeConfiguration"}},"type":"object","required":["loopController"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration1Properties":{"description":"Node configuration in a flow","properties":{"output":{"$ref":"#/types/aws-native:bedrock:FlowVersionOutputFlowNodeConfiguration"}},"type":"object","required":["output"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration2Properties":{"description":"Node configuration in a flow","properties":{"knowledgeBase":{"$ref":"#/types/aws-native:bedrock:FlowVersionKnowledgeBaseFlowNodeConfiguration"}},"type":"object","required":["knowledgeBase"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration3Properties":{"description":"Node configuration in a flow","properties":{"condition":{"$ref":"#/types/aws-native:bedrock:FlowVersionConditionFlowNodeConfiguration"}},"type":"object","required":["condition"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration4Properties":{"description":"Node configuration in a flow","properties":{"lex":{"$ref":"#/types/aws-native:bedrock:FlowVersionLexFlowNodeConfiguration"}},"type":"object","required":["lex"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration5Properties":{"description":"Node configuration in a flow","properties":{"prompt":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptFlowNodeConfiguration"}},"type":"object","required":["prompt"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration6Properties":{"description":"Node configuration in a flow","properties":{"lambdaFunction":{"$ref":"#/types/aws-native:bedrock:FlowVersionLambdaFunctionFlowNodeConfiguration"}},"type":"object","required":["lambdaFunction"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration7Properties":{"description":"Node configuration in a flow","properties":{"agent":{"$ref":"#/types/aws-native:bedrock:FlowVersionAgentFlowNodeConfiguration"}},"type":"object","required":["agent"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration8Properties":{"description":"Node configuration in a flow","properties":{"storage":{"$ref":"#/types/aws-native:bedrock:FlowVersionStorageFlowNodeConfiguration"}},"type":"object","required":["storage"]},"aws-native:bedrock:FlowVersionFlowNodeConfiguration9Properties":{"description":"Node configuration in a flow","properties":{"retrieval":{"$ref":"#/types/aws-native:bedrock:FlowVersionRetrievalFlowNodeConfiguration"}},"type":"object","required":["retrieval"]},"aws-native:bedrock:FlowVersionFlowNodeInput":{"description":"Input to a node in a flow","properties":{"expression":{"type":"string","description":"Expression for a node input in a flow"},"name":{"type":"string","description":"Name of a node input in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeIoDataType","description":"Specifies the data type of the input. If the input doesn't match this type at runtime, a validation error will be thrown."}},"type":"object","required":["expression","name","type"]},"aws-native:bedrock:FlowVersionFlowNodeIoDataType":{"description":"Type of input/output for a node in a flow","type":"string","enum":[{"name":"String","value":"String"},{"name":"Number","value":"Number"},{"name":"Boolean","value":"Boolean"},{"name":"Object","value":"Object"},{"name":"Array","value":"Array"}]},"aws-native:bedrock:FlowVersionFlowNodeOutput":{"description":"Output of a node in a flow","properties":{"name":{"type":"string","description":"Name of a node output in a flow"},"type":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowNodeIoDataType","description":"The data type of the output. If the output doesn't match this type at runtime, a validation error will be thrown."}},"type":"object","required":["name","type"]},"aws-native:bedrock:FlowVersionFlowNodeType":{"description":"Flow node types","type":"string","enum":[{"name":"InputType","value":"Input"},{"name":"OutputType","value":"Output"},{"name":"KnowledgeBase","value":"KnowledgeBase"},{"name":"Condition","value":"Condition"},{"name":"Lex","value":"Lex"},{"name":"Prompt","value":"Prompt"},{"name":"LambdaFunction","value":"LambdaFunction"},{"name":"Agent","value":"Agent"},{"name":"Iterator","value":"Iterator"},{"name":"Collector","value":"Collector"},{"name":"Storage","value":"Storage"},{"name":"Retrieval","value":"Retrieval"},{"name":"InlineCode","value":"InlineCode"},{"name":"Loop","value":"Loop"},{"name":"LoopInput","value":"LoopInput"},{"name":"LoopController","value":"LoopController"}]},"aws-native:bedrock:FlowVersionFlowStatus":{"description":"Schema Type for Flow APIs","type":"string","enum":[{"name":"Failed","value":"Failed"},{"name":"Prepared","value":"Prepared"},{"name":"Preparing","value":"Preparing"},{"name":"NotPrepared","value":"NotPrepared"}]},"aws-native:bedrock:FlowVersionGuardrailConfiguration":{"description":"Configuration for a guardrail","properties":{"guardrailIdentifier":{"type":"string","description":"Identifier for the guardrail, could be the id or the arn"},"guardrailVersion":{"type":"string","description":"Version of the guardrail"}},"type":"object"},"aws-native:bedrock:FlowVersionInlineCodeFlowNodeConfiguration":{"description":"Inline code config strucuture, contains code configs","properties":{"code":{"type":"string","description":"The inline code entered by customers. max size is 5MB."},"language":{"$ref":"#/types/aws-native:bedrock:FlowVersionSupportedLanguages"}},"type":"object","required":["code","language"]},"aws-native:bedrock:FlowVersionInputFlowNodeConfiguration":{"description":"Input flow node configuration","type":"object"},"aws-native:bedrock:FlowVersionIteratorFlowNodeConfiguration":{"description":"Iterator flow node configuration","type":"object"},"aws-native:bedrock:FlowVersionKnowledgeBaseFlowNodeConfiguration":{"description":"Knowledge base flow node configuration","properties":{"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionGuardrailConfiguration"},"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptInferenceConfigurationProperties"},"knowledgeBaseId":{"type":"string","description":"Identifier of the KnowledgeBase"},"modelId":{"type":"string","description":"ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models."},"numberOfResults":{"type":"number","description":"Number Of Results to Retrieve"},"orchestrationConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionKnowledgeBaseOrchestrationConfiguration"},"promptTemplate":{"$ref":"#/types/aws-native:bedrock:FlowVersionKnowledgeBasePromptTemplateProperties"},"rerankingConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionVectorSearchRerankingConfiguration"}},"type":"object","required":["knowledgeBaseId"]},"aws-native:bedrock:FlowVersionKnowledgeBaseOrchestrationConfiguration":{"properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:FlowVersionAdditionalModelRequestFields"},"inferenceConfig":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptInferenceConfigurationProperties"},"performanceConfig":{"$ref":"#/types/aws-native:bedrock:FlowVersionPerformanceConfiguration"},"promptTemplate":{"$ref":"#/types/aws-native:bedrock:FlowVersionKnowledgeBasePromptTemplateProperties"}},"type":"object"},"aws-native:bedrock:FlowVersionKnowledgeBasePromptTemplate0Properties":{"description":"Knowledge Base Prompt template","properties":{"textPromptTemplate":{"type":"string"}},"type":"object","required":["textPromptTemplate"]},"aws-native:bedrock:FlowVersionKnowledgeBasePromptTemplateProperties":{"description":"Knowledge Base Prompt template","properties":{"textPromptTemplate":{"type":"string"}},"type":"object","required":["textPromptTemplate"]},"aws-native:bedrock:FlowVersionLambdaFunctionFlowNodeConfiguration":{"description":"Lambda function flow node configuration","properties":{"lambdaArn":{"type":"string","description":"ARN of a Lambda."}},"type":"object","required":["lambdaArn"]},"aws-native:bedrock:FlowVersionLexFlowNodeConfiguration":{"description":"Lex flow node configuration","properties":{"botAliasArn":{"type":"string","description":"ARN of a Lex bot alias"},"localeId":{"type":"string","description":"Lex bot locale id"}},"type":"object","required":["botAliasArn","localeId"]},"aws-native:bedrock:FlowVersionLoopControllerFlowNodeConfiguration":{"description":"Configuration for the LoopController node, which manages loop execution","properties":{"continueCondition":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowCondition"},"maxIterations":{"type":"number","description":"Maximum number of iterations the loop can perform"}},"type":"object","required":["continueCondition"]},"aws-native:bedrock:FlowVersionLoopFlowNodeConfiguration":{"description":"Loop node config, contains loop's internal definition","properties":{"definition":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowDefinition"}},"type":"object","required":["definition"]},"aws-native:bedrock:FlowVersionLoopInputFlowNodeConfiguration":{"description":"Configuration for the LoopInput node","type":"object"},"aws-native:bedrock:FlowVersionMetadataConfigurationForReranking":{"properties":{"selectionMode":{"$ref":"#/types/aws-native:bedrock:FlowVersionRerankingMetadataSelectionMode"},"selectiveModeConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowVersionRerankingMetadataSelectiveModeConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionRerankingMetadataSelectiveModeConfiguration1Properties"}]}},"type":"object","required":["selectionMode"]},"aws-native:bedrock:FlowVersionOutputFlowNodeConfiguration":{"description":"Output flow node configuration","type":"object"},"aws-native:bedrock:FlowVersionPerformanceConfiguration":{"properties":{"latency":{"$ref":"#/types/aws-native:bedrock:FlowVersionPerformanceConfigurationLatency"}},"type":"object"},"aws-native:bedrock:FlowVersionPerformanceConfigurationLatency":{"description":"Performance Configuration Latency","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Optimized","value":"optimized"}]},"aws-native:bedrock:FlowVersionPromptFlowNodeConfiguration":{"description":"Prompt flow node configuration","properties":{"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionGuardrailConfiguration"},"sourceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptFlowNodeSourceConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptFlowNodeSourceConfiguration1Properties"}]}},"type":"object","required":["sourceConfiguration"]},"aws-native:bedrock:FlowVersionPromptFlowNodeInlineConfiguration":{"description":"Inline prompt configuration for prompt node","properties":{"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptInferenceConfigurationProperties"},"modelId":{"type":"string","description":"ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models."},"templateConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptTemplateConfigurationProperties"},"templateType":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptTemplateType"}},"type":"object","required":["modelId","templateConfiguration","templateType"]},"aws-native:bedrock:FlowVersionPromptFlowNodeResourceConfiguration":{"description":"Resource prompt configuration for prompt node","properties":{"promptArn":{"type":"string","description":"ARN of a prompt resource possibly with a version"}},"type":"object","required":["promptArn"]},"aws-native:bedrock:FlowVersionPromptFlowNodeSourceConfiguration0Properties":{"description":"Prompt source configuration for prompt node","properties":{"resource":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptFlowNodeResourceConfiguration"}},"type":"object","required":["resource"]},"aws-native:bedrock:FlowVersionPromptFlowNodeSourceConfiguration1Properties":{"description":"Prompt source configuration for prompt node","properties":{"inline":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptFlowNodeInlineConfiguration"}},"type":"object","required":["inline"]},"aws-native:bedrock:FlowVersionPromptInferenceConfiguration0Properties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowVersionPromptInferenceConfigurationProperties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowVersionPromptInputVariable":{"description":"Input variable","properties":{"name":{"type":"string","description":"Name for an input variable"}},"type":"object"},"aws-native:bedrock:FlowVersionPromptModelInferenceConfiguration":{"description":"Prompt model inference configuration","properties":{"maxTokens":{"type":"number","description":"Maximum length of output"},"stopSequences":{"type":"array","items":{"type":"string"},"description":"List of stop sequences"},"temperature":{"type":"number","description":"Controls randomness, higher values increase diversity"},"topP":{"type":"number","description":"Cumulative probability cutoff for token selection"}},"type":"object"},"aws-native:bedrock:FlowVersionPromptTemplateConfiguration0Properties":{"description":"Prompt template configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowVersionTextPromptTemplateConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowVersionPromptTemplateConfigurationProperties":{"description":"Prompt template configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:FlowVersionTextPromptTemplateConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowVersionPromptTemplateType":{"description":"Prompt template type","type":"string","enum":[{"name":"Text","value":"TEXT"}]},"aws-native:bedrock:FlowVersionRerankingMetadataSelectionMode":{"description":"Reranking Metadata Selection Mode","type":"string","enum":[{"name":"Selective","value":"SELECTIVE"},{"name":"All","value":"ALL"}]},"aws-native:bedrock:FlowVersionRerankingMetadataSelectiveModeConfiguration0Properties":{"description":"Reranking Metadata Selective Mode Configuration","properties":{"fieldsToInclude":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFieldForReranking"}}},"type":"object","required":["fieldsToInclude"]},"aws-native:bedrock:FlowVersionRerankingMetadataSelectiveModeConfiguration1Properties":{"description":"Reranking Metadata Selective Mode Configuration","properties":{"fieldsToExclude":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionFieldForReranking"}}},"type":"object","required":["fieldsToExclude"]},"aws-native:bedrock:FlowVersionRetrievalFlowNodeConfiguration":{"description":"Retrieval flow node configuration","properties":{"serviceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionRetrievalFlowNodeServiceConfigurationProperties"}},"type":"object","required":["serviceConfiguration"]},"aws-native:bedrock:FlowVersionRetrievalFlowNodeS3Configuration":{"description":"s3 Retrieval configuration for Retrieval node","properties":{"bucketName":{"type":"string","description":"bucket name of an s3 that will be used for Retrieval flow node configuration"}},"type":"object","required":["bucketName"]},"aws-native:bedrock:FlowVersionRetrievalFlowNodeServiceConfiguration0Properties":{"description":"Retrieval service configuration for Retrieval node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowVersionRetrievalFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowVersionRetrievalFlowNodeServiceConfigurationProperties":{"description":"Retrieval service configuration for Retrieval node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowVersionRetrievalFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowVersionStorageFlowNodeConfiguration":{"description":"Storage flow node configuration","properties":{"serviceConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionStorageFlowNodeServiceConfigurationProperties"}},"type":"object","required":["serviceConfiguration"]},"aws-native:bedrock:FlowVersionStorageFlowNodeS3Configuration":{"description":"s3 storage configuration for storage node","properties":{"bucketName":{"type":"string","description":"bucket name of an s3 that will be used for storage flow node configuration"}},"type":"object","required":["bucketName"]},"aws-native:bedrock:FlowVersionStorageFlowNodeServiceConfiguration0Properties":{"description":"storage service configuration for storage node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowVersionStorageFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowVersionStorageFlowNodeServiceConfigurationProperties":{"description":"storage service configuration for storage node","properties":{"s3":{"$ref":"#/types/aws-native:bedrock:FlowVersionStorageFlowNodeS3Configuration"}},"type":"object"},"aws-native:bedrock:FlowVersionSupportedLanguages":{"description":"Enum encodes the supported language type","type":"string","enum":[{"name":"Python3","value":"Python_3"}]},"aws-native:bedrock:FlowVersionTextPromptTemplateConfiguration":{"description":"Configuration for text prompt template","properties":{"inputVariables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowVersionPromptInputVariable"},"description":"List of input variables"},"text":{"type":"string","description":"Prompt content for String prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:FlowVersionVectorSearchBedrockRerankingConfiguration":{"properties":{"metadataConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionMetadataConfigurationForReranking"},"modelConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionVectorSearchBedrockRerankingModelConfiguration"},"numberOfRerankedResults":{"type":"number","description":"Number Of Results For Reranking"}},"type":"object","required":["modelConfiguration"]},"aws-native:bedrock:FlowVersionVectorSearchBedrockRerankingModelConfiguration":{"properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:FlowVersionAdditionalModelRequestFields"},"modelArn":{"type":"string"}},"type":"object","required":["modelArn"]},"aws-native:bedrock:FlowVersionVectorSearchRerankingConfiguration":{"properties":{"bedrockRerankingConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowVersionVectorSearchBedrockRerankingConfiguration"},"type":{"$ref":"#/types/aws-native:bedrock:FlowVersionVectorSearchRerankingConfigurationType"}},"type":"object","required":["type"]},"aws-native:bedrock:FlowVersionVectorSearchRerankingConfigurationType":{"description":"Enum of Rerank Configuration Types","type":"string","enum":[{"name":"BedrockRerankingModel","value":"BEDROCK_RERANKING_MODEL"}]},"aws-native:bedrock:GuardrailAutomatedReasoningPolicyConfig":{"description":"Optional configuration for integrating Automated Reasoning policies with the guardrail.","properties":{"confidenceThreshold":{"type":"number","description":"The confidence threshold for triggering guardrail actions based on Automated Reasoning policy violations."},"policies":{"type":"array","items":{"type":"string"},"description":"The list of Automated Reasoning policy ARNs to include in the guardrail configuration"}},"type":"object","required":["policies"]},"aws-native:bedrock:GuardrailContentFilterAction":{"type":"string","enum":[{"name":"Block","value":"BLOCK"},{"name":"None","value":"NONE"}]},"aws-native:bedrock:GuardrailContentFilterConfig":{"description":"Content filter config in content policy.","properties":{"inputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailContentFilterAction","description":"Specifies the action to take when harmful content is detected. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"inputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"inputModalities":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailModality"},"description":"List of modalities"},"inputStrength":{"$ref":"#/types/aws-native:bedrock:GuardrailFilterStrength","description":"The strength of the content filter to apply to prompts. As you increase the filter strength, the likelihood of filtering harmful content increases and the probability of seeing harmful content in your application reduces."},"outputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailContentFilterAction","description":"Specifies the action to take when harmful content is detected in the output. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"outputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"outputModalities":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailModality"},"description":"List of modalities"},"outputStrength":{"$ref":"#/types/aws-native:bedrock:GuardrailFilterStrength","description":"The strength of the content filter to apply to model responses. As you increase the filter strength, the likelihood of filtering harmful content increases and the probability of seeing harmful content in your application reduces."},"type":{"$ref":"#/types/aws-native:bedrock:GuardrailContentFilterType","description":"The harmful category that the content filter is applied to."}},"type":"object","required":["inputStrength","outputStrength","type"]},"aws-native:bedrock:GuardrailContentFilterType":{"description":"Type of filter in content policy","type":"string","enum":[{"name":"Sexual","value":"SEXUAL"},{"name":"Violence","value":"VIOLENCE"},{"name":"Hate","value":"HATE"},{"name":"Insults","value":"INSULTS"},{"name":"Misconduct","value":"MISCONDUCT"},{"name":"PromptAttack","value":"PROMPT_ATTACK"}]},"aws-native:bedrock:GuardrailContentFiltersTierName":{"description":"Tier name for tier configuration in content filters policy","type":"string","enum":[{"name":"Classic","value":"CLASSIC"},{"name":"Standard","value":"STANDARD"}]},"aws-native:bedrock:GuardrailContentPolicyConfig":{"description":"Content policy config for a guardrail.","properties":{"contentFiltersTierConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContentPolicyConfigContentFiltersTierConfigProperties","description":"Guardrail tier config for content policy"},"filtersConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailContentFilterConfig"},"description":"List of content filter configs in content policy."}},"type":"object","required":["filtersConfig"]},"aws-native:bedrock:GuardrailContentPolicyConfigContentFiltersTierConfigProperties":{"description":"Guardrail tier config for content policy","properties":{"tierName":{"$ref":"#/types/aws-native:bedrock:GuardrailContentFiltersTierName"}},"type":"object","required":["tierName"]},"aws-native:bedrock:GuardrailContextualGroundingAction":{"type":"string","enum":[{"name":"Block","value":"BLOCK"},{"name":"None","value":"NONE"}]},"aws-native:bedrock:GuardrailContextualGroundingFilterConfig":{"description":"A config for grounding filter.","properties":{"action":{"$ref":"#/types/aws-native:bedrock:GuardrailContextualGroundingAction","description":"Specifies the action to take when content fails the contextual grounding evaluation. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"enabled":{"type":"boolean","description":"Specifies whether to enable contextual grounding evaluation. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"threshold":{"type":"number","description":"The threshold for this filter."},"type":{"$ref":"#/types/aws-native:bedrock:GuardrailContextualGroundingFilterType","description":"The filter details for the guardrails contextual grounding filter."}},"type":"object","required":["threshold","type"]},"aws-native:bedrock:GuardrailContextualGroundingFilterType":{"description":"Type of contextual grounding filter","type":"string","enum":[{"name":"Grounding","value":"GROUNDING"},{"name":"Relevance","value":"RELEVANCE"}]},"aws-native:bedrock:GuardrailContextualGroundingPolicyConfig":{"description":"Contextual grounding policy config for a guardrail.","properties":{"filtersConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailContextualGroundingFilterConfig"},"description":"List of contextual grounding filter configs."}},"type":"object","required":["filtersConfig"]},"aws-native:bedrock:GuardrailCrossRegionConfig":{"description":"The system-defined guardrail profile that you’re using with your guardrail","properties":{"guardrailProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the guardrail profile"}},"type":"object","required":["guardrailProfileArn"]},"aws-native:bedrock:GuardrailFilterStrength":{"description":"Strength for filters","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:bedrock:GuardrailManagedWordsConfig":{"description":"A managed words config.","properties":{"inputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailWordAction","description":"Specifies the action to take when harmful content is detected in the input. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"inputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"outputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailWordAction","description":"Specifies the action to take when harmful content is detected in the output. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"outputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"type":{"$ref":"#/types/aws-native:bedrock:GuardrailManagedWordsType","description":"The managed word type to configure for the guardrail."}},"type":"object","required":["type"]},"aws-native:bedrock:GuardrailManagedWordsType":{"description":"Options for managed words.","type":"string","enum":[{"name":"Profanity","value":"PROFANITY"}]},"aws-native:bedrock:GuardrailModality":{"description":"Modality for filters","type":"string","enum":[{"name":"Text","value":"TEXT"},{"name":"Image","value":"IMAGE"}]},"aws-native:bedrock:GuardrailPiiEntityConfig":{"description":"Pii entity configuration.","properties":{"action":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationAction","description":"Configure guardrail action when the PII entity is detected."},"inputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationAction","description":"Specifies the action to take when harmful content is detected in the input. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `ANONYMIZE` – Mask the content and replace it with identifier tags.\n- `NONE` – Take no action but return detection information in the trace response."},"inputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"outputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationAction","description":"Specifies the action to take when harmful content is detected in the output. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `ANONYMIZE` – Mask the content and replace it with identifier tags.\n- `NONE` – Take no action but return detection information in the trace response."},"outputEnabled":{"type":"boolean","description":"Indicates whether guardrail evaluation is enabled on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"type":{"$ref":"#/types/aws-native:bedrock:GuardrailPiiEntityType","description":"Configure guardrail type when the PII entity is detected.\n\nThe following PIIs are used to block or mask sensitive information:\n\n- *General*\n\n- *ADDRESS*\n\nA physical address, such as \"100 Main Street, Anytown, USA\" or \"Suite #12, Building 123\". An address can include information such as the street, building, location, city, state, country, county, zip code, precinct, and neighborhood.\n- *AGE*\n\nAn individual's age, including the quantity and unit of time. For example, in the phrase \"I am 40 years old,\" Guardrails recognizes \"40 years\" as an age.\n- *NAME*\n\nAn individual's name. This entity type does not include titles, such as Dr., Mr., Mrs., or Miss. guardrails doesn't apply this entity type to names that are part of organizations or addresses. For example, guardrails recognizes the \"John Doe Organization\" as an organization, and it recognizes \"Jane Doe Street\" as an address.\n- *EMAIL*\n\nAn email address, such as *marymajor@email.com* .\n- *PHONE*\n\nA phone number. This entity type also includes fax and pager numbers.\n- *USERNAME*\n\nA user name that identifies an account, such as a login name, screen name, nick name, or handle.\n- *PASSWORD*\n\nAn alphanumeric string that is used as a password, such as \"* *very20special#pass** \".\n- *DRIVER_ID*\n\nThe number assigned to a driver's license, which is an official document permitting an individual to operate one or more motorized vehicles on a public road. A driver's license number consists of alphanumeric characters.\n- *LICENSE_PLATE*\n\nA license plate for a vehicle is issued by the state or country where the vehicle is registered. The format for passenger vehicles is typically five to eight digits, consisting of upper-case letters and numbers. The format varies depending on the location of the issuing state or country.\n- *VEHICLE_IDENTIFICATION_NUMBER*\n\nA Vehicle Identification Number (VIN) uniquely identifies a vehicle. VIN content and format are defined in the *ISO 3779* specification. Each country has specific codes and formats for VINs.\n- *Finance*\n\n- *CREDIT_DEBIT_CARD_CVV*\n\nA three-digit card verification code (CVV) that is present on VISA, MasterCard, and Discover credit and debit cards. For American Express credit or debit cards, the CVV is a four-digit numeric code.\n- *CREDIT_DEBIT_CARD_EXPIRY*\n\nThe expiration date for a credit or debit card. This number is usually four digits long and is often formatted as *month/year* or *MM/YY* . Guardrails recognizes expiration dates such as *01/21* , *01/2021* , and *Jan 2021* .\n- *CREDIT_DEBIT_CARD_NUMBER*\n\nThe number for a credit or debit card. These numbers can vary from 13 to 16 digits in length. However, Amazon Comprehend also recognizes credit or debit card numbers when only the last four digits are present.\n- *PIN*\n\nA four-digit personal identification number (PIN) with which you can access your bank account.\n- *INTERNATIONAL_BANK_ACCOUNT_NUMBER*\n\nAn International Bank Account Number has specific formats in each country. For more information, see [www.iban.com/structure](https://docs.aws.amazon.com/https://www.iban.com/structure) .\n- *SWIFT_CODE*\n\nA SWIFT code is a standard format of Bank Identifier Code (BIC) used to specify a particular bank or branch. Banks use these codes for money transfers such as international wire transfers.\n\nSWIFT codes consist of eight or 11 characters. The 11-digit codes refer to specific branches, while eight-digit codes (or 11-digit codes ending in 'XXX') refer to the head or primary office.\n- *IT*\n\n- *IP_ADDRESS*\n\nAn IPv4 address, such as *198.51.100.0* .\n- *MAC_ADDRESS*\n\nA *media access control* (MAC) address is a unique identifier assigned to a network interface controller (NIC).\n- *URL*\n\nA web address, such as *www.example.com* .\n- *AWS_ACCESS_KEY*\n\nA unique identifier that's associated with a secret access key; you use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *AWS_SECRET_KEY*\n\nA unique identifier that's associated with an access key. You use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *USA specific*\n\n- *US_BANK_ACCOUNT_NUMBER*\n\nA US bank account number, which is typically 10 to 12 digits long.\n- *US_BANK_ROUTING_NUMBER*\n\nA US bank account routing number. These are typically nine digits long,\n- *US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER*\n\nA US Individual Taxpayer Identification Number (ITIN) is a nine-digit number that starts with a \"9\" and contain a \"7\" or \"8\" as the fourth digit. An ITIN can be formatted with a space or a dash after the third and forth digits.\n- *US_PASSPORT_NUMBER*\n\nA US passport number. Passport numbers range from six to nine alphanumeric characters.\n- *US_SOCIAL_SECURITY_NUMBER*\n\nA US Social Security Number (SSN) is a nine-digit number that is issued to US citizens, permanent residents, and temporary working residents.\n- *Canada specific*\n\n- *CA_HEALTH_NUMBER*\n\nA Canadian Health Service Number is a 10-digit unique identifier, required for individuals to access healthcare benefits.\n- *CA_SOCIAL_INSURANCE_NUMBER*\n\nA Canadian Social Insurance Number (SIN) is a nine-digit unique identifier, required for individuals to access government programs and benefits.\n\nThe SIN is formatted as three groups of three digits, such as *123-456-789* . A SIN can be validated through a simple check-digit process called the [Luhn algorithm](https://docs.aws.amazon.com/https://www.wikipedia.org/wiki/Luhn_algorithm) .\n- *UK Specific*\n\n- *UK_NATIONAL_HEALTH_SERVICE_NUMBER*\n\nA UK National Health Service Number is a 10-17 digit number, such as *485 777 3456* . The current system formats the 10-digit number with spaces after the third and sixth digits. The final digit is an error-detecting checksum.\n- *UK_NATIONAL_INSURANCE_NUMBER*\n\nA UK National Insurance Number (NINO) provides individuals with access to National Insurance (social security) benefits. It is also used for some purposes in the UK tax system.\n\nThe number is nine digits long and starts with two letters, followed by six numbers and one letter. A NINO can be formatted with a space or a dash after the two letters and after the second, forth, and sixth digits.\n- *UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER*\n\nA UK Unique Taxpayer Reference (UTR) is a 10-digit number that identifies a taxpayer or a business.\n- *Custom*\n\n- *Regex filter* - You can use a regular expressions to define patterns for a guardrail to recognize and act upon such as serial number, booking ID etc.."}},"type":"object","required":["action","type"]},"aws-native:bedrock:GuardrailPiiEntityType":{"description":"The currently supported PII entities","type":"string","enum":[{"name":"Address","value":"ADDRESS"},{"name":"Age","value":"AGE"},{"name":"AwsAccessKey","value":"AWS_ACCESS_KEY"},{"name":"AwsSecretKey","value":"AWS_SECRET_KEY"},{"name":"CaHealthNumber","value":"CA_HEALTH_NUMBER"},{"name":"CaSocialInsuranceNumber","value":"CA_SOCIAL_INSURANCE_NUMBER"},{"name":"CreditDebitCardCvv","value":"CREDIT_DEBIT_CARD_CVV"},{"name":"CreditDebitCardExpiry","value":"CREDIT_DEBIT_CARD_EXPIRY"},{"name":"CreditDebitCardNumber","value":"CREDIT_DEBIT_CARD_NUMBER"},{"name":"DriverId","value":"DRIVER_ID"},{"name":"Email","value":"EMAIL"},{"name":"InternationalBankAccountNumber","value":"INTERNATIONAL_BANK_ACCOUNT_NUMBER"},{"name":"IpAddress","value":"IP_ADDRESS"},{"name":"LicensePlate","value":"LICENSE_PLATE"},{"name":"MacAddress","value":"MAC_ADDRESS"},{"name":"Name","value":"NAME"},{"name":"Password","value":"PASSWORD"},{"name":"Phone","value":"PHONE"},{"name":"Pin","value":"PIN"},{"name":"SwiftCode","value":"SWIFT_CODE"},{"name":"UkNationalHealthServiceNumber","value":"UK_NATIONAL_HEALTH_SERVICE_NUMBER"},{"name":"UkNationalInsuranceNumber","value":"UK_NATIONAL_INSURANCE_NUMBER"},{"name":"UkUniqueTaxpayerReferenceNumber","value":"UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER"},{"name":"Url","value":"URL"},{"name":"Username","value":"USERNAME"},{"name":"UsBankAccountNumber","value":"US_BANK_ACCOUNT_NUMBER"},{"name":"UsBankRoutingNumber","value":"US_BANK_ROUTING_NUMBER"},{"name":"UsIndividualTaxIdentificationNumber","value":"US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER"},{"name":"UsPassportNumber","value":"US_PASSPORT_NUMBER"},{"name":"UsSocialSecurityNumber","value":"US_SOCIAL_SECURITY_NUMBER"},{"name":"VehicleIdentificationNumber","value":"VEHICLE_IDENTIFICATION_NUMBER"}]},"aws-native:bedrock:GuardrailRegexConfig":{"description":"A regex configuration.","properties":{"action":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationAction","description":"The guardrail action to configure when matching regular expression is detected."},"description":{"type":"string","description":"The regex description."},"inputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationAction","description":"Specifies the action to take when harmful content is detected in the input. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"inputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"name":{"type":"string","description":"The regex name."},"outputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationAction","description":"Specifies the action to take when harmful content is detected in the output. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"outputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"pattern":{"type":"string","description":"The regex pattern."}},"type":"object","required":["action","name","pattern"]},"aws-native:bedrock:GuardrailSensitiveInformationAction":{"description":"Options for sensitive information action.","type":"string","enum":[{"name":"Block","value":"BLOCK"},{"name":"Anonymize","value":"ANONYMIZE"},{"name":"None","value":"NONE"}]},"aws-native:bedrock:GuardrailSensitiveInformationPolicyConfig":{"description":"Sensitive information policy config for a guardrail.","properties":{"piiEntitiesConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailPiiEntityConfig"},"description":"List of entities."},"regexesConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailRegexConfig"},"description":"List of regex."}},"type":"object"},"aws-native:bedrock:GuardrailStatus":{"description":"Status of the guardrail","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Versioning","value":"VERSIONING"},{"name":"Ready","value":"READY"},{"name":"Failed","value":"FAILED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrock:GuardrailTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Tag Key"},"value":{"type":"string","description":"Tag Value"}},"type":"object","required":["key","value"]},"aws-native:bedrock:GuardrailTopicAction":{"type":"string","enum":[{"name":"Block","value":"BLOCK"},{"name":"None","value":"NONE"}]},"aws-native:bedrock:GuardrailTopicConfig":{"description":"Topic config in topic policy.","properties":{"definition":{"type":"string","description":"Definition of topic in topic policy"},"examples":{"type":"array","items":{"type":"string"},"description":"List of text examples"},"inputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicAction","description":"Specifies the action to take when harmful content is detected in the input. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"inputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"name":{"type":"string","description":"Name of topic in topic policy"},"outputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicAction","description":"Specifies the action to take when harmful content is detected in the output. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"outputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"type":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicType","description":"Specifies to deny the topic."}},"type":"object","required":["definition","name","type"]},"aws-native:bedrock:GuardrailTopicPolicyConfig":{"description":"Topic policy config for a guardrail.","properties":{"topicsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicConfig"},"description":"List of topic configs in topic policy."},"topicsTierConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicPolicyConfigTopicsTierConfigProperties","description":"Guardrail tier config for topic policy"}},"type":"object","required":["topicsConfig"]},"aws-native:bedrock:GuardrailTopicPolicyConfigTopicsTierConfigProperties":{"description":"Guardrail tier config for topic policy","properties":{"tierName":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicsTierName"}},"type":"object","required":["tierName"]},"aws-native:bedrock:GuardrailTopicType":{"description":"Type of topic in a policy","type":"string","enum":[{"name":"Deny","value":"DENY"}]},"aws-native:bedrock:GuardrailTopicsTierName":{"description":"Tier name for tier configuration in topic policy","type":"string","enum":[{"name":"Classic","value":"CLASSIC"},{"name":"Standard","value":"STANDARD"}]},"aws-native:bedrock:GuardrailWordAction":{"type":"string","enum":[{"name":"Block","value":"BLOCK"},{"name":"None","value":"NONE"}]},"aws-native:bedrock:GuardrailWordConfig":{"description":"A custom word config.","properties":{"inputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailWordAction","description":"Specifies the action to take when harmful content is detected in the input. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"inputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the intput. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"outputAction":{"$ref":"#/types/aws-native:bedrock:GuardrailWordAction","description":"Specifies the action to take when harmful content is detected in the output. Supported values include:\n\n- `BLOCK` – Block the content and replace it with blocked messaging.\n- `NONE` – Take no action but return detection information in the trace response."},"outputEnabled":{"type":"boolean","description":"Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response."},"text":{"type":"string","description":"The custom word text."}},"type":"object","required":["text"]},"aws-native:bedrock:GuardrailWordPolicyConfig":{"description":"Word policy config for a guardrail.","properties":{"managedWordListsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailManagedWordsConfig"},"description":"A config for the list of managed words."},"wordsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:GuardrailWordConfig"},"description":"List of custom word configs."}},"type":"object"},"aws-native:bedrock:IntelligentPromptRouterPromptRouterStatus":{"description":"Status of a PromptRouter","type":"string","enum":[{"name":"Available","value":"AVAILABLE"}]},"aws-native:bedrock:IntelligentPromptRouterPromptRouterTargetModel":{"description":"Model configuration","properties":{"modelArn":{"type":"string","description":"Arn of underlying model which are added in the Prompt Router."}},"type":"object","required":["modelArn"]},"aws-native:bedrock:IntelligentPromptRouterPromptRouterType":{"description":"Type of a Prompt Router","type":"string","enum":[{"name":"Custom","value":"custom"},{"name":"Default","value":"default"}]},"aws-native:bedrock:IntelligentPromptRouterRoutingCriteria":{"description":"Represents the criteria used for routing requests.","properties":{"responseQualityDifference":{"type":"number","description":"The criteria's response quality difference."}},"type":"object","required":["responseQualityDifference"]},"aws-native:bedrock:IntelligentPromptRouterTag":{"description":"Definition of the key/value pair for a tag","properties":{"key":{"type":"string","description":"Tag Key"},"value":{"type":"string","description":"Tag Value"}},"type":"object","required":["key","value"]},"aws-native:bedrock:KnowledgeBaseAudioConfiguration":{"description":"Configure the audio configuration for multi modal ingestion.","properties":{"segmentationConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseAudioSegmentationConfiguration"}},"type":"object","required":["segmentationConfiguration"]},"aws-native:bedrock:KnowledgeBaseAudioSegmentationConfiguration":{"description":"Configure the audio segmentation configuration for multi modal ingestion.","properties":{"fixedLengthDuration":{"type":"integer"}},"type":"object","required":["fixedLengthDuration"]},"aws-native:bedrock:KnowledgeBaseBedrockEmbeddingModelConfiguration":{"description":"The vector configuration details for the Bedrock embeddings model.","properties":{"audio":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseAudioConfiguration"},"description":"Configuration settings for processing audio content in multimodal knowledge bases."},"dimensions":{"type":"integer","description":"The dimensions details for the vector configuration used on the Bedrock embeddings model."},"embeddingDataType":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseBedrockEmbeddingModelConfigurationEmbeddingDataType","description":"The data type for the vectors when using a model to convert text into vector embeddings."},"video":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseVideoConfiguration"},"description":"Configuration settings for processing video content in multimodal knowledge bases."}},"type":"object"},"aws-native:bedrock:KnowledgeBaseBedrockEmbeddingModelConfigurationEmbeddingDataType":{"description":"The data type for the vectors when using a model to convert text into vector embeddings.","type":"string","enum":[{"name":"Float32","value":"FLOAT32"},{"name":"Binary","value":"BINARY"}]},"aws-native:bedrock:KnowledgeBaseConfiguration":{"description":"Contains details about the embeddings model used for the knowledge base.","properties":{"kendraKnowledgeBaseConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseKendraKnowledgeBaseConfiguration","description":"Settings for an Amazon Kendra knowledge base.","replaceOnChanges":true},"sqlKnowledgeBaseConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseSqlKnowledgeBaseConfiguration","description":"Specifies configurations for a knowledge base connected to an SQL database."},"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseType","description":"The type of data that the data source is converted into for the knowledge base.","replaceOnChanges":true},"vectorKnowledgeBaseConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseVectorKnowledgeBaseConfiguration","description":"Contains details about the model that's used to convert the data source into vector embeddings.","replaceOnChanges":true}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseCuratedQuery":{"description":"Curated query or question and answer pair","properties":{"naturalLanguage":{"type":"string"},"sql":{"type":"string"}},"type":"object","required":["naturalLanguage","sql"]},"aws-native:bedrock:KnowledgeBaseEmbeddingModelConfiguration":{"description":"The embeddings model configuration details for the vector model used in Knowledge Base.","properties":{"bedrockEmbeddingModelConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseBedrockEmbeddingModelConfiguration","description":"The vector configuration details on the Bedrock embeddings model."}},"type":"object"},"aws-native:bedrock:KnowledgeBaseInclusionType":{"description":"Include or Exclude status for an entity","type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"Exclude","value":"EXCLUDE"}]},"aws-native:bedrock:KnowledgeBaseKendraKnowledgeBaseConfiguration":{"description":"Configurations for a Kendra knowledge base","properties":{"kendraIndexArn":{"type":"string","description":"The ARN of the Amazon Kendra index."}},"type":"object","required":["kendraIndexArn"]},"aws-native:bedrock:KnowledgeBaseMongoDbAtlasConfiguration":{"description":"Contains the storage configuration of the knowledge base in MongoDb Atlas Cloud.","properties":{"collectionName":{"type":"string","description":"Name of the collection within MongoDB Atlas."},"credentialsSecretArn":{"type":"string","description":"The ARN of the secret that you created in AWS Secrets Manager that is linked to your Amazon Mongo database."},"databaseName":{"type":"string","description":"Name of the database within MongoDB Atlas."},"endpoint":{"type":"string","description":"MongoDB Atlas endpoint."},"endpointServiceName":{"type":"string","description":"MongoDB Atlas endpoint service name."},"fieldMapping":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseMongoDbAtlasFieldMapping","description":"Contains the names of the fields to which to map information about the vector store."},"textIndexName":{"type":"string","description":"Name of a MongoDB Atlas text index."},"vectorIndexName":{"type":"string","description":"Name of a MongoDB Atlas index."}},"type":"object","required":["collectionName","credentialsSecretArn","databaseName","endpoint","fieldMapping","vectorIndexName"]},"aws-native:bedrock:KnowledgeBaseMongoDbAtlasFieldMapping":{"description":"Contains the names of the fields to which to map information about the vector store.","properties":{"metadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores metadata about the vector store."},"textField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose."},"vectorField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the vector embeddings for your data sources."}},"type":"object","required":["metadataField","textField","vectorField"]},"aws-native:bedrock:KnowledgeBaseNeptuneAnalyticsConfiguration":{"description":"Contains the configurations to use Neptune Analytics as Vector Store.","properties":{"fieldMapping":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseNeptuneAnalyticsFieldMapping","description":"Contains the names of the fields to which to map information about the vector store."},"graphArn":{"type":"string","description":"ARN for Neptune Analytics graph database."}},"type":"object","required":["fieldMapping","graphArn"]},"aws-native:bedrock:KnowledgeBaseNeptuneAnalyticsFieldMapping":{"description":"A mapping of Bedrock Knowledge Base fields to Neptune Analytics fields.","properties":{"metadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores metadata about the vector store."},"textField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose."}},"type":"object","required":["metadataField","textField"]},"aws-native:bedrock:KnowledgeBaseOpenSearchManagedClusterConfiguration":{"description":"Contains the storage configuration of the knowledge base in Amazon OpenSearch Service.","properties":{"domainArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the OpenSearch domain."},"domainEndpoint":{"type":"string","description":"The endpoint URL the OpenSearch domain."},"fieldMapping":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseOpenSearchManagedClusterFieldMapping","description":"Contains the names of the fields to which to map information about the vector store."},"vectorIndexName":{"type":"string","description":"The name of the vector store."}},"type":"object","required":["domainArn","domainEndpoint","fieldMapping","vectorIndexName"]},"aws-native:bedrock:KnowledgeBaseOpenSearchManagedClusterFieldMapping":{"description":"A mapping of Bedrock Knowledge Base fields to OpenSearch Managed Cluster field names","properties":{"metadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores metadata about the vector store."},"textField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose."},"vectorField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the vector embeddings for your data sources."}},"type":"object","required":["metadataField","textField","vectorField"]},"aws-native:bedrock:KnowledgeBaseOpenSearchServerlessConfiguration":{"description":"Contains the storage configuration of the knowledge base in Amazon OpenSearch Service.","properties":{"collectionArn":{"type":"string","description":"The ARN of the OpenSearch Service vector store."},"fieldMapping":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseOpenSearchServerlessFieldMapping","description":"Contains the names of the fields to which to map information about the vector store."},"vectorIndexName":{"type":"string","description":"The name of the vector store."}},"type":"object","required":["collectionArn","fieldMapping","vectorIndexName"]},"aws-native:bedrock:KnowledgeBaseOpenSearchServerlessFieldMapping":{"description":"A mapping of Bedrock Knowledge Base fields to OpenSearch Serverless field names","properties":{"metadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores metadata about the vector store."},"textField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose."},"vectorField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the vector embeddings for your data sources."}},"type":"object","required":["metadataField","textField","vectorField"]},"aws-native:bedrock:KnowledgeBasePineconeConfiguration":{"description":"Contains the storage configuration of the knowledge base in Pinecone.","properties":{"connectionString":{"type":"string","description":"The endpoint URL for your index management page."},"credentialsSecretArn":{"type":"string","description":"The ARN of the secret that you created in AWS Secrets Manager that is linked to your Pinecone API key."},"fieldMapping":{"$ref":"#/types/aws-native:bedrock:KnowledgeBasePineconeFieldMapping","description":"Contains the names of the fields to which to map information about the vector store."},"namespace":{"type":"string","description":"The namespace to be used to write new data to your database."}},"type":"object","required":["connectionString","credentialsSecretArn","fieldMapping"]},"aws-native:bedrock:KnowledgeBasePineconeFieldMapping":{"description":"Contains the names of the fields to which to map information about the vector store.","properties":{"metadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores metadata about the vector store."},"textField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose."}},"type":"object","required":["metadataField","textField"]},"aws-native:bedrock:KnowledgeBaseQueryEngineType":{"description":"SQL query engine type","type":"string","enum":[{"name":"Redshift","value":"REDSHIFT"}]},"aws-native:bedrock:KnowledgeBaseQueryGenerationColumn":{"description":"Redshift query generation column","properties":{"description":{"type":"string"},"inclusion":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseInclusionType"},"name":{"type":"string"}},"type":"object"},"aws-native:bedrock:KnowledgeBaseQueryGenerationConfiguration":{"description":"Configurations for generating Redshift engine queries","properties":{"executionTimeoutSeconds":{"type":"integer","description":"The time after which query generation will time out."},"generationContext":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseQueryGenerationContext","description":"Specifies configurations for context to use during query generation."}},"type":"object"},"aws-native:bedrock:KnowledgeBaseQueryGenerationContext":{"description":"Context used to improve query generation","properties":{"curatedQueries":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseCuratedQuery"},"description":"An array of objects, each of which defines information about example queries to help the query engine generate appropriate SQL queries."},"tables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseQueryGenerationTable"},"description":"An array of objects, each of which defines information about a table in the database."}},"type":"object"},"aws-native:bedrock:KnowledgeBaseQueryGenerationTable":{"description":"Tables used for Redshift query generation context","properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseQueryGenerationColumn"}},"description":{"type":"string"},"inclusion":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseInclusionType"},"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:bedrock:KnowledgeBaseRdsConfiguration":{"description":"Contains details about the storage configuration of the knowledge base in Amazon RDS. For more information, see Create a vector index in Amazon RDS.","properties":{"credentialsSecretArn":{"type":"string","description":"The ARN of the secret that you created in AWS Secrets Manager that is linked to your Amazon RDS database."},"databaseName":{"type":"string","description":"The name of your Amazon RDS database."},"fieldMapping":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRdsFieldMapping","description":"Contains the names of the fields to which to map information about the vector store."},"resourceArn":{"type":"string","description":"The ARN of the vector store."},"tableName":{"type":"string","description":"The name of the table in the database."}},"type":"object","required":["credentialsSecretArn","databaseName","fieldMapping","resourceArn","tableName"]},"aws-native:bedrock:KnowledgeBaseRdsFieldMapping":{"description":"Contains the names of the fields to which to map information about the vector store.","properties":{"customMetadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores custom metadata about the vector store."},"metadataField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores metadata about the vector store."},"primaryKeyField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the ID for each entry."},"textField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose."},"vectorField":{"type":"string","description":"The name of the field in which Amazon Bedrock stores the vector embeddings for your data sources."}},"type":"object","required":["metadataField","primaryKeyField","textField","vectorField"]},"aws-native:bedrock:KnowledgeBaseRedshiftConfiguration":{"description":"Configurations for a Redshift knowledge base","properties":{"queryEngineConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineConfiguration","description":"Specifies configurations for an Amazon Redshift query engine.","replaceOnChanges":true},"queryGenerationConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseQueryGenerationConfiguration","description":"Specifies configurations for generating queries."},"storageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineStorageConfiguration"},"description":"Specifies configurations for Amazon Redshift database storage.","replaceOnChanges":true}},"type":"object","required":["queryEngineConfiguration","storageConfigurations"]},"aws-native:bedrock:KnowledgeBaseRedshiftProvisionedAuthConfiguration":{"description":"Configurations for Redshift query engine provisioned auth setup","properties":{"databaseUser":{"type":"string","description":"Redshift database user"},"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftProvisionedAuthType","description":"The type of authentication to use."},"usernamePasswordSecretArn":{"type":"string","description":"The ARN of an Secrets Manager secret for authentication."}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseRedshiftProvisionedAuthType":{"description":"Provisioned Redshift auth type","type":"string","enum":[{"name":"Iam","value":"IAM"},{"name":"UsernamePassword","value":"USERNAME_PASSWORD"},{"name":"Username","value":"USERNAME"}]},"aws-native:bedrock:KnowledgeBaseRedshiftProvisionedConfiguration":{"description":"Configurations for provisioned Redshift query engine","properties":{"authConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftProvisionedAuthConfiguration","description":"Specifies configurations for authentication to Amazon Redshift."},"clusterIdentifier":{"type":"string","description":"The ID of the Amazon Redshift cluster."}},"type":"object","required":["authConfiguration","clusterIdentifier"]},"aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineAwsDataCatalogStorageConfiguration":{"description":"Configurations for Redshift query engine AWS Data Catalog backed storage","properties":{"tableNames":{"type":"array","items":{"type":"string"}}},"type":"object","required":["tableNames"]},"aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineConfiguration":{"description":"Configurations for Redshift query engine","properties":{"provisionedConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftProvisionedConfiguration","description":"Specifies configurations for a provisioned Amazon Redshift query engine."},"serverlessConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftServerlessConfiguration","description":"Specifies configurations for a serverless Amazon Redshift query engine."},"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineType","description":"The type of query engine."}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineRedshiftStorageConfiguration":{"description":"Configurations for Redshift query engine Redshift backed storage","properties":{"databaseName":{"type":"string"}},"type":"object","required":["databaseName"]},"aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineStorageConfiguration":{"description":"Configurations for available Redshift query engine storage types","properties":{"awsDataCatalogConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineAwsDataCatalogStorageConfiguration"},"redshiftConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineRedshiftStorageConfiguration"},"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineStorageType"}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineStorageType":{"description":"Redshift query engine storage type","type":"string","enum":[{"name":"Redshift","value":"REDSHIFT"},{"name":"AwsDataCatalog","value":"AWS_DATA_CATALOG"}]},"aws-native:bedrock:KnowledgeBaseRedshiftQueryEngineType":{"description":"Redshift query engine type","type":"string","enum":[{"name":"Serverless","value":"SERVERLESS"},{"name":"Provisioned","value":"PROVISIONED"}]},"aws-native:bedrock:KnowledgeBaseRedshiftServerlessAuthConfiguration":{"description":"Configurations for Redshift query engine serverless auth setup","properties":{"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftServerlessAuthType","description":"The type of authentication to use."},"usernamePasswordSecretArn":{"type":"string","description":"The ARN of an Secrets Manager secret for authentication."}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseRedshiftServerlessAuthType":{"description":"Serverless Redshift auth type","type":"string","enum":[{"name":"Iam","value":"IAM"},{"name":"UsernamePassword","value":"USERNAME_PASSWORD"}]},"aws-native:bedrock:KnowledgeBaseRedshiftServerlessConfiguration":{"description":"Configurations for serverless Redshift query engine","properties":{"authConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftServerlessAuthConfiguration","description":"Specifies configurations for authentication to an Amazon Redshift provisioned data warehouse."},"workgroupArn":{"type":"string","description":"The ARN of the Amazon Redshift workgroup."}},"type":"object","required":["authConfiguration","workgroupArn"]},"aws-native:bedrock:KnowledgeBaseS3Location":{"description":"An Amazon S3 location.","properties":{"uri":{"type":"string","description":"The location's URI"}},"type":"object","required":["uri"]},"aws-native:bedrock:KnowledgeBaseS3VectorsConfiguration":{"description":"Contains the storage configuration of the knowledge base for S3 vectors.","properties":{"indexArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the vector index used for the knowledge base. This ARN identifies the specific vector index resource within Amazon Bedrock."},"indexName":{"type":"string","description":"The name of the vector index used for the knowledge base. This name identifies the vector index within the Amazon Bedrock service."},"vectorBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the S3 bucket where vector embeddings are stored. This bucket contains the vector data used by the knowledge base."}},"type":"object"},"aws-native:bedrock:KnowledgeBaseSqlKnowledgeBaseConfiguration":{"description":"Configurations for a SQL knowledge base","properties":{"redshiftConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRedshiftConfiguration","description":"Specifies configurations for a knowledge base connected to an Amazon Redshift database."},"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseQueryEngineType","description":"The type of SQL database to connect to the knowledge base.","replaceOnChanges":true}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseStatus":{"description":"The status of a knowledge base.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"Failed","value":"FAILED"},{"name":"DeleteUnsuccessful","value":"DELETE_UNSUCCESSFUL"}]},"aws-native:bedrock:KnowledgeBaseStorageConfiguration":{"description":"The vector store service in which the knowledge base is stored.","properties":{"mongoDbAtlasConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseMongoDbAtlasConfiguration","description":"Contains the storage configuration of the knowledge base in MongoDB Atlas."},"neptuneAnalyticsConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseNeptuneAnalyticsConfiguration","description":"Contains details about the Neptune Analytics configuration of the knowledge base in Amazon Neptune. For more information, see [Create a vector index in Amazon Neptune Analytics.](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-setup-neptune.html) ."},"opensearchManagedClusterConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseOpenSearchManagedClusterConfiguration","description":"Contains details about the storage configuration of the knowledge base in OpenSearch Managed Cluster. For more information, see [Create a vector index in Amazon OpenSearch Service](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-setup-osm.html) ."},"opensearchServerlessConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseOpenSearchServerlessConfiguration","description":"Contains the storage configuration of the knowledge base in Amazon OpenSearch Service."},"pineconeConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBasePineconeConfiguration","description":"Contains the storage configuration of the knowledge base in Pinecone."},"rdsConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseRdsConfiguration","description":"Contains details about the storage configuration of the knowledge base in Amazon RDS. For more information, see [Create a vector index in Amazon RDS](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-setup-rds.html) ."},"s3VectorsConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseS3VectorsConfiguration","description":"The configuration settings for storing knowledge base data using S3 vectors. This includes vector index information and S3 bucket details for vector storage."},"type":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseStorageType","description":"The vector store service in which the knowledge base is stored."}},"type":"object","required":["type"]},"aws-native:bedrock:KnowledgeBaseStorageType":{"description":"The storage type of a knowledge base.","type":"string","enum":[{"name":"OpensearchServerless","value":"OPENSEARCH_SERVERLESS"},{"name":"Pinecone","value":"PINECONE"},{"name":"Rds","value":"RDS"},{"name":"MongoDbAtlas","value":"MONGO_DB_ATLAS"},{"name":"NeptuneAnalytics","value":"NEPTUNE_ANALYTICS"},{"name":"S3Vectors","value":"S3_VECTORS"},{"name":"OpensearchManagedCluster","value":"OPENSEARCH_MANAGED_CLUSTER"}]},"aws-native:bedrock:KnowledgeBaseSupplementalDataStorageConfiguration":{"description":"Configurations for supplemental data storage.","properties":{"supplementalDataStorageLocations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseSupplementalDataStorageLocation"}}},"type":"object","required":["supplementalDataStorageLocations"]},"aws-native:bedrock:KnowledgeBaseSupplementalDataStorageLocation":{"description":"Supplemental data storage location.","properties":{"s3Location":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseS3Location"},"supplementalDataStorageLocationType":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseSupplementalDataStorageLocationType"}},"type":"object","required":["supplementalDataStorageLocationType"]},"aws-native:bedrock:KnowledgeBaseSupplementalDataStorageLocationType":{"description":"Supplemental data storage location type.","type":"string","enum":[{"name":"S3","value":"S3"}]},"aws-native:bedrock:KnowledgeBaseType":{"description":"The type of a knowledge base.","type":"string","enum":[{"name":"Vector","value":"VECTOR"},{"name":"Kendra","value":"KENDRA"},{"name":"Sql","value":"SQL"}]},"aws-native:bedrock:KnowledgeBaseVectorKnowledgeBaseConfiguration":{"description":"Contains details about the model used to create vector embeddings for the knowledge base.","properties":{"embeddingModelArn":{"type":"string","description":"The ARN of the model used to create vector embeddings for the knowledge base."},"embeddingModelConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseEmbeddingModelConfiguration","description":"The embeddings model configuration details for the vector model used in Knowledge Base."},"supplementalDataStorageConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseSupplementalDataStorageConfiguration","description":"If you include multimodal data from your data source, use this object to specify configurations for the storage location of the images extracted from your documents. These images can be retrieved and returned to the end user. They can also be used in generation when using [RetrieveAndGenerate](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_RetrieveAndGenerate.html) ."}},"type":"object","required":["embeddingModelArn"]},"aws-native:bedrock:KnowledgeBaseVideoConfiguration":{"description":"Configure the video configuration for multi modal ingestion.","properties":{"segmentationConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseVideoSegmentationConfiguration"}},"type":"object","required":["segmentationConfiguration"]},"aws-native:bedrock:KnowledgeBaseVideoSegmentationConfiguration":{"description":"Configure the video segmentation configuration for multi modal ingestion.","properties":{"fixedLengthDuration":{"type":"integer"}},"type":"object","required":["fixedLengthDuration"]},"aws-native:bedrock:PromptAdditionalModelRequestFields":{"description":"Contains model-specific configurations","type":"object"},"aws-native:bedrock:PromptAgentResource":{"description":"Target Agent to invoke with Prompt","properties":{"agentIdentifier":{"type":"string","description":"Arn representation of the Agent Alias."}},"type":"object","required":["agentIdentifier"]},"aws-native:bedrock:PromptAnyToolChoice":{"description":"Any Tool choice","type":"object"},"aws-native:bedrock:PromptAutoToolChoice":{"description":"Auto Tool choice","type":"object"},"aws-native:bedrock:PromptCachePointBlock":{"description":"CachePointBlock","properties":{"type":{"$ref":"#/types/aws-native:bedrock:PromptCachePointType"}},"type":"object","required":["type"]},"aws-native:bedrock:PromptCachePointType":{"description":"CachePoint types for CachePointBlock","type":"string","enum":[{"name":"Default","value":"default"}]},"aws-native:bedrock:PromptChatPromptTemplateConfiguration":{"description":"Configuration for chat prompt template","properties":{"inputVariables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptInputVariable"},"description":"List of input variables"},"messages":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptMessage"},"description":"List of messages for chat prompt template"},"system":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptSystemContentBlock0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptSystemContentBlock1Properties"}]},"description":"Configuration for chat prompt template"},"toolConfiguration":{"$ref":"#/types/aws-native:bedrock:PromptToolConfiguration"}},"type":"object","required":["messages"]},"aws-native:bedrock:PromptContentBlock0Properties":{"description":"Configuration for chat prompt template","properties":{"text":{"type":"string","description":"Configuration for chat prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptContentBlock1Properties":{"description":"Configuration for chat prompt template","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptCachePointBlock"}},"type":"object","required":["cachePoint"]},"aws-native:bedrock:PromptConversationRole":{"description":"Conversation roles for the chat prompt","type":"string","enum":[{"name":"User","value":"user"},{"name":"Assistant","value":"assistant"}]},"aws-native:bedrock:PromptGenAiResource0Properties":{"description":"Target resource to invoke with Prompt","properties":{"agent":{"$ref":"#/types/aws-native:bedrock:PromptAgentResource"}},"type":"object","required":["agent"]},"aws-native:bedrock:PromptGenAiResourceProperties":{"description":"Target resource to invoke with Prompt","properties":{"agent":{"$ref":"#/types/aws-native:bedrock:PromptAgentResource"}},"type":"object","required":["agent"]},"aws-native:bedrock:PromptInferenceConfiguration0Properties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:PromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptInferenceConfigurationProperties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:PromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptInputVariable":{"description":"Input variable","properties":{"name":{"type":"string","description":"Name for an input variable"}},"type":"object"},"aws-native:bedrock:PromptMessage":{"description":"Chat prompt Message","properties":{"content":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptContentBlock0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptContentBlock1Properties"}]},"description":"List of Content Blocks"},"role":{"$ref":"#/types/aws-native:bedrock:PromptConversationRole"}},"type":"object","required":["content","role"]},"aws-native:bedrock:PromptMetadataEntry":{"description":"Contains a key-value pair that defines a metadata tag and value to attach to a prompt variant.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:bedrock:PromptModelInferenceConfiguration":{"description":"Prompt model inference configuration","properties":{"maxTokens":{"type":"number","description":"Maximum length of output"},"stopSequences":{"type":"array","items":{"type":"string"},"description":"List of stop sequences"},"temperature":{"type":"number","description":"Controls randomness, higher values increase diversity"},"topP":{"type":"number","description":"Cumulative probability cutoff for token selection"}},"type":"object"},"aws-native:bedrock:PromptSpecificToolChoice":{"description":"Specific Tool choice","properties":{"name":{"type":"string","description":"Tool name"}},"type":"object","required":["name"]},"aws-native:bedrock:PromptSystemContentBlock0Properties":{"description":"Configuration for chat prompt template","properties":{"text":{"type":"string","description":"Configuration for chat prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptSystemContentBlock1Properties":{"description":"Configuration for chat prompt template","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptCachePointBlock"}},"type":"object","required":["cachePoint"]},"aws-native:bedrock:PromptTemplateConfiguration0Properties":{"description":"Prompt template configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:PromptTextPromptTemplateConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptTemplateConfiguration1Properties":{"description":"Prompt template configuration","properties":{"chat":{"$ref":"#/types/aws-native:bedrock:PromptChatPromptTemplateConfiguration"}},"type":"object","required":["chat"]},"aws-native:bedrock:PromptTemplateType":{"description":"Prompt template type","type":"string","enum":[{"name":"Text","value":"TEXT"},{"name":"Chat","value":"CHAT"}]},"aws-native:bedrock:PromptTextPromptTemplateConfiguration":{"description":"Configuration for text prompt template","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptCachePointBlock"},"inputVariables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptInputVariable"},"description":"List of input variables"},"text":{"type":"string","description":"Prompt content for String prompt template"},"textS3Location":{"$ref":"#/types/aws-native:bedrock:PromptTextS3Location"}},"type":"object"},"aws-native:bedrock:PromptTextS3Location":{"description":"The identifier for the S3 resource.","properties":{"bucket":{"type":"string","description":"A bucket in S3"},"key":{"type":"string","description":"A object key in S3"},"version":{"type":"string","description":"The version of the the S3 object to use"}},"type":"object","required":["bucket","key"]},"aws-native:bedrock:PromptTool0Properties":{"description":"Tool details","properties":{"toolSpec":{"$ref":"#/types/aws-native:bedrock:PromptToolSpecification"}},"type":"object","required":["toolSpec"]},"aws-native:bedrock:PromptTool1Properties":{"description":"Tool details","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptCachePointBlock"}},"type":"object","required":["cachePoint"]},"aws-native:bedrock:PromptToolChoice0Properties":{"description":"Tool choice","properties":{"auto":{"$ref":"#/types/aws-native:bedrock:PromptAutoToolChoice"}},"type":"object","required":["auto"]},"aws-native:bedrock:PromptToolChoice1Properties":{"description":"Tool choice","properties":{"any":{"$ref":"#/types/aws-native:bedrock:PromptAnyToolChoice"}},"type":"object","required":["any"]},"aws-native:bedrock:PromptToolChoice2Properties":{"description":"Tool choice","properties":{"tool":{"$ref":"#/types/aws-native:bedrock:PromptSpecificToolChoice"}},"type":"object","required":["tool"]},"aws-native:bedrock:PromptToolConfiguration":{"description":"Tool configuration","properties":{"toolChoice":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptToolChoice0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptToolChoice1Properties"},{"$ref":"#/types/aws-native:bedrock:PromptToolChoice2Properties"}]},"tools":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptTool0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptTool1Properties"}]},"description":"List of Tools"}},"type":"object","required":["tools"]},"aws-native:bedrock:PromptToolInputSchema0Properties":{"description":"Tool input schema json","properties":{"json":{"$ref":"pulumi.json#/Any"}},"type":"object","required":["json"]},"aws-native:bedrock:PromptToolInputSchemaProperties":{"description":"Tool input schema json","properties":{"json":{"$ref":"pulumi.json#/Any"}},"type":"object","required":["json"]},"aws-native:bedrock:PromptToolSpecification":{"description":"Tool specification","properties":{"description":{"type":"string"},"inputSchema":{"$ref":"#/types/aws-native:bedrock:PromptToolInputSchemaProperties"},"name":{"type":"string","description":"Tool name"}},"type":"object","required":["inputSchema","name"]},"aws-native:bedrock:PromptVariant":{"description":"Prompt variant","properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:PromptAdditionalModelRequestFields","description":"Contains model-specific inference configurations that aren't in the `inferenceConfiguration` field. To see model-specific inference parameters, see [Inference request parameters and response fields for foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-parameters.html) ."},"genAiResource":{"$ref":"#/types/aws-native:bedrock:PromptGenAiResourceProperties","description":"Specifies a generative AI resource with which to use the prompt."},"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:PromptInferenceConfigurationProperties","description":"Contains inference configurations for the prompt variant."},"metadata":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptMetadataEntry"},"description":"An array of objects, each containing a key-value pair that defines a metadata tag and value to attach to a prompt variant."},"modelId":{"type":"string","description":"ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models."},"name":{"type":"string","description":"Name for a variant."},"templateConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptTemplateConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptTemplateConfiguration1Properties"}],"description":"Contains configurations for the prompt template."},"templateType":{"$ref":"#/types/aws-native:bedrock:PromptTemplateType","description":"The type of prompt template to use."}},"type":"object","required":["name","templateConfiguration","templateType"]},"aws-native:bedrock:PromptVersionAdditionalModelRequestFields":{"description":"Contains model-specific configurations","type":"object"},"aws-native:bedrock:PromptVersionAnyToolChoice":{"description":"Any Tool choice","type":"object"},"aws-native:bedrock:PromptVersionAutoToolChoice":{"description":"Auto Tool choice","type":"object"},"aws-native:bedrock:PromptVersionCachePointBlock":{"description":"CachePointBlock","properties":{"type":{"$ref":"#/types/aws-native:bedrock:PromptVersionCachePointType"}},"type":"object","required":["type"]},"aws-native:bedrock:PromptVersionCachePointType":{"description":"CachePoint types for CachePointBlock","type":"string","enum":[{"name":"Default","value":"default"}]},"aws-native:bedrock:PromptVersionChatPromptTemplateConfiguration":{"description":"Configuration for chat prompt template","properties":{"inputVariables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptInputVariable"},"description":"List of input variables"},"messages":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVersionMessage"},"description":"List of messages for chat prompt template"},"system":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptVersionSystemContentBlock0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptVersionSystemContentBlock1Properties"}]},"description":"Configuration for chat prompt template"},"toolConfiguration":{"$ref":"#/types/aws-native:bedrock:PromptVersionToolConfiguration"}},"type":"object","required":["messages"]},"aws-native:bedrock:PromptVersionContentBlock0Properties":{"description":"Configuration for chat prompt template","properties":{"text":{"type":"string","description":"Configuration for chat prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptVersionContentBlock1Properties":{"description":"Configuration for chat prompt template","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptVersionCachePointBlock"}},"type":"object","required":["cachePoint"]},"aws-native:bedrock:PromptVersionConversationRole":{"description":"Conversation roles for the chat prompt","type":"string","enum":[{"name":"User","value":"user"},{"name":"Assistant","value":"assistant"}]},"aws-native:bedrock:PromptVersionMessage":{"description":"Chat prompt Message","properties":{"content":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptVersionContentBlock0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptVersionContentBlock1Properties"}]},"description":"List of Content Blocks"},"role":{"$ref":"#/types/aws-native:bedrock:PromptVersionConversationRole"}},"type":"object","required":["content","role"]},"aws-native:bedrock:PromptVersionPromptAgentResource":{"description":"Target Agent to invoke with Prompt","properties":{"agentIdentifier":{"type":"string","description":"Arn representation of the Agent Alias."}},"type":"object","required":["agentIdentifier"]},"aws-native:bedrock:PromptVersionPromptGenAiResource0Properties":{"description":"Target resource to invoke with Prompt","properties":{"agent":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptAgentResource"}},"type":"object","required":["agent"]},"aws-native:bedrock:PromptVersionPromptGenAiResourceProperties":{"description":"Target resource to invoke with Prompt","properties":{"agent":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptAgentResource"}},"type":"object","required":["agent"]},"aws-native:bedrock:PromptVersionPromptInferenceConfiguration0Properties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptVersionPromptInferenceConfigurationProperties":{"description":"Model inference configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptModelInferenceConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptVersionPromptInputVariable":{"description":"Input variable","properties":{"name":{"type":"string","description":"Name for an input variable"}},"type":"object"},"aws-native:bedrock:PromptVersionPromptMetadataEntry":{"description":"Contains a key-value pair that defines a metadata tag and value to attach to a prompt variant.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:bedrock:PromptVersionPromptModelInferenceConfiguration":{"description":"Prompt model inference configuration","properties":{"maxTokens":{"type":"number","description":"Maximum length of output"},"stopSequences":{"type":"array","items":{"type":"string"},"description":"List of stop sequences"},"temperature":{"type":"number","description":"Controls randomness, higher values increase diversity"},"topP":{"type":"number","description":"Cumulative probability cutoff for token selection"}},"type":"object"},"aws-native:bedrock:PromptVersionPromptTemplateConfiguration0Properties":{"description":"Prompt template configuration","properties":{"text":{"$ref":"#/types/aws-native:bedrock:PromptVersionTextPromptTemplateConfiguration"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptVersionPromptTemplateConfiguration1Properties":{"description":"Prompt template configuration","properties":{"chat":{"$ref":"#/types/aws-native:bedrock:PromptVersionChatPromptTemplateConfiguration"}},"type":"object","required":["chat"]},"aws-native:bedrock:PromptVersionPromptTemplateType":{"description":"Prompt template type","type":"string","enum":[{"name":"Text","value":"TEXT"},{"name":"Chat","value":"CHAT"}]},"aws-native:bedrock:PromptVersionPromptVariant":{"description":"Prompt variant","properties":{"additionalModelRequestFields":{"$ref":"#/types/aws-native:bedrock:PromptVersionAdditionalModelRequestFields","description":"Contains model-specific inference configurations that aren't in the `inferenceConfiguration` field. To see model-specific inference parameters, see [Inference request parameters and response fields for foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-parameters.html) ."},"genAiResource":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptGenAiResourceProperties","description":"Specifies a generative AI resource with which to use the prompt."},"inferenceConfiguration":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptInferenceConfigurationProperties","description":"Contains inference configurations for the prompt variant."},"metadata":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptMetadataEntry"},"description":"An array of objects, each containing a key-value pair that defines a metadata tag and value to attach to a prompt variant."},"modelId":{"type":"string","description":"ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models."},"name":{"type":"string","description":"Name for a variant."},"templateConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptTemplateConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptTemplateConfiguration1Properties"}],"description":"Contains configurations for the prompt template."},"templateType":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptTemplateType","description":"The type of prompt template to use."}},"type":"object","required":["name","templateConfiguration","templateType"]},"aws-native:bedrock:PromptVersionSpecificToolChoice":{"description":"Specific Tool choice","properties":{"name":{"type":"string","description":"Tool name"}},"type":"object","required":["name"]},"aws-native:bedrock:PromptVersionSystemContentBlock0Properties":{"description":"Configuration for chat prompt template","properties":{"text":{"type":"string","description":"Configuration for chat prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptVersionSystemContentBlock1Properties":{"description":"Configuration for chat prompt template","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptVersionCachePointBlock"}},"type":"object","required":["cachePoint"]},"aws-native:bedrock:PromptVersionTextPromptTemplateConfiguration":{"description":"Configuration for text prompt template","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptVersionCachePointBlock"},"inputVariables":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptInputVariable"},"description":"List of input variables"},"text":{"type":"string","description":"Prompt content for String prompt template"}},"type":"object","required":["text"]},"aws-native:bedrock:PromptVersionTool0Properties":{"description":"Tool details","properties":{"toolSpec":{"$ref":"#/types/aws-native:bedrock:PromptVersionToolSpecification"}},"type":"object","required":["toolSpec"]},"aws-native:bedrock:PromptVersionTool1Properties":{"description":"Tool details","properties":{"cachePoint":{"$ref":"#/types/aws-native:bedrock:PromptVersionCachePointBlock"}},"type":"object","required":["cachePoint"]},"aws-native:bedrock:PromptVersionToolChoice0Properties":{"description":"Tool choice","properties":{"auto":{"$ref":"#/types/aws-native:bedrock:PromptVersionAutoToolChoice"}},"type":"object","required":["auto"]},"aws-native:bedrock:PromptVersionToolChoice1Properties":{"description":"Tool choice","properties":{"any":{"$ref":"#/types/aws-native:bedrock:PromptVersionAnyToolChoice"}},"type":"object","required":["any"]},"aws-native:bedrock:PromptVersionToolChoice2Properties":{"description":"Tool choice","properties":{"tool":{"$ref":"#/types/aws-native:bedrock:PromptVersionSpecificToolChoice"}},"type":"object","required":["tool"]},"aws-native:bedrock:PromptVersionToolConfiguration":{"description":"Tool configuration","properties":{"toolChoice":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptVersionToolChoice0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptVersionToolChoice1Properties"},{"$ref":"#/types/aws-native:bedrock:PromptVersionToolChoice2Properties"}]},"tools":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:bedrock:PromptVersionTool0Properties"},{"$ref":"#/types/aws-native:bedrock:PromptVersionTool1Properties"}]},"description":"List of Tools"}},"type":"object","required":["tools"]},"aws-native:bedrock:PromptVersionToolInputSchema0Properties":{"description":"Tool input schema json","properties":{"json":{"$ref":"pulumi.json#/Any"}},"type":"object","required":["json"]},"aws-native:bedrock:PromptVersionToolInputSchemaProperties":{"description":"Tool input schema json","properties":{"json":{"$ref":"pulumi.json#/Any"}},"type":"object","required":["json"]},"aws-native:bedrock:PromptVersionToolSpecification":{"description":"Tool specification","properties":{"description":{"type":"string"},"inputSchema":{"$ref":"#/types/aws-native:bedrock:PromptVersionToolInputSchemaProperties"},"name":{"type":"string","description":"Tool name"}},"type":"object","required":["inputSchema","name"]},"aws-native:bedrockagentcore:BrowserCustomBrowserNetworkConfiguration":{"description":"Network configuration for browser","properties":{"networkMode":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserNetworkMode","description":"The network mode."},"vpcConfig":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomVpcConfig"}},"type":"object","required":["networkMode"]},"aws-native:bedrockagentcore:BrowserCustomBrowserNetworkMode":{"description":"Network modes supported by browser","type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Vpc","value":"VPC"}]},"aws-native:bedrockagentcore:BrowserCustomBrowserSigning":{"description":"Browser signing configuration","properties":{"enabled":{"type":"boolean"}},"type":"object"},"aws-native:bedrockagentcore:BrowserCustomBrowserStatus":{"description":"Status of browser","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Ready","value":"READY"},{"name":"Deleting","value":"DELETING"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"Deleted","value":"DELETED"}]},"aws-native:bedrockagentcore:BrowserCustomRecordingConfig":{"description":"Recording configuration for browser","properties":{"enabled":{"type":"boolean","description":"The recording configuration for a browser. This structure defines how browser sessions are recorded."},"s3Location":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomS3Location","description":"The S3 location."}},"type":"object"},"aws-native:bedrockagentcore:BrowserCustomS3Location":{"description":"S3 Location Configuration","properties":{"bucket":{"type":"string","description":"The S3 location bucket name."},"prefix":{"type":"string","description":"The S3 location object prefix."}},"type":"object","required":["bucket","prefix"]},"aws-native:bedrockagentcore:BrowserCustomVpcConfig":{"description":"Network mode configuration for VPC","properties":{"securityGroups":{"type":"array","items":{"type":"string"}},"subnets":{"type":"array","items":{"type":"string"}}},"type":"object","required":["securityGroups","subnets"]},"aws-native:bedrockagentcore:BrowserProfileStatus":{"description":"Status of browser profile","type":"string","enum":[{"name":"Ready","value":"READY"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"Saving","value":"SAVING"}]},"aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterNetworkConfiguration":{"description":"Network configuration for code interpreter","properties":{"networkMode":{"$ref":"#/types/aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterNetworkMode","description":"The network mode."},"vpcConfig":{"$ref":"#/types/aws-native:bedrockagentcore:CodeInterpreterCustomVpcConfig"}},"type":"object","required":["networkMode"]},"aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterNetworkMode":{"description":"Network modes supported by code interpreter","type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Sandbox","value":"SANDBOX"},{"name":"Vpc","value":"VPC"}]},"aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterStatus":{"description":"Status of Code interpreter","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Ready","value":"READY"},{"name":"Deleting","value":"DELETING"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"Deleted","value":"DELETED"}]},"aws-native:bedrockagentcore:CodeInterpreterCustomVpcConfig":{"description":"Network mode configuration for VPC","properties":{"securityGroups":{"type":"array","items":{"type":"string"}},"subnets":{"type":"array","items":{"type":"string"}}},"type":"object","required":["securityGroups","subnets"]},"aws-native:bedrockagentcore:EvaluatorBedrockEvaluatorModelConfig":{"description":"The configuration for using Amazon Bedrock models in evaluator assessments.","properties":{"additionalModelRequestFields":{"$ref":"pulumi.json#/Any","description":"Additional model-specific request fields."},"inferenceConfig":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorInferenceConfiguration"},"modelId":{"type":"string","description":"The identifier of the Amazon Bedrock model to use for evaluation."}},"type":"object","required":["modelId"]},"aws-native:bedrockagentcore:EvaluatorCategoricalScaleDefinition":{"description":"A categorical rating scale option.","properties":{"definition":{"type":"string","description":"The description that explains what this categorical rating represents."},"label":{"type":"string","description":"The label of this categorical rating option."}},"type":"object","required":["definition","label"]},"aws-native:bedrockagentcore:EvaluatorConfig":{"description":"The configuration that defines how an evaluator assesses agent performance.","properties":{"llmAsAJudge":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorLlmAsAJudgeEvaluatorConfig"}},"type":"object","required":["llmAsAJudge"]},"aws-native:bedrockagentcore:EvaluatorInferenceConfiguration":{"description":"The inference configuration parameters that control model behavior during evaluation.","properties":{"maxTokens":{"type":"integer","description":"The maximum number of tokens to generate in the model response."},"temperature":{"type":"number","description":"The temperature value that controls randomness in the model's responses."},"topP":{"type":"number","description":"The top-p sampling parameter that controls the diversity of the model's responses."}},"type":"object"},"aws-native:bedrockagentcore:EvaluatorLevel":{"type":"string","enum":[{"name":"ToolCall","value":"TOOL_CALL"},{"name":"Trace","value":"TRACE"},{"name":"Session","value":"SESSION"}]},"aws-native:bedrockagentcore:EvaluatorLlmAsAJudgeEvaluatorConfig":{"description":"The configuration for LLM-as-a-Judge evaluation.","properties":{"instructions":{"type":"string","description":"The evaluation instructions that guide the language model in assessing agent performance."},"modelConfig":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorModelConfig"},"ratingScale":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorRatingScale"}},"type":"object","required":["instructions","modelConfig","ratingScale"]},"aws-native:bedrockagentcore:EvaluatorModelConfig":{"description":"The model configuration that specifies which foundation model to use for evaluation.","properties":{"bedrockEvaluatorModelConfig":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorBedrockEvaluatorModelConfig"}},"type":"object","required":["bedrockEvaluatorModelConfig"]},"aws-native:bedrockagentcore:EvaluatorNumericalScaleDefinition":{"description":"A numerical rating scale option.","properties":{"definition":{"type":"string","description":"The description that explains what this numerical rating represents."},"label":{"type":"string","description":"The label that describes this numerical rating option."},"value":{"type":"number","description":"The numerical value for this rating scale option."}},"type":"object","required":["definition","label","value"]},"aws-native:bedrockagentcore:EvaluatorRatingScale":{"description":"The rating scale that defines how evaluators should score agent performance.","properties":{"categorical":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorCategoricalScaleDefinition"}},"numerical":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorNumericalScaleDefinition"}}},"type":"object"},"aws-native:bedrockagentcore:EvaluatorStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrockagentcore:EvaluatorTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:bedrockagentcore:GatewayAuthorizerConfiguration0Properties":{"properties":{"customJwtAuthorizer":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayCustomJwtAuthorizerConfiguration"}},"type":"object","required":["customJwtAuthorizer"]},"aws-native:bedrockagentcore:GatewayAuthorizerConfigurationProperties":{"properties":{"customJwtAuthorizer":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayCustomJwtAuthorizerConfiguration"}},"type":"object","required":["customJwtAuthorizer"]},"aws-native:bedrockagentcore:GatewayAuthorizerType":{"type":"string","enum":[{"name":"CustomJwt","value":"CUSTOM_JWT"},{"name":"AwsIam","value":"AWS_IAM"},{"name":"None","value":"NONE"}]},"aws-native:bedrockagentcore:GatewayAuthorizingClaimMatchValueType":{"description":"The value or values in the custom claim to match and relationship of match","properties":{"claimMatchOperator":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayClaimMatchOperator"},"claimMatchValue":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayClaimMatchValueType"}},"type":"object","required":["claimMatchOperator","claimMatchValue"]},"aws-native:bedrockagentcore:GatewayClaimMatchOperator":{"description":"The relationship between the claim field value and the value or values being matched","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"Contains","value":"CONTAINS"},{"name":"ContainsAny","value":"CONTAINS_ANY"}]},"aws-native:bedrockagentcore:GatewayClaimMatchValueType":{"description":"The value or values in the custom claim to match for","properties":{"matchValueString":{"type":"string"},"matchValueStringList":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:bedrockagentcore:GatewayCustomClaimValidationType":{"description":"Required custom claim","properties":{"authorizingClaimMatchValue":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizingClaimMatchValueType"},"inboundTokenClaimName":{"type":"string"},"inboundTokenClaimValueType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayInboundTokenClaimValueType"}},"type":"object","required":["authorizingClaimMatchValue","inboundTokenClaimName","inboundTokenClaimValueType"]},"aws-native:bedrockagentcore:GatewayCustomJwtAuthorizerConfiguration":{"properties":{"allowedAudience":{"type":"array","items":{"type":"string"}},"allowedClients":{"type":"array","items":{"type":"string"}},"allowedScopes":{"type":"array","items":{"type":"string"}},"customClaims":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayCustomClaimValidationType"}},"discoveryUrl":{"type":"string"}},"type":"object","required":["discoveryUrl"]},"aws-native:bedrockagentcore:GatewayExceptionLevel":{"type":"string","enum":[{"name":"Debug","value":"DEBUG"}]},"aws-native:bedrockagentcore:GatewayInboundTokenClaimValueType":{"description":"Token claim data type","type":"string","enum":[{"name":"String","value":"STRING"},{"name":"StringArray","value":"STRING_ARRAY"}]},"aws-native:bedrockagentcore:GatewayInterceptionPoint":{"type":"string","enum":[{"name":"Request","value":"REQUEST"},{"name":"Response","value":"RESPONSE"}]},"aws-native:bedrockagentcore:GatewayInterceptorConfiguration":{"properties":{"inputConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayInterceptorInputConfiguration"},"interceptionPoints":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayInterceptionPoint"}},"interceptor":{"$ref":"#/types/aws-native:bedrockagentcore:InterceptorConfigurationProperties"}},"type":"object","required":["interceptionPoints","interceptor"]},"aws-native:bedrockagentcore:GatewayInterceptorInputConfiguration":{"properties":{"passRequestHeaders":{"type":"boolean"}},"type":"object","required":["passRequestHeaders"]},"aws-native:bedrockagentcore:GatewayLambdaInterceptorConfiguration":{"properties":{"arn":{"type":"string"}},"type":"object","required":["arn"]},"aws-native:bedrockagentcore:GatewayMcpGatewayConfiguration":{"properties":{"instructions":{"type":"string"},"searchType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewaySearchType"},"supportedVersions":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:bedrockagentcore:GatewayPolicyEngineConfiguration":{"description":"The configuration for a policy engine associated with a gateway. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with a gateway, the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies.","properties":{"arn":{"type":"string","description":"The ARN of the policy engine. The policy engine contains Cedar policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway."},"mode":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayPolicyEngineMode"}},"type":"object","required":["arn","mode"]},"aws-native:bedrockagentcore:GatewayPolicyEngineMode":{"description":"The enforcement mode for the policy engine. LOG_ONLY - The policy engine evaluates each action against your policies and adds traces on whether tool calls would be allowed or denied, but does not enforce the decision. Use this mode to test and validate policies before enabling enforcement. ENFORCE - The policy engine evaluates actions against your policies and enforces decisions by allowing or denying agent operations. Test and validate policies in LOG_ONLY mode before enabling enforcement to avoid unintended denials or adversely affecting production traffic.","type":"string","enum":[{"name":"LogOnly","value":"LOG_ONLY"},{"name":"Enforce","value":"ENFORCE"}]},"aws-native:bedrockagentcore:GatewayProtocolConfiguration0Properties":{"properties":{"mcp":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayMcpGatewayConfiguration"}},"type":"object","required":["mcp"]},"aws-native:bedrockagentcore:GatewayProtocolConfigurationProperties":{"properties":{"mcp":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayMcpGatewayConfiguration"}},"type":"object","required":["mcp"]},"aws-native:bedrockagentcore:GatewayProtocolType":{"type":"string","enum":[{"name":"Mcp","value":"MCP"}]},"aws-native:bedrockagentcore:GatewaySearchType":{"type":"string","enum":[{"name":"Semantic","value":"SEMANTIC"}]},"aws-native:bedrockagentcore:GatewayStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateUnsuccessful","value":"UPDATE_UNSUCCESSFUL"},{"name":"Deleting","value":"DELETING"},{"name":"Ready","value":"READY"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrockagentcore:GatewayTargetApiGatewayTargetConfiguration":{"properties":{"apiGatewayToolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiGatewayToolConfiguration"},"restApiId":{"type":"string"},"stage":{"type":"string"}},"type":"object","required":["apiGatewayToolConfiguration","restApiId","stage"]},"aws-native:bedrockagentcore:GatewayTargetApiGatewayToolConfiguration":{"properties":{"toolFilters":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiGatewayToolFilter"}},"toolOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiGatewayToolOverride"}}},"type":"object","required":["toolFilters"]},"aws-native:bedrockagentcore:GatewayTargetApiGatewayToolFilter":{"properties":{"filterPath":{"type":"string"},"methods":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetRestApiMethod"}}},"type":"object","required":["filterPath","methods"]},"aws-native:bedrockagentcore:GatewayTargetApiGatewayToolOverride":{"properties":{"description":{"type":"string"},"method":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetRestApiMethod"},"name":{"type":"string"},"path":{"type":"string"}},"type":"object","required":["method","name","path"]},"aws-native:bedrockagentcore:GatewayTargetApiKeyCredentialLocation":{"type":"string","enum":[{"name":"Header","value":"HEADER"},{"name":"QueryParameter","value":"QUERY_PARAMETER"}]},"aws-native:bedrockagentcore:GatewayTargetApiKeyCredentialProvider":{"properties":{"credentialLocation":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiKeyCredentialLocation"},"credentialParameterName":{"type":"string"},"credentialPrefix":{"type":"string"},"providerArn":{"type":"string"}},"type":"object","required":["providerArn"]},"aws-native:bedrockagentcore:GatewayTargetApiSchemaConfiguration0Properties":{"properties":{"s3":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetS3Configuration"}},"type":"object","required":["s3"]},"aws-native:bedrockagentcore:GatewayTargetApiSchemaConfiguration1Properties":{"properties":{"inlinePayload":{"type":"string"}},"type":"object","required":["inlinePayload"]},"aws-native:bedrockagentcore:GatewayTargetCredentialProvider0Properties":{"properties":{"oauthCredentialProvider":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetOAuthCredentialProvider"}},"type":"object","required":["oauthCredentialProvider"]},"aws-native:bedrockagentcore:GatewayTargetCredentialProvider1Properties":{"properties":{"apiKeyCredentialProvider":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiKeyCredentialProvider"}},"type":"object","required":["apiKeyCredentialProvider"]},"aws-native:bedrockagentcore:GatewayTargetCredentialProviderConfiguration":{"properties":{"credentialProvider":{"oneOf":[{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetCredentialProvider0Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetCredentialProvider1Properties"}],"description":"The credential provider for the gateway target."},"credentialProviderType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetCredentialProviderType","description":"The credential provider type for the gateway target."}},"type":"object","required":["credentialProviderType"]},"aws-native:bedrockagentcore:GatewayTargetCredentialProviderType":{"type":"string","enum":[{"name":"GatewayIamRole","value":"GATEWAY_IAM_ROLE"},{"name":"Oauth","value":"OAUTH"},{"name":"ApiKey","value":"API_KEY"}]},"aws-native:bedrockagentcore:GatewayTargetMcpLambdaTargetConfiguration":{"properties":{"lambdaArn":{"type":"string"},"toolSchema":{"oneOf":[{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetToolSchema0Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetToolSchema1Properties"}]}},"type":"object","required":["lambdaArn","toolSchema"]},"aws-native:bedrockagentcore:GatewayTargetMcpServerTargetConfiguration":{"properties":{"endpoint":{"type":"string"}},"type":"object","required":["endpoint"]},"aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration0Properties":{"properties":{"openApiSchema":{"oneOf":[{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiSchemaConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiSchemaConfiguration1Properties"}]}},"type":"object","required":["openApiSchema"]},"aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration1Properties":{"properties":{"smithyModel":{"oneOf":[{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiSchemaConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiSchemaConfiguration1Properties"}]}},"type":"object","required":["smithyModel"]},"aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration2Properties":{"properties":{"lambda":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpLambdaTargetConfiguration"}},"type":"object","required":["lambda"]},"aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration3Properties":{"properties":{"mcpServer":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpServerTargetConfiguration"}},"type":"object","required":["mcpServer"]},"aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration4Properties":{"properties":{"apiGateway":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetApiGatewayTargetConfiguration"}},"type":"object","required":["apiGateway"]},"aws-native:bedrockagentcore:GatewayTargetMetadataConfiguration":{"properties":{"allowedQueryParameters":{"type":"array","items":{"type":"string"}},"allowedRequestHeaders":{"type":"array","items":{"type":"string"}},"allowedResponseHeaders":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:bedrockagentcore:GatewayTargetOAuthCredentialProvider":{"properties":{"customParameters":{"type":"object","additionalProperties":{"type":"string"}},"defaultReturnUrl":{"type":"string","description":"Return URL for OAuth callback."},"grantType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetOAuthGrantType"},"providerArn":{"type":"string"},"scopes":{"type":"array","items":{"type":"string"}}},"type":"object","required":["providerArn","scopes"]},"aws-native:bedrockagentcore:GatewayTargetOAuthGrantType":{"type":"string","enum":[{"name":"AuthorizationCode","value":"AUTHORIZATION_CODE"},{"name":"ClientCredentials","value":"CLIENT_CREDENTIALS"}]},"aws-native:bedrockagentcore:GatewayTargetRestApiMethod":{"type":"string","enum":[{"name":"Get","value":"GET"},{"name":"Delete","value":"DELETE"},{"name":"Head","value":"HEAD"},{"name":"Options","value":"OPTIONS"},{"name":"Patch","value":"PATCH"},{"name":"Put","value":"PUT"},{"name":"Post","value":"POST"}]},"aws-native:bedrockagentcore:GatewayTargetS3Configuration":{"properties":{"bucketOwnerAccountId":{"type":"string"},"uri":{"type":"string"}},"type":"object"},"aws-native:bedrockagentcore:GatewayTargetSchemaDefinition":{"properties":{"description":{"type":"string"},"items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetSchemaDefinition"},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetSchemaDefinition"}},"required":{"type":"array","items":{"type":"string"}},"type":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetSchemaType"}},"type":"object","required":["type"]},"aws-native:bedrockagentcore:GatewayTargetSchemaType":{"type":"string","enum":[{"name":"String","value":"string"},{"name":"Number","value":"number"},{"name":"Object","value":"object"},{"name":"Array","value":"array"},{"name":"Boolean","value":"boolean"},{"name":"Integer","value":"integer"}]},"aws-native:bedrockagentcore:GatewayTargetTargetConfiguration0Properties":{"properties":{"mcp":{"oneOf":[{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration1Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration2Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration3Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration4Properties"}]}},"type":"object","required":["mcp"]},"aws-native:bedrockagentcore:GatewayTargetTargetConfigurationProperties":{"properties":{"mcp":{"oneOf":[{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration0Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration1Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration2Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration3Properties"},{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMcpTargetConfiguration4Properties"}]}},"type":"object","required":["mcp"]},"aws-native:bedrockagentcore:GatewayTargetTargetStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateUnsuccessful","value":"UPDATE_UNSUCCESSFUL"},{"name":"Deleting","value":"DELETING"},{"name":"Ready","value":"READY"},{"name":"Failed","value":"FAILED"},{"name":"Synchronizing","value":"SYNCHRONIZING"},{"name":"SynchronizeUnsuccessful","value":"SYNCHRONIZE_UNSUCCESSFUL"}]},"aws-native:bedrockagentcore:GatewayTargetToolDefinition":{"properties":{"description":{"type":"string"},"inputSchema":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetSchemaDefinition"},"name":{"type":"string"},"outputSchema":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetSchemaDefinition"}},"type":"object","required":["description","inputSchema","name"]},"aws-native:bedrockagentcore:GatewayTargetToolSchema0Properties":{"properties":{"s3":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetS3Configuration"}},"type":"object","required":["s3"]},"aws-native:bedrockagentcore:GatewayTargetToolSchema1Properties":{"properties":{"inlinePayload":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetToolDefinition"}}},"type":"object","required":["inlinePayload"]},"aws-native:bedrockagentcore:GatewayWorkloadIdentityDetails":{"properties":{"workloadIdentityArn":{"type":"string"}},"type":"object","required":["workloadIdentityArn"]},"aws-native:bedrockagentcore:InterceptorConfiguration0Properties":{"properties":{"lambda":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayLambdaInterceptorConfiguration"}},"type":"object","required":["lambda"]},"aws-native:bedrockagentcore:InterceptorConfigurationProperties":{"properties":{"lambda":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayLambdaInterceptorConfiguration"}},"type":"object","required":["lambda"]},"aws-native:bedrockagentcore:MemoryContentConfiguration":{"properties":{"level":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryContentConfigurationLevel","description":"The level of content detail to deliver"},"type":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryContentConfigurationType","description":"The type of content to deliver"}},"type":"object","required":["type"]},"aws-native:bedrockagentcore:MemoryContentConfigurationLevel":{"description":"The level of content detail to deliver","type":"string","enum":[{"name":"MetadataOnly","value":"METADATA_ONLY"},{"name":"FullContent","value":"FULL_CONTENT"}]},"aws-native:bedrockagentcore:MemoryContentConfigurationType":{"description":"The type of content to deliver","type":"string","enum":[{"name":"MemoryRecords","value":"MEMORY_RECORDS"}]},"aws-native:bedrockagentcore:MemoryCustomConfigurationInput":{"properties":{"episodicOverride":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicOverride"},"selfManagedConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySelfManagedConfiguration"},"semanticOverride":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySemanticOverride"},"summaryOverride":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySummaryOverride"},"userPreferenceOverride":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryUserPreferenceOverride"}},"type":"object"},"aws-native:bedrockagentcore:MemoryCustomMemoryStrategy":{"properties":{"configuration":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryCustomConfigurationInput"},"createdAt":{"type":"string","description":"Creation timestamp of the memory strategy"},"description":{"type":"string"},"name":{"type":"string"},"namespaces":{"type":"array","items":{"type":"string"}},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryCustomMemoryStrategyStatus","description":"Status of the memory strategy"},"strategyId":{"type":"string","description":"Unique identifier for the memory strategy"},"type":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryCustomMemoryStrategyType","description":"Type of memory strategy"},"updatedAt":{"type":"string","description":"Last update timestamp of the memory strategy"}},"type":"object","required":["name"]},"aws-native:bedrockagentcore:MemoryCustomMemoryStrategyStatus":{"description":"Status of the memory strategy","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrockagentcore:MemoryCustomMemoryStrategyType":{"description":"Type of memory strategy","type":"string","enum":[{"name":"Semantic","value":"SEMANTIC"},{"name":"Summarization","value":"SUMMARIZATION"},{"name":"UserPreference","value":"USER_PREFERENCE"},{"name":"Custom","value":"CUSTOM"},{"name":"Episodic","value":"EPISODIC"}]},"aws-native:bedrockagentcore:MemoryEpisodicMemoryStrategy":{"properties":{"createdAt":{"type":"string","description":"Creation timestamp of the memory strategy"},"description":{"type":"string"},"name":{"type":"string"},"namespaces":{"type":"array","items":{"type":"string"}},"reflectionConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicReflectionConfigurationInput"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicMemoryStrategyStatus","description":"Status of the memory strategy"},"strategyId":{"type":"string","description":"Unique identifier for the memory strategy"},"type":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicMemoryStrategyType","description":"Type of memory strategy"},"updatedAt":{"type":"string","description":"Last update timestamp of the memory strategy"}},"type":"object","required":["name"]},"aws-native:bedrockagentcore:MemoryEpisodicMemoryStrategyStatus":{"description":"Status of the memory strategy","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrockagentcore:MemoryEpisodicMemoryStrategyType":{"description":"Type of memory strategy","type":"string","enum":[{"name":"Semantic","value":"SEMANTIC"},{"name":"Summarization","value":"SUMMARIZATION"},{"name":"UserPreference","value":"USER_PREFERENCE"},{"name":"Custom","value":"CUSTOM"},{"name":"Episodic","value":"EPISODIC"}]},"aws-native:bedrockagentcore:MemoryEpisodicOverride":{"properties":{"consolidation":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicOverrideConsolidationConfigurationInput"},"extraction":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicOverrideExtractionConfigurationInput"},"reflection":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicOverrideReflectionConfigurationInput"}},"type":"object"},"aws-native:bedrockagentcore:MemoryEpisodicOverrideConsolidationConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemoryEpisodicOverrideExtractionConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemoryEpisodicOverrideReflectionConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"},"namespaces":{"type":"array","items":{"type":"string"}}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemoryEpisodicReflectionConfigurationInput":{"properties":{"namespaces":{"type":"array","items":{"type":"string"}}},"type":"object","required":["namespaces"]},"aws-native:bedrockagentcore:MemoryInvocationConfigurationInput":{"properties":{"payloadDeliveryBucketName":{"type":"string"},"topicArn":{"type":"string"}},"type":"object"},"aws-native:bedrockagentcore:MemoryKinesisResource":{"properties":{"contentConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryContentConfiguration"}},"dataStreamArn":{"type":"string"}},"type":"object","required":["contentConfigurations","dataStreamArn"]},"aws-native:bedrockagentcore:MemoryMessageBasedTriggerInput":{"properties":{"messageCount":{"type":"integer"}},"type":"object"},"aws-native:bedrockagentcore:MemorySelfManagedConfiguration":{"properties":{"historicalContextWindowSize":{"type":"integer"},"invocationConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryInvocationConfigurationInput"},"triggerConditions":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryTriggerConditionInput"}}},"type":"object"},"aws-native:bedrockagentcore:MemorySemanticMemoryStrategy":{"properties":{"createdAt":{"type":"string","description":"Creation timestamp of the memory strategy"},"description":{"type":"string"},"name":{"type":"string"},"namespaces":{"type":"array","items":{"type":"string"}},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySemanticMemoryStrategyStatus","description":"Status of the memory strategy"},"strategyId":{"type":"string","description":"Unique identifier for the memory strategy"},"type":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySemanticMemoryStrategyType","description":"Type of memory strategy"},"updatedAt":{"type":"string","description":"Last update timestamp of the memory strategy"}},"type":"object","required":["name"]},"aws-native:bedrockagentcore:MemorySemanticMemoryStrategyStatus":{"description":"Status of the memory strategy","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrockagentcore:MemorySemanticMemoryStrategyType":{"description":"Type of memory strategy","type":"string","enum":[{"name":"Semantic","value":"SEMANTIC"},{"name":"Summarization","value":"SUMMARIZATION"},{"name":"UserPreference","value":"USER_PREFERENCE"},{"name":"Custom","value":"CUSTOM"},{"name":"Episodic","value":"EPISODIC"}]},"aws-native:bedrockagentcore:MemorySemanticOverride":{"properties":{"consolidation":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySemanticOverrideConsolidationConfigurationInput"},"extraction":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySemanticOverrideExtractionConfigurationInput"}},"type":"object"},"aws-native:bedrockagentcore:MemorySemanticOverrideConsolidationConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemorySemanticOverrideExtractionConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemoryStatus":{"description":"Status of the Memory resource","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrockagentcore:MemoryStrategy":{"properties":{"customMemoryStrategy":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryCustomMemoryStrategy"},"episodicMemoryStrategy":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryEpisodicMemoryStrategy"},"semanticMemoryStrategy":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySemanticMemoryStrategy"},"summaryMemoryStrategy":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySummaryMemoryStrategy"},"userPreferenceMemoryStrategy":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryUserPreferenceMemoryStrategy"}},"type":"object"},"aws-native:bedrockagentcore:MemoryStreamDeliveryResource":{"properties":{"kinesis":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryKinesisResource"}},"type":"object"},"aws-native:bedrockagentcore:MemoryStreamDeliveryResources":{"properties":{"resources":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStreamDeliveryResource"}}},"type":"object","required":["resources"]},"aws-native:bedrockagentcore:MemorySummaryMemoryStrategy":{"properties":{"createdAt":{"type":"string","description":"Creation timestamp of the memory strategy"},"description":{"type":"string"},"name":{"type":"string"},"namespaces":{"type":"array","items":{"type":"string"}},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySummaryMemoryStrategyStatus","description":"Status of the memory strategy"},"strategyId":{"type":"string","description":"Unique identifier for the memory strategy"},"type":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySummaryMemoryStrategyType","description":"Type of memory strategy"},"updatedAt":{"type":"string","description":"Last update timestamp of the memory strategy"}},"type":"object","required":["name"]},"aws-native:bedrockagentcore:MemorySummaryMemoryStrategyStatus":{"description":"Status of the memory strategy","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrockagentcore:MemorySummaryMemoryStrategyType":{"description":"Type of memory strategy","type":"string","enum":[{"name":"Semantic","value":"SEMANTIC"},{"name":"Summarization","value":"SUMMARIZATION"},{"name":"UserPreference","value":"USER_PREFERENCE"},{"name":"Custom","value":"CUSTOM"},{"name":"Episodic","value":"EPISODIC"}]},"aws-native:bedrockagentcore:MemorySummaryOverride":{"properties":{"consolidation":{"$ref":"#/types/aws-native:bedrockagentcore:MemorySummaryOverrideConsolidationConfigurationInput"}},"type":"object"},"aws-native:bedrockagentcore:MemorySummaryOverrideConsolidationConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemoryTimeBasedTriggerInput":{"properties":{"idleSessionTimeout":{"type":"integer"}},"type":"object"},"aws-native:bedrockagentcore:MemoryTokenBasedTriggerInput":{"properties":{"tokenCount":{"type":"integer"}},"type":"object"},"aws-native:bedrockagentcore:MemoryTriggerConditionInput":{"properties":{"messageBasedTrigger":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryMessageBasedTriggerInput"},"timeBasedTrigger":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryTimeBasedTriggerInput"},"tokenBasedTrigger":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryTokenBasedTriggerInput"}},"type":"object"},"aws-native:bedrockagentcore:MemoryUserPreferenceMemoryStrategy":{"properties":{"createdAt":{"type":"string","description":"Creation timestamp of the memory strategy"},"description":{"type":"string"},"name":{"type":"string"},"namespaces":{"type":"array","items":{"type":"string"}},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryUserPreferenceMemoryStrategyStatus","description":"Status of the memory strategy"},"strategyId":{"type":"string","description":"Unique identifier for the memory strategy"},"type":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryUserPreferenceMemoryStrategyType","description":"Type of memory strategy"},"updatedAt":{"type":"string","description":"Last update timestamp of the memory strategy"}},"type":"object","required":["name"]},"aws-native:bedrockagentcore:MemoryUserPreferenceMemoryStrategyStatus":{"description":"Status of the memory strategy","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:bedrockagentcore:MemoryUserPreferenceMemoryStrategyType":{"description":"Type of memory strategy","type":"string","enum":[{"name":"Semantic","value":"SEMANTIC"},{"name":"Summarization","value":"SUMMARIZATION"},{"name":"UserPreference","value":"USER_PREFERENCE"},{"name":"Custom","value":"CUSTOM"},{"name":"Episodic","value":"EPISODIC"}]},"aws-native:bedrockagentcore:MemoryUserPreferenceOverride":{"properties":{"consolidation":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryUserPreferenceOverrideConsolidationConfigurationInput"},"extraction":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryUserPreferenceOverrideExtractionConfigurationInput"}},"type":"object"},"aws-native:bedrockagentcore:MemoryUserPreferenceOverrideConsolidationConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:MemoryUserPreferenceOverrideExtractionConfigurationInput":{"properties":{"appendToPrompt":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["appendToPrompt","modelId"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigCloudWatchLogsInputConfig":{"description":"The configuration for reading agent traces from CloudWatch logs.","properties":{"logGroupNames":{"type":"array","items":{"type":"string"},"description":"The list of CloudWatch log group names to monitor for agent traces."},"serviceNames":{"type":"array","items":{"type":"string"},"description":"The list of service names to filter traces within the specified log groups."}},"type":"object","required":["logGroupNames","serviceNames"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigCloudWatchOutputConfig":{"description":"The CloudWatch configuration for writing evaluation results.","properties":{"logGroupName":{"type":"string","description":"The CloudWatch log group name for evaluation results."}},"type":"object"},"aws-native:bedrockagentcore:OnlineEvaluationConfigDataSourceConfig":{"description":"The configuration that specifies where to read agent traces for online evaluation.","properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigCloudWatchLogsInputConfig"}},"type":"object","required":["cloudWatchLogs"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigEvaluatorReference":{"description":"The reference to an evaluator used in online evaluation configurations.","properties":{"evaluatorId":{"type":"string","description":"The unique identifier of the evaluator."}},"type":"object","required":["evaluatorId"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigExecutionStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:bedrockagentcore:OnlineEvaluationConfigFilter":{"description":"The filter that applies conditions to agent traces during online evaluation.","properties":{"key":{"type":"string","description":"The key or field name to filter on within the agent trace data."},"operator":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigFilterOperator","description":"The comparison operator to use for filtering."},"value":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigFilterValue"}},"type":"object","required":["key","operator","value"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigFilterOperator":{"description":"The comparison operator to use for filtering.","type":"string","enum":[{"name":"Equals","value":"Equals"},{"name":"NotEquals","value":"NotEquals"},{"name":"GreaterThan","value":"GreaterThan"},{"name":"LessThan","value":"LessThan"},{"name":"GreaterThanOrEqual","value":"GreaterThanOrEqual"},{"name":"LessThanOrEqual","value":"LessThanOrEqual"},{"name":"Contains","value":"Contains"},{"name":"NotContains","value":"NotContains"}]},"aws-native:bedrockagentcore:OnlineEvaluationConfigFilterValue":{"description":"The value used in filter comparisons.","properties":{"booleanValue":{"type":"boolean","description":"The boolean value for true/false filtering conditions."},"doubleValue":{"type":"number","description":"The numeric value for numerical filtering."},"stringValue":{"type":"string","description":"The string value for text-based filtering."}},"type":"object"},"aws-native:bedrockagentcore:OnlineEvaluationConfigOutputConfig":{"description":"The configuration that specifies where evaluation results should be written.","properties":{"cloudWatchConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigCloudWatchOutputConfig"}},"type":"object"},"aws-native:bedrockagentcore:OnlineEvaluationConfigRule":{"description":"The evaluation rule that defines sampling configuration, filtering criteria, and session detection settings.","properties":{"filters":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigFilter"},"description":"The list of filters that determine which agent traces should be included in the evaluation."},"samplingConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigSamplingConfig"},"sessionConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigSessionConfig"}},"type":"object","required":["samplingConfig"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigSamplingConfig":{"description":"The configuration that controls what percentage of agent traces are sampled for evaluation.","properties":{"samplingPercentage":{"type":"number","description":"The percentage of agent traces to sample for evaluation."}},"type":"object","required":["samplingPercentage"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigSessionConfig":{"description":"The configuration that defines how agent sessions are detected.","properties":{"sessionTimeoutMinutes":{"type":"integer","description":"The number of minutes of inactivity after which an agent session is considered complete."}},"type":"object","required":["sessionTimeoutMinutes"]},"aws-native:bedrockagentcore:OnlineEvaluationConfigStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrockagentcore:OnlineEvaluationConfigTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:bedrockagentcore:PolicyCedarPolicy":{"description":"A Cedar policy statement within the AgentCore Policy system.","properties":{"statement":{"type":"string","description":"The Cedar policy statement that defines the authorization logic."}},"type":"object","required":["statement"]},"aws-native:bedrockagentcore:PolicyDefinition":{"description":"The definition structure for policies. Encapsulates different policy formats.","properties":{"cedar":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyCedarPolicy"}},"type":"object","required":["cedar"]},"aws-native:bedrockagentcore:PolicyEngineStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:bedrockagentcore:PolicyEngineTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:bedrockagentcore:PolicyStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:bedrockagentcore:PolicyValidationMode":{"description":"The validation mode for the policy. Determines how Cedar analyzer validation results are handled.","type":"string","enum":[{"name":"FailOnAnyFindings","value":"FAIL_ON_ANY_FINDINGS"},{"name":"IgnoreAllFindings","value":"IGNORE_ALL_FINDINGS"}]},"aws-native:bedrockagentcore:RuntimeAgentManagedRuntimeType":{"description":"Managed runtime types","type":"string","enum":[{"name":"Python310","value":"PYTHON_3_10"},{"name":"Python311","value":"PYTHON_3_11"},{"name":"Python312","value":"PYTHON_3_12"},{"name":"Python313","value":"PYTHON_3_13"}]},"aws-native:bedrockagentcore:RuntimeAgentRuntimeArtifact":{"properties":{"codeConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeCodeConfiguration"},"containerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeContainerConfiguration","description":"Representation of a container configuration."}},"type":"object"},"aws-native:bedrockagentcore:RuntimeAgentStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Ready","value":"READY"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrockagentcore:RuntimeAuthorizerConfiguration":{"description":"Configuration for the authorizer","properties":{"customJwtAuthorizer":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeCustomJwtAuthorizerConfiguration","description":"Represents inbound authorization configuration options used to authenticate incoming requests."}},"type":"object"},"aws-native:bedrockagentcore:RuntimeAuthorizingClaimMatchValueType":{"description":"The value or values in the custom claim to match and relationship of match","properties":{"claimMatchOperator":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeClaimMatchOperator"},"claimMatchValue":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeClaimMatchValueType"}},"type":"object","required":["claimMatchOperator","claimMatchValue"]},"aws-native:bedrockagentcore:RuntimeClaimMatchOperator":{"description":"The relationship between the claim field value and the value or values being matched","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"Contains","value":"CONTAINS"},{"name":"ContainsAny","value":"CONTAINS_ANY"}]},"aws-native:bedrockagentcore:RuntimeClaimMatchValueType":{"description":"The value or values in the custom claim to match for","properties":{"matchValueString":{"type":"string"},"matchValueStringList":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:bedrockagentcore:RuntimeCode":{"description":"Object represents source code from zip file","properties":{"s3":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeS3Location"}},"type":"object"},"aws-native:bedrockagentcore:RuntimeCodeConfiguration":{"description":"Representation of a code configuration","properties":{"code":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeCode"},"entryPoint":{"type":"array","items":{"type":"string"}},"runtime":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAgentManagedRuntimeType"}},"type":"object","required":["code","entryPoint","runtime"]},"aws-native:bedrockagentcore:RuntimeContainerConfiguration":{"properties":{"containerUri":{"type":"string","description":"The container Uri."}},"type":"object","required":["containerUri"]},"aws-native:bedrockagentcore:RuntimeCustomClaimValidationType":{"description":"Required custom claim","properties":{"authorizingClaimMatchValue":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAuthorizingClaimMatchValueType"},"inboundTokenClaimName":{"type":"string"},"inboundTokenClaimValueType":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeInboundTokenClaimValueType"}},"type":"object","required":["authorizingClaimMatchValue","inboundTokenClaimName","inboundTokenClaimValueType"]},"aws-native:bedrockagentcore:RuntimeCustomJwtAuthorizerConfiguration":{"description":"Configuration for custom JWT authorizer","properties":{"allowedAudience":{"type":"array","items":{"type":"string"},"description":"Represents inbound authorization configuration options used to authenticate incoming requests."},"allowedClients":{"type":"array","items":{"type":"string"},"description":"Represents individual client IDs that are validated in the incoming JWT token validation process."},"allowedScopes":{"type":"array","items":{"type":"string"}},"customClaims":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeCustomClaimValidationType"}},"discoveryUrl":{"type":"string","description":"The configuration authorization."}},"type":"object","required":["discoveryUrl"]},"aws-native:bedrockagentcore:RuntimeEndpointAgentRuntimeEndpointStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Ready","value":"READY"},{"name":"Deleting","value":"DELETING"}]},"aws-native:bedrockagentcore:RuntimeInboundTokenClaimValueType":{"description":"Token claim data type","type":"string","enum":[{"name":"String","value":"STRING"},{"name":"StringArray","value":"STRING_ARRAY"}]},"aws-native:bedrockagentcore:RuntimeLifecycleConfiguration":{"description":"Configuration for managing the lifecycle of runtime sessions and resources","properties":{"idleRuntimeSessionTimeout":{"type":"integer","description":"Timeout in seconds for idle runtime sessions"},"maxLifetime":{"type":"integer","description":"Maximum lifetime in seconds for runtime sessions"}},"type":"object"},"aws-native:bedrockagentcore:RuntimeNetworkConfiguration":{"properties":{"networkMode":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeNetworkMode","description":"The network mode."},"networkModeConfig":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeVpcConfig"}},"type":"object","required":["networkMode"]},"aws-native:bedrockagentcore:RuntimeNetworkMode":{"description":"Network mode configuration type","type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Vpc","value":"VPC"}]},"aws-native:bedrockagentcore:RuntimeProtocolConfiguration":{"type":"string","enum":[{"name":"Mcp","value":"MCP"},{"name":"Http","value":"HTTP"},{"name":"A2a","value":"A2A"}]},"aws-native:bedrockagentcore:RuntimeRequestHeaderConfiguration":{"description":"Configuration for HTTP request headers","properties":{"requestHeaderAllowlist":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:bedrockagentcore:RuntimeS3Location":{"description":"S3 Location Configuration","properties":{"bucket":{"type":"string","description":"S3 bucket name"},"prefix":{"type":"string","description":"S3 object key prefix"},"versionId":{"type":"string","description":"S3 object version ID"}},"type":"object","required":["bucket","prefix"]},"aws-native:bedrockagentcore:RuntimeVpcConfig":{"description":"Network mode configuration for VPC","properties":{"securityGroups":{"type":"array","items":{"type":"string"}},"subnets":{"type":"array","items":{"type":"string"}}},"type":"object","required":["securityGroups","subnets"]},"aws-native:bedrockagentcore:RuntimeWorkloadIdentityDetails":{"description":"Configuration for workload identity","properties":{"workloadIdentityArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the workload identity."}},"type":"object","required":["workloadIdentityArn"]},"aws-native:bedrockagentcore:WorkloadIdentityTag":{"properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:bedrockmantle:ProjectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:billing:BillingViewDimensionKey":{"type":"string","enum":[{"name":"LinkedAccount","value":"LINKED_ACCOUNT"}]},"aws-native:billing:BillingViewTag":{"description":"A key-value pair to associate with a Billing View.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:billing:BillingViewType":{"type":"string","enum":[{"name":"Primary","value":"PRIMARY"},{"name":"BillingGroup","value":"BILLING_GROUP"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:billing:DataFilterExpressionProperties":{"description":"See [Expression](https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_billing_Expression.html) . Billing view only supports `LINKED_ACCOUNT` and `Tags` .","properties":{"dimensions":{"$ref":"#/types/aws-native:billing:DataFilterExpressionPropertiesDimensionsProperties","description":"The specific `Dimension` to use for `Expression` ."},"tags":{"$ref":"#/types/aws-native:billing:DataFilterExpressionPropertiesTagsProperties","description":"The specific `Tag` to use for `Expression` ."},"timeRange":{"$ref":"#/types/aws-native:billing:DataFilterExpressionPropertiesTimeRangeProperties"}},"type":"object"},"aws-native:billing:DataFilterExpressionPropertiesDimensionsProperties":{"description":"The specific `Dimension` to use for `Expression` .","properties":{"key":{"$ref":"#/types/aws-native:billing:BillingViewDimensionKey"},"values":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:billing:DataFilterExpressionPropertiesTagsProperties":{"description":"The specific `Tag` to use for `Expression` .","properties":{"key":{"type":"string"},"values":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:billing:DataFilterExpressionPropertiesTimeRangeProperties":{"properties":{"beginDateInclusive":{"type":"string"},"endDateInclusive":{"type":"string"}},"type":"object"},"aws-native:budgets:BudgetsActionActionThreshold":{"properties":{"type":{"$ref":"#/types/aws-native:budgets:BudgetsActionActionThresholdType","description":"The type of threshold for a notification."},"value":{"type":"number","description":"The threshold of a notification."}},"type":"object","required":["type","value"]},"aws-native:budgets:BudgetsActionActionThresholdType":{"description":"The type of threshold for a notification.","type":"string","enum":[{"name":"Percentage","value":"PERCENTAGE"},{"name":"AbsoluteValue","value":"ABSOLUTE_VALUE"}]},"aws-native:budgets:BudgetsActionActionType":{"description":"The type of action. This defines the type of tasks that can be carried out by this action. This field also determines the format for definition.","type":"string","enum":[{"name":"ApplyIamPolicy","value":"APPLY_IAM_POLICY"},{"name":"ApplyScpPolicy","value":"APPLY_SCP_POLICY"},{"name":"RunSsmDocuments","value":"RUN_SSM_DOCUMENTS"}]},"aws-native:budgets:BudgetsActionApprovalModel":{"description":"This specifies if the action needs manual or automatic approval.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Manual","value":"MANUAL"}]},"aws-native:budgets:BudgetsActionDefinition":{"properties":{"iamActionDefinition":{"$ref":"#/types/aws-native:budgets:BudgetsActionIamActionDefinition","description":"The AWS Identity and Access Management ( IAM ) action definition details."},"scpActionDefinition":{"$ref":"#/types/aws-native:budgets:BudgetsActionScpActionDefinition","description":"The service control policies (SCP) action definition details."},"ssmActionDefinition":{"$ref":"#/types/aws-native:budgets:BudgetsActionSsmActionDefinition","description":"The Amazon EC2 Systems Manager ( SSM ) action definition details."}},"type":"object"},"aws-native:budgets:BudgetsActionIamActionDefinition":{"properties":{"groups":{"type":"array","items":{"type":"string"},"description":"A list of groups to be attached. There must be at least one group."},"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy to be attached."},"roles":{"type":"array","items":{"type":"string"},"description":"A list of roles to be attached. There must be at least one role."},"users":{"type":"array","items":{"type":"string"},"description":"A list of users to be attached. There must be at least one user."}},"type":"object","required":["policyArn"]},"aws-native:budgets:BudgetsActionNotificationType":{"description":"The type of a notification.","type":"string","enum":[{"name":"Actual","value":"ACTUAL"},{"name":"Forecasted","value":"FORECASTED"}]},"aws-native:budgets:BudgetsActionResourceTag":{"properties":{"key":{"type":"string","description":"The key that's associated with the tag."},"value":{"type":"string","description":"The value that's associated with the tag."}},"type":"object","required":["key","value"]},"aws-native:budgets:BudgetsActionScpActionDefinition":{"properties":{"policyId":{"type":"string","description":"The policy ID attached."},"targetIds":{"type":"array","items":{"type":"string"},"description":"A list of target IDs."}},"type":"object","required":["policyId","targetIds"]},"aws-native:budgets:BudgetsActionSsmActionDefinition":{"properties":{"instanceIds":{"type":"array","items":{"type":"string"},"description":"The EC2 and RDS instance IDs."},"region":{"type":"string","description":"The Region to run the ( SSM ) document."},"subtype":{"$ref":"#/types/aws-native:budgets:BudgetsActionSsmActionDefinitionSubtype","description":"The action subType."}},"type":"object","required":["instanceIds","region","subtype"]},"aws-native:budgets:BudgetsActionSsmActionDefinitionSubtype":{"description":"The action subType.","type":"string","enum":[{"name":"StopEc2Instances","value":"STOP_EC2_INSTANCES"},{"name":"StopRdsInstances","value":"STOP_RDS_INSTANCES"}]},"aws-native:budgets:BudgetsActionSubscriber":{"properties":{"address":{"type":"string","description":"The address that AWS sends budget notifications to, either an SNS topic or an email.\n\nWhen you create a subscriber, the value of `Address` can't contain line breaks."},"type":{"$ref":"#/types/aws-native:budgets:BudgetsActionSubscriberType","description":"The type of notification that AWS sends to a subscriber."}},"type":"object","required":["address","type"]},"aws-native:budgets:BudgetsActionSubscriberType":{"description":"The type of notification that AWS sends to a subscriber.","type":"string","enum":[{"name":"Sns","value":"SNS"},{"name":"Email","value":"EMAIL"}]},"aws-native:cases:CaseRuleBooleanCondition0Properties":{"description":"A boolean condition for a rule.","properties":{"equalTo":{"$ref":"#/types/aws-native:cases:CaseRuleBooleanOperands"}},"type":"object","required":["equalTo"]},"aws-native:cases:CaseRuleBooleanCondition1Properties":{"description":"A boolean condition for a rule.","properties":{"notEqualTo":{"$ref":"#/types/aws-native:cases:CaseRuleBooleanOperands"}},"type":"object","required":["notEqualTo"]},"aws-native:cases:CaseRuleBooleanOperands":{"description":"Boolean operands for a condition.","properties":{"operandOne":{"$ref":"#/types/aws-native:cases:CaseRuleOperandOneProperties"},"operandTwo":{"oneOf":[{"$ref":"#/types/aws-native:cases:CaseRuleOperandTwo0Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleOperandTwo1Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleOperandTwo2Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleOperandTwo3Properties"}]},"result":{"type":"boolean","description":"The value of the outer rule if the condition evaluates to true."}},"type":"object","required":["operandOne","operandTwo","result"]},"aws-native:cases:CaseRuleDetails0Properties":{"description":"Defines the rule behavior and conditions. Specifies the rule type and the conditions under which it applies. In the Amazon Connect admin website, this corresponds to case field conditions.","properties":{"required":{"$ref":"#/types/aws-native:cases:CaseRuleRequiredCaseRule"}},"type":"object","required":["required"]},"aws-native:cases:CaseRuleDetails1Properties":{"description":"Defines the rule behavior and conditions. Specifies the rule type and the conditions under which it applies. In the Amazon Connect admin website, this corresponds to case field conditions.","properties":{"hidden":{"$ref":"#/types/aws-native:cases:CaseRuleHiddenCaseRule"}},"type":"object","required":["hidden"]},"aws-native:cases:CaseRuleEmptyOperandValue":{"description":"An empty operand value.","type":"object"},"aws-native:cases:CaseRuleHiddenCaseRule":{"description":"Hidden rule type, used to indicate whether a field is hidden","properties":{"conditions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:cases:CaseRuleBooleanCondition0Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleBooleanCondition1Properties"}]},"description":"List of conditions for the hidden rule; the first condition to evaluate to true dictates the value of the rule"},"defaultValue":{"type":"boolean","description":"The value of the rule (i.e. whether the field is hidden) should none of the conditions evaluate to true"}},"type":"object","required":["conditions","defaultValue"]},"aws-native:cases:CaseRuleOperandOne0Properties":{"description":"The left hand operand in the condition.","properties":{"fieldId":{"type":"string","description":"The field ID this operand should take the value of."}},"type":"object","required":["fieldId"]},"aws-native:cases:CaseRuleOperandOneProperties":{"description":"The left hand operand in the condition.","properties":{"fieldId":{"type":"string","description":"The field ID this operand should take the value of."}},"type":"object","required":["fieldId"]},"aws-native:cases:CaseRuleOperandTwo0Properties":{"description":"The right hand operand in the condition.","properties":{"stringValue":{"type":"string","description":"A string value to compare against the field value in the condition evaluation."}},"type":"object","required":["stringValue"]},"aws-native:cases:CaseRuleOperandTwo1Properties":{"description":"The right hand operand in the condition.","properties":{"booleanValue":{"type":"boolean","description":"A boolean value to compare against the field value in the condition evaluation."}},"type":"object","required":["booleanValue"]},"aws-native:cases:CaseRuleOperandTwo2Properties":{"description":"The right hand operand in the condition.","properties":{"doubleValue":{"type":"number","description":"A numeric value to compare against the field value in the condition evaluation."}},"type":"object","required":["doubleValue"]},"aws-native:cases:CaseRuleOperandTwo3Properties":{"description":"The right hand operand in the condition.","properties":{"emptyValue":{"$ref":"#/types/aws-native:cases:CaseRuleEmptyOperandValue"}},"type":"object","required":["emptyValue"]},"aws-native:cases:CaseRuleRequiredCaseRule":{"description":"A required rule type, used to indicate whether a field is required.","properties":{"conditions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:cases:CaseRuleBooleanCondition0Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleBooleanCondition1Properties"}]},"description":"An ordered list of boolean conditions that determine when the field should be required. Conditions are evaluated in order, and the first condition that evaluates to true determines whether the field is required, overriding the default value."},"defaultValue":{"type":"boolean","description":"The default required state for the field when none of the specified conditions are met. If true, the field is required by default; if false, the field is optional by default."}},"type":"object","required":["conditions","defaultValue"]},"aws-native:cases:CaseRuleTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cases:DomainStatus":{"description":"The current status of the Cases domain. Indicates whether the domain is Active, CreationInProgress, or CreationFailed.","type":"string","enum":[{"name":"Active","value":"Active"},{"name":"CreationInProgress","value":"CreationInProgress"},{"name":"CreationFailed","value":"CreationFailed"}]},"aws-native:cases:DomainTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cases:FieldAttributes":{"description":"Union of field attributes","properties":{"text":{"$ref":"#/types/aws-native:cases:FieldTextAttributes"}},"type":"object"},"aws-native:cases:FieldNamespace":{"description":"Indicates whether this is a System field (predefined by AWS) or a Custom field (created by your organization). System fields cannot be modified or deleted.","type":"string","enum":[{"name":"System","value":"System"},{"name":"Custom","value":"Custom"}]},"aws-native:cases:FieldTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cases:FieldTextAttributes":{"description":"Field attributes for Text field type","properties":{"isMultiline":{"type":"boolean","description":"Attribute that defines rendering component and validation"}},"type":"object","required":["isMultiline"]},"aws-native:cases:FieldType":{"description":"The data type of the field, which determines validation rules, input constraints, and display format. Each type has specific constraints: Text (string input), Number (numeric values), Boolean (true/false), DateTime (date/time picker), SingleSelect (dropdown options), Url (URL validation), User (Amazon Connect user selection).","type":"string","enum":[{"name":"Text","value":"Text"},{"name":"Number","value":"Number"},{"name":"Boolean","value":"Boolean"},{"name":"DateTime","value":"DateTime"},{"name":"SingleSelect","value":"SingleSelect"},{"name":"Url","value":"Url"},{"name":"User","value":"User"}]},"aws-native:cases:LayoutBasicLayout":{"description":"Defines the field layout for the agent's case interface. Configures which fields appear in the top panel (immediately visible) and More Info tab (expandable section) of the case view, allowing customization of the agent experience.","properties":{"moreInfo":{"$ref":"#/types/aws-native:cases:LayoutSections"},"topPanel":{"$ref":"#/types/aws-native:cases:LayoutSections"}},"type":"object"},"aws-native:cases:LayoutContent0Properties":{"description":"Defines the layout structure and field organization for the case interface. Specifies which fields appear in the top panel and More Info tab, and their display order.","properties":{"basic":{"$ref":"#/types/aws-native:cases:LayoutBasicLayout"}},"type":"object","required":["basic"]},"aws-native:cases:LayoutContentProperties":{"description":"Defines the layout structure and field organization for the case interface. Specifies which fields appear in the top panel and More Info tab, and their display order.","properties":{"basic":{"$ref":"#/types/aws-native:cases:LayoutBasicLayout"}},"type":"object","required":["basic"]},"aws-native:cases:LayoutFieldGroup":{"description":"Consists of a group of fields and associated properties.","properties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:cases:LayoutFieldItem"},"description":"An ordered list of fields to display in this group. The order determines the sequence in which fields appear in the agent interface. Each field is referenced by its unique field ID."},"name":{"type":"string","description":"A descriptive name for the field group. Helps organize related fields together in the layout interface."}},"type":"object","required":["fields"]},"aws-native:cases:LayoutFieldItem":{"description":"Field specific properties.","properties":{"id":{"type":"string","description":"The unique identifier of a field."}},"type":"object","required":["id"]},"aws-native:cases:LayoutSection0Properties":{"description":"A section can be a grouped list of fields.","properties":{"fieldGroup":{"$ref":"#/types/aws-native:cases:LayoutFieldGroup"}},"type":"object","required":["fieldGroup"]},"aws-native:cases:LayoutSectionProperties":{"description":"A section can be a grouped list of fields.","properties":{"fieldGroup":{"$ref":"#/types/aws-native:cases:LayoutFieldGroup"}},"type":"object","required":["fieldGroup"]},"aws-native:cases:LayoutSections":{"description":"Sections within a panel or tab of the page layout.","properties":{"sections":{"type":"array","items":{"$ref":"#/types/aws-native:cases:LayoutSectionProperties"},"description":"Defines the sections within a panel or tab. Contains field groups that organize related fields together."}},"type":"object"},"aws-native:cases:LayoutTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cases:TemplateLayoutConfiguration":{"description":"Specifies the default layout to use when displaying cases created from this template. The layout determines which fields are visible and their arrangement in the agent interface.","properties":{"defaultLayout":{"type":"string","description":"The unique identifier of a layout."}},"type":"object"},"aws-native:cases:TemplateRequiredField":{"description":"Wrapper object containing a field identifier","properties":{"fieldId":{"type":"string","description":"The unique identifier of a field."}},"type":"object","required":["fieldId"]},"aws-native:cases:TemplateRule":{"description":"Links a case rule to a specific field within this template. When specified, the rule's conditions will be evaluated for the associated field, controlling behavior like required status, visibility, or available options.","properties":{"caseRuleId":{"type":"string","description":"The unique identifier of a case rule."},"fieldId":{"type":"string","description":"The ID of the field that this rule applies to."}},"type":"object","required":["caseRuleId"]},"aws-native:cases:TemplateStatus":{"description":"The current status of the template. Active templates can be used to create new cases, while Inactive templates are disabled but preserved for existing cases.","type":"string","enum":[{"name":"Active","value":"Active"},{"name":"Inactive","value":"Inactive"}]},"aws-native:cases:TemplateTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cassandra:KeyspaceRegionListItem":{"type":"string","enum":[{"name":"AfSouth1","value":"af-south-1"},{"name":"ApEast1","value":"ap-east-1"},{"name":"ApNortheast1","value":"ap-northeast-1"},{"name":"ApNortheast2","value":"ap-northeast-2"},{"name":"ApSouth1","value":"ap-south-1"},{"name":"ApSoutheast1","value":"ap-southeast-1"},{"name":"ApSoutheast2","value":"ap-southeast-2"},{"name":"CaCentral1","value":"ca-central-1"},{"name":"EuCentral1","value":"eu-central-1"},{"name":"EuNorth1","value":"eu-north-1"},{"name":"EuWest1","value":"eu-west-1"},{"name":"EuWest2","value":"eu-west-2"},{"name":"EuWest3","value":"eu-west-3"},{"name":"MeCentral1","value":"me-central-1"},{"name":"MeSouth1","value":"me-south-1"},{"name":"SaEast1","value":"sa-east-1"},{"name":"UsEast1","value":"us-east-1"},{"name":"UsEast2","value":"us-east-2"},{"name":"UsWest1","value":"us-west-1"},{"name":"UsWest2","value":"us-west-2"}]},"aws-native:cassandra:KeyspaceReplicationSpecification":{"properties":{"regionList":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:KeyspaceRegionListItem"},"description":"Specifies the AWS Regions that the keyspace is replicated in. You must specify at least two Regions, including the Region that the keyspace is being created in.\n\nTo specify a Region [that's disabled by default](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html#rande-manage-enable) , you must first enable the Region. For more information, see [Multi-Region replication in AWS Regions disabled by default](https://docs.aws.amazon.com/keyspaces/latest/devguide/multiRegion-replication_how-it-works.html#howitworks_mrr_opt_in) in the *Amazon Keyspaces Developer Guide* ."},"replicationStrategy":{"$ref":"#/types/aws-native:cassandra:KeyspaceReplicationSpecificationReplicationStrategy","description":"The options are:\n\n- `SINGLE_REGION` (optional)\n- `MULTI_REGION`\n\nIf no value is specified, the default is `SINGLE_REGION` . If `MULTI_REGION` is specified, `RegionList` is required."}},"type":"object"},"aws-native:cassandra:KeyspaceReplicationSpecificationReplicationStrategy":{"description":"The options are:\n\n- `SINGLE_REGION` (optional)\n- `MULTI_REGION`\n\nIf no value is specified, the default is `SINGLE_REGION` . If `MULTI_REGION` is specified, `RegionList` is required.","type":"string","enum":[{"name":"SingleRegion","value":"SINGLE_REGION"},{"name":"MultiRegion","value":"MULTI_REGION"}]},"aws-native:cassandra:KeyspaceTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Tag keys are case sensitive. Each Amazon Keyspaces resource can only have up to one tag with the same key. If you try to add an existing tag (same key), the existing tag value will be updated to the new value."},"value":{"type":"string","description":"The value of the tag. Tag values are case-sensitive and can be null."}},"type":"object","required":["key","value"]},"aws-native:cassandra:TableAutoScalingSetting":{"description":"Represents configuration for auto scaling.","properties":{"autoScalingDisabled":{"type":"boolean","description":"This optional parameter enables auto scaling for the table if set to `false` ."},"maximumUnits":{"type":"integer","description":"Manage costs by specifying the maximum amount of throughput to provision. The value must be between 1 and the max throughput per second quota for your account (40,000 by default)."},"minimumUnits":{"type":"integer","description":"The minimum level of throughput the table should always be ready to support. The value must be between 1 and the max throughput per second quota for your account (40,000 by default)."},"scalingPolicy":{"$ref":"#/types/aws-native:cassandra:TableScalingPolicy","description":"Amazon Keyspaces supports the `target tracking` auto scaling policy. With this policy, Amazon Keyspaces auto scaling ensures that the table's ratio of consumed to provisioned capacity stays at or near the target value that you specify. You define the target value as a percentage between 20 and 90."}},"type":"object"},"aws-native:cassandra:TableAutoScalingSpecification":{"description":"Represents the read and write settings used for AutoScaling.","properties":{"readCapacityAutoScaling":{"$ref":"#/types/aws-native:cassandra:TableAutoScalingSetting","description":"The auto scaling settings for the table's read capacity."},"writeCapacityAutoScaling":{"$ref":"#/types/aws-native:cassandra:TableAutoScalingSetting","description":"The auto scaling settings for the table's write capacity."}},"type":"object"},"aws-native:cassandra:TableBillingMode":{"properties":{"mode":{"$ref":"#/types/aws-native:cassandra:TableMode","description":"The billing mode for the table:\n\n- On-demand mode - `ON_DEMAND`\n- Provisioned mode - `PROVISIONED`\n\n\u003e If you choose `PROVISIONED` mode, then you also need to specify provisioned throughput (read and write capacity) for the table.\n\nValid values: `ON_DEMAND` | `PROVISIONED`"},"provisionedThroughput":{"$ref":"#/types/aws-native:cassandra:TableProvisionedThroughput","description":"The provisioned read capacity and write capacity for the table. For more information, see [Provisioned throughput capacity mode](https://docs.aws.amazon.com/keyspaces/latest/devguide/ReadWriteCapacityMode.html#ReadWriteCapacityMode.Provisioned) in the *Amazon Keyspaces Developer Guide* ."}},"type":"object","required":["mode"]},"aws-native:cassandra:TableCdcSpecification":{"description":"Represents the CDC configuration for the table","properties":{"status":{"$ref":"#/types/aws-native:cassandra:TableCdcStatus","description":"The status of the CDC stream. You can enable or disable a stream for a table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableTag"},"description":"An array of key-value pairs to apply to the CDC stream resource"},"viewType":{"$ref":"#/types/aws-native:cassandra:TableCdcViewType","description":"The view type specifies the changes Amazon Keyspaces records for each changed row in the stream. After you create the stream, you can't make changes to this selection.\n\nThe options are:\n\n- `NEW_AND_OLD_IMAGES` - both versions of the row, before and after the change. This is the default.\n- `NEW_IMAGE` - the version of the row after the change.\n- `OLD_IMAGE` - the version of the row before the change.\n- `KEYS_ONLY` - the partition and clustering keys of the row that was changed."}},"type":"object","required":["status"]},"aws-native:cassandra:TableCdcStatus":{"description":"Indicates whether CDC is enabled or disabled for the table","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cassandra:TableCdcViewType":{"description":"Specifies what data should be captured in the change data stream","type":"string","enum":[{"name":"NewImage","value":"NEW_IMAGE"},{"name":"OldImage","value":"OLD_IMAGE"},{"name":"KeysOnly","value":"KEYS_ONLY"},{"name":"NewAndOldImages","value":"NEW_AND_OLD_IMAGES"}]},"aws-native:cassandra:TableClusteringKeyColumn":{"properties":{"column":{"$ref":"#/types/aws-native:cassandra:TableColumn","description":"The name and data type of this clustering key column."},"orderBy":{"$ref":"#/types/aws-native:cassandra:TableClusteringKeyColumnOrderBy","description":"The order in which this column's data is stored:\n\n- `ASC` (default) - The column's data is stored in ascending order.\n- `DESC` - The column's data is stored in descending order."}},"type":"object","required":["column"]},"aws-native:cassandra:TableClusteringKeyColumnOrderBy":{"description":"The order in which this column's data is stored:\n\n- `ASC` (default) - The column's data is stored in ascending order.\n- `DESC` - The column's data is stored in descending order.","type":"string","enum":[{"name":"Asc","value":"ASC"},{"name":"Desc","value":"DESC"}]},"aws-native:cassandra:TableColumn":{"properties":{"columnName":{"type":"string","description":"The name of the column. For more information, see [Identifiers](https://docs.aws.amazon.com/keyspaces/latest/devguide/cql.elements.html#cql.elements.identifier) in the *Amazon Keyspaces Developer Guide* ."},"columnType":{"type":"string","description":"The data type of the column. For more information, see [Data types](https://docs.aws.amazon.com/keyspaces/latest/devguide/cql.elements.html#cql.data-types) in the *Amazon Keyspaces Developer Guide* ."}},"type":"object","required":["columnName","columnType"]},"aws-native:cassandra:TableEncryptionSpecification":{"description":"Represents the settings used to enable server-side encryption","properties":{"encryptionType":{"$ref":"#/types/aws-native:cassandra:TableEncryptionType","description":"The encryption at rest options for the table.\n\n- *AWS owned key* (default) - `AWS_OWNED_KMS_KEY`\n- *Customer managed key* - `CUSTOMER_MANAGED_KMS_KEY`\n\n\u003e If you choose `CUSTOMER_MANAGED_KMS_KEY` , a `kms_key_identifier` in the format of a key ARN is required.\n\nValid values: `CUSTOMER_MANAGED_KMS_KEY` | `AWS_OWNED_KMS_KEY` ."},"kmsKeyIdentifier":{"type":"string","description":"Requires a `kms_key_identifier` in the format of a key ARN."}},"type":"object","required":["encryptionType"]},"aws-native:cassandra:TableEncryptionType":{"description":"Server-side encryption type","type":"string","enum":[{"name":"AwsOwnedKmsKey","value":"AWS_OWNED_KMS_KEY"},{"name":"CustomerManagedKmsKey","value":"CUSTOMER_MANAGED_KMS_KEY"}]},"aws-native:cassandra:TableMode":{"description":"Capacity mode for the specified table","type":"string","enum":[{"name":"Provisioned","value":"PROVISIONED"},{"name":"OnDemand","value":"ON_DEMAND"}]},"aws-native:cassandra:TableProvisionedThroughput":{"description":"Throughput for the specified table, which consists of values for ReadCapacityUnits and WriteCapacityUnits","properties":{"readCapacityUnits":{"type":"integer","description":"The amount of read capacity that's provisioned for the table. For more information, see [Read/write capacity mode](https://docs.aws.amazon.com/keyspaces/latest/devguide/ReadWriteCapacityMode.html) in the *Amazon Keyspaces Developer Guide* ."},"writeCapacityUnits":{"type":"integer","description":"The amount of write capacity that's provisioned for the table. For more information, see [Read/write capacity mode](https://docs.aws.amazon.com/keyspaces/latest/devguide/ReadWriteCapacityMode.html) in the *Amazon Keyspaces Developer Guide* ."}},"type":"object","required":["readCapacityUnits","writeCapacityUnits"]},"aws-native:cassandra:TableReplicaSpecification":{"description":"Represents replica specifications.","properties":{"readCapacityAutoScaling":{"$ref":"#/types/aws-native:cassandra:TableAutoScalingSetting","description":"The read capacity auto scaling settings for the multi-Region table in the specified AWS Region."},"readCapacityUnits":{"type":"integer","description":"The provisioned read capacity units for the multi-Region table in the specified AWS Region."},"region":{"type":"string","description":"The AWS Region."}},"type":"object","required":["region"]},"aws-native:cassandra:TableScalingPolicy":{"description":"Represents scaling policy.","properties":{"targetTrackingScalingPolicyConfiguration":{"$ref":"#/types/aws-native:cassandra:TableTargetTrackingScalingPolicyConfiguration","description":"The auto scaling policy that scales a table based on the ratio of consumed to provisioned capacity."}},"type":"object"},"aws-native:cassandra:TableTag":{"description":"A key-value pair to apply to the resource","properties":{"key":{"type":"string","description":"The key of the tag. Tag keys are case sensitive. Each Amazon Keyspaces resource can only have up to one tag with the same key. If you try to add an existing tag (same key), the existing tag value will be updated to the new value."},"value":{"type":"string","description":"The value of the tag. Tag values are case-sensitive and can be null."}},"type":"object","required":["key","value"]},"aws-native:cassandra:TableTargetTrackingScalingPolicyConfiguration":{"description":"Represents configuration for target tracking scaling policy.","properties":{"disableScaleIn":{"type":"boolean","description":"Specifies if `scale-in` is enabled.\n\nWhen auto scaling automatically decreases capacity for a table, the table *scales in* . When scaling policies are set, they can't scale in the table lower than its minimum capacity."},"scaleInCooldown":{"type":"integer","description":"Specifies a `scale-in` cool down period.\n\nA cooldown period in seconds between scaling activities that lets the table stabilize before another scaling activity starts."},"scaleOutCooldown":{"type":"integer","description":"Specifies a scale out cool down period.\n\nA cooldown period in seconds between scaling activities that lets the table stabilize before another scaling activity starts."},"targetValue":{"type":"integer","description":"Specifies the target value for the target tracking auto scaling policy.\n\nAmazon Keyspaces auto scaling scales up capacity automatically when traffic exceeds this target utilization rate, and then back down when it falls below the target. This ensures that the ratio of consumed capacity to provisioned capacity stays at or near this value. You define `targetValue` as a percentage. An `integer` between 20 and 90."}},"type":"object","required":["targetValue"]},"aws-native:cassandra:TableWarmThroughput":{"description":"Warm throughput configuration for the table","properties":{"readUnitsPerSecond":{"type":"integer"},"writeUnitsPerSecond":{"type":"integer"}},"type":"object"},"aws-native:cassandra:TypeField":{"properties":{"fieldName":{"type":"string","description":"The name of the field."},"fieldType":{"type":"string","description":"The data type of the field. This can be any Cassandra data type or another user-defined type."}},"type":"object","required":["fieldName","fieldType"]},"aws-native:ce:AnomalyMonitorMonitorDimension":{"description":"The dimensions to evaluate","type":"string","enum":[{"name":"Service","value":"SERVICE"},{"name":"LinkedAccount","value":"LINKED_ACCOUNT"},{"name":"Tag","value":"TAG"},{"name":"CostCategory","value":"COST_CATEGORY"}]},"aws-native:ce:AnomalyMonitorMonitorType":{"description":"The type of the monitor.\n\nSet this to `DIMENSIONAL` for an AWS managed monitor. AWS managed monitors automatically track up to the top 5,000 values by cost within a dimension of your choosing. Each dimension value is evaluated independently. If you start incurring cost in a new value of your chosen dimension, it will automatically be analyzed by an AWS managed monitor.\n\nSet this to `CUSTOM` for a customer managed monitor. Customer managed monitors let you select specific dimension values that get monitored in aggregate.\n\nFor more information about monitor types, see [Monitor types](https://docs.aws.amazon.com/cost-management/latest/userguide/getting-started-ad.html#monitor-type-def) in the *Billing and Cost Management User Guide* .","type":"string","enum":[{"name":"Dimensional","value":"DIMENSIONAL"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:ce:AnomalyMonitorResourceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name for the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:ce:AnomalySubscriptionFrequency":{"description":"The frequency at which anomaly reports are sent over email. ","type":"string","enum":[{"name":"Daily","value":"DAILY"},{"name":"Immediate","value":"IMMEDIATE"},{"name":"Weekly","value":"WEEKLY"}]},"aws-native:ce:AnomalySubscriptionResourceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name for the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:ce:AnomalySubscriptionSubscriber":{"properties":{"address":{"type":"string","description":"The email address or SNS Topic Amazon Resource Name (ARN), depending on the `Type` ."},"status":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionSubscriberStatus","description":"Indicates if the subscriber accepts the notifications."},"type":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionSubscriberType","description":"The notification delivery channel."}},"type":"object","required":["address","type"]},"aws-native:ce:AnomalySubscriptionSubscriberStatus":{"description":"Indicates if the subscriber accepts the notifications.","type":"string","enum":[{"name":"Confirmed","value":"CONFIRMED"},{"name":"Declined","value":"DECLINED"}]},"aws-native:ce:AnomalySubscriptionSubscriberType":{"description":"The notification delivery channel.","type":"string","enum":[{"name":"Email","value":"EMAIL"},{"name":"Sns","value":"SNS"}]},"aws-native:ce:CostCategoryResourceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name for the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:ce:CostCategoryRuleVersion":{"description":"The rule schema version in this particular Cost Category.","type":"string","enum":[{"name":"CostCategoryExpressionV1","value":"CostCategoryExpression.v1"}]},"aws-native:certificatemanager:AccountExpiryEventsConfiguration":{"properties":{"daysBeforeExpiry":{"type":"integer","description":"This option specifies the number of days prior to certificate expiration when ACM starts generating `EventBridge` events. ACM sends one event per day per certificate until the certificate expires. By default, accounts receive events starting 45 days before certificate expiration."}},"type":"object"},"aws-native:chatbot:CustomActionAttachment":{"properties":{"buttonText":{"type":"string","description":"The text of the button that appears on the notification."},"criteria":{"type":"array","items":{"$ref":"#/types/aws-native:chatbot:CustomActionAttachmentCriteria"},"description":"The criteria for when a button should be shown based on values in the notification."},"notificationType":{"type":"string","description":"The type of notification that the custom action should be attached to."},"variables":{"type":"object","additionalProperties":{"type":"string"},"description":"The variables to extract from the notification."}},"type":"object"},"aws-native:chatbot:CustomActionAttachmentCriteria":{"properties":{"operator":{"$ref":"#/types/aws-native:chatbot:CustomActionAttachmentCriteriaOperator","description":"The operation to perform on the named variable."},"value":{"type":"string","description":"A value that is compared with the actual value of the variable based on the behavior of the operator."},"variableName":{"type":"string","description":"The name of the variable to operate on."}},"type":"object","required":["operator","variableName"]},"aws-native:chatbot:CustomActionAttachmentCriteriaOperator":{"type":"string","enum":[{"name":"HasValue","value":"HAS_VALUE"},{"name":"Equals","value":"EQUALS"}]},"aws-native:chatbot:CustomActionDefinition":{"properties":{"commandText":{"type":"string","description":"The command string to run which may include variables by prefixing with a dollar sign ($)."}},"type":"object","required":["commandText"]},"aws-native:chatbot:CustomActionTag":{"properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 128 characters for a tag key. Tags owned by Amazon Web Services (AWS) have the reserved prefix: `aws:` ."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:chatbot:MicrosoftTeamsChannelConfigurationTag":{"properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 128 characters for a tag key. Tags owned by Amazon Web Services (AWS) have the reserved prefix: `aws:` ."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:chatbot:SlackChannelConfigurationTag":{"properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 128 characters for a tag key. Tags owned by Amazon Web Services (AWS) have the reserved prefix: `aws:` ."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:AnalysisTemplateAnalysisParameter":{"properties":{"defaultValue":{"type":"string","description":"Optional. The default value that is applied in the analysis template. The member who can query can override this value in the query editor."},"name":{"type":"string","description":"The name of the parameter. The name must use only alphanumeric, underscore (_), or hyphen (-) characters but cannot start or end with a hyphen."},"type":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisParameterType","description":"The type of parameter."}},"type":"object","required":["name","type"]},"aws-native:cleanrooms:AnalysisTemplateAnalysisParameterType":{"description":"The type of parameter.","type":"string","enum":[{"name":"Smallint","value":"SMALLINT"},{"name":"Integer","value":"INTEGER"},{"name":"Bigint","value":"BIGINT"},{"name":"Decimal","value":"DECIMAL"},{"name":"Real","value":"REAL"},{"name":"DoublePrecision","value":"DOUBLE_PRECISION"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Char","value":"CHAR"},{"name":"Varchar","value":"VARCHAR"},{"name":"Date","value":"DATE"},{"name":"Timestamp","value":"TIMESTAMP"},{"name":"Timestamptz","value":"TIMESTAMPTZ"},{"name":"Time","value":"TIME"},{"name":"Timetz","value":"TIMETZ"},{"name":"Varbyte","value":"VARBYTE"},{"name":"Binary","value":"BINARY"},{"name":"Byte","value":"BYTE"},{"name":"Character","value":"CHARACTER"},{"name":"Double","value":"DOUBLE"},{"name":"Float","value":"FLOAT"},{"name":"Int","value":"INT"},{"name":"Long","value":"LONG"},{"name":"Numeric","value":"NUMERIC"},{"name":"Short","value":"SHORT"},{"name":"String","value":"STRING"},{"name":"TimestampLtz","value":"TIMESTAMP_LTZ"},{"name":"TimestampNtz","value":"TIMESTAMP_NTZ"},{"name":"Tinyint","value":"TINYINT"}]},"aws-native:cleanrooms:AnalysisTemplateAnalysisSchema":{"properties":{"referencedTables":{"type":"array","items":{"type":"string"},"description":"The tables referenced in the analysis schema."}},"type":"object","required":["referencedTables"]},"aws-native:cleanrooms:AnalysisTemplateAnalysisSource0Properties":{"properties":{"text":{"type":"string"}},"type":"object","required":["text"]},"aws-native:cleanrooms:AnalysisTemplateAnalysisSource1Properties":{"properties":{"artifacts":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateArtifacts"}},"type":"object","required":["artifacts"]},"aws-native:cleanrooms:AnalysisTemplateAnalysisSourceMetadata0Properties":{"properties":{"artifacts":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateArtifactMetadata"}},"type":"object","required":["artifacts"]},"aws-native:cleanrooms:AnalysisTemplateAnalysisSourceMetadataProperties":{"properties":{"artifacts":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateArtifactMetadata"}},"type":"object","required":["artifacts"]},"aws-native:cleanrooms:AnalysisTemplateArtifact":{"properties":{"location":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateS3Location"}},"type":"object","required":["location"]},"aws-native:cleanrooms:AnalysisTemplateArtifactMetadata":{"properties":{"additionalArtifactHashes":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateHash"}},"entryPointHash":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateHash"}},"type":"object","required":["entryPointHash"]},"aws-native:cleanrooms:AnalysisTemplateArtifacts":{"properties":{"additionalArtifacts":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateArtifact"}},"entryPoint":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateArtifact"},"roleArn":{"type":"string"}},"type":"object","required":["entryPoint","roleArn"]},"aws-native:cleanrooms:AnalysisTemplateColumnClassificationDetails":{"properties":{"columnMapping":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateSyntheticDataColumnProperties"}}},"type":"object","required":["columnMapping"]},"aws-native:cleanrooms:AnalysisTemplateErrorMessageConfiguration":{"properties":{"type":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateErrorMessageConfigurationType","description":"The level of detail for error messages returned by the PySpark job. When set to DETAILED, error messages include more information to help troubleshoot issues with your PySpark job.\n\nBecause this setting may expose sensitive data, it is recommended for development and testing environments."}},"type":"object","required":["type"]},"aws-native:cleanrooms:AnalysisTemplateErrorMessageConfigurationType":{"description":"The level of detail for error messages returned by the PySpark job. When set to DETAILED, error messages include more information to help troubleshoot issues with your PySpark job.\n\nBecause this setting may expose sensitive data, it is recommended for development and testing environments.","type":"string","enum":[{"name":"Detailed","value":"DETAILED"}]},"aws-native:cleanrooms:AnalysisTemplateFormat":{"description":"The format of the analysis template.","type":"string","enum":[{"name":"Sql","value":"SQL"},{"name":"Pyspark10","value":"PYSPARK_1_0"}]},"aws-native:cleanrooms:AnalysisTemplateHash":{"properties":{"sha256":{"type":"string"}},"type":"object"},"aws-native:cleanrooms:AnalysisTemplateMlSyntheticDataParameters":{"properties":{"columnClassification":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateColumnClassificationDetails"},"epsilon":{"type":"number"},"maxMembershipInferenceAttackScore":{"type":"number"}},"type":"object","required":["columnClassification","epsilon","maxMembershipInferenceAttackScore"]},"aws-native:cleanrooms:AnalysisTemplateS3Location":{"properties":{"bucket":{"type":"string"},"key":{"type":"string"}},"type":"object","required":["bucket","key"]},"aws-native:cleanrooms:AnalysisTemplateSyntheticDataColumnProperties":{"properties":{"columnName":{"type":"string"},"columnType":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateSyntheticDataColumnPropertiesColumnType"},"isPredictiveValue":{"type":"boolean"}},"type":"object","required":["columnName","columnType","isPredictiveValue"]},"aws-native:cleanrooms:AnalysisTemplateSyntheticDataColumnPropertiesColumnType":{"type":"string","enum":[{"name":"Categorical","value":"CATEGORICAL"},{"name":"Numerical","value":"NUMERICAL"}]},"aws-native:cleanrooms:AnalysisTemplateSyntheticDataParameters0Properties":{"properties":{"mlSyntheticDataParameters":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateMlSyntheticDataParameters"}},"type":"object","required":["mlSyntheticDataParameters"]},"aws-native:cleanrooms:AnalysisTemplateSyntheticDataParametersProperties":{"properties":{"mlSyntheticDataParameters":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateMlSyntheticDataParameters"}},"type":"object","required":["mlSyntheticDataParameters"]},"aws-native:cleanrooms:AnalysisTemplateTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:CollaborationAnalyticsEngine":{"type":"string","enum":[{"name":"CleanRoomsSql","value":"CLEAN_ROOMS_SQL"},{"name":"Spark","value":"SPARK"}]},"aws-native:cleanrooms:CollaborationAutoApprovedChangeType":{"type":"string","enum":[{"name":"AddMember","value":"ADD_MEMBER"},{"name":"GrantReceiveResultsAbility","value":"GRANT_RECEIVE_RESULTS_ABILITY"},{"name":"RevokeReceiveResultsAbility","value":"REVOKE_RECEIVE_RESULTS_ABILITY"}]},"aws-native:cleanrooms:CollaborationCustomMlMemberAbility":{"type":"string","enum":[{"name":"CanReceiveModelOutput","value":"CAN_RECEIVE_MODEL_OUTPUT"},{"name":"CanReceiveInferenceOutput","value":"CAN_RECEIVE_INFERENCE_OUTPUT"}]},"aws-native:cleanrooms:CollaborationDataEncryptionMetadata":{"properties":{"allowCleartext":{"type":"boolean","description":"Indicates whether encrypted tables can contain cleartext data ( `TRUE` ) or are to cryptographically process every column ( `FALSE` )."},"allowDuplicates":{"type":"boolean","description":"Indicates whether Fingerprint columns can contain duplicate entries ( `TRUE` ) or are to contain only non-repeated values ( `FALSE` )."},"allowJoinsOnColumnsWithDifferentNames":{"type":"boolean","description":"Indicates whether Fingerprint columns can be joined on any other Fingerprint column with a different name ( `TRUE` ) or can only be joined on Fingerprint columns of the same name ( `FALSE` )."},"preserveNulls":{"type":"boolean","description":"Indicates whether NULL values are to be copied as NULL to encrypted tables ( `TRUE` ) or cryptographically processed ( `FALSE` )."}},"type":"object","required":["allowCleartext","allowDuplicates","allowJoinsOnColumnsWithDifferentNames","preserveNulls"]},"aws-native:cleanrooms:CollaborationJobComputePaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration creator has configured the collaboration member to pay for query and job compute costs ( `TRUE` ) or has not configured the collaboration member to pay for query and job compute costs ( `FALSE` ).\n\nExactly one member can be configured to pay for query and job compute costs. An error is returned if the collaboration creator sets a `TRUE` value for more than one member in the collaboration.\n\nAn error is returned if the collaboration creator sets a `FALSE` value for the member who can run queries and jobs."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:CollaborationJobLogStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cleanrooms:CollaborationMemberAbility":{"type":"string","enum":[{"name":"CanQuery","value":"CAN_QUERY"},{"name":"CanRunJob","value":"CAN_RUN_JOB"},{"name":"CanReceiveResults","value":"CAN_RECEIVE_RESULTS"}]},"aws-native:cleanrooms:CollaborationMemberSpecification":{"properties":{"accountId":{"type":"string","description":"The identifier used to reference members of the collaboration. Currently only supports AWS account ID."},"displayName":{"type":"string","description":"The member's display name."},"memberAbilities":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMemberAbility"},"description":"The abilities granted to the collaboration member.\n\n*Allowed Values* : `CAN_QUERY` | `CAN_RECEIVE_RESULTS`"},"mlMemberAbilities":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMlMemberAbilities","description":"The ML abilities granted to the collaboration member."},"paymentConfiguration":{"$ref":"#/types/aws-native:cleanrooms:CollaborationPaymentConfiguration","description":"The collaboration member's payment responsibilities set by the collaboration creator.\n\nIf the collaboration creator hasn't specified anyone as the member paying for query compute costs, then the member who can query is the default payer."}},"type":"object","required":["accountId","displayName"]},"aws-native:cleanrooms:CollaborationMlMemberAbilities":{"properties":{"customMlMemberAbilities":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationCustomMlMemberAbility"},"description":"The custom ML member abilities for a collaboration member."}},"type":"object","required":["customMlMemberAbilities"]},"aws-native:cleanrooms:CollaborationMlPaymentConfig":{"properties":{"modelInference":{"$ref":"#/types/aws-native:cleanrooms:CollaborationModelInferencePaymentConfig","description":"The payment responsibilities accepted by the member for model inference."},"modelTraining":{"$ref":"#/types/aws-native:cleanrooms:CollaborationModelTrainingPaymentConfig","description":"The payment responsibilities accepted by the member for model training."},"syntheticDataGeneration":{"$ref":"#/types/aws-native:cleanrooms:CollaborationSyntheticDataGenerationPaymentConfig","description":"The payment configuration for machine learning synthetic data generation."}},"type":"object"},"aws-native:cleanrooms:CollaborationModelInferencePaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration creator has configured the collaboration member to pay for model inference costs ( `TRUE` ) or has not configured the collaboration member to pay for model inference costs ( `FALSE` ).\n\nExactly one member can be configured to pay for model inference costs. An error is returned if the collaboration creator sets a `TRUE` value for more than one member in the collaboration.\n\nIf the collaboration creator hasn't specified anyone as the member paying for model inference costs, then the member who can query is the default payer. An error is returned if the collaboration creator sets a `FALSE` value for the member who can query."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:CollaborationModelTrainingPaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration creator has configured the collaboration member to pay for model training costs ( `TRUE` ) or has not configured the collaboration member to pay for model training costs ( `FALSE` ).\n\nExactly one member can be configured to pay for model training costs. An error is returned if the collaboration creator sets a `TRUE` value for more than one member in the collaboration.\n\nIf the collaboration creator hasn't specified anyone as the member paying for model training costs, then the member who can query is the default payer. An error is returned if the collaboration creator sets a `FALSE` value for the member who can query."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:CollaborationPaymentConfiguration":{"properties":{"jobCompute":{"$ref":"#/types/aws-native:cleanrooms:CollaborationJobComputePaymentConfig","description":"The compute configuration for the job."},"machineLearning":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMlPaymentConfig","description":"An object representing the collaboration member's machine learning payment responsibilities set by the collaboration creator."},"queryCompute":{"$ref":"#/types/aws-native:cleanrooms:CollaborationQueryComputePaymentConfig","description":"The collaboration member's payment responsibilities set by the collaboration creator for query compute costs."}},"type":"object","required":["queryCompute"]},"aws-native:cleanrooms:CollaborationQueryComputePaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration creator has configured the collaboration member to pay for query compute costs ( `TRUE` ) or has not configured the collaboration member to pay for query compute costs ( `FALSE` ).\n\nExactly one member can be configured to pay for query compute costs. An error is returned if the collaboration creator sets a `TRUE` value for more than one member in the collaboration.\n\nIf the collaboration creator hasn't specified anyone as the member paying for query compute costs, then the member who can query is the default payer. An error is returned if the collaboration creator sets a `FALSE` value for the member who can query."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:CollaborationQueryLogStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cleanrooms:CollaborationSupportedS3Region":{"type":"string","enum":[{"name":"UsWest1","value":"us-west-1"},{"name":"UsWest2","value":"us-west-2"},{"name":"UsEast1","value":"us-east-1"},{"name":"UsEast2","value":"us-east-2"},{"name":"AfSouth1","value":"af-south-1"},{"name":"ApEast1","value":"ap-east-1"},{"name":"ApEast2","value":"ap-east-2"},{"name":"ApSouth2","value":"ap-south-2"},{"name":"ApSoutheast1","value":"ap-southeast-1"},{"name":"ApSoutheast2","value":"ap-southeast-2"},{"name":"ApSoutheast3","value":"ap-southeast-3"},{"name":"ApSoutheast5","value":"ap-southeast-5"},{"name":"ApSoutheast4","value":"ap-southeast-4"},{"name":"ApSoutheast7","value":"ap-southeast-7"},{"name":"ApSouth1","value":"ap-south-1"},{"name":"ApNortheast3","value":"ap-northeast-3"},{"name":"ApNortheast1","value":"ap-northeast-1"},{"name":"ApNortheast2","value":"ap-northeast-2"},{"name":"CaCentral1","value":"ca-central-1"},{"name":"CaWest1","value":"ca-west-1"},{"name":"EuSouth1","value":"eu-south-1"},{"name":"EuWest3","value":"eu-west-3"},{"name":"EuSouth2","value":"eu-south-2"},{"name":"EuCentral2","value":"eu-central-2"},{"name":"EuCentral1","value":"eu-central-1"},{"name":"EuNorth1","value":"eu-north-1"},{"name":"EuWest1","value":"eu-west-1"},{"name":"EuWest2","value":"eu-west-2"},{"name":"MeSouth1","value":"me-south-1"},{"name":"MeCentral1","value":"me-central-1"},{"name":"IlCentral1","value":"il-central-1"},{"name":"SaEast1","value":"sa-east-1"},{"name":"MxCentral1","value":"mx-central-1"}]},"aws-native:cleanrooms:CollaborationSyntheticDataGenerationPaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates who is responsible for paying for synthetic data generation."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:CollaborationTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:ConfiguredTableAdditionalAnalyses":{"type":"string","enum":[{"name":"Allowed","value":"ALLOWED"},{"name":"Required","value":"REQUIRED"},{"name":"NotAllowed","value":"NOT_ALLOWED"}]},"aws-native:cleanrooms:ConfiguredTableAggregateColumn":{"properties":{"columnNames":{"type":"array","items":{"type":"string"}},"function":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAggregateFunctionName"}},"type":"object","required":["columnNames","function"]},"aws-native:cleanrooms:ConfiguredTableAggregateFunctionName":{"type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"SumDistinct","value":"SUM_DISTINCT"},{"name":"Count","value":"COUNT"},{"name":"CountDistinct","value":"COUNT_DISTINCT"},{"name":"Avg","value":"AVG"}]},"aws-native:cleanrooms:ConfiguredTableAggregationConstraint":{"properties":{"columnName":{"type":"string"},"minimum":{"type":"number"},"type":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAggregationType"}},"type":"object","required":["columnName","minimum","type"]},"aws-native:cleanrooms:ConfiguredTableAggregationType":{"type":"string","enum":[{"name":"CountDistinct","value":"COUNT_DISTINCT"}]},"aws-native:cleanrooms:ConfiguredTableAnalysisMethod":{"type":"string","enum":[{"name":"DirectQuery","value":"DIRECT_QUERY"},{"name":"DirectJob","value":"DIRECT_JOB"},{"name":"Multiple","value":"MULTIPLE"}]},"aws-native:cleanrooms:ConfiguredTableAnalysisRule":{"properties":{"policy":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicy","description":"A policy that describes the associated data usage limitations."},"type":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRuleType","description":"The type of analysis rule."}},"type":"object","required":["policy","type"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRuleAggregation":{"properties":{"additionalAnalyses":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAdditionalAnalyses"},"aggregateColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAggregateColumn"}},"allowedJoinOperators":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableJoinOperator"}},"dimensionColumns":{"type":"array","items":{"type":"string"}},"joinColumns":{"type":"array","items":{"type":"string"}},"joinRequired":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableJoinRequiredOption"},"outputConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAggregationConstraint"}},"scalarFunctions":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableScalarFunctions"}}},"type":"object","required":["aggregateColumns","dimensionColumns","joinColumns","outputConstraints","scalarFunctions"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRuleCustom":{"properties":{"additionalAnalyses":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAdditionalAnalyses"},"allowedAnalyses":{"type":"array","items":{"type":"string"}},"allowedAnalysisProviders":{"type":"array","items":{"type":"string"}},"differentialPrivacy":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableDifferentialPrivacy"},"disallowedOutputColumns":{"type":"array","items":{"type":"string"}}},"type":"object","required":["allowedAnalyses"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRuleList":{"properties":{"additionalAnalyses":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAdditionalAnalyses"},"allowedJoinOperators":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableJoinOperator"}},"joinColumns":{"type":"array","items":{"type":"string"}},"listColumns":{"type":"array","items":{"type":"string"}}},"type":"object","required":["joinColumns","listColumns"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicy":{"properties":{"v1":{"oneOf":[{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicyV10Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicyV11Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicyV12Properties"}],"description":"Controls on the query specifications that can be run on a configured table."}},"type":"object","required":["v1"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicyV10Properties":{"properties":{"list":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRuleList"}},"type":"object","required":["list"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicyV11Properties":{"properties":{"aggregation":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRuleAggregation"}},"type":"object","required":["aggregation"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRulePolicyV12Properties":{"properties":{"custom":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRuleCustom"}},"type":"object","required":["custom"]},"aws-native:cleanrooms:ConfiguredTableAnalysisRuleType":{"type":"string","enum":[{"name":"Aggregation","value":"AGGREGATION"},{"name":"List","value":"LIST"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRule":{"properties":{"policy":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicy","description":"The policy of the configured table association analysis rule."},"type":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleType","description":"The type of the configured table association analysis rule."}},"type":"object","required":["policy","type"]},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleAggregation":{"properties":{"allowedAdditionalAnalyses":{"type":"array","items":{"type":"string"}},"allowedResultReceivers":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleCustom":{"properties":{"allowedAdditionalAnalyses":{"type":"array","items":{"type":"string"}},"allowedResultReceivers":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleList":{"properties":{"allowedAdditionalAnalyses":{"type":"array","items":{"type":"string"}},"allowedResultReceivers":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicy":{"properties":{"v1":{"oneOf":[{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicyV10Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicyV11Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicyV12Properties"}],"description":"The policy for the configured table association analysis rule."}},"type":"object","required":["v1"]},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicyV10Properties":{"properties":{"list":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleList"}},"type":"object","required":["list"]},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicyV11Properties":{"properties":{"aggregation":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleAggregation"}},"type":"object","required":["aggregation"]},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRulePolicyV12Properties":{"properties":{"custom":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleCustom"}},"type":"object","required":["custom"]},"aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRuleType":{"type":"string","enum":[{"name":"Aggregation","value":"AGGREGATION"},{"name":"List","value":"LIST"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:cleanrooms:ConfiguredTableAssociationTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:ConfiguredTableAthenaTableReference":{"properties":{"catalogName":{"type":"string"},"databaseName":{"type":"string"},"outputLocation":{"type":"string"},"region":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableCommercialRegion"},"tableName":{"type":"string"},"workGroup":{"type":"string"}},"type":"object","required":["databaseName","tableName","workGroup"]},"aws-native:cleanrooms:ConfiguredTableCommercialRegion":{"type":"string","enum":[{"name":"UsWest1","value":"us-west-1"},{"name":"UsWest2","value":"us-west-2"},{"name":"UsEast1","value":"us-east-1"},{"name":"UsEast2","value":"us-east-2"},{"name":"AfSouth1","value":"af-south-1"},{"name":"ApEast1","value":"ap-east-1"},{"name":"ApSouth2","value":"ap-south-2"},{"name":"ApSoutheast1","value":"ap-southeast-1"},{"name":"ApSoutheast2","value":"ap-southeast-2"},{"name":"ApSoutheast5","value":"ap-southeast-5"},{"name":"ApSoutheast4","value":"ap-southeast-4"},{"name":"ApSoutheast7","value":"ap-southeast-7"},{"name":"ApSouth1","value":"ap-south-1"},{"name":"ApNortheast3","value":"ap-northeast-3"},{"name":"ApNortheast1","value":"ap-northeast-1"},{"name":"ApNortheast2","value":"ap-northeast-2"},{"name":"CaCentral1","value":"ca-central-1"},{"name":"CaWest1","value":"ca-west-1"},{"name":"EuSouth1","value":"eu-south-1"},{"name":"EuWest3","value":"eu-west-3"},{"name":"EuSouth2","value":"eu-south-2"},{"name":"EuCentral2","value":"eu-central-2"},{"name":"EuCentral1","value":"eu-central-1"},{"name":"EuNorth1","value":"eu-north-1"},{"name":"EuWest1","value":"eu-west-1"},{"name":"EuWest2","value":"eu-west-2"},{"name":"MeSouth1","value":"me-south-1"},{"name":"MeCentral1","value":"me-central-1"},{"name":"IlCentral1","value":"il-central-1"},{"name":"SaEast1","value":"sa-east-1"},{"name":"MxCentral1","value":"mx-central-1"},{"name":"ApEast2","value":"ap-east-2"}]},"aws-native:cleanrooms:ConfiguredTableDifferentialPrivacy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableDifferentialPrivacyColumn"}}},"type":"object","required":["columns"]},"aws-native:cleanrooms:ConfiguredTableDifferentialPrivacyColumn":{"properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:cleanrooms:ConfiguredTableGlueTableReference":{"properties":{"databaseName":{"type":"string"},"region":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableCommercialRegion"},"tableName":{"type":"string"}},"type":"object","required":["databaseName","tableName"]},"aws-native:cleanrooms:ConfiguredTableJoinOperator":{"type":"string","enum":[{"name":"Or","value":"OR"},{"name":"And","value":"AND"}]},"aws-native:cleanrooms:ConfiguredTableJoinRequiredOption":{"type":"string","enum":[{"name":"QueryRunner","value":"QUERY_RUNNER"}]},"aws-native:cleanrooms:ConfiguredTableScalarFunctions":{"type":"string","enum":[{"name":"Trunc","value":"TRUNC"},{"name":"Abs","value":"ABS"},{"name":"Ceiling","value":"CEILING"},{"name":"Floor","value":"FLOOR"},{"name":"Ln","value":"LN"},{"name":"Log","value":"LOG"},{"name":"Round","value":"ROUND"},{"name":"Sqrt","value":"SQRT"},{"name":"Cast","value":"CAST"},{"name":"Lower","value":"LOWER"},{"name":"Rtrim","value":"RTRIM"},{"name":"Upper","value":"UPPER"},{"name":"Coalesce","value":"COALESCE"},{"name":"Convert","value":"CONVERT"},{"name":"CurrentDate","value":"CURRENT_DATE"},{"name":"Dateadd","value":"DATEADD"},{"name":"Extract","value":"EXTRACT"},{"name":"Getdate","value":"GETDATE"},{"name":"Substring","value":"SUBSTRING"},{"name":"ToChar","value":"TO_CHAR"},{"name":"ToDate","value":"TO_DATE"},{"name":"ToNumber","value":"TO_NUMBER"},{"name":"ToTimestamp","value":"TO_TIMESTAMP"},{"name":"Trim","value":"TRIM"}]},"aws-native:cleanrooms:ConfiguredTableSelectedAnalysisMethod":{"type":"string","enum":[{"name":"DirectQuery","value":"DIRECT_QUERY"},{"name":"DirectJob","value":"DIRECT_JOB"}]},"aws-native:cleanrooms:ConfiguredTableSnowflakeTableReference":{"properties":{"accountIdentifier":{"type":"string"},"databaseName":{"type":"string"},"schemaName":{"type":"string"},"secretArn":{"type":"string"},"tableName":{"type":"string"},"tableSchema":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSnowflakeTableSchemaProperties"}},"type":"object","required":["accountIdentifier","databaseName","schemaName","secretArn","tableName","tableSchema"]},"aws-native:cleanrooms:ConfiguredTableSnowflakeTableSchema0Properties":{"properties":{"v1":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSnowflakeTableSchemaV1"}}},"type":"object","required":["v1"]},"aws-native:cleanrooms:ConfiguredTableSnowflakeTableSchemaProperties":{"properties":{"v1":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSnowflakeTableSchemaV1"}}},"type":"object","required":["v1"]},"aws-native:cleanrooms:ConfiguredTableSnowflakeTableSchemaV1":{"properties":{"columnName":{"type":"string"},"columnType":{"type":"string"}},"type":"object","required":["columnName","columnType"]},"aws-native:cleanrooms:ConfiguredTableTableReference0Properties":{"properties":{"glue":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableGlueTableReference"}},"type":"object","required":["glue"]},"aws-native:cleanrooms:ConfiguredTableTableReference1Properties":{"properties":{"snowflake":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSnowflakeTableReference"}},"type":"object","required":["snowflake"]},"aws-native:cleanrooms:ConfiguredTableTableReference2Properties":{"properties":{"athena":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAthenaTableReference"}},"type":"object","required":["athena"]},"aws-native:cleanrooms:ConfiguredTableTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:IdMappingTableInputReferenceConfig":{"properties":{"inputReferenceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the referenced resource in AWS Entity Resolution . Valid values are ID mapping workflow ARNs."},"manageResourcePolicies":{"type":"boolean","description":"When `TRUE` , AWS Clean Rooms manages permissions for the ID mapping table resource.\n\nWhen `FALSE` , the resource owner manages permissions for the ID mapping table resource."}},"type":"object","required":["inputReferenceArn","manageResourcePolicies"]},"aws-native:cleanrooms:IdMappingTableInputReferenceProperties":{"properties":{"idMappingTableInputSource":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:IdMappingTableInputSource"},"description":"The input source of the ID mapping table."}},"type":"object","required":["idMappingTableInputSource"]},"aws-native:cleanrooms:IdMappingTableInputSource":{"properties":{"idNamespaceAssociationId":{"type":"string","description":"The unique identifier of the ID namespace association."},"type":{"$ref":"#/types/aws-native:cleanrooms:IdMappingTableInputSourceType","description":"The type of the input source of the ID mapping table."}},"type":"object","required":["idNamespaceAssociationId","type"]},"aws-native:cleanrooms:IdMappingTableInputSourceType":{"description":"The type of the input source of the ID mapping table.","type":"string","enum":[{"name":"Source","value":"SOURCE"},{"name":"Target","value":"TARGET"}]},"aws-native:cleanrooms:IdMappingTableTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:IdNamespaceAssociationDocument":{"type":"object"},"aws-native:cleanrooms:IdNamespaceAssociationIdMappingConfig":{"properties":{"allowUseAsDimensionColumn":{"type":"boolean","description":"An indicator as to whether you can use your column as a dimension column in the ID mapping table ( `TRUE` ) or not ( `FALSE` ).\n\nDefault is `FALSE` ."}},"type":"object","required":["allowUseAsDimensionColumn"]},"aws-native:cleanrooms:IdNamespaceAssociationInputReferenceConfig":{"properties":{"inputReferenceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Entity Resolution resource that is being associated to the collaboration. Valid resource ARNs are from the ID namespaces that you own."},"manageResourcePolicies":{"type":"boolean","description":"When `TRUE` , AWS Clean Rooms manages permissions for the ID namespace association resource.\n\nWhen `FALSE` , the resource owner manages permissions for the ID namespace association resource."}},"type":"object","required":["inputReferenceArn","manageResourcePolicies"]},"aws-native:cleanrooms:IdNamespaceAssociationInputReferenceProperties":{"properties":{"idMappingWorkflowsSupported":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationDocument"},"description":"Defines how ID mapping workflows are supported for this ID namespace association."},"idNamespaceType":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationInputReferencePropertiesIdNamespaceType","description":"The ID namespace type for this ID namespace association."}},"type":"object"},"aws-native:cleanrooms:IdNamespaceAssociationInputReferencePropertiesIdNamespaceType":{"description":"The ID namespace type for this ID namespace association.","type":"string","enum":[{"name":"Source","value":"SOURCE"},{"name":"Target","value":"TARGET"}]},"aws-native:cleanrooms:IdNamespaceAssociationTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:MembershipJobComputePaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration member has accepted to pay for job compute costs ( `TRUE` ) or has not accepted to pay for query and job compute costs ( `FALSE` ).\n\nThere is only one member who pays for queries and jobs.\n\nAn error message is returned for the following reasons:\n\n- If you set the value to `FALSE` but you are responsible to pay for query and job compute costs.\n- If you set the value to `TRUE` but you are not responsible to pay for query and job compute costs."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:MembershipJobLogStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cleanrooms:MembershipMlPaymentConfig":{"properties":{"modelInference":{"$ref":"#/types/aws-native:cleanrooms:MembershipModelInferencePaymentConfig","description":"The payment responsibilities accepted by the member for model inference."},"modelTraining":{"$ref":"#/types/aws-native:cleanrooms:MembershipModelTrainingPaymentConfig","description":"The payment responsibilities accepted by the member for model training."},"syntheticDataGeneration":{"$ref":"#/types/aws-native:cleanrooms:MembershipSyntheticDataGenerationPaymentConfig","description":"The payment configuration for synthetic data generation for this machine learning membership."}},"type":"object"},"aws-native:cleanrooms:MembershipModelInferencePaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration member has accepted to pay for model inference costs ( `TRUE` ) or has not accepted to pay for model inference costs ( `FALSE` ).\n\nIf the collaboration creator has not specified anyone to pay for model inference costs, then the member who can query is the default payer.\n\nAn error message is returned for the following reasons:\n\n- If you set the value to `FALSE` but you are responsible to pay for model inference costs.\n- If you set the value to `TRUE` but you are not responsible to pay for model inference costs."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:MembershipModelTrainingPaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration member has accepted to pay for model training costs ( `TRUE` ) or has not accepted to pay for model training costs ( `FALSE` ).\n\nIf the collaboration creator has not specified anyone to pay for model training costs, then the member who can query is the default payer.\n\nAn error message is returned for the following reasons:\n\n- If you set the value to `FALSE` but you are responsible to pay for model training costs.\n- If you set the value to `TRUE` but you are not responsible to pay for model training costs."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:MembershipPaymentConfiguration":{"properties":{"jobCompute":{"$ref":"#/types/aws-native:cleanrooms:MembershipJobComputePaymentConfig","description":"The payment responsibilities accepted by the collaboration member for job compute costs."},"machineLearning":{"$ref":"#/types/aws-native:cleanrooms:MembershipMlPaymentConfig","description":"The payment responsibilities accepted by the collaboration member for machine learning costs."},"queryCompute":{"$ref":"#/types/aws-native:cleanrooms:MembershipQueryComputePaymentConfig","description":"The payment responsibilities accepted by the collaboration member for query compute costs."}},"type":"object","required":["queryCompute"]},"aws-native:cleanrooms:MembershipProtectedJobOutputConfiguration":{"properties":{"s3":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedJobS3OutputConfigurationInput","description":"Contains the configuration to write the job results to S3."}},"type":"object","required":["s3"]},"aws-native:cleanrooms:MembershipProtectedJobResultConfiguration":{"properties":{"outputConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedJobOutputConfiguration","description":"The output configuration for a protected job result."},"roleArn":{"type":"string","description":"The unique ARN for an IAM role that is used by AWS Clean Rooms to write protected job results to the result location, given by the member who can receive results."}},"type":"object","required":["outputConfiguration","roleArn"]},"aws-native:cleanrooms:MembershipProtectedJobS3OutputConfigurationInput":{"properties":{"bucket":{"type":"string","description":"The S3 bucket for job output."},"keyPrefix":{"type":"string","description":"The S3 prefix to unload the protected job results."}},"type":"object","required":["bucket"]},"aws-native:cleanrooms:MembershipProtectedQueryOutputConfiguration":{"properties":{"s3":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedQueryS3OutputConfiguration","description":"Required configuration for a protected query with an `s3` output type."}},"type":"object","required":["s3"]},"aws-native:cleanrooms:MembershipProtectedQueryResultConfiguration":{"properties":{"outputConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedQueryOutputConfiguration","description":"Configuration for protected query results."},"roleArn":{"type":"string","description":"The unique ARN for an IAM role that is used by AWS Clean Rooms to write protected query results to the result location, given by the member who can receive results."}},"type":"object","required":["outputConfiguration"]},"aws-native:cleanrooms:MembershipProtectedQueryS3OutputConfiguration":{"properties":{"bucket":{"type":"string","description":"The S3 bucket to unload the protected query results."},"keyPrefix":{"type":"string","description":"The S3 prefix to unload the protected query results."},"resultFormat":{"$ref":"#/types/aws-native:cleanrooms:MembershipResultFormat","description":"Intended file format of the result."},"singleFileOutput":{"type":"boolean","description":"Indicates whether files should be output as a single file ( `TRUE` ) or output as multiple files ( `FALSE` ). This parameter is only supported for analyses with the Spark analytics engine."}},"type":"object","required":["bucket","resultFormat"]},"aws-native:cleanrooms:MembershipQueryComputePaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates whether the collaboration member has accepted to pay for query compute costs ( `TRUE` ) or has not accepted to pay for query compute costs ( `FALSE` ).\n\nIf the collaboration creator has not specified anyone to pay for query compute costs, then the member who can query is the default payer.\n\nAn error message is returned for the following reasons:\n\n- If you set the value to `FALSE` but you are responsible to pay for query compute costs.\n- If you set the value to `TRUE` but you are not responsible to pay for query compute costs."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:MembershipQueryLogStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cleanrooms:MembershipResultFormat":{"type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Parquet","value":"PARQUET"}]},"aws-native:cleanrooms:MembershipSyntheticDataGenerationPaymentConfig":{"properties":{"isResponsible":{"type":"boolean","description":"Indicates if this membership is responsible for paying for synthetic data generation."}},"type":"object","required":["isResponsible"]},"aws-native:cleanrooms:MembershipTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:cleanrooms:ParametersProperties":{"description":"Specifies the epsilon and noise parameters for the privacy budget template.","properties":{"budgetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplateBudgetParameter"}},"epsilon":{"type":"integer","description":"The epsilon value that you want to use."},"resourceArn":{"type":"string"},"usersNoisePerQuery":{"type":"integer","description":"Noise added per query is measured in terms of the number of users whose contributions you want to obscure. This value governs the rate at which the privacy budget is depleted."}},"type":"object"},"aws-native:cleanrooms:PrivacyBudgetTemplateAutoRefresh":{"description":"How often the privacy budget refreshes.\n\n\u003e If you plan to regularly bring new data into the collaboration, use `CALENDAR_MONTH` to automatically get a new privacy budget for the collaboration every calendar month. Choosing this option allows arbitrary amounts of information to be revealed about rows of the data when repeatedly queried across refreshes. Avoid choosing this if the same rows will be repeatedly queried between privacy budget refreshes.","type":"string","enum":[{"name":"CalendarMonth","value":"CALENDAR_MONTH"},{"name":"None","value":"NONE"}]},"aws-native:cleanrooms:PrivacyBudgetTemplateBudgetParameter":{"properties":{"autoRefresh":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplateBudgetParameterAutoRefresh","description":"Whether this individual budget parameter automatically refreshes when the budget period resets."},"budget":{"type":"integer","description":"The budget allocation amount for this specific parameter."},"type":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplateBudgetParameterType","description":"The type of budget parameter being configured."}},"type":"object","required":["budget","type"]},"aws-native:cleanrooms:PrivacyBudgetTemplateBudgetParameterAutoRefresh":{"description":"Whether this individual budget parameter automatically refreshes when the budget period resets.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cleanrooms:PrivacyBudgetTemplateBudgetParameterType":{"description":"The type of budget parameter being configured.","type":"string","enum":[{"name":"CalendarDay","value":"CALENDAR_DAY"},{"name":"CalendarMonth","value":"CALENDAR_MONTH"},{"name":"CalendarWeek","value":"CALENDAR_WEEK"},{"name":"Lifetime","value":"LIFETIME"}]},"aws-native:cleanrooms:PrivacyBudgetTemplatePrivacyBudgetType":{"description":"Specifies the type of the privacy budget template.","type":"string","enum":[{"name":"DifferentialPrivacy","value":"DIFFERENTIAL_PRIVACY"},{"name":"AccessBudget","value":"ACCESS_BUDGET"}]},"aws-native:cleanrooms:PrivacyBudgetTemplateTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with `aws:` . digits, whitespace, `_` , `.` , `:` , `/` , `=` , `+` , `@` , `-` , and `\"` .\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)"},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_` , `.` , `/` , `=` , `+` , and `-` .\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["key","value"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationCustomEntityConfig":{"properties":{"customDataIdentifiers":{"type":"array","items":{"type":"string"}}},"type":"object","required":["customDataIdentifiers"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationEntityType":{"type":"string","enum":[{"name":"AllPersonallyIdentifiableInformation","value":"ALL_PERSONALLY_IDENTIFIABLE_INFORMATION"},{"name":"Numbers","value":"NUMBERS"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogRedactionConfiguration":{"properties":{"customEntityConfig":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationCustomEntityConfig"},"entitiesToRedact":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationEntityType"}}},"type":"object","required":["entitiesToRedact"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogType":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"ErrorSummary","value":"ERROR_SUMMARY"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogsConfigurationPolicy":{"properties":{"allowedAccountIds":{"type":"array","items":{"type":"string"}},"filterPattern":{"type":"string"},"logRedactionConfiguration":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogRedactionConfiguration"},"logType":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogType"}},"type":"object","required":["allowedAccountIds"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationMetricsConfigurationPolicy":{"properties":{"noiseLevel":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationNoiseLevelType"}},"type":"object","required":["noiseLevel"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationNoiseLevelType":{"type":"string","enum":[{"name":"High","value":"HIGH"},{"name":"Medium","value":"MEDIUM"},{"name":"Low","value":"LOW"},{"name":"None","value":"NONE"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationPrivacyConfiguration":{"properties":{"policies":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationPrivacyConfigurationPolicies"}},"type":"object","required":["policies"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationPrivacyConfigurationPolicies":{"properties":{"trainedModelExports":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportsConfigurationPolicy"},"trainedModelInferenceJobs":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelInferenceJobsConfigurationPolicy"},"trainedModels":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelsConfigurationPolicy"}},"type":"object"},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelArtifactMaxSize":{"properties":{"unit":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelArtifactMaxSizeUnitType"},"value":{"type":"number"}},"type":"object","required":["unit","value"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelArtifactMaxSizeUnitType":{"type":"string","enum":[{"name":"Gb","value":"GB"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportFileType":{"type":"string","enum":[{"name":"Model","value":"MODEL"},{"name":"OutputType","value":"OUTPUT"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportsConfigurationPolicy":{"properties":{"filesToExport":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportFileType"}},"maxSize":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportsMaxSize"}},"type":"object","required":["filesToExport","maxSize"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportsMaxSize":{"properties":{"unit":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportsMaxSizeUnitType"},"value":{"type":"number"}},"type":"object","required":["unit","value"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelExportsMaxSizeUnitType":{"type":"string","enum":[{"name":"Gb","value":"GB"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelInferenceJobsConfigurationPolicy":{"properties":{"containerLogs":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogsConfigurationPolicy"}},"maxOutputSize":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelInferenceMaxOutputSize"}},"type":"object"},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelInferenceMaxOutputSize":{"properties":{"unit":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelInferenceMaxOutputSizeUnitType"},"value":{"type":"number"}},"type":"object","required":["unit","value"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelInferenceMaxOutputSizeUnitType":{"type":"string","enum":[{"name":"Gb","value":"GB"}]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelsConfigurationPolicy":{"properties":{"containerLogs":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationLogsConfigurationPolicy"}},"containerMetrics":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationMetricsConfigurationPolicy"},"maxArtifactSize":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationTrainedModelArtifactMaxSize"}},"type":"object"},"aws-native:cleanroomsml:ConfiguredModelAlgorithmContainerConfig":{"properties":{"arguments":{"type":"array","items":{"type":"string"}},"entrypoint":{"type":"array","items":{"type":"string"}},"imageUri":{"type":"string"},"metricDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmMetricDefinition"}}},"type":"object","required":["imageUri"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmInferenceContainerConfig":{"properties":{"imageUri":{"type":"string"}},"type":"object","required":["imageUri"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmMetricDefinition":{"properties":{"name":{"type":"string"},"regex":{"type":"string"}},"type":"object","required":["name","regex"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:cleanroomsml:TrainingDatasetColumnSchema":{"properties":{"columnName":{"type":"string","description":"The name of a column."},"columnTypes":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetColumnType"},"description":"The data type of column."}},"type":"object","required":["columnName","columnTypes"]},"aws-native:cleanroomsml:TrainingDatasetColumnType":{"type":"string","enum":[{"name":"UserId","value":"USER_ID"},{"name":"ItemId","value":"ITEM_ID"},{"name":"Timestamp","value":"TIMESTAMP"},{"name":"CategoricalFeature","value":"CATEGORICAL_FEATURE"},{"name":"NumericalFeature","value":"NUMERICAL_FEATURE"}]},"aws-native:cleanroomsml:TrainingDatasetDataSource":{"properties":{"glueDataSource":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetGlueDataSource","description":"A GlueDataSource object that defines the catalog ID, database name, and table name for the training data."}},"type":"object","required":["glueDataSource"]},"aws-native:cleanroomsml:TrainingDatasetDataset":{"properties":{"inputConfig":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetDatasetInputConfig","description":"A DatasetInputConfig object that defines the data source and schema mapping."},"type":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetDatasetType","description":"What type of information is found in the dataset."}},"type":"object","required":["inputConfig","type"]},"aws-native:cleanroomsml:TrainingDatasetDatasetInputConfig":{"properties":{"dataSource":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetDataSource","description":"A DataSource object that specifies the Glue data source for the training data."},"schema":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetColumnSchema"},"description":"The schema information for the training data."}},"type":"object","required":["dataSource","schema"]},"aws-native:cleanroomsml:TrainingDatasetDatasetType":{"type":"string","enum":[{"name":"Interactions","value":"INTERACTIONS"}]},"aws-native:cleanroomsml:TrainingDatasetGlueDataSource":{"properties":{"catalogId":{"type":"string","description":"The Glue catalog that contains the training data."},"databaseName":{"type":"string","description":"The Glue database that contains the training data."},"tableName":{"type":"string","description":"The Glue table that contains the training data."}},"type":"object","required":["databaseName","tableName"]},"aws-native:cleanroomsml:TrainingDatasetStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"}]},"aws-native:cleanroomsml:TrainingDatasetTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with `aws:` . digits, whitespace, `_` , `.` , `:` , `/` , `=` , `+` , `@` , `-` , and `\"` .\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)"},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_` , `.` , `/` , `=` , `+` , and `-` .\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["key","value"]},"aws-native:cloudformation:GuardHookAction":{"description":"Target actions are the type of operation hooks will be executed at.","type":"string","enum":[{"name":"Create","value":"CREATE"},{"name":"Update","value":"UPDATE"},{"name":"Delete","value":"DELETE"}]},"aws-native:cloudformation:GuardHookFailureMode":{"description":"Attribute to specify CloudFormation behavior on hook failure.","type":"string","enum":[{"name":"Fail","value":"FAIL"},{"name":"Warn","value":"WARN"}]},"aws-native:cloudformation:GuardHookHookStatus":{"description":"Attribute to specify which stacks this hook applies to or should get invoked for","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cloudformation:GuardHookHookTarget":{"description":"Hook targets are the destination where hooks will be invoked against.","properties":{"action":{"$ref":"#/types/aws-native:cloudformation:GuardHookAction"},"invocationPoint":{"$ref":"#/types/aws-native:cloudformation:GuardHookInvocationPoint"},"targetName":{"type":"string"}},"type":"object","required":["action","invocationPoint","targetName"]},"aws-native:cloudformation:GuardHookInvocationPoint":{"description":"Invocation points are the point in provisioning workflow where hooks will be executed.","type":"string","enum":[{"name":"PreProvision","value":"PRE_PROVISION"}]},"aws-native:cloudformation:GuardHookS3Location":{"description":"S3 Source Location for the Guard files.","properties":{"uri":{"type":"string","description":"S3 uri of Guard files."},"versionId":{"type":"string","description":"S3 object version"}},"type":"object","required":["uri"]},"aws-native:cloudformation:GuardHookStackFiltersPropertiesFilteringCriteria":{"description":"Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Any","value":"ANY"}]},"aws-native:cloudformation:GuardHookTargetOperation":{"description":"Which operations should this Hook run against? Resource changes, stacks or change sets.","type":"string","enum":[{"name":"Resource","value":"RESOURCE"},{"name":"Stack","value":"STACK"},{"name":"ChangeSet","value":"CHANGE_SET"},{"name":"CloudControl","value":"CLOUD_CONTROL"}]},"aws-native:cloudformation:HookTypeConfigConfigurationAlias":{"description":"An alias by which to refer to this extension configuration data.","type":"string","enum":[{"name":"Default","value":"default"}]},"aws-native:cloudformation:HookVersionLoggingConfig":{"properties":{"logGroupName":{"type":"string","description":"The Amazon CloudWatch log group to which CloudFormation sends error logging information when invoking the type's handlers."},"logRoleArn":{"type":"string","description":"The ARN of the role that CloudFormation should assume when sending log entries to CloudWatch logs."}},"type":"object"},"aws-native:cloudformation:HookVersionVisibility":{"description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nValid values include:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.\n\nPUBLIC: The type is publically visible and usable within any Amazon account.","type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Private","value":"PRIVATE"}]},"aws-native:cloudformation:LambdaHookAction":{"description":"Target actions are the type of operation hooks will be executed at.","type":"string","enum":[{"name":"Create","value":"CREATE"},{"name":"Update","value":"UPDATE"},{"name":"Delete","value":"DELETE"}]},"aws-native:cloudformation:LambdaHookFailureMode":{"description":"Attribute to specify CloudFormation behavior on hook failure.","type":"string","enum":[{"name":"Fail","value":"FAIL"},{"name":"Warn","value":"WARN"}]},"aws-native:cloudformation:LambdaHookHookStatus":{"description":"Attribute to specify which stacks this hook applies to or should get invoked for","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cloudformation:LambdaHookHookTarget":{"description":"Hook targets are the destination where hooks will be invoked against.","properties":{"action":{"$ref":"#/types/aws-native:cloudformation:LambdaHookAction"},"invocationPoint":{"$ref":"#/types/aws-native:cloudformation:LambdaHookInvocationPoint"},"targetName":{"type":"string"}},"type":"object","required":["action","invocationPoint","targetName"]},"aws-native:cloudformation:LambdaHookInvocationPoint":{"description":"Invocation points are the point in provisioning workflow where hooks will be executed.","type":"string","enum":[{"name":"PreProvision","value":"PRE_PROVISION"}]},"aws-native:cloudformation:LambdaHookStackFiltersPropertiesFilteringCriteria":{"description":"Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Any","value":"ANY"}]},"aws-native:cloudformation:LambdaHookTargetOperation":{"description":"Which operations should this Hook run against? Resource changes, stacks or change sets.","type":"string","enum":[{"name":"Resource","value":"RESOURCE"},{"name":"Stack","value":"STACK"},{"name":"ChangeSet","value":"CHANGE_SET"},{"name":"CloudControl","value":"CLOUD_CONTROL"}]},"aws-native:cloudformation:ManagedExecutionProperties":{"description":"Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations.","properties":{"active":{"type":"boolean","description":"When `true` , CloudFormation performs non-conflicting operations concurrently and queues conflicting operations. After conflicting operations finish, CloudFormation starts queued operations in request order.\n\n\u003e If there are already running or queued operations, CloudFormation queues all incoming operations even if they are non-conflicting.\n\u003e \n\u003e You can't modify your StackSet's execution configuration while there are running or queued operations for that StackSet. \n\nWhen `false` (default), StackSets performs one operation at a time in request order."}},"type":"object"},"aws-native:cloudformation:ModuleVersionVisibility":{"description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nThe only allowed value at present is:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.","type":"string","enum":[{"name":"Private","value":"PRIVATE"}]},"aws-native:cloudformation:OptionsProperties":{"description":"Specifies the S3 location of your input parameters.","properties":{"inputParams":{"$ref":"#/types/aws-native:cloudformation:GuardHookS3Location","description":"Specifies the S3 location where your input parameters are located."}},"type":"object"},"aws-native:cloudformation:PublicTypeVersionType":{"description":"The kind of extension","type":"string","enum":[{"name":"Resource","value":"RESOURCE"},{"name":"Module","value":"MODULE"},{"name":"Hook","value":"HOOK"}]},"aws-native:cloudformation:PublisherIdentityProvider":{"description":"The type of account used as the identity provider when registering this publisher with CloudFormation.","type":"string","enum":[{"name":"AwsMarketplace","value":"AWS_Marketplace"},{"name":"GitHub","value":"GitHub"},{"name":"Bitbucket","value":"Bitbucket"}]},"aws-native:cloudformation:PublisherStatus":{"description":"Whether the publisher is verified.","type":"string","enum":[{"name":"Verified","value":"VERIFIED"},{"name":"Unverified","value":"UNVERIFIED"}]},"aws-native:cloudformation:ResourceVersionLoggingConfig":{"properties":{"logGroupName":{"type":"string","description":"The Amazon CloudWatch log group to which CloudFormation sends error logging information when invoking the type's handlers."},"logRoleArn":{"type":"string","description":"The ARN of the role that CloudFormation should assume when sending log entries to CloudWatch logs."}},"type":"object"},"aws-native:cloudformation:ResourceVersionProvisioningType":{"description":"The provisioning behavior of the type. AWS CloudFormation determines the provisioning type during registration, based on the types of handlers in the schema handler package submitted.","type":"string","enum":[{"name":"NonProvisionable","value":"NON_PROVISIONABLE"},{"name":"Immutable","value":"IMMUTABLE"},{"name":"FullyMutable","value":"FULLY_MUTABLE"}]},"aws-native:cloudformation:ResourceVersionVisibility":{"description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nValid values include:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.\n\nPUBLIC: The type is publically visible and usable within any Amazon account.","type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Private","value":"PRIVATE"}]},"aws-native:cloudformation:StackCapabilitiesItem":{"type":"string","enum":[{"name":"CapabilityIam","value":"CAPABILITY_IAM"},{"name":"CapabilityNamedIam","value":"CAPABILITY_NAMED_IAM"},{"name":"CapabilityAutoExpand","value":"CAPABILITY_AUTO_EXPAND"}]},"aws-native:cloudformation:StackFiltersProperties":{"description":"Filters to allow hooks to target specific stack attributes","properties":{"filteringCriteria":{"$ref":"#/types/aws-native:cloudformation:LambdaHookStackFiltersPropertiesFilteringCriteria","description":"Attribute to specify the filtering behavior. ANY will make the Hook pass if one filter matches. ALL will make the Hook pass if all filters match"},"stackNames":{"$ref":"#/types/aws-native:cloudformation:StackFiltersPropertiesStackNamesProperties","description":"List of stack names as filters"},"stackRoles":{"$ref":"#/types/aws-native:cloudformation:StackFiltersPropertiesStackRolesProperties","description":"List of stack roles that are performing the stack operations."}},"type":"object","required":["filteringCriteria"]},"aws-native:cloudformation:StackFiltersPropertiesStackNamesProperties":{"description":"List of stack names as filters","properties":{"exclude":{"type":"array","items":{"type":"string"},"description":"List of stack names that the hook is going to be excluded from"},"include":{"type":"array","items":{"type":"string"},"description":"List of stack names that the hook is going to target"}},"type":"object"},"aws-native:cloudformation:StackFiltersPropertiesStackRolesProperties":{"description":"List of stack roles that are performing the stack operations.","properties":{"exclude":{"type":"array","items":{"type":"string"},"description":"List of stack roles that the hook is going to be excluded from"},"include":{"type":"array","items":{"type":"string"},"description":"List of stack roles that the hook is going to target"}},"type":"object"},"aws-native:cloudformation:StackOutput":{"properties":{"description":{"type":"string","description":"User defined description associated with the output."},"exportName":{"type":"string","description":"The name of the export associated with the output."},"outputKey":{"type":"string","description":"The key associated with the output."},"outputValue":{"type":"string","description":"The value associated with the output."}},"type":"object"},"aws-native:cloudformation:StackSetAutoDeployment":{"properties":{"dependsOn":{"type":"array","items":{"type":"string"},"description":"A list of StackSet ARNs that this StackSet depends on for auto-deployment operations. When auto-deployment is triggered, operations will be sequenced to ensure all dependencies complete successfully before this StackSet's operation begins."},"enabled":{"type":"boolean","description":"If set to true, StackSets automatically deploys additional stack instances to AWS Organizations accounts that are added to a target organization or organizational unit (OU) in the specified Regions. If an account is removed from a target organization or OU, StackSets deletes stack instances from the account in the specified Regions."},"retainStacksOnAccountRemoval":{"type":"boolean","description":"If set to true, stack resources are retained when an account is removed from a target organization or OU. If set to false, stack resources are deleted. Specify only if Enabled is set to True."}},"type":"object"},"aws-native:cloudformation:StackSetCallAs":{"description":"Specifies the AWS account that you are acting from. By default, SELF is specified. For self-managed permissions, specify SELF; for service-managed permissions, if you are signed in to the organization's management account, specify SELF. If you are signed in to a delegated administrator account, specify DELEGATED_ADMIN.","type":"string","enum":[{"name":"Self","value":"SELF"},{"name":"DelegatedAdmin","value":"DELEGATED_ADMIN"}]},"aws-native:cloudformation:StackSetCapability":{"type":"string","enum":[{"name":"CapabilityIam","value":"CAPABILITY_IAM"},{"name":"CapabilityNamedIam","value":"CAPABILITY_NAMED_IAM"},{"name":"CapabilityAutoExpand","value":"CAPABILITY_AUTO_EXPAND"}]},"aws-native:cloudformation:StackSetConcurrencyMode":{"description":"Specifies how the concurrency level behaves during the operation execution.","type":"string","enum":[{"name":"StrictFailureTolerance","value":"STRICT_FAILURE_TOLERANCE"},{"name":"SoftFailureTolerance","value":"SOFT_FAILURE_TOLERANCE"}]},"aws-native:cloudformation:StackSetDeploymentTargets":{"description":" The AWS OrganizationalUnitIds or Accounts for which to create stack instances in the specified Regions.","properties":{"accountFilterType":{"$ref":"#/types/aws-native:cloudformation:StackSetDeploymentTargetsAccountFilterType","description":"The filter type you want to apply on organizational units and accounts."},"accounts":{"type":"array","items":{"type":"string"},"description":"AWS accounts that you want to create stack instances in the specified Region(s) for."},"accountsUrl":{"type":"string","description":"Returns the value of the AccountsUrl property."},"organizationalUnitIds":{"type":"array","items":{"type":"string"},"description":"The organization root ID or organizational unit (OU) IDs to which StackSets deploys."}},"type":"object"},"aws-native:cloudformation:StackSetDeploymentTargetsAccountFilterType":{"description":"The filter type you want to apply on organizational units and accounts.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Union","value":"UNION"},{"name":"Intersection","value":"INTERSECTION"},{"name":"Difference","value":"DIFFERENCE"}]},"aws-native:cloudformation:StackSetOperationPreferences":{"description":"The user-specified preferences for how AWS CloudFormation performs a stack set operation.","properties":{"concurrencyMode":{"$ref":"#/types/aws-native:cloudformation:StackSetConcurrencyMode","description":"Specifies how the concurrency level behaves during the operation execution.\n\n- `STRICT_FAILURE_TOLERANCE` : This option dynamically lowers the concurrency level to ensure the number of failed accounts never exceeds the value of `FailureToleranceCount` +1. The initial actual concurrency is set to the lower of either the value of the `MaxConcurrentCount` , or the value of `FailureToleranceCount` +1. The actual concurrency is then reduced proportionally by the number of failures. This is the default behavior.\n\nIf failure tolerance or Maximum concurrent accounts are set to percentages, the behavior is similar.\n- `SOFT_FAILURE_TOLERANCE` : This option decouples `FailureToleranceCount` from the actual concurrency. This allows StackSet operations to run at the concurrency level set by the `MaxConcurrentCount` value, or `MaxConcurrentPercentage` , regardless of the number of failures."},"failureToleranceCount":{"type":"integer","description":"The number of accounts per Region this operation can fail in before CloudFormation stops the operation in that Region. If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions.\n\nConditional: You must specify either `FailureToleranceCount` or `FailureTolerancePercentage` (but not both)."},"failureTolerancePercentage":{"type":"integer","description":"The percentage of accounts per Region this stack operation can fail in before CloudFormation stops the operation in that Region. If the operation is stopped in a Region, CloudFormation doesn't attempt the operation in any subsequent Regions.\n\nWhen calculating the number of accounts based on the specified percentage, CloudFormation rounds *down* to the next whole number.\n\nConditional: You must specify either `FailureToleranceCount` or `FailureTolerancePercentage` , but not both."},"maxConcurrentCount":{"type":"integer","description":"The maximum number of accounts in which to perform this operation at one time. This is dependent on the value of `FailureToleranceCount` . `MaxConcurrentCount` is at most one more than the `FailureToleranceCount` .\n\nNote that this setting lets you specify the *maximum* for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.\n\nConditional: You must specify either `MaxConcurrentCount` or `MaxConcurrentPercentage` , but not both."},"maxConcurrentPercentage":{"type":"integer","description":"The maximum percentage of accounts in which to perform this operation at one time.\n\nWhen calculating the number of accounts based on the specified percentage, CloudFormation rounds down to the next whole number. This is true except in cases where rounding down would result is zero. In this case, CloudFormation sets the number as one instead.\n\nNote that this setting lets you specify the *maximum* for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.\n\nConditional: You must specify either `MaxConcurrentCount` or `MaxConcurrentPercentage` , but not both."},"regionConcurrencyType":{"$ref":"#/types/aws-native:cloudformation:StackSetRegionConcurrencyType","description":"The concurrency type of deploying StackSets operations in Regions, could be in parallel or one Region at a time."},"regionOrder":{"type":"array","items":{"type":"string"},"description":"The order of the Regions where you want to perform the stack operation."}},"type":"object"},"aws-native:cloudformation:StackSetParameter":{"properties":{"parameterKey":{"type":"string","description":"The key associated with the parameter. If you don't specify a key and value for a particular parameter, AWS CloudFormation uses the default value that is specified in your template."},"parameterValue":{"type":"string","description":"The input value associated with the parameter."}},"type":"object","required":["parameterKey","parameterValue"]},"aws-native:cloudformation:StackSetPermissionModel":{"description":"Describes how the IAM roles required for stack set operations are created. By default, SELF-MANAGED is specified.","type":"string","enum":[{"name":"ServiceManaged","value":"SERVICE_MANAGED"},{"name":"SelfManaged","value":"SELF_MANAGED"}]},"aws-native:cloudformation:StackSetRegionConcurrencyType":{"description":"The concurrency type of deploying StackSets operations in regions, could be in parallel or one region at a time","type":"string","enum":[{"name":"Sequential","value":"SEQUENTIAL"},{"name":"Parallel","value":"PARALLEL"}]},"aws-native:cloudformation:StackSetStackInstances":{"description":"Stack instances in some specific accounts and Regions.","properties":{"deploymentTargets":{"$ref":"#/types/aws-native:cloudformation:StackSetDeploymentTargets","description":"The AWS Organizations accounts or AWS accounts to deploy stacks to in the specified Regions."},"parameterOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetParameter"},"description":"A list of stack set parameters whose values you want to override in the selected stack instances."},"regions":{"type":"array","items":{"type":"string"},"description":"The names of one or more Regions where you want to create stack instances using the specified AWS account(s)."}},"type":"object","required":["deploymentTargets","regions"]},"aws-native:cloudformation:StackSetTag":{"description":"Tag type enables you to specify a key-value pair that can be used to store information about an AWS CloudFormation StackSet.","properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 127 characters for a tag key."},"value":{"type":"string","description":"A string containing the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:cloudformation:StackStatus":{"description":"Returns a success or failure message associated with the stack status.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"CreateComplete","value":"CREATE_COMPLETE"},{"name":"RollbackInProgress","value":"ROLLBACK_IN_PROGRESS"},{"name":"RollbackFailed","value":"ROLLBACK_FAILED"},{"name":"RollbackComplete","value":"ROLLBACK_COMPLETE"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"DeleteComplete","value":"DELETE_COMPLETE"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateCompleteCleanupInProgress","value":"UPDATE_COMPLETE_CLEANUP_IN_PROGRESS"},{"name":"UpdateComplete","value":"UPDATE_COMPLETE"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"UpdateRollbackInProgress","value":"UPDATE_ROLLBACK_IN_PROGRESS"},{"name":"UpdateRollbackFailed","value":"UPDATE_ROLLBACK_FAILED"},{"name":"UpdateRollbackCompleteCleanupInProgress","value":"UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESS"},{"name":"UpdateRollbackComplete","value":"UPDATE_ROLLBACK_COMPLETE"},{"name":"ReviewInProgress","value":"REVIEW_IN_PROGRESS"},{"name":"ImportInProgress","value":"IMPORT_IN_PROGRESS"},{"name":"ImportComplete","value":"IMPORT_COMPLETE"},{"name":"ImportRollbackInProgress","value":"IMPORT_ROLLBACK_IN_PROGRESS"},{"name":"ImportRollbackFailed","value":"IMPORT_ROLLBACK_FAILED"},{"name":"ImportRollbackComplete","value":"IMPORT_ROLLBACK_COMPLETE"}]},"aws-native:cloudformation:StackTag":{"properties":{"key":{"type":"string","description":"A string used to identify this tag. You can specify a maximum of 128 characters for a tag key. Tags owned by AWS have the reserved prefix: `aws:` ."},"value":{"type":"string","description":"A string that contains the value for this tag. You can specify a maximum of 256 characters for a tag value."}},"type":"object","required":["key","value"]},"aws-native:cloudformation:TargetFilters0Properties":{"description":"Attribute to specify which targets should invoke the hook","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:LambdaHookAction"},"description":"List of actions that the hook is going to target"},"invocationPoints":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:LambdaHookInvocationPoint"},"description":"List of invocation points that the hook is going to target"},"targetNames":{"type":"array","items":{"type":"string"},"description":"List of type names that the hook is going to target"}},"type":"object"},"aws-native:cloudformation:TargetFilters1Properties":{"description":"Attribute to specify which targets should invoke the hook","properties":{"targets":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:LambdaHookHookTarget"},"description":"List of hook targets"}},"type":"object","required":["targets"]},"aws-native:cloudformation:TypeActivationLoggingConfig":{"properties":{"logGroupName":{"type":"string","description":"The Amazon CloudWatch log group to which CloudFormation sends error logging information when invoking the type's handlers."},"logRoleArn":{"type":"string","description":"The ARN of the role that CloudFormation should assume when sending log entries to CloudWatch logs."}},"type":"object"},"aws-native:cloudformation:TypeActivationType":{"description":"The kind of extension","type":"string","enum":[{"name":"Resource","value":"RESOURCE"},{"name":"Module","value":"MODULE"},{"name":"Hook","value":"HOOK"}]},"aws-native:cloudformation:TypeActivationVersionBump":{"description":"Manually updates a previously-enabled type to a new major or minor version, if available. You can also use this parameter to update the value of AutoUpdateEnabled","type":"string","enum":[{"name":"Major","value":"MAJOR"},{"name":"Minor","value":"MINOR"}]},"aws-native:cloudfront:CachePolicyConfig":{"description":"A cache policy configuration.\n This configuration determines the following:\n  +  The values that CloudFront includes in the cache key. These values can include HTTP headers, cookies, and URL query strings. CloudFront uses the cache key to find an object in its cache that it can return to the viewer.\n  +  The default, minimum, and maximum time to live (TTL) values that you want objects to stay in the CloudFront cache.\n  If your minimum TTL is greater than 0, CloudFront will cache content for at least the duration specified in the cache policy's minimum TTL, even if the ``Cache-Control: no-cache``, ``no-store``, or ``private`` directives are present in the origin headers.\n   \n The headers, cookies, and query strings that are included in the cache key are also included in requests that CloudFront sends to the origin. CloudFront sends a request when it can't find a valid object in its cache that matches the request's cache key. If you want to send values to the origin but *not* include them in the cache key, use ``OriginRequestPolicy``.","properties":{"comment":{"type":"string","description":"A comment to describe the cache policy. The comment cannot be longer than 128 characters."},"defaultTtl":{"type":"number","description":"The default amount of time, in seconds, that you want objects to stay in the CloudFront cache before CloudFront sends another request to the origin to see if the object has been updated. CloudFront uses this value as the object's time to live (TTL) only when the origin does *not* send ``Cache-Control`` or ``Expires`` headers with the object. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*.\n The default value for this field is 86400 seconds (one day). If the value of ``MinTTL`` is more than 86400 seconds, then the default value for this field is the same as the value of ``MinTTL``."},"maxTtl":{"type":"number","description":"The maximum amount of time, in seconds, that objects stay in the CloudFront cache before CloudFront sends another request to the origin to see if the object has been updated. CloudFront uses this value only when the origin sends ``Cache-Control`` or ``Expires`` headers with the object. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*.\n The default value for this field is 31536000 seconds (one year). If the value of ``MinTTL`` or ``DefaultTTL`` is more than 31536000 seconds, then the default value for this field is the same as the value of ``DefaultTTL``."},"minTtl":{"type":"number","description":"The minimum amount of time, in seconds, that you want objects to stay in the CloudFront cache before CloudFront sends another request to the origin to see if the object has been updated. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."},"name":{"type":"string","description":"A unique name to identify the cache policy."},"parametersInCacheKeyAndForwardedToOrigin":{"$ref":"#/types/aws-native:cloudfront:CachePolicyParametersInCacheKeyAndForwardedToOrigin","description":"The HTTP headers, cookies, and URL query strings to include in the cache key. The values included in the cache key are also included in requests that CloudFront sends to the origin."}},"type":"object","required":["defaultTtl","maxTtl","minTtl","name","parametersInCacheKeyAndForwardedToOrigin"]},"aws-native:cloudfront:CachePolicyCookiesConfig":{"description":"An object that determines whether any cookies in viewer requests (and if so, which cookies) are included in the cache key and in requests that CloudFront sends to the origin.","properties":{"cookieBehavior":{"type":"string","description":"Determines whether any cookies in viewer requests are included in the cache key and in requests that CloudFront sends to the origin. Valid values are:\n  +  ``none`` – No cookies in viewer requests are included in the cache key or in requests that CloudFront sends to the origin. Even when this field is set to ``none``, any cookies that are listed in an ``OriginRequestPolicy``*are* included in origin requests.\n  +  ``whitelist`` – Only the cookies in viewer requests that are listed in the ``CookieNames`` type are included in the cache key and in requests that CloudFront sends to the origin.\n  +  ``allExcept`` – All cookies in viewer requests are included in the cache key and in requests that CloudFront sends to the origin, *except* for those that are listed in the ``CookieNames`` type, which are not included.\n  +  ``all`` – All cookies in viewer requests are included in the cache key and in requests that CloudFront sends to the origin."},"cookies":{"type":"array","items":{"type":"string"},"description":"Contains a list of cookie names."}},"type":"object","required":["cookieBehavior"]},"aws-native:cloudfront:CachePolicyHeadersConfig":{"description":"An object that determines whether any HTTP headers (and if so, which headers) are included in the cache key and in requests that CloudFront sends to the origin.","properties":{"headerBehavior":{"type":"string","description":"Determines whether any HTTP headers are included in the cache key and in requests that CloudFront sends to the origin. Valid values are:\n  +  ``none`` – No HTTP headers are included in the cache key or in requests that CloudFront sends to the origin. Even when this field is set to ``none``, any headers that are listed in an ``OriginRequestPolicy``*are* included in origin requests.\n  +  ``whitelist`` – Only the HTTP headers that are listed in the ``Headers`` type are included in the cache key and in requests that CloudFront sends to the origin."},"headers":{"type":"array","items":{"type":"string"},"description":"Contains a list of HTTP header names."}},"type":"object","required":["headerBehavior"]},"aws-native:cloudfront:CachePolicyParametersInCacheKeyAndForwardedToOrigin":{"description":"This object determines the values that CloudFront includes in the cache key. These values can include HTTP headers, cookies, and URL query strings. CloudFront uses the cache key to find an object in its cache that it can return to the viewer.\n The headers, cookies, and query strings that are included in the cache key are also included in requests that CloudFront sends to the origin. CloudFront sends a request when it can't find an object in its cache that matches the request's cache key. If you want to send values to the origin but *not* include them in the cache key, use ``OriginRequestPolicy``.","properties":{"cookiesConfig":{"$ref":"#/types/aws-native:cloudfront:CachePolicyCookiesConfig","description":"An object that determines whether any cookies in viewer requests (and if so, which cookies) are included in the cache key and in requests that CloudFront sends to the origin."},"enableAcceptEncodingBrotli":{"type":"boolean","description":"A flag that can affect whether the ``Accept-Encoding`` HTTP header is included in the cache key and included in requests that CloudFront sends to the origin.\n This field is related to the ``EnableAcceptEncodingGzip`` field. If one or both of these fields is ``true``*and* the viewer request includes the ``Accept-Encoding`` header, then CloudFront does the following:\n  +  Normalizes the value of the viewer's ``Accept-Encoding`` header\n  +  Includes the normalized header in the cache key\n  +  Includes the normalized header in the request to the origin, if a request is necessary\n  \n For more information, see [Compression support](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-policy-compressed-objects) in the *Amazon CloudFront Developer Guide*.\n If you set this value to ``true``, and this cache behavior also has an origin request policy attached, do not include the ``Accept-Encoding`` header in the origin request policy. CloudFront always includes the ``Accept-Encoding`` header in origin requests when the value of this field is ``true``, so including this header in an origin request policy has no effect.\n If both of these fields are ``false``, then CloudFront treats the ``Accept-Encoding`` header the same as any other HTTP header in the viewer request. By default, it's not included in the cache key and it's not included in origin requests. In this case, you can manually add ``Accept-Encoding`` to the headers whitelist like any other HTTP header."},"enableAcceptEncodingGzip":{"type":"boolean","description":"A flag that can affect whether the ``Accept-Encoding`` HTTP header is included in the cache key and included in requests that CloudFront sends to the origin.\n This field is related to the ``EnableAcceptEncodingBrotli`` field. If one or both of these fields is ``true``*and* the viewer request includes the ``Accept-Encoding`` header, then CloudFront does the following:\n  +  Normalizes the value of the viewer's ``Accept-Encoding`` header\n  +  Includes the normalized header in the cache key\n  +  Includes the normalized header in the request to the origin, if a request is necessary\n  \n For more information, see [Compression support](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-policy-compressed-objects) in the *Amazon CloudFront Developer Guide*.\n If you set this value to ``true``, and this cache behavior also has an origin request policy attached, do not include the ``Accept-Encoding`` header in the origin request policy. CloudFront always includes the ``Accept-Encoding`` header in origin requests when the value of this field is ``true``, so including this header in an origin request policy has no effect.\n If both of these fields are ``false``, then CloudFront treats the ``Accept-Encoding`` header the same as any other HTTP header in the viewer request. By default, it's not included in the cache key and it's not included in origin requests. In this case, you can manually add ``Accept-Encoding`` to the headers whitelist like any other HTTP header."},"headersConfig":{"$ref":"#/types/aws-native:cloudfront:CachePolicyHeadersConfig","description":"An object that determines whether any HTTP headers (and if so, which headers) are included in the cache key and in requests that CloudFront sends to the origin."},"queryStringsConfig":{"$ref":"#/types/aws-native:cloudfront:CachePolicyQueryStringsConfig","description":"An object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and in requests that CloudFront sends to the origin."}},"type":"object","required":["cookiesConfig","enableAcceptEncodingGzip","headersConfig","queryStringsConfig"]},"aws-native:cloudfront:CachePolicyQueryStringsConfig":{"description":"An object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in the cache key and in requests that CloudFront sends to the origin.","properties":{"queryStringBehavior":{"type":"string","description":"Determines whether any URL query strings in viewer requests are included in the cache key and in requests that CloudFront sends to the origin. Valid values are:\n  +  ``none`` – No query strings in viewer requests are included in the cache key or in requests that CloudFront sends to the origin. Even when this field is set to ``none``, any query strings that are listed in an ``OriginRequestPolicy``*are* included in origin requests.\n  +  ``whitelist`` – Only the query strings in viewer requests that are listed in the ``QueryStringNames`` type are included in the cache key and in requests that CloudFront sends to the origin.\n  +  ``allExcept`` – All query strings in viewer requests are included in the cache key and in requests that CloudFront sends to the origin, *except* those that are listed in the ``QueryStringNames`` type, which are not included.\n  +  ``all`` – All query strings in viewer requests are included in the cache key and in requests that CloudFront sends to the origin."},"queryStrings":{"type":"array","items":{"type":"string"},"description":"Contains a list of query string names."}},"type":"object","required":["queryStringBehavior"]},"aws-native:cloudfront:CloudFrontOriginAccessIdentityConfig":{"description":"Origin access identity configuration. Send a ``GET`` request to the ``/CloudFront API version/CloudFront/identity ID/config`` resource.","properties":{"comment":{"type":"string","description":"A comment to describe the origin access identity. The comment cannot be longer than 128 characters."}},"type":"object","required":["comment"]},"aws-native:cloudfront:ConnectionFunctionConfig":{"description":"Contains configuration information about a CloudFront function.","properties":{"comment":{"type":"string","description":"A comment to describe the function."},"keyValueStoreAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionKeyValueStoreAssociation"},"description":"The configuration for the key value store associations."},"runtime":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionConfigRuntime","description":"The function's runtime environment version.","replaceOnChanges":true}},"type":"object","required":["comment","runtime"]},"aws-native:cloudfront:ConnectionFunctionConfigRuntime":{"description":"The function's runtime environment version.","type":"string","enum":[{"name":"CloudfrontJs20","value":"cloudfront-js-2.0"}]},"aws-native:cloudfront:ConnectionFunctionKeyValueStoreAssociation":{"description":"The key value store association.","properties":{"keyValueStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the key value store association."}},"type":"object","required":["keyValueStoreArn"]},"aws-native:cloudfront:ConnectionFunctionStage":{"description":"The connection function stage.","type":"string","enum":[{"name":"Development","value":"DEVELOPMENT"},{"name":"Live","value":"LIVE"}]},"aws-native:cloudfront:ConnectionFunctionStatus":{"description":"The connection function status.","type":"string","enum":[{"name":"Unpublished","value":"UNPUBLISHED"},{"name":"Deployed","value":"DEPLOYED"},{"name":"Unassociated","value":"UNASSOCIATED"},{"name":"Publishing","value":"PUBLISHING"},{"name":"InProgress","value":"IN_PROGRESS"}]},"aws-native:cloudfront:ConnectionFunctionTag":{"description":"A complex type that contains ``Tag`` key and ``Tag`` value.","properties":{"key":{"type":"string","description":"A string that contains ``Tag`` key.\n The string length should be between 1 and 128 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."},"value":{"type":"string","description":"A string that contains an optional ``Tag`` value.\n The string length should be between 0 and 256 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."}},"type":"object","required":["key","value"]},"aws-native:cloudfront:ConnectionGroupTag":{"description":"A complex type that contains ``Tag`` key and ``Tag`` value.","properties":{"key":{"type":"string","description":"A string that contains ``Tag`` key.\n The string length should be between 1 and 128 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."},"value":{"type":"string","description":"A string that contains an optional ``Tag`` value.\n The string length should be between 0 and 256 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."}},"type":"object","required":["key","value"]},"aws-native:cloudfront:ContinuousDeploymentPolicyConfig":{"description":"Contains the configuration for a continuous deployment policy.","properties":{"enabled":{"type":"boolean","description":"A Boolean that indicates whether this continuous deployment policy is enabled (in effect). When this value is ``true``, this policy is enabled and in effect. When this value is ``false``, this policy is not enabled and has no effect."},"singleHeaderPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyConfigSingleHeaderPolicyConfigProperties","description":"This configuration determines which HTTP requests are sent to the staging distribution. If the HTTP request contains a header and value that matches what you specify here, the request is sent to the staging distribution. Otherwise the request is sent to the primary distribution."},"singleWeightPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyConfigSingleWeightPolicyConfigProperties","description":"This configuration determines the percentage of HTTP requests that are sent to the staging distribution."},"stagingDistributionDnsNames":{"type":"array","items":{"type":"string"},"description":"The CloudFront domain name of the staging distribution. For example: ``d111111abcdef8.cloudfront.net``."},"trafficConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyTrafficConfig","description":"Contains the parameters for routing production traffic from your primary to staging distributions."},"type":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyConfigType","description":"The type of traffic configuration."}},"type":"object","required":["enabled","stagingDistributionDnsNames"]},"aws-native:cloudfront:ContinuousDeploymentPolicyConfigSingleHeaderPolicyConfigProperties":{"description":"This configuration determines which HTTP requests are sent to the staging distribution. If the HTTP request contains a header and value that matches what you specify here, the request is sent to the staging distribution. Otherwise the request is sent to the primary distribution.","properties":{"header":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["header","value"]},"aws-native:cloudfront:ContinuousDeploymentPolicyConfigSingleWeightPolicyConfigProperties":{"description":"This configuration determines the percentage of HTTP requests that are sent to the staging distribution.","properties":{"sessionStickinessConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicySessionStickinessConfig"},"weight":{"type":"number"}},"type":"object","required":["weight"]},"aws-native:cloudfront:ContinuousDeploymentPolicyConfigType":{"description":"The type of traffic configuration.","type":"string","enum":[{"name":"SingleWeight","value":"SingleWeight"},{"name":"SingleHeader","value":"SingleHeader"}]},"aws-native:cloudfront:ContinuousDeploymentPolicySessionStickinessConfig":{"description":"Session stickiness provides the ability to define multiple requests from a single viewer as a single session. This prevents the potentially inconsistent experience of sending some of a given user's requests to your staging distribution, while others are sent to your primary distribution. Define the session duration using TTL values.","properties":{"idleTtl":{"type":"integer","description":"The amount of time after which you want sessions to cease if no requests are received. Allowed values are 300–3600 seconds (5–60 minutes)."},"maximumTtl":{"type":"integer","description":"The maximum amount of time to consider requests from the viewer as being part of the same session. Allowed values are 300–3600 seconds (5–60 minutes)."}},"type":"object","required":["idleTtl","maximumTtl"]},"aws-native:cloudfront:ContinuousDeploymentPolicySingleHeaderConfig":{"description":"Determines which HTTP requests are sent to the staging distribution.","properties":{"header":{"type":"string","description":"The request header name that you want CloudFront to send to your staging distribution. The header must contain the prefix ``aws-cf-cd-``."},"value":{"type":"string","description":"The request header value."}},"type":"object","required":["header","value"]},"aws-native:cloudfront:ContinuousDeploymentPolicySingleWeightConfig":{"description":"This configuration determines the percentage of HTTP requests that are sent to the staging distribution.","properties":{"sessionStickinessConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicySessionStickinessConfig","description":"Session stickiness provides the ability to define multiple requests from a single viewer as a single session. This prevents the potentially inconsistent experience of sending some of a given user's requests to your staging distribution, while others are sent to your primary distribution. Define the session duration using TTL values."},"weight":{"type":"number","description":"The percentage of traffic to send to a staging distribution, expressed as a decimal number between 0 and 0.15. For example, a value of 0.10 means 10% of traffic is sent to the staging distribution."}},"type":"object","required":["weight"]},"aws-native:cloudfront:ContinuousDeploymentPolicyTrafficConfig":{"description":"The traffic configuration of your continuous deployment.","properties":{"singleHeaderConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicySingleHeaderConfig","description":"Determines which HTTP requests are sent to the staging distribution."},"singleWeightConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicySingleWeightConfig","description":"Contains the percentage of traffic to send to the staging distribution."},"type":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyTrafficConfigType","description":"The type of traffic configuration."}},"type":"object","required":["type"]},"aws-native:cloudfront:ContinuousDeploymentPolicyTrafficConfigType":{"description":"The type of traffic configuration.","type":"string","enum":[{"name":"SingleWeight","value":"SingleWeight"},{"name":"SingleHeader","value":"SingleHeader"}]},"aws-native:cloudfront:DistributionCacheBehavior":{"description":"A complex type that describes how CloudFront processes requests.\n You must create at least as many cache behaviors (including the default cache behavior) as you have origins if you want CloudFront to serve objects from all of the origins. Each cache behavior specifies the one origin from which you want CloudFront to get objects. If you have two origins and only the default cache behavior, the default cache behavior will cause CloudFront to get objects from one of the origins, but the other origin is never used.\n For the current quota (formerly known as limit) on the number of cache behaviors that you can add to a distribution, see [Quotas](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.html) in the *Amazon CloudFront Developer Guide*.\n If you don't want to specify any cache behaviors, include only an empty ``CacheBehaviors`` element. Don't specify an empty individual ``CacheBehavior`` element, because this is invalid. For more information, see [CacheBehaviors](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_CacheBehaviors.html). \n To delete all cache behaviors in an existing distribution, update the distribution configuration and include only an empty ``CacheBehaviors`` element.\n To add, change, or remove one or more cache behaviors, update the distribution configuration and specify all of the cache behaviors that you want to include in the updated distribution.\n  If your minimum TTL is greater than 0, CloudFront will cache content for at least the duration specified in the cache policy's minimum TTL, even if the ``Cache-Control: no-cache``, ``no-store``, or ``private`` directives are present in the origin headers.\n  For more information about cache behaviors, see [Cache Behavior Settings](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesCacheBehavior) in the *Amazon CloudFront Developer Guide*.","properties":{"allowedMethods":{"type":"array","items":{"type":"string"},"description":"A complex type that controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin. There are three choices:\n  +  CloudFront forwards only ``GET`` and ``HEAD`` requests.\n  +  CloudFront forwards only ``GET``, ``HEAD``, and ``OPTIONS`` requests.\n  +  CloudFront forwards ``GET, HEAD, OPTIONS, PUT, PATCH, POST``, and ``DELETE`` requests.\n  \n If you pick the third choice, you may need to restrict access to your Amazon S3 bucket or to your custom origin so users can't perform operations that you don't want them to. For example, you might not want users to have permissions to delete objects from your origin."},"cachePolicyId":{"type":"string","description":"The unique identifier of the cache policy that is attached to this cache behavior. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n A ``CacheBehavior`` must include either a ``CachePolicyId`` or ``ForwardedValues``. We recommend that you use a ``CachePolicyId``."},"cachedMethods":{"type":"array","items":{"type":"string"},"description":"A complex type that controls whether CloudFront caches the response to requests using the specified HTTP methods. There are two choices:\n  +  CloudFront caches responses to ``GET`` and ``HEAD`` requests.\n  +  CloudFront caches responses to ``GET``, ``HEAD``, and ``OPTIONS`` requests.\n  \n If you pick the second choice for your Amazon S3 Origin, you may need to forward Access-Control-Request-Method, Access-Control-Request-Headers, and Origin headers for the responses to be cached correctly."},"compress":{"type":"boolean","description":"Whether you want CloudFront to automatically compress certain files for this cache behavior. If so, specify true; if not, specify false. For more information, see [Serving Compressed Files](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/ServingCompressedFiles.html) in the *Amazon CloudFront Developer Guide*."},"defaultTtl":{"type":"number","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use the ``DefaultTTL`` field in a cache policy instead of this field. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n The default amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. The value that you specify applies only when your origin does not add HTTP headers such as ``Cache-Control max-age``, ``Cache-Control s-maxage``, and ``Expires`` to objects. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."},"fieldLevelEncryptionId":{"type":"string","description":"The value of ``ID`` for the field-level encryption configuration that you want CloudFront to use for encrypting specific fields of data for this cache behavior."},"forwardedValues":{"$ref":"#/types/aws-native:cloudfront:DistributionForwardedValues","description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field. For more information, see [Working with policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/working-with-policies.html) in the *Amazon CloudFront Developer Guide*.\n If you want to include values in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n If you want to send values to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) or [Using the managed origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html) in the *Amazon CloudFront Developer Guide*.\n A ``CacheBehavior`` must include either a ``CachePolicyId`` or ``ForwardedValues``. We recommend that you use a ``CachePolicyId``.\n A complex type that specifies how CloudFront handles query strings, cookies, and HTTP headers."},"functionAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionFunctionAssociation"},"description":"A list of CloudFront functions that are associated with this cache behavior. CloudFront functions must be published to the ``LIVE`` stage to associate them with a cache behavior."},"grpcConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionGrpcConfig","description":"The gRPC configuration for your cache behavior."},"lambdaFunctionAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionLambdaFunctionAssociation"},"description":"A complex type that contains zero or more Lambda@Edge function associations for a cache behavior."},"maxTtl":{"type":"number","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use the ``MaxTTL`` field in a cache policy instead of this field. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n The maximum amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. The value that you specify applies only when your origin adds HTTP headers such as ``Cache-Control max-age``, ``Cache-Control s-maxage``, and ``Expires`` to objects. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."},"minTtl":{"type":"number","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use the ``MinTTL`` field in a cache policy instead of this field. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n The minimum amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*.\n You must specify ``0`` for ``MinTTL`` if you configure CloudFront to forward all headers to your origin (under ``Headers``, if you specify ``1`` for ``Quantity`` and ``*`` for ``Name``)."},"originRequestPolicyId":{"type":"string","description":"The unique identifier of the origin request policy that is attached to this cache behavior. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) or [Using the managed origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html) in the *Amazon CloudFront Developer Guide*."},"pathPattern":{"type":"string","description":"The pattern (for example, ``images/*.jpg``) that specifies which requests to apply the behavior to. When CloudFront receives a viewer request, the requested path is compared with path patterns in the order in which cache behaviors are listed in the distribution.\n  You can optionally include a slash (``/``) at the beginning of the path pattern. For example, ``/images/*.jpg``. CloudFront behavior is the same with or without the leading ``/``.\n  The path pattern for the default cache behavior is ``*`` and cannot be changed. If the request for an object does not match the path pattern for any cache behaviors, CloudFront applies the behavior in the default cache behavior.\n For more information, see [Path Pattern](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesPathPattern) in the *Amazon CloudFront Developer Guide*."},"realtimeLogConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the real-time log configuration that is attached to this cache behavior. For more information, see [Real-time logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html) in the *Amazon CloudFront Developer Guide*."},"responseHeadersPolicyId":{"type":"string","description":"The identifier for a response headers policy."},"smoothStreaming":{"type":"boolean","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  Indicates whether you want to distribute media files in the Microsoft Smooth Streaming format using the origin that is associated with this cache behavior. If so, specify ``true``; if not, specify ``false``. If you specify ``true`` for ``SmoothStreaming``, you can still distribute other content using this cache behavior if the content matches the value of ``PathPattern``."},"targetOriginId":{"type":"string","description":"The value of ``ID`` for the origin that you want CloudFront to route requests to when they match this cache behavior."},"trustedKeyGroups":{"type":"array","items":{"type":"string"},"description":"A list of key groups that CloudFront can use to validate signed URLs or signed cookies.\n When a cache behavior contains trusted key groups, CloudFront requires signed URLs or signed cookies for all requests that match the cache behavior. The URLs or cookies must be signed with a private key whose corresponding public key is in the key group. The signed URL or cookie contains information about which public key CloudFront should use to verify the signature. For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*."},"trustedSigners":{"type":"array","items":{"type":"string"},"description":"We recommend using ``TrustedKeyGroups`` instead of ``TrustedSigners``.\n   This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  A list of AWS-account IDs whose public keys CloudFront can use to validate signed URLs or signed cookies.\n When a cache behavior contains trusted signers, CloudFront requires signed URLs or signed cookies for all requests that match the cache behavior. The URLs or cookies must be signed with the private key of a CloudFront key pair in the trusted signer's AWS-account. The signed URL or cookie contains information about which public key CloudFront should use to verify the signature. For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*."},"viewerProtocolPolicy":{"type":"string","description":"The protocol that viewers can use to access the files in the origin specified by ``TargetOriginId`` when a request matches the path pattern in ``PathPattern``. You can specify the following options:\n  +  ``allow-all``: Viewers can use HTTP or HTTPS.\n  +  ``redirect-to-https``: If a viewer submits an HTTP request, CloudFront returns an HTTP status code of 301 (Moved Permanently) to the viewer along with the HTTPS URL. The viewer then resubmits the request using the new URL.\n  +  ``https-only``: If a viewer sends an HTTP request, CloudFront returns an HTTP status code of 403 (Forbidden).\n  \n For more information about requiring the HTTPS protocol, see [Requiring HTTPS Between Viewers and CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-viewers-to-cloudfront.html) in the *Amazon CloudFront Developer Guide*.\n  The only way to guarantee that viewers retrieve an object that was fetched from the origin using HTTPS is never to use any other protocol to fetch the object. If you have recently changed from HTTP to HTTPS, we recommend that you clear your objects' cache because cached objects are protocol agnostic. That means that an edge location will return an object from the cache regardless of whether the current request protocol matches the protocol used previously. For more information, see [Managing Cache Expiration](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."}},"type":"object","required":["pathPattern","targetOriginId","viewerProtocolPolicy"]},"aws-native:cloudfront:DistributionConfig":{"description":"A distribution configuration.","properties":{"aliases":{"type":"array","items":{"type":"string"},"description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  A complex type that contains information about CNAMEs (alternate domain names), if any, for this distribution."},"anycastIpListId":{"type":"string","description":"To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html).\n  ID of the Anycast static IP list that is associated with the distribution."},"cacheBehaviors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionCacheBehavior"},"description":"A complex type that contains zero or more ``CacheBehavior`` elements."},"cnames":{"type":"array","items":{"type":"string"},"description":"An alias for the CF distribution's domain name.\n  This property is legacy. We recommend that you use [Aliases](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-aliases) instead."},"comment":{"type":"string","description":"A comment to describe the distribution. The comment cannot be longer than 128 characters."},"connectionFunctionAssociation":{"$ref":"#/types/aws-native:cloudfront:DistributionConnectionFunctionAssociation","description":"The distribution's connection function association."},"connectionMode":{"$ref":"#/types/aws-native:cloudfront:DistributionConnectionMode","description":"This field specifies whether the connection mode is through a standard distribution (direct) or a multi-tenant distribution with distribution tenants (tenant-only)."},"continuousDeploymentPolicyId":{"type":"string","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  The identifier of a continuous deployment policy. For more information, see ``CreateContinuousDeploymentPolicy``."},"customErrorResponses":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionCustomErrorResponse"},"description":"A complex type that controls the following:\n  +  Whether CloudFront replaces HTTP status codes in the 4xx and 5xx range with custom error messages before returning the response to the viewer.\n  +  How long CloudFront caches HTTP status codes in the 4xx and 5xx range.\n  \n For more information about custom error pages, see [Customizing Error Responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/custom-error-pages.html) in the *Amazon CloudFront Developer Guide*."},"customOrigin":{"$ref":"#/types/aws-native:cloudfront:DistributionLegacyCustomOrigin","description":"The user-defined HTTP server that serves as the origin for content that CF distributes.\n  This property is legacy. We recommend that you use [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) instead."},"defaultCacheBehavior":{"$ref":"#/types/aws-native:cloudfront:DistributionDefaultCacheBehavior","description":"A complex type that describes the default cache behavior if you don't specify a ``CacheBehavior`` element or if files don't match any of the values of ``PathPattern`` in ``CacheBehavior`` elements. You must create exactly one default cache behavior."},"defaultRootObject":{"type":"string","description":"When a viewer requests the root URL for your distribution, the default root object is the object that you want CloudFront to request from your origin. For example, if your root URL is ``https://www.example.com``, you can specify CloudFront to return the ``index.html`` file as the default root object. You can specify a default root object so that viewers see a specific file or object, instead of another object in your distribution (for example, ``https://www.example.com/product-description.html``). A default root object avoids exposing the contents of your distribution.\n You can specify the object name or a path to the object name (for example, ``index.html`` or ``exampleFolderName/index.html``). Your string can't begin with a forward slash (``/``). Only specify the object name or the path to the object.\n If you don't want to specify a default root object when you create a distribution, include an empty ``DefaultRootObject`` element.\n To delete the default root object from an existing distribution, update the distribution configuration and include an empty ``DefaultRootObject`` element.\n To replace the default root object, update the distribution configuration and specify the new object.\n For more information about the default root object, see [Specify a default root object](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DefaultRootObject.html) in the *Amazon CloudFront Developer Guide*."},"enabled":{"type":"boolean","description":"From this field, you can enable or disable the selected distribution."},"httpVersion":{"type":"string","description":"(Optional) Specify the HTTP version(s) that you want viewers to use to communicate with CF. The default value for new distributions is ``http1.1``.\n For viewers and CF to use HTTP/2, viewers must support TLSv1.2 or later, and must support Server Name Indication (SNI).\n For viewers and CF to use HTTP/3, viewers must support TLSv1.3 and Server Name Indication (SNI). CF supports HTTP/3 connection migration to allow the viewer to switch networks without losing connection. For more information about connection migration, see [Connection Migration](https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc9000.html#name-connection-migration) at RFC 9000. For more information about supported TLSv1.3 ciphers, see [Supported protocols and ciphers between viewers and CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html)."},"ipv6Enabled":{"type":"boolean","description":"To use this field for a multi-tenant distribution, use a connection group instead. For more information, see [ConnectionGroup](https://docs.aws.amazon.com/cloudfront/latest/APIReference/API_ConnectionGroup.html).\n  If you want CloudFront to respond to IPv6 DNS requests with an IPv6 address for your distribution, specify ``true``. If you specify ``false``, CloudFront responds to IPv6 DNS requests with the DNS response code ``NOERROR`` and with no IP addresses. This allows viewers to submit a second request, for an IPv4 address for your distribution.\n In general, you should enable IPv6 if you have users on IPv6 networks who want to access your content. However, if you're using signed URLs or signed cookies to restrict access to your content, and if you're using a custom policy that includes the ``IpAddress`` parameter to restrict the IP addresses that can access your content, don't enable IPv6. If you want to restrict access to some content by IP address and not restrict access to other content (or restrict access but not by IP address), you can create two distributions. For more information, see [Creating a Signed URL Using a Custom Policy](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-creating-signed-url-custom-policy.html) in the *Amazon CloudFront Developer Guide*.\n If you're using an R53AWSIntlong alias resource record set to route traffic to your CloudFront distribution, you need to create a second alias resource record set when both of the following are true:\n  +  You enable IPv6 for the distribution\n  +  You're using alternate domain names in the URLs for your objects\n  \n For more information, see [Routing Traffic to an Amazon CloudFront Web Distribution by Using Your Domain Name](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-cloudfront-distribution.html) in the *Developer Guide*.\n If you created a CNAME resource record set, either with R53AWSIntlong or with another DNS service, you don't need to make any changes. A CNAME record will route traffic to your distribution regardless of the IP address format of the viewer request."},"logging":{"$ref":"#/types/aws-native:cloudfront:DistributionLogging","description":"A complex type that controls whether access logs are written for the distribution.\n For more information about logging, see [Access Logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html) in the *Amazon CloudFront Developer Guide*."},"originGroups":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginGroups","description":"A complex type that contains information about origin groups for this distribution.\n Specify a value for either the ``Origins`` or ``OriginGroups`` property."},"origins":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionOrigin"},"description":"A complex type that contains information about origins for this distribution.\n Specify a value for either the ``Origins`` or ``OriginGroups`` property."},"priceClass":{"type":"string","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  The price class that corresponds with the maximum price that you want to pay for CloudFront service. If you specify ``PriceClass_All``, CloudFront responds to requests for your objects from all CloudFront edge locations.\n If you specify a price class other than ``PriceClass_All``, CloudFront serves your objects from the CloudFront edge location that has the lowest latency among the edge locations in your price class. Viewers who are in or near regions that are excluded from your specified price class may encounter slower performance.\n For more information about price classes, see [Choosing the Price Class for a CloudFront Distribution](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PriceClass.html) in the *Amazon CloudFront Developer Guide*. For information about CloudFront pricing, including how price classes (such as Price Class 100) map to CloudFront regions, see [Amazon CloudFront Pricing](https://docs.aws.amazon.com/cloudfront/pricing/)."},"restrictions":{"$ref":"#/types/aws-native:cloudfront:DistributionRestrictions","description":"A complex type that identifies ways in which you want to restrict distribution of your content."},"s3Origin":{"$ref":"#/types/aws-native:cloudfront:DistributionLegacyS3Origin","description":"The origin as an S3 bucket.\n  This property is legacy. We recommend that you use [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) instead."},"staging":{"type":"boolean","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  A Boolean that indicates whether this is a staging distribution. When this value is ``true``, this is a staging distribution. When this value is ``false``, this is not a staging distribution."},"tenantConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionConfigTenantConfigProperties","description":"This field only supports multi-tenant distributions. You can't specify this field for standard distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  A distribution tenant configuration."},"viewerCertificate":{"$ref":"#/types/aws-native:cloudfront:DistributionViewerCertificate","description":"A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers."},"viewerMtlsConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionViewerMtlsConfig","description":"The distribution's viewer mTLS configuration."},"webAclId":{"type":"string","description":"Multi-tenant distributions only support WAF V2 web ACLs.\n  A unique identifier that specifies the WAF web ACL, if any, to associate with this distribution. To specify a web ACL created using the latest version of WAF, use the ACL ARN, for example ``arn:aws:wafv2:us-east-1:123456789012:global/webacl/ExampleWebACL/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111``. To specify a web ACL created using WAF Classic, use the ACL ID, for example ``a1b2c3d4-5678-90ab-cdef-EXAMPLE11111``.\n WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to CloudFront, and lets you control access to your content. Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, CloudFront responds to requests either with the requested content or with an HTTP 403 status code (Forbidden). You can also configure CloudFront to return a custom error page when a request is blocked. For more information about WAF, see the [Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/what-is-aws-waf.html)."}},"type":"object","required":["defaultCacheBehavior","enabled"]},"aws-native:cloudfront:DistributionConfigTenantConfigProperties":{"description":"This field only supports multi-tenant distributions. You can't specify this field for standard distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  A distribution tenant configuration.","properties":{"parameterDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionParameterDefinition"}}},"type":"object"},"aws-native:cloudfront:DistributionConnectionFunctionAssociation":{"description":"A connection function association.","properties":{"id":{"type":"string","description":"The association's ID."}},"type":"object","required":["id"]},"aws-native:cloudfront:DistributionConnectionMode":{"type":"string","enum":[{"name":"Direct","value":"direct"},{"name":"TenantOnly","value":"tenant-only"}]},"aws-native:cloudfront:DistributionCookies":{"description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include cookies in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send cookies to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n A complex type that specifies whether you want CloudFront to forward cookies to the origin and, if so, which ones. For more information about forwarding cookies to the origin, see [How CloudFront Forwards, Caches, and Logs Cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html) in the *Amazon CloudFront Developer Guide*.","properties":{"forward":{"type":"string","description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include cookies in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send cookies to the origin but not include them in the cache key, use origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n Specifies which cookies to forward to the origin for this cache behavior: all, none, or the list of cookies specified in the ``WhitelistedNames`` complex type.\n Amazon S3 doesn't process cookies. When the cache behavior is forwarding requests to an Amazon S3 origin, specify none for the ``Forward`` element."},"whitelistedNames":{"type":"array","items":{"type":"string"},"description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include cookies in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send cookies to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n Required if you specify ``whitelist`` for the value of ``Forward``. A complex type that specifies how many different cookies you want CloudFront to forward to the origin for this cache behavior and, if you want to forward selected cookies, the names of those cookies.\n If you specify ``all`` or ``none`` for the value of ``Forward``, omit ``WhitelistedNames``. If you change the value of ``Forward`` from ``whitelist`` to ``all`` or ``none`` and you don't delete the ``WhitelistedNames`` element and its child elements, CloudFront deletes them automatically.\n For the current limit on the number of cookie names that you can whitelist for each cache behavior, see [CloudFront Limits](https://docs.aws.amazon.com/general/latest/gr/xrefaws_service_limits.html#limits_cloudfront) in the *General Reference*."}},"type":"object","required":["forward"]},"aws-native:cloudfront:DistributionCustomErrorResponse":{"description":"A complex type that controls:\n  +  Whether CloudFront replaces HTTP status codes in the 4xx and 5xx range with custom error messages before returning the response to the viewer.\n  +  How long CloudFront caches HTTP status codes in the 4xx and 5xx range.\n  \n For more information about custom error pages, see [Customizing Error Responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/custom-error-pages.html) in the *Amazon CloudFront Developer Guide*.","properties":{"errorCachingMinTtl":{"type":"number","description":"The minimum amount of time, in seconds, that you want CloudFront to cache the HTTP status code specified in ``ErrorCode``. When this time period has elapsed, CloudFront queries your origin to see whether the problem that caused the error has been resolved and the requested object is now available.\n For more information, see [Customizing Error Responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/custom-error-pages.html) in the *Amazon CloudFront Developer Guide*."},"errorCode":{"type":"integer","description":"The HTTP status code for which you want to specify a custom error page and/or a caching duration."},"responseCode":{"type":"integer","description":"The HTTP status code that you want CloudFront to return to the viewer along with the custom error page. There are a variety of reasons that you might want CloudFront to return a status code different from the status code that your origin returned to CloudFront, for example:\n  +  Some Internet devices (some firewalls and corporate proxies, for example) intercept HTTP 4xx and 5xx and prevent the response from being returned to the viewer. If you substitute ``200``, the response typically won't be intercepted.\n  +  If you don't care about distinguishing among different client errors or server errors, you can specify ``400`` or ``500`` as the ``ResponseCode`` for all 4xx or 5xx errors.\n  +  You might want to return a ``200`` status code (OK) and static website so your customers don't know that your website is down.\n  \n If you specify a value for ``ResponseCode``, you must also specify a value for ``ResponsePagePath``."},"responsePagePath":{"type":"string","description":"The path to the custom error page that you want CloudFront to return to a viewer when your origin returns the HTTP status code specified by ``ErrorCode``, for example, ``/4xx-errors/403-forbidden.html``. If you want to store your objects and your custom error pages in different locations, your distribution must include a cache behavior for which the following is true:\n  +  The value of ``PathPattern`` matches the path to your custom error messages. For example, suppose you saved custom error pages for 4xx errors in an Amazon S3 bucket in a directory named ``/4xx-errors``. Your distribution must include a cache behavior for which the path pattern routes requests for your custom error pages to that location, for example, ``/4xx-errors/*``.\n  +  The value of ``TargetOriginId`` specifies the value of the ``ID`` element for the origin that contains your custom error pages.\n  \n If you specify a value for ``ResponsePagePath``, you must also specify a value for ``ResponseCode``.\n We recommend that you store custom error pages in an Amazon S3 bucket. If you store custom error pages on an HTTP server and the server starts to return 5xx errors, CloudFront can't get the files that you want to return to viewers because the origin server is unavailable."}},"type":"object","required":["errorCode"]},"aws-native:cloudfront:DistributionCustomOriginConfig":{"description":"A custom origin. A custom origin is any origin that is *not* an Amazon S3 bucket, with one exception. An Amazon S3 bucket that is [configured with static website hosting](https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html)*is* a custom origin.","properties":{"httpPort":{"type":"integer","description":"The HTTP port that CloudFront uses to connect to the origin. Specify the HTTP port that the origin listens on."},"httpsPort":{"type":"integer","description":"The HTTPS port that CloudFront uses to connect to the origin. Specify the HTTPS port that the origin listens on."},"ipAddressType":{"$ref":"#/types/aws-native:cloudfront:DistributionCustomOriginConfigIpAddressType","description":"Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose ``dualstack`` to help optimize reliability."},"originKeepaliveTimeout":{"type":"integer","description":"Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don't specify otherwise) is 5 seconds.\n For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the *Amazon CloudFront Developer Guide*."},"originMtlsConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginMtlsConfig","description":"Configures mutual TLS authentication between CloudFront and your origin server."},"originProtocolPolicy":{"type":"string","description":"Specifies the protocol (HTTP or HTTPS) that CloudFront uses to connect to the origin. Valid values are:\n  +  ``http-only`` – CloudFront always uses HTTP to connect to the origin.\n  +  ``match-viewer`` – CloudFront connects to the origin using the same protocol that the viewer used to connect to CloudFront.\n  +  ``https-only`` – CloudFront always uses HTTPS to connect to the origin."},"originReadTimeout":{"type":"integer","description":"Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the *origin response timeout*. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don't specify otherwise) is 30 seconds.\n For more information, see [Response timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the *Amazon CloudFront Developer Guide*."},"originSslProtocols":{"type":"array","items":{"type":"string"},"description":"Specifies the minimum SSL/TLS protocol that CloudFront uses when connecting to your origin over HTTPS. Valid values include ``SSLv3``, ``TLSv1``, ``TLSv1.1``, and ``TLSv1.2``.\n For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginSSLProtocols) in the *Amazon CloudFront Developer Guide*."}},"type":"object","required":["originProtocolPolicy"]},"aws-native:cloudfront:DistributionCustomOriginConfigIpAddressType":{"description":"Specifies which IP protocol CloudFront uses when connecting to your origin. If your origin uses both IPv4 and IPv6 protocols, you can choose ``dualstack`` to help optimize reliability.","type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"},{"name":"Dualstack","value":"dualstack"}]},"aws-native:cloudfront:DistributionDefaultCacheBehavior":{"description":"A complex type that describes the default cache behavior if you don't specify a ``CacheBehavior`` element or if request URLs don't match any of the values of ``PathPattern`` in ``CacheBehavior`` elements. You must create exactly one default cache behavior.\n  If your minimum TTL is greater than 0, CloudFront will cache content for at least the duration specified in the cache policy's minimum TTL, even if the ``Cache-Control: no-cache``, ``no-store``, or ``private`` directives are present in the origin headers.","properties":{"allowedMethods":{"type":"array","items":{"type":"string"},"description":"A complex type that controls which HTTP methods CloudFront processes and forwards to your Amazon S3 bucket or your custom origin. There are three choices:\n  +  CloudFront forwards only ``GET`` and ``HEAD`` requests.\n  +  CloudFront forwards only ``GET``, ``HEAD``, and ``OPTIONS`` requests.\n  +  CloudFront forwards ``GET, HEAD, OPTIONS, PUT, PATCH, POST``, and ``DELETE`` requests.\n  \n If you pick the third choice, you may need to restrict access to your Amazon S3 bucket or to your custom origin so users can't perform operations that you don't want them to. For example, you might not want users to have permissions to delete objects from your origin."},"cachePolicyId":{"type":"string","description":"The unique identifier of the cache policy that is attached to the default cache behavior. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n A ``DefaultCacheBehavior`` must include either a ``CachePolicyId`` or ``ForwardedValues``. We recommend that you use a ``CachePolicyId``."},"cachedMethods":{"type":"array","items":{"type":"string"},"description":"A complex type that controls whether CloudFront caches the response to requests using the specified HTTP methods. There are two choices:\n  +  CloudFront caches responses to ``GET`` and ``HEAD`` requests.\n  +  CloudFront caches responses to ``GET``, ``HEAD``, and ``OPTIONS`` requests.\n  \n If you pick the second choice for your Amazon S3 Origin, you may need to forward Access-Control-Request-Method, Access-Control-Request-Headers, and Origin headers for the responses to be cached correctly."},"compress":{"type":"boolean","description":"Whether you want CloudFront to automatically compress certain files for this cache behavior. If so, specify ``true``; if not, specify ``false``. For more information, see [Serving Compressed Files](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/ServingCompressedFiles.html) in the *Amazon CloudFront Developer Guide*."},"defaultTtl":{"type":"number","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use the ``DefaultTTL`` field in a cache policy instead of this field. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n The default amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. The value that you specify applies only when your origin does not add HTTP headers such as ``Cache-Control max-age``, ``Cache-Control s-maxage``, and ``Expires`` to objects. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."},"fieldLevelEncryptionId":{"type":"string","description":"The value of ``ID`` for the field-level encryption configuration that you want CloudFront to use for encrypting specific fields of data for the default cache behavior."},"forwardedValues":{"$ref":"#/types/aws-native:cloudfront:DistributionForwardedValues","description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field. For more information, see [Working with policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/working-with-policies.html) in the *Amazon CloudFront Developer Guide*.\n If you want to include values in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n If you want to send values to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) or [Using the managed origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html) in the *Amazon CloudFront Developer Guide*.\n A ``DefaultCacheBehavior`` must include either a ``CachePolicyId`` or ``ForwardedValues``. We recommend that you use a ``CachePolicyId``.\n A complex type that specifies how CloudFront handles query strings, cookies, and HTTP headers."},"functionAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionFunctionAssociation"},"description":"A list of CloudFront functions that are associated with this cache behavior. Your functions must be published to the ``LIVE`` stage to associate them with a cache behavior."},"grpcConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionGrpcConfig","description":"The gRPC configuration for your cache behavior."},"lambdaFunctionAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionLambdaFunctionAssociation"},"description":"A complex type that contains zero or more Lambda@Edge function associations for a cache behavior."},"maxTtl":{"type":"number","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use the ``MaxTTL`` field in a cache policy instead of this field. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n The maximum amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. The value that you specify applies only when your origin adds HTTP headers such as ``Cache-Control max-age``, ``Cache-Control s-maxage``, and ``Expires`` to objects. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."},"minTtl":{"type":"number","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use the ``MinTTL`` field in a cache policy instead of this field. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) or [Using the managed cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-cache-policies.html) in the *Amazon CloudFront Developer Guide*.\n The minimum amount of time that you want objects to stay in CloudFront caches before CloudFront forwards another request to your origin to determine whether the object has been updated. For more information, see [Managing How Long Content Stays in an Edge Cache (Expiration)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*.\n You must specify ``0`` for ``MinTTL`` if you configure CloudFront to forward all headers to your origin (under ``Headers``, if you specify ``1`` for ``Quantity`` and ``*`` for ``Name``)."},"originRequestPolicyId":{"type":"string","description":"The unique identifier of the origin request policy that is attached to the default cache behavior. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) or [Using the managed origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-managed-origin-request-policies.html) in the *Amazon CloudFront Developer Guide*."},"realtimeLogConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the real-time log configuration that is attached to this cache behavior. For more information, see [Real-time logs](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html) in the *Amazon CloudFront Developer Guide*."},"responseHeadersPolicyId":{"type":"string","description":"The identifier for a response headers policy."},"smoothStreaming":{"type":"boolean","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  Indicates whether you want to distribute media files in the Microsoft Smooth Streaming format using the origin that is associated with this cache behavior. If so, specify ``true``; if not, specify ``false``. If you specify ``true`` for ``SmoothStreaming``, you can still distribute other content using this cache behavior if the content matches the value of ``PathPattern``."},"targetOriginId":{"type":"string","description":"The value of ``ID`` for the origin that you want CloudFront to route requests to when they use the default cache behavior."},"trustedKeyGroups":{"type":"array","items":{"type":"string"},"description":"A list of key groups that CloudFront can use to validate signed URLs or signed cookies.\n When a cache behavior contains trusted key groups, CloudFront requires signed URLs or signed cookies for all requests that match the cache behavior. The URLs or cookies must be signed with a private key whose corresponding public key is in the key group. The signed URL or cookie contains information about which public key CloudFront should use to verify the signature. For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*."},"trustedSigners":{"type":"array","items":{"type":"string"},"description":"We recommend using ``TrustedKeyGroups`` instead of ``TrustedSigners``.\n   This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  A list of AWS-account IDs whose public keys CloudFront can use to validate signed URLs or signed cookies.\n When a cache behavior contains trusted signers, CloudFront requires signed URLs or signed cookies for all requests that match the cache behavior. The URLs or cookies must be signed with the private key of a CloudFront key pair in a trusted signer's AWS-account. The signed URL or cookie contains information about which public key CloudFront should use to verify the signature. For more information, see [Serving private content](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*."},"viewerProtocolPolicy":{"type":"string","description":"The protocol that viewers can use to access the files in the origin specified by ``TargetOriginId`` when a request matches the path pattern in ``PathPattern``. You can specify the following options:\n  +  ``allow-all``: Viewers can use HTTP or HTTPS.\n  +  ``redirect-to-https``: If a viewer submits an HTTP request, CloudFront returns an HTTP status code of 301 (Moved Permanently) to the viewer along with the HTTPS URL. The viewer then resubmits the request using the new URL.\n  +  ``https-only``: If a viewer sends an HTTP request, CloudFront returns an HTTP status code of 403 (Forbidden).\n  \n For more information about requiring the HTTPS protocol, see [Requiring HTTPS Between Viewers and CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-viewers-to-cloudfront.html) in the *Amazon CloudFront Developer Guide*.\n  The only way to guarantee that viewers retrieve an object that was fetched from the origin using HTTPS is never to use any other protocol to fetch the object. If you have recently changed from HTTP to HTTPS, we recommend that you clear your objects' cache because cached objects are protocol agnostic. That means that an edge location will return an object from the cache regardless of whether the current request protocol matches the protocol used previously. For more information, see [Managing Cache Expiration](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html) in the *Amazon CloudFront Developer Guide*."}},"type":"object","required":["targetOriginId","viewerProtocolPolicy"]},"aws-native:cloudfront:DistributionForwardedValues":{"description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n  This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include values in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send values to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n A complex type that specifies how CloudFront handles query strings, cookies, and HTTP headers.","properties":{"cookies":{"$ref":"#/types/aws-native:cloudfront:DistributionCookies","description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include cookies in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send cookies to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n A complex type that specifies whether you want CloudFront to forward cookies to the origin and, if so, which ones. For more information about forwarding cookies to the origin, see [How CloudFront Forwards, Caches, and Logs Cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html) in the *Amazon CloudFront Developer Guide*."},"headers":{"type":"array","items":{"type":"string"},"description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include headers in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send headers to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n A complex type that specifies the ``Headers``, if any, that you want CloudFront to forward to the origin for this cache behavior (whitelisted headers). For the headers that you specify, CloudFront also caches separate versions of a specified object that is based on the header values in viewer requests.\n For more information, see [Caching Content Based on Request Headers](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/header-caching.html) in the *Amazon CloudFront Developer Guide*."},"queryString":{"type":"boolean","description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include query strings in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send query strings to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n Indicates whether you want CloudFront to forward query strings to the origin that is associated with this cache behavior and cache based on the query string parameters. CloudFront behavior depends on the value of ``QueryString`` and on the values that you specify for ``QueryStringCacheKeys``, if any:\n If you specify true for ``QueryString`` and you don't specify any values for ``QueryStringCacheKeys``, CloudFront forwards all query string parameters to the origin and caches based on all query string parameters. Depending on how many query string parameters and values you have, this can adversely affect performance because CloudFront must forward more requests to the origin.\n If you specify true for ``QueryString`` and you specify one or more values for ``QueryStringCacheKeys``, CloudFront forwards all query string parameters to the origin, but it only caches based on the query string parameters that you specify.\n If you specify false for ``QueryString``, CloudFront doesn't forward any query string parameters to the origin, and doesn't cache based on query string parameters.\n For more information, see [Configuring CloudFront to Cache Based on Query String Parameters](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/QueryStringParameters.html) in the *Amazon CloudFront Developer Guide*."},"queryStringCacheKeys":{"type":"array","items":{"type":"string"},"description":"This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.\n If you want to include query strings in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.\n If you want to send query strings to the origin but not include them in the cache key, use an origin request policy. For more information, see [Creating origin request policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-origin-requests.html#origin-request-create-origin-request-policy) in the *Amazon CloudFront Developer Guide*.\n A complex type that contains information about the query string parameters that you want CloudFront to use for caching for this cache behavior."}},"type":"object","required":["queryString"]},"aws-native:cloudfront:DistributionFunctionAssociation":{"description":"A CloudFront function that is associated with a cache behavior in a CloudFront distribution.","properties":{"eventType":{"type":"string","description":"The event type of the function, either ``viewer-request`` or ``viewer-response``. You cannot use origin-facing event types (``origin-request`` and ``origin-response``) with a CloudFront function."},"functionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function."}},"type":"object"},"aws-native:cloudfront:DistributionGeoRestriction":{"description":"A complex type that controls the countries in which your content is distributed. CF determines the location of your users using ``MaxMind`` GeoIP databases. To disable geo restriction, remove the [Restrictions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-restrictions) property from your stack template.","properties":{"locations":{"type":"array","items":{"type":"string"},"description":"A complex type that contains a ``Location`` element for each country in which you want CloudFront either to distribute your content (``whitelist``) or not distribute your content (``blacklist``).\n The ``Location`` element is a two-letter, uppercase country code for a country that you want to include in your ``blacklist`` or ``whitelist``. Include one ``Location`` element for each country.\n CloudFront and ``MaxMind`` both use ``ISO 3166`` country codes. For the current list of countries and the corresponding codes, see ``ISO 3166-1-alpha-2`` code on the *International Organization for Standardization* website. You can also refer to the country list on the CloudFront console, which includes both country names and codes."},"restrictionType":{"type":"string","description":"The method that you want to use to restrict distribution of your content by country:\n  +  ``none``: No geo restriction is enabled, meaning access to content is not restricted by client geo location.\n  +  ``blacklist``: The ``Location`` elements specify the countries in which you don't want CloudFront to distribute your content.\n  +  ``whitelist``: The ``Location`` elements specify the countries in which you want CloudFront to distribute your content."}},"type":"object","required":["restrictionType"]},"aws-native:cloudfront:DistributionGrpcConfig":{"description":"Amazon CloudFront supports gRPC, an open-source remote procedure call (RPC) framework built on HTTP/2. gRPC offers bi-directional streaming and binary protocol that buffers payloads, making it suitable for applications that require low latency communications.\n To enable your distribution to handle gRPC requests, you must include HTTP/2 as one of the supported ``HTTP`` versions and allow ``HTTP`` methods, including ``POST``.\n For more information, see [Using gRPC with CloudFront distributions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-using-grpc.html) in the *Amazon CloudFront Developer Guide*.","properties":{"enabled":{"type":"boolean","description":"Enables your CloudFront distribution to receive gRPC requests and to proxy them directly to your origins."}},"type":"object","required":["enabled"]},"aws-native:cloudfront:DistributionLambdaFunctionAssociation":{"description":"A complex type that contains a Lambda@Edge function association.","properties":{"eventType":{"type":"string","description":"Specifies the event type that triggers a Lambda@Edge function invocation. You can specify the following values:\n  +  ``viewer-request``: The function executes when CloudFront receives a request from a viewer and before it checks to see whether the requested object is in the edge cache.\n  +  ``origin-request``: The function executes only when CloudFront sends a request to your origin. When the requested object is in the edge cache, the function doesn't execute.\n  +  ``origin-response``: The function executes after CloudFront receives a response from the origin and before it caches the object in the response. When the requested object is in the edge cache, the function doesn't execute.\n  +  ``viewer-response``: The function executes before CloudFront returns the requested object to the viewer. The function executes regardless of whether the object was already in the edge cache.\n If the origin returns an HTTP status code other than HTTP 200 (OK), the function doesn't execute."},"includeBody":{"type":"boolean","description":"A flag that allows a Lambda@Edge function to have read access to the body content. For more information, see [Accessing the Request Body by Choosing the Include Body Option](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-include-body-access.html) in the Amazon CloudFront Developer Guide."},"lambdaFunctionArn":{"type":"string","description":"The ARN of the Lambda@Edge function. You must specify the ARN of a function version; you can't specify an alias or $LATEST."}},"type":"object"},"aws-native:cloudfront:DistributionLegacyCustomOrigin":{"description":"A custom origin. A custom origin is any origin that is *not* an S3 bucket, with one exception. An S3 bucket that is [configured with static website hosting](https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html)*is* a custom origin.\n  This property is legacy. We recommend that you use [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) instead.","properties":{"dnsName":{"type":"string","description":"The domain name assigned to your CF distribution."},"httpPort":{"type":"integer","description":"The HTTP port that CF uses to connect to the origin. Specify the HTTP port that the origin listens on."},"httpsPort":{"type":"integer","description":"The HTTPS port that CF uses to connect to the origin. Specify the HTTPS port that the origin listens on."},"originProtocolPolicy":{"type":"string","description":"Specifies the protocol (HTTP or HTTPS) that CF uses to connect to the origin."},"originSslProtocols":{"type":"array","items":{"type":"string"},"description":"The minimum SSL/TLS protocol version that CF uses when communicating with your origin server over HTTPs.\n For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginSSLProtocols) in the *Developer Guide*."}},"type":"object","required":["dnsName","originProtocolPolicy","originSslProtocols"]},"aws-native:cloudfront:DistributionLegacyS3Origin":{"description":"The origin as an S3 bucket. \n  This property is legacy. We recommend that you use [Origin](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-origin.html) instead.","properties":{"dnsName":{"type":"string","description":"The domain name assigned to your CF distribution."},"originAccessIdentity":{"type":"string","description":"The CF origin access identity to associate with the distribution. Use an origin access identity to configure the distribution so that end users can only access objects in an S3 through CF.\n  This property is legacy. We recommend that you use [OriginAccessControl](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-originaccesscontrol.html) instead."}},"type":"object","required":["dnsName"]},"aws-native:cloudfront:DistributionLogging":{"description":"A complex type that specifies whether access logs are written for the distribution.\n  If you already enabled standard logging (legacy) and you want to enable standard logging (v2) to send your access logs to Amazon S3, we recommend that you specify a *different* Amazon S3 bucket or use a *separate path* in the same bucket (for example, use a log prefix or partitioning). This helps you keep track of which log files are associated with which logging subscription and prevents log files from overwriting each other. For more information, see [Standard logging (access logs)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html) in the *Amazon CloudFront Developer Guide*.","properties":{"bucket":{"type":"string","description":"The Amazon S3 bucket to store the access logs in, for example, ``amzn-s3-demo-bucket.s3.amazonaws.com``."},"includeCookies":{"type":"boolean","description":"Specifies whether you want CloudFront to include cookies in access logs, specify ``true`` for ``IncludeCookies``. If you choose to include cookies in logs, CloudFront logs all cookies regardless of how you configure the cache behaviors for this distribution. If you don't want to include cookies when you create a distribution or if you want to disable include cookies for an existing distribution, specify ``false`` for ``IncludeCookies``."},"prefix":{"type":"string","description":"An optional string that you want CloudFront to prefix to the access log ``filenames`` for this distribution, for example, ``myprefix/``. If you want to enable logging, but you don't want to specify a prefix, you still must include an empty ``Prefix`` element in the ``Logging`` element."}},"type":"object"},"aws-native:cloudfront:DistributionOrigin":{"description":"An origin.\n An origin is the location where content is stored, and from which CloudFront gets content to serve to viewers. To specify an origin:\n  +  Use ``S3OriginConfig`` to specify an Amazon S3 bucket that is not configured with static website hosting.\n  +  Use ``VpcOriginConfig`` to specify a VPC origin.\n  +  Use ``CustomOriginConfig`` to specify all other kinds of origins, including:\n  +  An Amazon S3 bucket that is configured with static website hosting\n  +  An Elastic Load Balancing load balancer\n  +  An EMPlong endpoint\n  +  An EMSlong container\n  +  Any other HTTP server, running on an Amazon EC2 instance or any other kind of host\n  \n  \n For the current maximum number of origins that you can specify per distribution, see [General Quotas on Web Distributions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-limits.html#limits-web-distributions) in the *Amazon CloudFront Developer Guide* (quotas were formerly referred to as limits).","properties":{"connectionAttempts":{"type":"integer","description":"The number of times that CloudFront attempts to connect to the origin. The minimum number is 1, the maximum is 3, and the default (if you don't specify otherwise) is 3.\n For a custom origin (including an Amazon S3 bucket that's configured with static website hosting), this value also specifies the number of times that CloudFront attempts to get a response from the origin, in the case of an [Origin Response Timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout).\n For more information, see [Origin Connection Attempts](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#origin-connection-attempts) in the *Amazon CloudFront Developer Guide*."},"connectionTimeout":{"type":"integer","description":"The number of seconds that CloudFront waits when trying to establish a connection to the origin. The minimum timeout is 1 second, the maximum is 10 seconds, and the default (if you don't specify otherwise) is 10 seconds.\n For more information, see [Origin Connection Timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#origin-connection-timeout) in the *Amazon CloudFront Developer Guide*."},"customOriginConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionCustomOriginConfig","description":"Use this type to specify an origin that is not an Amazon S3 bucket, with one exception. If the Amazon S3 bucket is configured with static website hosting, use this type. If the Amazon S3 bucket is not configured with static website hosting, use the ``S3OriginConfig`` type instead."},"domainName":{"type":"string","description":"The domain name for the origin.\n For more information, see [Origin Domain Name](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesDomainName) in the *Amazon CloudFront Developer Guide*."},"id":{"type":"string","description":"A unique identifier for the origin. This value must be unique within the distribution.\n Use this value to specify the ``TargetOriginId`` in a ``CacheBehavior`` or ``DefaultCacheBehavior``."},"originAccessControlId":{"type":"string","description":"The unique identifier of an origin access control for this origin.\n For more information, see [Restricting access to an Amazon S3 origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) in the *Amazon CloudFront Developer Guide*."},"originCustomHeaders":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginCustomHeader"},"description":"A list of HTTP header names and values that CloudFront adds to the requests that it sends to the origin.\n For more information, see [Adding Custom Headers to Origin Requests](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/add-origin-custom-headers.html) in the *Amazon CloudFront Developer Guide*."},"originPath":{"type":"string","description":"An optional path that CloudFront appends to the origin domain name when CloudFront requests content from the origin.\n For more information, see [Origin Path](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginPath) in the *Amazon CloudFront Developer Guide*."},"originShield":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginShield","description":"CloudFront Origin Shield. Using Origin Shield can help reduce the load on your origin.\n For more information, see [Using Origin Shield](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html) in the *Amazon CloudFront Developer Guide*."},"responseCompletionTimeout":{"type":"integer","description":"The time (in seconds) that a request from CloudFront to the origin can stay open and wait for a response. If the complete response isn't received from the origin by this time, CloudFront ends the connection.\n The value for ``ResponseCompletionTimeout`` must be equal to or greater than the value for ``OriginReadTimeout``. If you don't set a value for ``ResponseCompletionTimeout``, CloudFront doesn't enforce a maximum value.\n For more information, see [Response completion timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#response-completion-timeout) in the *Amazon CloudFront Developer Guide*."},"s3OriginConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionS3OriginConfig","description":"Use this type to specify an origin that is an Amazon S3 bucket that is not configured with static website hosting. To specify any other type of origin, including an Amazon S3 bucket that is configured with static website hosting, use the ``CustomOriginConfig`` type instead."},"vpcOriginConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionVpcOriginConfig","description":"The VPC origin configuration."}},"type":"object","required":["domainName","id"]},"aws-native:cloudfront:DistributionOriginCustomHeader":{"description":"A complex type that contains ``HeaderName`` and ``HeaderValue`` elements, if any, for this distribution.","properties":{"headerName":{"type":"string","description":"The name of a header that you want CloudFront to send to your origin. For more information, see [Adding Custom Headers to Origin Requests](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/forward-custom-headers.html) in the *Amazon CloudFront Developer Guide*."},"headerValue":{"type":"string","description":"The value for the header that you specified in the ``HeaderName`` field."}},"type":"object","required":["headerName","headerValue"]},"aws-native:cloudfront:DistributionOriginGroup":{"description":"An origin group includes two origins (a primary origin and a secondary origin to failover to) and a failover criteria that you specify. You create an origin group to support origin failover in CloudFront. When you create or update a distribution, you can specify the origin group instead of a single origin, and CloudFront will failover from the primary origin to the secondary origin under the failover conditions that you've chosen.\n Optionally, you can choose selection criteria for your origin group to specify how your origins are selected when your distribution routes viewer requests.","properties":{"failoverCriteria":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginGroupFailoverCriteria","description":"A complex type that contains information about the failover criteria for an origin group."},"id":{"type":"string","description":"The origin group's ID."},"members":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginGroupMembers","description":"A complex type that contains information about the origins in an origin group."},"selectionCriteria":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginGroupSelectionCriteria","description":"The selection criteria for the origin group. For more information, see [Create an origin group](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/high_availability_origin_failover.html#concept_origin_groups.creating) in the *Amazon CloudFront Developer Guide*."}},"type":"object","required":["failoverCriteria","id","members"]},"aws-native:cloudfront:DistributionOriginGroupFailoverCriteria":{"description":"A complex data type that includes information about the failover criteria for an origin group, including the status codes for which CloudFront will failover from the primary origin to the second origin.","properties":{"statusCodes":{"$ref":"#/types/aws-native:cloudfront:DistributionStatusCodes","description":"The status codes that, when returned from the primary origin, will trigger CloudFront to failover to the second origin."}},"type":"object","required":["statusCodes"]},"aws-native:cloudfront:DistributionOriginGroupMember":{"description":"An origin in an origin group.","properties":{"originId":{"type":"string","description":"The ID for an origin in an origin group."}},"type":"object","required":["originId"]},"aws-native:cloudfront:DistributionOriginGroupMembers":{"description":"A complex data type for the origins included in an origin group.","properties":{"items":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginGroupMember"},"description":"Items (origins) in an origin group."},"quantity":{"type":"integer","description":"The number of origins in an origin group."}},"type":"object","required":["items","quantity"]},"aws-native:cloudfront:DistributionOriginGroupSelectionCriteria":{"type":"string","enum":[{"name":"Default","value":"default"},{"name":"MediaQualityBased","value":"media-quality-based"}]},"aws-native:cloudfront:DistributionOriginGroups":{"description":"A complex data type for the origin groups specified for a distribution.","properties":{"items":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionOriginGroup"},"description":"The items (origin groups) in a distribution."},"quantity":{"type":"integer","description":"The number of origin groups."}},"type":"object","required":["quantity"]},"aws-native:cloudfront:DistributionOriginMtlsConfig":{"description":"Configures mutual TLS authentication between CloudFront and your origin server.","properties":{"clientCertificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the client certificate stored in AWS Certificate Manager (ACM) that CloudFront uses to authenticate with your origin using Mutual TLS."}},"type":"object","required":["clientCertificateArn"]},"aws-native:cloudfront:DistributionOriginShield":{"description":"CloudFront Origin Shield.\n Using Origin Shield can help reduce the load on your origin. For more information, see [Using Origin Shield](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html) in the *Amazon CloudFront Developer Guide*.","properties":{"enabled":{"type":"boolean","description":"A flag that specifies whether Origin Shield is enabled.\n When it's enabled, CloudFront routes all requests through Origin Shield, which can help protect your origin. When it's disabled, CloudFront might send requests directly to your origin from multiple edge locations or regional edge caches."},"originShieldRegion":{"type":"string","description":"The AWS-Region for Origin Shield.\n Specify the AWS-Region that has the lowest latency to your origin. To specify a region, use the region code, not the region name. For example, specify the US East (Ohio) region as ``us-east-2``.\n When you enable CloudFront Origin Shield, you must specify the AWS-Region for Origin Shield. For the list of AWS-Regions that you can specify, and for help choosing the best Region for your origin, see [Choosing the for Origin Shield](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html#choose-origin-shield-region) in the *Amazon CloudFront Developer Guide*."}},"type":"object"},"aws-native:cloudfront:DistributionParameterDefinition":{"description":"A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution.","properties":{"definition":{"$ref":"#/types/aws-native:cloudfront:DistributionParameterDefinitionDefinitionProperties","description":"The value that you assigned to the parameter."},"name":{"type":"string","description":"The name of the parameter."}},"type":"object","required":["definition","name"]},"aws-native:cloudfront:DistributionParameterDefinitionDefinitionProperties":{"description":"The value that you assigned to the parameter.","properties":{"stringSchema":{"$ref":"#/types/aws-native:cloudfront:DistributionParameterDefinitionDefinitionPropertiesStringSchemaProperties"}},"type":"object"},"aws-native:cloudfront:DistributionParameterDefinitionDefinitionPropertiesStringSchemaProperties":{"properties":{"comment":{"type":"string"},"defaultValue":{"type":"string"},"required":{"type":"boolean"}},"type":"object","required":["required"]},"aws-native:cloudfront:DistributionRestrictions":{"description":"A complex type that identifies ways in which you want to restrict distribution of your content.","properties":{"geoRestriction":{"$ref":"#/types/aws-native:cloudfront:DistributionGeoRestriction","description":"A complex type that controls the countries in which your content is distributed. CF determines the location of your users using ``MaxMind`` GeoIP databases. To disable geo restriction, remove the [Restrictions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-restrictions) property from your stack template."}},"type":"object","required":["geoRestriction"]},"aws-native:cloudfront:DistributionS3OriginConfig":{"description":"A complex type that contains information about the Amazon S3 origin. If the origin is a custom origin or an S3 bucket that is configured as a website endpoint, use the ``CustomOriginConfig`` element instead.","properties":{"originAccessIdentity":{"type":"string","description":"If you're using origin access control (OAC) instead of origin access identity, specify an empty ``OriginAccessIdentity`` element. For more information, see [Restricting access to an](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the *Amazon CloudFront Developer Guide*.\n  The CloudFront origin access identity to associate with the origin. Use an origin access identity to configure the origin so that viewers can *only* access objects in an Amazon S3 bucket through CloudFront. The format of the value is:\n  ``origin-access-identity/cloudfront/ID-of-origin-access-identity`` \n The ``ID-of-origin-access-identity`` is the value that CloudFront returned in the ``ID`` element when you created the origin access identity.\n If you want viewers to be able to access objects using either the CloudFront URL or the Amazon S3 URL, specify an empty ``OriginAccessIdentity`` element.\n To delete the origin access identity from an existing distribution, update the distribution configuration and include an empty ``OriginAccessIdentity`` element.\n To replace the origin access identity, update the distribution configuration and specify the new origin access identity.\n For more information about the origin access identity, see [Serving Private Content through CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html) in the *Amazon CloudFront Developer Guide*."},"originReadTimeout":{"type":"integer","description":"Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the *origin response timeout*. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don't specify otherwise) is 30 seconds.\n For more information, see [Response timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the *Amazon CloudFront Developer Guide*."}},"type":"object"},"aws-native:cloudfront:DistributionStatusCodes":{"description":"A complex data type for the status codes that you specify that, when returned by a primary origin, trigger CloudFront to failover to a second origin.","properties":{"items":{"type":"array","items":{"type":"integer"},"description":"The items (status codes) for an origin group."},"quantity":{"type":"integer","description":"The number of status codes."}},"type":"object","required":["items","quantity"]},"aws-native:cloudfront:DistributionTag":{"description":"A complex type that contains ``Tag`` key and ``Tag`` value.","properties":{"key":{"type":"string","description":"A string that contains ``Tag`` key.\n The string length should be between 1 and 128 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."},"value":{"type":"string","description":"A string that contains an optional ``Tag`` value.\n The string length should be between 0 and 256 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."}},"type":"object","required":["key","value"]},"aws-native:cloudfront:DistributionTenantCertificate":{"description":"The ACMlong (ACM) certificate associated with your distribution.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ACM certificate."}},"type":"object"},"aws-native:cloudfront:DistributionTenantCustomizations":{"description":"Customizations for the distribution tenant. For each distribution tenant, you can specify the geographic restrictions, and the Amazon Resource Names (ARNs) for the ACM certificate and WAF web ACL. These are specific values that you can override or disable from the multi-tenant distribution that was used to create the distribution tenant.","properties":{"certificate":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantCertificate","description":"The ACMlong (ACM) certificate."},"geoRestrictions":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantGeoRestrictionCustomization","description":"The geographic restrictions."},"webAcl":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantWebAclCustomization","description":"The WAF web ACL."}},"type":"object"},"aws-native:cloudfront:DistributionTenantDomainResult":{"description":"The details about the domain result.","properties":{"domain":{"type":"string","description":"The specified domain."},"status":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantDomainResultStatus","description":"Whether the domain is active or inactive."}},"type":"object"},"aws-native:cloudfront:DistributionTenantDomainResultStatus":{"description":"Whether the domain is active or inactive.","type":"string","enum":[{"name":"Active","value":"active"},{"name":"Inactive","value":"inactive"}]},"aws-native:cloudfront:DistributionTenantGeoRestrictionCustomization":{"description":"The customizations that you specified for the distribution tenant for geographic restrictions.","properties":{"locations":{"type":"array","items":{"type":"string"},"description":"The locations for geographic restrictions."},"restrictionType":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantGeoRestrictionCustomizationRestrictionType","description":"The method that you want to use to restrict distribution of your content by country:\n  +  ``none``: No geographic restriction is enabled, meaning access to content is not restricted by client geo location.\n  +  ``blacklist``: The ``Location`` elements specify the countries in which you don't want CloudFront to distribute your content.\n  +  ``whitelist``: The ``Location`` elements specify the countries in which you want CloudFront to distribute your content."}},"type":"object"},"aws-native:cloudfront:DistributionTenantGeoRestrictionCustomizationRestrictionType":{"description":"The method that you want to use to restrict distribution of your content by country:\n  +  ``none``: No geographic restriction is enabled, meaning access to content is not restricted by client geo location.\n  +  ``blacklist``: The ``Location`` elements specify the countries in which you don't want CloudFront to distribute your content.\n  +  ``whitelist``: The ``Location`` elements specify the countries in which you want CloudFront to distribute your content.","type":"string","enum":[{"name":"Blacklist","value":"blacklist"},{"name":"Whitelist","value":"whitelist"},{"name":"None","value":"none"}]},"aws-native:cloudfront:DistributionTenantManagedCertificateRequest":{"description":"An object that represents the request for the Amazon CloudFront managed ACM certificate.","properties":{"certificateTransparencyLoggingPreference":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantManagedCertificateRequestCertificateTransparencyLoggingPreference","description":"You can opt out of certificate transparency logging by specifying the ``disabled`` option. Opt in by specifying ``enabled``. For more information, see [Certificate Transparency Logging](https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency) in the *User Guide*."},"primaryDomainName":{"type":"string","description":"The primary domain name associated with the CloudFront managed ACM certificate."},"validationTokenHost":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantManagedCertificateRequestValidationTokenHost","description":"Specify how the HTTP validation token will be served when requesting the CloudFront managed ACM certificate.\n  +  For ``cloudfront``, CloudFront will automatically serve the validation token. Choose this mode if you can point the domain's DNS to CloudFront immediately.\n  +  For ``self-hosted``, you serve the validation token from your existing infrastructure. Choose this mode when you need to maintain current traffic flow while your certificate is being issued. You can place the validation token at the well-known path on your existing web server, wait for ACM to validate and issue the certificate, and then update your DNS to point to CloudFront."}},"type":"object"},"aws-native:cloudfront:DistributionTenantManagedCertificateRequestCertificateTransparencyLoggingPreference":{"description":"You can opt out of certificate transparency logging by specifying the ``disabled`` option. Opt in by specifying ``enabled``. For more information, see [Certificate Transparency Logging](https://docs.aws.amazon.com/acm/latest/userguide/acm-concepts.html#concept-transparency) in the *User Guide*.","type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:cloudfront:DistributionTenantManagedCertificateRequestValidationTokenHost":{"description":"Specify how the HTTP validation token will be served when requesting the CloudFront managed ACM certificate.\n  +  For ``cloudfront``, CloudFront will automatically serve the validation token. Choose this mode if you can point the domain's DNS to CloudFront immediately.\n  +  For ``self-hosted``, you serve the validation token from your existing infrastructure. Choose this mode when you need to maintain current traffic flow while your certificate is being issued. You can place the validation token at the well-known path on your existing web server, wait for ACM to validate and issue the certificate, and then update your DNS to point to CloudFront.","type":"string","enum":[{"name":"Cloudfront","value":"cloudfront"},{"name":"SelfHosted","value":"self-hosted"}]},"aws-native:cloudfront:DistributionTenantParameter":{"description":"A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution.","properties":{"name":{"type":"string","description":"The parameter name."},"value":{"type":"string","description":"The parameter value."}},"type":"object"},"aws-native:cloudfront:DistributionTenantTag":{"description":"A complex type that contains ``Tag`` key and ``Tag`` value.","properties":{"key":{"type":"string","description":"A string that contains ``Tag`` key.\n The string length should be between 1 and 128 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."},"value":{"type":"string","description":"A string that contains an optional ``Tag`` value.\n The string length should be between 0 and 256 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."}},"type":"object","required":["key","value"]},"aws-native:cloudfront:DistributionTenantWebAclCustomization":{"description":"The WAF web ACL customization specified for the distribution tenant.","properties":{"action":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantWebAclCustomizationAction","description":"The action for the WAF web ACL customization. You can specify ``override`` to specify a separate WAF web ACL for the distribution tenant. If you specify ``disable``, the distribution tenant won't have WAF web ACL protections and won't inherit from the multi-tenant distribution."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the WAF web ACL."}},"type":"object"},"aws-native:cloudfront:DistributionTenantWebAclCustomizationAction":{"description":"The action for the WAF web ACL customization. You can specify ``override`` to specify a separate WAF web ACL for the distribution tenant. If you specify ``disable``, the distribution tenant won't have WAF web ACL protections and won't inherit from the multi-tenant distribution.","type":"string","enum":[{"name":"Override","value":"override"},{"name":"Disable","value":"disable"}]},"aws-native:cloudfront:DistributionTrustStoreConfig":{"description":"A trust store configuration.","properties":{"advertiseTrustStoreCaNames":{"type":"boolean","description":"The configuration to use to advertise trust store CA names."},"ignoreCertificateExpiry":{"type":"boolean","description":"The configuration to use to ignore certificate expiration."},"trustStoreId":{"type":"string","description":"The trust store ID."}},"type":"object","required":["trustStoreId"]},"aws-native:cloudfront:DistributionViewerCertificate":{"description":"A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers.\n If the distribution doesn't use ``Aliases`` (also known as alternate domain names or CNAMEs)—that is, if the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net``—set ``CloudFrontDefaultCertificate`` to ``true`` and leave all other fields empty.\n If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), use the fields in this type to specify the following settings:\n  +  Which viewers the distribution accepts HTTPS connections from: only viewers that support [server name indication (SNI)](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Server_Name_Indication) (recommended), or all viewers including those that don't support SNI.\n  +  To accept HTTPS connections from only viewers that support SNI, set ``SSLSupportMethod`` to ``sni-only``. This is recommended. Most browsers and clients support SNI. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)\n  +  To accept HTTPS connections from all viewers, including those that don't support SNI, set ``SSLSupportMethod`` to ``vip``. This is not recommended, and results in additional monthly charges from CloudFront. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)\n  \n  +  The minimum SSL/TLS protocol version that the distribution can use to communicate with viewers. To specify a minimum version, choose a value for ``MinimumProtocolVersion``. For more information, see [Security Policy](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValues-security-policy) in the *Amazon CloudFront Developer Guide*.\n  +  The location of the SSL/TLS certificate, [(ACM)](https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html) (recommended) or [(IAM)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html). You specify the location by setting a value in one of the following fields (not both):\n  +  ``ACMCertificateArn`` (In CloudFormation, this field name is ``AcmCertificateArn``. Note the different capitalization.)\n  +  ``IAMCertificateId`` (In CloudFormation, this field name is ``IamCertificateId``. Note the different capitalization.)\n  \n  \n All distributions support HTTPS connections from viewers. To require viewers to use HTTPS only, or to redirect them from HTTP to HTTPS, use ``ViewerProtocolPolicy`` in the ``CacheBehavior`` or ``DefaultCacheBehavior``. To specify how CloudFront should use SSL/TLS to communicate with your custom origin, use ``CustomOriginConfig``.\n For more information, see [Using HTTPS with CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https.html) and [Using Alternate Domain Names and HTTPS](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-alternate-domain-names.html) in the *Amazon CloudFront Developer Guide*.","properties":{"acmCertificateArn":{"type":"string","description":"In CloudFormation, this field name is ``AcmCertificateArn``. Note the different capitalization.\n  If the distribution uses ``Aliases`` (alternate domain names or CNAMEs) and the SSL/TLS certificate is stored in [(ACM)](https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html), provide the Amazon Resource Name (ARN) of the ACM certificate. CloudFront only supports ACM certificates in the US East (N. Virginia) Region (``us-east-1``).\n If you specify an ACM certificate ARN, you must also specify values for ``MinimumProtocolVersion`` and ``SSLSupportMethod``. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)"},"cloudFrontDefaultCertificate":{"type":"boolean","description":"If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net``, set this field to ``true``.\n If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), omit this field and specify values for the following fields:\n  +  ``AcmCertificateArn`` or ``IamCertificateId`` (specify a value for one, not both) \n  +   ``MinimumProtocolVersion`` \n  +   ``SslSupportMethod``"},"iamCertificateId":{"type":"string","description":"This field only supports standard distributions. You can't specify this field for multi-tenant distributions. For more information, see [Unsupported features for SaaS Manager for Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-config-options.html#unsupported-saas) in the *Amazon CloudFront Developer Guide*.\n   In CloudFormation, this field name is ``IamCertificateId``. Note the different capitalization.\n  If the distribution uses ``Aliases`` (alternate domain names or CNAMEs) and the SSL/TLS certificate is stored in [(IAM)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html), provide the ID of the IAM certificate.\n If you specify an IAM certificate ID, you must also specify values for ``MinimumProtocolVersion`` and ``SSLSupportMethod``. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)"},"minimumProtocolVersion":{"type":"string","description":"If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), specify the security policy that you want CloudFront to use for HTTPS connections with viewers. The security policy determines two settings:\n  +  The minimum SSL/TLS protocol that CloudFront can use to communicate with viewers.\n  +  The ciphers that CloudFront can use to encrypt the content that it returns to viewers.\n  \n For more information, see [Security Policy](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValues-security-policy) and [Supported Protocols and Ciphers Between Viewers and CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html#secure-connections-supported-ciphers) in the *Amazon CloudFront Developer Guide*.\n  On the CloudFront console, this setting is called *Security Policy*.\n  When you're using SNI only (you set ``SSLSupportMethod`` to ``sni-only``), you must specify ``TLSv1`` or higher. (In CloudFormation, the field name is ``SslSupportMethod``. Note the different capitalization.)\n If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net`` (you set ``CloudFrontDefaultCertificate`` to ``true``), CloudFront automatically sets the security policy to ``TLSv1`` regardless of the value that you set here."},"sslSupportMethod":{"type":"string","description":"In CloudFormation, this field name is ``SslSupportMethod``. Note the different capitalization.\n  If the distribution uses ``Aliases`` (alternate domain names or CNAMEs), specify which viewers the distribution accepts HTTPS connections from.\n  +  ``sni-only`` – The distribution accepts HTTPS connections from only viewers that support [server name indication (SNI)](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Server_Name_Indication). This is recommended. Most browsers and clients support SNI.\n  +  ``vip`` – The distribution accepts HTTPS connections from all viewers including those that don't support SNI. This is not recommended, and results in additional monthly charges from CloudFront.\n  +  ``static-ip`` - Do not specify this value unless your distribution has been enabled for this feature by the CloudFront team. If you have a use case that requires static IP addresses for a distribution, contact CloudFront through the [Center](https://docs.aws.amazon.com/support/home).\n  \n If the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net``, don't set a value for this field."}},"type":"object"},"aws-native:cloudfront:DistributionViewerMtlsConfig":{"description":"A viewer mTLS configuration.","properties":{"mode":{"$ref":"#/types/aws-native:cloudfront:DistributionViewerMtlsMode","description":"The viewer mTLS mode."},"trustStoreConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionTrustStoreConfig","description":"The trust store configuration associated with the viewer mTLS configuration."}},"type":"object"},"aws-native:cloudfront:DistributionViewerMtlsMode":{"type":"string","enum":[{"name":"Required","value":"required"},{"name":"Optional","value":"optional"}]},"aws-native:cloudfront:DistributionVpcOriginConfig":{"description":"An Amazon CloudFront VPC origin configuration.","properties":{"originKeepaliveTimeout":{"type":"integer","description":"Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don't specify otherwise) is 5 seconds.\n For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginKeepaliveTimeout) in the *Amazon CloudFront Developer Guide*."},"originReadTimeout":{"type":"integer","description":"Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the *origin response timeout*. The minimum timeout is 1 second, the maximum is 120 seconds, and the default (if you don't specify otherwise) is 30 seconds.\n For more information, see [Response timeout](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginResponseTimeout) in the *Amazon CloudFront Developer Guide*."},"ownerAccountId":{"type":"string","description":"The account ID of the AWS-account that owns the VPC origin."},"vpcOriginId":{"type":"string","description":"The VPC origin ID."}},"type":"object","required":["vpcOriginId"]},"aws-native:cloudfront:FunctionConfig":{"description":"Contains configuration information about a CloudFront function.","properties":{"comment":{"type":"string","description":"A comment to describe the function."},"keyValueStoreAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:FunctionKeyValueStoreAssociation"},"description":"The configuration for the key value store associations."},"runtime":{"type":"string","description":"The function's runtime environment version."}},"type":"object","required":["comment","runtime"]},"aws-native:cloudfront:FunctionKeyValueStoreAssociation":{"description":"The key value store association.","properties":{"keyValueStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the key value store association."}},"type":"object","required":["keyValueStoreArn"]},"aws-native:cloudfront:FunctionMetadata":{"description":"Contains metadata about a CloudFront function.","properties":{"functionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function. The ARN uniquely identifies the function."}},"type":"object"},"aws-native:cloudfront:KeyGroupConfig":{"description":"A key group configuration.\n A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html).","properties":{"comment":{"type":"string","description":"A comment to describe the key group. The comment cannot be longer than 128 characters."},"items":{"type":"array","items":{"type":"string"},"description":"A list of the identifiers of the public keys in the key group."},"name":{"type":"string","description":"A name to identify the key group."}},"type":"object","required":["items","name"]},"aws-native:cloudfront:KeyValueStoreImportSource":{"description":"The import source for the key value store.","properties":{"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the import source for the key value store."},"sourceType":{"type":"string","description":"The source type of the import source for the key value store."}},"type":"object","required":["sourceArn","sourceType"]},"aws-native:cloudfront:KeyValueStoreTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:cloudfront:MonitoringSubscription":{"description":"A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.","properties":{"realtimeMetricsSubscriptionConfig":{"$ref":"#/types/aws-native:cloudfront:MonitoringSubscriptionRealtimeMetricsSubscriptionConfig","description":"A subscription configuration for additional CloudWatch metrics."}},"type":"object"},"aws-native:cloudfront:MonitoringSubscriptionRealtimeMetricsSubscriptionConfig":{"description":"A subscription configuration for additional CloudWatch metrics.","properties":{"realtimeMetricsSubscriptionStatus":{"$ref":"#/types/aws-native:cloudfront:MonitoringSubscriptionRealtimeMetricsSubscriptionConfigRealtimeMetricsSubscriptionStatus","description":"A flag that indicates whether additional CloudWatch metrics are enabled for a given CloudFront distribution."}},"type":"object","required":["realtimeMetricsSubscriptionStatus"]},"aws-native:cloudfront:MonitoringSubscriptionRealtimeMetricsSubscriptionConfigRealtimeMetricsSubscriptionStatus":{"description":"A flag that indicates whether additional CloudWatch metrics are enabled for a given CloudFront distribution.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:cloudfront:OriginAccessControlConfig":{"description":"Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.\n This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.\n For more information about using a CloudFront origin access control, see [Restricting access to an origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the *Amazon CloudFront Developer Guide*.","properties":{"description":{"type":"string","description":"A description of the origin access control."},"name":{"type":"string","description":"A name to identify the origin access control. You can specify up to 64 characters."},"originAccessControlOriginType":{"type":"string","description":"The type of origin that this origin access control is for."},"signingBehavior":{"type":"string","description":"Specifies which requests CloudFront signs (adds authentication information to). Specify ``always`` for the most common use case. For more information, see [origin access control advanced settings](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html#oac-advanced-settings) in the *Amazon CloudFront Developer Guide*.\n This field can have one of the following values:\n  +  ``always`` – CloudFront signs all origin requests, overwriting the ``Authorization`` header from the viewer request if one exists.\n  +  ``never`` – CloudFront doesn't sign any origin requests. This value turns off origin access control for all origins in all distributions that use this origin access control.\n  +  ``no-override`` – If the viewer request doesn't contain the ``Authorization`` header, then CloudFront signs the origin request. If the viewer request contains the ``Authorization`` header, then CloudFront doesn't sign the origin request and instead passes along the ``Authorization`` header from the viewer request. *WARNING: To pass along the Authorization header from the viewer request, you must add the Authorization header to a cache policy for all cache behaviors that use origins associated with this origin access control.*"},"signingProtocol":{"type":"string","description":"The signing protocol of the origin access control, which determines how CloudFront signs (authenticates) requests. The only valid value is ``sigv4``."}},"type":"object","required":["name","originAccessControlOriginType","signingBehavior","signingProtocol"]},"aws-native:cloudfront:OriginRequestPolicyConfig":{"description":"An origin request policy configuration.\n This configuration determines the values that CloudFront includes in requests that it sends to the origin. Each request that CloudFront sends to the origin includes the following:\n  +  The request body and the URL path (without the domain name) from the viewer request.\n  +  The headers that CloudFront automatically includes in every origin request, including ``Host``, ``User-Agent``, and ``X-Amz-Cf-Id``.\n  +  All HTTP headers, cookies, and URL query strings that are specified in the cache policy or the origin request policy. These can include items from the viewer request and, in the case of headers, additional ones that are added by CloudFront.\n  \n CloudFront sends a request when it can't find an object in its cache that matches the request. If you want to send values to the origin and also include them in the cache key, use ``CachePolicy``.","properties":{"comment":{"type":"string","description":"A comment to describe the origin request policy. The comment cannot be longer than 128 characters."},"cookiesConfig":{"$ref":"#/types/aws-native:cloudfront:OriginRequestPolicyCookiesConfig","description":"The cookies from viewer requests to include in origin requests."},"headersConfig":{"$ref":"#/types/aws-native:cloudfront:OriginRequestPolicyHeadersConfig","description":"The HTTP headers to include in origin requests. These can include headers from viewer requests and additional headers added by CloudFront."},"name":{"type":"string","description":"A unique name to identify the origin request policy."},"queryStringsConfig":{"$ref":"#/types/aws-native:cloudfront:OriginRequestPolicyQueryStringsConfig","description":"The URL query strings from viewer requests to include in origin requests."}},"type":"object","required":["cookiesConfig","headersConfig","name","queryStringsConfig"]},"aws-native:cloudfront:OriginRequestPolicyCookiesConfig":{"description":"An object that determines whether any cookies in viewer requests (and if so, which cookies) are included in requests that CloudFront sends to the origin.","properties":{"cookieBehavior":{"type":"string","description":"Determines whether cookies in viewer requests are included in requests that CloudFront sends to the origin. Valid values are:\n  +  ``none`` – No cookies in viewer requests are included in requests that CloudFront sends to the origin. Even when this field is set to ``none``, any cookies that are listed in a ``CachePolicy``*are* included in origin requests.\n  +  ``whitelist`` – Only the cookies in viewer requests that are listed in the ``CookieNames`` type are included in requests that CloudFront sends to the origin.\n  +  ``all`` – All cookies in viewer requests are included in requests that CloudFront sends to the origin.\n  +  ``allExcept`` – All cookies in viewer requests are included in requests that CloudFront sends to the origin, *except* for those listed in the ``CookieNames`` type, which are not included."},"cookies":{"type":"array","items":{"type":"string"},"description":"Contains a list of cookie names."}},"type":"object","required":["cookieBehavior"]},"aws-native:cloudfront:OriginRequestPolicyHeadersConfig":{"description":"An object that determines whether any HTTP headers (and if so, which headers) are included in requests that CloudFront sends to the origin.","properties":{"headerBehavior":{"type":"string","description":"Determines whether any HTTP headers are included in requests that CloudFront sends to the origin. Valid values are:\n  +  ``none`` – No HTTP headers in viewer requests are included in requests that CloudFront sends to the origin. Even when this field is set to ``none``, any headers that are listed in a ``CachePolicy``*are* included in origin requests.\n  +  ``whitelist`` – Only the HTTP headers that are listed in the ``Headers`` type are included in requests that CloudFront sends to the origin.\n  +  ``allViewer`` – All HTTP headers in viewer requests are included in requests that CloudFront sends to the origin.\n  +  ``allViewerAndWhitelistCloudFront`` – All HTTP headers in viewer requests and the additional CloudFront headers that are listed in the ``Headers`` type are included in requests that CloudFront sends to the origin. The additional headers are added by CloudFront.\n  +  ``allExcept`` – All HTTP headers in viewer requests are included in requests that CloudFront sends to the origin, *except* for those listed in the ``Headers`` type, which are not included."},"headers":{"type":"array","items":{"type":"string"},"description":"Contains a list of HTTP header names."}},"type":"object","required":["headerBehavior"]},"aws-native:cloudfront:OriginRequestPolicyQueryStringsConfig":{"description":"An object that determines whether any URL query strings in viewer requests (and if so, which query strings) are included in requests that CloudFront sends to the origin.","properties":{"queryStringBehavior":{"type":"string","description":"Determines whether any URL query strings in viewer requests are included in requests that CloudFront sends to the origin. Valid values are:\n  +  ``none`` – No query strings in viewer requests are included in requests that CloudFront sends to the origin. Even when this field is set to ``none``, any query strings that are listed in a ``CachePolicy``*are* included in origin requests.\n  +  ``whitelist`` – Only the query strings in viewer requests that are listed in the ``QueryStringNames`` type are included in requests that CloudFront sends to the origin.\n  +  ``all`` – All query strings in viewer requests are included in requests that CloudFront sends to the origin.\n  +  ``allExcept`` – All query strings in viewer requests are included in requests that CloudFront sends to the origin, *except* for those listed in the ``QueryStringNames`` type, which are not included."},"queryStrings":{"type":"array","items":{"type":"string"},"description":"Contains a list of query string names."}},"type":"object","required":["queryStringBehavior"]},"aws-native:cloudfront:PublicKeyConfig":{"description":"Configuration information about a public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html).\n CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.","properties":{"callerReference":{"type":"string","description":"A string included in the request to help make sure that the request can't be replayed."},"comment":{"type":"string","description":"A comment to describe the public key. The comment cannot be longer than 128 characters."},"encodedKey":{"type":"string","description":"The public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html)."},"name":{"type":"string","description":"A name to help identify the public key."}},"type":"object","required":["callerReference","encodedKey","name"]},"aws-native:cloudfront:RealtimeLogConfigEndPoint":{"description":"Contains information about the Amazon Kinesis data stream where you are sending real-time log data for this real-time log configuration.","properties":{"kinesisStreamConfig":{"$ref":"#/types/aws-native:cloudfront:RealtimeLogConfigKinesisStreamConfig","description":"Contains information about the Amazon Kinesis data stream where you are sending real-time log data in a real-time log configuration."},"streamType":{"type":"string","description":"The type of data stream where you are sending real-time log data. The only valid value is ``Kinesis``."}},"type":"object","required":["kinesisStreamConfig","streamType"]},"aws-native:cloudfront:RealtimeLogConfigKinesisStreamConfig":{"description":"Contains information about the Amazon Kinesis data stream where you are sending real-time log data.","properties":{"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAMlong (IAM) role that CloudFront can use to send real-time log data to your Kinesis data stream.\n For more information the IAM role, see [Real-time log configuration IAM role](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-iam-role) in the *Amazon CloudFront Developer Guide*."},"streamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Kinesis data stream where you are sending real-time log data."}},"type":"object","required":["roleArn","streamArn"]},"aws-native:cloudfront:ResponseHeadersPolicyAccessControlAllowHeaders":{"description":"A list of HTTP header names that CloudFront includes as values for the ``Access-Control-Allow-Headers`` HTTP response header.\n For more information about the ``Access-Control-Allow-Headers`` HTTP response header, see [Access-Control-Allow-Headers](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers) in the MDN Web Docs.","properties":{"items":{"type":"array","items":{"type":"string"},"description":"The list of HTTP header names. You can specify ``*`` to allow all headers."}},"type":"object","required":["items"]},"aws-native:cloudfront:ResponseHeadersPolicyAccessControlAllowMethods":{"description":"A list of HTTP methods that CloudFront includes as values for the ``Access-Control-Allow-Methods`` HTTP response header.\n For more information about the ``Access-Control-Allow-Methods`` HTTP response header, see [Access-Control-Allow-Methods](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods) in the MDN Web Docs.","properties":{"items":{"type":"array","items":{"type":"string"},"description":"The list of HTTP methods. Valid values are:\n  +   ``GET`` \n  +   ``DELETE`` \n  +   ``HEAD`` \n  +   ``OPTIONS`` \n  +   ``PATCH`` \n  +   ``POST`` \n  +   ``PUT`` \n  +   ``ALL`` \n  \n ``ALL`` is a special value that includes all of the listed HTTP methods."}},"type":"object","required":["items"]},"aws-native:cloudfront:ResponseHeadersPolicyAccessControlAllowOrigins":{"description":"A list of origins (domain names) that CloudFront can use as the value for the ``Access-Control-Allow-Origin`` HTTP response header.\n For more information about the ``Access-Control-Allow-Origin`` HTTP response header, see [Access-Control-Allow-Origin](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin) in the MDN Web Docs.","properties":{"items":{"type":"array","items":{"type":"string"},"description":"The list of origins (domain names). You can specify ``*`` to allow all origins."}},"type":"object","required":["items"]},"aws-native:cloudfront:ResponseHeadersPolicyAccessControlExposeHeaders":{"description":"A list of HTTP headers that CloudFront includes as values for the ``Access-Control-Expose-Headers`` HTTP response header.\n For more information about the ``Access-Control-Expose-Headers`` HTTP response header, see [Access-Control-Expose-Headers](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers) in the MDN Web Docs.","properties":{"items":{"type":"array","items":{"type":"string"},"description":"The list of HTTP headers. You can specify ``*`` to expose all headers."}},"type":"object","required":["items"]},"aws-native:cloudfront:ResponseHeadersPolicyConfig":{"description":"A response headers policy configuration.\n A response headers policy configuration contains metadata about the response headers policy, and configurations for sets of HTTP response headers.","properties":{"comment":{"type":"string","description":"A comment to describe the response headers policy.\n The comment cannot be longer than 128 characters."},"corsConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyCorsConfig","description":"A configuration for a set of HTTP response headers that are used for cross-origin resource sharing (CORS)."},"customHeadersConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyCustomHeadersConfig","description":"A configuration for a set of custom HTTP response headers."},"name":{"type":"string","description":"A name to identify the response headers policy.\n The name must be unique for response headers policies in this AWS-account."},"removeHeadersConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyRemoveHeadersConfig","description":"A configuration for a set of HTTP headers to remove from the HTTP response."},"securityHeadersConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicySecurityHeadersConfig","description":"A configuration for a set of security-related HTTP response headers."},"serverTimingHeadersConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyServerTimingHeadersConfig","description":"A configuration for enabling the ``Server-Timing`` header in HTTP responses sent from CloudFront."}},"type":"object","required":["name"]},"aws-native:cloudfront:ResponseHeadersPolicyContentSecurityPolicy":{"description":"The policy directives and their values that CloudFront includes as values for the ``Content-Security-Policy`` HTTP response header.\n For more information about the ``Content-Security-Policy`` HTTP response header, see [Content-Security-Policy](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) in the MDN Web Docs.","properties":{"contentSecurityPolicy":{"type":"string","description":"The policy directives and their values that CloudFront includes as values for the ``Content-Security-Policy`` HTTP response header.\n For more information about the ``Content-Security-Policy`` HTTP response header, see [Content-Security-Policy](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) in the MDN Web Docs."},"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides the ``Content-Security-Policy`` HTTP response header received from the origin with the one specified in this response headers policy."}},"type":"object","required":["contentSecurityPolicy","override"]},"aws-native:cloudfront:ResponseHeadersPolicyContentTypeOptions":{"description":"Determines whether CloudFront includes the ``X-Content-Type-Options`` HTTP response header with its value set to ``nosniff``.\n For more information about the ``X-Content-Type-Options`` HTTP response header, see [X-Content-Type-Options](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options) in the MDN Web Docs.","properties":{"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides the ``X-Content-Type-Options`` HTTP response header received from the origin with the one specified in this response headers policy."}},"type":"object","required":["override"]},"aws-native:cloudfront:ResponseHeadersPolicyCorsConfig":{"description":"A configuration for a set of HTTP response headers that are used for cross-origin resource sharing (CORS). CloudFront adds these headers to HTTP responses that it sends for CORS requests that match a cache behavior associated with this response headers policy.\n For more information about CORS, see [Cross-Origin Resource Sharing (CORS)](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) in the MDN Web Docs.","properties":{"accessControlAllowCredentials":{"type":"boolean","description":"A Boolean that CloudFront uses as the value for the ``Access-Control-Allow-Credentials`` HTTP response header.\n For more information about the ``Access-Control-Allow-Credentials`` HTTP response header, see [Access-Control-Allow-Credentials](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials) in the MDN Web Docs."},"accessControlAllowHeaders":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyAccessControlAllowHeaders","description":"A list of HTTP header names that CloudFront includes as values for the ``Access-Control-Allow-Headers`` HTTP response header.\n For more information about the ``Access-Control-Allow-Headers`` HTTP response header, see [Access-Control-Allow-Headers](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers) in the MDN Web Docs."},"accessControlAllowMethods":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyAccessControlAllowMethods","description":"A list of HTTP methods that CloudFront includes as values for the ``Access-Control-Allow-Methods`` HTTP response header.\n For more information about the ``Access-Control-Allow-Methods`` HTTP response header, see [Access-Control-Allow-Methods](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods) in the MDN Web Docs."},"accessControlAllowOrigins":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyAccessControlAllowOrigins","description":"A list of origins (domain names) that CloudFront can use as the value for the ``Access-Control-Allow-Origin`` HTTP response header.\n For more information about the ``Access-Control-Allow-Origin`` HTTP response header, see [Access-Control-Allow-Origin](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin) in the MDN Web Docs."},"accessControlExposeHeaders":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyAccessControlExposeHeaders","description":"A list of HTTP headers that CloudFront includes as values for the ``Access-Control-Expose-Headers`` HTTP response header.\n For more information about the ``Access-Control-Expose-Headers`` HTTP response header, see [Access-Control-Expose-Headers](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers) in the MDN Web Docs."},"accessControlMaxAgeSec":{"type":"integer","description":"A number that CloudFront uses as the value for the ``Access-Control-Max-Age`` HTTP response header.\n For more information about the ``Access-Control-Max-Age`` HTTP response header, see [Access-Control-Max-Age](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Max-Age) in the MDN Web Docs."},"originOverride":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides HTTP response headers received from the origin with the ones specified in this response headers policy."}},"type":"object","required":["accessControlAllowCredentials","accessControlAllowHeaders","accessControlAllowMethods","accessControlAllowOrigins","originOverride"]},"aws-native:cloudfront:ResponseHeadersPolicyCustomHeader":{"description":"An HTTP response header name and its value. CloudFront includes this header in HTTP responses that it sends for requests that match a cache behavior that's associated with this response headers policy.","properties":{"header":{"type":"string","description":"The HTTP response header name."},"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides a response header with the same name received from the origin with the header specified here."},"value":{"type":"string","description":"The value for the HTTP response header."}},"type":"object","required":["header","override","value"]},"aws-native:cloudfront:ResponseHeadersPolicyCustomHeadersConfig":{"description":"A list of HTTP response header names and their values. CloudFront includes these headers in HTTP responses that it sends for requests that match a cache behavior that's associated with this response headers policy.","properties":{"items":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyCustomHeader"},"description":"The list of HTTP response headers and their values."}},"type":"object","required":["items"]},"aws-native:cloudfront:ResponseHeadersPolicyFrameOptions":{"description":"Determines whether CloudFront includes the ``X-Frame-Options`` HTTP response header and the header's value.\n For more information about the ``X-Frame-Options`` HTTP response header, see [X-Frame-Options](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) in the MDN Web Docs.","properties":{"frameOption":{"type":"string","description":"The value of the ``X-Frame-Options`` HTTP response header. Valid values are ``DENY`` and ``SAMEORIGIN``.\n For more information about these values, see [X-Frame-Options](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) in the MDN Web Docs."},"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides the ``X-Frame-Options`` HTTP response header received from the origin with the one specified in this response headers policy."}},"type":"object","required":["frameOption","override"]},"aws-native:cloudfront:ResponseHeadersPolicyReferrerPolicy":{"description":"Determines whether CloudFront includes the ``Referrer-Policy`` HTTP response header and the header's value.\n For more information about the ``Referrer-Policy`` HTTP response header, see [Referrer-Policy](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy) in the MDN Web Docs.","properties":{"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides the ``Referrer-Policy`` HTTP response header received from the origin with the one specified in this response headers policy."},"referrerPolicy":{"type":"string","description":"Determines whether CloudFront includes the ``Referrer-Policy`` HTTP response header and the header's value.\n For more information about the ``Referrer-Policy`` HTTP response header, see [Referrer-Policy](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy) in the MDN Web Docs."}},"type":"object","required":["override","referrerPolicy"]},"aws-native:cloudfront:ResponseHeadersPolicyRemoveHeader":{"description":"The name of an HTTP header that CloudFront removes from HTTP responses to requests that match the cache behavior that this response headers policy is attached to.","properties":{"header":{"type":"string","description":"The HTTP header name."}},"type":"object","required":["header"]},"aws-native:cloudfront:ResponseHeadersPolicyRemoveHeadersConfig":{"description":"A list of HTTP header names that CloudFront removes from HTTP responses to requests that match the cache behavior that this response headers policy is attached to.","properties":{"items":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyRemoveHeader"},"description":"The list of HTTP header names."}},"type":"object","required":["items"]},"aws-native:cloudfront:ResponseHeadersPolicySecurityHeadersConfig":{"description":"A configuration for a set of security-related HTTP response headers. CloudFront adds these headers to HTTP responses that it sends for requests that match a cache behavior associated with this response headers policy.","properties":{"contentSecurityPolicy":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyContentSecurityPolicy","description":"The policy directives and their values that CloudFront includes as values for the ``Content-Security-Policy`` HTTP response header.\n For more information about the ``Content-Security-Policy`` HTTP response header, see [Content-Security-Policy](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) in the MDN Web Docs."},"contentTypeOptions":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyContentTypeOptions","description":"Determines whether CloudFront includes the ``X-Content-Type-Options`` HTTP response header with its value set to ``nosniff``.\n For more information about the ``X-Content-Type-Options`` HTTP response header, see [X-Content-Type-Options](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options) in the MDN Web Docs."},"frameOptions":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyFrameOptions","description":"Determines whether CloudFront includes the ``X-Frame-Options`` HTTP response header and the header's value.\n For more information about the ``X-Frame-Options`` HTTP response header, see [X-Frame-Options](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options) in the MDN Web Docs."},"referrerPolicy":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyReferrerPolicy","description":"Determines whether CloudFront includes the ``Referrer-Policy`` HTTP response header and the header's value.\n For more information about the ``Referrer-Policy`` HTTP response header, see [Referrer-Policy](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy) in the MDN Web Docs."},"strictTransportSecurity":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyStrictTransportSecurity","description":"Determines whether CloudFront includes the ``Strict-Transport-Security`` HTTP response header and the header's value.\n For more information about the ``Strict-Transport-Security`` HTTP response header, see [Security headers](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/understanding-response-headers-policies.html#understanding-response-headers-policies-security) in the *Amazon CloudFront Developer Guide* and [Strict-Transport-Security](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security) in the MDN Web Docs."},"xssProtection":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyXssProtection","description":"Determines whether CloudFront includes the ``X-XSS-Protection`` HTTP response header and the header's value.\n For more information about the ``X-XSS-Protection`` HTTP response header, see [X-XSS-Protection](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection) in the MDN Web Docs."}},"type":"object"},"aws-native:cloudfront:ResponseHeadersPolicyServerTimingHeadersConfig":{"description":"A configuration for enabling the ``Server-Timing`` header in HTTP responses sent from CloudFront.","properties":{"enabled":{"type":"boolean","description":"A Boolean that determines whether CloudFront adds the ``Server-Timing`` header to HTTP responses that it sends in response to requests that match a cache behavior that's associated with this response headers policy."},"samplingRate":{"type":"number","description":"A number 0–100 (inclusive) that specifies the percentage of responses that you want CloudFront to add the ``Server-Timing`` header to. When you set the sampling rate to 100, CloudFront adds the ``Server-Timing`` header to the HTTP response for every request that matches the cache behavior that this response headers policy is attached to. When you set it to 50, CloudFront adds the header to 50% of the responses for requests that match the cache behavior. You can set the sampling rate to any number 0–100 with up to four decimal places."}},"type":"object","required":["enabled"]},"aws-native:cloudfront:ResponseHeadersPolicyStrictTransportSecurity":{"description":"Determines whether CloudFront includes the ``Strict-Transport-Security`` HTTP response header and the header's value.\n For more information about the ``Strict-Transport-Security`` HTTP response header, see [Strict-Transport-Security](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security) in the MDN Web Docs.","properties":{"accessControlMaxAgeSec":{"type":"integer","description":"A number that CloudFront uses as the value for the ``max-age`` directive in the ``Strict-Transport-Security`` HTTP response header."},"includeSubdomains":{"type":"boolean","description":"A Boolean that determines whether CloudFront includes the ``includeSubDomains`` directive in the ``Strict-Transport-Security`` HTTP response header."},"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides the ``Strict-Transport-Security`` HTTP response header received from the origin with the one specified in this response headers policy."},"preload":{"type":"boolean","description":"A Boolean that determines whether CloudFront includes the ``preload`` directive in the ``Strict-Transport-Security`` HTTP response header."}},"type":"object","required":["accessControlMaxAgeSec","override"]},"aws-native:cloudfront:ResponseHeadersPolicyXssProtection":{"description":"Determines whether CloudFront includes the ``X-XSS-Protection`` HTTP response header and the header's value.\n For more information about the ``X-XSS-Protection`` HTTP response header, see [X-XSS-Protection](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection) in the MDN Web Docs.","properties":{"modeBlock":{"type":"boolean","description":"A Boolean that determines whether CloudFront includes the ``mode=block`` directive in the ``X-XSS-Protection`` header.\n For more information about this directive, see [X-XSS-Protection](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection) in the MDN Web Docs."},"override":{"type":"boolean","description":"A Boolean that determines whether CloudFront overrides the ``X-XSS-Protection`` HTTP response header received from the origin with the one specified in this response headers policy."},"protection":{"type":"boolean","description":"A Boolean that determines the value of the ``X-XSS-Protection`` HTTP response header. When this setting is ``true``, the value of the ``X-XSS-Protection`` header is ``1``. When this setting is ``false``, the value of the ``X-XSS-Protection`` header is ``0``.\n For more information about these settings, see [X-XSS-Protection](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection) in the MDN Web Docs."},"reportUri":{"type":"string","description":"A reporting URI, which CloudFront uses as the value of the ``report`` directive in the ``X-XSS-Protection`` header.\n You cannot specify a ``ReportUri`` when ``ModeBlock`` is ``true``.\n For more information about using a reporting URL, see [X-XSS-Protection](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection) in the MDN Web Docs."}},"type":"object","required":["override","protection"]},"aws-native:cloudfront:TrustStoreCaCertificatesBundleS3Location":{"description":"The CA certificates bundle location in Amazon S3.","properties":{"bucket":{"type":"string","description":"The S3 bucket."},"key":{"type":"string","description":"The location's key."},"region":{"type":"string","description":"The location's Region."},"version":{"type":"string","description":"The location's version."}},"type":"object","required":["bucket","key","region"]},"aws-native:cloudfront:TrustStoreCaCertificatesBundleSource":{"description":"A CA certificates bundle source.","properties":{"caCertificatesBundleS3Location":{"$ref":"#/types/aws-native:cloudfront:TrustStoreCaCertificatesBundleS3Location","description":"The CA certificates bundle location in Amazon S3."}},"type":"object","required":["caCertificatesBundleS3Location"]},"aws-native:cloudfront:TrustStoreStatus":{"description":"The trust store's status.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"}]},"aws-native:cloudfront:TrustStoreTag":{"description":"A complex type that contains ``Tag`` key and ``Tag`` value.","properties":{"key":{"type":"string","description":"A string that contains ``Tag`` key.\n The string length should be between 1 and 128 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."},"value":{"type":"string","description":"A string that contains an optional ``Tag`` value.\n The string length should be between 0 and 256 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."}},"type":"object","required":["key","value"]},"aws-native:cloudfront:VpcOriginEndpointConfig":{"description":"An Amazon CloudFront VPC origin endpoint configuration.","properties":{"arn":{"type":"string","description":"The ARN of the CloudFront VPC origin endpoint configuration."},"httpPort":{"type":"integer","description":"The HTTP port for the CloudFront VPC origin endpoint configuration. The default value is ``80``."},"httpsPort":{"type":"integer","description":"The HTTPS port of the CloudFront VPC origin endpoint configuration. The default value is ``443``."},"name":{"type":"string","description":"The name of the CloudFront VPC origin endpoint configuration."},"originProtocolPolicy":{"type":"string","description":"The origin protocol policy for the CloudFront VPC origin endpoint configuration."},"originSslProtocols":{"type":"array","items":{"type":"string"},"description":"Specifies the minimum SSL/TLS protocol that CloudFront uses when connecting to your origin over HTTPS. Valid values include ``SSLv3``, ``TLSv1``, ``TLSv1.1``, and ``TLSv1.2``.\n For more information, see [Minimum Origin SSL Protocol](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistValuesOrigin.html#DownloadDistValuesOriginSSLProtocols) in the *Amazon CloudFront Developer Guide*."}},"type":"object","required":["arn","name"]},"aws-native:cloudfront:VpcOriginTag":{"description":"A complex type that contains ``Tag`` key and ``Tag`` value.","properties":{"key":{"type":"string","description":"A string that contains ``Tag`` key.\n The string length should be between 1 and 128 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."},"value":{"type":"string","description":"A string that contains an optional ``Tag`` value.\n The string length should be between 0 and 256 characters. Valid characters include ``a-z``, ``A-Z``, ``0-9``, space, and the special characters ``_ - . : / = + @``."}},"type":"object","required":["key","value"]},"aws-native:cloudtrail:ChannelDestination":{"description":"The resource that receives events arriving from a channel.","properties":{"location":{"type":"string","description":"The ARN of a resource that receives events from a channel."},"type":{"$ref":"#/types/aws-native:cloudtrail:ChannelDestinationType","description":"The type of destination for events arriving from a channel."}},"type":"object","required":["location","type"]},"aws-native:cloudtrail:ChannelDestinationType":{"description":"The type of destination for events arriving from a channel.","type":"string","enum":[{"name":"EventDataStore","value":"EVENT_DATA_STORE"}]},"aws-native:cloudtrail:ChannelTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cloudtrail:DashboardRefreshSchedule":{"description":"Configures the automatic refresh schedule for the dashboard. Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule.","properties":{"frequency":{"$ref":"#/types/aws-native:cloudtrail:DashboardRefreshScheduleFrequencyProperties","description":"The frequency at which you want the dashboard refreshed."},"status":{"$ref":"#/types/aws-native:cloudtrail:DashboardRefreshScheduleStatus","description":"The status of the schedule. Supported values are ENABLED and DISABLED."},"timeOfDay":{"type":"string","description":"StartTime of the automatic schedule refresh."}},"type":"object"},"aws-native:cloudtrail:DashboardRefreshScheduleFrequencyProperties":{"description":"The frequency at which you want the dashboard refreshed.","properties":{"unit":{"$ref":"#/types/aws-native:cloudtrail:DashboardRefreshScheduleFrequencyPropertiesUnit","description":"The frequency unit. Supported values are HOURS and DAYS."},"value":{"type":"integer","description":"The frequency value."}},"type":"object","required":["unit","value"]},"aws-native:cloudtrail:DashboardRefreshScheduleFrequencyPropertiesUnit":{"description":"The frequency unit. Supported values are HOURS and DAYS.","type":"string","enum":[{"name":"Hours","value":"HOURS"},{"name":"Days","value":"DAYS"}]},"aws-native:cloudtrail:DashboardRefreshScheduleStatus":{"description":"The status of the schedule. Supported values are ENABLED and DISABLED.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cloudtrail:DashboardStatus":{"description":"The status of the dashboard. Values are CREATING, CREATED, UPDATING, UPDATED and DELETING.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Created","value":"CREATED"},{"name":"Updating","value":"UPDATING"},{"name":"Updated","value":"UPDATED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:cloudtrail:DashboardTag":{"description":"An arbitrary set of tags (key-value pairs) for this dashboard.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cloudtrail:DashboardType":{"description":"The type of the dashboard. Values are CUSTOM and MANAGED.","type":"string","enum":[{"name":"Managed","value":"MANAGED"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:cloudtrail:DashboardWidget":{"description":"The dashboard widget","properties":{"queryParameters":{"type":"array","items":{"type":"string"},"description":"The placeholder keys in the QueryStatement. For example: $StartTime$, $EndTime$, $Period$."},"queryStatement":{"type":"string","description":"The SQL query statement on one or more event data stores."},"viewProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"The view properties of the widget."}},"type":"object","required":["queryStatement"]},"aws-native:cloudtrail:EventDataStoreAdvancedEventSelector":{"description":"Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.","properties":{"fieldSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreAdvancedFieldSelector"},"description":"Contains all selector statements in an advanced event selector."},"name":{"type":"string","description":"An optional, descriptive name for an advanced event selector, such as \"Log data events for only two S3 buckets\"."}},"type":"object","required":["fieldSelectors"]},"aws-native:cloudtrail:EventDataStoreAdvancedFieldSelector":{"description":"A single selector statement in an advanced event selector.","properties":{"endsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the last few characters of the event record field specified as the value of Field."},"equals":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields."},"field":{"type":"string","description":"A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN."},"notEndsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the last few characters of the event record field specified as the value of Field."},"notEquals":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the exact value of the event record field specified as the value of Field."},"notStartsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the first few characters of the event record field specified as the value of Field."},"startsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the first few characters of the event record field specified as the value of Field."}},"type":"object","required":["field"]},"aws-native:cloudtrail:EventDataStoreContextKeySelector":{"description":"An object that contains information types to be included in CloudTrail enriched events.","properties":{"equals":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the exact value of the event record field specified in Type."},"type":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreContextKeySelectorType","description":"Specifies the type of the event record field in ContextKeySelector. Valid values include RequestContext, TagContext."}},"type":"object","required":["equals","type"]},"aws-native:cloudtrail:EventDataStoreContextKeySelectorType":{"description":"Specifies the type of the event record field in ContextKeySelector. Valid values include RequestContext, TagContext.","type":"string","enum":[{"name":"RequestContext","value":"RequestContext"},{"name":"TagContext","value":"TagContext"}]},"aws-native:cloudtrail:EventDataStoreInsightSelector":{"description":"A string that contains Insights types that are logged on an event data store.","properties":{"insightType":{"type":"string","description":"The type of Insights to log on an event data store."}},"type":"object"},"aws-native:cloudtrail:EventDataStoreMaxEventSize":{"description":"Specifies the maximum size allowed for the event. Valid values are Standard and Large. If you add ContextKeySelectors, this value must be set to Large.","type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"Large","value":"Large"}]},"aws-native:cloudtrail:EventDataStoreTag":{"description":"An arbitrary set of tags (key-value pairs) for this event data store.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cloudtrail:TrailAdvancedEventSelector":{"description":"Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.","properties":{"fieldSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAdvancedFieldSelector"},"description":"Contains all selector statements in an advanced event selector."},"name":{"type":"string","description":"An optional, descriptive name for an advanced event selector, such as \"Log data events for only two S3 buckets\"."}},"type":"object","required":["fieldSelectors"]},"aws-native:cloudtrail:TrailAdvancedFieldSelector":{"description":"A single selector statement in an advanced event selector.","properties":{"endsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the last few characters of the event record field specified as the value of Field."},"equals":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields."},"field":{"type":"string","description":"A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN."},"notEndsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the last few characters of the event record field specified as the value of Field."},"notEquals":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the exact value of the event record field specified as the value of Field."},"notStartsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the first few characters of the event record field specified as the value of Field."},"startsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the first few characters of the event record field specified as the value of Field."}},"type":"object","required":["field"]},"aws-native:cloudtrail:TrailAggregationConfiguration":{"description":"Configure to add aggregation rules to aggregate CloudTrail Events.","properties":{"eventCategory":{"$ref":"#/types/aws-native:cloudtrail:TrailAggregationConfigurationEventCategory","description":"The category of events to be aggregated."},"templates":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailTemplate"},"description":"Contains all templates in an aggregation configuration."}},"type":"object","required":["eventCategory","templates"]},"aws-native:cloudtrail:TrailAggregationConfigurationEventCategory":{"description":"The category of events to be aggregated.","type":"string","enum":[{"name":"Data","value":"Data"}]},"aws-native:cloudtrail:TrailDataResource":{"description":"CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.","properties":{"type":{"type":"string","description":"The resource type in which you want to log data events. You can specify AWS::S3::Object or AWS::Lambda::Function resources."},"values":{"type":"array","items":{"type":"string"},"description":"An array of Amazon Resource Name (ARN) strings or partial ARN strings for the specified objects."}},"type":"object","required":["type"]},"aws-native:cloudtrail:TrailEventSelector":{"description":"The type of email sending events to publish to the event destination.","properties":{"dataResources":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailDataResource"},"description":"CloudTrail supports data event logging for Amazon S3 objects in standard S3 buckets, AWS Lambda functions, and Amazon DynamoDB tables with basic event selectors. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.\n\nFor more information, see [Data Events](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html) and [Limits in AWS CloudTrail](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/WhatIsCloudTrail-Limits.html) in the *AWS CloudTrail User Guide* .\n\n\u003e To log data events for all other resource types including objects stored in [directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-overview.html) , you must use [AdvancedEventSelectors](https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedEventSelector.html) . You must also use `AdvancedEventSelectors` if you want to filter on the `eventName` field."},"excludeManagementEventSources":{"type":"array","items":{"type":"string"},"description":"An optional list of service event sources from which you do not want management events to be logged on your trail. In this release, the list can be empty (disables the filter), or it can filter out AWS Key Management Service events by containing \"kms.amazonaws.com\". By default, ExcludeManagementEventSources is empty, and AWS KMS events are included in events that are logged to your trail."},"includeManagementEvents":{"type":"boolean","description":"Specify if you want your event selector to include management events for your trail."},"readWriteType":{"$ref":"#/types/aws-native:cloudtrail:TrailEventSelectorReadWriteType","description":"Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation."}},"type":"object"},"aws-native:cloudtrail:TrailEventSelectorReadWriteType":{"description":"Specify if you want your trail to log read-only events, write-only events, or all. For example, the EC2 GetConsoleOutput is a read-only API operation and RunInstances is a write-only API operation.","type":"string","enum":[{"name":"All","value":"All"},{"name":"ReadOnly","value":"ReadOnly"},{"name":"WriteOnly","value":"WriteOnly"}]},"aws-native:cloudtrail:TrailInsightSelector":{"description":"A string that contains insight types that are logged on a trail.","properties":{"eventCategories":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailSourceEventCategory"},"description":"The categories of events for which to log insights. By default, insights are logged for management events only."},"insightType":{"type":"string","description":"The type of insight to log on a trail."}},"type":"object"},"aws-native:cloudtrail:TrailSourceEventCategory":{"description":"Event category for an insight selector.","type":"string","enum":[{"name":"Management","value":"Management"},{"name":"Data","value":"Data"}]},"aws-native:cloudtrail:TrailTag":{"description":"An arbitrary set of tags (key-value pairs) for this trail.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cloudtrail:TrailTemplate":{"description":"A template used to configure aggregation rules.","type":"string","enum":[{"name":"ApiActivity","value":"API_ACTIVITY"},{"name":"ResourceAccess","value":"RESOURCE_ACCESS"},{"name":"UserActions","value":"USER_ACTIONS"}]},"aws-native:cloudwatch:AlarmDimension":{"description":"Dimension is an embedded property of the ``AWS::CloudWatch::Alarm`` type. Dimensions are name/value pairs that can be associated with a CW metric. You can specify a maximum of 30 dimensions for a given metric.","properties":{"name":{"type":"string","description":"The name of the dimension, from 1–255 characters in length. This dimension name must have been included when the metric was published."},"value":{"type":"string","description":"The value for the dimension, from 1–255 characters in length."}},"type":"object","required":["name","value"]},"aws-native:cloudwatch:AlarmMetric":{"description":"The ``Metric`` property type represents a specific metric. ``Metric`` is a property of the [MetricStat](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-alarm-metricstat.html) property type.","properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmDimension"},"description":"The metric dimensions that you want to be used for the metric that the alarm will watch."},"metricName":{"type":"string","description":"The name of the metric that you want the alarm to watch. This is a required field."},"namespace":{"type":"string","description":"The namespace of the metric that the alarm will watch."}},"type":"object"},"aws-native:cloudwatch:AlarmMetricDataQuery":{"description":"The ``MetricDataQuery`` property type specifies the metric data to return, and whether this call is just retrieving a batch set of data for one metric, or is performing a math expression on metric data. \n Any expression used must return a single time series. For more information, see [Metric Math Syntax and Functions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/using-metric-math.html#metric-math-syntax) in the *User Guide*.","properties":{"accountId":{"type":"string","description":"The ID of the account where the metrics are located, if this is a cross-account alarm."},"expression":{"type":"string","description":"The math expression to be performed on the returned data, if this object is performing a math expression. This expression can use the ``Id`` of the other metrics to refer to those metrics, and can also use the ``Id`` of other expressions to use the result of those expressions. For more information about metric math expressions, see [Metric Math Syntax and Functions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/using-metric-math.html#metric-math-syntax) in the *User Guide*.\n Within each MetricDataQuery object, you must specify either ``Expression`` or ``MetricStat`` but not both."},"id":{"type":"string","description":"A short name used to tie this object to the results in the response. This name must be unique within a single call to ``GetMetricData``. If you are performing math expressions on this set of data, this name represents that data and can serve as a variable in the mathematical expression. The valid characters are letters, numbers, and underscore. The first character must be a lowercase letter."},"label":{"type":"string","description":"A human-readable label for this metric or expression. This is especially useful if this is an expression, so that you know what the value represents. If the metric or expression is shown in a CW dashboard widget, the label is shown. If ``Label`` is omitted, CW generates a default."},"metricStat":{"$ref":"#/types/aws-native:cloudwatch:AlarmMetricStat","description":"The metric to be returned, along with statistics, period, and units. Use this parameter only if this object is retrieving a metric and not performing a math expression on returned data.\n Within one MetricDataQuery object, you must specify either ``Expression`` or ``MetricStat`` but not both."},"period":{"type":"integer","description":"The granularity, in seconds, of the returned data points. For metrics with regular resolution, a period can be as short as one minute (60 seconds) and must be a multiple of 60. For high-resolution metrics that are collected at intervals of less than one minute, the period can be 1, 5, 10, 20, 30, 60, or any multiple of 60. High-resolution metrics are those metrics stored by a ``PutMetricData`` operation that includes a ``StorageResolution of 1 second``."},"returnData":{"type":"boolean","description":"This option indicates whether to return the timestamps and raw data values of this metric.\n When you create an alarm based on a metric math expression, specify ``True`` for this value for only the one math expression that the alarm is based on. You must specify ``False`` for ``ReturnData`` for all the other metrics and expressions used in the alarm.\n This field is required."}},"type":"object","required":["id"]},"aws-native:cloudwatch:AlarmMetricStat":{"description":"This structure defines the metric to be returned, along with the statistics, period, and units.\n ``MetricStat`` is a property of the [MetricDataQuery](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudwatch-alarm-metricdataquery.html) property type.","properties":{"metric":{"$ref":"#/types/aws-native:cloudwatch:AlarmMetric","description":"The metric to return, including the metric name, namespace, and dimensions."},"period":{"type":"integer","description":"The granularity, in seconds, of the returned data points. For metrics with regular resolution, a period can be as short as one minute (60 seconds) and must be a multiple of 60. For high-resolution metrics that are collected at intervals of less than one minute, the period can be 1, 5, 10, 20, 30, 60, or any multiple of 60. High-resolution metrics are those metrics stored by a ``PutMetricData`` call that includes a ``StorageResolution`` of 1 second.\n If the ``StartTime`` parameter specifies a time stamp that is greater than 3 hours ago, you must specify the period as follows or no data points in that time range is returned:\n  +  Start time between 3 hours and 15 days ago - Use a multiple of 60 seconds (1 minute).\n  +  Start time between 15 and 63 days ago - Use a multiple of 300 seconds (5 minutes).\n  +  Start time greater than 63 days ago - Use a multiple of 3600 seconds (1 hour)."},"stat":{"type":"string","description":"The statistic to return. It can include any CW statistic or extended statistic. For a list of valid values, see the table in [Statistics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Statistic) in the *User Guide*."},"unit":{"type":"string","description":"The unit to use for the returned data points. \n Valid values are: Seconds, Microseconds, Milliseconds, Bytes, Kilobytes, Megabytes, Gigabytes, Terabytes, Bits, Kilobits, Megabits, Gigabits, Terabits, Percent, Count, Bytes/Second, Kilobytes/Second, Megabytes/Second, Gigabytes/Second, Terabytes/Second, Bits/Second, Kilobits/Second, Megabits/Second, Gigabits/Second, Terabits/Second, Count/Second, or None."}},"type":"object","required":["metric","period","stat"]},"aws-native:cloudwatch:AlarmMuteRuleStatus":{"description":"The current status of the AlarmMuteRule","type":"string","enum":[{"name":"Scheduled","value":"SCHEDULED"},{"name":"Active","value":"ACTIVE"},{"name":"Expired","value":"EXPIRED"}]},"aws-native:cloudwatch:AlarmMuteRuleTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cloudwatch:AlarmTag":{"description":"One of the key-value pairs associated with the alarm. Tags can help you organize and categorize your resources.","properties":{"key":{"type":"string","description":"A string that you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:cloudwatch:CompositeAlarmTag":{"description":"Metadata that you can assign to a composite alarm, Tags can help you organize and categorize your resources.","properties":{"key":{"type":"string","description":"A unique identifier for the tag. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:cloudwatch:MetricStreamFilter":{"description":"This structure defines the metrics that will be streamed.","properties":{"metricNames":{"type":"array","items":{"type":"string"},"description":"Only metrics with MetricNames matching these values will be streamed. Must be set together with Namespace."},"namespace":{"type":"string","description":"Only metrics with Namespace matching this value will be streamed."}},"type":"object","required":["namespace"]},"aws-native:cloudwatch:MetricStreamStatisticsConfiguration":{"description":"This structure specifies a list of additional statistics to stream, and the metrics to stream those additional statistics for. All metrics that match the combination of metric name and namespace will be streamed with the extended statistics, no matter their dimensions.","properties":{"additionalStatistics":{"type":"array","items":{"type":"string"},"description":"The additional statistics to stream for the metrics listed in IncludeMetrics."},"includeMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamStatisticsMetric"},"description":"An array that defines the metrics that are to have additional statistics streamed."}},"type":"object","required":["additionalStatistics","includeMetrics"]},"aws-native:cloudwatch:MetricStreamStatisticsMetric":{"description":"A structure that specifies the metric name and namespace for one metric that is going to have additional statistics included in the stream.","properties":{"metricName":{"type":"string","description":"The name of the metric."},"namespace":{"type":"string","description":"The namespace of the metric."}},"type":"object","required":["metricName","namespace"]},"aws-native:cloudwatch:MetricStreamTag":{"description":"Metadata that you can assign to a Metric Stream, consisting of a key-value pair.","properties":{"key":{"type":"string","description":"A unique identifier for the tag."},"value":{"type":"string","description":"String which you can use to describe or define the tag."}},"type":"object","required":["key","value"]},"aws-native:cloudwatch:MuteTargetsProperties":{"description":"Targets to be muted","properties":{"alarmNames":{"type":"array","items":{"type":"string"},"description":"The alarm names to be mute by the AlarmMuteRule"}},"type":"object","required":["alarmNames"]},"aws-native:cloudwatch:RuleProperties":{"description":"The rule for the mute","properties":{"schedule":{"$ref":"#/types/aws-native:cloudwatch:RulePropertiesScheduleProperties","description":"Schedule for the mute to be active"}},"type":"object","required":["schedule"]},"aws-native:cloudwatch:RulePropertiesScheduleProperties":{"description":"Schedule for the mute to be active","properties":{"duration":{"type":"string","description":"The duration of the schedule when it triggers"},"expression":{"type":"string","description":"The expression of the schedule"},"timezone":{"type":"string","description":"The timezone of the schedule"}},"type":"object","required":["duration","expression"]},"aws-native:codeartifact:DomainTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codeartifact:PackageGroupOriginConfiguration":{"properties":{"restrictions":{"$ref":"#/types/aws-native:codeartifact:PackageGroupRestrictions","description":"The origin configuration that is applied to the package group."}},"type":"object","required":["restrictions"]},"aws-native:codeartifact:PackageGroupRestrictionType":{"properties":{"repositories":{"type":"array","items":{"type":"string"}},"restrictionMode":{"$ref":"#/types/aws-native:codeartifact:PackageGroupRestrictionTypeRestrictionMode"}},"type":"object","required":["restrictionMode"]},"aws-native:codeartifact:PackageGroupRestrictionTypeRestrictionMode":{"type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Block","value":"BLOCK"},{"name":"AllowSpecificRepositories","value":"ALLOW_SPECIFIC_REPOSITORIES"},{"name":"Inherit","value":"INHERIT"}]},"aws-native:codeartifact:PackageGroupRestrictions":{"properties":{"externalUpstream":{"$ref":"#/types/aws-native:codeartifact:PackageGroupRestrictionType","description":"The external upstream restriction determines if new package versions can be ingested or retained from external connections."},"internalUpstream":{"$ref":"#/types/aws-native:codeartifact:PackageGroupRestrictionType","description":"The internal upstream restriction determines if new package versions can be ingested or retained from upstream repositories."},"publish":{"$ref":"#/types/aws-native:codeartifact:PackageGroupRestrictionType","description":"The publish restriction determines if new package versions can be published."}},"type":"object"},"aws-native:codeartifact:PackageGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codeartifact:RepositoryTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codebuild:FleetComputeConfiguration":{"properties":{"disk":{"type":"integer","description":"The amount of disk space of the instance type included in your fleet."},"instanceType":{"type":"string","description":"The EC2 instance type to be launched in your fleet."},"machineType":{"$ref":"#/types/aws-native:codebuild:FleetComputeConfigurationmachineType","description":"The machine type of the instance type included in your fleet."},"memory":{"type":"integer","description":"The amount of memory of the instance type included in your fleet."},"vCpu":{"type":"integer","description":"The number of vCPUs of the instance type included in your fleet."}},"type":"object"},"aws-native:codebuild:FleetComputeConfigurationmachineType":{"description":"The machine type of the instance type included in your fleet.","type":"string","enum":[{"name":"General","value":"GENERAL"},{"name":"Nvme","value":"NVME"}]},"aws-native:codebuild:FleetComputeType":{"description":"Information about the compute resources the compute fleet uses. Available values include:\n\n- `ATTRIBUTE_BASED_COMPUTE` : Specify the amount of vCPUs, memory, disk space, and the type of machine.\n\n\u003e If you use `ATTRIBUTE_BASED_COMPUTE` , you must define your attributes by using `computeConfiguration` . AWS CodeBuild will select the cheapest instance that satisfies your specified attributes. For more information, see [Reserved capacity environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.types) in the *AWS CodeBuild User Guide* .\n- `BUILD_GENERAL1_SMALL` : Use up to 4 GiB memory and 2 vCPUs for builds.\n- `BUILD_GENERAL1_MEDIUM` : Use up to 8 GiB memory and 4 vCPUs for builds.\n- `BUILD_GENERAL1_LARGE` : Use up to 16 GiB memory and 8 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_XLARGE` : Use up to 72 GiB memory and 36 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_2XLARGE` : Use up to 144 GiB memory, 72 vCPUs, and 824 GB of SSD storage for builds. This compute type supports Docker images up to 100 GB uncompressed.\n- `BUILD_LAMBDA_1GB` : Use up to 1 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_2GB` : Use up to 2 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_4GB` : Use up to 4 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_8GB` : Use up to 8 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_10GB` : Use up to 10 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n\nIf you use `BUILD_GENERAL1_SMALL` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 16 GiB memory, 4 vCPUs, and 1 NVIDIA A10G Tensor Core GPU for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs on ARM-based processors for builds.\n\nIf you use `BUILD_GENERAL1_LARGE` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 255 GiB memory, 32 vCPUs, and 4 NVIDIA Tesla V100 GPUs for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs on ARM-based processors for builds.\n\nFor more information, see [On-demand environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types) in the *AWS CodeBuild User Guide.*","type":"string","enum":[{"name":"BuildGeneral1Small","value":"BUILD_GENERAL1_SMALL"},{"name":"BuildGeneral1Medium","value":"BUILD_GENERAL1_MEDIUM"},{"name":"BuildGeneral1Large","value":"BUILD_GENERAL1_LARGE"},{"name":"BuildGeneral1Xlarge","value":"BUILD_GENERAL1_XLARGE"},{"name":"BuildGeneral12xlarge","value":"BUILD_GENERAL1_2XLARGE"},{"name":"AttributeBasedCompute","value":"ATTRIBUTE_BASED_COMPUTE"},{"name":"CustomInstanceType","value":"CUSTOM_INSTANCE_TYPE"}]},"aws-native:codebuild:FleetEnvironmentType":{"description":"The environment type of the compute fleet.\n\n- The environment type `ARM_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), EU (Frankfurt), and South America (São Paulo).\n- The environment type `ARM_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_GPU_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), and Asia Pacific (Sydney).\n- The environment type `MAC_ARM` is available only in regions US East (Ohio), US East (N. Virginia), US West (Oregon), Europe (Frankfurt), and Asia Pacific (Sydney).\n- The environment type `WINDOWS_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `WINDOWS_SERVER_2019_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Mumbai) and EU (Ireland).\n- The environment type `WINDOWS_SERVER_2022_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Tokyo), South America (São Paulo) and Asia Pacific (Mumbai).\n\nFor more information, see [Build environment compute types](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-compute-types.html) in the *AWS CodeBuild user guide* .","type":"string","enum":[{"name":"WindowsServer2019Container","value":"WINDOWS_SERVER_2019_CONTAINER"},{"name":"WindowsServer2022Container","value":"WINDOWS_SERVER_2022_CONTAINER"},{"name":"LinuxContainer","value":"LINUX_CONTAINER"},{"name":"LinuxGpuContainer","value":"LINUX_GPU_CONTAINER"},{"name":"ArmContainer","value":"ARM_CONTAINER"},{"name":"MacArm","value":"MAC_ARM"},{"name":"LinuxEc2","value":"LINUX_EC2"},{"name":"ArmEc2","value":"ARM_EC2"},{"name":"WindowsEc2","value":"WINDOWS_EC2"}]},"aws-native:codebuild:FleetOverflowBehavior":{"description":"The compute fleet overflow behavior.\n\n- For overflow behavior `QUEUE` , your overflow builds need to wait on the existing fleet instance to become available.\n- For overflow behavior `ON_DEMAND` , your overflow builds run on CodeBuild on-demand.\n\n\u003e If you choose to set your overflow behavior to on-demand while creating a VPC-connected fleet, make sure that you add the required VPC permissions to your project service role. For more information, see [Example policy statement to allow CodeBuild access to AWS services required to create a VPC network interface](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-create-vpc-network-interface) .","type":"string","enum":[{"name":"Queue","value":"QUEUE"},{"name":"OnDemand","value":"ON_DEMAND"}]},"aws-native:codebuild:FleetProxyConfiguration":{"properties":{"defaultBehavior":{"$ref":"#/types/aws-native:codebuild:FleetProxyConfigurationDefaultBehavior","description":"The default behavior of outgoing traffic."},"orderedProxyRules":{"type":"array","items":{"$ref":"#/types/aws-native:codebuild:FleetProxyRule"},"description":"An array of `FleetProxyRule` objects that represent the specified destination domains or IPs to allow or deny network access control to."}},"type":"object"},"aws-native:codebuild:FleetProxyConfigurationDefaultBehavior":{"description":"The default behavior of outgoing traffic.","type":"string","enum":[{"name":"AllowAll","value":"ALLOW_ALL"},{"name":"DenyAll","value":"DENY_ALL"}]},"aws-native:codebuild:FleetProxyRule":{"properties":{"effect":{"$ref":"#/types/aws-native:codebuild:FleetProxyRuleEffect","description":"The behavior of the proxy rule."},"entities":{"type":"array","items":{"type":"string"},"description":"The destination of the proxy rule."},"type":{"$ref":"#/types/aws-native:codebuild:FleetProxyRuleType","description":"The type of proxy rule."}},"type":"object"},"aws-native:codebuild:FleetProxyRuleEffect":{"description":"The behavior of the proxy rule.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Deny","value":"DENY"}]},"aws-native:codebuild:FleetProxyRuleType":{"description":"The type of proxy rule.","type":"string","enum":[{"name":"Domain","value":"DOMAIN"},{"name":"Ip","value":"IP"}]},"aws-native:codebuild:FleetScalingConfigurationInput":{"properties":{"maxCapacity":{"type":"integer","description":"The maximum number of instances in the fleet when auto-scaling."},"scalingType":{"$ref":"#/types/aws-native:codebuild:FleetScalingConfigurationInputScalingType","description":"The scaling type for a compute fleet."},"targetTrackingScalingConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:codebuild:FleetTargetTrackingScalingConfiguration"},"description":"A list of `TargetTrackingScalingConfiguration` objects."}},"type":"object"},"aws-native:codebuild:FleetScalingConfigurationInputScalingType":{"description":"The scaling type for a compute fleet.","type":"string","enum":[{"name":"TargetTrackingScaling","value":"TARGET_TRACKING_SCALING"}]},"aws-native:codebuild:FleetTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codebuild:FleetTargetTrackingScalingConfiguration":{"properties":{"metricType":{"$ref":"#/types/aws-native:codebuild:FleetTargetTrackingScalingConfigurationMetricType","description":"The metric type to determine auto-scaling."},"targetValue":{"type":"number","description":"The value of `metricType` when to start scaling."}},"type":"object"},"aws-native:codebuild:FleetTargetTrackingScalingConfigurationMetricType":{"description":"The metric type to determine auto-scaling.","type":"string","enum":[{"name":"FleetUtilizationRate","value":"FLEET_UTILIZATION_RATE"}]},"aws-native:codebuild:FleetVpcConfig":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of one or more security groups IDs in your Amazon VPC."},"subnets":{"type":"array","items":{"type":"string"},"description":"A list of one or more subnet IDs in your Amazon VPC."},"vpcId":{"type":"string","description":"The ID of the Amazon VPC."}},"type":"object"},"aws-native:codeconnections:ConnectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codedeploy:ApplicationTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:codedeploy:DeploymentConfigMinimumHealthyHosts":{"properties":{"type":{"type":"string","description":"The minimum healthy instance type:\n\n- HOST_COUNT: The minimum number of healthy instance as an absolute value.\n- FLEET_PERCENT: The minimum number of healthy instance as a percentage of the total number of instance in the deployment.\n\nIn an example of nine instance, if a HOST_COUNT of six is specified, deploy to up to three instances at a time. The deployment is successful if six or more instances are deployed to successfully. Otherwise, the deployment fails. If a FLEET_PERCENT of 40 is specified, deploy to up to five instance at a time. The deployment is successful if four or more instance are deployed to successfully. Otherwise, the deployment fails.\n\n\u003e In a call to `GetDeploymentConfig` , CodeDeployDefault.OneAtATime returns a minimum healthy instance type of MOST_CONCURRENCY and a value of 1. This means a deployment to only one instance at a time. (You cannot set the type to MOST_CONCURRENCY, only to HOST_COUNT or FLEET_PERCENT.) In addition, with CodeDeployDefault.OneAtATime, AWS CodeDeploy attempts to ensure that all instances but one are kept in a healthy state during the deployment. Although this allows one instance at a time to be taken offline for a new deployment, it also means that if the deployment to the last instance fails, the overall deployment is still successful. \n\nFor more information, see [AWS CodeDeploy Instance Health](https://docs.aws.amazon.com//codedeploy/latest/userguide/instances-health.html) in the *AWS CodeDeploy User Guide* ."},"value":{"type":"integer","description":"The minimum healthy instance value."}},"type":"object","required":["type","value"]},"aws-native:codedeploy:DeploymentConfigMinimumHealthyHostsPerZone":{"properties":{"type":{"type":"string","description":"The `type` associated with the `MinimumHealthyHostsPerZone` option."},"value":{"type":"integer","description":"The `value` associated with the `MinimumHealthyHostsPerZone` option."}},"type":"object","required":["type","value"]},"aws-native:codedeploy:DeploymentConfigTimeBasedCanary":{"properties":{"canaryInterval":{"type":"integer","description":"The number of minutes between the first and second traffic shifts of a `TimeBasedCanary` deployment."},"canaryPercentage":{"type":"integer","description":"The percentage of traffic to shift in the first increment of a `TimeBasedCanary` deployment."}},"type":"object","required":["canaryInterval","canaryPercentage"]},"aws-native:codedeploy:DeploymentConfigTimeBasedLinear":{"properties":{"linearInterval":{"type":"integer","description":"The number of minutes between each incremental traffic shift of a `TimeBasedLinear` deployment."},"linearPercentage":{"type":"integer","description":"The percentage of traffic that is shifted at the start of each increment of a `TimeBasedLinear` deployment."}},"type":"object","required":["linearInterval","linearPercentage"]},"aws-native:codedeploy:DeploymentConfigTrafficRoutingConfig":{"properties":{"timeBasedCanary":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigTimeBasedCanary","description":"A configuration that shifts traffic from one version of a Lambda function or ECS task set to another in two increments. The original and target Lambda function versions or ECS task sets are specified in the deployment's AppSpec file."},"timeBasedLinear":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigTimeBasedLinear","description":"A configuration that shifts traffic from one version of a Lambda function or Amazon ECS task set to another in equal increments, with an equal number of minutes between each increment. The original and target Lambda function versions or Amazon ECS task sets are specified in the deployment's AppSpec file."},"type":{"type":"string","description":"The type of traffic shifting ( `TimeBasedCanary` or `TimeBasedLinear` ) used by a deployment configuration."}},"type":"object","required":["type"]},"aws-native:codedeploy:DeploymentConfigZonalConfig":{"properties":{"firstZoneMonitorDurationInSeconds":{"type":"integer","description":"The period of time, in seconds, that CodeDeploy must wait after completing a deployment to the *first* Availability Zone. CodeDeploy will wait this amount of time before starting a deployment to the second Availability Zone. You might set this option if you want to allow extra bake time for the first Availability Zone. If you don't specify a value for `firstZoneMonitorDurationInSeconds` , then CodeDeploy uses the `monitorDurationInSeconds` value for the first Availability Zone.\n\nFor more information about the zonal configuration feature, see [zonal configuration](https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations-create.html#zonal-config) in the *CodeDeploy User Guide* ."},"minimumHealthyHostsPerZone":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigMinimumHealthyHostsPerZone","description":"The number or percentage of instances that must remain available per Availability Zone during a deployment. This option works in conjunction with the `MinimumHealthyHosts` option. For more information, see [About the minimum number of healthy hosts per Availability Zone](https://docs.aws.amazon.com//codedeploy/latest/userguide/instances-health.html#minimum-healthy-hosts-az) in the *CodeDeploy User Guide* .\n\nIf you don't specify the `minimumHealthyHostsPerZone` option, then CodeDeploy uses a default value of `0` percent.\n\nFor more information about the zonal configuration feature, see [zonal configuration](https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations-create.html#zonal-config) in the *CodeDeploy User Guide* ."},"monitorDurationInSeconds":{"type":"integer","description":"The period of time, in seconds, that CodeDeploy must wait after completing a deployment to an Availability Zone. CodeDeploy will wait this amount of time before starting a deployment to the next Availability Zone. Consider adding a monitor duration to give the deployment some time to prove itself (or 'bake') in one Availability Zone before it is released in the next zone. If you don't specify a `monitorDurationInSeconds` , CodeDeploy starts deploying to the next Availability Zone immediately.\n\nFor more information about the zonal configuration feature, see [zonal configuration](https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations-create.html#zonal-config) in the *CodeDeploy User Guide* ."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupAlarm":{"description":"Specifies a CloudWatch alarm to use for an AWS CodeDeploy deployment group.","properties":{"name":{"type":"string","description":"The name of the alarm. Maximum length is 255 characters. Each alarm name can be used only once in a list of alarms."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupAlarmConfiguration":{"description":"Configures CloudWatch alarms for an AWS CodeDeploy deployment group.","properties":{"alarms":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAlarm"},"description":"A list of alarms configured for the deployment or deployment group. A maximum of 10 alarms can be added."},"enabled":{"type":"boolean","description":"Indicates whether the alarm configuration is enabled."},"ignorePollAlarmFailure":{"type":"boolean","description":"Indicates whether a deployment should continue if information about the current state of alarms cannot be retrieved from Amazon CloudWatch. The default value is false."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupAutoRollbackConfiguration":{"description":"Configures automatic rollback for an AWS CodeDeploy deployment group when a deployment is not completed successfully.","properties":{"enabled":{"type":"boolean","description":"Indicates whether a defined automatic rollback configuration is currently enabled."},"events":{"type":"array","items":{"type":"string"},"description":"The event type or types that trigger a rollback."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupBlueGreenDeploymentConfiguration":{"description":"Information about blue/green deployment options for a deployment group.","properties":{"deploymentReadyOption":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeploymentReadyOption","description":"Information about the action to take when newly provisioned instances are ready to receive traffic in a blue/green deployment."},"greenFleetProvisioningOption":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupGreenFleetProvisioningOption","description":"Information about how instances are provisioned for a replacement environment in a blue/green deployment."},"terminateBlueInstancesOnDeploymentSuccess":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupBlueInstanceTerminationOption","description":"Information about whether to terminate instances in the original fleet during a blue/green deployment."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupBlueInstanceTerminationOption":{"description":"Information about whether instances in the original environment are terminated when a blue/green deployment is successful. BlueInstanceTerminationOption does not apply to Lambda deployments.","properties":{"action":{"type":"string","description":"The action to take on instances in the original environment after a successful blue/green deployment."},"terminationWaitTimeInMinutes":{"type":"integer","description":"For an Amazon EC2 deployment, the number of minutes to wait after a successful blue/green deployment before terminating instances from the original environment. For an Amazon ECS deployment, the number of minutes before deleting the original (blue) task set. During an Amazon ECS deployment, CodeDeploy shifts traffic from the original (blue) task set to a replacement (green) task set. The maximum setting is 2880 minutes (2 days)."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupDeployment":{"description":"Specifies an AWS CodeDeploy application revision to be deployed to instances in the deployment group. If you specify an application revision, your target revision is deployed as soon as the provisioning process is complete.","properties":{"description":{"type":"string","description":"A description of the deployment."},"ignoreApplicationStopFailures":{"type":"boolean","description":"If true, then if an ApplicationStop, BeforeBlockTraffic, or AfterBlockTraffic deployment lifecycle event to an instance fails, then the deployment continues to the next deployment lifecycle event. If false or not specified, then if a lifecycle event fails during a deployment to an instance, that deployment fails. If deployment to that instance is part of an overall deployment and the number of healthy hosts is not less than the minimum number of healthy hosts, then a deployment to the next instance is attempted."},"revision":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupRevisionLocation","description":"Information about the location of stored application artifacts and the service from which to retrieve them."}},"type":"object","required":["revision"]},"aws-native:codedeploy:DeploymentGroupDeploymentReadyOption":{"description":"Information about when to reroute traffic from an original environment to a replacement environment in a blue/green deployment.","properties":{"actionOnTimeout":{"type":"string","description":"Information about when to reroute traffic from an original environment to a replacement environment in a blue/green deployment. CONTINUE_DEPLOYMENT: Register new instances with the load balancer immediately after the new application revision is installed on the instances in the replacement environment. STOP_DEPLOYMENT: Do not register new instances with a load balancer unless traffic rerouting is started using ContinueDeployment . If traffic rerouting is not started before the end of the specified wait period, the deployment status is changed to Stopped."},"waitTimeInMinutes":{"type":"integer","description":"The number of minutes to wait before the status of a blue/green deployment is changed to Stopped if rerouting is not started manually. Applies only to the STOP_DEPLOYMENT option for actionOnTimeout."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupDeploymentStyle":{"description":"Information about the type of deployment, either in-place or blue/green, you want to run and whether to route deployment traffic behind a load balancer.","properties":{"deploymentOption":{"type":"string","description":"Indicates whether to route deployment traffic behind a load balancer."},"deploymentType":{"type":"string","description":"Indicates whether to run an in-place or blue/green deployment."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupEc2TagFilter":{"description":"Information about an Amazon EC2 tag filter.","properties":{"key":{"type":"string","description":"The tag filter key."},"type":{"type":"string","description":"The tag filter type."},"value":{"type":"string","description":"The tag filter value."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupEc2TagSet":{"description":"Specifies information about groups of tags applied to Amazon EC2 instances. The deployment group includes only Amazon EC2 instances identified by all the tag groups. Cannot be used in the same template as EC2TagFilters.","properties":{"ec2TagSetList":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagSetListObject"},"description":"The Amazon EC2 tags that are already applied to Amazon EC2 instances that you want to include in the deployment group. CodeDeploy includes all Amazon EC2 instances identified by any of the tags you specify in this deployment group."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupEc2TagSetListObject":{"description":"The EC2TagSet property type specifies information about groups of tags applied to Amazon EC2 instances. The deployment group includes only Amazon EC2 instances identified by all the tag groups. Cannot be used in the same template as EC2TagFilters.","properties":{"ec2TagGroup":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagFilter"},"description":"A list that contains other lists of Amazon EC2 instance tag groups. For an instance to be included in the deployment group, it must be identified by all of the tag groups in the list."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupEcsService":{"description":"Contains the service and cluster names used to identify an Amazon ECS deployment's target.","properties":{"clusterName":{"type":"string","description":"The name of the cluster that the Amazon ECS service is associated with."},"serviceName":{"type":"string","description":"The name of the target Amazon ECS service."}},"type":"object","required":["clusterName","serviceName"]},"aws-native:codedeploy:DeploymentGroupElbInfo":{"description":"The ELBInfo property type specifies information about the Elastic Load Balancing load balancer used for an CodeDeploy deployment group. If you specify the ELBInfo property, the DeploymentStyle.DeploymentOption property must be set to WITH_TRAFFIC_CONTROL for AWS CodeDeploy to route your traffic using the specified load balancers.","properties":{"name":{"type":"string","description":"For blue/green deployments, the name of the load balancer that is used to route traffic from original instances to replacement instances in a blue/green deployment. For in-place deployments, the name of the load balancer that instances are deregistered from so they are not serving traffic during a deployment, and then re-registered with after the deployment is complete."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupGitHubLocation":{"description":"Specifies the location of an application revision that is stored in GitHub.","properties":{"commitId":{"type":"string","description":"The SHA1 commit ID of the GitHub commit that represents the bundled artifacts for the application revision."},"repository":{"type":"string","description":"The GitHub account and repository pair that stores the application revision to be deployed."}},"type":"object","required":["commitId","repository"]},"aws-native:codedeploy:DeploymentGroupGreenFleetProvisioningOption":{"description":"Information about the instances that belong to the replacement environment in a blue/green deployment.","properties":{"action":{"type":"string","description":"The method used to add instances to a replacement environment."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupLoadBalancerInfo":{"description":"Specifies information about the load balancer or target group used for an AWS CodeDeploy deployment group. For AWS CloudFormation to use the properties specified in LoadBalancerInfo, the DeploymentStyle.DeploymentOption property must be set to WITH_TRAFFIC_CONTROL.","properties":{"elbInfoList":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupElbInfo"},"description":"An array that contains information about the load balancers to use for load balancing in a deployment. If you're using Classic Load Balancers, specify those load balancers in this array."},"targetGroupInfoList":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTargetGroupInfo"},"description":"An array that contains information about the target groups to use for load balancing in a deployment. If you're using Application Load Balancers and Network Load Balancers, specify their associated target groups in this array."},"targetGroupPairInfoList":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTargetGroupPairInfo"},"description":"The target group pair information. This is an array of TargeGroupPairInfo objects with a maximum size of one."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupOnPremisesTagSet":{"description":"Specifies a list containing other lists of on-premises instance tag groups. In order for an instance to be included in the deployment group, it must be identified by all the tag groups in the list.","properties":{"onPremisesTagSetList":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupOnPremisesTagSetListObject"},"description":"A list that contains other lists of on-premises instance tag groups. For an instance to be included in the deployment group, it must be identified by all of the tag groups in the list."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupOnPremisesTagSetListObject":{"description":"Specifies lists of on-premises instance tag groups. In order for an instance to be included in the deployment group, it must be identified by all the tag groups in the list.","properties":{"onPremisesTagGroup":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTagFilter"},"description":"Information about groups of on-premises instance tags."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupRevisionLocation":{"description":"Defines the location of the CodeDeploy application revision to deploy.","properties":{"gitHubLocation":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupGitHubLocation","description":"Information about the location of application artifacts stored in GitHub."},"revisionType":{"type":"string","description":"The type of application revision."},"s3Location":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupS3Location","description":"Information about the location of a revision stored in Amazon S3."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupS3Location":{"description":"Information about the location of application artifacts stored in Amazon S3.","properties":{"bucket":{"type":"string","description":"The name of the Amazon S3 bucket where the application revision is stored."},"bundleType":{"type":"string","description":"The file type of the application revision."},"eTag":{"type":"string","description":"The ETag of the Amazon S3 object that represents the bundled artifacts for the application revision. If the ETag is not specified as an input parameter, ETag validation of the object is skipped."},"key":{"type":"string","description":"The name of the Amazon S3 object that represents the bundled artifacts for the application revision."},"version":{"type":"string","description":"A specific version of the Amazon S3 object that represents the bundled artifacts for the application revision. If the version is not specified, the system uses the most recent version by default."}},"type":"object","required":["bucket","key"]},"aws-native:codedeploy:DeploymentGroupTag":{"description":"Information about a tag.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:codedeploy:DeploymentGroupTagFilter":{"description":"Specifies which on-premises instances to associate with the deployment group.","properties":{"key":{"type":"string","description":"The on-premises instance tag filter key."},"type":{"type":"string","description":"The on-premises instance tag filter type"},"value":{"type":"string","description":"The on-premises instance tag filter value."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupTargetGroupInfo":{"description":"Specifies information about a target group in Elastic Load Balancing to use in a deployment. Instances are registered as targets in a target group, and traffic is routed to the target group. The DeploymentStyle.DeploymentOption property must be set to WITH_TRAFFIC_CONTROL for CodeDeploy to route your traffic using the specified target groups.","properties":{"name":{"type":"string","description":"For blue/green deployments, the name of the target group that instances in the original environment are deregistered from, and instances in the replacement environment registered with. For in-place deployments, the name of the target group that instances are deregistered from, so they are not serving traffic during a deployment, and then re-registered with after the deployment completes. No duplicates allowed."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupTargetGroupPairInfo":{"description":"The TargetGroupInfo property type specifies information about a target group in Elastic Load Balancing to use in a deployment. Instances are registered as targets in a target group, and traffic is routed to the target group. The DeploymentStyle.DeploymentOption property must be set to WITH_TRAFFIC_CONTROL for CodeDeploy to route your traffic using the specified target groups.","properties":{"prodTrafficRoute":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTrafficRoute","description":"The path used by a load balancer to route production traffic when an Amazon ECS deployment is complete."},"targetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTargetGroupInfo"},"description":"One pair of target groups. One is associated with the original task set. The second is associated with the task set that serves traffic after the deployment is complete."},"testTrafficRoute":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTrafficRoute","description":"An optional path used by a load balancer to route test traffic after an Amazon ECS deployment. Validation can occur while test traffic is served during a deployment."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupTrafficRoute":{"description":"Information about a listener. The listener contains the path used to route traffic that is received from the load balancer to a target group.","properties":{"listenerArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) of one listener. The listener identifies the route between a target group and a load balancer. This is an array of strings with a maximum size of one."}},"type":"object"},"aws-native:codedeploy:DeploymentGroupTriggerConfig":{"description":"Information about notification triggers for the deployment group.","properties":{"triggerEvents":{"type":"array","items":{"type":"string"},"description":"The event type or types that trigger notifications."},"triggerName":{"type":"string","description":"The name of the notification trigger."},"triggerTargetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Simple Notification Service topic through which notifications about deployment or instance events are sent."}},"type":"object"},"aws-native:codeguruprofiler:AgentPermissionsProperties":{"description":"The agent permissions attached to this profiling group.","properties":{"principals":{"type":"array","items":{"type":"string"},"description":"The principals for the agent permissions."}},"type":"object","required":["principals"]},"aws-native:codeguruprofiler:ProfilingGroupChannel":{"description":"Notification medium for users to get alerted for events that occur in application profile. We support SNS topic as a notification channel.","properties":{"channelId":{"type":"string","description":"The channel ID."},"channelUri":{"type":"string","description":"The channel URI."}},"type":"object","required":["channelUri"]},"aws-native:codeguruprofiler:ProfilingGroupComputePlatform":{"description":"The compute platform of the profiling group.","type":"string","enum":[{"name":"Default","value":"Default"},{"name":"AwsLambda","value":"AWSLambda"}]},"aws-native:codeguruprofiler:ProfilingGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. The allowed characters across services are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. The allowed characters across services are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @."}},"type":"object","required":["key","value"]},"aws-native:codegurureviewer:RepositoryAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. The allowed characters across services are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. The allowed characters across services are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @."}},"type":"object","required":["key","value"]},"aws-native:codegurureviewer:RepositoryAssociationType":{"description":"The type of repository to be associated.","type":"string","enum":[{"name":"CodeCommit","value":"CodeCommit"},{"name":"Bitbucket","value":"Bitbucket"},{"name":"GitHubEnterpriseServer","value":"GitHubEnterpriseServer"},{"name":"S3Bucket","value":"S3Bucket"}]},"aws-native:codepipeline:CustomActionTypeArtifactDetails":{"description":"Returns information about the details of an artifact.","properties":{"maximumCount":{"type":"integer","description":"The maximum number of artifacts allowed for the action type."},"minimumCount":{"type":"integer","description":"The minimum number of artifacts allowed for the action type."}},"type":"object","required":["maximumCount","minimumCount"]},"aws-native:codepipeline:CustomActionTypeConfigurationProperties":{"description":"The configuration properties for the custom action.","properties":{"description":{"type":"string","description":"The description of the action configuration property that is displayed to users. "},"key":{"type":"boolean","description":"Whether the configuration property is a key."},"name":{"type":"string","description":"The name of the action configuration property."},"queryable":{"type":"boolean","description":"Indicates that the property is used with PollForJobs. When creating a custom action, an action can have up to one queryable property. If it has one, that property must be both required and not secret.If you create a pipeline with a custom action type, and that custom action contains a queryable property, the value for that configuration property is subject to other restrictions. The value must be less than or equal to twenty (20) characters. The value can contain only alphanumeric characters, underscores, and hyphens. "},"required":{"type":"boolean","description":"Whether the configuration property is a required value."},"secret":{"type":"boolean","description":"Whether the configuration property is secret. Secrets are hidden from all calls except for GetJobDetails, GetThirdPartyJobDetails, PollForJobs, and PollForThirdPartyJobs."},"type":{"type":"string","description":"The type of the configuration property."}},"type":"object","required":["key","name","required","secret"]},"aws-native:codepipeline:CustomActionTypeSettings":{"description":"Settings is a property of the AWS::CodePipeline::CustomActionType resource that provides URLs that users can access to view information about the CodePipeline custom action. ","properties":{"entityUrlTemplate":{"type":"string","description":"The URL returned to the AWS CodePipeline console that provides a deep link to the resources of the external system, such as the configuration page for an AWS CodeDeploy deployment group. This link is provided as part of the action display in the pipeline. "},"executionUrlTemplate":{"type":"string","description":"The URL returned to the AWS CodePipeline console that contains a link to the top-level landing page for the external system, such as the console page for AWS CodeDeploy. This link is shown on the pipeline view page in the AWS CodePipeline console and provides a link to the execution entity of the external action. "},"revisionUrlTemplate":{"type":"string","description":"The URL returned to the AWS CodePipeline console that contains a link to the page where customers can update or change the configuration of the external action. "},"thirdPartyConfigurationUrl":{"type":"string","description":"The URL of a sign-up page where users can sign up for an external service and perform initial configuration of the action provided by that service."}},"type":"object"},"aws-native:codepipeline:CustomActionTypeTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:codepipeline:PipelineActionDeclaration":{"description":"Represents information about an action declaration.","properties":{"actionTypeId":{"$ref":"#/types/aws-native:codepipeline:PipelineActionTypeId","description":"Specifies the action type and the provider of the action."},"commands":{"type":"array","items":{"type":"string"},"description":"The shell commands to run with your compute action in CodePipeline."},"configuration":{"$ref":"pulumi.json#/Any","description":"The action's configuration. These are key-value pairs that specify input values for an action."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineEnvironmentVariable"},"description":"The list of environment variables that are input to a compute based action."},"inputArtifacts":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineInputArtifact"},"description":"The name or ID of the artifact consumed by the action, such as a test or build artifact. While the field is not a required parameter, most actions have an action configuration that requires a specified quantity of input artifacts. To refer to the action configuration specification by action provider, see the [Action structure reference](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference.html) in the *AWS CodePipeline User Guide* .\n\n\u003e For a CodeBuild action with multiple input artifacts, one of your input sources must be designated the PrimarySource. For more information, see the [CodeBuild action reference page](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-CodeBuild.html) in the *AWS CodePipeline User Guide* ."},"name":{"type":"string","description":"The action declaration's name."},"namespace":{"type":"string","description":"The variable namespace associated with the action. All variables produced as output by this action fall under this namespace."},"outputArtifacts":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineOutputArtifact"},"description":"The name or ID of the result of the action declaration, such as a test or build artifact. While the field is not a required parameter, most actions have an action configuration that requires a specified quantity of output artifacts. To refer to the action configuration specification by action provider, see the [Action structure reference](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference.html) in the *AWS CodePipeline User Guide* ."},"outputVariables":{"type":"array","items":{"type":"string"},"description":"The list of variables that are to be exported from the compute action."},"region":{"type":"string","description":"The action declaration's AWS Region, such as us-east-1."},"roleArn":{"type":"string","description":"The ARN of the IAM service role that performs the declared action. This is assumed through the roleArn for the pipeline."},"runOrder":{"type":"integer","description":"The order in which actions are run."},"timeoutInMinutes":{"type":"integer","description":"A timeout duration in minutes that can be applied against the ActionType’s default timeout value specified in Quotas for AWS CodePipeline. This attribute is available only to the manual approval ActionType."}},"type":"object","required":["actionTypeId","name"]},"aws-native:codepipeline:PipelineActionTypeId":{"description":"Represents information about an action type.","properties":{"category":{"$ref":"#/types/aws-native:codepipeline:PipelineActionTypeIdCategory","description":"A category defines what kind of action can be taken in the stage, and constrains the provider type for the action. Valid categories are limited to one of the values below."},"owner":{"type":"string","description":"The creator of the action being called. There are three valid values for the Owner field in the action category section within your pipeline structure: AWS, ThirdParty, and Custom."},"provider":{"type":"string","description":"The provider of the service being called by the action. Valid providers are determined by the action category. For example, an action in the Deploy category type might have a provider of CodeDeploy, which would be specified as CodeDeploy."},"version":{"type":"string","description":"A string that describes the action version."}},"type":"object","required":["category","owner","provider","version"]},"aws-native:codepipeline:PipelineActionTypeIdCategory":{"description":"A category defines what kind of action can be taken in the stage, and constrains the provider type for the action. Valid categories are limited to one of the values below.","type":"string","enum":[{"name":"Source","value":"Source"},{"name":"Build","value":"Build"},{"name":"Test","value":"Test"},{"name":"Deploy","value":"Deploy"},{"name":"Invoke","value":"Invoke"},{"name":"Approval","value":"Approval"},{"name":"Compute","value":"Compute"}]},"aws-native:codepipeline:PipelineArtifactStore":{"description":"The S3 bucket where artifacts for the pipeline are stored.","properties":{"encryptionKey":{"$ref":"#/types/aws-native:codepipeline:PipelineEncryptionKey","description":"The encryption key used to encrypt the data in the artifact store, such as an AWS Key Management Service ( AWS KMS) key. If this is undefined, the default key for Amazon S3 is used. To see an example artifact store encryption key field, see the example structure here: [AWS::CodePipeline::Pipeline](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codepipeline-pipeline.html) ."},"location":{"type":"string","description":"The S3 bucket used for storing the artifacts for a pipeline. You can specify the name of an S3 bucket but not a folder in the bucket. A folder to contain the pipeline artifacts is created for you based on the name of the pipeline. You can use any S3 bucket in the same AWS Region as the pipeline to store your pipeline artifacts."},"type":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStoreType","description":"The type of the artifact store, such as S3."}},"type":"object","required":["location","type"]},"aws-native:codepipeline:PipelineArtifactStoreMap":{"description":"A mapping of artifactStore objects and their corresponding AWS Regions. There must be an artifact store for the pipeline Region and for each cross-region action in the pipeline.","properties":{"artifactStore":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStore","description":"Represents information about the S3 bucket where artifacts are stored for the pipeline.\n\n\u003e You must include either `artifactStore` or `artifactStores` in your pipeline, but you cannot use both. If you create a cross-region action in your pipeline, you must use `artifactStores` ."},"region":{"type":"string","description":"The action declaration's AWS Region, such as us-east-1."}},"type":"object","required":["artifactStore","region"]},"aws-native:codepipeline:PipelineArtifactStoreType":{"description":"The type of the artifact store, such as S3.","type":"string","enum":[{"name":"S3","value":"S3"}]},"aws-native:codepipeline:PipelineBeforeEntryConditions":{"description":"The configuration that specifies the rules to run before stage starts.","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineCondition"},"description":"The conditions that are configured as entry conditions."}},"type":"object"},"aws-native:codepipeline:PipelineBlockerDeclaration":{"description":"Reserved for future use.","properties":{"name":{"type":"string","description":"Reserved for future use."},"type":{"$ref":"#/types/aws-native:codepipeline:PipelineBlockerDeclarationType","description":"Reserved for future use."}},"type":"object","required":["name","type"]},"aws-native:codepipeline:PipelineBlockerDeclarationType":{"description":"Reserved for future use.","type":"string","enum":[{"name":"Schedule","value":"Schedule"}]},"aws-native:codepipeline:PipelineCondition":{"description":"Represents information about condition.","properties":{"result":{"type":"string","description":"The specified result for when the failure conditions are met, such as rolling back the stage"},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineRuleDeclaration"},"description":"The rules that make up the condition."}},"type":"object"},"aws-native:codepipeline:PipelineEncryptionKey":{"description":"Represents information about the key used to encrypt data in the artifact store, such as an AWS Key Management Service (AWS KMS) key","properties":{"id":{"type":"string","description":"The ID used to identify the key. For an AWS KMS key, you can use the key ID, the key ARN, or the alias ARN."},"type":{"type":"string","description":"The type of encryption key, such as an AWS KMS key. When creating or updating a pipeline, the value must be set to 'KMS'."}},"type":"object","required":["id","type"]},"aws-native:codepipeline:PipelineEnvironmentVariable":{"description":"Represents information about the environment variable of an action.","properties":{"name":{"type":"string","description":"The name of the environment variable."},"type":{"$ref":"#/types/aws-native:codepipeline:PipelineEnvironmentVariableType","description":"The type of the environment variable."},"value":{"type":"string","description":"The value of the environment variable."}},"type":"object","required":["name","value"]},"aws-native:codepipeline:PipelineEnvironmentVariableType":{"description":"The type of the environment variable.","type":"string","enum":[{"name":"Plaintext","value":"PLAINTEXT"},{"name":"SecretsManager","value":"SECRETS_MANAGER"}]},"aws-native:codepipeline:PipelineExecutionMode":{"description":"The method that the pipeline will use to handle multiple executions. The default mode is SUPERSEDED.","type":"string","enum":[{"name":"Queued","value":"QUEUED"},{"name":"Superseded","value":"SUPERSEDED"},{"name":"Parallel","value":"PARALLEL"}]},"aws-native:codepipeline:PipelineFailureConditions":{"description":"The configuration that specifies the result, such as rollback, to occur upon stage failure","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineCondition"},"description":"The conditions that are configured as failure conditions. For more information about conditions, see [Stage conditions](https://docs.aws.amazon.com/codepipeline/latest/userguide/stage-conditions.html) and [How do stage conditions work?](https://docs.aws.amazon.com/codepipeline/latest/userguide/concepts-how-it-works-conditions.html) ."},"result":{"$ref":"#/types/aws-native:codepipeline:PipelineFailureConditionsResult","description":"The specified result for when the failure conditions are met, such as rolling back the stage"},"retryConfiguration":{"$ref":"#/types/aws-native:codepipeline:PipelineFailureConditionsRetryConfigurationProperties","description":"The configuration that specifies the retry configuration for a stage"}},"type":"object"},"aws-native:codepipeline:PipelineFailureConditionsResult":{"description":"The specified result for when the failure conditions are met, such as rolling back the stage","type":"string","enum":[{"name":"Rollback","value":"ROLLBACK"},{"name":"Retry","value":"RETRY"}]},"aws-native:codepipeline:PipelineFailureConditionsRetryConfigurationProperties":{"description":"The configuration that specifies the retry configuration for a stage","properties":{"retryMode":{"$ref":"#/types/aws-native:codepipeline:PipelineFailureConditionsRetryConfigurationPropertiesRetryMode","description":"The specified retry mode type for the given stage. FAILED_ACTIONS will retry only the failed actions. ALL_ACTIONS will retry both failed and successful"}},"type":"object"},"aws-native:codepipeline:PipelineFailureConditionsRetryConfigurationPropertiesRetryMode":{"description":"The specified retry mode type for the given stage. FAILED_ACTIONS will retry only the failed actions. ALL_ACTIONS will retry both failed and successful","type":"string","enum":[{"name":"AllActions","value":"ALL_ACTIONS"},{"name":"FailedActions","value":"FAILED_ACTIONS"}]},"aws-native:codepipeline:PipelineGitBranchFilterCriteria":{"description":"The Git repository branches specified as filter criteria to start the pipeline.","properties":{"excludes":{"type":"array","items":{"type":"string"},"description":"The list of patterns of Git branches that, when a commit is pushed, are to be excluded from starting the pipeline."},"includes":{"type":"array","items":{"type":"string"},"description":"The list of patterns of Git branches that, when a commit is pushed, are to be included as criteria that starts the pipeline."}},"type":"object"},"aws-native:codepipeline:PipelineGitConfiguration":{"description":"A type of trigger configuration for Git-based source actions.","properties":{"pullRequest":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineGitPullRequestFilter"},"description":"The field where the repository event that will start the pipeline is specified as pull requests."},"push":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineGitPushFilter"},"description":"The field where the repository event that will start the pipeline, such as pushing Git tags, is specified with details."},"sourceActionName":{"type":"string","description":"The name of the pipeline source action where the trigger configuration, such as Git tags, is specified. The trigger configuration will start the pipeline upon the specified change only."}},"type":"object","required":["sourceActionName"]},"aws-native:codepipeline:PipelineGitFilePathFilterCriteria":{"description":"The Git repository file paths specified as filter criteria to start the pipeline.","properties":{"excludes":{"type":"array","items":{"type":"string"},"description":"The list of patterns of Git repository file paths that, when a commit is pushed, are to be excluded from starting the pipeline."},"includes":{"type":"array","items":{"type":"string"},"description":"The list of patterns of Git repository file paths that, when a commit is pushed, are to be included as criteria that starts the pipeline."}},"type":"object"},"aws-native:codepipeline:PipelineGitPullRequestFilter":{"description":"The event criteria for the pull request trigger configuration, such as the lists of branches or file paths to include and exclude.","properties":{"branches":{"$ref":"#/types/aws-native:codepipeline:PipelineGitBranchFilterCriteria","description":"The field that specifies to filter on branches for the pull request trigger configuration."},"events":{"type":"array","items":{"type":"string"},"description":"The field that specifies which pull request events to filter on (opened, updated, closed) for the trigger configuration."},"filePaths":{"$ref":"#/types/aws-native:codepipeline:PipelineGitFilePathFilterCriteria","description":"The field that specifies to filter on file paths for the pull request trigger configuration."}},"type":"object"},"aws-native:codepipeline:PipelineGitPushFilter":{"description":"The event criteria that specify when a specified repository event will start the pipeline for the specified trigger configuration, such as the lists of Git tags to include and exclude.","properties":{"branches":{"$ref":"#/types/aws-native:codepipeline:PipelineGitBranchFilterCriteria","description":"The field that specifies to filter on branches for the push trigger configuration."},"filePaths":{"$ref":"#/types/aws-native:codepipeline:PipelineGitFilePathFilterCriteria","description":"The field that specifies to filter on file paths for the push trigger configuration."},"tags":{"$ref":"#/types/aws-native:codepipeline:PipelineGitTagFilterCriteria","description":"The field that contains the details for the Git tags trigger configuration."}},"type":"object"},"aws-native:codepipeline:PipelineGitTagFilterCriteria":{"description":"The Git tags specified as filter criteria for whether a Git tag repository event will start the pipeline.","properties":{"excludes":{"type":"array","items":{"type":"string"},"description":"The list of patterns of Git tags that, when pushed, are to be excluded from starting the pipeline."},"includes":{"type":"array","items":{"type":"string"},"description":"The list of patterns of Git tags that, when pushed, are to be included as criteria that starts the pipeline."}},"type":"object"},"aws-native:codepipeline:PipelineInputArtifact":{"description":"Represents information about an artifact to be worked on, such as a test or build artifact.","properties":{"name":{"type":"string","description":"The name of the artifact to be worked on (for example, \"My App\")."}},"type":"object","required":["name"]},"aws-native:codepipeline:PipelineOutputArtifact":{"description":"Represents information about the output of an action.","properties":{"files":{"type":"array","items":{"type":"string"},"description":"The files that you want to associate with the output artifact that will be exported from the compute action."},"name":{"type":"string","description":"The name of the output of an artifact, such as \"My App\"."}},"type":"object","required":["name"]},"aws-native:codepipeline:PipelineRuleDeclaration":{"description":"Represents information about condition.","properties":{"commands":{"type":"array","items":{"type":"string"},"description":"The shell commands to run with your compute action in CodePipeline."},"configuration":{"$ref":"pulumi.json#/Any","description":"The rule's configuration. These are key-value pairs that specify input values for a rule."},"inputArtifacts":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineInputArtifact"},"description":"The input artifacts fields for the rule, such as specifying an input file for the rule."},"name":{"type":"string","description":"The rule declaration's name."},"region":{"type":"string","description":"The rule declaration's AWS Region, such as us-east-1."},"roleArn":{"type":"string","description":"The ARN of the IAM service role that performs the declared rule. This is assumed through the roleArn for the pipeline."},"ruleTypeId":{"$ref":"#/types/aws-native:codepipeline:PipelineRuleTypeId","description":"The ID for the rule type, which is made up of the combined values for category, owner, provider, and version."}},"type":"object"},"aws-native:codepipeline:PipelineRuleTypeId":{"description":"Represents information about a rule type.","properties":{"category":{"type":"string","description":"A category for the provider type for the rule."},"owner":{"type":"string","description":"The creator of the rule being called. Only AWS is supported."},"provider":{"type":"string","description":"The provider of the service being called by the rule."},"version":{"type":"string","description":"A string that describes the rule version."}},"type":"object"},"aws-native:codepipeline:PipelineStageDeclaration":{"description":"Represents information about a stage and its definition.","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineActionDeclaration"},"description":"The actions included in a stage."},"beforeEntry":{"$ref":"#/types/aws-native:codepipeline:PipelineBeforeEntryConditions","description":"The method to use before stage runs."},"blockers":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineBlockerDeclaration"},"description":"Reserved for future use."},"name":{"type":"string","description":"The name of the stage."},"onFailure":{"$ref":"#/types/aws-native:codepipeline:PipelineFailureConditions","description":"The method to use when a stage has not completed successfully"},"onSuccess":{"$ref":"#/types/aws-native:codepipeline:PipelineSuccessConditions","description":"The method to use when a stage has completed successfully"}},"type":"object","required":["actions","name"]},"aws-native:codepipeline:PipelineStageTransition":{"description":"The name of the pipeline in which you want to disable the flow of artifacts from one stage to another.","properties":{"reason":{"type":"string","description":"The reason given to the user that a stage is disabled, such as waiting for manual approval or manual tests. This message is displayed in the pipeline console UI."},"stageName":{"type":"string","description":"The name of the stage where you want to disable the inbound or outbound transition of artifacts."}},"type":"object","required":["reason","stageName"]},"aws-native:codepipeline:PipelineSuccessConditions":{"description":"The configuration that specifies the result, such as rollback, to occur upon stage failure","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineCondition"},"description":"The conditions that are success conditions."}},"type":"object"},"aws-native:codepipeline:PipelineTag":{"description":"A tag is a key-value pair that is used to manage the resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:codepipeline:PipelineTriggerDeclaration":{"description":"Represents information about the specified trigger configuration, such as the filter criteria and the source stage for the action that contains the trigger.","properties":{"gitConfiguration":{"$ref":"#/types/aws-native:codepipeline:PipelineGitConfiguration","description":"Provides the filter criteria and the source stage for the repository event that starts the pipeline, such as Git tags."},"providerType":{"$ref":"#/types/aws-native:codepipeline:PipelineTriggerDeclarationProviderType","description":"The source provider for the event, such as connections configured for a repository with Git tags, for the specified trigger configuration."}},"type":"object","required":["providerType"]},"aws-native:codepipeline:PipelineTriggerDeclarationProviderType":{"description":"The source provider for the event, such as connections configured for a repository with Git tags, for the specified trigger configuration.","type":"string","enum":[{"name":"CodeStarSourceConnection","value":"CodeStarSourceConnection"}]},"aws-native:codepipeline:PipelineType":{"description":"CodePipeline provides the following pipeline types, which differ in characteristics and price, so that you can tailor your pipeline features and cost to the needs of your applications.","type":"string","enum":[{"name":"V1","value":"V1"},{"name":"V2","value":"V2"}]},"aws-native:codepipeline:PipelineVariableDeclaration":{"description":"A variable declared at the pipeline level.","properties":{"defaultValue":{"type":"string","description":"The value of a pipeline-level variable."},"description":{"type":"string","description":"The description of a pipeline-level variable. It's used to add additional context about the variable, and not being used at time when pipeline executes."},"name":{"type":"string","description":"The name of a pipeline-level variable."}},"type":"object","required":["name"]},"aws-native:codepipeline:WebhookAuthConfiguration":{"description":"Properties that configure the authentication applied to incoming webhook trigger requests","properties":{"allowedIpRange":{"type":"string","description":"The property used to configure acceptance of webhooks in an IP address range. For IP, only the AllowedIPRange property must be set. This property must be set to a valid CIDR range."},"secretToken":{"type":"string","description":"The property used to configure GitHub authentication. For GITHUB_HMAC, only the SecretToken property must be set."}},"type":"object"},"aws-native:codepipeline:WebhookAuthentication":{"description":"Supported options are GITHUB_HMAC, IP, and UNAUTHENTICATED.","type":"string","enum":[{"name":"GithubHmac","value":"GITHUB_HMAC"},{"name":"Ip","value":"IP"},{"name":"Unauthenticated","value":"UNAUTHENTICATED"}]},"aws-native:codepipeline:WebhookFilterRule":{"description":"A list of rules applied to the body/payload sent in the POST request to a webhook URL. All defined rules must pass for the request to be accepted and the pipeline started.","properties":{"jsonPath":{"type":"string","description":"A JsonPath expression that is applied to the body/payload of the webhook. The value selected by the JsonPath expression must match the value specified in the MatchEquals field. Otherwise, the request is ignored."},"matchEquals":{"type":"string","description":"The value selected by the JsonPath expression must match what is supplied in the MatchEquals field. Otherwise, the request is ignored."}},"type":"object","required":["jsonPath"]},"aws-native:codestarconnections:ConnectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codestarconnections:RepositoryLinkProviderType":{"description":"The name of the external provider where your third-party code repository is configured.","type":"string","enum":[{"name":"GitHub","value":"GitHub"},{"name":"Bitbucket","value":"Bitbucket"},{"name":"GitHubEnterprise","value":"GitHubEnterprise"},{"name":"GitLab","value":"GitLab"},{"name":"GitLabSelfManaged","value":"GitLabSelfManaged"}]},"aws-native:codestarconnections:RepositoryLinkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, , ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, , ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:codestarconnections:SyncConfigurationProviderType":{"description":"The name of the external provider where your third-party code repository is configured.","type":"string","enum":[{"name":"GitHub","value":"GitHub"},{"name":"Bitbucket","value":"Bitbucket"},{"name":"GitHubEnterprise","value":"GitHubEnterprise"},{"name":"GitLab","value":"GitLab"},{"name":"GitLabSelfManaged","value":"GitLabSelfManaged"}]},"aws-native:codestarconnections:SyncConfigurationPublishDeploymentStatus":{"description":"Whether to enable or disable publishing of deployment status to source providers.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:codestarconnections:SyncConfigurationTriggerResourceUpdateOn":{"description":"When to trigger Git sync to begin the stack update.","type":"string","enum":[{"name":"AnyChange","value":"ANY_CHANGE"},{"name":"FileChange","value":"FILE_CHANGE"}]},"aws-native:codestarnotifications:NotificationRuleDetailType":{"description":"The level of detail to include in the notifications for this resource. `BASIC` will include only the contents of the event as it would appear in Amazon CloudWatch. `FULL` will include any supplemental information provided by AWS CodeStar Notifications and/or the service for the resource for which the notification is created.","type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Full","value":"FULL"}]},"aws-native:codestarnotifications:NotificationRuleStatus":{"description":"The status of the notification rule. The default value is `ENABLED` . If the status is set to `DISABLED` , notifications aren't sent for the notification rule.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:codestarnotifications:NotificationRuleTarget":{"properties":{"targetAddress":{"type":"string","description":"The Amazon Resource Name (ARN) of the  topic or  client."},"targetType":{"type":"string","description":"The target type. Can be an Amazon Simple Notification Service topic or  client.\n\n- Amazon Simple Notification Service topics are specified as `SNS` .\n- clients are specified as `AWSChatbotSlack` .\n- clients for Microsoft Teams are specified as `AWSChatbotMicrosoftTeams` ."}},"type":"object","required":["targetAddress","targetType"]},"aws-native:cognito:IdentityPoolCognitoIdentityProvider":{"properties":{"clientId":{"type":"string","description":"The client ID for the Amazon Cognito user pool."},"providerName":{"type":"string","description":"The provider name for an Amazon Cognito user pool. For example: `cognito-idp.us-east-2.amazonaws.com/us-east-2_123456789` ."},"serverSideTokenCheck":{"type":"boolean","description":"TRUE if server-side token validation is enabled for the identity provider’s token.\n\nAfter you set the `ServerSideTokenCheck` to TRUE for an identity pool, that identity pool checks with the integrated user pools to make sure the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user.\n\nIf the user is signed out or deleted, the identity pool returns a 400 Not Authorized error."}},"type":"object","required":["clientId","providerName"]},"aws-native:cognito:IdentityPoolCognitoStreams":{"properties":{"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role Amazon Cognito can assume to publish to the stream. This role must grant access to Amazon Cognito (cognito-sync) to invoke `PutRecord` on your Amazon Cognito stream."},"streamName":{"type":"string","description":"The name of the Amazon Cognito stream to receive updates. This stream must be in the developer's account and in the same Region as the identity pool."},"streamingStatus":{"type":"string","description":"Status of the Amazon Cognito streams. Valid values are: `ENABLED` or `DISABLED` ."}},"type":"object"},"aws-native:cognito:IdentityPoolPushSync":{"properties":{"applicationArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the Amazon SNS platform applications that could be used by clients."},"roleArn":{"type":"string","description":"An IAM role configured to allow Amazon Cognito to call Amazon SNS on behalf of the developer."}},"type":"object"},"aws-native:cognito:IdentityPoolRoleAttachmentMappingRule":{"properties":{"claim":{"type":"string"},"matchType":{"type":"string"},"roleArn":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["claim","matchType","roleArn","value"]},"aws-native:cognito:IdentityPoolRoleAttachmentRoleMapping":{"properties":{"ambiguousRoleResolution":{"type":"string"},"identityProvider":{"type":"string"},"rulesConfiguration":{"$ref":"#/types/aws-native:cognito:IdentityPoolRoleAttachmentRulesConfigurationType"},"type":{"type":"string"}},"type":"object","required":["type"]},"aws-native:cognito:IdentityPoolRoleAttachmentRulesConfigurationType":{"properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:IdentityPoolRoleAttachmentMappingRule"}}},"type":"object","required":["rules"]},"aws-native:cognito:IdentityPoolTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:cognito:LogDeliveryConfigurationCloudWatchLogsConfiguration":{"properties":{"logGroupArn":{"type":"string"}},"type":"object"},"aws-native:cognito:LogDeliveryConfigurationFirehoseConfiguration":{"properties":{"streamArn":{"type":"string"}},"type":"object"},"aws-native:cognito:LogDeliveryConfigurationLogConfiguration":{"properties":{"cloudWatchLogsConfiguration":{"$ref":"#/types/aws-native:cognito:LogDeliveryConfigurationCloudWatchLogsConfiguration"},"eventSource":{"type":"string"},"firehoseConfiguration":{"$ref":"#/types/aws-native:cognito:LogDeliveryConfigurationFirehoseConfiguration"},"logLevel":{"type":"string"},"s3Configuration":{"$ref":"#/types/aws-native:cognito:LogDeliveryConfigurationS3Configuration"}},"type":"object"},"aws-native:cognito:LogDeliveryConfigurationS3Configuration":{"properties":{"bucketArn":{"type":"string"}},"type":"object"},"aws-native:cognito:ManagedLoginBrandingAssetType":{"properties":{"bytes":{"type":"string"},"category":{"$ref":"#/types/aws-native:cognito:ManagedLoginBrandingCategoryType"},"colorMode":{"$ref":"#/types/aws-native:cognito:ManagedLoginBrandingColorModeType"},"extension":{"$ref":"#/types/aws-native:cognito:ManagedLoginBrandingExtensionType"},"resourceId":{"type":"string"}},"type":"object","required":["category","colorMode","extension"]},"aws-native:cognito:ManagedLoginBrandingCategoryType":{"type":"string","enum":[{"name":"FaviconIco","value":"FAVICON_ICO"},{"name":"FaviconSvg","value":"FAVICON_SVG"},{"name":"EmailGraphic","value":"EMAIL_GRAPHIC"},{"name":"SmsGraphic","value":"SMS_GRAPHIC"},{"name":"AuthAppGraphic","value":"AUTH_APP_GRAPHIC"},{"name":"PasswordGraphic","value":"PASSWORD_GRAPHIC"},{"name":"PasskeyGraphic","value":"PASSKEY_GRAPHIC"},{"name":"PageHeaderLogo","value":"PAGE_HEADER_LOGO"},{"name":"PageHeaderBackground","value":"PAGE_HEADER_BACKGROUND"},{"name":"PageFooterLogo","value":"PAGE_FOOTER_LOGO"},{"name":"PageFooterBackground","value":"PAGE_FOOTER_BACKGROUND"},{"name":"PageBackground","value":"PAGE_BACKGROUND"},{"name":"FormBackground","value":"FORM_BACKGROUND"},{"name":"FormLogo","value":"FORM_LOGO"},{"name":"IdpButtonIcon","value":"IDP_BUTTON_ICON"}]},"aws-native:cognito:ManagedLoginBrandingColorModeType":{"type":"string","enum":[{"name":"Light","value":"LIGHT"},{"name":"Dark","value":"DARK"},{"name":"Dynamic","value":"DYNAMIC"}]},"aws-native:cognito:ManagedLoginBrandingExtensionType":{"type":"string","enum":[{"name":"Ico","value":"ICO"},{"name":"Jpeg","value":"JPEG"},{"name":"Png","value":"PNG"},{"name":"Svg","value":"SVG"},{"name":"Webp","value":"WEBP"}]},"aws-native:cognito:TermsEnforcementType":{"type":"string","enum":[{"name":"None","value":"NONE"}]},"aws-native:cognito:TermsSourceType":{"type":"string","enum":[{"name":"Link","value":"LINK"}]},"aws-native:cognito:UserPoolAccountRecoverySetting":{"properties":{"recoveryMechanisms":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolRecoveryOption"},"description":"The list of options and priorities for user message delivery in forgot-password operations. Sets or displays user pool preferences for email or SMS message priority, whether users should fall back to a second delivery method, and whether passwords should only be reset by administrators."}},"type":"object"},"aws-native:cognito:UserPoolAddOns":{"properties":{"advancedSecurityAdditionalFlows":{"$ref":"#/types/aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows","description":"Threat protection configuration options for additional authentication types in your user pool, including custom authentication."},"advancedSecurityMode":{"type":"string","description":"The operating mode of threat protection for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication."}},"type":"object"},"aws-native:cognito:UserPoolAdminCreateUserConfig":{"properties":{"allowAdminCreateUserOnly":{"type":"boolean","description":"The setting for allowing self-service sign-up. When `true` , only administrators can create new user profiles. When `false` , users can register themselves and create a new user profile with the `SignUp` operation."},"inviteMessageTemplate":{"$ref":"#/types/aws-native:cognito:UserPoolInviteMessageTemplate","description":"The template for the welcome message to new users. This template must include the `{####}` temporary password placeholder if you are creating users with passwords. If your users don't have passwords, you can omit the placeholder.\n\nSee also [Customizing User Invitation Messages](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization) ."},"unusedAccountValidityDays":{"type":"integer","description":"This parameter is no longer in use.\n\nThe password expiration limit in days for administrator-created users. When this time expires, the user can't sign in with their temporary password. To reset the account after that time limit, you must call `AdminCreateUser` again, specifying `RESEND` for the `MessageAction` parameter.\n\nThe default value for this parameter is 7."}},"type":"object"},"aws-native:cognito:UserPoolAdvancedSecurityAdditionalFlows":{"properties":{"customAuthMode":{"type":"string","description":"The operating mode of threat protection in custom authentication with [Custom authentication challenge Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) ."}},"type":"object"},"aws-native:cognito:UserPoolClientAnalyticsConfiguration":{"properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Amazon Pinpoint project that you want to connect to your user pool app client. Amazon Cognito publishes events to the Amazon Pinpoint project that `ApplicationArn` declares. You can also configure your application to pass an endpoint ID in the `AnalyticsMetadata` parameter of sign-in operations. The endpoint ID is information about the destination for push notifications"},"applicationId":{"type":"string","description":"Your Amazon Pinpoint project ID."},"externalId":{"type":"string","description":"The [external ID](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) of the role that Amazon Cognito assumes to send analytics data to Amazon Pinpoint."},"roleArn":{"type":"string","description":"The ARN of an AWS Identity and Access Management role that has the permissions required for Amazon Cognito to publish events to Amazon Pinpoint analytics."},"userDataShared":{"type":"boolean","description":"If `UserDataShared` is `true` , Amazon Cognito includes user data in the events that it publishes to Amazon Pinpoint analytics."}},"type":"object"},"aws-native:cognito:UserPoolClientRefreshTokenRotation":{"properties":{"feature":{"$ref":"#/types/aws-native:cognito:UserPoolClientRefreshTokenRotationFeature","description":"The state of refresh token rotation for the current app client."},"retryGracePeriodSeconds":{"type":"integer","description":"When you request a token refresh with `GetTokensFromRefreshToken` , the original refresh token that you're rotating out can remain valid for a period of time of up to 60 seconds. This allows for client-side retries. When `RetryGracePeriodSeconds` is `0` , the grace period is disabled and a successful request immediately invalidates the submitted refresh token."}},"type":"object"},"aws-native:cognito:UserPoolClientRefreshTokenRotationFeature":{"description":"The state of refresh token rotation for the current app client.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:cognito:UserPoolClientTokenValidityUnits":{"properties":{"accessToken":{"type":"string","description":"A time unit for the value that you set in the `AccessTokenValidity` parameter. The default `AccessTokenValidity` time unit is `hours` . `AccessTokenValidity` duration can range from five minutes to one day."},"idToken":{"type":"string","description":"A time unit for the value that you set in the `IdTokenValidity` parameter. The default `IdTokenValidity` time unit is `hours` . `IdTokenValidity` duration can range from five minutes to one day."},"refreshToken":{"type":"string","description":"A time unit for the value that you set in the `RefreshTokenValidity` parameter. The default `RefreshTokenValidity` time unit is `days` . `RefreshTokenValidity` duration can range from 60 minutes to 10 years."}},"type":"object"},"aws-native:cognito:UserPoolCustomEmailSender":{"properties":{"lambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger."},"lambdaVersion":{"type":"string","description":"The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.\n\nYou must use a `LambdaVersion` of `V1_0` with a custom sender function."}},"type":"object"},"aws-native:cognito:UserPoolCustomSmsSender":{"properties":{"lambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger."},"lambdaVersion":{"type":"string","description":"The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.\n\nYou must use a `LambdaVersion` of `V1_0` with a custom sender function."}},"type":"object"},"aws-native:cognito:UserPoolDeviceConfiguration":{"properties":{"challengeRequiredOnNewDevice":{"type":"boolean","description":"When true, a remembered device can sign in with device authentication instead of SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).\n\n\u003e Whether or not `ChallengeRequiredOnNewDevice` is true, users who sign in with devices that have not been confirmed or remembered must still provide a second factor in a user pool that requires MFA."},"deviceOnlyRememberedOnUserPrompt":{"type":"boolean","description":"When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a `ConfirmDevice` API request. In your app, create a prompt for your user to choose whether they want to remember their device. Return the user's choice in an `UpdateDeviceStatus` API request.\n\nWhen `DeviceOnlyRememberedOnUserPrompt` is `false` , Amazon Cognito immediately remembers devices that you register in a `ConfirmDevice` API request."}},"type":"object"},"aws-native:cognito:UserPoolDomainCustomDomainConfigType":{"properties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain."}},"type":"object"},"aws-native:cognito:UserPoolEmailConfiguration":{"properties":{"configurationSet":{"type":"string","description":"The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:\n\n- **Event publishing** - Amazon Simple Email Service can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as and Amazon CloudWatch\n- **IP pool management** - When leasing dedicated IP addresses with Amazon Simple Email Service, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets."},"emailSendingAccount":{"type":"string","description":"Specifies whether Amazon Cognito uses its built-in functionality to send your users email messages, or uses your Amazon Simple Email Service email configuration. Specify one of the following values:\n\n- **COGNITO_DEFAULT** - When Amazon Cognito emails your users, it uses its built-in email functionality. When you use the default option, Amazon Cognito allows only a limited number of emails each day for your user pool. For typical production environments, the default email limit is less than the required delivery volume. To achieve a higher delivery volume, specify DEVELOPER to use your Amazon SES email configuration.\n\nTo look up the email delivery limit for the default option, see [Limits](https://docs.aws.amazon.com/cognito/latest/developerguide/limits.html) in the *Amazon Cognito Developer Guide* .\n\nThe default FROM address is `no-reply@verificationemail.com` . To customize the FROM address, provide the Amazon Resource Name (ARN) of an Amazon SES verified email address for the `SourceArn` parameter.\n- **DEVELOPER** - When Amazon Cognito emails your users, it uses your Amazon SES configuration. Amazon Cognito calls Amazon SES on your behalf to send email from your verified email address. When you use this option, the email delivery limits are the same limits that apply to your Amazon SES verified email address in your AWS account .\n\nIf you use this option, provide the ARN of an Amazon SES verified email address for the `SourceArn` parameter.\n\nBefore Amazon Cognito can email your users, it requires additional permissions to call Amazon SES on your behalf. When you update your user pool with this option, Amazon Cognito creates a *service-linked role* , which is a type of role in your AWS account . This role contains the permissions that allow you to access Amazon SES and send email messages from your email address. For more information about the service-linked role that Amazon Cognito creates, see [Using Service-Linked Roles for Amazon Cognito](https://docs.aws.amazon.com/cognito/latest/developerguide/using-service-linked-roles.html) in the *Amazon Cognito Developer Guide* ."},"from":{"type":"string","description":"Either the sender’s email address or the sender’s name with their email address. For example, `testuser@example.com` or `Test User \u003ctestuser@example.com\u003e` . This address appears before the body of the email."},"replyToEmailAddress":{"type":"string","description":"The destination to which the receiver of the email should reply."},"sourceArn":{"type":"string","description":"The ARN of a verified email address or an address from a verified domain in Amazon SES. You can set a `SourceArn` email from a verified domain only with an API request. You can set a verified email address, but not an address in a verified domain, in the Amazon Cognito console. Amazon Cognito uses the email address that you provide in one of the following ways, depending on the value that you specify for the `EmailSendingAccount` parameter:\n\n- If you specify `COGNITO_DEFAULT` , Amazon Cognito uses this address as the custom FROM address when it emails your users using its built-in email account.\n- If you specify `DEVELOPER` , Amazon Cognito emails your users with this address by calling Amazon SES on your behalf.\n\nThe Region value of the `SourceArn` parameter must indicate a supported AWS Region of your user pool. Typically, the Region in the `SourceArn` and the user pool Region are the same. For more information, see [Amazon SES email configuration regions](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-developer-region-mapping) in the [Amazon Cognito Developer Guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html) ."}},"type":"object"},"aws-native:cognito:UserPoolInboundFederation":{"properties":{"lambdaArn":{"type":"string"},"lambdaVersion":{"type":"string"}},"type":"object"},"aws-native:cognito:UserPoolInviteMessageTemplate":{"properties":{"emailMessage":{"type":"string","description":"The message template for email messages. EmailMessage is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER."},"emailSubject":{"type":"string","description":"The subject line for email messages. EmailSubject is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER."},"smsMessage":{"type":"string","description":"The message template for SMS messages."}},"type":"object"},"aws-native:cognito:UserPoolLambdaConfig":{"properties":{"createAuthChallenge":{"type":"string","description":"The configuration of a create auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) ."},"customEmailSender":{"$ref":"#/types/aws-native:cognito:UserPoolCustomEmailSender","description":"The configuration of a custom email sender Lambda trigger. This trigger routes all email notifications from a user pool to a Lambda function that delivers the message using custom logic."},"customMessage":{"type":"string","description":"A custom message Lambda trigger. This trigger is an opportunity to customize all SMS and email messages from your user pool. When a custom message trigger is active, your user pool routes all messages to a Lambda function that returns a runtime-customized message subject and body for your user pool to deliver to a user."},"customSmsSender":{"$ref":"#/types/aws-native:cognito:UserPoolCustomSmsSender","description":"The configuration of a custom SMS sender Lambda trigger. This trigger routes all SMS notifications from a user pool to a Lambda function that delivers the message using custom logic."},"defineAuthChallenge":{"type":"string","description":"The configuration of a define auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) ."},"inboundFederation":{"$ref":"#/types/aws-native:cognito:UserPoolInboundFederation"},"kmsKeyId":{"type":"string","description":"The ARN of an [KMS key](https://docs.aws.amazon.com//kms/latest/developerguide/concepts.html#master_keys) . Amazon Cognito uses the key to encrypt codes and temporary passwords sent to custom sender Lambda triggers."},"postAuthentication":{"type":"string","description":"The configuration of a [post authentication Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-authentication.html) in a user pool. This trigger can take custom actions after a user signs in."},"postConfirmation":{"type":"string","description":"The configuration of a [post confirmation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-confirmation.html) in a user pool. This trigger can take custom actions after a user confirms their user account and their email address or phone number."},"preAuthentication":{"type":"string","description":"The configuration of a [pre authentication trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-authentication.html) in a user pool. This trigger can evaluate and modify user sign-in events."},"preSignUp":{"type":"string","description":"The configuration of a [pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) in a user pool. This trigger evaluates new users and can bypass confirmation, [link a federated user profile](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html) , or block sign-up requests."},"preTokenGeneration":{"type":"string","description":"The legacy configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool.\n\nSet this parameter for legacy purposes. If you also set an ARN in `PreTokenGenerationConfig` , its value must be identical to `PreTokenGeneration` . For new instances of pre token generation triggers, set the `LambdaArn` of `PreTokenGenerationConfig` ."},"preTokenGenerationConfig":{"$ref":"#/types/aws-native:cognito:UserPoolPreTokenGenerationConfig","description":"The detailed configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool. If you also set an ARN in `PreTokenGeneration` , its value must be identical to `PreTokenGenerationConfig` ."},"userMigration":{"type":"string","description":"The configuration of a [migrate user Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-migrate-user.html) in a user pool. This trigger can create user profiles when users sign in or attempt to reset their password with credentials that don't exist yet."},"verifyAuthChallengeResponse":{"type":"string","description":"The configuration of a verify auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) ."}},"type":"object"},"aws-native:cognito:UserPoolNumberAttributeConstraints":{"properties":{"maxValue":{"type":"string","description":"The maximum length of a number attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer."},"minValue":{"type":"string","description":"The minimum value of an attribute that is of the number data type."}},"type":"object"},"aws-native:cognito:UserPoolPasswordPolicy":{"properties":{"minimumLength":{"type":"integer","description":"The minimum length of the password in the policy that you have set. This value can't be less than 6."},"passwordHistorySize":{"type":"integer","description":"The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` ."},"requireLowercase":{"type":"boolean","description":"The requirement in a password policy that users must include at least one lowercase letter in their password."},"requireNumbers":{"type":"boolean","description":"The requirement in a password policy that users must include at least one number in their password."},"requireSymbols":{"type":"boolean","description":"The requirement in a password policy that users must include at least one symbol in their password."},"requireUppercase":{"type":"boolean","description":"The requirement in a password policy that users must include at least one uppercase letter in their password."},"temporaryPasswordValidityDays":{"type":"integer","description":"The number of days a temporary password is valid in the password policy. If the user doesn't sign in during this time, an administrator must reset their password. Defaults to `7` . If you submit a value of `0` , Amazon Cognito treats it as a null value and sets `TemporaryPasswordValidityDays` to its default value.\n\n\u003e When you set `TemporaryPasswordValidityDays` for a user pool, you can no longer set a value for the legacy `UnusedAccountValidityDays` parameter in that user pool."}},"type":"object"},"aws-native:cognito:UserPoolPolicies":{"properties":{"passwordPolicy":{"$ref":"#/types/aws-native:cognito:UserPoolPasswordPolicy","description":"The password policy settings for a user pool, including complexity, history, and length requirements."},"signInPolicy":{"$ref":"#/types/aws-native:cognito:UserPoolSignInPolicy","description":"The policy for allowed types of authentication in a user pool. To activate this setting, your user pool must be in the [Essentials tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html) or higher."}},"type":"object"},"aws-native:cognito:UserPoolPreTokenGenerationConfig":{"properties":{"lambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.\n\nThis parameter and the `PreTokenGeneration` property of `LambdaConfig` have the same value. For new instances of pre token generation triggers, set `LambdaArn` ."},"lambdaVersion":{"type":"string","description":"The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features."}},"type":"object"},"aws-native:cognito:UserPoolRecoveryOption":{"properties":{"name":{"type":"string","description":"The recovery method that this object sets a recovery option for."},"priority":{"type":"integer","description":"Your priority preference for using the specified attribute in account recovery. The highest priority is `1` ."}},"type":"object"},"aws-native:cognito:UserPoolResourceServerResourceServerScopeType":{"properties":{"scopeDescription":{"type":"string","description":"A friendly description of a custom scope."},"scopeName":{"type":"string","description":"The name of the scope. Amazon Cognito renders custom scopes in the format `resourceServerIdentifier/ScopeName` . For example, if this parameter is `exampleScope` in the resource server with the identifier `exampleResourceServer` , you request and receive the scope `exampleResourceServer/exampleScope` ."}},"type":"object","required":["scopeDescription","scopeName"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverActionType":{"properties":{"eventAction":{"type":"string","description":"The action to take for the attempted account takeover action for the associated risk level. Valid values are as follows:\n\n- `BLOCK` : Block the request.\n- `MFA_IF_CONFIGURED` : Present an MFA challenge if possible. MFA is possible if the user pool has active MFA methods that the user can set up. For example, if the user pool only supports SMS message MFA but the user doesn't have a phone number attribute, MFA setup isn't possible. If MFA setup isn't possible, allow the request.\n- `MFA_REQUIRED` : Present an MFA challenge if possible. Block the request if a user hasn't set up MFA. To sign in with required MFA, users must have an email address or phone number attribute, or a registered TOTP factor.\n- `NO_ACTION` : Take no action. Permit sign-in."},"notify":{"type":"boolean","description":"Determines whether Amazon Cognito sends a user a notification message when your user pools assesses a user's session at the associated risk level."}},"type":"object","required":["eventAction","notify"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverActionsType":{"properties":{"highAction":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverActionType","description":"The action that you assign to a high-risk assessment by threat protection."},"lowAction":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverActionType","description":"The action that you assign to a low-risk assessment by threat protection."},"mediumAction":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverActionType","description":"The action that you assign to a medium-risk assessment by threat protection."}},"type":"object"},"aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType":{"properties":{"actions":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverActionsType","description":"A list of account-takeover actions for each level of risk that Amazon Cognito might assess with threat protection."},"notifyConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentNotifyConfigurationType","description":"The settings for composing and sending an email message when threat protection assesses a risk level with adaptive authentication. When you choose to notify users in `AccountTakeoverRiskConfiguration` , Amazon Cognito sends an email message using the method and template that you set with this data type."}},"type":"object","required":["actions"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsType":{"properties":{"eventAction":{"type":"string","description":"The action that Amazon Cognito takes when it detects compromised credentials."}},"type":"object","required":["eventAction"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType":{"properties":{"actions":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsType","description":"Settings for the actions that you want your user pool to take when Amazon Cognito detects compromised credentials."},"eventFilter":{"type":"array","items":{"type":"string"},"description":"Settings for the sign-in activity where you want to configure compromised-credentials actions. Defaults to all events."}},"type":"object","required":["actions"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentNotifyConfigurationType":{"properties":{"blockEmail":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentNotifyEmailType","description":"The template for the email message that your user pool sends when a detected risk event is blocked."},"from":{"type":"string","description":"The email address that sends the email message. The address must be either individually verified with Amazon Simple Email Service, or from a domain that has been verified with Amazon SES."},"mfaEmail":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentNotifyEmailType","description":"The template for the email message that your user pool sends when MFA is challenged in response to a detected risk."},"noActionEmail":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentNotifyEmailType","description":"The template for the email message that your user pool sends when no action is taken in response to a detected risk."},"replyTo":{"type":"string","description":"The reply-to email address of an email template. Can be an email address in the format `admin@example.com` or `Administrator \u003cadmin@example.com\u003e` ."},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the `From` parameter."}},"type":"object","required":["sourceArn"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentNotifyEmailType":{"properties":{"htmlBody":{"type":"string","description":"The body of an email notification formatted in HTML. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively."},"subject":{"type":"string","description":"The subject of the threat protection email notification."},"textBody":{"type":"string","description":"The body of an email notification formatted in plaintext. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively."}},"type":"object","required":["subject"]},"aws-native:cognito:UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType":{"properties":{"blockedIpRangeList":{"type":"array","items":{"type":"string"},"description":"An always-block IP address list. Overrides the risk decision and always blocks authentication requests. This parameter is displayed and set in CIDR notation."},"skippedIpRangeList":{"type":"array","items":{"type":"string"},"description":"An always-allow IP address list. Risk detection isn't performed on the IP addresses in this range list. This parameter is displayed and set in CIDR notation."}},"type":"object"},"aws-native:cognito:UserPoolSchemaAttribute":{"properties":{"attributeDataType":{"type":"string","description":"The data format of the values for your attribute. When you choose an `AttributeDataType` , Amazon Cognito validates the input against the data type. A custom attribute value in your user's ID token is always a string, for example `\"custom:isMember\" : \"true\"` or `\"custom:YearsAsMember\" : \"12\"` ."},"developerOnlyAttribute":{"type":"boolean","description":"\u003e You should use [WriteAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes) in the user pool client to control how attributes can be mutated for new use cases instead of using `DeveloperOnlyAttribute` . \n\nSpecifies whether the attribute type is developer only. This attribute can only be modified by an administrator. Users won't be able to modify this attribute using their access token. For example, `DeveloperOnlyAttribute` can be modified using AdminUpdateUserAttributes but can't be updated using UpdateUserAttributes."},"mutable":{"type":"boolean","description":"Specifies whether the value of the attribute can be changed.\n\nAny user pool attribute whose value you map from an IdP attribute must be mutable, with a parameter value of `true` . Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If an attribute is immutable, Amazon Cognito throws an error when it attempts to update the attribute. For more information, see [Specifying Identity Provider Attribute Mappings for Your User Pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) ."},"name":{"type":"string","description":"The name of your user pool attribute. When you create or update a user pool, adding a schema attribute creates a custom or developer-only attribute. When you add an attribute with a `Name` value of `MyAttribute` , Amazon Cognito creates the custom attribute `custom:MyAttribute` . When `DeveloperOnlyAttribute` is `true` , Amazon Cognito creates your attribute as `dev:MyAttribute` . In an operation that describes a user pool, Amazon Cognito returns this value as `value` for standard attributes, `custom:value` for custom attributes, and `dev:value` for developer-only attributes.."},"numberAttributeConstraints":{"$ref":"#/types/aws-native:cognito:UserPoolNumberAttributeConstraints","description":"Specifies the constraints for an attribute of the number type."},"required":{"type":"boolean","description":"Specifies whether a user pool attribute is required. If the attribute is required and the user doesn't provide a value, registration or sign-in will fail."},"stringAttributeConstraints":{"$ref":"#/types/aws-native:cognito:UserPoolStringAttributeConstraints","description":"Specifies the constraints for an attribute of the string type."}},"type":"object"},"aws-native:cognito:UserPoolSignInPolicy":{"properties":{"allowedFirstAuthFactors":{"type":"array","items":{"type":"string"},"description":"The sign-in methods that a user pool supports as the first factor. You can permit users to start authentication with a standard username and password, or with other one-time password and hardware factors.\n\nSupports values of `EMAIL_OTP` , `SMS_OTP` , `WEB_AUTHN` and `PASSWORD` ,"}},"type":"object"},"aws-native:cognito:UserPoolSmsConfiguration":{"properties":{"externalId":{"type":"string","description":"The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .\n\nFor more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) ."},"snsCallerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon SNS caller. This is the ARN of the IAM role in your AWS account that Amazon Cognito will use to send SMS messages. SMS messages are subject to a [spending limit](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html) ."},"snsRegion":{"type":"string","description":"The AWS Region to use with Amazon SNS integration. You can choose the same Region as your user pool, or a supported *Legacy Amazon SNS alternate Region* .\n\nAmazon Cognito resources in the Asia Pacific (Seoul) AWS Region must use your Amazon SNS configuration in the Asia Pacific (Tokyo) Region. For more information, see [SMS message settings for Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."}},"type":"object"},"aws-native:cognito:UserPoolStringAttributeConstraints":{"properties":{"maxLength":{"type":"string","description":"The maximum length of a string attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer."},"minLength":{"type":"string","description":"The minimum length of a string attribute value."}},"type":"object"},"aws-native:cognito:UserPoolTier":{"description":"The user pool [feature plan](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-sign-in-feature-plans.html) , or tier. This parameter determines the eligibility of the user pool for features like managed login, access-token customization, and threat protection. Defaults to `ESSENTIALS` .","type":"string","enum":[{"name":"Lite","value":"LITE"},{"name":"Essentials","value":"ESSENTIALS"},{"name":"Plus","value":"PLUS"}]},"aws-native:cognito:UserPoolUserAttributeType":{"properties":{"name":{"type":"string","description":"The name of the attribute."},"value":{"type":"string","description":"The value of the attribute."}},"type":"object"},"aws-native:cognito:UserPoolUserAttributeUpdateSettings":{"properties":{"attributesRequireVerificationBeforeUpdate":{"type":"array","items":{"type":"string"},"description":"Requires that your user verifies their email address, phone number, or both before Amazon Cognito updates the value of that attribute. When you update a user attribute that has this option activated, Amazon Cognito sends a verification message to the new phone number or email address. Amazon Cognito doesn’t change the value of the attribute until your user responds to the verification message and confirms the new value.\n\nWhen `AttributesRequireVerificationBeforeUpdate` is false, your user pool doesn't require that your users verify attribute changes before Amazon Cognito updates them. In a user pool where `AttributesRequireVerificationBeforeUpdate` is false, API operations that change attribute values can immediately update a user’s `email` or `phone_number` attribute."}},"type":"object","required":["attributesRequireVerificationBeforeUpdate"]},"aws-native:cognito:UserPoolUsernameConfiguration":{"properties":{"caseSensitive":{"type":"boolean","description":"Specifies whether user name case sensitivity will be applied for all users in the user pool through Amazon Cognito APIs. For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, users can sign in as the same user when they enter a different capitalization of their user name.\n\nValid values include:\n\n- **true** - Enables case sensitivity for all username input. When this option is set to `true` , users must sign in using the exact capitalization of their given username, such as \"UserName\". This is the default value.\n- **false** - Enables case insensitivity for all username input. For example, when this option is set to `false` , users can sign in using `username` , `USERNAME` , or `UserName` . This option also enables both `preferred_username` and `email` alias to be case insensitive, in addition to the `username` attribute."}},"type":"object"},"aws-native:cognito:UserPoolVerificationMessageTemplate":{"properties":{"defaultEmailOption":{"type":"string","description":"The configuration of verification emails to contain a clickable link or a verification code.\n\nFor link, your template body must contain link text in the format `{##Click here##}` . \"Click here\" in the example is a customizable string. For code, your template body must contain a code placeholder in the format `{####}` ."},"emailMessage":{"type":"string","description":"The template for email messages that Amazon Cognito sends to your users. You can set an `EmailMessage` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration."},"emailMessageByLink":{"type":"string","description":"The email message template for sending a confirmation link to the user. You can set an `EmailMessageByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration."},"emailSubject":{"type":"string","description":"The subject line for the email message template. You can set an `EmailSubject` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration."},"emailSubjectByLink":{"type":"string","description":"The subject line for the email message template for sending a confirmation link to the user. You can set an `EmailSubjectByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration."},"smsMessage":{"type":"string","description":"The template for SMS messages that Amazon Cognito sends to your users."}},"type":"object"},"aws-native:comprehend:DocumentClassifierAugmentedManifestsListItem":{"properties":{"attributeNames":{"type":"array","items":{"type":"string"},"description":"The JSON attribute that contains the annotations for your training documents. The number of attribute names that you specify depends on whether your augmented manifest file is the output of a single labeling job or a chained labeling job.\n\nIf your file is the output of a single labeling job, specify the LabelAttributeName key that was used when the job was created in Ground Truth.\n\nIf your file is the output of a chained labeling job, specify the LabelAttributeName key for one or more jobs in the chain. Each LabelAttributeName key provides the annotations from an individual job."},"s3Uri":{"type":"string","description":"The Amazon S3 location of the augmented manifest file."},"split":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierAugmentedManifestsListItemSplit","description":"The purpose of the data you've provided in the augmented manifest. You can either train or test this data. If you don't specify, the default is train.\n\nTRAIN - all of the documents in the manifest will be used for training. If no test documents are provided, Amazon Comprehend will automatically reserve a portion of the training documents for testing.\n\nTEST - all of the documents in the manifest will be used for testing."}},"type":"object","required":["attributeNames","s3Uri"]},"aws-native:comprehend:DocumentClassifierAugmentedManifestsListItemSplit":{"description":"The purpose of the data you've provided in the augmented manifest. You can either train or test this data. If you don't specify, the default is train.\n\nTRAIN - all of the documents in the manifest will be used for training. If no test documents are provided, Amazon Comprehend will automatically reserve a portion of the training documents for testing.\n\nTEST - all of the documents in the manifest will be used for testing.","type":"string","enum":[{"name":"Train","value":"TRAIN"},{"name":"Test","value":"TEST"}]},"aws-native:comprehend:DocumentClassifierDocumentReaderConfig":{"properties":{"documentReadAction":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierDocumentReaderConfigDocumentReadAction","description":"This field defines the Amazon Textract API operation that Amazon Comprehend uses to extract text from PDF files and image files. Enter one of the following values:\n\n- `TEXTRACT_DETECT_DOCUMENT_TEXT` - The Amazon Comprehend service uses the `DetectDocumentText` API operation.\n- `TEXTRACT_ANALYZE_DOCUMENT` - The Amazon Comprehend service uses the `AnalyzeDocument` API operation."},"documentReadMode":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierDocumentReaderConfigDocumentReadMode","description":"Determines the text extraction actions for PDF files. Enter one of the following values:\n\n- `SERVICE_DEFAULT` - use the Amazon Comprehend service defaults for PDF files.\n- `FORCE_DOCUMENT_READ_ACTION` - Amazon Comprehend uses the Textract API specified by DocumentReadAction for all PDF files, including digital PDF files."},"featureTypes":{"type":"array","items":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierDocumentReaderConfigFeatureTypesItem"},"description":"Specifies the type of Amazon Textract features to apply. If you chose `TEXTRACT_ANALYZE_DOCUMENT` as the read action, you must specify one or both of the following values:\n\n- `TABLES` - Returns additional information about any tables that are detected in the input document.\n- `FORMS` - Returns additional information about any forms that are detected in the input document."}},"type":"object","required":["documentReadAction"]},"aws-native:comprehend:DocumentClassifierDocumentReaderConfigDocumentReadAction":{"description":"This field defines the Amazon Textract API operation that Amazon Comprehend uses to extract text from PDF files and image files. Enter one of the following values:\n\n- `TEXTRACT_DETECT_DOCUMENT_TEXT` - The Amazon Comprehend service uses the `DetectDocumentText` API operation.\n- `TEXTRACT_ANALYZE_DOCUMENT` - The Amazon Comprehend service uses the `AnalyzeDocument` API operation.","type":"string","enum":[{"name":"TextractDetectDocumentText","value":"TEXTRACT_DETECT_DOCUMENT_TEXT"},{"name":"TextractAnalyzeDocument","value":"TEXTRACT_ANALYZE_DOCUMENT"}]},"aws-native:comprehend:DocumentClassifierDocumentReaderConfigDocumentReadMode":{"description":"Determines the text extraction actions for PDF files. Enter one of the following values:\n\n- `SERVICE_DEFAULT` - use the Amazon Comprehend service defaults for PDF files.\n- `FORCE_DOCUMENT_READ_ACTION` - Amazon Comprehend uses the Textract API specified by DocumentReadAction for all PDF files, including digital PDF files.","type":"string","enum":[{"name":"ServiceDefault","value":"SERVICE_DEFAULT"},{"name":"ForceDocumentReadAction","value":"FORCE_DOCUMENT_READ_ACTION"}]},"aws-native:comprehend:DocumentClassifierDocumentReaderConfigFeatureTypesItem":{"type":"string","enum":[{"name":"Tables","value":"TABLES"},{"name":"Forms","value":"FORMS"}]},"aws-native:comprehend:DocumentClassifierDocuments":{"properties":{"s3Uri":{"type":"string","description":"The S3 URI location of the training documents specified in the S3Uri CSV file."},"testS3Uri":{"type":"string","description":"The S3 URI location of the test documents included in the TestS3Uri CSV file. This field is not required if you do not specify a test CSV file."}},"type":"object","required":["s3Uri"]},"aws-native:comprehend:DocumentClassifierInputDataConfig":{"properties":{"augmentedManifests":{"type":"array","items":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierAugmentedManifestsListItem"},"description":"A list of augmented manifest files that provide training data for your custom model. An augmented manifest file is a labeled dataset that is produced by Amazon SageMaker Ground Truth.\n\nThis parameter is required if you set `DataFormat` to `AUGMENTED_MANIFEST` ."},"dataFormat":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierInputDataConfigDataFormat","description":"The format of your training data:\n\n- `COMPREHEND_CSV` : A two-column CSV file, where labels are provided in the first column, and documents are provided in the second. If you use this value, you must provide the `S3Uri` parameter in your request.\n- `AUGMENTED_MANIFEST` : A labeled dataset that is produced by Amazon SageMaker Ground Truth. This file is in JSON lines format. Each line is a complete JSON object that contains a training document and its associated labels.\n\nIf you use this value, you must provide the `AugmentedManifests` parameter in your request.\n\nIf you don't specify a value, Amazon Comprehend uses `COMPREHEND_CSV` as the default."},"documentReaderConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierDocumentReaderConfig"},"documentType":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierInputDataConfigDocumentType","description":"The type of input documents for training the model. Provide plain-text documents to create a plain-text model, and provide semi-structured documents to create a native document model."},"documents":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierDocuments","description":"The S3 location of the training documents. This parameter is required in a request to create a native document model."},"labelDelimiter":{"type":"string","description":"Indicates the delimiter used to separate each label for training a multi-label classifier. The default delimiter between labels is a pipe (|). You can use a different character as a delimiter (if it's an allowed character) by specifying it under Delimiter for labels. If the training documents use a delimiter other than the default or the delimiter you specify, the labels on that line will be combined to make a single unique label, such as LABELLABELLABEL."},"s3Uri":{"type":"string","description":"The Amazon S3 URI for the input data. The S3 bucket must be in the same Region as the API endpoint that you are calling. The URI can point to a single input file or it can provide the prefix for a collection of input files.\n\nFor example, if you use the URI `S3://bucketName/prefix` , if the prefix is a single file, Amazon Comprehend uses that file as input. If more than one file begins with the prefix, Amazon Comprehend uses all of them as input.\n\nThis parameter is required if you set `DataFormat` to `COMPREHEND_CSV` ."},"testS3Uri":{"type":"string","description":"This specifies the Amazon S3 location that contains the test annotations for the document classifier. The URI must be in the same AWS Region as the API endpoint that you are calling."}},"type":"object"},"aws-native:comprehend:DocumentClassifierInputDataConfigDataFormat":{"description":"The format of your training data:\n\n- `COMPREHEND_CSV` : A two-column CSV file, where labels are provided in the first column, and documents are provided in the second. If you use this value, you must provide the `S3Uri` parameter in your request.\n- `AUGMENTED_MANIFEST` : A labeled dataset that is produced by Amazon SageMaker Ground Truth. This file is in JSON lines format. Each line is a complete JSON object that contains a training document and its associated labels.\n\nIf you use this value, you must provide the `AugmentedManifests` parameter in your request.\n\nIf you don't specify a value, Amazon Comprehend uses `COMPREHEND_CSV` as the default.","type":"string","enum":[{"name":"ComprehendCsv","value":"COMPREHEND_CSV"},{"name":"AugmentedManifest","value":"AUGMENTED_MANIFEST"}]},"aws-native:comprehend:DocumentClassifierInputDataConfigDocumentType":{"description":"The type of input documents for training the model. Provide plain-text documents to create a plain-text model, and provide semi-structured documents to create a native document model.","type":"string","enum":[{"name":"PlainTextDocument","value":"PLAIN_TEXT_DOCUMENT"},{"name":"SemiStructuredDocument","value":"SEMI_STRUCTURED_DOCUMENT"}]},"aws-native:comprehend:DocumentClassifierLanguageCode":{"description":"The language of the input documents. You can specify any of the languages supported by Amazon Comprehend. All documents must be in the same language.","type":"string","enum":[{"name":"En","value":"en"},{"name":"Es","value":"es"},{"name":"Fr","value":"fr"},{"name":"It","value":"it"},{"name":"De","value":"de"},{"name":"Pt","value":"pt"}]},"aws-native:comprehend:DocumentClassifierMode":{"description":"Indicates the mode in which the classifier will be trained. The classifier can be trained in multi-class (single-label) mode or multi-label mode. Multi-class mode identifies a single class label for each document and multi-label mode identifies one or more class labels for each document. Multiple labels for an individual document are separated by a delimiter. The default delimiter between labels is a pipe (|).","type":"string","enum":[{"name":"MultiClass","value":"MULTI_CLASS"},{"name":"MultiLabel","value":"MULTI_LABEL"}]},"aws-native:comprehend:DocumentClassifierOutputDataConfig":{"properties":{"kmsKeyId":{"type":"string","description":"ID for the AWS Key Management Service (KMS) key that Amazon Comprehend uses to encrypt the output results from an analysis job. The KmsKeyId can be one of the following formats:\n\n- KMS Key ID: `\"1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- Amazon Resource Name (ARN) of a KMS Key: `\"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- KMS Key Alias: `\"alias/ExampleAlias\"`\n- ARN of a KMS Key Alias: `\"arn:aws:kms:us-west-2:111122223333:alias/ExampleAlias\"`"},"s3Uri":{"type":"string","description":"When you use the `OutputDataConfig` object while creating a custom classifier, you specify the Amazon S3 location where you want to write the confusion matrix and other output files. The URI must be in the same Region as the API endpoint that you are calling. The location is used as the prefix for the actual location of this output file.\n\nWhen the custom classifier job is finished, the service creates the output file in a directory specific to the job. The `S3Uri` field contains the location of the output file, called `output.tar.gz` . It is a compressed archive that contains the confusion matrix."}},"type":"object"},"aws-native:comprehend:DocumentClassifierTag":{"properties":{"key":{"type":"string","description":"The initial part of a key-value pair that forms a tag associated with a given resource. For instance, if you want to show which resources are used by which departments, you might use \"Department\" as the key portion of the pair, with multiple possible values such as \"sales,\" \"legal,\" and \"administration.\""},"value":{"type":"string","description":"The second part of a key-value pair that forms a tag associated with a given resource. For instance, if you want to show which resources are used by which departments, you might use \"Department\" as the initial (key) portion of the pair, with a value of \"sales\" to indicate the sales department."}},"type":"object","required":["key","value"]},"aws-native:comprehend:DocumentClassifierVpcConfig":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID number for a security group on an instance of your private VPC. Security groups on your VPC function serve as a virtual firewall to control inbound and outbound traffic and provides security for the resources that you’ll be accessing on the VPC. This ID number is preceded by \"sg-\", for instance: \"sg-03b388029b0a285ea\". For more information, see [Security Groups for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) ."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID for each subnet being used in your private VPC. This subnet is a subset of the a range of IPv4 addresses used by the VPC and is specific to a given availability zone in the VPC’s Region. This ID number is preceded by \"subnet-\", for instance: \"subnet-04ccf456919e69055\". For more information, see [VPCs and Subnets](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html) ."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:comprehend:FlywheelDataSecurityConfig":{"properties":{"dataLakeKmsKeyId":{"type":"string","description":"ID for the AWS  key that Amazon Comprehend uses to encrypt the data in the data lake."},"modelKmsKeyId":{"type":"string","description":"ID for the AWS  key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:\n\n- KMS Key ID: `\"1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- Amazon Resource Name (ARN) of a KMS Key: `\"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"`"},"volumeKmsKeyId":{"type":"string","description":"ID for the AWS  key that Amazon Comprehend uses to encrypt the volume."},"vpcConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelVpcConfig","description":"Configuration parameters for an optional private Virtual Private Cloud (VPC) containing the resources you are using for the job. For more information, see [Amazon VPC](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-vpc.html) ."}},"type":"object"},"aws-native:comprehend:FlywheelDocumentClassificationConfig":{"properties":{"labels":{"type":"array","items":{"type":"string"},"description":"One or more labels to associate with the custom classifier."},"mode":{"$ref":"#/types/aws-native:comprehend:FlywheelDocumentClassificationConfigMode","description":"Classification mode indicates whether the documents are `MULTI_CLASS` or `MULTI_LABEL` ."}},"type":"object","required":["mode"]},"aws-native:comprehend:FlywheelDocumentClassificationConfigMode":{"description":"Classification mode indicates whether the documents are `MULTI_CLASS` or `MULTI_LABEL` .","type":"string","enum":[{"name":"MultiClass","value":"MULTI_CLASS"},{"name":"MultiLabel","value":"MULTI_LABEL"}]},"aws-native:comprehend:FlywheelEntityRecognitionConfig":{"properties":{"entityTypes":{"type":"array","items":{"$ref":"#/types/aws-native:comprehend:FlywheelEntityTypesListItem"},"description":"Up to 25 entity types that the model is trained to recognize."}},"type":"object"},"aws-native:comprehend:FlywheelEntityTypesListItem":{"properties":{"type":{"type":"string","description":"An entity type within a labeled training dataset that Amazon Comprehend uses to train a custom entity recognizer.\n\nEntity types must not contain the following invalid characters: \\n (line break), \\\\n (escaped line break, \\r (carriage return), \\\\r (escaped carriage return), \\t (tab), \\\\t (escaped tab), and , (comma)."}},"type":"object","required":["type"]},"aws-native:comprehend:FlywheelModelType":{"description":"Model type of the flywheel's model.","type":"string","enum":[{"name":"DocumentClassifier","value":"DOCUMENT_CLASSIFIER"},{"name":"EntityRecognizer","value":"ENTITY_RECOGNIZER"}]},"aws-native:comprehend:FlywheelTag":{"properties":{"key":{"type":"string","description":"The initial part of a key-value pair that forms a tag associated with a given resource. For instance, if you want to show which resources are used by which departments, you might use \"Department\" as the key portion of the pair, with multiple possible values such as \"sales,\" \"legal,\" and \"administration.\""},"value":{"type":"string","description":"The second part of a key-value pair that forms a tag associated with a given resource. For instance, if you want to show which resources are used by which departments, you might use \"Department\" as the initial (key) portion of the pair, with a value of \"sales\" to indicate the sales department."}},"type":"object","required":["key","value"]},"aws-native:comprehend:FlywheelTaskConfig":{"properties":{"documentClassificationConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelDocumentClassificationConfig","description":"Configuration required for a document classification model."},"entityRecognitionConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelEntityRecognitionConfig","description":"Configuration required for an entity recognition model."},"languageCode":{"$ref":"#/types/aws-native:comprehend:FlywheelTaskConfigLanguageCode","description":"Language code for the language that the model supports."}},"type":"object","required":["languageCode"]},"aws-native:comprehend:FlywheelTaskConfigLanguageCode":{"description":"Language code for the language that the model supports.","type":"string","enum":[{"name":"En","value":"en"},{"name":"Es","value":"es"},{"name":"Fr","value":"fr"},{"name":"It","value":"it"},{"name":"De","value":"de"},{"name":"Pt","value":"pt"}]},"aws-native:comprehend:FlywheelVpcConfig":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID number for a security group on an instance of your private VPC. Security groups on your VPC function serve as a virtual firewall to control inbound and outbound traffic and provides security for the resources that you’ll be accessing on the VPC. This ID number is preceded by \"sg-\", for instance: \"sg-03b388029b0a285ea\". For more information, see [Security Groups for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) ."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID for each subnet being used in your private VPC. This subnet is a subset of the a range of IPv4 addresses used by the VPC and is specific to a given availability zone in the VPC’s Region. This ID number is preceded by \"subnet-\", for instance: \"subnet-04ccf456919e69055\". For more information, see [VPCs and Subnets](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html) ."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:computeoptimizer:AutomationRuleCriteria":{"properties":{"ebsVolumeSizeInGib":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleIntegerCriteriaCondition"}},"ebsVolumeType":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStringCriteriaCondition"}},"estimatedMonthlySavings":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleDoubleCriteriaCondition"}},"lookBackPeriodInDays":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleIntegerCriteriaCondition"}},"region":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStringCriteriaCondition"}},"resourceArn":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStringCriteriaCondition"}},"resourceTag":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleResourceTagsCriteriaCondition"}},"restartNeeded":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStringCriteriaCondition"}}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleDoubleCriteriaCondition":{"properties":{"comparison":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleDoubleCriteriaConditionComparison"},"values":{"type":"array","items":{"type":"number"}}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleDoubleCriteriaConditionComparison":{"type":"string","enum":[{"name":"StringEquals","value":"StringEquals"},{"name":"StringNotEquals","value":"StringNotEquals"},{"name":"StringEqualsIgnoreCase","value":"StringEqualsIgnoreCase"},{"name":"StringNotEqualsIgnoreCase","value":"StringNotEqualsIgnoreCase"},{"name":"StringLike","value":"StringLike"},{"name":"StringNotLike","value":"StringNotLike"},{"name":"NumericEquals","value":"NumericEquals"},{"name":"NumericNotEquals","value":"NumericNotEquals"},{"name":"NumericLessThan","value":"NumericLessThan"},{"name":"NumericLessThanEquals","value":"NumericLessThanEquals"},{"name":"NumericGreaterThan","value":"NumericGreaterThan"},{"name":"NumericGreaterThanEquals","value":"NumericGreaterThanEquals"}]},"aws-native:computeoptimizer:AutomationRuleIntegerCriteriaCondition":{"properties":{"comparison":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleIntegerCriteriaConditionComparison"},"values":{"type":"array","items":{"type":"integer"}}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleIntegerCriteriaConditionComparison":{"type":"string","enum":[{"name":"StringEquals","value":"StringEquals"},{"name":"StringNotEquals","value":"StringNotEquals"},{"name":"StringEqualsIgnoreCase","value":"StringEqualsIgnoreCase"},{"name":"StringNotEqualsIgnoreCase","value":"StringNotEqualsIgnoreCase"},{"name":"StringLike","value":"StringLike"},{"name":"StringNotLike","value":"StringNotLike"},{"name":"NumericEquals","value":"NumericEquals"},{"name":"NumericNotEquals","value":"NumericNotEquals"},{"name":"NumericLessThan","value":"NumericLessThan"},{"name":"NumericLessThanEquals","value":"NumericLessThanEquals"},{"name":"NumericGreaterThan","value":"NumericGreaterThan"},{"name":"NumericGreaterThanEquals","value":"NumericGreaterThanEquals"}]},"aws-native:computeoptimizer:AutomationRuleOrganizationConfiguration":{"properties":{"accountIds":{"type":"array","items":{"type":"string"},"description":"List of account IDs where the organization rule applies"},"ruleApplyOrder":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleOrganizationConfigurationRuleApplyOrder","description":"When the rule should be applied relative to account rules"}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleOrganizationConfigurationRuleApplyOrder":{"description":"When the rule should be applied relative to account rules","type":"string","enum":[{"name":"BeforeAccountRules","value":"BeforeAccountRules"},{"name":"AfterAccountRules","value":"AfterAccountRules"}]},"aws-native:computeoptimizer:AutomationRuleRecommendedActionTypesItem":{"type":"string","enum":[{"name":"SnapshotAndDeleteUnattachedEbsVolume","value":"SnapshotAndDeleteUnattachedEbsVolume"},{"name":"UpgradeEbsVolumeType","value":"UpgradeEbsVolumeType"}]},"aws-native:computeoptimizer:AutomationRuleResourceTagsCriteriaCondition":{"properties":{"comparison":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleResourceTagsCriteriaConditionComparison"},"key":{"type":"string"},"values":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleResourceTagsCriteriaConditionComparison":{"type":"string","enum":[{"name":"StringEquals","value":"StringEquals"},{"name":"StringNotEquals","value":"StringNotEquals"},{"name":"StringEqualsIgnoreCase","value":"StringEqualsIgnoreCase"},{"name":"StringNotEqualsIgnoreCase","value":"StringNotEqualsIgnoreCase"},{"name":"StringLike","value":"StringLike"},{"name":"StringNotLike","value":"StringNotLike"},{"name":"NumericEquals","value":"NumericEquals"},{"name":"NumericNotEquals","value":"NumericNotEquals"},{"name":"NumericLessThan","value":"NumericLessThan"},{"name":"NumericLessThanEquals","value":"NumericLessThanEquals"},{"name":"NumericGreaterThan","value":"NumericGreaterThan"},{"name":"NumericGreaterThanEquals","value":"NumericGreaterThanEquals"}]},"aws-native:computeoptimizer:AutomationRuleRuleType":{"description":"The type of automation rule.","type":"string","enum":[{"name":"AccountRule","value":"AccountRule"},{"name":"OrganizationRule","value":"OrganizationRule"}]},"aws-native:computeoptimizer:AutomationRuleSchedule":{"properties":{"executionWindowInMinutes":{"type":"integer","description":"Execution window duration in minutes"},"scheduleExpression":{"type":"string","description":"Schedule expression (e.g., cron or rate expression)"},"scheduleExpressionTimezone":{"type":"string","description":"IANA timezone identifier"}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleStatus":{"description":"The status of the automation rule.","type":"string","enum":[{"name":"Active","value":"Active"},{"name":"Inactive","value":"Inactive"}]},"aws-native:computeoptimizer:AutomationRuleStringCriteriaCondition":{"properties":{"comparison":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStringCriteriaConditionComparison"},"values":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:computeoptimizer:AutomationRuleStringCriteriaConditionComparison":{"type":"string","enum":[{"name":"StringEquals","value":"StringEquals"},{"name":"StringNotEquals","value":"StringNotEquals"},{"name":"StringEqualsIgnoreCase","value":"StringEqualsIgnoreCase"},{"name":"StringNotEqualsIgnoreCase","value":"StringNotEqualsIgnoreCase"},{"name":"StringLike","value":"StringLike"},{"name":"StringNotLike","value":"StringNotLike"},{"name":"NumericEquals","value":"NumericEquals"},{"name":"NumericNotEquals","value":"NumericNotEquals"},{"name":"NumericLessThan","value":"NumericLessThan"},{"name":"NumericLessThanEquals","value":"NumericLessThanEquals"},{"name":"NumericGreaterThan","value":"NumericGreaterThan"},{"name":"NumericGreaterThanEquals","value":"NumericGreaterThanEquals"}]},"aws-native:computeoptimizer:AutomationRuleTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:config:AssumeRole":{"description":"The configuration for a Provider to assume a role.","properties":{"durationSeconds":{"type":"integer","description":"Number of seconds to restrict the assume role session duration.","language":{"python":{"mapCase":false}}},"externalId":{"type":"string","description":"External identifier to use when assuming the role.","language":{"python":{"mapCase":false}}},"policy":{"type":"string","description":"IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.","language":{"python":{"mapCase":false}}},"policyArns":{"type":"array","items":{"type":"string"},"description":"Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the role.","language":{"python":{"mapCase":false}}},"roleArn":{"type":"string","description":"Amazon Resource Name (ARN) of the IAM Role to assume.","language":{"python":{"mapCase":false}}},"sessionName":{"type":"string","description":"Session name to use when assuming the role.","language":{"python":{"mapCase":false}}},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Map of assume role session tags.","language":{"python":{"mapCase":false}}},"transitiveTagKeys":{"type":"array","items":{"type":"string"},"description":"A list of keys for session tags that you want to set as transitive. If you set a tag key as transitive, the corresponding key and value passes to subsequent sessions in a role chain.","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:config:AutoNaming":{"description":"The configuration for automatically naming resources.","properties":{"autoTrim":{"type":"boolean","description":"Automatically trim the auto-generated name to meet the maximum length constraint.","language":{"python":{"mapCase":false}}},"randomSuffixMinLength":{"type":"integer","description":"The minimum length of the random suffix to append to the auto-generated name.","default":1,"language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:config:DefaultTags":{"description":"The configuration with resource tag settings to apply across all resources handled by this provider. This is designed to replace redundant per-resource `tags` configurations. Provider tags can be overridden with new values, but not excluded from specific resources. To override provider tag values, use the `tags` argument within a resource to configure new tag values for matching keys.","properties":{"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A group of tags to set across all resources.","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:config:Endpoints":{"description":"The configuration for for customizing service endpoints.","properties":{"cloudcontrol":{"type":"string","description":"Override the default endpoint for AWS CloudControl","language":{"python":{"mapCase":false}}},"cloudformation":{"type":"string","description":"Override the default endpoint for AWS CloudFormation","language":{"python":{"mapCase":false}}},"ec2":{"type":"string","description":"Override the default endpoint for AWS Elastic Compute Cloud (EC2)","language":{"python":{"mapCase":false}}},"ssm":{"type":"string","description":"Override the default endpoint for AWS Systems Manager","language":{"python":{"mapCase":false}}},"sts":{"type":"string","description":"Override the default endpoint for AWS Security Token Service (STS)","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:config:IgnoreTags":{"description":"The configuration with resource tag settings to ignore across all resources handled by this provider (except any individual service tag resources such as `ec2.Tag`) for situations where external systems are managing certain resource tags.","properties":{"keyPrefixes":{"type":"array","items":{"type":"string"},"description":"List of exact resource tag keys to ignore across all resources handled by this provider. This configuration prevents Pulumi from returning the tag in any `tags` attributes and displaying any configuration difference for the tag value. If any resource configuration still has this tag key configured in the `tags` argument, it will display a perpetual difference until the tag is removed from the argument or `ignoreChanges` is also used.","language":{"python":{"mapCase":false}}},"keys":{"type":"array","items":{"type":"string"},"description":"List of resource tag key prefixes to ignore across all resources handled by this provider. This configuration prevents Pulumi from returning any tag key matching the prefixes in any `tags` attributes and displaying any configuration difference for those tag values. If any resource configuration still has a tag matching one of the prefixes configured in the `tags` argument, it will display a perpetual difference until the tag is removed from the argument or `ignoreChanges` is also used.","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:configuration:AggregationAuthorizationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:configuration:ComplianceProperties":{"description":"Indicates whether an AWS resource or CC rule is compliant and provides the number of contributors that affect the compliance.","properties":{"type":{"type":"string","description":"Compliance type determined by the Config rule"}},"type":"object"},"aws-native:configuration:ConfigRuleCustomPolicyDetails":{"description":"Provides the CustomPolicyDetails, the rule owner (```` for managed rules, ``CUSTOM_POLICY`` for Custom Policy rules, and ``CUSTOM_LAMBDA`` for Custom Lambda rules), the rule identifier, and the events that cause the evaluation of your AWS resources.","properties":{"enableDebugLogDelivery":{"type":"boolean","description":"The boolean expression for enabling debug logging for your CC Custom Policy rule. The default value is ``false``."},"policyRuntime":{"type":"string","description":"The runtime system for your CC Custom Policy rule. Guard is a policy-as-code language that allows you to write policies that are enforced by CC Custom Policy rules. For more information about Guard, see the [Guard GitHub Repository](https://docs.aws.amazon.com/https://github.com/aws-cloudformation/cloudformation-guard)."},"policyText":{"type":"string","description":"The policy definition containing the logic for your CC Custom Policy rule."}},"type":"object"},"aws-native:configuration:ConfigRuleEvaluationModeConfiguration":{"description":"The configuration object for CC rule evaluation mode. The supported valid values are Detective or Proactive.","properties":{"mode":{"type":"string","description":"The mode of an evaluation. The valid values are Detective or Proactive."}},"type":"object"},"aws-native:configuration:ConfigRuleScope":{"description":"Defines which resources trigger an evaluation for an CC rule. The scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one resource ID. Specify a scope to constrain which resources trigger an evaluation for a rule. Otherwise, evaluations for the rule are triggered when any resource in your recording group changes in configuration.","properties":{"complianceResourceId":{"type":"string","description":"The ID of the only AWS resource that you want to trigger an evaluation for the rule. If you specify a resource ID, you must specify one resource type for ``ComplianceResourceTypes``."},"complianceResourceTypes":{"type":"array","items":{"type":"string"},"description":"The resource types of only those AWS resources that you want to trigger an evaluation for the rule. You can only specify one type if you also specify a resource ID for ``ComplianceResourceId``."},"tagKey":{"type":"string","description":"The tag key that is applied to only those AWS resources that you want to trigger an evaluation for the rule."},"tagValue":{"type":"string","description":"The tag value applied to only those AWS resources that you want to trigger an evaluation for the rule. If you specify a value for ``TagValue``, you must also specify a value for ``TagKey``."}},"type":"object"},"aws-native:configuration:ConfigRuleSource":{"description":"Provides the CustomPolicyDetails, the rule owner (```` for managed rules, ``CUSTOM_POLICY`` for Custom Policy rules, and ``CUSTOM_LAMBDA`` for Custom Lambda rules), the rule identifier, and the events that cause the evaluation of your AWS resources.","properties":{"customPolicyDetails":{"$ref":"#/types/aws-native:configuration:ConfigRuleCustomPolicyDetails","description":"Provides the runtime system, policy definition, and whether debug logging is enabled. Required when owner is set to ``CUSTOM_POLICY``."},"owner":{"type":"string","description":"Indicates whether AWS or the customer owns and manages the CC rule.\n  CC Managed Rules are predefined rules owned by AWS. For more information, see [Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html) in the *developer guide*.\n  CC Custom Rules are rules that you can develop either with Guard (``CUSTOM_POLICY``) or LAMlong (``CUSTOM_LAMBDA``). For more information, see [Custom Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html) in the *developer guide*."},"sourceDetails":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConfigRuleSourceDetail"},"description":"Provides the source and the message types that cause CC to evaluate your AWS resources against a rule. It also provides the frequency with which you want CC to run evaluations for the rule if the trigger type is periodic.\n If the owner is set to ``CUSTOM_POLICY``, the only acceptable values for the CC rule trigger message type are ``ConfigurationItemChangeNotification`` and ``OversizedConfigurationItemChangeNotification``."},"sourceIdentifier":{"type":"string","description":"For CC Managed rules, a predefined identifier from a list. For example, ``IAM_PASSWORD_POLICY`` is a managed rule. To reference a managed rule, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html).\n For CC Custom Lambda rules, the identifier is the Amazon Resource Name (ARN) of the rule's LAMlong function, such as ``arn:aws:lambda:us-east-2:123456789012:function:custom_rule_name``.\n For CC Custom Policy rules, this field will be ignored."}},"type":"object","required":["owner"]},"aws-native:configuration:ConfigRuleSourceDetail":{"description":"Provides the source and the message types that trigger CC to evaluate your AWS resources against a rule. It also provides the frequency with which you want CC to run evaluations for the rule if the trigger type is periodic. You can specify the parameter values for ``SourceDetail`` only for custom rules.","properties":{"eventSource":{"type":"string","description":"The source of the event, such as an AWS service, that triggers CC to evaluate your AWS resources."},"maximumExecutionFrequency":{"type":"string","description":"The frequency at which you want CC to run evaluations for a custom rule with a periodic trigger. If you specify a value for ``MaximumExecutionFrequency``, then ``MessageType`` must use the ``ScheduledNotification`` value.\n  By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the ``MaximumExecutionFrequency`` parameter.\n Based on the valid value you choose, CC runs evaluations once for each valid value. For example, if you choose ``Three_Hours``, CC runs evaluations once every three hours. In this case, ``Three_Hours`` is the frequency of this rule."},"messageType":{"type":"string","description":"The type of notification that triggers CC to run an evaluation for a rule. You can specify the following notification types:\n  +   ``ConfigurationItemChangeNotification`` - Triggers an evaluation when CC delivers a configuration item as a result of a resource change.\n  +   ``OversizedConfigurationItemChangeNotification`` - Triggers an evaluation when CC delivers an oversized configuration item. CC may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS.\n  +   ``ScheduledNotification`` - Triggers a periodic evaluation at the frequency specified for ``MaximumExecutionFrequency``.\n  +   ``ConfigurationSnapshotDeliveryCompleted`` - Triggers a periodic evaluation when CC delivers a configuration snapshot.\n  \n If you want your custom rule to be triggered by configuration changes, specify two SourceDetail objects, one for ``ConfigurationItemChangeNotification`` and one for ``OversizedConfigurationItemChangeNotification``."}},"type":"object","required":["eventSource","messageType"]},"aws-native:configuration:ConfigurationAggregatorAccountAggregationSource":{"properties":{"accountIds":{"type":"array","items":{"type":"string"},"description":"The 12-digit account ID of the account being aggregated."},"allAwsRegions":{"type":"boolean","description":"If true, aggregate existing AWS Config regions and future regions."},"awsRegions":{"type":"array","items":{"type":"string"},"description":"The source regions being aggregated."}},"type":"object","required":["accountIds"]},"aws-native:configuration:ConfigurationAggregatorOrganizationAggregationSource":{"properties":{"allAwsRegions":{"type":"boolean","description":"If true, aggregate existing AWS Config regions and future regions."},"awsRegions":{"type":"array","items":{"type":"string"},"description":"The source regions being aggregated."},"roleArn":{"type":"string","description":"ARN of the IAM role used to retrieve AWS Organizations details associated with the aggregator account."}},"type":"object","required":["roleArn"]},"aws-native:configuration:ConfigurationAggregatorTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:configuration:ConformancePackInputParameter":{"description":"Input parameters in the form of key-value pairs for the conformance pack.","properties":{"parameterName":{"type":"string","description":"One part of a key-value pair."},"parameterValue":{"type":"string","description":"Another part of the key-value pair."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:configuration:OrganizationConformancePackConformancePackInputParameter":{"description":"Input parameters in the form of key-value pairs for the conformance pack.","properties":{"parameterName":{"type":"string","description":"One part of a key-value pair."},"parameterValue":{"type":"string","description":"One part of a key-value pair."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:configuration:StoredQueryTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:configuration:TemplateSsmDocumentDetailsProperties":{"description":"The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document.","properties":{"documentName":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the SSM document to use to create a conformance pack. If you use the document name, AWS Config checks only your account and AWS Region for the SSM document."},"documentVersion":{"type":"string","description":"The version of the SSM document to use to create a conformance pack. By default, AWS Config uses the latest version.\n\n\u003e This field is optional."}},"type":"object"},"aws-native:connect:AgentStatusState":{"description":"The state of the status.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:connect:AgentStatusTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:AgentStatusType":{"description":"The type of agent status.","type":"string","enum":[{"name":"Routable","value":"ROUTABLE"},{"name":"Custom","value":"CUSTOM"},{"name":"Offline","value":"OFFLINE"}]},"aws-native:connect:AttributeConfigurationProperties":{"description":"Custom metadata associated to a Predefined attribute that controls how the attribute behaves when used by upstream services.","properties":{"enableValueValidationOnAssociation":{"type":"boolean","description":"Enables customers to enforce strict validation on the specific values that this predefined attribute can hold."},"isReadOnly":{"type":"boolean","description":"Allows the predefined attribute to show up and be managed in the Amazon Connect UI."}},"type":"object"},"aws-native:connect:ConstraintsProperties":{"description":"The constraints for the task template","properties":{"invisibleFields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateInvisibleFieldInfo"},"description":"Lists the fields that are invisible to agents."},"readOnlyFields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateReadOnlyFieldInfo"},"description":"Lists the fields that are read-only to agents, and cannot be edited."},"requiredFields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateRequiredFieldInfo"},"description":"Lists the fields that are required to be filled by agents."}},"type":"object"},"aws-native:connect:ContactFlowModuleTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:ContactFlowState":{"description":"The state of the contact flow.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Archived","value":"ARCHIVED"}]},"aws-native:connect:ContactFlowTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. . You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:ContactFlowType":{"description":"The type of the contact flow.","type":"string","enum":[{"name":"ContactFlow","value":"CONTACT_FLOW"},{"name":"CustomerQueue","value":"CUSTOMER_QUEUE"},{"name":"CustomerHold","value":"CUSTOMER_HOLD"},{"name":"CustomerWhisper","value":"CUSTOMER_WHISPER"},{"name":"AgentHold","value":"AGENT_HOLD"},{"name":"AgentWhisper","value":"AGENT_WHISPER"},{"name":"OutboundWhisper","value":"OUTBOUND_WHISPER"},{"name":"AgentTransfer","value":"AGENT_TRANSFER"},{"name":"QueueTransfer","value":"QUEUE_TRANSFER"},{"name":"Campaign","value":"CAMPAIGN"}]},"aws-native:connect:DataTableAttributeValueType":{"description":"The type of value allowed for this attribute. Must be one of TEXT, TEXT_LIST, NUMBER, NUMBER_LIST, or BOOLEAN. Determines how values are validated and processed.","type":"string","enum":[{"name":"Text","value":"TEXT"},{"name":"Number","value":"NUMBER"},{"name":"Boolean","value":"BOOLEAN"},{"name":"TextList","value":"TEXT_LIST"},{"name":"NumberList","value":"NUMBER_LIST"}]},"aws-native:connect:DataTableRecordProperties":{"properties":{"primaryValues":{"type":"array","items":{"$ref":"#/types/aws-native:connect:DataTableRecordValue"}},"values":{"type":"array","items":{"$ref":"#/types/aws-native:connect:DataTableRecordValue"}}},"type":"object","required":["values"]},"aws-native:connect:DataTableRecordValue":{"properties":{"attributeId":{"type":"string"},"attributeValue":{"type":"string"}},"type":"object"},"aws-native:connect:DataTableStatus":{"description":"The status of the Data Table","type":"string","enum":[{"name":"Published","value":"PUBLISHED"}]},"aws-native:connect:DataTableTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:connect:DataTableValueLockLevel":{"description":"The value lock level of the Data Table","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"DataTable","value":"DATA_TABLE"},{"name":"PrimaryValue","value":"PRIMARY_VALUE"},{"name":"Attribute","value":"ATTRIBUTE"},{"name":"Value","value":"VALUE"}]},"aws-native:connect:EmailAddressAliasConfiguration":{"description":"Configuration for an email address alias","properties":{"emailAddressArn":{"type":"string","description":"The identifier of the email address alias"}},"type":"object","required":["emailAddressArn"]},"aws-native:connect:EmailAddressTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:EvaluationFormAutoEvaluationConfiguration":{"description":"Configuration information about automated evaluations.","properties":{"enabled":{"type":"boolean"}},"type":"object"},"aws-native:connect:EvaluationFormAutomaticFailConfiguration":{"description":"Information about automatic fail configuration for an evaluation form.","properties":{"targetSection":{"type":"string","description":"The referenceId of the target section for auto failure."}},"type":"object"},"aws-native:connect:EvaluationFormBaseItem":{"description":"An item at the root level. All items must be sections.","properties":{"section":{"$ref":"#/types/aws-native:connect:EvaluationFormSection","description":"A subsection or inner section of an item."}},"type":"object","required":["section"]},"aws-native:connect:EvaluationFormEvaluationReviewConfiguration":{"description":"Configuration settings for evaluation reviews.","properties":{"eligibilityDays":{"type":"integer","description":"Number of days during which a request for review can be submitted for evaluations created from this form."},"reviewNotificationRecipients":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormEvaluationReviewNotificationRecipient"},"description":"List of recipients who should be notified when a review is requested."}},"type":"object","required":["reviewNotificationRecipients"]},"aws-native:connect:EvaluationFormEvaluationReviewNotificationRecipient":{"description":"Information about a recipient who should be notified when an evaluation review is requested.","properties":{"type":{"$ref":"#/types/aws-native:connect:EvaluationFormEvaluationReviewNotificationRecipientType","description":"The type of notification recipient."},"value":{"$ref":"#/types/aws-native:connect:EvaluationFormEvaluationReviewNotificationRecipientValue","description":"The value associated with the notification recipient type."}},"type":"object","required":["type","value"]},"aws-native:connect:EvaluationFormEvaluationReviewNotificationRecipientType":{"description":"The type of notification recipient.","type":"string","enum":[{"name":"UserId","value":"USER_ID"}]},"aws-native:connect:EvaluationFormEvaluationReviewNotificationRecipientValue":{"description":"The value information for an evaluation review notification recipient.","properties":{"userId":{"type":"string","description":"The user identifier for the notification recipient."}},"type":"object"},"aws-native:connect:EvaluationFormItem":{"description":"Items that are part of the evaluation form. The total number of sections and questions must not exceed 100 each. Questions must be contained in a section.","properties":{"question":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestion","description":"The information of the question."},"section":{"$ref":"#/types/aws-native:connect:EvaluationFormSection","description":"The information of the section."}},"type":"object"},"aws-native:connect:EvaluationFormItemEnablementCondition":{"description":"A condition for item enablement.","properties":{"operands":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementConditionOperand"},"description":"Operands of the enablement condition."},"operator":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementConditionOperator","description":"The operator to be used to be applied to operands if more than one provided."}},"type":"object","required":["operands"]},"aws-native:connect:EvaluationFormItemEnablementConditionOperand":{"description":"An operand of the enablement condition.","properties":{"expression":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementExpression","description":"An expression of the enablement condition."}},"type":"object"},"aws-native:connect:EvaluationFormItemEnablementConditionOperator":{"description":"The operator to be used to be applied to operands if more than one provided.","type":"string","enum":[{"name":"Or","value":"OR"},{"name":"And","value":"AND"}]},"aws-native:connect:EvaluationFormItemEnablementConfiguration":{"description":"An item enablement configuration.","properties":{"action":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementConfigurationAction","description":"An enablement action that if condition is satisfied."},"condition":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementCondition","description":"A condition for item enablement configuration."},"defaultAction":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementConfigurationDefaultAction","description":"An enablement action that if condition is not satisfied."}},"type":"object","required":["action","condition"]},"aws-native:connect:EvaluationFormItemEnablementConfigurationAction":{"description":"An enablement action that if condition is satisfied.","type":"string","enum":[{"name":"Disable","value":"DISABLE"},{"name":"Enable","value":"ENABLE"}]},"aws-native:connect:EvaluationFormItemEnablementConfigurationDefaultAction":{"description":"An enablement action that if condition is not satisfied.","type":"string","enum":[{"name":"Disable","value":"DISABLE"},{"name":"Enable","value":"ENABLE"}]},"aws-native:connect:EvaluationFormItemEnablementExpression":{"description":"An expression that defines a basic building block of conditional enablement.","properties":{"comparator":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementExpressionComparator","description":"A comparator to be used against list of values."},"source":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementSource","description":"A source item of enablement expression."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementSourceValue"},"description":"A list of values from source item."}},"type":"object","required":["comparator","source","values"]},"aws-native:connect:EvaluationFormItemEnablementExpressionComparator":{"description":"A comparator to be used against list of values.","type":"string","enum":[{"name":"In","value":"IN"},{"name":"NotIn","value":"NOT_IN"},{"name":"AllIn","value":"ALL_IN"},{"name":"Exact","value":"EXACT"}]},"aws-native:connect:EvaluationFormItemEnablementSource":{"description":"An enablement expression source item.","properties":{"refId":{"type":"string","description":"A referenceId of the source item."},"type":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementSourceType","description":"A type of source item."}},"type":"object","required":["type"]},"aws-native:connect:EvaluationFormItemEnablementSourceType":{"description":"A type of source item.","type":"string","enum":[{"name":"QuestionRefId","value":"QUESTION_REF_ID"}]},"aws-native:connect:EvaluationFormItemEnablementSourceValue":{"description":"An enablement expression source value.","properties":{"refId":{"type":"string","description":"A referenceId of the source value."},"type":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementSourceValueType","description":"A type of source item value."}},"type":"object"},"aws-native:connect:EvaluationFormItemEnablementSourceValueType":{"description":"A type of source item value.","type":"string","enum":[{"name":"OptionRefId","value":"OPTION_REF_ID"}]},"aws-native:connect:EvaluationFormLanguageConfiguration":{"description":"Language configuration for an evaluation form.","properties":{"formLanguage":{"$ref":"#/types/aws-native:connect:EvaluationFormLanguageConfigurationFormLanguage","description":"The language for the evaluation form."}},"type":"object"},"aws-native:connect:EvaluationFormLanguageConfigurationFormLanguage":{"description":"The language for the evaluation form.","type":"string","enum":[{"name":"DeDe","value":"de-DE"},{"name":"EnUs","value":"en-US"},{"name":"EsEs","value":"es-ES"},{"name":"FrFr","value":"fr-FR"},{"name":"ItIt","value":"it-IT"},{"name":"PtBr","value":"pt-BR"}]},"aws-native:connect:EvaluationFormMultiSelectQuestionAutomation":{"description":"Automation configuration for multi-select questions.","properties":{"answerSource":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionAutomationAnswerSource"},"defaultOptionRefIds":{"type":"array","items":{"type":"string"},"description":"Reference IDs of default options."},"options":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionAutomationOption"},"description":"Automation options for the multi-select question."}},"type":"object","required":["options"]},"aws-native:connect:EvaluationFormMultiSelectQuestionAutomationOption":{"description":"An automation option for a multi-select question.","properties":{"ruleCategory":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionRuleCategoryAutomation","description":"Rule category configuration for this automation option."}},"type":"object","required":["ruleCategory"]},"aws-native:connect:EvaluationFormMultiSelectQuestionOption":{"description":"An option for a multi-select question in an evaluation form.","properties":{"refId":{"type":"string","description":"Reference identifier for this option."},"text":{"type":"string","description":"Display text for this option."}},"type":"object","required":["refId","text"]},"aws-native:connect:EvaluationFormMultiSelectQuestionProperties":{"description":"Properties for a multi-select question in an evaluation form.","properties":{"automation":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionAutomation","description":"Automation configuration for this multi-select question."},"displayAs":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionPropertiesDisplayAs","description":"Display format for the multi-select question."},"options":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionOption"},"description":"Options available for this multi-select question."}},"type":"object","required":["options"]},"aws-native:connect:EvaluationFormMultiSelectQuestionPropertiesDisplayAs":{"description":"Display format for the multi-select question.","type":"string","enum":[{"name":"Dropdown","value":"DROPDOWN"},{"name":"Checkbox","value":"CHECKBOX"}]},"aws-native:connect:EvaluationFormMultiSelectQuestionRuleCategoryAutomation":{"description":"Automation rule for multi-select questions based on rule categories.","properties":{"category":{"type":"string","description":"The category name for this automation rule."},"condition":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionRuleCategoryAutomationCondition","description":"The condition for this automation rule."},"optionRefIds":{"type":"array","items":{"type":"string"},"description":"Reference IDs of options for this automation rule."}},"type":"object","required":["category","condition","optionRefIds"]},"aws-native:connect:EvaluationFormMultiSelectQuestionRuleCategoryAutomationCondition":{"description":"The condition for this automation rule.","type":"string","enum":[{"name":"Present","value":"PRESENT"},{"name":"NotPresent","value":"NOT_PRESENT"}]},"aws-native:connect:EvaluationFormNumericQuestionAutomation":{"description":"Information about the automation configuration in numeric questions.","properties":{"answerSource":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionAutomationAnswerSource","description":"A source of automation answer for numeric question."},"propertyValue":{"$ref":"#/types/aws-native:connect:EvaluationFormNumericQuestionPropertyValueAutomation","description":"The property value of the automation."}},"type":"object"},"aws-native:connect:EvaluationFormNumericQuestionOption":{"description":"Information about the option range used for scoring in numeric questions.","properties":{"automaticFail":{"type":"boolean","description":"The flag to mark the option as automatic fail. If an automatic fail answer is provided, the overall evaluation gets a score of 0."},"automaticFailConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormAutomaticFailConfiguration","description":"A configuration for automatic fail."},"maxValue":{"type":"integer","description":"The maximum answer value of the range option."},"minValue":{"type":"integer","description":"The minimum answer value of the range option."},"score":{"type":"integer","description":"The score assigned to answer values within the range option.\n *Minimum*: 0\n *Maximum*: 10"}},"type":"object","required":["maxValue","minValue"]},"aws-native:connect:EvaluationFormNumericQuestionProperties":{"description":"Information about properties for a numeric question in an evaluation form.","properties":{"automation":{"$ref":"#/types/aws-native:connect:EvaluationFormNumericQuestionAutomation","description":"The automation properties of the numeric question."},"maxValue":{"type":"integer","description":"The maximum answer value."},"minValue":{"type":"integer","description":"The minimum answer value."},"options":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormNumericQuestionOption"},"description":"The scoring options of the numeric question."}},"type":"object","required":["maxValue","minValue"]},"aws-native:connect:EvaluationFormNumericQuestionPropertyValueAutomation":{"description":"Information about the property value used in automation of a numeric questions.","properties":{"label":{"$ref":"#/types/aws-native:connect:EvaluationFormNumericQuestionPropertyValueAutomationLabel","description":"The property label of the automation."}},"type":"object","required":["label"]},"aws-native:connect:EvaluationFormNumericQuestionPropertyValueAutomationLabel":{"description":"The property label of the automation.","type":"string","enum":[{"name":"OverallCustomerSentimentScore","value":"OVERALL_CUSTOMER_SENTIMENT_SCORE"},{"name":"OverallAgentSentimentScore","value":"OVERALL_AGENT_SENTIMENT_SCORE"},{"name":"NonTalkTime","value":"NON_TALK_TIME"},{"name":"NonTalkTimePercentage","value":"NON_TALK_TIME_PERCENTAGE"},{"name":"NumberOfInterruptions","value":"NUMBER_OF_INTERRUPTIONS"},{"name":"ContactDuration","value":"CONTACT_DURATION"},{"name":"AgentInteractionDuration","value":"AGENT_INTERACTION_DURATION"},{"name":"CustomerHoldTime","value":"CUSTOMER_HOLD_TIME"},{"name":"LongestHoldDuration","value":"LONGEST_HOLD_DURATION"},{"name":"NumberOfHolds","value":"NUMBER_OF_HOLDS"},{"name":"AgentInteractionAndHoldDuration","value":"AGENT_INTERACTION_AND_HOLD_DURATION"},{"name":"CustomerSentimentScoreWithoutAgent","value":"CUSTOMER_SENTIMENT_SCORE_WITHOUT_AGENT"},{"name":"CustomerSentimentScoreWithAgent","value":"CUSTOMER_SENTIMENT_SCORE_WITH_AGENT"}]},"aws-native:connect:EvaluationFormQuestion":{"description":"Information about a question from an evaluation form.","properties":{"enablement":{"$ref":"#/types/aws-native:connect:EvaluationFormItemEnablementConfiguration","description":"A question conditional enablement."},"instructions":{"type":"string","description":"The instructions of the section.\n *Length Constraints*: Minimum length of 0. Maximum length of 1024."},"notApplicableEnabled":{"type":"boolean","description":"The flag to enable not applicable answers to the question."},"questionType":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionQuestionType","description":"The type of the question.\n *Allowed values*: ``NUMERIC`` | ``SINGLESELECT`` | ``TEXT``"},"questionTypeProperties":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionTypeProperties","description":"The properties of the type of question. Text questions do not have to define question type properties."},"refId":{"type":"string","description":"The identifier of the question. An identifier must be unique within the evaluation form.\n *Length Constraints*: Minimum length of 1. Maximum length of 40."},"title":{"type":"string","description":"The title of the question.\n *Length Constraints*: Minimum length of 1. Maximum length of 350."},"weight":{"type":"number","description":"The scoring weight of the section.\n *Minimum*: 0\n *Maximum*: 100"}},"type":"object","required":["questionType","refId","title"]},"aws-native:connect:EvaluationFormQuestionAutomationAnswerSource":{"description":"A question automation answer.","properties":{"sourceType":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionAutomationAnswerSourceSourceType","description":"The automation answer source type."}},"type":"object","required":["sourceType"]},"aws-native:connect:EvaluationFormQuestionAutomationAnswerSourceSourceType":{"description":"The automation answer source type.","type":"string","enum":[{"name":"ContactLensData","value":"CONTACT_LENS_DATA"},{"name":"GenAi","value":"GEN_AI"}]},"aws-native:connect:EvaluationFormQuestionQuestionType":{"description":"The type of the question.\n *Allowed values*: ``NUMERIC`` | ``SINGLESELECT`` | ``TEXT``","type":"string","enum":[{"name":"Numeric","value":"NUMERIC"},{"name":"Singleselect","value":"SINGLESELECT"},{"name":"Text","value":"TEXT"},{"name":"Multiselect","value":"MULTISELECT"},{"name":"Datetime","value":"DATETIME"}]},"aws-native:connect:EvaluationFormQuestionTypeProperties":{"description":"Information about properties for a question in an evaluation form. The question type properties must be either for a numeric question or a single select question.","properties":{"multiSelect":{"$ref":"#/types/aws-native:connect:EvaluationFormMultiSelectQuestionProperties","description":"Properties for multi-select question types."},"numeric":{"$ref":"#/types/aws-native:connect:EvaluationFormNumericQuestionProperties","description":"The properties of the numeric question."},"singleSelect":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionProperties","description":"The properties of the numeric question."},"text":{"$ref":"#/types/aws-native:connect:EvaluationFormTextQuestionProperties","description":"The properties of the text question."}},"type":"object"},"aws-native:connect:EvaluationFormScoringStrategy":{"description":"A scoring strategy of the evaluation form.","properties":{"mode":{"$ref":"#/types/aws-native:connect:EvaluationFormScoringStrategyMode","description":"The scoring mode of the evaluation form.\n *Allowed values*: ``QUESTION_ONLY`` | ``SECTION_ONLY``"},"status":{"$ref":"#/types/aws-native:connect:EvaluationFormScoringStrategyStatus","description":"The scoring status of the evaluation form.\n *Allowed values*: ``ENABLED`` | ``DISABLED``"}},"type":"object","required":["mode","status"]},"aws-native:connect:EvaluationFormScoringStrategyMode":{"description":"The scoring mode of the evaluation form.\n *Allowed values*: ``QUESTION_ONLY`` | ``SECTION_ONLY``","type":"string","enum":[{"name":"QuestionOnly","value":"QUESTION_ONLY"},{"name":"SectionOnly","value":"SECTION_ONLY"}]},"aws-native:connect:EvaluationFormScoringStrategyStatus":{"description":"The scoring status of the evaluation form.\n *Allowed values*: ``ENABLED`` | ``DISABLED``","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:connect:EvaluationFormSection":{"description":"Information about a section from an evaluation form. A section can contain sections and/or questions. Evaluation forms can only contain sections and subsections (two level nesting).","properties":{"instructions":{"type":"string","description":"The instructions of the section."},"items":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormItem"},"description":"The items of the section.\n *Minimum*: 1"},"refId":{"type":"string","description":"The identifier of the section. An identifier must be unique within the evaluation form.\n *Length Constraints*: Minimum length of 1. Maximum length of 40."},"title":{"type":"string","description":"The title of the section.\n *Length Constraints*: Minimum length of 1. Maximum length of 128."},"weight":{"type":"number","description":"The scoring weight of the section.\n *Minimum*: 0 \n *Maximum*: 100"}},"type":"object","required":["refId","title"]},"aws-native:connect:EvaluationFormSingleSelectQuestionAutomation":{"description":"Information about the automation configuration in single select questions. Automation options are evaluated in order, and the first matched option is applied. If no automation option matches, and there is a default option, then the default option is applied.","properties":{"answerSource":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionAutomationAnswerSource","description":"Automation answer source."},"defaultOptionRefId":{"type":"string","description":"The identifier of the default answer option, when none of the automation options match the criteria.\n *Length Constraints*: Minimum length of 1. Maximum length of 40."},"options":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionAutomationOption"},"description":"The automation options of the single select question.\n *Minimum*: 1\n *Maximum*: 20"}},"type":"object","required":["options"]},"aws-native:connect:EvaluationFormSingleSelectQuestionAutomationOption":{"description":"The automation options of the single select question.","properties":{"ruleCategory":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionRuleCategoryAutomation","description":"The automation option based on a rule category for the single select question."}},"type":"object","required":["ruleCategory"]},"aws-native:connect:EvaluationFormSingleSelectQuestionOption":{"description":"Information about the automation configuration in single select questions.","properties":{"automaticFail":{"type":"boolean","description":"The flag to mark the option as automatic fail. If an automatic fail answer is provided, the overall evaluation gets a score of 0."},"automaticFailConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormAutomaticFailConfiguration","description":"Whether automatic fail is configured on a single select question."},"refId":{"type":"string","description":"The identifier of the answer option. An identifier must be unique within the question.\n *Length Constraints*: Minimum length of 1. Maximum length of 40."},"score":{"type":"integer","description":"The score assigned to the answer option.\n *Minimum*: 0\n *Maximum*: 10"},"text":{"type":"string","description":"The title of the answer option.\n *Length Constraints*: Minimum length of 1. Maximum length of 128."}},"type":"object","required":["refId","text"]},"aws-native:connect:EvaluationFormSingleSelectQuestionProperties":{"description":"Information about the options in single select questions.","properties":{"automation":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionAutomation","description":"The display mode of the single select question."},"displayAs":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionPropertiesDisplayAs","description":"The display mode of the single select question.\n *Allowed values*: ``DROPDOWN`` | ``RADIO``"},"options":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionOption"},"description":"The answer options of the single select question.\n *Minimum*: 2\n *Maximum*: 256"}},"type":"object","required":["options"]},"aws-native:connect:EvaluationFormSingleSelectQuestionPropertiesDisplayAs":{"description":"The display mode of the single select question.\n *Allowed values*: ``DROPDOWN`` | ``RADIO``","type":"string","enum":[{"name":"Dropdown","value":"DROPDOWN"},{"name":"Radio","value":"RADIO"}]},"aws-native:connect:EvaluationFormSingleSelectQuestionRuleCategoryAutomation":{"description":"Information about the automation option based on a rule category for a single select question.\n *Length Constraints*: Minimum length of 1. Maximum length of 50.","properties":{"category":{"type":"string","description":"The category name, as defined in Rules.\n *Minimum*: 1\n *Maximum*: 50"},"condition":{"$ref":"#/types/aws-native:connect:EvaluationFormSingleSelectQuestionRuleCategoryAutomationCondition","description":"The condition to apply for the automation option. If the condition is PRESENT, then the option is applied when the contact data includes the category. Similarly, if the condition is NOT_PRESENT, then the option is applied when the contact data does not include the category.\n *Allowed values*: ``PRESENT`` | ``NOT_PRESENT``\n *Maximum*: 50"},"optionRefId":{"type":"string","description":"The identifier of the answer option. An identifier must be unique within the question.\n *Length Constraints*: Minimum length of 1. Maximum length of 40."}},"type":"object","required":["category","condition","optionRefId"]},"aws-native:connect:EvaluationFormSingleSelectQuestionRuleCategoryAutomationCondition":{"description":"The condition to apply for the automation option. If the condition is PRESENT, then the option is applied when the contact data includes the category. Similarly, if the condition is NOT_PRESENT, then the option is applied when the contact data does not include the category.\n *Allowed values*: ``PRESENT`` | ``NOT_PRESENT``\n *Maximum*: 50","type":"string","enum":[{"name":"Present","value":"PRESENT"},{"name":"NotPresent","value":"NOT_PRESENT"}]},"aws-native:connect:EvaluationFormStatus":{"description":"The status of the evaluation form.\n *Allowed values*: ``DRAFT`` | ``ACTIVE``","type":"string","enum":[{"name":"Draft","value":"DRAFT"},{"name":"Active","value":"ACTIVE"}]},"aws-native:connect:EvaluationFormTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"}},"type":"object","required":["key","value"]},"aws-native:connect:EvaluationFormTargetConfiguration":{"description":"Configuration that specifies the target for an evaluation form.","properties":{"contactInteractionType":{"$ref":"#/types/aws-native:connect:EvaluationFormTargetConfigurationContactInteractionType","description":"The contact interaction type for this evaluation form."}},"type":"object","required":["contactInteractionType"]},"aws-native:connect:EvaluationFormTargetConfigurationContactInteractionType":{"description":"The contact interaction type for this evaluation form.","type":"string","enum":[{"name":"Agent","value":"AGENT"},{"name":"Automated","value":"AUTOMATED"}]},"aws-native:connect:EvaluationFormTextQuestionAutomation":{"description":"Information about the automation configuration in text questions.","properties":{"answerSource":{"$ref":"#/types/aws-native:connect:EvaluationFormQuestionAutomationAnswerSource","description":"Automation answer source."}},"type":"object"},"aws-native:connect:EvaluationFormTextQuestionProperties":{"description":"Information about properties for a text question in an evaluation form.","properties":{"automation":{"$ref":"#/types/aws-native:connect:EvaluationFormTextQuestionAutomation","description":"The automation properties of the text question."}},"type":"object"},"aws-native:connect:ExternalInvocationConfigurationProperties":{"description":"Defines the external invocation configuration of the flow module resource","properties":{"enabled":{"type":"boolean","description":"Enable external invocation."}},"type":"object","required":["enabled"]},"aws-native:connect:FontFamily":{"properties":{"default":{"$ref":"#/types/aws-native:connect:WorkspaceFontFamily","description":"The default font family to use in the workspace theme."}},"type":"object"},"aws-native:connect:GranularAccessControlConfigurationProperties":{"description":"The granular access control configuration for the security profile, including data table permissions.","properties":{"dataTableAccessControlConfiguration":{"$ref":"#/types/aws-native:connect:SecurityProfileDataTableAccessControlConfiguration","description":"The access control configuration for data tables."}},"type":"object"},"aws-native:connect:HoursOfOperationConfig":{"description":"Contains information about the hours of operation.","properties":{"day":{"$ref":"#/types/aws-native:connect:HoursOfOperationConfigDay","description":"The day that the hours of operation applies to."},"endTime":{"$ref":"#/types/aws-native:connect:HoursOfOperationTimeSlice","description":"The end time that your contact center closes."},"startTime":{"$ref":"#/types/aws-native:connect:HoursOfOperationTimeSlice","description":"The start time that your contact center opens."}},"type":"object","required":["day","endTime","startTime"]},"aws-native:connect:HoursOfOperationConfigDay":{"description":"The day that the hours of operation applies to.","type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:connect:HoursOfOperationOverride":{"description":"Overrides attached to the hours of operation.","properties":{"effectiveFrom":{"type":"string","description":"The date from which the hours of operation override would be effective."},"effectiveTill":{"type":"string","description":"The date until the hours of operation override is effective."},"hoursOfOperationOverrideId":{"type":"string","description":"The identifier for the hours of operation override."},"overrideConfig":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverrideConfig"}},"overrideDescription":{"type":"string"},"overrideName":{"type":"string"},"overrideType":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverrideType"},"recurrenceConfig":{"$ref":"#/types/aws-native:connect:HoursOfOperationRecurrenceConfig"}},"type":"object","required":["effectiveFrom","effectiveTill","overrideConfig","overrideName"]},"aws-native:connect:HoursOfOperationOverrideConfig":{"description":"Contains information about the hours of operation override.","properties":{"day":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverrideConfigDay","description":"The day that the hours of operation override applies to."},"endTime":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverrideTimeSlice","description":"The new end time that your contact center closes for the overriden days."},"startTime":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverrideTimeSlice","description":"The new start time that your contact center opens for the overriden days."}},"type":"object","required":["day","endTime","startTime"]},"aws-native:connect:HoursOfOperationOverrideConfigDay":{"description":"The day that the hours of operation override applies to.","type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:connect:HoursOfOperationOverrideTimeSlice":{"description":"The start time or end time for an an hours of operation override.","properties":{"hours":{"type":"integer","description":"The hours."},"minutes":{"type":"integer","description":"The minutes."}},"type":"object","required":["hours","minutes"]},"aws-native:connect:HoursOfOperationOverrideType":{"description":"The type of hours of operation override.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Open","value":"OPEN"},{"name":"Closed","value":"CLOSED"}]},"aws-native:connect:HoursOfOperationRecurrenceConfig":{"description":"Configuration for recurring hours of operation overrides.","properties":{"recurrencePattern":{"$ref":"#/types/aws-native:connect:HoursOfOperationRecurrencePattern"}},"type":"object","required":["recurrencePattern"]},"aws-native:connect:HoursOfOperationRecurrenceFrequency":{"description":"The frequency of recurrence for hours of operation overrides.","type":"string","enum":[{"name":"Weekly","value":"WEEKLY"},{"name":"Monthly","value":"MONTHLY"},{"name":"Yearly","value":"YEARLY"}]},"aws-native:connect:HoursOfOperationRecurrencePattern":{"description":"Pattern for recurring hours of operation overrides.","properties":{"byMonth":{"type":"array","items":{"type":"integer"}},"byMonthDay":{"type":"array","items":{"type":"integer"}},"byWeekdayOccurrence":{"type":"array","items":{"type":"integer"}},"frequency":{"$ref":"#/types/aws-native:connect:HoursOfOperationRecurrenceFrequency"},"interval":{"type":"integer"}},"type":"object"},"aws-native:connect:HoursOfOperationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:connect:HoursOfOperationTimeSlice":{"description":"The start time or end time for an hours of operation.","properties":{"hours":{"type":"integer","description":"The hours."},"minutes":{"type":"integer","description":"The minutes."}},"type":"object","required":["hours","minutes"]},"aws-native:connect:HoursOfOperationsIdentifier":{"description":"Identifier for hours of operation.","properties":{"id":{"type":"string","description":"The identifier for the hours of operation."},"name":{"type":"string","description":"The name of the hours of operation."}},"type":"object","required":["id"]},"aws-native:connect:InstanceAttributes":{"properties":{"autoResolveBestVoices":{"type":"boolean"},"contactLens":{"type":"boolean"},"contactflowLogs":{"type":"boolean"},"earlyMedia":{"type":"boolean"},"enhancedChatMonitoring":{"type":"boolean"},"enhancedContactMonitoring":{"type":"boolean"},"highVolumeOutBound":{"type":"boolean"},"inboundCalls":{"type":"boolean"},"messageStreaming":{"type":"boolean"},"multiPartyChatConference":{"type":"boolean"},"multiPartyConference":{"type":"boolean"},"outboundCalls":{"type":"boolean"},"useCustomTtsVoices":{"type":"boolean"}},"type":"object","required":["inboundCalls","outboundCalls"]},"aws-native:connect:InstanceIdentityManagementType":{"description":"Specifies the type of directory integration for new instance.","type":"string","enum":[{"name":"Saml","value":"SAML"},{"name":"ConnectManaged","value":"CONNECT_MANAGED"},{"name":"ExistingDirectory","value":"EXISTING_DIRECTORY"}]},"aws-native:connect:InstanceStatus":{"description":"Specifies the creation status of new instance.","type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"Active","value":"ACTIVE"}]},"aws-native:connect:InstanceStorageConfigEncryptionConfig":{"properties":{"encryptionType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigEncryptionType","description":"The type of encryption."},"keyId":{"type":"string","description":"The full ARN of the encryption key.\n\n\u003e Be sure to provide the full ARN of the encryption key, not just the ID.\n\u003e \n\u003e Amazon Connect supports only KMS keys with the default key spec of [`SYMMETRIC_DEFAULT`](https://docs.aws.amazon.com/kms/latest/developerguide/asymmetric-key-specs.html#key-spec-symmetric-default) ."}},"type":"object","required":["encryptionType","keyId"]},"aws-native:connect:InstanceStorageConfigEncryptionType":{"description":"Specifies default encryption using AWS KMS-Managed Keys","type":"string","enum":[{"name":"Kms","value":"KMS"}]},"aws-native:connect:InstanceStorageConfigInstanceStorageResourceType":{"description":"Specifies the type of storage resource available for the instance","type":"string","enum":[{"name":"ChatTranscripts","value":"CHAT_TRANSCRIPTS"},{"name":"CallRecordings","value":"CALL_RECORDINGS"},{"name":"ScheduledReports","value":"SCHEDULED_REPORTS"},{"name":"MediaStreams","value":"MEDIA_STREAMS"},{"name":"ContactTraceRecords","value":"CONTACT_TRACE_RECORDS"},{"name":"AgentEvents","value":"AGENT_EVENTS"}]},"aws-native:connect:InstanceStorageConfigKinesisFirehoseConfig":{"properties":{"firehoseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the delivery stream."}},"type":"object","required":["firehoseArn"]},"aws-native:connect:InstanceStorageConfigKinesisStreamConfig":{"properties":{"streamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data stream."}},"type":"object","required":["streamArn"]},"aws-native:connect:InstanceStorageConfigKinesisVideoStreamConfig":{"properties":{"encryptionConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigEncryptionConfig","description":"The encryption configuration."},"prefix":{"type":"string","description":"The prefix of the video stream."},"retentionPeriodHours":{"type":"number","description":"The number of hours data is retained in the stream. Kinesis Video Streams retains the data in a data store that is associated with the stream.\n\nThe default value is 0, indicating that the stream does not persist data."}},"type":"object","required":["encryptionConfig","prefix","retentionPeriodHours"]},"aws-native:connect:InstanceStorageConfigS3Config":{"properties":{"bucketName":{"type":"string","description":"The S3 bucket name."},"bucketPrefix":{"type":"string","description":"The S3 bucket prefix."},"encryptionConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigEncryptionConfig","description":"The Amazon S3 encryption configuration."}},"type":"object","required":["bucketName","bucketPrefix"]},"aws-native:connect:InstanceStorageConfigStorageType":{"description":"Specifies the storage type to be associated with the instance","type":"string","enum":[{"name":"S3","value":"S3"},{"name":"KinesisVideoStream","value":"KINESIS_VIDEO_STREAM"},{"name":"KinesisStream","value":"KINESIS_STREAM"},{"name":"KinesisFirehose","value":"KINESIS_FIREHOSE"}]},"aws-native:connect:InstanceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:IntegrationAssociationIntegrationType":{"description":"Specifies the integration type to be associated with the instance","type":"string","enum":[{"name":"LexBot","value":"LEX_BOT"},{"name":"LambdaFunction","value":"LAMBDA_FUNCTION"},{"name":"Application","value":"APPLICATION"},{"name":"CasesDomain","value":"CASES_DOMAIN"}]},"aws-native:connect:LockVersionProperties":{"properties":{"attribute":{"type":"string"},"dataTable":{"type":"string"}},"type":"object"},"aws-native:connect:NotificationContent":{"description":"The content of a notification","properties":{"deDe":{"type":"string"},"enUs":{"type":"string"},"esEs":{"type":"string"},"frFr":{"type":"string"},"idId":{"type":"string"},"itIt":{"type":"string"},"jaJp":{"type":"string"},"koKr":{"type":"string"},"ptBr":{"type":"string"},"zhCn":{"type":"string"},"zhTw":{"type":"string"}},"type":"object"},"aws-native:connect:NotificationPriority":{"description":"The priority of notification. In the Amazon Connect console, when you create a notification, you are prompted to assign one of the following priorities: High (HIGH) or LOW (LOW)","type":"string","enum":[{"name":"High","value":"HIGH"},{"name":"Low","value":"LOW"}]},"aws-native:connect:NotificationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:PhoneNumberTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:connect:PromptTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:QueueEmailAddress":{"description":"An email address configuration for the queue","properties":{"emailAddressArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the email address"}},"type":"object","required":["emailAddressArn"]},"aws-native:connect:QueueOutboundCallerConfig":{"description":"The outbound caller ID name, number, and outbound whisper flow.","properties":{"outboundCallerIdName":{"type":"string","description":"The caller ID name."},"outboundCallerIdNumberArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the outbound caller ID number.\n\n\u003e Only use the phone number ARN format that doesn't contain `instance` in the path, for example, `arn:aws:connect:us-east-1:1234567890:phone-number/uuid` . This is the same ARN format that is returned when you create a phone number using CloudFormation , or when you call the [ListPhoneNumbersV2](https://docs.aws.amazon.com/connect/latest/APIReference/API_ListPhoneNumbersV2.html) API."},"outboundFlowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the outbound flow."}},"type":"object"},"aws-native:connect:QueueOutboundEmailConfig":{"description":"The outbound email address ID.","properties":{"outboundEmailAddressId":{"type":"string","description":"The identifier of the email address."}},"type":"object"},"aws-native:connect:QueueStatus":{"description":"The status of the queue.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:connect:QueueTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"}},"type":"object","required":["key","value"]},"aws-native:connect:QueueType":{"description":"The type of queue.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Agent","value":"AGENT"}]},"aws-native:connect:QuickConnectConfig":{"description":"Configuration settings for the quick connect.","properties":{"phoneConfig":{"$ref":"#/types/aws-native:connect:QuickConnectPhoneNumberQuickConnectConfig","description":"The phone configuration. This is required only if QuickConnectType is PHONE_NUMBER."},"queueConfig":{"$ref":"#/types/aws-native:connect:QuickConnectQueueQuickConnectConfig","description":"The queue configuration. This is required only if QuickConnectType is QUEUE."},"quickConnectType":{"$ref":"#/types/aws-native:connect:QuickConnectType","description":"The type of quick connect. In the Amazon Connect console, when you create a quick connect, you are prompted to assign one of the following types: Agent (USER), External (PHONE_NUMBER), or Queue (QUEUE)."},"userConfig":{"$ref":"#/types/aws-native:connect:QuickConnectUserQuickConnectConfig","description":"The user configuration. This is required only if QuickConnectType is USER."}},"type":"object","required":["quickConnectType"]},"aws-native:connect:QuickConnectPhoneNumberQuickConnectConfig":{"description":"The phone configuration. This is required only if QuickConnectType is PHONE_NUMBER.","properties":{"phoneNumber":{"type":"string","description":"The phone number in E.164 format."}},"type":"object","required":["phoneNumber"]},"aws-native:connect:QuickConnectQueueQuickConnectConfig":{"description":"The queue configuration. This is required only if QuickConnectType is QUEUE.","properties":{"contactFlowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the flow."},"queueArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the queue."}},"type":"object","required":["contactFlowArn","queueArn"]},"aws-native:connect:QuickConnectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:connect:QuickConnectType":{"description":"The type of quick connect. In the Amazon Connect console, when you create a quick connect, you are prompted to assign one of the following types: Agent (USER), External (PHONE_NUMBER), or Queue (QUEUE).","type":"string","enum":[{"name":"PhoneNumber","value":"PHONE_NUMBER"},{"name":"Queue","value":"QUEUE"},{"name":"User","value":"USER"}]},"aws-native:connect:QuickConnectUserQuickConnectConfig":{"description":"The user configuration. This is required only if QuickConnectType is USER.","properties":{"contactFlowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the flow."},"userArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the user."}},"type":"object","required":["contactFlowArn","userArn"]},"aws-native:connect:RoutingProfileAgentAvailabilityTimer":{"description":"Whether agents with this routing profile will have their routing order calculated based on longest idle time or time since their last inbound contact.","type":"string","enum":[{"name":"TimeSinceLastActivity","value":"TIME_SINCE_LAST_ACTIVITY"},{"name":"TimeSinceLastInbound","value":"TIME_SINCE_LAST_INBOUND"}]},"aws-native:connect:RoutingProfileBehaviorType":{"description":"Specifies the other channels that can be routed to an agent handling their current channel.","type":"string","enum":[{"name":"RouteCurrentChannelOnly","value":"ROUTE_CURRENT_CHANNEL_ONLY"},{"name":"RouteAnyChannel","value":"ROUTE_ANY_CHANNEL"}]},"aws-native:connect:RoutingProfileChannel":{"description":"The channels that agents can handle in the Contact Control Panel (CCP).","type":"string","enum":[{"name":"Voice","value":"VOICE"},{"name":"Chat","value":"CHAT"},{"name":"Task","value":"TASK"},{"name":"Email","value":"EMAIL"}]},"aws-native:connect:RoutingProfileCrossChannelBehavior":{"description":"Defines the cross-channel routing behavior that allows an agent working on a contact in one channel to be offered a contact from a different channel.","properties":{"behaviorType":{"$ref":"#/types/aws-native:connect:RoutingProfileBehaviorType","description":"Specifies the other channels that can be routed to an agent handling their current channel."}},"type":"object","required":["behaviorType"]},"aws-native:connect:RoutingProfileManualAssignmentQueueConfig":{"description":"Contains information about the manual assignment queue and channel","properties":{"queueReference":{"$ref":"#/types/aws-native:connect:RoutingProfileQueueReference","description":"Contains information about a queue resource."}},"type":"object","required":["queueReference"]},"aws-native:connect:RoutingProfileMediaConcurrency":{"description":"Contains information about which channels are supported, and how many contacts an agent can have on a channel simultaneously.","properties":{"channel":{"$ref":"#/types/aws-native:connect:RoutingProfileChannel","description":"The channels that agents can handle in the Contact Control Panel (CCP)."},"concurrency":{"type":"integer","description":"The number of contacts an agent can have on a channel simultaneously.\n\nValid Range for `VOICE` : Minimum value of 1. Maximum value of 1.\n\nValid Range for `CHAT` : Minimum value of 1. Maximum value of 10.\n\nValid Range for `TASK` : Minimum value of 1. Maximum value of 10."},"crossChannelBehavior":{"$ref":"#/types/aws-native:connect:RoutingProfileCrossChannelBehavior","description":"Defines the cross-channel routing behavior for each channel that is enabled for this Routing Profile. For example, this allows you to offer an agent a different contact from another channel when they are currently working with a contact from a Voice channel."}},"type":"object","required":["channel","concurrency"]},"aws-native:connect:RoutingProfileQueueConfig":{"description":"Contains information about the queue and channel for which priority and delay can be set.","properties":{"delay":{"type":"integer","description":"The delay, in seconds, a contact should be in the queue before they are routed to an available agent. For more information, see [Queues: priority and delay](https://docs.aws.amazon.com/connect/latest/adminguide/concepts-routing-profiles-priority.html) in the *Amazon Connect Administrator Guide* ."},"priority":{"type":"integer","description":"The order in which contacts are to be handled for the queue. For more information, see [Queues: priority and delay](https://docs.aws.amazon.com/connect/latest/adminguide/concepts-routing-profiles-priority.html) ."},"queueReference":{"$ref":"#/types/aws-native:connect:RoutingProfileQueueReference","description":"Contains information about a queue resource."}},"type":"object","required":["delay","priority","queueReference"]},"aws-native:connect:RoutingProfileQueueReference":{"description":"Contains the channel and queue identifier for a routing profile.","properties":{"channel":{"$ref":"#/types/aws-native:connect:RoutingProfileChannel","description":"The channels agents can handle in the Contact Control Panel (CCP) for this routing profile."},"queueArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the queue."}},"type":"object","required":["channel","queueArn"]},"aws-native:connect:RoutingProfileTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:RuleActions":{"description":"A list of actions to be run when the rule is triggered.","properties":{"assignContactCategoryActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleAssignContactCategoryAction"},"description":"Information about the contact category action. The syntax can be empty, for example, ``{}``."},"createCaseActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleCreateCaseAction"}},"endAssociatedTasksActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleEndAssociatedTasksAction"}},"eventBridgeActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleEventBridgeAction"},"description":"Information about the EV action."},"sendNotificationActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleSendNotificationAction"},"description":"Information about the send notification action."},"submitAutoEvaluationActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleSubmitAutoEvaluationAction"}},"taskActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleTaskAction"},"description":"Information about the task action. This field is required if ``TriggerEventSource`` is one of the following values: ``OnZendeskTicketCreate`` | ``OnZendeskTicketStatusUpdate`` | ``OnSalesforceCaseCreate``"},"updateCaseActions":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleUpdateCaseAction"}}},"type":"object"},"aws-native:connect:RuleAssignContactCategoryAction":{"description":"The definition for assigning contact category action.","type":"object"},"aws-native:connect:RuleCreateCaseAction":{"properties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleField"}},"templateId":{"type":"string"}},"type":"object","required":["fields","templateId"]},"aws-native:connect:RuleEndAssociatedTasksAction":{"description":"The definition for ending associated task action.","type":"object"},"aws-native:connect:RuleEventBridgeAction":{"description":"The EV action definition.","properties":{"name":{"type":"string","description":"The name."}},"type":"object","required":["name"]},"aws-native:connect:RuleField":{"properties":{"id":{"type":"string"},"value":{"$ref":"#/types/aws-native:connect:RuleFieldValue"}},"type":"object","required":["id","value"]},"aws-native:connect:RuleFieldValue":{"description":"Object for case field values.","properties":{"booleanValue":{"type":"boolean"},"doubleValue":{"type":"number"},"emptyValue":{"$ref":"pulumi.json#/Any"},"stringValue":{"type":"string"}},"type":"object"},"aws-native:connect:RuleNotificationRecipientType":{"description":"The type of notification recipient.","properties":{"userArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) of the user account."},"userTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }. CON users with the specified tags will be notified."}},"type":"object"},"aws-native:connect:RulePublishStatus":{"description":"The publish status of the rule.\n *Allowed values*: ``DRAFT`` | ``PUBLISHED``","type":"string","enum":[{"name":"Draft","value":"DRAFT"},{"name":"Published","value":"PUBLISHED"}]},"aws-native:connect:RuleReference":{"description":"Information about the reference when the ``referenceType`` is ``URL``. Otherwise, null. (Supports variable injection in the ``Value`` field.)","properties":{"type":{"$ref":"#/types/aws-native:connect:RuleReferenceType","description":"The type of the reference. ``DATE`` must be of type Epoch timestamp. \n *Allowed values*: ``URL`` | ``ATTACHMENT`` | ``NUMBER`` | ``STRING`` | ``DATE`` | ``EMAIL``"},"value":{"type":"string","description":"A valid value for the reference. For example, for a URL reference, a formatted URL that is displayed to an agent in the Contact Control Panel (CCP)."}},"type":"object","required":["type","value"]},"aws-native:connect:RuleReferenceType":{"description":"The type of the reference. ``DATE`` must be of type Epoch timestamp. \n *Allowed values*: ``URL`` | ``ATTACHMENT`` | ``NUMBER`` | ``STRING`` | ``DATE`` | ``EMAIL``","type":"string","enum":[{"name":"Url","value":"URL"},{"name":"Attachment","value":"ATTACHMENT"},{"name":"Number","value":"NUMBER"},{"name":"String","value":"STRING"},{"name":"Date","value":"DATE"},{"name":"Email","value":"EMAIL"}]},"aws-native:connect:RuleSendNotificationAction":{"description":"Information about the send notification action.","properties":{"content":{"type":"string","description":"Notification content. Supports variable injection. For more information, see [JSONPath reference](https://docs.aws.amazon.com/connect/latest/adminguide/contact-lens-variable-injection.html) in the *Administrators Guide*."},"contentType":{"$ref":"#/types/aws-native:connect:RuleSendNotificationActionContentType","description":"Content type format.\n *Allowed value*: ``PLAIN_TEXT``"},"deliveryMethod":{"$ref":"#/types/aws-native:connect:RuleSendNotificationActionDeliveryMethod","description":"Notification delivery method.\n *Allowed value*: ``EMAIL``"},"recipient":{"$ref":"#/types/aws-native:connect:RuleNotificationRecipientType","description":"Notification recipient."},"subject":{"type":"string","description":"The subject of the email if the delivery method is ``EMAIL``. Supports variable injection. For more information, see [JSONPath reference](https://docs.aws.amazon.com/connect/latest/adminguide/contact-lens-variable-injection.html) in the *Administrators Guide*."}},"type":"object","required":["content","contentType","deliveryMethod","recipient"]},"aws-native:connect:RuleSendNotificationActionContentType":{"description":"Content type format.\n *Allowed value*: ``PLAIN_TEXT``","type":"string","enum":[{"name":"PlainText","value":"PLAIN_TEXT"}]},"aws-native:connect:RuleSendNotificationActionDeliveryMethod":{"description":"Notification delivery method.\n *Allowed value*: ``EMAIL``","type":"string","enum":[{"name":"Email","value":"EMAIL"}]},"aws-native:connect:RuleSubmitAutoEvaluationAction":{"properties":{"evaluationFormArn":{"type":"string"}},"type":"object","required":["evaluationFormArn"]},"aws-native:connect:RuleTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"}},"type":"object","required":["key","value"]},"aws-native:connect:RuleTaskAction":{"description":"Information about the task action. This field is required if ``TriggerEventSource`` is one of the following values: ``OnZendeskTicketCreate`` | ``OnZendeskTicketStatusUpdate`` | ``OnSalesforceCaseCreate``","properties":{"contactFlowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the flow."},"description":{"type":"string","description":"The description. Supports variable injection. For more information, see [JSONPath reference](https://docs.aws.amazon.com/connect/latest/adminguide/contact-lens-variable-injection.html) in the *Administrators Guide*."},"name":{"type":"string","description":"The name. Supports variable injection. For more information, see [JSONPath reference](https://docs.aws.amazon.com/connect/latest/adminguide/contact-lens-variable-injection.html) in the *Administrators Guide*."},"references":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:connect:RuleReference"},"description":"Information about the reference when the ``referenceType`` is ``URL``. Otherwise, null. ``URL`` is the only accepted type. (Supports variable injection in the ``Value`` field.)"}},"type":"object","required":["contactFlowArn","name"]},"aws-native:connect:RuleTriggerEventSource":{"description":"The name of the event source.","properties":{"eventSourceName":{"$ref":"#/types/aws-native:connect:RuleTriggerEventSourceEventSourceName","description":"The name of the event source."},"integrationAssociationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the integration association. ``IntegrationAssociationArn`` is required if ``TriggerEventSource`` is one of the following values: ``OnZendeskTicketCreate`` | ``OnZendeskTicketStatusUpdate`` | ``OnSalesforceCaseCreate``"}},"type":"object","required":["eventSourceName"]},"aws-native:connect:RuleTriggerEventSourceEventSourceName":{"description":"The name of the event source.","type":"string","enum":[{"name":"OnContactEvaluationSubmit","value":"OnContactEvaluationSubmit"},{"name":"OnPostCallAnalysisAvailable","value":"OnPostCallAnalysisAvailable"},{"name":"OnRealTimeCallAnalysisAvailable","value":"OnRealTimeCallAnalysisAvailable"},{"name":"OnRealTimeChatAnalysisAvailable","value":"OnRealTimeChatAnalysisAvailable"},{"name":"OnPostChatAnalysisAvailable","value":"OnPostChatAnalysisAvailable"},{"name":"OnZendeskTicketCreate","value":"OnZendeskTicketCreate"},{"name":"OnZendeskTicketStatusUpdate","value":"OnZendeskTicketStatusUpdate"},{"name":"OnSalesforceCaseCreate","value":"OnSalesforceCaseCreate"},{"name":"OnMetricDataUpdate","value":"OnMetricDataUpdate"},{"name":"OnCaseCreate","value":"OnCaseCreate"},{"name":"OnCaseUpdate","value":"OnCaseUpdate"}]},"aws-native:connect:RuleUpdateCaseAction":{"properties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RuleField"}}},"type":"object","required":["fields"]},"aws-native:connect:SecurityProfileApplication":{"description":"A third-party application's metadata.","properties":{"applicationPermissions":{"type":"array","items":{"type":"string"},"description":"The permissions that the agent is granted on the application"},"namespace":{"type":"string","description":"Namespace of the application that you want to give access to."},"type":{"$ref":"#/types/aws-native:connect:SecurityProfileApplicationType","description":"The type of the application."}},"type":"object","required":["applicationPermissions","namespace"]},"aws-native:connect:SecurityProfileApplicationType":{"description":"The type of the application.","type":"string","enum":[{"name":"Mcp","value":"MCP"},{"name":"ThirdPartyApplication","value":"THIRD_PARTY_APPLICATION"}]},"aws-native:connect:SecurityProfileDataTableAccessControlConfiguration":{"description":"Defines the access control configuration for data tables.","properties":{"primaryAttributeAccessControlConfiguration":{"$ref":"#/types/aws-native:connect:SecurityProfilePrimaryAttributeAccessControlConfigurationItem","description":"The configuration's primary attribute access control configuration."}},"type":"object"},"aws-native:connect:SecurityProfileFlowModule":{"description":"A first-party application's metadata.","properties":{"flowModuleId":{"type":"string","description":"The identifier of the application that you want to give access to."},"type":{"type":"string","description":"The type of the first-party application"}},"type":"object","required":["flowModuleId","type"]},"aws-native:connect:SecurityProfilePrimaryAttributeAccessControlConfigurationItem":{"description":"Contains the configuration for record-based access control.","properties":{"primaryAttributeValues":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfilePrimaryAttributeValue"},"description":"An array of PrimaryAttributeValue objects."}},"type":"object","required":["primaryAttributeValues"]},"aws-native:connect:SecurityProfilePrimaryAttributeValue":{"description":"An object defining the access control for a specific attribute and its values.","properties":{"accessType":{"$ref":"#/types/aws-native:connect:SecurityProfilePrimaryAttributeValueAccessType","description":"Specifies the type of access granted. Currently, only \"ALLOW\" is supported"},"attributeName":{"type":"string","description":"The name of the primary attribute."},"values":{"type":"array","items":{"type":"string"},"description":"An array of allowed primary values for the specified primary attribute."}},"type":"object","required":["accessType","attributeName","values"]},"aws-native:connect:SecurityProfilePrimaryAttributeValueAccessType":{"description":"Specifies the type of access granted. Currently, only \"ALLOW\" is supported","type":"string","enum":[{"name":"Allow","value":"ALLOW"}]},"aws-native:connect:SecurityProfileTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:TaskTemplateDefaultFieldValue":{"description":"the default value for the task template's field","properties":{"defaultValue":{"type":"string","description":"Default value for the field."},"id":{"$ref":"#/types/aws-native:connect:TaskTemplateFieldIdentifier","description":"Identifier of a field."}},"type":"object","required":["defaultValue","id"]},"aws-native:connect:TaskTemplateField":{"description":"A task template field object.","properties":{"description":{"type":"string","description":"The description of the task template's field"},"id":{"$ref":"#/types/aws-native:connect:TaskTemplateFieldIdentifier","description":"The unique identifier for the field."},"singleSelectOptions":{"type":"array","items":{"type":"string"},"description":"list of field options to be used with single select"},"type":{"$ref":"#/types/aws-native:connect:TaskTemplateFieldType","description":"Indicates the type of field. Following are the valid field types: `NAME` `DESCRIPTION` | `SCHEDULED_TIME` | `QUICK_CONNECT` | `URL` | `NUMBER` | `TEXT` | `TEXT_AREA` | `DATE_TIME` | `BOOLEAN` | `SINGLE_SELECT` | `EMAIL`"}},"type":"object","required":["id","type"]},"aws-native:connect:TaskTemplateFieldIdentifier":{"description":"the identifier (name) for the task template field","properties":{"name":{"type":"string","description":"The name of the task template field"}},"type":"object","required":["name"]},"aws-native:connect:TaskTemplateFieldType":{"description":"The type of the task template's field","type":"string","enum":[{"name":"Name","value":"NAME"},{"name":"Description","value":"DESCRIPTION"},{"name":"ScheduledTime","value":"SCHEDULED_TIME"},{"name":"QuickConnect","value":"QUICK_CONNECT"},{"name":"Url","value":"URL"},{"name":"Number","value":"NUMBER"},{"name":"Text","value":"TEXT"},{"name":"TextArea","value":"TEXT_AREA"},{"name":"DateTime","value":"DATE_TIME"},{"name":"Boolean","value":"BOOLEAN"},{"name":"SingleSelect","value":"SINGLE_SELECT"},{"name":"Email","value":"EMAIL"},{"name":"ExpiryDuration","value":"EXPIRY_DURATION"},{"name":"SelfAssign","value":"SELF_ASSIGN"}]},"aws-native:connect:TaskTemplateInvisibleFieldInfo":{"description":"Invisible field info","properties":{"id":{"$ref":"#/types/aws-native:connect:TaskTemplateFieldIdentifier"}},"type":"object","required":["id"]},"aws-native:connect:TaskTemplateReadOnlyFieldInfo":{"description":"ReadOnly field info","properties":{"id":{"$ref":"#/types/aws-native:connect:TaskTemplateFieldIdentifier"}},"type":"object","required":["id"]},"aws-native:connect:TaskTemplateRequiredFieldInfo":{"description":"Required field info","properties":{"id":{"$ref":"#/types/aws-native:connect:TaskTemplateFieldIdentifier"}},"type":"object","required":["id"]},"aws-native:connect:TaskTemplateStatus":{"description":"The status of the task template","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:connect:TaskTemplateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. . You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:TrafficDistributionGroupStatus":{"description":"The status of the traffic distribution group.","type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"Active","value":"ACTIVE"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"DeletionFailed","value":"DELETION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"}]},"aws-native:connect:TrafficDistributionGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:UserAfterContactWorkConfig":{"description":"After Contact Work configuration.","properties":{"afterContactWorkTimeLimit":{"type":"integer"}},"type":"object"},"aws-native:connect:UserAfterContactWorkConfigPerChannel":{"description":"After Contact Work configuration per channel.","properties":{"afterContactWorkConfig":{"$ref":"#/types/aws-native:connect:UserAfterContactWorkConfig"},"agentFirstCallbackAfterContactWorkConfig":{"$ref":"#/types/aws-native:connect:UserAfterContactWorkConfig"},"channel":{"$ref":"#/types/aws-native:connect:UserChannel"}},"type":"object","required":["afterContactWorkConfig","channel"]},"aws-native:connect:UserAutoAcceptConfig":{"description":"Auto-accept configuration per channel.","properties":{"agentFirstCallbackAutoAccept":{"type":"boolean"},"autoAccept":{"type":"boolean"},"channel":{"$ref":"#/types/aws-native:connect:UserChannel"}},"type":"object","required":["autoAccept","channel"]},"aws-native:connect:UserChannel":{"description":"The channels that agents can handle in the Contact Control Panel (CCP).","type":"string","enum":[{"name":"Voice","value":"VOICE"},{"name":"Chat","value":"CHAT"},{"name":"Task","value":"TASK"},{"name":"Email","value":"EMAIL"}]},"aws-native:connect:UserHierarchyGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:connect:UserHierarchyStructureLevelFive":{"description":"Information about level five.","properties":{"hierarchyLevelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the hierarchy level."},"hierarchyLevelId":{"type":"string","description":"The identifier of the hierarchy level."},"name":{"type":"string","description":"The name of the hierarchy level."}},"type":"object","required":["name"]},"aws-native:connect:UserHierarchyStructureLevelFour":{"description":"Information about level four.","properties":{"hierarchyLevelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the hierarchy level."},"hierarchyLevelId":{"type":"string","description":"The identifier of the hierarchy level."},"name":{"type":"string","description":"The name of the hierarchy level."}},"type":"object","required":["name"]},"aws-native:connect:UserHierarchyStructureLevelOne":{"description":"Information about level one.","properties":{"hierarchyLevelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the hierarchy level."},"hierarchyLevelId":{"type":"string","description":"The identifier of the hierarchy level."},"name":{"type":"string","description":"The name of the hierarchy level."}},"type":"object","required":["name"]},"aws-native:connect:UserHierarchyStructureLevelThree":{"description":"Information about level three.","properties":{"hierarchyLevelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the hierarchy level."},"hierarchyLevelId":{"type":"string"},"name":{"type":"string","description":"The name of the hierarchy level."}},"type":"object","required":["name"]},"aws-native:connect:UserHierarchyStructureLevelTwo":{"description":"Information about level two.","properties":{"hierarchyLevelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the hierarchy level."},"hierarchyLevelId":{"type":"string","description":"The identifier of the hierarchy level."},"name":{"type":"string","description":"The name of the hierarchy level."}},"type":"object","required":["name"]},"aws-native:connect:UserHierarchyStructureProperties":{"description":"Information about the hierarchy structure.","properties":{"levelFive":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureLevelFive"},"levelFour":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureLevelFour","description":"The update for level four."},"levelOne":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureLevelOne","description":"The update for level one."},"levelThree":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureLevelThree","description":"The update for level three."},"levelTwo":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureLevelTwo","description":"The update for level two."}},"type":"object"},"aws-native:connect:UserIdentityInfo":{"description":"Contains information about the identity of a user.","properties":{"email":{"type":"string","description":"The email address. If you are using SAML for identity management and include this parameter, an error is returned."},"firstName":{"type":"string","description":"The first name. This is required if you are using Amazon Connect or SAML for identity management. Inputs must be in Unicode Normalization Form C (NFC). Text containing characters in a non-NFC form (for example, decomposed characters or combining marks) are not accepted."},"lastName":{"type":"string","description":"The last name. This is required if you are using Amazon Connect or SAML for identity management. Inputs must be in Unicode Normalization Form C (NFC). Text containing characters in a non-NFC form (for example, decomposed characters or combining marks) are not accepted."},"mobile":{"type":"string","description":"The user's mobile number."},"secondaryEmail":{"type":"string","description":"The user's secondary email address. If you provide a secondary email, the user receives email notifications -- other than password reset notifications -- to this email address instead of to their primary email address.\n\n*Pattern* : `(?=^.{0,265}$)[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,63}`"}},"type":"object"},"aws-native:connect:UserPersistentConnectionConfig":{"description":"Persistent Connection configuration per channel.","properties":{"channel":{"$ref":"#/types/aws-native:connect:UserChannel"},"persistentConnection":{"type":"boolean"}},"type":"object","required":["channel","persistentConnection"]},"aws-native:connect:UserPhoneConfig":{"description":"Contains information about the phone configuration settings for a user.","properties":{"afterContactWorkTimeLimit":{"type":"integer","description":"The After Call Work (ACW) timeout setting, in seconds. This parameter has a minimum value of 0 and a maximum value of 2,000,000 seconds (24 days). Enter 0 if you don't want to allocate a specific amount of ACW time. It essentially means an indefinite amount of time. When the conversation ends, ACW starts; the agent must choose Close contact to end ACW.\n\n\u003e When returned by a `SearchUsers` call, `AfterContactWorkTimeLimit` is returned in milliseconds."},"autoAccept":{"type":"boolean","description":"The Auto accept setting."},"deskPhoneNumber":{"type":"string","description":"The phone number for the user's desk phone."},"persistentConnection":{"type":"boolean","description":"The persistent connection setting for the user."},"phoneType":{"$ref":"#/types/aws-native:connect:UserPhoneType","description":"The phone type."}},"type":"object"},"aws-native:connect:UserPhoneNumberConfig":{"description":"Phone Number configuration per channel.","properties":{"channel":{"$ref":"#/types/aws-native:connect:UserChannel"},"phoneNumber":{"type":"string"},"phoneType":{"$ref":"#/types/aws-native:connect:UserPhoneType"}},"type":"object","required":["channel","phoneType"]},"aws-native:connect:UserPhoneType":{"description":"The phone type.","type":"string","enum":[{"name":"SoftPhone","value":"SOFT_PHONE"},{"name":"DeskPhone","value":"DESK_PHONE"}]},"aws-native:connect:UserProficiency":{"description":"Proficiency of a user.","properties":{"attributeName":{"type":"string","description":"The name of user’s proficiency. You must use a predefined attribute name that is present in the Amazon Connect instance."},"attributeValue":{"type":"string","description":"The value of user’s proficiency. You must use a predefined attribute value that is present in the Amazon Connect instance."},"level":{"type":"number","description":"The level of the proficiency. The valid values are 1, 2, 3, 4 and 5."}},"type":"object","required":["attributeName","attributeValue","level"]},"aws-native:connect:UserTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is maximum of 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:connect:UserVoiceEnhancementConfig":{"description":"Voice Enhancement configuration per channel.","properties":{"channel":{"$ref":"#/types/aws-native:connect:UserChannel"},"voiceEnhancementMode":{"$ref":"#/types/aws-native:connect:UserVoiceEnhancementMode"}},"type":"object","required":["channel","voiceEnhancementMode"]},"aws-native:connect:UserVoiceEnhancementMode":{"description":"The Voice Enhancement Mode setting.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"VoiceIsolation","value":"VOICE_ISOLATION"},{"name":"NoiseSuppression","value":"NOISE_SUPPRESSION"}]},"aws-native:connect:ValidationProperties":{"description":"The validation rules applied to values of this attribute. Based on JSON Schema Draft 2020-12 with additional Connect-specific validations for data integrity.","properties":{"enum":{"$ref":"#/types/aws-native:connect:ValidationPropertiesEnumProperties","description":"Defines enumeration constraints for attribute values. Can specify a list of allowed values and whether custom values are permitted beyond the enumerated list."},"exclusiveMaximum":{"type":"number","description":"The largest exclusive numeric value for NUMBER value type. Can be provided alongside Maximum where both operate independently. Must be greater than ExclusiveMinimum and Minimum. Applies to NUMBER and values within NUMBER_LIST."},"exclusiveMinimum":{"type":"number","description":"The smallest exclusive numeric value for NUMBER value type. Can be provided alongside Minimum where both operate independently. Must be less than ExclusiveMaximum and Maximum. Applies to NUMBER and values within NUMBER_LIST."},"maxLength":{"type":"integer","description":"The maximum number of characters a text value can contain. Applies to TEXT value type and values within a TEXT_LIST. Must be greater than or equal to MinLength."},"maxValues":{"type":"integer","description":"The maximum number of values in a list. Must be an integer greater than or equal to 0 and greater than or equal to MinValues. Applies to all list types."},"maximum":{"type":"number","description":"The largest inclusive numeric value for NUMBER value type. Can be provided alongside ExclusiveMaximum where both operate independently. Must be greater than or equal to Minimum and greater than ExclusiveMinimum. Applies to NUMBER and values within NUMBER_LIST."},"minLength":{"type":"integer","description":"The minimum number of characters a text value can contain. Applies to TEXT value type and values within a TEXT_LIST. Must be less than or equal to MaxLength."},"minValues":{"type":"integer","description":"The minimum number of values in a list. Must be an integer greater than or equal to 0 and less than or equal to MaxValues. Applies to all list types."},"minimum":{"type":"number","description":"The smallest inclusive numeric value for NUMBER value type. Cannot be provided when ExclusiveMinimum is also provided. Must be less than or equal to Maximum and less than ExclusiveMaximum. Applies to NUMBER and values within NUMBER_LIST."},"multipleOf":{"type":"number","description":"Specifies that numeric values must be multiples of this number. Must be greater than 0. The result of dividing a value by this multiple must result in an integer. Applies to NUMBER and values within NUMBER_LIST."}},"type":"object"},"aws-native:connect:ValidationPropertiesEnumProperties":{"description":"Defines enumeration constraints for attribute values. Can specify a list of allowed values and whether custom values are permitted beyond the enumerated list.","properties":{"strict":{"type":"boolean"},"values":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:connect:ValuesProperties":{"description":"The values of a predefined attribute.","properties":{"stringList":{"type":"array","items":{"type":"string"},"description":"Predefined attribute values of type string list."}},"type":"object"},"aws-native:connect:ViewTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters"},"value":{"type":"string","description":"The value for the tag. . You can specify a value that is maximum of 256 Unicode characters"}},"type":"object","required":["key","value"]},"aws-native:connect:WorkspaceFontFamily":{"type":"string","enum":[{"name":"Arial","value":"ARIAL"},{"name":"CourierNew","value":"COURIER_NEW"},{"name":"Georgia","value":"GEORGIA"},{"name":"TimesNewRoman","value":"TIMES_NEW_ROMAN"},{"name":"Trebuchet","value":"TREBUCHET"},{"name":"Verdana","value":"VERDANA"}]},"aws-native:connect:WorkspaceMediaItem":{"properties":{"source":{"type":"string","description":"The source URL or data for the media asset."},"type":{"$ref":"#/types/aws-native:connect:WorkspaceMediaType","description":"The type of media. Valid values are: `IMAGE_LOGO_FAVICON` and `IMAGE_LOGO_HORIZONTAL` ."}},"type":"object","required":["type"]},"aws-native:connect:WorkspaceMediaType":{"description":"The type of media","type":"string","enum":[{"name":"ImageLogoLightFavicon","value":"IMAGE_LOGO_LIGHT_FAVICON"},{"name":"ImageLogoDarkFavicon","value":"IMAGE_LOGO_DARK_FAVICON"},{"name":"ImageLogoLightHorizontal","value":"IMAGE_LOGO_LIGHT_HORIZONTAL"},{"name":"ImageLogoDarkHorizontal","value":"IMAGE_LOGO_DARK_HORIZONTAL"}]},"aws-native:connect:WorkspacePage":{"properties":{"inputData":{"type":"string","description":"The input data for the page."},"page":{"type":"string","description":"The page identifier."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource associated with the page."},"slug":{"type":"string","description":"The slug for the page."}},"type":"object","required":["page","resourceArn"]},"aws-native:connect:WorkspacePaletteCanvas":{"properties":{"activeBackground":{"type":"string","description":"The background color for active elements."},"containerBackground":{"type":"string","description":"The background color for container elements."},"pageBackground":{"type":"string","description":"The background color for page elements."}},"type":"object"},"aws-native:connect:WorkspacePaletteHeader":{"properties":{"background":{"type":"string","description":"The background color of the header."},"invertActionsColors":{"type":"boolean","description":"Whether to invert the colors of action buttons in the header."},"text":{"type":"string","description":"The text color in the header."},"textHover":{"type":"string","description":"The text color when hovering over header elements."}},"type":"object"},"aws-native:connect:WorkspacePaletteNavigation":{"properties":{"background":{"type":"string","description":"The background color of the navigation area."},"invertActionsColors":{"type":"boolean","description":"Whether to invert the colors of action buttons in the navigation area."},"text":{"type":"string","description":"The text color in the navigation area."},"textActive":{"type":"string","description":"The text color for active navigation items."},"textBackgroundActive":{"type":"string","description":"The background color for active navigation items."},"textBackgroundHover":{"type":"string","description":"The background color when hovering over navigation text."},"textHover":{"type":"string","description":"The text color when hovering over navigation items."}},"type":"object"},"aws-native:connect:WorkspacePalettePrimary":{"properties":{"active":{"type":"string","description":"The primary color used for active states."},"contrastText":{"type":"string","description":"The text color that contrasts with the primary color for readability."},"default":{"type":"string","description":"The default primary color used throughout the workspace."}},"type":"object"},"aws-native:connect:WorkspaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:connect:WorkspaceTheme":{"description":"The theme configuration for the Connect workspace","properties":{"dark":{"$ref":"#/types/aws-native:connect:WorkspaceThemeConfig","description":"The theme configuration for dark mode."},"light":{"$ref":"#/types/aws-native:connect:WorkspaceThemeConfig","description":"The theme configuration for light mode."}},"type":"object"},"aws-native:connect:WorkspaceThemeConfig":{"properties":{"palette":{"$ref":"#/types/aws-native:connect:WorkspaceThemePalette","description":"The color palette configuration for the workspace theme."},"typography":{"$ref":"#/types/aws-native:connect:WorkspaceThemeTypography","description":"The typography configuration for the workspace theme."}},"type":"object"},"aws-native:connect:WorkspaceThemePalette":{"properties":{"canvas":{"$ref":"#/types/aws-native:connect:WorkspacePaletteCanvas","description":"The color configuration for the canvas area."},"header":{"$ref":"#/types/aws-native:connect:WorkspacePaletteHeader","description":"The color configuration for the header area."},"navigation":{"$ref":"#/types/aws-native:connect:WorkspacePaletteNavigation","description":"The color configuration for the navigation area."},"primary":{"$ref":"#/types/aws-native:connect:WorkspacePalettePrimary","description":"The primary color configuration used throughout the workspace."}},"type":"object"},"aws-native:connect:WorkspaceThemeTypography":{"properties":{"fontFamily":{"$ref":"#/types/aws-native:connect:FontFamily","description":"The font family configuration for text in the workspace."}},"type":"object"},"aws-native:connect:WorkspaceVisibility":{"description":"The visibility of the Connect workspace","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Assigned","value":"ASSIGNED"},{"name":"None","value":"NONE"}]},"aws-native:connectcampaigns:CampaignAgentlessDialerConfig":{"description":"Agentless Dialer config","properties":{"dialingCapacity":{"type":"number","description":"Allocates dialing capacity for this campaign between multiple active campaigns."}},"type":"object"},"aws-native:connectcampaigns:CampaignAnswerMachineDetectionConfig":{"description":"The configuration used for answering machine detection during outbound calls","properties":{"awaitAnswerMachinePrompt":{"type":"boolean","description":"Enables detection of prompts (e.g., beep after after a voicemail greeting)"},"enableAnswerMachineDetection":{"type":"boolean","description":"Flag to decided whether outbound calls should have answering machine detection enabled or not"}},"type":"object","required":["enableAnswerMachineDetection"]},"aws-native:connectcampaigns:CampaignDialerConfig":{"description":"The possible types of dialer config parameters","properties":{"agentlessDialerConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignAgentlessDialerConfig","description":"The configuration of the agentless dialer."},"predictiveDialerConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignPredictiveDialerConfig","description":"The configuration of the predictive dialer."},"progressiveDialerConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignProgressiveDialerConfig","description":"The configuration of the progressive dialer."}},"type":"object"},"aws-native:connectcampaigns:CampaignOutboundCallConfig":{"description":"The configuration used for outbound calls.","properties":{"answerMachineDetectionConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignAnswerMachineDetectionConfig","description":"Whether answering machine detection has been enabled."},"connectContactFlowArn":{"type":"string","description":"The identifier of the contact flow for the outbound call."},"connectQueueArn":{"type":"string","description":"The queue for the call. If you specify a queue, the phone displayed for caller ID is the phone number specified in the queue. If you do not specify a queue, the queue defined in the contact flow is used. If you do not specify a queue, you must specify a source phone number."},"connectSourcePhoneNumber":{"type":"string","description":"The phone number associated with the Amazon Connect instance, in E.164 format. If you do not specify a source phone number, you must specify a queue."}},"type":"object","required":["connectContactFlowArn"]},"aws-native:connectcampaigns:CampaignPredictiveDialerConfig":{"description":"Predictive Dialer config","properties":{"bandwidthAllocation":{"type":"number","description":"The bandwidth allocation of a queue resource."},"dialingCapacity":{"type":"number","description":"Allocates dialing capacity for this campaign between multiple active campaigns."}},"type":"object","required":["bandwidthAllocation"]},"aws-native:connectcampaigns:CampaignProgressiveDialerConfig":{"description":"Progressive Dialer config","properties":{"bandwidthAllocation":{"type":"number","description":"The bandwidth allocation of a queue resource."},"dialingCapacity":{"type":"number","description":"Allocates dialing capacity for this campaign between multiple active campaigns."}},"type":"object","required":["bandwidthAllocation"]},"aws-native:connectcampaigns:CampaignTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length."}},"type":"object","required":["key","value"]},"aws-native:connectcampaignsv2:CampaignAgentAction":{"description":"Actions that can performed on a contact by an agent","type":"string","enum":[{"name":"Discard","value":"DISCARD"}]},"aws-native:connectcampaignsv2:CampaignAgentlessConfig":{"description":"Agentless config","type":"object"},"aws-native:connectcampaignsv2:CampaignAnswerMachineDetectionConfig":{"description":"The configuration used for answering machine detection during outbound calls","properties":{"awaitAnswerMachinePrompt":{"type":"boolean","description":"Enables detection of prompts (e.g., beep after after a voicemail greeting)"},"enableAnswerMachineDetection":{"type":"boolean","description":"Flag to decided whether outbound calls should have answering machine detection enabled or not"}},"type":"object","required":["enableAnswerMachineDetection"]},"aws-native:connectcampaignsv2:CampaignChannelSubtypeConfig":{"description":"The possible types of channel subtype config parameters","properties":{"email":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignEmailChannelSubtypeConfig","description":"The configuration of the email channel subtype."},"sms":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSmsChannelSubtypeConfig","description":"The configuration of the SMS channel subtype."},"telephony":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTelephonyChannelSubtypeConfig","description":"The configuration of the telephony channel subtype."},"whatsApp":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignWhatsAppChannelSubtypeConfig","description":"The configuration of the WhatsApp channel subtype."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignCommunicationLimit":{"description":"Communication Limit","properties":{"frequency":{"type":"integer"},"maxCountPerRecipient":{"type":"integer"},"unit":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationLimitTimeUnit"}},"type":"object","required":["frequency","maxCountPerRecipient","unit"]},"aws-native:connectcampaignsv2:CampaignCommunicationLimitTimeUnit":{"description":"The communication limit time unit","type":"string","enum":[{"name":"Day","value":"DAY"}]},"aws-native:connectcampaignsv2:CampaignCommunicationLimits":{"description":"Communication limits","properties":{"communicationLimitList":{"type":"array","items":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationLimit"},"description":"The list of CommunicationLimits."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignCommunicationLimitsConfig":{"description":"Communication limits config","properties":{"allChannelsSubtypes":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationLimits","description":"The CommunicationLimits that apply to all channel subtypes defined in an outbound campaign."},"instanceLimitsHandling":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignInstanceLimitsHandling","description":"Opt-in or Opt-out from instance-level limits."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignCommunicationTimeConfig":{"description":"Campaign communication time config","properties":{"email":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTimeWindow","description":"The communication time configuration for the email channel subtype."},"localTimeZoneConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignLocalTimeZoneConfig","description":"The local timezone configuration."},"sms":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTimeWindow","description":"The communication time configuration for the SMS channel subtype."},"telephony":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTimeWindow","description":"The communication time configuration for the telephony channel subtype."},"whatsApp":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTimeWindow","description":"The communication time configuration for the WhatsApp channel subtype."}},"type":"object","required":["localTimeZoneConfig"]},"aws-native:connectcampaignsv2:CampaignDailyHour":{"description":"Daily Hour","properties":{"key":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignDayOfWeek"},"value":{"type":"array","items":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTimeRange"}}},"type":"object"},"aws-native:connectcampaignsv2:CampaignDayOfWeek":{"description":"Day of week","type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:connectcampaignsv2:CampaignEmailChannelSubtypeConfig":{"description":"Email Channel Subtype config","properties":{"capacity":{"type":"number","description":"The allocation of email capacity between multiple running outbound campaigns."},"defaultOutboundConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignEmailOutboundConfig","description":"The default email outbound configuration of an outbound campaign."},"outboundMode":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignEmailOutboundMode","description":"The outbound mode for email of an outbound campaign."}},"type":"object","required":["defaultOutboundConfig","outboundMode"]},"aws-native:connectcampaignsv2:CampaignEmailOutboundConfig":{"description":"Default Email outbound config","properties":{"connectSourceEmailAddress":{"type":"string","description":"The Amazon Connect source email address."},"sourceEmailAddressDisplayName":{"type":"string","description":"The display name for the Amazon Connect source email address."},"wisdomTemplateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect template."}},"type":"object","required":["connectSourceEmailAddress","wisdomTemplateArn"]},"aws-native:connectcampaignsv2:CampaignEmailOutboundMode":{"description":"Email Outbound Mode","properties":{"agentlessConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignAgentlessConfig","description":"The agentless outbound mode configuration for email."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignEventTrigger":{"description":"The event trigger of the campaign","properties":{"customerProfilesDomainArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Customer Profiles domain."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignInstanceLimitsHandling":{"description":"Enumeration of Instance Limits handling in a Campaign","type":"string","enum":[{"name":"OptIn","value":"OPT_IN"},{"name":"OptOut","value":"OPT_OUT"}]},"aws-native:connectcampaignsv2:CampaignLocalTimeZoneConfig":{"description":"Local time zone config","properties":{"defaultTimeZone":{"type":"string","description":"The timezone to use for all recipients."},"localTimeZoneDetection":{"type":"array","items":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignLocalTimeZoneDetectionType"},"description":"Detects methods for the recipient's timezone."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignLocalTimeZoneDetectionType":{"description":"Local TimeZone Detection method","type":"string","enum":[{"name":"ZipCode","value":"ZIP_CODE"},{"name":"AreaCode","value":"AREA_CODE"}]},"aws-native:connectcampaignsv2:CampaignOpenHours":{"description":"Open Hours config","properties":{"dailyHours":{"type":"array","items":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignDailyHour"},"description":"The daily hours configuration."}},"type":"object","required":["dailyHours"]},"aws-native:connectcampaignsv2:CampaignPredictiveConfig":{"description":"Predictive config","properties":{"bandwidthAllocation":{"type":"number","description":"Bandwidth allocation for the predictive outbound mode."}},"type":"object","required":["bandwidthAllocation"]},"aws-native:connectcampaignsv2:CampaignPreviewConfig":{"description":"Preview config","properties":{"agentActions":{"type":"array","items":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignAgentAction"},"description":"Agent actions for the preview outbound mode."},"bandwidthAllocation":{"type":"number","description":"Bandwidth allocation for the preview outbound mode."},"timeoutConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTimeoutConfig","description":"Countdown timer configuration for preview outbound mode."}},"type":"object","required":["bandwidthAllocation","timeoutConfig"]},"aws-native:connectcampaignsv2:CampaignProgressiveConfig":{"description":"Progressive config","properties":{"bandwidthAllocation":{"type":"number","description":"Bandwidth allocation for the progressive outbound mode."}},"type":"object","required":["bandwidthAllocation"]},"aws-native:connectcampaignsv2:CampaignRestrictedPeriod":{"description":"Restricted period","properties":{"endDate":{"type":"string"},"name":{"type":"string","description":"The name of a restricted period"},"startDate":{"type":"string"}},"type":"object","required":["endDate","startDate"]},"aws-native:connectcampaignsv2:CampaignRestrictedPeriods":{"description":"Restricted period config","properties":{"restrictedPeriodList":{"type":"array","items":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignRestrictedPeriod"},"description":"The restricted period list."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignSchedule":{"description":"Campaign schedule","properties":{"endTime":{"type":"string","description":"The end time of the schedule in UTC."},"refreshFrequency":{"type":"string","description":"The refresh frequency of the campaign."},"startTime":{"type":"string","description":"The start time of the schedule in UTC."}},"type":"object","required":["endTime","startTime"]},"aws-native:connectcampaignsv2:CampaignSmsChannelSubtypeConfig":{"description":"SMS Channel Subtype config","properties":{"capacity":{"type":"number","description":"The allocation of SMS capacity between multiple running outbound campaigns."},"defaultOutboundConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSmsOutboundConfig","description":"The default SMS outbound configuration of an outbound campaign."},"outboundMode":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSmsOutboundMode","description":"The outbound mode of SMS for an outbound campaign."}},"type":"object","required":["defaultOutboundConfig","outboundMode"]},"aws-native:connectcampaignsv2:CampaignSmsOutboundConfig":{"description":"Default SMS outbound config","properties":{"connectSourcePhoneNumberArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Connect source SMS phone number."},"wisdomTemplateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect template."}},"type":"object","required":["connectSourcePhoneNumberArn","wisdomTemplateArn"]},"aws-native:connectcampaignsv2:CampaignSmsOutboundMode":{"description":"SMS Outbound Mode","properties":{"agentlessConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignAgentlessConfig","description":"Contains agentless outbound mode configuration."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignSource":{"description":"The possible source of the campaign","properties":{"customerProfilesSegmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Customer Profiles segment."},"eventTrigger":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignEventTrigger","description":"The event trigger of the campaign."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignTag":{"properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:connectcampaignsv2:CampaignTelephonyChannelSubtypeConfig":{"description":"Telephony Channel Subtype config","properties":{"capacity":{"type":"number","description":"The allocation of telephony capacity between multiple running outbound campaigns."},"connectQueueId":{"type":"string","description":"The identifier of the Amazon Connect queue associated with telephony outbound requests of an outbound campaign."},"defaultOutboundConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTelephonyOutboundConfig","description":"The default telephony outbound configuration of an outbound campaign."},"outboundMode":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignTelephonyOutboundMode","description":"The outbound mode of telephony for an outbound campaign."}},"type":"object","required":["defaultOutboundConfig","outboundMode"]},"aws-native:connectcampaignsv2:CampaignTelephonyOutboundConfig":{"description":"Default Telephone Outbound config","properties":{"answerMachineDetectionConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignAnswerMachineDetectionConfig","description":"The answering machine detection configuration."},"connectContactFlowId":{"type":"string","description":"The identifier of the published Amazon Connect contact flow."},"connectSourcePhoneNumber":{"type":"string","description":"The Amazon Connect source phone number."},"ringTimeout":{"type":"integer","description":"The ring timeout configuration for outbound calls. Specifies how long to wait for the call to be answered before timing out."}},"type":"object","required":["connectContactFlowId"]},"aws-native:connectcampaignsv2:CampaignTelephonyOutboundMode":{"description":"Telephony Outbound Mode","properties":{"agentlessConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignAgentlessConfig","description":"The agentless outbound mode configuration for telephony."},"predictiveConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignPredictiveConfig","description":"Contains predictive outbound mode configuration."},"previewConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignPreviewConfig","description":"Contains preview outbound mode configuration."},"progressiveConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignProgressiveConfig","description":"Contains progressive telephony outbound mode configuration."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignTimeRange":{"description":"Time range in 24 hour format","properties":{"endTime":{"type":"string"},"startTime":{"type":"string"}},"type":"object","required":["endTime","startTime"]},"aws-native:connectcampaignsv2:CampaignTimeWindow":{"description":"Time window config","properties":{"openHours":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignOpenHours","description":"The open hours configuration."},"restrictedPeriods":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignRestrictedPeriods","description":"The restricted periods configuration."}},"type":"object","required":["openHours"]},"aws-native:connectcampaignsv2:CampaignTimeoutConfig":{"description":"Timeout Config for preview contacts","properties":{"durationInSeconds":{"type":"integer","description":"Duration in seconds for the countdown timer."}},"type":"object"},"aws-native:connectcampaignsv2:CampaignType":{"description":"Campaign type","type":"string","enum":[{"name":"Managed","value":"MANAGED"},{"name":"Journey","value":"JOURNEY"}]},"aws-native:connectcampaignsv2:CampaignWhatsAppChannelSubtypeConfig":{"description":"WhatsApp Channel Subtype config","properties":{"capacity":{"type":"number","description":"The allocation of WhatsApp capacity between multiple running outbound campaigns."},"defaultOutboundConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignWhatsAppOutboundConfig","description":"The default WhatsApp outbound configuration of an outbound campaign."},"outboundMode":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignWhatsAppOutboundMode","description":"The outbound mode for WhatsApp of an outbound campaign."}},"type":"object","required":["defaultOutboundConfig","outboundMode"]},"aws-native:connectcampaignsv2:CampaignWhatsAppOutboundConfig":{"description":"Default WhatsApp outbound config","properties":{"connectSourcePhoneNumberArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Connect source WhatsApp phone number."},"wisdomTemplateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect template."}},"type":"object","required":["connectSourcePhoneNumberArn","wisdomTemplateArn"]},"aws-native:connectcampaignsv2:CampaignWhatsAppOutboundMode":{"description":"WhatsApp Outbound Mode","properties":{"agentlessConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignAgentlessConfig"}},"type":"object"},"aws-native:controltower:EnabledBaselineParameter":{"properties":{"key":{"type":"string"},"value":{"oneOf":[{"type":"string"},{"$ref":"pulumi.json#/Any"},{"type":"number"},{"type":"array","items":{"oneOf":[{"type":"boolean"},{"type":"number"},{"$ref":"pulumi.json#/Any"},{"type":"string"}]}},{"type":"boolean"}]}},"type":"object"},"aws-native:controltower:EnabledBaselineTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:controltower:EnabledControlParameter":{"properties":{"key":{"type":"string","description":"The key of a key/value pair. It is of type `string` ."},"value":{"oneOf":[{"type":"array","items":{"oneOf":[{"type":"string"},{"type":"number"},{"$ref":"pulumi.json#/Any"},{"type":"boolean"}]}},{"type":"string"},{"type":"number"},{"$ref":"pulumi.json#/Any"},{"type":"boolean"}],"description":"The value of a key/value pair. It can be of type `array` , `string` , `number` , `object` , or `boolean` . [Note: The *Type* field that follows may show a single type such as Number, which is only one possible type.]"}},"type":"object","required":["key","value"]},"aws-native:controltower:EnabledControlTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:."}},"type":"object","required":["key","value"]},"aws-native:controltower:LandingZoneDriftStatus":{"type":"string","enum":[{"name":"Drifted","value":"DRIFTED"},{"name":"InSync","value":"IN_SYNC"}]},"aws-native:controltower:LandingZoneRemediationTypesItem":{"type":"string","enum":[{"name":"InheritanceDrift","value":"INHERITANCE_DRIFT"}]},"aws-native:controltower:LandingZoneStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Processing","value":"PROCESSING"},{"name":"Failed","value":"FAILED"}]},"aws-native:controltower:LandingZoneTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with `aws:` . digits, whitespace, `_` , `.` , `:` , `/` , `=` , `+` , `@` , `-` , and `\"` .\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_` , `.` , `/` , `=` , `+` , and `-` .\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object"},"aws-native:customerprofiles:CalculatedAttributeDefinitionAttributeDetails":{"description":"Mathematical expression and a list of attribute items specified in that expression.","properties":{"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionAttributeItem"},"description":"Mathematical expression and a list of attribute items specified in that expression."},"expression":{"type":"string","description":"Mathematical expression that is performed on attribute items provided in the attribute list. Each element in the expression should follow the structure of \\\"{ObjectTypeName.AttributeName}\\\"."}},"type":"object","required":["attributes","expression"]},"aws-native:customerprofiles:CalculatedAttributeDefinitionAttributeItem":{"description":"The details of a single attribute item specified in the mathematical expression.","properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:customerprofiles:CalculatedAttributeDefinitionConditions":{"description":"The conditions including range, object count, and threshold for the calculated attribute.","properties":{"objectCount":{"type":"integer","description":"The number of profile objects used for the calculated attribute."},"range":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionRange","description":"The relative time period over which data is included in the aggregation."},"threshold":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionThreshold","description":"The threshold for the calculated attribute."}},"type":"object"},"aws-native:customerprofiles:CalculatedAttributeDefinitionRange":{"description":"The relative time period over which data is included in the aggregation.","properties":{"timestampFormat":{"type":"string","description":"The format the timestamp field in your JSON object is specified. This value should be one of EPOCHMILLI or ISO_8601. E.g. if your object type is MyType and source JSON is {\"generatedAt\": {\"timestamp\": \"2001-07-04T12:08:56.235Z\"}}, then TimestampFormat should be \"ISO_8601\".","replaceOnChanges":true},"timestampSource":{"type":"string","description":"An expression specifying the field in your JSON object from which the date should be parsed. The expression should follow the structure of \\\"{ObjectTypeName.\u003cLocation of timestamp field in JSON pointer format\u003e}\\\". E.g. if your object type is MyType and source JSON is {\"generatedAt\": {\"timestamp\": \"1737587945945\"}}, then TimestampSource should be \"{MyType.generatedAt.timestamp}\".","replaceOnChanges":true},"unit":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionRangeUnit","description":"The unit of time."},"value":{"type":"integer","description":"The amount of time of the specified unit."},"valueRange":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionValueRange","description":"A structure letting customers specify a relative time window over which over which data is included in the Calculated Attribute. Use positive numbers to indicate that the endpoint is in the past, and negative numbers to indicate it is in the future. ValueRange overrides Value."}},"type":"object","required":["unit"]},"aws-native:customerprofiles:CalculatedAttributeDefinitionRangeUnit":{"description":"The unit of time.","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:customerprofiles:CalculatedAttributeDefinitionReadiness":{"description":"The readiness status of the calculated attribute.","properties":{"message":{"type":"string","description":"Any information pertaining to the status of the calculated attribute if required."},"progressPercentage":{"type":"integer","description":"The progress percentage for including historical data in your calculated attribute."}},"type":"object"},"aws-native:customerprofiles:CalculatedAttributeDefinitionStatistic":{"description":"The aggregation operation to perform for the calculated attribute.","type":"string","enum":[{"name":"FirstOccurrence","value":"FIRST_OCCURRENCE"},{"name":"LastOccurrence","value":"LAST_OCCURRENCE"},{"name":"Count","value":"COUNT"},{"name":"Sum","value":"SUM"},{"name":"Minimum","value":"MINIMUM"},{"name":"Maximum","value":"MAXIMUM"},{"name":"Average","value":"AVERAGE"},{"name":"MaxOccurrence","value":"MAX_OCCURRENCE"}]},"aws-native:customerprofiles:CalculatedAttributeDefinitionStatus":{"description":"The status of the calculated attribute definition.","type":"string","enum":[{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Preparing","value":"PREPARING"},{"name":"Completed","value":"COMPLETED"},{"name":"Failed","value":"FAILED"}]},"aws-native:customerprofiles:CalculatedAttributeDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:CalculatedAttributeDefinitionThreshold":{"description":"The threshold for the calculated attribute.","properties":{"operator":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionThresholdOperator","description":"The operator of the threshold."},"value":{"type":"string","description":"The value of the threshold."}},"type":"object","required":["operator","value"]},"aws-native:customerprofiles:CalculatedAttributeDefinitionThresholdOperator":{"description":"The operator of the threshold.","type":"string","enum":[{"name":"EqualTo","value":"EQUAL_TO"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"LessThan","value":"LESS_THAN"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"}]},"aws-native:customerprofiles:CalculatedAttributeDefinitionValueRange":{"description":"A structure specifying the endpoints of the relative time period over which data is included in the aggregation.","properties":{"end":{"type":"integer","description":"The ending point for this range. Positive numbers indicate how many days in the past data should be included, and negative numbers indicate how many days in the future."},"start":{"type":"integer","description":"The starting point for this range. Positive numbers indicate how many days in the past data should be included, and negative numbers indicate how many days in the future."}},"type":"object","required":["end","start"]},"aws-native:customerprofiles:DestinationDetailsProperties":{"description":"Details regarding the Kinesis stream.","properties":{"status":{"$ref":"#/types/aws-native:customerprofiles:EventStreamStatus","description":"The status of enabling the Kinesis stream as a destination for export."},"uri":{"type":"string","description":"The StreamARN of the destination to deliver profile events to. For example, arn:aws:kinesis:region:account-id:stream/stream-name."}},"type":"object","required":["status","uri"]},"aws-native:customerprofiles:DomainAttributeTypesSelector":{"description":"Configures information about the AttributeTypesSelector where the rule-based identity resolution uses to match profiles.","properties":{"address":{"type":"array","items":{"type":"string"},"description":"The Address type. You can choose from Address, BusinessAddress, MaillingAddress, and ShippingAddress. You only can use the Address type in the MatchingRule. For example, if you want to match profile based on BusinessAddress.City or MaillingAddress.City, you need to choose the BusinessAddress and the MaillingAddress to represent the Address type and specify the Address.City on the matching rule."},"attributeMatchingModel":{"$ref":"#/types/aws-native:customerprofiles:DomainAttributeTypesSelectorAttributeMatchingModel","description":"Configures the AttributeMatchingModel, you can either choose ONE_TO_ONE or MANY_TO_MANY."},"emailAddress":{"type":"array","items":{"type":"string"},"description":"The Email type. You can choose from EmailAddress, BusinessEmailAddress and PersonalEmailAddress. You only can use the EmailAddress type in the MatchingRule. For example, if you want to match profile based on PersonalEmailAddress or BusinessEmailAddress, you need to choose the PersonalEmailAddress and the BusinessEmailAddress to represent the EmailAddress type and only specify the EmailAddress on the matching rule."},"phoneNumber":{"type":"array","items":{"type":"string"},"description":"The PhoneNumber type. You can choose from PhoneNumber, HomePhoneNumber, and MobilePhoneNumber. You only can use the PhoneNumber type in the MatchingRule. For example, if you want to match a profile based on Phone or HomePhone, you need to choose the Phone and the HomePhone to represent the PhoneNumber type and only specify the PhoneNumber on the matching rule."}},"type":"object","required":["attributeMatchingModel"]},"aws-native:customerprofiles:DomainAttributeTypesSelectorAttributeMatchingModel":{"description":"Configures the AttributeMatchingModel, you can either choose ONE_TO_ONE or MANY_TO_MANY.","type":"string","enum":[{"name":"OneToOne","value":"ONE_TO_ONE"},{"name":"ManyToMany","value":"MANY_TO_MANY"}]},"aws-native:customerprofiles:DomainAutoMerging":{"description":"Configuration information about the auto-merging process.","properties":{"conflictResolution":{"$ref":"#/types/aws-native:customerprofiles:DomainConflictResolution","description":"Determines how the auto-merging process should resolve conflicts between different profiles. For example, if Profile A and Profile B have the same `FirstName` and `LastName` , `ConflictResolution` specifies which `EmailAddress` should be used."},"consolidation":{"$ref":"#/types/aws-native:customerprofiles:DomainConsolidation","description":"A list of matching attributes that represent matching criteria. If two profiles meet at least one of the requirements in the matching attributes list, they will be merged."},"enabled":{"type":"boolean","description":"The flag that enables the auto-merging of duplicate profiles."},"minAllowedConfidenceScoreForMerging":{"type":"number","description":"A number between 0 and 1 that represents the minimum confidence score required for profiles within a matching group to be merged during the auto-merge process. A higher score means higher similarity required to merge profiles."}},"type":"object","required":["enabled"]},"aws-native:customerprofiles:DomainConflictResolution":{"description":"How the auto-merging process should resolve conflicts between different profiles. For example, if Profile A and Profile B have the same FirstName and LastName (and that is the matching criteria), which EmailAddress should be used? ","properties":{"conflictResolvingModel":{"$ref":"#/types/aws-native:customerprofiles:DomainConflictResolutionConflictResolvingModel","description":"How the auto-merging process should resolve conflicts between different profiles."},"sourceName":{"type":"string","description":"The ObjectType name that is used to resolve profile merging conflicts when choosing SOURCE as the ConflictResolvingModel."}},"type":"object","required":["conflictResolvingModel"]},"aws-native:customerprofiles:DomainConflictResolutionConflictResolvingModel":{"description":"How the auto-merging process should resolve conflicts between different profiles.","type":"string","enum":[{"name":"Recency","value":"RECENCY"},{"name":"Source","value":"SOURCE"}]},"aws-native:customerprofiles:DomainConsolidation":{"description":"A list of matching attributes that represent matching criteria. If two profiles meet at least one of the requirements in the matching attributes list, they will be merged.","properties":{"matchingAttributesList":{"type":"array","items":{"type":"array","items":{"type":"string"}},"description":"A list of matching criteria."}},"type":"object","required":["matchingAttributesList"]},"aws-native:customerprofiles:DomainDataStore":{"description":"Configuration and status of the data store for the domain.","properties":{"enabled":{"type":"boolean","description":"Whether the data store is enabled."},"readiness":{"$ref":"#/types/aws-native:customerprofiles:DomainReadiness"}},"type":"object"},"aws-native:customerprofiles:DomainExportingConfig":{"description":"Configuration information for exporting Identity Resolution results, for example, to an S3 bucket.","properties":{"s3Exporting":{"$ref":"#/types/aws-native:customerprofiles:DomainS3ExportingConfig"}},"type":"object"},"aws-native:customerprofiles:DomainJobSchedule":{"description":"The day and time when do you want to start the Identity Resolution Job every week.","properties":{"dayOfTheWeek":{"$ref":"#/types/aws-native:customerprofiles:DomainJobScheduleDayOfTheWeek","description":"The day when the Identity Resolution Job should run every week."},"time":{"type":"string","description":"The time when the Identity Resolution Job should run every week."}},"type":"object","required":["dayOfTheWeek","time"]},"aws-native:customerprofiles:DomainJobScheduleDayOfTheWeek":{"description":"The day when the Identity Resolution Job should run every week.","type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:customerprofiles:DomainMatching":{"description":"The process of matching duplicate profiles. If Matching = true, Amazon Connect Customer Profiles starts a weekly batch process called Identity Resolution Job. If you do not specify a date and time for Identity Resolution Job to run, by default it runs every Saturday at 12AM UTC to detect duplicate profiles in your domains. After the Identity Resolution Job completes, use the GetMatches API to return and review the results. Or, if you have configured ExportingConfig in the MatchingRequest, you can download the results from S3.","properties":{"autoMerging":{"$ref":"#/types/aws-native:customerprofiles:DomainAutoMerging","description":"Configuration information about the auto-merging process."},"enabled":{"type":"boolean","description":"The flag that enables the matching process of duplicate profiles."},"exportingConfig":{"$ref":"#/types/aws-native:customerprofiles:DomainExportingConfig","description":"The S3 location where Identity Resolution Jobs write result files."},"jobSchedule":{"$ref":"#/types/aws-native:customerprofiles:DomainJobSchedule","description":"The day and time when do you want to start the Identity Resolution Job every week."}},"type":"object","required":["enabled"]},"aws-native:customerprofiles:DomainMatchingRule":{"description":"Specifies how does the rule-based matching process should match profiles.","properties":{"rule":{"type":"array","items":{"type":"string"},"description":"A single rule level of the `MatchRules` . Configures how the rule-based matching process should match profiles."}},"type":"object","required":["rule"]},"aws-native:customerprofiles:DomainReadiness":{"description":"Progress information for data store setup.","properties":{"message":{"type":"string","description":"A message describing the current progress."},"progressPercentage":{"type":"integer","description":"The percentage of progress completed."}},"type":"object"},"aws-native:customerprofiles:DomainRuleBasedMatching":{"description":"The process of matching duplicate profiles using the Rule-Based matching. If RuleBasedMatching = true, Amazon Connect Customer Profiles will start to match and merge your profiles according to your configuration in the RuleBasedMatchingRequest. You can use the ListRuleBasedMatches and GetSimilarProfiles API to return and review the results. Also, if you have configured ExportingConfig in the RuleBasedMatchingRequest, you can download the results from S3.","properties":{"attributeTypesSelector":{"$ref":"#/types/aws-native:customerprofiles:DomainAttributeTypesSelector","description":"Configures information about the `AttributeTypesSelector` where the rule-based identity resolution uses to match profiles."},"conflictResolution":{"$ref":"#/types/aws-native:customerprofiles:DomainConflictResolution","description":"Determines how the auto-merging process should resolve conflicts between different profiles. For example, if Profile A and Profile B have the same `FirstName` and `LastName` , `ConflictResolution` specifies which `EmailAddress` should be used."},"enabled":{"type":"boolean","description":"The flag that enables the rule-based matching process of duplicate profiles."},"exportingConfig":{"$ref":"#/types/aws-native:customerprofiles:DomainExportingConfig","description":"The S3 location where Identity Resolution Jobs write result files."},"matchingRules":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:DomainMatchingRule"},"description":"Configures how the rule-based matching process should match profiles. You can have up to 15 MatchingRule in the MatchingRules."},"maxAllowedRuleLevelForMatching":{"type":"integer","description":"Indicates the maximum allowed rule level for matching."},"maxAllowedRuleLevelForMerging":{"type":"integer","description":"Indicates the maximum allowed rule level for merging."},"status":{"$ref":"#/types/aws-native:customerprofiles:DomainRuleBasedMatchingStatus","description":"The status of rule-based matching rule."}},"type":"object","required":["enabled"]},"aws-native:customerprofiles:DomainRuleBasedMatchingStatus":{"description":"The status of rule-based matching rule.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Active","value":"ACTIVE"}]},"aws-native:customerprofiles:DomainS3ExportingConfig":{"description":"The S3 location where Identity Resolution Jobs write result files.","properties":{"s3BucketName":{"type":"string","description":"The name of the S3 bucket where Identity Resolution Jobs write result files."},"s3KeyName":{"type":"string","description":"The S3 key name of the location where Identity Resolution Jobs write result files."}},"type":"object","required":["s3BucketName"]},"aws-native:customerprofiles:DomainStats":{"description":"Usage-specific statistics about the domain.","properties":{"meteringProfileCount":{"type":"number","description":"The number of profiles that you are currently paying for in the domain. If you have more than 100 objects associated with a single profile, that profile counts as two profiles. If you have more than 200 objects, that profile counts as three, and so on."},"objectCount":{"type":"number","description":"The total number of objects in domain."},"profileCount":{"type":"number","description":"The total number of profiles currently in the domain."},"totalSize":{"type":"number","description":"The total size, in bytes, of all objects in the domain."}},"type":"object"},"aws-native:customerprofiles:DomainTag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:EventStreamState":{"description":"The operational state of destination stream for export.","type":"string","enum":[{"name":"Running","value":"RUNNING"},{"name":"Stopped","value":"STOPPED"}]},"aws-native:customerprofiles:EventStreamStatus":{"description":"The status of enabling the Kinesis stream as a destination for export.","type":"string","enum":[{"name":"Healthy","value":"HEALTHY"},{"name":"Unhealthy","value":"UNHEALTHY"}]},"aws-native:customerprofiles:EventStreamTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:EventTriggerCondition":{"description":"Specifies the circumstances under which the event should trigger the destination.","properties":{"eventTriggerDimensions":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerDimension"}},"logicalOperator":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerLogicalOperator"}},"type":"object","required":["eventTriggerDimensions","logicalOperator"]},"aws-native:customerprofiles:EventTriggerDimension":{"description":"A specific event dimension to be assessed.","properties":{"objectAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerObjectAttribute"}}},"type":"object","required":["objectAttributes"]},"aws-native:customerprofiles:EventTriggerLimits":{"description":"Defines limits controlling whether an event triggers the destination, based on ingestion latency and the number of invocations per profile over specific time periods.","properties":{"eventExpiration":{"type":"integer","description":"Specifies that an event will only trigger the destination if it is processed within a certain latency period."},"periods":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerPeriod"},"description":"A list of time periods during which the limits apply."}},"type":"object"},"aws-native:customerprofiles:EventTriggerLogicalOperator":{"description":"The operator used to combine multiple dimensions.","type":"string","enum":[{"name":"Any","value":"ANY"},{"name":"All","value":"ALL"},{"name":"None","value":"NONE"}]},"aws-native:customerprofiles:EventTriggerObjectAttribute":{"description":"The criteria that a specific object attribute must meet to trigger the destination.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerObjectAttributeComparisonOperator","description":"The operator used to compare an attribute against a list of values."},"fieldName":{"type":"string","description":"A field defined within an object type."},"source":{"type":"string","description":"An attribute contained within a source object."},"values":{"type":"array","items":{"type":"string"},"description":"A list of attribute values used for comparison."}},"type":"object","required":["comparisonOperator","values"]},"aws-native:customerprofiles:EventTriggerObjectAttributeComparisonOperator":{"description":"The operator used to compare an attribute against a list of values.","type":"string","enum":[{"name":"Inclusive","value":"INCLUSIVE"},{"name":"Exclusive","value":"EXCLUSIVE"},{"name":"Contains","value":"CONTAINS"},{"name":"BeginsWith","value":"BEGINS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThanOrEqual","value":"GREATER_THAN_OR_EQUAL"},{"name":"LessThanOrEqual","value":"LESS_THAN_OR_EQUAL"},{"name":"Equal","value":"EQUAL"},{"name":"Before","value":"BEFORE"},{"name":"After","value":"AFTER"},{"name":"On","value":"ON"},{"name":"Between","value":"BETWEEN"},{"name":"NotBetween","value":"NOT_BETWEEN"}]},"aws-native:customerprofiles:EventTriggerPeriod":{"description":"Defines a limit and the time period during which it is enforced.","properties":{"maxInvocationsPerProfile":{"type":"integer","description":"The maximum allowed number of destination invocations per profile."},"unit":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerPeriodUnit","description":"The unit of time."},"unlimited":{"type":"boolean","description":"If set to true, there is no limit on the number of destination invocations per profile. The default is false."},"value":{"type":"integer","description":"The amount of time of the specified unit."}},"type":"object","required":["unit","value"]},"aws-native:customerprofiles:EventTriggerPeriodUnit":{"description":"The unit of time.","type":"string","enum":[{"name":"Hours","value":"HOURS"},{"name":"Days","value":"DAYS"},{"name":"Weeks","value":"WEEKS"},{"name":"Months","value":"MONTHS"}]},"aws-native:customerprofiles:EventTriggerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:IntegrationConnectorOperator":{"properties":{"marketo":{"$ref":"#/types/aws-native:customerprofiles:IntegrationMarketoConnectorOperator","description":"The operation to be performed on the provided Marketo source fields."},"s3":{"$ref":"#/types/aws-native:customerprofiles:IntegrationS3ConnectorOperator","description":"The operation to be performed on the provided Amazon S3 source fields."},"salesforce":{"$ref":"#/types/aws-native:customerprofiles:IntegrationSalesforceConnectorOperator","description":"The operation to be performed on the provided Salesforce source fields."},"serviceNow":{"$ref":"#/types/aws-native:customerprofiles:IntegrationServiceNowConnectorOperator","description":"The operation to be performed on the provided ServiceNow source fields."},"zendesk":{"$ref":"#/types/aws-native:customerprofiles:IntegrationZendeskConnectorOperator","description":"The operation to be performed on the provided Zendesk source fields."}},"type":"object"},"aws-native:customerprofiles:IntegrationConnectorType":{"type":"string","enum":[{"name":"Salesforce","value":"Salesforce"},{"name":"Marketo","value":"Marketo"},{"name":"ServiceNow","value":"ServiceNow"},{"name":"Zendesk","value":"Zendesk"},{"name":"S3","value":"S3"}]},"aws-native:customerprofiles:IntegrationFlowDefinition":{"properties":{"description":{"type":"string","description":"A description of the flow you want to create."},"flowName":{"type":"string","description":"The specified name of the flow. Use underscores (_) or hyphens (-) only. Spaces are not allowed."},"kmsArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Key Management Service (KMS) key you provide for encryption."},"sourceFlowConfig":{"$ref":"#/types/aws-native:customerprofiles:IntegrationSourceFlowConfig","description":"The configuration that controls how Customer Profiles retrieves data from the source."},"tasks":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:IntegrationTask"},"description":"A list of tasks that Customer Profiles performs while transferring the data in the flow run."},"triggerConfig":{"$ref":"#/types/aws-native:customerprofiles:IntegrationTriggerConfig","description":"The trigger settings that determine how and when the flow runs."}},"type":"object","required":["flowName","kmsArn","sourceFlowConfig","tasks","triggerConfig"]},"aws-native:customerprofiles:IntegrationIncrementalPullConfig":{"properties":{"datetimeTypeFieldName":{"type":"string","description":"A field that specifies the date time or timestamp field as the criteria to use when importing incremental records from the source."}},"type":"object"},"aws-native:customerprofiles:IntegrationMarketoConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:customerprofiles:IntegrationMarketoSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Marketo flow source."}},"type":"object","required":["object"]},"aws-native:customerprofiles:IntegrationObjectTypeMapping":{"properties":{"key":{"type":"string","description":"The key."},"value":{"type":"string","description":"The value."}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:IntegrationOperatorPropertiesKeys":{"type":"string","enum":[{"name":"Value","value":"VALUE"},{"name":"Values","value":"VALUES"},{"name":"DataType","value":"DATA_TYPE"},{"name":"UpperBound","value":"UPPER_BOUND"},{"name":"LowerBound","value":"LOWER_BOUND"},{"name":"SourceDataType","value":"SOURCE_DATA_TYPE"},{"name":"DestinationDataType","value":"DESTINATION_DATA_TYPE"},{"name":"ValidationAction","value":"VALIDATION_ACTION"},{"name":"MaskValue","value":"MASK_VALUE"},{"name":"MaskLength","value":"MASK_LENGTH"},{"name":"TruncateLength","value":"TRUNCATE_LENGTH"},{"name":"MathOperationFieldsOrder","value":"MATH_OPERATION_FIELDS_ORDER"},{"name":"ConcatFormat","value":"CONCAT_FORMAT"},{"name":"SubfieldCategoryMap","value":"SUBFIELD_CATEGORY_MAP"}]},"aws-native:customerprofiles:IntegrationS3ConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:customerprofiles:IntegrationS3SourceProperties":{"properties":{"bucketName":{"type":"string","description":"The Amazon S3 bucket name where the source files are stored."},"bucketPrefix":{"type":"string","description":"The object key for the Amazon S3 bucket in which the source files are stored."}},"type":"object","required":["bucketName"]},"aws-native:customerprofiles:IntegrationSalesforceConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Contains","value":"CONTAINS"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:customerprofiles:IntegrationSalesforceSourceProperties":{"properties":{"enableDynamicFieldUpdate":{"type":"boolean","description":"The flag that enables dynamic fetching of new (recently added) fields in the Salesforce objects while running a flow."},"includeDeletedRecords":{"type":"boolean","description":"Indicates whether Amazon AppFlow includes deleted files in the flow run."},"object":{"type":"string","description":"The object specified in the Salesforce flow source."}},"type":"object","required":["object"]},"aws-native:customerprofiles:IntegrationScheduledTriggerProperties":{"properties":{"dataPullMode":{"$ref":"#/types/aws-native:customerprofiles:IntegrationScheduledTriggerPropertiesDataPullMode","description":"Specifies whether a scheduled flow has an incremental data transfer or a complete data transfer for each flow run."},"firstExecutionFrom":{"type":"number","description":"Specifies the date range for the records to import from the connector in the first flow run."},"scheduleEndTime":{"type":"number","description":"Specifies the scheduled end time for a scheduled-trigger flow."},"scheduleExpression":{"type":"string","description":"The scheduling expression that determines the rate at which the schedule will run, for example rate (5 minutes)."},"scheduleOffset":{"type":"integer","description":"Specifies the optional offset that is added to the time interval for a schedule-triggered flow."},"scheduleStartTime":{"type":"number","description":"Specifies the scheduled start time for a scheduled-trigger flow. The value must be a date/time value in EPOCH format."},"timezone":{"type":"string","description":"Specifies the time zone used when referring to the date and time of a scheduled-triggered flow, such as America/New_York."}},"type":"object","required":["scheduleExpression"]},"aws-native:customerprofiles:IntegrationScheduledTriggerPropertiesDataPullMode":{"description":"Specifies whether a scheduled flow has an incremental data transfer or a complete data transfer for each flow run.","type":"string","enum":[{"name":"Incremental","value":"Incremental"},{"name":"Complete","value":"Complete"}]},"aws-native:customerprofiles:IntegrationScope":{"description":"Scope of the integration, such as 'PROFILE' or 'DOMAIN'","type":"string","enum":[{"name":"Profile","value":"PROFILE"},{"name":"Domain","value":"DOMAIN"}]},"aws-native:customerprofiles:IntegrationServiceNowConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Contains","value":"CONTAINS"},{"name":"Between","value":"BETWEEN"},{"name":"LessThanOrEqualTo","value":"LESS_THAN_OR_EQUAL_TO"},{"name":"GreaterThanOrEqualTo","value":"GREATER_THAN_OR_EQUAL_TO"},{"name":"EqualTo","value":"EQUAL_TO"},{"name":"NotEqualTo","value":"NOT_EQUAL_TO"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:customerprofiles:IntegrationServiceNowSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the ServiceNow flow source."}},"type":"object","required":["object"]},"aws-native:customerprofiles:IntegrationSourceConnectorProperties":{"properties":{"marketo":{"$ref":"#/types/aws-native:customerprofiles:IntegrationMarketoSourceProperties","description":"The properties that are applied when Marketo is being used as a source."},"s3":{"$ref":"#/types/aws-native:customerprofiles:IntegrationS3SourceProperties","description":"The properties that are applied when Amazon S3 is being used as the flow source."},"salesforce":{"$ref":"#/types/aws-native:customerprofiles:IntegrationSalesforceSourceProperties","description":"The properties that are applied when Salesforce is being used as a source."},"serviceNow":{"$ref":"#/types/aws-native:customerprofiles:IntegrationServiceNowSourceProperties","description":"The properties that are applied when ServiceNow is being used as a source."},"zendesk":{"$ref":"#/types/aws-native:customerprofiles:IntegrationZendeskSourceProperties","description":"The properties that are applied when using Zendesk as a flow source."}},"type":"object"},"aws-native:customerprofiles:IntegrationSourceFlowConfig":{"properties":{"connectorProfileName":{"type":"string","description":"The name of the Amazon AppFlow connector profile. This name must be unique for each connector profile in the AWS account ."},"connectorType":{"$ref":"#/types/aws-native:customerprofiles:IntegrationConnectorType","description":"The type of connector, such as Salesforce, Marketo, and so on."},"incrementalPullConfig":{"$ref":"#/types/aws-native:customerprofiles:IntegrationIncrementalPullConfig","description":"Defines the configuration for a scheduled incremental data pull. If a valid configuration is provided, the fields specified in the configuration are used when querying for the incremental data pull."},"sourceConnectorProperties":{"$ref":"#/types/aws-native:customerprofiles:IntegrationSourceConnectorProperties","description":"Specifies the information that is required to query a particular source connector."}},"type":"object","required":["connectorType","sourceConnectorProperties"]},"aws-native:customerprofiles:IntegrationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:IntegrationTask":{"properties":{"connectorOperator":{"$ref":"#/types/aws-native:customerprofiles:IntegrationConnectorOperator","description":"The operation to be performed on the provided source fields."},"destinationField":{"type":"string","description":"A field in a destination connector, or a field value against which Amazon AppFlow validates a source field."},"sourceFields":{"type":"array","items":{"type":"string"},"description":"The source fields to which a particular task is applied."},"taskProperties":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:IntegrationTaskPropertiesMap"},"description":"A map used to store task-related information. The service looks for particular information based on the TaskType."},"taskType":{"$ref":"#/types/aws-native:customerprofiles:IntegrationTaskType","description":"Specifies the particular task implementation that Amazon AppFlow performs."}},"type":"object","required":["sourceFields","taskType"]},"aws-native:customerprofiles:IntegrationTaskPropertiesMap":{"properties":{"operatorPropertyKey":{"$ref":"#/types/aws-native:customerprofiles:IntegrationOperatorPropertiesKeys","description":"The task property key."},"property":{"type":"string","description":"The task property value."}},"type":"object","required":["operatorPropertyKey","property"]},"aws-native:customerprofiles:IntegrationTaskType":{"type":"string","enum":[{"name":"Arithmetic","value":"Arithmetic"},{"name":"Filter","value":"Filter"},{"name":"Map","value":"Map"},{"name":"Mask","value":"Mask"},{"name":"Merge","value":"Merge"},{"name":"Truncate","value":"Truncate"},{"name":"Validate","value":"Validate"}]},"aws-native:customerprofiles:IntegrationTriggerConfig":{"properties":{"triggerProperties":{"$ref":"#/types/aws-native:customerprofiles:IntegrationTriggerProperties","description":"Specifies the configuration details of a schedule-triggered flow that you define. Currently, these settings only apply to the Scheduled trigger type."},"triggerType":{"$ref":"#/types/aws-native:customerprofiles:IntegrationTriggerType","description":"Specifies the type of flow trigger. It can be OnDemand, Scheduled, or Event."}},"type":"object","required":["triggerType"]},"aws-native:customerprofiles:IntegrationTriggerProperties":{"properties":{"scheduled":{"$ref":"#/types/aws-native:customerprofiles:IntegrationScheduledTriggerProperties","description":"Specifies the configuration details of a schedule-triggered flow that you define."}},"type":"object"},"aws-native:customerprofiles:IntegrationTriggerType":{"type":"string","enum":[{"name":"Scheduled","value":"Scheduled"},{"name":"Event","value":"Event"},{"name":"OnDemand","value":"OnDemand"}]},"aws-native:customerprofiles:IntegrationZendeskConnectorOperator":{"type":"string","enum":[{"name":"Projection","value":"PROJECTION"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"Addition","value":"ADDITION"},{"name":"Multiplication","value":"MULTIPLICATION"},{"name":"Division","value":"DIVISION"},{"name":"Subtraction","value":"SUBTRACTION"},{"name":"MaskAll","value":"MASK_ALL"},{"name":"MaskFirstN","value":"MASK_FIRST_N"},{"name":"MaskLastN","value":"MASK_LAST_N"},{"name":"ValidateNonNull","value":"VALIDATE_NON_NULL"},{"name":"ValidateNonZero","value":"VALIDATE_NON_ZERO"},{"name":"ValidateNonNegative","value":"VALIDATE_NON_NEGATIVE"},{"name":"ValidateNumeric","value":"VALIDATE_NUMERIC"},{"name":"NoOp","value":"NO_OP"}]},"aws-native:customerprofiles:IntegrationZendeskSourceProperties":{"properties":{"object":{"type":"string","description":"The object specified in the Zendesk flow source."}},"type":"object","required":["object"]},"aws-native:customerprofiles:ObjectTypeField":{"description":"Represents a field in a ProfileObjectType.","properties":{"contentType":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeFieldContentType","description":"The content type of the field. Used for determining equality when searching."},"source":{"type":"string","description":"A field of a ProfileObject. For example: _source.FirstName, where \"_source\" is a ProfileObjectType of a Zendesk user and \"FirstName\" is a field in that ObjectType."},"target":{"type":"string","description":"The location of the data in the standard ProfileObject model. For example: _profile.Address.PostalCode."}},"type":"object"},"aws-native:customerprofiles:ObjectTypeFieldContentType":{"description":"The content type of the field. Used for determining equality when searching.","type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Number","value":"NUMBER"},{"name":"PhoneNumber","value":"PHONE_NUMBER"},{"name":"EmailAddress","value":"EMAIL_ADDRESS"},{"name":"Name","value":"NAME"}]},"aws-native:customerprofiles:ObjectTypeFieldMap":{"properties":{"name":{"type":"string","description":"Name of the field."},"objectTypeField":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeField","description":"Represents a field in a ProfileObjectType."}},"type":"object"},"aws-native:customerprofiles:ObjectTypeKey":{"description":"An object that defines the Key element of a ProfileObject. A Key is a special element that can be used to search for a customer profile.","properties":{"fieldNames":{"type":"array","items":{"type":"string"},"description":"The reference for the key name of the fields map. "},"standardIdentifiers":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeKeyStandardIdentifiersItem"},"description":"The types of keys that a ProfileObject can have. Each ProfileObject can have only 1 UNIQUE key but multiple PROFILE keys. PROFILE means that this key can be used to tie an object to a PROFILE. UNIQUE means that it can be used to uniquely identify an object. If a key a is marked as SECONDARY, it will be used to search for profiles after all other PROFILE keys have been searched. A LOOKUP_ONLY key is only used to match a profile but is not persisted to be used for searching of the profile. A NEW_ONLY key is only used if the profile does not already exist before the object is ingested, otherwise it is only used for matching objects to profiles."}},"type":"object"},"aws-native:customerprofiles:ObjectTypeKeyMap":{"properties":{"name":{"type":"string","description":"Name of the key."},"objectTypeKeyList":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeKey"},"description":"A list of ObjectTypeKey."}},"type":"object"},"aws-native:customerprofiles:ObjectTypeKeyStandardIdentifiersItem":{"type":"string","enum":[{"name":"Profile","value":"PROFILE"},{"name":"Unique","value":"UNIQUE"},{"name":"Secondary","value":"SECONDARY"},{"name":"LookupOnly","value":"LOOKUP_ONLY"},{"name":"NewOnly","value":"NEW_ONLY"},{"name":"Asset","value":"ASSET"},{"name":"Case","value":"CASE"},{"name":"Order","value":"ORDER"},{"name":"AirPreference","value":"AIR_PREFERENCE"},{"name":"AirBooking","value":"AIR_BOOKING"},{"name":"AirSegment","value":"AIR_SEGMENT"},{"name":"HotelPreference","value":"HOTEL_PREFERENCE"},{"name":"HotelStayRevenue","value":"HOTEL_STAY_REVENUE"},{"name":"HotelReservation","value":"HOTEL_RESERVATION"},{"name":"Loyalty","value":"LOYALTY"},{"name":"LoyaltyTransaction","value":"LOYALTY_TRANSACTION"},{"name":"LoyaltyPromotion","value":"LOYALTY_PROMOTION"},{"name":"WebAnalytics","value":"WEB_ANALYTICS"},{"name":"Device","value":"DEVICE"}]},"aws-native:customerprofiles:ObjectTypeTag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:customerprofiles:SegmentDefinitionAddressDimension":{"description":"The address based criteria for the segment.","properties":{"city":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"country":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"county":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"postalCode":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"province":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"state":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionAttributeDimension":{"description":"Specifies attribute based criteria for a segment.","properties":{"dimensionType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAttributeDimensionType"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["dimensionType","values"]},"aws-native:customerprofiles:SegmentDefinitionAttributeDimensionType":{"description":"The type of segment dimension to use.","type":"string","enum":[{"name":"Inclusive","value":"INCLUSIVE"},{"name":"Exclusive","value":"EXCLUSIVE"},{"name":"Contains","value":"CONTAINS"},{"name":"BeginsWith","value":"BEGINS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"},{"name":"Before","value":"BEFORE"},{"name":"After","value":"AFTER"},{"name":"Between","value":"BETWEEN"},{"name":"NotBetween","value":"NOT_BETWEEN"},{"name":"On","value":"ON"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThanOrEqual","value":"GREATER_THAN_OR_EQUAL"},{"name":"LessThanOrEqual","value":"LESS_THAN_OR_EQUAL"},{"name":"Equal","value":"EQUAL"}]},"aws-native:customerprofiles:SegmentDefinitionCalculatedAttributeDimension":{"description":"Specifies calculated attribute based criteria for a segment.","properties":{"conditionOverrides":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionConditionOverrides"},"dimensionType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAttributeDimensionType"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["dimensionType","values"]},"aws-native:customerprofiles:SegmentDefinitionConditionOverrides":{"description":"Overrides the condition block within the original calculated attribute definition.","properties":{"range":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionRangeOverride"}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionDateDimension":{"description":"Specifies date based criteria for a segment.","properties":{"dimensionType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionDateDimensionType"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["dimensionType","values"]},"aws-native:customerprofiles:SegmentDefinitionDateDimensionType":{"description":"The type of segment dimension to use for a date dimension.","type":"string","enum":[{"name":"Before","value":"BEFORE"},{"name":"After","value":"AFTER"},{"name":"Between","value":"BETWEEN"},{"name":"NotBetween","value":"NOT_BETWEEN"},{"name":"On","value":"ON"}]},"aws-native:customerprofiles:SegmentDefinitionDimension0Properties":{"description":"The criteria that define the dimensions for the segment.","properties":{"profileAttributes":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileAttributes"}},"type":"object","required":["profileAttributes"]},"aws-native:customerprofiles:SegmentDefinitionDimension1Properties":{"description":"The criteria that define the dimensions for the segment.","properties":{"calculatedAttributes":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionCalculatedAttributeDimension"}}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionExtraLengthValueProfileDimension":{"description":"Specifies criteria for a segment using extended-length string values.","properties":{"dimensionType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionStringDimensionType"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["dimensionType","values"]},"aws-native:customerprofiles:SegmentDefinitionGroup":{"description":"An array that defines the set of segment criteria to evaluate when handling segment groups for the segment.","properties":{"dimensions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionDimension0Properties"},{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionDimension1Properties"}]},"description":"Defines the attributes to segment on."},"sourceSegments":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionSourceSegment"},"description":"Defines the starting source of data."},"sourceType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionIncludeOptions","description":"Defines how to interact with the source data."},"type":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionIncludeOptions","description":"Defines how to interact with the profiles found in the current filtering."}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionIncludeOptions":{"description":"Specifies the operator on how to handle multiple groups within the same segment.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Any","value":"ANY"},{"name":"None","value":"NONE"}]},"aws-native:customerprofiles:SegmentDefinitionProfileAttributes":{"description":"Specifies the dimension settings within profile attributes for a segment.","properties":{"accountNumber":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"additionalInformation":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionExtraLengthValueProfileDimension"},"address":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAddressDimension"},"attributes":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAttributeDimension"}},"billingAddress":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAddressDimension"},"birthDate":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionDateDimension"},"businessEmailAddress":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"businessName":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"businessPhoneNumber":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"emailAddress":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"firstName":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"genderString":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"homePhoneNumber":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"lastName":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"mailingAddress":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAddressDimension"},"middleName":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"mobilePhoneNumber":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"partyTypeString":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"personalEmailAddress":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"phoneNumber":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileDimension"},"profileType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileTypeDimension"},"shippingAddress":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionAddressDimension"}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionProfileDimension":{"description":"Specifies profile based criteria for a segment.","properties":{"dimensionType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionStringDimensionType"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["dimensionType","values"]},"aws-native:customerprofiles:SegmentDefinitionProfileType":{"description":"The type of profile.","type":"string","enum":[{"name":"AccountProfile","value":"ACCOUNT_PROFILE"},{"name":"Profile","value":"PROFILE"}]},"aws-native:customerprofiles:SegmentDefinitionProfileTypeDimension":{"description":"Specifies profile type based criteria for a segment.","properties":{"dimensionType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileTypeDimensionType"},"values":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionProfileType"}}},"type":"object","required":["dimensionType","values"]},"aws-native:customerprofiles:SegmentDefinitionProfileTypeDimensionType":{"description":"The type of segment dimension to use for a profile type dimension.","type":"string","enum":[{"name":"Inclusive","value":"INCLUSIVE"},{"name":"Exclusive","value":"EXCLUSIVE"}]},"aws-native:customerprofiles:SegmentDefinitionRangeOverride":{"description":"Defines the range to be applied to the calculated attribute definition.","properties":{"end":{"type":"integer","description":"The ending point for this overridden range. Positive numbers indicate how many days in the past data should be included, and negative numbers indicate how many days in the future."},"start":{"type":"integer","description":"The starting point for this overridden range. Positive numbers indicate how many days in the past data should be included, and negative numbers indicate how many days in the future."},"unit":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionRangeOverrideUnit","description":"The unit to be applied to the range."}},"type":"object","required":["start","unit"]},"aws-native:customerprofiles:SegmentDefinitionRangeOverrideUnit":{"description":"The unit to be applied to the range.","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:customerprofiles:SegmentDefinitionSegmentGroup":{"properties":{"groups":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionGroup"},"description":"Holds the list of groups within the segment definition."},"include":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionIncludeOptions","description":"Defines whether to include or exclude the profiles that fit the segment criteria."}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionSegmentType":{"description":"The SQL query that defines the segment criteria.","type":"string","enum":[{"name":"Classic","value":"CLASSIC"},{"name":"Enhanced","value":"ENHANCED"}]},"aws-native:customerprofiles:SegmentDefinitionSourceSegment":{"description":"The base segment to build the segment on.","properties":{"segmentDefinitionName":{"type":"string","description":"The name of the source segment."}},"type":"object"},"aws-native:customerprofiles:SegmentDefinitionStringDimensionType":{"description":"The type of segment dimension to use for a string dimension.","type":"string","enum":[{"name":"Inclusive","value":"INCLUSIVE"},{"name":"Exclusive","value":"EXCLUSIVE"},{"name":"Contains","value":"CONTAINS"},{"name":"BeginsWith","value":"BEGINS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"}]},"aws-native:customerprofiles:SegmentDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:databrew:DatasetCsvOptions":{"description":"Csv options","properties":{"delimiter":{"type":"string","description":"A single character that specifies the delimiter being used in the CSV file."},"headerRow":{"type":"boolean","description":"A variable that specifies whether the first row in the file is parsed as the header. If this value is false, column names are auto-generated."}},"type":"object"},"aws-native:databrew:DatasetDataCatalogInputDefinition":{"properties":{"catalogId":{"type":"string","description":"Catalog id"},"databaseName":{"type":"string","description":"Database name"},"tableName":{"type":"string","description":"Table name"},"tempDirectory":{"$ref":"#/types/aws-native:databrew:DatasetS3Location","description":"An Amazon location that AWS Glue Data Catalog can use as a temporary directory."}},"type":"object"},"aws-native:databrew:DatasetDatabaseInputDefinition":{"properties":{"databaseTableName":{"type":"string","description":"Database table name"},"glueConnectionName":{"type":"string","description":"Glue connection name"},"queryString":{"type":"string","description":"Custom SQL to run against the provided AWS Glue connection. This SQL will be used as the input for DataBrew projects and jobs."},"tempDirectory":{"$ref":"#/types/aws-native:databrew:DatasetS3Location","description":"An Amazon location that AWS Glue Data Catalog can use as a temporary directory."}},"type":"object","required":["glueConnectionName"]},"aws-native:databrew:DatasetDatetimeOptions":{"properties":{"format":{"type":"string","description":"Date/time format of a date parameter"},"localeCode":{"type":"string","description":"Locale code for a date parameter"},"timezoneOffset":{"type":"string","description":"Timezone offset"}},"type":"object","required":["format"]},"aws-native:databrew:DatasetExcelOptions":{"properties":{"headerRow":{"type":"boolean","description":"A variable that specifies whether the first row in the file is parsed as the header. If this value is false, column names are auto-generated."},"sheetIndexes":{"type":"array","items":{"type":"integer"},"description":"One or more sheet numbers in the Excel file that will be included in the dataset."},"sheetNames":{"type":"array","items":{"type":"string"},"description":"One or more named sheets in the Excel file that will be included in the dataset."}},"type":"object"},"aws-native:databrew:DatasetFilesLimit":{"properties":{"maxFiles":{"type":"integer","description":"Maximum number of files"},"order":{"$ref":"#/types/aws-native:databrew:DatasetFilesLimitOrder","description":"Order"},"orderedBy":{"$ref":"#/types/aws-native:databrew:DatasetFilesLimitOrderedBy","description":"Ordered by"}},"type":"object","required":["maxFiles"]},"aws-native:databrew:DatasetFilesLimitOrder":{"description":"Order","type":"string","enum":[{"name":"Ascending","value":"ASCENDING"},{"name":"Descending","value":"DESCENDING"}]},"aws-native:databrew:DatasetFilesLimitOrderedBy":{"description":"Ordered by","type":"string","enum":[{"name":"LastModifiedDate","value":"LAST_MODIFIED_DATE"}]},"aws-native:databrew:DatasetFilterExpression":{"properties":{"expression":{"type":"string","description":"Filtering expression for a parameter"},"valuesMap":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:DatasetFilterValue"},"description":"The map of substitution variable names to their values used in this filter expression."}},"type":"object","required":["expression","valuesMap"]},"aws-native:databrew:DatasetFilterValue":{"description":"A key-value pair to associate expression variable names with their values","properties":{"value":{"type":"string","description":"The value to be associated with the substitution variable."},"valueReference":{"type":"string","description":"Variable name"}},"type":"object","required":["value","valueReference"]},"aws-native:databrew:DatasetFormat":{"description":"Dataset format","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Json","value":"JSON"},{"name":"Parquet","value":"PARQUET"},{"name":"Excel","value":"EXCEL"},{"name":"Orc","value":"ORC"}]},"aws-native:databrew:DatasetFormatOptions":{"description":"Format options for dataset","properties":{"csv":{"$ref":"#/types/aws-native:databrew:DatasetCsvOptions","description":"Options that define how CSV input is to be interpreted by DataBrew."},"excel":{"$ref":"#/types/aws-native:databrew:DatasetExcelOptions","description":"Options that define how Excel input is to be interpreted by DataBrew."},"json":{"$ref":"#/types/aws-native:databrew:DatasetJsonOptions","description":"Options that define how JSON input is to be interpreted by DataBrew."}},"type":"object"},"aws-native:databrew:DatasetInput":{"description":"Input","properties":{"dataCatalogInputDefinition":{"$ref":"#/types/aws-native:databrew:DatasetDataCatalogInputDefinition","description":"The AWS Glue Data Catalog parameters for the data."},"databaseInputDefinition":{"$ref":"#/types/aws-native:databrew:DatasetDatabaseInputDefinition","description":"Connection information for dataset input files stored in a database."},"metadata":{"$ref":"#/types/aws-native:databrew:DatasetMetadata","description":"Contains additional resource information needed for specific datasets."},"s3InputDefinition":{"$ref":"#/types/aws-native:databrew:DatasetS3Location","description":"The Amazon S3 location where the data is stored."}},"type":"object"},"aws-native:databrew:DatasetJsonOptions":{"description":"Json options","properties":{"multiLine":{"type":"boolean","description":"A value that specifies whether JSON input contains embedded new line characters."}},"type":"object"},"aws-native:databrew:DatasetMetadata":{"properties":{"sourceArn":{"type":"string","description":"Arn of the source of the dataset. For e.g.: AppFlow Flow ARN."}},"type":"object"},"aws-native:databrew:DatasetParameter":{"properties":{"createColumn":{"type":"boolean","description":"Add the value of this parameter as a column in a dataset."},"datetimeOptions":{"$ref":"#/types/aws-native:databrew:DatasetDatetimeOptions","description":"Additional parameter options such as a format and a timezone. Required for datetime parameters."},"filter":{"$ref":"#/types/aws-native:databrew:DatasetFilterExpression","description":"The optional filter expression structure to apply additional matching criteria to the parameter."},"name":{"type":"string","description":"The name of the parameter that is used in the dataset's Amazon S3 path."},"type":{"$ref":"#/types/aws-native:databrew:DatasetParameterType","description":"Parameter type"}},"type":"object","required":["name","type"]},"aws-native:databrew:DatasetParameterType":{"description":"Parameter type","type":"string","enum":[{"name":"String","value":"String"},{"name":"Number","value":"Number"},{"name":"Datetime","value":"Datetime"}]},"aws-native:databrew:DatasetPathOptions":{"description":"Path options for dataset","properties":{"filesLimit":{"$ref":"#/types/aws-native:databrew:DatasetFilesLimit","description":"If provided, this structure imposes a limit on a number of files that should be selected."},"lastModifiedDateCondition":{"$ref":"#/types/aws-native:databrew:DatasetFilterExpression","description":"If provided, this structure defines a date range for matching Amazon S3 objects based on their LastModifiedDate attribute in Amazon S3 ."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:DatasetPathParameter"},"description":"A structure that maps names of parameters used in the Amazon S3 path of a dataset to their definitions."}},"type":"object"},"aws-native:databrew:DatasetPathParameter":{"description":"A key-value pair to associate dataset parameter name with its definition.","properties":{"datasetParameter":{"$ref":"#/types/aws-native:databrew:DatasetParameter","description":"The path parameter definition."},"pathParameterName":{"type":"string","description":"The name of the path parameter."}},"type":"object","required":["datasetParameter","pathParameterName"]},"aws-native:databrew:DatasetS3Location":{"description":"Input location","properties":{"bucket":{"type":"string","description":"The Amazon S3 bucket name."},"bucketOwner":{"type":"string","description":"The AWS account ID of the bucket owner."},"key":{"type":"string","description":"The unique name of the object in the bucket."}},"type":"object","required":["bucket"]},"aws-native:databrew:DatasetSource":{"description":"Source type of the dataset","type":"string","enum":[{"name":"S3","value":"S3"},{"name":"DataCatalog","value":"DATA-CATALOG"},{"name":"Database","value":"DATABASE"}]},"aws-native:databrew:DatasetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:databrew:JobAllowedStatistics":{"properties":{"statistics":{"type":"array","items":{"type":"string"},"description":"One or more column statistics to allow for columns that contain detected entities."}},"type":"object","required":["statistics"]},"aws-native:databrew:JobColumnSelector":{"properties":{"name":{"type":"string","description":"The name of a column from a dataset."},"regex":{"type":"string","description":"A regular expression for selecting a column from a dataset."}},"type":"object"},"aws-native:databrew:JobColumnStatisticsConfiguration":{"properties":{"selectors":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobColumnSelector"},"description":"List of column selectors. Selectors can be used to select columns from the dataset. When selectors are undefined, configuration will be applied to all supported columns."},"statistics":{"$ref":"#/types/aws-native:databrew:JobStatisticsConfiguration","description":"Configuration for evaluations. Statistics can be used to select evaluations and override parameters of evaluations."}},"type":"object","required":["statistics"]},"aws-native:databrew:JobCsvOutputOptions":{"description":"Output Csv options","properties":{"delimiter":{"type":"string","description":"A single character that specifies the delimiter used to create CSV job output."}},"type":"object"},"aws-native:databrew:JobDataCatalogOutput":{"properties":{"catalogId":{"type":"string","description":"The unique identifier of the AWS account that holds the Data Catalog that stores the data."},"databaseName":{"type":"string","description":"The name of a database in the Data Catalog."},"databaseOptions":{"$ref":"#/types/aws-native:databrew:JobDatabaseTableOutputOptions","description":"Represents options that specify how and where DataBrew writes the database output generated by recipe jobs."},"overwrite":{"type":"boolean","description":"A value that, if true, means that any data in the location specified for output is overwritten with new output. Not supported with DatabaseOptions."},"s3Options":{"$ref":"#/types/aws-native:databrew:JobS3TableOutputOptions","description":"Represents options that specify how and where DataBrew writes the Amazon S3 output generated by recipe jobs."},"tableName":{"type":"string","description":"The name of a table in the Data Catalog."}},"type":"object","required":["databaseName","tableName"]},"aws-native:databrew:JobDatabaseOutput":{"properties":{"databaseOptions":{"$ref":"#/types/aws-native:databrew:JobDatabaseTableOutputOptions","description":"Represents options that specify how and where DataBrew writes the database output generated by recipe jobs."},"databaseOutputMode":{"$ref":"#/types/aws-native:databrew:JobDatabaseOutputDatabaseOutputMode","description":"Database table name"},"glueConnectionName":{"type":"string","description":"Glue connection name"}},"type":"object","required":["databaseOptions","glueConnectionName"]},"aws-native:databrew:JobDatabaseOutputDatabaseOutputMode":{"description":"Database table name","type":"string","enum":[{"name":"NewTable","value":"NEW_TABLE"}]},"aws-native:databrew:JobDatabaseTableOutputOptions":{"properties":{"tableName":{"type":"string","description":"A prefix for the name of a table DataBrew will create in the database."},"tempDirectory":{"$ref":"#/types/aws-native:databrew:JobS3Location","description":"Represents an Amazon S3 location (bucket name and object key) where DataBrew can store intermediate results."}},"type":"object","required":["tableName"]},"aws-native:databrew:JobEncryptionMode":{"description":"Encryption mode","type":"string","enum":[{"name":"SseKms","value":"SSE-KMS"},{"name":"SseS3","value":"SSE-S3"}]},"aws-native:databrew:JobEntityDetectorConfiguration":{"properties":{"allowedStatistics":{"$ref":"#/types/aws-native:databrew:JobAllowedStatistics","description":"Configuration of statistics that are allowed to be run on columns that contain detected entities. When undefined, no statistics will be computed on columns that contain detected entities."},"entityTypes":{"type":"array","items":{"type":"string"},"description":"Entity types to detect. Can be any of the following:\n\n- USA_SSN\n- EMAIL\n- USA_ITIN\n- USA_PASSPORT_NUMBER\n- PHONE_NUMBER\n- USA_DRIVING_LICENSE\n- BANK_ACCOUNT\n- CREDIT_CARD\n- IP_ADDRESS\n- MAC_ADDRESS\n- USA_DEA_NUMBER\n- USA_HCPCS_CODE\n- USA_NATIONAL_PROVIDER_IDENTIFIER\n- USA_NATIONAL_DRUG_CODE\n- USA_HEALTH_INSURANCE_CLAIM_NUMBER\n- USA_MEDICARE_BENEFICIARY_IDENTIFIER\n- USA_CPT_CODE\n- PERSON_NAME\n- DATE\n\nThe Entity type group USA_ALL is also supported, and includes all of the above entity types except PERSON_NAME and DATE."}},"type":"object","required":["entityTypes"]},"aws-native:databrew:JobLogSubscription":{"description":"Log subscription","type":"string","enum":[{"name":"Enable","value":"ENABLE"},{"name":"Disable","value":"DISABLE"}]},"aws-native:databrew:JobOutput":{"properties":{"compressionFormat":{"$ref":"#/types/aws-native:databrew:JobOutputCompressionFormat","description":"The compression algorithm used to compress the output text of the job."},"format":{"$ref":"#/types/aws-native:databrew:JobOutputFormat","description":"The data format of the output of the job."},"formatOptions":{"$ref":"#/types/aws-native:databrew:JobOutputFormatOptions","description":"Represents options that define how DataBrew formats job output files."},"location":{"$ref":"#/types/aws-native:databrew:JobS3Location","description":"The location in Amazon S3 where the job writes its output."},"maxOutputFiles":{"type":"integer","description":"The maximum number of files to be generated by the job and written to the output folder."},"overwrite":{"type":"boolean","description":"A value that, if true, means that any data in the location specified for output is overwritten with new output."},"partitionColumns":{"type":"array","items":{"type":"string"},"description":"The names of one or more partition columns for the output of the job."}},"type":"object","required":["location"]},"aws-native:databrew:JobOutputCompressionFormat":{"description":"The compression algorithm used to compress the output text of the job.","type":"string","enum":[{"name":"Gzip","value":"GZIP"},{"name":"Lz4","value":"LZ4"},{"name":"Snappy","value":"SNAPPY"},{"name":"Bzip2","value":"BZIP2"},{"name":"Deflate","value":"DEFLATE"},{"name":"Lzo","value":"LZO"},{"name":"Brotli","value":"BROTLI"},{"name":"Zstd","value":"ZSTD"},{"name":"Zlib","value":"ZLIB"}]},"aws-native:databrew:JobOutputFormat":{"description":"The data format of the output of the job.","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Json","value":"JSON"},{"name":"Parquet","value":"PARQUET"},{"name":"Glueparquet","value":"GLUEPARQUET"},{"name":"Avro","value":"AVRO"},{"name":"Orc","value":"ORC"},{"name":"Xml","value":"XML"},{"name":"Tableauhyper","value":"TABLEAUHYPER"}]},"aws-native:databrew:JobOutputFormatOptions":{"description":"Format options for job Output","properties":{"csv":{"$ref":"#/types/aws-native:databrew:JobCsvOutputOptions","description":"Represents a set of options that define the structure of comma-separated value (CSV) job output."}},"type":"object"},"aws-native:databrew:JobOutputLocation":{"description":"Output location","properties":{"bucket":{"type":"string","description":"The Amazon S3 bucket name."},"bucketOwner":{"type":"string"},"key":{"type":"string","description":"The unique name of the object in the bucket."}},"type":"object","required":["bucket"]},"aws-native:databrew:JobProfileConfiguration":{"properties":{"columnStatisticsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobColumnStatisticsConfiguration"},"description":"List of configurations for column evaluations. ColumnStatisticsConfigurations are used to select evaluations and override parameters of evaluations for particular columns. When ColumnStatisticsConfigurations is undefined, the profile job will profile all supported columns and run all supported evaluations."},"datasetStatisticsConfiguration":{"$ref":"#/types/aws-native:databrew:JobStatisticsConfiguration","description":"Configuration for inter-column evaluations. Configuration can be used to select evaluations and override parameters of evaluations. When configuration is undefined, the profile job will run all supported inter-column evaluations."},"entityDetectorConfiguration":{"$ref":"#/types/aws-native:databrew:JobEntityDetectorConfiguration","description":"Configuration of entity detection for a profile job. When undefined, entity detection is disabled."},"profileColumns":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobColumnSelector"},"description":"List of column selectors. ProfileColumns can be used to select columns from the dataset. When ProfileColumns is undefined, the profile job will profile all supported columns."}},"type":"object"},"aws-native:databrew:JobRecipe":{"properties":{"name":{"type":"string","description":"Recipe name"},"version":{"type":"string","description":"Recipe version"}},"type":"object","required":["name"]},"aws-native:databrew:JobS3Location":{"description":"S3 Output location","properties":{"bucket":{"type":"string","description":"The Amazon S3 bucket name."},"bucketOwner":{"type":"string","description":"The AWS account ID of the bucket owner."},"key":{"type":"string","description":"The unique name of the object in the bucket."}},"type":"object","required":["bucket"]},"aws-native:databrew:JobS3TableOutputOptions":{"properties":{"location":{"$ref":"#/types/aws-native:databrew:JobS3Location","description":"Represents an Amazon S3 location (bucket name and object key) where DataBrew can write output from a job."}},"type":"object","required":["location"]},"aws-native:databrew:JobSample":{"description":"Job Sample","properties":{"mode":{"$ref":"#/types/aws-native:databrew:JobSampleMode","description":"A value that determines whether the profile job is run on the entire dataset or a specified number of rows. This value must be one of the following:\n\n- FULL_DATASET - The profile job is run on the entire dataset.\n- CUSTOM_ROWS - The profile job is run on the number of rows specified in the `Size` parameter."},"size":{"type":"integer","description":"The `Size` parameter is only required when the mode is CUSTOM_ROWS. The profile job is run on the specified number of rows. The maximum value for size is Long.MAX_VALUE.\n\nLong.MAX_VALUE = 9223372036854775807"}},"type":"object"},"aws-native:databrew:JobSampleMode":{"description":"Sample configuration mode for profile jobs.","type":"string","enum":[{"name":"FullDataset","value":"FULL_DATASET"},{"name":"CustomRows","value":"CUSTOM_ROWS"}]},"aws-native:databrew:JobStatisticOverride":{"properties":{"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A map that includes overrides of an evaluation’s parameters."},"statistic":{"type":"string","description":"The name of an evaluation"}},"type":"object","required":["parameters","statistic"]},"aws-native:databrew:JobStatisticsConfiguration":{"properties":{"includedStatistics":{"type":"array","items":{"type":"string"},"description":"List of included evaluations. When the list is undefined, all supported evaluations will be included."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobStatisticOverride"},"description":"List of overrides for evaluations."}},"type":"object"},"aws-native:databrew:JobTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:databrew:JobType":{"description":"Job type","type":"string","enum":[{"name":"Profile","value":"PROFILE"},{"name":"Recipe","value":"RECIPE"}]},"aws-native:databrew:JobValidationConfiguration":{"description":"Configuration to attach Rulesets to the job","properties":{"rulesetArn":{"type":"string","description":"Arn of the Ruleset"},"validationMode":{"$ref":"#/types/aws-native:databrew:JobValidationMode","description":"Mode of data quality validation. Default mode is \"CHECK_ALL\" which verifies all rules defined in the selected ruleset."}},"type":"object","required":["rulesetArn"]},"aws-native:databrew:JobValidationMode":{"type":"string","enum":[{"name":"CheckAll","value":"CHECK_ALL"}]},"aws-native:databrew:ProjectSample":{"properties":{"size":{"type":"integer","description":"Sample size"},"type":{"$ref":"#/types/aws-native:databrew:ProjectSampleType","description":"Sample type"}},"type":"object","required":["type"]},"aws-native:databrew:ProjectSampleType":{"description":"Sample type","type":"string","enum":[{"name":"FirstN","value":"FIRST_N"},{"name":"LastN","value":"LAST_N"},{"name":"Random","value":"RANDOM"}]},"aws-native:databrew:ProjectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:databrew:RecipeAction":{"properties":{"operation":{"type":"string","description":"Step action operation"},"parameters":{"oneOf":[{"$ref":"#/types/aws-native:databrew:RecipeParameters"},{"type":"object","additionalProperties":{"type":"string"}}],"description":"Contextual parameters for the transformation."}},"type":"object","required":["operation"]},"aws-native:databrew:RecipeConditionExpression":{"description":"Condition expressions applied to the step action","properties":{"condition":{"type":"string","description":"Input condition to be applied to the target column"},"targetColumn":{"type":"string","description":"Name of the target column"},"value":{"type":"string","description":"Value of the condition"}},"type":"object","required":["condition","targetColumn"]},"aws-native:databrew:RecipeDataCatalogInputDefinition":{"properties":{"catalogId":{"type":"string","description":"Catalog id"},"databaseName":{"type":"string","description":"Database name"},"tableName":{"type":"string","description":"Table name"},"tempDirectory":{"$ref":"#/types/aws-native:databrew:RecipeS3Location"}},"type":"object"},"aws-native:databrew:RecipeParameters":{"properties":{"aggregateFunction":{"type":"string"},"base":{"type":"string"},"caseStatement":{"type":"string"},"categoryMap":{"type":"string"},"charsToRemove":{"type":"string"},"collapseConsecutiveWhitespace":{"type":"string"},"columnDataType":{"type":"string"},"columnRange":{"type":"string"},"count":{"type":"string"},"customCharacters":{"type":"string"},"customStopWords":{"type":"string"},"customValue":{"type":"string"},"datasetsColumns":{"type":"string"},"dateAddValue":{"type":"string"},"dateTimeFormat":{"type":"string"},"dateTimeParameters":{"type":"string"},"deleteOtherRows":{"type":"string"},"delimiter":{"type":"string"},"endPattern":{"type":"string"},"endPosition":{"type":"string"},"endValue":{"type":"string"},"expandContractions":{"type":"string"},"exponent":{"type":"string"},"falseString":{"type":"string"},"groupByAggFunctionOptions":{"type":"string"},"groupByColumns":{"type":"string"},"hiddenColumns":{"type":"string"},"ignoreCase":{"type":"string"},"includeInSplit":{"type":"string"},"input":{"$ref":"#/types/aws-native:databrew:RecipeParametersInputProperties","description":"Input"},"interval":{"type":"string"},"isText":{"type":"string"},"joinKeys":{"type":"string"},"joinType":{"type":"string"},"leftColumns":{"type":"string"},"limit":{"type":"string"},"lowerBound":{"type":"string"},"mapType":{"type":"string"},"modeType":{"type":"string"},"multiLine":{"type":"boolean"},"numRows":{"type":"string"},"numRowsAfter":{"type":"string"},"numRowsBefore":{"type":"string"},"orderByColumn":{"type":"string"},"orderByColumns":{"type":"string"},"other":{"type":"string"},"pattern":{"type":"string"},"patternOption1":{"type":"string"},"patternOption2":{"type":"string"},"patternOptions":{"type":"string"},"period":{"type":"string"},"position":{"type":"string"},"removeAllPunctuation":{"type":"string"},"removeAllQuotes":{"type":"string"},"removeAllWhitespace":{"type":"string"},"removeCustomCharacters":{"type":"string"},"removeCustomValue":{"type":"string"},"removeLeadingAndTrailingPunctuation":{"type":"string"},"removeLeadingAndTrailingQuotes":{"type":"string"},"removeLeadingAndTrailingWhitespace":{"type":"string"},"removeLetters":{"type":"string"},"removeNumbers":{"type":"string"},"removeSourceColumn":{"type":"string"},"removeSpecialCharacters":{"type":"string"},"rightColumns":{"type":"string"},"sampleSize":{"type":"string"},"sampleType":{"type":"string"},"secondInput":{"type":"string"},"secondaryInputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RecipeSecondaryInput"}},"sheetIndexes":{"type":"array","items":{"type":"integer"}},"sheetNames":{"type":"array","items":{"type":"string"}},"sourceColumn":{"type":"string"},"sourceColumn1":{"type":"string"},"sourceColumn2":{"type":"string"},"sourceColumns":{"type":"string"},"startColumnIndex":{"type":"string"},"startPattern":{"type":"string"},"startPosition":{"type":"string"},"startValue":{"type":"string"},"stemmingMode":{"type":"string"},"stepCount":{"type":"string"},"stepIndex":{"type":"string"},"stopWordsMode":{"type":"string"},"strategy":{"type":"string"},"targetColumn":{"type":"string"},"targetColumnNames":{"type":"string"},"targetDateFormat":{"type":"string"},"targetIndex":{"type":"string"},"timeZone":{"type":"string"},"tokenizerPattern":{"type":"string"},"trueString":{"type":"string"},"udfLang":{"type":"string"},"units":{"type":"string"},"unpivotColumn":{"type":"string"},"upperBound":{"type":"string"},"useNewDataFrame":{"type":"string"},"value":{"type":"string"},"value1":{"type":"string"},"value2":{"type":"string"},"valueColumn":{"type":"string"},"viewFrame":{"type":"string"}},"type":"object"},"aws-native:databrew:RecipeParametersInputProperties":{"description":"Input","properties":{"dataCatalogInputDefinition":{"$ref":"#/types/aws-native:databrew:RecipeDataCatalogInputDefinition"},"s3InputDefinition":{"$ref":"#/types/aws-native:databrew:RecipeS3Location"}},"type":"object"},"aws-native:databrew:RecipeS3Location":{"description":"Input location","properties":{"bucket":{"type":"string"},"key":{"type":"string"}},"type":"object","required":["bucket"]},"aws-native:databrew:RecipeSecondaryInput":{"description":"Secondary input","properties":{"dataCatalogInputDefinition":{"$ref":"#/types/aws-native:databrew:RecipeDataCatalogInputDefinition"},"s3InputDefinition":{"$ref":"#/types/aws-native:databrew:RecipeS3Location"}},"type":"object"},"aws-native:databrew:RecipeStep":{"properties":{"action":{"$ref":"#/types/aws-native:databrew:RecipeAction","description":"The particular action to be performed in the recipe step."},"conditionExpressions":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RecipeConditionExpression"},"description":"Condition expressions applied to the step action"}},"type":"object","required":["action"]},"aws-native:databrew:RecipeTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:databrew:RulesetColumnSelector":{"description":"Selector of a column from a dataset for profile job configuration. One selector includes either a column name or a regular expression","properties":{"name":{"type":"string","description":"The name of a column from a dataset"},"regex":{"type":"string","description":"A regular expression for selecting a column from a dataset"}},"type":"object"},"aws-native:databrew:RulesetRule":{"description":"Data quality rule for a target resource (dataset)","properties":{"checkExpression":{"type":"string","description":"The expression which includes column references, condition names followed by variable references, possibly grouped and combined with other conditions. For example, `(:col1 starts_with :prefix1 or :col1 starts_with :prefix2) and (:col1 ends_with :suffix1 or :col1 ends_with :suffix2)` . Column and value references are substitution variables that should start with the ':' symbol. Depending on the context, substitution variables' values can be either an actual value or a column name. These values are defined in the SubstitutionMap. If a CheckExpression starts with a column reference, then ColumnSelectors in the rule should be null. If ColumnSelectors has been defined, then there should be no columnn reference in the left side of a condition, for example, `is_between :val1 and :val2` ."},"columnSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RulesetColumnSelector"},"description":"List of column selectors. Selectors can be used to select columns using a name or regular expression from the dataset. Rule will be applied to selected columns."},"disabled":{"type":"boolean","description":"A value that specifies whether the rule is disabled. Once a rule is disabled, a profile job will not validate it during a job run. Default value is false."},"name":{"type":"string","description":"Name of the rule"},"substitutionMap":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RulesetSubstitutionValue"},"description":"The map of substitution variable names to their values used in a check expression. Variable names should start with a ':' (colon). Variable values can either be actual values or column names. To differentiate between the two, column names should be enclosed in backticks, for example, `\":col1\": \"`Column A`\".`"},"threshold":{"$ref":"#/types/aws-native:databrew:RulesetThreshold","description":"The threshold used with a non-aggregate check expression. Non-aggregate check expressions will be applied to each row in a specific column, and the threshold will be used to determine whether the validation succeeds."}},"type":"object","required":["checkExpression","name"]},"aws-native:databrew:RulesetSubstitutionValue":{"description":"A key-value pair to associate expression's substitution variable names with their values","properties":{"value":{"type":"string","description":"Value or column name"},"valueReference":{"type":"string","description":"Variable name"}},"type":"object","required":["value","valueReference"]},"aws-native:databrew:RulesetTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:databrew:RulesetThreshold":{"properties":{"type":{"$ref":"#/types/aws-native:databrew:RulesetThresholdType","description":"The type of a threshold. Used for comparison of an actual count of rows that satisfy the rule to the threshold value."},"unit":{"$ref":"#/types/aws-native:databrew:RulesetThresholdUnit","description":"Unit of threshold value. Can be either a COUNT or PERCENTAGE of the full sample size used for validation."},"value":{"type":"number","description":"The value of a threshold."}},"type":"object","required":["value"]},"aws-native:databrew:RulesetThresholdType":{"description":"Threshold type for a rule","type":"string","enum":[{"name":"GreaterThanOrEqual","value":"GREATER_THAN_OR_EQUAL"},{"name":"LessThanOrEqual","value":"LESS_THAN_OR_EQUAL"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"LessThan","value":"LESS_THAN"}]},"aws-native:databrew:RulesetThresholdUnit":{"description":"Threshold unit for a rule","type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"Percentage","value":"PERCENTAGE"}]},"aws-native:databrew:ScheduleTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:datapipeline:PipelineField":{"properties":{"key":{"type":"string","description":"Specifies the name of a field for a particular object. To view valid values for a particular field, see Pipeline Object Reference in the AWS Data Pipeline Developer Guide."},"refValue":{"type":"string","description":"A field value that you specify as an identifier of another object in the same pipeline definition."},"stringValue":{"type":"string","description":"A field value that you specify as a string. To view valid values for a particular field, see Pipeline Object Reference in the AWS Data Pipeline Developer Guide."}},"type":"object","required":["key"]},"aws-native:datapipeline:PipelineObject":{"properties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineField"},"description":"Key-value pairs that define the properties of the object."},"id":{"type":"string","description":"The ID of the object."},"name":{"type":"string","description":"The name of the object."}},"type":"object","required":["fields","id","name"]},"aws-native:datapipeline:PipelineParameterAttribute":{"properties":{"key":{"type":"string","description":"The field identifier."},"stringValue":{"type":"string","description":"The field value, expressed as a String."}},"type":"object","required":["key","stringValue"]},"aws-native:datapipeline:PipelineParameterObject":{"properties":{"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterAttribute"},"description":"The attributes of the parameter object."},"id":{"type":"string","description":"The ID of the parameter object."}},"type":"object","required":["attributes","id"]},"aws-native:datapipeline:PipelineParameterValue":{"properties":{"id":{"type":"string","description":"The ID of the parameter value."},"stringValue":{"type":"string","description":"The field value, expressed as a String."}},"type":"object","required":["id","stringValue"]},"aws-native:datapipeline:PipelineTag":{"properties":{"key":{"type":"string","description":"The key name of a tag."},"value":{"type":"string","description":"The value to associate with the key name."}},"type":"object","required":["key","value"]},"aws-native:datasync:AgentEndpointType":{"description":"The service endpoints that the agent will connect to.","type":"string","enum":[{"name":"Fips","value":"FIPS"},{"name":"Public","value":"PUBLIC"},{"name":"PrivateLink","value":"PRIVATE_LINK"}]},"aws-native:datasync:AgentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationAzureBlobAzureAccessTier":{"description":"Specifies an access tier for the objects you're transferring into your Azure Blob Storage container.","type":"string","enum":[{"name":"Hot","value":"HOT"},{"name":"Cool","value":"COOL"},{"name":"Archive","value":"ARCHIVE"}]},"aws-native:datasync:LocationAzureBlobAzureBlobAuthenticationType":{"description":"The specific authentication type that you want DataSync to use to access your Azure Blob Container.","type":"string","enum":[{"name":"Sas","value":"SAS"},{"name":"None","value":"NONE"}]},"aws-native:datasync:LocationAzureBlobAzureBlobSasConfiguration":{"description":"Specifies the shared access signature (SAS) that DataSync uses to access your Azure Blob Storage container.","properties":{"azureBlobSasToken":{"type":"string","description":"Specifies the shared access signature (SAS) token, which indicates the permissions DataSync needs to access your Azure Blob Storage container."}},"type":"object","required":["azureBlobSasToken"]},"aws-native:datasync:LocationAzureBlobAzureBlobType":{"description":"Specifies a blob type for the objects you're transferring into your Azure Blob Storage container.","type":"string","enum":[{"name":"Block","value":"BLOCK"}]},"aws-native:datasync:LocationAzureBlobCmkSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.","properties":{"kmsKeyArn":{"type":"string","description":"Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager."},"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync."}},"type":"object"},"aws-native:datasync:LocationAzureBlobCustomSecretConfig":{"description":"Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.","properties":{"secretAccessRoleArn":{"type":"string","description":"Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn."},"secretArn":{"type":"string","description":"Specifies the ARN for a customer created AWS Secrets Manager secret."}},"type":"object","required":["secretAccessRoleArn","secretArn"]},"aws-native:datasync:LocationAzureBlobManagedSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.","properties":{"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret."}},"type":"object","required":["secretArn"]},"aws-native:datasync:LocationAzureBlobTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationEfsEc2Config":{"description":"The subnet and security group that DataSync uses to access target EFS file system.","properties":{"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the security groups that are configured for the Amazon EC2 resource."},"subnetArn":{"type":"string","description":"The ARN of the subnet that DataSync uses to access the target EFS file system."}},"type":"object","required":["securityGroupArns","subnetArn"]},"aws-native:datasync:LocationEfsInTransitEncryption":{"description":"Protocol that is used for encrypting the traffic exchanged between the DataSync Agent and the EFS file system.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Tls12","value":"TLS1_2"}]},"aws-native:datasync:LocationEfsTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationFSxLustreTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationFSxOntapCmkSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.","properties":{"kmsKeyArn":{"type":"string","description":"Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager."},"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync."}},"type":"object"},"aws-native:datasync:LocationFSxOntapCustomSecretConfig":{"description":"Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.","properties":{"secretAccessRoleArn":{"type":"string","description":"Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn."},"secretArn":{"type":"string","description":"Specifies the ARN for a customer created AWS Secrets Manager secret."}},"type":"object","required":["secretAccessRoleArn","secretArn"]},"aws-native:datasync:LocationFSxOntapManagedSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.","properties":{"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret."}},"type":"object","required":["secretArn"]},"aws-native:datasync:LocationFSxOntapNfs":{"description":"NFS protocol configuration for FSx ONTAP file system.","properties":{"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapNfsMountOptions","description":"Specifies how DataSync can access a location using the NFS protocol."}},"type":"object","required":["mountOptions"]},"aws-native:datasync:LocationFSxOntapNfsMountOptions":{"description":"The NFS mount options that DataSync can use to mount your NFS share.","properties":{"version":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapNfsMountOptionsVersion","description":"The specific NFS version that you want DataSync to use to mount your NFS share."}},"type":"object"},"aws-native:datasync:LocationFSxOntapNfsMountOptionsVersion":{"description":"The specific NFS version that you want DataSync to use to mount your NFS share.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Nfs3","value":"NFS3"},{"name":"Nfs40","value":"NFS4_0"},{"name":"Nfs41","value":"NFS4_1"}]},"aws-native:datasync:LocationFSxOntapProtocol":{"description":"Configuration settings for NFS or SMB protocol.","properties":{"nfs":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapNfs","description":"Specifies the Network File System (NFS) protocol configuration that DataSync uses to access your FSx for ONTAP file system's storage virtual machine (SVM)."},"smb":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapSmb","description":"Specifies the Server Message Block (SMB) protocol configuration that DataSync uses to access your FSx for ONTAP file system's SVM."}},"type":"object"},"aws-native:datasync:LocationFSxOntapSmb":{"description":"SMB protocol configuration for FSx ONTAP file system.","properties":{"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapCustomSecretConfig"},"domain":{"type":"string","description":"The name of the Windows domain that the SMB server belongs to."},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapManagedSecretConfig"},"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapSmbMountOptions","description":"Specifies how DataSync can access a location using the SMB protocol."},"password":{"type":"string","description":"The password of the user who can mount the share and has the permissions to access files and folders in the SMB share."},"user":{"type":"string","description":"The user who can mount the share, has the permissions to access files and folders in the SMB share."}},"type":"object","required":["mountOptions","user"]},"aws-native:datasync:LocationFSxOntapSmbMountOptions":{"description":"The mount options used by DataSync to access the SMB server.","properties":{"version":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapSmbMountOptionsVersion","description":"The specific SMB version that you want DataSync to use to mount your SMB share."}},"type":"object"},"aws-native:datasync:LocationFSxOntapSmbMountOptionsVersion":{"description":"The specific SMB version that you want DataSync to use to mount your SMB share.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Smb2","value":"SMB2"},{"name":"Smb3","value":"SMB3"}]},"aws-native:datasync:LocationFSxOntapTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationFSxOpenZfsMountOptions":{"description":"The NFS mount options that DataSync can use to mount your NFS share.","properties":{"version":{"$ref":"#/types/aws-native:datasync:LocationFSxOpenZfsMountOptionsVersion","description":"The specific NFS version that you want DataSync to use to mount your NFS share."}},"type":"object"},"aws-native:datasync:LocationFSxOpenZfsMountOptionsVersion":{"description":"The specific NFS version that you want DataSync to use to mount your NFS share.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Nfs3","value":"NFS3"},{"name":"Nfs40","value":"NFS4_0"},{"name":"Nfs41","value":"NFS4_1"}]},"aws-native:datasync:LocationFSxOpenZfsNfs":{"description":"FSx OpenZFS file system NFS protocol information","properties":{"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationFSxOpenZfsMountOptions","description":"Represents the mount options that are available for DataSync to access an NFS location."}},"type":"object","required":["mountOptions"]},"aws-native:datasync:LocationFSxOpenZfsProtocol":{"description":"Configuration settings for an NFS or SMB protocol, currently only support NFS","properties":{"nfs":{"$ref":"#/types/aws-native:datasync:LocationFSxOpenZfsNfs","description":"Represents the Network File System (NFS) protocol that DataSync uses to access your FSx for OpenZFS file system."}},"type":"object"},"aws-native:datasync:LocationFSxOpenZfsTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationFSxWindowsCmkSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.","properties":{"kmsKeyArn":{"type":"string","description":"Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager."},"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync."}},"type":"object"},"aws-native:datasync:LocationFSxWindowsCustomSecretConfig":{"description":"Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.","properties":{"secretAccessRoleArn":{"type":"string","description":"Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn."},"secretArn":{"type":"string","description":"Specifies the ARN for a customer created AWS Secrets Manager secret."}},"type":"object","required":["secretAccessRoleArn","secretArn"]},"aws-native:datasync:LocationFSxWindowsManagedSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.","properties":{"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret."}},"type":"object","required":["secretArn"]},"aws-native:datasync:LocationFSxWindowsTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationHdfsAuthenticationType":{"description":"The authentication mode used to determine identity of user.","type":"string","enum":[{"name":"Simple","value":"SIMPLE"},{"name":"Kerberos","value":"KERBEROS"}]},"aws-native:datasync:LocationHdfsCmkSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.","properties":{"kmsKeyArn":{"type":"string","description":"Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager."},"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync."}},"type":"object"},"aws-native:datasync:LocationHdfsCustomSecretConfig":{"description":"Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.","properties":{"secretAccessRoleArn":{"type":"string","description":"Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn."},"secretArn":{"type":"string","description":"Specifies the ARN for a customer created AWS Secrets Manager secret."}},"type":"object","required":["secretAccessRoleArn","secretArn"]},"aws-native:datasync:LocationHdfsManagedSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.","properties":{"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret."}},"type":"object","required":["secretArn"]},"aws-native:datasync:LocationHdfsNameNode":{"description":"HDFS Name Node IP and port information.","properties":{"hostname":{"type":"string","description":"The DNS name or IP address of the Name Node in the customer's on premises HDFS cluster."},"port":{"type":"integer","description":"The port on which the Name Node is listening on for client requests."}},"type":"object","required":["hostname","port"]},"aws-native:datasync:LocationHdfsQopConfiguration":{"description":"Configuration information for RPC Protection and Data Transfer Protection. These parameters can be set to AUTHENTICATION, INTEGRITY, or PRIVACY. The default value is PRIVACY.","properties":{"dataTransferProtection":{"$ref":"#/types/aws-native:datasync:LocationHdfsQopConfigurationDataTransferProtection","description":"Configuration for Data Transfer Protection."},"rpcProtection":{"$ref":"#/types/aws-native:datasync:LocationHdfsQopConfigurationRpcProtection","description":"Configuration for RPC Protection."}},"type":"object"},"aws-native:datasync:LocationHdfsQopConfigurationDataTransferProtection":{"description":"Configuration for Data Transfer Protection.","type":"string","enum":[{"name":"Authentication","value":"AUTHENTICATION"},{"name":"Integrity","value":"INTEGRITY"},{"name":"Privacy","value":"PRIVACY"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datasync:LocationHdfsQopConfigurationRpcProtection":{"description":"Configuration for RPC Protection.","type":"string","enum":[{"name":"Authentication","value":"AUTHENTICATION"},{"name":"Integrity","value":"INTEGRITY"},{"name":"Privacy","value":"PRIVACY"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datasync:LocationHdfsTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationNfsMountOptions":{"description":"The NFS mount options that DataSync can use to mount your NFS share.","properties":{"version":{"$ref":"#/types/aws-native:datasync:LocationNfsMountOptionsVersion","description":"The specific NFS version that you want DataSync to use to mount your NFS share."}},"type":"object"},"aws-native:datasync:LocationNfsMountOptionsVersion":{"description":"The specific NFS version that you want DataSync to use to mount your NFS share.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Nfs3","value":"NFS3"},{"name":"Nfs40","value":"NFS4_0"},{"name":"Nfs41","value":"NFS4_1"}]},"aws-native:datasync:LocationNfsOnPremConfig":{"description":"Contains a list of Amazon Resource Names (ARNs) of agents that are used to connect an NFS server.","properties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"ARN(s) of the agent(s) to use for an NFS location."}},"type":"object","required":["agentArns"]},"aws-native:datasync:LocationNfsTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationObjectStorageCmkSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.","properties":{"kmsKeyArn":{"type":"string","description":"Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager."},"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync."}},"type":"object"},"aws-native:datasync:LocationObjectStorageCustomSecretConfig":{"description":"Specifies configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.","properties":{"secretAccessRoleArn":{"type":"string","description":"Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn."},"secretArn":{"type":"string","description":"Specifies the ARN for a customer created AWS Secrets Manager secret."}},"type":"object","required":["secretAccessRoleArn","secretArn"]},"aws-native:datasync:LocationObjectStorageManagedSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.","properties":{"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret."}},"type":"object","required":["secretArn"]},"aws-native:datasync:LocationObjectStorageServerProtocol":{"description":"The protocol that the object storage server uses to communicate.","type":"string","enum":[{"name":"Https","value":"HTTPS"},{"name":"Http","value":"HTTP"}]},"aws-native:datasync:LocationObjectStorageTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationS3S3StorageClass":{"description":"The Amazon S3 storage class you want to store your files in when this location is used as a task destination.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"StandardIa","value":"STANDARD_IA"},{"name":"OnezoneIa","value":"ONEZONE_IA"},{"name":"IntelligentTiering","value":"INTELLIGENT_TIERING"},{"name":"Glacier","value":"GLACIER"},{"name":"GlacierInstantRetrieval","value":"GLACIER_INSTANT_RETRIEVAL"},{"name":"DeepArchive","value":"DEEP_ARCHIVE"}]},"aws-native:datasync:LocationS3Tag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:LocationS3s3Config":{"description":"The Amazon Resource Name (ARN) of the AWS IAM role that is used to access an Amazon S3 bucket.","properties":{"bucketAccessRoleArn":{"type":"string","description":"The ARN of the IAM role of the Amazon S3 bucket."}},"type":"object","required":["bucketAccessRoleArn"]},"aws-native:datasync:LocationSmbAuthenticationType":{"description":"The authentication mode used to determine identity of user.","type":"string","enum":[{"name":"Ntlm","value":"NTLM"},{"name":"Kerberos","value":"KERBEROS"}]},"aws-native:datasync:LocationSmbCmkSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.","properties":{"kmsKeyArn":{"type":"string","description":"Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager."},"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync."}},"type":"object"},"aws-native:datasync:LocationSmbCustomSecretConfig":{"description":"Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.","properties":{"secretAccessRoleArn":{"type":"string","description":"Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn."},"secretArn":{"type":"string","description":"Specifies the ARN for a customer created AWS Secrets Manager secret."}},"type":"object","required":["secretAccessRoleArn","secretArn"]},"aws-native:datasync:LocationSmbManagedSecretConfig":{"description":"Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.","properties":{"secretArn":{"type":"string","description":"Specifies the ARN for an AWS Secrets Manager secret."}},"type":"object","required":["secretArn"]},"aws-native:datasync:LocationSmbMountOptions":{"description":"The mount options used by DataSync to access the SMB server.","properties":{"version":{"$ref":"#/types/aws-native:datasync:LocationSmbMountOptionsVersion","description":"The specific SMB version that you want DataSync to use to mount your SMB share."}},"type":"object"},"aws-native:datasync:LocationSmbMountOptionsVersion":{"description":"The specific SMB version that you want DataSync to use to mount your SMB share.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Smb1","value":"SMB1"},{"name":"Smb20","value":"SMB2_0"},{"name":"Smb2","value":"SMB2"},{"name":"Smb3","value":"SMB3"}]},"aws-native:datasync:LocationSmbTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:StorageSystemConnectivityStatus":{"description":"Indicates whether the DataSync agent can access the on-premises storage system.","type":"string","enum":[{"name":"Pass","value":"PASS"},{"name":"Fail","value":"FAIL"},{"name":"Unknown","value":"UNKNOWN"}]},"aws-native:datasync:StorageSystemServerConfiguration":{"description":"The server name and network port required to connect with the management interface of the on-premises storage system.","properties":{"serverHostname":{"type":"string","description":"The domain name or IP address of the storage system's management interface."},"serverPort":{"type":"integer","description":"The network port needed to access the system's management interface"}},"type":"object","required":["serverHostname"]},"aws-native:datasync:StorageSystemServerCredentials":{"description":"The username and password for accessing your on-premises storage system's management interface.","properties":{"password":{"type":"string","description":"The password for your storage system's management interface"},"username":{"type":"string","description":"The username for your storage system's management interface."}},"type":"object","required":["password","username"]},"aws-native:datasync:StorageSystemSystemType":{"description":"The type of on-premises storage system that DataSync Discovery will analyze.","type":"string","enum":[{"name":"NetAppOntap","value":"NetAppONTAP"}]},"aws-native:datasync:StorageSystemTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datasync:TaskFilterRule":{"description":"Specifies which files folders and objects to include or exclude when transferring files from source to destination.","properties":{"filterType":{"$ref":"#/types/aws-native:datasync:TaskFilterRuleFilterType","description":"The type of filter rule to apply. AWS DataSync only supports the SIMPLE_PATTERN rule type."},"value":{"type":"string","description":"A single filter string that consists of the patterns to include or exclude. The patterns are delimited by \"|\"."}},"type":"object"},"aws-native:datasync:TaskFilterRuleFilterType":{"description":"The type of filter rule to apply. AWS DataSync only supports the SIMPLE_PATTERN rule type.","type":"string","enum":[{"name":"SimplePattern","value":"SIMPLE_PATTERN"}]},"aws-native:datasync:TaskManifestConfig":{"description":"Configures a manifest, which is a list of files or objects that you want DataSync to transfer.","properties":{"action":{"$ref":"#/types/aws-native:datasync:TaskManifestConfigAction","description":"Specifies what DataSync uses the manifest for."},"format":{"$ref":"#/types/aws-native:datasync:TaskManifestConfigFormat","description":"Specifies the file format of your manifest."},"source":{"$ref":"#/types/aws-native:datasync:TaskManifestConfigSourceProperties","description":"Specifies the manifest that you want DataSync to use and where it's hosted."}},"type":"object","required":["source"]},"aws-native:datasync:TaskManifestConfigAction":{"description":"Specifies what DataSync uses the manifest for.","type":"string","enum":[{"name":"Transfer","value":"TRANSFER"}]},"aws-native:datasync:TaskManifestConfigFormat":{"description":"Specifies the file format of your manifest.","type":"string","enum":[{"name":"Csv","value":"CSV"}]},"aws-native:datasync:TaskManifestConfigSourceProperties":{"description":"Specifies the manifest that you want DataSync to use and where it's hosted.","properties":{"s3":{"$ref":"#/types/aws-native:datasync:TaskManifestConfigSourceS3"}},"type":"object"},"aws-native:datasync:TaskManifestConfigSourceS3":{"description":"Specifies the S3 bucket where you're hosting the manifest that you want AWS DataSync to use.","properties":{"bucketAccessRoleArn":{"type":"string","description":"Specifies the AWS Identity and Access Management (IAM) role that allows DataSync to access your manifest."},"manifestObjectPath":{"type":"string","description":"Specifies the Amazon S3 object key of your manifest."},"manifestObjectVersionId":{"type":"string","description":"Specifies the object version ID of the manifest that you want DataSync to use."},"s3BucketArn":{"type":"string","description":"Specifies the Amazon Resource Name (ARN) of the S3 bucket where you're hosting your manifest."}},"type":"object"},"aws-native:datasync:TaskMode":{"description":"Specifies the task mode for the task.","type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Enhanced","value":"ENHANCED"}]},"aws-native:datasync:TaskOptions":{"description":"Represents the options that are available to control the behavior of a StartTaskExecution operation.","properties":{"atime":{"$ref":"#/types/aws-native:datasync:TaskOptionsAtime","description":"A file metadata value that shows the last time a file was accessed (that is, when the file was read or written to)."},"bytesPerSecond":{"type":"integer","description":"A value that limits the bandwidth used by AWS DataSync."},"gid":{"$ref":"#/types/aws-native:datasync:TaskOptionsGid","description":"The group ID (GID) of the file's owners."},"logLevel":{"$ref":"#/types/aws-native:datasync:TaskOptionsLogLevel","description":"A value that determines the types of logs that DataSync publishes to a log stream in the Amazon CloudWatch log group that you provide."},"mtime":{"$ref":"#/types/aws-native:datasync:TaskOptionsMtime","description":"A value that indicates the last time that a file was modified (that is, a file was written to) before the PREPARING phase."},"objectTags":{"$ref":"#/types/aws-native:datasync:TaskOptionsObjectTags","description":"A value that determines whether object tags should be read from the source object store and written to the destination object store."},"overwriteMode":{"$ref":"#/types/aws-native:datasync:TaskOptionsOverwriteMode","description":"A value that determines whether files at the destination should be overwritten or preserved when copying files."},"posixPermissions":{"$ref":"#/types/aws-native:datasync:TaskOptionsPosixPermissions","description":"A value that determines which users or groups can access a file for a specific purpose such as reading, writing, or execution of the file."},"preserveDeletedFiles":{"$ref":"#/types/aws-native:datasync:TaskOptionsPreserveDeletedFiles","description":"A value that specifies whether files in the destination that don't exist in the source file system should be preserved."},"preserveDevices":{"$ref":"#/types/aws-native:datasync:TaskOptionsPreserveDevices","description":"A value that determines whether AWS DataSync should preserve the metadata of block and character devices in the source file system, and recreate the files with that device name and metadata on the destination."},"securityDescriptorCopyFlags":{"$ref":"#/types/aws-native:datasync:TaskOptionsSecurityDescriptorCopyFlags","description":"A value that determines which components of the SMB security descriptor are copied during transfer."},"taskQueueing":{"$ref":"#/types/aws-native:datasync:TaskOptionsTaskQueueing","description":"A value that determines whether tasks should be queued before executing the tasks."},"transferMode":{"$ref":"#/types/aws-native:datasync:TaskOptionsTransferMode","description":"A value that determines whether DataSync transfers only the data and metadata that differ between the source and the destination location, or whether DataSync transfers all the content from the source, without comparing to the destination location."},"uid":{"$ref":"#/types/aws-native:datasync:TaskOptionsUid","description":"The user ID (UID) of the file's owner."},"verifyMode":{"$ref":"#/types/aws-native:datasync:TaskOptionsVerifyMode","description":"A value that determines whether a data integrity verification should be performed at the end of a task execution after all data and metadata have been transferred."}},"type":"object"},"aws-native:datasync:TaskOptionsAtime":{"description":"A file metadata value that shows the last time a file was accessed (that is, when the file was read or written to).","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"BestEffort","value":"BEST_EFFORT"}]},"aws-native:datasync:TaskOptionsGid":{"description":"The group ID (GID) of the file's owners.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"IntValue","value":"INT_VALUE"},{"name":"Name","value":"NAME"},{"name":"Both","value":"BOTH"}]},"aws-native:datasync:TaskOptionsLogLevel":{"description":"A value that determines the types of logs that DataSync publishes to a log stream in the Amazon CloudWatch log group that you provide.","type":"string","enum":[{"name":"Off","value":"OFF"},{"name":"Basic","value":"BASIC"},{"name":"Transfer","value":"TRANSFER"}]},"aws-native:datasync:TaskOptionsMtime":{"description":"A value that indicates the last time that a file was modified (that is, a file was written to) before the PREPARING phase.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Preserve","value":"PRESERVE"}]},"aws-native:datasync:TaskOptionsObjectTags":{"description":"A value that determines whether object tags should be read from the source object store and written to the destination object store.","type":"string","enum":[{"name":"Preserve","value":"PRESERVE"},{"name":"None","value":"NONE"}]},"aws-native:datasync:TaskOptionsOverwriteMode":{"description":"A value that determines whether files at the destination should be overwritten or preserved when copying files.","type":"string","enum":[{"name":"Always","value":"ALWAYS"},{"name":"Never","value":"NEVER"}]},"aws-native:datasync:TaskOptionsPosixPermissions":{"description":"A value that determines which users or groups can access a file for a specific purpose such as reading, writing, or execution of the file.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Preserve","value":"PRESERVE"}]},"aws-native:datasync:TaskOptionsPreserveDeletedFiles":{"description":"A value that specifies whether files in the destination that don't exist in the source file system should be preserved.","type":"string","enum":[{"name":"Preserve","value":"PRESERVE"},{"name":"Remove","value":"REMOVE"}]},"aws-native:datasync:TaskOptionsPreserveDevices":{"description":"A value that determines whether AWS DataSync should preserve the metadata of block and character devices in the source file system, and recreate the files with that device name and metadata on the destination.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Preserve","value":"PRESERVE"}]},"aws-native:datasync:TaskOptionsSecurityDescriptorCopyFlags":{"description":"A value that determines which components of the SMB security descriptor are copied during transfer.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"OwnerDacl","value":"OWNER_DACL"},{"name":"OwnerDaclSacl","value":"OWNER_DACL_SACL"}]},"aws-native:datasync:TaskOptionsTaskQueueing":{"description":"A value that determines whether tasks should be queued before executing the tasks.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datasync:TaskOptionsTransferMode":{"description":"A value that determines whether DataSync transfers only the data and metadata that differ between the source and the destination location, or whether DataSync transfers all the content from the source, without comparing to the destination location.","type":"string","enum":[{"name":"Changed","value":"CHANGED"},{"name":"All","value":"ALL"}]},"aws-native:datasync:TaskOptionsUid":{"description":"The user ID (UID) of the file's owner.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"IntValue","value":"INT_VALUE"},{"name":"Name","value":"NAME"},{"name":"Both","value":"BOTH"}]},"aws-native:datasync:TaskOptionsVerifyMode":{"description":"A value that determines whether a data integrity verification should be performed at the end of a task execution after all data and metadata have been transferred.","type":"string","enum":[{"name":"PointInTimeConsistent","value":"POINT_IN_TIME_CONSISTENT"},{"name":"OnlyFilesTransferred","value":"ONLY_FILES_TRANSFERRED"},{"name":"None","value":"NONE"}]},"aws-native:datasync:TaskReportConfig":{"description":"Specifies how you want to configure a task report, which provides detailed information about for your Datasync transfer.","properties":{"destination":{"$ref":"#/types/aws-native:datasync:TaskReportConfigDestinationProperties","description":"Specifies where DataSync uploads your task report."},"objectVersionIds":{"$ref":"#/types/aws-native:datasync:TaskReportConfigObjectVersionIds","description":"Specifies whether your task report includes the new version of each object transferred into an S3 bucket, this only applies if you enable versioning on your bucket."},"outputType":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOutputType","description":"Specifies the type of task report that you want."},"overrides":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesProperties","description":"Customizes the reporting level for aspects of your task report. For example, your report might generally only include errors, but you could specify that you want a list of successes and errors just for the files that Datasync attempted to delete in your destination location."},"reportLevel":{"$ref":"#/types/aws-native:datasync:TaskReportConfigReportLevel","description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't."}},"type":"object","required":["destination","outputType"]},"aws-native:datasync:TaskReportConfigDestinationProperties":{"description":"Specifies where DataSync uploads your task report.","properties":{"s3":{"$ref":"#/types/aws-native:datasync:TaskReportConfigDestinationS3"}},"type":"object"},"aws-native:datasync:TaskReportConfigDestinationS3":{"description":"Specifies the Amazon S3 bucket where DataSync uploads your task report.","properties":{"bucketAccessRoleArn":{"type":"string","description":"Specifies the Amazon Resource Name (ARN) of the IAM policy that allows Datasync to upload a task report to your S3 bucket."},"s3BucketArn":{"type":"string","description":"Specifies the ARN of the S3 bucket where Datasync uploads your report."},"subdirectory":{"type":"string","description":"Specifies a bucket prefix for your report."}},"type":"object"},"aws-native:datasync:TaskReportConfigObjectVersionIds":{"description":"Specifies whether your task report includes the new version of each object transferred into an S3 bucket, this only applies if you enable versioning on your bucket.","type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"None","value":"NONE"}]},"aws-native:datasync:TaskReportConfigOutputType":{"description":"Specifies the type of task report that you want.","type":"string","enum":[{"name":"SummaryOnly","value":"SUMMARY_ONLY"},{"name":"Standard","value":"STANDARD"}]},"aws-native:datasync:TaskReportConfigOverridesProperties":{"description":"Customizes the reporting level for aspects of your task report. For example, your report might generally only include errors, but you could specify that you want a list of successes and errors just for the files that Datasync attempted to delete in your destination location.","properties":{"deleted":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesDeletedProperties","description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to delete in your destination location. This only applies if you configure your task to delete data in the destination that isn't in the source."},"skipped":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesSkippedProperties","description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to skip during your transfer."},"transferred":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesTransferredProperties","description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to transfer."},"verified":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesVerifiedProperties","description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to verify at the end of your transfer. This only applies if you configure your task to verify data during and after the transfer (which Datasync does by default)"}},"type":"object"},"aws-native:datasync:TaskReportConfigOverridesPropertiesDeletedProperties":{"description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to delete in your destination location. This only applies if you configure your task to delete data in the destination that isn't in the source.","properties":{"reportLevel":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesDeletedPropertiesReportLevel","description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't."}},"type":"object"},"aws-native:datasync:TaskReportConfigOverridesPropertiesDeletedPropertiesReportLevel":{"description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't.","type":"string","enum":[{"name":"ErrorsOnly","value":"ERRORS_ONLY"},{"name":"SuccessesAndErrors","value":"SUCCESSES_AND_ERRORS"}]},"aws-native:datasync:TaskReportConfigOverridesPropertiesSkippedProperties":{"description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to skip during your transfer.","properties":{"reportLevel":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesSkippedPropertiesReportLevel","description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't."}},"type":"object"},"aws-native:datasync:TaskReportConfigOverridesPropertiesSkippedPropertiesReportLevel":{"description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't.","type":"string","enum":[{"name":"ErrorsOnly","value":"ERRORS_ONLY"},{"name":"SuccessesAndErrors","value":"SUCCESSES_AND_ERRORS"}]},"aws-native:datasync:TaskReportConfigOverridesPropertiesTransferredProperties":{"description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to transfer.","properties":{"reportLevel":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesTransferredPropertiesReportLevel","description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't."}},"type":"object"},"aws-native:datasync:TaskReportConfigOverridesPropertiesTransferredPropertiesReportLevel":{"description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't.","type":"string","enum":[{"name":"ErrorsOnly","value":"ERRORS_ONLY"},{"name":"SuccessesAndErrors","value":"SUCCESSES_AND_ERRORS"}]},"aws-native:datasync:TaskReportConfigOverridesPropertiesVerifiedProperties":{"description":"Specifies the level of reporting for the files, objects, and directories that Datasync attempted to verify at the end of your transfer. This only applies if you configure your task to verify data during and after the transfer (which Datasync does by default)","properties":{"reportLevel":{"$ref":"#/types/aws-native:datasync:TaskReportConfigOverridesPropertiesVerifiedPropertiesReportLevel","description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't."}},"type":"object"},"aws-native:datasync:TaskReportConfigOverridesPropertiesVerifiedPropertiesReportLevel":{"description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't.","type":"string","enum":[{"name":"ErrorsOnly","value":"ERRORS_ONLY"},{"name":"SuccessesAndErrors","value":"SUCCESSES_AND_ERRORS"}]},"aws-native:datasync:TaskReportConfigReportLevel":{"description":"Specifies whether you want your task report to include only what went wrong with your transfer or a list of what succeeded and didn't.","type":"string","enum":[{"name":"ErrorsOnly","value":"ERRORS_ONLY"},{"name":"SuccessesAndErrors","value":"SUCCESSES_AND_ERRORS"}]},"aws-native:datasync:TaskSchedule":{"description":"Specifies the schedule you want your task to use for repeated executions.","properties":{"scheduleExpression":{"type":"string","description":"A cron expression that specifies when AWS DataSync initiates a scheduled transfer from a source to a destination location"},"status":{"$ref":"#/types/aws-native:datasync:TaskScheduleStatus","description":"Specifies status of a schedule."}},"type":"object"},"aws-native:datasync:TaskScheduleStatus":{"description":"Specifies status of a schedule.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datasync:TaskStatus":{"description":"The status of the task that was described.","type":"string","enum":[{"name":"Available","value":"AVAILABLE"},{"name":"Creating","value":"CREATING"},{"name":"Queued","value":"QUEUED"},{"name":"Running","value":"RUNNING"},{"name":"Unavailable","value":"UNAVAILABLE"}]},"aws-native:datasync:TaskTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for an AWS resource tag."},"value":{"type":"string","description":"The value for an AWS resource tag."}},"type":"object","required":["key","value"]},"aws-native:datazone:ConnectionAmazonQPropertiesInput":{"description":"Amazon Q properties of the connection.","properties":{"authMode":{"type":"string","description":"The authentication mode of the connection's AmazonQ properties"},"isEnabled":{"type":"boolean","description":"Specifies whether Amazon Q is enabled for the connection"},"profileArn":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionAthenaPropertiesInput":{"description":"Athena Properties Input","properties":{"workgroupName":{"type":"string"}},"type":"object","required":["workgroupName"]},"aws-native:datazone:ConnectionAuthenticationConfigurationInput":{"description":"Authentication Configuration Input","properties":{"authenticationType":{"$ref":"#/types/aws-native:datazone:ConnectionAuthenticationType"},"basicAuthenticationCredentials":{"$ref":"#/types/aws-native:datazone:ConnectionBasicAuthenticationCredentials"},"customAuthenticationCredentials":{"type":"object","additionalProperties":{"type":"string"}},"kmsKeyArn":{"type":"string"},"oAuth2Properties":{"$ref":"#/types/aws-native:datazone:ConnectionOAuth2Properties"},"secretArn":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionAuthenticationType":{"description":"Authentication Type","type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Oauth2","value":"OAUTH2"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:datazone:ConnectionAuthorizationCodeProperties":{"description":"Authorization Code Properties","properties":{"authorizationCode":{"type":"string"},"redirectUri":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionAwsLocation":{"description":"AWS Location of project","properties":{"accessRole":{"type":"string","description":"The access role of a connection."},"awsAccountId":{"type":"string","description":"The account ID of a connection."},"awsRegion":{"type":"string","description":"The Region of a connection."},"iamConnectionId":{"type":"string","description":"The IAM connection ID of a connection."}},"type":"object"},"aws-native:datazone:ConnectionBasicAuthenticationCredentials":{"description":"Basic Authentication Credentials","properties":{"password":{"type":"string"},"userName":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionGlueConnectionInput":{"description":"Glue Connection Input","properties":{"athenaProperties":{"type":"object","additionalProperties":{"type":"string"}},"authenticationConfiguration":{"$ref":"#/types/aws-native:datazone:ConnectionAuthenticationConfigurationInput"},"connectionProperties":{"type":"object","additionalProperties":{"type":"string"}},"connectionType":{"type":"string"},"description":{"type":"string"},"matchCriteria":{"type":"string"},"name":{"type":"string"},"physicalConnectionRequirements":{"$ref":"#/types/aws-native:datazone:ConnectionPhysicalConnectionRequirements"},"pythonProperties":{"type":"object","additionalProperties":{"type":"string"}},"sparkProperties":{"type":"object","additionalProperties":{"type":"string"}},"validateCredentials":{"type":"boolean"},"validateForComputeEnvironments":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:datazone:ConnectionGlueOAuth2Credentials":{"description":"Glue OAuth2 Credentials","properties":{"accessToken":{"type":"string"},"jwtToken":{"type":"string"},"refreshToken":{"type":"string"},"userManagedClientApplicationClientSecret":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionGluePropertiesInput":{"description":"Glue Properties Input","properties":{"glueConnectionInput":{"$ref":"#/types/aws-native:datazone:ConnectionGlueConnectionInput"}},"type":"object"},"aws-native:datazone:ConnectionHyperPodPropertiesInput":{"description":"HyperPod Properties Input","properties":{"clusterName":{"type":"string"}},"type":"object","required":["clusterName"]},"aws-native:datazone:ConnectionIamPropertiesInput":{"description":"IAM Properties Input","properties":{"glueLineageSyncEnabled":{"type":"boolean"}},"type":"object"},"aws-native:datazone:ConnectionLineageSyncSchedule":{"description":"Lineage Sync Schedule","properties":{"schedule":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionMlflowPropertiesInput":{"description":"MLflow Properties Input","properties":{"trackingServerArn":{"type":"string","description":"The ARN of the MLflow tracking server"}},"type":"object"},"aws-native:datazone:ConnectionOAuth2ClientApplication":{"description":"OAuth2 Client Application","properties":{"awsManagedClientApplicationReference":{"type":"string"},"userManagedClientApplicationClientId":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionOAuth2GrantType":{"description":"OAuth2 Grant Type","type":"string","enum":[{"name":"AuthorizationCode","value":"AUTHORIZATION_CODE"},{"name":"ClientCredentials","value":"CLIENT_CREDENTIALS"},{"name":"JwtBearer","value":"JWT_BEARER"}]},"aws-native:datazone:ConnectionOAuth2Properties":{"description":"OAuth2 Properties","properties":{"authorizationCodeProperties":{"$ref":"#/types/aws-native:datazone:ConnectionAuthorizationCodeProperties"},"oAuth2ClientApplication":{"$ref":"#/types/aws-native:datazone:ConnectionOAuth2ClientApplication"},"oAuth2Credentials":{"$ref":"#/types/aws-native:datazone:ConnectionGlueOAuth2Credentials"},"oAuth2GrantType":{"$ref":"#/types/aws-native:datazone:ConnectionOAuth2GrantType"},"tokenUrl":{"type":"string"},"tokenUrlParametersMap":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object"},"aws-native:datazone:ConnectionPhysicalConnectionRequirements":{"description":"Physical Connection Requirements","properties":{"availabilityZone":{"type":"string"},"securityGroupIdList":{"type":"array","items":{"type":"string"}},"subnetId":{"type":"string"},"subnetIdList":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:datazone:ConnectionPropertiesInput0Properties":{"properties":{"athenaProperties":{"$ref":"#/types/aws-native:datazone:ConnectionAthenaPropertiesInput"}},"type":"object","required":["athenaProperties"]},"aws-native:datazone:ConnectionPropertiesInput1Properties":{"properties":{"glueProperties":{"$ref":"#/types/aws-native:datazone:ConnectionGluePropertiesInput"}},"type":"object","required":["glueProperties"]},"aws-native:datazone:ConnectionPropertiesInput2Properties":{"properties":{"hyperPodProperties":{"$ref":"#/types/aws-native:datazone:ConnectionHyperPodPropertiesInput"}},"type":"object","required":["hyperPodProperties"]},"aws-native:datazone:ConnectionPropertiesInput3Properties":{"properties":{"iamProperties":{"$ref":"#/types/aws-native:datazone:ConnectionIamPropertiesInput"}},"type":"object","required":["iamProperties"]},"aws-native:datazone:ConnectionPropertiesInput4Properties":{"properties":{"redshiftProperties":{"$ref":"#/types/aws-native:datazone:ConnectionRedshiftPropertiesInput"}},"type":"object","required":["redshiftProperties"]},"aws-native:datazone:ConnectionPropertiesInput5Properties":{"properties":{"sparkEmrProperties":{"$ref":"#/types/aws-native:datazone:ConnectionSparkEmrPropertiesInput"}},"type":"object","required":["sparkEmrProperties"]},"aws-native:datazone:ConnectionPropertiesInput6Properties":{"properties":{"amazonQProperties":{"$ref":"#/types/aws-native:datazone:ConnectionAmazonQPropertiesInput"}},"type":"object","required":["amazonQProperties"]},"aws-native:datazone:ConnectionPropertiesInput7Properties":{"properties":{"sparkGlueProperties":{"$ref":"#/types/aws-native:datazone:ConnectionSparkGluePropertiesInput"}},"type":"object","required":["sparkGlueProperties"]},"aws-native:datazone:ConnectionPropertiesInput8Properties":{"properties":{"s3Properties":{"$ref":"#/types/aws-native:datazone:ConnectionS3PropertiesInput"}},"type":"object","required":["s3Properties"]},"aws-native:datazone:ConnectionPropertiesInput9Properties":{"properties":{"mlflowProperties":{"$ref":"#/types/aws-native:datazone:ConnectionMlflowPropertiesInput"}},"type":"object","required":["mlflowProperties"]},"aws-native:datazone:ConnectionRedshiftCredentials0Properties":{"properties":{"secretArn":{"type":"string"}},"type":"object","required":["secretArn"]},"aws-native:datazone:ConnectionRedshiftCredentials1Properties":{"properties":{"usernamePassword":{"$ref":"#/types/aws-native:datazone:ConnectionUsernamePassword"}},"type":"object","required":["usernamePassword"]},"aws-native:datazone:ConnectionRedshiftLineageSyncConfigurationInput":{"description":"Redshift Lineage Sync Configuration Input","properties":{"enabled":{"type":"boolean"},"schedule":{"$ref":"#/types/aws-native:datazone:ConnectionLineageSyncSchedule"}},"type":"object"},"aws-native:datazone:ConnectionRedshiftPropertiesInput":{"description":"Redshift Properties Input","properties":{"credentials":{"oneOf":[{"$ref":"#/types/aws-native:datazone:ConnectionRedshiftCredentials0Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionRedshiftCredentials1Properties"}]},"databaseName":{"type":"string"},"host":{"type":"string"},"lineageSync":{"$ref":"#/types/aws-native:datazone:ConnectionRedshiftLineageSyncConfigurationInput"},"port":{"type":"number"},"storage":{"oneOf":[{"$ref":"#/types/aws-native:datazone:ConnectionRedshiftStorageProperties0Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionRedshiftStorageProperties1Properties"}]}},"type":"object"},"aws-native:datazone:ConnectionRedshiftStorageProperties0Properties":{"properties":{"clusterName":{"type":"string"}},"type":"object","required":["clusterName"]},"aws-native:datazone:ConnectionRedshiftStorageProperties1Properties":{"properties":{"workgroupName":{"type":"string"}},"type":"object","required":["workgroupName"]},"aws-native:datazone:ConnectionS3PropertiesInput":{"description":"S3 Properties Input","properties":{"s3AccessGrantLocationId":{"type":"string","description":"The Amazon S3 Access Grant location ID that's part of the Amazon S3 properties of a connection."},"s3Uri":{"type":"string","description":"The Amazon S3 URI that's part of the Amazon S3 properties of a connection."}},"type":"object","required":["s3Uri"]},"aws-native:datazone:ConnectionScope":{"description":"The scope of the connection.","type":"string","enum":[{"name":"Domain","value":"DOMAIN"},{"name":"Project","value":"PROJECT"}]},"aws-native:datazone:ConnectionSparkEmrPropertiesInput":{"description":"Spark EMR Properties Input.","properties":{"computeArn":{"type":"string"},"instanceProfileArn":{"type":"string"},"javaVirtualEnv":{"type":"string"},"logUri":{"type":"string"},"managedEndpointArn":{"type":"string"},"pythonVirtualEnv":{"type":"string"},"runtimeRole":{"type":"string"},"trustedCertificatesS3Uri":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionSparkGlueArgs":{"description":"Spark Glue Args.","properties":{"connection":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionSparkGluePropertiesInput":{"description":"Spark Glue Properties Input.","properties":{"additionalArgs":{"$ref":"#/types/aws-native:datazone:ConnectionSparkGlueArgs"},"glueConnectionName":{"type":"string"},"glueVersion":{"type":"string"},"idleTimeout":{"type":"number"},"javaVirtualEnv":{"type":"string"},"numberOfWorkers":{"type":"number"},"pythonVirtualEnv":{"type":"string"},"workerType":{"type":"string"}},"type":"object"},"aws-native:datazone:ConnectionUsernamePassword":{"description":"The username and password to be used for authentication.","properties":{"password":{"type":"string"},"username":{"type":"string"}},"type":"object","required":["password","username"]},"aws-native:datazone:DataSourceConfigurationInput0Properties":{"description":"Specifies the configuration of the data source. It can be set to either glueRunConfiguration or redshiftRunConfiguration or sageMakerRunConfiguration.","properties":{"glueRunConfiguration":{"$ref":"#/types/aws-native:datazone:DataSourceGlueRunConfigurationInput"}},"type":"object"},"aws-native:datazone:DataSourceConfigurationInput1Properties":{"description":"Specifies the configuration of the data source. It can be set to either glueRunConfiguration or redshiftRunConfiguration or sageMakerRunConfiguration.","properties":{"redshiftRunConfiguration":{"$ref":"#/types/aws-native:datazone:DataSourceRedshiftRunConfigurationInput"}},"type":"object"},"aws-native:datazone:DataSourceConfigurationInput2Properties":{"description":"Specifies the configuration of the data source. It can be set to either glueRunConfiguration or redshiftRunConfiguration or sageMakerRunConfiguration.","properties":{"sageMakerRunConfiguration":{"$ref":"#/types/aws-native:datazone:DataSourceSageMakerRunConfigurationInput"}},"type":"object"},"aws-native:datazone:DataSourceEnableSetting":{"description":"Specifies whether the data source is enabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datazone:DataSourceFilterExpression":{"description":"The search filter expression.","properties":{"expression":{"type":"string"},"type":{"$ref":"#/types/aws-native:datazone:DataSourceFilterExpressionType"}},"type":"object","required":["expression","type"]},"aws-native:datazone:DataSourceFilterExpressionType":{"description":"The search filter expression type.","type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"Exclude","value":"EXCLUDE"}]},"aws-native:datazone:DataSourceFormInput":{"description":"The details of a metadata form.","properties":{"content":{"type":"string","description":"The content of the metadata form."},"formName":{"type":"string","description":"The name of the metadata form."},"typeIdentifier":{"type":"string","description":"The ID of the metadata form type."},"typeRevision":{"type":"string","description":"The revision of the metadata form type."}},"type":"object","required":["formName"]},"aws-native:datazone:DataSourceGlueRunConfigurationInput":{"properties":{"autoImportDataQualityResult":{"type":"boolean","description":"Specifies whether to automatically import data quality metrics as part of the data source run."},"catalogName":{"type":"string","description":"The catalog name in the AWS Glue run configuration."},"dataAccessRole":{"type":"string","description":"The data access role included in the configuration details of the AWS Glue data source."},"relationalFilterConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:DataSourceRelationalFilterConfiguration"},"description":"The relational filter configurations included in the configuration details of the AWS Glue data source."}},"type":"object","required":["relationalFilterConfigurations"]},"aws-native:datazone:DataSourceRecommendationConfiguration":{"description":"The recommendation to be updated as part of the UpdateDataSource action.","properties":{"enableBusinessNameGeneration":{"type":"boolean","description":"Specifies whether automatic business name generation is to be enabled or not as part of the recommendation configuration."}},"type":"object"},"aws-native:datazone:DataSourceRedshiftClusterStorage":{"description":"The name of an Amazon Redshift cluster.","properties":{"clusterName":{"type":"string","description":"The name of an Amazon Redshift cluster."}},"type":"object","required":["clusterName"]},"aws-native:datazone:DataSourceRedshiftCredentialConfiguration":{"description":"The ARN of a secret manager for an Amazon Redshift cluster.","properties":{"secretManagerArn":{"type":"string","description":"The ARN of a secret manager for an Amazon Redshift cluster."}},"type":"object","required":["secretManagerArn"]},"aws-native:datazone:DataSourceRedshiftRunConfigurationInput":{"description":"The configuration details of the Amazon Redshift data source.","properties":{"dataAccessRole":{"type":"string","description":"The data access role included in the configuration details of the Amazon Redshift data source."},"redshiftCredentialConfiguration":{"$ref":"#/types/aws-native:datazone:DataSourceRedshiftCredentialConfiguration","description":"The details of the credentials required to access an Amazon Redshift cluster."},"redshiftStorage":{"oneOf":[{"$ref":"#/types/aws-native:datazone:DataSourceRedshiftStorage0Properties"},{"$ref":"#/types/aws-native:datazone:DataSourceRedshiftStorage1Properties"}],"description":"The details of the Amazon Redshift storage as part of the configuration of an Amazon Redshift data source run."},"relationalFilterConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:DataSourceRelationalFilterConfiguration"}}},"type":"object","required":["relationalFilterConfigurations"]},"aws-native:datazone:DataSourceRedshiftServerlessStorage":{"description":"The details of the Amazon Redshift Serverless workgroup storage.","properties":{"workgroupName":{"type":"string","description":"The name of the Amazon Redshift Serverless workgroup."}},"type":"object","required":["workgroupName"]},"aws-native:datazone:DataSourceRedshiftStorage0Properties":{"description":"The details of the Amazon Redshift cluster source.","properties":{"redshiftClusterSource":{"$ref":"#/types/aws-native:datazone:DataSourceRedshiftClusterStorage"}},"type":"object","required":["redshiftClusterSource"]},"aws-native:datazone:DataSourceRedshiftStorage1Properties":{"description":"The details of the Amazon Redshift Serverless workgroup source.","properties":{"redshiftServerlessSource":{"$ref":"#/types/aws-native:datazone:DataSourceRedshiftServerlessStorage"}},"type":"object","required":["redshiftServerlessSource"]},"aws-native:datazone:DataSourceRelationalFilterConfiguration":{"description":"The relational filter configuration for the data source.","properties":{"databaseName":{"type":"string","description":"The database name specified in the relational filter configuration for the data source."},"filterExpressions":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:DataSourceFilterExpression"},"description":"The filter expressions specified in the relational filter configuration for the data source."},"schemaName":{"type":"string","description":"The schema name specified in the relational filter configuration for the data source."}},"type":"object","required":["databaseName"]},"aws-native:datazone:DataSourceSageMakerRunConfigurationInput":{"description":"The configuration details of the Amazon SageMaker data source.","properties":{"trackingAssets":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The tracking assets of the Amazon SageMaker run."}},"type":"object","required":["trackingAssets"]},"aws-native:datazone:DataSourceScheduleConfiguration":{"description":"The schedule of the data source runs.","properties":{"schedule":{"type":"string","description":"The schedule of the data source runs."},"timezone":{"type":"string","description":"The timezone of the data source run."}},"type":"object"},"aws-native:datazone:DataSourceStatus":{"description":"The status of the data source.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"FailedCreation","value":"FAILED_CREATION"},{"name":"Ready","value":"READY"},{"name":"Updating","value":"UPDATING"},{"name":"FailedUpdate","value":"FAILED_UPDATE"},{"name":"Running","value":"RUNNING"},{"name":"Deleting","value":"DELETING"},{"name":"FailedDeletion","value":"FAILED_DELETION"}]},"aws-native:datazone:DomainAuthType":{"description":"The type of single sign-on in Amazon DataZone.","type":"string","enum":[{"name":"IamIdc","value":"IAM_IDC"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datazone:DomainSingleSignOn":{"description":"The single-sign on configuration of the Amazon DataZone domain.","properties":{"idcInstanceArn":{"type":"string","description":"The ARN of the IDC instance."},"type":{"$ref":"#/types/aws-native:datazone:DomainAuthType","description":"The type of single sign-on in Amazon DataZone."},"userAssignment":{"$ref":"#/types/aws-native:datazone:DomainUserAssignment","description":"The single sign-on user assignment in Amazon DataZone."}},"type":"object"},"aws-native:datazone:DomainStatus":{"description":"The status of the Amazon DataZone domain.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Available","value":"AVAILABLE"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"DeletionFailed","value":"DELETION_FAILED"}]},"aws-native:datazone:DomainTag":{"description":"A key-value pair to associate with the domain.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:datazone:DomainUserAssignment":{"description":"The single sign-on user assignment in Amazon DataZone.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Manual","value":"MANUAL"}]},"aws-native:datazone:DomainVersion":{"description":"The version of the domain.","type":"string","enum":[{"name":"V1","value":"V1"},{"name":"V2","value":"V2"}]},"aws-native:datazone:EnvironmentActionsAwsConsoleLinkParameters":{"description":"The parameters of the console link specified as part of the environment action","properties":{"uri":{"type":"string","description":"The URI of the console link specified as part of the environment action."}},"type":"object"},"aws-native:datazone:EnvironmentBlueprintConfigurationLakeFormationConfiguration":{"properties":{"locationRegistrationExcludeS3Locations":{"type":"array","items":{"type":"string"}},"locationRegistrationRole":{"type":"string"}},"type":"object"},"aws-native:datazone:EnvironmentBlueprintConfigurationProvisioningConfiguration0Properties":{"properties":{"lakeFormationConfiguration":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationLakeFormationConfiguration"}},"type":"object","required":["lakeFormationConfiguration"]},"aws-native:datazone:EnvironmentBlueprintConfigurationProvisioningConfigurationProperties":{"properties":{"lakeFormationConfiguration":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationLakeFormationConfiguration"}},"type":"object","required":["lakeFormationConfiguration"]},"aws-native:datazone:EnvironmentBlueprintConfigurationRegionalParameter":{"properties":{"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A string to string map containing parameters for the region."},"region":{"type":"string","description":"The region specified in the environment parameter."}},"type":"object"},"aws-native:datazone:EnvironmentParameter":{"description":"The parameter details of an environment.","properties":{"name":{"type":"string","description":"The name of an environment parameter."},"value":{"type":"string","description":"The value of an environment parameter."}},"type":"object"},"aws-native:datazone:EnvironmentProfileEnvironmentParameter":{"description":"The parameter details of an environment profile.","properties":{"name":{"type":"string","description":"The name of an environment profile parameter."},"value":{"type":"string","description":"The value of an environment profile parameter."}},"type":"object"},"aws-native:datazone:EnvironmentStatus":{"description":"The status of the Amazon DataZone environment.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"ValidationFailed","value":"VALIDATION_FAILED"},{"name":"Suspended","value":"SUSPENDED"},{"name":"Disabled","value":"DISABLED"},{"name":"Expired","value":"EXPIRED"},{"name":"Deleted","value":"DELETED"},{"name":"Inaccessible","value":"INACCESSIBLE"}]},"aws-native:datazone:FormTypeModel":{"description":"Indicates the smithy model of the API.","properties":{"smithy":{"type":"string"}},"type":"object"},"aws-native:datazone:FormTypeStatus":{"description":"The status of this Amazon DataZone metadata form type.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datazone:GroupProfileStatus":{"description":"The status of the group profile.","type":"string","enum":[{"name":"Assigned","value":"ASSIGNED"},{"name":"NotAssigned","value":"NOT_ASSIGNED"}]},"aws-native:datazone:OwnerEntityType":{"description":"The type of an entity.","type":"string","enum":[{"name":"DomainUnit","value":"DOMAIN_UNIT"}]},"aws-native:datazone:OwnerProperties":{"description":"The properties of a domain unit's owner.","type":"object"},"aws-native:datazone:OwnerType":{"description":"The owner that you want to add to the entity.","type":"string","enum":[{"name":"User","value":"USER"},{"name":"Group","value":"GROUP"}]},"aws-native:datazone:PolicyGrantAddToProjectMemberPoolPolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantAllDomainUnitsGrantFilter":{"type":"object"},"aws-native:datazone:PolicyGrantAllUsersGrantFilter":{"type":"object"},"aws-native:datazone:PolicyGrantCreateAssetTypePolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantCreateDomainUnitPolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantCreateEnvironmentProfilePolicyGrantDetail":{"properties":{"domainUnitId":{"type":"string"}},"type":"object"},"aws-native:datazone:PolicyGrantCreateFormTypePolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantCreateGlossaryPolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantCreateProjectFromProjectProfilePolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"},"projectProfiles":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:datazone:PolicyGrantCreateProjectPolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantDetail0Properties":{"properties":{"createDomainUnit":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateDomainUnitPolicyGrantDetail"}},"type":"object","required":["createDomainUnit"]},"aws-native:datazone:PolicyGrantDetail10Properties":{"properties":{"createEnvironment":{"$ref":"#/types/aws-native:datazone:PolicyGrantUnit"}},"type":"object","required":["createEnvironment"]},"aws-native:datazone:PolicyGrantDetail11Properties":{"properties":{"createEnvironmentFromBlueprint":{"$ref":"#/types/aws-native:datazone:PolicyGrantUnit"}},"type":"object","required":["createEnvironmentFromBlueprint"]},"aws-native:datazone:PolicyGrantDetail12Properties":{"properties":{"createProjectFromProjectProfile":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateProjectFromProjectProfilePolicyGrantDetail"}},"type":"object","required":["createProjectFromProjectProfile"]},"aws-native:datazone:PolicyGrantDetail1Properties":{"properties":{"overrideDomainUnitOwners":{"$ref":"#/types/aws-native:datazone:PolicyGrantOverrideDomainUnitOwnersPolicyGrantDetail"}},"type":"object","required":["overrideDomainUnitOwners"]},"aws-native:datazone:PolicyGrantDetail2Properties":{"properties":{"addToProjectMemberPool":{"$ref":"#/types/aws-native:datazone:PolicyGrantAddToProjectMemberPoolPolicyGrantDetail"}},"type":"object","required":["addToProjectMemberPool"]},"aws-native:datazone:PolicyGrantDetail3Properties":{"properties":{"overrideProjectOwners":{"$ref":"#/types/aws-native:datazone:PolicyGrantOverrideProjectOwnersPolicyGrantDetail"}},"type":"object","required":["overrideProjectOwners"]},"aws-native:datazone:PolicyGrantDetail4Properties":{"properties":{"createGlossary":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateGlossaryPolicyGrantDetail"}},"type":"object","required":["createGlossary"]},"aws-native:datazone:PolicyGrantDetail5Properties":{"properties":{"createFormType":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateFormTypePolicyGrantDetail"}},"type":"object","required":["createFormType"]},"aws-native:datazone:PolicyGrantDetail6Properties":{"properties":{"createAssetType":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateAssetTypePolicyGrantDetail"}},"type":"object","required":["createAssetType"]},"aws-native:datazone:PolicyGrantDetail7Properties":{"properties":{"createProject":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateProjectPolicyGrantDetail"}},"type":"object","required":["createProject"]},"aws-native:datazone:PolicyGrantDetail8Properties":{"properties":{"createEnvironmentProfile":{"$ref":"#/types/aws-native:datazone:PolicyGrantCreateEnvironmentProfilePolicyGrantDetail"}},"type":"object","required":["createEnvironmentProfile"]},"aws-native:datazone:PolicyGrantDetail9Properties":{"properties":{"delegateCreateEnvironmentProfile":{"$ref":"#/types/aws-native:datazone:PolicyGrantUnit"}},"type":"object","required":["delegateCreateEnvironmentProfile"]},"aws-native:datazone:PolicyGrantDomainUnitDesignation":{"type":"string","enum":[{"name":"Owner","value":"OWNER"}]},"aws-native:datazone:PolicyGrantDomainUnitFilterForProject":{"properties":{"domainUnit":{"type":"string"},"includeChildDomainUnits":{"type":"boolean"}},"type":"object","required":["domainUnit"]},"aws-native:datazone:PolicyGrantDomainUnitGrantFilter0Properties":{"properties":{"allDomainUnitsGrantFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantAllDomainUnitsGrantFilter"}},"type":"object","required":["allDomainUnitsGrantFilter"]},"aws-native:datazone:PolicyGrantDomainUnitGrantFilterProperties":{"properties":{"allDomainUnitsGrantFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantAllDomainUnitsGrantFilter"}},"type":"object","required":["allDomainUnitsGrantFilter"]},"aws-native:datazone:PolicyGrantDomainUnitPolicyGrantPrincipal":{"properties":{"domainUnitDesignation":{"$ref":"#/types/aws-native:datazone:PolicyGrantDomainUnitDesignation"},"domainUnitGrantFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantDomainUnitGrantFilterProperties"},"domainUnitIdentifier":{"type":"string"}},"type":"object"},"aws-native:datazone:PolicyGrantGroupPolicyGrantPrincipal0Properties":{"properties":{"groupIdentifier":{"type":"string"}},"type":"object","required":["groupIdentifier"]},"aws-native:datazone:PolicyGrantGroupPolicyGrantPrincipalProperties":{"properties":{"groupIdentifier":{"type":"string"}},"type":"object","required":["groupIdentifier"]},"aws-native:datazone:PolicyGrantManagedPolicyType":{"type":"string","enum":[{"name":"CreateDomainUnit","value":"CREATE_DOMAIN_UNIT"},{"name":"OverrideDomainUnitOwners","value":"OVERRIDE_DOMAIN_UNIT_OWNERS"},{"name":"AddToProjectMemberPool","value":"ADD_TO_PROJECT_MEMBER_POOL"},{"name":"OverrideProjectOwners","value":"OVERRIDE_PROJECT_OWNERS"},{"name":"CreateGlossary","value":"CREATE_GLOSSARY"},{"name":"CreateFormType","value":"CREATE_FORM_TYPE"},{"name":"CreateAssetType","value":"CREATE_ASSET_TYPE"},{"name":"CreateProject","value":"CREATE_PROJECT"},{"name":"CreateEnvironmentProfile","value":"CREATE_ENVIRONMENT_PROFILE"},{"name":"DelegateCreateEnvironmentProfile","value":"DELEGATE_CREATE_ENVIRONMENT_PROFILE"},{"name":"CreateEnvironment","value":"CREATE_ENVIRONMENT"},{"name":"CreateEnvironmentFromBlueprint","value":"CREATE_ENVIRONMENT_FROM_BLUEPRINT"},{"name":"CreateProjectFromProjectProfile","value":"CREATE_PROJECT_FROM_PROJECT_PROFILE"}]},"aws-native:datazone:PolicyGrantOverrideDomainUnitOwnersPolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantOverrideProjectOwnersPolicyGrantDetail":{"properties":{"includeChildDomainUnits":{"type":"boolean"}},"type":"object"},"aws-native:datazone:PolicyGrantPrincipal0Properties":{"properties":{"user":{"oneOf":[{"$ref":"#/types/aws-native:datazone:PolicyGrantUserPolicyGrantPrincipal0Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantUserPolicyGrantPrincipal1Properties"}]}},"type":"object","required":["user"]},"aws-native:datazone:PolicyGrantPrincipal1Properties":{"properties":{"group":{"$ref":"#/types/aws-native:datazone:PolicyGrantGroupPolicyGrantPrincipalProperties"}},"type":"object","required":["group"]},"aws-native:datazone:PolicyGrantPrincipal2Properties":{"properties":{"project":{"$ref":"#/types/aws-native:datazone:PolicyGrantProjectPolicyGrantPrincipal"}},"type":"object","required":["project"]},"aws-native:datazone:PolicyGrantPrincipal3Properties":{"properties":{"domainUnit":{"$ref":"#/types/aws-native:datazone:PolicyGrantDomainUnitPolicyGrantPrincipal"}},"type":"object","required":["domainUnit"]},"aws-native:datazone:PolicyGrantProjectDesignation":{"type":"string","enum":[{"name":"Owner","value":"OWNER"},{"name":"Contributor","value":"CONTRIBUTOR"},{"name":"ProjectCatalogSteward","value":"PROJECT_CATALOG_STEWARD"}]},"aws-native:datazone:PolicyGrantProjectGrantFilter0Properties":{"properties":{"domainUnitFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantDomainUnitFilterForProject"}},"type":"object","required":["domainUnitFilter"]},"aws-native:datazone:PolicyGrantProjectGrantFilterProperties":{"properties":{"domainUnitFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantDomainUnitFilterForProject"}},"type":"object","required":["domainUnitFilter"]},"aws-native:datazone:PolicyGrantProjectPolicyGrantPrincipal":{"properties":{"projectDesignation":{"$ref":"#/types/aws-native:datazone:PolicyGrantProjectDesignation"},"projectGrantFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantProjectGrantFilterProperties"},"projectIdentifier":{"type":"string"}},"type":"object"},"aws-native:datazone:PolicyGrantTargetEntityType":{"type":"string","enum":[{"name":"DomainUnit","value":"DOMAIN_UNIT"},{"name":"EnvironmentBlueprintConfiguration","value":"ENVIRONMENT_BLUEPRINT_CONFIGURATION"},{"name":"EnvironmentProfile","value":"ENVIRONMENT_PROFILE"},{"name":"AssetType","value":"ASSET_TYPE"}]},"aws-native:datazone:PolicyGrantUnit":{"type":"object"},"aws-native:datazone:PolicyGrantUserPolicyGrantPrincipal0Properties":{"properties":{"userIdentifier":{"type":"string"}},"type":"object","required":["userIdentifier"]},"aws-native:datazone:PolicyGrantUserPolicyGrantPrincipal1Properties":{"properties":{"allUsersGrantFilter":{"$ref":"#/types/aws-native:datazone:PolicyGrantAllUsersGrantFilter"}},"type":"object","required":["allUsersGrantFilter"]},"aws-native:datazone:ProjectEnvironmentConfigurationUserParameter":{"properties":{"environmentConfigurationName":{"type":"string","description":"The environment configuration name."},"environmentId":{"type":"string","description":"The ID of the environment."},"environmentParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectEnvironmentParameter"},"description":"The environment parameters."}},"type":"object"},"aws-native:datazone:ProjectEnvironmentParameter":{"properties":{"name":{"type":"string","description":"The name of an environment profile parameter."},"value":{"type":"string","description":"The value of an environment profile parameter."}},"type":"object"},"aws-native:datazone:ProjectMembershipMember0Properties":{"properties":{"userIdentifier":{"type":"string"}},"type":"object","required":["userIdentifier"]},"aws-native:datazone:ProjectMembershipMember1Properties":{"properties":{"groupIdentifier":{"type":"string"}},"type":"object","required":["groupIdentifier"]},"aws-native:datazone:ProjectMembershipMemberIdentifierType":{"type":"string","enum":[{"name":"UserIdentifier","value":"USER_IDENTIFIER"},{"name":"GroupIdentifier","value":"GROUP_IDENTIFIER"}]},"aws-native:datazone:ProjectMembershipUserDesignation":{"type":"string","enum":[{"name":"ProjectOwner","value":"PROJECT_OWNER"},{"name":"ProjectContributor","value":"PROJECT_CONTRIBUTOR"},{"name":"ProjectCatalogViewer","value":"PROJECT_CATALOG_VIEWER"},{"name":"ProjectCatalogConsumer","value":"PROJECT_CATALOG_CONSUMER"},{"name":"ProjectCatalogSteward","value":"PROJECT_CATALOG_STEWARD"}]},"aws-native:datazone:ProjectProfileAwsAccount":{"properties":{"awsAccountId":{"type":"string","description":"The account ID of a project."}},"type":"object","required":["awsAccountId"]},"aws-native:datazone:ProjectProfileDeploymentMode":{"type":"string","enum":[{"name":"OnCreate","value":"ON_CREATE"},{"name":"OnDemand","value":"ON_DEMAND"}]},"aws-native:datazone:ProjectProfileEnvironmentConfiguration":{"properties":{"awsAccount":{"$ref":"#/types/aws-native:datazone:ProjectProfileAwsAccount","description":"The AWS account of the environment."},"awsRegion":{"$ref":"#/types/aws-native:datazone:ProjectProfileRegion","description":"The AWS Region of the environment."},"configurationParameters":{"$ref":"#/types/aws-native:datazone:ProjectProfileEnvironmentConfigurationParametersDetails","description":"The configuration parameters of the environment."},"deploymentMode":{"$ref":"#/types/aws-native:datazone:ProjectProfileDeploymentMode","description":"The deployment mode of the environment."},"deploymentOrder":{"type":"number","description":"The deployment order of the environment."},"description":{"type":"string","description":"The environment description."},"environmentBlueprintId":{"type":"string","description":"The environment blueprint ID."},"environmentConfigurationId":{"type":"string"},"name":{"type":"string","description":"The environment name."}},"type":"object","required":["awsRegion","environmentBlueprintId","name"]},"aws-native:datazone:ProjectProfileEnvironmentConfigurationParameter":{"properties":{"isEditable":{"type":"boolean","description":"Specifies whether the environment parameter is editable."},"name":{"type":"string","description":"The name of the environment configuration parameter."},"value":{"type":"string","description":"The value of the environment configuration parameter."}},"type":"object"},"aws-native:datazone:ProjectProfileEnvironmentConfigurationParametersDetails":{"properties":{"parameterOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectProfileEnvironmentConfigurationParameter"},"description":"The parameter overrides."},"resolvedParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectProfileEnvironmentConfigurationParameter"},"description":"The resolved environment configuration parameters."},"ssmPath":{"type":"string","description":"Ssm path environment configuration parameters."}},"type":"object"},"aws-native:datazone:ProjectProfileRegion":{"properties":{"regionName":{"type":"string","description":"The AWS Region name."}},"type":"object","required":["regionName"]},"aws-native:datazone:ProjectProfileStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:datazone:ProjectStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Moving","value":"MOVING"},{"name":"Deleting","value":"DELETING"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:datazone:SubscriptionTargetForm":{"description":"The details of the subscription target configuration.","properties":{"content":{"type":"string","description":"The content of the subscription target configuration."},"formName":{"type":"string","description":"The form name included in the subscription target configuration."}},"type":"object","required":["content","formName"]},"aws-native:datazone:UserProfileDetails0Properties":{"properties":{"iam":{"$ref":"#/types/aws-native:datazone:UserProfileIamUserProfileDetails"}},"type":"object","required":["iam"]},"aws-native:datazone:UserProfileDetails1Properties":{"properties":{"sso":{"$ref":"#/types/aws-native:datazone:UserProfileSsoUserProfileDetails"}},"type":"object","required":["sso"]},"aws-native:datazone:UserProfileIamUserProfileDetails":{"description":"The details of the IAM User Profile.","properties":{"arn":{"type":"string","description":"The ARN of the IAM User Profile."}},"type":"object"},"aws-native:datazone:UserProfileSsoUserProfileDetails":{"description":"The details of the SSO User Profile.","properties":{"firstName":{"type":"string","description":"The First Name of the IAM User Profile."},"lastName":{"type":"string","description":"The Last Name of the IAM User Profile."},"username":{"type":"string","description":"The username of the SSO User Profile."}},"type":"object"},"aws-native:datazone:UserProfileStatus":{"description":"The status of the user profile.","type":"string","enum":[{"name":"Assigned","value":"ASSIGNED"},{"name":"NotAssigned","value":"NOT_ASSIGNED"},{"name":"Activated","value":"ACTIVATED"},{"name":"Deactivated","value":"DEACTIVATED"}]},"aws-native:datazone:UserProfileType":{"description":"The type of the user profile.","type":"string","enum":[{"name":"Iam","value":"IAM"},{"name":"Sso","value":"SSO"}]},"aws-native:datazone:UserProfileUserType":{"description":"The type of the user.","type":"string","enum":[{"name":"IamUser","value":"IAM_USER"},{"name":"IamRole","value":"IAM_ROLE"},{"name":"SsoUser","value":"SSO_USER"}]},"aws-native:deadline:FarmTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:deadline:FleetAcceleratorCapabilities":{"properties":{"count":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorCountRange"},"selections":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorSelection"}}},"type":"object","required":["selections"]},"aws-native:deadline:FleetAcceleratorCountRange":{"properties":{"max":{"type":"integer"},"min":{"type":"integer"}},"type":"object","required":["min"]},"aws-native:deadline:FleetAcceleratorSelection":{"properties":{"name":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorSelectionName"},"runtime":{"type":"string"}},"type":"object","required":["name"]},"aws-native:deadline:FleetAcceleratorSelectionName":{"type":"string","enum":[{"name":"T4","value":"t4"},{"name":"A10g","value":"a10g"},{"name":"L4","value":"l4"},{"name":"L40s","value":"l40s"}]},"aws-native:deadline:FleetAcceleratorTotalMemoryMiBRange":{"properties":{"max":{"type":"integer"},"min":{"type":"integer"}},"type":"object","required":["min"]},"aws-native:deadline:FleetAcceleratorType":{"type":"string","enum":[{"name":"Gpu","value":"gpu"}]},"aws-native:deadline:FleetAmountCapability":{"properties":{"max":{"type":"number","description":"The maximum amount of the fleet worker capability."},"min":{"type":"number","description":"The minimum amount of fleet worker capability."},"name":{"type":"string","description":"The name of the fleet capability."}},"type":"object","required":["min","name"]},"aws-native:deadline:FleetAttributeCapability":{"properties":{"name":{"type":"string","description":"The name of the fleet attribute capability for the worker."},"values":{"type":"array","items":{"type":"string"},"description":"The number of fleet attribute capabilities."}},"type":"object","required":["name","values"]},"aws-native:deadline:FleetAutoScalingMode":{"type":"string","enum":[{"name":"NoScaling","value":"NO_SCALING"},{"name":"EventBasedAutoScaling","value":"EVENT_BASED_AUTO_SCALING"}]},"aws-native:deadline:FleetCapabilities":{"properties":{"amounts":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAmountCapability"},"description":"Amount capabilities of the fleet."},"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAttributeCapability"},"description":"Attribute capabilities of the fleet."}},"type":"object"},"aws-native:deadline:FleetConfiguration0Properties":{"properties":{"customerManaged":{"$ref":"#/types/aws-native:deadline:FleetCustomerManagedFleetConfiguration"}},"type":"object","required":["customerManaged"]},"aws-native:deadline:FleetConfiguration1Properties":{"properties":{"serviceManagedEc2":{"$ref":"#/types/aws-native:deadline:FleetServiceManagedEc2FleetConfiguration"}},"type":"object","required":["serviceManagedEc2"]},"aws-native:deadline:FleetCpuArchitectureType":{"type":"string","enum":[{"name":"X8664","value":"x86_64"},{"name":"Arm64","value":"arm64"}]},"aws-native:deadline:FleetCustomerManagedFleetConfiguration":{"properties":{"mode":{"$ref":"#/types/aws-native:deadline:FleetAutoScalingMode"},"storageProfileId":{"type":"string"},"tagPropagationMode":{"$ref":"#/types/aws-native:deadline:FleetTagPropagationMode"},"workerCapabilities":{"$ref":"#/types/aws-native:deadline:FleetCustomerManagedWorkerCapabilities"}},"type":"object","required":["mode","workerCapabilities"]},"aws-native:deadline:FleetCustomerManagedFleetOperatingSystemFamily":{"type":"string","enum":[{"name":"Windows","value":"WINDOWS"},{"name":"Linux","value":"LINUX"},{"name":"Macos","value":"MACOS"}]},"aws-native:deadline:FleetCustomerManagedWorkerCapabilities":{"properties":{"acceleratorCount":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorCountRange"},"acceleratorTotalMemoryMiB":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorTotalMemoryMiBRange"},"acceleratorTypes":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorType"}},"cpuArchitectureType":{"$ref":"#/types/aws-native:deadline:FleetCpuArchitectureType"},"customAmounts":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAmountCapability"}},"customAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAttributeCapability"}},"memoryMiB":{"$ref":"#/types/aws-native:deadline:FleetMemoryMiBRange"},"osFamily":{"$ref":"#/types/aws-native:deadline:FleetCustomerManagedFleetOperatingSystemFamily"},"vCpuCount":{"$ref":"#/types/aws-native:deadline:FleetVCpuCountRange"}},"type":"object","required":["cpuArchitectureType","memoryMiB","osFamily","vCpuCount"]},"aws-native:deadline:FleetEc2EbsVolume":{"properties":{"iops":{"type":"integer"},"sizeGiB":{"type":"integer"},"throughputMiB":{"type":"integer"}},"type":"object"},"aws-native:deadline:FleetEc2MarketType":{"type":"string","enum":[{"name":"OnDemand","value":"on-demand"},{"name":"Spot","value":"spot"},{"name":"WaitAndSave","value":"wait-and-save"}]},"aws-native:deadline:FleetHostConfiguration":{"properties":{"scriptBody":{"type":"string","description":"The text of the script that runs as a worker is starting up that you can use to provide additional configuration for workers in your fleet. The script runs after a worker enters the `STARTING` state and before the worker processes tasks.\n\nFor more information about using the script, see [Run scripts as an administrator to configure workers](https://docs.aws.amazon.com/deadline-cloud/latest/developerguide/smf-admin.html) in the *Deadline Cloud Developer Guide* .\n\n\u003e The script runs as an administrative user ( `sudo root` on Linux, as an Administrator on Windows)."},"scriptTimeoutSeconds":{"type":"integer","description":"The maximum time that the host configuration can run. If the timeout expires, the worker enters the `NOT RESPONDING` state and shuts down. You are charged for the time that the worker is running the host configuration script.\n\n\u003e You should configure your fleet for a maximum of one worker while testing your host configuration script to avoid starting additional workers. \n\nThe default is 300 seconds (5 minutes)."}},"type":"object","required":["scriptBody"]},"aws-native:deadline:FleetMemoryMiBRange":{"properties":{"max":{"type":"integer"},"min":{"type":"integer"}},"type":"object","required":["min"]},"aws-native:deadline:FleetServiceManagedEc2FleetConfiguration":{"properties":{"instanceCapabilities":{"$ref":"#/types/aws-native:deadline:FleetServiceManagedEc2InstanceCapabilities"},"instanceMarketOptions":{"$ref":"#/types/aws-native:deadline:FleetServiceManagedEc2InstanceMarketOptions"},"storageProfileId":{"type":"string"},"vpcConfiguration":{"$ref":"#/types/aws-native:deadline:FleetVpcConfiguration"}},"type":"object","required":["instanceCapabilities","instanceMarketOptions"]},"aws-native:deadline:FleetServiceManagedEc2InstanceCapabilities":{"properties":{"acceleratorCapabilities":{"$ref":"#/types/aws-native:deadline:FleetAcceleratorCapabilities"},"allowedInstanceTypes":{"type":"array","items":{"type":"string"}},"cpuArchitectureType":{"$ref":"#/types/aws-native:deadline:FleetCpuArchitectureType"},"customAmounts":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAmountCapability"}},"customAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:FleetAttributeCapability"}},"excludedInstanceTypes":{"type":"array","items":{"type":"string"}},"memoryMiB":{"$ref":"#/types/aws-native:deadline:FleetMemoryMiBRange"},"osFamily":{"$ref":"#/types/aws-native:deadline:FleetServiceManagedFleetOperatingSystemFamily"},"rootEbsVolume":{"$ref":"#/types/aws-native:deadline:FleetEc2EbsVolume"},"vCpuCount":{"$ref":"#/types/aws-native:deadline:FleetVCpuCountRange"}},"type":"object","required":["cpuArchitectureType","memoryMiB","osFamily","vCpuCount"]},"aws-native:deadline:FleetServiceManagedEc2InstanceMarketOptions":{"properties":{"type":{"$ref":"#/types/aws-native:deadline:FleetEc2MarketType"}},"type":"object","required":["type"]},"aws-native:deadline:FleetServiceManagedFleetOperatingSystemFamily":{"type":"string","enum":[{"name":"Linux","value":"LINUX"},{"name":"Windows","value":"WINDOWS"}]},"aws-native:deadline:FleetStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Suspended","value":"SUSPENDED"}]},"aws-native:deadline:FleetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:deadline:FleetTagPropagationMode":{"type":"string","enum":[{"name":"NoPropagation","value":"NO_PROPAGATION"},{"name":"PropagateTagsToWorkersAtLaunch","value":"PROPAGATE_TAGS_TO_WORKERS_AT_LAUNCH"}]},"aws-native:deadline:FleetVCpuCountRange":{"properties":{"max":{"type":"integer"},"min":{"type":"integer"}},"type":"object","required":["min"]},"aws-native:deadline:FleetVpcConfiguration":{"properties":{"resourceConfigurationArns":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:deadline:LicenseEndpointStatus":{"type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"Ready","value":"READY"},{"name":"NotReady","value":"NOT_READY"}]},"aws-native:deadline:LicenseEndpointTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:deadline:MonitorTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:deadline:QueueDefaultQueueBudgetAction":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"StopSchedulingAndCompleteTasks","value":"STOP_SCHEDULING_AND_COMPLETE_TASKS"},{"name":"StopSchedulingAndCancelTasks","value":"STOP_SCHEDULING_AND_CANCEL_TASKS"}]},"aws-native:deadline:QueueEnvironmentEnvironmentTemplateType":{"type":"string","enum":[{"name":"Json","value":"JSON"},{"name":"Yaml","value":"YAML"}]},"aws-native:deadline:QueueJobAttachmentSettings":{"properties":{"rootPrefix":{"type":"string","description":"The root prefix."},"s3BucketName":{"type":"string","description":"The Amazon S3 bucket name."}},"type":"object","required":["rootPrefix","s3BucketName"]},"aws-native:deadline:QueueJobRunAsUser":{"properties":{"posix":{"$ref":"#/types/aws-native:deadline:QueuePosixUser","description":"The user and group that the jobs in the queue run as."},"runAs":{"$ref":"#/types/aws-native:deadline:QueueRunAs","description":"Specifies whether the job should run using the queue's system user or if the job should run using the worker agent system user."},"windows":{"$ref":"#/types/aws-native:deadline:QueueWindowsUser","description":"Identifies a Microsoft Windows user."}},"type":"object","required":["runAs"]},"aws-native:deadline:QueuePosixUser":{"properties":{"group":{"type":"string","description":"The name of the POSIX user's group."},"user":{"type":"string","description":"The name of the POSIX user."}},"type":"object","required":["group","user"]},"aws-native:deadline:QueueRunAs":{"type":"string","enum":[{"name":"QueueConfiguredUser","value":"QUEUE_CONFIGURED_USER"},{"name":"WorkerAgentUser","value":"WORKER_AGENT_USER"}]},"aws-native:deadline:QueueTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:deadline:QueueWindowsUser":{"properties":{"passwordArn":{"type":"string","description":"The password ARN for the Windows user."},"user":{"type":"string","description":"The user."}},"type":"object","required":["passwordArn","user"]},"aws-native:deadline:StorageProfileFileSystemLocation":{"properties":{"name":{"type":"string","description":"The location name."},"path":{"type":"string","description":"The file path."},"type":{"$ref":"#/types/aws-native:deadline:StorageProfileFileSystemLocationType","description":"The type of file."}},"type":"object","required":["name","path","type"]},"aws-native:deadline:StorageProfileFileSystemLocationType":{"type":"string","enum":[{"name":"Shared","value":"SHARED"},{"name":"Local","value":"LOCAL"}]},"aws-native:deadline:StorageProfileOperatingSystemFamily":{"type":"string","enum":[{"name":"Windows","value":"WINDOWS"},{"name":"Linux","value":"LINUX"},{"name":"Macos","value":"MACOS"}]},"aws-native:detective:GraphTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. Valid characters are Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @ "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. Valid characters are Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @ "}},"type":"object"},"aws-native:devicefarm:DevicePoolRule":{"description":"Represents a condition for a device pool.","properties":{"attribute":{"$ref":"#/types/aws-native:devicefarm:DevicePoolRuleAttribute","description":"The rule's stringified attribute."},"operator":{"$ref":"#/types/aws-native:devicefarm:DevicePoolRuleOperator","description":"Specifies how Device Farm compares the rule's attribute to the value."},"value":{"type":"string","description":"The rule's value."}},"type":"object"},"aws-native:devicefarm:DevicePoolRuleAttribute":{"description":"The rule's stringified attribute.","type":"string","enum":[{"name":"Arn","value":"ARN"},{"name":"Platform","value":"PLATFORM"},{"name":"FormFactor","value":"FORM_FACTOR"},{"name":"Manufacturer","value":"MANUFACTURER"},{"name":"RemoteAccessEnabled","value":"REMOTE_ACCESS_ENABLED"},{"name":"RemoteDebugEnabled","value":"REMOTE_DEBUG_ENABLED"},{"name":"AppiumVersion","value":"APPIUM_VERSION"},{"name":"InstanceArn","value":"INSTANCE_ARN"},{"name":"InstanceLabels","value":"INSTANCE_LABELS"},{"name":"FleetType","value":"FLEET_TYPE"},{"name":"OsVersion","value":"OS_VERSION"},{"name":"Model","value":"MODEL"},{"name":"Availability","value":"AVAILABILITY"}]},"aws-native:devicefarm:DevicePoolRuleOperator":{"description":"Specifies how Device Farm compares the rule's attribute to the value.","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"LessThan","value":"LESS_THAN"},{"name":"LessThanOrEquals","value":"LESS_THAN_OR_EQUALS"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"GreaterThanOrEquals","value":"GREATER_THAN_OR_EQUALS"},{"name":"In","value":"IN"},{"name":"NotIn","value":"NOT_IN"},{"name":"Contains","value":"CONTAINS"}]},"aws-native:devicefarm:DevicePoolTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor in a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:devicefarm:InstanceProfileTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor in a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:devicefarm:NetworkProfileTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor in a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:devicefarm:ProjectEnvironmentVariable":{"properties":{"name":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["name","value"]},"aws-native:devicefarm:ProjectTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor in a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:devicefarm:ProjectVpcConfig":{"description":"The VPC security groups and subnets that are attached to a project","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"An array of security group Ids in your Amazon VPC"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A array of subnet IDs in your Amazon VPC."},"vpcId":{"type":"string","description":"The ID of the Amazon VPC"}},"type":"object","required":["securityGroupIds","subnetIds","vpcId"]},"aws-native:devicefarm:TestGridProjectTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor in a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:devicefarm:TestGridProjectVpcConfig":{"description":"The VPC security groups and subnets that are attached to a TestGrid project.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC security group IDs in your Amazon VPC."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC subnet IDs in your Amazon VPC."},"vpcId":{"type":"string","description":"A list of VPC IDs.\n\nEach VPC is given a unique ID upon creation."}},"type":"object","required":["securityGroupIds","subnetIds","vpcId"]},"aws-native:devicefarm:VpceConfigurationTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor in a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:devopsguru:NotificationChannelConfig":{"description":"Information about notification channels you have configured with DevOps Guru.","properties":{"filters":{"$ref":"#/types/aws-native:devopsguru:NotificationChannelNotificationFilterConfig","description":"The filter configurations for the Amazon SNS notification topic you use with DevOps Guru. If you do not provide filter configurations, the default configurations are to receive notifications for all message types of `High` or `Medium` severity."},"sns":{"$ref":"#/types/aws-native:devopsguru:NotificationChannelSnsChannelConfig","description":"Information about a notification channel configured in DevOps Guru to send notifications when insights are created.\n\nIf you use an Amazon SNS topic in another account, you must attach a policy to it that grants DevOps Guru permission to send it notifications. DevOps Guru adds the required policy on your behalf to send notifications using Amazon SNS in your account. DevOps Guru only supports standard SNS topics. For more information, see [Permissions for Amazon SNS topics](https://docs.aws.amazon.com/devops-guru/latest/userguide/sns-required-permissions.html) .\n\nIf you use an Amazon SNS topic that is encrypted by an AWS Key Management Service customer-managed key (CMK), then you must add permissions to the CMK. For more information, see [Permissions for AWS KMS–encrypted Amazon SNS topics](https://docs.aws.amazon.com/devops-guru/latest/userguide/sns-kms-permissions.html) ."}},"type":"object"},"aws-native:devopsguru:NotificationChannelInsightSeverity":{"description":"DevOps Guru Insight Severity Enum","type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:devopsguru:NotificationChannelNotificationFilterConfig":{"description":"Information about filters of a notification channel configured in DevOpsGuru to filter for insights.","properties":{"messageTypes":{"type":"array","items":{"$ref":"#/types/aws-native:devopsguru:NotificationChannelNotificationMessageType"},"description":"The events that you want to receive notifications for. For example, you can choose to receive notifications only when the severity level is upgraded or a new insight is created."},"severities":{"type":"array","items":{"$ref":"#/types/aws-native:devopsguru:NotificationChannelInsightSeverity"},"description":"The severity levels that you want to receive notifications for. For example, you can choose to receive notifications only for insights with `HIGH` and `MEDIUM` severity levels. For more information, see [Understanding insight severities](https://docs.aws.amazon.com/devops-guru/latest/userguide/working-with-insights.html#understanding-insights-severities) ."}},"type":"object"},"aws-native:devopsguru:NotificationChannelNotificationMessageType":{"description":"DevOps Guru NotificationMessageType Enum","type":"string","enum":[{"name":"NewInsight","value":"NEW_INSIGHT"},{"name":"ClosedInsight","value":"CLOSED_INSIGHT"},{"name":"NewAssociation","value":"NEW_ASSOCIATION"},{"name":"SeverityUpgraded","value":"SEVERITY_UPGRADED"},{"name":"NewRecommendation","value":"NEW_RECOMMENDATION"}]},"aws-native:devopsguru:NotificationChannelSnsChannelConfig":{"description":"Information about a notification channel configured in DevOps Guru to send notifications when insights are created.","properties":{"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Amazon Simple Notification Service topic."}},"type":"object"},"aws-native:devopsguru:ResourceCollectionCloudFormationCollectionFilter":{"description":"CloudFormation resource for DevOps Guru to monitor","properties":{"stackNames":{"type":"array","items":{"type":"string"},"description":"An array of CloudFormation stack names."}},"type":"object"},"aws-native:devopsguru:ResourceCollectionFilter":{"description":"Information about a filter used to specify which AWS resources are analyzed for anomalous behavior by DevOps Guru.","properties":{"cloudFormation":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionCloudFormationCollectionFilter","description":"Information about AWS CloudFormation stacks. You can use up to 1000 stacks to specify which AWS resources in your account to analyze. For more information, see [Stacks](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacks.html) in the *AWS CloudFormation User Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionTagCollection"},"description":"The AWS tags used to filter the resources in the resource collection.\n\nTags help you identify and organize your AWS resources. Many AWS services support tagging, so you can assign the same tag to resources from different services to indicate that the resources are related. For example, you can assign the same tag to an Amazon DynamoDB table resource that you assign to an AWS Lambda function. For more information about using tags, see the [Tagging best practices](https://docs.aws.amazon.com/whitepapers/latest/tagging-best-practices/tagging-best-practices.html) whitepaper.\n\nEach AWS tag has two parts.\n\n- A tag *key* (for example, `CostCenter` , `Environment` , `Project` , or `Secret` ). Tag *keys* are case-sensitive.\n- A field known as a tag *value* (for example, `111122223333` , `Production` , or a team name). Omitting the tag *value* is the same as using an empty string. Like tag *keys* , tag *values* are case-sensitive. The tag value is a required property when AppBoundaryKey is specified.\n\nTogether these are known as *key* - *value* pairs.\n\n\u003e The string used for a *key* in a tag that you use to define your resource coverage must begin with the prefix `Devops-guru-` . The tag *key* might be `DevOps-Guru-deployment-application` or `devops-guru-rds-application` . When you create a *key* , the case of characters in the *key* can be whatever you choose. After you create a *key* , it is case-sensitive. For example, DevOps Guru works with a *key* named `devops-guru-rds` and a *key* named `DevOps-Guru-RDS` , and these act as two different *keys* . Possible *key* / *value* pairs in your application might be `Devops-Guru-production-application/RDS` or `Devops-Guru-production-application/containers` ."}},"type":"object"},"aws-native:devopsguru:ResourceCollectionTagCollection":{"description":"Tagged resource for DevOps Guru to monitor","properties":{"appBoundaryKey":{"type":"string","description":"A Tag key for DevOps Guru app boundary."},"tagValues":{"type":"array","items":{"type":"string"},"description":"Tag values of DevOps Guru app boundary."}},"type":"object"},"aws-native:devopsguru:ResourceCollectionType":{"description":"The type of ResourceCollection","type":"string","enum":[{"name":"AwsCloudFormation","value":"AWS_CLOUD_FORMATION"},{"name":"AwsTags","value":"AWS_TAGS"}]},"aws-native:directconnect:ConnectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:directconnect:DirectConnectGatewayTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:directconnect:LagTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:directconnect:PrivateVirtualInterfaceBgpPeer":{"description":"Information about a BGP peer.","properties":{"addressFamily":{"type":"string","description":"The address family for the BGP peer."},"amazonAddress":{"type":"string","description":"The IP address assigned to the Amazon interface."},"asn":{"type":"string","description":"The autonomous system (AS) number for Border Gateway Protocol (BGP) configuration."},"authKey":{"type":"string","description":"The authentication key for BGP configuration. This string has a minimum length of 6 characters and and a maximum length of 80 characters."},"bgpPeerId":{"type":"string"},"customerAddress":{"type":"string","description":"The IP address assigned to the customer interface."}},"type":"object","required":["addressFamily","asn"]},"aws-native:directconnect:PrivateVirtualInterfaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:directconnect:PublicVirtualInterfaceBgpPeer":{"description":"Information about a BGP peer.","properties":{"addressFamily":{"type":"string","description":"The address family for the BGP peer."},"amazonAddress":{"type":"string","description":"The IP address assigned to the Amazon interface."},"asn":{"type":"string","description":"The autonomous system (AS) number for Border Gateway Protocol (BGP) configuration."},"authKey":{"type":"string","description":"The authentication key for BGP configuration. This string has a minimum length of 6 characters and and a maximum length of 80 characters."},"bgpPeerId":{"type":"string"},"customerAddress":{"type":"string","description":"The IP address assigned to the customer interface."}},"type":"object","required":["addressFamily","asn"]},"aws-native:directconnect:PublicVirtualInterfaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:directconnect:TransitVirtualInterfaceBgpPeer":{"description":"A key-value pair to associate with a resource.","properties":{"addressFamily":{"type":"string","description":"The address family for the BGP peer."},"amazonAddress":{"type":"string","description":"The IP address assigned to the Amazon interface."},"asn":{"type":"string","description":"The autonomous system (AS) number for Border Gateway Protocol (BGP) configuration."},"authKey":{"type":"string","description":"The authentication key for BGP configuration. This string has a minimum length of 6 characters and and a maximum length of 80 characters."},"bgpPeerId":{"type":"string"},"customerAddress":{"type":"string","description":"The IP address assigned to the customer interface."}},"type":"object","required":["addressFamily","asn"]},"aws-native:directconnect:TransitVirtualInterfaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:directoryservice:SimpleAdTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag"},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:directoryservice:SimpleAdVpcSettings":{"properties":{"subnetIds":{"type":"array","items":{"type":"string"},"description":"The identifiers of the subnets for the directory servers. The two subnets must be in different Availability Zones. AWS Directory Service specifies a directory server and a DNS server in each of these subnets."},"vpcId":{"type":"string","description":"The identifier of the VPC in which to create the directory."}},"type":"object","required":["subnetIds","vpcId"]},"aws-native:dms:DataMigrationSettings":{"properties":{"cloudwatchLogsEnabled":{"type":"boolean","description":"The property specifies whether to enable the CloudWatch log."},"numberOfJobs":{"type":"integer","description":"The number of parallel jobs that trigger parallel threads to unload the tables from the source, and then load them to the target."},"selectionRules":{"type":"string","description":"The property specifies the rules of selecting objects for data migration."}},"type":"object"},"aws-native:dms:DataMigrationSourceDataSettings":{"properties":{"cdcStartPosition":{"type":"string","description":"The property is a point in the database engine's log that defines a time where you can begin CDC."},"cdcStartTime":{"type":"string","description":"The property indicates the start time for a change data capture (CDC) operation. The value is server time in UTC format."},"cdcStopTime":{"type":"string","description":"The property indicates the stop time for a change data capture (CDC) operation. The value is server time in UTC format."},"slotName":{"type":"string","description":"The property sets the name of a previously created logical replication slot for a change data capture (CDC) load of the source instance."}},"type":"object"},"aws-native:dms:DataMigrationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:dms:DataMigrationType":{"description":"The property describes the type of migration.","type":"string","enum":[{"name":"FullLoad","value":"full-load"},{"name":"Cdc","value":"cdc"},{"name":"FullLoadAndCdc","value":"full-load-and-cdc"}]},"aws-native:dms:DataProviderDb2SslModeValue":{"type":"string","enum":[{"name":"None","value":"none"},{"name":"VerifyCa","value":"verify-ca"}]},"aws-native:dms:DataProviderDmsSslModeValue":{"type":"string","enum":[{"name":"None","value":"none"},{"name":"Require","value":"require"},{"name":"VerifyCa","value":"verify-ca"},{"name":"VerifyFull","value":"verify-full"}]},"aws-native:dms:DataProviderEngine":{"description":"The property describes a data engine for the data provider.","type":"string","enum":[{"name":"Aurora","value":"aurora"},{"name":"AuroraPostgresql","value":"aurora_postgresql"},{"name":"Mysql","value":"mysql"},{"name":"Oracle","value":"oracle"},{"name":"Postgres","value":"postgres"},{"name":"Sqlserver","value":"sqlserver"},{"name":"Redshift","value":"redshift"},{"name":"Mariadb","value":"mariadb"},{"name":"Mongodb","value":"mongodb"},{"name":"Docdb","value":"docdb"},{"name":"Db2","value":"db2"},{"name":"Db2Zos","value":"db2_zos"},{"name":"Sybase","value":"sybase"}]},"aws-native:dms:DataProviderMongoDbAuthMechanism":{"type":"string","enum":[{"name":"Default","value":"default"},{"name":"MongodbCr","value":"mongodb_cr"},{"name":"ScramSha1","value":"scram_sha_1"}]},"aws-native:dms:DataProviderMongoDbAuthType":{"type":"string","enum":[{"name":"No","value":"no"},{"name":"Password","value":"password"}]},"aws-native:dms:DataProviderMongoDbSslModeValue":{"type":"string","enum":[{"name":"None","value":"none"},{"name":"Require","value":"require"},{"name":"VerifyFull","value":"verify-full"}]},"aws-native:dms:DataProviderSybaseSslModeValue":{"type":"string","enum":[{"name":"None","value":"none"},{"name":"Require","value":"require"},{"name":"VerifyCa","value":"verify-ca"}]},"aws-native:dms:DataProviderTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:dms:InstanceProfileNetworkType":{"description":"The property describes a network type for the instance profile.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dual","value":"DUAL"}]},"aws-native:dms:InstanceProfileTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:dms:MigrationProjectDataProviderDescriptor":{"description":"It is an object that describes Source and Target DataProviders and credentials for connecting to databases that are used in MigrationProject","properties":{"dataProviderArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data provider."},"dataProviderIdentifier":{"type":"string"},"dataProviderName":{"type":"string","description":"The user-friendly name of the data provider."},"secretsManagerAccessRoleArn":{"type":"string","description":"The ARN of the role used to access AWS Secrets Manager."},"secretsManagerSecretId":{"type":"string","description":"The identifier of the AWS Secrets Manager Secret used to store access credentials for the data provider."}},"type":"object"},"aws-native:dms:MigrationProjectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, , and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, , and -."}},"type":"object","required":["key","value"]},"aws-native:dms:ReplicationConfigComputeConfig":{"description":"Configuration parameters for provisioning a AWS DMS Serverless replication","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone where the AWS DMS Serverless replication using this configuration will run. The default value is a random, system-chosen Availability Zone in the configuration's AWS Region , for example, `\"us-west-2\"` . You can't set this parameter if the `MultiAZ` parameter is set to `true` ."},"dnsNameServers":{"type":"string","description":"A list of custom DNS name servers supported for the AWS DMS Serverless replication to access your source or target database. This list overrides the default name servers supported by the AWS DMS Serverless replication. You can specify a comma-separated list of internet addresses for up to four DNS name servers. For example: `\"1.1.1.1,2.2.2.2,3.3.3.3,4.4.4.4\"`"},"kmsKeyId":{"type":"string","description":"An AWS Key Management Service ( AWS  ) key Amazon Resource Name (ARN) that is used to encrypt the data during AWS DMS Serverless replication.\n\nIf you don't specify a value for the `KmsKeyId` parameter, AWS DMS uses your default encryption key.\n\nAWS  creates the default encryption key for your Amazon Web Services account. Your AWS account has a different default encryption key for each AWS Region ."},"maxCapacityUnits":{"type":"integer","description":"Specifies the maximum value of the AWS DMS capacity units (DCUs) for which a given AWS DMS Serverless replication can be provisioned. A single DCU is 2GB of RAM, with 1 DCU as the minimum value allowed. The list of valid DCU values includes 1, 2, 4, 8, 16, 32, 64, 128, 192, 256, and 384. So, the maximum value that you can specify for AWS DMS Serverless is 384. The `MaxCapacityUnits` parameter is the only DCU parameter you are required to specify."},"minCapacityUnits":{"type":"integer","description":"Specifies the minimum value of the AWS DMS capacity units (DCUs) for which a given AWS DMS Serverless replication can be provisioned. A single DCU is 2GB of RAM, with 1 DCU as the minimum value allowed. The list of valid DCU values includes 1, 2, 4, 8, 16, 32, 64, 128, 192, 256, and 384. So, the minimum DCU value that you can specify for AWS DMS Serverless is 1. If you don't set this value, AWS DMS sets this parameter to the minimum DCU value allowed, 1. If there is no current source activity, AWS DMS scales down your replication until it reaches the value specified in `MinCapacityUnits` ."},"multiAz":{"type":"boolean","description":"Specifies whether the AWS DMS Serverless replication is a Multi-AZ deployment. You can't set the `AvailabilityZone` parameter if the `MultiAZ` parameter is set to `true` ."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur for the AWS DMS Serverless replication, in Universal Coordinated Time (UTC). The format is `ddd:hh24:mi-ddd:hh24:mi` .\n\nThe default is a 30-minute window selected at random from an 8-hour block of time per AWS Region . This maintenance occurs on a random day of the week. Valid values for days of the week include `Mon` , `Tue` , `Wed` , `Thu` , `Fri` , `Sat` , and `Sun` .\n\nConstraints include a minimum 30-minute window."},"replicationSubnetGroupId":{"type":"string","description":"Specifies a subnet group identifier to associate with the AWS DMS Serverless replication."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"Specifies the virtual private cloud (VPC) security group to use with the AWS DMS Serverless replication. The VPC security group must work with the VPC containing the replication."}},"type":"object","required":["maxCapacityUnits"]},"aws-native:dms:ReplicationConfigReplicationType":{"description":"The type of AWS DMS Serverless replication to provision using this replication configuration","type":"string","enum":[{"name":"FullLoad","value":"full-load"},{"name":"FullLoadAndCdc","value":"full-load-and-cdc"},{"name":"Cdc","value":"cdc"}]},"aws-native:dms:ReplicationConfigTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:dms:SchemaConversionApplicationAttributesProperties":{"description":"The property describes schema conversion application attributes for the migration project.","properties":{"s3BucketPath":{"type":"string"},"s3BucketRoleArn":{"type":"string"}},"type":"object"},"aws-native:dms:SettingsProperties":{"description":"The property identifies the exact type of settings for the data provider.","properties":{"docDbSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesDocDbSettingsProperties","description":"DocDbSettings property identifier."},"ibmDb2LuwSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesIbmDb2LuwSettingsProperties","description":"IbmDb2LuwSettings property identifier."},"ibmDb2zOsSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesIbmDb2zOsSettingsProperties","description":"IbmDb2zOsSettings property identifier."},"mariaDbSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesMariaDbSettingsProperties","description":"MariaDbSettings property identifier."},"microsoftSqlServerSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesMicrosoftSqlServerSettingsProperties","description":"MicrosoftSqlServerSettings property identifier."},"mongoDbSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesMongoDbSettingsProperties","description":"MongoDbSettings property identifier."},"mySqlSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesMySqlSettingsProperties","description":"MySqlSettings property identifier."},"oracleSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesOracleSettingsProperties","description":"OracleSettings property identifier."},"postgreSqlSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesPostgreSqlSettingsProperties","description":"PostgreSqlSettings property identifier."},"redshiftSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesRedshiftSettingsProperties","description":"RedshiftSettings property identifier."},"sybaseAseSettings":{"$ref":"#/types/aws-native:dms:SettingsPropertiesSybaseAseSettingsProperties","description":"SybaseAseSettings property identifier."}},"type":"object"},"aws-native:dms:SettingsPropertiesDocDbSettingsProperties":{"description":"DocDbSettings property identifier.","properties":{"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderMongoDbSslModeValue"}},"type":"object","required":["databaseName","port","serverName"]},"aws-native:dms:SettingsPropertiesIbmDb2LuwSettingsProperties":{"description":"IbmDb2LuwSettings property identifier.","properties":{"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDb2SslModeValue"}},"type":"object","required":["databaseName","port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesIbmDb2zOsSettingsProperties":{"description":"IbmDb2zOsSettings property identifier.","properties":{"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDb2SslModeValue"}},"type":"object","required":["databaseName","port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesMariaDbSettingsProperties":{"description":"MariaDbSettings property identifier.","properties":{"certificateArn":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDmsSslModeValue"}},"type":"object","required":["port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesMicrosoftSqlServerSettingsProperties":{"description":"MicrosoftSqlServerSettings property identifier.","properties":{"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDmsSslModeValue"}},"type":"object","required":["databaseName","port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesMongoDbSettingsProperties":{"description":"MongoDbSettings property identifier.","properties":{"authMechanism":{"$ref":"#/types/aws-native:dms:DataProviderMongoDbAuthMechanism"},"authSource":{"type":"string"},"authType":{"$ref":"#/types/aws-native:dms:DataProviderMongoDbAuthType"},"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderMongoDbSslModeValue"}},"type":"object","required":["port","serverName"]},"aws-native:dms:SettingsPropertiesMySqlSettingsProperties":{"description":"MySqlSettings property identifier.","properties":{"certificateArn":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDmsSslModeValue"}},"type":"object","required":["port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesOracleSettingsProperties":{"description":"OracleSettings property identifier.","properties":{"asmServer":{"type":"string"},"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"secretsManagerOracleAsmAccessRoleArn":{"type":"string"},"secretsManagerOracleAsmSecretId":{"type":"string"},"secretsManagerSecurityDbEncryptionAccessRoleArn":{"type":"string"},"secretsManagerSecurityDbEncryptionSecretId":{"type":"string"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDmsSslModeValue"}},"type":"object","required":["databaseName","port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesPostgreSqlSettingsProperties":{"description":"PostgreSqlSettings property identifier.","properties":{"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderDmsSslModeValue"}},"type":"object","required":["databaseName","port","serverName","sslMode"]},"aws-native:dms:SettingsPropertiesRedshiftSettingsProperties":{"description":"RedshiftSettings property identifier.","properties":{"databaseName":{"type":"string"},"port":{"type":"integer"},"serverName":{"type":"string"}},"type":"object","required":["databaseName","port","serverName"]},"aws-native:dms:SettingsPropertiesSybaseAseSettingsProperties":{"description":"SybaseAseSettings property identifier.","properties":{"certificateArn":{"type":"string"},"databaseName":{"type":"string"},"encryptPassword":{"type":"boolean"},"port":{"type":"integer"},"serverName":{"type":"string"},"sslMode":{"$ref":"#/types/aws-native:dms:DataProviderSybaseSslModeValue"}},"type":"object","required":["port","serverName","sslMode"]},"aws-native:docdb:GlobalClusterEngine":{"description":"The database engine to use for this global cluster.","type":"string","enum":[{"name":"Docdb","value":"docdb"}]},"aws-native:docdb:GlobalClusterTag":{"description":"A key-value pair to associate with an Amazon DocumentDB resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:docdbelastic:ClusterTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:dsql:ClusterTag":{"description":"A map of key and value pairs to use to tag your cluster.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:dsql:EncryptionDetailsProperties":{"description":"The encryption configuration details for the cluster.","properties":{"encryptionStatus":{"type":"string","description":"The status of encryption for the cluster."},"encryptionType":{"type":"string","description":"The type of encryption that protects data in the cluster."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key that encrypts data in the cluster."}},"type":"object"},"aws-native:dsql:MultiRegionPropertiesProperties":{"description":"The Multi-region properties associated to this cluster.","properties":{"clusters":{"type":"array","items":{"type":"string"},"description":"The set of peered clusters that form the multi-Region cluster configuration. Each peered cluster represents a database instance in a different Region."},"witnessRegion":{"type":"string","description":"The witness region in a multi-region cluster."}},"type":"object"},"aws-native:dynamodb:GlobalTableAttributeDefinition":{"properties":{"attributeName":{"type":"string","description":"A name for the attribute."},"attributeType":{"type":"string","description":"The data type for the attribute, where:\n\n- `S` - the attribute is of type String\n- `N` - the attribute is of type Number\n- `B` - the attribute is of type Binary"}},"type":"object","required":["attributeName","attributeType"]},"aws-native:dynamodb:GlobalTableCapacityAutoScalingSettings":{"properties":{"maxCapacity":{"type":"integer","description":"The maximum provisioned capacity units for the global table."},"minCapacity":{"type":"integer","description":"The minimum provisioned capacity units for the global table."},"seedCapacity":{"type":"integer","description":"When switching billing mode from `PAY_PER_REQUEST` to `PROVISIONED` , DynamoDB requires you to specify read and write capacity unit values for the table and for each global secondary index. These values will be applied to all replicas. The table will use these provisioned values until CloudFormation creates the autoscaling policies you configured in your template. CloudFormation cannot determine what capacity the table and its global secondary indexes will require in this time period, since they are application-dependent.\n\nIf you want to switch a table's billing mode from `PAY_PER_REQUEST` to `PROVISIONED` , you must specify a value for this property for each autoscaled resource. If you specify different values for the same resource in different regions, CloudFormation will use the highest value found in either the `SeedCapacity` or `ReadCapacityUnits` properties. For example, if your global secondary index `myGSI` has a `SeedCapacity` of 10 in us-east-1 and a fixed `ReadCapacityUnits` of 20 in eu-west-1, CloudFormation will initially set the read capacity for `myGSI` to 20. Note that if you disable `ScaleIn` for `myGSI` in us-east-1, its read capacity units might not be set back to 10.\n\nYou must also specify a value for `SeedCapacity` when you plan to switch a table's billing mode from `PROVISIONED` to `PAY_PER_REQUEST` , because CloudFormation might need to roll back the operation (reverting the billing mode to `PROVISIONED` ) and this cannot succeed without specifying a value for `SeedCapacity` ."},"targetTrackingScalingPolicyConfiguration":{"$ref":"#/types/aws-native:dynamodb:GlobalTableTargetTrackingScalingPolicyConfiguration","description":"Defines a target tracking scaling policy."}},"type":"object","required":["maxCapacity","minCapacity","targetTrackingScalingPolicyConfiguration"]},"aws-native:dynamodb:GlobalTableContributorInsightsSpecification":{"properties":{"enabled":{"type":"boolean","description":"Indicates whether CloudWatch Contributor Insights are to be enabled (true) or disabled (false)."},"mode":{"$ref":"#/types/aws-native:dynamodb:GlobalTableContributorInsightsSpecificationMode","description":"Specifies the CloudWatch Contributor Insights mode for a global table. Valid values are `ACCESSED_AND_THROTTLED_KEYS` (tracks all access and throttled events) or `THROTTLED_KEYS` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the global table."}},"type":"object","required":["enabled"]},"aws-native:dynamodb:GlobalTableContributorInsightsSpecificationMode":{"description":"Specifies the CloudWatch Contributor Insights mode for a global table. Valid values are `ACCESSED_AND_THROTTLED_KEYS` (tracks all access and throttled events) or `THROTTLED_KEYS` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the global table.","type":"string","enum":[{"name":"AccessedAndThrottledKeys","value":"ACCESSED_AND_THROTTLED_KEYS"},{"name":"ThrottledKeys","value":"THROTTLED_KEYS"}]},"aws-native:dynamodb:GlobalTableGlobalReadProvisionedThroughputSettings":{"properties":{"readCapacityUnits":{"type":"integer"}},"type":"object"},"aws-native:dynamodb:GlobalTableGlobalSecondaryIndex":{"properties":{"indexName":{"type":"string","description":"The name of the global secondary index. The name must be unique among all other indexes on this table."},"keySchema":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKeySchema"},"description":"The complete key schema for a global secondary index, which consists of one or more pairs of attribute names and key types:\n\n- `HASH` - partition key\n- `RANGE` - sort key\n\n\u003e The partition key of an item is also known as its *hash attribute* . The term \"hash attribute\" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values.\n\u003e \n\u003e The sort key of an item is also known as its *range attribute* . The term \"range attribute\" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value."},"projection":{"$ref":"#/types/aws-native:dynamodb:GlobalTableProjection","description":"Represents attributes that are copied (projected) from the table into the global secondary index. These are in addition to the primary key attributes and index key attributes, which are automatically projected."},"readOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings"},"readProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalReadProvisionedThroughputSettings"},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWarmThroughput","description":"Represents the warm throughput value (in read units per second and write units per second) for the specified secondary index. If you use this parameter, you must specify `ReadUnitsPerSecond` , `WriteUnitsPerSecond` , or both."},"writeOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteOnDemandThroughputSettings","description":"Sets the write request settings for a global table or a global secondary index. You can only specify this setting if your resource uses the `PAY_PER_REQUEST` `BillingMode` ."},"writeProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteProvisionedThroughputSettings","description":"Defines write capacity settings for the global secondary index. You must specify a value for this property if the table's `BillingMode` is `PROVISIONED` . All replicas will have the same write capacity settings for this global secondary index."}},"type":"object","required":["indexName","keySchema","projection"]},"aws-native:dynamodb:GlobalTableKeySchema":{"properties":{"attributeName":{"type":"string","description":"The name of a key attribute."},"keyType":{"type":"string","description":"The role that this key attribute will assume:\n\n- `HASH` - partition key\n- `RANGE` - sort key\n\n\u003e The partition key of an item is also known as its *hash attribute* . The term \"hash attribute\" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values.\n\u003e \n\u003e The sort key of an item is also known as its *range attribute* . The term \"range attribute\" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value."}},"type":"object","required":["attributeName","keyType"]},"aws-native:dynamodb:GlobalTableKinesisStreamSpecification":{"properties":{"approximateCreationDateTimePrecision":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKinesisStreamSpecificationApproximateCreationDateTimePrecision","description":"The precision for the time and date that the stream was created."},"streamArn":{"type":"string","description":"The ARN for a specific Kinesis data stream."}},"type":"object","required":["streamArn"]},"aws-native:dynamodb:GlobalTableKinesisStreamSpecificationApproximateCreationDateTimePrecision":{"description":"The precision for the time and date that the stream was created.","type":"string","enum":[{"name":"Microsecond","value":"MICROSECOND"},{"name":"Millisecond","value":"MILLISECOND"}]},"aws-native:dynamodb:GlobalTableLocalSecondaryIndex":{"properties":{"indexName":{"type":"string","description":"The name of the local secondary index. The name must be unique among all other indexes on this table."},"keySchema":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKeySchema"},"description":"The complete key schema for the local secondary index, consisting of one or more pairs of attribute names and key types:\n\n- `HASH` - partition key\n- `RANGE` - sort key\n\n\u003e The partition key of an item is also known as its *hash attribute* . The term \"hash attribute\" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values.\n\u003e \n\u003e The sort key of an item is also known as its *range attribute* . The term \"range attribute\" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value."},"projection":{"$ref":"#/types/aws-native:dynamodb:GlobalTableProjection","description":"Represents attributes that are copied (projected) from the table into the local secondary index. These are in addition to the primary key attributes and index key attributes, which are automatically projected."}},"type":"object","required":["indexName","keySchema","projection"]},"aws-native:dynamodb:GlobalTableMultiRegionConsistency":{"description":"Specifies the consistency mode for a new global table.\n\nYou can specify one of the following consistency modes:\n\n- `EVENTUAL` : Configures a new global table for multi-Region eventual consistency (MREC).\n- `STRONG` : Configures a new global table for multi-Region strong consistency (MRSC).\n\nIf you don't specify this field, the global table consistency mode defaults to `EVENTUAL` . For more information about global tables consistency modes, see [Consistency modes](https://docs.aws.amazon.com/V2globaltables_HowItWorks.html#V2globaltables_HowItWorks.consistency-modes) in DynamoDB developer guide.","type":"string","enum":[{"name":"Eventual","value":"EVENTUAL"},{"name":"Strong","value":"STRONG"}]},"aws-native:dynamodb:GlobalTablePointInTimeRecoverySpecification":{"properties":{"pointInTimeRecoveryEnabled":{"type":"boolean","description":"Indicates whether point in time recovery is enabled (true) or disabled (false) on the table."},"recoveryPeriodInDays":{"type":"integer","description":"The number of preceding days for which continuous backups are taken and maintained. Your table data is only recoverable to any point-in-time from within the configured recovery period. This parameter is optional. If no value is provided, the value will default to 35."}},"type":"object"},"aws-native:dynamodb:GlobalTableProjection":{"properties":{"nonKeyAttributes":{"type":"array","items":{"type":"string"},"description":"Represents the non-key attribute names which will be projected into the index.\n\nFor global and local secondary indexes, the total count of `NonKeyAttributes` summed across all of the secondary indexes, must not exceed 100. If you project the same attribute into two different indexes, this counts as two distinct attributes when determining the total. This limit only applies when you specify the ProjectionType of `INCLUDE` . You still can specify the ProjectionType of `ALL` to project all attributes from the source table, even if the table has more than 100 attributes."},"projectionType":{"type":"string","description":"The set of attributes that are projected into the index:\n\n- `KEYS_ONLY` - Only the index and primary keys are projected into the index.\n- `INCLUDE` - In addition to the attributes described in `KEYS_ONLY` , the secondary index will include other non-key attributes that you specify.\n- `ALL` - All of the table attributes are projected into the index.\n\nWhen using the DynamoDB console, `ALL` is selected by default."}},"type":"object"},"aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings":{"properties":{"maxReadRequestUnits":{"type":"integer","description":"Maximum number of read request units for the specified replica of a global table."}},"type":"object"},"aws-native:dynamodb:GlobalTableReadProvisionedThroughputSettings":{"properties":{"readCapacityAutoScalingSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableCapacityAutoScalingSettings","description":"Specifies auto scaling settings for the replica table or global secondary index."},"readCapacityUnits":{"type":"integer","description":"Specifies a fixed read capacity for the replica table or global secondary index."}},"type":"object"},"aws-native:dynamodb:GlobalTableReplicaGlobalSecondaryIndexSpecification":{"properties":{"contributorInsightsSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableContributorInsightsSpecification","description":"Updates the status for contributor insights for a specific table or index. CloudWatch Contributor Insights for DynamoDB graphs display the partition key and (if applicable) sort key of frequently accessed items and frequently throttled items in plaintext. If you require the use of AWS Key Management Service (KMS) to encrypt this table’s partition key and sort key data with an AWS managed key or customer managed key, you should not enable CloudWatch Contributor Insights for DynamoDB for this table."},"indexName":{"type":"string","description":"The name of the global secondary index. The name must be unique among all other indexes on this table."},"readOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings","description":"Sets the read request settings for a replica global secondary index. You can only specify this setting if your resource uses the `PAY_PER_REQUEST` `BillingMode` ."},"readProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadProvisionedThroughputSettings","description":"Allows you to specify the read capacity settings for a replica global secondary index when the `BillingMode` is set to `PROVISIONED` ."}},"type":"object","required":["indexName"]},"aws-native:dynamodb:GlobalTableReplicaSpecification":{"properties":{"contributorInsightsSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableContributorInsightsSpecification","description":"The settings used to enable or disable CloudWatch Contributor Insights for the specified replica. When not specified, defaults to contributor insights disabled for the replica."},"deletionProtectionEnabled":{"type":"boolean","description":"Determines if a replica is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see [Using deletion protection](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection) in the *Amazon DynamoDB Developer Guide* ."},"globalSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaGlobalSecondaryIndexSpecification"},"description":"Defines additional settings for the global secondary indexes of this replica."},"globalTableSettingsReplicationMode":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaSpecificationGlobalTableSettingsReplicationMode"},"kinesisStreamSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKinesisStreamSpecification","description":"Defines the Kinesis Data Streams configuration for the specified replica."},"pointInTimeRecoverySpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTablePointInTimeRecoverySpecification","description":"The settings used to enable point in time recovery. When not specified, defaults to point in time recovery disabled for the replica."},"readOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings","description":"Sets read request settings for the replica table."},"readProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadProvisionedThroughputSettings","description":"Defines read capacity settings for the replica table."},"region":{"type":"string","description":"The region in which this replica exists."},"replicaStreamSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaStreamSpecification","description":"Represents the DynamoDB Streams configuration for a global table replica."},"resourcePolicy":{"$ref":"#/types/aws-native:dynamodb:GlobalTableResourcePolicy","description":"A resource-based policy document that contains permissions to add to the specified replica of a DynamoDB global table. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.\n\nIn a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see [Using resource-based policies for DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html) ."},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaSseSpecification","description":"Allows you to specify a customer-managed key for the replica. When using customer-managed keys for server-side encryption, this property must have a value in all replicas."},"tableClass":{"type":"string","description":"The table class of the specified table. Valid values are `STANDARD` and `STANDARD_INFREQUENT_ACCESS` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableTag"},"description":"An array of key-value pairs to apply to this replica.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["region"]},"aws-native:dynamodb:GlobalTableReplicaSpecificationGlobalTableSettingsReplicationMode":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:dynamodb:GlobalTableReplicaSseSpecification":{"properties":{"kmsMasterKeyId":{"type":"string","description":"The AWS  key that should be used for the AWS  encryption. To specify a key, use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. Note that you should only provide this parameter if the key is different from the default DynamoDB key `alias/aws/dynamodb` ."}},"type":"object","required":["kmsMasterKeyId"]},"aws-native:dynamodb:GlobalTableReplicaStreamSpecification":{"properties":{"resourcePolicy":{"$ref":"#/types/aws-native:dynamodb:GlobalTableResourcePolicy","description":"A resource-based policy document that contains the permissions for the specified stream of a DynamoDB global table replica. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.\n\nIn a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see [Using resource-based policies for DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html) .\n\nYou can update the `ResourcePolicy` property if you've specified more than one table using the [AWS ::DynamoDB::GlobalTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-globaltable.html) resource."}},"type":"object","required":["resourcePolicy"]},"aws-native:dynamodb:GlobalTableResourcePolicy":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A resource-based policy document that contains permissions to add to the specified DynamoDB table, its indexes, and stream. In a CloudFormation template, you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to DynamoDB . For more information about resource-based policies, see [Using resource-based policies for DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html) ."}},"type":"object","required":["policyDocument"]},"aws-native:dynamodb:GlobalTableSseSpecification":{"properties":{"sseEnabled":{"type":"boolean","description":"Indicates whether server-side encryption is performed using an AWS managed key or an AWS owned key. If enabled (true), server-side encryption type is set to KMS and an AWS managed key is used ( AWS  charges apply). If disabled (false) or not specified,server-side encryption is set to an AWS owned key. If you choose to use KMS encryption, you can also use customer managed KMS keys by specifying them in the `ReplicaSpecification.SSESpecification` object. You cannot mix AWS managed and customer managed KMS keys."},"sseType":{"type":"string","description":"Server-side encryption type. The only supported value is:\n\n- `KMS` - Server-side encryption that uses AWS Key Management Service . The key is stored in your account and is managed by AWS  ( AWS  charges apply)."}},"type":"object","required":["sseEnabled"]},"aws-native:dynamodb:GlobalTableStreamSpecification":{"properties":{"streamViewType":{"type":"string","description":"When an item in the table is modified, `StreamViewType` determines what information is written to the stream for this table. Valid values for `StreamViewType` are:\n\n- `KEYS_ONLY` - Only the key attributes of the modified item are written to the stream.\n- `NEW_IMAGE` - The entire item, as it appears after it was modified, is written to the stream.\n- `OLD_IMAGE` - The entire item, as it appeared before it was modified, is written to the stream.\n- `NEW_AND_OLD_IMAGES` - Both the new and the old item images of the item are written to the stream."}},"type":"object","required":["streamViewType"]},"aws-native:dynamodb:GlobalTableTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Tag keys are case sensitive. Each DynamoDB table can only have up to one tag with the same key. If you try to add an existing tag (same key), the existing tag value will be updated to the new value."},"value":{"type":"string","description":"The value of the tag. Tag values are case-sensitive and can be null."}},"type":"object","required":["key","value"]},"aws-native:dynamodb:GlobalTableTargetTrackingScalingPolicyConfiguration":{"properties":{"disableScaleIn":{"type":"boolean","description":"Indicates whether scale in by the target tracking scaling policy is disabled. The default value is `false` ."},"scaleInCooldown":{"type":"integer","description":"The amount of time, in seconds, after a scale-in activity completes before another scale-in activity can start."},"scaleOutCooldown":{"type":"integer","description":"The amount of time, in seconds, after a scale-out activity completes before another scale-out activity can start."},"targetValue":{"type":"number","description":"Defines a target value for the scaling policy."}},"type":"object","required":["targetValue"]},"aws-native:dynamodb:GlobalTableTimeToLiveSpecification":{"properties":{"attributeName":{"type":"string","description":"The name of the attribute used to store the expiration time for items in the table.\n\nCurrently, you cannot directly change the attribute name used to evaluate time to live. In order to do so, you must first disable time to live, and then re-enable it with the new attribute name. It can take up to one hour for changes to time to live to take effect. If you attempt to modify time to live within that time window, your stack operation might be delayed."},"enabled":{"type":"boolean","description":"Indicates whether TTL is to be enabled (true) or disabled (false) on the table."}},"type":"object","required":["enabled"]},"aws-native:dynamodb:GlobalTableWarmThroughput":{"properties":{"readUnitsPerSecond":{"type":"integer","description":"Represents the number of read operations your base table can instantaneously support."},"writeUnitsPerSecond":{"type":"integer","description":"Represents the number of write operations your base table can instantaneously support."}},"type":"object"},"aws-native:dynamodb:GlobalTableWitness":{"properties":{"region":{"type":"string","description":"The name of the AWS Region that serves as a witness for the MRSC global table."}},"type":"object"},"aws-native:dynamodb:GlobalTableWriteOnDemandThroughputSettings":{"properties":{"maxWriteRequestUnits":{"type":"integer","description":"Maximum number of write request settings for the specified replica of a global table."}},"type":"object"},"aws-native:dynamodb:GlobalTableWriteProvisionedThroughputSettings":{"properties":{"writeCapacityAutoScalingSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableCapacityAutoScalingSettings","description":"Specifies auto scaling settings for the replica table or global secondary index."}},"type":"object"},"aws-native:dynamodb:TableAttributeDefinition":{"description":"Represents an attribute for describing the schema for the table and indexes.","properties":{"attributeName":{"type":"string","description":"A name for the attribute."},"attributeType":{"type":"string","description":"The data type for the attribute, where:\n  +  ``S`` - the attribute is of type String\n  +  ``N`` - the attribute is of type Number\n  +  ``B`` - the attribute is of type Binary"}},"type":"object","required":["attributeName","attributeType"]},"aws-native:dynamodb:TableContributorInsightsSpecification":{"description":"Configures contributor insights settings for a table or one of its indexes.","properties":{"enabled":{"type":"boolean","description":"Indicates whether CloudWatch Contributor Insights are to be enabled (true) or disabled (false)."},"mode":{"$ref":"#/types/aws-native:dynamodb:TableContributorInsightsSpecificationMode","description":"Specifies the CloudWatch Contributor Insights mode for a table. Valid values are ``ACCESSED_AND_THROTTLED_KEYS`` (tracks all access and throttled events) or ``THROTTLED_KEYS`` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the table."}},"type":"object","required":["enabled"]},"aws-native:dynamodb:TableContributorInsightsSpecificationMode":{"description":"Specifies the CloudWatch Contributor Insights mode for a table. Valid values are ``ACCESSED_AND_THROTTLED_KEYS`` (tracks all access and throttled events) or ``THROTTLED_KEYS`` (tracks only throttled events). This setting determines what type of contributor insights data is collected for the table.","type":"string","enum":[{"name":"AccessedAndThrottledKeys","value":"ACCESSED_AND_THROTTLED_KEYS"},{"name":"ThrottledKeys","value":"THROTTLED_KEYS"}]},"aws-native:dynamodb:TableCsv":{"description":"The options for imported source files in CSV format. The values are Delimiter and HeaderList.","properties":{"delimiter":{"type":"string","description":"The delimiter used for separating items in the CSV file being imported."},"headerList":{"type":"array","items":{"type":"string"},"description":"List of the headers used to specify a common header for all source CSV files being imported. If this field is specified then the first line of each CSV file is treated as data instead of the header. If this field is not specified the the first line of each CSV file is treated as the header."}},"type":"object"},"aws-native:dynamodb:TableGlobalSecondaryIndex":{"description":"Represents the properties of a global secondary index.","properties":{"contributorInsightsSpecification":{"$ref":"#/types/aws-native:dynamodb:TableContributorInsightsSpecification","description":"The settings used to specify whether to enable CloudWatch Contributor Insights for the global table and define which events to monitor."},"indexName":{"type":"string","description":"The name of the global secondary index. The name must be unique among all other indexes on this table."},"keySchema":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableKeySchema"},"description":"The complete key schema for a global secondary index, which consists of one or more pairs of attribute names and key types:\n  +  ``HASH`` - partition key\n  +  ``RANGE`` - sort key\n  \n  The partition key of an item is also known as its *hash attribute*. The term \"hash attribute\" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values.\n The sort key of an item is also known as its *range attribute*. The term \"range attribute\" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value."},"onDemandThroughput":{"$ref":"#/types/aws-native:dynamodb:TableOnDemandThroughput","description":"The maximum number of read and write units for the specified global secondary index. If you use this parameter, you must specify ``MaxReadRequestUnits``, ``MaxWriteRequestUnits``, or both. You must use either ``OnDemandThroughput`` or ``ProvisionedThroughput`` based on your table's capacity mode."},"projection":{"$ref":"#/types/aws-native:dynamodb:TableProjection","description":"Represents attributes that are copied (projected) from the table into the global secondary index. These are in addition to the primary key attributes and index key attributes, which are automatically projected."},"provisionedThroughput":{"$ref":"#/types/aws-native:dynamodb:TableProvisionedThroughput","description":"Represents the provisioned throughput settings for the specified global secondary index. You must use either ``OnDemandThroughput`` or ``ProvisionedThroughput`` based on your table's capacity mode.\n For current minimum and maximum provisioned throughput values, see [Service, Account, and Table Quotas](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html) in the *Amazon DynamoDB Developer Guide*."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:TableWarmThroughput","description":"Represents the warm throughput value (in read units per second and write units per second) for the specified secondary index. If you use this parameter, you must specify ``ReadUnitsPerSecond``, ``WriteUnitsPerSecond``, or both."}},"type":"object","required":["indexName","keySchema","projection"]},"aws-native:dynamodb:TableImportSourceSpecification":{"description":"Specifies the properties of data being imported from the S3 bucket source to the table.","properties":{"inputCompressionType":{"type":"string","description":"Type of compression to be used on the input coming from the imported table."},"inputFormat":{"type":"string","description":"The format of the source data. Valid values for ``ImportFormat`` are ``CSV``, ``DYNAMODB_JSON`` or ``ION``."},"inputFormatOptions":{"$ref":"#/types/aws-native:dynamodb:TableInputFormatOptions","description":"Additional properties that specify how the input is formatted,"},"s3BucketSource":{"$ref":"#/types/aws-native:dynamodb:TableS3BucketSource","description":"The S3 bucket that provides the source for the import."}},"type":"object","required":["inputFormat","s3BucketSource"]},"aws-native:dynamodb:TableInputFormatOptions":{"description":"The format options for the data that was imported into the target table. There is one value, CsvOption.","properties":{"csv":{"$ref":"#/types/aws-native:dynamodb:TableCsv","description":"The options for imported source files in CSV format. The values are Delimiter and HeaderList."}},"type":"object"},"aws-native:dynamodb:TableKeySchema":{"description":"Represents *a single element* of a key schema. A key schema specifies the attributes that make up the primary key of a table, or the key attributes of an index.\n A ``KeySchemaElement`` represents exactly one attribute of the primary key. For example, a simple primary key would be represented by one ``KeySchemaElement`` (for the partition key). A composite primary key would require one ``KeySchemaElement`` for the partition key, and another ``KeySchemaElement`` for the sort key.\n A ``KeySchemaElement`` must be a scalar, top-level attribute (not a nested attribute). The data type must be one of String, Number, or Binary. The attribute cannot be nested within a List or a Map.","properties":{"attributeName":{"type":"string","description":"The name of a key attribute."},"keyType":{"type":"string","description":"The role that this key attribute will assume:\n  +  ``HASH`` - partition key\n  +  ``RANGE`` - sort key\n  \n  The partition key of an item is also known as its *hash attribute*. The term \"hash attribute\" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values.\n The sort key of an item is also known as its *range attribute*. The term \"range attribute\" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value."}},"type":"object","required":["attributeName","keyType"]},"aws-native:dynamodb:TableKinesisStreamSpecification":{"description":"The Kinesis Data Streams configuration for the specified table.","properties":{"approximateCreationDateTimePrecision":{"$ref":"#/types/aws-native:dynamodb:TableKinesisStreamSpecificationApproximateCreationDateTimePrecision","description":"The precision for the time and date that the stream was created."},"streamArn":{"type":"string","description":"The ARN for a specific Kinesis data stream.\n Length Constraints: Minimum length of 37. Maximum length of 1024."}},"type":"object","required":["streamArn"]},"aws-native:dynamodb:TableKinesisStreamSpecificationApproximateCreationDateTimePrecision":{"description":"The precision for the time and date that the stream was created.","type":"string","enum":[{"name":"Microsecond","value":"MICROSECOND"},{"name":"Millisecond","value":"MILLISECOND"}]},"aws-native:dynamodb:TableLocalSecondaryIndex":{"description":"Represents the properties of a local secondary index. A local secondary index can only be created when its parent table is created.","properties":{"indexName":{"type":"string","description":"The name of the local secondary index. The name must be unique among all other indexes on this table."},"keySchema":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableKeySchema"},"description":"The complete key schema for the local secondary index, consisting of one or more pairs of attribute names and key types:\n  +  ``HASH`` - partition key\n  +  ``RANGE`` - sort key\n  \n  The partition key of an item is also known as its *hash attribute*. The term \"hash attribute\" derives from DynamoDB's usage of an internal hash function to evenly distribute data items across partitions, based on their partition key values.\n The sort key of an item is also known as its *range attribute*. The term \"range attribute\" derives from the way DynamoDB stores items with the same partition key physically close together, in sorted order by the sort key value."},"projection":{"$ref":"#/types/aws-native:dynamodb:TableProjection","description":"Represents attributes that are copied (projected) from the table into the local secondary index. These are in addition to the primary key attributes and index key attributes, which are automatically projected."}},"type":"object","required":["indexName","keySchema","projection"]},"aws-native:dynamodb:TableOnDemandThroughput":{"description":"Sets the maximum number of read and write units for the specified on-demand table. If you use this property, you must specify ``MaxReadRequestUnits``, ``MaxWriteRequestUnits``, or both.","properties":{"maxReadRequestUnits":{"type":"integer","description":"Maximum number of read request units for the specified table.\n To specify a maximum ``OnDemandThroughput`` on your table, set the value of ``MaxReadRequestUnits`` as greater than or equal to 1. To remove the maximum ``OnDemandThroughput`` that is currently set on your table, set the value of ``MaxReadRequestUnits`` to -1."},"maxWriteRequestUnits":{"type":"integer","description":"Maximum number of write request units for the specified table.\n To specify a maximum ``OnDemandThroughput`` on your table, set the value of ``MaxWriteRequestUnits`` as greater than or equal to 1. To remove the maximum ``OnDemandThroughput`` that is currently set on your table, set the value of ``MaxWriteRequestUnits`` to -1."}},"type":"object"},"aws-native:dynamodb:TablePointInTimeRecoverySpecification":{"description":"The settings used to enable point in time recovery.","properties":{"pointInTimeRecoveryEnabled":{"type":"boolean","description":"Indicates whether point in time recovery is enabled (true) or disabled (false) on the table."},"recoveryPeriodInDays":{"type":"integer","description":"The number of preceding days for which continuous backups are taken and maintained. Your table data is only recoverable to any point-in-time from within the configured recovery period. This parameter is optional. If no value is provided, the value will default to 35."}},"type":"object"},"aws-native:dynamodb:TableProjection":{"description":"Represents attributes that are copied (projected) from the table into an index. These are in addition to the primary key attributes and index key attributes, which are automatically projected.","properties":{"nonKeyAttributes":{"type":"array","items":{"type":"string"},"description":"Represents the non-key attribute names which will be projected into the index.\n For global and local secondary indexes, the total count of ``NonKeyAttributes`` summed across all of the secondary indexes, must not exceed 100. If you project the same attribute into two different indexes, this counts as two distinct attributes when determining the total. This limit only applies when you specify the ProjectionType of ``INCLUDE``. You still can specify the ProjectionType of ``ALL`` to project all attributes from the source table, even if the table has more than 100 attributes."},"projectionType":{"type":"string","description":"The set of attributes that are projected into the index:\n  +  ``KEYS_ONLY`` - Only the index and primary keys are projected into the index.\n  +  ``INCLUDE`` - In addition to the attributes described in ``KEYS_ONLY``, the secondary index will include other non-key attributes that you specify.\n  +  ``ALL`` - All of the table attributes are projected into the index.\n  \n When using the DynamoDB console, ``ALL`` is selected by default."}},"type":"object"},"aws-native:dynamodb:TableProvisionedThroughput":{"description":"Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits``. For more information about the contents of a provisioned throughput structure, see [Table ProvisionedThroughput](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html).","properties":{"readCapacityUnits":{"type":"integer","description":"The maximum number of strongly consistent reads consumed per second before DynamoDB returns a ``ThrottlingException``. For more information, see [Specifying Read and Write Requirements](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/ProvisionedThroughput.html) in the *Amazon DynamoDB Developer Guide*.\n If read/write capacity mode is ``PAY_PER_REQUEST`` the value is set to 0."},"writeCapacityUnits":{"type":"integer","description":"The maximum number of writes consumed per second before DynamoDB returns a ``ThrottlingException``. For more information, see [Specifying Read and Write Requirements](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/ProvisionedThroughput.html) in the *Amazon DynamoDB Developer Guide*.\n If read/write capacity mode is ``PAY_PER_REQUEST`` the value is set to 0."}},"type":"object","required":["readCapacityUnits","writeCapacityUnits"]},"aws-native:dynamodb:TableResourcePolicy":{"description":"Creates or updates a resource-based policy document that contains the permissions for DDB resources, such as a table, its indexes, and stream. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.\n In a CFNshort template, you can provide the policy in JSON or YAML format because CFNshort converts YAML to JSON before submitting it to DDB. For more information about resource-based policies, see [Using resource-based policies for](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html).\n While defining resource-based policies in your CFNshort templates, the following considerations apply:\n  +  The maximum size supported for a resource-based policy document in JSON format is 20 KB. DDB counts whitespaces when calculating the size of a policy against this limit. \n  +  Resource-based policies don't support [drift detection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html#). If you update a policy outside of the CFNshort stack template, you'll need to update the CFNshort stack with the changes.\n  +  Resource-based policies don't support out-of-band changes. If you add, update, or delete a policy outside of the CFNshort template, the change won't be overwritten if there are no changes to the policy within the template.\n For example, say that your template contains a resource-based policy, which you later update outside of the template. If you don't make any changes to the policy in the template, the updated policy in DDB won’t be synced with the policy in the template.\n Conversely, say that your template doesn’t contain a resource-based policy, but you add a policy outside of the template. This policy won’t be removed from DDB as long as you don’t add it to the template. When you add a policy to the template and update the stack, the existing policy in DDB will be updated to match the one defined in the template.\n  \n For a full list of all considerations, see [Resource-based policy considerations](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html).","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A resource-based policy document that contains permissions to add to the specified DDB table, index, or both. In a CFNshort template, you can provide the policy in JSON or YAML format because CFNshort converts YAML to JSON before submitting it to DDB. For more information about resource-based policies, see [Using resource-based policies for](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html)."}},"type":"object","required":["policyDocument"]},"aws-native:dynamodb:TableS3BucketSource":{"description":"The S3 bucket that is being imported from.","properties":{"s3Bucket":{"type":"string","description":"The S3 bucket that is being imported from."},"s3BucketOwner":{"type":"string","description":"The account number of the S3 bucket that is being imported from. If the bucket is owned by the requester this is optional."},"s3KeyPrefix":{"type":"string","description":"The key prefix shared by all S3 Objects that are being imported."}},"type":"object","required":["s3Bucket"]},"aws-native:dynamodb:TableSseSpecification":{"description":"Represents the settings used to enable server-side encryption.","properties":{"kmsMasterKeyId":{"type":"string","description":"The KMS key that should be used for the KMS encryption. To specify a key, use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. Note that you should only provide this parameter if the key is different from the default DynamoDB key ``alias/aws/dynamodb``."},"sseEnabled":{"type":"boolean","description":"Indicates whether server-side encryption is done using an AWS managed key or an AWS owned key. If enabled (true), server-side encryption type is set to ``KMS`` and an AWS managed key is used (KMS charges apply). If disabled (false) or not specified, server-side encryption is set to AWS owned key."},"sseType":{"type":"string","description":"Server-side encryption type. The only supported value is:\n  +  ``KMS`` - Server-side encryption that uses KMSlong. The key is stored in your account and is managed by KMS (KMS charges apply)."}},"type":"object","required":["sseEnabled"]},"aws-native:dynamodb:TableStreamSpecification":{"description":"Represents the DynamoDB Streams configuration for a table in DynamoDB.","properties":{"resourcePolicy":{"$ref":"#/types/aws-native:dynamodb:TableResourcePolicy","description":"Creates or updates a resource-based policy document that contains the permissions for DDB resources, such as a table's streams. Resource-based policies let you define access permissions by specifying who has access to each resource, and the actions they are allowed to perform on each resource.\n  When you remove the ``StreamSpecification`` property from the template, DynamoDB disables the stream but retains any attached resource policy until the stream is deleted after 24 hours. When you modify the ``StreamViewType`` property, DynamoDB creates a new stream and retains the old stream's resource policy. The old stream and its resource policy are deleted after the 24-hour retention period.\n  In a CFNshort template, you can provide the policy in JSON or YAML format because CFNshort converts YAML to JSON before submitting it to DDB. For more information about resource-based policies, see [Using resource-based policies for](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/access-control-resource-based.html) and [Resource-based policy examples](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-examples.html)."},"streamViewType":{"type":"string","description":"When an item in the table is modified, ``StreamViewType`` determines what information is written to the stream for this table. Valid values for ``StreamViewType`` are:\n  +  ``KEYS_ONLY`` - Only the key attributes of the modified item are written to the stream.\n  +  ``NEW_IMAGE`` - The entire item, as it appears after it was modified, is written to the stream.\n  +  ``OLD_IMAGE`` - The entire item, as it appeared before it was modified, is written to the stream.\n  +  ``NEW_AND_OLD_IMAGES`` - Both the new and the old item images of the item are written to the stream."}},"type":"object","required":["streamViewType"]},"aws-native:dynamodb:TableTag":{"description":"Describes a tag. A tag is a key-value pair. You can add up to 50 tags to a single DynamoDB table. \n AWS-assigned tag names and values are automatically assigned the ``aws:`` prefix, which the user cannot assign. AWS-assigned tag names do not count towards the tag limit of 50. User-assigned tag names have the prefix ``user:`` in the Cost Allocation Report. You cannot backdate the application of a tag.\n For an overview on tagging DynamoDB resources, see [Tagging for DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Tagging.html) in the *Amazon DynamoDB Developer Guide*.","properties":{"key":{"type":"string","description":"The key of the tag. Tag keys are case sensitive. Each DynamoDB table can only have up to one tag with the same key. If you try to add an existing tag (same key), the existing tag value will be updated to the new value."},"value":{"type":"string","description":"The value of the tag. Tag values are case-sensitive and can be null."}},"type":"object","required":["key","value"]},"aws-native:dynamodb:TableTimeToLiveSpecification":{"description":"Represents the settings used to enable or disable Time to Live (TTL) for the specified table.","properties":{"attributeName":{"type":"string","description":"The name of the TTL attribute used to store the expiration time for items in the table.\n   +  The ``AttributeName`` property is required when enabling the TTL, or when TTL is already enabled.\n  +  To update this property, you must first disable TTL and then enable TTL with the new attribute name."},"enabled":{"type":"boolean","description":"Indicates whether TTL is to be enabled (true) or disabled (false) on the table."}},"type":"object","required":["enabled"]},"aws-native:dynamodb:TableWarmThroughput":{"description":"Provides visibility into the number of read and write operations your table or secondary index can instantaneously support. The settings can be modified using the ``UpdateTable`` operation to meet the throughput requirements of an upcoming peak event.","properties":{"readUnitsPerSecond":{"type":"integer","description":"Represents the number of read operations your base table can instantaneously support."},"writeUnitsPerSecond":{"type":"integer","description":"Represents the number of write operations your base table can instantaneously support."}},"type":"object"},"aws-native:ec2:BlockPublicAccessStatesProperties":{"properties":{"internetGatewayBlockMode":{"type":"string","description":"The mode of VPC BPA. Options here are off, block-bidirectional, block-ingress "}},"type":"object"},"aws-native:ec2:CapacityManagerDataExportOutputFormat":{"description":"The format of the exported capacity manager data. Choose 'csv' for comma-separated values or 'parquet' for optimized columnar storage format.","type":"string","enum":[{"name":"Csv","value":"csv"},{"name":"Parquet","value":"parquet"}]},"aws-native:ec2:CapacityManagerDataExportSchedule":{"description":"The schedule for the capacity manager data export. Currently supports hourly exports that provide periodic snapshots of capacity manager data.","type":"string","enum":[{"name":"Hourly","value":"hourly"}]},"aws-native:ec2:CapacityManagerDataExportTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:CapacityReservationCapacityAllocation":{"properties":{"allocationType":{"type":"string","description":"The usage type. `used` indicates that the instance capacity is in use by instances that are running in the Capacity Reservation."},"count":{"type":"integer","description":"The amount of instance capacity associated with the usage. For example a value of `4` indicates that instance capacity for 4 instances is currently in use."}},"type":"object"},"aws-native:ec2:CapacityReservationFleetInstanceMatchCriteria":{"description":"Indicates the type of instance launches that the Capacity Reservation Fleet accepts. All Capacity Reservations in the Fleet inherit this instance matching criteria.\n\nCurrently, Capacity Reservation Fleets support `open` instance matching criteria only. This means that instances that have matching attributes (instance type, platform, and Availability Zone) run in the Capacity Reservations automatically. Instances do not need to explicitly target a Capacity Reservation Fleet to use its reserved capacity.","type":"string","enum":[{"name":"Open","value":"open"}]},"aws-native:ec2:CapacityReservationFleetInstanceTypeSpecification":{"properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which the Capacity Reservation Fleet reserves the capacity. A Capacity Reservation Fleet can't span Availability Zones. All instance type specifications that you specify for the Fleet must use the same Availability Zone."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which the Capacity Reservation Fleet reserves the capacity. A Capacity Reservation Fleet can't span Availability Zones. All instance type specifications that you specify for the Fleet must use the same Availability Zone."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the Capacity Reservation Fleet supports EBS-optimized instances types. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using EBS-optimized instance types."},"instancePlatform":{"type":"string","description":"The type of operating system for which the Capacity Reservation Fleet reserves capacity."},"instanceType":{"type":"string","description":"The instance type for which the Capacity Reservation Fleet reserves capacity."},"priority":{"type":"integer","description":"The priority to assign to the instance type. This value is used to determine which of the instance types specified for the Fleet should be prioritized for use. A lower value indicates a high priority. For more information, see [Instance type priority](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#instance-priority) in the *Amazon EC2 User Guide* ."},"weight":{"type":"number","description":"The number of capacity units provided by the specified instance type. This value, together with the total target capacity that you specify for the Fleet determine the number of instances for which the Fleet reserves capacity. Both values are based on units that make sense for your workload. For more information, see [Total target capacity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity) in the Amazon EC2 User Guide.\n\nValid Range: Minimum value of `0.001` . Maximum value of `99.999` ."}},"type":"object"},"aws-native:ec2:CapacityReservationFleetTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:CapacityReservationFleetTagSpecification":{"properties":{"resourceType":{"type":"string","description":"The type of resource to tag on creation. Specify `capacity-reservation-fleet` .\n\nTo tag a resource after it has been created, see [CreateTags](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetTag"},"description":"The tags to apply to the resource."}},"type":"object"},"aws-native:ec2:CapacityReservationFleetTenancy":{"description":"Indicates the tenancy of the Capacity Reservation Fleet. All Capacity Reservations in the Fleet inherit this tenancy. The Capacity Reservation Fleet can have one of the following tenancy settings:\n\n- `default` - The Capacity Reservation Fleet is created on hardware that is shared with other AWS accounts .\n- `dedicated` - The Capacity Reservations are created on single-tenant hardware that is dedicated to a single AWS account .","type":"string","enum":[{"name":"Default","value":"default"}]},"aws-native:ec2:CapacityReservationTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:CapacityReservationTagSpecification":{"properties":{"resourceType":{"type":"string","description":"The type of resource to tag. Specify `capacity-reservation` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationTag"},"description":"The tags to apply to the resource."}},"type":"object"},"aws-native:ec2:CarrierGatewayTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:ec2:CommitmentInfoProperties":{"properties":{"commitmentEndDate":{"type":"string","description":"The date and time at which the commitment duration expires, in the ISO8601 format in the UTC time zone ( `YYYY-MM-DDThh:mm:ss.sssZ` ). You can't decrease the instance count or cancel the Capacity Reservation before this date and time."},"committedInstanceCount":{"type":"integer","description":"The instance capacity that you committed to when you requested the future-dated Capacity Reservation."}},"type":"object"},"aws-native:ec2:CpuOptionsProperties":{"description":"The CPU options for the instance.","properties":{"coreCount":{"type":"integer","description":"The number of CPU cores for the instance."},"threadsPerCore":{"type":"integer","description":"The number of threads per CPU core."}},"type":"object"},"aws-native:ec2:CreditSpecificationProperties":{"description":"The credit option for CPU usage of the burstable performance instance. Valid values are standard and unlimited.","properties":{"cpuCredits":{"type":"string","description":"The credit option for CPU usage of the instance.\n\nValid values: `standard` | `unlimited`\n\nT3 instances with `host` tenancy do not support the `unlimited` CPU credit option."}},"type":"object"},"aws-native:ec2:CustomerGatewayTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:DestinationOptionsProperties":{"description":"The destination options.","properties":{"fileFormat":{"$ref":"#/types/aws-native:ec2:FlowLogDestinationOptionsPropertiesFileFormat","description":"The format for the flow log. The default is `plain-text` ."},"hiveCompatiblePartitions":{"type":"boolean","description":"Indicates whether to use Hive-compatible prefixes for flow logs stored in Amazon S3. The default is `false` ."},"perHourPartition":{"type":"boolean","description":"Indicates whether to partition the flow log per hour. This reduces the cost and response time for queries. The default is `false` ."}},"type":"object","required":["fileFormat","hiveCompatiblePartitions","perHourPartition"]},"aws-native:ec2:DhcpOptionsTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:Ec2FleetAcceleratorCountRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of accelerators. To specify no maximum limit, omit this parameter. To exclude accelerator-enabled instance types, set `Max` to `0` ."},"min":{"type":"integer","description":"The minimum number of accelerators. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetAcceleratorTotalMemoryMiBRequest":{"properties":{"max":{"type":"integer","description":"The maximum amount of accelerator memory, in MiB. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum amount of accelerator memory, in MiB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetBaselineEbsBandwidthMbpsRequest":{"properties":{"max":{"type":"integer","description":"The maximum baseline bandwidth, in Mbps. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum baseline bandwidth, in Mbps. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetBaselinePerformanceFactorsRequest":{"properties":{"cpu":{"$ref":"#/types/aws-native:ec2:Ec2FleetCpuPerformanceFactorRequest","description":"The CPU performance to consider, using an instance family as the baseline reference."}},"type":"object"},"aws-native:ec2:Ec2FleetBlockDeviceMapping":{"properties":{"deviceName":{"type":"string","description":"The device name. For available device names, see [Device names for volumes](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.html) ."},"ebs":{"$ref":"#/types/aws-native:ec2:Ec2FleetEbsBlockDevice","description":"Parameters used to automatically set up EBS volumes when the instance is launched."},"noDevice":{"type":"string","description":"To omit the device from the block device mapping, specify an empty string. When this property is specified, the device is removed from the block device mapping regardless of the assigned value."},"virtualName":{"type":"string","description":"The virtual device name ( `ephemeral` N). Instance store volumes are numbered starting from 0. An instance type with 2 available instance store volumes can specify mappings for `ephemeral0` and `ephemeral1` . The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume.\n\nNVMe instance store volumes are automatically enumerated and assigned a device name. Including them in your block device mapping has no effect.\n\nConstraints: For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI."}},"type":"object"},"aws-native:ec2:Ec2FleetCapacityRebalance":{"properties":{"replacementStrategy":{"$ref":"#/types/aws-native:ec2:Ec2FleetCapacityRebalanceReplacementStrategy","description":"The replacement strategy to use. Only available for fleets of type `maintain` .\n\n`launch` - EC2 Fleet launches a replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet. EC2 Fleet does not terminate the instances that receive a rebalance notification. You can terminate the old instances, or you can leave them running. You are charged for all instances while they are running.\n\n`launch-before-terminate` - EC2 Fleet launches a replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet, and then, after a delay that you specify (in `TerminationDelay` ), terminates the instances that received a rebalance notification."},"terminationDelay":{"type":"integer","description":"The amount of time (in seconds) that Amazon EC2 waits before terminating the old Spot Instance after launching a new replacement Spot Instance.\n\nRequired when `ReplacementStrategy` is set to `launch-before-terminate` .\n\nNot valid when `ReplacementStrategy` is set to `launch` .\n\nValid values: Minimum value of `120` seconds. Maximum value of `7200` seconds."}},"type":"object"},"aws-native:ec2:Ec2FleetCapacityRebalanceReplacementStrategy":{"description":"The replacement strategy to use. Only available for fleets of type `maintain` .\n\n`launch` - EC2 Fleet launches a replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet. EC2 Fleet does not terminate the instances that receive a rebalance notification. You can terminate the old instances, or you can leave them running. You are charged for all instances while they are running.\n\n`launch-before-terminate` - EC2 Fleet launches a replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet, and then, after a delay that you specify (in `TerminationDelay` ), terminates the instances that received a rebalance notification.","type":"string","enum":[{"name":"Launch","value":"launch"},{"name":"LaunchBeforeTerminate","value":"launch-before-terminate"}]},"aws-native:ec2:Ec2FleetCapacityReservationOptionsRequest":{"properties":{"usageStrategy":{"$ref":"#/types/aws-native:ec2:Ec2FleetCapacityReservationOptionsRequestUsageStrategy","description":"Indicates whether to use unused Capacity Reservations for fulfilling On-Demand capacity.\n\nIf you specify `use-capacity-reservations-first` , the fleet uses unused Capacity Reservations to fulfill On-Demand capacity up to the target On-Demand capacity. If multiple instance pools have unused Capacity Reservations, the On-Demand allocation strategy ( `lowest-price` or `prioritized` ) is applied. If the number of unused Capacity Reservations is less than the On-Demand target capacity, the remaining On-Demand target capacity is launched according to the On-Demand allocation strategy ( `lowest-price` or `prioritized` ).\n\nIf you do not specify a value, the fleet fulfils the On-Demand capacity according to the chosen On-Demand allocation strategy."}},"type":"object"},"aws-native:ec2:Ec2FleetCapacityReservationOptionsRequestUsageStrategy":{"description":"Indicates whether to use unused Capacity Reservations for fulfilling On-Demand capacity.\n\nIf you specify `use-capacity-reservations-first` , the fleet uses unused Capacity Reservations to fulfill On-Demand capacity up to the target On-Demand capacity. If multiple instance pools have unused Capacity Reservations, the On-Demand allocation strategy ( `lowest-price` or `prioritized` ) is applied. If the number of unused Capacity Reservations is less than the On-Demand target capacity, the remaining On-Demand target capacity is launched according to the On-Demand allocation strategy ( `lowest-price` or `prioritized` ).\n\nIf you do not specify a value, the fleet fulfils the On-Demand capacity according to the chosen On-Demand allocation strategy.","type":"string","enum":[{"name":"UseCapacityReservationsFirst","value":"use-capacity-reservations-first"}]},"aws-native:ec2:Ec2FleetCpuPerformanceFactorRequest":{"properties":{"references":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetPerformanceFactorReferenceRequest"},"description":"Specify an instance family to use as the baseline reference for CPU performance. All instance types that match your specified attributes will be compared against the CPU performance of the referenced instance family, regardless of CPU manufacturer or architecture differences.\n\n\u003e Currently, only one instance family can be specified in the list."}},"type":"object"},"aws-native:ec2:Ec2FleetEbsBlockDevice":{"properties":{"deleteOnTermination":{"type":"boolean","description":"Indicates whether the EBS volume is deleted on instance termination. For more information, see [Preserving Amazon EBS volumes on instance termination](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination) in the *Amazon EC2 User Guide* ."},"encrypted":{"type":"boolean","description":"Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to `true` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see [Amazon EBS encryption](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption.html#encryption-parameters) in the *Amazon EBS User Guide* .\n\nIn no case can you remove encryption from an encrypted volume.\n\nEncrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see [Supported instance types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-encryption-requirements.html#ebs-encryption_supported_instances) .\n\n- If you are creating a block device mapping for a *new (empty) volume* , you can include this parameter, and specify either `true` for an encrypted volume, or `false` for an unencrypted volume. If you omit this parameter, it defaults to `false` (unencrypted).\n- If you are creating a block device mapping from an *existing encrypted or unencrypted snapshot* , you must omit this parameter. If you include this parameter, the request will fail, regardless of the value that you specify.\n- If you are creating a block device mapping from an *existing unencrypted volume* , you can include this parameter, but you must specify `false` . If you specify `true` , the request will fail. In this case, we recommend that you omit the parameter.\n- If you are creating a block device mapping from an *existing encrypted volume* , you can include this parameter, and specify either `true` or `false` . However, if you specify `false` , the parameter is ignored and the block device mapping is always encrypted. In this case, we recommend that you omit the parameter."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS). For `gp3` , `io1` , and `io2` volumes, this represents the number of IOPS that are provisioned for the volume. For `gp2` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.\n\nThe following are the supported values for each volume type:\n\n- `gp3` : 3,000 - 80,000 IOPS\n- `io1` : 100 - 64,000 IOPS\n- `io2` : 100 - 256,000 IOPS\n\nFor `io2` volumes, you can achieve up to 256,000 IOPS on [instances built on the Nitro System](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances) . On other instances, you can achieve performance up to 32,000 IOPS.\n\nThis parameter is required for `io1` and `io2` volumes. The default for `gp3` volumes is 3,000 IOPS."},"kmsKeyId":{"type":"string","description":"Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption.\n\nThis parameter is only supported on `BlockDeviceMapping` objects called by [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) , [RequestSpotFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet.html) , and [RequestSpotInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotInstances.html) ."},"snapshotId":{"type":"string","description":"The ID of the snapshot."},"volumeSize":{"type":"integer","description":"The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size.\n\nThe following are the supported sizes for each volume type:\n\n- `gp2` : 1 - 16,384 GiB\n- `gp3` : 1 - 65,536 GiB\n- `io1` : 4 - 16,384 GiB\n- `io2` : 4 - 65,536 GiB\n- `st1` and `sc1` : 125 - 16,384 GiB\n- `standard` : 1 - 1024 GiB"},"volumeType":{"$ref":"#/types/aws-native:ec2:Ec2FleetEbsBlockDeviceVolumeType","description":"The volume type. For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide* ."}},"type":"object"},"aws-native:ec2:Ec2FleetEbsBlockDeviceVolumeType":{"description":"The volume type. For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide* .","type":"string","enum":[{"name":"Gp2","value":"gp2"},{"name":"Gp3","value":"gp3"},{"name":"Io1","value":"io1"},{"name":"Io2","value":"io2"},{"name":"Sc1","value":"sc1"},{"name":"St1","value":"st1"},{"name":"Standard","value":"standard"}]},"aws-native:ec2:Ec2FleetExcessCapacityTerminationPolicy":{"description":"Indicates whether running instances should be terminated if the total target capacity of the EC2 Fleet is decreased below the current size of the EC2 Fleet.\n\nSupported only for fleets of type `maintain` .","type":"string","enum":[{"name":"Termination","value":"termination"},{"name":"NoTermination","value":"no-termination"}]},"aws-native:ec2:Ec2FleetFleetLaunchTemplateConfigRequest":{"properties":{"launchTemplateSpecification":{"$ref":"#/types/aws-native:ec2:Ec2FleetFleetLaunchTemplateSpecificationRequest","description":"The launch template to use. You must specify either the launch template ID or launch template name in the request."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetFleetLaunchTemplateOverridesRequest"},"description":"Any parameters that you specify override the same parameters in the launch template.\n\nFor fleets of type `request` and `maintain` , a maximum of 300 items is allowed across all launch templates."}},"type":"object"},"aws-native:ec2:Ec2FleetFleetLaunchTemplateOverridesRequest":{"properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to launch the instances. For example, `us-east-2a` .\n\nEither `AvailabilityZone` or `AvailabilityZoneId` must be specified in the request, but not both."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which to launch the instances. For example, `use2-az1` .\n\nEither `AvailabilityZone` or `AvailabilityZoneId` must be specified in the request, but not both."},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetBlockDeviceMapping"},"description":"The block device mappings, which define the EBS volumes and instance store volumes to attach to the instance at launch.\n\nSupported only for fleets of type `instant` .\n\nFor more information, see [Block device mappings for volumes on Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html) in the *Amazon EC2 User Guide* ."},"instanceRequirements":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequest","description":"The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with those attributes.\n\n\u003e If you specify `InstanceRequirements` , you can't specify `InstanceType` ."},"instanceType":{"type":"string","description":"The instance type.\n\n`mac1.metal` is not supported as a launch template override.\n\n\u003e If you specify `InstanceType` , you can't specify `InstanceRequirements` ."},"maxPrice":{"type":"string","description":"The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.\n\n\u003e If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.\n\u003e \n\u003e If you specify a maximum price, it must be more than USD $0.001. Specifying a value below USD $0.001 will result in an `InvalidParameterValue` error message."},"placement":{"$ref":"#/types/aws-native:ec2:Ec2FleetPlacement","description":"The location where the instance launched, if applicable."},"priority":{"type":"number","description":"The priority for the launch template override. The highest priority is launched first.\n\nIf the On-Demand `AllocationStrategy` is set to `prioritized` , EC2 Fleet uses priority to determine which launch template override to use first in fulfilling On-Demand capacity.\n\nIf the Spot `AllocationStrategy` is set to `capacity-optimized-prioritized` , EC2 Fleet uses priority on a best-effort basis to determine which launch template override to use in fulfilling Spot capacity, but optimizes for capacity first.\n\nValid values are whole numbers starting at `0` . The lower the number, the higher the priority. If no number is set, the launch template override has the lowest priority. You can set the same priority for different launch template overrides."},"subnetId":{"type":"string","description":"The IDs of the subnets in which to launch the instances. Separate multiple subnet IDs using commas (for example, `subnet-1234abcdeexample1, subnet-0987cdef6example2` ). A request of type `instant` can have only one subnet ID."},"weightedCapacity":{"type":"number","description":"The number of units provided by the specified instance type. These are the same units that you chose to set the target capacity in terms of instances, or a performance characteristic such as vCPUs, memory, or I/O.\n\nIf the target capacity divided by this value is not a whole number, Amazon EC2 rounds the number of instances to the next whole number. If this value is not specified, the default is 1.\n\n\u003e When specifying weights, the price used in the `lowest-price` and `price-capacity-optimized` allocation strategies is per *unit* hour (where the instance price is divided by the specified weight). However, if all the specified weights are above the requested `TargetCapacity` , resulting in only 1 instance being launched, the price used is per *instance* hour."}},"type":"object"},"aws-native:ec2:Ec2FleetFleetLaunchTemplateSpecificationRequest":{"properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template.\n\nYou must specify the `LaunchTemplateId` or the `LaunchTemplateName` , but not both."},"launchTemplateName":{"type":"string","description":"The name of the launch template.\n\nYou must specify the `LaunchTemplateName` or the `LaunchTemplateId` , but not both."},"version":{"type":"string","description":"The launch template version number, `$Latest` , or `$Default` . You must specify a value, otherwise the request fails.\n\nIf the value is `$Latest` , Amazon EC2 uses the latest version of the launch template.\n\nIf the value is `$Default` , Amazon EC2 uses the default version of the launch template."}},"type":"object","required":["version"]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequest":{"properties":{"acceleratorCount":{"$ref":"#/types/aws-native:ec2:Ec2FleetAcceleratorCountRequest","description":"The minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) on an instance.\n\nTo exclude accelerator-enabled instance types, set `Max` to `0` .\n\nDefault: No minimum or maximum limits"},"acceleratorManufacturers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestAcceleratorManufacturersItem"},"description":"Indicates whether instance types must have accelerators by specific manufacturers.\n\n- For instance types with AWS devices, specify `amazon-web-services` .\n- For instance types with AMD devices, specify `amd` .\n- For instance types with Habana devices, specify `habana` .\n- For instance types with NVIDIA devices, specify `nvidia` .\n- For instance types with Xilinx devices, specify `xilinx` .\n\nDefault: Any manufacturer"},"acceleratorNames":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestAcceleratorNamesItem"},"description":"The accelerators that must be on the instance type.\n\n- For instance types with NVIDIA A10G GPUs, specify `a10g` .\n- For instance types with NVIDIA A100 GPUs, specify `a100` .\n- For instance types with NVIDIA H100 GPUs, specify `h100` .\n- For instance types with AWS Inferentia chips, specify `inferentia` .\n- For instance types with AWS Inferentia2 chips, specify `inferentia2` .\n- For instance types with Habana Gaudi HL-205 GPUs, specify `gaudi-hl-205` .\n- For instance types with NVIDIA GRID K520 GPUs, specify `k520` .\n- For instance types with NVIDIA K80 GPUs, specify `k80` .\n- For instance types with NVIDIA L4 GPUs, specify `l4` .\n- For instance types with NVIDIA L40S GPUs, specify `l40s` .\n- For instance types with NVIDIA M60 GPUs, specify `m60` .\n- For instance types with AMD Radeon Pro V520 GPUs, specify `radeon-pro-v520` .\n- For instance types with AWS Trainium chips, specify `trainium` .\n- For instance types with AWS Trainium2 chips, specify `trainium2` .\n- For instance types with NVIDIA T4 GPUs, specify `t4` .\n- For instance types with NVIDIA T4G GPUs, specify `t4g` .\n- For instance types with Xilinx U30 cards, specify `u30` .\n- For instance types with Xilinx VU9P FPGAs, specify `vu9p` .\n- For instance types with NVIDIA V100 GPUs, specify `v100` .\n\nDefault: Any accelerator"},"acceleratorTotalMemoryMiB":{"$ref":"#/types/aws-native:ec2:Ec2FleetAcceleratorTotalMemoryMiBRequest","description":"The minimum and maximum amount of total accelerator memory, in MiB.\n\nDefault: No minimum or maximum limits"},"acceleratorTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestAcceleratorTypesItem"},"description":"The accelerator types that must be on the instance type.\n\n- For instance types with FPGA accelerators, specify `fpga` .\n- For instance types with GPU accelerators, specify `gpu` .\n- For instance types with Inference accelerators, specify `inference` .\n- For instance types with Media accelerators, specify `media` .\n\nDefault: Any accelerator type"},"allowedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes.\n\nYou can use strings with one or more wild cards, represented by an asterisk ( `*` ), to allow an instance type, size, or generation. The following are examples: `m5.8xlarge` , `c5*.*` , `m5a.*` , `r*` , `*3*` .\n\nFor example, if you specify `c5*` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify `m5a.*` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types.\n\n\u003e If you specify `AllowedInstanceTypes` , you can't specify `ExcludedInstanceTypes` . \n\nDefault: All instance types"},"bareMetal":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestBareMetal","description":"Indicates whether bare metal instance types must be included, excluded, or required.\n\n- To include bare metal instance types, specify `included` .\n- To require only bare metal instance types, specify `required` .\n- To exclude bare metal instance types, specify `excluded` .\n\nDefault: `excluded`"},"baselineEbsBandwidthMbps":{"$ref":"#/types/aws-native:ec2:Ec2FleetBaselineEbsBandwidthMbpsRequest","description":"The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see [Amazon EBS–optimized instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html) in the *Amazon EC2 User Guide* .\n\nDefault: No minimum or maximum limits"},"baselinePerformanceFactors":{"$ref":"#/types/aws-native:ec2:Ec2FleetBaselinePerformanceFactorsRequest","description":"The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide* ."},"burstablePerformance":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestBurstablePerformance","description":"Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see [Burstable performance instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html) .\n\n- To include burstable performance instance types, specify `included` .\n- To require only burstable performance instance types, specify `required` .\n- To exclude burstable performance instance types, specify `excluded` .\n\nDefault: `excluded`"},"cpuManufacturers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestCpuManufacturersItem"},"description":"The CPU manufacturers to include.\n\n- For instance types with Intel CPUs, specify `intel` .\n- For instance types with AMD CPUs, specify `amd` .\n- For instance types with AWS CPUs, specify `amazon-web-services` .\n- For instance types with Apple CPUs, specify `apple` .\n\n\u003e Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. \n\nDefault: Any manufacturer"},"excludedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to exclude.\n\nYou can use strings with one or more wild cards, represented by an asterisk ( `*` ), to exclude an instance family, type, size, or generation. The following are examples: `m5.8xlarge` , `c5*.*` , `m5a.*` , `r*` , `*3*` .\n\nFor example, if you specify `c5*` ,Amazon EC2 will exclude the entire C5 instance family, which includes all C5a and C5n instance types. If you specify `m5a.*` , Amazon EC2 will exclude all the M5a instance types, but not the M5n instance types.\n\n\u003e If you specify `ExcludedInstanceTypes` , you can't specify `AllowedInstanceTypes` . \n\nDefault: No excluded instance types"},"instanceGenerations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestInstanceGenerationsItem"},"description":"Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide* .\n\nFor current generation instance types, specify `current` .\n\nFor previous generation instance types, specify `previous` .\n\nDefault: Current and previous generation instance types"},"localStorage":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestLocalStorage","description":"Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, [Amazon EC2 instance store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html) in the *Amazon EC2 User Guide* .\n\n- To include instance types with instance store volumes, specify `included` .\n- To require only instance types with instance store volumes, specify `required` .\n- To exclude instance types with instance store volumes, specify `excluded` .\n\nDefault: `included`"},"localStorageTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetInstanceRequirementsRequestLocalStorageTypesItem"},"description":"The type of local storage that is required.\n\n- For instance types with hard disk drive (HDD) storage, specify `hdd` .\n- For instance types with solid state drive (SSD) storage, specify `ssd` .\n\nDefault: `hdd` and `ssd`"},"maxSpotPriceAsPercentageOfOptimalOnDemandPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.\n\nThe parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n\nIf you set `TargetCapacityUnitType` to `vcpu` or `memory-mib` , the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.\n\n\u003e Only one of `SpotMaxPricePercentageOverLowestPrice` or `MaxSpotPriceAsPercentageOfOptimalOnDemandPrice` can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as `999999` ."},"memoryGiBPerVCpu":{"$ref":"#/types/aws-native:ec2:Ec2FleetMemoryGiBPerVCpuRequest","description":"The minimum and maximum amount of memory per vCPU, in GiB.\n\nDefault: No minimum or maximum limits"},"memoryMiB":{"$ref":"#/types/aws-native:ec2:Ec2FleetMemoryMiBRequest","description":"The minimum and maximum amount of memory, in MiB."},"networkBandwidthGbps":{"$ref":"#/types/aws-native:ec2:Ec2FleetNetworkBandwidthGbpsRequest","description":"The minimum and maximum amount of baseline network bandwidth, in gigabits per second (Gbps). For more information, see [Amazon EC2 instance network bandwidth](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html) in the *Amazon EC2 User Guide* .\n\nDefault: No minimum or maximum limits"},"networkInterfaceCount":{"$ref":"#/types/aws-native:ec2:Ec2FleetNetworkInterfaceCountRequest","description":"The minimum and maximum number of network interfaces.\n\nDefault: No minimum or maximum limits"},"onDemandMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.\n\nThe parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n\nTo indicate no price protection threshold, specify a high value, such as `999999` .\n\nThis parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) and [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) .\n\n\u003e If you set `TargetCapacityUnitType` to `vcpu` or `memory-mib` , the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per-instance price. \n\nDefault: `20`"},"requireEncryptionInTransit":{"type":"boolean","description":"Specifies whether instance types must support encrypting in-transit traffic between instances. For more information, including the supported instance types, see [Encryption in transit](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit) in the *Amazon EC2 User Guide* .\n\nDefault: `false`"},"requireHibernateSupport":{"type":"boolean","description":"Indicates whether instance types must support hibernation for On-Demand Instances.\n\nThis parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) .\n\nDefault: `false`"},"spotMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage higher than an identified Spot price. The identified Spot price is the Spot price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified Spot price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose Spot price exceeds your specified threshold.\n\nThe parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n\nIf you set `TargetCapacityUnitType` to `vcpu` or `memory-mib` , the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per-instance price.\n\nThis parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) and [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) .\n\n\u003e Only one of `SpotMaxPricePercentageOverLowestPrice` or `MaxSpotPriceAsPercentageOfOptimalOnDemandPrice` can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as `999999` . \n\nDefault: `100`"},"totalLocalStorageGb":{"$ref":"#/types/aws-native:ec2:Ec2FleetTotalLocalStorageGbRequest","description":"The minimum and maximum amount of total local storage, in GB.\n\nDefault: No minimum or maximum limits"},"vCpuCount":{"$ref":"#/types/aws-native:ec2:Ec2FleetVCpuCountRangeRequest","description":"The minimum and maximum number of vCPUs."}},"type":"object"},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestAcceleratorManufacturersItem":{"type":"string","enum":[{"name":"AmazonWebServices","value":"amazon-web-services"},{"name":"Amd","value":"amd"},{"name":"Habana","value":"habana"},{"name":"Nvidia","value":"nvidia"},{"name":"Xilinx","value":"xilinx"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestAcceleratorNamesItem":{"type":"string","enum":[{"name":"A10g","value":"a10g"},{"name":"A100","value":"a100"},{"name":"H100","value":"h100"},{"name":"Inferentia","value":"inferentia"},{"name":"K520","value":"k520"},{"name":"K80","value":"k80"},{"name":"M60","value":"m60"},{"name":"RadeonProV520","value":"radeon-pro-v520"},{"name":"T4","value":"t4"},{"name":"T4g","value":"t4g"},{"name":"Vu9p","value":"vu9p"},{"name":"V100","value":"v100"},{"name":"L40s","value":"l40s"},{"name":"L4","value":"l4"},{"name":"GaudiHl205","value":"gaudi-hl-205"},{"name":"Inferentia2","value":"inferentia2"},{"name":"Trainium","value":"trainium"},{"name":"Trainium2","value":"trainium2"},{"name":"U30","value":"u30"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestAcceleratorTypesItem":{"type":"string","enum":[{"name":"Gpu","value":"gpu"},{"name":"Fpga","value":"fpga"},{"name":"Inference","value":"inference"},{"name":"Media","value":"media"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestBareMetal":{"description":"Indicates whether bare metal instance types must be included, excluded, or required.\n\n- To include bare metal instance types, specify `included` .\n- To require only bare metal instance types, specify `required` .\n- To exclude bare metal instance types, specify `excluded` .\n\nDefault: `excluded`","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestBurstablePerformance":{"description":"Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see [Burstable performance instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html) .\n\n- To include burstable performance instance types, specify `included` .\n- To require only burstable performance instance types, specify `required` .\n- To exclude burstable performance instance types, specify `excluded` .\n\nDefault: `excluded`","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestCpuManufacturersItem":{"type":"string","enum":[{"name":"Intel","value":"intel"},{"name":"Amd","value":"amd"},{"name":"AmazonWebServices","value":"amazon-web-services"},{"name":"Apple","value":"apple"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestInstanceGenerationsItem":{"type":"string","enum":[{"name":"Current","value":"current"},{"name":"Previous","value":"previous"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestLocalStorage":{"description":"Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, [Amazon EC2 instance store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html) in the *Amazon EC2 User Guide* .\n\n- To include instance types with instance store volumes, specify `included` .\n- To require only instance types with instance store volumes, specify `required` .\n- To exclude instance types with instance store volumes, specify `excluded` .\n\nDefault: `included`","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ec2:Ec2FleetInstanceRequirementsRequestLocalStorageTypesItem":{"type":"string","enum":[{"name":"Hdd","value":"hdd"},{"name":"Ssd","value":"ssd"}]},"aws-native:ec2:Ec2FleetMaintenanceStrategies":{"properties":{"capacityRebalance":{"$ref":"#/types/aws-native:ec2:Ec2FleetCapacityRebalance","description":"The strategy to use when Amazon EC2 emits a signal that your Spot Instance is at an elevated risk of being interrupted."}},"type":"object"},"aws-native:ec2:Ec2FleetMemoryGiBPerVCpuRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of memory per vCPU, in GiB. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of memory per vCPU, in GiB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetMemoryMiBRequest":{"properties":{"max":{"type":"integer","description":"The maximum amount of memory, in MiB. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum amount of memory, in MiB. To specify no minimum limit, specify `0` ."}},"type":"object"},"aws-native:ec2:Ec2FleetNetworkBandwidthGbpsRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of network bandwidth, in Gbps. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of network bandwidth, in Gbps. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetNetworkInterfaceCountRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of network interfaces. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum number of network interfaces. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetOnDemandOptionsRequest":{"properties":{"allocationStrategy":{"type":"string","description":"The strategy that determines the order of the launch template overrides to use in fulfilling On-Demand capacity.\n\n`lowest-price` - EC2 Fleet uses price to determine the order, launching the lowest price first.\n\n`prioritized` - EC2 Fleet uses the priority that you assigned to each launch template override, launching the highest priority first.\n\nDefault: `lowest-price`"},"capacityReservationOptions":{"$ref":"#/types/aws-native:ec2:Ec2FleetCapacityReservationOptionsRequest","description":"The strategy for using unused Capacity Reservations for fulfilling On-Demand capacity.\n\nSupported only for fleets of type `instant` ."},"maxTotalPrice":{"type":"string","description":"The maximum amount per hour for On-Demand Instances that you're willing to pay.\n\n\u003e If your fleet includes T instances that are configured as `unlimited` , and if their average CPU usage exceeds the baseline utilization, you will incur a charge for surplus credits. The `MaxTotalPrice` does not account for surplus credits, and, if you use surplus credits, your final cost might be higher than what you specified for `MaxTotalPrice` . For more information, see [Surplus credits can incur charges](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits) in the *Amazon EC2 User Guide* ."},"minTargetCapacity":{"type":"integer","description":"The minimum target capacity for On-Demand Instances in the fleet. If this minimum capacity isn't reached, no instances are launched.\n\nConstraints: Maximum value of `1000` . Supported only for fleets of type `instant` .\n\nAt least one of the following must be specified: `SingleAvailabilityZone` | `SingleInstanceType`"},"singleAvailabilityZone":{"type":"boolean","description":"Indicates that the fleet launches all On-Demand Instances into a single Availability Zone.\n\nSupported only for fleets of type `instant` ."},"singleInstanceType":{"type":"boolean","description":"Indicates that the fleet uses a single instance type to launch all On-Demand Instances in the fleet.\n\nSupported only for fleets of type `instant` ."}},"type":"object"},"aws-native:ec2:Ec2FleetPerformanceFactorReferenceRequest":{"properties":{"instanceFamily":{"type":"string","description":"The instance family to use as a baseline reference.\n\n\u003e Ensure that you specify the correct value for the instance family. The instance family is everything before the period ( `.` ) in the instance type name. For example, in the instance type `c6i.large` , the instance family is `c6i` , not `c6` . For more information, see [Amazon EC2 instance type naming conventions](https://docs.aws.amazon.com/ec2/latest/instancetypes/instance-type-names.html) in *Amazon EC2 Instance Types* . \n\nThe following instance families are *not supported* for performance protection:\n\n- `c1`\n- `g3` | `g3s`\n- `hpc7g`\n- `m1` | `m2`\n- `mac1` | `mac2` | `mac2-m1ultra` | `mac2-m2` | `mac2-m2pro`\n- `p3dn` | `p4d` | `p5`\n- `t1`\n- `u-12tb1` | `u-18tb1` | `u-24tb1` | `u-3tb1` | `u-6tb1` | `u-9tb1` | `u7i-12tb` | `u7in-16tb` | `u7in-24tb` | `u7in-32tb`\n\nIf you enable performance protection by specifying a supported instance family, the returned instance types will exclude the above unsupported instance families.\n\nIf you specify an unsupported instance family as a value for baseline performance, the API returns an empty response response for [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) and an exception for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet.html) , [RequestSpotFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet.html) , [ModifyFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyFleet.html) , and [ModifySpotFleetRequest](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifySpotFleetRequest.html) ."}},"type":"object"},"aws-native:ec2:Ec2FleetPlacement":{"properties":{"affinity":{"type":"string","description":"The affinity setting for the instance on the Dedicated Host.\n\nThis parameter is not supported for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet) or [ImportInstance](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportInstance.html) ."},"availabilityZone":{"type":"string","description":"The Availability Zone of the instance.\n\nOn input, you can specify `AvailabilityZone` or `AvailabilityZoneId` , but not both. If you specify neither one, Amazon EC2 automatically selects an Availability Zone for you.\n\nThis parameter is not supported for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet) ."},"groupName":{"type":"string","description":"The name of the placement group that the instance is in.\n\nOn input, you can specify `GroupId` or `GroupName` , but not both."},"hostId":{"type":"string","description":"The ID of the Dedicated Host on which the instance resides.\n\nThis parameter is not supported for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet) or [ImportInstance](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportInstance.html) ."},"hostResourceGroupArn":{"type":"string","description":"The ARN of the host resource group in which to launch the instances.\n\nOn input, if you specify this parameter, either omit the *Tenancy* parameter or set it to `host` .\n\nThis parameter is not supported for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet) ."},"partitionNumber":{"type":"integer","description":"The number of the partition that the instance is in. Valid only if the placement group strategy is set to `partition` .\n\nThis parameter is not supported for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet) ."},"spreadDomain":{"type":"string","description":"Reserved for future use."},"tenancy":{"type":"string","description":"The tenancy of the instance. An instance with a tenancy of `dedicated` runs on single-tenant hardware.\n\nThis parameter is not supported for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet) . The `host` tenancy is not supported for [ImportInstance](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportInstance.html) or for T3 instances that are configured for the `unlimited` CPU credit option."}},"type":"object"},"aws-native:ec2:Ec2FleetSpotOptionsRequest":{"properties":{"allocationStrategy":{"$ref":"#/types/aws-native:ec2:Ec2FleetSpotOptionsRequestAllocationStrategy","description":"Indicates how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the EC2 Fleet.\n\nIf the allocation strategy is `lowestPrice` , EC2 Fleet launches instances from the Spot Instance pools with the lowest price. This is the default allocation strategy.\n\nIf the allocation strategy is `diversified` , EC2 Fleet launches instances from all the Spot Instance pools that you specify.\n\nIf the allocation strategy is `capacityOptimized` , EC2 Fleet launches instances from Spot Instance pools that are optimally chosen based on the available Spot Instance capacity.\n\n*Allowed Values* : `lowestPrice` | `diversified` | `capacityOptimized` | `capacityOptimizedPrioritized`"},"instanceInterruptionBehavior":{"$ref":"#/types/aws-native:ec2:Ec2FleetSpotOptionsRequestInstanceInterruptionBehavior","description":"The behavior when a Spot Instance is interrupted.\n\nDefault: `terminate`"},"instancePoolsToUseCount":{"type":"integer","description":"The number of Spot pools across which to allocate your target Spot capacity. Supported only when Spot `AllocationStrategy` is set to `lowest-price` . EC2 Fleet selects the cheapest Spot pools and evenly allocates your target Spot capacity across the number of Spot pools that you specify.\n\nNote that EC2 Fleet attempts to draw Spot Instances from the number of pools that you specify on a best effort basis. If a pool runs out of Spot capacity before fulfilling your target capacity, EC2 Fleet will continue to fulfill your request by drawing from the next cheapest pool. To ensure that your target capacity is met, you might receive Spot Instances from more than the number of pools that you specified. Similarly, if most of the pools have no Spot capacity, you might receive your full target capacity from fewer than the number of pools that you specified."},"maintenanceStrategies":{"$ref":"#/types/aws-native:ec2:Ec2FleetMaintenanceStrategies","description":"The strategies for managing your Spot Instances that are at an elevated risk of being interrupted."},"maxTotalPrice":{"type":"string","description":"The maximum amount per hour for Spot Instances that you're willing to pay. We do not recommend using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.\n\n\u003e If you specify a maximum price, your Spot Instances will be interrupted more frequently than if you do not specify this parameter. \u003e If your fleet includes T instances that are configured as `unlimited` , and if their average CPU usage exceeds the baseline utilization, you will incur a charge for surplus credits. The `MaxTotalPrice` does not account for surplus credits, and, if you use surplus credits, your final cost might be higher than what you specified for `MaxTotalPrice` . For more information, see [Surplus credits can incur charges](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits) in the *Amazon EC2 User Guide* ."},"minTargetCapacity":{"type":"integer","description":"The minimum target capacity for Spot Instances in the fleet. If this minimum capacity isn't reached, no instances are launched.\n\nConstraints: Maximum value of `1000` . Supported only for fleets of type `instant` .\n\nAt least one of the following must be specified: `SingleAvailabilityZone` | `SingleInstanceType`"},"singleAvailabilityZone":{"type":"boolean","description":"Indicates that the fleet launches all Spot Instances into a single Availability Zone.\n\nSupported only for fleets of type `instant` ."},"singleInstanceType":{"type":"boolean","description":"Indicates that the fleet uses a single instance type to launch all Spot Instances in the fleet.\n\nSupported only for fleets of type `instant` ."}},"type":"object"},"aws-native:ec2:Ec2FleetSpotOptionsRequestAllocationStrategy":{"description":"Indicates how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the EC2 Fleet.\n\nIf the allocation strategy is `lowestPrice` , EC2 Fleet launches instances from the Spot Instance pools with the lowest price. This is the default allocation strategy.\n\nIf the allocation strategy is `diversified` , EC2 Fleet launches instances from all the Spot Instance pools that you specify.\n\nIf the allocation strategy is `capacityOptimized` , EC2 Fleet launches instances from Spot Instance pools that are optimally chosen based on the available Spot Instance capacity.\n\n*Allowed Values* : `lowestPrice` | `diversified` | `capacityOptimized` | `capacityOptimizedPrioritized`","type":"string","enum":[{"name":"LowestPrice","value":"lowest-price"},{"name":"Diversified","value":"diversified"},{"name":"CapacityOptimized","value":"capacityOptimized"},{"name":"CapacityOptimizedPrioritized","value":"capacityOptimizedPrioritized"},{"name":"PriceCapacityOptimized","value":"priceCapacityOptimized"}]},"aws-native:ec2:Ec2FleetSpotOptionsRequestInstanceInterruptionBehavior":{"description":"The behavior when a Spot Instance is interrupted.\n\nDefault: `terminate`","type":"string","enum":[{"name":"Hibernate","value":"hibernate"},{"name":"Stop","value":"stop"},{"name":"Terminate","value":"terminate"}]},"aws-native:ec2:Ec2FleetTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:Ec2FleetTagSpecification":{"properties":{"resourceType":{"$ref":"#/types/aws-native:ec2:Ec2FleetTagSpecificationResourceType","description":"The type of resource to tag."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetTag"},"description":"The tags to apply to the resource."}},"type":"object"},"aws-native:ec2:Ec2FleetTagSpecificationResourceType":{"description":"The type of resource to tag.","type":"string","enum":[{"name":"ClientVpnEndpoint","value":"client-vpn-endpoint"},{"name":"CustomerGateway","value":"customer-gateway"},{"name":"DedicatedHost","value":"dedicated-host"},{"name":"DhcpOptions","value":"dhcp-options"},{"name":"EgressOnlyInternetGateway","value":"egress-only-internet-gateway"},{"name":"ElasticGpu","value":"elastic-gpu"},{"name":"ElasticIp","value":"elastic-ip"},{"name":"ExportImageTask","value":"export-image-task"},{"name":"ExportInstanceTask","value":"export-instance-task"},{"name":"Fleet","value":"fleet"},{"name":"FpgaImage","value":"fpga-image"},{"name":"HostReservation","value":"host-reservation"},{"name":"Image","value":"image"},{"name":"ImportImageTask","value":"import-image-task"},{"name":"ImportSnapshotTask","value":"import-snapshot-task"},{"name":"Instance","value":"instance"},{"name":"InternetGateway","value":"internet-gateway"},{"name":"KeyPair","value":"key-pair"},{"name":"LaunchTemplate","value":"launch-template"},{"name":"LocalGatewayRouteTableVpcAssociation","value":"local-gateway-route-table-vpc-association"},{"name":"Natgateway","value":"natgateway"},{"name":"NetworkAcl","value":"network-acl"},{"name":"NetworkInsightsAnalysis","value":"network-insights-analysis"},{"name":"NetworkInsightsPath","value":"network-insights-path"},{"name":"NetworkInterface","value":"network-interface"},{"name":"PlacementGroup","value":"placement-group"},{"name":"ReservedInstances","value":"reserved-instances"},{"name":"RouteTable","value":"route-table"},{"name":"SecurityGroup","value":"security-group"},{"name":"Snapshot","value":"snapshot"},{"name":"SpotFleetRequest","value":"spot-fleet-request"},{"name":"SpotInstancesRequest","value":"spot-instances-request"},{"name":"Subnet","value":"subnet"},{"name":"TrafficMirrorFilter","value":"traffic-mirror-filter"},{"name":"TrafficMirrorSession","value":"traffic-mirror-session"},{"name":"TrafficMirrorTarget","value":"traffic-mirror-target"},{"name":"TransitGateway","value":"transit-gateway"},{"name":"TransitGatewayAttachment","value":"transit-gateway-attachment"},{"name":"TransitGatewayConnectPeer","value":"transit-gateway-connect-peer"},{"name":"TransitGatewayMulticastDomain","value":"transit-gateway-multicast-domain"},{"name":"TransitGatewayRouteTable","value":"transit-gateway-route-table"},{"name":"Volume","value":"volume"},{"name":"Vpc","value":"vpc"},{"name":"VpcFlowLog","value":"vpc-flow-log"},{"name":"VpcPeeringConnection","value":"vpc-peering-connection"},{"name":"VpnConnection","value":"vpn-connection"},{"name":"VpnGateway","value":"vpn-gateway"}]},"aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequest":{"properties":{"defaultTargetCapacityType":{"$ref":"#/types/aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequestDefaultTargetCapacityType","description":"The default target capacity type.","replaceOnChanges":true},"onDemandTargetCapacity":{"type":"integer","description":"The number of On-Demand units to request."},"spotTargetCapacity":{"type":"integer","description":"The number of Spot units to request."},"targetCapacityUnitType":{"$ref":"#/types/aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequestTargetCapacityUnitType","description":"The unit for the target capacity. You can specify this parameter only when using attributed-based instance type selection.\n\nDefault: `units` (the number of instances)","replaceOnChanges":true},"totalTargetCapacity":{"type":"integer","description":"The number of units to request, filled using the default target capacity type."}},"type":"object","required":["totalTargetCapacity"]},"aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequestDefaultTargetCapacityType":{"description":"The default target capacity type.","type":"string","enum":[{"name":"OnDemand","value":"on-demand"},{"name":"Spot","value":"spot"},{"name":"ReservedCapacity","value":"reserved-capacity"}]},"aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequestTargetCapacityUnitType":{"description":"The unit for the target capacity. You can specify this parameter only when using attributed-based instance type selection.\n\nDefault: `units` (the number of instances)","type":"string","enum":[{"name":"Vcpu","value":"vcpu"},{"name":"MemoryMib","value":"memory-mib"},{"name":"Units","value":"units"}]},"aws-native:ec2:Ec2FleetTotalLocalStorageGbRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of total local storage, in GB. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of total local storage, in GB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:Ec2FleetType":{"description":"The fleet type. The default value is `maintain` .\n\n- `maintain` - The EC2 Fleet places an asynchronous request for your desired capacity, and continues to maintain your desired Spot capacity by replenishing interrupted Spot Instances.\n- `request` - The EC2 Fleet places an asynchronous one-time request for your desired capacity, but does submit Spot requests in alternative capacity pools if Spot capacity is unavailable, and does not maintain Spot capacity if Spot Instances are interrupted.\n- `instant` - The EC2 Fleet places a synchronous one-time request for your desired capacity, and returns errors for any instances that could not be launched.\n\nFor more information, see [EC2 Fleet request types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-request-type.html) in the *Amazon EC2 User Guide* .","type":"string","enum":[{"name":"Maintain","value":"maintain"},{"name":"Request","value":"request"},{"name":"Instant","value":"instant"}]},"aws-native:ec2:Ec2FleetVCpuCountRangeRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of vCPUs. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum number of vCPUs. To specify no minimum limit, specify `0` ."}},"type":"object"},"aws-native:ec2:EgressOnlyInternetGatewayTag":{"properties":{"key":{"type":"string","description":"The key of the tag.\n\nConstraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with `aws:` ."},"value":{"type":"string","description":"The value of the tag.\n\nConstraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object","required":["key","value"]},"aws-native:ec2:EipTag":{"description":"Specifies a tag. For more information, see [Add tags to a resource](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#cloudformation-add-tag-specifications).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:EnclaveOptionsProperties":{"description":"Indicates whether the instance is enabled for AWS Nitro Enclaves.","properties":{"enabled":{"type":"boolean","description":"If this parameter is set to true, the instance is enabled for AWS Nitro Enclaves; otherwise, it is not enabled for AWS Nitro Enclaves."}},"type":"object"},"aws-native:ec2:FlowLogDestinationOptionsPropertiesFileFormat":{"description":"The format for the flow log. The default is `plain-text` .","type":"string","enum":[{"name":"PlainText","value":"plain-text"},{"name":"Parquet","value":"parquet"}]},"aws-native:ec2:FlowLogLogDestinationType":{"description":"Specifies the type of destination to which the flow log data is to be published. Flow log data can be published to CloudWatch Logs or Amazon S3.","type":"string","enum":[{"name":"CloudWatchLogs","value":"cloud-watch-logs"},{"name":"S3","value":"s3"},{"name":"KinesisDataFirehose","value":"kinesis-data-firehose"}]},"aws-native:ec2:FlowLogResourceType":{"description":"The type of resource for which to create the flow log. For example, if you specified a VPC ID for the ResourceId property, specify VPC for this property.","type":"string","enum":[{"name":"NetworkInterface","value":"NetworkInterface"},{"name":"Subnet","value":"Subnet"},{"name":"Vpc","value":"VPC"},{"name":"TransitGateway","value":"TransitGateway"},{"name":"TransitGatewayAttachment","value":"TransitGatewayAttachment"},{"name":"RegionalNatGateway","value":"RegionalNatGateway"}]},"aws-native:ec2:FlowLogTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:FlowLogTrafficType":{"description":"The type of traffic to log. You can log traffic that the resource accepts or rejects, or all traffic.","type":"string","enum":[{"name":"Accept","value":"ACCEPT"},{"name":"All","value":"ALL"},{"name":"Reject","value":"REJECT"}]},"aws-native:ec2:HibernationOptionsProperties":{"description":"Indicates whether an instance is enabled for hibernation.","properties":{"configured":{"type":"boolean","description":"If you set this parameter to true, your instance is enabled for hibernation."}},"type":"object"},"aws-native:ec2:HostAutoPlacement":{"description":"Indicates whether the host accepts any untargeted instance launches that match its instance type configuration, or if it only accepts Host tenancy instance launches that specify its unique host ID.","type":"string","enum":[{"name":"On","value":"on"},{"name":"Off","value":"off"}]},"aws-native:ec2:HostMaintenance":{"description":"Automatically allocates a new dedicated host and moves your instances on to it if a degradation is detected on your current host.","type":"string","enum":[{"name":"On","value":"on"},{"name":"Off","value":"off"}]},"aws-native:ec2:HostRecovery":{"description":"Indicates whether to enable or disable host recovery for the Dedicated Host. Host recovery is disabled by default.","type":"string","enum":[{"name":"On","value":"on"},{"name":"Off","value":"off"}]},"aws-native:ec2:HostTag":{"properties":{"key":{"type":"string","description":"The key of the tag.\n\nConstraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with `aws:` ."},"value":{"type":"string","description":"The value of the tag.\n\nConstraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object","required":["key","value"]},"aws-native:ec2:InstanceAffinity":{"description":"Indicates whether the instance is associated with a dedicated host. If you want the instance to always restart on the same host on which it was launched, specify host. If you want the instance to restart on any available host, but try to launch onto the last host it ran on (on a best-effort basis), specify default.","type":"string","enum":[{"name":"Default","value":"default"},{"name":"Host","value":"host"}]},"aws-native:ec2:InstanceAssociationParameter":{"properties":{"key":{"type":"string","description":"The name of an input parameter that is in the associated SSM document."},"value":{"type":"array","items":{"type":"string"},"description":"The value of an input parameter."}},"type":"object","required":["key","value"]},"aws-native:ec2:InstanceBlockDeviceMapping":{"properties":{"deviceName":{"type":"string","description":"The device name (for example, /dev/sdh or xvdh)."},"ebs":{"$ref":"#/types/aws-native:ec2:InstanceEbs","description":"Parameters used to automatically set up EBS volumes when the instance is launched."},"noDevice":{"$ref":"pulumi.json#/Any","description":"To omit the device from the block device mapping, specify an empty string.\n\n\u003e After the instance is running, modifying this parameter results in instance [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) ."},"virtualName":{"type":"string","description":"The virtual device name ( `ephemeral` N). The name must be in the form `ephemeral` *X* where *X* is a number starting from zero (0). For example, an instance type with 2 available instance store volumes can specify mappings for `ephemeral0` and `ephemeral1` . The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume.\n\nNVMe instance store volumes are automatically enumerated and assigned a device name. Including them in your block device mapping has no effect.\n\n*Constraints* : For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI.\n\n\u003e After the instance is running, modifying this parameter results in instance [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) ."}},"type":"object","required":["deviceName"]},"aws-native:ec2:InstanceConnectEndpointDnsNames":{"description":"The DNS names of the endpoint.","properties":{"dnsName":{"type":"string","description":"The DNS name of the EC2 Instance Connect Endpoint."},"fipsDnsName":{"type":"string","description":"The Federal Information Processing Standards (FIPS) compliant DNS name of the EC2 Instance Connect Endpoint."}},"type":"object"},"aws-native:ec2:InstanceConnectEndpointPublicDnsNames":{"description":"The public DNS names of the endpoint, including IPv4-only and dualstack DNS names.","properties":{"dualstack":{"$ref":"#/types/aws-native:ec2:InstanceConnectEndpointDnsNames","description":"The dualstack DNS name of the EC2 Instance Connect Endpoint. A dualstack DNS name supports connections from both IPv4 and IPv6 clients."},"ipv4":{"$ref":"#/types/aws-native:ec2:InstanceConnectEndpointDnsNames","description":"The IPv4-only DNS name of the EC2 Instance Connect Endpoint."}},"type":"object"},"aws-native:ec2:InstanceConnectEndpointState":{"description":"The current state of the EC2 Instance Connect Endpoint","type":"string","enum":[{"name":"CreateInProgress","value":"create-in-progress"},{"name":"CreateComplete","value":"create-complete"},{"name":"CreateFailed","value":"create-failed"},{"name":"DeleteInProgress","value":"delete-in-progress"},{"name":"DeleteComplete","value":"delete-complete"},{"name":"DeleteFailed","value":"delete-failed"},{"name":"UpdateInProgress","value":"update-in-progress"},{"name":"UpdateComplete","value":"update-complete"},{"name":"UpdateFailed","value":"update-failed"}]},"aws-native:ec2:InstanceConnectEndpointTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:InstanceEbs":{"properties":{"deleteOnTermination":{"type":"boolean","description":"Indicates whether the EBS volume is deleted on instance termination."},"encrypted":{"type":"boolean","description":"Indicates whether the volume should be encrypted."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS). For gp3, io1, and io2 volumes, this represents the number of IOPS that are provisioned for the volume. For gp2 volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting."},"kmsKeyId":{"type":"string","description":"The identifier of the AWS Key Management Service (AWS KMS) customer managed CMK to use for Amazon EBS encryption. If KmsKeyId is specified, the encrypted state must be true. If the encrypted state is true but you do not specify KmsKeyId, your AWS managed CMK for EBS is used."},"snapshotId":{"type":"string","description":"The ID of the snapshot."},"volumeSize":{"type":"integer","description":"The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size."},"volumeType":{"type":"string","description":"The volume type."}},"type":"object"},"aws-native:ec2:InstanceElasticGpuSpecification":{"properties":{"type":{"type":"string","description":"The type of Elastic Graphics accelerator. Amazon Elastic Graphics is no longer available."}},"type":"object","required":["type"]},"aws-native:ec2:InstanceElasticInferenceAccelerator":{"properties":{"count":{"type":"integer","description":"The number of elastic inference accelerators to attach to the instance. Amazon Elastic Inference is no longer available."},"type":{"type":"string","description":"The type of elastic inference accelerator. Amazon Elastic Inference is no longer available."}},"type":"object","required":["type"]},"aws-native:ec2:InstanceEnaSrdSpecification":{"description":"Specifies the ENA Express settings for the network interface that's attached to the instance.","properties":{"enaSrdEnabled":{"type":"boolean","description":"Specifies whether ENA Express is enabled for the network interface when you launch an instance."},"enaSrdUdpSpecification":{"$ref":"#/types/aws-native:ec2:InstanceEnaSrdUdpSpecification","description":"Configures ENA Express for UDP network traffic."}},"type":"object"},"aws-native:ec2:InstanceEnaSrdUdpSpecification":{"description":"Contains ENA Express settings for UDP network traffic for the network interface that's attached to the instance.","properties":{"enaSrdUdpEnabled":{"type":"boolean","description":"Indicates whether UDP traffic uses ENA Express for your instance."}},"type":"object"},"aws-native:ec2:InstanceIpv6Address":{"properties":{"ipv6Address":{"type":"string","description":"The IPv6 address."}},"type":"object","required":["ipv6Address"]},"aws-native:ec2:InstanceLaunchTemplateSpecification":{"properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template. You must specify the LaunchTemplateName or the LaunchTemplateId, but not both."},"launchTemplateName":{"type":"string","description":"The name of the launch template. You must specify the LaunchTemplateName or the LaunchTemplateId, but not both."},"version":{"type":"string","description":"The version number of the launch template."}},"type":"object"},"aws-native:ec2:InstanceLicenseSpecification":{"properties":{"licenseConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the license configuration."}},"type":"object","required":["licenseConfigurationArn"]},"aws-native:ec2:InstanceMetadataOptions":{"properties":{"httpEndpoint":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptionsHttpEndpoint","description":"Enables or disables the HTTP metadata endpoint on your instances. If you specify a value of disabled, you cannot access your instance metadata."},"httpProtocolIpv6":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptionsHttpProtocolIpv6","description":"Enables or disables the IPv6 endpoint for the instance metadata service. To use this option, the instance must be a Nitro-based instance launched in a subnet that supports IPv6."},"httpPutResponseHopLimit":{"type":"integer","description":"The number of network hops that the metadata token can travel. Maximum is 64."},"httpTokens":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptionsHttpTokens","description":"Indicates whether IMDSv2 is required."},"instanceMetadataTags":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptionsInstanceMetadataTags","description":"Indicates whether tags from the instance are propagated to the EBS volumes."}},"type":"object"},"aws-native:ec2:InstanceMetadataOptionsHttpEndpoint":{"description":"Enables or disables the HTTP metadata endpoint on your instances. If you specify a value of disabled, you cannot access your instance metadata.","type":"string","enum":[{"name":"Disabled","value":"disabled"},{"name":"Enabled","value":"enabled"}]},"aws-native:ec2:InstanceMetadataOptionsHttpProtocolIpv6":{"description":"Enables or disables the IPv6 endpoint for the instance metadata service. To use this option, the instance must be a Nitro-based instance launched in a subnet that supports IPv6.","type":"string","enum":[{"name":"Disabled","value":"disabled"},{"name":"Enabled","value":"enabled"}]},"aws-native:ec2:InstanceMetadataOptionsHttpTokens":{"description":"Indicates whether IMDSv2 is required.","type":"string","enum":[{"name":"Optional","value":"optional"},{"name":"Required","value":"required"}]},"aws-native:ec2:InstanceMetadataOptionsInstanceMetadataTags":{"description":"Indicates whether tags from the instance are propagated to the EBS volumes.","type":"string","enum":[{"name":"Disabled","value":"disabled"},{"name":"Enabled","value":"enabled"}]},"aws-native:ec2:InstanceNetworkInterface":{"properties":{"associateCarrierIpAddress":{"type":"boolean","description":"Not currently supported by AWS CloudFormation."},"associatePublicIpAddress":{"type":"boolean","description":"Indicates whether to assign a public IPv4 address to an instance you launch in a VPC."},"deleteOnTermination":{"type":"boolean","description":"If set to true, the interface is deleted when the instance is terminated."},"description":{"type":"string","description":"The description of the network interface."},"deviceIndex":{"type":"string","description":"The position of the network interface in the attachment order. A primary network interface has a device index of 0."},"enaSrdSpecification":{"$ref":"#/types/aws-native:ec2:InstanceEnaSrdSpecification","description":"Configures ENA Express for UDP network traffic."},"groupSet":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups for the network interface."},"ipv6AddressCount":{"type":"integer","description":"A number of IPv6 addresses to assign to the network interface."},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceIpv6Address"},"description":"The IPv6 addresses associated with the network interface."},"networkInterfaceId":{"type":"string","description":"The ID of the network interface."},"privateIpAddress":{"type":"string","description":"The private IPv4 address of the network interface."},"privateIpAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstancePrivateIpAddressSpecification"},"description":"One or more private IPv4 addresses to assign to the network interface."},"secondaryPrivateIpAddressCount":{"type":"integer","description":"The number of secondary private IPv4 addresses."},"subnetId":{"type":"string","description":"The ID of the subnet."}},"type":"object","required":["deviceIndex"]},"aws-native:ec2:InstancePrivateDnsNameOptions":{"properties":{"enableResourceNameDnsARecord":{"type":"boolean","description":"Indicates whether to respond to DNS queries for instance hostnames with DNS A records. For more information, see Amazon EC2 instance hostname types in the Amazon Elastic Compute Cloud User Guide."},"enableResourceNameDnsAaaaRecord":{"type":"boolean","description":"Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records. For more information, see Amazon EC2 instance hostname types in the Amazon Elastic Compute Cloud User Guide."},"hostnameType":{"$ref":"#/types/aws-native:ec2:InstancePrivateDnsNameOptionsHostnameType","description":"The type of hostnames to assign to instances in the subnet at launch. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. For more information, see Amazon EC2 instance hostname types in the Amazon Elastic Compute Cloud User Guide."}},"type":"object"},"aws-native:ec2:InstancePrivateDnsNameOptionsHostnameType":{"description":"The type of hostnames to assign to instances in the subnet at launch. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. For more information, see Amazon EC2 instance hostname types in the Amazon Elastic Compute Cloud User Guide.","type":"string","enum":[{"name":"IpName","value":"ip-name"},{"name":"ResourceName","value":"resource-name"}]},"aws-native:ec2:InstancePrivateIpAddressSpecification":{"properties":{"primary":{"type":"boolean","description":"Indicates whether the private IPv4 address is the primary private IPv4 address. Only one IPv4 address can be designated as primary."},"privateIpAddress":{"type":"string","description":"The private IPv4 addresses."}},"type":"object","required":["primary","privateIpAddress"]},"aws-native:ec2:InstanceSsmAssociation":{"properties":{"associationParameters":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceAssociationParameter"},"description":"The input parameter values to use with the associated SSM document."},"documentName":{"type":"string","description":"The name of an SSM document to associate with the instance."}},"type":"object","required":["documentName"]},"aws-native:ec2:InstanceState":{"description":"The current state of the instance","properties":{"code":{"type":"string","description":"The state of the instance as a 16-bit unsigned integer."},"name":{"type":"string","description":"The current state of the instance."}},"type":"object"},"aws-native:ec2:InstanceTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:InstanceVolume":{"properties":{"device":{"type":"string","description":"The device name (for example, /dev/sdh or xvdh)."},"volumeId":{"type":"string","description":"The ID of the EBS volume. The volume and instance must be within the same Availability Zone."}},"type":"object","required":["device","volumeId"]},"aws-native:ec2:InternetGatewayTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamMeteredAccount":{"description":"A metered account is an account that is charged for active IP addresses managed in IPAM","type":"string","enum":[{"name":"IpamOwner","value":"ipam-owner"},{"name":"ResourceOwner","value":"resource-owner"}]},"aws-native:ec2:IpamOperatingRegion":{"description":"The regions IPAM is enabled for. Allows pools to be created in these regions, as well as enabling monitoring","properties":{"regionName":{"type":"string","description":"The name of the region."}},"type":"object","required":["regionName"]},"aws-native:ec2:IpamOrganizationalUnitExclusion":{"description":"If your IPAM is integrated with AWS Organizations and you add an organizational unit (OU) exclusion, IPAM will not manage the IP addresses in accounts in that OU exclusion.","properties":{"organizationsEntityPath":{"type":"string","description":"An AWS Organizations entity path. Build the path for the OU(s) using AWS Organizations IDs separated by a '/'. Include all child OUs by ending the path with '/*'."}},"type":"object","required":["organizationsEntityPath"]},"aws-native:ec2:IpamPoolAwsService":{"description":"Limits which service in Amazon Web Services that the pool can be used in.","type":"string","enum":[{"name":"Ec2","value":"ec2"},{"name":"GlobalServices","value":"global-services"}]},"aws-native:ec2:IpamPoolIpamScopeType":{"description":"Determines whether this scope contains publicly routable space or space for a private network","type":"string","enum":[{"name":"Public","value":"public"},{"name":"Private","value":"private"}]},"aws-native:ec2:IpamPoolProvisionedCidr":{"description":"An address space to be inserted into this pool. All allocations must be made from this address space.","properties":{"cidr":{"type":"string","description":"The CIDR provisioned to the IPAM pool. A CIDR is a representation of an IP address and its associated network mask (or netmask) and refers to a range of IP addresses. An IPv4 CIDR example is `10.24.34.0/23` . An IPv6 CIDR example is `2001:DB8::/32` ."}},"type":"object","required":["cidr"]},"aws-native:ec2:IpamPoolPublicIpSource":{"description":"The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is `byoip`.","type":"string","enum":[{"name":"Byoip","value":"byoip"},{"name":"Amazon","value":"amazon"}]},"aws-native:ec2:IpamPoolSourceResource":{"description":"The resource associated with this pool's space. Depending on the ResourceType, setting a SourceResource changes which space can be provisioned in this pool and which types of resources can receive allocations","properties":{"resourceId":{"type":"string","description":"The source resource ID."},"resourceOwner":{"type":"string","description":"The source resource owner."},"resourceRegion":{"type":"string","description":"The source resource Region."},"resourceType":{"type":"string","description":"The source resource type."}},"type":"object","required":["resourceId","resourceOwner","resourceRegion","resourceType"]},"aws-native:ec2:IpamPoolState":{"description":"The state of this pool. This can be one of the following values: \"create-in-progress\", \"create-complete\", \"modify-in-progress\", \"modify-complete\", \"delete-in-progress\", or \"delete-complete\"","type":"string","enum":[{"name":"CreateInProgress","value":"create-in-progress"},{"name":"CreateComplete","value":"create-complete"},{"name":"ModifyInProgress","value":"modify-in-progress"},{"name":"ModifyComplete","value":"modify-complete"},{"name":"DeleteInProgress","value":"delete-in-progress"},{"name":"DeleteComplete","value":"delete-complete"}]},"aws-native:ec2:IpamPoolTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamPrefixListResolverRule":{"description":"CIDR selection rules define the business logic for selecting CIDRs from IPAM.  If a CIDR matches any of the rules, it will be included. If a rule has multiple conditions, the CIDR has to match every condition of that rule. You can create a prefix list resolver without rules, but you'll need to add at least one rule before it can actually automate your prefix list updates.","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRuleCondition"},"description":"Two of the rule types allow you to add conditions to the rules. (1) For IPAM Pool CIDR rules, you can specify an ipamPoolId; if not specified, the rule will apply to all IPAM Pool CIDRs in the scope.  (2) For IPAM Resource CIDR rules, you can specify resourceId, resourceOwner, resourceRegion, cidr, or resourceTag."},"ipamScopeId":{"type":"string","description":"This rule will only match resources that are in this IPAM Scope."},"resourceType":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRuleResourceType","description":"The resourceType property only applies to ipam-resource-cidr rules; this property specifies what type of resources this rule will apply to, such as VPCs or Subnets."},"ruleType":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRuleRuleType","description":"There are three rule types: (1) Static CIDR: A fixed list of CIDRs that don't change (like a manual list replicated across Regions). (2) IPAM pool CIDR: CIDRs from specific IPAM pools (like all CIDRs from your IPAM production pool).  (3) IPAM resource CIDR: CIDRs for AWS resources like VPCs, subnets, and EIPs within a specific IPAM scope."},"staticCidr":{"type":"string","description":"A fixed CIDR that doesn't change"}},"type":"object","required":["ruleType"]},"aws-native:ec2:IpamPrefixListResolverRuleCondition":{"description":"Two of the rule types allow you to add conditions to the rules. (1) For IPAM Pool CIDR rules, you can specify an ipamPoolId; if not specified, the rule will apply to all IPAM Pool CIDRs in the scope.  (2) For IPAM Resource CIDR rules, you can specify resourceId, resourceOwner, resourceRegion, cidr, or resourceTag.","properties":{"cidr":{"type":"string","description":"Condition for the IPAM Resource CIDR rule type.  CIDR (like 10.24.34.0/23)."},"ipamPoolId":{"type":"string","description":"Condition for the IPAM Pool CIDR rule type.  If not chosen, the resolver applies to all IPAM Pool CIDRs in the scope."},"operation":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRuleConditionOperation","description":"Equals, Not equals, or Subnet Of.  The subnet-of operation only applies to cidr conditions."},"resourceId":{"type":"string","description":"Condition for the IPAM Resource CIDR rule type.  The unique ID of a resource (like vpc-1234567890abcdef0)."},"resourceOwner":{"type":"string","description":"Condition for the IPAM Resource CIDR rule type.  Resource owner (like 111122223333)."},"resourceRegion":{"type":"string","description":"Condition for the IPAM Resource CIDR rule type.  Resource region (like us-east-1)."},"resourceTag":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverTag","description":"Condition for the IPAM Resource CIDR rule type.  Resource Tag (like dev-vpc-1)."}},"type":"object"},"aws-native:ec2:IpamPrefixListResolverRuleConditionOperation":{"description":"Equals, Not equals, or Subnet Of.  The subnet-of operation only applies to cidr conditions.","type":"string","enum":[{"name":"Equals","value":"equals"},{"name":"NotEquals","value":"not-equals"},{"name":"SubnetOf","value":"subnet-of"}]},"aws-native:ec2:IpamPrefixListResolverRuleResourceType":{"description":"The resourceType property only applies to ipam-resource-cidr rules; this property specifies what type of resources this rule will apply to, such as VPCs or Subnets.","type":"string","enum":[{"name":"Vpc","value":"vpc"},{"name":"Subnet","value":"subnet"},{"name":"Eip","value":"eip"},{"name":"PublicIpv4Pool","value":"public-ipv4-pool"}]},"aws-native:ec2:IpamPrefixListResolverRuleRuleType":{"description":"There are three rule types: (1) Static CIDR: A fixed list of CIDRs that don't change (like a manual list replicated across Regions). (2) IPAM pool CIDR: CIDRs from specific IPAM pools (like all CIDRs from your IPAM production pool).  (3) IPAM resource CIDR: CIDRs for AWS resources like VPCs, subnets, and EIPs within a specific IPAM scope.","type":"string","enum":[{"name":"StaticCidr","value":"static-cidr"},{"name":"IpamResourceCidr","value":"ipam-resource-cidr"},{"name":"IpamPoolCidr","value":"ipam-pool-cidr"}]},"aws-native:ec2:IpamPrefixListResolverTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamPrefixListResolverTargetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamResourceDiscoveryAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamResourceDiscoveryIpamOperatingRegion":{"description":"The regions IPAM Resource Discovery is enabled for. Allows for monitoring.","properties":{"regionName":{"type":"string","description":"The name of the region."}},"type":"object","required":["regionName"]},"aws-native:ec2:IpamResourceDiscoveryOrganizationalUnitExclusion":{"description":"If your IPAM is integrated with AWS Organizations and you add an organizational unit (OU) exclusion, IPAM will not manage the IP addresses in accounts in that OU exclusion.","properties":{"organizationsEntityPath":{"type":"string","description":"An AWS Organizations entity path. Build the path for the OU(s) using AWS Organizations IDs separated by a '/'. Include all child OUs by ending the path with '/*'."}},"type":"object","required":["organizationsEntityPath"]},"aws-native:ec2:IpamResourceDiscoveryTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamScopeExternalAuthorityConfiguration":{"description":"External service configuration to connect your AWS IPAM scope.","properties":{"externalResourceIdentifier":{"type":"string","description":"Resource identifier of the scope in the external service connecting to your AWS IPAM scope."},"ipamScopeExternalAuthorityType":{"$ref":"#/types/aws-native:ec2:IpamScopeExternalAuthorityConfigurationIpamScopeExternalAuthorityType","description":"An external service connecting to your AWS IPAM scope."}},"type":"object","required":["externalResourceIdentifier","ipamScopeExternalAuthorityType"]},"aws-native:ec2:IpamScopeExternalAuthorityConfigurationIpamScopeExternalAuthorityType":{"description":"An external service connecting to your AWS IPAM scope.","type":"string","enum":[{"name":"Infoblox","value":"infoblox"}]},"aws-native:ec2:IpamScopeTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamScopeType":{"description":"Determines whether this scope contains publicly routable space or space for a private network","type":"string","enum":[{"name":"Public","value":"public"},{"name":"Private","value":"private"}]},"aws-native:ec2:IpamTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:IpamTier":{"description":"The tier of the IPAM.","type":"string","enum":[{"name":"Free","value":"free"},{"name":"Advanced","value":"advanced"}]},"aws-native:ec2:KeyPairKeyFormat":{"description":"The format of the key pair.\n Default: ``pem``","type":"string","enum":[{"name":"Pem","value":"pem"},{"name":"Ppk","value":"ppk"}]},"aws-native:ec2:KeyPairKeyType":{"description":"The type of key pair. Note that ED25519 keys are not supported for Windows instances.\n If the ``PublicKeyMaterial`` property is specified, the ``KeyType`` property is ignored, and the key type is inferred from the ``PublicKeyMaterial`` value.\n Default: ``rsa``","type":"string","enum":[{"name":"Rsa","value":"rsa"},{"name":"Ed25519","value":"ed25519"}]},"aws-native:ec2:KeyPairTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:LaunchTemplateAcceleratorCount":{"description":"The minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) on an instance.","properties":{"max":{"type":"integer","description":"The maximum number of accelerators. To specify no maximum limit, omit this parameter. To exclude accelerator-enabled instance types, set ``Max`` to ``0``."},"min":{"type":"integer","description":"The minimum number of accelerators. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:LaunchTemplateAcceleratorTotalMemoryMiB":{"description":"The minimum and maximum amount of total accelerator memory, in MiB.","properties":{"max":{"type":"integer","description":"The maximum amount of accelerator memory, in MiB. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum amount of accelerator memory, in MiB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:LaunchTemplateBaselineEbsBandwidthMbps":{"description":"The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see [Amazon EBS–optimized instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html) in the *Amazon EC2 User Guide*.","properties":{"max":{"type":"integer","description":"The maximum baseline bandwidth, in Mbps. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum baseline bandwidth, in Mbps. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:LaunchTemplateBaselinePerformanceFactors":{"description":"The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application.\n Currently, this parameter only supports CPU performance as a baseline performance factor. For example, specifying ``c6i`` would use the CPU performance of the ``c6i`` family as the baseline reference.","properties":{"cpu":{"$ref":"#/types/aws-native:ec2:LaunchTemplateCpu","description":"The CPU performance to consider, using an instance family as the baseline reference."}},"type":"object"},"aws-native:ec2:LaunchTemplateBlockDeviceMapping":{"description":"Specifies a block device mapping for a launch template. You must specify ``DeviceName`` plus exactly one of the following properties: ``Ebs``, ``NoDevice``, or ``VirtualName``.\n ``BlockDeviceMapping`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"deviceName":{"type":"string","description":"The device name (for example, /dev/sdh or xvdh)."},"ebs":{"$ref":"#/types/aws-native:ec2:LaunchTemplateEbs","description":"Parameters used to automatically set up EBS volumes when the instance is launched."},"noDevice":{"type":"string","description":"To omit the device from the block device mapping, specify an empty string."},"virtualName":{"type":"string","description":"The virtual device name (ephemeralN). Instance store volumes are numbered starting from 0. An instance type with 2 available instance store volumes can specify mappings for ephemeral0 and ephemeral1. The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume."}},"type":"object"},"aws-native:ec2:LaunchTemplateCapacityReservationSpecification":{"description":"Specifies an instance's Capacity Reservation targeting option. You can specify only one option at a time.\n ``CapacityReservationSpecification`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"capacityReservationPreference":{"type":"string","description":"Indicates the instance's Capacity Reservation preferences. Possible preferences include:\n  +  ``capacity-reservations-only`` - The instance will only run in a Capacity Reservation or Capacity Reservation group. If capacity isn't available, the instance will fail to launch.\n  +  ``open`` - The instance can run in any ``open`` Capacity Reservation that has matching attributes (instance type, platform, Availability Zone, tenancy).\n  +  ``none`` - The instance avoids running in a Capacity Reservation even if one is available. The instance runs in On-Demand capacity."},"capacityReservationTarget":{"$ref":"#/types/aws-native:ec2:LaunchTemplateCapacityReservationTarget","description":"Information about the target Capacity Reservation or Capacity Reservation group."}},"type":"object"},"aws-native:ec2:LaunchTemplateCapacityReservationTarget":{"description":"Specifies a target Capacity Reservation.\n ``CapacityReservationTarget`` is a property of the [Amazon EC2 LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html) property type.","properties":{"capacityReservationId":{"type":"string","description":"The ID of the Capacity Reservation in which to run the instance."},"capacityReservationResourceGroupArn":{"type":"string","description":"The ARN of the Capacity Reservation resource group in which to run the instance."}},"type":"object"},"aws-native:ec2:LaunchTemplateConnectionTrackingSpecification":{"description":"A security group connection tracking specification that enables you to set the idle timeout for connection tracking on an Elastic network interface. For more information, see [Connection tracking timeouts](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts) in the *Amazon EC2 User Guide*.","properties":{"tcpEstablishedTimeout":{"type":"integer","description":"Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 432000 seconds. Recommended: Less than 432000 seconds."},"udpStreamTimeout":{"type":"integer","description":"Timeout (in seconds) for idle UDP flows classified as streams which have seen more than one request-response transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180 seconds."},"udpTimeout":{"type":"integer","description":"Timeout (in seconds) for idle UDP flows that have seen traffic only in a single direction or a single request-response transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds."}},"type":"object"},"aws-native:ec2:LaunchTemplateCpu":{"description":"Specifies the CPU performance to consider when using an instance family as the baseline reference.","properties":{"references":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateReference"},"description":"The instance family to use as the baseline reference for CPU performance. All instance types that match your specified attributes are compared against the CPU performance of the referenced instance family, regardless of CPU manufacturer or architecture differences."}},"type":"object"},"aws-native:ec2:LaunchTemplateCpuOptions":{"description":"Specifies the CPU options for an instance. For more information, see [Optimize CPU options](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-optimize-cpu.html) in the *User Guide*.\n ``CpuOptions`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"amdSevSnp":{"$ref":"#/types/aws-native:ec2:LaunchTemplateCpuOptionsAmdSevSnp","description":"Indicates whether to enable the instance for AMD SEV-SNP. AMD SEV-SNP is supported with M6a, R6a, and C6a instance types only. For more information, see [AMD SEV-SNP for Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html)."},"coreCount":{"type":"integer","description":"The number of CPU cores for the instance."},"threadsPerCore":{"type":"integer","description":"The number of threads per CPU core. To disable multithreading for the instance, specify a value of ``1``. Otherwise, specify the default value of ``2``."}},"type":"object"},"aws-native:ec2:LaunchTemplateCpuOptionsAmdSevSnp":{"description":"Indicates whether to enable the instance for AMD SEV-SNP. AMD SEV-SNP is supported with M6a, R6a, and C6a instance types only. For more information, see [AMD SEV-SNP for Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html).","type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:ec2:LaunchTemplateCreditSpecification":{"description":"Specifies the credit option for CPU usage of a T2, T3, or T3a instance.\n ``CreditSpecification`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"cpuCredits":{"type":"string","description":"The credit option for CPU usage of a T instance.\n Valid values: ``standard`` | ``unlimited``"}},"type":"object"},"aws-native:ec2:LaunchTemplateData":{"description":"The information to include in the launch template.\n  You must specify at least one parameter for the launch template data.","properties":{"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateBlockDeviceMapping"},"description":"The block device mapping."},"capacityReservationSpecification":{"$ref":"#/types/aws-native:ec2:LaunchTemplateCapacityReservationSpecification","description":"The Capacity Reservation targeting option. If you do not specify this parameter, the instance's Capacity Reservation preference defaults to ``open``, which enables it to run in any open Capacity Reservation that has matching attributes (instance type, platform, Availability Zone)."},"cpuOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateCpuOptions","description":"The CPU options for the instance. For more information, see [CPU options for Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-optimize-cpu.html) in the *Amazon EC2 User Guide*."},"creditSpecification":{"$ref":"#/types/aws-native:ec2:LaunchTemplateCreditSpecification","description":"The credit option for CPU usage of the instance. Valid only for T instances."},"disableApiStop":{"type":"boolean","description":"Indicates whether to enable the instance for stop protection. For more information, see [Enable stop protection for your EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-stop-protection.html) in the *Amazon EC2 User Guide*."},"disableApiTermination":{"type":"boolean","description":"Indicates whether termination protection is enabled for the instance. The default is ``false``, which means that you can terminate the instance using the Amazon EC2 console, command line tools, or API. You can enable termination protection when you launch an instance, while the instance is running, or while the instance is stopped."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the instance is optimized for Amazon EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal Amazon EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS-optimized instance."},"enclaveOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateEnclaveOptions","description":"Indicates whether the instance is enabled for AWS Nitro Enclaves. For more information, see [What is Nitro Enclaves?](https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html) in the *Nitro Enclaves User Guide*.\n You can't enable AWS Nitro Enclaves and hibernation on the same instance."},"hibernationOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateHibernationOptions","description":"Indicates whether an instance is enabled for hibernation. This parameter is valid only if the instance meets the [hibernation prerequisites](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/hibernating-prerequisites.html). For more information, see [Hibernate your Amazon EC2 instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Hibernate.html) in the *Amazon EC2 User Guide*."},"iamInstanceProfile":{"$ref":"#/types/aws-native:ec2:LaunchTemplateIamInstanceProfile","description":"The name or Amazon Resource Name (ARN) of an IAM instance profile."},"imageId":{"type":"string","description":"The ID of the AMI. Alternatively, you can specify a Systems Manager parameter, which will resolve to an AMI ID on launch.\n Valid formats:\n  +   ``ami-0ac394d6a3example`` \n  +   ``resolve:ssm:parameter-name`` \n  +   ``resolve:ssm:parameter-name:version-number`` \n  +   ``resolve:ssm:parameter-name:label`` \n  \n For more information, see [Use a Systems Manager parameter to find an AMI](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/finding-an-ami.html#using-systems-manager-parameter-to-find-AMI) in the *Amazon Elastic Compute Cloud User Guide*."},"instanceInitiatedShutdownBehavior":{"type":"string","description":"Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown).\n Default: ``stop``"},"instanceMarketOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateInstanceMarketOptions","description":"The market (purchasing) option for the instances."},"instanceRequirements":{"$ref":"#/types/aws-native:ec2:LaunchTemplateInstanceRequirements","description":"The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n  +  ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n  +  ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n  \n  If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html)AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n  For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*."},"instanceType":{"type":"string","description":"The instance type. For more information, see [Amazon EC2 instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide*.\n If you specify ``InstanceType``, you can't specify ``InstanceRequirements``."},"kernelId":{"type":"string","description":"The ID of the kernel.\n We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see [User Provided Kernels](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedkernels.html) in the *Amazon EC2 User Guide*."},"keyName":{"type":"string","description":"The name of the key pair. You can create a key pair using [CreateKeyPair](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateKeyPair.html) or [ImportKeyPair](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ImportKeyPair.html).\n  If you do not specify a key pair, you can't connect to the instance unless you choose an AMI that is configured to allow users another way to log in."},"licenseSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateLicenseSpecification"},"description":"The license configurations."},"maintenanceOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateMaintenanceOptions","description":"The maintenance options of your instance."},"metadataOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateMetadataOptions","description":"The metadata options for the instance. For more information, see [Configure the Instance Metadata Service options](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-options.html) in the *Amazon EC2 User Guide*."},"monitoring":{"$ref":"#/types/aws-native:ec2:LaunchTemplateMonitoring","description":"The monitoring for the instance."},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateNetworkInterface"},"description":"The network interfaces for the instance."},"networkPerformanceOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateNetworkPerformanceOptions","description":"The settings for the network performance options for the instance. For more information, see [EC2 instance bandwidth weighting configuration](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configure-bandwidth-weighting.html)."},"placement":{"$ref":"#/types/aws-native:ec2:LaunchTemplatePlacement","description":"The placement for the instance."},"privateDnsNameOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplatePrivateDnsNameOptions","description":"The hostname type for EC2 instances launched into this subnet and how DNS A and AAAA record queries should be handled. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*."},"ramDiskId":{"type":"string","description":"The ID of the RAM disk.\n  We recommend that you use PV-GRUB instead of kernels and RAM disks. For more information, see [User provided kernels](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/UserProvidedkernels.html) in the *Amazon EC2 User Guide*."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups. You can specify the IDs of existing security groups and references to resources created by the stack template.\n If you specify a network interface, you must specify any security groups as part of the network interface instead."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The names of the security groups. For a nondefault VPC, you must use security group IDs instead.\n If you specify a network interface, you must specify any security groups as part of the network interface instead of using this parameter."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:TagSpecification"},"description":"The tags to apply to resources that are created during instance launch.\n To tag the launch template itself, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#cfn-ec2-launchtemplate-tagspecifications)."},"userData":{"type":"string","description":"The user data to make available to the instance. You must provide base64-encoded text. User data is limited to 16 KB. For more information, see [Run commands when you launch an EC2 instance with user data input](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/user-data.html) in the *Amazon EC2 User Guide*.\n If you are creating the launch template for use with BATCH, the user data must be provided in the [MIME multi-part archive format](https://docs.aws.amazon.com/https://cloudinit.readthedocs.io/en/latest/topics/format.html#mime-multi-part-archive). For more information, see [Amazon EC2 user data in launch templates](https://docs.aws.amazon.com/batch/latest/userguide/launch-templates.html#lt-user-data) in the *User Guide*."}},"type":"object"},"aws-native:ec2:LaunchTemplateEbs":{"description":"Parameters for a block device for an EBS volume in an Amazon EC2 launch template.\n ``Ebs`` is a property of [AWS::EC2::LaunchTemplate BlockDeviceMapping](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-blockdevicemapping.html).","properties":{"deleteOnTermination":{"type":"boolean","description":"Indicates whether the EBS volume is deleted on instance termination."},"ebsCardIndex":{"type":"integer"},"encrypted":{"type":"boolean","description":"Indicates whether the EBS volume is encrypted. Encrypted volumes can only be attached to instances that support Amazon EBS encryption. If you are creating a volume from a snapshot, you can't specify an encryption value."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS). For ``gp3``, ``io1``, and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.\n The following are the supported values for each volume type:\n  +  ``gp3``: 3,000 - 80,000 IOPS\n  +  ``io1``: 100 - 64,000 IOPS\n  +  ``io2``: 100 - 256,000 IOPS\n  \n For ``io2`` volumes, you can achieve up to 256,000 IOPS on [instances built on the Nitro System](https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html). On other instances, you can achieve performance up to 32,000 IOPS.\n This parameter is supported for ``io1``, ``io2``, and ``gp3`` volumes only."},"kmsKeyId":{"type":"string","description":"Identifier (key ID, key alias, key ARN, or alias ARN) of the customer managed KMS key to use for EBS encryption."},"snapshotId":{"type":"string","description":"The ID of the snapshot."},"throughput":{"type":"integer","description":"The throughput to provision for a ``gp3`` volume, with a maximum of 2,000 MiB/s.\n Valid Range: Minimum value of 125. Maximum value of 2,000."},"volumeInitializationRate":{"type":"integer","description":"Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization*. Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.\n This parameter is supported only for volumes created from snapshots. Omit this parameter if:\n  +  You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.\n  If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.\n   +  You want to create a volume that is initialized at the default rate.\n  \n For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EC2 User Guide*.\n Valid range: 100 - 300 MiB/s"},"volumeSize":{"type":"integer","description":"The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. The following are the supported volumes sizes for each volume type:\n  +  ``gp2``: 1 - 16,384 GiB\n  +  ``gp3``: 1 - 65,536 GiB\n  +  ``io1``: 4 - 16,384 GiB\n  +  ``io2``: 4 - 65,536 GiB\n  +  ``st1`` and ``sc1``: 125 - 16,384 GiB\n  +  ``standard``: 1 - 1024 GiB"},"volumeType":{"type":"string","description":"The volume type. For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide*."}},"type":"object"},"aws-native:ec2:LaunchTemplateEnaSrdSpecification":{"description":"ENA Express uses AWS Scalable Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances. With ENA Express, you can communicate between two EC2 instances in the same subnet within the same account, or in different accounts. Both sending and receiving instances must have ENA Express enabled.\n To improve the reliability of network packet delivery, ENA Express reorders network packets on the receiving end by default. However, some UDP-based applications are designed to handle network packets that are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express is enabled, you can specify whether UDP network traffic uses it.","properties":{"enaSrdEnabled":{"type":"boolean","description":"Indicates whether ENA Express is enabled for the network interface."},"enaSrdUdpSpecification":{"$ref":"#/types/aws-native:ec2:LaunchTemplateEnaSrdUdpSpecification","description":"Configures ENA Express for UDP network traffic."}},"type":"object"},"aws-native:ec2:LaunchTemplateEnaSrdUdpSpecification":{"description":"ENA Express is compatible with both TCP and UDP transport protocols. When it's enabled, TCP traffic automatically uses it. However, some UDP-based applications are designed to handle network packets that are out of order, without a need for retransmission, such as live video broadcasting or other near-real-time applications. For UDP traffic, you can specify whether to use ENA Express, based on your application environment needs.","properties":{"enaSrdUdpEnabled":{"type":"boolean","description":"Indicates whether UDP traffic to and from the instance uses ENA Express. To specify this setting, you must first enable ENA Express."}},"type":"object"},"aws-native:ec2:LaunchTemplateEnclaveOptions":{"description":"Indicates whether the instance is enabled for AWS Nitro Enclaves.","properties":{"enabled":{"type":"boolean","description":"If this parameter is set to ``true``, the instance is enabled for AWS Nitro Enclaves; otherwise, it is not enabled for AWS Nitro Enclaves."}},"type":"object"},"aws-native:ec2:LaunchTemplateHibernationOptions":{"description":"Specifies whether your instance is configured for hibernation. This parameter is valid only if the instance meets the [hibernation prerequisites](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Hibernate.html#hibernating-prerequisites). For more information, see [Hibernate Your Instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Hibernate.html) in the *Amazon EC2 User Guide*.\n ``HibernationOptions`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"configured":{"type":"boolean","description":"If you set this parameter to ``true``, the instance is enabled for hibernation.\n Default: ``false``"}},"type":"object"},"aws-native:ec2:LaunchTemplateIamInstanceProfile":{"description":"Specifies an IAM instance profile, which is a container for an IAM role for your instance. You can use an IAM role to distribute your AWS credentials to your instances.\n If you are creating the launch template for use with an ASlong group, you can specify either the name or the ARN of the instance profile, but not both.\n ``IamInstanceProfile`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance profile."},"name":{"type":"string","description":"The name of the instance profile."}},"type":"object"},"aws-native:ec2:LaunchTemplateInstanceMarketOptions":{"description":"Specifies the market (purchasing) option for an instance.\n ``InstanceMarketOptions`` is a property of the [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"marketType":{"type":"string","description":"The market type."},"spotOptions":{"$ref":"#/types/aws-native:ec2:LaunchTemplateSpotOptions","description":"The options for Spot Instances."}},"type":"object"},"aws-native:ec2:LaunchTemplateInstanceRequirements":{"description":"The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with these attributes.\n You must specify ``VCpuCount`` and ``MemoryMiB``. All other attributes are optional. Any unspecified optional attribute is set to its default.\n When you specify multiple attributes, you get instance types that satisfy all of the specified attributes. If you specify multiple values for an attribute, you get instance types that satisfy any of the specified values.\n To limit the list of instance types from which Amazon EC2 can identify matching instance types, you can use one of the following parameters, but not both in the same request:\n  +  ``AllowedInstanceTypes`` - The instance types to include in the list. All other instance types are ignored, even if they match your specified attributes.\n  +  ``ExcludedInstanceTypes`` - The instance types to exclude from the list, even if they match your specified attributes.\n  \n  If you specify ``InstanceRequirements``, you can't specify ``InstanceType``.\n Attribute-based instance type selection is only supported when using Auto Scaling groups, EC2 Fleet, and Spot Fleet to launch instances. If you plan to use the launch template in the [launch instance wizard](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance-wizard.html), or with the [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) API or [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html)AWS CloudFormation resource, you can't specify ``InstanceRequirements``.\n  For more information, see [Specify attributes for instance type selection for EC2 Fleet or Spot Fleet](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html) and [Spot placement score](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-placement-score.html) in the *Amazon EC2 User Guide*.","properties":{"acceleratorCount":{"$ref":"#/types/aws-native:ec2:LaunchTemplateAcceleratorCount","description":"The minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) on an instance.\n To exclude accelerator-enabled instance types, set ``Max`` to ``0``.\n Default: No minimum or maximum limits"},"acceleratorManufacturers":{"type":"array","items":{"type":"string"},"description":"Indicates whether instance types must have accelerators by specific manufacturers.\n  +  For instance types with AWS devices, specify ``amazon-web-services``.\n  +  For instance types with AMD devices, specify ``amd``.\n  +  For instance types with Habana devices, specify ``habana``.\n  +  For instance types with NVIDIA devices, specify ``nvidia``.\n  +  For instance types with Xilinx devices, specify ``xilinx``.\n  \n Default: Any manufacturer"},"acceleratorNames":{"type":"array","items":{"type":"string"},"description":"The accelerators that must be on the instance type.\n  +  For instance types with NVIDIA A10G GPUs, specify ``a10g``.\n  +  For instance types with NVIDIA A100 GPUs, specify ``a100``.\n  +  For instance types with NVIDIA H100 GPUs, specify ``h100``.\n  +  For instance types with AWS Inferentia chips, specify ``inferentia``.\n  +  For instance types with NVIDIA GRID K520 GPUs, specify ``k520``.\n  +  For instance types with NVIDIA K80 GPUs, specify ``k80``.\n  +  For instance types with NVIDIA M60 GPUs, specify ``m60``.\n  +  For instance types with AMD Radeon Pro V520 GPUs, specify ``radeon-pro-v520``.\n  +  For instance types with NVIDIA T4 GPUs, specify ``t4``.\n  +  For instance types with NVIDIA T4G GPUs, specify ``t4g``.\n  +  For instance types with Xilinx VU9P FPGAs, specify ``vu9p``.\n  +  For instance types with NVIDIA V100 GPUs, specify ``v100``.\n  \n Default: Any accelerator"},"acceleratorTotalMemoryMiB":{"$ref":"#/types/aws-native:ec2:LaunchTemplateAcceleratorTotalMemoryMiB","description":"The minimum and maximum amount of total accelerator memory, in MiB.\n Default: No minimum or maximum limits"},"acceleratorTypes":{"type":"array","items":{"type":"string"},"description":"The accelerator types that must be on the instance type.\n  +  For instance types with FPGA accelerators, specify ``fpga``.\n  +  For instance types with GPU accelerators, specify ``gpu``.\n  +  For instance types with Inference accelerators, specify ``inference``.\n  \n Default: Any accelerator type"},"allowedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes.\n You can use strings with one or more wild cards, represented by an asterisk (``*``), to allow an instance type, size, or generation. The following are examples: ``m5.8xlarge``, ``c5*.*``, ``m5a.*``, ``r*``, ``*3*``.\n For example, if you specify ``c5*``,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*``, Amazon EC2 will allow all the M5a instance types, but not the M5n instance types.\n  If you specify ``AllowedInstanceTypes``, you can't specify ``ExcludedInstanceTypes``.\n  Default: All instance types"},"bareMetal":{"type":"string","description":"Indicates whether bare metal instance types must be included, excluded, or required.\n  +  To include bare metal instance types, specify ``included``.\n  +  To require only bare metal instance types, specify ``required``.\n  +  To exclude bare metal instance types, specify ``excluded``.\n  \n Default: ``excluded``"},"baselineEbsBandwidthMbps":{"$ref":"#/types/aws-native:ec2:LaunchTemplateBaselineEbsBandwidthMbps","description":"The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see [Amazon EBS–optimized instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html) in the *Amazon EC2 User Guide*.\n Default: No minimum or maximum limits"},"baselinePerformanceFactors":{"$ref":"#/types/aws-native:ec2:LaunchTemplateBaselinePerformanceFactors","description":"The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide*."},"burstablePerformance":{"type":"string","description":"Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see [Burstable performance instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html).\n  +  To include burstable performance instance types, specify ``included``.\n  +  To require only burstable performance instance types, specify ``required``.\n  +  To exclude burstable performance instance types, specify ``excluded``.\n  \n Default: ``excluded``"},"cpuManufacturers":{"type":"array","items":{"type":"string"},"description":"The CPU manufacturers to include.\n  +  For instance types with Intel CPUs, specify ``intel``.\n  +  For instance types with AMD CPUs, specify ``amd``.\n  +  For instance types with AWS CPUs, specify ``amazon-web-services``.\n  +  For instance types with Apple CPUs, specify ``apple``.\n  \n  Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template.\n  Default: Any manufacturer"},"excludedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to exclude.\n You can use strings with one or more wild cards, represented by an asterisk (``*``), to exclude an instance type, size, or generation. The following are examples: ``m5.8xlarge``, ``c5*.*``, ``m5a.*``, ``r*``, ``*3*``.\n For example, if you specify ``c5*``,Amazon EC2 will exclude the entire C5 instance family, which includes all C5a and C5n instance types. If you specify ``m5a.*``, Amazon EC2 will exclude all the M5a instance types, but not the M5n instance types.\n  If you specify ``ExcludedInstanceTypes``, you can't specify ``AllowedInstanceTypes``.\n  Default: No excluded instance types"},"instanceGenerations":{"type":"array","items":{"type":"string"},"description":"Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide*.\n For current generation instance types, specify ``current``.\n For previous generation instance types, specify ``previous``.\n Default: Current and previous generation instance types"},"localStorage":{"type":"string","description":"Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, [Amazon EC2 instance store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html) in the *Amazon EC2 User Guide*.\n  +  To include instance types with instance store volumes, specify ``included``.\n  +  To require only instance types with instance store volumes, specify ``required``.\n  +  To exclude instance types with instance store volumes, specify ``excluded``.\n  \n Default: ``included``"},"localStorageTypes":{"type":"array","items":{"type":"string"},"description":"The type of local storage that is required.\n  +  For instance types with hard disk drive (HDD) storage, specify ``hdd``.\n  +  For instance types with solid state drive (SSD) storage, specify ``ssd``.\n  \n Default: ``hdd`` and ``ssd``"},"maxSpotPriceAsPercentageOfOptimalOnDemandPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.\n The parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n If you set ``TargetCapacityUnitType`` to ``vcpu`` or ``memory-mib``, the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.\n  Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as ``999999``."},"memoryGiBPerVCpu":{"$ref":"#/types/aws-native:ec2:LaunchTemplateMemoryGiBPerVCpu","description":"The minimum and maximum amount of memory per vCPU, in GiB.\n Default: No minimum or maximum limits"},"memoryMiB":{"$ref":"#/types/aws-native:ec2:LaunchTemplateMemoryMiB","description":"The minimum and maximum amount of memory, in MiB."},"networkBandwidthGbps":{"$ref":"#/types/aws-native:ec2:LaunchTemplateNetworkBandwidthGbps","description":"The minimum and maximum amount of network bandwidth, in gigabits per second (Gbps).\n Default: No minimum or maximum limits"},"networkInterfaceCount":{"$ref":"#/types/aws-native:ec2:LaunchTemplateNetworkInterfaceCount","description":"The minimum and maximum number of network interfaces.\n Default: No minimum or maximum limits"},"onDemandMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.\n The parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n To turn off price protection, specify a high value, such as ``999999``.\n This parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) and [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html).\n  If you set ``TargetCapacityUnitType`` to ``vcpu`` or ``memory-mib``, the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per-instance price.\n  Default: ``20``"},"requireHibernateSupport":{"type":"boolean","description":"Indicates whether instance types must support hibernation for On-Demand Instances.\n This parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html).\n Default: ``false``"},"spotMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage higher than an identified Spot price. The identified Spot price is the Spot price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified Spot price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose Spot price exceeds your specified threshold.\n The parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n If you set ``TargetCapacityUnitType`` to ``vcpu`` or ``memory-mib``, the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per-instance price.\n This parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) and [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html).\n  Only one of ``SpotMaxPricePercentageOverLowestPrice`` or ``MaxSpotPriceAsPercentageOfOptimalOnDemandPrice`` can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as ``999999``.\n  Default: ``100``"},"totalLocalStorageGb":{"$ref":"#/types/aws-native:ec2:LaunchTemplateTotalLocalStorageGb","description":"The minimum and maximum amount of total local storage, in GB.\n Default: No minimum or maximum limits"},"vCpuCount":{"$ref":"#/types/aws-native:ec2:LaunchTemplateVCpuCount","description":"The minimum and maximum number of vCPUs."}},"type":"object"},"aws-native:ec2:LaunchTemplateIpv4PrefixSpecification":{"description":"Specifies an IPv4 prefix for a network interface.\n ``Ipv4PrefixSpecification`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).","properties":{"ipv4Prefix":{"type":"string","description":"The IPv4 prefix. For information, see [Assigning prefixes to network interfaces](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-prefix-eni.html) in the *Amazon EC2 User Guide*."}},"type":"object"},"aws-native:ec2:LaunchTemplateIpv6Add":{"description":"Specifies an IPv6 address in an Amazon EC2 launch template.\n ``Ipv6Add`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).","properties":{"ipv6Address":{"type":"string","description":"One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet. You can't use this option if you're specifying a number of IPv6 addresses."}},"type":"object"},"aws-native:ec2:LaunchTemplateIpv6PrefixSpecification":{"description":"Specifies an IPv6 prefix for a network interface.\n ``Ipv6PrefixSpecification`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).","properties":{"ipv6Prefix":{"type":"string","description":"The IPv6 prefix."}},"type":"object"},"aws-native:ec2:LaunchTemplateLicenseSpecification":{"description":"Specifies a license configuration for an instance.\n ``LicenseSpecification`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"licenseConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the license configuration."}},"type":"object"},"aws-native:ec2:LaunchTemplateMaintenanceOptions":{"description":"The maintenance options of your instance.","properties":{"autoRecovery":{"type":"string","description":"Disables the automatic recovery behavior of your instance or sets it to default."}},"type":"object"},"aws-native:ec2:LaunchTemplateMemoryGiBPerVCpu":{"description":"The minimum and maximum amount of memory per vCPU, in GiB.","properties":{"max":{"type":"number","description":"The maximum amount of memory per vCPU, in GiB. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of memory per vCPU, in GiB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:LaunchTemplateMemoryMiB":{"description":"The minimum and maximum amount of memory, in MiB.","properties":{"max":{"type":"integer","description":"The maximum amount of memory, in MiB. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum amount of memory, in MiB. To specify no minimum limit, specify ``0``."}},"type":"object"},"aws-native:ec2:LaunchTemplateMetadataOptions":{"description":"The metadata options for the instance. For more information, see [Instance metadata and user data](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html) in the *Amazon EC2 User Guide*.\n ``MetadataOptions`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"httpEndpoint":{"type":"string","description":"Enables or disables the HTTP metadata endpoint on your instances. If the parameter is not specified, the default state is ``enabled``.\n  If you specify a value of ``disabled``, you will not be able to access your instance metadata."},"httpProtocolIpv6":{"type":"string","description":"Enables or disables the IPv6 endpoint for the instance metadata service.\n Default: ``disabled``"},"httpPutResponseHopLimit":{"type":"integer","description":"The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel.\n Default: ``1``\n Possible values: Integers from 1 to 64"},"httpTokens":{"type":"string","description":"Indicates whether IMDSv2 is required.\n  +  ``optional`` - IMDSv2 is optional. You can choose whether to send a session token in your instance metadata retrieval requests. If you retrieve IAM role credentials without a session token, you receive the IMDSv1 role credentials. If you retrieve IAM role credentials using a valid session token, you receive the IMDSv2 role credentials.\n  +  ``required`` - IMDSv2 is required. You must send a session token in your instance metadata retrieval requests. With this option, retrieving the IAM role credentials always returns IMDSv2 credentials; IMDSv1 credentials are not available.\n  \n Default: If the value of ``ImdsSupport`` for the Amazon Machine Image (AMI) for your instance is ``v2.0``, the default is ``required``."},"instanceMetadataTags":{"type":"string","description":"Set to ``enabled`` to allow access to instance tags from the instance metadata. Set to ``disabled`` to turn off access to instance tags from the instance metadata. For more information, see [View tags for your EC2 instances using instance metadata](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/work-with-tags-in-IMDS.html).\n Default: ``disabled``"}},"type":"object"},"aws-native:ec2:LaunchTemplateMonitoring":{"description":"Specifies whether detailed monitoring is enabled for an instance. For more information about detailed monitoring, see [Enable or turn off detailed monitoring for your instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch-new.html) in the *User Guide*.\n ``Monitoring`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"enabled":{"type":"boolean","description":"Specify ``true`` to enable detailed monitoring. Otherwise, basic monitoring is enabled."}},"type":"object"},"aws-native:ec2:LaunchTemplateNetworkBandwidthGbps":{"description":"The minimum and maximum amount of network bandwidth, in gigabits per second (Gbps).\n  Setting the minimum bandwidth does not guarantee that your instance will achieve the minimum bandwidth. Amazon EC2 will identify instance types that support the specified minimum bandwidth, but the actual bandwidth of your instance might go below the specified minimum at times. For more information, see [Available instance bandwidth](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html#available-instance-bandwidth) in the *Amazon EC2 User Guide*.","properties":{"max":{"type":"number","description":"The maximum amount of network bandwidth, in Gbps. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of network bandwidth, in Gbps. If this parameter is not specified, there is no minimum limit."}},"type":"object"},"aws-native:ec2:LaunchTemplateNetworkInterface":{"description":"Specifies the parameters for a network interface.\n ``NetworkInterface`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"associateCarrierIpAddress":{"type":"boolean","description":"Associates a Carrier IP address with eth0 for a new network interface.\n Use this option when you launch an instance in a Wavelength Zone and want to associate a Carrier IP address with the network interface. For more information about Carrier IP addresses, see [Carrier IP addresses](https://docs.aws.amazon.com/wavelength/latest/developerguide/how-wavelengths-work.html#provider-owned-ip) in the *Developer Guide*."},"associatePublicIpAddress":{"type":"boolean","description":"Associates a public IPv4 address with eth0 for a new network interface.\n AWS charges for all public IPv4 addresses, including public IPv4 addresses associated with running instances and Elastic IP addresses. For more information, see the *Public IPv4 Address* tab on the [Amazon VPC pricing page](https://docs.aws.amazon.com/vpc/pricing/)."},"connectionTrackingSpecification":{"$ref":"#/types/aws-native:ec2:LaunchTemplateConnectionTrackingSpecification","description":"A connection tracking specification for the network interface."},"deleteOnTermination":{"type":"boolean","description":"Indicates whether the network interface is deleted when the instance is terminated."},"description":{"type":"string","description":"A description for the network interface."},"deviceIndex":{"type":"integer","description":"The device index for the network interface attachment. The primary network interface has a device index of 0. If the network interface is of type ``interface``, you must specify a device index.\n If you create a launch template that includes secondary network interfaces but no primary network interface, and you specify it using the ``LaunchTemplate`` property of ``AWS::EC2::Instance``, then you must include a primary network interface using the ``NetworkInterfaces`` property of ``AWS::EC2::Instance``."},"enaQueueCount":{"type":"integer","description":"The number of ENA queues to be created with the instance."},"enaSrdSpecification":{"$ref":"#/types/aws-native:ec2:LaunchTemplateEnaSrdSpecification","description":"The ENA Express configuration for the network interface."},"groups":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more security groups."},"interfaceType":{"type":"string","description":"The type of network interface. To create an Elastic Fabric Adapter (EFA), specify ``efa`` or ``efa``. For more information, see [Elastic Fabric Adapter for AI/ML and HPC workloads on Amazon EC2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html) in the *Amazon EC2 User Guide*.\n If you are not creating an EFA, specify ``interface`` or omit this parameter.\n If you specify ``efa-only``, do not assign any IP addresses to the network interface. EFA-only network interfaces do not support IP addresses.\n Valid values: ``interface`` | ``efa`` | ``efa-only``"},"ipv4PrefixCount":{"type":"integer","description":"The number of IPv4 prefixes to be automatically assigned to the network interface. You cannot use this option if you use the ``Ipv4Prefix`` option."},"ipv4Prefixes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateIpv4PrefixSpecification"},"description":"One or more IPv4 prefixes to be assigned to the network interface. You cannot use this option if you use the ``Ipv4PrefixCount`` option."},"ipv6AddressCount":{"type":"integer","description":"The number of IPv6 addresses to assign to a network interface. Amazon EC2 automatically selects the IPv6 addresses from the subnet range. You can't use this option if specifying specific IPv6 addresses."},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateIpv6Add"},"description":"One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet. You can't use this option if you're specifying a number of IPv6 addresses."},"ipv6PrefixCount":{"type":"integer","description":"The number of IPv6 prefixes to be automatically assigned to the network interface. You cannot use this option if you use the ``Ipv6Prefix`` option."},"ipv6Prefixes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateIpv6PrefixSpecification"},"description":"One or more IPv6 prefixes to be assigned to the network interface. You cannot use this option if you use the ``Ipv6PrefixCount`` option."},"networkCardIndex":{"type":"integer","description":"The index of the network card. Some instance types support multiple network cards. The primary network interface must be assigned to network card index 0. The default is network card index 0."},"networkInterfaceId":{"type":"string","description":"The ID of the network interface."},"primaryIpv6":{"type":"boolean","description":"The primary IPv6 address of the network interface. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. For more information about primary IPv6 addresses, see [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html)."},"privateIpAddress":{"type":"string","description":"The primary private IPv4 address of the network interface."},"privateIpAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplatePrivateIpAdd"},"description":"One or more private IPv4 addresses."},"secondaryPrivateIpAddressCount":{"type":"integer","description":"The number of secondary private IPv4 addresses to assign to a network interface."},"subnetId":{"type":"string","description":"The ID of the subnet for the network interface."}},"type":"object"},"aws-native:ec2:LaunchTemplateNetworkInterfaceCount":{"description":"The minimum and maximum number of network interfaces.","properties":{"max":{"type":"integer","description":"The maximum number of network interfaces. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum number of network interfaces. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:LaunchTemplateNetworkPerformanceOptions":{"description":"Contains settings for the network performance options for the instance.","properties":{"bandwidthWeighting":{"type":"string","description":"Specify the bandwidth weighting option to boost the associated type of baseline bandwidth, as follows:\n  + default This option uses the standard bandwidth configuration for your instance type. + vpc-1 This option boosts your networking baseline bandwidth and reduces your EBS baseline bandwidth. + ebs-1 This option boosts your EBS baseline bandwidth and reduces your networking baseline bandwidth."}},"type":"object"},"aws-native:ec2:LaunchTemplatePlacement":{"description":"Specifies the placement of an instance.\n ``Placement`` is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"affinity":{"type":"string","description":"The affinity setting for an instance on a Dedicated Host."},"availabilityZone":{"type":"string","description":"The Availability Zone for the instance.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` can be specified, but not both"},"groupId":{"type":"string","description":"The Group Id of a placement group. You must specify the Placement Group *Group Id* to launch an instance in a shared placement group."},"groupName":{"type":"string","description":"The name of the placement group for the instance."},"hostId":{"type":"string","description":"The ID of the Dedicated Host for the instance."},"hostResourceGroupArn":{"type":"string","description":"The ARN of the host resource group in which to launch the instances. If you specify a host resource group ARN, omit the *Tenancy* parameter or set it to ``host``."},"partitionNumber":{"type":"integer","description":"The number of the partition the instance should launch in. Valid only if the placement group strategy is set to ``partition``."},"spreadDomain":{"type":"string","description":"Reserved for future use."},"tenancy":{"type":"string","description":"The tenancy of the instance. An instance with a tenancy of dedicated runs on single-tenant hardware."}},"type":"object"},"aws-native:ec2:LaunchTemplatePrivateDnsNameOptions":{"description":"The hostname type for EC2 instances launched into this subnet and how DNS A and AAAA record queries should be handled. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*.","properties":{"enableResourceNameDnsARecord":{"type":"boolean","description":"Indicates whether to respond to DNS queries for instance hostnames with DNS A records."},"enableResourceNameDnsAaaaRecord":{"type":"boolean","description":"Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records."},"hostnameType":{"type":"string","description":"The type of hostname for EC2 instances. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*."}},"type":"object"},"aws-native:ec2:LaunchTemplatePrivateIpAdd":{"description":"Specifies a secondary private IPv4 address for a network interface.\n ``PrivateIpAdd`` is a property of [AWS::EC2::LaunchTemplate NetworkInterface](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-networkinterface.html).","properties":{"primary":{"type":"boolean","description":"Indicates whether the private IPv4 address is the primary private IPv4 address. Only one IPv4 address can be designated as primary."},"privateIpAddress":{"type":"string","description":"The private IPv4 address."}},"type":"object"},"aws-native:ec2:LaunchTemplateReference":{"description":"Specifies an instance family to use as the baseline reference for CPU performance.","properties":{"instanceFamily":{"type":"string","description":"The instance family to use as a baseline reference.\n  Ensure that you specify the correct value for the instance family. The instance family is everything before the period (``.``) in the instance type name. For example, in the instance type ``c6i.large``, the instance family is ``c6i``, not ``c6``. For more information, see [Amazon EC2 instance type naming conventions](https://docs.aws.amazon.com/ec2/latest/instancetypes/instance-type-names.html) in *Amazon EC2 Instance Types*.\n  The following instance families are *not supported* for performance protection:\n  +   ``c1`` \n  +  ``g3`` | ``g3s``\n  +   ``hpc7g`` \n  +  ``m1`` | ``m2``\n  +  ``mac1`` | ``mac2`` | ``mac2-m1ultra`` | ``mac2-m2`` | ``mac2-m2pro``\n  +  ``p3dn`` | ``p4d`` | ``p5``\n  +   ``t1`` \n  +  ``u-12tb1`` | ``u-18tb1`` | ``u-24tb1`` | ``u-3tb1`` | ``u-6tb1`` | ``u-9tb1`` | ``u7i-12tb`` | ``u7in-16tb`` | ``u7in-24tb`` | ``u7in-32tb``\n  \n If you enable performance protection by specifying a supported instance family, the returned instance types will exclude the above unsupported instance families."}},"type":"object"},"aws-native:ec2:LaunchTemplateSpotOptions":{"description":"Specifies options for Spot Instances.\n ``SpotOptions`` is a property of [AWS::EC2::LaunchTemplate InstanceMarketOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata-instancemarketoptions.html).","properties":{"blockDurationMinutes":{"type":"integer","description":"Deprecated."},"instanceInterruptionBehavior":{"type":"string","description":"The behavior when a Spot Instance is interrupted. The default is ``terminate``."},"maxPrice":{"type":"string","description":"The maximum hourly price you're willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price. If you do specify this parameter, it must be more than USD $0.001. Specifying a value below USD $0.001 will result in an ``InvalidParameterValue`` error message when the launch template is used to launch an instance.\n  If you specify a maximum price, your Spot Instances will be interrupted more frequently than if you do not specify this parameter."},"spotInstanceType":{"type":"string","description":"The Spot Instance request type.\n If you are using Spot Instances with an Auto Scaling group, use ``one-time`` requests, as the ASlong service handles requesting new Spot Instances whenever the group is below its desired capacity."},"validUntil":{"type":"string","description":"The end date of the request, in UTC format (*YYYY-MM-DD*T*HH:MM:SS*Z). Supported only for persistent requests.\n  +  For a persistent request, the request remains active until the ``ValidUntil`` date and time is reached. Otherwise, the request remains active until you cancel it.\n  +  For a one-time request, ``ValidUntil`` is not supported. The request remains active until all instances launch or you cancel the request.\n  \n Default: 7 days from the current date"}},"type":"object"},"aws-native:ec2:LaunchTemplateTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:LaunchTemplateTagSpecification":{"description":"Specifies the tags to apply to the launch template during creation.\n To specify the tags for the resources that are created during instance launch, use [AWS::EC2::LaunchTemplate TagSpecification](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-tagspecification.html).\n ``LaunchTemplateTagSpecification`` is a property of [AWS::EC2::LaunchTemplate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html).","properties":{"resourceType":{"type":"string","description":"The type of resource. To tag a launch template, ``ResourceType`` must be ``launch-template``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateTag"},"description":"The tags for the resource."}},"type":"object"},"aws-native:ec2:LaunchTemplateTotalLocalStorageGb":{"description":"The minimum and maximum amount of total local storage, in GB.","properties":{"max":{"type":"number","description":"The maximum amount of total local storage, in GB. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of total local storage, in GB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:LaunchTemplateVCpuCount":{"description":"The minimum and maximum number of vCPUs.","properties":{"max":{"type":"integer","description":"The maximum number of vCPUs. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum number of vCPUs. To specify no minimum limit, specify ``0``."}},"type":"object"},"aws-native:ec2:LocalGatewayRouteTableTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:ec2:LocalGatewayRouteTableVirtualInterfaceGroupAssociationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:ec2:LocalGatewayRouteTableVpcAssociationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:ec2:LocalGatewayVirtualInterfaceGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object"},"aws-native:ec2:LocalGatewayVirtualInterfaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object"},"aws-native:ec2:NatGatewayAvailabilityZoneAddress":{"description":"For regional NAT gateways only: The configuration specifying which Elastic IP address (EIP) to use for handling outbound NAT traffic from a specific Availability Zone. \n A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n For more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide*.","properties":{"allocationIds":{"type":"array","items":{"type":"string"},"description":"The allocation IDs of the Elastic IP addresses (EIPs) to be used for handling outbound NAT traffic in this specific Availability Zone."},"availabilityZone":{"type":"string","description":"For regional NAT gateways only: The Availability Zone where this specific NAT gateway configuration will be active. Each AZ in a regional NAT gateway has its own configuration to handle outbound NAT traffic from that AZ. \n A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region."},"availabilityZoneId":{"type":"string","description":"For regional NAT gateways only: The ID of the Availability Zone where this specific NAT gateway configuration will be active. Each AZ in a regional NAT gateway has its own configuration to handle outbound NAT traffic from that AZ. Use this instead of AvailabilityZone for consistent identification of AZs across AWS Regions. \n A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region."}},"type":"object","required":["allocationIds"]},"aws-native:ec2:NatGatewayTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:NetworkAclTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:NetworkInsightsAccessScopeAccessScopePathRequest":{"properties":{"destination":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopePathStatementRequest","description":"The destination."},"source":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopePathStatementRequest","description":"The source."},"throughResources":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeThroughResourcesStatementRequest"},"description":"The through resources."}},"type":"object"},"aws-native:ec2:NetworkInsightsAccessScopeAnalysisFindingsFound":{"description":"Indicates whether there are findings (true | false | unknown).","type":"string","enum":[{"name":"True","value":"true"},{"name":"False","value":"false"},{"name":"Unknown","value":"unknown"}]},"aws-native:ec2:NetworkInsightsAccessScopeAnalysisStatus":{"description":"The status of the analysis (running | succeeded | failed).","type":"string","enum":[{"name":"Running","value":"running"},{"name":"Failed","value":"failed"},{"name":"Succeeded","value":"succeeded"}]},"aws-native:ec2:NetworkInsightsAccessScopeAnalysisTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:ec2:NetworkInsightsAccessScopePacketHeaderStatementRequest":{"properties":{"destinationAddresses":{"type":"array","items":{"type":"string"},"description":"The destination addresses."},"destinationPorts":{"type":"array","items":{"type":"string"},"description":"The destination ports."},"destinationPrefixLists":{"type":"array","items":{"type":"string"},"description":"The destination prefix lists."},"protocols":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeProtocol"},"description":"The protocols."},"sourceAddresses":{"type":"array","items":{"type":"string"},"description":"The source addresses."},"sourcePorts":{"type":"array","items":{"type":"string"},"description":"The source ports."},"sourcePrefixLists":{"type":"array","items":{"type":"string"},"description":"The source prefix lists."}},"type":"object"},"aws-native:ec2:NetworkInsightsAccessScopePathStatementRequest":{"properties":{"packetHeaderStatement":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopePacketHeaderStatementRequest","description":"The packet header statement."},"resourceStatement":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeResourceStatementRequest","description":"The resource statement."}},"type":"object"},"aws-native:ec2:NetworkInsightsAccessScopeProtocol":{"type":"string","enum":[{"name":"Tcp","value":"tcp"},{"name":"Udp","value":"udp"}]},"aws-native:ec2:NetworkInsightsAccessScopeResourceStatementRequest":{"properties":{"resourceTypes":{"type":"array","items":{"type":"string"},"description":"The resource types."},"resources":{"type":"array","items":{"type":"string"},"description":"The resources."}},"type":"object"},"aws-native:ec2:NetworkInsightsAccessScopeTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:ec2:NetworkInsightsAccessScopeThroughResourcesStatementRequest":{"properties":{"resourceStatement":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeResourceStatementRequest","description":"The resource statement."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAdditionalDetail":{"properties":{"additionalDetailType":{"type":"string","description":"The additional detail code."},"component":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The path component."},"loadBalancers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent"},"description":"The load balancers."},"serviceName":{"type":"string","description":"The name of the VPC endpoint service."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAlternatePathHint":{"properties":{"componentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the component."},"componentId":{"type":"string","description":"The ID of the component."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisAclRule":{"properties":{"cidr":{"type":"string","description":"The IPv4 address range, in CIDR notation."},"egress":{"type":"boolean","description":"Indicates whether the rule is an outbound rule."},"portRange":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPortRange","description":"The range of ports."},"protocol":{"type":"string","description":"The protocol."},"ruleAction":{"type":"string","description":"Indicates whether to allow or deny traffic that matches the rule."},"ruleNumber":{"type":"integer","description":"The rule number."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the component."},"id":{"type":"string","description":"The ID of the component."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisLoadBalancerListener":{"properties":{"instancePort":{"type":"integer","description":"[Classic Load Balancers] The back-end port for the listener."},"loadBalancerPort":{"type":"integer","description":"The port on which the load balancer is listening."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisLoadBalancerTarget":{"properties":{"address":{"type":"string","description":"The IP address."},"availabilityZone":{"type":"string","description":"The Availability Zone."},"instance":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"Information about the instance."},"port":{"type":"integer","description":"The port on which the target is listening."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisPacketHeader":{"properties":{"destinationAddresses":{"type":"array","items":{"type":"string"},"description":"The destination addresses."},"destinationPortRanges":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPortRange"},"description":"The destination port ranges."},"protocol":{"type":"string","description":"The protocol."},"sourceAddresses":{"type":"array","items":{"type":"string"},"description":"The source addresses."},"sourcePortRanges":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPortRange"},"description":"The source port ranges."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisRouteTableRoute":{"properties":{"destinationCidr":{"type":"string","description":"The destination IPv4 address, in CIDR notation."},"destinationPrefixListId":{"type":"string","description":"The prefix of the AWS service."},"egressOnlyInternetGatewayId":{"type":"string","description":"The ID of an egress-only internet gateway."},"gatewayId":{"type":"string","description":"The ID of the gateway, such as an internet gateway or virtual private gateway."},"instanceId":{"type":"string","description":"The ID of the instance, such as a NAT instance."},"natGatewayId":{"type":"string","description":"The ID of a NAT gateway."},"networkInterfaceId":{"type":"string","description":"The ID of a network interface."},"origin":{"type":"string","description":"Describes how the route was created. The following are the possible values:\n\n- CreateRouteTable - The route was automatically created when the route table was created.\n- CreateRoute - The route was manually added to the route table.\n- EnableVgwRoutePropagation - The route was propagated by route propagation."},"state":{"type":"string","description":"The state. The following are the possible values:\n\n- active\n- blackhole"},"transitGatewayId":{"type":"string","description":"The ID of a transit gateway."},"vpcPeeringConnectionId":{"type":"string","description":"The ID of a VPC peering connection."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisAnalysisSecurityGroupRule":{"properties":{"cidr":{"type":"string","description":"The IPv4 address range, in CIDR notation."},"direction":{"type":"string","description":"The direction. The following are the possible values:\n\n- egress\n- ingress"},"portRange":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPortRange","description":"The port range."},"prefixListId":{"type":"string","description":"The prefix list ID."},"protocol":{"type":"string","description":"The protocol name."},"securityGroupId":{"type":"string","description":"The security group ID."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisExplanation":{"properties":{"acl":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The network ACL."},"aclRule":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisAclRule","description":"The network ACL rule."},"address":{"type":"string","description":"The IPv4 address, in CIDR notation."},"addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses, in CIDR notation."},"attachedTo":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The resource to which the component is attached."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"The Availability Zones."},"cidrs":{"type":"array","items":{"type":"string"},"description":"The CIDR ranges."},"classicLoadBalancerListener":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisLoadBalancerListener","description":"The listener for a Classic Load Balancer."},"component":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The component."},"componentAccount":{"type":"string","description":"The AWS account for the component."},"componentRegion":{"type":"string","description":"The Region for the component."},"customerGateway":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The customer gateway."},"destination":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The destination."},"destinationVpc":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The destination VPC."},"direction":{"type":"string","description":"The direction. The following are the possible values:\n\n- egress\n- ingress"},"elasticLoadBalancerListener":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The load balancer listener."},"explanationCode":{"type":"string","description":"The explanation code."},"ingressRouteTable":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The route table."},"internetGateway":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The internet gateway."},"loadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the load balancer."},"loadBalancerListenerPort":{"type":"integer","description":"The listener port of the load balancer."},"loadBalancerTarget":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisLoadBalancerTarget","description":"The target."},"loadBalancerTargetGroup":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The target group."},"loadBalancerTargetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent"},"description":"The target groups."},"loadBalancerTargetPort":{"type":"integer","description":"The target port."},"missingComponent":{"type":"string","description":"The missing component."},"natGateway":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The NAT gateway."},"networkInterface":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The network interface."},"packetField":{"type":"string","description":"The packet field."},"port":{"type":"integer","description":"The port."},"portRanges":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPortRange"},"description":"The port ranges."},"prefixList":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The prefix list."},"protocols":{"type":"array","items":{"type":"string"},"description":"The protocols."},"routeTable":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The route table."},"routeTableRoute":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisRouteTableRoute","description":"The route table route."},"securityGroup":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The security group."},"securityGroupRule":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisSecurityGroupRule","description":"The security group rule."},"securityGroups":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent"},"description":"The security groups."},"sourceVpc":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The source VPC."},"state":{"type":"string","description":"The state."},"subnet":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The subnet."},"subnetRouteTable":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The route table for the subnet."},"transitGateway":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The transit gateway."},"transitGatewayAttachment":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The transit gateway attachment."},"transitGatewayRouteTable":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The transit gateway route table."},"transitGatewayRouteTableRoute":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisTransitGatewayRouteTableRoute","description":"The transit gateway route table route."},"vpc":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The component VPC."},"vpcEndpoint":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The VPC endpoint."},"vpcPeeringConnection":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The VPC peering connection."},"vpnConnection":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The VPN connection."},"vpnGateway":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The VPN gateway."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisPathComponent":{"properties":{"aclRule":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisAclRule","description":"The network ACL rule."},"additionalDetails":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAdditionalDetail"},"description":"The additional details."},"component":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The component."},"destinationVpc":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The destination VPC."},"elasticLoadBalancerListener":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The load balancer listener."},"explanations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisExplanation"},"description":"The explanation codes."},"inboundHeader":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisPacketHeader","description":"The inbound header."},"outboundHeader":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisPacketHeader","description":"The outbound header."},"routeTableRoute":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisRouteTableRoute","description":"The route table route."},"securityGroupRule":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisSecurityGroupRule","description":"The security group rule."},"sequenceNumber":{"type":"integer","description":"The sequence number."},"serviceName":{"type":"string","description":"The name of the VPC endpoint service."},"sourceVpc":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The source VPC."},"subnet":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The subnet."},"transitGateway":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The transit gateway."},"transitGatewayRouteTableRoute":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisTransitGatewayRouteTableRoute","description":"The route in a transit gateway route table."},"vpc":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAnalysisComponent","description":"The component VPC."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisPortRange":{"properties":{"from":{"type":"integer","description":"The first port in the range."},"to":{"type":"integer","description":"The last port in the range."}},"type":"object"},"aws-native:ec2:NetworkInsightsAnalysisStatus":{"description":"The status of the network insights analysis.","type":"string","enum":[{"name":"Running","value":"running"},{"name":"Failed","value":"failed"},{"name":"Succeeded","value":"succeeded"}]},"aws-native:ec2:NetworkInsightsAnalysisTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:ec2:NetworkInsightsAnalysisTransitGatewayRouteTableRoute":{"properties":{"attachmentId":{"type":"string","description":"The ID of the route attachment."},"destinationCidr":{"type":"string","description":"The CIDR block used for destination matches."},"prefixListId":{"type":"string","description":"The ID of the prefix list."},"resourceId":{"type":"string","description":"The ID of the resource for the route attachment."},"resourceType":{"type":"string","description":"The resource type for the route attachment."},"routeOrigin":{"type":"string","description":"The route origin. The following are the possible values:\n\n- static\n- propagated"},"state":{"type":"string","description":"The state of the route."}},"type":"object"},"aws-native:ec2:NetworkInsightsPathFilterPortRange":{"properties":{"fromPort":{"type":"integer","description":"The first port in the range."},"toPort":{"type":"integer","description":"The last port in the range."}},"type":"object"},"aws-native:ec2:NetworkInsightsPathPathFilter":{"properties":{"destinationAddress":{"type":"string","description":"The destination IPv4 address."},"destinationPortRange":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathFilterPortRange","description":"The destination port range."},"sourceAddress":{"type":"string","description":"The source IPv4 address."},"sourcePortRange":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathFilterPortRange","description":"The source port range."}},"type":"object"},"aws-native:ec2:NetworkInsightsPathProtocol":{"type":"string","enum":[{"name":"Tcp","value":"tcp"},{"name":"Udp","value":"udp"}]},"aws-native:ec2:NetworkInsightsPathTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:ec2:NetworkInterfaceAttachmentEnaSrdSpecification":{"description":"ENA Express uses AWS Scalable Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances. With ENA Express, you can communicate between two EC2 instances in the same subnet within the same account, or in different accounts. Both sending and receiving instances must have ENA Express enabled.\n To improve the reliability of network packet delivery, ENA Express reorders network packets on the receiving end by default. However, some UDP-based applications are designed to handle network packets that are out of order to reduce the overhead for packet delivery at the network layer. When ENA Express is enabled, you can specify whether UDP network traffic uses it.","properties":{"enaSrdEnabled":{"type":"boolean","description":"Indicates whether ENA Express is enabled for the network interface."},"enaSrdUdpSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceAttachmentEnaSrdSpecificationEnaSrdUdpSpecificationProperties","description":"Configures ENA Express for UDP network traffic."}},"type":"object"},"aws-native:ec2:NetworkInterfaceAttachmentEnaSrdSpecificationEnaSrdUdpSpecificationProperties":{"description":"Configures ENA Express for UDP network traffic.","properties":{"enaSrdUdpEnabled":{"type":"boolean"}},"type":"object"},"aws-native:ec2:NetworkInterfaceConnectionTrackingSpecification":{"properties":{"tcpEstablishedTimeout":{"type":"integer","description":"Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 432000 seconds. Recommended: Less than 432000 seconds."},"udpStreamTimeout":{"type":"integer","description":"Timeout (in seconds) for idle UDP flows classified as streams which have seen more than one request-response transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180 seconds."},"udpTimeout":{"type":"integer","description":"Timeout (in seconds) for idle UDP flows that have seen traffic only in a single direction or a single request-response transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds."}},"type":"object"},"aws-native:ec2:NetworkInterfaceInstanceIpv6Address":{"properties":{"ipv6Address":{"type":"string","description":"An IPv6 address to associate with the network interface."}},"type":"object","required":["ipv6Address"]},"aws-native:ec2:NetworkInterfaceIpv4PrefixSpecification":{"properties":{"ipv4Prefix":{"type":"string","description":"The IPv4 prefix. For information, see [Assigning prefixes to network interfaces](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-prefix-eni.html) in the *Amazon EC2 User Guide* ."}},"type":"object","required":["ipv4Prefix"]},"aws-native:ec2:NetworkInterfaceIpv6PrefixSpecification":{"properties":{"ipv6Prefix":{"type":"string","description":"The IPv6 prefix. For information, see [Assigning prefixes to Amazon EC2 network interfaces](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-prefix-eni.html) in the *Amazon Elastic Compute Cloud User Guide* ."}},"type":"object","required":["ipv6Prefix"]},"aws-native:ec2:NetworkInterfacePrivateIpAddressSpecification":{"properties":{"primary":{"type":"boolean","description":"Sets the private IP address as the primary private address. You can set only one primary private IP address. If you don't specify a primary private IP address, Amazon EC2 automatically assigns a primary private IP address."},"privateIpAddress":{"type":"string","description":"The private IP address of the network interface."}},"type":"object","required":["primary","privateIpAddress"]},"aws-native:ec2:NetworkInterfacePublicIpDnsHostnameTypeSpecification":{"description":"Public IP DNS hostname type","type":"string","enum":[{"name":"PublicDualStackDnsName","value":"public-dual-stack-dns-name"},{"name":"PublicIpv4DnsName","value":"public-ipv4-dns-name"},{"name":"PublicIpv6DnsName","value":"public-ipv6-dns-name"}]},"aws-native:ec2:NetworkInterfacePublicIpDnsNameOptions":{"description":"Describes the public hostname type options, including public hostname type, IPv4-enabled public hostname, IPv6-enabled public hostname, and dual-stack public hostname.","properties":{"dnsHostnameType":{"type":"string","description":"The public hostname type. For more information, see [EC2 instance hostnames, DNS names, and domains](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *Amazon EC2 User Guide* ."},"publicDualStackDnsName":{"type":"string","description":"A dual-stack public hostname for a network interface. Requests from within the VPC resolve to both the private IPv4 address and the IPv6 Global Unicast Address of the network interface. Requests from the internet resolve to both the public IPv4 and the IPv6 GUA address of the network interface."},"publicIpv4DnsName":{"type":"string","description":"An IPv4-enabled public hostname for a network interface. Requests from within the VPC resolve to the private primary IPv4 address of the network interface. Requests from the internet resolve to the public IPv4 address of the network interface."},"publicIpv6DnsName":{"type":"string","description":"An IPv6-enabled public hostname for a network interface. Requests from within the VPC or from the internet resolve to the IPv6 GUA of the network interface."}},"type":"object"},"aws-native:ec2:NetworkInterfaceTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:OptionsProperties":{"description":"The options for the transit gateway vpc attachment.","properties":{"applianceModeSupport":{"type":"string","description":"Indicates whether to enable Ipv6 Support for Vpc Attachment. Valid Values: enable | disable"},"dnsSupport":{"type":"string","description":"Indicates whether to enable DNS Support for Vpc Attachment. Valid Values: enable | disable"},"ipv6Support":{"type":"string","description":"Indicates whether to enable Ipv6 Support for Vpc Attachment. Valid Values: enable | disable"},"securityGroupReferencingSupport":{"type":"string","description":"Indicates whether to enable Security Group referencing support for Vpc Attachment. Valid values: enable | disable"}},"type":"object"},"aws-native:ec2:PlacementGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:PrefixListAddressFamily":{"description":"Ip Version of Prefix List.","type":"string","enum":[{"name":"IPv4","value":"IPv4"},{"name":"IPv6","value":"IPv6"}]},"aws-native:ec2:PrefixListEntry":{"properties":{"cidr":{"type":"string","description":"The CIDR block."},"description":{"type":"string","description":"A description for the entry.\n\nConstraints: Up to 255 characters in length."}},"type":"object","required":["cidr"]},"aws-native:ec2:PrefixListTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:ec2:PrivateDnsNameOptionsOnLaunchProperties":{"description":"The hostname type for EC2 instances launched into this subnet and how DNS A and AAAA record queries to the instances should be handled. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*.\n Available options:\n  +  EnableResourceNameDnsAAAARecord (true | false)\n  +  EnableResourceNameDnsARecord (true | false)\n  +  HostnameType (ip-name | resource-name)","properties":{"enableResourceNameDnsARecord":{"type":"boolean","description":"Indicates whether to respond to DNS queries for instance hostnames with DNS A records."},"enableResourceNameDnsAaaaRecord":{"type":"boolean","description":"Indicates whether to respond to DNS queries for instance hostname with DNS AAAA records."},"hostnameType":{"type":"string","description":"The type of hostname for EC2 instances. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 only subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID."}},"type":"object"},"aws-native:ec2:RouteServerEndpointTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:RouteServerPeerBgpOptions":{"description":"BGP Options","properties":{"peerAsn":{"type":"integer","description":"BGP ASN of the Route Server Peer"},"peerLivenessDetection":{"$ref":"#/types/aws-native:ec2:RouteServerPeerBgpOptionsPeerLivenessDetection","description":"BGP Liveness Detection"}},"type":"object"},"aws-native:ec2:RouteServerPeerBgpOptionsPeerLivenessDetection":{"description":"BGP Liveness Detection","type":"string","enum":[{"name":"Bfd","value":"bfd"},{"name":"BgpKeepalive","value":"bgp-keepalive"}]},"aws-native:ec2:RouteServerPeerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:RouteServerPersistRoutes":{"description":"Whether to enable persistent routes","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:RouteServerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:RouteTableTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:SecurityGroupEgress":{"properties":{"cidrIp":{"type":"string","description":"The IPv4 address range, in CIDR format.\n\nYou must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .\n\nFor examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* ."},"cidrIpv6":{"type":"string","description":"The IPv6 address range, in CIDR format.\n\nYou must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` .\n\nFor examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* ."},"description":{"type":"string","description":"A description for the security group rule.\n\nConstraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*"},"destinationPrefixListId":{"type":"string","description":"The prefix list IDs for the destination AWS service. This is the AWS service that you want to access through a VPC endpoint from instances associated with the security group.\n\nYou must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` ."},"destinationSecurityGroupId":{"type":"string","description":"The ID of the destination VPC security group.\n\nYou must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `DestinationPrefixListId` , or `DestinationSecurityGroupId` ."},"fromPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types)."},"ipProtocol":{"type":"string","description":"The IP protocol name ( `tcp` , `udp` , `icmp` , `icmpv6` ) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) ).\n\nUse `-1` to specify all protocols. When authorizing security group rules, specifying `-1` or a protocol number other than `tcp` , `udp` , `icmp` , or `icmpv6` allows traffic on all ports, regardless of any port range you specify. For `tcp` , `udp` , and `icmp` , you must specify a port range. For `icmpv6` , the port range is optional; if you omit the port range, traffic for all types and codes is allowed."},"toPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes)."}},"type":"object","required":["ipProtocol"]},"aws-native:ec2:SecurityGroupIngress":{"properties":{"cidrIp":{"type":"string","description":"The IPv4 address range, in CIDR format.\n\nYou must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `SourcePrefixListId` , or `SourceSecurityGroupId` .\n\nFor examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* ."},"cidrIpv6":{"type":"string","description":"The IPv6 address range, in CIDR format.\n\nYou must specify exactly one of the following: `CidrIp` , `CidrIpv6` , `SourcePrefixListId` , or `SourceSecurityGroupId` .\n\nFor examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *Amazon EC2 User Guide* ."},"description":{"type":"string","description":"Updates the description of an ingress (inbound) security group rule. You can replace an existing description, or add a description to a rule that did not have one previously.\n\nConstraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*"},"fromPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types)."},"ipProtocol":{"type":"string","description":"The IP protocol name ( `tcp` , `udp` , `icmp` , `icmpv6` ) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml) ).\n\nUse `-1` to specify all protocols. When authorizing security group rules, specifying `-1` or a protocol number other than `tcp` , `udp` , `icmp` , or `icmpv6` allows traffic on all ports, regardless of any port range you specify. For `tcp` , `udp` , and `icmp` , you must specify a port range. For `icmpv6` , the port range is optional; if you omit the port range, traffic for all types and codes is allowed."},"sourcePrefixListId":{"type":"string","description":"The ID of a prefix list."},"sourceSecurityGroupId":{"type":"string","description":"The ID of the security group."},"sourceSecurityGroupName":{"type":"string","description":"[Default VPC] The name of the source security group. You must specify either the security group ID or the security group name. You can't specify the group name in combination with an IP address range. Creates rules that grant full ICMP, UDP, and TCP access.\n\nFor security groups in a nondefault VPC, you must specify the group ID."},"sourceSecurityGroupOwnerId":{"type":"string","description":"[nondefault VPC] The AWS account ID for the source security group, if the source security group is in a different account. You can't specify this property with an IP address range. Creates rules that grant full ICMP, UDP, and TCP access.\n\nIf you specify `SourceSecurityGroupName` or `SourceSecurityGroupId` and that security group is owned by a different account than the account creating the stack, you must specify the `SourceSecurityGroupOwnerId` ; otherwise, this property is optional."},"toPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes)."}},"type":"object","required":["ipProtocol"]},"aws-native:ec2:SecurityGroupTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:SecurityGroupVpcAssociationState":{"type":"string","enum":[{"name":"Associating","value":"associating"},{"name":"Associated","value":"associated"},{"name":"AssociationFailed","value":"association-failed"},{"name":"Disassociating","value":"disassociating"},{"name":"Disassociated","value":"disassociated"},{"name":"DisassociationFailed","value":"disassociation-failed"}]},"aws-native:ec2:SnapshotBlockPublicAccessState":{"description":"The state of EBS Snapshot Block Public Access.","type":"string","enum":[{"name":"BlockAllSharing","value":"block-all-sharing"},{"name":"BlockNewSharing","value":"block-new-sharing"}]},"aws-native:ec2:SpotFleetAcceleratorCountRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of accelerators. To specify no maximum limit, omit this parameter. To exclude accelerator-enabled instance types, set `Max` to `0` ."},"min":{"type":"integer","description":"The minimum number of accelerators. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetAcceleratorTotalMemoryMiBRequest":{"properties":{"max":{"type":"integer","description":"The maximum amount of accelerator memory, in MiB. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum amount of accelerator memory, in MiB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetBaselineEbsBandwidthMbpsRequest":{"properties":{"max":{"type":"integer","description":"The maximum baseline bandwidth, in Mbps. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum baseline bandwidth, in Mbps. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetBaselinePerformanceFactorsRequest":{"properties":{"cpu":{"$ref":"#/types/aws-native:ec2:SpotFleetCpuPerformanceFactorRequest","description":"The CPU performance to consider, using an instance family as the baseline reference."}},"type":"object"},"aws-native:ec2:SpotFleetBlockDeviceMapping":{"properties":{"deviceName":{"type":"string","description":"The device name. For available device names, see [Device names for volumes](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.html) ."},"ebs":{"$ref":"#/types/aws-native:ec2:SpotFleetEbsBlockDevice","description":"Parameters used to automatically set up EBS volumes when the instance is launched."},"noDevice":{"type":"string","description":"To omit the device from the block device mapping, specify an empty string. When this property is specified, the device is removed from the block device mapping regardless of the assigned value."},"virtualName":{"type":"string","description":"The virtual device name ( `ephemeral` N). Instance store volumes are numbered starting from 0. An instance type with 2 available instance store volumes can specify mappings for `ephemeral0` and `ephemeral1` . The number of available instance store volumes depends on the instance type. After you connect to the instance, you must mount the volume.\n\nNVMe instance store volumes are automatically enumerated and assigned a device name. Including them in your block device mapping has no effect.\n\nConstraints: For M3 instances, you must specify instance store volumes in the block device mapping for the instance. When you launch an M3 instance, we ignore any instance store volumes specified in the block device mapping for the AMI."}},"type":"object","required":["deviceName"]},"aws-native:ec2:SpotFleetClassicLoadBalancer":{"properties":{"name":{"type":"string","description":"The name of the load balancer."}},"type":"object","required":["name"]},"aws-native:ec2:SpotFleetClassicLoadBalancersConfig":{"properties":{"classicLoadBalancers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetClassicLoadBalancer"},"description":"One or more Classic Load Balancers."}},"type":"object","required":["classicLoadBalancers"]},"aws-native:ec2:SpotFleetCpuPerformanceFactorRequest":{"properties":{"references":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetPerformanceFactorReferenceRequest"},"description":"Specify an instance family to use as the baseline reference for CPU performance. All instance types that match your specified attributes will be compared against the CPU performance of the referenced instance family, regardless of CPU manufacturer or architecture differences.\n\n\u003e Currently, only one instance family can be specified in the list."}},"type":"object"},"aws-native:ec2:SpotFleetEbsBlockDevice":{"properties":{"deleteOnTermination":{"type":"boolean","description":"Indicates whether the EBS volume is deleted on instance termination. For more information, see [Preserving Amazon EBS volumes on instance termination](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination) in the *Amazon EC2 User Guide* ."},"encrypted":{"type":"boolean","description":"Indicates whether the encryption state of an EBS volume is changed while being restored from a backing snapshot. The effect of setting the encryption state to `true` depends on the volume origin (new or from a snapshot), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see [Amazon EBS Encryption](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#encryption-parameters) in the *Amazon EC2 User Guide* .\n\nIn no case can you remove encryption from an encrypted volume.\n\nEncrypted volumes can only be attached to instances that support Amazon EBS encryption. For more information, see [Supported Instance Types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html#EBSEncryption_supported_instances) .\n\nThis parameter is not returned by [DescribeImageAttribute](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeImageAttribute.html) ."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS). For `gp3` , `io1` , and `io2` volumes, this represents the number of IOPS that are provisioned for the volume. For `gp2` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.\n\nThe following are the supported values for each volume type:\n\n- `gp3` : 3,000 - 80,000 IOPS\n- `io1` : 100 - 64,000 IOPS\n- `io2` : 100 - 256,000 IOPS\n\nFor `io2` volumes, you can achieve up to 256,000 IOPS on [instances built on the Nitro System](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances) . On other instances, you can achieve performance up to 32,000 IOPS.\n\nThis parameter is required for `io1` and `io2` volumes. The default for `gp3` volumes is 3,000 IOPS."},"snapshotId":{"type":"string","description":"The ID of the snapshot."},"volumeSize":{"type":"integer","description":"The size of the volume, in GiBs. You must specify either a snapshot ID or a volume size. If you specify a snapshot, the default is the snapshot size. You can specify a volume size that is equal to or larger than the snapshot size.\n\nThe following are the supported sizes for each volume type:\n\n- `gp2` : 1 - 16,384 GiB\n- `gp3` : 1 - 65,536 GiB\n- `io1` : 4 - 16,384 GiB\n- `io2` : 4 - 65,536 GiB\n- `st1` and `sc1` : 125 - 16,384 GiB\n- `standard` : 1 - 1024 GiB"},"volumeType":{"$ref":"#/types/aws-native:ec2:SpotFleetEbsBlockDeviceVolumeType","description":"The volume type. For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide* ."}},"type":"object"},"aws-native:ec2:SpotFleetEbsBlockDeviceVolumeType":{"description":"The volume type. For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide* .","type":"string","enum":[{"name":"Gp2","value":"gp2"},{"name":"Gp3","value":"gp3"},{"name":"Io1","value":"io1"},{"name":"Io2","value":"io2"},{"name":"Sc1","value":"sc1"},{"name":"St1","value":"st1"},{"name":"Standard","value":"standard"}]},"aws-native:ec2:SpotFleetFleetLaunchTemplateSpecification":{"properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template.\n\nYou must specify the `LaunchTemplateId` or the `LaunchTemplateName` , but not both."},"launchTemplateName":{"type":"string","description":"The name of the launch template.\n\nYou must specify the `LaunchTemplateName` or the `LaunchTemplateId` , but not both."},"version":{"type":"string","description":"The version number of the launch template.\n\nSpecifying `$Latest` or `$Default` for the template version number is not supported. However, you can specify `LatestVersionNumber` or `DefaultVersionNumber` using the `Fn::GetAtt` intrinsic function. For more information, see [Fn::GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html#aws-resource-ec2-launchtemplate-return-values-fn--getatt) ."}},"type":"object","required":["version"]},"aws-native:ec2:SpotFleetGroupIdentifier":{"properties":{"groupId":{"type":"string","description":"The ID of the security group."}},"type":"object","required":["groupId"]},"aws-native:ec2:SpotFleetIamInstanceProfileSpecification":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance profile."}},"type":"object"},"aws-native:ec2:SpotFleetInstanceIpv6Address":{"properties":{"ipv6Address":{"type":"string","description":"The IPv6 address."}},"type":"object","required":["ipv6Address"]},"aws-native:ec2:SpotFleetInstanceNetworkInterfaceSpecification":{"properties":{"associatePublicIpAddress":{"type":"boolean","description":"Indicates whether to assign a public IPv4 address to an instance you launch in a VPC. The public IP address can only be assigned to a network interface for eth0, and can only be assigned to a new network interface, not an existing one. You cannot specify more than one network interface in the request. If launching into a default subnet, the default value is `true` .\n\nAWS charges for all public IPv4 addresses, including public IPv4 addresses associated with running instances and Elastic IP addresses. For more information, see the *Public IPv4 Address* tab on the [Amazon VPC pricing page](https://docs.aws.amazon.com/vpc/pricing/) ."},"deleteOnTermination":{"type":"boolean","description":"Indicates whether the network interface is deleted when the instance is terminated."},"description":{"type":"string","description":"The description of the network interface. Applies only if creating a network interface when launching an instance."},"deviceIndex":{"type":"integer","description":"The position of the network interface in the attachment order. A primary network interface has a device index of 0.\n\nIf you specify a network interface when launching an instance, you must specify the device index."},"groups":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups for the network interface. Applies only if creating a network interface when launching an instance."},"ipv6AddressCount":{"type":"integer","description":"A number of IPv6 addresses to assign to the network interface. Amazon EC2 chooses the IPv6 addresses from the range of the subnet. You cannot specify this option and the option to assign specific IPv6 addresses in the same request. You can specify this option if you've specified a minimum number of instances to launch."},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceIpv6Address"},"description":"The IPv6 addresses to assign to the network interface. You cannot specify this option and the option to assign a number of IPv6 addresses in the same request. You cannot specify this option if you've specified a minimum number of instances to launch."},"networkInterfaceId":{"type":"string","description":"The ID of the network interface.\n\nIf you are creating a Spot Fleet, omit this parameter because you can’t specify a network interface ID in a launch specification."},"privateIpAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetPrivateIpAddressSpecification"},"description":"The private IPv4 addresses to assign to the network interface. Only one private IPv4 address can be designated as primary. You cannot specify this option if you're launching more than one instance in a [RunInstances](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RunInstances.html) request."},"secondaryPrivateIpAddressCount":{"type":"integer","description":"The number of secondary private IPv4 addresses. You can’t specify this parameter and also specify a secondary private IP address using the `PrivateIpAddress` parameter."},"subnetId":{"type":"string","description":"The ID of the subnet associated with the network interface."}},"type":"object"},"aws-native:ec2:SpotFleetInstanceRequirementsRequest":{"properties":{"acceleratorCount":{"$ref":"#/types/aws-native:ec2:SpotFleetAcceleratorCountRequest","description":"The minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) on an instance.\n\nTo exclude accelerator-enabled instance types, set `Max` to `0` .\n\nDefault: No minimum or maximum limits"},"acceleratorManufacturers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestAcceleratorManufacturersItem"},"description":"Indicates whether instance types must have accelerators by specific manufacturers.\n\n- For instance types with AWS devices, specify `amazon-web-services` .\n- For instance types with AMD devices, specify `amd` .\n- For instance types with Habana devices, specify `habana` .\n- For instance types with NVIDIA devices, specify `nvidia` .\n- For instance types with Xilinx devices, specify `xilinx` .\n\nDefault: Any manufacturer"},"acceleratorNames":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestAcceleratorNamesItem"},"description":"The accelerators that must be on the instance type.\n\n- For instance types with NVIDIA A10G GPUs, specify `a10g` .\n- For instance types with NVIDIA A100 GPUs, specify `a100` .\n- For instance types with NVIDIA H100 GPUs, specify `h100` .\n- For instance types with AWS Inferentia chips, specify `inferentia` .\n- For instance types with AWS Inferentia2 chips, specify `inferentia2` .\n- For instance types with Habana Gaudi HL-205 GPUs, specify `gaudi-hl-205` .\n- For instance types with NVIDIA GRID K520 GPUs, specify `k520` .\n- For instance types with NVIDIA K80 GPUs, specify `k80` .\n- For instance types with NVIDIA L4 GPUs, specify `l4` .\n- For instance types with NVIDIA L40S GPUs, specify `l40s` .\n- For instance types with NVIDIA M60 GPUs, specify `m60` .\n- For instance types with AMD Radeon Pro V520 GPUs, specify `radeon-pro-v520` .\n- For instance types with AWS Trainium chips, specify `trainium` .\n- For instance types with AWS Trainium2 chips, specify `trainium2` .\n- For instance types with NVIDIA T4 GPUs, specify `t4` .\n- For instance types with NVIDIA T4G GPUs, specify `t4g` .\n- For instance types with Xilinx U30 cards, specify `u30` .\n- For instance types with Xilinx VU9P FPGAs, specify `vu9p` .\n- For instance types with NVIDIA V100 GPUs, specify `v100` .\n\nDefault: Any accelerator"},"acceleratorTotalMemoryMiB":{"$ref":"#/types/aws-native:ec2:SpotFleetAcceleratorTotalMemoryMiBRequest","description":"The minimum and maximum amount of total accelerator memory, in MiB.\n\nDefault: No minimum or maximum limits"},"acceleratorTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestAcceleratorTypesItem"},"description":"The accelerator types that must be on the instance type.\n\n- For instance types with FPGA accelerators, specify `fpga` .\n- For instance types with GPU accelerators, specify `gpu` .\n- For instance types with Inference accelerators, specify `inference` .\n- For instance types with Media accelerators, specify `media` .\n\nDefault: Any accelerator type"},"allowedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to apply your specified attributes against. All other instance types are ignored, even if they match your specified attributes.\n\nYou can use strings with one or more wild cards, represented by an asterisk ( `*` ), to allow an instance type, size, or generation. The following are examples: `m5.8xlarge` , `c5*.*` , `m5a.*` , `r*` , `*3*` .\n\nFor example, if you specify `c5*` ,Amazon EC2 will allow the entire C5 instance family, which includes all C5a and C5n instance types. If you specify `m5a.*` , Amazon EC2 will allow all the M5a instance types, but not the M5n instance types.\n\n\u003e If you specify `AllowedInstanceTypes` , you can't specify `ExcludedInstanceTypes` . \n\nDefault: All instance types"},"bareMetal":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestBareMetal","description":"Indicates whether bare metal instance types must be included, excluded, or required.\n\n- To include bare metal instance types, specify `included` .\n- To require only bare metal instance types, specify `required` .\n- To exclude bare metal instance types, specify `excluded` .\n\nDefault: `excluded`"},"baselineEbsBandwidthMbps":{"$ref":"#/types/aws-native:ec2:SpotFleetBaselineEbsBandwidthMbpsRequest","description":"The minimum and maximum baseline bandwidth to Amazon EBS, in Mbps. For more information, see [Amazon EBS–optimized instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-optimized.html) in the *Amazon EC2 User Guide* .\n\nDefault: No minimum or maximum limits"},"baselinePerformanceFactors":{"$ref":"#/types/aws-native:ec2:SpotFleetBaselinePerformanceFactorsRequest","description":"The baseline performance to consider, using an instance family as a baseline reference. The instance family establishes the lowest acceptable level of performance. Amazon EC2 uses this baseline to guide instance type selection, but there is no guarantee that the selected instance types will always exceed the baseline for every application. Currently, this parameter only supports CPU performance as a baseline performance factor. For more information, see [Performance protection](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-attribute-based-instance-type-selection.html#ec2fleet-abis-performance-protection) in the *Amazon EC2 User Guide* ."},"burstablePerformance":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestBurstablePerformance","description":"Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see [Burstable performance instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html) .\n\n- To include burstable performance instance types, specify `included` .\n- To require only burstable performance instance types, specify `required` .\n- To exclude burstable performance instance types, specify `excluded` .\n\nDefault: `excluded`"},"cpuManufacturers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestCpuManufacturersItem"},"description":"The CPU manufacturers to include.\n\n- For instance types with Intel CPUs, specify `intel` .\n- For instance types with AMD CPUs, specify `amd` .\n- For instance types with AWS CPUs, specify `amazon-web-services` .\n- For instance types with Apple CPUs, specify `apple` .\n\n\u003e Don't confuse the CPU manufacturer with the CPU architecture. Instances will be launched with a compatible CPU architecture based on the Amazon Machine Image (AMI) that you specify in your launch template. \n\nDefault: Any manufacturer"},"excludedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to exclude.\n\nYou can use strings with one or more wild cards, represented by an asterisk ( `*` ), to exclude an instance family, type, size, or generation. The following are examples: `m5.8xlarge` , `c5*.*` , `m5a.*` , `r*` , `*3*` .\n\nFor example, if you specify `c5*` ,Amazon EC2 will exclude the entire C5 instance family, which includes all C5a and C5n instance types. If you specify `m5a.*` , Amazon EC2 will exclude all the M5a instance types, but not the M5n instance types.\n\n\u003e If you specify `ExcludedInstanceTypes` , you can't specify `AllowedInstanceTypes` . \n\nDefault: No excluded instance types"},"instanceGenerations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestInstanceGenerationsItem"},"description":"Indicates whether current or previous generation instance types are included. The current generation instance types are recommended for use. Current generation instance types are typically the latest two to three generations in each instance family. For more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide* .\n\nFor current generation instance types, specify `current` .\n\nFor previous generation instance types, specify `previous` .\n\nDefault: Current and previous generation instance types"},"localStorage":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestLocalStorage","description":"Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, [Amazon EC2 instance store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html) in the *Amazon EC2 User Guide* .\n\n- To include instance types with instance store volumes, specify `included` .\n- To require only instance types with instance store volumes, specify `required` .\n- To exclude instance types with instance store volumes, specify `excluded` .\n\nDefault: `included`"},"localStorageTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequestLocalStorageTypesItem"},"description":"The type of local storage that is required.\n\n- For instance types with hard disk drive (HDD) storage, specify `hdd` .\n- For instance types with solid state drive (SSD) storage, specify `ssd` .\n\nDefault: `hdd` and `ssd`"},"maxSpotPriceAsPercentageOfOptimalOnDemandPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage of an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.\n\nThe parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n\nIf you set `TargetCapacityUnitType` to `vcpu` or `memory-mib` , the price protection threshold is based on the per vCPU or per memory price instead of the per instance price.\n\n\u003e Only one of `SpotMaxPricePercentageOverLowestPrice` or `MaxSpotPriceAsPercentageOfOptimalOnDemandPrice` can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as `999999` ."},"memoryGiBPerVCpu":{"$ref":"#/types/aws-native:ec2:SpotFleetMemoryGiBPerVCpuRequest","description":"The minimum and maximum amount of memory per vCPU, in GiB.\n\nDefault: No minimum or maximum limits"},"memoryMiB":{"$ref":"#/types/aws-native:ec2:SpotFleetMemoryMiBRequest","description":"The minimum and maximum amount of memory, in MiB."},"networkBandwidthGbps":{"$ref":"#/types/aws-native:ec2:SpotFleetNetworkBandwidthGbpsRequest","description":"The minimum and maximum amount of baseline network bandwidth, in gigabits per second (Gbps). For more information, see [Amazon EC2 instance network bandwidth](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-network-bandwidth.html) in the *Amazon EC2 User Guide* .\n\nDefault: No minimum or maximum limits"},"networkInterfaceCount":{"$ref":"#/types/aws-native:ec2:SpotFleetNetworkInterfaceCountRequest","description":"The minimum and maximum number of network interfaces.\n\nDefault: No minimum or maximum limits"},"onDemandMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose price exceeds your specified threshold.\n\nThe parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n\nTo indicate no price protection threshold, specify a high value, such as `999999` .\n\nThis parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) and [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) .\n\n\u003e If you set `TargetCapacityUnitType` to `vcpu` or `memory-mib` , the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per-instance price. \n\nDefault: `20`"},"requireEncryptionInTransit":{"type":"boolean","description":"Specifies whether instance types must support encrypting in-transit traffic between instances. For more information, including the supported instance types, see [Encryption in transit](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit) in the *Amazon EC2 User Guide* .\n\nDefault: `false`"},"requireHibernateSupport":{"type":"boolean","description":"Indicates whether instance types must support hibernation for On-Demand Instances.\n\nThis parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) .\n\nDefault: `false`"},"spotMaxPricePercentageOverLowestPrice":{"type":"integer","description":"[Price protection] The price protection threshold for Spot Instances, as a percentage higher than an identified Spot price. The identified Spot price is the Spot price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified Spot price is from the lowest priced current generation instance types, and failing that, from the lowest priced previous generation instance types that match your attributes. When Amazon EC2 selects instance types with your attributes, it will exclude instance types whose Spot price exceeds your specified threshold.\n\nThe parameter accepts an integer, which Amazon EC2 interprets as a percentage.\n\nIf you set `TargetCapacityUnitType` to `vcpu` or `memory-mib` , the price protection threshold is applied based on the per-vCPU or per-memory price instead of the per-instance price.\n\nThis parameter is not supported for [GetSpotPlacementScores](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetSpotPlacementScores.html) and [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) .\n\n\u003e Only one of `SpotMaxPricePercentageOverLowestPrice` or `MaxSpotPriceAsPercentageOfOptimalOnDemandPrice` can be specified. If you don't specify either, Amazon EC2 will automatically apply optimal price protection to consistently select from a wide range of instance types. To indicate no price protection threshold for Spot Instances, meaning you want to consider all instance types that match your attributes, include one of these parameters and specify a high value, such as `999999` . \n\nDefault: `100`"},"totalLocalStorageGb":{"$ref":"#/types/aws-native:ec2:SpotFleetTotalLocalStorageGbRequest","description":"The minimum and maximum amount of total local storage, in GB.\n\nDefault: No minimum or maximum limits"},"vCpuCount":{"$ref":"#/types/aws-native:ec2:SpotFleetVCpuCountRangeRequest","description":"The minimum and maximum number of vCPUs."}},"type":"object"},"aws-native:ec2:SpotFleetInstanceRequirementsRequestAcceleratorManufacturersItem":{"type":"string","enum":[{"name":"AmazonWebServices","value":"amazon-web-services"},{"name":"Amd","value":"amd"},{"name":"Habana","value":"habana"},{"name":"Nvidia","value":"nvidia"},{"name":"Xilinx","value":"xilinx"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestAcceleratorNamesItem":{"type":"string","enum":[{"name":"A10g","value":"a10g"},{"name":"A100","value":"a100"},{"name":"H100","value":"h100"},{"name":"Inferentia","value":"inferentia"},{"name":"K520","value":"k520"},{"name":"K80","value":"k80"},{"name":"M60","value":"m60"},{"name":"RadeonProV520","value":"radeon-pro-v520"},{"name":"T4","value":"t4"},{"name":"T4g","value":"t4g"},{"name":"Vu9p","value":"vu9p"},{"name":"V100","value":"v100"},{"name":"L40s","value":"l40s"},{"name":"L4","value":"l4"},{"name":"GaudiHl205","value":"gaudi-hl-205"},{"name":"Inferentia2","value":"inferentia2"},{"name":"Trainium","value":"trainium"},{"name":"Trainium2","value":"trainium2"},{"name":"U30","value":"u30"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestAcceleratorTypesItem":{"type":"string","enum":[{"name":"Gpu","value":"gpu"},{"name":"Fpga","value":"fpga"},{"name":"Inference","value":"inference"},{"name":"Media","value":"media"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestBareMetal":{"description":"Indicates whether bare metal instance types must be included, excluded, or required.\n\n- To include bare metal instance types, specify `included` .\n- To require only bare metal instance types, specify `required` .\n- To exclude bare metal instance types, specify `excluded` .\n\nDefault: `excluded`","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestBurstablePerformance":{"description":"Indicates whether burstable performance T instance types are included, excluded, or required. For more information, see [Burstable performance instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html) .\n\n- To include burstable performance instance types, specify `included` .\n- To require only burstable performance instance types, specify `required` .\n- To exclude burstable performance instance types, specify `excluded` .\n\nDefault: `excluded`","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestCpuManufacturersItem":{"type":"string","enum":[{"name":"Intel","value":"intel"},{"name":"Amd","value":"amd"},{"name":"AmazonWebServices","value":"amazon-web-services"},{"name":"Apple","value":"apple"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestInstanceGenerationsItem":{"type":"string","enum":[{"name":"Current","value":"current"},{"name":"Previous","value":"previous"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestLocalStorage":{"description":"Indicates whether instance types with instance store volumes are included, excluded, or required. For more information, [Amazon EC2 instance store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html) in the *Amazon EC2 User Guide* .\n\n- To include instance types with instance store volumes, specify `included` .\n- To require only instance types with instance store volumes, specify `required` .\n- To exclude instance types with instance store volumes, specify `excluded` .\n\nDefault: `included`","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ec2:SpotFleetInstanceRequirementsRequestLocalStorageTypesItem":{"type":"string","enum":[{"name":"Hdd","value":"hdd"},{"name":"Ssd","value":"ssd"}]},"aws-native:ec2:SpotFleetLaunchSpecification":{"properties":{"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetBlockDeviceMapping"},"description":"One or more block devices that are mapped to the Spot Instances. You can't specify both a snapshot ID and an encryption value. This is because only blank volumes can be encrypted on creation. If a snapshot is the basis for a volume, it is not blank and its encryption status is used for the volume encryption status."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the instances are optimized for EBS I/O. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal EBS I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS Optimized instance.\n\nDefault: `false`"},"iamInstanceProfile":{"$ref":"#/types/aws-native:ec2:SpotFleetIamInstanceProfileSpecification","description":"The IAM instance profile."},"imageId":{"type":"string","description":"The ID of the AMI."},"instanceRequirements":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequest","description":"The attributes for the instance types. When you specify instance attributes, Amazon EC2 will identify instance types with those attributes.\n\n\u003e If you specify `InstanceRequirements` , you can't specify `InstanceType` ."},"instanceType":{"type":"string","description":"The instance type."},"kernelId":{"type":"string","description":"The ID of the kernel."},"keyName":{"type":"string","description":"The name of the key pair."},"monitoring":{"$ref":"#/types/aws-native:ec2:SpotFleetMonitoring","description":"Enable or disable monitoring for the instances."},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceNetworkInterfaceSpecification"},"description":"The network interfaces."},"placement":{"$ref":"#/types/aws-native:ec2:SpotFleetSpotPlacement","description":"The placement information."},"ramdiskId":{"type":"string","description":"The ID of the RAM disk. Some kernels require additional drivers at launch. Check the kernel requirements for information about whether you need to specify a RAM disk. To find kernel requirements, refer to the AWS Resource Center and search for the kernel ID."},"securityGroups":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetGroupIdentifier"},"description":"The security groups.\n\nIf you specify a network interface, you must specify any security groups as part of the network interface instead of using this parameter."},"spotPrice":{"type":"string","description":"The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.\n\n\u003e If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter."},"subnetId":{"type":"string","description":"The IDs of the subnets in which to launch the instances. To specify multiple subnets, separate them using commas; for example, \"subnet-1234abcdeexample1, subnet-0987cdef6example2\".\n\nIf you specify a network interface, you must specify any subnets as part of the network interface instead of using this parameter."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetTagSpecification"},"description":"The tags to apply during creation."},"userData":{"type":"string","description":"The base64-encoded user data that instances use when starting up. User data is limited to 16 KB."},"weightedCapacity":{"type":"number","description":"The number of units provided by the specified instance type. These are the same units that you chose to set the target capacity in terms of instances, or a performance characteristic such as vCPUs, memory, or I/O.\n\nIf the target capacity divided by this value is not a whole number, Amazon EC2 rounds the number of instances to the next whole number. If this value is not specified, the default is 1.\n\n\u003e When specifying weights, the price used in the `lowestPrice` and `priceCapacityOptimized` allocation strategies is per *unit* hour (where the instance price is divided by the specified weight). However, if all the specified weights are above the requested `TargetCapacity` , resulting in only 1 instance being launched, the price used is per *instance* hour."}},"type":"object","required":["imageId"]},"aws-native:ec2:SpotFleetLaunchTemplateConfig":{"properties":{"launchTemplateSpecification":{"$ref":"#/types/aws-native:ec2:SpotFleetFleetLaunchTemplateSpecification","description":"The launch template to use. Make sure that the launch template does not contain the `NetworkInterfaceId` parameter because you can't specify a network interface ID in a Spot Fleet."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetLaunchTemplateOverrides"},"description":"Any parameters that you specify override the same parameters in the launch template."}},"type":"object"},"aws-native:ec2:SpotFleetLaunchTemplateOverrides":{"properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to launch the instances. For example, `us-east-2a` .\n\nEither `AvailabilityZone` or `AvailabilityZoneId` must be specified in the request, but not both."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which to launch the instances. For example, `use2-az1` .\n\nEither `AvailabilityZone` or `AvailabilityZoneId` must be specified in the request, but not both."},"instanceRequirements":{"$ref":"#/types/aws-native:ec2:SpotFleetInstanceRequirementsRequest","description":"The instance requirements. When you specify instance requirements, Amazon EC2 will identify instance types with the provided requirements, and then use your On-Demand and Spot allocation strategies to launch instances from these instance types, in the same way as when you specify a list of instance types.\n\n\u003e If you specify `InstanceRequirements` , you can't specify `InstanceType` ."},"instanceType":{"type":"string","description":"The instance type."},"priority":{"type":"number","description":"The priority for the launch template override. The highest priority is launched first.\n\nIf `OnDemandAllocationStrategy` is set to `prioritized` , Spot Fleet uses priority to determine which launch template override to use first in fulfilling On-Demand capacity.\n\nIf the Spot `AllocationStrategy` is set to `capacityOptimizedPrioritized` , Spot Fleet uses priority on a best-effort basis to determine which launch template override to use in fulfilling Spot capacity, but optimizes for capacity first.\n\nValid values are whole numbers starting at `0` . The lower the number, the higher the priority. If no number is set, the launch template override has the lowest priority. You can set the same priority for different launch template overrides."},"spotPrice":{"type":"string","description":"The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.\n\n\u003e If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter."},"subnetId":{"type":"string","description":"The ID of the subnet in which to launch the instances."},"weightedCapacity":{"type":"number","description":"The number of units provided by the specified instance type. These are the same units that you chose to set the target capacity in terms of instances, or a performance characteristic such as vCPUs, memory, or I/O.\n\nIf the target capacity divided by this value is not a whole number, Amazon EC2 rounds the number of instances to the next whole number. If this value is not specified, the default is 1.\n\n\u003e When specifying weights, the price used in the `lowestPrice` and `priceCapacityOptimized` allocation strategies is per *unit* hour (where the instance price is divided by the specified weight). However, if all the specified weights are above the requested `TargetCapacity` , resulting in only 1 instance being launched, the price used is per *instance* hour."}},"type":"object"},"aws-native:ec2:SpotFleetLoadBalancersConfig":{"properties":{"classicLoadBalancersConfig":{"$ref":"#/types/aws-native:ec2:SpotFleetClassicLoadBalancersConfig","description":"The Classic Load Balancers."},"targetGroupsConfig":{"$ref":"#/types/aws-native:ec2:SpotFleetTargetGroupsConfig","description":"The target groups."}},"type":"object"},"aws-native:ec2:SpotFleetMemoryGiBPerVCpuRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of memory per vCPU, in GiB. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of memory per vCPU, in GiB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetMemoryMiBRequest":{"properties":{"max":{"type":"integer","description":"The maximum amount of memory, in MiB. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum amount of memory, in MiB. To specify no minimum limit, specify `0` ."}},"type":"object"},"aws-native:ec2:SpotFleetMonitoring":{"properties":{"enabled":{"type":"boolean","description":"Enables monitoring for the instance.\n\nDefault: `false`"}},"type":"object"},"aws-native:ec2:SpotFleetNetworkBandwidthGbpsRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of network bandwidth, in Gbps. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of network bandwidth, in Gbps. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetNetworkInterfaceCountRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of network interfaces. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum number of network interfaces. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetPerformanceFactorReferenceRequest":{"properties":{"instanceFamily":{"type":"string","description":"The instance family to use as a baseline reference.\n\n\u003e Ensure that you specify the correct value for the instance family. The instance family is everything before the period ( `.` ) in the instance type name. For example, in the instance type `c6i.large` , the instance family is `c6i` , not `c6` . For more information, see [Amazon EC2 instance type naming conventions](https://docs.aws.amazon.com/ec2/latest/instancetypes/instance-type-names.html) in *Amazon EC2 Instance Types* . \n\nThe following instance families are *not supported* for performance protection:\n\n- `c1`\n- `g3` | `g3s`\n- `hpc7g`\n- `m1` | `m2`\n- `mac1` | `mac2` | `mac2-m1ultra` | `mac2-m2` | `mac2-m2pro`\n- `p3dn` | `p4d` | `p5`\n- `t1`\n- `u-12tb1` | `u-18tb1` | `u-24tb1` | `u-3tb1` | `u-6tb1` | `u-9tb1` | `u7i-12tb` | `u7in-16tb` | `u7in-24tb` | `u7in-32tb`\n\nIf you enable performance protection by specifying a supported instance family, the returned instance types will exclude the above unsupported instance families.\n\nIf you specify an unsupported instance family as a value for baseline performance, the API returns an empty response for [GetInstanceTypesFromInstanceRequirements](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetInstanceTypesFromInstanceRequirements.html) and an exception for [CreateFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet.html) , [RequestSpotFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RequestSpotFleet.html) , [ModifyFleet](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyFleet.html) , and [ModifySpotFleetRequest](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifySpotFleetRequest.html) ."}},"type":"object"},"aws-native:ec2:SpotFleetPrivateIpAddressSpecification":{"properties":{"primary":{"type":"boolean","description":"Indicates whether the private IPv4 address is the primary private IPv4 address. Only one IPv4 address can be designated as primary."},"privateIpAddress":{"type":"string","description":"The private IPv4 address."}},"type":"object","required":["privateIpAddress"]},"aws-native:ec2:SpotFleetRequestConfigData":{"properties":{"allocationStrategy":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigDataAllocationStrategy","description":"The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the Spot Fleet launch configuration. For more information, see [Allocation strategies for Spot Instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html) in the *Amazon EC2 User Guide* .\n\n- **priceCapacityOptimized (recommended)** - Spot Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. Spot Fleet then requests Spot Instances from the lowest priced of these pools.\n- **capacityOptimized** - Spot Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. To give certain instance types a higher chance of launching first, use `capacityOptimizedPrioritized` . Set a priority for each instance type by using the `Priority` parameter for `LaunchTemplateOverrides` . You can assign the same priority to different `LaunchTemplateOverrides` . EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. `capacityOptimizedPrioritized` is supported only if your Spot Fleet uses a launch template. Note that if the `OnDemandAllocationStrategy` is set to `prioritized` , the same priority is applied when fulfilling On-Demand capacity.\n- **diversified** - Spot Fleet requests instances from all of the Spot Instance pools that you specify.\n- **lowestPrice (not recommended)** - \u003e We don't recommend the `lowestPrice` allocation strategy because it has the highest risk of interruption for your Spot Instances. \n\nSpot Fleet requests instances from the lowest priced Spot Instance pool that has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances come from the next lowest priced pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, Spot Fleet will continue to fulfill your request by drawing from the next lowest priced pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools. Because this strategy only considers instance price and not capacity availability, it might lead to high interruption rates.\n\nDefault: `lowestPrice`","replaceOnChanges":true},"context":{"type":"string","description":"Reserved."},"excessCapacityTerminationPolicy":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigDataExcessCapacityTerminationPolicy","description":"Indicates whether running Spot Instances should be terminated if you decrease the target capacity of the Spot Fleet request below the current size of the Spot Fleet.\n\nSupported only for fleets of type `maintain` ."},"iamFleetRole":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Identity and Access Management (IAM) role that grants the Spot Fleet the permission to request, launch, terminate, and tag instances on your behalf. For more information, see [Spot Fleet Prerequisites](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-requests.html#spot-fleet-prerequisites) in the *Amazon EC2 User Guide* . Spot Fleet can terminate Spot Instances on your behalf when you cancel its Spot Fleet request or when the Spot Fleet request expires, if you set `TerminateInstancesWithExpiration` .","replaceOnChanges":true},"instanceInterruptionBehavior":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigDataInstanceInterruptionBehavior","description":"The behavior when a Spot Instance is interrupted. The default is `terminate` .","replaceOnChanges":true},"instancePoolsToUseCount":{"type":"integer","description":"The number of Spot pools across which to allocate your target Spot capacity. Valid only when Spot *AllocationStrategy* is set to `lowest-price` . Spot Fleet selects the cheapest Spot pools and evenly allocates your target Spot capacity across the number of Spot pools that you specify.\n\nNote that Spot Fleet attempts to draw Spot Instances from the number of pools that you specify on a best effort basis. If a pool runs out of Spot capacity before fulfilling your target capacity, Spot Fleet will continue to fulfill your request by drawing from the next cheapest pool. To ensure that your target capacity is met, you might receive Spot Instances from more than the number of pools that you specified. Similarly, if most of the pools have no Spot capacity, you might receive your full target capacity from fewer than the number of pools that you specified.","replaceOnChanges":true},"launchSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetLaunchSpecification"},"description":"The launch specifications for the Spot Fleet request. If you specify `LaunchSpecifications` , you can't specify `LaunchTemplateConfigs` .","replaceOnChanges":true},"launchTemplateConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetLaunchTemplateConfig"},"description":"The launch template and overrides. If you specify `LaunchTemplateConfigs` , you can't specify `LaunchSpecifications` .","replaceOnChanges":true},"loadBalancersConfig":{"$ref":"#/types/aws-native:ec2:SpotFleetLoadBalancersConfig","description":"One or more Classic Load Balancers and target groups to attach to the Spot Fleet request. Spot Fleet registers the running Spot Instances with the specified Classic Load Balancers and target groups.\n\nWith Network Load Balancers, Spot Fleet cannot register instances that have the following instance types: C1, CC1, CC2, CG1, CG2, CR1, CS1, G1, G2, HI1, HS1, M1, M2, M3, and T1.","replaceOnChanges":true},"onDemandAllocationStrategy":{"type":"string","description":"The order of the launch template overrides to use in fulfilling On-Demand capacity. If you specify `lowestPrice` , Spot Fleet uses price to determine the order, launching the lowest price first. If you specify `prioritized` , Spot Fleet uses the priority that you assign to each Spot Fleet launch template override, launching the highest priority first. If you do not specify a value, Spot Fleet defaults to `lowestPrice` .","replaceOnChanges":true},"onDemandMaxTotalPrice":{"type":"string","description":"The maximum amount per hour for On-Demand Instances that you're willing to pay. You can use the `onDemandMaxTotalPrice` parameter, the `spotMaxTotalPrice` parameter, or both parameters to ensure that your fleet cost does not exceed your budget. If you set a maximum price per hour for the On-Demand Instances and Spot Instances in your request, Spot Fleet will launch instances until it reaches the maximum amount you're willing to pay. When the maximum amount you're willing to pay is reached, the fleet stops launching instances even if it hasn’t met the target capacity.\n\n\u003e If your fleet includes T instances that are configured as `unlimited` , and if their average CPU usage exceeds the baseline utilization, you will incur a charge for surplus credits. The `onDemandMaxTotalPrice` does not account for surplus credits, and, if you use surplus credits, your final cost might be higher than what you specified for `onDemandMaxTotalPrice` . For more information, see [Surplus credits can incur charges](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits) in the *Amazon EC2 User Guide* .","replaceOnChanges":true},"onDemandTargetCapacity":{"type":"integer","description":"The number of On-Demand units to request. You can choose to set the target capacity in terms of instances or a performance characteristic that is important to your application workload, such as vCPUs, memory, or I/O. If the request type is `maintain` , you can specify a target capacity of 0 and add capacity later.","replaceOnChanges":true},"replaceUnhealthyInstances":{"type":"boolean","description":"Indicates whether Spot Fleet should replace unhealthy instances.","replaceOnChanges":true},"spotMaintenanceStrategies":{"$ref":"#/types/aws-native:ec2:SpotFleetSpotMaintenanceStrategies","description":"The strategies for managing your Spot Instances that are at an elevated risk of being interrupted.","replaceOnChanges":true},"spotMaxTotalPrice":{"type":"string","description":"The maximum amount per hour for Spot Instances that you're willing to pay. You can use the `spotMaxTotalPrice` parameter, the `onDemandMaxTotalPrice` parameter, or both parameters to ensure that your fleet cost does not exceed your budget. If you set a maximum price per hour for the On-Demand Instances and Spot Instances in your request, Spot Fleet will launch instances until it reaches the maximum amount you're willing to pay. When the maximum amount you're willing to pay is reached, the fleet stops launching instances even if it hasn’t met the target capacity.\n\n\u003e If your fleet includes T instances that are configured as `unlimited` , and if their average CPU usage exceeds the baseline utilization, you will incur a charge for surplus credits. The `spotMaxTotalPrice` does not account for surplus credits, and, if you use surplus credits, your final cost might be higher than what you specified for `spotMaxTotalPrice` . For more information, see [Surplus credits can incur charges](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances-unlimited-mode-concepts.html#unlimited-mode-surplus-credits) in the *Amazon EC2 User Guide* .","replaceOnChanges":true},"spotPrice":{"type":"string","description":"The maximum price per unit hour that you are willing to pay for a Spot Instance. We do not recommend using this parameter because it can lead to increased interruptions. If you do not specify this parameter, you will pay the current Spot price.\n\n\u003e If you specify a maximum price, your instances will be interrupted more frequently than if you do not specify this parameter.","replaceOnChanges":true},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetTagSpecification"},"description":"The key-value pair for tagging the Spot Fleet request on creation. The value for `ResourceType` must be `spot-fleet-request` , otherwise the Spot Fleet request fails. To tag instances at launch, specify the tags in the [launch template](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template) (valid only if you use `LaunchTemplateConfigs` ) or in the `[SpotFleetTagSpecification](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetTagSpecification.html)` (valid only if you use `LaunchSpecifications` ). For information about tagging after launch, see [Tag your resources](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#tag-resources) .","replaceOnChanges":true},"targetCapacity":{"type":"integer","description":"The number of units to request for the Spot Fleet. You can choose to set the target capacity in terms of instances or a performance characteristic that is important to your application workload, such as vCPUs, memory, or I/O. If the request type is `maintain` , you can specify a target capacity of 0 and add capacity later."},"targetCapacityUnitType":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigDataTargetCapacityUnitType","description":"The unit for the target capacity. You can specify this parameter only when using attribute-based instance type selection.\n\nDefault: `units` (the number of instances)"},"terminateInstancesWithExpiration":{"type":"boolean","description":"Indicates whether running Spot Instances are terminated when the Spot Fleet request expires.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigDataType","description":"The type of request. Indicates whether the Spot Fleet only requests the target capacity or also attempts to maintain it. When this value is `request` , the Spot Fleet only places the required requests. It does not attempt to replenish Spot Instances if capacity is diminished, nor does it submit requests in alternative Spot pools if capacity is not available. When this value is `maintain` , the Spot Fleet maintains the target capacity. The Spot Fleet places the required requests to meet capacity and automatically replenishes any interrupted instances. Default: `maintain` . `instant` is listed but is not used by Spot Fleet.","replaceOnChanges":true},"validFrom":{"type":"string","description":"The start date and time of the request, in UTC format ( *YYYY* - *MM* - *DD* T *HH* : *MM* : *SS* Z). By default, Amazon EC2 starts fulfilling the request immediately.","replaceOnChanges":true},"validUntil":{"type":"string","description":"The end date and time of the request, in UTC format ( *YYYY* - *MM* - *DD* T *HH* : *MM* : *SS* Z). After the end date and time, no new Spot Instance requests are placed or able to fulfill the request. If no value is specified, the Spot Fleet request remains until you cancel it.","replaceOnChanges":true}},"type":"object","required":["iamFleetRole","targetCapacity"]},"aws-native:ec2:SpotFleetRequestConfigDataAllocationStrategy":{"description":"The strategy that determines how to allocate the target Spot Instance capacity across the Spot Instance pools specified by the Spot Fleet launch configuration. For more information, see [Allocation strategies for Spot Instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-allocation-strategy.html) in the *Amazon EC2 User Guide* .\n\n- **priceCapacityOptimized (recommended)** - Spot Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. Spot Fleet then requests Spot Instances from the lowest priced of these pools.\n- **capacityOptimized** - Spot Fleet identifies the pools with the highest capacity availability for the number of instances that are launching. This means that we will request Spot Instances from the pools that we believe have the lowest chance of interruption in the near term. To give certain instance types a higher chance of launching first, use `capacityOptimizedPrioritized` . Set a priority for each instance type by using the `Priority` parameter for `LaunchTemplateOverrides` . You can assign the same priority to different `LaunchTemplateOverrides` . EC2 implements the priorities on a best-effort basis, but optimizes for capacity first. `capacityOptimizedPrioritized` is supported only if your Spot Fleet uses a launch template. Note that if the `OnDemandAllocationStrategy` is set to `prioritized` , the same priority is applied when fulfilling On-Demand capacity.\n- **diversified** - Spot Fleet requests instances from all of the Spot Instance pools that you specify.\n- **lowestPrice (not recommended)** - \u003e We don't recommend the `lowestPrice` allocation strategy because it has the highest risk of interruption for your Spot Instances. \n\nSpot Fleet requests instances from the lowest priced Spot Instance pool that has available capacity. If the lowest priced pool doesn't have available capacity, the Spot Instances come from the next lowest priced pool that has available capacity. If a pool runs out of capacity before fulfilling your desired capacity, Spot Fleet will continue to fulfill your request by drawing from the next lowest priced pool. To ensure that your desired capacity is met, you might receive Spot Instances from several pools. Because this strategy only considers instance price and not capacity availability, it might lead to high interruption rates.\n\nDefault: `lowestPrice`","type":"string","enum":[{"name":"CapacityOptimized","value":"capacityOptimized"},{"name":"CapacityOptimizedPrioritized","value":"capacityOptimizedPrioritized"},{"name":"Diversified","value":"diversified"},{"name":"LowestPrice","value":"lowestPrice"},{"name":"PriceCapacityOptimized","value":"priceCapacityOptimized"}]},"aws-native:ec2:SpotFleetRequestConfigDataExcessCapacityTerminationPolicy":{"description":"Indicates whether running Spot Instances should be terminated if you decrease the target capacity of the Spot Fleet request below the current size of the Spot Fleet.\n\nSupported only for fleets of type `maintain` .","type":"string","enum":[{"name":"Default","value":"Default"},{"name":"NoTermination","value":"NoTermination"}]},"aws-native:ec2:SpotFleetRequestConfigDataInstanceInterruptionBehavior":{"description":"The behavior when a Spot Instance is interrupted. The default is `terminate` .","type":"string","enum":[{"name":"Hibernate","value":"hibernate"},{"name":"Stop","value":"stop"},{"name":"Terminate","value":"terminate"}]},"aws-native:ec2:SpotFleetRequestConfigDataTargetCapacityUnitType":{"description":"The unit for the target capacity. You can specify this parameter only when using attribute-based instance type selection.\n\nDefault: `units` (the number of instances)","type":"string","enum":[{"name":"Vcpu","value":"vcpu"},{"name":"MemoryMib","value":"memory-mib"},{"name":"Units","value":"units"}]},"aws-native:ec2:SpotFleetRequestConfigDataType":{"description":"The type of request. Indicates whether the Spot Fleet only requests the target capacity or also attempts to maintain it. When this value is `request` , the Spot Fleet only places the required requests. It does not attempt to replenish Spot Instances if capacity is diminished, nor does it submit requests in alternative Spot pools if capacity is not available. When this value is `maintain` , the Spot Fleet maintains the target capacity. The Spot Fleet places the required requests to meet capacity and automatically replenishes any interrupted instances. Default: `maintain` . `instant` is listed but is not used by Spot Fleet.","type":"string","enum":[{"name":"Maintain","value":"maintain"},{"name":"Request","value":"request"}]},"aws-native:ec2:SpotFleetSpotCapacityRebalance":{"properties":{"replacementStrategy":{"$ref":"#/types/aws-native:ec2:SpotFleetSpotCapacityRebalanceReplacementStrategy","description":"The replacement strategy to use. Only available for fleets of type `maintain` .\n\n`launch` - Spot Fleet launches a new replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet. Spot Fleet does not terminate the instances that receive a rebalance notification. You can terminate the old instances, or you can leave them running. You are charged for all instances while they are running.\n\n`launch-before-terminate` - Spot Fleet launches a new replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet, and then, after a delay that you specify (in `TerminationDelay` ), terminates the instances that received a rebalance notification."},"terminationDelay":{"type":"integer","description":"The amount of time (in seconds) that Amazon EC2 waits before terminating the old Spot Instance after launching a new replacement Spot Instance.\n\nRequired when `ReplacementStrategy` is set to `launch-before-terminate` .\n\nNot valid when `ReplacementStrategy` is set to `launch` .\n\nValid values: Minimum value of `120` seconds. Maximum value of `7200` seconds."}},"type":"object"},"aws-native:ec2:SpotFleetSpotCapacityRebalanceReplacementStrategy":{"description":"The replacement strategy to use. Only available for fleets of type `maintain` .\n\n`launch` - Spot Fleet launches a new replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet. Spot Fleet does not terminate the instances that receive a rebalance notification. You can terminate the old instances, or you can leave them running. You are charged for all instances while they are running.\n\n`launch-before-terminate` - Spot Fleet launches a new replacement Spot Instance when a rebalance notification is emitted for an existing Spot Instance in the fleet, and then, after a delay that you specify (in `TerminationDelay` ), terminates the instances that received a rebalance notification.","type":"string","enum":[{"name":"Launch","value":"launch"},{"name":"LaunchBeforeTerminate","value":"launch-before-terminate"}]},"aws-native:ec2:SpotFleetSpotMaintenanceStrategies":{"properties":{"capacityRebalance":{"$ref":"#/types/aws-native:ec2:SpotFleetSpotCapacityRebalance","description":"The Spot Instance replacement strategy to use when Amazon EC2 emits a signal that your Spot Instance is at an elevated risk of being interrupted. For more information, see [Capacity rebalancing](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/spot-fleet-capacity-rebalance.html) in the *Amazon EC2 User Guide* ."}},"type":"object"},"aws-native:ec2:SpotFleetSpotPlacement":{"properties":{"availabilityZone":{"type":"string","description":"The Availability Zone.\n\nTo specify multiple Availability Zones, separate them using commas; for example, \"us-west-2a, us-west-2b\"."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone. For example, `use2-az1` .\n\n[Spot Fleet only] To specify multiple Availability Zones, separate them using commas; for example, \" `use2-az1` , `use2-bz1` \".\n\nEither `AvailabilityZone` or `AvailabilityZoneId` must be specified in the request, but not both."},"groupName":{"type":"string","description":"The name of the placement group."},"tenancy":{"$ref":"#/types/aws-native:ec2:SpotFleetSpotPlacementTenancy","description":"The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of `dedicated` runs on single-tenant hardware. The `host` tenancy is not supported for Spot Instances."}},"type":"object"},"aws-native:ec2:SpotFleetSpotPlacementTenancy":{"description":"The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of `dedicated` runs on single-tenant hardware. The `host` tenancy is not supported for Spot Instances.","type":"string","enum":[{"name":"Dedicated","value":"dedicated"},{"name":"Default","value":"default"},{"name":"Host","value":"host"}]},"aws-native:ec2:SpotFleetTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:SpotFleetTagSpecification":{"properties":{"resourceType":{"$ref":"#/types/aws-native:ec2:SpotFleetTagSpecificationResourceType","description":"The type of resource. Currently, the only resource type that is supported is `instance` . To tag the Spot Fleet request on creation, use the `TagSpecifications` parameter in `[SpotFleetRequestConfigData](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetRequestConfigData.html)` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetTag"},"description":"The tags."}},"type":"object"},"aws-native:ec2:SpotFleetTagSpecificationResourceType":{"description":"The type of resource. Currently, the only resource type that is supported is `instance` . To tag the Spot Fleet request on creation, use the `TagSpecifications` parameter in `[SpotFleetRequestConfigData](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SpotFleetRequestConfigData.html)` .","type":"string","enum":[{"name":"ClientVpnEndpoint","value":"client-vpn-endpoint"},{"name":"CustomerGateway","value":"customer-gateway"},{"name":"DedicatedHost","value":"dedicated-host"},{"name":"DhcpOptions","value":"dhcp-options"},{"name":"EgressOnlyInternetGateway","value":"egress-only-internet-gateway"},{"name":"ElasticGpu","value":"elastic-gpu"},{"name":"ElasticIp","value":"elastic-ip"},{"name":"ExportImageTask","value":"export-image-task"},{"name":"ExportInstanceTask","value":"export-instance-task"},{"name":"Fleet","value":"fleet"},{"name":"FpgaImage","value":"fpga-image"},{"name":"HostReservation","value":"host-reservation"},{"name":"Image","value":"image"},{"name":"ImportImageTask","value":"import-image-task"},{"name":"ImportSnapshotTask","value":"import-snapshot-task"},{"name":"Instance","value":"instance"},{"name":"InternetGateway","value":"internet-gateway"},{"name":"KeyPair","value":"key-pair"},{"name":"LaunchTemplate","value":"launch-template"},{"name":"LocalGatewayRouteTableVpcAssociation","value":"local-gateway-route-table-vpc-association"},{"name":"Natgateway","value":"natgateway"},{"name":"NetworkAcl","value":"network-acl"},{"name":"NetworkInsightsAnalysis","value":"network-insights-analysis"},{"name":"NetworkInsightsPath","value":"network-insights-path"},{"name":"NetworkInterface","value":"network-interface"},{"name":"PlacementGroup","value":"placement-group"},{"name":"ReservedInstances","value":"reserved-instances"},{"name":"RouteTable","value":"route-table"},{"name":"SecurityGroup","value":"security-group"},{"name":"Snapshot","value":"snapshot"},{"name":"SpotFleetRequest","value":"spot-fleet-request"},{"name":"SpotInstancesRequest","value":"spot-instances-request"},{"name":"Subnet","value":"subnet"},{"name":"TrafficMirrorFilter","value":"traffic-mirror-filter"},{"name":"TrafficMirrorSession","value":"traffic-mirror-session"},{"name":"TrafficMirrorTarget","value":"traffic-mirror-target"},{"name":"TransitGateway","value":"transit-gateway"},{"name":"TransitGatewayAttachment","value":"transit-gateway-attachment"},{"name":"TransitGatewayConnectPeer","value":"transit-gateway-connect-peer"},{"name":"TransitGatewayMulticastDomain","value":"transit-gateway-multicast-domain"},{"name":"TransitGatewayRouteTable","value":"transit-gateway-route-table"},{"name":"Volume","value":"volume"},{"name":"Vpc","value":"vpc"},{"name":"VpcFlowLog","value":"vpc-flow-log"},{"name":"VpcPeeringConnection","value":"vpc-peering-connection"},{"name":"VpnConnection","value":"vpn-connection"},{"name":"VpnGateway","value":"vpn-gateway"}]},"aws-native:ec2:SpotFleetTargetGroup":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group."}},"type":"object","required":["arn"]},"aws-native:ec2:SpotFleetTargetGroupsConfig":{"properties":{"targetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SpotFleetTargetGroup"},"description":"One or more target groups."}},"type":"object","required":["targetGroups"]},"aws-native:ec2:SpotFleetTotalLocalStorageGbRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of total local storage, in GB. To specify no maximum limit, omit this parameter."},"min":{"type":"number","description":"The minimum amount of total local storage, in GB. To specify no minimum limit, omit this parameter."}},"type":"object"},"aws-native:ec2:SpotFleetVCpuCountRangeRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of vCPUs. To specify no maximum limit, omit this parameter."},"min":{"type":"integer","description":"The minimum number of vCPUs. To specify no minimum limit, specify `0` ."}},"type":"object"},"aws-native:ec2:SqlHaStandbyDetectedInstanceHaStatus":{"description":"The SQL Server high availability status of the EC2 instance.","type":"string","enum":[{"name":"Processing","value":"processing"},{"name":"Active","value":"active"},{"name":"Standby","value":"standby"},{"name":"Invalid","value":"invalid"}]},"aws-native:ec2:SqlHaStandbyDetectedInstanceSqlServerLicenseUsage":{"description":"The SQL Server license type of the EC2 instance.","type":"string","enum":[{"name":"Full","value":"full"},{"name":"Waived","value":"waived"}]},"aws-native:ec2:SseSpecificationProperties":{"description":"The configuration options for customer provided KMS encryption.","properties":{"customerManagedKeyEnabled":{"type":"boolean","description":"Whether to encrypt the policy with the provided key or disable encryption"},"kmsKeyArn":{"type":"string","description":"KMS Key Arn used to encrypt the group policy"}},"type":"object"},"aws-native:ec2:SubnetTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TagSpecification":{"description":"Specifies the tags to apply to resources that are created during instance launch.\n ``TagSpecification`` is a property type of [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications). [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications) is a property of [AWS::EC2::LaunchTemplate LaunchTemplateData](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html).","properties":{"resourceType":{"type":"string","description":"The type of resource to tag. You can specify tags for the following resource types only: ``instance`` | ``volume`` | ``network-interface`` | ``spot-instances-request``. If the instance does not include the resource type that you specify, the instance launch fails. For example, not all instance types include a volume.\n To tag a resource after it has been created, see [CreateTags](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateTags.html)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateTag"},"description":"The tags to apply to the resource."}},"type":"object"},"aws-native:ec2:TrafficMirrorFilterRuleTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange":{"properties":{"fromPort":{"type":"integer","description":"The first port in the Traffic Mirror port range."},"toPort":{"type":"integer","description":"The last port in the Traffic Mirror port range."}},"type":"object","required":["fromPort","toPort"]},"aws-native:ec2:TrafficMirrorFilterTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TrafficMirrorFilterTrafficMirrorNetworkService":{"description":"The network service traffic that is associated with the traffic mirror filter.","type":"string","enum":[{"name":"AmazonDns","value":"amazon-dns"}]},"aws-native:ec2:TrafficMirrorSessionTag":{"description":"A key-value pair to associate with a traffic mirror session resource.","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TrafficMirrorTargetTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TransitGatewayAttachmentTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TransitGatewayConnectOptions":{"properties":{"protocol":{"type":"string","description":"The tunnel protocol."}},"type":"object"},"aws-native:ec2:TransitGatewayConnectPeerConfiguration":{"properties":{"bgpConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:TransitGatewayConnectPeerTransitGatewayAttachmentBgpConfiguration"},"description":"The BGP configuration details."},"insideCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The range of interior BGP peer IP addresses.","replaceOnChanges":true},"peerAddress":{"type":"string","description":"The peer IP address (GRE outer IP address) on the appliance side of the Connect peer.","replaceOnChanges":true},"protocol":{"type":"string","description":"The tunnel protocol."},"transitGatewayAddress":{"type":"string","description":"The Connect peer IP address on the transit gateway side of the tunnel.","replaceOnChanges":true}},"type":"object","required":["insideCidrBlocks","peerAddress"]},"aws-native:ec2:TransitGatewayConnectPeerTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws: ."},"value":{"type":"string","description":"The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object"},"aws-native:ec2:TransitGatewayConnectPeerTransitGatewayAttachmentBgpConfiguration":{"properties":{"bgpStatus":{"type":"string","description":"The BGP status."},"peerAddress":{"type":"string","description":"The interior BGP peer IP address for the appliance."},"peerAsn":{"type":"number","description":"The peer Autonomous System Number (ASN).","replaceOnChanges":true},"transitGatewayAddress":{"type":"string","description":"The interior BGP peer IP address for the transit gateway."},"transitGatewayAsn":{"type":"number","description":"The transit gateway Autonomous System Number (ASN)."}},"type":"object"},"aws-native:ec2:TransitGatewayConnectTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:."},"value":{"type":"string","description":"The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 255 Unicode characters."}},"type":"object"},"aws-native:ec2:TransitGatewayEncryptionSupport":{"description":"Enable or disable encryption support. Disabled by default.","type":"string","enum":[{"name":"Disable","value":"disable"},{"name":"Enable","value":"enable"}]},"aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayAttachmentResourceType":{"type":"string","enum":[{"name":"Vpc","value":"vpc"},{"name":"Vpn","value":"vpn"},{"name":"DirectConnectGateway","value":"direct-connect-gateway"},{"name":"Peering","value":"peering"},{"name":"NetworkFunction","value":"network-function"},{"name":"VpnConcentrator","value":"vpn-concentrator"},{"name":"ClientVpn","value":"client-vpn"}]},"aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayMeteringPayerType":{"type":"string","enum":[{"name":"SourceAttachmentOwner","value":"source-attachment-owner"},{"name":"DestinationAttachmentOwner","value":"destination-attachment-owner"},{"name":"TransitGatewayOwner","value":"transit-gateway-owner"}]},"aws-native:ec2:TransitGatewayMeteringPolicyTag":{"properties":{"key":{"type":"string","description":"The key of the tag.\n\nConstraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with `aws:` ."},"value":{"type":"string","description":"The value of the tag.\n\nConstraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object","required":["key","value"]},"aws-native:ec2:TransitGatewayMulticastDomainTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:."},"value":{"type":"string","description":"The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 255 Unicode characters."}},"type":"object"},"aws-native:ec2:TransitGatewayPeeringAttachmentPeeringAttachmentStatus":{"properties":{"code":{"type":"string","description":"The status code."},"message":{"type":"string","description":"The status message, if applicable."}},"type":"object"},"aws-native:ec2:TransitGatewayPeeringAttachmentTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:."},"value":{"type":"string","description":"The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 255 Unicode characters."}},"type":"object"},"aws-native:ec2:TransitGatewayRouteTableTag":{"properties":{"key":{"type":"string","description":"The key of the associated tag key-value pair"},"value":{"type":"string","description":"The value of the associated tag key-value pair"}},"type":"object","required":["key","value"]},"aws-native:ec2:TransitGatewayTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:TransitGatewayVpcAttachmentTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:VerifiedAccessEndpointCidrOptions":{"description":"The options for cidr type endpoint.","properties":{"cidr":{"type":"string","description":"The IP address range, in CIDR notation.","replaceOnChanges":true},"portRanges":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointPortRange"},"description":"The list of port range."},"protocol":{"type":"string","description":"The IP protocol.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets.","replaceOnChanges":true}},"type":"object"},"aws-native:ec2:VerifiedAccessEndpointLoadBalancerOptions":{"description":"The load balancer details if creating the AWS Verified Access endpoint as load-balancertype.","properties":{"loadBalancerArn":{"type":"string","description":"The ARN of the load balancer.","replaceOnChanges":true},"port":{"type":"integer","description":"The IP port number."},"portRanges":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointPortRange"},"description":"The list of port range."},"protocol":{"type":"string","description":"The IP protocol."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets."}},"type":"object"},"aws-native:ec2:VerifiedAccessEndpointNetworkInterfaceOptions":{"description":"The options for network-interface type endpoint.","properties":{"networkInterfaceId":{"type":"string","description":"The ID of the network interface.","replaceOnChanges":true},"port":{"type":"integer","description":"The IP port number."},"portRanges":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointPortRange"},"description":"The list of port ranges."},"protocol":{"type":"string","description":"The IP protocol."}},"type":"object"},"aws-native:ec2:VerifiedAccessEndpointPortRange":{"description":"The IP port range.","properties":{"fromPort":{"type":"integer","description":"The first port in the range."},"toPort":{"type":"integer","description":"The last port in the range."}},"type":"object"},"aws-native:ec2:VerifiedAccessEndpointRdsOptions":{"description":"The options for rds type endpoint.","properties":{"port":{"type":"integer","description":"The IP port number."},"protocol":{"type":"string","description":"The IP protocol.","replaceOnChanges":true},"rdsDbClusterArn":{"type":"string","description":"The ARN of the RDS DB cluster.","replaceOnChanges":true},"rdsDbInstanceArn":{"type":"string","description":"The ARN of the RDS DB instance.","replaceOnChanges":true},"rdsDbProxyArn":{"type":"string","description":"The ARN of the RDS DB proxy.","replaceOnChanges":true},"rdsEndpoint":{"type":"string","description":"The RDS endpoint."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets."}},"type":"object"},"aws-native:ec2:VerifiedAccessEndpointSseSpecification":{"description":"The configuration options for customer provided KMS encryption.","properties":{"customerManagedKeyEnabled":{"type":"boolean","description":"Whether to encrypt the policy with the provided key or disable encryption"},"kmsKeyArn":{"type":"string","description":"KMS Key Arn used to encrypt the group policy"}},"type":"object"},"aws-native:ec2:VerifiedAccessEndpointTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VerifiedAccessGroupSseSpecification":{"description":"The configuration options for customer provided KMS encryption.","properties":{"customerManagedKeyEnabled":{"type":"boolean","description":"Whether to encrypt the policy with the provided key or disable encryption"},"kmsKeyArn":{"type":"string","description":"KMS Key Arn used to encrypt the group policy"}},"type":"object"},"aws-native:ec2:VerifiedAccessGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VerifiedAccessInstanceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogs":{"description":"The configuration options for AWS Verified Access instances.","properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogsCloudWatchLogsProperties","description":"Sends Verified Access logs to CloudWatch Logs."},"includeTrustContext":{"type":"boolean","description":"Include claims from trust providers in Verified Access logs."},"kinesisDataFirehose":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogsKinesisDataFirehoseProperties","description":"Sends Verified Access logs to Kinesis."},"logVersion":{"type":"string","description":"Select log version for Verified Access logs."},"s3":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogsS3Properties","description":"Sends Verified Access logs to Amazon S3."}},"type":"object"},"aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogsCloudWatchLogsProperties":{"description":"Sends Verified Access logs to CloudWatch Logs.","properties":{"enabled":{"type":"boolean","description":"Indicates whether logging is enabled."},"logGroup":{"type":"string","description":"The ID of the CloudWatch Logs log group."}},"type":"object"},"aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogsKinesisDataFirehoseProperties":{"description":"Sends Verified Access logs to Kinesis.","properties":{"deliveryStream":{"type":"string","description":"The ID of the delivery stream."},"enabled":{"type":"boolean","description":"Indicates whether logging is enabled."}},"type":"object"},"aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogsS3Properties":{"description":"Sends Verified Access logs to Amazon S3.","properties":{"bucketName":{"type":"string","description":"The bucket name."},"bucketOwner":{"type":"string","description":"The ID of the AWS account that owns the Amazon S3 bucket."},"enabled":{"type":"boolean","description":"Indicates whether logging is enabled."},"prefix":{"type":"string","description":"The bucket prefix."}},"type":"object"},"aws-native:ec2:VerifiedAccessInstanceVerifiedAccessTrustProvider":{"description":"A Verified Access Trust Provider.","properties":{"description":{"type":"string","description":"The description of trust provider."},"deviceTrustProviderType":{"type":"string","description":"The type of device-based trust provider."},"trustProviderType":{"type":"string","description":"The type of trust provider (user- or device-based)."},"userTrustProviderType":{"type":"string","description":"The type of user-based trust provider."},"verifiedAccessTrustProviderId":{"type":"string","description":"The ID of the trust provider."}},"type":"object"},"aws-native:ec2:VerifiedAccessTrustProviderDeviceOptions":{"description":"The options for device identity based trust providers.","properties":{"publicSigningKeyUrl":{"type":"string","description":"URL Verified Access will use to verify authenticity of the device tokens."},"tenantId":{"type":"string","description":"The ID of the tenant application with the device-identity provider."}},"type":"object"},"aws-native:ec2:VerifiedAccessTrustProviderNativeApplicationOidcOptions":{"description":"The OpenID Connect details for an oidc -type, user-identity based trust provider for L4.","properties":{"authorizationEndpoint":{"type":"string","description":"The OIDC authorization endpoint."},"clientId":{"type":"string","description":"The client identifier."},"clientSecret":{"type":"string","description":"The client secret."},"issuer":{"type":"string","description":"The OIDC issuer."},"publicSigningKeyEndpoint":{"type":"string","description":"The public signing key for endpoint"},"scope":{"type":"string","description":"OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to details of a user. Each scope returns a specific set of user attributes."},"tokenEndpoint":{"type":"string","description":"The OIDC token endpoint."},"userInfoEndpoint":{"type":"string","description":"The OIDC user info endpoint."}},"type":"object"},"aws-native:ec2:VerifiedAccessTrustProviderOidcOptions":{"description":"The OpenID Connect details for an oidc -type, user-identity based trust provider.","properties":{"authorizationEndpoint":{"type":"string","description":"The OIDC authorization endpoint."},"clientId":{"type":"string","description":"The client identifier."},"clientSecret":{"type":"string","description":"The client secret."},"issuer":{"type":"string","description":"The OIDC issuer."},"scope":{"type":"string","description":"OpenID Connect (OIDC) scopes are used by an application during authentication to authorize access to details of a user. Each scope returns a specific set of user attributes."},"tokenEndpoint":{"type":"string","description":"The OIDC token endpoint."},"userInfoEndpoint":{"type":"string","description":"The OIDC user info endpoint."}},"type":"object"},"aws-native:ec2:VerifiedAccessTrustProviderTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VolumeTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpcBlockPublicAccessExclusionInternetGatewayExclusionMode":{"description":"The desired Block Public Access Exclusion Mode for a specific VPC/Subnet.","type":"string","enum":[{"name":"AllowBidirectional","value":"allow-bidirectional"},{"name":"AllowEgress","value":"allow-egress"}]},"aws-native:ec2:VpcBlockPublicAccessExclusionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpcBlockPublicAccessOptionsInternetGatewayBlockMode":{"description":"The desired Block Public Access mode for Internet Gateways in your account. We do not allow to create in a off mode as this is the default value","type":"string","enum":[{"name":"BlockBidirectional","value":"block-bidirectional"},{"name":"BlockIngress","value":"block-ingress"}]},"aws-native:ec2:VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput":{"description":"Used to enable or disable EIGW exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlElasticFileSystemExclusionInput":{"description":"Used to enable or disable EFS exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlExclusion":{"properties":{"state":{"type":"string","description":"The current state of the exclusion configuration."},"stateMessage":{"type":"string","description":"A message providing additional information about the exclusion state."}},"type":"object"},"aws-native:ec2:VpcEncryptionControlInternetGatewayExclusionInput":{"description":"Used to enable or disable IGW exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlLambdaExclusionInput":{"description":"Used to enable or disable Lambda exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlMode":{"description":"The VPC encryption control mode, either monitor or enforce.","type":"string","enum":[{"name":"Monitor","value":"monitor"},{"name":"Enforce","value":"enforce"}]},"aws-native:ec2:VpcEncryptionControlNatGatewayExclusionInput":{"description":"Used to enable or disable Nat gateway exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlResourceExclusions":{"properties":{"egressOnlyInternetGateway":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement."},"elasticFileSystem":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude Elastic File System traffic from encryption enforcement."},"internetGateway":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude internet gateway traffic from encryption enforcement."},"lambda":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude Lambda function traffic from encryption enforcement."},"natGateway":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude NAT gateway traffic from encryption enforcement."},"virtualPrivateGateway":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude virtual private gateway traffic from encryption enforcement."},"vpcLattice":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude VPC Lattice traffic from encryption enforcement."},"vpcPeering":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlExclusion","description":"Specifies whether to exclude VPC peering connection traffic from encryption enforcement."}},"type":"object"},"aws-native:ec2:VpcEncryptionControlState":{"description":"The current state of the VPC encryption control.","type":"string","enum":[{"name":"Creating","value":"creating"},{"name":"Available","value":"available"},{"name":"MonitorInProgress","value":"monitor-in-progress"},{"name":"EnforceInProgress","value":"enforce-in-progress"},{"name":"MonitorFailed","value":"monitor-failed"},{"name":"EnforceFailed","value":"enforce-failed"},{"name":"Deleting","value":"deleting"},{"name":"Deleted","value":"deleted"},{"name":"DeleteFailed","value":"delete-failed"}]},"aws-native:ec2:VpcEncryptionControlTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpcEncryptionControlVirtualPrivateGatewayExclusionInput":{"description":"Used to enable or disable VGW exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlVpcLatticeExclusionInput":{"description":"Used to enable or disable Vpc Lattice exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEncryptionControlVpcPeeringExclusionInput":{"description":"Used to enable or disable VPC peering exclusion","type":"string","enum":[{"name":"Enable","value":"enable"},{"name":"Disable","value":"disable"}]},"aws-native:ec2:VpcEndpointDnsOptionsSpecification":{"description":"Describes the DNS options for an endpoint.","properties":{"dnsRecordIpType":{"$ref":"#/types/aws-native:ec2:VpcEndpointDnsOptionsSpecificationDnsRecordIpType","description":"The DNS records created for the endpoint."},"privateDnsOnlyForInboundResolverEndpoint":{"$ref":"#/types/aws-native:ec2:VpcEndpointDnsOptionsSpecificationPrivateDnsOnlyForInboundResolverEndpoint","description":"Indicates whether to enable private DNS only for inbound endpoints. This option is available only for services that support both gateway and interface endpoints. It routes traffic that originates from the VPC to the gateway endpoint and traffic that originates from on-premises to the interface endpoint."},"privateDnsPreference":{"$ref":"#/types/aws-native:ec2:VpcEndpointDnsOptionsSpecificationPrivateDnsPreference","description":"The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.","replaceOnChanges":true},"privateDnsSpecifiedDomains":{"type":"array","items":{"type":"string"},"description":"Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is ``VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS`` or ``SPECIFIED_DOMAINS_ONLY``.","replaceOnChanges":true}},"type":"object"},"aws-native:ec2:VpcEndpointDnsOptionsSpecificationDnsRecordIpType":{"description":"The DNS records created for the endpoint.","type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"},{"name":"Dualstack","value":"dualstack"},{"name":"ServiceDefined","value":"service-defined"},{"name":"NotSpecified","value":"not-specified"}]},"aws-native:ec2:VpcEndpointDnsOptionsSpecificationPrivateDnsOnlyForInboundResolverEndpoint":{"description":"Indicates whether to enable private DNS only for inbound endpoints. This option is available only for services that support both gateway and interface endpoints. It routes traffic that originates from the VPC to the gateway endpoint and traffic that originates from on-premises to the interface endpoint.","type":"string","enum":[{"name":"OnlyInboundResolver","value":"OnlyInboundResolver"},{"name":"AllResolvers","value":"AllResolvers"},{"name":"NotSpecified","value":"NotSpecified"}]},"aws-native:ec2:VpcEndpointDnsOptionsSpecificationPrivateDnsPreference":{"description":"The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.","type":"string","enum":[{"name":"VerifiedDomainsOnly","value":"VERIFIED_DOMAINS_ONLY"},{"name":"AllDomains","value":"ALL_DOMAINS"},{"name":"VerifiedDomainsAndSpecifiedDomains","value":"VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS"},{"name":"SpecifiedDomainsOnly","value":"SPECIFIED_DOMAINS_ONLY"}]},"aws-native:ec2:VpcEndpointIpAddressType":{"description":"The supported IP address types.","type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"},{"name":"Dualstack","value":"dualstack"},{"name":"NotSpecified","value":"not-specified"}]},"aws-native:ec2:VpcEndpointServiceIpAddressType":{"type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"}]},"aws-native:ec2:VpcEndpointServiceTag":{"properties":{"key":{"type":"string","description":"The key of the tag.\n\nConstraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with `aws:` ."},"value":{"type":"string","description":"The value of the tag.\n\nConstraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpcEndpointTag":{"description":"Describes a tag.","properties":{"key":{"type":"string","description":"The key of the tag.\n Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with ``aws:``."},"value":{"type":"string","description":"The value of the tag.\n Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpcEndpointType":{"description":"The type of endpoint.\n Default: Gateway","type":"string","enum":[{"name":"Interface","value":"Interface"},{"name":"Gateway","value":"Gateway"},{"name":"GatewayLoadBalancer","value":"GatewayLoadBalancer"},{"name":"ServiceNetwork","value":"ServiceNetwork"},{"name":"Resource","value":"Resource"}]},"aws-native:ec2:VpcPeeringConnectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpcTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpnConcentratorTag":{"description":"Describes a tag.","properties":{"key":{"type":"string","description":"The key of the tag.\n Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with ``aws:``."},"value":{"type":"string","description":"The value of the tag.\n Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpnConnectionCloudwatchLogOptionsSpecification":{"description":"Options for sending VPN tunnel logs to CloudWatch.","properties":{"bgpLogEnabled":{"type":"boolean","description":"Specifies whether to enable BGP logging for the VPN connection. Default value is ``False``.\n Valid values: ``True`` | ``False``"},"bgpLogGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudWatch log group where BGP logs will be sent."},"bgpLogOutputFormat":{"$ref":"#/types/aws-native:ec2:VpnConnectionCloudwatchLogOptionsSpecificationBgpLogOutputFormat","description":"The desired output format for BGP logs to be sent to CloudWatch. Default format is ``json``.\n Valid values: ``json`` | ``text``"},"logEnabled":{"type":"boolean","description":"Enable or disable VPN tunnel logging feature. Default value is ``False``.\n Valid values: ``True`` | ``False``"},"logGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudWatch log group to send logs to."},"logOutputFormat":{"$ref":"#/types/aws-native:ec2:VpnConnectionCloudwatchLogOptionsSpecificationLogOutputFormat","description":"Set log format. Default format is ``json``.\n Valid values: ``json`` | ``text``"}},"type":"object"},"aws-native:ec2:VpnConnectionCloudwatchLogOptionsSpecificationBgpLogOutputFormat":{"description":"The desired output format for BGP logs to be sent to CloudWatch. Default format is ``json``.\n Valid values: ``json`` | ``text``","type":"string","enum":[{"name":"Json","value":"json"},{"name":"Text","value":"text"}]},"aws-native:ec2:VpnConnectionCloudwatchLogOptionsSpecificationLogOutputFormat":{"description":"Set log format. Default format is ``json``.\n Valid values: ``json`` | ``text``","type":"string","enum":[{"name":"Json","value":"json"},{"name":"Text","value":"text"}]},"aws-native:ec2:VpnConnectionIkeVersionsRequestListValue":{"description":"The IKE version that is permitted for the VPN tunnel.","properties":{"value":{"$ref":"#/types/aws-native:ec2:VpnConnectionIkeVersionsRequestListValueValue","description":"The IKE version."}},"type":"object"},"aws-native:ec2:VpnConnectionIkeVersionsRequestListValueValue":{"description":"The IKE version.","type":"string","enum":[{"name":"Ikev1","value":"ikev1"},{"name":"Ikev2","value":"ikev2"}]},"aws-native:ec2:VpnConnectionPhase1EncryptionAlgorithmsRequestListValue":{"description":"Specifies the encryption algorithm for the VPN tunnel for phase 1 IKE negotiations.","properties":{"value":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase1EncryptionAlgorithmsRequestListValueValue","description":"The value for the encryption algorithm."}},"type":"object"},"aws-native:ec2:VpnConnectionPhase1EncryptionAlgorithmsRequestListValueValue":{"description":"The value for the encryption algorithm.","type":"string","enum":[{"name":"Aes128","value":"AES128"},{"name":"Aes256","value":"AES256"},{"name":"Aes128Gcm16","value":"AES128-GCM-16"},{"name":"Aes256Gcm16","value":"AES256-GCM-16"}]},"aws-native:ec2:VpnConnectionPhase1IntegrityAlgorithmsRequestListValue":{"description":"Specifies the integrity algorithm for the VPN tunnel for phase 1 IKE negotiations.","properties":{"value":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase1IntegrityAlgorithmsRequestListValueValue","description":"The value for the integrity algorithm."}},"type":"object"},"aws-native:ec2:VpnConnectionPhase1IntegrityAlgorithmsRequestListValueValue":{"description":"The value for the integrity algorithm.","type":"string","enum":[{"name":"Sha1","value":"SHA1"},{"name":"Sha2256","value":"SHA2-256"},{"name":"Sha2384","value":"SHA2-384"},{"name":"Sha2512","value":"SHA2-512"}]},"aws-native:ec2:VpnConnectionPhase1dhGroupNumbersRequestListValue":{"description":"Specifies a Diffie-Hellman group number for the VPN tunnel for phase 1 IKE negotiations.","properties":{"value":{"type":"integer","description":"The Diffie-Hellmann group number."}},"type":"object"},"aws-native:ec2:VpnConnectionPhase2EncryptionAlgorithmsRequestListValue":{"description":"Specifies the encryption algorithm for the VPN tunnel for phase 2 IKE negotiations.","properties":{"value":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase2EncryptionAlgorithmsRequestListValueValue","description":"The encryption algorithm."}},"type":"object"},"aws-native:ec2:VpnConnectionPhase2EncryptionAlgorithmsRequestListValueValue":{"description":"The encryption algorithm.","type":"string","enum":[{"name":"Aes128","value":"AES128"},{"name":"Aes256","value":"AES256"},{"name":"Aes128Gcm16","value":"AES128-GCM-16"},{"name":"Aes256Gcm16","value":"AES256-GCM-16"}]},"aws-native:ec2:VpnConnectionPhase2IntegrityAlgorithmsRequestListValue":{"description":"Specifies the integrity algorithm for the VPN tunnel for phase 2 IKE negotiations.","properties":{"value":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase2IntegrityAlgorithmsRequestListValueValue","description":"The integrity algorithm."}},"type":"object"},"aws-native:ec2:VpnConnectionPhase2IntegrityAlgorithmsRequestListValueValue":{"description":"The integrity algorithm.","type":"string","enum":[{"name":"Sha1","value":"SHA1"},{"name":"Sha2256","value":"SHA2-256"},{"name":"Sha2384","value":"SHA2-384"},{"name":"Sha2512","value":"SHA2-512"}]},"aws-native:ec2:VpnConnectionPhase2dhGroupNumbersRequestListValue":{"description":"Specifies a Diffie-Hellman group number for the VPN tunnel for phase 2 IKE negotiations.","properties":{"value":{"type":"integer","description":"The Diffie-Hellmann group number."}},"type":"object"},"aws-native:ec2:VpnConnectionPreSharedKeyStorage":{"description":"Describes the storage location for an instance store-backed AMI.","type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"SecretsManager","value":"SecretsManager"}]},"aws-native:ec2:VpnConnectionTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ec2:VpnConnectionTunnelBandwidth":{"description":"The desired bandwidth specification for the VPN tunnel, used when creating or modifying VPN connection options to set the tunnel's throughput capacity. ``standard`` supports up to 1.25 Gbps per tunnel, while ``large`` supports up to 5 Gbps per tunnel. The default value is ``standard``. Existing VPN connections without a bandwidth setting will automatically default to ``standard``.","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Large","value":"large"}]},"aws-native:ec2:VpnConnectionVpnTunnelLogOptionsSpecification":{"description":"Options for logging VPN tunnel activity.","properties":{"cloudwatchLogOptions":{"$ref":"#/types/aws-native:ec2:VpnConnectionCloudwatchLogOptionsSpecification","description":"Options for sending VPN tunnel logs to CloudWatch."}},"type":"object"},"aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecification":{"description":"The tunnel options for a single VPN tunnel.","properties":{"dpdTimeoutAction":{"$ref":"#/types/aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecificationDpdTimeoutAction","description":"The action to take after DPD timeout occurs. Specify ``restart`` to restart the IKE initiation. Specify ``clear`` to end the IKE session.\n Valid Values: ``clear`` | ``none`` | ``restart``\n Default: ``clear``"},"dpdTimeoutSeconds":{"type":"integer","description":"The number of seconds after which a DPD timeout occurs.\n Constraints: A value greater than or equal to 30.\n Default: ``30``"},"enableTunnelLifecycleControl":{"type":"boolean","description":"Turn on or off tunnel endpoint lifecycle control feature."},"ikeVersions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionIkeVersionsRequestListValue"},"description":"The IKE versions that are permitted for the VPN tunnel.\n Valid values: ``ikev1`` | ``ikev2``"},"logOptions":{"$ref":"#/types/aws-native:ec2:VpnConnectionVpnTunnelLogOptionsSpecification","description":"Options for logging VPN tunnel activity."},"phase1EncryptionAlgorithms":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase1EncryptionAlgorithmsRequestListValue"},"description":"One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.\n Valid values: ``AES128`` | ``AES256`` | ``AES128-GCM-16`` | ``AES256-GCM-16``"},"phase1IntegrityAlgorithms":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase1IntegrityAlgorithmsRequestListValue"},"description":"One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.\n Valid values: ``SHA1`` | ``SHA2-256`` | ``SHA2-384`` | ``SHA2-512``"},"phase1LifetimeSeconds":{"type":"integer","description":"The lifetime for phase 1 of the IKE negotiation, in seconds.\n Constraints: A value between 900 and 28,800.\n Default: ``28800``"},"phase1dhGroupNumbers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase1dhGroupNumbersRequestListValue"},"description":"One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.\n Valid values: ``2`` | ``14`` | ``15`` | ``16`` | ``17`` | ``18`` | ``19`` | ``20`` | ``21`` | ``22`` | ``23`` | ``24``"},"phase2EncryptionAlgorithms":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase2EncryptionAlgorithmsRequestListValue"},"description":"One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.\n Valid values: ``AES128`` | ``AES256`` | ``AES128-GCM-16`` | ``AES256-GCM-16``"},"phase2IntegrityAlgorithms":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase2IntegrityAlgorithmsRequestListValue"},"description":"One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.\n Valid values: ``SHA1`` | ``SHA2-256`` | ``SHA2-384`` | ``SHA2-512``"},"phase2LifetimeSeconds":{"type":"integer","description":"The lifetime for phase 2 of the IKE negotiation, in seconds.\n Constraints: A value between 900 and 3,600. The value must be less than the value for ``Phase1LifetimeSeconds``.\n Default: ``3600``"},"phase2dhGroupNumbers":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionPhase2dhGroupNumbersRequestListValue"},"description":"One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.\n Valid values: ``2`` | ``5`` | ``14`` | ``15`` | ``16`` | ``17`` | ``18`` | ``19`` | ``20`` | ``21`` | ``22`` | ``23`` | ``24``"},"preSharedKey":{"type":"string","description":"The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.\n Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0)."},"rekeyFuzzPercentage":{"type":"integer","description":"The percentage of the rekey window (determined by ``RekeyMarginTimeSeconds``) during which the rekey time is randomly selected.\n Constraints: A value between 0 and 100.\n Default: ``100``"},"rekeyMarginTimeSeconds":{"type":"integer","description":"The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for ``RekeyFuzzPercentage``.\n Constraints: A value between 60 and half of ``Phase2LifetimeSeconds``.\n Default: ``270``"},"replayWindowSize":{"type":"integer","description":"The number of packets in an IKE replay window.\n Constraints: A value between 64 and 2048.\n Default: ``1024``"},"startupAction":{"$ref":"#/types/aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecificationStartupAction","description":"The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify ``start`` for AWS to initiate the IKE negotiation.\n Valid Values: ``add`` | ``start``\n Default: ``add``"},"tunnelInsideCidr":{"type":"string","description":"The range of inside IP addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway. \n Constraints: A size /30 CIDR block from the ``169.254.0.0/16`` range. The following CIDR blocks are reserved and cannot be used:\n  +   ``169.254.0.0/30`` \n  +   ``169.254.1.0/30`` \n  +   ``169.254.2.0/30`` \n  +   ``169.254.3.0/30`` \n  +   ``169.254.4.0/30`` \n  +   ``169.254.5.0/30`` \n  +   ``169.254.169.252/30``"},"tunnelInsideIpv6Cidr":{"type":"string","description":"The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.\n Constraints: A size /126 CIDR block from the local ``fd00::/8`` range."}},"type":"object"},"aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecificationDpdTimeoutAction":{"description":"The action to take after DPD timeout occurs. Specify ``restart`` to restart the IKE initiation. Specify ``clear`` to end the IKE session.\n Valid Values: ``clear`` | ``none`` | ``restart``\n Default: ``clear``","type":"string","enum":[{"name":"Clear","value":"clear"},{"name":"None","value":"none"},{"name":"Restart","value":"restart"}]},"aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecificationStartupAction":{"description":"The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify ``start`` for AWS to initiate the IKE negotiation.\n Valid Values: ``add`` | ``start``\n Default: ``add``","type":"string","enum":[{"name":"Add","value":"add"},{"name":"Start","value":"start"}]},"aws-native:ec2:VpnGatewayTag":{"description":"Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ecr:RegistryScanningConfigurationFilterType":{"description":"The type associated with the filter.","type":"string","enum":[{"name":"Wildcard","value":"WILDCARD"}]},"aws-native:ecr:RegistryScanningConfigurationRepositoryFilter":{"description":"The filter settings used with image replication. Specifying a repository filter to a replication rule provides a method for controlling which repositories in a private registry are replicated. If no filters are added, the contents of all repositories are replicated.","properties":{"filter":{"type":"string","description":"The filter to use when scanning."},"filterType":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationFilterType","description":"The type associated with the filter."}},"type":"object","required":["filter","filterType"]},"aws-native:ecr:RegistryScanningConfigurationScanFrequency":{"description":"The frequency that scans are performed.","type":"string","enum":[{"name":"ScanOnPush","value":"SCAN_ON_PUSH"},{"name":"ContinuousScan","value":"CONTINUOUS_SCAN"}]},"aws-native:ecr:RegistryScanningConfigurationScanType":{"description":"The type of scanning configured for the registry.","type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Enhanced","value":"ENHANCED"}]},"aws-native:ecr:RegistryScanningConfigurationScanningRule":{"description":"The scanning rules associated with the registry.","properties":{"repositoryFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationRepositoryFilter"},"description":"The details of a scanning repository filter. For more information on how to use filters, see [Using filters](https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html#image-scanning-filters) in the *Amazon Elastic Container Registry User Guide*."},"scanFrequency":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanFrequency","description":"The frequency that scans are performed at for a private registry. When the ``ENHANCED`` scan type is specified, the supported scan frequencies are ``CONTINUOUS_SCAN`` and ``SCAN_ON_PUSH``. When the ``BASIC`` scan type is specified, the ``SCAN_ON_PUSH`` scan frequency is supported. If scan on push is not specified, then the ``MANUAL`` scan frequency is set by default."}},"type":"object","required":["repositoryFilters","scanFrequency"]},"aws-native:ecr:ReplicationConfiguration":{"description":"The replication configuration for a registry.","properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:ReplicationConfigurationReplicationRule"},"description":"An array of objects representing the replication destinations and repository filters for a replication configuration."}},"type":"object","required":["rules"]},"aws-native:ecr:ReplicationConfigurationFilterType":{"description":"Type of repository filter","type":"string","enum":[{"name":"PrefixMatch","value":"PREFIX_MATCH"}]},"aws-native:ecr:ReplicationConfigurationReplicationDestination":{"description":"An array of objects representing the destination for a replication rule.","properties":{"region":{"type":"string","description":"The Region to replicate to."},"registryId":{"type":"string","description":"The AWS account ID of the Amazon ECR private registry to replicate to. When configuring cross-Region replication within your own registry, specify your own account ID."}},"type":"object","required":["region","registryId"]},"aws-native:ecr:ReplicationConfigurationReplicationRule":{"description":"An array of objects representing the replication destinations and repository filters for a replication configuration.","properties":{"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:ReplicationConfigurationReplicationDestination"},"description":"An array of objects representing the destination for a replication rule."},"repositoryFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:ReplicationConfigurationRepositoryFilter"},"description":"An array of objects representing the filters for a replication rule. Specifying a repository filter for a replication rule provides a method for controlling which repositories in a private registry are replicated."}},"type":"object","required":["destinations"]},"aws-native:ecr:ReplicationConfigurationRepositoryFilter":{"description":"The filter settings used with image replication. Specifying a repository filter to a replication rule provides a method for controlling which repositories in a private registry are replicated. If no filters are added, the contents of all repositories are replicated.","properties":{"filter":{"type":"string","description":"The repository filter details. When the ``PREFIX_MATCH`` filter type is specified, this value is required and should be the repository name prefix to configure replication for."},"filterType":{"$ref":"#/types/aws-native:ecr:ReplicationConfigurationFilterType","description":"The repository filter type. The only supported value is ``PREFIX_MATCH``, which is a repository name prefix specified with the ``filter`` parameter."}},"type":"object","required":["filter","filterType"]},"aws-native:ecr:RepositoryCreationTemplateAppliedForItem":{"description":"Enumerable Strings representing the repository creation scenarios that the template will apply towards.","type":"string","enum":[{"name":"Replication","value":"REPLICATION"},{"name":"PullThroughCache","value":"PULL_THROUGH_CACHE"},{"name":"CreateOnPush","value":"CREATE_ON_PUSH"}]},"aws-native:ecr:RepositoryCreationTemplateEncryptionConfiguration":{"description":"The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.\n By default, when no encryption configuration is set or the ``AES256`` encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.\n For more control over the encryption of the contents of your repository, you can use server-side encryption with KMSlong key stored in KMSlong (KMS) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide*.","properties":{"encryptionType":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateEncryptionType","description":"The encryption type to use.\n If you use the ``KMS`` encryption type, the contents of the repository will be encrypted using server-side encryption with KMSlong key stored in KMS. When you use KMS to encrypt your data, you can either use the default AWS managed KMS key for Amazon ECR, or specify your own KMS key, which you already created.\n If you use the ``KMS_DSSE`` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the KMS Management Service key stored in KMS. Similar to the ``KMS`` encryption type, you can either use the default AWS managed KMS key for Amazon ECR, or specify your own KMS key, which you've already created. \n If you use the ``AES256`` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.\n For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide*."},"kmsKey":{"type":"string","description":"If you use the ``KMS`` encryption type, specify the KMS key to use for encryption. The alias, key ID, or full ARN of the KMS key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed KMS key for Amazon ECR will be used."}},"type":"object","required":["encryptionType"]},"aws-native:ecr:RepositoryCreationTemplateEncryptionType":{"description":"The encryption type to use.","type":"string","enum":[{"name":"Aes256","value":"AES256"},{"name":"Kms","value":"KMS"},{"name":"KmsDsse","value":"KMS_DSSE"}]},"aws-native:ecr:RepositoryCreationTemplateImageTagMutability":{"description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.","type":"string","enum":[{"name":"Mutable","value":"MUTABLE"},{"name":"Immutable","value":"IMMUTABLE"},{"name":"ImmutableWithExclusion","value":"IMMUTABLE_WITH_EXCLUSION"},{"name":"MutableWithExclusion","value":"MUTABLE_WITH_EXCLUSION"}]},"aws-native:ecr:RepositoryCreationTemplateImageTagMutabilityExclusionFilter":{"description":"A filter that specifies which image tags should be excluded from the repository's image tag mutability setting.","properties":{"imageTagMutabilityExclusionFilterType":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutabilityExclusionFilterImageTagMutabilityExclusionFilterType"},"imageTagMutabilityExclusionFilterValue":{"type":"string"}},"type":"object","required":["imageTagMutabilityExclusionFilterType","imageTagMutabilityExclusionFilterValue"]},"aws-native:ecr:RepositoryCreationTemplateImageTagMutabilityExclusionFilterImageTagMutabilityExclusionFilterType":{"type":"string","enum":[{"name":"Wildcard","value":"WILDCARD"}]},"aws-native:ecr:RepositoryCreationTemplateTag":{"description":"The metadata to apply to a resource to help you categorize and organize them. Each tag consists of a key and a value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.","properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A ``key`` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"A ``value`` acts as a descriptor within a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:ecr:RepositoryEncryptionConfiguration":{"description":"The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.\n By default, when no encryption configuration is set or the ``AES256`` encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.\n For more control over the encryption of the contents of your repository, you can use server-side encryption with KMSlong key stored in KMSlong (KMS) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide*.","properties":{"encryptionType":{"$ref":"#/types/aws-native:ecr:RepositoryEncryptionType","description":"The encryption type to use.\n\nIf you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS  . When you use AWS  to encrypt your data, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you already created.\n\nIf you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS  Management Service key stored in AWS  . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you've already created.\n\nIf you use the `AES256` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.\n\nFor more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .","replaceOnChanges":true},"kmsKey":{"type":"string","description":"If you use the ``KMS`` encryption type, specify the KMS key to use for encryption. The alias, key ID, or full ARN of the KMS key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed KMS key for Amazon ECR will be used.","replaceOnChanges":true}},"type":"object","required":["encryptionType"]},"aws-native:ecr:RepositoryEncryptionType":{"description":"The encryption type to use.","type":"string","enum":[{"name":"Aes256","value":"AES256"},{"name":"Kms","value":"KMS"},{"name":"KmsDsse","value":"KMS_DSSE"}]},"aws-native:ecr:RepositoryImageScanningConfiguration":{"description":"The image scanning configuration for a repository.","properties":{"scanOnPush":{"type":"boolean","description":"The setting that determines whether images are scanned after being pushed to a repository. If set to ``true``, images will be scanned after being pushed. If this parameter is not specified, it will default to ``false`` and images will not be scanned unless a scan is manually started."}},"type":"object"},"aws-native:ecr:RepositoryImageTagMutability":{"description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.","type":"string","enum":[{"name":"Mutable","value":"MUTABLE"},{"name":"Immutable","value":"IMMUTABLE"},{"name":"MutableWithExclusion","value":"MUTABLE_WITH_EXCLUSION"},{"name":"ImmutableWithExclusion","value":"IMMUTABLE_WITH_EXCLUSION"}]},"aws-native:ecr:RepositoryImageTagMutabilityExclusionFilter":{"description":"A filter that specifies which image tags should be excluded from the repository's image tag mutability setting.","properties":{"imageTagMutabilityExclusionFilterType":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutabilityExclusionFilterType"},"imageTagMutabilityExclusionFilterValue":{"type":"string"}},"type":"object","required":["imageTagMutabilityExclusionFilterType","imageTagMutabilityExclusionFilterValue"]},"aws-native:ecr:RepositoryImageTagMutabilityExclusionFilterType":{"description":"Specifies the type of filter to use for excluding image tags from the repository's mutability setting.","type":"string","enum":[{"name":"Wildcard","value":"WILDCARD"}]},"aws-native:ecr:RepositoryLifecyclePolicy":{"description":"The ``LifecyclePolicy`` property type specifies a lifecycle policy. For information about lifecycle policy syntax, see [Lifecycle policy template](https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html) in the *Amazon ECR User Guide*.","properties":{"lifecyclePolicyText":{"type":"string","description":"The JSON repository policy text to apply to the repository."},"registryId":{"type":"string","description":"The AWS account ID associated with the registry that contains the repository. If you do\n not specify a registry, the default registry is assumed."}},"type":"object"},"aws-native:ecr:RepositoryTag":{"description":"The metadata to apply to a resource to help you categorize and organize them. Each tag consists of a key and a value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.","properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A ``key`` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"A ``value`` acts as a descriptor within a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:ecr:SigningConfigurationFilterType":{"description":"Type of repository filter","type":"string","enum":[{"name":"WildcardMatch","value":"WILDCARD_MATCH"}]},"aws-native:ecr:SigningConfigurationRepositoryFilter":{"description":"An array of objects representing the details of a repository filter.","properties":{"filter":{"type":"string","description":"The filter value used to match repository names. When using `WILDCARD_MATCH` , the `*` character matches any sequence of characters.\n\nExamples:\n\n- `myapp/*` - Matches all repositories starting with `myapp/`\n- `*/production` - Matches all repositories ending with `/production`\n- `*prod*` - Matches all repositories containing `prod`"},"filterType":{"$ref":"#/types/aws-native:ecr:SigningConfigurationFilterType","description":"The type of filter to apply. Currently, only `WILDCARD_MATCH` is supported, which uses wildcard patterns to match repository names."}},"type":"object","required":["filter","filterType"]},"aws-native:ecr:SigningConfigurationRule":{"properties":{"repositoryFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:SigningConfigurationRepositoryFilter"},"description":"Optional array of repository filters. If omitted, the rule matches all repositories. If provided, must contain at least one filter. Empty arrays are not allowed."},"signingProfileArn":{"type":"string","description":"AWS Signer signing profile ARN to use for matched repositories."}},"type":"object","required":["signingProfileArn"]},"aws-native:ecs:CapacityProviderAcceleratorCountRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of accelerators. Instance types with more accelerators are excluded from selection."},"min":{"type":"integer","description":"The minimum number of accelerators. Instance types with fewer accelerators are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderAcceleratorTotalMemoryMiBRequest":{"properties":{"max":{"type":"integer","description":"The maximum total accelerator memory in MiB. Instance types with more accelerator memory are excluded from selection."},"min":{"type":"integer","description":"The minimum total accelerator memory in MiB. Instance types with less accelerator memory are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderAutoScalingGroupProvider":{"properties":{"autoScalingGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) that identifies the Auto Scaling group, or the Auto Scaling group name.","replaceOnChanges":true},"managedDraining":{"$ref":"#/types/aws-native:ecs:CapacityProviderAutoScalingGroupProviderManagedDraining","description":"The managed draining option for the Auto Scaling group capacity provider. When you enable this, Amazon ECS manages and gracefully drains the EC2 container instances that are in the Auto Scaling group capacity provider."},"managedScaling":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedScaling","description":"The managed scaling settings for the Auto Scaling group capacity provider."},"managedTerminationProtection":{"$ref":"#/types/aws-native:ecs:CapacityProviderAutoScalingGroupProviderManagedTerminationProtection","description":"The managed termination protection setting to use for the Auto Scaling group capacity provider. This determines whether the Auto Scaling group has managed termination protection. The default is off.\n\n\u003e When using managed termination protection, managed scaling must also be used otherwise managed termination protection doesn't work. \n\nWhen managed termination protection is on, Amazon ECS prevents the Amazon EC2 instances in an Auto Scaling group that contain tasks from being terminated during a scale-in action. The Auto Scaling group and each instance in the Auto Scaling group must have instance protection from scale-in actions on as well. For more information, see [Instance Protection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-instance-termination.html#instance-protection) in the *AWS Auto Scaling User Guide* .\n\nWhen managed termination protection is off, your Amazon EC2 instances aren't protected from termination when the Auto Scaling group scales in."}},"type":"object","required":["autoScalingGroupArn"]},"aws-native:ecs:CapacityProviderAutoScalingGroupProviderManagedDraining":{"description":"The managed draining option for the Auto Scaling group capacity provider. When you enable this, Amazon ECS manages and gracefully drains the EC2 container instances that are in the Auto Scaling group capacity provider.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:ecs:CapacityProviderAutoScalingGroupProviderManagedTerminationProtection":{"description":"The managed termination protection setting to use for the Auto Scaling group capacity provider. This determines whether the Auto Scaling group has managed termination protection. The default is off.\n\n\u003e When using managed termination protection, managed scaling must also be used otherwise managed termination protection doesn't work. \n\nWhen managed termination protection is on, Amazon ECS prevents the Amazon EC2 instances in an Auto Scaling group that contain tasks from being terminated during a scale-in action. The Auto Scaling group and each instance in the Auto Scaling group must have instance protection from scale-in actions on as well. For more information, see [Instance Protection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-instance-termination.html#instance-protection) in the *AWS Auto Scaling User Guide* .\n\nWhen managed termination protection is off, your Amazon EC2 instances aren't protected from termination when the Auto Scaling group scales in.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:ecs:CapacityProviderBaselineEbsBandwidthMbpsRequest":{"properties":{"max":{"type":"integer","description":"The maximum baseline Amazon EBS bandwidth in Mbps. Instance types with higher Amazon EBS bandwidth are excluded from selection."},"min":{"type":"integer","description":"The minimum baseline Amazon EBS bandwidth in Mbps. Instance types with lower Amazon EBS bandwidth are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderCapacityReservationRequest":{"properties":{"reservationGroupArn":{"type":"string"},"reservationPreference":{"$ref":"#/types/aws-native:ecs:CapacityProviderCapacityReservationRequestReservationPreference"}},"type":"object"},"aws-native:ecs:CapacityProviderCapacityReservationRequestReservationPreference":{"type":"string","enum":[{"name":"ReservationsOnly","value":"RESERVATIONS_ONLY"},{"name":"ReservationsFirst","value":"RESERVATIONS_FIRST"},{"name":"ReservationsExcluded","value":"RESERVATIONS_EXCLUDED"}]},"aws-native:ecs:CapacityProviderInstanceLaunchTemplate":{"properties":{"capacityOptionType":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceLaunchTemplateCapacityOptionType","description":"The capacity option type. This determines whether Amazon ECS launches On-Demand or Spot Instances for your managed instance capacity provider.\n\nValid values are:\n\n- `ON_DEMAND` - Launches standard On-Demand Instances. On-Demand Instances provide predictable pricing and availability.\n- `SPOT` - Launches Spot Instances that use spare Amazon EC2 capacity at reduced cost. Spot Instances can be interrupted by Amazon EC2 with a two-minute notification when the capacity is needed back.\n\nThe default is On-Demand\n\nFor more information about Amazon EC2 capacity options, see [Instance purchasing options](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-purchasing-options.html) in the *Amazon EC2 User Guide* ."},"capacityReservations":{"$ref":"#/types/aws-native:ecs:CapacityProviderCapacityReservationRequest"},"ec2InstanceProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance profile that Amazon ECS applies to Amazon ECS Managed Instances. This instance profile must include the necessary permissions for your tasks to access AWS services and resources.\n\nFor more information, see [Amazon ECS instance profile for Managed Instances](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/managed-instances-instance-profile.html) in the *Amazon ECS Developer Guide* ."},"fipsEnabled":{"type":"boolean","replaceOnChanges":true},"instanceMetadataTagsPropagation":{"type":"boolean"},"instanceRequirements":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequest","description":"The instance requirements. You can specify:\n\n- The instance types\n- Instance requirements such as vCPU count, memory, network performance, and accelerator specifications\n\nAmazon ECS automatically selects the instances that match the specified criteria."},"monitoring":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesMonitoringOptions","description":"CloudWatch provides two categories of monitoring: basic monitoring and detailed monitoring. By default, your managed instance is configured for basic monitoring. You can optionally enable detailed monitoring to help you more quickly identify and act on operational issues. You can enable or turn off detailed monitoring at launch or when the managed instance is running or stopped. For more information, see [Detailed monitoring for Amazon ECS Managed Instances](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/detailed-monitoring-managed-instances.html) in the Amazon ECS Developer Guide."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesNetworkConfiguration","description":"The network configuration for Amazon ECS Managed Instances. This specifies the subnets and security groups that instances use for network connectivity."},"storageConfiguration":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesStorageConfiguration","description":"The storage configuration for Amazon ECS Managed Instances. This defines the root volume size and type for the instances."}},"type":"object","required":["ec2InstanceProfileArn","networkConfiguration"]},"aws-native:ecs:CapacityProviderInstanceLaunchTemplateCapacityOptionType":{"description":"The capacity option type. This determines whether Amazon ECS launches On-Demand or Spot Instances for your managed instance capacity provider.\n\nValid values are:\n\n- `ON_DEMAND` - Launches standard On-Demand Instances. On-Demand Instances provide predictable pricing and availability.\n- `SPOT` - Launches Spot Instances that use spare Amazon EC2 capacity at reduced cost. Spot Instances can be interrupted by Amazon EC2 with a two-minute notification when the capacity is needed back.\n\nThe default is On-Demand\n\nFor more information about Amazon EC2 capacity options, see [Instance purchasing options](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-purchasing-options.html) in the *Amazon EC2 User Guide* .","type":"string","enum":[{"name":"OnDemand","value":"ON_DEMAND"},{"name":"Spot","value":"SPOT"},{"name":"Reserved","value":"RESERVED"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequest":{"properties":{"acceleratorCount":{"$ref":"#/types/aws-native:ecs:CapacityProviderAcceleratorCountRequest","description":"The minimum and maximum number of accelerators for the instance types. This is used when you need instances with specific numbers of GPUs or other accelerators."},"acceleratorManufacturers":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestAcceleratorManufacturersItem"},"description":"The accelerator manufacturers to include. You can specify `nvidia` , `amd` , `amazon-web-services` , or `xilinx` depending on your accelerator requirements."},"acceleratorNames":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestAcceleratorNamesItem"},"description":"The specific accelerator names to include. For example, you can specify `a100` , `v100` , `k80` , or other specific accelerator models."},"acceleratorTotalMemoryMiB":{"$ref":"#/types/aws-native:ecs:CapacityProviderAcceleratorTotalMemoryMiBRequest","description":"The minimum and maximum total accelerator memory in mebibytes (MiB). This is important for GPU workloads that require specific amounts of video memory."},"acceleratorTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestAcceleratorTypesItem"},"description":"The accelerator types to include. You can specify `gpu` for graphics processing units, `fpga` for field programmable gate arrays, or `inference` for machine learning inference accelerators."},"allowedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to include in the selection. When specified, Amazon ECS only considers these instance types, subject to the other requirements specified."},"bareMetal":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestBareMetal","description":"Indicates whether to include bare metal instance types. Set to `included` to allow bare metal instances, `excluded` to exclude them, or `required` to use only bare metal instances."},"baselineEbsBandwidthMbps":{"$ref":"#/types/aws-native:ecs:CapacityProviderBaselineEbsBandwidthMbpsRequest","description":"The minimum and maximum baseline Amazon EBS bandwidth in megabits per second (Mbps). This is important for workloads with high storage I/O requirements."},"burstablePerformance":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestBurstablePerformance","description":"Indicates whether to include burstable performance instance types (T2, T3, T3a, T4g). Set to `included` to allow burstable instances, `excluded` to exclude them, or `required` to use only burstable instances."},"cpuManufacturers":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestCpuManufacturersItem"},"description":"The CPU manufacturers to include or exclude. You can specify `intel` , `amd` , or `amazon-web-services` to control which CPU types are used for your workloads."},"excludedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types to exclude from selection. Use this to prevent Amazon ECS from selecting specific instance types that may not be suitable for your workloads."},"instanceGenerations":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestInstanceGenerationsItem"},"description":"The instance generations to include. You can specify `current` to use the latest generation instances, or `previous` to include previous generation instances for cost optimization."},"localStorage":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestLocalStorage","description":"Indicates whether to include instance types with local storage. Set to `included` to allow local storage, `excluded` to exclude it, or `required` to use only instances with local storage."},"localStorageTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceRequirementsRequestLocalStorageTypesItem"},"description":"The local storage types to include. You can specify `hdd` for hard disk drives, `ssd` for solid state drives, or both."},"maxSpotPriceAsPercentageOfOptimalOnDemandPrice":{"type":"integer","description":"The maximum price for Spot instances as a percentage of the optimal On-Demand price. This provides more precise cost control for Spot instance selection."},"memoryGiBPerVCpu":{"$ref":"#/types/aws-native:ecs:CapacityProviderMemoryGiBPerVCpuRequest","description":"The minimum and maximum amount of memory per vCPU in gibibytes (GiB). This helps ensure that instance types have the appropriate memory-to-CPU ratio for your workloads."},"memoryMiB":{"$ref":"#/types/aws-native:ecs:CapacityProviderMemoryMiBRequest","description":"The minimum and maximum amount of memory in mebibytes (MiB) for the instance types. Amazon ECS selects instance types that have memory within this range."},"networkBandwidthGbps":{"$ref":"#/types/aws-native:ecs:CapacityProviderNetworkBandwidthGbpsRequest","description":"The minimum and maximum network bandwidth in gigabits per second (Gbps). This is crucial for network-intensive workloads that require high throughput."},"networkInterfaceCount":{"$ref":"#/types/aws-native:ecs:CapacityProviderNetworkInterfaceCountRequest","description":"The minimum and maximum number of network interfaces for the instance types. This is useful for workloads that require multiple network interfaces."},"onDemandMaxPricePercentageOverLowestPrice":{"type":"integer","description":"The price protection threshold for On-Demand Instances, as a percentage higher than an identified On-Demand price. The identified On-Demand price is the price of the lowest priced current generation C, M, or R instance type with your specified attributes. If no current generation C, M, or R instance type matches your attributes, then the identified price is from either the lowest priced current generation instance types or, failing that, the lowest priced previous generation instance types that match your attributes. When Amazon ECS selects instance types with your attributes, we will exclude instance types whose price exceeds your specified threshold."},"requireHibernateSupport":{"type":"boolean","description":"Indicates whether the instance types must support hibernation. When set to `true` , only instance types that support hibernation are selected."},"spotMaxPricePercentageOverLowestPrice":{"type":"integer","description":"The maximum price for Spot instances as a percentage over the lowest priced On-Demand instance. This helps control Spot instance costs while maintaining access to capacity."},"totalLocalStorageGb":{"$ref":"#/types/aws-native:ecs:CapacityProviderTotalLocalStorageGbRequest","description":"The minimum and maximum total local storage in gigabytes (GB) for instance types with local storage."},"vCpuCount":{"$ref":"#/types/aws-native:ecs:CapacityProviderVCpuCountRangeRequest","description":"The minimum and maximum number of vCPUs for the instance types. Amazon ECS selects instance types that have vCPU counts within this range."}},"type":"object","required":["memoryMiB","vCpuCount"]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestAcceleratorManufacturersItem":{"type":"string","enum":[{"name":"AmazonWebServices","value":"amazon-web-services"},{"name":"Amd","value":"amd"},{"name":"Habana","value":"habana"},{"name":"Nvidia","value":"nvidia"},{"name":"Xilinx","value":"xilinx"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestAcceleratorNamesItem":{"type":"string","enum":[{"name":"A10g","value":"a10g"},{"name":"A100","value":"a100"},{"name":"H100","value":"h100"},{"name":"Inferentia","value":"inferentia"},{"name":"K520","value":"k520"},{"name":"K80","value":"k80"},{"name":"M60","value":"m60"},{"name":"RadeonProV520","value":"radeon-pro-v520"},{"name":"T4","value":"t4"},{"name":"T4g","value":"t4g"},{"name":"Vu9p","value":"vu9p"},{"name":"V100","value":"v100"},{"name":"L40s","value":"l40s"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestAcceleratorTypesItem":{"type":"string","enum":[{"name":"Gpu","value":"gpu"},{"name":"Fpga","value":"fpga"},{"name":"Inference","value":"inference"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestBareMetal":{"description":"Indicates whether to include bare metal instance types. Set to `included` to allow bare metal instances, `excluded` to exclude them, or `required` to use only bare metal instances.","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestBurstablePerformance":{"description":"Indicates whether to include burstable performance instance types (T2, T3, T3a, T4g). Set to `included` to allow burstable instances, `excluded` to exclude them, or `required` to use only burstable instances.","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestCpuManufacturersItem":{"type":"string","enum":[{"name":"Intel","value":"intel"},{"name":"Amd","value":"amd"},{"name":"AmazonWebServices","value":"amazon-web-services"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestInstanceGenerationsItem":{"type":"string","enum":[{"name":"Current","value":"current"},{"name":"Previous","value":"previous"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestLocalStorage":{"description":"Indicates whether to include instance types with local storage. Set to `included` to allow local storage, `excluded` to exclude it, or `required` to use only instances with local storage.","type":"string","enum":[{"name":"Included","value":"included"},{"name":"Required","value":"required"},{"name":"Excluded","value":"excluded"}]},"aws-native:ecs:CapacityProviderInstanceRequirementsRequestLocalStorageTypesItem":{"type":"string","enum":[{"name":"Hdd","value":"hdd"},{"name":"Ssd","value":"ssd"}]},"aws-native:ecs:CapacityProviderManagedInstancesMonitoringOptions":{"type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Detailed","value":"DETAILED"}]},"aws-native:ecs:CapacityProviderManagedInstancesNetworkConfiguration":{"properties":{"securityGroups":{"type":"array","items":{"type":"string"},"description":"The list of security group IDs to apply to Amazon ECS Managed Instances. These security groups control the network traffic allowed to and from the instances."},"subnets":{"type":"array","items":{"type":"string"},"description":"The list of subnet IDs where Amazon ECS can launch Amazon ECS Managed Instances. Instances are distributed across the specified subnets for high availability. All subnets must be in the same VPC."}},"type":"object","required":["securityGroups","subnets"]},"aws-native:ecs:CapacityProviderManagedInstancesProvider":{"properties":{"infrastructureOptimization":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesProviderInfrastructureOptimizationProperties","description":"Defines how Amazon ECS Managed Instances optimizes the infrastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle EC2 instances optimization delay."},"infrastructureRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure role that Amazon ECS assumes to manage instances. This role must include permissions for Amazon EC2 instance lifecycle management, networking, and any additional AWS services required for your workloads.\n\nFor more information, see [Amazon ECS infrastructure IAM role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/infrastructure_IAM_role.html) in the *Amazon ECS Developer Guide* ."},"instanceLaunchTemplate":{"$ref":"#/types/aws-native:ecs:CapacityProviderInstanceLaunchTemplate","description":"The launch template that defines how Amazon ECS launches Amazon ECS Managed Instances. This includes the instance profile for your tasks, network and storage configuration, and instance requirements that determine which Amazon EC2 instance types can be used.\n\nFor more information, see [Store instance launch parameters in Amazon EC2 launch templates](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html) in the *Amazon EC2 User Guide* ."},"propagateTags":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesProviderPropagateTags","description":"Determines whether tags from the capacity provider are automatically applied to Amazon ECS Managed Instances. This helps with cost allocation and resource management by ensuring consistent tagging across your infrastructure."}},"type":"object","required":["infrastructureRoleArn","instanceLaunchTemplate"]},"aws-native:ecs:CapacityProviderManagedInstancesProviderInfrastructureOptimizationProperties":{"description":"Defines how Amazon ECS Managed Instances optimizes the infrastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle EC2 instances optimization delay.","properties":{"scaleInAfter":{"type":"integer","description":"This parameter defines the number of seconds Amazon ECS Managed Instances waits before optimizing EC2 instances that have become idle or underutilized. A longer delay increases the likelihood of placing new tasks on idle instances, reducing startup time. A shorter delay helps reduce infrastructure costs by optimizing idle instances more quickly. Valid values are: Not set (null) - Uses the default optimization behavior, `-1` - Disables automatic infrastructure optimization, `0` to `3600` (inclusive) - Specifies the number of seconds to wait before optimizing instances."}},"type":"object"},"aws-native:ecs:CapacityProviderManagedInstancesProviderPropagateTags":{"description":"Determines whether tags from the capacity provider are automatically applied to Amazon ECS Managed Instances. This helps with cost allocation and resource management by ensuring consistent tagging across your infrastructure.","type":"string","enum":[{"name":"CapacityProvider","value":"CAPACITY_PROVIDER"},{"name":"None","value":"NONE"}]},"aws-native:ecs:CapacityProviderManagedInstancesStorageConfiguration":{"properties":{"storageSizeGiB":{"type":"integer","description":"The size of the tasks volume."}},"type":"object","required":["storageSizeGiB"]},"aws-native:ecs:CapacityProviderManagedScaling":{"description":"The managed scaling settings for the Auto Scaling group capacity provider.","properties":{"instanceWarmupPeriod":{"type":"integer","description":"The period of time, in seconds, after a newly launched Amazon EC2 instance can contribute to CloudWatch metrics for Auto Scaling group. If this parameter is omitted, the default value of `300` seconds is used."},"maximumScalingStepSize":{"type":"integer","description":"The maximum number of Amazon EC2 instances that Amazon ECS will scale out at one time. If this parameter is omitted, the default value of `10000` is used."},"minimumScalingStepSize":{"type":"integer","description":"The minimum number of Amazon EC2 instances that Amazon ECS will scale out at one time. The scale in process is not affected by this parameter If this parameter is omitted, the default value of `1` is used.\n\nWhen additional capacity is required, Amazon ECS will scale up the minimum scaling step size even if the actual demand is less than the minimum scaling step size."},"status":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedScalingStatus","description":"Determines whether to use managed scaling for the capacity provider."},"targetCapacity":{"type":"integer","description":"The target capacity utilization as a percentage for the capacity provider. The specified value must be greater than `0` and less than or equal to `100` . For example, if you want the capacity provider to maintain 10% spare capacity, then that means the utilization is 90%, so use a `targetCapacity` of `90` . The default value of `100` percent results in the Amazon EC2 instances in your Auto Scaling group being completely used."}},"type":"object"},"aws-native:ecs:CapacityProviderManagedScalingStatus":{"description":"Determines whether to use managed scaling for the capacity provider.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:ecs:CapacityProviderMemoryGiBPerVCpuRequest":{"properties":{"max":{"type":"number","description":"The maximum amount of memory per vCPU in GiB. Instance types with a higher memory-to-vCPU ratio are excluded from selection."},"min":{"type":"number","description":"The minimum amount of memory per vCPU in GiB. Instance types with a lower memory-to-vCPU ratio are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderMemoryMiBRequest":{"properties":{"max":{"type":"integer","description":"The maximum amount of memory in MiB. Instance types with more memory than this value are excluded from selection."},"min":{"type":"integer","description":"The minimum amount of memory in MiB. Instance types with less memory than this value are excluded from selection."}},"type":"object","required":["min"]},"aws-native:ecs:CapacityProviderNetworkBandwidthGbpsRequest":{"properties":{"max":{"type":"number","description":"The maximum network bandwidth in Gbps. Instance types with higher network bandwidth are excluded from selection."},"min":{"type":"number","description":"The minimum network bandwidth in Gbps. Instance types with lower network bandwidth are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderNetworkInterfaceCountRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of network interfaces. Instance types that support more network interfaces are excluded from selection."},"min":{"type":"integer","description":"The minimum number of network interfaces. Instance types that support fewer network interfaces are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that make up a tag. A `value` acts as a descriptor within a tag category (key)."}},"type":"object"},"aws-native:ecs:CapacityProviderTotalLocalStorageGbRequest":{"properties":{"max":{"type":"number","description":"The maximum total local storage in GB. Instance types with more local storage are excluded from selection."},"min":{"type":"number","description":"The minimum total local storage in GB. Instance types with less local storage are excluded from selection."}},"type":"object"},"aws-native:ecs:CapacityProviderVCpuCountRangeRequest":{"properties":{"max":{"type":"integer","description":"The maximum number of vCPUs. Instance types with more vCPUs than this value are excluded from selection."},"min":{"type":"integer","description":"The minimum number of vCPUs. Instance types with fewer vCPUs than this value are excluded from selection."}},"type":"object","required":["min"]},"aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProvider":{"description":"If using ec2 auto-scaling, the name of the associated capacity provider. Otherwise FARGATE, FARGATE_SPOT.","type":"string","enum":[{"name":"Fargate","value":"FARGATE"},{"name":"FargateSpot","value":"FARGATE_SPOT"}]},"aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProvider0":{"description":"If using ec2 auto-scaling, the name of the associated capacity provider. Otherwise FARGATE, FARGATE_SPOT.","type":"string","enum":[{"name":"Fargate","value":"FARGATE"},{"name":"FargateSpot","value":"FARGATE_SPOT"}]},"aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProviderStrategy":{"properties":{"base":{"type":"integer"},"capacityProvider":{"oneOf":[{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProvider"},{"type":"string"}]},"weight":{"type":"integer"}},"type":"object","required":["capacityProvider"]},"aws-native:ecs:ClusterCapacityProviderStrategyItem":{"description":"The ``CapacityProviderStrategyItem`` property specifies the details of the default capacity provider strategy for the cluster. When services or tasks are run in the cluster with no launch type or capacity provider strategy specified, the default capacity provider strategy is used.","properties":{"base":{"type":"integer","description":"The *base* value designates how many tasks, at a minimum, to run on the specified capacity provider for each service. Only one capacity provider in a capacity provider strategy can have a *base* defined. If no value is specified, the default value of ``0`` is used.\n Base value characteristics:\n  +  Only one capacity provider in a strategy can have a base defined\n  +  The default value is ``0`` if not specified\n  +  The valid range is 0 to 100,000\n  +  Base requirements are satisfied first before weight distribution"},"capacityProvider":{"type":"string","description":"The short name of the capacity provider. This can be either an AWS managed capacity provider (``FARGATE`` or ``FARGATE_SPOT``) or the name of a custom capacity provider that you created."},"weight":{"type":"integer","description":"The *weight* value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The ``weight`` value is taken into consideration after the ``base`` value, if defined, is satisfied.\n If no ``weight`` value is specified, the default value of ``0`` is used. When multiple capacity providers are specified within a capacity provider strategy, at least one of the capacity providers must have a weight value greater than zero and any capacity providers with a weight of ``0`` can't be used to place tasks. If you specify multiple capacity providers in a strategy that all have a weight of ``0``, any ``RunTask`` or ``CreateService`` actions using the capacity provider strategy will fail.\n Weight value characteristics:\n  +  Weight is considered after the base value is satisfied\n  +  The default value is ``0`` if not specified\n  +  The valid range is 0 to 1,000\n  +  At least one capacity provider must have a weight greater than zero\n  +  Capacity providers with weight of ``0`` cannot place tasks\n  \n Task distribution logic:\n  1.  Base satisfaction: The minimum number of tasks specified by the base value are placed on that capacity provider\n  1.  Weight distribution: After base requirements are met, additional tasks are distributed according to weight ratios\n  \n Examples:\n Equal Distribution: Two capacity providers both with weight ``1`` will split tasks evenly after base requirements are met.\n Weighted Distribution: If capacityProviderA has weight ``1`` and capacityProviderB has weight ``4``, then for every 1 task on A, 4 tasks will run on B."}},"type":"object"},"aws-native:ecs:ClusterConfiguration":{"description":"The execute command and managed storage configuration for the cluster.","properties":{"executeCommandConfiguration":{"$ref":"#/types/aws-native:ecs:ClusterExecuteCommandConfiguration","description":"The details of the execute command configuration."},"managedStorageConfiguration":{"$ref":"#/types/aws-native:ecs:ClusterManagedStorageConfiguration","description":"The details of the managed storage configuration."}},"type":"object"},"aws-native:ecs:ClusterExecuteCommandConfiguration":{"description":"The details of the execute command configuration.","properties":{"kmsKeyId":{"type":"string","description":"Specify an KMSlong key ID to encrypt the data between the local client and the container."},"logConfiguration":{"$ref":"#/types/aws-native:ecs:ClusterExecuteCommandLogConfiguration","description":"The log configuration for the results of the execute command actions. The logs can be sent to CloudWatch Logs or an Amazon S3 bucket. When ``logging=OVERRIDE`` is specified, a ``logConfiguration`` must be provided."},"logging":{"type":"string","description":"The log setting to use for redirecting logs for your execute command results. The following log settings are available.\n  +  ``NONE``: The execute command session is not logged.\n  +  ``DEFAULT``: The ``awslogs`` configuration in the task definition is used. If no logging parameter is specified, it defaults to this value. If no ``awslogs`` log driver is configured in the task definition, the output won't be logged.\n  +  ``OVERRIDE``: Specify the logging details as a part of ``logConfiguration``. If the ``OVERRIDE`` logging option is specified, the ``logConfiguration`` is required."}},"type":"object"},"aws-native:ecs:ClusterExecuteCommandLogConfiguration":{"description":"The log configuration for the results of the execute command actions. The logs can be sent to CloudWatch Logs or an Amazon S3 bucket.","properties":{"cloudWatchEncryptionEnabled":{"type":"boolean","description":"Determines whether to use encryption on the CloudWatch logs. If not specified, encryption will be off."},"cloudWatchLogGroupName":{"type":"string","description":"The name of the CloudWatch log group to send logs to.\n  The CloudWatch log group must already be created."},"s3BucketName":{"type":"string","description":"The name of the S3 bucket to send logs to.\n  The S3 bucket must already be created."},"s3EncryptionEnabled":{"type":"boolean","description":"Determines whether to use encryption on the S3 logs. If not specified, encryption is not used."},"s3KeyPrefix":{"type":"string","description":"An optional folder in the S3 bucket to place logs in."}},"type":"object"},"aws-native:ecs:ClusterManagedStorageConfiguration":{"description":"The managed storage configuration for the cluster.","properties":{"fargateEphemeralStorageKmsKeyId":{"type":"string","description":"Specify the KMSlong key ID for Fargate ephemeral storage.\n When you specify a ``fargateEphemeralStorageKmsKeyId``, AWS Fargate uses the key to encrypt data at rest in ephemeral storage. For more information about Fargate ephemeral storage encryption, see [Customer managed keys for Fargate ephemeral storage for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/fargate-storage-encryption.html) in the *Amazon Elastic Container Service Developer Guide*.\n The key must be a single Region key."},"kmsKeyId":{"type":"string","description":"Specify a KMSlong key ID to encrypt Amazon ECS managed storage.\n  When you specify a ``kmsKeyId``, Amazon ECS uses the key to encrypt data volumes managed by Amazon ECS that are attached to tasks in the cluster. The following data volumes are managed by Amazon ECS: Amazon EBS. For more information about encryption of Amazon EBS volumes attached to Amazon ECS tasks, see [Encrypt data stored in Amazon EBS volumes for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ebs-kms-encryption.html) in the *Amazon Elastic Container Service Developer Guide*.\n The key must be a single Region key."}},"type":"object"},"aws-native:ecs:ClusterServiceConnectDefaults":{"description":"Use this parameter to set a default Service Connect namespace. After you set a default Service Connect namespace, any new services with Service Connect turned on that are created in the cluster are added as client services in the namespace. This setting only applies to new services that set the ``enabled`` parameter to ``true`` in the ``ServiceConnectConfiguration``. You can set the namespace of each service individually in the ``ServiceConnectConfiguration`` to override this default parameter.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"namespace":{"type":"string","description":"The namespace name or full Amazon Resource Name (ARN) of the CMAPlong namespace that's used when you create a service and don't specify a Service Connect configuration. The namespace name can include up to 1024 characters. The name is case-sensitive. The name can't include greater than (\u003e), less than (\u003c), double quotation marks (\"), or slash (/).\n If you enter an existing namespace name or ARN, then that namespace will be used. Any namespace type is supported. The namespace must be in this account and this AWS Region.\n If you enter a new name, a CMAPlong namespace will be created. Amazon ECS creates a CMAP namespace with the \"API calls\" method of instance discovery only. This instance discovery method is the \"HTTP\" namespace type in the CLIlong. Other types of instance discovery aren't used by Service Connect.\n If you update the cluster with an empty string ``\"\"`` for the namespace name, the cluster configuration for Service Connect is removed. Note that the namespace will remain in CMAP and must be deleted separately.\n For more information about CMAPlong, see [Working with Services](https://docs.aws.amazon.com/cloud-map/latest/dg/working-with-services.html) in the *Developer Guide*."}},"type":"object"},"aws-native:ecs:ClusterSettings":{"description":"The settings to use when creating a cluster. This parameter is used to turn on CloudWatch Container Insights with enhanced observability or CloudWatch Container Insights for a cluster.\n Container Insights with enhanced observability provides all the Container Insights metrics, plus additional task and container metrics. This version supports enhanced observability for Amazon ECS clusters using the Amazon EC2 and Fargate launch types. After you configure Container Insights with enhanced observability on Amazon ECS, Container Insights auto-collects detailed infrastructure telemetry from the cluster level down to the container level in your environment and displays these critical performance data in curated dashboards removing the heavy lifting in observability set-up. \n For more information, see [Monitor Amazon ECS containers using Container Insights with enhanced observability](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"name":{"type":"string","description":"The name of the cluster setting. The value is ``containerInsights``."},"value":{"type":"string","description":"The value to set for the cluster setting. The supported values are ``enhanced``, ``enabled``, and ``disabled``. \n To use Container Insights with enhanced observability, set the ``containerInsights`` account setting to ``enhanced``.\n To use Container Insights, set the ``containerInsights`` account setting to ``enabled``.\n If a cluster value is specified, it will override the ``containerInsights`` value set with [PutAccountSetting](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutAccountSetting.html) or [PutAccountSettingDefault](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutAccountSettingDefault.html)."}},"type":"object"},"aws-native:ecs:ClusterTag":{"description":"The metadata that you apply to a resource to help you categorize and organize them. Each tag consists of a key and an optional value. You define them.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A ``key`` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that make up a tag. A ``value`` acts as a descriptor within a tag category (key)."}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceAccessType":{"type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Private","value":"PRIVATE"}]},"aws-native:ecs:ExpressGatewayServiceAutoScalingArns":{"properties":{"applicationAutoScalingPolicies":{"type":"array","items":{"type":"string"}},"scalableTarget":{"type":"string"}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceAwsLogsConfiguration":{"properties":{"logGroup":{"type":"string","description":"The name of the CloudWatch Logs log group to send container logs to."},"logStreamPrefix":{"type":"string","description":"The prefix for the CloudWatch Logs log stream names. The default for an Express service is `ecs` ."}},"type":"object","required":["logGroup","logStreamPrefix"]},"aws-native:ecs:ExpressGatewayServiceConfiguration":{"properties":{"cpu":{"type":"string","description":"The CPU allocation for tasks in this service revision."},"createdAt":{"type":"string","description":"The Unix timestamp for when this service revision was created."},"executionRoleArn":{"type":"string","description":"The ARN of the task execution role for the service revision."},"healthCheckPath":{"type":"string","description":"The health check path for this service revision."},"ingressPaths":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceIngressPathSummary"},"description":"The entry point into this service revision."},"memory":{"type":"string","description":"The memory allocation for tasks in this service revision."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceNetworkConfiguration","description":"The network configuration for tasks in this service revision."},"primaryContainer":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayContainer","description":"The primary container configuration for this service revision."},"scalingTarget":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayScalingTarget","description":"The auto-scaling configuration for this service revision."},"serviceRevisionArn":{"type":"string","description":"The ARN of the service revision."},"taskRoleArn":{"type":"string","description":"The ARN of the task role for the service revision."}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceEcsManagedResourceArns":{"properties":{"autoScaling":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceAutoScalingArns"},"ingressPath":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceIngressPathArns"},"logGroups":{"type":"array","items":{"type":"string"}},"metricAlarms":{"type":"array","items":{"type":"string"}},"serviceSecurityGroups":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceExpressGatewayContainer":{"properties":{"awsLogsConfiguration":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceAwsLogsConfiguration","description":"The log configuration for the container."},"command":{"type":"array","items":{"type":"string"},"description":"The command that is passed to the container."},"containerPort":{"type":"integer","description":"The port number on the container that receives traffic from the load balancer. Default is 80."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceKeyValuePair"},"description":"The environment variables to pass to the container."},"image":{"type":"string","description":"The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with either `repository-url/image:tag` or `repository-url/image@digest` .\n\nFor Express services, the image typically contains a web application that listens on the specified container port. The image can be stored in Amazon ECR, Docker Hub, or any other container registry accessible to your execution role."},"repositoryCredentials":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayRepositoryCredentials","description":"The configuration for repository credentials for private registry authentication."},"secrets":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceSecret"},"description":"The secrets to pass to the container."}},"type":"object","required":["image"]},"aws-native:ecs:ExpressGatewayServiceExpressGatewayRepositoryCredentials":{"properties":{"credentialsParameter":{"type":"string","description":"The Amazon Resource Name (ARN) of the secret containing the private repository credentials."}},"type":"object","required":["credentialsParameter"]},"aws-native:ecs:ExpressGatewayServiceExpressGatewayScalingTarget":{"properties":{"autoScalingMetric":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceScalingMetric","description":"The metric used for auto-scaling decisions. The default metric used for an Express service is `CPUUtilization` ."},"autoScalingTargetValue":{"type":"integer","description":"The target value for the auto-scaling metric. The default value for an Express service is 60."},"maxTaskCount":{"type":"integer","description":"The maximum number of tasks to run in the Express service."},"minTaskCount":{"type":"integer","description":"The minimum number of tasks to run in the Express service."}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceIngressPathArns":{"properties":{"certificateArn":{"type":"string"},"listenerArn":{"type":"string"},"listenerRuleArn":{"type":"string"},"loadBalancerArn":{"type":"string"},"loadBalancerSecurityGroups":{"type":"array","items":{"type":"string"}},"targetGroupArns":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceIngressPathSummary":{"properties":{"accessType":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceAccessType","description":"The type of access to the endpoint for the Express service."},"endpoint":{"type":"string","description":"The endpoint for access to the service."}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceKeyValuePair":{"properties":{"name":{"type":"string","description":"The name of the key-value pair. For environment variables, this is the name of the environment variable."},"value":{"type":"string","description":"The value of the key-value pair. For environment variables, this is the value of the environment variable."}},"type":"object","required":["name","value"]},"aws-native:ecs:ExpressGatewayServiceNetworkConfiguration":{"properties":{"securityGroups":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups associated with the Express service."},"subnets":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets associated with the Express service."}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceScalingMetric":{"type":"string","enum":[{"name":"AverageCpu","value":"AVERAGE_CPU"},{"name":"AverageMemory","value":"AVERAGE_MEMORY"},{"name":"RequestCountPerTarget","value":"REQUEST_COUNT_PER_TARGET"}]},"aws-native:ecs:ExpressGatewayServiceSecret":{"properties":{"name":{"type":"string","description":"The name of the secret."},"valueFrom":{"type":"string","description":"The secret to expose to the container. The supported values are either the full ARN of the AWS Secrets Manager secret or the full ARN of the parameter in the SSM Parameter Store.\n\nFor information about the require AWS Identity and Access Management permissions, see [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-secrets.html#secrets-iam) (for Secrets Manager) or [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-parameters.html) (for Systems Manager Parameter store) in the *Amazon Elastic Container Service Developer Guide* .\n\n\u003e If the SSM Parameter Store parameter exists in the same Region as the task you're launching, then you can use either the full ARN or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified."}},"type":"object","required":["name","valueFrom"]},"aws-native:ecs:ExpressGatewayServiceStatus":{"properties":{"statusCode":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceStatusCode","description":"The status of the Express service."}},"type":"object"},"aws-native:ecs:ExpressGatewayServiceStatusCode":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Draining","value":"DRAINING"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:ecs:ExpressGatewayServiceTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that make up a tag. A `value` acts as a descriptor within a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:ecs:ServiceAdvancedConfiguration":{"description":"The advanced settings for a load balancer used in blue/green deployments. Specify the alternate target group, listener rules, and IAM role required for traffic shifting during blue/green deployments. For more information, see [Required resources for Amazon ECS blue/green deployments](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/blue-green-deployment-implementation.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"alternateTargetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the alternate target group for Amazon ECS blue/green deployments."},"productionListenerRule":{"type":"string","description":"The Amazon Resource Name (ARN) that that identifies the production listener rule (in the case of an Application Load Balancer) or listener (in the case for an Network Load Balancer) for routing production traffic."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon ECS permission to call the Elastic Load Balancing APIs for you."},"testListenerRule":{"type":"string","description":"The Amazon Resource Name (ARN) that identifies ) that identifies the test listener rule (in the case of an Application Load Balancer) or listener (in the case for an Network Load Balancer) for routing test traffic."}},"type":"object","required":["alternateTargetGroupArn"]},"aws-native:ecs:ServiceAvailabilityZoneRebalancing":{"description":"Indicates whether to use Availability Zone rebalancing for the service.\n For more information, see [Balancing an Amazon ECS service across Availability Zones](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-rebalancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default behavior of ``AvailabilityZoneRebalancing`` differs between create and update requests:\n  +  For create service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults the value to ``ENABLED``.\n  +  For update service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults to the existing service’s ``AvailabilityZoneRebalancing`` value. If the service never had an ``AvailabilityZoneRebalancing`` value set, Amazon ECS treats this as ``DISABLED``.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:ecs:ServiceAwsVpcConfiguration":{"description":"An object representing the networking details for a task or service. For example ``awsVpcConfiguration={subnets=[\"subnet-12344321\"],securityGroups=[\"sg-12344321\"]}``.","properties":{"assignPublicIp":{"$ref":"#/types/aws-native:ecs:ServiceAwsVpcConfigurationAssignPublicIp","description":"Whether the task's elastic network interface receives a public IP address. \n Consider the following when you set this value:\n  +  When you use ``create-service`` or ``update-service``, the default is ``DISABLED``. \n  +  When the service ``deploymentController`` is ``ECS``, the value must be ``DISABLED``."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups associated with the task or service. If you don't specify a security group, the default security group for the VPC is used. There's a limit of 5 security groups that can be specified.\n  All specified security groups must be from the same VPC."},"subnets":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets associated with the task or service. There's a limit of 16 subnets that can be specified.\n  All specified subnets must be from the same VPC."}},"type":"object"},"aws-native:ecs:ServiceAwsVpcConfigurationAssignPublicIp":{"description":"Whether the task's elastic network interface receives a public IP address. \n Consider the following when you set this value:\n  +  When you use ``create-service`` or ``update-service``, the default is ``DISABLED``. \n  +  When the service ``deploymentController`` is ``ECS``, the value must be ``DISABLED``.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:ecs:ServiceCanaryConfiguration":{"description":"Configuration for a canary deployment strategy that shifts a fixed percentage of traffic to the new service revision, waits for a specified bake time, then shifts the remaining traffic. \n The following validation applies only to Canary deployments created through CFN. CFN operations time out after 36 hours. Canary deployments can approach this limit because of their extended duration. This can cause CFN to roll back the deployment. To prevent timeout-related rollbacks, CFN rejects deployments when the calculated deployment time exceeds 33 hours based on your template configuration: \n  ``BakeTimeInMinutes + CanaryBakeTimeInMinutes`` \n Additional backend processes (such as task scaling and running lifecycle hooks) can extend deployment time beyond these calculations. Even deployments under the 33-hour threshold might still time out if these processes cause the total duration to exceed 36 hours.","properties":{"canaryBakeTimeInMinutes":{"type":"integer","description":"The amount of time in minutes to wait during the canary phase before shifting the remaining production traffic to the new service revision. Valid values are 0 to 1440 minutes (24 hours). The default value is 10."},"canaryPercent":{"type":"number","description":"The percentage of production traffic to shift to the new service revision during the canary phase. Valid values are multiples of 0.1 from 0.1 to 100.0. The default value is 5.0."}},"type":"object"},"aws-native:ecs:ServiceCapacityProviderStrategyItem":{"description":"The details of a capacity provider strategy. A capacity provider strategy can be set when using the ``RunTask`` or ``CreateService`` APIs or as the default capacity provider strategy for a cluster with the ``CreateCluster`` API.\n Only capacity providers that are already associated with a cluster and have an ``ACTIVE`` or ``UPDATING`` status can be used in a capacity provider strategy. The ``PutClusterCapacityProviders`` API is used to associate a capacity provider with a cluster.\n If specifying a capacity provider that uses an Auto Scaling group, the capacity provider must already be created. New Auto Scaling group capacity providers can be created with the ``CreateCapacityProvider`` API operation.\n To use an FARGATElong capacity provider, specify either the ``FARGATE`` or ``FARGATE_SPOT`` capacity providers. The FARGATElong capacity providers are available to all accounts and only need to be associated with a cluster to be used in a capacity provider strategy.","properties":{"base":{"type":"integer","description":"The *base* value designates how many tasks, at a minimum, to run on the specified capacity provider for each service. Only one capacity provider in a capacity provider strategy can have a *base* defined. If no value is specified, the default value of ``0`` is used.\n Base value characteristics:\n  +  Only one capacity provider in a strategy can have a base defined\n  +  The default value is ``0`` if not specified\n  +  The valid range is 0 to 100,000\n  +  Base requirements are satisfied first before weight distribution"},"capacityProvider":{"type":"string","description":"The short name of the capacity provider. This can be either an AWS managed capacity provider (``FARGATE`` or ``FARGATE_SPOT``) or the name of a custom capacity provider that you created."},"weight":{"type":"integer","description":"The *weight* value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The ``weight`` value is taken into consideration after the ``base`` value, if defined, is satisfied.\n If no ``weight`` value is specified, the default value of ``0`` is used. When multiple capacity providers are specified within a capacity provider strategy, at least one of the capacity providers must have a weight value greater than zero and any capacity providers with a weight of ``0`` can't be used to place tasks. If you specify multiple capacity providers in a strategy that all have a weight of ``0``, any ``RunTask`` or ``CreateService`` actions using the capacity provider strategy will fail.\n Weight value characteristics:\n  +  Weight is considered after the base value is satisfied\n  +  The default value is ``0`` if not specified\n  +  The valid range is 0 to 1,000\n  +  At least one capacity provider must have a weight greater than zero\n  +  Capacity providers with weight of ``0`` cannot place tasks\n  \n Task distribution logic:\n  1.  Base satisfaction: The minimum number of tasks specified by the base value are placed on that capacity provider\n  1.  Weight distribution: After base requirements are met, additional tasks are distributed according to weight ratios\n  \n Examples:\n Equal Distribution: Two capacity providers both with weight ``1`` will split tasks evenly after base requirements are met.\n Weighted Distribution: If capacityProviderA has weight ``1`` and capacityProviderB has weight ``4``, then for every 1 task on A, 4 tasks will run on B."}},"type":"object"},"aws-native:ecs:ServiceConnectAccessLogConfiguration":{"description":"Configuration for Service Connect access logging. Access logs provide detailed information about requests made to your service, including request patterns, response codes, and timing data for debugging and monitoring purposes.\n  To enable access logs, you must also specify a ``logConfiguration`` in the ``serviceConnectConfiguration``.","properties":{"format":{"$ref":"#/types/aws-native:ecs:ServiceConnectAccessLogConfigurationFormat","description":"The format for Service Connect access log output. Choose TEXT for human-readable logs or JSON for structured data that integrates well with log analysis tools."},"includeQueryParameters":{"$ref":"#/types/aws-native:ecs:ServiceConnectAccessLogConfigurationIncludeQueryParameters","description":"Specifies whether to include query parameters in Service Connect access logs.\n When enabled, query parameters from HTTP requests are included in the access logs. Consider security and privacy implications when enabling this feature, as query parameters may contain sensitive information such as request IDs and tokens. By default, this parameter is ``DISABLED``."}},"type":"object","required":["format"]},"aws-native:ecs:ServiceConnectAccessLogConfigurationFormat":{"description":"The format for Service Connect access log output. Choose TEXT for human-readable logs or JSON for structured data that integrates well with log analysis tools.","type":"string","enum":[{"name":"Text","value":"TEXT"},{"name":"Json","value":"JSON"}]},"aws-native:ecs:ServiceConnectAccessLogConfigurationIncludeQueryParameters":{"description":"Specifies whether to include query parameters in Service Connect access logs.\n When enabled, query parameters from HTTP requests are included in the access logs. Consider security and privacy implications when enabling this feature, as query parameters may contain sensitive information such as request IDs and tokens. By default, this parameter is ``DISABLED``.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:ecs:ServiceConnectClientAlias":{"description":"Each alias (\"endpoint\") is a fully-qualified name and port number that other tasks (\"clients\") can use to connect to this service.\n Each name and port mapping must be unique within the namespace.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"dnsName":{"type":"string","description":"The ``dnsName`` is the name that you use in the applications of client tasks to connect to this service. The name must be a valid DNS name but doesn't need to be fully-qualified. The name can include up to 127 characters. The name can include lowercase letters, numbers, underscores (_), hyphens (-), and periods (.). The name can't start with a hyphen.\n If this parameter isn't specified, the default value of ``discoveryName.namespace`` is used. If the ``discoveryName`` isn't specified, the port mapping name from the task definition is used in ``portName.namespace``.\n To avoid changing your applications in client Amazon ECS services, set this to the same name that the client application uses by default. For example, a few common names are ``database``, ``db``, or the lowercase name of a database, such as ``mysql`` or ``redis``. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"port":{"type":"integer","description":"The listening port number for the Service Connect proxy. This port is available inside of all of the tasks within the same namespace.\n To avoid changing your applications in client Amazon ECS services, set this to the same port that the client application uses by default. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"testTrafficRules":{"$ref":"#/types/aws-native:ecs:ServiceConnectTestTrafficRules","description":"The configuration for test traffic routing rules used during blue/green deployments with Amazon ECS Service Connect. This allows you to route a portion of traffic to the new service revision of your service for testing before shifting all production traffic."}},"type":"object","required":["port"]},"aws-native:ecs:ServiceConnectConfiguration":{"description":"The Service Connect configuration of your Amazon ECS service. The configuration for this service to discover and connect to services, and be discovered by, and connected from, other services within a namespace.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"accessLogConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceConnectAccessLogConfiguration","description":"The configuration for Service Connect access logging. Access logs capture detailed information about requests made to your service, including request patterns, response codes, and timing data. They can be useful for debugging connectivity issues, monitoring service performance, and auditing service-to-service communication for security and compliance purposes.\n  To enable access logs, you must also specify a ``logConfiguration`` in the ``serviceConnectConfiguration``."},"enabled":{"type":"boolean","description":"Specifies whether to use Service Connect with this service."},"logConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceLogConfiguration","description":"The log configuration for the container. This parameter maps to ``LogConfig`` in the docker container create command and the ``--log-driver`` option to docker run.\n By default, containers use the same logging driver that the Docker daemon uses. However, the container might use a different logging driver than the Docker daemon by specifying a log driver configuration in the container definition.\n Understand the following when specifying a log configuration for your containers.\n  +  Amazon ECS currently supports a subset of the logging drivers available to the Docker daemon. Additional log drivers may be available in future releases of the Amazon ECS container agent.\n For tasks on FARGATElong, the supported log drivers are ``awslogs``, ``splunk``, and ``awsfirelens``.\n For tasks hosted on Amazon EC2 instances, the supported log drivers are ``awslogs``, ``fluentd``, ``gelf``, ``json-file``, ``journald``,``syslog``, ``splunk``, and ``awsfirelens``.\n  +  This parameter requires version 1.18 of the Docker Remote API or greater on your container instance.\n  +  For tasks that are hosted on Amazon EC2 instances, the Amazon ECS container agent must register the available logging drivers with the ``ECS_AVAILABLE_LOGGING_DRIVERS`` environment variable before containers placed on that instance can use these log configuration options. For more information, see [Amazon ECS container agent configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Amazon Elastic Container Service Developer Guide*.\n  +  For tasks that are on FARGATElong, because you don't have access to the underlying infrastructure your tasks are hosted on, any additional software needed must be installed outside of the task. For example, the Fluentd output aggregators or a remote host running Logstash to send Gelf logs to."},"namespace":{"type":"string","description":"The namespace name or full Amazon Resource Name (ARN) of the CMAPlong namespace for use with Service Connect. The namespace must be in the same AWS Region as the Amazon ECS service and cluster. The type of namespace doesn't affect Service Connect. For more information about CMAPlong, see [Working with Services](https://docs.aws.amazon.com/cloud-map/latest/dg/working-with-services.html) in the *Developer Guide*."},"services":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceConnectService"},"description":"The list of Service Connect service objects. These are names and aliases (also known as endpoints) that are used by other Amazon ECS services to connect to this service. \n This field is not required for a \"client\" Amazon ECS service that's a member of a namespace only to connect to other services within the namespace. An example of this would be a frontend application that accepts incoming requests from either a load balancer that's attached to the service or by other means.\n An object selects a port from the task definition, assigns a name for the CMAPlong service, and a list of aliases (endpoints) and ports for client applications to refer to this service."}},"type":"object","required":["enabled"]},"aws-native:ecs:ServiceConnectService":{"description":"The Service Connect service object configuration. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"clientAliases":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceConnectClientAlias"},"description":"The list of client aliases for this Service Connect service. You use these to assign names that can be used by client applications. The maximum number of client aliases that you can have in this list is 1.\n Each alias (\"endpoint\") is a fully-qualified name and port number that other Amazon ECS tasks (\"clients\") can use to connect to this service.\n Each name and port mapping must be unique within the namespace.\n For each ``ServiceConnectService``, you must provide at least one ``clientAlias`` with one ``port``."},"discoveryName":{"type":"string","description":"The ``discoveryName`` is the name of the new CMAP service that Amazon ECS creates for this Amazon ECS service. This must be unique within the CMAP namespace. The name can contain up to 64 characters. The name can include lowercase letters, numbers, underscores (_), and hyphens (-). The name can't start with a hyphen.\n If the ``discoveryName`` isn't specified, the port mapping name from the task definition is used in ``portName.namespace``."},"ingressPortOverride":{"type":"integer","description":"The port number for the Service Connect proxy to listen on.\n Use the value of this field to bypass the proxy for traffic on the port number specified in the named ``portMapping`` in the task definition of this application, and then use it in your VPC security groups to allow traffic into the proxy for this Amazon ECS service.\n In ``awsvpc`` mode and Fargate, the default value is the container port number. The container port number is in the ``portMapping`` in the task definition. In bridge mode, the default value is the ephemeral port of the Service Connect proxy."},"portName":{"type":"string","description":"The ``portName`` must match the name of one of the ``portMappings`` from all the containers in the task definition of this Amazon ECS service."},"timeout":{"$ref":"#/types/aws-native:ecs:ServiceTimeoutConfiguration","description":"A reference to an object that represents the configured timeouts for Service Connect."},"tls":{"$ref":"#/types/aws-native:ecs:ServiceConnectTlsConfiguration","description":"A reference to an object that represents a Transport Layer Security (TLS) configuration."}},"type":"object","required":["portName"]},"aws-native:ecs:ServiceConnectTestTrafficRules":{"description":"The test traffic routing configuration for Amazon ECS blue/green deployments. This configuration allows you to define rules for routing specific traffic to the new service revision during the deployment process, allowing for safe testing before full production traffic shift.\n For more information, see [Service Connect for Amazon ECS blue/green deployments](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect-blue-green.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"header":{"$ref":"#/types/aws-native:ecs:ServiceConnectTestTrafficRulesHeader","description":"The HTTP header-based routing rules that determine which requests should be routed to the new service version during blue/green deployment testing. These rules provide fine-grained control over test traffic routing based on request headers."}},"type":"object","required":["header"]},"aws-native:ecs:ServiceConnectTestTrafficRulesHeader":{"properties":{"name":{"type":"string"},"value":{"$ref":"#/types/aws-native:ecs:ServiceConnectTestTrafficRulesHeaderValue"}},"type":"object","required":["name"]},"aws-native:ecs:ServiceConnectTestTrafficRulesHeaderValue":{"properties":{"exact":{"type":"string"}},"type":"object","required":["exact"]},"aws-native:ecs:ServiceConnectTlsCertificateAuthority":{"description":"The certificate root authority that secures your service.","properties":{"awsPcaAuthorityArn":{"type":"string","description":"The ARN of the AWS Private Certificate Authority certificate."}},"type":"object"},"aws-native:ecs:ServiceConnectTlsConfiguration":{"description":"The key that encrypts and decrypts your resources for Service Connect TLS.","properties":{"issuerCertificateAuthority":{"$ref":"#/types/aws-native:ecs:ServiceConnectTlsCertificateAuthority","description":"The signer certificate authority."},"kmsKey":{"type":"string","description":"The AWS Key Management Service key."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that's associated with the Service Connect TLS."}},"type":"object","required":["issuerCertificateAuthority"]},"aws-native:ecs:ServiceDeploymentAlarms":{"description":"One of the methods which provide a way for you to quickly identify when a deployment has failed, and then to optionally roll back the failure to the last working deployment.\n When the alarms are generated, Amazon ECS sets the service deployment to failed. Set the rollback parameter to have Amazon ECS to roll back your service to the last completed deployment after a failure.\n You can only use the ``DeploymentAlarms`` method to detect failures when the ``DeploymentController`` is set to ``ECS``.\n For more information, see [Rolling update](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"alarmNames":{"type":"array","items":{"type":"string"},"description":"One or more CloudWatch alarm names. Use a \",\" to separate the alarms."},"enable":{"type":"boolean","description":"Determines whether to use the CloudWatch alarm option in the service deployment process."},"rollback":{"type":"boolean","description":"Determines whether to configure Amazon ECS to roll back the service if a service deployment fails. If rollback is used, when a service deployment fails, the service is rolled back to the last deployment that completed successfully."}},"type":"object","required":["alarmNames","enable","rollback"]},"aws-native:ecs:ServiceDeploymentCircuitBreaker":{"description":"The deployment circuit breaker can only be used for services using the rolling update (``ECS``) deployment type.\n  The *deployment circuit breaker* determines whether a service deployment will fail if the service can't reach a steady state. If it is turned on, a service deployment will transition to a failed state and stop launching new tasks. You can also configure Amazon ECS to roll back your service to the last completed deployment after a failure. For more information, see [Rolling update](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html) in the *Amazon Elastic Container Service Developer Guide*.\n For more information about API failure reasons, see [API failure reasons](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/api_failures_messages.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"enable":{"type":"boolean","description":"Determines whether to use the deployment circuit breaker logic for the service."},"rollback":{"type":"boolean","description":"Determines whether to configure Amazon ECS to roll back the service if a service deployment fails. If rollback is on, when a service deployment fails, the service is rolled back to the last deployment that completed successfully."}},"type":"object","required":["enable","rollback"]},"aws-native:ecs:ServiceDeploymentConfiguration":{"description":"Optional deployment parameters that control how many tasks run during a deployment and the ordering of stopping and starting tasks.","properties":{"alarms":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentAlarms","description":"Information about the CloudWatch alarms."},"bakeTimeInMinutes":{"type":"integer","description":"The duration when both blue and green service revisions are running simultaneously after the production traffic has shifted.\n The following rules apply when you don't specify a value:\n  +  For rolling deployments, the value is set to 3 hours (180 minutes).\n  +  When you use an external deployment controller (``EXTERNAL``), or the ACD blue/green deployment controller (``CODE_DEPLOY``), the value is set to 3 hours (180 minutes).\n  +  For all other cases, the value is set to 36 hours (2160 minutes)."},"canaryConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceCanaryConfiguration","description":"Configuration for canary deployment strategy. Only valid when the deployment strategy is ``CANARY``. This configuration enables shifting a fixed percentage of traffic for testing, followed by shifting the remaining traffic after a bake period."},"deploymentCircuitBreaker":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentCircuitBreaker","description":"The deployment circuit breaker can only be used for services using the rolling update (``ECS``) deployment type.\n  The *deployment circuit breaker* determines whether a service deployment will fail if the service can't reach a steady state. If you use the deployment circuit breaker, a service deployment will transition to a failed state and stop launching new tasks. If you use the rollback option, when a service deployment fails, the service is rolled back to the last deployment that completed successfully. For more information, see [Rolling update](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html) in the *Amazon Elastic Container Service Developer Guide*"},"lifecycleHooks":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentLifecycleHook"},"description":"An array of deployment lifecycle hook objects to run custom logic at specific stages of the deployment lifecycle."},"linearConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceLinearConfiguration","description":"Configuration for linear deployment strategy. Only valid when the deployment strategy is ``LINEAR``. This configuration enables progressive traffic shifting in equal percentage increments with configurable bake times between each step."},"maximumPercent":{"type":"integer","description":"If a service is using the rolling update (``ECS``) deployment type, the ``maximumPercent`` parameter represents an upper limit on the number of your service's tasks that are allowed in the ``RUNNING`` or ``PENDING`` state during a deployment, as a percentage of the ``desiredCount`` (rounded down to the nearest integer). This parameter enables you to define the deployment batch size. For example, if your service is using the ``REPLICA`` service scheduler and has a ``desiredCount`` of four tasks and a ``maximumPercent`` value of 200%, the scheduler may start four new tasks before stopping the four older tasks (provided that the cluster resources required to do this are available). The default ``maximumPercent`` value for a service using the ``REPLICA`` service scheduler is 200%.\n The Amazon ECS scheduler uses this parameter to replace unhealthy tasks by starting replacement tasks first and then stopping the unhealthy tasks, as long as cluster resources for starting replacement tasks are available. For more information about how the scheduler replaces unhealthy tasks, see [Amazon ECS services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html).\n If a service is using either the blue/green (``CODE_DEPLOY``) or ``EXTERNAL`` deployment types, and tasks in the service use the EC2 launch type, the *maximum percent* value is set to the default value. The *maximum percent* value is used to define the upper limit on the number of the tasks in the service that remain in the ``RUNNING`` state while the container instances are in the ``DRAINING`` state.\n  You can't specify a custom ``maximumPercent`` value for a service that uses either the blue/green (``CODE_DEPLOY``) or ``EXTERNAL`` deployment types and has tasks that use the EC2 launch type.\n  If the service uses either the blue/green (``CODE_DEPLOY``) or ``EXTERNAL`` deployment types, and the tasks in the service use the Fargate launch type, the maximum percent value is not used. The value is still returned when describing your service."},"minimumHealthyPercent":{"type":"integer","description":"If a service is using the rolling update (``ECS``) deployment type, the ``minimumHealthyPercent`` represents a lower limit on the number of your service's tasks that must remain in the ``RUNNING`` state during a deployment, as a percentage of the ``desiredCount`` (rounded up to the nearest integer). This parameter enables you to deploy without using additional cluster capacity. For example, if your service has a ``desiredCount`` of four tasks and a ``minimumHealthyPercent`` of 50%, the service scheduler may stop two existing tasks to free up cluster capacity before starting two new tasks. \n  If any tasks are unhealthy and if ``maximumPercent`` doesn't allow the Amazon ECS scheduler to start replacement tasks, the scheduler stops the unhealthy tasks one-by-one — using the ``minimumHealthyPercent`` as a constraint — to clear up capacity to launch replacement tasks. For more information about how the scheduler replaces unhealthy tasks, see [Amazon ECS services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html). \n For services that *do not* use a load balancer, the following should be noted:\n  +  A service is considered healthy if all essential containers within the tasks in the service pass their health checks.\n  +  If a task has no essential containers with a health check defined, the service scheduler will wait for 40 seconds after a task reaches a ``RUNNING`` state before the task is counted towards the minimum healthy percent total.\n  +  If a task has one or more essential containers with a health check defined, the service scheduler will wait for the task to reach a healthy status before counting it towards the minimum healthy percent total. A task is considered healthy when all essential containers within the task have passed their health checks. The amount of time the service scheduler can wait for is determined by the container health check settings. \n  \n For services that *do* use a load balancer, the following should be noted:\n  +  If a task has no essential containers with a health check defined, the service scheduler will wait for the load balancer target group health check to return a healthy status before counting the task towards the minimum healthy percent total.\n  +  If a task has an essential container with a health check defined, the service scheduler will wait for both the task to reach a healthy status and the load balancer target group health check to return a healthy status before counting the task towards the minimum healthy percent total.\n  \n The default value for a replica service for ``minimumHealthyPercent`` is 100%. The default ``minimumHealthyPercent`` value for a service using the ``DAEMON`` service schedule is 0% for the CLI, the AWS SDKs, and the APIs and 50% for the AWS Management Console.\n The minimum number of healthy tasks during a deployment is the ``desiredCount`` multiplied by the ``minimumHealthyPercent``/100, rounded up to the nearest integer value.\n If a service is using either the blue/green (``CODE_DEPLOY``) or ``EXTERNAL`` deployment types and is running tasks that use the EC2 launch type, the *minimum healthy percent* value is set to the default value. The *minimum healthy percent* value is used to define the lower limit on the number of the tasks in the service that remain in the ``RUNNING`` state while the container instances are in the ``DRAINING`` state.\n  You can't specify a custom ``minimumHealthyPercent`` value for a service that uses either the blue/green (``CODE_DEPLOY``) or ``EXTERNAL`` deployment types and has tasks that use the EC2 launch type.\n  If a service is using either the blue/green (``CODE_DEPLOY``) or ``EXTERNAL`` deployment types and is running tasks that use the Fargate launch type, the minimum healthy percent value is not used, although it is returned when describing your service."},"strategy":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentConfigurationStrategy","description":"The deployment strategy for the service. Choose from these valid values:\n  +  ``ROLLING`` - When you create a service which uses the rolling update (``ROLLING``) deployment strategy, the Amazon ECS service scheduler replaces the currently running tasks with new tasks. The number of tasks that Amazon ECS adds or removes from the service during a rolling update is controlled by the service deployment configuration.\n  +  ``BLUE_GREEN`` - A blue/green deployment strategy (``BLUE_GREEN``) is a release methodology that reduces downtime and risk by running two identical production environments called blue and green. With Amazon ECS blue/green deployments, you can validate new service revisions before directing production traffic to them. This approach provides a safer way to deploy changes with the ability to quickly roll back if needed.\n  +  ``LINEAR`` - A *linear* deployment strategy (``LINEAR``) gradually shifts traffic from the current production environment to a new environment in equal percentages over time. With Amazon ECS linear deployments, you can control the pace of traffic shifting and validate new service revisions with increasing amounts of production traffic.\n  +  ``CANARY`` - A *canary* deployment strategy (``CANARY``) shifts a small percentage of traffic to the new service revision first, then shifts the remaining traffic all at once after a specified time period. This allows you to test the new version with a subset of users before full deployment."}},"type":"object"},"aws-native:ecs:ServiceDeploymentConfigurationStrategy":{"description":"The deployment strategy for the service. Choose from these valid values:\n  +  ``ROLLING`` - When you create a service which uses the rolling update (``ROLLING``) deployment strategy, the Amazon ECS service scheduler replaces the currently running tasks with new tasks. The number of tasks that Amazon ECS adds or removes from the service during a rolling update is controlled by the service deployment configuration.\n  +  ``BLUE_GREEN`` - A blue/green deployment strategy (``BLUE_GREEN``) is a release methodology that reduces downtime and risk by running two identical production environments called blue and green. With Amazon ECS blue/green deployments, you can validate new service revisions before directing production traffic to them. This approach provides a safer way to deploy changes with the ability to quickly roll back if needed.\n  +  ``LINEAR`` - A *linear* deployment strategy (``LINEAR``) gradually shifts traffic from the current production environment to a new environment in equal percentages over time. With Amazon ECS linear deployments, you can control the pace of traffic shifting and validate new service revisions with increasing amounts of production traffic.\n  +  ``CANARY`` - A *canary* deployment strategy (``CANARY``) shifts a small percentage of traffic to the new service revision first, then shifts the remaining traffic all at once after a specified time period. This allows you to test the new version with a subset of users before full deployment.","type":"string","enum":[{"name":"Rolling","value":"ROLLING"},{"name":"BlueGreen","value":"BLUE_GREEN"},{"name":"Linear","value":"LINEAR"},{"name":"Canary","value":"CANARY"}]},"aws-native:ecs:ServiceDeploymentController":{"description":"The deployment controller to use for the service.","properties":{"type":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentControllerType","description":"The deployment controller type to use.\n The deployment controller is the mechanism that determines how tasks are deployed for your service. The valid options are:\n  +  ECS\n When you create a service which uses the ``ECS`` deployment controller, you can choose between the following deployment strategies:\n  +  ``ROLLING``: When you create a service which uses the *rolling update* (``ROLLING``) deployment strategy, the ECS service scheduler replaces the currently running tasks with new tasks. The number of tasks that ECS adds or removes from the service during a rolling update is controlled by the service deployment configuration. \n Rolling update deployments are best suited for the following scenarios:\n  +  Gradual service updates: You need to update your service incrementally without taking the entire service offline at once.\n  +  Limited resource requirements: You want to avoid the additional resource costs of running two complete environments simultaneously (as required by blue/green deployments).\n  +  Acceptable deployment time: Your application can tolerate a longer deployment process, as rolling updates replace tasks one by one.\n  +  No need for instant roll back: Your service can tolerate a rollback process that takes minutes rather than seconds.\n  +  Simple deployment process: You prefer a straightforward deployment approach without the complexity of managing multiple environments, target groups, and listeners.\n  +  No load balancer requirement: Your service doesn't use or require a load balancer, ALB, NLB, or Service Connect (which are required for blue/green deployments).\n  +  Stateful applications: Your application maintains state that makes it difficult to run two parallel environments.\n  +  Cost sensitivity: You want to minimize deployment costs by not running duplicate environments during deployment.\n  \n Rolling updates are the default deployment strategy for services and provide a balance between deployment safety and resource efficiency for many common application scenarios.\n  +  ``BLUE_GREEN``: A *blue/green* deployment strategy (``BLUE_GREEN``) is a release methodology that reduces downtime and risk by running two identical production environments called blue and green. With ECS blue/green deployments, you can validate new service revisions before directing production traffic to them. This approach provides a safer way to deploy changes with the ability to quickly roll back if needed.\n ECS blue/green deployments are best suited for the following scenarios:\n  +  Service validation: When you need to validate new service revisions before directing production traffic to them\n  +  Zero downtime: When your service requires zero-downtime deployments\n  +  Instant roll back: When you need the ability to quickly roll back if issues are detected\n  +  Load balancer requirement: When your service uses ALB, NLB, or Service Connect\n  \n  \n  +  External\n Use a third-party deployment controller.\n  +  Blue/green deployment (powered by ACD)\n ACD installs an updated version of the application as a new replacement task set and reroutes production traffic from the original application task set to the replacement task set. The original task set is terminated after a successful deployment. Use this deployment controller to verify a new deployment of a service before sending production traffic to it.\n  \n When updating the deployment controller for a service, consider the following depending on the type of migration you're performing.\n  +  If you have a template that contains the ``EXTERNAL`` deployment controller information as well as ``TaskSet`` and ``PrimaryTaskSet`` resources, and you remove the task set resources from the template when updating from ``EXTERNAL`` to ``ECS``, the ``DescribeTaskSet`` and ``DeleteTaskSet`` API calls will return a 400 error after the deployment controller is updated to ``ECS``. This results in a delete failure on the task set resources, even though the stack transitions to ``UPDATE_COMPLETE`` status. For more information, see [Resource removed from stack but not deleted](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#troubleshooting-errors-resource-removed-not-deleted) in the CFNlong User Guide. To fix this issue, delete the task sets directly using the ECS``DeleteTaskSet`` API. For more information about how to delete a task set, see [DeleteTaskSet](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteTaskSet.html) in the ECSlong API Reference.\n  +  If you're migrating from ``CODE_DEPLOY`` to ``ECS`` with a new task definition and CFN performs a rollback operation, the ECS``UpdateService`` request fails with the following error:\n Resource handler returned message: \"Invalid request provided: Unable to update task definition on services with a CODE_DEPLOY deployment controller. \n  +  After a successful migration from ``ECS`` to ``EXTERNAL`` deployment controller, you need to manually remove the ``ACTIVE`` task set, because ECS no longer manages the deployment. For information about how to delete a task set, see [DeleteTaskSet](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteTaskSet.html) in the ECSlong API Reference."}},"type":"object"},"aws-native:ecs:ServiceDeploymentControllerType":{"description":"The deployment controller type to use.\n The deployment controller is the mechanism that determines how tasks are deployed for your service. The valid options are:\n  +  ECS\n When you create a service which uses the ``ECS`` deployment controller, you can choose between the following deployment strategies:\n  +  ``ROLLING``: When you create a service which uses the *rolling update* (``ROLLING``) deployment strategy, the ECS service scheduler replaces the currently running tasks with new tasks. The number of tasks that ECS adds or removes from the service during a rolling update is controlled by the service deployment configuration. \n Rolling update deployments are best suited for the following scenarios:\n  +  Gradual service updates: You need to update your service incrementally without taking the entire service offline at once.\n  +  Limited resource requirements: You want to avoid the additional resource costs of running two complete environments simultaneously (as required by blue/green deployments).\n  +  Acceptable deployment time: Your application can tolerate a longer deployment process, as rolling updates replace tasks one by one.\n  +  No need for instant roll back: Your service can tolerate a rollback process that takes minutes rather than seconds.\n  +  Simple deployment process: You prefer a straightforward deployment approach without the complexity of managing multiple environments, target groups, and listeners.\n  +  No load balancer requirement: Your service doesn't use or require a load balancer, ALB, NLB, or Service Connect (which are required for blue/green deployments).\n  +  Stateful applications: Your application maintains state that makes it difficult to run two parallel environments.\n  +  Cost sensitivity: You want to minimize deployment costs by not running duplicate environments during deployment.\n  \n Rolling updates are the default deployment strategy for services and provide a balance between deployment safety and resource efficiency for many common application scenarios.\n  +  ``BLUE_GREEN``: A *blue/green* deployment strategy (``BLUE_GREEN``) is a release methodology that reduces downtime and risk by running two identical production environments called blue and green. With ECS blue/green deployments, you can validate new service revisions before directing production traffic to them. This approach provides a safer way to deploy changes with the ability to quickly roll back if needed.\n ECS blue/green deployments are best suited for the following scenarios:\n  +  Service validation: When you need to validate new service revisions before directing production traffic to them\n  +  Zero downtime: When your service requires zero-downtime deployments\n  +  Instant roll back: When you need the ability to quickly roll back if issues are detected\n  +  Load balancer requirement: When your service uses ALB, NLB, or Service Connect\n  \n  \n  +  External\n Use a third-party deployment controller.\n  +  Blue/green deployment (powered by ACD)\n ACD installs an updated version of the application as a new replacement task set and reroutes production traffic from the original application task set to the replacement task set. The original task set is terminated after a successful deployment. Use this deployment controller to verify a new deployment of a service before sending production traffic to it.\n  \n When updating the deployment controller for a service, consider the following depending on the type of migration you're performing.\n  +  If you have a template that contains the ``EXTERNAL`` deployment controller information as well as ``TaskSet`` and ``PrimaryTaskSet`` resources, and you remove the task set resources from the template when updating from ``EXTERNAL`` to ``ECS``, the ``DescribeTaskSet`` and ``DeleteTaskSet`` API calls will return a 400 error after the deployment controller is updated to ``ECS``. This results in a delete failure on the task set resources, even though the stack transitions to ``UPDATE_COMPLETE`` status. For more information, see [Resource removed from stack but not deleted](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#troubleshooting-errors-resource-removed-not-deleted) in the CFNlong User Guide. To fix this issue, delete the task sets directly using the ECS``DeleteTaskSet`` API. For more information about how to delete a task set, see [DeleteTaskSet](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteTaskSet.html) in the ECSlong API Reference.\n  +  If you're migrating from ``CODE_DEPLOY`` to ``ECS`` with a new task definition and CFN performs a rollback operation, the ECS``UpdateService`` request fails with the following error:\n Resource handler returned message: \"Invalid request provided: Unable to update task definition on services with a CODE_DEPLOY deployment controller. \n  +  After a successful migration from ``ECS`` to ``EXTERNAL`` deployment controller, you need to manually remove the ``ACTIVE`` task set, because ECS no longer manages the deployment. For information about how to delete a task set, see [DeleteTaskSet](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DeleteTaskSet.html) in the ECSlong API Reference.","type":"string","enum":[{"name":"CodeDeploy","value":"CODE_DEPLOY"},{"name":"Ecs","value":"ECS"},{"name":"External","value":"EXTERNAL"}]},"aws-native:ecs:ServiceDeploymentLifecycleHook":{"description":"A deployment lifecycle hook runs custom logic at specific stages of the deployment process. Currently, you can use Lambda functions as hook targets.\n For more information, see [Lifecycle hooks for Amazon ECS service deployments](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-lifecycle-hooks.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"hookDetails":{"$ref":"pulumi.json#/Any","description":"Use this field to specify custom parameters that ECS passes to your hook target invocations (such as a Lambda function).\n This field must be a JSON object as a string."},"hookTargetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the hook target. Currently, only Lambda function ARNs are supported.\n You must provide this parameter when configuring a deployment lifecycle hook."},"lifecycleStages":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentLifecycleHookLifecycleStagesItem"},"description":"The lifecycle stages at which to run the hook. Choose from these valid values:\n  +  RECONCILE_SERVICE\n The reconciliation stage that only happens when you start a new service deployment with more than 1 service revision in an ACTIVE state.\n You can use a lifecycle hook for this stage.\n  +  PRE_SCALE_UP\n The green service revision has not started. The blue service revision is handling 100% of the production traffic. There is no test traffic.\n You can use a lifecycle hook for this stage.\n  +  POST_SCALE_UP\n The green service revision has started. The blue service revision is handling 100% of the production traffic. There is no test traffic.\n You can use a lifecycle hook for this stage.\n  +  TEST_TRAFFIC_SHIFT\n The blue and green service revisions are running. The blue service revision handles 100% of the production traffic. The green service revision is migrating from 0% to 100% of test traffic.\n You can use a lifecycle hook for this stage.\n  +  POST_TEST_TRAFFIC_SHIFT\n The test traffic shift is complete. The green service revision handles 100% of the test traffic.\n You can use a lifecycle hook for this stage.\n  +  PRODUCTION_TRAFFIC_SHIFT\n Production traffic is shifting to the green service revision. The green service revision is migrating from 0% to 100% of production traffic.\n You can use a lifecycle hook for this stage.\n  +  POST_PRODUCTION_TRAFFIC_SHIFT\n The production traffic shift is complete.\n You can use a lifecycle hook for this stage.\n  \n You must provide this parameter when configuring a deployment lifecycle hook."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon ECS permission to call Lambda functions on your behalf.\n For more information, see [Permissions required for Lambda functions in Amazon ECS blue/green deployments](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/blue-green-permissions.html) in the *Amazon Elastic Container Service Developer Guide*."}},"type":"object","required":["hookTargetArn","lifecycleStages","roleArn"]},"aws-native:ecs:ServiceDeploymentLifecycleHookLifecycleStagesItem":{"type":"string","enum":[{"name":"ReconcileService","value":"RECONCILE_SERVICE"},{"name":"PreScaleUp","value":"PRE_SCALE_UP"},{"name":"PostScaleUp","value":"POST_SCALE_UP"},{"name":"TestTrafficShift","value":"TEST_TRAFFIC_SHIFT"},{"name":"PostTestTrafficShift","value":"POST_TEST_TRAFFIC_SHIFT"},{"name":"ProductionTrafficShift","value":"PRODUCTION_TRAFFIC_SHIFT"},{"name":"PostProductionTrafficShift","value":"POST_PRODUCTION_TRAFFIC_SHIFT"}]},"aws-native:ecs:ServiceEbsTagSpecification":{"description":"The tag specifications of an Amazon EBS volume.","properties":{"propagateTags":{"$ref":"#/types/aws-native:ecs:ServiceEbsTagSpecificationPropagateTags","description":"Determines whether to propagate the tags from the task definition to \nthe Amazon EBS volume. Tags can only propagate to a ``SERVICE`` specified in \n``ServiceVolumeConfiguration``. If no value is specified, the tags aren't \npropagated."},"resourceType":{"type":"string","description":"The type of volume resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceTag"},"description":"The tags applied to this Amazon EBS volume. ``AmazonECSCreated`` and ``AmazonECSManaged`` are reserved tags that can't be used."}},"type":"object","required":["resourceType"]},"aws-native:ecs:ServiceEbsTagSpecificationPropagateTags":{"description":"Determines whether to propagate the tags from the task definition to \nthe Amazon EBS volume. Tags can only propagate to a ``SERVICE`` specified in \n``ServiceVolumeConfiguration``. If no value is specified, the tags aren't \npropagated.","type":"string","enum":[{"name":"Service","value":"SERVICE"},{"name":"TaskDefinition","value":"TASK_DEFINITION"}]},"aws-native:ecs:ServiceForceNewDeployment":{"description":"Determines whether to force a new deployment of the service. By default, deployments aren't forced. You can use this option to start a new deployment with no service definition changes. For example, you can update a service's tasks to use a newer Docker image with the same image/tag combination (``my_image:latest``) or to roll Fargate tasks onto a newer platform version.","properties":{"enableForceNewDeployment":{"type":"boolean","description":"Determines whether to force a new deployment of the service. By default, deployments aren't forced. You can use this option to start a new deployment with no service definition changes. For example, you can update a service's tasks to use a newer Docker image with the same image/tag combination (``my_image:latest``) or to roll Fargate tasks onto a newer platform version."},"forceNewDeploymentNonce":{"type":"string","description":"When you change the``ForceNewDeploymentNonce`` value in your template, it signals ECS to start a new deployment even though no other service parameters have changed. The value must be a unique, time- varying value like a timestamp, random string, or sequence number. Use this property when you want to ensure your tasks pick up the latest version of a Docker image that uses the same tag but has been updated in the registry."}},"type":"object","required":["enableForceNewDeployment"]},"aws-native:ecs:ServiceLaunchType":{"description":"The launch type on which to run your service. For more information, see [Amazon ECS Launch Types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If you want to use Managed Instances, you must use the ``capacityProviderStrategy`` request parameter","type":"string","enum":[{"name":"Ec2","value":"EC2"},{"name":"Fargate","value":"FARGATE"},{"name":"External","value":"EXTERNAL"}]},"aws-native:ecs:ServiceLinearConfiguration":{"description":"Configuration for a linear deployment strategy that shifts production traffic in equal percentage increments with configurable wait times between each step until 100 percent of traffic is shifted to the new service revision. \n The following validation applies only to Linear deployments created through CFN. CFN operations time out after 36 hours. Linear deployments can approach this limit because of their extended duration. This can cause CFN to roll back the deployment. To prevent timeout-related rollbacks, CFN rejects deployments when the calculated deployment time exceeds 33 hours based on your template configuration: \n  ``BakeTimeInMinutes + (StepBakeTimeInMinutes × Number of deployment steps)`` \n Where the number of deployment steps is calculated as follows:\n  +  *If StepPercent evenly divides by 100*: The number of deployment steps equals ``(100 ÷ StepPercent) - 1``\n  +  *Otherwise*: The number of deployment steps equals the floor of ``100 ÷ StepPercent``. For example, if ``StepPercent`` is 11, the number of deployment steps is 9 (not 9.1).\n  \n This calculation reflects that CFN doesn't apply the step bake time after the final traffic shift reaches 100%. For example, with a ``StepPercent`` of 50%, there are actually two traffic shifts, but only one deployment step is counted for validation purposes because the bake time is applied only after the first 50% shift, not after reaching 100%.\n Additional backend processes (such as task scaling and running lifecycle hooks) can extend deployment time beyond these calculations. Even deployments under the 33-hour threshold might still time out if these processes cause the total duration to exceed 36 hours.","properties":{"stepBakeTimeInMinutes":{"type":"integer","description":"The amount of time in minutes to wait between each traffic shifting step during a linear deployment. Valid values are 0 to 1440 minutes (24 hours). The default value is 6. This bake time is not applied after reaching 100 percent traffic."},"stepPercent":{"type":"number","description":"The percentage of production traffic to shift in each step during a linear deployment. Valid values are multiples of 0.1 from 3.0 to 100.0. The default value is 10.0."}},"type":"object"},"aws-native:ecs:ServiceLoadBalancer":{"description":"The ``LoadBalancer`` property specifies details on a load balancer that is used with a service.\n If the service is using the ``CODE_DEPLOY`` deployment controller, the service is required to use either an Application Load Balancer or Network Load Balancer. When you are creating an ACDlong deployment group, you specify two target groups (referred to as a ``targetGroupPair``). Each target group binds to a separate task set in the deployment. The load balancer can also have up to two listeners, a required listener for production traffic and an optional listener that allows you to test new revisions of the service before routing production traffic to it.\n Services with tasks that use the ``awsvpc`` network mode (for example, those with the Fargate launch type) only support Application Load Balancers and Network Load Balancers. Classic Load Balancers are not supported. Also, when you create any target groups for these services, you must choose ``ip`` as the target type, not ``instance``. Tasks that use the ``awsvpc`` network mode are associated with an elastic network interface, not an Amazon EC2 instance.","properties":{"advancedConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceAdvancedConfiguration","description":"The advanced settings for the load balancer used in blue/green deployments. Specify the alternate target group, listener rules, and IAM role required for traffic shifting during blue/green deployments."},"containerName":{"type":"string","description":"The name of the container (as it appears in a container definition) to associate with the load balancer.\n You need to specify the container name when configuring the target group for an Amazon ECS load balancer."},"containerPort":{"type":"integer","description":"The port on the container to associate with the load balancer. This port must correspond to a ``containerPort`` in the task definition the tasks in the service are using. For tasks that use the EC2 launch type, the container instance they're launched on must allow ingress traffic on the ``hostPort`` of the port mapping."},"loadBalancerName":{"type":"string","description":"The name of the load balancer to associate with the Amazon ECS service or task set.\n If you are using an Application Load Balancer or a Network Load Balancer the load balancer name parameter should be omitted."},"targetGroupArn":{"type":"string","description":"The full Amazon Resource Name (ARN) of the Elastic Load Balancing target group or groups associated with a service or task set.\n A target group ARN is only specified when using an Application Load Balancer or Network Load Balancer. \n For services using the ``ECS`` deployment controller, you can specify one or multiple target groups. For more information, see [Registering multiple target groups with a service](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/register-multiple-targetgroups.html) in the *Amazon Elastic Container Service Developer Guide*.\n For services using the ``CODE_DEPLOY`` deployment controller, you're required to define two target groups for the load balancer. For more information, see [Blue/green deployment with CodeDeploy](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-bluegreen.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If your service's task definition uses the ``awsvpc`` network mode, you must choose ``ip`` as the target type, not ``instance``. Do this when creating your target groups because tasks that use the ``awsvpc`` network mode are associated with an elastic network interface, not an Amazon EC2 instance. This network mode is required for the Fargate launch type."}},"type":"object"},"aws-native:ecs:ServiceLogConfiguration":{"description":"The log configuration for the container. This parameter maps to ``LogConfig`` in the docker container create command and the ``--log-driver`` option to docker run.\n By default, containers use the same logging driver that the Docker daemon uses. However, the container might use a different logging driver than the Docker daemon by specifying a log driver configuration in the container definition.\n Understand the following when specifying a log configuration for your containers.\n  +  Amazon ECS currently supports a subset of the logging drivers available to the Docker daemon. Additional log drivers may be available in future releases of the Amazon ECS container agent.\n For tasks on FARGATElong, the supported log drivers are ``awslogs``, ``splunk``, and ``awsfirelens``.\n For tasks hosted on Amazon EC2 instances, the supported log drivers are ``awslogs``, ``fluentd``, ``gelf``, ``json-file``, ``journald``,``syslog``, ``splunk``, and ``awsfirelens``.\n  +  This parameter requires version 1.18 of the Docker Remote API or greater on your container instance.\n  +  For tasks that are hosted on Amazon EC2 instances, the Amazon ECS container agent must register the available logging drivers with the ``ECS_AVAILABLE_LOGGING_DRIVERS`` environment variable before containers placed on that instance can use these log configuration options. For more information, see [Amazon ECS container agent configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Amazon Elastic Container Service Developer Guide*.\n  +  For tasks that are on FARGATElong, because you don't have access to the underlying infrastructure your tasks are hosted on, any additional software needed must be installed outside of the task. For example, the Fluentd output aggregators or a remote host running Logstash to send Gelf logs to.","properties":{"logDriver":{"type":"string","description":"The log driver to use for the container.\n For tasks on FARGATElong, the supported log drivers are ``awslogs``, ``splunk``, and ``awsfirelens``.\n For tasks hosted on Amazon EC2 instances, the supported log drivers are ``awslogs``, ``fluentd``, ``gelf``, ``json-file``, ``journald``, ``syslog``, ``splunk``, and ``awsfirelens``.\n For more information about using the ``awslogs`` log driver, see [Send Amazon ECS logs to CloudWatch](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html) in the *Amazon Elastic Container Service Developer Guide*.\n For more information about using the ``awsfirelens`` log driver, see [Send Amazon ECS logs to an service or Partner](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html).\n  If you have a custom driver that isn't listed, you can fork the Amazon ECS container agent project that's [available on GitHub](https://docs.aws.amazon.com/https://github.com/aws/amazon-ecs-agent) and customize it to work with that driver. We encourage you to submit pull requests for changes that you would like to have included. However, we don't currently provide support for running modified copies of this software."},"options":{"type":"object","additionalProperties":{"type":"string"},"description":"The configuration options to send to the log driver.\n The options you can specify depend on the log driver. Some of the options you can specify when you use the ``awslogs`` log driver to route logs to Amazon CloudWatch include the following:\n  + awslogs-create-group Required: No Specify whether you want the log group to be created automatically. If this option isn't specified, it defaults to false. Your IAM policy must include the logs:CreateLogGroup permission before you attempt to use awslogs-create-group. + awslogs-region Required: Yes Specify the Region that the awslogs log driver is to send your Docker logs to. You can choose to send all of your logs from clusters in different Regions to a single region in CloudWatch Logs. This is so that they're all visible in one location. Otherwise, you can separate them by Region for more granularity. Make sure that the specified log group exists in the Region that you specify with this option. + awslogs-group Required: Yes Make sure to specify a log group that the awslogs log driver sends its log streams to. + awslogs-stream-prefix Required: Yes, when using Fargate.Optional when using EC2. Use the awslogs-stream-prefix option to associate a log stream with the specified prefix, the container name, and the ID of the Amazon ECS task that the container belongs to. If you specify a prefix with this option, then the log stream takes the format prefix-name/container-name/ecs-task-id. If you don't specify a prefix with this option, then the log stream is named after the container ID that's assigned by the Docker daemon on the container instance. Because it's difficult to trace logs back to the container that sent them with just the Docker container ID (which is only available on the container instance), we recommend that you specify a prefix with this option. For Amazon ECS services, you can use the service name as the prefix. Doing so, you can trace log streams to the service that the container belongs to, the name of the container that sent them, and the ID of the task that the container belongs to. You must specify a stream-prefix for your logs to have your logs appear in the Log pane when using the Amazon ECS console. + awslogs-datetime-format Required: No This option defines a multiline start pattern in Python strftime format. A log message consists of a line that matches the pattern and any following lines that don’t match the pattern. The matched line is the delimiter between log messages. One example of a use case for using this format is for parsing output such as a stack dump, which might otherwise be logged in multiple entries. The correct pattern allows it to be captured in a single entry. For more information, see awslogs-datetime-format. You cannot configure both the awslogs-datetime-format and awslogs-multiline-pattern options. Multiline logging performs regular expression parsing and matching of all log messages. This might have a negative impact on logging performance. + awslogs-multiline-pattern Required: No This option defines a multiline start pattern that uses a regular expression. A log message consists of a line that matches the pattern and any following lines that don’t match the pattern. The matched line is the delimiter between log messages. For more information, see awslogs-multiline-pattern. This option is ignored if awslogs-datetime-format is also configured. You cannot configure both the awslogs-datetime-format and awslogs-multiline-pattern options. Multiline logging performs regular expression parsing and matching of all log messages. This might have a negative impact on logging performance. \n The following options apply to all supported log drivers.\n  + mode Required: No Valid values: non-blocking | blocking This option defines the delivery mode of log messages from the container to the log driver specified using logDriver. The delivery mode you choose affects application availability when the flow of logs from container is interrupted. If you use the blocking mode and the flow of logs is interrupted, calls from container code to write to the stdout and stderr streams will block. The logging thread of the application will block as a result. This may cause the application to become unresponsive and lead to container healthcheck failure. If you use the non-blocking mode, the container's logs are instead stored in an in-memory intermediate buffer configured with the max-buffer-size option. This prevents the application from becoming unresponsive when logs cannot be sent. We recommend using this mode if you want to ensure service availability and are okay with some log loss. For more information, see Preventing log loss with non-blocking mode in the awslogs container log driver. You can set a default mode for all containers in a specific Region by using the defaultLogDriverMode account setting. If you don't specify the mode option or configure the account setting, Amazon ECS will default to the non-blocking mode. For more information about the account setting, see Default log driver mode in the Amazon Elastic Container Service Developer Guide. On June 25, 2025, Amazon ECS changed the default log driver mode from blocking to non-blocking to prioritize task availability over logging. To continue using the blocking mode after this change, do one of the following: Set the mode option in your container definition's logConfiguration as blocking. Set the defaultLogDriverMode account setting to blocking. + max-buffer-size Required: No Default value: 10m When non-blocking mode is used, the max-buffer-size log option controls the size of the buffer that's used for intermediate message storage. Make sure to specify an adequate buffer size based on your application. When the buffer fills up, further logs cannot be stored. Logs that cannot be stored are lost. \n To route logs using the ``splunk`` log router, you need to specify a ``splunk-token`` and a ``splunk-url``.\n When you use the ``awsfirelens`` log router to route logs to an AWS Service or AWS Partner Network destination for log storage and analytics, you can set the ``log-driver-buffer-limit`` option to limit the number of events that are buffered in memory, before being sent to the log router container. It can help to resolve potential log loss issue because high throughput might result in memory running out for the buffer inside of Docker.\n Other options you can specify when using ``awsfirelens`` to route logs depend on the destination. When you export logs to Amazon Data Firehose, you can specify the AWS Region with ``region`` and a name for the log stream with ``delivery_stream``.\n When you export logs to Amazon Kinesis Data Streams, you can specify an AWS Region with ``region`` and a data stream name with ``stream``.\n  When you export logs to Amazon OpenSearch Service, you can specify options like ``Name``, ``Host`` (OpenSearch Service endpoint without protocol), ``Port``, ``Index``, ``Type``, ``Aws_auth``, ``Aws_region``, ``Suppress_Type_Name``, and ``tls``. For more information, see [Under the hood: FireLens for Amazon ECS Tasks](https://docs.aws.amazon.com/containers/under-the-hood-firelens-for-amazon-ecs-tasks/).\n When you export logs to Amazon S3, you can specify the bucket using the ``bucket`` option. You can also specify ``region``, ``total_file_size``, ``upload_timeout``, and ``use_put_object`` as options.\n This parameter requires version 1.19 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: ``sudo docker version --format '{{.Server.APIVersion}}'``"},"secretOptions":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceSecret"},"description":"The secrets to pass to the log configuration. For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the *Amazon Elastic Container Service Developer Guide*."}},"type":"object"},"aws-native:ecs:ServiceManagedEbsVolumeConfiguration":{"description":"The configuration for the Amazon EBS volume that Amazon ECS creates and manages on your behalf. These settings are used to create each Amazon EBS volume, with one volume created for each task in the service. For information about the supported launch types and operating systems, see [Supported operating systems and launch types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ebs-volumes.html#ebs-volumes-configuration) in the*Amazon Elastic Container Service Developer Guide*.\n Many of these parameters map 1:1 with the Amazon EBS ``CreateVolume`` API request parameters.","properties":{"encrypted":{"type":"boolean","description":"Indicates whether the volume should be encrypted. If you turn on Region-level Amazon EBS encryption by default but set this value as ``false``, the setting is overridden and the volume is encrypted with the KMS key specified for Amazon EBS encryption by default. This parameter maps 1:1 with the ``Encrypted`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*."},"filesystemType":{"type":"string","description":"The filesystem type for the volume. For volumes created from a snapshot, you must specify the same filesystem type that the volume was using when the snapshot was created. If there is a filesystem type mismatch, the tasks will fail to start.\n The available Linux filesystem types are\n ``ext3``, ``ext4``, and ``xfs``. If no value is specified, the ``xfs`` filesystem type is used by default.\n The available Windows filesystem types are ``NTFS``."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS). For ``gp3``, ``io1``, and ``io2`` volumes, this represents the number of IOPS that are provisioned for the volume. For ``gp2`` volumes, this represents the baseline performance of the volume and the rate at which the volume accumulates I/O credits for bursting.\n The following are the supported values for each volume type.\n  +  ``gp3``: 3,000 - 16,000 IOPS\n  +  ``io1``: 100 - 64,000 IOPS\n  +  ``io2``: 100 - 256,000 IOPS\n  \n This parameter is required for ``io1`` and ``io2`` volume types. The default for ``gp3`` volumes is ``3,000 IOPS``. This parameter is not supported for ``st1``, ``sc1``, or ``standard`` volume types.\n This parameter maps 1:1 with the ``Iops`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) identifier of the AWS Key Management Service key to use for Amazon EBS encryption. When a key is specified using this parameter, it overrides Amazon EBS default encryption or any KMS key that you specified for cluster-level managed storage encryption. This parameter maps 1:1 with the ``KmsKeyId`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*. For more information about encrypting Amazon EBS volumes attached to tasks, see [Encrypt data stored in Amazon EBS volumes attached to Amazon ECS tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ebs-kms-encryption.html).\n  AWS authenticates the AWS Key Management Service key asynchronously. Therefore, if you specify an ID, alias, or ARN that is invalid, the action can appear to complete, but eventually fails."},"roleArn":{"type":"string","description":"The ARN of the IAM role to associate with this volume. This is the Amazon ECS infrastructure IAM role that is used to manage your AWS infrastructure. We recommend using the Amazon ECS-managed ``AmazonECSInfrastructureRolePolicyForVolumes`` IAM policy with this role. For more information, see [Amazon ECS infrastructure IAM role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/infrastructure_IAM_role.html) in the *Amazon ECS Developer Guide*."},"sizeInGiB":{"type":"integer","description":"The size of the volume in GiB. You must specify either a volume size or a snapshot ID. If you specify a snapshot ID, the snapshot size is used for the volume size by default. You can optionally specify a volume size greater than or equal to the snapshot size. This parameter maps 1:1 with the ``Size`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*.\n The following are the supported volume size values for each volume type.\n  +  ``gp2`` and ``gp3``: 1-16,384\n  +  ``io1`` and ``io2``: 4-16,384\n  +  ``st1`` and ``sc1``: 125-16,384\n  +  ``standard``: 1-1,024"},"snapshotId":{"type":"string","description":"The snapshot that Amazon ECS uses to create volumes for attachment to tasks maintained by the service. You must specify either ``snapshotId`` or ``sizeInGiB`` in your volume configuration. This parameter maps 1:1 with the ``SnapshotId`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceEbsTagSpecification"},"description":"The tags to apply to the volume. Amazon ECS applies service-managed tags by default. This parameter maps 1:1 with the ``TagSpecifications.N`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*."},"throughput":{"type":"integer","description":"The throughput to provision for a volume, in MiB/s, with a maximum of 1,000 MiB/s. This parameter maps 1:1 with the ``Throughput`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*.\n  This parameter is only supported for the ``gp3`` volume type."},"volumeInitializationRate":{"type":"integer","description":"The rate, in MiB/s, at which data is fetched from a snapshot of an existing EBS volume to create new volumes for attachment to the tasks maintained by the service. This property can be specified only if you specify a ``snapshotId``. For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EBS User Guide*."},"volumeType":{"type":"string","description":"The volume type. This parameter maps 1:1 with the ``VolumeType`` parameter of the [CreateVolume API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateVolume.html) in the *Amazon EC2 API Reference*. For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volume-types.html) in the *Amazon EC2 User Guide*.\n The following are the supported volume types.\n  +  General Purpose SSD: ``gp2``|``gp3``\n  +  Provisioned IOPS SSD: ``io1``|``io2``\n  +  Throughput Optimized HDD: ``st1``\n  +  Cold HDD: ``sc1``\n  +  Magnetic: ``standard``\n  The magnetic volume type is not supported on Fargate."}},"type":"object","required":["roleArn"]},"aws-native:ecs:ServiceNetworkConfiguration":{"description":"The network configuration for a task or service.","properties":{"awsvpcConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceAwsVpcConfiguration","description":"The VPC subnets and security groups that are associated with a task.\n  All specified subnets and security groups must be from the same VPC."}},"type":"object"},"aws-native:ecs:ServicePlacementConstraint":{"description":"An object representing a constraint on task placement. For more information, see [Task placement constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If you're using the Fargate launch type, task placement constraints aren't supported.","properties":{"expression":{"type":"string","description":"A cluster query language expression to apply to the constraint. The expression can have a maximum length of 2000 characters. You can't specify an expression if the constraint type is ``distinctInstance``. For more information, see [Cluster query language](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-query-language.html) in the *Amazon Elastic Container Service Developer Guide*."},"type":{"$ref":"#/types/aws-native:ecs:ServicePlacementConstraintType","description":"The type of constraint. Use ``distinctInstance`` to ensure that each task in a particular group is running on a different container instance. Use ``memberOf`` to restrict the selection to a group of valid candidates."}},"type":"object","required":["type"]},"aws-native:ecs:ServicePlacementConstraintType":{"description":"The type of constraint. Use ``distinctInstance`` to ensure that each task in a particular group is running on a different container instance. Use ``memberOf`` to restrict the selection to a group of valid candidates.","type":"string","enum":[{"name":"DistinctInstance","value":"distinctInstance"},{"name":"MemberOf","value":"memberOf"}]},"aws-native:ecs:ServicePlacementStrategy":{"description":"The task placement strategy for a task or service. For more information, see [Task placement strategies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-strategies.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"field":{"type":"string","description":"The field to apply the placement strategy against. For the ``spread`` placement strategy, valid values are ``instanceId`` (or ``host``, which has the same effect), or any platform or custom attribute that's applied to a container instance, such as ``attribute:ecs.availability-zone``. For the ``binpack`` placement strategy, valid values are ``cpu`` and ``memory``. For the ``random`` placement strategy, this field is not used."},"type":{"$ref":"#/types/aws-native:ecs:ServicePlacementStrategyType","description":"The type of placement strategy. The ``random`` placement strategy randomly places tasks on available candidates. The ``spread`` placement strategy spreads placement across available candidates evenly based on the ``field`` parameter. The ``binpack`` strategy places tasks on available candidates that have the least available amount of the resource that's specified with the ``field`` parameter. For example, if you binpack on memory, a task is placed on the instance with the least amount of remaining memory but still enough to run the task."}},"type":"object","required":["type"]},"aws-native:ecs:ServicePlacementStrategyType":{"description":"The type of placement strategy. The ``random`` placement strategy randomly places tasks on available candidates. The ``spread`` placement strategy spreads placement across available candidates evenly based on the ``field`` parameter. The ``binpack`` strategy places tasks on available candidates that have the least available amount of the resource that's specified with the ``field`` parameter. For example, if you binpack on memory, a task is placed on the instance with the least amount of remaining memory but still enough to run the task.","type":"string","enum":[{"name":"Binpack","value":"binpack"},{"name":"Random","value":"random"},{"name":"Spread","value":"spread"}]},"aws-native:ecs:ServicePropagateTags":{"description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the [TagResource](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html) API action.\n You must set this to a value other than ``NONE`` when you use Cost Explorer. For more information, see [Amazon ECS usage reports](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/usage-reports.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default is ``NONE``.","type":"string","enum":[{"name":"Service","value":"SERVICE"},{"name":"TaskDefinition","value":"TASK_DEFINITION"}]},"aws-native:ecs:ServiceRegistry":{"description":"The details for the service registry.\n Each service may be associated with one service registry. Multiple service registries for each service are not supported.\n When you add, update, or remove the service registries configuration, Amazon ECS starts a new deployment. New tasks are registered and deregistered to the updated service registry configuration.","properties":{"containerName":{"type":"string","description":"The container name value to be used for your service discovery service. It's already specified in the task definition. If the task definition that your service task specifies uses the ``bridge`` or ``host`` network mode, you must specify a ``containerName`` and ``containerPort`` combination from the task definition. If the task definition that your service task specifies uses the ``awsvpc`` network mode and a type SRV DNS record is used, you must specify either a ``containerName`` and ``containerPort`` combination or a ``port`` value. However, you can't specify both."},"containerPort":{"type":"integer","description":"The port value to be used for your service discovery service. It's already specified in the task definition. If the task definition your service task specifies uses the ``bridge`` or ``host`` network mode, you must specify a ``containerName`` and ``containerPort`` combination from the task definition. If the task definition your service task specifies uses the ``awsvpc`` network mode and a type SRV DNS record is used, you must specify either a ``containerName`` and ``containerPort`` combination or a ``port`` value. However, you can't specify both."},"port":{"type":"integer","description":"The port value used if your service discovery service specified an SRV record. This field might be used if both the ``awsvpc`` network mode and SRV records are used."},"registryArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service registry. The currently supported service registry is CMAP. For more information, see [CreateService](https://docs.aws.amazon.com/cloud-map/latest/api/API_CreateService.html)."}},"type":"object"},"aws-native:ecs:ServiceSchedulingStrategy":{"description":"The scheduling strategy to use for the service. For more information, see [Services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html).\n There are two service scheduler strategies available:\n  +  ``REPLICA``-The replica scheduling strategy places and maintains the desired number of tasks across your cluster. By default, the service scheduler spreads tasks across Availability Zones. You can use task placement strategies and constraints to customize task placement decisions. This scheduler strategy is required if the service uses the ``CODE_DEPLOY`` or ``EXTERNAL`` deployment controller types.\n  +  ``DAEMON``-The daemon scheduling strategy deploys exactly one task on each active container instance that meets all of the task placement constraints that you specify in your cluster. The service scheduler also evaluates the task placement constraints for running tasks and will stop tasks that don't meet the placement constraints. When you're using this strategy, you don't need to specify a desired number of tasks, a task placement strategy, or use Service Auto Scaling policies.\n  Tasks using the Fargate launch type or the ``CODE_DEPLOY`` or ``EXTERNAL`` deployment controller types don't support the ``DAEMON`` scheduling strategy.","type":"string","enum":[{"name":"Daemon","value":"DAEMON"},{"name":"Replica","value":"REPLICA"}]},"aws-native:ecs:ServiceSecret":{"description":"An object representing the secret to expose to your container. Secrets can be exposed to a container in the following ways:\n  +  To inject sensitive data into your containers as environment variables, use the ``secrets`` container definition parameter.\n  +  To reference sensitive information in the log configuration of a container, use the ``secretOptions`` container definition parameter.\n  \n For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"name":{"type":"string","description":"The name of the secret."},"valueFrom":{"type":"string","description":"The secret to expose to the container. The supported values are either the full ARN of the ASMlong secret or the full ARN of the parameter in the SSM Parameter Store.\n For information about the require IAMlong permissions, see [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-secrets.html#secrets-iam) (for Secrets Manager) or [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-parameters.html) (for Systems Manager Parameter store) in the *Amazon Elastic Container Service Developer Guide*.\n  If the SSM Parameter Store parameter exists in the same Region as the task you're launching, then you can use either the full ARN or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified."}},"type":"object","required":["name","valueFrom"]},"aws-native:ecs:ServiceTag":{"description":"The metadata that you apply to a resource to help you categorize and organize them. Each tag consists of a key and an optional value. You define them.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.\n  \n In order to tag a service that has the following ARN format, you need to migrate the service to the long ARN. You must use the API, CLI or console to migrate the service ARN. For more information, see [Migrate an short service ARN to a long ARN](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-arn-migration.html) in the *Developer Guide*.\n  ``arn:aws:ecs:region:aws_account_id:service/service-name`` \n After the migration is complete, the following are true:\n  +   The service ARN is: ``arn:aws:ecs:region:aws_account_id:service/cluster-name/service-name``\n  +  You can use CFN to tag the service as you would a service with a long ARN format.\n  +  When the ``PhysicalResourceId`` in the CFN stack represents a service, the value does not change and will be the short service ARN.","properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A ``key`` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that make up a tag. A ``value`` acts as a descriptor within a tag category (key)."}},"type":"object"},"aws-native:ecs:ServiceTimeoutConfiguration":{"description":"An object that represents the timeout configurations for Service Connect.\n  If ``idleTimeout`` is set to a time that is less than ``perRequestTimeout``, the connection will close when the ``idleTimeout`` is reached and not the ``perRequestTimeout``.","properties":{"idleTimeoutSeconds":{"type":"integer","description":"The amount of time in seconds a connection will stay active while idle. A value of ``0`` can be set to disable ``idleTimeout``.\n The ``idleTimeout`` default for ``HTTP``/``HTTP2``/``GRPC`` is 5 minutes.\n The ``idleTimeout`` default for ``TCP`` is 1 hour."},"perRequestTimeoutSeconds":{"type":"integer","description":"The amount of time waiting for the upstream to respond with a complete response per request. A value of ``0`` can be set to disable ``perRequestTimeout``. ``perRequestTimeout`` can only be set if Service Connect ``appProtocol`` isn't ``TCP``. Only ``idleTimeout`` is allowed for ``TCP````appProtocol``."}},"type":"object"},"aws-native:ecs:ServiceVolumeConfiguration":{"description":"The configuration for a volume specified in the task definition as a volume that is configured at launch time. Currently, the only supported volume type is an Amazon EBS volume.","properties":{"managedEbsVolume":{"$ref":"#/types/aws-native:ecs:ServiceManagedEbsVolumeConfiguration","description":"The configuration for the Amazon EBS volume that Amazon ECS creates and manages on your behalf. These settings are used to create each Amazon EBS volume, with one volume created for each task in the service. The Amazon EBS volumes are visible in your account in the Amazon EC2 console once they are created."},"name":{"type":"string","description":"The name of the volume. This value must match the volume name from the ``Volume`` object in the task definition."}},"type":"object","required":["name"]},"aws-native:ecs:ServiceVpcLatticeConfiguration":{"description":"The VPC Lattice configuration for your service that holds the information for the target group(s) Amazon ECS tasks will be registered to.","properties":{"portName":{"type":"string","description":"The name of the port mapping to register in the VPC Lattice target group. This is the name of the ``portMapping`` you defined in your task definition."},"roleArn":{"type":"string","description":"The ARN of the IAM role to associate with this VPC Lattice configuration. This is the Amazon ECS\n infrastructure IAM role that is used to manage your VPC Lattice infrastructure."},"targetGroupArn":{"type":"string","description":"The full Amazon Resource Name (ARN) of the target group or groups associated with the VPC Lattice configuration that the Amazon ECS tasks will be registered to."}},"type":"object","required":["portName","roleArn","targetGroupArn"]},"aws-native:ecs:TaskDefinitionAuthorizationConfig":{"description":"The authorization configuration details for the Amazon EFS file system.","properties":{"accessPointId":{"type":"string","description":"The Amazon EFS access point ID to use. If an access point is specified, the root directory value specified in the ``EFSVolumeConfiguration`` must either be omitted or set to ``/`` which will enforce the path set on the EFS access point. If an access point is used, transit encryption must be on in the ``EFSVolumeConfiguration``. For more information, see [Working with Amazon EFS access points](https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html) in the *Amazon Elastic File System User Guide*."},"iam":{"$ref":"#/types/aws-native:ecs:TaskDefinitionAuthorizationConfigIam","description":"Determines whether to use the Amazon ECS task role defined in a task definition when mounting the Amazon EFS file system. If it is turned on, transit encryption must be turned on in the ``EFSVolumeConfiguration``. If this parameter is omitted, the default value of ``DISABLED`` is used. For more information, see [Using Amazon EFS access points](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/efs-volumes.html#efs-volume-accesspoints) in the *Amazon Elastic Container Service Developer Guide*."}},"type":"object"},"aws-native:ecs:TaskDefinitionAuthorizationConfigIam":{"description":"Determines whether to use the Amazon ECS task role defined in a task definition when mounting the Amazon EFS file system. If it is turned on, transit encryption must be turned on in the ``EFSVolumeConfiguration``. If this parameter is omitted, the default value of ``DISABLED`` is used. For more information, see [Using Amazon EFS access points](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/efs-volumes.html#efs-volume-accesspoints) in the *Amazon Elastic Container Service Developer Guide*.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:ecs:TaskDefinitionContainerDefinition":{"description":"The ``ContainerDefinition`` property specifies a container definition. Container definitions are used in task definitions to describe the different containers that are launched as part of a task.","properties":{"command":{"type":"array","items":{"type":"string"},"description":"The command that's passed to the container. This parameter maps to ``Cmd`` in the docker container create command and the ``COMMAND`` parameter to docker run. If there are multiple arguments, each argument is a separated string in the array."},"cpu":{"type":"integer","description":"The number of ``cpu`` units reserved for the container. This parameter maps to ``CpuShares`` in the docker container create command and the ``--cpu-shares`` option to docker run.\n This field is optional for tasks using the Fargate launch type, and the only requirement is that the total amount of CPU reserved for all containers within a task be lower than the task-level ``cpu`` value.\n  You can determine the number of CPU units that are available per EC2 instance type by multiplying the vCPUs listed for that instance type on the [Amazon EC2 Instances](https://docs.aws.amazon.com/ec2/instance-types/) detail page by 1,024.\n  Linux containers share unallocated CPU units with other containers on the container instance with the same ratio as their allocated amount. For example, if you run a single-container task on a single-core instance type with 512 CPU units specified for that container, and that's the only task running on the container instance, that container could use the full 1,024 CPU unit share at any given time. However, if you launched another copy of the same task on that container instance, each task is guaranteed a minimum of 512 CPU units when needed. Moreover, each container could float to higher CPU usage if the other container was not using it. If both tasks were 100% active all of the time, they would be limited to 512 CPU units.\n On Linux container instances, the Docker daemon on the container instance uses the CPU value to calculate the relative CPU share ratios for running containers. The minimum valid CPU share value that the Linux kernel allows is 2, and the maximum valid CPU share value that the Linux kernel allows is 262144. However, the CPU parameter isn't required, and you can use CPU values below 2 or above 262144 in your container definitions. For CPU values below 2 (including null) or above 262144, the behavior varies based on your Amazon ECS container agent version:\n  +  *Agent versions less than or equal to 1.1.0:* Null and zero CPU values are passed to Docker as 0, which Docker then converts to 1,024 CPU shares. CPU values of 1 are passed to Docker as 1, which the Linux kernel converts to two CPU shares.\n  +  *Agent versions greater than or equal to 1.2.0:* Null, zero, and CPU values of 1 are passed to Docker as 2.\n  +  *Agent versions greater than or equal to 1.84.0:* CPU values greater than 256 vCPU are passed to Docker as 256, which is equivalent to 262144 CPU shares.\n  \n On Windows container instances, the CPU limit is enforced as an absolute limit, or a quota. Windows containers only have access to the specified amount of CPU that's described in the task definition. A null or zero CPU value is passed to Docker as ``0``, which Windows interprets as 1% of one CPU."},"credentialSpecs":{"type":"array","items":{"type":"string"},"description":"A list of ARNs in SSM or Amazon S3 to a credential spec (``CredSpec``) file that configures the container for Active Directory authentication. We recommend that you use this parameter instead of the ``dockerSecurityOptions``. The maximum number of ARNs is 1.\n There are two formats for each ARN.\n  + credentialspecdomainless:MyARN You use credentialspecdomainless:MyARN to provide a CredSpec with an additional section for a secret in . You provide the login credentials to the domain in the secret. Each task that runs on any container instance can join different domains. You can use this format without joining the container instance to a domain. + credentialspec:MyARN You use credentialspec:MyARN to provide a CredSpec for a single domain. You must join the container instance to the domain before you start any tasks that use this task definition. \n In both formats, replace ``MyARN`` with the ARN in SSM or Amazon S3.\n If you provide a ``credentialspecdomainless:MyARN``, the ``credspec`` must provide a ARN in ASMlong for a secret containing the username, password, and the domain to connect to. For better security, the instance isn't joined to the domain for domainless authentication. Other applications on the instance can't use the domainless credentials. You can use this parameter to run tasks on the same instance, even it the tasks need to join different domains. For more information, see [Using gMSAs for Windows Containers](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows-gmsa.html) and [Using gMSAs for Linux Containers](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/linux-gmsa.html)."},"dependsOn":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionContainerDependency"},"description":"The dependencies defined for container startup and shutdown. A container can contain multiple dependencies. When a dependency is defined for container startup, for container shutdown it is reversed.\n For tasks using the EC2 launch type, the container instances require at least version 1.26.0 of the container agent to turn on container dependencies. However, we recommend using the latest container agent version. For information about checking your agent version and updating to the latest version, see [Updating the Amazon ECS Container Agent](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html) in the *Amazon Elastic Container Service Developer Guide*. If you're using an Amazon ECS-optimized Linux AMI, your instance needs at least version 1.26.0-1 of the ``ecs-init`` package. If your container instances are launched from version ``20190301`` or later, then they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) in the *Amazon Elastic Container Service Developer Guide*.\n For tasks using the Fargate launch type, the task or service requires the following platforms:\n  +  Linux platform version ``1.3.0`` or later.\n  +  Windows platform version ``1.0.0`` or later.\n  \n If the task definition is used in a blue/green deployment that uses [AWS::CodeDeploy::DeploymentGroup BlueGreenDeploymentConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-codedeploy-deploymentgroup-bluegreendeploymentconfiguration.html), the ``dependsOn`` parameter is not supported."},"disableNetworking":{"type":"boolean","description":"When this parameter is true, networking is off within the container. This parameter maps to ``NetworkDisabled`` in the docker container create command.\n  This parameter is not supported for Windows containers."},"dnsSearchDomains":{"type":"array","items":{"type":"string"},"description":"A list of DNS search domains that are presented to the container. This parameter maps to ``DnsSearch`` in the docker container create command and the ``--dns-search`` option to docker run.\n  This parameter is not supported for Windows containers."},"dnsServers":{"type":"array","items":{"type":"string"},"description":"A list of DNS servers that are presented to the container. This parameter maps to ``Dns`` in the docker container create command and the ``--dns`` option to docker run.\n  This parameter is not supported for Windows containers."},"dockerLabels":{"type":"object","additionalProperties":{"type":"string"},"description":"A key/value map of labels to add to the container. This parameter maps to ``Labels`` in the docker container create command and the ``--label`` option to docker run. This parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: ``sudo docker version --format '{{.Server.APIVersion}}'``"},"dockerSecurityOptions":{"type":"array","items":{"type":"string"},"description":"A list of strings to provide custom configuration for multiple security systems. This field isn't valid for containers in tasks using the Fargate launch type.\n For Linux tasks on EC2, this parameter can be used to reference custom labels for SELinux and AppArmor multi-level security systems.\n For any tasks on EC2, this parameter can be used to reference a credential spec file that configures a container for Active Directory authentication. For more information, see [Using gMSAs for Windows Containers](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows-gmsa.html) and [Using gMSAs for Linux Containers](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/linux-gmsa.html) in the *Amazon Elastic Container Service Developer Guide*.\n This parameter maps to ``SecurityOpt`` in the docker container create command and the ``--security-opt`` option to docker run.\n  The Amazon ECS container agent running on a container instance must register with the ``ECS_SELINUX_CAPABLE=true`` or ``ECS_APPARMOR_CAPABLE=true`` environment variables before containers placed on that instance can use these security options. For more information, see [Amazon ECS Container Agent Configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Amazon Elastic Container Service Developer Guide*.\n  Valid values: \"no-new-privileges\" | \"apparmor:PROFILE\" | \"label:value\" | \"credentialspec:CredentialSpecFilePath\""},"entryPoint":{"type":"array","items":{"type":"string"},"description":"Early versions of the Amazon ECS container agent don't properly handle ``entryPoint`` parameters. If you have problems using ``entryPoint``, update your container agent or enter your commands and arguments as ``command`` array items instead.\n  The entry point that's passed to the container. This parameter maps to ``Entrypoint`` in the docker container create command and the ``--entrypoint`` option to docker run."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionKeyValuePair"},"description":"The environment variables to pass to a container. This parameter maps to ``Env`` in the docker container create command and the ``--env`` option to docker run.\n  We don't recommend that you use plaintext environment variables for sensitive information, such as credential data."},"environmentFiles":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionEnvironmentFile"},"description":"A list of files containing the environment variables to pass to a container. This parameter maps to the ``--env-file`` option to docker run.\n You can specify up to ten environment files. The file must have a ``.env`` file extension. Each line in an environment file contains an environment variable in ``VARIABLE=VALUE`` format. Lines beginning with ``#`` are treated as comments and are ignored.\n If there are environment variables specified using the ``environment`` parameter in a container definition, they take precedence over the variables contained within an environment file. If multiple environment files are specified that contain the same variable, they're processed from the top down. We recommend that you use unique variable names. For more information, see [Specifying Environment Variables](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/taskdef-envfiles.html) in the *Amazon Elastic Container Service Developer Guide*."},"essential":{"type":"boolean","description":"If the ``essential`` parameter of a container is marked as ``true``, and that container fails or stops for any reason, all other containers that are part of the task are stopped. If the ``essential`` parameter of a container is marked as ``false``, its failure doesn't affect the rest of the containers in a task. If this parameter is omitted, a container is assumed to be essential.\n All tasks must have at least one essential container. If you have an application that's composed of multiple containers, group containers that are used for a common purpose into components, and separate the different components into multiple task definitions. For more information, see [Application Architecture](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/application_architecture.html) in the *Amazon Elastic Container Service Developer Guide*."},"extraHosts":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionHostEntry"},"description":"A list of hostnames and IP address mappings to append to the ``/etc/hosts`` file on the container. This parameter maps to ``ExtraHosts`` in the docker container create command and the ``--add-host`` option to docker run.\n  This parameter isn't supported for Windows containers or tasks that use the ``awsvpc`` network mode."},"firelensConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionFirelensConfiguration","description":"The FireLens configuration for the container. This is used to specify and configure a log router for container logs. For more information, see [Custom Log Routing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html) in the *Amazon Elastic Container Service Developer Guide*."},"healthCheck":{"$ref":"#/types/aws-native:ecs:TaskDefinitionHealthCheck","description":"The container health check command and associated configuration parameters for the container. This parameter maps to ``HealthCheck`` in the docker container create command and the ``HEALTHCHECK`` parameter of docker run."},"hostname":{"type":"string","description":"The hostname to use for your container. This parameter maps to ``Hostname`` in the docker container create command and the ``--hostname`` option to docker run.\n  The ``hostname`` parameter is not supported if you're using the ``awsvpc`` network mode."},"image":{"type":"string","description":"The image used to start a container. This string is passed directly to the Docker daemon. By default, images in the Docker Hub registry are available. Other repositories are specified with either ``repository-url/image:tag`` or ``repository-url/image@digest``. For images using tags (repository-url/image:tag), up to 255 characters total are allowed, including letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs (#). For images using digests (repository-url/image@digest), the 255 character limit applies only to the repository URL and image name (everything before the @ sign). The only supported hash function is sha256, and the hash value after sha256: must be exactly 64 characters (only letters A-F, a-f, and numbers 0-9 are allowed). This parameter maps to ``Image`` in the docker container create command and the ``IMAGE`` parameter of docker run.\n  +  When a new task starts, the Amazon ECS container agent pulls the latest version of the specified image and tag for the container to use. However, subsequent updates to a repository image aren't propagated to already running tasks.\n  +  Images in Amazon ECR repositories can be specified by either using the full ``registry/repository:tag`` or ``registry/repository@digest``. For example, ``012345678910.dkr.ecr.\u003cregion-name\u003e.amazonaws.com/\u003crepository-name\u003e:latest`` or ``012345678910.dkr.ecr.\u003cregion-name\u003e.amazonaws.com/\u003crepository-name\u003e@sha256:94afd1f2e64d908bc90dbca0035a5b567EXAMPLE``. \n  +  Images in official repositories on Docker Hub use a single name (for example, ``ubuntu`` or ``mongo``).\n  +  Images in other repositories on Docker Hub are qualified with an organization name (for example, ``amazon/amazon-ecs-agent``).\n  +  Images in other online repositories are qualified further by a domain name (for example, ``quay.io/assemblyline/ubuntu``)."},"interactive":{"type":"boolean","description":"When this parameter is ``true``, you can deploy containerized applications that require ``stdin`` or a ``tty`` to be allocated. This parameter maps to ``OpenStdin`` in the docker container create command and the ``--interactive`` option to docker run."},"links":{"type":"array","items":{"type":"string"},"description":"The ``links`` parameter allows containers to communicate with each other without the need for port mappings. This parameter is only supported if the network mode of a task definition is ``bridge``. The ``name:internalName`` construct is analogous to ``name:alias`` in Docker links. Up to 255 letters (uppercase and lowercase), numbers, underscores, and hyphens are allowed.. This parameter maps to ``Links`` in the docker container create command and the ``--link`` option to docker run.\n  This parameter is not supported for Windows containers.\n   Containers that are collocated on a single container instance may be able to communicate with each other without requiring links or host port mappings. Network isolation is achieved on the container instance using security groups and VPC settings."},"linuxParameters":{"$ref":"#/types/aws-native:ecs:TaskDefinitionLinuxParameters","description":"Linux-specific modifications that are applied to the container, such as Linux kernel capabilities. For more information see [KernelCapabilities](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html).\n  This parameter is not supported for Windows containers."},"logConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionLogConfiguration","description":"The log configuration specification for the container.\n This parameter maps to ``LogConfig`` in the docker Create a container command and the ``--log-driver`` option to docker run. By default, containers use the same logging driver that the Docker daemon uses. However, the container may use a different logging driver than the Docker daemon by specifying a log driver with this parameter in the container definition. To use a different logging driver for a container, the log system must be configured properly on the container instance (or on a different log server for remote logging options). For more information on the options for different supported log drivers, see [Configure logging drivers](https://docs.aws.amazon.com/https://docs.docker.com/engine/admin/logging/overview/) in the Docker documentation.\n  Amazon ECS currently supports a subset of the logging drivers available to the Docker daemon (shown in the [LogConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html) data type). Additional log drivers may be available in future releases of the Amazon ECS container agent.\n  This parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: ``sudo docker version --format '{{.Server.APIVersion}}'``\n  The Amazon ECS container agent running on a container instance must register the logging drivers available on that instance with the ``ECS_AVAILABLE_LOGGING_DRIVERS`` environment variable before containers placed on that instance can use these log configuration options. For more information, see [Container Agent Configuration](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-config.html) in the *Developer Guide*."},"memory":{"type":"integer","description":"The amount (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed. The total amount of memory reserved for all containers within a task must be lower than the task ``memory`` value, if one is specified. This parameter maps to ``Memory`` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the ``--memory`` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/#security-configuration).\n If using the Fargate launch type, this parameter is optional.\n If using the EC2 launch type, you must specify either a task-level memory value or a container-level memory value. If you specify both a container-level ``memory`` and ``memoryReservation`` value, ``memory`` must be greater than ``memoryReservation``. If you specify ``memoryReservation``, then that value is subtracted from the available memory resources for the container instance where the container is placed. Otherwise, the value of ``memory`` is used.\n The Docker 20.10.0 or later daemon reserves a minimum of 6 MiB of memory for a container, so you should not specify fewer than 6 MiB of memory for your containers.\n The Docker 19.03.13-ce or earlier daemon reserves a minimum of 4 MiB of memory for a container, so you should not specify fewer than 4 MiB of memory for your containers."},"memoryReservation":{"type":"integer","description":"The soft limit (in MiB) of memory to reserve for the container. When system memory is under heavy contention, Docker attempts to keep the container memory to this soft limit. However, your container can consume more memory when it needs to, up to either the hard limit specified with the ``memory`` parameter (if applicable), or all of the available memory on the container instance, whichever comes first. This parameter maps to ``MemoryReservation`` in the docker container create command and the ``--memory-reservation`` option to docker run.\n If a task-level memory value is not specified, you must specify a non-zero integer for one or both of ``memory`` or ``memoryReservation`` in a container definition. If you specify both, ``memory`` must be greater than ``memoryReservation``. If you specify ``memoryReservation``, then that value is subtracted from the available memory resources for the container instance where the container is placed. Otherwise, the value of ``memory`` is used.\n For example, if your container normally uses 128 MiB of memory, but occasionally bursts to 256 MiB of memory for short periods of time, you can set a ``memoryReservation`` of 128 MiB, and a ``memory`` hard limit of 300 MiB. This configuration would allow the container to only reserve 128 MiB of memory from the remaining resources on the container instance, but also allow the container to consume more memory resources when needed.\n The Docker 20.10.0 or later daemon reserves a minimum of 6 MiB of memory for a container. So, don't specify less than 6 MiB of memory for your containers. \n The Docker 19.03.13-ce or earlier daemon reserves a minimum of 4 MiB of memory for a container. So, don't specify less than 4 MiB of memory for your containers."},"mountPoints":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionMountPoint"},"description":"The mount points for data volumes in your container.\n This parameter maps to ``Volumes`` in the docker container create command and the ``--volume`` option to docker run.\n Windows containers can mount whole directories on the same drive as ``$env:ProgramData``. Windows containers can't mount directories on a different drive, and mount point can't be across drives."},"name":{"type":"string","description":"The name of a container. If you're linking multiple containers together in a task definition, the ``name`` of one container can be entered in the ``links`` of another container to connect the containers. Up to 255 letters (uppercase and lowercase), numbers, underscores, and hyphens are allowed. This parameter maps to ``name`` in the docker container create command and the ``--name`` option to docker run."},"portMappings":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionPortMapping"},"description":"The list of port mappings for the container. Port mappings allow containers to access ports on the host container instance to send or receive traffic.\n For task definitions that use the ``awsvpc`` network mode, you should only specify the ``containerPort``. The ``hostPort`` can be left blank or it must be the same value as the ``containerPort``.\n Port mappings on Windows use the ``NetNAT`` gateway address rather than ``localhost``. There is no loopback for port mappings on Windows, so you cannot access a container's mapped port from the host itself. \n This parameter maps to ``PortBindings`` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the ``--publish`` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/). If the network mode of a task definition is set to ``none``, then you can't specify port mappings. If the network mode of a task definition is set to ``host``, then host ports must either be undefined or they must match the container port in the port mapping.\n  After a task reaches the ``RUNNING`` status, manual and automatic host and container port assignments are visible in the *Network Bindings* section of a container description for a selected task in the Amazon ECS console. The assignments are also visible in the ``networkBindings`` section [DescribeTasks](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeTasks.html) responses."},"privileged":{"type":"boolean","description":"When this parameter is true, the container is given elevated privileges on the host container instance (similar to the ``root`` user). This parameter maps to ``Privileged`` in the docker container create command and the ``--privileged`` option to docker run\n  This parameter is not supported for Windows containers or tasks run on FARGATElong."},"pseudoTerminal":{"type":"boolean","description":"When this parameter is ``true``, a TTY is allocated. This parameter maps to ``Tty`` in the docker container create command and the ``--tty`` option to docker run."},"readonlyRootFilesystem":{"type":"boolean","description":"When this parameter is true, the container is given read-only access to its root file system. This parameter maps to ``ReadonlyRootfs`` in the docker container create command and the ``--read-only`` option to docker run.\n  This parameter is not supported for Windows containers."},"repositoryCredentials":{"$ref":"#/types/aws-native:ecs:TaskDefinitionRepositoryCredentials","description":"The private repository authentication credentials to use."},"resourceRequirements":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionResourceRequirement"},"description":"The type and amount of a resource to assign to a container. The only supported resource is a GPU."},"restartPolicy":{"$ref":"#/types/aws-native:ecs:TaskDefinitionRestartPolicy","description":"The restart policy for a container. When you set up a restart policy, Amazon ECS can restart the container without needing to replace the task. For more information, see [Restart individual containers in Amazon ECS tasks with container restart policies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html) in the *Amazon Elastic Container Service Developer Guide*."},"secrets":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionSecret"},"description":"The secrets to pass to the container. For more information, see [Specifying Sensitive Data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the *Amazon Elastic Container Service Developer Guide*."},"startTimeout":{"type":"integer","description":"Time duration (in seconds) to wait before giving up on resolving dependencies for a container. For example, you specify two containers in a task definition with containerA having a dependency on containerB reaching a ``COMPLETE``, ``SUCCESS``, or ``HEALTHY`` status. If a ``startTimeout`` value is specified for containerB and it doesn't reach the desired status within that time then containerA gives up and not start. This results in the task transitioning to a ``STOPPED`` state.\n  When the ``ECS_CONTAINER_START_TIMEOUT`` container agent configuration variable is used, it's enforced independently from this start timeout value.\n  For tasks using the Fargate launch type, the task or service requires the following platforms:\n  +  Linux platform version ``1.3.0`` or later.\n  +  Windows platform version ``1.0.0`` or later.\n  \n For tasks using the EC2 launch type, your container instances require at least version ``1.26.0`` of the container agent to use a container start timeout value. However, we recommend using the latest container agent version. For information about checking your agent version and updating to the latest version, see [Updating the Amazon ECS Container Agent](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html) in the *Amazon Elastic Container Service Developer Guide*. If you're using an Amazon ECS-optimized Linux AMI, your instance needs at least version ``1.26.0-1`` of the ``ecs-init`` package. If your container instances are launched from version ``20190301`` or later, then they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) in the *Amazon Elastic Container Service Developer Guide*.\n The valid values for Fargate are 2-120 seconds."},"stopTimeout":{"type":"integer","description":"Time duration (in seconds) to wait before the container is forcefully killed if it doesn't exit normally on its own.\n For tasks using the Fargate launch type, the task or service requires the following platforms:\n  +  Linux platform version ``1.3.0`` or later.\n  +  Windows platform version ``1.0.0`` or later.\n  \n For tasks that use the Fargate launch type, the max stop timeout value is 120 seconds and if the parameter is not specified, the default value of 30 seconds is used.\n For tasks that use the EC2 launch type, if the ``stopTimeout`` parameter isn't specified, the value set for the Amazon ECS container agent configuration variable ``ECS_CONTAINER_STOP_TIMEOUT`` is used. If neither the ``stopTimeout`` parameter or the ``ECS_CONTAINER_STOP_TIMEOUT`` agent configuration variable are set, then the default values of 30 seconds for Linux containers and 30 seconds on Windows containers are used. Your container instances require at least version 1.26.0 of the container agent to use a container stop timeout value. However, we recommend using the latest container agent version. For information about checking your agent version and updating to the latest version, see [Updating the Amazon ECS Container Agent](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html) in the *Amazon Elastic Container Service Developer Guide*. If you're using an Amazon ECS-optimized Linux AMI, your instance needs at least version 1.26.0-1 of the ``ecs-init`` package. If your container instances are launched from version ``20190301`` or later, then they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) in the *Amazon Elastic Container Service Developer Guide*.\n The valid values for Fargate are 2-120 seconds."},"systemControls":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionSystemControl"},"description":"A list of namespaced kernel parameters to set in the container. This parameter maps to ``Sysctls`` in the docker container create command and the ``--sysctl`` option to docker run. For example, you can configure ``net.ipv4.tcp_keepalive_time`` setting to maintain longer lived connections."},"ulimits":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionUlimit"},"description":"A list of ``ulimits`` to set in the container. This parameter maps to ``Ulimits`` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/#operation/ContainerCreate) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.35/) and the ``--ulimit`` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/). Valid naming values are displayed in the [Ulimit](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_Ulimit.html) data type. This parameter requires version 1.18 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: ``sudo docker version --format '{{.Server.APIVersion}}'``\n  This parameter is not supported for Windows containers."},"user":{"type":"string","description":"The user to use inside the container. This parameter maps to ``User`` in the docker container create command and the ``--user`` option to docker run.\n  When running tasks using the ``host`` network mode, don't run containers using the root user (UID 0). We recommend using a non-root user for better security.\n  You can specify the ``user`` using the following formats. If specifying a UID or GID, you must specify it as a positive integer.\n  +   ``user`` \n  +   ``user:group`` \n  +   ``uid`` \n  +   ``uid:gid`` \n  +   ``user:gid`` \n  +   ``uid:group`` \n  \n  This parameter is not supported for Windows containers."},"versionConsistency":{"$ref":"#/types/aws-native:ecs:TaskDefinitionContainerDefinitionVersionConsistency","description":"Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is ``enabled``. If you set the value for a container as ``disabled``, Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide*."},"volumesFrom":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionVolumeFrom"},"description":"Data volumes to mount from another container. This parameter maps to ``VolumesFrom`` in the docker container create command and the ``--volumes-from`` option to docker run."},"workingDirectory":{"type":"string","description":"The working directory to run commands inside the container in. This parameter maps to ``WorkingDir`` in the docker container create command and the ``--workdir`` option to docker run."}},"type":"object","required":["image","name"]},"aws-native:ecs:TaskDefinitionContainerDefinitionVersionConsistency":{"description":"Specifies whether Amazon ECS will resolve the container image tag provided in the container definition to an image digest. By default, the value is ``enabled``. If you set the value for a container as ``disabled``, Amazon ECS will not resolve the provided container image tag to a digest and will use the original image URI specified in the container definition for deployment. For more information about container image resolution, see [Container image resolution](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-ecs.html#deployment-container-image-stability) in the *Amazon ECS Developer Guide*.","type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:ecs:TaskDefinitionContainerDependency":{"description":"The ``ContainerDependency`` property specifies the dependencies defined for container startup and shutdown. A container can contain multiple dependencies. When a dependency is defined for container startup, for container shutdown it is reversed.\n Your Amazon ECS container instances require at least version 1.26.0 of the container agent to enable container dependencies. However, we recommend using the latest container agent version. For information about checking your agent version and updating to the latest version, see [Updating the Amazon ECS Container Agent](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html) in the *Amazon Elastic Container Service Developer Guide*. If you are using an Amazon ECS-optimized Linux AMI, your instance needs at least version 1.26.0-1 of the ``ecs-init`` package. If your container instances are launched from version ``20190301`` or later, then they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) in the *Amazon Elastic Container Service Developer Guide*.\n  For tasks using the Fargate launch type, this parameter requires that the task or service uses platform version 1.3.0 or later.","properties":{"condition":{"type":"string","description":"The dependency condition of the container. The following are the available conditions and their behavior:\n  +  ``START`` - This condition emulates the behavior of links and volumes today. It validates that a dependent container is started before permitting other containers to start.\n  +  ``COMPLETE`` - This condition validates that a dependent container runs to completion (exits) before permitting other containers to start. This can be useful for nonessential containers that run a script and then exit. This condition can't be set on an essential container.\n  +  ``SUCCESS`` - This condition is the same as ``COMPLETE``, but it also requires that the container exits with a ``zero`` status. This condition can't be set on an essential container.\n  +  ``HEALTHY`` - This condition validates that the dependent container passes its Docker health check before permitting other containers to start. This requires that the dependent container has health checks configured. This condition is confirmed only at task startup."},"containerName":{"type":"string","description":"The name of a container."}},"type":"object"},"aws-native:ecs:TaskDefinitionDevice":{"description":"The ``Device`` property specifies an object representing a container instance host device.","properties":{"containerPath":{"type":"string","description":"The path inside the container at which to expose the host device."},"hostPath":{"type":"string","description":"The path for the device on the host container instance."},"permissions":{"type":"array","items":{"type":"string"},"description":"The explicit permissions to provide to the container for the device. By default, the container has permissions for ``read``, ``write``, and ``mknod`` for the device."}},"type":"object"},"aws-native:ecs:TaskDefinitionDockerVolumeConfiguration":{"description":"The ``DockerVolumeConfiguration`` property specifies a Docker volume configuration and is used when you use Docker volumes. Docker volumes are only supported when you are using the EC2 launch type. Windows containers only support the use of the ``local`` driver. To use bind mounts, specify a ``host`` instead.","properties":{"autoprovision":{"type":"boolean","description":"If this value is ``true``, the Docker volume is created if it doesn't already exist.\n  This field is only used if the ``scope`` is ``shared``."},"driver":{"type":"string","description":"The Docker volume driver to use. The driver value must match the driver name provided by Docker because it is used for task placement. If the driver was installed using the Docker plugin CLI, use ``docker plugin ls`` to retrieve the driver name from your container instance. If the driver was installed using another method, use Docker plugin discovery to retrieve the driver name. This parameter maps to ``Driver`` in the docker container create command and the ``xxdriver`` option to docker volume create."},"driverOpts":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of Docker driver-specific options passed through. This parameter maps to ``DriverOpts`` in the docker create-volume command and the ``xxopt`` option to docker volume create."},"labels":{"type":"object","additionalProperties":{"type":"string"},"description":"Custom metadata to add to your Docker volume. This parameter maps to ``Labels`` in the docker container create command and the ``xxlabel`` option to docker volume create."},"scope":{"type":"string","description":"The scope for the Docker volume that determines its lifecycle. Docker volumes that are scoped to a ``task`` are automatically provisioned when the task starts and destroyed when the task stops. Docker volumes that are scoped as ``shared`` persist after the task stops."}},"type":"object"},"aws-native:ecs:TaskDefinitionEfsVolumeConfiguration":{"description":"This parameter is specified when you're using an Amazon Elastic File System file system for task storage. For more information, see [Amazon EFS volumes](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/efs-volumes.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"authorizationConfig":{"$ref":"#/types/aws-native:ecs:TaskDefinitionAuthorizationConfig","description":"The authorization configuration details for the Amazon EFS file system."},"filesystemId":{"type":"string","description":"The Amazon EFS file system ID to use."},"rootDirectory":{"type":"string","description":"The directory within the Amazon EFS file system to mount as the root directory inside the host. If this parameter is omitted, the root of the Amazon EFS volume will be used. Specifying ``/`` will have the same effect as omitting this parameter.\n  If an EFS access point is specified in the ``authorizationConfig``, the root directory parameter must either be omitted or set to ``/`` which will enforce the path set on the EFS access point."},"transitEncryption":{"$ref":"#/types/aws-native:ecs:TaskDefinitionEfsVolumeConfigurationTransitEncryption","description":"Determines whether to use encryption for Amazon EFS data in transit between the Amazon ECS host and the Amazon EFS server. Transit encryption must be turned on if Amazon EFS IAM authorization is used. If this parameter is omitted, the default value of ``DISABLED`` is used. For more information, see [Encrypting data in transit](https://docs.aws.amazon.com/efs/latest/ug/encryption-in-transit.html) in the *Amazon Elastic File System User Guide*."},"transitEncryptionPort":{"type":"integer","description":"The port to use when sending encrypted data between the Amazon ECS host and the Amazon EFS server. If you do not specify a transit encryption port, it will use the port selection strategy that the Amazon EFS mount helper uses. For more information, see [EFS mount helper](https://docs.aws.amazon.com/efs/latest/ug/efs-mount-helper.html) in the *Amazon Elastic File System User Guide*."}},"type":"object","required":["filesystemId"]},"aws-native:ecs:TaskDefinitionEfsVolumeConfigurationTransitEncryption":{"description":"Determines whether to use encryption for Amazon EFS data in transit between the Amazon ECS host and the Amazon EFS server. Transit encryption must be turned on if Amazon EFS IAM authorization is used. If this parameter is omitted, the default value of ``DISABLED`` is used. For more information, see [Encrypting data in transit](https://docs.aws.amazon.com/efs/latest/ug/encryption-in-transit.html) in the *Amazon Elastic File System User Guide*.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:ecs:TaskDefinitionEnvironmentFile":{"description":"A list of files containing the environment variables to pass to a container. You can specify up to ten environment files. The file must have a ``.env`` file extension. Each line in an environment file should contain an environment variable in ``VARIABLE=VALUE`` format. Lines beginning with ``#`` are treated as comments and are ignored.\n If there are environment variables specified using the ``environment`` parameter in a container definition, they take precedence over the variables contained within an environment file. If multiple environment files are specified that contain the same variable, they're processed from the top down. We recommend that you use unique variable names. For more information, see [Use a file to pass environment variables to a container](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/use-environment-file.html) in the *Amazon Elastic Container Service Developer Guide*.\n Environment variable files are objects in Amazon S3 and all Amazon S3 security considerations apply. \n You must use the following platforms for the Fargate launch type:\n  +  Linux platform version ``1.4.0`` or later.\n  +  Windows platform version ``1.0.0`` or later.\n  \n Consider the following when using the Fargate launch type:\n  +  The file is handled like a native Docker env-file.\n  +  There is no support for shell escape handling.\n  +  The container entry point interperts the ``VARIABLE`` values.","properties":{"type":{"type":"string","description":"The file type to use. Environment files are objects in Amazon S3. The only supported value is ``s3``."},"value":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 object containing the environment variable file."}},"type":"object"},"aws-native:ecs:TaskDefinitionEphemeralStorage":{"description":"The amount of ephemeral storage to allocate for the task. This parameter is used to expand the total amount of ephemeral storage available, beyond the default amount, for tasks hosted on FARGATElong. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html) in the *Amazon ECS Developer Guide;*.\n  For tasks using the Fargate launch type, the task requires the following platforms:\n  +  Linux platform version ``1.4.0`` or later.\n  +  Windows platform version ``1.0.0`` or later.","properties":{"sizeInGiB":{"type":"integer","description":"The total amount, in GiB, of ephemeral storage to set for the task. The minimum supported value is ``21`` GiB and the maximum supported value is ``200`` GiB."}},"type":"object"},"aws-native:ecs:TaskDefinitionFSxAuthorizationConfig":{"description":"The authorization configuration details for Amazon FSx for Windows File Server file system. See [FSxWindowsFileServerVolumeConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_FSxWindowsFileServerVolumeConfiguration.html) in the *Amazon ECS API Reference*.\n For more information and the input format, see [Amazon FSx for Windows File Server Volumes](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/wfsx-volumes.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"credentialsParameter":{"type":"string","description":"The authorization credential option to use. The authorization credential options can be provided using either the Amazon Resource Name (ARN) of an ASMlong secret or SSM Parameter Store parameter. The ARN refers to the stored credentials."},"domain":{"type":"string","description":"A fully qualified domain name hosted by an [](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_microsoft_ad.html) Managed Microsoft AD (Active Directory) or self-hosted AD on Amazon EC2."}},"type":"object","required":["credentialsParameter","domain"]},"aws-native:ecs:TaskDefinitionFSxWindowsFileServerVolumeConfiguration":{"description":"This parameter is specified when you're using [Amazon FSx for Windows File Server](https://docs.aws.amazon.com/fsx/latest/WindowsGuide/what-is.html) file system for task storage.\n For more information and the input format, see [Amazon FSx for Windows File Server volumes](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/wfsx-volumes.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"authorizationConfig":{"$ref":"#/types/aws-native:ecs:TaskDefinitionFSxAuthorizationConfig","description":"The authorization configuration details for the Amazon FSx for Windows File Server file system."},"fileSystemId":{"type":"string","description":"The Amazon FSx for Windows File Server file system ID to use."},"rootDirectory":{"type":"string","description":"The directory within the Amazon FSx for Windows File Server file system to mount as the root directory inside the host."}},"type":"object","required":["fileSystemId","rootDirectory"]},"aws-native:ecs:TaskDefinitionFirelensConfiguration":{"description":"The FireLens configuration for the container. This is used to specify and configure a log router for container logs. For more information, see [Custom log routing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"options":{"type":"object","additionalProperties":{"type":"string"},"description":"The options to use when configuring the log router. This field is optional and can be used to add additional metadata, such as the task, task definition, cluster, and container instance details to the log event.\n  If specified, valid option keys are:\n  +  ``enable-ecs-log-metadata``, which can be ``true`` or ``false``\n  +  ``config-file-type``, which can be ``s3`` or ``file``\n  +  ``config-file-value``, which is either an S3 ARN or a file path"},"type":{"type":"string","description":"The log router to use. The valid values are ``fluentd`` or ``fluentbit``."}},"type":"object"},"aws-native:ecs:TaskDefinitionHealthCheck":{"description":"The ``HealthCheck`` property specifies an object representing a container health check. Health check parameters that are specified in a container definition override any Docker health checks that exist in the container image (such as those specified in a parent image or from the image's Dockerfile). This configuration maps to the ``HEALTHCHECK`` parameter of docker run.\n  The Amazon ECS container agent only monitors and reports on the health checks specified in the task definition. Amazon ECS does not monitor Docker health checks that are embedded in a container image and not specified in the container definition. Health check parameters that are specified in a container definition override any Docker health checks that exist in the container image.\n  If a task is run manually, and not as part of a service, the task will continue its lifecycle regardless of its health status. For tasks that are part of a service, if the task reports as unhealthy then the task will be stopped and the service scheduler will replace it.\n The following are notes about container health check support:\n  +  Container health checks require version 1.17.0 or greater of the Amazon ECS container agent. For more information, see [Updating the Amazon ECS Container Agent](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-agent-update.html).\n  +  Container health checks are supported for Fargate tasks if you are using platform version 1.1.0 or greater. For more information, see [Platform Versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html).\n  +  Container health checks are not supported for tasks that are part of a service that is configured to use a Classic Load Balancer.","properties":{"command":{"type":"array","items":{"type":"string"},"description":"A string array representing the command that the container runs to determine if it is healthy. The string array must start with ``CMD`` to run the command arguments directly, or ``CMD-SHELL`` to run the command with the container's default shell. \n  When you use the AWS Management Console JSON panel, the CLIlong, or the APIs, enclose the list of commands in double quotes and brackets.\n  ``[ \"CMD-SHELL\", \"curl -f http://localhost/ || exit 1\" ]`` \n You don't include the double quotes and brackets when you use the AWS Management Console.\n  ``CMD-SHELL, curl -f http://localhost/ || exit 1`` \n An exit code of 0 indicates success, and non-zero exit code indicates failure. For more information, see ``HealthCheck`` in the docker container create command."},"interval":{"type":"integer","description":"The time period in seconds between each health check execution. You may specify between 5 and 300 seconds. The default value is 30 seconds. This value applies only when you specify a ``command``."},"retries":{"type":"integer","description":"The number of times to retry a failed health check before the container is considered unhealthy. You may specify between 1 and 10 retries. The default value is 3. This value applies only when you specify a ``command``."},"startPeriod":{"type":"integer","description":"The optional grace period to provide containers time to bootstrap before failed health checks count towards the maximum number of retries. You can specify between 0 and 300 seconds. By default, the ``startPeriod`` is off. This value applies only when you specify a ``command``. \n  If a health check succeeds within the ``startPeriod``, then the container is considered healthy and any subsequent failures count toward the maximum number of retries."},"timeout":{"type":"integer","description":"The time period in seconds to wait for a health check to succeed before it is considered a failure. You may specify between 2 and 60 seconds. The default value is 5. This value applies only when you specify a ``command``."}},"type":"object"},"aws-native:ecs:TaskDefinitionHostEntry":{"description":"The ``HostEntry`` property specifies a hostname and an IP address that are added to the ``/etc/hosts`` file of a container through the ``extraHosts`` parameter of its ``ContainerDefinition`` resource.","properties":{"hostname":{"type":"string","description":"The hostname to use in the ``/etc/hosts`` entry."},"ipAddress":{"type":"string","description":"The IP address to use in the ``/etc/hosts`` entry."}},"type":"object"},"aws-native:ecs:TaskDefinitionHostVolumeProperties":{"description":"The ``HostVolumeProperties`` property specifies details on a container instance bind mount host volume.","properties":{"sourcePath":{"type":"string","description":"When the ``host`` parameter is used, specify a ``sourcePath`` to declare the path on the host container instance that's presented to the container. If this parameter is empty, then the Docker daemon has assigned a host path for you. If the ``host`` parameter contains a ``sourcePath`` file location, then the data volume persists at the specified location on the host container instance until you delete it manually. If the ``sourcePath`` value doesn't exist on the host container instance, the Docker daemon creates it. If the location does exist, the contents of the source path folder are exported.\n If you're using the Fargate launch type, the ``sourcePath`` parameter is not supported."}},"type":"object"},"aws-native:ecs:TaskDefinitionInferenceAccelerator":{"properties":{"deviceName":{"type":"string"},"deviceType":{"type":"string"}},"type":"object"},"aws-native:ecs:TaskDefinitionKernelCapabilities":{"description":"The Linux capabilities to add or remove from the default Docker configuration for a container defined in the task definition. For more detailed information about these Linux capabilities, see the [capabilities(7)](https://docs.aws.amazon.com/http://man7.org/linux/man-pages/man7/capabilities.7.html) Linux manual page.\n The following describes how Docker processes the Linux capabilities specified in the ``add`` and ``drop`` request parameters. For information about the latest behavior, see [Docker Compose: order of cap_drop and cap_add](https://docs.aws.amazon.com/https://forums.docker.com/t/docker-compose-order-of-cap-drop-and-cap-add/97136/1) in the Docker Community Forum.\n  +  When the container is a privleged container, the container capabilities are all of the default Docker capabilities. The capabilities specified in the ``add`` request parameter, and the ``drop`` request parameter are ignored.\n  +  When the ``add`` request parameter is set to ALL, the container capabilities are all of the default Docker capabilities, excluding those specified in the ``drop`` request parameter.\n  +  When the ``drop`` request parameter is set to ALL, the container capabilities are the capabilities specified in the ``add`` request parameter.\n  +  When the ``add`` request parameter and the ``drop`` request parameter are both empty, the capabilities the container capabilities are all of the default Docker capabilities.\n  +  The default is to first drop the capabilities specified in the ``drop`` request parameter, and then add the capabilities specified in the ``add`` request parameter.","properties":{"add":{"type":"array","items":{"type":"string"},"description":"The Linux capabilities for the container that have been added to the default configuration provided by Docker. This parameter maps to ``CapAdd`` in the docker container create command and the ``--cap-add`` option to docker run.\n  Tasks launched on FARGATElong only support adding the ``SYS_PTRACE`` kernel capability.\n  Valid values: ``\"ALL\" | \"AUDIT_CONTROL\" | \"AUDIT_WRITE\" | \"BLOCK_SUSPEND\" | \"CHOWN\" | \"DAC_OVERRIDE\" | \"DAC_READ_SEARCH\" | \"FOWNER\" | \"FSETID\" | \"IPC_LOCK\" | \"IPC_OWNER\" | \"KILL\" | \"LEASE\" | \"LINUX_IMMUTABLE\" | \"MAC_ADMIN\" | \"MAC_OVERRIDE\" | \"MKNOD\" | \"NET_ADMIN\" | \"NET_BIND_SERVICE\" | \"NET_BROADCAST\" | \"NET_RAW\" | \"SETFCAP\" | \"SETGID\" | \"SETPCAP\" | \"SETUID\" | \"SYS_ADMIN\" | \"SYS_BOOT\" | \"SYS_CHROOT\" | \"SYS_MODULE\" | \"SYS_NICE\" | \"SYS_PACCT\" | \"SYS_PTRACE\" | \"SYS_RAWIO\" | \"SYS_RESOURCE\" | \"SYS_TIME\" | \"SYS_TTY_CONFIG\" | \"SYSLOG\" | \"WAKE_ALARM\"``"},"drop":{"type":"array","items":{"type":"string"},"description":"The Linux capabilities for the container that have been removed from the default configuration provided by Docker. This parameter maps to ``CapDrop`` in the docker container create command and the ``--cap-drop`` option to docker run.\n Valid values: ``\"ALL\" | \"AUDIT_CONTROL\" | \"AUDIT_WRITE\" | \"BLOCK_SUSPEND\" | \"CHOWN\" | \"DAC_OVERRIDE\" | \"DAC_READ_SEARCH\" | \"FOWNER\" | \"FSETID\" | \"IPC_LOCK\" | \"IPC_OWNER\" | \"KILL\" | \"LEASE\" | \"LINUX_IMMUTABLE\" | \"MAC_ADMIN\" | \"MAC_OVERRIDE\" | \"MKNOD\" | \"NET_ADMIN\" | \"NET_BIND_SERVICE\" | \"NET_BROADCAST\" | \"NET_RAW\" | \"SETFCAP\" | \"SETGID\" | \"SETPCAP\" | \"SETUID\" | \"SYS_ADMIN\" | \"SYS_BOOT\" | \"SYS_CHROOT\" | \"SYS_MODULE\" | \"SYS_NICE\" | \"SYS_PACCT\" | \"SYS_PTRACE\" | \"SYS_RAWIO\" | \"SYS_RESOURCE\" | \"SYS_TIME\" | \"SYS_TTY_CONFIG\" | \"SYSLOG\" | \"WAKE_ALARM\"``"}},"type":"object"},"aws-native:ecs:TaskDefinitionKeyValuePair":{"description":"A key-value pair object.","properties":{"name":{"type":"string","description":"The name of the key-value pair. For environment variables, this is the name of the environment variable."},"value":{"type":"string","description":"The value of the key-value pair. For environment variables, this is the value of the environment variable."}},"type":"object"},"aws-native:ecs:TaskDefinitionLinuxParameters":{"description":"The Linux-specific options that are applied to the container, such as Linux [KernelCapabilities](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_KernelCapabilities.html).","properties":{"capabilities":{"$ref":"#/types/aws-native:ecs:TaskDefinitionKernelCapabilities","description":"The Linux capabilities for the container that are added to or dropped from the default configuration provided by Docker.\n  For tasks that use the Fargate launch type, ``capabilities`` is supported for all platform versions but the ``add`` parameter is only supported if using platform version 1.4.0 or later."},"devices":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionDevice"},"description":"Any host devices to expose to the container. This parameter maps to ``Devices`` in the docker container create command and the ``--device`` option to docker run.\n  If you're using tasks that use the Fargate launch type, the ``devices`` parameter isn't supported."},"initProcessEnabled":{"type":"boolean","description":"Run an ``init`` process inside the container that forwards signals and reaps processes. This parameter maps to the ``--init`` option to docker run. This parameter requires version 1.25 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: ``sudo docker version --format '{{.Server.APIVersion}}'``"},"maxSwap":{"type":"integer","description":"The total amount of swap memory (in MiB) a container can use. This parameter will be translated to the ``--memory-swap`` option to docker run where the value would be the sum of the container memory plus the ``maxSwap`` value.\n If a ``maxSwap`` value of ``0`` is specified, the container will not use swap. Accepted values are ``0`` or any positive integer. If the ``maxSwap`` parameter is omitted, the container will use the swap configuration for the container instance it is running on. A ``maxSwap`` value must be set for the ``swappiness`` parameter to be used.\n  If you're using tasks that use the Fargate launch type, the ``maxSwap`` parameter isn't supported.\n If you're using tasks on Amazon Linux 2023 the ``swappiness`` parameter isn't supported."},"sharedMemorySize":{"type":"integer","description":"The value for the size (in MiB) of the ``/dev/shm`` volume. This parameter maps to the ``--shm-size`` option to docker run.\n  If you are using tasks that use the Fargate launch type, the ``sharedMemorySize`` parameter is not supported."},"swappiness":{"type":"integer","description":"This allows you to tune a container's memory swappiness behavior. A ``swappiness`` value of ``0`` will cause swapping to not happen unless absolutely necessary. A ``swappiness`` value of ``100`` will cause pages to be swapped very aggressively. Accepted values are whole numbers between ``0`` and ``100``. If the ``swappiness`` parameter is not specified, a default value of ``60`` is used. If a value is not specified for ``maxSwap`` then this parameter is ignored. This parameter maps to the ``--memory-swappiness`` option to docker run.\n  If you're using tasks that use the Fargate launch type, the ``swappiness`` parameter isn't supported.\n If you're using tasks on Amazon Linux 2023 the ``swappiness`` parameter isn't supported."},"tmpfs":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionTmpfs"},"description":"The container path, mount options, and size (in MiB) of the tmpfs mount. This parameter maps to the ``--tmpfs`` option to docker run.\n  If you're using tasks that use the Fargate launch type, the ``tmpfs`` parameter isn't supported."}},"type":"object"},"aws-native:ecs:TaskDefinitionLogConfiguration":{"description":"The ``LogConfiguration`` property specifies log configuration options to send to a custom log driver for the container.","properties":{"logDriver":{"type":"string","description":"The log driver to use for the container.\n For tasks on FARGATElong, the supported log drivers are ``awslogs``, ``splunk``, and ``awsfirelens``.\n For tasks hosted on Amazon EC2 instances, the supported log drivers are ``awslogs``, ``fluentd``, ``gelf``, ``json-file``, ``journald``, ``syslog``, ``splunk``, and ``awsfirelens``.\n For more information about using the ``awslogs`` log driver, see [Send Amazon ECS logs to CloudWatch](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html) in the *Amazon Elastic Container Service Developer Guide*.\n For more information about using the ``awsfirelens`` log driver, see [Send Amazon ECS logs to an service or Partner](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html).\n  If you have a custom driver that isn't listed, you can fork the Amazon ECS container agent project that's [available on GitHub](https://docs.aws.amazon.com/https://github.com/aws/amazon-ecs-agent) and customize it to work with that driver. We encourage you to submit pull requests for changes that you would like to have included. However, we don't currently provide support for running modified copies of this software."},"options":{"type":"object","additionalProperties":{"type":"string"},"description":"The configuration options to send to the log driver.\n The options you can specify depend on the log driver. Some of the options you can specify when you use the ``awslogs`` log driver to route logs to Amazon CloudWatch include the following:\n  + awslogs-create-group Required: No Specify whether you want the log group to be created automatically. If this option isn't specified, it defaults to false. Your IAM policy must include the logs:CreateLogGroup permission before you attempt to use awslogs-create-group. + awslogs-region Required: Yes Specify the Region that the awslogs log driver is to send your Docker logs to. You can choose to send all of your logs from clusters in different Regions to a single region in CloudWatch Logs. This is so that they're all visible in one location. Otherwise, you can separate them by Region for more granularity. Make sure that the specified log group exists in the Region that you specify with this option. + awslogs-group Required: Yes Make sure to specify a log group that the awslogs log driver sends its log streams to. + awslogs-stream-prefix Required: Yes, when using Fargate.Optional when using EC2. Use the awslogs-stream-prefix option to associate a log stream with the specified prefix, the container name, and the ID of the Amazon ECS task that the container belongs to. If you specify a prefix with this option, then the log stream takes the format prefix-name/container-name/ecs-task-id. If you don't specify a prefix with this option, then the log stream is named after the container ID that's assigned by the Docker daemon on the container instance. Because it's difficult to trace logs back to the container that sent them with just the Docker container ID (which is only available on the container instance), we recommend that you specify a prefix with this option. For Amazon ECS services, you can use the service name as the prefix. Doing so, you can trace log streams to the service that the container belongs to, the name of the container that sent them, and the ID of the task that the container belongs to. You must specify a stream-prefix for your logs to have your logs appear in the Log pane when using the Amazon ECS console. + awslogs-datetime-format Required: No This option defines a multiline start pattern in Python strftime format. A log message consists of a line that matches the pattern and any following lines that don’t match the pattern. The matched line is the delimiter between log messages. One example of a use case for using this format is for parsing output such as a stack dump, which might otherwise be logged in multiple entries. The correct pattern allows it to be captured in a single entry. For more information, see awslogs-datetime-format. You cannot configure both the awslogs-datetime-format and awslogs-multiline-pattern options. Multiline logging performs regular expression parsing and matching of all log messages. This might have a negative impact on logging performance. + awslogs-multiline-pattern Required: No This option defines a multiline start pattern that uses a regular expression. A log message consists of a line that matches the pattern and any following lines that don’t match the pattern. The matched line is the delimiter between log messages. For more information, see awslogs-multiline-pattern. This option is ignored if awslogs-datetime-format is also configured. You cannot configure both the awslogs-datetime-format and awslogs-multiline-pattern options. Multiline logging performs regular expression parsing and matching of all log messages. This might have a negative impact on logging performance. \n The following options apply to all supported log drivers.\n  + mode Required: No Valid values: non-blocking | blocking This option defines the delivery mode of log messages from the container to the log driver specified using logDriver. The delivery mode you choose affects application availability when the flow of logs from container is interrupted. If you use the blocking mode and the flow of logs is interrupted, calls from container code to write to the stdout and stderr streams will block. The logging thread of the application will block as a result. This may cause the application to become unresponsive and lead to container healthcheck failure. If you use the non-blocking mode, the container's logs are instead stored in an in-memory intermediate buffer configured with the max-buffer-size option. This prevents the application from becoming unresponsive when logs cannot be sent. We recommend using this mode if you want to ensure service availability and are okay with some log loss. For more information, see Preventing log loss with non-blocking mode in the awslogs container log driver. You can set a default mode for all containers in a specific Region by using the defaultLogDriverMode account setting. If you don't specify the mode option or configure the account setting, Amazon ECS will default to the non-blocking mode. For more information about the account setting, see Default log driver mode in the Amazon Elastic Container Service Developer Guide. On June 25, 2025, Amazon ECS changed the default log driver mode from blocking to non-blocking to prioritize task availability over logging. To continue using the blocking mode after this change, do one of the following: Set the mode option in your container definition's logConfiguration as blocking. Set the defaultLogDriverMode account setting to blocking. + max-buffer-size Required: No Default value: 10m When non-blocking mode is used, the max-buffer-size log option controls the size of the buffer that's used for intermediate message storage. Make sure to specify an adequate buffer size based on your application. When the buffer fills up, further logs cannot be stored. Logs that cannot be stored are lost. \n To route logs using the ``splunk`` log router, you need to specify a ``splunk-token`` and a ``splunk-url``.\n When you use the ``awsfirelens`` log router to route logs to an AWS Service or AWS Partner Network destination for log storage and analytics, you can set the ``log-driver-buffer-limit`` option to limit the number of events that are buffered in memory, before being sent to the log router container. It can help to resolve potential log loss issue because high throughput might result in memory running out for the buffer inside of Docker.\n Other options you can specify when using ``awsfirelens`` to route logs depend on the destination. When you export logs to Amazon Data Firehose, you can specify the AWS Region with ``region`` and a name for the log stream with ``delivery_stream``.\n When you export logs to Amazon Kinesis Data Streams, you can specify an AWS Region with ``region`` and a data stream name with ``stream``.\n  When you export logs to Amazon OpenSearch Service, you can specify options like ``Name``, ``Host`` (OpenSearch Service endpoint without protocol), ``Port``, ``Index``, ``Type``, ``Aws_auth``, ``Aws_region``, ``Suppress_Type_Name``, and ``tls``. For more information, see [Under the hood: FireLens for Amazon ECS Tasks](https://docs.aws.amazon.com/containers/under-the-hood-firelens-for-amazon-ecs-tasks/).\n When you export logs to Amazon S3, you can specify the bucket using the ``bucket`` option. You can also specify ``region``, ``total_file_size``, ``upload_timeout``, and ``use_put_object`` as options.\n This parameter requires version 1.19 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: ``sudo docker version --format '{{.Server.APIVersion}}'``"},"secretOptions":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionSecret"},"description":"The secrets to pass to the log configuration. For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the *Amazon Elastic Container Service Developer Guide*."}},"type":"object","required":["logDriver"]},"aws-native:ecs:TaskDefinitionMountPoint":{"description":"The details for a volume mount point that's used in a container definition.","properties":{"containerPath":{"type":"string","description":"The path on the container to mount the host volume at."},"readOnly":{"type":"boolean","description":"If this value is ``true``, the container has read-only access to the volume. If this value is ``false``, then the container can write to the volume. The default value is ``false``."},"sourceVolume":{"type":"string","description":"The name of the volume to mount. Must be a volume name referenced in the ``name`` parameter of task definition ``volume``."}},"type":"object"},"aws-native:ecs:TaskDefinitionPlacementConstraint":{"description":"The constraint on task placement in the task definition. For more information, see [Task placement constraints](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-placement-constraints.html) in the *Amazon Elastic Container Service Developer Guide*.\n  Task placement constraints aren't supported for tasks run on FARGATElong.","properties":{"expression":{"type":"string","description":"A cluster query language expression to apply to the constraint. For more information, see [Cluster query language](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-query-language.html) in the *Amazon Elastic Container Service Developer Guide*."},"type":{"type":"string","description":"The type of constraint. The ``MemberOf`` constraint restricts selection to be from a group of valid candidates."}},"type":"object","required":["type"]},"aws-native:ecs:TaskDefinitionPortMapping":{"description":"The ``PortMapping`` property specifies a port mapping. Port mappings allow containers to access ports on the host container instance to send or receive traffic. Port mappings are specified as part of the container definition.\n If you are using containers in a task with the ``awsvpc`` or ``host`` network mode, exposed ports should be specified using ``containerPort``. The ``hostPort`` can be left blank or it must be the same value as the ``containerPort``.\n After a task reaches the ``RUNNING`` status, manual and automatic host and container port assignments are visible in the ``networkBindings`` section of [DescribeTasks](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeTasks.html) API responses.","properties":{"appProtocol":{"$ref":"#/types/aws-native:ecs:TaskDefinitionPortMappingAppProtocol","description":"The application protocol that's used for the port mapping. This parameter only applies to Service Connect. We recommend that you set this parameter to be consistent with the protocol that your application uses. If you set this parameter, Amazon ECS adds protocol-specific connection handling to the Service Connect proxy. If you set this parameter, Amazon ECS adds protocol-specific telemetry in the Amazon ECS console and CloudWatch.\n If you don't set a value for this parameter, then TCP is used. However, Amazon ECS doesn't add protocol-specific telemetry for TCP.\n ``appProtocol`` is immutable in a Service Connect service. Updating this field requires a service deletion and redeployment.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"containerPort":{"type":"integer","description":"The port number on the container that's bound to the user-specified or automatically assigned host port.\n If you use containers in a task with the ``awsvpc`` or ``host`` network mode, specify the exposed ports using ``containerPort``.\n If you use containers in a task with the ``bridge`` network mode and you specify a container port and not a host port, your container automatically receives a host port in the ephemeral port range. For more information, see ``hostPort``. Port mappings that are automatically assigned in this way do not count toward the 100 reserved ports limit of a container instance."},"containerPortRange":{"type":"string","description":"The port number range on the container that's bound to the dynamically mapped host port range. \n The following rules apply when you specify a ``containerPortRange``:\n  +  You must use either the ``bridge`` network mode or the ``awsvpc`` network mode.\n  +  This parameter is available for both the EC2 and FARGATElong launch types.\n  +  This parameter is available for both the Linux and Windows operating systems.\n  +  The container instance must have at least version 1.67.0 of the container agent and at least version 1.67.0-1 of the ``ecs-init`` package \n  +  You can specify a maximum of 100 port ranges per container.\n  +  You do not specify a ``hostPortRange``. The value of the ``hostPortRange`` is set as follows:\n  +  For containers in a task with the ``awsvpc`` network mode, the ``hostPortRange`` is set to the same value as the ``containerPortRange``. This is a static mapping strategy.\n  +  For containers in a task with the ``bridge`` network mode, the Amazon ECS agent finds open host ports from the default ephemeral range and passes it to docker to bind them to the container ports.\n  \n  +  The ``containerPortRange`` valid values are between 1 and 65535.\n  +  A port can only be included in one port mapping per container.\n  +  You cannot specify overlapping port ranges.\n  +  The first port in the range must be less than last port in the range.\n  +  Docker recommends that you turn off the docker-proxy in the Docker daemon config file when you have a large number of ports.\n For more information, see [Issue #11185](https://docs.aws.amazon.com/https://github.com/moby/moby/issues/11185) on the Github website.\n For information about how to turn off the docker-proxy in the Docker daemon config file, see [Docker daemon](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/bootstrap_container_instance.html#bootstrap_docker_daemon) in the *Amazon ECS Developer Guide*.\n  \n You can call [DescribeTasks](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeTasks.html) to view the ``hostPortRange`` which are the host ports that are bound to the container ports."},"hostPort":{"type":"integer","description":"The port number on the container instance to reserve for your container.\n If you specify a ``containerPortRange``, leave this field empty and the value of the ``hostPort`` is set as follows:\n  +  For containers in a task with the ``awsvpc`` network mode, the ``hostPort`` is set to the same value as the ``containerPort``. This is a static mapping strategy.\n  +  For containers in a task with the ``bridge`` network mode, the Amazon ECS agent finds open ports on the host and automatically binds them to the container ports. This is a dynamic mapping strategy.\n  \n If you use containers in a task with the ``awsvpc`` or ``host`` network mode, the ``hostPort`` can either be left blank or set to the same value as the ``containerPort``.\n If you use containers in a task with the ``bridge`` network mode, you can specify a non-reserved host port for your container port mapping, or you can omit the ``hostPort`` (or set it to ``0``) while specifying a ``containerPort`` and your container automatically receives a port in the ephemeral port range for your container instance operating system and Docker version.\n The default ephemeral port range for Docker version 1.6.0 and later is listed on the instance under ``/proc/sys/net/ipv4/ip_local_port_range``. If this kernel parameter is unavailable, the default ephemeral port range from 49153 through 65535 (Linux) or 49152 through 65535 (Windows) is used. Do not attempt to specify a host port in the ephemeral port range as these are reserved for automatic assignment. In general, ports below 32768 are outside of the ephemeral port range.\n The default reserved ports are 22 for SSH, the Docker ports 2375 and 2376, and the Amazon ECS container agent ports 51678-51680. Any host port that was previously specified in a running task is also reserved while the task is running. That is, after a task stops, the host port is released. The current reserved ports are displayed in the ``remainingResources`` of [DescribeContainerInstances](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_DescribeContainerInstances.html) output. A container instance can have up to 100 reserved ports at a time. This number includes the default reserved ports. Automatically assigned ports aren't included in the 100 reserved ports quota."},"name":{"type":"string","description":"The name that's used for the port mapping. This parameter is the name that you use in the ``serviceConnectConfiguration`` and the ``vpcLatticeConfigurations`` of a service. The name can include up to 64 characters. The characters can include lowercase letters, numbers, underscores (_), and hyphens (-). The name can't start with a hyphen."},"protocol":{"type":"string","description":"The protocol used for the port mapping. Valid values are ``tcp`` and ``udp``. The default is ``tcp``. ``protocol`` is immutable in a Service Connect service. Updating this field requires a service deletion and redeployment."}},"type":"object"},"aws-native:ecs:TaskDefinitionPortMappingAppProtocol":{"description":"The application protocol that's used for the port mapping. This parameter only applies to Service Connect. We recommend that you set this parameter to be consistent with the protocol that your application uses. If you set this parameter, Amazon ECS adds protocol-specific connection handling to the Service Connect proxy. If you set this parameter, Amazon ECS adds protocol-specific telemetry in the Amazon ECS console and CloudWatch.\n If you don't set a value for this parameter, then TCP is used. However, Amazon ECS doesn't add protocol-specific telemetry for TCP.\n ``appProtocol`` is immutable in a Service Connect service. Updating this field requires a service deletion and redeployment.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*.","type":"string","enum":[{"name":"Http","value":"http"},{"name":"Http2","value":"http2"},{"name":"Grpc","value":"grpc"}]},"aws-native:ecs:TaskDefinitionProxyConfiguration":{"description":"The configuration details for the App Mesh proxy.\n For tasks that use the EC2 launch type, the container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ``ecs-init`` package to use a proxy configuration. If your container instances are launched from the Amazon ECS optimized AMI version ``20190301`` or later, then they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html)","properties":{"containerName":{"type":"string","description":"The name of the container that will serve as the App Mesh proxy."},"proxyConfigurationProperties":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionKeyValuePair"},"description":"The set of network configuration parameters to provide the Container Network Interface (CNI) plugin, specified as key-value pairs.\n  +  ``IgnoredUID`` - (Required) The user ID (UID) of the proxy container as defined by the ``user`` parameter in a container definition. This is used to ensure the proxy ignores its own traffic. If ``IgnoredGID`` is specified, this field can be empty.\n  +  ``IgnoredGID`` - (Required) The group ID (GID) of the proxy container as defined by the ``user`` parameter in a container definition. This is used to ensure the proxy ignores its own traffic. If ``IgnoredUID`` is specified, this field can be empty.\n  +  ``AppPorts`` - (Required) The list of ports that the application uses. Network traffic to these ports is forwarded to the ``ProxyIngressPort`` and ``ProxyEgressPort``.\n  +  ``ProxyIngressPort`` - (Required) Specifies the port that incoming traffic to the ``AppPorts`` is directed to.\n  +  ``ProxyEgressPort`` - (Required) Specifies the port that outgoing traffic from the ``AppPorts`` is directed to.\n  +  ``EgressIgnoredPorts`` - (Required) The egress traffic going to the specified ports is ignored and not redirected to the ``ProxyEgressPort``. It can be an empty list.\n  +  ``EgressIgnoredIPs`` - (Required) The egress traffic going to the specified IP addresses is ignored and not redirected to the ``ProxyEgressPort``. It can be an empty list."},"type":{"type":"string","description":"The proxy type. The only supported value is ``APPMESH``."}},"type":"object","required":["containerName"]},"aws-native:ecs:TaskDefinitionRepositoryCredentials":{"description":"The repository credentials for private registry authentication.","properties":{"credentialsParameter":{"type":"string","description":"The Amazon Resource Name (ARN) of the secret containing the private repository credentials.\n  When you use the Amazon ECS API, CLI, or AWS SDK, if the secret exists in the same Region as the task that you're launching then you can use either the full ARN or the name of the secret. When you use the AWS Management Console, you must specify the full ARN of the secret."}},"type":"object"},"aws-native:ecs:TaskDefinitionResourceRequirement":{"description":"The type and amount of a resource to assign to a container. The supported resource types are GPUs and Elastic Inference accelerators. For more information, see [Working with GPUs on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-gpu.html) or [Working with Amazon Elastic Inference on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-inference.html) in the *Amazon Elastic Container Service Developer Guide*","properties":{"type":{"type":"string","description":"The type of resource to assign to a container."},"value":{"type":"string","description":"The value for the specified resource type.\n When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on.\n When the type is ``InferenceAccelerator``, the ``value`` matches the ``deviceName`` for an [InferenceAccelerator](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_InferenceAccelerator.html) specified in a task definition."}},"type":"object","required":["type","value"]},"aws-native:ecs:TaskDefinitionRestartPolicy":{"description":"You can enable a restart policy for each container defined in your task definition, to overcome transient failures faster and maintain task availability. When you enable a restart policy for a container, Amazon ECS can restart the container if it exits, without needing to replace the task. For more information, see [Restart individual containers in Amazon ECS tasks with container restart policies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"enabled":{"type":"boolean","description":"Specifies whether a restart policy is enabled for the container."},"ignoredExitCodes":{"type":"array","items":{"type":"integer"},"description":"A list of exit codes that Amazon ECS will ignore and not attempt a restart on. You can specify a maximum of 50 container exit codes. By default, Amazon ECS does not ignore any exit codes."},"restartAttemptPeriod":{"type":"integer","description":"A period of time (in seconds) that the container must run for before a restart can be attempted. A container can be restarted only once every ``restartAttemptPeriod`` seconds. If a container isn't able to run for this time period and exits early, it will not be restarted. You can set a minimum ``restartAttemptPeriod`` of 60 seconds and a maximum ``restartAttemptPeriod`` of 1800 seconds. By default, a container must run for 300 seconds before it can be restarted."}},"type":"object"},"aws-native:ecs:TaskDefinitionRuntimePlatform":{"description":"Information about the platform for the Amazon ECS service or task.\n For more information about ``RuntimePlatform``, see [RuntimePlatform](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#runtime-platform) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"cpuArchitecture":{"type":"string","description":"The CPU architecture.\n You can run your Linux tasks on an ARM-based platform by setting the value to ``ARM64``. This option is available for tasks that run on Linux Amazon EC2 instance, Amazon ECS Managed Instances, or Linux containers on Fargate."},"operatingSystemFamily":{"type":"string","description":"The operating system."}},"type":"object"},"aws-native:ecs:TaskDefinitionSecret":{"description":"An object representing the secret to expose to your container. Secrets can be exposed to a container in the following ways:\n  +  To inject sensitive data into your containers as environment variables, use the ``secrets`` container definition parameter.\n  +  To reference sensitive information in the log configuration of a container, use the ``secretOptions`` container definition parameter.\n  \n For more information, see [Specifying sensitive data](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data.html) in the *Amazon Elastic Container Service Developer Guide*.","properties":{"name":{"type":"string","description":"The name of the secret."},"valueFrom":{"type":"string","description":"The secret to expose to the container. The supported values are either the full ARN of the ASMlong secret or the full ARN of the parameter in the SSM Parameter Store.\n For information about the require IAMlong permissions, see [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-secrets.html#secrets-iam) (for Secrets Manager) or [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-parameters.html) (for Systems Manager Parameter store) in the *Amazon Elastic Container Service Developer Guide*.\n  If the SSM Parameter Store parameter exists in the same Region as the task you're launching, then you can use either the full ARN or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified."}},"type":"object","required":["name","valueFrom"]},"aws-native:ecs:TaskDefinitionSystemControl":{"description":"A list of namespaced kernel parameters to set in the container. This parameter maps to ``Sysctls`` in the docker container create command and the ``--sysctl`` option to docker run. For example, you can configure ``net.ipv4.tcp_keepalive_time`` setting to maintain longer lived connections.\n We don't recommend that you specify network-related ``systemControls`` parameters for multiple containers in a single task that also uses either the ``awsvpc`` or ``host`` network mode. Doing this has the following disadvantages:\n  +  For tasks that use the ``awsvpc`` network mode including Fargate, if you set ``systemControls`` for any container, it applies to all containers in the task. If you set different ``systemControls`` for multiple containers in a single task, the container that's started last determines which ``systemControls`` take effect.\n  +  For tasks that use the ``host`` network mode, the network namespace ``systemControls`` aren't supported.\n  \n If you're setting an IPC resource namespace to use for the containers in the task, the following conditions apply to your system controls. For more information, see [IPC mode](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_definition_ipcmode).\n  +  For tasks that use the ``host`` IPC mode, IPC namespace ``systemControls`` aren't supported.\n  +  For tasks that use the ``task`` IPC mode, IPC namespace ``systemControls`` values apply to all containers within a task.\n  \n  This parameter is not supported for Windows containers.\n   This parameter is only supported for tasks that are hosted on FARGATElong if the tasks are using platform version ``1.4.0`` or later (Linux). This isn't supported for Windows containers on Fargate.","properties":{"namespace":{"type":"string","description":"The namespaced kernel parameter to set a ``value`` for."},"value":{"type":"string","description":"The namespaced kernel parameter to set a ``value`` for.\n Valid IPC namespace values: ``\"kernel.msgmax\" | \"kernel.msgmnb\" | \"kernel.msgmni\" | \"kernel.sem\" | \"kernel.shmall\" | \"kernel.shmmax\" | \"kernel.shmmni\" | \"kernel.shm_rmid_forced\"``, and ``Sysctls`` that start with ``\"fs.mqueue.*\"``\n Valid network namespace values: ``Sysctls`` that start with ``\"net.*\"``. Only namespaced ``Sysctls`` that exist within the container starting with \"net.* are accepted.\n All of these values are supported by Fargate."}},"type":"object"},"aws-native:ecs:TaskDefinitionTag":{"description":"The metadata that you apply to a resource to help you categorize and organize them. Each tag consists of a key and an optional value. You define them.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A ``key`` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that make up a tag. A ``value`` acts as a descriptor within a tag category (key)."}},"type":"object"},"aws-native:ecs:TaskDefinitionTmpfs":{"description":"The container path, mount options, and size of the tmpfs mount.","properties":{"containerPath":{"type":"string","description":"The absolute file path where the tmpfs volume is to be mounted."},"mountOptions":{"type":"array","items":{"type":"string"},"description":"The list of tmpfs volume mount options.\n Valid values: ``\"defaults\" | \"ro\" | \"rw\" | \"suid\" | \"nosuid\" | \"dev\" | \"nodev\" | \"exec\" | \"noexec\" | \"sync\" | \"async\" | \"dirsync\" | \"remount\" | \"mand\" | \"nomand\" | \"atime\" | \"noatime\" | \"diratime\" | \"nodiratime\" | \"bind\" | \"rbind\" | \"unbindable\" | \"runbindable\" | \"private\" | \"rprivate\" | \"shared\" | \"rshared\" | \"slave\" | \"rslave\" | \"relatime\" | \"norelatime\" | \"strictatime\" | \"nostrictatime\" | \"mode\" | \"uid\" | \"gid\" | \"nr_inodes\" | \"nr_blocks\" | \"mpol\"``"},"size":{"type":"integer","description":"The maximum size (in MiB) of the tmpfs volume."}},"type":"object","required":["size"]},"aws-native:ecs:TaskDefinitionUlimit":{"description":"The ``ulimit`` settings to pass to the container.\n Amazon ECS tasks hosted on FARGATElong use the default resource limit values set by the operating system with the exception of the ``nofile`` resource limit parameter which FARGATElong overrides. The ``nofile`` resource limit sets a restriction on the number of open files that a container can use. The default ``nofile`` soft limit is ``65535`` and the default hard limit is ``65535``.\n You can specify the ``ulimit`` settings for a container in a task definition.","properties":{"hardLimit":{"type":"integer","description":"The hard limit for the ``ulimit`` type. The value can be specified in bytes, seconds, or as a count, depending on the ``type`` of the ``ulimit``."},"name":{"type":"string","description":"The ``type`` of the ``ulimit``."},"softLimit":{"type":"integer","description":"The soft limit for the ``ulimit`` type. The value can be specified in bytes, seconds, or as a count, depending on the ``type`` of the ``ulimit``."}},"type":"object","required":["hardLimit","name","softLimit"]},"aws-native:ecs:TaskDefinitionVolume":{"description":"The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a ``name`` and one of either ``configuredAtLaunch``, ``dockerVolumeConfiguration``, ``efsVolumeConfiguration``, ``fsxWindowsFileServerVolumeConfiguration``, or ``host``. If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html).","properties":{"configuredAtLaunch":{"type":"boolean","description":"Indicates whether the volume should be configured at launch time. This is used to create Amazon EBS volumes for standalone tasks or tasks created as part of a service. Each task definition revision may only have one volume configured at launch in the volume configuration.\n To configure a volume at launch time, use this task definition revision and specify a ``volumeConfigurations`` object when calling the ``CreateService``, ``UpdateService``, ``RunTask`` or ``StartTask`` APIs."},"dockerVolumeConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionDockerVolumeConfiguration","description":"This parameter is specified when you use Docker volumes.\n Windows containers only support the use of the ``local`` driver. To use bind mounts, specify the ``host`` parameter instead.\n  Docker volumes aren't supported by tasks run on FARGATElong."},"efsVolumeConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionEfsVolumeConfiguration","description":"This parameter is specified when you use an Amazon Elastic File System file system for task storage."},"fSxWindowsFileServerVolumeConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionFSxWindowsFileServerVolumeConfiguration","description":"This parameter is specified when you use Amazon FSx for Windows File Server file system for task storage."},"host":{"$ref":"#/types/aws-native:ecs:TaskDefinitionHostVolumeProperties","description":"This parameter is specified when you use bind mount host volumes. The contents of the ``host`` parameter determine whether your bind mount host volume persists on the host container instance and where it's stored. If the ``host`` parameter is empty, then the Docker daemon assigns a host path for your data volume. However, the data isn't guaranteed to persist after the containers that are associated with it stop running.\n Windows containers can mount whole directories on the same drive as ``$env:ProgramData``. Windows containers can't mount directories on a different drive, and mount point can't be across drives. For example, you can mount ``C:\\my\\path:C:\\my\\path`` and ``D:\\:D:\\``, but not ``D:\\my\\path:C:\\my\\path`` or ``D:\\:C:\\my\\path``."},"name":{"type":"string","description":"The name of the volume. Up to 255 letters (uppercase and lowercase), numbers, underscores, and hyphens are allowed.\n When using a volume configured at launch, the ``name`` is required and must also be specified as the volume name in the ``ServiceVolumeConfiguration`` or ``TaskVolumeConfiguration`` parameter when creating your service or standalone task.\n For all other types of volumes, this name is referenced in the ``sourceVolume`` parameter of the ``mountPoints`` object in the container definition.\n When a volume is using the ``efsVolumeConfiguration``, the name is required."}},"type":"object"},"aws-native:ecs:TaskDefinitionVolumeFrom":{"description":"Details on a data volume from another container in the same task definition.","properties":{"readOnly":{"type":"boolean","description":"If this value is ``true``, the container has read-only access to the volume. If this value is ``false``, then the container can write to the volume. The default value is ``false``."},"sourceContainer":{"type":"string","description":"The name of another container within the same task definition to mount volumes from."}},"type":"object"},"aws-native:ecs:TaskSetAwsVpcConfiguration":{"description":"The VPC subnets and security groups associated with a task. All specified subnets and security groups must be from the same VPC.","properties":{"assignPublicIp":{"$ref":"#/types/aws-native:ecs:TaskSetAwsVpcConfigurationAssignPublicIp","description":"Whether the task's elastic network interface receives a public IP address. The default value is DISABLED."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups associated with the task or service. If you do not specify a security group, the default security group for the VPC is used. There is a limit of 5 security groups that can be specified per AwsVpcConfiguration."},"subnets":{"type":"array","items":{"type":"string"},"description":"The subnets associated with the task or service. There is a limit of 16 subnets that can be specified per AwsVpcConfiguration."}},"type":"object","required":["subnets"]},"aws-native:ecs:TaskSetAwsVpcConfigurationAssignPublicIp":{"description":"Whether the task's elastic network interface receives a public IP address. The default value is DISABLED.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:ecs:TaskSetCapacityProviderStrategyItem":{"properties":{"base":{"type":"integer","description":"The *base* value designates how many tasks, at a minimum, to run on the specified capacity provider for each service. Only one capacity provider in a capacity provider strategy can have a *base* defined. If no value is specified, the default value of `0` is used.\n\nBase value characteristics:\n\n- Only one capacity provider in a strategy can have a base defined\n- The default value is `0` if not specified\n- The valid range is 0 to 100,000\n- Base requirements are satisfied first before weight distribution"},"capacityProvider":{"type":"string","description":"The short name of the capacity provider. This can be either an AWS managed capacity provider ( `FARGATE` or `FARGATE_SPOT` ) or the name of a custom capacity provider that you created."},"weight":{"type":"integer","description":"The *weight* value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The `weight` value is taken into consideration after the `base` value, if defined, is satisfied.\n\nIf no `weight` value is specified, the default value of `0` is used. When multiple capacity providers are specified within a capacity provider strategy, at least one of the capacity providers must have a weight value greater than zero and any capacity providers with a weight of `0` can't be used to place tasks. If you specify multiple capacity providers in a strategy that all have a weight of `0` , any `RunTask` or `CreateService` actions using the capacity provider strategy will fail.\n\nWeight value characteristics:\n\n- Weight is considered after the base value is satisfied\n- The default value is `0` if not specified\n- The valid range is 0 to 1,000\n- At least one capacity provider must have a weight greater than zero\n- Capacity providers with weight of `0` cannot place tasks\n\nTask distribution logic:\n\n- Base satisfaction: The minimum number of tasks specified by the base value are placed on that capacity provider\n- Weight distribution: After base requirements are met, additional tasks are distributed according to weight ratios\n\nExamples:\n\nEqual Distribution: Two capacity providers both with weight `1` will split tasks evenly after base requirements are met.\n\nWeighted Distribution: If capacityProviderA has weight `1` and capacityProviderB has weight `4` , then for every 1 task on A, 4 tasks will run on B."}},"type":"object"},"aws-native:ecs:TaskSetLaunchType":{"description":"The launch type that new tasks in the task set will use. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html in the Amazon Elastic Container Service Developer Guide. ","type":"string","enum":[{"name":"Ec2","value":"EC2"},{"name":"Fargate","value":"FARGATE"}]},"aws-native:ecs:TaskSetLoadBalancer":{"description":"A load balancer object representing the load balancer to use with the task set. The supported load balancer types are either an Application Load Balancer or a Network Load Balancer. ","properties":{"containerName":{"type":"string","description":"The name of the container (as it appears in a container definition) to associate with the load balancer."},"containerPort":{"type":"integer","description":"The port on the container to associate with the load balancer. This port must correspond to a containerPort in the task definition the tasks in the service are using. For tasks that use the EC2 launch type, the container instance they are launched on must allow ingress traffic on the hostPort of the port mapping."},"targetGroupArn":{"type":"string","description":"The full Amazon Resource Name (ARN) of the Elastic Load Balancing target group or groups associated with a service or task set. A target group ARN is only specified when using an Application Load Balancer or Network Load Balancer. If you are using a Classic Load Balancer this should be omitted. For services using the ECS deployment controller, you can specify one or multiple target groups. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/register-multiple-targetgroups.html in the Amazon Elastic Container Service Developer Guide. For services using the CODE_DEPLOY deployment controller, you are required to define two target groups for the load balancer. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-type-bluegreen.html in the Amazon Elastic Container Service Developer Guide. If your service's task definition uses the awsvpc network mode (which is required for the Fargate launch type), you must choose ip as the target type, not instance, when creating your target groups because tasks that use the awsvpc network mode are associated with an elastic network interface, not an Amazon EC2 instance."}},"type":"object"},"aws-native:ecs:TaskSetNetworkConfiguration":{"description":"An object representing the network configuration for a task or service.","properties":{"awsVpcConfiguration":{"$ref":"#/types/aws-native:ecs:TaskSetAwsVpcConfiguration","description":"The VPC subnets and security groups that are associated with a task.\n\n\u003e All specified subnets and security groups must be from the same VPC."}},"type":"object"},"aws-native:ecs:TaskSetScale":{"properties":{"unit":{"$ref":"#/types/aws-native:ecs:TaskSetScaleUnit","description":"The unit of measure for the scale value."},"value":{"type":"number","description":"The value, specified as a percent total of a service's desiredCount, to scale the task set. Accepted values are numbers between 0 and 100."}},"type":"object"},"aws-native:ecs:TaskSetScaleUnit":{"description":"The unit of measure for the scale value.","type":"string","enum":[{"name":"Percent","value":"PERCENT"}]},"aws-native:ecs:TaskSetServiceRegistry":{"properties":{"containerName":{"type":"string","description":"The container name value, already specified in the task definition, to be used for your service discovery service. If the task definition that your service task specifies uses the bridge or host network mode, you must specify a containerName and containerPort combination from the task definition. If the task definition that your service task specifies uses the awsvpc network mode and a type SRV DNS record is used, you must specify either a containerName and containerPort combination or a port value, but not both."},"containerPort":{"type":"integer","description":"The port value, already specified in the task definition, to be used for your service discovery service. If the task definition your service task specifies uses the bridge or host network mode, you must specify a containerName and containerPort combination from the task definition. If the task definition your service task specifies uses the awsvpc network mode and a type SRV DNS record is used, you must specify either a containerName and containerPort combination or a port value, but not both."},"port":{"type":"integer","description":"The port value used if your service discovery service specified an SRV record. This field may be used if both the awsvpc network mode and SRV records are used."},"registryArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service registry. The currently supported service registry is AWS Cloud Map. For more information, see https://docs.aws.amazon.com/cloud-map/latest/api/API_CreateService.html"}},"type":"object"},"aws-native:ecs:TaskSetTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that make up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that make up a tag. A `value` acts as a descriptor within a tag category (key)."}},"type":"object"},"aws-native:efs:AccessPointCreationInfo":{"description":"Required if the ``RootDirectory`` \u003e ``Path`` specified does not exist. Specifies the POSIX IDs and permissions to apply to the access point's ``RootDirectory`` \u003e ``Path``. If the access point root directory does not exist, EFS creates it with these settings when a client connects to the access point. When specifying ``CreationInfo``, you must include values for all properties. \n Amazon EFS creates a root directory only if you have provided the CreationInfo: OwnUid, OwnGID, and permissions for the directory. If you do not provide this information, Amazon EFS does not create the root directory. If the root directory does not exist, attempts to mount using the access point will fail.\n  If you do not provide ``CreationInfo`` and the specified ``RootDirectory`` does not exist, attempts to mount the file system using the access point will fail.","properties":{"ownerGid":{"type":"string","description":"Specifies the POSIX group ID to apply to the ``RootDirectory``. Accepts values from 0 to 2^32 (4294967295)."},"ownerUid":{"type":"string","description":"Specifies the POSIX user ID to apply to the ``RootDirectory``. Accepts values from 0 to 2^32 (4294967295)."},"permissions":{"type":"string","description":"Specifies the POSIX permissions to apply to the ``RootDirectory``, in the format of an octal number representing the file's mode bits."}},"type":"object","required":["ownerGid","ownerUid","permissions"]},"aws-native:efs:AccessPointPosixUser":{"description":"The full POSIX identity, including the user ID, group ID, and any secondary group IDs, on the access point that is used for all file system operations performed by NFS clients using the access point.","properties":{"gid":{"type":"string","description":"The POSIX group ID used for all file system operations using this access point.","replaceOnChanges":true},"secondaryGids":{"type":"array","items":{"type":"string"},"description":"Secondary POSIX group IDs used for all file system operations using this access point.","replaceOnChanges":true},"uid":{"type":"string","description":"The POSIX user ID used for all file system operations using this access point.","replaceOnChanges":true}},"type":"object","required":["gid","uid"]},"aws-native:efs:AccessPointRootDirectory":{"description":"Specifies the directory on the Amazon EFS file system that the access point provides access to. The access point exposes the specified file system path as the root directory of your file system to applications using the access point. NFS clients using the access point can only access data in the access point's ``RootDirectory`` and its subdirectories.","properties":{"creationInfo":{"$ref":"#/types/aws-native:efs:AccessPointCreationInfo","description":"(Optional) Specifies the POSIX IDs and permissions to apply to the access point's ``RootDirectory``. If the ``RootDirectory`` \u003e ``Path`` specified does not exist, EFS creates the root directory using the ``CreationInfo`` settings when a client connects to an access point. When specifying the ``CreationInfo``, you must provide values for all properties. \n  If you do not provide ``CreationInfo`` and the specified ``RootDirectory`` \u003e ``Path`` does not exist, attempts to mount the file system using the access point will fail.","replaceOnChanges":true},"path":{"type":"string","description":"Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. A path can have up to four subdirectories. If the specified path does not exist, you are required to provide the ``CreationInfo``.","replaceOnChanges":true}},"type":"object"},"aws-native:efs:AccessPointTag":{"description":"A tag is a key-value pair attached to a file system. Allowed characters in the ``Key`` and ``Value`` properties are letters, white space, and numbers that can be represented in UTF-8, and the following characters:``+ - = . _ : /``","properties":{"key":{"type":"string","description":"The tag key (String). The key can't start with ``aws:``."},"value":{"type":"string","description":"The value of the tag key."}},"type":"object"},"aws-native:efs:FileSystemBackupPolicy":{"description":"The backup policy turns automatic backups for the file system on or off.","properties":{"status":{"$ref":"#/types/aws-native:efs:FileSystemBackupPolicyStatus","description":"Set the backup policy status for the file system.\n  +  *ENABLED* - Turns automatic backups on for the file system. \n  +  *DISABLED* - Turns automatic backups off for the file system."}},"type":"object","required":["status"]},"aws-native:efs:FileSystemBackupPolicyStatus":{"description":"Set the backup policy status for the file system.\n  +  *ENABLED* - Turns automatic backups on for the file system. \n  +  *DISABLED* - Turns automatic backups off for the file system.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:efs:FileSystemElasticFileSystemTag":{"description":"A tag is a key-value pair attached to a file system. Allowed characters in the ``Key`` and ``Value`` properties are letters, white space, and numbers that can be represented in UTF-8, and the following characters:``+ - = . _ : /``","properties":{"key":{"type":"string","description":"The tag key (String). The key can't start with ``aws:``."},"value":{"type":"string","description":"The value of the tag key."}},"type":"object","required":["key","value"]},"aws-native:efs:FileSystemLifecyclePolicy":{"description":"Describes a policy used by Lifecycle management that specifies when to transition files into and out of the EFS storage classes. For more information, see [Managing file system storage](https://docs.aws.amazon.com/efs/latest/ug/lifecycle-management-efs.html).\n   +  Each ``LifecyclePolicy`` object can have only a single transition. This means that in a request body, ``LifecyclePolicies`` must be structured as an array of ``LifecyclePolicy`` objects, one object for each transition, ``TransitionToIA``, ``TransitionToArchive``, ``TransitionToPrimaryStorageClass``.\n  +  See the AWS::EFS::FileSystem examples for the correct ``LifecyclePolicy`` structure. Do not use the syntax shown on this page.","properties":{"transitionToArchive":{"type":"string","description":"The number of days after files were last accessed in primary storage (the Standard storage class) at which to move them to Archive storage. Metadata operations such as listing the contents of a directory don't count as file access events."},"transitionToIa":{"type":"string","description":"The number of days after files were last accessed in primary storage (the Standard storage class) at which to move them to Infrequent Access (IA) storage. Metadata operations such as listing the contents of a directory don't count as file access events."},"transitionToPrimaryStorageClass":{"type":"string","description":"Whether to move files back to primary (Standard) storage after they are accessed in IA or Archive storage. Metadata operations such as listing the contents of a directory don't count as file access events."}},"type":"object"},"aws-native:efs:FileSystemProtection":{"description":"Describes the protection on the file system.","properties":{"replicationOverwriteProtection":{"$ref":"#/types/aws-native:efs:FileSystemProtectionReplicationOverwriteProtection","description":"The status of the file system's replication overwrite protection.\n  +  ``ENABLED`` – The file system cannot be used as the destination file system in a replication configuration. The file system is writeable. Replication overwrite protection is ``ENABLED`` by default. \n  +  ``DISABLED`` – The file system can be used as the destination file system in a replication configuration. The file system is read-only and can only be modified by EFS replication.\n  +  ``REPLICATING`` – The file system is being used as the destination file system in a replication configuration. The file system is read-only and is modified only by EFS replication.\n  \n If the replication configuration is deleted, the file system's replication overwrite protection is re-enabled, the file system becomes writeable."}},"type":"object"},"aws-native:efs:FileSystemProtectionReplicationOverwriteProtection":{"description":"The status of the file system's replication overwrite protection.\n  +  ``ENABLED`` – The file system cannot be used as the destination file system in a replication configuration. The file system is writeable. Replication overwrite protection is ``ENABLED`` by default. \n  +  ``DISABLED`` – The file system can be used as the destination file system in a replication configuration. The file system is read-only and can only be modified by EFS replication.\n  +  ``REPLICATING`` – The file system is being used as the destination file system in a replication configuration. The file system is read-only and is modified only by EFS replication.\n  \n If the replication configuration is deleted, the file system's replication overwrite protection is re-enabled, the file system becomes writeable.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"},{"name":"Replicating","value":"REPLICATING"}]},"aws-native:efs:FileSystemReplicationConfiguration":{"description":"Describes the replication configuration for a specific file system.","properties":{"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:efs:FileSystemReplicationDestination"},"description":"An array of destination objects. Only one destination object is supported."}},"type":"object"},"aws-native:efs:FileSystemReplicationDestination":{"description":"Describes the destination file system in the replication configuration.","properties":{"availabilityZoneName":{"type":"string","description":"For One Zone file systems, the replication configuration must specify the Availability Zone in which the destination file system is located. \n Use the format ``us-east-1a`` to specify the Availability Zone. For more information about One Zone file systems, see [EFS file system types](https://docs.aws.amazon.com/efs/latest/ug/storage-classes.html) in the *Amazon EFS User Guide*.\n  One Zone file system type is not available in all Availability Zones in AWS-Regions where Amazon EFS is available."},"fileSystemId":{"type":"string","description":"The ID of the destination Amazon EFS file system."},"kmsKeyId":{"type":"string","description":"The ID of an kms-key-long used to protect the encrypted file system."},"region":{"type":"string","description":"The AWS-Region in which the destination file system is located.\n  For One Zone file systems, the replication configuration must specify the AWS-Region in which the destination file system is located."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the current source file system in the replication configuration."},"status":{"type":"string","description":"Describes the status of the replication configuration. For more information about replication status, see [Viewing replication details](https://docs.aws.amazon.com//efs/latest/ug/awsbackup.html#restoring-backup-efsmonitoring-replication-status.html) in the *Amazon EFS User Guide*."},"statusMessage":{"type":"string","description":"Message that provides details about the ``PAUSED`` or ``ERRROR`` state of the replication destination configuration. For more information about replication status messages, see [Viewing replication details](https://docs.aws.amazon.com//efs/latest/ug/awsbackup.html#restoring-backup-efsmonitoring-replication-status.html) in the *Amazon EFS User Guide*."}},"type":"object"},"aws-native:efs:MountTargetIpAddressType":{"description":"The IP address type for the mount target. The possible values are ``IPV4_ONLY`` (only IPv4 addresses), ``IPV6_ONLY`` (only IPv6 addresses), and ``DUAL_STACK`` (dual-stack, both IPv4 and IPv6 addresses). If you don’t specify an ``IpAddressType``, then ``IPV4_ONLY`` is used.\n  The ``IPAddressType`` must match the IP type of the subnet. Additionally, the ``IPAddressType`` parameter overrides the value set as the default IP address for the subnet in the VPC. For example, if the ``IPAddressType`` is ``IPV4_ONLY`` and ``AssignIpv6AddressOnCreation`` is ``true``, then IPv4 is used for the mount target. For more information, see [Modify the IP addressing attributes of your subnet](https://docs.aws.amazon.com/vpc/latest/userguide/subnet-public-ip.html).","type":"string","enum":[{"name":"Ipv4Only","value":"IPV4_ONLY"},{"name":"Ipv6Only","value":"IPV6_ONLY"},{"name":"DualStack","value":"DUAL_STACK"}]},"aws-native:eks:AccessEntryAccessPolicy":{"description":"An access policy to associate with the current access entry.","properties":{"accessScope":{"$ref":"#/types/aws-native:eks:AccessEntryAccessScope","description":"The scope of an `AccessPolicy` that's associated to an `AccessEntry` ."},"policyArn":{"type":"string","description":"The ARN of the access policy to add to the access entry."}},"type":"object","required":["accessScope","policyArn"]},"aws-native:eks:AccessEntryAccessScope":{"description":"The access scope of the access policy.","properties":{"namespaces":{"type":"array","items":{"type":"string"},"description":"The namespaces to associate with the access scope. Only specify if Type is set to 'namespace'."},"type":{"$ref":"#/types/aws-native:eks:AccessEntryAccessScopeType","description":"The type of the access scope."}},"type":"object","required":["type"]},"aws-native:eks:AccessEntryAccessScopeType":{"description":"The type of the access scope.","type":"string","enum":[{"name":"Namespace","value":"namespace"},{"name":"Cluster","value":"cluster"}]},"aws-native:eks:AccessEntryTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:eks:AddonPodIdentityAssociation":{"description":"A pod identity to associate with an add-on.","properties":{"roleArn":{"type":"string","description":"The IAM role ARN that the pod identity association is created for."},"serviceAccount":{"type":"string","description":"The Kubernetes service account that the pod identity association is created for."}},"type":"object","required":["roleArn","serviceAccount"]},"aws-native:eks:AddonResolveConflicts":{"description":"Resolve parameter value conflicts","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Overwrite","value":"OVERWRITE"},{"name":"Preserve","value":"PRESERVE"}]},"aws-native:eks:AddonTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:eks:CapabilityArgoCd":{"description":"Configuration settings for an Argo CD capability. This includes the Kubernetes namespace, IAM Identity Center integration, RBAC role mappings, and network access configuration.","properties":{"awsIdc":{"$ref":"#/types/aws-native:eks:CapabilityAwsIdc","replaceOnChanges":true},"namespace":{"type":"string","description":"The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.","replaceOnChanges":true},"networkAccess":{"$ref":"#/types/aws-native:eks:CapabilityNetworkAccess"},"rbacRoleMappings":{"type":"array","items":{"$ref":"#/types/aws-native:eks:CapabilityArgoCdRoleMapping"},"description":"A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities."},"serverUrl":{"type":"string","description":"The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API."}},"type":"object","required":["awsIdc"]},"aws-native:eks:CapabilityArgoCdRoleMapping":{"description":"A mapping between an Argo CD role and IAM Identity Center identities. This defines which users or groups have specific permissions in Argo CD.","properties":{"identities":{"type":"array","items":{"$ref":"#/types/aws-native:eks:CapabilitySsoIdentity"},"description":"A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role."},"role":{"$ref":"#/types/aws-native:eks:CapabilityArgoCdRoleMappingRole","description":"The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources)."}},"type":"object","required":["identities","role"]},"aws-native:eks:CapabilityArgoCdRoleMappingRole":{"description":"The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).","type":"string","enum":[{"name":"Admin","value":"ADMIN"},{"name":"Editor","value":"EDITOR"},{"name":"Viewer","value":"VIEWER"}]},"aws-native:eks:CapabilityAwsIdc":{"description":"Configuration for integrating Argo CD with IAM Identity Center. This allows you to use your organization's identity provider for authentication to Argo CD.","properties":{"idcInstanceArn":{"type":"string","description":"The ARN of the IAM Identity Center instance to use for authentication."},"idcManagedApplicationArn":{"type":"string","description":"The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS."},"idcRegion":{"type":"string","description":"The Region where your IAM Identity Center instance is located."}},"type":"object","required":["idcInstanceArn"]},"aws-native:eks:CapabilityConfiguration":{"description":"Configuration settings for a capability. The structure of this object varies depending on the capability type.","properties":{"argoCd":{"$ref":"#/types/aws-native:eks:CapabilityArgoCd"}},"type":"object"},"aws-native:eks:CapabilityDeletePropagationPolicy":{"description":"Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted.","type":"string","enum":[{"name":"Retain","value":"RETAIN"}]},"aws-native:eks:CapabilityNetworkAccess":{"description":"Configuration for network access to the Argo CD capability's managed API server endpoint. By default, the Argo CD server is accessible via a public endpoint. You can optionally specify one or more VPC endpoint IDs to enable private connectivity from your VPCs.","properties":{"vpceIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs."}},"type":"object"},"aws-native:eks:CapabilitySsoIdentity":{"description":"An IAM Identity Center identity (user or group) that can be assigned permissions in a capability.","properties":{"id":{"type":"string","description":"The unique identifier of the IAM Identity Center user or group."},"type":{"$ref":"#/types/aws-native:eks:CapabilitySsoIdentityType","description":"The type of identity. Valid values are SSO_USER or SSO_GROUP."}},"type":"object","required":["id","type"]},"aws-native:eks:CapabilitySsoIdentityType":{"description":"The type of identity. Valid values are SSO_USER or SSO_GROUP.","type":"string","enum":[{"name":"SsoUser","value":"SSO_USER"},{"name":"SsoGroup","value":"SSO_GROUP"}]},"aws-native:eks:CapabilityTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:eks:CapabilityType":{"description":"The type of capability to create. Valid values are: ACK (AWS Controllers for Kubernetes, which lets you manage AWS resources directly from Kubernetes), ARGOCD (Argo CD for GitOps-based continuous delivery), or KRO (Kube Resource Orchestrator for composing and managing custom Kubernetes resources).","type":"string","enum":[{"name":"Argocd","value":"ARGOCD"},{"name":"Ack","value":"ACK"},{"name":"Kro","value":"KRO"}]},"aws-native:eks:ClusterAccessConfig":{"description":"An object representing the Access Config to use for the cluster.","properties":{"authenticationMode":{"$ref":"#/types/aws-native:eks:ClusterAccessConfigAuthenticationMode","description":"Specify the authentication mode that should be used to create your cluster."},"bootstrapClusterCreatorAdminPermissions":{"type":"boolean","description":"Set this value to false to avoid creating a default cluster admin Access Entry using the IAM principal used to create the cluster.","replaceOnChanges":true}},"type":"object"},"aws-native:eks:ClusterAccessConfigAuthenticationMode":{"description":"Specify the authentication mode that should be used to create your cluster.","type":"string","enum":[{"name":"ConfigMap","value":"CONFIG_MAP"},{"name":"ApiAndConfigMap","value":"API_AND_CONFIG_MAP"},{"name":"Api","value":"API"}]},"aws-native:eks:ClusterBlockStorage":{"description":"Todo: add description","properties":{"enabled":{"type":"boolean","description":"Todo: add description"}},"type":"object"},"aws-native:eks:ClusterComputeConfig":{"description":"Todo: add description","properties":{"enabled":{"type":"boolean","description":"Todo: add description"},"nodePools":{"type":"array","items":{"type":"string"},"description":"Todo: add description"},"nodeRoleArn":{"type":"string","description":"Todo: add description"}},"type":"object"},"aws-native:eks:ClusterControlPlanePlacement":{"description":"Specify the placement group of the control plane machines for your cluster.","properties":{"groupName":{"type":"string","description":"Specify the placement group name of the control place machines for your cluster."}},"type":"object"},"aws-native:eks:ClusterControlPlaneScalingConfig":{"description":"Configuration for provisioned control plane scaling.","properties":{"tier":{"$ref":"#/types/aws-native:eks:ClusterControlPlaneScalingConfigTier","description":"The scaling tier for the provisioned control plane."}},"type":"object"},"aws-native:eks:ClusterControlPlaneScalingConfigTier":{"description":"The scaling tier for the provisioned control plane.","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"TierXl","value":"tier-xl"},{"name":"Tier2xl","value":"tier-2xl"},{"name":"Tier4xl","value":"tier-4xl"},{"name":"Tier8xl","value":"tier-8xl"},{"name":"TierUltra","value":"tier-ultra"}]},"aws-native:eks:ClusterElasticLoadBalancing":{"description":"Todo: add description","properties":{"enabled":{"type":"boolean","description":"Todo: add description"}},"type":"object"},"aws-native:eks:ClusterEncryptionConfig":{"description":"The encryption configuration for the cluster","properties":{"provider":{"$ref":"#/types/aws-native:eks:ClusterProvider","description":"The encryption provider for the cluster."},"resources":{"type":"array","items":{"type":"string"},"description":"Specifies the resources to be encrypted. The only supported value is \"secrets\"."}},"type":"object"},"aws-native:eks:ClusterKubernetesNetworkConfig":{"description":"The Kubernetes network configuration for the cluster.","properties":{"elasticLoadBalancing":{"$ref":"#/types/aws-native:eks:ClusterElasticLoadBalancing","description":"Todo: add description"},"ipFamily":{"$ref":"#/types/aws-native:eks:ClusterKubernetesNetworkConfigIpFamily","description":"Ipv4 or Ipv6. You can only specify ipv6 for 1.21 and later clusters that use version 1.10.1 or later of the Amazon VPC CNI add-on","replaceOnChanges":true},"serviceIpv4Cidr":{"type":"string","description":"The CIDR block to assign Kubernetes service IP addresses from. If you don't specify a block, Kubernetes assigns addresses from either the 10.100.0.0/16 or 172.20.0.0/16 CIDR blocks. We recommend that you specify a block that does not overlap with resources in other networks that are peered or connected to your VPC. ","replaceOnChanges":true},"serviceIpv6Cidr":{"type":"string","description":"The CIDR block to assign Kubernetes service IP addresses from."}},"type":"object"},"aws-native:eks:ClusterKubernetesNetworkConfigIpFamily":{"description":"Ipv4 or Ipv6. You can only specify ipv6 for 1.21 and later clusters that use version 1.10.1 or later of the Amazon VPC CNI add-on","type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"}]},"aws-native:eks:ClusterLoggingEnabledTypes":{"description":"The cluster control plane logging configuration for your cluster. ","properties":{"enabledTypes":{"type":"array","items":{"$ref":"#/types/aws-native:eks:ClusterLoggingTypeConfig"},"description":"The enabled control plane logs for your cluster. All log types are disabled if the array is empty.\n\n\u003e When updating a resource, you must include this `EnabledTypes` property if the previous CloudFormation template of the resource had it."}},"type":"object"},"aws-native:eks:ClusterLoggingTypeConfig":{"description":"Enabled Logging Type","properties":{"type":{"$ref":"#/types/aws-native:eks:ClusterLoggingTypeConfigType","description":"name of the log type"}},"type":"object"},"aws-native:eks:ClusterLoggingTypeConfigType":{"description":"name of the log type","type":"string","enum":[{"name":"Api","value":"api"},{"name":"Audit","value":"audit"},{"name":"Authenticator","value":"authenticator"},{"name":"ControllerManager","value":"controllerManager"},{"name":"Scheduler","value":"scheduler"}]},"aws-native:eks:ClusterOutpostConfig":{"description":"An object representing the Outpost configuration to use for AWS EKS outpost cluster.","properties":{"controlPlaneInstanceType":{"type":"string","description":"Specify the Instance type of the machines that should be used to create your cluster."},"controlPlanePlacement":{"$ref":"#/types/aws-native:eks:ClusterControlPlanePlacement","description":"Specify the placement group of the control plane machines for your cluster."},"outpostArns":{"type":"array","items":{"type":"string"},"description":"Specify one or more Arn(s) of Outpost(s) on which you would like to create your cluster."}},"type":"object","required":["controlPlaneInstanceType","outpostArns"]},"aws-native:eks:ClusterProvider":{"properties":{"keyArn":{"type":"string","description":"Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must be symmetric, created in the same region as the cluster, and if the KMS key was created in a different account, the user must have access to the KMS key."}},"type":"object"},"aws-native:eks:ClusterRemoteNetworkConfig":{"description":"Configuration fields for specifying on-premises node and pod CIDRs that are external to the VPC passed during cluster creation.","properties":{"remoteNodeNetworks":{"type":"array","items":{"$ref":"#/types/aws-native:eks:ClusterRemoteNodeNetwork"},"description":"Network configuration of nodes run on-premises with EKS Hybrid Nodes."},"remotePodNetworks":{"type":"array","items":{"$ref":"#/types/aws-native:eks:ClusterRemotePodNetwork"},"description":"Network configuration of pods run on-premises with EKS Hybrid Nodes."}},"type":"object"},"aws-native:eks:ClusterRemoteNodeNetwork":{"description":"Network configuration of nodes run on-premises with EKS Hybrid Nodes.","properties":{"cidrs":{"type":"array","items":{"type":"string"},"description":"Specifies the list of remote node CIDRs."}},"type":"object","required":["cidrs"]},"aws-native:eks:ClusterRemotePodNetwork":{"description":"Network configuration of pods run on-premises with EKS Hybrid Nodes.","properties":{"cidrs":{"type":"array","items":{"type":"string"},"description":"Specifies the list of remote pod CIDRs."}},"type":"object","required":["cidrs"]},"aws-native:eks:ClusterResourcesVpcConfig":{"description":"An object representing the VPC configuration to use for an Amazon EKS cluster.","properties":{"endpointPrivateAccess":{"type":"boolean","description":"Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods."},"endpointPublicAccess":{"type":"boolean","description":"Set this value to false to disable public access to your cluster's Kubernetes API server endpoint. If you disable public access, your cluster's Kubernetes API server can only receive requests from within the cluster VPC. The default value for this parameter is true, which enables public access for your Kubernetes API server."},"publicAccessCidrs":{"type":"array","items":{"type":"string"},"description":"The CIDR blocks that are allowed access to your cluster's public Kubernetes API server endpoint. Communication to the endpoint from addresses outside of the CIDR blocks that you specify is denied. The default value is 0.0.0.0/0. If you've disabled private endpoint access and you have nodes or AWS Fargate pods in the cluster, then ensure that you specify the necessary CIDR blocks."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"Specify one or more security groups for the cross-account elastic network interfaces that Amazon EKS creates to use to allow communication between your worker nodes and the Kubernetes control plane. If you don't specify a security group, the default security group for your VPC is used."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"Specify subnets for your Amazon EKS nodes. Amazon EKS creates cross-account elastic network interfaces in these subnets to allow communication between your nodes and the Kubernetes control plane."}},"type":"object","required":["subnetIds"]},"aws-native:eks:ClusterStorageConfig":{"description":"Todo: add description","properties":{"blockStorage":{"$ref":"#/types/aws-native:eks:ClusterBlockStorage","description":"Todo: add description"}},"type":"object"},"aws-native:eks:ClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:eks:ClusterUpgradePolicy":{"description":"An object representing the Upgrade Policy to use for the cluster.","properties":{"supportType":{"$ref":"#/types/aws-native:eks:ClusterUpgradePolicySupportType","description":"Specify the support type for your cluster."}},"type":"object"},"aws-native:eks:ClusterUpgradePolicySupportType":{"description":"Specify the support type for your cluster.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Extended","value":"EXTENDED"}]},"aws-native:eks:ClusterZonalShiftConfig":{"description":"The current zonal shift configuration to use for the cluster.","properties":{"enabled":{"type":"boolean","description":"Set this value to true to enable zonal shift for the cluster."}},"type":"object"},"aws-native:eks:FargateProfileLabel":{"description":"A key-value pair to associate with a pod.","properties":{"key":{"type":"string","description":"The key name of the label."},"value":{"type":"string","description":"The value for the label. "}},"type":"object","required":["key","value"]},"aws-native:eks:FargateProfileSelector":{"properties":{"labels":{"type":"array","items":{"$ref":"#/types/aws-native:eks:FargateProfileLabel"},"description":"The Kubernetes labels that the selector should match. A pod must contain all of the labels that are specified in the selector for it to be considered a match."},"namespace":{"type":"string","description":"The Kubernetes `namespace` that the selector should match."}},"type":"object","required":["namespace"]},"aws-native:eks:FargateProfileTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:eks:IdentityProviderConfigOidcIdentityProviderConfig":{"description":"An object representing an OpenID Connect (OIDC) configuration.","properties":{"clientId":{"type":"string","description":"This is also known as audience. The ID for the client application that makes authentication requests to the OpenID identity provider."},"groupsClaim":{"type":"string","description":"The JWT claim that the provider uses to return your groups."},"groupsPrefix":{"type":"string","description":"The prefix that is prepended to group claims to prevent clashes with existing names (such as system: groups)."},"issuerUrl":{"type":"string","description":"The URL of the OpenID identity provider that allows the API server to discover public signing keys for verifying tokens."},"requiredClaims":{"type":"array","items":{"$ref":"#/types/aws-native:eks:IdentityProviderConfigRequiredClaim"},"description":"The key-value pairs that describe required claims in the identity token. If set, each claim is verified to be present in the token with a matching value."},"usernameClaim":{"type":"string","description":"The JSON Web Token (JWT) claim to use as the username. The default is sub, which is expected to be a unique identifier of the end user. You can choose other claims, such as email or name, depending on the OpenID identity provider. Claims other than email are prefixed with the issuer URL to prevent naming clashes with other plug-ins."},"usernamePrefix":{"type":"string","description":"The prefix that is prepended to username claims to prevent clashes with existing names. If you do not provide this field, and username is a value other than email, the prefix defaults to issuerurl#. You can use the value - to disable all prefixing."}},"type":"object","required":["clientId","issuerUrl"]},"aws-native:eks:IdentityProviderConfigRequiredClaim":{"description":"The key value pairs that describe required claims in the identity token. If set, each claim is verified to be present in the token with a matching value.","properties":{"key":{"type":"string","description":"The key of the requiredClaims."},"value":{"type":"string","description":"The value for the requiredClaims."}},"type":"object","required":["key","value"]},"aws-native:eks:IdentityProviderConfigTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:eks:IdentityProviderConfigType":{"description":"The type of the identity provider configuration.","type":"string","enum":[{"name":"Oidc","value":"oidc"}]},"aws-native:eks:Logging":{"description":"Enable exporting the Kubernetes control plane logs for your cluster to CloudWatch Logs based on log types. By default, cluster control plane logs aren't exported to CloudWatch Logs.","properties":{"clusterLogging":{"$ref":"#/types/aws-native:eks:ClusterLoggingEnabledTypes","description":"The cluster control plane logging configuration for your cluster. ","language":{"csharp":{"name":"ClusterLoggingValue"}}}},"type":"object"},"aws-native:eks:NamespaceConfigProperties":{"description":"The custom namespace configuration to use with the add-on","properties":{"namespace":{"type":"string","description":"The custom namespace for creating the add-on"}},"type":"object","required":["namespace"]},"aws-native:eks:NodegroupLaunchTemplateSpecification":{"description":"An object representing a launch template specification for AWS EKS Nodegroup.","properties":{"id":{"type":"string","description":"The ID of the launch template.\n\nYou must specify either the launch template ID or the launch template name in the request, but not both. After node group creation, you cannot use a different ID."},"name":{"type":"string","description":"The name of the launch template.\n\nYou must specify either the launch template name or the launch template ID in the request, but not both. After node group creation, you cannot use a different name."},"version":{"type":"string","description":"The version number of the launch template to use. If no version is specified, then the template's default version is used. You can use a different version for node group updates."}},"type":"object"},"aws-native:eks:NodegroupNodeRepairConfig":{"description":"The node auto repair configuration for node group.","properties":{"enabled":{"type":"boolean","description":"Set this value to true to enable node auto repair for the node group."},"maxParallelNodesRepairedCount":{"type":"integer","description":"Specify the maximum number of nodes that can be repaired concurrently or in parallel, expressed as a count of unhealthy nodes. This gives you finer-grained control over the pace of node replacements. When using this, you cannot also set MaxParallelNodesRepairedPercentage at the same time."},"maxParallelNodesRepairedPercentage":{"type":"integer","description":"Specify the maximum number of nodes that can be repaired concurrently or in parallel, expressed as a percentage of unhealthy nodes. This gives you finer-grained control over the pace of node replacements. When using this, you cannot also set MaxParallelNodesRepairedCount at the same time."},"maxUnhealthyNodeThresholdCount":{"type":"integer","description":"Specify a count threshold of unhealthy nodes, above which node auto repair actions will stop. When using this, you cannot also set MaxUnhealthyNodeThresholdPercentage at the same time."},"maxUnhealthyNodeThresholdPercentage":{"type":"integer","description":"Specify a percentage threshold of unhealthy nodes, above which node auto repair actions will stop. When using this, you cannot also set MaxUnhealthyNodeThresholdCount at the same time."},"nodeRepairConfigOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:eks:NodegroupNodeRepairConfigOverrides"},"description":"Specify granular overrides for specific repair actions. These overrides control the repair action and the repair delay time before a node is considered eligible for repair. If you use this, you must specify all the values."}},"type":"object"},"aws-native:eks:NodegroupNodeRepairConfigOverrides":{"description":"Specify granular overrides for specific repair actions. These overrides control the repair action and the repair delay time before a node is considered eligible for repair. If you use this, you must specify all the values.","properties":{"minRepairWaitTimeMins":{"type":"integer","description":"Specify the minimum time in minutes to wait before attempting to repair a node with this specific NodeMonitoringCondition and NodeUnhealthyReason."},"nodeMonitoringCondition":{"type":"string","description":"Specify an unhealthy condition reported by the node monitoring agent that this override would apply to."},"nodeUnhealthyReason":{"type":"string","description":"Specify a reason reported by the node monitoring agent that this override would apply to."},"repairAction":{"$ref":"#/types/aws-native:eks:NodegroupNodeRepairConfigOverridesRepairAction","description":"Specify the repair action to take for nodes when all of the specified conditions are met."}},"type":"object"},"aws-native:eks:NodegroupNodeRepairConfigOverridesRepairAction":{"description":"Specify the repair action to take for nodes when all of the specified conditions are met.","type":"string","enum":[{"name":"Replace","value":"Replace"},{"name":"Reboot","value":"Reboot"},{"name":"NoAction","value":"NoAction"}]},"aws-native:eks:NodegroupRemoteAccess":{"description":"An object representing a remote access configuration specification for AWS EKS Nodegroup.","properties":{"ec2SshKey":{"type":"string","description":"The Amazon EC2 SSH key name that provides access for SSH communication with the nodes in the managed node group. For more information, see [Amazon EC2 key pairs and Linux instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-key-pairs.html) in the *Amazon Elastic Compute Cloud User Guide for Linux Instances* . For Windows, an Amazon EC2 SSH key is used to obtain the RDP password. For more information, see [Amazon EC2 key pairs and Windows instances](https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ec2-key-pairs.html) in the *Amazon Elastic Compute Cloud User Guide for Windows Instances* ."},"sourceSecurityGroups":{"type":"array","items":{"type":"string"},"description":"The security group IDs that are allowed SSH access (port 22) to the nodes. For Windows, the port is 3389. If you specify an Amazon EC2 SSH key but don't specify a source security group when you create a managed node group, then the port on the nodes is opened to the internet ( `0.0.0.0/0` ). For more information, see [Security Groups for Your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon Virtual Private Cloud User Guide* ."}},"type":"object","required":["ec2SshKey"]},"aws-native:eks:NodegroupScalingConfig":{"description":"An object representing a auto scaling group specification for AWS EKS Nodegroup.","properties":{"desiredSize":{"type":"integer","description":"The current number of nodes that the managed node group should maintain.\n\n\u003e If you use the Kubernetes [Cluster Autoscaler](https://docs.aws.amazon.com/https://github.com/kubernetes/autoscaler#kubernetes-autoscaler) , you shouldn't change the `desiredSize` value directly, as this can cause the Cluster Autoscaler to suddenly scale up or scale down. \n\nWhenever this parameter changes, the number of worker nodes in the node group is updated to the specified size. If this parameter is given a value that is smaller than the current number of running worker nodes, the necessary number of worker nodes are terminated to match the given value. When using CloudFormation, no action occurs if you remove this parameter from your CFN template.\n\nThis parameter can be different from `minSize` in some cases, such as when starting with extra hosts for testing. This parameter can also be different when you want to start with an estimated number of needed hosts, but let the Cluster Autoscaler reduce the number if there are too many. When the Cluster Autoscaler is used, the `desiredSize` parameter is altered by the Cluster Autoscaler (but can be out-of-date for short periods of time). the Cluster Autoscaler doesn't scale a managed node group lower than `minSize` or higher than `maxSize` ."},"maxSize":{"type":"integer","description":"The maximum number of nodes that the managed node group can scale out to. For information about the maximum number that you can specify, see [Amazon EKS service quotas](https://docs.aws.amazon.com/eks/latest/userguide/service-quotas.html) in the *Amazon EKS User Guide* ."},"minSize":{"type":"integer","description":"The minimum number of nodes that the managed node group can scale in to."}},"type":"object"},"aws-native:eks:NodegroupTaint":{"description":"An object representing a Taint specification for AWS EKS Nodegroup.","properties":{"effect":{"type":"string","description":"The effect of the taint."},"key":{"type":"string","description":"The key of the taint."},"value":{"type":"string","description":"The value of the taint."}},"type":"object"},"aws-native:eks:NodegroupUpdateConfig":{"description":"The node group update configuration.","properties":{"maxUnavailable":{"type":"number","description":"The maximum number of nodes unavailable at once during a version update. Nodes will be updated in parallel. This value or maxUnavailablePercentage is required to have a value.The maximum number is 100. "},"maxUnavailablePercentage":{"type":"number","description":"The maximum percentage of nodes unavailable during a version update. This percentage of nodes will be updated in parallel, up to 100 nodes at once. This value or maxUnavailable is required to have a value."},"updateStrategy":{"type":"string","description":"The configuration for the behavior to follow during an node group version update of this managed node group. You choose between two possible strategies for replacing nodes during an UpdateNodegroupVersion action."}},"type":"object"},"aws-native:eks:PodIdentityAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:elasticache:AuthenticationModeProperties":{"description":"Specifies the authentication mode to use. Below is an example of the possible JSON values:\n\n```\n{ Passwords: [\"*****\", \"******\"] // If Type is password.\n}\n```","properties":{"passwords":{"type":"array","items":{"type":"string"},"description":"Passwords used for this user account. You can create up to two passwords for each user."},"type":{"$ref":"#/types/aws-native:elasticache:UserAuthenticationModePropertiesType","description":"Authentication Type"}},"type":"object","required":["type"]},"aws-native:elasticache:GlobalReplicationGroupMember":{"properties":{"replicationGroupId":{"type":"string","description":"Regionally unique identifier for the member i.e. ReplicationGroupId."},"replicationGroupRegion":{"type":"string","description":"The AWS region of the Global Datastore member."},"role":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupMemberRole","description":"Indicates the role of the member, primary or secondary."}},"type":"object"},"aws-native:elasticache:GlobalReplicationGroupMemberRole":{"description":"Indicates the role of the member, primary or secondary.","type":"string","enum":[{"name":"Primary","value":"PRIMARY"},{"name":"Secondary","value":"SECONDARY"}]},"aws-native:elasticache:GlobalReplicationGroupRegionalConfiguration":{"properties":{"replicationGroupId":{"type":"string","description":"The replication group id of the Global Datastore member."},"replicationGroupRegion":{"type":"string","description":"The AWS region of the Global Datastore member."},"reshardingConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupReshardingConfiguration"},"description":"A list of PreferredAvailabilityZones objects that specifies the configuration of a node group in the resharded cluster. "}},"type":"object"},"aws-native:elasticache:GlobalReplicationGroupReshardingConfiguration":{"properties":{"nodeGroupId":{"type":"string","description":"Unique identifier for the Node Group. This is either auto-generated by ElastiCache (4-digit id) or a user supplied id."},"preferredAvailabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of preferred availability zones for the nodes of new node groups."}},"type":"object"},"aws-native:elasticache:ParameterGroupTag":{"properties":{"key":{"type":"string","description":"The key for the tag. May not be null."},"value":{"type":"string","description":"The tag's value. May be null."}},"type":"object","required":["key","value"]},"aws-native:elasticache:ReadEndPointProperties":{"properties":{"addresses":{"type":"string","description":"A string containing a comma-separated list of endpoints for the primary and read-only replicas, formatted as [address1, address2, ...]. The order of the addresses maps to the order of the ports from the ReadEndPoint.Ports attribute."},"addressesList":{"type":"array","items":{"type":"string"},"description":"A list of endpoints for the read-only replicas. The order of the addresses maps to the order of the ports from the ReadEndPoint.Ports attribute."},"ports":{"type":"string","description":"A string containing a comma-separated list of ports for the read-only replicas, formatted as [port1, port2, ...]. The order of the ports maps to the order of the addresses from the ReadEndPoint.Addresses attribute."},"portsList":{"type":"array","items":{"type":"string"},"description":"A list of ports for the read-only replicas. The order of the ports maps to the order of the addresses from the ReadEndPoint.Addresses attribute."}},"type":"object"},"aws-native:elasticache:ReplicationGroupCloudWatchLogsDestinationDetails":{"description":"The configuration details of the CloudWatch Logs destination. Note that this field is marked as required but only if CloudWatch Logs was chosen as the destination.","properties":{"logGroup":{"type":"string","description":"The name of the CloudWatch Logs log group."}},"type":"object","required":["logGroup"]},"aws-native:elasticache:ReplicationGroupDestinationDetails":{"description":"Configuration details of either a CloudWatch Logs destination or Kinesis Data Firehose destination.","properties":{"cloudWatchLogsDetails":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupCloudWatchLogsDestinationDetails","description":"The configuration details of the CloudWatch Logs destination. Note that this field is marked as required but only if CloudWatch Logs was chosen as the destination."},"kinesisFirehoseDetails":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupKinesisFirehoseDestinationDetails","description":"The configuration details of the Kinesis Data Firehose destination. Note that this field is marked as required but only if Kinesis Data Firehose was chosen as the destination."}},"type":"object"},"aws-native:elasticache:ReplicationGroupEndpoint":{"properties":{"address":{"type":"string","description":"The DNS hostname of the cache node."},"port":{"type":"string","description":"The port number that the cache engine is listening on."}},"type":"object"},"aws-native:elasticache:ReplicationGroupKinesisFirehoseDestinationDetails":{"description":"The configuration details of the Kinesis Data Firehose destination. Note that this field is marked as required but only if Kinesis Data Firehose was chosen as the destination.","properties":{"deliveryStream":{"type":"string","description":"The name of the Kinesis Data Firehose delivery stream."}},"type":"object","required":["deliveryStream"]},"aws-native:elasticache:ReplicationGroupLogDeliveryConfigurationRequest":{"properties":{"destinationDetails":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupDestinationDetails","description":"Configuration details of either a CloudWatch Logs destination or Kinesis Data Firehose destination."},"destinationType":{"type":"string","description":"Specify either CloudWatch Logs or Kinesis Data Firehose as the destination type. Valid values are either cloudwatch-logs or kinesis-firehose."},"logFormat":{"type":"string","description":"Valid values are either json or text."},"logType":{"type":"string","description":"Valid value is either slow-log, which refers to slow-log or engine-log."}},"type":"object","required":["destinationDetails","destinationType","logFormat","logType"]},"aws-native:elasticache:ReplicationGroupNodeGroupConfiguration":{"properties":{"nodeGroupId":{"type":"string","description":"Either the ElastiCache for Redis supplied 4-digit id or a user supplied id for the node group these configuration values apply to."},"primaryAvailabilityZone":{"type":"string","description":"The Availability Zone where the primary node of this node group (shard) is launched."},"replicaAvailabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of Availability Zones to be used for the read replicas. The number of Availability Zones in this list must match the value of ReplicaCount or ReplicasPerNodeGroup if not specified."},"replicaCount":{"type":"integer","description":"The number of read replica nodes in this node group (shard)."},"slots":{"type":"string","description":"A string of comma-separated values where the first set of values are the slot numbers (zero based), and the second set of values are the keyspaces for each slot. The following example specifies three slots (numbered 0, 1, and 2): 0,1,2,0-4999,5000-9999,10000-16,383."}},"type":"object"},"aws-native:elasticache:ReplicationGroupTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:elasticache:ServerlessCacheCacheUsageLimits":{"description":"The cache capacity limit of the Serverless Cache.","properties":{"dataStorage":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheDataStorage","description":"The maximum data storage limit in the cache, expressed in Gigabytes."},"ecpuPerSecond":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEcpuPerSecond","description":"The number of ElastiCache Processing Units (ECPU) the cache can consume per second."}},"type":"object"},"aws-native:elasticache:ServerlessCacheDataStorage":{"description":"The cached data capacity of the Serverless Cache.","properties":{"maximum":{"type":"integer","description":"The maximum cached data capacity of the Serverless Cache."},"minimum":{"type":"integer","description":"The minimum cached data capacity of the Serverless Cache."},"unit":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheDataStorageUnit","description":"The unit of cached data capacity of the Serverless Cache."}},"type":"object","required":["unit"]},"aws-native:elasticache:ServerlessCacheDataStorageUnit":{"description":"The unit of cached data capacity of the Serverless Cache.","type":"string","enum":[{"name":"Gb","value":"GB"}]},"aws-native:elasticache:ServerlessCacheEcpuPerSecond":{"description":"The ECPU per second of the Serverless Cache.","properties":{"maximum":{"type":"integer","description":"The maximum ECPU per second of the Serverless Cache."},"minimum":{"type":"integer","description":"The minimum ECPU per second of the Serverless Cache."}},"type":"object"},"aws-native:elasticache:ServerlessCacheEndpoint":{"description":"The address and the port.","properties":{"address":{"type":"string","description":"Endpoint address."},"port":{"type":"string","description":"Endpoint port."}},"type":"object"},"aws-native:elasticache:ServerlessCacheTag":{"description":"A key-value pair to associate with Serverless Cache.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with 'aws:'. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:elasticache:SubnetGroupTag":{"description":"A tag that can be added to an ElastiCache subnet group. Tags are composed of a Key/Value pair. You can use tags to categorize and track all your subnet groups. A tag with a null Value is permitted.","properties":{"key":{"type":"string","description":"The key for the tag. May not be null."},"value":{"type":"string","description":"The tag's value. May be null."}},"type":"object","required":["key","value"]},"aws-native:elasticache:UserAuthenticationModePropertiesType":{"description":"Authentication Type","type":"string","enum":[{"name":"Password","value":"password"},{"name":"NoPasswordRequired","value":"no-password-required"},{"name":"Iam","value":"iam"}]},"aws-native:elasticache:UserEngine":{"description":"The target cache engine for the user.","type":"string","enum":[{"name":"Redis","value":"redis"},{"name":"Valkey","value":"valkey"}]},"aws-native:elasticache:UserGroupEngine":{"description":"The target cache engine for the user group.","type":"string","enum":[{"name":"Redis","value":"redis"},{"name":"Valkey","value":"valkey"}]},"aws-native:elasticache:UserGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with 'aws:'. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:elasticache:UserTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with 'aws:'. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:elasticbeanstalk:ApplicationMaxAgeRule":{"properties":{"deleteSourceFromS3":{"type":"boolean","description":"Set to true to delete a version's source bundle from Amazon S3 when Elastic Beanstalk deletes the application version."},"enabled":{"type":"boolean","description":"Specify true to apply the rule, or false to disable it."},"maxAgeInDays":{"type":"integer","description":"Specify the number of days to retain an application versions."}},"type":"object"},"aws-native:elasticbeanstalk:ApplicationMaxCountRule":{"properties":{"deleteSourceFromS3":{"type":"boolean","description":"Set to true to delete a version's source bundle from Amazon S3 when Elastic Beanstalk deletes the application version."},"enabled":{"type":"boolean","description":"Specify true to apply the rule, or false to disable it."},"maxCount":{"type":"integer","description":"Specify the maximum number of application versions to retain."}},"type":"object"},"aws-native:elasticbeanstalk:ApplicationResourceLifecycleConfig":{"properties":{"serviceRole":{"type":"string","description":"The ARN of an IAM service role that Elastic Beanstalk has permission to assume. The ServiceRole property is required the first time that you provide a ResourceLifecycleConfig for the application. After you provide it once, Elastic Beanstalk persists the Service Role with the application, and you don't need to specify it again. You can, however, specify it in subsequent updates to change the Service Role to another value."},"versionLifecycleConfig":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationVersionLifecycleConfig","description":"Defines lifecycle settings for application versions."}},"type":"object"},"aws-native:elasticbeanstalk:ApplicationVersionLifecycleConfig":{"properties":{"maxAgeRule":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationMaxAgeRule","description":"Specify a max age rule to restrict the length of time that application versions are retained for an application."},"maxCountRule":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationMaxCountRule","description":"Specify a max count rule to restrict the number of application versions that are retained for an application."}},"type":"object"},"aws-native:elasticbeanstalk:ApplicationVersionSourceBundle":{"properties":{"s3Bucket":{"type":"string","description":"The Amazon S3 bucket where the data is located."},"s3Key":{"type":"string","description":"The Amazon S3 key where the data is located."}},"type":"object","required":["s3Bucket","s3Key"]},"aws-native:elasticbeanstalk:ConfigurationTemplateConfigurationOptionSetting":{"properties":{"namespace":{"type":"string","description":"A unique namespace that identifies the option's associated AWS resource."},"optionName":{"type":"string","description":"The name of the configuration option."},"resourceName":{"type":"string","description":"A unique resource name for the option setting. Use it for a time–based scaling configuration option. "},"value":{"type":"string","description":"The current value for the configuration option."}},"type":"object","required":["namespace","optionName"]},"aws-native:elasticbeanstalk:ConfigurationTemplateSourceConfiguration":{"properties":{"applicationName":{"type":"string","description":"The name of the application associated with the configuration."},"templateName":{"type":"string","description":"The name of the configuration template."}},"type":"object","required":["applicationName","templateName"]},"aws-native:elasticbeanstalk:EnvironmentOptionSetting":{"properties":{"namespace":{"type":"string","description":"A unique namespace that identifies the option's associated AWS resource."},"optionName":{"type":"string","description":"The name of the configuration option."},"resourceName":{"type":"string","description":"A unique resource name for the option setting. Use it for a time–based scaling configuration option."},"value":{"type":"string","description":"The current value for the configuration option."}},"type":"object","required":["namespace","optionName"]},"aws-native:elasticbeanstalk:EnvironmentTag":{"properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:elasticbeanstalk:EnvironmentTier":{"properties":{"name":{"type":"string","description":"The name of this environment tier.","replaceOnChanges":true},"type":{"type":"string","description":"The type of this environment tier.","replaceOnChanges":true},"version":{"type":"string","description":"The version of this environment tier. When you don't set a value to it, Elastic Beanstalk uses the latest compatible worker tier version."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerAction":{"description":"Specifies an action for a listener rule.","properties":{"authenticateCognitoConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAuthenticateCognitoConfig","description":"[HTTPS listeners] Information for using Amazon Cognito to authenticate users. Specify only when ``Type`` is ``authenticate-cognito``."},"authenticateOidcConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAuthenticateOidcConfig","description":"[HTTPS listeners] Information about an identity provider that is compliant with OpenID Connect (OIDC). Specify only when ``Type`` is ``authenticate-oidc``."},"fixedResponseConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerFixedResponseConfig","description":"[Application Load Balancer] Information for creating an action that returns a custom HTTP response. Specify only when ``Type`` is ``fixed-response``."},"forwardConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerForwardConfig","description":"Information for creating an action that distributes requests among multiple target groups. Specify only when ``Type`` is ``forward``.\n If you specify both ``ForwardConfig`` and ``TargetGroupArn``, you can specify only one target group using ``ForwardConfig`` and it must be the same target group specified in ``TargetGroupArn``."},"jwtValidationConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerJwtValidationConfig","description":"[HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when ``Type`` is ``jwt-validation``."},"order":{"type":"integer","description":"The order for the action. This value is required for rules with multiple actions. The action with the lowest value for order is performed first."},"redirectConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRedirectConfig","description":"[Application Load Balancer] Information for creating a redirect action. Specify only when ``Type`` is ``redirect``."},"targetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group. Specify only when ``Type`` is ``forward`` and you want to route to a single target group. To route to multiple target groups, you must use ``ForwardConfig`` instead."},"type":{"type":"string","description":"The type of action."}},"type":"object","required":["type"]},"aws-native:elasticloadbalancingv2:ListenerAttribute":{"description":"Information about a listener attribute.","properties":{"key":{"type":"string","description":"The name of the attribute.\n The following attribute is supported by Network Load Balancers, and Gateway Load Balancers.\n  +  ``tcp.idle_timeout.seconds`` - The tcp idle timeout value, in seconds. The valid range is 60-6000 seconds. The default is 350 seconds.\n  \n The following attributes are only supported by Application Load Balancers.\n  +  ``routing.http.request.x_amzn_mtls_clientcert_serial_number.header_name`` - Enables you to modify the header name of the *X-Amzn-Mtls-Clientcert-Serial-Number* HTTP request header.\n  +  ``routing.http.request.x_amzn_mtls_clientcert_issuer.header_name`` - Enables you to modify the header name of the *X-Amzn-Mtls-Clientcert-Issuer* HTTP request header.\n  +  ``routing.http.request.x_amzn_mtls_clientcert_subject.header_name`` - Enables you to modify the header name of the *X-Amzn-Mtls-Clientcert-Subject* HTTP request header.\n  +  ``routing.http.request.x_amzn_mtls_clientcert_validity.header_name`` - Enables you to modify the header name of the *X-Amzn-Mtls-Clientcert-Validity* HTTP request header.\n  +  ``routing.http.request.x_amzn_mtls_clientcert_leaf.header_name`` - Enables you to modify the header name of the *X-Amzn-Mtls-Clientcert-Leaf* HTTP request header.\n  +  ``routing.http.request.x_amzn_mtls_clientcert.header_name`` - Enables you to modify the header name of the *X-Amzn-Mtls-Clientcert* HTTP request header.\n  +  ``routing.http.request.x_amzn_tls_version.header_name`` - Enables you to modify the header name of the *X-Amzn-Tls-Version* HTTP request header.\n  +  ``routing.http.request.x_amzn_tls_cipher_suite.header_name`` - Enables you to modify the header name of the *X-Amzn-Tls-Cipher-Suite* HTTP request header.\n  +  ``routing.http.response.server.enabled`` - Enables you to allow or remove the HTTP response server header.\n  +  ``routing.http.response.strict_transport_security.header_value`` - Informs browsers that the site should only be accessed using HTTPS, and that any future attempts to access it using HTTP should automatically be converted to HTTPS.\n  +  ``routing.http.response.access_control_allow_origin.header_value`` - Specifies which origins are allowed to access the server.\n  +  ``routing.http.response.access_control_allow_methods.header_value`` - Returns which HTTP methods are allowed when accessing the server from a different origin.\n  +  ``routing.http.response.access_control_allow_headers.header_value`` - Specifies which headers can be used during the request.\n  +  ``routing.http.response.access_control_allow_credentials.header_value`` - Indicates whether the browser should include credentials such as cookies or authentication when making requests.\n  +  ``routing.http.response.access_control_expose_headers.header_value`` - Returns which headers the browser can expose to the requesting client.\n  +  ``routing.http.response.access_control_max_age.header_value`` - Specifies how long the results of a preflight request can be cached, in seconds.\n  +  ``routing.http.response.content_security_policy.header_value`` - Specifies restrictions enforced by the browser to help minimize the risk of certain types of security threats.\n  +  ``routing.http.response.x_content_type_options.header_value`` - Indicates whether the MIME types advertised in the *Content-Type* headers should be followed and not be changed.\n  +  ``routing.http.response.x_frame_options.header_value`` - Indicates whether the browser is allowed to render a page in a *frame*, *iframe*, *embed* or *object*."},"value":{"type":"string","description":"The value of the attribute."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerAuthenticateCognitoConfig":{"description":"Specifies information required when integrating with Amazon Cognito to authenticate users.","properties":{"authenticationRequestExtraParams":{"type":"object","additionalProperties":{"type":"string"},"description":"The query parameters (up to 10) to include in the redirect request to the authorization endpoint."},"onUnauthenticatedRequest":{"type":"string","description":"The behavior if the user is not authenticated. The following are possible values:\n  +  deny```` - Return an HTTP 401 Unauthorized error.\n  +  allow```` - Allow the request to be forwarded to the target.\n  +  authenticate```` - Redirect the request to the IdP authorization endpoint. This is the default value."},"scope":{"type":"string","description":"The set of user claims to be requested from the IdP. The default is ``openid``.\n To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP."},"sessionCookieName":{"type":"string","description":"The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie."},"sessionTimeout":{"type":"string","description":"The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days)."},"userPoolArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Cognito user pool."},"userPoolClientId":{"type":"string","description":"The ID of the Amazon Cognito user pool client."},"userPoolDomain":{"type":"string","description":"The domain prefix or fully-qualified domain name of the Amazon Cognito user pool."}},"type":"object","required":["userPoolArn","userPoolClientId","userPoolDomain"]},"aws-native:elasticloadbalancingv2:ListenerAuthenticateOidcConfig":{"description":"Specifies information required using an identity provide (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.","properties":{"authenticationRequestExtraParams":{"type":"object","additionalProperties":{"type":"string"},"description":"The query parameters (up to 10) to include in the redirect request to the authorization endpoint."},"authorizationEndpoint":{"type":"string","description":"The authorization endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."},"clientId":{"type":"string","description":"The OAuth 2.0 client identifier."},"clientSecret":{"type":"string","description":"The OAuth 2.0 client secret. This parameter is required if you are creating a rule. If you are modifying a rule, you can omit this parameter if you set ``UseExistingClientSecret`` to true."},"issuer":{"type":"string","description":"The OIDC issuer identifier of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."},"onUnauthenticatedRequest":{"type":"string","description":"The behavior if the user is not authenticated. The following are possible values:\n  +  deny```` - Return an HTTP 401 Unauthorized error.\n  +  allow```` - Allow the request to be forwarded to the target.\n  +  authenticate```` - Redirect the request to the IdP authorization endpoint. This is the default value."},"scope":{"type":"string","description":"The set of user claims to be requested from the IdP. The default is ``openid``.\n To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP."},"sessionCookieName":{"type":"string","description":"The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie."},"sessionTimeout":{"type":"string","description":"The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days)."},"tokenEndpoint":{"type":"string","description":"The token endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."},"useExistingClientSecret":{"type":"boolean","description":"Indicates whether to use the existing client secret when modifying a rule. If you are creating a rule, you can omit this parameter or set it to false."},"userInfoEndpoint":{"type":"string","description":"The user info endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."}},"type":"object","required":["authorizationEndpoint","clientId","issuer","tokenEndpoint","userInfoEndpoint"]},"aws-native:elasticloadbalancingv2:ListenerCertificate":{"description":"Specifies an SSL server certificate to use as the default certificate for a secure listener.","properties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerFixedResponseConfig":{"description":"Specifies information required when returning a custom HTTP response.","properties":{"contentType":{"type":"string","description":"The content type.\n Valid Values: text/plain | text/css | text/html | application/javascript | application/json"},"messageBody":{"type":"string","description":"The message."},"statusCode":{"type":"string","description":"The HTTP response code (2XX, 4XX, or 5XX)."}},"type":"object","required":["statusCode"]},"aws-native:elasticloadbalancingv2:ListenerForwardConfig":{"description":"Information for creating an action that distributes requests among multiple target groups. Specify only when ``Type`` is ``forward``.\n If you specify both ``ForwardConfig`` and ``TargetGroupArn``, you can specify only one target group using ``ForwardConfig`` and it must be the same target group specified in ``TargetGroupArn``.","properties":{"targetGroupStickinessConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerTargetGroupStickinessConfig","description":"Information about the target group stickiness for a rule."},"targetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerTargetGroupTuple"},"description":"Information about how traffic will be distributed between multiple target groups in a forward rule."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerJwtValidationActionAdditionalClaim":{"description":"Information about an additional claim to validate.","properties":{"format":{"type":"string","description":"The format of the claim value."},"name":{"type":"string","description":"The name of the claim. You can't specify ``exp``, ``iss``, ``nbf``, or ``iat`` because we validate them by default."},"values":{"type":"array","items":{"type":"string"},"description":"The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is ``space-separated-values``, the values can't include spaces."}},"type":"object","required":["format","name","values"]},"aws-native:elasticloadbalancingv2:ListenerJwtValidationConfig":{"properties":{"additionalClaims":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerJwtValidationActionAdditionalClaim"}},"issuer":{"type":"string"},"jwksEndpoint":{"type":"string"}},"type":"object","required":["issuer","jwksEndpoint"]},"aws-native:elasticloadbalancingv2:ListenerMutualAuthentication":{"description":"The mutual authentication configuration information.","properties":{"advertiseTrustStoreCaNames":{"type":"string","description":"Indicates whether trust store CA certificate names are advertised."},"ignoreClientCertificateExpiry":{"type":"boolean","description":"Indicates whether expired client certificates are ignored."},"mode":{"type":"string","description":"The client certificate handling method. Options are ``off``, ``passthrough`` or ``verify``. The default value is ``off``."},"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRedirectConfig":{"description":"Information about a redirect action.\n A URI consists of the following components: protocol://hostname:port/path?query. You must modify at least one of the following components to avoid a redirect loop: protocol, hostname, port, or path. Any components that you do not modify retain their original values.\n You can reuse URI components using the following reserved keywords:\n  +  #{protocol}\n  +  #{host}\n  +  #{port}\n  +  #{path} (the leading \"/\" is removed)\n  +  #{query}\n  \n For example, you can change the path to \"/new/#{path}\", the hostname to \"example.#{host}\", or the query to \"#{query}\u0026value=xyz\".","properties":{"host":{"type":"string","description":"The hostname. This component is not percent-encoded. The hostname can contain #{host}."},"path":{"type":"string","description":"The absolute path, starting with the leading \"/\". This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}."},"port":{"type":"string","description":"The port. You can specify a value from 1 to 65535 or #{port}."},"protocol":{"type":"string","description":"The protocol. You can specify HTTP, HTTPS, or #{protocol}. You can redirect HTTP to HTTP, HTTP to HTTPS, and HTTPS to HTTPS. You can't redirect HTTPS to HTTP."},"query":{"type":"string","description":"The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading \"?\", as it is automatically added. You can specify any of the reserved keywords."},"statusCode":{"type":"string","description":"The HTTP redirect code. The redirect is either permanent (HTTP 301) or temporary (HTTP 302)."}},"type":"object","required":["statusCode"]},"aws-native:elasticloadbalancingv2:ListenerRuleAction":{"description":"Specifies an action for a listener rule.","properties":{"authenticateCognitoConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleAuthenticateCognitoConfig","description":"[HTTPS listeners] Information for using Amazon Cognito to authenticate users. Specify only when ``Type`` is ``authenticate-cognito``."},"authenticateOidcConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleAuthenticateOidcConfig","description":"[HTTPS listeners] Information about an identity provider that is compliant with OpenID Connect (OIDC). Specify only when ``Type`` is ``authenticate-oidc``."},"fixedResponseConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleFixedResponseConfig","description":"[Application Load Balancer] Information for creating an action that returns a custom HTTP response. Specify only when ``Type`` is ``fixed-response``."},"forwardConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleForwardConfig","description":"Information for creating an action that distributes requests among multiple target groups. Specify only when ``Type`` is ``forward``.\n If you specify both ``ForwardConfig`` and ``TargetGroupArn``, you can specify only one target group using ``ForwardConfig`` and it must be the same target group specified in ``TargetGroupArn``."},"jwtValidationConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleJwtValidationConfig","description":"[HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when ``Type`` is ``jwt-validation``."},"order":{"type":"integer","description":"The order for the action. This value is required for rules with multiple actions. The action with the lowest value for order is performed first."},"redirectConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRedirectConfig","description":"[Application Load Balancer] Information for creating a redirect action. Specify only when ``Type`` is ``redirect``."},"targetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group. Specify only when ``Type`` is ``forward`` and you want to route to a single target group. To route to multiple target groups, you must use ``ForwardConfig`` instead."},"type":{"type":"string","description":"The type of action."}},"type":"object","required":["type"]},"aws-native:elasticloadbalancingv2:ListenerRuleAuthenticateCognitoConfig":{"description":"Specifies information required when integrating with Amazon Cognito to authenticate users.","properties":{"authenticationRequestExtraParams":{"type":"object","additionalProperties":{"type":"string"},"description":"The query parameters (up to 10) to include in the redirect request to the authorization endpoint."},"onUnauthenticatedRequest":{"type":"string","description":"The behavior if the user is not authenticated. The following are possible values:\n  +  deny```` - Return an HTTP 401 Unauthorized error.\n  +  allow```` - Allow the request to be forwarded to the target.\n  +  authenticate```` - Redirect the request to the IdP authorization endpoint. This is the default value."},"scope":{"type":"string","description":"The set of user claims to be requested from the IdP. The default is ``openid``.\n To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP."},"sessionCookieName":{"type":"string","description":"The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie."},"sessionTimeout":{"type":"integer","description":"The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days)."},"userPoolArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Cognito user pool."},"userPoolClientId":{"type":"string","description":"The ID of the Amazon Cognito user pool client."},"userPoolDomain":{"type":"string","description":"The domain prefix or fully-qualified domain name of the Amazon Cognito user pool."}},"type":"object","required":["userPoolArn","userPoolClientId","userPoolDomain"]},"aws-native:elasticloadbalancingv2:ListenerRuleAuthenticateOidcConfig":{"description":"Specifies information required using an identity provide (IdP) that is compliant with OpenID Connect (OIDC) to authenticate users.","properties":{"authenticationRequestExtraParams":{"type":"object","additionalProperties":{"type":"string"},"description":"The query parameters (up to 10) to include in the redirect request to the authorization endpoint."},"authorizationEndpoint":{"type":"string","description":"The authorization endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."},"clientId":{"type":"string","description":"The OAuth 2.0 client identifier."},"clientSecret":{"type":"string","description":"The OAuth 2.0 client secret. This parameter is required if you are creating a rule. If you are modifying a rule, you can omit this parameter if you set ``UseExistingClientSecret`` to true."},"issuer":{"type":"string","description":"The OIDC issuer identifier of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."},"onUnauthenticatedRequest":{"type":"string","description":"The behavior if the user is not authenticated. The following are possible values:\n  +  deny```` - Return an HTTP 401 Unauthorized error.\n  +  allow```` - Allow the request to be forwarded to the target.\n  +  authenticate```` - Redirect the request to the IdP authorization endpoint. This is the default value."},"scope":{"type":"string","description":"The set of user claims to be requested from the IdP. The default is ``openid``.\n To verify which scope values your IdP supports and how to separate multiple values, see the documentation for your IdP."},"sessionCookieName":{"type":"string","description":"The name of the cookie used to maintain session information. The default is AWSELBAuthSessionCookie."},"sessionTimeout":{"type":"integer","description":"The maximum duration of the authentication session, in seconds. The default is 604800 seconds (7 days)."},"tokenEndpoint":{"type":"string","description":"The token endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."},"useExistingClientSecret":{"type":"boolean","description":"Indicates whether to use the existing client secret when modifying a rule. If you are creating a rule, you can omit this parameter or set it to false."},"userInfoEndpoint":{"type":"string","description":"The user info endpoint of the IdP. This must be a full URL, including the HTTPS protocol, the domain, and the path."}},"type":"object","required":["authorizationEndpoint","clientId","issuer","tokenEndpoint","userInfoEndpoint"]},"aws-native:elasticloadbalancingv2:ListenerRuleFixedResponseConfig":{"description":"Specifies information required when returning a custom HTTP response.","properties":{"contentType":{"type":"string","description":"The content type.\n Valid Values: text/plain | text/css | text/html | application/javascript | application/json"},"messageBody":{"type":"string","description":"The message."},"statusCode":{"type":"string","description":"The HTTP response code (2XX, 4XX, or 5XX)."}},"type":"object","required":["statusCode"]},"aws-native:elasticloadbalancingv2:ListenerRuleForwardConfig":{"description":"Information for creating an action that distributes requests among multiple target groups. Specify only when ``Type`` is ``forward``.\n If you specify both ``ForwardConfig`` and ``TargetGroupArn``, you can specify only one target group using ``ForwardConfig`` and it must be the same target group specified in ``TargetGroupArn``.","properties":{"targetGroupStickinessConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleTargetGroupStickinessConfig","description":"Information about the target group stickiness for a rule."},"targetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleTargetGroupTuple"},"description":"Information about how traffic will be distributed between multiple target groups in a forward rule."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleHostHeaderConfig":{"description":"Information about a host header condition.","properties":{"regexValues":{"type":"array","items":{"type":"string"}},"values":{"type":"array","items":{"type":"string"},"description":"The host names. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one \".\" character. You can include only alphabetical characters after the final \".\" character.\n If you specify multiple strings, the condition is satisfied if one of the strings matches the host name."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleHttpHeaderConfig":{"description":"Information about an HTTP header condition.\n There is a set of standard HTTP header fields. You can also define custom HTTP header fields.","properties":{"httpHeaderName":{"type":"string","description":"The name of the HTTP header field. The maximum size is 40 characters. The header name is case insensitive. The allowed characters are specified by RFC 7230. Wildcards are not supported."},"regexValues":{"type":"array","items":{"type":"string"}},"values":{"type":"array","items":{"type":"string"},"description":"The strings to compare against the value of the HTTP header. The maximum length of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character).\n If the same header appears multiple times in the request, we search them in order until a match is found.\n If you specify multiple strings, the condition is satisfied if one of the strings matches the value of the HTTP header. To require that all of the strings are a match, create one condition per string."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleHttpRequestMethodConfig":{"description":"Information about an HTTP method condition.\n HTTP defines a set of request methods, also referred to as HTTP verbs. For more information, see the [HTTP Method Registry](https://docs.aws.amazon.com/https://www.iana.org/assignments/http-methods/http-methods.xhtml). You can also define custom HTTP methods.","properties":{"values":{"type":"array","items":{"type":"string"},"description":"The name of the request method. The maximum length is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match.\n If you specify multiple strings, the condition is satisfied if one of the strings matches the HTTP request method. We recommend that you route GET and HEAD requests in the same way, because the response to a HEAD request may be cached."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleJwtValidationActionAdditionalClaim":{"description":"Information about an additional claim to validate.","properties":{"format":{"type":"string","description":"The format of the claim value."},"name":{"type":"string","description":"The name of the claim. You can't specify ``exp``, ``iss``, ``nbf``, or ``iat`` because we validate them by default."},"values":{"type":"array","items":{"type":"string"},"description":"The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is ``space-separated-values``, the values can't include spaces."}},"type":"object","required":["format","name","values"]},"aws-native:elasticloadbalancingv2:ListenerRuleJwtValidationConfig":{"properties":{"additionalClaims":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleJwtValidationActionAdditionalClaim"}},"issuer":{"type":"string"},"jwksEndpoint":{"type":"string"}},"type":"object","required":["issuer","jwksEndpoint"]},"aws-native:elasticloadbalancingv2:ListenerRulePathPatternConfig":{"description":"Information about a path pattern condition.","properties":{"regexValues":{"type":"array","items":{"type":"string"}},"values":{"type":"array","items":{"type":"string"},"description":"The path patterns to compare against the request URL. The maximum size of each string is 128 characters. The comparison is case sensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character).\n If you specify multiple strings, the condition is satisfied if one of them matches the request URL. The path pattern is compared only to the path of the URL, not to its query string."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleQueryStringConfig":{"description":"Information about a query string condition.\n The query string component of a URI starts after the first '?' character and is terminated by either a '#' character or the end of the URI. A typical query string contains key/value pairs separated by '\u0026' characters. The allowed characters are specified by RFC 3986. Any character can be percentage encoded.","properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleQueryStringKeyValue"},"description":"The key/value pairs or values to find in the query string. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal '*' or '?' character in a query string, you must escape these characters in ``Values`` using a '\\' character.\n If you specify multiple key/value pairs or values, the condition is satisfied if one of them is found in the query string."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleQueryStringKeyValue":{"description":"Information about a key/value pair.","properties":{"key":{"type":"string","description":"The key. You can omit the key."},"value":{"type":"string","description":"The value."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleRedirectConfig":{"description":"Information about a redirect action.\n A URI consists of the following components: protocol://hostname:port/path?query. You must modify at least one of the following components to avoid a redirect loop: protocol, hostname, port, or path. Any components that you do not modify retain their original values.\n You can reuse URI components using the following reserved keywords:\n  +  #{protocol}\n  +  #{host}\n  +  #{port}\n  +  #{path} (the leading \"/\" is removed)\n  +  #{query}\n  \n For example, you can change the path to \"/new/#{path}\", the hostname to \"example.#{host}\", or the query to \"#{query}\u0026value=xyz\".","properties":{"host":{"type":"string","description":"The hostname. This component is not percent-encoded. The hostname can contain #{host}."},"path":{"type":"string","description":"The absolute path, starting with the leading \"/\". This component is not percent-encoded. The path can contain #{host}, #{path}, and #{port}."},"port":{"type":"string","description":"The port. You can specify a value from 1 to 65535 or #{port}."},"protocol":{"type":"string","description":"The protocol. You can specify HTTP, HTTPS, or #{protocol}. You can redirect HTTP to HTTP, HTTP to HTTPS, and HTTPS to HTTPS. You can't redirect HTTPS to HTTP."},"query":{"type":"string","description":"The query parameters, URL-encoded when necessary, but not percent-encoded. Do not include the leading \"?\", as it is automatically added. You can specify any of the reserved keywords."},"statusCode":{"type":"string","description":"The HTTP redirect code. The redirect is either permanent (HTTP 301) or temporary (HTTP 302)."}},"type":"object","required":["statusCode"]},"aws-native:elasticloadbalancingv2:ListenerRuleRewriteConfig":{"description":"Information about a rewrite transform. This transform matches a pattern and replaces it with the specified string.","properties":{"regex":{"type":"string","description":"The regular expression to match in the input string. The maximum length of the string is 1,024 characters."},"replace":{"type":"string","description":"The replacement string to use when rewriting the matched input. The maximum length of the string is 1,024 characters. You can specify capture groups in the regular expression (for example, $1 and $2)."}},"type":"object","required":["regex","replace"]},"aws-native:elasticloadbalancingv2:ListenerRuleRewriteConfigObject":{"properties":{"rewrites":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRewriteConfig"}}},"type":"object","required":["rewrites"]},"aws-native:elasticloadbalancingv2:ListenerRuleRuleCondition":{"description":"Specifies a condition for a listener rule.","properties":{"field":{"type":"string","description":"The field in the HTTP request. The following are the possible values:\n  +   ``http-header`` \n  +   ``http-request-method`` \n  +   ``host-header`` \n  +   ``path-pattern`` \n  +   ``query-string`` \n  +   ``source-ip``"},"hostHeaderConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleHostHeaderConfig","description":"Information for a host header condition. Specify only when ``Field`` is ``host-header``."},"httpHeaderConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleHttpHeaderConfig","description":"Information for an HTTP header condition. Specify only when ``Field`` is ``http-header``."},"httpRequestMethodConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleHttpRequestMethodConfig","description":"Information for an HTTP method condition. Specify only when ``Field`` is ``http-request-method``."},"pathPatternConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRulePathPatternConfig","description":"Information for a path pattern condition. Specify only when ``Field`` is ``path-pattern``."},"queryStringConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleQueryStringConfig","description":"Information for a query string condition. Specify only when ``Field`` is ``query-string``."},"regexValues":{"type":"array","items":{"type":"string"},"description":"The regular expressions to match against the condition field. The maximum length of each string is 128 characters. Specify only when ``Field`` is ``http-header``, ``host-header``, or ``path-pattern``."},"sourceIpConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleSourceIpConfig","description":"Information for a source IP condition. Specify only when ``Field`` is ``source-ip``."},"values":{"type":"array","items":{"type":"string"},"description":"The condition value. Specify only when ``Field`` is ``host-header`` or ``path-pattern``. Alternatively, to specify multiple host names or multiple path patterns, use ``HostHeaderConfig`` or ``PathPatternConfig``.\n If ``Field`` is ``host-header`` and you're not using ``HostHeaderConfig``, you can specify a single host name (for example, my.example.com). A host name is case insensitive, can be up to 128 characters in length, and can contain any of the following characters.\n  +  A-Z, a-z, 0-9\n  +  - .\n  +  * (matches 0 or more characters)\n  +  ? (matches exactly 1 character)\n  \n If ``Field`` is ``path-pattern`` and you're not using ``PathPatternConfig``, you can specify a single path pattern (for example, /img/*). A path pattern is case-sensitive, can be up to 128 characters in length, and can contain any of the following characters.\n  +  A-Z, a-z, 0-9\n  +  _ - . $ / ~ \" ' @ : +\n  +  \u0026 (using \u0026amp;)\n  +  * (matches 0 or more characters)\n  +  ? (matches exactly 1 character)"}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleSourceIpConfig":{"description":"Information about a source IP condition.\n You can use this condition to route based on the IP address of the source that connects to the load balancer. If a client is behind a proxy, this is the IP address of the proxy not the IP address of the client.","properties":{"values":{"type":"array","items":{"type":"string"},"description":"The source IP addresses, in CIDR format. You can use both IPv4 and IPv6 addresses. Wildcards are not supported.\n If you specify multiple addresses, the condition is satisfied if the source IP address of the request matches one of the CIDR blocks. This condition is not satisfied by the addresses in the X-Forwarded-For header."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleTargetGroupStickinessConfig":{"description":"Information about the target group stickiness for a rule.","properties":{"durationSeconds":{"type":"integer","description":"[Application Load Balancers] The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days). You must specify this value when enabling target group stickiness."},"enabled":{"type":"boolean","description":"Indicates whether target group stickiness is enabled."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleTargetGroupTuple":{"description":"Information about how traffic will be distributed between multiple target groups in a forward rule.","properties":{"targetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group."},"weight":{"type":"integer","description":"The weight. The range is 0 to 999."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerRuleTransform":{"properties":{"hostHeaderRewriteConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRewriteConfigObject"},"type":{"type":"string"},"urlRewriteConfig":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRewriteConfigObject"}},"type":"object","required":["type"]},"aws-native:elasticloadbalancingv2:ListenerTargetGroupStickinessConfig":{"description":"Information about the target group stickiness for a rule.","properties":{"durationSeconds":{"type":"integer","description":"[Application Load Balancers] The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days). You must specify this value when enabling target group stickiness."},"enabled":{"type":"boolean","description":"Indicates whether target group stickiness is enabled."}},"type":"object"},"aws-native:elasticloadbalancingv2:ListenerTargetGroupTuple":{"description":"Information about how traffic will be distributed between multiple target groups in a forward rule.","properties":{"targetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group."},"weight":{"type":"integer","description":"The weight. The range is 0 to 999."}},"type":"object"},"aws-native:elasticloadbalancingv2:LoadBalancerAttribute":{"description":"Specifies an attribute for an Application Load Balancer, a Network Load Balancer, or a Gateway Load Balancer.","properties":{"key":{"type":"string","description":"The name of the attribute.\n The following attributes are supported by all load balancers:\n  +  ``deletion_protection.enabled`` - Indicates whether deletion protection is enabled. The value is ``true`` or ``false``. The default is ``false``.\n  +  ``load_balancing.cross_zone.enabled`` - Indicates whether cross-zone load balancing is enabled. The possible values are ``true`` and ``false``. The default for Network Load Balancers and Gateway Load Balancers is ``false``. The default for Application Load Balancers is ``true``, and can't be changed.\n  \n The following attributes are supported by both Application Load Balancers and Network Load Balancers:\n  +  ``access_logs.s3.enabled`` - Indicates whether access logs are enabled. The value is ``true`` or ``false``. The default is ``false``.\n  +  ``access_logs.s3.bucket`` - The name of the S3 bucket for the access logs. This attribute is required if access logs are enabled. The bucket must exist in the same region as the load balancer and have a bucket policy that grants Elastic Load Balancing permissions to write to the bucket.\n  +  ``access_logs.s3.prefix`` - The prefix for the location in the S3 bucket for the access logs.\n  +  ``ipv6.deny_all_igw_traffic`` - Blocks internet gateway (IGW) access to the load balancer. It is set to ``false`` for internet-facing load balancers and ``true`` for internal load balancers, preventing unintended access to your internal load balancer through an internet gateway.\n  +  ``zonal_shift.config.enabled`` - Indicates whether zonal shift is enabled. The possible values are ``true`` and ``false``. The default is ``false``.\n  \n The following attributes are supported by only Application Load Balancers:\n  +  ``idle_timeout.timeout_seconds`` - The idle timeout value, in seconds. The valid range is 1-4000 seconds. The default is 60 seconds.\n  +  ``client_keep_alive.seconds`` - The client keep alive value, in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.\n  +  ``connection_logs.s3.enabled`` - Indicates whether connection logs are enabled. The value is ``true`` or ``false``. The default is ``false``.\n  +  ``connection_logs.s3.bucket`` - The name of the S3 bucket for the connection logs. This attribute is required if connection logs are enabled. The bucket must exist in the same region as the load balancer and have a bucket policy that grants Elastic Load Balancing permissions to write to the bucket.\n  +  ``connection_logs.s3.prefix`` - The prefix for the location in the S3 bucket for the connection logs.\n  +  ``health_check_logs.s3.enabled`` - Indicates whether health check logs are enabled. The value is ``true`` or ``false``. The default is ``false``.\n  +  ``health_check_logs.s3.bucket`` - The name of the S3 bucket for the health check logs. This attribute is required if health check logs are enabled. The bucket must exist in the same region as the load balancer and have a bucket policy that grants Elastic Load Balancing permissions to write to the bucket.\n  +  ``health_check_logs.s3.prefix`` - The prefix for the location in the S3 bucket for the health check logs.\n  +  ``routing.http.desync_mitigation_mode`` - Determines how the load balancer handles requests that might pose a security risk to your application. The possible values are ``monitor``, ``defensive``, and ``strictest``. The default is ``defensive``.\n  +  ``routing.http.drop_invalid_header_fields.enabled`` - Indicates whether HTTP headers with invalid header fields are removed by the load balancer (``true``) or routed to targets (``false``). The default is ``false``.\n  +  ``routing.http.preserve_host_header.enabled`` - Indicates whether the Application Load Balancer should preserve the ``Host`` header in the HTTP request and send it to the target without any change. The possible values are ``true`` and ``false``. The default is ``false``.\n  +  ``routing.http.x_amzn_tls_version_and_cipher_suite.enabled`` - Indicates whether the two headers (``x-amzn-tls-version`` and ``x-amzn-tls-cipher-suite``), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. The ``x-amzn-tls-version`` header has information about the TLS protocol version negotiated with the client, and the ``x-amzn-tls-cipher-suite`` header has information about the cipher suite negotiated with the client. Both headers are in OpenSSL format. The possible values for the attribute are ``true`` and ``false``. The default is ``false``.\n  +  ``routing.http.xff_client_port.enabled`` - Indicates whether the ``X-Forwarded-For`` header should preserve the source port that the client used to connect to the load balancer. The possible values are ``true`` and ``false``. The default is ``false``.\n  +  ``routing.http.xff_header_processing.mode`` - Enables you to modify, preserve, or remove the ``X-Forwarded-For`` header in the HTTP request before the Application Load Balancer sends the request to the target. The possible values are ``append``, ``preserve``, and ``remove``. The default is ``append``.\n  +  If the value is ``append``, the Application Load Balancer adds the client IP address (of the last hop) to the ``X-Forwarded-For`` header in the HTTP request before it sends it to targets.\n  +  If the value is ``preserve`` the Application Load Balancer preserves the ``X-Forwarded-For`` header in the HTTP request, and sends it to targets without any change.\n  +  If the value is ``remove``, the Application Load Balancer removes the ``X-Forwarded-For`` header in the HTTP request before it sends it to targets.\n  \n  +  ``routing.http2.enabled`` - Indicates whether clients can connect to the load balancer using HTTP/2. If ``true``, clients can connect using HTTP/2 or HTTP/1.1. However, all client requests are subject to the stricter HTTP/2 header validation rules. For example, message header names must contain only alphanumeric characters and hyphens. If ``false``, clients must connect using HTTP/1.1. The default is ``true``.\n  +  ``waf.fail_open.enabled`` - Indicates whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. The possible values are ``true`` and ``false``. The default is ``false``.\n  \n The following attributes are supported by only Network Load Balancers:\n  +  ``dns_record.client_routing_policy`` - Indicates how traffic is distributed among the load balancer Availability Zones. The possible values are ``availability_zone_affinity`` with 100 percent zonal affinity, ``partial_availability_zone_affinity`` with 85 percent zonal affinity, and ``any_availability_zone`` with 0 percent zonal affinity.\n  +  ``secondary_ips.auto_assigned.per_subnet`` - The number of secondary IP addresses to configure for your load balancer nodes. Use to address port allocation errors if you can't add targets. The valid range is 0 to 7. The default is 0. After you set this value, you can't decrease it."},"value":{"type":"string","description":"The value of the attribute."}},"type":"object"},"aws-native:elasticloadbalancingv2:LoadBalancerMinimumLoadBalancerCapacity":{"description":"The minimum capacity for a load balancer.","properties":{"capacityUnits":{"type":"integer","description":"The number of capacity units."}},"type":"object","required":["capacityUnits"]},"aws-native:elasticloadbalancingv2:LoadBalancerSubnetMapping":{"description":"Specifies a subnet for a load balancer.","properties":{"allocationId":{"type":"string","description":"[Network Load Balancers] The allocation ID of the Elastic IP address for an internet-facing load balancer."},"iPv6Address":{"type":"string","description":"[Network Load Balancers] The IPv6 address."},"privateIPv4Address":{"type":"string","description":"[Network Load Balancers] The private IPv4 address for an internal load balancer."},"sourceNatIpv6Prefix":{"type":"string","description":"[Network Load Balancers with UDP listeners] The IPv6 prefix to use for source NAT. Specify an IPv6 prefix (/80 netmask) from the subnet CIDR block or ``auto_assigned`` to use an IPv6 prefix selected at random from the subnet CIDR block."},"subnetId":{"type":"string","description":"The ID of the subnet."}},"type":"object","required":["subnetId"]},"aws-native:elasticloadbalancingv2:LoadBalancerTag":{"description":"Information about a tag.","properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key"]},"aws-native:elasticloadbalancingv2:TargetGroupAttribute":{"properties":{"key":{"type":"string","description":"The value of the attribute."},"value":{"type":"string","description":"The name of the attribute."}},"type":"object"},"aws-native:elasticloadbalancingv2:TargetGroupMatcher":{"properties":{"grpcCode":{"type":"string","description":"You can specify values between 0 and 99. You can specify multiple values, or a range of values. The default value is 12."},"httpCode":{"type":"string","description":"For Application Load Balancers, you can specify values between 200 and 499, and the default value is 200. You can specify multiple values or a range of values. "}},"type":"object"},"aws-native:elasticloadbalancingv2:TargetGroupTag":{"properties":{"key":{"type":"string","description":"The value for the tag. "},"value":{"type":"string","description":"The key name of the tag. "}},"type":"object","required":["key","value"]},"aws-native:elasticloadbalancingv2:TargetGroupTargetDescription":{"properties":{"availabilityZone":{"type":"string","description":"An Availability Zone or all. This determines whether the target receives traffic from the load balancer nodes in the specified Availability Zone or from all enabled Availability Zones for the load balancer."},"id":{"type":"string","description":"The ID of the target. If the target type of the target group is instance, specify an instance ID. If the target type is ip, specify an IP address. If the target type is lambda, specify the ARN of the Lambda function. If the target type is alb, specify the ARN of the Application Load Balancer target. "},"port":{"type":"integer","description":"The port on which the target is listening. If the target group protocol is GENEVE, the supported port is 6081. If the target type is alb, the targeted Application Load Balancer must have at least one listener whose port matches the target group port. Not used if the target is a Lambda function."},"quicServerId":{"type":"string","description":"The Server ID used by targets when using QUIC or TCP_QUIC protocols."}},"type":"object","required":["id"]},"aws-native:elasticloadbalancingv2:TrustStoreRevocation":{"properties":{"numberOfRevokedEntries":{"type":"integer","description":"The number of revoked certificates."},"revocationId":{"type":"string","description":"The revocation ID of the revocation file."},"revocationType":{"type":"string","description":"The type of revocation file."},"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store."}},"type":"object"},"aws-native:elasticloadbalancingv2:TrustStoreRevocationRevocationContent":{"properties":{"revocationType":{"type":"string","description":"The type of revocation file."},"s3Bucket":{"type":"string","description":"The Amazon S3 bucket for the revocation file."},"s3Key":{"type":"string","description":"The Amazon S3 path for the revocation file."},"s3ObjectVersion":{"type":"string","description":"The Amazon S3 object version of the revocation file."}},"type":"object"},"aws-native:elasticloadbalancingv2:TrustStoreTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:elementalinference:FeedClippingConfig":{"properties":{"callbackMetadata":{"type":"string"}},"type":"object"},"aws-native:elementalinference:FeedCroppingConfig":{"type":"object"},"aws-native:elementalinference:FeedGetOutput":{"properties":{"description":{"type":"string"},"name":{"type":"string"},"outputConfig":{"oneOf":[{"$ref":"#/types/aws-native:elementalinference:FeedOutputConfig0Properties"},{"$ref":"#/types/aws-native:elementalinference:FeedOutputConfig1Properties"}]},"status":{"$ref":"#/types/aws-native:elementalinference:FeedOutputStatus"}},"type":"object","required":["name","outputConfig","status"]},"aws-native:elementalinference:FeedOutputConfig0Properties":{"properties":{"cropping":{"$ref":"#/types/aws-native:elementalinference:FeedCroppingConfig"}},"type":"object","required":["cropping"]},"aws-native:elementalinference:FeedOutputConfig1Properties":{"properties":{"clipping":{"$ref":"#/types/aws-native:elementalinference:FeedClippingConfig"}},"type":"object","required":["clipping"]},"aws-native:elementalinference:FeedOutputStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:emr:StepHadoopJarStepConfig":{"properties":{"args":{"type":"array","items":{"type":"string"},"description":"A list of command line arguments passed to the JAR file's main function when executed."},"jar":{"type":"string","description":"A path to a JAR file run during the step."},"mainClass":{"type":"string","description":"The name of the main class in the specified Java file. If not specified, the JAR file should specify a Main-Class in its manifest file."},"stepProperties":{"type":"array","items":{"$ref":"#/types/aws-native:emr:StepKeyValue"},"description":"A list of Java properties that are set when the step runs. You can use these properties to pass key value pairs to your main function."}},"type":"object","required":["jar"]},"aws-native:emr:StepKeyValue":{"properties":{"key":{"type":"string","description":"The unique identifier of a key-value pair."},"value":{"type":"string","description":"The value part of the identified key."}},"type":"object"},"aws-native:emr:StudioAuthMode":{"description":"Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.","type":"string","enum":[{"name":"Sso","value":"SSO"},{"name":"Iam","value":"IAM"}]},"aws-native:emr:StudioIdcUserAssignment":{"description":"Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.","type":"string","enum":[{"name":"Required","value":"REQUIRED"},{"name":"Optional","value":"OPTIONAL"}]},"aws-native:emr:StudioSessionMappingIdentityType":{"description":"Specifies whether the identity to map to the Studio is a user or a group.","type":"string","enum":[{"name":"User","value":"USER"},{"name":"Group","value":"GROUP"}]},"aws-native:emr:StudioTag":{"description":"An arbitrary set of tags (key-value pairs) for this EMR Studio.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:emr:WalWorkspaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:emrcontainers:EndpointCertificate":{"properties":{"certificateArn":{"type":"string"},"certificateData":{"type":"string"}},"type":"object"},"aws-native:emrcontainers:EndpointCloudWatchMonitoringConfiguration":{"properties":{"logGroupName":{"type":"string"},"logStreamNamePrefix":{"type":"string"}},"type":"object","required":["logGroupName"]},"aws-native:emrcontainers:EndpointConfigurationOverrides":{"properties":{"applicationConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:emrcontainers:EndpointEmreksConfiguration"}},"monitoringConfiguration":{"$ref":"#/types/aws-native:emrcontainers:EndpointMonitoringConfiguration"}},"type":"object"},"aws-native:emrcontainers:EndpointContainerLogRotationConfiguration":{"properties":{"maxFilesToKeep":{"type":"integer"},"rotationSize":{"type":"string"}},"type":"object","required":["maxFilesToKeep","rotationSize"]},"aws-native:emrcontainers:EndpointEmreksConfiguration":{"properties":{"classification":{"type":"string"},"configurations":{"type":"array","items":{"$ref":"#/types/aws-native:emrcontainers:EndpointEmreksConfiguration"}},"properties":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object","required":["classification"]},"aws-native:emrcontainers:EndpointMonitoringConfiguration":{"properties":{"cloudWatchMonitoringConfiguration":{"$ref":"#/types/aws-native:emrcontainers:EndpointCloudWatchMonitoringConfiguration"},"containerLogRotationConfiguration":{"$ref":"#/types/aws-native:emrcontainers:EndpointContainerLogRotationConfiguration"},"persistentAppUi":{"$ref":"#/types/aws-native:emrcontainers:EndpointMonitoringConfigurationPersistentAppUi"},"s3MonitoringConfiguration":{"$ref":"#/types/aws-native:emrcontainers:EndpointS3MonitoringConfiguration"}},"type":"object"},"aws-native:emrcontainers:EndpointMonitoringConfigurationPersistentAppUi":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:emrcontainers:EndpointS3MonitoringConfiguration":{"properties":{"logUri":{"type":"string"}},"type":"object","required":["logUri"]},"aws-native:emrcontainers:EndpointTag":{"properties":{"key":{"type":"string","description":"A user-defined key, which is the minimum required information for a valid tag."},"value":{"type":"string","description":"A user-defined value, which is optional in a tag."}},"type":"object","required":["key","value"]},"aws-native:emrcontainers:SecurityConfigurationAtRestEncryptionConfiguration":{"description":"At-rest encryption configuration.","properties":{"localDiskEncryptionConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationLocalDiskEncryptionConfiguration"},"s3EncryptionConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationS3EncryptionConfiguration"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationAuthenticationConfiguration":{"description":"Authentication configuration for the security configuration.","properties":{"iamConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationIamConfiguration"},"identityCenterConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationIdentityCenterConfiguration"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationAuthorizationConfiguration":{"description":"Authorization configuration for the security configuration.","properties":{"lakeFormationConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationLakeFormationConfiguration"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationContainerInfo":{"description":"Container information.","properties":{"eksInfo":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationEksInfo"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationContainerProvider":{"description":"Container provider information.","properties":{"id":{"type":"string","description":"The container provider ID."},"info":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationContainerInfo"},"type":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationContainerProviderType","description":"The container provider type."}},"type":"object","required":["id","type"]},"aws-native:emrcontainers:SecurityConfigurationContainerProviderType":{"description":"The container provider type.","type":"string","enum":[{"name":"Eks","value":"EKS"}]},"aws-native:emrcontainers:SecurityConfigurationData":{"description":"Security configuration data containing encryption and authorization settings.","properties":{"authenticationConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationAuthenticationConfiguration"},"authorizationConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationAuthorizationConfiguration"},"encryptionConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationEncryptionConfiguration"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationEksInfo":{"description":"EKS information.","properties":{"namespace":{"type":"string","description":"The EKS namespace."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationEncryptionConfiguration":{"description":"Encryption configuration for the security configuration.","properties":{"atRestEncryptionConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationAtRestEncryptionConfiguration"},"inTransitEncryptionConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationInTransitEncryptionConfiguration"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationIamConfiguration":{"description":"IAM configuration.","properties":{"systemRole":{"type":"string","description":"The system role ARN."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationIdentityCenterConfiguration":{"description":"Identity Center configuration.","properties":{"enableIdentityCenter":{"type":"boolean","description":"Whether to enable Identity Center integration."},"identityCenterApplicationAssignmentRequired":{"type":"boolean","description":"Whether Identity Center application assignment is required."},"identityCenterInstanceArn":{"type":"string","description":"The ARN of the Identity Center instance."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationInTransitEncryptionConfiguration":{"description":"In-transit encryption configuration.","properties":{"tlsCertificateConfiguration":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationTlsCertificateConfiguration"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationLakeFormationConfiguration":{"description":"Lake Formation configuration.","properties":{"authorizedSessionTagValue":{"type":"string","description":"The session tag to authorize Lake Formation access."},"queryAccessControlEnabled":{"type":"boolean","description":"Whether query access control is enabled."},"queryEngineRoleArn":{"type":"string","description":"The ARN of the query engine role."},"secureNamespaceInfo":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationSecureNamespaceInfo"}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationLocalDiskEncryptionConfiguration":{"description":"Local disk encryption configuration.","properties":{"awsKmsKeyId":{"type":"string","description":"The AWS KMS key ID."},"encryptionKeyProviderType":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationLocalDiskEncryptionConfigurationEncryptionKeyProviderType","description":"The encryption key provider type."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationLocalDiskEncryptionConfigurationEncryptionKeyProviderType":{"description":"The encryption key provider type.","type":"string","enum":[{"name":"AwsKms","value":"AwsKms"}]},"aws-native:emrcontainers:SecurityConfigurationS3EncryptionConfiguration":{"description":"S3 encryption configuration.","properties":{"encryptionOption":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationS3EncryptionConfigurationEncryptionOption","description":"The S3 encryption option."},"kmsKeyId":{"type":"string","description":"The KMS key ID for encryption."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationS3EncryptionConfigurationEncryptionOption":{"description":"The S3 encryption option.","type":"string","enum":[{"name":"SseS3","value":"SSE-S3"},{"name":"SseKms","value":"SSE-KMS"},{"name":"CseKms","value":"CSE-KMS"}]},"aws-native:emrcontainers:SecurityConfigurationSecureNamespaceInfo":{"description":"Secure namespace information for Lake Formation.","properties":{"clusterId":{"type":"string","description":"The ID of the cluster."},"namespace":{"type":"string","description":"The namespace."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationTag":{"description":"An arbitrary set of tags (key-value pairs) for this security configuration.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:emrcontainers:SecurityConfigurationTlsCertificateConfiguration":{"description":"TLS certificate configuration for in-transit encryption.","properties":{"certificateProviderType":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationTlsCertificateConfigurationCertificateProviderType","description":"The certificate provider type."},"privateKeySecretArn":{"type":"string","description":"The ARN of the secret containing the private key."},"publicKeySecretArn":{"type":"string","description":"The ARN of the secret containing the public key."}},"type":"object"},"aws-native:emrcontainers:SecurityConfigurationTlsCertificateConfigurationCertificateProviderType":{"description":"The certificate provider type.","type":"string","enum":[{"name":"Pem","value":"PEM"}]},"aws-native:emrcontainers:VirtualClusterContainerInfo":{"properties":{"eksInfo":{"$ref":"#/types/aws-native:emrcontainers:VirtualClusterEksInfo","description":"The information about the Amazon EKS cluster."}},"type":"object","required":["eksInfo"]},"aws-native:emrcontainers:VirtualClusterContainerProvider":{"properties":{"id":{"type":"string","description":"The ID of the container cluster"},"info":{"$ref":"#/types/aws-native:emrcontainers:VirtualClusterContainerInfo","description":"The information about the container cluster."},"type":{"type":"string","description":"The type of the container provider"}},"type":"object","required":["id","info","type"]},"aws-native:emrcontainers:VirtualClusterEksInfo":{"properties":{"namespace":{"type":"string","description":"The namespaces of the EKS cluster.\n\n*Minimum* : 1\n\n*Maximum* : 63\n\n*Pattern* : `[a-z0-9]([-a-z0-9]*[a-z0-9])?`"}},"type":"object","required":["namespace"]},"aws-native:emrcontainers:VirtualClusterTag":{"description":"An arbitrary set of tags (key-value pairs) for this virtual cluster.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:emrserverless:ApplicationArchitecture":{"description":"The cpu architecture of an application.","type":"string","enum":[{"name":"Arm64","value":"ARM64"},{"name":"X8664","value":"X86_64"}]},"aws-native:emrserverless:ApplicationAutoStartConfiguration":{"description":"Configuration for Auto Start of Application","properties":{"enabled":{"type":"boolean","description":"If set to true, the Application will automatically start. Defaults to true."}},"type":"object"},"aws-native:emrserverless:ApplicationAutoStopConfiguration":{"description":"Configuration for Auto Stop of Application","properties":{"enabled":{"type":"boolean","description":"If set to true, the Application will automatically stop after being idle. Defaults to true."},"idleTimeoutMinutes":{"type":"integer","description":"The amount of time [in minutes] to wait before auto stopping the Application when idle. Defaults to 15 minutes."}},"type":"object"},"aws-native:emrserverless:ApplicationCloudWatchLoggingConfiguration":{"properties":{"enabled":{"type":"boolean","description":"If set to false, CloudWatch logging will be turned off. Defaults to false."},"encryptionKeyArn":{"type":"string","description":"KMS key ARN to encrypt the logs stored in given CloudWatch log-group."},"logGroupName":{"type":"string","description":"Log-group name to produce log-streams on CloudWatch. If undefined, logs will be produced in a default log-group /aws/emr-serverless"},"logStreamNamePrefix":{"type":"string","description":"Log-stream name prefix by which log-stream names will start in the CloudWatch Log-group."},"logTypeMap":{"type":"array","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationLogTypeMapKeyValuePair"},"description":"The specific log-streams which need to be uploaded to CloudWatch."}},"type":"object"},"aws-native:emrserverless:ApplicationConfigurationObject":{"description":"Configuration for a JobRun.","properties":{"classification":{"type":"string","description":"String with a maximum length of 1024."},"configurations":{"type":"array","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationConfigurationObject"}},"properties":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object","required":["classification"]},"aws-native:emrserverless:ApplicationIdentityCenterConfiguration":{"description":"The IAM IdentityCenter configuration for trusted-identity-propagation on this application. Supported with release labels emr-7.8.0 and above.","properties":{"identityCenterInstanceArn":{"type":"string","description":"The IAM IdentityCenter instance arn"}},"type":"object"},"aws-native:emrserverless:ApplicationImageConfigurationInput":{"description":"The image configuration.","properties":{"imageUri":{"type":"string","description":"The URI of an image in the Amazon ECR registry. This field is required when you create a new application. If you leave this field blank in an update, Amazon EMR will remove the image configuration."}},"type":"object"},"aws-native:emrserverless:ApplicationInitialCapacityConfig":{"properties":{"workerConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationWorkerConfiguration"},"workerCount":{"type":"integer","description":"Initial count of workers to be initialized when an Application is started. This count will be continued to be maintained until the Application is stopped"}},"type":"object","required":["workerConfiguration","workerCount"]},"aws-native:emrserverless:ApplicationInitialCapacityConfigKeyValuePair":{"properties":{"key":{"type":"string","description":"Worker type for an analytics framework."},"value":{"$ref":"#/types/aws-native:emrserverless:ApplicationInitialCapacityConfig"}},"type":"object","required":["key","value"]},"aws-native:emrserverless:ApplicationInteractiveConfiguration":{"properties":{"livyEndpointEnabled":{"type":"boolean","description":"Enables an Apache Livy endpoint that you can connect to and run interactive jobs"},"studioEnabled":{"type":"boolean","description":"Enabled you to connect an Application to Amazon EMR Studio to run interactive workloads in a notebook"}},"type":"object"},"aws-native:emrserverless:ApplicationLogTypeMapKeyValuePair":{"properties":{"key":{"type":"string"},"value":{"type":"array","items":{"type":"string"}}},"type":"object","required":["key","value"]},"aws-native:emrserverless:ApplicationManagedPersistenceMonitoringConfiguration":{"properties":{"enabled":{"type":"boolean","description":"If set to false, managed logging will be turned off. Defaults to true."},"encryptionKeyArn":{"type":"string","description":"KMS key ARN to encrypt the logs stored in managed persistence"}},"type":"object"},"aws-native:emrserverless:ApplicationMaximumAllowedResources":{"properties":{"cpu":{"type":"string","description":"Per worker CPU resource. vCPU is the only supported unit and specifying vCPU is optional."},"disk":{"type":"string","description":"Per worker Disk resource. GB is the only supported unit and specifying GB is optional"},"memory":{"type":"string","description":"Per worker memory resource. GB is the only supported unit and specifying GB is optional."}},"type":"object","required":["cpu","memory"]},"aws-native:emrserverless:ApplicationMonitoringConfiguration":{"description":"Monitoring configuration for batch and interactive JobRun.","properties":{"cloudWatchLoggingConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationCloudWatchLoggingConfiguration","description":"CloudWatch logging configurations for a JobRun."},"managedPersistenceMonitoringConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationManagedPersistenceMonitoringConfiguration","description":"Managed log persistence configurations for a JobRun."},"prometheusMonitoringConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationPrometheusMonitoringConfiguration","description":"Prometheus monitoring configurations for a JobRun."},"s3MonitoringConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationS3MonitoringConfiguration","description":"S3 monitoring configurations for a JobRun."}},"type":"object"},"aws-native:emrserverless:ApplicationNetworkConfiguration":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of the security groups in the VPC to which you want to connect your job or application."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect your job or application."}},"type":"object"},"aws-native:emrserverless:ApplicationPrometheusMonitoringConfiguration":{"properties":{"remoteWriteUrl":{"type":"string","description":"The remote write URL in the Amazon Managed Service for Prometheus workspace to send metrics to."}},"type":"object"},"aws-native:emrserverless:ApplicationS3MonitoringConfiguration":{"properties":{"encryptionKeyArn":{"type":"string","description":"KMS key ARN to encrypt the logs stored in given s3"},"logUri":{"type":"string"}},"type":"object"},"aws-native:emrserverless:ApplicationSchedulerConfiguration":{"description":"The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above.","properties":{"maxConcurrentRuns":{"type":"integer","description":"The maximum concurrent job runs on this application. If scheduler configuration is enabled on your application, the default value is 15. The valid range is 1 to 1000."},"queueTimeoutMinutes":{"type":"integer","description":"The maximum duration in minutes for the job in QUEUED state. If scheduler configuration is enabled on your application, the default value is 360 minutes (6 hours). The valid range is from 15 to 720."}},"type":"object"},"aws-native:emrserverless:ApplicationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 128 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:emrserverless:ApplicationWorkerConfiguration":{"properties":{"cpu":{"type":"string","description":"Per worker CPU resource. vCPU is the only supported unit and specifying vCPU is optional."},"disk":{"type":"string","description":"Per worker Disk resource. GB is the only supported unit and specifying GB is optional"},"diskType":{"type":"string","description":"Per worker DiskType resource. Shuffle optimized and Standard are only supported types and specifying diskType is optional"},"memory":{"type":"string","description":"Per worker memory resource. GB is the only supported unit and specifying GB is optional."}},"type":"object","required":["cpu","memory"]},"aws-native:emrserverless:ApplicationWorkerTypeSpecificationInput":{"description":"The specifications for a worker type.","properties":{"imageConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationImageConfigurationInput","description":"The image configuration for a worker type."}},"type":"object"},"aws-native:entityresolution:IdMappingWorkflowIdMappingIncrementalRunConfig":{"properties":{"incrementalRunType":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingIncrementalRunConfigIncrementalRunType"}},"type":"object","required":["incrementalRunType"]},"aws-native:entityresolution:IdMappingWorkflowIdMappingIncrementalRunConfigIncrementalRunType":{"type":"string","enum":[{"name":"OnDemand","value":"ON_DEMAND"}]},"aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedProperties":{"properties":{"attributeMatchingModel":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedPropertiesAttributeMatchingModel","description":"The comparison type. You can either choose `ONE_TO_ONE` or `MANY_TO_MANY` as the `attributeMatchingModel` .\n\nIf you choose `ONE_TO_ONE` , the system can only match attributes if the sub-types are an exact match. For example, for the `Email` attribute type, the system will only consider it a match if the value of the `Email` field of Profile A matches the value of the `Email` field of Profile B.\n\nIf you choose `MANY_TO_MANY` , the system can match attributes across the sub-types of an attribute type. For example, if the value of the `Email` field of Profile A matches the value of the `BusinessEmail` field of Profile B, the two profiles are matched on the `Email` attribute type."},"recordMatchingModel":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedPropertiesRecordMatchingModel","description":"The type of matching record that is allowed to be used in an ID mapping workflow.\n\nIf the value is set to `ONE_SOURCE_TO_ONE_TARGET` , only one record in the source can be matched to the same record in the target.\n\nIf the value is set to `MANY_SOURCE_TO_ONE_TARGET` , multiple records in the source can be matched to one record in the target."},"ruleDefinitionType":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedPropertiesRuleDefinitionType","description":"The set of rules you can use in an ID mapping workflow. The limitations specified for the source or target to define the match rules must be compatible."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowRule"},"description":"The rules that can be used for ID mapping."}},"type":"object","required":["attributeMatchingModel","recordMatchingModel"]},"aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedPropertiesAttributeMatchingModel":{"description":"The comparison type. You can either choose `ONE_TO_ONE` or `MANY_TO_MANY` as the `attributeMatchingModel` .\n\nIf you choose `ONE_TO_ONE` , the system can only match attributes if the sub-types are an exact match. For example, for the `Email` attribute type, the system will only consider it a match if the value of the `Email` field of Profile A matches the value of the `Email` field of Profile B.\n\nIf you choose `MANY_TO_MANY` , the system can match attributes across the sub-types of an attribute type. For example, if the value of the `Email` field of Profile A matches the value of the `BusinessEmail` field of Profile B, the two profiles are matched on the `Email` attribute type.","type":"string","enum":[{"name":"OneToOne","value":"ONE_TO_ONE"},{"name":"ManyToMany","value":"MANY_TO_MANY"}]},"aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedPropertiesRecordMatchingModel":{"description":"The type of matching record that is allowed to be used in an ID mapping workflow.\n\nIf the value is set to `ONE_SOURCE_TO_ONE_TARGET` , only one record in the source can be matched to the same record in the target.\n\nIf the value is set to `MANY_SOURCE_TO_ONE_TARGET` , multiple records in the source can be matched to one record in the target.","type":"string","enum":[{"name":"OneSourceToOneTarget","value":"ONE_SOURCE_TO_ONE_TARGET"},{"name":"ManySourceToOneTarget","value":"MANY_SOURCE_TO_ONE_TARGET"}]},"aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedPropertiesRuleDefinitionType":{"description":"The set of rules you can use in an ID mapping workflow. The limitations specified for the source or target to define the match rules must be compatible.","type":"string","enum":[{"name":"Source","value":"SOURCE"},{"name":"Target","value":"TARGET"}]},"aws-native:entityresolution:IdMappingWorkflowIdMappingTechniques":{"properties":{"idMappingType":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingTechniquesIdMappingType","description":"The type of ID mapping."},"normalizationVersion":{"type":"string"},"providerProperties":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowProviderProperties","description":"An object which defines any additional configurations required by the provider service."},"ruleBasedProperties":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingRuleBasedProperties","description":"An object which defines any additional configurations required by rule-based matching."}},"type":"object"},"aws-native:entityresolution:IdMappingWorkflowIdMappingTechniquesIdMappingType":{"description":"The type of ID mapping.","type":"string","enum":[{"name":"Provider","value":"PROVIDER"},{"name":"RuleBased","value":"RULE_BASED"}]},"aws-native:entityresolution:IdMappingWorkflowInputSource":{"properties":{"inputSourceArn":{"type":"string","description":"An Glue table ARN for the input source table, MatchingWorkflow arn or IdNamespace ARN"},"schemaArn":{"type":"string","description":"The ARN (Amazon Resource Name) that AWS Entity Resolution generated for the `SchemaMapping` ."},"type":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowInputSourceType","description":"The type of ID namespace. There are two types: `SOURCE` and `TARGET` .\n\nThe `SOURCE` contains configurations for `sourceId` data that will be processed in an ID mapping workflow.\n\nThe `TARGET` contains a configuration of `targetId` which all `sourceIds` will resolve to."}},"type":"object","required":["inputSourceArn"]},"aws-native:entityresolution:IdMappingWorkflowInputSourceType":{"description":"The type of ID namespace. There are two types: `SOURCE` and `TARGET` .\n\nThe `SOURCE` contains configurations for `sourceId` data that will be processed in an ID mapping workflow.\n\nThe `TARGET` contains a configuration of `targetId` which all `sourceIds` will resolve to.","type":"string","enum":[{"name":"Source","value":"SOURCE"},{"name":"Target","value":"TARGET"}]},"aws-native:entityresolution:IdMappingWorkflowIntermediateSourceConfiguration":{"properties":{"intermediateS3Path":{"type":"string","description":"The s3 path that would be used to stage the intermediate data being generated during workflow execution."}},"type":"object","required":["intermediateS3Path"]},"aws-native:entityresolution:IdMappingWorkflowOutputSource":{"properties":{"kmsArn":{"type":"string","description":"Customer AWS  ARN for encryption at rest. If not provided, system will use an AWS Entity Resolution managed KMS key."},"outputS3Path":{"type":"string","description":"The S3 path to which Entity Resolution will write the output table"}},"type":"object","required":["outputS3Path"]},"aws-native:entityresolution:IdMappingWorkflowProviderProperties":{"properties":{"intermediateSourceConfiguration":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIntermediateSourceConfiguration","description":"The Amazon S3 location that temporarily stores your data while it processes. Your information won't be saved permanently."},"providerConfiguration":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional Provider configuration that would be required for the provider service. The Configuration must be in JSON string format"},"providerServiceArn":{"type":"string","description":"Arn of the Provider Service being used."}},"type":"object","required":["providerServiceArn"]},"aws-native:entityresolution:IdMappingWorkflowRule":{"properties":{"matchingKeys":{"type":"array","items":{"type":"string"},"description":"A list of `MatchingKeys` . The `MatchingKeys` must have been defined in the `SchemaMapping` . Two records are considered to match according to this rule if all of the `MatchingKeys` match."},"ruleName":{"type":"string","description":"A name for the matching rule."}},"type":"object","required":["matchingKeys","ruleName"]},"aws-native:entityresolution:IdMappingWorkflowTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:entityresolution:IdNamespaceIdMappingWorkflowProperties":{"properties":{"idMappingType":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceIdMappingWorkflowPropertiesIdMappingType","description":"The type of ID mapping."},"providerProperties":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceNamespaceProviderProperties","description":"An object which defines any additional configurations required by the provider service."},"ruleBasedProperties":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceNamespaceRuleBasedProperties","description":"An object which defines any additional configurations required by rule-based matching."}},"type":"object","required":["idMappingType"]},"aws-native:entityresolution:IdNamespaceIdMappingWorkflowPropertiesIdMappingType":{"description":"The type of ID mapping.","type":"string","enum":[{"name":"Provider","value":"PROVIDER"},{"name":"RuleBased","value":"RULE_BASED"}]},"aws-native:entityresolution:IdNamespaceInputSource":{"properties":{"inputSourceArn":{"type":"string","description":"An AWS Glue table Amazon Resource Name (ARN) or a matching workflow ARN for the input source table."},"schemaName":{"type":"string","description":"The name of the schema."}},"type":"object","required":["inputSourceArn"]},"aws-native:entityresolution:IdNamespaceNamespaceProviderProperties":{"properties":{"providerConfiguration":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional Provider configuration that would be required for the provider service. The Configuration must be in JSON string format."},"providerServiceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the provider service."}},"type":"object","required":["providerServiceArn"]},"aws-native:entityresolution:IdNamespaceNamespaceRuleBasedProperties":{"properties":{"attributeMatchingModel":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceNamespaceRuleBasedPropertiesAttributeMatchingModel","description":"The comparison type. You can either choose `ONE_TO_ONE` or `MANY_TO_MANY` as the `attributeMatchingModel` .\n\nIf you choose `ONE_TO_ONE` , the system can only match attributes if the sub-types are an exact match. For example, for the `Email` attribute type, the system will only consider it a match if the value of the `Email` field of Profile A matches the value of the `Email` field of Profile B.\n\nIf you choose `MANY_TO_MANY` , the system can match attributes across the sub-types of an attribute type. For example, if the value of the `Email` field of Profile A matches the value of `BusinessEmail` field of Profile B, the two profiles are matched on the `Email` attribute type."},"recordMatchingModels":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceRecordMatchingModel"},"description":"The type of matching record that is allowed to be used in an ID mapping workflow.\n\nIf the value is set to `ONE_SOURCE_TO_ONE_TARGET` , only one record in the source is matched to one record in the target.\n\nIf the value is set to `MANY_SOURCE_TO_ONE_TARGET` , all matching records in the source are matched to one record in the target."},"ruleDefinitionTypes":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceRuleDefinitionType"},"description":"The sets of rules you can use in an ID mapping workflow. The limitations specified for the source and target must be compatible."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceRule"},"description":"The rules for the ID namespace."}},"type":"object"},"aws-native:entityresolution:IdNamespaceNamespaceRuleBasedPropertiesAttributeMatchingModel":{"description":"The comparison type. You can either choose `ONE_TO_ONE` or `MANY_TO_MANY` as the `attributeMatchingModel` .\n\nIf you choose `ONE_TO_ONE` , the system can only match attributes if the sub-types are an exact match. For example, for the `Email` attribute type, the system will only consider it a match if the value of the `Email` field of Profile A matches the value of the `Email` field of Profile B.\n\nIf you choose `MANY_TO_MANY` , the system can match attributes across the sub-types of an attribute type. For example, if the value of the `Email` field of Profile A matches the value of `BusinessEmail` field of Profile B, the two profiles are matched on the `Email` attribute type.","type":"string","enum":[{"name":"OneToOne","value":"ONE_TO_ONE"},{"name":"ManyToMany","value":"MANY_TO_MANY"}]},"aws-native:entityresolution:IdNamespaceRecordMatchingModel":{"type":"string","enum":[{"name":"OneSourceToOneTarget","value":"ONE_SOURCE_TO_ONE_TARGET"},{"name":"ManySourceToOneTarget","value":"MANY_SOURCE_TO_ONE_TARGET"}]},"aws-native:entityresolution:IdNamespaceRule":{"properties":{"matchingKeys":{"type":"array","items":{"type":"string"},"description":"A list of `MatchingKeys` . The `MatchingKeys` must have been defined in the `SchemaMapping` . Two records are considered to match according to this rule if all of the `MatchingKeys` match."},"ruleName":{"type":"string","description":"A name for the matching rule."}},"type":"object","required":["matchingKeys","ruleName"]},"aws-native:entityresolution:IdNamespaceRuleDefinitionType":{"type":"string","enum":[{"name":"Source","value":"SOURCE"},{"name":"Target","value":"TARGET"}]},"aws-native:entityresolution:IdNamespaceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:entityresolution:IdNamespaceType":{"description":"The type of ID namespace. There are two types: `SOURCE` and `TARGET` .\n\nThe `SOURCE` contains configurations for `sourceId` data that will be processed in an ID mapping workflow.\n\nThe `TARGET` contains a configuration of `targetId` which all `sourceIds` will resolve to.","type":"string","enum":[{"name":"Source","value":"SOURCE"},{"name":"Target","value":"TARGET"}]},"aws-native:entityresolution:MatchingWorkflowCustomerProfilesIntegrationConfig":{"properties":{"domainArn":{"type":"string"},"objectTypeArn":{"type":"string"}},"type":"object","required":["domainArn","objectTypeArn"]},"aws-native:entityresolution:MatchingWorkflowIncrementalRunConfig":{"properties":{"incrementalRunType":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowIncrementalRunConfigIncrementalRunType","description":"The type of incremental run. The only valid value is `IMMEDIATE` . This appears as \"Automatic\" in the console.\n\n\u003e For workflows where `resolutionType` is `ML_MATCHING` or `PROVIDER` , incremental processing is not supported."}},"type":"object","required":["incrementalRunType"]},"aws-native:entityresolution:MatchingWorkflowIncrementalRunConfigIncrementalRunType":{"description":"The type of incremental run. The only valid value is `IMMEDIATE` . This appears as \"Automatic\" in the console.\n\n\u003e For workflows where `resolutionType` is `ML_MATCHING` or `PROVIDER` , incremental processing is not supported.","type":"string","enum":[{"name":"Immediate","value":"IMMEDIATE"}]},"aws-native:entityresolution:MatchingWorkflowInputSource":{"properties":{"applyNormalization":{"type":"boolean","description":"Normalizes the attributes defined in the schema in the input data. For example, if an attribute has an `AttributeType` of `PHONE_NUMBER` , and the data in the input table is in a format of 1234567890, AWS Entity Resolution will normalize this field in the output to (123)-456-7890."},"inputSourceArn":{"type":"string","description":"An Glue table ARN for the input source table"},"schemaArn":{"type":"string","description":"The name of the schema."}},"type":"object","required":["inputSourceArn","schemaArn"]},"aws-native:entityresolution:MatchingWorkflowIntermediateSourceConfiguration":{"properties":{"intermediateS3Path":{"type":"string","description":"The s3 path that would be used to stage the intermediate data being generated during workflow execution."}},"type":"object","required":["intermediateS3Path"]},"aws-native:entityresolution:MatchingWorkflowOutputAttribute":{"properties":{"hashed":{"type":"boolean","description":"Enables the ability to hash the column values in the output."},"name":{"type":"string","description":"A name of a column to be written to the output. This must be an `InputField` name in the schema mapping."}},"type":"object","required":["name"]},"aws-native:entityresolution:MatchingWorkflowOutputSource":{"properties":{"applyNormalization":{"type":"boolean","description":"Normalizes the attributes defined in the schema in the input data. For example, if an attribute has an `AttributeType` of `PHONE_NUMBER` , and the data in the input table is in a format of 1234567890, AWS Entity Resolution will normalize this field in the output to (123)-456-7890."},"customerProfilesIntegrationConfig":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowCustomerProfilesIntegrationConfig"},"kmsArn":{"type":"string","description":"Customer KMS ARN for encryption at rest. If not provided, system will use an AWS Entity Resolution managed KMS key."},"output":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowOutputAttribute"},"description":"A list of `OutputAttribute` objects, each of which have the fields `Name` and `Hashed` . Each of these objects selects a column to be included in the output table, and whether the values of the column should be hashed."},"outputS3Path":{"type":"string","description":"The S3 path to which Entity Resolution will write the output table"}},"type":"object","required":["output"]},"aws-native:entityresolution:MatchingWorkflowProviderProperties":{"properties":{"intermediateSourceConfiguration":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowIntermediateSourceConfiguration","description":"The Amazon S3 location that temporarily stores your data while it processes. Your information won't be saved permanently."},"providerConfiguration":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional Provider configuration that would be required for the provider service. The Configuration must be in JSON string format"},"providerServiceArn":{"type":"string","description":"Arn of the Provider service being used."}},"type":"object","required":["providerServiceArn"]},"aws-native:entityresolution:MatchingWorkflowResolutionTechniques":{"properties":{"providerProperties":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowProviderProperties","description":"The properties of the provider service."},"resolutionType":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowResolutionType","description":"The type of matching workflow to create. Specify one of the following types:\n\n- `RULE_MATCHING` : Match records using configurable rule-based criteria\n- `ML_MATCHING` : Match records using machine learning models\n- `PROVIDER` : Match records using a third-party matching provider"},"ruleBasedProperties":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowRuleBasedProperties","description":"An object which defines the list of matching rules to run and has a field `rules` , which is a list of rule objects."},"ruleConditionProperties":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowRuleConditionProperties","description":"An object containing the `rules` for a matching workflow."}},"type":"object"},"aws-native:entityresolution:MatchingWorkflowResolutionType":{"type":"string","enum":[{"name":"RuleMatching","value":"RULE_MATCHING"},{"name":"MlMatching","value":"ML_MATCHING"},{"name":"Provider","value":"PROVIDER"}]},"aws-native:entityresolution:MatchingWorkflowRule":{"properties":{"matchingKeys":{"type":"array","items":{"type":"string"},"description":"A list of `MatchingKeys` . The `MatchingKeys` must have been defined in the `SchemaMapping` . Two records are considered to match according to this rule if all of the `MatchingKeys` match."},"ruleName":{"type":"string","description":"A name for the matching rule."}},"type":"object","required":["matchingKeys","ruleName"]},"aws-native:entityresolution:MatchingWorkflowRuleBasedProperties":{"properties":{"attributeMatchingModel":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowRuleBasedPropertiesAttributeMatchingModel","description":"The comparison type. You can choose `ONE_TO_ONE` or `MANY_TO_MANY` as the `attributeMatchingModel` .\n\nIf you choose `ONE_TO_ONE` , the system can only match attributes if the sub-types are an exact match. For example, for the `Email` attribute type, the system will only consider it a match if the value of the `Email` field of Profile A matches the value of the `Email` field of Profile B.\n\nIf you choose `MANY_TO_MANY` , the system can match attributes across the sub-types of an attribute type. For example, if the value of the `Email` field of Profile A and the value of `BusinessEmail` field of Profile B matches, the two profiles are matched on the `Email` attribute type."},"matchPurpose":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowRuleBasedPropertiesMatchPurpose","description":"An indicator of whether to generate IDs and index the data or not.\n\nIf you choose `IDENTIFIER_GENERATION` , the process generates IDs and indexes the data.\n\nIf you choose `INDEXING` , the process indexes the data without generating IDs."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowRule"},"description":"A list of `Rule` objects, each of which have fields `RuleName` and `MatchingKeys` ."}},"type":"object","required":["attributeMatchingModel","rules"]},"aws-native:entityresolution:MatchingWorkflowRuleBasedPropertiesAttributeMatchingModel":{"description":"The comparison type. You can choose `ONE_TO_ONE` or `MANY_TO_MANY` as the `attributeMatchingModel` .\n\nIf you choose `ONE_TO_ONE` , the system can only match attributes if the sub-types are an exact match. For example, for the `Email` attribute type, the system will only consider it a match if the value of the `Email` field of Profile A matches the value of the `Email` field of Profile B.\n\nIf you choose `MANY_TO_MANY` , the system can match attributes across the sub-types of an attribute type. For example, if the value of the `Email` field of Profile A and the value of `BusinessEmail` field of Profile B matches, the two profiles are matched on the `Email` attribute type.","type":"string","enum":[{"name":"OneToOne","value":"ONE_TO_ONE"},{"name":"ManyToMany","value":"MANY_TO_MANY"}]},"aws-native:entityresolution:MatchingWorkflowRuleBasedPropertiesMatchPurpose":{"description":"An indicator of whether to generate IDs and index the data or not.\n\nIf you choose `IDENTIFIER_GENERATION` , the process generates IDs and indexes the data.\n\nIf you choose `INDEXING` , the process indexes the data without generating IDs.","type":"string","enum":[{"name":"IdentifierGeneration","value":"IDENTIFIER_GENERATION"},{"name":"Indexing","value":"INDEXING"}]},"aws-native:entityresolution:MatchingWorkflowRuleCondition":{"properties":{"condition":{"type":"string","description":"A statement that specifies the conditions for a matching rule.\n\nIf your data is accurate, use an Exact matching function: `Exact` or `ExactManyToMany` .\n\nIf your data has variations in spelling or pronunciation, use a Fuzzy matching function: `Cosine` , `Levenshtein` , or `Soundex` .\n\nUse operators if you want to combine ( `AND` ), separate ( `OR` ), or group matching functions `(...)` .\n\nFor example: `(Cosine(a, 10) AND Exact(b, true)) OR ExactManyToMany(c, d)`"},"ruleName":{"type":"string","description":"A name for the matching rule.\n\nFor example: `Rule1`"}},"type":"object"},"aws-native:entityresolution:MatchingWorkflowRuleConditionProperties":{"properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowRuleCondition"},"description":"A list of rule objects, each of which have fields `ruleName` and `condition` ."}},"type":"object","required":["rules"]},"aws-native:entityresolution:MatchingWorkflowTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:entityresolution:PolicyStatementStatementEffect":{"type":"string","enum":[{"name":"Allow","value":"Allow"},{"name":"Deny","value":"Deny"}]},"aws-native:entityresolution:SchemaMappingSchemaAttributeType":{"type":"string","enum":[{"name":"Name","value":"NAME"},{"name":"NameFirst","value":"NAME_FIRST"},{"name":"NameMiddle","value":"NAME_MIDDLE"},{"name":"NameLast","value":"NAME_LAST"},{"name":"Address","value":"ADDRESS"},{"name":"AddressStreet1","value":"ADDRESS_STREET1"},{"name":"AddressStreet2","value":"ADDRESS_STREET2"},{"name":"AddressStreet3","value":"ADDRESS_STREET3"},{"name":"AddressCity","value":"ADDRESS_CITY"},{"name":"AddressState","value":"ADDRESS_STATE"},{"name":"AddressCountry","value":"ADDRESS_COUNTRY"},{"name":"AddressPostalcode","value":"ADDRESS_POSTALCODE"},{"name":"Phone","value":"PHONE"},{"name":"PhoneNumber","value":"PHONE_NUMBER"},{"name":"PhoneCountrycode","value":"PHONE_COUNTRYCODE"},{"name":"EmailAddress","value":"EMAIL_ADDRESS"},{"name":"UniqueId","value":"UNIQUE_ID"},{"name":"Date","value":"DATE"},{"name":"String","value":"STRING"},{"name":"ProviderId","value":"PROVIDER_ID"}]},"aws-native:entityresolution:SchemaMappingSchemaInputAttribute":{"properties":{"fieldName":{"type":"string"},"groupName":{"type":"string"},"hashed":{"type":"boolean"},"matchKey":{"type":"string"},"subType":{"type":"string","description":"The subtype of the Attribute. Would be required only when type is PROVIDER_ID"},"type":{"$ref":"#/types/aws-native:entityresolution:SchemaMappingSchemaAttributeType"}},"type":"object","required":["fieldName","type"]},"aws-native:entityresolution:SchemaMappingTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:events:ApiDestinationHttpMethod":{"description":"The method to use for the request to the HTTP invocation endpoint.","type":"string","enum":[{"name":"Get","value":"GET"},{"name":"Head","value":"HEAD"},{"name":"Post","value":"POST"},{"name":"Options","value":"OPTIONS"},{"name":"Put","value":"PUT"},{"name":"Delete","value":"DELETE"},{"name":"Patch","value":"PATCH"}]},"aws-native:events:ConnectionApiKeyAuthParameters":{"properties":{"apiKeyName":{"type":"string","description":"The name of the API key to use for authorization."},"apiKeyValue":{"type":"string","description":"The value for the API key to use for authorization."}},"type":"object","required":["apiKeyName","apiKeyValue"]},"aws-native:events:ConnectionAuthParameters":{"properties":{"apiKeyAuthParameters":{"$ref":"#/types/aws-native:events:ConnectionApiKeyAuthParameters","description":"The API Key parameters to use for authorization."},"basicAuthParameters":{"$ref":"#/types/aws-native:events:ConnectionBasicAuthParameters","description":"The authorization parameters for Basic authorization."},"connectivityParameters":{"$ref":"#/types/aws-native:events:ConnectionConnectivityParameters","description":"For private OAuth authentication endpoints. The parameters EventBridge uses to authenticate against the endpoint.\n\nFor more information, see [Authorization methods for connections](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-target-connection-auth.html) in the **Amazon EventBridge User Guide** ."},"invocationHttpParameters":{"$ref":"#/types/aws-native:events:ConnectionHttpParameters","description":"Additional parameters for the connection that are passed through with every invocation to the HTTP endpoint."},"oAuthParameters":{"$ref":"#/types/aws-native:events:ConnectionOAuthParameters","description":"The OAuth parameters to use for authorization."}},"type":"object"},"aws-native:events:ConnectionAuthorizationType":{"description":"The type of authorization to use for the connection.\n\n\u003e OAUTH tokens are refreshed when a 401 or 407 response is returned.","type":"string","enum":[{"name":"ApiKey","value":"API_KEY"},{"name":"Basic","value":"BASIC"},{"name":"OauthClientCredentials","value":"OAUTH_CLIENT_CREDENTIALS"}]},"aws-native:events:ConnectionBasicAuthParameters":{"properties":{"password":{"type":"string","description":"The password associated with the user name to use for Basic authorization."},"username":{"type":"string","description":"The user name to use for Basic authorization."}},"type":"object","required":["password","username"]},"aws-native:events:ConnectionClientParameters":{"properties":{"clientId":{"type":"string","description":"The client ID to use for OAuth authorization."},"clientSecret":{"type":"string","description":"The client secret assciated with the client ID to use for OAuth authorization."}},"type":"object","required":["clientId","clientSecret"]},"aws-native:events:ConnectionConnectivityParameters":{"properties":{"resourceParameters":{"$ref":"#/types/aws-native:events:ConnectionResourceParameters","description":"The parameters for EventBridge to use when invoking the resource endpoint."}},"type":"object","required":["resourceParameters"]},"aws-native:events:ConnectionHttpParameters":{"properties":{"bodyParameters":{"type":"array","items":{"$ref":"#/types/aws-native:events:ConnectionParameter"},"description":"Any additional body string parameters for the connection."},"headerParameters":{"type":"array","items":{"$ref":"#/types/aws-native:events:ConnectionParameter"},"description":"Any additional header parameters for the connection."},"queryStringParameters":{"type":"array","items":{"$ref":"#/types/aws-native:events:ConnectionParameter"},"description":"Any additional query string parameters for the connection."}},"type":"object"},"aws-native:events:ConnectionOAuthParameters":{"properties":{"authorizationEndpoint":{"type":"string","description":"The URL to the authorization endpoint when OAuth is specified as the authorization type."},"clientParameters":{"$ref":"#/types/aws-native:events:ConnectionClientParameters","description":"The client parameters for OAuth authorization."},"httpMethod":{"$ref":"#/types/aws-native:events:ConnectionOAuthParametersHttpMethod","description":"The method to use for the authorization request."},"oAuthHttpParameters":{"$ref":"#/types/aws-native:events:ConnectionHttpParameters","description":"Details about the additional parameters to use for the connection."}},"type":"object","required":["authorizationEndpoint","clientParameters","httpMethod"]},"aws-native:events:ConnectionOAuthParametersHttpMethod":{"description":"The method to use for the authorization request.","type":"string","enum":[{"name":"Get","value":"GET"},{"name":"Post","value":"POST"},{"name":"Put","value":"PUT"}]},"aws-native:events:ConnectionParameter":{"properties":{"isValueSecret":{"type":"boolean","description":"Specifies whether the value is secret."},"key":{"type":"string","description":"The key for a query string parameter."},"value":{"type":"string","description":"The value associated with the key for the query string parameter."}},"type":"object","required":["key","value"]},"aws-native:events:ConnectionResourceParameters":{"properties":{"resourceAssociationArn":{"type":"string","description":"For connections to private APIs, the Amazon Resource Name (ARN) of the resource association EventBridge created between the connection and the private API's resource configuration.\n\n\u003e The value of this property is set by EventBridge . Any value you specify in your template is ignored."},"resourceConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon VPC Lattice resource configuration for the resource endpoint."}},"type":"object","required":["resourceConfigurationArn"]},"aws-native:events:DeadLetterConfigProperties":{"description":"Dead Letter Queue for the event bus.","properties":{"arn":{"type":"string","description":"The ARN of the SQS queue specified as the target for the dead-letter queue."}},"type":"object"},"aws-native:events:EndpointEventBus":{"properties":{"eventBusArn":{"type":"string"}},"type":"object","required":["eventBusArn"]},"aws-native:events:EndpointFailoverConfig":{"properties":{"primary":{"$ref":"#/types/aws-native:events:EndpointPrimary","description":"The main Region of the endpoint."},"secondary":{"$ref":"#/types/aws-native:events:EndpointSecondary","description":"The Region that events are routed to when failover is triggered or event replication is enabled."}},"type":"object","required":["primary","secondary"]},"aws-native:events:EndpointPrimary":{"properties":{"healthCheck":{"type":"string","description":"The ARN of the health check used by the endpoint to determine whether failover is triggered."}},"type":"object","required":["healthCheck"]},"aws-native:events:EndpointReplicationConfig":{"properties":{"state":{"$ref":"#/types/aws-native:events:EndpointReplicationState","description":"The state of event replication."}},"type":"object","required":["state"]},"aws-native:events:EndpointReplicationState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:events:EndpointRoutingConfig":{"properties":{"failoverConfig":{"$ref":"#/types/aws-native:events:EndpointFailoverConfig","description":"The failover configuration for an endpoint. This includes what triggers failover and what happens when it's triggered."}},"type":"object","required":["failoverConfig"]},"aws-native:events:EndpointSecondary":{"properties":{"route":{"type":"string","description":"Defines the secondary Region."}},"type":"object","required":["route"]},"aws-native:events:EndpointState":{"description":"The main Region of the endpoint.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:events:EventBusLogConfigPropertiesIncludeDetail":{"description":"Configures whether or not to include event detail, input transformer details, target properties, and target input in the applicable log messages.","type":"string","enum":[{"name":"Full","value":"FULL"},{"name":"None","value":"NONE"}]},"aws-native:events:EventBusLogConfigPropertiesLevel":{"description":"Configures the log level of the EventBus and determines which log messages are sent to Ingestion Hub for delivery.","type":"string","enum":[{"name":"Info","value":"INFO"},{"name":"Error","value":"ERROR"},{"name":"Trace","value":"TRACE"},{"name":"Off","value":"OFF"}]},"aws-native:events:EventBusPolicyCondition":{"description":"This parameter enables you to limit the permission to accounts that fulfill a certain condition, such as being a member of a certain AWS organization.","properties":{"key":{"type":"string","description":"Specifies the value for the key. Currently, this must be the ID of the organization."},"type":{"type":"string","description":"Specifies the type of condition. Currently the only supported value is StringEquals."},"value":{"type":"string","description":"Specifies the key for the condition. Currently the only supported key is aws:PrincipalOrgID."}},"type":"object"},"aws-native:events:EventBusTag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:events:InvocationConnectivityParametersProperties":{"description":"The private resource the HTTP request will be sent to.","properties":{"resourceParameters":{"$ref":"#/types/aws-native:events:ConnectionResourceParameters","description":"The parameters for EventBridge to use when invoking the resource endpoint."}},"type":"object","required":["resourceParameters"]},"aws-native:events:LogConfigProperties":{"description":"The logging configuration settings for vended logs.","properties":{"includeDetail":{"$ref":"#/types/aws-native:events:EventBusLogConfigPropertiesIncludeDetail","description":"Configures whether or not to include event detail, input transformer details, target properties, and target input in the applicable log messages."},"level":{"$ref":"#/types/aws-native:events:EventBusLogConfigPropertiesLevel","description":"Configures the log level of the EventBus and determines which log messages are sent to Ingestion Hub for delivery."}},"type":"object"},"aws-native:events:RuleAppSyncParameters":{"properties":{"graphQlOperation":{"type":"string","description":"The GraphQL operation; that is, the query, mutation, or subscription to be parsed and executed by the GraphQL service.\n\nFor more information, see [Operations](https://docs.aws.amazon.com/appsync/latest/devguide/graphql-architecture.html#graphql-operations) in the *AWS AppSync User Guide* ."}},"type":"object","required":["graphQlOperation"]},"aws-native:events:RuleAwsVpcConfiguration":{"properties":{"assignPublicIp":{"type":"string","description":"Specifies whether the task's elastic network interface receives a public IP address. You can specify `ENABLED` only when `LaunchType` in `EcsParameters` is set to `FARGATE` ."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"Specifies the security groups associated with the task. These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used."},"subnets":{"type":"array","items":{"type":"string"},"description":"Specifies the subnets associated with the task. These subnets must all be in the same VPC. You can specify as many as 16 subnets."}},"type":"object","required":["subnets"]},"aws-native:events:RuleBatchArrayProperties":{"properties":{"size":{"type":"integer","description":"The size of the array, if this is an array batch job. Valid values are integers between 2 and 10,000."}},"type":"object"},"aws-native:events:RuleBatchParameters":{"properties":{"arrayProperties":{"$ref":"#/types/aws-native:events:RuleBatchArrayProperties","description":"The array properties for the submitted job, such as the size of the array. The array size can be between 2 and 10,000. If you specify array properties for a job, it becomes an array job. This parameter is used only if the target is an AWS Batch job."},"jobDefinition":{"type":"string","description":"The ARN or name of the job definition to use if the event target is an AWS Batch job. This job definition must already exist."},"jobName":{"type":"string","description":"The name to use for this execution of the job, if the target is an AWS Batch job."},"retryStrategy":{"$ref":"#/types/aws-native:events:RuleBatchRetryStrategy","description":"The retry strategy to use for failed jobs, if the target is an AWS Batch job. The retry strategy is the number of times to retry the failed job execution. Valid values are 1–10. When you specify a retry strategy here, it overrides the retry strategy defined in the job definition."}},"type":"object","required":["jobDefinition","jobName"]},"aws-native:events:RuleBatchRetryStrategy":{"properties":{"attempts":{"type":"integer","description":"The number of times to attempt to retry, if the job fails. Valid values are 1–10."}},"type":"object"},"aws-native:events:RuleCapacityProviderStrategyItem":{"properties":{"base":{"type":"integer","description":"The base value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. If no value is specified, the default value of 0 is used."},"capacityProvider":{"type":"string","description":"The short name of the capacity provider."},"weight":{"type":"integer","description":"The weight value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The weight value is taken into consideration after the base value, if defined, is satisfied."}},"type":"object","required":["capacityProvider"]},"aws-native:events:RuleDeadLetterConfig":{"properties":{"arn":{"type":"string","description":"The ARN of the SQS queue specified as the target for the dead-letter queue."}},"type":"object"},"aws-native:events:RuleEcsParameters":{"properties":{"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:events:RuleCapacityProviderStrategyItem"},"description":"The capacity provider strategy to use for the task.\n\nIf a `capacityProviderStrategy` is specified, the `launchType` parameter must be omitted. If no `capacityProviderStrategy` or launchType is specified, the `defaultCapacityProviderStrategy` for the cluster is used."},"enableEcsManagedTags":{"type":"boolean","description":"Specifies whether to enable Amazon ECS managed tags for the task. For more information, see [Tagging Your Amazon ECS Resources](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html) in the Amazon Elastic Container Service Developer Guide."},"enableExecuteCommand":{"type":"boolean","description":"Whether or not to enable the execute command functionality for the containers in this task. If true, this enables execute command functionality on all containers in the task."},"group":{"type":"string","description":"Specifies an ECS task group for the task. The maximum length is 255 characters."},"launchType":{"type":"string","description":"Specifies the launch type on which your task is running. The launch type that you specify here must match one of the launch type (compatibilities) of the target task. The `FARGATE` value is supported only in the Regions where AWS Fargate with Amazon ECS is supported. For more information, see [AWS Fargate on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/AWS-Fargate.html) in the *Amazon Elastic Container Service Developer Guide* ."},"networkConfiguration":{"$ref":"#/types/aws-native:events:RuleNetworkConfiguration","description":"Use this structure if the Amazon ECS task uses the `awsvpc` network mode. This structure specifies the VPC subnets and security groups associated with the task, and whether a public IP address is to be used. This structure is required if `LaunchType` is `FARGATE` because the `awsvpc` mode is required for Fargate tasks.\n\nIf you specify `NetworkConfiguration` when the target ECS task does not use the `awsvpc` network mode, the task fails."},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:events:RulePlacementConstraint"},"description":"An array of placement constraint objects to use for the task. You can specify up to 10 constraints per task (including constraints in the task definition and those specified at runtime)."},"placementStrategies":{"type":"array","items":{"$ref":"#/types/aws-native:events:RulePlacementStrategy"},"description":"The placement strategy objects to use for the task. You can specify a maximum of five strategy rules per task."},"platformVersion":{"type":"string","description":"Specifies the platform version for the task. Specify only the numeric portion of the platform version, such as `1.1.0` .\n\nThis structure is used only if `LaunchType` is `FARGATE` . For more information about valid platform versions, see [AWS Fargate Platform Versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html) in the *Amazon Elastic Container Service Developer Guide* ."},"propagateTags":{"type":"string","description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags are not propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the TagResource API action."},"referenceId":{"type":"string","description":"The reference ID to use for the task."},"tagList":{"type":"array","items":{"$ref":"#/types/aws-native:events:RuleTag"},"description":"The metadata that you apply to the task to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. To learn more, see [RunTask](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html#ECS-RunTask-request-tags) in the Amazon ECS API Reference."},"taskCount":{"type":"integer","description":"The number of tasks to create based on `TaskDefinition` . The default is 1."},"taskDefinitionArn":{"type":"string","description":"The ARN of the task definition to use if the event target is an Amazon ECS task."}},"type":"object","required":["taskDefinitionArn"]},"aws-native:events:RuleHttpParameters":{"properties":{"headerParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The headers that need to be sent as part of request invoking the API Gateway API or EventBridge ApiDestination."},"pathParameterValues":{"type":"array","items":{"type":"string"},"description":"The path parameter values to be used to populate API Gateway API or EventBridge ApiDestination path wildcards (\"*\")."},"queryStringParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The query string keys/values that need to be sent as part of request invoking the API Gateway API or EventBridge ApiDestination."}},"type":"object"},"aws-native:events:RuleInputTransformer":{"properties":{"inputPathsMap":{"type":"object","additionalProperties":{"type":"string"},"description":"Map of JSON paths to be extracted from the event. You can then insert these in the template in `InputTemplate` to produce the output you want to be sent to the target.\n\n`InputPathsMap` is an array key-value pairs, where each value is a valid JSON path. You can have as many as 100 key-value pairs. You must use JSON dot notation, not bracket notation.\n\nThe keys cannot start with \" AWS .\""},"inputTemplate":{"type":"string","description":"Input template where you specify placeholders that will be filled with the values of the keys from `InputPathsMap` to customize the data sent to the target. Enclose each `InputPathsMaps` value in brackets: \u003c *value* \u003e\n\nIf `InputTemplate` is a JSON object (surrounded by curly braces), the following restrictions apply:\n\n- The placeholder cannot be used as an object key.\n\nThe following example shows the syntax for using `InputPathsMap` and `InputTemplate` .\n\n`\"InputTransformer\":`\n\n`{`\n\n`\"InputPathsMap\": {\"instance\": \"$.detail.instance\",\"status\": \"$.detail.status\"},`\n\n`\"InputTemplate\": \"\u003cinstance\u003e is in state \u003cstatus\u003e\"`\n\n`}`\n\nTo have the `InputTemplate` include quote marks within a JSON string, escape each quote marks with a slash, as in the following example:\n\n`\"InputTransformer\":`\n\n`{`\n\n`\"InputPathsMap\": {\"instance\": \"$.detail.instance\",\"status\": \"$.detail.status\"},`\n\n`\"InputTemplate\": \"\u003cinstance\u003e is in state \\\"\u003cstatus\u003e\\\"\"`\n\n`}`\n\nThe `InputTemplate` can also be valid JSON with varibles in quotes or out, as in the following example:\n\n`\"InputTransformer\":`\n\n`{`\n\n`\"InputPathsMap\": {\"instance\": \"$.detail.instance\",\"status\": \"$.detail.status\"},`\n\n`\"InputTemplate\": '{\"myInstance\": \u003cinstance\u003e,\"myStatus\": \"\u003cinstance\u003e is in state \\\"\u003cstatus\u003e\\\"\"}'`\n\n`}`"}},"type":"object","required":["inputTemplate"]},"aws-native:events:RuleKinesisParameters":{"properties":{"partitionKeyPath":{"type":"string","description":"The JSON path to be extracted from the event and used as the partition key. For more information, see [Amazon Kinesis Streams Key Concepts](https://docs.aws.amazon.com/streams/latest/dev/key-concepts.html#partition-key) in the *Amazon Kinesis Streams Developer Guide* ."}},"type":"object","required":["partitionKeyPath"]},"aws-native:events:RuleNetworkConfiguration":{"properties":{"awsVpcConfiguration":{"$ref":"#/types/aws-native:events:RuleAwsVpcConfiguration","description":"Use this structure to specify the VPC subnets and security groups for the task, and whether a public IP address is to be used. This structure is relevant only for ECS tasks that use the `awsvpc` network mode."}},"type":"object"},"aws-native:events:RulePlacementConstraint":{"properties":{"expression":{"type":"string","description":"A cluster query language expression to apply to the constraint. You cannot specify an expression if the constraint type is `distinctInstance` . To learn more, see [Cluster Query Language](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-query-language.html) in the Amazon Elastic Container Service Developer Guide."},"type":{"type":"string","description":"The type of constraint. Use distinctInstance to ensure that each task in a particular group is running on a different container instance. Use memberOf to restrict the selection to a group of valid candidates."}},"type":"object"},"aws-native:events:RulePlacementStrategy":{"properties":{"field":{"type":"string","description":"The field to apply the placement strategy against. For the spread placement strategy, valid values are instanceId (or host, which has the same effect), or any platform or custom attribute that is applied to a container instance, such as attribute:ecs.availability-zone. For the binpack placement strategy, valid values are cpu and memory. For the random placement strategy, this field is not used."},"type":{"type":"string","description":"The type of placement strategy. The random placement strategy randomly places tasks on available candidates. The spread placement strategy spreads placement across available candidates evenly based on the field parameter. The binpack strategy places tasks on available candidates that have the least available amount of the resource that is specified with the field parameter. For example, if you binpack on memory, a task is placed on the instance with the least amount of remaining memory (but still enough to run the task)."}},"type":"object"},"aws-native:events:RuleRedshiftDataParameters":{"properties":{"database":{"type":"string","description":"The name of the database. Required when authenticating using temporary credentials."},"dbUser":{"type":"string","description":"The database user name. Required when authenticating using temporary credentials."},"secretManagerArn":{"type":"string","description":"The name or ARN of the secret that enables access to the database. Required when authenticating using AWS Secrets Manager."},"sql":{"type":"string","description":"The SQL statement text to run."},"sqls":{"type":"array","items":{"type":"string"},"description":"One or more SQL statements to run. The SQL statements are run as a single transaction. They run serially in the order of the array. Subsequent SQL statements don't start until the previous statement in the array completes. If any SQL statement fails, then because they are run as one transaction, all work is rolled back."},"statementName":{"type":"string","description":"The name of the SQL statement. You can name the SQL statement when you create it to identify the query."},"withEvent":{"type":"boolean","description":"Indicates whether to send an event back to EventBridge after the SQL statement runs."}},"type":"object","required":["database"]},"aws-native:events:RuleRetryPolicy":{"properties":{"maximumEventAgeInSeconds":{"type":"integer","description":"The maximum amount of time, in seconds, to continue to make retry attempts."},"maximumRetryAttempts":{"type":"integer","description":"The maximum number of retry attempts to make before the request fails. Retry attempts continue until either the maximum number of attempts is made or until the duration of the `MaximumEventAgeInSeconds` is met."}},"type":"object"},"aws-native:events:RuleRunCommandParameters":{"properties":{"runCommandTargets":{"type":"array","items":{"$ref":"#/types/aws-native:events:RuleRunCommandTarget"},"description":"Currently, we support including only one RunCommandTarget block, which specifies either an array of InstanceIds or a tag."}},"type":"object","required":["runCommandTargets"]},"aws-native:events:RuleRunCommandTarget":{"properties":{"key":{"type":"string","description":"Can be either `tag:` *tag-key* or `InstanceIds` ."},"values":{"type":"array","items":{"type":"string"},"description":"If `Key` is `tag:` *tag-key* , `Values` is a list of tag values. If `Key` is `InstanceIds` , `Values` is a list of Amazon EC2 instance IDs."}},"type":"object","required":["key","values"]},"aws-native:events:RuleSageMakerPipelineParameter":{"properties":{"name":{"type":"string","description":"Name of parameter to start execution of a SageMaker AI Model Building Pipeline."},"value":{"type":"string","description":"Value of parameter to start execution of a SageMaker AI Model Building Pipeline."}},"type":"object","required":["name","value"]},"aws-native:events:RuleSageMakerPipelineParameters":{"properties":{"pipelineParameterList":{"type":"array","items":{"$ref":"#/types/aws-native:events:RuleSageMakerPipelineParameter"},"description":"List of Parameter names and values for SageMaker AI Model Building Pipeline execution."}},"type":"object"},"aws-native:events:RuleSqsParameters":{"properties":{"messageGroupId":{"type":"string","description":"The ID of the message group to use as the target."}},"type":"object","required":["messageGroupId"]},"aws-native:events:RuleState":{"description":"The state of the rule.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"},{"name":"EnabledWithAllCloudtrailManagementEvents","value":"ENABLED_WITH_ALL_CLOUDTRAIL_MANAGEMENT_EVENTS"}]},"aws-native:events:RuleTag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object"},"aws-native:events:RuleTarget":{"properties":{"appSyncParameters":{"$ref":"#/types/aws-native:events:RuleAppSyncParameters","description":"Contains the GraphQL operation to be parsed and executed, if the event target is an AWS AppSync API."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target."},"batchParameters":{"$ref":"#/types/aws-native:events:RuleBatchParameters","description":"If the event target is an AWS Batch job, this contains the job definition, job name, and other parameters. For more information, see [Jobs](https://docs.aws.amazon.com/batch/latest/userguide/jobs.html) in the *AWS Batch User Guide* ."},"deadLetterConfig":{"$ref":"#/types/aws-native:events:RuleDeadLetterConfig","description":"The `DeadLetterConfig` that defines the target queue to send dead-letter queue events to."},"ecsParameters":{"$ref":"#/types/aws-native:events:RuleEcsParameters","description":"Contains the Amazon ECS task definition and task count to be used, if the event target is an Amazon ECS task. For more information about Amazon ECS tasks, see [Task Definitions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_defintions.html) in the *Amazon EC2 Container Service Developer Guide* ."},"httpParameters":{"$ref":"#/types/aws-native:events:RuleHttpParameters","description":"Contains the HTTP parameters to use when the target is a API Gateway endpoint or EventBridge ApiDestination.\n\nIf you specify an API Gateway API or EventBridge ApiDestination as a target, you can use this parameter to specify headers, path parameters, and query string keys/values as part of your target invoking request. If you're using ApiDestinations, the corresponding Connection can also have these values configured. In case of any conflicting keys, values from the Connection take precedence."},"id":{"type":"string","description":"The ID of the target within the specified rule. Use this ID to reference the target when updating the rule. We recommend using a memorable and unique string."},"input":{"type":"string","description":"Valid JSON text passed to the target. In this case, nothing from the event itself is passed to the target. For more information, see [The JavaScript Object Notation (JSON) Data Interchange Format](https://docs.aws.amazon.com/http://www.rfc-editor.org/rfc/rfc7159.txt) ."},"inputPath":{"type":"string","description":"The value of the JSONPath that is used for extracting part of the matched event when passing it to the target. You may use JSON dot notation or bracket notation. For more information about JSON paths, see [JSONPath](https://docs.aws.amazon.com/http://goessner.net/articles/JsonPath/) ."},"inputTransformer":{"$ref":"#/types/aws-native:events:RuleInputTransformer","description":"Settings to enable you to provide custom input to a target based on certain event data. You can extract one or more key-value pairs from the event and then use that data to send customized input to the target."},"kinesisParameters":{"$ref":"#/types/aws-native:events:RuleKinesisParameters","description":"The custom parameter you can use to control the shard assignment, when the target is a Kinesis data stream. If you do not include this parameter, the default is to use the `eventId` as the partition key."},"redshiftDataParameters":{"$ref":"#/types/aws-native:events:RuleRedshiftDataParameters","description":"Contains the Amazon Redshift Data API parameters to use when the target is a Amazon Redshift cluster.\n\nIf you specify a Amazon Redshift Cluster as a Target, you can use this to specify parameters to invoke the Amazon Redshift Data API ExecuteStatement based on EventBridge events."},"retryPolicy":{"$ref":"#/types/aws-native:events:RuleRetryPolicy","description":"The retry policy configuration to use for the dead-letter queue."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to be used for this target when the rule is triggered. If one rule triggers multiple targets, you can use a different IAM role for each target."},"runCommandParameters":{"$ref":"#/types/aws-native:events:RuleRunCommandParameters","description":"Parameters used when you are using the rule to invoke Amazon EC2 Run Command."},"sageMakerPipelineParameters":{"$ref":"#/types/aws-native:events:RuleSageMakerPipelineParameters","description":"Contains the SageMaker AI Model Building Pipeline parameters to start execution of a SageMaker AI Model Building Pipeline.\n\nIf you specify a SageMaker AI Model Building Pipeline as a target, you can use this to specify parameters to start a pipeline execution based on EventBridge events."},"sqsParameters":{"$ref":"#/types/aws-native:events:RuleSqsParameters","description":"Contains the message group ID to use when the target is an Amazon SQS fair or FIFO queue.\n\nIf you specify a fair or FIFO queue as a target, the queue must have content-based deduplication enabled."}},"type":"object","required":["arn","id"]},"aws-native:eventschemas:DiscovererTagsEntry":{"properties":{"key":{"type":"string","description":"The key of a key-value pair."},"value":{"type":"string","description":"The value of a key-value pair."}},"type":"object","required":["key","value"]},"aws-native:eventschemas:RegistryTagsEntry":{"properties":{"key":{"type":"string","description":"The key of a key-value pair."},"value":{"type":"string","description":"The value of a key-value pair."}},"type":"object","required":["key","value"]},"aws-native:eventschemas:SchemaTagsEntry":{"properties":{"key":{"type":"string","description":"The key of a key-value pair."},"value":{"type":"string","description":"The value of a key-value pair."}},"type":"object","required":["key","value"]},"aws-native:evidently:ExperimentMetricGoalObject":{"properties":{"desiredChange":{"$ref":"#/types/aws-native:evidently:ExperimentMetricGoalObjectDesiredChange","description":"`INCREASE` means that a variation with a higher number for this metric is performing better.\n\n`DECREASE` means that a variation with a lower number for this metric is performing better."},"entityIdKey":{"type":"string","description":"The JSON path to reference the entity id in the event."},"eventPattern":{"type":"string","description":"Event patterns have the same structure as the events they match. Rules use event patterns to select events. An event pattern either matches an event or it doesn't."},"metricName":{"type":"string","description":"A name for the metric. It can include up to 255 characters."},"unitLabel":{"type":"string","description":"A label for the units that the metric is measuring."},"valueKey":{"type":"string","description":"The JSON path to reference the numerical metric value in the event."}},"type":"object","required":["desiredChange","entityIdKey","metricName","valueKey"]},"aws-native:evidently:ExperimentMetricGoalObjectDesiredChange":{"description":"`INCREASE` means that a variation with a higher number for this metric is performing better.\n\n`DECREASE` means that a variation with a lower number for this metric is performing better.","type":"string","enum":[{"name":"Increase","value":"INCREASE"},{"name":"Decrease","value":"DECREASE"}]},"aws-native:evidently:ExperimentOnlineAbConfigObject":{"properties":{"controlTreatmentName":{"type":"string","description":"The name of the variation that is to be the default variation that the other variations are compared to."},"treatmentWeights":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:ExperimentTreatmentToWeight"},"description":"A set of key-value pairs. The keys are treatment names, and the values are the portion of experiment traffic to be assigned to that treatment. Specify the traffic portion in thousandths of a percent, so 20,000 for a variation would allocate 20% of the experiment traffic to that variation."}},"type":"object"},"aws-native:evidently:ExperimentRunningStatusObject":{"properties":{"analysisCompleteTime":{"type":"string","description":"Provide the analysis Completion time for an experiment"},"desiredState":{"type":"string","description":"Provide CANCELLED or COMPLETED desired state when stopping an experiment"},"reason":{"type":"string","description":"Reason is a required input for stopping the experiment"},"status":{"type":"string","description":"Provide START or STOP action to apply on an experiment"}},"type":"object"},"aws-native:evidently:ExperimentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:evidently:ExperimentTreatmentObject":{"properties":{"description":{"type":"string","description":"The description of the treatment."},"feature":{"type":"string","description":"The name of the feature for this experiment."},"treatmentName":{"type":"string","description":"A name for this treatment. It can include up to 127 characters."},"variation":{"type":"string","description":"The name of the variation to use for this treatment."}},"type":"object","required":["feature","treatmentName","variation"]},"aws-native:evidently:ExperimentTreatmentToWeight":{"properties":{"splitWeight":{"type":"integer","description":"The portion of experiment traffic to allocate to this treatment. Specify the traffic portion in thousandths of a percent, so 20,000 allocated to a treatment would allocate 20% of the experiment traffic to that treatment."},"treatment":{"type":"string","description":"The name of the treatment."}},"type":"object","required":["splitWeight","treatment"]},"aws-native:evidently:FeatureEntityOverride":{"properties":{"entityId":{"type":"string","description":"The entity ID to be served the variation specified in `Variation` ."},"variation":{"type":"string","description":"The name of the variation to serve to the user session that matches the `EntityId` ."}},"type":"object"},"aws-native:evidently:FeatureEvaluationStrategy":{"description":"Specify `ALL_RULES` to activate the traffic allocation specified by any ongoing launches or experiments. Specify `DEFAULT_VARIATION` to serve the default variation to all users instead.","type":"string","enum":[{"name":"AllRules","value":"ALL_RULES"},{"name":"DefaultVariation","value":"DEFAULT_VARIATION"}]},"aws-native:evidently:FeatureTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:evidently:FeatureVariationObject":{"properties":{"booleanValue":{"type":"boolean","description":"The value assigned to this variation, if the variation type is boolean."},"doubleValue":{"type":"number","description":"The value assigned to this variation, if the variation type is a double."},"longValue":{"type":"number","description":"The value assigned to this variation, if the variation type is a long."},"stringValue":{"type":"string","description":"The value assigned to this variation, if the variation type is a string."},"variationName":{"type":"string","description":"A name for the variation. It can include up to 127 characters."}},"type":"object"},"aws-native:evidently:LaunchExecutionStatusObject":{"properties":{"desiredState":{"type":"string","description":"Provide CANCELLED or COMPLETED as the launch desired state. Defaults to Completed if not provided."},"reason":{"type":"string","description":"Provide a reason for stopping the launch. Defaults to empty if not provided."},"status":{"type":"string","description":"Provide START or STOP action to apply on a launch"}},"type":"object","required":["status"]},"aws-native:evidently:LaunchGroupObject":{"properties":{"description":{"type":"string","description":"A description of the launch group."},"feature":{"type":"string","description":"The feature that this launch is using."},"groupName":{"type":"string","description":"A name for this launch group. It can include up to 127 characters."},"variation":{"type":"string","description":"The feature variation to use for this launch group."}},"type":"object","required":["feature","groupName","variation"]},"aws-native:evidently:LaunchGroupToWeight":{"properties":{"groupName":{"type":"string","description":"The name of the launch group. It can include up to 127 characters."},"splitWeight":{"type":"integer","description":"The portion of launch traffic to allocate to this launch group.\n\nThis is represented in thousandths of a percent. For example, specify 20,000 to allocate 20% of the launch audience to this launch group."}},"type":"object","required":["groupName","splitWeight"]},"aws-native:evidently:LaunchMetricDefinitionObject":{"properties":{"entityIdKey":{"type":"string","description":"The JSON path to reference the entity id in the event."},"eventPattern":{"type":"string","description":"Event patterns have the same structure as the events they match. Rules use event patterns to select events. An event pattern either matches an event or it doesn't."},"metricName":{"type":"string","description":"A name for the metric. It can include up to 255 characters."},"unitLabel":{"type":"string","description":"A label for the units that the metric is measuring."},"valueKey":{"type":"string","description":"The JSON path to reference the numerical metric value in the event."}},"type":"object","required":["entityIdKey","metricName","valueKey"]},"aws-native:evidently:LaunchSegmentOverride":{"properties":{"evaluationOrder":{"type":"integer","description":"A number indicating the order to use to evaluate segment overrides, if there are more than one. Segment overrides with lower numbers are evaluated first."},"segment":{"type":"string","description":"The ARN of the segment to use for this override."},"weights":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchGroupToWeight"},"description":"The traffic allocation percentages among the feature variations to assign to this segment. This is a set of key-value pairs. The keys are variation names. The values represent the amount of traffic to allocate to that variation for this segment. This is expressed in thousandths of a percent, so a weight of 50000 represents 50% of traffic."}},"type":"object","required":["evaluationOrder","segment","weights"]},"aws-native:evidently:LaunchStepConfig":{"properties":{"groupWeights":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchGroupToWeight"},"description":"An array of structures that define how much launch traffic to allocate to each launch group during this step of the launch."},"segmentOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchSegmentOverride"},"description":"An array of structures that you can use to specify different traffic splits for one or more audience *segments* . A segment is a portion of your audience that share one or more characteristics. Examples could be Chrome browser users, users in Europe, or Firefox browser users in Europe who also fit other criteria that your application collects, such as age.\n\nFor more information, see [Use segments to focus your audience](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html) ."},"startTime":{"type":"string","description":"The date and time to start this step of the launch. Use UTC format, `yyyy-MM-ddTHH:mm:ssZ` . For example, `2025-11-25T23:59:59Z`"}},"type":"object","required":["groupWeights","startTime"]},"aws-native:evidently:LaunchTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:evidently:ProjectAppConfigResourceObject":{"properties":{"applicationId":{"type":"string","description":"The ID of the AWS AppConfig application to use for client-side evaluation."},"environmentId":{"type":"string","description":"The ID of the AWS AppConfig environment to use for client-side evaluation."}},"type":"object","required":["applicationId","environmentId"]},"aws-native:evidently:ProjectDataDeliveryObject":{"description":"Destinations for data.","properties":{"logGroup":{"type":"string","description":"If the project stores evaluation events in CloudWatch Logs , this structure stores the log group name."},"s3":{"$ref":"#/types/aws-native:evidently:ProjectS3Destination","description":"If the project stores evaluation events in an Amazon S3 bucket, this structure stores the bucket name and bucket prefix."}},"type":"object"},"aws-native:evidently:ProjectS3Destination":{"properties":{"bucketName":{"type":"string","description":"The name of the bucket in which Evidently stores evaluation events."},"prefix":{"type":"string","description":"The bucket prefix in which Evidently stores evaluation events."}},"type":"object","required":["bucketName"]},"aws-native:evidently:ProjectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:evidently:SegmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:evs:ConnectivityInfoProperties":{"description":"The connectivity configuration for the environment. Amazon EVS requires that you specify two route server peer IDs. During environment creation, the route server endpoints peer with the NSX uplink VLAN for connectivity to the NSX overlay network.","properties":{"privateRouteServerPeerings":{"type":"array","items":{"type":"string"},"description":"The unique IDs for private route server peers."}},"type":"object","required":["privateRouteServerPeerings"]},"aws-native:evs:EnvironmentCheck":{"properties":{"impairedSince":{"type":"string","description":"The time when environment health began to be impaired."},"result":{"$ref":"#/types/aws-native:evs:EnvironmentCheckResult","description":"The check result."},"type":{"$ref":"#/types/aws-native:evs:EnvironmentCheckType","description":"The check type. Amazon EVS performs the following checks.\n\n- `KEY_REUSE` : checks that the VCF license key is not used by another Amazon EVS environment. This check fails if a used license is added to the environment.\n- `KEY_COVERAGE` : checks that your VCF license key allocates sufficient vCPU cores for all deployed hosts. The check fails when any assigned hosts in the EVS environment are not covered by license keys, or when any unassigned hosts cannot be covered by available vCPU cores in keys.\n- `REACHABILITY` : checks that the Amazon EVS control plane has a persistent connection to SDDC Manager. If Amazon EVS cannot reach the environment, this check fails.\n- `HOST_COUNT` : Checks that your environment has a minimum of 4 hosts, which is a requirement for VCF 5.2.1.\n\nIf this check fails, you will need to add hosts so that your environment meets this minimum requirement. Amazon EVS only supports environments with 4-16 hosts."}},"type":"object","required":["result","type"]},"aws-native:evs:EnvironmentCheckResult":{"type":"string","enum":[{"name":"Passed","value":"PASSED"},{"name":"Failed","value":"FAILED"},{"name":"Unknown","value":"UNKNOWN"}]},"aws-native:evs:EnvironmentCheckType":{"description":"The check type. Amazon EVS performs the following checks.\n\n- `KEY_REUSE` : checks that the VCF license key is not used by another Amazon EVS environment. This check fails if a used license is added to the environment.\n- `KEY_COVERAGE` : checks that your VCF license key allocates sufficient vCPU cores for all deployed hosts. The check fails when any assigned hosts in the EVS environment are not covered by license keys, or when any unassigned hosts cannot be covered by available vCPU cores in keys.\n- `REACHABILITY` : checks that the Amazon EVS control plane has a persistent connection to SDDC Manager. If Amazon EVS cannot reach the environment, this check fails.\n- `HOST_COUNT` : Checks that your environment has a minimum of 4 hosts, which is a requirement for VCF 5.2.1.\n\nIf this check fails, you will need to add hosts so that your environment meets this minimum requirement. Amazon EVS only supports environments with 4-16 hosts.","type":"string","enum":[{"name":"KeyReuse","value":"KEY_REUSE"},{"name":"KeyCoverage","value":"KEY_COVERAGE"},{"name":"Reachability","value":"REACHABILITY"},{"name":"VcfVersion","value":"VCF_VERSION"},{"name":"HostCount","value":"HOST_COUNT"}]},"aws-native:evs:EnvironmentHostInfoForCreate":{"properties":{"dedicatedHostId":{"type":"string","description":"The unique ID of the Amazon EC2 Dedicated Host."},"hostName":{"type":"string","description":"The DNS hostname of the host. DNS hostnames for hosts must be unique across Amazon EVS environments and within VCF."},"instanceType":{"$ref":"#/types/aws-native:evs:EnvironmentHostInfoForCreateInstanceType","description":"The EC2 instance type that represents the host."},"keyName":{"type":"string","description":"The name of the SSH key that is used to access the host."},"placementGroupId":{"type":"string","description":"The unique ID of the placement group where the host is placed."}},"type":"object","required":["hostName","instanceType","keyName"]},"aws-native:evs:EnvironmentHostInfoForCreateInstanceType":{"description":"The EC2 instance type that represents the host.","type":"string","enum":[{"name":"I4iMetal","value":"i4i.metal"}]},"aws-native:evs:EnvironmentInitialVlanInfo":{"properties":{"cidr":{"type":"string","description":"The CIDR block that you provide to create an Amazon EVS VLAN subnet. Amazon EVS VLAN subnets have a minimum CIDR block size of /28 and a maximum size of /24. Amazon EVS VLAN subnet CIDR blocks must not overlap with other subnets in the VPC."}},"type":"object","required":["cidr"]},"aws-native:evs:EnvironmentSecret":{"properties":{"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the secret."}},"type":"object"},"aws-native:evs:EnvironmentState":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Created","value":"CREATED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"CreateFailed","value":"CREATE_FAILED"}]},"aws-native:evs:EnvironmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:evs:EnvironmentVcfVersion":{"description":"The VCF version of the environment.","type":"string","enum":[{"name":"Vcf521","value":"VCF-5.2.1"},{"name":"Vcf522","value":"VCF-5.2.2"}]},"aws-native:evs:InitialVlansProperties":{"description":"The initial Vlan configuration only required upon creation. Modification after creation will have no effect","properties":{"edgeVTep":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The edge VTEP VLAN subnet. This VLAN subnet manages traffic flowing between the internal network and external networks, including internet access and other site connections."},"expansionVlan1":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"An additional VLAN subnet that can be used to extend VCF capabilities once configured. For example, you can configure an expansion VLAN subnet to use NSX Federation for centralized management and synchronization of multiple NSX deployments across different locations."},"expansionVlan2":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"An additional VLAN subnet that can be used to extend VCF capabilities once configured. For example, you can configure an expansion VLAN subnet to use NSX Federation for centralized management and synchronization of multiple NSX deployments across different locations."},"hcx":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The HCX VLAN subnet. This VLAN subnet allows the HCX Interconnnect (IX) and HCX Network Extension (NE) to reach their peers and enable HCX Service Mesh creation.\n\nIf you plan to use a public HCX VLAN subnet, the following requirements must be met:\n\n- Must have a /28 netmask and be allocated from the IPAM public pool. Required for HCX internet access configuration.\n- The HCX public VLAN CIDR block must be added to the VPC as a secondary CIDR block.\n- Must have at least two Elastic IP addresses to be allocated from the public IPAM pool for HCX components."},"hcxNetworkAclId":{"type":"string","description":"A unique ID for a network access control list that the HCX VLAN uses. Required when `isHcxPublic` is set to `true` ."},"isHcxPublic":{"type":"boolean","description":"Determines if the HCX VLAN that Amazon EVS provisions is public or private."},"nsxUpLink":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The NSX uplink VLAN subnet. This VLAN subnet allows connectivity to the NSX overlay network."},"vMotion":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The vMotion VLAN subnet. This VLAN subnet carries traffic for vSphere vMotion."},"vSan":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The vSAN VLAN subnet. This VLAN subnet carries the communication between ESXi hosts to implement a vSAN shared storage pool."},"vTep":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The VTEP VLAN subnet. This VLAN subnet handles internal network traffic between virtual machines within a VCF instance."},"vmManagement":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The VM management VLAN subnet. This VLAN subnet carries traffic for vSphere virtual machines."},"vmkManagement":{"$ref":"#/types/aws-native:evs:EnvironmentInitialVlanInfo","description":"The host VMkernel management VLAN subnet. This VLAN subnet carries traffic for managing ESXi hosts and communicating with VMware vCenter Server."}},"type":"object","required":["edgeVTep","expansionVlan1","expansionVlan2","hcx","nsxUpLink","vMotion","vSan","vTep","vmManagement","vmkManagement"]},"aws-native:evs:LicenseInfoProperties":{"description":"The license information for an EVS environment","properties":{"solutionKey":{"type":"string","description":"The VCF solution key. This license unlocks VMware VCF product features, including vSphere, NSX, SDDC Manager, and vCenter Server. The VCF solution key must cover a minimum of 256 cores."},"vsanKey":{"type":"string","description":"The VSAN license key. This license unlocks vSAN features. The vSAN license key must provide at least 110 TiB of vSAN capacity."}},"type":"object","required":["solutionKey","vsanKey"]},"aws-native:evs:ServiceAccessSecurityGroupsProperties":{"description":"The security groups that allow traffic between the Amazon EVS control plane and your VPC for service access. If a security group is not specified, Amazon EVS uses the default security group in your account for service access.","properties":{"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups that allow service access."}},"type":"object"},"aws-native:evs:VcfHostnamesProperties":{"description":"The DNS hostnames to be used by the VCF management appliances in your environment.\n\nFor environment creation to be successful, each hostname entry must resolve to a domain name that you've registered in your DNS service of choice and configured in the DHCP option set of your VPC. DNS hostnames cannot be changed after environment creation has started.","properties":{"cloudBuilder":{"type":"string","description":"The hostname for VMware Cloud Builder."},"nsx":{"type":"string","description":"The VMware NSX hostname."},"nsxEdge1":{"type":"string","description":"The hostname for the first NSX Edge node."},"nsxEdge2":{"type":"string","description":"The hostname for the second NSX Edge node."},"nsxManager1":{"type":"string","description":"The hostname for the first VMware NSX Manager virtual machine (VM)."},"nsxManager2":{"type":"string","description":"The hostname for the second VMware NSX Manager virtual machine (VM)."},"nsxManager3":{"type":"string","description":"The hostname for the third VMware NSX Manager virtual machine (VM)."},"sddcManager":{"type":"string","description":"The hostname for SDDC Manager."},"vCenter":{"type":"string","description":"The VMware vCenter hostname."}},"type":"object","required":["cloudBuilder","nsx","nsxEdge1","nsxEdge2","nsxManager1","nsxManager2","nsxManager3","sddcManager","vCenter"]},"aws-native:finspace:EnvironmentFederationMode":{"description":"Federation mode used with the Environment","type":"string","enum":[{"name":"Local","value":"LOCAL"},{"name":"Federated","value":"FEDERATED"}]},"aws-native:finspace:EnvironmentFederationParameters":{"description":"Additional parameters to identify Federation mode","properties":{"applicationCallBackUrl":{"type":"string","description":"SAML metadata URL to link with the Environment"},"attributeMap":{"type":"array","items":{"$ref":"#/types/aws-native:finspace:EnvironmentFederationParametersAttributeMapItemProperties"},"description":"Attribute map for SAML configuration"},"federationProviderName":{"type":"string","description":"Federation provider name to link with the Environment"},"federationUrn":{"type":"string","description":"SAML metadata URL to link with the Environment"},"samlMetadataDocument":{"type":"string","description":"SAML metadata document to link the federation provider to the Environment"},"samlMetadataUrl":{"type":"string","description":"SAML metadata URL to link with the Environment"}},"type":"object"},"aws-native:finspace:EnvironmentFederationParametersAttributeMapItemProperties":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object"},"aws-native:finspace:EnvironmentStatus":{"description":"State of the Environment","type":"string","enum":[{"name":"CreateRequested","value":"CREATE_REQUESTED"},{"name":"Creating","value":"CREATING"},{"name":"Created","value":"CREATED"},{"name":"DeleteRequested","value":"DELETE_REQUESTED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"FailedCreation","value":"FAILED_CREATION"},{"name":"FailedDeletion","value":"FAILED_DELETION"},{"name":"RetryDeletion","value":"RETRY_DELETION"},{"name":"Suspended","value":"SUSPENDED"}]},"aws-native:finspace:EnvironmentSuperuserParameters":{"description":"Parameters of the first Superuser for the FinSpace Environment","properties":{"emailAddress":{"type":"string","description":"Email address"},"firstName":{"type":"string","description":"First name"},"lastName":{"type":"string","description":"Last name"}},"type":"object"},"aws-native:finspace:EnvironmentTag":{"description":"A list of all tags for a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:fis:ExperimentTemplateAction":{"description":"Specifies an action for the experiment template.","properties":{"actionId":{"type":"string","description":"The ID of the action."},"description":{"type":"string","description":"A description for the action."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The parameters for the action, if applicable."},"startAfter":{"type":"array","items":{"type":"string"},"description":"The name of the action that must be completed before the current action starts."},"targets":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more targets for the action."}},"type":"object","required":["actionId"]},"aws-native:fis:ExperimentTemplateCloudWatchDashboard":{"properties":{"dashboardIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudWatch dashboard to include in the experiment report."}},"type":"object","required":["dashboardIdentifier"]},"aws-native:fis:ExperimentTemplateExperimentOptions":{"properties":{"accountTargeting":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentOptionsAccountTargeting","description":"The account targeting setting for the experiment template.","replaceOnChanges":true},"emptyTargetResolutionMode":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentOptionsEmptyTargetResolutionMode","description":"The target resolution failure mode for the experiment template."}},"type":"object"},"aws-native:fis:ExperimentTemplateExperimentOptionsAccountTargeting":{"description":"The account targeting setting for the experiment template.","type":"string","enum":[{"name":"MultiAccount","value":"multi-account"},{"name":"SingleAccount","value":"single-account"}]},"aws-native:fis:ExperimentTemplateExperimentOptionsEmptyTargetResolutionMode":{"description":"The target resolution failure mode for the experiment template.","type":"string","enum":[{"name":"Fail","value":"fail"},{"name":"Skip","value":"skip"}]},"aws-native:fis:ExperimentTemplateExperimentReportConfiguration":{"properties":{"dataSources":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentReportConfigurationDataSourcesProperties","description":"The data sources for the experiment report."},"outputs":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentReportConfigurationOutputsProperties","description":"The output destinations of the experiment report."},"postExperimentDuration":{"type":"string","description":"The duration after the experiment end time for the data sources to include in the report."},"preExperimentDuration":{"type":"string","description":"The duration before the experiment start time for the data sources to include in the report."}},"type":"object","required":["outputs"]},"aws-native:fis:ExperimentTemplateExperimentReportConfigurationDataSourcesProperties":{"description":"The data sources for the experiment report.","properties":{"cloudWatchDashboards":{"type":"array","items":{"$ref":"#/types/aws-native:fis:ExperimentTemplateCloudWatchDashboard"}}},"type":"object"},"aws-native:fis:ExperimentTemplateExperimentReportConfigurationOutputsProperties":{"description":"The output destinations of the experiment report.","properties":{"experimentReportS3Configuration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentReportConfigurationOutputsPropertiesExperimentReportS3ConfigurationProperties"}},"type":"object","required":["experimentReportS3Configuration"]},"aws-native:fis:ExperimentTemplateExperimentReportConfigurationOutputsPropertiesExperimentReportS3ConfigurationProperties":{"properties":{"bucketName":{"type":"string"},"prefix":{"type":"string"}},"type":"object","required":["bucketName"]},"aws-native:fis:ExperimentTemplateLogConfiguration":{"properties":{"cloudWatchLogsConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateLogConfigurationCloudWatchLogsConfigurationProperties","description":"The configuration for experiment logging to CloudWatch Logs ."},"logSchemaVersion":{"type":"integer","description":"The schema version."},"s3Configuration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateLogConfigurationS3ConfigurationProperties","description":"The configuration for experiment logging to Amazon S3 ."}},"type":"object","required":["logSchemaVersion"]},"aws-native:fis:ExperimentTemplateLogConfigurationCloudWatchLogsConfigurationProperties":{"description":"The configuration for experiment logging to CloudWatch Logs .","properties":{"logGroupArn":{"type":"string"}},"type":"object","required":["logGroupArn"]},"aws-native:fis:ExperimentTemplateLogConfigurationS3ConfigurationProperties":{"description":"The configuration for experiment logging to Amazon S3 .","properties":{"bucketName":{"type":"string"},"prefix":{"type":"string"}},"type":"object","required":["bucketName"]},"aws-native:fis:ExperimentTemplateStopCondition":{"properties":{"source":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["source"]},"aws-native:fis:ExperimentTemplateTarget":{"description":"Specifies a target for an experiment.","properties":{"filters":{"type":"array","items":{"$ref":"#/types/aws-native:fis:ExperimentTemplateTargetFilter"},"description":"The filters to apply to identify target resources using specific attributes."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The parameters for the resource type."},"resourceArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the targets."},"resourceTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the target resources."},"resourceType":{"type":"string","description":"The resource type."},"selectionMode":{"type":"string","description":"Scopes the identified resources to a specific count or percentage."}},"type":"object","required":["resourceType","selectionMode"]},"aws-native:fis:ExperimentTemplateTargetFilter":{"description":"Describes a filter used for the target resource input in an experiment template.","properties":{"path":{"type":"string"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["path","values"]},"aws-native:fms:PolicyFirewallDeploymentModel":{"description":"Firewall deployment mode.","type":"string","enum":[{"name":"Distributed","value":"DISTRIBUTED"},{"name":"Centralized","value":"CENTRALIZED"}]},"aws-native:fms:PolicyIeMap":{"description":"An FMS includeMap or excludeMap.","properties":{"account":{"type":"array","items":{"type":"string"},"description":"The account list for the map."},"orgunit":{"type":"array","items":{"type":"string"},"description":"The organizational unit list for the map."}},"type":"object"},"aws-native:fms:PolicyNetworkAclCommonPolicy":{"description":"Network ACL common policy.","properties":{"networkAclEntrySet":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclEntrySet","description":"The definition of the first and last rules for the network ACL policy."}},"type":"object","required":["networkAclEntrySet"]},"aws-native:fms:PolicyNetworkAclEntry":{"description":"Network ACL entry.","properties":{"cidrBlock":{"type":"string","description":"CIDR block."},"egress":{"type":"boolean","description":"Whether the entry is an egress entry."},"icmpTypeCode":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclEntryIcmpTypeCodeProperties","description":"ICMP type and code."},"ipv6CidrBlock":{"type":"string","description":"IPv6 CIDR block."},"portRange":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclEntryPortRangeProperties","description":"Port range."},"protocol":{"type":"string","description":"Protocol."},"ruleAction":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclEntryRuleAction","description":"Rule Action."}},"type":"object","required":["egress","protocol","ruleAction"]},"aws-native:fms:PolicyNetworkAclEntryIcmpTypeCodeProperties":{"description":"ICMP type and code.","properties":{"code":{"type":"integer","description":"Code."},"type":{"type":"integer","description":"Type."}},"type":"object","required":["code","type"]},"aws-native:fms:PolicyNetworkAclEntryPortRangeProperties":{"description":"Port range.","properties":{"from":{"type":"integer","description":"From Port."},"to":{"type":"integer","description":"To Port."}},"type":"object","required":["from","to"]},"aws-native:fms:PolicyNetworkAclEntryRuleAction":{"description":"Rule Action.","type":"string","enum":[{"name":"Allow","value":"allow"},{"name":"Deny","value":"deny"}]},"aws-native:fms:PolicyNetworkAclEntrySet":{"description":"Network ACL entry set.","properties":{"firstEntries":{"type":"array","items":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclEntry"},"description":"The rules that you want to run first in the Firewall Manager managed network ACLs.\n\n\u003e Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates. \n\nYou must specify at least one first entry or one last entry in any network ACL policy."},"forceRemediateForFirstEntries":{"type":"boolean","description":"Applies only when remediation is enabled for the policy as a whole. Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.\n\nIf forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see [Remediation for managed network ACLs](https://docs.aws.amazon.com/waf/latest/developerguide/network-acl-policies.html#network-acls-remediation) in the *AWS Firewall Manager Developer Guide* ."},"forceRemediateForLastEntries":{"type":"boolean","description":"Applies only when remediation is enabled for the policy as a whole. Firewall Manager uses this setting when it finds policy violations that involve conflicts between the custom entries and the policy entries.\n\nIf forced remediation is disabled, Firewall Manager marks the network ACL as noncompliant and does not try to remediate. For more information about the remediation behavior, see [Remediation for managed network ACLs](https://docs.aws.amazon.com/waf/latest/developerguide/network-acl-policies.html#network-acls-remediation) in the *AWS Firewall Manager Developer Guide* ."},"lastEntries":{"type":"array","items":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclEntry"},"description":"The rules that you want to run last in the Firewall Manager managed network ACLs.\n\n\u003e Provide these in the order in which you want them to run. Firewall Manager will assign the specific rule numbers for you, in the network ACLs that it creates. \n\nYou must specify at least one first entry or one last entry in any network ACL policy."}},"type":"object","required":["forceRemediateForFirstEntries","forceRemediateForLastEntries"]},"aws-native:fms:PolicyNetworkFirewallPolicy":{"description":"Network firewall policy.","properties":{"firewallDeploymentModel":{"$ref":"#/types/aws-native:fms:PolicyFirewallDeploymentModel","description":"Defines the deployment model to use for the firewall policy. To use a distributed model, set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `DISTRIBUTED` ."}},"type":"object","required":["firewallDeploymentModel"]},"aws-native:fms:PolicyOption":{"description":"Firewall policy option.","properties":{"networkAclCommonPolicy":{"$ref":"#/types/aws-native:fms:PolicyNetworkAclCommonPolicy","description":"Defines a Firewall Manager network ACL policy."},"networkFirewallPolicy":{"$ref":"#/types/aws-native:fms:PolicyNetworkFirewallPolicy","description":"Defines the deployment model to use for the firewall policy."},"thirdPartyFirewallPolicy":{"$ref":"#/types/aws-native:fms:PolicyThirdPartyFirewallPolicy","description":"Defines the policy options for a third-party firewall policy."}},"type":"object"},"aws-native:fms:PolicyResourceTag":{"description":"A resource tag.","properties":{"key":{"type":"string","description":"The resource tag key."},"value":{"type":"string","description":"The resource tag value."}},"type":"object","required":["key"]},"aws-native:fms:PolicyResourceTagLogicalOperator":{"description":"Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag.\n\nDefault: `AND`","type":"string","enum":[{"name":"And","value":"AND"},{"name":"Or","value":"OR"}]},"aws-native:fms:PolicySecurityServicePolicyData":{"description":"Firewall security service policy data.","properties":{"managedServiceData":{"type":"string","description":"Details about the service that are specific to the service type, in JSON format.\n\n- Example: `DNS_FIREWALL`\n\n`\"{\\\"type\\\":\\\"DNS_FIREWALL\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-1\\\",\\\"priority\\\":10}],\\\"postProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-2\\\",\\\"priority\\\":9911}]}\"`\n\n\u003e Valid values for `preProcessRuleGroups` are between 1 and 99. Valid values for `postProcessRuleGroups` are between 9901 and 10000.\n- Example: `NETWORK_FIREWALL` - Centralized deployment model\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"awsNetworkFirewallConfig\\\":{\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}},\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"OFF\\\"},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nWith automatic Availbility Zone configuration, Firewall Manager chooses which Availability Zones to create the endpoints in. To use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"]},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\": \\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\", \\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{ \\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[ \\\"10.0.0.0/28\\\"]}]} },\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"OFF\\\",\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nWith custom Availability Zone configuration, you define which specific Availability Zones to create endpoints in by configuring `firewallCreationConfig` . To configure the Availability Zones in `firewallCreationConfig` , specify either the `availabilityZoneName` or `availabilityZoneId` parameter, not both parameters.\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"],\\\"routeManagementConfig\\\":{\\\"allowCrossAZTrafficIfNoEndpoint\\\":true}},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall centralized deployment model\n\n`\"{ \\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\", \\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\", \\\"thirdPartyFirewallConfig\\\":{ \\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `CENTRALIZED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall distributed deployment model\n\n`\"{\\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\",\\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\",\\\"thirdPartyFirewallConfig\\\":{\\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{ \\\"distributedFirewallDeploymentModel\\\":{ \\\"distributedFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{ \\\"availabilityZoneConfigList\\\":[ {\\\"availabilityZoneName\\\":\\\"${AvailabilityZone}\\\" } ] } }, \\\"allowedIPV4CidrList\\\":[ ] } } } }\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `DISTRIBUTED` .\n- Specification for `SHIELD_ADVANCED` for Amazon CloudFront distributions\n\n`\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED|IGNORED|DISABLED\\\", \\\"automaticResponseAction\\\":\\\"BLOCK|COUNT\\\"}, \\\"overrideCustomerWebaclClassic\\\":true|false}\"`\n\nFor example: `\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED\\\", \\\"automaticResponseAction\\\":\\\"COUNT\\\"}}\"`\n\nThe default value for `automaticResponseStatus` is `IGNORED` . The value for `automaticResponseAction` is only required when `automaticResponseStatus` is set to `ENABLED` . The default value for `overrideCustomerWebaclClassic` is `false` .\n\nFor other resource types that you can protect with a Shield Advanced policy, this `ManagedServiceData` configuration is an empty string.\n- Example: `WAFV2`\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"version\\\":null,\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesAmazonIpReputationList\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nIn the `loggingConfiguration` , you can specify one `logDestinationConfigs` , you can optionally provide up to 20 `redactedFields` , and the `RedactedFieldType` must be one of `URI` , `QUERY_STRING` , `HEADER` , or `METHOD` .\n- Example: `AWS WAF Classic`\n\n`\"{\\\"type\\\": \\\"WAF\\\", \\\"ruleGroups\\\": [{\\\"id\\\":\\\"12345678-1bcd-9012-efga-0987654321ab\\\", \\\"overrideAction\\\" : {\\\"type\\\": \\\"COUNT\\\"}}], \\\"defaultAction\\\": {\\\"type\\\": \\\"BLOCK\\\"}}\"`\n- Example: `WAFV2` - AWS Firewall Manager support for AWS WAF managed rule group versioning\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"versionEnabled\\\":true,\\\"version\\\":\\\"Version_2.0\\\",\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesCommonRuleSet\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nTo use a specific version of a AWS WAF managed rule group in your Firewall Manager policy, you must set `versionEnabled` to `true` , and set `version` to the version you'd like to use. If you don't set `versionEnabled` to `true` , or if you omit `versionEnabled` , then Firewall Manager uses the default version of the AWS WAF managed rule group.\n- Example: `SECURITY_GROUPS_COMMON`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: Shared VPCs. Apply the preceding policy to resources in shared VPCs as well as to those in VPCs that the account owns\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"includeSharedVPC\\\":true,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: `SECURITY_GROUPS_CONTENT_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_CONTENT_AUDIT\\\",\\\"securityGroups\\\":[{\\\"id\\\":\\\"sg-000e55995d61a06bd\\\"}],\\\"securityGroupAction\\\":{\\\"type\\\":\\\"ALLOW\\\"}}\"`\n\nThe security group action for content audit can be `ALLOW` or `DENY` . For `ALLOW` , all in-scope security group rules must be within the allowed range of the policy's security group rules. For `DENY` , all in-scope security group rules must not contain a value or a range that matches a rule value or range in the policy security group.\n- Example: `SECURITY_GROUPS_USAGE_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_USAGE_AUDIT\\\",\\\"deleteUnusedSecurityGroups\\\":true,\\\"coalesceRedundantSecurityGroups\\\":true}\"`"},"policyOption":{"$ref":"#/types/aws-native:fms:PolicyOption","description":"Contains the settings to configure a network ACL policy, a AWS Network Firewall firewall policy deployment model, or a third-party firewall policy."},"type":{"$ref":"#/types/aws-native:fms:PolicyType","description":"The service that the policy is using to protect the resources. This specifies the type of policy that is created, either an AWS WAF policy, a Shield Advanced policy, or a security group policy. For security group policies, Firewall Manager supports one security group for each common policy and for each content audit policy. This is an adjustable limit that you can increase by contacting SUPlong ."}},"type":"object","required":["type"]},"aws-native:fms:PolicyTag":{"description":"A policy tag.","properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:fms:PolicyThirdPartyFirewallPolicy":{"description":"Third party firewall policy.","properties":{"firewallDeploymentModel":{"$ref":"#/types/aws-native:fms:PolicyFirewallDeploymentModel","description":"Defines the deployment model to use for the third-party firewall policy."}},"type":"object","required":["firewallDeploymentModel"]},"aws-native:fms:PolicyType":{"description":"Firewall policy type.","type":"string","enum":[{"name":"Waf","value":"WAF"},{"name":"Wafv2","value":"WAFV2"},{"name":"ShieldAdvanced","value":"SHIELD_ADVANCED"},{"name":"SecurityGroupsCommon","value":"SECURITY_GROUPS_COMMON"},{"name":"SecurityGroupsContentAudit","value":"SECURITY_GROUPS_CONTENT_AUDIT"},{"name":"SecurityGroupsUsageAudit","value":"SECURITY_GROUPS_USAGE_AUDIT"},{"name":"NetworkFirewall","value":"NETWORK_FIREWALL"},{"name":"ThirdPartyFirewall","value":"THIRD_PARTY_FIREWALL"},{"name":"DnsFirewall","value":"DNS_FIREWALL"},{"name":"ImportNetworkFirewall","value":"IMPORT_NETWORK_FIREWALL"},{"name":"NetworkAclCommon","value":"NETWORK_ACL_COMMON"}]},"aws-native:fms:ResourceSetTag":{"description":"A tag.","properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:forecast:DatasetAttributesItemProperties":{"properties":{"attributeName":{"type":"string","description":"Name of the dataset field"},"attributeType":{"$ref":"#/types/aws-native:forecast:DatasetAttributesItemPropertiesAttributeType","description":"Data type of the field"}},"type":"object"},"aws-native:forecast:DatasetAttributesItemPropertiesAttributeType":{"description":"Data type of the field","type":"string","enum":[{"name":"String","value":"string"},{"name":"Integer","value":"integer"},{"name":"Float","value":"float"},{"name":"Timestamp","value":"timestamp"},{"name":"Geolocation","value":"geolocation"}]},"aws-native:forecast:DatasetDomain":{"description":"The domain associated with the dataset","type":"string","enum":[{"name":"Retail","value":"RETAIL"},{"name":"Custom","value":"CUSTOM"},{"name":"InventoryPlanning","value":"INVENTORY_PLANNING"},{"name":"Ec2Capacity","value":"EC2_CAPACITY"},{"name":"WorkForce","value":"WORK_FORCE"},{"name":"WebTraffic","value":"WEB_TRAFFIC"},{"name":"Metrics","value":"METRICS"}]},"aws-native:forecast:DatasetGroupDomain":{"description":"The domain associated with the dataset group. When you add a dataset to a dataset group, this value and the value specified for the Domain parameter of the CreateDataset operation must match.","type":"string","enum":[{"name":"Retail","value":"RETAIL"},{"name":"Custom","value":"CUSTOM"},{"name":"InventoryPlanning","value":"INVENTORY_PLANNING"},{"name":"Ec2Capacity","value":"EC2_CAPACITY"},{"name":"WorkForce","value":"WORK_FORCE"},{"name":"WebTraffic","value":"WEB_TRAFFIC"},{"name":"Metrics","value":"METRICS"}]},"aws-native:forecast:DatasetGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:forecast:DatasetType":{"description":"The dataset type","type":"string","enum":[{"name":"TargetTimeSeries","value":"TARGET_TIME_SERIES"},{"name":"RelatedTimeSeries","value":"RELATED_TIME_SERIES"},{"name":"ItemMetadata","value":"ITEM_METADATA"}]},"aws-native:forecast:EncryptionConfigProperties":{"description":"A Key Management Service (KMS) key and the Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key.","properties":{"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key."},"roleArn":{"type":"string","description":"The ARN of the IAM role that Amazon Forecast can assume to access the AWS  key.\n\nPassing a role across AWS accounts is not allowed. If you pass a role that isn't in your account, you get an `InvalidInputException` error."}},"type":"object"},"aws-native:forecast:SchemaProperties":{"description":"The schema for the dataset. The schema attributes and their order must match the fields in your data. The dataset `Domain` and `DatasetType` that you choose determine the minimum required fields in your training data. For information about the required fields for a specific dataset domain and type, see [Dataset Domains and Dataset Types](https://docs.aws.amazon.com/forecast/latest/dg/howitworks-domains-ds-types.html) .","properties":{"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:forecast:DatasetAttributesItemProperties"},"description":"An array of attributes specifying the name and type of each field in a dataset."}},"type":"object"},"aws-native:forecast:TagsItemProperties":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:frauddetector:DetectorEntityType":{"properties":{"arn":{"type":"string","description":"The entity type ARN."},"createdTime":{"type":"string","description":"The time when the entity type was created."},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::Detector` you must define at least two variables. You can set `Inline=true` for these Variables and CloudFormation will create/update/delete the variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your detector but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the entity type was last updated."},"name":{"type":"string","description":"The entity type name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorTag"},"description":"Tags associated with this entity type."}},"type":"object"},"aws-native:frauddetector:DetectorEventType":{"properties":{"arn":{"type":"string","description":"The ARN of the event type."},"createdTime":{"type":"string","description":"The time when the event type was created."},"description":{"type":"string","description":"The description of the event type."},"entityTypes":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorEntityType"},"description":"The event type entity types."},"eventVariables":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorEventVariable"},"description":"The event type event variables."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::Detector` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the Variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your detector but not execute any changes to the variables."},"labels":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorLabel"},"description":"The event type labels."},"lastUpdatedTime":{"type":"string","description":"The time when the event type was last updated."},"name":{"type":"string","description":"The name for the event type"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorTag"},"description":"Tags associated with this event type."}},"type":"object"},"aws-native:frauddetector:DetectorEventVariable":{"properties":{"arn":{"type":"string","description":"The event variable ARN."},"createdTime":{"type":"string","description":"The time when the event variable was created."},"dataSource":{"$ref":"#/types/aws-native:frauddetector:DetectorEventVariableDataSource","description":"The data source of the event variable.\n\nValid values: `EVENT | EXTERNAL_MODEL_SCORE`\n\nWhen defining a variable within a detector, you can only use the `EVENT` value for DataSource when the *Inline* property is set to true. If the *Inline* property is set false, you can use either `EVENT` or `MODEL_SCORE` for DataSource."},"dataType":{"$ref":"#/types/aws-native:frauddetector:DetectorEventVariableDataType","description":"The data type of the event variable.\n\nValid values: `STRING | INTEGER | BOOLEAN | FLOAT`"},"defaultValue":{"type":"string","description":"The default value of the event variable. This is required if you are providing the details of your variables instead of the ARN."},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::Detector` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your detector but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the event variable was last updated."},"name":{"type":"string","description":"The name of the event variable."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorTag"},"description":"Tags associated with this event variable."},"variableType":{"$ref":"#/types/aws-native:frauddetector:DetectorEventVariableVariableType","description":"The type of event variable. For more information, see [Variable types](https://docs.aws.amazon.com/frauddetector/latest/ug/create-a-variable.html#variable-types) ."}},"type":"object"},"aws-native:frauddetector:DetectorEventVariableDataSource":{"description":"The data source of the event variable.\n\nValid values: `EVENT | EXTERNAL_MODEL_SCORE`\n\nWhen defining a variable within a detector, you can only use the `EVENT` value for DataSource when the *Inline* property is set to true. If the *Inline* property is set false, you can use either `EVENT` or `MODEL_SCORE` for DataSource.","type":"string","enum":[{"name":"Event","value":"EVENT"}]},"aws-native:frauddetector:DetectorEventVariableDataType":{"description":"The data type of the event variable.\n\nValid values: `STRING | INTEGER | BOOLEAN | FLOAT`","type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Float","value":"FLOAT"},{"name":"Boolean","value":"BOOLEAN"}]},"aws-native:frauddetector:DetectorEventVariableVariableType":{"description":"The type of event variable. For more information, see [Variable types](https://docs.aws.amazon.com/frauddetector/latest/ug/create-a-variable.html#variable-types) .","type":"string","enum":[{"name":"AuthCode","value":"AUTH_CODE"},{"name":"Avs","value":"AVS"},{"name":"BillingAddressL1","value":"BILLING_ADDRESS_L1"},{"name":"BillingAddressL2","value":"BILLING_ADDRESS_L2"},{"name":"BillingCity","value":"BILLING_CITY"},{"name":"BillingCountry","value":"BILLING_COUNTRY"},{"name":"BillingName","value":"BILLING_NAME"},{"name":"BillingPhone","value":"BILLING_PHONE"},{"name":"BillingState","value":"BILLING_STATE"},{"name":"BillingZip","value":"BILLING_ZIP"},{"name":"CardBin","value":"CARD_BIN"},{"name":"Categorical","value":"CATEGORICAL"},{"name":"CurrencyCode","value":"CURRENCY_CODE"},{"name":"EmailAddress","value":"EMAIL_ADDRESS"},{"name":"Fingerprint","value":"FINGERPRINT"},{"name":"FraudLabel","value":"FRAUD_LABEL"},{"name":"FreeFormText","value":"FREE_FORM_TEXT"},{"name":"IpAddress","value":"IP_ADDRESS"},{"name":"Numeric","value":"NUMERIC"},{"name":"OrderId","value":"ORDER_ID"},{"name":"PaymentType","value":"PAYMENT_TYPE"},{"name":"PhoneNumber","value":"PHONE_NUMBER"},{"name":"Price","value":"PRICE"},{"name":"ProductCategory","value":"PRODUCT_CATEGORY"},{"name":"ShippingAddressL1","value":"SHIPPING_ADDRESS_L1"},{"name":"ShippingAddressL2","value":"SHIPPING_ADDRESS_L2"},{"name":"ShippingCity","value":"SHIPPING_CITY"},{"name":"ShippingCountry","value":"SHIPPING_COUNTRY"},{"name":"ShippingName","value":"SHIPPING_NAME"},{"name":"ShippingPhone","value":"SHIPPING_PHONE"},{"name":"ShippingState","value":"SHIPPING_STATE"},{"name":"ShippingZip","value":"SHIPPING_ZIP"},{"name":"Useragent","value":"USERAGENT"}]},"aws-native:frauddetector:DetectorLabel":{"properties":{"arn":{"type":"string","description":"The label ARN."},"createdTime":{"type":"string","description":"The time when the label was created."},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::Detector` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your detector but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the label was last updated."},"name":{"type":"string","description":"The label name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorTag"},"description":"Tags associated with this label."}},"type":"object"},"aws-native:frauddetector:DetectorModel":{"description":"A model to associate with a detector.","properties":{"arn":{"type":"string","description":"The ARN of the model."}},"type":"object"},"aws-native:frauddetector:DetectorOutcome":{"properties":{"arn":{"type":"string","description":"The outcome ARN."},"createdTime":{"type":"string","description":"The time when the outcome was created."},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::Detector` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your detector but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the outcome was last updated."},"name":{"type":"string","description":"The outcome name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorTag"},"description":"Tags associated with this outcome."}},"type":"object"},"aws-native:frauddetector:DetectorRule":{"properties":{"arn":{"type":"string","description":"The rule ARN."},"createdTime":{"type":"string","description":"The time when the event type was created."},"description":{"type":"string","description":"The description."},"detectorId":{"type":"string","description":"The detector for which the rule is associated."},"expression":{"type":"string","description":"The rule expression. A rule expression captures the business logic. For more information, see [Rule language reference](https://docs.aws.amazon.com/frauddetector/latest/ug/rule-language-reference.html) ."},"language":{"$ref":"#/types/aws-native:frauddetector:DetectorRuleLanguage","description":"The rule language.\n\nValid Value: DETECTORPL"},"lastUpdatedTime":{"type":"string","description":"The time when the event type was last updated."},"outcomes":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorOutcome"},"description":"The rule outcome."},"ruleId":{"type":"string","description":"The rule ID."},"ruleVersion":{"type":"string","description":"The rule version."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorTag"},"description":"Tags associated with this event type."}},"type":"object"},"aws-native:frauddetector:DetectorRuleExecutionMode":{"description":"The rule execution mode for the rules included in the detector version.\n\nValid values: `FIRST_MATCHED | ALL_MATCHED` Default value: `FIRST_MATCHED`\n\nYou can define and edit the rule mode at the detector version level, when it is in draft status.\n\nIf you specify `FIRST_MATCHED` , Amazon Fraud Detector evaluates rules sequentially, first to last, stopping at the first matched rule. Amazon Fraud dectector then provides the outcomes for that single rule.\n\nIf you specifiy `ALL_MATCHED` , Amazon Fraud Detector evaluates all rules and returns the outcomes for all matched rules.","type":"string","enum":[{"name":"FirstMatched","value":"FIRST_MATCHED"},{"name":"AllMatched","value":"ALL_MATCHED"}]},"aws-native:frauddetector:DetectorRuleLanguage":{"description":"The rule language.\n\nValid Value: DETECTORPL","type":"string","enum":[{"name":"Detectorpl","value":"DETECTORPL"}]},"aws-native:frauddetector:DetectorTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:DetectorVersionStatus":{"description":"The desired detector version status for the detector","type":"string","enum":[{"name":"Draft","value":"DRAFT"},{"name":"Active","value":"ACTIVE"}]},"aws-native:frauddetector:EntityTypeTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:EventTypeEntityType":{"properties":{"arn":{"type":"string","description":"The entity type ARN."},"createdTime":{"type":"string","description":"The time when the event type was created."},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::EventType` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your event type but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the event type was last updated."},"name":{"type":"string","description":"The entity type name.\n\n`^[0-9a-z_-]+$`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeTag"},"description":"Tags associated with this event type."}},"type":"object"},"aws-native:frauddetector:EventTypeEventVariable":{"properties":{"arn":{"type":"string","description":"The event variable ARN."},"createdTime":{"type":"string","description":"The time when the event type was created."},"dataSource":{"$ref":"#/types/aws-native:frauddetector:EventTypeEventVariableDataSource","description":"The source of the event variable.\n\nValid values: `EVENT | EXTERNAL_MODEL_SCORE`\n\nWhen defining a variable within a event type, you can only use the `EVENT` value for DataSource when the *Inline* property is set to true. If the *Inline* property is set false, you can use either `EVENT` or `MODEL_SCORE` for DataSource."},"dataType":{"$ref":"#/types/aws-native:frauddetector:EventTypeEventVariableDataType","description":"The data type of the event variable. For more information, see [Data types](https://docs.aws.amazon.com/frauddetector/latest/ug/variables.html#data-types) ."},"defaultValue":{"type":"string","description":"The default value of the event variable"},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::EventType` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the Variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your event type but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the event type was last updated."},"name":{"type":"string","description":"The name of the event variable."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeTag"},"description":"Tags associated with this event type."},"variableType":{"$ref":"#/types/aws-native:frauddetector:EventTypeEventVariableVariableType","description":"The type of event variable. For more information, see [Variable types](https://docs.aws.amazon.com/frauddetector/latest/ug/variables.html#variable-types) ."}},"type":"object"},"aws-native:frauddetector:EventTypeEventVariableDataSource":{"description":"The source of the event variable.\n\nValid values: `EVENT | EXTERNAL_MODEL_SCORE`\n\nWhen defining a variable within a event type, you can only use the `EVENT` value for DataSource when the *Inline* property is set to true. If the *Inline* property is set false, you can use either `EVENT` or `MODEL_SCORE` for DataSource.","type":"string","enum":[{"name":"Event","value":"EVENT"}]},"aws-native:frauddetector:EventTypeEventVariableDataType":{"description":"The data type of the event variable. For more information, see [Data types](https://docs.aws.amazon.com/frauddetector/latest/ug/variables.html#data-types) .","type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Float","value":"FLOAT"},{"name":"Boolean","value":"BOOLEAN"}]},"aws-native:frauddetector:EventTypeEventVariableVariableType":{"description":"The type of event variable. For more information, see [Variable types](https://docs.aws.amazon.com/frauddetector/latest/ug/variables.html#variable-types) .","type":"string","enum":[{"name":"AuthCode","value":"AUTH_CODE"},{"name":"Avs","value":"AVS"},{"name":"BillingAddressL1","value":"BILLING_ADDRESS_L1"},{"name":"BillingAddressL2","value":"BILLING_ADDRESS_L2"},{"name":"BillingCity","value":"BILLING_CITY"},{"name":"BillingCountry","value":"BILLING_COUNTRY"},{"name":"BillingName","value":"BILLING_NAME"},{"name":"BillingPhone","value":"BILLING_PHONE"},{"name":"BillingState","value":"BILLING_STATE"},{"name":"BillingZip","value":"BILLING_ZIP"},{"name":"CardBin","value":"CARD_BIN"},{"name":"Categorical","value":"CATEGORICAL"},{"name":"CurrencyCode","value":"CURRENCY_CODE"},{"name":"EmailAddress","value":"EMAIL_ADDRESS"},{"name":"Fingerprint","value":"FINGERPRINT"},{"name":"FraudLabel","value":"FRAUD_LABEL"},{"name":"FreeFormText","value":"FREE_FORM_TEXT"},{"name":"IpAddress","value":"IP_ADDRESS"},{"name":"Numeric","value":"NUMERIC"},{"name":"OrderId","value":"ORDER_ID"},{"name":"PaymentType","value":"PAYMENT_TYPE"},{"name":"PhoneNumber","value":"PHONE_NUMBER"},{"name":"Price","value":"PRICE"},{"name":"ProductCategory","value":"PRODUCT_CATEGORY"},{"name":"ShippingAddressL1","value":"SHIPPING_ADDRESS_L1"},{"name":"ShippingAddressL2","value":"SHIPPING_ADDRESS_L2"},{"name":"ShippingCity","value":"SHIPPING_CITY"},{"name":"ShippingCountry","value":"SHIPPING_COUNTRY"},{"name":"ShippingName","value":"SHIPPING_NAME"},{"name":"ShippingPhone","value":"SHIPPING_PHONE"},{"name":"ShippingState","value":"SHIPPING_STATE"},{"name":"ShippingZip","value":"SHIPPING_ZIP"},{"name":"Useragent","value":"USERAGENT"}]},"aws-native:frauddetector:EventTypeLabel":{"properties":{"arn":{"type":"string","description":"The label ARN."},"createdTime":{"type":"string","description":"The time when the event type was created."},"description":{"type":"string","description":"The description."},"inline":{"type":"boolean","description":"Indicates whether the resource is defined within this CloudFormation template and impacts the create, update, and delete behavior of the stack. If the value is `true` , CloudFormation will create/update/delete the resource when creating/updating/deleting the stack. If the value is `false` , CloudFormation will validate that the object exists and then use it within the resource without making changes to the object.\n\nFor example, when creating `AWS::FraudDetector::EventType` you must define at least two variables. You can set `Inline=true` for these variables and CloudFormation will create/update/delete the variables as part of stack operations. However, if you set `Inline=false` , CloudFormation will associate the variables to your EventType but not execute any changes to the variables."},"lastUpdatedTime":{"type":"string","description":"The time when the event type was last updated."},"name":{"type":"string","description":"The label name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeTag"},"description":"Tags associated with this event type."}},"type":"object"},"aws-native:frauddetector:EventTypeTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:LabelTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:ListTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:OutcomeTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:VariableDataSource":{"description":"The source of the data.","type":"string","enum":[{"name":"Event","value":"EVENT"},{"name":"ExternalModelScore","value":"EXTERNAL_MODEL_SCORE"}]},"aws-native:frauddetector:VariableDataType":{"description":"The data type.","type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Float","value":"FLOAT"},{"name":"Boolean","value":"BOOLEAN"}]},"aws-native:frauddetector:VariableTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:frauddetector:VariableType":{"description":"The variable type. For more information see https://docs.aws.amazon.com/frauddetector/latest/ug/create-a-variable.html#variable-types","type":"string","enum":[{"name":"AuthCode","value":"AUTH_CODE"},{"name":"Avs","value":"AVS"},{"name":"BillingAddressL1","value":"BILLING_ADDRESS_L1"},{"name":"BillingAddressL2","value":"BILLING_ADDRESS_L2"},{"name":"BillingCity","value":"BILLING_CITY"},{"name":"BillingCountry","value":"BILLING_COUNTRY"},{"name":"BillingName","value":"BILLING_NAME"},{"name":"BillingPhone","value":"BILLING_PHONE"},{"name":"BillingState","value":"BILLING_STATE"},{"name":"BillingZip","value":"BILLING_ZIP"},{"name":"CardBin","value":"CARD_BIN"},{"name":"Categorical","value":"CATEGORICAL"},{"name":"CurrencyCode","value":"CURRENCY_CODE"},{"name":"EmailAddress","value":"EMAIL_ADDRESS"},{"name":"Fingerprint","value":"FINGERPRINT"},{"name":"FraudLabel","value":"FRAUD_LABEL"},{"name":"FreeFormText","value":"FREE_FORM_TEXT"},{"name":"IpAddress","value":"IP_ADDRESS"},{"name":"Numeric","value":"NUMERIC"},{"name":"OrderId","value":"ORDER_ID"},{"name":"PaymentType","value":"PAYMENT_TYPE"},{"name":"PhoneNumber","value":"PHONE_NUMBER"},{"name":"Price","value":"PRICE"},{"name":"ProductCategory","value":"PRODUCT_CATEGORY"},{"name":"ShippingAddressL1","value":"SHIPPING_ADDRESS_L1"},{"name":"ShippingAddressL2","value":"SHIPPING_ADDRESS_L2"},{"name":"ShippingCity","value":"SHIPPING_CITY"},{"name":"ShippingCountry","value":"SHIPPING_COUNTRY"},{"name":"ShippingName","value":"SHIPPING_NAME"},{"name":"ShippingPhone","value":"SHIPPING_PHONE"},{"name":"ShippingState","value":"SHIPPING_STATE"},{"name":"ShippingZip","value":"SHIPPING_ZIP"},{"name":"Useragent","value":"USERAGENT"}]},"aws-native:fsx:DataRepositoryAssociationAutoExportPolicy":{"description":"Specifies the type of updated objects (new, changed, deleted) that will be automatically exported from your file system to the linked S3 bucket.","properties":{"events":{"type":"array","items":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationEventType"},"description":"The `AutoExportPolicy` can have the following event values:\n\n- `NEW` - New files and directories are automatically exported to the data repository as they are added to the file system.\n- `CHANGED` - Changes to files and directories on the file system are automatically exported to the data repository.\n- `DELETED` - Files and directories are automatically deleted on the data repository when they are deleted on the file system.\n\nYou can define any combination of event types for your `AutoExportPolicy` ."}},"type":"object","required":["events"]},"aws-native:fsx:DataRepositoryAssociationAutoImportPolicy":{"description":"Specifies the type of updated objects (new, changed, deleted) that will be automatically imported from the linked S3 bucket to your file system.","properties":{"events":{"type":"array","items":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationEventType"},"description":"The `AutoImportPolicy` can have the following event values:\n\n- `NEW` - Amazon FSx automatically imports metadata of files added to the linked S3 bucket that do not currently exist in the FSx file system.\n- `CHANGED` - Amazon FSx automatically updates file metadata and invalidates existing file content on the file system as files change in the data repository.\n- `DELETED` - Amazon FSx automatically deletes files on the file system as corresponding files are deleted in the data repository.\n\nYou can define any combination of event types for your `AutoImportPolicy` ."}},"type":"object","required":["events"]},"aws-native:fsx:DataRepositoryAssociationEventType":{"type":"string","enum":[{"name":"New","value":"NEW"},{"name":"Changed","value":"CHANGED"},{"name":"Deleted","value":"DELETED"}]},"aws-native:fsx:DataRepositoryAssociationS3":{"description":"The configuration for an Amazon S3 data repository linked to an Amazon FSx Lustre file system with a data repository association. The configuration defines which file events (new, changed, or deleted files or directories) are automatically imported from the linked data repository to the file system or automatically exported from the file system to the data repository.","properties":{"autoExportPolicy":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationAutoExportPolicy","description":"Describes a data repository association's automatic export policy. The `AutoExportPolicy` defines the types of updated objects on the file system that will be automatically exported to the data repository. As you create, modify, or delete files, Amazon FSx for Lustre automatically exports the defined changes asynchronously once your application finishes modifying the file.\n\nThe `AutoExportPolicy` is only supported on Amazon FSx for Lustre file systems with a data repository association."},"autoImportPolicy":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationAutoImportPolicy","description":"Describes the data repository association's automatic import policy. The AutoImportPolicy defines how Amazon FSx keeps your file metadata and directory listings up to date by importing changes to your Amazon FSx for Lustre file system as you modify objects in a linked S3 bucket.\n\nThe `AutoImportPolicy` is only supported on Amazon FSx for Lustre file systems with a data repository association."}},"type":"object"},"aws-native:fsx:DataRepositoryAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:fsx:S3AccessPointAttachmentFileSystemGid":{"properties":{"gid":{"type":"number","description":"The GID of the file system user."}},"type":"object","required":["gid"]},"aws-native:fsx:S3AccessPointAttachmentOntapFileSystemIdentity":{"properties":{"type":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOntapFileSystemIdentityType","description":"Specifies the FSx for ONTAP user identity type, accepts either UNIX or WINDOWS."},"unixUser":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOntapUnixFileSystemUser","description":"Specifies the properties of the file system UNIX user."},"windowsUser":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOntapWindowsFileSystemUser","description":"Specifies the properties of the file system Windows user."}},"type":"object","required":["type"]},"aws-native:fsx:S3AccessPointAttachmentOntapFileSystemIdentityType":{"description":"Specifies the FSx for ONTAP user identity type, accepts either UNIX or WINDOWS.","type":"string","enum":[{"name":"Unix","value":"UNIX"},{"name":"Windows","value":"WINDOWS"}]},"aws-native:fsx:S3AccessPointAttachmentOntapUnixFileSystemUser":{"properties":{"name":{"type":"string","description":"The name of the UNIX user."}},"type":"object","required":["name"]},"aws-native:fsx:S3AccessPointAttachmentOntapWindowsFileSystemUser":{"properties":{"name":{"type":"string","description":"The name of the Windows user."}},"type":"object","required":["name"]},"aws-native:fsx:S3AccessPointAttachmentOpenZfsFileSystemIdentity":{"properties":{"posixUser":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOpenZfsPosixFileSystemUser","description":"Specifies the UID and GIDs of the file system POSIX user."},"type":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOpenZfsFileSystemIdentityType","description":"Specifies the FSx for OpenZFS user identity type, accepts only POSIX."}},"type":"object","required":["posixUser","type"]},"aws-native:fsx:S3AccessPointAttachmentOpenZfsFileSystemIdentityType":{"description":"Specifies the FSx for OpenZFS user identity type, accepts only POSIX.","type":"string","enum":[{"name":"Posix","value":"POSIX"}]},"aws-native:fsx:S3AccessPointAttachmentOpenZfsPosixFileSystemUser":{"properties":{"gid":{"type":"number","description":"The GID of the file system user."},"secondaryGids":{"type":"array","items":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentFileSystemGid"},"description":"The list of secondary GIDs for the file system user."},"uid":{"type":"number","description":"The UID of the file system user."}},"type":"object","required":["gid","uid"]},"aws-native:fsx:S3AccessPointAttachmentS3AccessPoint":{"properties":{"alias":{"type":"string","description":"The S3 access point's alias."},"policy":{"$ref":"pulumi.json#/Any","description":"The S3 access point's policy."},"resourceArn":{"type":"string","description":"The S3 access point's ARN."},"vpcConfiguration":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPointVpcConfiguration","description":"The S3 access point's virtual private cloud (VPC) configuration."}},"type":"object"},"aws-native:fsx:S3AccessPointAttachmentS3AccessPointOntapConfiguration":{"properties":{"fileSystemIdentity":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOntapFileSystemIdentity","description":"The file system identity used to authorize file access requests made using the S3 access point."},"volumeId":{"type":"string","description":"The ID of the FSx for ONTAP volume that the S3 access point is attached to."}},"type":"object","required":["fileSystemIdentity","volumeId"]},"aws-native:fsx:S3AccessPointAttachmentS3AccessPointOpenZfsConfiguration":{"properties":{"fileSystemIdentity":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentOpenZfsFileSystemIdentity","description":"The file system identity used to authorize file access requests made using the S3 access point."},"volumeId":{"type":"string","description":"The ID of the FSx for OpenZFS volume that the S3 access point is attached to."}},"type":"object","required":["fileSystemIdentity","volumeId"]},"aws-native:fsx:S3AccessPointAttachmentS3AccessPointVpcConfiguration":{"properties":{"vpcId":{"type":"string","description":"Specifies the virtual private cloud (VPC) for the S3 access point VPC configuration, if one exists."}},"type":"object","required":["vpcId"]},"aws-native:fsx:S3AccessPointAttachmentType":{"description":"The type of Amazon FSx volume that the S3 access point is attached to.","type":"string","enum":[{"name":"Openzfs","value":"OPENZFS"},{"name":"Ontap","value":"ONTAP"}]},"aws-native:gamelift:AliasRoutingStrategy":{"properties":{"fleetId":{"type":"string","description":"A unique identifier for a fleet that the alias points to. If you specify SIMPLE for the Type property, you must specify this property."},"message":{"type":"string","description":"The message text to be used with a terminal routing strategy. If you specify TERMINAL for the Type property, you must specify this property."},"type":{"$ref":"#/types/aws-native:gamelift:AliasRoutingStrategyType","description":"Simple routing strategy. The alias resolves to one specific fleet. Use this type when routing to active fleets."}},"type":"object","required":["type"]},"aws-native:gamelift:AliasRoutingStrategyType":{"description":"Simple routing strategy. The alias resolves to one specific fleet. Use this type when routing to active fleets.","type":"string","enum":[{"name":"Simple","value":"SIMPLE"},{"name":"Terminal","value":"TERMINAL"}]},"aws-native:gamelift:AliasTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:BuildOperatingSystem":{"description":"The operating system that the game server binaries are built to run on. This value determines the type of fleet resources that you can use for this build. If your game build contains multiple executables, they all must run on the same operating system. If an operating system is not specified when creating a build, Amazon GameLift uses the default value (WINDOWS_2012). This value cannot be changed later.","type":"string","enum":[{"name":"AmazonLinux","value":"AMAZON_LINUX"},{"name":"AmazonLinux2","value":"AMAZON_LINUX_2"},{"name":"AmazonLinux2023","value":"AMAZON_LINUX_2023"},{"name":"Windows2012","value":"WINDOWS_2012"},{"name":"Windows2016","value":"WINDOWS_2016"},{"name":"Windows2022","value":"WINDOWS_2022"}]},"aws-native:gamelift:BuildStorageLocation":{"properties":{"bucket":{"type":"string","description":"An Amazon S3 bucket identifier. This is the name of the S3 bucket."},"key":{"type":"string","description":"The name of the zip file that contains the build files or script files."},"objectVersion":{"type":"string","description":"The version of the file, if object versioning is turned on for the bucket. Amazon GameLift uses this information when retrieving files from your S3 bucket. To retrieve a specific version of the file, provide an object version. To retrieve the latest version of the file, do not set this parameter."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for an IAM role that allows Amazon GameLift to access the S3 bucket."}},"type":"object","required":["bucket","key","roleArn"]},"aws-native:gamelift:BuildTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:ContainerFleetBillingType":{"description":"Indicates whether to use On-Demand instances or Spot instances for this fleet. If empty, the default is ON_DEMAND. Both categories of instances use identical hardware and configurations based on the instance type selected for this fleet.","type":"string","enum":[{"name":"OnDemand","value":"ON_DEMAND"},{"name":"Spot","value":"SPOT"}]},"aws-native:gamelift:ContainerFleetConnectionPortRange":{"description":"Defines the range of ports on the instance that allow inbound traffic to connect with containers in a fleet.","properties":{"fromPort":{"type":"integer","description":"A starting value for a range of allowed port numbers."},"toPort":{"type":"integer","description":"An ending value for a range of allowed port numbers. Port numbers are end-inclusive. This value must be higher than FromPort."}},"type":"object","required":["fromPort","toPort"]},"aws-native:gamelift:ContainerFleetDeploymentConfiguration":{"description":"Provides details about how to drain old tasks and replace them with new updated tasks.","properties":{"impairmentStrategy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetDeploymentConfigurationImpairmentStrategy","description":"The strategy to apply in case of impairment; defaults to MAINTAIN."},"minimumHealthyPercentage":{"type":"integer","description":"The minimum percentage of healthy required; defaults to 75."},"protectionStrategy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetDeploymentConfigurationProtectionStrategy","description":"The protection strategy for deployment on the container fleet; defaults to WITH_PROTECTION."}},"type":"object"},"aws-native:gamelift:ContainerFleetDeploymentConfigurationImpairmentStrategy":{"description":"The strategy to apply in case of impairment; defaults to MAINTAIN.","type":"string","enum":[{"name":"Maintain","value":"MAINTAIN"},{"name":"Rollback","value":"ROLLBACK"}]},"aws-native:gamelift:ContainerFleetDeploymentConfigurationProtectionStrategy":{"description":"The protection strategy for deployment on the container fleet; defaults to WITH_PROTECTION.","type":"string","enum":[{"name":"WithProtection","value":"WITH_PROTECTION"},{"name":"IgnoreProtection","value":"IGNORE_PROTECTION"}]},"aws-native:gamelift:ContainerFleetDeploymentDetails":{"description":"Provides information about the last deployment ID and its status.","properties":{"latestDeploymentId":{"type":"string","description":"The ID of the last deployment on the container fleet. This field will be empty if the container fleet does not have a ContainerGroupDefinition attached."}},"type":"object"},"aws-native:gamelift:ContainerFleetGameSessionCreationLimitPolicy":{"description":"A policy that limits the number of game sessions a player can create on the same fleet. This optional policy gives game owners control over how players can consume available game server resources. A resource creation policy makes the following statement: \"An individual player can create a maximum number of new game sessions within a specified time period\".\n\nThe policy is evaluated when a player tries to create a new game session. For example, assume you have a policy of 10 new game sessions and a time period of 60 minutes. On receiving a CreateGameSession request, Amazon GameLift checks that the player (identified by CreatorId) has created fewer than 10 game sessions in the past 60 minutes.","properties":{"newGameSessionsPerCreator":{"type":"integer","description":"The maximum number of game sessions that an individual can create during the policy period."},"policyPeriodInMinutes":{"type":"integer","description":"The time span used in evaluating the resource creation limit policy."}},"type":"object"},"aws-native:gamelift:ContainerFleetIpPermission":{"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift hosting resource. New game sessions that are started on the fleet are assigned an IP address/port number combination, which must fall into the fleet's allowed ranges. For fleets created with a custom game server, the ranges reflect the server's game session assignments. For Realtime Servers fleets, Amazon GameLift automatically opens two port ranges, one for TCP messaging and one for UDP, for use by the Realtime servers.","properties":{"fromPort":{"type":"integer","description":"A starting value for a range of allowed port numbers."},"ipRange":{"type":"string","description":"A range of allowed IP addresses. This value must be expressed in CIDR notation. Example: \"000.000.000.000/[subnet mask]\" or optionally the shortened version \"0.0.0.0/[subnet mask]\"."},"protocol":{"$ref":"#/types/aws-native:gamelift:ContainerFleetIpPermissionProtocol","description":"The network communication protocol used by the fleet."},"toPort":{"type":"integer","description":"An ending value for a range of allowed port numbers. Port numbers are end-inclusive. This value must be higher than FromPort."}},"type":"object","required":["fromPort","ipRange","protocol","toPort"]},"aws-native:gamelift:ContainerFleetIpPermissionProtocol":{"description":"The network communication protocol used by the fleet.","type":"string","enum":[{"name":"Tcp","value":"TCP"},{"name":"Udp","value":"UDP"}]},"aws-native:gamelift:ContainerFleetLocationCapacity":{"description":"Current resource capacity settings in a specified fleet or location. The location value might refer to a fleet's remote location or its home Region.","properties":{"desiredEc2Instances":{"type":"integer","description":"Defaults to MinSize if not defined. The number of EC2 instances you want to maintain in the specified fleet location. This value must fall between the minimum and maximum size limits. If any auto-scaling policy is defined for the container fleet, the desired instance will only be applied once during fleet creation and will be ignored in updates to avoid conflicts with auto-scaling. During updates with any auto-scaling policy defined, if current desired instance is lower than the new MinSize, it will be increased to the new MinSize; if current desired instance is larger than the new MaxSize, it will be decreased to the new MaxSize."},"managedCapacityConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetManagedCapacityConfiguration","description":"Configuration options for Amazon GameLift Servers-managed capacity behavior."},"maxSize":{"type":"integer","description":"The maximum value that is allowed for the fleet's instance count for a location."},"minSize":{"type":"integer","description":"The minimum value allowed for the fleet's instance count for a location."}},"type":"object","required":["maxSize"]},"aws-native:gamelift:ContainerFleetLocationConfiguration":{"description":"A remote location where a multi-location fleet can deploy EC2 instances for game hosting.","properties":{"location":{"type":"string","description":"An AWS Region code, such as `us-west-2` . For a list of supported Regions and Local Zones, see [Amazon GameLift Servers service locations](https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html) for managed hosting."},"locationCapacity":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLocationCapacity"},"playerGatewayStatus":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLocationConfigurationPlayerGatewayStatus","description":"The player gateway status for the location."},"stoppedActions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetStoppedActionsItem"}}},"type":"object","required":["location"]},"aws-native:gamelift:ContainerFleetLocationConfigurationPlayerGatewayStatus":{"description":"The player gateway status for the location.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:gamelift:ContainerFleetLogConfiguration":{"description":"A policy the location and provider of logs from the fleet.","properties":{"logDestination":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLogDestination","description":"The type of log collection to use for a fleet.\n\n- `CLOUDWATCH` -- (default value) Send logs to an Amazon CloudWatch log group that you define. Each container emits a log stream, which is organized in the log group.\n- `S3` -- Store logs in an Amazon S3 bucket that you define. This bucket must reside in the fleet's home AWS Region.\n- `NONE` -- Don't collect container logs."},"logGroupArn":{"type":"string","description":"If log destination is CLOUDWATCH, logs are sent to the specified log group in Amazon CloudWatch."},"s3BucketName":{"type":"string","description":"The name of the S3 bucket to pull logs from if S3 is the LogDestination"}},"type":"object"},"aws-native:gamelift:ContainerFleetLogDestination":{"description":"Configures the service that provides logs.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Cloudwatch","value":"CLOUDWATCH"},{"name":"S3","value":"S3"}]},"aws-native:gamelift:ContainerFleetManagedCapacityConfiguration":{"description":"Configuration options for Amazon GameLift Servers managed capacity behavior.","properties":{"scaleInAfterInactivityMinutes":{"type":"integer","description":"Length of time, in minutes, that Amazon GameLift Servers will wait before scaling in your MinSize and DesiredInstances to 0 after a period with no game session activity."},"zeroCapacityStrategy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetManagedCapacityConfigurationZeroCapacityStrategy","description":"The strategy Amazon GameLift Servers will use to automatically scale your capacity to and from zero in response to game session activity. Game session activity refers to any active running sessions or game session requests. When set to SCALE_TO_AND_FROM_ZERO, MinSize must not be specified and will be managed automatically. When set to MANUAL, MinSize is required."}},"type":"object","required":["zeroCapacityStrategy"]},"aws-native:gamelift:ContainerFleetManagedCapacityConfigurationZeroCapacityStrategy":{"description":"The strategy Amazon GameLift Servers will use to automatically scale your capacity to and from zero in response to game session activity. Game session activity refers to any active running sessions or game session requests. When set to SCALE_TO_AND_FROM_ZERO, MinSize must not be specified and will be managed automatically. When set to MANUAL, MinSize is required.","type":"string","enum":[{"name":"ScaleToAndFromZero","value":"SCALE_TO_AND_FROM_ZERO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:gamelift:ContainerFleetNewGameSessionProtectionPolicy":{"description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions.","type":"string","enum":[{"name":"FullProtection","value":"FullProtection"},{"name":"NoProtection","value":"NoProtection"}]},"aws-native:gamelift:ContainerFleetPlayerGatewayMode":{"description":"The player gateway mode for the container fleet.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"},{"name":"Required","value":"REQUIRED"}]},"aws-native:gamelift:ContainerFleetScalingPolicy":{"description":"Rule that controls how a fleet is scaled. Scaling policies are uniquely identified by the combination of name and fleet ID.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicyComparisonOperator","description":"Comparison operator to use when measuring a metric against the threshold value."},"evaluationPeriods":{"type":"integer","description":"Length of time (in minutes) the metric must be at or beyond the threshold before a scaling event is triggered."},"metricName":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicyMetricName","description":"Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment."},"name":{"type":"string","description":"A descriptive label that is associated with a fleet's scaling policy. Policy names do not need to be unique."},"policyType":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicyPolicyType","description":"The type of scaling policy to create. For a target-based policy, set the parameter MetricName to 'PercentAvailableGameSessions' and specify a TargetConfiguration. For a rule-based policy set the following parameters: MetricName, ComparisonOperator, Threshold, EvaluationPeriods, ScalingAdjustmentType, and ScalingAdjustment."},"scalingAdjustment":{"type":"integer","description":"Amount of adjustment to make, based on the scaling adjustment type."},"scalingAdjustmentType":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicyScalingAdjustmentType","description":"The type of adjustment to make to a fleet's instance count."},"targetConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetTargetConfiguration","description":"An object that contains settings for a target-based scaling policy."},"threshold":{"type":"number","description":"Metric value used to trigger a scaling event."}},"type":"object","required":["metricName","name"]},"aws-native:gamelift:ContainerFleetScalingPolicyComparisonOperator":{"description":"Comparison operator to use when measuring a metric against the threshold value.","type":"string","enum":[{"name":"GreaterThanOrEqualToThreshold","value":"GreaterThanOrEqualToThreshold"},{"name":"GreaterThanThreshold","value":"GreaterThanThreshold"},{"name":"LessThanThreshold","value":"LessThanThreshold"},{"name":"LessThanOrEqualToThreshold","value":"LessThanOrEqualToThreshold"}]},"aws-native:gamelift:ContainerFleetScalingPolicyMetricName":{"description":"Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment.","type":"string","enum":[{"name":"ActivatingGameSessions","value":"ActivatingGameSessions"},{"name":"ActiveGameSessions","value":"ActiveGameSessions"},{"name":"ActiveInstances","value":"ActiveInstances"},{"name":"AvailableGameSessions","value":"AvailableGameSessions"},{"name":"AvailablePlayerSessions","value":"AvailablePlayerSessions"},{"name":"CurrentPlayerSessions","value":"CurrentPlayerSessions"},{"name":"IdleInstances","value":"IdleInstances"},{"name":"PercentAvailableGameSessions","value":"PercentAvailableGameSessions"},{"name":"PercentIdleInstances","value":"PercentIdleInstances"},{"name":"QueueDepth","value":"QueueDepth"},{"name":"WaitTime","value":"WaitTime"},{"name":"ConcurrentActivatableGameSessions","value":"ConcurrentActivatableGameSessions"}]},"aws-native:gamelift:ContainerFleetScalingPolicyPolicyType":{"description":"The type of scaling policy to create. For a target-based policy, set the parameter MetricName to 'PercentAvailableGameSessions' and specify a TargetConfiguration. For a rule-based policy set the following parameters: MetricName, ComparisonOperator, Threshold, EvaluationPeriods, ScalingAdjustmentType, and ScalingAdjustment.","type":"string","enum":[{"name":"RuleBased","value":"RuleBased"},{"name":"TargetBased","value":"TargetBased"}]},"aws-native:gamelift:ContainerFleetScalingPolicyScalingAdjustmentType":{"description":"The type of adjustment to make to a fleet's instance count.","type":"string","enum":[{"name":"ChangeInCapacity","value":"ChangeInCapacity"},{"name":"ExactCapacity","value":"ExactCapacity"},{"name":"PercentChangeInCapacity","value":"PercentChangeInCapacity"}]},"aws-native:gamelift:ContainerFleetStatus":{"description":"The current status of the container fleet.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Creating","value":"CREATING"},{"name":"Created","value":"CREATED"},{"name":"Activating","value":"ACTIVATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:gamelift:ContainerFleetStoppedActionsItem":{"type":"string","enum":[{"name":"AutoScaling","value":"AUTO_SCALING"}]},"aws-native:gamelift:ContainerFleetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:ContainerFleetTargetConfiguration":{"description":"Settings for a target-based scaling policy. A target-based policy tracks a particular fleet metric specifies a target value for the metric. As player usage changes, the policy triggers Amazon GameLift to adjust capacity so that the metric returns to the target value. The target configuration specifies settings as needed for the target based policy, including the target value.","properties":{"targetValue":{"type":"number","description":"Desired value to use with a target-based scaling policy. The value must be relevant for whatever metric the scaling policy is using. For example, in a policy using the metric PercentAvailableGameSessions, the target value should be the preferred size of the fleet's buffer (the percent of capacity that should be idle and ready for new game sessions)."}},"type":"object","required":["targetValue"]},"aws-native:gamelift:ContainerGroupDefinitionContainerDependency":{"description":"A dependency that impacts a container's startup and shutdown.","properties":{"condition":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerDependencyCondition","description":"The type of dependency."},"containerName":{"type":"string","description":"A descriptive label for the container definition. The container being defined depends on this container's condition."}},"type":"object","required":["condition","containerName"]},"aws-native:gamelift:ContainerGroupDefinitionContainerDependencyCondition":{"description":"The type of dependency.","type":"string","enum":[{"name":"Start","value":"START"},{"name":"Complete","value":"COMPLETE"},{"name":"Success","value":"SUCCESS"},{"name":"Healthy","value":"HEALTHY"}]},"aws-native:gamelift:ContainerGroupDefinitionContainerEnvironment":{"description":"An environment variable to set inside a container, in the form of a key-value pair.","properties":{"name":{"type":"string","description":"The environment variable name."},"value":{"type":"string","description":"The environment variable value."}},"type":"object","required":["name","value"]},"aws-native:gamelift:ContainerGroupDefinitionContainerGroupType":{"description":"The scope of the container group","type":"string","enum":[{"name":"GameServer","value":"GAME_SERVER"},{"name":"PerInstance","value":"PER_INSTANCE"}]},"aws-native:gamelift:ContainerGroupDefinitionContainerHealthCheck":{"description":"Specifies how the process manager checks the health of containers.","properties":{"command":{"type":"array","items":{"type":"string"},"description":"A string array representing the command that the container runs to determine if it is healthy."},"interval":{"type":"integer","description":"How often (in seconds) the health is checked."},"retries":{"type":"integer","description":"How many times the process manager will retry the command after a timeout. (The first run of the command does not count as a retry.)"},"startPeriod":{"type":"integer","description":"The optional grace period (in seconds) to give a container time to boostrap before teh health check is declared failed."},"timeout":{"type":"integer","description":"How many seconds the process manager allows the command to run before canceling it."}},"type":"object","required":["command"]},"aws-native:gamelift:ContainerGroupDefinitionContainerMountPoint":{"description":"Defines the mount point configuration within a container.","properties":{"accessLevel":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerMountPointAccessLevel","description":"The access permissions for the mounted path."},"containerPath":{"type":"string","description":"The path inside the container where the mount is accessible."},"instancePath":{"type":"string","description":"The path on the host that will be mounted in the container."}},"type":"object","required":["instancePath"]},"aws-native:gamelift:ContainerGroupDefinitionContainerMountPointAccessLevel":{"description":"The access permissions for the mounted path.","type":"string","enum":[{"name":"ReadOnly","value":"READ_ONLY"},{"name":"ReadAndWrite","value":"READ_AND_WRITE"}]},"aws-native:gamelift:ContainerGroupDefinitionContainerPortRange":{"description":"A set of one or more port numbers that can be opened on the container.","properties":{"fromPort":{"type":"integer","description":"A starting value for the range of allowed port numbers."},"protocol":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerPortRangeProtocol","description":"Defines the protocol of these ports."},"toPort":{"type":"integer","description":"An ending value for the range of allowed port numbers. Port numbers are end-inclusive. This value must be equal to or greater than FromPort."}},"type":"object","required":["fromPort","protocol","toPort"]},"aws-native:gamelift:ContainerGroupDefinitionContainerPortRangeProtocol":{"description":"Defines the protocol of these ports.","type":"string","enum":[{"name":"Tcp","value":"TCP"},{"name":"Udp","value":"UDP"}]},"aws-native:gamelift:ContainerGroupDefinitionGameServerContainerDefinition":{"description":"Specifies the information required to run game servers with this container group","properties":{"containerName":{"type":"string","description":"A descriptive label for the container definition. Container definition names must be unique with a container group definition."},"dependsOn":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerDependency"},"description":"A list of container dependencies that determines when this container starts up and shuts down. For container groups with multiple containers, dependencies let you define a startup/shutdown sequence across the containers."},"environmentOverride":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerEnvironment"},"description":"The environment variables to pass to a container."},"imageUri":{"type":"string","description":"Specifies the image URI of this container."},"mountPoints":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerMountPoint"},"description":"A list of mount point configurations to be used in a container."},"portConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionPortConfiguration","description":"Defines the ports on the container."},"resolvedImageDigest":{"type":"string","description":"The digest of the container image."},"serverSdkVersion":{"type":"string","description":"The version of the server SDK used in this container group"}},"type":"object","required":["containerName","imageUri","serverSdkVersion"]},"aws-native:gamelift:ContainerGroupDefinitionOperatingSystem":{"description":"The operating system of the container group","type":"string","enum":[{"name":"AmazonLinux2023","value":"AMAZON_LINUX_2023"}]},"aws-native:gamelift:ContainerGroupDefinitionPortConfiguration":{"description":"Defines the ports on a container.","properties":{"containerPortRanges":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerPortRange"},"description":"Specifies one or more ranges of ports on a container."}},"type":"object","required":["containerPortRanges"]},"aws-native:gamelift:ContainerGroupDefinitionStatus":{"description":"A string indicating ContainerGroupDefinition status.","type":"string","enum":[{"name":"Ready","value":"READY"},{"name":"Copying","value":"COPYING"},{"name":"Failed","value":"FAILED"}]},"aws-native:gamelift:ContainerGroupDefinitionSupportContainerDefinition":{"description":"Supports the function of the main container group","properties":{"containerName":{"type":"string","description":"A descriptive label for the container definition."},"dependsOn":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerDependency"},"description":"A list of container dependencies that determines when this container starts up and shuts down. For container groups with multiple containers, dependencies let you define a startup/shutdown sequence across the containers."},"environmentOverride":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerEnvironment"},"description":"The environment variables to pass to a container."},"essential":{"type":"boolean","description":"Specifies if the container is essential. If an essential container fails a health check, then all containers in the container group will be restarted. You must specify exactly 1 essential container in a container group."},"healthCheck":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerHealthCheck","description":"Specifies how the health of the containers will be checked."},"imageUri":{"type":"string","description":"Specifies the image URI of this container."},"memoryHardLimitMebibytes":{"type":"integer","description":"The total memory limit of container groups following this definition in MiB"},"mountPoints":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerMountPoint"},"description":"A list of mount point configurations to be used in a container."},"portConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionPortConfiguration","description":"Defines the ports on the container."},"resolvedImageDigest":{"type":"string","description":"The digest of the container image."},"vcpu":{"type":"number","description":"The number of virtual CPUs to give to the support group"}},"type":"object","required":["containerName","imageUri"]},"aws-native:gamelift:ContainerGroupDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:FleetAnywhereConfiguration":{"description":"Configuration for Anywhere fleet.","properties":{"cost":{"type":"string","description":"Cost of compute can be specified on Anywhere Fleets to prioritize placement across Queue destinations based on Cost."}},"type":"object","required":["cost"]},"aws-native:gamelift:FleetApplyCapacity":{"description":"Determines when and how to apply fleet or location capacities. Allowed options are ON_UPDATE (default), ON_CREATE_AND_UPDATE and ON_CREATE_AND_UPDATE_WITH_AUTOSCALING. If you choose ON_CREATE_AND_UPDATE_WITH_AUTOSCALING, MinSize and MaxSize will still be applied on creation and on updates, but DesiredEC2Instances will only be applied once on fleet creation and will be ignored during updates to prevent conflicts with auto-scaling. During updates with ON_CREATE_AND_UPDATE_WITH_AUTOSCALING chosen, if current desired instance is lower than the new MinSize, it will be increased to the new MinSize; if current desired instance is larger than the new MaxSize, it will be decreased to the new MaxSize.","type":"string","enum":[{"name":"OnUpdate","value":"ON_UPDATE"},{"name":"OnCreateAndUpdate","value":"ON_CREATE_AND_UPDATE"},{"name":"OnCreateAndUpdateWithAutoscaling","value":"ON_CREATE_AND_UPDATE_WITH_AUTOSCALING"}]},"aws-native:gamelift:FleetCertificateConfiguration":{"description":"Information about the use of a TLS/SSL certificate for a fleet. TLS certificate generation is enabled at the fleet level, with one certificate generated for the fleet. When this feature is enabled, the certificate can be retrieved using the GameLift Server SDK call GetInstanceCertificate. All instances in a fleet share the same certificate.","properties":{"certificateType":{"$ref":"#/types/aws-native:gamelift:FleetCertificateConfigurationCertificateType","description":"Indicates whether a TLS/SSL certificate is generated for a fleet.\n\nValid values include:\n\n- *GENERATED* - Generate a TLS/SSL certificate for this fleet.\n- *DISABLED* - (default) Do not generate a TLS/SSL certificate for this fleet."}},"type":"object","required":["certificateType"]},"aws-native:gamelift:FleetCertificateConfigurationCertificateType":{"description":"Indicates whether a TLS/SSL certificate is generated for a fleet.\n\nValid values include:\n\n- *GENERATED* - Generate a TLS/SSL certificate for this fleet.\n- *DISABLED* - (default) Do not generate a TLS/SSL certificate for this fleet.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Generated","value":"GENERATED"}]},"aws-native:gamelift:FleetComputeType":{"description":"ComputeType to differentiate EC2 hardware managed by GameLift and Anywhere hardware managed by the customer.","type":"string","enum":[{"name":"Ec2","value":"EC2"},{"name":"Anywhere","value":"ANYWHERE"}]},"aws-native:gamelift:FleetInstanceRoleCredentialsProvider":{"description":"Credentials provider implementation that loads credentials from the Amazon EC2 Instance Metadata Service.","type":"string","enum":[{"name":"SharedCredentialFile","value":"SHARED_CREDENTIAL_FILE"}]},"aws-native:gamelift:FleetIpPermission":{"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift hosting resource. New game sessions that are started on the fleet are assigned an IP address/port number combination, which must fall into the fleet's allowed ranges. For fleets created with a custom game server, the ranges reflect the server's game session assignments. For Realtime Servers fleets, Amazon GameLift automatically opens two port ranges, one for TCP messaging and one for UDP, for use by the Realtime servers.","properties":{"fromPort":{"type":"integer","description":"A starting value for a range of allowed port numbers."},"ipRange":{"type":"string","description":"A range of allowed IP addresses. This value must be expressed in CIDR notation. Example: \"000.000.000.000/[subnet mask]\" or optionally the shortened version \"0.0.0.0/[subnet mask]\"."},"protocol":{"$ref":"#/types/aws-native:gamelift:FleetIpPermissionProtocol","description":"The network communication protocol used by the fleet."},"toPort":{"type":"integer","description":"An ending value for a range of allowed port numbers. Port numbers are end-inclusive. This value must be higher than FromPort."}},"type":"object","required":["fromPort","ipRange","protocol","toPort"]},"aws-native:gamelift:FleetIpPermissionProtocol":{"description":"The network communication protocol used by the fleet.","type":"string","enum":[{"name":"Tcp","value":"TCP"},{"name":"Udp","value":"UDP"}]},"aws-native:gamelift:FleetLocationCapacity":{"description":"Current resource capacity settings in a specified fleet or location. The location value might refer to a fleet's remote location or its home Region.","properties":{"desiredEc2Instances":{"type":"integer","description":"Defaults to MinSize if not defined. The number of EC2 instances you want to maintain in the specified fleet location. This value must fall between the minimum and maximum size limits."},"managedCapacityConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetManagedCapacityConfiguration","description":"Configuration options for Amazon GameLift Servers-managed capacity behavior."},"maxSize":{"type":"integer","description":"The maximum value that is allowed for the fleet's instance count for a location. When creating a new fleet, GameLift automatically sets this value to \"1\". Once the fleet is active, you can change this value."},"minSize":{"type":"integer","description":"The minimum value allowed for the fleet's instance count for a location. When creating a new fleet, GameLift automatically sets this value to \"0\". After the fleet is active, you can change this value."}},"type":"object","required":["maxSize"]},"aws-native:gamelift:FleetLocationConfiguration":{"description":"A remote location where a multi-location fleet can deploy EC2 instances for game hosting.","properties":{"location":{"type":"string","description":"An AWS Region code, such as `us-west-2` . For a list of supported Regions and Local Zones, see [Amazon GameLift Servers service locations](https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html) for managed hosting."},"locationCapacity":{"$ref":"#/types/aws-native:gamelift:FleetLocationCapacity","description":"Current resource capacity settings for managed EC2 fleets and managed container fleets. For multi-location fleets, location values might refer to a fleet's remote location or its home Region.\n\n*Returned by:* [DescribeFleetCapacity](https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetCapacity.html) , [DescribeFleetLocationCapacity](https://docs.aws.amazon.com/gamelift/latest/apireference/API_DescribeFleetLocationCapacity.html) , [UpdateFleetCapacity](https://docs.aws.amazon.com/gamelift/latest/apireference/API_UpdateFleetCapacity.html)"},"playerGatewayStatus":{"$ref":"#/types/aws-native:gamelift:FleetLocationConfigurationPlayerGatewayStatus","description":"The player gateway status for the location."}},"type":"object","required":["location"]},"aws-native:gamelift:FleetLocationConfigurationPlayerGatewayStatus":{"description":"The player gateway status for the location.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:gamelift:FleetManagedCapacityConfiguration":{"description":"Configuration options for Amazon GameLift Servers-managed capacity behavior.","properties":{"scaleInAfterInactivityMinutes":{"type":"integer","description":"Length of time, in minutes, that Amazon GameLift Servers will wait before scaling in your MinSize and DesiredInstances to 0 after a period with no game session activity."},"zeroCapacityStrategy":{"$ref":"#/types/aws-native:gamelift:FleetManagedCapacityConfigurationZeroCapacityStrategy","description":"The strategy Amazon GameLift Servers will use to automatically scale your capacity to and from zero in response to game session activity. Game session activity refers to any active running sessions or game session requests. When set to SCALE_TO_AND_FROM_ZERO, MinSize must not be specified and will be managed automatically. When set to MANUAL, MinSize is required."}},"type":"object","required":["zeroCapacityStrategy"]},"aws-native:gamelift:FleetManagedCapacityConfigurationZeroCapacityStrategy":{"description":"The strategy Amazon GameLift Servers will use to automatically scale your capacity to and from zero in response to game session activity. Game session activity refers to any active running sessions or game session requests. When set to SCALE_TO_AND_FROM_ZERO, MinSize must not be specified and will be managed automatically. When set to MANUAL, MinSize is required.","type":"string","enum":[{"name":"ScaleToAndFromZero","value":"SCALE_TO_AND_FROM_ZERO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:gamelift:FleetNewGameSessionProtectionPolicy":{"description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions.","type":"string","enum":[{"name":"FullProtection","value":"FullProtection"},{"name":"NoProtection","value":"NoProtection"}]},"aws-native:gamelift:FleetPlayerGatewayConfiguration":{"description":"Configuration for player gateway.","properties":{"gameServerIpProtocolSupported":{"$ref":"#/types/aws-native:gamelift:FleetPlayerGatewayConfigurationGameServerIpProtocolSupported","description":"The IP protocol supported by the game server."}},"type":"object"},"aws-native:gamelift:FleetPlayerGatewayConfigurationGameServerIpProtocolSupported":{"description":"The IP protocol supported by the game server.","type":"string","enum":[{"name":"IPv4","value":"IPv4"},{"name":"DualStack","value":"DUAL_STACK"}]},"aws-native:gamelift:FleetPlayerGatewayMode":{"description":"The player gateway mode for the fleet.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"},{"name":"Required","value":"REQUIRED"}]},"aws-native:gamelift:FleetResourceCreationLimitPolicy":{"description":"A policy that limits the number of game sessions a player can create on the same fleet. This optional policy gives game owners control over how players can consume available game server resources. A resource creation policy makes the following statement: \"An individual player can create a maximum number of new game sessions within a specified time period\".\n\nThe policy is evaluated when a player tries to create a new game session. For example, assume you have a policy of 10 new game sessions and a time period of 60 minutes. On receiving a CreateGameSession request, Amazon GameLift checks that the player (identified by CreatorId) has created fewer than 10 game sessions in the past 60 minutes.","properties":{"newGameSessionsPerCreator":{"type":"integer","description":"The maximum number of game sessions that an individual can create during the policy period."},"policyPeriodInMinutes":{"type":"integer","description":"The time span used in evaluating the resource creation limit policy."}},"type":"object"},"aws-native:gamelift:FleetRuntimeConfiguration":{"description":"A collection of server process configurations that describe the processes to run on each instance in a fleet. All fleets must have a runtime configuration. Each instance in the fleet maintains server processes as specified in the runtime configuration, launching new ones as existing processes end. Each instance regularly checks for an updated runtime configuration makes adjustments as called for.\n\nThe runtime configuration enables the instances in a fleet to run multiple processes simultaneously. Potential scenarios are as follows: (1) Run multiple processes of a single game server executable to maximize usage of your hosting resources. (2) Run one or more processes of different executables, such as your game server and a metrics tracking program. (3) Run multiple processes of a single game server but with different launch parameters, for example to run one process on each instance in debug mode.\n\nAn Amazon GameLift instance is limited to 50 processes running simultaneously. A runtime configuration must specify fewer than this limit. To calculate the total number of processes specified in a runtime configuration, add the values of the ConcurrentExecutions parameter for each ServerProcess object in the runtime configuration.","properties":{"gameSessionActivationTimeoutSeconds":{"type":"integer","description":"The maximum amount of time (in seconds) that a game session can remain in status ACTIVATING. If the game session is not active before the timeout, activation is terminated and the game session status is changed to TERMINATED."},"maxConcurrentGameSessionActivations":{"type":"integer","description":"The maximum number of game sessions with status ACTIVATING to allow on an instance simultaneously. This setting limits the amount of instance resources that can be used for new game activations at any one time."},"serverProcesses":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetServerProcess"},"description":"A collection of server process configurations that describe which server processes to run on each instance in a fleet."}},"type":"object"},"aws-native:gamelift:FleetScalingPolicy":{"description":"Rule that controls how a fleet is scaled. Scaling policies are uniquely identified by the combination of name and fleet ID.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicyComparisonOperator","description":"Comparison operator to use when measuring a metric against the threshold value."},"evaluationPeriods":{"type":"integer","description":"Length of time (in minutes) the metric must be at or beyond the threshold before a scaling event is triggered."},"location":{"type":"string","description":"The fleet location."},"metricName":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicyMetricName","description":"Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment."},"name":{"type":"string","description":"A descriptive label that is associated with a fleet's scaling policy. Policy names do not need to be unique."},"policyType":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicyPolicyType","description":"The type of scaling policy to create. For a target-based policy, set the parameter MetricName to 'PercentAvailableGameSessions' and specify a TargetConfiguration. For a rule-based policy set the following parameters: MetricName, ComparisonOperator, Threshold, EvaluationPeriods, ScalingAdjustmentType, and ScalingAdjustment."},"scalingAdjustment":{"type":"integer","description":"Amount of adjustment to make, based on the scaling adjustment type."},"scalingAdjustmentType":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicyScalingAdjustmentType","description":"The type of adjustment to make to a fleet's instance count."},"status":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicyStatus","description":"Current status of the scaling policy. The scaling policy can be in force only when in an ACTIVE status. Scaling policies can be suspended for individual fleets. If the policy is suspended for a fleet, the policy status does not change."},"targetConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetTargetConfiguration","description":"An object that contains settings for a target-based scaling policy."},"threshold":{"type":"number","description":"Metric value used to trigger a scaling event."},"updateStatus":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicyUpdateStatus","description":"The current status of the fleet's scaling policies in a requested fleet location. The status PENDING_UPDATE indicates that an update was requested for the fleet but has not yet been completed for the location."}},"type":"object","required":["metricName","name"]},"aws-native:gamelift:FleetScalingPolicyComparisonOperator":{"description":"Comparison operator to use when measuring a metric against the threshold value.","type":"string","enum":[{"name":"GreaterThanOrEqualToThreshold","value":"GreaterThanOrEqualToThreshold"},{"name":"GreaterThanThreshold","value":"GreaterThanThreshold"},{"name":"LessThanThreshold","value":"LessThanThreshold"},{"name":"LessThanOrEqualToThreshold","value":"LessThanOrEqualToThreshold"}]},"aws-native:gamelift:FleetScalingPolicyMetricName":{"description":"Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment.","type":"string","enum":[{"name":"ActivatingGameSessions","value":"ActivatingGameSessions"},{"name":"ActiveGameSessions","value":"ActiveGameSessions"},{"name":"ActiveInstances","value":"ActiveInstances"},{"name":"AvailableGameSessions","value":"AvailableGameSessions"},{"name":"AvailablePlayerSessions","value":"AvailablePlayerSessions"},{"name":"CurrentPlayerSessions","value":"CurrentPlayerSessions"},{"name":"IdleInstances","value":"IdleInstances"},{"name":"PercentAvailableGameSessions","value":"PercentAvailableGameSessions"},{"name":"PercentIdleInstances","value":"PercentIdleInstances"},{"name":"QueueDepth","value":"QueueDepth"},{"name":"WaitTime","value":"WaitTime"},{"name":"ConcurrentActivatableGameSessions","value":"ConcurrentActivatableGameSessions"}]},"aws-native:gamelift:FleetScalingPolicyPolicyType":{"description":"The type of scaling policy to create. For a target-based policy, set the parameter MetricName to 'PercentAvailableGameSessions' and specify a TargetConfiguration. For a rule-based policy set the following parameters: MetricName, ComparisonOperator, Threshold, EvaluationPeriods, ScalingAdjustmentType, and ScalingAdjustment.","type":"string","enum":[{"name":"RuleBased","value":"RuleBased"},{"name":"TargetBased","value":"TargetBased"}]},"aws-native:gamelift:FleetScalingPolicyScalingAdjustmentType":{"description":"The type of adjustment to make to a fleet's instance count.","type":"string","enum":[{"name":"ChangeInCapacity","value":"ChangeInCapacity"},{"name":"ExactCapacity","value":"ExactCapacity"},{"name":"PercentChangeInCapacity","value":"PercentChangeInCapacity"}]},"aws-native:gamelift:FleetScalingPolicyStatus":{"description":"Current status of the scaling policy. The scaling policy can be in force only when in an ACTIVE status. Scaling policies can be suspended for individual fleets. If the policy is suspended for a fleet, the policy status does not change.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"UpdateRequested","value":"UPDATE_REQUESTED"},{"name":"Updating","value":"UPDATING"},{"name":"DeleteRequested","value":"DELETE_REQUESTED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"Error","value":"ERROR"}]},"aws-native:gamelift:FleetScalingPolicyUpdateStatus":{"description":"The current status of the fleet's scaling policies in a requested fleet location. The status PENDING_UPDATE indicates that an update was requested for the fleet but has not yet been completed for the location.","type":"string","enum":[{"name":"PendingUpdate","value":"PENDING_UPDATE"}]},"aws-native:gamelift:FleetServerProcess":{"description":"A set of instructions for launching server processes on each instance in a fleet. Each instruction set identifies the location of the server executable, optional launch parameters, and the number of server processes with this configuration to maintain concurrently on the instance. Server process configurations make up a fleet's RuntimeConfiguration.","properties":{"concurrentExecutions":{"type":"integer","description":"The number of server processes that use this configuration to run concurrently on an instance."},"launchPath":{"type":"string","description":"The location of the server executable in a custom game build or the name of the Realtime script file that contains the Init() function. Game builds and Realtime scripts are installed on instances at the root:\n\nWindows (for custom game builds only): C:\\game. Example: \"C:\\game\\MyGame\\server.exe\"\n\nLinux: /local/game. Examples: \"/local/game/MyGame/server.exe\" or \"/local/game/MyRealtimeScript.js\""},"parameters":{"type":"string","description":"An optional list of parameters to pass to the server executable or Realtime script on launch."}},"type":"object","required":["concurrentExecutions","launchPath"]},"aws-native:gamelift:FleetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:FleetTargetConfiguration":{"description":"Settings for a target-based scaling policy. A target-based policy tracks a particular fleet metric specifies a target value for the metric. As player usage changes, the policy triggers Amazon GameLift to adjust capacity so that the metric returns to the target value. The target configuration specifies settings as needed for the target based policy, including the target value.","properties":{"targetValue":{"type":"number","description":"Desired value to use with a target-based scaling policy. The value must be relevant for whatever metric the scaling policy is using. For example, in a policy using the metric PercentAvailableGameSessions, the target value should be the preferred size of the fleet's buffer (the percent of capacity that should be idle and ready for new game sessions)."}},"type":"object","required":["targetValue"]},"aws-native:gamelift:FleetType":{"description":"Indicates whether to use On-Demand instances or Spot instances for this fleet. If empty, the default is ON_DEMAND. Both categories of instances use identical hardware and configurations based on the instance type selected for this fleet.","type":"string","enum":[{"name":"OnDemand","value":"ON_DEMAND"},{"name":"Spot","value":"SPOT"}]},"aws-native:gamelift:GameServerGroupAutoScalingPolicy":{"description":"Configuration settings to define a scaling policy for the Auto Scaling group that is optimized for game hosting. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource.","properties":{"estimatedInstanceWarmup":{"type":"number","description":"Length of time, in seconds, it takes for a new instance to start new game server processes and register with Amazon GameLift Servers FleetIQ. Specifying a warm-up time can be useful, particularly with game servers that take a long time to start up, because it avoids prematurely starting new instances."},"targetTrackingConfiguration":{"$ref":"#/types/aws-native:gamelift:GameServerGroupTargetTrackingConfiguration","description":"Settings for a target-based scaling policy applied to Auto Scaling group. These settings are used to create a target-based policy that tracks the GameLift FleetIQ metric `PercentUtilizedGameServers` and specifies a target value for the metric. As player usage changes, the policy triggers to adjust the game server group capacity so that the metric returns to the target value."}},"type":"object","required":["targetTrackingConfiguration"]},"aws-native:gamelift:GameServerGroupBalancingStrategy":{"description":"The fallback balancing method to use for the game server group when Spot Instances in a Region become unavailable or are not viable for game hosting.","type":"string","enum":[{"name":"SpotOnly","value":"SPOT_ONLY"},{"name":"SpotPreferred","value":"SPOT_PREFERRED"},{"name":"OnDemandOnly","value":"ON_DEMAND_ONLY"}]},"aws-native:gamelift:GameServerGroupDeleteOption":{"description":"The type of delete to perform.","type":"string","enum":[{"name":"SafeDelete","value":"SAFE_DELETE"},{"name":"ForceDelete","value":"FORCE_DELETE"},{"name":"Retain","value":"RETAIN"}]},"aws-native:gamelift:GameServerGroupGameServerProtectionPolicy":{"description":"A flag that indicates whether instances in the game server group are protected from early termination.","type":"string","enum":[{"name":"NoProtection","value":"NO_PROTECTION"},{"name":"FullProtection","value":"FULL_PROTECTION"}]},"aws-native:gamelift:GameServerGroupInstanceDefinition":{"description":"An allowed instance type for your game server group.","properties":{"instanceType":{"type":"string"},"weightedCapacity":{"type":"string"}},"type":"object","required":["instanceType"]},"aws-native:gamelift:GameServerGroupLaunchTemplate":{"description":"The EC2 launch template that contains configuration settings and game server code to be deployed to all instances in the game server group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource.","properties":{"launchTemplateId":{"type":"string","description":"A unique identifier for an existing Amazon EC2 launch template."},"launchTemplateName":{"type":"string","description":"A readable identifier for an existing Amazon EC2 launch template."},"version":{"type":"string","description":"The version of the Amazon EC2 launch template to use. If no version is specified, the default version will be used. With Amazon EC2, you can specify a default version for a launch template. If none is set, the default is the first version created."}},"type":"object"},"aws-native:gamelift:GameServerGroupTag":{"properties":{"key":{"type":"string","description":"The key for a developer-defined key:value pair for tagging an AWS resource."},"value":{"type":"string","description":"The value for a developer-defined key:value pair for tagging an AWS resource."}},"type":"object"},"aws-native:gamelift:GameServerGroupTargetTrackingConfiguration":{"description":"Settings for a target-based scaling policy applied to Auto Scaling group.","properties":{"targetValue":{"type":"number","description":"Desired value to use with a game server group target-based scaling policy."}},"type":"object","required":["targetValue"]},"aws-native:gamelift:GameSessionQueueDestination":{"description":"A fleet or alias designated in a game session queue.","properties":{"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to fleet or fleet alias. ARNs, which include a fleet ID or alias ID and a Region name, provide a unique identifier across all Regions."}},"type":"object"},"aws-native:gamelift:GameSessionQueueFilterConfiguration":{"properties":{"allowedLocations":{"type":"array","items":{"type":"string"},"description":"A list of locations to allow game session placement in, in the form of AWS Region codes such as `us-west-2` ."}},"type":"object"},"aws-native:gamelift:GameSessionQueuePlayerLatencyPolicy":{"description":"Sets a latency cap for individual players when placing a game session.","properties":{"maximumIndividualPlayerLatencyMilliseconds":{"type":"integer","description":"The maximum latency value that is allowed for any player, in milliseconds. All policies must have a value set for this property."},"policyDurationSeconds":{"type":"integer","description":"The length of time, in seconds, that the policy is enforced while placing a new game session."}},"type":"object"},"aws-native:gamelift:GameSessionQueuePriorityConfiguration":{"properties":{"locationOrder":{"type":"array","items":{"type":"string"},"description":"The prioritization order to use for fleet locations, when the `PriorityOrder` property includes `LOCATION` . Locations can include AWS Region codes (such as `us-west-2` ), local zones, and custom locations (for Anywhere fleets). Each location must be listed only once. For details, see [Amazon GameLift Servers service locations.](https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html)"},"priorityOrder":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePriorityOrderItem"},"description":"A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once.\n\n- `LATENCY` -- Amazon GameLift Servers prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request.\n- `COST` -- Amazon GameLift Servers prioritizes queue destinations with the lowest current hosting costs. Cost is evaluated based on the destination's location, instance type, and fleet type (Spot or On-Demand).\n- `DESTINATION` -- Amazon GameLift Servers prioritizes based on the list order of destinations in the queue configuration.\n- `LOCATION` -- Amazon GameLift Servers prioritizes based on the provided order of locations, as defined in `LocationOrder` ."}},"type":"object"},"aws-native:gamelift:GameSessionQueuePriorityOrderItem":{"type":"string","enum":[{"name":"Latency","value":"LATENCY"},{"name":"Cost","value":"COST"},{"name":"Destination","value":"DESTINATION"},{"name":"Location","value":"LOCATION"}]},"aws-native:gamelift:GameSessionQueueTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:LocationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:MatchmakingConfigurationBackfillMode":{"description":"The method used to backfill game sessions created with this matchmaking configuration.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Manual","value":"MANUAL"}]},"aws-native:gamelift:MatchmakingConfigurationFlexMatchMode":{"description":"Indicates whether this matchmaking configuration is being used with Amazon GameLift hosting or as a standalone matchmaking solution.","type":"string","enum":[{"name":"Standalone","value":"STANDALONE"},{"name":"WithQueue","value":"WITH_QUEUE"}]},"aws-native:gamelift:MatchmakingConfigurationGameProperty":{"description":"A key-value pair that contains information about a game session.","properties":{"key":{"type":"string","description":"The game property identifier."},"value":{"type":"string","description":"The game property value."}},"type":"object","required":["key","value"]},"aws-native:gamelift:MatchmakingConfigurationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:MatchmakingRuleSetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gamelift:ScriptS3Location":{"properties":{"bucket":{"type":"string","description":"An Amazon S3 bucket identifier. This is the name of the S3 bucket."},"key":{"type":"string","description":"The name of the zip file that contains the script files."},"objectVersion":{"type":"string","description":"The version of the file, if object versioning is turned on for the bucket. Amazon GameLift uses this information when retrieving files from your S3 bucket. To retrieve a specific version of the file, provide an object version. To retrieve the latest version of the file, do not set this parameter."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for an IAM role that allows Amazon GameLift to access the S3 bucket."}},"type":"object","required":["bucket","key","roleArn"]},"aws-native:gamelift:ScriptTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length."}},"type":"object","required":["key","value"]},"aws-native:gameliftstreams:ApplicationRuntimeEnvironment":{"properties":{"type":{"type":"string","description":"The operating system and other drivers. For Proton, this also includes the Proton compatibility layer."},"version":{"type":"string","description":"Versioned container environment for the application operating system."}},"type":"object","required":["type","version"]},"aws-native:gameliftstreams:StreamGroupDefaultApplication":{"properties":{"arn":{"type":"string","description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the application resource. Example ARN: `arn:aws:gameliftstreams:us-west-2:111122223333:application/a-9ZY8X7Wv6` ."},"id":{"type":"string","description":"An ID that uniquely identifies the application resource. Example ID: `a-9ZY8X7Wv6` .","replaceOnChanges":true}},"type":"object"},"aws-native:gameliftstreams:StreamGroupLocationConfiguration":{"properties":{"alwaysOnCapacity":{"type":"integer","description":"This setting, if non-zero, indicates minimum streaming capacity which is allocated to you and is never released back to the service. You pay for this base level of capacity at all times, whether used or idle."},"locationName":{"type":"string","description":"A location's name. For example, `us-east-1` . For a complete list of locations that Amazon GameLift Streams supports, refer to [Regions, quotas, and limitations](https://docs.aws.amazon.com/gameliftstreams/latest/developerguide/regions-quotas.html) in the *Amazon GameLift Streams Developer Guide* ."},"maximumCapacity":{"type":"integer"},"onDemandCapacity":{"type":"integer","description":"This shape is deprecated."},"targetIdleCapacity":{"type":"integer"},"vpcTransitConfiguration":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupVpcTransitConfiguration"}},"type":"object","required":["locationName"]},"aws-native:gameliftstreams:StreamGroupVpcTransitConfiguration":{"properties":{"ipv4CidrBlocks":{"type":"array","items":{"type":"string"}},"vpcId":{"type":"string"}},"type":"object","required":["ipv4CidrBlocks","vpcId"]},"aws-native:globalaccelerator:AcceleratorIpAddressType":{"description":"IP Address type.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"DualStack","value":"DUAL_STACK"}]},"aws-native:globalaccelerator:AcceleratorTag":{"description":"Tag is a key-value pair associated with accelerator.","properties":{"key":{"type":"string","description":"Key of the tag. Value can be 1 to 127 characters."},"value":{"type":"string","description":"Value for the tag. Value can be 1 to 255 characters."}},"type":"object","required":["key","value"]},"aws-native:globalaccelerator:CrossAccountAttachmentResource":{"description":"ARN of resource to share.","properties":{"cidr":{"type":"string","description":"An IP address range, in CIDR format, that is specified as resource. The address must be provisioned and advertised in AWS Global Accelerator by following the bring your own IP address (BYOIP) process for Global Accelerator\n\nFor more information, see [Bring your own IP addresses (BYOIP)](https://docs.aws.amazon.com/global-accelerator/latest/dg/using-byoip.html) in the AWS Global Accelerator Developer Guide."},"endpointId":{"type":"string","description":"The endpoint ID for the endpoint that is specified as a AWS resource.\n\nAn endpoint ID for the cross-account feature is the ARN of an AWS resource, such as a Network Load Balancer, that Global Accelerator supports as an endpoint for an accelerator."},"region":{"type":"string","description":"The AWS Region where a shared endpoint resource is located."}},"type":"object"},"aws-native:globalaccelerator:CrossAccountAttachmentTag":{"description":"Tag is a key-value pair associated with Cross Account Attachment.","properties":{"key":{"type":"string","description":"Key of the tag. Value can be 1 to 127 characters."},"value":{"type":"string","description":"Value for the tag. Value can be 1 to 255 characters."}},"type":"object","required":["key","value"]},"aws-native:globalaccelerator:EndpointGroupEndpointConfiguration":{"description":"The configuration for a given endpoint","properties":{"attachmentArn":{"type":"string","description":"Attachment ARN that provides access control to the cross account endpoint. Not required for resources hosted in the same account as the endpoint group."},"clientIpPreservationEnabled":{"type":"boolean","description":"true if client ip should be preserved"},"endpointId":{"type":"string","description":"Id of the endpoint. For Network/Application Load Balancer this value is the ARN.  For EIP, this value is the allocation ID.  For EC2 instances, this is the EC2 instance ID"},"weight":{"type":"integer","description":"The weight for the endpoint."}},"type":"object","required":["endpointId"]},"aws-native:globalaccelerator:EndpointGroupHealthCheckProtocol":{"description":"The protocol that AWS Global Accelerator uses to check the health of endpoints in this endpoint group.","type":"string","enum":[{"name":"Tcp","value":"TCP"},{"name":"Http","value":"HTTP"},{"name":"Https","value":"HTTPS"}]},"aws-native:globalaccelerator:EndpointGroupPortOverride":{"description":"listener to endpoint port mapping.","properties":{"endpointPort":{"type":"integer","description":"The endpoint port that you want a listener port to be mapped to. This is the port on the endpoint, such as the Application Load Balancer or Amazon EC2 instance."},"listenerPort":{"type":"integer","description":"The listener port that you want to map to a specific endpoint port. This is the port that user traffic arrives to the Global Accelerator on."}},"type":"object","required":["endpointPort","listenerPort"]},"aws-native:globalaccelerator:ListenerClientAffinity":{"description":"Client affinity lets you direct all requests from a user to the same endpoint.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"SourceIp","value":"SOURCE_IP"}]},"aws-native:globalaccelerator:ListenerPortRange":{"description":"A port range to support for connections from  clients to your accelerator.","properties":{"fromPort":{"type":"integer","description":"The first port in the range of ports, inclusive."},"toPort":{"type":"integer","description":"The last port in the range of ports, inclusive."}},"type":"object","required":["fromPort","toPort"]},"aws-native:globalaccelerator:ListenerProtocol":{"description":"The protocol for the listener.","type":"string","enum":[{"name":"Tcp","value":"TCP"},{"name":"Udp","value":"UDP"}]},"aws-native:glue:CatalogAllowFullTableExternalDataAccess":{"description":"Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation.","type":"string","enum":[{"name":"True","value":"True"},{"name":"False","value":"False"}]},"aws-native:glue:CatalogDataLakeAccessProperties":{"description":"Data lake access properties for the catalog.","properties":{"allowFullTableExternalDataAccess":{"$ref":"#/types/aws-native:glue:CatalogDataLakeAccessPropertiesAllowFullTableExternalDataAccess","description":"Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation."},"catalogType":{"type":"string","description":"Specifies a federated catalog type for the native catalog resource."},"dataLakeAccess":{"type":"boolean","description":"Turns on or off data lake access for Apache Spark applications that access Amazon Redshift databases in the Data Catalog from any non-Redshift engine."},"dataTransferRole":{"type":"string","description":"A role that will be assumed by Glue for transferring data into/out of the staging bucket during a query."},"kmsKey":{"type":"string","description":"An encryption key that will be used for the staging bucket that will be created along with the catalog."},"managedWorkgroupName":{"type":"string","description":"The name of the managed workgroup associated with the catalog."},"managedWorkgroupStatus":{"type":"string","description":"The status of the managed workgroup."},"redshiftDatabaseName":{"type":"string","description":"The name of the Redshift database."}},"type":"object"},"aws-native:glue:CatalogDataLakeAccessPropertiesAllowFullTableExternalDataAccess":{"description":"Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation.","type":"string","enum":[{"name":"True","value":"True"},{"name":"False","value":"False"}]},"aws-native:glue:CatalogDataLakePrincipal":{"description":"The Lake Formation principal.","properties":{"dataLakePrincipalIdentifier":{"type":"string","description":"An identifier for the Lake Formation principal."}},"type":"object"},"aws-native:glue:CatalogFederatedCatalog":{"description":"A FederatedCatalog structure that references an entity outside the Glue Data Catalog.","properties":{"connectionName":{"type":"string","description":"The name of the connection to an external data source."},"identifier":{"type":"string","description":"A unique identifier for the federated catalog."}},"type":"object"},"aws-native:glue:CatalogOverwriteChildResourcePermissionsWithDefault":{"description":"Specifies whether to overwrite child resource permissions with the default permissions.","type":"string","enum":[{"name":"Accept","value":"Accept"},{"name":"Deny","value":"Deny"}]},"aws-native:glue:CatalogPrincipalPermissions":{"description":"Permissions granted to a principal.","properties":{"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissionsPermissionsItem"},"description":"The permissions that are granted to the principal."},"principal":{"$ref":"#/types/aws-native:glue:CatalogDataLakePrincipal"}},"type":"object"},"aws-native:glue:CatalogPrincipalPermissionsPermissionsItem":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Select","value":"SELECT"},{"name":"Alter","value":"ALTER"},{"name":"Drop","value":"DROP"},{"name":"Delete","value":"DELETE"},{"name":"Insert","value":"INSERT"},{"name":"CreateDatabase","value":"CREATE_DATABASE"},{"name":"CreateTable","value":"CREATE_TABLE"},{"name":"DataLocationAccess","value":"DATA_LOCATION_ACCESS"}]},"aws-native:glue:CatalogProperties":{"description":"A structure that specifies data lake access properties and other custom properties.","properties":{"customProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional key-value properties for the catalog."},"dataLakeAccessProperties":{"$ref":"#/types/aws-native:glue:CatalogDataLakeAccessProperties"}},"type":"object"},"aws-native:glue:CatalogTag":{"properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:glue:CatalogTargetRedshiftCatalog":{"description":"A structure that describes a target catalog for resource linking.","properties":{"catalogArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the catalog resource."}},"type":"object","required":["catalogArn"]},"aws-native:glue:CrawlerCatalogTarget":{"description":"Specifies an AWS Glue Data Catalog target.","properties":{"connectionName":{"type":"string","description":"The name of the connection for an Amazon S3-backed Data Catalog table to be a target of the crawl when using a Catalog connection type paired with a NETWORK Connection type."},"databaseName":{"type":"string","description":"The name of the database to be synchronized."},"dlqEventQueueArn":{"type":"string","description":"A valid Amazon dead-letter SQS ARN. For example, arn:aws:sqs:region:account:deadLetterQueue."},"eventQueueArn":{"type":"string","description":"A valid Amazon SQS ARN. For example, arn:aws:sqs:region:account:sqs."},"tables":{"type":"array","items":{"type":"string"},"description":"A list of the tables to be synchronized."}},"type":"object"},"aws-native:glue:CrawlerDeltaTarget":{"description":"Specifies a Delta data store to crawl one or more Delta tables.","properties":{"connectionName":{"type":"string","description":"The name of the connection to use to connect to the Delta table target."},"createNativeDeltaTable":{"type":"boolean","description":"Specifies whether the crawler will create native tables, to allow integration with query engines that support querying of the Delta transaction log directly."},"deltaTables":{"type":"array","items":{"type":"string"},"description":"A list of the Amazon S3 paths to the Delta tables."},"writeManifest":{"type":"boolean","description":"Specifies whether to write the manifest files to the Delta table path."}},"type":"object"},"aws-native:glue:CrawlerDynamoDbTarget":{"description":"Specifies an Amazon DynamoDB table to crawl.","properties":{"path":{"type":"string","description":"The name of the DynamoDB table to crawl."},"scanAll":{"type":"boolean","description":"Indicates whether to scan all the records, or to sample rows from the table. Scanning all the records can take a long time when the table is not a high throughput table. A value of true means to scan all records, while a value of false means to sample the records. If no value is specified, the value defaults to true."},"scanRate":{"type":"number","description":"The percentage of the configured read capacity units to use by the AWS Glue crawler. Read capacity units is a term defined by DynamoDB, and is a numeric value that acts as rate limiter for the number of reads that can be performed on that table per second.\n\nThe valid values are null or a value between 0.1 to 1.5. A null value is used when user does not provide a value, and defaults to 0.5 of the configured Read Capacity Unit (for provisioned tables), or 0.25 of the max configured Read Capacity Unit (for tables using on-demand mode)."}},"type":"object"},"aws-native:glue:CrawlerHudiTarget":{"description":"Specifies Apache Hudi data store targets.","properties":{"connectionName":{"type":"string","description":"The name of the connection to use to connect to the Hudi target."},"exclusions":{"type":"array","items":{"type":"string"},"description":"A list of global patterns used to exclude from the crawl."},"maximumTraversalDepth":{"type":"integer","description":"The maximum depth of Amazon S3 paths that the crawler can traverse to discover the Hudi metadata folder in your Amazon S3 path. Used to limit the crawler run time."},"paths":{"type":"array","items":{"type":"string"},"description":"One or more Amazon S3 paths that contains Hudi metadata folders as s3://bucket/prefix ."}},"type":"object"},"aws-native:glue:CrawlerIcebergTarget":{"description":"Specifies Apache Iceberg data store targets.","properties":{"connectionName":{"type":"string","description":"The name of the connection to use to connect to the Iceberg target."},"exclusions":{"type":"array","items":{"type":"string"},"description":"A list of global patterns used to exclude from the crawl."},"maximumTraversalDepth":{"type":"integer","description":"The maximum depth of Amazon S3 paths that the crawler can traverse to discover the Iceberg metadata folder in your Amazon S3 path. Used to limit the crawler run time."},"paths":{"type":"array","items":{"type":"string"},"description":"One or more Amazon S3 paths that contains Iceberg metadata folders as s3://bucket/prefix ."}},"type":"object"},"aws-native:glue:CrawlerJdbcTarget":{"description":"Specifies a JDBC data store to crawl.","properties":{"connectionName":{"type":"string","description":"The name of the connection to use to connect to the JDBC target."},"enableAdditionalMetadata":{"type":"array","items":{"type":"string"},"description":"Specify a value of RAWTYPES or COMMENTS to enable additional metadata in table responses. RAWTYPES provides the native-level datatype. COMMENTS provides comments associated with a column or table in the database.\n\nIf you do not need additional metadata, keep the field empty."},"exclusions":{"type":"array","items":{"type":"string"},"description":"A list of glob patterns used to exclude from the crawl. For more information, see Catalog Tables with a Crawler."},"path":{"type":"string","description":"The path of the JDBC target."}},"type":"object"},"aws-native:glue:CrawlerLakeFormationConfiguration":{"description":"Specifies AWS Lake Formation configuration settings for the crawler","properties":{"accountId":{"type":"string","description":"Required for cross account crawls. For same account crawls as the target data, this can be left as null."},"useLakeFormationCredentials":{"type":"boolean","description":"Specifies whether to use AWS Lake Formation credentials for the crawler instead of the IAM role credentials."}},"type":"object"},"aws-native:glue:CrawlerMongoDbTarget":{"description":"Specifies an Amazon DocumentDB or MongoDB data store to crawl.","properties":{"connectionName":{"type":"string","description":"The name of the connection to use to connect to the Amazon DocumentDB or MongoDB target."},"path":{"type":"string","description":"The path of the Amazon DocumentDB or MongoDB target (database/collection)."}},"type":"object"},"aws-native:glue:CrawlerRecrawlPolicy":{"description":"When crawling an Amazon S3 data source after the first crawl is complete, specifies whether to crawl the entire dataset again or to crawl only folders that were added since the last crawler run. For more information, see Incremental Crawls in AWS Glue in the developer guide.","properties":{"recrawlBehavior":{"type":"string","description":"Specifies whether to crawl the entire dataset again or to crawl only folders that were added since the last crawler run. A value of CRAWL_EVERYTHING specifies crawling the entire dataset again. A value of CRAWL_NEW_FOLDERS_ONLY specifies crawling only folders that were added since the last crawler run. A value of CRAWL_EVENT_MODE specifies crawling only the changes identified by Amazon S3 events."}},"type":"object"},"aws-native:glue:CrawlerS3Target":{"description":"Specifies a data store in Amazon Simple Storage Service (Amazon S3).","properties":{"connectionName":{"type":"string","description":"The name of a connection which allows a job or crawler to access data in Amazon S3 within an Amazon Virtual Private Cloud environment (Amazon VPC)."},"dlqEventQueueArn":{"type":"string","description":"A valid Amazon dead-letter SQS ARN. For example, arn:aws:sqs:region:account:deadLetterQueue."},"eventQueueArn":{"type":"string","description":"A valid Amazon SQS ARN. For example, arn:aws:sqs:region:account:sqs."},"exclusions":{"type":"array","items":{"type":"string"},"description":"A list of glob patterns used to exclude from the crawl."},"path":{"type":"string","description":"The path to the Amazon S3 target."},"sampleSize":{"type":"integer","description":"Sets the number of files in each leaf folder to be crawled when crawling sample files in a dataset. If not set, all the files are crawled. A valid value is an integer between 1 and 249."}},"type":"object"},"aws-native:glue:CrawlerSchedule":{"description":"A scheduling object using a cron statement to schedule an event.","properties":{"scheduleExpression":{"type":"string","description":"A cron expression used to specify the schedule. For more information, see Time-Based Schedules for Jobs and Crawlers. For example, to run something every day at 12:15 UTC, specify cron(15 12 * * ? *)."}},"type":"object"},"aws-native:glue:CrawlerSchemaChangePolicy":{"description":"The policy that specifies update and delete behaviors for the crawler. The policy tells the crawler what to do in the event that it detects a change in a table that already exists in the customer's database at the time of the crawl. The SchemaChangePolicy does not affect whether or how new tables and partitions are added. New tables and partitions are always created regardless of the SchemaChangePolicy on a crawler. The SchemaChangePolicy consists of two components, UpdateBehavior and DeleteBehavior.","properties":{"deleteBehavior":{"type":"string","description":"The deletion behavior when the crawler finds a deleted object. A value of LOG specifies that if a table or partition is found to no longer exist, do not delete it, only log that it was found to no longer exist. A value of DELETE_FROM_DATABASE specifies that if a table or partition is found to have been removed, delete it from the database. A value of DEPRECATE_IN_DATABASE specifies that if a table has been found to no longer exist, to add a property to the table that says 'DEPRECATED' and includes a timestamp with the time of deprecation."},"updateBehavior":{"type":"string","description":"The update behavior when the crawler finds a changed schema. A value of LOG specifies that if a table or a partition already exists, and a change is detected, do not update it, only log that a change was detected. Add new tables and new partitions (including on existing tables). A value of UPDATE_IN_DATABASE specifies that if a table or partition already exists, and a change is detected, update it. Add new tables and partitions."}},"type":"object"},"aws-native:glue:CrawlerTargets":{"description":"Specifies data stores to crawl.","properties":{"catalogTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerCatalogTarget"},"description":"Specifies AWS Glue Data Catalog targets."},"deltaTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerDeltaTarget"},"description":"Specifies an array of Delta data store targets."},"dynamoDbTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerDynamoDbTarget"},"description":"Specifies Amazon DynamoDB targets."},"hudiTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerHudiTarget"},"description":"Specifies Apache Hudi data store targets."},"icebergTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerIcebergTarget"},"description":"Specifies Apache Iceberg data store targets."},"jdbcTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerJdbcTarget"},"description":"Specifies JDBC targets."},"mongoDbTargets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerMongoDbTarget"},"description":"A list of Mongo DB targets."},"s3Targets":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CrawlerS3Target"},"description":"Specifies Amazon Simple Storage Service (Amazon S3) targets."}},"type":"object"},"aws-native:glue:DatabaseDataLakePrincipal":{"description":"The AWS Lake Formation principal.","properties":{"dataLakePrincipalIdentifier":{"type":"string","description":"An identifier for the AWS Lake Formation principal."}},"type":"object"},"aws-native:glue:DatabaseFederatedDatabase":{"description":"A FederatedDatabase structure that references an entity outside the AWS Glue Data Catalog.","properties":{"connectionName":{"type":"string","description":"The name of the connection to the external metastore."},"identifier":{"type":"string","description":"A unique identifier for the federated database."}},"type":"object"},"aws-native:glue:DatabaseIdentifier":{"description":"A structure that describes a target database for resource linking.","properties":{"catalogId":{"type":"string","description":"The ID of the Data Catalog in which the database resides."},"databaseName":{"type":"string","description":"The name of the catalog database."},"region":{"type":"string","description":"Region of the target database."}},"type":"object"},"aws-native:glue:DatabaseInput":{"description":"The structure used to create or update a database.","properties":{"createTableDefaultPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:DatabasePrincipalPrivileges"},"description":"Creates a set of default permissions on the table for principals. Used by AWS Lake Formation. Not used in the normal course of AWS Glue operations."},"description":{"type":"string","description":"A description of the database."},"federatedDatabase":{"$ref":"#/types/aws-native:glue:DatabaseFederatedDatabase","description":"A FederatedDatabase structure that references an entity outside the AWS Glue Data Catalog."},"locationUri":{"type":"string","description":"The location of the database (for example, an HDFS path)."},"name":{"type":"string","description":"The name of the database. For hive compatibility, this is folded to lowercase when it is stored."},"parameters":{"$ref":"pulumi.json#/Any","description":"These key-value pairs define parameters and properties of the database."},"targetDatabase":{"$ref":"#/types/aws-native:glue:DatabaseIdentifier","description":"A DatabaseIdentifier structure that describes a target database for resource linking."}},"type":"object"},"aws-native:glue:DatabasePrincipalPrivileges":{"description":"The permissions granted to a principal.","properties":{"permissions":{"type":"array","items":{"type":"string"},"description":"The permissions that are granted to the principal."},"principal":{"$ref":"#/types/aws-native:glue:DatabaseDataLakePrincipal","description":"The principal who is granted permissions."}},"type":"object"},"aws-native:glue:IntegrationConfig":{"description":"The configuration settings for the integration.","properties":{"continuousSync":{"type":"boolean","description":"Enables continuous synchronization for on-demand data extractions."},"refreshInterval":{"type":"string","description":"Specifies the frequency at which CDC (Change Data Capture) pulls or incremental loads should occur.","replaceOnChanges":true},"sourceProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"A collection of key-value pairs that specify additional properties for the integration source. These properties provide configuration options that can be used to customize the behavior of the ODB source during data integration operations."}},"type":"object"},"aws-native:glue:IntegrationResourcePropertyTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:glue:IntegrationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:glue:JobCommand":{"properties":{"name":{"type":"string","description":"The name of the job command"},"pythonVersion":{"type":"string","description":"The Python version being used to execute a Python shell job."},"runtime":{"type":"string","description":"Runtime is used to specify the versions of Ray, Python and additional libraries available in your environment"},"scriptLocation":{"type":"string","description":"Specifies the Amazon Simple Storage Service (Amazon S3) path to a script that executes a job"}},"type":"object"},"aws-native:glue:JobConnectionsList":{"properties":{"connections":{"type":"array","items":{"type":"string"},"description":"A list of connections used by the job."}},"type":"object"},"aws-native:glue:JobExecutionProperty":{"properties":{"maxConcurrentRuns":{"type":"number","description":"The maximum number of concurrent runs allowed for the job."}},"type":"object"},"aws-native:glue:JobNotificationProperty":{"properties":{"notifyDelayAfter":{"type":"integer","description":"It is the number of minutes to wait before sending a job run delay notification after a job run starts"}},"type":"object"},"aws-native:glue:JobWorkerType":{"description":"TThe type of predefined worker that is allocated when a job runs.","type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"G1x","value":"G.1X"},{"name":"G2x","value":"G.2X"},{"name":"G025x","value":"G.025X"},{"name":"G4x","value":"G.4X"},{"name":"G8x","value":"G.8X"},{"name":"Z2x","value":"Z.2X"},{"name":"G12x","value":"G.12X"},{"name":"G16x","value":"G.16X"},{"name":"R1x","value":"R.1X"},{"name":"R2x","value":"R.2X"},{"name":"R4x","value":"R.4X"},{"name":"R8x","value":"R.8X"}]},"aws-native:glue:RegistryTag":{"properties":{"key":{"type":"string","description":"A key to identify the tag."},"value":{"type":"string","description":"Corresponding tag value for the key."}},"type":"object","required":["key","value"]},"aws-native:glue:SchemaCompatibility":{"description":"Compatibility setting for the schema.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Disabled","value":"DISABLED"},{"name":"Backward","value":"BACKWARD"},{"name":"BackwardAll","value":"BACKWARD_ALL"},{"name":"Forward","value":"FORWARD"},{"name":"ForwardAll","value":"FORWARD_ALL"},{"name":"Full","value":"FULL"},{"name":"FullAll","value":"FULL_ALL"}]},"aws-native:glue:SchemaDataFormat":{"description":"Data format name to use for the schema. Accepted values: 'AVRO', 'JSON', 'PROTOBUF'","type":"string","enum":[{"name":"Avro","value":"AVRO"},{"name":"Json","value":"JSON"},{"name":"Protobuf","value":"PROTOBUF"}]},"aws-native:glue:SchemaRegistry":{"description":"Identifier for the registry which the schema is part of.","properties":{"arn":{"type":"string","description":"Amazon Resource Name for the Registry."},"name":{"type":"string","description":"Name of the registry in which the schema will be created."}},"type":"object"},"aws-native:glue:SchemaTag":{"properties":{"key":{"type":"string","description":"A key to identify the tag."},"value":{"type":"string","description":"Corresponding tag value for the key."}},"type":"object","required":["key","value"]},"aws-native:glue:SchemaVersion":{"description":"Specify checkpoint version for update. This is only required to update the Compatibility.","properties":{"isLatest":{"type":"boolean","description":"Indicates if the latest version needs to be updated."},"versionNumber":{"type":"integer","description":"Indicates the version number in the schema to update."}},"type":"object"},"aws-native:glue:SchemaVersionSchema":{"description":"Identifier for the schema where the schema version will be created.","properties":{"registryName":{"type":"string","description":"Name of the registry to identify where the Schema is located."},"schemaArn":{"type":"string","description":"Amazon Resource Name for the Schema. This attribute can be used to uniquely represent the Schema."},"schemaName":{"type":"string","description":"Name of the schema. This parameter requires RegistryName to be provided."}},"type":"object"},"aws-native:glue:SourceProcessingPropertiesProperties":{"description":"The resource properties associated with the integration source.","properties":{"roleArn":{"type":"string","description":"The IAM role to access the Glue connection."}},"type":"object","required":["roleArn"]},"aws-native:glue:TargetProcessingPropertiesProperties":{"description":"The resource properties associated with the integration target.","properties":{"connectionName":{"type":"string","description":"The Glue network connection to configure the Glue job running in the customer VPC."},"eventBusArn":{"type":"string","description":"The ARN of an Eventbridge event bus to receive the integration status notification."},"kmsArn":{"type":"string","description":"The ARN of the KMS key used for encryption."},"roleArn":{"type":"string","description":"The IAM role to access the Glue database."}},"type":"object","required":["roleArn"]},"aws-native:glue:TriggerAction":{"description":"The actions initiated by this trigger.","properties":{"arguments":{"$ref":"pulumi.json#/Any","description":"The job arguments used when this trigger fires. For this job run, they replace the default arguments set in the job definition itself."},"crawlerName":{"type":"string","description":"The name of the crawler to be used with this action."},"jobName":{"type":"string","description":"The name of a job to be executed."},"notificationProperty":{"$ref":"#/types/aws-native:glue:TriggerNotificationProperty","description":"Specifies configuration properties of a job run notification."},"securityConfiguration":{"type":"string","description":"The name of the SecurityConfiguration structure to be used with this action."},"timeout":{"type":"integer","description":"The JobRun timeout in minutes. This is the maximum time that a job run can consume resources before it is terminated and enters TIMEOUT status. The default is 2,880 minutes (48 hours). This overrides the timeout value set in the parent job."}},"type":"object"},"aws-native:glue:TriggerCondition":{"description":"Defines a condition under which a trigger fires.","properties":{"crawlState":{"type":"string","description":"The state of the crawler to which this condition applies."},"crawlerName":{"type":"string","description":"The name of the crawler to which this condition applies."},"jobName":{"type":"string","description":"The name of the job whose JobRuns this condition applies to, and on which this trigger waits."},"logicalOperator":{"type":"string","description":"A logical operator."},"state":{"type":"string","description":"The condition state. Currently, the values supported are SUCCEEDED, STOPPED, TIMEOUT, and FAILED."}},"type":"object"},"aws-native:glue:TriggerEventBatchingCondition":{"description":"Batch condition that must be met (specified number of events received or batch time window expired) before EventBridge event trigger fires.","properties":{"batchSize":{"type":"integer","description":"Number of events that must be received from Amazon EventBridge before EventBridge event trigger fires."},"batchWindow":{"type":"integer","description":"Window of time in seconds after which EventBridge event trigger fires. Window starts when first event is received."}},"type":"object","required":["batchSize"]},"aws-native:glue:TriggerNotificationProperty":{"description":"Specifies configuration properties of a job run notification.","properties":{"notifyDelayAfter":{"type":"integer","description":"After a job run starts, the number of minutes to wait before sending a job run delay notification"}},"type":"object"},"aws-native:glue:TriggerPredicate":{"description":"The predicate of this trigger, which defines when it will fire.","properties":{"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:TriggerCondition"},"description":"A list of the conditions that determine when the trigger will fire."},"logical":{"type":"string","description":"An optional field if only one condition is listed. If multiple conditions are listed, then this field is required."}},"type":"object"},"aws-native:glue:UsageProfileConfigurationObject":{"properties":{"allowedValues":{"type":"array","items":{"type":"string"}},"defaultValue":{"type":"string"},"maxValue":{"type":"string"},"minValue":{"type":"string"}},"type":"object"},"aws-native:glue:UsageProfileProfileConfiguration":{"properties":{"jobConfiguration":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:glue:UsageProfileConfigurationObject"}},"sessionConfiguration":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:glue:UsageProfileConfigurationObject"}}},"type":"object"},"aws-native:glue:UsageProfileTag":{"properties":{"key":{"type":"string","description":"A key to identify the tag."},"value":{"type":"string","description":"Corresponding tag value for the key."}},"type":"object","required":["key","value"]},"aws-native:grafana:WorkspaceAccountAccessType":{"description":"These enums represent valid account access types. Specifically these enums determine whether the workspace can access AWS resources in the AWS account only, or whether it can also access resources in other accounts in the same organization. If the value CURRENT_ACCOUNT is used, a workspace role ARN must be provided. If the value is ORGANIZATION, a list of organizational units must be provided.","type":"string","enum":[{"name":"CurrentAccount","value":"CURRENT_ACCOUNT"},{"name":"Organization","value":"ORGANIZATION"}]},"aws-native:grafana:WorkspaceAssertionAttributes":{"description":"Maps Grafana friendly names to the IdPs SAML attributes.","properties":{"email":{"type":"string","description":"Name of the attribute within the SAML assert to use as the users email in Grafana."},"groups":{"type":"string","description":"Name of the attribute within the SAML assert to use as the users groups in Grafana."},"login":{"type":"string","description":"Name of the attribute within the SAML assert to use as the users login handle in Grafana."},"name":{"type":"string","description":"Name of the attribute within the SAML assert to use as the users name in Grafana."},"org":{"type":"string","description":"Name of the attribute within the SAML assert to use as the users organizations in Grafana."},"role":{"type":"string","description":"Name of the attribute within the SAML assert to use as the users roles in Grafana."}},"type":"object"},"aws-native:grafana:WorkspaceAuthenticationProviderTypes":{"description":"Valid workspace authentication providers.","type":"string","enum":[{"name":"AwsSso","value":"AWS_SSO"},{"name":"Saml","value":"SAML"}]},"aws-native:grafana:WorkspaceDataSourceType":{"description":"These enums represent valid AWS data sources that can be queried via the Grafana workspace. These data sources are primarily used to help customers visualize which data sources have been added to a service managed workspace IAM role.","type":"string","enum":[{"name":"AmazonOpensearchService","value":"AMAZON_OPENSEARCH_SERVICE"},{"name":"Cloudwatch","value":"CLOUDWATCH"},{"name":"Prometheus","value":"PROMETHEUS"},{"name":"Xray","value":"XRAY"},{"name":"Timestream","value":"TIMESTREAM"},{"name":"Sitewise","value":"SITEWISE"},{"name":"Athena","value":"ATHENA"},{"name":"Redshift","value":"REDSHIFT"}]},"aws-native:grafana:WorkspaceIdpMetadata":{"description":"IdP Metadata used to configure SAML authentication in Grafana.","properties":{"url":{"type":"string","description":"URL that vends the IdPs metadata."},"xml":{"type":"string","description":"XML blob of the IdPs metadata."}},"type":"object"},"aws-native:grafana:WorkspaceNetworkAccessControl":{"description":"The configuration settings for Network Access Control.","properties":{"prefixListIds":{"type":"array","items":{"type":"string"},"description":"The list of prefix list IDs. A prefix list is a list of CIDR ranges of IP addresses. The IP addresses specified are allowed to access your workspace. If the list is not included in the configuration then no IP addresses will be allowed to access the workspace."},"vpceIds":{"type":"array","items":{"type":"string"},"description":"The list of Amazon VPC endpoint IDs for the workspace. If a NetworkAccessConfiguration is specified then only VPC endpoints specified here will be allowed to access the workspace."}},"type":"object"},"aws-native:grafana:WorkspaceNotificationDestinationType":{"description":"These enums represent valid AWS notification destinations that the Grafana workspace has permission to use. These notification destinations are primarily used to help customers visualize which destinations have been added to a service managed IAM role.","type":"string","enum":[{"name":"Sns","value":"SNS"}]},"aws-native:grafana:WorkspacePermissionType":{"description":"These enums represent valid permission types to use when creating or configuring a Grafana workspace. The SERVICE_MANAGED permission type means the Managed Grafana service will create a workspace IAM role on your behalf. The CUSTOMER_MANAGED permission type means that the customer is expected to provide an IAM role that the Grafana workspace can use to query data sources.","type":"string","enum":[{"name":"CustomerManaged","value":"CUSTOMER_MANAGED"},{"name":"ServiceManaged","value":"SERVICE_MANAGED"}]},"aws-native:grafana:WorkspaceRoleValues":{"description":"Maps SAML roles to the Grafana Editor and Admin roles.","properties":{"admin":{"type":"array","items":{"type":"string"},"description":"List of SAML roles which will be mapped into the Grafana Admin role."},"editor":{"type":"array","items":{"type":"string"},"description":"List of SAML roles which will be mapped into the Grafana Editor role."}},"type":"object"},"aws-native:grafana:WorkspaceSamlConfiguration":{"description":"SAML configuration data associated with an AMG workspace.","properties":{"allowedOrganizations":{"type":"array","items":{"type":"string"},"description":"List of SAML organizations allowed to access Grafana."},"assertionAttributes":{"$ref":"#/types/aws-native:grafana:WorkspaceAssertionAttributes","description":"A structure that defines which attributes in the SAML assertion are to be used to define information about the users authenticated by that IdP to use the workspace."},"idpMetadata":{"$ref":"#/types/aws-native:grafana:WorkspaceIdpMetadata","description":"A structure containing the identity provider (IdP) metadata used to integrate the identity provider with this workspace."},"loginValidityDuration":{"type":"number","description":"The maximum lifetime an authenticated user can be logged in (in minutes) before being required to re-authenticate."},"roleValues":{"$ref":"#/types/aws-native:grafana:WorkspaceRoleValues","description":"A structure containing arrays that map group names in the SAML assertion to the Grafana `Admin` and `Editor` roles in the workspace."}},"type":"object","required":["idpMetadata"]},"aws-native:grafana:WorkspaceSamlConfigurationStatus":{"description":"Valid SAML configuration statuses.","type":"string","enum":[{"name":"Configured","value":"CONFIGURED"},{"name":"NotConfigured","value":"NOT_CONFIGURED"}]},"aws-native:grafana:WorkspaceStatus":{"description":"These enums represent the status of a workspace.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Creating","value":"CREATING"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"Upgrading","value":"UPGRADING"},{"name":"VersionUpdating","value":"VERSION_UPDATING"},{"name":"DeletionFailed","value":"DELETION_FAILED"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"UpgradeFailed","value":"UPGRADE_FAILED"},{"name":"LicenseRemovalFailed","value":"LICENSE_REMOVAL_FAILED"},{"name":"VersionUpdateFailed","value":"VERSION_UPDATE_FAILED"}]},"aws-native:grafana:WorkspaceVpcConfiguration":{"description":"The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The list of Amazon EC2 security group IDs attached to the Amazon VPC for your Grafana workspace to connect."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of Amazon EC2 subnet IDs created in the Amazon VPC for your Grafana workspace to connect."}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:greengrassv2:ComponentVersionComponentDependencyRequirement":{"properties":{"dependencyType":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionComponentDependencyRequirementDependencyType"},"versionRequirement":{"type":"string"}},"type":"object"},"aws-native:greengrassv2:ComponentVersionComponentDependencyRequirementDependencyType":{"type":"string","enum":[{"name":"Soft","value":"SOFT"},{"name":"Hard","value":"HARD"}]},"aws-native:greengrassv2:ComponentVersionComponentPlatform":{"properties":{"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"A dictionary of attributes for the platform. The AWS IoT Greengrass Core software defines the `os` and `platform` by default. You can specify additional platform attributes for a core device when you deploy the AWS IoT Greengrass nucleus component. For more information, see the [AWS IoT Greengrass nucleus component](https://docs.aws.amazon.com/greengrass/v2/developerguide/greengrass-nucleus-component.html) in the *AWS IoT Greengrass V2 Developer Guide* ."},"name":{"type":"string","description":"The friendly name of the platform. This name helps you identify the platform.\n\nIf you omit this parameter, AWS IoT Greengrass creates a friendly name from the `os` and `architecture` of the platform."}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaContainerParams":{"properties":{"devices":{"type":"array","items":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaDeviceMount"},"description":"The list of system devices that the container can access."},"memorySizeInKb":{"type":"integer","description":"The memory size of the container, expressed in kilobytes.\n\nDefault: `16384` (16 MB)"},"mountRoSysfs":{"type":"boolean","description":"Whether or not the container can read information from the device's `/sys` folder.\n\nDefault: `false`"},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaVolumeMount"},"description":"The list of volumes that the container can access."}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaDeviceMount":{"properties":{"addGroupOwner":{"type":"boolean","description":"Whether or not to add the component's system user as an owner of the device.\n\nDefault: `false`"},"path":{"type":"string","description":"The mount path for the device in the file system."},"permission":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaFilesystemPermission","description":"The permission to access the device: read/only ( `ro` ) or read/write ( `rw` ).\n\nDefault: `ro`"}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaEventSource":{"properties":{"topic":{"type":"string","description":"The topic to which to subscribe to receive event messages."},"type":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaEventSourceType","description":"The type of event source. Choose from the following options:\n\n- `PUB_SUB` – Subscribe to local publish/subscribe messages. This event source type doesn't support MQTT wildcards ( `+` and `#` ) in the event source topic.\n- `IOT_CORE` – Subscribe to AWS IoT Core MQTT messages. This event source type supports MQTT wildcards ( `+` and `#` ) in the event source topic."}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaEventSourceType":{"description":"The type of event source. Choose from the following options:\n\n- `PUB_SUB` – Subscribe to local publish/subscribe messages. This event source type doesn't support MQTT wildcards ( `+` and `#` ) in the event source topic.\n- `IOT_CORE` – Subscribe to AWS IoT Core MQTT messages. This event source type supports MQTT wildcards ( `+` and `#` ) in the event source topic.","type":"string","enum":[{"name":"PubSub","value":"PUB_SUB"},{"name":"IotCore","value":"IOT_CORE"}]},"aws-native:greengrassv2:ComponentVersionLambdaExecutionParameters":{"properties":{"environmentVariables":{"type":"object","additionalProperties":{"type":"string"},"description":"The map of environment variables that are available to the Lambda function when it runs."},"eventSources":{"type":"array","items":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaEventSource"},"description":"The list of event sources to which to subscribe to receive work messages. The Lambda function runs when it receives a message from an event source. You can subscribe this function to local publish/subscribe messages and AWS IoT Core MQTT messages."},"execArgs":{"type":"array","items":{"type":"string"},"description":"The list of arguments to pass to the Lambda function when it runs."},"inputPayloadEncodingType":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaExecutionParametersInputPayloadEncodingType","description":"The encoding type that the Lambda function supports.\n\nDefault: `json`"},"linuxProcessParams":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaLinuxProcessParams","description":"The parameters for the Linux process that contains the Lambda function."},"maxIdleTimeInSeconds":{"type":"integer","description":"The maximum amount of time in seconds that a non-pinned Lambda function can idle before the AWS IoT Greengrass Core software stops its process."},"maxInstancesCount":{"type":"integer","description":"The maximum number of instances that a non-pinned Lambda function can run at the same time."},"maxQueueSize":{"type":"integer","description":"The maximum size of the message queue for the Lambda function component. The AWS IoT Greengrass core device stores messages in a FIFO (first-in-first-out) queue until it can run the Lambda function to consume each message."},"pinned":{"type":"boolean","description":"Whether or not the Lambda function is pinned, or long-lived.\n\n- A pinned Lambda function starts when the AWS IoT Greengrass Core starts and keeps running in its own container.\n- A non-pinned Lambda function starts only when it receives a work item and exists after it idles for `maxIdleTimeInSeconds` . If the function has multiple work items, the AWS IoT Greengrass Core software creates multiple instances of the function.\n\nDefault: `true`"},"statusTimeoutInSeconds":{"type":"integer","description":"The interval in seconds at which a pinned (also known as long-lived) Lambda function component sends status updates to the Lambda manager component."},"timeoutInSeconds":{"type":"integer","description":"The maximum amount of time in seconds that the Lambda function can process a work item."}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaExecutionParametersInputPayloadEncodingType":{"description":"The encoding type that the Lambda function supports.\n\nDefault: `json`","type":"string","enum":[{"name":"Json","value":"json"},{"name":"Binary","value":"binary"}]},"aws-native:greengrassv2:ComponentVersionLambdaFilesystemPermission":{"type":"string","enum":[{"name":"Ro","value":"ro"},{"name":"Rw","value":"rw"}]},"aws-native:greengrassv2:ComponentVersionLambdaFunctionRecipeSource":{"properties":{"componentDependencies":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionComponentDependencyRequirement"},"description":"The component versions on which this Lambda function component depends."},"componentLambdaParameters":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaExecutionParameters","description":"The system and runtime parameters for the Lambda function as it runs on the AWS IoT Greengrass core device."},"componentName":{"type":"string","description":"The name of the component.\n\nDefaults to the name of the Lambda function."},"componentPlatforms":{"type":"array","items":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionComponentPlatform"},"description":"The platforms that the component version supports."},"componentVersion":{"type":"string","description":"The version of the component.\n\nDefaults to the version of the Lambda function as a semantic version. For example, if your function version is `3` , the component version becomes `3.0.0` ."},"lambdaArn":{"type":"string","description":"The ARN of the Lambda function. The ARN must include the version of the function to import. You can't use version aliases like `$LATEST` ."}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaLinuxProcessParams":{"properties":{"containerParams":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaContainerParams","description":"The parameters for the container in which the Lambda function runs."},"isolationMode":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaLinuxProcessParamsIsolationMode","description":"The isolation mode for the process that contains the Lambda function. The process can run in an isolated runtime environment inside the AWS IoT Greengrass container, or as a regular process outside any container.\n\nDefault: `GreengrassContainer`"}},"type":"object"},"aws-native:greengrassv2:ComponentVersionLambdaLinuxProcessParamsIsolationMode":{"description":"The isolation mode for the process that contains the Lambda function. The process can run in an isolated runtime environment inside the AWS IoT Greengrass container, or as a regular process outside any container.\n\nDefault: `GreengrassContainer`","type":"string","enum":[{"name":"GreengrassContainer","value":"GreengrassContainer"},{"name":"NoContainer","value":"NoContainer"}]},"aws-native:greengrassv2:ComponentVersionLambdaVolumeMount":{"properties":{"addGroupOwner":{"type":"boolean","description":"Whether or not to add the AWS IoT Greengrass user group as an owner of the volume.\n\nDefault: `false`"},"destinationPath":{"type":"string","description":"The path to the logical volume in the file system."},"permission":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaFilesystemPermission","description":"The permission to access the volume: read/only ( `ro` ) or read/write ( `rw` ).\n\nDefault: `ro`"},"sourcePath":{"type":"string","description":"The path to the physical volume in the file system."}},"type":"object"},"aws-native:greengrassv2:DeploymentComponentConfigurationUpdate":{"properties":{"merge":{"type":"string"},"reset":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:greengrassv2:DeploymentComponentDeploymentSpecification":{"properties":{"componentVersion":{"type":"string"},"configurationUpdate":{"$ref":"#/types/aws-native:greengrassv2:DeploymentComponentConfigurationUpdate"},"runWith":{"$ref":"#/types/aws-native:greengrassv2:DeploymentComponentRunWith"}},"type":"object"},"aws-native:greengrassv2:DeploymentComponentRunWith":{"properties":{"posixUser":{"type":"string"},"systemResourceLimits":{"$ref":"#/types/aws-native:greengrassv2:DeploymentSystemResourceLimits"},"windowsUser":{"type":"string"}},"type":"object"},"aws-native:greengrassv2:DeploymentComponentUpdatePolicy":{"properties":{"action":{"$ref":"#/types/aws-native:greengrassv2:DeploymentComponentUpdatePolicyAction","description":"Whether or not to notify components and wait for components to become safe to update. Choose from the following options:\n\n- `NOTIFY_COMPONENTS` – The deployment notifies each component before it stops and updates that component. Components can use the [SubscribeToComponentUpdates](https://docs.aws.amazon.com/greengrass/v2/developerguide/interprocess-communication.html#ipc-operation-subscribetocomponentupdates) IPC operation to receive these notifications. Then, components can respond with the [DeferComponentUpdate](https://docs.aws.amazon.com/greengrass/v2/developerguide/interprocess-communication.html#ipc-operation-defercomponentupdate) IPC operation. For more information, see the [Create deployments](https://docs.aws.amazon.com/greengrass/v2/developerguide/create-deployments.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n- `SKIP_NOTIFY_COMPONENTS` – The deployment doesn't notify components or wait for them to be safe to update.\n\nDefault: `NOTIFY_COMPONENTS`"},"timeoutInSeconds":{"type":"integer","description":"The amount of time in seconds that each component on a device has to report that it's safe to update. If the component waits for longer than this timeout, then the deployment proceeds on the device.\n\nDefault: `60`"}},"type":"object"},"aws-native:greengrassv2:DeploymentComponentUpdatePolicyAction":{"description":"Whether or not to notify components and wait for components to become safe to update. Choose from the following options:\n\n- `NOTIFY_COMPONENTS` – The deployment notifies each component before it stops and updates that component. Components can use the [SubscribeToComponentUpdates](https://docs.aws.amazon.com/greengrass/v2/developerguide/interprocess-communication.html#ipc-operation-subscribetocomponentupdates) IPC operation to receive these notifications. Then, components can respond with the [DeferComponentUpdate](https://docs.aws.amazon.com/greengrass/v2/developerguide/interprocess-communication.html#ipc-operation-defercomponentupdate) IPC operation. For more information, see the [Create deployments](https://docs.aws.amazon.com/greengrass/v2/developerguide/create-deployments.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n- `SKIP_NOTIFY_COMPONENTS` – The deployment doesn't notify components or wait for them to be safe to update.\n\nDefault: `NOTIFY_COMPONENTS`","type":"string","enum":[{"name":"NotifyComponents","value":"NOTIFY_COMPONENTS"},{"name":"SkipNotifyComponents","value":"SKIP_NOTIFY_COMPONENTS"}]},"aws-native:greengrassv2:DeploymentConfigurationValidationPolicy":{"properties":{"timeoutInSeconds":{"type":"integer","description":"The amount of time in seconds that a component can validate its configuration updates. If the validation time exceeds this timeout, then the deployment proceeds for the device.\n\nDefault: `30`"}},"type":"object"},"aws-native:greengrassv2:DeploymentIoTJobAbortConfig":{"properties":{"criteriaList":{"type":"array","items":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobAbortCriteria"},"description":"The list of criteria that define when and how to cancel the configuration deployment."}},"type":"object","required":["criteriaList"]},"aws-native:greengrassv2:DeploymentIoTJobAbortCriteria":{"properties":{"action":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobAbortCriteriaAction","description":"The action to perform when the criteria are met."},"failureType":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobAbortCriteriaFailureType","description":"The type of job deployment failure that can cancel a job."},"minNumberOfExecutedThings":{"type":"integer","description":"The minimum number of things that receive the configuration before the job can cancel."},"thresholdPercentage":{"type":"number","description":"The minimum percentage of `failureType` failures that occur before the job can cancel.\n\nThis parameter supports up to two digits after the decimal (for example, you can specify `10.9` or `10.99` , but not `10.999` )."}},"type":"object","required":["action","failureType","minNumberOfExecutedThings","thresholdPercentage"]},"aws-native:greengrassv2:DeploymentIoTJobAbortCriteriaAction":{"description":"The action to perform when the criteria are met.","type":"string","enum":[{"name":"Cancel","value":"CANCEL"}]},"aws-native:greengrassv2:DeploymentIoTJobAbortCriteriaFailureType":{"description":"The type of job deployment failure that can cancel a job.","type":"string","enum":[{"name":"Failed","value":"FAILED"},{"name":"Rejected","value":"REJECTED"},{"name":"TimedOut","value":"TIMED_OUT"},{"name":"All","value":"ALL"}]},"aws-native:greengrassv2:DeploymentIoTJobConfiguration":{"properties":{"abortConfig":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobAbortConfig","description":"The stop configuration for the job. This configuration defines when and how to stop a job rollout."},"jobExecutionsRolloutConfig":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobExecutionsRolloutConfig","description":"The rollout configuration for the job. This configuration defines the rate at which the job rolls out to the fleet of target devices."},"timeoutConfig":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobTimeoutConfig","description":"The timeout configuration for the job. This configuration defines the amount of time each device has to complete the job."}},"type":"object"},"aws-native:greengrassv2:DeploymentIoTJobExecutionsRolloutConfig":{"properties":{"exponentialRate":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobExponentialRolloutRate","description":"The exponential rate to increase the job rollout rate."},"maximumPerMinute":{"type":"integer","description":"The maximum number of devices that receive a pending job notification, per minute."}},"type":"object"},"aws-native:greengrassv2:DeploymentIoTJobExponentialRolloutRate":{"properties":{"baseRatePerMinute":{"type":"integer","description":"The minimum number of devices that receive a pending job notification, per minute, when the job starts. This parameter defines the initial rollout rate of the job."},"incrementFactor":{"type":"number","description":"The exponential factor to increase the rollout rate for the job.\n\nThis parameter supports up to one digit after the decimal (for example, you can specify `1.5` , but not `1.55` )."},"rateIncreaseCriteria":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobRateIncreaseCriteria","description":"The criteria to increase the rollout rate for the job."}},"type":"object","required":["baseRatePerMinute","incrementFactor","rateIncreaseCriteria"]},"aws-native:greengrassv2:DeploymentIoTJobRateIncreaseCriteria":{"type":"object"},"aws-native:greengrassv2:DeploymentIoTJobTimeoutConfig":{"properties":{"inProgressTimeoutInMinutes":{"type":"integer","description":"The amount of time, in minutes, that devices have to complete the job. The timer starts when the job status is set to `IN_PROGRESS` . If the job status doesn't change to a terminal state before the time expires, then the job status is set to `TIMED_OUT` .\n\nThe timeout interval must be between 1 minute and 7 days (10080 minutes)."}},"type":"object"},"aws-native:greengrassv2:DeploymentPolicies":{"properties":{"componentUpdatePolicy":{"$ref":"#/types/aws-native:greengrassv2:DeploymentComponentUpdatePolicy","description":"The component update policy for the configuration deployment. This policy defines when it's safe to deploy the configuration to devices."},"configurationValidationPolicy":{"$ref":"#/types/aws-native:greengrassv2:DeploymentConfigurationValidationPolicy","description":"The configuration validation policy for the configuration deployment. This policy defines how long each component has to validate its configure updates."},"failureHandlingPolicy":{"$ref":"#/types/aws-native:greengrassv2:DeploymentPoliciesFailureHandlingPolicy","description":"The failure handling policy for the configuration deployment. This policy defines what to do if the deployment fails.\n\nDefault: `ROLLBACK`"}},"type":"object"},"aws-native:greengrassv2:DeploymentPoliciesFailureHandlingPolicy":{"description":"The failure handling policy for the configuration deployment. This policy defines what to do if the deployment fails.\n\nDefault: `ROLLBACK`","type":"string","enum":[{"name":"Rollback","value":"ROLLBACK"},{"name":"DoNothing","value":"DO_NOTHING"}]},"aws-native:greengrassv2:DeploymentSystemResourceLimits":{"properties":{"cpus":{"type":"number"},"memory":{"type":"integer"}},"type":"object"},"aws-native:groundstation:ConfigAntennaDownlinkConfig":{"properties":{"spectrumConfig":{"$ref":"#/types/aws-native:groundstation:ConfigSpectrumConfig","description":"Defines the spectrum configuration."}},"type":"object"},"aws-native:groundstation:ConfigAntennaDownlinkDemodDecodeConfig":{"properties":{"decodeConfig":{"$ref":"#/types/aws-native:groundstation:ConfigDecodeConfig","description":"Defines how the RF signal will be decoded."},"demodulationConfig":{"$ref":"#/types/aws-native:groundstation:ConfigDemodulationConfig","description":"Defines how the RF signal will be demodulated."},"spectrumConfig":{"$ref":"#/types/aws-native:groundstation:ConfigSpectrumConfig","description":"Defines the spectrum configuration."}},"type":"object"},"aws-native:groundstation:ConfigAntennaUplinkConfig":{"properties":{"spectrumConfig":{"$ref":"#/types/aws-native:groundstation:ConfigUplinkSpectrumConfig","description":"Defines the spectrum configuration."},"targetEirp":{"$ref":"#/types/aws-native:groundstation:ConfigEirp","description":"The equivalent isotropically radiated power (EIRP) to use for uplink transmissions. Valid values are between 20.0 to 50.0 dBW."},"transmitDisabled":{"type":"boolean","description":"Whether or not uplink transmit is disabled."}},"type":"object"},"aws-native:groundstation:ConfigBandwidthUnits":{"type":"string","enum":[{"name":"GHz","value":"GHz"},{"name":"MHz","value":"MHz"},{"name":"KHz","value":"kHz"}]},"aws-native:groundstation:ConfigData":{"properties":{"antennaDownlinkConfig":{"$ref":"#/types/aws-native:groundstation:ConfigAntennaDownlinkConfig","description":"Provides information for an antenna downlink config object. Antenna downlink config objects are used to provide parameters for downlinks where no demodulation or decoding is performed by Ground Station (RF over IP downlinks)."},"antennaDownlinkDemodDecodeConfig":{"$ref":"#/types/aws-native:groundstation:ConfigAntennaDownlinkDemodDecodeConfig","description":"Provides information for a downlink demod decode config object. Downlink demod decode config objects are used to provide parameters for downlinks where the Ground Station service will demodulate and decode the downlinked data."},"antennaUplinkConfig":{"$ref":"#/types/aws-native:groundstation:ConfigAntennaUplinkConfig","description":"Provides information for an uplink config object. Uplink config objects are used to provide parameters for uplink contacts."},"dataflowEndpointConfig":{"$ref":"#/types/aws-native:groundstation:ConfigDataflowEndpointConfig","description":"Provides information for a dataflow endpoint config object. Dataflow endpoint config objects are used to provide parameters about which IP endpoint(s) to use during a contact. Dataflow endpoints are where Ground Station sends data during a downlink contact and where Ground Station receives data to send to the satellite during an uplink contact."},"s3RecordingConfig":{"$ref":"#/types/aws-native:groundstation:ConfigS3RecordingConfig","description":"Provides information for an S3 recording config object. S3 recording config objects are used to provide parameters for S3 recording during downlink contacts."},"telemetrySinkConfig":{"$ref":"#/types/aws-native:groundstation:ConfigTelemetrySinkConfig"},"trackingConfig":{"$ref":"#/types/aws-native:groundstation:ConfigTrackingConfig","description":"Provides information for a tracking config object. Tracking config objects are used to provide parameters about how to track the satellite through the sky during a contact."},"uplinkEchoConfig":{"$ref":"#/types/aws-native:groundstation:ConfigUplinkEchoConfig","description":"Provides information for an uplink echo config object. Uplink echo config objects are used to provide parameters for uplink echo during uplink contacts."}},"type":"object"},"aws-native:groundstation:ConfigDataflowEndpointConfig":{"properties":{"dataflowEndpointName":{"type":"string","description":"The name of the dataflow endpoint to use during contacts."},"dataflowEndpointRegion":{"type":"string","description":"The region of the dataflow endpoint to use during contacts. When omitted, Ground Station will use the region of the contact."}},"type":"object"},"aws-native:groundstation:ConfigDecodeConfig":{"properties":{"unvalidatedJson":{"type":"string","description":"The decoding settings are in JSON format and define a set of steps to perform to decode the data."}},"type":"object"},"aws-native:groundstation:ConfigDemodulationConfig":{"properties":{"unvalidatedJson":{"type":"string","description":"The demodulation settings are in JSON format and define parameters for demodulation, for example which modulation scheme (e.g. PSK, QPSK, etc.) and matched filter to use."}},"type":"object"},"aws-native:groundstation:ConfigEirp":{"properties":{"units":{"$ref":"#/types/aws-native:groundstation:ConfigEirpUnits","description":"The units of the EIRP."},"value":{"type":"number","description":"The value of the EIRP. Valid values are between 20.0 to 50.0 dBW."}},"type":"object"},"aws-native:groundstation:ConfigEirpUnits":{"type":"string","enum":[{"name":"Dbw","value":"dBW"}]},"aws-native:groundstation:ConfigFrequency":{"properties":{"units":{"$ref":"#/types/aws-native:groundstation:ConfigFrequencyUnits","description":"The units of the frequency."},"value":{"type":"number","description":"The value of the frequency. Valid values are between 2200 to 2300 MHz and 7750 to 8400 MHz for downlink and 2025 to 2120 MHz for uplink."}},"type":"object"},"aws-native:groundstation:ConfigFrequencyBandwidth":{"properties":{"units":{"$ref":"#/types/aws-native:groundstation:ConfigBandwidthUnits","description":"The units of the bandwidth."},"value":{"type":"number","description":"The value of the bandwidth. AWS Ground Station currently has the following bandwidth limitations: \n\n- For `AntennaDownlinkDemodDecodeconfig` , valid values are between 125 kHz to 650 MHz.\n- For `AntennaDownlinkconfig` , valid values are between 10 kHz to 54 MHz.\n- For `AntennaUplinkConfig` , valid values are between 10 kHz to 54 MHz."}},"type":"object"},"aws-native:groundstation:ConfigFrequencyUnits":{"type":"string","enum":[{"name":"GHz","value":"GHz"},{"name":"MHz","value":"MHz"},{"name":"KHz","value":"kHz"}]},"aws-native:groundstation:ConfigKinesisDataStreamData":{"properties":{"kinesisDataStreamArn":{"type":"string"},"kinesisRoleArn":{"type":"string"}},"type":"object","required":["kinesisDataStreamArn","kinesisRoleArn"]},"aws-native:groundstation:ConfigPolarization":{"type":"string","enum":[{"name":"LeftHand","value":"LEFT_HAND"},{"name":"RightHand","value":"RIGHT_HAND"},{"name":"None","value":"NONE"}]},"aws-native:groundstation:ConfigS3RecordingConfig":{"properties":{"bucketArn":{"type":"string","description":"S3 Bucket where the data is written. The name of the S3 Bucket provided must begin with `aws-groundstation` ."},"prefix":{"type":"string","description":"The prefix of the S3 data object. If you choose to use any optional keys for substitution, these values will be replaced with the corresponding information from your contact details. For example, a prefix of `{satellite_id}/{year}/{month}/{day}/` will replaced with `fake_satellite_id/2021/01/10/`\n\n*Optional keys for substitution* : `{satellite_id}` | `{config-name}` | `{config-id}` | `{year}` | `{month}` | `{day}`"},"roleArn":{"type":"string","description":"Defines the ARN of the role assumed for putting archives to S3."}},"type":"object"},"aws-native:groundstation:ConfigSpectrumConfig":{"properties":{"bandwidth":{"$ref":"#/types/aws-native:groundstation:ConfigFrequencyBandwidth","description":"The bandwidth of the spectrum. AWS Ground Station currently has the following bandwidth limitations: \n\n- For `AntennaDownlinkDemodDecodeconfig` , valid values are between 125 kHz to 650 MHz.\n- For `AntennaDownlinkconfig` , valid values are between 10 kHz to 54 MHz.\n- For `AntennaUplinkConfig` , valid values are between 10 kHz to 54 MHz."},"centerFrequency":{"$ref":"#/types/aws-native:groundstation:ConfigFrequency","description":"The center frequency of the spectrum. Valid values are between 2200 to 2300 MHz and 7750 to 8400 MHz for downlink and 2025 to 2120 MHz for uplink."},"polarization":{"$ref":"#/types/aws-native:groundstation:ConfigPolarization","description":"The polarization of the spectrum. Valid values are `\"RIGHT_HAND\"` and `\"LEFT_HAND\"` . Capturing both `\"RIGHT_HAND\"` and `\"LEFT_HAND\"` polarization requires two separate configs."}},"type":"object"},"aws-native:groundstation:ConfigTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object"},"aws-native:groundstation:ConfigTelemetrySinkConfig":{"properties":{"telemetrySinkData":{"$ref":"#/types/aws-native:groundstation:ConfigTelemetrySinkData"},"telemetrySinkType":{"$ref":"#/types/aws-native:groundstation:ConfigTelemetrySinkType"}},"type":"object","required":["telemetrySinkData","telemetrySinkType"]},"aws-native:groundstation:ConfigTelemetrySinkData":{"properties":{"kinesisDataStreamData":{"$ref":"#/types/aws-native:groundstation:ConfigKinesisDataStreamData"}},"type":"object"},"aws-native:groundstation:ConfigTelemetrySinkType":{"type":"string","enum":[{"name":"KinesisDataStream","value":"KINESIS_DATA_STREAM"}]},"aws-native:groundstation:ConfigTrackingConfig":{"properties":{"autotrack":{"$ref":"#/types/aws-native:groundstation:ConfigTrackingConfigAutotrack","description":"Specifies whether or not to use autotrack. `REMOVED` specifies that program track should only be used during the contact. `PREFERRED` specifies that autotracking is preferred during the contact but fallback to program track if the signal is lost. `REQUIRED` specifies that autotracking is required during the contact and not to use program track if the signal is lost."}},"type":"object"},"aws-native:groundstation:ConfigTrackingConfigAutotrack":{"description":"Specifies whether or not to use autotrack. `REMOVED` specifies that program track should only be used during the contact. `PREFERRED` specifies that autotracking is preferred during the contact but fallback to program track if the signal is lost. `REQUIRED` specifies that autotracking is required during the contact and not to use program track if the signal is lost.","type":"string","enum":[{"name":"Required","value":"REQUIRED"},{"name":"Preferred","value":"PREFERRED"},{"name":"Removed","value":"REMOVED"}]},"aws-native:groundstation:ConfigUplinkEchoConfig":{"properties":{"antennaUplinkConfigArn":{"type":"string","description":"Defines the ARN of the uplink config to echo back to a dataflow endpoint."},"enabled":{"type":"boolean","description":"Whether or not uplink echo is enabled."}},"type":"object"},"aws-native:groundstation:ConfigUplinkSpectrumConfig":{"properties":{"centerFrequency":{"$ref":"#/types/aws-native:groundstation:ConfigFrequency","description":"The center frequency of the spectrum. Valid values are between 2200 to 2300 MHz and 7750 to 8400 MHz for downlink and 2025 to 2120 MHz for uplink."},"polarization":{"$ref":"#/types/aws-native:groundstation:ConfigPolarization","description":"The polarization of the spectrum. Valid values are `\"RIGHT_HAND\"` and `\"LEFT_HAND\"` ."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupAgentStatus":{"description":"The status of AgentEndpoint.","type":"string","enum":[{"name":"Success","value":"SUCCESS"},{"name":"Failed","value":"FAILED"},{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:groundstation:DataflowEndpointGroupAuditResults":{"description":"The results of the audit.","type":"string","enum":[{"name":"Healthy","value":"HEALTHY"},{"name":"Unhealthy","value":"UNHEALTHY"}]},"aws-native:groundstation:DataflowEndpointGroupAwsGroundStationAgentEndpoint":{"description":"Information about AwsGroundStationAgentEndpoint.","properties":{"agentStatus":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupAgentStatus","description":"The status of AgentEndpoint."},"auditResults":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupAuditResults","description":"The results of the audit."},"egressAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupConnectionDetails","description":"The egress address of AgentEndpoint."},"ingressAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupRangedConnectionDetails","description":"The ingress address of AgentEndpoint."},"name":{"type":"string","description":"Name string associated with AgentEndpoint. Used as a human-readable identifier for AgentEndpoint."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupConnectionDetails":{"description":"Egress address of AgentEndpoint with an optional mtu.","properties":{"mtu":{"type":"integer","description":"Maximum transmission unit (MTU) size in bytes of a dataflow endpoint."},"socketAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupSocketAddress","description":"A socket address."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupDataflowEndpoint":{"properties":{"address":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupSocketAddress","description":"The address and port of an endpoint."},"mtu":{"type":"integer","description":"Maximum transmission unit (MTU) size in bytes of a dataflow endpoint. Valid values are between 1400 and 1500. A default value of 1500 is used if not set."},"name":{"type":"string","description":"The endpoint name.\n\nWhen listing available contacts for a satellite, Ground Station searches for a dataflow endpoint whose name matches the value specified by the dataflow endpoint config of the selected mission profile. If no matching dataflow endpoints are found then Ground Station will not display any available contacts for the satellite."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupEndpointDetails":{"properties":{"awsGroundStationAgentEndpoint":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupAwsGroundStationAgentEndpoint","description":"An agent endpoint."},"endpoint":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupDataflowEndpoint","description":"Information about the endpoint such as name and the endpoint address."},"securityDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupSecurityDetails","description":"The role ARN, and IDs for security groups and subnets."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupIntegerRange":{"description":"An integer range that has a minimum and maximum value.","properties":{"maximum":{"type":"integer","description":"A maximum value."},"minimum":{"type":"integer","description":"A minimum value."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupRangedConnectionDetails":{"description":"Ingress address of AgentEndpoint with a port range and an optional mtu.","properties":{"mtu":{"type":"integer","description":"Maximum transmission unit (MTU) size in bytes of a dataflow endpoint."},"socketAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupRangedSocketAddress","description":"A ranged socket address."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupRangedSocketAddress":{"description":"A socket address with a port range.","properties":{"name":{"type":"string","description":"IPv4 socket address."},"portRange":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupIntegerRange","description":"Port range of a socket address."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupSecurityDetails":{"properties":{"roleArn":{"type":"string","description":"The ARN of a role which Ground Station has permission to assume, such as `arn:aws:iam::1234567890:role/DataDeliveryServiceRole` .\n\nGround Station will assume this role and create an ENI in your VPC on the specified subnet upon creation of a dataflow endpoint group. This ENI is used as the ingress/egress point for data streamed during a satellite contact."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security group Ids of the security role, such as `sg-1234567890abcdef0` ."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnet Ids of the security details, such as `subnet-12345678` ."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupSocketAddress":{"properties":{"name":{"type":"string","description":"The name of the endpoint, such as `Endpoint 1` ."},"port":{"type":"integer","description":"The port of the endpoint, such as `55888` ."}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:groundstation:DataflowEndpointGroupV2AgentStatus":{"description":"The status of AgentEndpoint.","type":"string","enum":[{"name":"Success","value":"SUCCESS"},{"name":"Failed","value":"FAILED"},{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:groundstation:DataflowEndpointGroupV2AuditResults":{"description":"The results of the audit.","type":"string","enum":[{"name":"Healthy","value":"HEALTHY"},{"name":"Unhealthy","value":"UNHEALTHY"}]},"aws-native:groundstation:DataflowEndpointGroupV2ConnectionDetails":{"description":"Socket address of an uplink or downlink agent endpoint with an optional mtu.","properties":{"mtu":{"type":"integer","description":"Maximum transmission unit (MTU) size in bytes of a dataflow endpoint."},"socketAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2SocketAddress","description":"A socket address."}},"type":"object","required":["socketAddress"]},"aws-native:groundstation:DataflowEndpointGroupV2CreateEndpointDetails":{"properties":{"downlinkAwsGroundStationAgentEndpoint":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2DownlinkAwsGroundStationAgentEndpoint","description":"Definition for a downlink agent endpoint"},"uplinkAwsGroundStationAgentEndpoint":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2UplinkAwsGroundStationAgentEndpoint","description":"Definition for an uplink agent endpoint"}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupV2DownlinkAwsGroundStationAgentEndpoint":{"description":"Information about DownlinkAwsGroundStationAgentEndpoint used for create","properties":{"dataflowDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2DownlinkDataflowDetails","description":"Dataflow details for the downlink endpoint"},"name":{"type":"string","description":"Downlink dataflow endpoint name"}},"type":"object","required":["dataflowDetails","name"]},"aws-native:groundstation:DataflowEndpointGroupV2DownlinkAwsGroundStationAgentEndpointDetails":{"description":"Information about DownlinkAwsGroundStationAgentEndpoint","properties":{"agentStatus":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2AgentStatus","description":"Status of the agent associated with the downlink dataflow endpoint"},"auditResults":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2AuditResults","description":"Health audit results for the downlink dataflow endpoint"},"dataflowDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2DownlinkDataflowDetails","description":"Dataflow details for the downlink endpoint"},"name":{"type":"string","description":"Downlink dataflow endpoint name"}},"type":"object","required":["dataflowDetails","name"]},"aws-native:groundstation:DataflowEndpointGroupV2DownlinkConnectionDetails":{"description":"Connection details for downlink, from ground station to agent, and customer to agent","properties":{"agentIpAndPortAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2RangedConnectionDetails","description":"Agent IP and port address for the downlink connection."},"egressAddressAndPort":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2ConnectionDetails","description":"Egress address and port for the downlink connection."}},"type":"object","required":["agentIpAndPortAddress","egressAddressAndPort"]},"aws-native:groundstation:DataflowEndpointGroupV2DownlinkDataflowDetails":{"description":"Dataflow details for downlink","properties":{"agentConnectionDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2DownlinkConnectionDetails","description":"Downlink connection details for customer to Agent and Agent to Ground Station"}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupV2EndpointDetails":{"properties":{"downlinkAwsGroundStationAgentEndpoint":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2DownlinkAwsGroundStationAgentEndpointDetails","description":"Definition for a downlink agent endpoint"},"uplinkAwsGroundStationAgentEndpoint":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2UplinkAwsGroundStationAgentEndpointDetails","description":"Definition for an uplink agent endpoint"}},"type":"object"},"aws-native:groundstation:DataflowEndpointGroupV2IntegerRange":{"description":"An integer range that has a minimum and maximum value.","properties":{"maximum":{"type":"integer","description":"A maximum value."},"minimum":{"type":"integer","description":"A minimum value."}},"type":"object","required":["maximum","minimum"]},"aws-native:groundstation:DataflowEndpointGroupV2RangedConnectionDetails":{"description":"Socket address of an uplink or downlink agent endpoint with a port range and an optional mtu.","properties":{"mtu":{"type":"integer","description":"Maximum transmission unit (MTU) size in bytes of a dataflow endpoint."},"socketAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2RangedSocketAddress","description":"A ranged socket address."}},"type":"object","required":["socketAddress"]},"aws-native:groundstation:DataflowEndpointGroupV2RangedSocketAddress":{"description":"A socket address with a port range.","properties":{"name":{"type":"string","description":"IPv4 socket address."},"portRange":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2IntegerRange","description":"Port range of a socket address."}},"type":"object","required":["name","portRange"]},"aws-native:groundstation:DataflowEndpointGroupV2SocketAddress":{"properties":{"name":{"type":"string","description":"IPv4 socket address."},"port":{"type":"integer","description":"Port of a socket address."}},"type":"object","required":["name","port"]},"aws-native:groundstation:DataflowEndpointGroupV2Tag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:groundstation:DataflowEndpointGroupV2UplinkAwsGroundStationAgentEndpoint":{"description":"Information about UplinkAwsGroundStationAgentEndpoint used for create","properties":{"dataflowDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2UplinkDataflowDetails","description":"Dataflow details for the uplink endpoint"},"name":{"type":"string","description":"Uplink dataflow endpoint name"}},"type":"object","required":["dataflowDetails","name"]},"aws-native:groundstation:DataflowEndpointGroupV2UplinkAwsGroundStationAgentEndpointDetails":{"description":"Information about UplinkAwsGroundStationAgentEndpoint","properties":{"agentStatus":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2AgentStatus","description":"Status of the agent associated with the uplink dataflow endpoint"},"auditResults":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2AuditResults","description":"Health audit results for the uplink dataflow endpoint"},"dataflowDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2UplinkDataflowDetails","description":"Dataflow details for the uplink endpoint"},"name":{"type":"string","description":"Uplink dataflow endpoint name"}},"type":"object","required":["dataflowDetails","name"]},"aws-native:groundstation:DataflowEndpointGroupV2UplinkConnectionDetails":{"description":"Connection details for uplink, from ground station to agent, and customer to agent","properties":{"agentIpAndPortAddress":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2RangedConnectionDetails","description":"Agent IP and port address for the uplink connection."},"ingressAddressAndPort":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2ConnectionDetails","description":"Ingress address and port for the uplink connection."}},"type":"object","required":["agentIpAndPortAddress","ingressAddressAndPort"]},"aws-native:groundstation:DataflowEndpointGroupV2UplinkDataflowDetails":{"description":"Dataflow details for uplink","properties":{"agentConnectionDetails":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2UplinkConnectionDetails","description":"Uplink connection details for customer to Agent and Agent to Ground Station"}},"type":"object"},"aws-native:groundstation:MissionProfileDataflowEdge":{"properties":{"destination":{"type":"string","description":"The ARN of the destination for this dataflow edge. For example, specify the ARN of a dataflow endpoint config for a downlink edge or an antenna uplink config for an uplink edge."},"source":{"type":"string","description":"The ARN of the source for this dataflow edge. For example, specify the ARN of an antenna downlink config for a downlink edge or a dataflow endpoint config for an uplink edge."}},"type":"object"},"aws-native:groundstation:MissionProfileStreamsKmsKey":{"properties":{"kmsAliasArn":{"type":"string","description":"KMS Alias Arn."},"kmsAliasName":{"type":"string","description":"KMS Alias Name."},"kmsKeyArn":{"type":"string","description":"KMS Key Arn."}},"type":"object"},"aws-native:groundstation:MissionProfileTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:guardduty:DetectorCfnDataSourceConfigurations":{"properties":{"kubernetes":{"$ref":"#/types/aws-native:guardduty:DetectorCfnKubernetesConfiguration","description":"Describes which Kubernetes data sources are enabled for a detector."},"malwareProtection":{"$ref":"#/types/aws-native:guardduty:DetectorCfnMalwareProtectionConfiguration","description":"Describes whether Malware Protection will be enabled as a data source."},"s3Logs":{"$ref":"#/types/aws-native:guardduty:DetectorCfns3LogsConfiguration","description":"Describes whether S3 data event logs are enabled as a data source."}},"type":"object"},"aws-native:guardduty:DetectorCfnFeatureAdditionalConfiguration":{"properties":{"name":{"type":"string","description":"Name of the additional configuration."},"status":{"type":"string","description":"Status of the additional configuration."}},"type":"object"},"aws-native:guardduty:DetectorCfnFeatureConfiguration":{"properties":{"additionalConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:guardduty:DetectorCfnFeatureAdditionalConfiguration"},"description":"Information about the additional configuration of a feature in your account."},"name":{"type":"string","description":"Name of the feature. For a list of allowed values, see [DetectorFeatureConfiguration](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DetectorFeatureConfiguration.html#guardduty-Type-DetectorFeatureConfiguration-name) in the *GuardDuty API Reference* ."},"status":{"$ref":"#/types/aws-native:guardduty:DetectorCfnFeatureConfigurationStatus","description":"Status of the feature configuration."}},"type":"object","required":["name","status"]},"aws-native:guardduty:DetectorCfnFeatureConfigurationStatus":{"description":"Status of the feature configuration.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:guardduty:DetectorCfnKubernetesAuditLogsConfiguration":{"properties":{"enable":{"type":"boolean","description":"Describes whether Kubernetes audit logs are enabled as a data source for the detector."}},"type":"object","required":["enable"]},"aws-native:guardduty:DetectorCfnKubernetesConfiguration":{"properties":{"auditLogs":{"$ref":"#/types/aws-native:guardduty:DetectorCfnKubernetesAuditLogsConfiguration","description":"Describes whether Kubernetes audit logs are enabled as a data source for the detector."}},"type":"object","required":["auditLogs"]},"aws-native:guardduty:DetectorCfnMalwareProtectionConfiguration":{"properties":{"scanEc2InstanceWithFindings":{"$ref":"#/types/aws-native:guardduty:DetectorCfnScanEc2InstanceWithFindingsConfiguration","description":"Describes the configuration of Malware Protection for EC2 instances with findings."}},"type":"object"},"aws-native:guardduty:DetectorCfnScanEc2InstanceWithFindingsConfiguration":{"properties":{"ebsVolumes":{"type":"boolean","description":"Describes the configuration for scanning EBS volumes as data source."}},"type":"object"},"aws-native:guardduty:DetectorCfns3LogsConfiguration":{"properties":{"enable":{"type":"boolean","description":"The status of S3 data event logs as a data source."}},"type":"object","required":["enable"]},"aws-native:guardduty:DetectorTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:guardduty:FilterCondition":{"properties":{"eq":{"type":"array","items":{"type":"string"}},"equals":{"type":"array","items":{"type":"string"}},"greaterThan":{"type":"integer"},"greaterThanOrEqual":{"type":"integer"},"gt":{"type":"integer"},"gte":{"type":"integer"},"lessThan":{"type":"integer"},"lessThanOrEqual":{"type":"integer"},"lt":{"type":"integer"},"lte":{"type":"integer"},"neq":{"type":"array","items":{"type":"string"}},"notEquals":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:guardduty:FilterFindingCriteria":{"properties":{"criterion":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:guardduty:FilterCondition"},"description":"Represents a map of finding properties that match specified conditions and values when querying findings.\n\nFor information about JSON criterion mapping to their console equivalent, see [Finding criteria](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria) . The following are the available criterion:\n\n- accountId\n- id\n- region\n- severity\n\nTo filter on the basis of severity, the API and AWS CLI use the following input list for the `FindingCriteria` condition:\n\n- *Low* : `[\"1\", \"2\", \"3\"]`\n- *Medium* : `[\"4\", \"5\", \"6\"]`\n- *High* : `[\"7\", \"8\", \"9\"]`\n\nFor more information, see [Severity levels for GuardDuty findings](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings.html#guardduty_findings-severity) in the *Amazon GuardDuty User Guide* .\n- type\n- updatedAt\n\nType: ISO 8601 string format: `YYYY-MM-DDTHH:MM:SS.SSSZ` or `YYYY-MM-DDTHH:MM:SSZ` depending on whether the value contains milliseconds.\n- resource.accessKeyDetails.accessKeyId\n- resource.accessKeyDetails.principalId\n- resource.accessKeyDetails.userName\n- resource.accessKeyDetails.userType\n- resource.instanceDetails.iamInstanceProfile.id\n- resource.instanceDetails.imageId\n- resource.instanceDetails.instanceId\n- resource.instanceDetails.tags.key\n- resource.instanceDetails.tags.value\n- resource.instanceDetails.networkInterfaces.ipv6Addresses\n- resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress\n- resource.instanceDetails.networkInterfaces.publicDnsName\n- resource.instanceDetails.networkInterfaces.publicIp\n- resource.instanceDetails.networkInterfaces.securityGroups.groupId\n- resource.instanceDetails.networkInterfaces.securityGroups.groupName\n- resource.instanceDetails.networkInterfaces.subnetId\n- resource.instanceDetails.networkInterfaces.vpcId\n- resource.instanceDetails.outpostArn\n- resource.resourceType\n- resource.s3BucketDetails.publicAccess.effectivePermissions\n- resource.s3BucketDetails.name\n- resource.s3BucketDetails.tags.key\n- resource.s3BucketDetails.tags.value\n- resource.s3BucketDetails.type\n- service.action.actionType\n- service.action.awsApiCallAction.api\n- service.action.awsApiCallAction.callerType\n- service.action.awsApiCallAction.errorCode\n- service.action.awsApiCallAction.remoteIpDetails.city.cityName\n- service.action.awsApiCallAction.remoteIpDetails.country.countryName\n- service.action.awsApiCallAction.remoteIpDetails.ipAddressV4\n- service.action.awsApiCallAction.remoteIpDetails.ipAddressV6\n- service.action.awsApiCallAction.remoteIpDetails.organization.asn\n- service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg\n- service.action.awsApiCallAction.serviceName\n- service.action.dnsRequestAction.domain\n- service.action.dnsRequestAction.domainWithSuffix\n- service.action.networkConnectionAction.blocked\n- service.action.networkConnectionAction.connectionDirection\n- service.action.networkConnectionAction.localPortDetails.port\n- service.action.networkConnectionAction.protocol\n- service.action.networkConnectionAction.remoteIpDetails.city.cityName\n- service.action.networkConnectionAction.remoteIpDetails.country.countryName\n- service.action.networkConnectionAction.remoteIpDetails.ipAddressV4\n- service.action.networkConnectionAction.remoteIpDetails.ipAddressV6\n- service.action.networkConnectionAction.remoteIpDetails.organization.asn\n- service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg\n- service.action.networkConnectionAction.remotePortDetails.port\n- service.action.awsApiCallAction.remoteAccountDetails.affiliated\n- service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4\n- service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV6\n- service.action.kubernetesApiCallAction.namespace\n- service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn\n- service.action.kubernetesApiCallAction.requestUri\n- service.action.kubernetesApiCallAction.statusCode\n- service.action.networkConnectionAction.localIpDetails.ipAddressV4\n- service.action.networkConnectionAction.localIpDetails.ipAddressV6\n- service.action.networkConnectionAction.protocol\n- service.action.awsApiCallAction.serviceName\n- service.action.awsApiCallAction.remoteAccountDetails.accountId\n- service.additionalInfo.threatListName\n- service.resourceRole\n- resource.eksClusterDetails.name\n- resource.kubernetesDetails.kubernetesWorkloadDetails.name\n- resource.kubernetesDetails.kubernetesWorkloadDetails.namespace\n- resource.kubernetesDetails.kubernetesUserDetails.username\n- resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image\n- resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix\n- service.ebsVolumeScanDetails.scanId\n- service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name\n- service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity\n- service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash\n- service.malwareScanDetails.threats.name\n- resource.ecsClusterDetails.name\n- resource.ecsClusterDetails.taskDetails.containers.image\n- resource.ecsClusterDetails.taskDetails.definitionArn\n- resource.containerDetails.image\n- resource.rdsDbInstanceDetails.dbInstanceIdentifier\n- resource.rdsDbInstanceDetails.dbClusterIdentifier\n- resource.rdsDbInstanceDetails.engine\n- resource.rdsDbUserDetails.user\n- resource.rdsDbInstanceDetails.tags.key\n- resource.rdsDbInstanceDetails.tags.value\n- service.runtimeDetails.process.executableSha256\n- service.runtimeDetails.process.name\n- service.runtimeDetails.process.name\n- resource.lambdaDetails.functionName\n- resource.lambdaDetails.functionArn\n- resource.lambdaDetails.tags.key\n- resource.lambdaDetails.tags.value"}},"type":"object"},"aws-native:guardduty:FilterTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:guardduty:IpSetTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:guardduty:MalwareProtectionPlanCfnActions":{"properties":{"tagging":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnTagging","description":"Contains information about tagging status of the Malware Protection plan resource."}},"type":"object"},"aws-native:guardduty:MalwareProtectionPlanCfnProtectedResource":{"properties":{"s3Bucket":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnProtectedResourceS3BucketProperties","description":"Information about the protected S3 bucket resource."}},"type":"object","required":["s3Bucket"]},"aws-native:guardduty:MalwareProtectionPlanCfnProtectedResourceS3BucketProperties":{"description":"Information about the protected S3 bucket resource.","properties":{"bucketName":{"type":"string","description":"Name of the S3 bucket."},"objectPrefixes":{"type":"array","items":{"type":"string"},"description":"Information about the specified object prefixes. The S3 object will be scanned only if it belongs to any of the specified object prefixes."}},"type":"object"},"aws-native:guardduty:MalwareProtectionPlanCfnStatusReasons":{"properties":{"code":{"type":"string","description":"The status code of the Malware Protection plan."},"message":{"type":"string","description":"Issue message that specifies the reason."}},"type":"object"},"aws-native:guardduty:MalwareProtectionPlanCfnTagging":{"properties":{"status":{"type":"string","description":"Indicates whether or not you chose GuardDuty to add a predefined tag to the scanned S3 object."}},"type":"object"},"aws-native:guardduty:MalwareProtectionPlanTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:guardduty:PublishingDestinationCfnDestinationProperties":{"properties":{"destinationArn":{"type":"string","description":"The ARN of the resource to publish to."},"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key to use for encryption."}},"type":"object"},"aws-native:guardduty:PublishingDestinationTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:guardduty:ThreatEntitySetStatus":{"description":"The status of your `ThreatEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .","type":"string","enum":[{"name":"Inactive","value":"INACTIVE"},{"name":"Activating","value":"ACTIVATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deactivating","value":"DEACTIVATING"},{"name":"Error","value":"ERROR"},{"name":"DeletePending","value":"DELETE_PENDING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:guardduty:ThreatEntitySetTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value. This is optional."}},"type":"object","required":["key","value"]},"aws-native:guardduty:ThreatIntelSetTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:guardduty:TrustedEntitySetStatus":{"description":"The status of your `TrustedEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* .","type":"string","enum":[{"name":"Inactive","value":"INACTIVE"},{"name":"Activating","value":"ACTIVATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deactivating","value":"DEACTIVATING"},{"name":"Error","value":"ERROR"},{"name":"DeletePending","value":"DELETE_PENDING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:guardduty:TrustedEntitySetTagItem":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value. This is optional."}},"type":"object","required":["key","value"]},"aws-native:healthimaging:DatastoreStatus":{"description":"A string to denote the Datastore's state.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:healthlake:FhirDatastoreCreatedAt":{"description":"The time that a Data Store was created.","properties":{"nanos":{"type":"integer","description":"Nanoseconds."},"seconds":{"type":"string","description":"Seconds since epoch."}},"type":"object","required":["nanos","seconds"]},"aws-native:healthlake:FhirDatastoreDatastoreStatus":{"description":"The status of the Data Store. Possible statuses are 'CREATING', 'ACTIVE', 'DELETING', or 'DELETED'.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:healthlake:FhirDatastoreDatastoreTypeVersion":{"description":"The FHIR version. Only R4 version data is supported.","type":"string","enum":[{"name":"R4","value":"R4"}]},"aws-native:healthlake:FhirDatastoreIdentityProviderConfiguration":{"description":"The identity provider configuration for the datastore","properties":{"authorizationStrategy":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreIdentityProviderConfigurationAuthorizationStrategy","description":"Type of Authorization Strategy. The two types of supported Authorization strategies are SMART_ON_FHIR_V1 and AWS_AUTH."},"fineGrainedAuthorizationEnabled":{"type":"boolean","description":"Flag to indicate if fine-grained authorization will be enabled for the datastore"},"idpLambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lambda function that will be used to decode the access token created by the authorization server."},"metadata":{"type":"string","description":"The JSON metadata elements for identity provider configuration."}},"type":"object","required":["authorizationStrategy"]},"aws-native:healthlake:FhirDatastoreIdentityProviderConfigurationAuthorizationStrategy":{"description":"Type of Authorization Strategy. The two types of supported Authorization strategies are SMART_ON_FHIR_V1 and AWS_AUTH.","type":"string","enum":[{"name":"SmartOnFhirV1","value":"SMART_ON_FHIR_V1"},{"name":"AwsAuth","value":"AWS_AUTH"},{"name":"SmartOnFhir","value":"SMART_ON_FHIR"}]},"aws-native:healthlake:FhirDatastoreKmsEncryptionConfig":{"description":"The customer-managed-key (CMK) used when creating a Data Store. If a customer owned key is not specified, an AWS owned key will be used for encryption.","properties":{"cmkType":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreKmsEncryptionConfigCmkType","description":"The type of customer-managed-key (CMK) used for encryption. The two types of supported CMKs are customer owned CMKs and AWS owned CMKs."},"kmsKeyId":{"type":"string","description":"The KMS encryption key id/alias used to encrypt the Data Store contents at rest."}},"type":"object","required":["cmkType"]},"aws-native:healthlake:FhirDatastoreKmsEncryptionConfigCmkType":{"description":"The type of customer-managed-key (CMK) used for encryption. The two types of supported CMKs are customer owned CMKs and AWS owned CMKs.","type":"string","enum":[{"name":"CustomerManagedKmsKey","value":"CUSTOMER_MANAGED_KMS_KEY"},{"name":"AwsOwnedKmsKey","value":"AWS_OWNED_KMS_KEY"}]},"aws-native:healthlake:FhirDatastorePreloadDataConfig":{"description":"The preloaded data configuration for the Data Store. Only data preloaded from Synthea is supported.","properties":{"preloadDataType":{"$ref":"#/types/aws-native:healthlake:FhirDatastorePreloadDataConfigPreloadDataType","description":"The type of preloaded data. Only Synthea preloaded data is supported."}},"type":"object","required":["preloadDataType"]},"aws-native:healthlake:FhirDatastorePreloadDataConfigPreloadDataType":{"description":"The type of preloaded data. Only Synthea preloaded data is supported.","type":"string","enum":[{"name":"Synthea","value":"SYNTHEA"}]},"aws-native:healthlake:FhirDatastoreSseConfiguration":{"description":"The server-side encryption key configuration for a customer provided encryption key.","properties":{"kmsEncryptionConfig":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreKmsEncryptionConfig","description":"The server-side encryption key configuration for a customer provided encryption key."}},"type":"object","required":["kmsEncryptionConfig"]},"aws-native:healthlake:FhirDatastoreTag":{"description":"A key-value pair. A tag consists of a tag key and a tag value. Tag keys and tag values are both required, but tag values can be empty (null) strings.","properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iam:GroupPolicy":{"description":"Contains information about an attached policy.\n An attached policy is a managed policy that has been attached to a user, group, or role.\n For more information about managed policies, see [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *User Guide*.","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document."},"policyName":{"type":"string","description":"The friendly name (not ARN) identifying the policy."}},"type":"object","required":["policyDocument","policyName"]},"aws-native:iam:OidcProviderTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iam:RolePolicy":{"description":"Contains information about an attached policy.\n An attached policy is a managed policy that has been attached to a user, group, or role.\n For more information about managed policies, refer to [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *User Guide*.","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The entire contents of the policy that defines permissions. For more information, see [Overview of JSON policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policies-json)."},"policyName":{"type":"string","description":"The friendly name (not ARN) identifying the policy."}},"type":"object","required":["policyDocument","policyName"]},"aws-native:iam:RoleTag":{"description":"A structure that represents user-provided metadata that can be associated with an IAM resource. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*.","properties":{"key":{"type":"string","description":"The key name that can be used to look up or retrieve the associated value. For example, ``Department`` or ``Cost Center`` are common choices."},"value":{"type":"string","description":"The value associated with this tag. For example, tags with a key name of ``Department`` could have values such as ``Human Resources``, ``Accounting``, and ``Support``. Tags with a key name of ``Cost Center`` might have values that consist of the number associated with the different cost centers in your company. Typically, many resources have tags with the same key name but with different values."}},"type":"object","required":["key","value"]},"aws-native:iam:SamlProviderAssertionEncryptionMode":{"description":"The encryption setting for the SAML provider","type":"string","enum":[{"name":"Allowed","value":"Allowed"},{"name":"Required","value":"Required"}]},"aws-native:iam:SamlProviderSamlPrivateKey":{"description":"The private key metadata for the SAML provider","properties":{"keyId":{"type":"string","description":"The unique identifier for the SAML private key."},"timestamp":{"type":"string","description":"The date and time, in \u003ca href=\\\"http://www.iso.org/iso/iso8601\\\"\u003eISO 8601 date-time \u003c/a\u003e format, when the private key was uploaded."}},"type":"object","required":["keyId","timestamp"]},"aws-native:iam:SamlProviderTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iam:ServerCertificateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iam:UserLoginProfile":{"description":"Creates a password for the specified user, giving the user the ability to access AWS services through the console. For more information about managing passwords, see [Managing Passwords](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html) in the *User Guide*.","properties":{"password":{"type":"string","description":"The user's password."},"passwordResetRequired":{"type":"boolean","description":"Specifies whether the user is required to set a new password on next sign-in."}},"type":"object","required":["password"]},"aws-native:iam:UserPolicy":{"description":"Contains information about an attached policy.\n An attached policy is a managed policy that has been attached to a user, group, or role.\n For more information about managed policies, refer to [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *User Guide*.","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The entire contents of the policy that defines permissions. For more information, see [Overview of JSON policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policies-json)."},"policyName":{"type":"string","description":"The friendly name (not ARN) identifying the policy."}},"type":"object","required":["policyDocument","policyName"]},"aws-native:iam:UserTag":{"description":"A structure that represents user-provided metadata that can be associated with an IAM resource. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*.","properties":{"key":{"type":"string","description":"The key name that can be used to look up or retrieve the associated value. For example, ``Department`` or ``Cost Center`` are common choices."},"value":{"type":"string","description":"The value associated with this tag. For example, tags with a key name of ``Department`` could have values such as ``Human Resources``, ``Accounting``, and ``Support``. Tags with a key name of ``Cost Center`` might have values that consist of the number associated with the different cost centers in your company. Typically, many resources have tags with the same key name but with different values."}},"type":"object","required":["key","value"]},"aws-native:iam:VirtualMfaDeviceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:identitystore:GroupMembershipMemberId":{"description":"An object containing the identifier of a group member.","properties":{"userId":{"type":"string","description":"The identifier for a user in the identity store."}},"type":"object","required":["userId"]},"aws-native:imagebuilder:ComponentLatestVersion":{"description":"The latest version references of the component.","properties":{"arn":{"type":"string","description":"The latest version ARN of the created component."},"major":{"type":"string","description":"The latest version ARN of the created component, with the same major version."},"minor":{"type":"string","description":"The latest version ARN of the created component, with the same minor version."},"patch":{"type":"string","description":"The latest version ARN of the created component, with the same patch version."}},"type":"object"},"aws-native:imagebuilder:ComponentPlatform":{"description":"The platform of the component.","type":"string","enum":[{"name":"Windows","value":"Windows"},{"name":"Linux","value":"Linux"},{"name":"MacOs","value":"macOS"}]},"aws-native:imagebuilder:ComponentType":{"description":"The type of the component denotes whether the component is used to build the image or only to test it. ","type":"string","enum":[{"name":"Build","value":"BUILD"},{"name":"Test","value":"TEST"}]},"aws-native:imagebuilder:ContainerRecipeComponentConfiguration":{"description":"Configuration details of the component.","properties":{"componentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the component."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeComponentParameter"},"description":"A group of parameter settings that are used to configure the component for a specific recipe."}},"type":"object"},"aws-native:imagebuilder:ContainerRecipeComponentParameter":{"description":"Contains a key/value pair that sets the named component parameter.","properties":{"name":{"type":"string","description":"The name of the component parameter to set."},"value":{"type":"array","items":{"type":"string"},"description":"Sets the value for the named component parameter."}},"type":"object","required":["name","value"]},"aws-native:imagebuilder:ContainerRecipeContainerType":{"description":"Specifies the type of container, such as Docker.","type":"string","enum":[{"name":"Docker","value":"DOCKER"}]},"aws-native:imagebuilder:ContainerRecipeEbsInstanceBlockDeviceSpecification":{"description":"Amazon EBS-specific block device mapping specifications. ","properties":{"deleteOnTermination":{"type":"boolean","description":"Use to configure delete on termination of the associated device."},"encrypted":{"type":"boolean","description":"Use to configure device encryption."},"iops":{"type":"integer","description":"Use to configure device IOPS."},"kmsKeyId":{"type":"string","description":"Use to configure the KMS key to use when encrypting the device."},"snapshotId":{"type":"string","description":"The snapshot that defines the device contents."},"throughput":{"type":"integer","description":"For GP3 volumes only - The throughput in MiB/s that the volume supports."},"volumeSize":{"type":"integer","description":"Use to override the device's volume size."},"volumeType":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeEbsInstanceBlockDeviceSpecificationVolumeType","description":"Use to override the device's volume type."}},"type":"object"},"aws-native:imagebuilder:ContainerRecipeEbsInstanceBlockDeviceSpecificationVolumeType":{"description":"Use to override the device's volume type.","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Io1","value":"io1"},{"name":"Io2","value":"io2"},{"name":"Gp2","value":"gp2"},{"name":"Gp3","value":"gp3"},{"name":"Sc1","value":"sc1"},{"name":"St1","value":"st1"}]},"aws-native:imagebuilder:ContainerRecipeInstanceBlockDeviceMapping":{"description":"Defines block device mappings for the instance used to configure your image. ","properties":{"deviceName":{"type":"string","description":"The device to which these mappings apply."},"ebs":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeEbsInstanceBlockDeviceSpecification","description":"Use to manage Amazon EBS-specific configuration for this mapping."},"noDevice":{"type":"string","description":"Use to remove a mapping from the parent image."},"virtualName":{"type":"string","description":"Use to manage instance ephemeral devices."}},"type":"object"},"aws-native:imagebuilder:ContainerRecipeInstanceConfiguration":{"description":"A group of options that can be used to configure an instance for building and testing container images.","properties":{"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeInstanceBlockDeviceMapping"},"description":"Defines the block devices to attach for building an instance from this Image Builder AMI."},"image":{"type":"string","description":"The AMI ID to use as the base image for a container build and test instance. If not specified, Image Builder will use the appropriate ECS-optimized AMI as a base image."}},"type":"object"},"aws-native:imagebuilder:ContainerRecipeLatestVersion":{"description":"The latest version references of the container recipe.","properties":{"arn":{"type":"string","description":"The latest version ARN of the created container recipe."},"major":{"type":"string","description":"The latest version ARN of the created container recipe, with the same major version."},"minor":{"type":"string","description":"The latest version ARN of the created container recipe, with the same minor version."},"patch":{"type":"string","description":"The latest version ARN of the created container recipe, with the same patch version."}},"type":"object"},"aws-native:imagebuilder:ContainerRecipePlatformOverride":{"description":"Specifies the operating system platform when you use a custom source image.","type":"string","enum":[{"name":"Windows","value":"Windows"},{"name":"Linux","value":"Linux"}]},"aws-native:imagebuilder:ContainerRecipeTargetContainerRepository":{"description":"The container repository where the output container image is stored.","properties":{"repositoryName":{"type":"string","description":"The name of the container repository where the output container image is stored. This name is prefixed by the repository location."},"service":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeTargetContainerRepositoryService","description":"Specifies the service in which this image was registered."}},"type":"object"},"aws-native:imagebuilder:ContainerRecipeTargetContainerRepositoryService":{"description":"Specifies the service in which this image was registered.","type":"string","enum":[{"name":"Ecr","value":"ECR"}]},"aws-native:imagebuilder:DistributionConfigurationAmiDistributionConfiguration":{"description":"The specific AMI settings (for example, launch permissions, AMI tags).","properties":{"amiTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to AMIs distributed to this Region."},"description":{"type":"string","description":"The description of the AMI distribution configuration."},"kmsKeyId":{"type":"string","description":"The KMS key identifier used to encrypt the distributed image."},"launchPermissionConfiguration":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationLaunchPermissionConfiguration","description":"Launch permissions can be used to configure which AWS account s can use the AMI to launch instances."},"name":{"type":"string","description":"The name of the AMI distribution configuration."},"targetAccountIds":{"type":"array","items":{"type":"string"},"description":"The ID of accounts to which you want to distribute an image."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationContainerDistributionConfiguration":{"description":"Container distribution settings for encryption, licensing, and sharing in a specific Region.","properties":{"containerTags":{"type":"array","items":{"type":"string"},"description":"Tags that are attached to the container distribution configuration."},"description":{"type":"string","description":"The description of the container distribution configuration."},"targetRepository":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationTargetContainerRepository","description":"The destination repository for the container distribution configuration."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationDistribution":{"description":"The distributions of the distribution configuration.","properties":{"amiDistributionConfiguration":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationAmiDistributionConfiguration","description":"The specific AMI settings, such as launch permissions and AMI tags. For details, see example schema below."},"containerDistributionConfiguration":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationContainerDistributionConfiguration","description":"Container distribution settings for encryption, licensing, and sharing in a specific Region. For details, see example schema below."},"fastLaunchConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationFastLaunchConfiguration"},"description":"The Windows faster-launching configurations to use for AMI distribution."},"launchTemplateConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationLaunchTemplateConfiguration"},"description":"A group of launchTemplateConfiguration settings that apply to image distribution."},"licenseConfigurationArns":{"type":"array","items":{"type":"string"},"description":"The License Manager Configuration to associate with the AMI in the specified Region."},"region":{"type":"string","description":"region"},"ssmParameterConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationSsmParameterConfiguration"},"description":"The SSM parameter configurations to use for AMI distribution."}},"type":"object","required":["region"]},"aws-native:imagebuilder:DistributionConfigurationFastLaunchConfiguration":{"description":"The Windows faster-launching configuration to use for AMI distribution.","properties":{"accountId":{"type":"string","description":"The owner account ID for the fast-launch enabled Windows AMI."},"enabled":{"type":"boolean","description":"A Boolean that represents the current state of faster launching for the Windows AMI. Set to true to start using Windows faster launching, or false to stop using it."},"launchTemplate":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationFastLaunchLaunchTemplateSpecification","description":"The launch template that the fast-launch enabled Windows AMI uses when it launches Windows instances to create pre-provisioned snapshots."},"maxParallelLaunches":{"type":"integer","description":"The maximum number of parallel instances that are launched for creating resources."},"snapshotConfiguration":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationFastLaunchSnapshotConfiguration","description":"Configuration settings for managing the number of snapshots that are created from pre-provisioned instances for the Windows AMI when faster launching is enabled."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationFastLaunchLaunchTemplateSpecification":{"description":"The launch template that the fast-launch enabled Windows AMI uses when it launches Windows instances to create pre-provisioned snapshots.","properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template to use for faster launching for a Windows AMI."},"launchTemplateName":{"type":"string","description":"The name of the launch template to use for faster launching for a Windows AMI."},"launchTemplateVersion":{"type":"string","description":"The version of the launch template to use for faster launching for a Windows AMI."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationFastLaunchSnapshotConfiguration":{"description":"Configuration settings for managing the number of snapshots that are created from pre-provisioned instances for the Windows AMI when faster launching is enabled.","properties":{"targetResourceCount":{"type":"integer","description":"The number of pre-provisioned snapshots to keep on hand for a fast-launch enabled Windows AMI."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationLaunchPermissionConfiguration":{"description":"Launch permissions can be used to configure which AWS accounts can use the AMI to launch instances.","properties":{"organizationArns":{"type":"array","items":{"type":"string"},"description":"The ARN for an Amazon Web Services Organization that you want to share your AMI with."},"organizationalUnitArns":{"type":"array","items":{"type":"string"},"description":"The ARN for an Organizations organizational unit (OU) that you want to share your AMI with."},"userGroups":{"type":"array","items":{"type":"string"},"description":"The name of the group."},"userIds":{"type":"array","items":{"type":"string"},"description":"The AWS account ID."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationLaunchTemplateConfiguration":{"description":"launchTemplateConfiguration settings that apply to image distribution.","properties":{"accountId":{"type":"string","description":"The account ID that this configuration applies to."},"launchTemplateId":{"type":"string","description":"Identifies the EC2 launch template to use."},"setDefaultVersion":{"type":"boolean","description":"Set the specified EC2 launch template as the default launch template for the specified account."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationSsmParameterConfiguration":{"description":"The SSM parameter configuration for AMI distribution.","properties":{"amiAccountId":{"type":"string","description":"The account ID for the AMI to update the parameter with."},"dataType":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationSsmParameterConfigurationDataType","description":"The data type of the SSM parameter."},"parameterName":{"type":"string","description":"The name of the SSM parameter."}},"type":"object","required":["parameterName"]},"aws-native:imagebuilder:DistributionConfigurationSsmParameterConfigurationDataType":{"description":"The data type of the SSM parameter.","type":"string","enum":[{"name":"Text","value":"text"},{"name":"Awsec2image","value":"aws:ec2:image"}]},"aws-native:imagebuilder:DistributionConfigurationTargetContainerRepository":{"description":"The destination repository for the container image.","properties":{"repositoryName":{"type":"string","description":"The repository name of target container repository."},"service":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationTargetContainerRepositoryService","description":"The service of target container repository."}},"type":"object"},"aws-native:imagebuilder:DistributionConfigurationTargetContainerRepositoryService":{"description":"The service of target container repository.","type":"string","enum":[{"name":"Ecr","value":"ECR"}]},"aws-native:imagebuilder:ImageDeletionSettings":{"description":"The deletion settings of the image, indicating whether to delete the underlying resources in addition to the image.","properties":{"executionRole":{"type":"string","description":"The execution role to use for deleting the image, as well as underlying resources."}},"type":"object","required":["executionRole"]},"aws-native:imagebuilder:ImageEcrConfiguration":{"description":"Settings for Image Builder to configure the ECR repository and output container images that are scanned.","properties":{"containerTags":{"type":"array","items":{"type":"string"},"description":"Tags for Image Builder to apply the output container image that is scanned. Tags can help you identify and manage your scanned images."},"repositoryName":{"type":"string","description":"The name of the container repository that Amazon Inspector scans to identify findings for your container images. The name includes the path for the repository location. If you don’t provide this information, Image Builder creates a repository in your account named image-builder-image-scanning-repository to use for vulnerability scans for your output container images."}},"type":"object"},"aws-native:imagebuilder:ImageLatestVersion":{"description":"The latest version references of the image.","properties":{"arn":{"type":"string","description":"The latest version ARN of the created image."},"major":{"type":"string","description":"The latest version ARN of the created image, with the same major version."},"minor":{"type":"string","description":"The latest version ARN of the created image, with the same minor version."},"patch":{"type":"string","description":"The latest version ARN of the created image, with the same patch version."}},"type":"object"},"aws-native:imagebuilder:ImageLoggingConfiguration":{"description":"The logging configuration settings for the image.","properties":{"logGroupName":{"type":"string","description":"The name of the log group for image build logs."}},"type":"object"},"aws-native:imagebuilder:ImagePipelineAutoDisablePolicy":{"description":"The auto-disable policy configuration for the image pipeline.","properties":{"failureCount":{"type":"integer","description":"The number of consecutive failures after which the pipeline should be automatically disabled."}},"type":"object","required":["failureCount"]},"aws-native:imagebuilder:ImagePipelineEcrConfiguration":{"description":"Settings for Image Builder to configure the ECR repository and output container images that are scanned.","properties":{"containerTags":{"type":"array","items":{"type":"string"},"description":"Tags for Image Builder to apply the output container image that is scanned. Tags can help you identify and manage your scanned images."},"repositoryName":{"type":"string","description":"The name of the container repository that Amazon Inspector scans to identify findings for your container images. The name includes the path for the repository location. If you don't provide this information, Image Builder creates a repository in your account named image-builder-image-scanning-repository to use for vulnerability scans for your output container images."}},"type":"object"},"aws-native:imagebuilder:ImagePipelineExecutionSettings":{"description":"The settings for starting an image pipeline execution.","properties":{"deploymentId":{"type":"string","description":"The deployment ID of the pipeline, used to trigger new image pipeline executions."},"onUpdate":{"type":"boolean","description":"Whether to trigger the image pipeline when the pipeline is updated. False by default."}},"type":"object"},"aws-native:imagebuilder:ImagePipelineImageScanningConfiguration":{"description":"Determines if tests should run after building the image. Image Builder defaults to enable tests to run following the image build, before image distribution.","properties":{"ecrConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineEcrConfiguration","description":"Contains ECR settings for vulnerability scans."},"imageScanningEnabled":{"type":"boolean","description":"This sets whether Image Builder keeps a snapshot of the vulnerability scans that Amazon Inspector runs against the build instance when you create a new image."}},"type":"object"},"aws-native:imagebuilder:ImagePipelineImageTestsConfiguration":{"description":"Image tests configuration.","properties":{"imageTestsEnabled":{"type":"boolean","description":"Defines if tests should be executed when building this image."},"timeoutMinutes":{"type":"integer","description":"The maximum time in minutes that tests are permitted to run."}},"type":"object"},"aws-native:imagebuilder:ImagePipelinePipelineLoggingConfiguration":{"description":"The logging configuration settings for the image pipeline.","properties":{"imageLogGroupName":{"type":"string","description":"The name of the log group for image build logs."},"pipelineLogGroupName":{"type":"string","description":"The name of the log group for pipeline execution logs."}},"type":"object"},"aws-native:imagebuilder:ImagePipelineSchedule":{"description":"The schedule of the image pipeline.","properties":{"autoDisablePolicy":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineAutoDisablePolicy","description":"The auto-disable policy for the image pipeline."},"pipelineExecutionStartCondition":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineSchedulePipelineExecutionStartCondition","description":"The condition configures when the pipeline should trigger a new image build."},"scheduleExpression":{"type":"string","description":"The expression determines how often EC2 Image Builder evaluates your pipelineExecutionStartCondition."}},"type":"object"},"aws-native:imagebuilder:ImagePipelineSchedulePipelineExecutionStartCondition":{"description":"The condition configures when the pipeline should trigger a new image build.","type":"string","enum":[{"name":"ExpressionMatchOnly","value":"EXPRESSION_MATCH_ONLY"},{"name":"ExpressionMatchAndDependencyUpdatesAvailable","value":"EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE"}]},"aws-native:imagebuilder:ImagePipelineStatus":{"description":"The status of the image pipeline.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:imagebuilder:ImagePipelineWorkflowConfiguration":{"description":"The workflow configuration of the image","properties":{"onFailure":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineWorkflowConfigurationOnFailure","description":"Define execution decision in case of workflow failure"},"parallelGroup":{"type":"string","description":"The parallel group name"},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineWorkflowParameter"},"description":"The parameters associated with the workflow"},"workflowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the workflow"}},"type":"object"},"aws-native:imagebuilder:ImagePipelineWorkflowConfigurationOnFailure":{"description":"Define execution decision in case of workflow failure","type":"string","enum":[{"name":"Continue","value":"CONTINUE"},{"name":"Abort","value":"ABORT"}]},"aws-native:imagebuilder:ImagePipelineWorkflowParameter":{"description":"A parameter associated with the workflow","properties":{"name":{"type":"string","description":"The name of the workflow parameter to set."},"value":{"type":"array","items":{"type":"string"},"description":"Sets the value for the named workflow parameter."}},"type":"object"},"aws-native:imagebuilder:ImageRecipeAdditionalInstanceConfiguration":{"description":"Specify additional settings and launch scripts for your build instances.","properties":{"systemsManagerAgent":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeSystemsManagerAgent","description":"Contains settings for the SSM agent on your build instance."},"userDataOverride":{"type":"string","description":"Use this property to provide commands or a command script to run when you launch your build instance."}},"type":"object"},"aws-native:imagebuilder:ImageRecipeComponentConfiguration":{"description":"Configuration details of the component.","properties":{"componentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the component."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeComponentParameter"},"description":"A group of parameter settings that are used to configure the component for a specific recipe."}},"type":"object"},"aws-native:imagebuilder:ImageRecipeComponentParameter":{"description":"Contains a key/value pair that sets the named component parameter.","properties":{"name":{"type":"string","description":"The name of the component parameter to set."},"value":{"type":"array","items":{"type":"string"},"description":"Sets the value for the named component parameter."}},"type":"object","required":["name","value"]},"aws-native:imagebuilder:ImageRecipeEbsInstanceBlockDeviceSpecification":{"description":"Amazon EBS-specific block device mapping specifications. ","properties":{"deleteOnTermination":{"type":"boolean","description":"Use to configure delete on termination of the associated device."},"encrypted":{"type":"boolean","description":"Use to configure device encryption."},"iops":{"type":"integer","description":"Use to configure device IOPS."},"kmsKeyId":{"type":"string","description":"Use to configure the KMS key to use when encrypting the device."},"snapshotId":{"type":"string","description":"The snapshot that defines the device contents."},"throughput":{"type":"integer","description":"For GP3 volumes only - The throughput in MiB/s that the volume supports."},"volumeSize":{"type":"integer","description":"Use to override the device's volume size."},"volumeType":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeEbsInstanceBlockDeviceSpecificationVolumeType","description":"Use to override the device's volume type."}},"type":"object"},"aws-native:imagebuilder:ImageRecipeEbsInstanceBlockDeviceSpecificationVolumeType":{"description":"Use to override the device's volume type.","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Io1","value":"io1"},{"name":"Io2","value":"io2"},{"name":"Gp2","value":"gp2"},{"name":"Gp3","value":"gp3"},{"name":"Sc1","value":"sc1"},{"name":"St1","value":"st1"}]},"aws-native:imagebuilder:ImageRecipeInstanceBlockDeviceMapping":{"description":"Defines block device mappings for the instance used to configure your image. ","properties":{"deviceName":{"type":"string","description":"The device to which these mappings apply."},"ebs":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeEbsInstanceBlockDeviceSpecification","description":"Use to manage Amazon EBS-specific configuration for this mapping."},"noDevice":{"type":"string","description":"Use to remove a mapping from the parent image."},"virtualName":{"type":"string","description":"Use to manage instance ephemeral devices."}},"type":"object"},"aws-native:imagebuilder:ImageRecipeLatestVersion":{"description":"The latest version references of the image recipe.","properties":{"arn":{"type":"string","description":"The latest version ARN of the created image recipe."},"major":{"type":"string","description":"The latest version ARN of the created image recipe, with the same major version."},"minor":{"type":"string","description":"The latest version ARN of the created image recipe, with the same minor version."},"patch":{"type":"string","description":"The latest version ARN of the created image recipe, with the same patch version."}},"type":"object"},"aws-native:imagebuilder:ImageRecipeSystemsManagerAgent":{"description":"Contains settings for the SSM agent on your build instance.","properties":{"uninstallAfterBuild":{"type":"boolean","description":"Controls whether the SSM agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it's set to false, then the agent is left in, so that it is included in the new AMI. The default value is false."}},"type":"object"},"aws-native:imagebuilder:ImageScanningConfiguration":{"description":"Contains settings for Image Builder image resource and container image scans.","properties":{"ecrConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageEcrConfiguration","description":"Contains ECR settings for vulnerability scans."},"imageScanningEnabled":{"type":"boolean","description":"This sets whether Image Builder keeps a snapshot of the vulnerability scans that Amazon Inspector runs against the build instance when you create a new image."}},"type":"object"},"aws-native:imagebuilder:ImageTestsConfiguration":{"description":"The image tests configuration used when creating this image.","properties":{"imageTestsEnabled":{"type":"boolean","description":"ImageTestsEnabled"},"timeoutMinutes":{"type":"integer","description":"TimeoutMinutes"}},"type":"object"},"aws-native:imagebuilder:ImageWorkflowConfiguration":{"description":"The workflow configuration of the image","properties":{"onFailure":{"$ref":"#/types/aws-native:imagebuilder:ImageWorkflowConfigurationOnFailure","description":"Define execution decision in case of workflow failure"},"parallelGroup":{"type":"string","description":"The parallel group name"},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageWorkflowParameter"},"description":"The parameters associated with the workflow"},"workflowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the workflow"}},"type":"object"},"aws-native:imagebuilder:ImageWorkflowConfigurationOnFailure":{"description":"Define execution decision in case of workflow failure","type":"string","enum":[{"name":"Continue","value":"CONTINUE"},{"name":"Abort","value":"ABORT"}]},"aws-native:imagebuilder:ImageWorkflowParameter":{"description":"A parameter associated with the workflow","properties":{"name":{"type":"string","description":"The name of the workflow parameter to set."},"value":{"type":"array","items":{"type":"string"},"description":"Sets the value for the named workflow parameter."}},"type":"object"},"aws-native:imagebuilder:InfrastructureConfigurationInstanceMetadataOptions":{"description":"The instance metadata option settings for the infrastructure configuration.","properties":{"httpPutResponseHopLimit":{"type":"integer","description":"Limit the number of hops that an instance metadata request can traverse to reach its destination."},"httpTokens":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationInstanceMetadataOptionsHttpTokens","description":"Indicates whether a signed token header is required for instance metadata retrieval requests. The values affect the response as follows: "}},"type":"object"},"aws-native:imagebuilder:InfrastructureConfigurationInstanceMetadataOptionsHttpTokens":{"description":"Indicates whether a signed token header is required for instance metadata retrieval requests. The values affect the response as follows: ","type":"string","enum":[{"name":"Required","value":"required"},{"name":"Optional","value":"optional"}]},"aws-native:imagebuilder:InfrastructureConfigurationLogging":{"description":"The logging configuration of the infrastructure configuration.","properties":{"s3Logs":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationS3Logs","description":"The Amazon S3 logging configuration."}},"type":"object"},"aws-native:imagebuilder:InfrastructureConfigurationPlacement":{"description":"The placement options","properties":{"availabilityZone":{"type":"string","description":"AvailabilityZone"},"hostId":{"type":"string","description":"HostId"},"hostResourceGroupArn":{"type":"string","description":"HostResourceGroupArn"},"tenancy":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationPlacementTenancy","description":"Tenancy"}},"type":"object"},"aws-native:imagebuilder:InfrastructureConfigurationPlacementTenancy":{"description":"Tenancy","type":"string","enum":[{"name":"Default","value":"default"},{"name":"Dedicated","value":"dedicated"},{"name":"Host","value":"host"}]},"aws-native:imagebuilder:InfrastructureConfigurationS3Logs":{"description":"The S3 path in which to store the logs.","properties":{"s3BucketName":{"type":"string","description":"S3BucketName"},"s3KeyPrefix":{"type":"string","description":"S3KeyPrefix"}},"type":"object"},"aws-native:imagebuilder:LifecyclePolicyAction":{"description":"The action of the policy detail.","properties":{"includeResources":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyIncludeResources","description":"Specifies the resources that the lifecycle policy applies to."},"type":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyActionType","description":"The action type of the policy detail."}},"type":"object","required":["type"]},"aws-native:imagebuilder:LifecyclePolicyActionType":{"description":"The action type of the policy detail.","type":"string","enum":[{"name":"Delete","value":"DELETE"},{"name":"Deprecate","value":"DEPRECATE"},{"name":"Disable","value":"DISABLE"}]},"aws-native:imagebuilder:LifecyclePolicyAmiExclusionRules":{"description":"The AMI exclusion rules for the policy detail.","properties":{"isPublic":{"type":"boolean","description":"Use to apply lifecycle policy actions on whether the AMI is public."},"lastLaunched":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyLastLaunched","description":"Use to apply lifecycle policy actions on AMIs launched before a certain time."},"regions":{"type":"array","items":{"type":"string"},"description":"Use to apply lifecycle policy actions on AMIs distributed to a set of regions."},"sharedAccounts":{"type":"array","items":{"type":"string"},"description":"Use to apply lifecycle policy actions on AMIs shared with a set of regions."},"tagMap":{"type":"object","additionalProperties":{"type":"string"},"description":"The AMIs to select by tag."}},"type":"object"},"aws-native:imagebuilder:LifecyclePolicyExclusionRules":{"description":"The exclusion rules to apply of the policy detail.","properties":{"amis":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyAmiExclusionRules","description":"Lists configuration values that apply to AMIs that Image Builder should exclude from the lifecycle action."},"tagMap":{"type":"object","additionalProperties":{"type":"string"},"description":"The Image Builder tags to filter on."}},"type":"object"},"aws-native:imagebuilder:LifecyclePolicyFilter":{"description":"The filters to apply of the policy detail.","properties":{"retainAtLeast":{"type":"integer","description":"The minimum number of Image Builder resources to retain."},"type":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyFilterType","description":"The filter type."},"unit":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyTimeUnit","description":"The value's time unit."},"value":{"type":"integer","description":"The filter value."}},"type":"object","required":["type","value"]},"aws-native:imagebuilder:LifecyclePolicyFilterType":{"description":"The filter type.","type":"string","enum":[{"name":"Age","value":"AGE"},{"name":"Count","value":"COUNT"}]},"aws-native:imagebuilder:LifecyclePolicyIncludeResources":{"description":"The included resources of the policy detail.","properties":{"amis":{"type":"boolean","description":"Use to configure lifecycle actions on AMIs."},"containers":{"type":"boolean","description":"Use to configure lifecycle actions on containers."},"snapshots":{"type":"boolean","description":"Use to configure lifecycle actions on snapshots."}},"type":"object"},"aws-native:imagebuilder:LifecyclePolicyLastLaunched":{"description":"The last launched time of a resource.","properties":{"unit":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyTimeUnit","description":"The value's time unit."},"value":{"type":"integer","description":"The last launched value."}},"type":"object","required":["unit","value"]},"aws-native:imagebuilder:LifecyclePolicyPolicyDetail":{"description":"The policy detail of the lifecycle policy.","properties":{"action":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyAction","description":"Configuration details for the policy action."},"exclusionRules":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyExclusionRules","description":"Additional rules to specify resources that should be exempt from policy actions."},"filter":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyFilter","description":"Specifies the resources that the lifecycle policy applies to."}},"type":"object","required":["action","filter"]},"aws-native:imagebuilder:LifecyclePolicyRecipeSelection":{"description":"The recipe to apply the lifecycle policy for.","properties":{"name":{"type":"string","description":"The recipe name."},"semanticVersion":{"type":"string","description":"The recipe version."}},"type":"object","required":["name","semanticVersion"]},"aws-native:imagebuilder:LifecyclePolicyResourceSelection":{"description":"The resource selection for the lifecycle policy.","properties":{"recipes":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyRecipeSelection"},"description":"The recipes to select."},"tagMap":{"type":"object","additionalProperties":{"type":"string"},"description":"The Image Builder resources to select by tag."}},"type":"object"},"aws-native:imagebuilder:LifecyclePolicyResourceType":{"description":"The resource type of the lifecycle policy.","type":"string","enum":[{"name":"AmiImage","value":"AMI_IMAGE"},{"name":"ContainerImage","value":"CONTAINER_IMAGE"}]},"aws-native:imagebuilder:LifecyclePolicyStatus":{"description":"The status of the lifecycle policy.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:imagebuilder:LifecyclePolicyTimeUnit":{"description":"A time unit.","type":"string","enum":[{"name":"Days","value":"DAYS"},{"name":"Weeks","value":"WEEKS"},{"name":"Months","value":"MONTHS"},{"name":"Years","value":"YEARS"}]},"aws-native:imagebuilder:WorkflowLatestVersion":{"description":"The latest version references of the workflow.","properties":{"arn":{"type":"string","description":"The latest version ARN of the created workflow."},"major":{"type":"string","description":"The latest version ARN of the created workflow, with the same major version."},"minor":{"type":"string","description":"The latest version ARN of the created workflow, with the same minor version."},"patch":{"type":"string","description":"The latest version ARN of the created workflow, with the same patch version."}},"type":"object"},"aws-native:imagebuilder:WorkflowType":{"description":"The type of the workflow denotes whether the workflow is used to build, test, or distribute.","type":"string","enum":[{"name":"Build","value":"BUILD"},{"name":"Test","value":"TEST"},{"name":"Distribution","value":"DISTRIBUTION"}]},"aws-native:index/Region:Region":{"description":"A Region represents any valid Amazon region that may be targeted with deployments.","type":"string","enum":[{"name":"AfSouth1","description":"Africa (Cape Town)","value":"af-south-1"},{"name":"ApEast1","description":"Asia Pacific (Hong Kong)","value":"ap-east-1"},{"name":"ApEast2","description":"Asia Pacific (Taipei)","value":"ap-east-2"},{"name":"ApNortheast1","description":"Asia Pacific (Tokyo)","value":"ap-northeast-1"},{"name":"ApNortheast2","description":"Asia Pacific (Seoul)","value":"ap-northeast-2"},{"name":"ApNortheast3","description":"Asia Pacific (Osaka)","value":"ap-northeast-3"},{"name":"ApSouth1","description":"Asia Pacific (Mumbai)","value":"ap-south-1"},{"name":"ApSouth2","description":"Asia Pacific (Hyderabad)","value":"ap-south-2"},{"name":"ApSoutheast1","description":"Asia Pacific (Singapore)","value":"ap-southeast-1"},{"name":"ApSoutheast2","description":"Asia Pacific (Sydney)","value":"ap-southeast-2"},{"name":"ApSoutheast3","description":"Asia Pacific (Jakarta)","value":"ap-southeast-3"},{"name":"ApSoutheast4","description":"Asia Pacific (Melbourne)","value":"ap-southeast-4"},{"name":"ApSoutheast5","description":"Asia Pacific (Malaysia)","value":"ap-southeast-5"},{"name":"ApSoutheast6","description":"Asia Pacific (New Zealand)","value":"ap-southeast-6"},{"name":"ApSoutheast7","description":"Asia Pacific (Thailand)","value":"ap-southeast-7"},{"name":"CaCentral1","description":"Canada (Central)","value":"ca-central-1"},{"name":"CaWest1","description":"Canada West (Calgary)","value":"ca-west-1"},{"name":"CnNorth1","description":"China (Beijing)","value":"cn-north-1"},{"name":"CnNorthwest1","description":"China (Ningxia)","value":"cn-northwest-1"},{"name":"EuCentral1","description":"Europe (Frankfurt)","value":"eu-central-1"},{"name":"EuCentral2","description":"Europe (Zurich)","value":"eu-central-2"},{"name":"EuIsoeWest1","description":"EU ISOE West","value":"eu-isoe-west-1"},{"name":"EuNorth1","description":"Europe (Stockholm)","value":"eu-north-1"},{"name":"EuSouth1","description":"Europe (Milan)","value":"eu-south-1"},{"name":"EuSouth2","description":"Europe (Spain)","value":"eu-south-2"},{"name":"EuWest1","description":"Europe (Ireland)","value":"eu-west-1"},{"name":"EuWest2","description":"Europe (London)","value":"eu-west-2"},{"name":"EuWest3","description":"Europe (Paris)","value":"eu-west-3"},{"name":"EuscDeEast1","description":"AWS European Sovereign Cloud (Germany)","value":"eusc-de-east-1"},{"name":"IlCentral1","description":"Israel (Tel Aviv)","value":"il-central-1"},{"name":"MeCentral1","description":"Middle East (UAE)","value":"me-central-1"},{"name":"MeSouth1","description":"Middle East (Bahrain)","value":"me-south-1"},{"name":"MxCentral1","description":"Mexico (Central)","value":"mx-central-1"},{"name":"SaEast1","description":"South America (Sao Paulo)","value":"sa-east-1"},{"name":"UsEast1","description":"US East (N. Virginia)","value":"us-east-1"},{"name":"UsEast2","description":"US East (Ohio)","value":"us-east-2"},{"name":"UsGovEast1","description":"AWS GovCloud (US-East)","value":"us-gov-east-1"},{"name":"UsGovWest1","description":"AWS GovCloud (US-West)","value":"us-gov-west-1"},{"name":"UsIsoEast1","description":"US ISO East","value":"us-iso-east-1"},{"name":"UsIsoWest1","description":"US ISO WEST","value":"us-iso-west-1"},{"name":"UsIsobEast1","description":"US ISOB East (Ohio)","value":"us-isob-east-1"},{"name":"UsIsobWest1","description":"US ISOB West","value":"us-isob-west-1"},{"name":"UsIsofEast1","description":"US ISOF EAST","value":"us-isof-east-1"},{"name":"UsIsofSouth1","description":"US ISOF SOUTH","value":"us-isof-south-1"},{"name":"UsWest1","description":"US West (N. California)","value":"us-west-1"},{"name":"UsWest2","description":"US West (Oregon)","value":"us-west-2"}]},"aws-native:index:AutoNaming":{"description":"Auto-naming specification for the resource.","properties":{"maxLength":{"type":"integer","description":"The maximum length of the name."},"minLength":{"type":"integer","description":"The minimum length of the name."},"propertyName":{"type":"string","description":"The name of the property in the Cloud Control payload that is used to set the name of the resource."}},"type":"object"},"aws-native:index:CreateOnlyTag":{"description":"A set of tags to apply to the resource.","properties":{"key":{"type":"string","description":"The key name of the tag","replaceOnChanges":true},"value":{"type":"string","description":"The value of the tag","replaceOnChanges":true}},"type":"object","required":["key","value"]},"aws-native:index:ProviderAssumeRole":{"description":"The configuration for a Provider to assume a role.","properties":{"durationSeconds":{"type":"integer","description":"Number of seconds to restrict the assume role session duration.","language":{"python":{"mapCase":false}}},"externalId":{"type":"string","description":"External identifier to use when assuming the role.","language":{"python":{"mapCase":false}}},"policy":{"type":"string","description":"IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.","language":{"python":{"mapCase":false}}},"policyArns":{"type":"array","items":{"type":"string"},"description":"Set of Amazon Resource Names (ARNs) of IAM Policies describing further restricting permissions for the role.","language":{"python":{"mapCase":false}}},"roleArn":{"type":"string","description":"Amazon Resource Name (ARN) of the IAM Role to assume.","language":{"python":{"mapCase":false}}},"sessionName":{"type":"string","description":"Session name to use when assuming the role.","language":{"python":{"mapCase":false}}},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Map of assume role session tags.","language":{"python":{"mapCase":false}}},"transitiveTagKeys":{"type":"array","items":{"type":"string"},"description":"A list of keys for session tags that you want to set as transitive. If you set a tag key as transitive, the corresponding key and value passes to subsequent sessions in a role chain.","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:index:ProviderAutoNaming":{"description":"The configuration for automatically naming resources.","properties":{"autoTrim":{"type":"boolean","description":"Automatically trim the auto-generated name to meet the maximum length constraint.","language":{"python":{"mapCase":false}}},"randomSuffixMinLength":{"type":"integer","description":"The minimum length of the random suffix to append to the auto-generated name.","default":1,"language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:index:ProviderDefaultTags":{"description":"The configuration with resource tag settings to apply across all resources handled by this provider. This is designed to replace redundant per-resource `tags` configurations. Provider tags can be overridden with new values, but not excluded from specific resources. To override provider tag values, use the `tags` argument within a resource to configure new tag values for matching keys.","properties":{"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A group of tags to set across all resources.","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:index:ProviderEndpoint":{"description":"The configuration for for customizing service endpoints.","properties":{"cloudcontrol":{"type":"string","description":"Override the default endpoint for AWS CloudControl","language":{"python":{"mapCase":false}}},"cloudformation":{"type":"string","description":"Override the default endpoint for AWS CloudFormation","language":{"python":{"mapCase":false}}},"ec2":{"type":"string","description":"Override the default endpoint for AWS Elastic Compute Cloud (EC2)","language":{"python":{"mapCase":false}}},"ssm":{"type":"string","description":"Override the default endpoint for AWS Systems Manager","language":{"python":{"mapCase":false}}},"sts":{"type":"string","description":"Override the default endpoint for AWS Security Token Service (STS)","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:index:ProviderIgnoreTags":{"description":"The configuration with resource tag settings to ignore across all resources handled by this provider (except any individual service tag resources such as `ec2.Tag`) for situations where external systems are managing certain resource tags.","properties":{"keyPrefixes":{"type":"array","items":{"type":"string"},"description":"List of exact resource tag keys to ignore across all resources handled by this provider. This configuration prevents Pulumi from returning the tag in any `tags` attributes and displaying any configuration difference for the tag value. If any resource configuration still has this tag key configured in the `tags` argument, it will display a perpetual difference until the tag is removed from the argument or `ignoreChanges` is also used.","language":{"python":{"mapCase":false}}},"keys":{"type":"array","items":{"type":"string"},"description":"List of resource tag key prefixes to ignore across all resources handled by this provider. This configuration prevents Pulumi from returning any tag key matching the prefixes in any `tags` attributes and displaying any configuration difference for those tag values. If any resource configuration still has a tag matching one of the prefixes configured in the `tags` argument, it will display a perpetual difference until the tag is removed from the argument or `ignoreChanges` is also used.","language":{"python":{"mapCase":false}}}},"type":"object"},"aws-native:index:Tag":{"description":"A set of tags to apply to the resource.","properties":{"key":{"type":"string","description":"The key name of the tag"},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:inspector:AssessmentTemplateTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:inspector:ResourceGroupTag":{"properties":{"key":{"type":"string","description":"A tag key."},"value":{"type":"string","description":"A value assigned to a tag key."}},"type":"object","required":["key","value"]},"aws-native:inspectorv2:CisScanConfigurationCisSecurityLevel":{"type":"string","enum":[{"name":"Level1","value":"LEVEL_1"},{"name":"Level2","value":"LEVEL_2"}]},"aws-native:inspectorv2:CisScanConfigurationCisTargets":{"properties":{"accountIds":{"type":"array","items":{"type":"string"}},"targetResourceTags":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"}}},"type":"object","required":["accountIds","targetResourceTags"]},"aws-native:inspectorv2:CisScanConfigurationDailySchedule":{"properties":{"startTime":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationTime"}},"type":"object","required":["startTime"]},"aws-native:inspectorv2:CisScanConfigurationDay":{"type":"string","enum":[{"name":"Mon","value":"MON"},{"name":"Tue","value":"TUE"},{"name":"Wed","value":"WED"},{"name":"Thu","value":"THU"},{"name":"Fri","value":"FRI"},{"name":"Sat","value":"SAT"},{"name":"Sun","value":"SUN"}]},"aws-native:inspectorv2:CisScanConfigurationMonthlySchedule":{"properties":{"day":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationDay"},"startTime":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationTime"}},"type":"object","required":["day","startTime"]},"aws-native:inspectorv2:CisScanConfigurationOneTimeSchedule":{"type":"object"},"aws-native:inspectorv2:CisScanConfigurationSchedule":{"description":"Choose a Schedule cadence","properties":{"daily":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationDailySchedule"},"monthly":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationMonthlySchedule"},"oneTime":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationOneTimeSchedule"},"weekly":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationWeeklySchedule"}},"type":"object"},"aws-native:inspectorv2:CisScanConfigurationTime":{"properties":{"timeOfDay":{"type":"string"},"timeZone":{"type":"string"}},"type":"object","required":["timeOfDay","timeZone"]},"aws-native:inspectorv2:CisScanConfigurationWeeklySchedule":{"properties":{"days":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationDay"}},"startTime":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationTime"}},"type":"object","required":["days","startTime"]},"aws-native:inspectorv2:CodeSecurityIntegrationCreateDetails":{"properties":{"gitlabSelfManaged":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationCreateGitLabSelfManagedIntegrationDetail","description":"Details specific to creating an integration with a self-managed GitLab instance."}},"type":"object","required":["gitlabSelfManaged"]},"aws-native:inspectorv2:CodeSecurityIntegrationCreateGitLabSelfManagedIntegrationDetail":{"properties":{"accessToken":{"type":"string","description":"The personal access token used to authenticate with the self-managed GitLab instance."},"instanceUrl":{"type":"string","description":"The URL of the self-managed GitLab instance."}},"type":"object","required":["accessToken","instanceUrl"]},"aws-native:inspectorv2:CodeSecurityIntegrationIntegrationStatus":{"type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"},{"name":"Disabling","value":"DISABLING"}]},"aws-native:inspectorv2:CodeSecurityIntegrationIntegrationType":{"type":"string","enum":[{"name":"GitlabSelfManaged","value":"GITLAB_SELF_MANAGED"},{"name":"Github","value":"GITHUB"}]},"aws-native:inspectorv2:CodeSecurityIntegrationUpdateDetails":{"properties":{"github":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationUpdateGitHubIntegrationDetail","description":"Details specific to updating an integration with GitHub."},"gitlabSelfManaged":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationUpdateGitLabSelfManagedIntegrationDetail","description":"Details specific to updating an integration with a self-managed GitLab instance."}},"type":"object"},"aws-native:inspectorv2:CodeSecurityIntegrationUpdateGitHubIntegrationDetail":{"properties":{"code":{"type":"string","description":"The authorization code received from GitHub to update the integration."},"installationId":{"type":"string","description":"The installation ID of the GitHub App associated with the integration."}},"type":"object","required":["code","installationId"]},"aws-native:inspectorv2:CodeSecurityIntegrationUpdateGitLabSelfManagedIntegrationDetail":{"properties":{"authCode":{"type":"string","description":"The authorization code received from the self-managed GitLab instance to update the integration."}},"type":"object","required":["authCode"]},"aws-native:inspectorv2:CodeSecurityScanConfiguration":{"properties":{"continuousIntegrationScanConfiguration":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationContinuousIntegrationScanConfiguration","description":"Configuration settings for continuous integration scans that run automatically when code changes are made."},"periodicScanConfiguration":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationPeriodicScanConfiguration","description":"Configuration settings for periodic scans that run on a scheduled basis."},"ruleSetCategories":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationRuleSetCategory"},"description":"The categories of security rules to be applied during the scan."}},"type":"object","required":["ruleSetCategories"]},"aws-native:inspectorv2:CodeSecurityScanConfigurationConfigurationLevel":{"type":"string","enum":[{"name":"Organization","value":"ORGANIZATION"},{"name":"Account","value":"ACCOUNT"}]},"aws-native:inspectorv2:CodeSecurityScanConfigurationContinuousIntegrationScanConfiguration":{"properties":{"supportedEvents":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationContinuousIntegrationScanEvent"},"description":"The repository events that trigger continuous integration scans, such as pull requests or commits."}},"type":"object","required":["supportedEvents"]},"aws-native:inspectorv2:CodeSecurityScanConfigurationContinuousIntegrationScanEvent":{"type":"string","enum":[{"name":"PullRequest","value":"PULL_REQUEST"},{"name":"Push","value":"PUSH"}]},"aws-native:inspectorv2:CodeSecurityScanConfigurationPeriodicScanConfiguration":{"properties":{"frequency":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationPeriodicScanFrequency","description":"The frequency at which periodic scans are performed (such as weekly or monthly).\n\nIf you don't provide the `frequencyExpression` Amazon Inspector chooses day for the scan to run. If you provide the `frequencyExpression` , the schedule must match the specified `frequency` ."},"frequencyExpression":{"type":"string","description":"The schedule expression for periodic scans, in cron format."}},"type":"object"},"aws-native:inspectorv2:CodeSecurityScanConfigurationPeriodicScanFrequency":{"type":"string","enum":[{"name":"Weekly","value":"WEEKLY"},{"name":"Monthly","value":"MONTHLY"},{"name":"Never","value":"NEVER"}]},"aws-native:inspectorv2:CodeSecurityScanConfigurationProjectSelectionScope":{"type":"string","enum":[{"name":"All","value":"ALL"}]},"aws-native:inspectorv2:CodeSecurityScanConfigurationRuleSetCategory":{"type":"string","enum":[{"name":"Sast","value":"SAST"},{"name":"Iac","value":"IAC"},{"name":"Sca","value":"SCA"}]},"aws-native:inspectorv2:CodeSecurityScanConfigurationScopeSettings":{"properties":{"projectSelectionScope":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationProjectSelectionScope","description":"The scope of projects to be selected for scanning within the integrated repositories."}},"type":"object"},"aws-native:inspectorv2:FilterAction":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Suppress","value":"SUPPRESS"}]},"aws-native:inspectorv2:FilterCriteria":{"properties":{"awsAccountId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the AWS account IDs used to filter findings."},"codeVulnerabilityDetectorName":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"codeVulnerabilityDetectorTags":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"codeVulnerabilityFilePath":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"componentId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the component IDs used to filter findings."},"componentType":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the component types used to filter findings."},"ec2InstanceImageId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the Amazon EC2 instance image IDs used to filter findings."},"ec2InstanceSubnetId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the Amazon EC2 instance subnet IDs used to filter findings."},"ec2InstanceVpcId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the Amazon EC2 instance VPC IDs used to filter findings."},"ecrImageArchitecture":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the Amazon ECR image architecture types used to filter findings."},"ecrImageHash":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details of the Amazon ECR image hashes used to filter findings."},"ecrImagePushedAt":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterDateFilter"},"description":"Details on the Amazon ECR image push date and time used to filter findings."},"ecrImageRegistry":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the Amazon ECR registry used to filter findings."},"ecrImageRepositoryName":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the name of the Amazon ECR repository used to filter findings."},"ecrImageTags":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"The tags attached to the Amazon ECR container image."},"epssScore":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterNumberFilter"}},"exploitAvailable":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"findingArn":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the finding ARNs used to filter findings."},"findingStatus":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the finding status types used to filter findings."},"findingType":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the finding types used to filter findings."},"firstObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterDateFilter"},"description":"Details on the date and time a finding was first seen used to filter findings."},"fixAvailable":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"inspectorScore":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterNumberFilter"},"description":"The Amazon Inspector score to filter on."},"lambdaFunctionExecutionRoleArn":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"lambdaFunctionLastModifiedAt":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterDateFilter"}},"lambdaFunctionLayers":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"lambdaFunctionName":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"lambdaFunctionRuntime":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"lastObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterDateFilter"},"description":"Details on the date and time a finding was last seen used to filter findings."},"networkProtocol":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on network protocol used to filter findings."},"portRange":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterPortRangeFilter"},"description":"Details on the port ranges used to filter findings."},"relatedVulnerabilities":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the related vulnerabilities used to filter findings."},"resourceId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the resource IDs used to filter findings."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterMapFilter"},"description":"Details on the resource tags used to filter findings."},"resourceType":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the resource types used to filter findings."},"severity":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the severity used to filter findings."},"title":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the finding title used to filter findings."},"updatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterDateFilter"},"description":"Details on the date and time a finding was last updated at used to filter findings."},"vendorSeverity":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the vendor severity used to filter findings."},"vulnerabilityId":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the vulnerability ID used to filter findings."},"vulnerabilitySource":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"description":"Details on the vulnerability score to filter findings by."},"vulnerablePackages":{"type":"array","items":{"$ref":"#/types/aws-native:inspectorv2:FilterPackageFilter"},"description":"Details on the vulnerable packages used to filter findings."}},"type":"object"},"aws-native:inspectorv2:FilterDateFilter":{"properties":{"endInclusive":{"type":"integer"},"startInclusive":{"type":"integer"}},"type":"object"},"aws-native:inspectorv2:FilterMapComparison":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"}]},"aws-native:inspectorv2:FilterMapFilter":{"properties":{"comparison":{"$ref":"#/types/aws-native:inspectorv2:FilterMapComparison"},"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["comparison"]},"aws-native:inspectorv2:FilterNumberFilter":{"properties":{"lowerInclusive":{"type":"number"},"upperInclusive":{"type":"number"}},"type":"object"},"aws-native:inspectorv2:FilterPackageFilter":{"properties":{"architecture":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"epoch":{"$ref":"#/types/aws-native:inspectorv2:FilterNumberFilter"},"filePath":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"name":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"release":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"sourceLambdaLayerArn":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"sourceLayerHash":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"},"version":{"$ref":"#/types/aws-native:inspectorv2:FilterStringFilter"}},"type":"object"},"aws-native:inspectorv2:FilterPortRangeFilter":{"properties":{"beginInclusive":{"type":"integer"},"endInclusive":{"type":"integer"}},"type":"object"},"aws-native:inspectorv2:FilterStringComparison":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"Prefix","value":"PREFIX"},{"name":"NotEquals","value":"NOT_EQUALS"}]},"aws-native:inspectorv2:FilterStringFilter":{"properties":{"comparison":{"$ref":"#/types/aws-native:inspectorv2:FilterStringComparison"},"value":{"type":"string"}},"type":"object","required":["comparison","value"]},"aws-native:internetmonitor:MonitorConfigState":{"type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"},{"name":"Error","value":"ERROR"}]},"aws-native:internetmonitor:MonitorHealthEventsConfig":{"properties":{"availabilityLocalHealthEventsConfig":{"$ref":"#/types/aws-native:internetmonitor:MonitorLocalHealthEventsConfig","description":"The configuration that determines the threshold and other conditions for when Internet Monitor creates a health event for a local availability issue."},"availabilityScoreThreshold":{"type":"number","description":"The health event threshold percentage set for availability scores. When the overall availability score is at or below this percentage, Internet Monitor creates a health event."},"performanceLocalHealthEventsConfig":{"$ref":"#/types/aws-native:internetmonitor:MonitorLocalHealthEventsConfig","description":"The configuration that determines the threshold and other conditions for when Internet Monitor creates a health event for a local performance issue."},"performanceScoreThreshold":{"type":"number","description":"The health event threshold percentage set for performance scores. When the overall performance score is at or below this percentage, Internet Monitor creates a health event."}},"type":"object"},"aws-native:internetmonitor:MonitorInternetMeasurementsLogDelivery":{"properties":{"s3Config":{"$ref":"#/types/aws-native:internetmonitor:MonitorS3Config","description":"The configuration for publishing Amazon CloudWatch Internet Monitor internet measurements to Amazon S3."}},"type":"object"},"aws-native:internetmonitor:MonitorLocalHealthEventsConfig":{"properties":{"healthScoreThreshold":{"type":"number","description":"The health event threshold percentage set for a local health score."},"minTrafficImpact":{"type":"number","description":"The minimum percentage of overall traffic for an application that must be impacted by an issue before Internet Monitor creates an event when a threshold is crossed for a local health score.\n\nIf you don't set a minimum traffic impact threshold, the default value is 0.01%."},"status":{"$ref":"#/types/aws-native:internetmonitor:MonitorLocalHealthEventsConfigStatus","description":"The status of whether Internet Monitor creates a health event based on a threshold percentage set for a local health score. The status can be `ENABLED` or `DISABLED` ."}},"type":"object"},"aws-native:internetmonitor:MonitorLocalHealthEventsConfigStatus":{"description":"The status of whether Internet Monitor creates a health event based on a threshold percentage set for a local health score. The status can be `ENABLED` or `DISABLED` .","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:internetmonitor:MonitorProcessingStatusCode":{"type":"string","enum":[{"name":"Ok","value":"OK"},{"name":"Inactive","value":"INACTIVE"},{"name":"CollectingData","value":"COLLECTING_DATA"},{"name":"InsufficientData","value":"INSUFFICIENT_DATA"},{"name":"FaultService","value":"FAULT_SERVICE"},{"name":"FaultAccessCloudwatch","value":"FAULT_ACCESS_CLOUDWATCH"}]},"aws-native:internetmonitor:MonitorS3Config":{"properties":{"bucketName":{"type":"string","description":"The Amazon S3 bucket name for internet measurements publishing."},"bucketPrefix":{"type":"string","description":"An optional Amazon S3 bucket prefix for internet measurements publishing."},"logDeliveryStatus":{"$ref":"#/types/aws-native:internetmonitor:MonitorS3ConfigLogDeliveryStatus","description":"The status of publishing Internet Monitor internet measurements to an Amazon S3 bucket. The delivery status is `ENABLED` if you choose to deliver internet measurements to an S3 bucket, and `DISABLED` otherwise."}},"type":"object"},"aws-native:internetmonitor:MonitorS3ConfigLogDeliveryStatus":{"description":"The status of publishing Internet Monitor internet measurements to an Amazon S3 bucket. The delivery status is `ENABLED` if you choose to deliver internet measurements to an S3 bucket, and `DISABLED` otherwise.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:internetmonitor:MonitorTag":{"description":"The metadata that you apply to the cluster to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:invoicing:InvoiceUnitResourceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:invoicing:InvoiceUnitRule":{"properties":{"linkedAccounts":{"type":"array","items":{"type":"string"},"description":"The list of `LINKED_ACCOUNT` IDs where charges are included within the invoice unit."}},"type":"object","required":["linkedAccounts"]},"aws-native:iot:AbortConfigProperties":{"description":"The criteria that determine when and how a job abort takes place.","properties":{"criteriaList":{"type":"array","items":{"$ref":"#/types/aws-native:iot:JobTemplateAbortCriteria"},"description":"The list of criteria that determine when and how to abort the job."}},"type":"object","required":["criteriaList"]},"aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration":{"description":"The configuration for a specific audit check.","properties":{"enabled":{"type":"boolean","description":"True if the check is enabled."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationAuditCheckConfigurations":{"description":"Specifies which audit checks are enabled and disabled for this account.","properties":{"authenticatedCognitoRoleOverlyPermissiveCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks the permissiveness of an authenticated Amazon Cognito identity pool role. For this check, AWS IoT Device Defender audits all Amazon Cognito identity pools that have been used to connect to the AWS IoT message broker during the 31 days before the audit is performed."},"caCertificateExpiringCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if a CA certificate is expiring. This check applies to CA certificates expiring within 30 days or that have expired."},"caCertificateKeyQualityCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks the quality of the CA certificate key. The quality checks if the key is in a valid format, not expired, and if the key meets a minimum required size. This check applies to CA certificates that are `ACTIVE` or `PENDING_TRANSFER` ."},"conflictingClientIdsCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if multiple devices connect using the same client ID."},"deviceCertificateAgeCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationDeviceCertAgeAuditCheckConfiguration","description":"Checks when a device certificate has been active for a number of days greater than or equal to the number you specify."},"deviceCertificateExpiringCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationDeviceCertExpirationAuditCheckConfiguration","description":"Checks if a device certificate is expiring. By default, this check applies to device certificates expiring within 30 days or that have expired. You can modify this threshold by configuring the DeviceCertExpirationAuditCheckConfiguration."},"deviceCertificateKeyQualityCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks the quality of the device certificate key. The quality checks if the key is in a valid format, not expired, signed by a registered certificate authority, and if the key meets a minimum required size."},"deviceCertificateSharedCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if multiple concurrent connections use the same X.509 certificate to authenticate with AWS IoT ."},"intermediateCaRevokedForActiveDeviceCertificatesCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if device certificates are still active despite being revoked by an intermediate CA."},"ioTPolicyPotentialMisConfigurationCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if an AWS IoT policy is potentially misconfigured. Misconfigured policies, including overly permissive policies, can cause security incidents like allowing devices access to unintended resources. This check is a warning for you to make sure that only intended actions are allowed before updating the policy."},"iotPolicyOverlyPermissiveCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks the permissiveness of a policy attached to an authenticated Amazon Cognito identity pool role."},"iotRoleAliasAllowsAccessToUnusedServicesCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if a role alias has access to services that haven't been used for the AWS IoT device in the last year."},"iotRoleAliasOverlyPermissiveCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if the temporary credentials provided by AWS IoT role aliases are overly permissive."},"loggingDisabledCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if AWS IoT logs are disabled."},"revokedCaCertificateStillActiveCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if a revoked CA certificate is still active."},"revokedDeviceCertificateStillActiveCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if a revoked device certificate is still active."},"unauthenticatedCognitoRoleOverlyPermissiveCheck":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfiguration","description":"Checks if policy attached to an unauthenticated Amazon Cognito identity pool role is too permissive."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationAuditNotificationTarget":{"properties":{"enabled":{"type":"boolean","description":"True if notifications to the target are enabled."},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to send notifications to the target."},"targetArn":{"type":"string","description":"The ARN of the target (SNS topic) to which audit notifications are sent."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationAuditNotificationTargetConfigurations":{"description":"Information about the targets to which audit notifications are sent.","properties":{"sns":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditNotificationTarget","description":"The `Sns` notification target."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationCertAgeCheckCustomConfiguration":{"description":"A structure containing the configName and corresponding configValue for configuring audit checks.","properties":{"certAgeThresholdInDays":{"type":"string","description":"The number of days that defines when a device certificate is considered to have aged. The check will report a finding if a certificate has been active for a number of days greater than or equal to this threshold value."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationCertExpirationCheckCustomConfiguration":{"description":"A structure containing the configName and corresponding configValue for configuring audit checks.","properties":{"certExpirationThresholdInDays":{"type":"string","description":"The number of days before expiration that defines when a device certificate is considered to be approaching expiration. The check will report a finding if a certificate will expire within this number of days."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationDeviceCertAgeAuditCheckConfiguration":{"description":"A structure containing the configName and corresponding configValue for configuring DeviceCertAgeCheck.","properties":{"configuration":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationCertAgeCheckCustomConfiguration","description":"Configuration settings for the device certificate age check, including the threshold in days for certificate age. This configuration is of type `CertAgeCheckCustomConfiguration` ."},"enabled":{"type":"boolean","description":"True if the check is enabled."}},"type":"object"},"aws-native:iot:AccountAuditConfigurationDeviceCertExpirationAuditCheckConfiguration":{"description":"A structure containing the configName and corresponding configValue for configuring DeviceCertExpirationCheck.","properties":{"configuration":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationCertExpirationCheckCustomConfiguration","description":"Configuration settings for the device certificate expiration check, including the threshold in days before expiration. This configuration is of type `CertExpirationCheckCustomConfiguration`"},"enabled":{"type":"boolean","description":"True if the check is enabled."}},"type":"object"},"aws-native:iot:AuthorizerStatus":{"description":"The status of the authorizer.\n\nValid values: `ACTIVE` | `INACTIVE`","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:iot:AuthorizerTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:BillingGroupPropertiesProperties":{"description":"The properties of the billing group.","properties":{"billingGroupDescription":{"type":"string","description":"The description of the billing group."}},"type":"object"},"aws-native:iot:BillingGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"Tag key (1-128 chars). No 'aws:' prefix. Allows: [A-Za-z0-9 _.:/=+-]"},"value":{"type":"string","description":"Tag value (1-256 chars). No 'aws:' prefix. Allows: [A-Za-z0-9 _.:/=+-]"}},"type":"object","required":["key","value"]},"aws-native:iot:CaCertificateAutoRegistrationStatus":{"description":"Whether the CA certificate is configured for auto registration of device certificates. Valid values are \"ENABLE\" and \"DISABLE\".","type":"string","enum":[{"name":"Enable","value":"ENABLE"},{"name":"Disable","value":"DISABLE"}]},"aws-native:iot:CaCertificateCertificateMode":{"description":"The mode of the CA.\n\nAll the device certificates that are registered using this CA will be registered in the same mode as the CA. For more information about certificate mode for device certificates, see [certificate mode](https://docs.aws.amazon.com//iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode) .\n\nValid values are \"DEFAULT\" and \"SNI_ONLY\".","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"SniOnly","value":"SNI_ONLY"}]},"aws-native:iot:CaCertificateRegistrationConfig":{"properties":{"roleArn":{"type":"string","description":"The ARN of the role."},"templateBody":{"type":"string","description":"The template body."},"templateName":{"type":"string","description":"The name of the provisioning template."}},"type":"object"},"aws-native:iot:CaCertificateStatus":{"description":"The status of the CA certificate.\n\nValid values are \"ACTIVE\" and \"INACTIVE\".","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:iot:CaCertificateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iot:CertificateMode":{"description":"Specifies which mode of certificate registration to use with this resource. Valid options are DEFAULT with CaCertificatePem and CertificatePem, SNI_ONLY with CertificatePem, and Default with CertificateSigningRequest.\n\n`DEFAULT` : A certificate in `DEFAULT` mode is either generated by AWS IoT Core or registered with an issuer certificate authority (CA). Devices with certificates in `DEFAULT` mode aren't required to send the Server Name Indication (SNI) extension when connecting to AWS IoT Core . However, to use features such as custom domains and VPC endpoints, we recommend that you use the SNI extension when connecting to AWS IoT Core .\n\n`SNI_ONLY` : A certificate in `SNI_ONLY` mode is registered without an issuer CA. Devices with certificates in `SNI_ONLY` mode must send the SNI extension when connecting to AWS IoT Core .","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"SniOnly","value":"SNI_ONLY"}]},"aws-native:iot:CertificateProviderOperation":{"type":"string","enum":[{"name":"CreateCertificateFromCsr","value":"CreateCertificateFromCsr"}]},"aws-native:iot:CertificateProviderTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iot:CertificateStatus":{"description":"The status of the certificate.\n\nValid values are ACTIVE, INACTIVE, REVOKED, PENDING_TRANSFER, and PENDING_ACTIVATION.\n\nThe status value REGISTER_INACTIVE is deprecated and should not be used.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"},{"name":"Revoked","value":"REVOKED"},{"name":"PendingTransfer","value":"PENDING_TRANSFER"},{"name":"PendingActivation","value":"PENDING_ACTIVATION"}]},"aws-native:iot:CommandAwsJsonSubstitutionCommandPreprocessorConfig":{"properties":{"outputFormat":{"$ref":"#/types/aws-native:iot:CommandOutputFormat"}},"type":"object","required":["outputFormat"]},"aws-native:iot:CommandNamespace":{"description":"The namespace to which the command belongs.","type":"string","enum":[{"name":"AwsIoT","value":"AWS-IoT"},{"name":"AwsIoTFleetWise","value":"AWS-IoT-FleetWise"}]},"aws-native:iot:CommandOutputFormat":{"type":"string","enum":[{"name":"Json","value":"JSON"},{"name":"Cbor","value":"CBOR"}]},"aws-native:iot:CommandParameter":{"properties":{"defaultValue":{"$ref":"#/types/aws-native:iot:CommandParameterValue"},"description":{"type":"string"},"name":{"type":"string"},"type":{"$ref":"#/types/aws-native:iot:CommandParameterType"},"value":{"$ref":"#/types/aws-native:iot:CommandParameterValue"},"valueConditions":{"type":"array","items":{"$ref":"#/types/aws-native:iot:CommandParameterValueCondition"}}},"type":"object","required":["name"]},"aws-native:iot:CommandParameterType":{"type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Double","value":"DOUBLE"},{"name":"Long","value":"LONG"},{"name":"Unsignedlong","value":"UNSIGNEDLONG"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Binary","value":"BINARY"}]},"aws-native:iot:CommandParameterValue":{"properties":{"b":{"type":"boolean"},"bin":{"type":"string"},"d":{"type":"number"},"i":{"type":"integer"},"l":{"type":"string"},"s":{"type":"string"},"ul":{"type":"string"}},"type":"object"},"aws-native:iot:CommandParameterValueComparisonOperand":{"properties":{"number":{"type":"string"},"numberRange":{"$ref":"#/types/aws-native:iot:CommandParameterValueNumberRange"},"numbers":{"type":"array","items":{"type":"string"}},"string":{"type":"string"},"strings":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:iot:CommandParameterValueComparisonOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"LessThan","value":"LESS_THAN"},{"name":"LessThanEquals","value":"LESS_THAN_EQUALS"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"GreaterThanEquals","value":"GREATER_THAN_EQUALS"},{"name":"InSet","value":"IN_SET"},{"name":"NotInSet","value":"NOT_IN_SET"},{"name":"InRange","value":"IN_RANGE"},{"name":"NotInRange","value":"NOT_IN_RANGE"}]},"aws-native:iot:CommandParameterValueCondition":{"properties":{"comparisonOperator":{"$ref":"#/types/aws-native:iot:CommandParameterValueComparisonOperator"},"operand":{"$ref":"#/types/aws-native:iot:CommandParameterValueComparisonOperand"}},"type":"object","required":["comparisonOperator","operand"]},"aws-native:iot:CommandParameterValueNumberRange":{"properties":{"max":{"type":"string"},"min":{"type":"string"}},"type":"object","required":["max","min"]},"aws-native:iot:CommandPayload":{"properties":{"content":{"type":"string"},"contentType":{"type":"string"}},"type":"object"},"aws-native:iot:CommandPreprocessor":{"properties":{"awsJsonSubstitution":{"$ref":"#/types/aws-native:iot:CommandAwsJsonSubstitutionCommandPreprocessorConfig"}},"type":"object"},"aws-native:iot:CommandTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:ConfigurationDetailsProperties":{"properties":{"configurationStatus":{"$ref":"#/types/aws-native:iot:EncryptionConfigurationConfigurationDetailsPropertiesConfigurationStatus","description":"The health status of KMS key and AWS  access role. If either KMS key or AWS  access role is `UNHEALTHY` , the return value will be `UNHEALTHY` . To use a customer managed KMS key, the value of `configurationStatus` must be `HEALTHY` ."},"errorCode":{"type":"string","description":"The error code that indicates either the KMS key or the AWS  access role is `UNHEALTHY` . Valid values: `KMS_KEY_VALIDATION_ERROR` and `ROLE_VALIDATION_ERROR` ."},"errorMessage":{"type":"string","description":"The detailed error message that corresponds to the `errorCode` ."}},"type":"object"},"aws-native:iot:CustomMetricMetricType":{"description":"The type of the custom metric. Types include string-list, ip-address-list, number-list, and number.","type":"string","enum":[{"name":"StringList","value":"string-list"},{"name":"IpAddressList","value":"ip-address-list"},{"name":"NumberList","value":"number-list"},{"name":"Number","value":"number"}]},"aws-native:iot:CustomMetricTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:DimensionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:DimensionType":{"description":"Specifies the type of the dimension.","type":"string","enum":[{"name":"TopicFilter","value":"TOPIC_FILTER"}]},"aws-native:iot:DomainConfigurationApplicationProtocol":{"description":"An enumerated string that specifies the application-layer protocol.","type":"string","enum":[{"name":"SecureMqtt","value":"SECURE_MQTT"},{"name":"MqttWss","value":"MQTT_WSS"},{"name":"Https","value":"HTTPS"},{"name":"Default","value":"DEFAULT"}]},"aws-native:iot:DomainConfigurationAuthenticationType":{"description":"An enumerated string that specifies the authentication type.","type":"string","enum":[{"name":"AwsX509","value":"AWS_X509"},{"name":"CustomAuth","value":"CUSTOM_AUTH"},{"name":"AwsSigv4","value":"AWS_SIGV4"},{"name":"CustomAuthX509","value":"CUSTOM_AUTH_X509"},{"name":"Default","value":"DEFAULT"}]},"aws-native:iot:DomainConfigurationAuthorizerConfig":{"properties":{"allowAuthorizerOverride":{"type":"boolean","description":"A Boolean that specifies whether the domain configuration's authorization service can be overridden."},"defaultAuthorizerName":{"type":"string","description":"The name of the authorization service for a domain configuration."}},"type":"object"},"aws-native:iot:DomainConfigurationClientCertificateConfig":{"properties":{"clientCertificateCallbackArn":{"type":"string","description":"The ARN of the Lambda function that IoT invokes after mutual TLS authentication during the connection."}},"type":"object"},"aws-native:iot:DomainConfigurationDomainType":{"description":"The type of service delivered by the domain.","type":"string","enum":[{"name":"Endpoint","value":"ENDPOINT"},{"name":"AwsManaged","value":"AWS_MANAGED"},{"name":"CustomerManaged","value":"CUSTOMER_MANAGED"}]},"aws-native:iot:DomainConfigurationServerCertificateConfig":{"properties":{"enableOcspCheck":{"type":"boolean","description":"A Boolean value that indicates whether Online Certificate Status Protocol (OCSP) server certificate check is enabled or not. For more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide."},"ocspAuthorizedResponderArn":{"type":"string","description":"The Amazon Resource Name (ARN) for an X.509 certificate stored in ACM. If provided, AWS IoT Core will use this certificate to validate the signature of the received OCSP response. The OCSP responder must sign responses using either this authorized responder certificate or the issuing certificate, depending on whether the ARN is provided or not. The certificate must be in the same account and region as the domain configuration."},"ocspLambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) for a Lambda function that acts as a Request for Comments (RFC) 6960-compliant Online Certificate Status Protocol (OCSP) responder, supporting basic OCSP responses. The Lambda function accepts a base64-encoding of the OCSP request in the Distinguished Encoding Rules (DER) format. The Lambda function's response is also a base64-encoded OCSP response in the DER format. The response size must not exceed 4 kilobytes (KiB). The Lambda function must be in the same account and region as the domain configuration."}},"type":"object"},"aws-native:iot:DomainConfigurationServerCertificateSummary":{"properties":{"serverCertificateArn":{"type":"string","description":"The ARN of the server certificate."},"serverCertificateStatus":{"$ref":"#/types/aws-native:iot:DomainConfigurationServerCertificateSummaryServerCertificateStatus","description":"The status of the server certificate."},"serverCertificateStatusDetail":{"type":"string","description":"Details that explain the status of the server certificate."}},"type":"object"},"aws-native:iot:DomainConfigurationServerCertificateSummaryServerCertificateStatus":{"description":"The status of the server certificate.","type":"string","enum":[{"name":"Invalid","value":"INVALID"},{"name":"Valid","value":"VALID"}]},"aws-native:iot:DomainConfigurationServiceType":{"description":"The type of service delivered by the endpoint.\n\n\u003e AWS IoT Core currently supports only the `DATA` service type.","type":"string","enum":[{"name":"Data","value":"DATA"},{"name":"CredentialProvider","value":"CREDENTIAL_PROVIDER"},{"name":"Jobs","value":"JOBS"}]},"aws-native:iot:DomainConfigurationStatus":{"description":"The status to which the domain configuration should be updated.\n\nValid values: `ENABLED` | `DISABLED`","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iot:DomainConfigurationTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:DomainConfigurationTlsConfig":{"properties":{"securityPolicy":{"type":"string","description":"The security policy for a domain configuration. For more information, see [Security policies](https://docs.aws.amazon.com/iot/latest/developerguide/transport-security.html#tls-policy-table) in the *AWS IoT Core developer guide* ."}},"type":"object"},"aws-native:iot:EncryptionConfigurationConfigurationDetailsPropertiesConfigurationStatus":{"description":"The health status of KMS key and AWS  access role. If either KMS key or AWS  access role is `UNHEALTHY` , the return value will be `UNHEALTHY` . To use a customer managed KMS key, the value of `configurationStatus` must be `HEALTHY` .","type":"string","enum":[{"name":"Healthy","value":"HEALTHY"},{"name":"Unhealthy","value":"UNHEALTHY"}]},"aws-native:iot:EncryptionConfigurationEncryptionType":{"description":"The type of the KMS key.","type":"string","enum":[{"name":"CustomerManagedKmsKey","value":"CUSTOMER_MANAGED_KMS_KEY"},{"name":"AwsOwnedKmsKey","value":"AWS_OWNED_KMS_KEY"}]},"aws-native:iot:FleetMetricAggregationType":{"description":"Aggregation types supported by Fleet Indexing","properties":{"name":{"type":"string","description":"Fleet Indexing aggregation type names such as Statistics, Percentiles and Cardinality"},"values":{"type":"array","items":{"type":"string"},"description":"Fleet Indexing aggregation type values"}},"type":"object","required":["name","values"]},"aws-native:iot:FleetMetricTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The tag's key"},"value":{"type":"string","description":"The tag's value"}},"type":"object","required":["key","value"]},"aws-native:iot:JobExecutionsRetryConfigProperties":{"description":"Allows you to create the criteria to retry a job.","properties":{"retryCriteriaList":{"type":"array","items":{"$ref":"#/types/aws-native:iot:JobTemplateRetryCriteria"},"description":"The list of criteria that determines how many retries are allowed for each failure type for a job."}},"type":"object"},"aws-native:iot:JobExecutionsRolloutConfigProperties":{"description":"Allows you to create a staged rollout of a job.","properties":{"exponentialRolloutRate":{"$ref":"#/types/aws-native:iot:JobTemplateExponentialRolloutRate","description":"The rate of increase for a job rollout. This parameter allows you to define an exponential rate for a job rollout."},"maximumPerMinute":{"type":"integer","description":"The maximum number of things that will be notified of a pending job, per minute. This parameter allows you to create a staged rollout."}},"type":"object"},"aws-native:iot:JobTemplateAbortCriteria":{"description":"The criteria that determine when and how a job abort takes place.","properties":{"action":{"$ref":"#/types/aws-native:iot:JobTemplateAction","description":"The type of job action to take to initiate the job abort."},"failureType":{"$ref":"#/types/aws-native:iot:JobTemplateFailureType","description":"The type of job execution failures that can initiate a job abort."},"minNumberOfExecutedThings":{"type":"integer","description":"The minimum number of things which must receive job execution notifications before the job can be aborted."},"thresholdPercentage":{"type":"number","description":"The minimum percentage of job execution failures that must occur to initiate the job abort."}},"type":"object","required":["action","failureType","minNumberOfExecutedThings","thresholdPercentage"]},"aws-native:iot:JobTemplateAction":{"type":"string","enum":[{"name":"Cancel","value":"CANCEL"}]},"aws-native:iot:JobTemplateExponentialRolloutRate":{"description":"Allows you to create an exponential rate of rollout for a job.","properties":{"baseRatePerMinute":{"type":"integer","description":"The minimum number of things that will be notified of a pending job, per minute at the start of job rollout. This parameter allows you to define the initial rate of rollout."},"incrementFactor":{"type":"number","description":"The exponential factor to increase the rate of rollout for a job."},"rateIncreaseCriteria":{"$ref":"#/types/aws-native:iot:JobTemplateRateIncreaseCriteria","description":"The criteria to initiate the increase in rate of rollout for a job."}},"type":"object","required":["baseRatePerMinute","incrementFactor","rateIncreaseCriteria"]},"aws-native:iot:JobTemplateFailureType":{"type":"string","enum":[{"name":"Failed","value":"FAILED"},{"name":"Rejected","value":"REJECTED"},{"name":"TimedOut","value":"TIMED_OUT"},{"name":"All","value":"ALL"}]},"aws-native:iot:JobTemplateJobRetryFailureType":{"type":"string","enum":[{"name":"Failed","value":"FAILED"},{"name":"TimedOut","value":"TIMED_OUT"},{"name":"All","value":"ALL"}]},"aws-native:iot:JobTemplateMaintenanceWindow":{"description":"Specifies a start time and duration for a scheduled Job.","properties":{"durationInMinutes":{"type":"integer","description":"Displays the duration of the next maintenance window."},"startTime":{"type":"string","description":"Displays the start time of the next maintenance window."}},"type":"object"},"aws-native:iot:JobTemplateRateIncreaseCriteria":{"properties":{"numberOfNotifiedThings":{"type":"integer","description":"The threshold for number of notified things that will initiate the increase in rate of rollout."},"numberOfSucceededThings":{"type":"integer","description":"The threshold for number of succeeded things that will initiate the increase in rate of rollout."}},"type":"object"},"aws-native:iot:JobTemplateRetryCriteria":{"description":"Specifies how many times a failure type should be retried.","properties":{"failureType":{"$ref":"#/types/aws-native:iot:JobTemplateJobRetryFailureType","description":"The type of job execution failures that can initiate a job retry."},"numberOfRetries":{"type":"integer","description":"The number of retries allowed for a failure type for the job."}},"type":"object"},"aws-native:iot:JobTemplateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:LoggingDefaultLogLevel":{"description":"The log level to use. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED.","type":"string","enum":[{"name":"Error","value":"ERROR"},{"name":"Warn","value":"WARN"},{"name":"Info","value":"INFO"},{"name":"Debug","value":"DEBUG"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iot:LoggingEventConfiguration":{"description":"Configuration for event-based logging that specifies which event types to log and their logging settings. Used for account-level logging overrides.","properties":{"eventType":{"type":"string","description":"The type of event to log. These include event types like Connect, Publish, and Disconnect."},"logDestination":{"type":"string","description":"CloudWatch Log Group for event-based logging. Specifies where log events should be sent. The log destination for event-based logging overrides default Log Group for the specified event type and applies to all resources associated with that event."},"logLevel":{"$ref":"#/types/aws-native:iot:LoggingEventConfigurationLogLevel","description":"The logging level for the specified event type. Determines the verbosity of log messages generated for this event type."}},"type":"object","required":["eventType"]},"aws-native:iot:LoggingEventConfigurationLogLevel":{"description":"The logging level for the specified event type. Determines the verbosity of log messages generated for this event type.","type":"string","enum":[{"name":"Error","value":"ERROR"},{"name":"Warn","value":"WARN"},{"name":"Info","value":"INFO"},{"name":"Debug","value":"DEBUG"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iot:MetricsExportConfigProperties":{"description":"A structure containing the mqtt topic for metrics export.","properties":{"mqttTopic":{"type":"string","description":"The topic for metrics export."},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to publish to mqtt topic."}},"type":"object","required":["mqttTopic","roleArn"]},"aws-native:iot:MitigationActionActionParams":{"description":"The set of parameters for this mitigation action. You can specify only one type of parameter (in other words, you can apply only one action for each defined mitigation action).","properties":{"addThingsToThingGroupParams":{"$ref":"#/types/aws-native:iot:MitigationActionAddThingsToThingGroupParams","description":"Specifies the group to which you want to add the devices."},"enableIoTLoggingParams":{"$ref":"#/types/aws-native:iot:MitigationActionEnableIoTLoggingParams","description":"Specifies the logging level and the role with permissions for logging. You cannot specify a logging level of `DISABLED` ."},"publishFindingToSnsParams":{"$ref":"#/types/aws-native:iot:MitigationActionPublishFindingToSnsParams","description":"Specifies the topic to which the finding should be published."},"replaceDefaultPolicyVersionParams":{"$ref":"#/types/aws-native:iot:MitigationActionReplaceDefaultPolicyVersionParams","description":"Replaces the policy version with a default or blank policy. You specify the template name. Only a value of `BLANK_POLICY` is currently supported."},"updateCaCertificateParams":{"$ref":"#/types/aws-native:iot:MitigationActionUpdateCaCertificateParams","description":"Specifies the new state for the CA certificate. Only a value of `DEACTIVATE` is currently supported."},"updateDeviceCertificateParams":{"$ref":"#/types/aws-native:iot:MitigationActionUpdateDeviceCertificateParams","description":"Specifies the new state for a device certificate. Only a value of `DEACTIVATE` is currently supported."}},"type":"object"},"aws-native:iot:MitigationActionAddThingsToThingGroupParams":{"description":"Parameters to define a mitigation action that moves devices associated with a certificate to one or more specified thing groups, typically for quarantine.","properties":{"overrideDynamicGroups":{"type":"boolean","description":"Specifies if this mitigation action can move the things that triggered the mitigation action out of one or more dynamic thing groups."},"thingGroupNames":{"type":"array","items":{"type":"string"},"description":"The list of groups to which you want to add the things that triggered the mitigation action."}},"type":"object","required":["thingGroupNames"]},"aws-native:iot:MitigationActionEnableIoTLoggingParams":{"description":"Parameters to define a mitigation action that enables AWS IoT logging at a specified level of detail.","properties":{"logLevel":{"$ref":"#/types/aws-native:iot:MitigationActionEnableIoTLoggingParamsLogLevel","description":" Specifies which types of information are logged."},"roleArnForLogging":{"type":"string","description":" The ARN of the IAM role used for logging."}},"type":"object","required":["logLevel","roleArnForLogging"]},"aws-native:iot:MitigationActionEnableIoTLoggingParamsLogLevel":{"description":" Specifies which types of information are logged.","type":"string","enum":[{"name":"Debug","value":"DEBUG"},{"name":"Info","value":"INFO"},{"name":"Error","value":"ERROR"},{"name":"Warn","value":"WARN"},{"name":"UnsetValue","value":"UNSET_VALUE"}]},"aws-native:iot:MitigationActionPublishFindingToSnsParams":{"description":"Parameters, to define a mitigation action that publishes findings to Amazon SNS. You can implement your own custom actions in response to the Amazon SNS messages.","properties":{"topicArn":{"type":"string","description":"The ARN of the topic to which you want to publish the findings."}},"type":"object","required":["topicArn"]},"aws-native:iot:MitigationActionReplaceDefaultPolicyVersionParams":{"description":"Parameters to define a mitigation action that adds a blank policy to restrict permissions.","properties":{"templateName":{"$ref":"#/types/aws-native:iot:MitigationActionReplaceDefaultPolicyVersionParamsTemplateName","description":"The name of the template to be applied. The only supported value is `BLANK_POLICY` ."}},"type":"object","required":["templateName"]},"aws-native:iot:MitigationActionReplaceDefaultPolicyVersionParamsTemplateName":{"description":"The name of the template to be applied. The only supported value is `BLANK_POLICY` .","type":"string","enum":[{"name":"BlankPolicy","value":"BLANK_POLICY"},{"name":"UnsetValue","value":"UNSET_VALUE"}]},"aws-native:iot:MitigationActionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:MitigationActionUpdateCaCertificateParams":{"description":"Parameters to define a mitigation action that changes the state of the CA certificate to inactive.","properties":{"action":{"$ref":"#/types/aws-native:iot:MitigationActionUpdateCaCertificateParamsAction","description":"The action that you want to apply to the CA certificate. The only supported value is `DEACTIVATE` ."}},"type":"object","required":["action"]},"aws-native:iot:MitigationActionUpdateCaCertificateParamsAction":{"description":"The action that you want to apply to the CA certificate. The only supported value is `DEACTIVATE` .","type":"string","enum":[{"name":"Deactivate","value":"DEACTIVATE"},{"name":"UnsetValue","value":"UNSET_VALUE"}]},"aws-native:iot:MitigationActionUpdateDeviceCertificateParams":{"description":"Parameters to define a mitigation action that changes the state of the device certificate to inactive.","properties":{"action":{"$ref":"#/types/aws-native:iot:MitigationActionUpdateDeviceCertificateParamsAction","description":"The action that you want to apply to the device certificate. The only supported value is `DEACTIVATE` ."}},"type":"object","required":["action"]},"aws-native:iot:MitigationActionUpdateDeviceCertificateParamsAction":{"description":"The action that you want to apply to the device certificate. The only supported value is `DEACTIVATE` .","type":"string","enum":[{"name":"Deactivate","value":"DEACTIVATE"},{"name":"UnsetValue","value":"UNSET_VALUE"}]},"aws-native:iot:PolicyTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:PresignedUrlConfigProperties":{"description":"Configuration for pre-signed S3 URLs.","properties":{"expiresInSec":{"type":"integer","description":"How long (in seconds) pre-signed URLs are valid. Valid values are 60 - 3600, the default value is 3600 seconds. Pre-signed URLs are generated when Jobs receives an MQTT request for the job document."},"roleArn":{"type":"string","description":"The ARN of an IAM role that grants grants permission to download files from the S3 bucket where the job data/updates are stored. The role must also grant permission for IoT to download the files.\n\n\u003e For information about addressing the confused deputy problem, see [cross-service confused deputy prevention](https://docs.aws.amazon.com/iot/latest/developerguide/cross-service-confused-deputy-prevention.html) in the *AWS IoT Core developer guide* ."}},"type":"object","required":["roleArn"]},"aws-native:iot:ProvisioningTemplateProvisioningHook":{"properties":{"payloadVersion":{"type":"string","description":"The payload that was sent to the target function. The valid payload is `\"2020-04-01\"` ."},"targetArn":{"type":"string","description":"The ARN of the target function."}},"type":"object"},"aws-native:iot:ProvisioningTemplateTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:ProvisioningTemplateTemplateType":{"description":"The type of the provisioning template.","type":"string","enum":[{"name":"FleetProvisioning","value":"FLEET_PROVISIONING"},{"name":"Jitp","value":"JITP"}]},"aws-native:iot:ResourceSpecificLoggingLogLevel":{"description":"The log level for a specific target. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED.","type":"string","enum":[{"name":"Error","value":"ERROR"},{"name":"Warn","value":"WARN"},{"name":"Info","value":"INFO"},{"name":"Debug","value":"DEBUG"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iot:ResourceSpecificLoggingTargetType":{"description":"The target type. Value must be THING_GROUP, CLIENT_ID, SOURCE_IP, PRINCIPAL_ID, or EVENT_TYPE.","type":"string","enum":[{"name":"ThingGroup","value":"THING_GROUP"},{"name":"ClientId","value":"CLIENT_ID"},{"name":"SourceIp","value":"SOURCE_IP"},{"name":"PrincipalId","value":"PRINCIPAL_ID"},{"name":"EventType","value":"EVENT_TYPE"}]},"aws-native:iot:RoleAliasTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iot:ScheduledAuditDayOfWeek":{"description":"The day of the week on which the scheduled audit takes place. Can be one of SUN, MON, TUE,WED, THU, FRI, or SAT. This field is required if the frequency parameter is set to WEEKLY or BIWEEKLY.","type":"string","enum":[{"name":"Sun","value":"SUN"},{"name":"Mon","value":"MON"},{"name":"Tue","value":"TUE"},{"name":"Wed","value":"WED"},{"name":"Thu","value":"THU"},{"name":"Fri","value":"FRI"},{"name":"Sat","value":"SAT"},{"name":"UnsetValue","value":"UNSET_VALUE"}]},"aws-native:iot:ScheduledAuditFrequency":{"description":"How often the scheduled audit takes place. Can be one of DAILY, WEEKLY, BIWEEKLY, or MONTHLY.","type":"string","enum":[{"name":"Daily","value":"DAILY"},{"name":"Weekly","value":"WEEKLY"},{"name":"Biweekly","value":"BIWEEKLY"},{"name":"Monthly","value":"MONTHLY"}]},"aws-native:iot:ScheduledAuditTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:SecurityProfileAlertTarget":{"description":"A structure containing the alert target ARN and the role ARN.","properties":{"alertTargetArn":{"type":"string","description":"The ARN of the notification target to which alerts are sent."},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to send alerts to the notification target."}},"type":"object","required":["alertTargetArn","roleArn"]},"aws-native:iot:SecurityProfileBehavior":{"description":"A security profile behavior.","properties":{"criteria":{"$ref":"#/types/aws-native:iot:SecurityProfileBehaviorCriteria","description":"The criteria that determine if a device is behaving normally in regard to the `metric` .\n\n\u003e In the AWS IoT console, you can choose to be sent an alert through Amazon SNS when AWS IoT Device Defender detects that a device is behaving anomalously."},"exportMetric":{"type":"boolean","description":"Value indicates exporting metrics related to the behavior when it is true."},"metric":{"type":"string","description":"What is measured by the behavior."},"metricDimension":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricDimension","description":"The dimension of the metric."},"name":{"type":"string","description":"The name for the behavior."},"suppressAlerts":{"type":"boolean","description":"Manage Detect alarm SNS notifications by setting behavior notification to on or suppressed. Detect will continue to performing device behavior evaluations. However, suppressed alarms wouldn't be forwarded for SNS notification."}},"type":"object","required":["name"]},"aws-native:iot:SecurityProfileBehaviorCriteria":{"description":"The criteria by which the behavior is determined to be normal.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:iot:SecurityProfileBehaviorCriteriaComparisonOperator","description":"The operator that relates the thing measured (metric) to the criteria (containing a value or statisticalThreshold)."},"consecutiveDatapointsToAlarm":{"type":"integer","description":"If a device is in violation of the behavior for the specified number of consecutive datapoints, an alarm occurs. If not specified, the default is 1."},"consecutiveDatapointsToClear":{"type":"integer","description":"If an alarm has occurred and the offending device is no longer in violation of the behavior for the specified number of consecutive datapoints, the alarm is cleared. If not specified, the default is 1."},"durationSeconds":{"type":"integer","description":"Use this to specify the time duration over which the behavior is evaluated."},"mlDetectionConfig":{"$ref":"#/types/aws-native:iot:SecurityProfileMachineLearningDetectionConfig","description":"The confidence level of the detection model."},"statisticalThreshold":{"$ref":"#/types/aws-native:iot:SecurityProfileStatisticalThreshold","description":"A statistical ranking (percentile)that indicates a threshold value by which a behavior is determined to be in compliance or in violation of the behavior."},"value":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricValue","description":"The value to be compared with the `metric` ."}},"type":"object"},"aws-native:iot:SecurityProfileBehaviorCriteriaComparisonOperator":{"description":"The operator that relates the thing measured (metric) to the criteria (containing a value or statisticalThreshold).","type":"string","enum":[{"name":"LessThan","value":"less-than"},{"name":"LessThanEquals","value":"less-than-equals"},{"name":"GreaterThan","value":"greater-than"},{"name":"GreaterThanEquals","value":"greater-than-equals"},{"name":"InCidrSet","value":"in-cidr-set"},{"name":"NotInCidrSet","value":"not-in-cidr-set"},{"name":"InPortSet","value":"in-port-set"},{"name":"NotInPortSet","value":"not-in-port-set"},{"name":"InSet","value":"in-set"},{"name":"NotInSet","value":"not-in-set"}]},"aws-native:iot:SecurityProfileMachineLearningDetectionConfig":{"description":"The configuration of an ML Detect Security Profile.","properties":{"confidenceLevel":{"$ref":"#/types/aws-native:iot:SecurityProfileMachineLearningDetectionConfigConfidenceLevel","description":"The sensitivity of anomalous behavior evaluation. Can be Low, Medium, or High."}},"type":"object"},"aws-native:iot:SecurityProfileMachineLearningDetectionConfigConfidenceLevel":{"description":"The sensitivity of anomalous behavior evaluation. Can be Low, Medium, or High.","type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:iot:SecurityProfileMetricDimension":{"description":"The dimension of a metric.","properties":{"dimensionName":{"type":"string","description":"A unique identifier for the dimension."},"operator":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricDimensionOperator","description":"Defines how the dimensionValues of a dimension are interpreted."}},"type":"object","required":["dimensionName"]},"aws-native:iot:SecurityProfileMetricDimensionOperator":{"description":"Defines how the dimensionValues of a dimension are interpreted.","type":"string","enum":[{"name":"In","value":"IN"},{"name":"NotIn","value":"NOT_IN"}]},"aws-native:iot:SecurityProfileMetricToRetain":{"description":"The metric you want to retain. Dimensions are optional.","properties":{"exportMetric":{"type":"boolean","description":"The value indicates exporting metrics related to the `MetricToRetain` when it's true."},"metric":{"type":"string","description":"What is measured by the behavior."},"metricDimension":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricDimension","description":"The dimension of the metric."}},"type":"object","required":["metric"]},"aws-native:iot:SecurityProfileMetricValue":{"description":"The value to be compared with the metric.","properties":{"cidrs":{"type":"array","items":{"type":"string"},"description":"If the ComparisonOperator calls for a set of CIDRs, use this to specify that set to be compared with the metric."},"count":{"type":"string","description":"If the ComparisonOperator calls for a numeric value, use this to specify that (integer) numeric value to be compared with the metric."},"number":{"type":"number","description":"The numeral value of a metric."},"numbers":{"type":"array","items":{"type":"number"},"description":"The numeral values of a metric."},"ports":{"type":"array","items":{"type":"integer"},"description":"If the ComparisonOperator calls for a set of ports, use this to specify that set to be compared with the metric."},"strings":{"type":"array","items":{"type":"string"},"description":"The string values of a metric."}},"type":"object"},"aws-native:iot:SecurityProfileStatisticalThreshold":{"description":"A statistical ranking (percentile) which indicates a threshold value by which a behavior is determined to be in compliance or in violation of the behavior.","properties":{"statistic":{"$ref":"#/types/aws-native:iot:SecurityProfileStatisticalThresholdStatistic","description":"The percentile which resolves to a threshold value by which compliance with a behavior is determined"}},"type":"object"},"aws-native:iot:SecurityProfileStatisticalThresholdStatistic":{"description":"The percentile which resolves to a threshold value by which compliance with a behavior is determined","type":"string","enum":[{"name":"Average","value":"Average"},{"name":"P0","value":"p0"},{"name":"P01","value":"p0.1"},{"name":"P001","value":"p0.01"},{"name":"P1","value":"p1"},{"name":"P10","value":"p10"},{"name":"P50","value":"p50"},{"name":"P90","value":"p90"},{"name":"P99","value":"p99"},{"name":"P999","value":"p99.9"},{"name":"P9999","value":"p99.99"},{"name":"P100","value":"p100"}]},"aws-native:iot:SecurityProfileTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:SoftwarePackageTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:iot:SoftwarePackageVersionPackageVersionArtifact":{"description":"The artifact location of the package version","properties":{"s3Location":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionS3Location"}},"type":"object","required":["s3Location"]},"aws-native:iot:SoftwarePackageVersionPackageVersionStatus":{"type":"string","enum":[{"name":"Draft","value":"DRAFT"},{"name":"Published","value":"PUBLISHED"},{"name":"Deprecated","value":"DEPRECATED"}]},"aws-native:iot:SoftwarePackageVersionS3Location":{"description":"The Amazon S3 location","properties":{"bucket":{"type":"string","description":"The S3 bucket"},"key":{"type":"string","description":"The S3 key"},"version":{"type":"string","description":"The S3 version"}},"type":"object","required":["bucket","key","version"]},"aws-native:iot:SoftwarePackageVersionSbom":{"description":"The sbom zip archive location of the package version","properties":{"s3Location":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionS3Location"}},"type":"object","required":["s3Location"]},"aws-native:iot:SoftwarePackageVersionSbomValidationStatus":{"description":"The validation status of the Sbom file","type":"string","enum":[{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Failed","value":"FAILED"},{"name":"Succeeded","value":"SUCCEEDED"},{"name":"Empty","value":""}]},"aws-native:iot:SoftwarePackageVersionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:iot:ThingAttributePayload":{"properties":{"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"A JSON string containing up to three key-value pair in JSON format. For example:\n\n`{\\\"attributes\\\":{\\\"string1\\\":\\\"string2\\\"}}`"}},"type":"object"},"aws-native:iot:ThingGroupAttributePayload":{"properties":{"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"A JSON string containing up to three key-value pair in JSON format. For example:\n\n`{\\\"attributes\\\":{\\\"string1\\\":\\\"string2\\\"}}`"}},"type":"object"},"aws-native:iot:ThingGroupPropertiesProperties":{"description":"Thing group properties.","properties":{"attributePayload":{"$ref":"#/types/aws-native:iot:ThingGroupAttributePayload","description":"The thing group attributes in JSON format."},"thingGroupDescription":{"type":"string","description":"The thing group description."}},"type":"object"},"aws-native:iot:ThingGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"Tag key (1-128 chars). No 'aws:' prefix. Allows: [A-Za-z0-9 _.:/=+-]"},"value":{"type":"string","description":"Tag value (1-256 chars). No 'aws:' prefix. Allows: [A-Za-z0-9 _.:/=+-]"}},"type":"object","required":["key","value"]},"aws-native:iot:ThingTypePropagatingAttribute":{"properties":{"connectionAttribute":{"$ref":"#/types/aws-native:iot:ThingTypePropagatingAttributeConnectionAttribute","description":"The attribute associated with the connection details."},"thingAttribute":{"type":"string","description":"The thing attribute that is propagating for MQTT 5 message enrichment."},"userPropertyKey":{"type":"string","description":"The key of the MQTT 5 user property, which is a key-value pair."}},"type":"object","required":["userPropertyKey"]},"aws-native:iot:ThingTypePropagatingAttributeConnectionAttribute":{"description":"The attribute associated with the connection details.","type":"string","enum":[{"name":"IotClientId","value":"iot:ClientId"},{"name":"IotThingThingName","value":"iot:Thing.ThingName"}]},"aws-native:iot:ThingTypePropertiesProperties":{"description":"The thing type properties for the thing type to create. It contains information about the new thing type including a description, a list of searchable thing attribute names, and a list of propagating attributes. After a thing type is created, you can only update `Mqtt5Configuration` .","properties":{"mqtt5Configuration":{"$ref":"#/types/aws-native:iot:ThingTypePropertiesPropertiesMqtt5ConfigurationProperties","description":"The configuration to add user-defined properties to enrich MQTT 5 messages."},"searchableAttributes":{"type":"array","items":{"type":"string"},"description":"A list of searchable thing attribute names."},"thingTypeDescription":{"type":"string","description":"The description of the thing type."}},"type":"object"},"aws-native:iot:ThingTypePropertiesPropertiesMqtt5ConfigurationProperties":{"description":"The configuration to add user-defined properties to enrich MQTT 5 messages.","properties":{"propagatingAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:iot:ThingTypePropagatingAttribute"}}},"type":"object"},"aws-native:iot:ThingTypeTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"Tag key (1-128 chars). No 'aws:' prefix. Allows: [A-Za-z0-9 _.:/=+-]"},"value":{"type":"string","description":"Tag value (1-256 chars). No 'aws:' prefix. Allows: [A-Za-z0-9 _.:/=+-]"}},"type":"object","required":["key","value"]},"aws-native:iot:TimeoutConfigProperties":{"description":"Specifies the amount of time each device has to finish its execution of the job.","properties":{"inProgressTimeoutInMinutes":{"type":"integer","description":"Specifies the amount of time, in minutes, this device has to finish execution of this job. The timeout interval can be anywhere between 1 minute and 7 days (1 to 10080 minutes). The in progress timer can't be updated and will apply to all job executions for the job. Whenever a job execution remains in the IN_PROGRESS status for longer than this interval, the job execution will fail and switch to the terminal `TIMED_OUT` status."}},"type":"object","required":["inProgressTimeoutInMinutes"]},"aws-native:iot:TopicRuleAction":{"properties":{"cloudwatchAlarm":{"$ref":"#/types/aws-native:iot:TopicRuleCloudwatchAlarmAction","description":"Change the state of a CloudWatch alarm."},"cloudwatchLogs":{"$ref":"#/types/aws-native:iot:TopicRuleCloudwatchLogsAction","description":"Sends data to CloudWatch."},"cloudwatchMetric":{"$ref":"#/types/aws-native:iot:TopicRuleCloudwatchMetricAction","description":"Capture a CloudWatch metric."},"dynamoDBv2":{"$ref":"#/types/aws-native:iot:TopicRuleDynamoDBv2Action","description":"Write to a DynamoDB table. This is a new version of the DynamoDB action. It allows you to write each attribute in an MQTT message payload into a separate DynamoDB column."},"dynamoDb":{"$ref":"#/types/aws-native:iot:TopicRuleDynamoDbAction","description":"Write to a DynamoDB table."},"elasticsearch":{"$ref":"#/types/aws-native:iot:TopicRuleElasticsearchAction","description":"Write data to an Amazon OpenSearch Service domain.\n\n\u003e The `Elasticsearch` action can only be used by existing rule actions. To create a new rule action or to update an existing rule action, use the `OpenSearch` rule action instead. For more information, see [OpenSearchAction](https://docs.aws.amazon.com//iot/latest/apireference/API_OpenSearchAction.html) ."},"firehose":{"$ref":"#/types/aws-native:iot:TopicRuleFirehoseAction","description":"Write to an Amazon Kinesis Firehose stream."},"http":{"$ref":"#/types/aws-native:iot:TopicRuleHttpAction","description":"Send data to an HTTPS endpoint."},"iotAnalytics":{"$ref":"#/types/aws-native:iot:TopicRuleIotAnalyticsAction","description":"Sends message data to an AWS IoT Analytics channel."},"iotEvents":{"$ref":"#/types/aws-native:iot:TopicRuleIotEventsAction","description":"Sends an input to an AWS IoT Events detector."},"iotSiteWise":{"$ref":"#/types/aws-native:iot:TopicRuleIotSiteWiseAction","description":"Sends data from the MQTT message that triggered the rule to AWS IoT SiteWise asset properties."},"kafka":{"$ref":"#/types/aws-native:iot:TopicRuleKafkaAction","description":"Send messages to an Amazon Managed Streaming for Apache Kafka (Amazon MSK) or self-managed Apache Kafka cluster."},"kinesis":{"$ref":"#/types/aws-native:iot:TopicRuleKinesisAction","description":"Write data to an Amazon Kinesis stream."},"lambda":{"$ref":"#/types/aws-native:iot:TopicRuleLambdaAction","description":"Invoke a Lambda function."},"location":{"$ref":"#/types/aws-native:iot:TopicRuleLocationAction","description":"Sends device location data to [Amazon Location Service](https://docs.aws.amazon.com//location/latest/developerguide/welcome.html) ."},"openSearch":{"$ref":"#/types/aws-native:iot:TopicRuleOpenSearchAction","description":"Write data to an Amazon OpenSearch Service domain."},"republish":{"$ref":"#/types/aws-native:iot:TopicRuleRepublishAction","description":"Publish to another MQTT topic."},"s3":{"$ref":"#/types/aws-native:iot:TopicRuleS3Action","description":"Write to an Amazon S3 bucket."},"sns":{"$ref":"#/types/aws-native:iot:TopicRuleSnsAction","description":"Publish to an Amazon SNS topic."},"sqs":{"$ref":"#/types/aws-native:iot:TopicRuleSqsAction","description":"Publish to an Amazon SQS queue."},"stepFunctions":{"$ref":"#/types/aws-native:iot:TopicRuleStepFunctionsAction","description":"Starts execution of a Step Functions state machine."},"timestream":{"$ref":"#/types/aws-native:iot:TopicRuleTimestreamAction","description":"Writes attributes from an MQTT message."}},"type":"object"},"aws-native:iot:TopicRuleAssetPropertyTimestamp":{"properties":{"offsetInNanos":{"type":"string","description":"Optional. A string that contains the nanosecond time offset. Accepts substitution templates."},"timeInSeconds":{"type":"string","description":"A string that contains the time in seconds since epoch. Accepts substitution templates."}},"type":"object","required":["timeInSeconds"]},"aws-native:iot:TopicRuleAssetPropertyValue":{"properties":{"quality":{"type":"string","description":"Optional. A string that describes the quality of the value. Accepts substitution templates. Must be `GOOD` , `BAD` , or `UNCERTAIN` ."},"timestamp":{"$ref":"#/types/aws-native:iot:TopicRuleAssetPropertyTimestamp","description":"The asset property value timestamp."},"value":{"$ref":"#/types/aws-native:iot:TopicRuleAssetPropertyVariant","description":"The value of the asset property."}},"type":"object","required":["timestamp","value"]},"aws-native:iot:TopicRuleAssetPropertyVariant":{"properties":{"booleanValue":{"type":"string","description":"Optional. A string that contains the boolean value ( `true` or `false` ) of the value entry. Accepts substitution templates."},"doubleValue":{"type":"string","description":"Optional. A string that contains the double value of the value entry. Accepts substitution templates."},"integerValue":{"type":"string","description":"Optional. A string that contains the integer value of the value entry. Accepts substitution templates."},"stringValue":{"type":"string","description":"Optional. The string value of the value entry. Accepts substitution templates."}},"type":"object"},"aws-native:iot:TopicRuleBatchConfig":{"properties":{"maxBatchOpenMs":{"type":"integer"},"maxBatchSize":{"type":"integer"},"maxBatchSizeBytes":{"type":"integer"}},"type":"object"},"aws-native:iot:TopicRuleCannedAccessControlList":{"type":"string","enum":[{"name":"Private","value":"private"},{"name":"PublicRead","value":"public-read"},{"name":"PublicReadWrite","value":"public-read-write"},{"name":"AwsExecRead","value":"aws-exec-read"},{"name":"AuthenticatedRead","value":"authenticated-read"},{"name":"BucketOwnerRead","value":"bucket-owner-read"},{"name":"BucketOwnerFullControl","value":"bucket-owner-full-control"},{"name":"LogDeliveryWrite","value":"log-delivery-write"}]},"aws-native:iot:TopicRuleCloudwatchAlarmAction":{"properties":{"alarmName":{"type":"string","description":"The CloudWatch alarm name."},"roleArn":{"type":"string","description":"The IAM role that allows access to the CloudWatch alarm."},"stateReason":{"type":"string","description":"The reason for the alarm change."},"stateValue":{"type":"string","description":"The value of the alarm state. Acceptable values are: OK, ALARM, INSUFFICIENT_DATA."}},"type":"object","required":["alarmName","roleArn","stateReason","stateValue"]},"aws-native:iot:TopicRuleCloudwatchLogsAction":{"properties":{"batchMode":{"type":"boolean","description":"Indicates whether batches of log records will be extracted and uploaded into CloudWatch."},"logGroupName":{"type":"string","description":"The CloudWatch log name."},"roleArn":{"type":"string","description":"The IAM role that allows access to the CloudWatch log."}},"type":"object","required":["logGroupName","roleArn"]},"aws-native:iot:TopicRuleCloudwatchMetricAction":{"properties":{"metricName":{"type":"string","description":"The CloudWatch metric name."},"metricNamespace":{"type":"string","description":"The CloudWatch metric namespace name."},"metricTimestamp":{"type":"string","description":"An optional [Unix timestamp](https://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html#about_timestamp) ."},"metricUnit":{"type":"string","description":"The [metric unit](https://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html#Unit) supported by CloudWatch."},"metricValue":{"type":"string","description":"The CloudWatch metric value."},"roleArn":{"type":"string","description":"The IAM role that allows access to the CloudWatch metric."}},"type":"object","required":["metricName","metricNamespace","metricUnit","metricValue","roleArn"]},"aws-native:iot:TopicRuleDestinationHttpUrlDestinationSummary":{"properties":{"confirmationUrl":{"type":"string","description":"The URL used to confirm the HTTP topic rule destination URL."}},"type":"object"},"aws-native:iot:TopicRuleDestinationStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iot:TopicRuleDestinationVpcDestinationProperties":{"properties":{"roleArn":{"type":"string","description":"The ARN of a role that has permission to create and attach to elastic network interfaces (ENIs)."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups of the VPC destination."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnet IDs of the VPC destination."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"type":"object"},"aws-native:iot:TopicRuleDynamoDBv2Action":{"properties":{"putItem":{"$ref":"#/types/aws-native:iot:TopicRulePutItemInput","description":"Specifies the DynamoDB table to which the message data will be written. For example:\n\n`{ \"dynamoDBv2\": { \"roleArn\": \"aws:iam:12341251:my-role\" \"putItem\": { \"tableName\": \"my-table\" } } }`\n\nEach attribute in the message payload will be written to a separate column in the DynamoDB database."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access to the DynamoDB table."}},"type":"object"},"aws-native:iot:TopicRuleDynamoDbAction":{"properties":{"hashKeyField":{"type":"string","description":"The hash key name."},"hashKeyType":{"type":"string","description":"The hash key type. Valid values are \"STRING\" or \"NUMBER\""},"hashKeyValue":{"type":"string","description":"The hash key value."},"payloadField":{"type":"string","description":"The action payload. This name can be customized."},"rangeKeyField":{"type":"string","description":"The range key name."},"rangeKeyType":{"type":"string","description":"The range key type. Valid values are \"STRING\" or \"NUMBER\""},"rangeKeyValue":{"type":"string","description":"The range key value."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access to the DynamoDB table."},"tableName":{"type":"string","description":"The name of the DynamoDB table."}},"type":"object","required":["hashKeyField","hashKeyValue","roleArn","tableName"]},"aws-native:iot:TopicRuleElasticsearchAction":{"properties":{"endpoint":{"type":"string","description":"The endpoint of your OpenSearch domain."},"id":{"type":"string","description":"The unique identifier for the document you are storing."},"index":{"type":"string","description":"The index where you want to store your data."},"roleArn":{"type":"string","description":"The IAM role ARN that has access to OpenSearch."},"type":{"type":"string","description":"The type of document you are storing."}},"type":"object","required":["endpoint","id","index","roleArn","type"]},"aws-native:iot:TopicRuleFirehoseAction":{"properties":{"batchMode":{"type":"boolean","description":"Whether to deliver the Kinesis Data Firehose stream as a batch by using [`PutRecordBatch`](https://docs.aws.amazon.com/firehose/latest/APIReference/API_PutRecordBatch.html) . The default value is `false` .\n\nWhen `batchMode` is `true` and the rule's SQL statement evaluates to an Array, each Array element forms one record in the [`PutRecordBatch`](https://docs.aws.amazon.com/firehose/latest/APIReference/API_PutRecordBatch.html) request. The resulting array can't have more than 500 records."},"deliveryStreamName":{"type":"string","description":"The delivery stream name."},"roleArn":{"type":"string","description":"The IAM role that grants access to the Amazon Kinesis Firehose stream."},"separator":{"type":"string","description":"A character separator that will be used to separate records written to the Firehose stream. Valid values are: '\\n' (newline), '\\t' (tab), '\\r\\n' (Windows newline), ',' (comma)."}},"type":"object","required":["deliveryStreamName","roleArn"]},"aws-native:iot:TopicRuleHttpAction":{"properties":{"auth":{"$ref":"#/types/aws-native:iot:TopicRuleHttpAuthorization","description":"The authentication method to use when sending data to an HTTPS endpoint."},"batchConfig":{"$ref":"#/types/aws-native:iot:TopicRuleBatchConfig"},"confirmationUrl":{"type":"string","description":"The URL to which AWS IoT sends a confirmation message. The value of the confirmation URL must be a prefix of the endpoint URL. If you do not specify a confirmation URL AWS IoT uses the endpoint URL as the confirmation URL. If you use substitution templates in the confirmationUrl, you must create and enable topic rule destinations that match each possible value of the substitution template before traffic is allowed to your endpoint URL."},"enableBatching":{"type":"boolean"},"headers":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRuleHttpActionHeader"},"description":"The HTTP headers to send with the message data."},"url":{"type":"string","description":"The endpoint URL. If substitution templates are used in the URL, you must also specify a `confirmationUrl` . If this is a new destination, a new `TopicRuleDestination` is created if possible."}},"type":"object","required":["url"]},"aws-native:iot:TopicRuleHttpActionHeader":{"properties":{"key":{"type":"string","description":"The HTTP header key."},"value":{"type":"string","description":"The HTTP header value. Substitution templates are supported."}},"type":"object","required":["key","value"]},"aws-native:iot:TopicRuleHttpAuthorization":{"properties":{"sigv4":{"$ref":"#/types/aws-native:iot:TopicRuleSigV4Authorization","description":"Use Sig V4 authorization. For more information, see [Signature Version 4 Signing Process](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) ."}},"type":"object"},"aws-native:iot:TopicRuleIotAnalyticsAction":{"properties":{"batchMode":{"type":"boolean","description":"Whether to process the action as a batch. The default value is `false` .\n\nWhen `batchMode` is `true` and the rule SQL statement evaluates to an Array, each Array element is delivered as a separate message when passed by [`BatchPutMessage`](https://docs.aws.amazon.com/iotanalytics/latest/APIReference/API_BatchPutMessage.html) The resulting array can't have more than 100 messages."},"channelName":{"type":"string","description":"The name of the IoT Analytics channel to which message data will be sent."},"roleArn":{"type":"string","description":"The ARN of the role which has a policy that grants IoT Analytics permission to send message data via IoT Analytics (iotanalytics:BatchPutMessage)."}},"type":"object","required":["channelName","roleArn"]},"aws-native:iot:TopicRuleIotEventsAction":{"properties":{"batchMode":{"type":"boolean","description":"Whether to process the event actions as a batch. The default value is `false` .\n\nWhen `batchMode` is `true` , you can't specify a `messageId` .\n\nWhen `batchMode` is `true` and the rule SQL statement evaluates to an Array, each Array element is treated as a separate message when Events by calling [`BatchPutMessage`](https://docs.aws.amazon.com/iotevents/latest/apireference/API_iotevents-data_BatchPutMessage.html) . The resulting array can't have more than 10 messages."},"inputName":{"type":"string","description":"The name of the AWS IoT Events input."},"messageId":{"type":"string","description":"The ID of the message. The default `messageId` is a new UUID value.\n\nWhen `batchMode` is `true` , you can't specify a `messageId` --a new UUID value will be assigned.\n\nAssign a value to this property to ensure that only one input (message) with a given `messageId` will be processed by an AWS IoT Events detector."},"roleArn":{"type":"string","description":"The ARN of the role that grants AWS IoT permission to send an input to an AWS IoT Events detector. (\"Action\":\"iotevents:BatchPutMessage\")."}},"type":"object","required":["inputName","roleArn"]},"aws-native:iot:TopicRuleIotSiteWiseAction":{"properties":{"putAssetPropertyValueEntries":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRulePutAssetPropertyValueEntry"},"description":"A list of asset property value entries."},"roleArn":{"type":"string","description":"The ARN of the role that grants AWS IoT permission to send an asset property value to AWS IoT SiteWise. ( `\"Action\": \"iotsitewise:BatchPutAssetPropertyValue\"` ). The trust policy can restrict access to specific asset hierarchy paths."}},"type":"object","required":["putAssetPropertyValueEntries","roleArn"]},"aws-native:iot:TopicRuleKafkaAction":{"properties":{"clientProperties":{"type":"object","additionalProperties":{"type":"string"},"description":"Properties of the Apache Kafka producer client."},"destinationArn":{"type":"string","description":"The ARN of Kafka action's VPC `TopicRuleDestination` ."},"headers":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRuleKafkaActionHeader"},"description":"The list of Kafka headers that you specify."},"key":{"type":"string","description":"The Kafka message key."},"partition":{"type":"string","description":"The Kafka message partition."},"topic":{"type":"string","description":"The Kafka topic for messages to be sent to the Kafka broker."}},"type":"object","required":["clientProperties","destinationArn","topic"]},"aws-native:iot:TopicRuleKafkaActionHeader":{"properties":{"key":{"type":"string","description":"The key of the Kafka header."},"value":{"type":"string","description":"The value of the Kafka header."}},"type":"object","required":["key","value"]},"aws-native:iot:TopicRuleKinesisAction":{"properties":{"partitionKey":{"type":"string","description":"The partition key."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access to the Amazon Kinesis stream."},"streamName":{"type":"string","description":"The name of the Amazon Kinesis stream."}},"type":"object","required":["roleArn","streamName"]},"aws-native:iot:TopicRuleLambdaAction":{"properties":{"functionArn":{"type":"string","description":"The ARN of the Lambda function."}},"type":"object"},"aws-native:iot:TopicRuleLocationAction":{"properties":{"deviceId":{"type":"string","description":"The unique ID of the device providing the location data."},"latitude":{"type":"string","description":"A string that evaluates to a double value that represents the latitude of the device's location."},"longitude":{"type":"string","description":"A string that evaluates to a double value that represents the longitude of the device's location."},"roleArn":{"type":"string","description":"The IAM role that grants permission to write to the Amazon Location resource."},"timestamp":{"$ref":"#/types/aws-native:iot:TopicRuleTimestamp","description":"The time that the location data was sampled. The default value is the time the MQTT message was processed."},"trackerName":{"type":"string","description":"The name of the tracker resource in Amazon Location in which the location is updated."}},"type":"object","required":["deviceId","latitude","longitude","roleArn","trackerName"]},"aws-native:iot:TopicRuleOpenSearchAction":{"properties":{"endpoint":{"type":"string","description":"The endpoint of your OpenSearch domain."},"id":{"type":"string","description":"The unique identifier for the document you are storing."},"index":{"type":"string","description":"The OpenSearch index where you want to store your data."},"roleArn":{"type":"string","description":"The IAM role ARN that has access to OpenSearch."},"type":{"type":"string","description":"The type of document you are storing."}},"type":"object","required":["endpoint","id","index","roleArn","type"]},"aws-native:iot:TopicRulePayload":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRuleAction"},"description":"The actions associated with the rule."},"awsIotSqlVersion":{"type":"string","description":"The version of the SQL rules engine to use when evaluating the rule.\n\nThe default value is 2015-10-08."},"description":{"type":"string","description":"The description of the rule."},"errorAction":{"$ref":"#/types/aws-native:iot:TopicRuleAction","description":"The action to take when an error occurs."},"ruleDisabled":{"type":"boolean","description":"Specifies whether the rule is disabled."},"sql":{"type":"string","description":"The SQL statement used to query the topic. For more information, see [AWS IoT SQL Reference](https://docs.aws.amazon.com/iot/latest/developerguide/iot-sql-reference.html) in the *AWS IoT Developer Guide* ."}},"type":"object","required":["actions","sql"]},"aws-native:iot:TopicRulePutAssetPropertyValueEntry":{"properties":{"assetId":{"type":"string","description":"The ID of the AWS IoT SiteWise asset. You must specify either a `propertyAlias` or both an `aliasId` and a `propertyId` . Accepts substitution templates."},"entryId":{"type":"string","description":"Optional. A unique identifier for this entry that you can define to better track which message caused an error in case of failure. Accepts substitution templates. Defaults to a new UUID."},"propertyAlias":{"type":"string","description":"The name of the property alias associated with your asset property. You must specify either a `propertyAlias` or both an `aliasId` and a `propertyId` . Accepts substitution templates."},"propertyId":{"type":"string","description":"The ID of the asset's property. You must specify either a `propertyAlias` or both an `aliasId` and a `propertyId` . Accepts substitution templates."},"propertyValues":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRuleAssetPropertyValue"},"description":"A list of property values to insert that each contain timestamp, quality, and value (TQV) information."}},"type":"object","required":["propertyValues"]},"aws-native:iot:TopicRulePutItemInput":{"properties":{"tableName":{"type":"string","description":"The table where the message data will be written."}},"type":"object","required":["tableName"]},"aws-native:iot:TopicRuleRepublishAction":{"properties":{"headers":{"$ref":"#/types/aws-native:iot:TopicRuleRepublishActionHeaders","description":"MQTT Version 5.0 headers information. For more information, see [MQTT](https://docs.aws.amazon.com//iot/latest/developerguide/mqtt.html) in the IoT Core Developer Guide."},"qos":{"type":"integer","description":"The Quality of Service (QoS) level to use when republishing messages. The default value is 0."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access."},"topic":{"type":"string","description":"The name of the MQTT topic."}},"type":"object","required":["roleArn","topic"]},"aws-native:iot:TopicRuleRepublishActionHeaders":{"properties":{"contentType":{"type":"string","description":"A UTF-8 encoded string that describes the content of the publishing message.\n\nFor more information, see [Content Type](https://docs.aws.amazon.com/https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html#_Toc3901118) in the MQTT Version 5.0 specification.\n\nSupports [substitution templates](https://docs.aws.amazon.com//iot/latest/developerguide/iot-substitution-templates.html) ."},"correlationData":{"type":"string","description":"The base64-encoded binary data used by the sender of the request message to identify which request the response message is for.\n\nFor more information, see [Correlation Data](https://docs.aws.amazon.com/https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html#_Toc3901115) in the MQTT Version 5.0 specification.\n\nSupports [substitution templates](https://docs.aws.amazon.com//iot/latest/developerguide/iot-substitution-templates.html) .\n\n\u003e This binary data must be base64-encoded."},"messageExpiry":{"type":"string","description":"A user-defined integer value that represents the message expiry interval at the broker. If the messages haven't been sent to the subscribers within that interval, the message expires and is removed. The value of `messageExpiry` represents the number of seconds before it expires. For more information about the limits of `messageExpiry` , see [Message broker and protocol limits and quotas](https://docs.aws.amazon.com//general/latest/gr/iot-core.html#limits_iot) in the IoT Core Reference Guide.\n\nSupports [substitution templates](https://docs.aws.amazon.com//iot/latest/developerguide/iot-substitution-templates.html) ."},"payloadFormatIndicator":{"type":"string","description":"An `Enum` string value that indicates whether the payload is formatted as UTF-8.\n\nValid values are `UNSPECIFIED_BYTES` and `UTF8_DATA` .\n\nFor more information, see [Payload Format Indicator](https://docs.aws.amazon.com/https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html#_Toc3901111) from the MQTT Version 5.0 specification.\n\nSupports [substitution templates](https://docs.aws.amazon.com//iot/latest/developerguide/iot-substitution-templates.html) ."},"responseTopic":{"type":"string","description":"A UTF-8 encoded string that's used as the topic name for a response message. The response topic is used to describe the topic to which the receiver should publish as part of the request-response flow. The topic must not contain wildcard characters.\n\nFor more information, see [Response Topic](https://docs.aws.amazon.com/https://docs.oasis-open.org/mqtt/mqtt/v5.0/os/mqtt-v5.0-os.html#_Toc3901114) in the MQTT Version 5.0 specification.\n\nSupports [substitution templates](https://docs.aws.amazon.com//iot/latest/developerguide/iot-substitution-templates.html) ."},"userProperties":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRuleUserProperty"},"description":"An array of key-value pairs that you define in the MQTT5 header."}},"type":"object"},"aws-native:iot:TopicRuleS3Action":{"properties":{"bucketName":{"type":"string","description":"The Amazon S3 bucket."},"cannedAcl":{"$ref":"#/types/aws-native:iot:TopicRuleCannedAccessControlList","description":"The Amazon S3 canned ACL that controls access to the object identified by the object key. For more information, see [S3 canned ACLs](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl) ."},"key":{"type":"string","description":"The object key. For more information, see [Actions, resources, and condition keys for Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/dev/list_amazons3.html) ."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access."}},"type":"object","required":["bucketName","key","roleArn"]},"aws-native:iot:TopicRuleSigV4Authorization":{"properties":{"roleArn":{"type":"string","description":"The ARN of the signing role."},"serviceName":{"type":"string","description":"The service name to use while signing with Sig V4."},"signingRegion":{"type":"string","description":"The signing region."}},"type":"object","required":["roleArn","serviceName","signingRegion"]},"aws-native:iot:TopicRuleSnsAction":{"properties":{"messageFormat":{"type":"string","description":"(Optional) The message format of the message to publish. Accepted values are \"JSON\" and \"RAW\". The default value of the attribute is \"RAW\". SNS uses this setting to determine if the payload should be parsed and relevant platform-specific bits of the payload should be extracted. For more information, see [Amazon SNS Message and JSON Formats](https://docs.aws.amazon.com/sns/latest/dg/json-formats.html) in the *Amazon Simple Notification Service Developer Guide* ."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access."},"targetArn":{"type":"string","description":"The ARN of the SNS topic."}},"type":"object","required":["roleArn","targetArn"]},"aws-native:iot:TopicRuleSqsAction":{"properties":{"queueUrl":{"type":"string","description":"The URL of the Amazon SQS queue."},"roleArn":{"type":"string","description":"The ARN of the IAM role that grants access."},"useBase64":{"type":"boolean","description":"Specifies whether to use Base64 encoding."}},"type":"object","required":["queueUrl","roleArn"]},"aws-native:iot:TopicRuleStepFunctionsAction":{"properties":{"executionNamePrefix":{"type":"string","description":"(Optional) A name will be given to the state machine execution consisting of this prefix followed by a UUID. Step Functions automatically creates a unique name for each state machine execution if one is not provided."},"roleArn":{"type":"string","description":"The ARN of the role that grants IoT permission to start execution of a state machine (\"Action\":\"states:StartExecution\")."},"stateMachineName":{"type":"string","description":"The name of the Step Functions state machine whose execution will be started."}},"type":"object","required":["roleArn","stateMachineName"]},"aws-native:iot:TopicRuleTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iot:TopicRuleTimestamp":{"properties":{"unit":{"type":"string","description":"The precision of the timestamp value that results from the expression described in `value` ."},"value":{"type":"string","description":"An expression that returns a long epoch time value."}},"type":"object","required":["value"]},"aws-native:iot:TopicRuleTimestreamAction":{"properties":{"databaseName":{"type":"string","description":"The name of an Amazon Timestream database that has the table to write records into."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:iot:TopicRuleTimestreamDimension"},"description":"Metadata attributes of the time series that are written in each measure record."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role that grants AWS IoT permission to write to the Timestream database table."},"tableName":{"type":"string","description":"The table where the message data will be written."},"timestamp":{"$ref":"#/types/aws-native:iot:TopicRuleTimestreamTimestamp","description":"The value to use for the entry's timestamp. If blank, the time that the entry was processed is used."}},"type":"object","required":["databaseName","dimensions","roleArn","tableName"]},"aws-native:iot:TopicRuleTimestreamDimension":{"properties":{"name":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["name","value"]},"aws-native:iot:TopicRuleTimestreamTimestamp":{"properties":{"unit":{"type":"string","description":"The precision of the timestamp value that results from the expression described in `value` ."},"value":{"type":"string","description":"An expression that returns a long epoch time value."}},"type":"object","required":["unit","value"]},"aws-native:iot:TopicRuleUserProperty":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:iotanalytics:ChannelCustomerManagedS3":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket in which channel data is stored."},"keyPrefix":{"type":"string","description":"(Optional) The prefix used to create the keys of the channel data objects. Each object in an S3 bucket has a key that is its unique identifier within the bucket (each object in a bucket has exactly one key). The prefix must end with a forward slash (/)."},"roleArn":{"type":"string","description":"The ARN of the role that grants ITA permission to interact with your Amazon S3 resources."}},"type":"object","required":["bucket","roleArn"]},"aws-native:iotanalytics:ChannelRetentionPeriod":{"properties":{"numberOfDays":{"type":"integer","description":"The number of days that message data is kept. The `unlimited` parameter must be false."},"unlimited":{"type":"boolean","description":"If true, message data is kept indefinitely."}},"type":"object"},"aws-native:iotanalytics:ChannelServiceManagedS3":{"type":"object"},"aws-native:iotanalytics:ChannelStorage":{"properties":{"customerManagedS3":{"$ref":"#/types/aws-native:iotanalytics:ChannelCustomerManagedS3","description":"Used to store channel data in an S3 bucket that you manage. If customer managed storage is selected, the `retentionPeriod` parameter is ignored. You can't change the choice of S3 storage after the data store is created."},"serviceManagedS3":{"$ref":"#/types/aws-native:iotanalytics:ChannelServiceManagedS3","description":"Used to store channel data in an S3 bucket managed by ITA . You can't change the choice of S3 storage after the data store is created."}},"type":"object"},"aws-native:iotanalytics:ChannelTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotanalytics:DatasetAction":{"properties":{"actionName":{"type":"string","description":"The name of the data set action by which data set contents are automatically created."},"containerAction":{"$ref":"#/types/aws-native:iotanalytics:DatasetContainerAction","description":"Information which allows the system to run a containerized application in order to create the data set contents. The application must be in a Docker container along with any needed support libraries."},"queryAction":{"$ref":"#/types/aws-native:iotanalytics:DatasetQueryAction","description":"An \"SqlQueryDatasetAction\" object that uses an SQL query to automatically create data set contents."}},"type":"object","required":["actionName"]},"aws-native:iotanalytics:DatasetContainerAction":{"properties":{"executionRoleArn":{"type":"string","description":"The ARN of the role which gives permission to the system to access needed resources in order to run the \"containerAction\". This includes, at minimum, permission to retrieve the data set contents which are the input to the containerized application."},"image":{"type":"string","description":"The ARN of the Docker container stored in your account. The Docker container contains an application and needed support libraries and is used to generate data set contents."},"resourceConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetResourceConfiguration","description":"Configuration of the resource which executes the \"containerAction\"."},"variables":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetVariable"},"description":"The values of variables used within the context of the execution of the containerized application (basically, parameters passed to the application). Each variable must have a name and a value given by one of \"stringValue\", \"datasetContentVersionValue\", or \"outputFileUriValue\"."}},"type":"object","required":["executionRoleArn","image","resourceConfiguration"]},"aws-native:iotanalytics:DatasetContentDeliveryRule":{"properties":{"destination":{"$ref":"#/types/aws-native:iotanalytics:DatasetContentDeliveryRuleDestination","description":"The destination to which dataset contents are delivered."},"entryName":{"type":"string","description":"The name of the dataset content delivery rules entry."}},"type":"object","required":["destination"]},"aws-native:iotanalytics:DatasetContentDeliveryRuleDestination":{"properties":{"iotEventsDestinationConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetIotEventsDestinationConfiguration","description":"Configuration information for delivery of dataset contents to AWS IoT Events ."},"s3DestinationConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetS3DestinationConfiguration","description":"Configuration information for delivery of dataset contents to Amazon S3."}},"type":"object"},"aws-native:iotanalytics:DatasetContentVersionValue":{"properties":{"datasetName":{"type":"string","description":"The name of the dataset whose latest contents are used as input to the notebook or application."}},"type":"object","required":["datasetName"]},"aws-native:iotanalytics:DatasetDeltaTime":{"properties":{"offsetSeconds":{"type":"integer","description":"The number of seconds of estimated in-flight lag time of message data. When you create dataset contents using message data from a specified timeframe, some message data might still be in flight when processing begins, and so do not arrive in time to be processed. Use this field to make allowances for the in flight time of your message data, so that data not processed from a previous timeframe is included with the next timeframe. Otherwise, missed message data would be excluded from processing during the next timeframe too, because its timestamp places it within the previous timeframe."},"timeExpression":{"type":"string","description":"An expression by which the time of the message data might be determined. This can be the name of a timestamp field or a SQL expression that is used to derive the time the message data was generated."}},"type":"object","required":["offsetSeconds","timeExpression"]},"aws-native:iotanalytics:DatasetDeltaTimeSessionWindowConfiguration":{"properties":{"timeoutInMinutes":{"type":"integer","description":"A time interval. You can use `timeoutInMinutes` so that ITA can batch up late data notifications that have been generated since the last execution. ITA sends one batch of notifications to Amazon CloudWatch Events at one time.\n\nFor more information about how to write a timestamp expression, see [Date and Time Functions and Operators](https://docs.aws.amazon.com/https://prestodb.io/docs/current/functions/datetime.html) , in the *Presto 0.172 Documentation* ."}},"type":"object","required":["timeoutInMinutes"]},"aws-native:iotanalytics:DatasetFilter":{"properties":{"deltaTime":{"$ref":"#/types/aws-native:iotanalytics:DatasetDeltaTime","description":"Used to limit data to that which has arrived since the last execution of the action."}},"type":"object"},"aws-native:iotanalytics:DatasetGlueConfiguration":{"properties":{"databaseName":{"type":"string","description":"The name of the database in your AWS Glue Data Catalog in which the table is located. An AWS Glue Data Catalog database contains metadata tables."},"tableName":{"type":"string","description":"The name of the table in your AWS Glue Data Catalog that is used to perform the ETL operations. An AWS Glue Data Catalog table contains partitioned data and descriptions of data sources and targets."}},"type":"object","required":["databaseName","tableName"]},"aws-native:iotanalytics:DatasetIotEventsDestinationConfiguration":{"properties":{"inputName":{"type":"string","description":"The name of the AWS IoT Events input to which dataset contents are delivered."},"roleArn":{"type":"string","description":"The ARN of the role that grants ITA permission to deliver dataset contents to an AWS IoT Events input."}},"type":"object","required":["inputName","roleArn"]},"aws-native:iotanalytics:DatasetLateDataRule":{"properties":{"ruleConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetLateDataRuleConfiguration","description":"The information needed to configure the late data rule."},"ruleName":{"type":"string","description":"The name of the late data rule."}},"type":"object","required":["ruleConfiguration"]},"aws-native:iotanalytics:DatasetLateDataRuleConfiguration":{"properties":{"deltaTimeSessionWindowConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetDeltaTimeSessionWindowConfiguration","description":"The information needed to configure a delta time session window."}},"type":"object"},"aws-native:iotanalytics:DatasetOutputFileUriValue":{"properties":{"fileName":{"type":"string","description":"The URI of the location where dataset contents are stored, usually the URI of a file in an S3 bucket."}},"type":"object","required":["fileName"]},"aws-native:iotanalytics:DatasetQueryAction":{"properties":{"filters":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetFilter"},"description":"Pre-filters applied to message data."},"sqlQuery":{"type":"string","description":"An \"SqlQueryDatasetAction\" object that uses an SQL query to automatically create data set contents."}},"type":"object","required":["sqlQuery"]},"aws-native:iotanalytics:DatasetResourceConfiguration":{"properties":{"computeType":{"$ref":"#/types/aws-native:iotanalytics:DatasetResourceConfigurationComputeType","description":"The type of the compute resource used to execute the `containerAction` . Possible values are: `ACU_1` (vCPU=4, memory=16 GiB) or `ACU_2` (vCPU=8, memory=32 GiB)."},"volumeSizeInGb":{"type":"integer","description":"The size, in GB, of the persistent storage available to the resource instance used to execute the `containerAction` (min: 1, max: 50)."}},"type":"object","required":["computeType","volumeSizeInGb"]},"aws-native:iotanalytics:DatasetResourceConfigurationComputeType":{"description":"The type of the compute resource used to execute the `containerAction` . Possible values are: `ACU_1` (vCPU=4, memory=16 GiB) or `ACU_2` (vCPU=8, memory=32 GiB).","type":"string","enum":[{"name":"Acu1","value":"ACU_1"},{"name":"Acu2","value":"ACU_2"}]},"aws-native:iotanalytics:DatasetRetentionPeriod":{"properties":{"numberOfDays":{"type":"integer","description":"The number of days that message data is kept. The `unlimited` parameter must be false."},"unlimited":{"type":"boolean","description":"If true, message data is kept indefinitely."}},"type":"object"},"aws-native:iotanalytics:DatasetS3DestinationConfiguration":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket to which dataset contents are delivered."},"glueConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetGlueConfiguration","description":"Configuration information for coordination with AWS Glue , a fully managed extract, transform and load (ETL) service."},"key":{"type":"string","description":"The key of the dataset contents object in an S3 bucket. Each object has a key that is a unique identifier. Each object has exactly one key.\n\nYou can create a unique key with the following options:\n\n- Use `!{iotanalytics:scheduleTime}` to insert the time of a scheduled SQL query run.\n- Use `!{iotanalytics:versionId}` to insert a unique hash that identifies a dataset content.\n- Use `!{iotanalytics:creationTime}` to insert the creation time of a dataset content.\n\nThe following example creates a unique key for a CSV file: `dataset/mydataset/!{iotanalytics:scheduleTime}/!{iotanalytics:versionId}.csv`\n\n\u003e If you don't use `!{iotanalytics:versionId}` to specify the key, you might get duplicate keys. For example, you might have two dataset contents with the same `scheduleTime` but different `versionId` s. This means that one dataset content overwrites the other."},"roleArn":{"type":"string","description":"The ARN of the role that grants ITA permission to interact with your Amazon S3 and AWS Glue resources."}},"type":"object","required":["bucket","key","roleArn"]},"aws-native:iotanalytics:DatasetSchedule":{"properties":{"scheduleExpression":{"type":"string","description":"The expression that defines when to trigger an update. For more information, see [Schedule Expressions for Rules](https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/ScheduledEvents.html) in the Amazon CloudWatch documentation."}},"type":"object","required":["scheduleExpression"]},"aws-native:iotanalytics:DatasetTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotanalytics:DatasetTrigger":{"properties":{"schedule":{"$ref":"#/types/aws-native:iotanalytics:DatasetSchedule","description":"The \"Schedule\" when the trigger is initiated."},"triggeringDataset":{"$ref":"#/types/aws-native:iotanalytics:DatasetTriggeringDataset","description":"Information about the data set whose content generation triggers the new data set content generation."}},"type":"object"},"aws-native:iotanalytics:DatasetTriggeringDataset":{"properties":{"datasetName":{"type":"string","description":"The name of the data set whose content generation triggers the new data set content generation."}},"type":"object","required":["datasetName"]},"aws-native:iotanalytics:DatasetVariable":{"properties":{"datasetContentVersionValue":{"$ref":"#/types/aws-native:iotanalytics:DatasetContentVersionValue","description":"The value of the variable as a structure that specifies a dataset content version."},"doubleValue":{"type":"number","description":"The value of the variable as a double (numeric)."},"outputFileUriValue":{"$ref":"#/types/aws-native:iotanalytics:DatasetOutputFileUriValue","description":"The value of the variable as a structure that specifies an output file URI."},"stringValue":{"type":"string","description":"The value of the variable as a string."},"variableName":{"type":"string","description":"The name of the variable."}},"type":"object","required":["variableName"]},"aws-native:iotanalytics:DatasetVersioningConfiguration":{"properties":{"maxVersions":{"type":"integer","description":"How many versions of dataset contents are kept. The `unlimited` parameter must be `false` ."},"unlimited":{"type":"boolean","description":"If true, unlimited versions of dataset contents are kept."}},"type":"object"},"aws-native:iotanalytics:DatastoreColumn":{"properties":{"name":{"type":"string","description":"The name of the column."},"type":{"type":"string","description":"The type of data. For more information about the supported data types, see [Common data types](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-common.html) in the *AWS Glue Developer Guide* ."}},"type":"object","required":["name","type"]},"aws-native:iotanalytics:DatastoreCustomerManagedS3":{"properties":{"bucket":{"type":"string","description":"The name of the Amazon S3 bucket where your data is stored."},"keyPrefix":{"type":"string","description":"(Optional) The prefix used to create the keys of the data store data objects. Each object in an Amazon S3 bucket has a key that is its unique identifier in the bucket. Each object in a bucket has exactly one key. The prefix must end with a forward slash (/)."},"roleArn":{"type":"string","description":"The ARN of the role that grants ITA permission to interact with your Amazon S3 resources."}},"type":"object","required":["bucket","roleArn"]},"aws-native:iotanalytics:DatastoreCustomerManagedS3Storage":{"properties":{"bucket":{"type":"string","description":"The name of the Amazon S3 bucket where your data is stored."},"keyPrefix":{"type":"string","description":"(Optional) The prefix used to create the keys of the data store data objects. Each object in an Amazon S3 bucket has a key that is its unique identifier in the bucket. Each object in a bucket has exactly one key. The prefix must end with a forward slash (/)."}},"type":"object","required":["bucket"]},"aws-native:iotanalytics:DatastoreFileFormatConfiguration":{"properties":{"jsonConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatastoreJsonConfiguration","description":"Contains the configuration information of the JSON format."},"parquetConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatastoreParquetConfiguration","description":"Contains the configuration information of the Parquet format."}},"type":"object"},"aws-native:iotanalytics:DatastoreIotSiteWiseMultiLayerStorage":{"properties":{"customerManagedS3Storage":{"$ref":"#/types/aws-native:iotanalytics:DatastoreCustomerManagedS3Storage","description":"Stores data used by AWS IoT SiteWise in an Amazon S3 bucket that you manage."}},"type":"object"},"aws-native:iotanalytics:DatastoreJsonConfiguration":{"type":"object"},"aws-native:iotanalytics:DatastoreParquetConfiguration":{"properties":{"schemaDefinition":{"$ref":"#/types/aws-native:iotanalytics:DatastoreSchemaDefinition","description":"Information needed to define a schema."}},"type":"object"},"aws-native:iotanalytics:DatastorePartition":{"properties":{"partition":{"$ref":"#/types/aws-native:iotanalytics:Partition","description":"A partition dimension defined by an attribute."},"timestampPartition":{"$ref":"#/types/aws-native:iotanalytics:DatastoreTimestampPartition","description":"A partition dimension defined by a timestamp attribute."}},"type":"object"},"aws-native:iotanalytics:DatastorePartitions":{"properties":{"partitions":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatastorePartition"},"description":"A list of partition dimensions in a data store."}},"type":"object"},"aws-native:iotanalytics:DatastoreRetentionPeriod":{"properties":{"numberOfDays":{"type":"integer","description":"The number of days that message data is kept. The `unlimited` parameter must be false."},"unlimited":{"type":"boolean","description":"If true, message data is kept indefinitely."}},"type":"object"},"aws-native:iotanalytics:DatastoreSchemaDefinition":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatastoreColumn"},"description":"Specifies one or more columns that store your data.\n\nEach schema can have up to 100 columns. Each column can have up to 100 nested types."}},"type":"object"},"aws-native:iotanalytics:DatastoreServiceManagedS3":{"type":"object"},"aws-native:iotanalytics:DatastoreStorage":{"properties":{"customerManagedS3":{"$ref":"#/types/aws-native:iotanalytics:DatastoreCustomerManagedS3","description":"Use this to store data store data in an S3 bucket that you manage. The choice of service-managed or customer-managed S3 storage cannot be changed after creation of the data store."},"iotSiteWiseMultiLayerStorage":{"$ref":"#/types/aws-native:iotanalytics:DatastoreIotSiteWiseMultiLayerStorage","description":"Use this to store data used by AWS IoT SiteWise in an Amazon S3 bucket that you manage. You can't change the choice of Amazon S3 storage after your data store is created."},"serviceManagedS3":{"$ref":"#/types/aws-native:iotanalytics:DatastoreServiceManagedS3","description":"Use this to store data store data in an S3 bucket managed by the  service. The choice of service-managed or customer-managed S3 storage cannot be changed after creation of the data store."}},"type":"object"},"aws-native:iotanalytics:DatastoreTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotanalytics:DatastoreTimestampPartition":{"properties":{"attributeName":{"type":"string","description":"The attribute name of the partition defined by a timestamp."},"timestampFormat":{"type":"string","description":"The timestamp format of a partition defined by a timestamp. The default format is seconds since epoch (January 1, 1970 at midnight UTC time)."}},"type":"object","required":["attributeName"]},"aws-native:iotanalytics:Partition":{"properties":{"attributeName":{"type":"string","description":"The name of the attribute that defines a partition dimension."}},"type":"object","required":["attributeName"]},"aws-native:iotanalytics:PipelineActivity":{"properties":{"addAttributes":{"$ref":"#/types/aws-native:iotanalytics:PipelineAddAttributes","description":"Adds other attributes based on existing attributes in the message."},"channel":{"$ref":"#/types/aws-native:iotanalytics:PipelineChannel","description":"Determines the source of the messages to be processed."},"datastore":{"$ref":"#/types/aws-native:iotanalytics:PipelineDatastore","description":"Specifies where to store the processed message data."},"deviceRegistryEnrich":{"$ref":"#/types/aws-native:iotanalytics:PipelineDeviceRegistryEnrich","description":"Adds data from the AWS IoT device registry to your message."},"deviceShadowEnrich":{"$ref":"#/types/aws-native:iotanalytics:PipelineDeviceShadowEnrich","description":"Adds information from the AWS IoT Device Shadows service to a message."},"filter":{"$ref":"#/types/aws-native:iotanalytics:PipelineFilter","description":"Filters a message based on its attributes."},"lambda":{"$ref":"#/types/aws-native:iotanalytics:PipelineLambda","description":"Runs a Lambda function to modify the message."},"math":{"$ref":"#/types/aws-native:iotanalytics:PipelineMath","description":"Computes an arithmetic expression using the message's attributes and adds it to the message."},"removeAttributes":{"$ref":"#/types/aws-native:iotanalytics:PipelineRemoveAttributes","description":"Removes attributes from a message."},"selectAttributes":{"$ref":"#/types/aws-native:iotanalytics:PipelineSelectAttributes","description":"Creates a new message using only the specified attributes from the original message."}},"type":"object"},"aws-native:iotanalytics:PipelineAddAttributes":{"properties":{"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of 1-50 \"AttributeNameMapping\" objects that map an existing attribute to a new attribute.\n\n\u003e The existing attributes remain in the message, so if you want to remove the originals, use \"RemoveAttributeActivity\"."},"name":{"type":"string","description":"The name of the 'addAttributes' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["attributes","name"]},"aws-native:iotanalytics:PipelineChannel":{"properties":{"channelName":{"type":"string","description":"The name of the channel from which the messages are processed."},"name":{"type":"string","description":"The name of the 'channel' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["channelName","name"]},"aws-native:iotanalytics:PipelineDatastore":{"properties":{"datastoreName":{"type":"string","description":"The name of the data store where processed messages are stored."},"name":{"type":"string","description":"The name of the datastore activity."}},"type":"object","required":["datastoreName","name"]},"aws-native:iotanalytics:PipelineDeviceRegistryEnrich":{"properties":{"attribute":{"type":"string","description":"The name of the attribute that is added to the message."},"name":{"type":"string","description":"The name of the 'deviceRegistryEnrich' activity."},"next":{"type":"string","description":"The next activity in the pipeline."},"roleArn":{"type":"string","description":"The ARN of the role that allows access to the device's registry information."},"thingName":{"type":"string","description":"The name of the IoT device whose registry information is added to the message."}},"type":"object","required":["attribute","name","roleArn","thingName"]},"aws-native:iotanalytics:PipelineDeviceShadowEnrich":{"properties":{"attribute":{"type":"string","description":"The name of the attribute that is added to the message."},"name":{"type":"string","description":"The name of the 'deviceShadowEnrich' activity."},"next":{"type":"string","description":"The next activity in the pipeline."},"roleArn":{"type":"string","description":"The ARN of the role that allows access to the device's shadow."},"thingName":{"type":"string","description":"The name of the IoT device whose shadow information is added to the message."}},"type":"object","required":["attribute","name","roleArn","thingName"]},"aws-native:iotanalytics:PipelineFilter":{"properties":{"filter":{"type":"string","description":"An expression that looks like an SQL WHERE clause that must return a Boolean value."},"name":{"type":"string","description":"The name of the 'filter' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["filter","name"]},"aws-native:iotanalytics:PipelineLambda":{"properties":{"batchSize":{"type":"integer","description":"The number of messages passed to the Lambda function for processing.\n\nThe AWS Lambda function must be able to process all of these messages within five minutes, which is the maximum timeout duration for Lambda functions."},"lambdaName":{"type":"string","description":"The name of the Lambda function that is run on the message."},"name":{"type":"string","description":"The name of the 'lambda' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["batchSize","lambdaName","name"]},"aws-native:iotanalytics:PipelineMath":{"properties":{"attribute":{"type":"string","description":"The name of the attribute that contains the result of the math operation."},"math":{"type":"string","description":"An expression that uses one or more existing attributes and must return an integer value."},"name":{"type":"string","description":"The name of the 'math' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["attribute","math","name"]},"aws-native:iotanalytics:PipelineRemoveAttributes":{"properties":{"attributes":{"type":"array","items":{"type":"string"},"description":"A list of 1-50 attributes to remove from the message."},"name":{"type":"string","description":"The name of the 'removeAttributes' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["attributes","name"]},"aws-native:iotanalytics:PipelineSelectAttributes":{"properties":{"attributes":{"type":"array","items":{"type":"string"},"description":"A list of the attributes to select from the message."},"name":{"type":"string","description":"The name of the 'selectAttributes' activity."},"next":{"type":"string","description":"The next activity in the pipeline."}},"type":"object","required":["attributes","name"]},"aws-native:iotanalytics:PipelineTag":{"properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotcoredeviceadvisor:SuiteDefinitionConfigurationProperties":{"description":"Gets the suite definition configuration.","properties":{"devicePermissionRoleArn":{"type":"string","description":"Gets the device permission ARN. This is a required parameter."},"devices":{"type":"array","items":{"$ref":"#/types/aws-native:iotcoredeviceadvisor:SuiteDefinitionDeviceUnderTest"},"description":"Gets the devices configured."},"intendedForQualification":{"type":"boolean","description":"Gets the tests intended for qualification in a suite."},"rootGroup":{"type":"string","description":"Gets the test suite root group. This is a required parameter. For updating or creating the latest qualification suite, if `intendedForQualification` is set to true, `rootGroup` can be an empty string. If `intendedForQualification` is false, `rootGroup` cannot be an empty string. If `rootGroup` is empty, and `intendedForQualification` is set to true, all the qualification tests are included, and the configuration is default.\n\nFor a qualification suite, the minimum length is 0, and the maximum is 2048. For a non-qualification suite, the minimum length is 1, and the maximum is 2048."},"suiteDefinitionName":{"type":"string","description":"Gets the suite definition name. This is a required parameter."}},"type":"object","required":["devicePermissionRoleArn","rootGroup"]},"aws-native:iotcoredeviceadvisor:SuiteDefinitionDeviceUnderTest":{"properties":{"certificateArn":{"type":"string"},"thingArn":{"type":"string"}},"type":"object"},"aws-native:iotcoredeviceadvisor:SuiteDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iotevents:AlarmModelAcknowledgeFlow":{"description":"Specifies whether to get notified for alarm state changes.","properties":{"enabled":{"type":"boolean","description":"The value must be ``TRUE`` or ``FALSE``. If ``TRUE``, you receive a notification when the alarm state changes. You must choose to acknowledge the notification before the alarm state can return to ``NORMAL``. If ``FALSE``, you won't receive notifications. The alarm automatically changes to the ``NORMAL`` state when the input property value returns to the specified range."}},"type":"object"},"aws-native:iotevents:AlarmModelAlarmAction":{"description":"Specifies one of the following actions to receive notifications when the alarm state changes.","properties":{"dynamoDBv2":{"$ref":"#/types/aws-native:iotevents:AlarmModelDynamoDBv2","description":"Defines an action to write to the Amazon DynamoDB table that you created. The default action payload contains all the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). A separate column of the DynamoDB table receives one attribute-value pair in the payload that you specify.\n You must use expressions for all parameters in ``DynamoDBv2Action``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``tableName`` parameter can be ``'GreenhouseTemperatureTable'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``tableName`` parameter can be ``$variable.ddbtableName``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``contentExpression`` parameter in ``Payload`` uses a substitution template. \n  ``'{\\\"sensorID\\\": \\\"${$input.GreenhouseInput.sensor_id}\\\", \\\"temperature\\\": \\\"${$input.GreenhouseInput.temperature * 9 / 5 + 32}\\\"}'`` \n  +  For a string concatenation, you must use ``+``. A string concatenation can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``tableName`` parameter uses a string concatenation. \n  ``'GreenhouseTemperatureTable ' + $input.GreenhouseInput.date`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n The value for the ``type`` parameter in ``Payload`` must be ``JSON``."},"dynamoDb":{"$ref":"#/types/aws-native:iotevents:AlarmModelDynamoDb","description":"Defines an action to write to the Amazon DynamoDB table that you created. The standard action payload contains all the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). One column of the DynamoDB table receives all attribute-value pairs in the payload that you specify.\n You must use expressions for all parameters in ``DynamoDBAction``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``hashKeyType`` parameter can be ``'STRING'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``hashKeyField`` parameter can be ``$input.GreenhouseInput.name``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``hashKeyValue`` parameter uses a substitution template. \n  ``'${$input.GreenhouseInput.temperature * 6 / 5 + 32} in Fahrenheit'`` \n  +  For a string concatenation, you must use ``+``. A string concatenation can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``tableName`` parameter uses a string concatenation. \n  ``'GreenhouseTemperatureTable ' + $input.GreenhouseInput.date`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n If the defined payload type is a string, ``DynamoDBAction`` writes non-JSON data to the DynamoDB table as binary data. The DynamoDB console displays the data as Base64-encoded text. The value for the ``payloadField`` parameter is ``\u003cpayload-field\u003e_raw``."},"firehose":{"$ref":"#/types/aws-native:iotevents:AlarmModelFirehose","description":"Sends information about the detector model instance and the event that triggered the action to an Amazon Kinesis Data Firehose delivery stream."},"iotEvents":{"$ref":"#/types/aws-native:iotevents:AlarmModelIotEvents","description":"Sends an ITE input, passing in information about the detector model instance and the event that triggered the action."},"iotSiteWise":{"$ref":"#/types/aws-native:iotevents:AlarmModelIotSiteWise","description":"Sends information about the detector model instance and the event that triggered the action to a specified asset property in ITSW.\n You must use expressions for all parameters in ``IotSiteWiseAction``. The expressions accept literals, operators, functions, references, and substitutions templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``propertyAlias`` parameter can be ``'/company/windfarm/3/turbine/7/temperature'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``assetId`` parameter can be ``$input.TurbineInput.assetId1``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``propertyAlias`` parameter uses a substitution template. \n  ``'company/windfarm/${$input.TemperatureInput.sensorData.windfarmID}/turbine/ ${$input.TemperatureInput.sensorData.turbineID}/temperature'`` \n  \n You must specify either ``propertyAlias`` or both ``assetId`` and ``propertyId`` to identify the target asset property in ITSW.\n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*."},"iotTopicPublish":{"$ref":"#/types/aws-native:iotevents:AlarmModelIotTopicPublish","description":"Information required to publish the MQTT message through the IoT message broker."},"lambda":{"$ref":"#/types/aws-native:iotevents:AlarmModelLambda","description":"Calls a Lambda function, passing in information about the detector model instance and the event that triggered the action."},"sns":{"$ref":"#/types/aws-native:iotevents:AlarmModelSns","description":"Information required to publish the Amazon SNS message."},"sqs":{"$ref":"#/types/aws-native:iotevents:AlarmModelSqs","description":"Sends information about the detector model instance and the event that triggered the action to an Amazon SQS queue."}},"type":"object"},"aws-native:iotevents:AlarmModelAlarmCapabilities":{"description":"Contains the configuration information of alarm state changes.","properties":{"acknowledgeFlow":{"$ref":"#/types/aws-native:iotevents:AlarmModelAcknowledgeFlow","description":"Specifies whether to get notified for alarm state changes."},"initializationConfiguration":{"$ref":"#/types/aws-native:iotevents:AlarmModelInitializationConfiguration","description":"Specifies the default alarm state. The configuration applies to all alarms that were created based on this alarm model."}},"type":"object"},"aws-native:iotevents:AlarmModelAlarmEventActions":{"description":"Contains information about one or more alarm actions.","properties":{"alarmActions":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmAction"},"description":"Specifies one or more supported actions to receive notifications when the alarm state changes."}},"type":"object"},"aws-native:iotevents:AlarmModelAlarmRule":{"description":"Defines when your alarm is invoked.","properties":{"simpleRule":{"$ref":"#/types/aws-native:iotevents:AlarmModelSimpleRule","description":"A rule that compares an input property value to a threshold value with a comparison operator."}},"type":"object"},"aws-native:iotevents:AlarmModelAssetPropertyTimestamp":{"description":"A structure that contains timestamp information. For more information, see [TimeInNanos](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_TimeInNanos.html) in the *API Reference*.\n You must use expressions for all parameters in ``AssetPropertyTimestamp``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``timeInSeconds`` parameter can be ``'1586400675'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``offsetInNanos`` parameter can be ``$variable.time``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``timeInSeconds`` parameter uses a substitution template.\n  ``'${$input.TemperatureInput.sensorData.timestamp / 1000}'`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.","properties":{"offsetInNanos":{"type":"string","description":"The nanosecond offset converted from ``timeInSeconds``. The valid range is between 0-999999999."},"timeInSeconds":{"type":"string","description":"The timestamp, in seconds, in the Unix epoch format. The valid range is between 1-31556889864403199."}},"type":"object","required":["timeInSeconds"]},"aws-native:iotevents:AlarmModelAssetPropertyValue":{"description":"A structure that contains value information. For more information, see [AssetPropertyValue](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_AssetPropertyValue.html) in the *API Reference*.\n You must use expressions for all parameters in ``AssetPropertyValue``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``quality`` parameter can be ``'GOOD'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``quality`` parameter can be ``$input.TemperatureInput.sensorData.quality``.\n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.","properties":{"quality":{"type":"string","description":"The quality of the asset property value. The value must be ``'GOOD'``, ``'BAD'``, or ``'UNCERTAIN'``."},"timestamp":{"$ref":"#/types/aws-native:iotevents:AlarmModelAssetPropertyTimestamp","description":"The timestamp associated with the asset property value. The default is the current event time."},"value":{"$ref":"#/types/aws-native:iotevents:AlarmModelAssetPropertyVariant","description":"The value to send to an asset property."}},"type":"object","required":["value"]},"aws-native:iotevents:AlarmModelAssetPropertyVariant":{"description":"A structure that contains an asset property value. For more information, see [Variant](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_Variant.html) in the *API Reference*.\n You must use expressions for all parameters in ``AssetPropertyVariant``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``integerValue`` parameter can be ``'100'``.\n  +  For references, you must specify either variables or parameters. For example, the value for the ``booleanValue`` parameter can be ``$variable.offline``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates. \n In the following example, the value for the ``doubleValue`` parameter uses a substitution template. \n  ``'${$input.TemperatureInput.sensorData.temperature * 6 / 5 + 32}'`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n You must specify one of the following value types, depending on the ``dataType`` of the specified asset property. For more information, see [AssetProperty](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_AssetProperty.html) in the *API Reference*.","properties":{"booleanValue":{"type":"string","description":"The asset property value is a Boolean value that must be ``'TRUE'`` or ``'FALSE'``. You must use an expression, and the evaluated result should be a Boolean value."},"doubleValue":{"type":"string","description":"The asset property value is a double. You must use an expression, and the evaluated result should be a double."},"integerValue":{"type":"string","description":"The asset property value is an integer. You must use an expression, and the evaluated result should be an integer."},"stringValue":{"type":"string","description":"The asset property value is a string. You must use an expression, and the evaluated result should be a string."}},"type":"object"},"aws-native:iotevents:AlarmModelDynamoDBv2":{"description":"Defines an action to write to the Amazon DynamoDB table that you created. The default action payload contains all the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). A separate column of the DynamoDB table receives one attribute-value pair in the payload that you specify.\n You must use expressions for all parameters in ``DynamoDBv2Action``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``tableName`` parameter can be ``'GreenhouseTemperatureTable'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``tableName`` parameter can be ``$variable.ddbtableName``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``contentExpression`` parameter in ``Payload`` uses a substitution template. \n  ``'{\\\"sensorID\\\": \\\"${$input.GreenhouseInput.sensor_id}\\\", \\\"temperature\\\": \\\"${$input.GreenhouseInput.temperature * 9 / 5 + 32}\\\"}'`` \n  +  For a string concatenation, you must use ``+``. A string concatenation can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``tableName`` parameter uses a string concatenation. \n  ``'GreenhouseTemperatureTable ' + $input.GreenhouseInput.date`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n The value for the ``type`` parameter in ``Payload`` must be ``JSON``.","properties":{"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"Information needed to configure the payload.\n By default, ITE generates a standard payload in JSON for any action. This action payload contains all attribute-value pairs that have the information about the detector model instance and the event triggered the action. To configure the action payload, you can use ``contentExpression``."},"tableName":{"type":"string","description":"The name of the DynamoDB table."}},"type":"object","required":["tableName"]},"aws-native:iotevents:AlarmModelDynamoDb":{"description":"Defines an action to write to the Amazon DynamoDB table that you created. The standard action payload contains all the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). One column of the DynamoDB table receives all attribute-value pairs in the payload that you specify.\n You must use expressions for all parameters in ``DynamoDBAction``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``hashKeyType`` parameter can be ``'STRING'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``hashKeyField`` parameter can be ``$input.GreenhouseInput.name``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``hashKeyValue`` parameter uses a substitution template. \n  ``'${$input.GreenhouseInput.temperature * 6 / 5 + 32} in Fahrenheit'`` \n  +  For a string concatenation, you must use ``+``. A string concatenation can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``tableName`` parameter uses a string concatenation. \n  ``'GreenhouseTemperatureTable ' + $input.GreenhouseInput.date`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n If the defined payload type is a string, ``DynamoDBAction`` writes non-JSON data to the DynamoDB table as binary data. The DynamoDB console displays the data as Base64-encoded text. The value for the ``payloadField`` parameter is ``\u003cpayload-field\u003e_raw``.","properties":{"hashKeyField":{"type":"string","description":"The name of the hash key (also called the partition key). The ``hashKeyField`` value must match the partition key of the target DynamoDB table."},"hashKeyType":{"type":"string","description":"The data type for the hash key (also called the partition key). You can specify the following values:\n  +   ``'STRING'`` - The hash key is a string.\n  +   ``'NUMBER'`` - The hash key is a number.\n  \n If you don't specify ``hashKeyType``, the default value is ``'STRING'``."},"hashKeyValue":{"type":"string","description":"The value of the hash key (also called the partition key)."},"operation":{"type":"string","description":"The type of operation to perform. You can specify the following values: \n  +   ``'INSERT'`` - Insert data as a new item into the DynamoDB table. This item uses the specified hash key as a partition key. If you specified a range key, the item uses the range key as a sort key.\n  +   ``'UPDATE'`` - Update an existing item of the DynamoDB table with new data. This item's partition key must match the specified hash key. If you specified a range key, the range key must match the item's sort key.\n  +   ``'DELETE'`` - Delete an existing item of the DynamoDB table. This item's partition key must match the specified hash key. If you specified a range key, the range key must match the item's sort key.\n  \n If you don't specify this parameter, ITE triggers the ``'INSERT'`` operation."},"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"Information needed to configure the payload.\n By default, ITE generates a standard payload in JSON for any action. This action payload contains all attribute-value pairs that have the information about the detector model instance and the event triggered the action. To configure the action payload, you can use ``contentExpression``."},"payloadField":{"type":"string","description":"The name of the DynamoDB column that receives the action payload.\n If you don't specify this parameter, the name of the DynamoDB column is ``payload``."},"rangeKeyField":{"type":"string","description":"The name of the range key (also called the sort key). The ``rangeKeyField`` value must match the sort key of the target DynamoDB table."},"rangeKeyType":{"type":"string","description":"The data type for the range key (also called the sort key), You can specify the following values:\n  +   ``'STRING'`` - The range key is a string.\n  +   ``'NUMBER'`` - The range key is number.\n  \n If you don't specify ``rangeKeyField``, the default value is ``'STRING'``."},"rangeKeyValue":{"type":"string","description":"The value of the range key (also called the sort key)."},"tableName":{"type":"string","description":"The name of the DynamoDB table. The ``tableName`` value must match the table name of the target DynamoDB table."}},"type":"object","required":["hashKeyField","hashKeyValue","tableName"]},"aws-native:iotevents:AlarmModelFirehose":{"description":"Sends information about the detector model instance and the event that triggered the action to an Amazon Kinesis Data Firehose delivery stream.","properties":{"deliveryStreamName":{"type":"string","description":"The name of the Kinesis Data Firehose delivery stream where the data is written."},"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"You can configure the action payload when you send a message to an Amazon Data Firehose delivery stream."},"separator":{"type":"string","description":"A character separator that is used to separate records written to the Kinesis Data Firehose delivery stream. Valid values are: '\\n' (newline), '\\t' (tab), '\\r\\n' (Windows newline), ',' (comma)."}},"type":"object","required":["deliveryStreamName"]},"aws-native:iotevents:AlarmModelInitializationConfiguration":{"description":"Specifies the default alarm state. The configuration applies to all alarms that were created based on this alarm model.","properties":{"disabledOnInitialization":{"type":"boolean","description":"The value must be ``TRUE`` or ``FALSE``. If ``FALSE``, all alarm instances created based on the alarm model are activated. The default value is ``TRUE``."}},"type":"object","required":["disabledOnInitialization"]},"aws-native:iotevents:AlarmModelIotEvents":{"description":"Sends an ITE input, passing in information about the detector model instance and the event that triggered the action.","properties":{"inputName":{"type":"string","description":"The name of the ITE input where the data is sent."},"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"You can configure the action payload when you send a message to an ITE input."}},"type":"object","required":["inputName"]},"aws-native:iotevents:AlarmModelIotSiteWise":{"description":"Sends information about the detector model instance and the event that triggered the action to a specified asset property in ITSW.\n You must use expressions for all parameters in ``IotSiteWiseAction``. The expressions accept literals, operators, functions, references, and substitutions templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``propertyAlias`` parameter can be ``'/company/windfarm/3/turbine/7/temperature'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``assetId`` parameter can be ``$input.TurbineInput.assetId1``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``propertyAlias`` parameter uses a substitution template. \n  ``'company/windfarm/${$input.TemperatureInput.sensorData.windfarmID}/turbine/ ${$input.TemperatureInput.sensorData.turbineID}/temperature'`` \n  \n You must specify either ``propertyAlias`` or both ``assetId`` and ``propertyId`` to identify the target asset property in ITSW.\n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.","properties":{"assetId":{"type":"string","description":"The ID of the asset that has the specified property."},"entryId":{"type":"string","description":"A unique identifier for this entry. You can use the entry ID to track which data entry causes an error in case of failure. The default is a new unique identifier."},"propertyAlias":{"type":"string","description":"The alias of the asset property."},"propertyId":{"type":"string","description":"The ID of the asset property."},"propertyValue":{"$ref":"#/types/aws-native:iotevents:AlarmModelAssetPropertyValue","description":"The value to send to the asset property. This value contains timestamp, quality, and value (TQV) information."}},"type":"object"},"aws-native:iotevents:AlarmModelIotTopicPublish":{"description":"Information required to publish the MQTT message through the IoT message broker.","properties":{"mqttTopic":{"type":"string","description":"The MQTT topic of the message. You can use a string expression that includes variables (``$variable.\u003cvariable-name\u003e``) and input values (``$input.\u003cinput-name\u003e.\u003cpath-to-datum\u003e``) as the topic string."},"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"You can configure the action payload when you publish a message to an IoTCore topic."}},"type":"object","required":["mqttTopic"]},"aws-native:iotevents:AlarmModelLambda":{"description":"Calls a Lambda function, passing in information about the detector model instance and the event that triggered the action.","properties":{"functionArn":{"type":"string","description":"The ARN of the Lambda function that is executed."},"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"You can configure the action payload when you send a message to a Lambda function."}},"type":"object","required":["functionArn"]},"aws-native:iotevents:AlarmModelPayload":{"description":"Information needed to configure the payload.\n By default, ITE generates a standard payload in JSON for any action. This action payload contains all attribute-value pairs that have the information about the detector model instance and the event triggered the action. To configure the action payload, you can use ``contentExpression``.","properties":{"contentExpression":{"type":"string","description":"The content of the payload. You can use a string expression that includes quoted strings (``'\u003cstring\u003e'``), variables (``$variable.\u003cvariable-name\u003e``), input values (``$input.\u003cinput-name\u003e.\u003cpath-to-datum\u003e``), string concatenations, and quoted strings that contain ``${}`` as the content. The recommended maximum size of a content expression is 1 KB."},"type":{"type":"string","description":"The value of the payload type can be either ``STRING`` or ``JSON``."}},"type":"object","required":["contentExpression","type"]},"aws-native:iotevents:AlarmModelSimpleRule":{"description":"A rule that compares an input property value to a threshold value with a comparison operator.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:iotevents:AlarmModelSimpleRuleComparisonOperator","description":"The comparison operator."},"inputProperty":{"type":"string","description":"The value on the left side of the comparison operator. You can specify an ITE input attribute as an input property."},"threshold":{"type":"string","description":"The value on the right side of the comparison operator. You can enter a number or specify an ITE input attribute."}},"type":"object","required":["comparisonOperator","inputProperty","threshold"]},"aws-native:iotevents:AlarmModelSimpleRuleComparisonOperator":{"description":"The comparison operator.","type":"string","enum":[{"name":"Greater","value":"GREATER"},{"name":"GreaterOrEqual","value":"GREATER_OR_EQUAL"},{"name":"Less","value":"LESS"},{"name":"LessOrEqual","value":"LESS_OR_EQUAL"},{"name":"Equal","value":"EQUAL"},{"name":"NotEqual","value":"NOT_EQUAL"}]},"aws-native:iotevents:AlarmModelSns":{"description":"Information required to publish the Amazon SNS message.","properties":{"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"You can configure the action payload when you send a message as an Amazon SNS push notification."},"targetArn":{"type":"string","description":"The ARN of the Amazon SNS target where the message is sent."}},"type":"object","required":["targetArn"]},"aws-native:iotevents:AlarmModelSqs":{"description":"Sends information about the detector model instance and the event that triggered the action to an Amazon SQS queue.","properties":{"payload":{"$ref":"#/types/aws-native:iotevents:AlarmModelPayload","description":"You can configure the action payload when you send a message to an Amazon SQS queue."},"queueUrl":{"type":"string","description":"The URL of the SQS queue where the data is written."},"useBase64":{"type":"boolean","description":"Set this to TRUE if you want the data to be base-64 encoded before it is written to the queue. Otherwise, set this to FALSE."}},"type":"object","required":["queueUrl"]},"aws-native:iotevents:AlarmModelTag":{"description":"Metadata that can be used to manage the resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotevents:DetectorModelAction":{"description":"An action to be performed when the ``condition`` is TRUE.","properties":{"clearTimer":{"$ref":"#/types/aws-native:iotevents:DetectorModelClearTimer","description":"Information needed to clear the timer."},"dynamoDBv2":{"$ref":"#/types/aws-native:iotevents:DetectorModelDynamoDBv2","description":"Writes to the DynamoDB table that you created. The default action payload contains all attribute-value pairs that have the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). A separate column of the DynamoDB table receives one attribute-value pair in the payload that you specify. For more information, see [Actions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-event-actions.html) in *Developer Guide*."},"dynamoDb":{"$ref":"#/types/aws-native:iotevents:DetectorModelDynamoDb","description":"Writes to the DynamoDB table that you created. The default action payload contains all attribute-value pairs that have the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). One column of the DynamoDB table receives all attribute-value pairs in the payload that you specify. For more information, see [Actions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-event-actions.html) in *Developer Guide*."},"firehose":{"$ref":"#/types/aws-native:iotevents:DetectorModelFirehose","description":"Sends information about the detector model instance and the event that triggered the action to an Amazon Kinesis Data Firehose delivery stream."},"iotEvents":{"$ref":"#/types/aws-native:iotevents:DetectorModelIotEvents","description":"Sends ITE input, which passes information about the detector model instance and the event that triggered the action."},"iotSiteWise":{"$ref":"#/types/aws-native:iotevents:DetectorModelIotSiteWise","description":"Sends information about the detector model instance and the event that triggered the action to an asset property in ITSW ."},"iotTopicPublish":{"$ref":"#/types/aws-native:iotevents:DetectorModelIotTopicPublish","description":"Publishes an MQTT message with the given topic to the IoT message broker."},"lambda":{"$ref":"#/types/aws-native:iotevents:DetectorModelLambda","description":"Calls a Lambda function, passing in information about the detector model instance and the event that triggered the action."},"resetTimer":{"$ref":"#/types/aws-native:iotevents:DetectorModelResetTimer","description":"Information needed to reset the timer."},"setTimer":{"$ref":"#/types/aws-native:iotevents:DetectorModelSetTimer","description":"Information needed to set the timer."},"setVariable":{"$ref":"#/types/aws-native:iotevents:DetectorModelSetVariable","description":"Sets a variable to a specified value."},"sns":{"$ref":"#/types/aws-native:iotevents:DetectorModelSns","description":"Sends an Amazon SNS message."},"sqs":{"$ref":"#/types/aws-native:iotevents:DetectorModelSqs","description":"Sends an Amazon SNS message."}},"type":"object"},"aws-native:iotevents:DetectorModelAssetPropertyTimestamp":{"description":"A structure that contains timestamp information. For more information, see [TimeInNanos](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_TimeInNanos.html) in the *API Reference*.\n You must use expressions for all parameters in ``AssetPropertyTimestamp``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``timeInSeconds`` parameter can be ``'1586400675'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``offsetInNanos`` parameter can be ``$variable.time``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``timeInSeconds`` parameter uses a substitution template.\n  ``'${$input.TemperatureInput.sensorData.timestamp / 1000}'`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.","properties":{"offsetInNanos":{"type":"string","description":"The nanosecond offset converted from ``timeInSeconds``. The valid range is between 0-999999999."},"timeInSeconds":{"type":"string","description":"The timestamp, in seconds, in the Unix epoch format. The valid range is between 1-31556889864403199."}},"type":"object","required":["timeInSeconds"]},"aws-native:iotevents:DetectorModelAssetPropertyValue":{"description":"A structure that contains value information. For more information, see [AssetPropertyValue](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_AssetPropertyValue.html) in the *API Reference*.\n You must use expressions for all parameters in ``AssetPropertyValue``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``quality`` parameter can be ``'GOOD'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``quality`` parameter can be ``$input.TemperatureInput.sensorData.quality``.\n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.","properties":{"quality":{"type":"string","description":"The quality of the asset property value. The value must be ``'GOOD'``, ``'BAD'``, or ``'UNCERTAIN'``."},"timestamp":{"$ref":"#/types/aws-native:iotevents:DetectorModelAssetPropertyTimestamp","description":"The timestamp associated with the asset property value. The default is the current event time."},"value":{"$ref":"#/types/aws-native:iotevents:DetectorModelAssetPropertyVariant","description":"The value to send to an asset property."}},"type":"object","required":["value"]},"aws-native:iotevents:DetectorModelAssetPropertyVariant":{"description":"A structure that contains an asset property value. For more information, see [Variant](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_Variant.html) in the *API Reference*.\n You must use expressions for all parameters in ``AssetPropertyVariant``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``integerValue`` parameter can be ``'100'``.\n  +  For references, you must specify either variables or parameters. For example, the value for the ``booleanValue`` parameter can be ``$variable.offline``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates. \n In the following example, the value for the ``doubleValue`` parameter uses a substitution template. \n  ``'${$input.TemperatureInput.sensorData.temperature * 6 / 5 + 32}'`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n You must specify one of the following value types, depending on the ``dataType`` of the specified asset property. For more information, see [AssetProperty](https://docs.aws.amazon.com/iot-sitewise/latest/APIReference/API_AssetProperty.html) in the *API Reference*.","properties":{"booleanValue":{"type":"string","description":"The asset property value is a Boolean value that must be ``'TRUE'`` or ``'FALSE'``. You must use an expression, and the evaluated result should be a Boolean value."},"doubleValue":{"type":"string","description":"The asset property value is a double. You must use an expression, and the evaluated result should be a double."},"integerValue":{"type":"string","description":"The asset property value is an integer. You must use an expression, and the evaluated result should be an integer."},"stringValue":{"type":"string","description":"The asset property value is a string. You must use an expression, and the evaluated result should be a string."}},"type":"object"},"aws-native:iotevents:DetectorModelClearTimer":{"description":"Information needed to clear the timer.","properties":{"timerName":{"type":"string","description":"The name of the timer to clear."}},"type":"object","required":["timerName"]},"aws-native:iotevents:DetectorModelDefinition":{"description":"Information that defines how a detector operates.","properties":{"initialStateName":{"type":"string","description":"The state that is entered at the creation of each detector (instance)."},"states":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelState"},"description":"Information about the states of the detector."}},"type":"object","required":["initialStateName","states"]},"aws-native:iotevents:DetectorModelDynamoDBv2":{"description":"Defines an action to write to the Amazon DynamoDB table that you created. The default action payload contains all the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). A separate column of the DynamoDB table receives one attribute-value pair in the payload that you specify.\n You must use expressions for all parameters in ``DynamoDBv2Action``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``tableName`` parameter can be ``'GreenhouseTemperatureTable'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``tableName`` parameter can be ``$variable.ddbtableName``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``contentExpression`` parameter in ``Payload`` uses a substitution template. \n  ``'{\\\"sensorID\\\": \\\"${$input.GreenhouseInput.sensor_id}\\\", \\\"temperature\\\": \\\"${$input.GreenhouseInput.temperature * 9 / 5 + 32}\\\"}'`` \n  +  For a string concatenation, you must use ``+``. A string concatenation can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``tableName`` parameter uses a string concatenation. \n  ``'GreenhouseTemperatureTable ' + $input.GreenhouseInput.date`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n The value for the ``type`` parameter in ``Payload`` must be ``JSON``.","properties":{"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"Information needed to configure the payload.\n By default, ITE generates a standard payload in JSON for any action. This action payload contains all attribute-value pairs that have the information about the detector model instance and the event triggered the action. To configure the action payload, you can use ``contentExpression``."},"tableName":{"type":"string","description":"The name of the DynamoDB table."}},"type":"object","required":["tableName"]},"aws-native:iotevents:DetectorModelDynamoDb":{"description":"Defines an action to write to the Amazon DynamoDB table that you created. The standard action payload contains all the information about the detector model instance and the event that triggered the action. You can customize the [payload](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Payload.html). One column of the DynamoDB table receives all attribute-value pairs in the payload that you specify.\n You must use expressions for all parameters in ``DynamoDBAction``. The expressions accept literals, operators, functions, references, and substitution templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``hashKeyType`` parameter can be ``'STRING'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``hashKeyField`` parameter can be ``$input.GreenhouseInput.name``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``hashKeyValue`` parameter uses a substitution template. \n  ``'${$input.GreenhouseInput.temperature * 6 / 5 + 32} in Fahrenheit'`` \n  +  For a string concatenation, you must use ``+``. A string concatenation can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``tableName`` parameter uses a string concatenation. \n  ``'GreenhouseTemperatureTable ' + $input.GreenhouseInput.date`` \n  \n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.\n If the defined payload type is a string, ``DynamoDBAction`` writes non-JSON data to the DynamoDB table as binary data. The DynamoDB console displays the data as Base64-encoded text. The value for the ``payloadField`` parameter is ``\u003cpayload-field\u003e_raw``.","properties":{"hashKeyField":{"type":"string","description":"The name of the hash key (also called the partition key). The ``hashKeyField`` value must match the partition key of the target DynamoDB table."},"hashKeyType":{"type":"string","description":"The data type for the hash key (also called the partition key). You can specify the following values:\n  +   ``'STRING'`` - The hash key is a string.\n  +   ``'NUMBER'`` - The hash key is a number.\n  \n If you don't specify ``hashKeyType``, the default value is ``'STRING'``."},"hashKeyValue":{"type":"string","description":"The value of the hash key (also called the partition key)."},"operation":{"type":"string","description":"The type of operation to perform. You can specify the following values: \n  +   ``'INSERT'`` - Insert data as a new item into the DynamoDB table. This item uses the specified hash key as a partition key. If you specified a range key, the item uses the range key as a sort key.\n  +   ``'UPDATE'`` - Update an existing item of the DynamoDB table with new data. This item's partition key must match the specified hash key. If you specified a range key, the range key must match the item's sort key.\n  +   ``'DELETE'`` - Delete an existing item of the DynamoDB table. This item's partition key must match the specified hash key. If you specified a range key, the range key must match the item's sort key.\n  \n If you don't specify this parameter, ITE triggers the ``'INSERT'`` operation."},"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"Information needed to configure the payload.\n By default, ITE generates a standard payload in JSON for any action. This action payload contains all attribute-value pairs that have the information about the detector model instance and the event triggered the action. To configure the action payload, you can use ``contentExpression``."},"payloadField":{"type":"string","description":"The name of the DynamoDB column that receives the action payload.\n If you don't specify this parameter, the name of the DynamoDB column is ``payload``."},"rangeKeyField":{"type":"string","description":"The name of the range key (also called the sort key). The ``rangeKeyField`` value must match the sort key of the target DynamoDB table."},"rangeKeyType":{"type":"string","description":"The data type for the range key (also called the sort key), You can specify the following values:\n  +   ``'STRING'`` - The range key is a string.\n  +   ``'NUMBER'`` - The range key is number.\n  \n If you don't specify ``rangeKeyField``, the default value is ``'STRING'``."},"rangeKeyValue":{"type":"string","description":"The value of the range key (also called the sort key)."},"tableName":{"type":"string","description":"The name of the DynamoDB table. The ``tableName`` value must match the table name of the target DynamoDB table."}},"type":"object","required":["hashKeyField","hashKeyValue","tableName"]},"aws-native:iotevents:DetectorModelEvaluationMethod":{"description":"Information about the order in which events are evaluated and how actions are executed.","type":"string","enum":[{"name":"Batch","value":"BATCH"},{"name":"Serial","value":"SERIAL"}]},"aws-native:iotevents:DetectorModelEvent":{"description":"Specifies the ``actions`` to be performed when the ``condition`` evaluates to TRUE.","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelAction"},"description":"The actions to be performed."},"condition":{"type":"string","description":"Optional. The Boolean expression that, when TRUE, causes the ``actions`` to be performed. If not present, the actions are performed (=TRUE). If the expression result is not a Boolean value, the actions are not performed (=FALSE)."},"eventName":{"type":"string","description":"The name of the event."}},"type":"object","required":["eventName"]},"aws-native:iotevents:DetectorModelFirehose":{"description":"Sends information about the detector model instance and the event that triggered the action to an Amazon Kinesis Data Firehose delivery stream.","properties":{"deliveryStreamName":{"type":"string","description":"The name of the Kinesis Data Firehose delivery stream where the data is written."},"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"You can configure the action payload when you send a message to an Amazon Data Firehose delivery stream."},"separator":{"type":"string","description":"A character separator that is used to separate records written to the Kinesis Data Firehose delivery stream. Valid values are: '\\n' (newline), '\\t' (tab), '\\r\\n' (Windows newline), ',' (comma)."}},"type":"object","required":["deliveryStreamName"]},"aws-native:iotevents:DetectorModelIotEvents":{"description":"Sends an ITE input, passing in information about the detector model instance and the event that triggered the action.","properties":{"inputName":{"type":"string","description":"The name of the ITE input where the data is sent."},"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"You can configure the action payload when you send a message to an ITE input."}},"type":"object","required":["inputName"]},"aws-native:iotevents:DetectorModelIotSiteWise":{"description":"Sends information about the detector model instance and the event that triggered the action to a specified asset property in ITSW.\n You must use expressions for all parameters in ``IotSiteWiseAction``. The expressions accept literals, operators, functions, references, and substitutions templates.\n  **Examples**\n +  For literal values, the expressions must contain single quotes. For example, the value for the ``propertyAlias`` parameter can be ``'/company/windfarm/3/turbine/7/temperature'``.\n  +  For references, you must specify either variables or input values. For example, the value for the ``assetId`` parameter can be ``$input.TurbineInput.assetId1``.\n  +  For a substitution template, you must use ``${}``, and the template must be in single quotes. A substitution template can also contain a combination of literals, operators, functions, references, and substitution templates.\n In the following example, the value for the ``propertyAlias`` parameter uses a substitution template. \n  ``'company/windfarm/${$input.TemperatureInput.sensorData.windfarmID}/turbine/ ${$input.TemperatureInput.sensorData.turbineID}/temperature'`` \n  \n You must specify either ``propertyAlias`` or both ``assetId`` and ``propertyId`` to identify the target asset property in ITSW.\n For more information, see [Expressions](https://docs.aws.amazon.com/iotevents/latest/developerguide/iotevents-expressions.html) in the *Developer Guide*.","properties":{"assetId":{"type":"string","description":"The ID of the asset that has the specified property."},"entryId":{"type":"string","description":"A unique identifier for this entry. You can use the entry ID to track which data entry causes an error in case of failure. The default is a new unique identifier."},"propertyAlias":{"type":"string","description":"The alias of the asset property."},"propertyId":{"type":"string","description":"The ID of the asset property."},"propertyValue":{"$ref":"#/types/aws-native:iotevents:DetectorModelAssetPropertyValue","description":"The value to send to the asset property. This value contains timestamp, quality, and value (TQV) information."}},"type":"object","required":["propertyValue"]},"aws-native:iotevents:DetectorModelIotTopicPublish":{"description":"Information required to publish the MQTT message through the IoT message broker.","properties":{"mqttTopic":{"type":"string","description":"The MQTT topic of the message. You can use a string expression that includes variables (``$variable.\u003cvariable-name\u003e``) and input values (``$input.\u003cinput-name\u003e.\u003cpath-to-datum\u003e``) as the topic string."},"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"You can configure the action payload when you publish a message to an IoTCore topic."}},"type":"object","required":["mqttTopic"]},"aws-native:iotevents:DetectorModelLambda":{"description":"Calls a Lambda function, passing in information about the detector model instance and the event that triggered the action.","properties":{"functionArn":{"type":"string","description":"The ARN of the Lambda function that is executed."},"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"You can configure the action payload when you send a message to a Lambda function."}},"type":"object","required":["functionArn"]},"aws-native:iotevents:DetectorModelOnEnter":{"description":"When entering this state, perform these ``actions`` if the ``condition`` is TRUE.","properties":{"events":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelEvent"},"description":"Specifies the actions that are performed when the state is entered and the ``condition`` is ``TRUE``."}},"type":"object"},"aws-native:iotevents:DetectorModelOnExit":{"description":"When exiting this state, perform these ``actions`` if the specified ``condition`` is ``TRUE``.","properties":{"events":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelEvent"},"description":"Specifies the ``actions`` that are performed when the state is exited and the ``condition`` is ``TRUE``."}},"type":"object"},"aws-native:iotevents:DetectorModelOnInput":{"description":"Specifies the actions performed when the ``condition`` evaluates to TRUE.","properties":{"events":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelEvent"},"description":"Specifies the actions performed when the ``condition`` evaluates to TRUE."},"transitionEvents":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelTransitionEvent"},"description":"Specifies the actions performed, and the next state entered, when a ``condition`` evaluates to TRUE."}},"type":"object"},"aws-native:iotevents:DetectorModelPayload":{"description":"Information needed to configure the payload.\n By default, ITE generates a standard payload in JSON for any action. This action payload contains all attribute-value pairs that have the information about the detector model instance and the event triggered the action. To configure the action payload, you can use ``contentExpression``.","properties":{"contentExpression":{"type":"string","description":"The content of the payload. You can use a string expression that includes quoted strings (``'\u003cstring\u003e'``), variables (``$variable.\u003cvariable-name\u003e``), input values (``$input.\u003cinput-name\u003e.\u003cpath-to-datum\u003e``), string concatenations, and quoted strings that contain ``${}`` as the content. The recommended maximum size of a content expression is 1 KB."},"type":{"type":"string","description":"The value of the payload type can be either ``STRING`` or ``JSON``."}},"type":"object","required":["contentExpression","type"]},"aws-native:iotevents:DetectorModelResetTimer":{"description":"Information required to reset the timer. The timer is reset to the previously evaluated result of the duration. The duration expression isn't reevaluated when you reset the timer.","properties":{"timerName":{"type":"string","description":"The name of the timer to reset."}},"type":"object","required":["timerName"]},"aws-native:iotevents:DetectorModelSetTimer":{"description":"Information needed to set the timer.","properties":{"durationExpression":{"type":"string","description":"The duration of the timer, in seconds. You can use a string expression that includes numbers, variables (``$variable.\u003cvariable-name\u003e``), and input values (``$input.\u003cinput-name\u003e.\u003cpath-to-datum\u003e``) as the duration. The range of the duration is 1-31622400 seconds. To ensure accuracy, the minimum duration is 60 seconds. The evaluated result of the duration is rounded down to the nearest whole number."},"seconds":{"type":"integer","description":"The number of seconds until the timer expires. The minimum value is 60 seconds to ensure accuracy. The maximum value is 31622400 seconds."},"timerName":{"type":"string","description":"The name of the timer."}},"type":"object","required":["timerName"]},"aws-native:iotevents:DetectorModelSetVariable":{"description":"Information about the variable and its new value.","properties":{"value":{"type":"string","description":"The new value of the variable."},"variableName":{"type":"string","description":"The name of the variable."}},"type":"object","required":["value","variableName"]},"aws-native:iotevents:DetectorModelSns":{"description":"Information required to publish the Amazon SNS message.","properties":{"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"You can configure the action payload when you send a message as an Amazon SNS push notification."},"targetArn":{"type":"string","description":"The ARN of the Amazon SNS target where the message is sent."}},"type":"object","required":["targetArn"]},"aws-native:iotevents:DetectorModelSqs":{"description":"Sends information about the detector model instance and the event that triggered the action to an Amazon SQS queue.","properties":{"payload":{"$ref":"#/types/aws-native:iotevents:DetectorModelPayload","description":"You can configure the action payload when you send a message to an Amazon SQS queue."},"queueUrl":{"type":"string","description":"The URL of the SQS queue where the data is written."},"useBase64":{"type":"boolean","description":"Set this to TRUE if you want the data to be base-64 encoded before it is written to the queue. Otherwise, set this to FALSE."}},"type":"object","required":["queueUrl"]},"aws-native:iotevents:DetectorModelState":{"description":"Information that defines a state of a detector.","properties":{"onEnter":{"$ref":"#/types/aws-native:iotevents:DetectorModelOnEnter","description":"When entering this state, perform these ``actions`` if the ``condition`` is TRUE."},"onExit":{"$ref":"#/types/aws-native:iotevents:DetectorModelOnExit","description":"When exiting this state, perform these ``actions`` if the specified ``condition`` is ``TRUE``."},"onInput":{"$ref":"#/types/aws-native:iotevents:DetectorModelOnInput","description":"When an input is received and the ``condition`` is TRUE, perform the specified ``actions``."},"stateName":{"type":"string","description":"The name of the state."}},"type":"object","required":["stateName"]},"aws-native:iotevents:DetectorModelTag":{"description":"Metadata that can be used to manage the resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotevents:DetectorModelTransitionEvent":{"description":"Specifies the actions performed and the next state entered when a ``condition`` evaluates to TRUE.","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:DetectorModelAction"},"description":"The actions to be performed."},"condition":{"type":"string","description":"Required. A Boolean expression that when TRUE causes the actions to be performed and the ``nextState`` to be entered."},"eventName":{"type":"string","description":"The name of the transition event."},"nextState":{"type":"string","description":"The next state to enter."}},"type":"object","required":["condition","eventName","nextState"]},"aws-native:iotevents:InputAttribute":{"description":"The attributes from the JSON payload that are made available by the input. Inputs are derived from messages sent to the ITE system using ``BatchPutMessage``. Each such message contains a JSON payload. Those attributes (and their paired values) specified here are available for use in the ``condition`` expressions used by detectors.","properties":{"jsonPath":{"type":"string","description":"An expression that specifies an attribute-value pair in a JSON structure. Use this to specify an attribute from the JSON payload that is made available by the input. Inputs are derived from messages sent to ITE (``BatchPutMessage``). Each such message contains a JSON payload. The attribute (and its paired value) specified here are available for use in the ``condition`` expressions used by detectors. \n Syntax: ``\u003cfield-name\u003e.\u003cfield-name\u003e...``"}},"type":"object","required":["jsonPath"]},"aws-native:iotevents:InputDefinition":{"description":"The definition of the input.","properties":{"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:iotevents:InputAttribute"},"description":"The attributes from the JSON payload that are made available by the input. Inputs are derived from messages sent to the ITE system using ``BatchPutMessage``. Each such message contains a JSON payload, and those attributes (and their paired values) specified here are available for use in the ``condition`` expressions used by detectors that monitor this input."}},"type":"object","required":["attributes"]},"aws-native:iotevents:InputTag":{"description":"Metadata that can be used to manage the resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:iotfleethub:ApplicationTag":{"description":"To add or update tag, provide both key and value. To delete tag, provide only tag key to be deleted.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:AccessPolicyIamRole":{"description":"Contains information for an IAM role identity in an access policy.","properties":{"arn":{"type":"string","description":"The ARN of the IAM role."}},"type":"object"},"aws-native:iotsitewise:AccessPolicyIamUser":{"description":"Contains information for an IAM user identity in an access policy.","properties":{"arn":{"type":"string","description":"The ARN of the IAM user."}},"type":"object"},"aws-native:iotsitewise:AccessPolicyIdentity":{"description":"The identity for this access policy. Choose either an SSO user or group or an IAM user or role.","properties":{"iamRole":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyIamRole","description":"An IAM role identity."},"iamUser":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyIamUser","description":"An IAM user identity."},"user":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyUser","description":"An IAM Identity Center user identity."}},"type":"object"},"aws-native:iotsitewise:AccessPolicyPortal":{"description":"A portal resource.","properties":{"id":{"type":"string","description":"The ID of the portal."}},"type":"object"},"aws-native:iotsitewise:AccessPolicyProject":{"description":"A project resource.","properties":{"id":{"type":"string","description":"The ID of the project."}},"type":"object"},"aws-native:iotsitewise:AccessPolicyResource":{"description":"The AWS IoT SiteWise Monitor resource for this access policy. Choose either portal or project but not both.","properties":{"portal":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyPortal","description":"Identifies an AWS IoT SiteWise Monitor portal."},"project":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyProject","description":"Identifies a specific AWS IoT SiteWise Monitor project."}},"type":"object"},"aws-native:iotsitewise:AccessPolicyUser":{"description":"Contains information for a user identity in an access policy.","properties":{"id":{"type":"string","description":"The AWS SSO ID of the user."}},"type":"object"},"aws-native:iotsitewise:AlarmsProperties":{"description":"Contains the configuration information of an alarm created in an AWS IoT SiteWise Monitor portal. You can use the alarm to monitor an asset property and get notified when the asset property value is outside a specified range.","properties":{"alarmRoleArn":{"type":"string","description":"The ARN of the IAM role that allows the alarm to perform actions and access AWS resources and services, such as AWS IoT Events."},"notificationLambdaArn":{"type":"string","description":"The ARN of the AWS Lambda function that manages alarm notifications. For more information, see Managing alarm notifications in the AWS IoT Events Developer Guide."}},"type":"object"},"aws-native:iotsitewise:AssetHierarchy":{"description":"A hierarchy specifies allowed parent/child asset relationships.","properties":{"childAssetId":{"type":"string","description":"The ID of the child asset to be associated."},"externalId":{"type":"string","description":"String-friendly customer provided external ID"},"id":{"type":"string","description":"Customer provided actual UUID for property"},"logicalId":{"type":"string","description":"The LogicalID of a hierarchy in the parent asset's model."}},"type":"object","required":["childAssetId"]},"aws-native:iotsitewise:AssetModelAttribute":{"properties":{"defaultValue":{"type":"string","description":"The default value of the asset model property attribute. All assets that you create from the asset model contain this attribute value. You can update an attribute's value after you create an asset. For more information, see [Updating attribute values](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/update-attribute-values.html) in the *AWS IoT SiteWise User Guide* ."}},"type":"object"},"aws-native:iotsitewise:AssetModelCompositeModel":{"description":"Contains a composite model definition in an asset model. This composite model definition is applied to all assets created from the asset model.","properties":{"composedAssetModelId":{"type":"string","description":"The component model ID for which the composite model is composed of"},"compositeModelProperties":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelProperty"},"description":"The property definitions of the asset model. You can specify up to 200 properties per asset model."},"description":{"type":"string","description":"A description for the asset composite model."},"externalId":{"type":"string","description":"The External ID of the composite model"},"id":{"type":"string","description":"The Actual ID of the composite model"},"name":{"type":"string","description":"A unique, friendly name for the asset composite model."},"parentAssetModelCompositeModelExternalId":{"type":"string","description":"The parent composite model External ID"},"path":{"type":"array","items":{"type":"string"},"description":"The path of the composite model. This is only for derived composite models"},"type":{"type":"string","description":"The type of the composite model. For alarm composite models, this type is AWS/ALARM"}},"type":"object","required":["name","type"]},"aws-native:iotsitewise:AssetModelDataType":{"type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Double","value":"DOUBLE"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Struct","value":"STRUCT"}]},"aws-native:iotsitewise:AssetModelDataTypeSpec":{"type":"string","enum":[{"name":"AwsalarmState","value":"AWS/ALARM_STATE"}]},"aws-native:iotsitewise:AssetModelEnforcedAssetModelInterfacePropertyMapping":{"description":"Contains information about enforced interface property and asset model property","properties":{"assetModelPropertyExternalId":{"type":"string","description":"The external ID of the enforced asset model property"},"assetModelPropertyLogicalId":{"type":"string","description":"The logical ID of the enforced asset model property"},"interfaceAssetModelPropertyExternalId":{"type":"string","description":"The external ID of the enforced interface property"}},"type":"object","required":["interfaceAssetModelPropertyExternalId"]},"aws-native:iotsitewise:AssetModelEnforcedAssetModelInterfaceRelationship":{"description":"Contains information about enforced interface hierarchy and asset model hierarchy","properties":{"interfaceAssetModelId":{"type":"string","description":"The ID of the interface that is enforced to the asset model"},"propertyMappings":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelEnforcedAssetModelInterfacePropertyMapping"},"description":"Contains information about enforced interface property and asset model property"}},"type":"object"},"aws-native:iotsitewise:AssetModelExpressionVariable":{"properties":{"name":{"type":"string","description":"The friendly name of the variable to be used in the expression."},"value":{"$ref":"#/types/aws-native:iotsitewise:AssetModelVariableValue","description":"The variable that identifies an asset property from which to use values."}},"type":"object","required":["name","value"]},"aws-native:iotsitewise:AssetModelHierarchy":{"description":"Contains information about an asset model hierarchy.","properties":{"childAssetModelId":{"type":"string","description":"The ID of the asset model. All assets in this hierarchy must be instances of the child AssetModelId asset model."},"externalId":{"type":"string","description":"Customer provided external ID for hierarchy"},"id":{"type":"string","description":"Customer provided actual ID for hierarchy"},"logicalId":{"type":"string","description":"Customer provided logical ID for hierarchy."},"name":{"type":"string","description":"The name of the asset model hierarchy."}},"type":"object","required":["childAssetModelId","name"]},"aws-native:iotsitewise:AssetModelMetric":{"properties":{"expression":{"type":"string","description":"The mathematical expression that defines the metric aggregation function. You can specify up to 10 functions per expression."},"variables":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelExpressionVariable"},"description":"The list of variables used in the expression."},"window":{"$ref":"#/types/aws-native:iotsitewise:AssetModelMetricWindow","description":"The window (time interval) over which AWS IoT SiteWise computes the metric's aggregation expression"}},"type":"object","required":["expression","variables","window"]},"aws-native:iotsitewise:AssetModelMetricWindow":{"description":"Contains a time interval window used for data aggregate computations (for example, average, sum, count, and so on).","properties":{"tumbling":{"$ref":"#/types/aws-native:iotsitewise:AssetModelTumblingWindow","description":"The tumbling time interval window."}},"type":"object"},"aws-native:iotsitewise:AssetModelProperty":{"description":"Contains information about an asset model property.","properties":{"dataType":{"$ref":"#/types/aws-native:iotsitewise:AssetModelDataType","description":"The data type of the asset model property."},"dataTypeSpec":{"$ref":"#/types/aws-native:iotsitewise:AssetModelDataTypeSpec","description":"The data type of the structure for this property."},"externalId":{"type":"string","description":"The External ID of the Asset Model Property"},"id":{"type":"string","description":"The ID of the Asset Model Property"},"logicalId":{"type":"string","description":"Customer provided Logical ID for property."},"name":{"type":"string","description":"The name of the asset model property."},"type":{"$ref":"#/types/aws-native:iotsitewise:AssetModelPropertyType","description":"The property type"},"unit":{"type":"string","description":"The unit of the asset model property, such as Newtons or RPM."}},"type":"object","required":["dataType","name","type"]},"aws-native:iotsitewise:AssetModelPropertyPathDefinition":{"description":"The definition for property path which is used to reference properties in transforms/metrics","properties":{"name":{"type":"string","description":"The name of the property"}},"type":"object","required":["name"]},"aws-native:iotsitewise:AssetModelPropertyType":{"description":"Contains a property type, which can be one of attribute, measurement, metric, or transform.","properties":{"attribute":{"$ref":"#/types/aws-native:iotsitewise:AssetModelAttribute","description":"Specifies an asset attribute property. An attribute generally contains static information, such as the serial number of an [IIoT](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Internet_of_things#Industrial_applications) wind turbine."},"metric":{"$ref":"#/types/aws-native:iotsitewise:AssetModelMetric","description":"Specifies an asset metric property. A metric contains a mathematical expression that uses aggregate functions to process all input data points over a time interval and output a single data point, such as to calculate the average hourly temperature."},"transform":{"$ref":"#/types/aws-native:iotsitewise:AssetModelTransform","description":"Specifies an asset transform property. A transform contains a mathematical expression that maps a property's data points from one form to another, such as a unit conversion from Celsius to Fahrenheit."},"typeName":{"$ref":"#/types/aws-native:iotsitewise:AssetModelTypeName","description":"The type of property type, which can be one of `Attribute` , `Measurement` , `Metric` , or `Transform` ."}},"type":"object","required":["typeName"]},"aws-native:iotsitewise:AssetModelTag":{"properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:AssetModelTransform":{"properties":{"expression":{"type":"string","description":"The mathematical expression that defines the transformation function. You can specify up to 10 functions per expression."},"variables":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelExpressionVariable"},"description":"The list of variables used in the expression."}},"type":"object","required":["expression","variables"]},"aws-native:iotsitewise:AssetModelTumblingWindow":{"description":"Contains a tumbling window, which is a repeating fixed-sized, non-overlapping, and contiguous time interval. This window is used in metric and aggregation computations.","properties":{"interval":{"type":"string","description":"The time interval for the tumbling window. The interval time must be between 1 minute and 1 week.\n\nAWS IoT SiteWise computes the `1w` interval the end of Sunday at midnight each week (UTC), the `1d` interval at the end of each day at midnight (UTC), the `1h` interval at the end of each hour, and so on.\n\nWhen AWS IoT SiteWise aggregates data points for metric computations, the start of each interval is exclusive and the end of each interval is inclusive. AWS IoT SiteWise places the computed data point at the end of the interval."},"offset":{"type":"string","description":"The offset for the tumbling window. The `offset` parameter accepts the following:\n\n- The offset time.\n\nFor example, if you specify `18h` for `offset` and `1d` for `interval` , AWS IoT SiteWise aggregates data in one of the following ways:\n\n- If you create the metric before or at 6 PM (UTC), you get the first aggregation result at 6 PM (UTC) on the day when you create the metric.\n- If you create the metric after 6 PM (UTC), you get the first aggregation result at 6 PM (UTC) the next day.\n- The ISO 8601 format.\n\nFor example, if you specify `PT18H` for `offset` and `1d` for `interval` , AWS IoT SiteWise aggregates data in one of the following ways:\n\n- If you create the metric before or at 6 PM (UTC), you get the first aggregation result at 6 PM (UTC) on the day when you create the metric.\n- If you create the metric after 6 PM (UTC), you get the first aggregation result at 6 PM (UTC) the next day.\n- The 24-hour clock.\n\nFor example, if you specify `00:03:00` for `offset` , `5m` for `interval` , and you create the metric at 2 PM (UTC), you get the first aggregation result at 2:03 PM (UTC). You get the second aggregation result at 2:08 PM (UTC).\n- The offset time zone.\n\nFor example, if you specify `2021-07-23T18:00-08` for `offset` and `1d` for `interval` , AWS IoT SiteWise aggregates data in one of the following ways:\n\n- If you create the metric before or at 6 PM (PST), you get the first aggregation result at 6 PM (PST) on the day when you create the metric.\n- If you create the metric after 6 PM (PST), you get the first aggregation result at 6 PM (PST) the next day."}},"type":"object","required":["interval"]},"aws-native:iotsitewise:AssetModelTypeName":{"type":"string","enum":[{"name":"Measurement","value":"Measurement"},{"name":"Attribute","value":"Attribute"},{"name":"Transform","value":"Transform"},{"name":"Metric","value":"Metric"}]},"aws-native:iotsitewise:AssetModelVariableValue":{"properties":{"hierarchyExternalId":{"type":"string","description":"The External ID of the hierarchy that is trying to be referenced"},"hierarchyId":{"type":"string","description":"The ID of the hierarchy that is trying to be referenced"},"hierarchyLogicalId":{"type":"string","description":"The `LogicalID` of the hierarchy to query for the `PropertyLogicalID` .\n\nYou use a `hierarchyLogicalID` instead of a model ID because you can have several hierarchies using the same model and therefore the same property. For example, you might have separately grouped assets that come from the same asset model. For more information, see [Defining relationships between asset models (hierarchies)](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/asset-hierarchies.html) in the *AWS IoT SiteWise User Guide* ."},"propertyExternalId":{"type":"string","description":"The External ID of the property that is trying to be referenced"},"propertyId":{"type":"string","description":"The ID of the property that is trying to be referenced"},"propertyLogicalId":{"type":"string","description":"The `LogicalID` of the property that is being referenced."},"propertyPath":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelPropertyPathDefinition"},"description":"The path of the property that is trying to be referenced"}},"type":"object"},"aws-native:iotsitewise:AssetProperty":{"description":"The asset property's definition, alias, unit, and notification state.","properties":{"alias":{"type":"string","description":"The property alias that identifies the property."},"externalId":{"type":"string","description":"String-friendly customer provided external ID"},"id":{"type":"string","description":"Customer provided actual UUID for property"},"logicalId":{"type":"string","description":"Customer provided ID for property."},"notificationState":{"$ref":"#/types/aws-native:iotsitewise:AssetPropertyNotificationState","description":"The MQTT notification state (ENABLED or DISABLED) for this asset property."},"unit":{"type":"string","description":"The unit of measure (such as Newtons or RPM) of the asset property. If you don't specify a value for this parameter, the service uses the value of the assetModelProperty in the asset model."}},"type":"object"},"aws-native:iotsitewise:AssetPropertyNotificationState":{"description":"The MQTT notification state (ENABLED or DISABLED) for this asset property.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iotsitewise:AssetTag":{"properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:DashboardTag":{"description":"To add or update tag, provide both key and value. To delete tag, provide only tag key to be deleted","properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:DatasetKendraSourceDetail":{"properties":{"knowledgeBaseArn":{"type":"string","description":"The knowledgeBaseArn details for the Kendra dataset source."},"roleArn":{"type":"string","description":"The roleARN details for the Kendra dataset source."}},"type":"object","required":["knowledgeBaseArn","roleArn"]},"aws-native:iotsitewise:DatasetSource":{"properties":{"sourceDetail":{"$ref":"#/types/aws-native:iotsitewise:DatasetSourceDetail","description":"The details of the dataset source associated with the dataset."},"sourceFormat":{"$ref":"#/types/aws-native:iotsitewise:DatasetSourceSourceFormat","description":"The format of the dataset source associated with the dataset."},"sourceType":{"$ref":"#/types/aws-native:iotsitewise:DatasetSourceSourceType","description":"The type of data source for the dataset."}},"type":"object","required":["sourceFormat","sourceType"]},"aws-native:iotsitewise:DatasetSourceDetail":{"properties":{"kendra":{"$ref":"#/types/aws-native:iotsitewise:DatasetKendraSourceDetail","description":"Contains details about the Kendra dataset source."}},"type":"object"},"aws-native:iotsitewise:DatasetSourceSourceFormat":{"description":"The format of the dataset source associated with the dataset.","type":"string","enum":[{"name":"KnowledgeBase","value":"KNOWLEDGE_BASE"}]},"aws-native:iotsitewise:DatasetSourceSourceType":{"description":"The type of data source for the dataset.","type":"string","enum":[{"name":"Kendra","value":"KENDRA"}]},"aws-native:iotsitewise:DatasetTag":{"properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:GatewayCapabilitySummary":{"description":"Contains a summary of a gateway capability configuration.","properties":{"capabilityConfiguration":{"type":"string","description":"The JSON document that defines the configuration for the gateway capability. For more information, see [Configuring data sources (CLI)](https://docs.aws.amazon.com/iot-sitewise/latest/userguide/configure-sources.html#configure-source-cli) in the *AWS IoT SiteWise User Guide* ."},"capabilityNamespace":{"type":"string","description":"The namespace of the capability configuration. For example, if you configure OPC UA sources for an MQTT-enabled gateway, your OPC-UA capability configuration has the namespace `iotsitewise:opcuacollector:3` ."}},"type":"object","required":["capabilityNamespace"]},"aws-native:iotsitewise:GatewayGreengrassV2":{"description":"Contains the CoreDeviceThingName of AWS IoT Greengrass Group V2 that the gateway runs on.","properties":{"coreDeviceOperatingSystem":{"$ref":"#/types/aws-native:iotsitewise:GatewayGreengrassV2CoreDeviceOperatingSystem","description":"The operating system of the core device in AWS IoT Greengrass V2."},"coreDeviceThingName":{"type":"string","description":"The name of the CoreDevice in GreenGrass V2."}},"type":"object","required":["coreDeviceThingName"]},"aws-native:iotsitewise:GatewayGreengrassV2CoreDeviceOperatingSystem":{"description":"The operating system of the core device in AWS IoT Greengrass V2.","type":"string","enum":[{"name":"LinuxAarch64","value":"LINUX_AARCH64"},{"name":"LinuxAmd64","value":"LINUX_AMD64"},{"name":"WindowsAmd64","value":"WINDOWS_AMD64"}]},"aws-native:iotsitewise:GatewayPlatform":{"description":"Contains a gateway's platform information.","properties":{"greengrassV2":{"$ref":"#/types/aws-native:iotsitewise:GatewayGreengrassV2","description":"A gateway that runs on AWS IoT Greengrass V2."},"siemensIe":{"$ref":"#/types/aws-native:iotsitewise:GatewaySiemensIe","description":"A gateway that runs on Siemens Industrial Edge."}},"type":"object"},"aws-native:iotsitewise:GatewaySiemensIe":{"description":"Contains the IotCoreThingName of AWS IoT Thing that the gateway runs on.","properties":{"iotCoreThingName":{"type":"string","description":"The name of the IoT Core Thing."}},"type":"object","required":["iotCoreThingName"]},"aws-native:iotsitewise:GatewayTag":{"description":"To add or update tag, provide both key and value. To delete tag, provide only tag key to be deleted","properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:PortalTag":{"description":"To add or update tag, provide both key and value. To delete tag, provide only tag key to be deleted.","properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iotsitewise:PortalType":{"description":"The type of portal","type":"string","enum":[{"name":"SitewisePortalV1","value":"SITEWISE_PORTAL_V1"},{"name":"SitewisePortalV2","value":"SITEWISE_PORTAL_V2"}]},"aws-native:iotsitewise:PortalTypeEntry":{"description":"Container associated a certain PortalType.","properties":{"portalTools":{"type":"array","items":{"type":"string"},"description":"The array of tools associated with the specified portal type. The possible values are `ASSISTANT` and `DASHBOARD` ."}},"type":"object","required":["portalTools"]},"aws-native:iotsitewise:ProjectTag":{"description":"To add or update tag, provide both key and value. To delete tag, provide only tag key to be deleted","properties":{"key":{"type":"string","description":"The key or name that identifies the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:iottwinmaker:ComponentTypeCompositeComponentType":{"description":"An object that sets information about a composite component type.","properties":{"componentTypeId":{"type":"string","description":"The id of the composite component type."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeDataConnector":{"description":"The data connector.","properties":{"isNative":{"type":"boolean","description":"A Boolean value that specifies whether the data connector is native to IoT TwinMaker."},"lambda":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeLambdaFunction","description":"The Lambda function associated with this data connector."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeDataType":{"description":"An object that specifies the data type of a property.","properties":{"allowedValues":{"type":"array","items":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataValue"},"description":"The allowed values for this data type."},"nestedType":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataType","description":"The nested type in the data type."},"relationship":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeRelationship","description":"A relationship that associates a component with another component."},"type":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataTypeType","description":"The underlying type of the data type."},"unitOfMeasure":{"type":"string","description":"The unit of measure used in this data type."}},"type":"object","required":["type"]},"aws-native:iottwinmaker:ComponentTypeDataTypeType":{"description":"The underlying type of the data type.","type":"string","enum":[{"name":"Relationship","value":"RELATIONSHIP"},{"name":"String","value":"STRING"},{"name":"Long","value":"LONG"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Integer","value":"INTEGER"},{"name":"Double","value":"DOUBLE"},{"name":"List","value":"LIST"},{"name":"Map","value":"MAP"}]},"aws-native:iottwinmaker:ComponentTypeDataValue":{"description":"An object that specifies a value for a property.","properties":{"booleanValue":{"type":"boolean","description":"A Boolean value."},"doubleValue":{"type":"number","description":"A double value."},"expression":{"type":"string","description":"An expression that produces the value."},"integerValue":{"type":"integer","description":"An integer value."},"listValue":{"type":"array","items":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataValue"},"description":"A list of multiple values."},"longValue":{"type":"number","description":"A long value."},"mapValue":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataValue"},"description":"An object that maps strings to multiple DataValue objects. \n\n"},"relationshipValue":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataValueRelationshipValueProperties","description":"A value that relates a component to another component."},"stringValue":{"type":"string","description":"A string value."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeDataValueRelationshipValueProperties":{"description":"A value that relates a component to another component.","properties":{"targetComponentName":{"type":"string"},"targetEntityId":{"type":"string"}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeFunction":{"description":"The function of component type.","properties":{"implementedBy":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataConnector","description":"The data connector."},"requiredProperties":{"type":"array","items":{"type":"string"},"description":"The required properties of the function."},"scope":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeFunctionScope","description":"The scope of the function."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeFunctionScope":{"description":"The scope of the function.","type":"string","enum":[{"name":"Entity","value":"ENTITY"},{"name":"Workspace","value":"WORKSPACE"}]},"aws-native:iottwinmaker:ComponentTypeLambdaFunction":{"properties":{"arn":{"type":"string"}},"type":"object","required":["arn"]},"aws-native:iottwinmaker:ComponentTypePropertyDefinition":{"description":"An object that sets information about a property.","properties":{"configurations":{"type":"object","additionalProperties":{"type":"string"},"description":"An object that specifies information about a property."},"dataType":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataType","description":"An object that contains information about the data type."},"defaultValue":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeDataValue","description":"An object that contains the default value."},"isExternalId":{"type":"boolean","description":"A Boolean value that specifies whether the property ID comes from an external data store."},"isRequiredInEntity":{"type":"boolean","description":"A Boolean value that specifies whether the property is required."},"isStoredExternally":{"type":"boolean","description":"A Boolean value that specifies whether the property is stored externally."},"isTimeSeries":{"type":"boolean","description":"A Boolean value that specifies whether the property consists of time series data."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypePropertyGroup":{"description":"An object that sets information about a property group.","properties":{"groupType":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyGroupGroupType","description":"The type of property group."},"propertyNames":{"type":"array","items":{"type":"string"},"description":"The list of property names in the property group."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypePropertyGroupGroupType":{"description":"The type of property group.","type":"string","enum":[{"name":"Tabular","value":"TABULAR"}]},"aws-native:iottwinmaker:ComponentTypeRelationship":{"description":"The type of the relationship.","properties":{"relationshipType":{"type":"string","description":"The type of the relationship."},"targetComponentTypeId":{"type":"string","description":"The ID of the target component type associated with this relationship."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeStatus":{"properties":{"error":{"oneOf":[{"$ref":"pulumi.json#/Any"},{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeStatusErrorProperties"}],"description":"The component type error."},"state":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeStatusState","description":"The component type status state."}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeStatusError1Properties":{"description":"Error object with Message and Code.","properties":{"code":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeStatusError1PropertiesCode"},"message":{"type":"string"}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeStatusError1PropertiesCode":{"type":"string","enum":[{"name":"ValidationError","value":"VALIDATION_ERROR"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"}]},"aws-native:iottwinmaker:ComponentTypeStatusErrorProperties":{"description":"Error object with Message and Code.","properties":{"code":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeStatusErrorPropertiesCode"},"message":{"type":"string"}},"type":"object"},"aws-native:iottwinmaker:ComponentTypeStatusErrorPropertiesCode":{"type":"string","enum":[{"name":"ValidationError","value":"VALIDATION_ERROR"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"}]},"aws-native:iottwinmaker:ComponentTypeStatusState":{"description":"The component type status state.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Active","value":"ACTIVE"},{"name":"Error","value":"ERROR"}]},"aws-native:iottwinmaker:EntityComponent":{"properties":{"componentName":{"type":"string","description":"The name of the component."},"componentTypeId":{"type":"string","description":"The ID of the component type."},"definedIn":{"type":"string","description":"The name of the property definition set in the component."},"description":{"type":"string","description":"The description of the component."},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityProperty"},"description":"An object that maps strings to the properties to set in the component type. Each string in the mapping must be unique to this object."},"propertyGroups":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityPropertyGroup"},"description":"An object that maps strings to the property groups to set in the component type. Each string in the mapping must be unique to this object."},"status":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatus","description":"The current status of the entity."}},"type":"object"},"aws-native:iottwinmaker:EntityCompositeComponent":{"properties":{"componentName":{"type":"string","description":"The name of the component."},"componentPath":{"type":"string","description":"The path of the component."},"componentTypeId":{"type":"string","description":"The ID of the component type."},"description":{"type":"string","description":"The description of the component."},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityProperty"},"description":"An object that maps strings to the properties to set in the component type. Each string in the mapping must be unique to this object."},"propertyGroups":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityPropertyGroup"},"description":"An object that maps strings to the property groups to set in the component type. Each string in the mapping must be unique to this object."},"status":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatus","description":"The current status of the component."}},"type":"object"},"aws-native:iottwinmaker:EntityDataType":{"description":"An object that specifies the data type of a property.","properties":{"allowedValues":{"type":"array","items":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataValue"},"description":"The allowed values for this data type."},"nestedType":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataType","description":"The nested type in the data type."},"relationship":{"$ref":"#/types/aws-native:iottwinmaker:EntityRelationship","description":"A relationship that associates a component with another component."},"type":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataTypeType","description":"The underlying type of the data type."},"unitOfMeasure":{"type":"string","description":"The unit of measure used in this data type."}},"type":"object"},"aws-native:iottwinmaker:EntityDataTypeType":{"description":"The underlying type of the data type.","type":"string","enum":[{"name":"Relationship","value":"RELATIONSHIP"},{"name":"String","value":"STRING"},{"name":"Long","value":"LONG"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Integer","value":"INTEGER"},{"name":"Double","value":"DOUBLE"},{"name":"List","value":"LIST"},{"name":"Map","value":"MAP"}]},"aws-native:iottwinmaker:EntityDataValue":{"description":"An object that specifies a value for a property.","properties":{"booleanValue":{"type":"boolean","description":"A Boolean value."},"doubleValue":{"type":"number","description":"A double value."},"expression":{"type":"string","description":"An expression that produces the value."},"integerValue":{"type":"integer","description":"An integer value."},"listValue":{"type":"array","items":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataValue"},"description":"A list of multiple values."},"longValue":{"type":"number","description":"A long value."},"mapValue":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataValue"},"description":"An object that maps strings to multiple DataValue objects."},"relationshipValue":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataValueRelationshipValueProperties","description":"A value that relates a component to another component."},"stringValue":{"type":"string","description":"A string value."}},"type":"object"},"aws-native:iottwinmaker:EntityDataValueRelationshipValueProperties":{"description":"A value that relates a component to another component.","properties":{"targetComponentName":{"type":"string"},"targetEntityId":{"type":"string"}},"type":"object"},"aws-native:iottwinmaker:EntityDefinition":{"description":"An object that specifies information about a property definition.","properties":{"configuration":{"type":"object","additionalProperties":{"type":"string"},"description":"An object that specifies information about a property configuration."},"dataType":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataType","description":"An object that contains information about the data type."},"defaultValue":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataValue","description":"An object that contains the default value."},"isExternalId":{"type":"boolean","description":"A Boolean value that specifies whether the property ID comes from an external data store."},"isFinal":{"type":"boolean","description":"A Boolean value that specifies whether the property definition can be updated."},"isImported":{"type":"boolean","description":"A Boolean value that specifies whether the property definition is imported from an external data store."},"isInherited":{"type":"boolean","description":"A Boolean value that specifies whether the property definition is inherited from a parent entity."},"isRequiredInEntity":{"type":"boolean","description":"A Boolean value that specifies whether the property is required."},"isStoredExternally":{"type":"boolean","description":"A Boolean value that specifies whether the property is stored externally."},"isTimeSeries":{"type":"boolean","description":"A Boolean value that specifies whether the property consists of time series data."}},"type":"object"},"aws-native:iottwinmaker:EntityProperty":{"description":"An object that specifies information about a property.","properties":{"definition":{"$ref":"#/types/aws-native:iottwinmaker:EntityDefinition","description":"The definition of the property."},"value":{"$ref":"#/types/aws-native:iottwinmaker:EntityDataValue","description":"The value of the property."}},"type":"object"},"aws-native:iottwinmaker:EntityPropertyGroup":{"description":"An object that specifies information about a property group.","properties":{"groupType":{"$ref":"#/types/aws-native:iottwinmaker:EntityPropertyGroupGroupType","description":"The type of property group."},"propertyNames":{"type":"array","items":{"type":"string"},"description":"The list of property names in the property group."}},"type":"object"},"aws-native:iottwinmaker:EntityPropertyGroupGroupType":{"description":"The type of property group.","type":"string","enum":[{"name":"Tabular","value":"TABULAR"}]},"aws-native:iottwinmaker:EntityRelationship":{"description":"The type of the relationship.","properties":{"relationshipType":{"type":"string","description":"The type of the relationship."},"targetComponentTypeId":{"type":"string","description":"The ID of the target component type associated with this relationship."}},"type":"object"},"aws-native:iottwinmaker:EntityStatus":{"properties":{"error":{"oneOf":[{"$ref":"pulumi.json#/Any"},{"$ref":"#/types/aws-native:iottwinmaker:EntityStatusErrorProperties"}]},"state":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatusState"}},"type":"object"},"aws-native:iottwinmaker:EntityStatusError1Properties":{"description":"Error object with Message and Code.","properties":{"code":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatusError1PropertiesCode"},"message":{"type":"string"}},"type":"object"},"aws-native:iottwinmaker:EntityStatusError1PropertiesCode":{"type":"string","enum":[{"name":"ValidationError","value":"VALIDATION_ERROR"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"}]},"aws-native:iottwinmaker:EntityStatusErrorProperties":{"description":"Error object with Message and Code.","properties":{"code":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatusErrorPropertiesCode"},"message":{"type":"string"}},"type":"object"},"aws-native:iottwinmaker:EntityStatusErrorPropertiesCode":{"type":"string","enum":[{"name":"ValidationError","value":"VALIDATION_ERROR"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"}]},"aws-native:iottwinmaker:EntityStatusState":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Active","value":"ACTIVE"},{"name":"Error","value":"ERROR"}]},"aws-native:iotwireless:DestinationExpressionType":{"description":"Must be RuleName","type":"string","enum":[{"name":"RuleName","value":"RuleName"},{"name":"MqttTopic","value":"MqttTopic"},{"name":"SnsTopic","value":"SnsTopic"}]},"aws-native:iotwireless:DestinationTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:DeviceProfileLoRaWanDeviceProfile":{"properties":{"classBTimeout":{"type":"integer","description":"The ClassBTimeout value."},"classCTimeout":{"type":"integer","description":"The ClassCTimeout value."},"factoryPresetFreqsList":{"type":"array","items":{"type":"integer"},"description":"The list of values that make up the FactoryPresetFreqs value. Valid range of values include a minimum value of 1000000 and a maximum value of 16700000."},"macVersion":{"type":"string","description":"The MAC version (such as OTAA 1.1 or OTAA 1.0.3) to use with this device profile."},"maxDutyCycle":{"type":"integer","description":"The MaxDutyCycle value."},"maxEirp":{"type":"integer","description":"The MaxEIRP value."},"pingSlotDr":{"type":"integer","description":"The PingSlotDR value."},"pingSlotFreq":{"type":"integer","description":"The PingSlotFreq value."},"pingSlotPeriod":{"type":"integer","description":"The PingSlotPeriod value."},"regParamsRevision":{"type":"string","description":"The version of regional parameters."},"rfRegion":{"type":"string","description":"The frequency band (RFRegion) value."},"rxDataRate2":{"type":"integer","description":"The RXDataRate2 value."},"rxDelay1":{"type":"integer","description":"The RXDelay1 value."},"rxDrOffset1":{"type":"integer","description":"The RXDROffset1 value."},"rxFreq2":{"type":"integer","description":"The RXFreq2 value."},"supports32BitFCnt":{"type":"boolean","description":"The Supports32BitFCnt value."},"supportsClassB":{"type":"boolean","description":"The SupportsClassB value."},"supportsClassC":{"type":"boolean","description":"The SupportsClassC value."},"supportsJoin":{"type":"boolean","description":"The SupportsJoin value."}},"type":"object"},"aws-native:iotwireless:DeviceProfileTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:FuotaTaskLoRaWan":{"properties":{"rfRegion":{"type":"string","description":"FUOTA task LoRaWAN RF region"},"startTime":{"type":"string","description":"FUOTA task LoRaWAN start time"}},"type":"object","required":["rfRegion"]},"aws-native:iotwireless:FuotaTaskTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:MulticastGroupLoRaWan":{"properties":{"dlClass":{"type":"string","description":"Multicast group LoRaWAN DL Class"},"numberOfDevicesInGroup":{"type":"integer","description":"Multicast group number of devices in group. Returned after successful read."},"numberOfDevicesRequested":{"type":"integer","description":"Multicast group number of devices requested. Returned after successful read."},"rfRegion":{"type":"string","description":"Multicast group LoRaWAN RF region"}},"type":"object","required":["dlClass","rfRegion"]},"aws-native:iotwireless:MulticastGroupTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:NetworkAnalyzerConfigurationLogLevel":{"type":"string","enum":[{"name":"Info","value":"INFO"},{"name":"Error","value":"ERROR"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iotwireless:NetworkAnalyzerConfigurationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:iotwireless:NetworkAnalyzerConfigurationWirelessDeviceFrameInfo":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:iotwireless:ServiceProfileLoRaWanServiceProfile":{"properties":{"addGwMetadata":{"type":"boolean","description":"The AddGWMetaData value."},"channelMask":{"type":"string","description":"The ChannelMask value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"devStatusReqFreq":{"type":"integer","description":"The DevStatusReqFreq value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"dlBucketSize":{"type":"integer","description":"The DLBucketSize value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"dlRate":{"type":"integer","description":"The DLRate value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"dlRatePolicy":{"type":"string","description":"The DLRatePolicy value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"drMax":{"type":"integer","description":"The DRMax value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"drMin":{"type":"integer","description":"The DRMin value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"hrAllowed":{"type":"boolean","description":"The HRAllowed value that describes whether handover roaming is allowed.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"minGwDiversity":{"type":"integer","description":"The MinGwDiversity value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"nwkGeoLoc":{"type":"boolean","description":"The NwkGeoLoc value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"prAllowed":{"type":"boolean","description":"The PRAllowed value that describes whether passive roaming is allowed.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"raAllowed":{"type":"boolean","description":"The RAAllowed value that describes whether roaming activation is allowed."},"reportDevStatusBattery":{"type":"boolean","description":"The ReportDevStatusBattery value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"reportDevStatusMargin":{"type":"boolean","description":"The ReportDevStatusMargin value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"targetPer":{"type":"integer","description":"The TargetPer value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"ulBucketSize":{"type":"integer","description":"The UlBucketSize value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"ulRate":{"type":"integer","description":"The ULRate value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"},"ulRatePolicy":{"type":"string","description":"The ULRatePolicy value.\n\nThis property is `ReadOnly` and can't be inputted for create. It's returned with `Fn::GetAtt`"}},"type":"object"},"aws-native:iotwireless:ServiceProfileTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:TaskDefinitionLoRaWanGatewayVersion":{"properties":{"model":{"type":"string","description":"The model number of the wireless gateway."},"packageVersion":{"type":"string","description":"The version of the wireless gateway firmware."},"station":{"type":"string","description":"The basic station version of the wireless gateway."}},"type":"object"},"aws-native:iotwireless:TaskDefinitionLoRaWanUpdateGatewayTaskCreate":{"properties":{"currentVersion":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanGatewayVersion","description":"The version of the gateways that should receive the update."},"sigKeyCrc":{"type":"integer","description":"The CRC of the signature private key to check."},"updateSignature":{"type":"string","description":"The signature used to verify the update firmware."},"updateVersion":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanGatewayVersion","description":"The firmware version to update the gateway to."}},"type":"object"},"aws-native:iotwireless:TaskDefinitionLoRaWanUpdateGatewayTaskEntry":{"properties":{"currentVersion":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanGatewayVersion","description":"The version of the gateways that should receive the update."},"updateVersion":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanGatewayVersion","description":"The firmware version to update the gateway to."}},"type":"object"},"aws-native:iotwireless:TaskDefinitionTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:TaskDefinitionType":{"description":"A filter to list only the wireless gateway task definitions that use this task definition type","type":"string","enum":[{"name":"Update","value":"UPDATE"}]},"aws-native:iotwireless:TaskDefinitionUpdateWirelessGatewayTaskCreate":{"properties":{"loRaWan":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanUpdateGatewayTaskCreate","description":"The properties that relate to the LoRaWAN wireless gateway."},"updateDataRole":{"type":"string","description":"The IAM role used to read data from the S3 bucket."},"updateDataSource":{"type":"string","description":"The link to the S3 bucket."}},"type":"object"},"aws-native:iotwireless:TraceContentProperties":{"description":"Trace content for your wireless gateway and wireless device resources","properties":{"logLevel":{"$ref":"#/types/aws-native:iotwireless:NetworkAnalyzerConfigurationLogLevel","description":"The log level for a log message. The log levels can be disabled, or set to `ERROR` to display less verbose logs containing only error information, or to `INFO` for more detailed logs"},"wirelessDeviceFrameInfo":{"$ref":"#/types/aws-native:iotwireless:NetworkAnalyzerConfigurationWirelessDeviceFrameInfo","description":"`FrameInfo` of your wireless device resources for the trace content. Use FrameInfo to debug the communication between your LoRaWAN end devices and the network server."}},"type":"object"},"aws-native:iotwireless:WirelessDeviceAbpV10x":{"properties":{"devAddr":{"type":"string","description":"The DevAddr value."},"sessionKeys":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceSessionKeysAbpV10x","description":"Session keys for ABP v1.0.x."}},"type":"object","required":["devAddr","sessionKeys"]},"aws-native:iotwireless:WirelessDeviceAbpV11":{"properties":{"devAddr":{"type":"string","description":"The DevAddr value."},"sessionKeys":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceSessionKeysAbpV11","description":"Session keys for ABP v1.1."}},"type":"object","required":["devAddr","sessionKeys"]},"aws-native:iotwireless:WirelessDeviceApplication":{"description":"LoRaWAN application configuration, which can be used to perform geolocation.","properties":{"destinationName":{"type":"string","description":"The name of the position data destination that describes the AWS IoT rule that processes the device's position data for use by AWS IoT Core for LoRaWAN."},"fPort":{"type":"integer","description":"The Fport value."},"type":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceApplicationType","description":"Application type, which can be specified to obtain real-time position information of your LoRaWAN device."}},"type":"object"},"aws-native:iotwireless:WirelessDeviceApplicationType":{"description":"Application type, which can be specified to obtain real-time position information of your LoRaWAN device.","type":"string","enum":[{"name":"SemtechGeolocation","value":"SemtechGeolocation"},{"name":"SemtechGnss","value":"SemtechGNSS"},{"name":"SemtechGnssng","value":"SemtechGNSSNG"},{"name":"SemtechWiFi","value":"SemtechWiFi"}]},"aws-native:iotwireless:WirelessDeviceFPorts":{"properties":{"applications":{"type":"array","items":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceApplication"},"description":"A list of optional LoRaWAN application information, which can be used for geolocation."}},"type":"object"},"aws-native:iotwireless:WirelessDeviceLoRaWanDevice":{"properties":{"abpV10x":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceAbpV10x","description":"ABP device object for LoRaWAN specification v1.0.x."},"abpV11":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceAbpV11","description":"ABP device object for create APIs for v1.1."},"devEui":{"type":"string","description":"The DevEUI value."},"deviceProfileId":{"type":"string","description":"The ID of the device profile for the new wireless device."},"fPorts":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceFPorts","description":"List of FPort assigned for different LoRaWAN application packages to use."},"otaaV10x":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceOtaaV10x","description":"OTAA device object for create APIs for v1.0.x"},"otaaV11":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceOtaaV11","description":"OTAA device object for v1.1 for create APIs."},"serviceProfileId":{"type":"string","description":"The ID of the service profile."}},"type":"object"},"aws-native:iotwireless:WirelessDeviceOtaaV10x":{"properties":{"appEui":{"type":"string","description":"The AppEUI value. You specify this value when using LoRaWAN versions v1.0.2 or v1.0.3."},"appKey":{"type":"string","description":"The AppKey value."}},"type":"object","required":["appEui","appKey"]},"aws-native:iotwireless:WirelessDeviceOtaaV11":{"properties":{"appKey":{"type":"string","description":"The AppKey is a secret key, which you should handle in a similar way as you would an application password. You can protect the AppKey value by storing it in the AWS Secrets Manager and use the [secretsmanager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) to reference this value."},"joinEui":{"type":"string","description":"The JoinEUI value."},"nwkKey":{"type":"string","description":"The NwkKey is a secret key, which you should handle in a similar way as you would an application password. You can protect the NwkKey value by storing it in the AWS Secrets Manager and use the [secretsmanager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) to reference this value."}},"type":"object","required":["appKey","joinEui","nwkKey"]},"aws-native:iotwireless:WirelessDevicePositioning":{"description":"FPort values for the GNSS, stream, and ClockSync functions of the positioning information.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:iotwireless:WirelessDeviceSessionKeysAbpV10x":{"properties":{"appSKey":{"type":"string","description":"The AppSKey value."},"nwkSKey":{"type":"string","description":"The NwkKey value."}},"type":"object","required":["appSKey","nwkSKey"]},"aws-native:iotwireless:WirelessDeviceSessionKeysAbpV11":{"properties":{"appSKey":{"type":"string","description":"The AppSKey is a secret key, which you should handle in a similar way as you would an application password. You can protect the AppSKey value by storing it in the AWS Secrets Manager and use the [secretsmanager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) to reference this value."},"fNwkSIntKey":{"type":"string","description":"The FNwkSIntKey is a secret key, which you should handle in a similar way as you would an application password. You can protect the FNwkSIntKey value by storing it in the AWS Secrets Manager and use the [secretsmanager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) to reference this value."},"nwkSEncKey":{"type":"string","description":"The NwkSEncKey is a secret key, which you should handle in a similar way as you would an application password. You can protect the NwkSEncKey value by storing it in the AWS Secrets Manager and use the [secretsmanager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) to reference this value."},"sNwkSIntKey":{"type":"string","description":"The SNwkSIntKey is a secret key, which you should handle in a similar way as you would an application password. You can protect the SNwkSIntKey value by storing it in the AWS Secrets Manager and use the [secretsmanager](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html#dynamic-references-secretsmanager) to reference this value."}},"type":"object","required":["appSKey","fNwkSIntKey","nwkSEncKey","sNwkSIntKey"]},"aws-native:iotwireless:WirelessDeviceTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:iotwireless:WirelessDeviceType":{"description":"Wireless device type, currently only Sidewalk and LoRa","type":"string","enum":[{"name":"Sidewalk","value":"Sidewalk"},{"name":"LoRaWan","value":"LoRaWAN"}]},"aws-native:iotwireless:WirelessGatewayLoRaWanGateway":{"properties":{"gatewayEui":{"type":"string","description":"The gateway's EUI value."},"rfRegion":{"type":"string","description":"The frequency band (RFRegion) value."}},"type":"object","required":["gatewayEui","rfRegion"]},"aws-native:iotwireless:WirelessGatewayTag":{"properties":{"key":{"type":"string","description":"The tag's key value."},"value":{"type":"string","description":"The tag's value."}},"type":"object"},"aws-native:ivs:ChannelContainerFormat":{"description":"Indicates which content-packaging format is used (MPEG-TS or fMP4). If multitrackInputConfiguration is specified and enabled is true, then containerFormat is required and must be set to FRAGMENTED_MP4. Otherwise, containerFormat may be set to TS or FRAGMENTED_MP4. Default: TS.","type":"string","enum":[{"name":"Ts","value":"TS"},{"name":"FragmentedMp4","value":"FRAGMENTED_MP4"}]},"aws-native:ivs:ChannelLatencyMode":{"description":"Channel latency mode.","type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Low","value":"LOW"}]},"aws-native:ivs:ChannelMultitrackInputConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Indicates whether multitrack input is enabled. Can be set to true only if channel type is STANDARD. Setting enabled to true with any other channel type will cause an exception. If true, then policy, maximumResolution, and containerFormat are required, and containerFormat must be set to FRAGMENTED_MP4. Default: false."},"maximumResolution":{"$ref":"#/types/aws-native:ivs:ChannelMultitrackInputConfigurationMaximumResolution","description":"Maximum resolution for multitrack input. Required if enabled is true."},"policy":{"$ref":"#/types/aws-native:ivs:ChannelMultitrackInputConfigurationPolicy","description":"Indicates whether multitrack input is allowed or required. Required if enabled is true."}},"type":"object"},"aws-native:ivs:ChannelMultitrackInputConfigurationMaximumResolution":{"description":"Maximum resolution for multitrack input. Required if enabled is true.","type":"string","enum":[{"name":"Sd","value":"SD"},{"name":"Hd","value":"HD"},{"name":"FullHd","value":"FULL_HD"}]},"aws-native:ivs:ChannelMultitrackInputConfigurationPolicy":{"description":"Indicates whether multitrack input is allowed or required. Required if enabled is true.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Require","value":"REQUIRE"}]},"aws-native:ivs:ChannelPreset":{"description":"Optional transcode preset for the channel. This is selectable only for ADVANCED_HD and ADVANCED_SD channel types. For those channel types, the default preset is HIGHER_BANDWIDTH_DELIVERY. For other channel types (BASIC and STANDARD), preset is the empty string (\"\").","type":"string","enum":[{"name":"Empty","value":""},{"name":"HigherBandwidthDelivery","value":"HIGHER_BANDWIDTH_DELIVERY"},{"name":"ConstrainedBandwidthDelivery","value":"CONSTRAINED_BANDWIDTH_DELIVERY"}]},"aws-native:ivs:ChannelTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:ChannelType":{"description":"Channel type, which determines the allowable resolution and bitrate. If you exceed the allowable resolution or bitrate, the stream probably will disconnect immediately.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Basic","value":"BASIC"},{"name":"AdvancedSd","value":"ADVANCED_SD"},{"name":"AdvancedHd","value":"ADVANCED_HD"}]},"aws-native:ivs:EncoderConfigurationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:IngestConfigurationIngestProtocol":{"description":"Ingest Protocol.","type":"string","enum":[{"name":"Rtmp","value":"RTMP"},{"name":"Rtmps","value":"RTMPS"}]},"aws-native:ivs:IngestConfigurationState":{"description":"State of IngestConfiguration which determines whether IngestConfiguration is in use or not.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:ivs:IngestConfigurationTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:PlaybackKeyPairTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor within a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:ivs:PlaybackRestrictionPolicyTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:PublicKeyTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that makes up a tag. A `key` is a general label that acts like a category for more specific tag values."},"value":{"type":"string","description":"The optional part of a key-value pair that makes up a tag. A `value` acts as a descriptor within a tag category (key)."}},"type":"object","required":["key","value"]},"aws-native:ivs:RecordingConfigurationDestinationConfiguration":{"description":"Recording Destination Configuration.","properties":{"s3":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationS3DestinationConfiguration","description":"An S3 destination configuration where recorded videos will be stored. See the [S3DestinationConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-recordingconfiguration-s3destinationconfiguration.html) property type for more information.","replaceOnChanges":true}},"type":"object"},"aws-native:ivs:RecordingConfigurationRenditionConfiguration":{"description":"Rendition Configuration describes which renditions should be recorded for a stream.","properties":{"renditionSelection":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationRenditionConfigurationRenditionSelection","description":"Resolution Selection indicates which set of renditions are recorded for a stream.","replaceOnChanges":true},"renditions":{"type":"array","items":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationRenditionConfigurationRenditionsItem"},"description":"Renditions indicates which renditions are recorded for a stream.","replaceOnChanges":true}},"type":"object"},"aws-native:ivs:RecordingConfigurationRenditionConfigurationRenditionSelection":{"description":"Resolution Selection indicates which set of renditions are recorded for a stream.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"None","value":"NONE"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:ivs:RecordingConfigurationRenditionConfigurationRenditionsItem":{"type":"string","enum":[{"name":"FullHd","value":"FULL_HD"},{"name":"Hd","value":"HD"},{"name":"Sd","value":"SD"},{"name":"LowestResolution","value":"LOWEST_RESOLUTION"}]},"aws-native:ivs:RecordingConfigurationS3DestinationConfiguration":{"description":"Recording S3 Destination Configuration.","properties":{"bucketName":{"type":"string","description":"Location (S3 bucket name) where recorded videos will be stored.","replaceOnChanges":true}},"type":"object","required":["bucketName"]},"aws-native:ivs:RecordingConfigurationState":{"description":"Recording Configuration State.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Active","value":"ACTIVE"}]},"aws-native:ivs:RecordingConfigurationTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:RecordingConfigurationThumbnailConfiguration":{"description":"Recording Thumbnail Configuration.","properties":{"recordingMode":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationThumbnailConfigurationRecordingMode","description":"Thumbnail Recording Mode, which determines whether thumbnails are recorded at an interval or are disabled.","replaceOnChanges":true},"resolution":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationThumbnailConfigurationResolution","description":"Resolution indicates the desired resolution of recorded thumbnails.","replaceOnChanges":true},"storage":{"type":"array","items":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationThumbnailConfigurationStorageItem"},"description":"Storage indicates the format in which thumbnails are recorded.","replaceOnChanges":true},"targetIntervalSeconds":{"type":"integer","description":"Target Interval Seconds defines the interval at which thumbnails are recorded. This field is required if RecordingMode is INTERVAL.","replaceOnChanges":true}},"type":"object"},"aws-native:ivs:RecordingConfigurationThumbnailConfigurationRecordingMode":{"description":"Thumbnail Recording Mode, which determines whether thumbnails are recorded at an interval or are disabled.","type":"string","enum":[{"name":"Interval","value":"INTERVAL"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:ivs:RecordingConfigurationThumbnailConfigurationResolution":{"description":"Resolution indicates the desired resolution of recorded thumbnails.","type":"string","enum":[{"name":"FullHd","value":"FULL_HD"},{"name":"Hd","value":"HD"},{"name":"Sd","value":"SD"},{"name":"LowestResolution","value":"LOWEST_RESOLUTION"}]},"aws-native:ivs:RecordingConfigurationThumbnailConfigurationStorageItem":{"type":"string","enum":[{"name":"Sequential","value":"SEQUENTIAL"},{"name":"Latest","value":"LATEST"}]},"aws-native:ivs:StageAutoParticipantRecordingConfiguration":{"description":"Configuration object for individual participant recording, to attach to the new stage.","properties":{"hlsConfiguration":{"$ref":"#/types/aws-native:ivs:StageHlsConfiguration","description":"HLS configuration object for individual participant recording."},"mediaTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ivs:StageAutoParticipantRecordingConfigurationMediaTypesItem"},"description":"Types of media to be recorded. Default: AUDIO_VIDEO."},"recordingReconnectWindowSeconds":{"type":"integer","description":"If a stage publisher disconnects and then reconnects within the specified interval, the multiple recordings will be considered a single recording and merged together. The default value is 0, which disables merging."},"storageConfigurationArn":{"type":"string","description":"ARN of the StorageConfiguration resource to use for individual participant recording."},"thumbnailConfiguration":{"$ref":"#/types/aws-native:ivs:StageThumbnailConfiguration","description":"A complex type that allows you to enable/disable the recording of thumbnails for individual participant recording and modify the interval at which thumbnails are generated for the live session."}},"type":"object","required":["storageConfigurationArn"]},"aws-native:ivs:StageAutoParticipantRecordingConfigurationMediaTypesItem":{"type":"string","enum":[{"name":"AudioVideo","value":"AUDIO_VIDEO"},{"name":"AudioOnly","value":"AUDIO_ONLY"}]},"aws-native:ivs:StageHlsConfiguration":{"description":"HLS configuration object for individual participant recording.","properties":{"participantRecordingHlsConfiguration":{"$ref":"#/types/aws-native:ivs:StageParticipantRecordingHlsConfiguration","description":"Object specifying a configuration of participant HLS recordings for individual participant recording."}},"type":"object"},"aws-native:ivs:StageParticipantRecordingHlsConfiguration":{"description":"An object representing a configuration of participant HLS recordings for individual participant recording.","properties":{"targetSegmentDurationSeconds":{"type":"integer","description":"Defines the target duration for recorded segments generated when recording a stage participant. Segments may have durations longer than the specified value when needed to ensure each segment begins with a keyframe. Default: 6."}},"type":"object"},"aws-native:ivs:StageTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:StageThumbnailConfiguration":{"description":"A complex type that allows you to enable/disable the recording of thumbnails for individual participant recording and modify the interval at which thumbnails are generated for the live session.","properties":{"participantThumbnailConfiguration":{"$ref":"#/types/aws-native:ivs:StageThumbnailConfigurationParticipantThumbnailConfigurationProperties","description":"An object representing a configuration of thumbnails for recorded video from an individual participant."}},"type":"object"},"aws-native:ivs:StageThumbnailConfigurationParticipantThumbnailConfigurationProperties":{"description":"An object representing a configuration of thumbnails for recorded video from an individual participant.","properties":{"recordingMode":{"$ref":"#/types/aws-native:ivs:StageThumbnailConfigurationParticipantThumbnailConfigurationPropertiesRecordingMode","description":"Thumbnail recording mode. Default: DISABLED."},"storage":{"type":"array","items":{"$ref":"#/types/aws-native:ivs:StageThumbnailConfigurationParticipantThumbnailConfigurationPropertiesStorageItem"},"description":"Indicates the format in which thumbnails are recorded. SEQUENTIAL records all generated thumbnails in a serial manner, to the media/thumbnails/high directory. LATEST saves the latest thumbnail in media/latest_thumbnail/high/thumb.jpg and overwrites it at the interval specified by targetIntervalSeconds. You can enable both SEQUENTIAL and LATEST. Default: SEQUENTIAL."},"targetIntervalSeconds":{"type":"integer","description":"The targeted thumbnail-generation interval in seconds. This is configurable only if recordingMode is INTERVAL. Default: 60."}},"type":"object"},"aws-native:ivs:StageThumbnailConfigurationParticipantThumbnailConfigurationPropertiesRecordingMode":{"description":"Thumbnail recording mode. Default: DISABLED.","type":"string","enum":[{"name":"Interval","value":"INTERVAL"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:ivs:StageThumbnailConfigurationParticipantThumbnailConfigurationPropertiesStorageItem":{"type":"string","enum":[{"name":"Sequential","value":"SEQUENTIAL"},{"name":"Latest","value":"LATEST"}]},"aws-native:ivs:StorageConfigurationS3StorageConfiguration":{"description":"A complex type that describes an S3 location where recorded videos will be stored.","properties":{"bucketName":{"type":"string","description":"Location (S3 bucket name) where recorded videos will be stored. Note that the StorageConfiguration and S3 bucket must be in the same region as the Composition.","replaceOnChanges":true}},"type":"object","required":["bucketName"]},"aws-native:ivs:StorageConfigurationTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:StreamKeyTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivs:VideoProperties":{"description":"Video configuration. Default: video resolution 1280x720, bitrate 2500 kbps, 30 fps","properties":{"bitrate":{"type":"integer","description":"Bitrate for generated output, in bps. Default: 2500000.","replaceOnChanges":true},"framerate":{"type":"number","description":"Video frame rate, in fps. Default: 30.","replaceOnChanges":true},"height":{"type":"integer","description":"Video-resolution height. This must be an even number. Note that the maximum value is determined by width times height, such that the maximum total pixels is 2073600 (1920x1080 or 1080x1920). Default: 720.","replaceOnChanges":true},"width":{"type":"integer","description":"Video-resolution width. This must be an even number. Note that the maximum value is determined by width times height, such that the maximum total pixels is 2073600 (1920x1080 or 1080x1920). Default: 1280.","replaceOnChanges":true}},"type":"object"},"aws-native:ivschat:LoggingConfigurationCloudWatchLogsDestinationConfiguration":{"description":"CloudWatch destination configuration for IVS Chat logging.","properties":{"logGroupName":{"type":"string","description":"Name of the Amazon CloudWatch Logs log group where chat activity will be logged."}},"type":"object","required":["logGroupName"]},"aws-native:ivschat:LoggingConfigurationDestinationConfiguration":{"description":"Destination configuration for IVS Chat logging.","properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationCloudWatchLogsDestinationConfiguration","description":"An Amazon CloudWatch Logs destination configuration where chat activity will be logged."},"firehose":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationFirehoseDestinationConfiguration","description":"An Amazon Kinesis Data Firehose destination configuration where chat activity will be logged."},"s3":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationS3DestinationConfiguration","description":"An Amazon S3 destination configuration where chat activity will be logged."}},"type":"object"},"aws-native:ivschat:LoggingConfigurationFirehoseDestinationConfiguration":{"description":"Kinesis Firehose destination configuration for IVS Chat logging.","properties":{"deliveryStreamName":{"type":"string","description":"Name of the Amazon Kinesis Firehose delivery stream where chat activity will be logged."}},"type":"object","required":["deliveryStreamName"]},"aws-native:ivschat:LoggingConfigurationS3DestinationConfiguration":{"description":"S3 destination configuration for IVS Chat logging.","properties":{"bucketName":{"type":"string","description":"Name of the Amazon S3 bucket where chat activity will be logged."}},"type":"object","required":["bucketName"]},"aws-native:ivschat:LoggingConfigurationState":{"description":"The state of the logging configuration. When the state is ACTIVE, the configuration is ready to log chat content.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Deleting","value":"DELETING"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdatingFailed","value":"UPDATING_FAILED"},{"name":"Active","value":"ACTIVE"}]},"aws-native:ivschat:LoggingConfigurationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ivschat:RoomMessageReviewHandler":{"description":"Configuration information for optional review of messages.","properties":{"fallbackResult":{"$ref":"#/types/aws-native:ivschat:RoomMessageReviewHandlerFallbackResult","description":"Specifies the fallback behavior if the handler does not return a valid response, encounters an error, or times out."},"uri":{"type":"string","description":"Identifier of the message review handler."}},"type":"object"},"aws-native:ivschat:RoomMessageReviewHandlerFallbackResult":{"description":"Specifies the fallback behavior if the handler does not return a valid response, encounters an error, or times out.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Deny","value":"DENY"}]},"aws-native:ivschat:RoomTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:kafkaconnect:ConnectorApacheKafkaCluster":{"description":"Details of how to connect to an Apache Kafka cluster.","properties":{"bootstrapServers":{"type":"string","description":"The bootstrap servers string of the Apache Kafka cluster."},"vpc":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorVpc","description":"Details of an Amazon VPC which has network connectivity to the Apache Kafka cluster."}},"type":"object","required":["bootstrapServers","vpc"]},"aws-native:kafkaconnect:ConnectorAutoScaling":{"description":"Details about auto scaling of a connector.","properties":{"maxAutoscalingTaskCount":{"type":"integer","description":"The maximum number of tasks allocated to the connector during autoscaling operations."},"maxWorkerCount":{"type":"integer","description":"The maximum number of workers for a connector."},"mcuCount":{"type":"integer","description":"Specifies how many MSK Connect Units (MCU) as the minimum scaling unit."},"minWorkerCount":{"type":"integer","description":"The minimum number of workers for a connector."},"scaleInPolicy":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorScaleInPolicy","description":"The sacle-in policy for the connector."},"scaleOutPolicy":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorScaleOutPolicy","description":"The sacle-out policy for the connector."}},"type":"object","required":["maxWorkerCount","mcuCount","minWorkerCount","scaleInPolicy","scaleOutPolicy"]},"aws-native:kafkaconnect:ConnectorCapacity":{"description":"Information about the capacity allocated to the connector.","properties":{"autoScaling":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorAutoScaling","description":"Information about the auto scaling parameters for the connector."},"provisionedCapacity":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorProvisionedCapacity","description":"Details about a fixed capacity allocated to a connector."}},"type":"object"},"aws-native:kafkaconnect:ConnectorCloudWatchLogsLogDelivery":{"description":"Details about delivering logs to Amazon CloudWatch Logs.","properties":{"enabled":{"type":"boolean","description":"Specifies whether the logs get sent to the specified CloudWatch Logs destination."},"logGroup":{"type":"string","description":"The CloudWatch log group that is the destination for log delivery."}},"type":"object","required":["enabled"]},"aws-native:kafkaconnect:ConnectorCustomPlugin":{"description":"Details about a custom plugin.","properties":{"customPluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom plugin to use."},"revision":{"type":"integer","description":"The revision of the custom plugin to use."}},"type":"object","required":["customPluginArn","revision"]},"aws-native:kafkaconnect:ConnectorFirehoseLogDelivery":{"description":"Details about delivering logs to Amazon Kinesis Data Firehose.","properties":{"deliveryStream":{"type":"string","description":"The Kinesis Data Firehose delivery stream that is the destination for log delivery."},"enabled":{"type":"boolean","description":"Specifies whether the logs get sent to the specified Kinesis Data Firehose delivery stream."}},"type":"object","required":["enabled"]},"aws-native:kafkaconnect:ConnectorKafkaCluster":{"description":"Details of how to connect to the Kafka cluster.","properties":{"apacheKafkaCluster":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorApacheKafkaCluster","description":"The Apache Kafka cluster to which the connector is connected."}},"type":"object","required":["apacheKafkaCluster"]},"aws-native:kafkaconnect:ConnectorKafkaClusterClientAuthentication":{"description":"Details of the client authentication used by the Kafka cluster.","properties":{"authenticationType":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaClusterClientAuthenticationType","description":"The type of client authentication used to connect to the Apache Kafka cluster. Value NONE means that no client authentication is used."}},"type":"object","required":["authenticationType"]},"aws-native:kafkaconnect:ConnectorKafkaClusterClientAuthenticationType":{"description":"The type of client authentication used to connect to the Kafka cluster. Value NONE means that no client authentication is used.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Iam","value":"IAM"}]},"aws-native:kafkaconnect:ConnectorKafkaClusterEncryptionInTransit":{"description":"Details of encryption in transit to the Kafka cluster.","properties":{"encryptionType":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaClusterEncryptionInTransitType","description":"The type of encryption in transit to the Apache Kafka cluster."}},"type":"object","required":["encryptionType"]},"aws-native:kafkaconnect:ConnectorKafkaClusterEncryptionInTransitType":{"description":"The type of encryption in transit to the Kafka cluster.","type":"string","enum":[{"name":"Plaintext","value":"PLAINTEXT"},{"name":"Tls","value":"TLS"}]},"aws-native:kafkaconnect:ConnectorLogDelivery":{"description":"Details of what logs are delivered and where they are delivered.","properties":{"workerLogDelivery":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorWorkerLogDelivery","description":"The workers can send worker logs to different destination types. This configuration specifies the details of these destinations."}},"type":"object","required":["workerLogDelivery"]},"aws-native:kafkaconnect:ConnectorNetworkType":{"description":"The network type of the Connector.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dual","value":"DUAL"}]},"aws-native:kafkaconnect:ConnectorPlugin":{"description":"Details about a Kafka Connect plugin which will be used with the connector.","properties":{"customPlugin":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorCustomPlugin","description":"Details about a custom plugin."}},"type":"object","required":["customPlugin"]},"aws-native:kafkaconnect:ConnectorProvisionedCapacity":{"description":"Details about a fixed capacity allocated to a connector.","properties":{"mcuCount":{"type":"integer","description":"Specifies how many MSK Connect Units (MCU) are allocated to the connector."},"workerCount":{"type":"integer","description":"Number of workers for a connector."}},"type":"object","required":["workerCount"]},"aws-native:kafkaconnect:ConnectorS3LogDelivery":{"description":"Details about delivering logs to Amazon S3.","properties":{"bucket":{"type":"string","description":"The name of the S3 bucket that is the destination for log delivery."},"enabled":{"type":"boolean","description":"Specifies whether the logs get sent to the specified Amazon S3 destination."},"prefix":{"type":"string","description":"The S3 prefix that is the destination for log delivery."}},"type":"object","required":["enabled"]},"aws-native:kafkaconnect:ConnectorScaleInPolicy":{"description":"Information about the scale in policy of the connector.","properties":{"cpuUtilizationPercentage":{"type":"integer","description":"Specifies the CPU utilization percentage threshold at which connector scale in should trigger."}},"type":"object","required":["cpuUtilizationPercentage"]},"aws-native:kafkaconnect:ConnectorScaleOutPolicy":{"description":"Information about the scale out policy of the connector.","properties":{"cpuUtilizationPercentage":{"type":"integer","description":"Specifies the CPU utilization percentage threshold at which connector scale out should trigger."}},"type":"object","required":["cpuUtilizationPercentage"]},"aws-native:kafkaconnect:ConnectorTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:kafkaconnect:ConnectorVpc":{"description":"Information about a VPC used with the connector.","properties":{"securityGroups":{"type":"array","items":{"type":"string"},"description":"The AWS security groups to associate with the elastic network interfaces in order to specify what the connector has access to."},"subnets":{"type":"array","items":{"type":"string"},"description":"The list of subnets to connect to in the virtual private cloud (VPC). AWS creates elastic network interfaces inside these subnets."}},"type":"object","required":["securityGroups","subnets"]},"aws-native:kafkaconnect:ConnectorWorkerConfiguration":{"description":"Specifies the worker configuration to use with the connector.","properties":{"revision":{"type":"integer","description":"The revision of the worker configuration to use."},"workerConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the worker configuration to use."}},"type":"object","required":["revision","workerConfigurationArn"]},"aws-native:kafkaconnect:ConnectorWorkerLogDelivery":{"description":"Specifies where worker logs are delivered.","properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorCloudWatchLogsLogDelivery","description":"Details about delivering logs to Amazon CloudWatch Logs."},"firehose":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorFirehoseLogDelivery","description":"Details about delivering logs to Amazon Kinesis Data Firehose."},"s3":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorS3LogDelivery","description":"Details about delivering logs to Amazon S3."}},"type":"object"},"aws-native:kafkaconnect:CustomPluginContentType":{"description":"The type of the plugin file.","type":"string","enum":[{"name":"Jar","value":"JAR"},{"name":"Zip","value":"ZIP"}]},"aws-native:kafkaconnect:CustomPluginFileDescription":{"description":"Details about the custom plugin file.","properties":{"fileMd5":{"type":"string","description":"The hex-encoded MD5 checksum of the custom plugin file. You can use it to validate the file."},"fileSize":{"type":"integer","description":"The size in bytes of the custom plugin file. You can use it to validate the file."}},"type":"object"},"aws-native:kafkaconnect:CustomPluginLocation":{"description":"Information about the location of a custom plugin.","properties":{"s3Location":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginS3Location","description":"The S3 bucket Amazon Resource Name (ARN), file key, and object version of the plugin file stored in Amazon S3."}},"type":"object","required":["s3Location"]},"aws-native:kafkaconnect:CustomPluginS3Location":{"description":"The S3 bucket Amazon Resource Name (ARN), file key, and object version of the plugin file stored in Amazon S3.","properties":{"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an S3 bucket."},"fileKey":{"type":"string","description":"The file key for an object in an S3 bucket."},"objectVersion":{"type":"string","description":"The version of an object in an S3 bucket."}},"type":"object","required":["bucketArn","fileKey"]},"aws-native:kafkaconnect:CustomPluginTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:kafkaconnect:WorkerConfigurationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:kendra:DataSourceAccessControlListConfiguration":{"properties":{"keyPath":{"type":"string","description":"Path to the AWS S3 bucket that contains the access control list files."}},"type":"object"},"aws-native:kendra:DataSourceAclConfiguration":{"properties":{"allowedGroupsColumnName":{"type":"string","description":"A list of groups, separated by semi-colons, that filters a query response based on user context. The document is only returned to users that are in one of the groups specified in the `UserContext` field of the [Query](https://docs.aws.amazon.com/kendra/latest/dg/API_Query.html) operation."}},"type":"object","required":["allowedGroupsColumnName"]},"aws-native:kendra:DataSourceColumnConfiguration":{"properties":{"changeDetectingColumns":{"type":"array","items":{"type":"string"},"description":"One to five columns that indicate when a document in the database has changed."},"documentDataColumnName":{"type":"string","description":"The column that contains the contents of the document."},"documentIdColumnName":{"type":"string","description":"The column that provides the document's identifier."},"documentTitleColumnName":{"type":"string","description":"The column that contains the title of the document."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"An array of objects that map database column names to the corresponding fields in an index. You must first create the fields in the index using the [UpdateIndex](https://docs.aws.amazon.com/kendra/latest/dg/API_UpdateIndex.html) operation."}},"type":"object","required":["changeDetectingColumns","documentDataColumnName","documentIdColumnName"]},"aws-native:kendra:DataSourceConditionOperator":{"type":"string","enum":[{"name":"GreaterThan","value":"GreaterThan"},{"name":"GreaterThanOrEquals","value":"GreaterThanOrEquals"},{"name":"LessThan","value":"LessThan"},{"name":"LessThanOrEquals","value":"LessThanOrEquals"},{"name":"Equals","value":"Equals"},{"name":"NotEquals","value":"NotEquals"},{"name":"Contains","value":"Contains"},{"name":"NotContains","value":"NotContains"},{"name":"Exists","value":"Exists"},{"name":"NotExists","value":"NotExists"},{"name":"BeginsWith","value":"BeginsWith"}]},"aws-native:kendra:DataSourceConfiguration":{"properties":{"confluenceConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceConfiguration","description":"Provides the configuration information to connect to Confluence as your data source."},"databaseConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceDatabaseConfiguration","description":"Provides the configuration information to connect to a database as your data source."},"googleDriveConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceGoogleDriveConfiguration","description":"Provides the configuration information to connect to Google Drive as your data source."},"oneDriveConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceOneDriveConfiguration","description":"Provides the configuration information to connect to Microsoft OneDrive as your data source."},"s3Configuration":{"$ref":"#/types/aws-native:kendra:DataSourceS3DataSourceConfiguration","description":"Provides the configuration information to connect to an Amazon S3 bucket as your data source.\n\n\u003e Amazon Kendra now supports an upgraded Amazon S3 connector.\n\u003e \n\u003e You must now use the [TemplateConfiguration](https://docs.aws.amazon.com/kendra/latest/APIReference/API_TemplateConfiguration.html) object instead of the `S3DataSourceConfiguration` object to configure your connector.\n\u003e \n\u003e Connectors configured using the older console and API architecture will continue to function as configured. However, you won't be able to edit or update them. If you want to edit or update your connector configuration, you must create a new connector.\n\u003e \n\u003e We recommended migrating your connector workflow to the upgraded version. Support for connectors configured using the older architecture is scheduled to end by June 2024."},"salesforceConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceConfiguration","description":"Provides the configuration information to connect to Salesforce as your data source."},"serviceNowConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceServiceNowConfiguration","description":"Provides the configuration information to connect to ServiceNow as your data source."},"sharePointConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSharePointConfiguration","description":"Provides the configuration information to connect to Microsoft SharePoint as your data source."},"templateConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceTemplateConfiguration","description":"Provides a template for the configuration information to connect to your data source."},"webCrawlerConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerConfiguration","description":"Provides the configuration information required for Amazon Kendra Web Crawler."},"workDocsConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceWorkDocsConfiguration","description":"Provides the configuration information to connect to WorkDocs as your data source."}},"type":"object"},"aws-native:kendra:DataSourceConfluenceAttachmentConfiguration":{"properties":{"attachmentFieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceAttachmentToIndexFieldMapping"},"description":"Maps attributes or field names of Confluence attachments to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to Confluence fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The Confluence data source field names must exist in your Confluence custom metadata.\n\nIf you specify the `AttachentFieldMappings` parameter, you must specify at least one field mapping."},"crawlAttachments":{"type":"boolean","description":"`TRUE` to index attachments of pages and blogs in Confluence."}},"type":"object"},"aws-native:kendra:DataSourceConfluenceAttachmentFieldName":{"type":"string","enum":[{"name":"Author","value":"AUTHOR"},{"name":"ContentType","value":"CONTENT_TYPE"},{"name":"CreatedDate","value":"CREATED_DATE"},{"name":"DisplayUrl","value":"DISPLAY_URL"},{"name":"FileSize","value":"FILE_SIZE"},{"name":"ItemType","value":"ITEM_TYPE"},{"name":"ParentId","value":"PARENT_ID"},{"name":"SpaceKey","value":"SPACE_KEY"},{"name":"SpaceName","value":"SPACE_NAME"},{"name":"Url","value":"URL"},{"name":"Version","value":"VERSION"}]},"aws-native:kendra:DataSourceConfluenceAttachmentToIndexFieldMapping":{"properties":{"dataSourceFieldName":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceAttachmentFieldName"},"dateFieldFormat":{"type":"string"},"indexFieldName":{"type":"string"}},"type":"object","required":["dataSourceFieldName","indexFieldName"]},"aws-native:kendra:DataSourceConfluenceBlogConfiguration":{"properties":{"blogFieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceBlogToIndexFieldMapping"},"description":"Maps attributes or field names of Confluence blogs to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to Confluence fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The Confluence data source field names must exist in your Confluence custom metadata.\n\nIf you specify the `BlogFieldMappings` parameter, you must specify at least one field mapping."}},"type":"object"},"aws-native:kendra:DataSourceConfluenceBlogFieldName":{"type":"string","enum":[{"name":"Author","value":"AUTHOR"},{"name":"DisplayUrl","value":"DISPLAY_URL"},{"name":"ItemType","value":"ITEM_TYPE"},{"name":"Labels","value":"LABELS"},{"name":"PublishDate","value":"PUBLISH_DATE"},{"name":"SpaceKey","value":"SPACE_KEY"},{"name":"SpaceName","value":"SPACE_NAME"},{"name":"Url","value":"URL"},{"name":"Version","value":"VERSION"}]},"aws-native:kendra:DataSourceConfluenceBlogToIndexFieldMapping":{"properties":{"dataSourceFieldName":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceBlogFieldName"},"dateFieldFormat":{"type":"string"},"indexFieldName":{"type":"string"}},"type":"object","required":["dataSourceFieldName","indexFieldName"]},"aws-native:kendra:DataSourceConfluenceConfiguration":{"properties":{"attachmentConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceAttachmentConfiguration","description":"Configuration information for indexing attachments to Confluence blogs and pages."},"blogConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceBlogConfiguration","description":"Configuration information for indexing Confluence blogs."},"exclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain blog posts, pages, spaces, or attachments in your Confluence. Content that matches the patterns are excluded from the index. Content that doesn't match the patterns is included in the index. If content matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the content isn't included in the index."},"inclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain blog posts, pages, spaces, or attachments in your Confluence. Content that matches the patterns are included in the index. Content that doesn't match the patterns is excluded from the index. If content matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the content isn't included in the index."},"pageConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfluencePageConfiguration","description":"Configuration information for indexing Confluence pages."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Secrets Manager secret that contains the user name and password required to connect to the Confluence instance. If you use Confluence Cloud, you use a generated API token as the password.\n\nYou can also provide authentication credentials in the form of a personal access token. For more information, see [Using a Confluence data source](https://docs.aws.amazon.com/kendra/latest/dg/data-source-confluence.html) ."},"serverUrl":{"type":"string","description":"The URL of your Confluence instance. Use the full URL of the server. For example, *https://server.example.com:port/* . You can also use an IP address, for example, *https://192.168.1.113/* ."},"spaceConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceSpaceConfiguration","description":"Configuration information for indexing Confluence spaces."},"version":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceVersion","description":"The version or the type of Confluence installation to connect to."},"vpcConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceVpcConfiguration","description":"Configuration information for an Amazon Virtual Private Cloud to connect to your Confluence. For more information, see [Configuring a VPC](https://docs.aws.amazon.com/kendra/latest/dg/vpc-configuration.html) ."}},"type":"object","required":["secretArn","serverUrl","version"]},"aws-native:kendra:DataSourceConfluencePageConfiguration":{"properties":{"pageFieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceConfluencePageToIndexFieldMapping"},"description":"Maps attributes or field names of Confluence pages to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to Confluence fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The Confluence data source field names must exist in your Confluence custom metadata.\n\nIf you specify the `PageFieldMappings` parameter, you must specify at least one field mapping."}},"type":"object"},"aws-native:kendra:DataSourceConfluencePageFieldName":{"type":"string","enum":[{"name":"Author","value":"AUTHOR"},{"name":"ContentStatus","value":"CONTENT_STATUS"},{"name":"CreatedDate","value":"CREATED_DATE"},{"name":"DisplayUrl","value":"DISPLAY_URL"},{"name":"ItemType","value":"ITEM_TYPE"},{"name":"Labels","value":"LABELS"},{"name":"ModifiedDate","value":"MODIFIED_DATE"},{"name":"ParentId","value":"PARENT_ID"},{"name":"SpaceKey","value":"SPACE_KEY"},{"name":"SpaceName","value":"SPACE_NAME"},{"name":"Url","value":"URL"},{"name":"Version","value":"VERSION"}]},"aws-native:kendra:DataSourceConfluencePageToIndexFieldMapping":{"properties":{"dataSourceFieldName":{"$ref":"#/types/aws-native:kendra:DataSourceConfluencePageFieldName"},"dateFieldFormat":{"type":"string"},"indexFieldName":{"type":"string"}},"type":"object","required":["dataSourceFieldName","indexFieldName"]},"aws-native:kendra:DataSourceConfluenceSpaceConfiguration":{"properties":{"crawlArchivedSpaces":{"type":"boolean","description":"`TRUE` to index archived spaces."},"crawlPersonalSpaces":{"type":"boolean","description":"`TRUE` to index personal spaces. You can add restrictions to items in personal spaces. If personal spaces are indexed, queries without user context information may return restricted items from a personal space in their results. For more information, see [Filtering on user context](https://docs.aws.amazon.com/kendra/latest/dg/user-context-filter.html) ."},"excludeSpaces":{"type":"array","items":{"type":"string"},"description":"A list of space keys of Confluence spaces. If you include a key, the blogs, documents, and attachments in the space are not indexed. If a space is in both the `ExcludeSpaces` and the `IncludeSpaces` list, the space is excluded."},"includeSpaces":{"type":"array","items":{"type":"string"},"description":"A list of space keys for Confluence spaces. If you include a key, the blogs, documents, and attachments in the space are indexed. Spaces that aren't in the list aren't indexed. A space in the list must exist. Otherwise, Amazon Kendra logs an error when the data source is synchronized. If a space is in both the `IncludeSpaces` and the `ExcludeSpaces` list, the space is excluded."},"spaceFieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceSpaceToIndexFieldMapping"},"description":"Maps attributes or field names of Confluence spaces to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to Confluence fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The Confluence data source field names must exist in your Confluence custom metadata.\n\nIf you specify the `SpaceFieldMappings` parameter, you must specify at least one field mapping."}},"type":"object"},"aws-native:kendra:DataSourceConfluenceSpaceFieldName":{"type":"string","enum":[{"name":"DisplayUrl","value":"DISPLAY_URL"},{"name":"ItemType","value":"ITEM_TYPE"},{"name":"SpaceKey","value":"SPACE_KEY"},{"name":"Url","value":"URL"}]},"aws-native:kendra:DataSourceConfluenceSpaceToIndexFieldMapping":{"properties":{"dataSourceFieldName":{"$ref":"#/types/aws-native:kendra:DataSourceConfluenceSpaceFieldName"},"dateFieldFormat":{"type":"string"},"indexFieldName":{"type":"string"}},"type":"object","required":["dataSourceFieldName","indexFieldName"]},"aws-native:kendra:DataSourceConfluenceVersion":{"type":"string","enum":[{"name":"Cloud","value":"CLOUD"},{"name":"Server","value":"SERVER"}]},"aws-native:kendra:DataSourceConnectionConfiguration":{"properties":{"databaseHost":{"type":"string","description":"The name of the host for the database. Can be either a string (host.subdomain.domain.tld) or an IPv4 or IPv6 address."},"databaseName":{"type":"string","description":"The name of the database containing the document data."},"databasePort":{"type":"integer","description":"The port that the database uses for connections."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Secrets Manager secret that stores the credentials. The credentials should be a user-password pair. For more information, see [Using a Database Data Source](https://docs.aws.amazon.com/kendra/latest/dg/data-source-database.html) . For more information about AWS Secrets Manager , see [What Is AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) in the *AWS Secrets Manager* user guide."},"tableName":{"type":"string","description":"The name of the table that contains the document data."}},"type":"object","required":["databaseHost","databaseName","databasePort","secretArn","tableName"]},"aws-native:kendra:DataSourceCustomDocumentEnrichmentConfiguration":{"properties":{"inlineConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceInlineCustomDocumentEnrichmentConfiguration"},"description":"Configuration information to alter document attributes or metadata fields and content when ingesting documents into Amazon Kendra."},"postExtractionHookConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceHookConfiguration","description":"Configuration information for invoking a Lambda function in AWS Lambda on the structured documents with their metadata and text extracted. You can use a Lambda function to apply advanced logic for creating, modifying, or deleting document metadata and content. For more information, see [Advanced data manipulation](https://docs.aws.amazon.com/kendra/latest/dg/custom-document-enrichment.html#advanced-data-manipulation) ."},"preExtractionHookConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceHookConfiguration","description":"Configuration information for invoking a Lambda function in AWS Lambda on the original or raw documents before extracting their metadata and text. You can use a Lambda function to apply advanced logic for creating, modifying, or deleting document metadata and content. For more information, see [Advanced data manipulation](https://docs.aws.amazon.com/kendra/latest/dg/custom-document-enrichment.html#advanced-data-manipulation) ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role with permission to run `PreExtractionHookConfiguration` and `PostExtractionHookConfiguration` for altering document metadata and content during the document ingestion process. For more information, see [an IAM roles for Amazon Kendra](https://docs.aws.amazon.com/kendra/latest/dg/iam-roles.html) ."}},"type":"object"},"aws-native:kendra:DataSourceDatabaseConfiguration":{"properties":{"aclConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceAclConfiguration","description":"Information about the database column that provides information for user context filtering."},"columnConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceColumnConfiguration","description":"Information about where the index should get the document information from the database."},"connectionConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConnectionConfiguration","description":"Configuration information that's required to connect to a database."},"databaseEngineType":{"$ref":"#/types/aws-native:kendra:DataSourceDatabaseEngineType","description":"The type of database engine that runs the database."},"sqlConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSqlConfiguration","description":"Provides information about how Amazon Kendra uses quote marks around SQL identifiers when querying a database data source."},"vpcConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceVpcConfiguration","description":"Provides information for connecting to an Amazon VPC."}},"type":"object","required":["columnConfiguration","connectionConfiguration","databaseEngineType"]},"aws-native:kendra:DataSourceDatabaseEngineType":{"type":"string","enum":[{"name":"RdsAuroraMysql","value":"RDS_AURORA_MYSQL"},{"name":"RdsAuroraPostgresql","value":"RDS_AURORA_POSTGRESQL"},{"name":"RdsMysql","value":"RDS_MYSQL"},{"name":"RdsPostgresql","value":"RDS_POSTGRESQL"}]},"aws-native:kendra:DataSourceDocumentAttributeCondition":{"properties":{"conditionDocumentAttributeKey":{"type":"string","description":"The identifier of the document attribute used for the condition.\n\nFor example, 'Source_URI' could be an identifier for the attribute or metadata field that contains source URIs associated with the documents.\n\nAmazon Kendra currently does not support `_document_body` as an attribute key used for the condition."},"conditionOnValue":{"$ref":"#/types/aws-native:kendra:DataSourceDocumentAttributeValue","description":"The value used by the operator.\n\nFor example, you can specify the value 'financial' for strings in the 'Source_URI' field that partially match or contain this value."},"operator":{"$ref":"#/types/aws-native:kendra:DataSourceConditionOperator","description":"The condition operator.\n\nFor example, you can use 'Contains' to partially match a string."}},"type":"object","required":["conditionDocumentAttributeKey","operator"]},"aws-native:kendra:DataSourceDocumentAttributeTarget":{"properties":{"targetDocumentAttributeKey":{"type":"string"},"targetDocumentAttributeValue":{"$ref":"#/types/aws-native:kendra:DataSourceDocumentAttributeValue"},"targetDocumentAttributeValueDeletion":{"type":"boolean"}},"type":"object","required":["targetDocumentAttributeKey"]},"aws-native:kendra:DataSourceDocumentAttributeValue":{"properties":{"dateValue":{"type":"string","description":"A date expressed as an ISO 8601 string.\n\nIt is important for the time zone to be included in the ISO 8601 date-time format. For example, 2012-03-25T12:30:10+01:00 is the ISO 8601 date-time format for March 25th 2012 at 12:30PM (plus 10 seconds) in Central European Time."},"longValue":{"type":"integer","description":"A long integer value."},"stringListValue":{"type":"array","items":{"type":"string"},"description":"A list of strings. The default maximum length or number of strings is 10."},"stringValue":{"type":"string","description":"A string, such as \"department\"."}},"type":"object"},"aws-native:kendra:DataSourceDocumentsMetadataConfiguration":{"properties":{"s3Prefix":{"type":"string","description":"A prefix used to filter metadata configuration files in the AWS S3 bucket. The S3 bucket might contain multiple metadata files. Use `S3Prefix` to include only the desired metadata files."}},"type":"object"},"aws-native:kendra:DataSourceGoogleDriveConfiguration":{"properties":{"excludeMimeTypes":{"type":"array","items":{"type":"string"},"description":"A list of MIME types to exclude from the index. All documents matching the specified MIME type are excluded.\n\nFor a list of MIME types, see [Using a Google Workspace Drive data source](https://docs.aws.amazon.com/kendra/latest/dg/data-source-google-drive.html) ."},"excludeSharedDrives":{"type":"array","items":{"type":"string"},"description":"A list of identifiers or shared drives to exclude from the index. All files and folders stored on the shared drive are excluded."},"excludeUserAccounts":{"type":"array","items":{"type":"string"},"description":"A list of email addresses of the users. Documents owned by these users are excluded from the index. Documents shared with excluded users are indexed unless they are excluded in another way."},"exclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain items in your Google Drive, including shared drives and users' My Drives. Items that match the patterns are excluded from the index. Items that don't match the patterns are included in the index. If an item matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the item isn't included in the index."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"Maps Google Drive data source attributes or field names to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to Google Drive fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The Google Drive data source field names must exist in your Google Drive custom metadata."},"inclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain items in your Google Drive, including shared drives and users' My Drives. Items that match the patterns are included in the index. Items that don't match the patterns are excluded from the index. If an item matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the item isn't included in the index."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a AWS Secrets Manager secret that contains the credentials required to connect to Google Drive. For more information, see [Using a Google Workspace Drive data source](https://docs.aws.amazon.com/kendra/latest/dg/data-source-google-drive.html) ."}},"type":"object","required":["secretArn"]},"aws-native:kendra:DataSourceHookConfiguration":{"properties":{"invocationCondition":{"$ref":"#/types/aws-native:kendra:DataSourceDocumentAttributeCondition","description":"The condition used for when a Lambda function should be invoked.\n\nFor example, you can specify a condition that if there are empty date-time values, then Amazon Kendra should invoke a function that inserts the current date-time."},"lambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role with permission to run a Lambda function during ingestion. For more information, see [an IAM roles for Amazon Kendra](https://docs.aws.amazon.com/kendra/latest/dg/iam-roles.html) ."},"s3Bucket":{"type":"string","description":"Stores the original, raw documents or the structured, parsed documents before and after altering them. For more information, see [Data contracts for Lambda functions](https://docs.aws.amazon.com/kendra/latest/dg/custom-document-enrichment.html#cde-data-contracts-lambda) ."}},"type":"object","required":["lambdaArn","s3Bucket"]},"aws-native:kendra:DataSourceInlineCustomDocumentEnrichmentConfiguration":{"properties":{"condition":{"$ref":"#/types/aws-native:kendra:DataSourceDocumentAttributeCondition"},"documentContentDeletion":{"type":"boolean"},"target":{"$ref":"#/types/aws-native:kendra:DataSourceDocumentAttributeTarget"}},"type":"object"},"aws-native:kendra:DataSourceOneDriveConfiguration":{"properties":{"disableLocalGroups":{"type":"boolean","description":"`TRUE` to disable local groups information."},"exclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain documents in your OneDrive. Documents that match the patterns are excluded from the index. Documents that don't match the patterns are included in the index. If a document matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the document isn't included in the index.\n\nThe pattern is applied to the file name."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"A list of `DataSourceToIndexFieldMapping` objects that map OneDrive data source attributes or field names to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to OneDrive fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The OneDrive data source field names must exist in your OneDrive custom metadata."},"inclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain documents in your OneDrive. Documents that match the patterns are included in the index. Documents that don't match the patterns are excluded from the index. If a document matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the document isn't included in the index.\n\nThe pattern is applied to the file name."},"oneDriveUsers":{"$ref":"#/types/aws-native:kendra:DataSourceOneDriveUsers","description":"A list of user accounts whose documents should be indexed."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Secrets Manager secret that contains the user name and password to connect to OneDrive. The user name should be the application ID for the OneDrive application, and the password is the application key for the OneDrive application."},"tenantDomain":{"type":"string","description":"The Azure Active Directory domain of the organization."}},"type":"object","required":["oneDriveUsers","secretArn","tenantDomain"]},"aws-native:kendra:DataSourceOneDriveUsers":{"properties":{"oneDriveUserList":{"type":"array","items":{"type":"string"},"description":"A list of users whose documents should be indexed. Specify the user names in email format, for example, `username@tenantdomain` . If you need to index the documents of more than 10 users, use the `OneDriveUserS3Path` field to specify the location of a file containing a list of users."},"oneDriveUserS3Path":{"$ref":"#/types/aws-native:kendra:DataSourceS3Path","description":"The S3 bucket location of a file containing a list of users whose documents should be indexed."}},"type":"object"},"aws-native:kendra:DataSourceProxyConfiguration":{"properties":{"credentials":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Secrets Manager secret. You create a secret to store your credentials in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html)\n\nThe credentials are optional. You use a secret if web proxy credentials are required to connect to a website host. Amazon Kendra currently support basic authentication to connect to a web proxy server. The secret stores your credentials."},"host":{"type":"string","description":"The name of the website host you want to connect to via a web proxy server.\n\nFor example, the host name of https://a.example.com/page1.html is \"a.example.com\"."},"port":{"type":"integer","description":"The port number of the website host you want to connect to via a web proxy server.\n\nFor example, the port for https://a.example.com/page1.html is 443, the standard port for HTTPS."}},"type":"object","required":["host","port"]},"aws-native:kendra:DataSourceQueryIdentifiersEnclosingOption":{"type":"string","enum":[{"name":"DoubleQuotes","value":"DOUBLE_QUOTES"},{"name":"None","value":"NONE"}]},"aws-native:kendra:DataSourceS3DataSourceConfiguration":{"description":"S3 data source configuration","properties":{"accessControlListConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceAccessControlListConfiguration","description":"Provides the path to the S3 bucket that contains the user context filtering files for the data source. For the format of the file, see [Access control for S3 data sources](https://docs.aws.amazon.com/kendra/latest/dg/s3-acl.html) ."},"bucketName":{"type":"string","description":"The name of the bucket that contains the documents."},"documentsMetadataConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceDocumentsMetadataConfiguration","description":"Specifies document metadata files that contain information such as the document access control information, source URI, document author, and custom attributes. Each metadata file contains metadata about a single document."},"exclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of glob patterns (patterns that can expand a wildcard pattern into a list of path names that match the given pattern) for certain file names and file types to exclude from your index. If a document matches both an inclusion and exclusion prefix or pattern, the exclusion prefix takes precendence and the document is not indexed. Examples of glob patterns include:\n\n- */myapp/config/** —All files inside config directory.\n- ***/*.png* —All .png files in all directories.\n- ***/*.{png, ico, md}* —All .png, .ico or .md files in all directories.\n- */myapp/src/**/*.ts* —All .ts files inside src directory (and all its subdirectories).\n- ***/!(*.module).ts* —All .ts files but not .module.ts\n- **.png , *.jpg* —All PNG and JPEG image files in a directory (files with the extensions .png and .jpg).\n- **internal** —All files in a directory that contain 'internal' in the file name, such as 'internal', 'internal_only', 'company_internal'.\n- ***/*internal** —All internal-related files in a directory and its subdirectories.\n\nFor more examples, see [Use of Exclude and Include Filters](https://docs.aws.amazon.com/cli/latest/reference/s3/#use-of-exclude-and-include-filters) in the AWS CLI Command Reference."},"inclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of glob patterns (patterns that can expand a wildcard pattern into a list of path names that match the given pattern) for certain file names and file types to include in your index. If a document matches both an inclusion and exclusion prefix or pattern, the exclusion prefix takes precendence and the document is not indexed. Examples of glob patterns include:\n\n- */myapp/config/** —All files inside config directory.\n- ***/*.png* —All .png files in all directories.\n- ***/*.{png, ico, md}* —All .png, .ico or .md files in all directories.\n- */myapp/src/**/*.ts* —All .ts files inside src directory (and all its subdirectories).\n- ***/!(*.module).ts* —All .ts files but not .module.ts\n- **.png , *.jpg* —All PNG and JPEG image files in a directory (files with the extensions .png and .jpg).\n- **internal** —All files in a directory that contain 'internal' in the file name, such as 'internal', 'internal_only', 'company_internal'.\n- ***/*internal** —All internal-related files in a directory and its subdirectories.\n\nFor more examples, see [Use of Exclude and Include Filters](https://docs.aws.amazon.com/cli/latest/reference/s3/#use-of-exclude-and-include-filters) in the AWS CLI Command Reference."},"inclusionPrefixes":{"type":"array","items":{"type":"string"},"description":"A list of S3 prefixes for the documents that should be included in the index."}},"type":"object","required":["bucketName"]},"aws-native:kendra:DataSourceS3Path":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket that contains the file."},"key":{"type":"string","description":"The name of the file."}},"type":"object","required":["bucket","key"]},"aws-native:kendra:DataSourceSalesforceChatterFeedConfiguration":{"properties":{"documentDataFieldName":{"type":"string","description":"The name of the column in the Salesforce FeedItem table that contains the content to index. Typically this is the `Body` column."},"documentTitleFieldName":{"type":"string","description":"The name of the column in the Salesforce FeedItem table that contains the title of the document. This is typically the `Title` column."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"Maps fields from a Salesforce chatter feed into Amazon Kendra index fields."},"includeFilterTypes":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceChatterFeedIncludeFilterType"},"description":"Filters the documents in the feed based on status of the user. When you specify `ACTIVE_USERS` only documents from users who have an active account are indexed. When you specify `STANDARD_USER` only documents for Salesforce standard users are documented. You can specify both."}},"type":"object","required":["documentDataFieldName"]},"aws-native:kendra:DataSourceSalesforceChatterFeedIncludeFilterType":{"type":"string","enum":[{"name":"ActiveUser","value":"ACTIVE_USER"},{"name":"StandardUser","value":"STANDARD_USER"}]},"aws-native:kendra:DataSourceSalesforceConfiguration":{"properties":{"chatterFeedConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceChatterFeedConfiguration","description":"Configuration information for Salesforce chatter feeds."},"crawlAttachments":{"type":"boolean","description":"Indicates whether Amazon Kendra should index attachments to Salesforce objects."},"excludeAttachmentFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain documents in your Salesforce. Documents that match the patterns are excluded from the index. Documents that don't match the patterns are included in the index. If a document matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the document isn't included in the index.\n\nThe pattern is applied to the name of the attached file."},"includeAttachmentFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain documents in your Salesforce. Documents that match the patterns are included in the index. Documents that don't match the patterns are excluded from the index. If a document matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the document isn't included in the index.\n\nThe pattern is applied to the name of the attached file."},"knowledgeArticleConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceKnowledgeArticleConfiguration","description":"Configuration information for the knowledge article types that Amazon Kendra indexes. Amazon Kendra indexes standard knowledge articles and the standard fields of knowledge articles, or the custom fields of custom knowledge articles, but not both."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Secrets Manager secret that contains the key/value pairs required to connect to your Salesforce instance. The secret must contain a JSON structure with the following keys:\n\n- authenticationUrl - The OAUTH endpoint that Amazon Kendra connects to get an OAUTH token.\n- consumerKey - The application public key generated when you created your Salesforce application.\n- consumerSecret - The application private key generated when you created your Salesforce application.\n- password - The password associated with the user logging in to the Salesforce instance.\n- securityToken - The token associated with the user logging in to the Salesforce instance.\n- username - The user name of the user logging in to the Salesforce instance."},"serverUrl":{"type":"string","description":"The instance URL for the Salesforce site that you want to index."},"standardObjectAttachmentConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceStandardObjectAttachmentConfiguration","description":"Configuration information for processing attachments to Salesforce standard objects."},"standardObjectConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceStandardObjectConfiguration"},"description":"Configuration of the Salesforce standard objects that Amazon Kendra indexes."}},"type":"object","required":["secretArn","serverUrl"]},"aws-native:kendra:DataSourceSalesforceCustomKnowledgeArticleTypeConfiguration":{"properties":{"documentDataFieldName":{"type":"string"},"documentTitleFieldName":{"type":"string"},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"}},"name":{"type":"string"}},"type":"object","required":["documentDataFieldName","name"]},"aws-native:kendra:DataSourceSalesforceKnowledgeArticleConfiguration":{"properties":{"customKnowledgeArticleTypeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceCustomKnowledgeArticleTypeConfiguration"},"description":"Configuration information for custom Salesforce knowledge articles."},"includedStates":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceKnowledgeArticleState"},"description":"Specifies the document states that should be included when Amazon Kendra indexes knowledge articles. You must specify at least one state."},"standardKnowledgeArticleTypeConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceStandardKnowledgeArticleTypeConfiguration","description":"Configuration information for standard Salesforce knowledge articles."}},"type":"object","required":["includedStates"]},"aws-native:kendra:DataSourceSalesforceKnowledgeArticleState":{"type":"string","enum":[{"name":"Draft","value":"DRAFT"},{"name":"Published","value":"PUBLISHED"},{"name":"Archived","value":"ARCHIVED"}]},"aws-native:kendra:DataSourceSalesforceStandardKnowledgeArticleTypeConfiguration":{"properties":{"documentDataFieldName":{"type":"string","description":"The name of the field that contains the document data to index."},"documentTitleFieldName":{"type":"string","description":"The name of the field that contains the document title."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"Maps attributes or field names of the knowledge article to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to Salesforce fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The Salesforce data source field names must exist in your Salesforce custom metadata."}},"type":"object","required":["documentDataFieldName"]},"aws-native:kendra:DataSourceSalesforceStandardObjectAttachmentConfiguration":{"properties":{"documentTitleFieldName":{"type":"string","description":"The name of the field used for the document title."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"One or more objects that map fields in attachments to Amazon Kendra index fields."}},"type":"object"},"aws-native:kendra:DataSourceSalesforceStandardObjectConfiguration":{"properties":{"documentDataFieldName":{"type":"string"},"documentTitleFieldName":{"type":"string"},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"}},"name":{"$ref":"#/types/aws-native:kendra:DataSourceSalesforceStandardObjectName"}},"type":"object","required":["documentDataFieldName","name"]},"aws-native:kendra:DataSourceSalesforceStandardObjectName":{"type":"string","enum":[{"name":"Account","value":"ACCOUNT"},{"name":"Campaign","value":"CAMPAIGN"},{"name":"Case","value":"CASE"},{"name":"Contact","value":"CONTACT"},{"name":"Contract","value":"CONTRACT"},{"name":"Document","value":"DOCUMENT"},{"name":"Group","value":"GROUP"},{"name":"Idea","value":"IDEA"},{"name":"Lead","value":"LEAD"},{"name":"Opportunity","value":"OPPORTUNITY"},{"name":"Partner","value":"PARTNER"},{"name":"Pricebook","value":"PRICEBOOK"},{"name":"Product","value":"PRODUCT"},{"name":"Profile","value":"PROFILE"},{"name":"Solution","value":"SOLUTION"},{"name":"Task","value":"TASK"},{"name":"User","value":"USER"}]},"aws-native:kendra:DataSourceServiceNowAuthenticationType":{"type":"string","enum":[{"name":"HttpBasic","value":"HTTP_BASIC"},{"name":"Oauth2","value":"OAUTH2"}]},"aws-native:kendra:DataSourceServiceNowBuildVersionType":{"type":"string","enum":[{"name":"London","value":"LONDON"},{"name":"Others","value":"OTHERS"}]},"aws-native:kendra:DataSourceServiceNowConfiguration":{"properties":{"authenticationType":{"$ref":"#/types/aws-native:kendra:DataSourceServiceNowAuthenticationType","description":"The type of authentication used to connect to the ServiceNow instance. If you choose `HTTP_BASIC` , Amazon Kendra is authenticated using the user name and password provided in the AWS Secrets Manager secret in the `SecretArn` field. If you choose `OAUTH2` , Amazon Kendra is authenticated using the credentials of client ID, client secret, user name and password.\n\nWhen you use `OAUTH2` authentication, you must generate a token and a client secret using the ServiceNow console. For more information, see [Using a ServiceNow data source](https://docs.aws.amazon.com/kendra/latest/dg/data-source-servicenow.html) ."},"hostUrl":{"type":"string","description":"The ServiceNow instance that the data source connects to. The host endpoint should look like the following: *{instance}.service-now.com.*"},"knowledgeArticleConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceServiceNowKnowledgeArticleConfiguration","description":"Configuration information for crawling knowledge articles in the ServiceNow site."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the user name and password required to connect to the ServiceNow instance. You can also provide OAuth authentication credentials of user name, password, client ID, and client secret. For more information, see [Using a ServiceNow data source](https://docs.aws.amazon.com/kendra/latest/dg/data-source-servicenow.html) ."},"serviceCatalogConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceServiceNowServiceCatalogConfiguration","description":"Configuration information for crawling service catalogs in the ServiceNow site."},"serviceNowBuildVersion":{"$ref":"#/types/aws-native:kendra:DataSourceServiceNowBuildVersionType","description":"The identifier of the release that the ServiceNow host is running. If the host is not running the `LONDON` release, use `OTHERS` ."}},"type":"object","required":["hostUrl","secretArn","serviceNowBuildVersion"]},"aws-native:kendra:DataSourceServiceNowKnowledgeArticleConfiguration":{"properties":{"crawlAttachments":{"type":"boolean","description":"`TRUE` to index attachments to knowledge articles."},"documentDataFieldName":{"type":"string","description":"The name of the ServiceNow field that is mapped to the index document contents field in the Amazon Kendra index."},"documentTitleFieldName":{"type":"string","description":"The name of the ServiceNow field that is mapped to the index document title field."},"excludeAttachmentFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns applied to exclude certain knowledge article attachments. Attachments that match the patterns are excluded from the index. Items that don't match the patterns are included in the index. If an item matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the item isn't included in the index."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"Maps attributes or field names of knoweldge articles to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to ServiceNow fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The ServiceNow data source field names must exist in your ServiceNow custom metadata."},"filterQuery":{"type":"string","description":"A query that selects the knowledge articles to index. The query can return articles from multiple knowledge bases, and the knowledge bases can be public or private.\n\nThe query string must be one generated by the ServiceNow console. For more information, see [Specifying documents to index with a query](https://docs.aws.amazon.com/kendra/latest/dg/servicenow-query.html) ."},"includeAttachmentFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns applied to include knowledge article attachments. Attachments that match the patterns are included in the index. Items that don't match the patterns are excluded from the index. If an item matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the item isn't included in the index."}},"type":"object","required":["documentDataFieldName"]},"aws-native:kendra:DataSourceServiceNowServiceCatalogConfiguration":{"properties":{"crawlAttachments":{"type":"boolean","description":"`TRUE` to index attachments to service catalog items."},"documentDataFieldName":{"type":"string","description":"The name of the ServiceNow field that is mapped to the index document contents field in the Amazon Kendra index."},"documentTitleFieldName":{"type":"string","description":"The name of the ServiceNow field that is mapped to the index document title field."},"excludeAttachmentFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain attachments of catalogs in your ServiceNow. Item that match the patterns are excluded from the index. Items that don't match the patterns are included in the index. If an item matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the item isn't included in the index.\n\nThe regex is applied to the file name of the attachment."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"Maps attributes or field names of catalogs to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to ServiceNow fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The ServiceNow data source field names must exist in your ServiceNow custom metadata."},"includeAttachmentFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain attachments of catalogs in your ServiceNow. Item that match the patterns are included in the index. Items that don't match the patterns are excluded from the index. If an item matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the item isn't included in the index.\n\nThe regex is applied to the file name of the attachment."}},"type":"object","required":["documentDataFieldName"]},"aws-native:kendra:DataSourceSharePointConfiguration":{"description":"SharePoint configuration","properties":{"crawlAttachments":{"type":"boolean","description":"`TRUE` to index document attachments."},"disableLocalGroups":{"type":"boolean","description":"`TRUE` to disable local groups information."},"documentTitleFieldName":{"type":"string","description":"The Microsoft SharePoint attribute field that contains the title of the document."},"exclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns. Documents that match the patterns are excluded from the index. Documents that don't match the patterns are included in the index. If a document matches both an exclusion pattern and an inclusion pattern, the document is not included in the index.\n\nThe regex is applied to the display URL of the SharePoint document."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"A list of `DataSourceToIndexFieldMapping` objects that map Microsoft SharePoint attributes or fields to Amazon Kendra index fields. You must first create the index fields using the [UpdateIndex](https://docs.aws.amazon.com/kendra/latest/dg/API_UpdateIndex.html) operation before you map SharePoint attributes. For more information, see [Mapping Data Source Fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) ."},"inclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain documents in your SharePoint. Documents that match the patterns are included in the index. Documents that don't match the patterns are excluded from the index. If a document matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the document isn't included in the index.\n\nThe regex applies to the display URL of the SharePoint document."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Secrets Manager secret that contains the user name and password required to connect to the SharePoint instance. For more information, see [Microsoft SharePoint](https://docs.aws.amazon.com/kendra/latest/dg/data-source-sharepoint.html) ."},"sharePointVersion":{"$ref":"#/types/aws-native:kendra:DataSourceSharePointConfigurationSharePointVersion","description":"The version of Microsoft SharePoint that you use."},"sslCertificateS3Path":{"$ref":"#/types/aws-native:kendra:DataSourceS3Path","description":"Information required to find a specific file in an Amazon S3 bucket."},"urls":{"type":"array","items":{"type":"string"},"description":"The Microsoft SharePoint site URLs for the documents you want to index."},"useChangeLog":{"type":"boolean","description":"`TRUE` to use the SharePoint change log to determine which documents require updating in the index. Depending on the change log's size, it may take longer for Amazon Kendra to use the change log than to scan all of your documents in SharePoint."},"vpcConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceVpcConfiguration","description":"Provides information for connecting to an Amazon VPC."}},"type":"object","required":["secretArn","sharePointVersion","urls"]},"aws-native:kendra:DataSourceSharePointConfigurationSharePointVersion":{"description":"The version of Microsoft SharePoint that you use.","type":"string","enum":[{"name":"SharepointOnline","value":"SHAREPOINT_ONLINE"},{"name":"Sharepoint2013","value":"SHAREPOINT_2013"},{"name":"Sharepoint2016","value":"SHAREPOINT_2016"}]},"aws-native:kendra:DataSourceSqlConfiguration":{"properties":{"queryIdentifiersEnclosingOption":{"$ref":"#/types/aws-native:kendra:DataSourceQueryIdentifiersEnclosingOption","description":"Determines whether Amazon Kendra encloses SQL identifiers for tables and column names in double quotes (\") when making a database query. You can set the value to `DOUBLE_QUOTES` or `NONE` .\n\nBy default, Amazon Kendra passes SQL identifiers the way that they are entered into the data source configuration. It does not change the case of identifiers or enclose them in quotes.\n\nPostgreSQL internally converts uppercase characters to lower case characters in identifiers unless they are quoted. Choosing this option encloses identifiers in quotes so that PostgreSQL does not convert the character's case.\n\nFor MySQL databases, you must enable the ansi_quotes option when you set this field to `DOUBLE_QUOTES` ."}},"type":"object"},"aws-native:kendra:DataSourceTag":{"description":"A label for tagging Kendra resources","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:kendra:DataSourceTemplateConfiguration":{"properties":{"template":{"$ref":"pulumi.json#/Any","description":"The template schema used for the data source, where templates schemas are supported.\n\nSee [Data source template schemas](https://docs.aws.amazon.com/kendra/latest/dg/ds-schemas.html) ."}},"type":"object","required":["template"]},"aws-native:kendra:DataSourceToIndexFieldMapping":{"properties":{"dataSourceFieldName":{"type":"string"},"dateFieldFormat":{"type":"string"},"indexFieldName":{"type":"string"}},"type":"object","required":["dataSourceFieldName","indexFieldName"]},"aws-native:kendra:DataSourceType":{"description":"Data source type","type":"string","enum":[{"name":"S3","value":"S3"},{"name":"Sharepoint","value":"SHAREPOINT"},{"name":"Salesforce","value":"SALESFORCE"},{"name":"Onedrive","value":"ONEDRIVE"},{"name":"Servicenow","value":"SERVICENOW"},{"name":"Database","value":"DATABASE"},{"name":"Custom","value":"CUSTOM"},{"name":"Confluence","value":"CONFLUENCE"},{"name":"Googledrive","value":"GOOGLEDRIVE"},{"name":"Webcrawler","value":"WEBCRAWLER"},{"name":"Workdocs","value":"WORKDOCS"},{"name":"Template","value":"TEMPLATE"}]},"aws-native:kendra:DataSourceVpcConfiguration":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of identifiers of security groups within your Amazon VPC. The security groups should enable Amazon Kendra to connect to the data source."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of identifiers for subnets within your Amazon VPC. The subnets should be able to connect to each other in the VPC, and they should have outgoing access to the Internet through a NAT device."}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:kendra:DataSourceWebCrawlerAuthenticationConfiguration":{"properties":{"basicAuthentication":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerBasicAuthentication"},"description":"The list of configuration information that's required to connect to and crawl a website host using basic authentication credentials.\n\nThe list includes the name and port number of the website host."}},"type":"object"},"aws-native:kendra:DataSourceWebCrawlerBasicAuthentication":{"properties":{"credentials":{"type":"string"},"host":{"type":"string"},"port":{"type":"integer"}},"type":"object","required":["credentials","host","port"]},"aws-native:kendra:DataSourceWebCrawlerConfiguration":{"properties":{"authenticationConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerAuthenticationConfiguration","description":"Configuration information required to connect to websites using authentication.\n\nYou can connect to websites using basic authentication of user name and password. You use a secret in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) to store your authentication credentials.\n\nYou must provide the website host name and port number. For example, the host name of https://a.example.com/page1.html is \"a.example.com\" and the port is 443, the standard port for HTTPS."},"crawlDepth":{"type":"integer","description":"The 'depth' or number of levels from the seed level to crawl. For example, the seed URL page is depth 1 and any hyperlinks on this page that are also crawled are depth 2."},"maxContentSizePerPageInMegaBytes":{"type":"number","description":"The maximum size (in MB) of a web page or attachment to crawl.\n\nFiles larger than this size (in MB) are skipped/not crawled.\n\nThe default maximum size of a web page or attachment is set to 50 MB."},"maxLinksPerPage":{"type":"integer","description":"The maximum number of URLs on a web page to include when crawling a website. This number is per web page.\n\nAs a website’s web pages are crawled, any URLs the web pages link to are also crawled. URLs on a web page are crawled in order of appearance.\n\nThe default maximum links per page is 100."},"maxUrlsPerMinuteCrawlRate":{"type":"integer","description":"The maximum number of URLs crawled per website host per minute.\n\nA minimum of one URL is required.\n\nThe default maximum number of URLs crawled per website host per minute is 300."},"proxyConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceProxyConfiguration","description":"Configuration information required to connect to your internal websites via a web proxy.\n\nYou must provide the website host name and port number. For example, the host name of https://a.example.com/page1.html is \"a.example.com\" and the port is 443, the standard port for HTTPS.\n\nWeb proxy credentials are optional and you can use them to connect to a web proxy server that requires basic authentication. To store web proxy credentials, you use a secret in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) ."},"urlExclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain URLs to crawl. URLs that match the patterns are excluded from the index. URLs that don't match the patterns are included in the index. If a URL matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the URL file isn't included in the index."},"urlInclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain URLs to crawl. URLs that match the patterns are included in the index. URLs that don't match the patterns are excluded from the index. If a URL matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the URL file isn't included in the index."},"urls":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerUrls","description":"Specifies the seed or starting point URLs of the websites or the sitemap URLs of the websites you want to crawl.\n\nYou can include website subdomains. You can list up to 100 seed URLs and up to three sitemap URLs.\n\nYou can only crawl websites that use the secure communication protocol, Hypertext Transfer Protocol Secure (HTTPS). If you receive an error when crawling a website, it could be that the website is blocked from crawling.\n\n*When selecting websites to index, you must adhere to the [Amazon Acceptable Use Policy](https://docs.aws.amazon.com/aup/) and all other Amazon terms. Remember that you must only use Amazon Kendra Web Crawler to index your own webpages, or webpages that you have authorization to index.*"}},"type":"object","required":["urls"]},"aws-native:kendra:DataSourceWebCrawlerSeedUrlConfiguration":{"properties":{"seedUrls":{"type":"array","items":{"type":"string"},"description":"The list of seed or starting point URLs of the websites you want to crawl.\n\nThe list can include a maximum of 100 seed URLs."},"webCrawlerMode":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerSeedUrlConfigurationWebCrawlerMode","description":"You can choose one of the following modes:\n\n- `HOST_ONLY` —crawl only the website host names. For example, if the seed URL is \"abc.example.com\", then only URLs with host name \"abc.example.com\" are crawled.\n- `SUBDOMAINS` —crawl the website host names with subdomains. For example, if the seed URL is \"abc.example.com\", then \"a.abc.example.com\" and \"b.abc.example.com\" are also crawled.\n- `EVERYTHING` —crawl the website host names with subdomains and other domains that the web pages link to.\n\nThe default mode is set to `HOST_ONLY` ."}},"type":"object","required":["seedUrls"]},"aws-native:kendra:DataSourceWebCrawlerSeedUrlConfigurationWebCrawlerMode":{"description":"You can choose one of the following modes:\n\n- `HOST_ONLY` —crawl only the website host names. For example, if the seed URL is \"abc.example.com\", then only URLs with host name \"abc.example.com\" are crawled.\n- `SUBDOMAINS` —crawl the website host names with subdomains. For example, if the seed URL is \"abc.example.com\", then \"a.abc.example.com\" and \"b.abc.example.com\" are also crawled.\n- `EVERYTHING` —crawl the website host names with subdomains and other domains that the web pages link to.\n\nThe default mode is set to `HOST_ONLY` .","type":"string","enum":[{"name":"HostOnly","value":"HOST_ONLY"},{"name":"Subdomains","value":"SUBDOMAINS"},{"name":"Everything","value":"EVERYTHING"}]},"aws-native:kendra:DataSourceWebCrawlerSiteMapsConfiguration":{"properties":{"siteMaps":{"type":"array","items":{"type":"string"},"description":"The list of sitemap URLs of the websites you want to crawl.\n\nThe list can include a maximum of three sitemap URLs."}},"type":"object","required":["siteMaps"]},"aws-native:kendra:DataSourceWebCrawlerUrls":{"properties":{"seedUrlConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerSeedUrlConfiguration","description":"Configuration of the seed or starting point URLs of the websites you want to crawl.\n\nYou can choose to crawl only the website host names, or the website host names with subdomains, or the website host names with subdomains and other domains that the web pages link to.\n\nYou can list up to 100 seed URLs."},"siteMapsConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceWebCrawlerSiteMapsConfiguration","description":"Configuration of the sitemap URLs of the websites you want to crawl.\n\nOnly URLs belonging to the same website host names are crawled. You can list up to three sitemap URLs."}},"type":"object"},"aws-native:kendra:DataSourceWorkDocsConfiguration":{"properties":{"crawlComments":{"type":"boolean","description":"`TRUE` to include comments on documents in your index. Including comments in your index means each comment is a document that can be searched on.\n\nThe default is set to `FALSE` ."},"exclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to exclude certain files in your WorkDocs site repository. Files that match the patterns are excluded from the index. Files that don’t match the patterns are included in the index. If a file matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the file isn't included in the index."},"fieldMappings":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:DataSourceToIndexFieldMapping"},"description":"A list of `DataSourceToIndexFieldMapping` objects that map WorkDocs data source attributes or field names to Amazon Kendra index field names. To create custom fields, use the `UpdateIndex` API before you map to WorkDocs fields. For more information, see [Mapping data source fields](https://docs.aws.amazon.com/kendra/latest/dg/field-mapping.html) . The WorkDocs data source field names must exist in your WorkDocs custom metadata."},"inclusionPatterns":{"type":"array","items":{"type":"string"},"description":"A list of regular expression patterns to include certain files in your WorkDocs site repository. Files that match the patterns are included in the index. Files that don't match the patterns are excluded from the index. If a file matches both an inclusion and exclusion pattern, the exclusion pattern takes precedence and the file isn't included in the index."},"organizationId":{"type":"string","description":"The identifier of the directory corresponding to your WorkDocs site repository.\n\nYou can find the organization ID in the [Directory Service](https://docs.aws.amazon.com/directoryservicev2/) by going to *Active Directory* , then *Directories* . Your WorkDocs site directory has an ID, which is the organization ID. You can also set up a new WorkDocs directory in the Directory Service console and enable a WorkDocs site for the directory in the WorkDocs console."},"useChangeLog":{"type":"boolean","description":"`TRUE` to use the WorkDocs change log to determine which documents require updating in the index. Depending on the change log's size, it may take longer for Amazon Kendra to use the change log than to scan all of your documents in WorkDocs."}},"type":"object","required":["organizationId"]},"aws-native:kendra:FaqFileFormat":{"description":"Format of the input file","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"CsvWithHeader","value":"CSV_WITH_HEADER"},{"name":"Json","value":"JSON"}]},"aws-native:kendra:FaqS3Path":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket that contains the file."},"key":{"type":"string","description":"The name of the file."}},"type":"object","required":["bucket","key"]},"aws-native:kendra:FaqTag":{"description":"A label for tagging Kendra resources","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:kendra:IndexCapacityUnitsConfiguration":{"properties":{"queryCapacityUnits":{"type":"integer","description":"The amount of extra query capacity for an index and [GetQuerySuggestions](https://docs.aws.amazon.com/kendra/latest/dg/API_GetQuerySuggestions.html) capacity.\n\nA single extra capacity unit for an index provides 0.1 queries per second or approximately 8,000 queries per day. You can add up to 100 extra capacity units.\n\n`GetQuerySuggestions` capacity is five times the provisioned query capacity for an index, or the base capacity of 2.5 calls per second, whichever is higher. For example, the base capacity for an index is 0.1 queries per second, and `GetQuerySuggestions` capacity has a base of 2.5 calls per second. If you add another 0.1 queries per second to total 0.2 queries per second for an index, the `GetQuerySuggestions` capacity is 2.5 calls per second (higher than five times 0.2 queries per second)."},"storageCapacityUnits":{"type":"integer","description":"The amount of extra storage capacity for an index. A single capacity unit provides 30 GB of storage space or 100,000 documents, whichever is reached first. You can add up to 100 extra capacity units."}},"type":"object","required":["queryCapacityUnits","storageCapacityUnits"]},"aws-native:kendra:IndexDocumentAttributeValueType":{"type":"string","enum":[{"name":"StringValue","value":"STRING_VALUE"},{"name":"StringListValue","value":"STRING_LIST_VALUE"},{"name":"LongValue","value":"LONG_VALUE"},{"name":"DateValue","value":"DATE_VALUE"}]},"aws-native:kendra:IndexDocumentMetadataConfiguration":{"properties":{"name":{"type":"string"},"relevance":{"$ref":"#/types/aws-native:kendra:IndexRelevance"},"search":{"$ref":"#/types/aws-native:kendra:IndexSearch"},"type":{"$ref":"#/types/aws-native:kendra:IndexDocumentAttributeValueType"}},"type":"object","required":["name","type"]},"aws-native:kendra:IndexEdition":{"description":"Edition of index","type":"string","enum":[{"name":"DeveloperEdition","value":"DEVELOPER_EDITION"},{"name":"EnterpriseEdition","value":"ENTERPRISE_EDITION"},{"name":"GenAiEnterpriseEdition","value":"GEN_AI_ENTERPRISE_EDITION"}]},"aws-native:kendra:IndexJsonTokenTypeConfiguration":{"properties":{"groupAttributeField":{"type":"string"},"userNameAttributeField":{"type":"string"}},"type":"object","required":["groupAttributeField","userNameAttributeField"]},"aws-native:kendra:IndexJwtTokenTypeConfiguration":{"properties":{"claimRegex":{"type":"string"},"groupAttributeField":{"type":"string"},"issuer":{"type":"string"},"keyLocation":{"$ref":"#/types/aws-native:kendra:IndexKeyLocation"},"secretManagerArn":{"type":"string"},"url":{"type":"string"},"userNameAttributeField":{"type":"string"}},"type":"object","required":["keyLocation"]},"aws-native:kendra:IndexKeyLocation":{"type":"string","enum":[{"name":"Url","value":"URL"},{"name":"SecretManager","value":"SECRET_MANAGER"}]},"aws-native:kendra:IndexOrder":{"type":"string","enum":[{"name":"Ascending","value":"ASCENDING"},{"name":"Descending","value":"DESCENDING"}]},"aws-native:kendra:IndexRelevance":{"properties":{"duration":{"type":"string"},"freshness":{"type":"boolean"},"importance":{"type":"integer"},"rankOrder":{"$ref":"#/types/aws-native:kendra:IndexOrder"},"valueImportanceItems":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:IndexValueImportanceItem"}}},"type":"object"},"aws-native:kendra:IndexSearch":{"properties":{"displayable":{"type":"boolean"},"facetable":{"type":"boolean"},"searchable":{"type":"boolean"},"sortable":{"type":"boolean"}},"type":"object"},"aws-native:kendra:IndexServerSideEncryptionConfiguration":{"properties":{"kmsKeyId":{"type":"string","description":"The identifier of the AWS KMS key . Amazon Kendra doesn't support asymmetric keys."}},"type":"object"},"aws-native:kendra:IndexTag":{"description":"A label for tagging Kendra resources","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:kendra:IndexUserContextPolicy":{"type":"string","enum":[{"name":"AttributeFilter","value":"ATTRIBUTE_FILTER"},{"name":"UserToken","value":"USER_TOKEN"}]},"aws-native:kendra:IndexUserTokenConfiguration":{"properties":{"jsonTokenTypeConfiguration":{"$ref":"#/types/aws-native:kendra:IndexJsonTokenTypeConfiguration"},"jwtTokenTypeConfiguration":{"$ref":"#/types/aws-native:kendra:IndexJwtTokenTypeConfiguration"}},"type":"object"},"aws-native:kendra:IndexValueImportanceItem":{"properties":{"key":{"type":"string"},"value":{"type":"integer"}},"type":"object"},"aws-native:kendraranking:ExecutionPlanCapacityUnitsConfiguration":{"properties":{"rescoreCapacityUnits":{"type":"integer","description":"The amount of extra capacity for your rescore execution plan.\n\nA single extra capacity unit for a rescore execution plan provides 0.01 rescore requests per second. You can add up to 1000 extra capacity units."}},"type":"object","required":["rescoreCapacityUnits"]},"aws-native:kendraranking:ExecutionPlanTag":{"description":"A label for tagging KendraRanking resources","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:kinesis:StreamConsumerTag":{"description":"An arbitrary set of tags (key-value pairs) to associate with the Kinesis consumer.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:kinesis:StreamEncryption":{"description":"When specified, enables or updates server-side encryption using an AWS KMS key for a specified stream. Removing this property from your stack template and updating your stack disables encryption.","properties":{"encryptionType":{"$ref":"#/types/aws-native:kinesis:StreamEncryptionEncryptionType","description":"The encryption type to use. The only valid value is KMS. "},"keyId":{"type":"string","description":"The GUID for the customer-managed AWS KMS key to use for encryption. This value can be a globally unique identifier, a fully specified Amazon Resource Name (ARN) to either an alias or a key, or an alias name prefixed by \"alias/\".You can also use a master key owned by Kinesis Data Streams by specifying the alias aws/kinesis."}},"type":"object","required":["encryptionType","keyId"]},"aws-native:kinesis:StreamEncryptionEncryptionType":{"description":"The encryption type to use. The only valid value is KMS. ","type":"string","enum":[{"name":"Kms","value":"KMS"}]},"aws-native:kinesis:StreamEnhancedMetric":{"description":"Value of an enhanced metric","type":"string","enum":[{"name":"IncomingBytes","value":"IncomingBytes"},{"name":"IncomingRecords","value":"IncomingRecords"},{"name":"OutgoingBytes","value":"OutgoingBytes"},{"name":"OutgoingRecords","value":"OutgoingRecords"},{"name":"WriteProvisionedThroughputExceeded","value":"WriteProvisionedThroughputExceeded"},{"name":"ReadProvisionedThroughputExceeded","value":"ReadProvisionedThroughputExceeded"},{"name":"IteratorAgeMilliseconds","value":"IteratorAgeMilliseconds"},{"name":"All","value":"ALL"}]},"aws-native:kinesis:StreamModeDetails":{"description":"When specified, enables or updates the mode of stream. Default is PROVISIONED.","properties":{"streamMode":{"$ref":"#/types/aws-native:kinesis:StreamModeDetailsStreamMode","description":"The mode of the stream"}},"type":"object","required":["streamMode"]},"aws-native:kinesis:StreamModeDetailsStreamMode":{"description":"The mode of the stream","type":"string","enum":[{"name":"OnDemand","value":"ON_DEMAND"},{"name":"Provisioned","value":"PROVISIONED"}]},"aws-native:kinesis:StreamTag":{"description":"An arbitrary set of tags (key-value pairs) to associate with the Kinesis stream.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:kinesis:StreamWarmThroughputObject":{"description":"Warm throughput configuration details for the stream. Only present for ON_DEMAND streams.","properties":{"currentMiBps":{"type":"integer","description":"Current warm throughput in MiB/s"},"targetMiBps":{"type":"integer","description":"Target warm throughput in MiB/s that a customer can write to a stream at any given time"}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationCatalogConfiguration":{"description":"The configuration parameters for the default Amazon Glue database. You use this database for SQL queries that you write in a Kinesis Data Analytics Studio notebook.","properties":{"glueDataCatalogConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationGlueDataCatalogConfiguration","description":"The configuration parameters for the default Amazon Glue database. You use this database for Apache Flink SQL queries and table API transforms that you write in a Kinesis Data Analytics Studio notebook."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationCheckpointConfiguration":{"description":"Describes an application's checkpointing configuration. Checkpointing is the process of persisting application state for fault tolerance. For more information, see Checkpoints for Fault Tolerance in the Apache Flink Documentation.","properties":{"checkpointInterval":{"type":"integer","description":"Describes the interval in milliseconds between checkpoint operations."},"checkpointingEnabled":{"type":"boolean","description":"Describes whether checkpointing is enabled for a Flink-based Kinesis Data Analytics application."},"configurationType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCheckpointConfigurationConfigurationType","description":"Describes whether the application uses Kinesis Data Analytics' default checkpointing behavior. You must set this property to `CUSTOM` in order to set the `CheckpointingEnabled`, `CheckpointInterval`, or `MinPauseBetweenCheckpoints` parameters."},"minPauseBetweenCheckpoints":{"type":"integer","description":"Describes the minimum time in milliseconds after a checkpoint operation completes that a new checkpoint operation can start. If a checkpoint operation takes longer than the CheckpointInterval, the application otherwise performs continual checkpoint operations. For more information, see Tuning Checkpointing in the Apache Flink Documentation."}},"type":"object","required":["configurationType"]},"aws-native:kinesisanalyticsv2:ApplicationCheckpointConfigurationConfigurationType":{"description":"Describes whether the application uses Kinesis Data Analytics' default checkpointing behavior. You must set this property to `CUSTOM` in order to set the `CheckpointingEnabled`, `CheckpointInterval`, or `MinPauseBetweenCheckpoints` parameters.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:kinesisanalyticsv2:ApplicationCodeConfiguration":{"description":"Describes code configuration for an application.","properties":{"codeContent":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCodeContent","description":"The location and type of the application code."},"codeContentType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCodeConfigurationCodeContentType","description":"Specifies whether the code content is in text or zip format."}},"type":"object","required":["codeContent","codeContentType"]},"aws-native:kinesisanalyticsv2:ApplicationCodeConfigurationCodeContentType":{"description":"Specifies whether the code content is in text or zip format.","type":"string","enum":[{"name":"Plaintext","value":"PLAINTEXT"},{"name":"Zipfile","value":"ZIPFILE"}]},"aws-native:kinesisanalyticsv2:ApplicationCodeContent":{"description":"Specifies either the application code, or the location of the application code, for a Flink-based Kinesis Data Analytics application.","properties":{"s3ContentLocation":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationS3ContentLocation","description":"Information about the Amazon S3 bucket that contains the application code."},"textContent":{"type":"string","description":"The text-format code for a Flink-based Kinesis Data Analytics application."},"zipFileContent":{"type":"string","description":"The zip-format code for a Flink-based Kinesis Data Analytics application."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationConfiguration":{"description":"Specifies the creation parameters for a Kinesis Data Analytics application.","properties":{"applicationCodeConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCodeConfiguration","description":"The code location and type parameters for a Flink-based Kinesis Data Analytics application."},"applicationEncryptionConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationEncryptionConfiguration","description":"Describes whether customer managed key is enabled and key details for customer data encryption"},"applicationSnapshotConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationSnapshotConfiguration","description":"Describes whether snapshots are enabled for a Flink-based Kinesis Data Analytics application."},"applicationSystemRollbackConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationSystemRollbackConfiguration","description":"Describes whether system initiated rollbacks are enabled for a Flink-based Kinesis Data Analytics application."},"environmentProperties":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationEnvironmentProperties","description":"Describes execution properties for a Flink-based Kinesis Data Analytics application."},"flinkApplicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationFlinkApplicationConfiguration","description":"The creation and update parameters for a Flink-based Kinesis Data Analytics application."},"sqlApplicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationSqlApplicationConfiguration","description":"The creation and update parameters for a SQL-based Kinesis Data Analytics application."},"vpcConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationVpcConfiguration"},"description":"The array of descriptions of VPC configurations available to the application."},"zeppelinApplicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationZeppelinApplicationConfiguration","description":"The configuration parameters for a Kinesis Data Analytics Studio notebook."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationCsvMappingParameters":{"description":"For a SQL-based Kinesis Data Analytics application, provides additional mapping information when the record format uses delimiters, such as CSV. For example, the following sample records use CSV format, where the records use the '\\n' as the row delimiter and a comma (\",\") as the column delimiter:\n`\"name1\", \"address1\"`\n`\"name2\", \"address2\"`","properties":{"recordColumnDelimiter":{"type":"string","description":"The column delimiter. For example, in a CSV format, a comma (\",\") is the typical column delimiter."},"recordRowDelimiter":{"type":"string","description":"The row delimiter. For example, in a CSV format, '\\n' is the typical row delimiter."}},"type":"object","required":["recordColumnDelimiter","recordRowDelimiter"]},"aws-native:kinesisanalyticsv2:ApplicationCustomArtifactConfiguration":{"description":"The configuration of connectors and user-defined functions.","properties":{"artifactType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCustomArtifactConfigurationArtifactType","description":"Set this to either `UDF` or `DEPENDENCY_JAR`. `UDF` stands for user-defined functions. This type of artifact must be in an S3 bucket. A `DEPENDENCY_JAR` can be in either Maven or an S3 bucket."},"mavenReference":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMavenReference","description":"The parameters required to fully specify a Maven reference."},"s3ContentLocation":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationS3ContentLocation","description":"The location of the custom artifacts."}},"type":"object","required":["artifactType"]},"aws-native:kinesisanalyticsv2:ApplicationCustomArtifactConfigurationArtifactType":{"description":"Set this to either `UDF` or `DEPENDENCY_JAR`. `UDF` stands for user-defined functions. This type of artifact must be in an S3 bucket. A `DEPENDENCY_JAR` can be in either Maven or an S3 bucket.","type":"string","enum":[{"name":"DependencyJar","value":"DEPENDENCY_JAR"},{"name":"Udf","value":"UDF"}]},"aws-native:kinesisanalyticsv2:ApplicationDeployAsApplicationConfiguration":{"description":"The information required to deploy a Kinesis Data Analytics Studio notebook as an application with durable state.","properties":{"s3ContentLocation":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationS3ContentBaseLocation","description":"The description of an Amazon S3 object that contains the Amazon Data Analytics application, including the Amazon Resource Name (ARN) of the S3 bucket, the name of the Amazon S3 object that contains the data, and the version number of the Amazon S3 object that contains the data."}},"type":"object","required":["s3ContentLocation"]},"aws-native:kinesisanalyticsv2:ApplicationEncryptionConfiguration":{"description":"Describes whether customer managed key is enabled and key details for customer data encryption","properties":{"keyId":{"type":"string","description":"KMS KeyId. Can be either key uuid or full key arn or key alias arn or short key alias"},"keyType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationEncryptionConfigurationKeyType","description":"Specifies whether application data is encrypted using service key: AWS_OWNED_KEY or customer key: CUSTOMER_MANAGED_KEY"}},"type":"object","required":["keyType"]},"aws-native:kinesisanalyticsv2:ApplicationEncryptionConfigurationKeyType":{"description":"Specifies whether application data is encrypted using service key: AWS_OWNED_KEY or customer key: CUSTOMER_MANAGED_KEY","type":"string","enum":[{"name":"AwsOwnedKey","value":"AWS_OWNED_KEY"},{"name":"CustomerManagedKey","value":"CUSTOMER_MANAGED_KEY"}]},"aws-native:kinesisanalyticsv2:ApplicationEnvironmentProperties":{"description":"Describes execution properties for a Flink-based Kinesis Data Analytics application.","properties":{"propertyGroups":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationPropertyGroup"},"description":"Describes the execution property groups."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationFlinkApplicationConfiguration":{"description":"Describes configuration parameters for a Flink-based Kinesis Data Analytics application or a Studio notebook.","properties":{"checkpointConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCheckpointConfiguration","description":"Describes an application's checkpointing configuration. Checkpointing is the process of persisting application state for fault tolerance. For more information, see Checkpoints for Fault Tolerance in the Apache Flink Documentation."},"monitoringConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMonitoringConfiguration","description":"Describes configuration parameters for Amazon CloudWatch logging for an application."},"parallelismConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationParallelismConfiguration","description":"Describes parameters for how an application executes multiple tasks simultaneously."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationFlinkRunConfiguration":{"description":"Describes the starting parameters for a Flink-based Kinesis Data Analytics application.","properties":{"allowNonRestoredState":{"type":"boolean","description":"When restoring from a snapshot, specifies whether the runtime is allowed to skip a state that cannot be mapped to the new program. Defaults to false. If you update your application without specifying this parameter, AllowNonRestoredState will be set to false, even if it was previously set to true."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationGlueDataCatalogConfiguration":{"description":"The configuration of the Glue Data Catalog that you use for Apache Flink SQL queries and table API transforms that you write in an application.","properties":{"databaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationInput":{"description":"When you configure the application input for a SQL-based Kinesis Data Analytics application, you specify the streaming source, the in-application stream name that is created, and the mapping between the two.","properties":{"inputParallelism":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationInputParallelism","description":"Describes the number of in-application streams to create."},"inputProcessingConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationInputProcessingConfiguration","description":"The InputProcessingConfiguration for the input. An input processor transforms records as they are received from the stream, before the application's SQL code executes. Currently, the only input processing configuration available is InputLambdaProcessor."},"inputSchema":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationInputSchema","description":"Describes the format of the data in the streaming source, and how each data element maps to corresponding columns in the in-application stream that is being created."},"kinesisFirehoseInput":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationKinesisFirehoseInput","description":"If the streaming source is an Amazon Kinesis Data Firehose delivery stream, identifies the delivery stream's ARN."},"kinesisStreamsInput":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationKinesisStreamsInput","description":"If the streaming source is an Amazon Kinesis data stream, identifies the stream's Amazon Resource Name (ARN)."},"namePrefix":{"type":"string","description":"The name prefix to use when creating an in-application stream. Suppose that you specify a prefix `\"MyInApplicationStream\"`. Kinesis Data Analytics then creates one or more (as per the InputParallelism count you specified) in-application streams with the names `\"MyInApplicationStream_001\"`, `\"MyInApplicationStream_002\"`, and so on."}},"type":"object","required":["inputSchema","namePrefix"]},"aws-native:kinesisanalyticsv2:ApplicationInputLambdaProcessor":{"description":"An object that contains the Amazon Resource Name (ARN) of the Amazon Lambda function that is used to preprocess records in the stream in a SQL-based Kinesis Data Analytics application.","properties":{"resourceArn":{"type":"string","description":"The ARN of the Amazon Lambda function that operates on records in the stream."}},"type":"object","required":["resourceArn"]},"aws-native:kinesisanalyticsv2:ApplicationInputParallelism":{"description":"For a SQL-based Kinesis Data Analytics application, describes the number of in-application streams to create for a given streaming source.","properties":{"count":{"type":"integer","description":"The number of in-application streams to create."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationInputProcessingConfiguration":{"description":"For an SQL-based Amazon Kinesis Data Analytics application, describes a processor that is used to preprocess the records in the stream before being processed by your application code. Currently, the only input processor available is Amazon Lambda.","properties":{"inputLambdaProcessor":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationInputLambdaProcessor","description":"The InputLambdaProcessor that is used to preprocess the records in the stream before being processed by your application code."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationInputSchema":{"description":"For a SQL-based Kinesis Data Analytics application, describes the format of the data in the streaming source, and how each data element maps to corresponding columns created in the in-application stream.","properties":{"recordColumns":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRecordColumn"},"description":"A list of `RecordColumn` objects."},"recordEncoding":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationInputSchemaRecordEncoding","description":"Specifies the encoding of the records in the streaming source. For example, UTF-8."},"recordFormat":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRecordFormat","description":"Specifies the format of the records on the streaming source."}},"type":"object","required":["recordColumns","recordFormat"]},"aws-native:kinesisanalyticsv2:ApplicationInputSchemaRecordEncoding":{"description":"Specifies the encoding of the records in the streaming source. For example, UTF-8.","type":"string","enum":[{"name":"Utf8","value":"UTF-8"}]},"aws-native:kinesisanalyticsv2:ApplicationJsonMappingParameters":{"description":"For a SQL-based Kinesis Data Analytics application, provides additional mapping information when JSON is the record format on the streaming source.","properties":{"recordRowPath":{"type":"string","description":"The path to the top-level parent that contains the records."}},"type":"object","required":["recordRowPath"]},"aws-native:kinesisanalyticsv2:ApplicationKinesisFirehoseInput":{"description":"For a SQL-based Kinesis Data Analytics application, identifies a Kinesis Data Firehose delivery stream as the streaming source. You provide the delivery stream's Amazon Resource Name (ARN).","properties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the delivery stream."}},"type":"object","required":["resourceArn"]},"aws-native:kinesisanalyticsv2:ApplicationKinesisStreamsInput":{"description":"Identifies a Kinesis data stream as the streaming source. You provide the stream's Amazon Resource Name (ARN).","properties":{"resourceArn":{"type":"string","description":"The ARN of the input Kinesis data stream to read."}},"type":"object","required":["resourceArn"]},"aws-native:kinesisanalyticsv2:ApplicationMaintenanceConfiguration":{"description":"Describes the maintenance configuration for the application.","properties":{"applicationMaintenanceWindowStartTime":{"type":"string","description":"The start time for the maintenance window."}},"type":"object","required":["applicationMaintenanceWindowStartTime"]},"aws-native:kinesisanalyticsv2:ApplicationMappingParameters":{"description":"When you configure a SQL-based Kinesis Data Analytics application's input at the time of creating or updating an application, provides additional mapping information specific to the record format (such as JSON, CSV, or record fields delimited by some delimiter) on the streaming source.","properties":{"csvMappingParameters":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCsvMappingParameters","description":"Provides additional mapping information when the record format uses delimiters (for example, CSV)."},"jsonMappingParameters":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationJsonMappingParameters","description":"Provides additional mapping information when JSON is the record format on the streaming source."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationMavenReference":{"description":"The information required to specify a Maven reference. You can use Maven references to specify dependency JAR files.","properties":{"artifactId":{"type":"string","description":"The artifact ID of the Maven reference."},"groupId":{"type":"string","description":"The group ID of the Maven reference."},"version":{"type":"string","description":"The version of the Maven reference."}},"type":"object","required":["artifactId","groupId","version"]},"aws-native:kinesisanalyticsv2:ApplicationMode":{"description":"To create a Kinesis Data Analytics Studio notebook, you must set the mode to `INTERACTIVE`. However, for a Kinesis Data Analytics for Apache Flink application, the mode is optional.","type":"string","enum":[{"name":"Interactive","value":"INTERACTIVE"},{"name":"Streaming","value":"STREAMING"}]},"aws-native:kinesisanalyticsv2:ApplicationMonitoringConfiguration":{"description":"Describes configuration parameters for Amazon CloudWatch logging for a Java-based Kinesis Data Analytics application. For more information about CloudWatch logging, see Monitoring.","properties":{"configurationType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMonitoringConfigurationConfigurationType","description":"Describes whether to use the default CloudWatch logging configuration for an application. You must set this property to CUSTOM in order to set the LogLevel or MetricsLevel parameters."},"logLevel":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMonitoringConfigurationLogLevel","description":"Describes the verbosity of the CloudWatch Logs for an application."},"metricsLevel":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMonitoringConfigurationMetricsLevel","description":"Describes the granularity of the CloudWatch Logs for an application. The Parallelism level is not recommended for applications with a Parallelism over 64 due to excessive costs."}},"type":"object","required":["configurationType"]},"aws-native:kinesisanalyticsv2:ApplicationMonitoringConfigurationConfigurationType":{"description":"Describes whether to use the default CloudWatch logging configuration for an application. You must set this property to CUSTOM in order to set the LogLevel or MetricsLevel parameters.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:kinesisanalyticsv2:ApplicationMonitoringConfigurationLogLevel":{"description":"Describes the verbosity of the CloudWatch Logs for an application.","type":"string","enum":[{"name":"Debug","value":"DEBUG"},{"name":"Info","value":"INFO"},{"name":"Warn","value":"WARN"},{"name":"Error","value":"ERROR"}]},"aws-native:kinesisanalyticsv2:ApplicationMonitoringConfigurationMetricsLevel":{"description":"Describes the granularity of the CloudWatch Logs for an application. The Parallelism level is not recommended for applications with a Parallelism over 64 due to excessive costs.","type":"string","enum":[{"name":"Application","value":"APPLICATION"},{"name":"Operator","value":"OPERATOR"},{"name":"Parallelism","value":"PARALLELISM"},{"name":"Task","value":"TASK"}]},"aws-native:kinesisanalyticsv2:ApplicationParallelismConfiguration":{"description":"Describes parameters for how a Flink-based Kinesis Data Analytics application executes multiple tasks simultaneously. For more information about parallelism, see Parallel Execution in the Apache Flink Documentation","properties":{"autoScalingEnabled":{"type":"boolean","description":"Describes whether the Kinesis Data Analytics service can increase the parallelism of the application in response to increased throughput."},"configurationType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationParallelismConfigurationConfigurationType","description":"Describes whether the application uses the default parallelism for the Kinesis Data Analytics service. You must set this property to `CUSTOM` in order to change your application's `AutoScalingEnabled`, `Parallelism`, or `ParallelismPerKPU` properties."},"parallelism":{"type":"integer","description":"Describes the initial number of parallel tasks that a Java-based Kinesis Data Analytics application can perform. The Kinesis Data Analytics service can increase this number automatically if ParallelismConfiguration:AutoScalingEnabled is set to true."},"parallelismPerKpu":{"type":"integer","description":"Describes the number of parallel tasks that a Java-based Kinesis Data Analytics application can perform per Kinesis Processing Unit (KPU) used by the application. For more information about KPUs, see Amazon Kinesis Data Analytics Pricing."}},"type":"object","required":["configurationType"]},"aws-native:kinesisanalyticsv2:ApplicationParallelismConfigurationConfigurationType":{"description":"Describes whether the application uses the default parallelism for the Kinesis Data Analytics service. You must set this property to `CUSTOM` in order to change your application's `AutoScalingEnabled`, `Parallelism`, or `ParallelismPerKPU` properties.","type":"string","enum":[{"name":"Custom","value":"CUSTOM"},{"name":"Default","value":"DEFAULT"}]},"aws-native:kinesisanalyticsv2:ApplicationPropertyGroup":{"description":"Property key-value pairs passed into an application.","properties":{"propertyGroupId":{"type":"string","description":"Describes the key of an application execution property key-value pair."},"propertyMap":{"type":"object","additionalProperties":{"type":"string"},"description":"Describes the value of an application execution property key-value pair."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationRecordColumn":{"description":"For a SQL-based Kinesis Data Analytics application, describes the mapping of each data element in the streaming source to the corresponding column in the in-application stream.\nAlso used to describe the format of the reference data source.","properties":{"mapping":{"type":"string","description":"A reference to the data element in the streaming input or the reference data source."},"name":{"type":"string","description":"The name of the column that is created in the in-application input stream or reference table."},"sqlType":{"type":"string","description":"The type of column created in the in-application input stream or reference table."}},"type":"object","required":["name","sqlType"]},"aws-native:kinesisanalyticsv2:ApplicationRecordFormat":{"description":"For a SQL-based Kinesis Data Analytics application, describes the record format and relevant mapping information that should be applied to schematize the records on the stream.","properties":{"mappingParameters":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMappingParameters","description":"When you configure application input at the time of creating or updating an application, provides additional mapping information specific to the record format (such as JSON, CSV, or record fields delimited by some delimiter) on the streaming source."},"recordFormatType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRecordFormatRecordFormatType","description":"The type of record format."}},"type":"object","required":["recordFormatType"]},"aws-native:kinesisanalyticsv2:ApplicationRecordFormatRecordFormatType":{"description":"The type of record format.","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Json","value":"JSON"}]},"aws-native:kinesisanalyticsv2:ApplicationRestoreConfiguration":{"description":"Describes the restore behavior of a restarting application.","properties":{"applicationRestoreType":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRestoreConfigurationApplicationRestoreType","description":"Specifies how the application should be restored."},"snapshotName":{"type":"string","description":"The identifier of an existing snapshot of application state to use to restart an application. The application uses this value if RESTORE_FROM_CUSTOM_SNAPSHOT is specified for the ApplicationRestoreType."}},"type":"object","required":["applicationRestoreType"]},"aws-native:kinesisanalyticsv2:ApplicationRestoreConfigurationApplicationRestoreType":{"description":"Specifies how the application should be restored.","type":"string","enum":[{"name":"SkipRestoreFromSnapshot","value":"SKIP_RESTORE_FROM_SNAPSHOT"},{"name":"RestoreFromLatestSnapshot","value":"RESTORE_FROM_LATEST_SNAPSHOT"},{"name":"RestoreFromCustomSnapshot","value":"RESTORE_FROM_CUSTOM_SNAPSHOT"}]},"aws-native:kinesisanalyticsv2:ApplicationRunConfiguration":{"description":"Identifies the run configuration (start parameters) of a Kinesis Data Analytics application. This section is evaluated only on stack updates for applications in running RUNNING state and has no effect during manual application start.","properties":{"applicationRestoreConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRestoreConfiguration","description":"Describes the restore behavior of a restarting application."},"flinkRunConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationFlinkRunConfiguration","description":"Describes the starting parameters for a Flink-based Kinesis Data Analytics application."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationS3ContentBaseLocation":{"description":"The base location of the Amazon Data Analytics application.","properties":{"basePath":{"type":"string","description":"The base path for the S3 bucket."},"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the S3 bucket."}},"type":"object","required":["bucketArn"]},"aws-native:kinesisanalyticsv2:ApplicationS3ContentLocation":{"description":"The location of an application or a custom artifact.","properties":{"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the S3 bucket containing the application code."},"fileKey":{"type":"string","description":"The file key for the object containing the application code."},"objectVersion":{"type":"string","description":"The version of the object containing the application code."}},"type":"object","required":["bucketArn","fileKey"]},"aws-native:kinesisanalyticsv2:ApplicationSnapshotConfiguration":{"description":"Describes whether snapshots are enabled for a Flink-based Kinesis Data Analytics application.","properties":{"snapshotsEnabled":{"type":"boolean","description":"Describes whether snapshots are enabled for a Flink-based Kinesis Data Analytics application."}},"type":"object","required":["snapshotsEnabled"]},"aws-native:kinesisanalyticsv2:ApplicationSqlApplicationConfiguration":{"description":"Describes the inputs, outputs, and reference data sources for a SQL-based Kinesis Data Analytics application.","properties":{"inputs":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationInput"},"description":"The array of Input objects describing the input streams used by the application."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationSystemRollbackConfiguration":{"description":"Describes whether system initiated rollbacks are enabled for a Flink-based Kinesis Data Analytics application.","properties":{"rollbackEnabled":{"type":"boolean","description":"Describes whether system initiated rollbacks are enabled for a Flink-based Kinesis Data Analytics application."}},"type":"object","required":["rollbackEnabled"]},"aws-native:kinesisanalyticsv2:ApplicationTag":{"description":"A key-value pair that identifies an application.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 0 to 256 characters in length."}},"type":"object","required":["key","value"]},"aws-native:kinesisanalyticsv2:ApplicationVpcConfiguration":{"description":"Describes the parameters of a VPC used by the application.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The array of SecurityGroup IDs used by the VPC configuration."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The array of Subnet IDs used by the VPC configuration."}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:kinesisanalyticsv2:ApplicationZeppelinApplicationConfiguration":{"description":"The configuration of a Kinesis Data Analytics Studio notebook.","properties":{"catalogConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCatalogConfiguration","description":"The Amazon Glue Data Catalog that you use in queries in a Kinesis Data Analytics Studio notebook."},"customArtifactsConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationCustomArtifactConfiguration"},"description":"A list of CustomArtifactConfiguration objects."},"deployAsApplicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationDeployAsApplicationConfiguration","description":"The information required to deploy a Kinesis Data Analytics Studio notebook as an application with durable state."},"monitoringConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationZeppelinMonitoringConfiguration","description":"The monitoring configuration of a Kinesis Data Analytics Studio notebook."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationZeppelinMonitoringConfiguration":{"description":"Describes configuration parameters for Amazon CloudWatch logging for a Kinesis Data Analytics Studio notebook. For more information about CloudWatch logging, see Monitoring.","properties":{"logLevel":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationZeppelinMonitoringConfigurationLogLevel","description":"The verbosity of the CloudWatch Logs for an application. You can set it to `INFO`, `WARN`, `ERROR`, or `DEBUG`."}},"type":"object"},"aws-native:kinesisanalyticsv2:ApplicationZeppelinMonitoringConfigurationLogLevel":{"description":"The verbosity of the CloudWatch Logs for an application. You can set it to `INFO`, `WARN`, `ERROR`, or `DEBUG`.","type":"string","enum":[{"name":"Debug","value":"DEBUG"},{"name":"Info","value":"INFO"},{"name":"Warn","value":"WARN"},{"name":"Error","value":"ERROR"}]},"aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessBufferingHints":{"properties":{"intervalInSeconds":{"type":"integer","description":"Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300 (5 minutes)."},"sizeInMbs":{"type":"integer","description":"Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5.\n\nWe recommend setting this parameter to a value greater than the amount of data you typically ingest into the Firehose stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec, the value should be 10 MB or higher."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessDestinationConfiguration":{"properties":{"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessBufferingHints","description":"The buffering options. If no value is specified, the default values for AmazonopensearchserviceBufferingHints are used."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions"},"collectionEndpoint":{"type":"string","description":"The endpoint to use when communicating with the collection in the Serverless offering for Amazon OpenSearch Service."},"indexName":{"type":"string","description":"The Serverless offering for Amazon OpenSearch Service index name."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration"},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessRetryOptions","description":"The retry behavior in case Firehose is unable to deliver documents to the Serverless offering for Amazon OpenSearch Service. The default value is 300 (5 minutes)."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to be assumed by Firehose for calling the Serverless offering for Amazon OpenSearch Service Configuration API and for indexing documents."},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessDestinationConfigurationS3BackupMode","description":"Defines how documents should be delivered to Amazon S3. When it is set to FailedDocumentsOnly, Firehose writes any documents that could not be indexed to the configured Amazon S3 destination, with AmazonOpenSearchService-failed/ appended to the key prefix. When set to AllDocuments, Firehose delivers all incoming records to Amazon S3, and also writes failed documents with AmazonOpenSearchService-failed/ appended to the prefix."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration"},"vpcConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamVpcConfiguration","replaceOnChanges":true}},"type":"object","required":["indexName","roleArn","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessDestinationConfigurationS3BackupMode":{"description":"Defines how documents should be delivered to Amazon S3. When it is set to FailedDocumentsOnly, Firehose writes any documents that could not be indexed to the configured Amazon S3 destination, with AmazonOpenSearchService-failed/ appended to the key prefix. When set to AllDocuments, Firehose delivers all incoming records to Amazon S3, and also writes failed documents with AmazonOpenSearchService-failed/ appended to the prefix.","type":"string","enum":[{"name":"FailedDocumentsOnly","value":"FailedDocumentsOnly"},{"name":"AllDocuments","value":"AllDocuments"}]},"aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"After an initial failure to deliver to the Serverless offering for Amazon OpenSearch Service, the total amount of time during which Firehose retries delivery (including the first attempt). After this time has elapsed, the failed documents are written to Amazon S3. Default value is 300 seconds (5 minutes). A value of 0 (zero) results in no retries."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceBufferingHints":{"properties":{"intervalInSeconds":{"type":"integer","description":"Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300 (5 minutes)."},"sizeInMbs":{"type":"integer","description":"Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5. We recommend setting this parameter to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec, the value should be 10 MB or higher."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfiguration":{"properties":{"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceBufferingHints","description":"The buffering options. If no value is specified, the default values for AmazonopensearchserviceBufferingHints are used."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"Describes the Amazon CloudWatch logging options for your delivery stream."},"clusterEndpoint":{"type":"string","description":"The endpoint to use when communicating with the cluster. Specify either this ClusterEndpoint or the DomainARN field."},"documentIdOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDocumentIdOptions","description":"Indicates the method for setting up document ID. The supported methods are Firehose generated document ID and OpenSearch Service generated document ID."},"domainArn":{"type":"string","description":"The ARN of the Amazon OpenSearch Service domain."},"indexName":{"type":"string","description":"The Amazon OpenSearch Service index name."},"indexRotationPeriod":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfigurationIndexRotationPeriod","description":"The Amazon OpenSearch Service index rotation period. Index rotation appends a timestamp to the IndexName to facilitate the expiration of old data."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration","description":"Describes a data processing configuration."},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceRetryOptions","description":"The retry behavior in case Kinesis Data Firehose is unable to deliver documents to Amazon OpenSearch Service. The default value is 300 (5 minutes)."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to be assumed by Kinesis Data Firehose for calling the Amazon OpenSearch Service Configuration API and for indexing documents."},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfigurationS3BackupMode","description":"Defines how documents should be delivered to Amazon S3."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"Describes the configuration of a destination in Amazon S3."},"typeName":{"type":"string","description":"The Amazon OpenSearch Service type name."},"vpcConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamVpcConfiguration","description":"The details of the VPC of the Amazon OpenSearch Service destination.","replaceOnChanges":true}},"type":"object","required":["indexName","roleArn","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfigurationIndexRotationPeriod":{"description":"The Amazon OpenSearch Service index rotation period. Index rotation appends a timestamp to the IndexName to facilitate the expiration of old data.","type":"string","enum":[{"name":"NoRotation","value":"NoRotation"},{"name":"OneHour","value":"OneHour"},{"name":"OneDay","value":"OneDay"},{"name":"OneWeek","value":"OneWeek"},{"name":"OneMonth","value":"OneMonth"}]},"aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfigurationS3BackupMode":{"description":"Defines how documents should be delivered to Amazon S3.","type":"string","enum":[{"name":"FailedDocumentsOnly","value":"FailedDocumentsOnly"},{"name":"AllDocuments","value":"AllDocuments"}]},"aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"After an initial failure to deliver to Amazon OpenSearch Service, the total amount of time during which Kinesis Data Firehose retries delivery (including the first attempt). After this time has elapsed, the failed documents are written to Amazon S3. Default value is 300 seconds (5 minutes). A value of 0 (zero) results in no retries."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamAuthenticationConfiguration":{"properties":{"connectivity":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAuthenticationConfigurationConnectivity","description":"The type of connectivity used to access the Amazon MSK cluster."},"roleArn":{"type":"string","description":"The ARN of the role used to access the Amazon MSK cluster."}},"type":"object","required":["connectivity","roleArn"]},"aws-native:kinesisfirehose:DeliveryStreamAuthenticationConfigurationConnectivity":{"description":"The type of connectivity used to access the Amazon MSK cluster.","type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Private","value":"PRIVATE"}]},"aws-native:kinesisfirehose:DeliveryStreamBufferingHints":{"properties":{"intervalInSeconds":{"type":"integer","description":"The length of time, in seconds, that Kinesis Data Firehose buffers incoming data before delivering it to the destination. For valid values, see the `IntervalInSeconds` content for the [BufferingHints](https://docs.aws.amazon.com/firehose/latest/APIReference/API_BufferingHints.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."},"sizeInMbs":{"type":"integer","description":"The size of the buffer, in MBs, that Kinesis Data Firehose uses for incoming data before delivering it to the destination. For valid values, see the `SizeInMBs` content for the [BufferingHints](https://docs.aws.amazon.com/firehose/latest/APIReference/API_BufferingHints.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamCatalogConfiguration":{"properties":{"catalogArn":{"type":"string","description":"Specifies the Glue catalog ARN identifier of the destination Apache Iceberg Tables. You must specify the ARN in the format `arn:aws:glue:region:account-id:catalog` ."},"warehouseLocation":{"type":"string","description":"The warehouse location for Apache Iceberg tables. You must configure this when schema evolution and table creation is enabled.\n\nAmazon Data Firehose is in preview release and is subject to change."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions":{"properties":{"enabled":{"type":"boolean","description":"Indicates whether CloudWatch Logs logging is enabled."},"logGroupName":{"type":"string","description":"The name of the CloudWatch Logs log group that contains the log stream that Kinesis Data Firehose will use.\n\nConditional. If you enable logging, you must specify this property."},"logStreamName":{"type":"string","description":"The name of the CloudWatch Logs log stream that Kinesis Data Firehose uses to send logs about data delivery.\n\nConditional. If you enable logging, you must specify this property."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamCopyCommand":{"properties":{"copyOptions":{"type":"string","description":"Parameters to use with the Amazon Redshift `COPY` command. For examples, see the `CopyOptions` content for the [CopyCommand](https://docs.aws.amazon.com/firehose/latest/APIReference/API_CopyCommand.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."},"dataTableColumns":{"type":"string","description":"A comma-separated list of column names."},"dataTableName":{"type":"string","description":"The name of the target table. The table must already exist in the database."}},"type":"object","required":["dataTableName"]},"aws-native:kinesisfirehose:DeliveryStreamDataFormatConversionConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Defaults to `true` . Set it to `false` if you want to disable format conversion while preserving the configuration details."},"inputFormatConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamInputFormatConfiguration","description":"Specifies the deserializer that you want Firehose to use to convert the format of your data from JSON. This parameter is required if `Enabled` is set to true."},"outputFormatConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamOutputFormatConfiguration","description":"Specifies the serializer that you want Firehose to use to convert the format of your data to the Parquet or ORC format. This parameter is required if `Enabled` is set to true."},"schemaConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSchemaConfiguration","description":"Specifies the AWS Glue Data Catalog table that contains the column information. This parameter is required if `Enabled` is set to true."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDatabaseColumns":{"properties":{"exclude":{"type":"array","items":{"type":"string"}},"include":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceAuthenticationConfiguration":{"properties":{"secretsManagerConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSecretsManagerConfiguration"}},"type":"object","required":["secretsManagerConfiguration"]},"aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfiguration":{"properties":{"columns":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseColumns","description":"The list of column patterns in source database endpoint for Firehose to read from.\n\nAmazon Data Firehose is in preview release and is subject to change."},"databaseSourceAuthenticationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceAuthenticationConfiguration","description":"The structure to configure the authentication methods for Firehose to connect to source database endpoint.\n\nAmazon Data Firehose is in preview release and is subject to change."},"databaseSourceVpcConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceVpcConfiguration","description":"The details of the VPC Endpoint Service which Firehose uses to create a PrivateLink to the database.\n\nAmazon Data Firehose is in preview release and is subject to change."},"databases":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabases","description":"The list of database patterns in source database endpoint for Firehose to read from.\n\nAmazon Data Firehose is in preview release and is subject to change."},"digest":{"type":"string"},"endpoint":{"type":"string","description":"The endpoint of the database server.\n\nAmazon Data Firehose is in preview release and is subject to change."},"port":{"type":"integer","description":"The port of the database. This can be one of the following values.\n\n- 3306 for MySQL database type\n- 5432 for PostgreSQL database type\n\nAmazon Data Firehose is in preview release and is subject to change."},"publicCertificate":{"type":"string"},"snapshotWatermarkTable":{"type":"string","description":"The fully qualified name of the table in source database endpoint that Firehose uses to track snapshot progress.\n\nAmazon Data Firehose is in preview release and is subject to change."},"sslMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfigurationSslMode","description":"The mode to enable or disable SSL when Firehose connects to the database endpoint.\n\nAmazon Data Firehose is in preview release and is subject to change."},"surrogateKeys":{"type":"array","items":{"type":"string"},"description":"The optional list of table and column names used as unique key columns when taking snapshot if the tables don’t have primary keys configured.\n\nAmazon Data Firehose is in preview release and is subject to change."},"tables":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseTables","description":"The list of table patterns in source database endpoint for Firehose to read from.\n\nAmazon Data Firehose is in preview release and is subject to change."},"type":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfigurationType","description":"The type of database engine. This can be one of the following values.\n\n- MySQL\n- PostgreSQL\n\nAmazon Data Firehose is in preview release and is subject to change."}},"type":"object","required":["databaseSourceAuthenticationConfiguration","databaseSourceVpcConfiguration","databases","endpoint","port","snapshotWatermarkTable","tables","type"]},"aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfigurationSslMode":{"description":"The mode to enable or disable SSL when Firehose connects to the database endpoint.\n\nAmazon Data Firehose is in preview release and is subject to change.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfigurationType":{"description":"The type of database engine. This can be one of the following values.\n\n- MySQL\n- PostgreSQL\n\nAmazon Data Firehose is in preview release and is subject to change.","type":"string","enum":[{"name":"MySql","value":"MySQL"},{"name":"PostgreSql","value":"PostgreSQL"}]},"aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceVpcConfiguration":{"properties":{"vpcEndpointServiceName":{"type":"string","description":"The VPC endpoint service name which Firehose uses to create a PrivateLink to the database. The endpoint service must have the Firehose service principle `firehose.amazonaws.com` as an allowed principal on the VPC endpoint service. The VPC endpoint service name is a string that looks like `com.amazonaws.vpce.\u003cregion\u003e.\u003cvpc-endpoint-service-id\u003e` .\n\nAmazon Data Firehose is in preview release and is subject to change."}},"type":"object","required":["vpcEndpointServiceName"]},"aws-native:kinesisfirehose:DeliveryStreamDatabaseTables":{"properties":{"exclude":{"type":"array","items":{"type":"string"}},"include":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDatabases":{"properties":{"exclude":{"type":"array","items":{"type":"string"}},"include":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDeserializer":{"properties":{"hiveJsonSerDe":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHiveJsonSerDe","description":"The native Hive / HCatalog JsonSerDe. Used by Firehose for deserializing data, which means converting it from the JSON format in preparation for serializing it to the Parquet or ORC format. This is one of two deserializers you can choose, depending on which one offers the functionality you need. The other option is the OpenX SerDe."},"openXJsonSerDe":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamOpenXJsonSerDe","description":"The OpenX SerDe. Used by Firehose for deserializing data, which means converting it from the JSON format in preparation for serializing it to the Parquet or ORC format. This is one of two deserializers you can choose, depending on which one offers the functionality you need. The other option is the native Hive / HCatalog JsonSerDe."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDestinationTableConfiguration":{"properties":{"destinationDatabaseName":{"type":"string"},"destinationTableName":{"type":"string"},"partitionSpec":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDestinationTableConfigurationPartitionSpecProperties"},"s3ErrorOutputPrefix":{"type":"string"},"uniqueKeys":{"type":"array","items":{"type":"string"}}},"type":"object","required":["destinationDatabaseName","destinationTableName"]},"aws-native:kinesisfirehose:DeliveryStreamDestinationTableConfigurationPartitionSpecProperties":{"properties":{"identity":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamPartitionField"}}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDirectPutSourceConfiguration":{"properties":{"throughputHintInMbs":{"type":"integer","description":"The value that you configure for this parameter is for information purpose only and does not affect Firehose delivery throughput limit. You can use the [Firehose Limits form](https://docs.aws.amazon.com/https://support.console.aws.amazon.com/support/home#/case/create%3FissueType=service-limit-increase%26limitType=kinesis-firehose-limits) to request a throughput limit increase."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamDocumentIdOptions":{"properties":{"defaultDocumentIdFormat":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDocumentIdOptionsDefaultDocumentIdFormat","description":"When the `FIREHOSE_DEFAULT` option is chosen, Firehose generates a unique document ID for each record based on a unique internal identifier. The generated document ID is stable across multiple delivery attempts, which helps prevent the same record from being indexed multiple times with different document IDs.\n\nWhen the `NO_DOCUMENT_ID` option is chosen, Firehose does not include any document IDs in the requests it sends to the Amazon OpenSearch Service. This causes the Amazon OpenSearch Service domain to generate document IDs. In case of multiple delivery attempts, this may cause the same record to be indexed more than once with different document IDs. This option enables write-heavy operations, such as the ingestion of logs and observability data, to consume less resources in the Amazon OpenSearch Service domain, resulting in improved performance."}},"type":"object","required":["defaultDocumentIdFormat"]},"aws-native:kinesisfirehose:DeliveryStreamDocumentIdOptionsDefaultDocumentIdFormat":{"description":"When the `FIREHOSE_DEFAULT` option is chosen, Firehose generates a unique document ID for each record based on a unique internal identifier. The generated document ID is stable across multiple delivery attempts, which helps prevent the same record from being indexed multiple times with different document IDs.\n\nWhen the `NO_DOCUMENT_ID` option is chosen, Firehose does not include any document IDs in the requests it sends to the Amazon OpenSearch Service. This causes the Amazon OpenSearch Service domain to generate document IDs. In case of multiple delivery attempts, this may cause the same record to be indexed more than once with different document IDs. This option enables write-heavy operations, such as the ingestion of logs and observability data, to consume less resources in the Amazon OpenSearch Service domain, resulting in improved performance.","type":"string","enum":[{"name":"FirehoseDefault","value":"FIREHOSE_DEFAULT"},{"name":"NoDocumentId","value":"NO_DOCUMENT_ID"}]},"aws-native:kinesisfirehose:DeliveryStreamDynamicPartitioningConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Specifies whether dynamic partitioning is enabled for this Kinesis Data Firehose delivery stream."},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRetryOptions","description":"Specifies the retry behavior in case Kinesis Data Firehose is unable to deliver data to an Amazon S3 prefix."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamElasticsearchBufferingHints":{"properties":{"intervalInSeconds":{"type":"integer","description":"The length of time, in seconds, that Kinesis Data Firehose buffers incoming data before delivering it to the destination. For valid values, see the `IntervalInSeconds` content for the [BufferingHints](https://docs.aws.amazon.com/firehose/latest/APIReference/API_BufferingHints.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."},"sizeInMbs":{"type":"integer","description":"The size of the buffer, in MBs, that Kinesis Data Firehose uses for incoming data before delivering it to the destination. For valid values, see the `SizeInMBs` content for the [BufferingHints](https://docs.aws.amazon.com/firehose/latest/APIReference/API_BufferingHints.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfiguration":{"properties":{"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamElasticsearchBufferingHints","description":"Configures how Kinesis Data Firehose buffers incoming data while delivering it to the Amazon ES domain."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"The Amazon CloudWatch Logs logging options for the delivery stream."},"clusterEndpoint":{"type":"string","description":"The endpoint to use when communicating with the cluster. Specify either this `ClusterEndpoint` or the `DomainARN` field."},"documentIdOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDocumentIdOptions","description":"Indicates the method for setting up document ID. The supported methods are Firehose generated document ID and OpenSearch Service generated document ID."},"domainArn":{"type":"string","description":"The ARN of the Amazon ES domain. The IAM role must have permissions for `DescribeElasticsearchDomain` , `DescribeElasticsearchDomains` , and `DescribeElasticsearchDomainConfig` after assuming the role specified in *RoleARN* .\n\nSpecify either `ClusterEndpoint` or `DomainARN` ."},"indexName":{"type":"string","description":"The name of the Elasticsearch index to which Kinesis Data Firehose adds data for indexing."},"indexRotationPeriod":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfigurationIndexRotationPeriod","description":"The frequency of Elasticsearch index rotation. If you enable index rotation, Kinesis Data Firehose appends a portion of the UTC arrival timestamp to the specified index name, and rotates the appended timestamp accordingly. For more information, see [Index Rotation for the Amazon ES Destination](https://docs.aws.amazon.com/firehose/latest/dev/basic-deliver.html#es-index-rotation) in the *Amazon Kinesis Data Firehose Developer Guide* ."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration","description":"The data processing configuration for the Kinesis Data Firehose delivery stream."},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamElasticsearchRetryOptions","description":"The retry behavior when Kinesis Data Firehose is unable to deliver data to Amazon ES."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to be assumed by Kinesis Data Firehose for calling the Amazon ES Configuration API and for indexing documents. For more information, see [Controlling Access with Amazon Kinesis Data Firehose](https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html) ."},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfigurationS3BackupMode","description":"The condition under which Kinesis Data Firehose delivers data to Amazon Simple Storage Service (Amazon S3). You can send Amazon S3 all documents (all data) or only the documents that Kinesis Data Firehose could not deliver to the Amazon ES destination. For more information and valid values, see the `S3BackupMode` content for the [ElasticsearchDestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_ElasticsearchDestinationConfiguration.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The S3 bucket where Kinesis Data Firehose backs up incoming data."},"typeName":{"type":"string","description":"The Elasticsearch type name that Amazon ES adds to documents when indexing data."},"vpcConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamVpcConfiguration","description":"The details of the VPC of the Amazon ES destination.","replaceOnChanges":true}},"type":"object","required":["indexName","roleArn","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfigurationIndexRotationPeriod":{"description":"The frequency of Elasticsearch index rotation. If you enable index rotation, Kinesis Data Firehose appends a portion of the UTC arrival timestamp to the specified index name, and rotates the appended timestamp accordingly. For more information, see [Index Rotation for the Amazon ES Destination](https://docs.aws.amazon.com/firehose/latest/dev/basic-deliver.html#es-index-rotation) in the *Amazon Kinesis Data Firehose Developer Guide* .","type":"string","enum":[{"name":"NoRotation","value":"NoRotation"},{"name":"OneHour","value":"OneHour"},{"name":"OneDay","value":"OneDay"},{"name":"OneWeek","value":"OneWeek"},{"name":"OneMonth","value":"OneMonth"}]},"aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfigurationS3BackupMode":{"description":"The condition under which Kinesis Data Firehose delivers data to Amazon Simple Storage Service (Amazon S3). You can send Amazon S3 all documents (all data) or only the documents that Kinesis Data Firehose could not deliver to the Amazon ES destination. For more information and valid values, see the `S3BackupMode` content for the [ElasticsearchDestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_ElasticsearchDestinationConfiguration.html) data type in the *Amazon Kinesis Data Firehose API Reference* .","type":"string","enum":[{"name":"FailedDocumentsOnly","value":"FailedDocumentsOnly"},{"name":"AllDocuments","value":"AllDocuments"}]},"aws-native:kinesisfirehose:DeliveryStreamElasticsearchRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"After an initial failure to deliver to Amazon ES, the total amount of time during which Kinesis Data Firehose re-attempts delivery (including the first attempt). If Kinesis Data Firehose can't deliver the data within the specified time, it writes the data to the backup S3 bucket. For valid values, see the `DurationInSeconds` content for the [ElasticsearchRetryOptions](https://docs.aws.amazon.com/firehose/latest/APIReference/API_ElasticsearchRetryOptions.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamEncryptionConfiguration":{"properties":{"kmsEncryptionConfig":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamKmsEncryptionConfig","description":"The AWS Key Management Service ( AWS KMS) encryption key that Amazon S3 uses to encrypt your data."},"noEncryptionConfig":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationNoEncryptionConfig","description":"Disables encryption. For valid values, see the `NoEncryptionConfig` content for the [EncryptionConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_EncryptionConfiguration.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationInput":{"properties":{"keyArn":{"type":"string","description":"If you set `KeyType` to `CUSTOMER_MANAGED_CMK` , you must specify the Amazon Resource Name (ARN) of the CMK. If you set `KeyType` to `AWS _OWNED_CMK` , Firehose uses a service-account CMK."},"keyType":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationInputKeyType","description":"Indicates the type of customer master key (CMK) to use for encryption. The default setting is `AWS_OWNED_CMK` . For more information about CMKs, see [Customer Master Keys (CMKs)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#master_keys) .\n\nYou can use a CMK of type CUSTOMER_MANAGED_CMK to encrypt up to 500 delivery streams.\n\n\u003e To encrypt your delivery stream, use symmetric CMKs. Kinesis Data Firehose doesn't support asymmetric CMKs. For information about symmetric and asymmetric CMKs, see [About Symmetric and Asymmetric CMKs](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-concepts.html) in the AWS Key Management Service developer guide."}},"type":"object","required":["keyType"]},"aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationInputKeyType":{"description":"Indicates the type of customer master key (CMK) to use for encryption. The default setting is `AWS_OWNED_CMK` . For more information about CMKs, see [Customer Master Keys (CMKs)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#master_keys) .\n\nYou can use a CMK of type CUSTOMER_MANAGED_CMK to encrypt up to 500 delivery streams.\n\n\u003e To encrypt your delivery stream, use symmetric CMKs. Kinesis Data Firehose doesn't support asymmetric CMKs. For information about symmetric and asymmetric CMKs, see [About Symmetric and Asymmetric CMKs](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-concepts.html) in the AWS Key Management Service developer guide.","type":"string","enum":[{"name":"AwsOwnedCmk","value":"AWS_OWNED_CMK"},{"name":"CustomerManagedCmk","value":"CUSTOMER_MANAGED_CMK"}]},"aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationNoEncryptionConfig":{"description":"Disables encryption. For valid values, see the `NoEncryptionConfig` content for the [EncryptionConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_EncryptionConfiguration.html) data type in the *Amazon Kinesis Data Firehose API Reference* .","type":"string","enum":[{"name":"NoEncryption","value":"NoEncryption"}]},"aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfiguration":{"properties":{"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket. For constraints, see [ExtendedS3DestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_ExtendedS3DestinationConfiguration.html) in the *Amazon Kinesis Data Firehose API Reference* ."},"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamBufferingHints","description":"The buffering option."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"The Amazon CloudWatch logging options for your Firehose stream."},"compressionFormat":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfigurationCompressionFormat","description":"The compression format. If no value is specified, the default is `UNCOMPRESSED` ."},"customTimeZone":{"type":"string","description":"The time zone you prefer. UTC is the default."},"dataFormatConversionConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDataFormatConversionConfiguration","description":"The serializer, deserializer, and schema for converting data from the JSON format to the Parquet or ORC format before writing it to Amazon S3."},"dynamicPartitioningConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDynamicPartitioningConfiguration","description":"The configuration of the dynamic partitioning mechanism that creates targeted data sets from the streaming data by partitioning it based on partition keys."},"encryptionConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfiguration","description":"The encryption configuration for the Kinesis Data Firehose delivery stream. The default value is `NoEncryption` ."},"errorOutputPrefix":{"type":"string","description":"A prefix that Kinesis Data Firehose evaluates and adds to failed records before writing them to S3. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html) ."},"fileExtension":{"type":"string","description":"Specify a file extension. It will override the default file extension"},"prefix":{"type":"string","description":"The `YYYY/MM/DD/HH` time format prefix is automatically used for delivered Amazon S3 files. For more information, see [ExtendedS3DestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_ExtendedS3DestinationConfiguration.html) in the *Amazon Kinesis Data Firehose API Reference* ."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration","description":"The data processing configuration for the Kinesis Data Firehose delivery stream."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS credentials. For constraints, see [ExtendedS3DestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_ExtendedS3DestinationConfiguration.html) in the *Amazon Kinesis Data Firehose API Reference* ."},"s3BackupConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The configuration for backup in Amazon S3."},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfigurationS3BackupMode","description":"The Amazon S3 backup mode. After you create a Firehose stream, you can update it to enable Amazon S3 backup if it is disabled. If backup is enabled, you can't update the Firehose stream to disable it."}},"type":"object","required":["bucketArn","roleArn"]},"aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfigurationCompressionFormat":{"description":"The compression format. If no value is specified, the default is `UNCOMPRESSED` .","type":"string","enum":[{"name":"Uncompressed","value":"UNCOMPRESSED"},{"name":"Gzip","value":"GZIP"},{"name":"Zip","value":"ZIP"},{"name":"Snappy","value":"Snappy"},{"name":"HadoopSnappy","value":"HADOOP_SNAPPY"}]},"aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfigurationS3BackupMode":{"description":"The Amazon S3 backup mode. After you create a Firehose stream, you can update it to enable Amazon S3 backup if it is disabled. If backup is enabled, you can't update the Firehose stream to disable it.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:kinesisfirehose:DeliveryStreamHiveJsonSerDe":{"properties":{"timestampFormats":{"type":"array","items":{"type":"string"},"description":"Indicates how you want Firehose to parse the date and timestamps that may be present in your input data JSON. To specify these format strings, follow the pattern syntax of JodaTime's DateTimeFormat format strings. For more information, see [Class DateTimeFormat](https://docs.aws.amazon.com/https://www.joda.org/joda-time/apidocs/org/joda/time/format/DateTimeFormat.html) . You can also use the special value `millis` to parse timestamps in epoch milliseconds. If you don't specify a format, Firehose uses `java.sql.Timestamp::valueOf` by default."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamHttpEndpointCommonAttribute":{"properties":{"attributeName":{"type":"string","description":"The name of the HTTP endpoint common attribute."},"attributeValue":{"type":"string","description":"The value of the HTTP endpoint common attribute."}},"type":"object","required":["attributeName","attributeValue"]},"aws-native:kinesisfirehose:DeliveryStreamHttpEndpointConfiguration":{"properties":{"accessKey":{"type":"string","description":"The access key required for Kinesis Firehose to authenticate with the HTTP endpoint selected as the destination."},"name":{"type":"string","description":"The name of the HTTP endpoint selected as the destination."},"url":{"type":"string","description":"The URL of the HTTP endpoint selected as the destination."}},"type":"object","required":["url"]},"aws-native:kinesisfirehose:DeliveryStreamHttpEndpointDestinationConfiguration":{"properties":{"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamBufferingHints","description":"The buffering options that can be used before data is delivered to the specified destination. Kinesis Data Firehose treats these options as hints, and it might choose to use more optimal values. The SizeInMBs and IntervalInSeconds parameters are optional. However, if you specify a value for one of them, you must also provide a value for the other."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"Describes the Amazon CloudWatch logging options for your delivery stream."},"endpointConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointConfiguration","description":"The configuration of the HTTP endpoint selected as the destination."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration","description":"Describes the data processing configuration."},"requestConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointRequestConfiguration","description":"The configuration of the request sent to the HTTP endpoint specified as the destination."},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRetryOptions","description":"Describes the retry behavior in case Kinesis Data Firehose is unable to deliver data to the specified HTTP endpoint destination, or if it doesn't receive a valid acknowledgment of receipt from the specified HTTP endpoint destination."},"roleArn":{"type":"string","description":"Kinesis Data Firehose uses this IAM role for all the permissions that the delivery stream needs."},"s3BackupMode":{"type":"string","description":"Describes the S3 bucket backup options for the data that Kinesis Data Firehose delivers to the HTTP endpoint destination. You can back up all documents (AllData) or only the documents that Kinesis Data Firehose could not deliver to the specified HTTP endpoint destination (FailedDataOnly)."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"Describes the configuration of a destination in Amazon S3."},"secretsManagerConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSecretsManagerConfiguration","description":"The configuration that defines how you access secrets for HTTP Endpoint destination."}},"type":"object","required":["endpointConfiguration","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamHttpEndpointRequestConfiguration":{"properties":{"commonAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointCommonAttribute"},"description":"Describes the metadata sent to the HTTP endpoint destination."},"contentEncoding":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointRequestConfigurationContentEncoding","description":"Kinesis Data Firehose uses the content encoding to compress the body of a request before sending the request to the destination. For more information, see Content-Encoding in MDN Web Docs, the official Mozilla documentation."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamHttpEndpointRequestConfigurationContentEncoding":{"description":"Kinesis Data Firehose uses the content encoding to compress the body of a request before sending the request to the destination. For more information, see Content-Encoding in MDN Web Docs, the official Mozilla documentation.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Gzip","value":"GZIP"}]},"aws-native:kinesisfirehose:DeliveryStreamIcebergDestinationConfiguration":{"properties":{"appendOnly":{"type":"boolean","description":"Describes whether all incoming data for this delivery stream will be append only (inserts only and not for updates and deletes) for Iceberg delivery. This feature is only applicable for Apache Iceberg Tables.\n\nThe default value is false. If you set this value to true, Firehose automatically increases the throughput limit of a stream based on the throttling levels of the stream. If you set this parameter to true for a stream with updates and deletes, you will see out of order delivery."},"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamBufferingHints"},"catalogConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCatalogConfiguration","description":"Configuration describing where the destination Apache Iceberg Tables are persisted.","replaceOnChanges":true},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions"},"destinationTableConfigurationList":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDestinationTableConfiguration"},"description":"Provides a list of `DestinationTableConfigurations` which Firehose uses to deliver data to Apache Iceberg Tables. Firehose will write data with insert if table specific configuration is not provided here."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration"},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRetryOptions"},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to be assumed by Firehose for calling Apache Iceberg Tables."},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamIcebergDestinationConfigurations3BackupMode","description":"Describes how Firehose will backup records. Currently,S3 backup only supports `FailedDataOnly` ."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration"},"schemaEvolutionConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSchemaEvolutionConfiguration","description":"The configuration to enable automatic schema evolution.\n\nAmazon Data Firehose is in preview release and is subject to change."},"tableCreationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamTableCreationConfiguration","description":"The configuration to enable automatic table creation.\n\nAmazon Data Firehose is in preview release and is subject to change."}},"type":"object","required":["catalogConfiguration","roleArn","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamIcebergDestinationConfigurations3BackupMode":{"description":"Describes how Firehose will backup records. Currently,S3 backup only supports `FailedDataOnly` .","type":"string","enum":[{"name":"AllData","value":"AllData"},{"name":"FailedDataOnly","value":"FailedDataOnly"}]},"aws-native:kinesisfirehose:DeliveryStreamInputFormatConfiguration":{"properties":{"deserializer":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDeserializer","description":"Specifies which deserializer to use. You can choose either the Apache Hive JSON SerDe or the OpenX JSON SerDe. If both are non-null, the server rejects the request."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamKinesisStreamSourceConfiguration":{"properties":{"kinesisStreamArn":{"type":"string","description":"The ARN of the source Kinesis data stream."},"roleArn":{"type":"string","description":"The ARN of the role that provides access to the source Kinesis data stream."}},"type":"object","required":["kinesisStreamArn","roleArn"]},"aws-native:kinesisfirehose:DeliveryStreamKmsEncryptionConfig":{"properties":{"awskmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS encryption key that Amazon S3 uses to encrypt data delivered by the Kinesis Data Firehose stream. The key must belong to the same region as the destination S3 bucket."}},"type":"object","required":["awskmsKeyArn"]},"aws-native:kinesisfirehose:DeliveryStreamMskSourceConfiguration":{"properties":{"authenticationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAuthenticationConfiguration","description":"The authentication configuration of the Amazon MSK cluster."},"mskClusterArn":{"type":"string","description":"The ARN of the Amazon MSK cluster."},"readFromTimestamp":{"type":"string","description":"The start date and time in UTC for the offset position within your MSK topic from where Firehose begins to read. By default, this is set to timestamp when Firehose becomes Active.\n\nIf you want to create a Firehose stream with Earliest start position from SDK or CLI, you need to set the `ReadFromTimestamp` parameter to Epoch (1970-01-01T00:00:00Z)."},"topicName":{"type":"string","description":"The topic name within the Amazon MSK cluster."}},"type":"object","required":["authenticationConfiguration","mskClusterArn","topicName"]},"aws-native:kinesisfirehose:DeliveryStreamOpenXJsonSerDe":{"properties":{"caseInsensitive":{"type":"boolean","description":"When set to `true` , which is the default, Firehose converts JSON keys to lowercase before deserializing them."},"columnToJsonKeyMappings":{"type":"object","additionalProperties":{"type":"string"},"description":"Maps column names to JSON keys that aren't identical to the column names. This is useful when the JSON contains keys that are Hive keywords. For example, `timestamp` is a Hive keyword. If you have a JSON key named `timestamp` , set this parameter to `{\"ts\": \"timestamp\"}` to map this key to a column named `ts` ."},"convertDotsInJsonKeysToUnderscores":{"type":"boolean","description":"When set to `true` , specifies that the names of the keys include dots and that you want Firehose to replace them with underscores. This is useful because Apache Hive does not allow dots in column names. For example, if the JSON contains a key whose name is \"a.b\", you can define the column name to be \"a_b\" when using this option.\n\nThe default is `false` ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamOrcSerDe":{"properties":{"blockSizeBytes":{"type":"integer","description":"The Hadoop Distributed File System (HDFS) block size. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is 256 MiB and the minimum is 64 MiB. Firehose uses this value for padding calculations."},"bloomFilterColumns":{"type":"array","items":{"type":"string"},"description":"The column names for which you want Firehose to create bloom filters. The default is `null` ."},"bloomFilterFalsePositiveProbability":{"type":"number","description":"The Bloom filter false positive probability (FPP). The lower the FPP, the bigger the Bloom filter. The default value is 0.05, the minimum is 0, and the maximum is 1."},"compression":{"type":"string","description":"The compression code to use over data blocks. The default is `SNAPPY` ."},"dictionaryKeyThreshold":{"type":"number","description":"Represents the fraction of the total number of non-null rows. To turn off dictionary encoding, set this fraction to a number that is less than the number of distinct keys in a dictionary. To always use dictionary encoding, set this threshold to 1."},"enablePadding":{"type":"boolean","description":"Set this to `true` to indicate that you want stripes to be padded to the HDFS block boundaries. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is `false` ."},"formatVersion":{"type":"string","description":"The version of the file to write. The possible values are `V0_11` and `V0_12` . The default is `V0_12` ."},"paddingTolerance":{"type":"number","description":"A number between 0 and 1 that defines the tolerance for block padding as a decimal fraction of stripe size. The default value is 0.05, which means 5 percent of stripe size.\n\nFor the default values of 64 MiB ORC stripes and 256 MiB HDFS blocks, the default block padding tolerance of 5 percent reserves a maximum of 3.2 MiB for padding within the 256 MiB block. In such a case, if the available size within the block is more than 3.2 MiB, a new, smaller stripe is inserted to fit within that space. This ensures that no stripe crosses block boundaries and causes remote reads within a node-local task.\n\nKinesis Data Firehose ignores this parameter when `EnablePadding` is `false` ."},"rowIndexStride":{"type":"integer","description":"The number of rows between index entries. The default is 10,000 and the minimum is 1,000."},"stripeSizeBytes":{"type":"integer","description":"The number of bytes in each stripe. The default is 64 MiB and the minimum is 8 MiB."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamOutputFormatConfiguration":{"properties":{"serializer":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSerializer","description":"Specifies which serializer to use. You can choose either the ORC SerDe or the Parquet SerDe. If both are non-null, the server rejects the request."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamParquetSerDe":{"properties":{"blockSizeBytes":{"type":"integer","description":"The Hadoop Distributed File System (HDFS) block size. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is 256 MiB and the minimum is 64 MiB. Firehose uses this value for padding calculations."},"compression":{"type":"string","description":"The compression code to use over data blocks. The possible values are `UNCOMPRESSED` , `SNAPPY` , and `GZIP` , with the default being `SNAPPY` . Use `SNAPPY` for higher decompression speed. Use `GZIP` if the compression ratio is more important than speed."},"enableDictionaryCompression":{"type":"boolean","description":"Indicates whether to enable dictionary compression."},"maxPaddingBytes":{"type":"integer","description":"The maximum amount of padding to apply. This is useful if you intend to copy the data from Amazon S3 to HDFS before querying. The default is 0."},"pageSizeBytes":{"type":"integer","description":"The Parquet page size. Column chunks are divided into pages. A page is conceptually an indivisible unit (in terms of compression and encoding). The minimum value is 64 KiB and the default is 1 MiB."},"writerVersion":{"type":"string","description":"Indicates the version of row format to output. The possible values are `V1` and `V2` . The default is `V1` ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamPartitionField":{"properties":{"sourceName":{"type":"string"}},"type":"object","required":["sourceName"]},"aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Indicates whether data processing is enabled (true) or disabled (false)."},"processors":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessor"},"description":"The data processors."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamProcessor":{"properties":{"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessorParameter"},"description":"The processor parameters."},"type":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessorType","description":"The type of processor. Valid values: `Lambda` ."}},"type":"object","required":["type"]},"aws-native:kinesisfirehose:DeliveryStreamProcessorParameter":{"properties":{"parameterName":{"type":"string","description":"The name of the parameter. Currently the following default values are supported: 3 for `NumberOfRetries` and 60 for the `BufferIntervalInSeconds` . The `BufferSizeInMBs` ranges between 0.2 MB and up to 3MB. The default buffering hint is 1MB for all destinations, except Splunk. For Splunk, the default buffering hint is 256 KB."},"parameterValue":{"type":"string","description":"The parameter value."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:kinesisfirehose:DeliveryStreamProcessorType":{"description":"The type of processor. Valid values: `Lambda` .","type":"string","enum":[{"name":"RecordDeAggregation","value":"RecordDeAggregation"},{"name":"Decompression","value":"Decompression"},{"name":"CloudWatchLogProcessing","value":"CloudWatchLogProcessing"},{"name":"Lambda","value":"Lambda"},{"name":"MetadataExtraction","value":"MetadataExtraction"},{"name":"AppendDelimiterToRecord","value":"AppendDelimiterToRecord"}]},"aws-native:kinesisfirehose:DeliveryStreamRedshiftDestinationConfiguration":{"properties":{"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"The CloudWatch logging options for your Firehose stream."},"clusterJdbcurl":{"type":"string","description":"The connection string that Kinesis Data Firehose uses to connect to the Amazon Redshift cluster."},"copyCommand":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCopyCommand","description":"Configures the Amazon Redshift `COPY` command that Kinesis Data Firehose uses to load data into the cluster from the Amazon S3 bucket."},"password":{"type":"string","description":"The password for the Amazon Redshift user that you specified in the `Username` property."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration","description":"The data processing configuration for the Kinesis Data Firehose delivery stream."},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRedshiftRetryOptions","description":"The retry behavior in case Firehose is unable to deliver documents to Amazon Redshift. Default value is 3600 (60 minutes)."},"roleArn":{"type":"string","description":"The ARN of the AWS Identity and Access Management (IAM) role that grants Kinesis Data Firehose access to your Amazon S3 bucket and AWS KMS (if you enable data encryption). For more information, see [Grant Kinesis Data Firehose Access to an Amazon Redshift Destination](https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html#using-iam-rs) in the *Amazon Kinesis Data Firehose Developer Guide* ."},"s3BackupConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The configuration for backup in Amazon S3."},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRedshiftDestinationConfigurationS3BackupMode","description":"The Amazon S3 backup mode. After you create a Firehose stream, you can update it to enable Amazon S3 backup if it is disabled. If backup is enabled, you can't update the Firehose stream to disable it."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The S3 bucket where Kinesis Data Firehose first delivers data. After the data is in the bucket, Kinesis Data Firehose uses the `COPY` command to load the data into the Amazon Redshift cluster. For the Amazon S3 bucket's compression format, don't specify `SNAPPY` or `ZIP` because the Amazon Redshift `COPY` command doesn't support them."},"secretsManagerConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSecretsManagerConfiguration","description":"The configuration that defines how you access secrets for Amazon Redshift."},"username":{"type":"string","description":"The Amazon Redshift user that has permission to access the Amazon Redshift cluster. This user must have `INSERT` privileges for copying data from the Amazon S3 bucket to the cluster."}},"type":"object","required":["clusterJdbcurl","copyCommand","roleArn","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamRedshiftDestinationConfigurationS3BackupMode":{"description":"The Amazon S3 backup mode. After you create a Firehose stream, you can update it to enable Amazon S3 backup if it is disabled. If backup is enabled, you can't update the Firehose stream to disable it.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:kinesisfirehose:DeliveryStreamRedshiftRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"The length of time during which Firehose retries delivery after a failure, starting from the initial request and including the first attempt. The default value is 3600 seconds (60 minutes). Firehose does not retry if the value of `DurationInSeconds` is 0 (zero) or if the first delivery attempt takes longer than the current value."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"The total amount of time that Kinesis Data Firehose spends on retries. This duration starts after the initial attempt to send data to the custom destination via HTTPS endpoint fails. It doesn't include the periods during which Kinesis Data Firehose waits for acknowledgment from the specified destination after each attempt."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration":{"properties":{"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket to send data to."},"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamBufferingHints","description":"Configures how Kinesis Data Firehose buffers incoming data while delivering it to the Amazon S3 bucket."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"The CloudWatch logging options for your Firehose stream."},"compressionFormat":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfigurationCompressionFormat","description":"The type of compression that Kinesis Data Firehose uses to compress the data that it delivers to the Amazon S3 bucket. For valid values, see the `CompressionFormat` content for the [S3DestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_S3DestinationConfiguration.html) data type in the *Amazon Kinesis Data Firehose API Reference* ."},"encryptionConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfiguration","description":"Configures Amazon Simple Storage Service (Amazon S3) server-side encryption. Kinesis Data Firehose uses AWS Key Management Service ( AWS KMS) to encrypt the data that it delivers to your Amazon S3 bucket."},"errorOutputPrefix":{"type":"string","description":"A prefix that Kinesis Data Firehose evaluates and adds to failed records before writing them to S3. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html) ."},"prefix":{"type":"string","description":"A prefix that Kinesis Data Firehose adds to the files that it delivers to the Amazon S3 bucket. The prefix helps you identify the files that Kinesis Data Firehose delivered."},"roleArn":{"type":"string","description":"The ARN of an AWS Identity and Access Management (IAM) role that grants Kinesis Data Firehose access to your Amazon S3 bucket and AWS KMS (if you enable data encryption). For more information, see [Grant Kinesis Data Firehose Access to an Amazon S3 Destination](https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html#using-iam-s3) in the *Amazon Kinesis Data Firehose Developer Guide* ."}},"type":"object","required":["bucketArn","roleArn"]},"aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfigurationCompressionFormat":{"description":"The type of compression that Kinesis Data Firehose uses to compress the data that it delivers to the Amazon S3 bucket. For valid values, see the `CompressionFormat` content for the [S3DestinationConfiguration](https://docs.aws.amazon.com/firehose/latest/APIReference/API_S3DestinationConfiguration.html) data type in the *Amazon Kinesis Data Firehose API Reference* .","type":"string","enum":[{"name":"Uncompressed","value":"UNCOMPRESSED"},{"name":"Gzip","value":"GZIP"},{"name":"Zip","value":"ZIP"},{"name":"Snappy","value":"Snappy"},{"name":"HadoopSnappy","value":"HADOOP_SNAPPY"}]},"aws-native:kinesisfirehose:DeliveryStreamSchemaConfiguration":{"properties":{"catalogId":{"type":"string","description":"The ID of the AWS Glue Data Catalog. If you don't supply this, the AWS account ID is used by default."},"databaseName":{"type":"string","description":"Specifies the name of the AWS Glue database that contains the schema for the output data.\n\n\u003e If the `SchemaConfiguration` request parameter is used as part of invoking the `CreateDeliveryStream` API, then the `DatabaseName` property is required and its value must be specified."},"region":{"type":"string","description":"If you don't specify an AWS Region, the default is the current Region."},"roleArn":{"type":"string","description":"The role that Firehose can use to access AWS Glue. This role must be in the same account you use for Firehose. Cross-account roles aren't allowed.\n\n\u003e If the `SchemaConfiguration` request parameter is used as part of invoking the `CreateDeliveryStream` API, then the `RoleARN` property is required and its value must be specified."},"tableName":{"type":"string","description":"Specifies the AWS Glue table that contains the column information that constitutes your data schema.\n\n\u003e If the `SchemaConfiguration` request parameter is used as part of invoking the `CreateDeliveryStream` API, then the `TableName` property is required and its value must be specified."},"versionId":{"type":"string","description":"Specifies the table version for the output data schema. If you don't specify this version ID, or if you set it to `LATEST` , Firehose uses the most recent version. This means that any updates to the table are automatically picked up."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSchemaEvolutionConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Specify whether you want to enable schema evolution.\n\nAmazon Data Firehose is in preview release and is subject to change."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSecretsManagerConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Specifies whether you want to use the secrets manager feature. When set as `True` the secrets manager configuration overwrites the existing secrets in the destination configuration. When it's set to `False` Firehose falls back to the credentials in the destination configuration."},"roleArn":{"type":"string","description":"Specifies the role that Firehose assumes when calling the Secrets Manager API operation. When you provide the role, it overrides any destination specific role defined in the destination configuration. If you do not provide the then we use the destination specific role. This parameter is required for Splunk."},"secretArn":{"type":"string","description":"The ARN of the secret that stores your credentials. It must be in the same region as the Firehose stream and the role. The secret ARN can reside in a different account than the Firehose stream and role as Firehose supports cross-account secret access. This parameter is required when *Enabled* is set to `True` ."}},"type":"object","required":["enabled"]},"aws-native:kinesisfirehose:DeliveryStreamSerializer":{"properties":{"orcSerDe":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamOrcSerDe","description":"A serializer to use for converting data to the ORC format before storing it in Amazon S3. For more information, see [Apache ORC](https://docs.aws.amazon.com/https://orc.apache.org/docs/) ."},"parquetSerDe":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamParquetSerDe","description":"A serializer to use for converting data to the Parquet format before storing it in Amazon S3. For more information, see [Apache Parquet](https://docs.aws.amazon.com/https://parquet.apache.org/docs/contribution-guidelines/) ."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeBufferingHints":{"properties":{"intervalInSeconds":{"type":"integer","description":"Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 0."},"sizeInMbs":{"type":"integer","description":"Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 128."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfiguration":{"properties":{"accountUrl":{"type":"string","description":"URL for accessing your Snowflake account. This URL must include your [account identifier](https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/admin-account-identifier) . Note that the protocol (https://) and port number are optional."},"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeBufferingHints","description":"Describes the buffering to perform before delivering data to the Snowflake destination. If you do not specify any value, Firehose uses the default values."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions"},"contentColumnName":{"type":"string","description":"The name of the record content column."},"dataLoadingOption":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfigurationDataLoadingOption","description":"Choose to load JSON keys mapped to table column names or choose to split the JSON payload where content is mapped to a record content column and source metadata is mapped to a record metadata column."},"database":{"type":"string","description":"All data in Snowflake is maintained in databases."},"keyPassphrase":{"type":"string","description":"Passphrase to decrypt the private key when the key is encrypted. For information, see [Using Key Pair Authentication \u0026 Key Rotation](https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/data-load-snowpipe-streaming-configuration#using-key-pair-authentication-key-rotation) ."},"metaDataColumnName":{"type":"string","description":"Specify a column name in the table, where the metadata information has to be loaded. When you enable this field, you will see the following column in the snowflake table, which differs based on the source type.\n\nFor Direct PUT as source\n\n`{ \"firehoseDeliveryStreamName\" : \"streamname\", \"IngestionTime\" : \"timestamp\" }`\n\nFor Kinesis Data Stream as source\n\n`\"kinesisStreamName\" : \"streamname\", \"kinesisShardId\" : \"Id\", \"kinesisPartitionKey\" : \"key\", \"kinesisSequenceNumber\" : \"1234\", \"subsequenceNumber\" : \"2334\", \"IngestionTime\" : \"timestamp\" }`"},"privateKey":{"type":"string","description":"The private key used to encrypt your Snowflake client. For information, see [Using Key Pair Authentication \u0026 Key Rotation](https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/data-load-snowpipe-streaming-configuration#using-key-pair-authentication-key-rotation) ."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration"},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeRetryOptions","description":"The time period where Firehose will retry sending data to the chosen HTTP endpoint."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Snowflake role"},"s3BackupMode":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfigurationS3BackupMode","description":"Choose an S3 backup mode"},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration"},"schema":{"type":"string","description":"Each database consists of one or more schemas, which are logical groupings of database objects, such as tables and views"},"secretsManagerConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSecretsManagerConfiguration","description":"The configuration that defines how you access secrets for Snowflake."},"snowflakeRoleConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeRoleConfiguration","description":"Optionally configure a Snowflake role. Otherwise the default user role will be used."},"snowflakeVpcConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeVpcConfiguration","description":"The VPCE ID for Firehose to privately connect with Snowflake. The ID format is com.amazonaws.vpce.[region].vpce-svc-\u003c[id]\u003e. For more information, see [Amazon PrivateLink \u0026 Snowflake](https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/admin-security-privatelink)","replaceOnChanges":true},"table":{"type":"string","description":"All data in Snowflake is stored in database tables, logically structured as collections of columns and rows."},"user":{"type":"string","description":"User login name for the Snowflake account."}},"type":"object","required":["accountUrl","database","roleArn","s3Configuration","schema","table"]},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfigurationDataLoadingOption":{"description":"Choose to load JSON keys mapped to table column names or choose to split the JSON payload where content is mapped to a record content column and source metadata is mapped to a record metadata column.","type":"string","enum":[{"name":"JsonMapping","value":"JSON_MAPPING"},{"name":"VariantContentMapping","value":"VARIANT_CONTENT_MAPPING"},{"name":"VariantContentAndMetadataMapping","value":"VARIANT_CONTENT_AND_METADATA_MAPPING"}]},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfigurationS3BackupMode":{"description":"Choose an S3 backup mode","type":"string","enum":[{"name":"FailedDataOnly","value":"FailedDataOnly"},{"name":"AllData","value":"AllData"}]},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"the time period where Firehose will retry sending data to the chosen HTTP endpoint."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeRoleConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Enable Snowflake role"},"snowflakeRole":{"type":"string","description":"The Snowflake role you wish to configure"}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSnowflakeVpcConfiguration":{"properties":{"privateLinkVpceId":{"type":"string","description":"The VPCE ID for Firehose to privately connect with Snowflake. The ID format is com.amazonaws.vpce.[region].vpce-svc-\u003c[id]\u003e. For more information, see [Amazon PrivateLink \u0026 Snowflake](https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/admin-security-privatelink)"}},"type":"object","required":["privateLinkVpceId"]},"aws-native:kinesisfirehose:DeliveryStreamSplunkBufferingHints":{"properties":{"intervalInSeconds":{"type":"integer","description":"Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 60 (1 minute)."},"sizeInMbs":{"type":"integer","description":"Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamSplunkDestinationConfiguration":{"properties":{"bufferingHints":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSplunkBufferingHints","description":"The buffering options. If no value is specified, the default values for Splunk are used."},"cloudWatchLoggingOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamCloudWatchLoggingOptions","description":"The Amazon CloudWatch logging options for your Firehose stream."},"hecAcknowledgmentTimeoutInSeconds":{"type":"integer","description":"The amount of time that Firehose waits to receive an acknowledgment from Splunk after it sends it data. At the end of the timeout period, Firehose either tries to send the data again or considers it an error, based on your retry settings."},"hecEndpoint":{"type":"string","description":"The HTTP Event Collector (HEC) endpoint to which Firehose sends your data."},"hecEndpointType":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSplunkDestinationConfigurationHecEndpointType","description":"This type can be either `Raw` or `Event` ."},"hecToken":{"type":"string","description":"This is a GUID that you obtain from your Splunk cluster when you create a new HEC endpoint."},"processingConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamProcessingConfiguration","description":"The data processing configuration."},"retryOptions":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSplunkRetryOptions","description":"The retry behavior in case Firehose is unable to deliver data to Splunk, or if it doesn't receive an acknowledgment of receipt from Splunk."},"s3BackupMode":{"type":"string","description":"Defines how documents should be delivered to Amazon S3. When set to `FailedEventsOnly` , Firehose writes any data that could not be indexed to the configured Amazon S3 destination. When set to `AllEvents` , Firehose delivers all incoming records to Amazon S3, and also writes failed documents to Amazon S3. The default value is `FailedEventsOnly` .\n\nYou can update this backup mode from `FailedEventsOnly` to `AllEvents` . You can't update it from `AllEvents` to `FailedEventsOnly` ."},"s3Configuration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The configuration for the backup Amazon S3 location."},"secretsManagerConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSecretsManagerConfiguration","description":"The configuration that defines how you access secrets for Splunk."}},"type":"object","required":["hecEndpoint","hecEndpointType","s3Configuration"]},"aws-native:kinesisfirehose:DeliveryStreamSplunkDestinationConfigurationHecEndpointType":{"description":"This type can be either `Raw` or `Event` .","type":"string","enum":[{"name":"Raw","value":"Raw"},{"name":"Event","value":"Event"}]},"aws-native:kinesisfirehose:DeliveryStreamSplunkRetryOptions":{"properties":{"durationInSeconds":{"type":"integer","description":"The total amount of time that Firehose spends on retries. This duration starts after the initial attempt to send data to Splunk fails. It doesn't include the periods during which Firehose waits for acknowledgment from Splunk after each attempt."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamTableCreationConfiguration":{"properties":{"enabled":{"type":"boolean","description":"Specify whether you want to enable automatic table creation.\n\nAmazon Data Firehose is in preview release and is subject to change."}},"type":"object"},"aws-native:kinesisfirehose:DeliveryStreamTag":{"properties":{"key":{"type":"string","description":"A unique identifier for the tag. Maximum length: 128 characters. Valid characters: Unicode letters, digits, white space, _ . / = + - % @"},"value":{"type":"string","description":"An optional string, which you can use to describe or define the tag. Maximum length: 256 characters. Valid characters: Unicode letters, digits, white space, _ . / = + - % @"}},"type":"object","required":["key"]},"aws-native:kinesisfirehose:DeliveryStreamType":{"description":"The Firehose stream type. This can be one of the following values:\n\n- `DirectPut` : Provider applications access the Firehose stream directly.\n- `KinesisStreamAsSource` : The Firehose stream uses a Kinesis data stream as a source.","type":"string","enum":[{"name":"DatabaseAsSource","value":"DatabaseAsSource"},{"name":"DirectPut","value":"DirectPut"},{"name":"KinesisStreamAsSource","value":"KinesisStreamAsSource"},{"name":"MskasSource","value":"MSKAsSource"}]},"aws-native:kinesisfirehose:DeliveryStreamVpcConfiguration":{"properties":{"roleArn":{"type":"string","description":"The ARN of the IAM role that you want the delivery stream to use to create endpoints in the destination VPC. You can use your existing Kinesis Data Firehose delivery role or you can specify a new role. In either case, make sure that the role trusts the Kinesis Data Firehose service principal and that it grants the following permissions:\n\n- `ec2:DescribeVpcs`\n- `ec2:DescribeVpcAttribute`\n- `ec2:DescribeSubnets`\n- `ec2:DescribeSecurityGroups`\n- `ec2:DescribeNetworkInterfaces`\n- `ec2:CreateNetworkInterface`\n- `ec2:CreateNetworkInterfacePermission`\n- `ec2:DeleteNetworkInterface`\n\nIf you revoke these permissions after you create the delivery stream, Kinesis Data Firehose can't scale out by creating more ENIs when necessary. You might therefore see a degradation in performance."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups that you want Kinesis Data Firehose to use when it creates ENIs in the VPC of the Amazon ES destination. You can use the same security group that the Amazon ES domain uses or different ones. If you specify different security groups here, ensure that they allow outbound HTTPS traffic to the Amazon ES domain's security group. Also ensure that the Amazon ES domain's security group allows HTTPS traffic from the security groups specified here. If you use the same security group for both your delivery stream and the Amazon ES domain, make sure the security group inbound rule allows HTTPS traffic."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets that Kinesis Data Firehose uses to create ENIs in the VPC of the Amazon ES destination. Make sure that the routing tables and inbound and outbound rules allow traffic to flow from the subnets whose IDs are specified here to the subnets that have the destination Amazon ES endpoints. Kinesis Data Firehose creates at least one ENI in each of the subnets that are specified here. Do not delete or modify these ENIs.\n\nThe number of ENIs that Kinesis Data Firehose creates in the subnets specified here scales up and down automatically based on throughput. To enable Kinesis Data Firehose to scale up the number of ENIs to match throughput, ensure that you have sufficient quota. To help you calculate the quota you need, assume that Kinesis Data Firehose can create up to three ENIs for this delivery stream for each of the subnets specified here."}},"type":"object","required":["roleArn","securityGroupIds","subnetIds"]},"aws-native:kinesisvideo:SignalingChannelTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. Specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. The following characters can be used: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. Specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:.  The following characters can be used: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:kinesisvideo:SignalingChannelType":{"description":"The type of the Kinesis Video Signaling Channel to create. Currently, SINGLE_MASTER is the only supported channel type.","type":"string","enum":[{"name":"SingleMaster","value":"SINGLE_MASTER"}]},"aws-native:kinesisvideo:StreamStorageConfiguration":{"description":"Configuration for the storage tier of the Kinesis Video Stream.","properties":{"defaultStorageTier":{"$ref":"#/types/aws-native:kinesisvideo:StreamStorageConfigurationDefaultStorageTier","description":"The storage tier for the Kinesis Video Stream. Determines the storage class used for stream data."}},"type":"object"},"aws-native:kinesisvideo:StreamStorageConfigurationDefaultStorageTier":{"description":"The storage tier for the Kinesis Video Stream. Determines the storage class used for stream data.","type":"string","enum":[{"name":"Hot","value":"HOT"},{"name":"Warm","value":"WARM"}]},"aws-native:kinesisvideo:StreamTag":{"description":"A key-value pair to associated with the Kinesis Video Stream.","properties":{"key":{"type":"string","description":"The key name of the tag. Specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. The following characters can be used: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. Specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. The following characters can be used: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:kms:KeyOrigin":{"description":"The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is ``AWS_KMS``, which means that KMS creates the key material.\n To [create a KMS key with no key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-create-cmk.html) (for imported key material), set this value to ``EXTERNAL``. For more information about importing key material into KMS, see [Importing Key Material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) in the *Developer Guide*.\n You can ignore ``ENABLED`` when Origin is ``EXTERNAL``. When a KMS key with Origin ``EXTERNAL`` is created, the key state is ``PENDING_IMPORT`` and ``ENABLED`` is ``false``. After you import the key material, ``ENABLED`` updated to ``true``. The KMS key can then be used for Cryptographic Operations. \n   +  CFN doesn't support creating an ``Origin`` parameter of the ``AWS_CLOUDHSM`` or ``EXTERNAL_KEY_STORE`` values.\n  +  ``EXTERNAL`` is not supported for ML-DSA keys.","type":"string","enum":[{"name":"AwsKms","value":"AWS_KMS"},{"name":"External","value":"EXTERNAL"}]},"aws-native:kms:KeySpec":{"description":"Specifies the type of KMS key to create. The default value, ``SYMMETRIC_DEFAULT``, creates a KMS key with a 256-bit symmetric key for encryption and decryption. In China Regions, ``SYMMETRIC_DEFAULT`` creates a 128-bit symmetric key that uses SM4 encryption. You can't change the ``KeySpec`` value after the KMS key is created. For help choosing a key spec for your KMS key, see [Choosing a KMS key type](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html) in the *Developer Guide*.\n The ``KeySpec`` property determines the type of key material in the KMS key and the algorithms that the KMS key supports. To further restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For more information, see [condition keys](https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms) in the *Developer Guide*.\n  If you change the value of the ``KeySpec`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n   [services that are integrated with](https://docs.aws.amazon.com/kms/features/#AWS_Service_Integration) use symmetric encryption KMS keys to protect your data. These services do not support encryption with asymmetric KMS keys. For help determining whether a KMS key is asymmetric, see [Identifying asymmetric KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/find-symm-asymm.html) in the *Developer Guide*.\n  KMS supports the following key specs for KMS keys:\n  +  Symmetric encryption key (default)\n  +  ``SYMMETRIC_DEFAULT`` (AES-256-GCM)\n  \n  +  HMAC keys (symmetric)\n  +   ``HMAC_224`` \n  +   ``HMAC_256`` \n  +   ``HMAC_384`` \n  +   ``HMAC_512`` \n  \n  +  Asymmetric RSA key pairs (encryption and decryption *or* signing and verification)\n  +   ``RSA_2048`` \n  +   ``RSA_3072`` \n  +   ``RSA_4096`` \n  \n  +  Asymmetric NIST-recommended elliptic curve key pairs (signing and verification *or* deriving shared secrets)\n  +  ``ECC_NIST_P256`` (secp256r1)\n  +  ``ECC_NIST_P384`` (secp384r1)\n  +  ``ECC_NIST_P521`` (secp521r1)\n  +  ``ECC_NIST_EDWARDS25519`` (ed25519) - signing and verification only\n  +  *Note:* For ECC_NIST_EDWARDS25519 KMS keys, the ED25519_SHA_512 signing algorithm requires [MessageType:RAW](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType), while ED25519_PH_SHA_512 requires [MessageType:DIGEST](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType). These message types cannot be used interchangeably.\n  \n  \n  +  Other asymmetric elliptic curve key pairs (signing and verification)\n  +  ``ECC_SECG_P256K1`` (secp256k1), commonly used for cryptocurrencies.\n  \n  +  Asymmetric ML-DSA key pairs (signing and verification)\n  +   ``ML_DSA_44`` \n  +   ``ML_DSA_65`` \n  +   ``ML_DSA_87`` \n  \n  +  SM2 key pairs (encryption and decryption *or* signing and verification *or* deriving shared secrets)\n  +  ``SM2`` (China Regions only)","type":"string","enum":[{"name":"SymmetricDefault","value":"SYMMETRIC_DEFAULT"},{"name":"Rsa2048","value":"RSA_2048"},{"name":"Rsa3072","value":"RSA_3072"},{"name":"Rsa4096","value":"RSA_4096"},{"name":"EccNistP256","value":"ECC_NIST_P256"},{"name":"EccNistP384","value":"ECC_NIST_P384"},{"name":"EccNistP521","value":"ECC_NIST_P521"},{"name":"EccSecgP256k1","value":"ECC_SECG_P256K1"},{"name":"Hmac224","value":"HMAC_224"},{"name":"Hmac256","value":"HMAC_256"},{"name":"Hmac384","value":"HMAC_384"},{"name":"Hmac512","value":"HMAC_512"},{"name":"Sm2","value":"SM2"},{"name":"MlDsa44","value":"ML_DSA_44"},{"name":"MlDsa65","value":"ML_DSA_65"},{"name":"MlDsa87","value":"ML_DSA_87"},{"name":"EccNistEdwards25519","value":"ECC_NIST_EDWARDS25519"}]},"aws-native:kms:KeyTag":{"description":"A key-value pair. A tag consists of a tag key and a tag value. Tag keys and tag values are both required, but tag values can be empty (null) strings.\n  Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in CloudTrail logs and other output.\n  For information about the rules that apply to tag keys and tag values, see [User-Defined Tag Restrictions](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/allocation-tag-restrictions.html) in the *Billing and Cost Management User Guide*.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with ``aws:``. digits, whitespace, ``_``, ``.``, ``:``, ``/``, ``=``, ``+``, ``@``, ``-``, and ``\"``.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, ``_``, ``.``, ``/``, ``=``, ``+``, and ``-``.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"type":"object","required":["key","value"]},"aws-native:kms:KeyUsage":{"description":"Determines the [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. The default value is ``ENCRYPT_DECRYPT``. This property is required for asymmetric KMS keys and HMAC KMS keys. You can't change the ``KeyUsage`` value after the KMS key is created.\n  If you change the value of the ``KeyUsage`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  Select only one valid value.\n  +  For symmetric encryption KMS keys, omit the parameter or specify ``ENCRYPT_DECRYPT``.\n  +  For HMAC KMS keys (symmetric), specify ``GENERATE_VERIFY_MAC``.\n  +  For asymmetric KMS keys with RSA key pairs, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with NIST-recommended elliptic curve key pairs, specify ``SIGN_VERIFY`` or ``KEY_AGREEMENT``.\n  +  For asymmetric KMS keys with ``ECC_SECG_P256K1`` key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with ML-DSA key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with SM2 key pairs (China Regions only), specify ``ENCRYPT_DECRYPT``, ``SIGN_VERIFY``, or ``KEY_AGREEMENT``.","type":"string","enum":[{"name":"EncryptDecrypt","value":"ENCRYPT_DECRYPT"},{"name":"SignVerify","value":"SIGN_VERIFY"},{"name":"GenerateVerifyMac","value":"GENERATE_VERIFY_MAC"},{"name":"KeyAgreement","value":"KEY_AGREEMENT"}]},"aws-native:kms:ReplicaKeyTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:lakeformation:DataCellsFilterColumnWildcard":{"description":"An object representing the Data Cells Filter's Columns. Either Column Names or a Wildcard is required.","properties":{"excludedColumnNames":{"type":"array","items":{"type":"string"},"description":"A list of column names to be excluded from the Data Cells Filter."}},"type":"object"},"aws-native:lakeformation:DataCellsFilterRowFilter":{"description":"An object representing the Data Cells Filter's Row Filter. Either a Filter Expression or a Wildcard is required.","properties":{"allRowsWildcard":{"$ref":"pulumi.json#/Any","description":"An empty object representing a row wildcard."},"filterExpression":{"type":"string","description":"A PartiQL predicate."}},"type":"object"},"aws-native:lakeformation:PrincipalPermissionsCatalogResource":{"type":"object"},"aws-native:lakeformation:PrincipalPermissionsColumnWildcard":{"description":"A wildcard object, consisting of an optional list of excluded column names or indexes.","properties":{"excludedColumnNames":{"type":"array","items":{"type":"string"},"description":"Excludes column names. Any column with this name will be excluded."}},"type":"object"},"aws-native:lakeformation:PrincipalPermissionsDataCellsFilterResource":{"description":"A structure that describes certain columns on certain rows.","properties":{"databaseName":{"type":"string","description":"A database in the GLUDC."},"name":{"type":"string","description":"The name given by the user to the data filter cell."},"tableCatalogId":{"type":"string","description":"The ID of the catalog to which the table belongs."},"tableName":{"type":"string","description":"The name of the table."}},"type":"object","required":["databaseName","name","tableCatalogId","tableName"]},"aws-native:lakeformation:PrincipalPermissionsDataLakePrincipal":{"description":"The LFlong principal.","properties":{"dataLakePrincipalIdentifier":{"type":"string","description":"An identifier for the LFlong principal."}},"type":"object"},"aws-native:lakeformation:PrincipalPermissionsDataLocationResource":{"description":"A structure for a data location object where permissions are granted or revoked.","properties":{"catalogId":{"type":"string","description":"The identifier for the GLUDC where the location is registered with LFlong."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies the data location resource."}},"type":"object","required":["catalogId","resourceArn"]},"aws-native:lakeformation:PrincipalPermissionsDatabaseResource":{"description":"A structure for the database object.","properties":{"catalogId":{"type":"string","description":"The identifier for the Data Catalog. By default, it is the account ID of the caller."},"name":{"type":"string","description":"The name of the database resource. Unique to the Data Catalog."}},"type":"object","required":["catalogId","name"]},"aws-native:lakeformation:PrincipalPermissionsLfTag":{"description":"The LF-tag key and values attached to a resource.","properties":{"tagKey":{"type":"string","description":"The key-name for the LF-tag."},"tagValues":{"type":"array","items":{"type":"string"},"description":"A list of possible values of the corresponding ``TagKey`` of an LF-tag key-value pair."}},"type":"object"},"aws-native:lakeformation:PrincipalPermissionsLfTagKeyResource":{"description":"A structure containing an LF-tag key and values for a resource.","properties":{"catalogId":{"type":"string","description":"The identifier for the GLUDC where the location is registered with GLUDC."},"tagKey":{"type":"string","description":"The key-name for the LF-tag."},"tagValues":{"type":"array","items":{"type":"string"},"description":"A list of possible values for the corresponding ``TagKey`` of an LF-tag key-value pair."}},"type":"object","required":["catalogId","tagKey","tagValues"]},"aws-native:lakeformation:PrincipalPermissionsLfTagPolicyResource":{"description":"A list of LF-tag conditions that define a resource's LF-tag policy.\n A structure that allows an admin to grant user permissions on certain conditions. For example, granting a role access to all columns that do not have the LF-tag 'PII' in tables that have the LF-tag 'Prod'.","properties":{"catalogId":{"type":"string","description":"The identifier for the GLUDC. The GLUDC is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your LFlong environment."},"expression":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsLfTag"},"description":"A list of LF-tag conditions that apply to the resource's LF-tag policy."},"resourceType":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsResourceType","description":"The resource type for which the LF-tag policy applies."}},"type":"object","required":["catalogId","expression","resourceType"]},"aws-native:lakeformation:PrincipalPermissionsPermission":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Select","value":"SELECT"},{"name":"Alter","value":"ALTER"},{"name":"Drop","value":"DROP"},{"name":"Delete","value":"DELETE"},{"name":"Insert","value":"INSERT"},{"name":"Describe","value":"DESCRIBE"},{"name":"CreateDatabase","value":"CREATE_DATABASE"},{"name":"CreateTable","value":"CREATE_TABLE"},{"name":"DataLocationAccess","value":"DATA_LOCATION_ACCESS"},{"name":"CreateLfTag","value":"CREATE_LF_TAG"},{"name":"Associate","value":"ASSOCIATE"},{"name":"GrantWithLfTagExpression","value":"GRANT_WITH_LF_TAG_EXPRESSION"}]},"aws-native:lakeformation:PrincipalPermissionsResource":{"description":"A structure for the resource.","properties":{"catalog":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsCatalogResource","description":"The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your LFlong environment."},"dataCellsFilter":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsDataCellsFilterResource","description":"A data cell filter."},"dataLocation":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsDataLocationResource","description":"The location of an Amazon S3 path where permissions are granted or revoked."},"database":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsDatabaseResource","description":"The database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal."},"lfTag":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsLfTagKeyResource","description":"The LF-tag key and values attached to a resource."},"lfTagPolicy":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsLfTagPolicyResource","description":"A list of LF-tag conditions that define a resource's LF-tag policy."},"table":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsTableResource","description":"The table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal."},"tableWithColumns":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsTableWithColumnsResource","description":"The table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3."}},"type":"object"},"aws-native:lakeformation:PrincipalPermissionsResourceType":{"type":"string","enum":[{"name":"Database","value":"DATABASE"},{"name":"Table","value":"TABLE"}]},"aws-native:lakeformation:PrincipalPermissionsTableResource":{"description":"A structure for the table object. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal.","properties":{"catalogId":{"type":"string","description":"The identifier for the Data Catalog. By default, it is the account ID of the caller."},"databaseName":{"type":"string","description":"The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal."},"name":{"type":"string","description":"The name of the table."},"tableWildcard":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsTableWildcard","description":"A wildcard object representing every table under a database.\n At least one of ``TableResource$Name`` or ``TableResource$TableWildcard`` is required."}},"type":"object","required":["catalogId","databaseName"]},"aws-native:lakeformation:PrincipalPermissionsTableWildcard":{"type":"object"},"aws-native:lakeformation:PrincipalPermissionsTableWithColumnsResource":{"description":"A structure for a table with columns object. This object is only used when granting a SELECT permission.\n This object must take a value for at least one of ``ColumnsNames``, ``ColumnsIndexes``, or ``ColumnsWildcard``.","properties":{"catalogId":{"type":"string","description":"The identifier for the GLUDC where the location is registered with LFlong."},"columnNames":{"type":"array","items":{"type":"string"},"description":"The list of column names for the table. At least one of ``ColumnNames`` or ``ColumnWildcard`` is required."},"columnWildcard":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsColumnWildcard","description":"A wildcard specified by a ``ColumnWildcard`` object. At least one of ``ColumnNames`` or ``ColumnWildcard`` is required."},"databaseName":{"type":"string","description":"The name of the database for the table with columns resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal."},"name":{"type":"string","description":"The name of the table resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal."}},"type":"object","required":["catalogId","databaseName","name"]},"aws-native:lakeformation:TagAssociationCatalogResource":{"type":"object"},"aws-native:lakeformation:TagAssociationDatabaseResource":{"properties":{"catalogId":{"type":"string","description":"The identifier for the Data Catalog . By default, it should be the account ID of the caller."},"name":{"type":"string","description":"The name of the database resource. Unique to the Data Catalog."}},"type":"object","required":["catalogId","name"]},"aws-native:lakeformation:TagAssociationLfTagPair":{"properties":{"catalogId":{"type":"string"},"tagKey":{"type":"string"},"tagValues":{"type":"array","items":{"type":"string"}}},"type":"object","required":["catalogId","tagKey","tagValues"]},"aws-native:lakeformation:TagAssociationResource":{"properties":{"catalog":{"$ref":"#/types/aws-native:lakeformation:TagAssociationCatalogResource","description":"The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your AWS Lake Formation environment."},"database":{"$ref":"#/types/aws-native:lakeformation:TagAssociationDatabaseResource","description":"The database for the resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database permissions to a principal."},"table":{"$ref":"#/types/aws-native:lakeformation:TagAssociationTableResource","description":"The table for the resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal."},"tableWithColumns":{"$ref":"#/types/aws-native:lakeformation:TagAssociationTableWithColumnsResource","description":"The table with columns for the resource. A principal with permissions to this resource can select metadata from the columns of a table in the Data Catalog and the underlying data in Amazon S3."}},"type":"object"},"aws-native:lakeformation:TagAssociationTableResource":{"properties":{"catalogId":{"type":"string","description":"The identifier for the Data Catalog . By default, it is the account ID of the caller."},"databaseName":{"type":"string","description":"The name of the database for the table. Unique to a Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal."},"name":{"type":"string","description":"The name of the table."},"tableWildcard":{"$ref":"#/types/aws-native:lakeformation:TagAssociationTableWildcard","description":"A wildcard object representing every table under a database.This is an object with no properties that effectively behaves as a true or false depending on whether not it is passed as a parameter. The valid inputs for a property with this type in either yaml or json is null or {}.\n\nAt least one of `TableResource$Name` or `TableResource$TableWildcard` is required."}},"type":"object","required":["catalogId","databaseName"]},"aws-native:lakeformation:TagAssociationTableWildcard":{"type":"object"},"aws-native:lakeformation:TagAssociationTableWithColumnsResource":{"properties":{"catalogId":{"type":"string","description":"A wildcard object representing every table under a database.\n\nAt least one of TableResource$Name or TableResource$TableWildcard is required."},"columnNames":{"type":"array","items":{"type":"string"},"description":"The list of column names for the table. At least one of `ColumnNames` or `ColumnWildcard` is required."},"databaseName":{"type":"string","description":"The name of the database for the table with columns resource. Unique to the Data Catalog. A database is a set of associated table definitions organized into a logical group. You can Grant and Revoke database privileges to a principal."},"name":{"type":"string","description":"The name of the table resource. A table is a metadata definition that represents your data. You can Grant and Revoke table privileges to a principal."}},"type":"object","required":["catalogId","columnNames","databaseName","name"]},"aws-native:lambda:AliasProvisionedConcurrencyConfiguration":{"description":"A provisioned concurrency configuration for a function's alias.","properties":{"provisionedConcurrentExecutions":{"type":"integer","description":"The amount of provisioned concurrency to allocate for the alias."}},"type":"object","required":["provisionedConcurrentExecutions"]},"aws-native:lambda:AliasRoutingConfiguration":{"description":"The traffic-shifting configuration of a Lambda function alias.","properties":{"additionalVersionWeights":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:AliasVersionWeight"},"description":"The second version, and the percentage of traffic that's routed to it."}},"type":"object"},"aws-native:lambda:AliasVersionWeight":{"description":"The traffic-shifting configuration of a Lambda function alias.","properties":{"functionVersion":{"type":"string","description":"The qualifier of the second version."},"functionWeight":{"type":"number","description":"The percentage of traffic that the alias routes to the second version."}},"type":"object","required":["functionVersion","functionWeight"]},"aws-native:lambda:CapacityProviderArchitecture":{"description":"Specifications for the types of EC2 instances that the capacity provider can use.","type":"string","enum":[{"name":"X8664","value":"x86_64"},{"name":"Arm64","value":"arm64"}]},"aws-native:lambda:CapacityProviderInstanceRequirements":{"description":"Specifications that define the characteristics and constraints for compute instances used by the capacity provider.","properties":{"allowedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"A list of EC2 instance types that the capacity provider is allowed to use. If not specified, all compatible instance types are allowed."},"architectures":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:CapacityProviderArchitecture"},"description":"A list of supported CPU architectures for compute instances. Valid values include ``x86_64`` and ``arm64``."},"excludedInstanceTypes":{"type":"array","items":{"type":"string"},"description":"A list of EC2 instance types that the capacity provider should not use, even if they meet other requirements."}},"type":"object"},"aws-native:lambda:CapacityProviderPermissionsConfig":{"description":"Configuration that specifies the permissions required for the capacity provider to manage compute resources.","properties":{"capacityProviderOperatorRoleArn":{"type":"string","description":"The ARN of the IAM role that the capacity provider uses to manage compute instances and other AWS resources."}},"type":"object","required":["capacityProviderOperatorRoleArn"]},"aws-native:lambda:CapacityProviderPredefinedMetricType":{"description":"The predefined metric for target tracking.","type":"string","enum":[{"name":"LambdaCapacityProviderAverageCpuUtilization","value":"LambdaCapacityProviderAverageCPUUtilization"}]},"aws-native:lambda:CapacityProviderScalingConfig":{"description":"Configuration that defines how the capacity provider scales compute instances based on demand and policies.","properties":{"maxVCpuCount":{"type":"integer","description":"The maximum number of vCPUs that the capacity provider can provision across all compute instances."},"scalingMode":{"$ref":"#/types/aws-native:lambda:CapacityProviderScalingMode","description":"The scaling mode that determines how the capacity provider responds to changes in demand."},"scalingPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:CapacityProviderTargetTrackingScalingPolicy"},"description":"A list of target tracking scaling policies for the capacity provider."}},"type":"object"},"aws-native:lambda:CapacityProviderScalingMode":{"description":"The scaling mode for the capacity provider.","type":"string","enum":[{"name":"Auto","value":"Auto"},{"name":"Manual","value":"Manual"}]},"aws-native:lambda:CapacityProviderState":{"description":"The current state of the capacity provider. Indicates whether the provider is being created, is active and ready for use, has failed, or is being deleted.","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"Active","value":"Active"},{"name":"Failed","value":"Failed"},{"name":"Deleting","value":"Deleting"}]},"aws-native:lambda:CapacityProviderTag":{"description":"A key-value pair that provides metadata for the capacity provider.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key"]},"aws-native:lambda:CapacityProviderTargetTrackingScalingPolicy":{"description":"A scaling policy for the capacity provider that automatically adjusts capacity to maintain a target value for a specific metric.","properties":{"predefinedMetricType":{"$ref":"#/types/aws-native:lambda:CapacityProviderPredefinedMetricType","description":"The predefined metric type to track for scaling decisions."},"targetValue":{"type":"number","description":"The target value for the metric that the scaling policy attempts to maintain through scaling actions."}},"type":"object","required":["predefinedMetricType","targetValue"]},"aws-native:lambda:CapacityProviderVpcConfig":{"description":"VPC configuration that specifies the network settings for compute instances managed by the capacity provider.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs that control network access for compute instances managed by the capacity provider."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs where the capacity provider launches compute instances."}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:lambda:CodeSigningConfigAllowedPublishers":{"description":"When the CodeSigningConfig is later on attached to a function, the function code will be expected to be signed by profiles from this list","properties":{"signingProfileVersionArns":{"type":"array","items":{"type":"string"},"description":"List of Signing profile version Arns"}},"type":"object","required":["signingProfileVersionArns"]},"aws-native:lambda:CodeSigningConfigCodeSigningPolicies":{"description":"Policies to control how to act if a signature is invalid","properties":{"untrustedArtifactOnDeployment":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigCodeSigningPoliciesUntrustedArtifactOnDeployment","description":"Indicates how Lambda operations involve updating the code artifact will operate. Default to Warn if not provided"}},"type":"object","required":["untrustedArtifactOnDeployment"]},"aws-native:lambda:CodeSigningConfigCodeSigningPoliciesUntrustedArtifactOnDeployment":{"description":"Indicates how Lambda operations involve updating the code artifact will operate. Default to Warn if not provided","type":"string","enum":[{"name":"Warn","value":"Warn"},{"name":"Enforce","value":"Enforce"}]},"aws-native:lambda:CodeSigningConfigTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lambda:EventInvokeConfigDestinationConfig":{"description":"A destination for events after they have been sent to a function for processing.","properties":{"onFailure":{"$ref":"#/types/aws-native:lambda:EventInvokeConfigOnFailure","description":"The destination configuration for failed invocations.\n\n\u003e When using an Amazon SQS queue as a destination, FIFO queues cannot be used."},"onSuccess":{"$ref":"#/types/aws-native:lambda:EventInvokeConfigOnSuccess","description":"The destination configuration for successful invocations.\n\n\u003e When using an Amazon SQS queue as a destination, FIFO queues cannot be used."}},"type":"object"},"aws-native:lambda:EventInvokeConfigOnFailure":{"description":"The destination configuration for failed invocations.","properties":{"destination":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination resource."}},"type":"object","required":["destination"]},"aws-native:lambda:EventInvokeConfigOnSuccess":{"description":"The destination configuration for successful invocations.","properties":{"destination":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination resource."}},"type":"object","required":["destination"]},"aws-native:lambda:EventSourceMappingAmazonManagedKafkaEventSourceConfig":{"description":"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source.","properties":{"consumerGroupId":{"type":"string","description":"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see [Customizable consumer group ID](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-consumer-group-id)."},"schemaRegistryConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaRegistryConfig","description":"Specific configuration settings for a Kafka schema registry."}},"type":"object"},"aws-native:lambda:EventSourceMappingDestinationConfig":{"description":"A configuration object that specifies the destination of an event after Lambda processes it. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).","properties":{"onFailure":{"$ref":"#/types/aws-native:lambda:EventSourceMappingOnFailure","description":"The destination configuration for failed invocations."}},"type":"object"},"aws-native:lambda:EventSourceMappingDocumentDbEventSourceConfig":{"description":"Specific configuration settings for a DocumentDB event source.","properties":{"collectionName":{"type":"string","description":"The name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections."},"databaseName":{"type":"string","description":"The name of the database to consume within the DocumentDB cluster."},"fullDocument":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDocumentDbEventSourceConfigFullDocument","description":"Determines what DocumentDB sends to your event stream during document update operations. If set to UpdateLookup, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes."}},"type":"object"},"aws-native:lambda:EventSourceMappingDocumentDbEventSourceConfigFullDocument":{"description":"Determines what DocumentDB sends to your event stream during document update operations. If set to UpdateLookup, DocumentDB sends a delta describing the changes, along with a copy of the entire document. Otherwise, DocumentDB sends only a partial document that contains the changes.","type":"string","enum":[{"name":"UpdateLookup","value":"UpdateLookup"},{"name":"Default","value":"Default"}]},"aws-native:lambda:EventSourceMappingEndpoints":{"description":"The list of bootstrap servers for your Kafka brokers in the following format: ``\"KafkaBootstrapServers\": [\"abc.xyz.com:xxxx\",\"abc2.xyz.com:xxxx\"]``.","properties":{"kafkaBootstrapServers":{"type":"array","items":{"type":"string"},"description":"The list of bootstrap servers for your Kafka brokers in the following format: ``\"KafkaBootstrapServers\": [\"abc.xyz.com:xxxx\",\"abc2.xyz.com:xxxx\"]``."}},"type":"object"},"aws-native:lambda:EventSourceMappingFilter":{"description":"A structure within a ``FilterCriteria`` object that defines an event filtering pattern.","properties":{"pattern":{"type":"string","description":"A filter pattern. For more information on the syntax of a filter pattern, see [Filter rule syntax](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-syntax)."}},"type":"object"},"aws-native:lambda:EventSourceMappingFilterCriteria":{"description":"An object that contains the filters for an event source.","properties":{"filters":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFilter"},"description":"A list of filters."}},"type":"object"},"aws-native:lambda:EventSourceMappingFunctionResponseTypesItem":{"type":"string","enum":[{"name":"ReportBatchItemFailures","value":"ReportBatchItemFailures"}]},"aws-native:lambda:EventSourceMappingLoggingConfig":{"description":"The function's Amazon CloudWatch Logs configuration settings.","properties":{"systemLogLevel":{"$ref":"#/types/aws-native:lambda:EventSourceMappingLoggingConfigSystemLogLevel","description":"Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest."}},"type":"object"},"aws-native:lambda:EventSourceMappingLoggingConfigSystemLogLevel":{"description":"Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest.","type":"string","enum":[{"name":"Debug","value":"DEBUG"},{"name":"Info","value":"INFO"},{"name":"Warn","value":"WARN"}]},"aws-native:lambda:EventSourceMappingMetricsConfig":{"description":"The metrics configuration for your event source. Use this configuration object to define which metrics you want your event source mapping to produce.","properties":{"metrics":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingMetricsConfigMetricsItem"},"description":"The metrics you want your event source mapping to produce. Include ``EventCount`` to receive event source mapping metrics related to the number of events processed by your event source mapping. For more information about these metrics, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics)."}},"type":"object"},"aws-native:lambda:EventSourceMappingMetricsConfigMetricsItem":{"type":"string","enum":[{"name":"EventCount","value":"EventCount"},{"name":"ErrorCount","value":"ErrorCount"},{"name":"KafkaMetrics","value":"KafkaMetrics"}]},"aws-native:lambda:EventSourceMappingOnFailure":{"description":"A destination for events that failed processing. For more information, see [Adding a destination](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-async-destinations).","properties":{"destination":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination resource.\n To retain records of unsuccessful [asynchronous invocations](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations), you can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3 bucket, Lambda function, or Amazon EventBridge event bus as the destination.\n  Amazon SNS destinations have a message size limit of 256 KB. If the combined size of the function request and response payload exceeds the limit, Lambda will drop the payload when sending ``OnFailure`` event to the destination. For details on this behavior, refer to [Retaining records of asynchronous invocations](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html).\n  To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination), you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination."}},"type":"object"},"aws-native:lambda:EventSourceMappingProvisionedPollerConfig":{"description":"The [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode) configuration for the event source. Use Provisioned Mode to customize the minimum and maximum number of event pollers for your event source.","properties":{"maximumPollers":{"type":"integer","description":"The maximum number of event pollers this event source can scale up to. For Amazon SQS events source mappings, default is 200, and minimum value allowed is 2. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 200, and minimum value allowed is 1."},"minimumPollers":{"type":"integer","description":"The minimum number of event pollers this event source can scale down to. For Amazon SQS events source mappings, default is 2, and minimum 2 required. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 1."},"pollerGroupName":{"type":"string","description":"(Amazon MSK and self-managed Apache Kafka) The name of the provisioned poller group. Use this option to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000."}},"type":"object"},"aws-native:lambda:EventSourceMappingScalingConfig":{"description":"(Amazon SQS only) The scaling configuration for the event source. To remove the configuration, pass an empty value.","properties":{"maximumConcurrency":{"type":"integer","description":"Limits the number of concurrent instances that the SQS event source can invoke."}},"type":"object"},"aws-native:lambda:EventSourceMappingSchemaRegistryAccessConfig":{"description":"Specific access configuration settings that tell Lambda how to authenticate with your schema registry.\n If you're working with an GLU schema registry, don't provide authentication details in this object. Instead, ensure that your execution role has the required permissions for Lambda to access your cluster.\n If you're working with a Confluent schema registry, choose the authentication method in the ``Type`` field, and provide the ASMlong secret ARN in the ``URI`` field.","properties":{"type":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaRegistryAccessConfigType","description":"The type of authentication Lambda uses to access your schema registry."},"uri":{"type":"string","description":"The URI of the secret (Secrets Manager secret ARN) to authenticate with your schema registry."}},"type":"object"},"aws-native:lambda:EventSourceMappingSchemaRegistryAccessConfigType":{"description":"The type of authentication Lambda uses to access your schema registry.","type":"string","enum":[{"name":"BasicAuth","value":"BASIC_AUTH"},{"name":"ClientCertificateTlsAuth","value":"CLIENT_CERTIFICATE_TLS_AUTH"},{"name":"ServerRootCaCertificate","value":"SERVER_ROOT_CA_CERTIFICATE"}]},"aws-native:lambda:EventSourceMappingSchemaRegistryConfig":{"description":"Specific configuration settings for a Kafka schema registry.","properties":{"accessConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaRegistryAccessConfig"},"description":"An array of access configuration objects that tell Lambda how to authenticate with your schema registry."},"eventRecordFormat":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaRegistryConfigEventRecordFormat","description":"The record format that Lambda delivers to your function after schema validation.\n  +  Choose ``JSON`` to have Lambda deliver the record to your function as a standard JSON object.\n  +  Choose ``SOURCE`` to have Lambda deliver the record to your function in its original source format. Lambda removes all schema metadata, such as the schema ID, before sending the record to your function."},"schemaRegistryUri":{"type":"string","description":"The URI for your schema registry. The correct URI format depends on the type of schema registry you're using.\n  +  For GLU schema registries, use the ARN of the registry.\n  +  For Confluent schema registries, use the URL of the registry."},"schemaValidationConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaValidationConfig"},"description":"An array of schema validation configuration objects, which tell Lambda the message attributes you want to validate and filter using your schema registry."}},"type":"object"},"aws-native:lambda:EventSourceMappingSchemaRegistryConfigEventRecordFormat":{"description":"The record format that Lambda delivers to your function after schema validation.\n  +  Choose ``JSON`` to have Lambda deliver the record to your function as a standard JSON object.\n  +  Choose ``SOURCE`` to have Lambda deliver the record to your function in its original source format. Lambda removes all schema metadata, such as the schema ID, before sending the record to your function.","type":"string","enum":[{"name":"Json","value":"JSON"},{"name":"Source","value":"SOURCE"}]},"aws-native:lambda:EventSourceMappingSchemaValidationConfig":{"description":"Specific schema validation configuration settings that tell Lambda the message attributes you want to validate and filter using your schema registry.","properties":{"attribute":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaValidationConfigAttribute","description":"The attributes you want your schema registry to validate and filter for. If you selected ``JSON`` as the ``EventRecordFormat``, Lambda also deserializes the selected message attributes."}},"type":"object"},"aws-native:lambda:EventSourceMappingSchemaValidationConfigAttribute":{"description":"The attributes you want your schema registry to validate and filter for. If you selected ``JSON`` as the ``EventRecordFormat``, Lambda also deserializes the selected message attributes.","type":"string","enum":[{"name":"Key","value":"KEY"},{"name":"Value","value":"VALUE"}]},"aws-native:lambda:EventSourceMappingSelfManagedEventSource":{"description":"The self-managed Apache Kafka cluster for your event source.","properties":{"endpoints":{"$ref":"#/types/aws-native:lambda:EventSourceMappingEndpoints","description":"The list of bootstrap servers for your Kafka brokers in the following format: ``\"KafkaBootstrapServers\": [\"abc.xyz.com:xxxx\",\"abc2.xyz.com:xxxx\"]``."}},"type":"object"},"aws-native:lambda:EventSourceMappingSelfManagedKafkaEventSourceConfig":{"description":"Specific configuration settings for a self-managed Apache Kafka event source.","properties":{"consumerGroupId":{"type":"string","description":"The identifier for the Kafka consumer group to join. The consumer group ID must be unique among all your Kafka event sources. After creating a Kafka event source mapping with the consumer group ID specified, you cannot update this value. For more information, see [Customizable consumer group ID](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka-process.html#services-smaa-topic-add)."},"schemaRegistryConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSchemaRegistryConfig","description":"Specific configuration settings for a Kafka schema registry."}},"type":"object"},"aws-native:lambda:EventSourceMappingSourceAccessConfiguration":{"description":"An array of the authentication protocol, VPC components, or virtual host to secure and define your event source.","properties":{"type":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSourceAccessConfigurationType","description":"The type of authentication protocol, VPC components, or virtual host for your event source. For example: ``\"Type\":\"SASL_SCRAM_512_AUTH\"``.\n  +  ``BASIC_AUTH`` – (Amazon MQ) The ASMlong secret that stores your broker credentials.\n  +  ``BASIC_AUTH`` – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.\n  +  ``VPC_SUBNET`` – (Self-managed Apache Kafka) The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.\n  +  ``VPC_SECURITY_GROUP`` – (Self-managed Apache Kafka) The VPC security group used to manage access to your self-managed Apache Kafka brokers.\n  +  ``SASL_SCRAM_256_AUTH`` – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.\n  +  ``SASL_SCRAM_512_AUTH`` – (Amazon MSK, Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.\n  +  ``VIRTUAL_HOST`` –- (RabbitMQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.\n  +  ``CLIENT_CERTIFICATE_TLS_AUTH`` – (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.\n  +  ``SERVER_ROOT_CA_CERTIFICATE`` – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers."},"uri":{"type":"string","description":"The value for your chosen configuration in ``Type``. For example: ``\"URI\": \"arn:aws:secretsmanager:us-east-1:01234567890:secret:MyBrokerSecretName\"``."}},"type":"object"},"aws-native:lambda:EventSourceMappingSourceAccessConfigurationType":{"description":"The type of authentication protocol, VPC components, or virtual host for your event source. For example: ``\"Type\":\"SASL_SCRAM_512_AUTH\"``.\n  +  ``BASIC_AUTH`` – (Amazon MQ) The ASMlong secret that stores your broker credentials.\n  +  ``BASIC_AUTH`` – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL/PLAIN authentication of your Apache Kafka brokers.\n  +  ``VPC_SUBNET`` – (Self-managed Apache Kafka) The subnets associated with your VPC. Lambda connects to these subnets to fetch data from your self-managed Apache Kafka cluster.\n  +  ``VPC_SECURITY_GROUP`` – (Self-managed Apache Kafka) The VPC security group used to manage access to your self-managed Apache Kafka brokers.\n  +  ``SASL_SCRAM_256_AUTH`` – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-256 authentication of your self-managed Apache Kafka brokers.\n  +  ``SASL_SCRAM_512_AUTH`` – (Amazon MSK, Self-managed Apache Kafka) The Secrets Manager ARN of your secret key used for SASL SCRAM-512 authentication of your self-managed Apache Kafka brokers.\n  +  ``VIRTUAL_HOST`` –- (RabbitMQ) The name of the virtual host in your RabbitMQ broker. Lambda uses this RabbitMQ host as the event source. This property cannot be specified in an UpdateEventSourceMapping API call.\n  +  ``CLIENT_CERTIFICATE_TLS_AUTH`` – (Amazon MSK, self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.\n  +  ``SERVER_ROOT_CA_CERTIFICATE`` – (Self-managed Apache Kafka) The Secrets Manager ARN of your secret key containing the root CA certificate (X.509 PEM) used for TLS encryption of your Apache Kafka brokers.","type":"string","enum":[{"name":"BasicAuth","value":"BASIC_AUTH"},{"name":"VpcSubnet","value":"VPC_SUBNET"},{"name":"VpcSecurityGroup","value":"VPC_SECURITY_GROUP"},{"name":"SaslScram512Auth","value":"SASL_SCRAM_512_AUTH"},{"name":"SaslScram256Auth","value":"SASL_SCRAM_256_AUTH"},{"name":"VirtualHost","value":"VIRTUAL_HOST"},{"name":"ClientCertificateTlsAuth","value":"CLIENT_CERTIFICATE_TLS_AUTH"},{"name":"ServerRootCaCertificate","value":"SERVER_ROOT_CA_CERTIFICATE"}]},"aws-native:lambda:EventSourceMappingTag":{"description":"A [tag](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the event source mapping.","properties":{"key":{"type":"string","description":"The key for this tag."},"value":{"type":"string","description":"The value for this tag."}},"type":"object","required":["key"]},"aws-native:lambda:FunctionArchitecturesItem":{"type":"string","enum":[{"name":"X8664","value":"x86_64"},{"name":"Arm64","value":"arm64"}]},"aws-native:lambda:FunctionCapacityProviderConfig":{"description":"Configuration for the capacity provider that manages compute resources for Lambda functions.","properties":{"lambdaManagedInstancesCapacityProviderConfig":{"$ref":"#/types/aws-native:lambda:FunctionLambdaManagedInstancesCapacityProviderConfig","description":"Configuration for Lambda-managed instances used by the capacity provider."}},"type":"object","required":["lambdaManagedInstancesCapacityProviderConfig"]},"aws-native:lambda:FunctionCode":{"description":"The [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) for a Lambda function. To deploy a function defined as a container image, you specify the location of a container image in the Amazon ECR registry. For a .zip file deployment package, you can specify the location of an object in Amazon S3. For Node.js and Python functions, you can specify the function code inline in the template.\n  When you specify source code inline for a Node.js function, the ``index`` file that CFN creates uses the extension ``.js``. This means that Node.js treats the file as a CommonJS module.\n  Changes to a deployment package in Amazon S3 or a container image in ECR are not detected automatically during stack updates. To update the function code, change the object key or version in the template.","properties":{"imageUri":{"type":"string","description":"URI of a [container image](https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html) in the Amazon ECR registry."},"s3Bucket":{"type":"string","description":"An Amazon S3 bucket in the same AWS-Region as your function. The bucket can be in a different AWS-account."},"s3Key":{"type":"string","description":"The Amazon S3 key of the deployment package."},"s3ObjectVersion":{"type":"string","description":"For versioned objects, the version of the deployment package object to use."},"sourceKmsKeyArn":{"type":"string","description":"The ARN of the KMSlong (KMS) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an [owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk)."},"zipFile":{"type":"string","description":"(Node.js and Python) The source code of your Lambda function. If you include your function source inline with this parameter, CFN places it in a file named ``index`` and zips it to create a [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html). This zip file cannot exceed 4MB. For the ``Handler`` property, the first part of the handler identifier must be ``index``. For example, ``index.handler``.\n  When you specify source code inline for a Node.js function, the ``index`` file that CFN creates uses the extension ``.js``. This means that Node.js treats the file as a CommonJS module.\n When using Node.js 24 or later, Node.js can automatically detect if a ``.js`` file should be treated as CommonJS or as an ES module. To enable auto-detection, add the ``--experimental-detect-module`` flag to the ``NODE_OPTIONS`` environment variable. For more information, see [Experimental Node.js features](https://docs.aws.amazon.com//lambda/latest/dg/lambda-nodejs.html#nodejs-experimental-features).\n   For JSON, you must escape quotes and special characters such as newline (``\\n``) with a backslash.\n If you specify a function that interacts with an AWS CloudFormation custom resource, you don't have to write your own functions to send responses to the custom resource that invoked the function. AWS CloudFormation provides a response module ([cfn-response](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-lambda-function-code-cfnresponsemodule.html)) that simplifies sending responses. See [Using Lambda with CloudFormation](https://docs.aws.amazon.com/lambda/latest/dg/services-cloudformation.html) for details."}},"type":"object"},"aws-native:lambda:FunctionDeadLetterConfig":{"description":"The [dead-letter queue](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html#invocation-dlq) for failed asynchronous invocations.","properties":{"targetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Amazon SQS queue or Amazon SNS topic."}},"type":"object"},"aws-native:lambda:FunctionDurableConfig":{"description":"Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout and retention period for execution history.","properties":{"executionTimeout":{"type":"integer","description":"The maximum time (in seconds) that a durable execution can run before timing out. This timeout applies to the entire durable execution, not individual function invocations."},"retentionPeriodInDays":{"type":"integer","description":"The number of days to retain execution history after a durable execution completes. After this period, execution history is no longer available through the GetDurableExecutionHistory API."}},"type":"object","required":["executionTimeout"]},"aws-native:lambda:FunctionEnvironment":{"description":"A function's environment variable settings. You can use environment variables to adjust your function's behavior without updating code. An environment variable is a pair of strings that are stored in a function's version-specific configuration.","properties":{"variables":{"type":"object","additionalProperties":{"type":"string"},"description":"Environment variable key-value pairs. For more information, see [Using Lambda environment variables](https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html).\n If the value of the environment variable is a time or a duration, enclose the value in quotes."}},"type":"object"},"aws-native:lambda:FunctionEphemeralStorage":{"description":"The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB.","properties":{"size":{"type":"integer","description":"The size of the function's ``/tmp`` directory."}},"type":"object","required":["size"]},"aws-native:lambda:FunctionFileSystemConfig":{"description":"Details about the connection between a Lambda function and an [Amazon EFS file system](https://docs.aws.amazon.com/lambda/latest/dg/configuration-filesystem.html).","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon EFS access point that provides access to the file system."},"localMountPath":{"type":"string","description":"The path where the function can access the file system, starting with ``/mnt/``."}},"type":"object","required":["arn","localMountPath"]},"aws-native:lambda:FunctionImageConfig":{"description":"Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms).","properties":{"command":{"type":"array","items":{"type":"string"},"description":"Specifies parameters that you want to pass in with ENTRYPOINT. You can specify a maximum of 1,500 parameters in the list."},"entryPoint":{"type":"array","items":{"type":"string"},"description":"Specifies the entry point to their application, which is typically the location of the runtime executable. You can specify a maximum of 1,500 string entries in the list."},"workingDirectory":{"type":"string","description":"Specifies the working directory. The length of the directory string cannot exceed 1,000 characters."}},"type":"object"},"aws-native:lambda:FunctionLambdaManagedInstancesCapacityProviderConfig":{"description":"Configuration for Lambda-managed instances used by the capacity provider.","properties":{"capacityProviderArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the capacity provider."},"executionEnvironmentMemoryGiBPerVCpu":{"type":"number","description":"The amount of memory in GiB allocated per vCPU for execution environments."},"perExecutionEnvironmentMaxConcurrency":{"type":"integer","description":"The maximum number of concurrent executions that can run on each execution environment."}},"type":"object","required":["capacityProviderArn"]},"aws-native:lambda:FunctionLoggingConfig":{"description":"The function's Amazon CloudWatch Logs configuration settings.","properties":{"applicationLogLevel":{"$ref":"#/types/aws-native:lambda:FunctionLoggingConfigApplicationLogLevel","description":"Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level of detail and lower, where ``TRACE`` is the highest level and ``FATAL`` is the lowest."},"logFormat":{"$ref":"#/types/aws-native:lambda:FunctionLoggingConfigLogFormat","description":"The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON."},"logGroup":{"type":"string","description":"The name of the Amazon CloudWatch log group the function sends logs to. By default, Lambda functions send logs to a default log group named ``/aws/lambda/\u003cfunction name\u003e``. To use a different log group, enter an existing log group or enter a new log group name."},"systemLogLevel":{"$ref":"#/types/aws-native:lambda:FunctionLoggingConfigSystemLogLevel","description":"Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest."}},"type":"object"},"aws-native:lambda:FunctionLoggingConfigApplicationLogLevel":{"description":"Set this property to filter the application logs for your function that Lambda sends to CloudWatch. Lambda only sends application logs at the selected level of detail and lower, where ``TRACE`` is the highest level and ``FATAL`` is the lowest.","type":"string","enum":[{"name":"Trace","value":"TRACE"},{"name":"Debug","value":"DEBUG"},{"name":"Info","value":"INFO"},{"name":"Warn","value":"WARN"},{"name":"Error","value":"ERROR"},{"name":"Fatal","value":"FATAL"}]},"aws-native:lambda:FunctionLoggingConfigLogFormat":{"description":"The format in which Lambda sends your function's application and system logs to CloudWatch. Select between plain text and structured JSON.","type":"string","enum":[{"name":"Text","value":"Text"},{"name":"Json","value":"JSON"}]},"aws-native:lambda:FunctionLoggingConfigSystemLogLevel":{"description":"Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest.","type":"string","enum":[{"name":"Debug","value":"DEBUG"},{"name":"Info","value":"INFO"},{"name":"Warn","value":"WARN"}]},"aws-native:lambda:FunctionPackageType":{"description":"The type of deployment package. Set to ``Image`` for container image and set ``Zip`` for .zip file archive.","type":"string","enum":[{"name":"Image","value":"Image"},{"name":"Zip","value":"Zip"}]},"aws-native:lambda:FunctionRecursiveLoop":{"description":"The function recursion configuration.","type":"string","enum":[{"name":"Allow","value":"Allow"},{"name":"Terminate","value":"Terminate"}]},"aws-native:lambda:FunctionRuntimeManagementConfig":{"description":"Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html).","properties":{"runtimeVersionArn":{"type":"string","description":"The ARN of the runtime version you want the function to use.\n  This is only required if you're using the *Manual* runtime update mode."},"updateRuntimeOn":{"$ref":"#/types/aws-native:lambda:FunctionRuntimeManagementConfigUpdateRuntimeOn","description":"Specify the runtime update mode.\n  +  *Auto (default)* - Automatically update to the most recent and secure runtime version using a [Two-phase runtime version rollout](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-two-phase). This is the best choice for most customers to ensure they always benefit from runtime updates.\n  +  *FunctionUpdate* - LAM updates the runtime of you function to the most recent and secure runtime version when you update your function. This approach synchronizes runtime updates with function deployments, giving you control over when runtime updates are applied and allowing you to detect and mitigate rare runtime update incompatibilities early. When using this setting, you need to regularly update your functions to keep their runtime up-to-date.\n  +  *Manual* - You specify a runtime version in your function configuration. The function will use this runtime version indefinitely. In the rare case where a new runtime version is incompatible with an existing function, this allows you to roll back your function to an earlier runtime version. For more information, see [Roll back a runtime version](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-rollback).\n  \n *Valid Values*: ``Auto`` | ``FunctionUpdate`` | ``Manual``"}},"type":"object","required":["updateRuntimeOn"]},"aws-native:lambda:FunctionRuntimeManagementConfigUpdateRuntimeOn":{"description":"Specify the runtime update mode.\n  +  *Auto (default)* - Automatically update to the most recent and secure runtime version using a [Two-phase runtime version rollout](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-two-phase). This is the best choice for most customers to ensure they always benefit from runtime updates.\n  +  *FunctionUpdate* - LAM updates the runtime of you function to the most recent and secure runtime version when you update your function. This approach synchronizes runtime updates with function deployments, giving you control over when runtime updates are applied and allowing you to detect and mitigate rare runtime update incompatibilities early. When using this setting, you need to regularly update your functions to keep their runtime up-to-date.\n  +  *Manual* - You specify a runtime version in your function configuration. The function will use this runtime version indefinitely. In the rare case where a new runtime version is incompatible with an existing function, this allows you to roll back your function to an earlier runtime version. For more information, see [Roll back a runtime version](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html#runtime-management-rollback).\n  \n *Valid Values*: ``Auto`` | ``FunctionUpdate`` | ``Manual``","type":"string","enum":[{"name":"Auto","value":"Auto"},{"name":"FunctionUpdate","value":"FunctionUpdate"},{"name":"Manual","value":"Manual"}]},"aws-native:lambda:FunctionScalingConfig":{"description":"Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned.","properties":{"maxExecutionEnvironments":{"type":"integer","description":"The maximum number of execution environments that can be provisioned for the function."},"minExecutionEnvironments":{"type":"integer","description":"The minimum number of execution environments to maintain for the function."}},"type":"object"},"aws-native:lambda:FunctionSnapStart":{"description":"The function's [SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting.","properties":{"applyOn":{"$ref":"#/types/aws-native:lambda:FunctionSnapStartApplyOn","description":"Set ``ApplyOn`` to ``PublishedVersions`` to create a snapshot of the initialized execution environment when you publish a function version."}},"type":"object","required":["applyOn"]},"aws-native:lambda:FunctionSnapStartApplyOn":{"description":"Set ``ApplyOn`` to ``PublishedVersions`` to create a snapshot of the initialized execution environment when you publish a function version.","type":"string","enum":[{"name":"PublishedVersions","value":"PublishedVersions"},{"name":"None","value":"None"}]},"aws-native:lambda:FunctionSnapStartResponse":{"description":"The function's [SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting.","properties":{"applyOn":{"$ref":"#/types/aws-native:lambda:FunctionSnapStartResponseApplyOn","description":"When set to ``PublishedVersions``, Lambda creates a snapshot of the execution environment when you publish a function version."},"optimizationStatus":{"$ref":"#/types/aws-native:lambda:FunctionSnapStartResponseOptimizationStatus","description":"When you provide a [qualified Amazon Resource Name (ARN)](https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html#versioning-versions-using), this response element indicates whether SnapStart is activated for the specified function version."}},"type":"object"},"aws-native:lambda:FunctionSnapStartResponseApplyOn":{"description":"When set to ``PublishedVersions``, Lambda creates a snapshot of the execution environment when you publish a function version.","type":"string","enum":[{"name":"PublishedVersions","value":"PublishedVersions"},{"name":"None","value":"None"}]},"aws-native:lambda:FunctionSnapStartResponseOptimizationStatus":{"description":"When you provide a [qualified Amazon Resource Name (ARN)](https://docs.aws.amazon.com/lambda/latest/dg/configuration-versions.html#versioning-versions-using), this response element indicates whether SnapStart is activated for the specified function version.","type":"string","enum":[{"name":"On","value":"On"},{"name":"Off","value":"Off"}]},"aws-native:lambda:FunctionTag":{"description":"A [tag](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the function.","properties":{"key":{"type":"string","description":"The key for this tag."},"value":{"type":"string","description":"The value for this tag."}},"type":"object","required":["key"]},"aws-native:lambda:FunctionTenancyConfig":{"description":"Specifies the tenant isolation mode configuration for a Lambda function. This allows you to configure specific tenant isolation strategies for your function invocations. Tenant isolation configuration cannot be modified after function creation.","properties":{"tenantIsolationMode":{"$ref":"#/types/aws-native:lambda:FunctionTenancyConfigTenantIsolationMode","description":"Tenant isolation mode allows for invocation to be sent to a corresponding execution environment dedicated to a specific tenant ID."}},"type":"object","required":["tenantIsolationMode"]},"aws-native:lambda:FunctionTenancyConfigTenantIsolationMode":{"description":"Tenant isolation mode allows for invocation to be sent to a corresponding execution environment dedicated to a specific tenant ID.","type":"string","enum":[{"name":"PerTenant","value":"PER_TENANT"}]},"aws-native:lambda:FunctionTracingConfig":{"description":"The function's [](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html) tracing configuration. To sample and record incoming requests, set ``Mode`` to ``Active``.","properties":{"mode":{"$ref":"#/types/aws-native:lambda:FunctionTracingConfigMode","description":"The tracing mode."}},"type":"object"},"aws-native:lambda:FunctionTracingConfigMode":{"description":"The tracing mode.","type":"string","enum":[{"name":"Active","value":"Active"},{"name":"PassThrough","value":"PassThrough"}]},"aws-native:lambda:FunctionVpcConfig":{"description":"The VPC security groups and subnets that are attached to a Lambda function. When you connect a function to a VPC, Lambda creates an elastic network interface for each combination of security group and subnet in the function's VPC configuration. The function can only access resources and the internet through that VPC. For more information, see [VPC Settings](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html).\n  When you delete a function, CFN monitors the state of its network interfaces and waits for Lambda to delete them before proceeding. If the VPC is defined in the same stack, the network interfaces need to be deleted by Lambda before CFN can delete the VPC's resources.\n To monitor network interfaces, CFN needs the ``ec2:DescribeNetworkInterfaces`` permission. It obtains this from the user or role that modifies the stack. If you don't provide this permission, CFN does not wait for network interfaces to be deleted.","properties":{"ipv6AllowedForDualStack":{"type":"boolean","description":"Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC security group IDs."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC subnet IDs."}},"type":"object"},"aws-native:lambda:LayerVersionContent":{"properties":{"s3Bucket":{"type":"string","description":"The Amazon S3 bucket of the layer archive."},"s3Key":{"type":"string","description":"The Amazon S3 key of the layer archive."},"s3ObjectVersion":{"type":"string","description":"For versioned objects, the version of the layer archive object to use."}},"type":"object","required":["s3Bucket","s3Key"]},"aws-native:lambda:PermissionFunctionUrlAuthType":{"description":"The type of authentication that your function URL uses. Set to ``AWS_IAM`` if you want to restrict access to authenticated users only. Set to ``NONE`` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html).","type":"string","enum":[{"name":"AwsIam","value":"AWS_IAM"},{"name":"None","value":"NONE"}]},"aws-native:lambda:UrlAllowMethodsItem":{"type":"string","enum":[{"name":"Get","value":"GET"},{"name":"Put","value":"PUT"},{"name":"Head","value":"HEAD"},{"name":"Post","value":"POST"},{"name":"Patch","value":"PATCH"},{"name":"Delete","value":"DELETE"},{"value":"*"}]},"aws-native:lambda:UrlAuthType":{"description":"Can be either AWS_IAM if the requests are authorized via IAM, or NONE if no authorization is configured on the Function URL.","type":"string","enum":[{"name":"AwsIam","value":"AWS_IAM"},{"name":"None","value":"NONE"}]},"aws-native:lambda:UrlCors":{"properties":{"allowCredentials":{"type":"boolean","description":"Specifies whether credentials are included in the CORS request."},"allowHeaders":{"type":"array","items":{"type":"string"},"description":"Represents a collection of allowed headers."},"allowMethods":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:UrlAllowMethodsItem"},"description":"Represents a collection of allowed HTTP methods."},"allowOrigins":{"type":"array","items":{"type":"string"},"description":"Represents a collection of allowed origins."},"exposeHeaders":{"type":"array","items":{"type":"string"},"description":"Represents a collection of exposed headers."},"maxAge":{"type":"integer","description":"The maximum amount of time, in seconds, that browsers can cache results of a preflight request. By default, this is set to `0` , which means the browser will not cache results."}},"type":"object"},"aws-native:lambda:UrlInvokeMode":{"description":"The invocation mode for the function's URL. Set to BUFFERED if you want to buffer responses before returning them to the client. Set to RESPONSE_STREAM if you want to stream responses, allowing faster time to first byte and larger response payload sizes. If not set, defaults to BUFFERED.","type":"string","enum":[{"name":"Buffered","value":"BUFFERED"},{"name":"ResponseStream","value":"RESPONSE_STREAM"}]},"aws-native:lambda:VersionFunctionScalingConfig":{"description":"Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned.","properties":{"maxExecutionEnvironments":{"type":"integer","description":"The maximum number of execution environments that can be provisioned for the function."},"minExecutionEnvironments":{"type":"integer","description":"The minimum number of execution environments to maintain for the function."}},"type":"object"},"aws-native:lambda:VersionProvisionedConcurrencyConfiguration":{"description":"A provisioned concurrency configuration for a function's version.","properties":{"provisionedConcurrentExecutions":{"type":"integer","description":"The amount of provisioned concurrency to allocate for the version."}},"type":"object","required":["provisionedConcurrentExecutions"]},"aws-native:lambda:VersionRuntimePolicy":{"description":"Runtime Management Config of a function.","properties":{"runtimeVersionArn":{"type":"string","description":"The ARN of the runtime the function is configured to use. If the runtime update mode is manual, the ARN is returned, otherwise null is returned."},"updateRuntimeOn":{"type":"string","description":"The runtime update mode."}},"type":"object","required":["updateRuntimeOn"]},"aws-native:launchwizard:DeploymentStatus":{"type":"string","enum":[{"name":"Completed","value":"COMPLETED"},{"name":"Creating","value":"CREATING"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"DeleteInitiating","value":"DELETE_INITIATING"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"Deleted","value":"DELETED"},{"name":"Failed","value":"FAILED"},{"name":"InProgress","value":"IN_PROGRESS"},{"name":"Validating","value":"VALIDATING"}]},"aws-native:launchwizard:DeploymentTags":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:lex:BotAdvancedRecognitionSetting":{"properties":{"audioRecognitionStrategy":{"$ref":"#/types/aws-native:lex:BotAudioRecognitionStrategy","description":"Enables using the slot values as a custom vocabulary for recognizing user utterances."}},"type":"object"},"aws-native:lex:BotAliasAudioLogDestination":{"description":"The location of audio log files collected when conversation logging is enabled for a bot.","properties":{"s3Bucket":{"$ref":"#/types/aws-native:lex:BotAliasS3BucketLogDestination"}},"type":"object","required":["s3Bucket"]},"aws-native:lex:BotAliasAudioLogSetting":{"description":"Settings for logging audio of conversations between Amazon Lex and a user. You specify whether to log audio and the Amazon S3 bucket where the audio file is stored.","properties":{"destination":{"$ref":"#/types/aws-native:lex:BotAliasAudioLogDestination"},"enabled":{"type":"boolean"}},"type":"object","required":["destination","enabled"]},"aws-native:lex:BotAliasCloudWatchLogGroupLogDestination":{"properties":{"cloudWatchLogGroupArn":{"type":"string","description":"A string used to identify the groupArn for the Cloudwatch Log Group"},"logPrefix":{"type":"string","description":"A string containing the value for the Log Prefix"}},"type":"object","required":["cloudWatchLogGroupArn","logPrefix"]},"aws-native:lex:BotAliasCodeHookSpecification":{"description":"Contains information about code hooks that Amazon Lex calls during a conversation.","properties":{"lambdaCodeHook":{"$ref":"#/types/aws-native:lex:BotAliasLambdaCodeHook"}},"type":"object","required":["lambdaCodeHook"]},"aws-native:lex:BotAliasConversationLogSettings":{"description":"Contains information about code hooks that Amazon Lex calls during a conversation.","properties":{"audioLogSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotAliasAudioLogSetting"},"description":"The Amazon S3 settings for logging audio to an S3 bucket."},"textLogSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotAliasTextLogSetting"},"description":"The Amazon CloudWatch Logs settings for logging text and metadata."}},"type":"object"},"aws-native:lex:BotAliasLambdaCodeHook":{"description":"Contains information about code hooks that Amazon Lex calls during a conversation.","properties":{"codeHookInterfaceVersion":{"type":"string","description":"The version of the request-response that you want Amazon Lex to use to invoke your Lambda function."},"lambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lambda function."}},"type":"object","required":["codeHookInterfaceVersion","lambdaArn"]},"aws-native:lex:BotAliasLocaleSettings":{"description":"You can use this parameter to specify a specific Lambda function to run different functions in different locales.","properties":{"codeHookSpecification":{"$ref":"#/types/aws-native:lex:BotAliasCodeHookSpecification"},"enabled":{"type":"boolean","description":"Whether the Lambda code hook is enabled"}},"type":"object","required":["enabled"]},"aws-native:lex:BotAliasLocaleSettingsItem":{"description":"A locale setting in alias","properties":{"botAliasLocaleSetting":{"$ref":"#/types/aws-native:lex:BotAliasLocaleSettings"},"localeId":{"type":"string","description":"A string used to identify the locale"}},"type":"object","required":["botAliasLocaleSetting","localeId"]},"aws-native:lex:BotAliasS3BucketLogDestination":{"description":"Specifies an Amazon S3 bucket for logging audio conversations","properties":{"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Key Management Service (KMS) key for encrypting audio log files stored in an S3 bucket."},"logPrefix":{"type":"string","description":"The Amazon S3 key of the deployment package."},"s3BucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Amazon S3 bucket where audio log files are stored."}},"type":"object","required":["logPrefix","s3BucketArn"]},"aws-native:lex:BotAliasStatus":{"type":"string","enum":[{"name":"Creating","value":"Creating"},{"name":"Available","value":"Available"},{"name":"Deleting","value":"Deleting"},{"name":"Failed","value":"Failed"}]},"aws-native:lex:BotAliasTag":{"description":"A label for tagging Lex resources","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:lex:BotAliasTextLogDestination":{"description":"Defines the Amazon CloudWatch Logs destination log group for conversation text logs.","properties":{"cloudWatch":{"$ref":"#/types/aws-native:lex:BotAliasCloudWatchLogGroupLogDestination"}},"type":"object","required":["cloudWatch"]},"aws-native:lex:BotAliasTextLogSetting":{"description":"Contains information about code hooks that Amazon Lex calls during a conversation.","properties":{"destination":{"$ref":"#/types/aws-native:lex:BotAliasTextLogDestination"},"enabled":{"type":"boolean"}},"type":"object","required":["destination","enabled"]},"aws-native:lex:BotAllowedInputTypes":{"properties":{"allowAudioInput":{"type":"boolean"},"allowDtmfInput":{"type":"boolean"}},"type":"object","required":["allowAudioInput","allowDtmfInput"]},"aws-native:lex:BotAudioAndDtmfInputSpecification":{"properties":{"audioSpecification":{"$ref":"#/types/aws-native:lex:BotAudioSpecification"},"dtmfSpecification":{"$ref":"#/types/aws-native:lex:BotDtmfSpecification"},"startTimeoutMs":{"type":"integer"}},"type":"object","required":["startTimeoutMs"]},"aws-native:lex:BotAudioLogDestination":{"properties":{"s3Bucket":{"$ref":"#/types/aws-native:lex:BotS3BucketLogDestination"}},"type":"object","required":["s3Bucket"]},"aws-native:lex:BotAudioLogSetting":{"properties":{"destination":{"$ref":"#/types/aws-native:lex:BotAudioLogDestination"},"enabled":{"type":"boolean"}},"type":"object","required":["destination","enabled"]},"aws-native:lex:BotAudioRecognitionStrategy":{"type":"string","enum":[{"name":"UseSlotValuesAsCustomVocabulary","value":"UseSlotValuesAsCustomVocabulary"}]},"aws-native:lex:BotAudioSpecification":{"properties":{"endTimeoutMs":{"type":"integer"},"maxLengthMs":{"type":"integer"}},"type":"object","required":["endTimeoutMs","maxLengthMs"]},"aws-native:lex:BotBedrockAgentIntentConfiguration":{"properties":{"bedrockAgentConfiguration":{"$ref":"#/types/aws-native:lex:BotBedrockAgentIntentConfigurationBedrockAgentConfigurationProperties"},"bedrockAgentIntentKnowledgeBaseConfiguration":{"$ref":"#/types/aws-native:lex:BotBedrockAgentIntentConfigurationBedrockAgentIntentKnowledgeBaseConfigurationProperties"}},"type":"object"},"aws-native:lex:BotBedrockAgentIntentConfigurationBedrockAgentConfigurationProperties":{"properties":{"bedrockAgentAliasId":{"type":"string"},"bedrockAgentId":{"type":"string"}},"type":"object"},"aws-native:lex:BotBedrockAgentIntentConfigurationBedrockAgentIntentKnowledgeBaseConfigurationProperties":{"properties":{"bedrockKnowledgeBaseArn":{"type":"string"},"bedrockModelConfiguration":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecification"}},"type":"object","required":["bedrockKnowledgeBaseArn","bedrockModelConfiguration"]},"aws-native:lex:BotBedrockModelSpecification":{"properties":{"bedrockGuardrailConfiguration":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecificationBedrockGuardrailConfigurationProperties"},"bedrockModelCustomPrompt":{"type":"string"},"bedrockTraceStatus":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecificationBedrockTraceStatus"},"modelArn":{"type":"string","description":"The ARN of the foundation model used in descriptive bot building."}},"type":"object","required":["modelArn"]},"aws-native:lex:BotBedrockModelSpecificationBedrockGuardrailConfigurationProperties":{"properties":{"bedrockGuardrailIdentifier":{"type":"string"},"bedrockGuardrailVersion":{"type":"string"}},"type":"object"},"aws-native:lex:BotBedrockModelSpecificationBedrockTraceStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:lex:BotButton":{"properties":{"text":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["text","value"]},"aws-native:lex:BotCloudWatchLogGroupLogDestination":{"properties":{"cloudWatchLogGroupArn":{"type":"string"},"logPrefix":{"type":"string"}},"type":"object","required":["cloudWatchLogGroupArn","logPrefix"]},"aws-native:lex:BotCodeHookSpecification":{"properties":{"lambdaCodeHook":{"$ref":"#/types/aws-native:lex:BotLambdaCodeHook"}},"type":"object","required":["lambdaCodeHook"]},"aws-native:lex:BotCompositeSlotTypeSetting":{"properties":{"subSlots":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSubSlotTypeComposition"},"description":"Subslots in the composite slot."}},"type":"object"},"aws-native:lex:BotCondition":{"properties":{"expressionString":{"type":"string"}},"type":"object","required":["expressionString"]},"aws-native:lex:BotConditionalBranch":{"properties":{"condition":{"$ref":"#/types/aws-native:lex:BotCondition"},"name":{"type":"string"},"nextStep":{"$ref":"#/types/aws-native:lex:BotDialogState"},"response":{"$ref":"#/types/aws-native:lex:BotResponseSpecification"}},"type":"object","required":["condition","name","nextStep"]},"aws-native:lex:BotConditionalSpecification":{"properties":{"conditionalBranches":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotConditionalBranch"},"description":"A list of conditional branches. A conditional branch is made up of a condition, a response and a next step. The response and next step are executed when the condition is true."},"defaultBranch":{"$ref":"#/types/aws-native:lex:BotDefaultConditionalBranch","description":"The conditional branch that should be followed when the conditions for other branches are not satisfied. A conditional branch is made up of a condition, a response and a next step."},"isActive":{"type":"boolean","description":"Determines whether a conditional branch is active. When `IsActive` is false, the conditions are not evaluated."}},"type":"object","required":["conditionalBranches","defaultBranch","isActive"]},"aws-native:lex:BotConversationLogSettings":{"properties":{"audioLogSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotAudioLogSetting"},"description":"The Amazon S3 settings for logging audio to an S3 bucket."},"textLogSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotTextLogSetting"},"description":"The Amazon CloudWatch Logs settings for logging text and metadata."}},"type":"object"},"aws-native:lex:BotCustomPayload":{"properties":{"value":{"type":"string"}},"type":"object","required":["value"]},"aws-native:lex:BotCustomVocabulary":{"properties":{"customVocabularyItems":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotCustomVocabularyItem"},"description":"Specifies a list of words that you expect to be used during a conversation with your bot."}},"type":"object","required":["customVocabularyItems"]},"aws-native:lex:BotCustomVocabularyItem":{"properties":{"displayAs":{"type":"string"},"phrase":{"type":"string"},"weight":{"type":"integer"}},"type":"object","required":["phrase"]},"aws-native:lex:BotDeepgramSpeechModelConfig":{"properties":{"apiTokenSecretArn":{"type":"string"},"modelId":{"type":"string"}},"type":"object","required":["apiTokenSecretArn"]},"aws-native:lex:BotDefaultConditionalBranch":{"properties":{"nextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"The next step in the conversation."},"response":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input."}},"type":"object"},"aws-native:lex:BotDialogAction":{"properties":{"slotToElicit":{"type":"string","description":"If the dialog action is `ElicitSlot` , defines the slot to elicit from the user."},"suppressNextMessage":{"type":"boolean","description":"When true the next message for the intent is not used."},"type":{"$ref":"#/types/aws-native:lex:BotDialogActionType","description":"The action that the bot should execute."}},"type":"object","required":["type"]},"aws-native:lex:BotDialogActionType":{"type":"string","enum":[{"name":"CloseIntent","value":"CloseIntent"},{"name":"ConfirmIntent","value":"ConfirmIntent"},{"name":"ElicitIntent","value":"ElicitIntent"},{"name":"ElicitSlot","value":"ElicitSlot"},{"name":"StartIntent","value":"StartIntent"},{"name":"FulfillIntent","value":"FulfillIntent"},{"name":"EndConversation","value":"EndConversation"},{"name":"EvaluateConditional","value":"EvaluateConditional"},{"name":"InvokeDialogCodeHook","value":"InvokeDialogCodeHook"}]},"aws-native:lex:BotDialogCodeHookInvocationSetting":{"properties":{"enableCodeHookInvocation":{"type":"boolean","description":"Indicates whether a Lambda function should be invoked for the dialog."},"invocationLabel":{"type":"string","description":"A label that indicates the dialog step from which the dialog code hook is happening."},"isActive":{"type":"boolean","description":"Determines whether a dialog code hook is used when the intent is activated."},"postCodeHookSpecification":{"$ref":"#/types/aws-native:lex:BotPostDialogCodeHookInvocationSpecification","description":"Contains the responses and actions that Amazon Lex takes after the Lambda function is complete."}},"type":"object","required":["enableCodeHookInvocation","isActive","postCodeHookSpecification"]},"aws-native:lex:BotDialogCodeHookSetting":{"properties":{"enabled":{"type":"boolean","description":"Enables the dialog code hook so that it processes user requests."}},"type":"object","required":["enabled"]},"aws-native:lex:BotDialogState":{"properties":{"dialogAction":{"$ref":"#/types/aws-native:lex:BotDialogAction","description":"Defines the action that the bot executes at runtime when the conversation reaches this step."},"intent":{"$ref":"#/types/aws-native:lex:BotIntentOverride","description":"Override settings to configure the intent state."},"sessionAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSessionAttribute"},"description":"Map of key/value pairs representing session-specific context information. It contains application information passed between Amazon Lex and a client application."}},"type":"object"},"aws-native:lex:BotDtmfSpecification":{"properties":{"deletionCharacter":{"type":"string"},"endCharacter":{"type":"string"},"endTimeoutMs":{"type":"integer"},"maxLength":{"type":"integer"}},"type":"object","required":["deletionCharacter","endCharacter","endTimeoutMs","maxLength"]},"aws-native:lex:BotElicitationCodeHookInvocationSetting":{"properties":{"enableCodeHookInvocation":{"type":"boolean","description":"Indicates whether a Lambda function should be invoked for the dialog."},"invocationLabel":{"type":"string","description":"A label that indicates the dialog step from which the dialog code hook is happening."}},"type":"object","required":["enableCodeHookInvocation"]},"aws-native:lex:BotExternalSourceSetting":{"properties":{"grammarSlotTypeSetting":{"$ref":"#/types/aws-native:lex:BotGrammarSlotTypeSetting","description":"Settings required for a slot type based on a grammar that you provide."}},"type":"object"},"aws-native:lex:BotFulfillmentCodeHookSetting":{"properties":{"enabled":{"type":"boolean","description":"Indicates whether a Lambda function should be invoked to fulfill a specific intent."},"fulfillmentUpdatesSpecification":{"$ref":"#/types/aws-native:lex:BotFulfillmentUpdatesSpecification","description":"Provides settings for update messages sent to the user for long-running Lambda fulfillment functions. Fulfillment updates can be used only with streaming conversations."},"isActive":{"type":"boolean","description":"Determines whether the fulfillment code hook is used. When `active` is false, the code hook doesn't run."},"postFulfillmentStatusSpecification":{"$ref":"#/types/aws-native:lex:BotPostFulfillmentStatusSpecification","description":"Provides settings for messages sent to the user for after the Lambda fulfillment function completes. Post-fulfillment messages can be sent for both streaming and non-streaming conversations."}},"type":"object","required":["enabled"]},"aws-native:lex:BotFulfillmentStartResponseSpecification":{"properties":{"allowInterrupt":{"type":"boolean","description":"Determines whether the user can interrupt the start message while it is playing."},"delayInSeconds":{"type":"integer","description":"The delay between when the Lambda fulfillment function starts running and the start message is played. If the Lambda function returns before the delay is over, the start message isn't played."},"messageGroups":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotMessageGroup"},"description":"1 - 5 message groups that contain start messages. Amazon Lex chooses one of the messages to play to the user."}},"type":"object","required":["delayInSeconds","messageGroups"]},"aws-native:lex:BotFulfillmentUpdateResponseSpecification":{"properties":{"allowInterrupt":{"type":"boolean","description":"Determines whether the user can interrupt an update message while it is playing."},"frequencyInSeconds":{"type":"integer","description":"The frequency that a message is sent to the user. When the period ends, Amazon Lex chooses a message from the message groups and plays it to the user. If the fulfillment Lambda returns before the first period ends, an update message is not played to the user."},"messageGroups":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotMessageGroup"},"description":"1 - 5 message groups that contain update messages. Amazon Lex chooses one of the messages to play to the user."}},"type":"object","required":["frequencyInSeconds","messageGroups"]},"aws-native:lex:BotFulfillmentUpdatesSpecification":{"properties":{"active":{"type":"boolean","description":"Determines whether fulfillment updates are sent to the user. When this field is true, updates are sent.\n\nIf the `active` field is set to true, the `startResponse` , `updateResponse` , and `timeoutInSeconds` fields are required."},"startResponse":{"$ref":"#/types/aws-native:lex:BotFulfillmentStartResponseSpecification","description":"Provides configuration information for the message sent to users when the fulfillment Lambda functions starts running."},"timeoutInSeconds":{"type":"integer","description":"The length of time that the fulfillment Lambda function should run before it times out."},"updateResponse":{"$ref":"#/types/aws-native:lex:BotFulfillmentUpdateResponseSpecification","description":"Provides configuration information for messages sent periodically to the user while the fulfillment Lambda function is running."}},"type":"object","required":["active"]},"aws-native:lex:BotGenerativeAiSettings":{"properties":{"buildtimeSettings":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsBuildtimeSettingsProperties"},"runtimeSettings":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsProperties"}},"type":"object"},"aws-native:lex:BotGenerativeAiSettingsBuildtimeSettingsProperties":{"properties":{"descriptiveBotBuilderSpecification":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsBuildtimeSettingsPropertiesDescriptiveBotBuilderSpecificationProperties"},"sampleUtteranceGenerationSpecification":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsBuildtimeSettingsPropertiesSampleUtteranceGenerationSpecificationProperties"}},"type":"object"},"aws-native:lex:BotGenerativeAiSettingsBuildtimeSettingsPropertiesDescriptiveBotBuilderSpecificationProperties":{"properties":{"bedrockModelSpecification":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecification"},"enabled":{"type":"boolean"}},"type":"object","required":["enabled"]},"aws-native:lex:BotGenerativeAiSettingsBuildtimeSettingsPropertiesSampleUtteranceGenerationSpecificationProperties":{"properties":{"bedrockModelSpecification":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecification"},"enabled":{"type":"boolean"}},"type":"object","required":["enabled"]},"aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsProperties":{"properties":{"nluImprovementSpecification":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsPropertiesNluImprovementSpecificationProperties"},"slotResolutionImprovementSpecification":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsPropertiesSlotResolutionImprovementSpecificationProperties"}},"type":"object"},"aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsPropertiesNluImprovementSpecificationProperties":{"properties":{"assistedNluMode":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsPropertiesNluImprovementSpecificationPropertiesAssistedNluMode"},"enabled":{"type":"boolean"},"intentDisambiguationSettings":{"$ref":"#/types/aws-native:lex:BotIntentDisambiguationSettings"}},"type":"object","required":["enabled"]},"aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsPropertiesNluImprovementSpecificationPropertiesAssistedNluMode":{"type":"string","enum":[{"name":"Primary","value":"Primary"},{"name":"Fallback","value":"Fallback"}]},"aws-native:lex:BotGenerativeAiSettingsRuntimeSettingsPropertiesSlotResolutionImprovementSpecificationProperties":{"properties":{"bedrockModelSpecification":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecification"},"enabled":{"type":"boolean"}},"type":"object","required":["enabled"]},"aws-native:lex:BotGrammarSlotTypeSetting":{"properties":{"source":{"$ref":"#/types/aws-native:lex:BotGrammarSlotTypeSource","description":"The source of the grammar used to create the slot type."}},"type":"object"},"aws-native:lex:BotGrammarSlotTypeSource":{"properties":{"kmsKeyArn":{"type":"string","description":"The AWS  key required to decrypt the contents of the grammar, if any."},"s3BucketName":{"type":"string","description":"The name of the Amazon S3 bucket that contains the grammar source."},"s3ObjectKey":{"type":"string","description":"The path to the grammar in the Amazon S3 bucket."}},"type":"object","required":["s3BucketName","s3ObjectKey"]},"aws-native:lex:BotImageResponseCard":{"properties":{"buttons":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotButton"}},"imageUrl":{"type":"string"},"subtitle":{"type":"string"},"title":{"type":"string"}},"type":"object","required":["title"]},"aws-native:lex:BotInitialResponseSetting":{"properties":{"codeHook":{"$ref":"#/types/aws-native:lex:BotDialogCodeHookInvocationSetting","description":"Settings that specify the dialog code hook that is called by Amazon Lex at a step of the conversation."},"conditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"Provides a list of conditional branches. Branches are evaluated in the order that they are entered in the list. The first branch with a condition that evaluates to true is executed. The last branch in the list is the default branch. The default branch should not have any condition expression. The default branch is executed if no other branch has a matching condition."},"initialResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input."},"nextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"The next step in the conversation."}},"type":"object"},"aws-native:lex:BotInputContext":{"properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:lex:BotIntent":{"properties":{"bedrockAgentIntentConfiguration":{"$ref":"#/types/aws-native:lex:BotBedrockAgentIntentConfiguration"},"description":{"type":"string","description":"Resource Type definition for the intent."},"dialogCodeHook":{"$ref":"#/types/aws-native:lex:BotDialogCodeHookSetting","description":"Specifies that Amazon Lex invokes the alias Lambda function for each user input. You can invoke this Lambda function to personalize user interaction."},"displayName":{"type":"string"},"fulfillmentCodeHook":{"$ref":"#/types/aws-native:lex:BotFulfillmentCodeHookSetting","description":"Specifies that Amazon Lex invokes the alias Lambda function when the intent is ready for fulfillment. You can invoke this function to complete the bot's transaction with the user."},"initialResponseSetting":{"$ref":"#/types/aws-native:lex:BotInitialResponseSetting","description":"Configuration setting for a response sent to the user before Amazon Lex starts eliciting slots."},"inputContexts":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotInputContext"},"description":"A list of contexts that must be active for this intent to be considered by Amazon Lex ."},"intentClosingSetting":{"$ref":"#/types/aws-native:lex:BotIntentClosingSetting","description":"Sets the response that Amazon Lex sends to the user when the intent is closed."},"intentConfirmationSetting":{"$ref":"#/types/aws-native:lex:BotIntentConfirmationSetting","description":"Provides prompts that Amazon Lex sends to the user to confirm the completion of an intent. If the user answers \"no,\" the settings contain a statement that is sent to the user to end the intent."},"kendraConfiguration":{"$ref":"#/types/aws-native:lex:BotKendraConfiguration","description":"Provides configuration information for the `AMAZON.KendraSearchIntent` intent. When you use this intent, Amazon Lex searches the specified Amazon Kendra index and returns documents from the index that match the user's utterance."},"name":{"type":"string","description":"The name of the intent. Intent names must be unique within the locale that contains the intent and can't match the name of any built-in intent."},"outputContexts":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotOutputContext"},"description":"A list of contexts that the intent activates when it is fulfilled."},"parentIntentSignature":{"type":"string","description":"A unique identifier for the built-in intent to base this intent on."},"qInConnectIntentConfiguration":{"$ref":"#/types/aws-native:lex:BotQInConnectIntentConfiguration"},"qnAIntentConfiguration":{"$ref":"#/types/aws-native:lex:BotQnAIntentConfiguration"},"sampleUtterances":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSampleUtterance"},"description":"A list of utterances that a user might say to signal the intent."},"slotPriorities":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlotPriority"},"description":"Indicates the priority for slots. Amazon Lex prompts the user for slot values in priority order."},"slots":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlot"},"description":"A list of slots that the intent requires for fulfillment."}},"type":"object","required":["name"]},"aws-native:lex:BotIntentClosingSetting":{"properties":{"closingResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"The response that Amazon Lex sends to the user when the intent is complete."},"conditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches associated with the intent's closing response. These branches are executed when the `nextStep` attribute is set to `EvalutateConditional` ."},"isActive":{"type":"boolean","description":"Specifies whether an intent's closing response is used. When this field is false, the closing response isn't sent to the user. If the `IsActive` field isn't specified, the default is true."},"nextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot executes after playing the intent's closing response."}},"type":"object"},"aws-native:lex:BotIntentConfirmationSetting":{"properties":{"codeHook":{"$ref":"#/types/aws-native:lex:BotDialogCodeHookInvocationSetting","description":"The `DialogCodeHookInvocationSetting` object associated with intent's confirmation step. The dialog code hook is triggered based on these invocation settings when the confirmation next step or declination next step or failure next step is `InvokeDialogCodeHook` ."},"confirmationConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the intent is closed."},"confirmationNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot executes when the customer confirms the intent."},"confirmationResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input."},"declinationConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the intent is declined."},"declinationNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot executes when the customer declines the intent."},"declinationResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"When the user answers \"no\" to the question defined in `promptSpecification` , Amazon Lex responds with this response to acknowledge that the intent was canceled."},"elicitationCodeHook":{"$ref":"#/types/aws-native:lex:BotElicitationCodeHookInvocationSetting","description":"The `DialogCodeHookInvocationSetting` used when the code hook is invoked during confirmation prompt retries."},"failureConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"Provides a list of conditional branches. Branches are evaluated in the order that they are entered in the list. The first branch with a condition that evaluates to true is executed. The last branch in the list is the default branch. The default branch should not have any condition expression. The default branch is executed if no other branch has a matching condition."},"failureNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"The next step to take in the conversation if the confirmation step fails."},"failureResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input when the intent confirmation fails."},"isActive":{"type":"boolean","description":"Specifies whether the intent's confirmation is sent to the user. When this field is false, confirmation and declination responses aren't sent. If the `IsActive` field isn't specified, the default is true."},"promptSpecification":{"$ref":"#/types/aws-native:lex:BotPromptSpecification","description":"Prompts the user to confirm the intent. This question should have a yes or no answer.\n\nAmazon Lex uses this prompt to ensure that the user acknowledges that the intent is ready for fulfillment. For example, with the `OrderPizza` intent, you might want to confirm that the order is correct before placing it. For other intents, such as intents that simply respond to user questions, you might not need to ask the user for confirmation before providing the information."}},"type":"object","required":["promptSpecification"]},"aws-native:lex:BotIntentDisambiguationSettings":{"properties":{"customDisambiguationMessage":{"type":"string","description":"Provides a custom message that will be displayed before presenting the disambiguation options to users. This message helps set the context for users and can be customized to match your bot's tone and brand. If not specified, a default message will be used."},"enabled":{"type":"boolean","description":"Determines whether the Intent Disambiguation feature is enabled. When set to `true` , Amazon Lex will present disambiguation options to users when multiple intents could match their input, with the default being `false` ."},"maxDisambiguationIntents":{"type":"integer","description":"Specifies the maximum number of intent options (2-5) to present to users when disambiguation is needed. This setting determines how many intent options will be shown to users when the system detects ambiguous input. The default value is 3."}},"type":"object","required":["enabled"]},"aws-native:lex:BotIntentOverride":{"properties":{"name":{"type":"string","description":"The name of the intent. Only required when you're switching intents."},"slots":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlotValueOverrideMap"},"description":"A map of all of the slot value overrides for the intent. The name of the slot maps to the value of the slot. Slots that are not included in the map aren't overridden."}},"type":"object"},"aws-native:lex:BotKendraConfiguration":{"properties":{"kendraIndex":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Kendra index that you want the `AMAZON.KendraSearchIntent` intent to search. The index must be in the same account and Region as the Amazon Lex bot."},"queryFilterString":{"type":"string","description":"A query filter that Amazon Lex sends to Amazon Kendra to filter the response from a query. The filter is in the format defined by Amazon Kendra. For more information, see [Filtering queries](https://docs.aws.amazon.com/kendra/latest/dg/filtering.html) ."},"queryFilterStringEnabled":{"type":"boolean","description":"Determines whether the `AMAZON.KendraSearchIntent` intent uses a custom query string to query the Amazon Kendra index."}},"type":"object","required":["kendraIndex"]},"aws-native:lex:BotLambdaCodeHook":{"properties":{"codeHookInterfaceVersion":{"type":"string"},"lambdaArn":{"type":"string"}},"type":"object","required":["codeHookInterfaceVersion","lambdaArn"]},"aws-native:lex:BotLocale":{"properties":{"customVocabulary":{"$ref":"#/types/aws-native:lex:BotCustomVocabulary","description":"Specifies a custom vocabulary to use with a specific locale."},"description":{"type":"string","description":"A description of the bot locale. Use this to help identify the bot locale in lists."},"generativeAiSettings":{"$ref":"#/types/aws-native:lex:BotGenerativeAiSettings"},"intents":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotIntent"},"description":"One or more intents defined for the locale."},"localeId":{"type":"string","description":"The identifier of the language and locale that the bot will be used in. The string must match one of the supported locales."},"nluConfidenceThreshold":{"type":"number","description":"Determines the threshold where Amazon Lex will insert the `AMAZON.FallbackIntent` , `AMAZON.KendraSearchIntent` , or both when returning alternative intents. You must configure an `AMAZON.FallbackIntent` . `AMAZON.KendraSearchIntent` is only inserted if it is configured for the bot."},"slotTypes":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlotType"},"description":"One or more slot types defined for the locale."},"speechDetectionSensitivity":{"$ref":"#/types/aws-native:lex:BotSpeechDetectionSensitivity"},"speechRecognitionSettings":{"$ref":"#/types/aws-native:lex:BotSpeechRecognitionSettings"},"unifiedSpeechSettings":{"$ref":"#/types/aws-native:lex:BotUnifiedSpeechSettings"},"voiceSettings":{"$ref":"#/types/aws-native:lex:BotVoiceSettings","description":"Defines settings for using an Amazon Polly voice to communicate with a user.\n\nValid values include:\n\n- `standard`\n- `neural`\n- `long-form`\n- `generative`"}},"type":"object","required":["localeId","nluConfidenceThreshold"]},"aws-native:lex:BotMessage":{"properties":{"customPayload":{"$ref":"#/types/aws-native:lex:BotCustomPayload"},"imageResponseCard":{"$ref":"#/types/aws-native:lex:BotImageResponseCard"},"plainTextMessage":{"$ref":"#/types/aws-native:lex:BotPlainTextMessage"},"ssmlMessage":{"$ref":"#/types/aws-native:lex:BotSsmlMessage"}},"type":"object"},"aws-native:lex:BotMessageGroup":{"properties":{"message":{"$ref":"#/types/aws-native:lex:BotMessage"},"variations":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotMessage"}}},"type":"object","required":["message"]},"aws-native:lex:BotMessageSelectionStrategy":{"type":"string","enum":[{"name":"Random","value":"Random"},{"name":"Ordered","value":"Ordered"}]},"aws-native:lex:BotMultipleValuesSetting":{"properties":{"allowMultipleValues":{"type":"boolean","description":"Indicates whether a slot can return multiple values. When `true` , the slot may return more than one value in a response. When `false` , the slot returns only a single value.\n\nMulti-value slots are only available in the en-US locale. If you set this value to `true` in any other locale, Amazon Lex throws a `ValidationException` .\n\nIf the `allowMutlipleValues` is not set, the default value is `false` ."}},"type":"object"},"aws-native:lex:BotObfuscationSetting":{"properties":{"obfuscationSettingType":{"$ref":"#/types/aws-native:lex:BotObfuscationSettingObfuscationSettingType","description":"Value that determines whether Amazon Lex obscures slot values in conversation logs. The default is to obscure the values."}},"type":"object","required":["obfuscationSettingType"]},"aws-native:lex:BotObfuscationSettingObfuscationSettingType":{"description":"Value that determines whether Amazon Lex obscures slot values in conversation logs. The default is to obscure the values.","type":"string","enum":[{"name":"None","value":"None"},{"name":"DefaultObfuscation","value":"DefaultObfuscation"}]},"aws-native:lex:BotOutputContext":{"properties":{"name":{"type":"string"},"timeToLiveInSeconds":{"type":"integer"},"turnsToLive":{"type":"integer"}},"type":"object","required":["name","timeToLiveInSeconds","turnsToLive"]},"aws-native:lex:BotPlainTextMessage":{"properties":{"value":{"type":"string"}},"type":"object","required":["value"]},"aws-native:lex:BotPostDialogCodeHookInvocationSpecification":{"properties":{"failureConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the dialog code hook throws an exception or returns with the `State` field of the `Intent` object set to `Failed` ."},"failureNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step the bot runs after the dialog code hook throws an exception or returns with the `State` field of the `Intent` object set to `Failed` ."},"failureResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input when the code hook fails."},"successConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the dialog code hook finishes successfully."},"successNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifics the next step the bot runs after the dialog code hook finishes successfully."},"successResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond when the code hook succeeds."},"timeoutConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate if the code hook times out."},"timeoutNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot runs when the code hook times out."},"timeoutResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond to the user input when the code hook times out."}},"type":"object"},"aws-native:lex:BotPostFulfillmentStatusSpecification":{"properties":{"failureConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the fulfillment code hook throws an exception or returns with the `State` field of the `Intent` object set to `Failed` ."},"failureNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step the bot runs after the fulfillment code hook throws an exception or returns with the `State` field of the `Intent` object set to `Failed` ."},"failureResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond when fulfillment isn't successful."},"successConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the fulfillment code hook finishes successfully."},"successNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step in the conversation that Amazon Lex invokes when the fulfillment code hook completes successfully."},"successResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond when the fulfillment is successful."},"timeoutConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate if the fulfillment code hook times out."},"timeoutNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot runs when the fulfillment code hook times out."},"timeoutResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond when fulfillment isn't completed within the timeout period."}},"type":"object"},"aws-native:lex:BotPromptAttemptSpecification":{"properties":{"allowInterrupt":{"type":"boolean"},"allowedInputTypes":{"$ref":"#/types/aws-native:lex:BotAllowedInputTypes"},"audioAndDtmfInputSpecification":{"$ref":"#/types/aws-native:lex:BotAudioAndDtmfInputSpecification"},"textInputSpecification":{"$ref":"#/types/aws-native:lex:BotTextInputSpecification"}},"type":"object","required":["allowedInputTypes"]},"aws-native:lex:BotPromptSpecification":{"properties":{"allowInterrupt":{"type":"boolean","description":"Indicates whether the user can interrupt a speech prompt from the bot."},"maxRetries":{"type":"integer","description":"The maximum number of times the bot tries to elicit a response from the user using this prompt."},"messageGroupsList":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotMessageGroup"},"description":"A collection of messages that Amazon Lex can send to the user. Amazon Lex chooses the actual message to send at runtime."},"messageSelectionStrategy":{"$ref":"#/types/aws-native:lex:BotMessageSelectionStrategy","description":"Indicates how a message is selected from a message group among retries."},"promptAttemptsSpecification":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:lex:BotPromptAttemptSpecification"},"description":"Specifies the advanced settings on each attempt of the prompt."}},"type":"object","required":["maxRetries","messageGroupsList"]},"aws-native:lex:BotQInConnectIntentConfiguration":{"properties":{"qInConnectAssistantConfiguration":{"$ref":"#/types/aws-native:lex:BotQInConnectIntentConfigurationQInConnectAssistantConfigurationProperties"}},"type":"object"},"aws-native:lex:BotQInConnectIntentConfigurationQInConnectAssistantConfigurationProperties":{"properties":{"assistantArn":{"type":"string"}},"type":"object","required":["assistantArn"]},"aws-native:lex:BotQnAIntentConfiguration":{"properties":{"bedrockModelConfiguration":{"$ref":"#/types/aws-native:lex:BotBedrockModelSpecification"},"dataSourceConfiguration":{"$ref":"#/types/aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationProperties","description":"Contains details about the configuration of the data source used for the `AMAZON.QnAIntent` ."}},"type":"object","required":["bedrockModelConfiguration","dataSourceConfiguration"]},"aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationProperties":{"description":"Contains details about the configuration of the data source used for the `AMAZON.QnAIntent` .","properties":{"bedrockKnowledgeStoreConfiguration":{"$ref":"#/types/aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationProperties"},"kendraConfiguration":{"$ref":"#/types/aws-native:lex:BotQnAKendraConfiguration"},"opensearchConfiguration":{"$ref":"#/types/aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationProperties"}},"type":"object"},"aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationProperties":{"properties":{"bedrockKnowledgeBaseArn":{"type":"string"},"bkbExactResponseFields":{"$ref":"#/types/aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationPropertiesBkbExactResponseFieldsProperties"},"exactResponse":{"type":"boolean"}},"type":"object"},"aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationPropertiesBkbExactResponseFieldsProperties":{"properties":{"answerField":{"type":"string"}},"type":"object"},"aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationProperties":{"properties":{"domainEndpoint":{"type":"string"},"exactResponse":{"type":"boolean"},"exactResponseFields":{"$ref":"#/types/aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationPropertiesExactResponseFieldsProperties"},"includeFields":{"type":"array","items":{"type":"string"}},"indexName":{"type":"string"}},"type":"object"},"aws-native:lex:BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationPropertiesExactResponseFieldsProperties":{"properties":{"answerField":{"type":"string"},"questionField":{"type":"string"}},"type":"object"},"aws-native:lex:BotQnAKendraConfiguration":{"properties":{"exactResponse":{"type":"boolean","description":"Specifies whether to return an exact response from the Amazon Kendra index or to let the Amazon Bedrock model you select generate a response based on the results. To use this feature, you must first add FAQ questions to your index by following the steps at [Adding frequently asked questions (FAQs) to an index](https://docs.aws.amazon.com/kendra/latest/dg/in-creating-faq.html) ."},"kendraIndex":{"type":"string","description":"The ARN of the Amazon Kendra index to use."},"queryFilterString":{"type":"string","description":"Contains the Amazon Kendra filter string to use if enabled. For more information on the Amazon Kendra search filter JSON format, see [Using document attributes to filter search results](https://docs.aws.amazon.com/kendra/latest/dg/filtering.html#search-filtering) ."},"queryFilterStringEnabled":{"type":"boolean","description":"Specifies whether to enable an Amazon Kendra filter string or not."}},"type":"object","required":["exactResponse","kendraIndex","queryFilterStringEnabled"]},"aws-native:lex:BotReplication":{"properties":{"replicaRegions":{"type":"array","items":{"type":"string"}}},"type":"object","required":["replicaRegions"]},"aws-native:lex:BotResponseSpecification":{"properties":{"allowInterrupt":{"type":"boolean","description":"Indicates whether the user can interrupt a speech response from Amazon Lex."},"messageGroupsList":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotMessageGroup"},"description":"A collection of responses that Amazon Lex can send to the user. Amazon Lex chooses the actual response to send at runtime."}},"type":"object","required":["messageGroupsList"]},"aws-native:lex:BotS3BucketLogDestination":{"properties":{"kmsKeyArn":{"type":"string"},"logPrefix":{"type":"string"},"s3BucketArn":{"type":"string"}},"type":"object","required":["logPrefix","s3BucketArn"]},"aws-native:lex:BotS3Location":{"properties":{"s3Bucket":{"type":"string","description":"The S3 bucket name."},"s3ObjectKey":{"type":"string","description":"The path and file name to the object in the S3 bucket."},"s3ObjectVersion":{"type":"string","description":"The version of the object in the S3 bucket."}},"type":"object","required":["s3Bucket","s3ObjectKey"]},"aws-native:lex:BotSampleUtterance":{"properties":{"utterance":{"type":"string"}},"type":"object","required":["utterance"]},"aws-native:lex:BotSampleValue":{"properties":{"value":{"type":"string"}},"type":"object","required":["value"]},"aws-native:lex:BotSessionAttribute":{"properties":{"key":{"type":"string","description":"The name of the session attribute."},"value":{"type":"string","description":"The session-specific context information for the session attribute."}},"type":"object","required":["key"]},"aws-native:lex:BotSlot":{"properties":{"description":{"type":"string","description":"The description of the slot."},"multipleValuesSetting":{"$ref":"#/types/aws-native:lex:BotMultipleValuesSetting","description":"Indicates whether a slot can return multiple values."},"name":{"type":"string","description":"The name given to the slot."},"obfuscationSetting":{"$ref":"#/types/aws-native:lex:BotObfuscationSetting","description":"Determines whether the contents of the slot are obfuscated in Amazon CloudWatch Logs logs. Use obfuscated slots to protect information such as personally identifiable information (PII) in logs."},"slotTypeName":{"type":"string","description":"The name of the slot type that this slot is based on. The slot type defines the acceptable values for the slot."},"subSlotSetting":{"$ref":"#/types/aws-native:lex:BotSubSlotSetting"},"valueElicitationSetting":{"$ref":"#/types/aws-native:lex:BotSlotValueElicitationSetting","description":"Determines the slot resolution strategy that Amazon Lex uses to return slot type values. The field can be set to one of the following values:\n\n- ORIGINAL_VALUE - Returns the value entered by the user, if the user value is similar to a slot value.\n- TOP_RESOLUTION - If there is a resolution list for the slot, return the first value in the resolution list as the slot type value. If there is no resolution list, null is returned.\n\nIf you don't specify the `valueSelectionStrategy` , the default is `ORIGINAL_VALUE` ."}},"type":"object","required":["name","slotTypeName","valueElicitationSetting"]},"aws-native:lex:BotSlotCaptureSetting":{"properties":{"captureConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate after the slot value is captured."},"captureNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot runs when the slot value is captured before the code hook times out."},"captureResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input."},"codeHook":{"$ref":"#/types/aws-native:lex:BotDialogCodeHookInvocationSetting","description":"Code hook called after Amazon Lex successfully captures a slot value."},"elicitationCodeHook":{"$ref":"#/types/aws-native:lex:BotElicitationCodeHookInvocationSetting","description":"Code hook called when Amazon Lex doesn't capture a slot value."},"failureConditional":{"$ref":"#/types/aws-native:lex:BotConditionalSpecification","description":"A list of conditional branches to evaluate when the slot value isn't captured."},"failureNextStep":{"$ref":"#/types/aws-native:lex:BotDialogState","description":"Specifies the next step that the bot runs when the slot value code is not recognized."},"failureResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"Specifies a list of message groups that Amazon Lex uses to respond the user input when the slot fails to be captured."}},"type":"object"},"aws-native:lex:BotSlotConstraint":{"type":"string","enum":[{"name":"Required","value":"Required"},{"name":"Optional","value":"Optional"}]},"aws-native:lex:BotSlotDefaultValue":{"properties":{"defaultValue":{"type":"string","description":"The default value to use when a user doesn't provide a value for a slot."}},"type":"object","required":["defaultValue"]},"aws-native:lex:BotSlotDefaultValueSpecification":{"properties":{"defaultValueList":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlotDefaultValue"},"description":"A list of default values. Amazon Lex chooses the default value to use in the order that they are presented in the list."}},"type":"object","required":["defaultValueList"]},"aws-native:lex:BotSlotPriority":{"properties":{"priority":{"type":"integer"},"slotName":{"type":"string"}},"type":"object","required":["priority","slotName"]},"aws-native:lex:BotSlotShape":{"type":"string","enum":[{"name":"Scalar","value":"Scalar"},{"name":"List","value":"List"}]},"aws-native:lex:BotSlotType":{"properties":{"compositeSlotTypeSetting":{"$ref":"#/types/aws-native:lex:BotCompositeSlotTypeSetting"},"description":{"type":"string","description":"A description of the slot type. Use the description to help identify the slot type in lists."},"externalSourceSetting":{"$ref":"#/types/aws-native:lex:BotExternalSourceSetting","description":"Sets the type of external information used to create the slot type."},"name":{"type":"string","description":"The name of the slot type. A slot type name must be unique withing the account."},"parentSlotTypeSignature":{"type":"string","description":"The built-in slot type used as a parent of this slot type. When you define a parent slot type, the new slot type has the configuration of the parent lot type.\n\nOnly `AMAZON.AlphaNumeric` is supported."},"slotTypeValues":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlotTypeValue"},"description":"A list of SlotTypeValue objects that defines the values that the slot type can take. Each value can have a list of synonyms, additional values that help train the machine learning model about the values that it resolves for the slot."},"valueSelectionSetting":{"$ref":"#/types/aws-native:lex:BotSlotValueSelectionSetting","description":"Determines the slot resolution strategy that Amazon Lex uses to return slot type values. The field can be set to one of the following values:\n\n- `ORIGINAL_VALUE` - Returns the value entered by the user, if the user value is similar to the slot value.\n- `TOP_RESOLUTION` - If there is a resolution list for the slot, return the first value in the resolution list as the slot type value. If there is no resolution list, null is returned.\n\nIf you don't specify the `valueSelectionStrategy` , the default is `ORIGINAL_VALUE` ."}},"type":"object","required":["name"]},"aws-native:lex:BotSlotTypeValue":{"properties":{"sampleValue":{"$ref":"#/types/aws-native:lex:BotSampleValue"},"synonyms":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSampleValue"}}},"type":"object","required":["sampleValue"]},"aws-native:lex:BotSlotValue":{"properties":{"interpretedValue":{"type":"string","description":"The value that Amazon Lex determines for the slot. The actual value depends on the setting of the value selection strategy for the bot. You can choose to use the value entered by the user, or you can have Amazon Lex choose the first value in the `resolvedValues` list."}},"type":"object"},"aws-native:lex:BotSlotValueElicitationSetting":{"properties":{"defaultValueSpecification":{"$ref":"#/types/aws-native:lex:BotSlotDefaultValueSpecification","description":"A list of default values for a slot. Default values are used when Amazon Lex hasn't determined a value for a slot. You can specify default values from context variables, session attributes, and defined values."},"promptSpecification":{"$ref":"#/types/aws-native:lex:BotPromptSpecification","description":"The prompt that Amazon Lex uses to elicit the slot value from the user."},"sampleUtterances":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSampleUtterance"},"description":"If you know a specific pattern that users might respond to an Amazon Lex request for a slot value, you can provide those utterances to improve accuracy. This is optional. In most cases, Amazon Lex is capable of understanding user utterances."},"slotCaptureSetting":{"$ref":"#/types/aws-native:lex:BotSlotCaptureSetting","description":"Specifies the settings that Amazon Lex uses when a slot value is successfully entered by a user."},"slotConstraint":{"$ref":"#/types/aws-native:lex:BotSlotConstraint","description":"Specifies whether the slot is required or optional."},"waitAndContinueSpecification":{"$ref":"#/types/aws-native:lex:BotWaitAndContinueSpecification","description":"Specifies the prompts that Amazon Lex uses while a bot is waiting for customer input."}},"type":"object","required":["slotConstraint"]},"aws-native:lex:BotSlotValueOverride":{"properties":{"shape":{"$ref":"#/types/aws-native:lex:BotSlotShape","description":"When the shape value is `List` , it indicates that the `values` field contains a list of slot values. When the value is `Scalar` , it indicates that the `value` field contains a single value."},"value":{"$ref":"#/types/aws-native:lex:BotSlotValue","description":"The current value of the slot."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSlotValueOverride"},"description":"A list of one or more values that the user provided for the slot. For example, for a slot that elicits pizza toppings, the values might be \"pepperoni\" and \"pineapple.\""}},"type":"object"},"aws-native:lex:BotSlotValueOverrideMap":{"properties":{"slotName":{"type":"string","description":"The name of the slot."},"slotValueOverride":{"$ref":"#/types/aws-native:lex:BotSlotValueOverride","description":"The SlotValueOverride object to which the slot name will be mapped."}},"type":"object"},"aws-native:lex:BotSlotValueRegexFilter":{"properties":{"pattern":{"type":"string","description":"A regular expression used to validate the value of a slot.\n\nUse a standard regular expression. Amazon Lex supports the following characters in the regular expression:\n\n- A-Z, a-z\n- 0-9\n- Unicode characters (\"\\⁠u\u003cUnicode\u003e\")\n\nRepresent Unicode characters with four digits, for example \"\\⁠u0041\" or \"\\⁠u005A\".\n\nThe following regular expression operators are not supported:\n\n- Infinite repeaters: *, +, or {x,} with no upper bound.\n- Wild card (.)"}},"type":"object","required":["pattern"]},"aws-native:lex:BotSlotValueResolutionStrategy":{"type":"string","enum":[{"name":"OriginalValue","value":"ORIGINAL_VALUE"},{"name":"TopResolution","value":"TOP_RESOLUTION"},{"name":"Concatenation","value":"CONCATENATION"}]},"aws-native:lex:BotSlotValueSelectionSetting":{"properties":{"advancedRecognitionSetting":{"$ref":"#/types/aws-native:lex:BotAdvancedRecognitionSetting","description":"Provides settings that enable advanced recognition settings for slot values. You can use this to enable using slot values as a custom vocabulary for recognizing user utterances."},"regexFilter":{"$ref":"#/types/aws-native:lex:BotSlotValueRegexFilter","description":"A regular expression used to validate the value of a slot."},"resolutionStrategy":{"$ref":"#/types/aws-native:lex:BotSlotValueResolutionStrategy","description":"Determines the slot resolution strategy that Amazon Lex uses to return slot type values. The field can be set to one of the following values:\n\n- `ORIGINAL_VALUE` - Returns the value entered by the user, if the user value is similar to the slot value.\n- `TOP_RESOLUTION` - If there is a resolution list for the slot, return the first value in the resolution list as the slot type value. If there is no resolution list, null is returned.\n\nIf you don't specify the `valueSelectionStrategy` , the default is `ORIGINAL_VALUE` ."}},"type":"object","required":["resolutionStrategy"]},"aws-native:lex:BotSpecifications":{"properties":{"slotTypeId":{"type":"string"},"slotTypeName":{"type":"string"},"valueElicitationSetting":{"$ref":"#/types/aws-native:lex:BotSubSlotValueElicitationSetting"}},"type":"object","required":["valueElicitationSetting"]},"aws-native:lex:BotSpeechDetectionSensitivity":{"type":"string","enum":[{"name":"Default","value":"Default"},{"name":"HighNoiseTolerance","value":"HighNoiseTolerance"},{"name":"MaximumNoiseTolerance","value":"MaximumNoiseTolerance"}]},"aws-native:lex:BotSpeechModelConfig":{"properties":{"deepgramConfig":{"$ref":"#/types/aws-native:lex:BotDeepgramSpeechModelConfig"}},"type":"object"},"aws-native:lex:BotSpeechModelPreference":{"type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"Neural","value":"Neural"},{"name":"Deepgram","value":"Deepgram"}]},"aws-native:lex:BotSpeechRecognitionSettings":{"properties":{"speechModelConfig":{"$ref":"#/types/aws-native:lex:BotSpeechModelConfig"},"speechModelPreference":{"$ref":"#/types/aws-native:lex:BotSpeechModelPreference"}},"type":"object"},"aws-native:lex:BotSsmlMessage":{"properties":{"value":{"type":"string"}},"type":"object","required":["value"]},"aws-native:lex:BotStillWaitingResponseSpecification":{"properties":{"allowInterrupt":{"type":"boolean","description":"Indicates that the user can interrupt the response by speaking while the message is being played."},"frequencyInSeconds":{"type":"integer","description":"How often a message should be sent to the user. Minimum of 1 second, maximum of 5 minutes."},"messageGroupsList":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotMessageGroup"},"description":"One or more message groups, each containing one or more messages, that define the prompts that Amazon Lex sends to the user."},"timeoutInSeconds":{"type":"integer","description":"If Amazon Lex waits longer than this length of time for a response, it will stop sending messages."}},"type":"object","required":["frequencyInSeconds","messageGroupsList","timeoutInSeconds"]},"aws-native:lex:BotSubSlotSetting":{"properties":{"expression":{"type":"string","description":"The expression text for defining the constituent sub slots in the composite slot using logical AND and OR operators."},"slotSpecifications":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:lex:BotSpecifications"},"description":"Specifications for the constituent sub slots of a composite slot."}},"type":"object"},"aws-native:lex:BotSubSlotTypeComposition":{"properties":{"name":{"type":"string","description":"Name of a constituent sub slot inside a composite slot."},"slotTypeId":{"type":"string","description":"The unique identifier assigned to a slot type. This refers to either a built-in slot type or the unique slotTypeId of a custom slot type."},"slotTypeName":{"type":"string"}},"type":"object","required":["name"]},"aws-native:lex:BotSubSlotValueElicitationSetting":{"properties":{"defaultValueSpecification":{"$ref":"#/types/aws-native:lex:BotSlotDefaultValueSpecification"},"promptSpecification":{"$ref":"#/types/aws-native:lex:BotPromptSpecification"},"sampleUtterances":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotSampleUtterance"}},"waitAndContinueSpecification":{"$ref":"#/types/aws-native:lex:BotWaitAndContinueSpecification"}},"type":"object"},"aws-native:lex:BotTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:lex:BotTestBotAliasSettings":{"properties":{"botAliasLocaleSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotAliasLocaleSettingsItem"},"description":"Specifies settings that are unique to a locale. For example, you can use a different Lambda function depending on the bot's locale."},"conversationLogSettings":{"$ref":"#/types/aws-native:lex:BotConversationLogSettings","description":"Specifies settings for conversation logs that save audio, text, and metadata information for conversations with your users."},"description":{"type":"string","description":"Specifies a description for the test bot alias."},"sentimentAnalysisSettings":{"$ref":"#/types/aws-native:lex:BotTestBotAliasSettingsSentimentAnalysisSettingsProperties","description":"Specifies whether Amazon Lex will use Amazon Comprehend to detect the sentiment of user utterances."}},"type":"object"},"aws-native:lex:BotTestBotAliasSettingsSentimentAnalysisSettingsProperties":{"description":"Specifies whether Amazon Lex will use Amazon Comprehend to detect the sentiment of user utterances.","properties":{"detectSentiment":{"type":"boolean"}},"type":"object","required":["detectSentiment"]},"aws-native:lex:BotTextInputSpecification":{"properties":{"startTimeoutMs":{"type":"integer"}},"type":"object","required":["startTimeoutMs"]},"aws-native:lex:BotTextLogDestination":{"properties":{"cloudWatch":{"$ref":"#/types/aws-native:lex:BotCloudWatchLogGroupLogDestination"}},"type":"object","required":["cloudWatch"]},"aws-native:lex:BotTextLogSetting":{"properties":{"destination":{"$ref":"#/types/aws-native:lex:BotTextLogDestination"},"enabled":{"type":"boolean"}},"type":"object","required":["destination","enabled"]},"aws-native:lex:BotUnifiedSpeechSettings":{"properties":{"speechFoundationModel":{"$ref":"#/types/aws-native:lex:BotUnifiedSpeechSettingsSpeechFoundationModelProperties","description":"The foundation model configuration to use for unified speech processing capabilities."}},"type":"object","required":["speechFoundationModel"]},"aws-native:lex:BotUnifiedSpeechSettingsSpeechFoundationModelProperties":{"description":"The foundation model configuration to use for unified speech processing capabilities.","properties":{"modelArn":{"type":"string"},"voiceId":{"type":"string"}},"type":"object","required":["modelArn"]},"aws-native:lex:BotVersionLocaleDetails":{"description":"The version of a bot used for a bot locale.","properties":{"sourceBotVersion":{"type":"string"}},"type":"object","required":["sourceBotVersion"]},"aws-native:lex:BotVersionLocaleSpecification":{"properties":{"botVersionLocaleDetails":{"$ref":"#/types/aws-native:lex:BotVersionLocaleDetails"},"localeId":{"type":"string"}},"type":"object","required":["botVersionLocaleDetails","localeId"]},"aws-native:lex:BotVoiceSettings":{"properties":{"engine":{"$ref":"#/types/aws-native:lex:BotVoiceSettingsEngine","description":"Indicates the type of Amazon Polly voice that Amazon Lex should use for voice interaction with the user. For more information, see the [`engine` parameter of the `SynthesizeSpeech` operation](https://docs.aws.amazon.com/polly/latest/dg/API_SynthesizeSpeech.html#polly-SynthesizeSpeech-request-Engine) in the *Amazon Polly developer guide* .\n\nIf you do not specify a value, the default is `standard` ."},"voiceId":{"type":"string","description":"The identifier of the Amazon Polly voice to use."}},"type":"object","required":["voiceId"]},"aws-native:lex:BotVoiceSettingsEngine":{"description":"Indicates the type of Amazon Polly voice that Amazon Lex should use for voice interaction with the user. For more information, see the [`engine` parameter of the `SynthesizeSpeech` operation](https://docs.aws.amazon.com/polly/latest/dg/API_SynthesizeSpeech.html#polly-SynthesizeSpeech-request-Engine) in the *Amazon Polly developer guide* .\n\nIf you do not specify a value, the default is `standard` .","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Neural","value":"neural"},{"name":"LongForm","value":"long-form"},{"name":"Generative","value":"generative"}]},"aws-native:lex:BotWaitAndContinueSpecification":{"properties":{"continueResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"The response that Amazon Lex sends to indicate that the bot is ready to continue the conversation."},"isActive":{"type":"boolean","description":"Specifies whether the bot will wait for a user to respond. When this field is false, wait and continue responses for a slot aren't used. If the `IsActive` field isn't specified, the default is true."},"stillWaitingResponse":{"$ref":"#/types/aws-native:lex:BotStillWaitingResponseSpecification","description":"A response that Amazon Lex sends periodically to the user to indicate that the bot is still waiting for input from the user."},"waitingResponse":{"$ref":"#/types/aws-native:lex:BotResponseSpecification","description":"The response that Amazon Lex sends to indicate that the bot is waiting for the conversation to continue."}},"type":"object","required":["continueResponse","waitingResponse"]},"aws-native:lex:DataPrivacyProperties":{"description":"By default, data stored by Amazon Lex is encrypted. The `DataPrivacy` structure provides settings that determine how Amazon Lex handles special cases of securing the data for your bot.","properties":{"childDirected":{"type":"boolean","description":"For each Amazon Lex bot created with the Amazon Lex Model Building Service, you must specify whether your use of Amazon Lex is related to a website, program, or other application that is directed or targeted, in whole or in part, to children under age 13 and subject to the Children's Online Privacy Protection Act (COPPA) by specifying `true` or `false` in the `childDirected` field. By specifying `true` in the `childDirected` field, you confirm that your use of Amazon Lex *is* related to a website, program, or other application that is directed or targeted, in whole or in part, to children under age 13 and subject to COPPA. By specifying `false` in the `childDirected` field, you confirm that your use of Amazon Lex *is not* related to a website, program, or other application that is directed or targeted, in whole or in part, to children under age 13 and subject to COPPA. You may not specify a default value for the `childDirected` field that does not accurately reflect whether your use of Amazon Lex is related to a website, program, or other application that is directed or targeted, in whole or in part, to children under age 13 and subject to COPPA. If your use of Amazon Lex relates to a website, program, or other application that is directed in whole or in part, to children under age 13, you must obtain any required verifiable parental consent under COPPA. For information regarding the use of Amazon Lex in connection with websites, programs, or other applications that are directed or targeted, in whole or in part, to children under age 13, see the [Amazon Lex FAQ](https://docs.aws.amazon.com/lex/faqs#data-security) ."}},"type":"object","required":["childDirected"]},"aws-native:lex:ErrorLogSettingsProperties":{"properties":{"enabled":{"type":"boolean"}},"type":"object","required":["enabled"]},"aws-native:lex:ResourcePolicyPolicy":{"description":"A resource policy to add to the resource. The policy is a JSON structure following the IAM syntax that contains one or more statements that define the policy.","type":"object"},"aws-native:lex:SentimentAnalysisSettingsProperties":{"description":"Determines whether Amazon Lex will use Amazon Comprehend to detect the sentiment of user utterances.","properties":{"detectSentiment":{"type":"boolean","description":"Enable to call Amazon Comprehend for Sentiment natively within Lex"}},"type":"object","required":["detectSentiment"]},"aws-native:licensemanager:GrantTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:licensemanager:LicenseBorrowConfiguration":{"properties":{"allowEarlyCheckIn":{"type":"boolean","description":"Indicates whether early check-ins are allowed."},"maxTimeToLiveInMinutes":{"type":"integer","description":"Maximum time for the borrow configuration, in minutes."}},"type":"object","required":["allowEarlyCheckIn","maxTimeToLiveInMinutes"]},"aws-native:licensemanager:LicenseConsumptionConfiguration":{"properties":{"borrowConfiguration":{"$ref":"#/types/aws-native:licensemanager:LicenseBorrowConfiguration","description":"Details about a borrow configuration."},"provisionalConfiguration":{"$ref":"#/types/aws-native:licensemanager:LicenseProvisionalConfiguration","description":"Details about a provisional configuration."},"renewType":{"type":"string","description":"Renewal frequency."}},"type":"object"},"aws-native:licensemanager:LicenseEntitlement":{"properties":{"allowCheckIn":{"type":"boolean","description":"Indicates whether check-ins are allowed."},"maxCount":{"type":"integer","description":"Maximum entitlement count. Use if the unit is not None."},"name":{"type":"string","description":"Entitlement name."},"overage":{"type":"boolean","description":"Indicates whether overages are allowed."},"unit":{"type":"string","description":"Entitlement unit."},"value":{"type":"string","description":"Entitlement resource. Use only if the unit is None."}},"type":"object","required":["name","unit"]},"aws-native:licensemanager:LicenseIssuerData":{"properties":{"name":{"type":"string","description":"Issuer name."},"signKey":{"type":"string","description":"Asymmetric KMS key from AWS Key Management Service . The KMS key must have a key usage of sign and verify, and support the RSASSA-PSS SHA-256 signing algorithm."}},"type":"object","required":["name"]},"aws-native:licensemanager:LicenseMetadata":{"properties":{"name":{"type":"string","description":"The key name."},"value":{"type":"string","description":"The value."}},"type":"object","required":["name","value"]},"aws-native:licensemanager:LicenseProvisionalConfiguration":{"properties":{"maxTimeToLiveInMinutes":{"type":"integer","description":"Maximum time for the provisional configuration, in minutes."}},"type":"object","required":["maxTimeToLiveInMinutes"]},"aws-native:licensemanager:LicenseTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:licensemanager:LicenseValidityDateFormat":{"properties":{"begin":{"type":"string","description":"Validity begin date for the license."},"end":{"type":"string","description":"Validity begin date for the license."}},"type":"object","required":["begin","end"]},"aws-native:lightsail:BucketAccessRules":{"description":"An object that sets the public accessibility of objects in the specified bucket.","properties":{"allowPublicOverrides":{"type":"boolean","description":"A Boolean value that indicates whether the access control list (ACL) permissions that are applied to individual objects override the getObject option that is currently specified."},"getObject":{"type":"string","description":"Specifies the anonymous access to all objects in a bucket."}},"type":"object"},"aws-native:lightsail:BucketTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:CertificateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:Container":{"description":"Describes the settings of a container that will be launched, or that is launched, to an Amazon Lightsail container service.","properties":{"command":{"type":"array","items":{"type":"string"},"description":"The launch command for the container."},"containerName":{"type":"string","description":"The name of the container."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:ContainerEnvironmentVariable"},"description":"The environment variables of the container."},"image":{"type":"string","description":"The name of the image used for the container."},"ports":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:ContainerPortInfo"},"description":"The open firewall ports of the container."}},"type":"object"},"aws-native:lightsail:ContainerEnvironmentVariable":{"properties":{"value":{"type":"string","description":"The environment variable value."},"variable":{"type":"string","description":"The environment variable key."}},"type":"object"},"aws-native:lightsail:ContainerHealthCheckConfig":{"description":"Describes the health check configuration of an Amazon Lightsail container service.","properties":{"healthyThreshold":{"type":"integer","description":"The number of consecutive health checks successes required before moving the container to the Healthy state. The default value is 2."},"intervalSeconds":{"type":"integer","description":"The approximate interval, in seconds, between health checks of an individual container. You can specify between 5 and 300 seconds. The default value is 5."},"path":{"type":"string","description":"The path on the container on which to perform the health check. The default value is /."},"successCodes":{"type":"string","description":"The HTTP codes to use when checking for a successful response from a container. You can specify values between 200 and 499. You can specify multiple values (for example, 200,202) or a range of values (for example, 200-299)."},"timeoutSeconds":{"type":"integer","description":"The amount of time, in seconds, during which no response means a failed health check. You can specify between 2 and 60 seconds. The default value is 2."},"unhealthyThreshold":{"type":"integer","description":"The number of consecutive health check failures required before moving the container to the Unhealthy state. The default value is 2."}},"type":"object"},"aws-native:lightsail:ContainerPortInfo":{"properties":{"port":{"type":"string","description":"The open firewall ports of the container."},"protocol":{"type":"string","description":"The protocol name for the open ports.\n\n*Allowed values* : `HTTP` | `HTTPS` | `TCP` | `UDP`"}},"type":"object"},"aws-native:lightsail:ContainerPrivateRegistryAccess":{"description":"An object to describe the configuration for the container service to access private container image repositories, such as Amazon Elastic Container Registry (Amazon ECR) private repositories.","properties":{"ecrImagePullerRole":{"$ref":"#/types/aws-native:lightsail:ContainerPrivateRegistryAccessEcrImagePullerRoleProperties","description":"An object to describe a request to activate or deactivate the role that you can use to grant an Amazon Lightsail container service access to Amazon Elastic Container Registry (Amazon ECR) private repositories."}},"type":"object"},"aws-native:lightsail:ContainerPrivateRegistryAccessEcrImagePullerRoleProperties":{"description":"An object to describe a request to activate or deactivate the role that you can use to grant an Amazon Lightsail container service access to Amazon Elastic Container Registry (Amazon ECR) private repositories.","properties":{"isActive":{"type":"boolean","description":"A Boolean value that indicates whether to activate the role."},"principalArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role, if it is activated."}},"type":"object"},"aws-native:lightsail:ContainerPublicDomainName":{"description":"The public domain name to use with the container service, such as example.com and www.example.com.","properties":{"certificateName":{"type":"string","description":"The name of the certificate for the public domains."},"domainNames":{"type":"array","items":{"type":"string"},"description":"An object that describes the configuration for the containers of the deployment."}},"type":"object"},"aws-native:lightsail:ContainerPublicEndpoint":{"description":"Describes the settings of a public endpoint for an Amazon Lightsail container service.","properties":{"containerName":{"type":"string","description":"The name of the container for the endpoint."},"containerPort":{"type":"integer","description":"The port of the container to which traffic is forwarded to."},"healthCheckConfig":{"$ref":"#/types/aws-native:lightsail:ContainerHealthCheckConfig","description":"An object that describes the health check configuration of the container."}},"type":"object"},"aws-native:lightsail:ContainerServiceDeployment":{"description":"Describes a container deployment configuration of an Amazon Lightsail container service.","properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:Container"},"description":"An object that describes the configuration for the containers of the deployment."},"publicEndpoint":{"$ref":"#/types/aws-native:lightsail:ContainerPublicEndpoint","description":"An object that describes the endpoint of the deployment."}},"type":"object"},"aws-native:lightsail:ContainerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:DatabaseRelationalDatabaseParameter":{"description":"Describes the parameters of the database.","properties":{"allowedValues":{"type":"string","description":"Specifies the valid range of values for the parameter."},"applyMethod":{"type":"string","description":"Indicates when parameter updates are applied. Can be immediate or pending-reboot."},"applyType":{"type":"string","description":"Specifies the engine-specific parameter type."},"dataType":{"type":"string","description":"Specifies the valid data type for the parameter."},"description":{"type":"string","description":"Provides a description of the parameter."},"isModifiable":{"type":"boolean","description":"A Boolean value indicating whether the parameter can be modified."},"parameterName":{"type":"string","description":"Specifies the name of the parameter."},"parameterValue":{"type":"string","description":"Specifies the value of the parameter."}},"type":"object"},"aws-native:lightsail:DatabaseSnapshotResourceType":{"description":"The Lightsail resource type.","type":"string","enum":[{"name":"RelationalDatabaseSnapshot","value":"RelationalDatabaseSnapshot"}]},"aws-native:lightsail:DatabaseSnapshotTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:DatabaseTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:DiskAddOn":{"description":"A addon associate with a resource.","properties":{"addOnType":{"type":"string","description":"The add-on type"},"autoSnapshotAddOnRequest":{"$ref":"#/types/aws-native:lightsail:DiskAutoSnapshotAddOn","description":"The parameters for the automatic snapshot add-on, such as the daily time when an automatic snapshot will be created."},"status":{"$ref":"#/types/aws-native:lightsail:DiskAddOnStatus","description":"Status of the Addon"}},"type":"object","required":["addOnType"]},"aws-native:lightsail:DiskAddOnStatus":{"description":"Status of the Addon","type":"string","enum":[{"name":"Enabling","value":"Enabling"},{"name":"Disabling","value":"Disabling"},{"name":"Enabled","value":"Enabled"},{"name":"Terminating","value":"Terminating"},{"name":"Terminated","value":"Terminated"},{"name":"Disabled","value":"Disabled"},{"name":"Failed","value":"Failed"}]},"aws-native:lightsail:DiskAutoSnapshotAddOn":{"description":"An object that represents additional parameters when enabling or modifying the automatic snapshot add-on","properties":{"snapshotTimeOfDay":{"type":"string","description":"The daily time when an automatic snapshot will be created."}},"type":"object"},"aws-native:lightsail:DiskLocation":{"description":"Location of a resource.","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your disk. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request."},"regionName":{"type":"string","description":"The Region Name in which to create your disk."}},"type":"object"},"aws-native:lightsail:DiskSnapshotResourceType":{"description":"The Lightsail resource type (DiskSnapshot).","type":"string","enum":[{"name":"DiskSnapshot","value":"DiskSnapshot"}]},"aws-native:lightsail:DiskSnapshotState":{"description":"The status of the disk snapshot operation.","type":"string","enum":[{"name":"Pending","value":"pending"},{"name":"Completed","value":"completed"},{"name":"Error","value":"error"},{"name":"Unknown","value":"unknown"}]},"aws-native:lightsail:DiskSnapshotTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:DiskTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:InstanceAddOn":{"description":"A addon associate with a resource.","properties":{"addOnType":{"type":"string","description":"The add-on type"},"autoSnapshotAddOnRequest":{"$ref":"#/types/aws-native:lightsail:InstanceAutoSnapshotAddOn","description":"The parameters for the automatic snapshot add-on, such as the daily time when an automatic snapshot will be created."},"status":{"$ref":"#/types/aws-native:lightsail:InstanceAddOnStatus","description":"Status of the Addon"}},"type":"object","required":["addOnType"]},"aws-native:lightsail:InstanceAddOnStatus":{"description":"Status of the Addon","type":"string","enum":[{"name":"Enabling","value":"Enabling"},{"name":"Disabling","value":"Disabling"},{"name":"Enabled","value":"Enabled"},{"name":"Terminating","value":"Terminating"},{"name":"Terminated","value":"Terminated"},{"name":"Disabled","value":"Disabled"},{"name":"Failed","value":"Failed"}]},"aws-native:lightsail:InstanceAutoSnapshotAddOn":{"description":"An object that represents additional parameters when enabling or modifying the automatic snapshot add-on","properties":{"snapshotTimeOfDay":{"type":"string","description":"The daily time when an automatic snapshot will be created."}},"type":"object"},"aws-native:lightsail:InstanceDisk":{"description":"Disk associated with the Instance.","properties":{"attachedTo":{"type":"string","description":"Instance attached to the disk."},"attachmentState":{"type":"string","description":"Attachment state of the disk."},"diskName":{"type":"string","description":"The names to use for your new Lightsail disk."},"iops":{"type":"integer","description":"IOPS of disk."},"isSystemDisk":{"type":"boolean","description":"Is the Attached disk is the system disk of the Instance."},"path":{"type":"string","description":"Path of the disk attached to the instance."},"sizeInGb":{"type":"string","description":"Size of the disk attached to the Instance."}},"type":"object","required":["diskName","path"]},"aws-native:lightsail:InstanceHardware":{"description":"Hardware of the Instance.","properties":{"cpuCount":{"type":"integer","description":"CPU count of the Instance."},"disks":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:InstanceDisk"},"description":"Disks attached to the Instance."},"ramSizeInGb":{"type":"integer","description":"RAM Size of the Instance."}},"type":"object"},"aws-native:lightsail:InstanceLocation":{"description":"Location of a resource.","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your instance. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request."},"regionName":{"type":"string","description":"The Region Name in which to create your instance."}},"type":"object"},"aws-native:lightsail:InstanceMonthlyTransfer":{"description":"Monthly Transfer of the Instance.","properties":{"gbPerMonthAllocated":{"type":"string","description":"GbPerMonthAllocated of the Instance."}},"type":"object"},"aws-native:lightsail:InstanceNetworking":{"description":"Networking of the Instance.","properties":{"monthlyTransfer":{"$ref":"#/types/aws-native:lightsail:InstanceMonthlyTransfer","description":"The monthly amount of data transfer, in GB, allocated for the instance"},"ports":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:InstancePort"},"description":"Ports to the Instance."}},"type":"object","required":["ports"]},"aws-native:lightsail:InstancePort":{"description":"Port of the Instance.","properties":{"accessDirection":{"type":"string","description":"Access Direction for Protocol of the Instance(inbound/outbound)."},"accessFrom":{"type":"string","description":"Access From Protocol of the Instance."},"accessType":{"type":"string","description":"Access Type Protocol of the Instance."},"cidrListAliases":{"type":"array","items":{"type":"string"},"description":"An alias that defines access for a preconfigured range of IP addresses.\n\nThe only alias currently supported is `lightsail-connect` , which allows IP addresses of the browser-based RDP/SSH client in the Lightsail console to connect to your instance."},"cidrs":{"type":"array","items":{"type":"string"},"description":"The IPv4 address, or range of IPv4 addresses (in CIDR notation) that are allowed to connect to an instance through the ports, and the protocol.\n\n\u003e The `ipv6Cidrs` parameter lists the IPv6 addresses that are allowed to connect to an instance. \n\nExamples:\n\n- To allow the IP address `192.0.2.44` , specify `192.0.2.44` or `192.0.2.44/32` .\n- To allow the IP addresses `192.0.2.0` to `192.0.2.255` , specify `192.0.2.0/24` ."},"commonName":{"type":"string","description":"CommonName for Protocol of the Instance."},"fromPort":{"type":"integer","description":"From Port of the Instance."},"ipv6Cidrs":{"type":"array","items":{"type":"string"},"description":"The IPv6 address, or range of IPv6 addresses (in CIDR notation) that are allowed to connect to an instance through the ports, and the protocol. Only devices with an IPv6 address can connect to an instance through IPv6; otherwise, IPv4 should be used.\n\n\u003e The `cidrs` parameter lists the IPv4 addresses that are allowed to connect to an instance."},"protocol":{"type":"string","description":"Port Protocol of the Instance."},"toPort":{"type":"integer","description":"To Port of the Instance."}},"type":"object"},"aws-native:lightsail:InstanceSnapshotLocation":{"description":"The region name and Availability Zone where you created the snapshot.","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone. Follows the format us-east-2a (case-sensitive)."},"regionName":{"type":"string","description":"The AWS Region name."}},"type":"object"},"aws-native:lightsail:InstanceSnapshotTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:InstanceState":{"description":"Current State of the Instance.","properties":{"code":{"type":"integer","description":"Status code of the Instance."},"name":{"type":"string","description":"Status code of the Instance."}},"type":"object"},"aws-native:lightsail:InstanceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:LoadBalancerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:lightsail:LocationProperties":{"description":"The AWS Region and Availability Zone where the disk snapshot was created.","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone where the disk snapshot was created."},"regionName":{"type":"string","description":"The AWS Region where the disk snapshot was created."}},"type":"object"},"aws-native:location:ApiKeyAndroidApp":{"properties":{"certificateFingerprint":{"type":"string"},"package":{"type":"string"}},"type":"object","required":["certificateFingerprint","package"]},"aws-native:location:ApiKeyAppleApp":{"properties":{"bundleId":{"type":"string"}},"type":"object","required":["bundleId"]},"aws-native:location:ApiKeyRestrictions":{"properties":{"allowActions":{"type":"array","items":{"type":"string"},"description":"A list of allowed actions that an API key resource grants permissions to perform. You must have at least one action for each type of resource. For example, if you have a place resource, you must include at least one place action.\n\nThe following are valid values for the actions.\n\n- *Map actions*\n\n- `geo:GetMap*` - Allows all actions needed for map rendering.\n- *Enhanced Maps actions*\n\n- `geo-maps:GetTile` - Allows getting map tiles for rendering.\n- `geo-maps:GetStaticMap` - Allows getting static map images.\n- *Place actions*\n\n- `geo:SearchPlaceIndexForText` - Allows finding geo coordinates of a known place.\n- `geo:SearchPlaceIndexForPosition` - Allows getting nearest address to geo coordinates.\n- `geo:SearchPlaceIndexForSuggestions` - Allows suggestions based on an incomplete or misspelled query.\n- `geo:GetPlace` - Allows getting details of a place.\n- *Enhanced Places actions*\n\n- `geo-places:Autcomplete` - Allows auto-completion of search text.\n- `geo-places:Geocode` - Allows finding geo coordinates of a known place.\n- `geo-places:GetPlace` - Allows getting details of a place.\n- `geo-places:ReverseGeocode` - Allows getting nearest address to geo coordinates.\n- `geo-places:SearchNearby` - Allows category based places search around geo coordinates.\n- `geo-places:SearchText` - Allows place or address search based on free-form text.\n- `geo-places:Suggest` - Allows suggestions based on an incomplete or misspelled query.\n- *Route actions*\n\n- `geo:CalculateRoute` - Allows point to point routing.\n- `geo:CalculateRouteMatrix` - Allows matrix routing.\n- *Enhanced Routes actions*\n\n- `geo-routes:CalculateIsolines` - Allows isoline calculation.\n- `geo-routes:CalculateRoutes` - Allows point to point routing.\n- `geo-routes:CalculateRouteMatrix` - Allows matrix routing.\n- `geo-routes:OptimizeWaypoints` - Allows computing the best sequence of waypoints.\n- `geo-routes:SnapToRoads` - Allows snapping GPS points to a likely route.\n\n\u003e You must use these strings exactly. For example, to provide access to map rendering, the only valid action is `geo:GetMap*` as an input to the list. `[\"geo:GetMap*\"]` is valid but `[\"geo:GetTile\"]` is not. Similarly, you cannot use `[\"geo:SearchPlaceIndexFor*\"]` - you must list each of the Place actions separately."},"allowAndroidApps":{"type":"array","items":{"$ref":"#/types/aws-native:location:ApiKeyAndroidApp"}},"allowAppleApps":{"type":"array","items":{"$ref":"#/types/aws-native:location:ApiKeyAppleApp"}},"allowReferers":{"type":"array","items":{"type":"string"},"description":"An optional list of allowed HTTP referers for which requests must originate from. Requests using this API key from other domains will not be allowed.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9) or any symbols in this list `$\\-._+!*`(),;/?:@=\u0026`\n- May contain a percent (%) if followed by 2 hexadecimal digits (A-F, a-f, 0-9); this is used for URL encoding purposes.\n- May contain wildcard characters question mark (?) and asterisk (*).\n\nQuestion mark (?) will replace any single character (including hexadecimal digits).\n\nAsterisk (*) will replace any multiple characters (including multiple hexadecimal digits).\n- No spaces allowed. For example, `https://example.com` ."},"allowResources":{"type":"array","items":{"type":"string"},"description":"A list of allowed resource ARNs that a API key bearer can perform actions on.\n\n- The ARN must be the correct ARN for a map, place, or route ARN. You may include wildcards in the resource-id to match multiple resources of the same type.\n- The resources must be in the same `partition` , `region` , and `account-id` as the key that is being created.\n- Other than wildcards, you must include the full ARN, including the `arn` , `partition` , `service` , `region` , `account-id` and `resource-id` delimited by colons (:).\n- No spaces allowed, even with wildcards. For example, `arn:aws:geo:region: *account-id* :map/ExampleMap*` .\n\nFor more information about ARN format, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) ."}},"type":"object","required":["allowActions","allowResources"]},"aws-native:location:ApiKeyTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:location:GeofenceCollectionPricingPlan":{"type":"string","enum":[{"name":"RequestBasedUsage","value":"RequestBasedUsage"}]},"aws-native:location:GeofenceCollectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:location:MapConfiguration":{"properties":{"customLayers":{"type":"array","items":{"type":"string"},"description":"Specifies the custom layers for the style. Leave unset to not enable any custom layer, or, for styles that support custom layers, you can enable layer(s), such as the `POI` layer for the VectorEsriNavigation style.\n\n\u003e Currenlty only `VectorEsriNavigation` supports CustomLayers. For more information, see [Custom Layers](https://docs.aws.amazon.com//location/latest/developerguide/map-concepts.html#map-custom-layers) ."},"politicalView":{"type":"string","description":"Specifies the map political view selected from an available data provider."},"style":{"type":"string","description":"Specifies the map style selected from an available data provider.\n\nValid [Esri map styles](https://docs.aws.amazon.com/location/previous/developerguide/esri.html) :\n\n- `VectorEsriDarkGrayCanvas` – The Esri Dark Gray Canvas map style. A vector basemap with a dark gray, neutral background with minimal colors, labels, and features that's designed to draw attention to your thematic content.\n- `RasterEsriImagery` – The Esri Imagery map style. A raster basemap that provides one meter or better satellite and aerial imagery in many parts of the world and lower resolution satellite imagery worldwide.\n- `VectorEsriLightGrayCanvas` – The Esri Light Gray Canvas map style, which provides a detailed vector basemap with a light gray, neutral background style with minimal colors, labels, and features that's designed to draw attention to your thematic content.\n- `VectorEsriTopographic` – The Esri Light map style, which provides a detailed vector basemap with a classic Esri map style.\n- `VectorEsriStreets` – The Esri Street Map style, which provides a detailed vector basemap for the world symbolized with a classic Esri street map style. The vector tile layer is similar in content and style to the World Street Map raster map.\n- `VectorEsriNavigation` – The Esri Navigation map style, which provides a detailed basemap for the world symbolized with a custom navigation map style that's designed for use during the day in mobile devices.\n\nValid [HERE Technologies map styles](https://docs.aws.amazon.com/location/previous/developerguide/HERE.html) :\n\n- `VectorHereContrast` – The HERE Contrast (Berlin) map style is a high contrast detailed base map of the world that blends 3D and 2D rendering.\n\n\u003e The `VectorHereContrast` style has been renamed from `VectorHereBerlin` . `VectorHereBerlin` has been deprecated, but will continue to work in applications that use it.\n- `VectorHereExplore` – A default HERE map style containing a neutral, global map and its features including roads, buildings, landmarks, and water features. It also now includes a fully designed map of Japan.\n- `VectorHereExploreTruck` – A global map containing truck restrictions and attributes (e.g. width / height / HAZMAT) symbolized with highlighted segments and icons on top of HERE Explore to support use cases within transport and logistics.\n- `RasterHereExploreSatellite` – A global map containing high resolution satellite imagery.\n- `HybridHereExploreSatellite` – A global map displaying the road network, street names, and city labels over satellite imagery. This style will automatically retrieve both raster and vector tiles, and your charges will be based on total tiles retrieved.\n\n\u003e Hybrid styles use both vector and raster tiles when rendering the map that you see. This means that more tiles are retrieved than when using either vector or raster tiles alone. Your charges will include all tiles retrieved.\n\nValid [GrabMaps map styles](https://docs.aws.amazon.com/location/previous/developerguide/grab.html) :\n\n- `VectorGrabStandardLight` – The Grab Standard Light map style provides a basemap with detailed land use coloring, area names, roads, landmarks, and points of interest covering Southeast Asia.\n- `VectorGrabStandardDark` – The Grab Standard Dark map style provides a dark variation of the standard basemap covering Southeast Asia.\n\n\u003e Grab provides maps only for countries in Southeast Asia, and is only available in the Asia Pacific (Singapore) Region ( `ap-southeast-1` ). For more information, see [GrabMaps countries and area covered](https://docs.aws.amazon.com/location/previous/developerguide/grab.html#grab-coverage-area) . \n\nValid [Open Data map styles](https://docs.aws.amazon.com/location/previous/developerguide/open-data.html) :\n\n- `VectorOpenDataStandardLight` – The Open Data Standard Light map style provides a detailed basemap for the world suitable for website and mobile application use. The map includes highways major roads, minor roads, railways, water features, cities, parks, landmarks, building footprints, and administrative boundaries.\n- `VectorOpenDataStandardDark` – Open Data Standard Dark is a dark-themed map style that provides a detailed basemap for the world suitable for website and mobile application use. The map includes highways major roads, minor roads, railways, water features, cities, parks, landmarks, building footprints, and administrative boundaries.\n- `VectorOpenDataVisualizationLight` – The Open Data Visualization Light map style is a light-themed style with muted colors and fewer features that aids in understanding overlaid data.\n- `VectorOpenDataVisualizationDark` – The Open Data Visualization Dark map style is a dark-themed style with muted colors and fewer features that aids in understanding overlaid data."}},"type":"object","required":["style"]},"aws-native:location:MapPricingPlan":{"type":"string","enum":[{"name":"RequestBasedUsage","value":"RequestBasedUsage"}]},"aws-native:location:MapTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:location:PlaceIndexDataSourceConfiguration":{"properties":{"intendedUse":{"$ref":"#/types/aws-native:location:PlaceIndexIntendedUse","description":"Specifies how the results of an operation will be stored by the caller.\n\nValid values include:\n\n- `SingleUse` specifies that the results won't be stored.\n- `Storage` specifies that the result can be cached or stored in a database.\n\nDefault value: `SingleUse`"}},"type":"object"},"aws-native:location:PlaceIndexIntendedUse":{"type":"string","enum":[{"name":"SingleUse","value":"SingleUse"},{"name":"Storage","value":"Storage"}]},"aws-native:location:PlaceIndexPricingPlan":{"type":"string","enum":[{"name":"RequestBasedUsage","value":"RequestBasedUsage"}]},"aws-native:location:PlaceIndexTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:location:RouteCalculatorPricingPlan":{"type":"string","enum":[{"name":"RequestBasedUsage","value":"RequestBasedUsage"}]},"aws-native:location:RouteCalculatorTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:location:TrackerPositionFiltering":{"type":"string","enum":[{"name":"TimeBased","value":"TimeBased"},{"name":"DistanceBased","value":"DistanceBased"},{"name":"AccuracyBased","value":"AccuracyBased"}]},"aws-native:location:TrackerPricingPlan":{"type":"string","enum":[{"name":"RequestBasedUsage","value":"RequestBasedUsage"}]},"aws-native:location:TrackerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:logs:AccountPolicyPolicyType":{"description":"Type of the policy.","type":"string","enum":[{"name":"DataProtectionPolicy","value":"DATA_PROTECTION_POLICY"},{"name":"SubscriptionFilterPolicy","value":"SUBSCRIPTION_FILTER_POLICY"},{"name":"FieldIndexPolicy","value":"FIELD_INDEX_POLICY"},{"name":"TransformerPolicy","value":"TRANSFORMER_POLICY"},{"name":"MetricExtractionPolicy","value":"METRIC_EXTRACTION_POLICY"}]},"aws-native:logs:AccountPolicyScope":{"description":"Scope for policy application","type":"string","enum":[{"name":"All","value":"ALL"}]},"aws-native:logs:DeliveryDestinationDestinationPolicy":{"properties":{"deliveryDestinationName":{"type":"string","description":"The name of the delivery destination to assign this policy to"},"deliveryDestinationPolicy":{"$ref":"pulumi.json#/Any","description":"The contents of the policy attached to the delivery destination"}},"type":"object"},"aws-native:logs:DeliveryDestinationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:logs:DeliverySourceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode"}},"type":"object","required":["key","value"]},"aws-native:logs:DeliveryTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode"}},"type":"object","required":["key","value"]},"aws-native:logs:DestinationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, - and @."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, - and @."}},"type":"object","required":["key","value"]},"aws-native:logs:IntegrationOpenSearchResourceConfig":{"properties":{"applicationArn":{"type":"string","description":"If you want to use an existing OpenSearch Service application for your integration with OpenSearch Service, specify it here. If you omit this, a new application will be created."},"dashboardViewerPrincipals":{"type":"array","items":{"type":"string"},"description":"Specify the ARNs of IAM roles and IAM users who you want to grant permission to for viewing the dashboards.\n\n\u003e In addition to specifying these users here, you must also grant them the *CloudWatchOpenSearchDashboardAccess* IAM policy. For more information, see [IAM policies for users](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/OpenSearch-Dashboards-UserRoles.html) ."},"dataSourceRoleArn":{"type":"string","description":"Specify the ARN of an IAM role that CloudWatch Logs will use to create the integration. This role must have the permissions necessary to access the OpenSearch Service collection to be able to create the dashboards. For more information about the permissions needed, see [Permissions that the integration needs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/OpenSearch-Dashboards-CreateRole.html) in the CloudWatch Logs User Guide."},"kmsKeyArn":{"type":"string","description":"To have the vended dashboard data encrypted with AWS  instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS  key that you want to use."},"retentionDays":{"type":"integer","description":"Specify how many days that you want the data derived by OpenSearch Service to be retained in the index that the dashboard refers to. This also sets the maximum time period that you can choose when viewing data in the dashboard. Choosing a longer time frame will incur additional costs."}},"type":"object","required":["dashboardViewerPrincipals","dataSourceRoleArn"]},"aws-native:logs:IntegrationStatus":{"description":"Status of creation for the Integration and its resources","type":"string","enum":[{"name":"Provisioning","value":"PROVISIONING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"}]},"aws-native:logs:IntegrationType":{"description":"The type of the Integration.","type":"string","enum":[{"name":"Opensearch","value":"OPENSEARCH"}]},"aws-native:logs:LogAnomalyDetectorEvaluationFrequency":{"description":"How often log group is evaluated","type":"string","enum":[{"name":"FiveMin","value":"FIVE_MIN"},{"name":"TenMin","value":"TEN_MIN"},{"name":"FifteenMin","value":"FIFTEEN_MIN"},{"name":"ThirtyMin","value":"THIRTY_MIN"},{"name":"OneHour","value":"ONE_HOUR"}]},"aws-native:logs:LogGroupClass":{"description":"Specifies the log group class for this log group. There are two classes:\n  +  The ``Standard`` log class supports all CWL features.\n  +  The ``Infrequent Access`` log class supports a subset of CWL features and incurs lower costs.\n  \n For details about the features supported by each class, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"InfrequentAccess","value":"INFREQUENT_ACCESS"},{"name":"Delivery","value":"DELIVERY"}]},"aws-native:logs:LogGroupTag":{"description":"The value of this key-value pair.","properties":{"key":{"type":"string"},"value":{"type":"string","description":"The value of this key-value pair."}},"type":"object","required":["key","value"]},"aws-native:logs:MetricFilterDimension":{"description":"Specifies the CW metric dimensions to publish with this metric.\n  Because dimensions are part of the unique identifier for a metric, whenever a unique dimension name/value pair is extracted from your logs, you are creating a new variation of that metric.\n For more information about publishing dimensions with metrics created by metric filters, see [Publishing dimensions with metrics from values in JSON or space-delimited log events](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html#logs-metric-filters-dimensions).\n  Metrics extracted from log events are charged as custom metrics. To prevent unexpected high charges, do not specify high-cardinality fields such as ``IPAddress`` or ``requestID`` as dimensions. Each different value found for a dimension is treated as a separate metric and accrues charges as a separate custom metric. \n To help prevent accidental high charges, Amazon disables a metric filter if it generates 1000 different name/value pairs for the dimensions that you have specified within a certain amount of time.\n You can also set up a billing alarm to alert you if your charges are higher than expected. For more information, see [Creating a Billing Alarm to Monitor Your Estimated Charges](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html).","properties":{"key":{"type":"string","description":"The name for the CW metric dimension that the metric filter creates.\n Dimension names must contain only ASCII characters, must include at least one non-whitespace character, and cannot start with a colon (:)."},"value":{"type":"string","description":"The log event field that will contain the value for this dimension. This dimension will only be published for a metric if the value is found in the log event. For example, ``$.eventType`` for JSON log events, or ``$server`` for space-delimited log events."}},"type":"object","required":["key","value"]},"aws-native:logs:MetricFilterMetricTransformation":{"description":"``MetricTransformation`` is a property of the ``AWS::Logs::MetricFilter`` resource that describes how to transform log streams into a CloudWatch metric.","properties":{"defaultValue":{"type":"number","description":"(Optional) The value to emit when a filter pattern does not match a log event. This value can be null."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:logs:MetricFilterDimension"},"description":"The fields to use as dimensions for the metric. One metric filter can include as many as three dimensions.\n  Metrics extracted from log events are charged as custom metrics. To prevent unexpected high charges, do not specify high-cardinality fields such as ``IPAddress`` or ``requestID`` as dimensions. Each different value found for a dimension is treated as a separate metric and accrues charges as a separate custom metric. \n CloudWatch Logs disables a metric filter if it generates 1000 different name/value pairs for your specified dimensions within a certain amount of time. This helps to prevent accidental high charges.\n You can also set up a billing alarm to alert you if your charges are higher than expected. For more information, see [Creating a Billing Alarm to Monitor Your Estimated Charges](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html)."},"metricName":{"type":"string","description":"The name of the CloudWatch metric."},"metricNamespace":{"type":"string","description":"A custom namespace to contain your metric in CloudWatch. Use namespaces to group together metrics that are similar. For more information, see [Namespaces](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_concepts.html#Namespace)."},"metricValue":{"type":"string","description":"The value that is published to the CloudWatch metric. For example, if you're counting the occurrences of a particular term like ``Error``, specify 1 for the metric value. If you're counting the number of bytes transferred, reference the value that is in the log event by using $. followed by the name of the field that you specified in the filter pattern, such as ``$.size``."},"unit":{"$ref":"#/types/aws-native:logs:MetricFilterMetricTransformationUnit","description":"The unit to assign to the metric. If you omit this, the unit is set as ``None``."}},"type":"object","required":["metricName","metricNamespace","metricValue"]},"aws-native:logs:MetricFilterMetricTransformationUnit":{"description":"The unit to assign to the metric. If you omit this, the unit is set as ``None``.","type":"string","enum":[{"name":"Seconds","value":"Seconds"},{"name":"Microseconds","value":"Microseconds"},{"name":"Milliseconds","value":"Milliseconds"},{"name":"Bytes","value":"Bytes"},{"name":"Kilobytes","value":"Kilobytes"},{"name":"Megabytes","value":"Megabytes"},{"name":"Gigabytes","value":"Gigabytes"},{"name":"Terabytes","value":"Terabytes"},{"name":"Bits","value":"Bits"},{"name":"Kilobits","value":"Kilobits"},{"name":"Megabits","value":"Megabits"},{"name":"Gigabits","value":"Gigabits"},{"name":"Terabits","value":"Terabits"},{"name":"Percent","value":"Percent"},{"name":"Count","value":"Count"},{"name":"BytesSecond","value":"Bytes/Second"},{"name":"KilobytesSecond","value":"Kilobytes/Second"},{"name":"MegabytesSecond","value":"Megabytes/Second"},{"name":"GigabytesSecond","value":"Gigabytes/Second"},{"name":"TerabytesSecond","value":"Terabytes/Second"},{"name":"BitsSecond","value":"Bits/Second"},{"name":"KilobitsSecond","value":"Kilobits/Second"},{"name":"MegabitsSecond","value":"Megabits/Second"},{"name":"GigabitsSecond","value":"Gigabits/Second"},{"name":"TerabitsSecond","value":"Terabits/Second"},{"name":"CountSecond","value":"Count/Second"},{"name":"None","value":"None"}]},"aws-native:logs:QueryDefinitionQueryLanguage":{"description":"Query language of the query string. Possible values are CWLI, SQL, PPL, with CWLI being the default.","type":"string","enum":[{"name":"Cwli","value":"CWLI"},{"name":"Sql","value":"SQL"},{"name":"Ppl","value":"PPL"}]},"aws-native:logs:ResourceConfigProperties":{"description":"OpenSearchResourceConfig for the given Integration","properties":{"openSearchResourceConfig":{"$ref":"#/types/aws-native:logs:IntegrationOpenSearchResourceConfig","description":"This structure contains configuration details about an integration between CloudWatch Logs and OpenSearch Service."}},"type":"object"},"aws-native:logs:ScheduledQueryDestinationConfiguration":{"properties":{"s3Configuration":{"$ref":"#/types/aws-native:logs:ScheduledQueryS3Configuration"}},"type":"object"},"aws-native:logs:ScheduledQueryLastExecutionStatus":{"type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"InvalidQuery","value":"InvalidQuery"},{"name":"Complete","value":"Complete"},{"name":"Failed","value":"Failed"},{"name":"Timeout","value":"Timeout"}]},"aws-native:logs:ScheduledQueryS3Configuration":{"properties":{"destinationIdentifier":{"type":"string"},"roleArn":{"type":"string"}},"type":"object","required":["destinationIdentifier","roleArn"]},"aws-native:logs:ScheduledQueryState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:logs:SubscriptionFilterDistribution":{"description":"The method used to distribute log data to the destination, which can be either random or grouped by log stream.","type":"string","enum":[{"name":"Random","value":"Random"},{"name":"ByLogStream","value":"ByLogStream"}]},"aws-native:logs:TagsItemProperties":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:logs:TransformerAddKeyEntry":{"properties":{"key":{"type":"string","description":"The key of the new entry to be added to the log event"},"overwriteIfExists":{"type":"boolean","description":"Specifies whether to overwrite the value if the key already exists in the log event. If you omit this, the default is `false` ."},"value":{"type":"string","description":"The value of the new entry to be added to the log event"}},"type":"object","required":["key","value"]},"aws-native:logs:TransformerCopyValueEntry":{"properties":{"overwriteIfExists":{"type":"boolean"},"source":{"type":"string"},"target":{"type":"string"}},"type":"object","required":["source","target"]},"aws-native:logs:TransformerEventSource":{"type":"string","enum":[{"name":"CloudTrail","value":"CloudTrail"},{"name":"Route53Resolver","value":"Route53Resolver"},{"name":"VpcFlow","value":"VPCFlow"},{"name":"EksAudit","value":"EKSAudit"},{"name":"Awswaf","value":"AWSWAF"}]},"aws-native:logs:TransformerMoveKeyEntry":{"properties":{"overwriteIfExists":{"type":"boolean"},"source":{"type":"string"},"target":{"type":"string"}},"type":"object","required":["source","target"]},"aws-native:logs:TransformerOcsfVersion":{"type":"string","enum":[{"name":"V11","value":"V1.1"},{"name":"V15","value":"V1.5"}]},"aws-native:logs:TransformerParseCloudfront":{"properties":{"source":{"type":"string","description":"Omit this parameter and the whole log message will be processed by this processor. No other value than `@message` is allowed for `source` ."}},"type":"object"},"aws-native:logs:TransformerParsePostgres":{"properties":{"source":{"type":"string","description":"Omit this parameter and the whole log message will be processed by this processor. No other value than `@message` is allowed for `source` ."}},"type":"object"},"aws-native:logs:TransformerParseRoute53":{"properties":{"source":{"type":"string","description":"Omit this parameter and the whole log message will be processed by this processor. No other value than `@message` is allowed for `source` ."}},"type":"object"},"aws-native:logs:TransformerParseToOcsf":{"properties":{"eventSource":{"$ref":"#/types/aws-native:logs:TransformerEventSource","description":"Specify the service or process that produces the log events that will be converted with this processor."},"mappingVersion":{"type":"string","description":"The version of the OCSF mapping to use for parsing log data."},"ocsfVersion":{"$ref":"#/types/aws-native:logs:TransformerOcsfVersion","description":"Specify which version of the OCSF schema to use for the transformed log events."},"source":{"type":"string","description":"The path to the field in the log event that you want to parse. If you omit this value, the whole log message is parsed."}},"type":"object","required":["eventSource","ocsfVersion"]},"aws-native:logs:TransformerParseVpc":{"properties":{"source":{"type":"string","description":"Omit this parameter and the whole log message will be processed by this processor. No other value than `@message` is allowed for `source` ."}},"type":"object"},"aws-native:logs:TransformerParseWaf":{"properties":{"source":{"type":"string","description":"Omit this parameter and the whole log message will be processed by this processor. No other value than `@message` is allowed for `source` ."}},"type":"object"},"aws-native:logs:TransformerProcessor":{"description":"Individual processor configuration","properties":{"addKeys":{"$ref":"#/types/aws-native:logs:TransformerProcessorAddKeysProperties","description":"Use this parameter to include the [addKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-addKeys) processor in your transformer."},"copyValue":{"$ref":"#/types/aws-native:logs:TransformerProcessorCopyValueProperties","description":"Use this parameter to include the [copyValue](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-copyValue) processor in your transformer."},"csv":{"$ref":"#/types/aws-native:logs:TransformerProcessorCsvProperties","description":"Use this parameter to include the [CSV](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-CSV) processor in your transformer."},"dateTimeConverter":{"$ref":"#/types/aws-native:logs:TransformerProcessorDateTimeConverterProperties","description":"Use this parameter to include the [datetimeConverter](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-datetimeConverter) processor in your transformer."},"deleteKeys":{"$ref":"#/types/aws-native:logs:TransformerProcessorDeleteKeysProperties","description":"Use this parameter to include the [deleteKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-deleteKeys) processor in your transformer."},"grok":{"$ref":"#/types/aws-native:logs:TransformerProcessorGrokProperties","description":"Use this parameter to include the [grok](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-grok) processor in your transformer."},"listToMap":{"$ref":"#/types/aws-native:logs:TransformerProcessorListToMapProperties","description":"Use this parameter to include the [listToMap](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-listToMap) processor in your transformer."},"lowerCaseString":{"$ref":"#/types/aws-native:logs:TransformerProcessorLowerCaseStringProperties","description":"Use this parameter to include the [lowerCaseString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-lowerCaseString) processor in your transformer."},"moveKeys":{"$ref":"#/types/aws-native:logs:TransformerProcessorMoveKeysProperties","description":"Use this parameter to include the [moveKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-moveKeys) processor in your transformer."},"parseCloudfront":{"$ref":"#/types/aws-native:logs:TransformerParseCloudfront","description":"Use this parameter to include the [parseCloudfront](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseCloudfront) processor in your transformer.\n\nIf you use this processor, it must be the first processor in your transformer."},"parseJson":{"$ref":"#/types/aws-native:logs:TransformerProcessorParseJsonProperties","description":"Use this parameter to include the [parseJSON](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseJSON) processor in your transformer."},"parseKeyValue":{"$ref":"#/types/aws-native:logs:TransformerProcessorParseKeyValueProperties","description":"Use this parameter to include the [parseKeyValue](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseKeyValue) processor in your transformer."},"parsePostgres":{"$ref":"#/types/aws-native:logs:TransformerParsePostgres","description":"Use this parameter to include the [parsePostGres](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parsePostGres) processor in your transformer.\n\nIf you use this processor, it must be the first processor in your transformer."},"parseRoute53":{"$ref":"#/types/aws-native:logs:TransformerParseRoute53","description":"Use this parameter to include the [parseRoute53](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseRoute53) processor in your transformer.\n\nIf you use this processor, it must be the first processor in your transformer."},"parseToOcsf":{"$ref":"#/types/aws-native:logs:TransformerParseToOcsf","description":"Use this parameter to convert logs into Open Cybersecurity Schema (OCSF) format."},"parseVpc":{"$ref":"#/types/aws-native:logs:TransformerParseVpc","description":"Use this parameter to include the [parseVPC](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseVPC) processor in your transformer.\n\nIf you use this processor, it must be the first processor in your transformer."},"parseWaf":{"$ref":"#/types/aws-native:logs:TransformerParseWaf","description":"Use this parameter to include the [parseWAF](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-parseWAF) processor in your transformer.\n\nIf you use this processor, it must be the first processor in your transformer."},"renameKeys":{"$ref":"#/types/aws-native:logs:TransformerProcessorRenameKeysProperties","description":"Use this parameter to include the [renameKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-renameKeys) processor in your transformer."},"splitString":{"$ref":"#/types/aws-native:logs:TransformerProcessorSplitStringProperties","description":"Use this parameter to include the [splitString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-splitString) processor in your transformer."},"substituteString":{"$ref":"#/types/aws-native:logs:TransformerProcessorSubstituteStringProperties","description":"Use this parameter to include the [substituteString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-substituteString) processor in your transformer."},"trimString":{"$ref":"#/types/aws-native:logs:TransformerProcessorTrimStringProperties","description":"Use this parameter to include the [trimString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-trimString) processor in your transformer."},"typeConverter":{"$ref":"#/types/aws-native:logs:TransformerProcessorTypeConverterProperties","description":"Use this parameter to include the [typeConverter](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-typeConverter) processor in your transformer."},"upperCaseString":{"$ref":"#/types/aws-native:logs:TransformerProcessorUpperCaseStringProperties","description":"Use this parameter to include the [upperCaseString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-upperCaseString) processor in your transformer."}},"type":"object"},"aws-native:logs:TransformerProcessorAddKeysProperties":{"description":"Use this parameter to include the [addKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-addKeys) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerAddKeyEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorCopyValueProperties":{"description":"Use this parameter to include the [copyValue](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-copyValue) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerCopyValueEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorCsvProperties":{"description":"Use this parameter to include the [CSV](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-CSV) processor in your transformer.","properties":{"columns":{"type":"array","items":{"type":"string"}},"delimiter":{"type":"string"},"quoteCharacter":{"type":"string"},"source":{"type":"string"}},"type":"object"},"aws-native:logs:TransformerProcessorDateTimeConverterProperties":{"description":"Use this parameter to include the [datetimeConverter](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-datetimeConverter) processor in your transformer.","properties":{"locale":{"type":"string"},"matchPatterns":{"type":"array","items":{"type":"string"}},"source":{"type":"string"},"sourceTimezone":{"type":"string"},"target":{"type":"string"},"targetFormat":{"type":"string"},"targetTimezone":{"type":"string"}},"type":"object","required":["matchPatterns","source","target"]},"aws-native:logs:TransformerProcessorDeleteKeysProperties":{"description":"Use this parameter to include the [deleteKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-deleteKeys) processor in your transformer.","properties":{"withKeys":{"type":"array","items":{"type":"string"}}},"type":"object","required":["withKeys"]},"aws-native:logs:TransformerProcessorGrokProperties":{"description":"Use this parameter to include the [grok](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-grok) processor in your transformer.","properties":{"match":{"type":"string"},"source":{"type":"string"}},"type":"object","required":["match"]},"aws-native:logs:TransformerProcessorListToMapProperties":{"description":"Use this parameter to include the [listToMap](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-listToMap) processor in your transformer.","properties":{"flatten":{"type":"boolean"},"flattenedElement":{"$ref":"#/types/aws-native:logs:TransformerProcessorListToMapPropertiesFlattenedElement"},"key":{"type":"string"},"source":{"type":"string"},"target":{"type":"string"},"valueKey":{"type":"string"}},"type":"object","required":["key","source"]},"aws-native:logs:TransformerProcessorListToMapPropertiesFlattenedElement":{"type":"string","enum":[{"name":"First","value":"first"},{"name":"Last","value":"last"}]},"aws-native:logs:TransformerProcessorLowerCaseStringProperties":{"description":"Use this parameter to include the [lowerCaseString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-lowerCaseString) processor in your transformer.","properties":{"withKeys":{"type":"array","items":{"type":"string"}}},"type":"object","required":["withKeys"]},"aws-native:logs:TransformerProcessorMoveKeysProperties":{"description":"Use this parameter to include the [moveKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-moveKeys) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerMoveKeyEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorParseJsonProperties":{"description":"Use this parameter to include the [parseJSON](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseJSON) processor in your transformer.","properties":{"destination":{"type":"string"},"source":{"type":"string"}},"type":"object"},"aws-native:logs:TransformerProcessorParseKeyValueProperties":{"description":"Use this parameter to include the [parseKeyValue](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-parseKeyValue) processor in your transformer.","properties":{"destination":{"type":"string"},"fieldDelimiter":{"type":"string"},"keyPrefix":{"type":"string"},"keyValueDelimiter":{"type":"string"},"nonMatchValue":{"type":"string"},"overwriteIfExists":{"type":"boolean"},"source":{"type":"string"}},"type":"object"},"aws-native:logs:TransformerProcessorRenameKeysProperties":{"description":"Use this parameter to include the [renameKeys](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation.html#CloudWatch-Logs-Transformation-renameKeys) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerRenameKeyEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorSplitStringProperties":{"description":"Use this parameter to include the [splitString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-splitString) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerSplitStringEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorSubstituteStringProperties":{"description":"Use this parameter to include the [substituteString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-substituteString) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerSubstituteStringEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorTrimStringProperties":{"description":"Use this parameter to include the [trimString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-trimString) processor in your transformer.","properties":{"withKeys":{"type":"array","items":{"type":"string"}}},"type":"object","required":["withKeys"]},"aws-native:logs:TransformerProcessorTypeConverterProperties":{"description":"Use this parameter to include the [typeConverter](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-typeConverter) processor in your transformer.","properties":{"entries":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerTypeConverterEntry"}}},"type":"object","required":["entries"]},"aws-native:logs:TransformerProcessorUpperCaseStringProperties":{"description":"Use this parameter to include the [upperCaseString](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch-Logs-Transformation-Processors.html#CloudWatch-Logs-Transformation-upperCaseString) processor in your transformer.","properties":{"withKeys":{"type":"array","items":{"type":"string"}}},"type":"object","required":["withKeys"]},"aws-native:logs:TransformerRenameKeyEntry":{"properties":{"key":{"type":"string"},"overwriteIfExists":{"type":"boolean"},"renameTo":{"type":"string"}},"type":"object","required":["key","renameTo"]},"aws-native:logs:TransformerSplitStringEntry":{"properties":{"delimiter":{"type":"string"},"source":{"type":"string"}},"type":"object","required":["delimiter","source"]},"aws-native:logs:TransformerSubstituteStringEntry":{"properties":{"from":{"type":"string"},"source":{"type":"string"},"to":{"type":"string"}},"type":"object","required":["from","source","to"]},"aws-native:logs:TransformerTypeConverterEntry":{"properties":{"key":{"type":"string"},"type":{"$ref":"#/types/aws-native:logs:TransformerTypeConverterEntryType"}},"type":"object","required":["key","type"]},"aws-native:logs:TransformerTypeConverterEntryType":{"type":"string","enum":[{"name":"Boolean","value":"boolean"},{"name":"Integer","value":"integer"},{"name":"Double","value":"double"},{"name":"String","value":"string"}]},"aws-native:m2:ApplicationDefinition0Properties":{"properties":{"s3Location":{"type":"string"}},"type":"object","required":["s3Location"]},"aws-native:m2:ApplicationDefinition1Properties":{"properties":{"content":{"type":"string"}},"type":"object","required":["content"]},"aws-native:m2:ApplicationEngineType":{"type":"string","enum":[{"name":"Microfocus","value":"microfocus"},{"name":"Bluage","value":"bluage"}]},"aws-native:m2:EnvironmentEngineType":{"description":"The target platform for the environment.","type":"string","enum":[{"name":"Microfocus","value":"microfocus"},{"name":"Bluage","value":"bluage"}]},"aws-native:m2:EnvironmentHighAvailabilityConfig":{"description":"Defines the details of a high availability configuration.","properties":{"desiredCapacity":{"type":"integer","description":"The number of instances in a high availability configuration. The minimum possible value is 1 and the maximum is 100."}},"type":"object","required":["desiredCapacity"]},"aws-native:m2:EnvironmentNetworkType":{"type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Dual","value":"dual"}]},"aws-native:m2:EnvironmentStorageConfiguration":{"description":"Defines the storage configuration for an environment.","type":"object"},"aws-native:macie:AllowListCriteria":{"description":"The regex or s3 object to use for the AllowList.","type":"object"},"aws-native:macie:AllowListStatus":{"description":"The status for the AllowList","type":"string","enum":[{"name":"Ok","value":"OK"},{"name":"S3ObjectNotFound","value":"S3_OBJECT_NOT_FOUND"},{"name":"S3UserAccessDenied","value":"S3_USER_ACCESS_DENIED"},{"name":"S3ObjectAccessDenied","value":"S3_OBJECT_ACCESS_DENIED"},{"name":"S3Throttled","value":"S3_THROTTLED"},{"name":"S3ObjectOversize","value":"S3_OBJECT_OVERSIZE"},{"name":"S3ObjectEmpty","value":"S3_OBJECT_EMPTY"},{"name":"UnknownError","value":"UNKNOWN_ERROR"}]},"aws-native:macie:AllowListTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:macie:CustomDataIdentifierTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:macie:FindingsFilterCriterionAdditionalProperties":{"properties":{"eq":{"type":"array","items":{"type":"string"},"description":"The value for the specified property matches (equals) the specified value. If you specify multiple values, Amazon Macie uses OR logic to join the values."},"gt":{"type":"integer","description":"The value for the specified property is greater than the specified value."},"gte":{"type":"integer","description":"The value for the specified property is greater than or equal to the specified value."},"lt":{"type":"integer","description":"The value for the specified property is less than the specified value."},"lte":{"type":"integer","description":"The value for the specified property is less than or equal to the specified value."},"neq":{"type":"array","items":{"type":"string"},"description":"The value for the specified property doesn't match (doesn't equal) the specified value. If you specify multiple values, Amazon Macie uses OR logic to join the values."}},"type":"object"},"aws-native:macie:FindingsFilterFindingCriteria":{"properties":{"criterion":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:macie:FindingsFilterCriterionAdditionalProperties"},"description":"Specifies a condition that defines the property, operator, and one or more values to use to filter the results."}},"type":"object"},"aws-native:macie:FindingsFilterFindingFilterAction":{"type":"string","enum":[{"name":"Archive","value":"ARCHIVE"},{"name":"Noop","value":"NOOP"}]},"aws-native:macie:FindingsFilterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag's key."},"value":{"type":"string","description":"The tag's value."}},"type":"object","required":["key","value"]},"aws-native:macie:SessionAutomatedDiscoveryStatus":{"description":"The status of automated sensitive data discovery for the Macie session.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:macie:SessionFindingPublishingFrequency":{"description":"A enumeration value that specifies how frequently finding updates are published.","type":"string","enum":[{"name":"FifteenMinutes","value":"FIFTEEN_MINUTES"},{"name":"OneHour","value":"ONE_HOUR"},{"name":"SixHours","value":"SIX_HOURS"}]},"aws-native:macie:SessionStatus":{"description":"A enumeration value that specifies the status of the Macie Session.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Paused","value":"PAUSED"}]},"aws-native:mediaconnect:BridgeEgressGatewayBridge":{"properties":{"maxBitrate":{"type":"integer","description":"The maximum expected bitrate of the egress bridge."}},"type":"object","required":["maxBitrate"]},"aws-native:mediaconnect:BridgeFailoverConfig":{"description":"The settings for source failover.","properties":{"failoverMode":{"$ref":"#/types/aws-native:mediaconnect:BridgeFailoverModeEnum","description":"The type of failover you choose for this flow. FAILOVER allows switching between different streams."},"sourcePriority":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourcePriority","description":"The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams."},"state":{"$ref":"#/types/aws-native:mediaconnect:BridgeFailoverConfigStateEnum","description":"The state of source failover on the flow. If the state is inactive, the flow can have only one source. If the state is active, the flow can have one or two sources."}},"type":"object","required":["failoverMode"]},"aws-native:mediaconnect:BridgeFailoverConfigStateEnum":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:BridgeFailoverModeEnum":{"type":"string","enum":[{"name":"Failover","value":"FAILOVER"}]},"aws-native:mediaconnect:BridgeFlowSource":{"description":"The source of the bridge. A flow source originates in MediaConnect as an existing cloud flow.","properties":{"flowArn":{"type":"string","description":"The ARN of the cloud flow used as a source of this bridge."},"flowVpcInterfaceAttachment":{"$ref":"#/types/aws-native:mediaconnect:BridgeVpcInterfaceAttachment","description":"The name of the VPC interface attachment to use for this source."},"name":{"type":"string","description":"The name of the flow source."}},"type":"object","required":["flowArn","name"]},"aws-native:mediaconnect:BridgeIngressGatewayBridge":{"properties":{"maxBitrate":{"type":"integer","description":"The maximum expected bitrate of the ingress bridge."},"maxOutputs":{"type":"integer","description":"The maximum number of outputs on the ingress bridge."}},"type":"object","required":["maxBitrate","maxOutputs"]},"aws-native:mediaconnect:BridgeMulticastSourceSettings":{"description":"The settings related to the multicast source.","properties":{"multicastSourceIp":{"type":"string","description":"The IP address of the source for source-specific multicast (SSM)."}},"type":"object"},"aws-native:mediaconnect:BridgeNetworkOutput":{"description":"The output of the bridge. A network output is delivered to your premises.","properties":{"ipAddress":{"type":"string","description":"The network output IP Address."},"name":{"type":"string","description":"The network output name."},"networkName":{"type":"string","description":"The network output's gateway network name."},"port":{"type":"integer","description":"The network output port."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:BridgeProtocolEnum","description":"The network output protocol."},"ttl":{"type":"integer","description":"The network output TTL."}},"type":"object","required":["ipAddress","name","networkName","port","protocol","ttl"]},"aws-native:mediaconnect:BridgeNetworkSource":{"description":"The source of the bridge. A network source originates at your premises.","properties":{"multicastIp":{"type":"string","description":"The network source multicast IP."},"multicastSourceSettings":{"$ref":"#/types/aws-native:mediaconnect:BridgeMulticastSourceSettings","description":"The settings related to the multicast source."},"name":{"type":"string","description":"The name of the network source."},"networkName":{"type":"string","description":"The network source's gateway network name."},"port":{"type":"integer","description":"The network source port."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:BridgeProtocolEnum","description":"The network source protocol."}},"type":"object","required":["multicastIp","name","networkName","port","protocol"]},"aws-native:mediaconnect:BridgeOutput":{"description":"The output of the bridge.","properties":{"networkOutput":{"$ref":"#/types/aws-native:mediaconnect:BridgeNetworkOutput","description":"The output of the bridge. A network output is delivered to your premises."}},"type":"object"},"aws-native:mediaconnect:BridgeOutputResourceBridgeNetworkOutput":{"description":"The output of the bridge. A network output is delivered to your premises.","properties":{"ipAddress":{"type":"string","description":"The network output IP Address."},"networkName":{"type":"string","description":"The network output's gateway network name."},"port":{"type":"integer","description":"The network output port."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutputResourceBridgeNetworkOutputProtocol","description":"The network output protocol."},"ttl":{"type":"integer","description":"The network output TTL."}},"type":"object","required":["ipAddress","networkName","port","protocol","ttl"]},"aws-native:mediaconnect:BridgeOutputResourceBridgeNetworkOutputProtocol":{"description":"The network output protocol.","type":"string","enum":[{"name":"RtpFec","value":"rtp-fec"},{"name":"Rtp","value":"rtp"},{"name":"Udp","value":"udp"}]},"aws-native:mediaconnect:BridgeProtocolEnum":{"type":"string","enum":[{"name":"RtpFec","value":"rtp-fec"},{"name":"Rtp","value":"rtp"},{"name":"Udp","value":"udp"}]},"aws-native:mediaconnect:BridgeSource":{"description":"The bridge's source.","properties":{"flowSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeFlowSource","description":"The source of the bridge. A flow source originates in MediaConnect as an existing cloud flow."},"networkSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeNetworkSource","description":"The source of the bridge. A network source originates at your premises."}},"type":"object"},"aws-native:mediaconnect:BridgeSourceBridgeFlowSource":{"description":"The source of the bridge. A flow source originates in MediaConnect as an existing cloud flow.","properties":{"flowArn":{"type":"string","description":"The ARN of the cloud flow used as a source of this bridge."},"flowVpcInterfaceAttachment":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceVpcInterfaceAttachment","description":"The name of the VPC interface attachment to use for this source."}},"type":"object","required":["flowArn"]},"aws-native:mediaconnect:BridgeSourceBridgeNetworkSource":{"description":"The source of the bridge. A network source originates at your premises.","properties":{"multicastIp":{"type":"string","description":"The network source multicast IP."},"multicastSourceSettings":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceMulticastSourceSettings","description":"The settings related to the multicast source."},"networkName":{"type":"string","description":"The network source's gateway network name."},"port":{"type":"integer","description":"The network source port."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceProtocolEnum","description":"The network source protocol."}},"type":"object","required":["multicastIp","networkName","port","protocol"]},"aws-native:mediaconnect:BridgeSourceMulticastSourceSettings":{"description":"The settings related to the multicast source.","properties":{"multicastSourceIp":{"type":"string","description":"The IP address of the source for source-specific multicast (SSM)."}},"type":"object"},"aws-native:mediaconnect:BridgeSourcePriority":{"description":"The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams.","properties":{"primarySource":{"type":"string","description":"The name of the source you choose as the primary source for this flow."}},"type":"object"},"aws-native:mediaconnect:BridgeSourceProtocolEnum":{"type":"string","enum":[{"name":"RtpFec","value":"rtp-fec"},{"name":"Rtp","value":"rtp"},{"name":"Udp","value":"udp"}]},"aws-native:mediaconnect:BridgeSourceVpcInterfaceAttachment":{"description":"The settings for attaching a VPC interface to an resource.","properties":{"vpcInterfaceName":{"type":"string","description":"The name of the VPC interface to use for this resource."}},"type":"object"},"aws-native:mediaconnect:BridgeStateEnum":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Standby","value":"STANDBY"},{"name":"Starting","value":"STARTING"},{"name":"Deploying","value":"DEPLOYING"},{"name":"Active","value":"ACTIVE"},{"name":"Stopping","value":"STOPPING"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"StartFailed","value":"START_FAILED"},{"name":"StartPending","value":"START_PENDING"},{"name":"Updating","value":"UPDATING"}]},"aws-native:mediaconnect:BridgeVpcInterfaceAttachment":{"description":"The settings for attaching a VPC interface to an resource.","properties":{"vpcInterfaceName":{"type":"string","description":"The name of the VPC interface to use for this resource."}},"type":"object"},"aws-native:mediaconnect:FlowAudioMonitoringSetting":{"description":"Specifies the configuration for audio stream metrics monitoring.","properties":{"silentAudio":{"$ref":"#/types/aws-native:mediaconnect:FlowSilentAudio","description":"Detects periods of silence."}},"type":"object"},"aws-native:mediaconnect:FlowAutomaticEncryptionKeyConfiguration":{"description":"Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.","type":"object"},"aws-native:mediaconnect:FlowBlackFrames":{"description":"Configures settings for the BlackFrames metric.","properties":{"state":{"$ref":"#/types/aws-native:mediaconnect:FlowBlackFramesState","description":"Indicates whether the BlackFrames metric is enabled or disabled."},"thresholdSeconds":{"type":"integer","description":"Specifies the number of consecutive seconds of black frames that triggers an event or alert."}},"type":"object"},"aws-native:mediaconnect:FlowBlackFramesState":{"description":"Indicates whether the BlackFrames metric is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowEncodingConfig":{"properties":{"encodingProfile":{"$ref":"#/types/aws-native:mediaconnect:FlowEncodingProfile"},"videoMaxBitrate":{"type":"integer","description":"The maximum video bitrate to use when transcoding the NDI source to a Transport Stream. This parameter enables you to override the default video bitrate within the encoding profile's supported range. The supported range is 10,000,000 - 50,000,000 bits per second (bps). If you do not specify a value, MediaConnect uses the default value of 20,000,000 bps."}},"type":"object"},"aws-native:mediaconnect:FlowEncodingProfile":{"description":"The encoding profile to use when transcoding the NDI source to a Transport Stream. You can change this value while a flow is running.","type":"string","enum":[{"name":"DistributionH264Default","value":"DISTRIBUTION_H264_DEFAULT"},{"name":"ContributionH264Default","value":"CONTRIBUTION_H264_DEFAULT"}]},"aws-native:mediaconnect:FlowEncryption":{"description":"Information about the encryption of the flow.","properties":{"algorithm":{"$ref":"#/types/aws-native:mediaconnect:FlowEncryptionAlgorithm","description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256)."},"constantInitializationVector":{"type":"string","description":"A 128-bit, 16-byte hex value represented by a 32-character string, to be used with the key for encrypting content. This parameter is not valid for static key encryption."},"deviceId":{"type":"string","description":"The value of one of the devices that you configured with your digital rights management (DRM) platform key provider. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"keyType":{"$ref":"#/types/aws-native:mediaconnect:FlowEncryptionKeyType","description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key)."},"region":{"type":"string","description":"The AWS Region that the API Gateway proxy endpoint was created in. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"resourceId":{"type":"string","description":"An identifier for the content. The service sends this value to the key server to identify the current endpoint. The resource ID is also known as the content ID. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"roleArn":{"type":"string","description":"The ARN of the role that you created during setup (when you set up AWS Elemental MediaConnect as a trusted entity)."},"secretArn":{"type":"string","description":" The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption."},"url":{"type":"string","description":"The URL from the API Gateway proxy that you set up to talk to your key server. This parameter is required for SPEKE encryption and is not valid for static key encryption."}},"type":"object","required":["roleArn"]},"aws-native:mediaconnect:FlowEncryptionAlgorithm":{"description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256).","type":"string","enum":[{"name":"Aes128","value":"aes128"},{"name":"Aes192","value":"aes192"},{"name":"Aes256","value":"aes256"}]},"aws-native:mediaconnect:FlowEncryptionKeyType":{"description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key).","type":"string","enum":[{"name":"Speke","value":"speke"},{"name":"StaticKey","value":"static-key"},{"name":"SrtPassword","value":"srt-password"}]},"aws-native:mediaconnect:FlowEntitlementEncryption":{"description":"Information about the encryption of the flow.","properties":{"algorithm":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEncryptionAlgorithm","description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256)."},"constantInitializationVector":{"type":"string","description":"A 128-bit, 16-byte hex value represented by a 32-character string, to be used with the key for encrypting content. This parameter is not valid for static key encryption."},"deviceId":{"type":"string","description":"The value of one of the devices that you configured with your digital rights management (DRM) platform key provider. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"keyType":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEncryptionKeyType","description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key)."},"region":{"type":"string","description":"The AWS Region that the API Gateway proxy endpoint was created in. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"resourceId":{"type":"string","description":"An identifier for the content. The service sends this value to the key server to identify the current endpoint. The resource ID is also known as the content ID. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"roleArn":{"type":"string","description":"The ARN of the role that you created during setup (when you set up AWS Elemental MediaConnect as a trusted entity)."},"secretArn":{"type":"string","description":" The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption."},"url":{"type":"string","description":"The URL from the API Gateway proxy that you set up to talk to your key server. This parameter is required for SPEKE encryption and is not valid for static key encryption."}},"type":"object","required":["algorithm","roleArn"]},"aws-native:mediaconnect:FlowEntitlementEncryptionAlgorithm":{"description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256).","type":"string","enum":[{"name":"Aes128","value":"aes128"},{"name":"Aes192","value":"aes192"},{"name":"Aes256","value":"aes256"}]},"aws-native:mediaconnect:FlowEntitlementEncryptionKeyType":{"description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key).","type":"string","enum":[{"name":"Speke","value":"speke"},{"name":"StaticKey","value":"static-key"}]},"aws-native:mediaconnect:FlowEntitlementEntitlementStatus":{"description":" An indication of whether the entitlement is enabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowEntitlementTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediaconnect:FlowFailoverConfig":{"description":"The settings for source failover","properties":{"failoverMode":{"$ref":"#/types/aws-native:mediaconnect:FlowFailoverConfigFailoverMode","description":"The type of failover you choose for this flow. MERGE combines the source streams into a single stream, allowing graceful recovery from any single-source loss. FAILOVER allows switching between different streams."},"recoveryWindow":{"type":"integer","description":"Search window time to look for dash-7 packets"},"sourcePriority":{"$ref":"#/types/aws-native:mediaconnect:FlowFailoverConfigSourcePriorityProperties","description":"The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams."},"state":{"$ref":"#/types/aws-native:mediaconnect:FlowFailoverConfigState","description":"The state of source failover on the flow. If the state is inactive, the flow can have only one source. If the state is active, the flow can have one or two sources."}},"type":"object"},"aws-native:mediaconnect:FlowFailoverConfigFailoverMode":{"description":"The type of failover you choose for this flow. MERGE combines the source streams into a single stream, allowing graceful recovery from any single-source loss. FAILOVER allows switching between different streams.","type":"string","enum":[{"name":"Merge","value":"MERGE"},{"name":"Failover","value":"FAILOVER"}]},"aws-native:mediaconnect:FlowFailoverConfigSourcePriorityProperties":{"description":"The priority you want to assign to a source. You can have a primary stream and a backup stream or two equally prioritized streams.","properties":{"primarySource":{"type":"string","description":"The name of the source you choose as the primary source for this flow."}},"type":"object","required":["primarySource"]},"aws-native:mediaconnect:FlowFailoverConfigState":{"description":"The state of source failover on the flow. If the state is inactive, the flow can have only one source. If the state is active, the flow can have one or two sources.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowFmtp":{"description":"A set of parameters that define the media stream.","properties":{"channelOrder":{"type":"string","description":"The format of the audio channel."},"colorimetry":{"$ref":"#/types/aws-native:mediaconnect:FlowFmtpColorimetry","description":"The format used for the representation of color."},"exactFramerate":{"type":"string","description":"The frame rate for the video stream, in frames/second. For example: 60000/1001."},"par":{"type":"string","description":"The pixel aspect ratio (PAR) of the video."},"range":{"$ref":"#/types/aws-native:mediaconnect:FlowFmtpRange","description":"The encoding range of the video."},"scanMode":{"$ref":"#/types/aws-native:mediaconnect:FlowFmtpScanMode","description":"The type of compression that was used to smooth the video's appearance."},"tcs":{"$ref":"#/types/aws-native:mediaconnect:FlowFmtpTcs","description":"The transfer characteristic system (TCS) that is used in the video."}},"type":"object"},"aws-native:mediaconnect:FlowFmtpColorimetry":{"description":"The format used for the representation of color.","type":"string","enum":[{"name":"Bt601","value":"BT601"},{"name":"Bt709","value":"BT709"},{"name":"Bt2020","value":"BT2020"},{"name":"Bt2100","value":"BT2100"},{"name":"St20651","value":"ST2065-1"},{"name":"St20653","value":"ST2065-3"},{"name":"Xyz","value":"XYZ"}]},"aws-native:mediaconnect:FlowFmtpRange":{"description":"The encoding range of the video.","type":"string","enum":[{"name":"Narrow","value":"NARROW"},{"name":"Full","value":"FULL"},{"name":"Fullprotect","value":"FULLPROTECT"}]},"aws-native:mediaconnect:FlowFmtpScanMode":{"description":"The type of compression that was used to smooth the video's appearance.","type":"string","enum":[{"name":"Progressive","value":"progressive"},{"name":"Interlace","value":"interlace"},{"name":"ProgressiveSegmentedFrame","value":"progressive-segmented-frame"}]},"aws-native:mediaconnect:FlowFmtpTcs":{"description":"The transfer characteristic system (TCS) that is used in the video.","type":"string","enum":[{"name":"Sdr","value":"SDR"},{"name":"Pq","value":"PQ"},{"name":"Hlg","value":"HLG"},{"name":"Linear","value":"LINEAR"},{"name":"Bt2100linpq","value":"BT2100LINPQ"},{"name":"Bt2100linhlg","value":"BT2100LINHLG"},{"name":"St20651","value":"ST2065-1"},{"name":"St4281","value":"ST428-1"},{"name":"Density","value":"DENSITY"}]},"aws-native:mediaconnect:FlowFrozenFrames":{"description":"Configures settings for the FrozenFrames metric.","properties":{"state":{"$ref":"#/types/aws-native:mediaconnect:FlowFrozenFramesState","description":"Indicates whether the FrozenFrames metric is enabled or disabled."},"thresholdSeconds":{"type":"integer","description":"Specifies the number of consecutive seconds of a static image that triggers an event or alert."}},"type":"object"},"aws-native:mediaconnect:FlowFrozenFramesState":{"description":"Indicates whether the FrozenFrames metric is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowGatewayBridgeSource":{"description":"The source configuration for cloud flows receiving a stream from a bridge.","properties":{"bridgeArn":{"type":"string","description":"The ARN of the bridge feeding this flow."},"vpcInterfaceAttachment":{"$ref":"#/types/aws-native:mediaconnect:FlowVpcInterfaceAttachment","description":"The name of the VPC interface attachment to use for this bridge source."}},"type":"object","required":["bridgeArn"]},"aws-native:mediaconnect:FlowInputConfiguration":{"description":"The transport parameters associated with an incoming media stream.","properties":{"inputPort":{"type":"integer","description":"The port that the flow listens on for an incoming media stream."},"interface":{"$ref":"#/types/aws-native:mediaconnect:FlowInterface","description":"The VPC interface where the media stream comes in from."}},"type":"object","required":["inputPort","interface"]},"aws-native:mediaconnect:FlowInterface":{"description":"The VPC interface that you want to use for the media stream associated with the output.","properties":{"name":{"type":"string","description":"The name of the VPC interface that you want to use for the media stream associated with the output."}},"type":"object","required":["name"]},"aws-native:mediaconnect:FlowMaintenance":{"description":"The maintenance setting of a flow.","properties":{"maintenanceDay":{"$ref":"#/types/aws-native:mediaconnect:FlowMaintenanceMaintenanceDay","description":"A day of a week when the maintenance will happen. Use Monday/Tuesday/Wednesday/Thursday/Friday/Saturday/Sunday."},"maintenanceStartHour":{"type":"string","description":"UTC time when the maintenance will happen. Use 24-hour HH:MM format. Minutes must be 00. Example: 13:00. The default value is 02:00."}},"type":"object","required":["maintenanceDay","maintenanceStartHour"]},"aws-native:mediaconnect:FlowMaintenanceMaintenanceDay":{"description":"A day of a week when the maintenance will happen. Use Monday/Tuesday/Wednesday/Thursday/Friday/Saturday/Sunday.","type":"string","enum":[{"name":"Monday","value":"Monday"},{"name":"Tuesday","value":"Tuesday"},{"name":"Wednesday","value":"Wednesday"},{"name":"Thursday","value":"Thursday"},{"name":"Friday","value":"Friday"},{"name":"Saturday","value":"Saturday"},{"name":"Sunday","value":"Sunday"}]},"aws-native:mediaconnect:FlowMediaStream":{"description":"A single track or stream of media that contains video, audio, or ancillary data. After you add a media stream to a flow, you can associate it with sources and outputs on that flow, as long as they use the CDI protocol or the ST 2110 JPEG XS protocol. Each source or output can consist of one or many media streams.","properties":{"attributes":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStreamAttributes","description":"Attributes that are related to the media stream."},"clockRate":{"type":"integer","description":"The sample rate for the stream. This value in measured in kHz."},"description":{"type":"string","description":"A description that can help you quickly identify what your media stream is used for."},"fmt":{"type":"integer","description":"The format type number (sometimes referred to as RTP payload type) of the media stream. MediaConnect assigns this value to the media stream. For ST 2110 JPEG XS outputs, you need to provide this value to the receiver."},"mediaStreamId":{"type":"integer","description":"A unique identifier for the media stream."},"mediaStreamName":{"type":"string","description":"A name that helps you distinguish one media stream from another."},"mediaStreamType":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStreamMediaStreamType","description":"The type of media stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowTag"},"description":"Key-value pairs that can be used to tag this media stream."},"videoFormat":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStreamVideoFormat","description":"The resolution of the video."}},"type":"object","required":["mediaStreamId","mediaStreamName","mediaStreamType"]},"aws-native:mediaconnect:FlowMediaStreamAttributes":{"description":"Attributes that are related to the media stream.","properties":{"fmtp":{"$ref":"#/types/aws-native:mediaconnect:FlowFmtp","description":"A set of parameters that define the media stream."},"lang":{"type":"string","description":"The audio language, in a format that is recognized by the receiver."}},"type":"object"},"aws-native:mediaconnect:FlowMediaStreamMediaStreamType":{"description":"The type of media stream.","type":"string","enum":[{"name":"Video","value":"video"},{"name":"Audio","value":"audio"},{"name":"AncillaryData","value":"ancillary-data"}]},"aws-native:mediaconnect:FlowMediaStreamSourceConfiguration":{"description":"The media stream that is associated with the source, and the parameters for that association.","properties":{"encodingName":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStreamSourceConfigurationEncodingName","description":"The format that was used to encode the data. For ancillary data streams, set the encoding name to smpte291. For audio streams, set the encoding name to pcm. For video, 2110 streams, set the encoding name to raw. For video, JPEG XS streams, set the encoding name to jxsv."},"inputConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowInputConfiguration"},"description":"The media streams that you want to associate with the source."},"mediaStreamName":{"type":"string","description":"A name that helps you distinguish one media stream from another."}},"type":"object","required":["encodingName","mediaStreamName"]},"aws-native:mediaconnect:FlowMediaStreamSourceConfigurationEncodingName":{"description":"The format that was used to encode the data. For ancillary data streams, set the encoding name to smpte291. For audio streams, set the encoding name to pcm. For video, 2110 streams, set the encoding name to raw. For video, JPEG XS streams, set the encoding name to jxsv.","type":"string","enum":[{"name":"Jxsv","value":"jxsv"},{"name":"Raw","value":"raw"},{"name":"Smpte291","value":"smpte291"},{"name":"Pcm","value":"pcm"}]},"aws-native:mediaconnect:FlowMediaStreamVideoFormat":{"description":"The resolution of the video.","type":"string","enum":[{"name":"2160p","value":"2160p"},{"name":"1080p","value":"1080p"},{"name":"1080i","value":"1080i"},{"name":"720p","value":"720p"},{"name":"480p","value":"480p"}]},"aws-native:mediaconnect:FlowNdiConfig":{"description":"Specifies the configuration settings for NDI sources and outputs. Required when the flow includes NDI sources or outputs.","properties":{"machineName":{"type":"string","description":"A prefix for the names of the NDI sources that the flow creates. If a custom name isn't specified, MediaConnect generates a unique 12-character ID as the prefix."},"ndiDiscoveryServers":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowNdiDiscoveryServerConfig"},"description":"A list of up to three NDI discovery server configurations. While not required by the API, this configuration is necessary for NDI functionality to work properly."},"ndiState":{"$ref":"#/types/aws-native:mediaconnect:FlowNdiState","description":"A setting that controls whether NDI sources or outputs can be used in the flow. The default value is DISABLED. This value must be set as ENABLED for your flow to support NDI sources or outputs."}},"type":"object"},"aws-native:mediaconnect:FlowNdiDiscoveryServerConfig":{"description":"Specifies the configuration settings for individual NDI discovery servers. A maximum of 3 servers is allowed.","properties":{"discoveryServerAddress":{"type":"string","description":"The unique network address of the NDI discovery server."},"discoveryServerPort":{"type":"integer","description":"The port for the NDI discovery server. Defaults to 5959 if a custom port isn't specified."},"vpcInterfaceAdapter":{"type":"string","description":"The identifier for the Virtual Private Cloud (VPC) network interface used by the flow."}},"type":"object","required":["discoveryServerAddress","vpcInterfaceAdapter"]},"aws-native:mediaconnect:FlowNdiSourceSettings":{"properties":{"sourceName":{"type":"string"}},"type":"object"},"aws-native:mediaconnect:FlowNdiState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowOutputAutomaticEncryptionKeyConfiguration":{"description":"Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.","type":"object"},"aws-native:mediaconnect:FlowOutputDestinationConfiguration":{"description":"The definition of a media stream that is associated with the output.","properties":{"destinationIp":{"type":"string","description":"The IP address where contents of the media stream will be sent."},"destinationPort":{"type":"integer","description":"The port to use when the content of the media stream is distributed to the output."},"interface":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputInterface","description":"The VPC interface that is used for the media stream associated with the output."}},"type":"object","required":["destinationIp","destinationPort","interface"]},"aws-native:mediaconnect:FlowOutputEncodingParameters":{"description":"A collection of parameters that determine how MediaConnect will convert the content. These fields only apply to outputs on flows that have a CDI source.","properties":{"compressionFactor":{"type":"number","description":"A value that is used to calculate compression for an output. The bitrate of the output is calculated as follows: Output bitrate = (1 / compressionFactor) * (source bitrate) This property only applies to outputs that use the ST 2110 JPEG XS protocol, with a flow source that uses the CDI protocol. Valid values are in the range of 3.0 to 10.0, inclusive."},"encoderProfile":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputEncodingParametersEncoderProfile","description":"A setting on the encoder that drives compression settings. This property only applies to video media streams associated with outputs that use the ST 2110 JPEG XS protocol, with a flow source that uses the CDI protocol."}},"type":"object","required":["compressionFactor"]},"aws-native:mediaconnect:FlowOutputEncodingParametersEncoderProfile":{"description":"A setting on the encoder that drives compression settings. This property only applies to video media streams associated with outputs that use the ST 2110 JPEG XS protocol, with a flow source that uses the CDI protocol.","type":"string","enum":[{"name":"Main","value":"main"},{"name":"High","value":"high"}]},"aws-native:mediaconnect:FlowOutputEncryption":{"description":"Information about the encryption of the flow.","properties":{"algorithm":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputEncryptionAlgorithm","description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256)."},"keyType":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputEncryptionKeyType","description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key)."},"roleArn":{"type":"string","description":"The ARN of the role that you created during setup (when you set up AWS Elemental MediaConnect as a trusted entity)."},"secretArn":{"type":"string","description":" The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption."}},"type":"object","required":["roleArn","secretArn"]},"aws-native:mediaconnect:FlowOutputEncryptionAlgorithm":{"description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256).","type":"string","enum":[{"name":"Aes128","value":"aes128"},{"name":"Aes192","value":"aes192"},{"name":"Aes256","value":"aes256"}]},"aws-native:mediaconnect:FlowOutputEncryptionKeyType":{"description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key).","type":"string","enum":[{"name":"StaticKey","value":"static-key"},{"name":"SrtPassword","value":"srt-password"}]},"aws-native:mediaconnect:FlowOutputFlowTransitEncryption":{"description":"The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.","properties":{"encryptionKeyConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:FlowOutputFlowTransitEncryptionKeyConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:FlowOutputFlowTransitEncryptionKeyConfiguration1Properties"}]},"encryptionKeyType":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputFlowTransitEncryptionKeyType"}},"type":"object","required":["encryptionKeyConfiguration"]},"aws-native:mediaconnect:FlowOutputFlowTransitEncryptionKeyConfiguration0Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"secretsManager":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["secretsManager"]},"aws-native:mediaconnect:FlowOutputFlowTransitEncryptionKeyConfiguration1Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"automatic":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputAutomaticEncryptionKeyConfiguration"}},"type":"object","required":["automatic"]},"aws-native:mediaconnect:FlowOutputFlowTransitEncryptionKeyType":{"type":"string","enum":[{"name":"SecretsManager","value":"SECRETS_MANAGER"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:mediaconnect:FlowOutputInterface":{"description":"The VPC interface that you want to use for the media stream associated with the output.","properties":{"name":{"type":"string","description":"The name of the VPC interface that you want to use for the media stream associated with the output."}},"type":"object","required":["name"]},"aws-native:mediaconnect:FlowOutputMediaStreamOutputConfiguration":{"description":"The media stream that is associated with the output, and the parameters for that association.","properties":{"destinationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputDestinationConfiguration"},"description":"The media streams that you want to associate with the output."},"encodingName":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputMediaStreamOutputConfigurationEncodingName","description":"The format that will be used to encode the data. For ancillary data streams, set the encoding name to smpte291. For audio streams, set the encoding name to pcm. For video streams on sources or outputs that use the CDI protocol, set the encoding name to raw. For video streams on sources or outputs that use the ST 2110 JPEG XS protocol, set the encoding name to jxsv."},"encodingParameters":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputEncodingParameters","description":"A collection of parameters that determine how MediaConnect will convert the content. These fields only apply to outputs on flows that have a CDI source."},"mediaStreamName":{"type":"string","description":"A name that helps you distinguish one media stream from another."}},"type":"object","required":["encodingName","mediaStreamName"]},"aws-native:mediaconnect:FlowOutputMediaStreamOutputConfigurationEncodingName":{"description":"The format that will be used to encode the data. For ancillary data streams, set the encoding name to smpte291. For audio streams, set the encoding name to pcm. For video streams on sources or outputs that use the CDI protocol, set the encoding name to raw. For video streams on sources or outputs that use the ST 2110 JPEG XS protocol, set the encoding name to jxsv.","type":"string","enum":[{"name":"Jxsv","value":"jxsv"},{"name":"Raw","value":"raw"},{"name":"Smpte291","value":"smpte291"},{"name":"Pcm","value":"pcm"}]},"aws-native:mediaconnect:FlowOutputOutputStatus":{"description":"An indication of whether the output should transmit data or not.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowOutputProtocol":{"description":"The protocol that is used by the source or output.","type":"string","enum":[{"name":"ZixiPush","value":"zixi-push"},{"name":"RtpFec","value":"rtp-fec"},{"name":"Rtp","value":"rtp"},{"name":"ZixiPull","value":"zixi-pull"},{"name":"Rist","value":"rist"},{"name":"SrtListener","value":"srt-listener"},{"name":"SrtCaller","value":"srt-caller"},{"name":"St2110Jpegxs","value":"st2110-jpegxs"},{"name":"Cdi","value":"cdi"},{"name":"NdiSpeedHq","value":"ndi-speed-hq"}]},"aws-native:mediaconnect:FlowOutputRouterIntegrationState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowOutputSecretsManagerEncryptionKeyConfiguration":{"description":"The configuration settings for transit encryption of a flow output using AWS Secrets Manager, including the secret ARN and role ARN.","properties":{"roleArn":{"type":"string","description":"The ARN of the IAM role used for transit encryption to the router input using AWS Secrets Manager."},"secretArn":{"type":"string","description":"The ARN of the AWS Secrets Manager secret used for transit encryption to the router input."}},"type":"object","required":["roleArn","secretArn"]},"aws-native:mediaconnect:FlowOutputTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediaconnect:FlowOutputVpcInterfaceAttachment":{"description":"The settings for attaching a VPC interface to an output.","properties":{"vpcInterfaceName":{"type":"string","description":"The name of the VPC interface to use for this output."}},"type":"object"},"aws-native:mediaconnect:FlowSecretsManagerEncryptionKeyConfiguration":{"description":"The configuration settings for transit encryption of a flow source using AWS Secrets Manager, including the secret ARN and role ARN.","properties":{"roleArn":{"type":"string","description":"The ARN of the IAM role used for transit encryption from the router output using AWS Secrets Manager."},"secretArn":{"type":"string","description":"The ARN of the AWS Secrets Manager secret used for transit encryption from the router output."}},"type":"object","required":["roleArn","secretArn"]},"aws-native:mediaconnect:FlowSilentAudio":{"description":"Configures settings for the SilentAudio metric.","properties":{"state":{"$ref":"#/types/aws-native:mediaconnect:FlowSilentAudioState","description":"Indicates whether the SilentAudio metric is enabled or disabled."},"thresholdSeconds":{"type":"integer","description":"Specifies the number of consecutive seconds of silence that triggers an event or alert."}},"type":"object"},"aws-native:mediaconnect:FlowSilentAudioState":{"description":"Indicates whether the SilentAudio metric is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowSize":{"description":"Determines the processing capacity and feature set of the flow. Set this optional parameter to LARGE if you want to enable NDI sources or outputs on the flow.","type":"string","enum":[{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"Large4x","value":"LARGE_4X"}]},"aws-native:mediaconnect:FlowSource":{"description":"The settings for the source of the flow.","properties":{"decryption":{"$ref":"#/types/aws-native:mediaconnect:FlowEncryption","description":"The type of decryption that is used on the content ingested from this source."},"description":{"type":"string","description":"A description for the source. This value is not used or seen outside of the current AWS Elemental MediaConnect account."},"entitlementArn":{"type":"string","description":"The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator's flow."},"gatewayBridgeSource":{"$ref":"#/types/aws-native:mediaconnect:FlowGatewayBridgeSource","description":"The source configuration for cloud flows receiving a stream from a bridge."},"ingestIp":{"type":"string","description":"The IP address that the flow will be listening on for incoming content."},"ingestPort":{"type":"integer","description":"The port that the flow will be listening on for incoming content."},"maxBitrate":{"type":"integer","description":"The smoothing max bitrate for RIST, RTP, and RTP-FEC streams."},"maxLatency":{"type":"integer","description":"The maximum latency in milliseconds. This parameter applies only to RIST-based and Zixi-based streams."},"maxSyncBuffer":{"type":"integer","description":"The size of the buffer (in milliseconds) to use to sync incoming source data."},"mediaStreamSourceConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStreamSourceConfiguration"},"description":"The media stream that is associated with the source, and the parameters for that association."},"minLatency":{"type":"integer","description":"The minimum latency in milliseconds."},"name":{"type":"string","description":"The name of the source.","replaceOnChanges":true},"ndiSourceSettings":{"$ref":"#/types/aws-native:mediaconnect:FlowNdiSourceSettings","description":"The settings for the NDI flow source. This includes the exact name of the upstream NDI sender that you want to connect to your flow source."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceProtocol","description":"The protocol that is used by the source."},"routerIntegrationState":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceRouterIntegrationState","description":"Indicates if router integration is enabled or disabled on the flow source."},"routerIntegrationTransitDecryption":{"$ref":"#/types/aws-native:mediaconnect:FlowTransitEncryption","description":"The decryption configuration for the flow source when router integration is enabled."},"senderControlPort":{"type":"integer","description":"The port that the flow uses to send outbound requests to initiate connection with the sender for fujitsu-qos protocol."},"senderIpAddress":{"type":"string","description":"The IP address that the flow communicates with to initiate connection with the sender for fujitsu-qos protocol."},"sourceArn":{"type":"string","description":"The ARN of the source."},"sourceIngestPort":{"type":"string","description":"The port that the flow will be listening on for incoming content.(ReadOnly)"},"sourceListenerAddress":{"type":"string","description":"Source IP or domain name for SRT-caller protocol."},"sourceListenerPort":{"type":"integer","description":"Source port for SRT-caller protocol."},"streamId":{"type":"string","description":"The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowTag"},"description":"Key-value pairs that can be used to tag this source."},"vpcInterfaceName":{"type":"string","description":"The name of the VPC Interface this Source is configured with."},"whitelistCidr":{"type":"string","description":"The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."}},"type":"object"},"aws-native:mediaconnect:FlowSourceEncryption":{"description":"Information about the encryption of the flow.","properties":{"algorithm":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceEncryptionAlgorithm","description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256)."},"constantInitializationVector":{"type":"string","description":"A 128-bit, 16-byte hex value represented by a 32-character string, to be used with the key for encrypting content. This parameter is not valid for static key encryption."},"deviceId":{"type":"string","description":"The value of one of the devices that you configured with your digital rights management (DRM) platform key provider. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"keyType":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceEncryptionKeyType","description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key)."},"region":{"type":"string","description":"The AWS Region that the API Gateway proxy endpoint was created in. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"resourceId":{"type":"string","description":"An identifier for the content. The service sends this value to the key server to identify the current endpoint. The resource ID is also known as the content ID. This parameter is required for SPEKE encryption and is not valid for static key encryption."},"roleArn":{"type":"string","description":"The ARN of the role that you created during setup (when you set up AWS Elemental MediaConnect as a trusted entity)."},"secretArn":{"type":"string","description":" The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption."},"url":{"type":"string","description":"The URL from the API Gateway proxy that you set up to talk to your key server. This parameter is required for SPEKE encryption and is not valid for static key encryption."}},"type":"object","required":["roleArn"]},"aws-native:mediaconnect:FlowSourceEncryptionAlgorithm":{"description":"The type of algorithm that is used for the encryption (such as aes128, aes192, or aes256).","type":"string","enum":[{"name":"Aes128","value":"aes128"},{"name":"Aes192","value":"aes192"},{"name":"Aes256","value":"aes256"}]},"aws-native:mediaconnect:FlowSourceEncryptionKeyType":{"description":"The type of key that is used for the encryption. If no keyType is provided, the service will use the default setting (static-key).","type":"string","enum":[{"name":"Speke","value":"speke"},{"name":"StaticKey","value":"static-key"},{"name":"SrtPassword","value":"srt-password"}]},"aws-native:mediaconnect:FlowSourceGatewayBridgeSource":{"description":"The source configuration for cloud flows receiving a stream from a bridge.","properties":{"bridgeArn":{"type":"string","description":"The ARN of the bridge feeding this flow."},"vpcInterfaceAttachment":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceVpcInterfaceAttachment","description":"The name of the VPC interface attachment to use for this bridge source."}},"type":"object","required":["bridgeArn"]},"aws-native:mediaconnect:FlowSourceMonitoringConfig":{"description":"The settings for source monitoring.","properties":{"audioMonitoringSettings":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowAudioMonitoringSetting"},"description":"Contains the settings for audio stream metrics monitoring."},"contentQualityAnalysisState":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceMonitoringConfigContentQualityAnalysisState","description":"Indicates whether content quality analysis is enabled or disabled."},"thumbnailState":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceMonitoringConfigThumbnailState","description":"The state of thumbnail monitoring."},"videoMonitoringSettings":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowVideoMonitoringSetting"},"description":"Contains the settings for video stream metrics monitoring."}},"type":"object"},"aws-native:mediaconnect:FlowSourceMonitoringConfigContentQualityAnalysisState":{"description":"Indicates whether content quality analysis is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowSourceMonitoringConfigThumbnailState":{"description":"The state of thumbnail monitoring.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowSourceProtocol":{"description":"The protocol that is used by the source.","type":"string","enum":[{"name":"ZixiPush","value":"zixi-push"},{"name":"RtpFec","value":"rtp-fec"},{"name":"Rtp","value":"rtp"},{"name":"Rist","value":"rist"},{"name":"SrtListener","value":"srt-listener"},{"name":"SrtCaller","value":"srt-caller"},{"name":"St2110Jpegxs","value":"st2110-jpegxs"},{"name":"Cdi","value":"cdi"},{"name":"NdiSpeedHq","value":"ndi-speed-hq"}]},"aws-native:mediaconnect:FlowSourceRouterIntegrationState":{"description":"Indicates if router integration is enabled or disabled on the flow source.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:FlowSourceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediaconnect:FlowSourceVpcInterfaceAttachment":{"description":"The settings for attaching a VPC interface to an resource.","properties":{"vpcInterfaceName":{"type":"string","description":"The name of the VPC interface to use for this resource."}},"type":"object"},"aws-native:mediaconnect:FlowTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediaconnect:FlowTransitEncryption":{"description":"The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.","properties":{"encryptionKeyConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:FlowTransitEncryptionKeyConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:FlowTransitEncryptionKeyConfiguration1Properties"}]},"encryptionKeyType":{"$ref":"#/types/aws-native:mediaconnect:FlowTransitEncryptionKeyType"}},"type":"object","required":["encryptionKeyConfiguration"]},"aws-native:mediaconnect:FlowTransitEncryptionKeyConfiguration0Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"secretsManager":{"$ref":"#/types/aws-native:mediaconnect:FlowSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["secretsManager"]},"aws-native:mediaconnect:FlowTransitEncryptionKeyConfiguration1Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"automatic":{"$ref":"#/types/aws-native:mediaconnect:FlowAutomaticEncryptionKeyConfiguration"}},"type":"object","required":["automatic"]},"aws-native:mediaconnect:FlowTransitEncryptionKeyType":{"type":"string","enum":[{"name":"SecretsManager","value":"SECRETS_MANAGER"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:mediaconnect:FlowVideoMonitoringSetting":{"description":"Specifies the configuration for video stream metrics monitoring.","properties":{"blackFrames":{"$ref":"#/types/aws-native:mediaconnect:FlowBlackFrames","description":"Detects video frames that are black."},"frozenFrames":{"$ref":"#/types/aws-native:mediaconnect:FlowFrozenFrames","description":"Detects video frames that have not changed."}},"type":"object"},"aws-native:mediaconnect:FlowVpcInterface":{"description":"The details of a VPC interface.","properties":{"name":{"type":"string","description":"Immutable and has to be a unique against other VpcInterfaces in this Flow."},"networkInterfaceIds":{"type":"array","items":{"type":"string"},"description":"IDs of the network interfaces created in customer's account by MediaConnect."},"networkInterfaceType":{"$ref":"#/types/aws-native:mediaconnect:FlowVpcInterfaceNetworkInterfaceType","description":"The type of network adapter that you want MediaConnect to use on this interface. If you don't set this value, it defaults to ENA."},"roleArn":{"type":"string","description":"Role Arn MediaConnect can assume to create ENIs in customer's account."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"Security Group IDs to be used on ENI."},"subnetId":{"type":"string","description":"Subnet must be in the AZ of the Flow"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowTag"},"description":"Key-value pairs that can be used to tag this VPC interface."}},"type":"object","required":["name","roleArn","securityGroupIds","subnetId"]},"aws-native:mediaconnect:FlowVpcInterfaceAttachment":{"description":"The settings for attaching a VPC interface to an resource.","properties":{"vpcInterfaceName":{"type":"string","description":"The name of the VPC interface to use for this resource."}},"type":"object"},"aws-native:mediaconnect:FlowVpcInterfaceNetworkInterfaceType":{"description":"The type of network adapter that you want MediaConnect to use on this interface. If you don't set this value, it defaults to ENA.","type":"string","enum":[{"name":"Ena","value":"ena"},{"name":"Efa","value":"efa"}]},"aws-native:mediaconnect:GatewayNetwork":{"description":"The network settings for a gateway.","properties":{"cidrBlock":{"type":"string","description":"A unique IP address range to use for this network. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."},"name":{"type":"string","description":"The name of the network. This name is used to reference the network and must be unique among networks in this gateway."}},"type":"object","required":["cidrBlock","name"]},"aws-native:mediaconnect:GatewayState":{"description":"The current status of the gateway.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Error","value":"ERROR"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:mediaconnect:RouterInputAutomaticEncryptionKeyConfiguration":{"description":"Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.","type":"object"},"aws-native:mediaconnect:RouterInputConfiguration0Properties":{"description":"The configuration settings for a router input.","properties":{"standard":{"$ref":"#/types/aws-native:mediaconnect:RouterInputStandardRouterInputConfiguration"}},"type":"object","required":["standard"]},"aws-native:mediaconnect:RouterInputConfiguration1Properties":{"description":"The configuration settings for a router input.","properties":{"failover":{"$ref":"#/types/aws-native:mediaconnect:RouterInputFailoverRouterInputConfiguration"}},"type":"object","required":["failover"]},"aws-native:mediaconnect:RouterInputConfiguration2Properties":{"description":"The configuration settings for a router input.","properties":{"merge":{"$ref":"#/types/aws-native:mediaconnect:RouterInputMergeRouterInputConfiguration"}},"type":"object","required":["merge"]},"aws-native:mediaconnect:RouterInputConfiguration3Properties":{"description":"The configuration settings for a router input.","properties":{"mediaConnectFlow":{"$ref":"#/types/aws-native:mediaconnect:RouterInputMediaConnectFlowRouterInputConfiguration"}},"type":"object","required":["mediaConnectFlow"]},"aws-native:mediaconnect:RouterInputDay":{"type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:mediaconnect:RouterInputDefaultMaintenanceConfiguration":{"description":"Configuration settings for default maintenance scheduling.","type":"object"},"aws-native:mediaconnect:RouterInputFailoverInputSourcePriorityMode":{"type":"string","enum":[{"name":"NoPriority","value":"NO_PRIORITY"},{"name":"PrimarySecondary","value":"PRIMARY_SECONDARY"}]},"aws-native:mediaconnect:RouterInputFailoverRouterInputConfiguration":{"description":"Configuration settings for a failover router input that allows switching between two input sources.","properties":{"networkInterfaceArn":{"type":"string","description":"The ARN of the network interface to use for this failover router input."},"primarySourceIndex":{"type":"integer","description":"The index (0 or 1) that specifies which source in the protocol configurations list is currently active. Used to control which of the two failover sources is currently selected. This field is ignored when sourcePriorityMode is set to NO_PRIORITY"},"protocolConfigurations":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration2Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration3Properties"}]},"description":"A list of exactly two protocol configurations for the failover input sources. Both must use the same protocol type."},"sourcePriorityMode":{"$ref":"#/types/aws-native:mediaconnect:RouterInputFailoverInputSourcePriorityMode"}},"type":"object","required":["networkInterfaceArn","protocolConfigurations","sourcePriorityMode"]},"aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration0Properties":{"description":"Protocol configuration settings for failover router inputs.","properties":{"rtp":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRtpRouterInputConfiguration"}},"type":"object","required":["rtp"]},"aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration1Properties":{"description":"Protocol configuration settings for failover router inputs.","properties":{"rist":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRistRouterInputConfiguration"}},"type":"object","required":["rist"]},"aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration2Properties":{"description":"Protocol configuration settings for failover router inputs.","properties":{"srtListener":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSrtListenerRouterInputConfiguration"}},"type":"object","required":["srtListener"]},"aws-native:mediaconnect:RouterInputFailoverRouterInputProtocolConfiguration3Properties":{"description":"Protocol configuration settings for failover router inputs.","properties":{"srtCaller":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSrtCallerRouterInputConfiguration"}},"type":"object","required":["srtCaller"]},"aws-native:mediaconnect:RouterInputFlowTransitEncryption":{"description":"The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.","properties":{"encryptionKeyConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputFlowTransitEncryptionKeyConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputFlowTransitEncryptionKeyConfiguration1Properties"}]},"encryptionKeyType":{"$ref":"#/types/aws-native:mediaconnect:RouterInputFlowTransitEncryptionKeyType"}},"type":"object","required":["encryptionKeyConfiguration"]},"aws-native:mediaconnect:RouterInputFlowTransitEncryptionKeyConfiguration0Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"secretsManager":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["secretsManager"]},"aws-native:mediaconnect:RouterInputFlowTransitEncryptionKeyConfiguration1Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"automatic":{"$ref":"#/types/aws-native:mediaconnect:RouterInputAutomaticEncryptionKeyConfiguration"}},"type":"object","required":["automatic"]},"aws-native:mediaconnect:RouterInputFlowTransitEncryptionKeyType":{"type":"string","enum":[{"name":"SecretsManager","value":"SECRETS_MANAGER"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:mediaconnect:RouterInputForwardErrorCorrectionState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:RouterInputMaintenanceConfiguration0Properties":{"description":"The configuration settings for maintenance operations, including preferred maintenance windows and schedules.","properties":{"preferredDayTime":{"$ref":"#/types/aws-native:mediaconnect:RouterInputPreferredDayTimeMaintenanceConfiguration"}},"type":"object","required":["preferredDayTime"]},"aws-native:mediaconnect:RouterInputMaintenanceConfiguration1Properties":{"description":"The configuration settings for maintenance operations, including preferred maintenance windows and schedules.","properties":{"default":{"$ref":"#/types/aws-native:mediaconnect:RouterInputDefaultMaintenanceConfiguration"}},"type":"object","required":["default"]},"aws-native:mediaconnect:RouterInputMaintenanceType":{"type":"string","enum":[{"name":"PreferredDayTime","value":"PREFERRED_DAY_TIME"},{"name":"Default","value":"DEFAULT"}]},"aws-native:mediaconnect:RouterInputMediaConnectFlowRouterInputConfiguration":{"description":"Configuration settings for connecting a router input to a flow output.","properties":{"flowArn":{"type":"string","description":"The ARN of the flow to connect to."},"flowOutputArn":{"type":"string","description":"The ARN of the flow output to connect to this router input."},"sourceTransitDecryption":{"$ref":"#/types/aws-native:mediaconnect:RouterInputFlowTransitEncryption"}},"type":"object","required":["sourceTransitDecryption"]},"aws-native:mediaconnect:RouterInputMergeRouterInputConfiguration":{"description":"Configuration settings for a merge router input that combines two input sources.","properties":{"mergeRecoveryWindowMilliseconds":{"type":"integer","description":"The time window in milliseconds for merging the two input sources."},"networkInterfaceArn":{"type":"string","description":"The ARN of the network interface to use for this merge router input."},"protocolConfigurations":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputMergeRouterInputProtocolConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputMergeRouterInputProtocolConfiguration1Properties"}]},"description":"A list of exactly two protocol configurations for the merge input sources. Both must use the same protocol type."}},"type":"object","required":["mergeRecoveryWindowMilliseconds","networkInterfaceArn","protocolConfigurations"]},"aws-native:mediaconnect:RouterInputMergeRouterInputProtocolConfiguration0Properties":{"description":"Protocol configuration settings for merge router inputs.","properties":{"rtp":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRtpRouterInputConfiguration"}},"type":"object","required":["rtp"]},"aws-native:mediaconnect:RouterInputMergeRouterInputProtocolConfiguration1Properties":{"description":"Protocol configuration settings for merge router inputs.","properties":{"rist":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRistRouterInputConfiguration"}},"type":"object","required":["rist"]},"aws-native:mediaconnect:RouterInputPreferredDayTimeMaintenanceConfiguration":{"description":"Configuration for preferred day and time maintenance settings.","properties":{"day":{"$ref":"#/types/aws-native:mediaconnect:RouterInputDay"},"time":{"type":"string","description":"The preferred time for maintenance operations."}},"type":"object","required":["day","time"]},"aws-native:mediaconnect:RouterInputProtocol":{"type":"string","enum":[{"name":"Rtp","value":"RTP"},{"name":"Rist","value":"RIST"},{"name":"SrtCaller","value":"SRT_CALLER"},{"name":"SrtListener","value":"SRT_LISTENER"}]},"aws-native:mediaconnect:RouterInputProtocolConfiguration0Properties":{"description":"The protocol configuration settings for a router input.","properties":{"rtp":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRtpRouterInputConfiguration"}},"type":"object","required":["rtp"]},"aws-native:mediaconnect:RouterInputProtocolConfiguration1Properties":{"description":"The protocol configuration settings for a router input.","properties":{"rist":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRistRouterInputConfiguration"}},"type":"object","required":["rist"]},"aws-native:mediaconnect:RouterInputProtocolConfiguration2Properties":{"description":"The protocol configuration settings for a router input.","properties":{"srtListener":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSrtListenerRouterInputConfiguration"}},"type":"object","required":["srtListener"]},"aws-native:mediaconnect:RouterInputProtocolConfiguration3Properties":{"description":"The protocol configuration settings for a router input.","properties":{"srtCaller":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSrtCallerRouterInputConfiguration"}},"type":"object","required":["srtCaller"]},"aws-native:mediaconnect:RouterInputRistRouterInputConfiguration":{"description":"The configuration settings for a router input using the RIST (Reliable Internet Stream Transport) protocol, including the port and recovery latency.","properties":{"port":{"type":"integer","description":"The port number used for the RIST protocol in the router input configuration."},"recoveryLatencyMilliseconds":{"type":"integer","description":"The recovery latency in milliseconds for the RIST protocol in the router input configuration."}},"type":"object","required":["port","recoveryLatencyMilliseconds"]},"aws-native:mediaconnect:RouterInputRoutingScope":{"type":"string","enum":[{"name":"Regional","value":"REGIONAL"},{"name":"Global","value":"GLOBAL"}]},"aws-native:mediaconnect:RouterInputRtpRouterInputConfiguration":{"description":"The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state.","properties":{"forwardErrorCorrection":{"$ref":"#/types/aws-native:mediaconnect:RouterInputForwardErrorCorrectionState"},"port":{"type":"integer","description":"The port number used for the RTP protocol in the router input configuration."}},"type":"object","required":["port"]},"aws-native:mediaconnect:RouterInputSecretsManagerEncryptionKeyConfiguration":{"description":"The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.","properties":{"roleArn":{"type":"string","description":"The ARN of the IAM role assumed by MediaConnect to access the AWS Secrets Manager secret."},"secretArn":{"type":"string","description":"The ARN of the AWS Secrets Manager secret used for transit encryption."}},"type":"object","required":["roleArn","secretArn"]},"aws-native:mediaconnect:RouterInputSrtCallerRouterInputConfiguration":{"description":"The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in caller mode, including the source address and port, minimum latency, stream ID, and decryption key configuration.","properties":{"decryptionConfiguration":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSrtDecryptionConfiguration"},"minimumLatencyMilliseconds":{"type":"integer","description":"The minimum latency in milliseconds for the SRT protocol in caller mode."},"sourceAddress":{"type":"string","description":"The source IP address for the SRT protocol in caller mode."},"sourcePort":{"type":"integer","description":"The source port number for the SRT protocol in caller mode."},"streamId":{"type":"string","description":"The stream ID for the SRT protocol in caller mode."}},"type":"object","required":["minimumLatencyMilliseconds","sourceAddress","sourcePort"]},"aws-native:mediaconnect:RouterInputSrtDecryptionConfiguration":{"description":"Contains the configuration settings for decrypting SRT streams, including the encryption key details and decryption parameters.","properties":{"encryptionKey":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["encryptionKey"]},"aws-native:mediaconnect:RouterInputSrtListenerRouterInputConfiguration":{"description":"The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and decryption key configuration.","properties":{"decryptionConfiguration":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSrtDecryptionConfiguration"},"minimumLatencyMilliseconds":{"type":"integer","description":"The minimum latency in milliseconds for the SRT protocol in listener mode."},"port":{"type":"integer","description":"The port number for the SRT protocol in listener mode."}},"type":"object","required":["minimumLatencyMilliseconds","port"]},"aws-native:mediaconnect:RouterInputStandardRouterInputConfiguration":{"description":"The configuration settings for a standard router input, including the protocol, protocol-specific configuration, network interface, and availability zone.","properties":{"networkInterfaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the network interface associated with the standard router input."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:RouterInputProtocol"},"protocolConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputProtocolConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputProtocolConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputProtocolConfiguration2Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputProtocolConfiguration3Properties"}]}},"type":"object","required":["networkInterfaceArn","protocolConfiguration"]},"aws-native:mediaconnect:RouterInputState":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Standby","value":"STANDBY"},{"name":"Starting","value":"STARTING"},{"name":"Active","value":"ACTIVE"},{"name":"Stopping","value":"STOPPING"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"Error","value":"ERROR"},{"name":"Recovering","value":"RECOVERING"},{"name":"Migrating","value":"MIGRATING"}]},"aws-native:mediaconnect:RouterInputTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediaconnect:RouterInputTier":{"type":"string","enum":[{"name":"Input100","value":"INPUT_100"},{"name":"Input50","value":"INPUT_50"},{"name":"Input20","value":"INPUT_20"}]},"aws-native:mediaconnect:RouterInputTransitEncryption":{"description":"The transit encryption settings for a router input.","properties":{"encryptionKeyConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputTransitEncryptionKeyConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputTransitEncryptionKeyConfiguration1Properties"}]},"encryptionKeyType":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTransitEncryptionKeyType"}},"type":"object","required":["encryptionKeyConfiguration"]},"aws-native:mediaconnect:RouterInputTransitEncryptionKeyConfiguration0Properties":{"description":"Defines the configuration settings for transit encryption keys.","properties":{"secretsManager":{"$ref":"#/types/aws-native:mediaconnect:RouterInputSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["secretsManager"]},"aws-native:mediaconnect:RouterInputTransitEncryptionKeyConfiguration1Properties":{"description":"Defines the configuration settings for transit encryption keys.","properties":{"automatic":{"$ref":"#/types/aws-native:mediaconnect:RouterInputAutomaticEncryptionKeyConfiguration"}},"type":"object","required":["automatic"]},"aws-native:mediaconnect:RouterInputTransitEncryptionKeyType":{"type":"string","enum":[{"name":"SecretsManager","value":"SECRETS_MANAGER"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:mediaconnect:RouterInputType":{"type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Failover","value":"FAILOVER"},{"name":"Merge","value":"MERGE"},{"name":"MediaconnectFlow","value":"MEDIACONNECT_FLOW"}]},"aws-native:mediaconnect:RouterNetworkInterfaceConfiguration0Properties":{"description":"The configuration settings for a router network interface.","properties":{"public":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfacePublicRouterNetworkInterfaceConfiguration"}},"type":"object","required":["public"]},"aws-native:mediaconnect:RouterNetworkInterfaceConfiguration1Properties":{"description":"The configuration settings for a router network interface.","properties":{"vpc":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceVpcRouterNetworkInterfaceConfiguration"}},"type":"object","required":["vpc"]},"aws-native:mediaconnect:RouterNetworkInterfacePublicRouterNetworkInterfaceConfiguration":{"description":"The configuration settings for a public router network interface, including the list of allowed CIDR blocks.","properties":{"allowRules":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfacePublicRouterNetworkInterfaceRule"},"description":"The list of allowed CIDR blocks for the public router network interface."}},"type":"object","required":["allowRules"]},"aws-native:mediaconnect:RouterNetworkInterfacePublicRouterNetworkInterfaceRule":{"description":"A rule that allows a specific CIDR block to access the public router network interface.","properties":{"cidr":{"type":"string","description":"The CIDR block that is allowed to access the public router network interface."}},"type":"object","required":["cidr"]},"aws-native:mediaconnect:RouterNetworkInterfaceState":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Error","value":"ERROR"},{"name":"Recovering","value":"RECOVERING"}]},"aws-native:mediaconnect:RouterNetworkInterfaceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediaconnect:RouterNetworkInterfaceType":{"type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Vpc","value":"VPC"}]},"aws-native:mediaconnect:RouterNetworkInterfaceVpcRouterNetworkInterfaceConfiguration":{"description":"The configuration settings for a router network interface within a VPC, including the security group IDs and subnet ID.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups to associate with the router network interface within the VPC."},"subnetId":{"type":"string","description":"The ID of the subnet within the VPC to associate the router network interface with."}},"type":"object","required":["securityGroupIds","subnetId"]},"aws-native:mediaconnect:RouterOutputResourceAutomaticEncryptionKeyConfiguration":{"description":"Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.","type":"object"},"aws-native:mediaconnect:RouterOutputResourceDay":{"type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:mediaconnect:RouterOutputResourceDefaultMaintenanceConfiguration":{"description":"Configuration settings for default maintenance scheduling.","type":"object"},"aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryption":{"description":"The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.","properties":{"encryptionKeyConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryptionKeyConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryptionKeyConfiguration1Properties"}]},"encryptionKeyType":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryptionKeyType"}},"type":"object","required":["encryptionKeyConfiguration"]},"aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryptionKeyConfiguration0Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"secretsManager":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["secretsManager"]},"aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryptionKeyConfiguration1Properties":{"description":"Configuration settings for flow transit encryption keys.","properties":{"automatic":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceAutomaticEncryptionKeyConfiguration"}},"type":"object","required":["automatic"]},"aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryptionKeyType":{"type":"string","enum":[{"name":"SecretsManager","value":"SECRETS_MANAGER"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:mediaconnect:RouterOutputResourceForwardErrorCorrectionState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration0Properties":{"description":"The configuration settings for maintenance operations, including preferred maintenance windows and schedules.","properties":{"preferredDayTime":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourcePreferredDayTimeMaintenanceConfiguration"}},"type":"object","required":["preferredDayTime"]},"aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration1Properties":{"description":"The configuration settings for maintenance operations, including preferred maintenance windows and schedules.","properties":{"default":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceDefaultMaintenanceConfiguration"}},"type":"object","required":["default"]},"aws-native:mediaconnect:RouterOutputResourceMaintenanceType":{"type":"string","enum":[{"name":"PreferredDayTime","value":"PREFERRED_DAY_TIME"},{"name":"Default","value":"DEFAULT"}]},"aws-native:mediaconnect:RouterOutputResourceMediaConnectFlowRouterOutputConfiguration":{"description":"Configuration settings for connecting a router output to a MediaConnect flow source.","properties":{"destinationTransitEncryption":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceFlowTransitEncryption"},"flowArn":{"type":"string","description":"The ARN of the flow to connect to this router output."},"flowSourceArn":{"type":"string","description":"The ARN of the flow source to connect to this router output."}},"type":"object","required":["destinationTransitEncryption"]},"aws-native:mediaconnect:RouterOutputResourceMediaLiveInputPipelineId":{"type":"string","enum":[{"name":"Pipeline0","value":"PIPELINE_0"},{"name":"Pipeline1","value":"PIPELINE_1"}]},"aws-native:mediaconnect:RouterOutputResourceMediaLiveInputRouterOutputConfiguration":{"description":"Configuration settings for connecting a router output to a MediaLive input.","properties":{"destinationTransitEncryption":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryption"},"mediaLiveInputArn":{"type":"string","description":"The ARN of the MediaLive input to connect to this router output."},"mediaLivePipelineId":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaLiveInputPipelineId"}},"type":"object","required":["destinationTransitEncryption"]},"aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryption":{"description":"The encryption configuration that defines how content is encrypted during transit between MediaConnect Router and MediaLive. This configuration determines whether encryption keys are automatically managed by the service or manually managed through AWS Secrets Manager.","properties":{"encryptionKeyConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration1Properties"}]},"encryptionKeyType":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryptionKeyType"}},"type":"object","required":["encryptionKeyConfiguration"]},"aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration0Properties":{"description":"Configuration settings for the MediaLive transit encryption key.","properties":{"secretsManager":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["secretsManager"]},"aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration1Properties":{"description":"Configuration settings for the MediaLive transit encryption key.","properties":{"automatic":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceAutomaticEncryptionKeyConfiguration"}},"type":"object","required":["automatic"]},"aws-native:mediaconnect:RouterOutputResourceMediaLiveTransitEncryptionKeyType":{"type":"string","enum":[{"name":"SecretsManager","value":"SECRETS_MANAGER"},{"name":"Automatic","value":"AUTOMATIC"}]},"aws-native:mediaconnect:RouterOutputResourcePreferredDayTimeMaintenanceConfiguration":{"description":"Configuration for preferred day and time maintenance settings.","properties":{"day":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceDay"},"time":{"type":"string","description":"The preferred time for maintenance operations."}},"type":"object","required":["day","time"]},"aws-native:mediaconnect:RouterOutputResourceRistRouterOutputConfiguration":{"description":"The configuration settings for a router output using the RIST (Reliable Internet Stream Transport) protocol, including the destination address and port.","properties":{"destinationAddress":{"type":"string","description":"The destination IP address for the RIST protocol in the router output configuration."},"destinationPort":{"type":"integer","description":"The destination port number for the RIST protocol in the router output configuration."}},"type":"object","required":["destinationAddress","destinationPort"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration0Properties":{"description":"The configuration settings for a router output.","properties":{"standard":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceStandardRouterOutputConfiguration"}},"type":"object","required":["standard"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration1Properties":{"description":"The configuration settings for a router output.","properties":{"mediaConnectFlow":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaConnectFlowRouterOutputConfiguration"}},"type":"object","required":["mediaConnectFlow"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration2Properties":{"description":"The configuration settings for a router output.","properties":{"mediaLiveInput":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMediaLiveInputRouterOutputConfiguration"}},"type":"object","required":["mediaLiveInput"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocol":{"type":"string","enum":[{"name":"Rtp","value":"RTP"},{"name":"Rist","value":"RIST"},{"name":"SrtCaller","value":"SRT_CALLER"},{"name":"SrtListener","value":"SRT_LISTENER"}]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration0Properties":{"description":"The protocol configuration settings for a router output.","properties":{"rtp":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRtpRouterOutputConfiguration"}},"type":"object","required":["rtp"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration1Properties":{"description":"The protocol configuration settings for a router output.","properties":{"rist":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRistRouterOutputConfiguration"}},"type":"object","required":["rist"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration2Properties":{"description":"The protocol configuration settings for a router output.","properties":{"srtListener":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSrtListenerRouterOutputConfiguration"}},"type":"object","required":["srtListener"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration3Properties":{"description":"The protocol configuration settings for a router output.","properties":{"srtCaller":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSrtCallerRouterOutputConfiguration"}},"type":"object","required":["srtCaller"]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputRoutedState":{"type":"string","enum":[{"name":"Routed","value":"ROUTED"},{"name":"Routing","value":"ROUTING"},{"name":"Unrouted","value":"UNROUTED"}]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputState":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Standby","value":"STANDBY"},{"name":"Starting","value":"STARTING"},{"name":"Active","value":"ACTIVE"},{"name":"Stopping","value":"STOPPING"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"Error","value":"ERROR"},{"name":"Recovering","value":"RECOVERING"},{"name":"Migrating","value":"MIGRATING"}]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputTier":{"type":"string","enum":[{"name":"Output100","value":"OUTPUT_100"},{"name":"Output50","value":"OUTPUT_50"},{"name":"Output20","value":"OUTPUT_20"}]},"aws-native:mediaconnect:RouterOutputResourceRouterOutputType":{"type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"MediaconnectFlow","value":"MEDIACONNECT_FLOW"},{"name":"MedialiveInput","value":"MEDIALIVE_INPUT"}]},"aws-native:mediaconnect:RouterOutputResourceRoutingScope":{"type":"string","enum":[{"name":"Regional","value":"REGIONAL"},{"name":"Global","value":"GLOBAL"}]},"aws-native:mediaconnect:RouterOutputResourceRtpRouterOutputConfiguration":{"description":"The configuration settings for a router output using the RTP (Real-Time Transport Protocol) protocol, including the destination address and port, and forward error correction state.","properties":{"destinationAddress":{"type":"string","description":"The destination IP address for the RTP protocol in the router output configuration."},"destinationPort":{"type":"integer","description":"The destination port number for the RTP protocol in the router output configuration."},"forwardErrorCorrection":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceForwardErrorCorrectionState"}},"type":"object","required":["destinationAddress","destinationPort"]},"aws-native:mediaconnect:RouterOutputResourceSecretsManagerEncryptionKeyConfiguration":{"description":"The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.","properties":{"roleArn":{"type":"string","description":"The ARN of the IAM role assumed by MediaConnect to access the AWS Secrets Manager secret."},"secretArn":{"type":"string","description":"The ARN of the AWS Secrets Manager secret used for transit encryption."}},"type":"object","required":["roleArn","secretArn"]},"aws-native:mediaconnect:RouterOutputResourceSrtCallerRouterOutputConfiguration":{"description":"The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in caller mode, including the destination address and port, minimum latency, stream ID, and encryption key configuration.","properties":{"destinationAddress":{"type":"string","description":"The destination IP address for the SRT protocol in caller mode."},"destinationPort":{"type":"integer","description":"The destination port number for the SRT protocol in caller mode."},"encryptionConfiguration":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSrtEncryptionConfiguration"},"minimumLatencyMilliseconds":{"type":"integer","description":"The minimum latency in milliseconds for the SRT protocol in caller mode."},"streamId":{"type":"string","description":"The stream ID for the SRT protocol in caller mode."}},"type":"object","required":["destinationAddress","destinationPort","minimumLatencyMilliseconds"]},"aws-native:mediaconnect:RouterOutputResourceSrtEncryptionConfiguration":{"description":"Contains the configuration settings for encrypting SRT streams, including the encryption key details and encryption parameters.","properties":{"encryptionKey":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSecretsManagerEncryptionKeyConfiguration"}},"type":"object","required":["encryptionKey"]},"aws-native:mediaconnect:RouterOutputResourceSrtListenerRouterOutputConfiguration":{"description":"The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and encryption key configuration.","properties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceSrtEncryptionConfiguration"},"minimumLatencyMilliseconds":{"type":"integer","description":"The minimum latency in milliseconds for the SRT protocol in listener mode."},"port":{"type":"integer","description":"The port number for the SRT protocol in listener mode."}},"type":"object","required":["minimumLatencyMilliseconds","port"]},"aws-native:mediaconnect:RouterOutputResourceStandardRouterOutputConfiguration":{"description":"The configuration settings for a standard router output, including the protocol, protocol-specific configuration, network interface, and availability zone.","properties":{"networkInterfaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the network interface associated with the standard router output."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocol"},"protocolConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration2Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputProtocolConfiguration3Properties"}]}},"type":"object","required":["networkInterfaceArn","protocolConfiguration"]},"aws-native:mediaconnect:RouterOutputResourceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:medialive:ChannelPlacementGroupState":{"description":"The current state of the ChannelPlacementGroupState","type":"string","enum":[{"name":"Unassigned","value":"UNASSIGNED"},{"name":"Assigning","value":"ASSIGNING"},{"name":"Assigned","value":"ASSIGNED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"Unassigning","value":"UNASSIGNING"}]},"aws-native:medialive:ChannelPlacementGroupTags":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:medialive:CloudWatchAlarmTemplateComparisonOperator":{"description":"The comparison operator used to compare the specified statistic and the threshold.","type":"string","enum":[{"name":"GreaterThanOrEqualToThreshold","value":"GreaterThanOrEqualToThreshold"},{"name":"GreaterThanThreshold","value":"GreaterThanThreshold"},{"name":"LessThanThreshold","value":"LessThanThreshold"},{"name":"LessThanOrEqualToThreshold","value":"LessThanOrEqualToThreshold"}]},"aws-native:medialive:CloudWatchAlarmTemplateStatistic":{"description":"The statistic to apply to the alarm's metric data.","type":"string","enum":[{"name":"SampleCount","value":"SampleCount"},{"name":"Average","value":"Average"},{"name":"Sum","value":"Sum"},{"name":"Minimum","value":"Minimum"},{"name":"Maximum","value":"Maximum"}]},"aws-native:medialive:CloudWatchAlarmTemplateTargetResourceType":{"description":"The resource type this template should dynamically generate cloudwatch metric alarms for.","type":"string","enum":[{"name":"CloudfrontDistribution","value":"CLOUDFRONT_DISTRIBUTION"},{"name":"MedialiveMultiplex","value":"MEDIALIVE_MULTIPLEX"},{"name":"MedialiveChannel","value":"MEDIALIVE_CHANNEL"},{"name":"MedialiveInputDevice","value":"MEDIALIVE_INPUT_DEVICE"},{"name":"MediapackageChannel","value":"MEDIAPACKAGE_CHANNEL"},{"name":"MediapackageOriginEndpoint","value":"MEDIAPACKAGE_ORIGIN_ENDPOINT"},{"name":"MediaconnectFlow","value":"MEDIACONNECT_FLOW"},{"name":"MediatailorPlaybackConfiguration","value":"MEDIATAILOR_PLAYBACK_CONFIGURATION"},{"name":"S3Bucket","value":"S3_BUCKET"}]},"aws-native:medialive:CloudWatchAlarmTemplateTreatMissingData":{"description":"Specifies how missing data points are treated when evaluating the alarm's condition.","type":"string","enum":[{"name":"NotBreaching","value":"notBreaching"},{"name":"Breaching","value":"breaching"},{"name":"Ignore","value":"ignore"},{"name":"Missing","value":"missing"}]},"aws-native:medialive:ClusterInterfaceMapping":{"description":"Network mappings for the cluster","properties":{"logicalInterfaceName":{"type":"string","description":"logical interface name, unique in the list"},"networkId":{"type":"string","description":"Network Id to be associated with the logical interface name, can be duplicated in list"}},"type":"object"},"aws-native:medialive:ClusterNetworkSettings":{"description":"On premises settings which will have the interface network mappings and default Output logical interface","properties":{"defaultRoute":{"type":"string","description":"Default value if the customer does not define it in channel Output API"},"interfaceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:ClusterInterfaceMapping"},"description":"Network mappings for the cluster"}},"type":"object"},"aws-native:medialive:ClusterState":{"description":"The current state of the Cluster.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:medialive:ClusterTags":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:medialive:ClusterType":{"description":"The hardware type for the cluster.","type":"string","enum":[{"name":"OnPremises","value":"ON_PREMISES"},{"name":"OutpostsRack","value":"OUTPOSTS_RACK"},{"name":"OutpostsServer","value":"OUTPOSTS_SERVER"},{"name":"Ec2","value":"EC2"}]},"aws-native:medialive:EventBridgeRuleTemplateEventType":{"description":"The type of event to match with the rule.","type":"string","enum":[{"name":"MedialiveMultiplexAlert","value":"MEDIALIVE_MULTIPLEX_ALERT"},{"name":"MedialiveMultiplexStateChange","value":"MEDIALIVE_MULTIPLEX_STATE_CHANGE"},{"name":"MedialiveChannelAlert","value":"MEDIALIVE_CHANNEL_ALERT"},{"name":"MedialiveChannelInputChange","value":"MEDIALIVE_CHANNEL_INPUT_CHANGE"},{"name":"MedialiveChannelStateChange","value":"MEDIALIVE_CHANNEL_STATE_CHANGE"},{"name":"MediapackageInputNotification","value":"MEDIAPACKAGE_INPUT_NOTIFICATION"},{"name":"MediapackageKeyProviderNotification","value":"MEDIAPACKAGE_KEY_PROVIDER_NOTIFICATION"},{"name":"MediapackageHarvestJobNotification","value":"MEDIAPACKAGE_HARVEST_JOB_NOTIFICATION"},{"name":"SignalMapActiveAlarm","value":"SIGNAL_MAP_ACTIVE_ALARM"},{"name":"MediaconnectAlert","value":"MEDIACONNECT_ALERT"},{"name":"MediaconnectSourceHealth","value":"MEDIACONNECT_SOURCE_HEALTH"},{"name":"MediaconnectOutputHealth","value":"MEDIACONNECT_OUTPUT_HEALTH"},{"name":"MediaconnectFlowStatusChange","value":"MEDIACONNECT_FLOW_STATUS_CHANGE"}]},"aws-native:medialive:EventBridgeRuleTemplateTarget":{"description":"The target to which to send matching events.","properties":{"arn":{"type":"string","description":"Target ARNs must be either an SNS topic or CloudWatch log group."}},"type":"object","required":["arn"]},"aws-native:medialive:MultiplexOutputDestination":{"description":"Multiplex MediaConnect output destination settings.","properties":{"multiplexMediaConnectOutputDestinationSettings":{"$ref":"#/types/aws-native:medialive:MultiplexOutputDestinationMultiplexMediaConnectOutputDestinationSettingsProperties","description":"Multiplex MediaConnect output destination settings."}},"type":"object"},"aws-native:medialive:MultiplexOutputDestinationMultiplexMediaConnectOutputDestinationSettingsProperties":{"description":"Multiplex MediaConnect output destination settings.","properties":{"entitlementArn":{"type":"string","description":"The MediaConnect entitlement ARN available as a Flow source."}},"type":"object"},"aws-native:medialive:MultiplexSettings":{"description":"A key-value pair to associate with a resource.","properties":{"maximumVideoBufferDelayMilliseconds":{"type":"integer","description":"Maximum video buffer delay in milliseconds."},"transportStreamBitrate":{"type":"integer","description":"Transport stream bit rate."},"transportStreamId":{"type":"integer","description":"Transport stream ID."},"transportStreamReservedBitrate":{"type":"integer","description":"Transport stream reserved bit rate."}},"type":"object","required":["transportStreamBitrate","transportStreamId"]},"aws-native:medialive:MultiplexState":{"description":"The current state of the multiplex.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Idle","value":"IDLE"},{"name":"Starting","value":"STARTING"},{"name":"Running","value":"RUNNING"},{"name":"Recovering","value":"RECOVERING"},{"name":"Stopping","value":"STOPPING"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:medialive:MultiplexTags":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:medialive:MultiplexprogramMultiplexProgramPacketIdentifiersMap":{"description":"Packet identifiers map for a given Multiplex program.","properties":{"audioPids":{"type":"array","items":{"type":"integer"}},"dvbSubPids":{"type":"array","items":{"type":"integer"}},"dvbTeletextPid":{"type":"integer"},"etvPlatformPid":{"type":"integer"},"etvSignalPid":{"type":"integer"},"klvDataPids":{"type":"array","items":{"type":"integer"}},"pcrPid":{"type":"integer"},"pmtPid":{"type":"integer"},"privateMetadataPid":{"type":"integer"},"scte27Pids":{"type":"array","items":{"type":"integer"}},"scte35Pid":{"type":"integer"},"timedMetadataPid":{"type":"integer"},"videoPid":{"type":"integer"}},"type":"object"},"aws-native:medialive:MultiplexprogramMultiplexProgramPipelineDetail":{"description":"The current source for one of the pipelines in the multiplex.","properties":{"activeChannelPipeline":{"type":"string","description":"Identifies the channel pipeline that is currently active for the pipeline (identified by PipelineId) in the multiplex."},"pipelineId":{"type":"string","description":"Identifies a specific pipeline in the multiplex."}},"type":"object"},"aws-native:medialive:MultiplexprogramMultiplexProgramServiceDescriptor":{"description":"Transport stream service descriptor configuration for the Multiplex program.","properties":{"providerName":{"type":"string","description":"Name of the provider."},"serviceName":{"type":"string","description":"Name of the service."}},"type":"object","required":["providerName","serviceName"]},"aws-native:medialive:MultiplexprogramMultiplexProgramSettings":{"description":"Multiplex Program settings configuration.","properties":{"preferredChannelPipeline":{"$ref":"#/types/aws-native:medialive:MultiplexprogramPreferredChannelPipeline","description":"Indicates which pipeline is preferred by the multiplex for program ingest."},"programNumber":{"type":"integer","description":"Unique program number."},"serviceDescriptor":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramServiceDescriptor","description":"Transport stream service descriptor configuration for the Multiplex program."},"videoSettings":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexVideoSettings","description":"Program video settings configuration."}},"type":"object","required":["programNumber"]},"aws-native:medialive:MultiplexprogramMultiplexVideoSettings":{"description":"The video configuration for each program in a multiplex.","type":"object"},"aws-native:medialive:MultiplexprogramPreferredChannelPipeline":{"description":"Indicates which pipeline is preferred by the multiplex for program ingest.\nIf set to \\\"PIPELINE_0\\\" or \\\"PIPELINE_1\\\" and an unhealthy ingest causes the multiplex to switch to the non-preferred pipeline,\nit will switch back once that ingest is healthy again. If set to \\\"CURRENTLY_ACTIVE\\\",\nit will not switch back to the other pipeline based on it recovering to a healthy state,\nit will only switch if the active pipeline becomes unhealthy.\n","type":"string","enum":[{"name":"CurrentlyActive","value":"CURRENTLY_ACTIVE"},{"name":"Pipeline0","value":"PIPELINE_0"},{"name":"Pipeline1","value":"PIPELINE_1"}]},"aws-native:medialive:NetworkIpPool":{"description":"IP address cidr pool","properties":{"cidr":{"type":"string","description":"IP address cidr pool"}},"type":"object"},"aws-native:medialive:NetworkRoute":{"properties":{"cidr":{"type":"string","description":"Ip address cidr"},"gateway":{"type":"string","description":"IP address for the route packet paths"}},"type":"object"},"aws-native:medialive:NetworkState":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Idle","value":"IDLE"},{"name":"InUse","value":"IN_USE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleted","value":"DELETED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:medialive:NetworkTags":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:medialive:SdiSourceMode":{"description":"The current state of the SdiSource.","type":"string","enum":[{"name":"Quadrant","value":"QUADRANT"},{"name":"Interleave","value":"INTERLEAVE"}]},"aws-native:medialive:SdiSourceState":{"description":"The current state of the SdiSource.","type":"string","enum":[{"name":"Idle","value":"IDLE"},{"name":"InUse","value":"IN_USE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:medialive:SdiSourceTags":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:medialive:SdiSourceType":{"description":"The interface mode of the SdiSource.","type":"string","enum":[{"name":"Single","value":"SINGLE"},{"name":"Quad","value":"QUAD"}]},"aws-native:medialive:SignalMapMediaResource":{"description":"An AWS resource used in media workflows.","properties":{"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:SignalMapMediaResourceNeighbor"},"description":"A direct destination neighbor to an Amazon Web Services media resource."},"name":{"type":"string","description":"The logical name of an AWS media resource."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:SignalMapMediaResourceNeighbor"},"description":"A direct source neighbor to an Amazon Web Services media resource."}},"type":"object"},"aws-native:medialive:SignalMapMediaResourceNeighbor":{"description":"A direct source or destination neighbor to an AWS media resource.","properties":{"arn":{"type":"string","description":"The ARN of a resource used in AWS media workflows."},"name":{"type":"string","description":"The logical name of an AWS media resource."}},"type":"object","required":["arn"]},"aws-native:medialive:SignalMapMonitorDeployment":{"description":"Represents the latest monitor deployment of a signal map.","properties":{"detailsUri":{"type":"string","description":"URI associated with a signal map's monitor deployment."},"errorMessage":{"type":"string","description":"Error message associated with a failed monitor deployment of a signal map."},"status":{"$ref":"#/types/aws-native:medialive:SignalMapMonitorDeploymentStatus","description":"The signal map monitor deployment status."}},"type":"object","required":["status"]},"aws-native:medialive:SignalMapMonitorDeploymentStatus":{"description":"A signal map's monitor deployment status.","type":"string","enum":[{"name":"NotDeployed","value":"NOT_DEPLOYED"},{"name":"DryRunDeploymentComplete","value":"DRY_RUN_DEPLOYMENT_COMPLETE"},{"name":"DryRunDeploymentFailed","value":"DRY_RUN_DEPLOYMENT_FAILED"},{"name":"DryRunDeploymentInProgress","value":"DRY_RUN_DEPLOYMENT_IN_PROGRESS"},{"name":"DeploymentComplete","value":"DEPLOYMENT_COMPLETE"},{"name":"DeploymentFailed","value":"DEPLOYMENT_FAILED"},{"name":"DeploymentInProgress","value":"DEPLOYMENT_IN_PROGRESS"},{"name":"DeleteComplete","value":"DELETE_COMPLETE"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"}]},"aws-native:medialive:SignalMapStatus":{"description":"A signal map's current status which is dependent on its lifecycle actions or associated jobs.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"CreateComplete","value":"CREATE_COMPLETE"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateComplete","value":"UPDATE_COMPLETE"},{"name":"UpdateReverted","value":"UPDATE_REVERTED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Ready","value":"READY"},{"name":"NotReady","value":"NOT_READY"}]},"aws-native:medialive:SignalMapSuccessfulMonitorDeployment":{"description":"Represents the latest successful monitor deployment of a signal map.","properties":{"detailsUri":{"type":"string","description":"URI associated with a signal map's monitor deployment."},"status":{"$ref":"#/types/aws-native:medialive:SignalMapMonitorDeploymentStatus","description":"A signal map's monitor deployment status."}},"type":"object","required":["detailsUri","status"]},"aws-native:mediapackage:AssetEgressEndpoint":{"description":"The endpoint URL used to access an Asset using one PackagingConfiguration.","properties":{"packagingConfigurationId":{"type":"string","description":"The ID of the PackagingConfiguration being applied to the Asset."},"url":{"type":"string","description":"The URL of the parent manifest for the repackaged Asset."}},"type":"object","required":["packagingConfigurationId","url"]},"aws-native:mediapackage:AssetTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediapackage:ChannelHlsIngest":{"description":"An HTTP Live Streaming (HLS) ingest resource configuration.","properties":{"ingestEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:ChannelIngestEndpoint"},"description":"A list of endpoints to which the source stream should be sent."}},"type":"object"},"aws-native:mediapackage:ChannelIngestEndpoint":{"description":"An endpoint for ingesting source content for a Channel.","properties":{"id":{"type":"string","description":"The system generated unique identifier for the IngestEndpoint"},"password":{"type":"string","description":"The system generated password for ingest authentication."},"url":{"type":"string","description":"The ingest URL to which the source stream should be sent."},"username":{"type":"string","description":"The system generated username for ingest authentication."}},"type":"object"},"aws-native:mediapackage:ChannelLogConfiguration":{"properties":{"logGroupName":{"type":"string","description":"Sets a custom AWS CloudWatch log group name for access logs. If a log group name isn't specified, the defaults are used: /aws/MediaPackage/EgressAccessLogs for egress access logs and /aws/MediaPackage/IngressAccessLogs for ingress access logs."}},"type":"object"},"aws-native:mediapackage:ChannelTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediapackage:OriginEndpointAdsOnDeliveryRestrictions":{"description":"This setting allows the delivery restriction flags on SCTE-35 segmentation descriptors to determine whether a message signals an ad.  Choosing \"NONE\" means no SCTE-35 messages become ads.  Choosing \"RESTRICTED\" means SCTE-35 messages of the types specified in AdTriggers that contain delivery restrictions will be treated as ads.  Choosing \"UNRESTRICTED\" means SCTE-35 messages of the types specified in AdTriggers that do not contain delivery restrictions will be treated as ads.  Choosing \"BOTH\" means all SCTE-35 messages of the types specified in AdTriggers will be treated as ads.  Note that Splice Insert messages do not have these flags and are always treated as ads if specified in AdTriggers.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Restricted","value":"RESTRICTED"},{"name":"Unrestricted","value":"UNRESTRICTED"},{"name":"Both","value":"BOTH"}]},"aws-native:mediapackage:OriginEndpointAuthorization":{"description":"CDN Authorization credentials","properties":{"cdnIdentifierSecret":{"type":"string","description":"The Amazon Resource Name (ARN) for the secret in Secrets Manager that your Content Distribution Network (CDN) uses for authorization to access your endpoint."},"secretsRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM role that allows MediaPackage to communicate with AWS Secrets Manager."}},"type":"object","required":["cdnIdentifierSecret","secretsRoleArn"]},"aws-native:mediapackage:OriginEndpointCmafEncryption":{"description":"A Common Media Application Format (CMAF) encryption configuration.","properties":{"constantInitializationVector":{"type":"string","description":"An optional 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting blocks. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV)."},"encryptionMethod":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointCmafEncryptionEncryptionMethod","description":"The encryption method used"},"keyRotationIntervalSeconds":{"type":"integer","description":"Time (in seconds) between each encryption key rotation."},"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:OriginEndpointCmafEncryptionEncryptionMethod":{"description":"The encryption method used","type":"string","enum":[{"name":"SampleAes","value":"SAMPLE_AES"},{"name":"AesCtr","value":"AES_CTR"}]},"aws-native:mediapackage:OriginEndpointCmafPackage":{"description":"A Common Media Application Format (CMAF) packaging configuration.","properties":{"encryption":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointCmafEncryption","description":"Parameters for encrypting content."},"hlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsManifest"},"description":"A list of HLS manifest configurations"},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each segment. Actual segments will be rounded to the nearest multiple of the source segment duration."},"segmentPrefix":{"type":"string","description":"An optional custom string that is prepended to the name of each segment. If not specified, it defaults to the ChannelId."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointStreamSelection","description":"Limitations for outputs from the endpoint, based on the video bitrate."}},"type":"object"},"aws-native:mediapackage:OriginEndpointDashEncryption":{"description":"A Dynamic Adaptive Streaming over HTTP (DASH) encryption configuration.","properties":{"keyRotationIntervalSeconds":{"type":"integer","description":"Time (in seconds) between each encryption key rotation."},"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:OriginEndpointDashPackage":{"description":"A Dynamic Adaptive Streaming over HTTP (DASH) packaging configuration.","properties":{"adTriggers":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackageAdTriggersItem"},"description":"A list of SCTE-35 message types that are treated as ad markers in the output.  If empty, no ad markers are output.  Specify multiple items to create ad markers for all of the included message types."},"adsOnDeliveryRestrictions":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointAdsOnDeliveryRestrictions","description":"The flags on SCTE-35 segmentation descriptors that have to be present for AWS Elemental MediaPackage to insert ad markers in the output manifest. For information about SCTE-35 in AWS Elemental MediaPackage , see [SCTE-35 Message Options in AWS Elemental MediaPackage](https://docs.aws.amazon.com/mediapackage/latest/ug/scte.html) ."},"encryption":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashEncryption","description":"Parameters for encrypting content."},"includeIframeOnlyStream":{"type":"boolean","description":"When enabled, an I-Frame only stream will be included in the output."},"manifestLayout":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackageManifestLayout","description":"Determines the position of some tags in the Media Presentation Description (MPD).  When set to FULL, elements like SegmentTemplate and ContentProtection are included in each Representation.  When set to COMPACT, duplicate elements are combined and presented at the AdaptationSet level."},"manifestWindowSeconds":{"type":"integer","description":"Time window (in seconds) contained in each manifest."},"minBufferTimeSeconds":{"type":"integer","description":"Minimum duration (in seconds) that a player will buffer media before starting the presentation."},"minUpdatePeriodSeconds":{"type":"integer","description":"Minimum duration (in seconds) between potential changes to the Dynamic Adaptive Streaming over HTTP (DASH) Media Presentation Description (MPD)."},"periodTriggers":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackagePeriodTriggersItem"},"description":"A list of triggers that controls when the outgoing Dynamic Adaptive Streaming over HTTP (DASH) Media Presentation Description (MPD) will be partitioned into multiple periods. If empty, the content will not be partitioned into more than one period. If the list contains \"ADS\", new periods will be created where the Channel source contains SCTE-35 ad markers."},"profile":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackageProfile","description":"The Dynamic Adaptive Streaming over HTTP (DASH) profile type.  When set to \"HBBTV_1_5\", HbbTV 1.5 compliant output is enabled."},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each segment. Actual segments will be rounded to the nearest multiple of the source segment duration."},"segmentTemplateFormat":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackageSegmentTemplateFormat","description":"Determines the type of SegmentTemplate included in the Media Presentation Description (MPD).  When set to NUMBER_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Number$ media URLs.  When set to TIME_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Time$ media URLs. When set to NUMBER_WITH_DURATION, only a duration is included in each SegmentTemplate, with $Number$ media URLs."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointStreamSelection","description":"Limitations for outputs from the endpoint, based on the video bitrate."},"suggestedPresentationDelaySeconds":{"type":"integer","description":"Duration (in seconds) to delay live content before presentation."},"utcTiming":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackageUtcTiming","description":"Determines the type of UTCTiming included in the Media Presentation Description (MPD)"},"utcTimingUri":{"type":"string","description":"Specifies the value attribute of the UTCTiming field when utcTiming is set to HTTP-ISO, HTTP-HEAD or HTTP-XSDATE"}},"type":"object"},"aws-native:mediapackage:OriginEndpointDashPackageAdTriggersItem":{"type":"string","enum":[{"name":"SpliceInsert","value":"SPLICE_INSERT"},{"name":"Break","value":"BREAK"},{"name":"ProviderAdvertisement","value":"PROVIDER_ADVERTISEMENT"},{"name":"DistributorAdvertisement","value":"DISTRIBUTOR_ADVERTISEMENT"},{"name":"ProviderPlacementOpportunity","value":"PROVIDER_PLACEMENT_OPPORTUNITY"},{"name":"DistributorPlacementOpportunity","value":"DISTRIBUTOR_PLACEMENT_OPPORTUNITY"},{"name":"ProviderOverlayPlacementOpportunity","value":"PROVIDER_OVERLAY_PLACEMENT_OPPORTUNITY"},{"name":"DistributorOverlayPlacementOpportunity","value":"DISTRIBUTOR_OVERLAY_PLACEMENT_OPPORTUNITY"}]},"aws-native:mediapackage:OriginEndpointDashPackageManifestLayout":{"description":"Determines the position of some tags in the Media Presentation Description (MPD).  When set to FULL, elements like SegmentTemplate and ContentProtection are included in each Representation.  When set to COMPACT, duplicate elements are combined and presented at the AdaptationSet level.","type":"string","enum":[{"name":"Full","value":"FULL"},{"name":"Compact","value":"COMPACT"},{"name":"DrmTopLevelCompact","value":"DRM_TOP_LEVEL_COMPACT"}]},"aws-native:mediapackage:OriginEndpointDashPackagePeriodTriggersItem":{"type":"string","enum":[{"name":"Ads","value":"ADS"}]},"aws-native:mediapackage:OriginEndpointDashPackageProfile":{"description":"The Dynamic Adaptive Streaming over HTTP (DASH) profile type.  When set to \"HBBTV_1_5\", HbbTV 1.5 compliant output is enabled.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Hbbtv15","value":"HBBTV_1_5"},{"name":"Hybridcast","value":"HYBRIDCAST"},{"name":"DvbDash2014","value":"DVB_DASH_2014"}]},"aws-native:mediapackage:OriginEndpointDashPackageSegmentTemplateFormat":{"description":"Determines the type of SegmentTemplate included in the Media Presentation Description (MPD).  When set to NUMBER_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Number$ media URLs.  When set to TIME_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Time$ media URLs. When set to NUMBER_WITH_DURATION, only a duration is included in each SegmentTemplate, with $Number$ media URLs.","type":"string","enum":[{"name":"NumberWithTimeline","value":"NUMBER_WITH_TIMELINE"},{"name":"TimeWithTimeline","value":"TIME_WITH_TIMELINE"},{"name":"NumberWithDuration","value":"NUMBER_WITH_DURATION"}]},"aws-native:mediapackage:OriginEndpointDashPackageUtcTiming":{"description":"Determines the type of UTCTiming included in the Media Presentation Description (MPD)","type":"string","enum":[{"name":"HttpXsdate","value":"HTTP-XSDATE"},{"name":"HttpIso","value":"HTTP-ISO"},{"name":"HttpHead","value":"HTTP-HEAD"},{"name":"None","value":"NONE"}]},"aws-native:mediapackage:OriginEndpointEncryptionContractConfiguration":{"description":"The configuration to use for encrypting one or more content tracks separately for endpoints that use SPEKE 2.0.","properties":{"presetSpeke20Audio":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointEncryptionContractConfigurationPresetSpeke20Audio","description":"A collection of audio encryption presets."},"presetSpeke20Video":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointEncryptionContractConfigurationPresetSpeke20Video","description":"A collection of video encryption presets."}},"type":"object","required":["presetSpeke20Audio","presetSpeke20Video"]},"aws-native:mediapackage:OriginEndpointEncryptionContractConfigurationPresetSpeke20Audio":{"description":"A collection of audio encryption presets.","type":"string","enum":[{"name":"PresetAudio1","value":"PRESET-AUDIO-1"},{"name":"PresetAudio2","value":"PRESET-AUDIO-2"},{"name":"PresetAudio3","value":"PRESET-AUDIO-3"},{"name":"Shared","value":"SHARED"},{"name":"Unencrypted","value":"UNENCRYPTED"}]},"aws-native:mediapackage:OriginEndpointEncryptionContractConfigurationPresetSpeke20Video":{"description":"A collection of video encryption presets.","type":"string","enum":[{"name":"PresetVideo1","value":"PRESET-VIDEO-1"},{"name":"PresetVideo2","value":"PRESET-VIDEO-2"},{"name":"PresetVideo3","value":"PRESET-VIDEO-3"},{"name":"PresetVideo4","value":"PRESET-VIDEO-4"},{"name":"PresetVideo5","value":"PRESET-VIDEO-5"},{"name":"PresetVideo6","value":"PRESET-VIDEO-6"},{"name":"PresetVideo7","value":"PRESET-VIDEO-7"},{"name":"PresetVideo8","value":"PRESET-VIDEO-8"},{"name":"Shared","value":"SHARED"},{"name":"Unencrypted","value":"UNENCRYPTED"}]},"aws-native:mediapackage:OriginEndpointHlsEncryption":{"description":"An HTTP Live Streaming (HLS) encryption configuration.","properties":{"constantInitializationVector":{"type":"string","description":"A constant initialization vector for encryption (optional). When not specified the initialization vector will be periodically rotated."},"encryptionMethod":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsEncryptionEncryptionMethod","description":"The encryption method to use."},"keyRotationIntervalSeconds":{"type":"integer","description":"Interval (in seconds) between each encryption key rotation."},"repeatExtXKey":{"type":"boolean","description":"When enabled, the EXT-X-KEY tag will be repeated in output manifests."},"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:OriginEndpointHlsEncryptionEncryptionMethod":{"description":"The encryption method to use.","type":"string","enum":[{"name":"Aes128","value":"AES_128"},{"name":"SampleAes","value":"SAMPLE_AES"}]},"aws-native:mediapackage:OriginEndpointHlsManifest":{"description":"A HTTP Live Streaming (HLS) manifest configuration.","properties":{"adMarkers":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsManifestAdMarkers","description":"This setting controls how ad markers are included in the packaged OriginEndpoint. \"NONE\" will omit all SCTE-35 ad markers from the output. \"PASSTHROUGH\" causes the manifest to contain a copy of the SCTE-35 ad markers (comments) taken directly from the input HTTP Live Streaming (HLS) manifest. \"SCTE35_ENHANCED\" generates ad markers and blackout tags based on SCTE-35 messages in the input source. \"DATERANGE\" inserts EXT-X-DATERANGE tags to signal ad and program transition events in HLS and CMAF manifests. For this option, you must set a programDateTimeIntervalSeconds value that is greater than 0."},"adTriggers":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsManifestAdTriggersItem"},"description":"A list of SCTE-35 message types that are treated as ad markers in the output.  If empty, no ad markers are output.  Specify multiple items to create ad markers for all of the included message types."},"adsOnDeliveryRestrictions":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointAdsOnDeliveryRestrictions","description":"The flags on SCTE-35 segmentation descriptors that have to be present for AWS Elemental MediaPackage to insert ad markers in the output manifest. For information about SCTE-35 in AWS Elemental MediaPackage , see [SCTE-35 Message Options in AWS Elemental MediaPackage](https://docs.aws.amazon.com/mediapackage/latest/ug/scte.html) ."},"id":{"type":"string","description":"The ID of the manifest. The ID must be unique within the OriginEndpoint and it cannot be changed after it is created."},"includeIframeOnlyStream":{"type":"boolean","description":"When enabled, an I-Frame only stream will be included in the output."},"manifestName":{"type":"string","description":"An optional short string appended to the end of the OriginEndpoint URL. If not specified, defaults to the manifestName for the OriginEndpoint."},"playlistType":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsManifestPlaylistType","description":"The HTTP Live Streaming (HLS) playlist type. When either \"EVENT\" or \"VOD\" is specified, a corresponding EXT-X-PLAYLIST-TYPE entry will be included in the media playlist."},"playlistWindowSeconds":{"type":"integer","description":"Time window (in seconds) contained in each parent manifest."},"programDateTimeIntervalSeconds":{"type":"integer","description":"The interval (in seconds) between each EXT-X-PROGRAM-DATE-TIME tag inserted into manifests. Additionally, when an interval is specified ID3Timed Metadata messages will be generated every 5 seconds using the ingest time of the content. If the interval is not specified, or set to 0, then no EXT-X-PROGRAM-DATE-TIME tags will be inserted into manifests and no ID3Timed Metadata messages will be generated. Note that irrespective of this parameter, if any ID3 Timed Metadata is found in HTTP Live Streaming (HLS) input, it will be passed through to HLS output."},"url":{"type":"string","description":"The URL of the packaged OriginEndpoint for consumption."}},"type":"object","required":["id"]},"aws-native:mediapackage:OriginEndpointHlsManifestAdMarkers":{"description":"This setting controls how ad markers are included in the packaged OriginEndpoint. \"NONE\" will omit all SCTE-35 ad markers from the output. \"PASSTHROUGH\" causes the manifest to contain a copy of the SCTE-35 ad markers (comments) taken directly from the input HTTP Live Streaming (HLS) manifest. \"SCTE35_ENHANCED\" generates ad markers and blackout tags based on SCTE-35 messages in the input source. \"DATERANGE\" inserts EXT-X-DATERANGE tags to signal ad and program transition events in HLS and CMAF manifests. For this option, you must set a programDateTimeIntervalSeconds value that is greater than 0.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Scte35Enhanced","value":"SCTE35_ENHANCED"},{"name":"Passthrough","value":"PASSTHROUGH"},{"name":"Daterange","value":"DATERANGE"}]},"aws-native:mediapackage:OriginEndpointHlsManifestAdTriggersItem":{"type":"string","enum":[{"name":"SpliceInsert","value":"SPLICE_INSERT"},{"name":"Break","value":"BREAK"},{"name":"ProviderAdvertisement","value":"PROVIDER_ADVERTISEMENT"},{"name":"DistributorAdvertisement","value":"DISTRIBUTOR_ADVERTISEMENT"},{"name":"ProviderPlacementOpportunity","value":"PROVIDER_PLACEMENT_OPPORTUNITY"},{"name":"DistributorPlacementOpportunity","value":"DISTRIBUTOR_PLACEMENT_OPPORTUNITY"},{"name":"ProviderOverlayPlacementOpportunity","value":"PROVIDER_OVERLAY_PLACEMENT_OPPORTUNITY"},{"name":"DistributorOverlayPlacementOpportunity","value":"DISTRIBUTOR_OVERLAY_PLACEMENT_OPPORTUNITY"}]},"aws-native:mediapackage:OriginEndpointHlsManifestPlaylistType":{"description":"The HTTP Live Streaming (HLS) playlist type. When either \"EVENT\" or \"VOD\" is specified, a corresponding EXT-X-PLAYLIST-TYPE entry will be included in the media playlist.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Event","value":"EVENT"},{"name":"Vod","value":"VOD"}]},"aws-native:mediapackage:OriginEndpointHlsPackage":{"description":"An HTTP Live Streaming (HLS) packaging configuration.","properties":{"adMarkers":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsPackageAdMarkers","description":"This setting controls how ad markers are included in the packaged OriginEndpoint. \"NONE\" will omit all SCTE-35 ad markers from the output. \"PASSTHROUGH\" causes the manifest to contain a copy of the SCTE-35 ad markers (comments) taken directly from the input HTTP Live Streaming (HLS) manifest. \"SCTE35_ENHANCED\" generates ad markers and blackout tags based on SCTE-35 messages in the input source. \"DATERANGE\" inserts EXT-X-DATERANGE tags to signal ad and program transition events in HLS and CMAF manifests. For this option, you must set a programDateTimeIntervalSeconds value that is greater than 0."},"adTriggers":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsPackageAdTriggersItem"},"description":"A list of SCTE-35 message types that are treated as ad markers in the output.  If empty, no ad markers are output.  Specify multiple items to create ad markers for all of the included message types."},"adsOnDeliveryRestrictions":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointAdsOnDeliveryRestrictions","description":"The flags on SCTE-35 segmentation descriptors that have to be present for AWS Elemental MediaPackage to insert ad markers in the output manifest. For information about SCTE-35 in AWS Elemental MediaPackage , see [SCTE-35 Message Options in AWS Elemental MediaPackage](https://docs.aws.amazon.com/mediapackage/latest/ug/scte.html) ."},"encryption":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsEncryption","description":"Parameters for encrypting content."},"includeDvbSubtitles":{"type":"boolean","description":"When enabled, MediaPackage passes through digital video broadcasting (DVB) subtitles into the output."},"includeIframeOnlyStream":{"type":"boolean","description":"When enabled, an I-Frame only stream will be included in the output."},"playlistType":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsPackagePlaylistType","description":"The HTTP Live Streaming (HLS) playlist type. When either \"EVENT\" or \"VOD\" is specified, a corresponding EXT-X-PLAYLIST-TYPE entry will be included in the media playlist."},"playlistWindowSeconds":{"type":"integer","description":"Time window (in seconds) contained in each parent manifest."},"programDateTimeIntervalSeconds":{"type":"integer","description":"The interval (in seconds) between each EXT-X-PROGRAM-DATE-TIME tag inserted into manifests. Additionally, when an interval is specified ID3Timed Metadata messages will be generated every 5 seconds using the ingest time of the content. If the interval is not specified, or set to 0, then no EXT-X-PROGRAM-DATE-TIME tags will be inserted into manifests and no ID3Timed Metadata messages will be generated. Note that irrespective of this parameter, if any ID3 Timed Metadata is found in HTTP Live Streaming (HLS) input, it will be passed through to HLS output."},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each fragment. Actual fragments will be rounded to the nearest multiple of the source fragment duration."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointStreamSelection","description":"Limitations for outputs from the endpoint, based on the video bitrate."},"useAudioRenditionGroup":{"type":"boolean","description":"When enabled, audio streams will be placed in rendition groups in the output."}},"type":"object"},"aws-native:mediapackage:OriginEndpointHlsPackageAdMarkers":{"description":"This setting controls how ad markers are included in the packaged OriginEndpoint. \"NONE\" will omit all SCTE-35 ad markers from the output. \"PASSTHROUGH\" causes the manifest to contain a copy of the SCTE-35 ad markers (comments) taken directly from the input HTTP Live Streaming (HLS) manifest. \"SCTE35_ENHANCED\" generates ad markers and blackout tags based on SCTE-35 messages in the input source. \"DATERANGE\" inserts EXT-X-DATERANGE tags to signal ad and program transition events in HLS and CMAF manifests. For this option, you must set a programDateTimeIntervalSeconds value that is greater than 0.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Scte35Enhanced","value":"SCTE35_ENHANCED"},{"name":"Passthrough","value":"PASSTHROUGH"},{"name":"Daterange","value":"DATERANGE"}]},"aws-native:mediapackage:OriginEndpointHlsPackageAdTriggersItem":{"type":"string","enum":[{"name":"SpliceInsert","value":"SPLICE_INSERT"},{"name":"Break","value":"BREAK"},{"name":"ProviderAdvertisement","value":"PROVIDER_ADVERTISEMENT"},{"name":"DistributorAdvertisement","value":"DISTRIBUTOR_ADVERTISEMENT"},{"name":"ProviderPlacementOpportunity","value":"PROVIDER_PLACEMENT_OPPORTUNITY"},{"name":"DistributorPlacementOpportunity","value":"DISTRIBUTOR_PLACEMENT_OPPORTUNITY"},{"name":"ProviderOverlayPlacementOpportunity","value":"PROVIDER_OVERLAY_PLACEMENT_OPPORTUNITY"},{"name":"DistributorOverlayPlacementOpportunity","value":"DISTRIBUTOR_OVERLAY_PLACEMENT_OPPORTUNITY"}]},"aws-native:mediapackage:OriginEndpointHlsPackagePlaylistType":{"description":"The HTTP Live Streaming (HLS) playlist type. When either \"EVENT\" or \"VOD\" is specified, a corresponding EXT-X-PLAYLIST-TYPE entry will be included in the media playlist.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Event","value":"EVENT"},{"name":"Vod","value":"VOD"}]},"aws-native:mediapackage:OriginEndpointMssEncryption":{"description":"A Microsoft Smooth Streaming (MSS) encryption configuration.","properties":{"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:OriginEndpointMssPackage":{"description":"A Microsoft Smooth Streaming (MSS) packaging configuration.","properties":{"encryption":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointMssEncryption","description":"Parameters for encrypting content."},"manifestWindowSeconds":{"type":"integer","description":"The time window (in seconds) contained in each manifest."},"segmentDurationSeconds":{"type":"integer","description":"The duration (in seconds) of each segment."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointStreamSelection","description":"Limitations for outputs from the endpoint, based on the video bitrate."}},"type":"object"},"aws-native:mediapackage:OriginEndpointOrigination":{"description":"Control whether origination of video is allowed for this OriginEndpoint. If set to ALLOW, the OriginEndpoint may by requested, pursuant to any other form of access control. If set to DENY, the OriginEndpoint may not be requested. This can be helpful for Live to VOD harvesting, or for temporarily disabling origination","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Deny","value":"DENY"}]},"aws-native:mediapackage:OriginEndpointSpekeKeyProvider":{"description":"A configuration for accessing an external Secure Packager and Encoder Key Exchange (SPEKE) service that will provide encryption keys.","properties":{"certificateArn":{"type":"string","description":"An Amazon Resource Name (ARN) of a Certificate Manager certificate that MediaPackage will use for enforcing secure end-to-end data transfer with the key provider service."},"encryptionContractConfiguration":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointEncryptionContractConfiguration","description":"Use `encryptionContractConfiguration` to configure one or more content encryption keys for your endpoints that use SPEKE Version 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use."},"resourceId":{"type":"string","description":"The resource ID to include in key requests."},"roleArn":{"type":"string","description":"An Amazon Resource Name (ARN) of an IAM role that AWS Elemental MediaPackage will assume when accessing the key provider service."},"systemIds":{"type":"array","items":{"type":"string"},"description":"The system IDs to include in key requests."},"url":{"type":"string","description":"The URL of the external key provider service."}},"type":"object","required":["resourceId","roleArn","systemIds","url"]},"aws-native:mediapackage:OriginEndpointStreamSelection":{"description":"A StreamSelection configuration.","properties":{"maxVideoBitsPerSecond":{"type":"integer","description":"The maximum video bitrate (bps) to include in output."},"minVideoBitsPerSecond":{"type":"integer","description":"The minimum video bitrate (bps) to include in output."},"streamOrder":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointStreamSelectionStreamOrder","description":"A directive that determines the order of streams in the output."}},"type":"object"},"aws-native:mediapackage:OriginEndpointStreamSelectionStreamOrder":{"description":"A directive that determines the order of streams in the output.","type":"string","enum":[{"name":"Original","value":"ORIGINAL"},{"name":"VideoBitrateAscending","value":"VIDEO_BITRATE_ASCENDING"},{"name":"VideoBitrateDescending","value":"VIDEO_BITRATE_DESCENDING"}]},"aws-native:mediapackage:OriginEndpointTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediapackage:PackagingConfigurationCmafEncryption":{"description":"A CMAF encryption configuration.","properties":{"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:PackagingConfigurationCmafPackage":{"description":"A CMAF packaging configuration.","properties":{"encryption":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationCmafEncryption","description":"Parameters for encrypting content."},"hlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsManifest"},"description":"A list of HLS manifest configurations."},"includeEncoderConfigurationInSegments":{"type":"boolean","description":"When includeEncoderConfigurationInSegments is set to true, MediaPackage places your encoder's Sequence Parameter Set (SPS), Picture Parameter Set (PPS), and Video Parameter Set (VPS) metadata in every video segment instead of in the init fragment. This lets you use different SPS/PPS/VPS settings for your assets during content playback."},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each segment. Actual segments are rounded to the nearest multiple of the source fragment duration."}},"type":"object","required":["hlsManifests"]},"aws-native:mediapackage:PackagingConfigurationDashEncryption":{"description":"A Dynamic Adaptive Streaming over HTTP (DASH) encryption configuration.","properties":{"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:PackagingConfigurationDashManifest":{"description":"A DASH manifest configuration.","properties":{"manifestLayout":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashManifestManifestLayout","description":"Determines the position of some tags in the Media Presentation Description (MPD). When set to FULL, elements like SegmentTemplate and ContentProtection are included in each Representation. When set to COMPACT, duplicate elements are combined and presented at the AdaptationSet level."},"manifestName":{"type":"string","description":"A short string that's appended to the end of the endpoint URL to create a unique path to this packaging configuration."},"minBufferTimeSeconds":{"type":"integer","description":"Minimum duration (in seconds) that a player will buffer media before starting the presentation."},"profile":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashManifestProfile","description":"The Dynamic Adaptive Streaming over HTTP (DASH) profile type. When set to \"HBBTV_1_5\", HbbTV 1.5 compliant output is enabled."},"scteMarkersSource":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashManifestScteMarkersSource","description":"The source of scte markers used. When set to SEGMENTS, the scte markers are sourced from the segments of the ingested content. When set to MANIFEST, the scte markers are sourced from the manifest of the ingested content."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationStreamSelection","description":"Limitations for outputs from the endpoint, based on the video bitrate."}},"type":"object"},"aws-native:mediapackage:PackagingConfigurationDashManifestManifestLayout":{"description":"Determines the position of some tags in the Media Presentation Description (MPD). When set to FULL, elements like SegmentTemplate and ContentProtection are included in each Representation. When set to COMPACT, duplicate elements are combined and presented at the AdaptationSet level.","type":"string","enum":[{"name":"Full","value":"FULL"},{"name":"Compact","value":"COMPACT"}]},"aws-native:mediapackage:PackagingConfigurationDashManifestProfile":{"description":"The Dynamic Adaptive Streaming over HTTP (DASH) profile type. When set to \"HBBTV_1_5\", HbbTV 1.5 compliant output is enabled.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Hbbtv15","value":"HBBTV_1_5"}]},"aws-native:mediapackage:PackagingConfigurationDashManifestScteMarkersSource":{"description":"The source of scte markers used. When set to SEGMENTS, the scte markers are sourced from the segments of the ingested content. When set to MANIFEST, the scte markers are sourced from the manifest of the ingested content.","type":"string","enum":[{"name":"Segments","value":"SEGMENTS"},{"name":"Manifest","value":"MANIFEST"}]},"aws-native:mediapackage:PackagingConfigurationDashPackage":{"description":"A Dynamic Adaptive Streaming over HTTP (DASH) packaging configuration.","properties":{"dashManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashManifest"},"description":"A list of DASH manifest configurations."},"encryption":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashEncryption","description":"Parameters for encrypting content."},"includeEncoderConfigurationInSegments":{"type":"boolean","description":"When includeEncoderConfigurationInSegments is set to true, MediaPackage places your encoder's Sequence Parameter Set (SPS), Picture Parameter Set (PPS), and Video Parameter Set (VPS) metadata in every video segment instead of in the init fragment. This lets you use different SPS/PPS/VPS settings for your assets during content playback."},"includeIframeOnlyStream":{"type":"boolean","description":"When enabled, an I-Frame only stream will be included in the output."},"periodTriggers":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashPackagePeriodTriggersItem"},"description":"A list of triggers that controls when the outgoing Dynamic Adaptive Streaming over HTTP (DASH) Media Presentation Description (MPD) will be partitioned into multiple periods. If empty, the content will not be partitioned into more than one period. If the list contains \"ADS\", new periods will be created where the Asset contains SCTE-35 ad markers."},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each fragment. Actual fragments are rounded to the nearest multiple of the source segment duration."},"segmentTemplateFormat":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashPackageSegmentTemplateFormat","description":"Determines the type of SegmentTemplate included in the Media Presentation Description (MPD). When set to NUMBER_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Number$ media URLs. When set to TIME_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Time$ media URLs. When set to NUMBER_WITH_DURATION, only a duration is included in each SegmentTemplate, with $Number$ media URLs."}},"type":"object","required":["dashManifests"]},"aws-native:mediapackage:PackagingConfigurationDashPackagePeriodTriggersItem":{"type":"string","enum":[{"name":"Ads","value":"ADS"}]},"aws-native:mediapackage:PackagingConfigurationDashPackageSegmentTemplateFormat":{"description":"Determines the type of SegmentTemplate included in the Media Presentation Description (MPD). When set to NUMBER_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Number$ media URLs. When set to TIME_WITH_TIMELINE, a full timeline is presented in each SegmentTemplate, with $Time$ media URLs. When set to NUMBER_WITH_DURATION, only a duration is included in each SegmentTemplate, with $Number$ media URLs.","type":"string","enum":[{"name":"NumberWithTimeline","value":"NUMBER_WITH_TIMELINE"},{"name":"TimeWithTimeline","value":"TIME_WITH_TIMELINE"},{"name":"NumberWithDuration","value":"NUMBER_WITH_DURATION"}]},"aws-native:mediapackage:PackagingConfigurationEncryptionContractConfiguration":{"description":"The configuration to use for encrypting one or more content tracks separately for endpoints that use SPEKE 2.0.","properties":{"presetSpeke20Audio":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationEncryptionContractConfigurationPresetSpeke20Audio","description":"A collection of audio encryption presets."},"presetSpeke20Video":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationEncryptionContractConfigurationPresetSpeke20Video","description":"A collection of video encryption presets."}},"type":"object","required":["presetSpeke20Audio","presetSpeke20Video"]},"aws-native:mediapackage:PackagingConfigurationEncryptionContractConfigurationPresetSpeke20Audio":{"description":"A collection of audio encryption presets.","type":"string","enum":[{"name":"PresetAudio1","value":"PRESET-AUDIO-1"},{"name":"PresetAudio2","value":"PRESET-AUDIO-2"},{"name":"PresetAudio3","value":"PRESET-AUDIO-3"},{"name":"Shared","value":"SHARED"},{"name":"Unencrypted","value":"UNENCRYPTED"}]},"aws-native:mediapackage:PackagingConfigurationEncryptionContractConfigurationPresetSpeke20Video":{"description":"A collection of video encryption presets.","type":"string","enum":[{"name":"PresetVideo1","value":"PRESET-VIDEO-1"},{"name":"PresetVideo2","value":"PRESET-VIDEO-2"},{"name":"PresetVideo3","value":"PRESET-VIDEO-3"},{"name":"PresetVideo4","value":"PRESET-VIDEO-4"},{"name":"PresetVideo5","value":"PRESET-VIDEO-5"},{"name":"PresetVideo6","value":"PRESET-VIDEO-6"},{"name":"PresetVideo7","value":"PRESET-VIDEO-7"},{"name":"PresetVideo8","value":"PRESET-VIDEO-8"},{"name":"Shared","value":"SHARED"},{"name":"Unencrypted","value":"UNENCRYPTED"}]},"aws-native:mediapackage:PackagingConfigurationHlsEncryption":{"description":"An HTTP Live Streaming (HLS) encryption configuration.","properties":{"constantInitializationVector":{"type":"string","description":"An HTTP Live Streaming (HLS) encryption configuration."},"encryptionMethod":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsEncryptionEncryptionMethod","description":"The encryption method to use."},"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:PackagingConfigurationHlsEncryptionEncryptionMethod":{"description":"The encryption method to use.","type":"string","enum":[{"name":"Aes128","value":"AES_128"},{"name":"SampleAes","value":"SAMPLE_AES"}]},"aws-native:mediapackage:PackagingConfigurationHlsManifest":{"description":"An HTTP Live Streaming (HLS) manifest configuration.","properties":{"adMarkers":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsManifestAdMarkers","description":"This setting controls how ad markers are included in the packaged OriginEndpoint. \"NONE\" will omit all SCTE-35 ad markers from the output. \"PASSTHROUGH\" causes the manifest to contain a copy of the SCTE-35 ad markers (comments) taken directly from the input HTTP Live Streaming (HLS) manifest. \"SCTE35_ENHANCED\" generates ad markers and blackout tags based on SCTE-35 messages in the input source."},"includeIframeOnlyStream":{"type":"boolean","description":"When enabled, an I-Frame only stream will be included in the output."},"manifestName":{"type":"string","description":"A short string that's appended to the end of the endpoint URL to create a unique path to this packaging configuration."},"programDateTimeIntervalSeconds":{"type":"integer","description":"The interval (in seconds) between each EXT-X-PROGRAM-DATE-TIME tag inserted into manifests. Additionally, when an interval is specified ID3Timed Metadata messages will be generated every 5 seconds using the ingest time of the content. If the interval is not specified, or set to 0, then no EXT-X-PROGRAM-DATE-TIME tags will be inserted into manifests and no ID3Timed Metadata messages will be generated. Note that irrespective of this parameter, if any ID3 Timed Metadata is found in HTTP Live Streaming (HLS) input, it will be passed through to HLS output."},"repeatExtXKey":{"type":"boolean","description":"When enabled, the EXT-X-KEY tag will be repeated in output manifests."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationStreamSelection","description":"Video bitrate limitations for outputs from this packaging configuration."}},"type":"object"},"aws-native:mediapackage:PackagingConfigurationHlsManifestAdMarkers":{"description":"This setting controls how ad markers are included in the packaged OriginEndpoint. \"NONE\" will omit all SCTE-35 ad markers from the output. \"PASSTHROUGH\" causes the manifest to contain a copy of the SCTE-35 ad markers (comments) taken directly from the input HTTP Live Streaming (HLS) manifest. \"SCTE35_ENHANCED\" generates ad markers and blackout tags based on SCTE-35 messages in the input source.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Scte35Enhanced","value":"SCTE35_ENHANCED"},{"name":"Passthrough","value":"PASSTHROUGH"}]},"aws-native:mediapackage:PackagingConfigurationHlsPackage":{"description":"An HTTP Live Streaming (HLS) packaging configuration.","properties":{"encryption":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsEncryption","description":"Parameters for encrypting content."},"hlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsManifest"},"description":"A list of HLS manifest configurations."},"includeDvbSubtitles":{"type":"boolean","description":"When enabled, MediaPackage passes through digital video broadcasting (DVB) subtitles into the output."},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each fragment. Actual fragments are rounded to the nearest multiple of the source fragment duration."},"useAudioRenditionGroup":{"type":"boolean","description":"When enabled, audio streams will be placed in rendition groups in the output."}},"type":"object","required":["hlsManifests"]},"aws-native:mediapackage:PackagingConfigurationMssEncryption":{"description":"A CMAF encryption configuration.","properties":{"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationSpekeKeyProvider","description":"Parameters for the SPEKE key provider."}},"type":"object","required":["spekeKeyProvider"]},"aws-native:mediapackage:PackagingConfigurationMssManifest":{"description":"A Microsoft Smooth Streaming (MSS) manifest configuration.","properties":{"manifestName":{"type":"string","description":"A short string that's appended to the end of the endpoint URL to create a unique path to this packaging configuration."},"streamSelection":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationStreamSelection","description":"Video bitrate limitations for outputs from this packaging configuration."}},"type":"object"},"aws-native:mediapackage:PackagingConfigurationMssPackage":{"description":"A Microsoft Smooth Streaming (MSS) PackagingConfiguration.","properties":{"encryption":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationMssEncryption","description":"Parameters for encrypting content."},"mssManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationMssManifest"},"description":"A list of MSS manifest configurations."},"segmentDurationSeconds":{"type":"integer","description":"Duration (in seconds) of each fragment. Actual fragments are rounded to the nearest multiple of the source fragment duration."}},"type":"object","required":["mssManifests"]},"aws-native:mediapackage:PackagingConfigurationSpekeKeyProvider":{"description":"A configuration for accessing an external Secure Packager and Encoder Key Exchange (SPEKE) service that will provide encryption keys.","properties":{"encryptionContractConfiguration":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationEncryptionContractConfiguration","description":"Use `encryptionContractConfiguration` to configure one or more content encryption keys for your endpoints that use SPEKE Version 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use."},"roleArn":{"type":"string","description":"The ARN for the IAM role that's granted by the key provider to provide access to the key provider API. Valid format: arn:aws:iam::{accountID}:role/{name}"},"systemIds":{"type":"array","items":{"type":"string"},"description":"The system IDs to include in key requests."},"url":{"type":"string","description":"The URL of the external key provider service."}},"type":"object","required":["roleArn","systemIds","url"]},"aws-native:mediapackage:PackagingConfigurationStreamSelection":{"description":"A StreamSelection configuration.","properties":{"maxVideoBitsPerSecond":{"type":"integer","description":"The maximum video bitrate (bps) to include in output."},"minVideoBitsPerSecond":{"type":"integer","description":"The minimum video bitrate (bps) to include in output."},"streamOrder":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationStreamSelectionStreamOrder","description":"A directive that determines the order of streams in the output."}},"type":"object"},"aws-native:mediapackage:PackagingConfigurationStreamSelectionStreamOrder":{"description":"A directive that determines the order of streams in the output.","type":"string","enum":[{"name":"Original","value":"ORIGINAL"},{"name":"VideoBitrateAscending","value":"VIDEO_BITRATE_ASCENDING"},{"name":"VideoBitrateDescending","value":"VIDEO_BITRATE_DESCENDING"}]},"aws-native:mediapackage:PackagingConfigurationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediapackage:PackagingGroupAuthorization":{"properties":{"cdnIdentifierSecret":{"type":"string","description":"The Amazon Resource Name (ARN) for the secret in AWS Secrets Manager that is used for CDN authorization."},"secretsRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM role that allows MediaPackage to communicate with AWS Secrets Manager."}},"type":"object","required":["cdnIdentifierSecret","secretsRoleArn"]},"aws-native:mediapackage:PackagingGroupLogConfiguration":{"properties":{"logGroupName":{"type":"string","description":"Sets a custom AWS CloudWatch log group name for egress logs. If a log group name isn't specified, the default name is used: /aws/MediaPackage/VodEgressAccessLogs."}},"type":"object"},"aws-native:mediapackage:PackagingGroupTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediapackagev2:ChannelGroupTag":{"properties":{"key":{"type":"string","description":"The key in the key:value pair for the tag."},"value":{"type":"string","description":"The value in the key:value pair for the tag."}},"type":"object"},"aws-native:mediapackagev2:ChannelIngestEndpoint":{"description":"\u003cp\u003eThe ingest domain URL where the source stream should be sent.\u003c/p\u003e","properties":{"id":{"type":"string","description":"\u003cp\u003eThe system-generated unique identifier for the IngestEndpoint.\u003c/p\u003e"},"url":{"type":"string","description":"\u003cp\u003eThe ingest domain URL where the source stream should be sent.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:ChannelInputSwitchConfiguration":{"description":"\u003cp\u003eThe configuration for input switching based on the media quality confidence score (MQCS) as provided from AWS Elemental MediaLive.\u003c/p\u003e","properties":{"mqcsInputSwitching":{"type":"boolean","description":"\u003cp\u003eWhen true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is true. This setting is valid only when \u003ccode\u003eInputType\u003c/code\u003e is \u003ccode\u003eCMAF\u003c/code\u003e.\u003c/p\u003e"},"preferredInput":{"type":"integer","description":"For CMAF inputs, indicates which input MediaPackage should prefer when both inputs have equal MQCS scores. Select `1` to prefer the first ingest endpoint, or `2` to prefer the second ingest endpoint. If you don't specify a preferred input, MediaPackage uses its default switching behavior when MQCS scores are equal."}},"type":"object"},"aws-native:mediapackagev2:ChannelInputType":{"type":"string","enum":[{"name":"Hls","value":"HLS"},{"name":"Cmaf","value":"CMAF"}]},"aws-native:mediapackagev2:ChannelOutputHeaderConfiguration":{"description":"\u003cp\u003eThe settings for what common media server data (CMSD) headers AWS Elemental MediaPackage includes in responses to the CDN.\u003c/p\u003e","properties":{"publishMqcs":{"type":"boolean","description":"\u003cp\u003eWhen true, AWS Elemental MediaPackage includes the MQCS in responses to the CDN. This setting is valid only when \u003ccode\u003eInputType\u003c/code\u003e is \u003ccode\u003eCMAF\u003c/code\u003e.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:ChannelTag":{"properties":{"key":{"type":"string","description":"The key in the key:value pair for the tag."},"value":{"type":"string","description":"The value in the key:value pair for the tag."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointAdMarkerDash":{"type":"string","enum":[{"name":"Binary","value":"BINARY"},{"name":"Xml","value":"XML"}]},"aws-native:mediapackagev2:OriginEndpointAdMarkerHls":{"type":"string","enum":[{"name":"Daterange","value":"DATERANGE"},{"name":"Scte35Enhanced","value":"SCTE35_ENHANCED"}]},"aws-native:mediapackagev2:OriginEndpointCmafEncryptionMethod":{"type":"string","enum":[{"name":"Cenc","value":"CENC"},{"name":"Cbcs","value":"CBCS"}]},"aws-native:mediapackagev2:OriginEndpointContainerType":{"type":"string","enum":[{"name":"Ts","value":"TS"},{"name":"Cmaf","value":"CMAF"},{"name":"Ism","value":"ISM"}]},"aws-native:mediapackagev2:OriginEndpointDashBaseUrl":{"description":"\u003cp\u003eThe base URLs to use for retrieving segments. You can specify multiple locations and indicate the priority and weight for when each should be used, for use in mutli-CDN workflows.\u003c/p\u003e","properties":{"dvbPriority":{"type":"integer","description":"\u003cp\u003eFor use with DVB-DASH profiles only. The priority of this location for servings segments. The lower the number, the higher the priority.\u003c/p\u003e"},"dvbWeight":{"type":"integer","description":"\u003cp\u003eFor use with DVB-DASH profiles only. The weighting for source locations that have the same priority. \u003c/p\u003e"},"serviceLocation":{"type":"string","description":"\u003cp\u003eThe name of the source location.\u003c/p\u003e"},"url":{"type":"string","description":"\u003cp\u003eA source location for segments.\u003c/p\u003e"}},"type":"object","required":["url"]},"aws-native:mediapackagev2:OriginEndpointDashCompactness":{"type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"None","value":"NONE"}]},"aws-native:mediapackagev2:OriginEndpointDashDrmSignaling":{"type":"string","enum":[{"name":"Individual","value":"INDIVIDUAL"},{"name":"Referenced","value":"REFERENCED"}]},"aws-native:mediapackagev2:OriginEndpointDashDvbFontDownload":{"description":"\u003cp\u003eFor use with DVB-DASH profiles only. The settings for font downloads that you want Elemental MediaPackage to pass through to the manifest.\u003c/p\u003e","properties":{"fontFamily":{"type":"string","description":"\u003cp\u003eThe \u003ccode\u003efontFamily\u003c/code\u003e name for subtitles, as described in \u003ca href=\"https://tech.ebu.ch/publications/tech3380\"\u003eEBU-TT-D Subtitling Distribution Format\u003c/a\u003e. \u003c/p\u003e"},"mimeType":{"type":"string","description":"\u003cp\u003eThe \u003ccode\u003emimeType\u003c/code\u003e of the resource that's at the font download URL.\u003c/p\u003e \u003cp\u003eFor information about font MIME types, see the \u003ca href=\"https://dvb.org/wp-content/uploads/2021/06/A168r4_MPEG-DASH-Profile-for-Transport-of-ISO-BMFF-Based-DVB-Services_Draft-ts_103-285-v140_November_2021.pdf\"\u003eMPEG-DASH Profile for Transport of ISO BMFF Based DVB Services over IP Based Networks\u003c/a\u003e document. \u003c/p\u003e"},"url":{"type":"string","description":"\u003cp\u003eThe URL for downloading fonts for subtitles.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointDashDvbMetricsReporting":{"description":"\u003cp\u003eFor use with DVB-DASH profiles only. The settings for error reporting from the playback device that you want Elemental MediaPackage to pass through to the manifest.\u003c/p\u003e","properties":{"probability":{"type":"integer","description":"\u003cp\u003eThe number of playback devices per 1000 that will send error reports to the reporting URL. This represents the probability that a playback device will be a reporting player for this session.\u003c/p\u003e"},"reportingUrl":{"type":"string","description":"\u003cp\u003eThe URL where playback devices send error reports.\u003c/p\u003e"}},"type":"object","required":["reportingUrl"]},"aws-native:mediapackagev2:OriginEndpointDashDvbSettings":{"description":"\u003cp\u003eFor endpoints that use the DVB-DASH profile only. The font download and error reporting information that you want MediaPackage to pass through to the manifest.\u003c/p\u003e","properties":{"errorMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashDvbMetricsReporting"},"description":"\u003cp\u003ePlayback device error reporting settings.\u003c/p\u003e"},"fontDownload":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashDvbFontDownload","description":"Subtitle font settings."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointDashManifestConfiguration":{"description":"\u003cp\u003eRetrieve the DASH manifest configuration.\u003c/p\u003e","properties":{"baseUrls":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashBaseUrl"},"description":"\u003cp\u003eThe base URL to use for retrieving segments.\u003c/p\u003e"},"compactness":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashCompactness","description":"The layout of the DASH manifest that MediaPackage produces. `STANDARD` indicates a default manifest, which is compacted. `NONE` indicates a full manifest.\n\nFor information about compactness, see [DASH manifest compactness](https://docs.aws.amazon.com/mediapackage/latest/userguide/compacted.html) in the *AWS Elemental MediaPackage v2 User Guide* ."},"drmSignaling":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashDrmSignaling","description":"Determines how the DASH manifest signals the DRM content."},"dvbSettings":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashDvbSettings","description":"For endpoints that use the DVB-DASH profile only. The font download and error reporting information that you want MediaPackage to pass through to the manifest."},"filterConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointFilterConfiguration","description":"Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest."},"manifestName":{"type":"string","description":"\u003cp\u003eA short string that's appended to the endpoint URL. The manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default manifest name, index. \u003c/p\u003e"},"manifestWindowSeconds":{"type":"integer","description":"\u003cp\u003eThe total duration (in seconds) of the manifest's content.\u003c/p\u003e"},"minBufferTimeSeconds":{"type":"integer","description":"\u003cp\u003eMinimum amount of content (in seconds) that a player must keep available in the buffer.\u003c/p\u003e"},"minUpdatePeriodSeconds":{"type":"integer","description":"\u003cp\u003eMinimum amount of time (in seconds) that the player should wait before requesting updates to the manifest.\u003c/p\u003e"},"periodTriggers":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashPeriodTrigger"},"description":"\u003cp\u003eA list of triggers that controls when AWS Elemental MediaPackage separates the MPEG-DASH manifest into multiple periods. Leave this value empty to indicate that the manifest is contained all in one period. For more information about periods in the DASH manifest, see \u003ca href=\"https://docs.aws.amazon.com/mediapackage/latest/userguide/multi-period.html\"\u003eMulti-period DASH in AWS Elemental MediaPackage\u003c/a\u003e.\u003c/p\u003e"},"profiles":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashProfile"},"description":"\u003cp\u003eThe profile that the output is compliant with.\u003c/p\u003e"},"programInformation":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashProgramInformation","description":"Details about the content that you want MediaPackage to pass through in the manifest to the playback device."},"scteDash":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointScteDash","description":"The SCTE configuration."},"segmentTemplateFormat":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashSegmentTemplateFormat","description":"Determines the type of variable used in the `media` URL of the `SegmentTemplate` tag in the manifest. Also specifies if segment timeline information is included in `SegmentTimeline` or `SegmentTemplate` .\n\nValue description:\n\n- `NUMBER_WITH_TIMELINE` - The `$Number$` variable is used in the `media` URL. The value of this variable is the sequential number of the segment. A full `SegmentTimeline` object is presented in each `SegmentTemplate` ."},"subtitleConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashSubtitleConfiguration","description":"The configuration for DASH subtitles."},"suggestedPresentationDelaySeconds":{"type":"integer","description":"\u003cp\u003eThe amount of time (in seconds) that the player should be from the end of the manifest.\u003c/p\u003e"},"utcTiming":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashUtcTiming","description":"Determines the type of UTC timing included in the DASH Media Presentation Description (MPD)."}},"type":"object","required":["manifestName"]},"aws-native:mediapackagev2:OriginEndpointDashPeriodTrigger":{"type":"string","enum":[{"name":"Avails","value":"AVAILS"},{"name":"DrmKeyRotation","value":"DRM_KEY_ROTATION"},{"name":"SourceChanges","value":"SOURCE_CHANGES"},{"name":"SourceDisruptions","value":"SOURCE_DISRUPTIONS"},{"name":"None","value":"NONE"}]},"aws-native:mediapackagev2:OriginEndpointDashProfile":{"type":"string","enum":[{"name":"DvbDash","value":"DVB_DASH"}]},"aws-native:mediapackagev2:OriginEndpointDashProgramInformation":{"description":"\u003cp\u003eDetails about the content that you want MediaPackage to pass through in the manifest to the playback device.\u003c/p\u003e","properties":{"copyright":{"type":"string","description":"\u003cp\u003eA copyright statement about the content.\u003c/p\u003e"},"languageCode":{"type":"string","description":"\u003cp\u003eThe language code for this manifest.\u003c/p\u003e"},"moreInformationUrl":{"type":"string","description":"\u003cp\u003eAn absolute URL that contains more information about this content.\u003c/p\u003e"},"source":{"type":"string","description":"\u003cp\u003eInformation about the content provider.\u003c/p\u003e"},"title":{"type":"string","description":"\u003cp\u003eThe title for the manifest.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointDashSegmentTemplateFormat":{"type":"string","enum":[{"name":"NumberWithTimeline","value":"NUMBER_WITH_TIMELINE"}]},"aws-native:mediapackagev2:OriginEndpointDashSubtitleConfiguration":{"description":"\u003cp\u003eThe configuration for DASH subtitles.\u003c/p\u003e","properties":{"ttmlConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashTtmlConfiguration","description":"Settings for TTML subtitles."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointDashTtmlConfiguration":{"description":"\u003cp\u003eThe settings for TTML subtitles.\u003c/p\u003e","properties":{"ttmlProfile":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashTtmlProfile","description":"The profile that MediaPackage uses when signaling subtitles in the manifest. `IMSC` is the default profile. `EBU-TT-D` produces subtitles that are compliant with the EBU-TT-D TTML profile. MediaPackage passes through subtitle styles to the manifest. For more information about EBU-TT-D subtitles, see [EBU-TT-D Subtitling Distribution Format](https://docs.aws.amazon.com/https://tech.ebu.ch/publications/tech3380) ."}},"type":"object","required":["ttmlProfile"]},"aws-native:mediapackagev2:OriginEndpointDashTtmlProfile":{"type":"string","enum":[{"name":"Imsc1","value":"IMSC_1"},{"name":"EbuTtD101","value":"EBU_TT_D_101"}]},"aws-native:mediapackagev2:OriginEndpointDashUtcTiming":{"description":"\u003cp\u003eDetermines the type of UTC timing included in the DASH Media Presentation Description (MPD).\u003c/p\u003e","properties":{"timingMode":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashUtcTimingMode","description":"The UTC timing mode."},"timingSource":{"type":"string","description":"\u003cp\u003eThe the method that the player uses to synchronize to coordinated universal time (UTC) wall clock time.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointDashUtcTimingMode":{"type":"string","enum":[{"name":"HttpHead","value":"HTTP_HEAD"},{"name":"HttpIso","value":"HTTP_ISO"},{"name":"HttpXsdate","value":"HTTP_XSDATE"},{"name":"UtcDirect","value":"UTC_DIRECT"}]},"aws-native:mediapackagev2:OriginEndpointDrmSystem":{"type":"string","enum":[{"name":"ClearKeyAes128","value":"CLEAR_KEY_AES_128"},{"name":"Fairplay","value":"FAIRPLAY"},{"name":"Playready","value":"PLAYREADY"},{"name":"Widevine","value":"WIDEVINE"},{"name":"Irdeto","value":"IRDETO"}]},"aws-native:mediapackagev2:OriginEndpointEncryption":{"description":"\u003cp\u003eThe parameters for encrypting content.\u003c/p\u003e","properties":{"cmafExcludeSegmentDrmMetadata":{"type":"boolean","description":"\u003cp\u003eExcludes SEIG and SGPD boxes from segment metadata in CMAF containers.\u003c/p\u003e \u003cp\u003eWhen set to \u003ccode\u003etrue\u003c/code\u003e, MediaPackage omits these DRM metadata boxes from CMAF segments, which can improve compatibility with certain devices and players that don't support these boxes.\u003c/p\u003e \u003cp\u003eImportant considerations:\u003c/p\u003e \u003cul\u003e \u003cli\u003e \u003cp\u003eThis setting only affects CMAF container formats\u003c/p\u003e \u003c/li\u003e \u003cli\u003e \u003cp\u003eKey rotation can still be handled through media playlist signaling\u003c/p\u003e \u003c/li\u003e \u003cli\u003e \u003cp\u003ePSSH and TENC boxes remain unaffected\u003c/p\u003e \u003c/li\u003e \u003cli\u003e \u003cp\u003eDefault behavior is preserved when this setting is disabled\u003c/p\u003e \u003c/li\u003e \u003c/ul\u003e \u003cp\u003eValid values: \u003ccode\u003etrue\u003c/code\u003e | \u003ccode\u003efalse\u003c/code\u003e \u003c/p\u003e \u003cp\u003eDefault: \u003ccode\u003efalse\u003c/code\u003e \u003c/p\u003e"},"constantInitializationVector":{"type":"string","description":"\u003cp\u003eA 128-bit, 16-byte hex value represented by a 32-character string, used in conjunction with the key for encrypting content. If you don't specify a value, then MediaPackage creates the constant initialization vector (IV).\u003c/p\u003e"},"encryptionMethod":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointEncryptionMethod","description":"The encryption method to use."},"keyRotationIntervalSeconds":{"type":"integer","description":"\u003cp\u003eThe frequency (in seconds) of key changes for live workflows, in which content is streamed real time. The service retrieves content keys before the live content begins streaming, and then retrieves them as needed over the lifetime of the workflow. By default, key rotation is set to 300 seconds (5 minutes), the minimum rotation interval, which is equivalent to setting it to 300. If you don't enter an interval, content keys aren't rotated.\u003c/p\u003e \u003cp\u003eThe following example setting causes the service to rotate keys every thirty minutes: \u003ccode\u003e1800\u003c/code\u003e \u003c/p\u003e"},"spekeKeyProvider":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointSpekeKeyProvider","description":"The SPEKE key provider to use for encryption."}},"type":"object","required":["encryptionMethod","spekeKeyProvider"]},"aws-native:mediapackagev2:OriginEndpointEncryptionContractConfiguration":{"description":"\u003cp\u003eConfigure one or more content encryption keys for your endpoints that use SPEKE Version 2.0. The encryption contract defines which content keys are used to encrypt the audio and video tracks in your stream. To configure the encryption contract, specify which audio and video encryption presets to use.\u003c/p\u003e","properties":{"presetSpeke20Audio":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointPresetSpeke20Audio","description":"A collection of audio encryption presets.\n\nValue description:\n\n- `PRESET-AUDIO-1` - Use one content key to encrypt all of the audio tracks in your stream.\n- `PRESET-AUDIO-2` - Use one content key to encrypt all of the stereo audio tracks and one content key to encrypt all of the multichannel audio tracks.\n- `PRESET-AUDIO-3` - Use one content key to encrypt all of the stereo audio tracks, one content key to encrypt all of the multichannel audio tracks with 3 to 6 channels, and one content key to encrypt all of the multichannel audio tracks with more than 6 channels.\n- `SHARED` - Use the same content key for all of the audio and video tracks in your stream.\n- `UNENCRYPTED` - Don't encrypt any of the audio tracks in your stream."},"presetSpeke20Video":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointPresetSpeke20Video","description":"The SPEKE Version 2.0 preset video associated with the encryption contract configuration of the origin endpoint.\n\nA collection of video encryption presets.\n\nValue description:\n\n- `PRESET-VIDEO-1` - Use one content key to encrypt all of the video tracks in your stream.\n- `PRESET-VIDEO-2` - Use one content key to encrypt all of the SD video tracks and one content key for all HD and higher resolutions video tracks.\n- `PRESET-VIDEO-3` - Use one content key to encrypt all of the SD video tracks, one content key for HD video tracks and one content key for all UHD video tracks.\n- `PRESET-VIDEO-4` - Use one content key to encrypt all of the SD video tracks, one content key for HD video tracks, one content key for all UHD1 video tracks and one content key for all UHD2 video tracks.\n- `PRESET-VIDEO-5` - Use one content key to encrypt all of the SD video tracks, one content key for HD1 video tracks, one content key for HD2 video tracks, one content key for all UHD1 video tracks and one content key for all UHD2 video tracks.\n- `PRESET-VIDEO-6` - Use one content key to encrypt all of the SD video tracks, one content key for HD1 video tracks, one content key for HD2 video tracks and one content key for all UHD video tracks.\n- `PRESET-VIDEO-7` - Use one content key to encrypt all of the SD+HD1 video tracks, one content key for HD2 video tracks and one content key for all UHD video tracks.\n- `PRESET-VIDEO-8` - Use one content key to encrypt all of the SD+HD1 video tracks, one content key for HD2 video tracks, one content key for all UHD1 video tracks and one content key for all UHD2 video tracks.\n- `SHARED` - Use the same content key for all of the video and audio tracks in your stream.\n- `UNENCRYPTED` - Don't encrypt any of the video tracks in your stream."}},"type":"object","required":["presetSpeke20Audio","presetSpeke20Video"]},"aws-native:mediapackagev2:OriginEndpointEncryptionMethod":{"description":"\u003cp\u003eThe encryption type.\u003c/p\u003e","properties":{"cmafEncryptionMethod":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointCmafEncryptionMethod","description":"The encryption method to use."},"ismEncryptionMethod":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointIsmEncryptionMethod","description":"The encryption method used for Microsoft Smooth Streaming (MSS) content. This specifies how the MSS segments are encrypted to protect the content during delivery to client players."},"tsEncryptionMethod":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointTsEncryptionMethod","description":"The encryption method to use."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointEndpointErrorCondition":{"type":"string","enum":[{"name":"StaleManifest","value":"STALE_MANIFEST"},{"name":"IncompleteManifest","value":"INCOMPLETE_MANIFEST"},{"name":"MissingDrmKey","value":"MISSING_DRM_KEY"},{"name":"SlateInput","value":"SLATE_INPUT"}]},"aws-native:mediapackagev2:OriginEndpointFilterConfiguration":{"description":"\u003cp\u003eFilter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. \u003c/p\u003e","properties":{"clipStartTime":{"type":"string","description":"\u003cp\u003eOptionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest's endpoint URL.\u003c/p\u003e"},"drmSettings":{"type":"string","description":"\u003cp\u003eOptionally specify one or more DRM settings for all of your manifest egress requests. When you include a DRM setting, note that you cannot use an identical DRM setting query parameter for this manifest's endpoint URL.\u003c/p\u003e"},"end":{"type":"string","description":"\u003cp\u003eOptionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest's endpoint URL.\u003c/p\u003e"},"manifestFilter":{"type":"string","description":"\u003cp\u003eOptionally specify one or more manifest filters for all of your manifest egress requests. When you include a manifest filter, note that you cannot use an identical manifest filter query parameter for this manifest's endpoint URL.\u003c/p\u003e"},"start":{"type":"string","description":"\u003cp\u003eOptionally specify the start time for all of your manifest egress requests. When you include start time, note that you cannot use start time query parameters for this manifest's endpoint URL.\u003c/p\u003e"},"timeDelaySeconds":{"type":"integer","description":"\u003cp\u003eOptionally specify the time delay for all of your manifest egress requests. Enter a value that is smaller than your endpoint's startover window. When you include time delay, note that you cannot use time delay query parameters for this manifest's endpoint URL.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointForceEndpointErrorConfiguration":{"description":"\u003cp\u003eThe failover settings for the endpoint.\u003c/p\u003e","properties":{"endpointErrorConditions":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointEndpointErrorCondition"},"description":"\u003cp\u003eThe failover conditions for the endpoint. The options are:\u003c/p\u003e \u003cul\u003e \u003cli\u003e \u003cp\u003e \u003ccode\u003eSTALE_MANIFEST\u003c/code\u003e - The manifest stalled and there are no new segments or parts.\u003c/p\u003e \u003c/li\u003e \u003cli\u003e \u003cp\u003e \u003ccode\u003eINCOMPLETE_MANIFEST\u003c/code\u003e - There is a gap in the manifest.\u003c/p\u003e \u003c/li\u003e \u003cli\u003e \u003cp\u003e \u003ccode\u003eMISSING_DRM_KEY\u003c/code\u003e - Key rotation is enabled but we're unable to fetch the key for the current key period.\u003c/p\u003e \u003c/li\u003e \u003cli\u003e \u003cp\u003e \u003ccode\u003eSLATE_INPUT\u003c/code\u003e - The segments which contain slate content are considered to be missing content.\u003c/p\u003e \u003c/li\u003e \u003c/ul\u003e"}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointHlsManifestConfiguration":{"description":"\u003cp\u003eRetrieve the HTTP live streaming (HLS) manifest configuration.\u003c/p\u003e","properties":{"childManifestName":{"type":"string","description":"\u003cp\u003eA short string that's appended to the endpoint URL. The child manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default child manifest name, index_1. The manifestName on the HLSManifest object overrides the manifestName you provided on the originEndpoint object.\u003c/p\u003e"},"filterConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointFilterConfiguration","description":"Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest."},"manifestName":{"type":"string","description":"\u003cp\u003eA short short string that's appended to the endpoint URL. The manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default manifest name, index. MediaPackage automatically inserts the format extension, such as .m3u8. You can't use the same manifest name if you use HLS manifest and low-latency HLS manifest. The manifestName on the HLSManifest object overrides the manifestName you provided on the originEndpoint object.\u003c/p\u003e"},"manifestWindowSeconds":{"type":"integer","description":"\u003cp\u003eThe total duration (in seconds) of the manifest's content.\u003c/p\u003e"},"programDateTimeIntervalSeconds":{"type":"integer","description":"\u003cp\u003eInserts EXT-X-PROGRAM-DATE-TIME tags in the output manifest at the interval that you specify. If you don't enter an interval, EXT-X-PROGRAM-DATE-TIME tags aren't included in the manifest. The tags sync the stream to the wall clock so that viewers can seek to a specific time in the playback timeline on the player.\u003c/p\u003e \u003cp\u003eIrrespective of this parameter, if any ID3Timed metadata is in the HLS input, it is passed through to the HLS output.\u003c/p\u003e"},"scteHls":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointScteHls","description":"THE SCTE-35 HLS configuration associated with the HLS manifest configuration."},"startTag":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointStartTag","description":"To insert an EXT-X-START tag in your HLS playlist, specify a StartTag configuration object with a valid TimeOffset. When you do, you can also optionally specify whether to include a PRECISE value in the EXT-X-START tag."},"url":{"type":"string","description":"\u003cp\u003eThe egress domain URL for stream delivery from MediaPackage.\u003c/p\u003e"},"urlEncodeChildManifest":{"type":"boolean","description":"\u003cp\u003eWhen enabled, MediaPackage URL-encodes the query string for API requests for HLS child manifests to comply with Amazon Web Services Signature Version 4 (SigV4) signature signing protocol. For more information, see \u003ca href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html\"\u003eAmazon Web Services Signature Version 4 for API requests\u003c/a\u003e in \u003ci\u003eIdentity and Access Management User Guide\u003c/i\u003e.\u003c/p\u003e"}},"type":"object","required":["manifestName"]},"aws-native:mediapackagev2:OriginEndpointIsmEncryptionMethod":{"type":"string","enum":[{"name":"Cenc","value":"CENC"}]},"aws-native:mediapackagev2:OriginEndpointLowLatencyHlsManifestConfiguration":{"description":"\u003cp\u003eRetrieve the low-latency HTTP live streaming (HLS) manifest configuration.\u003c/p\u003e","properties":{"childManifestName":{"type":"string","description":"\u003cp\u003eA short string that's appended to the endpoint URL. The child manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default child manifest name, index_1. The manifestName on the HLSManifest object overrides the manifestName you provided on the originEndpoint object.\u003c/p\u003e"},"filterConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointFilterConfiguration","description":"Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest."},"manifestName":{"type":"string","description":"\u003cp\u003eA short short string that's appended to the endpoint URL. The manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default manifest name, index. MediaPackage automatically inserts the format extension, such as .m3u8. You can't use the same manifest name if you use HLS manifest and low-latency HLS manifest. The manifestName on the HLSManifest object overrides the manifestName you provided on the originEndpoint object.\u003c/p\u003e"},"manifestWindowSeconds":{"type":"integer","description":"\u003cp\u003eThe total duration (in seconds) of the manifest's content.\u003c/p\u003e"},"programDateTimeIntervalSeconds":{"type":"integer","description":"\u003cp\u003eInserts EXT-X-PROGRAM-DATE-TIME tags in the output manifest at the interval that you specify. If you don't enter an interval, EXT-X-PROGRAM-DATE-TIME tags aren't included in the manifest. The tags sync the stream to the wall clock so that viewers can seek to a specific time in the playback timeline on the player.\u003c/p\u003e \u003cp\u003eIrrespective of this parameter, if any ID3Timed metadata is in the HLS input, it is passed through to the HLS output.\u003c/p\u003e"},"scteHls":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointScteHls","description":"The SCTE-35 HLS configuration associated with the low-latency HLS (LL-HLS) manifest configuration of the origin endpoint."},"startTag":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointStartTag","description":"To insert an EXT-X-START tag in your HLS playlist, specify a StartTag configuration object with a valid TimeOffset. When you do, you can also optionally specify whether to include a PRECISE value in the EXT-X-START tag."},"url":{"type":"string","description":"\u003cp\u003eThe egress domain URL for stream delivery from MediaPackage.\u003c/p\u003e"},"urlEncodeChildManifest":{"type":"boolean","description":"\u003cp\u003eWhen enabled, MediaPackage URL-encodes the query string for API requests for LL-HLS child manifests to comply with Amazon Web Services Signature Version 4 (SigV4) signature signing protocol. For more information, see \u003ca href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html\"\u003eAmazon Web Services Signature Version 4 for API requests\u003c/a\u003e in \u003ci\u003eIdentity and Access Management User Guide\u003c/i\u003e.\u003c/p\u003e"}},"type":"object","required":["manifestName"]},"aws-native:mediapackagev2:OriginEndpointMssManifestConfiguration":{"description":"\u003cp\u003eConfiguration details for a Microsoft Smooth Streaming (MSS) manifest associated with an origin endpoint. This includes all the settings and properties that define how the MSS content is packaged and delivered.\u003c/p\u003e","properties":{"filterConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointFilterConfiguration"},"manifestLayout":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointMssManifestLayout"},"manifestName":{"type":"string","description":"\u003cp\u003eThe name of the MSS manifest. This name is appended to the origin endpoint URL to create the unique path for accessing this specific MSS manifest.\u003c/p\u003e"},"manifestWindowSeconds":{"type":"integer","description":"\u003cp\u003eThe duration (in seconds) of the manifest window. This represents the total amount of content available in the manifest at any given time.\u003c/p\u003e"}},"type":"object","required":["manifestName"]},"aws-native:mediapackagev2:OriginEndpointMssManifestLayout":{"type":"string","enum":[{"name":"Full","value":"FULL"},{"name":"Compact","value":"COMPACT"}]},"aws-native:mediapackagev2:OriginEndpointPolicyCdnAuthConfiguration":{"properties":{"cdnIdentifierSecretArns":{"type":"array","items":{"type":"string"},"description":"The ARN for the secret in Secrets Manager that your CDN uses for authorization to access the endpoint."},"secretsRoleArn":{"type":"string","description":"The ARN for the IAM role that gives MediaPackage read access to Secrets Manager and AWS  for CDN authorization."}},"type":"object","required":["cdnIdentifierSecretArns","secretsRoleArn"]},"aws-native:mediapackagev2:OriginEndpointPresetSpeke20Audio":{"type":"string","enum":[{"name":"PresetAudio1","value":"PRESET_AUDIO_1"},{"name":"PresetAudio2","value":"PRESET_AUDIO_2"},{"name":"PresetAudio3","value":"PRESET_AUDIO_3"},{"name":"Shared","value":"SHARED"},{"name":"Unencrypted","value":"UNENCRYPTED"}]},"aws-native:mediapackagev2:OriginEndpointPresetSpeke20Video":{"type":"string","enum":[{"name":"PresetVideo1","value":"PRESET_VIDEO_1"},{"name":"PresetVideo2","value":"PRESET_VIDEO_2"},{"name":"PresetVideo3","value":"PRESET_VIDEO_3"},{"name":"PresetVideo4","value":"PRESET_VIDEO_4"},{"name":"PresetVideo5","value":"PRESET_VIDEO_5"},{"name":"PresetVideo6","value":"PRESET_VIDEO_6"},{"name":"PresetVideo7","value":"PRESET_VIDEO_7"},{"name":"PresetVideo8","value":"PRESET_VIDEO_8"},{"name":"Shared","value":"SHARED"},{"name":"Unencrypted","value":"UNENCRYPTED"}]},"aws-native:mediapackagev2:OriginEndpointScte":{"description":"\u003cp\u003eThe SCTE configuration.\u003c/p\u003e","properties":{"scteFilter":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointScteFilter"},"description":"\u003cp\u003eThe SCTE-35 message types that you want to be treated as ad markers in the output.\u003c/p\u003e"},"scteInSegments":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointScteInSegments","description":"Controls whether SCTE-35 messages are included in segment files.\n\n- None – SCTE-35 messages are not included in segments (default)\n- All – SCTE-35 messages are embedded in segment data\n\nFor DASH manifests, when set to `All` , an `InbandEventStream` tag signals that SCTE messages are present in segments. This setting works independently of manifest ad markers."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointScteDash":{"description":"\u003cp\u003eThe SCTE configuration.\u003c/p\u003e","properties":{"adMarkerDash":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointAdMarkerDash","description":"Choose how ad markers are included in the packaged content. If you include ad markers in the content stream in your upstream encoders, then you need to inform MediaPackage what to do with the ad markers in the output.\n\nValue description:\n\n- `Binary` - The SCTE-35 marker is expressed as a hex-string (Base64 string) rather than full XML.\n- `XML` - The SCTE marker is expressed fully in XML."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointScteFilter":{"type":"string","enum":[{"name":"SpliceInsert","value":"SPLICE_INSERT"},{"name":"Break","value":"BREAK"},{"name":"ProviderAdvertisement","value":"PROVIDER_ADVERTISEMENT"},{"name":"DistributorAdvertisement","value":"DISTRIBUTOR_ADVERTISEMENT"},{"name":"ProviderPlacementOpportunity","value":"PROVIDER_PLACEMENT_OPPORTUNITY"},{"name":"DistributorPlacementOpportunity","value":"DISTRIBUTOR_PLACEMENT_OPPORTUNITY"},{"name":"ProviderOverlayPlacementOpportunity","value":"PROVIDER_OVERLAY_PLACEMENT_OPPORTUNITY"},{"name":"DistributorOverlayPlacementOpportunity","value":"DISTRIBUTOR_OVERLAY_PLACEMENT_OPPORTUNITY"},{"name":"Program","value":"PROGRAM"}]},"aws-native:mediapackagev2:OriginEndpointScteHls":{"description":"\u003cp\u003eThe SCTE configuration.\u003c/p\u003e","properties":{"adMarkerHls":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointAdMarkerHls","description":"The SCTE-35 HLS ad-marker configuration."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointScteInSegments":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"All","value":"ALL"}]},"aws-native:mediapackagev2:OriginEndpointSegment":{"description":"\u003cp\u003eThe segment configuration, including the segment name, duration, and other configuration values.\u003c/p\u003e","properties":{"encryption":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointEncryption","description":"Whether to use encryption for the segment."},"includeIframeOnlyStreams":{"type":"boolean","description":"\u003cp\u003eWhen selected, the stream set includes an additional I-frame only stream, along with the other tracks. If false, this extra stream is not included. MediaPackage generates an I-frame only stream from the first rendition in the manifest. The service inserts EXT-I-FRAMES-ONLY tags in the output manifest, and then generates and includes an I-frames only playlist in the stream. This playlist permits player functionality like fast forward and rewind.\u003c/p\u003e"},"scte":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointScte","description":"The SCTE-35 configuration associated with the segment."},"segmentDurationSeconds":{"type":"integer","description":"\u003cp\u003eThe duration (in seconds) of each segment. Enter a value equal to, or a multiple of, the input segment duration. If the value that you enter is different from the input segment duration, MediaPackage rounds segments to the nearest multiple of the input segment duration.\u003c/p\u003e"},"segmentName":{"type":"string","description":"\u003cp\u003eThe name that describes the segment. The name is the base name of the segment used in all content manifests inside of the endpoint. You can't use spaces in the name.\u003c/p\u003e"},"tsIncludeDvbSubtitles":{"type":"boolean","description":"\u003cp\u003eBy default, MediaPackage excludes all digital video broadcasting (DVB) subtitles from the output. When selected, MediaPackage passes through DVB subtitles into the output.\u003c/p\u003e"},"tsUseAudioRenditionGroup":{"type":"boolean","description":"\u003cp\u003eWhen selected, MediaPackage bundles all audio tracks in a rendition group. All other tracks in the stream can be used with any audio rendition from the group.\u003c/p\u003e"}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointSpekeKeyProvider":{"description":"\u003cp\u003eThe parameters for the SPEKE key provider.\u003c/p\u003e","properties":{"certificateArn":{"type":"string","description":"\u003cp\u003eThe ARN for the certificate that you imported to AWS Certificate Manager to add content key encryption to this endpoint. For this feature to work, your DRM key provider must support content key encryption.\u003c/p\u003e"},"drmSystems":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDrmSystem"},"description":"\u003cp\u003eThe DRM solution provider you're using to protect your content during distribution.\u003c/p\u003e"},"encryptionContractConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointEncryptionContractConfiguration","description":"The encryption contract configuration associated with the SPEKE key provider."},"resourceId":{"type":"string","description":"\u003cp\u003eThe unique identifier for the content. The service sends this to the key server to identify the current endpoint. How unique you make this depends on how fine-grained you want access controls to be. The service does not permit you to use the same ID for two simultaneous encryption processes. The resource ID is also known as the content ID.\u003c/p\u003e \u003cp\u003eThe following example shows a resource ID: \u003ccode\u003eMovieNight20171126093045\u003c/code\u003e \u003c/p\u003e"},"roleArn":{"type":"string","description":"\u003cp\u003eThe ARN for the IAM role granted by the key provider that provides access to the key provider API. This role must have a trust policy that allows MediaPackage to assume the role, and it must have a sufficient permissions policy to allow access to the specific key retrieval URL. Get this from your DRM solution provider.\u003c/p\u003e \u003cp\u003eValid format: \u003ccode\u003earn:aws:iam::{accountID}:role/{name}\u003c/code\u003e. The following example shows a role ARN: \u003ccode\u003earn:aws:iam::444455556666:role/SpekeAccess\u003c/code\u003e \u003c/p\u003e"},"url":{"type":"string","description":"\u003cp\u003eThe URL of the API Gateway proxy that you set up to talk to your key server. The API Gateway proxy must reside in the same AWS Region as MediaPackage and must start with https://.\u003c/p\u003e \u003cp\u003eThe following example shows a URL: \u003ccode\u003ehttps://1wm2dx1f33.execute-api.us-west-2.amazonaws.com/SpekeSample/copyProtection\u003c/code\u003e \u003c/p\u003e"}},"type":"object","required":["drmSystems","encryptionContractConfiguration","resourceId","roleArn","url"]},"aws-native:mediapackagev2:OriginEndpointStartTag":{"description":"\u003cp\u003eTo insert an EXT-X-START tag in your HLS playlist, specify a StartTag configuration object with a valid TimeOffset. When you do, you can also optionally specify whether to include a PRECISE value in the EXT-X-START tag.\u003c/p\u003e","properties":{"precise":{"type":"boolean","description":"\u003cp\u003eSpecify the value for PRECISE within your EXT-X-START tag. Leave blank, or choose false, to use the default value NO. Choose yes to use the value YES.\u003c/p\u003e"},"timeOffset":{"type":"number","description":"\u003cp\u003eSpecify the value for TIME-OFFSET within your EXT-X-START tag. Enter a signed floating point value which, if positive, must be less than the configured manifest duration minus three times the configured segment target duration. If negative, the absolute value must be larger than three times the configured segment target duration, and the absolute value must be smaller than the configured manifest duration.\u003c/p\u003e"}},"type":"object","required":["timeOffset"]},"aws-native:mediapackagev2:OriginEndpointTag":{"properties":{"key":{"type":"string","description":"The key in the key:value pair for the tag."},"value":{"type":"string","description":"The value in the key:value pair for the tag."}},"type":"object"},"aws-native:mediapackagev2:OriginEndpointTsEncryptionMethod":{"type":"string","enum":[{"name":"Aes128","value":"AES_128"},{"name":"SampleAes","value":"SAMPLE_AES"}]},"aws-native:mediatailor:ChannelAdMarkupType":{"type":"string","enum":[{"name":"Daterange","value":"DATERANGE"},{"name":"Scte35Enhanced","value":"SCTE35_ENHANCED"}]},"aws-native:mediatailor:ChannelDashPlaylistSettings":{"description":"\u003cp\u003eDash manifest configuration parameters.\u003c/p\u003e","properties":{"manifestWindowSeconds":{"type":"number","description":"\u003cp\u003eThe total duration (in seconds) of each manifest. Minimum value: \u003ccode\u003e30\u003c/code\u003e seconds. Maximum value: \u003ccode\u003e3600\u003c/code\u003e seconds.\u003c/p\u003e"},"minBufferTimeSeconds":{"type":"number","description":"\u003cp\u003eMinimum amount of content (measured in seconds) that a player must keep available in the buffer. Minimum value: \u003ccode\u003e2\u003c/code\u003e seconds. Maximum value: \u003ccode\u003e60\u003c/code\u003e seconds.\u003c/p\u003e"},"minUpdatePeriodSeconds":{"type":"number","description":"\u003cp\u003eMinimum amount of time (in seconds) that the player should wait before requesting updates to the manifest. Minimum value: \u003ccode\u003e2\u003c/code\u003e seconds. Maximum value: \u003ccode\u003e60\u003c/code\u003e seconds.\u003c/p\u003e"},"suggestedPresentationDelaySeconds":{"type":"number","description":"\u003cp\u003eAmount of time (in seconds) that the player should be from the live point at the end of the manifest. Minimum value: \u003ccode\u003e2\u003c/code\u003e seconds. Maximum value: \u003ccode\u003e60\u003c/code\u003e seconds.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:ChannelHlsPlaylistSettings":{"description":"\u003cp\u003eHLS playlist configuration parameters.\u003c/p\u003e","properties":{"adMarkupType":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:ChannelAdMarkupType"},"description":"\u003cp\u003eDetermines the type of SCTE 35 tags to use in ad markup. Specify \u003ccode\u003eDATERANGE\u003c/code\u003e to use \u003ccode\u003eDATERANGE\u003c/code\u003e tags (for live or VOD content). Specify \u003ccode\u003eSCTE35_ENHANCED\u003c/code\u003e to use \u003ccode\u003eEXT-X-CUE-OUT\u003c/code\u003e and \u003ccode\u003eEXT-X-CUE-IN\u003c/code\u003e tags (for VOD content only).\u003c/p\u003e"},"manifestWindowSeconds":{"type":"number","description":"\u003cp\u003eThe total duration (in seconds) of each manifest. Minimum value: \u003ccode\u003e30\u003c/code\u003e seconds. Maximum value: \u003ccode\u003e3600\u003c/code\u003e seconds.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:ChannelLogConfigurationForChannel":{"description":"\u003cp\u003eThe log configuration for the channel.\u003c/p\u003e","properties":{"logTypes":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:ChannelLogType"},"description":"\u003cp\u003eThe log types.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:ChannelLogType":{"type":"string","enum":[{"name":"AsRun","value":"AS_RUN"}]},"aws-native:mediatailor:ChannelPlaybackMode":{"type":"string","enum":[{"name":"Loop","value":"LOOP"},{"name":"Linear","value":"LINEAR"}]},"aws-native:mediatailor:ChannelRequestOutputItem":{"description":"\u003cp\u003eThe output configuration for this channel.\u003c/p\u003e","properties":{"dashPlaylistSettings":{"$ref":"#/types/aws-native:mediatailor:ChannelDashPlaylistSettings","description":"DASH manifest configuration parameters."},"hlsPlaylistSettings":{"$ref":"#/types/aws-native:mediatailor:ChannelHlsPlaylistSettings","description":"HLS playlist configuration parameters."},"manifestName":{"type":"string","description":"\u003cp\u003eThe name of the manifest for the channel. The name appears in the \u003ccode\u003ePlaybackUrl\u003c/code\u003e.\u003c/p\u003e"},"sourceGroup":{"type":"string","description":"\u003cp\u003eA string used to match which \u003ccode\u003eHttpPackageConfiguration\u003c/code\u003e is used for each \u003ccode\u003eVodSource\u003c/code\u003e.\u003c/p\u003e"}},"type":"object","required":["manifestName","sourceGroup"]},"aws-native:mediatailor:ChannelSlateSource":{"description":"\u003cp\u003eSlate VOD source configuration.\u003c/p\u003e","properties":{"sourceLocationName":{"type":"string","description":"\u003cp\u003eThe name of the source location where the slate VOD source is stored.\u003c/p\u003e"},"vodSourceName":{"type":"string","description":"\u003cp\u003eThe slate VOD source name. The VOD source must already exist in a source location before it can be used for slate.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:ChannelTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediatailor:ChannelTier":{"type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Standard","value":"STANDARD"}]},"aws-native:mediatailor:ChannelTimeShiftConfiguration":{"description":"\u003cp\u003eThe configuration for time-shifted viewing.\u003c/p\u003e","properties":{"maxTimeDelaySeconds":{"type":"number","description":"\u003cp\u003eThe maximum time delay for time-shifted viewing. The minimum allowed maximum time delay is 0 seconds, and the maximum allowed maximum time delay is 21600 seconds (6 hours).\u003c/p\u003e"}},"type":"object","required":["maxTimeDelaySeconds"]},"aws-native:mediatailor:LiveSourceHttpPackageConfiguration":{"description":"\u003cp\u003eThe HTTP package configuration properties for the requested VOD source.\u003c/p\u003e","properties":{"path":{"type":"string","description":"\u003cp\u003eThe relative path to the URL for this VOD source. This is combined with \u003ccode\u003eSourceLocation::HttpConfiguration::BaseUrl\u003c/code\u003e to form a valid URL.\u003c/p\u003e"},"sourceGroup":{"type":"string","description":"\u003cp\u003eThe name of the source group. This has to match one of the \u003ccode\u003eChannel::Outputs::SourceGroup\u003c/code\u003e.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:mediatailor:LiveSourceType","description":"The streaming protocol for this package configuration. Supported values are `HLS` and `DASH` ."}},"type":"object","required":["path","sourceGroup","type"]},"aws-native:mediatailor:LiveSourceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediatailor:LiveSourceType":{"type":"string","enum":[{"name":"Dash","value":"DASH"},{"name":"Hls","value":"HLS"}]},"aws-native:mediatailor:PlaybackConfigurationAdConditioningConfiguration":{"description":"\u003cp\u003eThe setting that indicates what conditioning MediaTailor will perform on ads that the ad decision server (ADS) returns.\u003c/p\u003e","properties":{"streamingMediaFileConditioning":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationStreamingMediaFileConditioning","description":"For ads that have media files with streaming delivery and supported file extensions, indicates what transcoding action MediaTailor takes when it first receives these ads from the ADS. `TRANSCODE` indicates that MediaTailor must transcode the ads. `NONE` indicates that you have already transcoded the ads outside of MediaTailor and don't need them transcoded as part of the ad insertion workflow. For more information about ad conditioning see [Using preconditioned ads](https://docs.aws.amazon.com/mediatailor/latest/ug/precondition-ads.html) in the AWS Elemental MediaTailor user guide."}},"type":"object","required":["streamingMediaFileConditioning"]},"aws-native:mediatailor:PlaybackConfigurationAdDecisionServerConfiguration":{"description":"The configuration for the request to the specified Ad Decision Server URL.","properties":{"httpRequest":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationHttpRequest"}},"type":"object","required":["httpRequest"]},"aws-native:mediatailor:PlaybackConfigurationAdMarkerPassthrough":{"description":"For HLS, when set to true, MediaTailor passes through EXT-X-CUE-IN, EXT-X-CUE-OUT, and EXT-X-SPLICEPOINT-SCTE35 ad markers from the origin manifest to the MediaTailor personalized manifest. No logic is applied to these ad markers. For example, if EXT-X-CUE-OUT has a value of 60, but no ads are filled for that ad break, MediaTailor will not set the value to 0.","properties":{"enabled":{"type":"boolean","description":"Enables ad marker passthrough for your configuration."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationAdsInteractionLog":{"properties":{"excludeEventTypes":{"type":"array","items":{"type":"string"},"description":"Indicates that MediaTailor won't emit the selected events in the logs for playback sessions that are initialized with this configuration."},"publishOptInEventTypes":{"type":"array","items":{"type":"string"},"description":"Indicates that MediaTailor emits RAW_ADS_RESPONSE logs for playback sessions that are initialized with this configuration."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationAvailSuppression":{"description":"The configuration for avail suppression, also known as ad suppression. For more information about ad suppression, see Ad Suppression (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html).","properties":{"fillPolicy":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAvailSuppressionFillPolicy","description":"Defines the policy to apply to the avail suppression mode. BEHIND_LIVE_EDGE will always use the full avail suppression policy. AFTER_LIVE_EDGE mode can be used to invoke partial ad break fills when a session starts mid-break. Valid values are FULL_AVAIL_ONLY and PARTIAL_AVAIL"},"mode":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAvailSuppressionMode","description":"Sets the ad suppression mode. By default, ad suppression is off and all ad breaks are filled with ads or slate. When Mode is set to BEHIND_LIVE_EDGE, ad suppression is active and MediaTailor won't fill ad breaks on or behind the ad suppression Value time in the manifest lookback window. When Mode is set to AFTER_LIVE_EDGE, ad suppression is active and MediaTailor won't fill ad breaks that are within the live edge plus the avail suppression value."},"value":{"type":"string","description":"A live edge offset time in HH:MM:SS. MediaTailor won't fill ad breaks on or behind this time in the manifest lookback window. If Value is set to 00:00:00, it is in sync with the live edge, and MediaTailor won't fill any ad breaks on or behind the live edge. If you set a Value time, MediaTailor won't fill any ad breaks on or behind this time in the manifest lookback window. For example, if you set 00:45:00, then MediaTailor will fill ad breaks that occur within 45 minutes behind the live edge, but won't fill ad breaks on or behind 45 minutes behind the live edge."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationAvailSuppressionFillPolicy":{"description":"Defines the policy to apply to the avail suppression mode. BEHIND_LIVE_EDGE will always use the full avail suppression policy. AFTER_LIVE_EDGE mode can be used to invoke partial ad break fills when a session starts mid-break. Valid values are FULL_AVAIL_ONLY and PARTIAL_AVAIL","type":"string","enum":[{"name":"PartialAvail","value":"PARTIAL_AVAIL"},{"name":"FullAvailOnly","value":"FULL_AVAIL_ONLY"}]},"aws-native:mediatailor:PlaybackConfigurationAvailSuppressionMode":{"description":"Sets the ad suppression mode. By default, ad suppression is off and all ad breaks are filled with ads or slate. When Mode is set to BEHIND_LIVE_EDGE, ad suppression is active and MediaTailor won't fill ad breaks on or behind the ad suppression Value time in the manifest lookback window. When Mode is set to AFTER_LIVE_EDGE, ad suppression is active and MediaTailor won't fill ad breaks that are within the live edge plus the avail suppression value.","type":"string","enum":[{"name":"Off","value":"OFF"},{"name":"BehindLiveEdge","value":"BEHIND_LIVE_EDGE"},{"name":"AfterLiveEdge","value":"AFTER_LIVE_EDGE"}]},"aws-native:mediatailor:PlaybackConfigurationBumper":{"description":"The configuration for bumpers. Bumpers are short audio or video clips that play at the start or before the end of an ad break. To learn more about bumpers, see Bumpers (https://docs.aws.amazon.com/mediatailor/latest/ug/bumpers.html).","properties":{"endUrl":{"type":"string","description":"The URL for the end bumper asset."},"startUrl":{"type":"string","description":"The URL for the start bumper asset."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationCdnConfiguration":{"description":"The configuration for using a content delivery network (CDN), like Amazon CloudFront, for content and ad segment management.","properties":{"adSegmentUrlPrefix":{"type":"string","description":"A non-default content delivery network (CDN) to serve ad segments. By default, AWS Elemental MediaTailor uses Amazon CloudFront with default cache settings as its CDN for ad segments. To set up an alternate CDN, create a rule in your CDN for the origin ads.mediatailor.\u0026lt;region\u003e.amazonaws.com. Then specify the rule's name in this AdSegmentUrlPrefix. When AWS Elemental MediaTailor serves a manifest, it reports your CDN as the source for ad segments."},"contentSegmentUrlPrefix":{"type":"string","description":"A content delivery network (CDN) to cache content segments, so that content requests don't always have to go to the origin server. First, create a rule in your CDN for the content segment origin server. Then specify the rule's name in this ContentSegmentUrlPrefix. When AWS Elemental MediaTailor serves a manifest, it reports your CDN as the source for content segments."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationDashConfiguration":{"description":"The configuration for DASH PUT operations.","properties":{"manifestEndpointPrefix":{"type":"string","description":"The URL generated by MediaTailor to initiate a DASH playback session. The session uses server-side reporting."},"mpdLocation":{"type":"string","description":"The setting that controls whether MediaTailor includes the Location tag in DASH manifests. MediaTailor populates the Location tag with the URL for manifest update requests, to be used by players that don't support sticky redirects. Disable this if you have CDN routing rules set up for accessing MediaTailor manifests, and you are either using client-side reporting or your players support sticky HTTP redirects. Valid values are DISABLED and EMT_DEFAULT. The EMT_DEFAULT setting enables the inclusion of the tag and is the default value."},"originManifestType":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationDashConfigurationOriginManifestType","description":"The setting that controls whether MediaTailor handles manifests from the origin server as multi-period manifests or single-period manifests. If your origin server produces single-period manifests, set this to SINGLE_PERIOD. The default setting is MULTI_PERIOD. For multi-period manifests, omit this setting or set it to MULTI_PERIOD."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationDashConfigurationOriginManifestType":{"description":"The setting that controls whether MediaTailor handles manifests from the origin server as multi-period manifests or single-period manifests. If your origin server produces single-period manifests, set this to SINGLE_PERIOD. The default setting is MULTI_PERIOD. For multi-period manifests, omit this setting or set it to MULTI_PERIOD.","type":"string","enum":[{"name":"SinglePeriod","value":"SINGLE_PERIOD"},{"name":"MultiPeriod","value":"MULTI_PERIOD"}]},"aws-native:mediatailor:PlaybackConfigurationHlsConfiguration":{"properties":{"manifestEndpointPrefix":{"type":"string","description":"The URL that is used to initiate a playback session for devices that support Apple HLS. The session uses server-side reporting."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationHttpRequest":{"description":"The configuration for the request to the Ad Decision Server URL.","properties":{"body":{"type":"string","description":"The body of the request to the Ad Decision Server URL. The maximum length is 100,000 characters."},"compressRequest":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationHttpRequestCompressRequest","description":"The compression type of the request sent to the Ad Decision Server URL. Only the POST HTTP Method permits compression other than NONE."},"headers":{"type":"object","additionalProperties":{"type":"string"}},"httpMethod":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationHttpRequestHttpMethod","description":"Supported HTTP Methods for the request to the Ad Decision Server URL."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationHttpRequestCompressRequest":{"description":"The compression type of the request sent to the Ad Decision Server URL. Only the POST HTTP Method permits compression other than NONE.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Gzip","value":"GZIP"}]},"aws-native:mediatailor:PlaybackConfigurationHttpRequestHttpMethod":{"description":"Supported HTTP Methods for the request to the Ad Decision Server URL.","type":"string","enum":[{"name":"Get","value":"GET"},{"name":"Post","value":"POST"}]},"aws-native:mediatailor:PlaybackConfigurationInsertionMode":{"type":"string","enum":[{"name":"StitchedOnly","value":"STITCHED_ONLY"},{"name":"PlayerSelect","value":"PLAYER_SELECT"}]},"aws-native:mediatailor:PlaybackConfigurationLivePreRollConfiguration":{"description":"The configuration for pre-roll ad insertion.","properties":{"adDecisionServerUrl":{"type":"string","description":"The URL for the ad decision server (ADS) for pre-roll ads. This includes the specification of static parameters and placeholders for dynamic parameters. AWS Elemental MediaTailor substitutes player-specific and session-specific parameters as needed when calling the ADS. Alternately, for testing, you can provide a static VAST URL. The maximum length is 25,000 characters."},"maxDurationSeconds":{"type":"integer","description":"The maximum allowed duration for the pre-roll ad avail. AWS Elemental MediaTailor won't play pre-roll ads to exceed this duration, regardless of the total duration of ads that the ADS returns."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationLogConfiguration":{"properties":{"adsInteractionLog":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdsInteractionLog","description":"The event types that MediaTailor emits in logs for interactions with the ADS."},"enabledLoggingStrategies":{"type":"array","items":{"type":"string"},"description":"The method used for collecting logs from AWS Elemental MediaTailor. To configure MediaTailor to send logs directly to Amazon CloudWatch Logs, choose LEGACY_CLOUDWATCH. To configure MediaTailor to send logs to CloudWatch, which then vends the logs to your destination of choice, choose VENDED_LOGS. Supported destinations are CloudWatch Logs log group, Amazon S3 bucket, and Amazon Data Firehose stream. To use vended logs, you must configure the delivery destination in Amazon CloudWatch"},"manifestServiceInteractionLog":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationManifestServiceInteractionLog","description":"The event types that MediaTailor emits in logs for interactions with the origin server."},"percentEnabled":{"type":"integer","description":"The percentage of session logs that MediaTailor sends to your CloudWatch Logs account. For example, if your playback configuration has 1000 sessions and percentEnabled is set to 60, MediaTailor sends logs for 600 of the sessions to CloudWatch Logs. MediaTailor decides at random which of the playback configuration sessions to send logs for. If you want to view logs for a specific session, you can use the debug log mode."}},"type":"object","required":["percentEnabled"]},"aws-native:mediatailor:PlaybackConfigurationManifestProcessingRules":{"description":"The configuration for manifest processing rules. Manifest processing rules enable customization of the personalized manifests created by MediaTailor.","properties":{"adMarkerPassthrough":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdMarkerPassthrough","description":"For HLS, when set to true, MediaTailor passes through EXT-X-CUE-IN, EXT-X-CUE-OUT, and EXT-X-SPLICEPOINT-SCTE35 ad markers from the origin manifest to the MediaTailor personalized manifest. No logic is applied to these ad markers. For example, if EXT-X-CUE-OUT has a value of 60, but no ads are filled for that ad break, MediaTailor will not set the value to 0."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationManifestServiceInteractionLog":{"properties":{"excludeEventTypes":{"type":"array","items":{"type":"string"},"description":"Indicates that MediaTailor won't emit the selected events in the logs for playback sessions that are initialized with this configuration."}},"type":"object"},"aws-native:mediatailor:PlaybackConfigurationStreamingMediaFileConditioning":{"type":"string","enum":[{"name":"Transcode","value":"TRANSCODE"},{"name":"None","value":"NONE"}]},"aws-native:mediatailor:PlaybackConfigurationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediatailor:SourceLocationAccessConfiguration":{"description":"\u003cp\u003eAccess configuration parameters.\u003c/p\u003e","properties":{"accessType":{"$ref":"#/types/aws-native:mediatailor:SourceLocationAccessType","description":"The type of authentication used to access content from `HttpConfiguration::BaseUrl` on your source location. Accepted value: `S3_SIGV4` .\n\n`S3_SIGV4` - AWS Signature Version 4 authentication for Amazon S3 hosted virtual-style access. If your source location base URL is an Amazon S3 bucket, MediaTailor can use AWS Signature Version 4 (SigV4) authentication to access the bucket where your source content is stored. Your MediaTailor source location baseURL must follow the S3 virtual hosted-style request URL format. For example, https://bucket-name.s3.Region.amazonaws.com/key-name.\n\nBefore you can use `S3_SIGV4` , you must meet these requirements:\n\n• You must allow MediaTailor to access your S3 bucket by granting mediatailor.amazonaws.com principal access in IAM. For information about configuring access in IAM, see Access management in the IAM User Guide.\n\n• The mediatailor.amazonaws.com service principal must have permissions to read all top level manifests referenced by the VodSource packaging configurations.\n\n• The caller of the API must have s3:GetObject IAM permissions to read all top level manifests referenced by your MediaTailor VodSource packaging configurations."},"secretsManagerAccessTokenConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationSecretsManagerAccessTokenConfiguration","description":"AWS Secrets Manager access token configuration parameters."}},"type":"object"},"aws-native:mediatailor:SourceLocationAccessType":{"type":"string","enum":[{"name":"S3Sigv4","value":"S3_SIGV4"},{"name":"SecretsManagerAccessToken","value":"SECRETS_MANAGER_ACCESS_TOKEN"},{"name":"AutodetectSigv4","value":"AUTODETECT_SIGV4"}]},"aws-native:mediatailor:SourceLocationDefaultSegmentDeliveryConfiguration":{"description":"\u003cp\u003eThe optional configuration for a server that serves segments. Use this if you want the segment delivery server to be different from the source location server. For example, you can configure your source location server to be an origination server, such as MediaPackage, and the segment delivery server to be a content delivery network (CDN), such as CloudFront. If you don't specify a segment delivery server, then the source location server is used.\u003c/p\u003e","properties":{"baseUrl":{"type":"string","description":"\u003cp\u003eThe hostname of the server that will be used to serve segments. This string must include the protocol, such as \u003cb\u003ehttps://\u003c/b\u003e.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:SourceLocationHttpConfiguration":{"description":"\u003cp\u003eThe HTTP configuration for the source location.\u003c/p\u003e","properties":{"baseUrl":{"type":"string","description":"\u003cp\u003eThe base URL for the source location host server. This string must include the protocol, such as \u003cb\u003ehttps://\u003c/b\u003e.\u003c/p\u003e"}},"type":"object","required":["baseUrl"]},"aws-native:mediatailor:SourceLocationSecretsManagerAccessTokenConfiguration":{"description":"\u003cp\u003eAWS Secrets Manager access token configuration parameters. For information about Secrets Manager access token authentication, see \u003ca href=\"https://docs.aws.amazon.com/mediatailor/latest/ug/channel-assembly-access-configuration-access-token.html\"\u003eWorking with AWS Secrets Manager access token authentication\u003c/a\u003e.\u003c/p\u003e","properties":{"headerName":{"type":"string","description":"\u003cp\u003eThe name of the HTTP header used to supply the access token in requests to the source location.\u003c/p\u003e"},"secretArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the access token.\u003c/p\u003e"},"secretStringKey":{"type":"string","description":"\u003cp\u003eThe AWS Secrets Manager \u003ca href=\"https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html#SecretsManager-CreateSecret-request-SecretString.html\"\u003eSecretString\u003c/a\u003e key associated with the access token. MediaTailor uses the key to look up SecretString key and value pair containing the access token.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:SourceLocationSegmentDeliveryConfiguration":{"description":"\u003cp\u003eThe segment delivery configuration settings.\u003c/p\u003e","properties":{"baseUrl":{"type":"string","description":"\u003cp\u003eThe base URL of the host or path of the segment delivery server that you're using to serve segments. This is typically a content delivery network (CDN). The URL can be absolute or relative. To use an absolute URL include the protocol, such as \u003ccode\u003ehttps://example.com/some/path\u003c/code\u003e. To use a relative URL specify the relative path, such as \u003ccode\u003e/some/path*\u003c/code\u003e.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eA unique identifier used to distinguish between multiple segment delivery configurations in a source location.\u003c/p\u003e"}},"type":"object"},"aws-native:mediatailor:SourceLocationTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediatailor:VodSourceHttpPackageConfiguration":{"description":"\u003cp\u003eThe HTTP package configuration properties for the requested VOD source.\u003c/p\u003e","properties":{"path":{"type":"string","description":"\u003cp\u003eThe relative path to the URL for this VOD source. This is combined with \u003ccode\u003eSourceLocation::HttpConfiguration::BaseUrl\u003c/code\u003e to form a valid URL.\u003c/p\u003e"},"sourceGroup":{"type":"string","description":"\u003cp\u003eThe name of the source group. This has to match one of the \u003ccode\u003eChannel::Outputs::SourceGroup\u003c/code\u003e.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:mediatailor:VodSourceType","description":"The streaming protocol for this package configuration. Supported values are `HLS` and `DASH` ."}},"type":"object","required":["path","sourceGroup","type"]},"aws-native:mediatailor:VodSourceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:mediatailor:VodSourceType":{"type":"string","enum":[{"name":"Dash","value":"DASH"},{"name":"Hls","value":"HLS"}]},"aws-native:memorydb:AclTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with 'aws:'. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:memorydb:AuthenticationModeProperties":{"description":"Denotes whether the user requires a password to authenticate.\n\n*Example:*\n\n`mynewdbuser: Type: AWS::MemoryDB::User Properties: AccessString: on ~* \u0026* +@all AuthenticationMode: Passwords: '1234567890123456' Type: password UserName: mynewdbuser AuthenticationMode: { \"Passwords\": [\"1234567890123456\"], \"Type\": \"Password\" }`","properties":{"passwords":{"type":"array","items":{"type":"string"},"description":"Passwords used for this user account. You can create up to two passwords for each user."},"type":{"$ref":"#/types/aws-native:memorydb:UserAuthenticationModePropertiesType","description":"Type of authentication strategy for this user."}},"type":"object"},"aws-native:memorydb:ClusterDataTieringStatus":{"type":"string","enum":[{"name":"True","value":"true"},{"name":"False","value":"false"}]},"aws-native:memorydb:ClusterEndpoint":{"properties":{"address":{"type":"string","description":"The DNS address of the primary read-write node."},"port":{"type":"integer","description":"The port number that the engine is listening on. "}},"type":"object"},"aws-native:memorydb:ClusterSupportedIpDiscoveryTypes":{"type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"}]},"aws-native:memorydb:ClusterSupportedNetworkTypes":{"type":"string","enum":[{"name":"Ipv4","value":"ipv4"},{"name":"Ipv6","value":"ipv6"},{"name":"DualStack","value":"dual_stack"}]},"aws-native:memorydb:ClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for the tag. May not be null."},"value":{"type":"string","description":"The tag's value. May be null."}},"type":"object","required":["key","value"]},"aws-native:memorydb:MultiRegionClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for the tag. May not be null."},"value":{"type":"string","description":"The tag's value. May be null."}},"type":"object","required":["key","value"]},"aws-native:memorydb:MultiRegionClusterUpdateStrategy":{"description":"An enum string value that determines the update strategy for scaling. Possible values are 'COORDINATED' and 'UNCOORDINATED'. Default is 'COORDINATED'.","type":"string","enum":[{"name":"Coordinated","value":"COORDINATED"},{"name":"Uncoordinated","value":"UNCOORDINATED"}]},"aws-native:memorydb:ParameterGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for the tag. May not be null."},"value":{"type":"string","description":"The tag's value. May be null."}},"type":"object","required":["key","value"]},"aws-native:memorydb:SubnetGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key for the tag. May not be null."},"value":{"type":"string","description":"The tag's value. May be null."}},"type":"object","required":["key","value"]},"aws-native:memorydb:UserAuthenticationModePropertiesType":{"description":"Type of authentication strategy for this user.","type":"string","enum":[{"name":"Password","value":"password"},{"name":"Iam","value":"iam"}]},"aws-native:memorydb:UserTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with 'aws:'. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:msk:ClusterBrokerLogs":{"properties":{"cloudWatchLogs":{"$ref":"#/types/aws-native:msk:ClusterCloudWatchLogs"},"firehose":{"$ref":"#/types/aws-native:msk:ClusterFirehose","description":"Details of the Kinesis Data Firehose delivery stream that is the destination for broker logs."},"s3":{"$ref":"#/types/aws-native:msk:ClusterS3","description":"Details of the Amazon S3 destination for broker logs."}},"type":"object"},"aws-native:msk:ClusterBrokerNodeGroupInfo":{"properties":{"brokerAzDistribution":{"type":"string","description":"This parameter is currently not in use.","replaceOnChanges":true},"clientSubnets":{"type":"array","items":{"type":"string"},"description":"The list of subnets to connect to in the client virtual private cloud (VPC). Amazon creates elastic network interfaces (ENIs) inside these subnets. Client applications use ENIs to produce and consume data.\n\nIf you use the US West (N. California) Region, specify exactly two subnets. For other Regions where Amazon MSK is available, you can specify either two or three subnets. The subnets that you specify must be in distinct Availability Zones. When you create a cluster, Amazon MSK distributes the broker nodes evenly across the subnets that you specify.\n\nClient subnets can't occupy the Availability Zone with ID `use1-az3` .","replaceOnChanges":true},"connectivityInfo":{"$ref":"#/types/aws-native:msk:ClusterConnectivityInfo","description":"Information about the cluster's connectivity setting."},"instanceType":{"type":"string","description":"The type of Amazon EC2 instances to use for brokers. Depending on the [broker type](https://docs.aws.amazon.com/msk/latest/developerguide/broker-instance-types.html) , Amazon MSK supports the following broker sizes:\n\n*Standard broker sizes*\n\n- kafka.t3.small\n\n\u003e You can't select the kafka.t3.small instance type when the metadata mode is KRaft.\n- kafka.m5.large, kafka.m5.xlarge, kafka.m5.2xlarge, kafka.m5.4xlarge, kafka.m5.8xlarge, kafka.m5.12xlarge, kafka.m5.16xlarge, kafka.m5.24xlarge\n- kafka.m7g.large, kafka.m7g.xlarge, kafka.m7g.2xlarge, kafka.m7g.4xlarge, kafka.m7g.8xlarge, kafka.m7g.12xlarge, kafka.m7g.16xlarge\n\n*Express broker sizes*\n\n- express.m7g.large, express.m7g.xlarge, express.m7g.2xlarge, express.m7g.4xlarge, express.m7g.8xlarge, express.m7g.12xlarge, express.m7g.16xlarge\n\n\u003e Some broker sizes might not be available in certian AWS Regions. See the updated [Pricing tools](https://docs.aws.amazon.com/msk/pricing/) section on the Amazon MSK pricing page for the latest list of available instances by Region."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups to associate with the ENIs in order to specify who can connect to and communicate with the Amazon MSK cluster. If you don't specify a security group, Amazon MSK uses the default security group associated with the VPC. If you specify security groups that were shared with you, you must ensure that you have permissions to them. Specifically, you need the `ec2:DescribeSecurityGroups` permission.","replaceOnChanges":true},"storageInfo":{"$ref":"#/types/aws-native:msk:ClusterStorageInfo","description":"Contains information about storage volumes attached to Amazon MSK broker nodes."}},"type":"object","required":["clientSubnets","instanceType"]},"aws-native:msk:ClusterClientAuthentication":{"properties":{"sasl":{"$ref":"#/types/aws-native:msk:ClusterSasl","description":"Details for client authentication using SASL. To turn on SASL, you must also turn on `EncryptionInTransit` by setting `inCluster` to true. You must set `clientBroker` to either `TLS` or `TLS_PLAINTEXT` . If you choose `TLS_PLAINTEXT` , then you must also set `unauthenticated` to true."},"tls":{"$ref":"#/types/aws-native:msk:ClusterTls","description":"Details for ClientAuthentication using TLS. To turn on TLS access control, you must also turn on `EncryptionInTransit` by setting `inCluster` to true and `clientBroker` to `TLS` ."},"unauthenticated":{"$ref":"#/types/aws-native:msk:ClusterUnauthenticated","description":"Details for ClientAuthentication using no authentication."}},"type":"object"},"aws-native:msk:ClusterCloudWatchLogs":{"properties":{"enabled":{"type":"boolean","description":"Specifies whether broker logs get sent to the specified CloudWatch Logs destination."},"logGroup":{"type":"string","description":"The CloudWatch log group that is the destination for broker logs."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterConfigurationInfo":{"properties":{"arn":{"type":"string","description":"ARN of the configuration to use."},"revision":{"type":"integer","description":"The revision of the configuration to use."}},"type":"object","required":["arn","revision"]},"aws-native:msk:ClusterConnectivityInfo":{"properties":{"networkType":{"$ref":"#/types/aws-native:msk:ClusterNetworkType"},"publicAccess":{"$ref":"#/types/aws-native:msk:ClusterPublicAccess","description":"Access control settings for the cluster's brokers."},"vpcConnectivity":{"$ref":"#/types/aws-native:msk:ClusterVpcConnectivity","description":"VPC connection control settings for brokers."}},"type":"object"},"aws-native:msk:ClusterEbsStorageInfo":{"properties":{"provisionedThroughput":{"$ref":"#/types/aws-native:msk:ClusterProvisionedThroughput","description":"EBS volume provisioned throughput information."},"volumeSize":{"type":"integer","description":"The size in GiB of the EBS volume for the data drive on each broker node."}},"type":"object"},"aws-native:msk:ClusterEncryptionAtRest":{"properties":{"dataVolumeKmsKeyId":{"type":"string","description":"The ARN of the Amazon KMS key for encrypting data at rest. If you don't specify a KMS key, MSK creates one for you and uses it."}},"type":"object","required":["dataVolumeKmsKeyId"]},"aws-native:msk:ClusterEncryptionInTransit":{"properties":{"clientBroker":{"$ref":"#/types/aws-native:msk:ClusterEncryptionInTransitClientBroker","description":"Indicates the encryption setting for data in transit between clients and brokers. You must set it to one of the following values.\n\n- `TLS` : Indicates that client-broker communication is enabled with TLS only.\n- `TLS_PLAINTEXT` : Indicates that client-broker communication is enabled for both TLS-encrypted, as well as plaintext data.\n- `PLAINTEXT` : Indicates that client-broker communication is enabled in plaintext only.\n\nThe default value is `TLS` ."},"inCluster":{"type":"boolean","description":"When set to true, it indicates that data communication among the broker nodes of the cluster is encrypted. When set to false, the communication happens in plaintext.\n\nThe default value is true.","replaceOnChanges":true}},"type":"object"},"aws-native:msk:ClusterEncryptionInTransitClientBroker":{"description":"Indicates the encryption setting for data in transit between clients and brokers. You must set it to one of the following values.\n\n- `TLS` : Indicates that client-broker communication is enabled with TLS only.\n- `TLS_PLAINTEXT` : Indicates that client-broker communication is enabled for both TLS-encrypted, as well as plaintext data.\n- `PLAINTEXT` : Indicates that client-broker communication is enabled in plaintext only.\n\nThe default value is `TLS` .","type":"string","enum":[{"name":"Tls","value":"TLS"},{"name":"TlsPlaintext","value":"TLS_PLAINTEXT"},{"name":"Plaintext","value":"PLAINTEXT"}]},"aws-native:msk:ClusterEncryptionInfo":{"properties":{"encryptionAtRest":{"$ref":"#/types/aws-native:msk:ClusterEncryptionAtRest","description":"The data-volume encryption details.","replaceOnChanges":true},"encryptionInTransit":{"$ref":"#/types/aws-native:msk:ClusterEncryptionInTransit","description":"The details for encryption in transit."}},"type":"object"},"aws-native:msk:ClusterEnhancedMonitoring":{"description":"Specifies the level of monitoring for the MSK cluster.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"PerBroker","value":"PER_BROKER"},{"name":"PerTopicPerBroker","value":"PER_TOPIC_PER_BROKER"},{"name":"PerTopicPerPartition","value":"PER_TOPIC_PER_PARTITION"}]},"aws-native:msk:ClusterFirehose":{"properties":{"deliveryStream":{"type":"string","description":"The Kinesis Data Firehose delivery stream that is the destination for broker logs."},"enabled":{"type":"boolean","description":"Specifies whether broker logs get send to the specified Kinesis Data Firehose delivery stream."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterIam":{"properties":{"enabled":{"type":"boolean","description":"SASL/IAM authentication is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterJmxExporter":{"properties":{"enabledInBroker":{"type":"boolean","description":"Indicates whether you want to enable or disable the JMX Exporter."}},"type":"object","required":["enabledInBroker"]},"aws-native:msk:ClusterLoggingInfo":{"properties":{"brokerLogs":{"$ref":"#/types/aws-native:msk:ClusterBrokerLogs","description":"You can configure your MSK cluster to send broker logs to different destination types. This configuration specifies the details of these destinations."}},"type":"object","required":["brokerLogs"]},"aws-native:msk:ClusterNetworkType":{"type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dual","value":"DUAL"}]},"aws-native:msk:ClusterNodeExporter":{"properties":{"enabledInBroker":{"type":"boolean","description":"Indicates whether you want to enable or disable the Node Exporter."}},"type":"object","required":["enabledInBroker"]},"aws-native:msk:ClusterOpenMonitoring":{"properties":{"prometheus":{"$ref":"#/types/aws-native:msk:ClusterPrometheus","description":"Prometheus exporter settings."}},"type":"object","required":["prometheus"]},"aws-native:msk:ClusterPrometheus":{"properties":{"jmxExporter":{"$ref":"#/types/aws-native:msk:ClusterJmxExporter","description":"Indicates whether you want to enable or disable the JMX Exporter."},"nodeExporter":{"$ref":"#/types/aws-native:msk:ClusterNodeExporter","description":"Indicates whether you want to enable or disable the Node Exporter."}},"type":"object"},"aws-native:msk:ClusterProvisionedThroughput":{"properties":{"enabled":{"type":"boolean","description":"Provisioned throughput is on or off."},"volumeThroughput":{"type":"integer","description":"Throughput value of the EBS volumes for the data drive on each kafka broker node in MiB per second."}},"type":"object"},"aws-native:msk:ClusterPublicAccess":{"properties":{"type":{"type":"string","description":"DISABLED means that public access is turned off. SERVICE_PROVIDED_EIPS means that public access is turned on."}},"type":"object"},"aws-native:msk:ClusterRebalancing":{"properties":{"status":{"$ref":"#/types/aws-native:msk:ClusterRebalancingStatus"}},"type":"object","required":["status"]},"aws-native:msk:ClusterRebalancingStatus":{"type":"string","enum":[{"name":"Paused","value":"PAUSED"},{"name":"Active","value":"ACTIVE"}]},"aws-native:msk:ClusterS3":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket that is the destination for broker logs."},"enabled":{"type":"boolean","description":"Specifies whether broker logs get sent to the specified Amazon S3 destination."},"prefix":{"type":"string","description":"The S3 prefix that is the destination for broker logs."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterSasl":{"properties":{"iam":{"$ref":"#/types/aws-native:msk:ClusterIam","description":"Details for ClientAuthentication using IAM."},"scram":{"$ref":"#/types/aws-native:msk:ClusterScram","description":"Details for SASL/SCRAM client authentication."}},"type":"object"},"aws-native:msk:ClusterScram":{"properties":{"enabled":{"type":"boolean","description":"SASL/SCRAM authentication is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterStorageInfo":{"properties":{"ebsStorageInfo":{"$ref":"#/types/aws-native:msk:ClusterEbsStorageInfo","description":"EBS volume information."}},"type":"object"},"aws-native:msk:ClusterStorageMode":{"description":"This controls storage mode for supported storage tiers.","type":"string","enum":[{"name":"Local","value":"LOCAL"},{"name":"Tiered","value":"TIERED"}]},"aws-native:msk:ClusterTls":{"properties":{"certificateAuthorityArnList":{"type":"array","items":{"type":"string"},"description":"List of AWS Private CA ARNs."},"enabled":{"type":"boolean","description":"TLS authentication is enabled or not."}},"type":"object"},"aws-native:msk:ClusterUnauthenticated":{"properties":{"enabled":{"type":"boolean","description":"Unauthenticated is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterVpcConnectivity":{"properties":{"clientAuthentication":{"$ref":"#/types/aws-native:msk:ClusterVpcConnectivityClientAuthentication","description":"VPC connection control settings for brokers."}},"type":"object"},"aws-native:msk:ClusterVpcConnectivityClientAuthentication":{"properties":{"sasl":{"$ref":"#/types/aws-native:msk:ClusterVpcConnectivitySasl","description":"Details for VpcConnectivity ClientAuthentication using SASL."},"tls":{"$ref":"#/types/aws-native:msk:ClusterVpcConnectivityTls","description":"Details for VpcConnectivity ClientAuthentication using TLS."}},"type":"object"},"aws-native:msk:ClusterVpcConnectivityIam":{"properties":{"enabled":{"type":"boolean","description":"SASL/IAM authentication is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterVpcConnectivitySasl":{"properties":{"iam":{"$ref":"#/types/aws-native:msk:ClusterVpcConnectivityIam","description":"Details for ClientAuthentication using IAM for VpcConnectivity."},"scram":{"$ref":"#/types/aws-native:msk:ClusterVpcConnectivityScram","description":"Details for SASL/SCRAM client authentication for VpcConnectivity."}},"type":"object"},"aws-native:msk:ClusterVpcConnectivityScram":{"properties":{"enabled":{"type":"boolean","description":"SASL/SCRAM authentication is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ClusterVpcConnectivityTls":{"properties":{"enabled":{"type":"boolean","description":"TLS authentication is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ConfigurationLatestRevision":{"properties":{"creationTime":{"type":"string","description":"The time when the configuration revision was created."},"description":{"type":"string","description":"The description of the configuration revision."},"revision":{"type":"integer","description":"The revision number."}},"type":"object"},"aws-native:msk:ReplicatorAmazonMskCluster":{"description":"Details of an Amazon MSK cluster.","properties":{"mskClusterArn":{"type":"string","description":"The ARN of an Amazon MSK cluster."}},"type":"object","required":["mskClusterArn"]},"aws-native:msk:ReplicatorConsumerGroupReplication":{"description":"Configuration relating to consumer group replication.","properties":{"consumerGroupsToExclude":{"type":"array","items":{"type":"string"},"description":"List of regular expression patterns indicating the consumer groups that should not be replicated."},"consumerGroupsToReplicate":{"type":"array","items":{"type":"string"},"description":"List of regular expression patterns indicating the consumer groups to copy."},"detectAndCopyNewConsumerGroups":{"type":"boolean","description":"Whether to periodically check for new consumer groups."},"synchroniseConsumerGroupOffsets":{"type":"boolean","description":"Whether to periodically write the translated offsets to __consumer_offsets topic in target cluster."}},"type":"object","required":["consumerGroupsToReplicate"]},"aws-native:msk:ReplicatorKafkaCluster":{"description":"Details of a Kafka cluster for replication.","properties":{"amazonMskCluster":{"$ref":"#/types/aws-native:msk:ReplicatorAmazonMskCluster","description":"Details of an Amazon MSK cluster. Exactly one of AmazonMskCluster is required."},"vpcConfig":{"$ref":"#/types/aws-native:msk:ReplicatorKafkaClusterClientVpcConfig","description":"Details of an Amazon VPC which has network connectivity to the Apache Kafka cluster."}},"type":"object","required":["amazonMskCluster","vpcConfig"]},"aws-native:msk:ReplicatorKafkaClusterClientVpcConfig":{"description":"Details of an Amazon VPC which has network connectivity to the Kafka cluster.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The AWS security groups to associate with the elastic network interfaces in order to specify what the replicator has access to. If a security group is not specified, the default security group associated with the VPC is used."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of subnets to connect to in the virtual private cloud (VPC). AWS creates elastic network interfaces inside these subnets."}},"type":"object","required":["subnetIds"]},"aws-native:msk:ReplicatorReplicationInfo":{"description":"Specifies configuration for replication between a source and target Kafka cluster.","properties":{"consumerGroupReplication":{"$ref":"#/types/aws-native:msk:ReplicatorConsumerGroupReplication","description":"Configuration relating to consumer group replication."},"sourceKafkaClusterArn":{"type":"string","description":"Amazon Resource Name of the source Kafka cluster.","replaceOnChanges":true},"targetCompressionType":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationInfoTargetCompressionType","description":"The type of compression to use writing records to target Kafka cluster.","replaceOnChanges":true},"targetKafkaClusterArn":{"type":"string","description":"Amazon Resource Name of the target Kafka cluster.","replaceOnChanges":true},"topicReplication":{"$ref":"#/types/aws-native:msk:ReplicatorTopicReplication","description":"Configuration relating to topic replication."}},"type":"object","required":["consumerGroupReplication","sourceKafkaClusterArn","targetCompressionType","targetKafkaClusterArn","topicReplication"]},"aws-native:msk:ReplicatorReplicationInfoTargetCompressionType":{"description":"The type of compression to use writing records to target Kafka cluster.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Gzip","value":"GZIP"},{"name":"Snappy","value":"SNAPPY"},{"name":"Lz4","value":"LZ4"},{"name":"Zstd","value":"ZSTD"}]},"aws-native:msk:ReplicatorReplicationStartingPosition":{"description":"Configuration for specifying the position in the topics to start replicating from.","properties":{"type":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationStartingPositionType","description":"The type of replication starting position."}},"type":"object"},"aws-native:msk:ReplicatorReplicationStartingPositionType":{"description":"The type of replication starting position.","type":"string","enum":[{"name":"Latest","value":"LATEST"},{"name":"Earliest","value":"EARLIEST"}]},"aws-native:msk:ReplicatorReplicationTopicNameConfiguration":{"description":"Configuration for specifying replicated topic names should be the same as their corresponding upstream topics or prefixed with source cluster alias.","properties":{"type":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationTopicNameConfigurationType","description":"The type of replication topic name configuration, identical to upstream topic name or prefixed with source cluster alias."}},"type":"object"},"aws-native:msk:ReplicatorReplicationTopicNameConfigurationType":{"description":"The type of replicated topic name.","type":"string","enum":[{"name":"PrefixedWithSourceClusterAlias","value":"PREFIXED_WITH_SOURCE_CLUSTER_ALIAS"},{"name":"Identical","value":"IDENTICAL"}]},"aws-native:msk:ReplicatorTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:msk:ReplicatorTopicReplication":{"properties":{"copyAccessControlListsForTopics":{"type":"boolean","description":"Whether to periodically configure remote topic ACLs to match their corresponding upstream topics."},"copyTopicConfigurations":{"type":"boolean","description":"Whether to periodically configure remote topics to match their corresponding upstream topics."},"detectAndCopyNewTopics":{"type":"boolean","description":"Whether to periodically check for new topics and partitions."},"startingPosition":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationStartingPosition","description":"Configuration for specifying the position in the topics to start replicating from.","replaceOnChanges":true},"topicNameConfiguration":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationTopicNameConfiguration","description":"Configuration for specifying replicated topic names should be the same as their corresponding upstream topics or prefixed with source cluster alias.","replaceOnChanges":true},"topicsToExclude":{"type":"array","items":{"type":"string"},"description":"List of regular expression patterns indicating the topics that should not be replicated."},"topicsToReplicate":{"type":"array","items":{"type":"string"},"description":"List of regular expression patterns indicating the topics to copy."}},"type":"object","required":["topicsToReplicate"]},"aws-native:msk:ServerlessClusterClientAuthentication":{"properties":{"sasl":{"$ref":"#/types/aws-native:msk:ServerlessClusterSasl","description":"Details for client authentication using SASL. To turn on SASL, you must also turn on `EncryptionInTransit` by setting `inCluster` to true. You must set `clientBroker` to either `TLS` or `TLS_PLAINTEXT` . If you choose `TLS_PLAINTEXT` , then you must also set `unauthenticated` to true."}},"type":"object","required":["sasl"]},"aws-native:msk:ServerlessClusterIam":{"properties":{"enabled":{"type":"boolean","description":"SASL/IAM authentication is enabled or not."}},"type":"object","required":["enabled"]},"aws-native:msk:ServerlessClusterSasl":{"properties":{"iam":{"$ref":"#/types/aws-native:msk:ServerlessClusterIam","description":"Details for ClientAuthentication using IAM."}},"type":"object","required":["iam"]},"aws-native:msk:ServerlessClusterVpcConfig":{"properties":{"securityGroups":{"type":"array","items":{"type":"string"}},"subnetIds":{"type":"array","items":{"type":"string"}}},"type":"object","required":["subnetIds"]},"aws-native:msk:VpcConnectionAuthentication":{"description":"The type of private link authentication","type":"string","enum":[{"name":"SaslIam","value":"SASL_IAM"},{"name":"SaslScram","value":"SASL_SCRAM"},{"name":"Tls","value":"TLS"}]},"aws-native:mwaa:EnvironmentEndpointManagement":{"description":"Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA.","type":"string","enum":[{"name":"Customer","value":"CUSTOMER"},{"name":"Service","value":"SERVICE"}]},"aws-native:mwaa:EnvironmentLoggingConfiguration":{"description":"Logging configuration for the environment.","properties":{"dagProcessingLogs":{"$ref":"#/types/aws-native:mwaa:EnvironmentModuleLoggingConfiguration","description":"Defines the processing logs sent to CloudWatch Logs and the logging level to send."},"schedulerLogs":{"$ref":"#/types/aws-native:mwaa:EnvironmentModuleLoggingConfiguration","description":"Defines the scheduler logs sent to CloudWatch Logs and the logging level to send."},"taskLogs":{"$ref":"#/types/aws-native:mwaa:EnvironmentModuleLoggingConfiguration","description":"Defines the task logs sent to CloudWatch Logs and the logging level to send."},"webserverLogs":{"$ref":"#/types/aws-native:mwaa:EnvironmentModuleLoggingConfiguration","description":"Defines the web server logs sent to CloudWatch Logs and the logging level to send."},"workerLogs":{"$ref":"#/types/aws-native:mwaa:EnvironmentModuleLoggingConfiguration","description":"Defines the worker logs sent to CloudWatch Logs and the logging level to send."}},"type":"object"},"aws-native:mwaa:EnvironmentLoggingLevel":{"type":"string","enum":[{"name":"Critical","value":"CRITICAL"},{"name":"Error","value":"ERROR"},{"name":"Warning","value":"WARNING"},{"name":"Info","value":"INFO"},{"name":"Debug","value":"DEBUG"}]},"aws-native:mwaa:EnvironmentModuleLoggingConfiguration":{"description":"Logging configuration for a specific airflow component.","properties":{"cloudWatchLogGroupArn":{"type":"string","description":"The ARN of the CloudWatch Logs log group for each type of Apache Airflow log type that you have enabled.\n\n\u003e `CloudWatchLogGroupArn` is available only as a return value, accessible when specified as an attribute in the [`Fn:GetAtt`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-mwaa-environment.html#aws-resource-mwaa-environment-return-values) intrinsic function. Any value you provide for `CloudWatchLogGroupArn` is discarded by Amazon MWAA."},"enabled":{"type":"boolean","description":"Indicates whether to enable the Apache Airflow log type (e.g. `DagProcessingLogs` ) in CloudWatch Logs."},"logLevel":{"$ref":"#/types/aws-native:mwaa:EnvironmentLoggingLevel","description":"Defines the Apache Airflow logs to send for the log type (e.g. `DagProcessingLogs` ) to CloudWatch Logs."}},"type":"object"},"aws-native:mwaa:EnvironmentNetworkConfiguration":{"description":"Configures the network resources of the environment.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security groups to use for the environment."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnets to use for the environment. These must be private subnets, in the same VPC, in two different availability zones.","replaceOnChanges":true}},"type":"object"},"aws-native:mwaa:EnvironmentWebserverAccessMode":{"description":"Choice for mode of webserver access including over public internet or via private VPC endpoint.","type":"string","enum":[{"name":"PrivateOnly","value":"PRIVATE_ONLY"},{"name":"PublicOnly","value":"PUBLIC_ONLY"}]},"aws-native:mwaa:EnvironmentWorkerReplacementStrategy":{"description":"The worker replacement strategy to use when updating the environment. Valid values: `FORCED`, `GRACEFUL`. FORCED means Apache Airflow workers will be stopped and replaced without waiting for tasks to complete before an update. GRACEFUL means Apache Airflow workers will be able to complete running tasks for up to 12 hours during an update before being stopped and replaced.","type":"string","enum":[{"name":"Forced","value":"FORCED"},{"name":"Graceful","value":"GRACEFUL"}]},"aws-native:mwaaserverless:WorkflowEncryptionConfiguration":{"properties":{"kmsKeyId":{"type":"string"},"type":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowEncryptionConfigurationType"}},"type":"object","required":["type"]},"aws-native:mwaaserverless:WorkflowEncryptionConfigurationType":{"type":"string","enum":[{"name":"AwsManagedKey","value":"AWS_MANAGED_KEY"},{"name":"CustomerManagedKey","value":"CUSTOMER_MANAGED_KEY"}]},"aws-native:mwaaserverless:WorkflowLoggingConfiguration":{"properties":{"logGroupName":{"type":"string"}},"type":"object","required":["logGroupName"]},"aws-native:mwaaserverless:WorkflowNetworkConfiguration":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"}},"subnetIds":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:mwaaserverless:WorkflowS3Location":{"properties":{"bucket":{"type":"string"},"objectKey":{"type":"string"},"versionId":{"type":"string"}},"type":"object","required":["bucket","objectKey"]},"aws-native:mwaaserverless:WorkflowScheduleConfiguration":{"properties":{"cronExpression":{"type":"string"}},"type":"object"},"aws-native:mwaaserverless:WorkflowStatus":{"type":"string","enum":[{"name":"Ready","value":"READY"},{"name":"Deleting","value":"DELETING"}]},"aws-native:neptune:DbClusterDbClusterRole":{"description":"Describes an AWS Identity and Access Management (IAM) role that is associated with a DB cluster.","properties":{"featureName":{"type":"string","description":"The name of the feature associated with the AWS Identity and Access Management (IAM) role. For the list of supported feature names, see DBEngineVersion in the Amazon Neptune API Reference."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that is associated with the DB cluster."}},"type":"object","required":["roleArn"]},"aws-native:neptune:DbClusterParameterGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:neptune:DbClusterServerlessScalingConfiguration":{"description":"Contains the scaling configuration of an Neptune Serverless DB cluster.","properties":{"maxCapacity":{"type":"number","description":"The maximum number of Neptune capacity units (NCUs) for a DB instance in an Neptune Serverless cluster. You can specify NCU values in half-step increments, such as 40, 40.5, 41, and so on. The smallest value you can use is 2.5, whereas the largest is 128."},"minCapacity":{"type":"number","description":"The minimum number of Neptune capacity units (NCUs) for a DB instance in an Neptune Serverless cluster. You can specify NCU values in half-step increments, such as 8, 8.5, 9, and so on. The smallest value you can use is 1, whereas the largest is 128."}},"type":"object","required":["maxCapacity","minCapacity"]},"aws-native:neptune:DbClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:neptune:DbInstanceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:neptune:DbParameterGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:neptune:DbSubnetGroupTag":{"description":"An optional array of key-value pairs to apply to this DB subnet group.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:neptune:EventSubscriptionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain the set of Unicode letters, digits, white-space, '_', '.', '/', '=', '+', '-' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain the set of Unicode letters, digits, white-space, '_', '.', '/', '=', '+', '-' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-]*)$\")."}},"type":"object","required":["key","value"]},"aws-native:neptunegraph:GraphTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:neptunegraph:GraphVectorSearchConfiguration":{"description":"The vector search configuration.","properties":{"vectorSearchDimension":{"type":"integer","description":"The vector search dimension"}},"type":"object","required":["vectorSearchDimension"]},"aws-native:networkfirewall:FirewallAvailabilityZoneMapping":{"properties":{"availabilityZone":{"type":"string","description":"A AvailabilityZone"}},"type":"object","required":["availabilityZone"]},"aws-native:networkfirewall:FirewallEnabledAnalysisType":{"description":"An analysis type.","type":"string","enum":[{"name":"TlsSni","value":"TLS_SNI"},{"name":"HttpHost","value":"HTTP_HOST"}]},"aws-native:networkfirewall:FirewallPolicy":{"properties":{"enableTlsSessionHolding":{"type":"boolean","description":"When true, prevents TCP and TLS packets from reaching destination servers until TLS Inspection has evaluated Server Name Indication (SNI) rules. Requires an associated TLS Inspection configuration."},"policyVariables":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyPolicyVariablesProperties","description":"Contains variables that you can use to override default Suricata settings in your firewall policy."},"statefulDefaultActions":{"type":"array","items":{"type":"string"},"description":"The default actions to take on a packet that doesn't match any stateful rules. The stateful default action is optional, and is only valid when using the strict rule order.\n\nValid values of the stateful default action:\n\n- aws:drop_strict\n- aws:drop_established\n- aws:alert_strict\n- aws:alert_established\n\nFor more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html#suricata-strict-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* ."},"statefulEngineOptions":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyStatefulEngineOptions","description":"Additional options governing how Network Firewall handles stateful rules. The stateful rule groups that you use in your policy must have stateful rule options settings that are compatible with these settings."},"statefulRuleGroupReferences":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyStatefulRuleGroupReference"},"description":"References to the stateful rule groups that are used in the policy. These define the inspection criteria in stateful rules."},"statelessCustomActions":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyCustomAction"},"description":"The custom action definitions that are available for use in the firewall policy's `StatelessDefaultActions` setting. You name each custom action that you define, and then you can use it by name in your default actions specifications."},"statelessDefaultActions":{"type":"array","items":{"type":"string"},"description":"The actions to take on a packet if it doesn't match any of the stateless rules in the policy. If you want non-matching packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .\n\nYou must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.\n\nFor example, you could specify `[\"aws:pass\"]` or you could specify `[\"aws:pass\", \"customActionName\"]` . For information about compatibility, see the custom action descriptions."},"statelessFragmentDefaultActions":{"type":"array","items":{"type":"string"},"description":"The actions to take on a fragmented packet if it doesn't match any of the stateless rules in the policy. If you want non-matching fragmented packets to be forwarded for stateful inspection, specify `aws:forward_to_sfe` .\n\nYou must specify one of the standard actions: `aws:pass` , `aws:drop` , or `aws:forward_to_sfe` . In addition, you can specify custom actions that are compatible with your standard section choice.\n\nFor example, you could specify `[\"aws:pass\"]` or you could specify `[\"aws:pass\", \"customActionName\"]` . For information about compatibility, see the custom action descriptions."},"statelessRuleGroupReferences":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyStatelessRuleGroupReference"},"description":"References to the stateless rule groups that are used in the policy. These define the matching criteria in stateless rules."},"tlsInspectionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the TLS inspection configuration."}},"type":"object","required":["statelessDefaultActions","statelessFragmentDefaultActions"]},"aws-native:networkfirewall:FirewallPolicyActionDefinition":{"properties":{"publishMetricAction":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyPublishMetricAction","description":"Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.\n\nYou can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it."}},"type":"object"},"aws-native:networkfirewall:FirewallPolicyCustomAction":{"properties":{"actionDefinition":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyActionDefinition","description":"The custom action associated with the action name."},"actionName":{"type":"string","description":"The descriptive name of the custom action. You can't change the name of a custom action after you create it."}},"type":"object","required":["actionDefinition","actionName"]},"aws-native:networkfirewall:FirewallPolicyDimension":{"properties":{"value":{"type":"string","description":"The value to use in the custom metric dimension."}},"type":"object","required":["value"]},"aws-native:networkfirewall:FirewallPolicyIpSet":{"properties":{"definition":{"type":"array","items":{"type":"string"},"description":"The list of IP addresses and address ranges, in CIDR notation."}},"type":"object"},"aws-native:networkfirewall:FirewallPolicyOverrideAction":{"type":"string","enum":[{"name":"DropToAlert","value":"DROP_TO_ALERT"}]},"aws-native:networkfirewall:FirewallPolicyPolicyVariablesProperties":{"description":"Contains variables that you can use to override default Suricata settings in your firewall policy.","properties":{"ruleVariables":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyIpSet"}}},"type":"object"},"aws-native:networkfirewall:FirewallPolicyPublishMetricAction":{"properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyDimension"}}},"type":"object","required":["dimensions"]},"aws-native:networkfirewall:FirewallPolicyRuleOrder":{"type":"string","enum":[{"name":"DefaultActionOrder","value":"DEFAULT_ACTION_ORDER"},{"name":"StrictOrder","value":"STRICT_ORDER"}]},"aws-native:networkfirewall:FirewallPolicyStatefulEngineOptions":{"properties":{"flowTimeouts":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyStatefulEngineOptionsFlowTimeoutsProperties","description":"Configures the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle."},"ruleOrder":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyRuleOrder","description":"Indicates how to manage the order of stateful rule evaluation for the policy. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* ."},"streamExceptionPolicy":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyStreamExceptionPolicy","description":"Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.\n\n- `DROP` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.\n- `CONTINUE` - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to `drop http` traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a `flow:stateless` rule would still match, as would the `aws:drop_strict` default action.\n- `REJECT` - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic."}},"type":"object"},"aws-native:networkfirewall:FirewallPolicyStatefulEngineOptionsFlowTimeoutsProperties":{"description":"Configures the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle.","properties":{"tcpIdleTimeoutSeconds":{"type":"integer"}},"type":"object"},"aws-native:networkfirewall:FirewallPolicyStatefulRuleGroupOverride":{"properties":{"action":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyOverrideAction","description":"The action that changes the rule group from `DROP` to `ALERT` . This only applies to managed rule groups."}},"type":"object"},"aws-native:networkfirewall:FirewallPolicyStatefulRuleGroupReference":{"properties":{"deepThreatInspection":{"type":"boolean","description":"AWS Network Firewall plans to augment the active threat defense managed rule group with an additional deep threat inspection capability. When this capability is released, AWS will analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services.\n\n\u003e Customers can opt-out of deep threat inspection at any time through the AWS Network Firewall console or API. When customers opt out, AWS Network Firewall will not use the network traffic processed by those customers' active threat defense rule groups for rule group improvement."},"override":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicyStatefulRuleGroupOverride","description":"The action that allows the policy owner to override the behavior of the rule group within a policy."},"priority":{"type":"integer","description":"An integer setting that indicates the order in which to run the stateful rule groups in a single firewall policy. This setting only applies to firewall policies that specify the `STRICT_ORDER` rule order in the stateful engine options settings.\n\nNetwork Firewall evalutes each stateful rule group against a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy.\n\nYou can change the priority settings of your rule groups at any time. To make it easier to insert rule groups later, number them so there's a wide range in between, for example use 100, 200, and so on."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the stateful rule group."}},"type":"object","required":["resourceArn"]},"aws-native:networkfirewall:FirewallPolicyStatelessRuleGroupReference":{"properties":{"priority":{"type":"integer","description":"An integer setting that indicates the order in which to run the stateless rule groups in a single firewall policy. Network Firewall applies each stateless rule group to a packet starting with the group that has the lowest priority setting. You must ensure that the priority settings are unique within each policy."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the stateless rule group."}},"type":"object","required":["priority","resourceArn"]},"aws-native:networkfirewall:FirewallPolicyStreamExceptionPolicy":{"type":"string","enum":[{"name":"Drop","value":"DROP"},{"name":"Continue","value":"CONTINUE"},{"name":"Reject","value":"REJECT"}]},"aws-native:networkfirewall:FirewallPolicyTag":{"properties":{"key":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:networkfirewall:FirewallSubnetMapping":{"properties":{"ipAddressType":{"type":"string","description":"A IPAddressType"},"subnetId":{"type":"string","description":"A SubnetId."}},"type":"object","required":["subnetId"]},"aws-native:networkfirewall:FirewallTag":{"properties":{"key":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:networkfirewall:LoggingConfiguration":{"properties":{"logDestinationConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:LoggingConfigurationLogDestinationConfig"},"description":"Defines the logging destinations for the logs for a firewall. Network Firewall generates logs for stateful rule groups."}},"type":"object","required":["logDestinationConfigs"]},"aws-native:networkfirewall:LoggingConfigurationLogDestinationConfig":{"properties":{"logDestination":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to configure the logDestinations."},"logDestinationType":{"$ref":"#/types/aws-native:networkfirewall:LoggingConfigurationLogDestinationConfigLogDestinationType","description":"The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream."},"logType":{"$ref":"#/types/aws-native:networkfirewall:LoggingConfigurationLogDestinationConfigLogType","description":"The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.\n\n- `ALERT` - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the `StatefulRule` property.\n- `FLOW` - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.\n- `TLS` - Logs for events that are related to TLS inspection. For more information, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-configurations.html) in the *Network Firewall Developer Guide* ."}},"type":"object","required":["logDestination","logDestinationType","logType"]},"aws-native:networkfirewall:LoggingConfigurationLogDestinationConfigLogDestinationType":{"description":"The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.","type":"string","enum":[{"name":"S3","value":"S3"},{"name":"CloudWatchLogs","value":"CloudWatchLogs"},{"name":"KinesisDataFirehose","value":"KinesisDataFirehose"}]},"aws-native:networkfirewall:LoggingConfigurationLogDestinationConfigLogType":{"description":"The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.\n\n- `ALERT` - Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see the `StatefulRule` property.\n- `FLOW` - Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.\n- `TLS` - Logs for events that are related to TLS inspection. For more information, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-configurations.html) in the *Network Firewall Developer Guide* .","type":"string","enum":[{"name":"Alert","value":"ALERT"},{"name":"Flow","value":"FLOW"},{"name":"Tls","value":"TLS"}]},"aws-native:networkfirewall:RuleGroup":{"properties":{"referenceSets":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupReferenceSets","description":"The reference sets for the stateful rule group."},"ruleVariables":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupRuleVariables","description":"Settings that are available for use in the rules in the rule group. You can only use these for stateful rule groups."},"rulesSource":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupRulesSource","description":"The stateful rules or stateless rules for the rule group."},"statefulRuleOptions":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupStatefulRuleOptions","description":"Additional options governing how Network Firewall handles stateful rules. The policies where you use your stateful rule group must have stateful rule options settings that are compatible with these settings. Some limitations apply; for more information, see [Strict evaluation order](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-limitations-caveats.html) in the *AWS Network Firewall Developer Guide* ."}},"type":"object","required":["rulesSource"]},"aws-native:networkfirewall:RuleGroupActionDefinition":{"properties":{"publishMetricAction":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupPublishMetricAction","description":"Stateless inspection criteria that publishes the specified metrics to Amazon CloudWatch for the matching packet. This setting defines a CloudWatch dimension value to be published.\n\nYou can pair this custom action with any of the standard stateless rule actions. For example, you could pair this in a rule action with the standard action that forwards the packet for stateful inspection. Then, when a packet matches the rule, Network Firewall publishes metrics for the packet and forwards it."}},"type":"object"},"aws-native:networkfirewall:RuleGroupAddress":{"properties":{"addressDefinition":{"type":"string","description":"Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.\n\nExamples:\n\n- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .\n- To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .\n- To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .\n- To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .\n\nFor more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) ."}},"type":"object","required":["addressDefinition"]},"aws-native:networkfirewall:RuleGroupCustomAction":{"properties":{"actionDefinition":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupActionDefinition","description":"The custom action associated with the action name."},"actionName":{"type":"string","description":"The descriptive name of the custom action. You can't change the name of a custom action after you create it."}},"type":"object","required":["actionDefinition","actionName"]},"aws-native:networkfirewall:RuleGroupDimension":{"properties":{"value":{"type":"string","description":"The value to use in the custom metric dimension."}},"type":"object","required":["value"]},"aws-native:networkfirewall:RuleGroupGeneratedRulesType":{"type":"string","enum":[{"name":"Allowlist","value":"ALLOWLIST"},{"name":"Denylist","value":"DENYLIST"},{"name":"Alertlist","value":"ALERTLIST"},{"name":"Rejectlist","value":"REJECTLIST"}]},"aws-native:networkfirewall:RuleGroupHeader":{"properties":{"destination":{"type":"string","description":"The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .\n\nSpecify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.\n\nExamples:\n\n- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .\n- To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .\n- To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .\n- To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .\n\nFor more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) ."},"destinationPort":{"type":"string","description":"The destination port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` ."},"direction":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupHeaderDirection","description":"The direction of traffic flow to inspect. If set to `ANY` , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to `FORWARD` , the inspection only matches traffic going from the source to the destination."},"protocol":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupHeaderProtocol","description":"The protocol to inspect for. To specify all, you can use `IP` , because all traffic on AWS and on the internet is IP."},"source":{"type":"string","description":"The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify `ANY` .\n\nSpecify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.\n\nExamples:\n\n- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .\n- To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .\n- To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .\n- To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .\n\nFor more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) ."},"sourcePort":{"type":"string","description":"The source port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` ."}},"type":"object","required":["destination","destinationPort","direction","protocol","source","sourcePort"]},"aws-native:networkfirewall:RuleGroupHeaderDirection":{"description":"The direction of traffic flow to inspect. If set to `ANY` , the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to `FORWARD` , the inspection only matches traffic going from the source to the destination.","type":"string","enum":[{"name":"Forward","value":"FORWARD"},{"name":"Any","value":"ANY"}]},"aws-native:networkfirewall:RuleGroupHeaderProtocol":{"description":"The protocol to inspect for. To specify all, you can use `IP` , because all traffic on AWS and on the internet is IP.","type":"string","enum":[{"name":"Ip","value":"IP"},{"name":"Tcp","value":"TCP"},{"name":"Udp","value":"UDP"},{"name":"Icmp","value":"ICMP"},{"name":"Http","value":"HTTP"},{"name":"Ftp","value":"FTP"},{"name":"Tls","value":"TLS"},{"name":"Smb","value":"SMB"},{"name":"Dns","value":"DNS"},{"name":"Dcerpc","value":"DCERPC"},{"name":"Ssh","value":"SSH"},{"name":"Smtp","value":"SMTP"},{"name":"Imap","value":"IMAP"},{"name":"Msn","value":"MSN"},{"name":"Krb5","value":"KRB5"},{"name":"Ikev2","value":"IKEV2"},{"name":"Tftp","value":"TFTP"},{"name":"Ntp","value":"NTP"},{"name":"Dhcp","value":"DHCP"}]},"aws-native:networkfirewall:RuleGroupIpSet":{"properties":{"definition":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:networkfirewall:RuleGroupIpSetReference":{"properties":{"referenceArn":{"type":"string"}},"type":"object"},"aws-native:networkfirewall:RuleGroupMatchAttributes":{"properties":{"destinationPorts":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupPortRange"},"description":"The destination port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .\n\nThis setting is only used for protocols 6 (TCP) and 17 (UDP)."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupAddress"},"description":"The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address."},"protocols":{"type":"array","items":{"type":"integer"},"description":"The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol."},"sourcePorts":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupPortRange"},"description":"The source port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .\n\nIf not specified, this matches with any source port.\n\nThis setting is only used for protocols 6 (TCP) and 17 (UDP)."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupAddress"},"description":"The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address."},"tcpFlags":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupTcpFlagField"},"description":"The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP)."}},"type":"object"},"aws-native:networkfirewall:RuleGroupPortRange":{"properties":{"fromPort":{"type":"integer","description":"The lower limit of the port range. This must be less than or equal to the `ToPort` specification."},"toPort":{"type":"integer","description":"The upper limit of the port range. This must be greater than or equal to the `FromPort` specification."}},"type":"object","required":["fromPort","toPort"]},"aws-native:networkfirewall:RuleGroupPortSet":{"properties":{"definition":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:networkfirewall:RuleGroupPublishMetricAction":{"properties":{"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupDimension"}}},"type":"object","required":["dimensions"]},"aws-native:networkfirewall:RuleGroupReferenceSets":{"properties":{"ipSetReferences":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupIpSetReference"},"description":"The IP set references to use in the stateful rule group."}},"type":"object"},"aws-native:networkfirewall:RuleGroupRuleDefinition":{"properties":{"actions":{"type":"array","items":{"type":"string"},"description":"The actions to take on a packet that matches one of the stateless rule definition's match attributes. You must specify a standard action and you can add custom actions.\n\n\u003e Network Firewall only forwards a packet for stateful rule inspection if you specify `aws:forward_to_sfe` for a rule that the packet matches, or if the packet doesn't match any stateless rule and you specify `aws:forward_to_sfe` for the `StatelessDefaultActions` setting for the firewall policy. \n\nFor every rule, you must specify exactly one of the following standard actions.\n\n- *aws:pass* - Discontinues all inspection of the packet and permits it to go to its intended destination.\n- *aws:drop* - Discontinues all inspection of the packet and blocks it from going to its intended destination.\n- *aws:forward_to_sfe* - Discontinues stateless inspection of the packet and forwards it to the stateful rule engine for inspection.\n\nAdditionally, you can specify a custom action. To do this, you define a custom action by name and type, then provide the name you've assigned to the action in this `Actions` setting.\n\nTo provide more than one action in this setting, separate the settings with a comma. For example, if you have a publish metrics custom action that you've named `MyMetricsAction` , then you could specify the standard action `aws:pass` combined with the custom action using `[\"aws:pass\", \"MyMetricsAction\"]` ."},"matchAttributes":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupMatchAttributes","description":"Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags."}},"type":"object","required":["actions","matchAttributes"]},"aws-native:networkfirewall:RuleGroupRuleOption":{"properties":{"keyword":{"type":"string","description":"The Suricata rule option keywords. For Network Firewall , the keyword signature ID (sid) is required in the format `sid:112233` . The sid must be unique within the rule group. For information about Suricata rule option keywords, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) ."},"settings":{"type":"array","items":{"type":"string"},"description":"The Suricata rule option settings. Settings have zero or more values, and the number of possible settings and required settings depends on the keyword. The format for Settings is `number` . For information about Suricata rule option settings, see [Rule options](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-6.0.9/rules/intro.html#rule-options) ."}},"type":"object","required":["keyword"]},"aws-native:networkfirewall:RuleGroupRuleOrder":{"type":"string","enum":[{"name":"DefaultActionOrder","value":"DEFAULT_ACTION_ORDER"},{"name":"StrictOrder","value":"STRICT_ORDER"}]},"aws-native:networkfirewall:RuleGroupRuleVariables":{"properties":{"ipSets":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupIpSet"},"description":"A list of IP addresses and address ranges, in CIDR notation."},"portSets":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupPortSet"},"description":"A list of port ranges."}},"type":"object"},"aws-native:networkfirewall:RuleGroupRulesSource":{"properties":{"rulesSourceList":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupRulesSourceList","description":"Stateful inspection criteria for a domain list rule group."},"rulesString":{"type":"string","description":"Stateful inspection criteria, provided in Suricata compatible rules. Suricata is an open-source threat detection framework that includes a standard rule-based language for network traffic inspection.\n\nThese rules contain the inspection criteria and the action to take for traffic that matches the criteria, so this type of rule group doesn't have a separate action setting.\n\n\u003e You can't use the `priority` keyword if the `RuleOrder` option in StatefulRuleOptions is set to `STRICT_ORDER` ."},"statefulRules":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupStatefulRule"},"description":"An array of individual stateful rules inspection criteria to be used together in a stateful rule group. Use this option to specify simple Suricata rules with protocol, source and destination, ports, direction, and rule options. For information about the Suricata `Rules` format, see [Rules Format](https://docs.aws.amazon.com/https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html) ."},"statelessRulesAndCustomActions":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupStatelessRulesAndCustomActions","description":"Stateless inspection criteria to be used in a stateless rule group."}},"type":"object"},"aws-native:networkfirewall:RuleGroupRulesSourceList":{"properties":{"generatedRulesType":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupGeneratedRulesType","description":"Whether you want to apply allow, reject, alert, or drop behavior to the domains in your target list.\n\n\u003e When logging is enabled and you choose Alert, traffic that matches the domain specifications generates an alert in the firewall's logs. Then, traffic either passes, is rejected, or drops based on other rules in the firewall policy."},"targetTypes":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupTargetType"},"description":"The types of targets to inspect for. Valid values are `TLS_SNI` and `HTTP_HOST` ."},"targets":{"type":"array","items":{"type":"string"},"description":"The domains that you want to inspect for in your traffic flows. Valid domain specifications are the following:\n\n- Explicit names. For example, `abc.example.com` matches only the domain `abc.example.com` .\n- Names that use a domain wildcard, which you indicate with an initial ' `.` '. For example, `.example.com` matches `example.com` and matches all subdomains of `example.com` , such as `abc.example.com` and `www.example.com` ."}},"type":"object","required":["generatedRulesType","targetTypes","targets"]},"aws-native:networkfirewall:RuleGroupStatefulRule":{"properties":{"action":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupStatefulRuleAction","description":"Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.\n\nThe actions for a stateful rule are defined as follows:\n\n- *PASS* - Permits the packets to go to the intended destination.\n- *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.\n- *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic.\n- *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.\n\nYou can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` .\n- *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the firewall logging configuration.\n\n`REJECT` isn't currently available for use with IMAP and FTP protocols."},"header":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupHeader","description":"The stateful inspection criteria for this rule, used to inspect traffic flows."},"ruleOptions":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupRuleOption"},"description":"Additional settings for a stateful rule, provided as keywords and settings."}},"type":"object","required":["action","header","ruleOptions"]},"aws-native:networkfirewall:RuleGroupStatefulRuleAction":{"description":"Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.\n\nThe actions for a stateful rule are defined as follows:\n\n- *PASS* - Permits the packets to go to the intended destination.\n- *DROP* - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.\n- *REJECT* - Drops traffic that matches the conditions of the stateful rule and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. `REJECT` is available only for TCP traffic.\n- *ALERT* - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the firewall logging configuration.\n\nYou can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with `ALERT` action, verify in the logs that the rule is filtering as you want, then change the action to `DROP` .\n- *REJECT* - Drops TCP traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and a `RST` bit contained in the TCP header flags. Also sends an alert log mesage if alert logging is configured in the firewall logging configuration.\n\n`REJECT` isn't currently available for use with IMAP and FTP protocols.","type":"string","enum":[{"name":"Pass","value":"PASS"},{"name":"Drop","value":"DROP"},{"name":"Alert","value":"ALERT"},{"name":"Reject","value":"REJECT"}]},"aws-native:networkfirewall:RuleGroupStatefulRuleOptions":{"properties":{"ruleOrder":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupRuleOrder","description":"Indicates how to manage the order of the rule evaluation for the rule group. `DEFAULT_ACTION_ORDER` is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see [Evaluation order for stateful rules](https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-rule-evaluation-order.html) in the *AWS Network Firewall Developer Guide* ."}},"type":"object"},"aws-native:networkfirewall:RuleGroupStatelessRule":{"properties":{"priority":{"type":"integer","description":"Indicates the order in which to run this rule relative to all of the rules that are defined for a stateless rule group. Network Firewall evaluates the rules in a rule group starting with the lowest priority setting. You must ensure that the priority settings are unique for the rule group.\n\nEach stateless rule group uses exactly one `StatelessRulesAndCustomActions` object, and each `StatelessRulesAndCustomActions` contains exactly one `StatelessRules` object. To ensure unique priority settings for your rule groups, set unique priorities for the stateless rules that you define inside any single `StatelessRules` object.\n\nYou can change the priority settings of your rules at any time. To make it easier to insert rules later, number them so there's a wide range in between, for example use 100, 200, and so on."},"ruleDefinition":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupRuleDefinition","description":"Defines the stateless 5-tuple packet inspection criteria and the action to take on a packet that matches the criteria."}},"type":"object","required":["priority","ruleDefinition"]},"aws-native:networkfirewall:RuleGroupStatelessRulesAndCustomActions":{"properties":{"customActions":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupCustomAction"},"description":"Defines an array of individual custom action definitions that are available for use by the stateless rules in this `StatelessRulesAndCustomActions` specification. You name each custom action that you define, and then you can use it by name in your stateless rule definition `Actions` specification."},"statelessRules":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupStatelessRule"},"description":"Defines the set of stateless rules for use in a stateless rule group."}},"type":"object","required":["statelessRules"]},"aws-native:networkfirewall:RuleGroupSummaryRuleOption":{"type":"string","enum":[{"name":"Sid","value":"SID"},{"name":"Msg","value":"MSG"},{"name":"Metadata","value":"METADATA"}]},"aws-native:networkfirewall:RuleGroupTag":{"properties":{"key":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:networkfirewall:RuleGroupTargetType":{"type":"string","enum":[{"name":"TlsSni","value":"TLS_SNI"},{"name":"HttpHost","value":"HTTP_HOST"}]},"aws-native:networkfirewall:RuleGroupTcpFlag":{"type":"string","enum":[{"name":"Fin","value":"FIN"},{"name":"Syn","value":"SYN"},{"name":"Rst","value":"RST"},{"name":"Psh","value":"PSH"},{"name":"Ack","value":"ACK"},{"name":"Urg","value":"URG"},{"name":"Ece","value":"ECE"},{"name":"Cwr","value":"CWR"}]},"aws-native:networkfirewall:RuleGroupTcpFlagField":{"properties":{"flags":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupTcpFlag"},"description":"Used in conjunction with the `Masks` setting to define the flags that must be set and flags that must not be set in order for the packet to match. This setting can only specify values that are also specified in the `Masks` setting.\n\nFor the flags that are specified in the masks setting, the following must be true for the packet to match:\n\n- The ones that are set in this flags setting must be set in the packet.\n- The ones that are not set in this flags setting must also not be set in the packet."},"masks":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupTcpFlag"},"description":"The set of flags to consider in the inspection. To inspect all flags in the valid values list, leave this with no setting."}},"type":"object","required":["flags"]},"aws-native:networkfirewall:RuleGroupTypeEnum":{"description":"Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains\nstateless rules. If it is stateful, it contains stateful rules.","type":"string","enum":[{"name":"Stateless","value":"STATELESS"},{"name":"Stateful","value":"STATEFUL"}]},"aws-native:networkfirewall:SummaryConfigurationProperties":{"description":"A complex type containing the currently selected rule option fields that will be displayed for rule summarization returned by `DescribeRuleGroupSummary` .\n\n- The `RuleOptions` specified in `SummaryConfiguration`\n- Rule metadata organization preferences","properties":{"ruleOptions":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupSummaryRuleOption"},"description":"Specifies the selected rule options returned by `DescribeRuleGroupSummary` ."}},"type":"object"},"aws-native:networkfirewall:TlsInspectionConfigurationAddress":{"properties":{"addressDefinition":{"type":"string","description":"Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6.\n\nExamples:\n\n- To configure Network Firewall to inspect for the IP address 192.0.2.44, specify `192.0.2.44/32` .\n- To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify `192.0.2.0/24` .\n- To configure Network Firewall to inspect for the IP address 1111:0000:0000:0000:0000:0000:0000:0111, specify `1111:0000:0000:0000:0000:0000:0000:0111/128` .\n- To configure Network Firewall to inspect for IP addresses from 1111:0000:0000:0000:0000:0000:0000:0000 to 1111:0000:0000:0000:ffff:ffff:ffff:ffff, specify `1111:0000:0000:0000:0000:0000:0000:0000/64` .\n\nFor more information about CIDR notation, see the Wikipedia entry [Classless Inter-Domain Routing](https://docs.aws.amazon.com/https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) ."}},"type":"object","required":["addressDefinition"]},"aws-native:networkfirewall:TlsInspectionConfigurationPortRange":{"properties":{"fromPort":{"type":"integer","description":"The lower limit of the port range. This must be less than or equal to the `ToPort` specification."},"toPort":{"type":"integer","description":"The upper limit of the port range. This must be greater than or equal to the `FromPort` specification."}},"type":"object","required":["fromPort","toPort"]},"aws-native:networkfirewall:TlsInspectionConfigurationRevokedStatusAction":{"type":"string","enum":[{"name":"Pass","value":"PASS"},{"name":"Drop","value":"DROP"},{"name":"Reject","value":"REJECT"}]},"aws-native:networkfirewall:TlsInspectionConfigurationServerCertificate":{"properties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Certificate Manager SSL/TLS server certificate that's used for inbound SSL/TLS inspection."}},"type":"object"},"aws-native:networkfirewall:TlsInspectionConfigurationServerCertificateConfiguration":{"properties":{"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the imported certificate authority (CA) certificate within Certificate Manager (ACM) to use for outbound SSL/TLS inspection.\n\nThe following limitations apply:\n\n- You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM.\n- You can't use certificates issued by Private Certificate Authority .\n\nFor more information about configuring certificates for outbound inspection, see [Using SSL/TLS certificates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .\n\nFor information about working with certificates in ACM, see [Importing certificates](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *Certificate Manager User Guide* ."},"checkCertificateRevocationStatus":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusProperties","description":"When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-servercertificateconfiguration.html) ."},"scopes":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationServerCertificateScope"},"description":"A list of scopes."},"serverCertificates":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationServerCertificate"},"description":"The list of server certificates to use for inbound SSL/TLS inspection."}},"type":"object"},"aws-native:networkfirewall:TlsInspectionConfigurationServerCertificateConfigurationCheckCertificateRevocationStatusProperties":{"description":"When enabled, Network Firewall checks if the server certificate presented by the server in the SSL/TLS connection has a revoked or unkown status. If the certificate has an unknown or revoked status, you must specify the actions that Network Firewall takes on outbound traffic. To check the certificate revocation status, you must also specify a `CertificateAuthorityArn` in [ServerCertificateConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-networkfirewall-servercertificateconfiguration.html) .","properties":{"revokedStatusAction":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationRevokedStatusAction"},"unknownStatusAction":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationUnknownStatusAction"}},"type":"object"},"aws-native:networkfirewall:TlsInspectionConfigurationServerCertificateScope":{"properties":{"destinationPorts":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationPortRange"},"description":"The destination ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any destination port.\n\nYou can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` ."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationAddress"},"description":"The destination IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this\nmatches with any destination address."},"protocols":{"type":"array","items":{"type":"integer"},"description":"The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol.\n\nNetwork Firewall currently supports only TCP."},"sourcePorts":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationPortRange"},"description":"The source ports to decrypt for inspection, in Transmission Control Protocol (TCP) format. If not specified, this matches with any source port.\n\nYou can specify individual ports, for example `1994` , and you can specify port ranges, such as `1990:1994` ."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationAddress"},"description":"The source IP addresses and address ranges to decrypt for inspection, in CIDR notation. If not specified, this\nmatches with any source address."}},"type":"object"},"aws-native:networkfirewall:TlsInspectionConfigurationTag":{"properties":{"key":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:networkfirewall:TlsInspectionConfigurationTlsInspectionConfiguration":{"properties":{"serverCertificateConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationServerCertificateConfiguration"},"description":"Lists the server certificate configurations that are associated with the TLS configuration."}},"type":"object"},"aws-native:networkfirewall:TlsInspectionConfigurationUnknownStatusAction":{"type":"string","enum":[{"name":"Pass","value":"PASS"},{"name":"Drop","value":"DROP"},{"name":"Reject","value":"REJECT"}]},"aws-native:networkfirewall:VpcEndpointAssociationSubnetMapping":{"properties":{"ipAddressType":{"type":"string","description":"A IPAddressType"},"subnetId":{"type":"string","description":"A SubnetId."}},"type":"object","required":["subnetId"]},"aws-native:networkfirewall:VpcEndpointAssociationTag":{"properties":{"key":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"The part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:ConnectAttachmentOptions":{"description":"Connect attachment options for protocol","properties":{"protocol":{"type":"string","description":"Tunnel protocol for connect attachment"}},"type":"object"},"aws-native:networkmanager:ConnectAttachmentProposedNetworkFunctionGroupChange":{"description":"The attachment to move from one network function group to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentTag"},"description":"The key-value tags that changed for the network function group."}},"type":"object"},"aws-native:networkmanager:ConnectAttachmentProposedSegmentChange":{"description":"The attachment to move from one segment to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"segmentName":{"type":"string","description":"The name of the segment to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentTag"},"description":"The list of key-value tags that changed for the segment."}},"type":"object"},"aws-native:networkmanager:ConnectAttachmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:ConnectPeerBgpConfiguration":{"description":"Bgp configuration for connect peer","properties":{"coreNetworkAddress":{"type":"string","description":"The address of a core network."},"coreNetworkAsn":{"type":"number","description":"The ASN of the Coret Network."},"peerAddress":{"type":"string","description":"The address of a core network Connect peer."},"peerAsn":{"type":"number","description":"The ASN of the Connect peer."}},"type":"object"},"aws-native:networkmanager:ConnectPeerBgpOptions":{"description":"Bgp options","properties":{"peerAsn":{"type":"number","description":"The Peer ASN of the BGP."}},"type":"object"},"aws-native:networkmanager:ConnectPeerConfiguration":{"properties":{"bgpConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:ConnectPeerBgpConfiguration"},"description":"The Connect peer BGP configurations."},"coreNetworkAddress":{"type":"string","description":"The IP address of a core network."},"insideCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The inside IP addresses used for a Connect peer configuration."},"peerAddress":{"type":"string","description":"The IP address of the Connect peer."},"protocol":{"type":"string","description":"The protocol used for a Connect peer configuration."}},"type":"object"},"aws-native:networkmanager:ConnectPeerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:CoreNetworkEdge":{"properties":{"asn":{"type":"number","description":"The ASN of a core network edge."},"edgeLocation":{"type":"string","description":"The Region where a core network edge is located."},"insideCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The inside IP addresses used for core network edges."}},"type":"object"},"aws-native:networkmanager:CoreNetworkNetworkFunctionGroup":{"properties":{"edgeLocations":{"type":"array","items":{"type":"string"},"description":"The core network edge locations."},"name":{"type":"string","description":"Name of network function group"},"segments":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkNetworkFunctionGroupSegmentsProperties","description":"The segments associated with the network function group."}},"type":"object"},"aws-native:networkmanager:CoreNetworkNetworkFunctionGroupSegmentsProperties":{"description":"The segments associated with the network function group.","properties":{"sendTo":{"type":"array","items":{"type":"string"}},"sendVia":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:networkmanager:CoreNetworkSegment":{"properties":{"edgeLocations":{"type":"array","items":{"type":"string"},"description":"The Regions where the edges are located."},"name":{"type":"string","description":"Name of segment"},"sharedSegments":{"type":"array","items":{"type":"string"},"description":"The shared segments of a core network."}},"type":"object"},"aws-native:networkmanager:CoreNetworkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:DeviceAwsLocation":{"description":"The Amazon Web Services location of the device, if applicable.","properties":{"subnetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the subnet that the device is located in."},"zone":{"type":"string","description":"The Zone that the device is located in. Specify the ID of an Availability Zone, Local Zone, Wavelength Zone, or an Outpost."}},"type":"object"},"aws-native:networkmanager:DeviceLocation":{"description":"The site location.","properties":{"address":{"type":"string","description":"The physical address."},"latitude":{"type":"string","description":"The latitude."},"longitude":{"type":"string","description":"The longitude."}},"type":"object"},"aws-native:networkmanager:DeviceTag":{"description":"A key-value pair to associate with a device resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:DirectConnectGatewayAttachmentProposedNetworkFunctionGroupChange":{"description":"The attachment to move from one network function group to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentTag"},"description":"The key-value tags that changed for the network function group."}},"type":"object"},"aws-native:networkmanager:DirectConnectGatewayAttachmentProposedSegmentChange":{"description":"The attachment to move from one segment to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"segmentName":{"type":"string","description":"The name of the segment to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentTag"},"description":"The key-value tags that changed for the segment."}},"type":"object"},"aws-native:networkmanager:DirectConnectGatewayAttachmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:GlobalNetworkTag":{"description":"A key-value pair to associate with a global network resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:LinkBandwidth":{"description":"The bandwidth for the link.","properties":{"downloadSpeed":{"type":"integer","description":"Download speed in Mbps."},"uploadSpeed":{"type":"integer","description":"Upload speed in Mbps."}},"type":"object"},"aws-native:networkmanager:LinkTag":{"description":"A key-value pair to associate with a link resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:SiteLocation":{"description":"The location of the site","properties":{"address":{"type":"string","description":"The physical address."},"latitude":{"type":"string","description":"The latitude."},"longitude":{"type":"string","description":"The longitude."}},"type":"object"},"aws-native:networkmanager:SiteTag":{"description":"A key-value pair to associate with a site resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:SiteToSiteVpnAttachmentProposedNetworkFunctionGroupChange":{"description":"The attachment to move from one network function group to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentTag"},"description":"The key-value tags that changed for the network function group."}},"type":"object"},"aws-native:networkmanager:SiteToSiteVpnAttachmentProposedSegmentChange":{"description":"The attachment to move from one segment to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"segmentName":{"type":"string","description":"The name of the segment to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentTag"},"description":"The key-value tags that changed for the segment."}},"type":"object"},"aws-native:networkmanager:SiteToSiteVpnAttachmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:TransitGatewayPeeringTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedNetworkFunctionGroupChange":{"description":"The attachment to move from one network function group to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentTag"},"description":"The key-value tags that changed for the network function group."}},"type":"object"},"aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedSegmentChange":{"description":"The attachment to move from one segment to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"segmentName":{"type":"string","description":"The name of the segment to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentTag"},"description":"The key-value tags that changed for the segment."}},"type":"object"},"aws-native:networkmanager:TransitGatewayRouteTableAttachmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:VpcAttachmentProposedNetworkFunctionGroupChange":{"description":"The attachment to move from one network function group to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentTag"},"description":"The key-value tags that changed for the network function group."}},"type":"object"},"aws-native:networkmanager:VpcAttachmentProposedSegmentChange":{"description":"The attachment to move from one segment to another.","properties":{"attachmentPolicyRuleNumber":{"type":"integer","description":"The rule number in the policy document that applies to this change."},"segmentName":{"type":"string","description":"The name of the segment to change."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentTag"},"description":"The key-value tags that changed for the segment."}},"type":"object"},"aws-native:networkmanager:VpcAttachmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:networkmanager:VpcAttachmentVpcOptions":{"description":"Vpc options of the attachment.","properties":{"applianceModeSupport":{"type":"boolean","description":"Indicates whether to enable ApplianceModeSupport Support for Vpc Attachment. Valid Values: true | false"},"dnsSupport":{"type":"boolean","description":"Indicates whether to enable private DNS Support for Vpc Attachment. Valid Values: true | false"},"ipv6Support":{"type":"boolean","description":"Indicates whether to enable Ipv6 Support for Vpc Attachment. Valid Values: enable | disable"},"securityGroupReferencingSupport":{"type":"boolean","description":"Indicates whether to enable Security Group Referencing Support for Vpc Attachment. Valid Values: true | false"}},"type":"object"},"aws-native:nimblestudio:LaunchProfileStreamConfiguration":{"properties":{"automaticTerminationMode":{"type":"string"},"clipboardMode":{"type":"string"},"ec2InstanceTypes":{"type":"array","items":{"type":"string"}},"maxSessionLengthInMinutes":{"type":"number"},"maxStoppedSessionLengthInMinutes":{"type":"number"},"sessionBackup":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileStreamConfigurationSessionBackup"},"sessionPersistenceMode":{"type":"string"},"sessionStorage":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileStreamConfigurationSessionStorage"},"streamingImageIds":{"type":"array","items":{"type":"string"}},"volumeConfiguration":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileVolumeConfiguration"}},"type":"object","required":["clipboardMode","ec2InstanceTypes","streamingImageIds"]},"aws-native:nimblestudio:LaunchProfileStreamConfigurationSessionBackup":{"properties":{"maxBackupsToRetain":{"type":"number"},"mode":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:LaunchProfileStreamConfigurationSessionStorage":{"properties":{"mode":{"type":"array","items":{"type":"string"}},"root":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileStreamingSessionStorageRoot"}},"type":"object","required":["mode"]},"aws-native:nimblestudio:LaunchProfileStreamingSessionStorageRoot":{"properties":{"linux":{"type":"string"},"windows":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:LaunchProfileVolumeConfiguration":{"properties":{"iops":{"type":"number"},"size":{"type":"number"},"throughput":{"type":"number"}},"type":"object"},"aws-native:nimblestudio:StreamingImageEncryptionConfiguration":{"properties":{"keyArn":{"type":"string"},"keyType":{"type":"string"}},"type":"object","required":["keyType"]},"aws-native:nimblestudio:StudioComponentActiveDirectoryComputerAttribute":{"properties":{"name":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioComponentActiveDirectoryConfiguration":{"properties":{"computerAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentActiveDirectoryComputerAttribute"}},"directoryId":{"type":"string"},"organizationalUnitDistinguishedName":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioComponentComputeFarmConfiguration":{"properties":{"activeDirectoryUser":{"type":"string"},"endpoint":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioComponentConfiguration":{"properties":{"activeDirectoryConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentActiveDirectoryConfiguration"},"computeFarmConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentComputeFarmConfiguration"},"licenseServiceConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentLicenseServiceConfiguration"},"sharedFileSystemConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentSharedFileSystemConfiguration"}},"type":"object"},"aws-native:nimblestudio:StudioComponentInitializationScript":{"properties":{"launchProfileProtocolVersion":{"type":"string"},"platform":{"type":"string"},"runContext":{"type":"string"},"script":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioComponentLicenseServiceConfiguration":{"properties":{"endpoint":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioComponentScriptParameterKeyValue":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioComponentSharedFileSystemConfiguration":{"properties":{"endpoint":{"type":"string"},"fileSystemId":{"type":"string"},"linuxMountPoint":{"type":"string"},"shareName":{"type":"string"},"windowsMountDrive":{"type":"string"}},"type":"object"},"aws-native:nimblestudio:StudioEncryptionConfiguration":{"properties":{"keyArn":{"type":"string"},"keyType":{"type":"string"}},"type":"object","required":["keyType"]},"aws-native:oam:LinkConfiguration":{"properties":{"logGroupConfiguration":{"$ref":"#/types/aws-native:oam:LinkFilter","description":"Use this structure to filter which log groups are to share log events from this source account to the monitoring account."},"metricConfiguration":{"$ref":"#/types/aws-native:oam:LinkFilter","description":"Use this structure to filter which metric namespaces are to be shared from the source account to the monitoring account."}},"type":"object"},"aws-native:oam:LinkFilter":{"properties":{"filter":{"type":"string","description":"When used in `MetricConfiguration` this field specifies which metric namespaces are to be shared with the monitoring account\n\nWhen used in `LogGroupConfiguration` this field specifies which log groups are to share their log events with the monitoring account. Use the term `LogGroupName` and one or more of the following operands.\n\nUse single quotation marks (') around log group names and metric namespaces.\n\nThe matching of log group names and metric namespaces is case sensitive. Each filter has a limit of five conditional operands. Conditional operands are `AND` and `OR` .\n\n- `=` and `!=`\n- `AND`\n- `OR`\n- `LIKE` and `NOT LIKE` . These can be used only as prefix searches. Include a `%` at the end of the string that you want to search for and include.\n- `IN` and `NOT IN` , using parentheses `( )`\n\nExamples:\n\n- `Namespace NOT LIKE 'AWS/%'` includes only namespaces that don't start with `AWS/` , such as custom namespaces.\n- `Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces.\n- `Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'` includes only the EC2 namespace and your custom namespaces.\n- `LogGroupName IN ('This-Log-Group', 'Other-Log-Group')` includes only the log groups with names `This-Log-Group` and `Other-Log-Group` .\n- `LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')` includes all log groups except the log groups with names `Private-Log-Group` and `Private-Log-Group-2` .\n- `LogGroupName LIKE 'aws/lambda/%' OR LogGroupName LIKE 'AWSLogs%'` includes all log groups that have names that start with `aws/lambda/` or `AWSLogs` .\n\n\u003e If you are updating a link that uses filters, you can specify `*` as the only value for the `filter` parameter to delete the filter and share all log groups with the monitoring account."}},"type":"object","required":["filter"]},"aws-native:oam:LinkResourceType":{"type":"string","enum":[{"name":"AwsCloudWatchMetric","value":"AWS::CloudWatch::Metric"},{"name":"AwsLogsLogGroup","value":"AWS::Logs::LogGroup"},{"name":"AwsxRayTrace","value":"AWS::XRay::Trace"},{"name":"AwsApplicationInsightsApplication","value":"AWS::ApplicationInsights::Application"},{"name":"AwsInternetMonitorMonitor","value":"AWS::InternetMonitor::Monitor"},{"name":"AwsApplicationSignalsService","value":"AWS::ApplicationSignals::Service"},{"name":"AwsApplicationSignalsServiceLevelObjective","value":"AWS::ApplicationSignals::ServiceLevelObjective"}]},"aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRule":{"properties":{"destination":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRuleDestination","description":"Configuration determining where the telemetry data should be centralized, backed up, as well as encryption configuration for the primary and backup destinations."},"source":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRuleSource","description":"Configuration determining the source of the telemetry data to be centralized."}},"type":"object","required":["destination","source"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRuleDestination":{"properties":{"account":{"type":"string","description":"The destination account (within the organization) to which the telemetry data should be centralized."},"destinationLogsConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleDestinationLogsConfiguration","description":"Log specific configuration for centralization destination log groups."},"region":{"type":"string","description":"The primary destination region to which telemetry data should be centralized."}},"type":"object","required":["region"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRuleSource":{"properties":{"regions":{"type":"array","items":{"type":"string"},"description":"The list of source regions from which telemetry data should be centralized."},"scope":{"type":"string","description":"The organizational scope from which telemetry data should be centralized, specified using organization id, accounts or organizational unit ids."},"sourceLogsConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleSourceLogsConfiguration","description":"Log specific configuration for centralization source log groups."}},"type":"object","required":["regions"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleDestinationLogsConfiguration":{"properties":{"backupConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleLogsBackupConfiguration","description":"Configuration defining the backup region and an optional KMS key for the backup destination."},"logGroupNameConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleLogGroupNameConfiguration"},"logsEncryptionConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleLogsEncryptionConfiguration","description":"The encryption configuration for centralization destination log groups."}},"type":"object"},"aws-native:observabilityadmin:OrganizationCentralizationRuleLogGroupNameConfiguration":{"properties":{"logGroupNamePattern":{"type":"string"}},"type":"object","required":["logGroupNamePattern"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleLogsBackupConfiguration":{"properties":{"kmsKeyArn":{"type":"string","description":"KMS Key ARN belonging to the primary destination account and backup region, to encrypt newly created central log groups in the backup destination."},"region":{"type":"string","description":"Logs specific backup destination region within the primary destination account to which log data should be centralized."}},"type":"object","required":["region"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleLogsEncryptionConfiguration":{"properties":{"encryptionConflictResolutionStrategy":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleLogsEncryptionConfigurationEncryptionConflictResolutionStrategy","description":"Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group."},"encryptionStrategy":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleLogsEncryptionConfigurationEncryptionStrategy","description":"Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups."},"kmsKeyArn":{"type":"string","description":"KMS Key ARN belonging to the primary destination account and region, to encrypt newly created central log groups in the primary destination."}},"type":"object","required":["encryptionStrategy"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleLogsEncryptionConfigurationEncryptionConflictResolutionStrategy":{"description":"Conflict resolution strategy for centralization if the encryption strategy is set to CUSTOMER_MANAGED and the destination log group is encrypted with an AWS_OWNED KMS Key. ALLOW lets centralization go through while SKIP prevents centralization into the destination log group.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Skip","value":"SKIP"}]},"aws-native:observabilityadmin:OrganizationCentralizationRuleLogsEncryptionConfigurationEncryptionStrategy":{"description":"Configuration that determines the encryption strategy of the destination log groups. CUSTOMER_MANAGED uses the configured KmsKeyArn to encrypt newly created destination log groups.","type":"string","enum":[{"name":"CustomerManaged","value":"CUSTOMER_MANAGED"},{"name":"AwsOwned","value":"AWS_OWNED"}]},"aws-native:observabilityadmin:OrganizationCentralizationRuleSourceLogsConfiguration":{"properties":{"encryptedLogGroupStrategy":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleSourceLogsConfigurationEncryptedLogGroupStrategy","description":"A strategy determining whether to centralize source log groups that are encrypted with customer managed KMS keys (CMK). ALLOW will consider CMK encrypted source log groups for centralization while SKIP will skip CMK encrypted source log groups from centralization."},"logGroupSelectionCriteria":{"type":"string","description":"The selection criteria that specifies which source log groups to centralize. The selection criteria uses the same format as OAM link filters."}},"type":"object","required":["encryptedLogGroupStrategy","logGroupSelectionCriteria"]},"aws-native:observabilityadmin:OrganizationCentralizationRuleSourceLogsConfigurationEncryptedLogGroupStrategy":{"description":"A strategy determining whether to centralize source log groups that are encrypted with customer managed KMS keys (CMK). ALLOW will consider CMK encrypted source log groups for centralization while SKIP will skip CMK encrypted source log groups from centralization.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Skip","value":"SKIP"}]},"aws-native:observabilityadmin:OrganizationCentralizationRuleTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:observabilityadmin:OrganizationTelemetryRuleAction":{"description":"The enumerated action to take.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Block","value":"BLOCK"},{"name":"Count","value":"COUNT"},{"name":"Captcha","value":"CAPTCHA"},{"name":"Challenge","value":"CHALLENGE"},{"name":"ExcludedAsCount","value":"EXCLUDED_AS_COUNT"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleActionCondition":{"description":"The condition of the action desired in the filter.","properties":{"action":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleAction"}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleAdvancedEventSelector":{"description":"An advanced event selector that includes optional name and field selectors","properties":{"fieldSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleAdvancedFieldSelector"},"description":"Contains all selector statements in an advanced event selector."},"name":{"type":"string","description":"An optional descriptive name for the advanced event selector"}},"type":"object","required":["fieldSelectors"]},"aws-native:observabilityadmin:OrganizationTelemetryRuleAdvancedFieldSelector":{"description":"A single selector statement in an advanced event selector.","properties":{"endsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the last few characters of the event record field specified as the value of Field."},"equals":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the exact value of the event record field specified as the value of Field."},"field":{"type":"string","description":"A field in a CloudTrail event record on which to filter events to be logged"},"notEndsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the last few characters of the event record field specified as the value of Field."},"notEquals":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the exact value of the event record field specified as the value of Field."},"notStartsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the first few characters of the event record field specified as the value of Field."},"startsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the first few characters of the event record field specified as the value of Field."}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleCloudtrailParameters":{"description":"Telemetry parameters for Cloudtrail","properties":{"advancedEventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleAdvancedEventSelector"},"description":"Create fine-grained selectors for AWS CloudTrail management and data."}},"type":"object","required":["advancedEventSelectors"]},"aws-native:observabilityadmin:OrganizationTelemetryRuleCondition":{"description":"A condition for a filter.","properties":{"actionCondition":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleActionCondition"},"labelNameCondition":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleLabelNameCondition"}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleDestinationType":{"description":"Type of telemetry destination","type":"string","enum":[{"name":"CloudWatchLogs","value":"cloud-watch-logs"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleElbLoadBalancerLoggingParameters":{"description":"Telemetry parameters for ELB/NLB Load Balancer Logs","properties":{"fieldDelimiter":{"type":"string","description":"A delimiter to delineate log fields"},"outputFormat":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleElbLoadBalancerLoggingParametersOutputFormat","description":"The format for ELB access log entries (plain text or JSON format)."}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleElbLoadBalancerLoggingParametersOutputFormat":{"description":"The format for ELB access log entries (plain text or JSON format).","type":"string","enum":[{"name":"Plain","value":"plain"},{"name":"Json","value":"json"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleFieldToMatch":{"description":"The field that we want to match this rule to.","properties":{"method":{"type":"string","description":"The method with which to match this rule."},"queryString":{"type":"string","description":"The query string to find the resource to match this field to."},"singleHeader":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleSingleHeader"},"uriPath":{"type":"string","description":"This is the URI path to match this rule to."}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleFilter":{"description":"A filter to be applied","properties":{"behavior":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleFilterBehavior"},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleCondition"}},"requirement":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleFilterRequirement"}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleFilterBehavior":{"description":"The behavior required of the filter.","type":"string","enum":[{"name":"Keep","value":"KEEP"},{"name":"Drop","value":"DROP"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleFilterRequirement":{"description":"The requirement portion of the filter.","type":"string","enum":[{"name":"MeetsAll","value":"MEETS_ALL"},{"name":"MeetsAny","value":"MEETS_ANY"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleLabelNameCondition":{"description":"The label name of the condition.","properties":{"labelName":{"type":"string","description":"The label name of the condition."}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleLoggingFilter":{"description":"Default handling for logs that don't match any of the specified filtering conditions.","properties":{"defaultBehavior":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleFilterBehavior","description":"The default action (KEEP or DROP) for log records that don't match any filter conditions."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleFilter"},"description":"A list of filter conditions that determine log record handling behavior."}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleResourceType":{"description":"Resource Type associated with the Organization Telemetry Rule","type":"string","enum":[{"name":"Awsec2vpc","value":"AWS::EC2::VPC"},{"name":"AwswaFv2WebAcl","value":"AWS::WAFv2::WebACL"},{"name":"AwsCloudTrail","value":"AWS::CloudTrail"},{"name":"AwseksCluster","value":"AWS::EKS::Cluster"},{"name":"AwsElasticLoadBalancingV2LoadBalancer","value":"AWS::ElasticLoadBalancingV2::LoadBalancer"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleSingleHeader":{"description":"Header for the field to match.","properties":{"name":{"type":"string","description":"The name of the header"}},"type":"object","required":["name"]},"aws-native:observabilityadmin:OrganizationTelemetryRuleTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryDestinationConfiguration":{"description":"The destination configuration for telemetry data","properties":{"cloudtrailParameters":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleCloudtrailParameters","description":"Configuration parameters specific to AWS CloudTrail when CloudTrail is the source type."},"destinationPattern":{"type":"string","description":"The pattern used to generate the destination path or name, supporting macros like \u003cresourceId\u003e and \u003caccountId\u003e."},"destinationType":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleDestinationType","description":"The type of destination for the telemetry data (e.g., \"Amazon CloudWatch Logs\", \"S3\")."},"elbLoadBalancerLoggingParameters":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleElbLoadBalancerLoggingParameters","description":"Configuration parameters specific to ELB load balancer logging when ELB is the resource type."},"retentionInDays":{"type":"integer","description":"The number of days to retain the telemetry data in the destination."},"vpcFlowLogParameters":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleVpcFlowLogParameters","description":"Configuration parameters specific to VPC Flow Logs when VPC is the resource type."},"wafLoggingParameters":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleWafLoggingParameters","description":"Configuration parameters specific to WAF logging when WAF is the resource type."}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryRule":{"description":"The telemetry rule","properties":{"destinationConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryDestinationConfiguration","description":"Configuration specifying where and how the telemetry data should be delivered."},"resourceType":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleResourceType","description":"The type of AWS resource to configure telemetry for (e.g., \"AWS::EC2::VPC\", \"AWS::EKS::Cluster\", \"AWS::WAFv2::WebACL\")."},"scope":{"type":"string","description":"The organizational scope to which the rule applies, specified using accounts or organizational units."},"selectionCriteria":{"type":"string","description":"Criteria for selecting which resources the rule applies to, such as resource tags."},"telemetrySourceTypes":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetrySourceType"},"description":"The specific telemetry source types to configure for the resource, such as VPC_FLOW_LOGS or EKS_AUDIT_LOGS. TelemetrySourceTypes must be correlated with the specific resource type."},"telemetryType":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryType","description":"The type of telemetry to collect (Logs, Metrics, or Traces)."}},"type":"object","required":["resourceType","telemetryType"]},"aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetrySourceType":{"description":"The telemetry source type that goes into the array.","type":"string","enum":[{"name":"VpcFlowLogs","value":"VPC_FLOW_LOGS"},{"name":"Route53ResolverQueryLogs","value":"ROUTE53_RESOLVER_QUERY_LOGS"},{"name":"EksAuditLogs","value":"EKS_AUDIT_LOGS"},{"name":"EksAuthenticatorLogs","value":"EKS_AUTHENTICATOR_LOGS"},{"name":"EksControllerManagerLogs","value":"EKS_CONTROLLER_MANAGER_LOGS"},{"name":"EksSchedulerLogs","value":"EKS_SCHEDULER_LOGS"},{"name":"EksApiLogs","value":"EKS_API_LOGS"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryType":{"description":"Telemetry Type associated with the Organization Telemetry Rule","type":"string","enum":[{"name":"Logs","value":"Logs"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleVpcFlowLogParameters":{"description":"Telemetry parameters for VPC Flow logs","properties":{"logFormat":{"type":"string","description":"The fields to include in the flow log record. If you omit this parameter, the flow log is created using the default format."},"maxAggregationInterval":{"type":"integer","description":"The maximum interval of time, in seconds, during which a flow of packets is captured and aggregated into a flow log record. Default is 600s."},"trafficType":{"type":"string","description":"The type of traffic captured for the flow log. Default is ALL"}},"type":"object"},"aws-native:observabilityadmin:OrganizationTelemetryRuleWafLogType":{"description":"The type of logs to generate for WAF.","type":"string","enum":[{"name":"WafLogs","value":"WAF_LOGS"}]},"aws-native:observabilityadmin:OrganizationTelemetryRuleWafLoggingParameters":{"description":"Telemetry parameters for WAF v2 Web ACL","properties":{"logType":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleWafLogType","description":"The type of WAF logs to collect (currently supports WAF_LOGS)."},"loggingFilter":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleLoggingFilter","description":"A filter configuration that determines which WAF log records to include or exclude."},"redactedFields":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleFieldToMatch"},"description":"Fields not to be included in the logs."}},"type":"object"},"aws-native:observabilityadmin:S3TableIntegrationEncryptionConfig":{"description":"Encryption configuration for the S3 Table Integration","properties":{"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the S3 Table Integration"},"sseAlgorithm":{"$ref":"#/types/aws-native:observabilityadmin:S3TableIntegrationEncryptionConfigSseAlgorithm","description":"The server-side encryption algorithm used to encrypt the S3 Table(s) data"}},"type":"object","required":["sseAlgorithm"]},"aws-native:observabilityadmin:S3TableIntegrationEncryptionConfigSseAlgorithm":{"description":"The server-side encryption algorithm used to encrypt the S3 Table(s) data","type":"string","enum":[{"name":"Aes256","value":"AES256"},{"name":"Awskms","value":"aws:kms"}]},"aws-native:observabilityadmin:S3TableIntegrationLogSource":{"description":"CloudWatch Logs data source to associate with the S3 Table Integration","properties":{"identifier":{"type":"string","description":"The ID of the CloudWatch Logs data source association"},"name":{"type":"string","description":"The name of the CloudWatch Logs data source"},"type":{"type":"string","description":"The type of the CloudWatch Logs data source"}},"type":"object","required":["name","type"]},"aws-native:observabilityadmin:S3TableIntegrationTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:observabilityadmin:TelemetryEnrichmentScope":{"description":"Scope of the Telemetry Enrichment","type":"string","enum":[{"name":"Account","value":"ACCOUNT"}]},"aws-native:observabilityadmin:TelemetryEnrichmentStatus":{"description":"Current status of the resource tags for telemetry feature (Running, Stopped, or Impaired).","type":"string","enum":[{"name":"Running","value":"RUNNING"},{"name":"Stopped","value":"STOPPED"},{"name":"Impaired","value":"IMPAIRED"}]},"aws-native:observabilityadmin:TelemetryPipelinesTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipeline":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the telemetry pipeline."},"configuration":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineConfiguration","description":"The configuration that defines how the telemetry pipeline processes data. For more information, see the [Amazon CloudWatch User Guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Creating-pipelines.html) ."},"createdTimeStamp":{"type":"number","description":"The timestamp when the telemetry pipeline was created."},"lastUpdateTimeStamp":{"type":"number","description":"The timestamp when the telemetry pipeline was last updated."},"name":{"type":"string","description":"The name of the telemetry pipeline."},"status":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatus","description":"The current status of the telemetry pipeline."},"statusReason":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatusReason","description":"Additional information about the pipeline status, including reasons for failure states."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTag"},"description":"An array of key-value pairs to apply to this resource"}},"type":"object"},"aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineConfiguration":{"properties":{"body":{"type":"string","description":"The pipeline configuration body that defines the data processing rules and transformations."}},"type":"object","required":["body"]},"aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatusReason":{"properties":{"description":{"type":"string","description":"A description of the pipeline status reason, providing additional context about the current state."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRule":{"description":"The telemetry rule","properties":{"destinationConfiguration":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleTelemetryDestinationConfiguration","description":"Configuration specifying where and how the telemetry data should be delivered."},"resourceType":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleResourceType","description":"The type of AWS resource to configure telemetry for (e.g., \"AWS::EC2::VPC\", \"AWS::EKS::Cluster\", \"AWS::WAFv2::WebACL\")."},"selectionCriteria":{"type":"string","description":"Criteria for selecting which resources the rule applies to, such as resource tags."},"telemetrySourceTypes":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleTelemetrySourceType"},"description":"The specific telemetry source types to configure for the resource, such as VPC_FLOW_LOGS or EKS_AUDIT_LOGS. TelemetrySourceTypes must be correlated with the specific resource type."},"telemetryType":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleTelemetryType","description":"The type of telemetry to collect (Logs, Metrics, or Traces)."}},"type":"object","required":["resourceType","telemetryType"]},"aws-native:observabilityadmin:TelemetryRuleAction":{"description":"The enumerated action to take.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Block","value":"BLOCK"},{"name":"Count","value":"COUNT"},{"name":"Captcha","value":"CAPTCHA"},{"name":"Challenge","value":"CHALLENGE"},{"name":"ExcludedAsCount","value":"EXCLUDED_AS_COUNT"}]},"aws-native:observabilityadmin:TelemetryRuleActionCondition":{"description":"The condition of the action desired in the filter.","properties":{"action":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleAction"}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleAdvancedEventSelector":{"description":"An advanced event selector that includes optional name and field selectors","properties":{"fieldSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleAdvancedFieldSelector"},"description":"Contains all selector statements in an advanced event selector."},"name":{"type":"string","description":"An optional descriptive name for the advanced event selector"}},"type":"object","required":["fieldSelectors"]},"aws-native:observabilityadmin:TelemetryRuleAdvancedFieldSelector":{"description":"A single selector statement in an advanced event selector.","properties":{"endsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the last few characters of the event record field specified as the value of Field."},"equals":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the exact value of the event record field specified as the value of Field."},"field":{"type":"string","description":"A field in a CloudTrail event record on which to filter events to be logged"},"notEndsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the last few characters of the event record field specified as the value of Field."},"notEquals":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the exact value of the event record field specified as the value of Field."},"notStartsWith":{"type":"array","items":{"type":"string"},"description":"An operator that excludes events that match the first few characters of the event record field specified as the value of Field."},"startsWith":{"type":"array","items":{"type":"string"},"description":"An operator that includes events that match the first few characters of the event record field specified as the value of Field."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleCloudtrailParameters":{"description":"Telemetry parameters for Cloudtrail","properties":{"advancedEventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleAdvancedEventSelector"},"description":"Create fine-grained selectors for AWS CloudTrail management and data."}},"type":"object","required":["advancedEventSelectors"]},"aws-native:observabilityadmin:TelemetryRuleCondition":{"description":"A condition for a filter.","properties":{"actionCondition":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleActionCondition"},"labelNameCondition":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleLabelNameCondition"}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleDestinationType":{"description":"Type of telemetry destination","type":"string","enum":[{"name":"CloudWatchLogs","value":"cloud-watch-logs"}]},"aws-native:observabilityadmin:TelemetryRuleElbLoadBalancerLoggingParameters":{"description":"Telemetry parameters for ELB/NLB Load Balancer Logs","properties":{"fieldDelimiter":{"type":"string","description":"A delimiter to delineate log fields"},"outputFormat":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleElbLoadBalancerLoggingParametersOutputFormat","description":"The format for ELB access log entries (plain text or JSON format)."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleElbLoadBalancerLoggingParametersOutputFormat":{"description":"The format for ELB access log entries (plain text or JSON format).","type":"string","enum":[{"name":"Plain","value":"plain"},{"name":"Json","value":"json"}]},"aws-native:observabilityadmin:TelemetryRuleFieldToMatch":{"description":"The field that we want to match this rule to.","properties":{"method":{"type":"string","description":"The method with which to match this rule."},"queryString":{"type":"string","description":"The query string to find the resource to match this field to."},"singleHeader":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleSingleHeader"},"uriPath":{"type":"string","description":"This is the URI path to match this rule to."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleFilter":{"description":"A filter to be applied","properties":{"behavior":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleFilterBehavior"},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleCondition"}},"requirement":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleFilterRequirement"}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleFilterBehavior":{"description":"The behavior required of the filter.","type":"string","enum":[{"name":"Keep","value":"KEEP"},{"name":"Drop","value":"DROP"}]},"aws-native:observabilityadmin:TelemetryRuleFilterRequirement":{"description":"The requirement portion of the filter.","type":"string","enum":[{"name":"MeetsAll","value":"MEETS_ALL"},{"name":"MeetsAny","value":"MEETS_ANY"}]},"aws-native:observabilityadmin:TelemetryRuleLabelNameCondition":{"description":"The label name of the condition.","properties":{"labelName":{"type":"string","description":"The label name of the condition."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleLoggingFilter":{"description":"Default handling for logs that don't match any of the specified filtering conditions.","properties":{"defaultBehavior":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleFilterBehavior","description":"The default action (KEEP or DROP) for log records that don't match any filter conditions."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleFilter"},"description":"A list of filter conditions that determine log record handling behavior."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleResourceType":{"description":"Resource Type associated with the Telemetry Rule","type":"string","enum":[{"name":"Awsec2vpc","value":"AWS::EC2::VPC"},{"name":"AwswaFv2WebAcl","value":"AWS::WAFv2::WebACL"},{"name":"AwsCloudTrail","value":"AWS::CloudTrail"},{"name":"AwseksCluster","value":"AWS::EKS::Cluster"},{"name":"AwsElasticLoadBalancingV2LoadBalancer","value":"AWS::ElasticLoadBalancingV2::LoadBalancer"},{"name":"AwsBedrockAgentCoreRuntime","value":"AWS::BedrockAgentCore::Runtime"},{"name":"AwsBedrockAgentCoreBrowser","value":"AWS::BedrockAgentCore::Browser"},{"name":"AwsBedrockAgentCoreCodeInterpreter","value":"AWS::BedrockAgentCore::CodeInterpreter"}]},"aws-native:observabilityadmin:TelemetryRuleSingleHeader":{"description":"Header for the field to match.","properties":{"name":{"type":"string","description":"The name of the header"}},"type":"object","required":["name"]},"aws-native:observabilityadmin:TelemetryRuleTag":{"description":"A key-value pair to associate with a resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:observabilityadmin:TelemetryRuleTelemetryDestinationConfiguration":{"description":"The destination configuration for telemetry data","properties":{"cloudtrailParameters":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleCloudtrailParameters","description":"Configuration parameters specific to AWS CloudTrail when CloudTrail is the source type."},"destinationPattern":{"type":"string","description":"The pattern used to generate the destination path or name, supporting macros like \u003cresourceId\u003e and \u003caccountId\u003e."},"destinationType":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleDestinationType","description":"The type of destination for the telemetry data (e.g., \"Amazon CloudWatch Logs\", \"S3\")."},"elbLoadBalancerLoggingParameters":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleElbLoadBalancerLoggingParameters","description":"Configuration parameters specific to ELB load balancer logging when ELB is the resource type."},"logDeliveryParameters":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleTelemetryDestinationConfigurationLogDeliveryParametersProperties","description":"Parameters for BedrockAgentCore log delivery"},"retentionInDays":{"type":"integer","description":"The number of days to retain the telemetry data in the destination."},"vpcFlowLogParameters":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleVpcFlowLogParameters","description":"Configuration parameters specific to VPC Flow Logs when VPC is the resource type."},"wafLoggingParameters":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleWafLoggingParameters","description":"Configuration parameters specific to WAF logging when WAF is the resource type."}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleTelemetryDestinationConfigurationLogDeliveryParametersProperties":{"description":"Parameters for BedrockAgentCore log delivery","properties":{"logTypes":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleTelemetryDestinationConfigurationLogDeliveryParametersPropertiesLogTypesItem"},"description":"Types of logs to deliver for BedrockAgentCore resources"}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleTelemetryDestinationConfigurationLogDeliveryParametersPropertiesLogTypesItem":{"type":"string","enum":[{"name":"ApplicationLogs","value":"APPLICATION_LOGS"},{"name":"UsageLogs","value":"USAGE_LOGS"}]},"aws-native:observabilityadmin:TelemetryRuleTelemetrySourceType":{"description":"The telemetry source type that goes into the array.","type":"string","enum":[{"name":"VpcFlowLogs","value":"VPC_FLOW_LOGS"},{"name":"Route53ResolverQueryLogs","value":"ROUTE53_RESOLVER_QUERY_LOGS"},{"name":"EksAuditLogs","value":"EKS_AUDIT_LOGS"},{"name":"EksAuthenticatorLogs","value":"EKS_AUTHENTICATOR_LOGS"},{"name":"EksControllerManagerLogs","value":"EKS_CONTROLLER_MANAGER_LOGS"},{"name":"EksSchedulerLogs","value":"EKS_SCHEDULER_LOGS"},{"name":"EksApiLogs","value":"EKS_API_LOGS"}]},"aws-native:observabilityadmin:TelemetryRuleTelemetryType":{"description":"Telemetry Type associated with the Telemetry Rule","type":"string","enum":[{"name":"Logs","value":"Logs"},{"name":"Traces","value":"Traces"}]},"aws-native:observabilityadmin:TelemetryRuleVpcFlowLogParameters":{"description":"Telemetry parameters for VPC Flow logs","properties":{"logFormat":{"type":"string","description":"The fields to include in the flow log record. If you omit this parameter, the flow log is created using the default format."},"maxAggregationInterval":{"type":"integer","description":"The maximum interval of time, in seconds, during which a flow of packets is captured and aggregated into a flow log record. Default is 600s."},"trafficType":{"type":"string","description":"The type of traffic captured for the flow log. Default is ALL"}},"type":"object"},"aws-native:observabilityadmin:TelemetryRuleWafLogType":{"description":"The type of logs to generate for WAF.","type":"string","enum":[{"name":"WafLogs","value":"WAF_LOGS"}]},"aws-native:observabilityadmin:TelemetryRuleWafLoggingParameters":{"description":"Telemetry parameters for WAF v2 Web ACL","properties":{"logType":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleWafLogType","description":"The type of WAF logs to collect (currently supports WAF_LOGS)."},"loggingFilter":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleLoggingFilter","description":"A filter configuration that determines which WAF log records to include or exclude."},"redactedFields":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRuleFieldToMatch"},"description":"Fields not to be included in the logs."}},"type":"object"},"aws-native:odb:CloudAutonomousVmClusterComputeModel":{"description":"The compute model of the Autonomous VM cluster: ECPU or OCPU.","type":"string","enum":[{"name":"Ecpu","value":"ECPU"},{"name":"Ocpu","value":"OCPU"}]},"aws-native:odb:CloudAutonomousVmClusterIamRole":{"description":"An AWS Identity and Access Management (IAM) service role associated with the Autonomous VM cluster.","properties":{"awsIntegration":{"type":"string","description":"The AWS integration configuration settings for the AWS Identity and Access Management (IAM) service role."},"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) service role."},"status":{"type":"string","description":"The current status of the AWS Identity and Access Management (IAM) service role."}},"type":"object"},"aws-native:odb:CloudAutonomousVmClusterLicenseModel":{"description":"The Oracle license model that applies to the Autonomous VM cluster. Valid values are LICENSE_INCLUDED or BRING_YOUR_OWN_LICENSE.","type":"string","enum":[{"name":"BringYourOwnLicense","value":"BRING_YOUR_OWN_LICENSE"},{"name":"LicenseIncluded","value":"LICENSE_INCLUDED"}]},"aws-native:odb:CloudAutonomousVmClusterMaintenanceWindow":{"description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window.","properties":{"daysOfWeek":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterMaintenanceWindowDaysOfWeekItem"},"description":"The days of the week when maintenance can be performed."},"hoursOfDay":{"type":"array","items":{"type":"integer"},"description":"The hours of the day when maintenance can be performed."},"leadTimeInWeeks":{"type":"integer","description":"The lead time in weeks before the maintenance window."},"months":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterMaintenanceWindowMonthsItem"},"description":"The months when maintenance can be performed."},"preference":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterMaintenanceWindowPreference","description":"The preference for the maintenance window scheduling."},"weeksOfMonth":{"type":"array","items":{"type":"integer"},"description":"The weeks of the month when maintenance can be performed."}},"type":"object"},"aws-native:odb:CloudAutonomousVmClusterMaintenanceWindowDaysOfWeekItem":{"type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:odb:CloudAutonomousVmClusterMaintenanceWindowMonthsItem":{"type":"string","enum":[{"name":"January","value":"JANUARY"},{"name":"February","value":"FEBRUARY"},{"name":"March","value":"MARCH"},{"name":"April","value":"APRIL"},{"name":"May","value":"MAY"},{"name":"June","value":"JUNE"},{"name":"July","value":"JULY"},{"name":"August","value":"AUGUST"},{"name":"September","value":"SEPTEMBER"},{"name":"October","value":"OCTOBER"},{"name":"November","value":"NOVEMBER"},{"name":"December","value":"DECEMBER"}]},"aws-native:odb:CloudAutonomousVmClusterMaintenanceWindowPreference":{"description":"The preference for the maintenance window scheduling.","type":"string","enum":[{"name":"NoPreference","value":"NO_PREFERENCE"},{"name":"CustomPreference","value":"CUSTOM_PREFERENCE"}]},"aws-native:odb:CloudAutonomousVmClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, @, -, and \"."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:odb:CloudExadataInfrastructureCustomerContact":{"description":"A contact to receive notification from Oracle about maintenance updates for a specific Exadata infrastructure.","properties":{"email":{"type":"string","description":"The email address of the contact."}},"type":"object"},"aws-native:odb:CloudExadataInfrastructureMaintenanceWindow":{"description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window.","properties":{"customActionTimeoutInMins":{"type":"integer","description":"The timeout duration for custom actions in minutes."},"daysOfWeek":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureMaintenanceWindowDaysOfWeekItem"},"description":"The days of the week when maintenance can be performed."},"hoursOfDay":{"type":"array","items":{"type":"integer"},"description":"The hours of the day when maintenance can be performed."},"isCustomActionTimeoutEnabled":{"type":"boolean","description":"Indicates whether custom action timeout is enabled."},"leadTimeInWeeks":{"type":"integer","description":"The lead time in weeks before the maintenance window."},"months":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureMaintenanceWindowMonthsItem"},"description":"The months when maintenance can be performed."},"patchingMode":{"type":"string","description":"The patching mode for the maintenance window."},"preference":{"type":"string","description":"The preference for the maintenance window scheduling."},"weeksOfMonth":{"type":"array","items":{"type":"integer"},"description":"The weeks of the month when maintenance can be performed."}},"type":"object"},"aws-native:odb:CloudExadataInfrastructureMaintenanceWindowDaysOfWeekItem":{"type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:odb:CloudExadataInfrastructureMaintenanceWindowMonthsItem":{"type":"string","enum":[{"name":"January","value":"JANUARY"},{"name":"February","value":"FEBRUARY"},{"name":"March","value":"MARCH"},{"name":"April","value":"APRIL"},{"name":"May","value":"MAY"},{"name":"June","value":"JUNE"},{"name":"July","value":"JULY"},{"name":"August","value":"AUGUST"},{"name":"September","value":"SEPTEMBER"},{"name":"October","value":"OCTOBER"},{"name":"November","value":"NOVEMBER"},{"name":"December","value":"DECEMBER"}]},"aws-native:odb:CloudExadataInfrastructureTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, @, -, and \"."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:odb:CloudVmClusterDataCollectionOptions":{"description":"Information about the data collection options enabled for a VM cluster.","properties":{"isDiagnosticsEventsEnabled":{"type":"boolean","description":"Indicates whether diagnostic collection is enabled for the VM cluster."},"isHealthMonitoringEnabled":{"type":"boolean","description":"Indicates whether health monitoring is enabled for the VM cluster."},"isIncidentLogsEnabled":{"type":"boolean","description":"Indicates whether incident logs are enabled for the cloud VM cluster."}},"type":"object"},"aws-native:odb:CloudVmClusterDbNode":{"description":"A DbNode is a virtual machine that hosts Oracle database instances and provides access to shared storage servers within a VM Cluster","properties":{"backupIpId":{"type":"string","description":"The Oracle Cloud ID (OCID) of the backup IP address that's associated with the DB node."},"backupVnic2Id":{"type":"string","description":"The OCID of the second backup virtual network interface card (VNIC) for the DB node."},"cpuCoreCount":{"type":"integer","description":"The number of CPU cores enabled on the DB node."},"dbNodeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the DB node."},"dbNodeId":{"type":"string","description":"The unique identifier of the DB node."},"dbNodeStorageSizeInGbs":{"type":"integer","description":"The amount of local node storage, in gigabytes (GB), that's allocated on the DB node."},"dbServerId":{"type":"string","description":"The unique identifier of the database server that's associated with the DB node.","replaceOnChanges":true},"dbSystemId":{"type":"string","description":"The OCID of the DB system."},"hostIpId":{"type":"string","description":"The OCID of the host IP address that's associated with the DB node."},"hostname":{"type":"string","description":"The host name for the DB node."},"memorySizeInGbs":{"type":"integer","description":"The amount of memory, in gigabytes (GB), that allocated on the DB node."},"ocid":{"type":"string","description":"The OCID of the DB node."},"status":{"type":"string","description":"The current status of the DB node."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterTag"}},"vnic2Id":{"type":"string","description":"The OCID of the second VNIC."},"vnicId":{"type":"string","description":"The OCID of the VNIC."}},"type":"object","required":["dbServerId"]},"aws-native:odb:CloudVmClusterIamRole":{"description":"An AWS Identity and Access Management (IAM) service role associated with the VM cluster.","properties":{"awsIntegration":{"type":"string","description":"The AWS integration configuration settings for the AWS Identity and Access Management (IAM) service role."},"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) service role."},"status":{"type":"string","description":"The current status of the AWS Identity and Access Management (IAM) service role."}},"type":"object"},"aws-native:odb:CloudVmClusterLicenseModel":{"description":"The Oracle license model applied to the VM cluster.","type":"string","enum":[{"name":"BringYourOwnLicense","value":"BRING_YOUR_OWN_LICENSE"},{"name":"LicenseIncluded","value":"LICENSE_INCLUDED"}]},"aws-native:odb:CloudVmClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, @, -, and \"."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:odb:OdbNetworkCrossRegionS3RestoreSourcesAccess":{"description":"The configuration access for the cross-Region Amazon S3 database restore source for the ODB network.","properties":{"ipv4Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses allowed for cross-Region Amazon S3 restore access."},"region":{"type":"string","description":"The AWS-Region for cross-Region Amazon S3 restore access."},"status":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedResourceStatus","description":"The current status of the cross-Region Amazon S3 restore access configuration."}},"type":"object"},"aws-native:odb:OdbNetworkKmsAccess":{"description":"The AWS Key Management Service (KMS) access configuration for the ODB network.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:odb:OdbNetworkManagedResourceStatus":{"description":"The status of the managed resource access.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Enabling","value":"ENABLING"},{"name":"Disabled","value":"DISABLED"},{"name":"Disabling","value":"DISABLING"}]},"aws-native:odb:OdbNetworkManagedServices":{"description":"The managed services configuration for the ODB network.","properties":{"crossRegionS3RestoreSourcesAccess":{"type":"array","items":{"$ref":"#/types/aws-native:odb:OdbNetworkCrossRegionS3RestoreSourcesAccess"},"description":"The access configuration for the cross-Region Amazon S3 database restore source."},"kmsAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesKmsAccessProperties","description":"The AWS Key Management Service (KMS) access configuration."},"managedS3BackupAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesManagedS3BackupAccessProperties","description":"The managed Amazon S3 backup access configuration."},"managedServicesIpv4Cidrs":{"type":"array","items":{"type":"string"},"description":"The IPv4 CIDR blocks for the managed services."},"resourceGatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource gateway."},"s3Access":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesS3AccessProperties","description":"The Amazon S3 access configuration."},"serviceNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network."},"serviceNetworkEndpoint":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesServiceNetworkEndpointProperties","description":"The service network endpoint configuration."},"stsAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesStsAccessProperties","description":"The AWS Security Token Service (STS) access configuration."},"zeroEtlAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesZeroEtlAccessProperties","description":"The Zero-ETL access configuration."}},"type":"object"},"aws-native:odb:OdbNetworkManagedServicesKmsAccessProperties":{"description":"The AWS Key Management Service (KMS) access configuration.","properties":{"domainName":{"type":"string","description":"The domain name for the AWS KMS access."},"ipv4Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses for the AWS KMS access."},"kmsPolicyDocument":{"type":"string","description":"The endpoint policy for the AWS KMS access."},"status":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedResourceStatus","description":"The status of the AWS KMS access."}},"type":"object"},"aws-native:odb:OdbNetworkManagedServicesManagedS3BackupAccessProperties":{"description":"The managed Amazon S3 backup access configuration.","properties":{"ipv4Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses for the managed Amazon S3 backup access."},"status":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedResourceStatus","description":"The status of the managed Amazon S3 backup access."}},"type":"object"},"aws-native:odb:OdbNetworkManagedServicesS3AccessProperties":{"description":"The Amazon S3 access configuration.","properties":{"domainName":{"type":"string","description":"The domain name for the Amazon S3 access."},"ipv4Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses for the Amazon S3 access."},"s3PolicyDocument":{"type":"string","description":"The endpoint policy for the Amazon S3 access."},"status":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedResourceStatus","description":"The status of the Amazon S3 access."}},"type":"object"},"aws-native:odb:OdbNetworkManagedServicesServiceNetworkEndpointProperties":{"description":"The service network endpoint configuration.","properties":{"vpcEndpointId":{"type":"string","description":"The identifier of the VPC endpoint."},"vpcEndpointType":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServicesServiceNetworkEndpointPropertiesVpcEndpointType","description":"The type of the VPC endpoint."}},"type":"object"},"aws-native:odb:OdbNetworkManagedServicesServiceNetworkEndpointPropertiesVpcEndpointType":{"description":"The type of the VPC endpoint.","type":"string","enum":[{"name":"Servicenetwork","value":"SERVICENETWORK"}]},"aws-native:odb:OdbNetworkManagedServicesStsAccessProperties":{"description":"The AWS Security Token Service (STS) access configuration.","properties":{"domainName":{"type":"string","description":"The domain name for the AWS STS access."},"ipv4Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses for the AWS STS access."},"status":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedResourceStatus","description":"The status of the AWS STS access."},"stsPolicyDocument":{"type":"string","description":"The endpoint policy for the AWS STS access."}},"type":"object"},"aws-native:odb:OdbNetworkManagedServicesZeroEtlAccessProperties":{"description":"The Zero-ETL access configuration.","properties":{"cidr":{"type":"string","description":"The CIDR block for the Zero-ETL access."},"status":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedResourceStatus","description":"The status of the Zero-ETL access."}},"type":"object"},"aws-native:odb:OdbNetworkS3Access":{"description":"Specifies the configuration for Amazon S3 access from the ODB network.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:odb:OdbNetworkStsAccess":{"description":"The AWS Security Token Service (STS) access configuration for the ODB network.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:odb:OdbNetworkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, @, -, and \"."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:odb:OdbNetworkZeroEtlAccess":{"description":"Specifies the configuration for Zero-ETL access from the ODB network.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:odb:OdbPeeringConnectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: Unicode letters, digits, whitespace, _, ., :, /, =, +, @, -, and \"."},"value":{"type":"string","description":"The value for the tag. You can specify a value that's 1 to 256 characters in length. You can use any of the following characters: Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key"]},"aws-native:omics:AnnotationStoreAnnotationType":{"type":"string","enum":[{"name":"Generic","value":"GENERIC"},{"name":"ChrPos","value":"CHR_POS"},{"name":"ChrPosRefAlt","value":"CHR_POS_REF_ALT"},{"name":"ChrStartEndOneBase","value":"CHR_START_END_ONE_BASE"},{"name":"ChrStartEndRefAltOneBase","value":"CHR_START_END_REF_ALT_ONE_BASE"},{"name":"ChrStartEndZeroBase","value":"CHR_START_END_ZERO_BASE"},{"name":"ChrStartEndRefAltZeroBase","value":"CHR_START_END_REF_ALT_ZERO_BASE"}]},"aws-native:omics:AnnotationStoreEncryptionType":{"type":"string","enum":[{"name":"Kms","value":"KMS"}]},"aws-native:omics:AnnotationStoreReferenceItem":{"properties":{"referenceArn":{"type":"string","description":"The reference's ARN."}},"type":"object","required":["referenceArn"]},"aws-native:omics:AnnotationStoreSchemaValueType":{"type":"string","enum":[{"name":"Long","value":"LONG"},{"name":"Int","value":"INT"},{"name":"String","value":"STRING"},{"name":"Float","value":"FLOAT"},{"name":"Double","value":"DOUBLE"},{"name":"Boolean","value":"BOOLEAN"}]},"aws-native:omics:AnnotationStoreSseConfig":{"properties":{"keyArn":{"type":"string","description":"An encryption key ARN."},"type":{"$ref":"#/types/aws-native:omics:AnnotationStoreEncryptionType","description":"The encryption type."}},"type":"object","required":["type"]},"aws-native:omics:AnnotationStoreStoreFormat":{"type":"string","enum":[{"name":"Gff","value":"GFF"},{"name":"Tsv","value":"TSV"},{"name":"Vcf","value":"VCF"}]},"aws-native:omics:AnnotationStoreStoreOptions0Properties":{"properties":{"tsvStoreOptions":{"$ref":"#/types/aws-native:omics:AnnotationStoreTsvStoreOptions"}},"type":"object","required":["tsvStoreOptions"]},"aws-native:omics:AnnotationStoreStoreOptionsProperties":{"properties":{"tsvStoreOptions":{"$ref":"#/types/aws-native:omics:AnnotationStoreTsvStoreOptions"}},"type":"object","required":["tsvStoreOptions"]},"aws-native:omics:AnnotationStoreStoreStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"}]},"aws-native:omics:AnnotationStoreTsvStoreOptions":{"properties":{"annotationType":{"$ref":"#/types/aws-native:omics:AnnotationStoreAnnotationType"},"formatToHeader":{"type":"object","additionalProperties":{"type":"string"}},"schema":{"type":"array","items":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:omics:AnnotationStoreSchemaValueType"}}}},"type":"object"},"aws-native:omics:ReferenceStoreEncryptionType":{"type":"string","enum":[{"name":"Kms","value":"KMS"}]},"aws-native:omics:ReferenceStoreSseConfig":{"description":"Server-side encryption (SSE) settings for a store.","properties":{"keyArn":{"type":"string","description":"An encryption key ARN."},"type":{"$ref":"#/types/aws-native:omics:ReferenceStoreEncryptionType","description":"The encryption type."}},"type":"object","required":["type"]},"aws-native:omics:SequenceStoreETagAlgorithmFamily":{"type":"string","enum":[{"name":"Md5up","value":"MD5up"},{"name":"Sha256up","value":"SHA256up"},{"name":"Sha512up","value":"SHA512up"}]},"aws-native:omics:SequenceStoreEncryptionType":{"type":"string","enum":[{"name":"Kms","value":"KMS"}]},"aws-native:omics:SequenceStoreSseConfig":{"description":"Server-side encryption (SSE) settings for a store.","properties":{"keyArn":{"type":"string","description":"An encryption key ARN."},"type":{"$ref":"#/types/aws-native:omics:SequenceStoreEncryptionType","description":"The encryption type."}},"type":"object","required":["type"]},"aws-native:omics:SequenceStoreStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:omics:VariantStoreEncryptionType":{"type":"string","enum":[{"name":"Kms","value":"KMS"}]},"aws-native:omics:VariantStoreReferenceItem":{"properties":{"referenceArn":{"type":"string","description":"The reference's ARN."}},"type":"object","required":["referenceArn"]},"aws-native:omics:VariantStoreSseConfig":{"properties":{"keyArn":{"type":"string","description":"An encryption key ARN."},"type":{"$ref":"#/types/aws-native:omics:VariantStoreEncryptionType","description":"The encryption type."}},"type":"object","required":["type"]},"aws-native:omics:VariantStoreStoreStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"}]},"aws-native:omics:WorkflowAccelerators":{"type":"string","enum":[{"name":"Gpu","value":"GPU"}]},"aws-native:omics:WorkflowContainerRegistryMap":{"properties":{"imageMappings":{"type":"array","items":{"$ref":"#/types/aws-native:omics:WorkflowImageMapping"},"description":"Image mappings specify path mappings between the ECR private repository and their corresponding external repositories."},"registryMappings":{"type":"array","items":{"$ref":"#/types/aws-native:omics:WorkflowRegistryMapping"},"description":"Mapping that provides the ECR repository path where upstream container images are pulled and synchronized."}},"type":"object"},"aws-native:omics:WorkflowDefinitionRepository":{"properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connection to the source code repository."},"excludeFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of file patterns to exclude when retrieving the workflow definition from the repository."},"fullRepositoryId":{"type":"string","description":"The full repository identifier, including the repository owner and name. For example, 'repository-owner/repository-name'."},"sourceReference":{"$ref":"#/types/aws-native:omics:WorkflowSourceReference","description":"The source reference for the repository, such as a branch name, tag, or commit ID."}},"type":"object"},"aws-native:omics:WorkflowEngine":{"type":"string","enum":[{"name":"Wdl","value":"WDL"},{"name":"Nextflow","value":"NEXTFLOW"},{"name":"Cwl","value":"CWL"}]},"aws-native:omics:WorkflowImageMapping":{"properties":{"destinationImage":{"type":"string","description":"Specifies the URI of the corresponding image in the private ECR registry."},"sourceImage":{"type":"string","description":"Specifies the URI of the source image in the upstream registry."}},"type":"object"},"aws-native:omics:WorkflowParameter":{"properties":{"description":{"type":"string","description":"The parameter's description."},"optional":{"type":"boolean","description":"Whether the parameter is optional."}},"type":"object"},"aws-native:omics:WorkflowRegistryMapping":{"properties":{"ecrAccountId":{"type":"string","description":"Account ID of the account that owns the upstream container image."},"ecrRepositoryPrefix":{"type":"string","description":"The repository prefix to use in the ECR private repository."},"upstreamRegistryUrl":{"type":"string","description":"The URI of the upstream registry."},"upstreamRepositoryPrefix":{"type":"string","description":"The repository prefix of the corresponding repository in the upstream registry."}},"type":"object"},"aws-native:omics:WorkflowSourceReference":{"properties":{"type":{"$ref":"#/types/aws-native:omics:WorkflowSourceReferencetype","description":"The type of source reference, such as branch, tag, or commit."},"value":{"type":"string","description":"The value of the source reference, such as the branch name, tag name, or commit ID."}},"type":"object"},"aws-native:omics:WorkflowSourceReferencetype":{"description":"The type of source reference, such as branch, tag, or commit.","type":"string","enum":[{"name":"Branch","value":"BRANCH"},{"name":"Tag","value":"TAG"},{"name":"Commit","value":"COMMIT"}]},"aws-native:omics:WorkflowStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleted","value":"DELETED"},{"name":"Failed","value":"FAILED"}]},"aws-native:omics:WorkflowStorageType":{"type":"string","enum":[{"name":"Static","value":"STATIC"},{"name":"Dynamic","value":"DYNAMIC"}]},"aws-native:omics:WorkflowType":{"type":"string","enum":[{"name":"Private","value":"PRIVATE"}]},"aws-native:omics:WorkflowVersionAccelerators":{"type":"string","enum":[{"name":"Gpu","value":"GPU"}]},"aws-native:omics:WorkflowVersionContainerRegistryMap":{"properties":{"imageMappings":{"type":"array","items":{"$ref":"#/types/aws-native:omics:WorkflowVersionImageMapping"},"description":"Image mappings specify path mappings between the ECR private repository and their corresponding external repositories."},"registryMappings":{"type":"array","items":{"$ref":"#/types/aws-native:omics:WorkflowVersionRegistryMapping"},"description":"Mapping that provides the ECR repository path where upstream container images are pulled and synchronized."}},"type":"object"},"aws-native:omics:WorkflowVersionDefinitionRepository":{"properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connection to the source code repository."},"excludeFilePatterns":{"type":"array","items":{"type":"string"},"description":"A list of file patterns to exclude when retrieving the workflow definition from the repository."},"fullRepositoryId":{"type":"string","description":"The full repository identifier, including the repository owner and name. For example, 'repository-owner/repository-name'."},"sourceReference":{"$ref":"#/types/aws-native:omics:WorkflowVersionSourceReference","description":"The source reference for the repository, such as a branch name, tag, or commit ID."}},"type":"object"},"aws-native:omics:WorkflowVersionImageMapping":{"properties":{"destinationImage":{"type":"string","description":"Specifies the URI of the corresponding image in the private ECR registry."},"sourceImage":{"type":"string","description":"Specifies the URI of the source image in the upstream registry."}},"type":"object"},"aws-native:omics:WorkflowVersionRegistryMapping":{"properties":{"ecrAccountId":{"type":"string","description":"Account ID of the account that owns the upstream container image."},"ecrRepositoryPrefix":{"type":"string","description":"The repository prefix to use in the ECR private repository."},"upstreamRegistryUrl":{"type":"string","description":"The URI of the upstream registry."},"upstreamRepositoryPrefix":{"type":"string","description":"The repository prefix of the corresponding repository in the upstream registry."}},"type":"object"},"aws-native:omics:WorkflowVersionSourceReference":{"properties":{"type":{"$ref":"#/types/aws-native:omics:WorkflowVersionSourceReferencetype","description":"The type of source reference, such as branch, tag, or commit."},"value":{"type":"string","description":"The value of the source reference, such as the branch name, tag name, or commit ID."}},"type":"object"},"aws-native:omics:WorkflowVersionSourceReferencetype":{"description":"The type of source reference, such as branch, tag, or commit.","type":"string","enum":[{"name":"Branch","value":"BRANCH"},{"name":"Tag","value":"TAG"},{"name":"Commit","value":"COMMIT"}]},"aws-native:omics:WorkflowVersionStorageType":{"type":"string","enum":[{"name":"Static","value":"STATIC"},{"name":"Dynamic","value":"DYNAMIC"}]},"aws-native:omics:WorkflowVersionWorkflowEngine":{"type":"string","enum":[{"name":"Wdl","value":"WDL"},{"name":"Nextflow","value":"NEXTFLOW"},{"name":"Cwl","value":"CWL"}]},"aws-native:omics:WorkflowVersionWorkflowParameter":{"properties":{"description":{"type":"string","description":"The parameter's description."},"optional":{"type":"boolean","description":"Whether the parameter is optional."}},"type":"object"},"aws-native:omics:WorkflowVersionWorkflowStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleted","value":"DELETED"},{"name":"Failed","value":"FAILED"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:omics:WorkflowVersionWorkflowType":{"type":"string","enum":[{"name":"Private","value":"PRIVATE"},{"name":"Ready2run","value":"READY2RUN"}]},"aws-native:opensearchserverless:AccessPolicyType":{"description":"The possible types for the access policy","type":"string","enum":[{"name":"Data","value":"data"}]},"aws-native:opensearchserverless:CollectionEncryptionConfig":{"description":"Encryption settings for the collection","properties":{"awsOwnedKey":{"type":"boolean","description":"Indicates whether to use an AWS owned key for encryption."},"kmsKeyArn":{"type":"string","description":"Key Management Service key used to encrypt the collection."}},"type":"object"},"aws-native:opensearchserverless:CollectionGroupCapacityLimits":{"properties":{"maxIndexingCapacityInOcu":{"type":"number","description":"The maximum indexing capacity for collections in the group."},"maxSearchCapacityInOcu":{"type":"number","description":"The maximum search capacity for collections in the group."},"minIndexingCapacityInOcu":{"type":"number","description":"The minimum indexing capacity for collections in the group."},"minSearchCapacityInOcu":{"type":"number","description":"The minimum search capacity for collections in the group."}},"type":"object"},"aws-native:opensearchserverless:CollectionGroupStandbyReplicas":{"description":"Indicates whether standby replicas are used for the collection group.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:opensearchserverless:CollectionGroupTag":{"description":"A map of key-value pairs associated with the collection group.","properties":{"key":{"type":"string","description":"The key in the key-value pair"},"value":{"type":"string","description":"The value in the key-value pair"}},"type":"object","required":["key","value"]},"aws-native:opensearchserverless:CollectionServerlessVectorAcceleration":{"description":"Indicates whether GPU acceleration is enabled for vector indexing","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"},{"name":"Allowed","value":"ALLOWED"}]},"aws-native:opensearchserverless:CollectionStandbyReplicas":{"description":"The possible standby replicas for the collection","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:opensearchserverless:CollectionTag":{"description":"A key-value pair metadata associated with resource","properties":{"key":{"type":"string","description":"The key in the key-value pair"},"value":{"type":"string","description":"The value in the key-value pair"}},"type":"object","required":["key","value"]},"aws-native:opensearchserverless:CollectionType":{"description":"The possible types for the collection","type":"string","enum":[{"name":"Search","value":"SEARCH"},{"name":"Timeseries","value":"TIMESERIES"},{"name":"Vectorsearch","value":"VECTORSEARCH"}]},"aws-native:opensearchserverless:CollectionVectorOptions":{"description":"Vector search configuration options for the collection","properties":{"serverlessVectorAcceleration":{"$ref":"#/types/aws-native:opensearchserverless:CollectionServerlessVectorAcceleration","replaceOnChanges":true}},"type":"object"},"aws-native:opensearchserverless:IndexPropertyMapping":{"properties":{"dimension":{"type":"integer","description":"Dimension size for vector fields, defines the number of dimensions in the vector"},"index":{"type":"boolean","description":"Whether a field should be indexed"},"method":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMappingMethodProperties","description":"Configuration for k-NN search method"},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMapping"},"description":"Nested fields within an object or nested field type"},"type":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMappingType","description":"The field data type. Must be a valid OpenSearch field type."},"value":{"type":"string","description":"Default value for the field when not specified in a document"}},"type":"object","required":["type"]},"aws-native:opensearchserverless:IndexPropertyMappingMethodProperties":{"description":"Configuration for k-NN search method","properties":{"engine":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesEngine","description":"The k-NN search engine to use"},"name":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesName","description":"The algorithm name for k-NN search"},"parameters":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesParametersProperties","description":"Additional parameters for the k-NN algorithm"},"spaceType":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesSpaceType","description":"The distance function used for k-NN search"}},"type":"object","required":["name"]},"aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesEngine":{"description":"The k-NN search engine to use","type":"string","enum":[{"name":"Nmslib","value":"nmslib"},{"name":"Faiss","value":"faiss"},{"name":"Lucene","value":"lucene"}]},"aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesName":{"description":"The algorithm name for k-NN search","type":"string","enum":[{"name":"Hnsw","value":"hnsw"},{"name":"Ivf","value":"ivf"}]},"aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesParametersProperties":{"description":"Additional parameters for the k-NN algorithm","properties":{"efConstruction":{"type":"integer","description":"The size of the dynamic list used during k-NN graph creation"},"m":{"type":"integer","description":"Number of neighbors to consider during k-NN search"}},"type":"object"},"aws-native:opensearchserverless:IndexPropertyMappingMethodPropertiesSpaceType":{"description":"The distance function used for k-NN search","type":"string","enum":[{"name":"L2","value":"l2"},{"name":"L1","value":"l1"},{"name":"Linf","value":"linf"},{"name":"Cosinesimil","value":"cosinesimil"},{"name":"Innerproduct","value":"innerproduct"},{"name":"Hamming","value":"hamming"}]},"aws-native:opensearchserverless:IndexPropertyMappingType":{"description":"The field data type. Must be a valid OpenSearch field type.","type":"string","enum":[{"name":"Text","value":"text"},{"name":"KnnVector","value":"knn_vector"}]},"aws-native:opensearchserverless:IndexSettings":{"properties":{"index":{"$ref":"#/types/aws-native:opensearchserverless:IndexSettingsIndexProperties","description":"Index settings."}},"type":"object"},"aws-native:opensearchserverless:IndexSettingsIndexProperties":{"description":"Index settings.","properties":{"knn":{"type":"boolean","description":"Enable/disable k-nearest neighbor search capability"},"knnAlgoParamEfSearch":{"type":"integer","description":"Size of the dynamic list for the nearest neighbors"},"refreshInterval":{"type":"string","description":"How often to perform refresh operation (e.g. '1s', '5s')"}},"type":"object"},"aws-native:opensearchserverless:LifecyclePolicyType":{"description":"The type of lifecycle policy","type":"string","enum":[{"name":"Retention","value":"retention"}]},"aws-native:opensearchserverless:MappingsProperties":{"description":"Index Mappings","properties":{"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:opensearchserverless:IndexPropertyMapping"},"description":"Defines the fields within the mapping, including their types and configurations"}},"type":"object"},"aws-native:opensearchserverless:SecurityConfigIamFederationConfigOptions":{"description":"Describe IAM federation options in form of key value map","properties":{"groupAttribute":{"type":"string","description":"Group attribute for this IAM federation integration"},"userAttribute":{"type":"string","description":"User attribute for this IAM federation integration"}},"type":"object"},"aws-native:opensearchserverless:SecurityConfigIamIdentityCenterConfigOptions":{"description":"Describes IAM Identity Center options for an OpenSearch Serverless security configuration in the form of a key-value map","properties":{"applicationArn":{"type":"string","description":"The ARN of the IAM Identity Center application used to integrate with OpenSearch Serverless."},"applicationDescription":{"type":"string","description":"The description of the IAM Identity Center application used to integrate with OpenSearch Serverless"},"applicationName":{"type":"string","description":"The name of the IAM Identity Center application used to integrate with OpenSearch Serverless"},"groupAttribute":{"type":"string","description":"The group attribute for this IAM Identity Center integration. Defaults to `GroupId` ."},"instanceArn":{"type":"string","description":"The ARN of the IAM Identity Center instance used to integrate with OpenSearch Serverless.","replaceOnChanges":true},"userAttribute":{"type":"string","description":"The user attribute for this IAM Identity Center integration. Defaults to `UserId`"}},"type":"object","required":["instanceArn"]},"aws-native:opensearchserverless:SecurityConfigSamlConfigOptions":{"description":"Describes saml options in form of key value map","properties":{"groupAttribute":{"type":"string","description":"Group attribute for this saml integration"},"metadata":{"type":"string","description":"The XML saml provider metadata document that you want to use"},"openSearchServerlessEntityId":{"type":"string","description":"Custom entity id attribute to override default entity id for this saml integration"},"sessionTimeout":{"type":"integer","description":"Defines the session timeout in minutes"},"userAttribute":{"type":"string","description":"Custom attribute for this saml integration"}},"type":"object","required":["metadata"]},"aws-native:opensearchserverless:SecurityConfigType":{"description":"Config type for security config","type":"string","enum":[{"name":"Saml","value":"saml"},{"name":"Iamidentitycenter","value":"iamidentitycenter"},{"name":"Iamfederation","value":"iamfederation"}]},"aws-native:opensearchserverless:SecurityPolicyType":{"description":"The possible types for the network policy","type":"string","enum":[{"name":"Encryption","value":"encryption"},{"name":"Network","value":"network"}]},"aws-native:opensearchservice:ApplicationAppConfig":{"description":"A key-value pair of AppConfig","properties":{"key":{"$ref":"#/types/aws-native:opensearchservice:ApplicationAppConfigType","description":"The configuration key"},"value":{"type":"string","description":"The configuration value."}},"type":"object","required":["key","value"]},"aws-native:opensearchservice:ApplicationAppConfigType":{"description":"AppConfig type values.","type":"string","enum":[{"name":"OpensearchDashboardsDashboardAdminUsers","value":"opensearchDashboards.dashboardAdmin.users"},{"name":"OpensearchDashboardsDashboardAdminGroups","value":"opensearchDashboards.dashboardAdmin.groups"}]},"aws-native:opensearchservice:ApplicationDataSource":{"description":"Datasource arn and description","properties":{"dataSourceArn":{"$ref":"pulumi.json#/Any","description":"The ARN of the data source."},"dataSourceDescription":{"type":"string","description":"Description of the data source."}},"type":"object","required":["dataSourceArn"]},"aws-native:opensearchservice:ApplicationTag":{"description":"A key-value pair metadata associated with resource","properties":{"key":{"type":"string","description":"The key in the key-value pair"},"value":{"type":"string","description":"The value in the key-value pair"}},"type":"object","required":["key","value"]},"aws-native:opensearchservice:DomainAdvancedSecurityOptionsInput":{"properties":{"anonymousAuthDisableDate":{"type":"string","description":"Date and time when the migration period will be disabled. Only necessary when [enabling fine-grained access control on an existing domain](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html#fgac-enabling-existing) ."},"anonymousAuthEnabled":{"type":"boolean","description":"True to enable a 30-day migration period during which administrators can create role mappings. Only necessary when [enabling fine-grained access control on an existing domain](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html#fgac-enabling-existing) ."},"enabled":{"type":"boolean","description":"True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See [Fine-grained access control in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html) ."},"iamFederationOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainIamFederationOptions","description":"Input configuration for IAM identity federation within advanced security options."},"internalUserDatabaseEnabled":{"type":"boolean","description":"True to enable the internal user database."},"jwtOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainJwtOptions","description":"Container for information about the JWT configuration of the Amazon OpenSearch Service."},"masterUserOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainMasterUserOptions","description":"Specifies information about the master user."},"samlOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSamlOptions","description":"Container for information about the SAML configuration for OpenSearch Dashboards."}},"type":"object"},"aws-native:opensearchservice:DomainAimlOptions":{"properties":{"s3VectorsEngine":{"$ref":"#/types/aws-native:opensearchservice:DomainS3VectorsEngine"},"serverlessVectorAcceleration":{"$ref":"#/types/aws-native:opensearchservice:DomainServerlessVectorAcceleration"}},"type":"object"},"aws-native:opensearchservice:DomainClusterConfig":{"properties":{"coldStorageOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainColdStorageOptions","description":"Container for cold storage configuration options."},"dedicatedMasterCount":{"type":"integer","description":"The number of instances to use for the master node. If you specify this property, you must specify `true` for the `DedicatedMasterEnabled` property."},"dedicatedMasterEnabled":{"type":"boolean","description":"Indicates whether to use a dedicated master node for the OpenSearch Service domain. A dedicated master node is a cluster node that performs cluster management tasks, but doesn't hold data or respond to data upload requests. Dedicated master nodes offload cluster management tasks to increase the stability of your search clusters. See [Dedicated master nodes in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-dedicatedmasternodes.html) ."},"dedicatedMasterType":{"type":"string","description":"The hardware configuration of the computer that hosts the dedicated master node, such as `m3.medium.search` . If you specify this property, you must specify `true` for the `DedicatedMasterEnabled` property. For valid values, see [Supported instance types in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/supported-instance-types.html) ."},"instanceCount":{"type":"integer","description":"The number of data nodes (instances) to use in the OpenSearch Service domain."},"instanceType":{"type":"string","description":"The instance type for your data nodes, such as `m3.medium.search` . For valid values, see [Supported instance types in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/supported-instance-types.html) ."},"multiAzWithStandbyEnabled":{"type":"boolean","description":"Indicates whether Multi-AZ with Standby deployment option is enabled. For more information, see [Multi-AZ with Standby](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-multiaz.html#managedomains-za-standby) ."},"nodeOptions":{"type":"array","items":{"$ref":"#/types/aws-native:opensearchservice:DomainNodeOption"},"description":"List of node options for the domain."},"warmCount":{"type":"integer","description":"The number of warm nodes in the cluster."},"warmEnabled":{"type":"boolean","description":"Whether to enable UltraWarm storage for the cluster. See [UltraWarm storage for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ultrawarm.html) ."},"warmType":{"type":"string","description":"The instance type for the cluster's warm nodes."},"zoneAwarenessConfig":{"$ref":"#/types/aws-native:opensearchservice:DomainZoneAwarenessConfig","description":"Specifies zone awareness configuration options. Only use if `ZoneAwarenessEnabled` is `true` ."},"zoneAwarenessEnabled":{"type":"boolean","description":"Indicates whether to enable zone awareness for the OpenSearch Service domain. When you enable zone awareness, OpenSearch Service allocates the nodes and replica index shards that belong to a cluster across two Availability Zones (AZs) in the same region to prevent data loss and minimize downtime in the event of node or data center failure. Don't enable zone awareness if your cluster has no replica index shards or is a single-node cluster. For more information, see [Configuring a multi-AZ domain in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/managedomains-multiaz.html) ."}},"type":"object"},"aws-native:opensearchservice:DomainCognitoOptions":{"properties":{"enabled":{"type":"boolean","description":"Whether to enable or disable Amazon Cognito authentication for OpenSearch Dashboards. See [Amazon Cognito authentication for OpenSearch Dashboards](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/cognito-auth.html) ."},"identityPoolId":{"type":"string","description":"The Amazon Cognito identity pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.\n\nRequired if you enabled Cognito Authentication for OpenSearch Dashboards."},"roleArn":{"type":"string","description":"The `AmazonOpenSearchServiceCognitoAccess` role that allows OpenSearch Service to configure your user pool and identity pool.\n\nRequired if you enabled Cognito Authentication for OpenSearch Dashboards."},"userPoolId":{"type":"string","description":"The Amazon Cognito user pool ID that you want OpenSearch Service to use for OpenSearch Dashboards authentication.\n\nRequired if you enabled Cognito Authentication for OpenSearch Dashboards."}},"type":"object"},"aws-native:opensearchservice:DomainColdStorageOptions":{"properties":{"enabled":{"type":"boolean","description":"Whether to enable or disable cold storage on the domain. You must enable UltraWarm storage to enable cold storage."}},"type":"object"},"aws-native:opensearchservice:DomainDeploymentStrategyOptions":{"properties":{"deploymentStrategy":{"$ref":"#/types/aws-native:opensearchservice:DomainDeploymentStrategyOptionsDeploymentStrategy"}},"type":"object"},"aws-native:opensearchservice:DomainDeploymentStrategyOptionsDeploymentStrategy":{"type":"string","enum":[{"name":"Default","value":"Default"},{"name":"CapacityOptimized","value":"CapacityOptimized"}]},"aws-native:opensearchservice:DomainEbsOptions":{"properties":{"ebsEnabled":{"type":"boolean","description":"Specifies whether Amazon EBS volumes are attached to data nodes in the OpenSearch Service domain."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS) that the volume supports. This property applies only to the `gp3` and provisioned IOPS EBS volume types."},"throughput":{"type":"integer","description":"The throughput (in MiB/s) of the EBS volumes attached to data nodes. Applies only to the `gp3` volume type."},"volumeSize":{"type":"integer","description":"The size (in GiB) of the EBS volume for each data node. The minimum and maximum size of an EBS volume depends on the EBS volume type and the instance type to which it is attached. For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* ."},"volumeType":{"type":"string","description":"The EBS volume type to use with the OpenSearch Service domain. If you choose `gp3` , you must also specify values for `Iops` and `Throughput` . For more information about each type, see [Amazon EBS volume types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html) in the *Amazon EC2 User Guide for Linux Instances* ."}},"type":"object"},"aws-native:opensearchservice:DomainEncryptionAtRestOptions":{"properties":{"enabled":{"type":"boolean","description":"Specify `true` to enable encryption at rest. Required if you enable fine-grained access control in [AdvancedSecurityOptionsInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html) .\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property."},"kmsKeyId":{"type":"string","description":"The KMS key ID. Takes the form `1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a` . Required if you enable encryption at rest.\n\nYou can also use `keyAlias` as a value.\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property."}},"type":"object"},"aws-native:opensearchservice:DomainEndpointOptions":{"properties":{"customEndpoint":{"type":"string","description":"The fully qualified URL for your custom endpoint. Required if you enabled a custom endpoint for the domain."},"customEndpointCertificateArn":{"type":"string","description":"The Certificate Manager ARN for your domain's SSL/TLS certificate. Required if you enabled a custom endpoint for the domain."},"customEndpointEnabled":{"type":"boolean","description":"True to enable a custom endpoint for the domain. If enabled, you must also provide values for `CustomEndpoint` and `CustomEndpointCertificateArn` ."},"enforceHttps":{"type":"boolean","description":"True to require that all traffic to the domain arrive over HTTPS. Required if you enable fine-grained access control in [AdvancedSecurityOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html) ."},"tlsSecurityPolicy":{"type":"string","description":"The minimum TLS version required for traffic to the domain. The policy can be one of the following values:\n\n- *Policy-Min-TLS-1-0-2019-07:* TLS security policy that supports TLS version 1.0 to TLS version 1.2\n- *Policy-Min-TLS-1-2-2019-07:* TLS security policy that supports only TLS version 1.2\n- *Policy-Min-TLS-1-2-PFS-2023-10:* TLS security policy that supports TLS version 1.2 to TLS version 1.3 with perfect forward secrecy cipher suites"}},"type":"object"},"aws-native:opensearchservice:DomainIamFederationOptions":{"properties":{"enabled":{"type":"boolean"},"rolesKey":{"type":"string"},"subjectKey":{"type":"string"}},"type":"object"},"aws-native:opensearchservice:DomainIdentityCenterOptions":{"description":"Options for configuring Identity Center","properties":{"enabledApiAccess":{"type":"boolean","description":"Whether Identity Center is enabled."},"identityCenterApplicationArn":{"type":"string","description":"The ARN of the Identity Center application."},"identityCenterInstanceArn":{"type":"string","description":"The ARN of the Identity Center instance."},"identityStoreId":{"type":"string","description":"The IdentityStoreId for Identity Center options."},"rolesKey":{"$ref":"#/types/aws-native:opensearchservice:DomainRolesKeyIdcType","description":"The roles key for Identity Center options."},"subjectKey":{"$ref":"#/types/aws-native:opensearchservice:DomainSubjectKeyIdcType","description":"The subject key for Identity Center options."}},"type":"object"},"aws-native:opensearchservice:DomainIdp":{"properties":{"entityId":{"type":"string","description":"The unique entity ID of the application in the SAML identity provider."},"metadataContent":{"type":"string","description":"The metadata of the SAML application, in XML format."}},"type":"object","required":["entityId","metadataContent"]},"aws-native:opensearchservice:DomainJwtOptions":{"properties":{"enabled":{"type":"boolean"},"publicKey":{"type":"string"},"rolesKey":{"type":"string"},"subjectKey":{"type":"string"}},"type":"object"},"aws-native:opensearchservice:DomainLogPublishingOption":{"properties":{"cloudWatchLogsLogGroupArn":{"type":"string"},"enabled":{"type":"boolean"}},"type":"object"},"aws-native:opensearchservice:DomainMasterUserOptions":{"properties":{"masterUserArn":{"type":"string","description":"Amazon Resource Name (ARN) for the master user. The ARN can point to an IAM user or role. This property is required for Amazon Cognito to work, and it must match the role configured for Cognito. Only specify if `InternalUserDatabaseEnabled` is false in [AdvancedSecurityOptionsInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html) ."},"masterUserName":{"type":"string","description":"Username for the master user. Only specify if `InternalUserDatabaseEnabled` is true in [AdvancedSecurityOptionsInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html) .\n\nIf you don't want to specify this value directly within the template, you can use a [dynamic reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html) instead."},"masterUserPassword":{"type":"string","description":"Password for the master user. Only specify if `InternalUserDatabaseEnabled` is true in [AdvancedSecurityOptionsInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html) .\n\nIf you don't want to specify this value directly within the template, you can use a [dynamic reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/dynamic-references.html) instead."}},"type":"object"},"aws-native:opensearchservice:DomainNodeConfig":{"properties":{"count":{"type":"integer","description":"The number of nodes of a specific type within the cluster."},"enabled":{"type":"boolean","description":"A boolean value indicating whether a specific node type is active or inactive."},"type":{"type":"string","description":"The instance type of a particular node within the cluster."}},"type":"object"},"aws-native:opensearchservice:DomainNodeOption":{"properties":{"nodeConfig":{"$ref":"#/types/aws-native:opensearchservice:DomainNodeConfig","description":"Configuration options for defining the setup of any node type."},"nodeType":{"$ref":"#/types/aws-native:opensearchservice:DomainNodeOptionNodeType","description":"Defines the type of node, such as coordinating nodes."}},"type":"object"},"aws-native:opensearchservice:DomainNodeOptionNodeType":{"description":"Defines the type of node, such as coordinating nodes.","type":"string","enum":[{"name":"Coordinator","value":"coordinator"}]},"aws-native:opensearchservice:DomainNodeToNodeEncryptionOptions":{"properties":{"enabled":{"type":"boolean","description":"Specifies to enable or disable node-to-node encryption on the domain. Required if you enable fine-grained access control in [AdvancedSecurityOptionsInput](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-advancedsecurityoptionsinput.html) ."}},"type":"object"},"aws-native:opensearchservice:DomainOffPeakWindow":{"properties":{"windowStartTime":{"$ref":"#/types/aws-native:opensearchservice:DomainWindowStartTime","description":"The desired start time for an off-peak maintenance window."}},"type":"object"},"aws-native:opensearchservice:DomainOffPeakWindowOptions":{"properties":{"enabled":{"type":"boolean","description":"Specifies whether off-peak window settings are enabled for the domain."},"offPeakWindow":{"$ref":"#/types/aws-native:opensearchservice:DomainOffPeakWindow","description":"Off-peak window settings for the domain."}},"type":"object"},"aws-native:opensearchservice:DomainRolesKeyIdcType":{"description":"Roles Key Idc type values.","type":"string","enum":[{"name":"GroupName","value":"GroupName"},{"name":"GroupId","value":"GroupId"}]},"aws-native:opensearchservice:DomainS3VectorsEngine":{"properties":{"enabled":{"type":"boolean","description":"Whether to enable S3 vectors engine."}},"type":"object","required":["enabled"]},"aws-native:opensearchservice:DomainSamlOptions":{"properties":{"enabled":{"type":"boolean","description":"True to enable SAML authentication for a domain."},"idp":{"$ref":"#/types/aws-native:opensearchservice:DomainIdp","description":"The SAML Identity Provider's information."},"masterBackendRole":{"type":"string","description":"The backend role that the SAML master user is mapped to."},"masterUserName":{"type":"string","description":"The SAML master user name, which is stored in the domain's internal user database."},"rolesKey":{"type":"string","description":"Element of the SAML assertion to use for backend roles. Default is `roles` ."},"sessionTimeoutMinutes":{"type":"integer","description":"The duration, in minutes, after which a user session becomes inactive. Acceptable values are between 1 and 1440, and the default value is 60."},"subjectKey":{"type":"string","description":"Element of the SAML assertion to use for the user name. Default is `NameID` ."}},"type":"object"},"aws-native:opensearchservice:DomainServerlessVectorAcceleration":{"properties":{"enabled":{"type":"boolean","description":"Whether to enable serverless vector acceleration."}},"type":"object"},"aws-native:opensearchservice:DomainServiceSoftwareOptions":{"properties":{"automatedUpdateDate":{"type":"string","description":"The timestamp, in Epoch time, until which you can manually request a service software update. After this date, we automatically update your service software."},"cancellable":{"type":"boolean","description":"True if you're able to cancel your service software version update. False if you can't cancel your service software update."},"currentVersion":{"type":"string","description":"The current service software version present on the domain."},"description":{"type":"string","description":"A description of the service software update status."},"newVersion":{"type":"string","description":"The new service software version, if one is available."},"optionalDeployment":{"type":"boolean","description":"True if a service software is never automatically updated. False if a service software is automatically updated after the automated update date."},"updateAvailable":{"type":"boolean","description":"True if you're able to update your service software version. False if you can't update your service software version."},"updateStatus":{"type":"string","description":"The status of your service software update."}},"type":"object"},"aws-native:opensearchservice:DomainSnapshotOptions":{"properties":{"automatedSnapshotStartHour":{"type":"integer","description":"The hour in UTC during which the service takes an automated daily snapshot of the indexes in the OpenSearch Service domain. For example, if you specify 0, OpenSearch Service takes an automated snapshot everyday between midnight and 1 am. You can specify a value between 0 and 23."}},"type":"object"},"aws-native:opensearchservice:DomainSoftwareUpdateOptions":{"properties":{"autoSoftwareUpdateEnabled":{"type":"boolean","description":"Specifies whether automatic service software updates are enabled for the domain."}},"type":"object"},"aws-native:opensearchservice:DomainSubjectKeyIdcType":{"description":"Subject Key Idc type values.","type":"string","enum":[{"name":"UserName","value":"UserName"},{"name":"UserId","value":"UserId"},{"name":"Email","value":"Email"}]},"aws-native:opensearchservice:DomainTag":{"properties":{"key":{"type":"string","description":"The value of the tag."},"value":{"type":"string","description":"The key of the tag."}},"type":"object","required":["key","value"]},"aws-native:opensearchservice:DomainVpcOptions":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The list of security group IDs that are associated with the VPC endpoints for the domain. If you don't provide a security group ID, OpenSearch Service uses the default security group for the VPC. To learn more, see [Security groups for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon VPC User Guide* ."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"Provide one subnet ID for each Availability Zone that your domain uses. For example, you must specify three subnet IDs for a three-AZ domain. To learn more, see [VPCs and subnets](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html) in the *Amazon VPC User Guide* .\n\nIf you specify more than one subnet, you must also configure `ZoneAwarenessEnabled` and `ZoneAwarenessConfig` within [ClusterConfig](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-clusterconfig.html) , otherwise you'll see the error \"You must specify exactly one subnet\" during template creation."}},"type":"object"},"aws-native:opensearchservice:DomainWindowStartTime":{"properties":{"hours":{"type":"integer","description":"The start hour of the window in Coordinated Universal Time (UTC), using 24-hour time. For example, 17 refers to 5:00 P.M. UTC. The minimum value is 0 and the maximum value is 23."},"minutes":{"type":"integer","description":"The start minute of the window, in UTC. The minimum value is 0 and the maximum value is 59."}},"type":"object","required":["hours","minutes"]},"aws-native:opensearchservice:DomainZoneAwarenessConfig":{"properties":{"availabilityZoneCount":{"type":"integer","description":"If you enabled multiple Availability Zones (AZs), the number of AZs that you want the domain to use.\n\nValid values are `2` and `3` . Default is 2."}},"type":"object"},"aws-native:opensearchservice:IamIdentityCenterOptionsProperties":{"description":"Options for configuring IAM Identity Center","properties":{"enabled":{"type":"boolean","description":"Whether IAM Identity Center is enabled."},"iamIdentityCenterInstanceArn":{"$ref":"pulumi.json#/Any","description":"The ARN of the IAM Identity Center instance."},"iamRoleForIdentityCenterApplicationArn":{"type":"string","description":"The ARN of the IAM role for Identity Center application."}},"type":"object"},"aws-native:opsworkscm:ServerEngineAttribute":{"properties":{"name":{"type":"string","description":"The name of the engine attribute.\n\n*Attribute name for Chef Automate servers:*\n\n- `CHEF_AUTOMATE_ADMIN_PASSWORD`\n\n*Attribute names for Puppet Enterprise servers:*\n\n- `PUPPET_ADMIN_PASSWORD`\n- `PUPPET_R10K_REMOTE`\n- `PUPPET_R10K_PRIVATE_KEY`"},"value":{"type":"string","description":"The value of the engine attribute.\n\n*Attribute value for Chef Automate servers:*\n\n- `CHEF_AUTOMATE_PIVOTAL_KEY` : A base64-encoded RSA public key. The corresponding private key is required to access the Chef API. You can generate this key by running the following [OpenSSL](https://docs.aws.amazon.com/https://www.openssl.org/) command on Linux-based computers.\n\n`openssl genrsa -out *pivotal_key_file_name* .pem 2048`\n\nOn Windows-based computers, you can use the PuTTYgen utility to generate a base64-encoded RSA private key. For more information, see [PuTTYgen - Key Generator for PuTTY on Windows](https://docs.aws.amazon.com/https://www.ssh.com/ssh/putty/windows/puttygen) on SSH.com.\n\n*Attribute values for Puppet Enterprise servers:*\n\n- `PUPPET_ADMIN_PASSWORD` : An administrator password that you can use to sign in to the Puppet Enterprise console webpage after the server is online. The password must use between 8 and 32 ASCII characters.\n- `PUPPET_R10K_REMOTE` : The r10k remote is the URL of your control repository (for example, ssh://git@your.git-repo.com:user/control-repo.git). Specifying an r10k remote opens TCP port 8170.\n- `PUPPET_R10K_PRIVATE_KEY` : If you are using a private Git repository, add `PUPPET_R10K_PRIVATE_KEY` to specify a PEM-encoded private SSH key."}},"type":"object"},"aws-native:opsworkscm:ServerTag":{"properties":{"key":{"type":"string","description":"A tag key, such as `Stage` or `Name` . A tag key cannot be empty. The key can be a maximum of 127 characters, and can contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : /`"},"value":{"type":"string","description":"An optional tag value, such as `Production` or `test-owcm-server` . The value can be a maximum of 255 characters, and contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : /`"}},"type":"object","required":["key","value"]},"aws-native:organizations:AccountJoinedMethod":{"description":"The method by which the account joined the organization.","type":"string","enum":[{"name":"Invited","value":"INVITED"},{"name":"Created","value":"CREATED"}]},"aws-native:organizations:AccountState":{"description":"The state of the account in the organization.","type":"string","enum":[{"name":"PendingActivation","value":"PENDING_ACTIVATION"},{"name":"Active","value":"ACTIVE"},{"name":"Suspended","value":"SUSPENDED"},{"name":"PendingClosure","value":"PENDING_CLOSURE"},{"name":"Closed","value":"CLOSED"}]},"aws-native:organizations:AccountStatus":{"description":"The status of the account in the organization.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Suspended","value":"SUSPENDED"},{"name":"PendingClosure","value":"PENDING_CLOSURE"}]},"aws-native:organizations:AccountTag":{"description":"A custom key-value pair associated with a resource within your organization.","properties":{"key":{"type":"string","description":"The key identifier, or name, of the tag."},"value":{"type":"string","description":"The string value that's associated with the key of the tag. You can set the value of a tag to an empty string, but you can't set the value of a tag to null."}},"type":"object","required":["key","value"]},"aws-native:organizations:OrganizationFeatureSet":{"description":"Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"ConsolidatedBilling","value":"CONSOLIDATED_BILLING"}]},"aws-native:organizations:OrganizationalUnitTag":{"description":"A custom key-value pair associated with a resource within your organization.","properties":{"key":{"type":"string","description":"The key identifier, or name, of the tag."},"value":{"type":"string","description":"The string value that's associated with the key of the tag. You can set the value of a tag to an empty string, but you can't set the value of a tag to null."}},"type":"object","required":["key","value"]},"aws-native:organizations:PolicyTag":{"description":"A custom key-value pair associated with a resource within your organization.","properties":{"key":{"type":"string","description":"The key identifier, or name, of the tag."},"value":{"type":"string","description":"The string value that's associated with the key of the tag. You can set the value of a tag to an empty string, but you can't set the value of a tag to null."}},"type":"object","required":["key","value"]},"aws-native:organizations:PolicyType":{"description":"The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, BEDROCK_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, INSPECTOR_POLICY, NETWORK_SECURITY_DIRECTOR_POLICY, RESOURCE_CONTROL_POLICY, S3_POLICY, SECURITYHUB_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, UPGRADE_ROLLOUT_POLICY","type":"string","enum":[{"name":"AiservicesOptOutPolicy","value":"AISERVICES_OPT_OUT_POLICY"},{"name":"BackupPolicy","value":"BACKUP_POLICY"},{"name":"BedrockPolicy","value":"BEDROCK_POLICY"},{"name":"ChatbotPolicy","value":"CHATBOT_POLICY"},{"name":"DeclarativePolicyEc2","value":"DECLARATIVE_POLICY_EC2"},{"name":"InspectorPolicy","value":"INSPECTOR_POLICY"},{"name":"NetworkSecurityDirectorPolicy","value":"NETWORK_SECURITY_DIRECTOR_POLICY"},{"name":"ResourceControlPolicy","value":"RESOURCE_CONTROL_POLICY"},{"name":"S3Policy","value":"S3_POLICY"},{"name":"SecurityhubPolicy","value":"SECURITYHUB_POLICY"},{"name":"ServiceControlPolicy","value":"SERVICE_CONTROL_POLICY"},{"name":"TagPolicy","value":"TAG_POLICY"},{"name":"UpgradeRolloutPolicy","value":"UPGRADE_ROLLOUT_POLICY"}]},"aws-native:organizations:ResourcePolicyTag":{"description":"A custom key-value pair associated with a resource within your organization.","properties":{"key":{"type":"string","description":"The key identifier, or name, of the tag."},"value":{"type":"string","description":"The string value that's associated with the key of the tag. You can set the value of a tag to an empty string, but you can't set the value of a tag to null."}},"type":"object","required":["key","value"]},"aws-native:osis:PipelineBufferOptions":{"description":"Key-value pairs to configure buffering.","properties":{"persistentBufferEnabled":{"type":"boolean","description":"Whether persistent buffering should be enabled."}},"type":"object","required":["persistentBufferEnabled"]},"aws-native:osis:PipelineEncryptionAtRestOptions":{"description":"Key-value pairs to configure encryption at rest.","properties":{"kmsKeyArn":{"type":"string","description":"The KMS key to use for encrypting data. By default an AWS owned key is used"}},"type":"object","required":["kmsKeyArn"]},"aws-native:osis:PipelineLogPublishingOptions":{"description":"Key-value pairs to configure log publishing.","properties":{"cloudWatchLogDestination":{"$ref":"#/types/aws-native:osis:PipelineLogPublishingOptionsCloudWatchLogDestinationProperties","description":"The destination for OpenSearch Ingestion Service logs sent to Amazon CloudWatch."},"isLoggingEnabled":{"type":"boolean","description":"Whether logs should be published."}},"type":"object"},"aws-native:osis:PipelineLogPublishingOptionsCloudWatchLogDestinationProperties":{"description":"The destination for OpenSearch Ingestion Service logs sent to Amazon CloudWatch.","properties":{"logGroup":{"type":"string"}},"type":"object","required":["logGroup"]},"aws-native:osis:PipelineResourcePolicy":{"properties":{"policy":{"$ref":"pulumi.json#/Any"}},"type":"object","required":["policy"]},"aws-native:osis:PipelineTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:osis:PipelineVpcEndpoint":{"description":"An OpenSearch Ingestion Service-managed VPC endpoint that will access one or more pipelines.","properties":{"vpcEndpointId":{"type":"string","description":"The unique identifier of the endpoint."},"vpcId":{"type":"string","description":"The ID for your VPC. AWS Privatelink generates this value when you create a VPC."},"vpcOptions":{"$ref":"#/types/aws-native:osis:PipelineVpcOptions","description":"Information about the VPC, including associated subnets and security groups."}},"type":"object"},"aws-native:osis:PipelineVpcOptions":{"description":"Container for the values required to configure VPC access for the pipeline. If you don't specify these values, OpenSearch Ingestion Service creates the pipeline with a public endpoint.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security groups associated with the VPC endpoint."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs associated with the VPC endpoint."},"vpcAttachmentOptions":{"$ref":"#/types/aws-native:osis:PipelineVpcOptionsVpcAttachmentOptionsProperties","description":"Options for attaching a VPC to the pipeline."},"vpcEndpointManagement":{"$ref":"#/types/aws-native:osis:PipelineVpcOptionsVpcEndpointManagement","description":"Defines whether you or Amazon OpenSearch Ingestion service create and manage the VPC endpoint configured for the pipeline."}},"type":"object","required":["subnetIds"]},"aws-native:osis:PipelineVpcOptionsVpcAttachmentOptionsProperties":{"description":"Options for attaching a VPC to the pipeline.","properties":{"attachToVpc":{"type":"boolean","description":"Whether the pipeline should be attached to the provided VPC"},"cidrBlock":{"type":"string","description":"The CIDR block to be reserved for OpenSearch Ingestion to create elastic network interfaces (ENIs)."}},"type":"object","required":["attachToVpc","cidrBlock"]},"aws-native:osis:PipelineVpcOptionsVpcEndpointManagement":{"description":"Defines whether you or Amazon OpenSearch Ingestion service create and manage the VPC endpoint configured for the pipeline.","type":"string","enum":[{"name":"Customer","value":"CUSTOMER"},{"name":"Service","value":"SERVICE"}]},"aws-native:panorama:ApplicationInstanceHealthStatus":{"type":"string","enum":[{"name":"Running","value":"RUNNING"},{"name":"Error","value":"ERROR"},{"name":"NotAvailable","value":"NOT_AVAILABLE"}]},"aws-native:panorama:ApplicationInstanceManifestOverridesPayload":{"description":"Parameter overrides for an application instance. This is a JSON document that has a single key (``PayloadData``) where the value is an escaped string representation of the overrides document.","properties":{"payloadData":{"type":"string","description":"The overrides document."}},"type":"object"},"aws-native:panorama:ApplicationInstanceManifestPayload":{"description":"A application verion's manifest file. This is a JSON document that has a single key (``PayloadData``) where the value is an escaped string representation of the application manifest (``graph.json``). This file is located in the ``graphs`` folder in your application source.","properties":{"payloadData":{"type":"string","description":"The application manifest."}},"type":"object"},"aws-native:panorama:ApplicationInstanceStatus":{"type":"string","enum":[{"name":"DeploymentPending","value":"DEPLOYMENT_PENDING"},{"name":"DeploymentRequested","value":"DEPLOYMENT_REQUESTED"},{"name":"DeploymentInProgress","value":"DEPLOYMENT_IN_PROGRESS"},{"name":"DeploymentError","value":"DEPLOYMENT_ERROR"},{"name":"DeploymentSucceeded","value":"DEPLOYMENT_SUCCEEDED"},{"name":"RemovalPending","value":"REMOVAL_PENDING"},{"name":"RemovalRequested","value":"REMOVAL_REQUESTED"},{"name":"RemovalInProgress","value":"REMOVAL_IN_PROGRESS"},{"name":"RemovalFailed","value":"REMOVAL_FAILED"},{"name":"RemovalSucceeded","value":"REMOVAL_SUCCEEDED"}]},"aws-native:panorama:ApplicationInstanceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:panorama:PackageStorageLocation":{"description":"A storage location.","properties":{"binaryPrefixLocation":{"type":"string","description":"The location's binary prefix."},"bucket":{"type":"string","description":"The location's bucket."},"generatedPrefixLocation":{"type":"string","description":"The location's generated prefix."},"manifestPrefixLocation":{"type":"string","description":"The location's manifest prefix."},"repoPrefixLocation":{"type":"string","description":"The location's repo prefix."}},"type":"object"},"aws-native:panorama:PackageTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:panorama:PackageVersionStatus":{"type":"string","enum":[{"name":"RegisterPending","value":"REGISTER_PENDING"},{"name":"RegisterCompleted","value":"REGISTER_COMPLETED"},{"name":"Failed","value":"FAILED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:paymentcryptography:KeyAlgorithm":{"type":"string","enum":[{"name":"Tdes2key","value":"TDES_2KEY"},{"name":"Tdes3key","value":"TDES_3KEY"},{"name":"Aes128","value":"AES_128"},{"name":"Aes192","value":"AES_192"},{"name":"Aes256","value":"AES_256"},{"name":"HmacSha256","value":"HMAC_SHA256"},{"name":"HmacSha384","value":"HMAC_SHA384"},{"name":"HmacSha512","value":"HMAC_SHA512"},{"name":"HmacSha224","value":"HMAC_SHA224"},{"name":"Rsa2048","value":"RSA_2048"},{"name":"Rsa3072","value":"RSA_3072"},{"name":"Rsa4096","value":"RSA_4096"},{"name":"EccNistP256","value":"ECC_NIST_P256"},{"name":"EccNistP384","value":"ECC_NIST_P384"},{"name":"EccNistP521","value":"ECC_NIST_P521"}]},"aws-native:paymentcryptography:KeyAttributes":{"properties":{"keyAlgorithm":{"$ref":"#/types/aws-native:paymentcryptography:KeyAlgorithm","description":"The key algorithm to be use during creation of an AWS Payment Cryptography key.\n\nFor symmetric keys, AWS Payment Cryptography supports `AES` and `TDES` algorithms. For asymmetric keys, AWS Payment Cryptography supports `RSA` and `ECC_NIST` algorithms."},"keyClass":{"$ref":"#/types/aws-native:paymentcryptography:KeyClass","description":"The type of AWS Payment Cryptography key to create, which determines the classification of the cryptographic method and whether AWS Payment Cryptography key contains a symmetric key or an asymmetric key pair."},"keyModesOfUse":{"$ref":"#/types/aws-native:paymentcryptography:KeyModesOfUse","description":"The list of cryptographic operations that you can perform using the key."},"keyUsage":{"$ref":"#/types/aws-native:paymentcryptography:KeyUsage","description":"The cryptographic usage of an AWS Payment Cryptography key as defined in section A.5.2 of the TR-31 spec."}},"type":"object","required":["keyAlgorithm","keyClass","keyModesOfUse","keyUsage"]},"aws-native:paymentcryptography:KeyCheckValueAlgorithm":{"type":"string","enum":[{"name":"Cmac","value":"CMAC"},{"name":"AnsiX924","value":"ANSI_X9_24"},{"name":"Hmac","value":"HMAC"},{"name":"Sha1","value":"SHA_1"}]},"aws-native:paymentcryptography:KeyClass":{"type":"string","enum":[{"name":"SymmetricKey","value":"SYMMETRIC_KEY"},{"name":"AsymmetricKeyPair","value":"ASYMMETRIC_KEY_PAIR"},{"name":"PrivateKey","value":"PRIVATE_KEY"},{"name":"PublicKey","value":"PUBLIC_KEY"}]},"aws-native:paymentcryptography:KeyDeriveKeyUsage":{"type":"string","enum":[{"name":"Tr31b0BaseDerivationKey","value":"TR31_B0_BASE_DERIVATION_KEY"},{"name":"Tr31c0CardVerificationKey","value":"TR31_C0_CARD_VERIFICATION_KEY"},{"name":"Tr31d0SymmetricDataEncryptionKey","value":"TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY"},{"name":"Tr31e0EmvMkeyAppCryptograms","value":"TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS"},{"name":"Tr31e1EmvMkeyConfidentiality","value":"TR31_E1_EMV_MKEY_CONFIDENTIALITY"},{"name":"Tr31e2EmvMkeyIntegrity","value":"TR31_E2_EMV_MKEY_INTEGRITY"},{"name":"Tr31e4EmvMkeyDynamicNumbers","value":"TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS"},{"name":"Tr31e5EmvMkeyCardPersonalization","value":"TR31_E5_EMV_MKEY_CARD_PERSONALIZATION"},{"name":"Tr31e6EmvMkeyOther","value":"TR31_E6_EMV_MKEY_OTHER"},{"name":"Tr31k0KeyEncryptionKey","value":"TR31_K0_KEY_ENCRYPTION_KEY"},{"name":"Tr31k1KeyBlockProtectionKey","value":"TR31_K1_KEY_BLOCK_PROTECTION_KEY"},{"name":"Tr31m3Iso97973MacKey","value":"TR31_M3_ISO_9797_3_MAC_KEY"},{"name":"Tr31m1Iso97971MacKey","value":"TR31_M1_ISO_9797_1_MAC_KEY"},{"name":"Tr31m6Iso97975CmacKey","value":"TR31_M6_ISO_9797_5_CMAC_KEY"},{"name":"Tr31m7HmacKey","value":"TR31_M7_HMAC_KEY"},{"name":"Tr31p0PinEncryptionKey","value":"TR31_P0_PIN_ENCRYPTION_KEY"},{"name":"Tr31p1PinGenerationKey","value":"TR31_P1_PIN_GENERATION_KEY"},{"name":"Tr31v1Ibm3624PinVerificationKey","value":"TR31_V1_IBM3624_PIN_VERIFICATION_KEY"},{"name":"Tr31v2VisaPinVerificationKey","value":"TR31_V2_VISA_PIN_VERIFICATION_KEY"}]},"aws-native:paymentcryptography:KeyModesOfUse":{"properties":{"decrypt":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used to decrypt data."},"deriveKey":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used to derive new keys."},"encrypt":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used to encrypt data."},"generate":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used to generate and verify other card and PIN verification keys."},"noRestrictions":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key has no special restrictions other than the restrictions implied by `KeyUsage` ."},"sign":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used for signing."},"unwrap":{"type":"boolean"},"verify":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used to verify signatures."},"wrap":{"type":"boolean","description":"Specifies whether an AWS Payment Cryptography key can be used to wrap other keys."}},"type":"object"},"aws-native:paymentcryptography:KeyOrigin":{"description":"Defines the source of a key","type":"string","enum":[{"name":"External","value":"EXTERNAL"},{"name":"AwsPaymentCryptography","value":"AWS_PAYMENT_CRYPTOGRAPHY"}]},"aws-native:paymentcryptography:KeyReplicationState":{"description":"Defines the replication state of a key","type":"string","enum":[{"name":"InProgress","value":"IN_PROGRESS"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"Failed","value":"FAILED"},{"name":"Synchronized","value":"SYNCHRONIZED"}]},"aws-native:paymentcryptography:KeyReplicationStatusType":{"properties":{"status":{"$ref":"#/types/aws-native:paymentcryptography:KeyReplicationState","description":"The current status of key replication in this AWS Region .\n\nThis field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as `SYNCRHONIZED` , `IN_PROGRESS` , `DELETE_IN_PROGRESS` , or `FAILED` . This provides visibility into the replication process for monitoring and troubleshooting purposes."},"statusMessage":{"type":"string","description":"A message that provides additional information about the current replication status of the key.\n\nThis field contains details about any issues or progress updates related to key replication operations. It may include information about replication failures, synchronization status, or other operational details."}},"type":"object","required":["status"]},"aws-native:paymentcryptography:KeyState":{"description":"Defines the state of a key","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"CreateComplete","value":"CREATE_COMPLETE"},{"name":"DeletePending","value":"DELETE_PENDING"},{"name":"DeleteComplete","value":"DELETE_COMPLETE"}]},"aws-native:paymentcryptography:KeyTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:paymentcryptography:KeyUsage":{"type":"string","enum":[{"name":"Tr31b0BaseDerivationKey","value":"TR31_B0_BASE_DERIVATION_KEY"},{"name":"Tr31c0CardVerificationKey","value":"TR31_C0_CARD_VERIFICATION_KEY"},{"name":"Tr31d0SymmetricDataEncryptionKey","value":"TR31_D0_SYMMETRIC_DATA_ENCRYPTION_KEY"},{"name":"Tr31d1AsymmetricKeyForDataEncryption","value":"TR31_D1_ASYMMETRIC_KEY_FOR_DATA_ENCRYPTION"},{"name":"Tr31e0EmvMkeyAppCryptograms","value":"TR31_E0_EMV_MKEY_APP_CRYPTOGRAMS"},{"name":"Tr31e1EmvMkeyConfidentiality","value":"TR31_E1_EMV_MKEY_CONFIDENTIALITY"},{"name":"Tr31e2EmvMkeyIntegrity","value":"TR31_E2_EMV_MKEY_INTEGRITY"},{"name":"Tr31e4EmvMkeyDynamicNumbers","value":"TR31_E4_EMV_MKEY_DYNAMIC_NUMBERS"},{"name":"Tr31e5EmvMkeyCardPersonalization","value":"TR31_E5_EMV_MKEY_CARD_PERSONALIZATION"},{"name":"Tr31e6EmvMkeyOther","value":"TR31_E6_EMV_MKEY_OTHER"},{"name":"Tr31k0KeyEncryptionKey","value":"TR31_K0_KEY_ENCRYPTION_KEY"},{"name":"Tr31k1KeyBlockProtectionKey","value":"TR31_K1_KEY_BLOCK_PROTECTION_KEY"},{"name":"Tr31k3AsymmetricKeyForKeyAgreement","value":"TR31_K3_ASYMMETRIC_KEY_FOR_KEY_AGREEMENT"},{"name":"Tr31m0Iso16609MacKey","value":"TR31_M0_ISO_16609_MAC_KEY"},{"name":"Tr31m3Iso97973MacKey","value":"TR31_M3_ISO_9797_3_MAC_KEY"},{"name":"Tr31m1Iso97971MacKey","value":"TR31_M1_ISO_9797_1_MAC_KEY"},{"name":"Tr31m6Iso97975CmacKey","value":"TR31_M6_ISO_9797_5_CMAC_KEY"},{"name":"Tr31m7HmacKey","value":"TR31_M7_HMAC_KEY"},{"name":"Tr31p0PinEncryptionKey","value":"TR31_P0_PIN_ENCRYPTION_KEY"},{"name":"Tr31p1PinGenerationKey","value":"TR31_P1_PIN_GENERATION_KEY"},{"name":"Tr31s0AsymmetricKeyForDigitalSignature","value":"TR31_S0_ASYMMETRIC_KEY_FOR_DIGITAL_SIGNATURE"},{"name":"Tr31v1Ibm3624PinVerificationKey","value":"TR31_V1_IBM3624_PIN_VERIFICATION_KEY"},{"name":"Tr31v2VisaPinVerificationKey","value":"TR31_V2_VISA_PIN_VERIFICATION_KEY"},{"name":"Tr31k2Tr34AsymmetricKey","value":"TR31_K2_TR34_ASYMMETRIC_KEY"}]},"aws-native:pcaconnectorad:ConnectorVpcInformation":{"properties":{"ipAddressType":{"$ref":"#/types/aws-native:pcaconnectorad:ConnectorVpcInformationIpAddressType","description":"The VPC IP address type."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security groups used with the connector. You can use a maximum of 4 security groups with a connector."}},"type":"object","required":["securityGroupIds"]},"aws-native:pcaconnectorad:ConnectorVpcInformationIpAddressType":{"description":"The VPC IP address type.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:pcaconnectorad:TemplateApplicationPolicies":{"properties":{"critical":{"type":"boolean"},"policies":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:pcaconnectorad:TemplateApplicationPolicy0Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateApplicationPolicy1Properties"}]}}},"type":"object","required":["policies"]},"aws-native:pcaconnectorad:TemplateApplicationPolicy0Properties":{"properties":{"policyType":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateApplicationPolicyType"}},"type":"object","required":["policyType"]},"aws-native:pcaconnectorad:TemplateApplicationPolicy1Properties":{"properties":{"policyObjectIdentifier":{"type":"string"}},"type":"object","required":["policyObjectIdentifier"]},"aws-native:pcaconnectorad:TemplateApplicationPolicyType":{"type":"string","enum":[{"name":"AllApplicationPolicies","value":"ALL_APPLICATION_POLICIES"},{"name":"AnyPurpose","value":"ANY_PURPOSE"},{"name":"AttestationIdentityKeyCertificate","value":"ATTESTATION_IDENTITY_KEY_CERTIFICATE"},{"name":"CertificateRequestAgent","value":"CERTIFICATE_REQUEST_AGENT"},{"name":"ClientAuthentication","value":"CLIENT_AUTHENTICATION"},{"name":"CodeSigning","value":"CODE_SIGNING"},{"name":"CtlUsage","value":"CTL_USAGE"},{"name":"DigitalRights","value":"DIGITAL_RIGHTS"},{"name":"DirectoryServiceEmailReplication","value":"DIRECTORY_SERVICE_EMAIL_REPLICATION"},{"name":"DisallowedList","value":"DISALLOWED_LIST"},{"name":"DnsServerTrust","value":"DNS_SERVER_TRUST"},{"name":"DocumentEncryption","value":"DOCUMENT_ENCRYPTION"},{"name":"DocumentSigning","value":"DOCUMENT_SIGNING"},{"name":"DynamicCodeGenerator","value":"DYNAMIC_CODE_GENERATOR"},{"name":"EarlyLaunchAntimalwareDriver","value":"EARLY_LAUNCH_ANTIMALWARE_DRIVER"},{"name":"EmbeddedWindowsSystemComponentVerification","value":"EMBEDDED_WINDOWS_SYSTEM_COMPONENT_VERIFICATION"},{"name":"Enclave","value":"ENCLAVE"},{"name":"EncryptingFileSystem","value":"ENCRYPTING_FILE_SYSTEM"},{"name":"EndorsementKeyCertificate","value":"ENDORSEMENT_KEY_CERTIFICATE"},{"name":"FileRecovery","value":"FILE_RECOVERY"},{"name":"HalExtension","value":"HAL_EXTENSION"},{"name":"IpSecurityEndSystem","value":"IP_SECURITY_END_SYSTEM"},{"name":"IpSecurityIkeIntermediate","value":"IP_SECURITY_IKE_INTERMEDIATE"},{"name":"IpSecurityTunnelTermination","value":"IP_SECURITY_TUNNEL_TERMINATION"},{"name":"IpSecurityUser","value":"IP_SECURITY_USER"},{"name":"IsolatedUserMode","value":"ISOLATED_USER_MODE"},{"name":"KdcAuthentication","value":"KDC_AUTHENTICATION"},{"name":"KernelModeCodeSigning","value":"KERNEL_MODE_CODE_SIGNING"},{"name":"KeyPackLicenses","value":"KEY_PACK_LICENSES"},{"name":"KeyRecovery","value":"KEY_RECOVERY"},{"name":"KeyRecoveryAgent","value":"KEY_RECOVERY_AGENT"},{"name":"LicenseServerVerification","value":"LICENSE_SERVER_VERIFICATION"},{"name":"LifetimeSigning","value":"LIFETIME_SIGNING"},{"name":"MicrosoftPublisher","value":"MICROSOFT_PUBLISHER"},{"name":"MicrosoftTimeStamping","value":"MICROSOFT_TIME_STAMPING"},{"name":"MicrosoftTrustListSigning","value":"MICROSOFT_TRUST_LIST_SIGNING"},{"name":"OcspSigning","value":"OCSP_SIGNING"},{"name":"OemWindowsSystemComponentVerification","value":"OEM_WINDOWS_SYSTEM_COMPONENT_VERIFICATION"},{"name":"PlatformCertificate","value":"PLATFORM_CERTIFICATE"},{"name":"PreviewBuildSigning","value":"PREVIEW_BUILD_SIGNING"},{"name":"PrivateKeyArchival","value":"PRIVATE_KEY_ARCHIVAL"},{"name":"ProtectedProcessLightVerification","value":"PROTECTED_PROCESS_LIGHT_VERIFICATION"},{"name":"ProtectedProcessVerification","value":"PROTECTED_PROCESS_VERIFICATION"},{"name":"QualifiedSubordination","value":"QUALIFIED_SUBORDINATION"},{"name":"RevokedListSigner","value":"REVOKED_LIST_SIGNER"},{"name":"RootProgramAutoUpdateCaRevocation","value":"ROOT_PROGRAM_AUTO_UPDATE_CA_REVOCATION"},{"name":"RootProgramAutoUpdateEndRevocation","value":"ROOT_PROGRAM_AUTO_UPDATE_END_REVOCATION"},{"name":"RootProgramNoOscpFailoverToCrl","value":"ROOT_PROGRAM_NO_OSCP_FAILOVER_TO_CRL"},{"name":"RootListSigner","value":"ROOT_LIST_SIGNER"},{"name":"SecureEmail","value":"SECURE_EMAIL"},{"name":"ServerAuthentication","value":"SERVER_AUTHENTICATION"},{"name":"SmartCardLogin","value":"SMART_CARD_LOGIN"},{"name":"SpcEncryptedDigestRetryCount","value":"SPC_ENCRYPTED_DIGEST_RETRY_COUNT"},{"name":"SpcRelaxedPeMarkerCheck","value":"SPC_RELAXED_PE_MARKER_CHECK"},{"name":"TimeStamping","value":"TIME_STAMPING"},{"name":"WindowsHardwareDriverAttestedVerification","value":"WINDOWS_HARDWARE_DRIVER_ATTESTED_VERIFICATION"},{"name":"WindowsHardwareDriverExtendedVerification","value":"WINDOWS_HARDWARE_DRIVER_EXTENDED_VERIFICATION"},{"name":"WindowsHardwareDriverVerification","value":"WINDOWS_HARDWARE_DRIVER_VERIFICATION"},{"name":"WindowsHelloRecoveryKeyEncryption","value":"WINDOWS_HELLO_RECOVERY_KEY_ENCRYPTION"},{"name":"WindowsKitsComponent","value":"WINDOWS_KITS_COMPONENT"},{"name":"WindowsRtVerification","value":"WINDOWS_RT_VERIFICATION"},{"name":"WindowsSoftwareExtensionVerification","value":"WINDOWS_SOFTWARE_EXTENSION_VERIFICATION"},{"name":"WindowsStore","value":"WINDOWS_STORE"},{"name":"WindowsSystemComponentVerification","value":"WINDOWS_SYSTEM_COMPONENT_VERIFICATION"},{"name":"WindowsTcbComponent","value":"WINDOWS_TCB_COMPONENT"},{"name":"WindowsThirdPartyApplicationComponent","value":"WINDOWS_THIRD_PARTY_APPLICATION_COMPONENT"},{"name":"WindowsUpdate","value":"WINDOWS_UPDATE"}]},"aws-native:pcaconnectorad:TemplateCertificateValidity":{"properties":{"renewalPeriod":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateValidityPeriod"},"validityPeriod":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateValidityPeriod"}},"type":"object","required":["renewalPeriod","validityPeriod"]},"aws-native:pcaconnectorad:TemplateClientCompatibilityV2":{"type":"string","enum":[{"name":"WindowsServer2003","value":"WINDOWS_SERVER_2003"},{"name":"WindowsServer2008","value":"WINDOWS_SERVER_2008"},{"name":"WindowsServer2008r2","value":"WINDOWS_SERVER_2008_R2"},{"name":"WindowsServer2012","value":"WINDOWS_SERVER_2012"},{"name":"WindowsServer2012r2","value":"WINDOWS_SERVER_2012_R2"},{"name":"WindowsServer2016","value":"WINDOWS_SERVER_2016"}]},"aws-native:pcaconnectorad:TemplateClientCompatibilityV3":{"type":"string","enum":[{"name":"WindowsServer2008","value":"WINDOWS_SERVER_2008"},{"name":"WindowsServer2008r2","value":"WINDOWS_SERVER_2008_R2"},{"name":"WindowsServer2012","value":"WINDOWS_SERVER_2012"},{"name":"WindowsServer2012r2","value":"WINDOWS_SERVER_2012_R2"},{"name":"WindowsServer2016","value":"WINDOWS_SERVER_2016"}]},"aws-native:pcaconnectorad:TemplateClientCompatibilityV4":{"type":"string","enum":[{"name":"WindowsServer2012","value":"WINDOWS_SERVER_2012"},{"name":"WindowsServer2012r2","value":"WINDOWS_SERVER_2012_R2"},{"name":"WindowsServer2016","value":"WINDOWS_SERVER_2016"}]},"aws-native:pcaconnectorad:TemplateDefinition0Properties":{"properties":{"templateV2":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateV2"}},"type":"object","required":["templateV2"]},"aws-native:pcaconnectorad:TemplateDefinition1Properties":{"properties":{"templateV3":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateV3"}},"type":"object","required":["templateV3"]},"aws-native:pcaconnectorad:TemplateDefinition2Properties":{"properties":{"templateV4":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateV4"}},"type":"object","required":["templateV4"]},"aws-native:pcaconnectorad:TemplateEnrollmentFlagsV2":{"properties":{"enableKeyReuseOnNtTokenKeysetStorageFull":{"type":"boolean"},"includeSymmetricAlgorithms":{"type":"boolean"},"noSecurityExtension":{"type":"boolean"},"removeInvalidCertificateFromPersonalStore":{"type":"boolean"},"userInteractionRequired":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateEnrollmentFlagsV3":{"properties":{"enableKeyReuseOnNtTokenKeysetStorageFull":{"type":"boolean"},"includeSymmetricAlgorithms":{"type":"boolean"},"noSecurityExtension":{"type":"boolean"},"removeInvalidCertificateFromPersonalStore":{"type":"boolean"},"userInteractionRequired":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateEnrollmentFlagsV4":{"properties":{"enableKeyReuseOnNtTokenKeysetStorageFull":{"type":"boolean"},"includeSymmetricAlgorithms":{"type":"boolean"},"noSecurityExtension":{"type":"boolean"},"removeInvalidCertificateFromPersonalStore":{"type":"boolean"},"userInteractionRequired":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateExtensionsV2":{"properties":{"applicationPolicies":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateApplicationPolicies"},"keyUsage":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsage"}},"type":"object","required":["keyUsage"]},"aws-native:pcaconnectorad:TemplateExtensionsV3":{"properties":{"applicationPolicies":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateApplicationPolicies"},"keyUsage":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsage"}},"type":"object","required":["keyUsage"]},"aws-native:pcaconnectorad:TemplateExtensionsV4":{"properties":{"applicationPolicies":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateApplicationPolicies"},"keyUsage":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsage"}},"type":"object","required":["keyUsage"]},"aws-native:pcaconnectorad:TemplateGeneralFlagsV2":{"properties":{"autoEnrollment":{"type":"boolean"},"machineType":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateGeneralFlagsV3":{"properties":{"autoEnrollment":{"type":"boolean"},"machineType":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateGeneralFlagsV4":{"properties":{"autoEnrollment":{"type":"boolean"},"machineType":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateGroupAccessControlEntryAccessRight":{"type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Deny","value":"DENY"}]},"aws-native:pcaconnectorad:TemplateGroupAccessControlEntryAccessRights":{"properties":{"autoEnroll":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGroupAccessControlEntryAccessRight","description":"Allow or deny an Active Directory group from autoenrolling certificates issued against a template. The Active Directory group must be allowed to enroll to allow autoenrollment"},"enroll":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGroupAccessControlEntryAccessRight","description":"Allow or deny an Active Directory group from enrolling certificates issued against a template."}},"type":"object"},"aws-native:pcaconnectorad:TemplateHashAlgorithm":{"type":"string","enum":[{"name":"Sha256","value":"SHA256"},{"name":"Sha384","value":"SHA384"},{"name":"Sha512","value":"SHA512"}]},"aws-native:pcaconnectorad:TemplateKeySpec":{"type":"string","enum":[{"name":"KeyExchange","value":"KEY_EXCHANGE"},{"name":"Signature","value":"SIGNATURE"}]},"aws-native:pcaconnectorad:TemplateKeyUsage":{"properties":{"critical":{"type":"boolean"},"usageFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsageFlags"}},"type":"object","required":["usageFlags"]},"aws-native:pcaconnectorad:TemplateKeyUsageFlags":{"properties":{"dataEncipherment":{"type":"boolean"},"digitalSignature":{"type":"boolean"},"keyAgreement":{"type":"boolean"},"keyEncipherment":{"type":"boolean"},"nonRepudiation":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateKeyUsageProperty0Properties":{"properties":{"propertyType":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsagePropertyType"}},"type":"object","required":["propertyType"]},"aws-native:pcaconnectorad:TemplateKeyUsageProperty1Properties":{"properties":{"propertyFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsagePropertyFlags"}},"type":"object","required":["propertyFlags"]},"aws-native:pcaconnectorad:TemplateKeyUsagePropertyFlags":{"properties":{"decrypt":{"type":"boolean"},"keyAgreement":{"type":"boolean"},"sign":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateKeyUsagePropertyType":{"type":"string","enum":[{"name":"All","value":"ALL"}]},"aws-native:pcaconnectorad:TemplatePrivateKeyAlgorithm":{"type":"string","enum":[{"name":"Rsa","value":"RSA"},{"name":"EcdhP256","value":"ECDH_P256"},{"name":"EcdhP384","value":"ECDH_P384"},{"name":"EcdhP521","value":"ECDH_P521"}]},"aws-native:pcaconnectorad:TemplatePrivateKeyAttributesV2":{"properties":{"cryptoProviders":{"type":"array","items":{"type":"string"}},"keySpec":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeySpec"},"minimalKeyLength":{"type":"number"}},"type":"object","required":["keySpec","minimalKeyLength"]},"aws-native:pcaconnectorad:TemplatePrivateKeyAttributesV3":{"properties":{"algorithm":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyAlgorithm"},"cryptoProviders":{"type":"array","items":{"type":"string"}},"keySpec":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeySpec"},"keyUsageProperty":{"oneOf":[{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsageProperty0Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsageProperty1Properties"}]},"minimalKeyLength":{"type":"number"}},"type":"object","required":["algorithm","keySpec","keyUsageProperty","minimalKeyLength"]},"aws-native:pcaconnectorad:TemplatePrivateKeyAttributesV4":{"properties":{"algorithm":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyAlgorithm"},"cryptoProviders":{"type":"array","items":{"type":"string"}},"keySpec":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeySpec"},"keyUsageProperty":{"oneOf":[{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsageProperty0Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateKeyUsageProperty1Properties"}]},"minimalKeyLength":{"type":"number"}},"type":"object","required":["keySpec","minimalKeyLength"]},"aws-native:pcaconnectorad:TemplatePrivateKeyFlagsV2":{"properties":{"clientVersion":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateClientCompatibilityV2"},"exportableKey":{"type":"boolean"},"strongKeyProtectionRequired":{"type":"boolean"}},"type":"object","required":["clientVersion"]},"aws-native:pcaconnectorad:TemplatePrivateKeyFlagsV3":{"properties":{"clientVersion":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateClientCompatibilityV3"},"exportableKey":{"type":"boolean"},"requireAlternateSignatureAlgorithm":{"type":"boolean"},"strongKeyProtectionRequired":{"type":"boolean"}},"type":"object","required":["clientVersion"]},"aws-native:pcaconnectorad:TemplatePrivateKeyFlagsV4":{"properties":{"clientVersion":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateClientCompatibilityV4"},"exportableKey":{"type":"boolean"},"requireAlternateSignatureAlgorithm":{"type":"boolean"},"requireSameKeyRenewal":{"type":"boolean"},"strongKeyProtectionRequired":{"type":"boolean"},"useLegacyProvider":{"type":"boolean"}},"type":"object","required":["clientVersion"]},"aws-native:pcaconnectorad:TemplateSubjectNameFlagsV2":{"properties":{"requireCommonName":{"type":"boolean"},"requireDirectoryPath":{"type":"boolean"},"requireDnsAsCn":{"type":"boolean"},"requireEmail":{"type":"boolean"},"sanRequireDirectoryGuid":{"type":"boolean"},"sanRequireDns":{"type":"boolean"},"sanRequireDomainDns":{"type":"boolean"},"sanRequireEmail":{"type":"boolean"},"sanRequireSpn":{"type":"boolean"},"sanRequireUpn":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateSubjectNameFlagsV3":{"properties":{"requireCommonName":{"type":"boolean"},"requireDirectoryPath":{"type":"boolean"},"requireDnsAsCn":{"type":"boolean"},"requireEmail":{"type":"boolean"},"sanRequireDirectoryGuid":{"type":"boolean"},"sanRequireDns":{"type":"boolean"},"sanRequireDomainDns":{"type":"boolean"},"sanRequireEmail":{"type":"boolean"},"sanRequireSpn":{"type":"boolean"},"sanRequireUpn":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateSubjectNameFlagsV4":{"properties":{"requireCommonName":{"type":"boolean"},"requireDirectoryPath":{"type":"boolean"},"requireDnsAsCn":{"type":"boolean"},"requireEmail":{"type":"boolean"},"sanRequireDirectoryGuid":{"type":"boolean"},"sanRequireDns":{"type":"boolean"},"sanRequireDomainDns":{"type":"boolean"},"sanRequireEmail":{"type":"boolean"},"sanRequireSpn":{"type":"boolean"},"sanRequireUpn":{"type":"boolean"}},"type":"object"},"aws-native:pcaconnectorad:TemplateV2":{"properties":{"certificateValidity":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateCertificateValidity"},"enrollmentFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateEnrollmentFlagsV2"},"extensions":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateExtensionsV2"},"generalFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGeneralFlagsV2"},"privateKeyAttributes":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyAttributesV2"},"privateKeyFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyFlagsV2"},"subjectNameFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateSubjectNameFlagsV2"},"supersededTemplates":{"type":"array","items":{"type":"string"}}},"type":"object","required":["certificateValidity","enrollmentFlags","extensions","generalFlags","privateKeyAttributes","privateKeyFlags","subjectNameFlags"]},"aws-native:pcaconnectorad:TemplateV3":{"properties":{"certificateValidity":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateCertificateValidity"},"enrollmentFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateEnrollmentFlagsV3"},"extensions":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateExtensionsV3"},"generalFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGeneralFlagsV3"},"hashAlgorithm":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateHashAlgorithm"},"privateKeyAttributes":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyAttributesV3"},"privateKeyFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyFlagsV3"},"subjectNameFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateSubjectNameFlagsV3"},"supersededTemplates":{"type":"array","items":{"type":"string"}}},"type":"object","required":["certificateValidity","enrollmentFlags","extensions","generalFlags","hashAlgorithm","privateKeyAttributes","privateKeyFlags","subjectNameFlags"]},"aws-native:pcaconnectorad:TemplateV4":{"properties":{"certificateValidity":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateCertificateValidity"},"enrollmentFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateEnrollmentFlagsV4"},"extensions":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateExtensionsV4"},"generalFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGeneralFlagsV4"},"hashAlgorithm":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateHashAlgorithm"},"privateKeyAttributes":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyAttributesV4"},"privateKeyFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplatePrivateKeyFlagsV4"},"subjectNameFlags":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateSubjectNameFlagsV4"},"supersededTemplates":{"type":"array","items":{"type":"string"}}},"type":"object","required":["certificateValidity","enrollmentFlags","extensions","generalFlags","privateKeyAttributes","privateKeyFlags","subjectNameFlags"]},"aws-native:pcaconnectorad:TemplateValidityPeriod":{"properties":{"period":{"type":"number"},"periodType":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateValidityPeriodType"}},"type":"object","required":["period","periodType"]},"aws-native:pcaconnectorad:TemplateValidityPeriodType":{"type":"string","enum":[{"name":"Hours","value":"HOURS"},{"name":"Days","value":"DAYS"},{"name":"Weeks","value":"WEEKS"},{"name":"Months","value":"MONTHS"},{"name":"Years","value":"YEARS"}]},"aws-native:pcaconnectorscep:ConnectorMobileDeviceManagement":{"type":"object"},"aws-native:pcaconnectorscep:ConnectorOpenIdConfiguration":{"properties":{"audience":{"type":"string","description":"The audience value to copy into your Microsoft Entra app registration's OIDC."},"issuer":{"type":"string","description":"The issuer value to copy into your Microsoft Entra app registration's OIDC."},"subject":{"type":"string","description":"The subject value to copy into your Microsoft Entra app registration's OIDC."}},"type":"object"},"aws-native:pcaconnectorscep:ConnectorType":{"type":"string","enum":[{"name":"GeneralPurpose","value":"GENERAL_PURPOSE"},{"name":"Intune","value":"INTUNE"}]},"aws-native:pcs:ClusterAccounting":{"description":"The accounting configuration includes configurable settings for Slurm accounting.","properties":{"defaultPurgeTimeInDays":{"type":"integer","description":"The default value for all purge settings for `slurmdbd.conf`. For more information, see the [slurmdbd.conf documentation at SchedMD](https://slurm.schedmd.com/slurmdbd.conf.html). The default value is `-1`. A value of `-1` means there is no purge time and records persist as long as the cluster exists."},"mode":{"$ref":"#/types/aws-native:pcs:ClusterAccountingMode","description":"The default value is `NONE`. A value of `STANDARD` means that Slurm accounting is enabled."}},"type":"object","required":["mode"]},"aws-native:pcs:ClusterAccountingMode":{"description":"The default value is `NONE`. A value of `STANDARD` means that Slurm accounting is enabled.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"None","value":"NONE"}]},"aws-native:pcs:ClusterAuthKey":{"description":"The shared Slurm key for authentication, also known as the cluster secret.","properties":{"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the the shared Slurm key."},"secretVersion":{"type":"string","description":"The version of the shared Slurm key."}},"type":"object","required":["secretArn","secretVersion"]},"aws-native:pcs:ClusterEndpoint":{"description":"An endpoint available for interaction with the scheduler.","properties":{"ipv6Address":{"type":"string","description":"The endpoint's IPv6 address."},"port":{"type":"string","description":"The endpoint's connection port number."},"privateIpAddress":{"type":"string","description":"The endpoint's private IP address."},"publicIpAddress":{"type":"string","description":"The endpoint's public IP address."},"type":{"$ref":"#/types/aws-native:pcs:ClusterEndpointType","description":"Indicates the type of endpoint running at the specific IP address."}},"type":"object","required":["port","privateIpAddress","type"]},"aws-native:pcs:ClusterEndpointType":{"description":"Indicates the type of endpoint running at the specific IP address.","type":"string","enum":[{"name":"Slurmctld","value":"SLURMCTLD"},{"name":"Slurmdbd","value":"SLURMDBD"},{"name":"Slurmrestd","value":"SLURMRESTD"}]},"aws-native:pcs:ClusterErrorInfo":{"description":"An error that occurred during resource provisioning.","properties":{"code":{"type":"string","description":"The short-form error code."},"message":{"type":"string","description":"The detailed error information."}},"type":"object"},"aws-native:pcs:ClusterJwtAuth":{"description":"JWT authentication configuration for Slurm.","properties":{"jwtKey":{"$ref":"#/types/aws-native:pcs:ClusterJwtKey","description":"The JWT key for Slurm REST API authentication."}},"type":"object"},"aws-native:pcs:ClusterJwtKey":{"description":"JWT key configuration.","properties":{"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the JWT key secret."},"secretVersion":{"type":"string","description":"The version of the JWT key secret."}},"type":"object","required":["secretArn","secretVersion"]},"aws-native:pcs:ClusterNetworkingPropertiesNetworkType":{"description":"The IP of the cluster (IPV4 or IPV6)","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"}]},"aws-native:pcs:ClusterSchedulerPropertiesType":{"description":"The software AWS PCS uses to manage cluster scaling and job scheduling.","type":"string","enum":[{"name":"Slurm","value":"SLURM"}]},"aws-native:pcs:ClusterSize":{"description":"The size of the cluster.","type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:pcs:ClusterSlurmCustomSetting":{"description":"Additional settings that directly map to Slurm settings.","properties":{"parameterName":{"type":"string","description":"AWS PCS supports configuration of the following Slurm parameters for clusters: Prolog, Epilog, and SelectTypeParameters."},"parameterValue":{"type":"string","description":"The value for the configured Slurm setting."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:pcs:ClusterSlurmRest":{"description":"The SlurmRest configuration includes configurable settings for Slurm Rest.","properties":{"mode":{"$ref":"#/types/aws-native:pcs:ClusterSlurmRestMode","description":"The default value is `NONE`. A value of `STANDARD` means that Slurm Rest is enabled."}},"type":"object","required":["mode"]},"aws-native:pcs:ClusterSlurmRestMode":{"description":"The default value is `NONE`. A value of `STANDARD` means that Slurm Rest is enabled.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"None","value":"NONE"}]},"aws-native:pcs:ClusterStatus":{"description":"The provisioning status of the cluster. The provisioning status doesn't indicate the overall health of the cluster.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:pcs:ComputeNodeGroupErrorInfo":{"description":"An error that occurred during resource provisioning.","properties":{"code":{"type":"string","description":"The short-form error code."},"message":{"type":"string","description":"The detailed error information."}},"type":"object"},"aws-native:pcs:ComputeNodeGroupInstanceConfig":{"description":"An EC2 instance configuration AWS PCS uses to launch compute nodes.","properties":{"instanceType":{"type":"string","description":"The EC2 instance type that AWS PCS can provision in the compute node group."}},"type":"object"},"aws-native:pcs:ComputeNodeGroupPurchaseOption":{"description":"Specifies how EC2 instances are purchased on your behalf. AWS PCS supports On-Demand, Spot and Capacity Block instances. For more information, see Instance purchasing options in the Amazon Elastic Compute Cloud User Guide. If you don't provide this option, it defaults to On-Demand.","type":"string","enum":[{"name":"Ondemand","value":"ONDEMAND"},{"name":"Spot","value":"SPOT"},{"name":"CapacityBlock","value":"CAPACITY_BLOCK"}]},"aws-native:pcs:ComputeNodeGroupSlurmCustomSetting":{"description":"Additional settings that directly map to Slurm settings.","properties":{"parameterName":{"type":"string","description":"AWS PCS supports configuration of the following Slurm parameters for compute node groups: Weight and RealMemory."},"parameterValue":{"type":"string","description":"The value for the configured Slurm setting."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:pcs:ComputeNodeGroupSpotOptionsPropertiesAllocationStrategy":{"description":"The Amazon EC2 allocation strategy AWS PCS uses to provision EC2 instances. AWS PCS supports lowest price, capacity optimized, and price capacity optimized. If you don't provide this option, it defaults to price capacity optimized.","type":"string","enum":[{"name":"LowestPrice","value":"lowest-price"},{"name":"CapacityOptimized","value":"capacity-optimized"},{"name":"PriceCapacityOptimized","value":"price-capacity-optimized"}]},"aws-native:pcs:ComputeNodeGroupStatus":{"description":"The provisioning status of the compute node group. The provisioning status doesn't indicate the overall health of the compute node group.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:pcs:CustomLaunchTemplateProperties":{"description":"An Amazon EC2 launch template AWS PCS uses to launch compute nodes.","properties":{"templateId":{"type":"string","description":"The ID of the EC2 launch template to use to provision instances."},"version":{"type":"string","description":"The version of the EC2 launch template to use to provision instances."}},"type":"object","required":["version"]},"aws-native:pcs:NetworkingProperties":{"description":"The networking configuration for the cluster's control plane.","properties":{"networkType":{"$ref":"#/types/aws-native:pcs:ClusterNetworkingPropertiesNetworkType","description":"The IP of the cluster (IPV4 or IPV6)"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The list of security group IDs associated with the Elastic Network Interface (ENI) created in subnets."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of subnet IDs where AWS PCS creates an Elastic Network Interface (ENI) to enable communication between managed controllers and AWS PCS resources. The subnet must have an available IP address, cannot reside in AWS Outposts, AWS Wavelength, or an AWS Local Zone. AWS PCS currently supports only 1 subnet in this list."}},"type":"object"},"aws-native:pcs:QueueComputeNodeGroupConfiguration":{"description":"The compute node group configuration for a queue.","properties":{"computeNodeGroupId":{"type":"string","description":"The compute node group ID for the compute node group configuration."}},"type":"object"},"aws-native:pcs:QueueErrorInfo":{"description":"An error that occurred during resource provisioning.","properties":{"code":{"type":"string","description":"The short-form error code."},"message":{"type":"string","description":"The detailed error information."}},"type":"object"},"aws-native:pcs:QueueSlurmCustomSetting":{"description":"Additional settings that directly map to Slurm settings.","properties":{"parameterName":{"type":"string","description":"AWS PCS supports configuration of the Slurm parameters for queues:."},"parameterValue":{"type":"string","description":"The value for the configured Slurm setting."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:pcs:QueueStatus":{"description":"The provisioning status of the queue. The provisioning status doesn't indicate the overall health of the queue.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:pcs:ScalingConfigurationProperties":{"description":"Specifies the boundaries of the compute node group auto scaling.","properties":{"maxInstanceCount":{"type":"integer","description":"The upper bound of the number of instances allowed in the compute fleet."},"minInstanceCount":{"type":"integer","description":"The lower bound of the number of instances allowed in the compute fleet."}},"type":"object","required":["maxInstanceCount","minInstanceCount"]},"aws-native:pcs:SchedulerProperties":{"description":"The cluster management and job scheduling software associated with the cluster.","properties":{"type":{"$ref":"#/types/aws-native:pcs:ClusterSchedulerPropertiesType","description":"The software AWS PCS uses to manage cluster scaling and job scheduling."},"version":{"type":"string","description":"The version of the specified scheduling software that AWS PCS uses to manage cluster scaling and job scheduling."}},"type":"object","required":["type","version"]},"aws-native:pcs:SlurmConfigurationProperties":{"description":"The Slurm configuration for the queue.","properties":{"slurmCustomSettings":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:QueueSlurmCustomSetting"},"description":"Custom Slurm parameters that directly map to Slurm configuration settings."}},"type":"object"},"aws-native:pcs:SpotOptionsProperties":{"description":"Additional configuration when you specify SPOT as the purchase option.","properties":{"allocationStrategy":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupSpotOptionsPropertiesAllocationStrategy","description":"The Amazon EC2 allocation strategy AWS PCS uses to provision EC2 instances. AWS PCS supports lowest price, capacity optimized, and price capacity optimized. If you don't provide this option, it defaults to price capacity optimized."}},"type":"object"},"aws-native:personalize:DatasetGroupDomain":{"description":"The domain of a Domain dataset group.","type":"string","enum":[{"name":"Ecommerce","value":"ECOMMERCE"},{"name":"VideoOnDemand","value":"VIDEO_ON_DEMAND"}]},"aws-native:personalize:DatasetImportJob":{"description":"Initial DatasetImportJob for the created dataset","properties":{"dataSource":{"$ref":"#/types/aws-native:personalize:DatasetImportJobDataSourceProperties","description":"The Amazon S3 bucket that contains the training data to import."},"datasetArn":{"type":"string","description":"The ARN of the dataset that receives the imported data"},"datasetImportJobArn":{"type":"string","description":"The ARN of the dataset import job"},"jobName":{"type":"string","description":"The name for the dataset import job."},"roleArn":{"type":"string","description":"The ARN of the IAM role that has permissions to read from the Amazon S3 data source."}},"type":"object"},"aws-native:personalize:DatasetImportJobDataSourceProperties":{"description":"The Amazon S3 bucket that contains the training data to import.","properties":{"dataLocation":{"type":"string","description":"The path to the Amazon S3 bucket where the data that you want to upload to your dataset is stored."}},"type":"object"},"aws-native:personalize:DatasetType":{"description":"The type of dataset","type":"string","enum":[{"name":"Interactions","value":"Interactions"},{"name":"Items","value":"Items"},{"name":"Users","value":"Users"}]},"aws-native:personalize:SchemaDomain":{"description":"The domain of a Domain dataset group.","type":"string","enum":[{"name":"Ecommerce","value":"ECOMMERCE"},{"name":"VideoOnDemand","value":"VIDEO_ON_DEMAND"}]},"aws-native:personalize:SolutionCategoricalHyperParameterRange":{"description":"Provides the name and values of a Categorical hyperparameter.","properties":{"name":{"type":"string","description":"The name of the hyperparameter."},"values":{"type":"array","items":{"type":"string"},"description":"A list of the categories for the hyperparameter."}},"type":"object"},"aws-native:personalize:SolutionConfig":{"description":"The configuration to use with the solution. When performAutoML is set to true, Amazon Personalize only evaluates the autoMLConfig section of the solution configuration.","properties":{"algorithmHyperParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Lists the hyperparameter names and ranges."},"autoMlConfig":{"$ref":"#/types/aws-native:personalize:SolutionConfigAutoMlConfigProperties","description":"The AutoMLConfig object containing a list of recipes to search when AutoML is performed."},"eventValueThreshold":{"type":"string","description":"Only events with a value greater than or equal to this threshold are used for training a model."},"featureTransformationParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Lists the feature transformation parameters."},"hpoConfig":{"$ref":"#/types/aws-native:personalize:SolutionConfigHpoConfigProperties","description":"Describes the properties for hyperparameter optimization (HPO)"}},"type":"object"},"aws-native:personalize:SolutionConfigAutoMlConfigProperties":{"description":"The AutoMLConfig object containing a list of recipes to search when AutoML is performed.","properties":{"metricName":{"type":"string","description":"The metric to optimize."},"recipeList":{"type":"array","items":{"type":"string"},"description":"The list of candidate recipes."}},"type":"object"},"aws-native:personalize:SolutionConfigHpoConfigProperties":{"description":"Describes the properties for hyperparameter optimization (HPO)","properties":{"algorithmHyperParameterRanges":{"$ref":"#/types/aws-native:personalize:SolutionConfigHpoConfigPropertiesAlgorithmHyperParameterRangesProperties","description":"The hyperparameters and their allowable ranges"},"hpoObjective":{"$ref":"#/types/aws-native:personalize:SolutionConfigHpoConfigPropertiesHpoObjectiveProperties","description":"The metric to optimize during HPO."},"hpoResourceConfig":{"$ref":"#/types/aws-native:personalize:SolutionConfigHpoConfigPropertiesHpoResourceConfigProperties","description":"Describes the resource configuration for hyperparameter optimization (HPO)."}},"type":"object"},"aws-native:personalize:SolutionConfigHpoConfigPropertiesAlgorithmHyperParameterRangesProperties":{"description":"The hyperparameters and their allowable ranges","properties":{"categoricalHyperParameterRanges":{"type":"array","items":{"$ref":"#/types/aws-native:personalize:SolutionCategoricalHyperParameterRange"},"description":"The categorical hyperparameters and their ranges."},"continuousHyperParameterRanges":{"type":"array","items":{"$ref":"#/types/aws-native:personalize:SolutionContinuousHyperParameterRange"},"description":"The continuous hyperparameters and their ranges."},"integerHyperParameterRanges":{"type":"array","items":{"$ref":"#/types/aws-native:personalize:SolutionIntegerHyperParameterRange"},"description":"The integer hyperparameters and their ranges."}},"type":"object"},"aws-native:personalize:SolutionConfigHpoConfigPropertiesHpoObjectiveProperties":{"description":"The metric to optimize during HPO.","properties":{"metricName":{"type":"string","description":"The name of the metric"},"metricRegex":{"type":"string","description":"A regular expression for finding the metric in the training job logs."},"type":{"$ref":"#/types/aws-native:personalize:SolutionConfigHpoConfigPropertiesHpoObjectivePropertiesType","description":"The type of the metric. Valid values are Maximize and Minimize."}},"type":"object"},"aws-native:personalize:SolutionConfigHpoConfigPropertiesHpoObjectivePropertiesType":{"description":"The type of the metric. Valid values are Maximize and Minimize.","type":"string","enum":[{"name":"Maximize","value":"Maximize"},{"name":"Minimize","value":"Minimize"}]},"aws-native:personalize:SolutionConfigHpoConfigPropertiesHpoResourceConfigProperties":{"description":"Describes the resource configuration for hyperparameter optimization (HPO).","properties":{"maxNumberOfTrainingJobs":{"type":"string","description":"The maximum number of training jobs when you create a solution version. The maximum value for maxNumberOfTrainingJobs is 40."},"maxParallelTrainingJobs":{"type":"string","description":"The maximum number of parallel training jobs when you create a solution version. The maximum value for maxParallelTrainingJobs is 10."}},"type":"object"},"aws-native:personalize:SolutionContinuousHyperParameterRange":{"description":"Provides the name and range of a continuous hyperparameter.","properties":{"maxValue":{"type":"number","description":"The maximum allowable value for the hyperparameter."},"minValue":{"type":"number","description":"The minimum allowable value for the hyperparameter."},"name":{"type":"string","description":"The name of the hyperparameter."}},"type":"object"},"aws-native:personalize:SolutionIntegerHyperParameterRange":{"description":"Provides the name and range of an integer-valued hyperparameter.","properties":{"maxValue":{"type":"integer","description":"The maximum allowable value for the hyperparameter."},"minValue":{"type":"integer","description":"The minimum allowable value for the hyperparameter."},"name":{"type":"string","description":"The name of the hyperparameter."}},"type":"object"},"aws-native:pinpoint:InAppTemplateAlignment":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"}]},"aws-native:pinpoint:InAppTemplateBodyConfig":{"properties":{"alignment":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateAlignment","description":"The text alignment of the main body text of the message. Acceptable values: `LEFT` , `CENTER` , `RIGHT` ."},"body":{"type":"string","description":"The main body text of the message."},"textColor":{"type":"string","description":"The color of the body text, expressed as a hex color code (such as #000000 for black)."}},"type":"object"},"aws-native:pinpoint:InAppTemplateButtonAction":{"type":"string","enum":[{"name":"Link","value":"LINK"},{"name":"DeepLink","value":"DEEP_LINK"},{"name":"Close","value":"CLOSE"}]},"aws-native:pinpoint:InAppTemplateButtonConfig":{"properties":{"android":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateOverrideButtonConfiguration","description":"Optional button configuration to use for in-app messages sent to Android devices. This button configuration overrides the default button configuration."},"defaultConfig":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateDefaultButtonConfiguration","description":"Specifies the default behavior of a button that appears in an in-app message. You can optionally add button configurations that specifically apply to iOS, Android, or web browser users."},"ios":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateOverrideButtonConfiguration","description":"Optional button configuration to use for in-app messages sent to iOS devices. This button configuration overrides the default button configuration."},"web":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateOverrideButtonConfiguration","description":"Optional button configuration to use for in-app messages sent to web applications. This button configuration overrides the default button configuration."}},"type":"object"},"aws-native:pinpoint:InAppTemplateDefaultButtonConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"The background color of a button, expressed as a hex color code (such as #000000 for black)."},"borderRadius":{"type":"integer","description":"The border radius of a button."},"buttonAction":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateButtonAction","description":"The action that occurs when a recipient chooses a button in an in-app message. You can specify one of the following:\n\n- `LINK` – A link to a web destination.\n- `DEEP_LINK` – A link to a specific page in an application.\n- `CLOSE` – Dismisses the message."},"link":{"type":"string","description":"The destination (such as a URL) for a button."},"text":{"type":"string","description":"The text that appears on a button in an in-app message."},"textColor":{"type":"string","description":"The color of the body text in a button, expressed as a hex color code (such as #000000 for black)."}},"type":"object"},"aws-native:pinpoint:InAppTemplateHeaderConfig":{"properties":{"alignment":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateAlignment","description":"The text alignment of the title of the message. Acceptable values: `LEFT` , `CENTER` , `RIGHT` ."},"header":{"type":"string","description":"The title text of the in-app message."},"textColor":{"type":"string","description":"The color of the title text, expressed as a hex color code (such as #000000 for black)."}},"type":"object"},"aws-native:pinpoint:InAppTemplateInAppMessageContent":{"properties":{"backgroundColor":{"type":"string","description":"The background color for an in-app message banner, expressed as a hex color code (such as #000000 for black)."},"bodyConfig":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateBodyConfig","description":"An object that contains configuration information about the header or title text of the in-app message."},"headerConfig":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateHeaderConfig","description":"An object that contains configuration information about the header or title text of the in-app message."},"imageUrl":{"type":"string","description":"The URL of the image that appears on an in-app message banner."},"primaryBtn":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateButtonConfig","description":"An object that contains configuration information about the primary button in an in-app message."},"secondaryBtn":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateButtonConfig","description":"An object that contains configuration information about the secondary button in an in-app message."}},"type":"object"},"aws-native:pinpoint:InAppTemplateLayout":{"description":"A string that determines the appearance of the in-app message. You can specify one of the following:\n\n- `BOTTOM_BANNER` – a message that appears as a banner at the bottom of the page.\n- `TOP_BANNER` – a message that appears as a banner at the top of the page.\n- `OVERLAYS` – a message that covers entire screen.\n- `MOBILE_FEED` – a message that appears in a window in front of the page.\n- `MIDDLE_BANNER` – a message that appears as a banner in the middle of the page.\n- `CAROUSEL` – a scrollable layout of up to five unique messages.","type":"string","enum":[{"name":"BottomBanner","value":"BOTTOM_BANNER"},{"name":"TopBanner","value":"TOP_BANNER"},{"name":"Overlays","value":"OVERLAYS"},{"name":"MobileFeed","value":"MOBILE_FEED"},{"name":"MiddleBanner","value":"MIDDLE_BANNER"},{"name":"Carousel","value":"CAROUSEL"}]},"aws-native:pinpoint:InAppTemplateOverrideButtonConfiguration":{"properties":{"buttonAction":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateButtonAction","description":"The action that occurs when a recipient chooses a button in an in-app message. You can specify one of the following:\n\n- `LINK` – A link to a web destination.\n- `DEEP_LINK` – A link to a specific page in an application.\n- `CLOSE` – Dismisses the message."},"link":{"type":"string","description":"The destination (such as a URL) for a button."}},"type":"object"},"aws-native:pipes:PipeAssignPublicIp":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:pipes:PipeAwsVpcConfiguration":{"properties":{"assignPublicIp":{"$ref":"#/types/aws-native:pipes:PipeAssignPublicIp","description":"Specifies whether the task's elastic network interface receives a public IP address. You can specify `ENABLED` only when `LaunchType` in `EcsParameters` is set to `FARGATE` ."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"Specifies the security groups associated with the task. These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used."},"subnets":{"type":"array","items":{"type":"string"},"description":"Specifies the subnets associated with the task. These subnets must all be in the same VPC. You can specify as many as 16 subnets."}},"type":"object","required":["subnets"]},"aws-native:pipes:PipeBatchArrayProperties":{"properties":{"size":{"type":"integer","description":"The size of the array, if this is an array batch job."}},"type":"object"},"aws-native:pipes:PipeBatchContainerOverrides":{"properties":{"command":{"type":"array","items":{"type":"string"},"description":"The command to send to the container that overrides the default command from the Docker image or the task definition."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeBatchEnvironmentVariable"},"description":"The environment variables to send to the container. You can add new environment variables, which are added to the container at launch, or you can override the existing environment variables from the Docker image or the task definition.\n\n\u003e Environment variables cannot start with \" `AWS Batch` \". This naming convention is reserved for variables that AWS Batch sets."},"instanceType":{"type":"string","description":"The instance type to use for a multi-node parallel job.\n\n\u003e This parameter isn't applicable to single-node container jobs or jobs that run on Fargate resources, and shouldn't be provided."},"resourceRequirements":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeBatchResourceRequirement"},"description":"The type and amount of resources to assign to a container. This overrides the settings in the job definition. The supported resources include `GPU` , `MEMORY` , and `VCPU` ."}},"type":"object"},"aws-native:pipes:PipeBatchEnvironmentVariable":{"properties":{"name":{"type":"string","description":"The name of the key-value pair. For environment variables, this is the name of the environment variable."},"value":{"type":"string","description":"The value of the key-value pair. For environment variables, this is the value of the environment variable."}},"type":"object"},"aws-native:pipes:PipeBatchJobDependency":{"properties":{"jobId":{"type":"string","description":"The job ID of the AWS Batch job that's associated with this dependency."},"type":{"$ref":"#/types/aws-native:pipes:PipeBatchJobDependencyType","description":"The type of the job dependency."}},"type":"object"},"aws-native:pipes:PipeBatchJobDependencyType":{"type":"string","enum":[{"name":"NToN","value":"N_TO_N"},{"name":"Sequential","value":"SEQUENTIAL"}]},"aws-native:pipes:PipeBatchResourceRequirement":{"properties":{"type":{"$ref":"#/types/aws-native:pipes:PipeBatchResourceRequirementType","description":"The type of resource to assign to a container. The supported resources include `GPU` , `MEMORY` , and `VCPU` ."},"value":{"type":"string","description":"The quantity of the specified resource to reserve for the container. The values vary based on the `type` specified.\n\n- **type=\"GPU\"** - The number of physical GPUs to reserve for the container. Make sure that the number of GPUs reserved for all containers in a job doesn't exceed the number of available GPUs on the compute resource that the job is launched on.\n\n\u003e GPUs aren't available for jobs that are running on Fargate resources.\n- **type=\"MEMORY\"** - The memory hard limit (in MiB) present to the container. This parameter is supported for jobs that are running on EC2 resources. If your container attempts to exceed the memory specified, the container is terminated. This parameter maps to `Memory` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--memory` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . You must specify at least 4 MiB of memory for a job. This is required but can be specified in several places for multi-node parallel (MNP) jobs. It must be specified for each node at least once. This parameter maps to `Memory` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--memory` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) .\n\n\u003e If you're trying to maximize your resource utilization by providing your jobs as much memory as possible for a particular instance type, see [Memory management](https://docs.aws.amazon.com/batch/latest/userguide/memory-management.html) in the *AWS Batch User Guide* . \n\nFor jobs that are running on Fargate resources, then `value` is the hard limit (in MiB), and must match one of the supported values and the `VCPU` values must be one of the values supported for that memory value.\n\n- **value = 512** - `VCPU` = 0.25\n- **value = 1024** - `VCPU` = 0.25 or 0.5\n- **value = 2048** - `VCPU` = 0.25, 0.5, or 1\n- **value = 3072** - `VCPU` = 0.5, or 1\n- **value = 4096** - `VCPU` = 0.5, 1, or 2\n- **value = 5120, 6144, or 7168** - `VCPU` = 1 or 2\n- **value = 8192** - `VCPU` = 1, 2, 4, or 8\n- **value = 9216, 10240, 11264, 12288, 13312, 14336, or 15360** - `VCPU` = 2 or 4\n- **value = 16384** - `VCPU` = 2, 4, or 8\n- **value = 17408, 18432, 19456, 21504, 22528, 23552, 25600, 26624, 27648, 29696, or 30720** - `VCPU` = 4\n- **value = 20480, 24576, or 28672** - `VCPU` = 4 or 8\n- **value = 36864, 45056, 53248, or 61440** - `VCPU` = 8\n- **value = 32768, 40960, 49152, or 57344** - `VCPU` = 8 or 16\n- **value = 65536, 73728, 81920, 90112, 98304, 106496, 114688, or 122880** - `VCPU` = 16\n- **type=\"VCPU\"** - The number of vCPUs reserved for the container. This parameter maps to `CpuShares` in the [Create a container](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/#create-a-container) section of the [Docker Remote API](https://docs.aws.amazon.com/https://docs.docker.com/engine/api/v1.23/) and the `--cpu-shares` option to [docker run](https://docs.aws.amazon.com/https://docs.docker.com/engine/reference/run/) . Each vCPU is equivalent to 1,024 CPU shares. For EC2 resources, you must specify at least one vCPU. This is required but can be specified in several places; it must be specified for each node at least once.\n\nThe default for the Fargate On-Demand vCPU resource count quota is 6 vCPUs. For more information about Fargate quotas, see [AWS Fargate quotas](https://docs.aws.amazon.com/general/latest/gr/ecs-service.html#service-quotas-fargate) in the *AWS General Reference* .\n\nFor jobs that are running on Fargate resources, then `value` must match one of the supported values and the `MEMORY` values must be one of the values supported for that `VCPU` value. The supported values are 0.25, 0.5, 1, 2, 4, 8, and 16\n\n- **value = 0.25** - `MEMORY` = 512, 1024, or 2048\n- **value = 0.5** - `MEMORY` = 1024, 2048, 3072, or 4096\n- **value = 1** - `MEMORY` = 2048, 3072, 4096, 5120, 6144, 7168, or 8192\n- **value = 2** - `MEMORY` = 4096, 5120, 6144, 7168, 8192, 9216, 10240, 11264, 12288, 13312, 14336, 15360, or 16384\n- **value = 4** - `MEMORY` = 8192, 9216, 10240, 11264, 12288, 13312, 14336, 15360, 16384, 17408, 18432, 19456, 20480, 21504, 22528, 23552, 24576, 25600, 26624, 27648, 28672, 29696, or 30720\n- **value = 8** - `MEMORY` = 16384, 20480, 24576, 28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, or 61440\n- **value = 16** - `MEMORY` = 32768, 40960, 49152, 57344, 65536, 73728, 81920, 90112, 98304, 106496, 114688, or 122880"}},"type":"object","required":["type","value"]},"aws-native:pipes:PipeBatchResourceRequirementType":{"type":"string","enum":[{"name":"Gpu","value":"GPU"},{"name":"Memory","value":"MEMORY"},{"name":"Vcpu","value":"VCPU"}]},"aws-native:pipes:PipeBatchRetryStrategy":{"properties":{"attempts":{"type":"integer","description":"The number of times to move a job to the `RUNNABLE` status. If the value of `attempts` is greater than one, the job is retried on failure the same number of attempts as the value."}},"type":"object"},"aws-native:pipes:PipeCapacityProviderStrategyItem":{"properties":{"base":{"type":"integer","description":"The base value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. If no value is specified, the default value of 0 is used."},"capacityProvider":{"type":"string","description":"The short name of the capacity provider."},"weight":{"type":"integer","description":"The weight value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The weight value is taken into consideration after the base value, if defined, is satisfied."}},"type":"object","required":["capacityProvider"]},"aws-native:pipes:PipeCloudwatchLogsLogDestination":{"properties":{"logGroupArn":{"type":"string","description":"The AWS Resource Name (ARN) for the CloudWatch log group to which EventBridge sends the log records."}},"type":"object"},"aws-native:pipes:PipeDeadLetterConfig":{"properties":{"arn":{"type":"string","description":"The ARN of the specified target for the dead-letter queue.\n\nFor Amazon Kinesis stream and Amazon DynamoDB stream sources, specify either an Amazon SNS topic or Amazon SQS queue ARN."}},"type":"object"},"aws-native:pipes:PipeDimensionMapping":{"properties":{"dimensionName":{"type":"string","description":"The metadata attributes of the time series. For example, the name and Availability Zone of an Amazon EC2 instance or the name of the manufacturer of a wind turbine are dimensions."},"dimensionValue":{"type":"string","description":"Dynamic path to the dimension value in the source event."},"dimensionValueType":{"$ref":"#/types/aws-native:pipes:PipeDimensionValueType","description":"The data type of the dimension for the time-series data."}},"type":"object","required":["dimensionName","dimensionValue","dimensionValueType"]},"aws-native:pipes:PipeDimensionValueType":{"type":"string","enum":[{"name":"Varchar","value":"VARCHAR"}]},"aws-native:pipes:PipeDynamoDbStreamStartPosition":{"type":"string","enum":[{"name":"TrimHorizon","value":"TRIM_HORIZON"},{"name":"Latest","value":"LATEST"}]},"aws-native:pipes:PipeEcsContainerOverride":{"properties":{"command":{"type":"array","items":{"type":"string"},"description":"The command to send to the container that overrides the default command from the Docker image or the task definition. You must also specify a container name."},"cpu":{"type":"integer","description":"The number of `cpu` units reserved for the container, instead of the default value from the task definition. You must also specify a container name."},"environment":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeEcsEnvironmentVariable"},"description":"The environment variables to send to the container. You can add new environment variables, which are added to the container at launch, or you can override the existing environment variables from the Docker image or the task definition. You must also specify a container name."},"environmentFiles":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeEcsEnvironmentFile"},"description":"A list of files containing the environment variables to pass to a container, instead of the value from the container definition."},"memory":{"type":"integer","description":"The hard limit (in MiB) of memory to present to the container, instead of the default value from the task definition. If your container attempts to exceed the memory specified here, the container is killed. You must also specify a container name."},"memoryReservation":{"type":"integer","description":"The soft limit (in MiB) of memory to reserve for the container, instead of the default value from the task definition. You must also specify a container name."},"name":{"type":"string","description":"The name of the container that receives the override. This parameter is required if any override is specified."},"resourceRequirements":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeEcsResourceRequirement"},"description":"The type and amount of a resource to assign to a container, instead of the default value from the task definition. The only supported resource is a GPU."}},"type":"object"},"aws-native:pipes:PipeEcsEnvironmentFile":{"properties":{"type":{"$ref":"#/types/aws-native:pipes:PipeEcsEnvironmentFileType","description":"The file type to use. The only supported value is `s3` ."},"value":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 object containing the environment variable file."}},"type":"object","required":["type","value"]},"aws-native:pipes:PipeEcsEnvironmentFileType":{"type":"string","enum":[{"name":"S3","value":"s3"}]},"aws-native:pipes:PipeEcsEnvironmentVariable":{"properties":{"name":{"type":"string","description":"The name of the key-value pair. For environment variables, this is the name of the environment variable."},"value":{"type":"string","description":"The value of the key-value pair. For environment variables, this is the value of the environment variable."}},"type":"object"},"aws-native:pipes:PipeEcsEphemeralStorage":{"properties":{"sizeInGiB":{"type":"integer","description":"The total amount, in GiB, of ephemeral storage to set for the task. The minimum supported value is `21` GiB and the maximum supported value is `200` GiB."}},"type":"object","required":["sizeInGiB"]},"aws-native:pipes:PipeEcsInferenceAcceleratorOverride":{"properties":{"deviceName":{"type":"string","description":"The Elastic Inference accelerator device name to override for the task. This parameter must match a `deviceName` specified in the task definition."},"deviceType":{"type":"string","description":"The Elastic Inference accelerator type to use."}},"type":"object"},"aws-native:pipes:PipeEcsResourceRequirement":{"properties":{"type":{"$ref":"#/types/aws-native:pipes:PipeEcsResourceRequirementType","description":"The type of resource to assign to a container. The supported values are `GPU` or `InferenceAccelerator` ."},"value":{"type":"string","description":"The value for the specified resource type.\n\nIf the `GPU` type is used, the value is the number of physical `GPUs` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on.\n\nIf the `InferenceAccelerator` type is used, the `value` matches the `deviceName` for an InferenceAccelerator specified in a task definition."}},"type":"object","required":["type","value"]},"aws-native:pipes:PipeEcsResourceRequirementType":{"type":"string","enum":[{"name":"Gpu","value":"GPU"},{"name":"InferenceAccelerator","value":"InferenceAccelerator"}]},"aws-native:pipes:PipeEcsTaskOverride":{"properties":{"containerOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeEcsContainerOverride"},"description":"One or more container overrides that are sent to a task."},"cpu":{"type":"string","description":"The cpu override for the task."},"ephemeralStorage":{"$ref":"#/types/aws-native:pipes:PipeEcsEphemeralStorage","description":"The ephemeral storage setting override for the task.\n\n\u003e This parameter is only supported for tasks hosted on Fargate that use the following platform versions:\n\u003e \n\u003e - Linux platform version `1.4.0` or later.\n\u003e - Windows platform version `1.0.0` or later."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the task execution IAM role override for the task. For more information, see [Amazon ECS task execution IAM role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html) in the *Amazon Elastic Container Service Developer Guide* ."},"inferenceAcceleratorOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeEcsInferenceAcceleratorOverride"},"description":"The Elastic Inference accelerator override for the task."},"memory":{"type":"string","description":"The memory override for the task."},"taskRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that containers in this task can assume. All containers in this task are granted the permissions that are specified in this role. For more information, see [IAM Role for Tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide* ."}},"type":"object"},"aws-native:pipes:PipeEnrichmentHttpParameters":{"properties":{"headerParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The headers that need to be sent as part of request invoking the API Gateway REST API or EventBridge ApiDestination."},"pathParameterValues":{"type":"array","items":{"type":"string"},"description":"The path parameter values to be used to populate API Gateway REST API or EventBridge ApiDestination path wildcards (\"*\")."},"queryStringParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The query string keys/values that need to be sent as part of request invoking the API Gateway REST API or EventBridge ApiDestination."}},"type":"object"},"aws-native:pipes:PipeEnrichmentParameters":{"properties":{"httpParameters":{"$ref":"#/types/aws-native:pipes:PipeEnrichmentHttpParameters","description":"Contains the HTTP parameters to use when the target is a API Gateway REST endpoint or EventBridge ApiDestination.\n\nIf you specify an API Gateway REST API or EventBridge ApiDestination as a target, you can use this parameter to specify headers, path parameters, and query string keys/values as part of your target invoking request. If you're using ApiDestinations, the corresponding Connection can also have these values configured. In case of any conflicting keys, values from the Connection take precedence."},"inputTemplate":{"type":"string","description":"Valid JSON text passed to the enrichment. In this case, nothing from the event itself is passed to the enrichment. For more information, see [The JavaScript Object Notation (JSON) Data Interchange Format](https://docs.aws.amazon.com/http://www.rfc-editor.org/rfc/rfc7159.txt) .\n\nTo remove an input template, specify an empty string."}},"type":"object"},"aws-native:pipes:PipeEpochTimeUnit":{"type":"string","enum":[{"name":"Milliseconds","value":"MILLISECONDS"},{"name":"Seconds","value":"SECONDS"},{"name":"Microseconds","value":"MICROSECONDS"},{"name":"Nanoseconds","value":"NANOSECONDS"}]},"aws-native:pipes:PipeFilter":{"properties":{"pattern":{"type":"string","description":"The event pattern."}},"type":"object"},"aws-native:pipes:PipeFilterCriteria":{"properties":{"filters":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeFilter"},"description":"The event patterns."}},"type":"object"},"aws-native:pipes:PipeFirehoseLogDestination":{"properties":{"deliveryStreamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Firehose delivery stream to which EventBridge delivers the pipe log records."}},"type":"object"},"aws-native:pipes:PipeIncludeExecutionDataOption":{"type":"string","enum":[{"name":"All","value":"ALL"}]},"aws-native:pipes:PipeKinesisStreamStartPosition":{"type":"string","enum":[{"name":"TrimHorizon","value":"TRIM_HORIZON"},{"name":"Latest","value":"LATEST"},{"name":"AtTimestamp","value":"AT_TIMESTAMP"}]},"aws-native:pipes:PipeLaunchType":{"type":"string","enum":[{"name":"Ec2","value":"EC2"},{"name":"Fargate","value":"FARGATE"},{"name":"External","value":"EXTERNAL"}]},"aws-native:pipes:PipeLogConfiguration":{"properties":{"cloudwatchLogsLogDestination":{"$ref":"#/types/aws-native:pipes:PipeCloudwatchLogsLogDestination","description":"The logging configuration settings for the pipe."},"firehoseLogDestination":{"$ref":"#/types/aws-native:pipes:PipeFirehoseLogDestination","description":"The Amazon Data Firehose logging configuration settings for the pipe."},"includeExecutionData":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeIncludeExecutionDataOption"},"description":"Whether the execution data (specifically, the `payload` , `awsRequest` , and `awsResponse` fields) is included in the log messages for this pipe.\n\nThis applies to all log destinations for the pipe.\n\nFor more information, see [Including execution data in logs](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-logs.html#eb-pipes-logs-execution-data) in the *Amazon EventBridge User Guide* .\n\n*Allowed values:* `ALL`"},"level":{"$ref":"#/types/aws-native:pipes:PipeLogLevel","description":"The level of logging detail to include. This applies to all log destinations for the pipe."},"s3LogDestination":{"$ref":"#/types/aws-native:pipes:PipeS3LogDestination","description":"The Amazon S3 logging configuration settings for the pipe."}},"type":"object"},"aws-native:pipes:PipeLogLevel":{"type":"string","enum":[{"name":"Off","value":"OFF"},{"name":"Error","value":"ERROR"},{"name":"Info","value":"INFO"},{"name":"Trace","value":"TRACE"}]},"aws-native:pipes:PipeMeasureValueType":{"type":"string","enum":[{"name":"Double","value":"DOUBLE"},{"name":"Bigint","value":"BIGINT"},{"name":"Varchar","value":"VARCHAR"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Timestamp","value":"TIMESTAMP"}]},"aws-native:pipes:PipeMqBrokerAccessCredentials0Properties":{"properties":{"basicAuth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["basicAuth"]},"aws-native:pipes:PipeMqBrokerAccessCredentialsProperties":{"properties":{"basicAuth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["basicAuth"]},"aws-native:pipes:PipeMskAccessCredentials0Properties":{"properties":{"saslScram512Auth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["saslScram512Auth"]},"aws-native:pipes:PipeMskAccessCredentials1Properties":{"properties":{"clientCertificateTlsAuth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["clientCertificateTlsAuth"]},"aws-native:pipes:PipeMskStartPosition":{"type":"string","enum":[{"name":"TrimHorizon","value":"TRIM_HORIZON"},{"name":"Latest","value":"LATEST"}]},"aws-native:pipes:PipeMultiMeasureAttributeMapping":{"properties":{"measureValue":{"type":"string","description":"Dynamic path to the measurement attribute in the source event."},"measureValueType":{"$ref":"#/types/aws-native:pipes:PipeMeasureValueType","description":"Data type of the measurement attribute in the source event."},"multiMeasureAttributeName":{"type":"string","description":"Target measure name to be used."}},"type":"object","required":["measureValue","measureValueType","multiMeasureAttributeName"]},"aws-native:pipes:PipeMultiMeasureMapping":{"properties":{"multiMeasureAttributeMappings":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeMultiMeasureAttributeMapping"},"description":"Mappings that represent multiple source event fields mapped to measures in the same Timestream for LiveAnalytics record."},"multiMeasureName":{"type":"string","description":"The name of the multiple measurements per record (multi-measure)."}},"type":"object","required":["multiMeasureAttributeMappings","multiMeasureName"]},"aws-native:pipes:PipeNetworkConfiguration":{"properties":{"awsvpcConfiguration":{"$ref":"#/types/aws-native:pipes:PipeAwsVpcConfiguration","description":"Use this structure to specify the VPC subnets and security groups for the task, and whether a public IP address is to be used. This structure is relevant only for ECS tasks that use the `awsvpc` network mode."}},"type":"object"},"aws-native:pipes:PipeOnPartialBatchItemFailureStreams":{"type":"string","enum":[{"name":"AutomaticBisect","value":"AUTOMATIC_BISECT"}]},"aws-native:pipes:PipePlacementConstraint":{"properties":{"expression":{"type":"string","description":"A cluster query language expression to apply to the constraint. You cannot specify an expression if the constraint type is `distinctInstance` . To learn more, see [Cluster Query Language](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-query-language.html) in the Amazon Elastic Container Service Developer Guide."},"type":{"$ref":"#/types/aws-native:pipes:PipePlacementConstraintType","description":"The type of constraint. Use distinctInstance to ensure that each task in a particular group is running on a different container instance. Use memberOf to restrict the selection to a group of valid candidates."}},"type":"object"},"aws-native:pipes:PipePlacementConstraintType":{"type":"string","enum":[{"name":"DistinctInstance","value":"distinctInstance"},{"name":"MemberOf","value":"memberOf"}]},"aws-native:pipes:PipePlacementStrategy":{"properties":{"field":{"type":"string","description":"The field to apply the placement strategy against. For the spread placement strategy, valid values are instanceId (or host, which has the same effect), or any platform or custom attribute that is applied to a container instance, such as attribute:ecs.availability-zone. For the binpack placement strategy, valid values are cpu and memory. For the random placement strategy, this field is not used."},"type":{"$ref":"#/types/aws-native:pipes:PipePlacementStrategyType","description":"The type of placement strategy. The random placement strategy randomly places tasks on available candidates. The spread placement strategy spreads placement across available candidates evenly based on the field parameter. The binpack strategy places tasks on available candidates that have the least available amount of the resource that is specified with the field parameter. For example, if you binpack on memory, a task is placed on the instance with the least amount of remaining memory (but still enough to run the task)."}},"type":"object"},"aws-native:pipes:PipePlacementStrategyType":{"type":"string","enum":[{"name":"Random","value":"random"},{"name":"Spread","value":"spread"},{"name":"Binpack","value":"binpack"}]},"aws-native:pipes:PipePropagateTags":{"type":"string","enum":[{"name":"TaskDefinition","value":"TASK_DEFINITION"}]},"aws-native:pipes:PipeRequestedPipeState":{"type":"string","enum":[{"name":"Running","value":"RUNNING"},{"name":"Stopped","value":"STOPPED"}]},"aws-native:pipes:PipeS3LogDestination":{"properties":{"bucketName":{"type":"string","description":"The name of the Amazon S3 bucket to which EventBridge delivers the log records for the pipe."},"bucketOwner":{"type":"string","description":"The AWS account that owns the Amazon S3 bucket to which EventBridge delivers the log records for the pipe."},"outputFormat":{"$ref":"#/types/aws-native:pipes:PipeS3OutputFormat","description":"The format EventBridge uses for the log records.\n\nEventBridge currently only supports `json` formatting."},"prefix":{"type":"string","description":"The prefix text with which to begin Amazon S3 log object names.\n\nFor more information, see [Organizing objects using prefixes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-prefixes.html) in the *Amazon Simple Storage Service User Guide* ."}},"type":"object"},"aws-native:pipes:PipeS3OutputFormat":{"type":"string","enum":[{"name":"Json","value":"json"},{"name":"Plain","value":"plain"},{"name":"W3c","value":"w3c"}]},"aws-native:pipes:PipeSageMakerPipelineParameter":{"properties":{"name":{"type":"string","description":"Name of parameter to start execution of a SageMaker AI Model Building Pipeline."},"value":{"type":"string","description":"Value of parameter to start execution of a SageMaker AI Model Building Pipeline."}},"type":"object","required":["name","value"]},"aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials0Properties":{"properties":{"basicAuth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["basicAuth"]},"aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials1Properties":{"properties":{"saslScram512Auth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["saslScram512Auth"]},"aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials2Properties":{"properties":{"saslScram256Auth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["saslScram256Auth"]},"aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials3Properties":{"properties":{"clientCertificateTlsAuth":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"}},"type":"object","required":["clientCertificateTlsAuth"]},"aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationVpc":{"properties":{"securityGroup":{"type":"array","items":{"type":"string"},"description":"List of SecurityGroupId."},"subnets":{"type":"array","items":{"type":"string"},"description":"List of SubnetId."}},"type":"object"},"aws-native:pipes:PipeSelfManagedKafkaStartPosition":{"type":"string","enum":[{"name":"TrimHorizon","value":"TRIM_HORIZON"},{"name":"Latest","value":"LATEST"}]},"aws-native:pipes:PipeSingleMeasureMapping":{"properties":{"measureName":{"type":"string","description":"Target measure name for the measurement attribute in the Timestream table."},"measureValue":{"type":"string","description":"Dynamic path of the source field to map to the measure in the record."},"measureValueType":{"$ref":"#/types/aws-native:pipes:PipeMeasureValueType","description":"Data type of the source field."}},"type":"object","required":["measureName","measureValue","measureValueType"]},"aws-native:pipes:PipeSourceActiveMqBrokerParameters":{"properties":{"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"credentials":{"$ref":"#/types/aws-native:pipes:PipeMqBrokerAccessCredentialsProperties","description":"The credentials needed to access the resource."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."},"queueName":{"type":"string","description":"The name of the destination queue to consume.","replaceOnChanges":true}},"type":"object","required":["credentials","queueName"]},"aws-native:pipes:PipeSourceDynamoDbStreamParameters":{"properties":{"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"deadLetterConfig":{"$ref":"#/types/aws-native:pipes:PipeDeadLetterConfig","description":"Define the target queue to send dead-letter queue events to."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."},"maximumRecordAgeInSeconds":{"type":"integer","description":"Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, EventBridge never discards old records."},"maximumRetryAttempts":{"type":"integer","description":"Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, EventBridge retries failed records until the record expires in the event source."},"onPartialBatchItemFailure":{"$ref":"#/types/aws-native:pipes:PipeOnPartialBatchItemFailureStreams","description":"Define how to handle item process failures. `AUTOMATIC_BISECT` halves each batch and retry each half until all the records are processed or there is one failed message left in the batch."},"parallelizationFactor":{"type":"integer","description":"The number of batches to process concurrently from each shard. The default value is 1."},"startingPosition":{"$ref":"#/types/aws-native:pipes:PipeDynamoDbStreamStartPosition","description":"(Streams only) The position in a stream from which to start reading.\n\n*Valid values* : `TRIM_HORIZON | LATEST`","replaceOnChanges":true}},"type":"object","required":["startingPosition"]},"aws-native:pipes:PipeSourceKinesisStreamParameters":{"properties":{"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"deadLetterConfig":{"$ref":"#/types/aws-native:pipes:PipeDeadLetterConfig","description":"Define the target queue to send dead-letter queue events to."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."},"maximumRecordAgeInSeconds":{"type":"integer","description":"Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, EventBridge never discards old records."},"maximumRetryAttempts":{"type":"integer","description":"Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, EventBridge retries failed records until the record expires in the event source."},"onPartialBatchItemFailure":{"$ref":"#/types/aws-native:pipes:PipeOnPartialBatchItemFailureStreams","description":"Define how to handle item process failures. `AUTOMATIC_BISECT` halves each batch and retry each half until all the records are processed or there is one failed message left in the batch."},"parallelizationFactor":{"type":"integer","description":"The number of batches to process concurrently from each shard. The default value is 1."},"startingPosition":{"$ref":"#/types/aws-native:pipes:PipeKinesisStreamStartPosition","description":"The position in a stream from which to start reading.","replaceOnChanges":true},"startingPositionTimestamp":{"type":"string","description":"With `StartingPosition` set to `AT_TIMESTAMP` , the time from which to start reading, in Unix time seconds.","replaceOnChanges":true}},"type":"object","required":["startingPosition"]},"aws-native:pipes:PipeSourceManagedStreamingKafkaParameters":{"properties":{"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"consumerGroupId":{"type":"string","description":"The name of the destination queue to consume.","replaceOnChanges":true},"credentials":{"oneOf":[{"$ref":"#/types/aws-native:pipes:PipeMskAccessCredentials0Properties"},{"$ref":"#/types/aws-native:pipes:PipeMskAccessCredentials1Properties"}],"description":"The credentials needed to access the resource."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."},"startingPosition":{"$ref":"#/types/aws-native:pipes:PipeMskStartPosition","description":"The position in a stream from which to start reading.","replaceOnChanges":true},"topicName":{"type":"string","description":"The name of the topic that the pipe will read from.","replaceOnChanges":true}},"type":"object","required":["topicName"]},"aws-native:pipes:PipeSourceParameters":{"properties":{"activeMqBrokerParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceActiveMqBrokerParameters","description":"The parameters for using an Active MQ broker as a source."},"dynamoDbStreamParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceDynamoDbStreamParameters","description":"The parameters for using a DynamoDB stream as a source."},"filterCriteria":{"$ref":"#/types/aws-native:pipes:PipeFilterCriteria","description":"The collection of event patterns used to filter events.\n\nTo remove a filter, specify a `FilterCriteria` object with an empty array of `Filter` objects.\n\nFor more information, see [Events and Event Patterns](https://docs.aws.amazon.com/eventbridge/latest/userguide/eventbridge-and-event-patterns.html) in the *Amazon EventBridge User Guide* ."},"kinesisStreamParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceKinesisStreamParameters","description":"The parameters for using a Kinesis stream as a source."},"managedStreamingKafkaParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceManagedStreamingKafkaParameters","description":"The parameters for using an MSK stream as a source."},"rabbitMqBrokerParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceRabbitMqBrokerParameters","description":"The parameters for using a Rabbit MQ broker as a source."},"selfManagedKafkaParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceSelfManagedKafkaParameters","description":"The parameters for using a self-managed Apache Kafka stream as a source.\n\nA *self managed* cluster refers to any Apache Kafka cluster not hosted by AWS . This includes both clusters you manage yourself, as well as those hosted by a third-party provider, such as [Confluent Cloud](https://docs.aws.amazon.com/https://www.confluent.io/) , [CloudKarafka](https://docs.aws.amazon.com/https://www.cloudkarafka.com/) , or [Redpanda](https://docs.aws.amazon.com/https://redpanda.com/) . For more information, see [Apache Kafka streams as a source](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-kafka.html) in the *Amazon EventBridge User Guide* ."},"sqsQueueParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceSqsQueueParameters","description":"The parameters for using a Amazon SQS stream as a source."}},"type":"object"},"aws-native:pipes:PipeSourceRabbitMqBrokerParameters":{"properties":{"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"credentials":{"$ref":"#/types/aws-native:pipes:PipeMqBrokerAccessCredentialsProperties","description":"The credentials needed to access the resource."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."},"queueName":{"type":"string","description":"The name of the destination queue to consume.","replaceOnChanges":true},"virtualHost":{"type":"string","description":"The name of the virtual host associated with the source broker.","replaceOnChanges":true}},"type":"object","required":["credentials","queueName"]},"aws-native:pipes:PipeSourceSelfManagedKafkaParameters":{"properties":{"additionalBootstrapServers":{"type":"array","items":{"type":"string"},"description":"An array of server URLs.","replaceOnChanges":true},"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"consumerGroupId":{"type":"string","description":"The name of the destination queue to consume.","replaceOnChanges":true},"credentials":{"oneOf":[{"$ref":"#/types/aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials0Properties"},{"$ref":"#/types/aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials1Properties"},{"$ref":"#/types/aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials2Properties"},{"$ref":"#/types/aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationCredentials3Properties"}],"description":"The credentials needed to access the resource."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."},"serverRootCaCertificate":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"},"startingPosition":{"$ref":"#/types/aws-native:pipes:PipeSelfManagedKafkaStartPosition","description":"The position in a stream from which to start reading.","replaceOnChanges":true},"topicName":{"type":"string","description":"The name of the topic that the pipe will read from.","replaceOnChanges":true},"vpc":{"$ref":"#/types/aws-native:pipes:PipeSelfManagedKafkaAccessConfigurationVpc","description":"This structure specifies the VPC subnets and security groups for the stream, and whether a public IP address is to be used."}},"type":"object","required":["topicName"]},"aws-native:pipes:PipeSourceSqsQueueParameters":{"properties":{"batchSize":{"type":"integer","description":"The maximum number of records to include in each batch."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum length of a time to wait for events."}},"type":"object"},"aws-native:pipes:PipeState":{"type":"string","enum":[{"name":"Running","value":"RUNNING"},{"name":"Stopped","value":"STOPPED"},{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"},{"name":"Starting","value":"STARTING"},{"name":"Stopping","value":"STOPPING"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"StartFailed","value":"START_FAILED"},{"name":"StopFailed","value":"STOP_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"CreateRollbackFailed","value":"CREATE_ROLLBACK_FAILED"},{"name":"DeleteRollbackFailed","value":"DELETE_ROLLBACK_FAILED"},{"name":"UpdateRollbackFailed","value":"UPDATE_ROLLBACK_FAILED"}]},"aws-native:pipes:PipeTag":{"properties":{"key":{"type":"string","description":"The key of the key-value pair."},"value":{"type":"string","description":"The value of the key-value pair."}},"type":"object","required":["key","value"]},"aws-native:pipes:PipeTargetBatchJobParameters":{"properties":{"arrayProperties":{"$ref":"#/types/aws-native:pipes:PipeBatchArrayProperties","description":"The array properties for the submitted job, such as the size of the array. The array size can be between 2 and 10,000. If you specify array properties for a job, it becomes an array job. This parameter is used only if the target is an AWS Batch job."},"containerOverrides":{"$ref":"#/types/aws-native:pipes:PipeBatchContainerOverrides","description":"The overrides that are sent to a container."},"dependsOn":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeBatchJobDependency"},"description":"A list of dependencies for the job. A job can depend upon a maximum of 20 jobs. You can specify a `SEQUENTIAL` type dependency without specifying a job ID for array jobs so that each child array job completes sequentially, starting at index 0. You can also specify an `N_TO_N` type dependency with a job ID for array jobs. In that case, each index child of this job must wait for the corresponding index child of each dependency to complete before it can begin."},"jobDefinition":{"type":"string","description":"The job definition used by this job. This value can be one of `name` , `name:revision` , or the Amazon Resource Name (ARN) for the job definition. If name is specified without a revision then the latest active revision is used."},"jobName":{"type":"string","description":"The name of the job. It can be up to 128 letters long. The first character must be alphanumeric, can contain uppercase and lowercase letters, numbers, hyphens (-), and underscores (_)."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional parameters passed to the job that replace parameter substitution placeholders that are set in the job definition. Parameters are specified as a key and value pair mapping. Parameters included here override any corresponding parameter defaults from the job definition."},"retryStrategy":{"$ref":"#/types/aws-native:pipes:PipeBatchRetryStrategy","description":"The retry strategy to use for failed jobs. When a retry strategy is specified here, it overrides the retry strategy defined in the job definition."}},"type":"object","required":["jobDefinition","jobName"]},"aws-native:pipes:PipeTargetCloudWatchLogsParameters":{"properties":{"logStreamName":{"type":"string","description":"The name of the log stream."},"timestamp":{"type":"string","description":"A [dynamic path parameter](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-event-target.html) to a field in the payload containing the time the event occurred, expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC.\n\nThe value cannot be a static timestamp as the provided timestamp would be applied to all events delivered by the Pipe, regardless of when they are actually delivered.\n\nIf no dynamic path parameter is provided, the default value is the time the invocation is processed by the Pipe."}},"type":"object"},"aws-native:pipes:PipeTargetEcsTaskParameters":{"properties":{"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeCapacityProviderStrategyItem"},"description":"The capacity provider strategy to use for the task.\n\nIf a `capacityProviderStrategy` is specified, the `launchType` parameter must be omitted. If no `capacityProviderStrategy` or launchType is specified, the `defaultCapacityProviderStrategy` for the cluster is used."},"enableEcsManagedTags":{"type":"boolean","description":"Specifies whether to enable Amazon ECS managed tags for the task. For more information, see [Tagging Your Amazon ECS Resources](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html) in the Amazon Elastic Container Service Developer Guide."},"enableExecuteCommand":{"type":"boolean","description":"Whether or not to enable the execute command functionality for the containers in this task. If true, this enables execute command functionality on all containers in the task."},"group":{"type":"string","description":"Specifies an Amazon ECS task group for the task. The maximum length is 255 characters."},"launchType":{"$ref":"#/types/aws-native:pipes:PipeLaunchType","description":"Specifies the launch type on which your task is running. The launch type that you specify here must match one of the launch type (compatibilities) of the target task. The `FARGATE` value is supported only in the Regions where AWS Fargate with Amazon ECS is supported. For more information, see [AWS Fargate on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/AWS-Fargate.html) in the *Amazon Elastic Container Service Developer Guide* ."},"networkConfiguration":{"$ref":"#/types/aws-native:pipes:PipeNetworkConfiguration","description":"Use this structure if the Amazon ECS task uses the `awsvpc` network mode. This structure specifies the VPC subnets and security groups associated with the task, and whether a public IP address is to be used. This structure is required if `LaunchType` is `FARGATE` because the `awsvpc` mode is required for Fargate tasks.\n\nIf you specify `NetworkConfiguration` when the target ECS task does not use the `awsvpc` network mode, the task fails."},"overrides":{"$ref":"#/types/aws-native:pipes:PipeEcsTaskOverride","description":"The overrides that are associated with a task."},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipePlacementConstraint"},"description":"An array of placement constraint objects to use for the task. You can specify up to 10 constraints per task (including constraints in the task definition and those specified at runtime)."},"placementStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipePlacementStrategy"},"description":"The placement strategy objects to use for the task. You can specify a maximum of five strategy rules per task."},"platformVersion":{"type":"string","description":"Specifies the platform version for the task. Specify only the numeric portion of the platform version, such as `1.1.0` .\n\nThis structure is used only if `LaunchType` is `FARGATE` . For more information about valid platform versions, see [AWS Fargate Platform Versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html) in the *Amazon Elastic Container Service Developer Guide* ."},"propagateTags":{"$ref":"#/types/aws-native:pipes:PipePropagateTags","description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags are not propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the `TagResource` API action."},"referenceId":{"type":"string","description":"The reference ID to use for the task."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeTag"},"description":"The metadata that you apply to the task to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. To learn more, see [RunTask](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html#ECS-RunTask-request-tags) in the Amazon ECS API Reference."},"taskCount":{"type":"integer","description":"The number of tasks to create based on `TaskDefinition` . The default is 1."},"taskDefinitionArn":{"type":"string","description":"The ARN of the task definition to use if the event target is an Amazon ECS task."}},"type":"object","required":["taskDefinitionArn"]},"aws-native:pipes:PipeTargetEventBridgeEventBusParameters":{"properties":{"detailType":{"type":"string","description":"A free-form string, with a maximum of 128 characters, used to decide what fields to expect in the event detail."},"endpointId":{"type":"string","description":"The URL subdomain of the endpoint. For example, if the URL for Endpoint is https://abcde.veo.endpoints.event.amazonaws.com, then the EndpointId is `abcde.veo` ."},"resources":{"type":"array","items":{"type":"string"},"description":"AWS resources, identified by Amazon Resource Name (ARN), which the event primarily concerns. Any number, including zero, may be present."},"source":{"type":"string","description":"The source of the event."},"time":{"type":"string","description":"The time stamp of the event, per [RFC3339](https://docs.aws.amazon.com/https://www.rfc-editor.org/rfc/rfc3339.txt) . If no time stamp is provided, the time stamp of the [PutEvents](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_PutEvents.html) call is used."}},"type":"object"},"aws-native:pipes:PipeTargetHttpParameters":{"properties":{"headerParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The headers that need to be sent as part of request invoking the API Gateway REST API or EventBridge ApiDestination."},"pathParameterValues":{"type":"array","items":{"type":"string"},"description":"The path parameter values to be used to populate API Gateway REST API or EventBridge ApiDestination path wildcards (\"*\")."},"queryStringParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The query string keys/values that need to be sent as part of request invoking the API Gateway REST API or EventBridge ApiDestination."}},"type":"object"},"aws-native:pipes:PipeTargetInvocationType":{"type":"string","enum":[{"name":"RequestResponse","value":"REQUEST_RESPONSE"},{"name":"FireAndForget","value":"FIRE_AND_FORGET"}]},"aws-native:pipes:PipeTargetKinesisStreamParameters":{"properties":{"partitionKey":{"type":"string","description":"Determines which shard in the stream the data record is assigned to. Partition keys are Unicode strings with a maximum length limit of 256 characters for each key. Amazon Kinesis Data Streams uses the partition key as input to a hash function that maps the partition key and associated data to a specific shard. Specifically, an MD5 hash function is used to map partition keys to 128-bit integer values and to map associated data records to shards. As a result of this hashing mechanism, all data records with the same partition key map to the same shard within the stream."}},"type":"object","required":["partitionKey"]},"aws-native:pipes:PipeTargetLambdaFunctionParameters":{"properties":{"invocationType":{"$ref":"#/types/aws-native:pipes:PipeTargetInvocationType","description":"Specify whether to invoke the function synchronously or asynchronously.\n\n- `REQUEST_RESPONSE` (default) - Invoke synchronously. This corresponds to the `RequestResponse` option in the `InvocationType` parameter for the Lambda [Invoke](https://docs.aws.amazon.com/lambda/latest/dg/API_Invoke.html#API_Invoke_RequestSyntax) API.\n- `FIRE_AND_FORGET` - Invoke asynchronously. This corresponds to the `Event` option in the `InvocationType` parameter for the Lambda [Invoke](https://docs.aws.amazon.com/lambda/latest/dg/API_Invoke.html#API_Invoke_RequestSyntax) API.\n\nFor more information, see [Invocation types](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes.html#pipes-invocation) in the *Amazon EventBridge User Guide* ."}},"type":"object"},"aws-native:pipes:PipeTargetParameters":{"properties":{"batchJobParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetBatchJobParameters","description":"The parameters for using an AWS Batch job as a target."},"cloudWatchLogsParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetCloudWatchLogsParameters","description":"The parameters for using an CloudWatch Logs log stream as a target."},"ecsTaskParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetEcsTaskParameters","description":"The parameters for using an Amazon ECS task as a target."},"eventBridgeEventBusParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetEventBridgeEventBusParameters","description":"The parameters for using an EventBridge event bus as a target."},"httpParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetHttpParameters","description":"These are custom parameter to be used when the target is an API Gateway REST APIs or EventBridge ApiDestinations."},"inputTemplate":{"type":"string","description":"Valid JSON text passed to the target. In this case, nothing from the event itself is passed to the target. For more information, see [The JavaScript Object Notation (JSON) Data Interchange Format](https://docs.aws.amazon.com/http://www.rfc-editor.org/rfc/rfc7159.txt) .\n\nTo remove an input template, specify an empty string."},"kinesisStreamParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetKinesisStreamParameters","description":"The parameters for using a Kinesis stream as a target."},"lambdaFunctionParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetLambdaFunctionParameters","description":"The parameters for using a Lambda function as a target."},"redshiftDataParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetRedshiftDataParameters","description":"These are custom parameters to be used when the target is a Amazon Redshift cluster to invoke the Amazon Redshift Data API BatchExecuteStatement."},"sageMakerPipelineParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetSageMakerPipelineParameters","description":"The parameters for using a SageMaker AI pipeline as a target."},"sqsQueueParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetSqsQueueParameters","description":"The parameters for using a Amazon SQS stream as a target."},"stepFunctionStateMachineParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetStateMachineParameters","description":"The parameters for using a Step Functions state machine as a target."},"timestreamParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetTimestreamParameters","description":"The parameters for using a Timestream for LiveAnalytics table as a target."}},"type":"object"},"aws-native:pipes:PipeTargetRedshiftDataParameters":{"properties":{"database":{"type":"string","description":"Redshift Database"},"dbUser":{"type":"string","description":"Database user name"},"secretManagerArn":{"type":"string","description":"Optional SecretManager ARN which stores the database credentials"},"sqls":{"type":"array","items":{"type":"string"},"description":"A list of SQLs."},"statementName":{"type":"string","description":"A name for Redshift DataAPI statement which can be used as filter of ListStatement."},"withEvent":{"type":"boolean","description":"Indicates whether to send an event back to EventBridge after the SQL statement runs."}},"type":"object","required":["database","sqls"]},"aws-native:pipes:PipeTargetSageMakerPipelineParameters":{"properties":{"pipelineParameterList":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeSageMakerPipelineParameter"},"description":"List of Parameter names and values for SageMaker AI Model Building Pipeline execution."}},"type":"object"},"aws-native:pipes:PipeTargetSqsQueueParameters":{"properties":{"messageDeduplicationId":{"type":"string","description":"This parameter applies only to FIFO (first-in-first-out) queues.\n\nThe token used for deduplication of sent messages."},"messageGroupId":{"type":"string","description":"The FIFO message group ID to use as the target."}},"type":"object"},"aws-native:pipes:PipeTargetStateMachineParameters":{"properties":{"invocationType":{"$ref":"#/types/aws-native:pipes:PipeTargetInvocationType","description":"Specify whether to invoke the Step Functions state machine synchronously or asynchronously.\n\n- `REQUEST_RESPONSE` (default) - Invoke synchronously. For more information, see [StartSyncExecution](https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartSyncExecution.html) in the *AWS Step Functions API Reference* .\n\n\u003e `REQUEST_RESPONSE` is not supported for `STANDARD` state machine workflows.\n- `FIRE_AND_FORGET` - Invoke asynchronously. For more information, see [StartExecution](https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html) in the *AWS Step Functions API Reference* .\n\nFor more information, see [Invocation types](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes.html#pipes-invocation) in the *Amazon EventBridge User Guide* ."}},"type":"object"},"aws-native:pipes:PipeTargetTimestreamParameters":{"properties":{"dimensionMappings":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeDimensionMapping"},"description":"Map source data to dimensions in the target Timestream for LiveAnalytics table.\n\nFor more information, see [Amazon Timestream for LiveAnalytics concepts](https://docs.aws.amazon.com/timestream/latest/developerguide/concepts.html)"},"epochTimeUnit":{"$ref":"#/types/aws-native:pipes:PipeEpochTimeUnit","description":"The granularity of the time units used. Default is `MILLISECONDS` .\n\nRequired if `TimeFieldType` is specified as `EPOCH` ."},"multiMeasureMappings":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeMultiMeasureMapping"},"description":"Maps multiple measures from the source event to the same record in the specified Timestream for LiveAnalytics table."},"singleMeasureMappings":{"type":"array","items":{"$ref":"#/types/aws-native:pipes:PipeSingleMeasureMapping"},"description":"Mappings of single source data fields to individual records in the specified Timestream for LiveAnalytics table."},"timeFieldType":{"$ref":"#/types/aws-native:pipes:PipeTimeFieldType","description":"The type of time value used.\n\nThe default is `EPOCH` ."},"timeValue":{"type":"string","description":"Dynamic path to the source data field that represents the time value for your data."},"timestampFormat":{"type":"string","description":"How to format the timestamps. For example, `yyyy-MM-dd'T'HH:mm:ss'Z'` .\n\nRequired if `TimeFieldType` is specified as `TIMESTAMP_FORMAT` ."},"versionValue":{"type":"string","description":"64 bit version value or source data field that represents the version value for your data.\n\nWrite requests with a higher version number will update the existing measure values of the record and version. In cases where the measure value is the same, the version will still be updated.\n\nDefault value is 1.\n\nTimestream for LiveAnalytics does not support updating partial measure values in a record.\n\nWrite requests for duplicate data with a higher version number will update the existing measure value and version. In cases where the measure value is the same, `Version` will still be updated. Default value is `1` .\n\n\u003e `Version` must be `1` or greater, or you will receive a `ValidationException` error."}},"type":"object","required":["dimensionMappings","timeValue","versionValue"]},"aws-native:pipes:PipeTimeFieldType":{"type":"string","enum":[{"name":"Epoch","value":"EPOCH"},{"name":"TimestampFormat","value":"TIMESTAMP_FORMAT"}]},"aws-native:proton:EnvironmentAccountConnectionStatus":{"type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Connected","value":"CONNECTED"},{"name":"Rejected","value":"REJECTED"}]},"aws-native:proton:EnvironmentAccountConnectionTag":{"description":"\u003cp\u003eA description of a resource tag.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eThe key of the resource tag.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eThe value of the resource tag.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:proton:EnvironmentTemplateProvisioning":{"type":"string","enum":[{"name":"CustomerManaged","value":"CUSTOMER_MANAGED"}]},"aws-native:proton:EnvironmentTemplateTag":{"description":"\u003cp\u003eA description of a resource tag.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eThe key of the resource tag.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eThe value of the resource tag.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:proton:ServiceTemplateProvisioning":{"type":"string","enum":[{"name":"CustomerManaged","value":"CUSTOMER_MANAGED"}]},"aws-native:proton:ServiceTemplateTag":{"description":"\u003cp\u003eA description of a resource tag.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eThe key of the resource tag.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eThe value of the resource tag.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:qbusiness:ApplicationAttachmentsConfiguration":{"properties":{"attachmentsControlMode":{"$ref":"#/types/aws-native:qbusiness:ApplicationAttachmentsControlMode","description":"Status information about whether file upload functionality is activated or deactivated for your end user."}},"type":"object","required":["attachmentsControlMode"]},"aws-native:qbusiness:ApplicationAttachmentsControlMode":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:ApplicationAutoSubscriptionConfiguration":{"properties":{"autoSubscribe":{"$ref":"#/types/aws-native:qbusiness:ApplicationAutoSubscriptionStatus","description":"Describes whether automatic subscriptions are enabled for an Amazon Q Business application using IAM identity federation for user management."},"defaultSubscriptionType":{"$ref":"#/types/aws-native:qbusiness:ApplicationSubscriptionType","description":"Describes the default subscription type assigned to an Amazon Q Business application using IAM identity federation for user management. If the value for `autoSubscribe` is set to `ENABLED` you must select a value for this field."}},"type":"object","required":["autoSubscribe"]},"aws-native:qbusiness:ApplicationAutoSubscriptionStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:ApplicationEncryptionConfiguration":{"properties":{"kmsKeyId":{"type":"string","description":"The identifier of the AWS  key. Amazon Q Business doesn't support asymmetric keys."}},"type":"object"},"aws-native:qbusiness:ApplicationIdentityType":{"type":"string","enum":[{"name":"AwsIamIdpSaml","value":"AWS_IAM_IDP_SAML"},{"name":"AwsIamIdpOidc","value":"AWS_IAM_IDP_OIDC"},{"name":"AwsIamIdc","value":"AWS_IAM_IDC"},{"name":"AwsQuicksightIdp","value":"AWS_QUICKSIGHT_IDP"},{"name":"Anonymous","value":"ANONYMOUS"}]},"aws-native:qbusiness:ApplicationPersonalizationConfiguration":{"properties":{"personalizationControlMode":{"$ref":"#/types/aws-native:qbusiness:ApplicationPersonalizationControlMode","description":"An option to allow Amazon Q Business to customize chat responses using user specific metadata—specifically, location and job information—in your IAM Identity Center instance."}},"type":"object","required":["personalizationControlMode"]},"aws-native:qbusiness:ApplicationPersonalizationControlMode":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:ApplicationQAppsConfiguration":{"properties":{"qAppsControlMode":{"$ref":"#/types/aws-native:qbusiness:ApplicationQAppsControlMode","description":"Status information about whether end users can create and use Amazon Q Apps in the web experience."}},"type":"object","required":["qAppsControlMode"]},"aws-native:qbusiness:ApplicationQAppsControlMode":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:ApplicationQuickSightConfiguration":{"properties":{"clientNamespace":{"type":"string","description":"The Amazon Quick Suite namespace that is used as the identity provider. For more information about Quick Suite namespaces, see [Namespace operations](https://docs.aws.amazon.com/quicksight/latest/developerguide/namespace-operations.html) ."}},"type":"object","required":["clientNamespace"]},"aws-native:qbusiness:ApplicationStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"Updating","value":"UPDATING"}]},"aws-native:qbusiness:ApplicationSubscriptionType":{"type":"string","enum":[{"name":"QLite","value":"Q_LITE"},{"name":"QBusiness","value":"Q_BUSINESS"}]},"aws-native:qbusiness:ApplicationTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qbusiness:DataAccessorActionConfiguration":{"properties":{"action":{"type":"string","description":"The Amazon Q Business action that is allowed."},"filterConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataAccessorActionFilterConfiguration","description":"The filter configuration for the action, if any."}},"type":"object","required":["action"]},"aws-native:qbusiness:DataAccessorActionFilterConfiguration":{"properties":{"documentAttributeFilter":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAttributeFilter","description":"Enables filtering of responses based on document attributes or metadata fields."}},"type":"object","required":["documentAttributeFilter"]},"aws-native:qbusiness:DataAccessorAttributeFilter":{"properties":{"andAllFilters":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAttributeFilter"},"description":"Performs a logical `AND` operation on all supplied filters."},"containsAll":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Returns `true` when a document contains all the specified document attributes or metadata fields. Supported for the following [document attribute value types](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `stringListValue` ."},"containsAny":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Returns `true` when a document contains any of the specified document attributes or metadata fields. Supported for the following [document attribute value types](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `stringListValue` ."},"equalsTo":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Performs an equals operation on two document attributes or metadata fields. Supported for the following [document attribute value types](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `dateValue` , `longValue` , `stringListValue` and `stringValue` ."},"greaterThan":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Performs a greater than operation on two document attributes or metadata fields. Supported for the following [document attribute value types](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `dateValue` and `longValue` ."},"greaterThanOrEquals":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Performs a greater or equals than operation on two document attributes or metadata fields. Supported for the following [document attribute value types](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `dateValue` and `longValue` ."},"lessThan":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Performs a less than operation on two document attributes or metadata fields. Supported for the following [document attribute value types](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `dateValue` and `longValue` ."},"lessThanOrEquals":{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttribute","description":"Performs a less than or equals operation on two document attributes or metadata fields.Supported for the following [document attribute value type](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_DocumentAttributeValue.html) : `dateValue` and `longValue` ."},"notFilter":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAttributeFilter","description":"Performs a logical `NOT` operation on all supplied filters."},"orAllFilters":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAttributeFilter"},"description":"Performs a logical `OR` operation on all supplied filters."}},"type":"object"},"aws-native:qbusiness:DataAccessorAuthenticationConfiguration0Properties":{"properties":{"idcTrustedTokenIssuerConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataAccessorIdcTrustedTokenIssuerConfiguration"}},"type":"object","required":["idcTrustedTokenIssuerConfiguration"]},"aws-native:qbusiness:DataAccessorAuthenticationConfigurationProperties":{"properties":{"idcTrustedTokenIssuerConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataAccessorIdcTrustedTokenIssuerConfiguration"}},"type":"object","required":["idcTrustedTokenIssuerConfiguration"]},"aws-native:qbusiness:DataAccessorAuthenticationDetail":{"properties":{"authenticationConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAuthenticationConfigurationProperties","description":"The specific authentication configuration based on the authentication type."},"authenticationType":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAuthenticationType","description":"The type of authentication to use for the data accessor. This determines how the ISV authenticates when accessing data. You can use one of two authentication types:\n\n- `AWS_IAM_IDC_TTI` - Authentication using IAM Identity Center Trusted Token Issuer (TTI). This authentication type allows the ISV to use a trusted token issuer to generate tokens for accessing the data.\n- `AWS_IAM_IDC_AUTH_CODE` - Authentication using IAM Identity Center authorization code flow. This authentication type uses the standard OAuth 2.0 authorization code flow for authentication."},"externalIds":{"type":"array","items":{"type":"string"},"description":"A list of external identifiers associated with this authentication configuration. These are used to correlate the data accessor with external systems."}},"type":"object","required":["authenticationType"]},"aws-native:qbusiness:DataAccessorAuthenticationType":{"type":"string","enum":[{"name":"AwsIamIdcTti","value":"AWS_IAM_IDC_TTI"},{"name":"AwsIamIdcAuthCode","value":"AWS_IAM_IDC_AUTH_CODE"}]},"aws-native:qbusiness:DataAccessorDocumentAttribute":{"properties":{"name":{"type":"string","description":"The identifier for the attribute."},"value":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttributeValue0Properties"},{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttributeValue1Properties"},{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttributeValue2Properties"},{"$ref":"#/types/aws-native:qbusiness:DataAccessorDocumentAttributeValue3Properties"}],"description":"The value of the attribute."}},"type":"object","required":["name","value"]},"aws-native:qbusiness:DataAccessorDocumentAttributeValue0Properties":{"properties":{"stringValue":{"type":"string"}},"type":"object","required":["stringValue"]},"aws-native:qbusiness:DataAccessorDocumentAttributeValue1Properties":{"properties":{"stringListValue":{"type":"array","items":{"type":"string"}}},"type":"object","required":["stringListValue"]},"aws-native:qbusiness:DataAccessorDocumentAttributeValue2Properties":{"properties":{"longValue":{"type":"number"}},"type":"object","required":["longValue"]},"aws-native:qbusiness:DataAccessorDocumentAttributeValue3Properties":{"properties":{"dateValue":{"type":"string"}},"type":"object","required":["dateValue"]},"aws-native:qbusiness:DataAccessorIdcTrustedTokenIssuerConfiguration":{"properties":{"idcTrustedTokenIssuerArn":{"type":"string"}},"type":"object","required":["idcTrustedTokenIssuerArn"]},"aws-native:qbusiness:DataAccessorTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qbusiness:DataSourceAttributeValueOperator":{"type":"string","enum":[{"name":"Delete","value":"DELETE"}]},"aws-native:qbusiness:DataSourceAudioExtractionConfiguration":{"properties":{"audioExtractionStatus":{"$ref":"#/types/aws-native:qbusiness:DataSourceAudioExtractionStatus","description":"The status of audio extraction (ENABLED or DISABLED) for processing audio content from files."}},"type":"object","required":["audioExtractionStatus"]},"aws-native:qbusiness:DataSourceAudioExtractionStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:DataSourceDocumentAttributeCondition":{"properties":{"key":{"type":"string","description":"The identifier of the document attribute used for the condition.\n\nFor example, 'Source_URI' could be an identifier for the attribute or metadata field that contains source URIs associated with the documents.\n\nAmazon Q Business currently doesn't support `_document_body` as an attribute key used for the condition."},"operator":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentEnrichmentConditionOperator","description":"The identifier of the document attribute used for the condition.\n\nFor example, 'Source_URI' could be an identifier for the attribute or metadata field that contains source URIs associated with the documents.\n\nAmazon Q Business currently does not support `_document_body` as an attribute key used for the condition."},"value":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue0Properties"},{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue1Properties"},{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue2Properties"},{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue3Properties"}],"description":"The value of a document attribute. You can only provide one value for a document attribute."}},"type":"object","required":["key","operator"]},"aws-native:qbusiness:DataSourceDocumentAttributeTarget":{"properties":{"attributeValueOperator":{"$ref":"#/types/aws-native:qbusiness:DataSourceAttributeValueOperator","description":"`TRUE` to delete the existing target value for your specified target attribute key. You cannot create a target value and set this to `TRUE` ."},"key":{"type":"string","description":"The identifier of the target document attribute or metadata field. For example, 'Department' could be an identifier for the target attribute or metadata field that includes the department names associated with the documents."},"value":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue0Properties"},{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue1Properties"},{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue2Properties"},{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeValue3Properties"}],"description":"The value of a document attribute. You can only provide one value for a document attribute."}},"type":"object","required":["key"]},"aws-native:qbusiness:DataSourceDocumentAttributeValue0Properties":{"properties":{"stringValue":{"type":"string"}},"type":"object","required":["stringValue"]},"aws-native:qbusiness:DataSourceDocumentAttributeValue1Properties":{"properties":{"stringListValue":{"type":"array","items":{"type":"string"}}},"type":"object","required":["stringListValue"]},"aws-native:qbusiness:DataSourceDocumentAttributeValue2Properties":{"properties":{"longValue":{"type":"number"}},"type":"object","required":["longValue"]},"aws-native:qbusiness:DataSourceDocumentAttributeValue3Properties":{"properties":{"dateValue":{"type":"string"}},"type":"object","required":["dateValue"]},"aws-native:qbusiness:DataSourceDocumentContentOperator":{"type":"string","enum":[{"name":"Delete","value":"DELETE"}]},"aws-native:qbusiness:DataSourceDocumentEnrichmentConditionOperator":{"type":"string","enum":[{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"GreaterThanOrEquals","value":"GREATER_THAN_OR_EQUALS"},{"name":"LessThan","value":"LESS_THAN"},{"name":"LessThanOrEquals","value":"LESS_THAN_OR_EQUALS"},{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"Contains","value":"CONTAINS"},{"name":"NotContains","value":"NOT_CONTAINS"},{"name":"Exists","value":"EXISTS"},{"name":"NotExists","value":"NOT_EXISTS"},{"name":"BeginsWith","value":"BEGINS_WITH"}]},"aws-native:qbusiness:DataSourceDocumentEnrichmentConfiguration":{"properties":{"inlineConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:DataSourceInlineDocumentEnrichmentConfiguration"},"description":"Configuration information to alter document attributes or metadata fields and content when ingesting documents into Amazon Q Business."},"postExtractionHookConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceHookConfiguration","description":"Configuration information for invoking a Lambda function in AWS Lambda on the structured documents with their metadata and text extracted. You can use a Lambda function to apply advanced logic for creating, modifying, or deleting document metadata and content. For more information, see [Using Lambda functions](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/cde-lambda-operations.html) ."},"preExtractionHookConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceHookConfiguration","description":"Configuration information for invoking a Lambda function in AWS Lambda on the original or raw documents before extracting their metadata and text. You can use a Lambda function to apply advanced logic for creating, modifying, or deleting document metadata and content. For more information, see [Using Lambda functions](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/cde-lambda-operations.html) ."}},"type":"object"},"aws-native:qbusiness:DataSourceHookConfiguration":{"properties":{"invocationCondition":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeCondition","description":"The condition used for when a Lambda function should be invoked.\n\nFor example, you can specify a condition that if there are empty date-time values, then Amazon Q Business should invoke a function that inserts the current date-time."},"lambdaArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lambda function during ingestion. For more information, see [Using Lambda functions for Amazon Q Business document enrichment](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/cde-lambda-operations.html) ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a role with permission to run `PreExtractionHookConfiguration` and `PostExtractionHookConfiguration` for altering document metadata and content during the document ingestion process."},"s3BucketName":{"type":"string","description":"Stores the original, raw documents or the structured, parsed documents before and after altering them. For more information, see [Data contracts for Lambda functions](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/cde-lambda-operations.html#cde-lambda-operations-data-contracts) ."}},"type":"object"},"aws-native:qbusiness:DataSourceImageExtractionConfiguration":{"properties":{"imageExtractionStatus":{"$ref":"#/types/aws-native:qbusiness:DataSourceImageExtractionStatus","description":"Specify whether to extract semantic meaning from images and visuals from documents."}},"type":"object","required":["imageExtractionStatus"]},"aws-native:qbusiness:DataSourceImageExtractionStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:DataSourceInlineDocumentEnrichmentConfiguration":{"properties":{"condition":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeCondition","description":"Configuration of the condition used for the target document attribute or metadata field when ingesting documents into Amazon Q Business ."},"documentContentOperator":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentContentOperator","description":"`TRUE` to delete content if the condition used for the target attribute is met."},"target":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentAttributeTarget","description":"Configuration of the target document attribute or metadata field when ingesting documents into Amazon Q Business . You can also include a value."}},"type":"object"},"aws-native:qbusiness:DataSourceMediaExtractionConfiguration":{"properties":{"audioExtractionConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceAudioExtractionConfiguration","description":"Configuration settings for extracting and processing audio content from media files."},"imageExtractionConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceImageExtractionConfiguration","description":"The configuration for extracting semantic meaning from images in documents. For more information, see [Extracting semantic meaning from images and visuals](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/extracting-meaning-from-images.html) ."},"videoExtractionConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceVideoExtractionConfiguration","description":"Configuration settings for extracting and processing video content from media files."}},"type":"object"},"aws-native:qbusiness:DataSourceStatus":{"type":"string","enum":[{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"Updating","value":"UPDATING"}]},"aws-native:qbusiness:DataSourceTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qbusiness:DataSourceVideoExtractionConfiguration":{"properties":{"videoExtractionStatus":{"$ref":"#/types/aws-native:qbusiness:DataSourceVideoExtractionStatus","description":"The status of video extraction (ENABLED or DISABLED) for processing video content from files."}},"type":"object","required":["videoExtractionStatus"]},"aws-native:qbusiness:DataSourceVideoExtractionStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:DataSourceVpcConfiguration":{"properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of identifiers of security groups within your Amazon VPC. The security groups should enable Amazon Q Business to connect to the data source."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of identifiers for subnets within your Amazon VPC. The subnets should be able to connect to each other in the VPC, and they should have outgoing access to the Internet through a NAT device."}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:qbusiness:IndexAttributeType":{"type":"string","enum":[{"name":"String","value":"STRING"},{"name":"StringList","value":"STRING_LIST"},{"name":"Number","value":"NUMBER"},{"name":"Date","value":"DATE"}]},"aws-native:qbusiness:IndexCapacityConfiguration":{"properties":{"units":{"type":"number","description":"The number of storage units configured for an Amazon Q Business index."}},"type":"object"},"aws-native:qbusiness:IndexDocumentAttributeConfiguration":{"properties":{"name":{"type":"string","description":"The name of the document attribute."},"search":{"$ref":"#/types/aws-native:qbusiness:QBusinessIndexStatus","description":"Information about whether the document attribute can be used by an end user to search for information on their web experience."},"type":{"$ref":"#/types/aws-native:qbusiness:IndexAttributeType","description":"The type of document attribute."}},"type":"object"},"aws-native:qbusiness:IndexStatistics":{"properties":{"textDocumentStatistics":{"$ref":"#/types/aws-native:qbusiness:IndexTextDocumentStatistics","description":"The number of documents indexed."}},"type":"object"},"aws-native:qbusiness:IndexStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"Updating","value":"UPDATING"}]},"aws-native:qbusiness:IndexTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qbusiness:IndexTextDocumentStatistics":{"properties":{"indexedTextBytes":{"type":"number","description":"The total size, in bytes, of the indexed documents."},"indexedTextDocumentCount":{"type":"number","description":"The number of text documents indexed."}},"type":"object"},"aws-native:qbusiness:IndexType":{"type":"string","enum":[{"name":"Enterprise","value":"ENTERPRISE"},{"name":"Starter","value":"STARTER"}]},"aws-native:qbusiness:PermissionCondition":{"properties":{"conditionKey":{"type":"string"},"conditionOperator":{"$ref":"#/types/aws-native:qbusiness:PermissionConditionConditionOperator"},"conditionValues":{"type":"array","items":{"type":"string"}}},"type":"object","required":["conditionKey","conditionOperator","conditionValues"]},"aws-native:qbusiness:PermissionConditionConditionOperator":{"type":"string","enum":[{"name":"StringEquals","value":"StringEquals"}]},"aws-native:qbusiness:PluginApiSchema0Properties":{"properties":{"payload":{"type":"string"}},"type":"object","required":["payload"]},"aws-native:qbusiness:PluginApiSchema1Properties":{"properties":{"s3":{"$ref":"#/types/aws-native:qbusiness:PluginS3"}},"type":"object","required":["s3"]},"aws-native:qbusiness:PluginApiSchemaType":{"type":"string","enum":[{"name":"OpenApiV3","value":"OPEN_API_V3"}]},"aws-native:qbusiness:PluginAuthConfiguration0Properties":{"properties":{"basicAuthConfiguration":{"$ref":"#/types/aws-native:qbusiness:PluginBasicAuthConfiguration"}},"type":"object","required":["basicAuthConfiguration"]},"aws-native:qbusiness:PluginAuthConfiguration1Properties":{"properties":{"oAuth2ClientCredentialConfiguration":{"$ref":"#/types/aws-native:qbusiness:PluginOAuth2ClientCredentialConfiguration"}},"type":"object","required":["oAuth2ClientCredentialConfiguration"]},"aws-native:qbusiness:PluginAuthConfiguration2Properties":{"properties":{"noAuthConfiguration":{"$ref":"#/types/aws-native:qbusiness:PluginNoAuthConfiguration"}},"type":"object","required":["noAuthConfiguration"]},"aws-native:qbusiness:PluginBasicAuthConfiguration":{"properties":{"roleArn":{"type":"string"},"secretArn":{"type":"string"}},"type":"object","required":["roleArn","secretArn"]},"aws-native:qbusiness:PluginBuildStatus":{"type":"string","enum":[{"name":"Ready","value":"READY"},{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:qbusiness:PluginCustomPluginConfiguration":{"properties":{"apiSchema":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:PluginApiSchema0Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginApiSchema1Properties"}],"description":"Contains either details about the S3 object containing the OpenAPI schema for the action group or the JSON or YAML-formatted payload defining the schema."},"apiSchemaType":{"$ref":"#/types/aws-native:qbusiness:PluginApiSchemaType","description":"The type of OpenAPI schema to use."},"description":{"type":"string","description":"A description for your custom plugin configuration."}},"type":"object","required":["apiSchema","apiSchemaType","description"]},"aws-native:qbusiness:PluginNoAuthConfiguration":{"type":"object"},"aws-native:qbusiness:PluginOAuth2ClientCredentialConfiguration":{"properties":{"authorizationUrl":{"type":"string"},"roleArn":{"type":"string"},"secretArn":{"type":"string"},"tokenUrl":{"type":"string"}},"type":"object","required":["roleArn","secretArn"]},"aws-native:qbusiness:PluginS3":{"properties":{"bucket":{"type":"string"},"key":{"type":"string"}},"type":"object","required":["bucket","key"]},"aws-native:qbusiness:PluginState":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:PluginTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qbusiness:PluginType":{"type":"string","enum":[{"name":"ServiceNow","value":"SERVICE_NOW"},{"name":"Salesforce","value":"SALESFORCE"},{"name":"Jira","value":"JIRA"},{"name":"Zendesk","value":"ZENDESK"},{"name":"Custom","value":"CUSTOM"},{"name":"Quicksight","value":"QUICKSIGHT"},{"name":"ServicenowNowPlatform","value":"SERVICENOW_NOW_PLATFORM"},{"name":"JiraCloud","value":"JIRA_CLOUD"},{"name":"SalesforceCrm","value":"SALESFORCE_CRM"},{"name":"ZendeskSuite","value":"ZENDESK_SUITE"},{"name":"AtlassianConfluence","value":"ATLASSIAN_CONFLUENCE"},{"name":"GoogleCalendar","value":"GOOGLE_CALENDAR"},{"name":"MicrosoftTeams","value":"MICROSOFT_TEAMS"},{"name":"MicrosoftExchange","value":"MICROSOFT_EXCHANGE"},{"name":"PagerdutyAdvance","value":"PAGERDUTY_ADVANCE"},{"name":"Smartsheet","value":"SMARTSHEET"},{"name":"Asana","value":"ASANA"}]},"aws-native:qbusiness:QBusinessIndexStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:RetrieverConfiguration0Properties":{"properties":{"nativeIndexConfiguration":{"$ref":"#/types/aws-native:qbusiness:RetrieverNativeIndexConfiguration"}},"type":"object","required":["nativeIndexConfiguration"]},"aws-native:qbusiness:RetrieverConfiguration1Properties":{"properties":{"kendraIndexConfiguration":{"$ref":"#/types/aws-native:qbusiness:RetrieverKendraIndexConfiguration"}},"type":"object","required":["kendraIndexConfiguration"]},"aws-native:qbusiness:RetrieverKendraIndexConfiguration":{"properties":{"indexId":{"type":"string"}},"type":"object","required":["indexId"]},"aws-native:qbusiness:RetrieverNativeIndexConfiguration":{"properties":{"indexId":{"type":"string"}},"type":"object","required":["indexId"]},"aws-native:qbusiness:RetrieverStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"}]},"aws-native:qbusiness:RetrieverTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qbusiness:RetrieverType":{"type":"string","enum":[{"name":"NativeIndex","value":"NATIVE_INDEX"},{"name":"KendraIndex","value":"KENDRA_INDEX"}]},"aws-native:qbusiness:WebExperienceBrowserExtension":{"type":"string","enum":[{"name":"Firefox","value":"FIREFOX"},{"name":"Chrome","value":"CHROME"}]},"aws-native:qbusiness:WebExperienceBrowserExtensionConfiguration":{"properties":{"enabledBrowserExtensions":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:WebExperienceBrowserExtension"},"description":"Specify the browser extensions allowed for your Amazon Q web experience.\n\n- `CHROME` — Enables the extension for Chromium-based browsers (Google Chrome, Microsoft Edge, Opera, etc.).\n- `FIREFOX` — Enables the extension for Mozilla Firefox.\n- `CHROME` and `FIREFOX` — Enable the extension for Chromium-based browsers and Mozilla Firefox."}},"type":"object","required":["enabledBrowserExtensions"]},"aws-native:qbusiness:WebExperienceCustomizationConfiguration":{"properties":{"customCssUrl":{"type":"string","description":"Provides the URL where the custom CSS file is hosted for an Amazon Q web experience."},"faviconUrl":{"type":"string","description":"Provides the URL where the custom favicon file is hosted for an Amazon Q web experience."},"fontUrl":{"type":"string","description":"Provides the URL where the custom font file is hosted for an Amazon Q web experience."},"logoUrl":{"type":"string","description":"Provides the URL where the custom logo file is hosted for an Amazon Q web experience."}},"type":"object"},"aws-native:qbusiness:WebExperienceIdentityProviderConfiguration0Properties":{"properties":{"samlConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceSamlProviderConfiguration"}},"type":"object","required":["samlConfiguration"]},"aws-native:qbusiness:WebExperienceIdentityProviderConfiguration1Properties":{"properties":{"openIdConnectConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceOpenIdConnectProviderConfiguration"}},"type":"object","required":["openIdConnectConfiguration"]},"aws-native:qbusiness:WebExperienceOpenIdConnectProviderConfiguration":{"properties":{"secretsArn":{"type":"string"},"secretsRole":{"type":"string"}},"type":"object","required":["secretsArn","secretsRole"]},"aws-native:qbusiness:WebExperienceSamlProviderConfiguration":{"properties":{"authenticationUrl":{"type":"string"}},"type":"object","required":["authenticationUrl"]},"aws-native:qbusiness:WebExperienceSamplePromptsControlMode":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:qbusiness:WebExperienceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"PendingAuthConfig","value":"PENDING_AUTH_CONFIG"}]},"aws-native:qbusiness:WebExperienceTag":{"properties":{"key":{"type":"string","description":"The key for the tag. Keys are not case sensitive and must be unique for the Amazon Q Business application or data source."},"value":{"type":"string","description":"The value associated with the tag. The value may be an empty string but it can't be null."}},"type":"object","required":["key","value"]},"aws-native:qldb:StreamKinesisConfiguration":{"properties":{"aggregationEnabled":{"type":"boolean","description":"Enables QLDB to publish multiple data records in a single Kinesis Data Streams record, increasing the number of records sent per API call.\n\nDefault: `True`\n\n\u003e Record aggregation has important implications for processing records and requires de-aggregation in your stream consumer. To learn more, see [KPL Key Concepts](https://docs.aws.amazon.com/streams/latest/dev/kinesis-kpl-concepts.html) and [Consumer De-aggregation](https://docs.aws.amazon.com/streams/latest/dev/kinesis-kpl-consumer-deaggregation.html) in the *Amazon Kinesis Data Streams Developer Guide* ."},"streamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Kinesis Data Streams resource."}},"type":"object"},"aws-native:qldb:StreamTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:quicksight:ActionConnectorApiKeyConnectionMetadata":{"properties":{"apiKey":{"type":"string"},"baseEndpoint":{"type":"string"},"email":{"type":"string"}},"type":"object","required":["apiKey","baseEndpoint"]},"aws-native:quicksight:ActionConnectorAuthConfig":{"properties":{"authenticationMetadata":{"oneOf":[{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthenticationMetadata0Properties"},{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthenticationMetadata1Properties"},{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthenticationMetadata2Properties"},{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthenticationMetadata3Properties"},{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthenticationMetadata4Properties"},{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthenticationMetadata5Properties"}]},"authenticationType":{"$ref":"#/types/aws-native:quicksight:ActionConnectorConnectionAuthType"}},"type":"object","required":["authenticationMetadata","authenticationType"]},"aws-native:quicksight:ActionConnectorAuthenticationMetadata0Properties":{"properties":{"authorizationCodeGrantMetadata":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthorizationCodeGrantMetadata"}},"type":"object","required":["authorizationCodeGrantMetadata"]},"aws-native:quicksight:ActionConnectorAuthenticationMetadata1Properties":{"properties":{"clientCredentialsGrantMetadata":{"$ref":"#/types/aws-native:quicksight:ActionConnectorClientCredentialsGrantMetadata"}},"type":"object","required":["clientCredentialsGrantMetadata"]},"aws-native:quicksight:ActionConnectorAuthenticationMetadata2Properties":{"properties":{"basicAuthConnectionMetadata":{"$ref":"#/types/aws-native:quicksight:ActionConnectorBasicAuthConnectionMetadata"}},"type":"object","required":["basicAuthConnectionMetadata"]},"aws-native:quicksight:ActionConnectorAuthenticationMetadata3Properties":{"properties":{"apiKeyConnectionMetadata":{"$ref":"#/types/aws-native:quicksight:ActionConnectorApiKeyConnectionMetadata"}},"type":"object","required":["apiKeyConnectionMetadata"]},"aws-native:quicksight:ActionConnectorAuthenticationMetadata4Properties":{"properties":{"noneConnectionMetadata":{"$ref":"#/types/aws-native:quicksight:ActionConnectorNoneConnectionMetadata"}},"type":"object","required":["noneConnectionMetadata"]},"aws-native:quicksight:ActionConnectorAuthenticationMetadata5Properties":{"properties":{"iamConnectionMetadata":{"$ref":"#/types/aws-native:quicksight:ActionConnectorIamConnectionMetadata"}},"type":"object","required":["iamConnectionMetadata"]},"aws-native:quicksight:ActionConnectorAuthorizationCodeGrantCredentialsDetails0Properties":{"properties":{"authorizationCodeGrantDetails":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthorizationCodeGrantDetails"}},"type":"object","required":["authorizationCodeGrantDetails"]},"aws-native:quicksight:ActionConnectorAuthorizationCodeGrantCredentialsDetailsProperties":{"properties":{"authorizationCodeGrantDetails":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthorizationCodeGrantDetails"}},"type":"object","required":["authorizationCodeGrantDetails"]},"aws-native:quicksight:ActionConnectorAuthorizationCodeGrantCredentialsSource":{"type":"string","enum":[{"name":"PlainCredentials","value":"PLAIN_CREDENTIALS"}]},"aws-native:quicksight:ActionConnectorAuthorizationCodeGrantDetails":{"properties":{"authorizationEndpoint":{"type":"string"},"clientId":{"type":"string"},"clientSecret":{"type":"string"},"tokenEndpoint":{"type":"string"}},"type":"object","required":["authorizationEndpoint","clientId","clientSecret","tokenEndpoint"]},"aws-native:quicksight:ActionConnectorAuthorizationCodeGrantMetadata":{"properties":{"authorizationCodeGrantCredentialsDetails":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthorizationCodeGrantCredentialsDetailsProperties"},"authorizationCodeGrantCredentialsSource":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthorizationCodeGrantCredentialsSource"},"baseEndpoint":{"type":"string"},"redirectUrl":{"type":"string"}},"type":"object","required":["baseEndpoint","redirectUrl"]},"aws-native:quicksight:ActionConnectorBasicAuthConnectionMetadata":{"properties":{"baseEndpoint":{"type":"string"},"password":{"type":"string"},"username":{"type":"string"}},"type":"object","required":["baseEndpoint","password","username"]},"aws-native:quicksight:ActionConnectorClientCredentialsDetails0Properties":{"properties":{"clientCredentialsGrantDetails":{"$ref":"#/types/aws-native:quicksight:ActionConnectorClientCredentialsGrantDetails"}},"type":"object","required":["clientCredentialsGrantDetails"]},"aws-native:quicksight:ActionConnectorClientCredentialsDetailsProperties":{"properties":{"clientCredentialsGrantDetails":{"$ref":"#/types/aws-native:quicksight:ActionConnectorClientCredentialsGrantDetails"}},"type":"object","required":["clientCredentialsGrantDetails"]},"aws-native:quicksight:ActionConnectorClientCredentialsGrantDetails":{"properties":{"clientId":{"type":"string"},"clientSecret":{"type":"string"},"tokenEndpoint":{"type":"string"}},"type":"object","required":["clientId","clientSecret","tokenEndpoint"]},"aws-native:quicksight:ActionConnectorClientCredentialsGrantMetadata":{"properties":{"baseEndpoint":{"type":"string"},"clientCredentialsDetails":{"$ref":"#/types/aws-native:quicksight:ActionConnectorClientCredentialsDetailsProperties"},"clientCredentialsSource":{"$ref":"#/types/aws-native:quicksight:ActionConnectorClientCredentialsSource"}},"type":"object","required":["baseEndpoint"]},"aws-native:quicksight:ActionConnectorClientCredentialsSource":{"type":"string","enum":[{"name":"PlainCredentials","value":"PLAIN_CREDENTIALS"}]},"aws-native:quicksight:ActionConnectorConnectionAuthType":{"type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"ApiKey","value":"API_KEY"},{"name":"Oauth2ClientCredentials","value":"OAUTH2_CLIENT_CREDENTIALS"},{"name":"None","value":"NONE"},{"name":"Iam","value":"IAM"},{"name":"Oauth2AuthorizationCode","value":"OAUTH2_AUTHORIZATION_CODE"}]},"aws-native:quicksight:ActionConnectorIamConnectionMetadata":{"properties":{"roleArn":{"type":"string"}},"type":"object","required":["roleArn"]},"aws-native:quicksight:ActionConnectorNoneConnectionMetadata":{"properties":{"baseEndpoint":{"type":"string"}},"type":"object","required":["baseEndpoint"]},"aws-native:quicksight:ActionConnectorResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:ActionConnectorResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:quicksight:ActionConnectorTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:ActionConnectorType":{"type":"string","enum":[{"name":"GenericHttp","value":"GENERIC_HTTP"},{"name":"ServicenowNowPlatform","value":"SERVICENOW_NOW_PLATFORM"},{"name":"SalesforceCrm","value":"SALESFORCE_CRM"},{"name":"MicrosoftOutlook","value":"MICROSOFT_OUTLOOK"},{"name":"PagerdutyAdvance","value":"PAGERDUTY_ADVANCE"},{"name":"JiraCloud","value":"JIRA_CLOUD"},{"name":"AtlassianConfluence","value":"ATLASSIAN_CONFLUENCE"},{"name":"AmazonS3","value":"AMAZON_S3"},{"name":"AmazonBedrockAgentRuntime","value":"AMAZON_BEDROCK_AGENT_RUNTIME"},{"name":"AmazonBedrockRuntime","value":"AMAZON_BEDROCK_RUNTIME"},{"name":"AmazonBedrockDataAutomationRuntime","value":"AMAZON_BEDROCK_DATA_AUTOMATION_RUNTIME"},{"name":"AmazonTextract","value":"AMAZON_TEXTRACT"},{"name":"AmazonComprehend","value":"AMAZON_COMPREHEND"},{"name":"AmazonComprehendMedical","value":"AMAZON_COMPREHEND_MEDICAL"},{"name":"MicrosoftOnedrive","value":"MICROSOFT_ONEDRIVE"},{"name":"MicrosoftSharepoint","value":"MICROSOFT_SHAREPOINT"},{"name":"MicrosoftTeams","value":"MICROSOFT_TEAMS"},{"name":"SapBusinesspartner","value":"SAP_BUSINESSPARTNER"},{"name":"SapProductmasterdata","value":"SAP_PRODUCTMASTERDATA"},{"name":"SapPhysicalinventory","value":"SAP_PHYSICALINVENTORY"},{"name":"SapBillofmaterials","value":"SAP_BILLOFMATERIALS"},{"name":"SapMaterialstock","value":"SAP_MATERIALSTOCK"},{"name":"ZendeskSuite","value":"ZENDESK_SUITE"},{"name":"Smartsheet","value":"SMARTSHEET"},{"name":"Slack","value":"SLACK"},{"name":"Asana","value":"ASANA"},{"name":"BambooHr","value":"BAMBOO_HR"}]},"aws-native:quicksight:AnalysisAggregationFunction":{"properties":{"attributeAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisAttributeAggregationFunction","description":"Aggregation for attributes."},"categoricalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoricalAggregationFunction","description":"Aggregation for categorical values.\n\n- `COUNT` : Aggregate by the total number of values, including duplicates.\n- `DISTINCT_COUNT` : Aggregate by the total number of distinct values."},"dateAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisDateAggregationFunction","description":"Aggregation for date values.\n\n- `COUNT` : Aggregate by the total number of values, including duplicates.\n- `DISTINCT_COUNT` : Aggregate by the total number of distinct values.\n- `MIN` : Select the smallest date value.\n- `MAX` : Select the largest date value."},"numericalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericalAggregationFunction","description":"Aggregation for numerical values."}},"type":"object"},"aws-native:quicksight:AnalysisAggregationSortConfiguration":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationFunction","description":"The function that aggregates the values in `Column` ."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that determines the sort order of aggregated values."},"sortDirection":{"$ref":"#/types/aws-native:quicksight:AnalysisSortDirection","description":"The sort direction of values.\n\n- `ASC` : Sort in ascending order.\n- `DESC` : Sort in descending order."}},"type":"object","required":["column","sortDirection"]},"aws-native:quicksight:AnalysisAllSheetsFilterScopeConfiguration":{"type":"object"},"aws-native:quicksight:AnalysisAnchorDateConfiguration":{"properties":{"anchorOption":{"$ref":"#/types/aws-native:quicksight:AnalysisAnchorOption","description":"The options for the date configuration. Choose one of the options below:\n\n- `NOW`"},"parameterName":{"type":"string","description":"The name of the parameter that is used for the anchor date configuration."}},"type":"object"},"aws-native:quicksight:AnalysisAnchorOption":{"type":"string","enum":[{"name":"Now","value":"NOW"}]},"aws-native:quicksight:AnalysisArcAxisConfiguration":{"properties":{"range":{"$ref":"#/types/aws-native:quicksight:AnalysisArcAxisDisplayRange","description":"The arc axis range of a `GaugeChartVisual` ."},"reserveRange":{"type":"number","description":"The reserved range of the arc axis."}},"type":"object"},"aws-native:quicksight:AnalysisArcAxisDisplayRange":{"properties":{"max":{"type":"number","description":"The maximum value of the arc axis range."},"min":{"type":"number","description":"The minimum value of the arc axis range."}},"type":"object"},"aws-native:quicksight:AnalysisArcConfiguration":{"properties":{"arcAngle":{"type":"number","description":"The option that determines the arc angle of a `GaugeChartVisual` ."},"arcThickness":{"$ref":"#/types/aws-native:quicksight:AnalysisArcThicknessOptions","description":"The options that determine the arc thickness of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisArcOptions":{"properties":{"arcThickness":{"$ref":"#/types/aws-native:quicksight:AnalysisArcThickness","description":"The arc thickness of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisArcThickness":{"type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"Whole","value":"WHOLE"}]},"aws-native:quicksight:AnalysisArcThicknessOptions":{"type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:quicksight:AnalysisAssetOptions":{"properties":{"timezone":{"type":"string","description":"Determines the timezone for the analysis."},"weekStart":{"$ref":"#/types/aws-native:quicksight:AnalysisDayOfTheWeek","description":"Determines the week start day for an analysis."}},"type":"object"},"aws-native:quicksight:AnalysisAttributeAggregationFunction":{"properties":{"simpleAttributeAggregation":{"$ref":"#/types/aws-native:quicksight:AnalysisSimpleAttributeAggregationFunction","description":"The built-in aggregation functions for attributes.\n\n- `UNIQUE_VALUE` : Returns the unique value for a field, aggregated by the dimension fields."},"valueForMultipleValues":{"type":"string","description":"Used by the `UNIQUE_VALUE` aggregation function. If there are multiple values for the field used by the aggregation, the value for this property will be returned instead. Defaults to '*'."}},"type":"object"},"aws-native:quicksight:AnalysisAxisBinding":{"type":"string","enum":[{"name":"PrimaryYaxis","value":"PRIMARY_YAXIS"},{"name":"SecondaryYaxis","value":"SECONDARY_YAXIS"}]},"aws-native:quicksight:AnalysisAxisDataOptions":{"properties":{"dateAxisOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDateAxisOptions","description":"The options for an axis with a date field."},"numericAxisOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericAxisOptions","description":"The options for an axis with a numeric field."}},"type":"object"},"aws-native:quicksight:AnalysisAxisDisplayDataDrivenRange":{"type":"object"},"aws-native:quicksight:AnalysisAxisDisplayMinMaxRange":{"properties":{"maximum":{"type":"number","description":"The maximum setup for an axis display range."},"minimum":{"type":"number","description":"The minimum setup for an axis display range."}},"type":"object"},"aws-native:quicksight:AnalysisAxisDisplayOptions":{"properties":{"axisLineVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not the axis line is visible."},"axisOffset":{"type":"string","description":"String based length that is composed of value and unit in px"},"dataOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDataOptions","description":"The data options for an axis."},"gridLineVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not the grid line is visible."},"scrollbarOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisScrollBarOptions","description":"The scroll bar options for an axis."},"tickLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisTickLabelOptions","description":"The tick label options of an axis."}},"type":"object"},"aws-native:quicksight:AnalysisAxisDisplayRange":{"properties":{"dataDriven":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayDataDrivenRange","description":"The data-driven setup of an axis display range."},"minMax":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayMinMaxRange","description":"The minimum and maximum setup of an axis display range."}},"type":"object"},"aws-native:quicksight:AnalysisAxisLabelOptions":{"properties":{"applyTo":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisLabelReferenceOptions","description":"The options that indicate which field the label belongs to."},"customLabel":{"type":"string","description":"The text for the axis label."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The font configuration of the axis label."}},"type":"object"},"aws-native:quicksight:AnalysisAxisLabelReferenceOptions":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the axis label is targeted to."},"fieldId":{"type":"string","description":"The field that the axis label is targeted to."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisAxisLinearScale":{"properties":{"stepCount":{"type":"number","description":"The step count setup of a linear axis."},"stepSize":{"type":"number","description":"The step size setup of a linear axis."}},"type":"object"},"aws-native:quicksight:AnalysisAxisLogarithmicScale":{"properties":{"base":{"type":"number","description":"The base setup of a logarithmic axis scale."}},"type":"object"},"aws-native:quicksight:AnalysisAxisScale":{"properties":{"linear":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisLinearScale","description":"The linear axis scale setup."},"logarithmic":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisLogarithmicScale","description":"The logarithmic axis scale setup."}},"type":"object"},"aws-native:quicksight:AnalysisAxisTickLabelOptions":{"properties":{"labelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"Determines whether or not the axis ticks are visible."},"rotationAngle":{"type":"number","description":"The rotation angle of the axis tick labels."}},"type":"object"},"aws-native:quicksight:AnalysisBarChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category (y-axis) field well of a bar chart."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The color (group/color) field well of a bar chart."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The small multiples field well of a bar chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a bar chart. Values are aggregated by category."}},"type":"object"},"aws-native:quicksight:AnalysisBarChartConfiguration":{"properties":{"barsArrangement":{"$ref":"#/types/aws-native:quicksight:AnalysisBarsArrangement","description":"Determines the arrangement of the bars. The orientation and arrangement of bars determine the type of bar that is used in the visual."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) for bar chart category."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a bar chart."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a color that is used in a bar chart."},"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisContributionAnalysisDefault"},"description":"The contribution analysis (anomaly configuration) setup of the visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisBarChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"orientation":{"$ref":"#/types/aws-native:quicksight:AnalysisBarChartOrientation","description":"The orientation of the bars in a bar chart visual. There are two valid values in this structure:\n\n- `HORIZONTAL` : Used for charts that have horizontal bars. Visuals that use this value are horizontal bar charts, horizontal stacked bar charts, and horizontal stacked 100% bar charts.\n- `VERTICAL` : Used for charts that have vertical bars. Visuals that use this value are vertical bar charts, vertical stacked bar charts, and vertical stacked 100% bar charts."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLine"},"description":"The reference line setup of the visual."},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBarChartSortConfiguration","description":"The sort configuration of a `BarChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."},"valueAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) for a bar chart value."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a bar chart value."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisBarChartFieldWells":{"properties":{"barChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisBarChartAggregatedFieldWells","description":"The aggregated field wells of a bar chart."}},"type":"object"},"aws-native:quicksight:AnalysisBarChartOrientation":{"type":"string","enum":[{"name":"Horizontal","value":"HORIZONTAL"},{"name":"Vertical","value":"VERTICAL"}]},"aws-native:quicksight:AnalysisBarChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of categories displayed in a bar chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of category fields."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of values displayed in a bar chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of color fields in a bar chart."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:AnalysisBarChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBarChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisBarsArrangement":{"type":"string","enum":[{"name":"Clustered","value":"CLUSTERED"},{"name":"Stacked","value":"STACKED"},{"name":"StackedPercent","value":"STACKED_PERCENT"}]},"aws-native:quicksight:AnalysisBaseMapStyleType":{"type":"string","enum":[{"name":"LightGray","value":"LIGHT_GRAY"},{"name":"DarkGray","value":"DARK_GRAY"},{"name":"Street","value":"STREET"},{"name":"Imagery","value":"IMAGERY"}]},"aws-native:quicksight:AnalysisBinCountOptions":{"properties":{"value":{"type":"number","description":"The options that determine the bin count value."}},"type":"object"},"aws-native:quicksight:AnalysisBinWidthOptions":{"properties":{"binCountLimit":{"type":"number","description":"The options that determine the bin count limit."},"value":{"type":"number","description":"The options that determine the bin width value."}},"type":"object"},"aws-native:quicksight:AnalysisBodySectionConfiguration":{"properties":{"content":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionContent","description":"The configuration of content in a body section."},"pageBreakConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionPageBreakConfiguration","description":"The configuration of a page break for a section."},"repeatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionRepeatConfiguration","description":"Describes the configurations that are required to declare a section as repeating."},"sectionId":{"type":"string","description":"The unique identifier of a body section."},"style":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionStyle","description":"The style options of a body section."}},"type":"object","required":["content","sectionId"]},"aws-native:quicksight:AnalysisBodySectionContent":{"properties":{"layout":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionLayoutConfiguration","description":"The layout configuration of a body section."}},"type":"object"},"aws-native:quicksight:AnalysisBodySectionDynamicCategoryDimensionConfiguration":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"limit":{"type":"number","description":"Number of values to use from the column for repetition."},"sortByMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnSort"},"description":"Sort criteria on the column values that you use for repetition."}},"type":"object","required":["column"]},"aws-native:quicksight:AnalysisBodySectionDynamicNumericDimensionConfiguration":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"limit":{"type":"number","description":"Number of values to use from the column for repetition."},"sortByMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnSort"},"description":"Sort criteria on the column values that you use for repetition."}},"type":"object","required":["column"]},"aws-native:quicksight:AnalysisBodySectionRepeatConfiguration":{"properties":{"dimensionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionRepeatDimensionConfiguration"},"description":"List of `BodySectionRepeatDimensionConfiguration` values that describe the dataset column and constraints for the column used to repeat the contents of a section."},"nonRepeatingVisuals":{"type":"array","items":{"type":"string"},"description":"List of visuals to exclude from repetition in repeating sections. The visuals will render identically, and ignore the repeating configurations in all repeating instances."},"pageBreakConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionRepeatPageBreakConfiguration","description":"Page break configuration to apply for each repeating instance."}},"type":"object"},"aws-native:quicksight:AnalysisBodySectionRepeatDimensionConfiguration":{"properties":{"dynamicCategoryDimensionConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionDynamicCategoryDimensionConfiguration","description":"Describes the *Category* dataset column and constraints around the dynamic values that will be used in repeating the section contents."},"dynamicNumericDimensionConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionDynamicNumericDimensionConfiguration","description":"Describes the *Numeric* dataset column and constraints around the dynamic values used to repeat the contents of a section."}},"type":"object"},"aws-native:quicksight:AnalysisBodySectionRepeatPageBreakConfiguration":{"properties":{"after":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionAfterPageBreak"}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The group by field well of a box plot chart. Values are grouped based on group by fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field well of a box plot chart. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotChartConfiguration":{"properties":{"boxPlotOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotOptions","description":"The box plot chart options for a box plot visual"},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a box plot category."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility and sort Icon visibility) of a box plot category."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions"},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a box plot category."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) of a box plot value."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLine"},"description":"The reference line setup of the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotSortConfiguration","description":"The sort configuration of a `BoxPlotVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotFieldWells":{"properties":{"boxPlotAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotAggregatedFieldWells","description":"The aggregated field wells of a box plot."}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotFillStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Transparent","value":"TRANSPARENT"}]},"aws-native:quicksight:AnalysisBoxPlotOptions":{"properties":{"allDataPointsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of all data points of the box plot."},"outlierVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the outlier in a box plot."},"styleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotStyleOptions","description":"The style options of the box plot."}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotSortConfiguration":{"properties":{"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of a group by fields."},"paginationConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPaginationConfiguration","description":"The pagination configuration of a table visual or box plot."}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotStyleOptions":{"properties":{"fillStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotFillStyle","description":"The fill styles (solid, transparent) of the box plot."}},"type":"object"},"aws-native:quicksight:AnalysisBoxPlotVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisCalculatedField":{"properties":{"dataSetIdentifier":{"type":"string","description":"The data set that is used in this calculated field."},"expression":{"type":"string","description":"The expression of the calculated field."},"name":{"type":"string","description":"The name of the calculated field."}},"type":"object","required":["dataSetIdentifier","expression","name"]},"aws-native:quicksight:AnalysisCalculatedMeasureField":{"properties":{"expression":{"type":"string","description":"The expression in the table calculation."},"fieldId":{"type":"string","description":"The custom field ID."}},"type":"object","required":["expression","fieldId"]},"aws-native:quicksight:AnalysisCascadingControlConfiguration":{"properties":{"sourceControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisCascadingControlSource"},"description":"A list of source controls that determine the values that are used in the current control."}},"type":"object"},"aws-native:quicksight:AnalysisCascadingControlSource":{"properties":{"columnToMatch":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column identifier that determines which column to look up for the source sheet control."},"sourceSheetControlId":{"type":"string","description":"The source sheet control ID of a `CascadingControlSource` ."}},"type":"object"},"aws-native:quicksight:AnalysisCategoricalAggregationFunction":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"}]},"aws-native:quicksight:AnalysisCategoricalDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `CategoricalDimensionField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisStringFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisCategoricalMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoricalAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `CategoricalMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisStringFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisCategoryDrillDownFilter":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"A list of the string inputs that are the values of the category drill down filter."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."}},"type":"object","required":["categoryValues","column"]},"aws-native:quicksight:AnalysisCategoryFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"configuration":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterConfiguration","description":"The configuration for a `CategoryFilter` ."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."}},"type":"object","required":["column","configuration","filterId"]},"aws-native:quicksight:AnalysisCategoryFilterConfiguration":{"properties":{"customFilterConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomFilterConfiguration","description":"A custom filter that filters based on a single value. This filter can be partially matched."},"customFilterListConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomFilterListConfiguration","description":"A list of custom filter values. In the Quick Sight console, this filter type is called a custom filter list."},"filterListConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterListConfiguration","description":"A list of filter configurations. In the Quick Sight console, this filter type is called a filter list."}},"type":"object"},"aws-native:quicksight:AnalysisCategoryFilterMatchOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"},{"name":"Contains","value":"CONTAINS"},{"name":"DoesNotContain","value":"DOES_NOT_CONTAIN"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"}]},"aws-native:quicksight:AnalysisCategoryFilterSelectAllOptions":{"type":"string","enum":[{"name":"FilterAllValues","value":"FILTER_ALL_VALUES"}]},"aws-native:quicksight:AnalysisCategoryInnerFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"configuration":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterConfiguration"},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration"}},"type":"object","required":["column","configuration"]},"aws-native:quicksight:AnalysisChartAxisLabelOptions":{"properties":{"axisLabelOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisLabelOptions"},"description":"The label options for a chart axis."},"sortIconVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration of the sort icon on a chart's axis label."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of an axis label on a chart. Choose one of the following options:\n\n- `VISIBLE` : Shows the axis.\n- `HIDDEN` : Hides the axis."}},"type":"object"},"aws-native:quicksight:AnalysisClusterMarker":{"properties":{"simpleClusterMarker":{"$ref":"#/types/aws-native:quicksight:AnalysisSimpleClusterMarker","description":"The simple cluster marker of the cluster marker."}},"type":"object"},"aws-native:quicksight:AnalysisClusterMarkerConfiguration":{"properties":{"clusterMarker":{"$ref":"#/types/aws-native:quicksight:AnalysisClusterMarker","description":"The cluster marker that is a part of the cluster marker configuration."}},"type":"object"},"aws-native:quicksight:AnalysisColorFillType":{"type":"string","enum":[{"name":"Discrete","value":"DISCRETE"},{"name":"Gradient","value":"GRADIENT"}]},"aws-native:quicksight:AnalysisColorScale":{"properties":{"colorFillType":{"$ref":"#/types/aws-native:quicksight:AnalysisColorFillType","description":"Determines the color fill type."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataColor"},"description":"Determines the list of colors that are applied to the visual."},"nullValueColor":{"$ref":"#/types/aws-native:quicksight:AnalysisDataColor","description":"Determines the color that is applied to null values."}},"type":"object","required":["colorFillType","colors"]},"aws-native:quicksight:AnalysisColorsConfiguration":{"properties":{"customColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomColor"},"description":"A list of up to 50 custom colors."}},"type":"object"},"aws-native:quicksight:AnalysisColumnConfiguration":{"properties":{"colorsConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisColorsConfiguration","description":"The color configurations of the column."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFormatConfiguration","description":"The format configuration of a column."},"role":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnRole","description":"The role of the column."}},"type":"object","required":["column"]},"aws-native:quicksight:AnalysisColumnHierarchy":{"properties":{"dateTimeHierarchy":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeHierarchy","description":"The option that determines the hierarchy of any `DateTime` fields."},"explicitHierarchy":{"$ref":"#/types/aws-native:quicksight:AnalysisExplicitHierarchy","description":"The option that determines the hierarchy of the fields that are built within a visual's field wells. These fields can't be duplicated to other visuals."},"predefinedHierarchy":{"$ref":"#/types/aws-native:quicksight:AnalysisPredefinedHierarchy","description":"The option that determines the hierarchy of the fields that are defined during data preparation. These fields are available to use in any analysis that uses the data source."}},"type":"object"},"aws-native:quicksight:AnalysisColumnIdentifier":{"properties":{"columnName":{"type":"string","description":"The name of the column."},"dataSetIdentifier":{"type":"string","description":"The data set that the column belongs to."}},"type":"object","required":["columnName","dataSetIdentifier"]},"aws-native:quicksight:AnalysisColumnRole":{"type":"string","enum":[{"name":"Dimension","value":"DIMENSION"},{"name":"Measure","value":"MEASURE"}]},"aws-native:quicksight:AnalysisColumnSort":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationFunction","description":"The aggregation function that is defined in the column sort."},"direction":{"$ref":"#/types/aws-native:quicksight:AnalysisSortDirection","description":"The sort direction."},"sortBy":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"}},"type":"object","required":["direction","sortBy"]},"aws-native:quicksight:AnalysisColumnTooltipItem":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationFunction","description":"The aggregation function of the column tooltip item."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The target column of the tooltip item."},"label":{"type":"string","description":"The label of the tooltip item."},"tooltipTarget":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipTarget","description":"Determines the target of the column tooltip item in a combo chart visual."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the tooltip item."}},"type":"object","required":["column"]},"aws-native:quicksight:AnalysisComboChartAggregatedFieldWells":{"properties":{"barValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The aggregated `BarValues` field well of a combo chart."},"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The aggregated category field wells of a combo chart."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The aggregated colors field well of a combo chart."},"lineValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The aggregated `LineValues` field well of a combo chart."}},"type":"object"},"aws-native:quicksight:AnalysisComboChartConfiguration":{"properties":{"barDataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed.\n\nThe data label options for a bar in a combo chart."},"barsArrangement":{"$ref":"#/types/aws-native:quicksight:AnalysisBarsArrangement","description":"Determines the bar arrangement in a combo chart. The following are valid values in this structure:\n\n- `CLUSTERED` : For clustered bar combo charts.\n- `STACKED` : For stacked bar combo charts.\n- `STACKED_PERCENT` : Do not use. If you use this value, the operation returns a validation error."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The category axis of a combo chart."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart category (group/color) field well."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's color field well."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisComboChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"lineDataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed.\n\nThe data label options for a line in a combo chart."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of a combo chart's primary y-axis (bar) field well."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's primary y-axis (bar) field well."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLine"},"description":"The reference line setup of the visual."},"secondaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a combo chart's secondary y-axis (line) field well."},"secondaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's secondary y-axis(line) field well."},"singleAxisOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSingleAxisOptions"},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisComboChartSortConfiguration","description":"The sort configuration of a `ComboChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The legend display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisComboChartFieldWells":{"properties":{"comboChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisComboChartAggregatedFieldWells","description":"The aggregated field wells of a combo chart. Combo charts only have aggregated field wells. Columns in a combo chart are aggregated by category."}},"type":"object"},"aws-native:quicksight:AnalysisComboChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The item limit configuration for the category field well of a combo chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the category field well in a combo chart."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The item limit configuration of the color field well in a combo chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the color field well in a combo chart."}},"type":"object"},"aws-native:quicksight:AnalysisComboChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisComboChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisCommitMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:AnalysisComparisonConfiguration":{"properties":{"comparisonFormat":{"$ref":"#/types/aws-native:quicksight:AnalysisComparisonFormatConfiguration","description":"The format of the comparison."},"comparisonMethod":{"$ref":"#/types/aws-native:quicksight:AnalysisComparisonMethod","description":"The method of the comparison. Choose from the following options:\n\n- `DIFFERENCE`\n- `PERCENT_DIFFERENCE`\n- `PERCENT`"}},"type":"object"},"aws-native:quicksight:AnalysisComparisonFormatConfiguration":{"properties":{"numberDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberDisplayFormatConfiguration","description":"The number display format."},"percentageDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPercentageDisplayFormatConfiguration","description":"The percentage display format."}},"type":"object"},"aws-native:quicksight:AnalysisComparisonMethod":{"type":"string","enum":[{"name":"Difference","value":"DIFFERENCE"},{"name":"PercentDifference","value":"PERCENT_DIFFERENCE"},{"name":"Percent","value":"PERCENT"}]},"aws-native:quicksight:AnalysisComputation":{"properties":{"forecast":{"$ref":"#/types/aws-native:quicksight:AnalysisForecastComputation","description":"The forecast computation configuration."},"growthRate":{"$ref":"#/types/aws-native:quicksight:AnalysisGrowthRateComputation","description":"The growth rate computation configuration."},"maximumMinimum":{"$ref":"#/types/aws-native:quicksight:AnalysisMaximumMinimumComputation","description":"The maximum and minimum computation configuration."},"metricComparison":{"$ref":"#/types/aws-native:quicksight:AnalysisMetricComparisonComputation","description":"The metric comparison computation configuration."},"periodOverPeriod":{"$ref":"#/types/aws-native:quicksight:AnalysisPeriodOverPeriodComputation","description":"The period over period computation configuration."},"periodToDate":{"$ref":"#/types/aws-native:quicksight:AnalysisPeriodToDateComputation","description":"The period to `DataSetIdentifier` computation configuration."},"topBottomMovers":{"$ref":"#/types/aws-native:quicksight:AnalysisTopBottomMoversComputation","description":"The top movers and bottom movers computation configuration."},"topBottomRanked":{"$ref":"#/types/aws-native:quicksight:AnalysisTopBottomRankedComputation","description":"The top ranked and bottom ranked computation configuration."},"totalAggregation":{"$ref":"#/types/aws-native:quicksight:AnalysisTotalAggregationComputation","description":"The total aggregation computation configuration."},"uniqueValues":{"$ref":"#/types/aws-native:quicksight:AnalysisUniqueValuesComputation","description":"The unique values computation configuration."}},"type":"object"},"aws-native:quicksight:AnalysisConditionalFormattingColor":{"properties":{"gradient":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingGradientColor","description":"Formatting configuration for gradient color."},"solid":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingSolidColor","description":"Formatting configuration for solid color."}},"type":"object"},"aws-native:quicksight:AnalysisConditionalFormattingCustomIconCondition":{"properties":{"color":{"type":"string","description":"Determines the color of the icon."},"displayConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIconDisplayConfiguration","description":"Determines the icon display configuration."},"expression":{"type":"string","description":"The expression that determines the condition of the icon set."},"iconOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingCustomIconOptions","description":"Custom icon options for an icon set."}},"type":"object","required":["expression","iconOptions"]},"aws-native:quicksight:AnalysisConditionalFormattingCustomIconOptions":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisIcon","description":"Determines the type of icon."},"unicodeIcon":{"type":"string","description":"Determines the Unicode icon type."}},"type":"object"},"aws-native:quicksight:AnalysisConditionalFormattingGradientColor":{"properties":{"color":{"$ref":"#/types/aws-native:quicksight:AnalysisGradientColor","description":"Determines the color."},"expression":{"type":"string","description":"The expression that determines the formatting configuration for gradient color."}},"type":"object","required":["color","expression"]},"aws-native:quicksight:AnalysisConditionalFormattingIcon":{"properties":{"customCondition":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingCustomIconCondition","description":"Determines the custom condition for an icon set."},"iconSet":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIconSet","description":"Formatting configuration for icon set."}},"type":"object"},"aws-native:quicksight:AnalysisConditionalFormattingIconDisplayConfiguration":{"properties":{"iconDisplayOption":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIconDisplayOption","description":"Determines the icon display configuration."}},"type":"object"},"aws-native:quicksight:AnalysisConditionalFormattingIconDisplayOption":{"type":"string","enum":[{"name":"IconOnly","value":"ICON_ONLY"}]},"aws-native:quicksight:AnalysisConditionalFormattingIconSet":{"properties":{"expression":{"type":"string","description":"The expression that determines the formatting configuration for the icon set."},"iconSetType":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIconSetType","description":"Determines the icon set type."}},"type":"object","required":["expression"]},"aws-native:quicksight:AnalysisConditionalFormattingIconSetType":{"type":"string","enum":[{"name":"PlusMinus","value":"PLUS_MINUS"},{"name":"CheckX","value":"CHECK_X"},{"name":"ThreeColorArrow","value":"THREE_COLOR_ARROW"},{"name":"ThreeGrayArrow","value":"THREE_GRAY_ARROW"},{"name":"CaretUpMinusDown","value":"CARET_UP_MINUS_DOWN"},{"name":"ThreeShape","value":"THREE_SHAPE"},{"name":"ThreeCircle","value":"THREE_CIRCLE"},{"name":"Flags","value":"FLAGS"},{"name":"Bars","value":"BARS"},{"name":"FourColorArrow","value":"FOUR_COLOR_ARROW"},{"name":"FourGrayArrow","value":"FOUR_GRAY_ARROW"}]},"aws-native:quicksight:AnalysisConditionalFormattingSolidColor":{"properties":{"color":{"type":"string","description":"Determines the color."},"expression":{"type":"string","description":"The expression that determines the formatting configuration for solid color."}},"type":"object","required":["expression"]},"aws-native:quicksight:AnalysisContextMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:AnalysisDashboardBehavior","description":"The availability status of the context menu options. If the value of this property is set to `ENABLED` , dashboard readers can interact with the context menu."}},"type":"object"},"aws-native:quicksight:AnalysisContributionAnalysisDefault":{"properties":{"contributorDimensions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"description":"The dimensions columns that are used in the contribution analysis, usually a list of `ColumnIdentifiers` ."},"measureFieldId":{"type":"string","description":"The measure field that is used in the contribution analysis."}},"type":"object","required":["contributorDimensions","measureFieldId"]},"aws-native:quicksight:AnalysisCrossDatasetTypes":{"type":"string","enum":[{"name":"AllDatasets","value":"ALL_DATASETS"},{"name":"SingleDataset","value":"SINGLE_DATASET"}]},"aws-native:quicksight:AnalysisCurrencyDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numberScale":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberScale","description":"Determines the number scale value for the currency format."},"prefix":{"type":"string","description":"Determines the prefix value of the currency format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the currency format."},"symbol":{"type":"string","description":"Determines the symbol for the currency format."}},"type":"object"},"aws-native:quicksight:AnalysisCustomActionFilterOperation":{"properties":{"selectedFieldsConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterOperationSelectedFieldsConfiguration","description":"The configuration that chooses the fields to be filtered."},"targetVisualsConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterOperationTargetVisualsConfiguration","description":"The configuration that chooses the target visuals to be filtered."}},"type":"object","required":["selectedFieldsConfiguration","targetVisualsConfiguration"]},"aws-native:quicksight:AnalysisCustomActionNavigationOperation":{"properties":{"localNavigationConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisLocalNavigationConfiguration","description":"The configuration that chooses the navigation target."}},"type":"object"},"aws-native:quicksight:AnalysisCustomActionSetParametersOperation":{"properties":{"parameterValueConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSetParameterValueConfiguration"},"description":"The parameter that determines the value configuration."}},"type":"object","required":["parameterValueConfigurations"]},"aws-native:quicksight:AnalysisCustomActionUrlOperation":{"properties":{"urlTarget":{"$ref":"#/types/aws-native:quicksight:AnalysisUrlTargetConfiguration","description":"The target of the `CustomActionURLOperation` .\n\nValid values are defined as follows:\n\n- `NEW_TAB` : Opens the target URL in a new browser tab.\n- `NEW_WINDOW` : Opens the target URL in a new browser window.\n- `SAME_TAB` : Opens the target URL in the same browser tab."},"urlTemplate":{"type":"string","description":"THe URL link of the `CustomActionURLOperation` ."}},"type":"object","required":["urlTarget","urlTemplate"]},"aws-native:quicksight:AnalysisCustomColor":{"properties":{"color":{"type":"string","description":"The color that is applied to the data value."},"fieldValue":{"type":"string","description":"The data value that the color is applied to."},"specialValue":{"$ref":"#/types/aws-native:quicksight:AnalysisSpecialValue","description":"The value of a special data value."}},"type":"object","required":["color"]},"aws-native:quicksight:AnalysisCustomContentConfiguration":{"properties":{"contentType":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomContentType","description":"The content type of the custom content visual. You can use this to have the visual render as an image."},"contentUrl":{"type":"string","description":"The input URL that links to the custom content that you want in the custom visual."},"imageScaling":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomContentImageScalingConfiguration","description":"The sizing options for the size of the custom content visual. This structure is required when the `ContentType` of the visual is `'IMAGE'` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."}},"type":"object"},"aws-native:quicksight:AnalysisCustomContentImageScalingConfiguration":{"type":"string","enum":[{"name":"FitToHeight","value":"FIT_TO_HEIGHT"},{"name":"FitToWidth","value":"FIT_TO_WIDTH"},{"name":"DoNotScale","value":"DO_NOT_SCALE"},{"name":"ScaleToVisual","value":"SCALE_TO_VISUAL"}]},"aws-native:quicksight:AnalysisCustomContentType":{"type":"string","enum":[{"name":"Image","value":"IMAGE"},{"name":"OtherEmbeddedContent","value":"OTHER_EMBEDDED_CONTENT"}]},"aws-native:quicksight:AnalysisCustomContentVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomContentConfiguration","description":"The configuration of a `CustomContentVisual` ."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used to create the custom content visual. You can't create a visual without a dataset."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:AnalysisCustomFilterConfiguration":{"properties":{"categoryValue":{"type":"string","description":"The category value for the filter.\n\nThis field is mutually exclusive to `ParameterName` ."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value.\n\nThis field is mutually exclusive to `CategoryValue` ."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator","nullOption"]},"aws-native:quicksight:AnalysisCustomFilterListConfiguration":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"The list of category values for the filter."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator","nullOption"]},"aws-native:quicksight:AnalysisCustomNarrativeOptions":{"properties":{"narrative":{"type":"string","description":"The string input of custom narrative."}},"type":"object","required":["narrative"]},"aws-native:quicksight:AnalysisCustomParameterValues":{"properties":{"dateTimeValues":{"type":"array","items":{"type":"string"},"description":"A list of datetime-type parameter values."},"decimalValues":{"type":"array","items":{"type":"number"},"description":"A list of decimal-type parameter values."},"integerValues":{"type":"array","items":{"type":"number"},"description":"A list of integer-type parameter values."},"stringValues":{"type":"array","items":{"type":"string"},"description":"A list of string-type parameter values."}},"type":"object"},"aws-native:quicksight:AnalysisCustomValuesConfiguration":{"properties":{"customValues":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomParameterValues"},"includeNullValue":{"type":"boolean","description":"Includes the null value in custom action parameter values."}},"type":"object","required":["customValues"]},"aws-native:quicksight:AnalysisDashboardBehavior":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:AnalysisDataBarsOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID for the data bars options."},"negativeColor":{"type":"string","description":"The color of the negative data bar."},"positiveColor":{"type":"string","description":"The color of the positive data bar."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisDataColor":{"properties":{"color":{"type":"string","description":"The color that is applied to the data value."},"dataValue":{"type":"number","description":"The data value that the color is applied to."}},"type":"object"},"aws-native:quicksight:AnalysisDataFieldSeriesItem":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisBinding","description":"The axis that you are binding the field to."},"fieldId":{"type":"string","description":"The field ID of the field that you are setting the axis binding to."},"fieldValue":{"type":"string","description":"The field value of the field that you are setting the axis binding to."},"settings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartSeriesSettings","description":"The options that determine the presentation of line series associated to the field."}},"type":"object","required":["axisBinding","fieldId"]},"aws-native:quicksight:AnalysisDataLabelContent":{"type":"string","enum":[{"name":"Value","value":"VALUE"},{"name":"Percent","value":"PERCENT"},{"name":"ValueAndPercent","value":"VALUE_AND_PERCENT"}]},"aws-native:quicksight:AnalysisDataLabelOptions":{"properties":{"categoryLabelVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the category field labels."},"dataLabelTypes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelType"},"description":"The option that determines the data label type."},"labelColor":{"type":"string","description":"Determines the color of the data labels."},"labelContent":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelContent","description":"Determines the content of the data labels."},"labelFontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"Determines the font configuration of the data labels."},"measureLabelVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the measure field labels."},"overlap":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOverlap","description":"Determines whether overlap is enabled or disabled for the data labels."},"position":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelPosition","description":"Determines the position of the data labels."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the total."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the data labels."}},"type":"object"},"aws-native:quicksight:AnalysisDataLabelOverlap":{"type":"string","enum":[{"name":"DisableOverlap","value":"DISABLE_OVERLAP"},{"name":"EnableOverlap","value":"ENABLE_OVERLAP"}]},"aws-native:quicksight:AnalysisDataLabelPosition":{"type":"string","enum":[{"name":"Inside","value":"INSIDE"},{"name":"Outside","value":"OUTSIDE"},{"name":"Left","value":"LEFT"},{"name":"Top","value":"TOP"},{"name":"Bottom","value":"BOTTOM"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:AnalysisDataLabelType":{"properties":{"dataPathLabelType":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathLabelType","description":"The option that specifies individual data values for labels."},"fieldLabelType":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldLabelType","description":"Determines the label configuration for the entire field."},"maximumLabelType":{"$ref":"#/types/aws-native:quicksight:AnalysisMaximumLabelType","description":"Determines the label configuration for the maximum value in a visual."},"minimumLabelType":{"$ref":"#/types/aws-native:quicksight:AnalysisMinimumLabelType","description":"Determines the label configuration for the minimum value in a visual."},"rangeEndsLabelType":{"$ref":"#/types/aws-native:quicksight:AnalysisRangeEndsLabelType","description":"Determines the label configuration for range end value in a visual."}},"type":"object"},"aws-native:quicksight:AnalysisDataPathColor":{"properties":{"color":{"type":"string","description":"The color that needs to be applied to the element."},"element":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathValue","description":"The element that the color needs to be applied to."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The time granularity of the field that the color needs to be applied to."}},"type":"object","required":["color","element"]},"aws-native:quicksight:AnalysisDataPathLabelType":{"properties":{"fieldId":{"type":"string","description":"The field ID of the field that the data label needs to be applied to."},"fieldValue":{"type":"string","description":"The actual value of the field that is labeled."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the data label."}},"type":"object"},"aws-native:quicksight:AnalysisDataPathSort":{"properties":{"direction":{"$ref":"#/types/aws-native:quicksight:AnalysisSortDirection","description":"Determines the sort direction."},"sortPaths":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathValue"},"description":"The list of data paths that need to be sorted."}},"type":"object","required":["direction","sortPaths"]},"aws-native:quicksight:AnalysisDataPathType":{"properties":{"pivotTableDataPathType":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableDataPathType","description":"The type of data path value utilized in a pivot table. Choose one of the following options:\n\n- `HIERARCHY_ROWS_LAYOUT_COLUMN` - The type of data path for the rows layout column, when `RowsLayout` is set to `HIERARCHY` .\n- `MULTIPLE_ROW_METRICS_COLUMN` - The type of data path for the metric column when the row is set to Metric Placement.\n- `EMPTY_COLUMN_HEADER` - The type of data path for the column with empty column header, when there is no field in `ColumnsFieldWell` and the row is set to Metric Placement.\n- `COUNT_METRIC_COLUMN` - The type of data path for the column with `COUNT` as the metric, when there is no field in the `ValuesFieldWell` ."}},"type":"object"},"aws-native:quicksight:AnalysisDataPathValue":{"properties":{"dataPathType":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathType","description":"The type configuration of the field."},"fieldId":{"type":"string","description":"The field ID of the field that needs to be sorted."},"fieldValue":{"type":"string","description":"The actual value of the field that needs to be sorted."}},"type":"object"},"aws-native:quicksight:AnalysisDataSetIdentifierDeclaration":{"properties":{"dataSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data set."},"identifier":{"type":"string","description":"The identifier of the data set, typically the data set's name."}},"type":"object","required":["dataSetArn","identifier"]},"aws-native:quicksight:AnalysisDataSetReference":{"description":"\u003cp\u003eDataset reference.\u003c/p\u003e","properties":{"dataSetArn":{"type":"string","description":"\u003cp\u003eDataset Amazon Resource Name (ARN).\u003c/p\u003e"},"dataSetPlaceholder":{"type":"string","description":"\u003cp\u003eDataset placeholder.\u003c/p\u003e"}},"type":"object","required":["dataSetArn","dataSetPlaceholder"]},"aws-native:quicksight:AnalysisDateAggregationFunction":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"}]},"aws-native:quicksight:AnalysisDateAxisOptions":{"properties":{"missingDateVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not missing dates are displayed."}},"type":"object"},"aws-native:quicksight:AnalysisDateDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `DateDimensionField` ."},"dateGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The date granularity of the `DateDimensionField` . Choose one of the following options:\n\n- `YEAR`\n- `QUARTER`\n- `MONTH`\n- `WEEK`\n- `DAY`\n- `HOUR`\n- `MINUTE`\n- `SECOND`\n- `MILLISECOND`"},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisDateMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisDateAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `DateMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisDateTimeDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:AnalysisDynamicDefaultValue","description":"The dynamic value of the `DataTimeDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:AnalysisRollingDateConfiguration","description":"The rolling date of the `DataTimeDefaultValues` . The date is determined from the dataset based on input expression."},"staticValues":{"type":"array","items":{"type":"string"},"description":"The static values of the `DataTimeDefaultValues` ."}},"type":"object"},"aws-native:quicksight:AnalysisDateTimeFormatConfiguration":{"properties":{"dateTimeFormat":{"type":"string","description":"Determines the `DateTime` format."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numericFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericFormatConfiguration","description":"The formatting configuration for numeric `DateTime` fields."}},"type":"object"},"aws-native:quicksight:AnalysisDateTimeHierarchy":{"properties":{"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDrillDownFilter"},"description":"The option that determines the drill down filters for the `DateTime` hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the `DateTime` hierarchy."}},"type":"object","required":["hierarchyId"]},"aws-native:quicksight:AnalysisDateTimeParameter":{"description":"\u003cp\u003eA date-time parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eA display name for the date-time parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe values for the date-time parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:AnalysisDateTimeParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `DateTime` parameter when a value has not been set."}},"type":"object","required":["name"]},"aws-native:quicksight:AnalysisDateTimePickerControlDisplayOptions":{"properties":{"dateIconVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The date icon visibility of the `DateTimePickerControlDisplayOptions` ."},"dateTimeFormat":{"type":"string","description":"Customize how dates are formatted in controls."},"helperTextVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The helper text visibility of the `DateTimePickerControlDisplayOptions` ."},"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisDateTimeValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"string","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:AnalysisValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:AnalysisDayOfTheWeek":{"type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:quicksight:AnalysisDecimalDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:AnalysisDynamicDefaultValue","description":"The dynamic value of the `DecimalDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"number"},"description":"The static values of the `DecimalDefaultValues` ."}},"type":"object"},"aws-native:quicksight:AnalysisDecimalParameter":{"description":"\u003cp\u003eA decimal parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eA display name for the decimal parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"number"},"description":"\u003cp\u003eThe values for the decimal parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:AnalysisDecimalParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `Decimal` parameter when a value has not been set."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:AnalysisDecimalPlacesConfiguration":{"properties":{"decimalPlaces":{"type":"number","description":"The values of the decimal places."}},"type":"object","required":["decimalPlaces"]},"aws-native:quicksight:AnalysisDecimalValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"number","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:AnalysisValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultDateTimePickerControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configuration of the Apply button on a `DateTimePickerControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimePickerControlDisplayOptions","description":"The display options of a control."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlDateTimePickerType","description":"The date time picker type of the `DefaultDateTimePickerControlOptions` . Choose one of the following options:\n\n- `SINGLE_VALUED` : The filter condition is a fixed date.\n- `DATE_RANGE` : The filter condition is a date time range."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultFilterControlConfiguration":{"properties":{"controlOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlOptions","description":"The control option for the `DefaultFilterControlConfiguration` ."},"title":{"type":"string","description":"The title of the `DefaultFilterControlConfiguration` . This title is shared by all controls that are tied to this filter."}},"type":"object","required":["controlOptions","title"]},"aws-native:quicksight:AnalysisDefaultFilterControlOptions":{"properties":{"defaultDateTimePickerOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultDateTimePickerControlOptions","description":"The default options that correspond to the filter control type of a `DateTimePicker` ."},"defaultDropdownOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterDropDownControlOptions","description":"The default options that correspond to the `Dropdown` filter control type."},"defaultListOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterListControlOptions","description":"The default options that correspond to the `List` filter control type."},"defaultRelativeDateTimeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultRelativeDateTimeControlOptions","description":"The default options that correspond to the `RelativeDateTime` filter control type."},"defaultSliderOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultSliderControlOptions","description":"The default options that correspond to the `Slider` filter control type."},"defaultTextAreaOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultTextAreaControlOptions","description":"The default options that correspond to the `TextArea` filter control type."},"defaultTextFieldOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultTextFieldControlOptions","description":"The default options that correspond to the `TextField` filter control type."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultFilterDropDownControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configuration of the Apply button on a `FilterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDropDownControlDisplayOptions","description":"The display options of a control."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterSelectableValues","description":"A list of selectable values that are used in a control."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlListType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultFilterListControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisListControlDisplayOptions","description":"The display options of a control."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterSelectableValues","description":"A list of selectable values that are used in a control."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlListType","description":"The type of the `DefaultFilterListControlOptions` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from the list.\n- `SINGLE_SELECT` : The user can select a single entry from the list."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultFreeFormLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a free-form layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:AnalysisDefaultGridLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGridLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a grid layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:AnalysisDefaultInteractiveLayoutConfiguration":{"properties":{"freeForm":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFreeFormLayoutConfiguration","description":"The options that determine the default settings of a free-form layout configuration."},"grid":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultGridLayoutConfiguration","description":"The options that determine the default settings for a grid layout configuration."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultNewSheetConfiguration":{"properties":{"interactiveLayoutConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultInteractiveLayoutConfiguration","description":"The options that determine the default settings for interactive layout configuration."},"paginatedLayoutConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultPaginatedLayoutConfiguration","description":"The options that determine the default settings for a paginated layout configuration."},"sheetContentType":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetContentType","description":"The option that determines the sheet content type."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultPaginatedLayoutConfiguration":{"properties":{"sectionBased":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultSectionBasedLayoutConfiguration","description":"The options that determine the default settings for a section-based layout configuration."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultRelativeDateTimeControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configuration of the Apply button on a `RelativeDateTimeControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisRelativeDateTimeControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultSectionBasedLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionBasedLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a section-based layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:AnalysisDefaultSliderControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSliderControlDisplayOptions","description":"The display options of a control."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlSliderType","description":"The type of the `DefaultSliderControlOptions` . Choose one of the following options:\n\n- `SINGLE_POINT` : Filter against(equals) a single data point.\n- `RANGE` : Filter data that is in a specified range."}},"type":"object","required":["maximumValue","minimumValue","stepSize"]},"aws-native:quicksight:AnalysisDefaultTextAreaControlOptions":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextAreaControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:AnalysisDefaultTextFieldControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextFieldControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:AnalysisDefaults":{"properties":{"defaultNewSheetConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultNewSheetConfiguration","description":"The configuration for default new sheet settings."}},"type":"object","required":["defaultNewSheetConfiguration"]},"aws-native:quicksight:AnalysisDefinition":{"properties":{"analysisDefaults":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaults"},"calculatedFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisCalculatedField"},"description":"An array of calculated field definitions for the analysis."},"columnConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnConfiguration"},"description":"An array of analysis-level column configurations. Column configurations can be used to set default formatting for a column to be used throughout an analysis."},"dataSetIdentifierDeclarations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataSetIdentifierDeclaration"},"description":"An array of dataset identifier declarations. This mapping allows the usage of dataset identifiers instead of dataset ARNs throughout analysis sub-structures."},"filterGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterGroup"},"description":"Filter definitions for an analysis.\n\nFor more information, see [Filtering Data in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/adding-a-filter.html) in the *Amazon Quick Suite User Guide* ."},"options":{"$ref":"#/types/aws-native:quicksight:AnalysisAssetOptions","description":"An array of option definitions for an analysis."},"parameterDeclarations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterDeclaration"},"description":"An array of parameter declarations for an analysis.\n\nParameters are named variables that can transfer a value for use by an action or an object.\n\nFor more information, see [Parameters in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/parameters-in-quicksight.html) in the *Amazon Quick Suite User Guide* ."},"queryExecutionOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisQueryExecutionOptions"},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetDefinition"},"description":"An array of sheet definitions for an analysis. Each `SheetDefinition` provides detailed information about a sheet within this analysis."},"staticFiles":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisStaticFile"},"description":"The static files for the definition."}},"type":"object","required":["dataSetIdentifierDeclarations"]},"aws-native:quicksight:AnalysisDestinationParameterValueConfiguration":{"properties":{"customValuesConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomValuesConfiguration","description":"The configuration of custom values for destination parameter in `DestinationParameterValueConfiguration` ."},"selectAllValueOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSelectAllValueOptions","description":"The configuration that selects all options."},"sourceColumn":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"A column of a data set."},"sourceField":{"type":"string","description":"The source field ID of the destination parameter."},"sourceParameterName":{"type":"string","description":"The source parameter name of the destination parameter."}},"type":"object"},"aws-native:quicksight:AnalysisDigitGroupingStyle":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Lakhs","value":"LAKHS"}]},"aws-native:quicksight:AnalysisDimensionField":{"properties":{"categoricalDimensionField":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoricalDimensionField","description":"The dimension type field with categorical type columns."},"dateDimensionField":{"$ref":"#/types/aws-native:quicksight:AnalysisDateDimensionField","description":"The dimension type field with date type columns."},"numericalDimensionField":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericalDimensionField","description":"The dimension type field with numerical type columns."}},"type":"object"},"aws-native:quicksight:AnalysisDonutCenterOptions":{"properties":{"labelVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the label in a donut chart. In the Quick Sight console, this option is called `'Show total'` ."}},"type":"object"},"aws-native:quicksight:AnalysisDonutOptions":{"properties":{"arcOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisArcOptions","description":"The option for define the arc of the chart shape. Valid values are as follows:\n\n- `WHOLE` - A pie chart\n- `SMALL` - A small-sized donut chart\n- `MEDIUM` - A medium-sized donut chart\n- `LARGE` - A large-sized donut chart"},"donutCenterOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDonutCenterOptions","description":"The label options of the label that is displayed in the center of a donut chart. This option isn't available for pie charts."}},"type":"object"},"aws-native:quicksight:AnalysisDrillDownFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryDrillDownFilter","description":"The category type drill down filter. This filter is used for string type columns."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericEqualityDrillDownFilter","description":"The numeric equality type drill down filter. This filter is used for number type columns."},"timeRangeFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeRangeDrillDownFilter","description":"The time range drill down filter. This filter is used for date time columns."}},"type":"object"},"aws-native:quicksight:AnalysisDropDownControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisListControlSelectAllOptions","description":"The configuration of the `Select all` options in a dropdown control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisDynamicDefaultValue":{"properties":{"defaultValueColumn":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that contains the default value of each user or group."},"groupNameColumn":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that contains the group name."},"userNameColumn":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that contains the username."}},"type":"object","required":["defaultValueColumn"]},"aws-native:quicksight:AnalysisEmptyVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"dataSetIdentifier":{"type":"string","description":"The data set that is used in the empty visual. Every visual requires a dataset to render."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:AnalysisEntity":{"properties":{"path":{"type":"string","description":"The hierarchical path of the entity within the analysis, template, or dashboard definition tree."}},"type":"object"},"aws-native:quicksight:AnalysisError":{"description":"\u003cp\u003eAnalysis error.\u003c/p\u003e","properties":{"message":{"type":"string","description":"\u003cp\u003eThe message associated with the analysis error.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisErrorType","description":"The type of the analysis error."},"violatedEntities":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisEntity"},"description":"\u003cp\u003eLists the violated entities that caused the analysis error\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:AnalysisErrorType":{"type":"string","enum":[{"name":"AccessDenied","value":"ACCESS_DENIED"},{"name":"SourceNotFound","value":"SOURCE_NOT_FOUND"},{"name":"DataSetNotFound","value":"DATA_SET_NOT_FOUND"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"},{"name":"ParameterValueIncompatible","value":"PARAMETER_VALUE_INCOMPATIBLE"},{"name":"ParameterTypeInvalid","value":"PARAMETER_TYPE_INVALID"},{"name":"ParameterNotFound","value":"PARAMETER_NOT_FOUND"},{"name":"ColumnTypeMismatch","value":"COLUMN_TYPE_MISMATCH"},{"name":"ColumnGeographicRoleMismatch","value":"COLUMN_GEOGRAPHIC_ROLE_MISMATCH"},{"name":"ColumnReplacementMissing","value":"COLUMN_REPLACEMENT_MISSING"}]},"aws-native:quicksight:AnalysisExcludePeriodConfiguration":{"properties":{"amount":{"type":"number","description":"The amount or number of the exclude period."},"granularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The granularity or unit (day, month, year) of the exclude period."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The status of the exclude period. Choose from the following options:\n\n- `ENABLED`\n- `DISABLED`"}},"type":"object","required":["amount","granularity"]},"aws-native:quicksight:AnalysisExplicitHierarchy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"description":"The list of columns that define the explicit hierarchy."},"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDrillDownFilter"},"description":"The option that determines the drill down filters for the explicit hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the explicit hierarchy."}},"type":"object","required":["columns","hierarchyId"]},"aws-native:quicksight:AnalysisFieldBasedTooltip":{"properties":{"aggregationVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of `Show aggregations` ."},"tooltipFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipItem"},"description":"The fields configuration in the tooltip."},"tooltipTitleType":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipTitleType","description":"The type for the \u003etooltip title. Choose one of the following options:\n\n- `NONE` : Doesn't use the primary value as the title.\n- `PRIMARY_VALUE` : Uses primary value as the title."}},"type":"object"},"aws-native:quicksight:AnalysisFieldLabelType":{"properties":{"fieldId":{"type":"string","description":"Indicates the field that is targeted by the field label."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the field label."}},"type":"object"},"aws-native:quicksight:AnalysisFieldSeriesItem":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisBinding","description":"The axis that you are binding the field to."},"fieldId":{"type":"string","description":"The field ID of the field for which you are setting the axis binding."},"settings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartSeriesSettings","description":"The options that determine the presentation of line series associated to the field."}},"type":"object","required":["axisBinding","fieldId"]},"aws-native:quicksight:AnalysisFieldSort":{"properties":{"direction":{"$ref":"#/types/aws-native:quicksight:AnalysisSortDirection","description":"The sort direction. Choose one of the following options:\n\n- `ASC` : Ascending\n- `DESC` : Descending"},"fieldId":{"type":"string","description":"The sort configuration target field."}},"type":"object","required":["direction","fieldId"]},"aws-native:quicksight:AnalysisFieldSortOptions":{"properties":{"columnSort":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnSort","description":"The sort configuration for a column that is not used in a field well."},"fieldSort":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSort","description":"The sort configuration for a field in a field well."}},"type":"object"},"aws-native:quicksight:AnalysisFieldTooltipItem":{"properties":{"fieldId":{"type":"string","description":"The unique ID of the field that is targeted by the tooltip."},"label":{"type":"string","description":"The label of the tooltip item."},"tooltipTarget":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipTarget","description":"Determines the target of the field tooltip item in a combo chart visual."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the tooltip item."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisFilledMapAggregatedFieldWells":{"properties":{"geospatial":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The aggregated location field well of the filled map. Values are grouped by location fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The aggregated color field well of a filled map. Values are aggregated based on location fields."}},"type":"object"},"aws-native:quicksight:AnalysisFilledMapConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapConditionalFormattingOption"},"description":"Conditional formatting options of a `FilledMapVisual` ."}},"type":"object","required":["conditionalFormattingOptions"]},"aws-native:quicksight:AnalysisFilledMapConditionalFormattingOption":{"properties":{"shape":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapShapeConditionalFormatting","description":"The conditional formatting that determines the shape of the filled map."}},"type":"object","required":["shape"]},"aws-native:quicksight:AnalysisFilledMapConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"mapStyleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapStyleOptions","description":"The map style options of the filled map visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapSortConfiguration","description":"The sort configuration of a `FilledMapVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."},"windowOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialWindowOptions","description":"The window options of the filled map visual."}},"type":"object"},"aws-native:quicksight:AnalysisFilledMapFieldWells":{"properties":{"filledMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapAggregatedFieldWells","description":"The aggregated field well of the filled map."}},"type":"object"},"aws-native:quicksight:AnalysisFilledMapShapeConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the filled map shape."},"format":{"$ref":"#/types/aws-native:quicksight:AnalysisShapeConditionalFormat","description":"The conditional formatting that determines the background color of a filled map's shape."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisFilledMapSortConfiguration":{"properties":{"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the location fields."}},"type":"object"},"aws-native:quicksight:AnalysisFilledMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapConditionalFormatting","description":"The conditional formatting of a `FilledMapVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilter","description":"A `CategoryFilter` filters text values.\n\nFor more information, see [Adding text filters](https://docs.aws.amazon.com/quicksight/latest/user/add-a-text-filter-data-prep.html) in the *Amazon Quick Suite User Guide* ."},"nestedFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisNestedFilter","description":"A `NestedFilter` filters data with a subset of data that is defined by the nested inner filter."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericEqualityFilter","description":"A `NumericEqualityFilter` filters numeric values that equal or do not equal a given numeric value."},"numericRangeFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericRangeFilter","description":"A `NumericRangeFilter` filters numeric values that are either inside or outside a given numeric range."},"relativeDatesFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisRelativeDatesFilter","description":"A `RelativeDatesFilter` filters date values that are relative to a given date."},"timeEqualityFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeEqualityFilter","description":"A `TimeEqualityFilter` filters date-time values that equal or do not equal a given date/time value."},"timeRangeFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeRangeFilter","description":"A `TimeRangeFilter` filters date-time values that are either inside or outside a given date/time range."},"topBottomFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisTopBottomFilter","description":"A `TopBottomFilter` filters data to the top or bottom values for a given column."}},"type":"object"},"aws-native:quicksight:AnalysisFilterControl":{"properties":{"crossSheet":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterCrossSheetControl","description":"A control from a filter that is scoped across more than one sheet. This represents your filter control on a sheet"},"dateTimePicker":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterDateTimePickerControl","description":"A control from a date filter that is used to specify date and time."},"dropdown":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterDropDownControl","description":"A control to display a dropdown list with buttons that are used to select a single value."},"list":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterListControl","description":"A control to display a list of buttons or boxes. This is used to select either a single value or multiple values."},"relativeDateTime":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterRelativeDateTimeControl","description":"A control from a date filter that is used to specify the relative date."},"slider":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterSliderControl","description":"A control to display a horizontal toggle bar. This is used to change a value by sliding the toggle."},"textArea":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterTextAreaControl","description":"A control to display a text box that is used to enter multiple entries."},"textField":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterTextFieldControl","description":"A control to display a text box that is used to enter a single entry."}},"type":"object"},"aws-native:quicksight:AnalysisFilterCrossSheetControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"filterControlId":{"type":"string","description":"The ID of the `FilterCrossSheetControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterCrossSheetControl` ."}},"type":"object","required":["filterControlId","sourceFilterId"]},"aws-native:quicksight:AnalysisFilterDateTimePickerControl":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configurationof the Apply button on a `DateTimePickerControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimePickerControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterDateTimePickerControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterDateTimePickerControl` ."},"title":{"type":"string","description":"The title of the `FilterDateTimePickerControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlDateTimePickerType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:AnalysisFilterDropDownControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configuration of the Apply button on a `FilterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDropDownControlDisplayOptions","description":"The display options of the `FilterDropDownControl` ."},"filterControlId":{"type":"string","description":"The ID of the `FilterDropDownControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterDropDownControl` ."},"title":{"type":"string","description":"The title of the `FilterDropDownControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlListType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:AnalysisFilterGroup":{"properties":{"crossDataset":{"$ref":"#/types/aws-native:quicksight:AnalysisCrossDatasetTypes","description":"The filter new feature which can apply filter group to all data sets. Choose one of the following options:\n\n- `ALL_DATASETS`\n- `SINGLE_DATASET`"},"filterGroupId":{"type":"string","description":"The value that uniquely identifies a `FilterGroup` within a dashboard, template, or analysis."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFilter"},"description":"The list of filters that are present in a `FilterGroup` ."},"scopeConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterScopeConfiguration","description":"The configuration that specifies what scope to apply to a `FilterGroup` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The status of the `FilterGroup` ."}},"type":"object","required":["crossDataset","filterGroupId","filters","scopeConfiguration"]},"aws-native:quicksight:AnalysisFilterListConfiguration":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"The list of category values for the filter."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator"]},"aws-native:quicksight:AnalysisFilterListControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisListControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterListControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterListControl` ."},"title":{"type":"string","description":"The title of the `FilterListControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlListType","description":"The type of the `FilterListControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from the list.\n- `SINGLE_SELECT` : The user can select a single entry from the list."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:AnalysisFilterNullOption":{"type":"string","enum":[{"name":"AllValues","value":"ALL_VALUES"},{"name":"NullsOnly","value":"NULLS_ONLY"},{"name":"NonNullsOnly","value":"NON_NULLS_ONLY"}]},"aws-native:quicksight:AnalysisFilterOperationSelectedFieldsConfiguration":{"properties":{"selectedColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"description":"\u003cp\u003eThe selected columns of a dataset.\u003c/p\u003e"},"selectedFieldOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSelectedFieldOptions","description":"A structure that contains the options that choose which fields are filtered in the `CustomActionFilterOperation` .\n\nValid values are defined as follows:\n\n- `ALL_FIELDS` : Applies the filter operation to all fields."},"selectedFields":{"type":"array","items":{"type":"string"},"description":"Chooses the fields that are filtered in `CustomActionFilterOperation` ."}},"type":"object"},"aws-native:quicksight:AnalysisFilterOperationTargetVisualsConfiguration":{"properties":{"sameSheetTargetVisualConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisSameSheetTargetVisualConfiguration","description":"The configuration of the same-sheet target visuals that you want to be filtered."}},"type":"object"},"aws-native:quicksight:AnalysisFilterRelativeDateTimeControl":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configuration of the Apply button on a `FilterRelativeDateTimeControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisRelativeDateTimeControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextAreaControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `FilterTextAreaControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:AnalysisFilterScopeConfiguration":{"properties":{"allSheets":{"$ref":"#/types/aws-native:quicksight:AnalysisAllSheetsFilterScopeConfiguration","description":"The configuration that applies a filter to all sheets. When you choose `AllSheets` as the value for a `FilterScopeConfiguration` , this filter is applied to all visuals of all sheets in an Analysis, Dashboard, or Template. The `AllSheetsFilterScopeConfiguration` is chosen."},"selectedSheets":{"$ref":"#/types/aws-native:quicksight:AnalysisSelectedSheetsFilterScopeConfiguration","description":"The configuration for applying a filter to specific sheets."}},"type":"object"},"aws-native:quicksight:AnalysisFilterSelectableValues":{"properties":{"values":{"type":"array","items":{"type":"string"},"description":"The values that are used in the `FilterSelectableValues` ."}},"type":"object"},"aws-native:quicksight:AnalysisFilterSliderControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSliderControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterSliderControl` ."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterSliderControl` ."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"title":{"type":"string","description":"The title of the `FilterSliderControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlSliderType","description":"The type of the `FilterSliderControl` . Choose one of the following options:\n\n- `SINGLE_POINT` : Filter against(equals) a single data point.\n- `RANGE` : Filter data that is in a specified range."}},"type":"object","required":["filterControlId","maximumValue","minimumValue","sourceFilterId","stepSize","title"]},"aws-native:quicksight:AnalysisFilterTextAreaControl":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextAreaControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextAreaControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `FilterTextAreaControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:AnalysisFilterTextFieldControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextFieldControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextFieldControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextFieldControl` ."},"title":{"type":"string","description":"The title of the `FilterTextFieldControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:AnalysisFilterVisualScope":{"type":"string","enum":[{"name":"AllVisuals","value":"ALL_VISUALS"},{"name":"SelectedVisuals","value":"SELECTED_VISUALS"}]},"aws-native:quicksight:AnalysisFontConfiguration":{"properties":{"fontColor":{"type":"string","description":"Determines the color of the text."},"fontDecoration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontDecoration","description":"Determines the appearance of decorative lines on the text."},"fontFamily":{"type":"string","description":"The font family that you want to use."},"fontSize":{"$ref":"#/types/aws-native:quicksight:AnalysisFontSize","description":"The option that determines the text display size."},"fontStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisFontStyle","description":"Determines the text display face that is inherited by the given font family."},"fontWeight":{"$ref":"#/types/aws-native:quicksight:AnalysisFontWeight","description":"The option that determines the text display weight, or boldness."}},"type":"object"},"aws-native:quicksight:AnalysisFontDecoration":{"type":"string","enum":[{"name":"Underline","value":"UNDERLINE"},{"name":"None","value":"NONE"}]},"aws-native:quicksight:AnalysisFontSize":{"properties":{"absolute":{"type":"string","description":"String based length that is composed of value and unit in px"},"relative":{"$ref":"#/types/aws-native:quicksight:AnalysisRelativeFontSize","description":"The lexical name for the text size, proportional to its surrounding context."}},"type":"object"},"aws-native:quicksight:AnalysisFontStyle":{"type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Italic","value":"ITALIC"}]},"aws-native:quicksight:AnalysisFontWeight":{"properties":{"name":{"$ref":"#/types/aws-native:quicksight:AnalysisFontWeightName","description":"The lexical name for the level of boldness of the text display."}},"type":"object"},"aws-native:quicksight:AnalysisFontWeightName":{"type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Bold","value":"BOLD"}]},"aws-native:quicksight:AnalysisForecastComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"customSeasonalityValue":{"type":"number","description":"The custom seasonality value setup of a forecast computation."},"lowerBoundary":{"type":"number","description":"The lower boundary setup of a forecast computation."},"name":{"type":"string","description":"The name of a computation."},"periodsBackward":{"type":"number","description":"The periods backward setup of a forecast computation."},"periodsForward":{"type":"number","description":"The periods forward setup of a forecast computation."},"predictionInterval":{"type":"number","description":"The prediction interval setup of a forecast computation."},"seasonality":{"$ref":"#/types/aws-native:quicksight:AnalysisForecastComputationSeasonality","description":"The seasonality setup of a forecast computation. Choose one of the following options:\n\n- `AUTOMATIC`\n- `CUSTOM` : Checks the custom seasonality value."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."},"upperBoundary":{"type":"number","description":"The upper boundary setup of a forecast computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisForecastComputationSeasonality":{"type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:quicksight:AnalysisForecastConfiguration":{"properties":{"forecastProperties":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeBasedForecastProperties","description":"The forecast properties setup of a forecast in the line chart."},"scenario":{"$ref":"#/types/aws-native:quicksight:AnalysisForecastScenario","description":"The forecast scenario of a forecast in the line chart."}},"type":"object"},"aws-native:quicksight:AnalysisForecastScenario":{"properties":{"whatIfPointScenario":{"$ref":"#/types/aws-native:quicksight:AnalysisWhatIfPointScenario","description":"The what-if analysis forecast setup with the target date."},"whatIfRangeScenario":{"$ref":"#/types/aws-native:quicksight:AnalysisWhatIfRangeScenario","description":"The what-if analysis forecast setup with the date range."}},"type":"object"},"aws-native:quicksight:AnalysisFormatConfiguration":{"properties":{"dateTimeFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeFormatConfiguration","description":"Formatting configuration for `DateTime` fields."},"numberFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberFormatConfiguration","description":"Formatting configuration for number fields."},"stringFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisStringFormatConfiguration","description":"Formatting configuration for string fields."}},"type":"object"},"aws-native:quicksight:AnalysisFreeFormLayoutCanvasSizeOptions":{"properties":{"screenCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutScreenCanvasSizeOptions","description":"The options that determine the sizing of the canvas used in a free-form layout."}},"type":"object"},"aws-native:quicksight:AnalysisFreeFormLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutCanvasSizeOptions"},"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutElement"},"description":"The elements that are included in a free-form layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:AnalysisFreeFormLayoutElement":{"properties":{"backgroundStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutElementBackgroundStyle","description":"The background style configuration of a free-form layout element."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutElementBorderStyle","description":"The border style configuration of a free-form layout element."},"elementId":{"type":"string","description":"A unique identifier for an element within a free-form layout."},"elementType":{"$ref":"#/types/aws-native:quicksight:AnalysisLayoutElementType","description":"The type of element."},"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"loadingAnimation":{"$ref":"#/types/aws-native:quicksight:AnalysisLoadingAnimation","description":"The loading animation configuration of a free-form layout element."},"renderingRules":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetElementRenderingRule"},"description":"The rendering rules that determine when an element should be displayed within a free-form layout."},"selectedBorderStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutElementBorderStyle","description":"The border style configuration of a free-form layout element. This border style is used when the element is selected."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of an element within a free-form layout."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"},"xAxisLocation":{"type":"string","description":"String based length that is composed of value and unit in px"},"yAxisLocation":{"type":"string","description":"String based length that is composed of value and unit in px with Integer.MAX_VALUE as maximum value"}},"type":"object","required":["elementId","elementType","height","width","xAxisLocation","yAxisLocation"]},"aws-native:quicksight:AnalysisFreeFormLayoutElementBackgroundStyle":{"properties":{"color":{"type":"string","description":"The background color of a free-form layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The background visibility of a free-form layout element."}},"type":"object"},"aws-native:quicksight:AnalysisFreeFormLayoutElementBorderStyle":{"properties":{"color":{"type":"string","description":"The border color of a free-form layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The border visibility of a free-form layout element."}},"type":"object"},"aws-native:quicksight:AnalysisFreeFormLayoutScreenCanvasSizeOptions":{"properties":{"optimizedViewPortWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["optimizedViewPortWidth"]},"aws-native:quicksight:AnalysisFreeFormSectionLayoutConfiguration":{"properties":{"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutElement"},"description":"The elements that are included in the free-form layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:AnalysisFunnelChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category field wells of a funnel chart. Values are grouped by category fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a funnel chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:AnalysisFunnelChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options of the categories that are displayed in a `FunnelChartVisual` ."},"dataLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartDataLabelOptions","description":"The options that determine the presentation of the data labels."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartFieldWells","description":"The field well configuration of a `FunnelChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartSortConfiguration","description":"The sort configuration of a `FunnelChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip configuration of a `FunnelChartVisual` ."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options for the values that are displayed in a `FunnelChartVisual` ."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The visual palette configuration of a `FunnelChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisFunnelChartDataLabelOptions":{"properties":{"categoryLabelVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the category labels within the data labels."},"labelColor":{"type":"string","description":"The color of the data label text."},"labelFontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The font configuration for the data labels.\n\nOnly the `FontSize` attribute of the font configuration is used for data labels."},"measureDataLabelStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartMeasureDataLabelStyle","description":"Determines the style of the metric labels."},"measureLabelVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the measure labels within the data labels."},"position":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelPosition","description":"Determines the positioning of the data label relative to a section of the funnel."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility option that determines if data labels are displayed."}},"type":"object"},"aws-native:quicksight:AnalysisFunnelChartFieldWells":{"properties":{"funnelChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartAggregatedFieldWells","description":"The field well configuration of a `FunnelChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisFunnelChartMeasureDataLabelStyle":{"type":"string","enum":[{"name":"ValueOnly","value":"VALUE_ONLY"},{"name":"PercentageByFirstStage","value":"PERCENTAGE_BY_FIRST_STAGE"},{"name":"PercentageByPreviousStage","value":"PERCENTAGE_BY_PREVIOUS_STAGE"},{"name":"ValueAndPercentageByFirstStage","value":"VALUE_AND_PERCENTAGE_BY_FIRST_STAGE"},{"name":"ValueAndPercentageByPreviousStage","value":"VALUE_AND_PERCENTAGE_BY_PREVIOUS_STAGE"}]},"aws-native:quicksight:AnalysisFunnelChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of categories displayed."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the category fields."}},"type":"object"},"aws-native:quicksight:AnalysisFunnelChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartConfiguration","description":"The configuration of a `FunnelChartVisual` ."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisGaugeChartArcConditionalFormatting":{"properties":{"foregroundColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting of the arc foreground color."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartColorConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"The background color configuration of a `GaugeChartVisual` ."},"foregroundColor":{"type":"string","description":"The foreground color configuration of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartConditionalFormattingOption"},"description":"Conditional formatting options of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartConditionalFormattingOption":{"properties":{"arc":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartArcConditionalFormatting","description":"The options that determine the presentation of the arc of a `GaugeChartVisual` ."},"primaryValue":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartPrimaryValueConditionalFormatting","description":"The conditional formatting for the primary value of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartConfiguration":{"properties":{"colorConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartColorConfiguration","description":"The color configuration of a `GaugeChartVisual` ."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The data label configuration of a `GaugeChartVisual` ."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartFieldWells","description":"The field well configuration of a `GaugeChartVisual` ."},"gaugeChartOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartOptions","description":"The options that determine the presentation of the `GaugeChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"tooltipOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip configuration of a `GaugeChartVisual` ."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The visual palette configuration of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartFieldWells":{"properties":{"targetValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The target value field wells of a `GaugeChartVisual` ."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartOptions":{"properties":{"arc":{"$ref":"#/types/aws-native:quicksight:AnalysisArcConfiguration","description":"The arc configuration of a `GaugeChartVisual` ."},"arcAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisArcAxisConfiguration","description":"The arc axis configuration of a `GaugeChartVisual` ."},"comparison":{"$ref":"#/types/aws-native:quicksight:AnalysisComparisonConfiguration","description":"The comparison configuration of a `GaugeChartVisual` ."},"primaryValueDisplayType":{"$ref":"#/types/aws-native:quicksight:AnalysisPrimaryValueDisplayType","description":"The options that determine the primary value display type."},"primaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The options that determine the primary value font configuration."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartPrimaryValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIcon","description":"The conditional formatting of the primary value icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting of the primary value text color."}},"type":"object"},"aws-native:quicksight:AnalysisGaugeChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartConfiguration","description":"The configuration of a `GaugeChartVisual` ."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartConditionalFormatting","description":"The conditional formatting of a `GaugeChartVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisGeospatialCategoricalColor":{"properties":{"categoryDataColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialCategoricalDataColor"},"description":"A list of categorical data colors for each category."},"defaultOpacity":{"type":"number","description":"The default opacity of a categorical color."},"nullDataSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialNullDataSettings","description":"The null data visualization settings."},"nullDataVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The state of visibility for null data."}},"type":"object","required":["categoryDataColors"]},"aws-native:quicksight:AnalysisGeospatialCategoricalDataColor":{"properties":{"color":{"type":"string","description":"The color and opacity values for the category data color."},"dataValue":{"type":"string","description":"The data value for the category data color."}},"type":"object","required":["color","dataValue"]},"aws-native:quicksight:AnalysisGeospatialCircleRadius":{"properties":{"radius":{"type":"number","description":"The positive value for the radius of a circle."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialCircleSymbolStyle":{"properties":{"circleRadius":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialCircleRadius","description":"The radius of the circle."},"fillColor":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialColor","description":"The color and opacity values for the fill color."},"strokeColor":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialColor","description":"The color and opacity values for the stroke color."},"strokeWidth":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLineWidth","description":"The width of the stroke (border)."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialColor":{"properties":{"categorical":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialCategoricalColor","description":"The visualization properties for the categorical color."},"gradient":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialGradientColor","description":"The visualization properties for the gradient color."},"solid":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialSolidColor","description":"The visualization properties for the solid color."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialColorState":{"description":"Defines view state of the color","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:AnalysisGeospatialCoordinateBounds":{"properties":{"east":{"type":"number","description":"The longitude of the east bound of the geospatial coordinate bounds."},"north":{"type":"number","description":"The latitude of the north bound of the geospatial coordinate bounds."},"south":{"type":"number","description":"The latitude of the south bound of the geospatial coordinate bounds."},"west":{"type":"number","description":"The longitude of the west bound of the geospatial coordinate bounds."}},"type":"object","required":["east","north","south","west"]},"aws-native:quicksight:AnalysisGeospatialDataSourceItem":{"properties":{"staticFileDataSource":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialStaticFileSource","description":"The static file data source properties for the geospatial data."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialGradientColor":{"properties":{"defaultOpacity":{"type":"number","description":"The default opacity for the gradient color."},"nullDataSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialNullDataSettings","description":"The null data visualization settings."},"nullDataVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The state of visibility for null data."},"stepColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialGradientStepColor"},"description":"A list of gradient step colors for the gradient."}},"type":"object","required":["stepColors"]},"aws-native:quicksight:AnalysisGeospatialGradientStepColor":{"properties":{"color":{"type":"string","description":"The color and opacity values for the gradient step color."},"dataValue":{"type":"number","description":"The data value for the gradient step color."}},"type":"object","required":["color","dataValue"]},"aws-native:quicksight:AnalysisGeospatialHeatmapColorScale":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialHeatmapDataColor"},"description":"The list of colors to be used in heatmap point style."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialHeatmapConfiguration":{"properties":{"heatmapColor":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialHeatmapColorScale","description":"The color scale specification for the heatmap point style."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialHeatmapDataColor":{"properties":{"color":{"type":"string","description":"The hex color to be used in the heatmap point style."}},"type":"object","required":["color"]},"aws-native:quicksight:AnalysisGeospatialLayerColorField":{"properties":{"colorDimensionsFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"A list of color dimension fields."},"colorValuesFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"A list of color measure fields."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialLayerDefinition":{"properties":{"lineLayer":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLineLayer","description":"The definition for a line layer."},"pointLayer":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialPointLayer","description":"The definition for a point layer."},"polygonLayer":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialPolygonLayer","description":"The definition for a polygon layer."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialLayerItem":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisLayerCustomAction"},"description":"A list of custom actions for a layer."},"dataSource":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialDataSourceItem","description":"The data source for the layer."},"joinDefinition":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLayerJoinDefinition","description":"The join definition properties for a layer."},"label":{"type":"string","description":"The label that is displayed for the layer."},"layerDefinition":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLayerDefinition","description":"The definition properties for a layer."},"layerId":{"type":"string","description":"The ID of the layer."},"layerType":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLayerType","description":"The layer type."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions"},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The state of visibility for the layer."}},"type":"object","required":["layerId"]},"aws-native:quicksight:AnalysisGeospatialLayerJoinDefinition":{"properties":{"colorField":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLayerColorField","description":"The geospatial color field for the join definition."},"datasetKeyField":{"$ref":"#/types/aws-native:quicksight:AnalysisUnaggregatedField"},"shapeKeyField":{"type":"string","description":"The name of the field or property in the geospatial data source."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialLayerMapConfiguration":{"properties":{"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions"},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions"},"mapLayers":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLayerItem"},"description":"The geospatial layers to visualize on the map."},"mapState":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapState","description":"The map state properties for the map."},"mapStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapStyle","description":"The map style properties for the map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialLayerType":{"type":"string","enum":[{"name":"Point","value":"POINT"},{"name":"Line","value":"LINE"},{"name":"Polygon","value":"POLYGON"}]},"aws-native:quicksight:AnalysisGeospatialLineLayer":{"properties":{"style":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLineStyle","description":"The visualization style for a line layer."}},"type":"object","required":["style"]},"aws-native:quicksight:AnalysisGeospatialLineStyle":{"properties":{"lineSymbolStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLineSymbolStyle","description":"The symbol style for a line style."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialLineSymbolStyle":{"properties":{"fillColor":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialColor","description":"The color and opacity values for the fill color."},"lineWidth":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLineWidth","description":"The width value for a line."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialLineWidth":{"properties":{"lineWidth":{"type":"number","description":"The positive value for the width of a line."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapAggregatedFieldWells":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The color field wells of a geospatial map."},"geospatial":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The geospatial field wells of a geospatial map. Values are grouped by geospatial fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The size field wells of a geospatial map. Values are aggregated based on geospatial fields."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"mapStyleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapStyleOptions","description":"The map style options of the geospatial map."},"pointStyleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialPointStyleOptions","description":"The point style options of the geospatial map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette"},"windowOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialWindowOptions","description":"The window options of the geospatial map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapFieldWells":{"properties":{"geospatialMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapAggregatedFieldWells","description":"The aggregated field well for a geospatial map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapNavigation":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:AnalysisGeospatialMapState":{"properties":{"bounds":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialCoordinateBounds"},"mapNavigation":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapNavigation","description":"Enables or disables map navigation for a map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapStyle":{"properties":{"backgroundColor":{"type":"string","description":"The background color and opacity values for a map."},"baseMapStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisBaseMapStyleType","description":"The selected base map style."},"baseMapVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The state of visibility for the base map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapStyleOptions":{"properties":{"baseMapStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisBaseMapStyleType","description":"The base map style of the geospatial map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisGeospatialNullDataSettings":{"properties":{"symbolStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialNullSymbolStyle","description":"The symbol style for null data."}},"type":"object","required":["symbolStyle"]},"aws-native:quicksight:AnalysisGeospatialNullSymbolStyle":{"properties":{"fillColor":{"type":"string","description":"The color and opacity values for the fill color."},"strokeColor":{"type":"string","description":"The color and opacity values for the stroke color."},"strokeWidth":{"type":"number","description":"The width of the border stroke."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialPointLayer":{"properties":{"style":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialPointStyle","description":"The visualization style for a point layer."}},"type":"object","required":["style"]},"aws-native:quicksight:AnalysisGeospatialPointStyle":{"properties":{"circleSymbolStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialCircleSymbolStyle","description":"The circle symbol style for a point layer."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialPointStyleOptions":{"properties":{"clusterMarkerConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisClusterMarkerConfiguration","description":"The cluster marker configuration of the geospatial point style."},"heatmapConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialHeatmapConfiguration","description":"The heatmap configuration of the geospatial point style."},"selectedPointStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialSelectedPointStyle","description":"The selected point styles (point, cluster) of the geospatial map."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialPolygonLayer":{"properties":{"style":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialPolygonStyle","description":"The visualization style for a polygon layer."}},"type":"object","required":["style"]},"aws-native:quicksight:AnalysisGeospatialPolygonStyle":{"properties":{"polygonSymbolStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialPolygonSymbolStyle","description":"The polygon symbol style for a polygon layer."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialPolygonSymbolStyle":{"properties":{"fillColor":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialColor","description":"The color and opacity values for the fill color."},"strokeColor":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialColor","description":"The color and opacity values for the stroke color."},"strokeWidth":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLineWidth","description":"The width of the border stroke."}},"type":"object"},"aws-native:quicksight:AnalysisGeospatialSelectedPointStyle":{"type":"string","enum":[{"name":"Point","value":"POINT"},{"name":"Cluster","value":"CLUSTER"},{"name":"Heatmap","value":"HEATMAP"}]},"aws-native:quicksight:AnalysisGeospatialSolidColor":{"description":"Describes the properties for a solid color","properties":{"color":{"type":"string","description":"The color and opacity values for the color."},"state":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialColorState","description":"Enables and disables the view state of the color."}},"type":"object","required":["color"]},"aws-native:quicksight:AnalysisGeospatialStaticFileSource":{"properties":{"staticFileId":{"type":"string","description":"The ID of the static file."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:AnalysisGeospatialWindowOptions":{"properties":{"bounds":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialCoordinateBounds","description":"The bounds options (north, south, west, east) of the geospatial window options."},"mapZoomMode":{"$ref":"#/types/aws-native:quicksight:AnalysisMapZoomMode","description":"The map zoom modes (manual, auto) of the geospatial window options."}},"type":"object"},"aws-native:quicksight:AnalysisGlobalTableBorderOptions":{"properties":{"sideSpecificBorder":{"$ref":"#/types/aws-native:quicksight:AnalysisTableSideBorderOptions","description":"Determines the options for side specific border."},"uniformBorder":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"Determines the options for uniform border."}},"type":"object"},"aws-native:quicksight:AnalysisGradientColor":{"properties":{"stops":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGradientStop"},"description":"The list of gradient color stops."}},"type":"object"},"aws-native:quicksight:AnalysisGradientStop":{"properties":{"color":{"type":"string","description":"Determines the color."},"dataValue":{"type":"number","description":"Determines the data value."},"gradientOffset":{"type":"number","description":"Determines gradient offset value."}},"type":"object","required":["gradientOffset"]},"aws-native:quicksight:AnalysisGridLayoutCanvasSizeOptions":{"properties":{"screenCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGridLayoutScreenCanvasSizeOptions","description":"The options that determine the sizing of the canvas used in a grid layout."}},"type":"object"},"aws-native:quicksight:AnalysisGridLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisGridLayoutCanvasSizeOptions"},"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisGridLayoutElement"},"description":"The elements that are included in a grid layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:AnalysisGridLayoutElement":{"properties":{"columnIndex":{"type":"number","description":"The column index for the upper left corner of an element."},"columnSpan":{"type":"number","description":"The width of a grid element expressed as a number of grid columns."},"elementId":{"type":"string","description":"A unique identifier for an element within a grid layout."},"elementType":{"$ref":"#/types/aws-native:quicksight:AnalysisLayoutElementType","description":"The type of element."},"rowIndex":{"type":"number","description":"The row index for the upper left corner of an element."},"rowSpan":{"type":"number","description":"The height of a grid element expressed as a number of grid rows."}},"type":"object","required":["columnSpan","elementId","elementType","rowSpan"]},"aws-native:quicksight:AnalysisGridLayoutScreenCanvasSizeOptions":{"properties":{"optimizedViewPortWidth":{"type":"string","description":"String based length that is composed of value and unit in px"},"resizeOption":{"$ref":"#/types/aws-native:quicksight:AnalysisResizeOption","description":"This value determines the layout behavior when the viewport is resized.\n\n- `FIXED` : A fixed width will be used when optimizing the layout. In the Quick Sight console, this option is called `Classic` .\n- `RESPONSIVE` : The width of the canvas will be responsive and optimized to the view port. In the Quick Sight console, this option is called `Tiled` ."}},"type":"object","required":["resizeOption"]},"aws-native:quicksight:AnalysisGrowthRateComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"periodSize":{"type":"number","description":"The period size setup of a growth rate computation."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisHeaderFooterSectionConfiguration":{"properties":{"layout":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionLayoutConfiguration","description":"The layout configuration of the header or footer section."},"sectionId":{"type":"string","description":"The unique identifier of the header or footer section."},"style":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionStyle","description":"The style options of a header or footer section."}},"type":"object","required":["layout","sectionId"]},"aws-native:quicksight:AnalysisHeatMapAggregatedFieldWells":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The columns field well of a heat map."},"rows":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The rows field well of a heat map."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The values field well of a heat map."}},"type":"object"},"aws-native:quicksight:AnalysisHeatMapConfiguration":{"properties":{"colorScale":{"$ref":"#/types/aws-native:quicksight:AnalysisColorScale","description":"The color options (gradient color, point of divergence) in a heat map."},"columnLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options of the column that is displayed in a heat map."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisHeatMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"rowLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options of the row that is displayed in a `heat map` ."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisHeatMapSortConfiguration","description":"The sort configuration of a heat map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisHeatMapFieldWells":{"properties":{"heatMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisHeatMapAggregatedFieldWells","description":"The aggregated field wells of a heat map."}},"type":"object"},"aws-native:quicksight:AnalysisHeatMapSortConfiguration":{"properties":{"heatMapColumnItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of columns that are displayed in a heat map."},"heatMapColumnSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The column sort configuration for heat map for columns that aren't a part of a field well."},"heatMapRowItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of rows that are displayed in a heat map."},"heatMapRowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The field sort configuration of the rows fields."}},"type":"object"},"aws-native:quicksight:AnalysisHeatMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisHeatMapConfiguration","description":"The configuration of a heat map."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisHistogramAggregatedFieldWells":{"properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a histogram. Values are aggregated by `COUNT` or `DISTINCT_COUNT` ."}},"type":"object"},"aws-native:quicksight:AnalysisHistogramBinOptions":{"properties":{"binCount":{"$ref":"#/types/aws-native:quicksight:AnalysisBinCountOptions","description":"The options that determine the bin count of a histogram."},"binWidth":{"$ref":"#/types/aws-native:quicksight:AnalysisBinWidthOptions","description":"The options that determine the bin width of a histogram."},"selectedBinType":{"$ref":"#/types/aws-native:quicksight:AnalysisHistogramBinType","description":"The options that determine the selected bin type."},"startValue":{"type":"number","description":"The options that determine the bin start value."}},"type":"object"},"aws-native:quicksight:AnalysisHistogramBinType":{"type":"string","enum":[{"name":"BinCount","value":"BIN_COUNT"},{"name":"BinWidth","value":"BIN_WIDTH"}]},"aws-native:quicksight:AnalysisHistogramConfiguration":{"properties":{"binOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisHistogramBinOptions","description":"The options that determine the presentation of histogram bins."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The data label configuration of a histogram."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisHistogramFieldWells","description":"The field well configuration of a histogram."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip configuration of a histogram."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The visual palette configuration of a histogram."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The options that determine the presentation of the x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The options that determine the presentation of the x-axis label."},"yAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The options that determine the presentation of the y-axis."}},"type":"object"},"aws-native:quicksight:AnalysisHistogramFieldWells":{"properties":{"histogramAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisHistogramAggregatedFieldWells","description":"The field well configuration of a histogram."}},"type":"object"},"aws-native:quicksight:AnalysisHistogramVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisHistogramConfiguration","description":"The configuration for a `HistogramVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisHorizontalTextAlignment":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:AnalysisIcon":{"type":"string","enum":[{"name":"CaretUp","value":"CARET_UP"},{"name":"CaretDown","value":"CARET_DOWN"},{"name":"Plus","value":"PLUS"},{"name":"Minus","value":"MINUS"},{"name":"ArrowUp","value":"ARROW_UP"},{"name":"ArrowDown","value":"ARROW_DOWN"},{"name":"ArrowLeft","value":"ARROW_LEFT"},{"name":"ArrowUpLeft","value":"ARROW_UP_LEFT"},{"name":"ArrowDownLeft","value":"ARROW_DOWN_LEFT"},{"name":"ArrowRight","value":"ARROW_RIGHT"},{"name":"ArrowUpRight","value":"ARROW_UP_RIGHT"},{"name":"ArrowDownRight","value":"ARROW_DOWN_RIGHT"},{"name":"FaceUp","value":"FACE_UP"},{"name":"FaceDown","value":"FACE_DOWN"},{"name":"FaceFlat","value":"FACE_FLAT"},{"name":"OneBar","value":"ONE_BAR"},{"name":"TwoBar","value":"TWO_BAR"},{"name":"ThreeBar","value":"THREE_BAR"},{"name":"Circle","value":"CIRCLE"},{"name":"Triangle","value":"TRIANGLE"},{"name":"Square","value":"SQUARE"},{"name":"Flag","value":"FLAG"},{"name":"ThumbsUp","value":"THUMBS_UP"},{"name":"ThumbsDown","value":"THUMBS_DOWN"},{"name":"Checkmark","value":"CHECKMARK"},{"name":"X","value":"X"}]},"aws-native:quicksight:AnalysisImageCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisImageCustomActionOperation"},"description":"A list of `ImageCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the custom action."},"name":{"type":"string","description":"The name of the custom action."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The status of the custom action."},"trigger":{"$ref":"#/types/aws-native:quicksight:AnalysisImageCustomActionTrigger","description":"The trigger of the `VisualCustomAction` .\n\nValid values are defined as follows:\n\n- `CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:AnalysisImageCustomActionOperation":{"properties":{"navigationOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionNavigationOperation"},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionSetParametersOperation"},"urlOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionUrlOperation"}},"type":"object"},"aws-native:quicksight:AnalysisImageCustomActionTrigger":{"type":"string","enum":[{"name":"Click","value":"CLICK"},{"name":"Menu","value":"MENU"}]},"aws-native:quicksight:AnalysisImageInteractionOptions":{"properties":{"imageMenuOption":{"$ref":"#/types/aws-native:quicksight:AnalysisImageMenuOption","description":"The menu options for the image."}},"type":"object"},"aws-native:quicksight:AnalysisImageMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:AnalysisDashboardBehavior","description":"The availability status of the image menu. If the value of this property is set to `ENABLED` , dashboard readers can interact with the image menu."}},"type":"object"},"aws-native:quicksight:AnalysisImageStaticFile":{"properties":{"source":{"$ref":"#/types/aws-native:quicksight:AnalysisStaticFileSource","description":"The source of the image static file."},"staticFileId":{"type":"string","description":"The ID of the static file that contains an image."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:AnalysisInnerFilter":{"properties":{"categoryInnerFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoryInnerFilter","description":"A `CategoryInnerFilter` filters text values for the `NestedFilter` ."}},"type":"object"},"aws-native:quicksight:AnalysisInsightConfiguration":{"properties":{"computations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisComputation"},"description":"The computations configurations of the insight visual"},"customNarrative":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomNarrativeOptions","description":"The custom narrative of the insight visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."}},"type":"object"},"aws-native:quicksight:AnalysisInsightVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used in the insight visual."},"insightConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisInsightConfiguration","description":"The configuration of an insight visual."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:AnalysisIntegerDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:AnalysisDynamicDefaultValue","description":"The dynamic value of the `IntegerDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"number"},"description":"The static values of the `IntegerDefaultValues` ."}},"type":"object"},"aws-native:quicksight:AnalysisIntegerParameter":{"description":"\u003cp\u003eAn integer parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eThe name of the integer parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"number"},"description":"\u003cp\u003eThe values for the integer parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:AnalysisIntegerParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:AnalysisIntegerDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:AnalysisIntegerValueWhenUnsetConfiguration","description":"A parameter declaration for the `Integer` data type."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:AnalysisIntegerValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"number","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:AnalysisValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:AnalysisItemsLimitConfiguration":{"properties":{"itemsLimit":{"type":"number","description":"The limit on how many items of a field are showed in the chart. For example, the number of slices that are displayed in a pie chart."},"otherCategories":{"$ref":"#/types/aws-native:quicksight:AnalysisOtherCategories","description":"The `Show other` of an axis in the chart. Choose one of the following options:\n\n- `INCLUDE`\n- `EXCLUDE`"}},"type":"object"},"aws-native:quicksight:AnalysisKpiActualValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIcon","description":"The conditional formatting of the actual value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting of the actual value's text color."}},"type":"object"},"aws-native:quicksight:AnalysisKpiComparisonValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIcon","description":"The conditional formatting of the comparison value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting of the comparison value's text color."}},"type":"object"},"aws-native:quicksight:AnalysisKpiConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiConditionalFormattingOption"},"description":"The conditional formatting options of a KPI visual."}},"type":"object"},"aws-native:quicksight:AnalysisKpiConditionalFormattingOption":{"properties":{"actualValue":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiActualValueConditionalFormatting","description":"The conditional formatting for the actual value of a KPI visual."},"comparisonValue":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiComparisonValueConditionalFormatting","description":"The conditional formatting for the comparison value of a KPI visual."},"primaryValue":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiPrimaryValueConditionalFormatting","description":"The conditional formatting for the primary value of a KPI visual."},"progressBar":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiProgressBarConditionalFormatting","description":"The conditional formatting for the progress bar of a KPI visual."}},"type":"object"},"aws-native:quicksight:AnalysisKpiConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiFieldWells","description":"The field well configuration of a KPI visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"kpiOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiOptions","description":"The options that determine the presentation of a KPI visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiSortConfiguration","description":"The sort configuration of a KPI visual."}},"type":"object"},"aws-native:quicksight:AnalysisKpiFieldWells":{"properties":{"targetValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The target value field wells of a KPI visual."},"trendGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The trend group field wells of a KPI visual."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a KPI visual."}},"type":"object"},"aws-native:quicksight:AnalysisKpiOptions":{"properties":{"comparison":{"$ref":"#/types/aws-native:quicksight:AnalysisComparisonConfiguration","description":"The comparison configuration of a KPI visual."},"primaryValueDisplayType":{"$ref":"#/types/aws-native:quicksight:AnalysisPrimaryValueDisplayType","description":"The options that determine the primary value display type."},"primaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The options that determine the primary value font configuration."},"progressBar":{"$ref":"#/types/aws-native:quicksight:AnalysisProgressBarOptions","description":"The options that determine the presentation of the progress bar of a KPI visual."},"secondaryValue":{"$ref":"#/types/aws-native:quicksight:AnalysisSecondaryValueOptions","description":"The options that determine the presentation of the secondary value of a KPI visual."},"secondaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The options that determine the secondary value font configuration."},"sparkline":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiSparklineOptions","description":"The options that determine the visibility, color, type, and tooltip visibility of the sparkline of a KPI visual."},"trendArrows":{"$ref":"#/types/aws-native:quicksight:AnalysisTrendArrowOptions","description":"The options that determine the presentation of trend arrows in a KPI visual."},"visualLayoutOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiVisualLayoutOptions","description":"The options that determine the layout a KPI visual."}},"type":"object"},"aws-native:quicksight:AnalysisKpiPrimaryValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIcon","description":"The conditional formatting of the primary value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting of the primary value's text color."}},"type":"object"},"aws-native:quicksight:AnalysisKpiProgressBarConditionalFormatting":{"properties":{"foregroundColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting of the progress bar's foreground color."}},"type":"object"},"aws-native:quicksight:AnalysisKpiSortConfiguration":{"properties":{"trendGroupSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the trend group fields."}},"type":"object"},"aws-native:quicksight:AnalysisKpiSparklineOptions":{"properties":{"color":{"type":"string","description":"The color of the sparkline."},"tooltipVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The tooltip visibility of the sparkline."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiSparklineType","description":"The type of the sparkline."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the sparkline."}},"type":"object","required":["type"]},"aws-native:quicksight:AnalysisKpiSparklineType":{"type":"string","enum":[{"name":"Line","value":"LINE"},{"name":"Area","value":"AREA"}]},"aws-native:quicksight:AnalysisKpiVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiConfiguration","description":"The configuration of a KPI visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiConditionalFormatting","description":"The conditional formatting of a KPI visual."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisKpiVisualLayoutOptions":{"properties":{"standardLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiVisualStandardLayout","description":"The standard layout of the KPI visual."}},"type":"object"},"aws-native:quicksight:AnalysisKpiVisualStandardLayout":{"properties":{"type":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiVisualStandardLayoutType","description":"The standard layout type."}},"type":"object","required":["type"]},"aws-native:quicksight:AnalysisKpiVisualStandardLayoutType":{"type":"string","enum":[{"name":"Classic","value":"CLASSIC"},{"name":"Vertical","value":"VERTICAL"}]},"aws-native:quicksight:AnalysisLabelOptions":{"properties":{"customLabel":{"type":"string","description":"The text for the label."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The font configuration of the label."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not the label is visible."}},"type":"object"},"aws-native:quicksight:AnalysisLayerCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisLayerCustomActionOperation"},"description":"A list of `LayerCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the custom action."},"name":{"type":"string","description":"The name of the custom action."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The status of the `LayerCustomAction` ."},"trigger":{"$ref":"#/types/aws-native:quicksight:AnalysisLayerCustomActionTrigger","description":"The trigger of the `LayerCustomAction` .\n\nValid values are defined as follows:\n\n- `DATA_POINT_CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `DATA_POINT_MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:AnalysisLayerCustomActionOperation":{"properties":{"filterOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionFilterOperation"},"navigationOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionNavigationOperation"},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionSetParametersOperation"},"urlOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionUrlOperation"}},"type":"object"},"aws-native:quicksight:AnalysisLayerCustomActionTrigger":{"type":"string","enum":[{"name":"DataPointClick","value":"DATA_POINT_CLICK"},{"name":"DataPointMenu","value":"DATA_POINT_MENU"}]},"aws-native:quicksight:AnalysisLayerMapVisual":{"properties":{"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialLayerMapConfiguration","description":"The configuration settings of the visual."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used to create the layer map visual. You can't create a visual without a dataset."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions"},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions"},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The ID of the visual."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:AnalysisLayout":{"properties":{"configuration":{"$ref":"#/types/aws-native:quicksight:AnalysisLayoutConfiguration","description":"The configuration that determines what the type of layout for a sheet."}},"type":"object","required":["configuration"]},"aws-native:quicksight:AnalysisLayoutConfiguration":{"properties":{"freeFormLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormLayoutConfiguration","description":"A free-form is optimized for a fixed width and has more control over the exact placement of layout elements."},"gridLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisGridLayoutConfiguration","description":"A type of layout that can be used on a sheet. In a grid layout, visuals snap to a grid with standard spacing and alignment. Dashboards are displayed as designed, with options to fit to screen or view at actual size. A grid layout can be configured to behave in one of two ways when the viewport is resized: `FIXED` or `RESPONSIVE` ."},"sectionBasedLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionBasedLayoutConfiguration","description":"A section based layout organizes visuals into multiple sections and has customized header, footer and page break."}},"type":"object"},"aws-native:quicksight:AnalysisLayoutElementType":{"type":"string","enum":[{"name":"Visual","value":"VISUAL"},{"name":"FilterControl","value":"FILTER_CONTROL"},{"name":"ParameterControl","value":"PARAMETER_CONTROL"},{"name":"TextBox","value":"TEXT_BOX"},{"name":"Image","value":"IMAGE"}]},"aws-native:quicksight:AnalysisLegendOptions":{"properties":{"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"position":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendPosition","description":"The positions for the legend. Choose one of the following options:\n\n- `AUTO`\n- `RIGHT`\n- `BOTTOM`\n- `LEFT`"},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The custom title for the legend."},"valueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration"},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not the legend is visible."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object"},"aws-native:quicksight:AnalysisLegendPosition":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Right","value":"RIGHT"},{"name":"Bottom","value":"BOTTOM"},{"name":"Top","value":"TOP"}]},"aws-native:quicksight:AnalysisLineChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category field wells of a line chart. Values are grouped by category fields."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The color field wells of a line chart. Values are grouped by category fields."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The small multiples field well of a line chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a line chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartConfiguration":{"properties":{"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisContributionAnalysisDefault"},"description":"The default configuration of a line chart's contribution analysis."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The data label configuration of a line chart."},"defaultSeriesSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartDefaultSeriesSettings","description":"The options that determine the default presentation of all line series in `LineChartVisual` ."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartFieldWells","description":"The field well configuration of a line chart."},"forecastConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisForecastConfiguration"},"description":"The forecast configuration of a line chart."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend configuration of a line chart."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLineSeriesAxisDisplayOptions","description":"The series axis configuration of a line chart."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The options that determine the presentation of the y-axis label."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLine"},"description":"The reference lines configuration of a line chart."},"secondaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLineSeriesAxisDisplayOptions","description":"The series axis configuration of a line chart."},"secondaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The options that determine the presentation of the secondary y-axis label."},"series":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSeriesItem"},"description":"The series item configuration of a line chart."},"singleAxisOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSingleAxisOptions"},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartSortConfiguration","description":"The sort configuration of a line chart."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip configuration of a line chart."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartType","description":"Determines the type of the line chart."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The visual palette configuration of a line chart."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The options that determine the presentation of the x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The options that determine the presentation of the x-axis label."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartDefaultSeriesSettings":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisBinding","description":"The axis to which you are binding all line series to."},"lineStyleSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartLineStyleSettings","description":"Line styles options for all line series in the visual."},"markerStyleSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartMarkerStyleSettings","description":"Marker styles options for all line series in the visual."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartFieldWells":{"properties":{"lineChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartAggregatedFieldWells","description":"The field well configuration of a line chart."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartLineStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dotted","value":"DOTTED"},{"name":"Dashed","value":"DASHED"}]},"aws-native:quicksight:AnalysisLineChartLineStyleSettings":{"properties":{"lineInterpolation":{"$ref":"#/types/aws-native:quicksight:AnalysisLineInterpolation","description":"Interpolation style for line series.\n\n- `LINEAR` : Show as default, linear style.\n- `SMOOTH` : Show as a smooth curve.\n- `STEPPED` : Show steps in line."},"lineStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartLineStyle","description":"Line style for line series.\n\n- `SOLID` : Show as a solid line.\n- `DOTTED` : Show as a dotted line.\n- `DASHED` : Show as a dashed line."},"lineVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Configuration option that determines whether to show the line for the series."},"lineWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object"},"aws-native:quicksight:AnalysisLineChartMarkerShape":{"type":"string","enum":[{"name":"Circle","value":"CIRCLE"},{"name":"Triangle","value":"TRIANGLE"},{"name":"Square","value":"SQUARE"},{"name":"Diamond","value":"DIAMOND"},{"name":"RoundedSquare","value":"ROUNDED_SQUARE"}]},"aws-native:quicksight:AnalysisLineChartMarkerStyleSettings":{"properties":{"markerColor":{"type":"string","description":"Color of marker in the series."},"markerShape":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartMarkerShape","description":"Shape option for markers in the series.\n\n- `CIRCLE` : Show marker as a circle.\n- `TRIANGLE` : Show marker as a triangle.\n- `SQUARE` : Show marker as a square.\n- `DIAMOND` : Show marker as a diamond.\n- `ROUNDED_SQUARE` : Show marker as a rounded square."},"markerSize":{"type":"string","description":"String based length that is composed of value and unit in px"},"markerVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Configuration option that determines whether to show the markers in the series."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartSeriesSettings":{"properties":{"lineStyleSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartLineStyleSettings","description":"Line styles options for a line series in `LineChartVisual` ."},"markerStyleSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartMarkerStyleSettings","description":"Marker styles options for a line series in `LineChartVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartSortConfiguration":{"properties":{"categoryItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of categories that are displayed in a line chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the category fields."},"colorItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of lines that are displayed in a line chart."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:AnalysisLineChartType":{"type":"string","enum":[{"name":"Line","value":"LINE"},{"name":"Area","value":"AREA"},{"name":"StackedArea","value":"STACKED_AREA"}]},"aws-native:quicksight:AnalysisLineChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartConfiguration","description":"The configuration of a line chart."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisLineInterpolation":{"type":"string","enum":[{"name":"Linear","value":"LINEAR"},{"name":"Smooth","value":"SMOOTH"},{"name":"Stepped","value":"STEPPED"}]},"aws-native:quicksight:AnalysisLineSeriesAxisDisplayOptions":{"properties":{"axisOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The options that determine the presentation of the line series axis."},"missingDataConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMissingDataConfiguration"},"description":"The configuration options that determine how missing data is treated during the rendering of a line chart."}},"type":"object"},"aws-native:quicksight:AnalysisListControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"searchOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisListControlSearchOptions","description":"The configuration of the search options in a list control."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisListControlSelectAllOptions","description":"The configuration of the `Select all` options in a list control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisListControlSearchOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration of the search options in a list control."}},"type":"object"},"aws-native:quicksight:AnalysisListControlSelectAllOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration of the `Select all` options in a list control."}},"type":"object"},"aws-native:quicksight:AnalysisLoadingAnimation":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration of `LoadingAnimation` ."}},"type":"object"},"aws-native:quicksight:AnalysisLocalNavigationConfiguration":{"properties":{"targetSheetId":{"type":"string","description":"The sheet that is targeted for navigation in the same analysis."}},"type":"object","required":["targetSheetId"]},"aws-native:quicksight:AnalysisLongFormatText":{"properties":{"plainText":{"type":"string","description":"Plain text format."},"richText":{"type":"string","description":"Rich text. Examples of rich text include bold, underline, and italics."}},"type":"object"},"aws-native:quicksight:AnalysisMapZoomMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:AnalysisMappedDataSetParameter":{"properties":{"dataSetIdentifier":{"type":"string","description":"A unique name that identifies a dataset within the analysis or dashboard."},"dataSetParameterName":{"type":"string","description":"The name of the dataset parameter."}},"type":"object","required":["dataSetIdentifier","dataSetParameterName"]},"aws-native:quicksight:AnalysisMaximumLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the maximum label."}},"type":"object"},"aws-native:quicksight:AnalysisMaximumMinimumComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisMaximumMinimumComputationType","description":"The type of computation. Choose one of the following options:\n\n- MAXIMUM: A maximum computation.\n- MINIMUM: A minimum computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:AnalysisMaximumMinimumComputationType":{"type":"string","enum":[{"name":"Maximum","value":"MAXIMUM"},{"name":"Minimum","value":"MINIMUM"}]},"aws-native:quicksight:AnalysisMeasureField":{"properties":{"calculatedMeasureField":{"$ref":"#/types/aws-native:quicksight:AnalysisCalculatedMeasureField","description":"The calculated measure field only used in pivot tables."},"categoricalMeasureField":{"$ref":"#/types/aws-native:quicksight:AnalysisCategoricalMeasureField","description":"The measure type field with categorical type columns."},"dateMeasureField":{"$ref":"#/types/aws-native:quicksight:AnalysisDateMeasureField","description":"The measure type field with date type columns."},"numericalMeasureField":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericalMeasureField","description":"The measure type field with numerical type columns."}},"type":"object"},"aws-native:quicksight:AnalysisMetricComparisonComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"fromValue":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The field that is used in a metric comparison from value setup."},"name":{"type":"string","description":"The name of a computation."},"targetValue":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The field that is used in a metric comparison to value setup."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisMinimumLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the minimum label."}},"type":"object"},"aws-native:quicksight:AnalysisMissingDataConfiguration":{"properties":{"treatmentOption":{"$ref":"#/types/aws-native:quicksight:AnalysisMissingDataTreatmentOption","description":"The treatment option that determines how missing data should be rendered. Choose from the following options:\n\n- `INTERPOLATE` : Interpolate missing values between the prior and the next known value.\n- `SHOW_AS_ZERO` : Show missing values as the value `0` .\n- `SHOW_AS_BLANK` : Display a blank space when rendering missing data."}},"type":"object"},"aws-native:quicksight:AnalysisMissingDataTreatmentOption":{"type":"string","enum":[{"name":"Interpolate","value":"INTERPOLATE"},{"name":"ShowAsZero","value":"SHOW_AS_ZERO"},{"name":"ShowAsBlank","value":"SHOW_AS_BLANK"}]},"aws-native:quicksight:AnalysisNegativeValueConfiguration":{"properties":{"displayMode":{"$ref":"#/types/aws-native:quicksight:AnalysisNegativeValueDisplayMode","description":"Determines the display mode of the negative value configuration."}},"type":"object","required":["displayMode"]},"aws-native:quicksight:AnalysisNegativeValueDisplayMode":{"type":"string","enum":[{"name":"Positive","value":"POSITIVE"},{"name":"Negative","value":"NEGATIVE"}]},"aws-native:quicksight:AnalysisNestedFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeInnerSet":{"type":"boolean","description":"A boolean condition to include or exclude the subset that is defined by the values of the nested inner filter."},"innerFilter":{"$ref":"#/types/aws-native:quicksight:AnalysisInnerFilter","description":"The `InnerFilter` defines the subset of data to be used with the `NestedFilter` ."}},"type":"object","required":["column","filterId","includeInnerSet","innerFilter"]},"aws-native:quicksight:AnalysisNullValueFormatConfiguration":{"properties":{"nullString":{"type":"string","description":"Determines the null string of null values."}},"type":"object","required":["nullString"]},"aws-native:quicksight:AnalysisNumberDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numberScale":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberScale","description":"Determines the number scale value of the number format."},"prefix":{"type":"string","description":"Determines the prefix value of the number format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the number format."}},"type":"object"},"aws-native:quicksight:AnalysisNumberFormatConfiguration":{"properties":{"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericFormatConfiguration","description":"The options that determine the numeric format configuration."}},"type":"object"},"aws-native:quicksight:AnalysisNumberScale":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Auto","value":"AUTO"},{"name":"Thousands","value":"THOUSANDS"},{"name":"Millions","value":"MILLIONS"},{"name":"Billions","value":"BILLIONS"},{"name":"Trillions","value":"TRILLIONS"},{"name":"Lakhs","value":"LAKHS"},{"name":"Crores","value":"CRORES"}]},"aws-native:quicksight:AnalysisNumericAxisOptions":{"properties":{"range":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayRange","description":"The range setup of a numeric axis."},"scale":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisScale","description":"The scale setup of a numeric axis."}},"type":"object"},"aws-native:quicksight:AnalysisNumericEqualityDrillDownFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"value":{"type":"number","description":"The value of the double input numeric drill down filter."}},"type":"object","required":["column","value"]},"aws-native:quicksight:AnalysisNumericEqualityFilter":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationFunction","description":"The aggregation function of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericEqualityMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"},"value":{"type":"number","description":"The input value."}},"type":"object","required":["column","filterId","matchOperator","nullOption"]},"aws-native:quicksight:AnalysisNumericEqualityMatchOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"}]},"aws-native:quicksight:AnalysisNumericFilterSelectAllOptions":{"type":"string","enum":[{"name":"FilterAllValues","value":"FILTER_ALL_VALUES"}]},"aws-native:quicksight:AnalysisNumericFormatConfiguration":{"properties":{"currencyDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCurrencyDisplayFormatConfiguration","description":"The options that determine the currency display format configuration."},"numberDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberDisplayFormatConfiguration","description":"The options that determine the number display format configuration."},"percentageDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPercentageDisplayFormatConfiguration","description":"The options that determine the percentage display format configuration."}},"type":"object"},"aws-native:quicksight:AnalysisNumericRangeFilter":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationFunction","description":"The aggregation function of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeMaximum":{"type":"boolean","description":"Determines whether the maximum value in the filter value range should be included in the filtered results."},"includeMinimum":{"type":"boolean","description":"Determines whether the minimum value in the filter value range should be included in the filtered results."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"rangeMaximum":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericRangeFilterValue","description":"The maximum value for the filter value range."},"rangeMinimum":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericRangeFilterValue","description":"The minimum value for the filter value range."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["column","filterId","nullOption"]},"aws-native:quicksight:AnalysisNumericRangeFilterValue":{"properties":{"parameter":{"type":"string","description":"The parameter that is used in the numeric range."},"staticValue":{"type":"number","description":"The static value of the numeric range filter."}},"type":"object"},"aws-native:quicksight:AnalysisNumericSeparatorConfiguration":{"properties":{"decimalSeparator":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericSeparatorSymbol","description":"Determines the decimal separator."},"thousandsSeparator":{"$ref":"#/types/aws-native:quicksight:AnalysisThousandSeparatorOptions","description":"The options that determine the thousands separator configuration."}},"type":"object"},"aws-native:quicksight:AnalysisNumericSeparatorSymbol":{"type":"string","enum":[{"name":"Comma","value":"COMMA"},{"name":"Dot","value":"DOT"},{"name":"Space","value":"SPACE"}]},"aws-native:quicksight:AnalysisNumericalAggregationFunction":{"properties":{"percentileAggregation":{"$ref":"#/types/aws-native:quicksight:AnalysisPercentileAggregation","description":"An aggregation based on the percentile of values in a dimension or measure."},"simpleNumericalAggregation":{"$ref":"#/types/aws-native:quicksight:AnalysisSimpleNumericalAggregationFunction","description":"Built-in aggregation functions for numerical values.\n\n- `SUM` : The sum of a dimension or measure.\n- `AVERAGE` : The average of a dimension or measure.\n- `MIN` : The minimum value of a dimension or measure.\n- `MAX` : The maximum value of a dimension or measure.\n- `COUNT` : The count of a dimension or measure.\n- `DISTINCT_COUNT` : The count of distinct values in a dimension or measure.\n- `VAR` : The variance of a dimension or measure.\n- `VARP` : The partitioned variance of a dimension or measure.\n- `STDEV` : The standard deviation of a dimension or measure.\n- `STDEVP` : The partitioned standard deviation of a dimension or measure.\n- `MEDIAN` : The median value of a dimension or measure."}},"type":"object"},"aws-native:quicksight:AnalysisNumericalDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `NumericalDimensionField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisNumericalMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericalAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `NumericalMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumberFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisOtherCategories":{"type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"Exclude","value":"EXCLUDE"}]},"aws-native:quicksight:AnalysisPaginationConfiguration":{"properties":{"pageNumber":{"type":"number","description":"Indicates the page number."},"pageSize":{"type":"number","description":"Indicates how many items render in one page."}},"type":"object","required":["pageNumber","pageSize"]},"aws-native:quicksight:AnalysisPanelBorderStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dashed","value":"DASHED"},{"name":"Dotted","value":"DOTTED"}]},"aws-native:quicksight:AnalysisPanelConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"Sets the background color for each panel."},"backgroundVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not a background for each small multiples panel is rendered."},"borderColor":{"type":"string","description":"Sets the line color of panel borders."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisPanelBorderStyle","description":"Sets the line style of panel borders."},"borderThickness":{"type":"string","description":"String based length that is composed of value and unit in px"},"borderVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not each panel displays a border."},"gutterSpacing":{"type":"string","description":"String based length that is composed of value and unit in px"},"gutterVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not negative space between sibling panels is rendered."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisPanelTitleOptions","description":"Configures the title display within each small multiples panel."}},"type":"object"},"aws-native:quicksight:AnalysisPanelTitleOptions":{"properties":{"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration"},"horizontalTextAlignment":{"$ref":"#/types/aws-native:quicksight:AnalysisHorizontalTextAlignment","description":"Sets the horizontal text alignment of the title within each panel."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not panel titles are displayed."}},"type":"object"},"aws-native:quicksight:AnalysisPaperOrientation":{"type":"string","enum":[{"name":"Portrait","value":"PORTRAIT"},{"name":"Landscape","value":"LANDSCAPE"}]},"aws-native:quicksight:AnalysisPaperSize":{"type":"string","enum":[{"name":"UsLetter","value":"US_LETTER"},{"name":"UsLegal","value":"US_LEGAL"},{"name":"UsTabloidLedger","value":"US_TABLOID_LEDGER"},{"name":"A0","value":"A0"},{"name":"A1","value":"A1"},{"name":"A2","value":"A2"},{"name":"A3","value":"A3"},{"name":"A4","value":"A4"},{"name":"A5","value":"A5"},{"name":"JisB4","value":"JIS_B4"},{"name":"JisB5","value":"JIS_B5"}]},"aws-native:quicksight:AnalysisParameterControl":{"properties":{"dateTimePicker":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterDateTimePickerControl","description":"A control from a date parameter that specifies date and time."},"dropdown":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterDropDownControl","description":"A control to display a dropdown list with buttons that are used to select a single value."},"list":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterListControl","description":"A control to display a list with buttons or boxes that are used to select either a single value or multiple values."},"slider":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterSliderControl","description":"A control to display a horizontal toggle bar. This is used to change a value by sliding the toggle."},"textArea":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterTextAreaControl","description":"A control to display a text box that is used to enter multiple entries."},"textField":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterTextFieldControl","description":"A control to display a text box that is used to enter a single entry."}},"type":"object"},"aws-native:quicksight:AnalysisParameterDateTimePickerControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimePickerControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterDateTimePickerControl` ."},"sourceParameterName":{"type":"string","description":"The name of the `ParameterDateTimePickerControl` ."},"title":{"type":"string","description":"The title of the `ParameterDateTimePickerControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:AnalysisParameterDeclaration":{"properties":{"dateTimeParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeParameterDeclaration","description":"A parameter declaration for the `DateTime` data type."},"decimalParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalParameterDeclaration","description":"A parameter declaration for the `Decimal` data type."},"integerParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:AnalysisIntegerParameterDeclaration","description":"A parameter declaration for the `Integer` data type."},"stringParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:AnalysisStringParameterDeclaration","description":"A parameter declaration for the `String` data type."}},"type":"object"},"aws-native:quicksight:AnalysisParameterDropDownControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"commitMode":{"$ref":"#/types/aws-native:quicksight:AnalysisCommitMode","description":"The visibility configuration of the Apply button on a `ParameterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDropDownControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterDropDownControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterDropDownControl` ."},"title":{"type":"string","description":"The title of the `ParameterDropDownControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlListType","description":"The type parameter name of the `ParameterDropDownControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:AnalysisParameterListControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisListControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterListControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterListControl` ."},"title":{"type":"string","description":"The title of the `ParameterListControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlListType","description":"The type of `ParameterListControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:AnalysisParameterSelectableValues":{"properties":{"linkToDataSetColumn":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column identifier that fetches values from the data set."},"values":{"type":"array","items":{"type":"string"},"description":"The values that are used in `ParameterSelectableValues` ."}},"type":"object"},"aws-native:quicksight:AnalysisParameterSliderControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSliderControlDisplayOptions","description":"The display options of a control."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterSliderControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterSliderControl` ."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"title":{"type":"string","description":"The title of the `ParameterSliderControl` ."}},"type":"object","required":["maximumValue","minimumValue","parameterControlId","sourceParameterName","stepSize","title"]},"aws-native:quicksight:AnalysisParameterTextAreaControl":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextAreaControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterTextAreaControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `ParameterTextAreaControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:AnalysisParameterTextFieldControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextFieldControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterTextFieldControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterTextFieldControl` ."},"title":{"type":"string","description":"The title of the `ParameterTextFieldControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:AnalysisParameterValueType":{"type":"string","enum":[{"name":"MultiValued","value":"MULTI_VALUED"},{"name":"SingleValued","value":"SINGLE_VALUED"}]},"aws-native:quicksight:AnalysisParameters":{"description":"\u003cp\u003eA list of Amazon QuickSight parameters and the list's override values.\u003c/p\u003e","properties":{"dateTimeParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDateTimeParameter"},"description":"\u003cp\u003eThe parameters that have a data type of date-time.\u003c/p\u003e"},"decimalParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalParameter"},"description":"\u003cp\u003eThe parameters that have a data type of decimal.\u003c/p\u003e"},"integerParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisIntegerParameter"},"description":"\u003cp\u003eThe parameters that have a data type of integer.\u003c/p\u003e"},"stringParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisStringParameter"},"description":"\u003cp\u003eThe parameters that have a data type of string.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:AnalysisPercentVisibleRange":{"properties":{"from":{"type":"number","description":"The lower bound of the range."},"to":{"type":"number","description":"The top bound of the range."}},"type":"object"},"aws-native:quicksight:AnalysisPercentageDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"prefix":{"type":"string","description":"Determines the prefix value of the percentage format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the percentage format."}},"type":"object"},"aws-native:quicksight:AnalysisPercentileAggregation":{"properties":{"percentileValue":{"type":"number","description":"The percentile value. This value can be any numeric constant 0–100. A percentile value of 50 computes the median value of the measure."}},"type":"object"},"aws-native:quicksight:AnalysisPeriodOverPeriodComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisPeriodToDateComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"periodTimeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The time granularity setup of period to date computation. Choose from the following options:\n\n- YEAR: Year to date.\n- MONTH: Month to date."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisPieChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category (group/color) field wells of a pie chart."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The small multiples field well of a pie chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a pie chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:AnalysisPieChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options of the group/color that is displayed in a pie chart."},"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisContributionAnalysisDefault"},"description":"The contribution analysis (anomaly configuration) setup of the visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"donutOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisDonutOptions","description":"The options that determine the shape of the chart. This option determines whether the chart is a pie chart or a donut chart."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisPieChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPieChartSortConfiguration","description":"The sort configuration of a pie chart."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options for the value that is displayed in a pie chart."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisPieChartFieldWells":{"properties":{"pieChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisPieChartAggregatedFieldWells","description":"The field well configuration of a pie chart."}},"type":"object"},"aws-native:quicksight:AnalysisPieChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of categories that are displayed in a pie chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the category fields."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:AnalysisPieChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPieChartConfiguration","description":"The configuration of a pie chart."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisPivotFieldSortOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID for the field sort options."},"sortBy":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableSortBy","description":"The sort by field for the field sort options."}},"type":"object","required":["fieldId","sortBy"]},"aws-native:quicksight:AnalysisPivotTableAggregatedFieldWells":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The columns field well for a pivot table. Values are grouped by columns fields."},"rows":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The rows field well for a pivot table. Values are grouped by rows fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The values field well for a pivot table. Values are aggregated based on rows and columns fields."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableCellConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the cell for conditional formatting."},"scope":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableConditionalFormattingScope","description":"The scope of the cell for conditional formatting."},"scopes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableConditionalFormattingScope"},"description":"A list of cell scopes for conditional formatting."},"textFormat":{"$ref":"#/types/aws-native:quicksight:AnalysisTextConditionalFormat","description":"The text format of the cell for conditional formatting."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisPivotTableConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableConditionalFormattingOption"},"description":"Conditional formatting options for a `PivotTableVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableConditionalFormattingOption":{"properties":{"cell":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableCellConditionalFormatting","description":"The cell conditional formatting option for a pivot table."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableConditionalFormattingScope":{"properties":{"role":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableConditionalFormattingScopeRole","description":"The role (field, field total, grand total) of the cell for conditional formatting."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableConditionalFormattingScopeRole":{"type":"string","enum":[{"name":"Field","value":"FIELD"},{"name":"FieldTotal","value":"FIELD_TOTAL"},{"name":"GrandTotal","value":"GRAND_TOTAL"}]},"aws-native:quicksight:AnalysisPivotTableConfiguration":{"properties":{"fieldOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldOptions","description":"The field options for a pivot table visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"paginatedReportOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTablePaginatedReportOptions","description":"The paginated report options for a pivot table visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableSortConfiguration","description":"The sort configuration for a `PivotTableVisual` ."},"tableOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableOptions","description":"The table options for a pivot table visual."},"totalOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableTotalOptions","description":"The total options for a pivot table visual."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableDataPathOption":{"properties":{"dataPathList":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathValue"},"description":"The list of data path values for the data path options."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["dataPathList"]},"aws-native:quicksight:AnalysisPivotTableDataPathType":{"type":"string","enum":[{"name":"HierarchyRowsLayoutColumn","value":"HIERARCHY_ROWS_LAYOUT_COLUMN"},{"name":"MultipleRowMetricsColumn","value":"MULTIPLE_ROW_METRICS_COLUMN"},{"name":"EmptyColumnHeader","value":"EMPTY_COLUMN_HEADER"},{"name":"CountMetricColumn","value":"COUNT_METRIC_COLUMN"}]},"aws-native:quicksight:AnalysisPivotTableFieldCollapseState":{"type":"string","enum":[{"name":"Collapsed","value":"COLLAPSED"},{"name":"Expanded","value":"EXPANDED"}]},"aws-native:quicksight:AnalysisPivotTableFieldCollapseStateOption":{"properties":{"state":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldCollapseState","description":"The state of the field target of a pivot table. Choose one of the following options:\n\n- `COLLAPSED`\n- `EXPANDED`"},"target":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldCollapseStateTarget","description":"A tagged-union object that sets the collapse state."}},"type":"object","required":["target"]},"aws-native:quicksight:AnalysisPivotTableFieldCollapseStateTarget":{"properties":{"fieldDataPathValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathValue"},"description":"The data path of the pivot table's header. Used to set the collapse state."},"fieldId":{"type":"string","description":"The field ID of the pivot table that the collapse state needs to be set to."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableFieldOption":{"properties":{"customLabel":{"type":"string","description":"The custom label of the pivot table field."},"fieldId":{"type":"string","description":"The field ID of the pivot table field."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the pivot table field."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisPivotTableFieldOptions":{"properties":{"collapseStateOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldCollapseStateOption"},"description":"The collapse state options for the pivot table field options."},"dataPathOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableDataPathOption"},"description":"The data path options for the pivot table field options."},"selectedFieldOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldOption"},"description":"The selected field options for the pivot table field options."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableFieldSubtotalOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID of the subtotal options."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableFieldWells":{"properties":{"pivotTableAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableAggregatedFieldWells","description":"The aggregated field well for the pivot table."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableMetricPlacement":{"type":"string","enum":[{"name":"Row","value":"ROW"},{"name":"Column","value":"COLUMN"}]},"aws-native:quicksight:AnalysisPivotTableOptions":{"properties":{"cellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The table cell style of cells."},"collapsedRowDimensionsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility setting of a pivot table's collapsed row dimension fields. If the value of this structure is `HIDDEN` , all collapsed columns in a pivot table are automatically hidden. The default value is `VISIBLE` ."},"columnHeaderStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The table cell style of the column header."},"columnNamesVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the column names."},"defaultCellWidth":{"type":"string","description":"String based length that is composed of value and unit in px"},"metricPlacement":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableMetricPlacement","description":"The metric placement (row, column) options."},"rowAlternateColorOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisRowAlternateColorOptions","description":"The row alternate color options (widget status, row alternate colors)."},"rowFieldNamesStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The table cell style of row field names."},"rowHeaderStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The table cell style of the row headers."},"rowsLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableRowsLabelOptions","description":"The options for the label that is located above the row headers. This option is only applicable when `RowsLayout` is set to `HIERARCHY` ."},"rowsLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableRowsLayout","description":"The layout for the row dimension headers of a pivot table. Choose one of the following options.\n\n- `TABULAR` : (Default) Each row field is displayed in a separate column.\n- `HIERARCHY` : All row fields are displayed in a single column. Indentation is used to differentiate row headers of different fields."},"singleMetricVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the single metric options."},"toggleButtonsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the pivot table."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTablePaginatedReportOptions":{"properties":{"overflowColumnHeaderVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the repeating header rows on each page."},"verticalOverflowVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the printing table overflow across pages."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableRowsLabelOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the rows label."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the rows label."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableRowsLayout":{"type":"string","enum":[{"name":"Tabular","value":"TABULAR"},{"name":"Hierarchy","value":"HIERARCHY"}]},"aws-native:quicksight:AnalysisPivotTableSortBy":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnSort","description":"The column sort (field id, direction) for the pivot table sort by options."},"dataPath":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathSort","description":"The data path sort (data path value, direction) for the pivot table sort by options."},"field":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSort","description":"The field sort (field id, direction) for the pivot table sort by options."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableSortConfiguration":{"properties":{"fieldSortOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotFieldSortOptions"},"description":"The field sort options for a pivot table sort configuration."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableSubtotalLevel":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Custom","value":"CUSTOM"},{"name":"Last","value":"LAST"}]},"aws-native:quicksight:AnalysisPivotTableTotalOptions":{"properties":{"columnSubtotalOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSubtotalOptions","description":"The column subtotal options."},"columnTotalOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTotalOptions","description":"The column total options."},"rowSubtotalOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSubtotalOptions","description":"The row subtotal options."},"rowTotalOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTotalOptions","description":"The row total options."}},"type":"object"},"aws-native:quicksight:AnalysisPivotTableVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableConfiguration","description":"The configuration settings of the visual."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableConditionalFormatting","description":"The conditional formatting for a `PivotTableVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisPivotTotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the total cells."},"metricHeaderCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The cell styling options for the total of header cells."},"placement":{"$ref":"#/types/aws-native:quicksight:AnalysisTableTotalsPlacement","description":"The placement (start, end) for the total cells."},"scrollStatus":{"$ref":"#/types/aws-native:quicksight:AnalysisTableTotalsScrollStatus","description":"The scroll status (pinned, scrolled) for the total cells."},"totalAggregationOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTotalAggregationOption"},"description":"The total aggregation options for each value field."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The cell styling options for the total cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration for the total cells."},"valueCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The cell styling options for the totals of value cells."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisual":{"properties":{"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualConfiguration","description":"A description of the plugin field wells and their persisted properties."},"pluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) that reflects the plugin and version."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions"},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions"},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The ID of the visual that you want to use."}},"type":"object","required":["pluginArn","visualId"]},"aws-native:quicksight:AnalysisPluginVisualAxisName":{"type":"string","enum":[{"name":"GroupBy","value":"GROUP_BY"},{"name":"Value","value":"VALUE"}]},"aws-native:quicksight:AnalysisPluginVisualConfiguration":{"properties":{"fieldWells":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualFieldWell"},"description":"The field wells configuration of the plugin visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualSortConfiguration","description":"The sort configuration of the plugin visual."},"visualOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualOptions","description":"The persisted properties of the plugin visual."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisualFieldWell":{"properties":{"axisName":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualAxisName","description":"The semantic axis name for the field well."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"A list of dimensions for the field well."},"measures":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"A list of measures that exist in the field well."},"unaggregated":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisUnaggregatedField"},"description":"A list of unaggregated fields that exist in the field well."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisualItemsLimitConfiguration":{"properties":{"itemsLimit":{"type":"number","description":"Determines how many values are be fetched at once."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisualOptions":{"properties":{"visualProperties":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualProperty"},"description":"The persisted properties and their values."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisualProperty":{"properties":{"name":{"type":"string","description":"The name of the plugin visual property."},"value":{"type":"string","description":"The value of the plugin visual property."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisualSortConfiguration":{"properties":{"pluginVisualTableQuerySort":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualTableQuerySort","description":"The table query sorting options for the plugin visual."}},"type":"object"},"aws-native:quicksight:AnalysisPluginVisualTableQuerySort":{"properties":{"itemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisualItemsLimitConfiguration","description":"The maximum amount of data to be returned by a query."},"rowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"Determines how data is sorted in the response."}},"type":"object"},"aws-native:quicksight:AnalysisPredefinedHierarchy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier"},"description":"The list of columns that define the predefined hierarchy."},"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDrillDownFilter"},"description":"The option that determines the drill down filters for the predefined hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the predefined hierarchy."}},"type":"object","required":["columns","hierarchyId"]},"aws-native:quicksight:AnalysisPrimaryValueDisplayType":{"type":"string","enum":[{"name":"Hidden","value":"HIDDEN"},{"name":"Comparison","value":"COMPARISON"},{"name":"Actual","value":"ACTUAL"}]},"aws-native:quicksight:AnalysisProgressBarOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the progress bar."}},"type":"object"},"aws-native:quicksight:AnalysisQueryExecutionMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:AnalysisQueryExecutionOptions":{"properties":{"queryExecutionMode":{"$ref":"#/types/aws-native:quicksight:AnalysisQueryExecutionMode","description":"A structure that describes the query execution mode."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The aggregated field well categories of a radar chart."},"color":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The color that are assigned to the aggregated field wells of a radar chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The values that are assigned to the aggregated field wells of a radar chart."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartAreaStyleSettings":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility settings of a radar chart."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartAxesRangeScale":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Independent","value":"INDEPENDENT"},{"name":"Shared","value":"SHARED"}]},"aws-native:quicksight:AnalysisRadarChartConfiguration":{"properties":{"alternateBandColorsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the colors of alternatign bands in a radar chart."},"alternateBandEvenColor":{"type":"string","description":"The color of the even-numbered alternate bands of a radar chart."},"alternateBandOddColor":{"type":"string","description":"The color of the odd-numbered alternate bands of a radar chart."},"axesRangeScale":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartAxesRangeScale","description":"The axis behavior options of a radar chart."},"baseSeriesSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartSeriesSettings","description":"The base sreies settings of a radar chart."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The category axis of a radar chart."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The category label options of a radar chart."},"colorAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The color axis of a radar chart."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The color label options of a radar chart."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartFieldWells","description":"The field well configuration of a `RadarChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"shape":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartShape","description":"The shape of the radar chart."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartSortConfiguration","description":"The sort configuration of a `RadarChartVisual` ."},"startAngle":{"type":"number","description":"The start angle of a radar chart's axis."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartFieldWells":{"properties":{"radarChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartAggregatedFieldWells","description":"The aggregated field wells of a radar chart visual."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartSeriesSettings":{"properties":{"areaStyleSettings":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartAreaStyleSettings","description":"The area style settings of a radar chart."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartShape":{"type":"string","enum":[{"name":"Circle","value":"CIRCLE"},{"name":"Polygon","value":"POLYGON"}]},"aws-native:quicksight:AnalysisRadarChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The category items limit for a radar chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The category sort options of a radar chart."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The color items limit of a radar chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The color sort configuration of a radar chart."}},"type":"object"},"aws-native:quicksight:AnalysisRadarChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisRangeEndsLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the range ends label."}},"type":"object"},"aws-native:quicksight:AnalysisReferenceLine":{"properties":{"dataConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineDataConfiguration","description":"The data configuration of the reference line."},"labelConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineLabelConfiguration","description":"The label configuration of the reference line."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The status of the reference line. Choose one of the following options:\n\n- `ENABLE`\n- `DISABLE`"},"styleConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineStyleConfiguration","description":"The style configuration of the reference line."}},"type":"object","required":["dataConfiguration"]},"aws-native:quicksight:AnalysisReferenceLineCustomLabelConfiguration":{"properties":{"customLabel":{"type":"string","description":"The string text of the custom label."}},"type":"object","required":["customLabel"]},"aws-native:quicksight:AnalysisReferenceLineDataConfiguration":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisBinding","description":"The axis binding type of the reference line. Choose one of the following options:\n\n- `PrimaryY`\n- `SecondaryY`"},"dynamicConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineDynamicDataConfiguration","description":"The dynamic configuration of the reference line data configuration."},"seriesType":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineSeriesType","description":"The series type of the reference line data configuration. Choose one of the following options:\n\n- `BAR`\n- `LINE`"},"staticConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineStaticDataConfiguration","description":"The static data configuration of the reference line data configuration."}},"type":"object"},"aws-native:quicksight:AnalysisReferenceLineDynamicDataConfiguration":{"properties":{"calculation":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericalAggregationFunction","description":"The calculation that is used in the dynamic data."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the dynamic data targets."},"measureAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationFunction","description":"The aggregation function that is used in the dynamic data."}},"type":"object","required":["calculation","column"]},"aws-native:quicksight:AnalysisReferenceLineLabelConfiguration":{"properties":{"customLabelConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineCustomLabelConfiguration","description":"The custom label configuration of the label in a reference line."},"fontColor":{"type":"string","description":"The font color configuration of the label in a reference line."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The font configuration of the label in a reference line."},"horizontalPosition":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineLabelHorizontalPosition","description":"The horizontal position configuration of the label in a reference line. Choose one of the following options:\n\n- `LEFT`\n- `CENTER`\n- `RIGHT`"},"valueLabelConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineValueLabelConfiguration","description":"The value label configuration of the label in a reference line."},"verticalPosition":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineLabelVerticalPosition","description":"The vertical position configuration of the label in a reference line. Choose one of the following options:\n\n- `ABOVE`\n- `BELOW`"}},"type":"object"},"aws-native:quicksight:AnalysisReferenceLineLabelHorizontalPosition":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:AnalysisReferenceLineLabelVerticalPosition":{"type":"string","enum":[{"name":"Above","value":"ABOVE"},{"name":"Below","value":"BELOW"}]},"aws-native:quicksight:AnalysisReferenceLinePatternType":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dashed","value":"DASHED"},{"name":"Dotted","value":"DOTTED"}]},"aws-native:quicksight:AnalysisReferenceLineSeriesType":{"type":"string","enum":[{"name":"Bar","value":"BAR"},{"name":"Line","value":"LINE"}]},"aws-native:quicksight:AnalysisReferenceLineStaticDataConfiguration":{"properties":{"value":{"type":"number","description":"The double input of the static data."}},"type":"object","required":["value"]},"aws-native:quicksight:AnalysisReferenceLineStyleConfiguration":{"properties":{"color":{"type":"string","description":"The hex color of the reference line."},"pattern":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLinePatternType","description":"The pattern type of the line style. Choose one of the following options:\n\n- `SOLID`\n- `DASHED`\n- `DOTTED`"}},"type":"object"},"aws-native:quicksight:AnalysisReferenceLineValueLabelConfiguration":{"properties":{"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericFormatConfiguration","description":"The format configuration of the value label."},"relativePosition":{"$ref":"#/types/aws-native:quicksight:AnalysisReferenceLineValueLabelRelativePosition","description":"The relative position of the value label. Choose one of the following options:\n\n- `BEFORE_CUSTOM_LABEL`\n- `AFTER_CUSTOM_LABEL`"}},"type":"object"},"aws-native:quicksight:AnalysisReferenceLineValueLabelRelativePosition":{"type":"string","enum":[{"name":"BeforeCustomLabel","value":"BEFORE_CUSTOM_LABEL"},{"name":"AfterCustomLabel","value":"AFTER_CUSTOM_LABEL"}]},"aws-native:quicksight:AnalysisRelativeDateTimeControlDisplayOptions":{"properties":{"dateTimeFormat":{"type":"string","description":"Customize how dates are formatted in controls."},"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisRelativeDateType":{"type":"string","enum":[{"name":"Previous","value":"PREVIOUS"},{"name":"This","value":"THIS"},{"name":"Last","value":"LAST"},{"name":"Now","value":"NOW"},{"name":"Next","value":"NEXT"}]},"aws-native:quicksight:AnalysisRelativeDatesFilter":{"properties":{"anchorDateConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisAnchorDateConfiguration","description":"The date configuration of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"excludePeriodConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisExcludePeriodConfiguration","description":"The configuration for the exclude period of the filter."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"minimumGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The minimum granularity (period granularity) of the relative dates filter."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"relativeDateType":{"$ref":"#/types/aws-native:quicksight:AnalysisRelativeDateType","description":"The range date type of the filter. Choose one of the options below:\n\n- `PREVIOUS`\n- `THIS`\n- `LAST`\n- `NOW`\n- `NEXT`"},"relativeDateValue":{"type":"number","description":"The date value of the filter."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["anchorDateConfiguration","column","filterId","nullOption","relativeDateType","timeGranularity"]},"aws-native:quicksight:AnalysisRelativeFontSize":{"type":"string","enum":[{"name":"ExtraSmall","value":"EXTRA_SMALL"},{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"ExtraLarge","value":"EXTRA_LARGE"}]},"aws-native:quicksight:AnalysisResizeOption":{"type":"string","enum":[{"name":"Fixed","value":"FIXED"},{"name":"Responsive","value":"RESPONSIVE"}]},"aws-native:quicksight:AnalysisResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:AnalysisResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:quicksight:AnalysisRollingDateConfiguration":{"properties":{"dataSetIdentifier":{"type":"string","description":"The data set that is used in the rolling date configuration."},"expression":{"type":"string","description":"The expression of the rolling date configuration."}},"type":"object","required":["expression"]},"aws-native:quicksight:AnalysisRowAlternateColorOptions":{"properties":{"rowAlternateColors":{"type":"array","items":{"type":"string"},"description":"Determines the list of row alternate colors."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"Determines the widget status."},"usePrimaryBackgroundColor":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The primary background color options for alternate rows."}},"type":"object"},"aws-native:quicksight:AnalysisSameSheetTargetVisualConfiguration":{"properties":{"targetVisualOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTargetVisualOptions","description":"The options that choose the target visual in the same sheet.\n\nValid values are defined as follows:\n\n- `ALL_VISUALS` : Applies the filter operation to all visuals in the same sheet."},"targetVisuals":{"type":"array","items":{"type":"string"},"description":"A list of the target visual IDs that are located in the same sheet of the analysis."}},"type":"object"},"aws-native:quicksight:AnalysisSankeyDiagramAggregatedFieldWells":{"properties":{"destination":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The destination field wells of a sankey diagram."},"source":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The source field wells of a sankey diagram."},"weight":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The weight field wells of a sankey diagram."}},"type":"object"},"aws-native:quicksight:AnalysisSankeyDiagramChartConfiguration":{"properties":{"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The data label configuration of a sankey diagram."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisSankeyDiagramFieldWells","description":"The field well configuration of a sankey diagram."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisSankeyDiagramSortConfiguration","description":"The sort configuration of a sankey diagram."}},"type":"object"},"aws-native:quicksight:AnalysisSankeyDiagramFieldWells":{"properties":{"sankeyDiagramAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisSankeyDiagramAggregatedFieldWells","description":"The field well configuration of a sankey diagram."}},"type":"object"},"aws-native:quicksight:AnalysisSankeyDiagramSortConfiguration":{"properties":{"destinationItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of destination nodes that are displayed in a sankey diagram."},"sourceItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of source nodes that are displayed in a sankey diagram."},"weightSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the weight fields."}},"type":"object"},"aws-native:quicksight:AnalysisSankeyDiagramVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisSankeyDiagramChartConfiguration","description":"The configuration of a sankey diagram."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisScatterPlotCategoricallyAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category field well of a scatter plot."},"label":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The label field well of a scatter plot."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The size field well of a scatter plot."},"xAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The x-axis field well of a scatter plot.\n\nThe x-axis is aggregated by category."},"yAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The y-axis field well of a scatter plot.\n\nThe y-axis is aggregated by category."}},"type":"object"},"aws-native:quicksight:AnalysisScatterPlotConfiguration":{"properties":{"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisScatterPlotFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisScatterPlotSortConfiguration","description":"The sort configuration of a scatter plot."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The legend display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The palette (chart color) display setup of the visual."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of the scatter plot's x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of the scatter plot's x-axis."},"yAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of the scatter plot's y-axis."},"yAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of the scatter plot's y-axis."}},"type":"object"},"aws-native:quicksight:AnalysisScatterPlotFieldWells":{"properties":{"scatterPlotCategoricallyAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisScatterPlotCategoricallyAggregatedFieldWells","description":"The aggregated field wells of a scatter plot. The x and y-axes of scatter plots with aggregated field wells are aggregated by category, label, or both."},"scatterPlotUnaggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisScatterPlotUnaggregatedFieldWells","description":"The unaggregated field wells of a scatter plot. The x and y-axes of these scatter plots are unaggregated."}},"type":"object"},"aws-native:quicksight:AnalysisScatterPlotSortConfiguration":{"properties":{"scatterPlotLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration"}},"type":"object"},"aws-native:quicksight:AnalysisScatterPlotUnaggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category field well of a scatter plot."},"label":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The label field well of a scatter plot."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The size field well of a scatter plot."},"xAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The x-axis field well of a scatter plot.\n\nThe x-axis is a dimension field and cannot be aggregated."},"yAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The y-axis field well of a scatter plot.\n\nThe y-axis is a dimension field and cannot be aggregated."}},"type":"object"},"aws-native:quicksight:AnalysisScatterPlotVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisScatterPlotConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisScrollBarOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the data zoom scroll bar."},"visibleRange":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibleRangeOptions","description":"The visibility range for the data zoom scroll bar."}},"type":"object"},"aws-native:quicksight:AnalysisSecondaryValueOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the secondary value."}},"type":"object"},"aws-native:quicksight:AnalysisSectionAfterPageBreak":{"properties":{"status":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionPageBreakStatus","description":"The option that enables or disables a page break at the end of a section."}},"type":"object"},"aws-native:quicksight:AnalysisSectionBasedLayoutCanvasSizeOptions":{"properties":{"paperCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionBasedLayoutPaperCanvasSizeOptions","description":"The options for a paper canvas of a section-based layout."}},"type":"object"},"aws-native:quicksight:AnalysisSectionBasedLayoutConfiguration":{"properties":{"bodySections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisBodySectionConfiguration"},"description":"A list of body section configurations."},"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionBasedLayoutCanvasSizeOptions","description":"The options for the canvas of a section-based layout."},"footerSections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisHeaderFooterSectionConfiguration"},"description":"A list of footer section configurations."},"headerSections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisHeaderFooterSectionConfiguration"},"description":"A list of header section configurations."}},"type":"object","required":["bodySections","canvasSizeOptions","footerSections","headerSections"]},"aws-native:quicksight:AnalysisSectionBasedLayoutPaperCanvasSizeOptions":{"properties":{"paperMargin":{"$ref":"#/types/aws-native:quicksight:AnalysisSpacing","description":"Defines the spacing between the canvas content and the top, bottom, left, and right edges."},"paperOrientation":{"$ref":"#/types/aws-native:quicksight:AnalysisPaperOrientation","description":"The paper orientation that is used to define canvas dimensions. Choose one of the following options:\n\n- PORTRAIT\n- LANDSCAPE"},"paperSize":{"$ref":"#/types/aws-native:quicksight:AnalysisPaperSize","description":"The paper size that is used to define canvas dimensions."}},"type":"object"},"aws-native:quicksight:AnalysisSectionLayoutConfiguration":{"properties":{"freeFormLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisFreeFormSectionLayoutConfiguration","description":"The free-form layout configuration of a section."}},"type":"object","required":["freeFormLayout"]},"aws-native:quicksight:AnalysisSectionPageBreakConfiguration":{"properties":{"after":{"$ref":"#/types/aws-native:quicksight:AnalysisSectionAfterPageBreak","description":"The configuration of a page break after a section."}},"type":"object"},"aws-native:quicksight:AnalysisSectionPageBreakStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:AnalysisSectionStyle":{"properties":{"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"padding":{"$ref":"#/types/aws-native:quicksight:AnalysisSpacing","description":"The spacing between section content and its top, bottom, left, and right edges.\n\nThere is no padding by default."}},"type":"object"},"aws-native:quicksight:AnalysisSelectAllValueOptions":{"type":"string","enum":[{"name":"AllValues","value":"ALL_VALUES"}]},"aws-native:quicksight:AnalysisSelectedFieldOptions":{"type":"string","enum":[{"name":"AllFields","value":"ALL_FIELDS"}]},"aws-native:quicksight:AnalysisSelectedSheetsFilterScopeConfiguration":{"properties":{"sheetVisualScopingConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetVisualScopingConfiguration"},"description":"The sheet ID and visual IDs of the sheet and visuals that the filter is applied to."}},"type":"object"},"aws-native:quicksight:AnalysisSelectedTooltipType":{"type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Detailed","value":"DETAILED"}]},"aws-native:quicksight:AnalysisSeriesItem":{"properties":{"dataFieldSeriesItem":{"$ref":"#/types/aws-native:quicksight:AnalysisDataFieldSeriesItem","description":"The data field series item configuration of a line chart."},"fieldSeriesItem":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSeriesItem","description":"The field series item configuration of a line chart."}},"type":"object"},"aws-native:quicksight:AnalysisSetParameterValueConfiguration":{"properties":{"destinationParameterName":{"type":"string","description":"The destination parameter name of the `SetParameterValueConfiguration` ."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisDestinationParameterValueConfiguration"}},"type":"object","required":["destinationParameterName","value"]},"aws-native:quicksight:AnalysisShapeConditionalFormat":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting for the shape background color of a filled map visual."}},"type":"object","required":["backgroundColor"]},"aws-native:quicksight:AnalysisSheet":{"description":"\u003cp\u003eA \u003ci\u003esheet\u003c/i\u003e, which is an object that contains a set of visuals that\n            are viewed together on one page in Amazon QuickSight. Every analysis and dashboard\n            contains at least one sheet. Each sheet contains at least one visualization widget, for\n            example a chart, pivot table, or narrative insight. Sheets can be associated with other\n            components, such as controls, filters, and so on.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eThe name of a sheet. This name is displayed on the sheet's tab in the Amazon QuickSight\n            console.\u003c/p\u003e"},"sheetId":{"type":"string","description":"\u003cp\u003eThe unique identifier associated with a sheet.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:AnalysisSheetContentType":{"type":"string","enum":[{"name":"Paginated","value":"PAGINATED"},{"name":"Interactive","value":"INTERACTIVE"}]},"aws-native:quicksight:AnalysisSheetControlDateTimePickerType":{"type":"string","enum":[{"name":"SingleValued","value":"SINGLE_VALUED"},{"name":"DateRange","value":"DATE_RANGE"}]},"aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions":{"properties":{"infoIconText":{"type":"string","description":"The text content of info icon."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration of info icon label options."}},"type":"object"},"aws-native:quicksight:AnalysisSheetControlLayout":{"properties":{"configuration":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlLayoutConfiguration","description":"The configuration that determines the elements and canvas size options of sheet control."}},"type":"object","required":["configuration"]},"aws-native:quicksight:AnalysisSheetControlLayoutConfiguration":{"properties":{"gridLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisGridLayoutConfiguration","description":"The configuration that determines the elements and canvas size options of sheet control."}},"type":"object"},"aws-native:quicksight:AnalysisSheetControlListType":{"type":"string","enum":[{"name":"MultiSelect","value":"MULTI_SELECT"},{"name":"SingleSelect","value":"SINGLE_SELECT"}]},"aws-native:quicksight:AnalysisSheetControlSliderType":{"type":"string","enum":[{"name":"SinglePoint","value":"SINGLE_POINT"},{"name":"Range","value":"RANGE"}]},"aws-native:quicksight:AnalysisSheetDefinition":{"properties":{"contentType":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetContentType","description":"The layout content type of the sheet. Choose one of the following options:\n\n- `PAGINATED` : Creates a sheet for a paginated report.\n- `INTERACTIVE` : Creates a sheet for an interactive dashboard."},"description":{"type":"string","description":"A description of the sheet."},"filterControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterControl"},"description":"The list of filter controls that are on a sheet.\n\nFor more information, see [Adding filter controls to analysis sheets](https://docs.aws.amazon.com/quicksight/latest/user/filter-controls.html) in the *Amazon Quick Suite User Guide* ."},"images":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImage"},"description":"A list of images on a sheet."},"layouts":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisLayout"},"description":"Layouts define how the components of a sheet are arranged.\n\nFor more information, see [Types of layout](https://docs.aws.amazon.com/quicksight/latest/user/types-of-layout.html) in the *Amazon Quick Suite User Guide* ."},"name":{"type":"string","description":"The name of the sheet. This name is displayed on the sheet's tab in the Quick Suite console."},"parameterControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterControl"},"description":"The list of parameter controls that are on a sheet.\n\nFor more information, see [Using a Control with a Parameter in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/parameters-controls.html) in the *Amazon Quick Suite User Guide* ."},"sheetControlLayouts":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlLayout"},"description":"The control layouts of the sheet."},"sheetId":{"type":"string","description":"The unique identifier of a sheet."},"textBoxes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetTextBox"},"description":"The text boxes that are on a sheet."},"title":{"type":"string","description":"The title of the sheet."},"visuals":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisual"},"description":"A list of the visuals that are on a sheet. Visual placement is determined by the layout of the sheet."}},"type":"object","required":["sheetId"]},"aws-native:quicksight:AnalysisSheetElementConfigurationOverrides":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not the overrides are visible. Choose one of the following options:\n\n- `VISIBLE`\n- `HIDDEN`"}},"type":"object"},"aws-native:quicksight:AnalysisSheetElementRenderingRule":{"properties":{"configurationOverrides":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetElementConfigurationOverrides","description":"The override configuration of the rendering rules of a sheet."},"expression":{"type":"string","description":"The expression of the rendering rules of a sheet."}},"type":"object","required":["configurationOverrides","expression"]},"aws-native:quicksight:AnalysisSheetImage":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisImageCustomAction"},"description":"A list of custom actions that are configured for an image."},"imageContentAltText":{"type":"string","description":"The alt text for the image."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisImageInteractionOptions","description":"The general image interactions setup for an image."},"scaling":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImageScalingConfiguration","description":"Determines how the image is scaled."},"sheetImageId":{"type":"string","description":"The ID of the sheet image."},"source":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImageSource","description":"The source of the image."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImageTooltipConfiguration","description":"The tooltip to be shown when hovering over the image."}},"type":"object","required":["sheetImageId","source"]},"aws-native:quicksight:AnalysisSheetImageScalingConfiguration":{"properties":{"scalingType":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImageScalingType","description":"The scaling option to use when fitting the image inside the container.\n\nValid values are defined as follows:\n\n- `SCALE_TO_WIDTH` : The image takes up the entire width of the container. The image aspect ratio is preserved.\n- `SCALE_TO_HEIGHT` : The image takes up the entire height of the container. The image aspect ratio is preserved.\n- `SCALE_TO_CONTAINER` : The image takes up the entire width and height of the container. The image aspect ratio is not preserved.\n- `SCALE_NONE` : The image is displayed in its original size and is not scaled to the container."}},"type":"object"},"aws-native:quicksight:AnalysisSheetImageScalingType":{"type":"string","enum":[{"name":"ScaleToWidth","value":"SCALE_TO_WIDTH"},{"name":"ScaleToHeight","value":"SCALE_TO_HEIGHT"},{"name":"ScaleToContainer","value":"SCALE_TO_CONTAINER"},{"name":"ScaleNone","value":"SCALE_NONE"}]},"aws-native:quicksight:AnalysisSheetImageSource":{"properties":{"sheetImageStaticFileSource":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImageStaticFileSource","description":"The source of the static file that contains the image."}},"type":"object"},"aws-native:quicksight:AnalysisSheetImageStaticFileSource":{"properties":{"staticFileId":{"type":"string","description":"The ID of the static file that contains the image."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:AnalysisSheetImageTooltipConfiguration":{"properties":{"tooltipText":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetImageTooltipText","description":"The text that appears in the tooltip."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the tooltip."}},"type":"object"},"aws-native:quicksight:AnalysisSheetImageTooltipText":{"properties":{"plainText":{"type":"string","description":"The plain text format."}},"type":"object"},"aws-native:quicksight:AnalysisSheetTextBox":{"properties":{"content":{"type":"string","description":"The content that is displayed in the text box."},"sheetTextBoxId":{"type":"string","description":"The unique identifier for a text box. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have text boxes that share identifiers."}},"type":"object","required":["sheetTextBoxId"]},"aws-native:quicksight:AnalysisSheetVisualScopingConfiguration":{"properties":{"scope":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterVisualScope","description":"The scope of the applied entities. Choose one of the following options:\n\n- `ALL_VISUALS`\n- `SELECTED_VISUALS`"},"sheetId":{"type":"string","description":"The selected sheet that the filter is applied to."},"visualIds":{"type":"array","items":{"type":"string"},"description":"The selected visuals that the filter is applied to."}},"type":"object","required":["scope","sheetId"]},"aws-native:quicksight:AnalysisShortFormatText":{"properties":{"plainText":{"type":"string","description":"Plain text format."},"richText":{"type":"string","description":"Rich text. Examples of rich text include bold, underline, and italics."}},"type":"object"},"aws-native:quicksight:AnalysisSimpleAttributeAggregationFunction":{"type":"string","enum":[{"name":"UniqueValue","value":"UNIQUE_VALUE"}]},"aws-native:quicksight:AnalysisSimpleClusterMarker":{"properties":{"color":{"type":"string","description":"The color of the simple cluster marker."}},"type":"object"},"aws-native:quicksight:AnalysisSimpleNumericalAggregationFunction":{"type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Median","value":"MEDIAN"}]},"aws-native:quicksight:AnalysisSimpleTotalAggregationFunction":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"None","value":"NONE"}]},"aws-native:quicksight:AnalysisSingleAxisOptions":{"properties":{"yAxisOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisYAxisOptions","description":"The Y axis options of a single axis configuration."}},"type":"object"},"aws-native:quicksight:AnalysisSingleYAxisOption":{"type":"string","enum":[{"name":"PrimaryYAxis","value":"PRIMARY_Y_AXIS"}]},"aws-native:quicksight:AnalysisSliderControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisSmallMultiplesAxisPlacement":{"type":"string","enum":[{"name":"Outside","value":"OUTSIDE"},{"name":"Inside","value":"INSIDE"}]},"aws-native:quicksight:AnalysisSmallMultiplesAxisProperties":{"properties":{"placement":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesAxisPlacement","description":"Defines the placement of the axis. By default, axes are rendered `OUTSIDE` of the panels. Axes with `INDEPENDENT` scale are rendered `INSIDE` the panels."},"scale":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesAxisScale","description":"Determines whether scale of the axes are shared or independent. The default value is `SHARED` ."}},"type":"object"},"aws-native:quicksight:AnalysisSmallMultiplesAxisScale":{"type":"string","enum":[{"name":"Shared","value":"SHARED"},{"name":"Independent","value":"INDEPENDENT"}]},"aws-native:quicksight:AnalysisSmallMultiplesOptions":{"properties":{"maxVisibleColumns":{"type":"number","description":"Sets the maximum number of visible columns to display in the grid of small multiples panels.\n\nThe default is `Auto` , which automatically adjusts the columns in the grid to fit the overall layout and size of the given chart."},"maxVisibleRows":{"type":"number","description":"Sets the maximum number of visible rows to display in the grid of small multiples panels.\n\nThe default value is `Auto` , which automatically adjusts the rows in the grid to fit the overall layout and size of the given chart."},"panelConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPanelConfiguration","description":"Configures the display options for each small multiples panel."},"xAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesAxisProperties","description":"The properties of a small multiples X axis."},"yAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisSmallMultiplesAxisProperties","description":"The properties of a small multiples Y axis."}},"type":"object"},"aws-native:quicksight:AnalysisSortDirection":{"type":"string","enum":[{"name":"Asc","value":"ASC"},{"name":"Desc","value":"DESC"}]},"aws-native:quicksight:AnalysisSourceEntity":{"description":"\u003cp\u003eThe source entity of an analysis.\u003c/p\u003e","properties":{"sourceTemplate":{"$ref":"#/types/aws-native:quicksight:AnalysisSourceTemplate","description":"The source template for the source entity of the analysis."}},"type":"object"},"aws-native:quicksight:AnalysisSourceTemplate":{"description":"\u003cp\u003eThe source template of an analysis.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the source template of an analysis.\u003c/p\u003e"},"dataSetReferences":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataSetReference"},"description":"\u003cp\u003eThe dataset references of the source template of an analysis.\u003c/p\u003e"}},"type":"object","required":["arn","dataSetReferences"]},"aws-native:quicksight:AnalysisSpacing":{"properties":{"bottom":{"type":"string","description":"String based length that is composed of value and unit"},"left":{"type":"string","description":"String based length that is composed of value and unit"},"right":{"type":"string","description":"String based length that is composed of value and unit"},"top":{"type":"string","description":"String based length that is composed of value and unit"}},"type":"object"},"aws-native:quicksight:AnalysisSpatialStaticFile":{"properties":{"source":{"$ref":"#/types/aws-native:quicksight:AnalysisStaticFileSource","description":"The source of the spatial static file."},"staticFileId":{"type":"string","description":"The ID of the spatial static file."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:AnalysisSpecialValue":{"type":"string","enum":[{"name":"Empty","value":"EMPTY"},{"name":"Null","value":"NULL"},{"name":"Other","value":"OTHER"}]},"aws-native:quicksight:AnalysisStaticFile":{"properties":{"imageStaticFile":{"$ref":"#/types/aws-native:quicksight:AnalysisImageStaticFile","description":"The image static file."},"spatialStaticFile":{"$ref":"#/types/aws-native:quicksight:AnalysisSpatialStaticFile","description":"The spacial static file."}},"type":"object"},"aws-native:quicksight:AnalysisStaticFileS3SourceOptions":{"properties":{"bucketName":{"type":"string","description":"The name of the Amazon S3 bucket."},"objectKey":{"type":"string","description":"The identifier of the static file in the Amazon S3 bucket."},"region":{"type":"string","description":"The Region of the Amazon S3 account that contains the bucket."}},"type":"object","required":["bucketName","objectKey","region"]},"aws-native:quicksight:AnalysisStaticFileSource":{"properties":{"s3Options":{"$ref":"#/types/aws-native:quicksight:AnalysisStaticFileS3SourceOptions","description":"The structure that contains the Amazon S3 location to download the static file from."},"urlOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisStaticFileUrlSourceOptions","description":"The structure that contains the URL to download the static file from."}},"type":"object"},"aws-native:quicksight:AnalysisStaticFileUrlSourceOptions":{"properties":{"url":{"type":"string","description":"The URL to download the static file from."}},"type":"object","required":["url"]},"aws-native:quicksight:AnalysisStringDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:AnalysisDynamicDefaultValue","description":"The dynamic value of the `StringDefaultValues` . Different defaults displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"string"},"description":"The static values of the `DecimalDefaultValues` ."}},"type":"object"},"aws-native:quicksight:AnalysisStringFormatConfiguration":{"properties":{"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numericFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericFormatConfiguration","description":"The formatting configuration for numeric strings."}},"type":"object"},"aws-native:quicksight:AnalysisStringParameter":{"description":"\u003cp\u003eA string parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eA display name for a string parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe values of a string parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:AnalysisStringParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:AnalysisStringDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:AnalysisParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:AnalysisStringValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `String` parameter when a value has not been set."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:AnalysisStringValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"string","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:AnalysisValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:AnalysisStyledCellType":{"type":"string","enum":[{"name":"Total","value":"TOTAL"},{"name":"MetricHeader","value":"METRIC_HEADER"},{"name":"Value","value":"VALUE"}]},"aws-native:quicksight:AnalysisSubtotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the subtotal cells."},"fieldLevel":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableSubtotalLevel","description":"The field level (all, custom, last) for the subtotal cells."},"fieldLevelOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableFieldSubtotalOptions"},"description":"The optional configuration of subtotal cells."},"metricHeaderCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The cell styling options for the subtotals of header cells."},"styleTargets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTableStyleTarget"},"description":"The style targets options for subtotals."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The cell styling options for the subtotal cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration for the subtotal cells."},"valueCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The cell styling options for the subtotals of value cells."}},"type":"object"},"aws-native:quicksight:AnalysisTableAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The group by field well for a pivot table. Values are grouped by group by fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The values field well for a pivot table. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:AnalysisTableBorderOptions":{"properties":{"color":{"type":"string","description":"The color of a table border."},"style":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderStyle","description":"The style (none, solid) of a table border."},"thickness":{"type":"number","description":"The thickness of a table border."}},"type":"object"},"aws-native:quicksight:AnalysisTableBorderStyle":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Solid","value":"SOLID"}]},"aws-native:quicksight:AnalysisTableCellConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the cell for conditional formatting."},"textFormat":{"$ref":"#/types/aws-native:quicksight:AnalysisTextConditionalFormat","description":"The text format of the cell for conditional formatting."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisTableCellImageScalingConfiguration":{"type":"string","enum":[{"name":"FitToCellHeight","value":"FIT_TO_CELL_HEIGHT"},{"name":"FitToCellWidth","value":"FIT_TO_CELL_WIDTH"},{"name":"DoNotScale","value":"DO_NOT_SCALE"}]},"aws-native:quicksight:AnalysisTableCellImageSizingConfiguration":{"properties":{"tableCellImageScalingConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellImageScalingConfiguration","description":"The cell scaling configuration of the sizing options for the table image configuration."}},"type":"object"},"aws-native:quicksight:AnalysisTableCellStyle":{"properties":{"backgroundColor":{"type":"string","description":"The background color for the table cells."},"border":{"$ref":"#/types/aws-native:quicksight:AnalysisGlobalTableBorderOptions","description":"The borders for the table cells."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The font configuration of the table cells."},"height":{"type":"number","description":"The height color for the table cells."},"horizontalTextAlignment":{"$ref":"#/types/aws-native:quicksight:AnalysisHorizontalTextAlignment","description":"The horizontal text alignment (left, center, right, auto) for the table cells."},"textWrap":{"$ref":"#/types/aws-native:quicksight:AnalysisTextWrap","description":"The text wrap (none, wrap) for the table cells."},"verticalTextAlignment":{"$ref":"#/types/aws-native:quicksight:AnalysisVerticalTextAlignment","description":"The vertical text alignment (top, middle, bottom) for the table cells."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the table cells."}},"type":"object"},"aws-native:quicksight:AnalysisTableConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTableConditionalFormattingOption"},"description":"Conditional formatting options for a `PivotTableVisual` ."}},"type":"object"},"aws-native:quicksight:AnalysisTableConditionalFormattingOption":{"properties":{"cell":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellConditionalFormatting","description":"The cell conditional formatting option for a table."},"row":{"$ref":"#/types/aws-native:quicksight:AnalysisTableRowConditionalFormatting","description":"The row conditional formatting option for a table."}},"type":"object"},"aws-native:quicksight:AnalysisTableConfiguration":{"properties":{"fieldOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldOptions","description":"The field options for a table visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"paginatedReportOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTablePaginatedReportOptions","description":"The paginated report options for a table visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTableSortConfiguration","description":"The sort configuration for a `TableVisual` ."},"tableInlineVisualizations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTableInlineVisualization"},"description":"A collection of inline visualizations to display within a chart."},"tableOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTableOptions","description":"The table options for a table visual."},"totalOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTotalOptions","description":"The total options for a table visual."}},"type":"object"},"aws-native:quicksight:AnalysisTableFieldCustomIconContent":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldIconSetType","description":"The icon set type (link) of the custom icon content for table URL link content."}},"type":"object"},"aws-native:quicksight:AnalysisTableFieldCustomTextContent":{"properties":{"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFontConfiguration","description":"The font configuration of the custom text content for the table URL link content."},"value":{"type":"string","description":"The string value of the custom text content for the table URL link content."}},"type":"object","required":["fontConfiguration"]},"aws-native:quicksight:AnalysisTableFieldIconSetType":{"type":"string","enum":[{"name":"Link","value":"LINK"}]},"aws-native:quicksight:AnalysisTableFieldImageConfiguration":{"properties":{"sizingOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellImageSizingConfiguration","description":"The sizing options for the table image configuration."}},"type":"object"},"aws-native:quicksight:AnalysisTableFieldLinkConfiguration":{"properties":{"content":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldLinkContentConfiguration","description":"The URL content (text, icon) for the table link configuration."},"target":{"$ref":"#/types/aws-native:quicksight:AnalysisUrlTargetConfiguration","description":"The URL target (new tab, new window, same tab) for the table link configuration."}},"type":"object","required":["content","target"]},"aws-native:quicksight:AnalysisTableFieldLinkContentConfiguration":{"properties":{"customIconContent":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldCustomIconContent","description":"The custom icon content for the table link content configuration."},"customTextContent":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldCustomTextContent","description":"The custom text content (value, font configuration) for the table link content configuration."}},"type":"object"},"aws-native:quicksight:AnalysisTableFieldOption":{"properties":{"customLabel":{"type":"string","description":"The custom label for a table field."},"fieldId":{"type":"string","description":"The field ID for a table field."},"urlStyling":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldUrlConfiguration","description":"The URL configuration for a table field."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of a table field."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["fieldId"]},"aws-native:quicksight:AnalysisTableFieldOptions":{"properties":{"order":{"type":"array","items":{"type":"string"},"description":"The order of the field IDs that are configured as field options for a table visual."},"pinnedFieldOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTablePinnedFieldOptions","description":"The settings for the pinned columns of a table visual."},"selectedFieldOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldOption"},"description":"The field options to be configured to a table."},"transposedTableOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTransposedTableOption"},"description":"The `TableOptions` of a transposed table."}},"type":"object"},"aws-native:quicksight:AnalysisTableFieldUrlConfiguration":{"properties":{"imageConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldImageConfiguration","description":"The image configuration of a table field URL."},"linkConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTableFieldLinkConfiguration","description":"The link configuration of a table field URL."}},"type":"object"},"aws-native:quicksight:AnalysisTableFieldWells":{"properties":{"tableAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisTableAggregatedFieldWells","description":"The aggregated field well for the table."},"tableUnaggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisTableUnaggregatedFieldWells","description":"The unaggregated field well for the table."}},"type":"object"},"aws-native:quicksight:AnalysisTableInlineVisualization":{"properties":{"dataBars":{"$ref":"#/types/aws-native:quicksight:AnalysisDataBarsOptions","description":"The configuration of the inline visualization of the data bars within a chart."}},"type":"object"},"aws-native:quicksight:AnalysisTableOptions":{"properties":{"cellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The table cell style of table cells."},"headerStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"The table cell style of a table header."},"orientation":{"$ref":"#/types/aws-native:quicksight:AnalysisTableOrientation","description":"The orientation (vertical, horizontal) for a table."},"rowAlternateColorOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisRowAlternateColorOptions","description":"The row alternate color options (widget status, row alternate colors) for a table."}},"type":"object"},"aws-native:quicksight:AnalysisTableOrientation":{"type":"string","enum":[{"name":"Vertical","value":"VERTICAL"},{"name":"Horizontal","value":"HORIZONTAL"}]},"aws-native:quicksight:AnalysisTablePaginatedReportOptions":{"properties":{"overflowColumnHeaderVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of repeating header rows on each page."},"verticalOverflowVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of printing table overflow across pages."}},"type":"object"},"aws-native:quicksight:AnalysisTablePinnedFieldOptions":{"properties":{"pinnedLeftFields":{"type":"array","items":{"type":"string"},"description":"A list of columns to be pinned to the left of a table visual."}},"type":"object"},"aws-native:quicksight:AnalysisTableRowConditionalFormatting":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting color (solid, gradient) of the background for a table row."},"textColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting color (solid, gradient) of the text for a table row."}},"type":"object"},"aws-native:quicksight:AnalysisTableSideBorderOptions":{"properties":{"bottom":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"The table border options of the bottom border."},"innerHorizontal":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"The table border options of the inner horizontal border."},"innerVertical":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"The table border options of the inner vertical border."},"left":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"The table border options of the left border."},"right":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"The table border options of the right border."},"top":{"$ref":"#/types/aws-native:quicksight:AnalysisTableBorderOptions","description":"The table border options of the top border."}},"type":"object"},"aws-native:quicksight:AnalysisTableSortConfiguration":{"properties":{"paginationConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisPaginationConfiguration","description":"The pagination configuration (page size, page number) for the table."},"rowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The field sort options for rows in the table."}},"type":"object"},"aws-native:quicksight:AnalysisTableStyleTarget":{"properties":{"cellType":{"$ref":"#/types/aws-native:quicksight:AnalysisStyledCellType","description":"The cell type of the table style target."}},"type":"object","required":["cellType"]},"aws-native:quicksight:AnalysisTableTotalsPlacement":{"type":"string","enum":[{"name":"Start","value":"START"},{"name":"End","value":"END"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:AnalysisTableTotalsScrollStatus":{"type":"string","enum":[{"name":"Pinned","value":"PINNED"},{"name":"Scrolled","value":"SCROLLED"}]},"aws-native:quicksight:AnalysisTableUnaggregatedFieldWells":{"properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisUnaggregatedField"},"description":"The values field well for a pivot table. Values are unaggregated for an unaggregated table."}},"type":"object"},"aws-native:quicksight:AnalysisTableVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTableConfiguration","description":"The configuration settings of the visual."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:AnalysisTableConditionalFormatting","description":"The conditional formatting for a `PivotTableVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:AnalysisTargetVisualOptions":{"type":"string","enum":[{"name":"AllVisuals","value":"ALL_VISUALS"}]},"aws-native:quicksight:AnalysisTextAreaControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"placeholderOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextControlPlaceholderOptions","description":"The configuration of the placeholder options in a text area control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisTextConditionalFormat":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting for the text background color."},"icon":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingIcon","description":"The conditional formatting for the icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:AnalysisConditionalFormattingColor","description":"The conditional formatting for the text color."}},"type":"object"},"aws-native:quicksight:AnalysisTextControlPlaceholderOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration of the placeholder options in a text control."}},"type":"object"},"aws-native:quicksight:AnalysisTextFieldControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"placeholderOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisTextControlPlaceholderOptions","description":"The configuration of the placeholder options in a text field control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:AnalysisTextWrap":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Wrap","value":"WRAP"}]},"aws-native:quicksight:AnalysisThousandSeparatorOptions":{"properties":{"groupingStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisDigitGroupingStyle","description":"Determines the way numbers are styled to accommodate different readability standards. The `DEFAULT` value uses the standard international grouping system and groups numbers by the thousands. The `LAKHS` value uses the Indian numbering system and groups numbers by lakhs and crores."},"symbol":{"$ref":"#/types/aws-native:quicksight:AnalysisNumericSeparatorSymbol","description":"Determines the thousands separator symbol."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines the visibility of the thousands separator."}},"type":"object"},"aws-native:quicksight:AnalysisTimeBasedForecastProperties":{"properties":{"lowerBoundary":{"type":"number","description":"The lower boundary setup of a forecast computation."},"periodsBackward":{"type":"number","description":"The periods backward setup of a forecast computation."},"periodsForward":{"type":"number","description":"The periods forward setup of a forecast computation."},"predictionInterval":{"type":"number","description":"The prediction interval setup of a forecast computation."},"seasonality":{"type":"number","description":"The seasonality setup of a forecast computation. Choose one of the following options:\n\n- `NULL` : The input is set to `NULL` .\n- `NON_NULL` : The input is set to a custom value."},"upperBoundary":{"type":"number","description":"The upper boundary setup of a forecast computation."}},"type":"object"},"aws-native:quicksight:AnalysisTimeEqualityFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value.\n\nThis field is mutually exclusive to `Value` and `RollingDate` ."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:AnalysisRollingDateConfiguration","description":"The rolling date input for the `TimeEquality` filter.\n\nThis field is mutually exclusive to `Value` and `ParameterName` ."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"value":{"type":"string","description":"The value of a `TimeEquality` filter.\n\nThis field is mutually exclusive to `RollingDate` and `ParameterName` ."}},"type":"object","required":["column","filterId"]},"aws-native:quicksight:AnalysisTimeGranularity":{"type":"string","enum":[{"name":"Year","value":"YEAR"},{"name":"Quarter","value":"QUARTER"},{"name":"Month","value":"MONTH"},{"name":"Week","value":"WEEK"},{"name":"Day","value":"DAY"},{"name":"Hour","value":"HOUR"},{"name":"Minute","value":"MINUTE"},{"name":"Second","value":"SECOND"},{"name":"Millisecond","value":"MILLISECOND"}]},"aws-native:quicksight:AnalysisTimeRangeDrillDownFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"rangeMaximum":{"type":"string","description":"The maximum value for the filter value range."},"rangeMinimum":{"type":"string","description":"The minimum value for the filter value range."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["column","rangeMaximum","rangeMinimum","timeGranularity"]},"aws-native:quicksight:AnalysisTimeRangeFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"excludePeriodConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisExcludePeriodConfiguration","description":"The exclude period of the time range filter."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeMaximum":{"type":"boolean","description":"Determines whether the maximum value in the filter value range should be included in the filtered results."},"includeMinimum":{"type":"boolean","description":"Determines whether the minimum value in the filter value range should be included in the filtered results."},"nullOption":{"$ref":"#/types/aws-native:quicksight:AnalysisFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"rangeMaximumValue":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeRangeFilterValue","description":"The maximum value for the filter value range."},"rangeMinimumValue":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeRangeFilterValue","description":"The minimum value for the filter value range."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["column","filterId","nullOption"]},"aws-native:quicksight:AnalysisTimeRangeFilterValue":{"properties":{"parameter":{"type":"string","description":"The parameter type input value."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:AnalysisRollingDateConfiguration","description":"The rolling date input value."},"staticValue":{"type":"string","description":"The static input value."}},"type":"object"},"aws-native:quicksight:AnalysisTooltipItem":{"properties":{"columnTooltipItem":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnTooltipItem","description":"The tooltip item for the columns that are not part of a field well."},"fieldTooltipItem":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldTooltipItem","description":"The tooltip item for the fields."}},"type":"object"},"aws-native:quicksight:AnalysisTooltipOptions":{"properties":{"fieldBasedTooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldBasedTooltip","description":"The setup for the detailed tooltip. The tooltip setup is always saved. The display type is decided based on the tooltip type."},"selectedTooltipType":{"$ref":"#/types/aws-native:quicksight:AnalysisSelectedTooltipType","description":"The selected type for the tooltip. Choose one of the following options:\n\n- `BASIC` : A basic tooltip.\n- `DETAILED` : A detailed tooltip."},"tooltipVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"Determines whether or not the tooltip is visible."}},"type":"object"},"aws-native:quicksight:AnalysisTooltipTarget":{"type":"string","enum":[{"name":"Both","value":"BOTH"},{"name":"Bar","value":"BAR"},{"name":"Line","value":"LINE"}]},"aws-native:quicksight:AnalysisTooltipTitleType":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"PrimaryValue","value":"PRIMARY_VALUE"}]},"aws-native:quicksight:AnalysisTopBottomComputationType":{"type":"string","enum":[{"name":"Top","value":"TOP"},{"name":"Bottom","value":"BOTTOM"}]},"aws-native:quicksight:AnalysisTopBottomFilter":{"properties":{"aggregationSortConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisAggregationSortConfiguration"},"description":"The aggregation and sort configuration of the top bottom filter."},"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"limit":{"type":"number","description":"The number of items to include in the top bottom filter results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:AnalysisTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["aggregationSortConfigurations","column","filterId"]},"aws-native:quicksight:AnalysisTopBottomMoversComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"moverSize":{"type":"number","description":"The mover size setup of the top and bottom movers computation."},"name":{"type":"string","description":"The name of a computation."},"sortOrder":{"$ref":"#/types/aws-native:quicksight:AnalysisTopBottomSortOrder","description":"The sort order setup of the top and bottom movers computation."},"time":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The time field that is used in a computation."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisTopBottomComputationType","description":"The computation type. Choose from the following options:\n\n- TOP: Top movers computation.\n- BOTTOM: Bottom movers computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:AnalysisTopBottomRankedComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"resultSize":{"type":"number","description":"The result size of a top and bottom ranked computation."},"type":{"$ref":"#/types/aws-native:quicksight:AnalysisTopBottomComputationType","description":"The computation type. Choose one of the following options:\n\n- TOP: A top ranked computation.\n- BOTTOM: A bottom ranked computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:AnalysisTopBottomSortOrder":{"type":"string","enum":[{"name":"PercentDifference","value":"PERCENT_DIFFERENCE"},{"name":"AbsoluteDifference","value":"ABSOLUTE_DIFFERENCE"}]},"aws-native:quicksight:AnalysisTotalAggregationComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"value":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisTotalAggregationFunction":{"properties":{"simpleTotalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisSimpleTotalAggregationFunction","description":"A built in aggregation function for total values."}},"type":"object"},"aws-native:quicksight:AnalysisTotalAggregationOption":{"properties":{"fieldId":{"type":"string","description":"The field id that's associated with the total aggregation option."},"totalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:AnalysisTotalAggregationFunction","description":"The total aggregation function that you want to set for a specified field id."}},"type":"object","required":["fieldId","totalAggregationFunction"]},"aws-native:quicksight:AnalysisTotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the total cells."},"placement":{"$ref":"#/types/aws-native:quicksight:AnalysisTableTotalsPlacement","description":"The placement (start, end) for the total cells."},"scrollStatus":{"$ref":"#/types/aws-native:quicksight:AnalysisTableTotalsScrollStatus","description":"The scroll status (pinned, scrolled) for the total cells."},"totalAggregationOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisTotalAggregationOption"},"description":"The total aggregation settings for each value field."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:AnalysisTableCellStyle","description":"Cell styling options for the total cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility configuration for the total cells."}},"type":"object"},"aws-native:quicksight:AnalysisTransposedColumnType":{"type":"string","enum":[{"name":"RowHeaderColumn","value":"ROW_HEADER_COLUMN"},{"name":"ValueColumn","value":"VALUE_COLUMN"}]},"aws-native:quicksight:AnalysisTransposedTableOption":{"properties":{"columnIndex":{"type":"number","description":"The index of a columns in a transposed table. The index range is 0-9999."},"columnType":{"$ref":"#/types/aws-native:quicksight:AnalysisTransposedColumnType","description":"The column type of the column in a transposed table. Choose one of the following options:\n\n- `ROW_HEADER_COLUMN` : Refers to the leftmost column of the row header in the transposed table.\n- `VALUE_COLUMN` : Refers to all value columns in the transposed table."},"columnWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["columnType"]},"aws-native:quicksight:AnalysisTreeMapAggregatedFieldWells":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The color field well of a tree map. Values are grouped by aggregations based on group by fields."},"groups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The group by field well of a tree map. Values are grouped based on group by fields."},"sizes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The size field well of a tree map. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:AnalysisTreeMapConfiguration":{"properties":{"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility) for the colors displayed in a tree map."},"colorScale":{"$ref":"#/types/aws-native:quicksight:AnalysisColorScale","description":"The color options (gradient color, point of divergence) of a tree map."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisTreeMapFieldWells","description":"The field wells of the visual."},"groupLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility) of the groups that are displayed in a tree map."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend display setup of the visual."},"sizeLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility) of the sizes that are displayed in a tree map."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTreeMapSortConfiguration","description":"The sort configuration of a tree map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:AnalysisTooltipOptions","description":"The tooltip display setup of the visual."}},"type":"object"},"aws-native:quicksight:AnalysisTreeMapFieldWells":{"properties":{"treeMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisTreeMapAggregatedFieldWells","description":"The aggregated field wells of a tree map."}},"type":"object"},"aws-native:quicksight:AnalysisTreeMapSortConfiguration":{"properties":{"treeMapGroupItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of groups that are displayed."},"treeMapSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of group by fields."}},"type":"object"},"aws-native:quicksight:AnalysisTreeMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisTreeMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisTrendArrowOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the trend arrows."}},"type":"object"},"aws-native:quicksight:AnalysisUnaggregatedField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnIdentifier","description":"The column that is used in the `UnaggregatedField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:AnalysisUniqueValuesComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:AnalysisUrlTargetConfiguration":{"type":"string","enum":[{"name":"NewTab","value":"NEW_TAB"},{"name":"NewWindow","value":"NEW_WINDOW"},{"name":"SameTab","value":"SAME_TAB"}]},"aws-native:quicksight:AnalysisValidationStrategy":{"description":"\u003cp\u003eThe option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to \u003ccode\u003eLENIENT\u003c/code\u003e, validation is skipped for specific errors.\u003c/p\u003e","properties":{"mode":{"$ref":"#/types/aws-native:quicksight:AnalysisValidationStrategyMode","description":"The mode of validation for the asset to be created or updated. When you set this value to `STRICT` , strict validation for every error is enforced. When you set this value to `LENIENT` , validation is skipped for specific UI errors."}},"type":"object","required":["mode"]},"aws-native:quicksight:AnalysisValidationStrategyMode":{"type":"string","enum":[{"name":"Strict","value":"STRICT"},{"name":"Lenient","value":"LENIENT"}]},"aws-native:quicksight:AnalysisValueWhenUnsetOption":{"type":"string","enum":[{"name":"RecommendedValue","value":"RECOMMENDED_VALUE"},{"name":"Null","value":"NULL"}]},"aws-native:quicksight:AnalysisVerticalTextAlignment":{"type":"string","enum":[{"name":"Top","value":"TOP"},{"name":"Middle","value":"MIDDLE"},{"name":"Bottom","value":"BOTTOM"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:AnalysisVisibility":{"type":"string","enum":[{"name":"Hidden","value":"HIDDEN"},{"name":"Visible","value":"VISIBLE"}]},"aws-native:quicksight:AnalysisVisibleRangeOptions":{"properties":{"percentRange":{"$ref":"#/types/aws-native:quicksight:AnalysisPercentVisibleRange","description":"The percent range in the visible range."}},"type":"object"},"aws-native:quicksight:AnalysisVisual":{"properties":{"barChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisBarChartVisual","description":"A bar chart.\n\nFor more information, see [Using bar charts](https://docs.aws.amazon.com/quicksight/latest/user/bar-charts.html) in the *Amazon Quick Suite User Guide* ."},"boxPlotVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisBoxPlotVisual","description":"A box plot.\n\nFor more information, see [Using box plots](https://docs.aws.amazon.com/quicksight/latest/user/box-plots.html) in the *Amazon Quick Suite User Guide* ."},"comboChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisComboChartVisual","description":"A combo chart.\n\nFor more information, see [Using combo charts](https://docs.aws.amazon.com/quicksight/latest/user/combo-charts.html) in the *Amazon Quick Suite User Guide* ."},"customContentVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomContentVisual","description":"A visual that contains custom content.\n\nFor more information, see [Using custom visual content](https://docs.aws.amazon.com/quicksight/latest/user/custom-visual-content.html) in the *Amazon Quick Suite User Guide* ."},"emptyVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisEmptyVisual","description":"An empty visual."},"filledMapVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisFilledMapVisual","description":"A filled map.\n\nFor more information, see [Creating filled maps](https://docs.aws.amazon.com/quicksight/latest/user/filled-maps.html) in the *Amazon Quick Suite User Guide* ."},"funnelChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisFunnelChartVisual","description":"A funnel chart.\n\nFor more information, see [Using funnel charts](https://docs.aws.amazon.com/quicksight/latest/user/funnel-visual-content.html) in the *Amazon Quick Suite User Guide* ."},"gaugeChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisGaugeChartVisual","description":"A gauge chart.\n\nFor more information, see [Using gauge charts](https://docs.aws.amazon.com/quicksight/latest/user/gauge-chart.html) in the *Amazon Quick Suite User Guide* ."},"geospatialMapVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisGeospatialMapVisual","description":"A geospatial map or a points on map visual.\n\nFor more information, see [Creating point maps](https://docs.aws.amazon.com/quicksight/latest/user/point-maps.html) in the *Amazon Quick Suite User Guide* ."},"heatMapVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisHeatMapVisual","description":"A heat map.\n\nFor more information, see [Using heat maps](https://docs.aws.amazon.com/quicksight/latest/user/heat-map.html) in the *Amazon Quick Suite User Guide* ."},"histogramVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisHistogramVisual","description":"A histogram.\n\nFor more information, see [Using histograms](https://docs.aws.amazon.com/quicksight/latest/user/histogram-charts.html) in the *Amazon Quick Suite User Guide* ."},"insightVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisInsightVisual","description":"An insight visual.\n\nFor more information, see [Working with insights](https://docs.aws.amazon.com/quicksight/latest/user/computational-insights.html) in the *Amazon Quick Suite User Guide* ."},"kpiVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisKpiVisual","description":"A key performance indicator (KPI).\n\nFor more information, see [Using KPIs](https://docs.aws.amazon.com/quicksight/latest/user/kpi.html) in the *Amazon Quick Suite User Guide* ."},"layerMapVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisLayerMapVisual","description":"The properties for a layer map visual"},"lineChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisLineChartVisual","description":"A line chart.\n\nFor more information, see [Using line charts](https://docs.aws.amazon.com/quicksight/latest/user/line-charts.html) in the *Amazon Quick Suite User Guide* ."},"pieChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisPieChartVisual","description":"A pie or donut chart.\n\nFor more information, see [Using pie charts](https://docs.aws.amazon.com/quicksight/latest/user/pie-chart.html) in the *Amazon Quick Suite User Guide* ."},"pivotTableVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisPivotTableVisual","description":"A pivot table.\n\nFor more information, see [Using pivot tables](https://docs.aws.amazon.com/quicksight/latest/user/pivot-table.html) in the *Amazon Quick Suite User Guide* ."},"pluginVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisPluginVisual","description":"The custom plugin visual type."},"radarChartVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisRadarChartVisual","description":"A radar chart visual.\n\nFor more information, see [Using radar charts](https://docs.aws.amazon.com/quicksight/latest/user/radar-chart.html) in the *Amazon Quick Suite User Guide* ."},"sankeyDiagramVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisSankeyDiagramVisual","description":"A sankey diagram.\n\nFor more information, see [Using Sankey diagrams](https://docs.aws.amazon.com/quicksight/latest/user/sankey-diagram.html) in the *Amazon Quick Suite User Guide* ."},"scatterPlotVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisScatterPlotVisual","description":"A scatter plot.\n\nFor more information, see [Using scatter plots](https://docs.aws.amazon.com/quicksight/latest/user/scatter-plot.html) in the *Amazon Quick Suite User Guide* ."},"tableVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisTableVisual","description":"A table visual.\n\nFor more information, see [Using tables as visuals](https://docs.aws.amazon.com/quicksight/latest/user/tabular.html) in the *Amazon Quick Suite User Guide* ."},"treeMapVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisTreeMapVisual","description":"A tree map.\n\nFor more information, see [Using tree maps](https://docs.aws.amazon.com/quicksight/latest/user/tree-map.html) in the *Amazon Quick Suite User Guide* ."},"waterfallVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallVisual","description":"A waterfall chart.\n\nFor more information, see [Using waterfall charts](https://docs.aws.amazon.com/quicksight/latest/user/waterfall-chart.html) in the *Amazon Quick Suite User Guide* ."},"wordCloudVisual":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudVisual","description":"A word cloud.\n\nFor more information, see [Using word clouds](https://docs.aws.amazon.com/quicksight/latest/user/word-cloud.html) in the *Amazon Quick Suite User Guide* ."}},"type":"object"},"aws-native:quicksight:AnalysisVisualCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomActionOperation"},"description":"A list of `VisualCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the `VisualCustomAction` ."},"name":{"type":"string","description":"The name of the `VisualCustomAction` ."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisWidgetStatus","description":"The status of the `VisualCustomAction` ."},"trigger":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomActionTrigger","description":"The trigger of the `VisualCustomAction` .\n\nValid values are defined as follows:\n\n- `DATA_POINT_CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `DATA_POINT_MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:AnalysisVisualCustomActionOperation":{"properties":{"filterOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionFilterOperation","description":"The filter operation that filters data included in a visual or in an entire sheet."},"navigationOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionNavigationOperation","description":"The navigation operation that navigates between different sheets in the same analysis."},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionSetParametersOperation","description":"The set parameter operation that sets parameters in custom action."},"urlOperation":{"$ref":"#/types/aws-native:quicksight:AnalysisCustomActionUrlOperation","description":"The URL operation that opens a link to another webpage."}},"type":"object"},"aws-native:quicksight:AnalysisVisualCustomActionTrigger":{"type":"string","enum":[{"name":"DataPointClick","value":"DATA_POINT_CLICK"},{"name":"DataPointMenu","value":"DATA_POINT_MENU"}]},"aws-native:quicksight:AnalysisVisualInteractionOptions":{"properties":{"contextMenuOption":{"$ref":"#/types/aws-native:quicksight:AnalysisContextMenuOption","description":"The context menu options for a visual."},"visualMenuOption":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualMenuOption","description":"The on-visual menu options for a visual."}},"type":"object"},"aws-native:quicksight:AnalysisVisualMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:AnalysisDashboardBehavior","description":"The availaiblity status of a visual's menu options."}},"type":"object"},"aws-native:quicksight:AnalysisVisualPalette":{"properties":{"chartColor":{"type":"string","description":"The chart color options for the visual palette."},"colorMap":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDataPathColor"},"description":"The color map options for the visual palette."}},"type":"object"},"aws-native:quicksight:AnalysisVisualSubtitleLabelOptions":{"properties":{"formatText":{"$ref":"#/types/aws-native:quicksight:AnalysisLongFormatText","description":"The long text format of the subtitle label, such as plain text or rich text."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the subtitle label."}},"type":"object"},"aws-native:quicksight:AnalysisVisualTitleLabelOptions":{"properties":{"formatText":{"$ref":"#/types/aws-native:quicksight:AnalysisShortFormatText","description":"The short text format of the title label, such as plain text or rich text."},"visibility":{"$ref":"#/types/aws-native:quicksight:AnalysisVisibility","description":"The visibility of the title label."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartAggregatedFieldWells":{"properties":{"breakdowns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The breakdown field wells of a waterfall visual."},"categories":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The category field wells of a waterfall visual."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The value field wells of a waterfall visual."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartColorConfiguration":{"properties":{"groupColorConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartGroupColorConfiguration","description":"The color configuration for individual groups within a waterfall visual."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartConfiguration":{"properties":{"categoryAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The options that determine the presentation of the category axis."},"categoryAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The options that determine the presentation of the category axis label."},"colorConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartColorConfiguration","description":"The color configuration of a waterfall visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:AnalysisDataLabelOptions","description":"The data label configuration of a waterfall visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartFieldWells","description":"The field well configuration of a waterfall visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:AnalysisLegendOptions","description":"The legend configuration of a waterfall visual."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisAxisDisplayOptions","description":"The options that determine the presentation of the y-axis."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The options that determine the presentation of the y-axis label."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartSortConfiguration","description":"The sort configuration of a waterfall visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualPalette","description":"The visual palette configuration of a waterfall visual."},"waterfallChartOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartOptions","description":"The options that determine the presentation of a waterfall visual."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartFieldWells":{"properties":{"waterfallChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartAggregatedFieldWells","description":"The field well configuration of a waterfall visual."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartGroupColorConfiguration":{"properties":{"negativeBarColor":{"type":"string","description":"Defines the color for the negative bars of a waterfall chart."},"positiveBarColor":{"type":"string","description":"Defines the color for the positive bars of a waterfall chart."},"totalBarColor":{"type":"string","description":"Defines the color for the total bars of a waterfall chart."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartOptions":{"properties":{"totalBarLabel":{"type":"string","description":"This option determines the total bar label of a waterfall visual."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallChartSortConfiguration":{"properties":{"breakdownItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of bar groups that are displayed."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of the category fields."}},"type":"object"},"aws-native:quicksight:AnalysisWaterfallVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisWaterfallChartConfiguration","description":"The configuration for a waterfall visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisWhatIfPointScenario":{"properties":{"date":{"type":"string","description":"The date that you need the forecast results for."},"value":{"type":"number","description":"The target value that you want to meet for the provided date."}},"type":"object","required":["date","value"]},"aws-native:quicksight:AnalysisWhatIfRangeScenario":{"properties":{"endDate":{"type":"string","description":"The end date in the date range that you need the forecast results for."},"startDate":{"type":"string","description":"The start date in the date range that you need the forecast results for."},"value":{"type":"number","description":"The target value that you want to meet for the provided date range."}},"type":"object","required":["endDate","startDate","value"]},"aws-native:quicksight:AnalysisWidgetStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:AnalysisWordCloudAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisDimensionField"},"description":"The group by field well of a word cloud. Values are grouped by group by fields."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisMeasureField"},"description":"The size field well of a word cloud. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:AnalysisWordCloudChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) for the word cloud category."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudSortConfiguration","description":"The sort configuration of a word cloud visual."},"wordCloudOptions":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudOptions","description":"The options for a word cloud visual."}},"type":"object"},"aws-native:quicksight:AnalysisWordCloudCloudLayout":{"type":"string","enum":[{"name":"Fluid","value":"FLUID"},{"name":"Normal","value":"NORMAL"}]},"aws-native:quicksight:AnalysisWordCloudFieldWells":{"properties":{"wordCloudAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudAggregatedFieldWells","description":"The aggregated field wells of a word cloud."}},"type":"object"},"aws-native:quicksight:AnalysisWordCloudOptions":{"properties":{"cloudLayout":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudCloudLayout","description":"The cloud layout options (fluid, normal) of a word cloud."},"maximumStringLength":{"type":"number","description":"The length limit of each word from 1-100."},"wordCasing":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudWordCasing","description":"The word casing options (lower_case, existing_case) for the words in a word cloud."},"wordOrientation":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudWordOrientation","description":"The word orientation options (horizontal, horizontal_and_vertical) for the words in a word cloud."},"wordPadding":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudWordPadding","description":"The word padding options (none, small, medium, large) for the words in a word cloud."},"wordScaling":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudWordScaling","description":"The word scaling options (emphasize, normal) for the words in a word cloud."}},"type":"object"},"aws-native:quicksight:AnalysisWordCloudSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:AnalysisItemsLimitConfiguration","description":"The limit on the number of groups that are displayed in a word cloud."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisFieldSortOptions"},"description":"The sort configuration of group by fields."}},"type":"object"},"aws-native:quicksight:AnalysisWordCloudVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:AnalysisWordCloudChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:AnalysisVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:AnalysisWordCloudWordCasing":{"type":"string","enum":[{"name":"LowerCase","value":"LOWER_CASE"},{"name":"ExistingCase","value":"EXISTING_CASE"}]},"aws-native:quicksight:AnalysisWordCloudWordOrientation":{"type":"string","enum":[{"name":"Horizontal","value":"HORIZONTAL"},{"name":"HorizontalAndVertical","value":"HORIZONTAL_AND_VERTICAL"}]},"aws-native:quicksight:AnalysisWordCloudWordPadding":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:quicksight:AnalysisWordCloudWordScaling":{"type":"string","enum":[{"name":"Emphasize","value":"EMPHASIZE"},{"name":"Normal","value":"NORMAL"}]},"aws-native:quicksight:AnalysisYAxisOptions":{"properties":{"yAxis":{"$ref":"#/types/aws-native:quicksight:AnalysisSingleYAxisOption","description":"The Y axis type to be used in the chart.\n\nIf you choose `PRIMARY_Y_AXIS` , the primary Y Axis is located on the leftmost vertical axis of the chart."}},"type":"object","required":["yAxis"]},"aws-native:quicksight:CustomPermissionsCapabilities":{"properties":{"action":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"addOrRunAnomalyDetectionForAnalyses":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to add or run anomaly detection."},"analysis":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to perform analysis-related actions."},"automate":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"chatAgent":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"createAndUpdateDashboardEmailReports":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to create and update email reports."},"createAndUpdateDataSources":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to create and update data sources."},"createAndUpdateDatasets":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to create and update datasets."},"createAndUpdateThemes":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to Create and Update themes."},"createAndUpdateThresholdAlerts":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to create and update threshold alerts."},"createChatAgents":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"createSharedFolders":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to create shared folders."},"createSpiceDataset":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to create a SPICE dataset."},"dashboard":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to perform dashboard-related actions."},"exportToCsv":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to CSV files from the UI."},"exportToCsvInScheduledReports":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to CSV files in scheduled email reports."},"exportToExcel":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to Excel files from the UI."},"exportToExcelInScheduledReports":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to Excel files in scheduled email reports."},"exportToPdf":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to PDF files from the UI."},"exportToPdfInScheduledReports":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to export to PDF files in scheduled email reports."},"flow":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"includeContentInScheduledReportsEmail":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to include content in scheduled email reports."},"knowledgeBase":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"performFlowUiTask":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"printReports":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to print reports."},"publishWithoutApproval":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"renameSharedFolders":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to rename shared folders."},"research":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"shareAnalyses":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to share analyses."},"shareDashboards":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to share dashboards."},"shareDataSources":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to share data sources."},"shareDatasets":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to share datasets."},"space":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"subscribeDashboardEmailReports":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to subscribe to email reports."},"useAgentWebSearch":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"useBedrockModels":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState"},"viewAccountSpiceCapacity":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilityState","description":"The ability to view account SPICE capacity."}},"type":"object"},"aws-native:quicksight:CustomPermissionsCapabilityState":{"type":"string","enum":[{"name":"Deny","value":"DENY"}]},"aws-native:quicksight:CustomPermissionsTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:DashboardAdHocFilteringOption":{"description":"\u003cp\u003eAn ad hoc (one-time) filtering option.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"Availability status."}},"type":"object"},"aws-native:quicksight:DashboardAggregationFunction":{"properties":{"attributeAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardAttributeAggregationFunction","description":"Aggregation for attributes."},"categoricalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardCategoricalAggregationFunction","description":"Aggregation for categorical values.\n\n- `COUNT` : Aggregate by the total number of values, including duplicates.\n- `DISTINCT_COUNT` : Aggregate by the total number of distinct values."},"dateAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardDateAggregationFunction","description":"Aggregation for date values.\n\n- `COUNT` : Aggregate by the total number of values, including duplicates.\n- `DISTINCT_COUNT` : Aggregate by the total number of distinct values.\n- `MIN` : Select the smallest date value.\n- `MAX` : Select the largest date value."},"numericalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardNumericalAggregationFunction","description":"Aggregation for numerical values."}},"type":"object"},"aws-native:quicksight:DashboardAggregationSortConfiguration":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationFunction","description":"The function that aggregates the values in `Column` ."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that determines the sort order of aggregated values."},"sortDirection":{"$ref":"#/types/aws-native:quicksight:DashboardSortDirection","description":"The sort direction of values.\n\n- `ASC` : Sort in ascending order.\n- `DESC` : Sort in descending order."}},"type":"object","required":["column","sortDirection"]},"aws-native:quicksight:DashboardAllSheetsFilterScopeConfiguration":{"type":"object"},"aws-native:quicksight:DashboardAnalysisDefaults":{"properties":{"defaultNewSheetConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultNewSheetConfiguration","description":"The configuration for default new sheet settings."}},"type":"object","required":["defaultNewSheetConfiguration"]},"aws-native:quicksight:DashboardAnchorDateConfiguration":{"properties":{"anchorOption":{"$ref":"#/types/aws-native:quicksight:DashboardAnchorOption","description":"The options for the date configuration. Choose one of the options below:\n\n- `NOW`"},"parameterName":{"type":"string","description":"The name of the parameter that is used for the anchor date configuration."}},"type":"object"},"aws-native:quicksight:DashboardAnchorOption":{"type":"string","enum":[{"name":"Now","value":"NOW"}]},"aws-native:quicksight:DashboardArcAxisConfiguration":{"properties":{"range":{"$ref":"#/types/aws-native:quicksight:DashboardArcAxisDisplayRange","description":"The arc axis range of a `GaugeChartVisual` ."},"reserveRange":{"type":"number","description":"The reserved range of the arc axis."}},"type":"object"},"aws-native:quicksight:DashboardArcAxisDisplayRange":{"properties":{"max":{"type":"number","description":"The maximum value of the arc axis range."},"min":{"type":"number","description":"The minimum value of the arc axis range."}},"type":"object"},"aws-native:quicksight:DashboardArcConfiguration":{"properties":{"arcAngle":{"type":"number","description":"The option that determines the arc angle of a `GaugeChartVisual` ."},"arcThickness":{"$ref":"#/types/aws-native:quicksight:DashboardArcThicknessOptions","description":"The options that determine the arc thickness of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardArcOptions":{"properties":{"arcThickness":{"$ref":"#/types/aws-native:quicksight:DashboardArcThickness","description":"The arc thickness of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardArcThickness":{"type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"Whole","value":"WHOLE"}]},"aws-native:quicksight:DashboardArcThicknessOptions":{"type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:quicksight:DashboardAssetOptions":{"properties":{"excludedDataSetArns":{"type":"array","items":{"type":"string"},"description":"A list of dataset ARNS to exclude from Dashboard Q\u0026A."},"qBusinessInsightsStatus":{"$ref":"#/types/aws-native:quicksight:DashboardQBusinessInsightsStatus","description":"Determines whether insight summaries from Amazon Q Business are allowed in Dashboard Q\u0026A."},"timezone":{"type":"string","description":"Determines the timezone for the analysis."},"weekStart":{"$ref":"#/types/aws-native:quicksight:DashboardDayOfTheWeek","description":"Determines the week start day for an analysis."}},"type":"object"},"aws-native:quicksight:DashboardAttributeAggregationFunction":{"properties":{"simpleAttributeAggregation":{"$ref":"#/types/aws-native:quicksight:DashboardSimpleAttributeAggregationFunction","description":"The built-in aggregation functions for attributes.\n\n- `UNIQUE_VALUE` : Returns the unique value for a field, aggregated by the dimension fields."},"valueForMultipleValues":{"type":"string","description":"Used by the `UNIQUE_VALUE` aggregation function. If there are multiple values for the field used by the aggregation, the value for this property will be returned instead. Defaults to '*'."}},"type":"object"},"aws-native:quicksight:DashboardAxisBinding":{"type":"string","enum":[{"name":"PrimaryYaxis","value":"PRIMARY_YAXIS"},{"name":"SecondaryYaxis","value":"SECONDARY_YAXIS"}]},"aws-native:quicksight:DashboardAxisDataOptions":{"properties":{"dateAxisOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDateAxisOptions","description":"The options for an axis with a date field."},"numericAxisOptions":{"$ref":"#/types/aws-native:quicksight:DashboardNumericAxisOptions","description":"The options for an axis with a numeric field."}},"type":"object"},"aws-native:quicksight:DashboardAxisDisplayDataDrivenRange":{"type":"object"},"aws-native:quicksight:DashboardAxisDisplayMinMaxRange":{"properties":{"maximum":{"type":"number","description":"The maximum setup for an axis display range."},"minimum":{"type":"number","description":"The minimum setup for an axis display range."}},"type":"object"},"aws-native:quicksight:DashboardAxisDisplayOptions":{"properties":{"axisLineVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not the axis line is visible."},"axisOffset":{"type":"string","description":"String based length that is composed of value and unit in px"},"dataOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDataOptions","description":"The data options for an axis."},"gridLineVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not the grid line is visible."},"scrollbarOptions":{"$ref":"#/types/aws-native:quicksight:DashboardScrollBarOptions","description":"The scroll bar options for an axis."},"tickLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisTickLabelOptions","description":"The tick label options of an axis."}},"type":"object"},"aws-native:quicksight:DashboardAxisDisplayRange":{"properties":{"dataDriven":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayDataDrivenRange","description":"The data-driven setup of an axis display range."},"minMax":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayMinMaxRange","description":"The minimum and maximum setup of an axis display range."}},"type":"object"},"aws-native:quicksight:DashboardAxisLabelOptions":{"properties":{"applyTo":{"$ref":"#/types/aws-native:quicksight:DashboardAxisLabelReferenceOptions","description":"The options that indicate which field the label belongs to."},"customLabel":{"type":"string","description":"The text for the axis label."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The font configuration of the axis label."}},"type":"object"},"aws-native:quicksight:DashboardAxisLabelReferenceOptions":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the axis label is targeted to."},"fieldId":{"type":"string","description":"The field that the axis label is targeted to."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardAxisLinearScale":{"properties":{"stepCount":{"type":"number","description":"The step count setup of a linear axis."},"stepSize":{"type":"number","description":"The step size setup of a linear axis."}},"type":"object"},"aws-native:quicksight:DashboardAxisLogarithmicScale":{"properties":{"base":{"type":"number","description":"The base setup of a logarithmic axis scale."}},"type":"object"},"aws-native:quicksight:DashboardAxisScale":{"properties":{"linear":{"$ref":"#/types/aws-native:quicksight:DashboardAxisLinearScale","description":"The linear axis scale setup."},"logarithmic":{"$ref":"#/types/aws-native:quicksight:DashboardAxisLogarithmicScale","description":"The logarithmic axis scale setup."}},"type":"object"},"aws-native:quicksight:DashboardAxisTickLabelOptions":{"properties":{"labelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"Determines whether or not the axis ticks are visible."},"rotationAngle":{"type":"number","description":"The rotation angle of the axis tick labels."}},"type":"object"},"aws-native:quicksight:DashboardBarChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category (y-axis) field well of a bar chart."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The color (group/color) field well of a bar chart."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The small multiples field well of a bar chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a bar chart. Values are aggregated by category."}},"type":"object"},"aws-native:quicksight:DashboardBarChartConfiguration":{"properties":{"barsArrangement":{"$ref":"#/types/aws-native:quicksight:DashboardBarsArrangement","description":"Determines the arrangement of the bars. The orientation and arrangement of bars determine the type of bar that is used in the visual."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) for bar chart category."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a bar chart."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a color that is used in a bar chart."},"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardContributionAnalysisDefault"},"description":"The contribution analysis (anomaly configuration) setup of the visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardBarChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"orientation":{"$ref":"#/types/aws-native:quicksight:DashboardBarChartOrientation","description":"The orientation of the bars in a bar chart visual. There are two valid values in this structure:\n\n- `HORIZONTAL` : Used for charts that have horizontal bars. Visuals that use this value are horizontal bar charts, horizontal stacked bar charts, and horizontal stacked 100% bar charts.\n- `VERTICAL` : Used for charts that have vertical bars. Visuals that use this value are vertical bar charts, vertical stacked bar charts, and vertical stacked 100% bar charts."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLine"},"description":"The reference line setup of the visual."},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBarChartSortConfiguration","description":"The sort configuration of a `BarChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."},"valueAxis":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) for a bar chart value."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a bar chart value."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardBarChartFieldWells":{"properties":{"barChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardBarChartAggregatedFieldWells","description":"The aggregated field wells of a bar chart."}},"type":"object"},"aws-native:quicksight:DashboardBarChartOrientation":{"type":"string","enum":[{"name":"Horizontal","value":"HORIZONTAL"},{"name":"Vertical","value":"VERTICAL"}]},"aws-native:quicksight:DashboardBarChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of categories displayed in a bar chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of category fields."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of values displayed in a bar chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of color fields in a bar chart."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:DashboardBarChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBarChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardBarsArrangement":{"type":"string","enum":[{"name":"Clustered","value":"CLUSTERED"},{"name":"Stacked","value":"STACKED"},{"name":"StackedPercent","value":"STACKED_PERCENT"}]},"aws-native:quicksight:DashboardBaseMapStyleType":{"type":"string","enum":[{"name":"LightGray","value":"LIGHT_GRAY"},{"name":"DarkGray","value":"DARK_GRAY"},{"name":"Street","value":"STREET"},{"name":"Imagery","value":"IMAGERY"}]},"aws-native:quicksight:DashboardBehavior":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DashboardBinCountOptions":{"properties":{"value":{"type":"number","description":"The options that determine the bin count value."}},"type":"object"},"aws-native:quicksight:DashboardBinWidthOptions":{"properties":{"binCountLimit":{"type":"number","description":"The options that determine the bin count limit."},"value":{"type":"number","description":"The options that determine the bin width value."}},"type":"object"},"aws-native:quicksight:DashboardBodySectionConfiguration":{"properties":{"content":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionContent","description":"The configuration of content in a body section."},"pageBreakConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardSectionPageBreakConfiguration","description":"The configuration of a page break for a section."},"repeatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionRepeatConfiguration","description":"Describes the configurations that are required to declare a section as repeating."},"sectionId":{"type":"string","description":"The unique identifier of a body section."},"style":{"$ref":"#/types/aws-native:quicksight:DashboardSectionStyle","description":"The style options of a body section."}},"type":"object","required":["content","sectionId"]},"aws-native:quicksight:DashboardBodySectionContent":{"properties":{"layout":{"$ref":"#/types/aws-native:quicksight:DashboardSectionLayoutConfiguration","description":"The layout configuration of a body section."}},"type":"object"},"aws-native:quicksight:DashboardBodySectionDynamicCategoryDimensionConfiguration":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"limit":{"type":"number","description":"Number of values to use from the column for repetition."},"sortByMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnSort"},"description":"Sort criteria on the column values that you use for repetition."}},"type":"object","required":["column"]},"aws-native:quicksight:DashboardBodySectionDynamicNumericDimensionConfiguration":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"limit":{"type":"number","description":"Number of values to use from the column for repetition."},"sortByMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnSort"},"description":"Sort criteria on the column values that you use for repetition."}},"type":"object","required":["column"]},"aws-native:quicksight:DashboardBodySectionRepeatConfiguration":{"properties":{"dimensionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionRepeatDimensionConfiguration"},"description":"List of `BodySectionRepeatDimensionConfiguration` values that describe the dataset column and constraints for the column used to repeat the contents of a section."},"nonRepeatingVisuals":{"type":"array","items":{"type":"string"},"description":"List of visuals to exclude from repetition in repeating sections. The visuals will render identically, and ignore the repeating configurations in all repeating instances."},"pageBreakConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionRepeatPageBreakConfiguration","description":"Page break configuration to apply for each repeating instance."}},"type":"object"},"aws-native:quicksight:DashboardBodySectionRepeatDimensionConfiguration":{"properties":{"dynamicCategoryDimensionConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionDynamicCategoryDimensionConfiguration","description":"Describes the *Category* dataset column and constraints around the dynamic values that will be used in repeating the section contents."},"dynamicNumericDimensionConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionDynamicNumericDimensionConfiguration","description":"Describes the *Numeric* dataset column and constraints around the dynamic values used to repeat the contents of a section."}},"type":"object"},"aws-native:quicksight:DashboardBodySectionRepeatPageBreakConfiguration":{"properties":{"after":{"$ref":"#/types/aws-native:quicksight:DashboardSectionAfterPageBreak"}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The group by field well of a box plot chart. Values are grouped based on group by fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field well of a box plot chart. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotChartConfiguration":{"properties":{"boxPlotOptions":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotOptions","description":"The box plot chart options for a box plot visual"},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a box plot category."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility and sort Icon visibility) of a box plot category."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions"},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a box plot category."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) of a box plot value."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLine"},"description":"The reference line setup of the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotSortConfiguration","description":"The sort configuration of a `BoxPlotVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotFieldWells":{"properties":{"boxPlotAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotAggregatedFieldWells","description":"The aggregated field wells of a box plot."}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotFillStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Transparent","value":"TRANSPARENT"}]},"aws-native:quicksight:DashboardBoxPlotOptions":{"properties":{"allDataPointsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of all data points of the box plot."},"outlierVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the outlier in a box plot."},"styleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotStyleOptions","description":"The style options of the box plot."}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotSortConfiguration":{"properties":{"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of a group by fields."},"paginationConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPaginationConfiguration","description":"The pagination configuration of a table visual or box plot."}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotStyleOptions":{"properties":{"fillStyle":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotFillStyle","description":"The fill styles (solid, transparent) of the box plot."}},"type":"object"},"aws-native:quicksight:DashboardBoxPlotVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardCalculatedField":{"properties":{"dataSetIdentifier":{"type":"string","description":"The data set that is used in this calculated field."},"expression":{"type":"string","description":"The expression of the calculated field."},"name":{"type":"string","description":"The name of the calculated field."}},"type":"object","required":["dataSetIdentifier","expression","name"]},"aws-native:quicksight:DashboardCalculatedMeasureField":{"properties":{"expression":{"type":"string","description":"The expression in the table calculation."},"fieldId":{"type":"string","description":"The custom field ID."}},"type":"object","required":["expression","fieldId"]},"aws-native:quicksight:DashboardCascadingControlConfiguration":{"properties":{"sourceControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardCascadingControlSource"},"description":"A list of source controls that determine the values that are used in the current control."}},"type":"object"},"aws-native:quicksight:DashboardCascadingControlSource":{"properties":{"columnToMatch":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column identifier that determines which column to look up for the source sheet control."},"sourceSheetControlId":{"type":"string","description":"The source sheet control ID of a `CascadingControlSource` ."}},"type":"object"},"aws-native:quicksight:DashboardCategoricalAggregationFunction":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"}]},"aws-native:quicksight:DashboardCategoricalDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `CategoricalDimensionField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardStringFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardCategoricalMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardCategoricalAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `CategoricalMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardStringFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardCategoryDrillDownFilter":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"A list of the string inputs that are the values of the category drill down filter."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."}},"type":"object","required":["categoryValues","column"]},"aws-native:quicksight:DashboardCategoryFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"configuration":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterConfiguration","description":"The configuration for a `CategoryFilter` ."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."}},"type":"object","required":["column","configuration","filterId"]},"aws-native:quicksight:DashboardCategoryFilterConfiguration":{"properties":{"customFilterConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCustomFilterConfiguration","description":"A custom filter that filters based on a single value. This filter can be partially matched."},"customFilterListConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCustomFilterListConfiguration","description":"A list of custom filter values. In the Quick Sight console, this filter type is called a custom filter list."},"filterListConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFilterListConfiguration","description":"A list of filter configurations. In the Quick Sight console, this filter type is called a filter list."}},"type":"object"},"aws-native:quicksight:DashboardCategoryFilterMatchOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"},{"name":"Contains","value":"CONTAINS"},{"name":"DoesNotContain","value":"DOES_NOT_CONTAIN"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"}]},"aws-native:quicksight:DashboardCategoryFilterSelectAllOptions":{"type":"string","enum":[{"name":"FilterAllValues","value":"FILTER_ALL_VALUES"}]},"aws-native:quicksight:DashboardCategoryInnerFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"configuration":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterConfiguration"},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration"}},"type":"object","required":["column","configuration"]},"aws-native:quicksight:DashboardChartAxisLabelOptions":{"properties":{"axisLabelOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardAxisLabelOptions"},"description":"The label options for a chart axis."},"sortIconVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration of the sort icon on a chart's axis label."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of an axis label on a chart. Choose one of the following options:\n\n- `VISIBLE` : Shows the axis.\n- `HIDDEN` : Hides the axis."}},"type":"object"},"aws-native:quicksight:DashboardClusterMarker":{"properties":{"simpleClusterMarker":{"$ref":"#/types/aws-native:quicksight:DashboardSimpleClusterMarker","description":"The simple cluster marker of the cluster marker."}},"type":"object"},"aws-native:quicksight:DashboardClusterMarkerConfiguration":{"properties":{"clusterMarker":{"$ref":"#/types/aws-native:quicksight:DashboardClusterMarker","description":"The cluster marker that is a part of the cluster marker configuration."}},"type":"object"},"aws-native:quicksight:DashboardColorFillType":{"type":"string","enum":[{"name":"Discrete","value":"DISCRETE"},{"name":"Gradient","value":"GRADIENT"}]},"aws-native:quicksight:DashboardColorScale":{"properties":{"colorFillType":{"$ref":"#/types/aws-native:quicksight:DashboardColorFillType","description":"Determines the color fill type."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataColor"},"description":"Determines the list of colors that are applied to the visual."},"nullValueColor":{"$ref":"#/types/aws-native:quicksight:DashboardDataColor","description":"Determines the color that is applied to null values."}},"type":"object","required":["colorFillType","colors"]},"aws-native:quicksight:DashboardColorsConfiguration":{"properties":{"customColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardCustomColor"},"description":"A list of up to 50 custom colors."}},"type":"object"},"aws-native:quicksight:DashboardColumnConfiguration":{"properties":{"colorsConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardColorsConfiguration","description":"The color configurations of the column."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFormatConfiguration","description":"The format configuration of a column."},"role":{"$ref":"#/types/aws-native:quicksight:DashboardColumnRole","description":"The role of the column."}},"type":"object","required":["column"]},"aws-native:quicksight:DashboardColumnHierarchy":{"properties":{"dateTimeHierarchy":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeHierarchy","description":"The option that determines the hierarchy of any `DateTime` fields."},"explicitHierarchy":{"$ref":"#/types/aws-native:quicksight:DashboardExplicitHierarchy","description":"The option that determines the hierarchy of the fields that are built within a visual's field wells. These fields can't be duplicated to other visuals."},"predefinedHierarchy":{"$ref":"#/types/aws-native:quicksight:DashboardPredefinedHierarchy","description":"The option that determines the hierarchy of the fields that are defined during data preparation. These fields are available to use in any analysis that uses the data source."}},"type":"object"},"aws-native:quicksight:DashboardColumnIdentifier":{"properties":{"columnName":{"type":"string","description":"The name of the column."},"dataSetIdentifier":{"type":"string","description":"The data set that the column belongs to."}},"type":"object","required":["columnName","dataSetIdentifier"]},"aws-native:quicksight:DashboardColumnRole":{"type":"string","enum":[{"name":"Dimension","value":"DIMENSION"},{"name":"Measure","value":"MEASURE"}]},"aws-native:quicksight:DashboardColumnSort":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationFunction","description":"The aggregation function that is defined in the column sort."},"direction":{"$ref":"#/types/aws-native:quicksight:DashboardSortDirection","description":"The sort direction."},"sortBy":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"}},"type":"object","required":["direction","sortBy"]},"aws-native:quicksight:DashboardColumnTooltipItem":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationFunction","description":"The aggregation function of the column tooltip item."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The target column of the tooltip item."},"label":{"type":"string","description":"The label of the tooltip item."},"tooltipTarget":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipTarget","description":"Determines the target of the column tooltip item in a combo chart visual."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the tooltip item."}},"type":"object","required":["column"]},"aws-native:quicksight:DashboardComboChartAggregatedFieldWells":{"properties":{"barValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The aggregated `BarValues` field well of a combo chart."},"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The aggregated category field wells of a combo chart."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The aggregated colors field well of a combo chart."},"lineValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The aggregated `LineValues` field well of a combo chart."}},"type":"object"},"aws-native:quicksight:DashboardComboChartConfiguration":{"properties":{"barDataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed.\n\nThe data label options for a bar in a combo chart."},"barsArrangement":{"$ref":"#/types/aws-native:quicksight:DashboardBarsArrangement","description":"Determines the bar arrangement in a combo chart. The following are valid values in this structure:\n\n- `CLUSTERED` : For clustered bar combo charts.\n- `STACKED` : For stacked bar combo charts.\n- `STACKED_PERCENT` : Do not use. If you use this value, the operation returns a validation error."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The category axis of a combo chart."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart category (group/color) field well."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's color field well."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardComboChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"lineDataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed.\n\nThe data label options for a line in a combo chart."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of a combo chart's primary y-axis (bar) field well."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's primary y-axis (bar) field well."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLine"},"description":"The reference line setup of the visual."},"secondaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a combo chart's secondary y-axis (line) field well."},"secondaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's secondary y-axis(line) field well."},"singleAxisOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSingleAxisOptions"},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardComboChartSortConfiguration","description":"The sort configuration of a `ComboChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The legend display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardComboChartFieldWells":{"properties":{"comboChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardComboChartAggregatedFieldWells","description":"The aggregated field wells of a combo chart. Combo charts only have aggregated field wells. Columns in a combo chart are aggregated by category."}},"type":"object"},"aws-native:quicksight:DashboardComboChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The item limit configuration for the category field well of a combo chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the category field well in a combo chart."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The item limit configuration of the color field well in a combo chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the color field well in a combo chart."}},"type":"object"},"aws-native:quicksight:DashboardComboChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardComboChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardCommitMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:DashboardComparisonConfiguration":{"properties":{"comparisonFormat":{"$ref":"#/types/aws-native:quicksight:DashboardComparisonFormatConfiguration","description":"The format of the comparison."},"comparisonMethod":{"$ref":"#/types/aws-native:quicksight:DashboardComparisonMethod","description":"The method of the comparison. Choose from the following options:\n\n- `DIFFERENCE`\n- `PERCENT_DIFFERENCE`\n- `PERCENT`"}},"type":"object"},"aws-native:quicksight:DashboardComparisonFormatConfiguration":{"properties":{"numberDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumberDisplayFormatConfiguration","description":"The number display format."},"percentageDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPercentageDisplayFormatConfiguration","description":"The percentage display format."}},"type":"object"},"aws-native:quicksight:DashboardComparisonMethod":{"type":"string","enum":[{"name":"Difference","value":"DIFFERENCE"},{"name":"PercentDifference","value":"PERCENT_DIFFERENCE"},{"name":"Percent","value":"PERCENT"}]},"aws-native:quicksight:DashboardComputation":{"properties":{"forecast":{"$ref":"#/types/aws-native:quicksight:DashboardForecastComputation","description":"The forecast computation configuration."},"growthRate":{"$ref":"#/types/aws-native:quicksight:DashboardGrowthRateComputation","description":"The growth rate computation configuration."},"maximumMinimum":{"$ref":"#/types/aws-native:quicksight:DashboardMaximumMinimumComputation","description":"The maximum and minimum computation configuration."},"metricComparison":{"$ref":"#/types/aws-native:quicksight:DashboardMetricComparisonComputation","description":"The metric comparison computation configuration."},"periodOverPeriod":{"$ref":"#/types/aws-native:quicksight:DashboardPeriodOverPeriodComputation","description":"The period over period computation configuration."},"periodToDate":{"$ref":"#/types/aws-native:quicksight:DashboardPeriodToDateComputation","description":"The period to `DataSetIdentifier` computation configuration."},"topBottomMovers":{"$ref":"#/types/aws-native:quicksight:DashboardTopBottomMoversComputation","description":"The top movers and bottom movers computation configuration."},"topBottomRanked":{"$ref":"#/types/aws-native:quicksight:DashboardTopBottomRankedComputation","description":"The top ranked and bottom ranked computation configuration."},"totalAggregation":{"$ref":"#/types/aws-native:quicksight:DashboardTotalAggregationComputation","description":"The total aggregation computation configuration."},"uniqueValues":{"$ref":"#/types/aws-native:quicksight:DashboardUniqueValuesComputation","description":"The unique values computation configuration."}},"type":"object"},"aws-native:quicksight:DashboardConditionalFormattingColor":{"properties":{"gradient":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingGradientColor","description":"Formatting configuration for gradient color."},"solid":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingSolidColor","description":"Formatting configuration for solid color."}},"type":"object"},"aws-native:quicksight:DashboardConditionalFormattingCustomIconCondition":{"properties":{"color":{"type":"string","description":"Determines the color of the icon."},"displayConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIconDisplayConfiguration","description":"Determines the icon display configuration."},"expression":{"type":"string","description":"The expression that determines the condition of the icon set."},"iconOptions":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingCustomIconOptions","description":"Custom icon options for an icon set."}},"type":"object","required":["expression","iconOptions"]},"aws-native:quicksight:DashboardConditionalFormattingCustomIconOptions":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:DashboardIcon","description":"Determines the type of icon."},"unicodeIcon":{"type":"string","description":"Determines the Unicode icon type."}},"type":"object"},"aws-native:quicksight:DashboardConditionalFormattingGradientColor":{"properties":{"color":{"$ref":"#/types/aws-native:quicksight:DashboardGradientColor","description":"Determines the color."},"expression":{"type":"string","description":"The expression that determines the formatting configuration for gradient color."}},"type":"object","required":["color","expression"]},"aws-native:quicksight:DashboardConditionalFormattingIcon":{"properties":{"customCondition":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingCustomIconCondition","description":"Determines the custom condition for an icon set."},"iconSet":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIconSet","description":"Formatting configuration for icon set."}},"type":"object"},"aws-native:quicksight:DashboardConditionalFormattingIconDisplayConfiguration":{"properties":{"iconDisplayOption":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIconDisplayOption","description":"Determines the icon display configuration."}},"type":"object"},"aws-native:quicksight:DashboardConditionalFormattingIconDisplayOption":{"type":"string","enum":[{"name":"IconOnly","value":"ICON_ONLY"}]},"aws-native:quicksight:DashboardConditionalFormattingIconSet":{"properties":{"expression":{"type":"string","description":"The expression that determines the formatting configuration for the icon set."},"iconSetType":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIconSetType","description":"Determines the icon set type."}},"type":"object","required":["expression"]},"aws-native:quicksight:DashboardConditionalFormattingIconSetType":{"type":"string","enum":[{"name":"PlusMinus","value":"PLUS_MINUS"},{"name":"CheckX","value":"CHECK_X"},{"name":"ThreeColorArrow","value":"THREE_COLOR_ARROW"},{"name":"ThreeGrayArrow","value":"THREE_GRAY_ARROW"},{"name":"CaretUpMinusDown","value":"CARET_UP_MINUS_DOWN"},{"name":"ThreeShape","value":"THREE_SHAPE"},{"name":"ThreeCircle","value":"THREE_CIRCLE"},{"name":"Flags","value":"FLAGS"},{"name":"Bars","value":"BARS"},{"name":"FourColorArrow","value":"FOUR_COLOR_ARROW"},{"name":"FourGrayArrow","value":"FOUR_GRAY_ARROW"}]},"aws-native:quicksight:DashboardConditionalFormattingSolidColor":{"properties":{"color":{"type":"string","description":"Determines the color."},"expression":{"type":"string","description":"The expression that determines the formatting configuration for solid color."}},"type":"object","required":["expression"]},"aws-native:quicksight:DashboardContextMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The availability status of the context menu options. If the value of this property is set to `ENABLED` , dashboard readers can interact with the context menu."}},"type":"object"},"aws-native:quicksight:DashboardContributionAnalysisDefault":{"properties":{"contributorDimensions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"description":"The dimensions columns that are used in the contribution analysis, usually a list of `ColumnIdentifiers` ."},"measureFieldId":{"type":"string","description":"The measure field that is used in the contribution analysis."}},"type":"object","required":["contributorDimensions","measureFieldId"]},"aws-native:quicksight:DashboardCrossDatasetTypes":{"type":"string","enum":[{"name":"AllDatasets","value":"ALL_DATASETS"},{"name":"SingleDataset","value":"SINGLE_DATASET"}]},"aws-native:quicksight:DashboardCurrencyDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numberScale":{"$ref":"#/types/aws-native:quicksight:DashboardNumberScale","description":"Determines the number scale value for the currency format."},"prefix":{"type":"string","description":"Determines the prefix value of the currency format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the currency format."},"symbol":{"type":"string","description":"Determines the symbol for the currency format."}},"type":"object"},"aws-native:quicksight:DashboardCustomActionFilterOperation":{"properties":{"selectedFieldsConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFilterOperationSelectedFieldsConfiguration","description":"The configuration that chooses the fields to be filtered."},"targetVisualsConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFilterOperationTargetVisualsConfiguration","description":"The configuration that chooses the target visuals to be filtered."}},"type":"object","required":["selectedFieldsConfiguration","targetVisualsConfiguration"]},"aws-native:quicksight:DashboardCustomActionNavigationOperation":{"properties":{"localNavigationConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardLocalNavigationConfiguration","description":"The configuration that chooses the navigation target."}},"type":"object"},"aws-native:quicksight:DashboardCustomActionSetParametersOperation":{"properties":{"parameterValueConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSetParameterValueConfiguration"},"description":"The parameter that determines the value configuration."}},"type":"object","required":["parameterValueConfigurations"]},"aws-native:quicksight:DashboardCustomActionUrlOperation":{"properties":{"urlTarget":{"$ref":"#/types/aws-native:quicksight:DashboardUrlTargetConfiguration","description":"The target of the `CustomActionURLOperation` .\n\nValid values are defined as follows:\n\n- `NEW_TAB` : Opens the target URL in a new browser tab.\n- `NEW_WINDOW` : Opens the target URL in a new browser window.\n- `SAME_TAB` : Opens the target URL in the same browser tab."},"urlTemplate":{"type":"string","description":"THe URL link of the `CustomActionURLOperation` ."}},"type":"object","required":["urlTarget","urlTemplate"]},"aws-native:quicksight:DashboardCustomColor":{"properties":{"color":{"type":"string","description":"The color that is applied to the data value."},"fieldValue":{"type":"string","description":"The data value that the color is applied to."},"specialValue":{"$ref":"#/types/aws-native:quicksight:DashboardSpecialValue","description":"The value of a special data value."}},"type":"object","required":["color"]},"aws-native:quicksight:DashboardCustomContentConfiguration":{"properties":{"contentType":{"$ref":"#/types/aws-native:quicksight:DashboardCustomContentType","description":"The content type of the custom content visual. You can use this to have the visual render as an image."},"contentUrl":{"type":"string","description":"The input URL that links to the custom content that you want in the custom visual."},"imageScaling":{"$ref":"#/types/aws-native:quicksight:DashboardCustomContentImageScalingConfiguration","description":"The sizing options for the size of the custom content visual. This structure is required when the `ContentType` of the visual is `'IMAGE'` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."}},"type":"object"},"aws-native:quicksight:DashboardCustomContentImageScalingConfiguration":{"type":"string","enum":[{"name":"FitToHeight","value":"FIT_TO_HEIGHT"},{"name":"FitToWidth","value":"FIT_TO_WIDTH"},{"name":"DoNotScale","value":"DO_NOT_SCALE"},{"name":"ScaleToVisual","value":"SCALE_TO_VISUAL"}]},"aws-native:quicksight:DashboardCustomContentType":{"type":"string","enum":[{"name":"Image","value":"IMAGE"},{"name":"OtherEmbeddedContent","value":"OTHER_EMBEDDED_CONTENT"}]},"aws-native:quicksight:DashboardCustomContentVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCustomContentConfiguration","description":"The configuration of a `CustomContentVisual` ."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used to create the custom content visual. You can't create a visual without a dataset."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:DashboardCustomFilterConfiguration":{"properties":{"categoryValue":{"type":"string","description":"The category value for the filter.\n\nThis field is mutually exclusive to `ParameterName` ."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value.\n\nThis field is mutually exclusive to `CategoryValue` ."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator","nullOption"]},"aws-native:quicksight:DashboardCustomFilterListConfiguration":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"The list of category values for the filter."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator","nullOption"]},"aws-native:quicksight:DashboardCustomNarrativeOptions":{"properties":{"narrative":{"type":"string","description":"The string input of custom narrative."}},"type":"object","required":["narrative"]},"aws-native:quicksight:DashboardCustomParameterValues":{"properties":{"dateTimeValues":{"type":"array","items":{"type":"string"},"description":"A list of datetime-type parameter values."},"decimalValues":{"type":"array","items":{"type":"number"},"description":"A list of decimal-type parameter values."},"integerValues":{"type":"array","items":{"type":"number"},"description":"A list of integer-type parameter values."},"stringValues":{"type":"array","items":{"type":"string"},"description":"A list of string-type parameter values."}},"type":"object"},"aws-native:quicksight:DashboardCustomValuesConfiguration":{"properties":{"customValues":{"$ref":"#/types/aws-native:quicksight:DashboardCustomParameterValues"},"includeNullValue":{"type":"boolean","description":"Includes the null value in custom action parameter values."}},"type":"object","required":["customValues"]},"aws-native:quicksight:DashboardDataBarsOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID for the data bars options."},"negativeColor":{"type":"string","description":"The color of the negative data bar."},"positiveColor":{"type":"string","description":"The color of the positive data bar."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardDataColor":{"properties":{"color":{"type":"string","description":"The color that is applied to the data value."},"dataValue":{"type":"number","description":"The data value that the color is applied to."}},"type":"object"},"aws-native:quicksight:DashboardDataFieldSeriesItem":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:DashboardAxisBinding","description":"The axis that you are binding the field to."},"fieldId":{"type":"string","description":"The field ID of the field that you are setting the axis binding to."},"fieldValue":{"type":"string","description":"The field value of the field that you are setting the axis binding to."},"settings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartSeriesSettings","description":"The options that determine the presentation of line series associated to the field."}},"type":"object","required":["axisBinding","fieldId"]},"aws-native:quicksight:DashboardDataLabelContent":{"type":"string","enum":[{"name":"Value","value":"VALUE"},{"name":"Percent","value":"PERCENT"},{"name":"ValueAndPercent","value":"VALUE_AND_PERCENT"}]},"aws-native:quicksight:DashboardDataLabelOptions":{"properties":{"categoryLabelVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the category field labels."},"dataLabelTypes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelType"},"description":"The option that determines the data label type."},"labelColor":{"type":"string","description":"Determines the color of the data labels."},"labelContent":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelContent","description":"Determines the content of the data labels."},"labelFontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"Determines the font configuration of the data labels."},"measureLabelVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the measure field labels."},"overlap":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOverlap","description":"Determines whether overlap is enabled or disabled for the data labels."},"position":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelPosition","description":"Determines the position of the data labels."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the total."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the data labels."}},"type":"object"},"aws-native:quicksight:DashboardDataLabelOverlap":{"type":"string","enum":[{"name":"DisableOverlap","value":"DISABLE_OVERLAP"},{"name":"EnableOverlap","value":"ENABLE_OVERLAP"}]},"aws-native:quicksight:DashboardDataLabelPosition":{"type":"string","enum":[{"name":"Inside","value":"INSIDE"},{"name":"Outside","value":"OUTSIDE"},{"name":"Left","value":"LEFT"},{"name":"Top","value":"TOP"},{"name":"Bottom","value":"BOTTOM"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:DashboardDataLabelType":{"properties":{"dataPathLabelType":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathLabelType","description":"The option that specifies individual data values for labels."},"fieldLabelType":{"$ref":"#/types/aws-native:quicksight:DashboardFieldLabelType","description":"Determines the label configuration for the entire field."},"maximumLabelType":{"$ref":"#/types/aws-native:quicksight:DashboardMaximumLabelType","description":"Determines the label configuration for the maximum value in a visual."},"minimumLabelType":{"$ref":"#/types/aws-native:quicksight:DashboardMinimumLabelType","description":"Determines the label configuration for the minimum value in a visual."},"rangeEndsLabelType":{"$ref":"#/types/aws-native:quicksight:DashboardRangeEndsLabelType","description":"Determines the label configuration for range end value in a visual."}},"type":"object"},"aws-native:quicksight:DashboardDataPathColor":{"properties":{"color":{"type":"string","description":"The color that needs to be applied to the element."},"element":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathValue","description":"The element that the color needs to be applied to."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The time granularity of the field that the color needs to be applied to."}},"type":"object","required":["color","element"]},"aws-native:quicksight:DashboardDataPathLabelType":{"properties":{"fieldId":{"type":"string","description":"The field ID of the field that the data label needs to be applied to."},"fieldValue":{"type":"string","description":"The actual value of the field that is labeled."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the data label."}},"type":"object"},"aws-native:quicksight:DashboardDataPathSort":{"properties":{"direction":{"$ref":"#/types/aws-native:quicksight:DashboardSortDirection","description":"Determines the sort direction."},"sortPaths":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathValue"},"description":"The list of data paths that need to be sorted."}},"type":"object","required":["direction","sortPaths"]},"aws-native:quicksight:DashboardDataPathType":{"properties":{"pivotTableDataPathType":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableDataPathType","description":"The type of data path value utilized in a pivot table. Choose one of the following options:\n\n- `HIERARCHY_ROWS_LAYOUT_COLUMN` - The type of data path for the rows layout column, when `RowsLayout` is set to `HIERARCHY` .\n- `MULTIPLE_ROW_METRICS_COLUMN` - The type of data path for the metric column when the row is set to Metric Placement.\n- `EMPTY_COLUMN_HEADER` - The type of data path for the column with empty column header, when there is no field in `ColumnsFieldWell` and the row is set to Metric Placement.\n- `COUNT_METRIC_COLUMN` - The type of data path for the column with `COUNT` as the metric, when there is no field in the `ValuesFieldWell` ."}},"type":"object"},"aws-native:quicksight:DashboardDataPathValue":{"properties":{"dataPathType":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathType","description":"The type configuration of the field."},"fieldId":{"type":"string","description":"The field ID of the field that needs to be sorted."},"fieldValue":{"type":"string","description":"The actual value of the field that needs to be sorted."}},"type":"object"},"aws-native:quicksight:DashboardDataPointDrillUpDownOption":{"description":"\u003cp\u003eThe drill down options for data points in a dashbaord.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the drill down options of data points."}},"type":"object"},"aws-native:quicksight:DashboardDataPointMenuLabelOption":{"description":"\u003cp\u003eThe data point menu options of a dashboard.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the data point menu options."}},"type":"object"},"aws-native:quicksight:DashboardDataPointTooltipOption":{"description":"\u003cp\u003eThe data point tooltip options.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the data point tool tip options."}},"type":"object"},"aws-native:quicksight:DashboardDataQaEnabledOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the Data Q\u0026A option on the dashboard."}},"type":"object"},"aws-native:quicksight:DashboardDataSetIdentifierDeclaration":{"properties":{"dataSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data set."},"identifier":{"type":"string","description":"The identifier of the data set, typically the data set's name."}},"type":"object","required":["dataSetArn","identifier"]},"aws-native:quicksight:DashboardDataSetReference":{"description":"\u003cp\u003eDataset reference.\u003c/p\u003e","properties":{"dataSetArn":{"type":"string","description":"\u003cp\u003eDataset Amazon Resource Name (ARN).\u003c/p\u003e"},"dataSetPlaceholder":{"type":"string","description":"\u003cp\u003eDataset placeholder.\u003c/p\u003e"}},"type":"object","required":["dataSetArn","dataSetPlaceholder"]},"aws-native:quicksight:DashboardDataStoriesSharingOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"Availability status."}},"type":"object"},"aws-native:quicksight:DashboardDateAggregationFunction":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"}]},"aws-native:quicksight:DashboardDateAxisOptions":{"properties":{"missingDateVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not missing dates are displayed."}},"type":"object"},"aws-native:quicksight:DashboardDateDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `DateDimensionField` ."},"dateGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The date granularity of the `DateDimensionField` . Choose one of the following options:\n\n- `YEAR`\n- `QUARTER`\n- `MONTH`\n- `WEEK`\n- `DAY`\n- `HOUR`\n- `MINUTE`\n- `SECOND`\n- `MILLISECOND`"},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardDateMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardDateAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `DateMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardDateTimeDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:DashboardDynamicDefaultValue","description":"The dynamic value of the `DataTimeDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:DashboardRollingDateConfiguration","description":"The rolling date of the `DataTimeDefaultValues` . The date is determined from the dataset based on input expression."},"staticValues":{"type":"array","items":{"type":"string"},"description":"The static values of the `DataTimeDefaultValues` ."}},"type":"object"},"aws-native:quicksight:DashboardDateTimeFormatConfiguration":{"properties":{"dateTimeFormat":{"type":"string","description":"Determines the `DateTime` format."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numericFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericFormatConfiguration","description":"The formatting configuration for numeric `DateTime` fields."}},"type":"object"},"aws-native:quicksight:DashboardDateTimeHierarchy":{"properties":{"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDrillDownFilter"},"description":"The option that determines the drill down filters for the `DateTime` hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the `DateTime` hierarchy."}},"type":"object","required":["hierarchyId"]},"aws-native:quicksight:DashboardDateTimeParameter":{"description":"\u003cp\u003eA date-time parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eA display name for the date-time parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe values for the date-time parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:DashboardDateTimeParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `DateTime` parameter when a value has not been set."}},"type":"object","required":["name"]},"aws-native:quicksight:DashboardDateTimePickerControlDisplayOptions":{"properties":{"dateIconVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The date icon visibility of the `DateTimePickerControlDisplayOptions` ."},"dateTimeFormat":{"type":"string","description":"Customize how dates are formatted in controls."},"helperTextVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The helper text visibility of the `DateTimePickerControlDisplayOptions` ."},"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardDateTimeValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"string","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:DashboardValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:DashboardDayOfTheWeek":{"type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:quicksight:DashboardDecimalDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:DashboardDynamicDefaultValue","description":"The dynamic value of the `DecimalDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"number"},"description":"The static values of the `DecimalDefaultValues` ."}},"type":"object"},"aws-native:quicksight:DashboardDecimalParameter":{"description":"\u003cp\u003eA decimal parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eA display name for the decimal parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"number"},"description":"\u003cp\u003eThe values for the decimal parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:DashboardDecimalParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:DashboardParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `Decimal` parameter when a value has not been set."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:DashboardDecimalPlacesConfiguration":{"properties":{"decimalPlaces":{"type":"number","description":"The values of the decimal places."}},"type":"object","required":["decimalPlaces"]},"aws-native:quicksight:DashboardDecimalValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"number","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:DashboardValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:DashboardDefaultDateTimePickerControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configuration of the Apply button on a `DateTimePickerControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimePickerControlDisplayOptions","description":"The display options of a control."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlDateTimePickerType","description":"The date time picker type of the `DefaultDateTimePickerControlOptions` . Choose one of the following options:\n\n- `SINGLE_VALUED` : The filter condition is a fixed date.\n- `DATE_RANGE` : The filter condition is a date time range."}},"type":"object"},"aws-native:quicksight:DashboardDefaultFilterControlConfiguration":{"properties":{"controlOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlOptions","description":"The control option for the `DefaultFilterControlConfiguration` ."},"title":{"type":"string","description":"The title of the `DefaultFilterControlConfiguration` . This title is shared by all controls that are tied to this filter."}},"type":"object","required":["controlOptions","title"]},"aws-native:quicksight:DashboardDefaultFilterControlOptions":{"properties":{"defaultDateTimePickerOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultDateTimePickerControlOptions","description":"The default options that correspond to the filter control type of a `DateTimePicker` ."},"defaultDropdownOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterDropDownControlOptions","description":"The default options that correspond to the `Dropdown` filter control type."},"defaultListOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterListControlOptions","description":"The default options that correspond to the `List` filter control type."},"defaultRelativeDateTimeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultRelativeDateTimeControlOptions","description":"The default options that correspond to the `RelativeDateTime` filter control type."},"defaultSliderOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultSliderControlOptions","description":"The default options that correspond to the `Slider` filter control type."},"defaultTextAreaOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultTextAreaControlOptions","description":"The default options that correspond to the `TextArea` filter control type."},"defaultTextFieldOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultTextFieldControlOptions","description":"The default options that correspond to the `TextField` filter control type."}},"type":"object"},"aws-native:quicksight:DashboardDefaultFilterDropDownControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configuration of the Apply button on a `FilterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDropDownControlDisplayOptions","description":"The display options of a control."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:DashboardFilterSelectableValues","description":"A list of selectable values that are used in a control."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlListType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object"},"aws-native:quicksight:DashboardDefaultFilterListControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardListControlDisplayOptions","description":"The display options of a control."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:DashboardFilterSelectableValues","description":"A list of selectable values that are used in a control."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlListType","description":"The type of the `DefaultFilterListControlOptions` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from the list.\n- `SINGLE_SELECT` : The user can select a single entry from the list."}},"type":"object"},"aws-native:quicksight:DashboardDefaultFreeFormLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a free-form layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:DashboardDefaultGridLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a grid layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:DashboardDefaultInteractiveLayoutConfiguration":{"properties":{"freeForm":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFreeFormLayoutConfiguration","description":"The options that determine the default settings of a free-form layout configuration."},"grid":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultGridLayoutConfiguration","description":"The options that determine the default settings for a grid layout configuration."}},"type":"object"},"aws-native:quicksight:DashboardDefaultNewSheetConfiguration":{"properties":{"interactiveLayoutConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultInteractiveLayoutConfiguration","description":"The options that determine the default settings for interactive layout configuration."},"paginatedLayoutConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultPaginatedLayoutConfiguration","description":"The options that determine the default settings for a paginated layout configuration."},"sheetContentType":{"$ref":"#/types/aws-native:quicksight:DashboardSheetContentType","description":"The option that determines the sheet content type."}},"type":"object"},"aws-native:quicksight:DashboardDefaultPaginatedLayoutConfiguration":{"properties":{"sectionBased":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultSectionBasedLayoutConfiguration","description":"The options that determine the default settings for a section-based layout configuration."}},"type":"object"},"aws-native:quicksight:DashboardDefaultRelativeDateTimeControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configuration of the Apply button on a `RelativeDateTimeControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardRelativeDateTimeControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:DashboardDefaultSectionBasedLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSectionBasedLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a section-based layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:DashboardDefaultSliderControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSliderControlDisplayOptions","description":"The display options of a control."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlSliderType","description":"The type of the `DefaultSliderControlOptions` . Choose one of the following options:\n\n- `SINGLE_POINT` : Filter against(equals) a single data point.\n- `RANGE` : Filter data that is in a specified range."}},"type":"object","required":["maximumValue","minimumValue","stepSize"]},"aws-native:quicksight:DashboardDefaultTextAreaControlOptions":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextAreaControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:DashboardDefaultTextFieldControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextFieldControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:DashboardDestinationParameterValueConfiguration":{"properties":{"customValuesConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCustomValuesConfiguration","description":"The configuration of custom values for destination parameter in `DestinationParameterValueConfiguration` ."},"selectAllValueOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSelectAllValueOptions","description":"The configuration that selects all options."},"sourceColumn":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"A column of a data set."},"sourceField":{"type":"string","description":"The source field ID of the destination parameter."},"sourceParameterName":{"type":"string","description":"The source parameter name of the destination parameter."}},"type":"object"},"aws-native:quicksight:DashboardDigitGroupingStyle":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Lakhs","value":"LAKHS"}]},"aws-native:quicksight:DashboardDimensionField":{"properties":{"categoricalDimensionField":{"$ref":"#/types/aws-native:quicksight:DashboardCategoricalDimensionField","description":"The dimension type field with categorical type columns."},"dateDimensionField":{"$ref":"#/types/aws-native:quicksight:DashboardDateDimensionField","description":"The dimension type field with date type columns."},"numericalDimensionField":{"$ref":"#/types/aws-native:quicksight:DashboardNumericalDimensionField","description":"The dimension type field with numerical type columns."}},"type":"object"},"aws-native:quicksight:DashboardDonutCenterOptions":{"properties":{"labelVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the label in a donut chart. In the Quick Sight console, this option is called `'Show total'` ."}},"type":"object"},"aws-native:quicksight:DashboardDonutOptions":{"properties":{"arcOptions":{"$ref":"#/types/aws-native:quicksight:DashboardArcOptions","description":"The option for define the arc of the chart shape. Valid values are as follows:\n\n- `WHOLE` - A pie chart\n- `SMALL` - A small-sized donut chart\n- `MEDIUM` - A medium-sized donut chart\n- `LARGE` - A large-sized donut chart"},"donutCenterOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDonutCenterOptions","description":"The label options of the label that is displayed in the center of a donut chart. This option isn't available for pie charts."}},"type":"object"},"aws-native:quicksight:DashboardDrillDownFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryDrillDownFilter","description":"The category type drill down filter. This filter is used for string type columns."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:DashboardNumericEqualityDrillDownFilter","description":"The numeric equality type drill down filter. This filter is used for number type columns."},"timeRangeFilter":{"$ref":"#/types/aws-native:quicksight:DashboardTimeRangeDrillDownFilter","description":"The time range drill down filter. This filter is used for date time columns."}},"type":"object"},"aws-native:quicksight:DashboardDropDownControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardListControlSelectAllOptions","description":"The configuration of the `Select all` options in a dropdown control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardDynamicDefaultValue":{"properties":{"defaultValueColumn":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that contains the default value of each user or group."},"groupNameColumn":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that contains the group name."},"userNameColumn":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that contains the username."}},"type":"object","required":["defaultValueColumn"]},"aws-native:quicksight:DashboardEmptyVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"dataSetIdentifier":{"type":"string","description":"The data set that is used in the empty visual. Every visual requires a dataset to render."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:DashboardEntity":{"properties":{"path":{"type":"string","description":"The hierarchical path of the entity within the analysis, template, or dashboard definition tree."}},"type":"object"},"aws-native:quicksight:DashboardError":{"description":"\u003cp\u003eDashboard error.\u003c/p\u003e","properties":{"message":{"type":"string","description":"\u003cp\u003eMessage.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:quicksight:DashboardErrorType","description":"Type."},"violatedEntities":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardEntity"},"description":"\u003cp\u003eLists the violated entities that caused the dashboard error.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DashboardErrorType":{"type":"string","enum":[{"name":"AccessDenied","value":"ACCESS_DENIED"},{"name":"SourceNotFound","value":"SOURCE_NOT_FOUND"},{"name":"DataSetNotFound","value":"DATA_SET_NOT_FOUND"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"},{"name":"ParameterValueIncompatible","value":"PARAMETER_VALUE_INCOMPATIBLE"},{"name":"ParameterTypeInvalid","value":"PARAMETER_TYPE_INVALID"},{"name":"ParameterNotFound","value":"PARAMETER_NOT_FOUND"},{"name":"ColumnTypeMismatch","value":"COLUMN_TYPE_MISMATCH"},{"name":"ColumnGeographicRoleMismatch","value":"COLUMN_GEOGRAPHIC_ROLE_MISMATCH"},{"name":"ColumnReplacementMissing","value":"COLUMN_REPLACEMENT_MISSING"}]},"aws-native:quicksight:DashboardExcludePeriodConfiguration":{"properties":{"amount":{"type":"number","description":"The amount or number of the exclude period."},"granularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The granularity or unit (day, month, year) of the exclude period."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The status of the exclude period. Choose from the following options:\n\n- `ENABLED`\n- `DISABLED`"}},"type":"object","required":["amount","granularity"]},"aws-native:quicksight:DashboardExecutiveSummaryOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"Availability status."}},"type":"object"},"aws-native:quicksight:DashboardExplicitHierarchy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"description":"The list of columns that define the explicit hierarchy."},"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDrillDownFilter"},"description":"The option that determines the drill down filters for the explicit hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the explicit hierarchy."}},"type":"object","required":["columns","hierarchyId"]},"aws-native:quicksight:DashboardExportHiddenFieldsOption":{"description":"\u003cp\u003eDetermines if hidden fields are included in an exported dashboard.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the export hidden fields options of a dashbaord."}},"type":"object"},"aws-native:quicksight:DashboardExportToCsvOption":{"description":"\u003cp\u003eExport to .csv option.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"Availability status."}},"type":"object"},"aws-native:quicksight:DashboardExportWithHiddenFieldsOption":{"description":"\u003cp\u003eDetermines whether or not hidden fields are visible on exported dashbaords.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the export with hidden fields options."}},"type":"object"},"aws-native:quicksight:DashboardFieldBasedTooltip":{"properties":{"aggregationVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of `Show aggregations` ."},"tooltipFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipItem"},"description":"The fields configuration in the tooltip."},"tooltipTitleType":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipTitleType","description":"The type for the \u003etooltip title. Choose one of the following options:\n\n- `NONE` : Doesn't use the primary value as the title.\n- `PRIMARY_VALUE` : Uses primary value as the title."}},"type":"object"},"aws-native:quicksight:DashboardFieldLabelType":{"properties":{"fieldId":{"type":"string","description":"Indicates the field that is targeted by the field label."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the field label."}},"type":"object"},"aws-native:quicksight:DashboardFieldSeriesItem":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:DashboardAxisBinding","description":"The axis that you are binding the field to."},"fieldId":{"type":"string","description":"The field ID of the field for which you are setting the axis binding."},"settings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartSeriesSettings","description":"The options that determine the presentation of line series associated to the field."}},"type":"object","required":["axisBinding","fieldId"]},"aws-native:quicksight:DashboardFieldSort":{"properties":{"direction":{"$ref":"#/types/aws-native:quicksight:DashboardSortDirection","description":"The sort direction. Choose one of the following options:\n\n- `ASC` : Ascending\n- `DESC` : Descending"},"fieldId":{"type":"string","description":"The sort configuration target field."}},"type":"object","required":["direction","fieldId"]},"aws-native:quicksight:DashboardFieldSortOptions":{"properties":{"columnSort":{"$ref":"#/types/aws-native:quicksight:DashboardColumnSort","description":"The sort configuration for a column that is not used in a field well."},"fieldSort":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSort","description":"The sort configuration for a field in a field well."}},"type":"object"},"aws-native:quicksight:DashboardFieldTooltipItem":{"properties":{"fieldId":{"type":"string","description":"The unique ID of the field that is targeted by the tooltip."},"label":{"type":"string","description":"The label of the tooltip item."},"tooltipTarget":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipTarget","description":"Determines the target of the field tooltip item in a combo chart visual."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the tooltip item."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardFilledMapAggregatedFieldWells":{"properties":{"geospatial":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The aggregated location field well of the filled map. Values are grouped by location fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The aggregated color field well of a filled map. Values are aggregated based on location fields."}},"type":"object"},"aws-native:quicksight:DashboardFilledMapConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapConditionalFormattingOption"},"description":"Conditional formatting options of a `FilledMapVisual` ."}},"type":"object","required":["conditionalFormattingOptions"]},"aws-native:quicksight:DashboardFilledMapConditionalFormattingOption":{"properties":{"shape":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapShapeConditionalFormatting","description":"The conditional formatting that determines the shape of the filled map."}},"type":"object","required":["shape"]},"aws-native:quicksight:DashboardFilledMapConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"mapStyleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapStyleOptions","description":"The map style options of the filled map visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapSortConfiguration","description":"The sort configuration of a `FilledMapVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."},"windowOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialWindowOptions","description":"The window options of the filled map visual."}},"type":"object"},"aws-native:quicksight:DashboardFilledMapFieldWells":{"properties":{"filledMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapAggregatedFieldWells","description":"The aggregated field well of the filled map."}},"type":"object"},"aws-native:quicksight:DashboardFilledMapShapeConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the filled map shape."},"format":{"$ref":"#/types/aws-native:quicksight:DashboardShapeConditionalFormat","description":"The conditional formatting that determines the background color of a filled map's shape."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardFilledMapSortConfiguration":{"properties":{"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the location fields."}},"type":"object"},"aws-native:quicksight:DashboardFilledMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapConditionalFormatting","description":"The conditional formatting of a `FilledMapVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilter","description":"A `CategoryFilter` filters text values.\n\nFor more information, see [Adding text filters](https://docs.aws.amazon.com/quicksight/latest/user/add-a-text-filter-data-prep.html) in the *Amazon Quick Suite User Guide* ."},"nestedFilter":{"$ref":"#/types/aws-native:quicksight:DashboardNestedFilter","description":"A `NestedFilter` filters data with a subset of data that is defined by the nested inner filter."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:DashboardNumericEqualityFilter","description":"A `NumericEqualityFilter` filters numeric values that equal or do not equal a given numeric value."},"numericRangeFilter":{"$ref":"#/types/aws-native:quicksight:DashboardNumericRangeFilter","description":"A `NumericRangeFilter` filters numeric values that are either inside or outside a given numeric range."},"relativeDatesFilter":{"$ref":"#/types/aws-native:quicksight:DashboardRelativeDatesFilter","description":"A `RelativeDatesFilter` filters date values that are relative to a given date."},"timeEqualityFilter":{"$ref":"#/types/aws-native:quicksight:DashboardTimeEqualityFilter","description":"A `TimeEqualityFilter` filters date-time values that equal or do not equal a given date/time value."},"timeRangeFilter":{"$ref":"#/types/aws-native:quicksight:DashboardTimeRangeFilter","description":"A `TimeRangeFilter` filters date-time values that are either inside or outside a given date/time range."},"topBottomFilter":{"$ref":"#/types/aws-native:quicksight:DashboardTopBottomFilter","description":"A `TopBottomFilter` filters data to the top or bottom values for a given column."}},"type":"object"},"aws-native:quicksight:DashboardFilterControl":{"properties":{"crossSheet":{"$ref":"#/types/aws-native:quicksight:DashboardFilterCrossSheetControl","description":"A control from a filter that is scoped across more than one sheet. This represents your filter control on a sheet"},"dateTimePicker":{"$ref":"#/types/aws-native:quicksight:DashboardFilterDateTimePickerControl","description":"A control from a date filter that is used to specify date and time."},"dropdown":{"$ref":"#/types/aws-native:quicksight:DashboardFilterDropDownControl","description":"A control to display a dropdown list with buttons that are used to select a single value."},"list":{"$ref":"#/types/aws-native:quicksight:DashboardFilterListControl","description":"A control to display a list of buttons or boxes. This is used to select either a single value or multiple values."},"relativeDateTime":{"$ref":"#/types/aws-native:quicksight:DashboardFilterRelativeDateTimeControl","description":"A control from a date filter that is used to specify the relative date."},"slider":{"$ref":"#/types/aws-native:quicksight:DashboardFilterSliderControl","description":"A control to display a horizontal toggle bar. This is used to change a value by sliding the toggle."},"textArea":{"$ref":"#/types/aws-native:quicksight:DashboardFilterTextAreaControl","description":"A control to display a text box that is used to enter multiple entries."},"textField":{"$ref":"#/types/aws-native:quicksight:DashboardFilterTextFieldControl","description":"A control to display a text box that is used to enter a single entry."}},"type":"object"},"aws-native:quicksight:DashboardFilterCrossSheetControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"filterControlId":{"type":"string","description":"The ID of the `FilterCrossSheetControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterCrossSheetControl` ."}},"type":"object","required":["filterControlId","sourceFilterId"]},"aws-native:quicksight:DashboardFilterDateTimePickerControl":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configurationof the Apply button on a `DateTimePickerControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimePickerControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterDateTimePickerControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterDateTimePickerControl` ."},"title":{"type":"string","description":"The title of the `FilterDateTimePickerControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlDateTimePickerType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:DashboardFilterDropDownControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configuration of the Apply button on a `FilterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDropDownControlDisplayOptions","description":"The display options of the `FilterDropDownControl` ."},"filterControlId":{"type":"string","description":"The ID of the `FilterDropDownControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:DashboardFilterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterDropDownControl` ."},"title":{"type":"string","description":"The title of the `FilterDropDownControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlListType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:DashboardFilterGroup":{"properties":{"crossDataset":{"$ref":"#/types/aws-native:quicksight:DashboardCrossDatasetTypes","description":"The filter new feature which can apply filter group to all data sets. Choose one of the following options:\n\n- `ALL_DATASETS`\n- `SINGLE_DATASET`"},"filterGroupId":{"type":"string","description":"The value that uniquely identifies a `FilterGroup` within a dashboard, template, or analysis."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFilter"},"description":"The list of filters that are present in a `FilterGroup` ."},"scopeConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFilterScopeConfiguration","description":"The configuration that specifies what scope to apply to a `FilterGroup` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The status of the `FilterGroup` ."}},"type":"object","required":["crossDataset","filterGroupId","filters","scopeConfiguration"]},"aws-native:quicksight:DashboardFilterListConfiguration":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"The list of category values for the filter."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator"]},"aws-native:quicksight:DashboardFilterListControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardListControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterListControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:DashboardFilterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterListControl` ."},"title":{"type":"string","description":"The title of the `FilterListControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlListType","description":"The type of the `FilterListControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from the list.\n- `SINGLE_SELECT` : The user can select a single entry from the list."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:DashboardFilterNullOption":{"type":"string","enum":[{"name":"AllValues","value":"ALL_VALUES"},{"name":"NullsOnly","value":"NULLS_ONLY"},{"name":"NonNullsOnly","value":"NON_NULLS_ONLY"}]},"aws-native:quicksight:DashboardFilterOperationSelectedFieldsConfiguration":{"properties":{"selectedColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"description":"\u003cp\u003eThe selected columns of a dataset.\u003c/p\u003e"},"selectedFieldOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSelectedFieldOptions","description":"A structure that contains the options that choose which fields are filtered in the `CustomActionFilterOperation` .\n\nValid values are defined as follows:\n\n- `ALL_FIELDS` : Applies the filter operation to all fields."},"selectedFields":{"type":"array","items":{"type":"string"},"description":"Chooses the fields that are filtered in `CustomActionFilterOperation` ."}},"type":"object"},"aws-native:quicksight:DashboardFilterOperationTargetVisualsConfiguration":{"properties":{"sameSheetTargetVisualConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardSameSheetTargetVisualConfiguration","description":"The configuration of the same-sheet target visuals that you want to be filtered."}},"type":"object"},"aws-native:quicksight:DashboardFilterRelativeDateTimeControl":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configuration of the Apply button on a `FilterRelativeDateTimeControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardRelativeDateTimeControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextAreaControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `FilterTextAreaControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:DashboardFilterScopeConfiguration":{"properties":{"allSheets":{"$ref":"#/types/aws-native:quicksight:DashboardAllSheetsFilterScopeConfiguration","description":"The configuration that applies a filter to all sheets. When you choose `AllSheets` as the value for a `FilterScopeConfiguration` , this filter is applied to all visuals of all sheets in an Analysis, Dashboard, or Template. The `AllSheetsFilterScopeConfiguration` is chosen."},"selectedSheets":{"$ref":"#/types/aws-native:quicksight:DashboardSelectedSheetsFilterScopeConfiguration","description":"The configuration for applying a filter to specific sheets."}},"type":"object"},"aws-native:quicksight:DashboardFilterSelectableValues":{"properties":{"values":{"type":"array","items":{"type":"string"},"description":"The values that are used in the `FilterSelectableValues` ."}},"type":"object"},"aws-native:quicksight:DashboardFilterSliderControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSliderControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterSliderControl` ."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterSliderControl` ."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"title":{"type":"string","description":"The title of the `FilterSliderControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlSliderType","description":"The type of the `FilterSliderControl` . Choose one of the following options:\n\n- `SINGLE_POINT` : Filter against(equals) a single data point.\n- `RANGE` : Filter data that is in a specified range."}},"type":"object","required":["filterControlId","maximumValue","minimumValue","sourceFilterId","stepSize","title"]},"aws-native:quicksight:DashboardFilterTextAreaControl":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextAreaControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextAreaControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `FilterTextAreaControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:DashboardFilterTextFieldControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextFieldControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextFieldControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextFieldControl` ."},"title":{"type":"string","description":"The title of the `FilterTextFieldControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:DashboardFilterVisualScope":{"type":"string","enum":[{"name":"AllVisuals","value":"ALL_VISUALS"},{"name":"SelectedVisuals","value":"SELECTED_VISUALS"}]},"aws-native:quicksight:DashboardFontConfiguration":{"properties":{"fontColor":{"type":"string","description":"Determines the color of the text."},"fontDecoration":{"$ref":"#/types/aws-native:quicksight:DashboardFontDecoration","description":"Determines the appearance of decorative lines on the text."},"fontFamily":{"type":"string","description":"The font family that you want to use."},"fontSize":{"$ref":"#/types/aws-native:quicksight:DashboardFontSize","description":"The option that determines the text display size."},"fontStyle":{"$ref":"#/types/aws-native:quicksight:DashboardFontStyle","description":"Determines the text display face that is inherited by the given font family."},"fontWeight":{"$ref":"#/types/aws-native:quicksight:DashboardFontWeight","description":"The option that determines the text display weight, or boldness."}},"type":"object"},"aws-native:quicksight:DashboardFontDecoration":{"type":"string","enum":[{"name":"Underline","value":"UNDERLINE"},{"name":"None","value":"NONE"}]},"aws-native:quicksight:DashboardFontSize":{"properties":{"absolute":{"type":"string","description":"String based length that is composed of value and unit in px"},"relative":{"$ref":"#/types/aws-native:quicksight:DashboardRelativeFontSize","description":"The lexical name for the text size, proportional to its surrounding context."}},"type":"object"},"aws-native:quicksight:DashboardFontStyle":{"type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Italic","value":"ITALIC"}]},"aws-native:quicksight:DashboardFontWeight":{"properties":{"name":{"$ref":"#/types/aws-native:quicksight:DashboardFontWeightName","description":"The lexical name for the level of boldness of the text display."}},"type":"object"},"aws-native:quicksight:DashboardFontWeightName":{"type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Bold","value":"BOLD"}]},"aws-native:quicksight:DashboardForecastComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"customSeasonalityValue":{"type":"number","description":"The custom seasonality value setup of a forecast computation."},"lowerBoundary":{"type":"number","description":"The lower boundary setup of a forecast computation."},"name":{"type":"string","description":"The name of a computation."},"periodsBackward":{"type":"number","description":"The periods backward setup of a forecast computation."},"periodsForward":{"type":"number","description":"The periods forward setup of a forecast computation."},"predictionInterval":{"type":"number","description":"The prediction interval setup of a forecast computation."},"seasonality":{"$ref":"#/types/aws-native:quicksight:DashboardForecastComputationSeasonality","description":"The seasonality setup of a forecast computation. Choose one of the following options:\n\n- `AUTOMATIC`\n- `CUSTOM` : Checks the custom seasonality value."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."},"upperBoundary":{"type":"number","description":"The upper boundary setup of a forecast computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardForecastComputationSeasonality":{"type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:quicksight:DashboardForecastConfiguration":{"properties":{"forecastProperties":{"$ref":"#/types/aws-native:quicksight:DashboardTimeBasedForecastProperties","description":"The forecast properties setup of a forecast in the line chart."},"scenario":{"$ref":"#/types/aws-native:quicksight:DashboardForecastScenario","description":"The forecast scenario of a forecast in the line chart."}},"type":"object"},"aws-native:quicksight:DashboardForecastScenario":{"properties":{"whatIfPointScenario":{"$ref":"#/types/aws-native:quicksight:DashboardWhatIfPointScenario","description":"The what-if analysis forecast setup with the target date."},"whatIfRangeScenario":{"$ref":"#/types/aws-native:quicksight:DashboardWhatIfRangeScenario","description":"The what-if analysis forecast setup with the date range."}},"type":"object"},"aws-native:quicksight:DashboardFormatConfiguration":{"properties":{"dateTimeFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeFormatConfiguration","description":"Formatting configuration for `DateTime` fields."},"numberFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumberFormatConfiguration","description":"Formatting configuration for number fields."},"stringFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardStringFormatConfiguration","description":"Formatting configuration for string fields."}},"type":"object"},"aws-native:quicksight:DashboardFreeFormLayoutCanvasSizeOptions":{"properties":{"screenCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutScreenCanvasSizeOptions","description":"The options that determine the sizing of the canvas used in a free-form layout."}},"type":"object"},"aws-native:quicksight:DashboardFreeFormLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutCanvasSizeOptions"},"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutElement"},"description":"The elements that are included in a free-form layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:DashboardFreeFormLayoutElement":{"properties":{"backgroundStyle":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutElementBackgroundStyle","description":"The background style configuration of a free-form layout element."},"borderRadius":{"type":"string","description":"The border radius of a free-form layout element."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutElementBorderStyle","description":"The border style configuration of a free-form layout element."},"elementId":{"type":"string","description":"A unique identifier for an element within a free-form layout."},"elementType":{"$ref":"#/types/aws-native:quicksight:DashboardLayoutElementType","description":"The type of element."},"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"loadingAnimation":{"$ref":"#/types/aws-native:quicksight:DashboardLoadingAnimation","description":"The loading animation configuration of a free-form layout element."},"padding":{"type":"string","description":"The padding of a free-form layout element."},"renderingRules":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheetElementRenderingRule"},"description":"The rendering rules that determine when an element should be displayed within a free-form layout."},"selectedBorderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutElementBorderStyle","description":"The border style configuration of a free-form layout element. This border style is used when the element is selected."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of an element within a free-form layout."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"},"xAxisLocation":{"type":"string","description":"String based length that is composed of value and unit in px"},"yAxisLocation":{"type":"string","description":"String based length that is composed of value and unit in px with Integer.MAX_VALUE as maximum value"}},"type":"object","required":["elementId","elementType","height","width","xAxisLocation","yAxisLocation"]},"aws-native:quicksight:DashboardFreeFormLayoutElementBackgroundStyle":{"properties":{"color":{"type":"string","description":"The background color of a free-form layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The background visibility of a free-form layout element."}},"type":"object"},"aws-native:quicksight:DashboardFreeFormLayoutElementBorderStyle":{"properties":{"color":{"type":"string","description":"The border color of a free-form layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The border visibility of a free-form layout element."},"width":{"type":"string","description":"String to encapsulate the most generic way Width can be formatted with whatever units (px, em etc)"}},"type":"object"},"aws-native:quicksight:DashboardFreeFormLayoutScreenCanvasSizeOptions":{"properties":{"optimizedViewPortWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["optimizedViewPortWidth"]},"aws-native:quicksight:DashboardFreeFormSectionLayoutConfiguration":{"properties":{"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutElement"},"description":"The elements that are included in the free-form layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:DashboardFunnelChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category field wells of a funnel chart. Values are grouped by category fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a funnel chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:DashboardFunnelChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options of the categories that are displayed in a `FunnelChartVisual` ."},"dataLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartDataLabelOptions","description":"The options that determine the presentation of the data labels."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartFieldWells","description":"The field well configuration of a `FunnelChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartSortConfiguration","description":"The sort configuration of a `FunnelChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip configuration of a `FunnelChartVisual` ."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options for the values that are displayed in a `FunnelChartVisual` ."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The visual palette configuration of a `FunnelChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardFunnelChartDataLabelOptions":{"properties":{"categoryLabelVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the category labels within the data labels."},"labelColor":{"type":"string","description":"The color of the data label text."},"labelFontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The font configuration for the data labels.\n\nOnly the `FontSize` attribute of the font configuration is used for data labels."},"measureDataLabelStyle":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartMeasureDataLabelStyle","description":"Determines the style of the metric labels."},"measureLabelVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the measure labels within the data labels."},"position":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelPosition","description":"Determines the positioning of the data label relative to a section of the funnel."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility option that determines if data labels are displayed."}},"type":"object"},"aws-native:quicksight:DashboardFunnelChartFieldWells":{"properties":{"funnelChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartAggregatedFieldWells","description":"The field well configuration of a `FunnelChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardFunnelChartMeasureDataLabelStyle":{"type":"string","enum":[{"name":"ValueOnly","value":"VALUE_ONLY"},{"name":"PercentageByFirstStage","value":"PERCENTAGE_BY_FIRST_STAGE"},{"name":"PercentageByPreviousStage","value":"PERCENTAGE_BY_PREVIOUS_STAGE"},{"name":"ValueAndPercentageByFirstStage","value":"VALUE_AND_PERCENTAGE_BY_FIRST_STAGE"},{"name":"ValueAndPercentageByPreviousStage","value":"VALUE_AND_PERCENTAGE_BY_PREVIOUS_STAGE"}]},"aws-native:quicksight:DashboardFunnelChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of categories displayed."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the category fields."}},"type":"object"},"aws-native:quicksight:DashboardFunnelChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartConfiguration","description":"The configuration of a `FunnelChartVisual` ."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardGaugeChartArcConditionalFormatting":{"properties":{"foregroundColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting of the arc foreground color."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartColorConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"The background color configuration of a `GaugeChartVisual` ."},"foregroundColor":{"type":"string","description":"The foreground color configuration of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartConditionalFormattingOption"},"description":"Conditional formatting options of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartConditionalFormattingOption":{"properties":{"arc":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartArcConditionalFormatting","description":"The options that determine the presentation of the arc of a `GaugeChartVisual` ."},"primaryValue":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartPrimaryValueConditionalFormatting","description":"The conditional formatting for the primary value of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartConfiguration":{"properties":{"colorConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartColorConfiguration","description":"The color configuration of a `GaugeChartVisual` ."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The data label configuration of a `GaugeChartVisual` ."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartFieldWells","description":"The field well configuration of a `GaugeChartVisual` ."},"gaugeChartOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartOptions","description":"The options that determine the presentation of the `GaugeChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"tooltipOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip configuration of a `GaugeChartVisual` ."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The visual palette configuration of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartFieldWells":{"properties":{"targetValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The target value field wells of a `GaugeChartVisual` ."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartOptions":{"properties":{"arc":{"$ref":"#/types/aws-native:quicksight:DashboardArcConfiguration","description":"The arc configuration of a `GaugeChartVisual` ."},"arcAxis":{"$ref":"#/types/aws-native:quicksight:DashboardArcAxisConfiguration","description":"The arc axis configuration of a `GaugeChartVisual` ."},"comparison":{"$ref":"#/types/aws-native:quicksight:DashboardComparisonConfiguration","description":"The comparison configuration of a `GaugeChartVisual` ."},"primaryValueDisplayType":{"$ref":"#/types/aws-native:quicksight:DashboardPrimaryValueDisplayType","description":"The options that determine the primary value display type."},"primaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The options that determine the primary value font configuration."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartPrimaryValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIcon","description":"The conditional formatting of the primary value icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting of the primary value text color."}},"type":"object"},"aws-native:quicksight:DashboardGaugeChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartConfiguration","description":"The configuration of a `GaugeChartVisual` ."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartConditionalFormatting","description":"The conditional formatting of a `GaugeChartVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardGeospatialCategoricalColor":{"properties":{"categoryDataColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialCategoricalDataColor"},"description":"A list of categorical data colors for each category."},"defaultOpacity":{"type":"number","description":"The default opacity of a categorical color."},"nullDataSettings":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialNullDataSettings","description":"The null data visualization settings."},"nullDataVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The state of visibility for null data."}},"type":"object","required":["categoryDataColors"]},"aws-native:quicksight:DashboardGeospatialCategoricalDataColor":{"properties":{"color":{"type":"string","description":"The color and opacity values for the category data color."},"dataValue":{"type":"string","description":"The data value for the category data color."}},"type":"object","required":["color","dataValue"]},"aws-native:quicksight:DashboardGeospatialCircleRadius":{"properties":{"radius":{"type":"number","description":"The positive value for the radius of a circle."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialCircleSymbolStyle":{"properties":{"circleRadius":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialCircleRadius","description":"The radius of the circle."},"fillColor":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialColor","description":"The color and opacity values for the fill color."},"strokeColor":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialColor","description":"The color and opacity values for the stroke color."},"strokeWidth":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLineWidth","description":"The width of the stroke (border)."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialColor":{"properties":{"categorical":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialCategoricalColor","description":"The visualization properties for the categorical color."},"gradient":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialGradientColor","description":"The visualization properties for the gradient color."},"solid":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialSolidColor","description":"The visualization properties for the solid color."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialColorState":{"description":"Defines view state of the color","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DashboardGeospatialCoordinateBounds":{"properties":{"east":{"type":"number","description":"The longitude of the east bound of the geospatial coordinate bounds."},"north":{"type":"number","description":"The latitude of the north bound of the geospatial coordinate bounds."},"south":{"type":"number","description":"The latitude of the south bound of the geospatial coordinate bounds."},"west":{"type":"number","description":"The longitude of the west bound of the geospatial coordinate bounds."}},"type":"object","required":["east","north","south","west"]},"aws-native:quicksight:DashboardGeospatialDataSourceItem":{"properties":{"staticFileDataSource":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialStaticFileSource","description":"The static file data source properties for the geospatial data."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialGradientColor":{"properties":{"defaultOpacity":{"type":"number","description":"The default opacity for the gradient color."},"nullDataSettings":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialNullDataSettings","description":"The null data visualization settings."},"nullDataVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The state of visibility for null data."},"stepColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialGradientStepColor"},"description":"A list of gradient step colors for the gradient."}},"type":"object","required":["stepColors"]},"aws-native:quicksight:DashboardGeospatialGradientStepColor":{"properties":{"color":{"type":"string","description":"The color and opacity values for the gradient step color."},"dataValue":{"type":"number","description":"The data value for the gradient step color."}},"type":"object","required":["color","dataValue"]},"aws-native:quicksight:DashboardGeospatialHeatmapColorScale":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialHeatmapDataColor"},"description":"The list of colors to be used in heatmap point style."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialHeatmapConfiguration":{"properties":{"heatmapColor":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialHeatmapColorScale","description":"The color scale specification for the heatmap point style."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialHeatmapDataColor":{"properties":{"color":{"type":"string","description":"The hex color to be used in the heatmap point style."}},"type":"object","required":["color"]},"aws-native:quicksight:DashboardGeospatialLayerColorField":{"properties":{"colorDimensionsFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"A list of color dimension fields."},"colorValuesFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"A list of color measure fields."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialLayerDefinition":{"properties":{"lineLayer":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLineLayer","description":"The definition for a line layer."},"pointLayer":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialPointLayer","description":"The definition for a point layer."},"polygonLayer":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialPolygonLayer","description":"The definition for a polygon layer."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialLayerItem":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardLayerCustomAction"},"description":"A list of custom actions for a layer."},"dataSource":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialDataSourceItem","description":"The data source for the layer."},"joinDefinition":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLayerJoinDefinition","description":"The join definition properties for a layer."},"label":{"type":"string","description":"The label that is displayed for the layer."},"layerDefinition":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLayerDefinition","description":"The definition properties for a layer."},"layerId":{"type":"string","description":"The ID of the layer."},"layerType":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLayerType","description":"The layer type."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions"},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The state of visibility for the layer."}},"type":"object","required":["layerId"]},"aws-native:quicksight:DashboardGeospatialLayerJoinDefinition":{"properties":{"colorField":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLayerColorField","description":"The geospatial color field for the join definition."},"datasetKeyField":{"$ref":"#/types/aws-native:quicksight:DashboardUnaggregatedField"},"shapeKeyField":{"type":"string","description":"The name of the field or property in the geospatial data source."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialLayerMapConfiguration":{"properties":{"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions"},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions"},"mapLayers":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLayerItem"},"description":"The geospatial layers to visualize on the map."},"mapState":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapState","description":"The map state properties for the map."},"mapStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapStyle","description":"The map style properties for the map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialLayerType":{"type":"string","enum":[{"name":"Point","value":"POINT"},{"name":"Line","value":"LINE"},{"name":"Polygon","value":"POLYGON"}]},"aws-native:quicksight:DashboardGeospatialLineLayer":{"properties":{"style":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLineStyle","description":"The visualization style for a line layer."}},"type":"object","required":["style"]},"aws-native:quicksight:DashboardGeospatialLineStyle":{"properties":{"lineSymbolStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLineSymbolStyle","description":"The symbol style for a line style."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialLineSymbolStyle":{"properties":{"fillColor":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialColor","description":"The color and opacity values for the fill color."},"lineWidth":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLineWidth","description":"The width value for a line."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialLineWidth":{"properties":{"lineWidth":{"type":"number","description":"The positive value for the width of a line."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapAggregatedFieldWells":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The color field wells of a geospatial map."},"geospatial":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The geospatial field wells of a geospatial map. Values are grouped by geospatial fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The size field wells of a geospatial map. Values are aggregated based on geospatial fields."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"mapStyleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapStyleOptions","description":"The map style options of the geospatial map."},"pointStyleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialPointStyleOptions","description":"The point style options of the geospatial map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette"},"windowOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialWindowOptions","description":"The window options of the geospatial map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapFieldWells":{"properties":{"geospatialMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapAggregatedFieldWells","description":"The aggregated field well for a geospatial map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapNavigation":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DashboardGeospatialMapState":{"properties":{"bounds":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialCoordinateBounds"},"mapNavigation":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapNavigation","description":"Enables or disables map navigation for a map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapStyle":{"properties":{"backgroundColor":{"type":"string","description":"The background color and opacity values for a map."},"baseMapStyle":{"$ref":"#/types/aws-native:quicksight:DashboardBaseMapStyleType","description":"The selected base map style."},"baseMapVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The state of visibility for the base map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapStyleOptions":{"properties":{"baseMapStyle":{"$ref":"#/types/aws-native:quicksight:DashboardBaseMapStyleType","description":"The base map style of the geospatial map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardGeospatialNullDataSettings":{"properties":{"symbolStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialNullSymbolStyle","description":"The symbol style for null data."}},"type":"object","required":["symbolStyle"]},"aws-native:quicksight:DashboardGeospatialNullSymbolStyle":{"properties":{"fillColor":{"type":"string","description":"The color and opacity values for the fill color."},"strokeColor":{"type":"string","description":"The color and opacity values for the stroke color."},"strokeWidth":{"type":"number","description":"The width of the border stroke."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialPointLayer":{"properties":{"style":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialPointStyle","description":"The visualization style for a point layer."}},"type":"object","required":["style"]},"aws-native:quicksight:DashboardGeospatialPointStyle":{"properties":{"circleSymbolStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialCircleSymbolStyle","description":"The circle symbol style for a point layer."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialPointStyleOptions":{"properties":{"clusterMarkerConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardClusterMarkerConfiguration","description":"The cluster marker configuration of the geospatial point style."},"heatmapConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialHeatmapConfiguration","description":"The heatmap configuration of the geospatial point style."},"selectedPointStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialSelectedPointStyle","description":"The selected point styles (point, cluster) of the geospatial map."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialPolygonLayer":{"properties":{"style":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialPolygonStyle","description":"The visualization style for a polygon layer."}},"type":"object","required":["style"]},"aws-native:quicksight:DashboardGeospatialPolygonStyle":{"properties":{"polygonSymbolStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialPolygonSymbolStyle","description":"The polygon symbol style for a polygon layer."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialPolygonSymbolStyle":{"properties":{"fillColor":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialColor","description":"The color and opacity values for the fill color."},"strokeColor":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialColor","description":"The color and opacity values for the stroke color."},"strokeWidth":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLineWidth","description":"The width of the border stroke."}},"type":"object"},"aws-native:quicksight:DashboardGeospatialSelectedPointStyle":{"type":"string","enum":[{"name":"Point","value":"POINT"},{"name":"Cluster","value":"CLUSTER"},{"name":"Heatmap","value":"HEATMAP"}]},"aws-native:quicksight:DashboardGeospatialSolidColor":{"description":"Describes the properties for a solid color","properties":{"color":{"type":"string","description":"The color and opacity values for the color."},"state":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialColorState","description":"Enables and disables the view state of the color."}},"type":"object","required":["color"]},"aws-native:quicksight:DashboardGeospatialStaticFileSource":{"properties":{"staticFileId":{"type":"string","description":"The ID of the static file."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:DashboardGeospatialWindowOptions":{"properties":{"bounds":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialCoordinateBounds","description":"The bounds options (north, south, west, east) of the geospatial window options."},"mapZoomMode":{"$ref":"#/types/aws-native:quicksight:DashboardMapZoomMode","description":"The map zoom modes (manual, auto) of the geospatial window options."}},"type":"object"},"aws-native:quicksight:DashboardGlobalTableBorderOptions":{"properties":{"sideSpecificBorder":{"$ref":"#/types/aws-native:quicksight:DashboardTableSideBorderOptions","description":"Determines the options for side specific border."},"uniformBorder":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"Determines the options for uniform border."}},"type":"object"},"aws-native:quicksight:DashboardGradientColor":{"properties":{"stops":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGradientStop"},"description":"The list of gradient color stops."}},"type":"object"},"aws-native:quicksight:DashboardGradientStop":{"properties":{"color":{"type":"string","description":"Determines the color."},"dataValue":{"type":"number","description":"Determines the data value."},"gradientOffset":{"type":"number","description":"Determines gradient offset value."}},"type":"object","required":["gradientOffset"]},"aws-native:quicksight:DashboardGridLayoutCanvasSizeOptions":{"properties":{"screenCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutScreenCanvasSizeOptions","description":"The options that determine the sizing of the canvas used in a grid layout."}},"type":"object"},"aws-native:quicksight:DashboardGridLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutCanvasSizeOptions"},"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutElement"},"description":"The elements that are included in a grid layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:DashboardGridLayoutElement":{"properties":{"backgroundStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutElementBackgroundStyle","description":"The background style configuration of a grid layout element."},"borderRadius":{"type":"string","description":"The border radius of a grid layout element."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutElementBorderStyle","description":"The border style configuration of a grid layout element."},"columnIndex":{"type":"number","description":"The column index for the upper left corner of an element."},"columnSpan":{"type":"number","description":"The width of a grid element expressed as a number of grid columns."},"elementId":{"type":"string","description":"A unique identifier for an element within a grid layout."},"elementType":{"$ref":"#/types/aws-native:quicksight:DashboardLayoutElementType","description":"The type of element."},"loadingAnimation":{"$ref":"#/types/aws-native:quicksight:DashboardLoadingAnimation"},"padding":{"type":"string","description":"The padding of a grid layout element."},"rowIndex":{"type":"number","description":"The row index for the upper left corner of an element."},"rowSpan":{"type":"number","description":"The height of a grid element expressed as a number of grid rows."},"selectedBorderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutElementBorderStyle","description":"The border style configuration of a grid layout element. This border style is used when the element is selected."}},"type":"object","required":["columnSpan","elementId","elementType","rowSpan"]},"aws-native:quicksight:DashboardGridLayoutElementBackgroundStyle":{"properties":{"color":{"type":"string","description":"The background color of a grid layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The background visibility of a grid layout element."}},"type":"object"},"aws-native:quicksight:DashboardGridLayoutElementBorderStyle":{"properties":{"color":{"type":"string","description":"The border color of a grid layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The border visibility of a grid layout element."},"width":{"type":"string","description":"String to encapsulate the most generic way Width can be formatted with whatever units (px, em etc)"}},"type":"object"},"aws-native:quicksight:DashboardGridLayoutScreenCanvasSizeOptions":{"properties":{"optimizedViewPortWidth":{"type":"string","description":"String based length that is composed of value and unit in px"},"resizeOption":{"$ref":"#/types/aws-native:quicksight:DashboardResizeOption","description":"This value determines the layout behavior when the viewport is resized.\n\n- `FIXED` : A fixed width will be used when optimizing the layout. In the Quick Sight console, this option is called `Classic` .\n- `RESPONSIVE` : The width of the canvas will be responsive and optimized to the view port. In the Quick Sight console, this option is called `Tiled` ."}},"type":"object","required":["resizeOption"]},"aws-native:quicksight:DashboardGrowthRateComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"periodSize":{"type":"number","description":"The period size setup of a growth rate computation."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardHeaderFooterSectionConfiguration":{"properties":{"layout":{"$ref":"#/types/aws-native:quicksight:DashboardSectionLayoutConfiguration","description":"The layout configuration of the header or footer section."},"sectionId":{"type":"string","description":"The unique identifier of the header or footer section."},"style":{"$ref":"#/types/aws-native:quicksight:DashboardSectionStyle","description":"The style options of a header or footer section."}},"type":"object","required":["layout","sectionId"]},"aws-native:quicksight:DashboardHeatMapAggregatedFieldWells":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The columns field well of a heat map."},"rows":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The rows field well of a heat map."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The values field well of a heat map."}},"type":"object"},"aws-native:quicksight:DashboardHeatMapConfiguration":{"properties":{"colorScale":{"$ref":"#/types/aws-native:quicksight:DashboardColorScale","description":"The color options (gradient color, point of divergence) in a heat map."},"columnLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options of the column that is displayed in a heat map."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardHeatMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"rowLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options of the row that is displayed in a `heat map` ."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardHeatMapSortConfiguration","description":"The sort configuration of a heat map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardHeatMapFieldWells":{"properties":{"heatMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardHeatMapAggregatedFieldWells","description":"The aggregated field wells of a heat map."}},"type":"object"},"aws-native:quicksight:DashboardHeatMapSortConfiguration":{"properties":{"heatMapColumnItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of columns that are displayed in a heat map."},"heatMapColumnSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The column sort configuration for heat map for columns that aren't a part of a field well."},"heatMapRowItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of rows that are displayed in a heat map."},"heatMapRowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The field sort configuration of the rows fields."}},"type":"object"},"aws-native:quicksight:DashboardHeatMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardHeatMapConfiguration","description":"The configuration of a heat map."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardHistogramAggregatedFieldWells":{"properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a histogram. Values are aggregated by `COUNT` or `DISTINCT_COUNT` ."}},"type":"object"},"aws-native:quicksight:DashboardHistogramBinOptions":{"properties":{"binCount":{"$ref":"#/types/aws-native:quicksight:DashboardBinCountOptions","description":"The options that determine the bin count of a histogram."},"binWidth":{"$ref":"#/types/aws-native:quicksight:DashboardBinWidthOptions","description":"The options that determine the bin width of a histogram."},"selectedBinType":{"$ref":"#/types/aws-native:quicksight:DashboardHistogramBinType","description":"The options that determine the selected bin type."},"startValue":{"type":"number","description":"The options that determine the bin start value."}},"type":"object"},"aws-native:quicksight:DashboardHistogramBinType":{"type":"string","enum":[{"name":"BinCount","value":"BIN_COUNT"},{"name":"BinWidth","value":"BIN_WIDTH"}]},"aws-native:quicksight:DashboardHistogramConfiguration":{"properties":{"binOptions":{"$ref":"#/types/aws-native:quicksight:DashboardHistogramBinOptions","description":"The options that determine the presentation of histogram bins."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The data label configuration of a histogram."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardHistogramFieldWells","description":"The field well configuration of a histogram."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip configuration of a histogram."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The visual palette configuration of a histogram."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The options that determine the presentation of the x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The options that determine the presentation of the x-axis label."},"yAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The options that determine the presentation of the y-axis."}},"type":"object"},"aws-native:quicksight:DashboardHistogramFieldWells":{"properties":{"histogramAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardHistogramAggregatedFieldWells","description":"The field well configuration of a histogram."}},"type":"object"},"aws-native:quicksight:DashboardHistogramVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardHistogramConfiguration","description":"The configuration for a `HistogramVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardHorizontalTextAlignment":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:DashboardIcon":{"type":"string","enum":[{"name":"CaretUp","value":"CARET_UP"},{"name":"CaretDown","value":"CARET_DOWN"},{"name":"Plus","value":"PLUS"},{"name":"Minus","value":"MINUS"},{"name":"ArrowUp","value":"ARROW_UP"},{"name":"ArrowDown","value":"ARROW_DOWN"},{"name":"ArrowLeft","value":"ARROW_LEFT"},{"name":"ArrowUpLeft","value":"ARROW_UP_LEFT"},{"name":"ArrowDownLeft","value":"ARROW_DOWN_LEFT"},{"name":"ArrowRight","value":"ARROW_RIGHT"},{"name":"ArrowUpRight","value":"ARROW_UP_RIGHT"},{"name":"ArrowDownRight","value":"ARROW_DOWN_RIGHT"},{"name":"FaceUp","value":"FACE_UP"},{"name":"FaceDown","value":"FACE_DOWN"},{"name":"FaceFlat","value":"FACE_FLAT"},{"name":"OneBar","value":"ONE_BAR"},{"name":"TwoBar","value":"TWO_BAR"},{"name":"ThreeBar","value":"THREE_BAR"},{"name":"Circle","value":"CIRCLE"},{"name":"Triangle","value":"TRIANGLE"},{"name":"Square","value":"SQUARE"},{"name":"Flag","value":"FLAG"},{"name":"ThumbsUp","value":"THUMBS_UP"},{"name":"ThumbsDown","value":"THUMBS_DOWN"},{"name":"Checkmark","value":"CHECKMARK"},{"name":"X","value":"X"}]},"aws-native:quicksight:DashboardImageCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardImageCustomActionOperation"},"description":"A list of `ImageCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the custom action."},"name":{"type":"string","description":"The name of the custom action."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The status of the custom action."},"trigger":{"$ref":"#/types/aws-native:quicksight:DashboardImageCustomActionTrigger","description":"The trigger of the `VisualCustomAction` .\n\nValid values are defined as follows:\n\n- `CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:DashboardImageCustomActionOperation":{"properties":{"navigationOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionNavigationOperation"},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionSetParametersOperation"},"urlOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionUrlOperation"}},"type":"object"},"aws-native:quicksight:DashboardImageCustomActionTrigger":{"type":"string","enum":[{"name":"Click","value":"CLICK"},{"name":"Menu","value":"MENU"}]},"aws-native:quicksight:DashboardImageInteractionOptions":{"properties":{"imageMenuOption":{"$ref":"#/types/aws-native:quicksight:DashboardImageMenuOption","description":"The menu options for the image."}},"type":"object"},"aws-native:quicksight:DashboardImageMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The availability status of the image menu. If the value of this property is set to `ENABLED` , dashboard readers can interact with the image menu."}},"type":"object"},"aws-native:quicksight:DashboardImageStaticFile":{"properties":{"source":{"$ref":"#/types/aws-native:quicksight:DashboardStaticFileSource","description":"The source of the image static file."},"staticFileId":{"type":"string","description":"The ID of the static file that contains an image."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:DashboardInnerFilter":{"properties":{"categoryInnerFilter":{"$ref":"#/types/aws-native:quicksight:DashboardCategoryInnerFilter","description":"A `CategoryInnerFilter` filters text values for the `NestedFilter` ."}},"type":"object"},"aws-native:quicksight:DashboardInsightConfiguration":{"properties":{"computations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardComputation"},"description":"The computations configurations of the insight visual"},"customNarrative":{"$ref":"#/types/aws-native:quicksight:DashboardCustomNarrativeOptions","description":"The custom narrative of the insight visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."}},"type":"object"},"aws-native:quicksight:DashboardInsightVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used in the insight visual."},"insightConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardInsightConfiguration","description":"The configuration of an insight visual."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:DashboardIntegerDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:DashboardDynamicDefaultValue","description":"The dynamic value of the `IntegerDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"number"},"description":"The static values of the `IntegerDefaultValues` ."}},"type":"object"},"aws-native:quicksight:DashboardIntegerParameter":{"description":"\u003cp\u003eAn integer parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eThe name of the integer parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"number"},"description":"\u003cp\u003eThe values for the integer parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:DashboardIntegerParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DashboardIntegerDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:DashboardParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:DashboardIntegerValueWhenUnsetConfiguration","description":"A parameter declaration for the `Integer` data type."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:DashboardIntegerValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"number","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:DashboardValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:DashboardItemsLimitConfiguration":{"properties":{"itemsLimit":{"type":"number","description":"The limit on how many items of a field are showed in the chart. For example, the number of slices that are displayed in a pie chart."},"otherCategories":{"$ref":"#/types/aws-native:quicksight:DashboardOtherCategories","description":"The `Show other` of an axis in the chart. Choose one of the following options:\n\n- `INCLUDE`\n- `EXCLUDE`"}},"type":"object"},"aws-native:quicksight:DashboardKpiActualValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIcon","description":"The conditional formatting of the actual value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting of the actual value's text color."}},"type":"object"},"aws-native:quicksight:DashboardKpiComparisonValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIcon","description":"The conditional formatting of the comparison value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting of the comparison value's text color."}},"type":"object"},"aws-native:quicksight:DashboardKpiConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardKpiConditionalFormattingOption"},"description":"The conditional formatting options of a KPI visual."}},"type":"object"},"aws-native:quicksight:DashboardKpiConditionalFormattingOption":{"properties":{"actualValue":{"$ref":"#/types/aws-native:quicksight:DashboardKpiActualValueConditionalFormatting","description":"The conditional formatting for the actual value of a KPI visual."},"comparisonValue":{"$ref":"#/types/aws-native:quicksight:DashboardKpiComparisonValueConditionalFormatting","description":"The conditional formatting for the comparison value of a KPI visual."},"primaryValue":{"$ref":"#/types/aws-native:quicksight:DashboardKpiPrimaryValueConditionalFormatting","description":"The conditional formatting for the primary value of a KPI visual."},"progressBar":{"$ref":"#/types/aws-native:quicksight:DashboardKpiProgressBarConditionalFormatting","description":"The conditional formatting for the progress bar of a KPI visual."}},"type":"object"},"aws-native:quicksight:DashboardKpiConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardKpiFieldWells","description":"The field well configuration of a KPI visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"kpiOptions":{"$ref":"#/types/aws-native:quicksight:DashboardKpiOptions","description":"The options that determine the presentation of a KPI visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardKpiSortConfiguration","description":"The sort configuration of a KPI visual."}},"type":"object"},"aws-native:quicksight:DashboardKpiFieldWells":{"properties":{"targetValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The target value field wells of a KPI visual."},"trendGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The trend group field wells of a KPI visual."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a KPI visual."}},"type":"object"},"aws-native:quicksight:DashboardKpiOptions":{"properties":{"comparison":{"$ref":"#/types/aws-native:quicksight:DashboardComparisonConfiguration","description":"The comparison configuration of a KPI visual."},"primaryValueDisplayType":{"$ref":"#/types/aws-native:quicksight:DashboardPrimaryValueDisplayType","description":"The options that determine the primary value display type."},"primaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The options that determine the primary value font configuration."},"progressBar":{"$ref":"#/types/aws-native:quicksight:DashboardProgressBarOptions","description":"The options that determine the presentation of the progress bar of a KPI visual."},"secondaryValue":{"$ref":"#/types/aws-native:quicksight:DashboardSecondaryValueOptions","description":"The options that determine the presentation of the secondary value of a KPI visual."},"secondaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The options that determine the secondary value font configuration."},"sparkline":{"$ref":"#/types/aws-native:quicksight:DashboardKpiSparklineOptions","description":"The options that determine the visibility, color, type, and tooltip visibility of the sparkline of a KPI visual."},"trendArrows":{"$ref":"#/types/aws-native:quicksight:DashboardTrendArrowOptions","description":"The options that determine the presentation of trend arrows in a KPI visual."},"visualLayoutOptions":{"$ref":"#/types/aws-native:quicksight:DashboardKpiVisualLayoutOptions","description":"The options that determine the layout a KPI visual."}},"type":"object"},"aws-native:quicksight:DashboardKpiPrimaryValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIcon","description":"The conditional formatting of the primary value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting of the primary value's text color."}},"type":"object"},"aws-native:quicksight:DashboardKpiProgressBarConditionalFormatting":{"properties":{"foregroundColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting of the progress bar's foreground color."}},"type":"object"},"aws-native:quicksight:DashboardKpiSortConfiguration":{"properties":{"trendGroupSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the trend group fields."}},"type":"object"},"aws-native:quicksight:DashboardKpiSparklineOptions":{"properties":{"color":{"type":"string","description":"The color of the sparkline."},"tooltipVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The tooltip visibility of the sparkline."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardKpiSparklineType","description":"The type of the sparkline."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the sparkline."}},"type":"object","required":["type"]},"aws-native:quicksight:DashboardKpiSparklineType":{"type":"string","enum":[{"name":"Line","value":"LINE"},{"name":"Area","value":"AREA"}]},"aws-native:quicksight:DashboardKpiVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardKpiConfiguration","description":"The configuration of a KPI visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:DashboardKpiConditionalFormatting","description":"The conditional formatting of a KPI visual."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardKpiVisualLayoutOptions":{"properties":{"standardLayout":{"$ref":"#/types/aws-native:quicksight:DashboardKpiVisualStandardLayout","description":"The standard layout of the KPI visual."}},"type":"object"},"aws-native:quicksight:DashboardKpiVisualStandardLayout":{"properties":{"type":{"$ref":"#/types/aws-native:quicksight:DashboardKpiVisualStandardLayoutType","description":"The standard layout type."}},"type":"object","required":["type"]},"aws-native:quicksight:DashboardKpiVisualStandardLayoutType":{"type":"string","enum":[{"name":"Classic","value":"CLASSIC"},{"name":"Vertical","value":"VERTICAL"}]},"aws-native:quicksight:DashboardLabelOptions":{"properties":{"customLabel":{"type":"string","description":"The text for the label."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The font configuration of the label."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not the label is visible."}},"type":"object"},"aws-native:quicksight:DashboardLayerCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardLayerCustomActionOperation"},"description":"A list of `LayerCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the custom action."},"name":{"type":"string","description":"The name of the custom action."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The status of the `LayerCustomAction` ."},"trigger":{"$ref":"#/types/aws-native:quicksight:DashboardLayerCustomActionTrigger","description":"The trigger of the `LayerCustomAction` .\n\nValid values are defined as follows:\n\n- `DATA_POINT_CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `DATA_POINT_MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:DashboardLayerCustomActionOperation":{"properties":{"filterOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionFilterOperation"},"navigationOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionNavigationOperation"},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionSetParametersOperation"},"urlOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionUrlOperation"}},"type":"object"},"aws-native:quicksight:DashboardLayerCustomActionTrigger":{"type":"string","enum":[{"name":"DataPointClick","value":"DATA_POINT_CLICK"},{"name":"DataPointMenu","value":"DATA_POINT_MENU"}]},"aws-native:quicksight:DashboardLayerMapVisual":{"properties":{"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialLayerMapConfiguration","description":"The configuration settings of the visual."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used to create the layer map visual. You can't create a visual without a dataset."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions"},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions"},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The ID of the visual."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:DashboardLayout":{"properties":{"configuration":{"$ref":"#/types/aws-native:quicksight:DashboardLayoutConfiguration","description":"The configuration that determines what the type of layout for a sheet."}},"type":"object","required":["configuration"]},"aws-native:quicksight:DashboardLayoutConfiguration":{"properties":{"freeFormLayout":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormLayoutConfiguration","description":"A free-form is optimized for a fixed width and has more control over the exact placement of layout elements."},"gridLayout":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutConfiguration","description":"A type of layout that can be used on a sheet. In a grid layout, visuals snap to a grid with standard spacing and alignment. Dashboards are displayed as designed, with options to fit to screen or view at actual size. A grid layout can be configured to behave in one of two ways when the viewport is resized: `FIXED` or `RESPONSIVE` ."},"sectionBasedLayout":{"$ref":"#/types/aws-native:quicksight:DashboardSectionBasedLayoutConfiguration","description":"A section based layout organizes visuals into multiple sections and has customized header, footer and page break."}},"type":"object"},"aws-native:quicksight:DashboardLayoutElementType":{"type":"string","enum":[{"name":"Visual","value":"VISUAL"},{"name":"FilterControl","value":"FILTER_CONTROL"},{"name":"ParameterControl","value":"PARAMETER_CONTROL"},{"name":"TextBox","value":"TEXT_BOX"},{"name":"Image","value":"IMAGE"}]},"aws-native:quicksight:DashboardLegendOptions":{"properties":{"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"position":{"$ref":"#/types/aws-native:quicksight:DashboardLegendPosition","description":"The positions for the legend. Choose one of the following options:\n\n- `AUTO`\n- `RIGHT`\n- `BOTTOM`\n- `LEFT`"},"title":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The custom title for the legend."},"valueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration"},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not the legend is visible."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object"},"aws-native:quicksight:DashboardLegendPosition":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Right","value":"RIGHT"},{"name":"Bottom","value":"BOTTOM"},{"name":"Top","value":"TOP"}]},"aws-native:quicksight:DashboardLineChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category field wells of a line chart. Values are grouped by category fields."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The color field wells of a line chart. Values are grouped by category fields."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The small multiples field well of a line chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a line chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:DashboardLineChartConfiguration":{"properties":{"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardContributionAnalysisDefault"},"description":"The default configuration of a line chart's contribution analysis."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The data label configuration of a line chart."},"defaultSeriesSettings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartDefaultSeriesSettings","description":"The options that determine the default presentation of all line series in `LineChartVisual` ."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartFieldWells","description":"The field well configuration of a line chart."},"forecastConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardForecastConfiguration"},"description":"The forecast configuration of a line chart."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend configuration of a line chart."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLineSeriesAxisDisplayOptions","description":"The series axis configuration of a line chart."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The options that determine the presentation of the y-axis label."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLine"},"description":"The reference lines configuration of a line chart."},"secondaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLineSeriesAxisDisplayOptions","description":"The series axis configuration of a line chart."},"secondaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The options that determine the presentation of the secondary y-axis label."},"series":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSeriesItem"},"description":"The series item configuration of a line chart."},"singleAxisOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSingleAxisOptions"},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartSortConfiguration","description":"The sort configuration of a line chart."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip configuration of a line chart."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartType","description":"Determines the type of the line chart."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The visual palette configuration of a line chart."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The options that determine the presentation of the x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The options that determine the presentation of the x-axis label."}},"type":"object"},"aws-native:quicksight:DashboardLineChartDefaultSeriesSettings":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:DashboardAxisBinding","description":"The axis to which you are binding all line series to."},"lineStyleSettings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartLineStyleSettings","description":"Line styles options for all line series in the visual."},"markerStyleSettings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartMarkerStyleSettings","description":"Marker styles options for all line series in the visual."}},"type":"object"},"aws-native:quicksight:DashboardLineChartFieldWells":{"properties":{"lineChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartAggregatedFieldWells","description":"The field well configuration of a line chart."}},"type":"object"},"aws-native:quicksight:DashboardLineChartLineStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dotted","value":"DOTTED"},{"name":"Dashed","value":"DASHED"}]},"aws-native:quicksight:DashboardLineChartLineStyleSettings":{"properties":{"lineInterpolation":{"$ref":"#/types/aws-native:quicksight:DashboardLineInterpolation","description":"Interpolation style for line series.\n\n- `LINEAR` : Show as default, linear style.\n- `SMOOTH` : Show as a smooth curve.\n- `STEPPED` : Show steps in line."},"lineStyle":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartLineStyle","description":"Line style for line series.\n\n- `SOLID` : Show as a solid line.\n- `DOTTED` : Show as a dotted line.\n- `DASHED` : Show as a dashed line."},"lineVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Configuration option that determines whether to show the line for the series."},"lineWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object"},"aws-native:quicksight:DashboardLineChartMarkerShape":{"type":"string","enum":[{"name":"Circle","value":"CIRCLE"},{"name":"Triangle","value":"TRIANGLE"},{"name":"Square","value":"SQUARE"},{"name":"Diamond","value":"DIAMOND"},{"name":"RoundedSquare","value":"ROUNDED_SQUARE"}]},"aws-native:quicksight:DashboardLineChartMarkerStyleSettings":{"properties":{"markerColor":{"type":"string","description":"Color of marker in the series."},"markerShape":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartMarkerShape","description":"Shape option for markers in the series.\n\n- `CIRCLE` : Show marker as a circle.\n- `TRIANGLE` : Show marker as a triangle.\n- `SQUARE` : Show marker as a square.\n- `DIAMOND` : Show marker as a diamond.\n- `ROUNDED_SQUARE` : Show marker as a rounded square."},"markerSize":{"type":"string","description":"String based length that is composed of value and unit in px"},"markerVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Configuration option that determines whether to show the markers in the series."}},"type":"object"},"aws-native:quicksight:DashboardLineChartSeriesSettings":{"properties":{"lineStyleSettings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartLineStyleSettings","description":"Line styles options for a line series in `LineChartVisual` ."},"markerStyleSettings":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartMarkerStyleSettings","description":"Marker styles options for a line series in `LineChartVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardLineChartSortConfiguration":{"properties":{"categoryItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of categories that are displayed in a line chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the category fields."},"colorItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of lines that are displayed in a line chart."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:DashboardLineChartType":{"type":"string","enum":[{"name":"Line","value":"LINE"},{"name":"Area","value":"AREA"},{"name":"StackedArea","value":"STACKED_AREA"}]},"aws-native:quicksight:DashboardLineChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartConfiguration","description":"The configuration of a line chart."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardLineInterpolation":{"type":"string","enum":[{"name":"Linear","value":"LINEAR"},{"name":"Smooth","value":"SMOOTH"},{"name":"Stepped","value":"STEPPED"}]},"aws-native:quicksight:DashboardLineSeriesAxisDisplayOptions":{"properties":{"axisOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The options that determine the presentation of the line series axis."},"missingDataConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMissingDataConfiguration"},"description":"The configuration options that determine how missing data is treated during the rendering of a line chart."}},"type":"object"},"aws-native:quicksight:DashboardLinkSharingConfiguration":{"properties":{"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardResourcePermission"},"description":"A structure that contains the permissions of a shareable link."}},"type":"object"},"aws-native:quicksight:DashboardListControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"searchOptions":{"$ref":"#/types/aws-native:quicksight:DashboardListControlSearchOptions","description":"The configuration of the search options in a list control."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardListControlSelectAllOptions","description":"The configuration of the `Select all` options in a list control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardListControlSearchOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration of the search options in a list control."}},"type":"object"},"aws-native:quicksight:DashboardListControlSelectAllOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration of the `Select all` options in a list control."}},"type":"object"},"aws-native:quicksight:DashboardLoadingAnimation":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration of `LoadingAnimation` ."}},"type":"object"},"aws-native:quicksight:DashboardLocalNavigationConfiguration":{"properties":{"targetSheetId":{"type":"string","description":"The sheet that is targeted for navigation in the same analysis."}},"type":"object","required":["targetSheetId"]},"aws-native:quicksight:DashboardLongFormatText":{"properties":{"plainText":{"type":"string","description":"Plain text format."},"richText":{"type":"string","description":"Rich text. Examples of rich text include bold, underline, and italics."}},"type":"object"},"aws-native:quicksight:DashboardMapZoomMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:DashboardMappedDataSetParameter":{"properties":{"dataSetIdentifier":{"type":"string","description":"A unique name that identifies a dataset within the analysis or dashboard."},"dataSetParameterName":{"type":"string","description":"The name of the dataset parameter."}},"type":"object","required":["dataSetIdentifier","dataSetParameterName"]},"aws-native:quicksight:DashboardMaximumLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the maximum label."}},"type":"object"},"aws-native:quicksight:DashboardMaximumMinimumComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardMaximumMinimumComputationType","description":"The type of computation. Choose one of the following options:\n\n- MAXIMUM: A maximum computation.\n- MINIMUM: A minimum computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:DashboardMaximumMinimumComputationType":{"type":"string","enum":[{"name":"Maximum","value":"MAXIMUM"},{"name":"Minimum","value":"MINIMUM"}]},"aws-native:quicksight:DashboardMeasureField":{"properties":{"calculatedMeasureField":{"$ref":"#/types/aws-native:quicksight:DashboardCalculatedMeasureField","description":"The calculated measure field only used in pivot tables."},"categoricalMeasureField":{"$ref":"#/types/aws-native:quicksight:DashboardCategoricalMeasureField","description":"The measure type field with categorical type columns."},"dateMeasureField":{"$ref":"#/types/aws-native:quicksight:DashboardDateMeasureField","description":"The measure type field with date type columns."},"numericalMeasureField":{"$ref":"#/types/aws-native:quicksight:DashboardNumericalMeasureField","description":"The measure type field with numerical type columns."}},"type":"object"},"aws-native:quicksight:DashboardMetricComparisonComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"fromValue":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The field that is used in a metric comparison from value setup."},"name":{"type":"string","description":"The name of a computation."},"targetValue":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The field that is used in a metric comparison to value setup."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardMinimumLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the minimum label."}},"type":"object"},"aws-native:quicksight:DashboardMissingDataConfiguration":{"properties":{"treatmentOption":{"$ref":"#/types/aws-native:quicksight:DashboardMissingDataTreatmentOption","description":"The treatment option that determines how missing data should be rendered. Choose from the following options:\n\n- `INTERPOLATE` : Interpolate missing values between the prior and the next known value.\n- `SHOW_AS_ZERO` : Show missing values as the value `0` .\n- `SHOW_AS_BLANK` : Display a blank space when rendering missing data."}},"type":"object"},"aws-native:quicksight:DashboardMissingDataTreatmentOption":{"type":"string","enum":[{"name":"Interpolate","value":"INTERPOLATE"},{"name":"ShowAsZero","value":"SHOW_AS_ZERO"},{"name":"ShowAsBlank","value":"SHOW_AS_BLANK"}]},"aws-native:quicksight:DashboardNegativeValueConfiguration":{"properties":{"displayMode":{"$ref":"#/types/aws-native:quicksight:DashboardNegativeValueDisplayMode","description":"Determines the display mode of the negative value configuration."}},"type":"object","required":["displayMode"]},"aws-native:quicksight:DashboardNegativeValueDisplayMode":{"type":"string","enum":[{"name":"Positive","value":"POSITIVE"},{"name":"Negative","value":"NEGATIVE"}]},"aws-native:quicksight:DashboardNestedFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeInnerSet":{"type":"boolean","description":"A boolean condition to include or exclude the subset that is defined by the values of the nested inner filter."},"innerFilter":{"$ref":"#/types/aws-native:quicksight:DashboardInnerFilter","description":"The `InnerFilter` defines the subset of data to be used with the `NestedFilter` ."}},"type":"object","required":["column","filterId","includeInnerSet","innerFilter"]},"aws-native:quicksight:DashboardNullValueFormatConfiguration":{"properties":{"nullString":{"type":"string","description":"Determines the null string of null values."}},"type":"object","required":["nullString"]},"aws-native:quicksight:DashboardNumberDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numberScale":{"$ref":"#/types/aws-native:quicksight:DashboardNumberScale","description":"Determines the number scale value of the number format."},"prefix":{"type":"string","description":"Determines the prefix value of the number format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the number format."}},"type":"object"},"aws-native:quicksight:DashboardNumberFormatConfiguration":{"properties":{"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericFormatConfiguration","description":"The options that determine the numeric format configuration."}},"type":"object"},"aws-native:quicksight:DashboardNumberScale":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Auto","value":"AUTO"},{"name":"Thousands","value":"THOUSANDS"},{"name":"Millions","value":"MILLIONS"},{"name":"Billions","value":"BILLIONS"},{"name":"Trillions","value":"TRILLIONS"},{"name":"Lakhs","value":"LAKHS"},{"name":"Crores","value":"CRORES"}]},"aws-native:quicksight:DashboardNumericAxisOptions":{"properties":{"range":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayRange","description":"The range setup of a numeric axis."},"scale":{"$ref":"#/types/aws-native:quicksight:DashboardAxisScale","description":"The scale setup of a numeric axis."}},"type":"object"},"aws-native:quicksight:DashboardNumericEqualityDrillDownFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"value":{"type":"number","description":"The value of the double input numeric drill down filter."}},"type":"object","required":["column","value"]},"aws-native:quicksight:DashboardNumericEqualityFilter":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationFunction","description":"The aggregation function of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:DashboardNumericEqualityMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardNumericFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"},"value":{"type":"number","description":"The input value."}},"type":"object","required":["column","filterId","matchOperator","nullOption"]},"aws-native:quicksight:DashboardNumericEqualityMatchOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"}]},"aws-native:quicksight:DashboardNumericFilterSelectAllOptions":{"type":"string","enum":[{"name":"FilterAllValues","value":"FILTER_ALL_VALUES"}]},"aws-native:quicksight:DashboardNumericFormatConfiguration":{"properties":{"currencyDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCurrencyDisplayFormatConfiguration","description":"The options that determine the currency display format configuration."},"numberDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumberDisplayFormatConfiguration","description":"The options that determine the number display format configuration."},"percentageDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPercentageDisplayFormatConfiguration","description":"The options that determine the percentage display format configuration."}},"type":"object"},"aws-native:quicksight:DashboardNumericRangeFilter":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationFunction","description":"The aggregation function of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeMaximum":{"type":"boolean","description":"Determines whether the maximum value in the filter value range should be included in the filtered results."},"includeMinimum":{"type":"boolean","description":"Determines whether the minimum value in the filter value range should be included in the filtered results."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"rangeMaximum":{"$ref":"#/types/aws-native:quicksight:DashboardNumericRangeFilterValue","description":"The maximum value for the filter value range."},"rangeMinimum":{"$ref":"#/types/aws-native:quicksight:DashboardNumericRangeFilterValue","description":"The minimum value for the filter value range."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:DashboardNumericFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["column","filterId","nullOption"]},"aws-native:quicksight:DashboardNumericRangeFilterValue":{"properties":{"parameter":{"type":"string","description":"The parameter that is used in the numeric range."},"staticValue":{"type":"number","description":"The static value of the numeric range filter."}},"type":"object"},"aws-native:quicksight:DashboardNumericSeparatorConfiguration":{"properties":{"decimalSeparator":{"$ref":"#/types/aws-native:quicksight:DashboardNumericSeparatorSymbol","description":"Determines the decimal separator."},"thousandsSeparator":{"$ref":"#/types/aws-native:quicksight:DashboardThousandSeparatorOptions","description":"The options that determine the thousands separator configuration."}},"type":"object"},"aws-native:quicksight:DashboardNumericSeparatorSymbol":{"type":"string","enum":[{"name":"Comma","value":"COMMA"},{"name":"Dot","value":"DOT"},{"name":"Space","value":"SPACE"}]},"aws-native:quicksight:DashboardNumericalAggregationFunction":{"properties":{"percentileAggregation":{"$ref":"#/types/aws-native:quicksight:DashboardPercentileAggregation","description":"An aggregation based on the percentile of values in a dimension or measure."},"simpleNumericalAggregation":{"$ref":"#/types/aws-native:quicksight:DashboardSimpleNumericalAggregationFunction","description":"Built-in aggregation functions for numerical values.\n\n- `SUM` : The sum of a dimension or measure.\n- `AVERAGE` : The average of a dimension or measure.\n- `MIN` : The minimum value of a dimension or measure.\n- `MAX` : The maximum value of a dimension or measure.\n- `COUNT` : The count of a dimension or measure.\n- `DISTINCT_COUNT` : The count of distinct values in a dimension or measure.\n- `VAR` : The variance of a dimension or measure.\n- `VARP` : The partitioned variance of a dimension or measure.\n- `STDEV` : The standard deviation of a dimension or measure.\n- `STDEVP` : The partitioned standard deviation of a dimension or measure.\n- `MEDIAN` : The median value of a dimension or measure."}},"type":"object"},"aws-native:quicksight:DashboardNumericalDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `NumericalDimensionField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumberFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardNumericalMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardNumericalAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `NumericalMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumberFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardOtherCategories":{"type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"Exclude","value":"EXCLUDE"}]},"aws-native:quicksight:DashboardPaginationConfiguration":{"properties":{"pageNumber":{"type":"number","description":"Indicates the page number."},"pageSize":{"type":"number","description":"Indicates how many items render in one page."}},"type":"object","required":["pageNumber","pageSize"]},"aws-native:quicksight:DashboardPanelBorderStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dashed","value":"DASHED"},{"name":"Dotted","value":"DOTTED"}]},"aws-native:quicksight:DashboardPanelConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"Sets the background color for each panel."},"backgroundVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not a background for each small multiples panel is rendered."},"borderColor":{"type":"string","description":"Sets the line color of panel borders."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardPanelBorderStyle","description":"Sets the line style of panel borders."},"borderThickness":{"type":"string","description":"String based length that is composed of value and unit in px"},"borderVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not each panel displays a border."},"gutterSpacing":{"type":"string","description":"String based length that is composed of value and unit in px"},"gutterVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not negative space between sibling panels is rendered."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardPanelTitleOptions","description":"Configures the title display within each small multiples panel."}},"type":"object"},"aws-native:quicksight:DashboardPanelTitleOptions":{"properties":{"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration"},"horizontalTextAlignment":{"$ref":"#/types/aws-native:quicksight:DashboardHorizontalTextAlignment","description":"Sets the horizontal text alignment of the title within each panel."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not panel titles are displayed."}},"type":"object"},"aws-native:quicksight:DashboardPaperOrientation":{"type":"string","enum":[{"name":"Portrait","value":"PORTRAIT"},{"name":"Landscape","value":"LANDSCAPE"}]},"aws-native:quicksight:DashboardPaperSize":{"type":"string","enum":[{"name":"UsLetter","value":"US_LETTER"},{"name":"UsLegal","value":"US_LEGAL"},{"name":"UsTabloidLedger","value":"US_TABLOID_LEDGER"},{"name":"A0","value":"A0"},{"name":"A1","value":"A1"},{"name":"A2","value":"A2"},{"name":"A3","value":"A3"},{"name":"A4","value":"A4"},{"name":"A5","value":"A5"},{"name":"JisB4","value":"JIS_B4"},{"name":"JisB5","value":"JIS_B5"}]},"aws-native:quicksight:DashboardParameterControl":{"properties":{"dateTimePicker":{"$ref":"#/types/aws-native:quicksight:DashboardParameterDateTimePickerControl","description":"A control from a date parameter that specifies date and time."},"dropdown":{"$ref":"#/types/aws-native:quicksight:DashboardParameterDropDownControl","description":"A control to display a dropdown list with buttons that are used to select a single value."},"list":{"$ref":"#/types/aws-native:quicksight:DashboardParameterListControl","description":"A control to display a list with buttons or boxes that are used to select either a single value or multiple values."},"slider":{"$ref":"#/types/aws-native:quicksight:DashboardParameterSliderControl","description":"A control to display a horizontal toggle bar. This is used to change a value by sliding the toggle."},"textArea":{"$ref":"#/types/aws-native:quicksight:DashboardParameterTextAreaControl","description":"A control to display a text box that is used to enter multiple entries."},"textField":{"$ref":"#/types/aws-native:quicksight:DashboardParameterTextFieldControl","description":"A control to display a text box that is used to enter a single entry."}},"type":"object"},"aws-native:quicksight:DashboardParameterDateTimePickerControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimePickerControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterDateTimePickerControl` ."},"sourceParameterName":{"type":"string","description":"The name of the `ParameterDateTimePickerControl` ."},"title":{"type":"string","description":"The title of the `ParameterDateTimePickerControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:DashboardParameterDeclaration":{"properties":{"dateTimeParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeParameterDeclaration","description":"A parameter declaration for the `DateTime` data type."},"decimalParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalParameterDeclaration","description":"A parameter declaration for the `Decimal` data type."},"integerParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:DashboardIntegerParameterDeclaration","description":"A parameter declaration for the `Integer` data type."},"stringParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:DashboardStringParameterDeclaration","description":"A parameter declaration for the `String` data type."}},"type":"object"},"aws-native:quicksight:DashboardParameterDropDownControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"commitMode":{"$ref":"#/types/aws-native:quicksight:DashboardCommitMode","description":"The visibility configuration of the Apply button on a `ParameterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDropDownControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterDropDownControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:DashboardParameterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterDropDownControl` ."},"title":{"type":"string","description":"The title of the `ParameterDropDownControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlListType","description":"The type parameter name of the `ParameterDropDownControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:DashboardParameterListControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardListControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterListControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:DashboardParameterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterListControl` ."},"title":{"type":"string","description":"The title of the `ParameterListControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlListType","description":"The type of `ParameterListControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:DashboardParameterSelectableValues":{"properties":{"linkToDataSetColumn":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column identifier that fetches values from the data set."},"values":{"type":"array","items":{"type":"string"},"description":"The values that are used in `ParameterSelectableValues` ."}},"type":"object"},"aws-native:quicksight:DashboardParameterSliderControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSliderControlDisplayOptions","description":"The display options of a control."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterSliderControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterSliderControl` ."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"title":{"type":"string","description":"The title of the `ParameterSliderControl` ."}},"type":"object","required":["maximumValue","minimumValue","parameterControlId","sourceParameterName","stepSize","title"]},"aws-native:quicksight:DashboardParameterTextAreaControl":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextAreaControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterTextAreaControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `ParameterTextAreaControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:DashboardParameterTextFieldControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextFieldControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterTextFieldControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterTextFieldControl` ."},"title":{"type":"string","description":"The title of the `ParameterTextFieldControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:DashboardParameterValueType":{"type":"string","enum":[{"name":"MultiValued","value":"MULTI_VALUED"},{"name":"SingleValued","value":"SINGLE_VALUED"}]},"aws-native:quicksight:DashboardParameters":{"description":"\u003cp\u003eA list of Amazon QuickSight parameters and the list's override values.\u003c/p\u003e","properties":{"dateTimeParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDateTimeParameter"},"description":"\u003cp\u003eThe parameters that have a data type of date-time.\u003c/p\u003e"},"decimalParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalParameter"},"description":"\u003cp\u003eThe parameters that have a data type of decimal.\u003c/p\u003e"},"integerParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardIntegerParameter"},"description":"\u003cp\u003eThe parameters that have a data type of integer.\u003c/p\u003e"},"stringParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardStringParameter"},"description":"\u003cp\u003eThe parameters that have a data type of string.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DashboardPercentVisibleRange":{"properties":{"from":{"type":"number","description":"The lower bound of the range."},"to":{"type":"number","description":"The top bound of the range."}},"type":"object"},"aws-native:quicksight:DashboardPercentageDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"prefix":{"type":"string","description":"Determines the prefix value of the percentage format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the percentage format."}},"type":"object"},"aws-native:quicksight:DashboardPercentileAggregation":{"properties":{"percentileValue":{"type":"number","description":"The percentile value. This value can be any numeric constant 0–100. A percentile value of 50 computes the median value of the measure."}},"type":"object"},"aws-native:quicksight:DashboardPeriodOverPeriodComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardPeriodToDateComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"periodTimeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The time granularity setup of period to date computation. Choose from the following options:\n\n- YEAR: Year to date.\n- MONTH: Month to date."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardPieChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category (group/color) field wells of a pie chart."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The small multiples field well of a pie chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a pie chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:DashboardPieChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options of the group/color that is displayed in a pie chart."},"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardContributionAnalysisDefault"},"description":"The contribution analysis (anomaly configuration) setup of the visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"donutOptions":{"$ref":"#/types/aws-native:quicksight:DashboardDonutOptions","description":"The options that determine the shape of the chart. This option determines whether the chart is a pie chart or a donut chart."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardPieChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPieChartSortConfiguration","description":"The sort configuration of a pie chart."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options for the value that is displayed in a pie chart."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardPieChartFieldWells":{"properties":{"pieChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardPieChartAggregatedFieldWells","description":"The field well configuration of a pie chart."}},"type":"object"},"aws-native:quicksight:DashboardPieChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of categories that are displayed in a pie chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the category fields."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:DashboardPieChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPieChartConfiguration","description":"The configuration of a pie chart."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardPivotFieldSortOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID for the field sort options."},"sortBy":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableSortBy","description":"The sort by field for the field sort options."}},"type":"object","required":["fieldId","sortBy"]},"aws-native:quicksight:DashboardPivotTableAggregatedFieldWells":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The columns field well for a pivot table. Values are grouped by columns fields."},"rows":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The rows field well for a pivot table. Values are grouped by rows fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The values field well for a pivot table. Values are aggregated based on rows and columns fields."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableCellConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the cell for conditional formatting."},"scope":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableConditionalFormattingScope","description":"The scope of the cell for conditional formatting."},"scopes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableConditionalFormattingScope"},"description":"A list of cell scopes for conditional formatting."},"textFormat":{"$ref":"#/types/aws-native:quicksight:DashboardTextConditionalFormat","description":"The text format of the cell for conditional formatting."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardPivotTableConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableConditionalFormattingOption"},"description":"Conditional formatting options for a `PivotTableVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableConditionalFormattingOption":{"properties":{"cell":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableCellConditionalFormatting","description":"The cell conditional formatting option for a pivot table."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableConditionalFormattingScope":{"properties":{"role":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableConditionalFormattingScopeRole","description":"The role (field, field total, grand total) of the cell for conditional formatting."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableConditionalFormattingScopeRole":{"type":"string","enum":[{"name":"Field","value":"FIELD"},{"name":"FieldTotal","value":"FIELD_TOTAL"},{"name":"GrandTotal","value":"GRAND_TOTAL"}]},"aws-native:quicksight:DashboardPivotTableConfiguration":{"properties":{"fieldOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldOptions","description":"The field options for a pivot table visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"paginatedReportOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTablePaginatedReportOptions","description":"The paginated report options for a pivot table visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableSortConfiguration","description":"The sort configuration for a `PivotTableVisual` ."},"tableOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableOptions","description":"The table options for a pivot table visual."},"totalOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableTotalOptions","description":"The total options for a pivot table visual."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableDataPathOption":{"properties":{"dataPathList":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathValue"},"description":"The list of data path values for the data path options."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["dataPathList"]},"aws-native:quicksight:DashboardPivotTableDataPathType":{"type":"string","enum":[{"name":"HierarchyRowsLayoutColumn","value":"HIERARCHY_ROWS_LAYOUT_COLUMN"},{"name":"MultipleRowMetricsColumn","value":"MULTIPLE_ROW_METRICS_COLUMN"},{"name":"EmptyColumnHeader","value":"EMPTY_COLUMN_HEADER"},{"name":"CountMetricColumn","value":"COUNT_METRIC_COLUMN"}]},"aws-native:quicksight:DashboardPivotTableFieldCollapseState":{"type":"string","enum":[{"name":"Collapsed","value":"COLLAPSED"},{"name":"Expanded","value":"EXPANDED"}]},"aws-native:quicksight:DashboardPivotTableFieldCollapseStateOption":{"properties":{"state":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldCollapseState","description":"The state of the field target of a pivot table. Choose one of the following options:\n\n- `COLLAPSED`\n- `EXPANDED`"},"target":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldCollapseStateTarget","description":"A tagged-union object that sets the collapse state."}},"type":"object","required":["target"]},"aws-native:quicksight:DashboardPivotTableFieldCollapseStateTarget":{"properties":{"fieldDataPathValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathValue"},"description":"The data path of the pivot table's header. Used to set the collapse state."},"fieldId":{"type":"string","description":"The field ID of the pivot table that the collapse state needs to be set to."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableFieldOption":{"properties":{"customLabel":{"type":"string","description":"The custom label of the pivot table field."},"fieldId":{"type":"string","description":"The field ID of the pivot table field."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the pivot table field."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardPivotTableFieldOptions":{"properties":{"collapseStateOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldCollapseStateOption"},"description":"The collapse state options for the pivot table field options."},"dataPathOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableDataPathOption"},"description":"The data path options for the pivot table field options."},"selectedFieldOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldOption"},"description":"The selected field options for the pivot table field options."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableFieldSubtotalOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID of the subtotal options."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableFieldWells":{"properties":{"pivotTableAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableAggregatedFieldWells","description":"The aggregated field well for the pivot table."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableMetricPlacement":{"type":"string","enum":[{"name":"Row","value":"ROW"},{"name":"Column","value":"COLUMN"}]},"aws-native:quicksight:DashboardPivotTableOptions":{"properties":{"cellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The table cell style of cells."},"collapsedRowDimensionsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility setting of a pivot table's collapsed row dimension fields. If the value of this structure is `HIDDEN` , all collapsed columns in a pivot table are automatically hidden. The default value is `VISIBLE` ."},"columnHeaderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The table cell style of the column header."},"columnNamesVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the column names."},"defaultCellWidth":{"type":"string","description":"String based length that is composed of value and unit in px"},"metricPlacement":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableMetricPlacement","description":"The metric placement (row, column) options."},"rowAlternateColorOptions":{"$ref":"#/types/aws-native:quicksight:DashboardRowAlternateColorOptions","description":"The row alternate color options (widget status, row alternate colors)."},"rowFieldNamesStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The table cell style of row field names."},"rowHeaderStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The table cell style of the row headers."},"rowsLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableRowsLabelOptions","description":"The options for the label that is located above the row headers. This option is only applicable when `RowsLayout` is set to `HIERARCHY` ."},"rowsLayout":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableRowsLayout","description":"The layout for the row dimension headers of a pivot table. Choose one of the following options.\n\n- `TABULAR` : (Default) Each row field is displayed in a separate column.\n- `HIERARCHY` : All row fields are displayed in a single column. Indentation is used to differentiate row headers of different fields."},"singleMetricVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the single metric options."},"toggleButtonsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the pivot table."}},"type":"object"},"aws-native:quicksight:DashboardPivotTablePaginatedReportOptions":{"properties":{"overflowColumnHeaderVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the repeating header rows on each page."},"verticalOverflowVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the printing table overflow across pages."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableRowsLabelOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the rows label."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the rows label."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableRowsLayout":{"type":"string","enum":[{"name":"Tabular","value":"TABULAR"},{"name":"Hierarchy","value":"HIERARCHY"}]},"aws-native:quicksight:DashboardPivotTableSortBy":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnSort","description":"The column sort (field id, direction) for the pivot table sort by options."},"dataPath":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathSort","description":"The data path sort (data path value, direction) for the pivot table sort by options."},"field":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSort","description":"The field sort (field id, direction) for the pivot table sort by options."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableSortConfiguration":{"properties":{"fieldSortOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotFieldSortOptions"},"description":"The field sort options for a pivot table sort configuration."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableSubtotalLevel":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Custom","value":"CUSTOM"},{"name":"Last","value":"LAST"}]},"aws-native:quicksight:DashboardPivotTableTotalOptions":{"properties":{"columnSubtotalOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSubtotalOptions","description":"The column subtotal options."},"columnTotalOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTotalOptions","description":"The column total options."},"rowSubtotalOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSubtotalOptions","description":"The row subtotal options."},"rowTotalOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTotalOptions","description":"The row total options."}},"type":"object"},"aws-native:quicksight:DashboardPivotTableVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableConfiguration","description":"The configuration settings of the visual."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableConditionalFormatting","description":"The conditional formatting for a `PivotTableVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardPivotTotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the total cells."},"metricHeaderCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The cell styling options for the total of header cells."},"placement":{"$ref":"#/types/aws-native:quicksight:DashboardTableTotalsPlacement","description":"The placement (start, end) for the total cells."},"scrollStatus":{"$ref":"#/types/aws-native:quicksight:DashboardTableTotalsScrollStatus","description":"The scroll status (pinned, scrolled) for the total cells."},"totalAggregationOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTotalAggregationOption"},"description":"The total aggregation options for each value field."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The cell styling options for the total cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration for the total cells."},"valueCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The cell styling options for the totals of value cells."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisual":{"properties":{"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualConfiguration","description":"A description of the plugin field wells and their persisted properties."},"pluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) that reflects the plugin and version."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions"},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions"},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The ID of the visual that you want to use."}},"type":"object","required":["pluginArn","visualId"]},"aws-native:quicksight:DashboardPluginVisualAxisName":{"type":"string","enum":[{"name":"GroupBy","value":"GROUP_BY"},{"name":"Value","value":"VALUE"}]},"aws-native:quicksight:DashboardPluginVisualConfiguration":{"properties":{"fieldWells":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualFieldWell"},"description":"The field wells configuration of the plugin visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualSortConfiguration","description":"The sort configuration of the plugin visual."},"visualOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualOptions","description":"The persisted properties of the plugin visual."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisualFieldWell":{"properties":{"axisName":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualAxisName","description":"The semantic axis name for the field well."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"A list of dimensions for the field well."},"measures":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"A list of measures that exist in the field well."},"unaggregated":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardUnaggregatedField"},"description":"A list of unaggregated fields that exist in the field well."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisualItemsLimitConfiguration":{"properties":{"itemsLimit":{"type":"number","description":"Determines how many values are be fetched at once."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisualOptions":{"properties":{"visualProperties":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualProperty"},"description":"The persisted properties and their values."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisualProperty":{"properties":{"name":{"type":"string","description":"The name of the plugin visual property."},"value":{"type":"string","description":"The value of the plugin visual property."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisualSortConfiguration":{"properties":{"pluginVisualTableQuerySort":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualTableQuerySort","description":"The table query sorting options for the plugin visual."}},"type":"object"},"aws-native:quicksight:DashboardPluginVisualTableQuerySort":{"properties":{"itemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisualItemsLimitConfiguration","description":"The maximum amount of data to be returned by a query."},"rowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"Determines how data is sorted in the response."}},"type":"object"},"aws-native:quicksight:DashboardPredefinedHierarchy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier"},"description":"The list of columns that define the predefined hierarchy."},"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDrillDownFilter"},"description":"The option that determines the drill down filters for the predefined hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the predefined hierarchy."}},"type":"object","required":["columns","hierarchyId"]},"aws-native:quicksight:DashboardPrimaryValueDisplayType":{"type":"string","enum":[{"name":"Hidden","value":"HIDDEN"},{"name":"Comparison","value":"COMPARISON"},{"name":"Actual","value":"ACTUAL"}]},"aws-native:quicksight:DashboardProgressBarOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the progress bar."}},"type":"object"},"aws-native:quicksight:DashboardPublishOptions":{"description":"\u003cp\u003eDashboard publish options.\u003c/p\u003e","properties":{"adHocFilteringOption":{"$ref":"#/types/aws-native:quicksight:DashboardAdHocFilteringOption","description":"Ad hoc (one-time) filtering option."},"dataPointDrillUpDownOption":{"$ref":"#/types/aws-native:quicksight:DashboardDataPointDrillUpDownOption","description":"The drill-down options of data points in a dashboard."},"dataPointMenuLabelOption":{"$ref":"#/types/aws-native:quicksight:DashboardDataPointMenuLabelOption","description":"The data point menu label options of a dashboard."},"dataPointTooltipOption":{"$ref":"#/types/aws-native:quicksight:DashboardDataPointTooltipOption","description":"The data point tool tip options of a dashboard."},"dataQaEnabledOption":{"$ref":"#/types/aws-native:quicksight:DashboardDataQaEnabledOption","description":"Adds Q\u0026A capabilities to an Quick Sight dashboard. If no topic is linked, Dashboard Q\u0026A uses the data values that are rendered on the dashboard. End users can use Dashboard Q\u0026A to ask for different slices of the data that they see on the dashboard. If a topic is linked, Topic Q\u0026A is used."},"dataStoriesSharingOption":{"$ref":"#/types/aws-native:quicksight:DashboardDataStoriesSharingOption","description":"Data stories sharing option."},"executiveSummaryOption":{"$ref":"#/types/aws-native:quicksight:DashboardExecutiveSummaryOption","description":"Executive summary option."},"exportToCsvOption":{"$ref":"#/types/aws-native:quicksight:DashboardExportToCsvOption","description":"Export to .csv option."},"exportWithHiddenFieldsOption":{"$ref":"#/types/aws-native:quicksight:DashboardExportWithHiddenFieldsOption","description":"Determines if hidden fields are exported with a dashboard."},"quickSuiteActionsOption":{"$ref":"#/types/aws-native:quicksight:DashboardQuickSuiteActionsOption","description":"Determines if Actions in Amazon Quick Suite are enabled in a dashboard."},"sheetControlsOption":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlsOption","description":"Sheet controls option."},"sheetLayoutElementMaximizationOption":{"$ref":"#/types/aws-native:quicksight:DashboardSheetLayoutElementMaximizationOption","description":"The sheet layout maximization options of a dashbaord."},"visualAxisSortOption":{"$ref":"#/types/aws-native:quicksight:DashboardVisualAxisSortOption","description":"The axis sort options of a dashboard."},"visualMenuOption":{"$ref":"#/types/aws-native:quicksight:DashboardVisualMenuOption","description":"The menu options of a visual in a dashboard."},"visualPublishOptions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPublishOptions","description":"The visual publish options of a visual in a dashboard."}},"type":"object"},"aws-native:quicksight:DashboardQBusinessInsightsStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DashboardQuickSuiteActionsOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"Availability status."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The aggregated field well categories of a radar chart."},"color":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The color that are assigned to the aggregated field wells of a radar chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The values that are assigned to the aggregated field wells of a radar chart."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartAreaStyleSettings":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility settings of a radar chart."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartAxesRangeScale":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Independent","value":"INDEPENDENT"},{"name":"Shared","value":"SHARED"}]},"aws-native:quicksight:DashboardRadarChartConfiguration":{"properties":{"alternateBandColorsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the colors of alternatign bands in a radar chart."},"alternateBandEvenColor":{"type":"string","description":"The color of the even-numbered alternate bands of a radar chart."},"alternateBandOddColor":{"type":"string","description":"The color of the odd-numbered alternate bands of a radar chart."},"axesRangeScale":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartAxesRangeScale","description":"The axis behavior options of a radar chart."},"baseSeriesSettings":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartSeriesSettings","description":"The base sreies settings of a radar chart."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The category axis of a radar chart."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The category label options of a radar chart."},"colorAxis":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The color axis of a radar chart."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The color label options of a radar chart."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartFieldWells","description":"The field well configuration of a `RadarChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"shape":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartShape","description":"The shape of the radar chart."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartSortConfiguration","description":"The sort configuration of a `RadarChartVisual` ."},"startAngle":{"type":"number","description":"The start angle of a radar chart's axis."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartFieldWells":{"properties":{"radarChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartAggregatedFieldWells","description":"The aggregated field wells of a radar chart visual."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartSeriesSettings":{"properties":{"areaStyleSettings":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartAreaStyleSettings","description":"The area style settings of a radar chart."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartShape":{"type":"string","enum":[{"name":"Circle","value":"CIRCLE"},{"name":"Polygon","value":"POLYGON"}]},"aws-native:quicksight:DashboardRadarChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The category items limit for a radar chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The category sort options of a radar chart."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The color items limit of a radar chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The color sort configuration of a radar chart."}},"type":"object"},"aws-native:quicksight:DashboardRadarChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardRangeEndsLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the range ends label."}},"type":"object"},"aws-native:quicksight:DashboardReferenceLine":{"properties":{"dataConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineDataConfiguration","description":"The data configuration of the reference line."},"labelConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineLabelConfiguration","description":"The label configuration of the reference line."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The status of the reference line. Choose one of the following options:\n\n- `ENABLE`\n- `DISABLE`"},"styleConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineStyleConfiguration","description":"The style configuration of the reference line."}},"type":"object","required":["dataConfiguration"]},"aws-native:quicksight:DashboardReferenceLineCustomLabelConfiguration":{"properties":{"customLabel":{"type":"string","description":"The string text of the custom label."}},"type":"object","required":["customLabel"]},"aws-native:quicksight:DashboardReferenceLineDataConfiguration":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:DashboardAxisBinding","description":"The axis binding type of the reference line. Choose one of the following options:\n\n- `PrimaryY`\n- `SecondaryY`"},"dynamicConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineDynamicDataConfiguration","description":"The dynamic configuration of the reference line data configuration."},"seriesType":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineSeriesType","description":"The series type of the reference line data configuration. Choose one of the following options:\n\n- `BAR`\n- `LINE`"},"staticConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineStaticDataConfiguration","description":"The static data configuration of the reference line data configuration."}},"type":"object"},"aws-native:quicksight:DashboardReferenceLineDynamicDataConfiguration":{"properties":{"calculation":{"$ref":"#/types/aws-native:quicksight:DashboardNumericalAggregationFunction","description":"The calculation that is used in the dynamic data."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the dynamic data targets."},"measureAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationFunction","description":"The aggregation function that is used in the dynamic data."}},"type":"object","required":["calculation","column"]},"aws-native:quicksight:DashboardReferenceLineLabelConfiguration":{"properties":{"customLabelConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineCustomLabelConfiguration","description":"The custom label configuration of the label in a reference line."},"fontColor":{"type":"string","description":"The font color configuration of the label in a reference line."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The font configuration of the label in a reference line."},"horizontalPosition":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineLabelHorizontalPosition","description":"The horizontal position configuration of the label in a reference line. Choose one of the following options:\n\n- `LEFT`\n- `CENTER`\n- `RIGHT`"},"valueLabelConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineValueLabelConfiguration","description":"The value label configuration of the label in a reference line."},"verticalPosition":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineLabelVerticalPosition","description":"The vertical position configuration of the label in a reference line. Choose one of the following options:\n\n- `ABOVE`\n- `BELOW`"}},"type":"object"},"aws-native:quicksight:DashboardReferenceLineLabelHorizontalPosition":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:DashboardReferenceLineLabelVerticalPosition":{"type":"string","enum":[{"name":"Above","value":"ABOVE"},{"name":"Below","value":"BELOW"}]},"aws-native:quicksight:DashboardReferenceLinePatternType":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dashed","value":"DASHED"},{"name":"Dotted","value":"DOTTED"}]},"aws-native:quicksight:DashboardReferenceLineSeriesType":{"type":"string","enum":[{"name":"Bar","value":"BAR"},{"name":"Line","value":"LINE"}]},"aws-native:quicksight:DashboardReferenceLineStaticDataConfiguration":{"properties":{"value":{"type":"number","description":"The double input of the static data."}},"type":"object","required":["value"]},"aws-native:quicksight:DashboardReferenceLineStyleConfiguration":{"properties":{"color":{"type":"string","description":"The hex color of the reference line."},"pattern":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLinePatternType","description":"The pattern type of the line style. Choose one of the following options:\n\n- `SOLID`\n- `DASHED`\n- `DOTTED`"}},"type":"object"},"aws-native:quicksight:DashboardReferenceLineValueLabelConfiguration":{"properties":{"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericFormatConfiguration","description":"The format configuration of the value label."},"relativePosition":{"$ref":"#/types/aws-native:quicksight:DashboardReferenceLineValueLabelRelativePosition","description":"The relative position of the value label. Choose one of the following options:\n\n- `BEFORE_CUSTOM_LABEL`\n- `AFTER_CUSTOM_LABEL`"}},"type":"object"},"aws-native:quicksight:DashboardReferenceLineValueLabelRelativePosition":{"type":"string","enum":[{"name":"BeforeCustomLabel","value":"BEFORE_CUSTOM_LABEL"},{"name":"AfterCustomLabel","value":"AFTER_CUSTOM_LABEL"}]},"aws-native:quicksight:DashboardRelativeDateTimeControlDisplayOptions":{"properties":{"dateTimeFormat":{"type":"string","description":"Customize how dates are formatted in controls."},"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardRelativeDateType":{"type":"string","enum":[{"name":"Previous","value":"PREVIOUS"},{"name":"This","value":"THIS"},{"name":"Last","value":"LAST"},{"name":"Now","value":"NOW"},{"name":"Next","value":"NEXT"}]},"aws-native:quicksight:DashboardRelativeDatesFilter":{"properties":{"anchorDateConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardAnchorDateConfiguration","description":"The date configuration of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"excludePeriodConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardExcludePeriodConfiguration","description":"The configuration for the exclude period of the filter."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"minimumGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The minimum granularity (period granularity) of the relative dates filter."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"relativeDateType":{"$ref":"#/types/aws-native:quicksight:DashboardRelativeDateType","description":"The range date type of the filter. Choose one of the options below:\n\n- `PREVIOUS`\n- `THIS`\n- `LAST`\n- `NOW`\n- `NEXT`"},"relativeDateValue":{"type":"number","description":"The date value of the filter."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["anchorDateConfiguration","column","filterId","nullOption","relativeDateType","timeGranularity"]},"aws-native:quicksight:DashboardRelativeFontSize":{"type":"string","enum":[{"name":"ExtraSmall","value":"EXTRA_SMALL"},{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"ExtraLarge","value":"EXTRA_LARGE"}]},"aws-native:quicksight:DashboardResizeOption":{"type":"string","enum":[{"name":"Fixed","value":"FIXED"},{"name":"Responsive","value":"RESPONSIVE"}]},"aws-native:quicksight:DashboardResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:DashboardResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:quicksight:DashboardRollingDateConfiguration":{"properties":{"dataSetIdentifier":{"type":"string","description":"The data set that is used in the rolling date configuration."},"expression":{"type":"string","description":"The expression of the rolling date configuration."}},"type":"object","required":["expression"]},"aws-native:quicksight:DashboardRowAlternateColorOptions":{"properties":{"rowAlternateColors":{"type":"array","items":{"type":"string"},"description":"Determines the list of row alternate colors."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"Determines the widget status."},"usePrimaryBackgroundColor":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The primary background color options for alternate rows."}},"type":"object"},"aws-native:quicksight:DashboardSameSheetTargetVisualConfiguration":{"properties":{"targetVisualOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTargetVisualOptions","description":"The options that choose the target visual in the same sheet.\n\nValid values are defined as follows:\n\n- `ALL_VISUALS` : Applies the filter operation to all visuals in the same sheet."},"targetVisuals":{"type":"array","items":{"type":"string"},"description":"A list of the target visual IDs that are located in the same sheet of the analysis."}},"type":"object"},"aws-native:quicksight:DashboardSankeyDiagramAggregatedFieldWells":{"properties":{"destination":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The destination field wells of a sankey diagram."},"source":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The source field wells of a sankey diagram."},"weight":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The weight field wells of a sankey diagram."}},"type":"object"},"aws-native:quicksight:DashboardSankeyDiagramChartConfiguration":{"properties":{"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The data label configuration of a sankey diagram."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardSankeyDiagramFieldWells","description":"The field well configuration of a sankey diagram."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardSankeyDiagramSortConfiguration","description":"The sort configuration of a sankey diagram."}},"type":"object"},"aws-native:quicksight:DashboardSankeyDiagramFieldWells":{"properties":{"sankeyDiagramAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardSankeyDiagramAggregatedFieldWells","description":"The field well configuration of a sankey diagram."}},"type":"object"},"aws-native:quicksight:DashboardSankeyDiagramSortConfiguration":{"properties":{"destinationItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of destination nodes that are displayed in a sankey diagram."},"sourceItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of source nodes that are displayed in a sankey diagram."},"weightSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the weight fields."}},"type":"object"},"aws-native:quicksight:DashboardSankeyDiagramVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardSankeyDiagramChartConfiguration","description":"The configuration of a sankey diagram."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardScatterPlotCategoricallyAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category field well of a scatter plot."},"label":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The label field well of a scatter plot."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The size field well of a scatter plot."},"xAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The x-axis field well of a scatter plot.\n\nThe x-axis is aggregated by category."},"yAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The y-axis field well of a scatter plot.\n\nThe y-axis is aggregated by category."}},"type":"object"},"aws-native:quicksight:DashboardScatterPlotConfiguration":{"properties":{"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardScatterPlotFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardScatterPlotSortConfiguration","description":"The sort configuration of a scatter plot."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The legend display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The palette (chart color) display setup of the visual."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of the scatter plot's x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of the scatter plot's x-axis."},"yAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of the scatter plot's y-axis."},"yAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of the scatter plot's y-axis."}},"type":"object"},"aws-native:quicksight:DashboardScatterPlotFieldWells":{"properties":{"scatterPlotCategoricallyAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardScatterPlotCategoricallyAggregatedFieldWells","description":"The aggregated field wells of a scatter plot. The x and y-axes of scatter plots with aggregated field wells are aggregated by category, label, or both."},"scatterPlotUnaggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardScatterPlotUnaggregatedFieldWells","description":"The unaggregated field wells of a scatter plot. The x and y-axes of these scatter plots are unaggregated."}},"type":"object"},"aws-native:quicksight:DashboardScatterPlotSortConfiguration":{"properties":{"scatterPlotLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration"}},"type":"object"},"aws-native:quicksight:DashboardScatterPlotUnaggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category field well of a scatter plot."},"label":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The label field well of a scatter plot."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The size field well of a scatter plot."},"xAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The x-axis field well of a scatter plot.\n\nThe x-axis is a dimension field and cannot be aggregated."},"yAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The y-axis field well of a scatter plot.\n\nThe y-axis is a dimension field and cannot be aggregated."}},"type":"object"},"aws-native:quicksight:DashboardScatterPlotVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardScatterPlotConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardScrollBarOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the data zoom scroll bar."},"visibleRange":{"$ref":"#/types/aws-native:quicksight:DashboardVisibleRangeOptions","description":"The visibility range for the data zoom scroll bar."}},"type":"object"},"aws-native:quicksight:DashboardSecondaryValueOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the secondary value."}},"type":"object"},"aws-native:quicksight:DashboardSectionAfterPageBreak":{"properties":{"status":{"$ref":"#/types/aws-native:quicksight:DashboardSectionPageBreakStatus","description":"The option that enables or disables a page break at the end of a section."}},"type":"object"},"aws-native:quicksight:DashboardSectionBasedLayoutCanvasSizeOptions":{"properties":{"paperCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSectionBasedLayoutPaperCanvasSizeOptions","description":"The options for a paper canvas of a section-based layout."}},"type":"object"},"aws-native:quicksight:DashboardSectionBasedLayoutConfiguration":{"properties":{"bodySections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardBodySectionConfiguration"},"description":"A list of body section configurations."},"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSectionBasedLayoutCanvasSizeOptions","description":"The options for the canvas of a section-based layout."},"footerSections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardHeaderFooterSectionConfiguration"},"description":"A list of footer section configurations."},"headerSections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardHeaderFooterSectionConfiguration"},"description":"A list of header section configurations."}},"type":"object","required":["bodySections","canvasSizeOptions","footerSections","headerSections"]},"aws-native:quicksight:DashboardSectionBasedLayoutPaperCanvasSizeOptions":{"properties":{"paperMargin":{"$ref":"#/types/aws-native:quicksight:DashboardSpacing","description":"Defines the spacing between the canvas content and the top, bottom, left, and right edges."},"paperOrientation":{"$ref":"#/types/aws-native:quicksight:DashboardPaperOrientation","description":"The paper orientation that is used to define canvas dimensions. Choose one of the following options:\n\n- PORTRAIT\n- LANDSCAPE"},"paperSize":{"$ref":"#/types/aws-native:quicksight:DashboardPaperSize","description":"The paper size that is used to define canvas dimensions."}},"type":"object"},"aws-native:quicksight:DashboardSectionLayoutConfiguration":{"properties":{"freeFormLayout":{"$ref":"#/types/aws-native:quicksight:DashboardFreeFormSectionLayoutConfiguration","description":"The free-form layout configuration of a section."}},"type":"object","required":["freeFormLayout"]},"aws-native:quicksight:DashboardSectionPageBreakConfiguration":{"properties":{"after":{"$ref":"#/types/aws-native:quicksight:DashboardSectionAfterPageBreak","description":"The configuration of a page break after a section."}},"type":"object"},"aws-native:quicksight:DashboardSectionPageBreakStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DashboardSectionStyle":{"properties":{"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"padding":{"$ref":"#/types/aws-native:quicksight:DashboardSpacing","description":"The spacing between section content and its top, bottom, left, and right edges.\n\nThere is no padding by default."}},"type":"object"},"aws-native:quicksight:DashboardSelectAllValueOptions":{"type":"string","enum":[{"name":"AllValues","value":"ALL_VALUES"}]},"aws-native:quicksight:DashboardSelectedFieldOptions":{"type":"string","enum":[{"name":"AllFields","value":"ALL_FIELDS"}]},"aws-native:quicksight:DashboardSelectedSheetsFilterScopeConfiguration":{"properties":{"sheetVisualScopingConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheetVisualScopingConfiguration"},"description":"The sheet ID and visual IDs of the sheet and visuals that the filter is applied to."}},"type":"object"},"aws-native:quicksight:DashboardSelectedTooltipType":{"type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Detailed","value":"DETAILED"}]},"aws-native:quicksight:DashboardSeriesItem":{"properties":{"dataFieldSeriesItem":{"$ref":"#/types/aws-native:quicksight:DashboardDataFieldSeriesItem","description":"The data field series item configuration of a line chart."},"fieldSeriesItem":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSeriesItem","description":"The field series item configuration of a line chart."}},"type":"object"},"aws-native:quicksight:DashboardSetParameterValueConfiguration":{"properties":{"destinationParameterName":{"type":"string","description":"The destination parameter name of the `SetParameterValueConfiguration` ."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardDestinationParameterValueConfiguration"}},"type":"object","required":["destinationParameterName","value"]},"aws-native:quicksight:DashboardShapeConditionalFormat":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting for the shape background color of a filled map visual."}},"type":"object","required":["backgroundColor"]},"aws-native:quicksight:DashboardSheet":{"description":"\u003cp\u003eA \u003ci\u003esheet\u003c/i\u003e, which is an object that contains a set of visuals that\n            are viewed together on one page in Amazon QuickSight. Every analysis and dashboard\n            contains at least one sheet. Each sheet contains at least one visualization widget, for\n            example a chart, pivot table, or narrative insight. Sheets can be associated with other\n            components, such as controls, filters, and so on.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eThe name of a sheet. This name is displayed on the sheet's tab in the Amazon QuickSight\n            console.\u003c/p\u003e"},"sheetId":{"type":"string","description":"\u003cp\u003eThe unique identifier associated with a sheet.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DashboardSheetContentType":{"type":"string","enum":[{"name":"Paginated","value":"PAGINATED"},{"name":"Interactive","value":"INTERACTIVE"}]},"aws-native:quicksight:DashboardSheetControlDateTimePickerType":{"type":"string","enum":[{"name":"SingleValued","value":"SINGLE_VALUED"},{"name":"DateRange","value":"DATE_RANGE"}]},"aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions":{"properties":{"infoIconText":{"type":"string","description":"The text content of info icon."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration of info icon label options."}},"type":"object"},"aws-native:quicksight:DashboardSheetControlLayout":{"properties":{"configuration":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlLayoutConfiguration","description":"The configuration that determines the elements and canvas size options of sheet control."}},"type":"object","required":["configuration"]},"aws-native:quicksight:DashboardSheetControlLayoutConfiguration":{"properties":{"gridLayout":{"$ref":"#/types/aws-native:quicksight:DashboardGridLayoutConfiguration","description":"The configuration that determines the elements and canvas size options of sheet control."}},"type":"object"},"aws-native:quicksight:DashboardSheetControlListType":{"type":"string","enum":[{"name":"MultiSelect","value":"MULTI_SELECT"},{"name":"SingleSelect","value":"SINGLE_SELECT"}]},"aws-native:quicksight:DashboardSheetControlSliderType":{"type":"string","enum":[{"name":"SinglePoint","value":"SINGLE_POINT"},{"name":"Range","value":"RANGE"}]},"aws-native:quicksight:DashboardSheetControlsOption":{"description":"\u003cp\u003eSheet controls option.\u003c/p\u003e","properties":{"visibilityState":{"$ref":"#/types/aws-native:quicksight:DashboardUiState","description":"Visibility state."}},"type":"object"},"aws-native:quicksight:DashboardSheetDefinition":{"properties":{"contentType":{"$ref":"#/types/aws-native:quicksight:DashboardSheetContentType","description":"The layout content type of the sheet. Choose one of the following options:\n\n- `PAGINATED` : Creates a sheet for a paginated report.\n- `INTERACTIVE` : Creates a sheet for an interactive dashboard."},"description":{"type":"string","description":"A description of the sheet."},"filterControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFilterControl"},"description":"The list of filter controls that are on a sheet.\n\nFor more information, see [Adding filter controls to analysis sheets](https://docs.aws.amazon.com/quicksight/latest/user/filter-controls.html) in the *Amazon Quick Suite User Guide* ."},"images":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImage"},"description":"A list of images on a sheet."},"layouts":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardLayout"},"description":"Layouts define how the components of a sheet are arranged.\n\nFor more information, see [Types of layout](https://docs.aws.amazon.com/quicksight/latest/user/types-of-layout.html) in the *Amazon Quick Suite User Guide* ."},"name":{"type":"string","description":"The name of the sheet. This name is displayed on the sheet's tab in the Quick Suite console."},"parameterControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardParameterControl"},"description":"The list of parameter controls that are on a sheet.\n\nFor more information, see [Using a Control with a Parameter in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/parameters-controls.html) in the *Amazon Quick Suite User Guide* ."},"sheetControlLayouts":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlLayout"},"description":"The control layouts of the sheet."},"sheetId":{"type":"string","description":"The unique identifier of a sheet."},"textBoxes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheetTextBox"},"description":"The text boxes that are on a sheet."},"title":{"type":"string","description":"The title of the sheet."},"visuals":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisual"},"description":"A list of the visuals that are on a sheet. Visual placement is determined by the layout of the sheet."}},"type":"object","required":["sheetId"]},"aws-native:quicksight:DashboardSheetElementConfigurationOverrides":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not the overrides are visible. Choose one of the following options:\n\n- `VISIBLE`\n- `HIDDEN`"}},"type":"object"},"aws-native:quicksight:DashboardSheetElementRenderingRule":{"properties":{"configurationOverrides":{"$ref":"#/types/aws-native:quicksight:DashboardSheetElementConfigurationOverrides","description":"The override configuration of the rendering rules of a sheet."},"expression":{"type":"string","description":"The expression of the rendering rules of a sheet."}},"type":"object","required":["configurationOverrides","expression"]},"aws-native:quicksight:DashboardSheetImage":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardImageCustomAction"},"description":"A list of custom actions that are configured for an image."},"imageContentAltText":{"type":"string","description":"The alt text for the image."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardImageInteractionOptions","description":"The general image interactions setup for an image."},"scaling":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImageScalingConfiguration","description":"Determines how the image is scaled."},"sheetImageId":{"type":"string","description":"The ID of the sheet image."},"source":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImageSource","description":"The source of the image."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImageTooltipConfiguration","description":"The tooltip to be shown when hovering over the image."}},"type":"object","required":["sheetImageId","source"]},"aws-native:quicksight:DashboardSheetImageScalingConfiguration":{"properties":{"scalingType":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImageScalingType","description":"The scaling option to use when fitting the image inside the container.\n\nValid values are defined as follows:\n\n- `SCALE_TO_WIDTH` : The image takes up the entire width of the container. The image aspect ratio is preserved.\n- `SCALE_TO_HEIGHT` : The image takes up the entire height of the container. The image aspect ratio is preserved.\n- `SCALE_TO_CONTAINER` : The image takes up the entire width and height of the container. The image aspect ratio is not preserved.\n- `SCALE_NONE` : The image is displayed in its original size and is not scaled to the container."}},"type":"object"},"aws-native:quicksight:DashboardSheetImageScalingType":{"type":"string","enum":[{"name":"ScaleToWidth","value":"SCALE_TO_WIDTH"},{"name":"ScaleToHeight","value":"SCALE_TO_HEIGHT"},{"name":"ScaleToContainer","value":"SCALE_TO_CONTAINER"},{"name":"ScaleNone","value":"SCALE_NONE"}]},"aws-native:quicksight:DashboardSheetImageSource":{"properties":{"sheetImageStaticFileSource":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImageStaticFileSource","description":"The source of the static file that contains the image."}},"type":"object"},"aws-native:quicksight:DashboardSheetImageStaticFileSource":{"properties":{"staticFileId":{"type":"string","description":"The ID of the static file that contains the image."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:DashboardSheetImageTooltipConfiguration":{"properties":{"tooltipText":{"$ref":"#/types/aws-native:quicksight:DashboardSheetImageTooltipText","description":"The text that appears in the tooltip."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the tooltip."}},"type":"object"},"aws-native:quicksight:DashboardSheetImageTooltipText":{"properties":{"plainText":{"type":"string","description":"The plain text format."}},"type":"object"},"aws-native:quicksight:DashboardSheetLayoutElementMaximizationOption":{"description":"\u003cp\u003eThe sheet layout maximization options of a dashbaord.\u003c/p\u003e","properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The status of the sheet layout maximization options of a dashbaord."}},"type":"object"},"aws-native:quicksight:DashboardSheetTextBox":{"properties":{"content":{"type":"string","description":"The content that is displayed in the text box."},"sheetTextBoxId":{"type":"string","description":"The unique identifier for a text box. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have text boxes that share identifiers."}},"type":"object","required":["sheetTextBoxId"]},"aws-native:quicksight:DashboardSheetVisualScopingConfiguration":{"properties":{"scope":{"$ref":"#/types/aws-native:quicksight:DashboardFilterVisualScope","description":"The scope of the applied entities. Choose one of the following options:\n\n- `ALL_VISUALS`\n- `SELECTED_VISUALS`"},"sheetId":{"type":"string","description":"The selected sheet that the filter is applied to."},"visualIds":{"type":"array","items":{"type":"string"},"description":"The selected visuals that the filter is applied to."}},"type":"object","required":["scope","sheetId"]},"aws-native:quicksight:DashboardShortFormatText":{"properties":{"plainText":{"type":"string","description":"Plain text format."},"richText":{"type":"string","description":"Rich text. Examples of rich text include bold, underline, and italics."}},"type":"object"},"aws-native:quicksight:DashboardSimpleAttributeAggregationFunction":{"type":"string","enum":[{"name":"UniqueValue","value":"UNIQUE_VALUE"}]},"aws-native:quicksight:DashboardSimpleClusterMarker":{"properties":{"color":{"type":"string","description":"The color of the simple cluster marker."}},"type":"object"},"aws-native:quicksight:DashboardSimpleNumericalAggregationFunction":{"type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Median","value":"MEDIAN"}]},"aws-native:quicksight:DashboardSimpleTotalAggregationFunction":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"None","value":"NONE"}]},"aws-native:quicksight:DashboardSingleAxisOptions":{"properties":{"yAxisOptions":{"$ref":"#/types/aws-native:quicksight:DashboardYAxisOptions","description":"The Y axis options of a single axis configuration."}},"type":"object"},"aws-native:quicksight:DashboardSingleYAxisOption":{"type":"string","enum":[{"name":"PrimaryYAxis","value":"PRIMARY_Y_AXIS"}]},"aws-native:quicksight:DashboardSliderControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardSmallMultiplesAxisPlacement":{"type":"string","enum":[{"name":"Outside","value":"OUTSIDE"},{"name":"Inside","value":"INSIDE"}]},"aws-native:quicksight:DashboardSmallMultiplesAxisProperties":{"properties":{"placement":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesAxisPlacement","description":"Defines the placement of the axis. By default, axes are rendered `OUTSIDE` of the panels. Axes with `INDEPENDENT` scale are rendered `INSIDE` the panels."},"scale":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesAxisScale","description":"Determines whether scale of the axes are shared or independent. The default value is `SHARED` ."}},"type":"object"},"aws-native:quicksight:DashboardSmallMultiplesAxisScale":{"type":"string","enum":[{"name":"Shared","value":"SHARED"},{"name":"Independent","value":"INDEPENDENT"}]},"aws-native:quicksight:DashboardSmallMultiplesOptions":{"properties":{"maxVisibleColumns":{"type":"number","description":"Sets the maximum number of visible columns to display in the grid of small multiples panels.\n\nThe default is `Auto` , which automatically adjusts the columns in the grid to fit the overall layout and size of the given chart."},"maxVisibleRows":{"type":"number","description":"Sets the maximum number of visible rows to display in the grid of small multiples panels.\n\nThe default value is `Auto` , which automatically adjusts the rows in the grid to fit the overall layout and size of the given chart."},"panelConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPanelConfiguration","description":"Configures the display options for each small multiples panel."},"xAxis":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesAxisProperties","description":"The properties of a small multiples X axis."},"yAxis":{"$ref":"#/types/aws-native:quicksight:DashboardSmallMultiplesAxisProperties","description":"The properties of a small multiples Y axis."}},"type":"object"},"aws-native:quicksight:DashboardSortDirection":{"type":"string","enum":[{"name":"Asc","value":"ASC"},{"name":"Desc","value":"DESC"}]},"aws-native:quicksight:DashboardSourceEntity":{"description":"\u003cp\u003eDashboard source entity.\u003c/p\u003e","properties":{"sourceTemplate":{"$ref":"#/types/aws-native:quicksight:DashboardSourceTemplate","description":"Source template."}},"type":"object"},"aws-native:quicksight:DashboardSourceTemplate":{"description":"\u003cp\u003eDashboard source template.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"},"dataSetReferences":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataSetReference"},"description":"\u003cp\u003eDataset references.\u003c/p\u003e"}},"type":"object","required":["arn","dataSetReferences"]},"aws-native:quicksight:DashboardSpacing":{"properties":{"bottom":{"type":"string","description":"String based length that is composed of value and unit"},"left":{"type":"string","description":"String based length that is composed of value and unit"},"right":{"type":"string","description":"String based length that is composed of value and unit"},"top":{"type":"string","description":"String based length that is composed of value and unit"}},"type":"object"},"aws-native:quicksight:DashboardSpatialStaticFile":{"properties":{"source":{"$ref":"#/types/aws-native:quicksight:DashboardStaticFileSource","description":"The source of the spatial static file."},"staticFileId":{"type":"string","description":"The ID of the spatial static file."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:DashboardSpecialValue":{"type":"string","enum":[{"name":"Empty","value":"EMPTY"},{"name":"Null","value":"NULL"},{"name":"Other","value":"OTHER"}]},"aws-native:quicksight:DashboardStaticFile":{"properties":{"imageStaticFile":{"$ref":"#/types/aws-native:quicksight:DashboardImageStaticFile","description":"The image static file."},"spatialStaticFile":{"$ref":"#/types/aws-native:quicksight:DashboardSpatialStaticFile","description":"The spacial static file."}},"type":"object"},"aws-native:quicksight:DashboardStaticFileS3SourceOptions":{"properties":{"bucketName":{"type":"string","description":"The name of the Amazon S3 bucket."},"objectKey":{"type":"string","description":"The identifier of the static file in the Amazon S3 bucket."},"region":{"type":"string","description":"The Region of the Amazon S3 account that contains the bucket."}},"type":"object","required":["bucketName","objectKey","region"]},"aws-native:quicksight:DashboardStaticFileSource":{"properties":{"s3Options":{"$ref":"#/types/aws-native:quicksight:DashboardStaticFileS3SourceOptions","description":"The structure that contains the Amazon S3 location to download the static file from."},"urlOptions":{"$ref":"#/types/aws-native:quicksight:DashboardStaticFileUrlSourceOptions","description":"The structure that contains the URL to download the static file from."}},"type":"object"},"aws-native:quicksight:DashboardStaticFileUrlSourceOptions":{"properties":{"url":{"type":"string","description":"The URL to download the static file from."}},"type":"object","required":["url"]},"aws-native:quicksight:DashboardStringDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:DashboardDynamicDefaultValue","description":"The dynamic value of the `StringDefaultValues` . Different defaults displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"string"},"description":"The static values of the `DecimalDefaultValues` ."}},"type":"object"},"aws-native:quicksight:DashboardStringFormatConfiguration":{"properties":{"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numericFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardNumericFormatConfiguration","description":"The formatting configuration for numeric strings."}},"type":"object"},"aws-native:quicksight:DashboardStringParameter":{"description":"\u003cp\u003eA string parameter.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eA display name for a string parameter.\u003c/p\u003e"},"values":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe values of a string parameter.\u003c/p\u003e"}},"type":"object","required":["name","values"]},"aws-native:quicksight:DashboardStringParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DashboardStringDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:DashboardParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:DashboardStringValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `String` parameter when a value has not been set."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:DashboardStringValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"string","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:DashboardValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:DashboardStyledCellType":{"type":"string","enum":[{"name":"Total","value":"TOTAL"},{"name":"MetricHeader","value":"METRIC_HEADER"},{"name":"Value","value":"VALUE"}]},"aws-native:quicksight:DashboardSubtotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the subtotal cells."},"fieldLevel":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableSubtotalLevel","description":"The field level (all, custom, last) for the subtotal cells."},"fieldLevelOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableFieldSubtotalOptions"},"description":"The optional configuration of subtotal cells."},"metricHeaderCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The cell styling options for the subtotals of header cells."},"styleTargets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTableStyleTarget"},"description":"The style targets options for subtotals."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The cell styling options for the subtotal cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration for the subtotal cells."},"valueCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The cell styling options for the subtotals of value cells."}},"type":"object"},"aws-native:quicksight:DashboardTableAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The group by field well for a pivot table. Values are grouped by group by fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The values field well for a pivot table. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:DashboardTableBorderOptions":{"properties":{"color":{"type":"string","description":"The color of a table border."},"style":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderStyle","description":"The style (none, solid) of a table border."},"thickness":{"type":"number","description":"The thickness of a table border."}},"type":"object"},"aws-native:quicksight:DashboardTableBorderStyle":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Solid","value":"SOLID"}]},"aws-native:quicksight:DashboardTableCellConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the cell for conditional formatting."},"textFormat":{"$ref":"#/types/aws-native:quicksight:DashboardTextConditionalFormat","description":"The text format of the cell for conditional formatting."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardTableCellImageScalingConfiguration":{"type":"string","enum":[{"name":"FitToCellHeight","value":"FIT_TO_CELL_HEIGHT"},{"name":"FitToCellWidth","value":"FIT_TO_CELL_WIDTH"},{"name":"DoNotScale","value":"DO_NOT_SCALE"}]},"aws-native:quicksight:DashboardTableCellImageSizingConfiguration":{"properties":{"tableCellImageScalingConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellImageScalingConfiguration","description":"The cell scaling configuration of the sizing options for the table image configuration."}},"type":"object"},"aws-native:quicksight:DashboardTableCellStyle":{"properties":{"backgroundColor":{"type":"string","description":"The background color for the table cells."},"border":{"$ref":"#/types/aws-native:quicksight:DashboardGlobalTableBorderOptions","description":"The borders for the table cells."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The font configuration of the table cells."},"height":{"type":"number","description":"The height color for the table cells."},"horizontalTextAlignment":{"$ref":"#/types/aws-native:quicksight:DashboardHorizontalTextAlignment","description":"The horizontal text alignment (left, center, right, auto) for the table cells."},"textWrap":{"$ref":"#/types/aws-native:quicksight:DashboardTextWrap","description":"The text wrap (none, wrap) for the table cells."},"verticalTextAlignment":{"$ref":"#/types/aws-native:quicksight:DashboardVerticalTextAlignment","description":"The vertical text alignment (top, middle, bottom) for the table cells."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the table cells."}},"type":"object"},"aws-native:quicksight:DashboardTableConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTableConditionalFormattingOption"},"description":"Conditional formatting options for a `PivotTableVisual` ."}},"type":"object"},"aws-native:quicksight:DashboardTableConditionalFormattingOption":{"properties":{"cell":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellConditionalFormatting","description":"The cell conditional formatting option for a table."},"row":{"$ref":"#/types/aws-native:quicksight:DashboardTableRowConditionalFormatting","description":"The row conditional formatting option for a table."}},"type":"object"},"aws-native:quicksight:DashboardTableConfiguration":{"properties":{"fieldOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldOptions","description":"The field options for a table visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"paginatedReportOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTablePaginatedReportOptions","description":"The paginated report options for a table visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTableSortConfiguration","description":"The sort configuration for a `TableVisual` ."},"tableInlineVisualizations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTableInlineVisualization"},"description":"A collection of inline visualizations to display within a chart."},"tableOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTableOptions","description":"The table options for a table visual."},"totalOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTotalOptions","description":"The total options for a table visual."}},"type":"object"},"aws-native:quicksight:DashboardTableFieldCustomIconContent":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldIconSetType","description":"The icon set type (link) of the custom icon content for table URL link content."}},"type":"object"},"aws-native:quicksight:DashboardTableFieldCustomTextContent":{"properties":{"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFontConfiguration","description":"The font configuration of the custom text content for the table URL link content."},"value":{"type":"string","description":"The string value of the custom text content for the table URL link content."}},"type":"object","required":["fontConfiguration"]},"aws-native:quicksight:DashboardTableFieldIconSetType":{"type":"string","enum":[{"name":"Link","value":"LINK"}]},"aws-native:quicksight:DashboardTableFieldImageConfiguration":{"properties":{"sizingOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellImageSizingConfiguration","description":"The sizing options for the table image configuration."}},"type":"object"},"aws-native:quicksight:DashboardTableFieldLinkConfiguration":{"properties":{"content":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldLinkContentConfiguration","description":"The URL content (text, icon) for the table link configuration."},"target":{"$ref":"#/types/aws-native:quicksight:DashboardUrlTargetConfiguration","description":"The URL target (new tab, new window, same tab) for the table link configuration."}},"type":"object","required":["content","target"]},"aws-native:quicksight:DashboardTableFieldLinkContentConfiguration":{"properties":{"customIconContent":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldCustomIconContent","description":"The custom icon content for the table link content configuration."},"customTextContent":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldCustomTextContent","description":"The custom text content (value, font configuration) for the table link content configuration."}},"type":"object"},"aws-native:quicksight:DashboardTableFieldOption":{"properties":{"customLabel":{"type":"string","description":"The custom label for a table field."},"fieldId":{"type":"string","description":"The field ID for a table field."},"urlStyling":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldUrlConfiguration","description":"The URL configuration for a table field."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of a table field."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["fieldId"]},"aws-native:quicksight:DashboardTableFieldOptions":{"properties":{"order":{"type":"array","items":{"type":"string"},"description":"The order of the field IDs that are configured as field options for a table visual."},"pinnedFieldOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTablePinnedFieldOptions","description":"The settings for the pinned columns of a table visual."},"selectedFieldOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldOption"},"description":"The field options to be configured to a table."},"transposedTableOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTransposedTableOption"},"description":"The `TableOptions` of a transposed table."}},"type":"object"},"aws-native:quicksight:DashboardTableFieldUrlConfiguration":{"properties":{"imageConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldImageConfiguration","description":"The image configuration of a table field URL."},"linkConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTableFieldLinkConfiguration","description":"The link configuration of a table field URL."}},"type":"object"},"aws-native:quicksight:DashboardTableFieldWells":{"properties":{"tableAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardTableAggregatedFieldWells","description":"The aggregated field well for the table."},"tableUnaggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardTableUnaggregatedFieldWells","description":"The unaggregated field well for the table."}},"type":"object"},"aws-native:quicksight:DashboardTableInlineVisualization":{"properties":{"dataBars":{"$ref":"#/types/aws-native:quicksight:DashboardDataBarsOptions","description":"The configuration of the inline visualization of the data bars within a chart."}},"type":"object"},"aws-native:quicksight:DashboardTableOptions":{"properties":{"cellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The table cell style of table cells."},"headerStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"The table cell style of a table header."},"orientation":{"$ref":"#/types/aws-native:quicksight:DashboardTableOrientation","description":"The orientation (vertical, horizontal) for a table."},"rowAlternateColorOptions":{"$ref":"#/types/aws-native:quicksight:DashboardRowAlternateColorOptions","description":"The row alternate color options (widget status, row alternate colors) for a table."}},"type":"object"},"aws-native:quicksight:DashboardTableOrientation":{"type":"string","enum":[{"name":"Vertical","value":"VERTICAL"},{"name":"Horizontal","value":"HORIZONTAL"}]},"aws-native:quicksight:DashboardTablePaginatedReportOptions":{"properties":{"overflowColumnHeaderVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of repeating header rows on each page."},"verticalOverflowVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of printing table overflow across pages."}},"type":"object"},"aws-native:quicksight:DashboardTablePinnedFieldOptions":{"properties":{"pinnedLeftFields":{"type":"array","items":{"type":"string"},"description":"A list of columns to be pinned to the left of a table visual."}},"type":"object"},"aws-native:quicksight:DashboardTableRowConditionalFormatting":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting color (solid, gradient) of the background for a table row."},"textColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting color (solid, gradient) of the text for a table row."}},"type":"object"},"aws-native:quicksight:DashboardTableSideBorderOptions":{"properties":{"bottom":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"The table border options of the bottom border."},"innerHorizontal":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"The table border options of the inner horizontal border."},"innerVertical":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"The table border options of the inner vertical border."},"left":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"The table border options of the left border."},"right":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"The table border options of the right border."},"top":{"$ref":"#/types/aws-native:quicksight:DashboardTableBorderOptions","description":"The table border options of the top border."}},"type":"object"},"aws-native:quicksight:DashboardTableSortConfiguration":{"properties":{"paginationConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardPaginationConfiguration","description":"The pagination configuration (page size, page number) for the table."},"rowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The field sort options for rows in the table."}},"type":"object"},"aws-native:quicksight:DashboardTableStyleTarget":{"properties":{"cellType":{"$ref":"#/types/aws-native:quicksight:DashboardStyledCellType","description":"The cell type of the table style target."}},"type":"object","required":["cellType"]},"aws-native:quicksight:DashboardTableTotalsPlacement":{"type":"string","enum":[{"name":"Start","value":"START"},{"name":"End","value":"END"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:DashboardTableTotalsScrollStatus":{"type":"string","enum":[{"name":"Pinned","value":"PINNED"},{"name":"Scrolled","value":"SCROLLED"}]},"aws-native:quicksight:DashboardTableUnaggregatedFieldWells":{"properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardUnaggregatedField"},"description":"The values field well for a pivot table. Values are unaggregated for an unaggregated table."}},"type":"object"},"aws-native:quicksight:DashboardTableVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTableConfiguration","description":"The configuration settings of the visual."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:DashboardTableConditionalFormatting","description":"The conditional formatting for a `PivotTableVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:DashboardTargetVisualOptions":{"type":"string","enum":[{"name":"AllVisuals","value":"ALL_VISUALS"}]},"aws-native:quicksight:DashboardTextAreaControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"placeholderOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextControlPlaceholderOptions","description":"The configuration of the placeholder options in a text area control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardTextConditionalFormat":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting for the text background color."},"icon":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingIcon","description":"The conditional formatting for the icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:DashboardConditionalFormattingColor","description":"The conditional formatting for the text color."}},"type":"object"},"aws-native:quicksight:DashboardTextControlPlaceholderOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration of the placeholder options in a text control."}},"type":"object"},"aws-native:quicksight:DashboardTextFieldControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"placeholderOptions":{"$ref":"#/types/aws-native:quicksight:DashboardTextControlPlaceholderOptions","description":"The configuration of the placeholder options in a text field control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:DashboardLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:DashboardTextWrap":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Wrap","value":"WRAP"}]},"aws-native:quicksight:DashboardThousandSeparatorOptions":{"properties":{"groupingStyle":{"$ref":"#/types/aws-native:quicksight:DashboardDigitGroupingStyle","description":"Determines the way numbers are styled to accommodate different readability standards. The `DEFAULT` value uses the standard international grouping system and groups numbers by the thousands. The `LAKHS` value uses the Indian numbering system and groups numbers by lakhs and crores."},"symbol":{"$ref":"#/types/aws-native:quicksight:DashboardNumericSeparatorSymbol","description":"Determines the thousands separator symbol."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines the visibility of the thousands separator."}},"type":"object"},"aws-native:quicksight:DashboardTimeBasedForecastProperties":{"properties":{"lowerBoundary":{"type":"number","description":"The lower boundary setup of a forecast computation."},"periodsBackward":{"type":"number","description":"The periods backward setup of a forecast computation."},"periodsForward":{"type":"number","description":"The periods forward setup of a forecast computation."},"predictionInterval":{"type":"number","description":"The prediction interval setup of a forecast computation."},"seasonality":{"type":"number","description":"The seasonality setup of a forecast computation. Choose one of the following options:\n\n- `NULL` : The input is set to `NULL` .\n- `NON_NULL` : The input is set to a custom value."},"upperBoundary":{"type":"number","description":"The upper boundary setup of a forecast computation."}},"type":"object"},"aws-native:quicksight:DashboardTimeEqualityFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value.\n\nThis field is mutually exclusive to `Value` and `RollingDate` ."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:DashboardRollingDateConfiguration","description":"The rolling date input for the `TimeEquality` filter.\n\nThis field is mutually exclusive to `Value` and `ParameterName` ."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"value":{"type":"string","description":"The value of a `TimeEquality` filter.\n\nThis field is mutually exclusive to `RollingDate` and `ParameterName` ."}},"type":"object","required":["column","filterId"]},"aws-native:quicksight:DashboardTimeGranularity":{"type":"string","enum":[{"name":"Year","value":"YEAR"},{"name":"Quarter","value":"QUARTER"},{"name":"Month","value":"MONTH"},{"name":"Week","value":"WEEK"},{"name":"Day","value":"DAY"},{"name":"Hour","value":"HOUR"},{"name":"Minute","value":"MINUTE"},{"name":"Second","value":"SECOND"},{"name":"Millisecond","value":"MILLISECOND"}]},"aws-native:quicksight:DashboardTimeRangeDrillDownFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"rangeMaximum":{"type":"string","description":"The maximum value for the filter value range."},"rangeMinimum":{"type":"string","description":"The minimum value for the filter value range."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["column","rangeMaximum","rangeMinimum","timeGranularity"]},"aws-native:quicksight:DashboardTimeRangeFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"excludePeriodConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardExcludePeriodConfiguration","description":"The exclude period of the time range filter."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeMaximum":{"type":"boolean","description":"Determines whether the maximum value in the filter value range should be included in the filtered results."},"includeMinimum":{"type":"boolean","description":"Determines whether the minimum value in the filter value range should be included in the filtered results."},"nullOption":{"$ref":"#/types/aws-native:quicksight:DashboardFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"rangeMaximumValue":{"$ref":"#/types/aws-native:quicksight:DashboardTimeRangeFilterValue","description":"The maximum value for the filter value range."},"rangeMinimumValue":{"$ref":"#/types/aws-native:quicksight:DashboardTimeRangeFilterValue","description":"The minimum value for the filter value range."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["column","filterId","nullOption"]},"aws-native:quicksight:DashboardTimeRangeFilterValue":{"properties":{"parameter":{"type":"string","description":"The parameter type input value."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:DashboardRollingDateConfiguration","description":"The rolling date input value."},"staticValue":{"type":"string","description":"The static input value."}},"type":"object"},"aws-native:quicksight:DashboardTooltipItem":{"properties":{"columnTooltipItem":{"$ref":"#/types/aws-native:quicksight:DashboardColumnTooltipItem","description":"The tooltip item for the columns that are not part of a field well."},"fieldTooltipItem":{"$ref":"#/types/aws-native:quicksight:DashboardFieldTooltipItem","description":"The tooltip item for the fields."}},"type":"object"},"aws-native:quicksight:DashboardTooltipOptions":{"properties":{"fieldBasedTooltip":{"$ref":"#/types/aws-native:quicksight:DashboardFieldBasedTooltip","description":"The setup for the detailed tooltip. The tooltip setup is always saved. The display type is decided based on the tooltip type."},"selectedTooltipType":{"$ref":"#/types/aws-native:quicksight:DashboardSelectedTooltipType","description":"The selected type for the tooltip. Choose one of the following options:\n\n- `BASIC` : A basic tooltip.\n- `DETAILED` : A detailed tooltip."},"tooltipVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"Determines whether or not the tooltip is visible."}},"type":"object"},"aws-native:quicksight:DashboardTooltipTarget":{"type":"string","enum":[{"name":"Both","value":"BOTH"},{"name":"Bar","value":"BAR"},{"name":"Line","value":"LINE"}]},"aws-native:quicksight:DashboardTooltipTitleType":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"PrimaryValue","value":"PRIMARY_VALUE"}]},"aws-native:quicksight:DashboardTopBottomComputationType":{"type":"string","enum":[{"name":"Top","value":"TOP"},{"name":"Bottom","value":"BOTTOM"}]},"aws-native:quicksight:DashboardTopBottomFilter":{"properties":{"aggregationSortConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardAggregationSortConfiguration"},"description":"The aggregation and sort configuration of the top bottom filter."},"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"limit":{"type":"number","description":"The number of items to include in the top bottom filter results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DashboardTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["aggregationSortConfigurations","column","filterId"]},"aws-native:quicksight:DashboardTopBottomMoversComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"moverSize":{"type":"number","description":"The mover size setup of the top and bottom movers computation."},"name":{"type":"string","description":"The name of a computation."},"sortOrder":{"$ref":"#/types/aws-native:quicksight:DashboardTopBottomSortOrder","description":"The sort order setup of the top and bottom movers computation."},"time":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The time field that is used in a computation."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardTopBottomComputationType","description":"The computation type. Choose from the following options:\n\n- TOP: Top movers computation.\n- BOTTOM: Bottom movers computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:DashboardTopBottomRankedComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"resultSize":{"type":"number","description":"The result size of a top and bottom ranked computation."},"type":{"$ref":"#/types/aws-native:quicksight:DashboardTopBottomComputationType","description":"The computation type. Choose one of the following options:\n\n- TOP: A top ranked computation.\n- BOTTOM: A bottom ranked computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:DashboardTopBottomSortOrder":{"type":"string","enum":[{"name":"PercentDifference","value":"PERCENT_DIFFERENCE"},{"name":"AbsoluteDifference","value":"ABSOLUTE_DIFFERENCE"}]},"aws-native:quicksight:DashboardTotalAggregationComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"value":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardTotalAggregationFunction":{"properties":{"simpleTotalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardSimpleTotalAggregationFunction","description":"A built in aggregation function for total values."}},"type":"object"},"aws-native:quicksight:DashboardTotalAggregationOption":{"properties":{"fieldId":{"type":"string","description":"The field id that's associated with the total aggregation option."},"totalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:DashboardTotalAggregationFunction","description":"The total aggregation function that you want to set for a specified field id."}},"type":"object","required":["fieldId","totalAggregationFunction"]},"aws-native:quicksight:DashboardTotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the total cells."},"placement":{"$ref":"#/types/aws-native:quicksight:DashboardTableTotalsPlacement","description":"The placement (start, end) for the total cells."},"scrollStatus":{"$ref":"#/types/aws-native:quicksight:DashboardTableTotalsScrollStatus","description":"The scroll status (pinned, scrolled) for the total cells."},"totalAggregationOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardTotalAggregationOption"},"description":"The total aggregation settings for each value field."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:DashboardTableCellStyle","description":"Cell styling options for the total cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility configuration for the total cells."}},"type":"object"},"aws-native:quicksight:DashboardTransposedColumnType":{"type":"string","enum":[{"name":"RowHeaderColumn","value":"ROW_HEADER_COLUMN"},{"name":"ValueColumn","value":"VALUE_COLUMN"}]},"aws-native:quicksight:DashboardTransposedTableOption":{"properties":{"columnIndex":{"type":"number","description":"The index of a columns in a transposed table. The index range is 0-9999."},"columnType":{"$ref":"#/types/aws-native:quicksight:DashboardTransposedColumnType","description":"The column type of the column in a transposed table. Choose one of the following options:\n\n- `ROW_HEADER_COLUMN` : Refers to the leftmost column of the row header in the transposed table.\n- `VALUE_COLUMN` : Refers to all value columns in the transposed table."},"columnWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["columnType"]},"aws-native:quicksight:DashboardTreeMapAggregatedFieldWells":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The color field well of a tree map. Values are grouped by aggregations based on group by fields."},"groups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The group by field well of a tree map. Values are grouped based on group by fields."},"sizes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The size field well of a tree map. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:DashboardTreeMapConfiguration":{"properties":{"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility) for the colors displayed in a tree map."},"colorScale":{"$ref":"#/types/aws-native:quicksight:DashboardColorScale","description":"The color options (gradient color, point of divergence) of a tree map."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardTreeMapFieldWells","description":"The field wells of the visual."},"groupLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility) of the groups that are displayed in a tree map."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend display setup of the visual."},"sizeLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility) of the sizes that are displayed in a tree map."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTreeMapSortConfiguration","description":"The sort configuration of a tree map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:DashboardTooltipOptions","description":"The tooltip display setup of the visual."}},"type":"object"},"aws-native:quicksight:DashboardTreeMapFieldWells":{"properties":{"treeMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardTreeMapAggregatedFieldWells","description":"The aggregated field wells of a tree map."}},"type":"object"},"aws-native:quicksight:DashboardTreeMapSortConfiguration":{"properties":{"treeMapGroupItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of groups that are displayed."},"treeMapSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of group by fields."}},"type":"object"},"aws-native:quicksight:DashboardTreeMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardTreeMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardTrendArrowOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the trend arrows."}},"type":"object"},"aws-native:quicksight:DashboardUiState":{"type":"string","enum":[{"name":"Expanded","value":"EXPANDED"},{"name":"Collapsed","value":"COLLAPSED"}]},"aws-native:quicksight:DashboardUnaggregatedField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:DashboardColumnIdentifier","description":"The column that is used in the `UnaggregatedField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:DashboardUniqueValuesComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:DashboardUrlTargetConfiguration":{"type":"string","enum":[{"name":"NewTab","value":"NEW_TAB"},{"name":"NewWindow","value":"NEW_WINDOW"},{"name":"SameTab","value":"SAME_TAB"}]},"aws-native:quicksight:DashboardValidationStrategy":{"description":"\u003cp\u003eThe option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to \u003ccode\u003eLENIENT\u003c/code\u003e, validation is skipped for specific errors.\u003c/p\u003e","properties":{"mode":{"$ref":"#/types/aws-native:quicksight:DashboardValidationStrategyMode","description":"The mode of validation for the asset to be created or updated. When you set this value to `STRICT` , strict validation for every error is enforced. When you set this value to `LENIENT` , validation is skipped for specific UI errors."}},"type":"object","required":["mode"]},"aws-native:quicksight:DashboardValidationStrategyMode":{"type":"string","enum":[{"name":"Strict","value":"STRICT"},{"name":"Lenient","value":"LENIENT"}]},"aws-native:quicksight:DashboardValueWhenUnsetOption":{"type":"string","enum":[{"name":"RecommendedValue","value":"RECOMMENDED_VALUE"},{"name":"Null","value":"NULL"}]},"aws-native:quicksight:DashboardVersion":{"description":"\u003cp\u003eDashboard version.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that this dashboard version was created.\u003c/p\u003e"},"dataSetArns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe Amazon Resource Numbers (ARNs) for the datasets that are associated with this\n            version of the dashboard.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eDescription.\u003c/p\u003e"},"errors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardError"},"description":"\u003cp\u003eErrors associated with this dashboard version.\u003c/p\u003e"},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheet"},"description":"\u003cp\u003eA list of the associated sheets with the unique identifier and name of each sheet.\u003c/p\u003e"},"sourceEntityArn":{"type":"string","description":"\u003cp\u003eSource entity ARN.\u003c/p\u003e"},"status":{"$ref":"#/types/aws-native:quicksight:DashboardResourceStatus","description":"The HTTP status of the request."},"themeArn":{"type":"string","description":"\u003cp\u003eThe ARN of the theme associated with a version of the dashboard.\u003c/p\u003e"},"versionNumber":{"type":"number","description":"\u003cp\u003eVersion number for this version of the dashboard.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DashboardVersionDefinition":{"properties":{"analysisDefaults":{"$ref":"#/types/aws-native:quicksight:DashboardAnalysisDefaults"},"calculatedFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardCalculatedField"},"description":"An array of calculated field definitions for the dashboard."},"columnConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnConfiguration"},"description":"An array of dashboard-level column configurations. Column configurations are used to set the default formatting for a column that is used throughout a dashboard."},"dataSetIdentifierDeclarations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataSetIdentifierDeclaration"},"description":"An array of dataset identifier declarations. With this mapping,you can use dataset identifiers instead of dataset Amazon Resource Names (ARNs) throughout the dashboard's sub-structures."},"filterGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFilterGroup"},"description":"The filter definitions for a dashboard.\n\nFor more information, see [Filtering Data in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/adding-a-filter.html) in the *Amazon Quick Suite User Guide* ."},"options":{"$ref":"#/types/aws-native:quicksight:DashboardAssetOptions","description":"An array of option definitions for a dashboard."},"parameterDeclarations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardParameterDeclaration"},"description":"The parameter declarations for a dashboard. Parameters are named variables that can transfer a value for use by an action or an object.\n\nFor more information, see [Parameters in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/parameters-in-quicksight.html) in the *Amazon Quick Suite User Guide* ."},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardSheetDefinition"},"description":"An array of sheet definitions for a dashboard."},"staticFiles":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardStaticFile"},"description":"The static files for the definition."}},"type":"object","required":["dataSetIdentifierDeclarations"]},"aws-native:quicksight:DashboardVerticalTextAlignment":{"type":"string","enum":[{"name":"Top","value":"TOP"},{"name":"Middle","value":"MIDDLE"},{"name":"Bottom","value":"BOTTOM"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:DashboardVisibility":{"type":"string","enum":[{"name":"Hidden","value":"HIDDEN"},{"name":"Visible","value":"VISIBLE"}]},"aws-native:quicksight:DashboardVisibleRangeOptions":{"properties":{"percentRange":{"$ref":"#/types/aws-native:quicksight:DashboardPercentVisibleRange","description":"The percent range in the visible range."}},"type":"object"},"aws-native:quicksight:DashboardVisual":{"properties":{"barChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardBarChartVisual","description":"A bar chart.\n\nFor more information, see [Using bar charts](https://docs.aws.amazon.com/quicksight/latest/user/bar-charts.html) in the *Amazon Quick Suite User Guide* ."},"boxPlotVisual":{"$ref":"#/types/aws-native:quicksight:DashboardBoxPlotVisual","description":"A box plot.\n\nFor more information, see [Using box plots](https://docs.aws.amazon.com/quicksight/latest/user/box-plots.html) in the *Amazon Quick Suite User Guide* ."},"comboChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardComboChartVisual","description":"A combo chart.\n\nFor more information, see [Using combo charts](https://docs.aws.amazon.com/quicksight/latest/user/combo-charts.html) in the *Amazon Quick Suite User Guide* ."},"customContentVisual":{"$ref":"#/types/aws-native:quicksight:DashboardCustomContentVisual","description":"A visual that contains custom content.\n\nFor more information, see [Using custom visual content](https://docs.aws.amazon.com/quicksight/latest/user/custom-visual-content.html) in the *Amazon Quick Suite User Guide* ."},"emptyVisual":{"$ref":"#/types/aws-native:quicksight:DashboardEmptyVisual","description":"An empty visual."},"filledMapVisual":{"$ref":"#/types/aws-native:quicksight:DashboardFilledMapVisual","description":"A filled map.\n\nFor more information, see [Creating filled maps](https://docs.aws.amazon.com/quicksight/latest/user/filled-maps.html) in the *Amazon Quick Suite User Guide* ."},"funnelChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardFunnelChartVisual","description":"A funnel chart.\n\nFor more information, see [Using funnel charts](https://docs.aws.amazon.com/quicksight/latest/user/funnel-visual-content.html) in the *Amazon Quick Suite User Guide* ."},"gaugeChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardGaugeChartVisual","description":"A gauge chart.\n\nFor more information, see [Using gauge charts](https://docs.aws.amazon.com/quicksight/latest/user/gauge-chart.html) in the *Amazon Quick Suite User Guide* ."},"geospatialMapVisual":{"$ref":"#/types/aws-native:quicksight:DashboardGeospatialMapVisual","description":"A geospatial map or a points on map visual.\n\nFor more information, see [Creating point maps](https://docs.aws.amazon.com/quicksight/latest/user/point-maps.html) in the *Amazon Quick Suite User Guide* ."},"heatMapVisual":{"$ref":"#/types/aws-native:quicksight:DashboardHeatMapVisual","description":"A heat map.\n\nFor more information, see [Using heat maps](https://docs.aws.amazon.com/quicksight/latest/user/heat-map.html) in the *Amazon Quick Suite User Guide* ."},"histogramVisual":{"$ref":"#/types/aws-native:quicksight:DashboardHistogramVisual","description":"A histogram.\n\nFor more information, see [Using histograms](https://docs.aws.amazon.com/quicksight/latest/user/histogram-charts.html) in the *Amazon Quick Suite User Guide* ."},"insightVisual":{"$ref":"#/types/aws-native:quicksight:DashboardInsightVisual","description":"An insight visual.\n\nFor more information, see [Working with insights](https://docs.aws.amazon.com/quicksight/latest/user/computational-insights.html) in the *Amazon Quick Suite User Guide* ."},"kpiVisual":{"$ref":"#/types/aws-native:quicksight:DashboardKpiVisual","description":"A key performance indicator (KPI).\n\nFor more information, see [Using KPIs](https://docs.aws.amazon.com/quicksight/latest/user/kpi.html) in the *Amazon Quick Suite User Guide* ."},"layerMapVisual":{"$ref":"#/types/aws-native:quicksight:DashboardLayerMapVisual","description":"The properties for a layer map visual"},"lineChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardLineChartVisual","description":"A line chart.\n\nFor more information, see [Using line charts](https://docs.aws.amazon.com/quicksight/latest/user/line-charts.html) in the *Amazon Quick Suite User Guide* ."},"pieChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardPieChartVisual","description":"A pie or donut chart.\n\nFor more information, see [Using pie charts](https://docs.aws.amazon.com/quicksight/latest/user/pie-chart.html) in the *Amazon Quick Suite User Guide* ."},"pivotTableVisual":{"$ref":"#/types/aws-native:quicksight:DashboardPivotTableVisual","description":"A pivot table.\n\nFor more information, see [Using pivot tables](https://docs.aws.amazon.com/quicksight/latest/user/pivot-table.html) in the *Amazon Quick Suite User Guide* ."},"pluginVisual":{"$ref":"#/types/aws-native:quicksight:DashboardPluginVisual","description":"The custom plugin visual type."},"radarChartVisual":{"$ref":"#/types/aws-native:quicksight:DashboardRadarChartVisual","description":"A radar chart visual.\n\nFor more information, see [Using radar charts](https://docs.aws.amazon.com/quicksight/latest/user/radar-chart.html) in the *Amazon Quick Suite User Guide* ."},"sankeyDiagramVisual":{"$ref":"#/types/aws-native:quicksight:DashboardSankeyDiagramVisual","description":"A sankey diagram.\n\nFor more information, see [Using Sankey diagrams](https://docs.aws.amazon.com/quicksight/latest/user/sankey-diagram.html) in the *Amazon Quick Suite User Guide* ."},"scatterPlotVisual":{"$ref":"#/types/aws-native:quicksight:DashboardScatterPlotVisual","description":"A scatter plot.\n\nFor more information, see [Using scatter plots](https://docs.aws.amazon.com/quicksight/latest/user/scatter-plot.html) in the *Amazon Quick Suite User Guide* ."},"tableVisual":{"$ref":"#/types/aws-native:quicksight:DashboardTableVisual","description":"A table visual.\n\nFor more information, see [Using tables as visuals](https://docs.aws.amazon.com/quicksight/latest/user/tabular.html) in the *Amazon Quick Suite User Guide* ."},"treeMapVisual":{"$ref":"#/types/aws-native:quicksight:DashboardTreeMapVisual","description":"A tree map.\n\nFor more information, see [Using tree maps](https://docs.aws.amazon.com/quicksight/latest/user/tree-map.html) in the *Amazon Quick Suite User Guide* ."},"waterfallVisual":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallVisual","description":"A waterfall chart.\n\nFor more information, see [Using waterfall charts](https://docs.aws.amazon.com/quicksight/latest/user/waterfall-chart.html) in the *Amazon Quick Suite User Guide* ."},"wordCloudVisual":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudVisual","description":"A word cloud.\n\nFor more information, see [Using word clouds](https://docs.aws.amazon.com/quicksight/latest/user/word-cloud.html) in the *Amazon Quick Suite User Guide* ."}},"type":"object"},"aws-native:quicksight:DashboardVisualAxisSortOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The availaiblity status of a visual's axis sort options."}},"type":"object"},"aws-native:quicksight:DashboardVisualCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomActionOperation"},"description":"A list of `VisualCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the `VisualCustomAction` ."},"name":{"type":"string","description":"The name of the `VisualCustomAction` ."},"status":{"$ref":"#/types/aws-native:quicksight:DashboardWidgetStatus","description":"The status of the `VisualCustomAction` ."},"trigger":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomActionTrigger","description":"The trigger of the `VisualCustomAction` .\n\nValid values are defined as follows:\n\n- `DATA_POINT_CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `DATA_POINT_MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:DashboardVisualCustomActionOperation":{"properties":{"filterOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionFilterOperation","description":"The filter operation that filters data included in a visual or in an entire sheet."},"navigationOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionNavigationOperation","description":"The navigation operation that navigates between different sheets in the same analysis."},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionSetParametersOperation","description":"The set parameter operation that sets parameters in custom action."},"urlOperation":{"$ref":"#/types/aws-native:quicksight:DashboardCustomActionUrlOperation","description":"The URL operation that opens a link to another webpage."}},"type":"object"},"aws-native:quicksight:DashboardVisualCustomActionTrigger":{"type":"string","enum":[{"name":"DataPointClick","value":"DATA_POINT_CLICK"},{"name":"DataPointMenu","value":"DATA_POINT_MENU"}]},"aws-native:quicksight:DashboardVisualInteractionOptions":{"properties":{"contextMenuOption":{"$ref":"#/types/aws-native:quicksight:DashboardContextMenuOption","description":"The context menu options for a visual."},"visualMenuOption":{"$ref":"#/types/aws-native:quicksight:DashboardVisualMenuOption","description":"The on-visual menu options for a visual."}},"type":"object"},"aws-native:quicksight:DashboardVisualMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:DashboardBehavior","description":"The availaiblity status of a visual's menu options."}},"type":"object"},"aws-native:quicksight:DashboardVisualPalette":{"properties":{"chartColor":{"type":"string","description":"The chart color options for the visual palette."},"colorMap":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDataPathColor"},"description":"The color map options for the visual palette."}},"type":"object"},"aws-native:quicksight:DashboardVisualPublishOptions":{"description":"\u003cp\u003eThe visual publish options of a visual in a dashboard\u003c/p\u003e","properties":{"exportHiddenFieldsOption":{"$ref":"#/types/aws-native:quicksight:DashboardExportHiddenFieldsOption","description":"Determines if hidden fields are included in an exported dashboard."}},"type":"object"},"aws-native:quicksight:DashboardVisualSubtitleLabelOptions":{"properties":{"formatText":{"$ref":"#/types/aws-native:quicksight:DashboardLongFormatText","description":"The long text format of the subtitle label, such as plain text or rich text."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the subtitle label."}},"type":"object"},"aws-native:quicksight:DashboardVisualTitleLabelOptions":{"properties":{"formatText":{"$ref":"#/types/aws-native:quicksight:DashboardShortFormatText","description":"The short text format of the title label, such as plain text or rich text."},"visibility":{"$ref":"#/types/aws-native:quicksight:DashboardVisibility","description":"The visibility of the title label."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartAggregatedFieldWells":{"properties":{"breakdowns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The breakdown field wells of a waterfall visual."},"categories":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The category field wells of a waterfall visual."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The value field wells of a waterfall visual."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartColorConfiguration":{"properties":{"groupColorConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartGroupColorConfiguration","description":"The color configuration for individual groups within a waterfall visual."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartConfiguration":{"properties":{"categoryAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The options that determine the presentation of the category axis."},"categoryAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The options that determine the presentation of the category axis label."},"colorConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartColorConfiguration","description":"The color configuration of a waterfall visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:DashboardDataLabelOptions","description":"The data label configuration of a waterfall visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartFieldWells","description":"The field well configuration of a waterfall visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:DashboardLegendOptions","description":"The legend configuration of a waterfall visual."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:DashboardAxisDisplayOptions","description":"The options that determine the presentation of the y-axis."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The options that determine the presentation of the y-axis label."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartSortConfiguration","description":"The sort configuration of a waterfall visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:DashboardVisualPalette","description":"The visual palette configuration of a waterfall visual."},"waterfallChartOptions":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartOptions","description":"The options that determine the presentation of a waterfall visual."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartFieldWells":{"properties":{"waterfallChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartAggregatedFieldWells","description":"The field well configuration of a waterfall visual."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartGroupColorConfiguration":{"properties":{"negativeBarColor":{"type":"string","description":"Defines the color for the negative bars of a waterfall chart."},"positiveBarColor":{"type":"string","description":"Defines the color for the positive bars of a waterfall chart."},"totalBarColor":{"type":"string","description":"Defines the color for the total bars of a waterfall chart."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartOptions":{"properties":{"totalBarLabel":{"type":"string","description":"This option determines the total bar label of a waterfall visual."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallChartSortConfiguration":{"properties":{"breakdownItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of bar groups that are displayed."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of the category fields."}},"type":"object"},"aws-native:quicksight:DashboardWaterfallVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardWaterfallChartConfiguration","description":"The configuration for a waterfall visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardWhatIfPointScenario":{"properties":{"date":{"type":"string","description":"The date that you need the forecast results for."},"value":{"type":"number","description":"The target value that you want to meet for the provided date."}},"type":"object","required":["date","value"]},"aws-native:quicksight:DashboardWhatIfRangeScenario":{"properties":{"endDate":{"type":"string","description":"The end date in the date range that you need the forecast results for."},"startDate":{"type":"string","description":"The start date in the date range that you need the forecast results for."},"value":{"type":"number","description":"The target value that you want to meet for the provided date range."}},"type":"object","required":["endDate","startDate","value"]},"aws-native:quicksight:DashboardWidgetStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DashboardWordCloudAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardDimensionField"},"description":"The group by field well of a word cloud. Values are grouped by group by fields."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardMeasureField"},"description":"The size field well of a word cloud. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:DashboardWordCloudChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:DashboardChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) for the word cloud category."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:DashboardVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudSortConfiguration","description":"The sort configuration of a word cloud visual."},"wordCloudOptions":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudOptions","description":"The options for a word cloud visual."}},"type":"object"},"aws-native:quicksight:DashboardWordCloudCloudLayout":{"type":"string","enum":[{"name":"Fluid","value":"FLUID"},{"name":"Normal","value":"NORMAL"}]},"aws-native:quicksight:DashboardWordCloudFieldWells":{"properties":{"wordCloudAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudAggregatedFieldWells","description":"The aggregated field wells of a word cloud."}},"type":"object"},"aws-native:quicksight:DashboardWordCloudOptions":{"properties":{"cloudLayout":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudCloudLayout","description":"The cloud layout options (fluid, normal) of a word cloud."},"maximumStringLength":{"type":"number","description":"The length limit of each word from 1-100."},"wordCasing":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudWordCasing","description":"The word casing options (lower_case, existing_case) for the words in a word cloud."},"wordOrientation":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudWordOrientation","description":"The word orientation options (horizontal, horizontal_and_vertical) for the words in a word cloud."},"wordPadding":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudWordPadding","description":"The word padding options (none, small, medium, large) for the words in a word cloud."},"wordScaling":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudWordScaling","description":"The word scaling options (emphasize, normal) for the words in a word cloud."}},"type":"object"},"aws-native:quicksight:DashboardWordCloudSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:DashboardItemsLimitConfiguration","description":"The limit on the number of groups that are displayed in a word cloud."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardFieldSortOptions"},"description":"The sort configuration of group by fields."}},"type":"object"},"aws-native:quicksight:DashboardWordCloudVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardWordCloudChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:DashboardVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:DashboardVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:DashboardWordCloudWordCasing":{"type":"string","enum":[{"name":"LowerCase","value":"LOWER_CASE"},{"name":"ExistingCase","value":"EXISTING_CASE"}]},"aws-native:quicksight:DashboardWordCloudWordOrientation":{"type":"string","enum":[{"name":"Horizontal","value":"HORIZONTAL"},{"name":"HorizontalAndVertical","value":"HORIZONTAL_AND_VERTICAL"}]},"aws-native:quicksight:DashboardWordCloudWordPadding":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:quicksight:DashboardWordCloudWordScaling":{"type":"string","enum":[{"name":"Emphasize","value":"EMPHASIZE"},{"name":"Normal","value":"NORMAL"}]},"aws-native:quicksight:DashboardYAxisOptions":{"properties":{"yAxis":{"$ref":"#/types/aws-native:quicksight:DashboardSingleYAxisOption","description":"The Y axis type to be used in the chart.\n\nIf you choose `PRIMARY_Y_AXIS` , the primary Y Axis is located on the leftmost vertical axis of the chart."}},"type":"object","required":["yAxis"]},"aws-native:quicksight:DataSetAggregateOperation":{"properties":{"aggregations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetAggregation"},"description":"The list of aggregation functions to apply to the grouped data, such as `SUM` , `COUNT` , or `AVERAGE` ."},"alias":{"type":"string","description":"Alias for this operation."},"groupByColumnNames":{"type":"array","items":{"type":"string"},"description":"The list of column names to group by when performing the aggregation. Rows with the same values in these columns will be grouped together."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for the aggregation."}},"type":"object","required":["aggregations","alias","source"]},"aws-native:quicksight:DataSetAggregation":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepAggregationFunction","description":"The aggregation function to apply, such as `SUM` , `COUNT` , `AVERAGE` , `MIN` , `MAX`"},"newColumnId":{"type":"string","description":"A unique identifier for the new column that will contain the aggregated values."},"newColumnName":{"type":"string","description":"The name for the new column that will contain the aggregated values."}},"type":"object","required":["aggregationFunction","newColumnId","newColumnName"]},"aws-native:quicksight:DataSetAppendOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"appendedColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetAppendedColumn"},"description":"The list of columns to include in the appended result, mapping columns from both sources."},"firstSource":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The first data source to be included in the append operation."},"secondSource":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The second data source to be appended to the first source."}},"type":"object","required":["alias","appendedColumns"]},"aws-native:quicksight:DataSetAppendedColumn":{"properties":{"columnName":{"type":"string","description":"The name of the column to include in the appended result."},"newColumnId":{"type":"string","description":"A unique identifier for the column in the appended result."}},"type":"object","required":["columnName","newColumnId"]},"aws-native:quicksight:DataSetCalculatedColumn":{"description":"\u003cp\u003eA calculated column for a dataset.\u003c/p\u003e","properties":{"columnId":{"type":"string","description":"\u003cp\u003eA unique ID to identify a calculated column. During a dataset update, if the column ID\n            of a calculated column matches that of an existing calculated column, Amazon Quick Suite\n            preserves the existing calculated column.\u003c/p\u003e"},"columnName":{"type":"string","description":"\u003cp\u003eColumn name.\u003c/p\u003e"},"expression":{"type":"string","description":"\u003cp\u003eAn expression that defines the calculated column.\u003c/p\u003e"}},"type":"object","required":["columnId","columnName","expression"]},"aws-native:quicksight:DataSetCastColumnTypeOperation":{"description":"\u003cp\u003eA transform operation that casts a column to a different type.\u003c/p\u003e","properties":{"columnName":{"type":"string","description":"\u003cp\u003eColumn name.\u003c/p\u003e"},"format":{"type":"string","description":"\u003cp\u003eWhen casting a column from string to datetime type, you can supply a string in a\n            format supported by Amazon Quick Suite to denote the source data format.\u003c/p\u003e"},"newColumnType":{"$ref":"#/types/aws-native:quicksight:DataSetColumnDataType","description":"New column data type."},"subType":{"$ref":"#/types/aws-native:quicksight:DataSetColumnDataSubType","description":"The sub data type of the new column. Sub types are only available for decimal columns that are part of a SPICE dataset."}},"type":"object","required":["columnName","newColumnType"]},"aws-native:quicksight:DataSetCastColumnTypesOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"castColumnTypeOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetCastColumnTypeOperation"},"description":"The list of column type casting operations to perform."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for the type casting."}},"type":"object","required":["alias","castColumnTypeOperations","source"]},"aws-native:quicksight:DataSetColumnDataSubType":{"type":"string","enum":[{"name":"Float","value":"FLOAT"},{"name":"Fixed","value":"FIXED"}]},"aws-native:quicksight:DataSetColumnDataType":{"type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Decimal","value":"DECIMAL"},{"name":"Datetime","value":"DATETIME"}]},"aws-native:quicksight:DataSetColumnDescription":{"description":"\u003cp\u003eMetadata that contains a description for a column.\u003c/p\u003e","properties":{"text":{"type":"string","description":"\u003cp\u003eThe text of a description for a column.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetColumnGroup":{"description":"\u003cp\u003eGroupings of columns that work together in certain Amazon Quick Suite features. This is\n            a variant type structure. For this structure to be valid, only one of the attributes can\n            be non-null.\u003c/p\u003e","properties":{"geoSpatialColumnGroup":{"$ref":"#/types/aws-native:quicksight:DataSetGeoSpatialColumnGroup","description":"Geospatial column group that denotes a hierarchy."}},"type":"object"},"aws-native:quicksight:DataSetColumnIdMapping":{"properties":{"sourceColumnId":{"type":"string"},"targetColumnId":{"type":"string"}},"type":"object","required":["sourceColumnId","targetColumnId"]},"aws-native:quicksight:DataSetColumnLevelPermissionRule":{"description":"\u003cp\u003eA rule defined to grant access on one or more restricted columns.\n            Each dataset can have multiple rules.\n            To create a restricted column, you add it to one or more rules.\n            Each rule must contain at least one column and at least one user or group.\n            To be able to see a restricted column, a user or group needs to be added\n            to a rule for that column.\u003c/p\u003e","properties":{"columnNames":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eAn array of column names.\u003c/p\u003e"},"principals":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eAn array of Amazon Resource Names (ARNs) for Quick Suite users or groups.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetColumnTag":{"description":"\u003cp\u003eA tag for a column in a\n            \u003ccode\u003e\n               \u003ca href=\"https://docs.aws.amazon.com/quicksight/latest/APIReference/API_TagColumnOperation.html\"\u003eTagColumnOperation\u003c/a\u003e\n            \u003c/code\u003e\n            structure. This is a\n            variant type structure. For this structure to be valid, only one of the attributes can\n            be non-null.\u003c/p\u003e","properties":{"columnDescription":{"$ref":"#/types/aws-native:quicksight:DataSetColumnDescription","description":"A description for a column."},"columnGeographicRole":{"$ref":"#/types/aws-native:quicksight:DataSetGeoSpatialDataRole","description":"A geospatial role for a column."}},"type":"object"},"aws-native:quicksight:DataSetColumnTagName":{"type":"string","enum":[{"name":"ColumnGeographicRole","value":"COLUMN_GEOGRAPHIC_ROLE"},{"name":"ColumnDescription","value":"COLUMN_DESCRIPTION"}]},"aws-native:quicksight:DataSetColumnToUnpivot":{"properties":{"columnName":{"type":"string","description":"The name of the column to unpivot from the source data."},"newValue":{"type":"string","description":"The value to assign to this column in the unpivoted result, typically the column name or a descriptive label."}},"type":"object"},"aws-native:quicksight:DataSetCreateColumnsOperation":{"description":"\u003cp\u003eA transform operation that creates calculated columns. Columns created in one such\n            operation form a lexical closure.\u003c/p\u003e","properties":{"alias":{"type":"string","description":"Alias for this operation."},"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetCalculatedColumn"},"description":"\u003cp\u003eCalculated columns to create.\u003c/p\u003e"},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for creating new calculated columns."}},"type":"object","required":["columns"]},"aws-native:quicksight:DataSetCustomSql":{"description":"\u003cp\u003eA physical table type built from the results of the custom SQL query.\u003c/p\u003e","properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetInputColumn"},"description":"\u003cp\u003eThe column schema from the SQL query result set.\u003c/p\u003e"},"dataSourceArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the data source.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eA display name for the SQL query result.\u003c/p\u003e"},"sqlQuery":{"type":"string","description":"\u003cp\u003eThe SQL query.\u003c/p\u003e"}},"type":"object","required":["columns","dataSourceArn","name","sqlQuery"]},"aws-native:quicksight:DataSetDataPrepAggregationFunction":{"properties":{"listAggregation":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepListAggregationFunction","description":"A list aggregation function that concatenates values from multiple rows into a single delimited string."},"percentileAggregation":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepPercentileAggregationFunction"},"simpleAggregation":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepSimpleAggregationFunction","description":"A simple aggregation function such as `SUM` , `COUNT` , `AVERAGE` , `MIN` , `MAX` , `MEDIAN` , `VARIANCE` , or `STANDARD_DEVIATION` ."}},"type":"object"},"aws-native:quicksight:DataSetDataPrepConfiguration":{"properties":{"destinationTableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetDestinationTable"},"description":"A map of destination tables that receive the final prepared data."},"sourceTableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetSourceTable"},"description":"A map of source tables that provide information about underlying sources."},"transformStepMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetTransformStep"},"description":"A map of transformation steps that process the data."}},"type":"object","required":["destinationTableMap","sourceTableMap","transformStepMap"]},"aws-native:quicksight:DataSetDataPrepListAggregationFunction":{"properties":{"distinct":{"type":"boolean","description":"Whether to include only distinct values in the concatenated result, removing duplicates."},"inputColumnName":{"type":"string","description":"The name of the column containing values to be concatenated."},"separator":{"type":"string","description":"The string used to separate values in the concatenated result."}},"type":"object","required":["distinct","separator"]},"aws-native:quicksight:DataSetDataPrepPercentileAggregationFunction":{"properties":{"inputColumnName":{"type":"string"},"percentileValue":{"type":"number"}},"type":"object","required":["percentileValue"]},"aws-native:quicksight:DataSetDataPrepSimpleAggregationFunction":{"properties":{"functionType":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepSimpleAggregationFunctionType","description":"The type of aggregation function to perform, such as `COUNT` , `SUM` , `AVERAGE` , `MIN` , `MAX` , `MEDIAN` , `VARIANCE` , or `STANDARD_DEVIATION` ."},"inputColumnName":{"type":"string","description":"The name of the column on which to perform the aggregation function."}},"type":"object","required":["functionType"]},"aws-native:quicksight:DataSetDataPrepSimpleAggregationFunctionType":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Median","value":"MEDIAN"},{"name":"Max","value":"MAX"},{"name":"Min","value":"MIN"},{"name":"Variance","value":"VARIANCE"},{"name":"StandardDeviation","value":"STANDARD_DEVIATION"}]},"aws-native:quicksight:DataSetDatasetParameter":{"description":"\u003cp\u003eA dataset parameter.\u003c/p\u003e","properties":{"dateTimeDatasetParameter":{"$ref":"#/types/aws-native:quicksight:DataSetDateTimeDatasetParameter","description":"A date time parameter that is created in the dataset."},"decimalDatasetParameter":{"$ref":"#/types/aws-native:quicksight:DataSetDecimalDatasetParameter","description":"A decimal parameter that is created in the dataset."},"integerDatasetParameter":{"$ref":"#/types/aws-native:quicksight:DataSetIntegerDatasetParameter","description":"An integer parameter that is created in the dataset."},"stringDatasetParameter":{"$ref":"#/types/aws-native:quicksight:DataSetStringDatasetParameter","description":"A string parameter that is created in the dataset."}},"type":"object"},"aws-native:quicksight:DataSetDatasetParameterValueType":{"type":"string","enum":[{"name":"MultiValued","value":"MULTI_VALUED"},{"name":"SingleValued","value":"SINGLE_VALUED"}]},"aws-native:quicksight:DataSetDateComparisonFilterCondition":{"properties":{"operator":{"$ref":"#/types/aws-native:quicksight:DataSetDateComparisonFilterOperator","description":"The comparison operator to use, such as `BEFORE` , `BEFORE_OR_EQUALS_TO` , `AFTER` , or `AFTER_OR_EQUALS_TO` ."},"value":{"$ref":"#/types/aws-native:quicksight:DataSetDateFilterValue","description":"The date value to compare against."}},"type":"object","required":["operator"]},"aws-native:quicksight:DataSetDateComparisonFilterOperator":{"type":"string","enum":[{"name":"Before","value":"BEFORE"},{"name":"BeforeOrEqualsTo","value":"BEFORE_OR_EQUALS_TO"},{"name":"After","value":"AFTER"},{"name":"AfterOrEqualsTo","value":"AFTER_OR_EQUALS_TO"}]},"aws-native:quicksight:DataSetDateFilterCondition":{"properties":{"columnName":{"type":"string","description":"The name of the date column to filter."},"comparisonFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetDateComparisonFilterCondition","description":"A comparison-based filter condition for the date column."},"rangeFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetDateRangeFilterCondition","description":"A range-based filter condition for the date column, filtering values between minimum and maximum dates."}},"type":"object"},"aws-native:quicksight:DataSetDateFilterValue":{"properties":{"staticValue":{"type":"string","description":"A static date value used for filtering."}},"type":"object"},"aws-native:quicksight:DataSetDateRangeFilterCondition":{"properties":{"includeMaximum":{"type":"boolean","description":"Whether to include the maximum value in the filter range."},"includeMinimum":{"type":"boolean","description":"Whether to include the minimum value in the filter range."},"rangeMaximum":{"$ref":"#/types/aws-native:quicksight:DataSetDateFilterValue","description":"The maximum date value for the range filter."},"rangeMinimum":{"$ref":"#/types/aws-native:quicksight:DataSetDateFilterValue","description":"The minimum date value for the range filter."}},"type":"object"},"aws-native:quicksight:DataSetDateTimeDatasetParameter":{"description":"\u003cp\u003eA date time parameter for a dataset.\u003c/p\u003e","properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DataSetDateTimeDatasetParameterDefaultValues","description":"A list of default values for a given date time parameter. This structure only accepts static values."},"id":{"type":"string","description":"\u003cp\u003eAn identifier for the parameter that is created in the dataset.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the date time parameter that is created in the dataset.\u003c/p\u003e"},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:DataSetTimeGranularity","description":"The time granularity of the date time parameter."},"valueType":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameterValueType","description":"The value type of the dataset parameter. Valid values are `single value` or `multi value` ."}},"type":"object","required":["id","name","valueType"]},"aws-native:quicksight:DataSetDateTimeDatasetParameterDefaultValues":{"description":"\u003cp\u003eThe default values of a date time parameter.\u003c/p\u003e","properties":{"staticValues":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eA list of static default values for a given date time parameter.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetDecimalDatasetParameter":{"description":"\u003cp\u003eA decimal parameter for a dataset.\u003c/p\u003e","properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DataSetDecimalDatasetParameterDefaultValues","description":"A list of default values for a given decimal parameter. This structure only accepts static values."},"id":{"type":"string","description":"\u003cp\u003eAn identifier for the decimal parameter created in the dataset.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the decimal parameter that is created in the dataset.\u003c/p\u003e"},"valueType":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameterValueType","description":"The value type of the dataset parameter. Valid values are `single value` or `multi value` ."}},"type":"object","required":["id","name","valueType"]},"aws-native:quicksight:DataSetDecimalDatasetParameterDefaultValues":{"description":"\u003cp\u003eThe default values of a decimal parameter.\u003c/p\u003e","properties":{"staticValues":{"type":"array","items":{"type":"number"},"description":"\u003cp\u003eA list of static default values for a given decimal parameter.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetDestinationTable":{"properties":{"alias":{"type":"string","description":"Alias for the destination table."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetDestinationTableSource","description":"The source configuration that specifies which transform operation provides data to this destination table."}},"type":"object","required":["alias","source"]},"aws-native:quicksight:DataSetDestinationTableSource":{"properties":{"transformOperationId":{"type":"string","description":"The identifier of the transform operation that provides data to the destination table."}},"type":"object","required":["transformOperationId"]},"aws-native:quicksight:DataSetFieldFolder":{"description":"\u003cp\u003eA FieldFolder element is a folder that contains fields and nested subfolders.\u003c/p\u003e","properties":{"columns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eA folder has a list of columns. A column can only be in one folder.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eThe description for a field folder.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetFileFormat":{"type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Tsv","value":"TSV"},{"name":"Clf","value":"CLF"},{"name":"Elf","value":"ELF"},{"name":"Xlsx","value":"XLSX"},{"name":"Json","value":"JSON"}]},"aws-native:quicksight:DataSetFilterOperation":{"description":"\u003cp\u003eA transform operation that filters rows based on a condition.\u003c/p\u003e","properties":{"conditionExpression":{"type":"string","description":"\u003cp\u003eAn expression that must evaluate to a Boolean value. Rows for which the expression\n            evaluates to true are kept in the dataset.\u003c/p\u003e"},"dateFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetDateFilterCondition","description":"A date-based filter condition within a filter operation."},"numericFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetNumericFilterCondition","description":"A numeric-based filter condition within a filter operation."},"stringFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetStringFilterCondition","description":"A string-based filter condition within a filter operation."}},"type":"object"},"aws-native:quicksight:DataSetFiltersOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"filterOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetFilterOperation"},"description":"The list of filter operations to apply."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for filtering."}},"type":"object","required":["alias","filterOperations","source"]},"aws-native:quicksight:DataSetGeoSpatialColumnGroup":{"description":"\u003cp\u003eGeospatial column group that denotes a hierarchy.\u003c/p\u003e","properties":{"columns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eColumns in this hierarchy.\u003c/p\u003e"},"countryCode":{"$ref":"#/types/aws-native:quicksight:DataSetGeoSpatialCountryCode","description":"Country code."},"name":{"type":"string","description":"\u003cp\u003eA display name for the hierarchy.\u003c/p\u003e"}},"type":"object","required":["columns","name"]},"aws-native:quicksight:DataSetGeoSpatialCountryCode":{"type":"string","enum":[{"name":"Us","value":"US"}]},"aws-native:quicksight:DataSetGeoSpatialDataRole":{"type":"string","enum":[{"name":"Country","value":"COUNTRY"},{"name":"State","value":"STATE"},{"name":"County","value":"COUNTY"},{"name":"City","value":"CITY"},{"name":"Postcode","value":"POSTCODE"},{"name":"Longitude","value":"LONGITUDE"},{"name":"Latitude","value":"LATITUDE"},{"name":"Political1","value":"POLITICAL1"},{"name":"CensusTract","value":"CENSUS_TRACT"},{"name":"CensusBlockGroup","value":"CENSUS_BLOCK_GROUP"},{"name":"CensusBlock","value":"CENSUS_BLOCK"}]},"aws-native:quicksight:DataSetImportMode":{"type":"string","enum":[{"name":"Spice","value":"SPICE"},{"name":"DirectQuery","value":"DIRECT_QUERY"}]},"aws-native:quicksight:DataSetImportTableOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetImportTableOperationSource","description":"The source configuration that specifies which source table to import and any column mappings."}},"type":"object","required":["alias","source"]},"aws-native:quicksight:DataSetImportTableOperationSource":{"properties":{"columnIdMappings":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnIdMapping"},"description":"The mappings between source column identifiers and target column identifiers during the import."},"sourceTableId":{"type":"string","description":"The identifier of the source table to import data from."}},"type":"object","required":["sourceTableId"]},"aws-native:quicksight:DataSetIncrementalRefresh":{"description":"\u003cp\u003eThe incremental refresh configuration for a dataset.\u003c/p\u003e","properties":{"lookbackWindow":{"$ref":"#/types/aws-native:quicksight:DataSetLookbackWindow","description":"The lookback window setup for an incremental refresh configuration."}},"type":"object","required":["lookbackWindow"]},"aws-native:quicksight:DataSetIngestionWaitPolicy":{"description":"\u003cp\u003eWait policy to use when creating/updating dataset. Default is to wait for SPICE ingestion to finish with timeout of 36 hours.\u003c/p\u003e","properties":{"ingestionWaitTimeInHours":{"type":"number","description":"\u003cp\u003eThe maximum time (in hours) to wait for Ingestion to complete. Default timeout is 36 hours.\n Applicable only when DataSetImportMode mode is set to SPICE and WaitForSpiceIngestion is set to true.\u003c/p\u003e"},"waitForSpiceIngestion":{"type":"boolean","description":"\u003cp\u003eWait for SPICE ingestion to finish to mark dataset creation/update successful. Default (true).\n  Applicable only when DataSetImportMode mode is set to SPICE.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetInputColumn":{"description":"\u003cp\u003eMetadata for a column that is used as the input of a transform operation.\u003c/p\u003e","properties":{"id":{"type":"string","description":"A unique identifier for the input column."},"name":{"type":"string","description":"\u003cp\u003eThe name of this column in the underlying data source.\u003c/p\u003e"},"subType":{"$ref":"#/types/aws-native:quicksight:DataSetColumnDataSubType","description":"The sub data type of the column. Sub types are only available for decimal columns that are part of a SPICE dataset."},"type":{"$ref":"#/types/aws-native:quicksight:DataSetInputColumnDataType","description":"The data type of the column."}},"type":"object","required":["name","type"]},"aws-native:quicksight:DataSetInputColumnDataType":{"type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Integer","value":"INTEGER"},{"name":"Decimal","value":"DECIMAL"},{"name":"Datetime","value":"DATETIME"},{"name":"Bit","value":"BIT"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Json","value":"JSON"},{"name":"Semistruct","value":"SEMISTRUCT"}]},"aws-native:quicksight:DataSetIntegerDatasetParameter":{"description":"\u003cp\u003eAn integer parameter for a dataset.\u003c/p\u003e","properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DataSetIntegerDatasetParameterDefaultValues","description":"A list of default values for a given integer parameter. This structure only accepts static values."},"id":{"type":"string","description":"\u003cp\u003eAn identifier for the integer parameter created in the dataset.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the integer parameter that is created in the dataset.\u003c/p\u003e"},"valueType":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameterValueType","description":"The value type of the dataset parameter. Valid values are `single value` or `multi value` ."}},"type":"object","required":["id","name","valueType"]},"aws-native:quicksight:DataSetIntegerDatasetParameterDefaultValues":{"description":"\u003cp\u003eThe default values of an integer parameter.\u003c/p\u003e","properties":{"staticValues":{"type":"array","items":{"type":"integer"},"description":"\u003cp\u003eA list of static default values for a given integer parameter.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetJoinInstruction":{"description":"\u003cp\u003eThe instructions associated with a join. \u003c/p\u003e","properties":{"leftJoinKeyProperties":{"$ref":"#/types/aws-native:quicksight:DataSetJoinKeyProperties","description":"Join key properties of the left operand."},"leftOperand":{"type":"string","description":"\u003cp\u003eThe operand on the left side of a join.\u003c/p\u003e"},"onClause":{"type":"string","description":"\u003cp\u003eThe join instructions provided in the \u003ccode\u003eON\u003c/code\u003e clause of a join.\u003c/p\u003e"},"rightJoinKeyProperties":{"$ref":"#/types/aws-native:quicksight:DataSetJoinKeyProperties","description":"Join key properties of the right operand."},"rightOperand":{"type":"string","description":"\u003cp\u003eThe operand on the right side of a join.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:quicksight:DataSetJoinType","description":"The type of join that it is."}},"type":"object","required":["leftOperand","onClause","rightOperand","type"]},"aws-native:quicksight:DataSetJoinKeyProperties":{"description":"\u003cp\u003eProperties associated with the columns participating in a join.\u003c/p\u003e","properties":{"uniqueKey":{"type":"boolean","description":"\u003cp\u003eA value that indicates that a row in a table is uniquely identified by the columns in\n            a join key. This is used by Quick Suite to optimize query performance.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetJoinOperandProperties":{"properties":{"outputColumnNameOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetOutputColumnNameOverride"},"description":"A list of column name overrides to apply to the join operand's output columns."}},"type":"object","required":["outputColumnNameOverrides"]},"aws-native:quicksight:DataSetJoinOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"leftOperand":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The left operand for the join operation."},"leftOperandProperties":{"$ref":"#/types/aws-native:quicksight:DataSetJoinOperandProperties","description":"Properties that control how the left operand's columns are handled in the join result."},"onClause":{"type":"string","description":"The join condition that specifies how to match rows between the left and right operands."},"rightOperand":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The right operand for the join operation."},"rightOperandProperties":{"$ref":"#/types/aws-native:quicksight:DataSetJoinOperandProperties","description":"Properties that control how the right operand's columns are handled in the join result."},"type":{"$ref":"#/types/aws-native:quicksight:DataSetJoinOperationType","description":"The type of join to perform, such as `INNER` , `LEFT` , `RIGHT` , or `OUTER` ."}},"type":"object","required":["alias","leftOperand","onClause","rightOperand","type"]},"aws-native:quicksight:DataSetJoinOperationType":{"type":"string","enum":[{"name":"Inner","value":"INNER"},{"name":"Outer","value":"OUTER"},{"name":"Left","value":"LEFT"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:DataSetJoinType":{"type":"string","enum":[{"name":"Inner","value":"INNER"},{"name":"Outer","value":"OUTER"},{"name":"Left","value":"LEFT"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:DataSetLogicalTable":{"description":"\u003cp\u003eA \u003ci\u003elogical table\u003c/i\u003e is a unit that joins and that data\n            transformations operate on. A logical table has a source, which can be either a physical\n            table or result of a join. When a logical table points to a physical table, the logical\n            table acts as a mutable copy of that physical table through transform operations.\u003c/p\u003e","properties":{"alias":{"type":"string","description":"\u003cp\u003eA display name for the logical table.\u003c/p\u003e"},"dataTransforms":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperation"},"description":"\u003cp\u003eTransform operations that act on this logical table. For this structure to be valid, only one of the attributes can be non-null. \u003c/p\u003e"},"source":{"$ref":"#/types/aws-native:quicksight:DataSetLogicalTableSource"}},"type":"object","required":["alias","source"]},"aws-native:quicksight:DataSetLogicalTableSource":{"description":"\u003cp\u003eInformation about the source of a logical table. This is a variant type structure. For\n            this structure to be valid, only one of the attributes can be non-null.\u003c/p\u003e","properties":{"dataSetArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Number (ARN) of the parent dataset.\u003c/p\u003e"},"joinInstruction":{"$ref":"#/types/aws-native:quicksight:DataSetJoinInstruction","description":"Specifies the result of a join of two logical tables."},"physicalTableId":{"type":"string","description":"\u003cp\u003ePhysical table ID.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetLookbackWindow":{"description":"\u003cp\u003eThe lookback window setup of an incremental refresh configuration.\u003c/p\u003e","properties":{"columnName":{"type":"string","description":"\u003cp\u003eThe name of the lookback window column.\u003c/p\u003e"},"size":{"type":"number","description":"\u003cp\u003eThe lookback window column size.\u003c/p\u003e"},"sizeUnit":{"$ref":"#/types/aws-native:quicksight:DataSetLookbackWindowSizeUnit","description":"The size unit that is used for the lookback window column. Valid values for this structure are `HOUR` , `DAY` , and `WEEK` ."}},"type":"object","required":["columnName","size","sizeUnit"]},"aws-native:quicksight:DataSetLookbackWindowSizeUnit":{"type":"string","enum":[{"name":"Hour","value":"HOUR"},{"name":"Day","value":"DAY"},{"name":"Week","value":"WEEK"}]},"aws-native:quicksight:DataSetNewDefaultValues":{"description":"\u003cp\u003eThe configuration that overrides the existing default values for a dataset parameter that is inherited from another dataset.\u003c/p\u003e","properties":{"dateTimeStaticValues":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eA list of static default values for a given date time parameter.\u003c/p\u003e"},"decimalStaticValues":{"type":"array","items":{"type":"number"},"description":"\u003cp\u003eA list of static default values for a given decimal parameter.\u003c/p\u003e"},"integerStaticValues":{"type":"array","items":{"type":"integer"},"description":"\u003cp\u003eA list of static default values for a given integer parameter.\u003c/p\u003e"},"stringStaticValues":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eA list of static default values for a given string parameter.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetNumericComparisonFilterCondition":{"properties":{"operator":{"$ref":"#/types/aws-native:quicksight:DataSetNumericComparisonFilterOperator","description":"The comparison operator to use, such as `EQUALS` , `GREATER_THAN` , `LESS_THAN` , or their variants."},"value":{"$ref":"#/types/aws-native:quicksight:DataSetNumericFilterValue","description":"The numeric value to compare against."}},"type":"object","required":["operator"]},"aws-native:quicksight:DataSetNumericComparisonFilterOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"GreaterThanOrEqualsTo","value":"GREATER_THAN_OR_EQUALS_TO"},{"name":"LessThan","value":"LESS_THAN"},{"name":"LessThanOrEqualsTo","value":"LESS_THAN_OR_EQUALS_TO"}]},"aws-native:quicksight:DataSetNumericFilterCondition":{"properties":{"columnName":{"type":"string","description":"The name of the numeric column to filter."},"comparisonFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetNumericComparisonFilterCondition","description":"A comparison-based filter condition for the numeric column."},"rangeFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetNumericRangeFilterCondition","description":"A range-based filter condition for the numeric column, filtering values between minimum and maximum numbers."}},"type":"object"},"aws-native:quicksight:DataSetNumericFilterValue":{"properties":{"staticValue":{"type":"number","description":"A static numeric value used for filtering."}},"type":"object"},"aws-native:quicksight:DataSetNumericRangeFilterCondition":{"properties":{"includeMaximum":{"type":"boolean","description":"Whether to include the maximum value in the filter range."},"includeMinimum":{"type":"boolean","description":"Whether to include the minimum value in the filter range."},"rangeMaximum":{"$ref":"#/types/aws-native:quicksight:DataSetNumericFilterValue","description":"The maximum numeric value for the range filter."},"rangeMinimum":{"$ref":"#/types/aws-native:quicksight:DataSetNumericFilterValue","description":"The minimum numeric value for the range filter."}},"type":"object"},"aws-native:quicksight:DataSetOutputColumn":{"description":"\u003cp\u003eOutput column.\u003c/p\u003e","properties":{"description":{"type":"string","description":"\u003cp\u003eA description for a column.\u003c/p\u003e"},"id":{"type":"string","description":"A unique identifier for the output column."},"name":{"type":"string","description":"\u003cp\u003eThe display name of the column..\u003c/p\u003e"},"subType":{"$ref":"#/types/aws-native:quicksight:DataSetColumnDataSubType","description":"The sub data type of the column."},"type":{"$ref":"#/types/aws-native:quicksight:DataSetColumnDataType","description":"The data type of the column."}},"type":"object"},"aws-native:quicksight:DataSetOutputColumnNameOverride":{"properties":{"outputColumnName":{"type":"string","description":"The new name to assign to the column in the output."},"sourceColumnName":{"type":"string","description":"The original name of the column from the source transform operation."}},"type":"object","required":["outputColumnName"]},"aws-native:quicksight:DataSetOverrideDatasetParameterOperation":{"description":"\u003cp\u003eA transform operation that overrides the dataset parameter values that are defined in another dataset.\u003c/p\u003e","properties":{"newDefaultValues":{"$ref":"#/types/aws-native:quicksight:DataSetNewDefaultValues","description":"The new default values for the parameter."},"newParameterName":{"type":"string","description":"\u003cp\u003eThe new name for the parameter.\u003c/p\u003e"},"parameterName":{"type":"string","description":"\u003cp\u003eThe name of the parameter to be overridden with different values.\u003c/p\u003e"}},"type":"object","required":["parameterName"]},"aws-native:quicksight:DataSetParentDataSet":{"properties":{"dataSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the parent dataset."},"inputColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetInputColumn"},"description":"The list of input columns available from the parent dataset."}},"type":"object","required":["dataSetArn","inputColumns"]},"aws-native:quicksight:DataSetPerformanceConfiguration":{"properties":{"uniqueKeys":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetUniqueKey"}}},"type":"object"},"aws-native:quicksight:DataSetPhysicalTable":{"description":"\u003cp\u003eA view of a data source that contains information about the shape of the data in the\n            underlying source. This is a variant type structure. For this structure to be valid,\n            only one of the attributes can be non-null.\u003c/p\u003e","properties":{"customSql":{"$ref":"#/types/aws-native:quicksight:DataSetCustomSql","description":"A physical table type built from the results of the custom SQL query."},"relationalTable":{"$ref":"#/types/aws-native:quicksight:DataSetRelationalTable","description":"A physical table type for relational data sources."},"s3Source":{"$ref":"#/types/aws-native:quicksight:DataSetS3Source","description":"A physical table type for as S3 data source."},"saaSTable":{"$ref":"#/types/aws-native:quicksight:DataSetSaaSTable","description":"A physical table type for Software-as-a-Service (SaaS) sources."}},"type":"object"},"aws-native:quicksight:DataSetPivotConfiguration":{"properties":{"labelColumnName":{"type":"string","description":"The name of the column that contains the labels to be pivoted into separate columns."},"pivotedLabels":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetPivotedLabel"},"description":"The list of specific label values to pivot into separate columns."}},"type":"object","required":["pivotedLabels"]},"aws-native:quicksight:DataSetPivotOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"groupByColumnNames":{"type":"array","items":{"type":"string"},"description":"The list of column names to group by when performing the pivot operation."},"pivotConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetPivotConfiguration","description":"Configuration that specifies which labels to pivot and how to structure the resulting columns."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for pivoting."},"valueColumnConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetValueColumnConfiguration","description":"Configuration for how to aggregate values when multiple rows map to the same pivoted column."}},"type":"object","required":["alias","pivotConfiguration","source","valueColumnConfiguration"]},"aws-native:quicksight:DataSetPivotedLabel":{"properties":{"labelName":{"type":"string","description":"The label value from the source data to be pivoted."},"newColumnId":{"type":"string","description":"A unique identifier for the new column created from this pivoted label."},"newColumnName":{"type":"string","description":"The name for the new column created from this pivoted label."}},"type":"object","required":["labelName","newColumnId","newColumnName"]},"aws-native:quicksight:DataSetProjectOperation":{"description":"\u003cp\u003eA transform operation that projects columns. Operations that come after a projection\n            can only refer to projected columns.\u003c/p\u003e","properties":{"alias":{"type":"string","description":"Alias for this operation."},"projectedColumns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eProjected columns.\u003c/p\u003e"},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for column projection."}},"type":"object"},"aws-native:quicksight:DataSetRefreshConfiguration":{"description":"\u003cp\u003eThe refresh configuration of a dataset.\u003c/p\u003e","properties":{"incrementalRefresh":{"$ref":"#/types/aws-native:quicksight:DataSetIncrementalRefresh","description":"The incremental refresh for the dataset."}},"type":"object","required":["incrementalRefresh"]},"aws-native:quicksight:DataSetRefreshFailureAlertStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DataSetRefreshFailureConfiguration":{"properties":{"emailAlert":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshFailureEmailAlert","description":"The email alert configuration for a dataset refresh failure."}},"type":"object"},"aws-native:quicksight:DataSetRefreshFailureEmailAlert":{"properties":{"alertStatus":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshFailureAlertStatus","description":"The status value that determines if email alerts are sent."}},"type":"object"},"aws-native:quicksight:DataSetRefreshProperties":{"description":"\u003cp\u003eThe refresh properties of a dataset.\u003c/p\u003e","properties":{"failureConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshFailureConfiguration","description":"The failure configuration for a dataset."},"refreshConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshConfiguration","description":"The refresh configuration for a dataset."}},"type":"object"},"aws-native:quicksight:DataSetRelationalTable":{"description":"\u003cp\u003eA physical table type for relational data sources.\u003c/p\u003e","properties":{"catalog":{"type":"string","description":"\u003cp\u003eThe catalog associated with a table.\u003c/p\u003e"},"dataSourceArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) for the data source.\u003c/p\u003e"},"inputColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetInputColumn"},"description":"\u003cp\u003eThe column schema of the table.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the relational table.\u003c/p\u003e"},"schema":{"type":"string","description":"\u003cp\u003eThe schema name. This name applies to certain relational database engines.\u003c/p\u003e"}},"type":"object","required":["dataSourceArn","inputColumns","name"]},"aws-native:quicksight:DataSetRenameColumnOperation":{"description":"\u003cp\u003eA transform operation that renames a column.\u003c/p\u003e","properties":{"columnName":{"type":"string","description":"\u003cp\u003eThe name of the column to be renamed.\u003c/p\u003e"},"newColumnName":{"type":"string","description":"\u003cp\u003eThe new name for the column.\u003c/p\u003e"}},"type":"object","required":["columnName","newColumnName"]},"aws-native:quicksight:DataSetRenameColumnsOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"renameColumnOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetRenameColumnOperation"},"description":"The list of column rename operations to perform, specifying old and new column names."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for column renaming."}},"type":"object","required":["alias","renameColumnOperations","source"]},"aws-native:quicksight:DataSetResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Quick Suite user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Quick Suite user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:DataSetRowLevelPermissionConfiguration":{"properties":{"rowLevelPermissionDataSet":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionDataSet"},"tagConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionTagConfiguration"}},"type":"object"},"aws-native:quicksight:DataSetRowLevelPermissionDataSet":{"description":"\u003cp\u003eInformation about a dataset that contains permissions for row-level security (RLS).\n            The permissions dataset maps fields to users or groups. For more information, see\n            \u003ca href=\"https://docs.aws.amazon.com/quicksight/latest/user/restrict-access-to-a-data-set-using-row-level-security.html\"\u003eUsing Row-Level Security (RLS) to Restrict Access to a Dataset\u003c/a\u003e in the \u003ci\u003eAmazon Quick Suite User\n                Guide\u003c/i\u003e.\u003c/p\u003e\n         \u003cp\u003eThe option to deny permissions by setting \u003ccode\u003ePermissionPolicy\u003c/code\u003e to \u003ccode\u003eDENY_ACCESS\u003c/code\u003e is\n            not supported for new RLS datasets.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the dataset that contains permissions for RLS.\u003c/p\u003e"},"formatVersion":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionFormatVersion","description":"The user or group rules associated with the dataset that contains permissions for RLS.\n\nBy default, `FormatVersion` is `VERSION_1` . When `FormatVersion` is `VERSION_1` , `UserName` and `GroupName` are required. When `FormatVersion` is `VERSION_2` , `UserARN` and `GroupARN` are required, and `Namespace` must not exist."},"namespace":{"type":"string","description":"\u003cp\u003eThe namespace associated with the dataset that contains permissions for RLS.\u003c/p\u003e"},"permissionPolicy":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionPolicy","description":"The type of permissions to use when interpreting the permissions for RLS. `DENY_ACCESS` is included for backward compatibility only."},"status":{"$ref":"#/types/aws-native:quicksight:DataSetStatus","description":"The status of the row-level security permission dataset. If enabled, the status is `ENABLED` . If disabled, the status is `DISABLED` ."}},"type":"object","required":["arn","permissionPolicy"]},"aws-native:quicksight:DataSetRowLevelPermissionFormatVersion":{"type":"string","enum":[{"name":"Version1","value":"VERSION_1"},{"name":"Version2","value":"VERSION_2"}]},"aws-native:quicksight:DataSetRowLevelPermissionPolicy":{"type":"string","enum":[{"name":"GrantAccess","value":"GRANT_ACCESS"},{"name":"DenyAccess","value":"DENY_ACCESS"}]},"aws-native:quicksight:DataSetRowLevelPermissionTagConfiguration":{"description":"\u003cp\u003eThe configuration of tags on a dataset to set row-level security. \u003c/p\u003e","properties":{"status":{"$ref":"#/types/aws-native:quicksight:DataSetStatus","description":"The status of row-level security tags. If enabled, the status is `ENABLED` . If disabled, the status is `DISABLED` ."},"tagRuleConfigurations":{"type":"array","items":{"type":"array","items":{"type":"string"}},"description":"\u003cp\u003eA list of tag configuration rules to apply to a dataset. All tag configurations have the OR condition. Tags within each tile will be joined (AND). At least one rule in this structure must have all tag values assigned to it to apply Row-level security (RLS) to the dataset.\u003c/p\u003e"},"tagRules":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionTagRule"},"description":"\u003cp\u003eA set of rules associated with row-level security, such as the tag names and columns that they are assigned to.\u003c/p\u003e"}},"type":"object","required":["tagRules"]},"aws-native:quicksight:DataSetRowLevelPermissionTagRule":{"description":"\u003cp\u003eA set of rules associated with a tag.\u003c/p\u003e","properties":{"columnName":{"type":"string","description":"\u003cp\u003eThe column name that a tag key is assigned to.\u003c/p\u003e"},"matchAllValue":{"type":"string","description":"\u003cp\u003eA string that you want to use to filter by all the values in a column in the dataset and don’t want to list the values one by one. For example, you can use an asterisk as your match all value.\u003c/p\u003e"},"tagKey":{"type":"string","description":"\u003cp\u003eThe unique key for a tag.\u003c/p\u003e"},"tagMultiValueDelimiter":{"type":"string","description":"\u003cp\u003eA string that you want to use to delimit the values when you pass the values at run time. For example, you can delimit the values with a comma.\u003c/p\u003e"}},"type":"object","required":["columnName","tagKey"]},"aws-native:quicksight:DataSetS3Source":{"description":"\u003cp\u003eA physical table type for an S3 data source.\u003c/p\u003e","properties":{"dataSourceArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) for the data source.\u003c/p\u003e"},"inputColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetInputColumn"},"description":"\u003cp\u003eA physical table type for an S3 data source.\u003c/p\u003e\n         \u003cnote\u003e\n            \u003cp\u003eFor files that aren't JSON, only \u003ccode\u003eSTRING\u003c/code\u003e data types are supported in input columns.\u003c/p\u003e\n         \u003c/note\u003e"},"uploadSettings":{"$ref":"#/types/aws-native:quicksight:DataSetUploadSettings","description":"Information about the format for the S3 source file or files."}},"type":"object","required":["dataSourceArn","inputColumns"]},"aws-native:quicksight:DataSetSaaSTable":{"properties":{"dataSourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SaaS data source."},"inputColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetInputColumn"},"description":"The list of input columns available from the SaaS table."},"tablePath":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetTablePathElement"},"description":"The hierarchical path to the table within the SaaS data source."}},"type":"object","required":["dataSourceArn","inputColumns","tablePath"]},"aws-native:quicksight:DataSetSemanticModelConfiguration":{"properties":{"tableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetSemanticTable"},"description":"A map of semantic tables that define the analytical structure."}},"type":"object"},"aws-native:quicksight:DataSetSemanticTable":{"properties":{"alias":{"type":"string","description":"Alias for the semantic table."},"destinationTableId":{"type":"string","description":"The identifier of the destination table from data preparation that provides data to this semantic table."},"rowLevelPermissionConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionConfiguration","description":"Configuration for row level security that control data access for this semantic table."}},"type":"object","required":["alias","destinationTableId"]},"aws-native:quicksight:DataSetSourceTable":{"properties":{"dataSet":{"$ref":"#/types/aws-native:quicksight:DataSetParentDataSet","description":"A parent dataset that serves as the data source instead of a physical table."},"physicalTableId":{"type":"string","description":"The identifier of the physical table that serves as the data source."}},"type":"object"},"aws-native:quicksight:DataSetStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:DataSetStringComparisonFilterCondition":{"properties":{"operator":{"$ref":"#/types/aws-native:quicksight:DataSetStringComparisonFilterOperator","description":"The comparison operator to use, such as `EQUALS` , `CONTAINS` , `STARTS_WITH` , `ENDS_WITH` , or their negations."},"value":{"$ref":"#/types/aws-native:quicksight:DataSetStringFilterValue","description":"The string value to compare against."}},"type":"object","required":["operator"]},"aws-native:quicksight:DataSetStringComparisonFilterOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"},{"name":"Contains","value":"CONTAINS"},{"name":"DoesNotContain","value":"DOES_NOT_CONTAIN"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"}]},"aws-native:quicksight:DataSetStringDatasetParameter":{"description":"\u003cp\u003eA string parameter for a dataset.\u003c/p\u003e","properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:DataSetStringDatasetParameterDefaultValues","description":"A list of default values for a given string dataset parameter type. This structure only accepts static values."},"id":{"type":"string","description":"\u003cp\u003eAn identifier for the string parameter that is created in the dataset.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the string parameter that is created in the dataset.\u003c/p\u003e"},"valueType":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameterValueType","description":"The value type of the dataset parameter. Valid values are `single value` or `multi value` ."}},"type":"object","required":["id","name","valueType"]},"aws-native:quicksight:DataSetStringDatasetParameterDefaultValues":{"description":"\u003cp\u003eThe default values of a string parameter.\u003c/p\u003e","properties":{"staticValues":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eA list of static default values for a given string parameter.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetStringFilterCondition":{"properties":{"columnName":{"type":"string","description":"The name of the string column to filter."},"comparisonFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetStringComparisonFilterCondition","description":"A comparison-based filter condition for the string column."},"listFilterCondition":{"$ref":"#/types/aws-native:quicksight:DataSetStringListFilterCondition","description":"A list-based filter condition that includes or excludes values from a specified list."}},"type":"object"},"aws-native:quicksight:DataSetStringFilterValue":{"properties":{"staticValue":{"type":"string","description":"A static string value used for filtering."}},"type":"object"},"aws-native:quicksight:DataSetStringListFilterCondition":{"properties":{"operator":{"$ref":"#/types/aws-native:quicksight:DataSetStringListFilterOperator","description":"The list operator to use, either `INCLUDE` to match values in the list or `EXCLUDE` to filter out values in the list."},"values":{"$ref":"#/types/aws-native:quicksight:DataSetStringListFilterValue","description":"The list of string values to include or exclude in the filter."}},"type":"object","required":["operator"]},"aws-native:quicksight:DataSetStringListFilterOperator":{"type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"Exclude","value":"EXCLUDE"}]},"aws-native:quicksight:DataSetStringListFilterValue":{"properties":{"staticValues":{"type":"array","items":{"type":"string"},"description":"A list of static string values used for filtering."}},"type":"object"},"aws-native:quicksight:DataSetTablePathElement":{"properties":{"id":{"type":"string","description":"The unique identifier of the path element."},"name":{"type":"string","description":"The name of the path element."}},"type":"object"},"aws-native:quicksight:DataSetTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:DataSetTagColumnOperation":{"description":"\u003cp\u003eA transform operation that tags a column with additional information.\u003c/p\u003e","properties":{"columnName":{"type":"string","description":"\u003cp\u003eThe column that this operation acts on.\u003c/p\u003e"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnTag"},"description":"\u003cp\u003eThe dataset column tag, currently only used for geospatial type tagging.\u003c/p\u003e\n         \u003cnote\u003e\n            \u003cp\u003eThis is not tags for the Amazon Web Services tagging feature.\u003c/p\u003e\n         \u003c/note\u003e"}},"type":"object","required":["columnName","tags"]},"aws-native:quicksight:DataSetTextQualifier":{"type":"string","enum":[{"name":"DoubleQuote","value":"DOUBLE_QUOTE"},{"name":"SingleQuote","value":"SINGLE_QUOTE"}]},"aws-native:quicksight:DataSetTimeGranularity":{"type":"string","enum":[{"name":"Year","value":"YEAR"},{"name":"Quarter","value":"QUARTER"},{"name":"Month","value":"MONTH"},{"name":"Week","value":"WEEK"},{"name":"Day","value":"DAY"},{"name":"Hour","value":"HOUR"},{"name":"Minute","value":"MINUTE"},{"name":"Second","value":"SECOND"},{"name":"Millisecond","value":"MILLISECOND"}]},"aws-native:quicksight:DataSetTransformOperation":{"description":"\u003cp\u003eA data transformation on a logical table. This is a variant type structure. For this\n            structure to be valid, only one of the attributes can be non-null.\u003c/p\u003e","properties":{"castColumnTypeOperation":{"$ref":"#/types/aws-native:quicksight:DataSetCastColumnTypeOperation","description":"A transform operation that casts a column to a different type."},"createColumnsOperation":{"$ref":"#/types/aws-native:quicksight:DataSetCreateColumnsOperation","description":"An operation that creates calculated columns. Columns created in one such operation form a lexical closure."},"filterOperation":{"$ref":"#/types/aws-native:quicksight:DataSetFilterOperation","description":"An operation that filters rows based on some condition."},"overrideDatasetParameterOperation":{"$ref":"#/types/aws-native:quicksight:DataSetOverrideDatasetParameterOperation","description":"A transform operation that overrides the dataset parameter values that are defined in another dataset."},"projectOperation":{"$ref":"#/types/aws-native:quicksight:DataSetProjectOperation","description":"An operation that projects columns. Operations that come after a projection can only refer to projected columns."},"renameColumnOperation":{"$ref":"#/types/aws-native:quicksight:DataSetRenameColumnOperation","description":"An operation that renames a column."},"tagColumnOperation":{"$ref":"#/types/aws-native:quicksight:DataSetTagColumnOperation","description":"An operation that tags a column with additional information."},"untagColumnOperation":{"$ref":"#/types/aws-native:quicksight:DataSetUntagColumnOperation"}},"type":"object"},"aws-native:quicksight:DataSetTransformOperationSource":{"properties":{"columnIdMappings":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnIdMapping"},"description":"The mappings between source column identifiers and target column identifiers for this transformation."},"transformOperationId":{"type":"string","description":"The identifier of the transform operation that provides input data."}},"type":"object","required":["transformOperationId"]},"aws-native:quicksight:DataSetTransformStep":{"properties":{"aggregateStep":{"$ref":"#/types/aws-native:quicksight:DataSetAggregateOperation","description":"A transform step that groups data and applies aggregation functions to calculate summary values."},"appendStep":{"$ref":"#/types/aws-native:quicksight:DataSetAppendOperation","description":"A transform step that combines rows from multiple sources by stacking them vertically."},"castColumnTypesStep":{"$ref":"#/types/aws-native:quicksight:DataSetCastColumnTypesOperation","description":"A transform step that changes the data types of one or more columns."},"createColumnsStep":{"$ref":"#/types/aws-native:quicksight:DataSetCreateColumnsOperation"},"filtersStep":{"$ref":"#/types/aws-native:quicksight:DataSetFiltersOperation","description":"A transform step that applies filter conditions."},"importTableStep":{"$ref":"#/types/aws-native:quicksight:DataSetImportTableOperation","description":"A transform step that brings data from a source table."},"joinStep":{"$ref":"#/types/aws-native:quicksight:DataSetJoinOperation","description":"A transform step that combines data from two sources based on specified join conditions."},"pivotStep":{"$ref":"#/types/aws-native:quicksight:DataSetPivotOperation","description":"A transform step that converts row values into columns to reshape the data structure."},"projectStep":{"$ref":"#/types/aws-native:quicksight:DataSetProjectOperation"},"renameColumnsStep":{"$ref":"#/types/aws-native:quicksight:DataSetRenameColumnsOperation","description":"A transform step that changes the names of one or more columns."},"unpivotStep":{"$ref":"#/types/aws-native:quicksight:DataSetUnpivotOperation","description":"A transform step that converts columns into rows to normalize the data structure."}},"type":"object"},"aws-native:quicksight:DataSetUniqueKey":{"properties":{"columnNames":{"type":"array","items":{"type":"string"}}},"type":"object","required":["columnNames"]},"aws-native:quicksight:DataSetUnpivotOperation":{"properties":{"alias":{"type":"string","description":"Alias for this operation."},"columnsToUnpivot":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnToUnpivot"},"description":"The list of columns to unpivot from the source data."},"source":{"$ref":"#/types/aws-native:quicksight:DataSetTransformOperationSource","description":"The source transform operation that provides input data for unpivoting."},"unpivotedLabelColumnId":{"type":"string","description":"A unique identifier for the new column that will contain the unpivoted column names."},"unpivotedLabelColumnName":{"type":"string","description":"The name for the new column that will contain the unpivoted column names."},"unpivotedValueColumnId":{"type":"string","description":"A unique identifier for the new column that will contain the unpivoted values."},"unpivotedValueColumnName":{"type":"string","description":"The name for the new column that will contain the unpivoted values."}},"type":"object","required":["alias","columnsToUnpivot","source","unpivotedLabelColumnId","unpivotedLabelColumnName","unpivotedValueColumnId","unpivotedValueColumnName"]},"aws-native:quicksight:DataSetUntagColumnOperation":{"description":"\u003cp\u003eA transform operation that removes tags associated with a column.\u003c/p\u003e","properties":{"columnName":{"type":"string","description":"\u003cp\u003eThe column that this operation acts on.\u003c/p\u003e"},"tagNames":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnTagName"},"description":"\u003cp\u003eThe column tags to remove from this column.\u003c/p\u003e"}},"type":"object","required":["columnName","tagNames"]},"aws-native:quicksight:DataSetUploadSettings":{"description":"\u003cp\u003eInformation about the format for a source file or files.\u003c/p\u003e","properties":{"containsHeader":{"type":"boolean","description":"\u003cp\u003eWhether the file has a header row, or the files each have a header row.\u003c/p\u003e"},"delimiter":{"type":"string","description":"\u003cp\u003eThe delimiter between values in the file.\u003c/p\u003e"},"format":{"$ref":"#/types/aws-native:quicksight:DataSetFileFormat","description":"File format."},"startFromRow":{"type":"number","description":"\u003cp\u003eA row number to start reading data from.\u003c/p\u003e"},"textQualifier":{"$ref":"#/types/aws-native:quicksight:DataSetTextQualifier","description":"Text qualifier."}},"type":"object"},"aws-native:quicksight:DataSetUsageConfiguration":{"description":"\u003cp\u003eThe usage configuration to apply to child datasets that reference this dataset as a source.\u003c/p\u003e","properties":{"disableUseAsDirectQuerySource":{"type":"boolean","description":"\u003cp\u003eAn option that controls whether a child dataset of a direct query can use this dataset as a source.\u003c/p\u003e"},"disableUseAsImportedSource":{"type":"boolean","description":"\u003cp\u003eAn option that controls whether a child dataset that's stored in QuickSight can use this dataset as a source.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSetUseAs":{"type":"string","enum":[{"name":"RlsRules","value":"RLS_RULES"}]},"aws-native:quicksight:DataSetValueColumnConfiguration":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepAggregationFunction","description":"The aggregation function to apply when multiple values map to the same pivoted cell."}},"type":"object"},"aws-native:quicksight:DataSourceAmazonElasticsearchParameters":{"description":"\u003cp\u003eThe parameters for OpenSearch.\u003c/p\u003e","properties":{"domain":{"type":"string","description":"\u003cp\u003eThe OpenSearch domain.\u003c/p\u003e"}},"type":"object","required":["domain"]},"aws-native:quicksight:DataSourceAmazonOpenSearchParameters":{"description":"\u003cp\u003eThe parameters for OpenSearch.\u003c/p\u003e","properties":{"domain":{"type":"string","description":"\u003cp\u003eThe OpenSearch domain.\u003c/p\u003e"}},"type":"object","required":["domain"]},"aws-native:quicksight:DataSourceAthenaParameters":{"description":"\u003cp\u003eParameters for Amazon Athena.\u003c/p\u003e","properties":{"identityCenterConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSourceIdentityCenterConfiguration","description":"An optional parameter that configures IAM Identity Center authentication to grant Quick Sight access to your workgroup.\n\nThis parameter can only be specified if your Quick Sight account is configured with IAM Identity Center."},"roleArn":{"type":"string","description":"\u003cp\u003eUse the \u003ccode\u003eRoleArn\u003c/code\u003e structure to override an account-wide role for a specific Athena data source. For example, say an account administrator has turned off all Athena access with an account-wide role. The administrator can then use \u003ccode\u003eRoleArn\u003c/code\u003e to bypass the account-wide role and allow Athena access for the single Athena data source that is specified in the structure, even if the account-wide role forbidding Athena access is still active.\u003c/p\u003e"},"workGroup":{"type":"string","description":"\u003cp\u003eThe workgroup that Amazon Athena uses.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSourceAuroraParameters":{"description":"\u003cp\u003eParameters for Amazon Aurora.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceAuroraPostgreSqlParameters":{"description":"\u003cp\u003eParameters for Amazon Aurora PostgreSQL-Compatible Edition.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eThe Amazon Aurora PostgreSQL database to connect to.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eThe Amazon Aurora PostgreSQL-Compatible host to connect to.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003eThe port that Amazon Aurora PostgreSQL is listening on.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceAuthenticationType":{"type":"string","enum":[{"name":"Password","value":"PASSWORD"},{"name":"Token","value":"TOKEN"},{"name":"X509","value":"X509"},{"name":"Keypair","value":"KEYPAIR"}]},"aws-native:quicksight:DataSourceCredentialPair":{"description":"\u003cp\u003eThe combination of user name and password that are used as credentials.\u003c/p\u003e","properties":{"alternateDataSourceParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters"},"description":"\u003cp\u003eA set of alternate data source parameters that you want to share for these\n            credentials. The credentials are applied in tandem with the data source parameters when\n            you copy a data source by using a create or update request. The API operation compares\n            the \u003ccode\u003eDataSourceParameters\u003c/code\u003e structure that's in the request with the\n            structures in the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e allow list. If the\n            structures are an exact match, the request is allowed to use the new data source with\n            the existing credentials. If the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e list is\n            null, the \u003ccode\u003eDataSourceParameters\u003c/code\u003e originally used with these\n                \u003ccode\u003eCredentials\u003c/code\u003e is automatically allowed.\u003c/p\u003e"},"password":{"type":"string","description":"\u003cp\u003ePassword.\u003c/p\u003e"},"username":{"type":"string","description":"\u003cp\u003eUser name.\u003c/p\u003e"}},"type":"object","required":["password","username"]},"aws-native:quicksight:DataSourceCredentials":{"description":"\u003cp\u003eData source credentials. This is a variant type structure. For this structure to be\n            valid, only one of the attributes can be non-null.\u003c/p\u003e","properties":{"copySourceArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of a data source that has the credential pair that you\n            want to use. When \u003ccode\u003eCopySourceArn\u003c/code\u003e is not null, the credential pair from the\n            data source in the ARN is used as the credentials for the\n            \u003ccode\u003eDataSourceCredentials\u003c/code\u003e structure.\u003c/p\u003e"},"credentialPair":{"$ref":"#/types/aws-native:quicksight:DataSourceCredentialPair","description":"Credential pair. For more information, see `[CredentialPair](https://docs.aws.amazon.com/quicksight/latest/APIReference/API_CredentialPair.html)` ."},"keyPairCredentials":{"$ref":"#/types/aws-native:quicksight:DataSourceKeyPairCredentials","description":"The credentials for connecting using key-pair."},"secretArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the secret associated with the data source in Amazon Secrets Manager.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSourceDatabricksParameters":{"description":"\u003cp\u003eThe parameters that are required to connect to a Databricks data source.\u003c/p\u003e","properties":{"host":{"type":"string","description":"\u003cp\u003eThe host name of the Databricks data source.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003eThe port for the Databricks data source.\u003c/p\u003e"},"sqlEndpointPath":{"type":"string","description":"\u003cp\u003eThe HTTP path of the Databricks data source.\u003c/p\u003e"}},"type":"object","required":["host","port","sqlEndpointPath"]},"aws-native:quicksight:DataSourceErrorInfo":{"description":"\u003cp\u003eError information for the data source creation or update.\u003c/p\u003e","properties":{"message":{"type":"string","description":"\u003cp\u003eError message.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:quicksight:DataSourceErrorInfoType","description":"Error type."}},"type":"object"},"aws-native:quicksight:DataSourceErrorInfoType":{"type":"string","enum":[{"name":"AccessDenied","value":"ACCESS_DENIED"},{"name":"CopySourceNotFound","value":"COPY_SOURCE_NOT_FOUND"},{"name":"Timeout","value":"TIMEOUT"},{"name":"EngineVersionNotSupported","value":"ENGINE_VERSION_NOT_SUPPORTED"},{"name":"UnknownHost","value":"UNKNOWN_HOST"},{"name":"GenericSqlFailure","value":"GENERIC_SQL_FAILURE"},{"name":"Conflict","value":"CONFLICT"},{"name":"Unknown","value":"UNKNOWN"}]},"aws-native:quicksight:DataSourceIdentityCenterConfiguration":{"description":"\u003cp\u003eThe parameters for an IAM Identity Center configuration.\u003c/p\u003e","properties":{"enableIdentityPropagation":{"type":"boolean","description":"\u003cp\u003eA Boolean option that controls whether Trusted Identity Propagation should be used.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSourceKeyPairCredentials":{"properties":{"keyPairUsername":{"type":"string","description":"Username"},"privateKey":{"type":"string","description":"PrivateKey"},"privateKeyPassphrase":{"type":"string","description":"PrivateKeyPassphrase"}},"type":"object","required":["keyPairUsername","privateKey"]},"aws-native:quicksight:DataSourceManifestFileLocation":{"description":"\u003cp\u003eAmazon S3 manifest file location.\u003c/p\u003e","properties":{"bucket":{"type":"string","description":"\u003cp\u003eAmazon S3 bucket.\u003c/p\u003e"},"key":{"type":"string","description":"\u003cp\u003eAmazon S3 key that identifies an object.\u003c/p\u003e"}},"type":"object","required":["bucket","key"]},"aws-native:quicksight:DataSourceMariaDbParameters":{"description":"\u003cp\u003eThe parameters for MariaDB.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceMySqlParameters":{"description":"\u003cp\u003eThe parameters for MySQL.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceOAuthParameters":{"properties":{"identityProviderResourceUri":{"type":"string","description":"The resource uri of the identity provider."},"identityProviderVpcConnectionProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceVpcConnectionProperties"},"oAuthScope":{"type":"string","description":"The OAuth scope."},"tokenProviderUrl":{"type":"string","description":"The token endpoint URL of the identity provider."}},"type":"object","required":["tokenProviderUrl"]},"aws-native:quicksight:DataSourceOracleParameters":{"description":"\u003cp\u003eThe parameters for Oracle.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eThe database.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eAn Oracle host.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003eThe port.\u003c/p\u003e"},"useServiceName":{"type":"boolean","description":"A Boolean value that indicates whether the `Database` uses a service name or an SID. If this value is left blank, the default value is `SID` . If this value is set to `false` , the value is `SID` ."}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceParameters":{"description":"\u003cp\u003eThe parameters that Amazon Quick Suite uses to connect to your underlying data source.\n            This is a variant type structure. For this structure to be valid, only one of the\n            attributes can be non-null.\u003c/p\u003e","properties":{"amazonElasticsearchParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceAmazonElasticsearchParameters","description":"The parameters for OpenSearch."},"amazonOpenSearchParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceAmazonOpenSearchParameters","description":"The parameters for OpenSearch."},"athenaParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceAthenaParameters","description":"The parameters for Amazon Athena."},"auroraParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceAuroraParameters","description":"The parameters for Amazon Aurora MySQL."},"auroraPostgreSqlParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceAuroraPostgreSqlParameters","description":"The parameters for Amazon Aurora."},"databricksParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceDatabricksParameters","description":"The required parameters that are needed to connect to a Databricks data source."},"mariaDbParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceMariaDbParameters","description":"The parameters for MariaDB."},"mySqlParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceMySqlParameters","description":"The parameters for MySQL."},"oracleParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceOracleParameters","description":"Oracle parameters."},"postgreSqlParameters":{"$ref":"#/types/aws-native:quicksight:DataSourcePostgreSqlParameters","description":"The parameters for PostgreSQL."},"prestoParameters":{"$ref":"#/types/aws-native:quicksight:DataSourcePrestoParameters","description":"The parameters for Presto."},"rdsParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceRdsParameters","description":"The parameters for Amazon RDS."},"redshiftParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceRedshiftParameters","description":"The parameters for Amazon Redshift."},"s3Parameters":{"$ref":"#/types/aws-native:quicksight:DataSourceS3Parameters","description":"The parameters for S3."},"snowflakeParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceSnowflakeParameters","description":"The parameters for Snowflake."},"sparkParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceSparkParameters","description":"The parameters for Spark."},"sqlServerParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceSqlServerParameters","description":"The parameters for SQL Server."},"starburstParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceStarburstParameters","description":"The parameters that are required to connect to a Starburst data source."},"teradataParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceTeradataParameters","description":"The parameters for Teradata."},"trinoParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceTrinoParameters","description":"The parameters that are required to connect to a Trino data source."}},"type":"object"},"aws-native:quicksight:DataSourcePostgreSqlParameters":{"description":"\u003cp\u003eThe parameters for PostgreSQL.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourcePrestoParameters":{"description":"\u003cp\u003eThe parameters for Presto.\u003c/p\u003e","properties":{"catalog":{"type":"string","description":"\u003cp\u003eCatalog.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["catalog","host","port"]},"aws-native:quicksight:DataSourceRdsParameters":{"description":"\u003cp\u003eThe parameters for Amazon RDS.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"instanceId":{"type":"string","description":"\u003cp\u003eInstance ID.\u003c/p\u003e"}},"type":"object","required":["database","instanceId"]},"aws-native:quicksight:DataSourceRedshiftIamParameters":{"description":"\u003cp\u003eA structure that grants Quick Suite access to your cluster and make a call to the \u003ccode\u003eredshift:GetClusterCredentials\u003c/code\u003e API. For more information on the \u003ccode\u003eredshift:GetClusterCredentials\u003c/code\u003e API, see \u003ca href=\"https://docs.aws.amazon.com/redshift/latest/APIReference/API_GetClusterCredentials.html\"\u003e\n               \u003ccode\u003eGetClusterCredentials\u003c/code\u003e\n            \u003c/a\u003e.\u003c/p\u003e","properties":{"autoCreateDatabaseUser":{"type":"boolean","description":"\u003cp\u003eAutomatically creates a database user. If your database doesn't have a \u003ccode\u003eDatabaseUser\u003c/code\u003e, set this parameter to \u003ccode\u003eTrue\u003c/code\u003e. If there is no \u003ccode\u003eDatabaseUser\u003c/code\u003e, Amazon Quick Suite can't connect to your cluster. The \u003ccode\u003eRoleArn\u003c/code\u003e that you use for this operation must grant access to \u003ccode\u003eredshift:CreateClusterUser\u003c/code\u003e to successfully create the user.\u003c/p\u003e"},"databaseGroups":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eA list of groups whose permissions will be granted to Quick Suite to access the cluster. These permissions are combined with the permissions granted to Quick Suite by the \u003ccode\u003eDatabaseUser\u003c/code\u003e. If you choose to include this parameter, the \u003ccode\u003eRoleArn\u003c/code\u003e must grant access to \u003ccode\u003eredshift:JoinGroup\u003c/code\u003e.\u003c/p\u003e"},"databaseUser":{"type":"string","description":"\u003cp\u003eThe user whose permissions and group memberships will be used by Quick Suite to access the cluster. If this user already exists in your database, Quick Suite is granted the same permissions that the user has. If the user doesn't exist, set the value of \u003ccode\u003eAutoCreateDatabaseUser\u003c/code\u003e to \u003ccode\u003eTrue\u003c/code\u003e to create a new user with PUBLIC permissions.\u003c/p\u003e"},"roleArn":{"type":"string","description":"\u003cp\u003eUse the \u003ccode\u003eRoleArn\u003c/code\u003e structure to allow Quick Suite to call \u003ccode\u003eredshift:GetClusterCredentials\u003c/code\u003e on your cluster. The calling principal must have \u003ccode\u003eiam:PassRole\u003c/code\u003e access to pass the role to Quick Suite. The role's trust policy must allow the Quick Suite service principal to assume the role.\u003c/p\u003e"}},"type":"object","required":["roleArn"]},"aws-native:quicksight:DataSourceRedshiftParameters":{"description":"\u003cp\u003eThe parameters for Amazon Redshift. The \u003ccode\u003eClusterId\u003c/code\u003e field can be blank if\n            \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003ePort\u003c/code\u003e are both set. The \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003ePort\u003c/code\u003e fields can be blank if the \u003ccode\u003eClusterId\u003c/code\u003e field is set.\u003c/p\u003e","properties":{"clusterId":{"type":"string","description":"\u003cp\u003eCluster ID. This field can be blank if the \u003ccode\u003eHost\u003c/code\u003e and \u003ccode\u003ePort\u003c/code\u003e are\n            provided.\u003c/p\u003e"},"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost. This field can be blank if \u003ccode\u003eClusterId\u003c/code\u003e is provided.\u003c/p\u003e"},"iamParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceRedshiftIamParameters","description":"An optional parameter that uses IAM authentication to grant Quick Sight access to your cluster. This parameter can be used instead of [DataSourceCredentials](https://docs.aws.amazon.com/quicksight/latest/APIReference/API_DataSourceCredentials.html) ."},"identityCenterConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSourceIdentityCenterConfiguration","description":"An optional parameter that configures IAM Identity Center authentication to grant Quick Sight access to your cluster.\n\nThis parameter can only be specified if your Quick Sight account is configured with IAM Identity Center."},"port":{"type":"number","description":"\u003cp\u003ePort. This field can be blank if the \u003ccode\u003eClusterId\u003c/code\u003e is provided.\u003c/p\u003e"}},"type":"object","required":["database"]},"aws-native:quicksight:DataSourceResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Quick Suite user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Quick Suite user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"},"resource":{"type":"string"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:DataSourceResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:quicksight:DataSourceS3Parameters":{"description":"\u003cp\u003eThe parameters for S3.\u003c/p\u003e","properties":{"manifestFileLocation":{"$ref":"#/types/aws-native:quicksight:DataSourceManifestFileLocation","description":"Location of the Amazon S3 manifest file. This is NULL if the manifest file was uploaded into Quick Sight."},"roleArn":{"type":"string","description":"\u003cp\u003eUse the \u003ccode\u003eRoleArn\u003c/code\u003e structure to override an account-wide role for a specific S3 data source. For example, say an account administrator has turned off all S3 access with an account-wide role. The administrator can then use \u003ccode\u003eRoleArn\u003c/code\u003e to bypass the account-wide role and allow S3 access for the single S3 data source that is specified in the structure, even if the account-wide role forbidding S3 access is still active.\u003c/p\u003e"}},"type":"object","required":["manifestFileLocation"]},"aws-native:quicksight:DataSourceSnowflakeParameters":{"description":"\u003cp\u003eThe parameters for Snowflake.\u003c/p\u003e","properties":{"authenticationType":{"$ref":"#/types/aws-native:quicksight:DataSourceAuthenticationType","description":"The authentication type that you want to use for your connection. This parameter accepts OAuth and non-OAuth authentication types."},"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"databaseAccessControlRole":{"type":"string","description":"The database access control role."},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"oAuthParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceOAuthParameters","description":"An object that contains information needed to create a data source connection between an Quick Sight account and Snowflake."},"warehouse":{"type":"string","description":"\u003cp\u003eWarehouse.\u003c/p\u003e"}},"type":"object","required":["database","host","warehouse"]},"aws-native:quicksight:DataSourceSparkParameters":{"description":"\u003cp\u003eThe parameters for Spark.\u003c/p\u003e","properties":{"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["host","port"]},"aws-native:quicksight:DataSourceSqlServerParameters":{"description":"\u003cp\u003eThe parameters for SQL Server.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceSslProperties":{"description":"\u003cp\u003eSecure Socket Layer (SSL) properties that apply when Quick Suite connects to your\n            underlying data source.\u003c/p\u003e","properties":{"disableSsl":{"type":"boolean","description":"\u003cp\u003eA Boolean option to control whether SSL should be disabled.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:DataSourceStarburstParameters":{"description":"\u003cp\u003eThe parameters that are required to connect to a Starburst data source.\u003c/p\u003e","properties":{"authenticationType":{"$ref":"#/types/aws-native:quicksight:DataSourceAuthenticationType","description":"The authentication type that you want to use for your connection. This parameter accepts OAuth and non-OAuth authentication types."},"catalog":{"type":"string","description":"\u003cp\u003eThe catalog name for the Starburst data source.\u003c/p\u003e"},"databaseAccessControlRole":{"type":"string","description":"The database access control role."},"host":{"type":"string","description":"\u003cp\u003eThe host name of the Starburst data source.\u003c/p\u003e"},"oAuthParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceOAuthParameters","description":"An object that contains information needed to create a data source connection between an Quick Sight account and Starburst."},"port":{"type":"number","description":"\u003cp\u003eThe port for the Starburst data source.\u003c/p\u003e"},"productType":{"$ref":"#/types/aws-native:quicksight:DataSourceStarburstProductType","description":"The product type for the Starburst data source."}},"type":"object","required":["catalog","host","port"]},"aws-native:quicksight:DataSourceStarburstProductType":{"type":"string","enum":[{"name":"Galaxy","value":"GALAXY"},{"name":"Enterprise","value":"ENTERPRISE"}]},"aws-native:quicksight:DataSourceTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:DataSourceTeradataParameters":{"description":"\u003cp\u003eThe parameters for Teradata.\u003c/p\u003e","properties":{"database":{"type":"string","description":"\u003cp\u003eDatabase.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eHost.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003ePort.\u003c/p\u003e"}},"type":"object","required":["database","host","port"]},"aws-native:quicksight:DataSourceTrinoParameters":{"description":"\u003cp\u003eThe parameters that are required to connect to a Trino data source.\u003c/p\u003e","properties":{"catalog":{"type":"string","description":"\u003cp\u003eThe catalog name for the Trino data source.\u003c/p\u003e"},"host":{"type":"string","description":"\u003cp\u003eThe host name of the Trino data source.\u003c/p\u003e"},"port":{"type":"number","description":"\u003cp\u003eThe port for the Trino data source.\u003c/p\u003e"}},"type":"object","required":["catalog","host","port"]},"aws-native:quicksight:DataSourceType":{"type":"string","enum":[{"name":"AdobeAnalytics","value":"ADOBE_ANALYTICS"},{"name":"AmazonElasticsearch","value":"AMAZON_ELASTICSEARCH"},{"name":"AmazonOpensearch","value":"AMAZON_OPENSEARCH"},{"name":"Athena","value":"ATHENA"},{"name":"Aurora","value":"AURORA"},{"name":"AuroraPostgresql","value":"AURORA_POSTGRESQL"},{"name":"AwsIotAnalytics","value":"AWS_IOT_ANALYTICS"},{"name":"Databricks","value":"DATABRICKS"},{"name":"Denodo","value":"DENODO"},{"name":"Dremio","value":"DREMIO"},{"name":"Dynamodb","value":"DYNAMODB"},{"name":"Saphana","value":"SAPHANA"},{"name":"Db2as400","value":"DB2_AS400"},{"name":"Exasol","value":"EXASOL"},{"name":"File","value":"FILE"},{"name":"Github","value":"GITHUB"},{"name":"InternationalDataCorporation","value":"INTERNATIONAL_DATA_CORPORATION"},{"name":"Jira","value":"JIRA"},{"name":"Mariadb","value":"MARIADB"},{"name":"Mysql","value":"MYSQL"},{"name":"Oracle","value":"ORACLE"},{"name":"Postgresql","value":"POSTGRESQL"},{"name":"Presto","value":"PRESTO"},{"name":"Qbusiness","value":"QBUSINESS"},{"name":"Redshift","value":"REDSHIFT"},{"name":"S3","value":"S3"},{"name":"S3Tables","value":"S3_TABLES"},{"name":"S3KnowledgeBase","value":"S3_KNOWLEDGE_BASE"},{"name":"Salesforce","value":"SALESFORCE"},{"name":"Servicenow","value":"SERVICENOW"},{"name":"Snowflake","value":"SNOWFLAKE"},{"name":"Spark","value":"SPARK"},{"name":"Spice","value":"SPICE"},{"name":"Sqlserver","value":"SQLSERVER"},{"name":"Teradata","value":"TERADATA"},{"name":"Timestream","value":"TIMESTREAM"},{"name":"Twitter","value":"TWITTER"},{"name":"Bigquery","value":"BIGQUERY"},{"name":"GoogleAnalytics","value":"GOOGLE_ANALYTICS"},{"name":"Trino","value":"TRINO"},{"name":"Starburst","value":"STARBURST"},{"name":"Mongo","value":"MONGO"},{"name":"MongoAtlas","value":"MONGO_ATLAS"},{"name":"Documentdb","value":"DOCUMENTDB"},{"name":"Appflow","value":"APPFLOW"},{"name":"Impala","value":"IMPALA"},{"name":"Glue","value":"GLUE"},{"name":"GoogleDrive","value":"GOOGLE_DRIVE"},{"name":"Confluence","value":"CONFLUENCE"},{"name":"Sharepoint","value":"SHAREPOINT"},{"name":"OneDrive","value":"ONE_DRIVE"},{"name":"WebCrawler","value":"WEB_CRAWLER"}]},"aws-native:quicksight:DataSourceVpcConnectionProperties":{"description":"\u003cp\u003eVPC connection properties.\u003c/p\u003e","properties":{"vpcConnectionArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) for the VPC connection.\u003c/p\u003e"}},"type":"object","required":["vpcConnectionArn"]},"aws-native:quicksight:FolderResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:FolderSharingModel":{"type":"string","enum":[{"name":"Account","value":"ACCOUNT"},{"name":"Namespace","value":"NAMESPACE"}]},"aws-native:quicksight:FolderTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:FolderType":{"type":"string","enum":[{"name":"Shared","value":"SHARED"},{"name":"Restricted","value":"RESTRICTED"}]},"aws-native:quicksight:RefreshScheduleMap":{"properties":{"refreshType":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMapRefreshType","description":"The type of refresh that a dataset undergoes. Valid values are as follows:\n\n- `FULL_REFRESH` : A complete refresh of a dataset.\n- `INCREMENTAL_REFRESH` : A partial refresh of some rows of a dataset, based on the time window specified.\n\nFor more information on full and incremental refreshes, see [Refreshing SPICE data](https://docs.aws.amazon.com/quicksight/latest/user/refreshing-imported-data.html) in the *Quick User Guide* ."},"scheduleFrequency":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMapScheduleFrequencyProperties","description":"\u003cp\u003eInformation about the schedule frequency.\u003c/p\u003e"},"scheduleId":{"type":"string","description":"\u003cp\u003eAn unique identifier for the refresh schedule.\u003c/p\u003e","replaceOnChanges":true},"startAfterDateTime":{"type":"string","description":"\u003cp\u003eThe date time after which refresh is to be scheduled\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:RefreshScheduleMapRefreshType":{"description":"The type of refresh that a dataset undergoes. Valid values are as follows:\n\n- `FULL_REFRESH` : A complete refresh of a dataset.\n- `INCREMENTAL_REFRESH` : A partial refresh of some rows of a dataset, based on the time window specified.\n\nFor more information on full and incremental refreshes, see [Refreshing SPICE data](https://docs.aws.amazon.com/quicksight/latest/user/refreshing-imported-data.html) in the *Quick User Guide* .","type":"string","enum":[{"name":"FullRefresh","value":"FULL_REFRESH"},{"name":"IncrementalRefresh","value":"INCREMENTAL_REFRESH"}]},"aws-native:quicksight:RefreshScheduleMapScheduleFrequencyProperties":{"description":"\u003cp\u003eInformation about the schedule frequency.\u003c/p\u003e","properties":{"interval":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMapScheduleFrequencyPropertiesInterval"},"refreshOnDay":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMapScheduleFrequencyPropertiesRefreshOnDayProperties","description":"\u003cp\u003eThe day scheduled for refresh.\u003c/p\u003e"},"timeOfTheDay":{"type":"string","description":"\u003cp\u003eThe time of the day for scheduled refresh.\u003c/p\u003e"},"timeZone":{"type":"string","description":"\u003cp\u003eThe timezone for scheduled refresh.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:RefreshScheduleMapScheduleFrequencyPropertiesInterval":{"type":"string","enum":[{"name":"Minute15","value":"MINUTE15"},{"name":"Minute30","value":"MINUTE30"},{"name":"Hourly","value":"HOURLY"},{"name":"Daily","value":"DAILY"},{"name":"Weekly","value":"WEEKLY"},{"name":"Monthly","value":"MONTHLY"}]},"aws-native:quicksight:RefreshScheduleMapScheduleFrequencyPropertiesRefreshOnDayProperties":{"description":"\u003cp\u003eThe day scheduled for refresh.\u003c/p\u003e","properties":{"dayOfMonth":{"type":"string","description":"\u003cp\u003eThe Day Of Month for scheduled refresh.\u003c/p\u003e"},"dayOfWeek":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMapScheduleFrequencyPropertiesRefreshOnDayPropertiesDayOfWeek"}},"type":"object"},"aws-native:quicksight:RefreshScheduleMapScheduleFrequencyPropertiesRefreshOnDayPropertiesDayOfWeek":{"type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:quicksight:TemplateAggregationFunction":{"properties":{"attributeAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateAttributeAggregationFunction","description":"Aggregation for attributes."},"categoricalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateCategoricalAggregationFunction","description":"Aggregation for categorical values.\n\n- `COUNT` : Aggregate by the total number of values, including duplicates.\n- `DISTINCT_COUNT` : Aggregate by the total number of distinct values."},"dateAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateDateAggregationFunction","description":"Aggregation for date values.\n\n- `COUNT` : Aggregate by the total number of values, including duplicates.\n- `DISTINCT_COUNT` : Aggregate by the total number of distinct values.\n- `MIN` : Select the smallest date value.\n- `MAX` : Select the largest date value."},"numericalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateNumericalAggregationFunction","description":"Aggregation for numerical values."}},"type":"object"},"aws-native:quicksight:TemplateAggregationSortConfiguration":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationFunction","description":"The function that aggregates the values in `Column` ."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that determines the sort order of aggregated values."},"sortDirection":{"$ref":"#/types/aws-native:quicksight:TemplateSortDirection","description":"The sort direction of values.\n\n- `ASC` : Sort in ascending order.\n- `DESC` : Sort in descending order."}},"type":"object","required":["column","sortDirection"]},"aws-native:quicksight:TemplateAllSheetsFilterScopeConfiguration":{"type":"object"},"aws-native:quicksight:TemplateAnalysisDefaults":{"properties":{"defaultNewSheetConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultNewSheetConfiguration","description":"The configuration for default new sheet settings."}},"type":"object","required":["defaultNewSheetConfiguration"]},"aws-native:quicksight:TemplateAnchorDateConfiguration":{"properties":{"anchorOption":{"$ref":"#/types/aws-native:quicksight:TemplateAnchorOption","description":"The options for the date configuration. Choose one of the options below:\n\n- `NOW`"},"parameterName":{"type":"string","description":"The name of the parameter that is used for the anchor date configuration."}},"type":"object"},"aws-native:quicksight:TemplateAnchorOption":{"type":"string","enum":[{"name":"Now","value":"NOW"}]},"aws-native:quicksight:TemplateArcAxisConfiguration":{"properties":{"range":{"$ref":"#/types/aws-native:quicksight:TemplateArcAxisDisplayRange","description":"The arc axis range of a `GaugeChartVisual` ."},"reserveRange":{"type":"number","description":"The reserved range of the arc axis."}},"type":"object"},"aws-native:quicksight:TemplateArcAxisDisplayRange":{"properties":{"max":{"type":"number","description":"The maximum value of the arc axis range."},"min":{"type":"number","description":"The minimum value of the arc axis range."}},"type":"object"},"aws-native:quicksight:TemplateArcConfiguration":{"properties":{"arcAngle":{"type":"number","description":"The option that determines the arc angle of a `GaugeChartVisual` ."},"arcThickness":{"$ref":"#/types/aws-native:quicksight:TemplateArcThicknessOptions","description":"The options that determine the arc thickness of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateArcOptions":{"properties":{"arcThickness":{"$ref":"#/types/aws-native:quicksight:TemplateArcThickness","description":"The arc thickness of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateArcThickness":{"type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"Whole","value":"WHOLE"}]},"aws-native:quicksight:TemplateArcThicknessOptions":{"type":"string","enum":[{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:quicksight:TemplateAssetOptions":{"properties":{"timezone":{"type":"string","description":"Determines the timezone for the analysis."},"weekStart":{"$ref":"#/types/aws-native:quicksight:TemplateDayOfTheWeek","description":"Determines the week start day for an analysis."}},"type":"object"},"aws-native:quicksight:TemplateAttributeAggregationFunction":{"properties":{"simpleAttributeAggregation":{"$ref":"#/types/aws-native:quicksight:TemplateSimpleAttributeAggregationFunction","description":"The built-in aggregation functions for attributes.\n\n- `UNIQUE_VALUE` : Returns the unique value for a field, aggregated by the dimension fields."},"valueForMultipleValues":{"type":"string","description":"Used by the `UNIQUE_VALUE` aggregation function. If there are multiple values for the field used by the aggregation, the value for this property will be returned instead. Defaults to '*'."}},"type":"object"},"aws-native:quicksight:TemplateAxisBinding":{"type":"string","enum":[{"name":"PrimaryYaxis","value":"PRIMARY_YAXIS"},{"name":"SecondaryYaxis","value":"SECONDARY_YAXIS"}]},"aws-native:quicksight:TemplateAxisDataOptions":{"properties":{"dateAxisOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDateAxisOptions","description":"The options for an axis with a date field."},"numericAxisOptions":{"$ref":"#/types/aws-native:quicksight:TemplateNumericAxisOptions","description":"The options for an axis with a numeric field."}},"type":"object"},"aws-native:quicksight:TemplateAxisDisplayDataDrivenRange":{"type":"object"},"aws-native:quicksight:TemplateAxisDisplayMinMaxRange":{"properties":{"maximum":{"type":"number","description":"The maximum setup for an axis display range."},"minimum":{"type":"number","description":"The minimum setup for an axis display range."}},"type":"object"},"aws-native:quicksight:TemplateAxisDisplayOptions":{"properties":{"axisLineVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not the axis line is visible."},"axisOffset":{"type":"string","description":"String based length that is composed of value and unit in px"},"dataOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDataOptions","description":"The data options for an axis."},"gridLineVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not the grid line is visible."},"scrollbarOptions":{"$ref":"#/types/aws-native:quicksight:TemplateScrollBarOptions","description":"The scroll bar options for an axis."},"tickLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisTickLabelOptions","description":"The tick label options of an axis."}},"type":"object"},"aws-native:quicksight:TemplateAxisDisplayRange":{"properties":{"dataDriven":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayDataDrivenRange","description":"The data-driven setup of an axis display range."},"minMax":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayMinMaxRange","description":"The minimum and maximum setup of an axis display range."}},"type":"object"},"aws-native:quicksight:TemplateAxisLabelOptions":{"properties":{"applyTo":{"$ref":"#/types/aws-native:quicksight:TemplateAxisLabelReferenceOptions","description":"The options that indicate which field the label belongs to."},"customLabel":{"type":"string","description":"The text for the axis label."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The font configuration of the axis label."}},"type":"object"},"aws-native:quicksight:TemplateAxisLabelReferenceOptions":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the axis label is targeted to."},"fieldId":{"type":"string","description":"The field that the axis label is targeted to."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateAxisLinearScale":{"properties":{"stepCount":{"type":"number","description":"The step count setup of a linear axis."},"stepSize":{"type":"number","description":"The step size setup of a linear axis."}},"type":"object"},"aws-native:quicksight:TemplateAxisLogarithmicScale":{"properties":{"base":{"type":"number","description":"The base setup of a logarithmic axis scale."}},"type":"object"},"aws-native:quicksight:TemplateAxisScale":{"properties":{"linear":{"$ref":"#/types/aws-native:quicksight:TemplateAxisLinearScale","description":"The linear axis scale setup."},"logarithmic":{"$ref":"#/types/aws-native:quicksight:TemplateAxisLogarithmicScale","description":"The logarithmic axis scale setup."}},"type":"object"},"aws-native:quicksight:TemplateAxisTickLabelOptions":{"properties":{"labelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"Determines whether or not the axis ticks are visible."},"rotationAngle":{"type":"number","description":"The rotation angle of the axis tick labels."}},"type":"object"},"aws-native:quicksight:TemplateBarChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category (y-axis) field well of a bar chart."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The color (group/color) field well of a bar chart."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The small multiples field well of a bar chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a bar chart. Values are aggregated by category."}},"type":"object"},"aws-native:quicksight:TemplateBarChartConfiguration":{"properties":{"barsArrangement":{"$ref":"#/types/aws-native:quicksight:TemplateBarsArrangement","description":"Determines the arrangement of the bars. The orientation and arrangement of bars determine the type of bar that is used in the visual."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) for bar chart category."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a bar chart."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a color that is used in a bar chart."},"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateContributionAnalysisDefault"},"description":"The contribution analysis (anomaly configuration) setup of the visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateBarChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"orientation":{"$ref":"#/types/aws-native:quicksight:TemplateBarChartOrientation","description":"The orientation of the bars in a bar chart visual. There are two valid values in this structure:\n\n- `HORIZONTAL` : Used for charts that have horizontal bars. Visuals that use this value are horizontal bar charts, horizontal stacked bar charts, and horizontal stacked 100% bar charts.\n- `VERTICAL` : Used for charts that have vertical bars. Visuals that use this value are vertical bar charts, vertical stacked bar charts, and vertical stacked 100% bar charts."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLine"},"description":"The reference line setup of the visual."},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBarChartSortConfiguration","description":"The sort configuration of a `BarChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."},"valueAxis":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) for a bar chart value."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) for a bar chart value."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplateBarChartFieldWells":{"properties":{"barChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateBarChartAggregatedFieldWells","description":"The aggregated field wells of a bar chart."}},"type":"object"},"aws-native:quicksight:TemplateBarChartOrientation":{"type":"string","enum":[{"name":"Horizontal","value":"HORIZONTAL"},{"name":"Vertical","value":"VERTICAL"}]},"aws-native:quicksight:TemplateBarChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of categories displayed in a bar chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of category fields."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of values displayed in a bar chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of color fields in a bar chart."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:TemplateBarChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBarChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateBarsArrangement":{"type":"string","enum":[{"name":"Clustered","value":"CLUSTERED"},{"name":"Stacked","value":"STACKED"},{"name":"StackedPercent","value":"STACKED_PERCENT"}]},"aws-native:quicksight:TemplateBaseMapStyleType":{"type":"string","enum":[{"name":"LightGray","value":"LIGHT_GRAY"},{"name":"DarkGray","value":"DARK_GRAY"},{"name":"Street","value":"STREET"},{"name":"Imagery","value":"IMAGERY"}]},"aws-native:quicksight:TemplateBinCountOptions":{"properties":{"value":{"type":"number","description":"The options that determine the bin count value."}},"type":"object"},"aws-native:quicksight:TemplateBinWidthOptions":{"properties":{"binCountLimit":{"type":"number","description":"The options that determine the bin count limit."},"value":{"type":"number","description":"The options that determine the bin width value."}},"type":"object"},"aws-native:quicksight:TemplateBodySectionConfiguration":{"properties":{"content":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionContent","description":"The configuration of content in a body section."},"pageBreakConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateSectionPageBreakConfiguration","description":"The configuration of a page break for a section."},"repeatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionRepeatConfiguration","description":"Describes the configurations that are required to declare a section as repeating."},"sectionId":{"type":"string","description":"The unique identifier of a body section."},"style":{"$ref":"#/types/aws-native:quicksight:TemplateSectionStyle","description":"The style options of a body section."}},"type":"object","required":["content","sectionId"]},"aws-native:quicksight:TemplateBodySectionContent":{"properties":{"layout":{"$ref":"#/types/aws-native:quicksight:TemplateSectionLayoutConfiguration","description":"The layout configuration of a body section."}},"type":"object"},"aws-native:quicksight:TemplateBodySectionDynamicCategoryDimensionConfiguration":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"limit":{"type":"number","description":"Number of values to use from the column for repetition."},"sortByMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnSort"},"description":"Sort criteria on the column values that you use for repetition."}},"type":"object","required":["column"]},"aws-native:quicksight:TemplateBodySectionDynamicNumericDimensionConfiguration":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"limit":{"type":"number","description":"Number of values to use from the column for repetition."},"sortByMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnSort"},"description":"Sort criteria on the column values that you use for repetition."}},"type":"object","required":["column"]},"aws-native:quicksight:TemplateBodySectionRepeatConfiguration":{"properties":{"dimensionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionRepeatDimensionConfiguration"},"description":"List of `BodySectionRepeatDimensionConfiguration` values that describe the dataset column and constraints for the column used to repeat the contents of a section."},"nonRepeatingVisuals":{"type":"array","items":{"type":"string"},"description":"List of visuals to exclude from repetition in repeating sections. The visuals will render identically, and ignore the repeating configurations in all repeating instances."},"pageBreakConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionRepeatPageBreakConfiguration","description":"Page break configuration to apply for each repeating instance."}},"type":"object"},"aws-native:quicksight:TemplateBodySectionRepeatDimensionConfiguration":{"properties":{"dynamicCategoryDimensionConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionDynamicCategoryDimensionConfiguration","description":"Describes the *Category* dataset column and constraints around the dynamic values that will be used in repeating the section contents."},"dynamicNumericDimensionConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionDynamicNumericDimensionConfiguration","description":"Describes the *Numeric* dataset column and constraints around the dynamic values used to repeat the contents of a section."}},"type":"object"},"aws-native:quicksight:TemplateBodySectionRepeatPageBreakConfiguration":{"properties":{"after":{"$ref":"#/types/aws-native:quicksight:TemplateSectionAfterPageBreak"}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The group by field well of a box plot chart. Values are grouped based on group by fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field well of a box plot chart. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotChartConfiguration":{"properties":{"boxPlotOptions":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotOptions","description":"The box plot chart options for a box plot visual"},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a box plot category."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility and sort Icon visibility) of a box plot category."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions"},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a box plot category."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility and sort icon visibility) of a box plot value."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLine"},"description":"The reference line setup of the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotSortConfiguration","description":"The sort configuration of a `BoxPlotVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotFieldWells":{"properties":{"boxPlotAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotAggregatedFieldWells","description":"The aggregated field wells of a box plot."}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotFillStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Transparent","value":"TRANSPARENT"}]},"aws-native:quicksight:TemplateBoxPlotOptions":{"properties":{"allDataPointsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of all data points of the box plot."},"outlierVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the outlier in a box plot."},"styleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotStyleOptions","description":"The style options of the box plot."}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotSortConfiguration":{"properties":{"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of a group by fields."},"paginationConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePaginationConfiguration","description":"The pagination configuration of a table visual or box plot."}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotStyleOptions":{"properties":{"fillStyle":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotFillStyle","description":"The fill styles (solid, transparent) of the box plot."}},"type":"object"},"aws-native:quicksight:TemplateBoxPlotVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateCalculatedField":{"properties":{"dataSetIdentifier":{"type":"string","description":"The data set that is used in this calculated field."},"expression":{"type":"string","description":"The expression of the calculated field."},"name":{"type":"string","description":"The name of the calculated field."}},"type":"object","required":["dataSetIdentifier","expression","name"]},"aws-native:quicksight:TemplateCalculatedMeasureField":{"properties":{"expression":{"type":"string","description":"The expression in the table calculation."},"fieldId":{"type":"string","description":"The custom field ID."}},"type":"object","required":["expression","fieldId"]},"aws-native:quicksight:TemplateCascadingControlConfiguration":{"properties":{"sourceControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateCascadingControlSource"},"description":"A list of source controls that determine the values that are used in the current control."}},"type":"object"},"aws-native:quicksight:TemplateCascadingControlSource":{"properties":{"columnToMatch":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column identifier that determines which column to look up for the source sheet control."},"sourceSheetControlId":{"type":"string","description":"The source sheet control ID of a `CascadingControlSource` ."}},"type":"object"},"aws-native:quicksight:TemplateCategoricalAggregationFunction":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"}]},"aws-native:quicksight:TemplateCategoricalDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `CategoricalDimensionField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateStringFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateCategoricalMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateCategoricalAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `CategoricalMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateStringFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateCategoryDrillDownFilter":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"A list of the string inputs that are the values of the category drill down filter."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."}},"type":"object","required":["categoryValues","column"]},"aws-native:quicksight:TemplateCategoryFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"configuration":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterConfiguration","description":"The configuration for a `CategoryFilter` ."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."}},"type":"object","required":["column","configuration","filterId"]},"aws-native:quicksight:TemplateCategoryFilterConfiguration":{"properties":{"customFilterConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCustomFilterConfiguration","description":"A custom filter that filters based on a single value. This filter can be partially matched."},"customFilterListConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCustomFilterListConfiguration","description":"A list of custom filter values. In the Quick Sight console, this filter type is called a custom filter list."},"filterListConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFilterListConfiguration","description":"A list of filter configurations. In the Quick Sight console, this filter type is called a filter list."}},"type":"object"},"aws-native:quicksight:TemplateCategoryFilterMatchOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"},{"name":"Contains","value":"CONTAINS"},{"name":"DoesNotContain","value":"DOES_NOT_CONTAIN"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"}]},"aws-native:quicksight:TemplateCategoryFilterSelectAllOptions":{"type":"string","enum":[{"name":"FilterAllValues","value":"FILTER_ALL_VALUES"}]},"aws-native:quicksight:TemplateCategoryInnerFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"configuration":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterConfiguration"},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration"}},"type":"object","required":["column","configuration"]},"aws-native:quicksight:TemplateChartAxisLabelOptions":{"properties":{"axisLabelOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateAxisLabelOptions"},"description":"The label options for a chart axis."},"sortIconVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration of the sort icon on a chart's axis label."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of an axis label on a chart. Choose one of the following options:\n\n- `VISIBLE` : Shows the axis.\n- `HIDDEN` : Hides the axis."}},"type":"object"},"aws-native:quicksight:TemplateClusterMarker":{"properties":{"simpleClusterMarker":{"$ref":"#/types/aws-native:quicksight:TemplateSimpleClusterMarker","description":"The simple cluster marker of the cluster marker."}},"type":"object"},"aws-native:quicksight:TemplateClusterMarkerConfiguration":{"properties":{"clusterMarker":{"$ref":"#/types/aws-native:quicksight:TemplateClusterMarker","description":"The cluster marker that is a part of the cluster marker configuration."}},"type":"object"},"aws-native:quicksight:TemplateColorFillType":{"type":"string","enum":[{"name":"Discrete","value":"DISCRETE"},{"name":"Gradient","value":"GRADIENT"}]},"aws-native:quicksight:TemplateColorScale":{"properties":{"colorFillType":{"$ref":"#/types/aws-native:quicksight:TemplateColorFillType","description":"Determines the color fill type."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataColor"},"description":"Determines the list of colors that are applied to the visual."},"nullValueColor":{"$ref":"#/types/aws-native:quicksight:TemplateDataColor","description":"Determines the color that is applied to null values."}},"type":"object","required":["colorFillType","colors"]},"aws-native:quicksight:TemplateColorsConfiguration":{"properties":{"customColors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateCustomColor"},"description":"A list of up to 50 custom colors."}},"type":"object"},"aws-native:quicksight:TemplateColumnConfiguration":{"properties":{"colorsConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateColorsConfiguration","description":"The color configurations of the column."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFormatConfiguration","description":"The format configuration of a column."},"role":{"$ref":"#/types/aws-native:quicksight:TemplateColumnRole","description":"The role of the column."}},"type":"object","required":["column"]},"aws-native:quicksight:TemplateColumnGroupColumnSchema":{"description":"\u003cp\u003eA structure describing the name, data type, and geographic role of the columns.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eThe name of the column group's column schema.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateColumnGroupSchema":{"description":"\u003cp\u003eThe column group schema.\u003c/p\u003e","properties":{"columnGroupColumnSchemaList":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnGroupColumnSchema"},"description":"\u003cp\u003eA structure containing the list of schemas for column group columns.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the column group schema.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateColumnHierarchy":{"properties":{"dateTimeHierarchy":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeHierarchy","description":"The option that determines the hierarchy of any `DateTime` fields."},"explicitHierarchy":{"$ref":"#/types/aws-native:quicksight:TemplateExplicitHierarchy","description":"The option that determines the hierarchy of the fields that are built within a visual's field wells. These fields can't be duplicated to other visuals."},"predefinedHierarchy":{"$ref":"#/types/aws-native:quicksight:TemplatePredefinedHierarchy","description":"The option that determines the hierarchy of the fields that are defined during data preparation. These fields are available to use in any analysis that uses the data source."}},"type":"object"},"aws-native:quicksight:TemplateColumnIdentifier":{"properties":{"columnName":{"type":"string","description":"The name of the column."},"dataSetIdentifier":{"type":"string","description":"The data set that the column belongs to."}},"type":"object","required":["columnName","dataSetIdentifier"]},"aws-native:quicksight:TemplateColumnRole":{"type":"string","enum":[{"name":"Dimension","value":"DIMENSION"},{"name":"Measure","value":"MEASURE"}]},"aws-native:quicksight:TemplateColumnSchema":{"description":"\u003cp\u003eThe column schema.\u003c/p\u003e","properties":{"dataType":{"type":"string","description":"\u003cp\u003eThe data type of the column schema.\u003c/p\u003e"},"geographicRole":{"type":"string","description":"\u003cp\u003eThe geographic role of the column schema.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe name of the column schema.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateColumnSort":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationFunction","description":"The aggregation function that is defined in the column sort."},"direction":{"$ref":"#/types/aws-native:quicksight:TemplateSortDirection","description":"The sort direction."},"sortBy":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"}},"type":"object","required":["direction","sortBy"]},"aws-native:quicksight:TemplateColumnTooltipItem":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationFunction","description":"The aggregation function of the column tooltip item."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The target column of the tooltip item."},"label":{"type":"string","description":"The label of the tooltip item."},"tooltipTarget":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipTarget","description":"Determines the target of the column tooltip item in a combo chart visual."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the tooltip item."}},"type":"object","required":["column"]},"aws-native:quicksight:TemplateComboChartAggregatedFieldWells":{"properties":{"barValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The aggregated `BarValues` field well of a combo chart."},"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The aggregated category field wells of a combo chart."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The aggregated colors field well of a combo chart."},"lineValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The aggregated `LineValues` field well of a combo chart."}},"type":"object"},"aws-native:quicksight:TemplateComboChartConfiguration":{"properties":{"barDataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed.\n\nThe data label options for a bar in a combo chart."},"barsArrangement":{"$ref":"#/types/aws-native:quicksight:TemplateBarsArrangement","description":"Determines the bar arrangement in a combo chart. The following are valid values in this structure:\n\n- `CLUSTERED` : For clustered bar combo charts.\n- `STACKED` : For stacked bar combo charts.\n- `STACKED_PERCENT` : Do not use. If you use this value, the operation returns a validation error."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The category axis of a combo chart."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart category (group/color) field well."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's color field well."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateComboChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"lineDataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed.\n\nThe data label options for a line in a combo chart."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of a combo chart's primary y-axis (bar) field well."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's primary y-axis (bar) field well."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLine"},"description":"The reference line setup of the visual."},"secondaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, axis step) of a combo chart's secondary y-axis (line) field well."},"secondaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of a combo chart's secondary y-axis(line) field well."},"singleAxisOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSingleAxisOptions"},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateComboChartSortConfiguration","description":"The sort configuration of a `ComboChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The legend display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplateComboChartFieldWells":{"properties":{"comboChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateComboChartAggregatedFieldWells","description":"The aggregated field wells of a combo chart. Combo charts only have aggregated field wells. Columns in a combo chart are aggregated by category."}},"type":"object"},"aws-native:quicksight:TemplateComboChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The item limit configuration for the category field well of a combo chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the category field well in a combo chart."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The item limit configuration of the color field well in a combo chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the color field well in a combo chart."}},"type":"object"},"aws-native:quicksight:TemplateComboChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateComboChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateCommitMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:TemplateComparisonConfiguration":{"properties":{"comparisonFormat":{"$ref":"#/types/aws-native:quicksight:TemplateComparisonFormatConfiguration","description":"The format of the comparison."},"comparisonMethod":{"$ref":"#/types/aws-native:quicksight:TemplateComparisonMethod","description":"The method of the comparison. Choose from the following options:\n\n- `DIFFERENCE`\n- `PERCENT_DIFFERENCE`\n- `PERCENT`"}},"type":"object"},"aws-native:quicksight:TemplateComparisonFormatConfiguration":{"properties":{"numberDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumberDisplayFormatConfiguration","description":"The number display format."},"percentageDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePercentageDisplayFormatConfiguration","description":"The percentage display format."}},"type":"object"},"aws-native:quicksight:TemplateComparisonMethod":{"type":"string","enum":[{"name":"Difference","value":"DIFFERENCE"},{"name":"PercentDifference","value":"PERCENT_DIFFERENCE"},{"name":"Percent","value":"PERCENT"}]},"aws-native:quicksight:TemplateComputation":{"properties":{"forecast":{"$ref":"#/types/aws-native:quicksight:TemplateForecastComputation","description":"The forecast computation configuration."},"growthRate":{"$ref":"#/types/aws-native:quicksight:TemplateGrowthRateComputation","description":"The growth rate computation configuration."},"maximumMinimum":{"$ref":"#/types/aws-native:quicksight:TemplateMaximumMinimumComputation","description":"The maximum and minimum computation configuration."},"metricComparison":{"$ref":"#/types/aws-native:quicksight:TemplateMetricComparisonComputation","description":"The metric comparison computation configuration."},"periodOverPeriod":{"$ref":"#/types/aws-native:quicksight:TemplatePeriodOverPeriodComputation","description":"The period over period computation configuration."},"periodToDate":{"$ref":"#/types/aws-native:quicksight:TemplatePeriodToDateComputation","description":"The period to `DataSetIdentifier` computation configuration."},"topBottomMovers":{"$ref":"#/types/aws-native:quicksight:TemplateTopBottomMoversComputation","description":"The top movers and bottom movers computation configuration."},"topBottomRanked":{"$ref":"#/types/aws-native:quicksight:TemplateTopBottomRankedComputation","description":"The top ranked and bottom ranked computation configuration."},"totalAggregation":{"$ref":"#/types/aws-native:quicksight:TemplateTotalAggregationComputation","description":"The total aggregation computation configuration."},"uniqueValues":{"$ref":"#/types/aws-native:quicksight:TemplateUniqueValuesComputation","description":"The unique values computation configuration."}},"type":"object"},"aws-native:quicksight:TemplateConditionalFormattingColor":{"properties":{"gradient":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingGradientColor","description":"Formatting configuration for gradient color."},"solid":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingSolidColor","description":"Formatting configuration for solid color."}},"type":"object"},"aws-native:quicksight:TemplateConditionalFormattingCustomIconCondition":{"properties":{"color":{"type":"string","description":"Determines the color of the icon."},"displayConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIconDisplayConfiguration","description":"Determines the icon display configuration."},"expression":{"type":"string","description":"The expression that determines the condition of the icon set."},"iconOptions":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingCustomIconOptions","description":"Custom icon options for an icon set."}},"type":"object","required":["expression","iconOptions"]},"aws-native:quicksight:TemplateConditionalFormattingCustomIconOptions":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:TemplateIcon","description":"Determines the type of icon."},"unicodeIcon":{"type":"string","description":"Determines the Unicode icon type."}},"type":"object"},"aws-native:quicksight:TemplateConditionalFormattingGradientColor":{"properties":{"color":{"$ref":"#/types/aws-native:quicksight:TemplateGradientColor","description":"Determines the color."},"expression":{"type":"string","description":"The expression that determines the formatting configuration for gradient color."}},"type":"object","required":["color","expression"]},"aws-native:quicksight:TemplateConditionalFormattingIcon":{"properties":{"customCondition":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingCustomIconCondition","description":"Determines the custom condition for an icon set."},"iconSet":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIconSet","description":"Formatting configuration for icon set."}},"type":"object"},"aws-native:quicksight:TemplateConditionalFormattingIconDisplayConfiguration":{"properties":{"iconDisplayOption":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIconDisplayOption","description":"Determines the icon display configuration."}},"type":"object"},"aws-native:quicksight:TemplateConditionalFormattingIconDisplayOption":{"type":"string","enum":[{"name":"IconOnly","value":"ICON_ONLY"}]},"aws-native:quicksight:TemplateConditionalFormattingIconSet":{"properties":{"expression":{"type":"string","description":"The expression that determines the formatting configuration for the icon set."},"iconSetType":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIconSetType","description":"Determines the icon set type."}},"type":"object","required":["expression"]},"aws-native:quicksight:TemplateConditionalFormattingIconSetType":{"type":"string","enum":[{"name":"PlusMinus","value":"PLUS_MINUS"},{"name":"CheckX","value":"CHECK_X"},{"name":"ThreeColorArrow","value":"THREE_COLOR_ARROW"},{"name":"ThreeGrayArrow","value":"THREE_GRAY_ARROW"},{"name":"CaretUpMinusDown","value":"CARET_UP_MINUS_DOWN"},{"name":"ThreeShape","value":"THREE_SHAPE"},{"name":"ThreeCircle","value":"THREE_CIRCLE"},{"name":"Flags","value":"FLAGS"},{"name":"Bars","value":"BARS"},{"name":"FourColorArrow","value":"FOUR_COLOR_ARROW"},{"name":"FourGrayArrow","value":"FOUR_GRAY_ARROW"}]},"aws-native:quicksight:TemplateConditionalFormattingSolidColor":{"properties":{"color":{"type":"string","description":"Determines the color."},"expression":{"type":"string","description":"The expression that determines the formatting configuration for solid color."}},"type":"object","required":["expression"]},"aws-native:quicksight:TemplateContextMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:TemplateDashboardBehavior","description":"The availability status of the context menu options. If the value of this property is set to `ENABLED` , dashboard readers can interact with the context menu."}},"type":"object"},"aws-native:quicksight:TemplateContributionAnalysisDefault":{"properties":{"contributorDimensions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"description":"The dimensions columns that are used in the contribution analysis, usually a list of `ColumnIdentifiers` ."},"measureFieldId":{"type":"string","description":"The measure field that is used in the contribution analysis."}},"type":"object","required":["contributorDimensions","measureFieldId"]},"aws-native:quicksight:TemplateCrossDatasetTypes":{"type":"string","enum":[{"name":"AllDatasets","value":"ALL_DATASETS"},{"name":"SingleDataset","value":"SINGLE_DATASET"}]},"aws-native:quicksight:TemplateCurrencyDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numberScale":{"$ref":"#/types/aws-native:quicksight:TemplateNumberScale","description":"Determines the number scale value for the currency format."},"prefix":{"type":"string","description":"Determines the prefix value of the currency format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the currency format."},"symbol":{"type":"string","description":"Determines the symbol for the currency format."}},"type":"object"},"aws-native:quicksight:TemplateCustomActionFilterOperation":{"properties":{"selectedFieldsConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFilterOperationSelectedFieldsConfiguration","description":"The configuration that chooses the fields to be filtered."},"targetVisualsConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFilterOperationTargetVisualsConfiguration","description":"The configuration that chooses the target visuals to be filtered."}},"type":"object","required":["selectedFieldsConfiguration","targetVisualsConfiguration"]},"aws-native:quicksight:TemplateCustomActionNavigationOperation":{"properties":{"localNavigationConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateLocalNavigationConfiguration","description":"The configuration that chooses the navigation target."}},"type":"object"},"aws-native:quicksight:TemplateCustomActionSetParametersOperation":{"properties":{"parameterValueConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSetParameterValueConfiguration"},"description":"The parameter that determines the value configuration."}},"type":"object","required":["parameterValueConfigurations"]},"aws-native:quicksight:TemplateCustomActionUrlOperation":{"properties":{"urlTarget":{"$ref":"#/types/aws-native:quicksight:TemplateUrlTargetConfiguration","description":"The target of the `CustomActionURLOperation` .\n\nValid values are defined as follows:\n\n- `NEW_TAB` : Opens the target URL in a new browser tab.\n- `NEW_WINDOW` : Opens the target URL in a new browser window.\n- `SAME_TAB` : Opens the target URL in the same browser tab."},"urlTemplate":{"type":"string","description":"THe URL link of the `CustomActionURLOperation` ."}},"type":"object","required":["urlTarget","urlTemplate"]},"aws-native:quicksight:TemplateCustomColor":{"properties":{"color":{"type":"string","description":"The color that is applied to the data value."},"fieldValue":{"type":"string","description":"The data value that the color is applied to."},"specialValue":{"$ref":"#/types/aws-native:quicksight:TemplateSpecialValue","description":"The value of a special data value."}},"type":"object","required":["color"]},"aws-native:quicksight:TemplateCustomContentConfiguration":{"properties":{"contentType":{"$ref":"#/types/aws-native:quicksight:TemplateCustomContentType","description":"The content type of the custom content visual. You can use this to have the visual render as an image."},"contentUrl":{"type":"string","description":"The input URL that links to the custom content that you want in the custom visual."},"imageScaling":{"$ref":"#/types/aws-native:quicksight:TemplateCustomContentImageScalingConfiguration","description":"The sizing options for the size of the custom content visual. This structure is required when the `ContentType` of the visual is `'IMAGE'` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."}},"type":"object"},"aws-native:quicksight:TemplateCustomContentImageScalingConfiguration":{"type":"string","enum":[{"name":"FitToHeight","value":"FIT_TO_HEIGHT"},{"name":"FitToWidth","value":"FIT_TO_WIDTH"},{"name":"DoNotScale","value":"DO_NOT_SCALE"},{"name":"ScaleToVisual","value":"SCALE_TO_VISUAL"}]},"aws-native:quicksight:TemplateCustomContentType":{"type":"string","enum":[{"name":"Image","value":"IMAGE"},{"name":"OtherEmbeddedContent","value":"OTHER_EMBEDDED_CONTENT"}]},"aws-native:quicksight:TemplateCustomContentVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCustomContentConfiguration","description":"The configuration of a `CustomContentVisual` ."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used to create the custom content visual. You can't create a visual without a dataset."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:TemplateCustomFilterConfiguration":{"properties":{"categoryValue":{"type":"string","description":"The category value for the filter.\n\nThis field is mutually exclusive to `ParameterName` ."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value.\n\nThis field is mutually exclusive to `CategoryValue` ."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator","nullOption"]},"aws-native:quicksight:TemplateCustomFilterListConfiguration":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"The list of category values for the filter."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator","nullOption"]},"aws-native:quicksight:TemplateCustomNarrativeOptions":{"properties":{"narrative":{"type":"string","description":"The string input of custom narrative."}},"type":"object","required":["narrative"]},"aws-native:quicksight:TemplateCustomParameterValues":{"properties":{"dateTimeValues":{"type":"array","items":{"type":"string"},"description":"A list of datetime-type parameter values."},"decimalValues":{"type":"array","items":{"type":"number"},"description":"A list of decimal-type parameter values."},"integerValues":{"type":"array","items":{"type":"number"},"description":"A list of integer-type parameter values."},"stringValues":{"type":"array","items":{"type":"string"},"description":"A list of string-type parameter values."}},"type":"object"},"aws-native:quicksight:TemplateCustomValuesConfiguration":{"properties":{"customValues":{"$ref":"#/types/aws-native:quicksight:TemplateCustomParameterValues"},"includeNullValue":{"type":"boolean","description":"Includes the null value in custom action parameter values."}},"type":"object","required":["customValues"]},"aws-native:quicksight:TemplateDashboardBehavior":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:TemplateDataBarsOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID for the data bars options."},"negativeColor":{"type":"string","description":"The color of the negative data bar."},"positiveColor":{"type":"string","description":"The color of the positive data bar."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplateDataColor":{"properties":{"color":{"type":"string","description":"The color that is applied to the data value."},"dataValue":{"type":"number","description":"The data value that the color is applied to."}},"type":"object"},"aws-native:quicksight:TemplateDataFieldSeriesItem":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:TemplateAxisBinding","description":"The axis that you are binding the field to."},"fieldId":{"type":"string","description":"The field ID of the field that you are setting the axis binding to."},"fieldValue":{"type":"string","description":"The field value of the field that you are setting the axis binding to."},"settings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartSeriesSettings","description":"The options that determine the presentation of line series associated to the field."}},"type":"object","required":["axisBinding","fieldId"]},"aws-native:quicksight:TemplateDataLabelContent":{"type":"string","enum":[{"name":"Value","value":"VALUE"},{"name":"Percent","value":"PERCENT"},{"name":"ValueAndPercent","value":"VALUE_AND_PERCENT"}]},"aws-native:quicksight:TemplateDataLabelOptions":{"properties":{"categoryLabelVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the category field labels."},"dataLabelTypes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelType"},"description":"The option that determines the data label type."},"labelColor":{"type":"string","description":"Determines the color of the data labels."},"labelContent":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelContent","description":"Determines the content of the data labels."},"labelFontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"Determines the font configuration of the data labels."},"measureLabelVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the measure field labels."},"overlap":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOverlap","description":"Determines whether overlap is enabled or disabled for the data labels."},"position":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelPosition","description":"Determines the position of the data labels."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the total."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the data labels."}},"type":"object"},"aws-native:quicksight:TemplateDataLabelOverlap":{"type":"string","enum":[{"name":"DisableOverlap","value":"DISABLE_OVERLAP"},{"name":"EnableOverlap","value":"ENABLE_OVERLAP"}]},"aws-native:quicksight:TemplateDataLabelPosition":{"type":"string","enum":[{"name":"Inside","value":"INSIDE"},{"name":"Outside","value":"OUTSIDE"},{"name":"Left","value":"LEFT"},{"name":"Top","value":"TOP"},{"name":"Bottom","value":"BOTTOM"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:TemplateDataLabelType":{"properties":{"dataPathLabelType":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathLabelType","description":"The option that specifies individual data values for labels."},"fieldLabelType":{"$ref":"#/types/aws-native:quicksight:TemplateFieldLabelType","description":"Determines the label configuration for the entire field."},"maximumLabelType":{"$ref":"#/types/aws-native:quicksight:TemplateMaximumLabelType","description":"Determines the label configuration for the maximum value in a visual."},"minimumLabelType":{"$ref":"#/types/aws-native:quicksight:TemplateMinimumLabelType","description":"Determines the label configuration for the minimum value in a visual."},"rangeEndsLabelType":{"$ref":"#/types/aws-native:quicksight:TemplateRangeEndsLabelType","description":"Determines the label configuration for range end value in a visual."}},"type":"object"},"aws-native:quicksight:TemplateDataPathColor":{"properties":{"color":{"type":"string","description":"The color that needs to be applied to the element."},"element":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathValue","description":"The element that the color needs to be applied to."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The time granularity of the field that the color needs to be applied to."}},"type":"object","required":["color","element"]},"aws-native:quicksight:TemplateDataPathLabelType":{"properties":{"fieldId":{"type":"string","description":"The field ID of the field that the data label needs to be applied to."},"fieldValue":{"type":"string","description":"The actual value of the field that is labeled."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the data label."}},"type":"object"},"aws-native:quicksight:TemplateDataPathSort":{"properties":{"direction":{"$ref":"#/types/aws-native:quicksight:TemplateSortDirection","description":"Determines the sort direction."},"sortPaths":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathValue"},"description":"The list of data paths that need to be sorted."}},"type":"object","required":["direction","sortPaths"]},"aws-native:quicksight:TemplateDataPathType":{"properties":{"pivotTableDataPathType":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableDataPathType","description":"The type of data path value utilized in a pivot table. Choose one of the following options:\n\n- `HIERARCHY_ROWS_LAYOUT_COLUMN` - The type of data path for the rows layout column, when `RowsLayout` is set to `HIERARCHY` .\n- `MULTIPLE_ROW_METRICS_COLUMN` - The type of data path for the metric column when the row is set to Metric Placement.\n- `EMPTY_COLUMN_HEADER` - The type of data path for the column with empty column header, when there is no field in `ColumnsFieldWell` and the row is set to Metric Placement.\n- `COUNT_METRIC_COLUMN` - The type of data path for the column with `COUNT` as the metric, when there is no field in the `ValuesFieldWell` ."}},"type":"object"},"aws-native:quicksight:TemplateDataPathValue":{"properties":{"dataPathType":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathType","description":"The type configuration of the field."},"fieldId":{"type":"string","description":"The field ID of the field that needs to be sorted."},"fieldValue":{"type":"string","description":"The actual value of the field that needs to be sorted."}},"type":"object"},"aws-native:quicksight:TemplateDataSetConfiguration":{"description":"\u003cp\u003eDataset configuration.\u003c/p\u003e","properties":{"columnGroupSchemaList":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnGroupSchema"},"description":"\u003cp\u003eA structure containing the list of column group schemas.\u003c/p\u003e"},"dataSetSchema":{"$ref":"#/types/aws-native:quicksight:TemplateDataSetSchema","description":"Dataset schema."},"placeholder":{"type":"string","description":"\u003cp\u003ePlaceholder.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateDataSetReference":{"description":"\u003cp\u003eDataset reference.\u003c/p\u003e","properties":{"dataSetArn":{"type":"string","description":"\u003cp\u003eDataset Amazon Resource Name (ARN).\u003c/p\u003e"},"dataSetPlaceholder":{"type":"string","description":"\u003cp\u003eDataset placeholder.\u003c/p\u003e"}},"type":"object","required":["dataSetArn","dataSetPlaceholder"]},"aws-native:quicksight:TemplateDataSetSchema":{"description":"\u003cp\u003eDataset schema.\u003c/p\u003e","properties":{"columnSchemaList":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnSchema"},"description":"\u003cp\u003eA structure containing the list of column schemas.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateDateAggregationFunction":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"}]},"aws-native:quicksight:TemplateDateAxisOptions":{"properties":{"missingDateVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not missing dates are displayed."}},"type":"object"},"aws-native:quicksight:TemplateDateDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `DateDimensionField` ."},"dateGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The date granularity of the `DateDimensionField` . Choose one of the following options:\n\n- `YEAR`\n- `QUARTER`\n- `MONTH`\n- `WEEK`\n- `DAY`\n- `HOUR`\n- `MINUTE`\n- `SECOND`\n- `MILLISECOND`"},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateDateMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateDateAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `DateMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateDateTimeDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:TemplateDynamicDefaultValue","description":"The dynamic value of the `DataTimeDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:TemplateRollingDateConfiguration","description":"The rolling date of the `DataTimeDefaultValues` . The date is determined from the dataset based on input expression."},"staticValues":{"type":"array","items":{"type":"string"},"description":"The static values of the `DataTimeDefaultValues` ."}},"type":"object"},"aws-native:quicksight:TemplateDateTimeFormatConfiguration":{"properties":{"dateTimeFormat":{"type":"string","description":"Determines the `DateTime` format."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numericFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericFormatConfiguration","description":"The formatting configuration for numeric `DateTime` fields."}},"type":"object"},"aws-native:quicksight:TemplateDateTimeHierarchy":{"properties":{"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDrillDownFilter"},"description":"The option that determines the drill down filters for the `DateTime` hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the `DateTime` hierarchy."}},"type":"object","required":["hierarchyId"]},"aws-native:quicksight:TemplateDateTimeParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `DateTime` parameter when a value has not been set."}},"type":"object","required":["name"]},"aws-native:quicksight:TemplateDateTimePickerControlDisplayOptions":{"properties":{"dateIconVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The date icon visibility of the `DateTimePickerControlDisplayOptions` ."},"dateTimeFormat":{"type":"string","description":"Customize how dates are formatted in controls."},"helperTextVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The helper text visibility of the `DateTimePickerControlDisplayOptions` ."},"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateDateTimeValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"string","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:TemplateValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:TemplateDayOfTheWeek":{"type":"string","enum":[{"name":"Sunday","value":"SUNDAY"},{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"}]},"aws-native:quicksight:TemplateDecimalDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:TemplateDynamicDefaultValue","description":"The dynamic value of the `DecimalDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"number"},"description":"The static values of the `DecimalDefaultValues` ."}},"type":"object"},"aws-native:quicksight:TemplateDecimalParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:TemplateDecimalDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:TemplateParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:TemplateDecimalValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `Decimal` parameter when a value has not been set."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:TemplateDecimalPlacesConfiguration":{"properties":{"decimalPlaces":{"type":"number","description":"The values of the decimal places."}},"type":"object","required":["decimalPlaces"]},"aws-native:quicksight:TemplateDecimalValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"number","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:TemplateValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:TemplateDefaultDateTimePickerControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configuration of the Apply button on a `DateTimePickerControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimePickerControlDisplayOptions","description":"The display options of a control."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlDateTimePickerType","description":"The date time picker type of the `DefaultDateTimePickerControlOptions` . Choose one of the following options:\n\n- `SINGLE_VALUED` : The filter condition is a fixed date.\n- `DATE_RANGE` : The filter condition is a date time range."}},"type":"object"},"aws-native:quicksight:TemplateDefaultFilterControlConfiguration":{"properties":{"controlOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlOptions","description":"The control option for the `DefaultFilterControlConfiguration` ."},"title":{"type":"string","description":"The title of the `DefaultFilterControlConfiguration` . This title is shared by all controls that are tied to this filter."}},"type":"object","required":["controlOptions","title"]},"aws-native:quicksight:TemplateDefaultFilterControlOptions":{"properties":{"defaultDateTimePickerOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultDateTimePickerControlOptions","description":"The default options that correspond to the filter control type of a `DateTimePicker` ."},"defaultDropdownOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterDropDownControlOptions","description":"The default options that correspond to the `Dropdown` filter control type."},"defaultListOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterListControlOptions","description":"The default options that correspond to the `List` filter control type."},"defaultRelativeDateTimeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultRelativeDateTimeControlOptions","description":"The default options that correspond to the `RelativeDateTime` filter control type."},"defaultSliderOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultSliderControlOptions","description":"The default options that correspond to the `Slider` filter control type."},"defaultTextAreaOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultTextAreaControlOptions","description":"The default options that correspond to the `TextArea` filter control type."},"defaultTextFieldOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultTextFieldControlOptions","description":"The default options that correspond to the `TextField` filter control type."}},"type":"object"},"aws-native:quicksight:TemplateDefaultFilterDropDownControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configuration of the Apply button on a `FilterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDropDownControlDisplayOptions","description":"The display options of a control."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:TemplateFilterSelectableValues","description":"A list of selectable values that are used in a control."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlListType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object"},"aws-native:quicksight:TemplateDefaultFilterListControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateListControlDisplayOptions","description":"The display options of a control."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:TemplateFilterSelectableValues","description":"A list of selectable values that are used in a control."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlListType","description":"The type of the `DefaultFilterListControlOptions` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from the list.\n- `SINGLE_SELECT` : The user can select a single entry from the list."}},"type":"object"},"aws-native:quicksight:TemplateDefaultFreeFormLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a free-form layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:TemplateDefaultGridLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGridLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a grid layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:TemplateDefaultInteractiveLayoutConfiguration":{"properties":{"freeForm":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFreeFormLayoutConfiguration","description":"The options that determine the default settings of a free-form layout configuration."},"grid":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultGridLayoutConfiguration","description":"The options that determine the default settings for a grid layout configuration."}},"type":"object"},"aws-native:quicksight:TemplateDefaultNewSheetConfiguration":{"properties":{"interactiveLayoutConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultInteractiveLayoutConfiguration","description":"The options that determine the default settings for interactive layout configuration."},"paginatedLayoutConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultPaginatedLayoutConfiguration","description":"The options that determine the default settings for a paginated layout configuration."},"sheetContentType":{"$ref":"#/types/aws-native:quicksight:TemplateSheetContentType","description":"The option that determines the sheet content type."}},"type":"object"},"aws-native:quicksight:TemplateDefaultPaginatedLayoutConfiguration":{"properties":{"sectionBased":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultSectionBasedLayoutConfiguration","description":"The options that determine the default settings for a section-based layout configuration."}},"type":"object"},"aws-native:quicksight:TemplateDefaultRelativeDateTimeControlOptions":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configuration of the Apply button on a `RelativeDateTimeControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateRelativeDateTimeControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:TemplateDefaultSectionBasedLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSectionBasedLayoutCanvasSizeOptions","description":"Determines the screen canvas size options for a section-based layout."}},"type":"object","required":["canvasSizeOptions"]},"aws-native:quicksight:TemplateDefaultSliderControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSliderControlDisplayOptions","description":"The display options of a control."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlSliderType","description":"The type of the `DefaultSliderControlOptions` . Choose one of the following options:\n\n- `SINGLE_POINT` : Filter against(equals) a single data point.\n- `RANGE` : Filter data that is in a specified range."}},"type":"object","required":["maximumValue","minimumValue","stepSize"]},"aws-native:quicksight:TemplateDefaultTextAreaControlOptions":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextAreaControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:TemplateDefaultTextFieldControlOptions":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextFieldControlDisplayOptions","description":"The display options of a control."}},"type":"object"},"aws-native:quicksight:TemplateDestinationParameterValueConfiguration":{"properties":{"customValuesConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCustomValuesConfiguration","description":"The configuration of custom values for destination parameter in `DestinationParameterValueConfiguration` ."},"selectAllValueOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSelectAllValueOptions","description":"The configuration that selects all options."},"sourceColumn":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"A column of a data set."},"sourceField":{"type":"string","description":"The source field ID of the destination parameter."},"sourceParameterName":{"type":"string","description":"The source parameter name of the destination parameter."}},"type":"object"},"aws-native:quicksight:TemplateDigitGroupingStyle":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Lakhs","value":"LAKHS"}]},"aws-native:quicksight:TemplateDimensionField":{"properties":{"categoricalDimensionField":{"$ref":"#/types/aws-native:quicksight:TemplateCategoricalDimensionField","description":"The dimension type field with categorical type columns."},"dateDimensionField":{"$ref":"#/types/aws-native:quicksight:TemplateDateDimensionField","description":"The dimension type field with date type columns."},"numericalDimensionField":{"$ref":"#/types/aws-native:quicksight:TemplateNumericalDimensionField","description":"The dimension type field with numerical type columns."}},"type":"object"},"aws-native:quicksight:TemplateDonutCenterOptions":{"properties":{"labelVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the label in a donut chart. In the Quick Sight console, this option is called `'Show total'` ."}},"type":"object"},"aws-native:quicksight:TemplateDonutOptions":{"properties":{"arcOptions":{"$ref":"#/types/aws-native:quicksight:TemplateArcOptions","description":"The option for define the arc of the chart shape. Valid values are as follows:\n\n- `WHOLE` - A pie chart\n- `SMALL` - A small-sized donut chart\n- `MEDIUM` - A medium-sized donut chart\n- `LARGE` - A large-sized donut chart"},"donutCenterOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDonutCenterOptions","description":"The label options of the label that is displayed in the center of a donut chart. This option isn't available for pie charts."}},"type":"object"},"aws-native:quicksight:TemplateDrillDownFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryDrillDownFilter","description":"The category type drill down filter. This filter is used for string type columns."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:TemplateNumericEqualityDrillDownFilter","description":"The numeric equality type drill down filter. This filter is used for number type columns."},"timeRangeFilter":{"$ref":"#/types/aws-native:quicksight:TemplateTimeRangeDrillDownFilter","description":"The time range drill down filter. This filter is used for date time columns."}},"type":"object"},"aws-native:quicksight:TemplateDropDownControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateListControlSelectAllOptions","description":"The configuration of the `Select all` options in a dropdown control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateDynamicDefaultValue":{"properties":{"defaultValueColumn":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that contains the default value of each user or group."},"groupNameColumn":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that contains the group name."},"userNameColumn":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that contains the username."}},"type":"object","required":["defaultValueColumn"]},"aws-native:quicksight:TemplateEmptyVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"dataSetIdentifier":{"type":"string","description":"The data set that is used in the empty visual. Every visual requires a dataset to render."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:TemplateEntity":{"properties":{"path":{"type":"string","description":"The hierarchical path of the entity within the analysis, template, or dashboard definition tree."}},"type":"object"},"aws-native:quicksight:TemplateError":{"description":"\u003cp\u003eList of errors that occurred when the template version creation failed.\u003c/p\u003e","properties":{"message":{"type":"string","description":"\u003cp\u003eDescription of the error type.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:quicksight:TemplateErrorType","description":"Type of error."},"violatedEntities":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateEntity"},"description":"\u003cp\u003eAn error path that shows which entities caused the template error.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateErrorType":{"type":"string","enum":[{"name":"SourceNotFound","value":"SOURCE_NOT_FOUND"},{"name":"DataSetNotFound","value":"DATA_SET_NOT_FOUND"},{"name":"InternalFailure","value":"INTERNAL_FAILURE"},{"name":"AccessDenied","value":"ACCESS_DENIED"}]},"aws-native:quicksight:TemplateExcludePeriodConfiguration":{"properties":{"amount":{"type":"number","description":"The amount or number of the exclude period."},"granularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The granularity or unit (day, month, year) of the exclude period."},"status":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"The status of the exclude period. Choose from the following options:\n\n- `ENABLED`\n- `DISABLED`"}},"type":"object","required":["amount","granularity"]},"aws-native:quicksight:TemplateExplicitHierarchy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"description":"The list of columns that define the explicit hierarchy."},"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDrillDownFilter"},"description":"The option that determines the drill down filters for the explicit hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the explicit hierarchy."}},"type":"object","required":["columns","hierarchyId"]},"aws-native:quicksight:TemplateFieldBasedTooltip":{"properties":{"aggregationVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of `Show aggregations` ."},"tooltipFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipItem"},"description":"The fields configuration in the tooltip."},"tooltipTitleType":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipTitleType","description":"The type for the \u003etooltip title. Choose one of the following options:\n\n- `NONE` : Doesn't use the primary value as the title.\n- `PRIMARY_VALUE` : Uses primary value as the title."}},"type":"object"},"aws-native:quicksight:TemplateFieldLabelType":{"properties":{"fieldId":{"type":"string","description":"Indicates the field that is targeted by the field label."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the field label."}},"type":"object"},"aws-native:quicksight:TemplateFieldSeriesItem":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:TemplateAxisBinding","description":"The axis that you are binding the field to."},"fieldId":{"type":"string","description":"The field ID of the field for which you are setting the axis binding."},"settings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartSeriesSettings","description":"The options that determine the presentation of line series associated to the field."}},"type":"object","required":["axisBinding","fieldId"]},"aws-native:quicksight:TemplateFieldSort":{"properties":{"direction":{"$ref":"#/types/aws-native:quicksight:TemplateSortDirection","description":"The sort direction. Choose one of the following options:\n\n- `ASC` : Ascending\n- `DESC` : Descending"},"fieldId":{"type":"string","description":"The sort configuration target field."}},"type":"object","required":["direction","fieldId"]},"aws-native:quicksight:TemplateFieldSortOptions":{"properties":{"columnSort":{"$ref":"#/types/aws-native:quicksight:TemplateColumnSort","description":"The sort configuration for a column that is not used in a field well."},"fieldSort":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSort","description":"The sort configuration for a field in a field well."}},"type":"object"},"aws-native:quicksight:TemplateFieldTooltipItem":{"properties":{"fieldId":{"type":"string","description":"The unique ID of the field that is targeted by the tooltip."},"label":{"type":"string","description":"The label of the tooltip item."},"tooltipTarget":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipTarget","description":"Determines the target of the field tooltip item in a combo chart visual."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the tooltip item."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplateFilledMapAggregatedFieldWells":{"properties":{"geospatial":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The aggregated location field well of the filled map. Values are grouped by location fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The aggregated color field well of a filled map. Values are aggregated based on location fields."}},"type":"object"},"aws-native:quicksight:TemplateFilledMapConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapConditionalFormattingOption"},"description":"Conditional formatting options of a `FilledMapVisual` ."}},"type":"object","required":["conditionalFormattingOptions"]},"aws-native:quicksight:TemplateFilledMapConditionalFormattingOption":{"properties":{"shape":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapShapeConditionalFormatting","description":"The conditional formatting that determines the shape of the filled map."}},"type":"object","required":["shape"]},"aws-native:quicksight:TemplateFilledMapConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"mapStyleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialMapStyleOptions","description":"The map style options of the filled map visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapSortConfiguration","description":"The sort configuration of a `FilledMapVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."},"windowOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialWindowOptions","description":"The window options of the filled map visual."}},"type":"object"},"aws-native:quicksight:TemplateFilledMapFieldWells":{"properties":{"filledMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapAggregatedFieldWells","description":"The aggregated field well of the filled map."}},"type":"object"},"aws-native:quicksight:TemplateFilledMapShapeConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the filled map shape."},"format":{"$ref":"#/types/aws-native:quicksight:TemplateShapeConditionalFormat","description":"The conditional formatting that determines the background color of a filled map's shape."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplateFilledMapSortConfiguration":{"properties":{"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the location fields."}},"type":"object"},"aws-native:quicksight:TemplateFilledMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapConditionalFormatting","description":"The conditional formatting of a `FilledMapVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilter","description":"A `CategoryFilter` filters text values.\n\nFor more information, see [Adding text filters](https://docs.aws.amazon.com/quicksight/latest/user/add-a-text-filter-data-prep.html) in the *Amazon Quick Suite User Guide* ."},"nestedFilter":{"$ref":"#/types/aws-native:quicksight:TemplateNestedFilter","description":"A `NestedFilter` filters data with a subset of data that is defined by the nested inner filter."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:TemplateNumericEqualityFilter","description":"A `NumericEqualityFilter` filters numeric values that equal or do not equal a given numeric value."},"numericRangeFilter":{"$ref":"#/types/aws-native:quicksight:TemplateNumericRangeFilter","description":"A `NumericRangeFilter` filters numeric values that are either inside or outside a given numeric range."},"relativeDatesFilter":{"$ref":"#/types/aws-native:quicksight:TemplateRelativeDatesFilter","description":"A `RelativeDatesFilter` filters date values that are relative to a given date."},"timeEqualityFilter":{"$ref":"#/types/aws-native:quicksight:TemplateTimeEqualityFilter","description":"A `TimeEqualityFilter` filters date-time values that equal or do not equal a given date/time value."},"timeRangeFilter":{"$ref":"#/types/aws-native:quicksight:TemplateTimeRangeFilter","description":"A `TimeRangeFilter` filters date-time values that are either inside or outside a given date/time range."},"topBottomFilter":{"$ref":"#/types/aws-native:quicksight:TemplateTopBottomFilter","description":"A `TopBottomFilter` filters data to the top or bottom values for a given column."}},"type":"object"},"aws-native:quicksight:TemplateFilterControl":{"properties":{"crossSheet":{"$ref":"#/types/aws-native:quicksight:TemplateFilterCrossSheetControl","description":"A control from a filter that is scoped across more than one sheet. This represents your filter control on a sheet"},"dateTimePicker":{"$ref":"#/types/aws-native:quicksight:TemplateFilterDateTimePickerControl","description":"A control from a date filter that is used to specify date and time."},"dropdown":{"$ref":"#/types/aws-native:quicksight:TemplateFilterDropDownControl","description":"A control to display a dropdown list with buttons that are used to select a single value."},"list":{"$ref":"#/types/aws-native:quicksight:TemplateFilterListControl","description":"A control to display a list of buttons or boxes. This is used to select either a single value or multiple values."},"relativeDateTime":{"$ref":"#/types/aws-native:quicksight:TemplateFilterRelativeDateTimeControl","description":"A control from a date filter that is used to specify the relative date."},"slider":{"$ref":"#/types/aws-native:quicksight:TemplateFilterSliderControl","description":"A control to display a horizontal toggle bar. This is used to change a value by sliding the toggle."},"textArea":{"$ref":"#/types/aws-native:quicksight:TemplateFilterTextAreaControl","description":"A control to display a text box that is used to enter multiple entries."},"textField":{"$ref":"#/types/aws-native:quicksight:TemplateFilterTextFieldControl","description":"A control to display a text box that is used to enter a single entry."}},"type":"object"},"aws-native:quicksight:TemplateFilterCrossSheetControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"filterControlId":{"type":"string","description":"The ID of the `FilterCrossSheetControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterCrossSheetControl` ."}},"type":"object","required":["filterControlId","sourceFilterId"]},"aws-native:quicksight:TemplateFilterDateTimePickerControl":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configurationof the Apply button on a `DateTimePickerControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimePickerControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterDateTimePickerControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterDateTimePickerControl` ."},"title":{"type":"string","description":"The title of the `FilterDateTimePickerControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlDateTimePickerType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:TemplateFilterDropDownControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configuration of the Apply button on a `FilterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDropDownControlDisplayOptions","description":"The display options of the `FilterDropDownControl` ."},"filterControlId":{"type":"string","description":"The ID of the `FilterDropDownControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:TemplateFilterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterDropDownControl` ."},"title":{"type":"string","description":"The title of the `FilterDropDownControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlListType","description":"The type of the `FilterDropDownControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from a dropdown menu.\n- `SINGLE_SELECT` : The user can select a single entry from a dropdown menu."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:TemplateFilterGroup":{"properties":{"crossDataset":{"$ref":"#/types/aws-native:quicksight:TemplateCrossDatasetTypes","description":"The filter new feature which can apply filter group to all data sets. Choose one of the following options:\n\n- `ALL_DATASETS`\n- `SINGLE_DATASET`"},"filterGroupId":{"type":"string","description":"The value that uniquely identifies a `FilterGroup` within a dashboard, template, or analysis."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFilter"},"description":"The list of filters that are present in a `FilterGroup` ."},"scopeConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFilterScopeConfiguration","description":"The configuration that specifies what scope to apply to a `FilterGroup` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"status":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"The status of the `FilterGroup` ."}},"type":"object","required":["crossDataset","filterGroupId","filters","scopeConfiguration"]},"aws-native:quicksight:TemplateFilterListConfiguration":{"properties":{"categoryValues":{"type":"array","items":{"type":"string"},"description":"The list of category values for the filter."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["matchOperator"]},"aws-native:quicksight:TemplateFilterListControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateListControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterListControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:TemplateFilterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterListControl` ."},"title":{"type":"string","description":"The title of the `FilterListControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlListType","description":"The type of the `FilterListControl` . Choose one of the following options:\n\n- `MULTI_SELECT` : The user can select multiple entries from the list.\n- `SINGLE_SELECT` : The user can select a single entry from the list."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:TemplateFilterNullOption":{"type":"string","enum":[{"name":"AllValues","value":"ALL_VALUES"},{"name":"NullsOnly","value":"NULLS_ONLY"},{"name":"NonNullsOnly","value":"NON_NULLS_ONLY"}]},"aws-native:quicksight:TemplateFilterOperationSelectedFieldsConfiguration":{"properties":{"selectedColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"description":"\u003cp\u003eThe selected columns of a dataset.\u003c/p\u003e"},"selectedFieldOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSelectedFieldOptions","description":"A structure that contains the options that choose which fields are filtered in the `CustomActionFilterOperation` .\n\nValid values are defined as follows:\n\n- `ALL_FIELDS` : Applies the filter operation to all fields."},"selectedFields":{"type":"array","items":{"type":"string"},"description":"Chooses the fields that are filtered in `CustomActionFilterOperation` ."}},"type":"object"},"aws-native:quicksight:TemplateFilterOperationTargetVisualsConfiguration":{"properties":{"sameSheetTargetVisualConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateSameSheetTargetVisualConfiguration","description":"The configuration of the same-sheet target visuals that you want to be filtered."}},"type":"object"},"aws-native:quicksight:TemplateFilterRelativeDateTimeControl":{"properties":{"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configuration of the Apply button on a `FilterRelativeDateTimeControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateRelativeDateTimeControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextAreaControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `FilterTextAreaControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:TemplateFilterScopeConfiguration":{"properties":{"allSheets":{"$ref":"#/types/aws-native:quicksight:TemplateAllSheetsFilterScopeConfiguration","description":"The configuration that applies a filter to all sheets. When you choose `AllSheets` as the value for a `FilterScopeConfiguration` , this filter is applied to all visuals of all sheets in an Analysis, Dashboard, or Template. The `AllSheetsFilterScopeConfiguration` is chosen."},"selectedSheets":{"$ref":"#/types/aws-native:quicksight:TemplateSelectedSheetsFilterScopeConfiguration","description":"The configuration for applying a filter to specific sheets."}},"type":"object"},"aws-native:quicksight:TemplateFilterSelectableValues":{"properties":{"values":{"type":"array","items":{"type":"string"},"description":"The values that are used in the `FilterSelectableValues` ."}},"type":"object"},"aws-native:quicksight:TemplateFilterSliderControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSliderControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterSliderControl` ."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterSliderControl` ."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"title":{"type":"string","description":"The title of the `FilterSliderControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlSliderType","description":"The type of the `FilterSliderControl` . Choose one of the following options:\n\n- `SINGLE_POINT` : Filter against(equals) a single data point.\n- `RANGE` : Filter data that is in a specified range."}},"type":"object","required":["filterControlId","maximumValue","minimumValue","sourceFilterId","stepSize","title"]},"aws-native:quicksight:TemplateFilterTextAreaControl":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextAreaControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextAreaControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `FilterTextAreaControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:TemplateFilterTextFieldControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextFieldControlDisplayOptions","description":"The display options of a control."},"filterControlId":{"type":"string","description":"The ID of the `FilterTextFieldControl` ."},"sourceFilterId":{"type":"string","description":"The source filter ID of the `FilterTextFieldControl` ."},"title":{"type":"string","description":"The title of the `FilterTextFieldControl` ."}},"type":"object","required":["filterControlId","sourceFilterId","title"]},"aws-native:quicksight:TemplateFilterVisualScope":{"type":"string","enum":[{"name":"AllVisuals","value":"ALL_VISUALS"},{"name":"SelectedVisuals","value":"SELECTED_VISUALS"}]},"aws-native:quicksight:TemplateFontConfiguration":{"properties":{"fontColor":{"type":"string","description":"Determines the color of the text."},"fontDecoration":{"$ref":"#/types/aws-native:quicksight:TemplateFontDecoration","description":"Determines the appearance of decorative lines on the text."},"fontFamily":{"type":"string","description":"The font family that you want to use."},"fontSize":{"$ref":"#/types/aws-native:quicksight:TemplateFontSize","description":"The option that determines the text display size."},"fontStyle":{"$ref":"#/types/aws-native:quicksight:TemplateFontStyle","description":"Determines the text display face that is inherited by the given font family."},"fontWeight":{"$ref":"#/types/aws-native:quicksight:TemplateFontWeight","description":"The option that determines the text display weight, or boldness."}},"type":"object"},"aws-native:quicksight:TemplateFontDecoration":{"type":"string","enum":[{"name":"Underline","value":"UNDERLINE"},{"name":"None","value":"NONE"}]},"aws-native:quicksight:TemplateFontSize":{"properties":{"absolute":{"type":"string","description":"String based length that is composed of value and unit in px"},"relative":{"$ref":"#/types/aws-native:quicksight:TemplateRelativeFontSize","description":"The lexical name for the text size, proportional to its surrounding context."}},"type":"object"},"aws-native:quicksight:TemplateFontStyle":{"type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Italic","value":"ITALIC"}]},"aws-native:quicksight:TemplateFontWeight":{"properties":{"name":{"$ref":"#/types/aws-native:quicksight:TemplateFontWeightName","description":"The lexical name for the level of boldness of the text display."}},"type":"object"},"aws-native:quicksight:TemplateFontWeightName":{"type":"string","enum":[{"name":"Normal","value":"NORMAL"},{"name":"Bold","value":"BOLD"}]},"aws-native:quicksight:TemplateForecastComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"customSeasonalityValue":{"type":"number","description":"The custom seasonality value setup of a forecast computation."},"lowerBoundary":{"type":"number","description":"The lower boundary setup of a forecast computation."},"name":{"type":"string","description":"The name of a computation."},"periodsBackward":{"type":"number","description":"The periods backward setup of a forecast computation."},"periodsForward":{"type":"number","description":"The periods forward setup of a forecast computation."},"predictionInterval":{"type":"number","description":"The prediction interval setup of a forecast computation."},"seasonality":{"$ref":"#/types/aws-native:quicksight:TemplateForecastComputationSeasonality","description":"The seasonality setup of a forecast computation. Choose one of the following options:\n\n- `AUTOMATIC`\n- `CUSTOM` : Checks the custom seasonality value."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."},"upperBoundary":{"type":"number","description":"The upper boundary setup of a forecast computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplateForecastComputationSeasonality":{"type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:quicksight:TemplateForecastConfiguration":{"properties":{"forecastProperties":{"$ref":"#/types/aws-native:quicksight:TemplateTimeBasedForecastProperties","description":"The forecast properties setup of a forecast in the line chart."},"scenario":{"$ref":"#/types/aws-native:quicksight:TemplateForecastScenario","description":"The forecast scenario of a forecast in the line chart."}},"type":"object"},"aws-native:quicksight:TemplateForecastScenario":{"properties":{"whatIfPointScenario":{"$ref":"#/types/aws-native:quicksight:TemplateWhatIfPointScenario","description":"The what-if analysis forecast setup with the target date."},"whatIfRangeScenario":{"$ref":"#/types/aws-native:quicksight:TemplateWhatIfRangeScenario","description":"The what-if analysis forecast setup with the date range."}},"type":"object"},"aws-native:quicksight:TemplateFormatConfiguration":{"properties":{"dateTimeFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeFormatConfiguration","description":"Formatting configuration for `DateTime` fields."},"numberFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumberFormatConfiguration","description":"Formatting configuration for number fields."},"stringFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateStringFormatConfiguration","description":"Formatting configuration for string fields."}},"type":"object"},"aws-native:quicksight:TemplateFreeFormLayoutCanvasSizeOptions":{"properties":{"screenCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutScreenCanvasSizeOptions","description":"The options that determine the sizing of the canvas used in a free-form layout."}},"type":"object"},"aws-native:quicksight:TemplateFreeFormLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutCanvasSizeOptions"},"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutElement"},"description":"The elements that are included in a free-form layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:TemplateFreeFormLayoutElement":{"properties":{"backgroundStyle":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutElementBackgroundStyle","description":"The background style configuration of a free-form layout element."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutElementBorderStyle","description":"The border style configuration of a free-form layout element."},"elementId":{"type":"string","description":"A unique identifier for an element within a free-form layout."},"elementType":{"$ref":"#/types/aws-native:quicksight:TemplateLayoutElementType","description":"The type of element."},"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"loadingAnimation":{"$ref":"#/types/aws-native:quicksight:TemplateLoadingAnimation","description":"The loading animation configuration of a free-form layout element."},"renderingRules":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheetElementRenderingRule"},"description":"The rendering rules that determine when an element should be displayed within a free-form layout."},"selectedBorderStyle":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutElementBorderStyle","description":"The border style configuration of a free-form layout element. This border style is used when the element is selected."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of an element within a free-form layout."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"},"xAxisLocation":{"type":"string","description":"String based length that is composed of value and unit in px"},"yAxisLocation":{"type":"string","description":"String based length that is composed of value and unit in px with Integer.MAX_VALUE as maximum value"}},"type":"object","required":["elementId","elementType","height","width","xAxisLocation","yAxisLocation"]},"aws-native:quicksight:TemplateFreeFormLayoutElementBackgroundStyle":{"properties":{"color":{"type":"string","description":"The background color of a free-form layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The background visibility of a free-form layout element."}},"type":"object"},"aws-native:quicksight:TemplateFreeFormLayoutElementBorderStyle":{"properties":{"color":{"type":"string","description":"The border color of a free-form layout element."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The border visibility of a free-form layout element."}},"type":"object"},"aws-native:quicksight:TemplateFreeFormLayoutScreenCanvasSizeOptions":{"properties":{"optimizedViewPortWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["optimizedViewPortWidth"]},"aws-native:quicksight:TemplateFreeFormSectionLayoutConfiguration":{"properties":{"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutElement"},"description":"The elements that are included in the free-form layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:TemplateFunnelChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category field wells of a funnel chart. Values are grouped by category fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a funnel chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:TemplateFunnelChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options of the categories that are displayed in a `FunnelChartVisual` ."},"dataLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartDataLabelOptions","description":"The options that determine the presentation of the data labels."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartFieldWells","description":"The field well configuration of a `FunnelChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartSortConfiguration","description":"The sort configuration of a `FunnelChartVisual` ."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip configuration of a `FunnelChartVisual` ."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options for the values that are displayed in a `FunnelChartVisual` ."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The visual palette configuration of a `FunnelChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateFunnelChartDataLabelOptions":{"properties":{"categoryLabelVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the category labels within the data labels."},"labelColor":{"type":"string","description":"The color of the data label text."},"labelFontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The font configuration for the data labels.\n\nOnly the `FontSize` attribute of the font configuration is used for data labels."},"measureDataLabelStyle":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartMeasureDataLabelStyle","description":"Determines the style of the metric labels."},"measureLabelVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the measure labels within the data labels."},"position":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelPosition","description":"Determines the positioning of the data label relative to a section of the funnel."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility option that determines if data labels are displayed."}},"type":"object"},"aws-native:quicksight:TemplateFunnelChartFieldWells":{"properties":{"funnelChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartAggregatedFieldWells","description":"The field well configuration of a `FunnelChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateFunnelChartMeasureDataLabelStyle":{"type":"string","enum":[{"name":"ValueOnly","value":"VALUE_ONLY"},{"name":"PercentageByFirstStage","value":"PERCENTAGE_BY_FIRST_STAGE"},{"name":"PercentageByPreviousStage","value":"PERCENTAGE_BY_PREVIOUS_STAGE"},{"name":"ValueAndPercentageByFirstStage","value":"VALUE_AND_PERCENTAGE_BY_FIRST_STAGE"},{"name":"ValueAndPercentageByPreviousStage","value":"VALUE_AND_PERCENTAGE_BY_PREVIOUS_STAGE"}]},"aws-native:quicksight:TemplateFunnelChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of categories displayed."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the category fields."}},"type":"object"},"aws-native:quicksight:TemplateFunnelChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartConfiguration","description":"The configuration of a `FunnelChartVisual` ."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateGaugeChartArcConditionalFormatting":{"properties":{"foregroundColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting of the arc foreground color."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartColorConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"The background color configuration of a `GaugeChartVisual` ."},"foregroundColor":{"type":"string","description":"The foreground color configuration of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartConditionalFormattingOption"},"description":"Conditional formatting options of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartConditionalFormattingOption":{"properties":{"arc":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartArcConditionalFormatting","description":"The options that determine the presentation of the arc of a `GaugeChartVisual` ."},"primaryValue":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartPrimaryValueConditionalFormatting","description":"The conditional formatting for the primary value of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartConfiguration":{"properties":{"colorConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartColorConfiguration","description":"The color configuration of a `GaugeChartVisual` ."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The data label configuration of a `GaugeChartVisual` ."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartFieldWells","description":"The field well configuration of a `GaugeChartVisual` ."},"gaugeChartOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartOptions","description":"The options that determine the presentation of the `GaugeChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"tooltipOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip configuration of a `GaugeChartVisual` ."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The visual palette configuration of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartFieldWells":{"properties":{"targetValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The target value field wells of a `GaugeChartVisual` ."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a `GaugeChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartOptions":{"properties":{"arc":{"$ref":"#/types/aws-native:quicksight:TemplateArcConfiguration","description":"The arc configuration of a `GaugeChartVisual` ."},"arcAxis":{"$ref":"#/types/aws-native:quicksight:TemplateArcAxisConfiguration","description":"The arc axis configuration of a `GaugeChartVisual` ."},"comparison":{"$ref":"#/types/aws-native:quicksight:TemplateComparisonConfiguration","description":"The comparison configuration of a `GaugeChartVisual` ."},"primaryValueDisplayType":{"$ref":"#/types/aws-native:quicksight:TemplatePrimaryValueDisplayType","description":"The options that determine the primary value display type."},"primaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The options that determine the primary value font configuration."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartPrimaryValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIcon","description":"The conditional formatting of the primary value icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting of the primary value text color."}},"type":"object"},"aws-native:quicksight:TemplateGaugeChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartConfiguration","description":"The configuration of a `GaugeChartVisual` ."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartConditionalFormatting","description":"The conditional formatting of a `GaugeChartVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateGeospatialCoordinateBounds":{"properties":{"east":{"type":"number","description":"The longitude of the east bound of the geospatial coordinate bounds."},"north":{"type":"number","description":"The latitude of the north bound of the geospatial coordinate bounds."},"south":{"type":"number","description":"The latitude of the south bound of the geospatial coordinate bounds."},"west":{"type":"number","description":"The longitude of the west bound of the geospatial coordinate bounds."}},"type":"object","required":["east","north","south","west"]},"aws-native:quicksight:TemplateGeospatialHeatmapColorScale":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialHeatmapDataColor"},"description":"The list of colors to be used in heatmap point style."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialHeatmapConfiguration":{"properties":{"heatmapColor":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialHeatmapColorScale","description":"The color scale specification for the heatmap point style."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialHeatmapDataColor":{"properties":{"color":{"type":"string","description":"The hex color to be used in the heatmap point style."}},"type":"object","required":["color"]},"aws-native:quicksight:TemplateGeospatialMapAggregatedFieldWells":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The color field wells of a geospatial map."},"geospatial":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The geospatial field wells of a geospatial map. Values are grouped by geospatial fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The size field wells of a geospatial map. Values are aggregated based on geospatial fields."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialMapConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialMapFieldWells","description":"The field wells of the visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"mapStyleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialMapStyleOptions","description":"The map style options of the geospatial map."},"pointStyleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialPointStyleOptions","description":"The point style options of the geospatial map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette"},"windowOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialWindowOptions","description":"The window options of the geospatial map."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialMapFieldWells":{"properties":{"geospatialMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialMapAggregatedFieldWells","description":"The aggregated field well for a geospatial map."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialMapStyleOptions":{"properties":{"baseMapStyle":{"$ref":"#/types/aws-native:quicksight:TemplateBaseMapStyleType","description":"The base map style of the geospatial map."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateGeospatialPointStyleOptions":{"properties":{"clusterMarkerConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateClusterMarkerConfiguration","description":"The cluster marker configuration of the geospatial point style."},"heatmapConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialHeatmapConfiguration","description":"The heatmap configuration of the geospatial point style."},"selectedPointStyle":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialSelectedPointStyle","description":"The selected point styles (point, cluster) of the geospatial map."}},"type":"object"},"aws-native:quicksight:TemplateGeospatialSelectedPointStyle":{"type":"string","enum":[{"name":"Point","value":"POINT"},{"name":"Cluster","value":"CLUSTER"},{"name":"Heatmap","value":"HEATMAP"}]},"aws-native:quicksight:TemplateGeospatialWindowOptions":{"properties":{"bounds":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialCoordinateBounds","description":"The bounds options (north, south, west, east) of the geospatial window options."},"mapZoomMode":{"$ref":"#/types/aws-native:quicksight:TemplateMapZoomMode","description":"The map zoom modes (manual, auto) of the geospatial window options."}},"type":"object"},"aws-native:quicksight:TemplateGlobalTableBorderOptions":{"properties":{"sideSpecificBorder":{"$ref":"#/types/aws-native:quicksight:TemplateTableSideBorderOptions","description":"Determines the options for side specific border."},"uniformBorder":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"Determines the options for uniform border."}},"type":"object"},"aws-native:quicksight:TemplateGradientColor":{"properties":{"stops":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateGradientStop"},"description":"The list of gradient color stops."}},"type":"object"},"aws-native:quicksight:TemplateGradientStop":{"properties":{"color":{"type":"string","description":"Determines the color."},"dataValue":{"type":"number","description":"Determines the data value."},"gradientOffset":{"type":"number","description":"Determines gradient offset value."}},"type":"object","required":["gradientOffset"]},"aws-native:quicksight:TemplateGridLayoutCanvasSizeOptions":{"properties":{"screenCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGridLayoutScreenCanvasSizeOptions","description":"The options that determine the sizing of the canvas used in a grid layout."}},"type":"object"},"aws-native:quicksight:TemplateGridLayoutConfiguration":{"properties":{"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateGridLayoutCanvasSizeOptions"},"elements":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateGridLayoutElement"},"description":"The elements that are included in a grid layout."}},"type":"object","required":["elements"]},"aws-native:quicksight:TemplateGridLayoutElement":{"properties":{"columnIndex":{"type":"number","description":"The column index for the upper left corner of an element."},"columnSpan":{"type":"number","description":"The width of a grid element expressed as a number of grid columns."},"elementId":{"type":"string","description":"A unique identifier for an element within a grid layout."},"elementType":{"$ref":"#/types/aws-native:quicksight:TemplateLayoutElementType","description":"The type of element."},"rowIndex":{"type":"number","description":"The row index for the upper left corner of an element."},"rowSpan":{"type":"number","description":"The height of a grid element expressed as a number of grid rows."}},"type":"object","required":["columnSpan","elementId","elementType","rowSpan"]},"aws-native:quicksight:TemplateGridLayoutScreenCanvasSizeOptions":{"properties":{"optimizedViewPortWidth":{"type":"string","description":"String based length that is composed of value and unit in px"},"resizeOption":{"$ref":"#/types/aws-native:quicksight:TemplateResizeOption","description":"This value determines the layout behavior when the viewport is resized.\n\n- `FIXED` : A fixed width will be used when optimizing the layout. In the Quick Sight console, this option is called `Classic` .\n- `RESPONSIVE` : The width of the canvas will be responsive and optimized to the view port. In the Quick Sight console, this option is called `Tiled` ."}},"type":"object","required":["resizeOption"]},"aws-native:quicksight:TemplateGrowthRateComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"periodSize":{"type":"number","description":"The period size setup of a growth rate computation."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplateHeaderFooterSectionConfiguration":{"properties":{"layout":{"$ref":"#/types/aws-native:quicksight:TemplateSectionLayoutConfiguration","description":"The layout configuration of the header or footer section."},"sectionId":{"type":"string","description":"The unique identifier of the header or footer section."},"style":{"$ref":"#/types/aws-native:quicksight:TemplateSectionStyle","description":"The style options of a header or footer section."}},"type":"object","required":["layout","sectionId"]},"aws-native:quicksight:TemplateHeatMapAggregatedFieldWells":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The columns field well of a heat map."},"rows":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The rows field well of a heat map."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The values field well of a heat map."}},"type":"object"},"aws-native:quicksight:TemplateHeatMapConfiguration":{"properties":{"colorScale":{"$ref":"#/types/aws-native:quicksight:TemplateColorScale","description":"The color options (gradient color, point of divergence) in a heat map."},"columnLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options of the column that is displayed in a heat map."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateHeatMapFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"rowLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options of the row that is displayed in a `heat map` ."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateHeatMapSortConfiguration","description":"The sort configuration of a heat map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplateHeatMapFieldWells":{"properties":{"heatMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateHeatMapAggregatedFieldWells","description":"The aggregated field wells of a heat map."}},"type":"object"},"aws-native:quicksight:TemplateHeatMapSortConfiguration":{"properties":{"heatMapColumnItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of columns that are displayed in a heat map."},"heatMapColumnSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The column sort configuration for heat map for columns that aren't a part of a field well."},"heatMapRowItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of rows that are displayed in a heat map."},"heatMapRowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The field sort configuration of the rows fields."}},"type":"object"},"aws-native:quicksight:TemplateHeatMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateHeatMapConfiguration","description":"The configuration of a heat map."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateHistogramAggregatedFieldWells":{"properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a histogram. Values are aggregated by `COUNT` or `DISTINCT_COUNT` ."}},"type":"object"},"aws-native:quicksight:TemplateHistogramBinOptions":{"properties":{"binCount":{"$ref":"#/types/aws-native:quicksight:TemplateBinCountOptions","description":"The options that determine the bin count of a histogram."},"binWidth":{"$ref":"#/types/aws-native:quicksight:TemplateBinWidthOptions","description":"The options that determine the bin width of a histogram."},"selectedBinType":{"$ref":"#/types/aws-native:quicksight:TemplateHistogramBinType","description":"The options that determine the selected bin type."},"startValue":{"type":"number","description":"The options that determine the bin start value."}},"type":"object"},"aws-native:quicksight:TemplateHistogramBinType":{"type":"string","enum":[{"name":"BinCount","value":"BIN_COUNT"},{"name":"BinWidth","value":"BIN_WIDTH"}]},"aws-native:quicksight:TemplateHistogramConfiguration":{"properties":{"binOptions":{"$ref":"#/types/aws-native:quicksight:TemplateHistogramBinOptions","description":"The options that determine the presentation of histogram bins."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The data label configuration of a histogram."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateHistogramFieldWells","description":"The field well configuration of a histogram."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip configuration of a histogram."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The visual palette configuration of a histogram."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The options that determine the presentation of the x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The options that determine the presentation of the x-axis label."},"yAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The options that determine the presentation of the y-axis."}},"type":"object"},"aws-native:quicksight:TemplateHistogramFieldWells":{"properties":{"histogramAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateHistogramAggregatedFieldWells","description":"The field well configuration of a histogram."}},"type":"object"},"aws-native:quicksight:TemplateHistogramVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateHistogramConfiguration","description":"The configuration for a `HistogramVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateHorizontalTextAlignment":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:TemplateIcon":{"type":"string","enum":[{"name":"CaretUp","value":"CARET_UP"},{"name":"CaretDown","value":"CARET_DOWN"},{"name":"Plus","value":"PLUS"},{"name":"Minus","value":"MINUS"},{"name":"ArrowUp","value":"ARROW_UP"},{"name":"ArrowDown","value":"ARROW_DOWN"},{"name":"ArrowLeft","value":"ARROW_LEFT"},{"name":"ArrowUpLeft","value":"ARROW_UP_LEFT"},{"name":"ArrowDownLeft","value":"ARROW_DOWN_LEFT"},{"name":"ArrowRight","value":"ARROW_RIGHT"},{"name":"ArrowUpRight","value":"ARROW_UP_RIGHT"},{"name":"ArrowDownRight","value":"ARROW_DOWN_RIGHT"},{"name":"FaceUp","value":"FACE_UP"},{"name":"FaceDown","value":"FACE_DOWN"},{"name":"FaceFlat","value":"FACE_FLAT"},{"name":"OneBar","value":"ONE_BAR"},{"name":"TwoBar","value":"TWO_BAR"},{"name":"ThreeBar","value":"THREE_BAR"},{"name":"Circle","value":"CIRCLE"},{"name":"Triangle","value":"TRIANGLE"},{"name":"Square","value":"SQUARE"},{"name":"Flag","value":"FLAG"},{"name":"ThumbsUp","value":"THUMBS_UP"},{"name":"ThumbsDown","value":"THUMBS_DOWN"},{"name":"Checkmark","value":"CHECKMARK"},{"name":"X","value":"X"}]},"aws-native:quicksight:TemplateImageCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateImageCustomActionOperation"},"description":"A list of `ImageCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the custom action."},"name":{"type":"string","description":"The name of the custom action."},"status":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"The status of the custom action."},"trigger":{"$ref":"#/types/aws-native:quicksight:TemplateImageCustomActionTrigger","description":"The trigger of the `VisualCustomAction` .\n\nValid values are defined as follows:\n\n- `CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:TemplateImageCustomActionOperation":{"properties":{"navigationOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionNavigationOperation"},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionSetParametersOperation"},"urlOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionUrlOperation"}},"type":"object"},"aws-native:quicksight:TemplateImageCustomActionTrigger":{"type":"string","enum":[{"name":"Click","value":"CLICK"},{"name":"Menu","value":"MENU"}]},"aws-native:quicksight:TemplateImageInteractionOptions":{"properties":{"imageMenuOption":{"$ref":"#/types/aws-native:quicksight:TemplateImageMenuOption","description":"The menu options for the image."}},"type":"object"},"aws-native:quicksight:TemplateImageMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:TemplateDashboardBehavior","description":"The availability status of the image menu. If the value of this property is set to `ENABLED` , dashboard readers can interact with the image menu."}},"type":"object"},"aws-native:quicksight:TemplateInnerFilter":{"properties":{"categoryInnerFilter":{"$ref":"#/types/aws-native:quicksight:TemplateCategoryInnerFilter","description":"A `CategoryInnerFilter` filters text values for the `NestedFilter` ."}},"type":"object"},"aws-native:quicksight:TemplateInsightConfiguration":{"properties":{"computations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateComputation"},"description":"The computations configurations of the insight visual"},"customNarrative":{"$ref":"#/types/aws-native:quicksight:TemplateCustomNarrativeOptions","description":"The custom narrative of the insight visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."}},"type":"object"},"aws-native:quicksight:TemplateInsightVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"dataSetIdentifier":{"type":"string","description":"The dataset that is used in the insight visual."},"insightConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateInsightConfiguration","description":"The configuration of an insight visual."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["dataSetIdentifier","visualId"]},"aws-native:quicksight:TemplateIntegerDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:TemplateDynamicDefaultValue","description":"The dynamic value of the `IntegerDefaultValues` . Different defaults are displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"number"},"description":"The static values of the `IntegerDefaultValues` ."}},"type":"object"},"aws-native:quicksight:TemplateIntegerParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:TemplateIntegerDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:TemplateParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:TemplateIntegerValueWhenUnsetConfiguration","description":"A parameter declaration for the `Integer` data type."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:TemplateIntegerValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"number","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:TemplateValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:TemplateItemsLimitConfiguration":{"properties":{"itemsLimit":{"type":"number","description":"The limit on how many items of a field are showed in the chart. For example, the number of slices that are displayed in a pie chart."},"otherCategories":{"$ref":"#/types/aws-native:quicksight:TemplateOtherCategories","description":"The `Show other` of an axis in the chart. Choose one of the following options:\n\n- `INCLUDE`\n- `EXCLUDE`"}},"type":"object"},"aws-native:quicksight:TemplateKpiActualValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIcon","description":"The conditional formatting of the actual value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting of the actual value's text color."}},"type":"object"},"aws-native:quicksight:TemplateKpiComparisonValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIcon","description":"The conditional formatting of the comparison value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting of the comparison value's text color."}},"type":"object"},"aws-native:quicksight:TemplateKpiConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateKpiConditionalFormattingOption"},"description":"The conditional formatting options of a KPI visual."}},"type":"object"},"aws-native:quicksight:TemplateKpiConditionalFormattingOption":{"properties":{"actualValue":{"$ref":"#/types/aws-native:quicksight:TemplateKpiActualValueConditionalFormatting","description":"The conditional formatting for the actual value of a KPI visual."},"comparisonValue":{"$ref":"#/types/aws-native:quicksight:TemplateKpiComparisonValueConditionalFormatting","description":"The conditional formatting for the comparison value of a KPI visual."},"primaryValue":{"$ref":"#/types/aws-native:quicksight:TemplateKpiPrimaryValueConditionalFormatting","description":"The conditional formatting for the primary value of a KPI visual."},"progressBar":{"$ref":"#/types/aws-native:quicksight:TemplateKpiProgressBarConditionalFormatting","description":"The conditional formatting for the progress bar of a KPI visual."}},"type":"object"},"aws-native:quicksight:TemplateKpiConfiguration":{"properties":{"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateKpiFieldWells","description":"The field well configuration of a KPI visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"kpiOptions":{"$ref":"#/types/aws-native:quicksight:TemplateKpiOptions","description":"The options that determine the presentation of a KPI visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateKpiSortConfiguration","description":"The sort configuration of a KPI visual."}},"type":"object"},"aws-native:quicksight:TemplateKpiFieldWells":{"properties":{"targetValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The target value field wells of a KPI visual."},"trendGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The trend group field wells of a KPI visual."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a KPI visual."}},"type":"object"},"aws-native:quicksight:TemplateKpiOptions":{"properties":{"comparison":{"$ref":"#/types/aws-native:quicksight:TemplateComparisonConfiguration","description":"The comparison configuration of a KPI visual."},"primaryValueDisplayType":{"$ref":"#/types/aws-native:quicksight:TemplatePrimaryValueDisplayType","description":"The options that determine the primary value display type."},"primaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The options that determine the primary value font configuration."},"progressBar":{"$ref":"#/types/aws-native:quicksight:TemplateProgressBarOptions","description":"The options that determine the presentation of the progress bar of a KPI visual."},"secondaryValue":{"$ref":"#/types/aws-native:quicksight:TemplateSecondaryValueOptions","description":"The options that determine the presentation of the secondary value of a KPI visual."},"secondaryValueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The options that determine the secondary value font configuration."},"sparkline":{"$ref":"#/types/aws-native:quicksight:TemplateKpiSparklineOptions","description":"The options that determine the visibility, color, type, and tooltip visibility of the sparkline of a KPI visual."},"trendArrows":{"$ref":"#/types/aws-native:quicksight:TemplateTrendArrowOptions","description":"The options that determine the presentation of trend arrows in a KPI visual."},"visualLayoutOptions":{"$ref":"#/types/aws-native:quicksight:TemplateKpiVisualLayoutOptions","description":"The options that determine the layout a KPI visual."}},"type":"object"},"aws-native:quicksight:TemplateKpiPrimaryValueConditionalFormatting":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIcon","description":"The conditional formatting of the primary value's icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting of the primary value's text color."}},"type":"object"},"aws-native:quicksight:TemplateKpiProgressBarConditionalFormatting":{"properties":{"foregroundColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting of the progress bar's foreground color."}},"type":"object"},"aws-native:quicksight:TemplateKpiSortConfiguration":{"properties":{"trendGroupSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the trend group fields."}},"type":"object"},"aws-native:quicksight:TemplateKpiSparklineOptions":{"properties":{"color":{"type":"string","description":"The color of the sparkline."},"tooltipVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The tooltip visibility of the sparkline."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateKpiSparklineType","description":"The type of the sparkline."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the sparkline."}},"type":"object","required":["type"]},"aws-native:quicksight:TemplateKpiSparklineType":{"type":"string","enum":[{"name":"Line","value":"LINE"},{"name":"Area","value":"AREA"}]},"aws-native:quicksight:TemplateKpiVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateKpiConfiguration","description":"The configuration of a KPI visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:TemplateKpiConditionalFormatting","description":"The conditional formatting of a KPI visual."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateKpiVisualLayoutOptions":{"properties":{"standardLayout":{"$ref":"#/types/aws-native:quicksight:TemplateKpiVisualStandardLayout","description":"The standard layout of the KPI visual."}},"type":"object"},"aws-native:quicksight:TemplateKpiVisualStandardLayout":{"properties":{"type":{"$ref":"#/types/aws-native:quicksight:TemplateKpiVisualStandardLayoutType","description":"The standard layout type."}},"type":"object","required":["type"]},"aws-native:quicksight:TemplateKpiVisualStandardLayoutType":{"type":"string","enum":[{"name":"Classic","value":"CLASSIC"},{"name":"Vertical","value":"VERTICAL"}]},"aws-native:quicksight:TemplateLabelOptions":{"properties":{"customLabel":{"type":"string","description":"The text for the label."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The font configuration of the label."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not the label is visible."}},"type":"object"},"aws-native:quicksight:TemplateLayout":{"properties":{"configuration":{"$ref":"#/types/aws-native:quicksight:TemplateLayoutConfiguration","description":"The configuration that determines what the type of layout for a sheet."}},"type":"object","required":["configuration"]},"aws-native:quicksight:TemplateLayoutConfiguration":{"properties":{"freeFormLayout":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormLayoutConfiguration","description":"A free-form is optimized for a fixed width and has more control over the exact placement of layout elements."},"gridLayout":{"$ref":"#/types/aws-native:quicksight:TemplateGridLayoutConfiguration","description":"A type of layout that can be used on a sheet. In a grid layout, visuals snap to a grid with standard spacing and alignment. Dashboards are displayed as designed, with options to fit to screen or view at actual size. A grid layout can be configured to behave in one of two ways when the viewport is resized: `FIXED` or `RESPONSIVE` ."},"sectionBasedLayout":{"$ref":"#/types/aws-native:quicksight:TemplateSectionBasedLayoutConfiguration","description":"A section based layout organizes visuals into multiple sections and has customized header, footer and page break."}},"type":"object"},"aws-native:quicksight:TemplateLayoutElementType":{"type":"string","enum":[{"name":"Visual","value":"VISUAL"},{"name":"FilterControl","value":"FILTER_CONTROL"},{"name":"ParameterControl","value":"PARAMETER_CONTROL"},{"name":"TextBox","value":"TEXT_BOX"},{"name":"Image","value":"IMAGE"}]},"aws-native:quicksight:TemplateLegendOptions":{"properties":{"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"position":{"$ref":"#/types/aws-native:quicksight:TemplateLegendPosition","description":"The positions for the legend. Choose one of the following options:\n\n- `AUTO`\n- `RIGHT`\n- `BOTTOM`\n- `LEFT`"},"title":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The custom title for the legend."},"valueFontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration"},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not the legend is visible."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object"},"aws-native:quicksight:TemplateLegendPosition":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Right","value":"RIGHT"},{"name":"Bottom","value":"BOTTOM"},{"name":"Top","value":"TOP"}]},"aws-native:quicksight:TemplateLineChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category field wells of a line chart. Values are grouped by category fields."},"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The color field wells of a line chart. Values are grouped by category fields."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The small multiples field well of a line chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a line chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:TemplateLineChartConfiguration":{"properties":{"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateContributionAnalysisDefault"},"description":"The default configuration of a line chart's contribution analysis."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The data label configuration of a line chart."},"defaultSeriesSettings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartDefaultSeriesSettings","description":"The options that determine the default presentation of all line series in `LineChartVisual` ."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartFieldWells","description":"The field well configuration of a line chart."},"forecastConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateForecastConfiguration"},"description":"The forecast configuration of a line chart."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend configuration of a line chart."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLineSeriesAxisDisplayOptions","description":"The series axis configuration of a line chart."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The options that determine the presentation of the y-axis label."},"referenceLines":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLine"},"description":"The reference lines configuration of a line chart."},"secondaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLineSeriesAxisDisplayOptions","description":"The series axis configuration of a line chart."},"secondaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The options that determine the presentation of the secondary y-axis label."},"series":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSeriesItem"},"description":"The series item configuration of a line chart."},"singleAxisOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSingleAxisOptions"},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartSortConfiguration","description":"The sort configuration of a line chart."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip configuration of a line chart."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartType","description":"Determines the type of the line chart."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The visual palette configuration of a line chart."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The options that determine the presentation of the x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The options that determine the presentation of the x-axis label."}},"type":"object"},"aws-native:quicksight:TemplateLineChartDefaultSeriesSettings":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:TemplateAxisBinding","description":"The axis to which you are binding all line series to."},"lineStyleSettings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartLineStyleSettings","description":"Line styles options for all line series in the visual."},"markerStyleSettings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartMarkerStyleSettings","description":"Marker styles options for all line series in the visual."}},"type":"object"},"aws-native:quicksight:TemplateLineChartFieldWells":{"properties":{"lineChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartAggregatedFieldWells","description":"The field well configuration of a line chart."}},"type":"object"},"aws-native:quicksight:TemplateLineChartLineStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dotted","value":"DOTTED"},{"name":"Dashed","value":"DASHED"}]},"aws-native:quicksight:TemplateLineChartLineStyleSettings":{"properties":{"lineInterpolation":{"$ref":"#/types/aws-native:quicksight:TemplateLineInterpolation","description":"Interpolation style for line series.\n\n- `LINEAR` : Show as default, linear style.\n- `SMOOTH` : Show as a smooth curve.\n- `STEPPED` : Show steps in line."},"lineStyle":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartLineStyle","description":"Line style for line series.\n\n- `SOLID` : Show as a solid line.\n- `DOTTED` : Show as a dotted line.\n- `DASHED` : Show as a dashed line."},"lineVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Configuration option that determines whether to show the line for the series."},"lineWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object"},"aws-native:quicksight:TemplateLineChartMarkerShape":{"type":"string","enum":[{"name":"Circle","value":"CIRCLE"},{"name":"Triangle","value":"TRIANGLE"},{"name":"Square","value":"SQUARE"},{"name":"Diamond","value":"DIAMOND"},{"name":"RoundedSquare","value":"ROUNDED_SQUARE"}]},"aws-native:quicksight:TemplateLineChartMarkerStyleSettings":{"properties":{"markerColor":{"type":"string","description":"Color of marker in the series."},"markerShape":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartMarkerShape","description":"Shape option for markers in the series.\n\n- `CIRCLE` : Show marker as a circle.\n- `TRIANGLE` : Show marker as a triangle.\n- `SQUARE` : Show marker as a square.\n- `DIAMOND` : Show marker as a diamond.\n- `ROUNDED_SQUARE` : Show marker as a rounded square."},"markerSize":{"type":"string","description":"String based length that is composed of value and unit in px"},"markerVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Configuration option that determines whether to show the markers in the series."}},"type":"object"},"aws-native:quicksight:TemplateLineChartSeriesSettings":{"properties":{"lineStyleSettings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartLineStyleSettings","description":"Line styles options for a line series in `LineChartVisual` ."},"markerStyleSettings":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartMarkerStyleSettings","description":"Marker styles options for a line series in `LineChartVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateLineChartSortConfiguration":{"properties":{"categoryItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of categories that are displayed in a line chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the category fields."},"colorItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of lines that are displayed in a line chart."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:TemplateLineChartType":{"type":"string","enum":[{"name":"Line","value":"LINE"},{"name":"Area","value":"AREA"},{"name":"StackedArea","value":"STACKED_AREA"}]},"aws-native:quicksight:TemplateLineChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartConfiguration","description":"The configuration of a line chart."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateLineInterpolation":{"type":"string","enum":[{"name":"Linear","value":"LINEAR"},{"name":"Smooth","value":"SMOOTH"},{"name":"Stepped","value":"STEPPED"}]},"aws-native:quicksight:TemplateLineSeriesAxisDisplayOptions":{"properties":{"axisOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The options that determine the presentation of the line series axis."},"missingDataConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMissingDataConfiguration"},"description":"The configuration options that determine how missing data is treated during the rendering of a line chart."}},"type":"object"},"aws-native:quicksight:TemplateListControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"searchOptions":{"$ref":"#/types/aws-native:quicksight:TemplateListControlSearchOptions","description":"The configuration of the search options in a list control."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateListControlSelectAllOptions","description":"The configuration of the `Select all` options in a list control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateListControlSearchOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration of the search options in a list control."}},"type":"object"},"aws-native:quicksight:TemplateListControlSelectAllOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration of the `Select all` options in a list control."}},"type":"object"},"aws-native:quicksight:TemplateLoadingAnimation":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration of `LoadingAnimation` ."}},"type":"object"},"aws-native:quicksight:TemplateLocalNavigationConfiguration":{"properties":{"targetSheetId":{"type":"string","description":"The sheet that is targeted for navigation in the same analysis."}},"type":"object","required":["targetSheetId"]},"aws-native:quicksight:TemplateLongFormatText":{"properties":{"plainText":{"type":"string","description":"Plain text format."},"richText":{"type":"string","description":"Rich text. Examples of rich text include bold, underline, and italics."}},"type":"object"},"aws-native:quicksight:TemplateMapZoomMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:TemplateMappedDataSetParameter":{"properties":{"dataSetIdentifier":{"type":"string","description":"A unique name that identifies a dataset within the analysis or dashboard."},"dataSetParameterName":{"type":"string","description":"The name of the dataset parameter."}},"type":"object","required":["dataSetIdentifier","dataSetParameterName"]},"aws-native:quicksight:TemplateMaximumLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the maximum label."}},"type":"object"},"aws-native:quicksight:TemplateMaximumMinimumComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateMaximumMinimumComputationType","description":"The type of computation. Choose one of the following options:\n\n- MAXIMUM: A maximum computation.\n- MINIMUM: A minimum computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:TemplateMaximumMinimumComputationType":{"type":"string","enum":[{"name":"Maximum","value":"MAXIMUM"},{"name":"Minimum","value":"MINIMUM"}]},"aws-native:quicksight:TemplateMeasureField":{"properties":{"calculatedMeasureField":{"$ref":"#/types/aws-native:quicksight:TemplateCalculatedMeasureField","description":"The calculated measure field only used in pivot tables."},"categoricalMeasureField":{"$ref":"#/types/aws-native:quicksight:TemplateCategoricalMeasureField","description":"The measure type field with categorical type columns."},"dateMeasureField":{"$ref":"#/types/aws-native:quicksight:TemplateDateMeasureField","description":"The measure type field with date type columns."},"numericalMeasureField":{"$ref":"#/types/aws-native:quicksight:TemplateNumericalMeasureField","description":"The measure type field with numerical type columns."}},"type":"object"},"aws-native:quicksight:TemplateMetricComparisonComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"fromValue":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The field that is used in a metric comparison from value setup."},"name":{"type":"string","description":"The name of a computation."},"targetValue":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The field that is used in a metric comparison to value setup."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplateMinimumLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the minimum label."}},"type":"object"},"aws-native:quicksight:TemplateMissingDataConfiguration":{"properties":{"treatmentOption":{"$ref":"#/types/aws-native:quicksight:TemplateMissingDataTreatmentOption","description":"The treatment option that determines how missing data should be rendered. Choose from the following options:\n\n- `INTERPOLATE` : Interpolate missing values between the prior and the next known value.\n- `SHOW_AS_ZERO` : Show missing values as the value `0` .\n- `SHOW_AS_BLANK` : Display a blank space when rendering missing data."}},"type":"object"},"aws-native:quicksight:TemplateMissingDataTreatmentOption":{"type":"string","enum":[{"name":"Interpolate","value":"INTERPOLATE"},{"name":"ShowAsZero","value":"SHOW_AS_ZERO"},{"name":"ShowAsBlank","value":"SHOW_AS_BLANK"}]},"aws-native:quicksight:TemplateNegativeValueConfiguration":{"properties":{"displayMode":{"$ref":"#/types/aws-native:quicksight:TemplateNegativeValueDisplayMode","description":"Determines the display mode of the negative value configuration."}},"type":"object","required":["displayMode"]},"aws-native:quicksight:TemplateNegativeValueDisplayMode":{"type":"string","enum":[{"name":"Positive","value":"POSITIVE"},{"name":"Negative","value":"NEGATIVE"}]},"aws-native:quicksight:TemplateNestedFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeInnerSet":{"type":"boolean","description":"A boolean condition to include or exclude the subset that is defined by the values of the nested inner filter."},"innerFilter":{"$ref":"#/types/aws-native:quicksight:TemplateInnerFilter","description":"The `InnerFilter` defines the subset of data to be used with the `NestedFilter` ."}},"type":"object","required":["column","filterId","includeInnerSet","innerFilter"]},"aws-native:quicksight:TemplateNullValueFormatConfiguration":{"properties":{"nullString":{"type":"string","description":"Determines the null string of null values."}},"type":"object","required":["nullString"]},"aws-native:quicksight:TemplateNumberDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numberScale":{"$ref":"#/types/aws-native:quicksight:TemplateNumberScale","description":"Determines the number scale value of the number format."},"prefix":{"type":"string","description":"Determines the prefix value of the number format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the number format."}},"type":"object"},"aws-native:quicksight:TemplateNumberFormatConfiguration":{"properties":{"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericFormatConfiguration","description":"The options that determine the numeric format configuration."}},"type":"object"},"aws-native:quicksight:TemplateNumberScale":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Auto","value":"AUTO"},{"name":"Thousands","value":"THOUSANDS"},{"name":"Millions","value":"MILLIONS"},{"name":"Billions","value":"BILLIONS"},{"name":"Trillions","value":"TRILLIONS"},{"name":"Lakhs","value":"LAKHS"},{"name":"Crores","value":"CRORES"}]},"aws-native:quicksight:TemplateNumericAxisOptions":{"properties":{"range":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayRange","description":"The range setup of a numeric axis."},"scale":{"$ref":"#/types/aws-native:quicksight:TemplateAxisScale","description":"The scale setup of a numeric axis."}},"type":"object"},"aws-native:quicksight:TemplateNumericEqualityDrillDownFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"value":{"type":"number","description":"The value of the double input numeric drill down filter."}},"type":"object","required":["column","value"]},"aws-native:quicksight:TemplateNumericEqualityFilter":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationFunction","description":"The aggregation function of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"matchOperator":{"$ref":"#/types/aws-native:quicksight:TemplateNumericEqualityMatchOperator","description":"The match operator that is used to determine if a filter should be applied."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateNumericFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"},"value":{"type":"number","description":"The input value."}},"type":"object","required":["column","filterId","matchOperator","nullOption"]},"aws-native:quicksight:TemplateNumericEqualityMatchOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"DoesNotEqual","value":"DOES_NOT_EQUAL"}]},"aws-native:quicksight:TemplateNumericFilterSelectAllOptions":{"type":"string","enum":[{"name":"FilterAllValues","value":"FILTER_ALL_VALUES"}]},"aws-native:quicksight:TemplateNumericFormatConfiguration":{"properties":{"currencyDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCurrencyDisplayFormatConfiguration","description":"The options that determine the currency display format configuration."},"numberDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumberDisplayFormatConfiguration","description":"The options that determine the number display format configuration."},"percentageDisplayFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePercentageDisplayFormatConfiguration","description":"The options that determine the percentage display format configuration."}},"type":"object"},"aws-native:quicksight:TemplateNumericRangeFilter":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationFunction","description":"The aggregation function of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeMaximum":{"type":"boolean","description":"Determines whether the maximum value in the filter value range should be included in the filtered results."},"includeMinimum":{"type":"boolean","description":"Determines whether the minimum value in the filter value range should be included in the filtered results."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"rangeMaximum":{"$ref":"#/types/aws-native:quicksight:TemplateNumericRangeFilterValue","description":"The maximum value for the filter value range."},"rangeMinimum":{"$ref":"#/types/aws-native:quicksight:TemplateNumericRangeFilterValue","description":"The minimum value for the filter value range."},"selectAllOptions":{"$ref":"#/types/aws-native:quicksight:TemplateNumericFilterSelectAllOptions","description":"Select all of the values. Null is not the assigned value of select all.\n\n- `FILTER_ALL_VALUES`"}},"type":"object","required":["column","filterId","nullOption"]},"aws-native:quicksight:TemplateNumericRangeFilterValue":{"properties":{"parameter":{"type":"string","description":"The parameter that is used in the numeric range."},"staticValue":{"type":"number","description":"The static value of the numeric range filter."}},"type":"object"},"aws-native:quicksight:TemplateNumericSeparatorConfiguration":{"properties":{"decimalSeparator":{"$ref":"#/types/aws-native:quicksight:TemplateNumericSeparatorSymbol","description":"Determines the decimal separator."},"thousandsSeparator":{"$ref":"#/types/aws-native:quicksight:TemplateThousandSeparatorOptions","description":"The options that determine the thousands separator configuration."}},"type":"object"},"aws-native:quicksight:TemplateNumericSeparatorSymbol":{"type":"string","enum":[{"name":"Comma","value":"COMMA"},{"name":"Dot","value":"DOT"},{"name":"Space","value":"SPACE"}]},"aws-native:quicksight:TemplateNumericalAggregationFunction":{"properties":{"percentileAggregation":{"$ref":"#/types/aws-native:quicksight:TemplatePercentileAggregation","description":"An aggregation based on the percentile of values in a dimension or measure."},"simpleNumericalAggregation":{"$ref":"#/types/aws-native:quicksight:TemplateSimpleNumericalAggregationFunction","description":"Built-in aggregation functions for numerical values.\n\n- `SUM` : The sum of a dimension or measure.\n- `AVERAGE` : The average of a dimension or measure.\n- `MIN` : The minimum value of a dimension or measure.\n- `MAX` : The maximum value of a dimension or measure.\n- `COUNT` : The count of a dimension or measure.\n- `DISTINCT_COUNT` : The count of distinct values in a dimension or measure.\n- `VAR` : The variance of a dimension or measure.\n- `VARP` : The partitioned variance of a dimension or measure.\n- `STDEV` : The standard deviation of a dimension or measure.\n- `STDEVP` : The partitioned standard deviation of a dimension or measure.\n- `MEDIAN` : The median value of a dimension or measure."}},"type":"object"},"aws-native:quicksight:TemplateNumericalDimensionField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `NumericalDimensionField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumberFormatConfiguration","description":"The format configuration of the field."},"hierarchyId":{"type":"string","description":"The custom hierarchy ID."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateNumericalMeasureField":{"properties":{"aggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateNumericalAggregationFunction","description":"The aggregation function of the measure field."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `NumericalMeasureField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumberFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateOtherCategories":{"type":"string","enum":[{"name":"Include","value":"INCLUDE"},{"name":"Exclude","value":"EXCLUDE"}]},"aws-native:quicksight:TemplatePaginationConfiguration":{"properties":{"pageNumber":{"type":"number","description":"Indicates the page number."},"pageSize":{"type":"number","description":"Indicates how many items render in one page."}},"type":"object","required":["pageNumber","pageSize"]},"aws-native:quicksight:TemplatePanelBorderStyle":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dashed","value":"DASHED"},{"name":"Dotted","value":"DOTTED"}]},"aws-native:quicksight:TemplatePanelConfiguration":{"properties":{"backgroundColor":{"type":"string","description":"Sets the background color for each panel."},"backgroundVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not a background for each small multiples panel is rendered."},"borderColor":{"type":"string","description":"Sets the line color of panel borders."},"borderStyle":{"$ref":"#/types/aws-native:quicksight:TemplatePanelBorderStyle","description":"Sets the line style of panel borders."},"borderThickness":{"type":"string","description":"String based length that is composed of value and unit in px"},"borderVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not each panel displays a border."},"gutterSpacing":{"type":"string","description":"String based length that is composed of value and unit in px"},"gutterVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not negative space between sibling panels is rendered."},"title":{"$ref":"#/types/aws-native:quicksight:TemplatePanelTitleOptions","description":"Configures the title display within each small multiples panel."}},"type":"object"},"aws-native:quicksight:TemplatePanelTitleOptions":{"properties":{"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration"},"horizontalTextAlignment":{"$ref":"#/types/aws-native:quicksight:TemplateHorizontalTextAlignment","description":"Sets the horizontal text alignment of the title within each panel."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not panel titles are displayed."}},"type":"object"},"aws-native:quicksight:TemplatePaperOrientation":{"type":"string","enum":[{"name":"Portrait","value":"PORTRAIT"},{"name":"Landscape","value":"LANDSCAPE"}]},"aws-native:quicksight:TemplatePaperSize":{"type":"string","enum":[{"name":"UsLetter","value":"US_LETTER"},{"name":"UsLegal","value":"US_LEGAL"},{"name":"UsTabloidLedger","value":"US_TABLOID_LEDGER"},{"name":"A0","value":"A0"},{"name":"A1","value":"A1"},{"name":"A2","value":"A2"},{"name":"A3","value":"A3"},{"name":"A4","value":"A4"},{"name":"A5","value":"A5"},{"name":"JisB4","value":"JIS_B4"},{"name":"JisB5","value":"JIS_B5"}]},"aws-native:quicksight:TemplateParameterControl":{"properties":{"dateTimePicker":{"$ref":"#/types/aws-native:quicksight:TemplateParameterDateTimePickerControl","description":"A control from a date parameter that specifies date and time."},"dropdown":{"$ref":"#/types/aws-native:quicksight:TemplateParameterDropDownControl","description":"A control to display a dropdown list with buttons that are used to select a single value."},"list":{"$ref":"#/types/aws-native:quicksight:TemplateParameterListControl","description":"A control to display a list with buttons or boxes that are used to select either a single value or multiple values."},"slider":{"$ref":"#/types/aws-native:quicksight:TemplateParameterSliderControl","description":"A control to display a horizontal toggle bar. This is used to change a value by sliding the toggle."},"textArea":{"$ref":"#/types/aws-native:quicksight:TemplateParameterTextAreaControl","description":"A control to display a text box that is used to enter multiple entries."},"textField":{"$ref":"#/types/aws-native:quicksight:TemplateParameterTextFieldControl","description":"A control to display a text box that is used to enter a single entry."}},"type":"object"},"aws-native:quicksight:TemplateParameterDateTimePickerControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimePickerControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterDateTimePickerControl` ."},"sourceParameterName":{"type":"string","description":"The name of the `ParameterDateTimePickerControl` ."},"title":{"type":"string","description":"The title of the `ParameterDateTimePickerControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:TemplateParameterDeclaration":{"properties":{"dateTimeParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:TemplateDateTimeParameterDeclaration","description":"A parameter declaration for the `DateTime` data type."},"decimalParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:TemplateDecimalParameterDeclaration","description":"A parameter declaration for the `Decimal` data type."},"integerParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:TemplateIntegerParameterDeclaration","description":"A parameter declaration for the `Integer` data type."},"stringParameterDeclaration":{"$ref":"#/types/aws-native:quicksight:TemplateStringParameterDeclaration","description":"A parameter declaration for the `String` data type."}},"type":"object"},"aws-native:quicksight:TemplateParameterDropDownControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"commitMode":{"$ref":"#/types/aws-native:quicksight:TemplateCommitMode","description":"The visibility configuration of the Apply button on a `ParameterDropDownControl` ."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDropDownControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterDropDownControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:TemplateParameterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterDropDownControl` ."},"title":{"type":"string","description":"The title of the `ParameterDropDownControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlListType","description":"The type parameter name of the `ParameterDropDownControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:TemplateParameterListControl":{"properties":{"cascadingControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateCascadingControlConfiguration","description":"The values that are displayed in a control can be configured to only show values that are valid based on what's selected in other controls."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateListControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterListControl` ."},"selectableValues":{"$ref":"#/types/aws-native:quicksight:TemplateParameterSelectableValues","description":"A list of selectable values that are used in a control."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterListControl` ."},"title":{"type":"string","description":"The title of the `ParameterListControl` ."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlListType","description":"The type of `ParameterListControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:TemplateParameterSelectableValues":{"properties":{"linkToDataSetColumn":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column identifier that fetches values from the data set."},"values":{"type":"array","items":{"type":"string"},"description":"The values that are used in `ParameterSelectableValues` ."}},"type":"object"},"aws-native:quicksight:TemplateParameterSliderControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSliderControlDisplayOptions","description":"The display options of a control."},"maximumValue":{"type":"number","description":"The larger value that is displayed at the right of the slider."},"minimumValue":{"type":"number","description":"The smaller value that is displayed at the left of the slider."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterSliderControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterSliderControl` ."},"stepSize":{"type":"number","description":"The number of increments that the slider bar is divided into."},"title":{"type":"string","description":"The title of the `ParameterSliderControl` ."}},"type":"object","required":["maximumValue","minimumValue","parameterControlId","sourceParameterName","stepSize","title"]},"aws-native:quicksight:TemplateParameterTextAreaControl":{"properties":{"delimiter":{"type":"string","description":"The delimiter that is used to separate the lines in text."},"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextAreaControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterTextAreaControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterTextAreaControl` ."},"title":{"type":"string","description":"The title of the `ParameterTextAreaControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:TemplateParameterTextFieldControl":{"properties":{"displayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextFieldControlDisplayOptions","description":"The display options of a control."},"parameterControlId":{"type":"string","description":"The ID of the `ParameterTextFieldControl` ."},"sourceParameterName":{"type":"string","description":"The source parameter name of the `ParameterTextFieldControl` ."},"title":{"type":"string","description":"The title of the `ParameterTextFieldControl` ."}},"type":"object","required":["parameterControlId","sourceParameterName","title"]},"aws-native:quicksight:TemplateParameterValueType":{"type":"string","enum":[{"name":"MultiValued","value":"MULTI_VALUED"},{"name":"SingleValued","value":"SINGLE_VALUED"}]},"aws-native:quicksight:TemplatePercentVisibleRange":{"properties":{"from":{"type":"number","description":"The lower bound of the range."},"to":{"type":"number","description":"The top bound of the range."}},"type":"object"},"aws-native:quicksight:TemplatePercentageDisplayFormatConfiguration":{"properties":{"decimalPlacesConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDecimalPlacesConfiguration","description":"The option that determines the decimal places configuration."},"negativeValueConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNegativeValueConfiguration","description":"The options that determine the negative value configuration."},"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"prefix":{"type":"string","description":"Determines the prefix value of the percentage format."},"separatorConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericSeparatorConfiguration","description":"The options that determine the numeric separator configuration."},"suffix":{"type":"string","description":"Determines the suffix value of the percentage format."}},"type":"object"},"aws-native:quicksight:TemplatePercentileAggregation":{"properties":{"percentileValue":{"type":"number","description":"The percentile value. This value can be any numeric constant 0–100. A percentile value of 50 computes the median value of the measure."}},"type":"object"},"aws-native:quicksight:TemplatePeriodOverPeriodComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplatePeriodToDateComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"periodTimeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The time granularity setup of period to date computation. Choose from the following options:\n\n- YEAR: Year to date.\n- MONTH: Month to date."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplatePieChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category (group/color) field wells of a pie chart."},"smallMultiples":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The small multiples field well of a pie chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a pie chart. Values are aggregated based on categories."}},"type":"object"},"aws-native:quicksight:TemplatePieChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options of the group/color that is displayed in a pie chart."},"contributionAnalysisDefaults":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateContributionAnalysisDefault"},"description":"The contribution analysis (anomaly configuration) setup of the visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"donutOptions":{"$ref":"#/types/aws-native:quicksight:TemplateDonutOptions","description":"The options that determine the shape of the chart. This option determines whether the chart is a pie chart or a donut chart."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplatePieChartFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"smallMultiplesOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesOptions","description":"The small multiples setup for the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePieChartSortConfiguration","description":"The sort configuration of a pie chart."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."},"valueLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options for the value that is displayed in a pie chart."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplatePieChartFieldWells":{"properties":{"pieChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplatePieChartAggregatedFieldWells","description":"The field well configuration of a pie chart."}},"type":"object"},"aws-native:quicksight:TemplatePieChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of categories that are displayed in a pie chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the category fields."},"smallMultiplesLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of small multiples panels that are displayed."},"smallMultiplesSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the small multiples field."}},"type":"object"},"aws-native:quicksight:TemplatePieChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePieChartConfiguration","description":"The configuration of a pie chart."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplatePivotFieldSortOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID for the field sort options."},"sortBy":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableSortBy","description":"The sort by field for the field sort options."}},"type":"object","required":["fieldId","sortBy"]},"aws-native:quicksight:TemplatePivotTableAggregatedFieldWells":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The columns field well for a pivot table. Values are grouped by columns fields."},"rows":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The rows field well for a pivot table. Values are grouped by rows fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The values field well for a pivot table. Values are aggregated based on rows and columns fields."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableCellConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the cell for conditional formatting."},"scope":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableConditionalFormattingScope","description":"The scope of the cell for conditional formatting."},"scopes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableConditionalFormattingScope"},"description":"A list of cell scopes for conditional formatting."},"textFormat":{"$ref":"#/types/aws-native:quicksight:TemplateTextConditionalFormat","description":"The text format of the cell for conditional formatting."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplatePivotTableConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableConditionalFormattingOption"},"description":"Conditional formatting options for a `PivotTableVisual` ."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableConditionalFormattingOption":{"properties":{"cell":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableCellConditionalFormatting","description":"The cell conditional formatting option for a pivot table."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableConditionalFormattingScope":{"properties":{"role":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableConditionalFormattingScopeRole","description":"The role (field, field total, grand total) of the cell for conditional formatting."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableConditionalFormattingScopeRole":{"type":"string","enum":[{"name":"Field","value":"FIELD"},{"name":"FieldTotal","value":"FIELD_TOTAL"},{"name":"GrandTotal","value":"GRAND_TOTAL"}]},"aws-native:quicksight:TemplatePivotTableConfiguration":{"properties":{"fieldOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldOptions","description":"The field options for a pivot table visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"paginatedReportOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTablePaginatedReportOptions","description":"The paginated report options for a pivot table visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableSortConfiguration","description":"The sort configuration for a `PivotTableVisual` ."},"tableOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableOptions","description":"The table options for a pivot table visual."},"totalOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableTotalOptions","description":"The total options for a pivot table visual."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableDataPathOption":{"properties":{"dataPathList":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathValue"},"description":"The list of data path values for the data path options."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["dataPathList"]},"aws-native:quicksight:TemplatePivotTableDataPathType":{"type":"string","enum":[{"name":"HierarchyRowsLayoutColumn","value":"HIERARCHY_ROWS_LAYOUT_COLUMN"},{"name":"MultipleRowMetricsColumn","value":"MULTIPLE_ROW_METRICS_COLUMN"},{"name":"EmptyColumnHeader","value":"EMPTY_COLUMN_HEADER"},{"name":"CountMetricColumn","value":"COUNT_METRIC_COLUMN"}]},"aws-native:quicksight:TemplatePivotTableFieldCollapseState":{"type":"string","enum":[{"name":"Collapsed","value":"COLLAPSED"},{"name":"Expanded","value":"EXPANDED"}]},"aws-native:quicksight:TemplatePivotTableFieldCollapseStateOption":{"properties":{"state":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldCollapseState","description":"The state of the field target of a pivot table. Choose one of the following options:\n\n- `COLLAPSED`\n- `EXPANDED`"},"target":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldCollapseStateTarget","description":"A tagged-union object that sets the collapse state."}},"type":"object","required":["target"]},"aws-native:quicksight:TemplatePivotTableFieldCollapseStateTarget":{"properties":{"fieldDataPathValues":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathValue"},"description":"The data path of the pivot table's header. Used to set the collapse state."},"fieldId":{"type":"string","description":"The field ID of the pivot table that the collapse state needs to be set to."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableFieldOption":{"properties":{"customLabel":{"type":"string","description":"The custom label of the pivot table field."},"fieldId":{"type":"string","description":"The field ID of the pivot table field."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the pivot table field."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplatePivotTableFieldOptions":{"properties":{"collapseStateOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldCollapseStateOption"},"description":"The collapse state options for the pivot table field options."},"dataPathOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableDataPathOption"},"description":"The data path options for the pivot table field options."},"selectedFieldOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldOption"},"description":"The selected field options for the pivot table field options."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableFieldSubtotalOptions":{"properties":{"fieldId":{"type":"string","description":"The field ID of the subtotal options."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableFieldWells":{"properties":{"pivotTableAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableAggregatedFieldWells","description":"The aggregated field well for the pivot table."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableMetricPlacement":{"type":"string","enum":[{"name":"Row","value":"ROW"},{"name":"Column","value":"COLUMN"}]},"aws-native:quicksight:TemplatePivotTableOptions":{"properties":{"cellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The table cell style of cells."},"collapsedRowDimensionsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility setting of a pivot table's collapsed row dimension fields. If the value of this structure is `HIDDEN` , all collapsed columns in a pivot table are automatically hidden. The default value is `VISIBLE` ."},"columnHeaderStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The table cell style of the column header."},"columnNamesVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the column names."},"defaultCellWidth":{"type":"string","description":"String based length that is composed of value and unit in px"},"metricPlacement":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableMetricPlacement","description":"The metric placement (row, column) options."},"rowAlternateColorOptions":{"$ref":"#/types/aws-native:quicksight:TemplateRowAlternateColorOptions","description":"The row alternate color options (widget status, row alternate colors)."},"rowFieldNamesStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The table cell style of row field names."},"rowHeaderStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The table cell style of the row headers."},"rowsLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableRowsLabelOptions","description":"The options for the label that is located above the row headers. This option is only applicable when `RowsLayout` is set to `HIERARCHY` ."},"rowsLayout":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableRowsLayout","description":"The layout for the row dimension headers of a pivot table. Choose one of the following options.\n\n- `TABULAR` : (Default) Each row field is displayed in a separate column.\n- `HIERARCHY` : All row fields are displayed in a single column. Indentation is used to differentiate row headers of different fields."},"singleMetricVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the single metric options."},"toggleButtonsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the pivot table."}},"type":"object"},"aws-native:quicksight:TemplatePivotTablePaginatedReportOptions":{"properties":{"overflowColumnHeaderVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the repeating header rows on each page."},"verticalOverflowVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the printing table overflow across pages."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableRowsLabelOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the rows label."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the rows label."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableRowsLayout":{"type":"string","enum":[{"name":"Tabular","value":"TABULAR"},{"name":"Hierarchy","value":"HIERARCHY"}]},"aws-native:quicksight:TemplatePivotTableSortBy":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnSort","description":"The column sort (field id, direction) for the pivot table sort by options."},"dataPath":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathSort","description":"The data path sort (data path value, direction) for the pivot table sort by options."},"field":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSort","description":"The field sort (field id, direction) for the pivot table sort by options."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableSortConfiguration":{"properties":{"fieldSortOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotFieldSortOptions"},"description":"The field sort options for a pivot table sort configuration."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableSubtotalLevel":{"type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Custom","value":"CUSTOM"},{"name":"Last","value":"LAST"}]},"aws-native:quicksight:TemplatePivotTableTotalOptions":{"properties":{"columnSubtotalOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSubtotalOptions","description":"The column subtotal options."},"columnTotalOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTotalOptions","description":"The column total options."},"rowSubtotalOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSubtotalOptions","description":"The row subtotal options."},"rowTotalOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTotalOptions","description":"The row total options."}},"type":"object"},"aws-native:quicksight:TemplatePivotTableVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableConfiguration","description":"The configuration settings of the visual."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableConditionalFormatting","description":"The conditional formatting for a `PivotTableVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplatePivotTotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the total cells."},"metricHeaderCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The cell styling options for the total of header cells."},"placement":{"$ref":"#/types/aws-native:quicksight:TemplateTableTotalsPlacement","description":"The placement (start, end) for the total cells."},"scrollStatus":{"$ref":"#/types/aws-native:quicksight:TemplateTableTotalsScrollStatus","description":"The scroll status (pinned, scrolled) for the total cells."},"totalAggregationOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTotalAggregationOption"},"description":"The total aggregation options for each value field."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The cell styling options for the total cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration for the total cells."},"valueCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The cell styling options for the totals of value cells."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisual":{"properties":{"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualConfiguration","description":"A description of the plugin field wells and their persisted properties."},"pluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) that reflects the plugin and version."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions"},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions"},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The ID of the visual that you want to use."}},"type":"object","required":["pluginArn","visualId"]},"aws-native:quicksight:TemplatePluginVisualAxisName":{"type":"string","enum":[{"name":"GroupBy","value":"GROUP_BY"},{"name":"Value","value":"VALUE"}]},"aws-native:quicksight:TemplatePluginVisualConfiguration":{"properties":{"fieldWells":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualFieldWell"},"description":"The field wells configuration of the plugin visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualSortConfiguration","description":"The sort configuration of the plugin visual."},"visualOptions":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualOptions","description":"The persisted properties of the plugin visual."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisualFieldWell":{"properties":{"axisName":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualAxisName","description":"The semantic axis name for the field well."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"A list of dimensions for the field well."},"measures":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"A list of measures that exist in the field well."},"unaggregated":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateUnaggregatedField"},"description":"A list of unaggregated fields that exist in the field well."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisualItemsLimitConfiguration":{"properties":{"itemsLimit":{"type":"number","description":"Determines how many values are be fetched at once."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisualOptions":{"properties":{"visualProperties":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualProperty"},"description":"The persisted properties and their values."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisualProperty":{"properties":{"name":{"type":"string","description":"The name of the plugin visual property."},"value":{"type":"string","description":"The value of the plugin visual property."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisualSortConfiguration":{"properties":{"pluginVisualTableQuerySort":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualTableQuerySort","description":"The table query sorting options for the plugin visual."}},"type":"object"},"aws-native:quicksight:TemplatePluginVisualTableQuerySort":{"properties":{"itemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisualItemsLimitConfiguration","description":"The maximum amount of data to be returned by a query."},"rowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"Determines how data is sorted in the response."}},"type":"object"},"aws-native:quicksight:TemplatePredefinedHierarchy":{"properties":{"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier"},"description":"The list of columns that define the predefined hierarchy."},"drillDownFilters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDrillDownFilter"},"description":"The option that determines the drill down filters for the predefined hierarchy."},"hierarchyId":{"type":"string","description":"The hierarchy ID of the predefined hierarchy."}},"type":"object","required":["columns","hierarchyId"]},"aws-native:quicksight:TemplatePrimaryValueDisplayType":{"type":"string","enum":[{"name":"Hidden","value":"HIDDEN"},{"name":"Comparison","value":"COMPARISON"},{"name":"Actual","value":"ACTUAL"}]},"aws-native:quicksight:TemplateProgressBarOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the progress bar."}},"type":"object"},"aws-native:quicksight:TemplateQueryExecutionMode":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:quicksight:TemplateQueryExecutionOptions":{"properties":{"queryExecutionMode":{"$ref":"#/types/aws-native:quicksight:TemplateQueryExecutionMode","description":"A structure that describes the query execution mode."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The aggregated field well categories of a radar chart."},"color":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The color that are assigned to the aggregated field wells of a radar chart."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The values that are assigned to the aggregated field wells of a radar chart."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartAreaStyleSettings":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility settings of a radar chart."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartAxesRangeScale":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Independent","value":"INDEPENDENT"},{"name":"Shared","value":"SHARED"}]},"aws-native:quicksight:TemplateRadarChartConfiguration":{"properties":{"alternateBandColorsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the colors of alternatign bands in a radar chart."},"alternateBandEvenColor":{"type":"string","description":"The color of the even-numbered alternate bands of a radar chart."},"alternateBandOddColor":{"type":"string","description":"The color of the odd-numbered alternate bands of a radar chart."},"axesRangeScale":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartAxesRangeScale","description":"The axis behavior options of a radar chart."},"baseSeriesSettings":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartSeriesSettings","description":"The base sreies settings of a radar chart."},"categoryAxis":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The category axis of a radar chart."},"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The category label options of a radar chart."},"colorAxis":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The color axis of a radar chart."},"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The color label options of a radar chart."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartFieldWells","description":"The field well configuration of a `RadarChartVisual` ."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"shape":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartShape","description":"The shape of the radar chart."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartSortConfiguration","description":"The sort configuration of a `RadarChartVisual` ."},"startAngle":{"type":"number","description":"The start angle of a radar chart's axis."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The palette (chart color) display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartFieldWells":{"properties":{"radarChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartAggregatedFieldWells","description":"The aggregated field wells of a radar chart visual."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartSeriesSettings":{"properties":{"areaStyleSettings":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartAreaStyleSettings","description":"The area style settings of a radar chart."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartShape":{"type":"string","enum":[{"name":"Circle","value":"CIRCLE"},{"name":"Polygon","value":"POLYGON"}]},"aws-native:quicksight:TemplateRadarChartSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The category items limit for a radar chart."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The category sort options of a radar chart."},"colorItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The color items limit of a radar chart."},"colorSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The color sort configuration of a radar chart."}},"type":"object"},"aws-native:quicksight:TemplateRadarChartVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateRangeEndsLabelType":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the range ends label."}},"type":"object"},"aws-native:quicksight:TemplateReferenceLine":{"properties":{"dataConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineDataConfiguration","description":"The data configuration of the reference line."},"labelConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineLabelConfiguration","description":"The label configuration of the reference line."},"status":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"The status of the reference line. Choose one of the following options:\n\n- `ENABLE`\n- `DISABLE`"},"styleConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineStyleConfiguration","description":"The style configuration of the reference line."}},"type":"object","required":["dataConfiguration"]},"aws-native:quicksight:TemplateReferenceLineCustomLabelConfiguration":{"properties":{"customLabel":{"type":"string","description":"The string text of the custom label."}},"type":"object","required":["customLabel"]},"aws-native:quicksight:TemplateReferenceLineDataConfiguration":{"properties":{"axisBinding":{"$ref":"#/types/aws-native:quicksight:TemplateAxisBinding","description":"The axis binding type of the reference line. Choose one of the following options:\n\n- `PrimaryY`\n- `SecondaryY`"},"dynamicConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineDynamicDataConfiguration","description":"The dynamic configuration of the reference line data configuration."},"seriesType":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineSeriesType","description":"The series type of the reference line data configuration. Choose one of the following options:\n\n- `BAR`\n- `LINE`"},"staticConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineStaticDataConfiguration","description":"The static data configuration of the reference line data configuration."}},"type":"object"},"aws-native:quicksight:TemplateReferenceLineDynamicDataConfiguration":{"properties":{"calculation":{"$ref":"#/types/aws-native:quicksight:TemplateNumericalAggregationFunction","description":"The calculation that is used in the dynamic data."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the dynamic data targets."},"measureAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationFunction","description":"The aggregation function that is used in the dynamic data."}},"type":"object","required":["calculation","column"]},"aws-native:quicksight:TemplateReferenceLineLabelConfiguration":{"properties":{"customLabelConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineCustomLabelConfiguration","description":"The custom label configuration of the label in a reference line."},"fontColor":{"type":"string","description":"The font color configuration of the label in a reference line."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The font configuration of the label in a reference line."},"horizontalPosition":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineLabelHorizontalPosition","description":"The horizontal position configuration of the label in a reference line. Choose one of the following options:\n\n- `LEFT`\n- `CENTER`\n- `RIGHT`"},"valueLabelConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineValueLabelConfiguration","description":"The value label configuration of the label in a reference line."},"verticalPosition":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineLabelVerticalPosition","description":"The vertical position configuration of the label in a reference line. Choose one of the following options:\n\n- `ABOVE`\n- `BELOW`"}},"type":"object"},"aws-native:quicksight:TemplateReferenceLineLabelHorizontalPosition":{"type":"string","enum":[{"name":"Left","value":"LEFT"},{"name":"Center","value":"CENTER"},{"name":"Right","value":"RIGHT"}]},"aws-native:quicksight:TemplateReferenceLineLabelVerticalPosition":{"type":"string","enum":[{"name":"Above","value":"ABOVE"},{"name":"Below","value":"BELOW"}]},"aws-native:quicksight:TemplateReferenceLinePatternType":{"type":"string","enum":[{"name":"Solid","value":"SOLID"},{"name":"Dashed","value":"DASHED"},{"name":"Dotted","value":"DOTTED"}]},"aws-native:quicksight:TemplateReferenceLineSeriesType":{"type":"string","enum":[{"name":"Bar","value":"BAR"},{"name":"Line","value":"LINE"}]},"aws-native:quicksight:TemplateReferenceLineStaticDataConfiguration":{"properties":{"value":{"type":"number","description":"The double input of the static data."}},"type":"object","required":["value"]},"aws-native:quicksight:TemplateReferenceLineStyleConfiguration":{"properties":{"color":{"type":"string","description":"The hex color of the reference line."},"pattern":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLinePatternType","description":"The pattern type of the line style. Choose one of the following options:\n\n- `SOLID`\n- `DASHED`\n- `DOTTED`"}},"type":"object"},"aws-native:quicksight:TemplateReferenceLineValueLabelConfiguration":{"properties":{"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericFormatConfiguration","description":"The format configuration of the value label."},"relativePosition":{"$ref":"#/types/aws-native:quicksight:TemplateReferenceLineValueLabelRelativePosition","description":"The relative position of the value label. Choose one of the following options:\n\n- `BEFORE_CUSTOM_LABEL`\n- `AFTER_CUSTOM_LABEL`"}},"type":"object"},"aws-native:quicksight:TemplateReferenceLineValueLabelRelativePosition":{"type":"string","enum":[{"name":"BeforeCustomLabel","value":"BEFORE_CUSTOM_LABEL"},{"name":"AfterCustomLabel","value":"AFTER_CUSTOM_LABEL"}]},"aws-native:quicksight:TemplateRelativeDateTimeControlDisplayOptions":{"properties":{"dateTimeFormat":{"type":"string","description":"Customize how dates are formatted in controls."},"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateRelativeDateType":{"type":"string","enum":[{"name":"Previous","value":"PREVIOUS"},{"name":"This","value":"THIS"},{"name":"Last","value":"LAST"},{"name":"Now","value":"NOW"},{"name":"Next","value":"NEXT"}]},"aws-native:quicksight:TemplateRelativeDatesFilter":{"properties":{"anchorDateConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateAnchorDateConfiguration","description":"The date configuration of the filter."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"excludePeriodConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateExcludePeriodConfiguration","description":"The configuration for the exclude period of the filter."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"minimumGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The minimum granularity (period granularity) of the relative dates filter."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"relativeDateType":{"$ref":"#/types/aws-native:quicksight:TemplateRelativeDateType","description":"The range date type of the filter. Choose one of the options below:\n\n- `PREVIOUS`\n- `THIS`\n- `LAST`\n- `NOW`\n- `NEXT`"},"relativeDateValue":{"type":"number","description":"The date value of the filter."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["anchorDateConfiguration","column","filterId","nullOption","relativeDateType","timeGranularity"]},"aws-native:quicksight:TemplateRelativeFontSize":{"type":"string","enum":[{"name":"ExtraSmall","value":"EXTRA_SMALL"},{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"},{"name":"ExtraLarge","value":"EXTRA_LARGE"}]},"aws-native:quicksight:TemplateResizeOption":{"type":"string","enum":[{"name":"Fixed","value":"FIXED"},{"name":"Responsive","value":"RESPONSIVE"}]},"aws-native:quicksight:TemplateResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:TemplateResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:quicksight:TemplateRollingDateConfiguration":{"properties":{"dataSetIdentifier":{"type":"string","description":"The data set that is used in the rolling date configuration."},"expression":{"type":"string","description":"The expression of the rolling date configuration."}},"type":"object","required":["expression"]},"aws-native:quicksight:TemplateRowAlternateColorOptions":{"properties":{"rowAlternateColors":{"type":"array","items":{"type":"string"},"description":"Determines the list of row alternate colors."},"status":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"Determines the widget status."},"usePrimaryBackgroundColor":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"The primary background color options for alternate rows."}},"type":"object"},"aws-native:quicksight:TemplateSameSheetTargetVisualConfiguration":{"properties":{"targetVisualOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTargetVisualOptions","description":"The options that choose the target visual in the same sheet.\n\nValid values are defined as follows:\n\n- `ALL_VISUALS` : Applies the filter operation to all visuals in the same sheet."},"targetVisuals":{"type":"array","items":{"type":"string"},"description":"A list of the target visual IDs that are located in the same sheet of the analysis."}},"type":"object"},"aws-native:quicksight:TemplateSankeyDiagramAggregatedFieldWells":{"properties":{"destination":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The destination field wells of a sankey diagram."},"source":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The source field wells of a sankey diagram."},"weight":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The weight field wells of a sankey diagram."}},"type":"object"},"aws-native:quicksight:TemplateSankeyDiagramChartConfiguration":{"properties":{"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The data label configuration of a sankey diagram."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateSankeyDiagramFieldWells","description":"The field well configuration of a sankey diagram."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateSankeyDiagramSortConfiguration","description":"The sort configuration of a sankey diagram."}},"type":"object"},"aws-native:quicksight:TemplateSankeyDiagramFieldWells":{"properties":{"sankeyDiagramAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateSankeyDiagramAggregatedFieldWells","description":"The field well configuration of a sankey diagram."}},"type":"object"},"aws-native:quicksight:TemplateSankeyDiagramSortConfiguration":{"properties":{"destinationItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of destination nodes that are displayed in a sankey diagram."},"sourceItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of source nodes that are displayed in a sankey diagram."},"weightSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the weight fields."}},"type":"object"},"aws-native:quicksight:TemplateSankeyDiagramVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateSankeyDiagramChartConfiguration","description":"The configuration of a sankey diagram."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateScatterPlotCategoricallyAggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category field well of a scatter plot."},"label":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The label field well of a scatter plot."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The size field well of a scatter plot."},"xAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The x-axis field well of a scatter plot.\n\nThe x-axis is aggregated by category."},"yAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The y-axis field well of a scatter plot.\n\nThe y-axis is aggregated by category."}},"type":"object"},"aws-native:quicksight:TemplateScatterPlotConfiguration":{"properties":{"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateScatterPlotFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateScatterPlotSortConfiguration","description":"The sort configuration of a scatter plot."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The legend display setup of the visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The palette (chart color) display setup of the visual."},"xAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of the scatter plot's x-axis."},"xAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of the scatter plot's x-axis."},"yAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The label display options (grid line, range, scale, and axis step) of the scatter plot's y-axis."},"yAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) of the scatter plot's y-axis."}},"type":"object"},"aws-native:quicksight:TemplateScatterPlotFieldWells":{"properties":{"scatterPlotCategoricallyAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateScatterPlotCategoricallyAggregatedFieldWells","description":"The aggregated field wells of a scatter plot. The x and y-axes of scatter plots with aggregated field wells are aggregated by category, label, or both."},"scatterPlotUnaggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateScatterPlotUnaggregatedFieldWells","description":"The unaggregated field wells of a scatter plot. The x and y-axes of these scatter plots are unaggregated."}},"type":"object"},"aws-native:quicksight:TemplateScatterPlotSortConfiguration":{"properties":{"scatterPlotLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration"}},"type":"object"},"aws-native:quicksight:TemplateScatterPlotUnaggregatedFieldWells":{"properties":{"category":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category field well of a scatter plot."},"label":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The label field well of a scatter plot."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The size field well of a scatter plot."},"xAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The x-axis field well of a scatter plot.\n\nThe x-axis is a dimension field and cannot be aggregated."},"yAxis":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The y-axis field well of a scatter plot.\n\nThe y-axis is a dimension field and cannot be aggregated."}},"type":"object"},"aws-native:quicksight:TemplateScatterPlotVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateScatterPlotConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateScrollBarOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the data zoom scroll bar."},"visibleRange":{"$ref":"#/types/aws-native:quicksight:TemplateVisibleRangeOptions","description":"The visibility range for the data zoom scroll bar."}},"type":"object"},"aws-native:quicksight:TemplateSecondaryValueOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the secondary value."}},"type":"object"},"aws-native:quicksight:TemplateSectionAfterPageBreak":{"properties":{"status":{"$ref":"#/types/aws-native:quicksight:TemplateSectionPageBreakStatus","description":"The option that enables or disables a page break at the end of a section."}},"type":"object"},"aws-native:quicksight:TemplateSectionBasedLayoutCanvasSizeOptions":{"properties":{"paperCanvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSectionBasedLayoutPaperCanvasSizeOptions","description":"The options for a paper canvas of a section-based layout."}},"type":"object"},"aws-native:quicksight:TemplateSectionBasedLayoutConfiguration":{"properties":{"bodySections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateBodySectionConfiguration"},"description":"A list of body section configurations."},"canvasSizeOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSectionBasedLayoutCanvasSizeOptions","description":"The options for the canvas of a section-based layout."},"footerSections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateHeaderFooterSectionConfiguration"},"description":"A list of footer section configurations."},"headerSections":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateHeaderFooterSectionConfiguration"},"description":"A list of header section configurations."}},"type":"object","required":["bodySections","canvasSizeOptions","footerSections","headerSections"]},"aws-native:quicksight:TemplateSectionBasedLayoutPaperCanvasSizeOptions":{"properties":{"paperMargin":{"$ref":"#/types/aws-native:quicksight:TemplateSpacing","description":"Defines the spacing between the canvas content and the top, bottom, left, and right edges."},"paperOrientation":{"$ref":"#/types/aws-native:quicksight:TemplatePaperOrientation","description":"The paper orientation that is used to define canvas dimensions. Choose one of the following options:\n\n- PORTRAIT\n- LANDSCAPE"},"paperSize":{"$ref":"#/types/aws-native:quicksight:TemplatePaperSize","description":"The paper size that is used to define canvas dimensions."}},"type":"object"},"aws-native:quicksight:TemplateSectionLayoutConfiguration":{"properties":{"freeFormLayout":{"$ref":"#/types/aws-native:quicksight:TemplateFreeFormSectionLayoutConfiguration","description":"The free-form layout configuration of a section."}},"type":"object","required":["freeFormLayout"]},"aws-native:quicksight:TemplateSectionPageBreakConfiguration":{"properties":{"after":{"$ref":"#/types/aws-native:quicksight:TemplateSectionAfterPageBreak","description":"The configuration of a page break after a section."}},"type":"object"},"aws-native:quicksight:TemplateSectionPageBreakStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:TemplateSectionStyle":{"properties":{"height":{"type":"string","description":"String based length that is composed of value and unit in px"},"padding":{"$ref":"#/types/aws-native:quicksight:TemplateSpacing","description":"The spacing between section content and its top, bottom, left, and right edges.\n\nThere is no padding by default."}},"type":"object"},"aws-native:quicksight:TemplateSelectAllValueOptions":{"type":"string","enum":[{"name":"AllValues","value":"ALL_VALUES"}]},"aws-native:quicksight:TemplateSelectedFieldOptions":{"type":"string","enum":[{"name":"AllFields","value":"ALL_FIELDS"}]},"aws-native:quicksight:TemplateSelectedSheetsFilterScopeConfiguration":{"properties":{"sheetVisualScopingConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheetVisualScopingConfiguration"},"description":"The sheet ID and visual IDs of the sheet and visuals that the filter is applied to."}},"type":"object"},"aws-native:quicksight:TemplateSelectedTooltipType":{"type":"string","enum":[{"name":"Basic","value":"BASIC"},{"name":"Detailed","value":"DETAILED"}]},"aws-native:quicksight:TemplateSeriesItem":{"properties":{"dataFieldSeriesItem":{"$ref":"#/types/aws-native:quicksight:TemplateDataFieldSeriesItem","description":"The data field series item configuration of a line chart."},"fieldSeriesItem":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSeriesItem","description":"The field series item configuration of a line chart."}},"type":"object"},"aws-native:quicksight:TemplateSetParameterValueConfiguration":{"properties":{"destinationParameterName":{"type":"string","description":"The destination parameter name of the `SetParameterValueConfiguration` ."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateDestinationParameterValueConfiguration"}},"type":"object","required":["destinationParameterName","value"]},"aws-native:quicksight:TemplateShapeConditionalFormat":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting for the shape background color of a filled map visual."}},"type":"object","required":["backgroundColor"]},"aws-native:quicksight:TemplateSheet":{"description":"\u003cp\u003eA \u003ci\u003esheet\u003c/i\u003e, which is an object that contains a set of visuals that\n            are viewed together on one page in Amazon QuickSight. Every analysis and dashboard\n            contains at least one sheet. Each sheet contains at least one visualization widget, for\n            example a chart, pivot table, or narrative insight. Sheets can be associated with other\n            components, such as controls, filters, and so on.\u003c/p\u003e","properties":{"name":{"type":"string","description":"\u003cp\u003eThe name of a sheet. This name is displayed on the sheet's tab in the Amazon QuickSight\n            console.\u003c/p\u003e"},"sheetId":{"type":"string","description":"\u003cp\u003eThe unique identifier associated with a sheet.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateSheetContentType":{"type":"string","enum":[{"name":"Paginated","value":"PAGINATED"},{"name":"Interactive","value":"INTERACTIVE"}]},"aws-native:quicksight:TemplateSheetControlDateTimePickerType":{"type":"string","enum":[{"name":"SingleValued","value":"SINGLE_VALUED"},{"name":"DateRange","value":"DATE_RANGE"}]},"aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions":{"properties":{"infoIconText":{"type":"string","description":"The text content of info icon."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration of info icon label options."}},"type":"object"},"aws-native:quicksight:TemplateSheetControlLayout":{"properties":{"configuration":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlLayoutConfiguration","description":"The configuration that determines the elements and canvas size options of sheet control."}},"type":"object","required":["configuration"]},"aws-native:quicksight:TemplateSheetControlLayoutConfiguration":{"properties":{"gridLayout":{"$ref":"#/types/aws-native:quicksight:TemplateGridLayoutConfiguration","description":"The configuration that determines the elements and canvas size options of sheet control."}},"type":"object"},"aws-native:quicksight:TemplateSheetControlListType":{"type":"string","enum":[{"name":"MultiSelect","value":"MULTI_SELECT"},{"name":"SingleSelect","value":"SINGLE_SELECT"}]},"aws-native:quicksight:TemplateSheetControlSliderType":{"type":"string","enum":[{"name":"SinglePoint","value":"SINGLE_POINT"},{"name":"Range","value":"RANGE"}]},"aws-native:quicksight:TemplateSheetDefinition":{"properties":{"contentType":{"$ref":"#/types/aws-native:quicksight:TemplateSheetContentType","description":"The layout content type of the sheet. Choose one of the following options:\n\n- `PAGINATED` : Creates a sheet for a paginated report.\n- `INTERACTIVE` : Creates a sheet for an interactive dashboard."},"description":{"type":"string","description":"A description of the sheet."},"filterControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFilterControl"},"description":"The list of filter controls that are on a sheet.\n\nFor more information, see [Adding filter controls to analysis sheets](https://docs.aws.amazon.com/quicksight/latest/user/filter-controls.html) in the *Amazon Quick Suite User Guide* ."},"images":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImage"},"description":"A list of images on a sheet."},"layouts":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateLayout"},"description":"Layouts define how the components of a sheet are arranged.\n\nFor more information, see [Types of layout](https://docs.aws.amazon.com/quicksight/latest/user/types-of-layout.html) in the *Amazon Quick Suite User Guide* ."},"name":{"type":"string","description":"The name of the sheet. This name is displayed on the sheet's tab in the Quick Suite console."},"parameterControls":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateParameterControl"},"description":"The list of parameter controls that are on a sheet.\n\nFor more information, see [Using a Control with a Parameter in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/parameters-controls.html) in the *Amazon Quick Suite User Guide* ."},"sheetControlLayouts":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlLayout"},"description":"The control layouts of the sheet."},"sheetId":{"type":"string","description":"The unique identifier of a sheet."},"textBoxes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheetTextBox"},"description":"The text boxes that are on a sheet."},"title":{"type":"string","description":"The title of the sheet."},"visuals":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisual"},"description":"A list of the visuals that are on a sheet. Visual placement is determined by the layout of the sheet."}},"type":"object","required":["sheetId"]},"aws-native:quicksight:TemplateSheetElementConfigurationOverrides":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not the overrides are visible. Choose one of the following options:\n\n- `VISIBLE`\n- `HIDDEN`"}},"type":"object"},"aws-native:quicksight:TemplateSheetElementRenderingRule":{"properties":{"configurationOverrides":{"$ref":"#/types/aws-native:quicksight:TemplateSheetElementConfigurationOverrides","description":"The override configuration of the rendering rules of a sheet."},"expression":{"type":"string","description":"The expression of the rendering rules of a sheet."}},"type":"object","required":["configurationOverrides","expression"]},"aws-native:quicksight:TemplateSheetImage":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateImageCustomAction"},"description":"A list of custom actions that are configured for an image."},"imageContentAltText":{"type":"string","description":"The alt text for the image."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateImageInteractionOptions","description":"The general image interactions setup for an image."},"scaling":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImageScalingConfiguration","description":"Determines how the image is scaled."},"sheetImageId":{"type":"string","description":"The ID of the sheet image."},"source":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImageSource","description":"The source of the image."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImageTooltipConfiguration","description":"The tooltip to be shown when hovering over the image."}},"type":"object","required":["sheetImageId","source"]},"aws-native:quicksight:TemplateSheetImageScalingConfiguration":{"properties":{"scalingType":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImageScalingType","description":"The scaling option to use when fitting the image inside the container.\n\nValid values are defined as follows:\n\n- `SCALE_TO_WIDTH` : The image takes up the entire width of the container. The image aspect ratio is preserved.\n- `SCALE_TO_HEIGHT` : The image takes up the entire height of the container. The image aspect ratio is preserved.\n- `SCALE_TO_CONTAINER` : The image takes up the entire width and height of the container. The image aspect ratio is not preserved.\n- `SCALE_NONE` : The image is displayed in its original size and is not scaled to the container."}},"type":"object"},"aws-native:quicksight:TemplateSheetImageScalingType":{"type":"string","enum":[{"name":"ScaleToWidth","value":"SCALE_TO_WIDTH"},{"name":"ScaleToHeight","value":"SCALE_TO_HEIGHT"},{"name":"ScaleToContainer","value":"SCALE_TO_CONTAINER"},{"name":"ScaleNone","value":"SCALE_NONE"}]},"aws-native:quicksight:TemplateSheetImageSource":{"properties":{"sheetImageStaticFileSource":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImageStaticFileSource","description":"The source of the static file that contains the image."}},"type":"object"},"aws-native:quicksight:TemplateSheetImageStaticFileSource":{"properties":{"staticFileId":{"type":"string","description":"The ID of the static file that contains the image."}},"type":"object","required":["staticFileId"]},"aws-native:quicksight:TemplateSheetImageTooltipConfiguration":{"properties":{"tooltipText":{"$ref":"#/types/aws-native:quicksight:TemplateSheetImageTooltipText","description":"The text that appears in the tooltip."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the tooltip."}},"type":"object"},"aws-native:quicksight:TemplateSheetImageTooltipText":{"properties":{"plainText":{"type":"string","description":"The plain text format."}},"type":"object"},"aws-native:quicksight:TemplateSheetTextBox":{"properties":{"content":{"type":"string","description":"The content that is displayed in the text box."},"sheetTextBoxId":{"type":"string","description":"The unique identifier for a text box. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have text boxes that share identifiers."}},"type":"object","required":["sheetTextBoxId"]},"aws-native:quicksight:TemplateSheetVisualScopingConfiguration":{"properties":{"scope":{"$ref":"#/types/aws-native:quicksight:TemplateFilterVisualScope","description":"The scope of the applied entities. Choose one of the following options:\n\n- `ALL_VISUALS`\n- `SELECTED_VISUALS`"},"sheetId":{"type":"string","description":"The selected sheet that the filter is applied to."},"visualIds":{"type":"array","items":{"type":"string"},"description":"The selected visuals that the filter is applied to."}},"type":"object","required":["scope","sheetId"]},"aws-native:quicksight:TemplateShortFormatText":{"properties":{"plainText":{"type":"string","description":"Plain text format."},"richText":{"type":"string","description":"Rich text. Examples of rich text include bold, underline, and italics."}},"type":"object"},"aws-native:quicksight:TemplateSimpleAttributeAggregationFunction":{"type":"string","enum":[{"name":"UniqueValue","value":"UNIQUE_VALUE"}]},"aws-native:quicksight:TemplateSimpleClusterMarker":{"properties":{"color":{"type":"string","description":"The color of the simple cluster marker."}},"type":"object"},"aws-native:quicksight:TemplateSimpleNumericalAggregationFunction":{"type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Median","value":"MEDIAN"}]},"aws-native:quicksight:TemplateSimpleTotalAggregationFunction":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"None","value":"NONE"}]},"aws-native:quicksight:TemplateSingleAxisOptions":{"properties":{"yAxisOptions":{"$ref":"#/types/aws-native:quicksight:TemplateYAxisOptions","description":"The Y axis options of a single axis configuration."}},"type":"object"},"aws-native:quicksight:TemplateSingleYAxisOption":{"type":"string","enum":[{"name":"PrimaryYAxis","value":"PRIMARY_Y_AXIS"}]},"aws-native:quicksight:TemplateSliderControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateSmallMultiplesAxisPlacement":{"type":"string","enum":[{"name":"Outside","value":"OUTSIDE"},{"name":"Inside","value":"INSIDE"}]},"aws-native:quicksight:TemplateSmallMultiplesAxisProperties":{"properties":{"placement":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesAxisPlacement","description":"Defines the placement of the axis. By default, axes are rendered `OUTSIDE` of the panels. Axes with `INDEPENDENT` scale are rendered `INSIDE` the panels."},"scale":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesAxisScale","description":"Determines whether scale of the axes are shared or independent. The default value is `SHARED` ."}},"type":"object"},"aws-native:quicksight:TemplateSmallMultiplesAxisScale":{"type":"string","enum":[{"name":"Shared","value":"SHARED"},{"name":"Independent","value":"INDEPENDENT"}]},"aws-native:quicksight:TemplateSmallMultiplesOptions":{"properties":{"maxVisibleColumns":{"type":"number","description":"Sets the maximum number of visible columns to display in the grid of small multiples panels.\n\nThe default is `Auto` , which automatically adjusts the columns in the grid to fit the overall layout and size of the given chart."},"maxVisibleRows":{"type":"number","description":"Sets the maximum number of visible rows to display in the grid of small multiples panels.\n\nThe default value is `Auto` , which automatically adjusts the rows in the grid to fit the overall layout and size of the given chart."},"panelConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePanelConfiguration","description":"Configures the display options for each small multiples panel."},"xAxis":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesAxisProperties","description":"The properties of a small multiples X axis."},"yAxis":{"$ref":"#/types/aws-native:quicksight:TemplateSmallMultiplesAxisProperties","description":"The properties of a small multiples Y axis."}},"type":"object"},"aws-native:quicksight:TemplateSortDirection":{"type":"string","enum":[{"name":"Asc","value":"ASC"},{"name":"Desc","value":"DESC"}]},"aws-native:quicksight:TemplateSourceAnalysis":{"description":"\u003cp\u003eThe source analysis of the template.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"},"dataSetReferences":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataSetReference"},"description":"\u003cp\u003eA structure containing information about the dataset references used as placeholders\n            in the template.\u003c/p\u003e"}},"type":"object","required":["arn","dataSetReferences"]},"aws-native:quicksight:TemplateSourceEntity":{"description":"\u003cp\u003eThe source entity of the template.\u003c/p\u003e","properties":{"sourceAnalysis":{"$ref":"#/types/aws-native:quicksight:TemplateSourceAnalysis","description":"The source analysis, if it is based on an analysis."},"sourceTemplate":{"$ref":"#/types/aws-native:quicksight:TemplateSourceTemplate","description":"The source template, if it is based on an template."}},"type":"object"},"aws-native:quicksight:TemplateSourceTemplate":{"description":"\u003cp\u003eThe source template of the template.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"}},"type":"object","required":["arn"]},"aws-native:quicksight:TemplateSpacing":{"properties":{"bottom":{"type":"string","description":"String based length that is composed of value and unit"},"left":{"type":"string","description":"String based length that is composed of value and unit"},"right":{"type":"string","description":"String based length that is composed of value and unit"},"top":{"type":"string","description":"String based length that is composed of value and unit"}},"type":"object"},"aws-native:quicksight:TemplateSpecialValue":{"type":"string","enum":[{"name":"Empty","value":"EMPTY"},{"name":"Null","value":"NULL"},{"name":"Other","value":"OTHER"}]},"aws-native:quicksight:TemplateStringDefaultValues":{"properties":{"dynamicValue":{"$ref":"#/types/aws-native:quicksight:TemplateDynamicDefaultValue","description":"The dynamic value of the `StringDefaultValues` . Different defaults displayed according to users, groups, and values mapping."},"staticValues":{"type":"array","items":{"type":"string"},"description":"The static values of the `DecimalDefaultValues` ."}},"type":"object"},"aws-native:quicksight:TemplateStringFormatConfiguration":{"properties":{"nullValueFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNullValueFormatConfiguration","description":"The options that determine the null value format configuration."},"numericFormatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateNumericFormatConfiguration","description":"The formatting configuration for numeric strings."}},"type":"object"},"aws-native:quicksight:TemplateStringParameterDeclaration":{"properties":{"defaultValues":{"$ref":"#/types/aws-native:quicksight:TemplateStringDefaultValues","description":"The default values of a parameter. If the parameter is a single-value parameter, a maximum of one default value can be provided."},"mappedDataSetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMappedDataSetParameter"}},"name":{"type":"string","description":"The name of the parameter that is being declared."},"parameterValueType":{"$ref":"#/types/aws-native:quicksight:TemplateParameterValueType","description":"The value type determines whether the parameter is a single-value or multi-value parameter."},"valueWhenUnset":{"$ref":"#/types/aws-native:quicksight:TemplateStringValueWhenUnsetConfiguration","description":"The configuration that defines the default value of a `String` parameter when a value has not been set."}},"type":"object","required":["name","parameterValueType"]},"aws-native:quicksight:TemplateStringValueWhenUnsetConfiguration":{"properties":{"customValue":{"type":"string","description":"A custom value that's used when the value of a parameter isn't set."},"valueWhenUnsetOption":{"$ref":"#/types/aws-native:quicksight:TemplateValueWhenUnsetOption","description":"The built-in options for default values. The value can be one of the following:\n\n- `RECOMMENDED` : The recommended value.\n- `NULL` : The `NULL` value."}},"type":"object"},"aws-native:quicksight:TemplateStyledCellType":{"type":"string","enum":[{"name":"Total","value":"TOTAL"},{"name":"MetricHeader","value":"METRIC_HEADER"},{"name":"Value","value":"VALUE"}]},"aws-native:quicksight:TemplateSubtotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the subtotal cells."},"fieldLevel":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableSubtotalLevel","description":"The field level (all, custom, last) for the subtotal cells."},"fieldLevelOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableFieldSubtotalOptions"},"description":"The optional configuration of subtotal cells."},"metricHeaderCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The cell styling options for the subtotals of header cells."},"styleTargets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTableStyleTarget"},"description":"The style targets options for subtotals."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The cell styling options for the subtotal cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration for the subtotal cells."},"valueCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The cell styling options for the subtotals of value cells."}},"type":"object"},"aws-native:quicksight:TemplateTableAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The group by field well for a pivot table. Values are grouped by group by fields."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The values field well for a pivot table. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:TemplateTableBorderOptions":{"properties":{"color":{"type":"string","description":"The color of a table border."},"style":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderStyle","description":"The style (none, solid) of a table border."},"thickness":{"type":"number","description":"The thickness of a table border."}},"type":"object"},"aws-native:quicksight:TemplateTableBorderStyle":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Solid","value":"SOLID"}]},"aws-native:quicksight:TemplateTableCellConditionalFormatting":{"properties":{"fieldId":{"type":"string","description":"The field ID of the cell for conditional formatting."},"textFormat":{"$ref":"#/types/aws-native:quicksight:TemplateTextConditionalFormat","description":"The text format of the cell for conditional formatting."}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplateTableCellImageScalingConfiguration":{"type":"string","enum":[{"name":"FitToCellHeight","value":"FIT_TO_CELL_HEIGHT"},{"name":"FitToCellWidth","value":"FIT_TO_CELL_WIDTH"},{"name":"DoNotScale","value":"DO_NOT_SCALE"}]},"aws-native:quicksight:TemplateTableCellImageSizingConfiguration":{"properties":{"tableCellImageScalingConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellImageScalingConfiguration","description":"The cell scaling configuration of the sizing options for the table image configuration."}},"type":"object"},"aws-native:quicksight:TemplateTableCellStyle":{"properties":{"backgroundColor":{"type":"string","description":"The background color for the table cells."},"border":{"$ref":"#/types/aws-native:quicksight:TemplateGlobalTableBorderOptions","description":"The borders for the table cells."},"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The font configuration of the table cells."},"height":{"type":"number","description":"The height color for the table cells."},"horizontalTextAlignment":{"$ref":"#/types/aws-native:quicksight:TemplateHorizontalTextAlignment","description":"The horizontal text alignment (left, center, right, auto) for the table cells."},"textWrap":{"$ref":"#/types/aws-native:quicksight:TemplateTextWrap","description":"The text wrap (none, wrap) for the table cells."},"verticalTextAlignment":{"$ref":"#/types/aws-native:quicksight:TemplateVerticalTextAlignment","description":"The vertical text alignment (top, middle, bottom) for the table cells."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the table cells."}},"type":"object"},"aws-native:quicksight:TemplateTableConditionalFormatting":{"properties":{"conditionalFormattingOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTableConditionalFormattingOption"},"description":"Conditional formatting options for a `PivotTableVisual` ."}},"type":"object"},"aws-native:quicksight:TemplateTableConditionalFormattingOption":{"properties":{"cell":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellConditionalFormatting","description":"The cell conditional formatting option for a table."},"row":{"$ref":"#/types/aws-native:quicksight:TemplateTableRowConditionalFormatting","description":"The row conditional formatting option for a table."}},"type":"object"},"aws-native:quicksight:TemplateTableConfiguration":{"properties":{"fieldOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldOptions","description":"The field options for a table visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"paginatedReportOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTablePaginatedReportOptions","description":"The paginated report options for a table visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTableSortConfiguration","description":"The sort configuration for a `TableVisual` ."},"tableInlineVisualizations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTableInlineVisualization"},"description":"A collection of inline visualizations to display within a chart."},"tableOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTableOptions","description":"The table options for a table visual."},"totalOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTotalOptions","description":"The total options for a table visual."}},"type":"object"},"aws-native:quicksight:TemplateTableFieldCustomIconContent":{"properties":{"icon":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldIconSetType","description":"The icon set type (link) of the custom icon content for table URL link content."}},"type":"object"},"aws-native:quicksight:TemplateTableFieldCustomTextContent":{"properties":{"fontConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFontConfiguration","description":"The font configuration of the custom text content for the table URL link content."},"value":{"type":"string","description":"The string value of the custom text content for the table URL link content."}},"type":"object","required":["fontConfiguration"]},"aws-native:quicksight:TemplateTableFieldIconSetType":{"type":"string","enum":[{"name":"Link","value":"LINK"}]},"aws-native:quicksight:TemplateTableFieldImageConfiguration":{"properties":{"sizingOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellImageSizingConfiguration","description":"The sizing options for the table image configuration."}},"type":"object"},"aws-native:quicksight:TemplateTableFieldLinkConfiguration":{"properties":{"content":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldLinkContentConfiguration","description":"The URL content (text, icon) for the table link configuration."},"target":{"$ref":"#/types/aws-native:quicksight:TemplateUrlTargetConfiguration","description":"The URL target (new tab, new window, same tab) for the table link configuration."}},"type":"object","required":["content","target"]},"aws-native:quicksight:TemplateTableFieldLinkContentConfiguration":{"properties":{"customIconContent":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldCustomIconContent","description":"The custom icon content for the table link content configuration."},"customTextContent":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldCustomTextContent","description":"The custom text content (value, font configuration) for the table link content configuration."}},"type":"object"},"aws-native:quicksight:TemplateTableFieldOption":{"properties":{"customLabel":{"type":"string","description":"The custom label for a table field."},"fieldId":{"type":"string","description":"The field ID for a table field."},"urlStyling":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldUrlConfiguration","description":"The URL configuration for a table field."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of a table field."},"width":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["fieldId"]},"aws-native:quicksight:TemplateTableFieldOptions":{"properties":{"order":{"type":"array","items":{"type":"string"},"description":"The order of the field IDs that are configured as field options for a table visual."},"pinnedFieldOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTablePinnedFieldOptions","description":"The settings for the pinned columns of a table visual."},"selectedFieldOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldOption"},"description":"The field options to be configured to a table."},"transposedTableOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTransposedTableOption"},"description":"The `TableOptions` of a transposed table."}},"type":"object"},"aws-native:quicksight:TemplateTableFieldUrlConfiguration":{"properties":{"imageConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldImageConfiguration","description":"The image configuration of a table field URL."},"linkConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTableFieldLinkConfiguration","description":"The link configuration of a table field URL."}},"type":"object"},"aws-native:quicksight:TemplateTableFieldWells":{"properties":{"tableAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateTableAggregatedFieldWells","description":"The aggregated field well for the table."},"tableUnaggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateTableUnaggregatedFieldWells","description":"The unaggregated field well for the table."}},"type":"object"},"aws-native:quicksight:TemplateTableInlineVisualization":{"properties":{"dataBars":{"$ref":"#/types/aws-native:quicksight:TemplateDataBarsOptions","description":"The configuration of the inline visualization of the data bars within a chart."}},"type":"object"},"aws-native:quicksight:TemplateTableOptions":{"properties":{"cellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The table cell style of table cells."},"headerStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"The table cell style of a table header."},"orientation":{"$ref":"#/types/aws-native:quicksight:TemplateTableOrientation","description":"The orientation (vertical, horizontal) for a table."},"rowAlternateColorOptions":{"$ref":"#/types/aws-native:quicksight:TemplateRowAlternateColorOptions","description":"The row alternate color options (widget status, row alternate colors) for a table."}},"type":"object"},"aws-native:quicksight:TemplateTableOrientation":{"type":"string","enum":[{"name":"Vertical","value":"VERTICAL"},{"name":"Horizontal","value":"HORIZONTAL"}]},"aws-native:quicksight:TemplateTablePaginatedReportOptions":{"properties":{"overflowColumnHeaderVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of repeating header rows on each page."},"verticalOverflowVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of printing table overflow across pages."}},"type":"object"},"aws-native:quicksight:TemplateTablePinnedFieldOptions":{"properties":{"pinnedLeftFields":{"type":"array","items":{"type":"string"},"description":"A list of columns to be pinned to the left of a table visual."}},"type":"object"},"aws-native:quicksight:TemplateTableRowConditionalFormatting":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting color (solid, gradient) of the background for a table row."},"textColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting color (solid, gradient) of the text for a table row."}},"type":"object"},"aws-native:quicksight:TemplateTableSideBorderOptions":{"properties":{"bottom":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"The table border options of the bottom border."},"innerHorizontal":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"The table border options of the inner horizontal border."},"innerVertical":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"The table border options of the inner vertical border."},"left":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"The table border options of the left border."},"right":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"The table border options of the right border."},"top":{"$ref":"#/types/aws-native:quicksight:TemplateTableBorderOptions","description":"The table border options of the top border."}},"type":"object"},"aws-native:quicksight:TemplateTableSortConfiguration":{"properties":{"paginationConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplatePaginationConfiguration","description":"The pagination configuration (page size, page number) for the table."},"rowSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The field sort options for rows in the table."}},"type":"object"},"aws-native:quicksight:TemplateTableStyleTarget":{"properties":{"cellType":{"$ref":"#/types/aws-native:quicksight:TemplateStyledCellType","description":"The cell type of the table style target."}},"type":"object","required":["cellType"]},"aws-native:quicksight:TemplateTableTotalsPlacement":{"type":"string","enum":[{"name":"Start","value":"START"},{"name":"End","value":"END"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:TemplateTableTotalsScrollStatus":{"type":"string","enum":[{"name":"Pinned","value":"PINNED"},{"name":"Scrolled","value":"SCROLLED"}]},"aws-native:quicksight:TemplateTableUnaggregatedFieldWells":{"properties":{"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateUnaggregatedField"},"description":"The values field well for a pivot table. Values are unaggregated for an unaggregated table."}},"type":"object"},"aws-native:quicksight:TemplateTableVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTableConfiguration","description":"The configuration settings of the visual."},"conditionalFormatting":{"$ref":"#/types/aws-native:quicksight:TemplateTableConditionalFormatting","description":"The conditional formatting for a `PivotTableVisual` ."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:TemplateTargetVisualOptions":{"type":"string","enum":[{"name":"AllVisuals","value":"ALL_VISUALS"}]},"aws-native:quicksight:TemplateTextAreaControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"placeholderOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextControlPlaceholderOptions","description":"The configuration of the placeholder options in a text area control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateTextConditionalFormat":{"properties":{"backgroundColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting for the text background color."},"icon":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingIcon","description":"The conditional formatting for the icon."},"textColor":{"$ref":"#/types/aws-native:quicksight:TemplateConditionalFormattingColor","description":"The conditional formatting for the text color."}},"type":"object"},"aws-native:quicksight:TemplateTextControlPlaceholderOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration of the placeholder options in a text control."}},"type":"object"},"aws-native:quicksight:TemplateTextFieldControlDisplayOptions":{"properties":{"infoIconLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateSheetControlInfoIconLabelOptions","description":"The configuration of info icon label options."},"placeholderOptions":{"$ref":"#/types/aws-native:quicksight:TemplateTextControlPlaceholderOptions","description":"The configuration of the placeholder options in a text field control."},"titleOptions":{"$ref":"#/types/aws-native:quicksight:TemplateLabelOptions","description":"The options to configure the title visibility, name, and font size."}},"type":"object"},"aws-native:quicksight:TemplateTextWrap":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Wrap","value":"WRAP"}]},"aws-native:quicksight:TemplateThousandSeparatorOptions":{"properties":{"groupingStyle":{"$ref":"#/types/aws-native:quicksight:TemplateDigitGroupingStyle","description":"Determines the way numbers are styled to accommodate different readability standards. The `DEFAULT` value uses the standard international grouping system and groups numbers by the thousands. The `LAKHS` value uses the Indian numbering system and groups numbers by lakhs and crores."},"symbol":{"$ref":"#/types/aws-native:quicksight:TemplateNumericSeparatorSymbol","description":"Determines the thousands separator symbol."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines the visibility of the thousands separator."}},"type":"object"},"aws-native:quicksight:TemplateTimeBasedForecastProperties":{"properties":{"lowerBoundary":{"type":"number","description":"The lower boundary setup of a forecast computation."},"periodsBackward":{"type":"number","description":"The periods backward setup of a forecast computation."},"periodsForward":{"type":"number","description":"The periods forward setup of a forecast computation."},"predictionInterval":{"type":"number","description":"The prediction interval setup of a forecast computation."},"seasonality":{"type":"number","description":"The seasonality setup of a forecast computation. Choose one of the following options:\n\n- `NULL` : The input is set to `NULL` .\n- `NON_NULL` : The input is set to a custom value."},"upperBoundary":{"type":"number","description":"The upper boundary setup of a forecast computation."}},"type":"object"},"aws-native:quicksight:TemplateTimeEqualityFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value.\n\nThis field is mutually exclusive to `Value` and `RollingDate` ."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:TemplateRollingDateConfiguration","description":"The rolling date input for the `TimeEquality` filter.\n\nThis field is mutually exclusive to `Value` and `ParameterName` ."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"value":{"type":"string","description":"The value of a `TimeEquality` filter.\n\nThis field is mutually exclusive to `RollingDate` and `ParameterName` ."}},"type":"object","required":["column","filterId"]},"aws-native:quicksight:TemplateTimeGranularity":{"type":"string","enum":[{"name":"Year","value":"YEAR"},{"name":"Quarter","value":"QUARTER"},{"name":"Month","value":"MONTH"},{"name":"Week","value":"WEEK"},{"name":"Day","value":"DAY"},{"name":"Hour","value":"HOUR"},{"name":"Minute","value":"MINUTE"},{"name":"Second","value":"SECOND"},{"name":"Millisecond","value":"MILLISECOND"}]},"aws-native:quicksight:TemplateTimeRangeDrillDownFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"rangeMaximum":{"type":"string","description":"The maximum value for the filter value range."},"rangeMinimum":{"type":"string","description":"The minimum value for the filter value range."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["column","rangeMaximum","rangeMinimum","timeGranularity"]},"aws-native:quicksight:TemplateTimeRangeFilter":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"excludePeriodConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateExcludePeriodConfiguration","description":"The exclude period of the time range filter."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"includeMaximum":{"type":"boolean","description":"Determines whether the maximum value in the filter value range should be included in the filtered results."},"includeMinimum":{"type":"boolean","description":"Determines whether the minimum value in the filter value range should be included in the filtered results."},"nullOption":{"$ref":"#/types/aws-native:quicksight:TemplateFilterNullOption","description":"This option determines how null values should be treated when filtering data.\n\n- `ALL_VALUES` : Include null values in filtered results.\n- `NULLS_ONLY` : Only include null values in filtered results.\n- `NON_NULLS_ONLY` : Exclude null values from filtered results."},"rangeMaximumValue":{"$ref":"#/types/aws-native:quicksight:TemplateTimeRangeFilterValue","description":"The maximum value for the filter value range."},"rangeMinimumValue":{"$ref":"#/types/aws-native:quicksight:TemplateTimeRangeFilterValue","description":"The minimum value for the filter value range."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["column","filterId","nullOption"]},"aws-native:quicksight:TemplateTimeRangeFilterValue":{"properties":{"parameter":{"type":"string","description":"The parameter type input value."},"rollingDate":{"$ref":"#/types/aws-native:quicksight:TemplateRollingDateConfiguration","description":"The rolling date input value."},"staticValue":{"type":"string","description":"The static input value."}},"type":"object"},"aws-native:quicksight:TemplateTooltipItem":{"properties":{"columnTooltipItem":{"$ref":"#/types/aws-native:quicksight:TemplateColumnTooltipItem","description":"The tooltip item for the columns that are not part of a field well."},"fieldTooltipItem":{"$ref":"#/types/aws-native:quicksight:TemplateFieldTooltipItem","description":"The tooltip item for the fields."}},"type":"object"},"aws-native:quicksight:TemplateTooltipOptions":{"properties":{"fieldBasedTooltip":{"$ref":"#/types/aws-native:quicksight:TemplateFieldBasedTooltip","description":"The setup for the detailed tooltip. The tooltip setup is always saved. The display type is decided based on the tooltip type."},"selectedTooltipType":{"$ref":"#/types/aws-native:quicksight:TemplateSelectedTooltipType","description":"The selected type for the tooltip. Choose one of the following options:\n\n- `BASIC` : A basic tooltip.\n- `DETAILED` : A detailed tooltip."},"tooltipVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"Determines whether or not the tooltip is visible."}},"type":"object"},"aws-native:quicksight:TemplateTooltipTarget":{"type":"string","enum":[{"name":"Both","value":"BOTH"},{"name":"Bar","value":"BAR"},{"name":"Line","value":"LINE"}]},"aws-native:quicksight:TemplateTooltipTitleType":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"PrimaryValue","value":"PRIMARY_VALUE"}]},"aws-native:quicksight:TemplateTopBottomComputationType":{"type":"string","enum":[{"name":"Top","value":"TOP"},{"name":"Bottom","value":"BOTTOM"}]},"aws-native:quicksight:TemplateTopBottomFilter":{"properties":{"aggregationSortConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateAggregationSortConfiguration"},"description":"The aggregation and sort configuration of the top bottom filter."},"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that the filter is applied to."},"defaultFilterControlConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateDefaultFilterControlConfiguration","description":"The default configurations for the associated controls. This applies only for filters that are scoped to multiple sheets."},"filterId":{"type":"string","description":"An identifier that uniquely identifies a filter within a dashboard, analysis, or template."},"limit":{"type":"number","description":"The number of items to include in the top bottom filter results."},"parameterName":{"type":"string","description":"The parameter whose value should be used for the filter value."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TemplateTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["aggregationSortConfigurations","column","filterId"]},"aws-native:quicksight:TemplateTopBottomMoversComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"moverSize":{"type":"number","description":"The mover size setup of the top and bottom movers computation."},"name":{"type":"string","description":"The name of a computation."},"sortOrder":{"$ref":"#/types/aws-native:quicksight:TemplateTopBottomSortOrder","description":"The sort order setup of the top and bottom movers computation."},"time":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The time field that is used in a computation."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateTopBottomComputationType","description":"The computation type. Choose from the following options:\n\n- TOP: Top movers computation.\n- BOTTOM: Bottom movers computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:TemplateTopBottomRankedComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"resultSize":{"type":"number","description":"The result size of a top and bottom ranked computation."},"type":{"$ref":"#/types/aws-native:quicksight:TemplateTopBottomComputationType","description":"The computation type. Choose one of the following options:\n\n- TOP: A top ranked computation.\n- BOTTOM: A bottom ranked computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId","type"]},"aws-native:quicksight:TemplateTopBottomSortOrder":{"type":"string","enum":[{"name":"PercentDifference","value":"PERCENT_DIFFERENCE"},{"name":"AbsoluteDifference","value":"ABSOLUTE_DIFFERENCE"}]},"aws-native:quicksight:TemplateTotalAggregationComputation":{"properties":{"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."},"value":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField","description":"The value field that is used in a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplateTotalAggregationFunction":{"properties":{"simpleTotalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateSimpleTotalAggregationFunction","description":"A built in aggregation function for total values."}},"type":"object"},"aws-native:quicksight:TemplateTotalAggregationOption":{"properties":{"fieldId":{"type":"string","description":"The field id that's associated with the total aggregation option."},"totalAggregationFunction":{"$ref":"#/types/aws-native:quicksight:TemplateTotalAggregationFunction","description":"The total aggregation function that you want to set for a specified field id."}},"type":"object","required":["fieldId","totalAggregationFunction"]},"aws-native:quicksight:TemplateTotalOptions":{"properties":{"customLabel":{"type":"string","description":"The custom label string for the total cells."},"placement":{"$ref":"#/types/aws-native:quicksight:TemplateTableTotalsPlacement","description":"The placement (start, end) for the total cells."},"scrollStatus":{"$ref":"#/types/aws-native:quicksight:TemplateTableTotalsScrollStatus","description":"The scroll status (pinned, scrolled) for the total cells."},"totalAggregationOptions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateTotalAggregationOption"},"description":"The total aggregation settings for each value field."},"totalCellStyle":{"$ref":"#/types/aws-native:quicksight:TemplateTableCellStyle","description":"Cell styling options for the total cells."},"totalsVisibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility configuration for the total cells."}},"type":"object"},"aws-native:quicksight:TemplateTransposedColumnType":{"type":"string","enum":[{"name":"RowHeaderColumn","value":"ROW_HEADER_COLUMN"},{"name":"ValueColumn","value":"VALUE_COLUMN"}]},"aws-native:quicksight:TemplateTransposedTableOption":{"properties":{"columnIndex":{"type":"number","description":"The index of a columns in a transposed table. The index range is 0-9999."},"columnType":{"$ref":"#/types/aws-native:quicksight:TemplateTransposedColumnType","description":"The column type of the column in a transposed table. Choose one of the following options:\n\n- `ROW_HEADER_COLUMN` : Refers to the leftmost column of the row header in the transposed table.\n- `VALUE_COLUMN` : Refers to all value columns in the transposed table."},"columnWidth":{"type":"string","description":"String based length that is composed of value and unit in px"}},"type":"object","required":["columnType"]},"aws-native:quicksight:TemplateTreeMapAggregatedFieldWells":{"properties":{"colors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The color field well of a tree map. Values are grouped by aggregations based on group by fields."},"groups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The group by field well of a tree map. Values are grouped based on group by fields."},"sizes":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The size field well of a tree map. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:TemplateTreeMapConfiguration":{"properties":{"colorLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility) for the colors displayed in a tree map."},"colorScale":{"$ref":"#/types/aws-native:quicksight:TemplateColorScale","description":"The color options (gradient color, point of divergence) of a tree map."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The options that determine if visual data labels are displayed."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateTreeMapFieldWells","description":"The field wells of the visual."},"groupLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility) of the groups that are displayed in a tree map."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend display setup of the visual."},"sizeLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility) of the sizes that are displayed in a tree map."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTreeMapSortConfiguration","description":"The sort configuration of a tree map."},"tooltip":{"$ref":"#/types/aws-native:quicksight:TemplateTooltipOptions","description":"The tooltip display setup of the visual."}},"type":"object"},"aws-native:quicksight:TemplateTreeMapFieldWells":{"properties":{"treeMapAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateTreeMapAggregatedFieldWells","description":"The aggregated field wells of a tree map."}},"type":"object"},"aws-native:quicksight:TemplateTreeMapSortConfiguration":{"properties":{"treeMapGroupItemsLimitConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of groups that are displayed."},"treeMapSort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of group by fields."}},"type":"object"},"aws-native:quicksight:TemplateTreeMapVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateTreeMapConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateTrendArrowOptions":{"properties":{"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the trend arrows."}},"type":"object"},"aws-native:quicksight:TemplateUnaggregatedField":{"properties":{"column":{"$ref":"#/types/aws-native:quicksight:TemplateColumnIdentifier","description":"The column that is used in the `UnaggregatedField` ."},"fieldId":{"type":"string","description":"The custom field ID."},"formatConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateFormatConfiguration","description":"The format configuration of the field."}},"type":"object","required":["column","fieldId"]},"aws-native:quicksight:TemplateUniqueValuesComputation":{"properties":{"category":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField","description":"The category field that is used in a computation."},"computationId":{"type":"string","description":"The ID for a computation."},"name":{"type":"string","description":"The name of a computation."}},"type":"object","required":["computationId"]},"aws-native:quicksight:TemplateUrlTargetConfiguration":{"type":"string","enum":[{"name":"NewTab","value":"NEW_TAB"},{"name":"NewWindow","value":"NEW_WINDOW"},{"name":"SameTab","value":"SAME_TAB"}]},"aws-native:quicksight:TemplateValidationStrategy":{"description":"\u003cp\u003eThe option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to \u003ccode\u003eLENIENT\u003c/code\u003e, validation is skipped for specific errors.\u003c/p\u003e","properties":{"mode":{"$ref":"#/types/aws-native:quicksight:TemplateValidationStrategyMode","description":"The mode of validation for the asset to be created or updated. When you set this value to `STRICT` , strict validation for every error is enforced. When you set this value to `LENIENT` , validation is skipped for specific UI errors."}},"type":"object","required":["mode"]},"aws-native:quicksight:TemplateValidationStrategyMode":{"type":"string","enum":[{"name":"Strict","value":"STRICT"},{"name":"Lenient","value":"LENIENT"}]},"aws-native:quicksight:TemplateValueWhenUnsetOption":{"type":"string","enum":[{"name":"RecommendedValue","value":"RECOMMENDED_VALUE"},{"name":"Null","value":"NULL"}]},"aws-native:quicksight:TemplateVersion":{"description":"\u003cp\u003eA version of a template.\u003c/p\u003e","properties":{"createdTime":{"type":"string","description":"\u003cp\u003eThe time that this template version was created.\u003c/p\u003e"},"dataSetConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataSetConfiguration"},"description":"\u003cp\u003eSchema of the dataset identified by the placeholder. Any dashboard created from this\n            template should be bound to new datasets matching the same schema described through this\n            API operation.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eThe description of the template.\u003c/p\u003e"},"errors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateError"},"description":"\u003cp\u003eErrors associated with this template version.\u003c/p\u003e"},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheet"},"description":"\u003cp\u003eA list of the associated sheets with the unique identifier and name of each sheet.\u003c/p\u003e"},"sourceEntityArn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of an analysis or template that was used to create this\n            template.\u003c/p\u003e"},"status":{"$ref":"#/types/aws-native:quicksight:TemplateResourceStatus","description":"The status that is associated with the template.\n\n- `CREATION_IN_PROGRESS`\n- `CREATION_SUCCESSFUL`\n- `CREATION_FAILED`\n- `UPDATE_IN_PROGRESS`\n- `UPDATE_SUCCESSFUL`\n- `UPDATE_FAILED`\n- `DELETED`"},"themeArn":{"type":"string","description":"\u003cp\u003eThe ARN of the theme associated with this version of the template.\u003c/p\u003e"},"versionNumber":{"type":"number","description":"\u003cp\u003eThe version number of the template version.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TemplateVersionDefinition":{"properties":{"analysisDefaults":{"$ref":"#/types/aws-native:quicksight:TemplateAnalysisDefaults"},"calculatedFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateCalculatedField"},"description":"An array of calculated field definitions for the template."},"columnConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnConfiguration"},"description":"An array of template-level column configurations. Column configurations are used to set default formatting for a column that's used throughout a template."},"dataSetConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataSetConfiguration"},"description":"An array of dataset configurations. These configurations define the required columns for each dataset used within a template."},"filterGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFilterGroup"},"description":"Filter definitions for a template.\n\nFor more information, see [Filtering Data](https://docs.aws.amazon.com/quicksight/latest/user/filtering-visual-data.html) in the *Amazon Quick Suite User Guide* ."},"options":{"$ref":"#/types/aws-native:quicksight:TemplateAssetOptions","description":"An array of option definitions for a template."},"parameterDeclarations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateParameterDeclaration"},"description":"An array of parameter declarations for a template.\n\n*Parameters* are named variables that can transfer a value for use by an action or an object.\n\nFor more information, see [Parameters in Amazon Quick Sight](https://docs.aws.amazon.com/quicksight/latest/user/parameters-in-quicksight.html) in the *Amazon Quick Suite User Guide* ."},"queryExecutionOptions":{"$ref":"#/types/aws-native:quicksight:TemplateQueryExecutionOptions"},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateSheetDefinition"},"description":"An array of sheet definitions for a template."}},"type":"object","required":["dataSetConfigurations"]},"aws-native:quicksight:TemplateVerticalTextAlignment":{"type":"string","enum":[{"name":"Top","value":"TOP"},{"name":"Middle","value":"MIDDLE"},{"name":"Bottom","value":"BOTTOM"},{"name":"Auto","value":"AUTO"}]},"aws-native:quicksight:TemplateVisibility":{"type":"string","enum":[{"name":"Hidden","value":"HIDDEN"},{"name":"Visible","value":"VISIBLE"}]},"aws-native:quicksight:TemplateVisibleRangeOptions":{"properties":{"percentRange":{"$ref":"#/types/aws-native:quicksight:TemplatePercentVisibleRange","description":"The percent range in the visible range."}},"type":"object"},"aws-native:quicksight:TemplateVisual":{"properties":{"barChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplateBarChartVisual","description":"A bar chart.\n\nFor more information, see [Using bar charts](https://docs.aws.amazon.com/quicksight/latest/user/bar-charts.html) in the *Amazon Quick Suite User Guide* ."},"boxPlotVisual":{"$ref":"#/types/aws-native:quicksight:TemplateBoxPlotVisual","description":"A box plot.\n\nFor more information, see [Using box plots](https://docs.aws.amazon.com/quicksight/latest/user/box-plots.html) in the *Amazon Quick Suite User Guide* ."},"comboChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplateComboChartVisual","description":"A combo chart.\n\nFor more information, see [Using combo charts](https://docs.aws.amazon.com/quicksight/latest/user/combo-charts.html) in the *Amazon Quick Suite User Guide* ."},"customContentVisual":{"$ref":"#/types/aws-native:quicksight:TemplateCustomContentVisual","description":"A visual that contains custom content.\n\nFor more information, see [Using custom visual content](https://docs.aws.amazon.com/quicksight/latest/user/custom-visual-content.html) in the *Amazon Quick Suite User Guide* ."},"emptyVisual":{"$ref":"#/types/aws-native:quicksight:TemplateEmptyVisual","description":"An empty visual."},"filledMapVisual":{"$ref":"#/types/aws-native:quicksight:TemplateFilledMapVisual","description":"A filled map.\n\nFor more information, see [Creating filled maps](https://docs.aws.amazon.com/quicksight/latest/user/filled-maps.html) in the *Amazon Quick Suite User Guide* ."},"funnelChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplateFunnelChartVisual","description":"A funnel chart.\n\nFor more information, see [Using funnel charts](https://docs.aws.amazon.com/quicksight/latest/user/funnel-visual-content.html) in the *Amazon Quick Suite User Guide* ."},"gaugeChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplateGaugeChartVisual","description":"A gauge chart.\n\nFor more information, see [Using gauge charts](https://docs.aws.amazon.com/quicksight/latest/user/gauge-chart.html) in the *Amazon Quick Suite User Guide* ."},"geospatialMapVisual":{"$ref":"#/types/aws-native:quicksight:TemplateGeospatialMapVisual","description":"A geospatial map or a points on map visual.\n\nFor more information, see [Creating point maps](https://docs.aws.amazon.com/quicksight/latest/user/point-maps.html) in the *Amazon Quick Suite User Guide* ."},"heatMapVisual":{"$ref":"#/types/aws-native:quicksight:TemplateHeatMapVisual","description":"A heat map.\n\nFor more information, see [Using heat maps](https://docs.aws.amazon.com/quicksight/latest/user/heat-map.html) in the *Amazon Quick Suite User Guide* ."},"histogramVisual":{"$ref":"#/types/aws-native:quicksight:TemplateHistogramVisual","description":"A histogram.\n\nFor more information, see [Using histograms](https://docs.aws.amazon.com/quicksight/latest/user/histogram-charts.html) in the *Amazon Quick Suite User Guide* ."},"insightVisual":{"$ref":"#/types/aws-native:quicksight:TemplateInsightVisual","description":"An insight visual.\n\nFor more information, see [Working with insights](https://docs.aws.amazon.com/quicksight/latest/user/computational-insights.html) in the *Amazon Quick Suite User Guide* ."},"kpiVisual":{"$ref":"#/types/aws-native:quicksight:TemplateKpiVisual","description":"A key performance indicator (KPI).\n\nFor more information, see [Using KPIs](https://docs.aws.amazon.com/quicksight/latest/user/kpi.html) in the *Amazon Quick Suite User Guide* ."},"lineChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplateLineChartVisual","description":"A line chart.\n\nFor more information, see [Using line charts](https://docs.aws.amazon.com/quicksight/latest/user/line-charts.html) in the *Amazon Quick Suite User Guide* ."},"pieChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplatePieChartVisual","description":"A pie or donut chart.\n\nFor more information, see [Using pie charts](https://docs.aws.amazon.com/quicksight/latest/user/pie-chart.html) in the *Amazon Quick Suite User Guide* ."},"pivotTableVisual":{"$ref":"#/types/aws-native:quicksight:TemplatePivotTableVisual","description":"A pivot table.\n\nFor more information, see [Using pivot tables](https://docs.aws.amazon.com/quicksight/latest/user/pivot-table.html) in the *Amazon Quick Suite User Guide* ."},"pluginVisual":{"$ref":"#/types/aws-native:quicksight:TemplatePluginVisual","description":"The custom plugin visual type."},"radarChartVisual":{"$ref":"#/types/aws-native:quicksight:TemplateRadarChartVisual","description":"A radar chart visual.\n\nFor more information, see [Using radar charts](https://docs.aws.amazon.com/quicksight/latest/user/radar-chart.html) in the *Amazon Quick Suite User Guide* ."},"sankeyDiagramVisual":{"$ref":"#/types/aws-native:quicksight:TemplateSankeyDiagramVisual","description":"A sankey diagram.\n\nFor more information, see [Using Sankey diagrams](https://docs.aws.amazon.com/quicksight/latest/user/sankey-diagram.html) in the *Amazon Quick Suite User Guide* ."},"scatterPlotVisual":{"$ref":"#/types/aws-native:quicksight:TemplateScatterPlotVisual","description":"A scatter plot.\n\nFor more information, see [Using scatter plots](https://docs.aws.amazon.com/quicksight/latest/user/scatter-plot.html) in the *Amazon Quick Suite User Guide* ."},"tableVisual":{"$ref":"#/types/aws-native:quicksight:TemplateTableVisual","description":"A table visual.\n\nFor more information, see [Using tables as visuals](https://docs.aws.amazon.com/quicksight/latest/user/tabular.html) in the *Amazon Quick Suite User Guide* ."},"treeMapVisual":{"$ref":"#/types/aws-native:quicksight:TemplateTreeMapVisual","description":"A tree map.\n\nFor more information, see [Using tree maps](https://docs.aws.amazon.com/quicksight/latest/user/tree-map.html) in the *Amazon Quick Suite User Guide* ."},"waterfallVisual":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallVisual","description":"A waterfall chart.\n\nFor more information, see [Using waterfall charts](https://docs.aws.amazon.com/quicksight/latest/user/waterfall-chart.html) in the *Amazon Quick Suite User Guide* ."},"wordCloudVisual":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudVisual","description":"A word cloud.\n\nFor more information, see [Using word clouds](https://docs.aws.amazon.com/quicksight/latest/user/word-cloud.html) in the *Amazon Quick Suite User Guide* ."}},"type":"object"},"aws-native:quicksight:TemplateVisualCustomAction":{"properties":{"actionOperations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomActionOperation"},"description":"A list of `VisualCustomActionOperations` .\n\nThis is a union type structure. For this structure to be valid, only one of the attributes can be defined."},"customActionId":{"type":"string","description":"The ID of the `VisualCustomAction` ."},"name":{"type":"string","description":"The name of the `VisualCustomAction` ."},"status":{"$ref":"#/types/aws-native:quicksight:TemplateWidgetStatus","description":"The status of the `VisualCustomAction` ."},"trigger":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomActionTrigger","description":"The trigger of the `VisualCustomAction` .\n\nValid values are defined as follows:\n\n- `DATA_POINT_CLICK` : Initiates a custom action by a left pointer click on a data point.\n- `DATA_POINT_MENU` : Initiates a custom action by right pointer click from the menu."}},"type":"object","required":["actionOperations","customActionId","name","trigger"]},"aws-native:quicksight:TemplateVisualCustomActionOperation":{"properties":{"filterOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionFilterOperation","description":"The filter operation that filters data included in a visual or in an entire sheet."},"navigationOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionNavigationOperation","description":"The navigation operation that navigates between different sheets in the same analysis."},"setParametersOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionSetParametersOperation","description":"The set parameter operation that sets parameters in custom action."},"urlOperation":{"$ref":"#/types/aws-native:quicksight:TemplateCustomActionUrlOperation","description":"The URL operation that opens a link to another webpage."}},"type":"object"},"aws-native:quicksight:TemplateVisualCustomActionTrigger":{"type":"string","enum":[{"name":"DataPointClick","value":"DATA_POINT_CLICK"},{"name":"DataPointMenu","value":"DATA_POINT_MENU"}]},"aws-native:quicksight:TemplateVisualInteractionOptions":{"properties":{"contextMenuOption":{"$ref":"#/types/aws-native:quicksight:TemplateContextMenuOption","description":"The context menu options for a visual."},"visualMenuOption":{"$ref":"#/types/aws-native:quicksight:TemplateVisualMenuOption","description":"The on-visual menu options for a visual."}},"type":"object"},"aws-native:quicksight:TemplateVisualMenuOption":{"properties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:TemplateDashboardBehavior","description":"The availaiblity status of a visual's menu options."}},"type":"object"},"aws-native:quicksight:TemplateVisualPalette":{"properties":{"chartColor":{"type":"string","description":"The chart color options for the visual palette."},"colorMap":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDataPathColor"},"description":"The color map options for the visual palette."}},"type":"object"},"aws-native:quicksight:TemplateVisualSubtitleLabelOptions":{"properties":{"formatText":{"$ref":"#/types/aws-native:quicksight:TemplateLongFormatText","description":"The long text format of the subtitle label, such as plain text or rich text."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the subtitle label."}},"type":"object"},"aws-native:quicksight:TemplateVisualTitleLabelOptions":{"properties":{"formatText":{"$ref":"#/types/aws-native:quicksight:TemplateShortFormatText","description":"The short text format of the title label, such as plain text or rich text."},"visibility":{"$ref":"#/types/aws-native:quicksight:TemplateVisibility","description":"The visibility of the title label."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartAggregatedFieldWells":{"properties":{"breakdowns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The breakdown field wells of a waterfall visual."},"categories":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The category field wells of a waterfall visual."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The value field wells of a waterfall visual."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartColorConfiguration":{"properties":{"groupColorConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartGroupColorConfiguration","description":"The color configuration for individual groups within a waterfall visual."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartConfiguration":{"properties":{"categoryAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The options that determine the presentation of the category axis."},"categoryAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The options that determine the presentation of the category axis label."},"colorConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartColorConfiguration","description":"The color configuration of a waterfall visual."},"dataLabels":{"$ref":"#/types/aws-native:quicksight:TemplateDataLabelOptions","description":"The data label configuration of a waterfall visual."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartFieldWells","description":"The field well configuration of a waterfall visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"legend":{"$ref":"#/types/aws-native:quicksight:TemplateLegendOptions","description":"The legend configuration of a waterfall visual."},"primaryYAxisDisplayOptions":{"$ref":"#/types/aws-native:quicksight:TemplateAxisDisplayOptions","description":"The options that determine the presentation of the y-axis."},"primaryYAxisLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The options that determine the presentation of the y-axis label."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartSortConfiguration","description":"The sort configuration of a waterfall visual."},"visualPalette":{"$ref":"#/types/aws-native:quicksight:TemplateVisualPalette","description":"The visual palette configuration of a waterfall visual."},"waterfallChartOptions":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartOptions","description":"The options that determine the presentation of a waterfall visual."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartFieldWells":{"properties":{"waterfallChartAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartAggregatedFieldWells","description":"The field well configuration of a waterfall visual."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartGroupColorConfiguration":{"properties":{"negativeBarColor":{"type":"string","description":"Defines the color for the negative bars of a waterfall chart."},"positiveBarColor":{"type":"string","description":"Defines the color for the positive bars of a waterfall chart."},"totalBarColor":{"type":"string","description":"Defines the color for the total bars of a waterfall chart."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartOptions":{"properties":{"totalBarLabel":{"type":"string","description":"This option determines the total bar label of a waterfall visual."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallChartSortConfiguration":{"properties":{"breakdownItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of bar groups that are displayed."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of the category fields."}},"type":"object"},"aws-native:quicksight:TemplateWaterfallVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateWaterfallChartConfiguration","description":"The configuration for a waterfall visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateWhatIfPointScenario":{"properties":{"date":{"type":"string","description":"The date that you need the forecast results for."},"value":{"type":"number","description":"The target value that you want to meet for the provided date."}},"type":"object","required":["date","value"]},"aws-native:quicksight:TemplateWhatIfRangeScenario":{"properties":{"endDate":{"type":"string","description":"The end date in the date range that you need the forecast results for."},"startDate":{"type":"string","description":"The start date in the date range that you need the forecast results for."},"value":{"type":"number","description":"The target value that you want to meet for the provided date range."}},"type":"object","required":["endDate","startDate","value"]},"aws-native:quicksight:TemplateWidgetStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:quicksight:TemplateWordCloudAggregatedFieldWells":{"properties":{"groupBy":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateDimensionField"},"description":"The group by field well of a word cloud. Values are grouped by group by fields."},"size":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateMeasureField"},"description":"The size field well of a word cloud. Values are aggregated based on group by fields."}},"type":"object"},"aws-native:quicksight:TemplateWordCloudChartConfiguration":{"properties":{"categoryLabelOptions":{"$ref":"#/types/aws-native:quicksight:TemplateChartAxisLabelOptions","description":"The label options (label text, label visibility, and sort icon visibility) for the word cloud category."},"fieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudFieldWells","description":"The field wells of the visual."},"interactions":{"$ref":"#/types/aws-native:quicksight:TemplateVisualInteractionOptions","description":"The general visual interactions setup for a visual."},"sortConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudSortConfiguration","description":"The sort configuration of a word cloud visual."},"wordCloudOptions":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudOptions","description":"The options for a word cloud visual."}},"type":"object"},"aws-native:quicksight:TemplateWordCloudCloudLayout":{"type":"string","enum":[{"name":"Fluid","value":"FLUID"},{"name":"Normal","value":"NORMAL"}]},"aws-native:quicksight:TemplateWordCloudFieldWells":{"properties":{"wordCloudAggregatedFieldWells":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudAggregatedFieldWells","description":"The aggregated field wells of a word cloud."}},"type":"object"},"aws-native:quicksight:TemplateWordCloudOptions":{"properties":{"cloudLayout":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudCloudLayout","description":"The cloud layout options (fluid, normal) of a word cloud."},"maximumStringLength":{"type":"number","description":"The length limit of each word from 1-100."},"wordCasing":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudWordCasing","description":"The word casing options (lower_case, existing_case) for the words in a word cloud."},"wordOrientation":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudWordOrientation","description":"The word orientation options (horizontal, horizontal_and_vertical) for the words in a word cloud."},"wordPadding":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudWordPadding","description":"The word padding options (none, small, medium, large) for the words in a word cloud."},"wordScaling":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudWordScaling","description":"The word scaling options (emphasize, normal) for the words in a word cloud."}},"type":"object"},"aws-native:quicksight:TemplateWordCloudSortConfiguration":{"properties":{"categoryItemsLimit":{"$ref":"#/types/aws-native:quicksight:TemplateItemsLimitConfiguration","description":"The limit on the number of groups that are displayed in a word cloud."},"categorySort":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateFieldSortOptions"},"description":"The sort configuration of group by fields."}},"type":"object"},"aws-native:quicksight:TemplateWordCloudVisual":{"properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateVisualCustomAction"},"description":"The list of custom actions that are configured for a visual."},"chartConfiguration":{"$ref":"#/types/aws-native:quicksight:TemplateWordCloudChartConfiguration","description":"The configuration settings of the visual."},"columnHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateColumnHierarchy"},"description":"The column hierarchy that is used during drill-downs and drill-ups."},"subtitle":{"$ref":"#/types/aws-native:quicksight:TemplateVisualSubtitleLabelOptions","description":"The subtitle that is displayed on the visual."},"title":{"$ref":"#/types/aws-native:quicksight:TemplateVisualTitleLabelOptions","description":"The title that is displayed on the visual."},"visualContentAltText":{"type":"string","description":"The alt text for the visual."},"visualId":{"type":"string","description":"The unique identifier of a visual. This identifier must be unique within the context of a dashboard, template, or analysis. Two dashboards, analyses, or templates can have visuals with the same identifiers.."}},"type":"object","required":["visualId"]},"aws-native:quicksight:TemplateWordCloudWordCasing":{"type":"string","enum":[{"name":"LowerCase","value":"LOWER_CASE"},{"name":"ExistingCase","value":"EXISTING_CASE"}]},"aws-native:quicksight:TemplateWordCloudWordOrientation":{"type":"string","enum":[{"name":"Horizontal","value":"HORIZONTAL"},{"name":"HorizontalAndVertical","value":"HORIZONTAL_AND_VERTICAL"}]},"aws-native:quicksight:TemplateWordCloudWordPadding":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Small","value":"SMALL"},{"name":"Medium","value":"MEDIUM"},{"name":"Large","value":"LARGE"}]},"aws-native:quicksight:TemplateWordCloudWordScaling":{"type":"string","enum":[{"name":"Emphasize","value":"EMPHASIZE"},{"name":"Normal","value":"NORMAL"}]},"aws-native:quicksight:TemplateYAxisOptions":{"properties":{"yAxis":{"$ref":"#/types/aws-native:quicksight:TemplateSingleYAxisOption","description":"The Y axis type to be used in the chart.\n\nIf you choose `PRIMARY_Y_AXIS` , the primary Y Axis is located on the leftmost vertical axis of the chart."}},"type":"object","required":["yAxis"]},"aws-native:quicksight:ThemeBorderStyle":{"description":"\u003cp\u003eThe display options for tile borders for visuals.\u003c/p\u003e","properties":{"show":{"type":"boolean","description":"\u003cp\u003eThe option to enable display of borders for visuals.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:ThemeConfiguration":{"description":"\u003cp\u003eThe theme configuration. This configuration contains all of the display properties for\n            a theme.\u003c/p\u003e","properties":{"dataColorPalette":{"$ref":"#/types/aws-native:quicksight:ThemeDataColorPalette","description":"Color properties that apply to chart data colors."},"sheet":{"$ref":"#/types/aws-native:quicksight:ThemeSheetStyle","description":"Display options related to sheets."},"typography":{"$ref":"#/types/aws-native:quicksight:ThemeTypography","description":"Determines the typography options."},"uiColorPalette":{"$ref":"#/types/aws-native:quicksight:ThemeUiColorPalette","description":"Color properties that apply to the UI and to charts, excluding the colors that apply to data."}},"type":"object"},"aws-native:quicksight:ThemeDataColorPalette":{"description":"\u003cp\u003eThe theme colors that are used for data colors in charts. The colors description is a\n            hexadecimal color code that consists of six alphanumerical characters, prefixed with\n                \u003ccode\u003e#\u003c/code\u003e, for example #37BFF5. \u003c/p\u003e","properties":{"colors":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe hexadecimal codes for the colors.\u003c/p\u003e"},"emptyFillColor":{"type":"string","description":"\u003cp\u003eThe hexadecimal code of a color that applies to charts where a lack of data is\n            highlighted.\u003c/p\u003e"},"minMaxGradient":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe minimum and maximum hexadecimal codes that describe a color gradient. \u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:ThemeError":{"description":"\u003cp\u003eTheme error.\u003c/p\u003e","properties":{"message":{"type":"string","description":"\u003cp\u003eThe error message.\u003c/p\u003e"},"type":{"$ref":"#/types/aws-native:quicksight:ThemeErrorType","description":"The type of error."}},"type":"object"},"aws-native:quicksight:ThemeErrorType":{"type":"string","enum":[{"name":"InternalFailure","value":"INTERNAL_FAILURE"}]},"aws-native:quicksight:ThemeFont":{"properties":{"fontFamily":{"type":"string","description":"Determines the font family settings."}},"type":"object"},"aws-native:quicksight:ThemeGutterStyle":{"description":"\u003cp\u003eThe display options for gutter spacing between tiles on a sheet.\u003c/p\u003e","properties":{"show":{"type":"boolean","description":"\u003cp\u003eThis Boolean value controls whether to display a gutter space between sheet tiles.\n        \u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:ThemeMarginStyle":{"description":"\u003cp\u003eThe display options for margins around the outside edge of sheets.\u003c/p\u003e","properties":{"show":{"type":"boolean","description":"\u003cp\u003eThis Boolean value controls whether to display sheet margins.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:ThemeResourcePermission":{"description":"\u003cp\u003ePermission for the resource.\u003c/p\u003e","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe IAM action to grant or revoke permissions on.\u003c/p\u003e"},"principal":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the principal. This can be one of the\n            following:\u003c/p\u003e\n         \u003cul\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.)\u003c/p\u003e\n            \u003c/li\u003e\n            \u003cli\u003e\n               \u003cp\u003eThe ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight\n                    ARN. Use this option only to share resources (templates) across Amazon Web Services accounts.\n                    (This is less common.) \u003c/p\u003e\n            \u003c/li\u003e\n         \u003c/ul\u003e"}},"type":"object","required":["actions","principal"]},"aws-native:quicksight:ThemeResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Deleted","value":"DELETED"}]},"aws-native:quicksight:ThemeSheetStyle":{"description":"\u003cp\u003eThe theme display options for sheets. \u003c/p\u003e","properties":{"tile":{"$ref":"#/types/aws-native:quicksight:ThemeTileStyle","description":"The display options for tiles."},"tileLayout":{"$ref":"#/types/aws-native:quicksight:ThemeTileLayoutStyle","description":"The layout options for tiles."}},"type":"object"},"aws-native:quicksight:ThemeTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:ThemeTileLayoutStyle":{"description":"\u003cp\u003eThe display options for the layout of tiles on a sheet.\u003c/p\u003e","properties":{"gutter":{"$ref":"#/types/aws-native:quicksight:ThemeGutterStyle","description":"The gutter settings that apply between tiles."},"margin":{"$ref":"#/types/aws-native:quicksight:ThemeMarginStyle","description":"The margin settings that apply around the outside edge of sheets."}},"type":"object"},"aws-native:quicksight:ThemeTileStyle":{"description":"\u003cp\u003eDisplay options related to tiles on a sheet.\u003c/p\u003e","properties":{"border":{"$ref":"#/types/aws-native:quicksight:ThemeBorderStyle","description":"The border around a tile."}},"type":"object"},"aws-native:quicksight:ThemeType":{"type":"string","enum":[{"name":"Quicksight","value":"QUICKSIGHT"},{"name":"Custom","value":"CUSTOM"},{"name":"All","value":"ALL"}]},"aws-native:quicksight:ThemeTypography":{"properties":{"fontFamilies":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:ThemeFont"},"description":"Determines the list of font families."}},"type":"object"},"aws-native:quicksight:ThemeUiColorPalette":{"description":"\u003cp\u003eThe theme colors that apply to UI and to charts, excluding data colors. The colors\n            description is a hexadecimal color code that consists of six alphanumerical characters,\n            prefixed with \u003ccode\u003e#\u003c/code\u003e, for example #37BFF5. For more information, see \u003ca href=\"https://docs.aws.amazon.com/quicksight/latest/user/themes-in-quicksight.html\"\u003eUsing Themes in Amazon QuickSight\u003c/a\u003e in the \u003ci\u003eAmazon QuickSight User\n                Guide.\u003c/i\u003e\n         \u003c/p\u003e","properties":{"accent":{"type":"string","description":"\u003cp\u003eThis color is that applies to selected states and buttons.\u003c/p\u003e"},"accentForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any text or other elements that appear over the\n            accent color.\u003c/p\u003e"},"danger":{"type":"string","description":"\u003cp\u003eThe color that applies to error messages.\u003c/p\u003e"},"dangerForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any text or other elements that appear over the\n            error color.\u003c/p\u003e"},"dimension":{"type":"string","description":"\u003cp\u003eThe color that applies to the names of fields that are identified as\n            dimensions.\u003c/p\u003e"},"dimensionForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any text or other elements that appear over the\n            dimension color.\u003c/p\u003e"},"measure":{"type":"string","description":"\u003cp\u003eThe color that applies to the names of fields that are identified as measures.\u003c/p\u003e"},"measureForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any text or other elements that appear over the\n            measure color.\u003c/p\u003e"},"primaryBackground":{"type":"string","description":"\u003cp\u003eThe background color that applies to visuals and other high emphasis UI.\u003c/p\u003e"},"primaryForeground":{"type":"string","description":"\u003cp\u003eThe color of text and other foreground elements that appear over the primary\n            background regions, such as grid lines, borders, table banding, icons, and so on.\u003c/p\u003e"},"secondaryBackground":{"type":"string","description":"\u003cp\u003eThe background color that applies to the sheet background and sheet controls.\u003c/p\u003e"},"secondaryForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any sheet title, sheet control text, or UI that\n            appears over the secondary background.\u003c/p\u003e"},"success":{"type":"string","description":"\u003cp\u003eThe color that applies to success messages, for example the check mark for a\n            successful download.\u003c/p\u003e"},"successForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any text or other elements that appear over the\n            success color.\u003c/p\u003e"},"warning":{"type":"string","description":"\u003cp\u003eThis color that applies to warning and informational messages.\u003c/p\u003e"},"warningForeground":{"type":"string","description":"\u003cp\u003eThe foreground color that applies to any text or other elements that appear over the\n            warning color.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:ThemeVersion":{"description":"\u003cp\u003eA version of a theme.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"},"baseThemeId":{"type":"string","description":"\u003cp\u003eThe Amazon QuickSight-defined ID of the theme that a custom theme inherits from. All\n            themes initially inherit from a default Amazon QuickSight theme.\u003c/p\u003e"},"configuration":{"$ref":"#/types/aws-native:quicksight:ThemeConfiguration","description":"The theme configuration, which contains all the theme display properties."},"createdTime":{"type":"string","description":"\u003cp\u003eThe date and time that this theme version was created.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eThe description of the theme.\u003c/p\u003e"},"errors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:ThemeError"},"description":"\u003cp\u003eErrors associated with the theme.\u003c/p\u003e"},"status":{"$ref":"#/types/aws-native:quicksight:ThemeResourceStatus","description":"The status of the theme version."},"versionNumber":{"type":"number","description":"\u003cp\u003eThe version number of the theme.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:TopicAuthorSpecifiedAggregation":{"type":"string","enum":[{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"Median","value":"MEDIAN"},{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"},{"name":"Percentile","value":"PERCENTILE"}]},"aws-native:quicksight:TopicCalculatedField":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:TopicDefaultAggregation","description":"The default aggregation. Valid values for this structure are `SUM` , `MAX` , `MIN` , `COUNT` , `DISTINCT_COUNT` , and `AVERAGE` ."},"allowedAggregations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicAuthorSpecifiedAggregation"},"description":"The list of aggregation types that are allowed for the calculated field. Valid values for this structure are `COUNT` , `DISTINCT_COUNT` , `MIN` , `MAX` , `MEDIAN` , `SUM` , `AVERAGE` , `STDEV` , `STDEVP` , `VAR` , `VARP` , and `PERCENTILE` ."},"calculatedFieldDescription":{"type":"string","description":"The calculated field description."},"calculatedFieldName":{"type":"string","description":"The calculated field name."},"calculatedFieldSynonyms":{"type":"array","items":{"type":"string"},"description":"The other names or aliases for the calculated field."},"cellValueSynonyms":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicCellValueSynonym"},"description":"The other names or aliases for the calculated field cell value."},"columnDataRole":{"$ref":"#/types/aws-native:quicksight:TopicColumnDataRole","description":"The column data role for a calculated field. Valid values for this structure are `DIMENSION` and `MEASURE` ."},"comparativeOrder":{"$ref":"#/types/aws-native:quicksight:TopicComparativeOrder","description":"The order in which data is displayed for the calculated field when it's used in a comparative context."},"defaultFormatting":{"$ref":"#/types/aws-native:quicksight:TopicDefaultFormatting","description":"The default formatting definition."},"disableIndexing":{"type":"boolean","description":"A Boolean value that indicates if a calculated field is visible in the autocomplete."},"expression":{"type":"string","description":"The calculated field expression."},"isIncludedInTopic":{"type":"boolean","description":"A boolean value that indicates if a calculated field is included in the topic."},"neverAggregateInFilter":{"type":"boolean","description":"A Boolean value that indicates whether to never aggregate calculated field in filters."},"nonAdditive":{"type":"boolean","description":"The non additive for the table style target."},"notAllowedAggregations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicAuthorSpecifiedAggregation"},"description":"The list of aggregation types that are not allowed for the calculated field. Valid values for this structure are `COUNT` , `DISTINCT_COUNT` , `MIN` , `MAX` , `MEDIAN` , `SUM` , `AVERAGE` , `STDEV` , `STDEVP` , `VAR` , `VARP` , and `PERCENTILE` ."},"semanticType":{"$ref":"#/types/aws-native:quicksight:TopicSemanticType","description":"The semantic type."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TopicTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["calculatedFieldName","expression"]},"aws-native:quicksight:TopicCategoryFilter":{"properties":{"categoryFilterFunction":{"$ref":"#/types/aws-native:quicksight:TopicCategoryFilterFunction","description":"The category filter function. Valid values for this structure are `EXACT` and `CONTAINS` ."},"categoryFilterType":{"$ref":"#/types/aws-native:quicksight:TopicCategoryFilterType","description":"The category filter type. This element is used to specify whether a filter is a simple category filter or an inverse category filter."},"constant":{"$ref":"#/types/aws-native:quicksight:TopicCategoryFilterConstant","description":"The constant used in a category filter."},"inverse":{"type":"boolean","description":"A Boolean value that indicates if the filter is inverse."}},"type":"object"},"aws-native:quicksight:TopicCategoryFilterConstant":{"properties":{"collectiveConstant":{"$ref":"#/types/aws-native:quicksight:TopicCollectiveConstant","description":"A collective constant used in a category filter. This element is used to specify a list of values for the constant."},"constantType":{"$ref":"#/types/aws-native:quicksight:TopicConstantType","description":"The type of category filter constant. This element is used to specify whether a constant is a singular or collective. Valid values are `SINGULAR` and `COLLECTIVE` ."},"singularConstant":{"type":"string","description":"A singular constant used in a category filter. This element is used to specify a single value for the constant."}},"type":"object"},"aws-native:quicksight:TopicCategoryFilterFunction":{"type":"string","enum":[{"name":"Exact","value":"EXACT"},{"name":"Contains","value":"CONTAINS"}]},"aws-native:quicksight:TopicCategoryFilterType":{"type":"string","enum":[{"name":"CustomFilter","value":"CUSTOM_FILTER"},{"name":"CustomFilterList","value":"CUSTOM_FILTER_LIST"},{"name":"FilterList","value":"FILTER_LIST"}]},"aws-native:quicksight:TopicCellValueSynonym":{"properties":{"cellValue":{"type":"string","description":"The cell value."},"synonyms":{"type":"array","items":{"type":"string"},"description":"Other names or aliases for the cell value."}},"type":"object"},"aws-native:quicksight:TopicCollectiveConstant":{"properties":{"valueList":{"type":"array","items":{"type":"string"},"description":"A list of values for the collective constant."}},"type":"object"},"aws-native:quicksight:TopicColumn":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:TopicDefaultAggregation","description":"The type of aggregation that is performed on the column data when it's queried."},"allowedAggregations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicAuthorSpecifiedAggregation"},"description":"The list of aggregation types that are allowed for the column. Valid values for this structure are `COUNT` , `DISTINCT_COUNT` , `MIN` , `MAX` , `MEDIAN` , `SUM` , `AVERAGE` , `STDEV` , `STDEVP` , `VAR` , `VARP` , and `PERCENTILE` ."},"cellValueSynonyms":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicCellValueSynonym"},"description":"The other names or aliases for the column cell value."},"columnDataRole":{"$ref":"#/types/aws-native:quicksight:TopicColumnDataRole","description":"The role of the column in the data. Valid values are `DIMENSION` and `MEASURE` ."},"columnDescription":{"type":"string","description":"A description of the column and its contents."},"columnFriendlyName":{"type":"string","description":"A user-friendly name for the column."},"columnName":{"type":"string","description":"The name of the column."},"columnSynonyms":{"type":"array","items":{"type":"string"},"description":"The other names or aliases for the column."},"comparativeOrder":{"$ref":"#/types/aws-native:quicksight:TopicComparativeOrder","description":"The order in which data is displayed for the column when it's used in a comparative context."},"defaultFormatting":{"$ref":"#/types/aws-native:quicksight:TopicDefaultFormatting","description":"The default formatting used for values in the column."},"disableIndexing":{"type":"boolean","description":"A Boolean value that indicates whether the column shows in the autocomplete functionality."},"isIncludedInTopic":{"type":"boolean","description":"A Boolean value that indicates whether the column is included in the query results."},"neverAggregateInFilter":{"type":"boolean","description":"A Boolean value that indicates whether to aggregate the column data when it's used in a filter context."},"nonAdditive":{"type":"boolean","description":"The non additive value for the column."},"notAllowedAggregations":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicAuthorSpecifiedAggregation"},"description":"The list of aggregation types that are not allowed for the column. Valid values for this structure are `COUNT` , `DISTINCT_COUNT` , `MIN` , `MAX` , `MEDIAN` , `SUM` , `AVERAGE` , `STDEV` , `STDEVP` , `VAR` , `VARP` , and `PERCENTILE` ."},"semanticType":{"$ref":"#/types/aws-native:quicksight:TopicSemanticType","description":"The semantic type of data contained in the column."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TopicTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object","required":["columnName"]},"aws-native:quicksight:TopicColumnDataRole":{"type":"string","enum":[{"name":"Dimension","value":"DIMENSION"},{"name":"Measure","value":"MEASURE"}]},"aws-native:quicksight:TopicColumnOrderingType":{"type":"string","enum":[{"name":"GreaterIsBetter","value":"GREATER_IS_BETTER"},{"name":"LesserIsBetter","value":"LESSER_IS_BETTER"},{"name":"Specified","value":"SPECIFIED"}]},"aws-native:quicksight:TopicComparativeOrder":{"properties":{"specifedOrder":{"type":"array","items":{"type":"string"},"description":"The list of columns to be used in the ordering."},"treatUndefinedSpecifiedValues":{"$ref":"#/types/aws-native:quicksight:TopicUndefinedSpecifiedValueType","description":"The treat of undefined specified values. Valid values for this structure are `LEAST` and `MOST` ."},"useOrdering":{"$ref":"#/types/aws-native:quicksight:TopicColumnOrderingType","description":"The ordering type for a column. Valid values for this structure are `GREATER_IS_BETTER` , `LESSER_IS_BETTER` and `SPECIFIED` ."}},"type":"object"},"aws-native:quicksight:TopicConfigOptions":{"description":"Model for configuration of a Topic","properties":{"qBusinessInsightsEnabled":{"type":"boolean","description":"Enables Amazon Q Business Insights for a `Topic` ."}},"type":"object"},"aws-native:quicksight:TopicConstantType":{"type":"string","enum":[{"name":"Singular","value":"SINGULAR"},{"name":"Range","value":"RANGE"},{"name":"Collective","value":"COLLECTIVE"}]},"aws-native:quicksight:TopicCustomInstructions":{"properties":{"customInstructionsString":{"type":"string"}},"type":"object","required":["customInstructionsString"]},"aws-native:quicksight:TopicDataAggregation":{"properties":{"datasetRowDateGranularity":{"$ref":"#/types/aws-native:quicksight:TopicTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."},"defaultDateColumnName":{"type":"string","description":"The column name for the default date."}},"type":"object"},"aws-native:quicksight:TopicDatasetMetadata":{"properties":{"calculatedFields":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicCalculatedField"},"description":"The list of calculated field definitions."},"columns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicColumn"},"description":"The list of column definitions."},"dataAggregation":{"$ref":"#/types/aws-native:quicksight:TopicDataAggregation","description":"The definition of a data aggregation."},"datasetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset."},"datasetDescription":{"type":"string","description":"The description of the dataset."},"datasetName":{"type":"string","description":"The name of the dataset."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicFilter"},"description":"The list of filter definitions."},"namedEntities":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicNamedEntity"},"description":"The list of named entities definitions."}},"type":"object","required":["datasetArn"]},"aws-native:quicksight:TopicDateRangeFilter":{"properties":{"constant":{"$ref":"#/types/aws-native:quicksight:TopicRangeFilterConstant","description":"The constant used in a date range filter."},"inclusive":{"type":"boolean","description":"A Boolean value that indicates whether the date range filter should include the boundary values. If set to true, the filter includes the start and end dates. If set to false, the filter excludes them."}},"type":"object"},"aws-native:quicksight:TopicDefaultAggregation":{"type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"Max","value":"MAX"},{"name":"Min","value":"MIN"},{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Average","value":"AVERAGE"},{"name":"Median","value":"MEDIAN"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"}]},"aws-native:quicksight:TopicDefaultFormatting":{"properties":{"displayFormat":{"$ref":"#/types/aws-native:quicksight:TopicDisplayFormat","description":"The display format. Valid values for this structure are `AUTO` , `PERCENT` , `CURRENCY` , `NUMBER` , `DATE` , and `STRING` ."},"displayFormatOptions":{"$ref":"#/types/aws-native:quicksight:TopicDisplayFormatOptions","description":"The additional options for display formatting."}},"type":"object"},"aws-native:quicksight:TopicDisplayFormat":{"type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Percent","value":"PERCENT"},{"name":"Currency","value":"CURRENCY"},{"name":"Number","value":"NUMBER"},{"name":"Date","value":"DATE"},{"name":"String","value":"STRING"}]},"aws-native:quicksight:TopicDisplayFormatOptions":{"properties":{"blankCellFormat":{"type":"string","description":"Determines the blank cell format."},"currencySymbol":{"type":"string","description":"The currency symbol, such as `USD` ."},"dateFormat":{"type":"string","description":"Determines the `DateTime` format."},"decimalSeparator":{"$ref":"#/types/aws-native:quicksight:TopicNumericSeparatorSymbol","description":"Determines the decimal separator."},"fractionDigits":{"type":"number","description":"Determines the number of fraction digits."},"groupingSeparator":{"type":"string","description":"Determines the grouping separator."},"negativeFormat":{"$ref":"#/types/aws-native:quicksight:TopicNegativeFormat","description":"The negative format."},"prefix":{"type":"string","description":"The prefix value for a display format."},"suffix":{"type":"string","description":"The suffix value for a display format."},"unitScaler":{"$ref":"#/types/aws-native:quicksight:TopicNumberScale","description":"The unit scaler. Valid values for this structure are: `NONE` , `AUTO` , `THOUSANDS` , `MILLIONS` , `BILLIONS` , and `TRILLIONS` ."},"useBlankCellFormat":{"type":"boolean","description":"A Boolean value that indicates whether to use blank cell format."},"useGrouping":{"type":"boolean","description":"A Boolean value that indicates whether to use grouping."}},"type":"object"},"aws-native:quicksight:TopicFilter":{"properties":{"categoryFilter":{"$ref":"#/types/aws-native:quicksight:TopicCategoryFilter","description":"The category filter that is associated with this filter."},"dateRangeFilter":{"$ref":"#/types/aws-native:quicksight:TopicDateRangeFilter","description":"The date range filter."},"filterClass":{"$ref":"#/types/aws-native:quicksight:TopicFilterClass","description":"The class of the filter. Valid values for this structure are `ENFORCED_VALUE_FILTER` , `CONDITIONAL_VALUE_FILTER` , and `NAMED_VALUE_FILTER` ."},"filterDescription":{"type":"string","description":"A description of the filter used to select items for a topic."},"filterName":{"type":"string","description":"The name of the filter."},"filterSynonyms":{"type":"array","items":{"type":"string"},"description":"The other names or aliases for the filter."},"filterType":{"$ref":"#/types/aws-native:quicksight:TopicNamedFilterType","description":"The type of the filter. Valid values for this structure are `CATEGORY_FILTER` , `NUMERIC_EQUALITY_FILTER` , `NUMERIC_RANGE_FILTER` , `DATE_RANGE_FILTER` , and `RELATIVE_DATE_FILTER` ."},"numericEqualityFilter":{"$ref":"#/types/aws-native:quicksight:TopicNumericEqualityFilter","description":"The numeric equality filter."},"numericRangeFilter":{"$ref":"#/types/aws-native:quicksight:TopicNumericRangeFilter","description":"The numeric range filter."},"operandFieldName":{"type":"string","description":"The name of the field that the filter operates on."},"relativeDateFilter":{"$ref":"#/types/aws-native:quicksight:TopicRelativeDateFilter","description":"The relative date filter."}},"type":"object","required":["filterName","operandFieldName"]},"aws-native:quicksight:TopicFilterClass":{"type":"string","enum":[{"name":"EnforcedValueFilter","value":"ENFORCED_VALUE_FILTER"},{"name":"ConditionalValueFilter","value":"CONDITIONAL_VALUE_FILTER"},{"name":"NamedValueFilter","value":"NAMED_VALUE_FILTER"}]},"aws-native:quicksight:TopicNamedEntity":{"properties":{"definition":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicNamedEntityDefinition"},"description":"The definition of a named entity."},"entityDescription":{"type":"string","description":"The description of the named entity."},"entityName":{"type":"string","description":"The name of the named entity."},"entitySynonyms":{"type":"array","items":{"type":"string"},"description":"The other names or aliases for the named entity."},"semanticEntityType":{"$ref":"#/types/aws-native:quicksight:TopicSemanticEntityType","description":"The type of named entity that a topic represents."}},"type":"object","required":["entityName"]},"aws-native:quicksight:TopicNamedEntityAggType":{"type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"Min","value":"MIN"},{"name":"Max","value":"MAX"},{"name":"Count","value":"COUNT"},{"name":"Average","value":"AVERAGE"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"},{"name":"Percentile","value":"PERCENTILE"},{"name":"Median","value":"MEDIAN"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:quicksight:TopicNamedEntityDefinition":{"properties":{"fieldName":{"type":"string","description":"The name of the entity."},"metric":{"$ref":"#/types/aws-native:quicksight:TopicNamedEntityDefinitionMetric","description":"The definition of a metric."},"propertyName":{"type":"string","description":"The property name to be used for the named entity."},"propertyRole":{"$ref":"#/types/aws-native:quicksight:TopicPropertyRole","description":"The property role. Valid values for this structure are `PRIMARY` and `ID` ."},"propertyUsage":{"$ref":"#/types/aws-native:quicksight:TopicPropertyUsage","description":"The property usage. Valid values for this structure are `INHERIT` , `DIMENSION` , and `MEASURE` ."}},"type":"object"},"aws-native:quicksight:TopicNamedEntityDefinitionMetric":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:TopicNamedEntityAggType","description":"The aggregation of a named entity. Valid values for this structure are `SUM` , `MIN` , `MAX` , `COUNT` , `AVERAGE` , `DISTINCT_COUNT` , `STDEV` , `STDEVP` , `VAR` , `VARP` , `PERCENTILE` , `MEDIAN` , and `CUSTOM` ."},"aggregationFunctionParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional parameters for an aggregation function."}},"type":"object"},"aws-native:quicksight:TopicNamedFilterAggType":{"type":"string","enum":[{"name":"NoAggregation","value":"NO_AGGREGATION"},{"name":"Sum","value":"SUM"},{"name":"Average","value":"AVERAGE"},{"name":"Count","value":"COUNT"},{"name":"DistinctCount","value":"DISTINCT_COUNT"},{"name":"Max","value":"MAX"},{"name":"Median","value":"MEDIAN"},{"name":"Min","value":"MIN"},{"name":"Stdev","value":"STDEV"},{"name":"Stdevp","value":"STDEVP"},{"name":"Var","value":"VAR"},{"name":"Varp","value":"VARP"}]},"aws-native:quicksight:TopicNamedFilterType":{"type":"string","enum":[{"name":"CategoryFilter","value":"CATEGORY_FILTER"},{"name":"NumericEqualityFilter","value":"NUMERIC_EQUALITY_FILTER"},{"name":"NumericRangeFilter","value":"NUMERIC_RANGE_FILTER"},{"name":"DateRangeFilter","value":"DATE_RANGE_FILTER"},{"name":"RelativeDateFilter","value":"RELATIVE_DATE_FILTER"}]},"aws-native:quicksight:TopicNegativeFormat":{"properties":{"prefix":{"type":"string","description":"The prefix for a negative format."},"suffix":{"type":"string","description":"The suffix for a negative format."}},"type":"object"},"aws-native:quicksight:TopicNumberScale":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Auto","value":"AUTO"},{"name":"Thousands","value":"THOUSANDS"},{"name":"Millions","value":"MILLIONS"},{"name":"Billions","value":"BILLIONS"},{"name":"Trillions","value":"TRILLIONS"},{"name":"Lakhs","value":"LAKHS"},{"name":"Crores","value":"CRORES"}]},"aws-native:quicksight:TopicNumericEqualityFilter":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:TopicNamedFilterAggType","description":"An aggregation function that specifies how to calculate the value of a numeric field for a topic. Valid values for this structure are `NO_AGGREGATION` , `SUM` , `AVERAGE` , `COUNT` , `DISTINCT_COUNT` , `MAX` , `MEDIAN` , `MIN` , `STDEV` , `STDEVP` , `VAR` , and `VARP` ."},"constant":{"$ref":"#/types/aws-native:quicksight:TopicSingularFilterConstant","description":"The constant used in a numeric equality filter."}},"type":"object"},"aws-native:quicksight:TopicNumericRangeFilter":{"properties":{"aggregation":{"$ref":"#/types/aws-native:quicksight:TopicNamedFilterAggType","description":"An aggregation function that specifies how to calculate the value of a numeric field for a topic, Valid values for this structure are `NO_AGGREGATION` , `SUM` , `AVERAGE` , `COUNT` , `DISTINCT_COUNT` , `MAX` , `MEDIAN` , `MIN` , `STDEV` , `STDEVP` , `VAR` , and `VARP` ."},"constant":{"$ref":"#/types/aws-native:quicksight:TopicRangeFilterConstant","description":"The constant used in a numeric range filter."},"inclusive":{"type":"boolean","description":"A Boolean value that indicates whether the endpoints of the numeric range are included in the filter. If set to true, topics whose numeric field value is equal to the endpoint values will be included in the filter. If set to false, topics whose numeric field value is equal to the endpoint values will be excluded from the filter."}},"type":"object"},"aws-native:quicksight:TopicNumericSeparatorSymbol":{"type":"string","enum":[{"name":"Comma","value":"COMMA"},{"name":"Dot","value":"DOT"}]},"aws-native:quicksight:TopicPropertyRole":{"type":"string","enum":[{"name":"Primary","value":"PRIMARY"},{"name":"Id","value":"ID"}]},"aws-native:quicksight:TopicPropertyUsage":{"type":"string","enum":[{"name":"Inherit","value":"INHERIT"},{"name":"Dimension","value":"DIMENSION"},{"name":"Measure","value":"MEASURE"}]},"aws-native:quicksight:TopicRangeConstant":{"properties":{"maximum":{"type":"string","description":"The maximum value for a range constant."},"minimum":{"type":"string","description":"The minimum value for a range constant."}},"type":"object"},"aws-native:quicksight:TopicRangeFilterConstant":{"properties":{"constantType":{"$ref":"#/types/aws-native:quicksight:TopicConstantType","description":"The data type of the constant value that is used in a range filter. Valid values for this structure are `RANGE` ."},"rangeConstant":{"$ref":"#/types/aws-native:quicksight:TopicRangeConstant","description":"The value of the constant that is used to specify the endpoints of a range filter."}},"type":"object"},"aws-native:quicksight:TopicRelativeDateFilter":{"properties":{"constant":{"$ref":"#/types/aws-native:quicksight:TopicSingularFilterConstant","description":"The constant used in a relative date filter."},"relativeDateFilterFunction":{"$ref":"#/types/aws-native:quicksight:TopicRelativeDateFilterFunction","description":"The function to be used in a relative date filter to determine the range of dates to include in the results. Valid values for this structure are `BEFORE` , `AFTER` , and `BETWEEN` ."},"timeGranularity":{"$ref":"#/types/aws-native:quicksight:TopicTimeGranularity","description":"The level of time precision that is used to aggregate `DateTime` values."}},"type":"object"},"aws-native:quicksight:TopicRelativeDateFilterFunction":{"type":"string","enum":[{"name":"Previous","value":"PREVIOUS"},{"name":"This","value":"THIS"},{"name":"Last","value":"LAST"},{"name":"Next","value":"NEXT"},{"name":"Now","value":"NOW"}]},"aws-native:quicksight:TopicSemanticEntityType":{"properties":{"subTypeName":{"type":"string","description":"The semantic entity sub type name."},"typeName":{"type":"string","description":"The semantic entity type name."},"typeParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The semantic entity type parameters."}},"type":"object"},"aws-native:quicksight:TopicSemanticType":{"properties":{"falseyCellValue":{"type":"string","description":"The semantic type falsey cell value."},"falseyCellValueSynonyms":{"type":"array","items":{"type":"string"},"description":"The other names or aliases for the false cell value."},"subTypeName":{"type":"string","description":"The semantic type sub type name."},"truthyCellValue":{"type":"string","description":"The semantic type truthy cell value."},"truthyCellValueSynonyms":{"type":"array","items":{"type":"string"},"description":"The other names or aliases for the true cell value."},"typeName":{"type":"string","description":"The semantic type name."},"typeParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The semantic type parameters."}},"type":"object"},"aws-native:quicksight:TopicSingularFilterConstant":{"properties":{"constantType":{"$ref":"#/types/aws-native:quicksight:TopicConstantType","description":"The type of the singular filter constant. Valid values for this structure are `SINGULAR` ."},"singularConstant":{"type":"string","description":"The value of the singular filter constant."}},"type":"object"},"aws-native:quicksight:TopicTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:TopicTimeGranularity":{"type":"string","enum":[{"name":"Second","value":"SECOND"},{"name":"Minute","value":"MINUTE"},{"name":"Hour","value":"HOUR"},{"name":"Day","value":"DAY"},{"name":"Week","value":"WEEK"},{"name":"Month","value":"MONTH"},{"name":"Quarter","value":"QUARTER"},{"name":"Year","value":"YEAR"}]},"aws-native:quicksight:TopicUndefinedSpecifiedValueType":{"type":"string","enum":[{"name":"Least","value":"LEAST"},{"name":"Most","value":"MOST"}]},"aws-native:quicksight:TopicUserExperienceVersion":{"type":"string","enum":[{"name":"Legacy","value":"LEGACY"},{"name":"NewReaderExperience","value":"NEW_READER_EXPERIENCE"}]},"aws-native:quicksight:VpcConnectionNetworkInterface":{"description":"\u003cp\u003eThe structure that contains information about a network interface.\u003c/p\u003e","properties":{"availabilityZone":{"type":"string","description":"\u003cp\u003eThe availability zone that the network interface resides in.\u003c/p\u003e"},"errorMessage":{"type":"string","description":"\u003cp\u003eAn error message.\u003c/p\u003e"},"networkInterfaceId":{"type":"string","description":"\u003cp\u003eThe network interface ID.\u003c/p\u003e"},"status":{"$ref":"#/types/aws-native:quicksight:VpcConnectionNetworkInterfaceStatus","description":"The status of the network interface."},"subnetId":{"type":"string","description":"\u003cp\u003eThe subnet ID associated with the network interface.\u003c/p\u003e"}},"type":"object"},"aws-native:quicksight:VpcConnectionNetworkInterfaceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Available","value":"AVAILABLE"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"Updating","value":"UPDATING"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"DeletionFailed","value":"DELETION_FAILED"},{"name":"DeletionScheduled","value":"DELETION_SCHEDULED"},{"name":"AttachmentFailedRollbackFailed","value":"ATTACHMENT_FAILED_ROLLBACK_FAILED"}]},"aws-native:quicksight:VpcConnectionTag":{"description":"\u003cp\u003eThe key or keys of the key-value pairs for the resource tag or tags assigned to the\n            resource.\u003c/p\u003e","properties":{"key":{"type":"string","description":"\u003cp\u003eTag key.\u003c/p\u003e"},"value":{"type":"string","description":"\u003cp\u003eTag value.\u003c/p\u003e"}},"type":"object","required":["key","value"]},"aws-native:quicksight:VpcConnectionVpcConnectionAvailabilityStatus":{"type":"string","enum":[{"name":"Available","value":"AVAILABLE"},{"name":"Unavailable","value":"UNAVAILABLE"},{"name":"PartiallyAvailable","value":"PARTIALLY_AVAILABLE"}]},"aws-native:quicksight:VpcConnectionVpcConnectionResourceStatus":{"type":"string","enum":[{"name":"CreationInProgress","value":"CREATION_IN_PROGRESS"},{"name":"CreationSuccessful","value":"CREATION_SUCCESSFUL"},{"name":"CreationFailed","value":"CREATION_FAILED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateSuccessful","value":"UPDATE_SUCCESSFUL"},{"name":"UpdateFailed","value":"UPDATE_FAILED"},{"name":"DeletionInProgress","value":"DELETION_IN_PROGRESS"},{"name":"DeletionFailed","value":"DELETION_FAILED"},{"name":"Deleted","value":"DELETED"}]},"aws-native:ram:PermissionTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ram:ResourceShareFeatureSet":{"description":"The feature set of the resource share.","type":"string","enum":[{"name":"CreatedFromPolicy","value":"CREATED_FROM_POLICY"},{"name":"PromotingToStandard","value":"PROMOTING_TO_STANDARD"},{"name":"Standard","value":"STANDARD"}]},"aws-native:ram:ResourceShareStatus":{"description":"The current status of the resource share.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Active","value":"ACTIVE"},{"name":"Failed","value":"FAILED"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"}]},"aws-native:ram:ResourceShareTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:rbin:RuleResourceTag":{"description":"The resource tag of the rule.","properties":{"resourceTagKey":{"type":"string","description":"The tag key of the resource."},"resourceTagValue":{"type":"string","description":"The tag value of the resource"}},"type":"object","required":["resourceTagKey","resourceTagValue"]},"aws-native:rbin:RuleResourceType":{"description":"The resource type retained by the retention rule.","type":"string","enum":[{"name":"EbsSnapshot","value":"EBS_SNAPSHOT"},{"name":"Ec2Image","value":"EC2_IMAGE"},{"name":"EbsVolume","value":"EBS_VOLUME"}]},"aws-native:rbin:RuleRetentionPeriod":{"description":"The retention period of the rule.","properties":{"retentionPeriodUnit":{"$ref":"#/types/aws-native:rbin:RuleRetentionPeriodRetentionPeriodUnit","description":"The retention period unit of the rule"},"retentionPeriodValue":{"type":"integer","description":"The retention period value of the rule."}},"type":"object","required":["retentionPeriodUnit","retentionPeriodValue"]},"aws-native:rbin:RuleRetentionPeriodRetentionPeriodUnit":{"description":"The retention period unit of the rule","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:rbin:RuleTag":{"description":"Metadata of a retention rule, consisting of a key-value pair.","properties":{"key":{"type":"string","description":"A unique identifier for the tag."},"value":{"type":"string","description":"String which you can use to describe or define the tag."}},"type":"object","required":["key","value"]},"aws-native:rbin:RuleUnlockDelay":{"properties":{"unlockDelayUnit":{"$ref":"#/types/aws-native:rbin:RuleUnlockDelayUnlockDelayUnit","description":"The unit of time in which to measure the unlock delay. Currently, the unlock delay can be measure only in days."},"unlockDelayValue":{"type":"integer","description":"The unlock delay period, measured in the unit specified for UnlockDelayUnit."}},"type":"object"},"aws-native:rbin:RuleUnlockDelayUnlockDelayUnit":{"description":"The unit of time in which to measure the unlock delay. Currently, the unlock delay can be measure only in days.","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:rds:CustomDbEngineVersionStatus":{"description":"A value that indicates the status of a custom engine version (CEV).","type":"string","enum":[{"name":"Available","value":"available"},{"name":"Inactive","value":"inactive"},{"name":"InactiveExceptRestore","value":"inactive-except-restore"}]},"aws-native:rds:CustomDbEngineVersionTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:DbClusterDbClusterRole":{"description":"Describes an AWS Identity and Access Management (IAM) role that is associated with a DB cluster.","properties":{"featureName":{"type":"string","description":"The name of the feature associated with the AWS Identity and Access Management (IAM) role. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other AWS services on your behalf. For the list of supported feature names, see the ``SupportedFeatureNames`` description in [DBEngineVersion](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DBEngineVersion.html) in the *Amazon RDS API Reference*."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that is associated with the DB cluster."}},"type":"object","required":["roleArn"]},"aws-native:rds:DbClusterEndpoint":{"description":"The ``Endpoint`` return value specifies the connection endpoint for the primary instance of the DB cluster.","properties":{"address":{"type":"string","description":"Specifies the connection endpoint for the primary instance of the DB cluster."},"port":{"type":"string","description":"Specifies the port that the database engine is listening on."}},"type":"object"},"aws-native:rds:DbClusterMasterUserSecret":{"description":"The ``MasterUserSecret`` return value specifies the secret managed by RDS in AWS Secrets Manager for the master user password.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*","properties":{"kmsKeyId":{"type":"string","description":"The AWS KMS key identifier that is used to encrypt the secret."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the secret. This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see [Return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#aws-resource-rds-dbcluster-return-values)."}},"type":"object"},"aws-native:rds:DbClusterParameterGroupTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:DbClusterReadEndpoint":{"description":"The ``ReadEndpoint`` return value specifies the reader endpoint for the DB cluster.\n The reader endpoint for a DB cluster load-balances connections across the Aurora Replicas that are available in a DB cluster. As clients request new connections to the reader endpoint, Aurora distributes the connection requests among the Aurora Replicas in the DB cluster. This functionality can help balance your read workload across multiple Aurora Replicas in your DB cluster.\n If a failover occurs, and the Aurora Replica that you are connected to is promoted to be the primary instance, your connection is dropped. To continue sending your read workload to other Aurora Replicas in the cluster, you can then reconnect to the reader endpoint.\n For more information about Aurora endpoints, see [Amazon Aurora connection management](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.Endpoints.html) in the *Amazon Aurora User Guide*.","properties":{"address":{"type":"string","description":"The host address of the reader endpoint."}},"type":"object"},"aws-native:rds:DbClusterScalingConfiguration":{"description":"The ``ScalingConfiguration`` property type specifies the scaling configuration of an Aurora Serverless v1 DB cluster. \n For more information, see [Using Amazon Aurora Serverless](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html) in the *Amazon Aurora User Guide*.\n This property is only supported for Aurora Serverless v1. For Aurora Serverless v2, Use the ``ServerlessV2ScalingConfiguration`` property.\n Valid for: Aurora Serverless v1 DB clusters only","properties":{"autoPause":{"type":"boolean","description":"Indicates whether to allow or disallow automatic pause for an Aurora DB cluster in ``serverless`` DB engine mode. A DB cluster can be paused only when it's idle (it has no connections).\n  If a DB cluster is paused for more than seven days, the DB cluster might be backed up with a snapshot. In this case, the DB cluster is restored when there is a request to connect to it."},"maxCapacity":{"type":"integer","description":"The maximum capacity for an Aurora DB cluster in ``serverless`` DB engine mode.\n For Aurora MySQL, valid capacity values are ``1``, ``2``, ``4``, ``8``, ``16``, ``32``, ``64``, ``128``, and ``256``.\n For Aurora PostgreSQL, valid capacity values are ``2``, ``4``, ``8``, ``16``, ``32``, ``64``, ``192``, and ``384``.\n The maximum capacity must be greater than or equal to the minimum capacity."},"minCapacity":{"type":"integer","description":"The minimum capacity for an Aurora DB cluster in ``serverless`` DB engine mode.\n For Aurora MySQL, valid capacity values are ``1``, ``2``, ``4``, ``8``, ``16``, ``32``, ``64``, ``128``, and ``256``.\n For Aurora PostgreSQL, valid capacity values are ``2``, ``4``, ``8``, ``16``, ``32``, ``64``, ``192``, and ``384``.\n The minimum capacity must be less than or equal to the maximum capacity."},"secondsBeforeTimeout":{"type":"integer","description":"The amount of time, in seconds, that Aurora Serverless v1 tries to find a scaling point to perform seamless scaling before enforcing the timeout action. The default is 300.\n Specify a value between 60 and 600 seconds."},"secondsUntilAutoPause":{"type":"integer","description":"The time, in seconds, before an Aurora DB cluster in ``serverless`` mode is paused.\n Specify a value between 300 and 86,400 seconds."},"timeoutAction":{"type":"string","description":"The action to take when the timeout is reached, either ``ForceApplyCapacityChange`` or ``RollbackCapacityChange``.\n ``ForceApplyCapacityChange`` sets the capacity to the specified value as soon as possible.\n ``RollbackCapacityChange``, the default, ignores the capacity change if a scaling point isn't found in the timeout period.\n  If you specify ``ForceApplyCapacityChange``, connections that prevent Aurora Serverless v1 from finding a scaling point might be dropped.\n  For more information, see [Autoscaling for Aurora Serverless v1](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.how-it-works.html#aurora-serverless.how-it-works.auto-scaling) in the *Amazon Aurora User Guide*."}},"type":"object"},"aws-native:rds:DbClusterServerlessV2ScalingConfiguration":{"description":"The ``ServerlessV2ScalingConfiguration`` property type specifies the scaling configuration of an Aurora Serverless V2 DB cluster. For more information, see [Using Amazon Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.html) in the *Amazon Aurora User Guide*.\n If you have an Aurora cluster, you must set this attribute before you add a DB instance that uses the ``db.serverless`` DB instance class. For more information, see [Clusters that use Aurora Serverless v2 must have a capacity range specified](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html#aurora-serverless-v2.requirements.capacity-range) in the *Amazon Aurora User Guide*.\n This property is only supported for Aurora Serverless v2. For Aurora Serverless v1, use the ``ScalingConfiguration`` property.\n Valid for: Aurora Serverless v2 DB clusters","properties":{"maxCapacity":{"type":"number","description":"The maximum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 40, 40.5, 41, and so on. The largest value that you can use is 128.\n The maximum capacity must be higher than 0.5 ACUs. For more information, see [Choosing the maximum Aurora Serverless v2 capacity setting for a cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.setting-capacity.html#aurora-serverless-v2.max_capacity_considerations) in the *Amazon Aurora User Guide*.\n Aurora automatically sets certain parameters for Aurora Serverless V2 DB instances to values that depend on the maximum ACU value in the capacity range. When you update the maximum capacity value, the ``ParameterApplyStatus`` value for the DB instance changes to ``pending-reboot``. You can update the parameter values by rebooting the DB instance after changing the capacity range."},"minCapacity":{"type":"number","description":"The minimum number of Aurora capacity units (ACUs) for a DB instance in an Aurora Serverless v2 cluster. You can specify ACU values in half-step increments, such as 8, 8.5, 9, and so on. For Aurora versions that support the Aurora Serverless v2 auto-pause feature, the smallest value that you can use is 0. For versions that don't support Aurora Serverless v2 auto-pause, the smallest value that you can use is 0.5."},"secondsUntilAutoPause":{"type":"integer","description":"Specifies the number of seconds an Aurora Serverless v2 DB instance must be idle before Aurora attempts to automatically pause it. \n Specify a value between 300 seconds (five minutes) and 86,400 seconds (one day). The default is 300 seconds."}},"type":"object"},"aws-native:rds:DbClusterTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:DbInstanceAdditionalStorageVolume":{"description":"Contains details about an additional storage volume for a DB instance. RDS support additional storage volumes for RDS for Oracle and RDS for SQL Server.","properties":{"allocatedStorage":{"type":"string","description":"The amount of storage allocated for the additional storage volume, in gibibytes (GiB). The minimum is 20 GiB. The maximum is 65,536 GiB (64 TiB)."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS) provisioned for the additional storage volume."},"maxAllocatedStorage":{"type":"integer","description":"The upper limit in gibibytes (GiB) to which RDS can automatically scale the storage of the additional storage volume."},"storageThroughput":{"type":"integer","description":"The storage throughput value for the additional storage volume, in mebibytes per second (MiBps). This setting applies only to the General Purpose SSD (``gp3``) storage type."},"storageType":{"type":"string","description":"The storage type for the additional storage volume.\n Valid Values: ``GP3 | IO2``"},"volumeName":{"type":"string","description":"The name of the additional storage volume.\n Valid Values: ``RDSDBDATA2 | RDSDBDATA3 | RDSDBDATA4``"}},"type":"object"},"aws-native:rds:DbInstanceCertificateDetails":{"description":"The details of the DB instance’s server certificate.\n For more information, see [Using SSL/TLS to encrypt a connection to a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html) in the *Amazon RDS User Guide* and [Using SSL/TLS to encrypt a connection to a DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html) in the *Amazon Aurora User Guide*.","properties":{"caIdentifier":{"type":"string","description":"The CA identifier of the CA certificate used for the DB instance's server certificate."},"validTill":{"type":"string","description":"The expiration date of the DB instance’s server certificate."}},"type":"object"},"aws-native:rds:DbInstanceDbInstanceRole":{"description":"Information about an AWS Identity and Access Management (IAM) role that is associated with a DB instance.","properties":{"featureName":{"type":"string","description":"The name of the feature associated with the AWS Identity and Access Management (IAM) role. IAM roles that are associated with a DB instance grant permission for the DB instance to access other AWS services on your behalf. For the list of supported feature names, see the ``SupportedFeatureNames`` description in [DBEngineVersion](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DBEngineVersion.html) in the *Amazon RDS API Reference*."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that is associated with the DB instance."}},"type":"object","required":["featureName","roleArn"]},"aws-native:rds:DbInstanceDbInstanceStatusInfo":{"description":"Provides a list of status information for a DB instance.","properties":{"message":{"type":"string","description":"Details of the error if there is an error for the instance. If the instance isn't in an error state, this value is blank."},"normal":{"type":"boolean","description":"Indicates whether the instance is operating normally (TRUE) or is in an error state (FALSE)."},"status":{"type":"string","description":"The status of the DB instance. For a StatusType of read replica, the values can be replicating, replication stop point set, replication stop point reached, error, stopped, or terminated."},"statusType":{"type":"string","description":"This value is currently \"read replication.\""}},"type":"object"},"aws-native:rds:DbInstanceEndpoint":{"description":"This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions:\n  +   ``CreateDBInstance`` \n  +   ``DescribeDBInstances`` \n  +   ``DeleteDBInstance`` \n  \n For the data structure that represents Amazon Aurora DB cluster endpoints, see ``DBClusterEndpoint``.","properties":{"address":{"type":"string","description":"Specifies the DNS address of the DB instance."},"hostedZoneId":{"type":"string","description":"Specifies the ID that Amazon Route 53 assigns when you create a hosted zone."},"port":{"type":"string","description":"Specifies the port that the database engine is listening on."}},"type":"object"},"aws-native:rds:DbInstanceMasterUserSecret":{"description":"The ``MasterUserSecret`` return value specifies the secret managed by RDS in AWS Secrets Manager for the master user password.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*","properties":{"kmsKeyId":{"type":"string","description":"The AWS KMS key identifier that is used to encrypt the secret."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the secret. This parameter is a return value that you can retrieve using the ``Fn::GetAtt`` intrinsic function. For more information, see [Return values](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbinstance.html#aws-resource-rds-dbinstance-return-values)."}},"type":"object"},"aws-native:rds:DbInstanceProcessorFeature":{"description":"The ``ProcessorFeature`` property type specifies the processor features of a DB instance class.","properties":{"name":{"$ref":"#/types/aws-native:rds:DbInstanceProcessorFeatureName","description":"The name of the processor feature. Valid names are ``coreCount`` and ``threadsPerCore``."},"value":{"type":"string","description":"The value of a processor feature."}},"type":"object"},"aws-native:rds:DbInstanceProcessorFeatureName":{"description":"The name of the processor feature. Valid names are ``coreCount`` and ``threadsPerCore``.","type":"string","enum":[{"name":"CoreCount","value":"coreCount"},{"name":"ThreadsPerCore","value":"threadsPerCore"}]},"aws-native:rds:DbInstanceTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:DbParameterGroupTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:DbProxyAuthFormat":{"properties":{"authScheme":{"$ref":"#/types/aws-native:rds:DbProxyAuthFormatAuthScheme","description":"The type of authentication that the proxy uses for connections from the proxy to the underlying database. "},"clientPasswordAuthType":{"$ref":"#/types/aws-native:rds:DbProxyAuthFormatClientPasswordAuthType","description":"The type of authentication the proxy uses for connections from clients."},"description":{"type":"string","description":"A user-specified description about the authentication used by a proxy to log in as a specific database user. "},"iamAuth":{"$ref":"#/types/aws-native:rds:DbProxyAuthFormatIamAuth","description":"Whether to require or disallow Amazon Web Services Identity and Access Management (IAM) authentication for connections to the proxy. The ENABLED value is valid only for proxies with RDS for Microsoft SQL Server."},"secretArn":{"type":"string","description":"The Amazon Resource Name (ARN) representing the secret that the proxy uses to authenticate to the RDS DB instance or Aurora DB cluster. These secrets are stored within Amazon Secrets Manager. "}},"type":"object"},"aws-native:rds:DbProxyAuthFormatAuthScheme":{"description":"The type of authentication that the proxy uses for connections from the proxy to the underlying database. ","type":"string","enum":[{"name":"Secrets","value":"SECRETS"}]},"aws-native:rds:DbProxyAuthFormatClientPasswordAuthType":{"description":"The type of authentication the proxy uses for connections from clients.","type":"string","enum":[{"name":"MysqlNativePassword","value":"MYSQL_NATIVE_PASSWORD"},{"name":"MysqlCachingSha2Password","value":"MYSQL_CACHING_SHA2_PASSWORD"},{"name":"PostgresScramSha256","value":"POSTGRES_SCRAM_SHA_256"},{"name":"PostgresMd5","value":"POSTGRES_MD5"},{"name":"SqlServerAuthentication","value":"SQL_SERVER_AUTHENTICATION"}]},"aws-native:rds:DbProxyAuthFormatIamAuth":{"description":"Whether to require or disallow Amazon Web Services Identity and Access Management (IAM) authentication for connections to the proxy. The ENABLED value is valid only for proxies with RDS for Microsoft SQL Server.","type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Required","value":"REQUIRED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:rds:DbProxyDefaultAuthScheme":{"description":"The default authentication scheme that the proxy uses for client connections to the proxy and connections from the proxy to the underlying database.","type":"string","enum":[{"name":"IamAuth","value":"IAM_AUTH"},{"name":"None","value":"NONE"}]},"aws-native:rds:DbProxyEndpointEndpointNetworkType":{"description":"The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"},{"name":"Dual","value":"DUAL"}]},"aws-native:rds:DbProxyEndpointNetworkType":{"description":"The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"},{"name":"Dual","value":"DUAL"}]},"aws-native:rds:DbProxyEndpointTagFormat":{"properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object"},"aws-native:rds:DbProxyEndpointTargetRole":{"description":"A value that indicates whether the DB proxy endpoint can be used for read/write or read-only operations.","type":"string","enum":[{"name":"ReadWrite","value":"READ_WRITE"},{"name":"ReadOnly","value":"READ_ONLY"}]},"aws-native:rds:DbProxyEngineFamily":{"description":"The kinds of databases that the proxy can connect to.","type":"string","enum":[{"name":"Mysql","value":"MYSQL"},{"name":"Postgresql","value":"POSTGRESQL"},{"name":"Sqlserver","value":"SQLSERVER"}]},"aws-native:rds:DbProxyTagFormat":{"properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with `aws:` or `rds:` . The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object"},"aws-native:rds:DbProxyTargetConnectionNetworkType":{"description":"The network type that the proxy uses to connect to the target database. The network type determines the IP version that the proxy uses for connections to the database.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"}]},"aws-native:rds:DbProxyTargetGroupConnectionPoolConfigurationInfoFormat":{"properties":{"connectionBorrowTimeout":{"type":"integer","description":"The number of seconds for a proxy to wait for a connection to become available in the connection pool."},"initQuery":{"type":"string","description":"One or more SQL statements for the proxy to run when opening each new database connection."},"maxConnectionsPercent":{"type":"integer","description":"The maximum size of the connection pool for each target in a target group."},"maxIdleConnectionsPercent":{"type":"integer","description":"Controls how actively the proxy closes idle database connections in the connection pool."},"sessionPinningFilters":{"type":"array","items":{"type":"string"},"description":"Each item in the list represents a class of SQL operations that normally cause all later statements in a session using a proxy to be pinned to the same underlying database connection."}},"type":"object"},"aws-native:rds:DbProxyTargetGroupTargetGroupName":{"description":"The identifier for the DBProxyTargetGroup","type":"string","enum":[{"name":"Default","value":"default"}]},"aws-native:rds:DbShardGroupTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:DbSubnetGroupTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:EventSubscriptionTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:GlobalClusterEngine":{"description":"The name of the database engine to be used for this DB cluster. Valid Values: aurora (for MySQL 5.6-compatible Aurora), aurora-mysql (for MySQL 5.7-compatible Aurora).\nIf you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster.","type":"string","enum":[{"name":"Aurora","value":"aurora"},{"name":"AuroraMysql","value":"aurora-mysql"},{"name":"AuroraPostgresql","value":"aurora-postgresql"}]},"aws-native:rds:GlobalClusterGlobalEndpoint":{"properties":{"address":{"type":"string","description":"The writer endpoint for the global database cluster. This endpoint always points to the writer DB instance in the current primary cluster."}},"type":"object"},"aws-native:rds:GlobalClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:rds:IntegrationTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:rds:OptionGroupOptionConfiguration":{"description":"The ``OptionConfiguration`` property type specifies an individual option, and its settings, within an ``AWS::RDS::OptionGroup`` resource.","properties":{"dbSecurityGroupMemberships":{"type":"array","items":{"type":"string"},"description":"A list of DB security groups used for this option."},"optionName":{"type":"string","description":"The configuration of options to include in a group."},"optionSettings":{"type":"array","items":{"$ref":"#/types/aws-native:rds:OptionGroupOptionSetting"},"description":"The option settings to include in an option group."},"optionVersion":{"type":"string","description":"The version for the option."},"port":{"type":"integer","description":"The optional port for the option."},"vpcSecurityGroupMemberships":{"type":"array","items":{"type":"string"},"description":"A list of VPC security group names used for this option."}},"type":"object","required":["optionName"]},"aws-native:rds:OptionGroupOptionSetting":{"description":"The ``OptionSetting`` property type specifies the value for an option within an ``OptionSetting`` property.","properties":{"name":{"type":"string","description":"The name of the option that has settings that you can set."},"value":{"type":"string","description":"The current value of the option setting."}},"type":"object"},"aws-native:rds:OptionGroupTag":{"description":"Metadata assigned to an Amazon RDS resource consisting of a key-value pair.\n For more information, see [Tagging Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide* or [Tagging Amazon Aurora and Amazon RDS resources](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Tagging.html) in the *Amazon Aurora User Guide*.","properties":{"key":{"type":"string","description":"A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."},"value":{"type":"string","description":"A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with ``aws:`` or ``rds:``. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\")."}},"type":"object","required":["key"]},"aws-native:redshift:ClusterEndpoint":{"properties":{"address":{"type":"string","description":"The DNS address of the cluster. This property is read only."},"port":{"type":"string","description":"The port that the database engine is listening on. This property is read only."}},"type":"object"},"aws-native:redshift:ClusterLoggingProperties":{"properties":{"bucketName":{"type":"string","description":"The name of an existing S3 bucket where the log files are to be stored.\n\nConstraints:\n\n- Must be in the same region as the cluster\n- The cluster must have read bucket and put object permissions"},"logDestinationType":{"type":"string","description":"The log destination type. An enum with possible values of `s3` and `cloudwatch` ."},"logExports":{"type":"array","items":{"type":"string"},"description":"The collection of exported log types. Possible values are `connectionlog` , `useractivitylog` , and `userlog` ."},"s3KeyPrefix":{"type":"string","description":"The prefix applied to the log file names.\n\nValid characters are any letter from any language, any whitespace character, any numeric character, and the following characters: underscore ( `_` ), period ( `.` ), colon ( `:` ), slash ( `/` ), equal ( `=` ), plus ( `+` ), backslash ( `\\` ), hyphen ( `-` ), at symbol ( `@` )."}},"type":"object"},"aws-native:redshift:ClusterParameterGroupParameter":{"properties":{"parameterName":{"type":"string","description":"The name of the parameter."},"parameterValue":{"type":"string","description":"The value of the parameter. If `ParameterName` is `wlm_json_configuration`, then the maximum size of `ParameterValue` is 8000 characters."}},"type":"object","required":["parameterName","parameterValue"]},"aws-native:redshift:ClusterParameterGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:redshift:ClusterSubnetGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:redshift:ClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:redshift:EndpointAccessNetworkInterface":{"description":"Describes a network interface.","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone."},"networkInterfaceId":{"type":"string","description":"The network interface identifier."},"privateIpAddress":{"type":"string","description":"The IPv4 address of the network interface within the subnet."},"subnetId":{"type":"string","description":"The subnet identifier."}},"type":"object"},"aws-native:redshift:EndpointAccessVpcSecurityGroup":{"description":"Describes the members of a VPC security group.","properties":{"status":{"type":"string","description":"The status of the VPC security group."},"vpcSecurityGroupId":{"type":"string","description":"The identifier of the VPC security group."}},"type":"object"},"aws-native:redshift:EventSubscriptionEventCategoriesItem":{"type":"string","enum":[{"name":"Configuration","value":"configuration"},{"name":"Management","value":"management"},{"name":"Monitoring","value":"monitoring"},{"name":"Security","value":"security"},{"name":"Pending","value":"pending"}]},"aws-native:redshift:EventSubscriptionSeverity":{"description":"Specifies the Amazon Redshift event severity to be published by the event notification subscription.","type":"string","enum":[{"name":"Error","value":"ERROR"},{"name":"Info","value":"INFO"}]},"aws-native:redshift:EventSubscriptionSourceType":{"description":"The type of source that will be generating the events.","type":"string","enum":[{"name":"Cluster","value":"cluster"},{"name":"ClusterParameterGroup","value":"cluster-parameter-group"},{"name":"ClusterSecurityGroup","value":"cluster-security-group"},{"name":"ClusterSnapshot","value":"cluster-snapshot"},{"name":"ScheduledAction","value":"scheduled-action"}]},"aws-native:redshift:EventSubscriptionStatus":{"description":"The status of the Amazon Redshift event notification subscription.","type":"string","enum":[{"name":"Active","value":"active"},{"name":"NoPermission","value":"no-permission"},{"name":"TopicNotExist","value":"topic-not-exist"}]},"aws-native:redshift:EventSubscriptionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:redshift:IntegrationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:redshift:ScheduledActionState":{"description":"The state of the scheduled action.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:redshift:ScheduledActionType":{"type":"object"},"aws-native:redshift:VpcEndpointProperties":{"description":"The connection endpoint for connecting to an Amazon Redshift cluster through the proxy.","properties":{"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:redshift:EndpointAccessNetworkInterface"},"description":"One or more network interfaces of the endpoint. Also known as an interface endpoint."},"vpcEndpointId":{"type":"string","description":"The connection endpoint ID for connecting an Amazon Redshift cluster through the proxy."},"vpcId":{"type":"string","description":"The VPC identifier that the endpoint is associated."}},"type":"object"},"aws-native:redshiftserverless:Namespace":{"properties":{"adminPasswordSecretArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the namespace's admin user credentials secret."},"adminPasswordSecretKmsKeyId":{"type":"string","description":"The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret."},"adminUsername":{"type":"string","description":"The username of the administrator for the first database created in the namespace."},"creationDate":{"type":"string","description":"The date of when the namespace was created."},"dbName":{"type":"string","description":"The name of the first database created in the namespace."},"defaultIamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to set as a default in the namespace."},"iamRoles":{"type":"array","items":{"type":"string"},"description":"A list of IAM roles to associate with the namespace."},"kmsKeyId":{"type":"string","description":"The ID of the AWS Key Management Service key used to encrypt your data."},"logExports":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceLogExport"},"description":"The types of logs the namespace can export. Available export types are User log, Connection log, and User activity log."},"namespaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) associated with a namespace."},"namespaceId":{"type":"string","description":"The unique identifier of a namespace."},"namespaceName":{"type":"string","description":"The name of the namespace. Must be between 3-64 alphanumeric characters in lowercase, and it cannot be a reserved word. A list of reserved words can be found in [Reserved Words](https://docs.aws.amazon.com//redshift/latest/dg/r_pg_keywords.html) in the Amazon Redshift Database Developer Guide."},"status":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceStatus","description":"The status of the namespace."}},"type":"object"},"aws-native:redshiftserverless:NamespaceLogExport":{"type":"string","enum":[{"name":"Useractivitylog","value":"useractivitylog"},{"name":"Userlog","value":"userlog"},{"name":"Connectionlog","value":"connectionlog"}]},"aws-native:redshiftserverless:NamespaceSnapshotCopyConfiguration":{"properties":{"destinationKmsKeyId":{"type":"string","description":"The ID of the KMS key to use to encrypt your snapshots in the destination AWS Region ."},"destinationRegion":{"type":"string","description":"The destination AWS Region to copy snapshots to."},"snapshotRetentionPeriod":{"type":"integer","description":"The retention period of snapshots that are copied to the destination AWS Region ."}},"type":"object","required":["destinationRegion"]},"aws-native:redshiftserverless:NamespaceStatus":{"type":"string","enum":[{"name":"Available","value":"AVAILABLE"},{"name":"Modifying","value":"MODIFYING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:redshiftserverless:NamespaceTag":{"properties":{"key":{"type":"string","description":"The key to use in the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:redshiftserverless:Snapshot":{"properties":{"adminUsername":{"type":"string","description":"The username of the database within a snapshot."},"kmsKeyId":{"type":"string","description":"The unique identifier of the KMS key used to encrypt the snapshot."},"namespaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the namespace the snapshot was created from."},"namespaceName":{"type":"string","description":"The name of the namepsace."},"ownerAccount":{"type":"string","description":"The owner AWS ; account of the snapshot."},"retentionPeriod":{"type":"integer"},"snapshotArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the snapshot."},"snapshotCreateTime":{"type":"string","description":"The timestamp of when the snapshot was created."},"snapshotName":{"type":"string","description":"The name of the snapshot."},"status":{"$ref":"#/types/aws-native:redshiftserverless:SnapshotStatus","description":"The status of the snapshot."}},"type":"object"},"aws-native:redshiftserverless:SnapshotStatus":{"type":"string","enum":[{"name":"Available","value":"AVAILABLE"},{"name":"Creating","value":"CREATING"},{"name":"Deleted","value":"DELETED"},{"name":"Cancelled","value":"CANCELLED"},{"name":"Failed","value":"FAILED"},{"name":"Copying","value":"COPYING"}]},"aws-native:redshiftserverless:SnapshotTag":{"properties":{"key":{"type":"string","description":"The key to use in the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:redshiftserverless:Workgroup":{"properties":{"baseCapacity":{"type":"integer","description":"The base data warehouse capacity of the workgroup in Redshift Processing Units (RPUs)."},"configParameters":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupConfigParameter"},"description":"An array of parameters to set for advanced control over a database. The options are `auto_mv` , `datestyle` , `enable_case_sensitive_identifier` , `enable_user_activity_logging` , `query_group` , `search_path` , `require_ssl` , `use_fips_ssl` , and query monitoring metrics that let you define performance boundaries. For more information about query monitoring rules and available metrics, see [Query monitoring metrics for Amazon Redshift Serverless](https://docs.aws.amazon.com/redshift/latest/dg/cm-c-wlm-query-monitoring-rules.html#cm-c-wlm-query-monitoring-metrics-serverless) ."},"creationDate":{"type":"string","description":"The creation date of the workgroup."},"endpoint":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupEndpoint","description":"The endpoint that is created from the workgroup."},"enhancedVpcRouting":{"type":"boolean","description":"The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC."},"maxCapacity":{"type":"integer","description":"The maximum data-warehouse capacity Amazon Redshift Serverless uses to serve queries. The max capacity is specified in RPUs."},"namespaceName":{"type":"string","description":"The namespace the workgroup is associated with."},"pricePerformanceTarget":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget","description":"An object that represents the price performance target settings for the workgroup."},"publiclyAccessible":{"type":"boolean","description":"A value that specifies whether the workgroup can be accessible from a public network."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"An array of security group IDs to associate with the workgroup."},"status":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupStatus","description":"The status of the workgroup."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"An array of subnet IDs the workgroup is associated with."},"trackName":{"type":"string","description":"The name of the track for the workgroup."},"workgroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) that links to the workgroup."},"workgroupId":{"type":"string","description":"The unique identifier of the workgroup."},"workgroupName":{"type":"string","description":"The name of the workgroup."}},"type":"object"},"aws-native:redshiftserverless:WorkgroupConfigParameter":{"properties":{"parameterKey":{"type":"string","description":"The key of the parameter. The options are `auto_mv` , `datestyle` , `enable_case_sensitive_identifier` , `enable_user_activity_logging` , `query_group` , `search_path` , `require_ssl` , `use_fips_ssl` , and query monitoring metrics that let you define performance boundaries. For more information about query monitoring rules and available metrics, see [Query monitoring metrics for Amazon Redshift Serverless](https://docs.aws.amazon.com/redshift/latest/dg/cm-c-wlm-query-monitoring-rules.html#cm-c-wlm-query-monitoring-metrics-serverless) ."},"parameterValue":{"type":"string","description":"The value of the parameter to set."}},"type":"object"},"aws-native:redshiftserverless:WorkgroupEndpoint":{"properties":{"address":{"type":"string","description":"The DNS address of the VPC endpoint."},"port":{"type":"integer","description":"The port that Amazon Redshift Serverless listens on."},"vpcEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupVpcEndpoint"},"description":"An array of `VpcEndpoint` objects."}},"type":"object"},"aws-native:redshiftserverless:WorkgroupNetworkInterface":{"properties":{"availabilityZone":{"type":"string","description":"The availability Zone."},"networkInterfaceId":{"type":"string","description":"The unique identifier of the network interface."},"privateIpAddress":{"type":"string","description":"The IPv4 address of the network interface within the subnet."},"subnetId":{"type":"string","description":"The unique identifier of the subnet."}},"type":"object"},"aws-native:redshiftserverless:WorkgroupPerformanceTarget":{"properties":{"level":{"type":"integer","description":"The target price performance level for the workgroup. Valid values include 1, 25, 50, 75, and 100. These correspond to the price performance levels LOW_COST, ECONOMICAL, BALANCED, RESOURCEFUL, and HIGH_PERFORMANCE."},"status":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupPerformanceTargetStatus","description":"Whether the price performance target is enabled for the workgroup."}},"type":"object"},"aws-native:redshiftserverless:WorkgroupPerformanceTargetStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:redshiftserverless:WorkgroupStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Available","value":"AVAILABLE"},{"name":"Modifying","value":"MODIFYING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:redshiftserverless:WorkgroupTag":{"properties":{"key":{"type":"string","description":"The key to use in the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:redshiftserverless:WorkgroupVpcEndpoint":{"properties":{"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupNetworkInterface"},"description":"One or more network interfaces of the endpoint. Also known as an interface endpoint."},"vpcEndpointId":{"type":"string","description":"The connection endpoint ID for connecting to Amazon Redshift Serverless."},"vpcId":{"type":"string","description":"The VPC identifier that the endpoint is associated with."}},"type":"object"},"aws-native:refactorspaces:ApplicationApiGatewayEndpointType":{"type":"string","enum":[{"name":"Regional","value":"REGIONAL"},{"name":"Private","value":"PRIVATE"}]},"aws-native:refactorspaces:ApplicationApiGatewayProxyInput":{"properties":{"endpointType":{"$ref":"#/types/aws-native:refactorspaces:ApplicationApiGatewayEndpointType","description":"The type of endpoint to use for the API Gateway proxy. If no value is specified in the request, the value is set to `REGIONAL` by default.\n\nIf the value is set to `PRIVATE` in the request, this creates a private API endpoint that is isolated from the public internet. The private endpoint can only be accessed by using Amazon Virtual Private Cloud (Amazon VPC) interface endpoints for the Amazon API Gateway that has been granted access. For more information about creating a private connection with Refactor Spaces and interface endpoint ( AWS PrivateLink ) availability, see [Access Refactor Spaces using an interface endpoint ( AWS PrivateLink )](https://docs.aws.amazon.com/migrationhub-refactor-spaces/latest/userguide/vpc-interface-endpoints.html) ."},"stageName":{"type":"string","description":"The name of the API Gateway stage. The name defaults to `prod` ."}},"type":"object"},"aws-native:refactorspaces:ApplicationProxyType":{"type":"string","enum":[{"name":"ApiGateway","value":"API_GATEWAY"}]},"aws-native:refactorspaces:ApplicationTag":{"description":"A label for tagging Environment resource","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:refactorspaces:EnvironmentNetworkFabricType":{"type":"string","enum":[{"name":"TransitGateway","value":"TRANSIT_GATEWAY"},{"name":"None","value":"NONE"}]},"aws-native:refactorspaces:EnvironmentTag":{"description":"A label for tagging Environment resource","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:refactorspaces:RouteActivationState":{"type":"string","enum":[{"name":"Inactive","value":"INACTIVE"},{"name":"Active","value":"ACTIVE"}]},"aws-native:refactorspaces:RouteDefaultRouteInput":{"properties":{"activationState":{"$ref":"#/types/aws-native:refactorspaces:RouteActivationState","description":"If set to `ACTIVE` , traffic is forwarded to this route’s service after the route is created."}},"type":"object","required":["activationState"]},"aws-native:refactorspaces:RouteMethod":{"type":"string","enum":[{"name":"Delete","value":"DELETE"},{"name":"Get","value":"GET"},{"name":"Head","value":"HEAD"},{"name":"Options","value":"OPTIONS"},{"name":"Patch","value":"PATCH"},{"name":"Post","value":"POST"},{"name":"Put","value":"PUT"}]},"aws-native:refactorspaces:RouteTag":{"description":"A label for tagging Environment resource","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:refactorspaces:RouteType":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"UriPath","value":"URI_PATH"}]},"aws-native:refactorspaces:RouteUriPathRouteInput":{"properties":{"activationState":{"$ref":"#/types/aws-native:refactorspaces:RouteActivationState","description":"If set to `ACTIVE` , traffic is forwarded to this route’s service after the route is created."},"appendSourcePath":{"type":"boolean","description":"If set to `true` , this option appends the source path to the service URL endpoint.","replaceOnChanges":true},"includeChildPaths":{"type":"boolean","description":"Indicates whether to match all subpaths of the given source path. If this value is `false` , requests must match the source path exactly before they are forwarded to this route's service.","replaceOnChanges":true},"methods":{"type":"array","items":{"$ref":"#/types/aws-native:refactorspaces:RouteMethod"},"description":"A list of HTTP methods to match. An empty list matches all values. If a method is present, only HTTP requests using that method are forwarded to this route’s service.","replaceOnChanges":true},"sourcePath":{"type":"string","description":"This is the path that Refactor Spaces uses to match traffic. Paths must start with `/` and are relative to the base of the application. To use path parameters in the source path, add a variable in curly braces. For example, the resource path {user} represents a path parameter called 'user'.","replaceOnChanges":true}},"type":"object","required":["activationState"]},"aws-native:refactorspaces:ServiceEndpointType":{"type":"string","enum":[{"name":"Lambda","value":"LAMBDA"},{"name":"Url","value":"URL"}]},"aws-native:refactorspaces:ServiceLambdaEndpointInput":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lambda function or alias."}},"type":"object","required":["arn"]},"aws-native:refactorspaces:ServiceTag":{"description":"A label for tagging Environment resource","properties":{"key":{"type":"string","description":"A string used to identify this tag"},"value":{"type":"string","description":"A string containing the value for the tag"}},"type":"object","required":["key","value"]},"aws-native:refactorspaces:ServiceUrlEndpointInput":{"properties":{"healthUrl":{"type":"string","description":"The health check URL of the URL endpoint type. If the URL is a public endpoint, the `HealthUrl` must also be a public endpoint. If the URL is a private endpoint inside a virtual private cloud (VPC), the health URL must also be a private endpoint, and the host must be the same as the URL."},"url":{"type":"string","description":"The URL to route traffic to. The URL must be an [rfc3986-formatted URL](https://docs.aws.amazon.com/https://datatracker.ietf.org/doc/html/rfc3986) . If the host is a domain name, the name must be resolvable over the public internet. If the scheme is `https` , the top level domain of the host must be listed in the [IANA root zone database](https://docs.aws.amazon.com/https://www.iana.org/domains/root/db) ."}},"type":"object","required":["url"]},"aws-native:rekognition:CollectionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:rekognition:ProjectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:rekognition:StreamProcessorBoundingBox":{"description":"A bounding box denoting a region of interest in the frame to be analyzed.","properties":{"height":{"type":"number","description":"Height of the bounding box as a ratio of the overall image height."},"left":{"type":"number","description":"Left coordinate of the bounding box as a ratio of overall image width."},"top":{"type":"number","description":"Top coordinate of the bounding box as a ratio of overall image height."},"width":{"type":"number","description":"Width of the bounding box as a ratio of the overall image width."}},"type":"object","required":["height","left","top","width"]},"aws-native:rekognition:StreamProcessorConnectedHomeSettings":{"description":"Connected home settings to use on a streaming video. Note that either ConnectedHomeSettings or FaceSearchSettings should be set. Not both","properties":{"labels":{"type":"array","items":{"type":"string"},"description":"Specifies what you want to detect in the video, such as people, packages, or pets. The current valid labels you can include in this list are: \"PERSON\", \"PET\", \"PACKAGE\", and \"ALL\"."},"minConfidence":{"type":"number","description":"Minimum object class match confidence score that must be met to return a result for a recognized object."}},"type":"object","required":["labels"]},"aws-native:rekognition:StreamProcessorDataSharingPreference":{"description":"Indicates whether Rekognition is allowed to store the video stream data for model-training.","properties":{"optIn":{"type":"boolean","description":"Flag to enable data-sharing"}},"type":"object","required":["optIn"]},"aws-native:rekognition:StreamProcessorFaceSearchSettings":{"description":"Face search settings to use on a streaming video. Note that either FaceSearchSettings or ConnectedHomeSettings should be set. Not both","properties":{"collectionId":{"type":"string","description":"The ID of a collection that contains faces that you want to search for."},"faceMatchThreshold":{"type":"number","description":"Minimum face match confidence score percentage that must be met to return a result for a recognized face. The default is 80. 0 is the lowest confidence. 100 is the highest confidence. Values between 0 and 100 are accepted."}},"type":"object","required":["collectionId"]},"aws-native:rekognition:StreamProcessorKinesisDataStream":{"description":"The Amazon Kinesis Data Stream stream to which the Amazon Rekognition stream processor streams the analysis results, as part of face search feature.","properties":{"arn":{"type":"string","description":"ARN of the Kinesis Data Stream stream."}},"type":"object","required":["arn"]},"aws-native:rekognition:StreamProcessorKinesisVideoStream":{"description":"The Kinesis Video Stream that streams the source video.","properties":{"arn":{"type":"string","description":"ARN of the Kinesis Video Stream that streams the source video."}},"type":"object","required":["arn"]},"aws-native:rekognition:StreamProcessorNotificationChannel":{"description":"The ARN of the SNS notification channel where events of interests are published, as part of connected home feature.","properties":{"arn":{"type":"string","description":"ARN of the SNS topic."}},"type":"object","required":["arn"]},"aws-native:rekognition:StreamProcessorPoint":{"description":"An (X, Y) cartesian coordinate denoting a point on the frame","properties":{"x":{"type":"number","description":"The X coordinate of the point."},"y":{"type":"number","description":"The Y coordinate of the point."}},"type":"object","required":["x","y"]},"aws-native:rekognition:StreamProcessorS3Destination":{"description":"The S3 location in customer's account where inference output \u0026 artifacts are stored, as part of connected home feature.","properties":{"bucketName":{"type":"string","description":"Name of the S3 bucket."},"objectKeyPrefix":{"type":"string","description":"The object key prefix path where the results will be stored. Default is no prefix path"}},"type":"object","required":["bucketName"]},"aws-native:rekognition:StreamProcessorTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:resiliencehub:AppAssessmentSchedule":{"description":"Assessment execution schedule.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Daily","value":"Daily"}]},"aws-native:resiliencehub:AppDriftStatus":{"description":"Indicates if compliance drifts (deviations) were detected while running an assessment for your application.","type":"string","enum":[{"name":"NotChecked","value":"NotChecked"},{"name":"NotDetected","value":"NotDetected"},{"name":"Detected","value":"Detected"}]},"aws-native:resiliencehub:AppEventSubscription":{"description":"Indicates an event you would like to subscribe and get notification for.","properties":{"eventType":{"$ref":"#/types/aws-native:resiliencehub:AppEventSubscriptionEventType","description":"The type of event you would like to subscribe and get notification for."},"name":{"type":"string","description":"Unique name to identify an event subscription."},"snsTopicArn":{"type":"string","description":"Amazon Resource Name (ARN) of the Amazon Simple Notification Service topic."}},"type":"object","required":["eventType","name"]},"aws-native:resiliencehub:AppEventSubscriptionEventType":{"description":"The type of event you would like to subscribe and get notification for.","type":"string","enum":[{"name":"ScheduledAssessmentFailure","value":"ScheduledAssessmentFailure"},{"name":"DriftDetected","value":"DriftDetected"}]},"aws-native:resiliencehub:AppPermissionModel":{"description":"Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment.","properties":{"crossAccountRoleArns":{"type":"array","items":{"type":"string"},"description":"Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application."},"invokerRoleName":{"type":"string","description":"Existing AWS IAM role name in the primary AWS account that will be assumed by AWS Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment."},"type":{"$ref":"#/types/aws-native:resiliencehub:AppPermissionModelType","description":"Defines how AWS Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your AWS account, or by using the credentials of the current IAM user."}},"type":"object","required":["type"]},"aws-native:resiliencehub:AppPermissionModelType":{"description":"Defines how AWS Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your AWS account, or by using the credentials of the current IAM user.","type":"string","enum":[{"name":"LegacyIamUser","value":"LegacyIAMUser"},{"name":"RoleBased","value":"RoleBased"}]},"aws-native:resiliencehub:AppPhysicalResourceId":{"properties":{"awsAccountId":{"type":"string","description":"The AWS account that owns the physical resource."},"awsRegion":{"type":"string","description":"The AWS Region that the physical resource is located in."},"identifier":{"type":"string","description":"Identifier of the physical resource."},"type":{"type":"string","description":"Specifies the type of physical resource identifier.\n\n- **Arn** - The resource identifier is an Amazon Resource Name (ARN) and it can identify the following list of resources:\n\n- `AWS::ECS::Service`\n- `AWS::EFS::FileSystem`\n- `AWS::ElasticLoadBalancingV2::LoadBalancer`\n- `AWS::Lambda::Function`\n- `AWS::SNS::Topic`\n- **Native** - The resource identifier is an AWS Resilience Hub -native identifier and it can identify the following list of resources:\n\n- `AWS::ApiGateway::RestApi`\n- `AWS::ApiGatewayV2::Api`\n- `AWS::AutoScaling::AutoScalingGroup`\n- `AWS::DocDB::DBCluster`\n- `AWS::DocDB::DBGlobalCluster`\n- `AWS::DocDB::DBInstance`\n- `AWS::DynamoDB::GlobalTable`\n- `AWS::DynamoDB::Table`\n- `AWS::EC2::EC2Fleet`\n- `AWS::EC2::Instance`\n- `AWS::EC2::NatGateway`\n- `AWS::EC2::Volume`\n- `AWS::ElasticLoadBalancing::LoadBalancer`\n- `AWS::RDS::DBCluster`\n- `AWS::RDS::DBInstance`\n- `AWS::RDS::GlobalCluster`\n- `AWS::Route53::RecordSet`\n- `AWS::S3::Bucket`\n- `AWS::SQS::Queue`"}},"type":"object","required":["identifier","type"]},"aws-native:resiliencehub:AppResourceMapping":{"description":"Resource mapping is used to map logical resources from template to physical resource","properties":{"eksSourceName":{"type":"string","description":"Name of the Amazon Elastic Kubernetes Service cluster and namespace that this resource is mapped to when the `mappingType` is `EKS` .\n\n\u003e This parameter accepts values in \"eks-cluster/namespace\" format."},"logicalStackName":{"type":"string","description":"Name of the CloudFormation stack this resource is mapped to when the `mappingType` is `CfnStack` ."},"mappingType":{"type":"string","description":"Specifies the type of resource mapping."},"physicalResourceId":{"$ref":"#/types/aws-native:resiliencehub:AppPhysicalResourceId","description":"Identifier of the physical resource."},"resourceName":{"type":"string","description":"Name of the resource that this resource is mapped to when the `mappingType` is `Resource` ."},"terraformSourceName":{"type":"string","description":"Name of the Terraform source that this resource is mapped to when the `mappingType` is `Terraform` ."}},"type":"object","required":["mappingType","physicalResourceId"]},"aws-native:resiliencehub:ResiliencyPolicyDataLocationConstraint":{"description":"Data Location Constraint of the Policy.","type":"string","enum":[{"name":"AnyLocation","value":"AnyLocation"},{"name":"SameContinent","value":"SameContinent"},{"name":"SameCountry","value":"SameCountry"}]},"aws-native:resiliencehub:ResiliencyPolicyFailurePolicy":{"description":"Failure Policy.","properties":{"rpoInSecs":{"type":"integer","description":"RPO in seconds."},"rtoInSecs":{"type":"integer","description":"RTO in seconds."}},"type":"object","required":["rpoInSecs","rtoInSecs"]},"aws-native:resiliencehub:ResiliencyPolicyPolicyMap":{"properties":{"az":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyFailurePolicy","description":"Defines the RTO and RPO targets for Availability Zone disruption."},"hardware":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyFailurePolicy","description":"Defines the RTO and RPO targets for hardware disruption."},"region":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyFailurePolicy","description":"Defines the RTO and RPO targets for Regional disruption."},"software":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyFailurePolicy","description":"Defines the RTO and RPO targets for software disruption."}},"type":"object","required":["az","hardware","software"]},"aws-native:resiliencehub:ResiliencyPolicyTier":{"description":"Resiliency Policy Tier.","type":"string","enum":[{"name":"MissionCritical","value":"MissionCritical"},{"name":"Critical","value":"Critical"},{"name":"Important","value":"Important"},{"name":"CoreServices","value":"CoreServices"},{"name":"NonCritical","value":"NonCritical"}]},"aws-native:resourceexplorer2:IndexState":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Creating","value":"CREATING"},{"name":"Deleting","value":"DELETING"},{"name":"Deleted","value":"DELETED"},{"name":"Updating","value":"UPDATING"}]},"aws-native:resourceexplorer2:IndexType":{"type":"string","enum":[{"name":"Local","value":"LOCAL"},{"name":"Aggregator","value":"AGGREGATOR"}]},"aws-native:resourceexplorer2:ViewIncludedProperty":{"properties":{"name":{"type":"string","description":"The name of the property that is included in this view."}},"type":"object","required":["name"]},"aws-native:resourceexplorer2:ViewSearchFilter":{"properties":{"filterString":{"type":"string","description":"The string that contains the search keywords, prefixes, and operators to control the results that can be returned by a Search operation.\n\nFor information about the supported syntax, see [Search query reference](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html) in the *AWS Resource Explorer User Guide* .\n\n\u003e This query string in the context of this operation supports only [filter prefixes](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-filters) with optional [operators](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-operators) . It doesn't support free-form text. For example, the string `region:us* service:ec2 -tag:stage=prod` includes all Amazon EC2 resources in any AWS Region that begin with the letters `us` and are *not* tagged with a key `Stage` that has the value `prod` ."}},"type":"object","required":["filterString"]},"aws-native:resourcegroups:GroupConfigurationItem":{"properties":{"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:resourcegroups:GroupConfigurationParameter"}},"type":{"type":"string"}},"type":"object"},"aws-native:resourcegroups:GroupConfigurationParameter":{"properties":{"name":{"type":"string"},"values":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:resourcegroups:GroupQuery":{"properties":{"resourceTypeFilters":{"type":"array","items":{"type":"string"},"description":"Specifies limits to the types of resources that can be included in the resource group. For example, if `ResourceTypeFilters` is `[\"AWS::EC2::Instance\", \"AWS::DynamoDB::Table\"]` , only EC2 instances or DynamoDB tables can be members of this resource group. The default value is `[\"AWS::AllSupported\"]` ."},"stackIdentifier":{"type":"string","description":"Specifies the ARN of a CloudFormation stack. All supported resources of the CloudFormation stack are members of the resource group. If you don't specify an ARN, this parameter defaults to the current stack that you are defining, which means that all the resources of the current stack are grouped.\n\nYou can specify a value for `StackIdentifier` only when the `ResourceQuery.Type` property is `CLOUDFORMATION_STACK_1_0.`"},"tagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:resourcegroups:GroupTagFilter"},"description":"A list of key-value pair objects that limit which resources can be members of the resource group. This property is required when the `ResourceQuery.Type` property is `TAG_FILTERS_1_0` .\n\nA resource must have a tag that matches every filter that is provided in the `TagFilters` list."}},"type":"object"},"aws-native:resourcegroups:GroupResourceQuery":{"properties":{"query":{"$ref":"#/types/aws-native:resourcegroups:GroupQuery","description":"The query that defines the membership of the group. This is a structure with properties that depend on the `Type` .\n\nThe `Query` structure must be included in the following scenarios:\n\n- When the `Type` is `TAG_FILTERS_1_0` , you must specify a `Query` structure that contains a `TagFilters` list of tags. Resources with tags that match those in the `TagFilter` list become members of the resource group.\n- When the `Type` is `CLOUDFORMATION_STACK_1_0` then this field is required only when you must specify a CloudFormation stack other than the one you are defining. To do this, the `Query` structure must contain the `StackIdentifier` property. If you don't specify either a `Query` structure or a `StackIdentifier` within that `Query` , then it defaults to the CloudFormation stack that you're currently constructing."},"type":{"$ref":"#/types/aws-native:resourcegroups:GroupResourceQueryType","description":"Specifies the type of resource query that determines this group's membership. There are two valid query types:\n\n- `TAG_FILTERS_1_0` indicates that the group is a tag-based group. To complete the group membership, you must include the `TagFilters` property to specify the tag filters to use in the query.\n- `CLOUDFORMATION_STACK_1_0` , the default, indicates that the group is a CloudFormation stack-based group. Group membership is based on the CloudFormation stack. You must specify the `StackIdentifier` property in the query to define which stack to associate the group with, or leave it empty to default to the stack where the group is defined."}},"type":"object"},"aws-native:resourcegroups:GroupResourceQueryType":{"description":"Specifies the type of resource query that determines this group's membership. There are two valid query types:\n\n- `TAG_FILTERS_1_0` indicates that the group is a tag-based group. To complete the group membership, you must include the `TagFilters` property to specify the tag filters to use in the query.\n- `CLOUDFORMATION_STACK_1_0` , the default, indicates that the group is a CloudFormation stack-based group. Group membership is based on the CloudFormation stack. You must specify the `StackIdentifier` property in the query to define which stack to associate the group with, or leave it empty to default to the stack where the group is defined.","type":"string","enum":[{"name":"TagFilters10","value":"TAG_FILTERS_1_0"},{"name":"CloudformationStack10","value":"CLOUDFORMATION_STACK_1_0"}]},"aws-native:resourcegroups:GroupTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object"},"aws-native:resourcegroups:GroupTagFilter":{"properties":{"key":{"type":"string","description":"A string that defines a tag key. Only resources in the account that are tagged with a specified tag key are members of the tag-based resource group.\n\nThis field is required when the `ResourceQuery` structure's `Type` property is `TAG_FILTERS_1_0` . You must specify at least one tag key."},"values":{"type":"array","items":{"type":"string"},"description":"A list of tag values that can be included in the tag-based resource group. This is optional. If you don't specify a value or values for a key, then an AWS resource with any value for that key is a member."}},"type":"object"},"aws-native:resourcegroups:TagSyncTaskStatus":{"description":"The status of the TagSyncTask","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Error","value":"ERROR"}]},"aws-native:rolesanywhere:CrlTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:rolesanywhere:ProfileAttributeMapping":{"properties":{"certificateField":{"$ref":"#/types/aws-native:rolesanywhere:ProfileCertificateField","description":"Fields (x509Subject, x509Issuer and x509SAN) within X.509 certificates."},"mappingRules":{"type":"array","items":{"$ref":"#/types/aws-native:rolesanywhere:ProfileMappingRule"},"description":"A list of mapping entries for every supported specifier or sub-field."}},"type":"object","required":["certificateField","mappingRules"]},"aws-native:rolesanywhere:ProfileCertificateField":{"type":"string","enum":[{"name":"X509Subject","value":"x509Subject"},{"name":"X509Issuer","value":"x509Issuer"},{"name":"X509san","value":"x509SAN"}]},"aws-native:rolesanywhere:ProfileMappingRule":{"properties":{"specifier":{"type":"string","description":"Specifier within a certificate field, such as CN, OU, or UID from the Subject field."}},"type":"object","required":["specifier"]},"aws-native:rolesanywhere:ProfileTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:rolesanywhere:TrustAnchorNotificationChannel":{"type":"string","enum":[{"name":"All","value":"ALL"}]},"aws-native:rolesanywhere:TrustAnchorNotificationEvent":{"type":"string","enum":[{"name":"CaCertificateExpiry","value":"CA_CERTIFICATE_EXPIRY"},{"name":"EndEntityCertificateExpiry","value":"END_ENTITY_CERTIFICATE_EXPIRY"}]},"aws-native:rolesanywhere:TrustAnchorNotificationSetting":{"properties":{"channel":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorNotificationChannel","description":"The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event.\n\n\u003e In the absence of a specific channel, IAM Roles Anywhere applies this setting to 'ALL' channels."},"enabled":{"type":"boolean","description":"Indicates whether the notification setting is enabled."},"event":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorNotificationEvent","description":"The event to which this notification setting is applied."},"threshold":{"type":"number","description":"The number of days before a notification event. This value is required for a notification setting that is enabled."}},"type":"object","required":["enabled","event"]},"aws-native:rolesanywhere:TrustAnchorSource":{"properties":{"sourceData":{"oneOf":[{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorSourceData0Properties"},{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorSourceData1Properties"}],"description":"A union object representing the data field of the TrustAnchor depending on its type"},"sourceType":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorType","description":"The type of the TrustAnchor."}},"type":"object","required":["sourceData","sourceType"]},"aws-native:rolesanywhere:TrustAnchorSourceData0Properties":{"properties":{"x509CertificateData":{"type":"string"}},"type":"object","required":["x509CertificateData"]},"aws-native:rolesanywhere:TrustAnchorSourceData1Properties":{"properties":{"acmPcaArn":{"type":"string"}},"type":"object","required":["acmPcaArn"]},"aws-native:rolesanywhere:TrustAnchorTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:rolesanywhere:TrustAnchorType":{"type":"string","enum":[{"name":"AwsAcmPca","value":"AWS_ACM_PCA"},{"name":"CertificateBundle","value":"CERTIFICATE_BUNDLE"}]},"aws-native:route53:CidrCollectionLocation":{"properties":{"cidrList":{"type":"array","items":{"type":"string"},"description":"A list of CIDR blocks."},"locationName":{"type":"string","description":"The name of the location that is associated with the CIDR collection."}},"type":"object","required":["cidrList","locationName"]},"aws-native:route53:HealthCheckAlarmIdentifier":{"description":"A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy.","properties":{"name":{"type":"string","description":"The name of the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether this health check is healthy."},"region":{"type":"string","description":"For the CloudWatch alarm that you want Route 53 health checkers to use to determine whether this health check is healthy, the region that the alarm was created in."}},"type":"object","required":["name","region"]},"aws-native:route53:HealthCheckConfigProperties":{"description":"A complex type that contains information about the health check.","properties":{"alarmIdentifier":{"$ref":"#/types/aws-native:route53:HealthCheckAlarmIdentifier","description":"A complex type that identifies the CloudWatch alarm that you want Amazon Route 53 health checkers to use to determine whether the specified health check is healthy."},"childHealthChecks":{"type":"array","items":{"type":"string"},"description":"(CALCULATED Health Checks Only) A complex type that contains one `ChildHealthCheck` element for each health check that you want to associate with a `CALCULATED` health check."},"enableSni":{"type":"boolean","description":"Specify whether you want Amazon Route 53 to send the value of `FullyQualifiedDomainName` to the endpoint in the `client_hello` message during TLS negotiation. This allows the endpoint to respond to `HTTPS` health check requests with the applicable SSL/TLS certificate.\n\nSome endpoints require that `HTTPS` requests include the host name in the `client_hello` message. If you don't enable SNI, the status of the health check will be `SSL alert handshake_failure` . A health check can also have that status for other reasons. If SNI is enabled and you're still getting the error, check the SSL/TLS configuration on your endpoint and confirm that your certificate is valid.\n\nThe SSL/TLS certificate on your endpoint includes a domain name in the `Common Name` field and possibly several more in the `Subject Alternative Names` field. One of the domain names in the certificate should match the value that you specify for `FullyQualifiedDomainName` . If the endpoint responds to the `client_hello` message with a certificate that does not include the domain name that you specified in `FullyQualifiedDomainName` , a health checker will retry the handshake. In the second attempt, the health checker will omit `FullyQualifiedDomainName` from the `client_hello` message."},"failureThreshold":{"type":"integer","description":"The number of consecutive health checks that an endpoint must pass or fail for Amazon Route 53 to change the current status of the endpoint from unhealthy to healthy or vice versa. For more information, see [How Amazon Route 53 Determines Whether an Endpoint Is Healthy](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-determining-health-of-endpoints.html) in the *Amazon Route 53 Developer Guide* .\n\n`FailureThreshold` is not supported when you specify a value for `Type` of `RECOVERY_CONTROL` .\n\nOtherwise, if you don't specify a value for `FailureThreshold` , the default value is three health checks."},"fullyQualifiedDomainName":{"type":"string","description":"Amazon Route 53 behavior depends on whether you specify a value for `IPAddress` .\n\n*If you specify a value for* `IPAddress` :\n\nAmazon Route 53 sends health check requests to the specified IPv4 or IPv6 address and passes the value of `FullyQualifiedDomainName` in the `Host` header for all health checks except TCP health checks. This is typically the fully qualified DNS name of the endpoint on which you want Route 53 to perform health checks.\n\nWhen Route 53 checks the health of an endpoint, here is how it constructs the `Host` header:\n\n- If you specify a value of `80` for `Port` and `HTTP` or `HTTP_STR_MATCH` for `Type` , Route 53 passes the value of `FullyQualifiedDomainName` to the endpoint in the Host header.\n- If you specify a value of `443` for `Port` and `HTTPS` or `HTTPS_STR_MATCH` for `Type` , Route 53 passes the value of `FullyQualifiedDomainName` to the endpoint in the `Host` header.\n- If you specify another value for `Port` and any value except `TCP` for `Type` , Route 53 passes `FullyQualifiedDomainName:Port` to the endpoint in the `Host` header.\n\nIf you don't specify a value for `FullyQualifiedDomainName` , Route 53 substitutes the value of `IPAddress` in the `Host` header in each of the preceding cases.\n\n*If you don't specify a value for `IPAddress`* :\n\nRoute 53 sends a DNS request to the domain that you specify for `FullyQualifiedDomainName` at the interval that you specify for `RequestInterval` . Using an IPv4 address that DNS returns, Route 53 then checks the health of the endpoint.\n\n\u003e If you don't specify a value for `IPAddress` , Route 53 uses only IPv4 to send health checks to the endpoint. If there's no record with a type of A for the name that you specify for `FullyQualifiedDomainName` , the health check fails with a \"DNS resolution failed\" error. \n\nIf you want to check the health of multiple records that have the same name and type, such as multiple weighted records, and if you choose to specify the endpoint only by `FullyQualifiedDomainName` , we recommend that you create a separate health check for each endpoint. For example, create a health check for each HTTP server that is serving content for www.example.com. For the value of `FullyQualifiedDomainName` , specify the domain name of the server (such as us-east-2-www.example.com), not the name of the records (www.example.com).\n\n\u003e In this configuration, if you create a health check for which the value of `FullyQualifiedDomainName` matches the name of the records and you then associate the health check with those records, health check results will be unpredictable. \n\nIn addition, if the value that you specify for `Type` is `HTTP` , `HTTPS` , `HTTP_STR_MATCH` , or `HTTPS_STR_MATCH` , Route 53 passes the value of `FullyQualifiedDomainName` in the `Host` header, as it does when you specify a value for `IPAddress` . If the value of `Type` is `TCP` , Route 53 doesn't pass a `Host` header."},"healthThreshold":{"type":"integer","description":"The number of child health checks that are associated with a `CALCULATED` health check that Amazon Route 53 must consider healthy for the `CALCULATED` health check to be considered healthy. To specify the child health checks that you want to associate with a `CALCULATED` health check, use the [ChildHealthChecks](https://docs.aws.amazon.com/Route53/latest/APIReference/API_UpdateHealthCheck.html#Route53-UpdateHealthCheck-request-ChildHealthChecks) element.\n\nNote the following:\n\n- If you specify a number greater than the number of child health checks, Route 53 always considers this health check to be unhealthy.\n- If you specify `0` , Route 53 always considers this health check to be healthy."},"insufficientDataHealthStatus":{"$ref":"#/types/aws-native:route53:HealthCheckConfigPropertiesInsufficientDataHealthStatus","description":"When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:\n\n- `Healthy` : Route 53 considers the health check to be healthy.\n- `Unhealthy` : Route 53 considers the health check to be unhealthy.\n- `LastKnownStatus` : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy."},"inverted":{"type":"boolean","description":"Specify whether you want Amazon Route 53 to invert the status of a health check, for example, to consider a health check unhealthy when it otherwise would be considered healthy."},"ipAddress":{"type":"string","description":"The IPv4 or IPv6 IP address of the endpoint that you want Amazon Route 53 to perform health checks on. If you don't specify a value for `IPAddress` , Route 53 sends a DNS request to resolve the domain name that you specify in `FullyQualifiedDomainName` at the interval that you specify in `RequestInterval` . Using an IP address returned by DNS, Route 53 then checks the health of the endpoint.\n\nUse one of the following formats for the value of `IPAddress` :\n\n- *IPv4 address* : four values between 0 and 255, separated by periods (.), for example, `192.0.2.44` .\n- *IPv6 address* : eight groups of four hexadecimal values, separated by colons (:), for example, `2001:0db8:85a3:0000:0000:abcd:0001:2345` . You can also shorten IPv6 addresses as described in RFC 5952, for example, `2001:db8:85a3::abcd:1:2345` .\n\nIf the endpoint is an EC2 instance, we recommend that you create an Elastic IP address, associate it with your EC2 instance, and specify the Elastic IP address for `IPAddress` . This ensures that the IP address of your instance will never change.\n\nFor more information, see [FullyQualifiedDomainName](https://docs.aws.amazon.com/Route53/latest/APIReference/API_UpdateHealthCheck.html#Route53-UpdateHealthCheck-request-FullyQualifiedDomainName) .\n\nConstraints: Route 53 can't check the health of endpoints for which the IP address is in local, private, non-routable, or multicast ranges. For more information about IP addresses for which you can't create health checks, see the following documents:\n\n- [RFC 5735, Special Use IPv4 Addresses](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc5735)\n- [RFC 6598, IANA-Reserved IPv4 Prefix for Shared Address Space](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6598)\n- [RFC 5156, Special-Use IPv6 Addresses](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc5156)\n\nWhen the value of `Type` is `CALCULATED` or `CLOUDWATCH_METRIC` , omit `IPAddress` ."},"measureLatency":{"type":"boolean","description":"Specify whether you want Amazon Route 53 to measure the latency between health checkers in multiple AWS regions and your endpoint, and to display CloudWatch latency graphs on the *Health Checks* page in the Route 53 console.\n\n`MeasureLatency` is not supported when you specify a value for `Type` of `RECOVERY_CONTROL` .\n\n\u003e You can't change the value of `MeasureLatency` after you create a health check."},"port":{"type":"integer","description":"The port on the endpoint that you want Amazon Route 53 to perform health checks on.\n\n\u003e Don't specify a value for `Port` when you specify a value for [Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-route53-healthcheck-healthcheckconfig.html#cfn-route53-healthcheck-healthcheckconfig-type) of `CLOUDWATCH_METRIC` or `CALCULATED` ."},"regions":{"type":"array","items":{"type":"string"},"description":"A complex type that contains one `Region` element for each region from which you want Amazon Route 53 health checkers to check the specified endpoint.\n\nIf you don't specify any regions, Route 53 health checkers automatically performs checks from all of the regions that are listed under *Valid Values* .\n\nIf you update a health check to remove a region that has been performing health checks, Route 53 will briefly continue to perform checks from that region to ensure that some health checkers are always checking the endpoint (for example, if you replace three regions with four different regions)."},"requestInterval":{"type":"integer","description":"The number of seconds between the time that Amazon Route 53 gets a response from your endpoint and the time that it sends the next health check request. Each Route 53 health checker makes requests at this interval.\n\n`RequestInterval` is not supported when you specify a value for `Type` of `RECOVERY_CONTROL` .\n\n\u003e You can't change the value of `RequestInterval` after you create a health check. \n\nIf you don't specify a value for `RequestInterval` , the default value is `30` seconds."},"resourcePath":{"type":"string","description":"The path, if any, that you want Amazon Route 53 to request when performing health checks. The path can be any value for which your endpoint will return an HTTP status code of 2xx or 3xx when the endpoint is healthy, for example, the file /docs/route53-health-check.html. You can also include query string parameters, for example, `/welcome.html?language=jp\u0026login=y` ."},"routingControlArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Route 53 Application Recovery Controller routing control.\n\nFor more information about Route 53 Application Recovery Controller, see [Route 53 Application Recovery Controller Developer Guide.](https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route-53-recovery.html) ."},"searchString":{"type":"string","description":"If the value of Type is `HTTP_STR_MATCH` or `HTTPS_STR_MATCH` , the string that you want Amazon Route 53 to search for in the response body from the specified resource. If the string appears in the response body, Route 53 considers the resource healthy.\n\nRoute 53 considers case when searching for `SearchString` in the response body."},"type":{"$ref":"#/types/aws-native:route53:HealthCheckConfigPropertiesType","description":"The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.\n\n\u003e You can't change the value of `Type` after you create a health check. \n\nYou can create the following types of health checks:\n\n- *HTTP* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and waits for an HTTP status code of 200 or greater and less than 400.\n- *HTTPS* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTPS request and waits for an HTTP status code of 200 or greater and less than 400.\n\n\u003e If you specify `HTTPS` for the value of `Type` , the endpoint must support TLS v1.0 or later.\n- *HTTP_STR_MATCH* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and searches the first 5,120 bytes of the response body for the string that you specify in `SearchString` .\n- *HTTPS_STR_MATCH* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an `HTTPS` request and searches the first 5,120 bytes of the response body for the string that you specify in `SearchString` .\n- *TCP* : Route 53 tries to establish a TCP connection.\n- *CLOUDWATCH_METRIC* : The health check is associated with a CloudWatch alarm. If the state of the alarm is `OK` , the health check is considered healthy. If the state is `ALARM` , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is `OK` or `ALARM` , the health check status depends on the setting for `InsufficientDataHealthStatus` : `Healthy` , `Unhealthy` , or `LastKnownStatus` .\n\n\u003e Route 53 supports CloudWatch alarms with the following features:\n\u003e \n\u003e - Standard-resolution metrics. High-resolution metrics aren't supported. For more information, see [High-Resolution Metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html#high-resolution-metrics) in the *Amazon CloudWatch User Guide* .\n\u003e - Statistics: Average, Minimum, Maximum, Sum, and SampleCount. Extended statistics aren't supported.\n- *CALCULATED* : For health checks that monitor the status of other health checks, Route 53 adds up the number of health checks that Route 53 health checkers consider to be healthy and compares that number with the value of `HealthThreshold` .\n- *RECOVERY_CONTROL* : The health check is assocated with a Route53 Application Recovery Controller routing control. If the routing control state is `ON` , the health check is considered healthy. If the state is `OFF` , the health check is considered unhealthy.\n\nFor more information, see [How Route 53 Determines Whether an Endpoint Is Healthy](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-determining-health-of-endpoints.html) in the *Amazon Route 53 Developer Guide* ."}},"type":"object","required":["type"]},"aws-native:route53:HealthCheckConfigPropertiesInsufficientDataHealthStatus":{"description":"When CloudWatch has insufficient data about the metric to determine the alarm state, the status that you want Amazon Route 53 to assign to the health check:\n\n- `Healthy` : Route 53 considers the health check to be healthy.\n- `Unhealthy` : Route 53 considers the health check to be unhealthy.\n- `LastKnownStatus` : Route 53 uses the status of the health check from the last time that CloudWatch had sufficient data to determine the alarm state. For new health checks that have no last known status, the default status for the health check is healthy.","type":"string","enum":[{"name":"Healthy","value":"Healthy"},{"name":"LastKnownStatus","value":"LastKnownStatus"},{"name":"Unhealthy","value":"Unhealthy"}]},"aws-native:route53:HealthCheckConfigPropertiesType":{"description":"The type of health check that you want to create, which indicates how Amazon Route 53 determines whether an endpoint is healthy.\n\n\u003e You can't change the value of `Type` after you create a health check. \n\nYou can create the following types of health checks:\n\n- *HTTP* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and waits for an HTTP status code of 200 or greater and less than 400.\n- *HTTPS* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTPS request and waits for an HTTP status code of 200 or greater and less than 400.\n\n\u003e If you specify `HTTPS` for the value of `Type` , the endpoint must support TLS v1.0 or later.\n- *HTTP_STR_MATCH* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and searches the first 5,120 bytes of the response body for the string that you specify in `SearchString` .\n- *HTTPS_STR_MATCH* : Route 53 tries to establish a TCP connection. If successful, Route 53 submits an `HTTPS` request and searches the first 5,120 bytes of the response body for the string that you specify in `SearchString` .\n- *TCP* : Route 53 tries to establish a TCP connection.\n- *CLOUDWATCH_METRIC* : The health check is associated with a CloudWatch alarm. If the state of the alarm is `OK` , the health check is considered healthy. If the state is `ALARM` , the health check is considered unhealthy. If CloudWatch doesn't have sufficient data to determine whether the state is `OK` or `ALARM` , the health check status depends on the setting for `InsufficientDataHealthStatus` : `Healthy` , `Unhealthy` , or `LastKnownStatus` .\n\n\u003e Route 53 supports CloudWatch alarms with the following features:\n\u003e \n\u003e - Standard-resolution metrics. High-resolution metrics aren't supported. For more information, see [High-Resolution Metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html#high-resolution-metrics) in the *Amazon CloudWatch User Guide* .\n\u003e - Statistics: Average, Minimum, Maximum, Sum, and SampleCount. Extended statistics aren't supported.\n- *CALCULATED* : For health checks that monitor the status of other health checks, Route 53 adds up the number of health checks that Route 53 health checkers consider to be healthy and compares that number with the value of `HealthThreshold` .\n- *RECOVERY_CONTROL* : The health check is assocated with a Route53 Application Recovery Controller routing control. If the routing control state is `ON` , the health check is considered healthy. If the state is `OFF` , the health check is considered unhealthy.\n\nFor more information, see [How Route 53 Determines Whether an Endpoint Is Healthy](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-determining-health-of-endpoints.html) in the *Amazon Route 53 Developer Guide* .","type":"string","enum":[{"name":"Calculated","value":"CALCULATED"},{"name":"CloudwatchMetric","value":"CLOUDWATCH_METRIC"},{"name":"Http","value":"HTTP"},{"name":"HttpStrMatch","value":"HTTP_STR_MATCH"},{"name":"Https","value":"HTTPS"},{"name":"HttpsStrMatch","value":"HTTPS_STR_MATCH"},{"name":"Tcp","value":"TCP"},{"name":"RecoveryControl","value":"RECOVERY_CONTROL"}]},"aws-native:route53:HealthCheckTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:route53:HostedZoneConfig":{"description":"A complex type that contains an optional comment about your hosted zone. If you don't want to specify a comment, omit both the ``HostedZoneConfig`` and ``Comment`` elements.","properties":{"comment":{"type":"string","description":"Any comments that you want to include about the hosted zone."}},"type":"object"},"aws-native:route53:HostedZoneFeatures":{"description":"Represents the features configuration for a hosted zone, including the status of various features and any associated failure reasons.","properties":{"enableAcceleratedRecovery":{"type":"boolean"}},"type":"object"},"aws-native:route53:HostedZoneQueryLoggingConfig":{"description":"A complex type that contains information about a configuration for DNS query logging.","properties":{"cloudWatchLogsLogGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudWatch Logs log group that Amazon Route 53 is publishing logs to."}},"type":"object","required":["cloudWatchLogsLogGroupArn"]},"aws-native:route53:HostedZoneTag":{"description":"A complex type that contains information about a tag that you want to add or edit for the specified health check or hosted zone.","properties":{"key":{"type":"string","description":"The value of ``Key`` depends on the operation that you want to perform:\n  +  *Add a tag to a health check or hosted zone*: ``Key`` is the name that you want to give the new tag.\n  +  *Edit a tag*: ``Key`` is the name of the tag that you want to change the ``Value`` for.\n  +  *Delete a key*: ``Key`` is the name of the tag you want to remove.\n  +  *Give a name to a health check*: Edit the default ``Name`` tag. In the Amazon Route 53 console, the list of your health checks includes a *Name* column that lets you see the name that you've given to each health check."},"value":{"type":"string","description":"The value of ``Value`` depends on the operation that you want to perform:\n  +  *Add a tag to a health check or hosted zone*: ``Value`` is the value that you want to give the new tag.\n  +  *Edit a tag*: ``Value`` is the new value that you want to assign the tag."}},"type":"object","required":["key","value"]},"aws-native:route53:HostedZoneVpc":{"description":"*Private hosted zones only:* A complex type that contains information about an Amazon VPC. Route 53 Resolver uses the records in the private hosted zone to route traffic in that VPC. \n  For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``.","properties":{"vpcId":{"type":"string","description":"*Private hosted zones only:* The ID of an Amazon VPC.\n  For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``."},"vpcRegion":{"type":"string","description":"*Private hosted zones only:* The region that an Amazon VPC was created in.\n  For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``."}},"type":"object","required":["vpcId","vpcRegion"]},"aws-native:route53:KeySigningKeyStatus":{"description":"A string specifying the initial status of the key signing key (KSK). You can set the value to ACTIVE or INACTIVE.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:route53globalresolver:AccessSourceCrResourceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53globalresolver:AccessSourceDnsProtocol":{"type":"string","enum":[{"name":"Do53","value":"DO53"},{"name":"Doh","value":"DOH"},{"name":"Dot","value":"DOT"}]},"aws-native:route53globalresolver:AccessSourceIpAddressType":{"type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"}]},"aws-native:route53globalresolver:AccessSourceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53globalresolver:AccessTokenTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53globalresolver:AccessTokenTokenStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53globalresolver:DnsViewDnsSecValidationType":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:route53globalresolver:DnsViewEdnsClientSubnetType":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:route53globalresolver:DnsViewFirewallRulesFailOpenType":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:route53globalresolver:DnsViewProfileResourceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Updating","value":"UPDATING"},{"name":"Enabling","value":"ENABLING"},{"name":"Disabling","value":"DISABLING"},{"name":"Disabled","value":"DISABLED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53globalresolver:DnsViewTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53globalresolver:FirewallDomainListCrResourceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53globalresolver:FirewallDomainListTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53globalresolver:FirewallRuleAction":{"type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Alert","value":"ALERT"},{"name":"Block","value":"BLOCK"}]},"aws-native:route53globalresolver:FirewallRuleBlockOverrideDnsQueryType":{"type":"string","enum":[{"name":"Cname","value":"CNAME"}]},"aws-native:route53globalresolver:FirewallRuleConfidenceThreshold":{"type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:route53globalresolver:FirewallRuleCrResourceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53globalresolver:FirewallRuleDnsAdvancedProtection":{"type":"string","enum":[{"name":"Dga","value":"DGA"},{"name":"DnsTunneling","value":"DNS_TUNNELING"},{"name":"DictionaryDga","value":"DICTIONARY_DGA"}]},"aws-native:route53globalresolver:FirewallRuleFirewallBlockResponse":{"type":"string","enum":[{"name":"Nodata","value":"NODATA"},{"name":"Nxdomain","value":"NXDOMAIN"},{"name":"Override","value":"OVERRIDE"}]},"aws-native:route53globalresolver:GlobalResolverCrResourceStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Updating","value":"UPDATING"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53globalresolver:GlobalResolverIpAddressType":{"type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"DualStack","value":"DUAL_STACK"}]},"aws-native:route53globalresolver:GlobalResolverTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53globalresolver:HostedZoneAssociationStatus":{"type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Deleting","value":"DELETING"}]},"aws-native:route53profiles:ProfileAssociationTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53profiles:ProfileShareStatus":{"description":"The sharing status of the profile.","type":"string","enum":[{"name":"NotShared","value":"NOT_SHARED"},{"name":"SharedWithMe","value":"SHARED_WITH_ME"},{"name":"SharedByMe","value":"SHARED_BY_ME"}]},"aws-native:route53profiles:ProfileTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53recoverycontrol:ClusterEndpoint":{"properties":{"endpoint":{"type":"string","description":"A cluster endpoint URL for one of the five redundant clusters that you specify to set or retrieve a routing control state."},"region":{"type":"string","description":"The AWS Region for a cluster endpoint."}},"type":"object"},"aws-native:route53recoverycontrol:ClusterNetworkType":{"description":"Cluster supports IPv4 endpoints and Dual-stack IPv4 and IPv6 endpoints. NetworkType can be IPV4 or DUALSTACK.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:route53recoverycontrol:ClusterStatus":{"description":"Deployment status of a resource. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Deployed","value":"DEPLOYED"},{"name":"PendingDeletion","value":"PENDING_DELETION"}]},"aws-native:route53recoverycontrol:ClusterTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoverycontrol:ControlPanelStatus":{"description":"The deployment status of control panel. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Deployed","value":"DEPLOYED"},{"name":"PendingDeletion","value":"PENDING_DELETION"}]},"aws-native:route53recoverycontrol:ControlPanelTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoverycontrol:RoutingControlStatus":{"description":"The deployment status of the routing control. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Deployed","value":"DEPLOYED"},{"name":"PendingDeletion","value":"PENDING_DELETION"}]},"aws-native:route53recoverycontrol:SafetyRuleAssertionRule":{"description":"An assertion rule enforces that, when a routing control state is changed, that the criteria set by the rule configuration is met. Otherwise, the change to the routing control is not accepted.","properties":{"assertedControls":{"type":"array","items":{"type":"string"},"description":"The routing controls that are part of transactions that are evaluated to determine if a request to change a routing control state is allowed. For example, you might include three routing controls, one for each of three AWS Regions."},"waitPeriodMs":{"type":"integer","description":"An evaluation period, in milliseconds (ms), during which any request against the target routing controls will fail. This helps prevent \"flapping\" of state. The wait period is 5000 ms by default, but you can choose a custom value."}},"type":"object","required":["assertedControls","waitPeriodMs"]},"aws-native:route53recoverycontrol:SafetyRuleGatingRule":{"description":"A gating rule verifies that a set of gating controls evaluates as true, based on a rule configuration that you specify. If the gating rule evaluates to true, Amazon Route 53 Application Recovery Controller allows a set of routing control state changes to run and complete against the set of target controls.","properties":{"gatingControls":{"type":"array","items":{"type":"string"},"description":"The gating controls for the gating rule. That is, routing controls that are evaluated by the rule configuration that you specify."},"targetControls":{"type":"array","items":{"type":"string"},"description":"Routing controls that can only be set or unset if the specified RuleConfig evaluates to true for the specified GatingControls. For example, say you have three gating controls, one for each of three AWS Regions. Now you specify AtLeast 2 as your RuleConfig. With these settings, you can only change (set or unset) the routing controls that you have specified as TargetControls if that rule evaluates to true. \nIn other words, your ability to change the routing controls that you have specified as TargetControls is gated by the rule that you set for the routing controls in GatingControls."},"waitPeriodMs":{"type":"integer","description":"An evaluation period, in milliseconds (ms), during which any request against the target routing controls will fail. This helps prevent \"flapping\" of state. The wait period is 5000 ms by default, but you can choose a custom value."}},"type":"object","required":["gatingControls","targetControls","waitPeriodMs"]},"aws-native:route53recoverycontrol:SafetyRuleRuleConfig":{"description":"The rule configuration for an assertion rule or gating rule. This is the criteria that you set for specific assertion controls (routing controls) or gating controls. This configuration specifies how many controls must be enabled after a transaction completes.","properties":{"inverted":{"type":"boolean","description":"Logical negation of the rule. If the rule would usually evaluate true, it's evaluated as false, and vice versa."},"threshold":{"type":"integer","description":"The value of N, when you specify an ATLEAST rule type. That is, Threshold is the number of controls that must be set when you specify an ATLEAST type."},"type":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleRuleType","description":"A rule can be one of the following: `ATLEAST` , `AND` , or `OR` ."}},"type":"object","required":["inverted","threshold","type"]},"aws-native:route53recoverycontrol:SafetyRuleRuleType":{"description":"A rule can be one of the following: ATLEAST, AND, or OR.","type":"string","enum":[{"name":"And","value":"AND"},{"name":"Or","value":"OR"},{"name":"Atleast","value":"ATLEAST"}]},"aws-native:route53recoverycontrol:SafetyRuleStatus":{"description":"The deployment status of the routing control. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Deployed","value":"DEPLOYED"},{"name":"PendingDeletion","value":"PENDING_DELETION"}]},"aws-native:route53recoverycontrol:SafetyRuleTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoveryreadiness:CellTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoveryreadiness:ReadinessCheckTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoveryreadiness:RecoveryGroupTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoveryreadiness:ResourceSetDnsTargetResource":{"description":"A component for DNS/routing control readiness checks.","properties":{"domainName":{"type":"string","description":"The domain name that acts as an ingress point to a portion of the customer application."},"hostedZoneArn":{"type":"string","description":"The hosted zone Amazon Resource Name (ARN) that contains the DNS record with the provided name of the target resource."},"recordSetId":{"type":"string","description":"The Route 53 record set ID that will uniquely identify a DNS record, given a name and a type."},"recordType":{"type":"string","description":"The type of DNS record of the target resource."},"targetResource":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetTargetResource","description":"The target resource that the Route 53 record points to."}},"type":"object"},"aws-native:route53recoveryreadiness:ResourceSetNlbResource":{"description":"The Network Load Balancer resource that a DNS target resource points to.","properties":{"arn":{"type":"string","description":"A Network Load Balancer resource Amazon Resource Name (ARN)."}},"type":"object"},"aws-native:route53recoveryreadiness:ResourceSetR53ResourceRecord":{"description":"The Route 53 resource that a DNS target resource record points to.","properties":{"domainName":{"type":"string","description":"The DNS target domain name."},"recordSetId":{"type":"string","description":"The Resource Record set id."}},"type":"object"},"aws-native:route53recoveryreadiness:ResourceSetResource":{"description":"The resource element of a ResourceSet","properties":{"componentId":{"type":"string","description":"The component identifier of the resource, generated when DNS target resource is used."},"dnsTargetResource":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetDnsTargetResource","description":"A component for DNS/routing control readiness checks. This is a required setting when `ResourceSet` `ResourceSetType` is set to `AWS::Route53RecoveryReadiness::DNSTargetResource` . Do not set it for any other `ResourceSetType` setting."},"readinessScopes":{"type":"array","items":{"type":"string"},"description":"A list of recovery group Amazon Resource Names (ARNs) and cell ARNs that this resource is contained within."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS resource."}},"type":"object"},"aws-native:route53recoveryreadiness:ResourceSetTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:route53recoveryreadiness:ResourceSetTargetResource":{"description":"The target resource that the Route 53 record points to.","properties":{"nlbResource":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetNlbResource","description":"The Network Load Balancer resource that a DNS target resource points to."},"r53Resource":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetR53ResourceRecord","description":"The Route 53 resource that a DNS target resource record points to."}},"type":"object"},"aws-native:route53resolver:FirewallDomainListStatus":{"description":"ResolverFirewallDomainList, possible values are COMPLETE, DELETING, UPDATING, COMPLETE_IMPORT_FAILED, IMPORTING, and INACTIVE_OWNER_ACCOUNT_CLOSED.","type":"string","enum":[{"name":"Complete","value":"COMPLETE"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"CompleteImportFailed","value":"COMPLETE_IMPORT_FAILED"},{"name":"Importing","value":"IMPORTING"},{"name":"InactiveOwnerAccountClosed","value":"INACTIVE_OWNER_ACCOUNT_CLOSED"}]},"aws-native:route53resolver:FirewallDomainListTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:FirewallRuleGroupAssociationMutationProtection":{"description":"MutationProtectionStatus","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:route53resolver:FirewallRuleGroupAssociationStatus":{"description":"ResolverFirewallRuleGroupAssociation, possible values are COMPLETE, DELETING, UPDATING, and INACTIVE_OWNER_ACCOUNT_CLOSED.","type":"string","enum":[{"name":"Complete","value":"COMPLETE"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"InactiveOwnerAccountClosed","value":"INACTIVE_OWNER_ACCOUNT_CLOSED"}]},"aws-native:route53resolver:FirewallRuleGroupAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:FirewallRuleGroupFirewallRule":{"description":"Firewall Rule associating the Rule Group to a Domain List","properties":{"action":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRuleAction","description":"Rule Action"},"blockOverrideDnsType":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRuleBlockOverrideDnsType","description":"BlockOverrideDnsType"},"blockOverrideDomain":{"type":"string","description":"BlockOverrideDomain"},"blockOverrideTtl":{"type":"integer","description":"BlockOverrideTtl"},"blockResponse":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRuleBlockResponse","description":"BlockResponse"},"confidenceThreshold":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRuleConfidenceThreshold","description":"FirewallDomainRedirectionAction"},"dnsThreatProtection":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRuleDnsThreatProtection","description":"FirewallDomainRedirectionAction"},"firewallDomainListId":{"type":"string","description":"ResourceId"},"firewallDomainRedirectionAction":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRuleFirewallDomainRedirectionAction","description":"FirewallDomainRedirectionAction"},"firewallThreatProtectionId":{"type":"string","description":"ResourceId"},"priority":{"type":"integer","description":"Rule Priority"},"qtype":{"type":"string","description":"Qtype"}},"type":"object","required":["action","priority"]},"aws-native:route53resolver:FirewallRuleGroupFirewallRuleAction":{"description":"Rule Action","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Block","value":"BLOCK"},{"name":"Alert","value":"ALERT"}]},"aws-native:route53resolver:FirewallRuleGroupFirewallRuleBlockOverrideDnsType":{"description":"BlockOverrideDnsType","type":"string","enum":[{"name":"Cname","value":"CNAME"}]},"aws-native:route53resolver:FirewallRuleGroupFirewallRuleBlockResponse":{"description":"BlockResponse","type":"string","enum":[{"name":"Nodata","value":"NODATA"},{"name":"Nxdomain","value":"NXDOMAIN"},{"name":"Override","value":"OVERRIDE"}]},"aws-native:route53resolver:FirewallRuleGroupFirewallRuleConfidenceThreshold":{"description":"FirewallDomainRedirectionAction","type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:route53resolver:FirewallRuleGroupFirewallRuleDnsThreatProtection":{"description":"FirewallDomainRedirectionAction","type":"string","enum":[{"name":"Dga","value":"DGA"},{"name":"DnsTunneling","value":"DNS_TUNNELING"},{"name":"DictionaryDga","value":"DICTIONARY_DGA"}]},"aws-native:route53resolver:FirewallRuleGroupFirewallRuleFirewallDomainRedirectionAction":{"description":"FirewallDomainRedirectionAction","type":"string","enum":[{"name":"InspectRedirectionDomain","value":"INSPECT_REDIRECTION_DOMAIN"},{"name":"TrustRedirectionDomain","value":"TRUST_REDIRECTION_DOMAIN"}]},"aws-native:route53resolver:FirewallRuleGroupShareStatus":{"description":"ShareStatus, possible values are NOT_SHARED, SHARED_WITH_ME, SHARED_BY_ME.","type":"string","enum":[{"name":"NotShared","value":"NOT_SHARED"},{"name":"SharedWithMe","value":"SHARED_WITH_ME"},{"name":"SharedByMe","value":"SHARED_BY_ME"}]},"aws-native:route53resolver:FirewallRuleGroupStatus":{"description":"ResolverFirewallRuleGroupAssociation, possible values are COMPLETE, DELETING, UPDATING, and INACTIVE_OWNER_ACCOUNT_CLOSED.","type":"string","enum":[{"name":"Complete","value":"COMPLETE"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"InactiveOwnerAccountClosed","value":"INACTIVE_OWNER_ACCOUNT_CLOSED"}]},"aws-native:route53resolver:FirewallRuleGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:OutpostResolverStatus":{"description":"The OutpostResolver status, possible values are CREATING, OPERATIONAL, UPDATING, DELETING, ACTION_NEEDED, FAILED_CREATION and FAILED_DELETION.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Operational","value":"OPERATIONAL"},{"name":"Deleting","value":"DELETING"},{"name":"Updating","value":"UPDATING"},{"name":"ActionNeeded","value":"ACTION_NEEDED"},{"name":"FailedCreation","value":"FAILED_CREATION"},{"name":"FailedDeletion","value":"FAILED_DELETION"}]},"aws-native:route53resolver:OutpostResolverTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:ResolverConfigAutodefinedReverse":{"description":"ResolverAutodefinedReverseStatus, possible values are ENABLING, ENABLED, DISABLING AND DISABLED.","type":"string","enum":[{"name":"Enabling","value":"ENABLING"},{"name":"Enabled","value":"ENABLED"},{"name":"Disabling","value":"DISABLING"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:route53resolver:ResolverConfigAutodefinedReverseFlag":{"description":"Represents the desired status of AutodefinedReverse. The only supported value on creation is DISABLE. Deletion of this resource will return AutodefinedReverse to its default value (ENABLED).","type":"string","enum":[{"name":"Disable","value":"DISABLE"}]},"aws-native:route53resolver:ResolverDnssecConfigValidationStatus":{"description":"ResolverDNSSECValidationStatus, possible values are ENABLING, ENABLED, DISABLING AND DISABLED.","type":"string","enum":[{"name":"Enabling","value":"ENABLING"},{"name":"Enabled","value":"ENABLED"},{"name":"Disabling","value":"DISABLING"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:route53resolver:ResolverEndpointIpAddressRequest":{"properties":{"ip":{"type":"string","description":"The IPv4 address that you want to use for DNS queries."},"ipv6":{"type":"string","description":"The IPv6 address that you want to use for DNS queries."},"subnetId":{"type":"string","description":"The ID of the subnet that contains the IP address."}},"type":"object","required":["subnetId"]},"aws-native:route53resolver:ResolverEndpointTag":{"properties":{"key":{"type":"string","description":"The name for the tag. For example, if you want to associate Resolver resources with the account IDs of your customers for billing purposes, the value of Key might be account-id."},"value":{"type":"string","description":"The value for the tag. For example, if Key is account-id, then Value might be the ID of the customer account that you're creating the resource for."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:ResolverEndpointType":{"description":"The Resolver endpoint IP address type.","type":"string","enum":[{"name":"Ipv6","value":"IPV6"},{"name":"Ipv4","value":"IPV4"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:route53resolver:ResolverQueryLoggingConfigAssociationError":{"description":"ResolverQueryLogConfigAssociationError","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"DestinationNotFound","value":"DESTINATION_NOT_FOUND"},{"name":"AccessDenied","value":"ACCESS_DENIED"}]},"aws-native:route53resolver:ResolverQueryLoggingConfigAssociationStatus":{"description":"ResolverQueryLogConfigAssociationStatus","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Active","value":"ACTIVE"},{"name":"ActionNeeded","value":"ACTION_NEEDED"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"},{"name":"Overridden","value":"OVERRIDDEN"}]},"aws-native:route53resolver:ResolverQueryLoggingConfigShareStatus":{"description":"ShareStatus, possible values are NOT_SHARED, SHARED_WITH_ME, SHARED_BY_ME.","type":"string","enum":[{"name":"NotShared","value":"NOT_SHARED"},{"name":"SharedWithMe","value":"SHARED_WITH_ME"},{"name":"SharedByMe","value":"SHARED_BY_ME"}]},"aws-native:route53resolver:ResolverQueryLoggingConfigStatus":{"description":"ResolverQueryLogConfigStatus, possible values are CREATING, CREATED, DELETED AND FAILED.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Created","value":"CREATED"},{"name":"Deleting","value":"DELETING"},{"name":"Failed","value":"FAILED"}]},"aws-native:route53resolver:ResolverQueryLoggingConfigTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:ResolverRuleRuleType":{"description":"When you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD. When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM.","type":"string","enum":[{"name":"Forward","value":"FORWARD"},{"name":"System","value":"SYSTEM"},{"name":"Recursive","value":"RECURSIVE"},{"name":"Delegate","value":"DELEGATE"}]},"aws-native:route53resolver:ResolverRuleTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:route53resolver:ResolverRuleTargetAddress":{"properties":{"ip":{"type":"string","description":"One IP address that you want to forward DNS queries to. You can specify only IPv4 addresses. "},"ipv6":{"type":"string","description":"One IPv6 address that you want to forward DNS queries to. You can specify only IPv6 addresses. "},"port":{"type":"string","description":"The port at Ip that you want to forward DNS queries to. "},"protocol":{"$ref":"#/types/aws-native:route53resolver:ResolverRuleTargetAddressProtocol","description":"The protocol that you want to use to forward DNS queries. "},"serverNameIndication":{"type":"string","description":"The SNI of the target name servers for DoH/DoH-FIPS outbound endpoints"}},"type":"object"},"aws-native:route53resolver:ResolverRuleTargetAddressProtocol":{"description":"The protocol that you want to use to forward DNS queries. ","type":"string","enum":[{"name":"Do53","value":"Do53"},{"name":"DoH","value":"DoH"}]},"aws-native:rtbfabric:InboundExternalLinkLinkAttributes":{"properties":{"customerProvidedId":{"type":"string"},"responderErrorMasking":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkResponderErrorMaskingForHttpCode"}}},"type":"object"},"aws-native:rtbfabric:InboundExternalLinkLinkLogSettings":{"properties":{"applicationLogs":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkLogSettingsApplicationLogsProperties"}},"type":"object","required":["applicationLogs"]},"aws-native:rtbfabric:InboundExternalLinkLinkLogSettingsApplicationLogsProperties":{"properties":{"linkApplicationLogSampling":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties"}},"type":"object","required":["linkApplicationLogSampling"]},"aws-native:rtbfabric:InboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties":{"properties":{"errorLog":{"type":"number"},"filterLog":{"type":"number"}},"type":"object","required":["errorLog","filterLog"]},"aws-native:rtbfabric:InboundExternalLinkLinkStatus":{"type":"string","enum":[{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"PendingRequest","value":"PENDING_REQUEST"},{"name":"Requested","value":"REQUESTED"},{"name":"Accepted","value":"ACCEPTED"},{"name":"Active","value":"ACTIVE"},{"name":"Rejected","value":"REJECTED"},{"name":"Failed","value":"FAILED"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"Deleted","value":"DELETED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"PendingIsolation","value":"PENDING_ISOLATION"},{"name":"Isolated","value":"ISOLATED"},{"name":"PendingRestoration","value":"PENDING_RESTORATION"},{"name":"UnknownToSdkVersion","value":"UNKNOWN_TO_SDK_VERSION"}]},"aws-native:rtbfabric:InboundExternalLinkResponderErrorMaskingForHttpCode":{"properties":{"action":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkResponderErrorMaskingForHttpCodeAction"},"httpCode":{"type":"string"},"loggingTypes":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkResponderErrorMaskingLoggingType"}},"responseLoggingPercentage":{"type":"number"}},"type":"object","required":["action","httpCode","loggingTypes"]},"aws-native:rtbfabric:InboundExternalLinkResponderErrorMaskingForHttpCodeAction":{"type":"string","enum":[{"name":"NoBid","value":"NO_BID"},{"name":"Passthrough","value":"PASSTHROUGH"}]},"aws-native:rtbfabric:InboundExternalLinkResponderErrorMaskingLoggingType":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Metric","value":"METRIC"},{"name":"Response","value":"RESPONSE"}]},"aws-native:rtbfabric:InboundExternalLinkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:rtbfabric:LinkAttributes":{"properties":{"customerProvidedId":{"type":"string","description":"The customer-provided unique identifier of the link."},"responderErrorMasking":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:LinkResponderErrorMaskingForHttpCode"},"description":"Describes the masking for HTTP error codes."}},"type":"object"},"aws-native:rtbfabric:LinkDirection":{"type":"string","enum":[{"name":"Request","value":"REQUEST"},{"name":"Response","value":"RESPONSE"}]},"aws-native:rtbfabric:LinkLogSettings":{"properties":{"applicationLogs":{"$ref":"#/types/aws-native:rtbfabric:LinkLogSettingsApplicationLogsProperties","description":"Describes the configuration of a link application log."}},"type":"object","required":["applicationLogs"]},"aws-native:rtbfabric:LinkLogSettingsApplicationLogsProperties":{"description":"Describes the configuration of a link application log.","properties":{"linkApplicationLogSampling":{"$ref":"#/types/aws-native:rtbfabric:LinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties"}},"type":"object","required":["linkApplicationLogSampling"]},"aws-native:rtbfabric:LinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties":{"properties":{"errorLog":{"type":"number"},"filterLog":{"type":"number"}},"type":"object","required":["errorLog","filterLog"]},"aws-native:rtbfabric:LinkModuleConfiguration":{"properties":{"dependsOn":{"type":"array","items":{"type":"string"}},"moduleParameters":{"$ref":"#/types/aws-native:rtbfabric:LinkModuleParameters"},"name":{"type":"string"},"version":{"type":"string"}},"type":"object","required":["name"]},"aws-native:rtbfabric:LinkModuleParameters":{"type":"object"},"aws-native:rtbfabric:LinkResponderErrorMaskingForHttpCode":{"properties":{"action":{"$ref":"#/types/aws-native:rtbfabric:LinkResponderErrorMaskingForHttpCodeAction","description":"The action for the error.."},"httpCode":{"type":"string","description":"The HTTP error code."},"loggingTypes":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:LinkResponderErrorMaskingLoggingType"},"description":"The error log type."},"responseLoggingPercentage":{"type":"number","description":"The percentage of response logging."}},"type":"object","required":["action","httpCode","loggingTypes"]},"aws-native:rtbfabric:LinkResponderErrorMaskingForHttpCodeAction":{"description":"The action for the error..","type":"string","enum":[{"name":"NoBid","value":"NO_BID"},{"name":"Passthrough","value":"PASSTHROUGH"}]},"aws-native:rtbfabric:LinkResponderErrorMaskingLoggingType":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Metric","value":"METRIC"},{"name":"Response","value":"RESPONSE"}]},"aws-native:rtbfabric:LinkStatus":{"type":"string","enum":[{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"PendingRequest","value":"PENDING_REQUEST"},{"name":"Requested","value":"REQUESTED"},{"name":"Accepted","value":"ACCEPTED"},{"name":"Active","value":"ACTIVE"},{"name":"Rejected","value":"REJECTED"},{"name":"Failed","value":"FAILED"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"Deleted","value":"DELETED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"PendingIsolation","value":"PENDING_ISOLATION"},{"name":"Isolated","value":"ISOLATED"},{"name":"PendingRestoration","value":"PENDING_RESTORATION"},{"name":"UnknownToSdkVersion","value":"UNKNOWN_TO_SDK_VERSION"}]},"aws-native:rtbfabric:LinkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:rtbfabric:OutboundExternalLinkLinkAttributes":{"properties":{"customerProvidedId":{"type":"string"},"responderErrorMasking":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkResponderErrorMaskingForHttpCode"}}},"type":"object"},"aws-native:rtbfabric:OutboundExternalLinkLinkLogSettings":{"properties":{"applicationLogs":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkLogSettingsApplicationLogsProperties"}},"type":"object","required":["applicationLogs"]},"aws-native:rtbfabric:OutboundExternalLinkLinkLogSettingsApplicationLogsProperties":{"properties":{"linkApplicationLogSampling":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties"}},"type":"object","required":["linkApplicationLogSampling"]},"aws-native:rtbfabric:OutboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties":{"properties":{"errorLog":{"type":"number"},"filterLog":{"type":"number"}},"type":"object","required":["errorLog","filterLog"]},"aws-native:rtbfabric:OutboundExternalLinkLinkStatus":{"type":"string","enum":[{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"PendingRequest","value":"PENDING_REQUEST"},{"name":"Requested","value":"REQUESTED"},{"name":"Accepted","value":"ACCEPTED"},{"name":"Active","value":"ACTIVE"},{"name":"Rejected","value":"REJECTED"},{"name":"Failed","value":"FAILED"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"Deleted","value":"DELETED"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"PendingIsolation","value":"PENDING_ISOLATION"},{"name":"Isolated","value":"ISOLATED"},{"name":"PendingRestoration","value":"PENDING_RESTORATION"},{"name":"UnknownToSdkVersion","value":"UNKNOWN_TO_SDK_VERSION"}]},"aws-native:rtbfabric:OutboundExternalLinkResponderErrorMaskingForHttpCode":{"properties":{"action":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkResponderErrorMaskingForHttpCodeAction"},"httpCode":{"type":"string"},"loggingTypes":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkResponderErrorMaskingLoggingType"}},"responseLoggingPercentage":{"type":"number"}},"type":"object","required":["action","httpCode","loggingTypes"]},"aws-native:rtbfabric:OutboundExternalLinkResponderErrorMaskingForHttpCodeAction":{"type":"string","enum":[{"name":"NoBid","value":"NO_BID"},{"name":"Passthrough","value":"PASSTHROUGH"}]},"aws-native:rtbfabric:OutboundExternalLinkResponderErrorMaskingLoggingType":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Metric","value":"METRIC"},{"name":"Response","value":"RESPONSE"}]},"aws-native:rtbfabric:OutboundExternalLinkTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:rtbfabric:RequesterGatewayStatus":{"type":"string","enum":[{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"Active","value":"ACTIVE"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"Deleted","value":"DELETED"},{"name":"Error","value":"ERROR"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Isolated","value":"ISOLATED"},{"name":"PendingIsolation","value":"PENDING_ISOLATION"},{"name":"PendingRestoration","value":"PENDING_RESTORATION"}]},"aws-native:rtbfabric:RequesterGatewayTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:rtbfabric:ResponderGatewayManagedEndpointConfiguration":{"type":"object"},"aws-native:rtbfabric:ResponderGatewayProtocol":{"type":"string","enum":[{"name":"Http","value":"HTTP"},{"name":"Https","value":"HTTPS"}]},"aws-native:rtbfabric:ResponderGatewayStatus":{"type":"string","enum":[{"name":"PendingCreation","value":"PENDING_CREATION"},{"name":"Active","value":"ACTIVE"},{"name":"PendingDeletion","value":"PENDING_DELETION"},{"name":"Deleted","value":"DELETED"},{"name":"Error","value":"ERROR"},{"name":"PendingUpdate","value":"PENDING_UPDATE"},{"name":"Isolated","value":"ISOLATED"},{"name":"PendingIsolation","value":"PENDING_ISOLATION"},{"name":"PendingRestoration","value":"PENDING_RESTORATION"}]},"aws-native:rtbfabric:ResponderGatewayTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:rtbfabric:ResponderGatewayTrustStoreConfiguration":{"properties":{"certificateAuthorityCertificates":{"type":"array","items":{"type":"string"},"description":"The certificate authority certificate."}},"type":"object","required":["certificateAuthorityCertificates"]},"aws-native:rum:AppMonitorConfiguration":{"description":"AppMonitor configuration","properties":{"allowCookies":{"type":"boolean","description":"If you set this to true, the RUM web client sets two cookies, a session cookie and a user cookie. The cookies allow the RUM web client to collect data relating to the number of users an application has and the behavior of the application across a sequence of events. Cookies are stored in the top-level domain of the current page."},"enableXRay":{"type":"boolean","description":"If you set this to true, RUM enables xray tracing for the user sessions that RUM samples. RUM adds an xray trace header to allowed HTTP requests. It also records an xray segment for allowed HTTP requests. You can see traces and segments from these user sessions in the xray console and the CW ServiceLens console."},"excludedPages":{"type":"array","items":{"type":"string"},"description":"A list of URLs in your website or application to exclude from RUM data collection. You can't include both ExcludedPages and IncludedPages in the same operation."},"favoritePages":{"type":"array","items":{"type":"string"},"description":"A list of pages in the RUM console that are to be displayed with a favorite icon."},"guestRoleArn":{"type":"string","description":"The ARN of the guest IAM role that is attached to the identity pool that is used to authorize the sending of data to RUM."},"identityPoolId":{"type":"string","description":"The ID of the identity pool that is used to authorize the sending of data to RUM."},"includedPages":{"type":"array","items":{"type":"string"},"description":"If this app monitor is to collect data from only certain pages in your application, this structure lists those pages. You can't include both ExcludedPages and IncludedPages in the same operation."},"metricDestinations":{"type":"array","items":{"$ref":"#/types/aws-native:rum:AppMonitorMetricDestination"},"description":"An array of structures which define the destinations and the metrics that you want to send."},"sessionSampleRate":{"type":"number","description":"Specifies the percentage of user sessions to use for RUM data collection. Choosing a higher percentage gives you more data but also incurs more costs. The number you specify is the percentage of user sessions that will be used. If you omit this parameter, the default of 10 is used."},"telemetries":{"type":"array","items":{"$ref":"#/types/aws-native:rum:AppMonitorTelemetry"},"description":"An array that lists the types of telemetry data that this app monitor is to collect."}},"type":"object"},"aws-native:rum:AppMonitorCustomEvents":{"description":"AppMonitor custom events configuration","properties":{"status":{"$ref":"#/types/aws-native:rum:AppMonitorCustomEventsStatus","description":"Indicates whether AppMonitor accepts custom events."}},"type":"object"},"aws-native:rum:AppMonitorCustomEventsStatus":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:rum:AppMonitorDeobfuscationConfiguration":{"description":"A structure that contains the configuration for how an app monitor can deobfuscate stack traces.","properties":{"javaScriptSourceMaps":{"$ref":"#/types/aws-native:rum:AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsProperties","description":"A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps."}},"type":"object"},"aws-native:rum:AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsProperties":{"description":"A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.","properties":{"s3Uri":{"type":"string","description":"The S3Uri of the bucket or folder that stores the source map files. It is required if status is ENABLED."},"status":{"$ref":"#/types/aws-native:rum:AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsPropertiesStatus","description":"Specifies whether JavaScript error stack traces should be unminified for this app monitor. The default is for JavaScript error stack trace unminification to be DISABLED"}},"type":"object","required":["status"]},"aws-native:rum:AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsPropertiesStatus":{"description":"Specifies whether JavaScript error stack traces should be unminified for this app monitor. The default is for JavaScript error stack trace unminification to be DISABLED","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:rum:AppMonitorMetricDefinition":{"description":"A single metric definition","properties":{"dimensionKeys":{"type":"object","additionalProperties":{"type":"string"},"description":"Use this field only if you are sending the metric to CloudWatch.\n\nThis field is a map of field paths to dimension names. It defines the dimensions to associate with this metric in CloudWatch. For extended metrics, valid values for the entries in this field are the following:\n\n\"metadata.pageId\": \"PageId\"\n\n\"metadata.browserName\": \"BrowserName\"\n\n\"metadata.deviceType\": \"DeviceType\"\n\n\"metadata.osName\": \"OSName\"\n\n\"metadata.countryCode\": \"CountryCode\"\n\n\"event_details.fileType\": \"FileType\"\n\nAll dimensions listed in this field must also be included in EventPattern."},"eventPattern":{"type":"string","description":"The pattern that defines the metric, specified as a JSON object. RUM checks events that happen in a user's session against the pattern, and events that match the pattern are sent to the metric destination.\n\nWhen you define extended metrics, the metric definition is not valid if EventPattern is omitted.\n\nExample event patterns:\n\n'{ \"event_type\": [\"com.amazon.rum.js_error_event\"], \"metadata\": { \"browserName\": [ \"Chrome\", \"Safari\" ], } }'\n\n'{ \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"metadata\": { \"browserName\": [ \"Chrome\", \"Firefox\" ] }, \"event_details\": { \"duration\": [{ \"numeric\": [ \"\u003c\", 2000 ] }] } }'\n\n'{ \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"metadata\": { \"browserName\": [ \"Chrome\", \"Safari\" ], \"countryCode\": [ \"US\" ] }, \"event_details\": { \"duration\": [{ \"numeric\": [ \"\u003e=\", 2000, \"\u003c\", 8000 ] }] } }'\n\nIf the metrics destination' is CloudWatch and the event also matches a value in DimensionKeys, then the metric is published with the specified dimensions."},"name":{"type":"string","description":"The name for the metric that is defined in this structure. For extended metrics, valid values are the following:\n\nPerformanceNavigationDuration\n\nPerformanceResourceDuration\n\nNavigationSatisfiedTransaction\n\nNavigationToleratedTransaction\n\nNavigationFrustratedTransaction\n\nWebVitalsCumulativeLayoutShift\n\nWebVitalsFirstInputDelay\n\nWebVitalsLargestContentfulPaint\n\nWebVitalsInteractionToNextPaint\n\nJsErrorCount\n\nHttpErrorCount\n\nSessionCount\n\nPageViewCount\n\nHttp4xxCount\n\nHttp5xxCount\n\nSessionDuration\n\nPageViewCountPerSession\n\nJsErrorCountPerSession\n\nHttp4xxCountPerSession\n\nHttp5xxCountPerSession\n\nJsErrorCountPerPageView\n\nHttp4xxCountPerPageView\n\nHttp5xxCountPerPageView\n\nTimeOnPage\n\nColdLaunchTime\n\nWarmLaunchTime\n\nCrashCount\n\nANRCount\n\nAppHangCount\n\nScreenLoadCount\n\nScreenLoadTime\n\nNetworkLatency\n\nSpanPayloadSize\n\nLogEventPayloadSize"},"namespace":{"type":"string","description":"The namespace used by CloudWatch Metrics for the metric that is defined in this structure"},"unitLabel":{"type":"string","description":"The CloudWatch metric unit to use for this metric. If you omit this field, the metric is recorded with no unit."},"valueKey":{"type":"string","description":"The field within the event object that the metric value is sourced from.\n\nIf you omit this field, a hardcoded value of 1 is pushed as the metric value. This is useful if you just want to count the number of events that the filter catches.\n\nIf this metric is sent to Evidently, this field will be passed to Evidently raw and Evidently will handle data extraction from the event. Note: Evidently has been discontinued."}},"type":"object","required":["name"]},"aws-native:rum:AppMonitorMetricDestination":{"description":"An structure which defines the destination and the metrics that you want to send.","properties":{"destination":{"$ref":"#/types/aws-native:rum:AppMonitorMetricDestinationDestination","description":"Defines the destination to send the metrics to. Valid values are CloudWatch and Evidently. Note: Evidently has been discontinued and is no longer supported - requests with Evidently will be rejected."},"destinationArn":{"type":"string","description":"Evidently has been discontinued and therefore this is no longer an acceptable field. If Destination is CloudWatch, do not use this parameter. \n\nThis parameter specifies the ARN of the Evidently experiment that will receive the extended metrics."},"iamRoleArn":{"type":"string","description":"Evidently has been discontinued and therefore this is no longer an acceptable field. If Destination is CloudWatch, do not use this parameter. \n\nThis parameter specifies the ARN of an IAM role that RUM will assume to write to the Evidently experiment that you are sending metrics to. This role must have permission to write to that experiment."},"metricDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:rum:AppMonitorMetricDefinition"},"description":"An array of structures which define the metrics that you want to send."}},"type":"object","required":["destination"]},"aws-native:rum:AppMonitorMetricDestinationDestination":{"description":"Defines the destination to send the metrics to. Valid values are CloudWatch and Evidently. Note: Evidently has been discontinued and is no longer supported - requests with Evidently will be rejected.","type":"string","enum":[{"name":"CloudWatch","value":"CloudWatch"},{"name":"Evidently","value":"Evidently"}]},"aws-native:rum:AppMonitorPlatform":{"type":"string","enum":[{"name":"Web","value":"Web"},{"name":"Android","value":"Android"},{"name":"Ios","value":"iOS"}]},"aws-native:rum:AppMonitorResourcePolicy":{"description":"A structure that defines resource policy attached to your app monitor.","properties":{"policyDocument":{"type":"string","description":"The JSON to use as the resource policy. The document can be up to 4 KB in size. "},"policyRevisionId":{"type":"string","description":"A string value that you can use to conditionally update your policy. You can provide the revision ID of your existing policy to make mutating requests against that policy. \n\n When you assign a policy revision ID, then later requests about that policy will be rejected with an InvalidPolicyRevisionIdException error if they don't provide the correct current revision ID."}},"type":"object","required":["policyDocument"]},"aws-native:rum:AppMonitorTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:rum:AppMonitorTelemetry":{"type":"string","enum":[{"name":"Errors","value":"errors"},{"name":"Performance","value":"performance"},{"name":"Http","value":"http"}]},"aws-native:s3:AccessGrantGrantee":{"properties":{"granteeIdentifier":{"type":"string","description":"The unique identifier of the Grantee"},"granteeType":{"$ref":"#/types/aws-native:s3:AccessGrantGranteeGranteeType","description":"Configures the transfer acceleration state for an Amazon S3 bucket."}},"type":"object","required":["granteeIdentifier","granteeType"]},"aws-native:s3:AccessGrantGranteeGranteeType":{"description":"Configures the transfer acceleration state for an Amazon S3 bucket.","type":"string","enum":[{"name":"Iam","value":"IAM"},{"name":"DirectoryUser","value":"DIRECTORY_USER"},{"name":"DirectoryGroup","value":"DIRECTORY_GROUP"}]},"aws-native:s3:AccessGrantPermission":{"description":"The level of access to be afforded to the grantee","type":"string","enum":[{"name":"Read","value":"READ"},{"name":"Write","value":"WRITE"},{"name":"Readwrite","value":"READWRITE"}]},"aws-native:s3:AccessGrantS3PrefixType":{"description":"The type of S3SubPrefix.","type":"string","enum":[{"name":"Object","value":"Object"}]},"aws-native:s3:AccessGrantTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:s3:AccessGrantsInstanceTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:s3:AccessGrantsLocationConfiguration":{"properties":{"s3SubPrefix":{"type":"string","description":"The S3 sub prefix of a registered location in your S3 Access Grants instance"}},"type":"object","required":["s3SubPrefix"]},"aws-native:s3:AccessGrantsLocationTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:s3:AccessPointNetworkOrigin":{"description":"Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies.","type":"string","enum":[{"name":"Internet","value":"Internet"},{"name":"Vpc","value":"VPC"}]},"aws-native:s3:AccessPointPublicAccessBlockConfiguration":{"properties":{"blockPublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should block public access control lists (ACLs) for buckets in this account. Setting this element to TRUE causes the following behavior:\n- PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.\n - PUT Object calls fail if the request includes a public ACL.\n. - PUT Bucket calls fail if the request includes a public ACL.\nEnabling this setting doesn't affect existing policies or ACLs."},"blockPublicPolicy":{"type":"boolean","description":"Specifies whether Amazon S3 should block public bucket policies for buckets in this account. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. Enabling this setting doesn't affect existing bucket policies."},"ignorePublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should ignore public ACLs for buckets in this account. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on buckets in this account and any objects that they contain. Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set."},"restrictPublicBuckets":{"type":"boolean","description":"Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy.\nEnabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked."}},"type":"object"},"aws-native:s3:AccessPointTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Tags are key-value pairs that you use to label your access points. Tags can help you organize and control access to access points. For more information, see [Tagging S3 resources for cost allocation or attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html) ."},"value":{"type":"string","description":"The value of the tag. Tags are key-value pairs that you use to label your access points. Tags can help you organize and control access to access points. For more information, see [Tagging S3 resources for cost allocation or attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html) ."}},"type":"object","required":["key","value"]},"aws-native:s3:AccessPointVpcConfiguration":{"description":"The Virtual Private Cloud (VPC) configuration for a bucket access point.","properties":{"vpcId":{"type":"string","description":"If this field is specified, this access point will only allow connections from the specified VPC ID."}},"type":"object"},"aws-native:s3:BucketAbacStatus":{"description":"The ABAC status of the general purpose bucket. When ABAC is enabled for the general purpose bucket, you can use tags to manage access to the general purpose buckets as well as for cost tracking purposes. When ABAC is disabled for the general purpose buckets, you can only use tags for cost tracking purposes. For more information, see [Using tags with S3 general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging.html).","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3:BucketAbortIncompleteMultipartUpload":{"description":"Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload. For more information, see [Stopping Incomplete Multipart Uploads Using a Bucket Lifecycle Policy](https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html#mpu-abort-incomplete-mpu-lifecycle-config) in the *Amazon S3 User Guide*.","properties":{"daysAfterInitiation":{"type":"integer","description":"Specifies the number of days after which Amazon S3 stops an incomplete multipart upload."}},"type":"object","required":["daysAfterInitiation"]},"aws-native:s3:BucketAccelerateConfiguration":{"description":"Configures the transfer acceleration state for an Amazon S3 bucket. For more information, see [Amazon S3 Transfer Acceleration](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html) in the *Amazon S3 User Guide*.","properties":{"accelerationStatus":{"$ref":"#/types/aws-native:s3:BucketAccelerateConfigurationAccelerationStatus","description":"Specifies the transfer acceleration status of the bucket."}},"type":"object","required":["accelerationStatus"]},"aws-native:s3:BucketAccelerateConfigurationAccelerationStatus":{"description":"Specifies the transfer acceleration status of the bucket.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Suspended","value":"Suspended"}]},"aws-native:s3:BucketAccessControl":{"description":"This is a legacy property, and it is not recommended for most use cases. A majority of modern use cases in Amazon S3 no longer require the use of ACLs, and we recommend that you keep ACLs disabled. For more information, see [Controlling object ownership](https://docs.aws.amazon.com//AmazonS3/latest/userguide/about-object-ownership.html) in the *Amazon S3 User Guide*.\n  A canned access control list (ACL) that grants predefined permissions to the bucket. For more information about canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl) in the *Amazon S3 User Guide*.\n  S3 buckets are created with ACLs disabled by default. Therefore, unless you explicitly set the [AWS::S3::OwnershipControls](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-ownershipcontrols.html) property to enable ACLs, your resource will fail to deploy with any value other than Private. Use cases requiring ACLs are uncommon.\n  The majority of access control configurations can be successfully and more easily achieved with bucket policies. For more information, see [AWS::S3::BucketPolicy](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-s3-policy.html). For examples of common policy configurations, including S3 Server Access Logs buckets and more, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html) in the *Amazon S3 User Guide*.","type":"string","enum":[{"name":"AuthenticatedRead","value":"AuthenticatedRead"},{"name":"AwsExecRead","value":"AwsExecRead"},{"name":"BucketOwnerFullControl","value":"BucketOwnerFullControl"},{"name":"BucketOwnerRead","value":"BucketOwnerRead"},{"name":"LogDeliveryWrite","value":"LogDeliveryWrite"},{"name":"Private","value":"Private"},{"name":"PublicRead","value":"PublicRead"},{"name":"PublicReadWrite","value":"PublicReadWrite"}]},"aws-native:s3:BucketAccessControlTranslation":{"description":"Specify this only in a cross-account scenario (where source and destination bucket owners are not the same), and you want to change replica ownership to the AWS-account that owns the destination bucket. If this is not specified in the replication configuration, the replicas are owned by same AWS-account that owns the source object.","properties":{"owner":{"type":"string","description":"Specifies the replica ownership. For default and valid values, see [PUT bucket replication](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTreplication.html) in the *Amazon S3 API Reference*."}},"type":"object","required":["owner"]},"aws-native:s3:BucketAnalyticsConfiguration":{"description":"Specifies the configuration and any analyses for the analytics filter of an Amazon S3 bucket.","properties":{"id":{"type":"string","description":"The ID that identifies the analytics configuration."},"prefix":{"type":"string","description":"The prefix that an object must have to be included in the analytics results."},"storageClassAnalysis":{"$ref":"#/types/aws-native:s3:BucketStorageClassAnalysis","description":"Contains data related to access patterns to be collected and made available to analyze the tradeoffs between different storage classes."},"tagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTagFilter"},"description":"The tags to use when evaluating an analytics filter.\n The analytics only includes objects that meet the filter's criteria. If no filter is specified, all of the contents of the bucket are included in the analysis."}},"type":"object","required":["id","storageClassAnalysis"]},"aws-native:s3:BucketBlockedEncryptionTypeListItem":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"SseC","value":"SSE-C"}]},"aws-native:s3:BucketBlockedEncryptionTypes":{"description":"A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ``PutObject``, ``CopyObject``, ``PostObject``, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html).\n This data type is used with the following actions:\n  +   [PutBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html) \n  +   [GetBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html) \n  +   [DeleteBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketEncryption.html) \n  \n  + Permissions You must have the s3:PutEncryptionConfiguration permission to block or unblock an encryption type for a bucket. You must have the s3:GetEncryptionConfiguration permission to view a bucket's encryption type.","properties":{"encryptionType":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketBlockedEncryptionTypeListItem"},"description":"The object encryption type that you want to block or unblock for an Amazon S3 general purpose bucket.\n  Currently, this parameter only supports blocking or unblocking server side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html)."}},"type":"object"},"aws-native:s3:BucketCorsConfiguration":{"description":"Describes the cross-origin access configuration for objects in an Amazon S3 bucket. For more information, see [Enabling Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html) in the *Amazon S3 User Guide*.","properties":{"corsRules":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketCorsRule"},"description":"A set of origins and methods (cross-origin access that you want to allow). You can add up to 100 rules to the configuration."}},"type":"object","required":["corsRules"]},"aws-native:s3:BucketCorsRule":{"description":"Specifies a cross-origin access rule for an Amazon S3 bucket.","properties":{"allowedHeaders":{"type":"array","items":{"type":"string"},"description":"Headers that are specified in the ``Access-Control-Request-Headers`` header. These headers are allowed in a preflight OPTIONS request. In response to any preflight OPTIONS request, Amazon S3 returns any requested headers that are allowed."},"allowedMethods":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketCorsRuleAllowedMethodsItem"},"description":"An HTTP method that you allow the origin to run.\n *Allowed values*: ``GET`` | ``PUT`` | ``HEAD`` | ``POST`` | ``DELETE``"},"allowedOrigins":{"type":"array","items":{"type":"string"},"description":"One or more origins you want customers to be able to access the bucket from."},"exposedHeaders":{"type":"array","items":{"type":"string"},"description":"One or more headers in the response that you want customers to be able to access from their applications (for example, from a JavaScript ``XMLHttpRequest`` object)."},"id":{"type":"string","description":"A unique identifier for this rule. The value must be no more than 255 characters."},"maxAge":{"type":"integer","description":"The time in seconds that your browser is to cache the preflight response for the specified resource."}},"type":"object","required":["allowedMethods","allowedOrigins"]},"aws-native:s3:BucketCorsRuleAllowedMethodsItem":{"type":"string","enum":[{"name":"Get","value":"GET"},{"name":"Put","value":"PUT"},{"name":"Head","value":"HEAD"},{"name":"Post","value":"POST"},{"name":"Delete","value":"DELETE"}]},"aws-native:s3:BucketDataExport":{"description":"Specifies how data related to the storage class analysis for an Amazon S3 bucket should be exported.","properties":{"destination":{"$ref":"#/types/aws-native:s3:BucketDestination","description":"The place to store the data for an analysis."},"outputSchemaVersion":{"type":"string","description":"The version of the output schema to use when exporting data. Must be ``V_1``."}},"type":"object","required":["destination","outputSchemaVersion"]},"aws-native:s3:BucketDefaultRetention":{"description":"The container element for optionally specifying the default Object Lock retention settings for new objects placed in the specified bucket.\n   +  The ``DefaultRetention`` settings require both a mode and a period.\n  +  The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time.","properties":{"days":{"type":"integer","description":"The number of days that you want to specify for the default retention period. If Object Lock is turned on, you must specify ``Mode`` and specify either ``Days`` or ``Years``."},"mode":{"$ref":"#/types/aws-native:s3:BucketDefaultRetentionMode","description":"The default Object Lock retention mode you want to apply to new objects placed in the specified bucket. If Object Lock is turned on, you must specify ``Mode`` and specify either ``Days`` or ``Years``."},"years":{"type":"integer","description":"The number of years that you want to specify for the default retention period. If Object Lock is turned on, you must specify ``Mode`` and specify either ``Days`` or ``Years``."}},"type":"object"},"aws-native:s3:BucketDefaultRetentionMode":{"description":"The default Object Lock retention mode you want to apply to new objects placed in the specified bucket. If Object Lock is turned on, you must specify ``Mode`` and specify either ``Days`` or ``Years``.","type":"string","enum":[{"name":"Compliance","value":"COMPLIANCE"},{"name":"Governance","value":"GOVERNANCE"}]},"aws-native:s3:BucketDeleteMarkerReplication":{"description":"Specifies whether Amazon S3 replicates delete markers. If you specify a ``Filter`` in your replication configuration, you must also include a ``DeleteMarkerReplication`` element. If your ``Filter`` includes a ``Tag`` element, the ``DeleteMarkerReplication````Status`` must be set to Disabled, because Amazon S3 does not support replicating delete markers for tag-based rules. For an example configuration, see [Basic Rule Configuration](https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-add-config.html#replication-config-min-rule-config). \n For more information about delete marker replication, see [Basic Rule Configuration](https://docs.aws.amazon.com/AmazonS3/latest/dev/delete-marker-replication.html). \n  If you are using an earlier version of the replication configuration, Amazon S3 handles replication of delete markers differently. For more information, see [Backward Compatibility](https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-add-config.html#replication-backward-compat-considerations).","properties":{"status":{"$ref":"#/types/aws-native:s3:BucketDeleteMarkerReplicationStatus","description":"Indicates whether to replicate delete markers."}},"type":"object"},"aws-native:s3:BucketDeleteMarkerReplicationStatus":{"description":"Indicates whether to replicate delete markers.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:s3:BucketDestination":{"description":"Specifies information about where to publish analysis or configuration results for an Amazon S3 bucket.","properties":{"bucketAccountId":{"type":"string","description":"The account ID that owns the destination S3 bucket. If no account ID is provided, the owner is not validated before exporting data.\n   Although this value is optional, we strongly recommend that you set it to help prevent problems if the destination bucket ownership changes."},"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the bucket to which data is exported."},"format":{"$ref":"#/types/aws-native:s3:BucketDestinationFormat","description":"Specifies the file format used when exporting data to Amazon S3.\n *Allowed values*: ``CSV`` | ``ORC`` | ``Parquet``"},"prefix":{"type":"string","description":"The prefix to use when exporting data. The prefix is prepended to all results."}},"type":"object","required":["bucketArn","format"]},"aws-native:s3:BucketDestinationFormat":{"description":"Specifies the file format used when exporting data to Amazon S3.\n *Allowed values*: ``CSV`` | ``ORC`` | ``Parquet``","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Orc","value":"ORC"},{"name":"Parquet","value":"Parquet"}]},"aws-native:s3:BucketEncryption":{"description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3-managed keys (SSE-S3), AWS KMS-managed keys (SSE-KMS), or dual-layer server-side encryption with KMS-managed keys (DSSE-KMS). For information about the Amazon S3 default encryption feature, see [Amazon S3 Default Encryption for S3 Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html) in the *Amazon S3 User Guide*.","properties":{"serverSideEncryptionConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketServerSideEncryptionRule"},"description":"Specifies the default server-side-encryption configuration."}},"type":"object","required":["serverSideEncryptionConfiguration"]},"aws-native:s3:BucketEncryptionConfiguration":{"description":"Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.\n  If you're specifying a customer managed KMS key, we recommend using a fully qualified KMS key ARN. If you use a KMS key alias instead, then KMS resolves the key within the requester’s account. This behavior can result in data that's encrypted with a KMS key that belongs to the requester, and not the bucket owner.","properties":{"replicaKmsKeyId":{"type":"string","description":"Specifies the ID (Key ARN or Alias ARN) of the customer managed AWS KMS key stored in AWS Key Management Service (KMS) for the destination bucket. Amazon S3 uses this key to encrypt replica objects. Amazon S3 only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *Key Management Service Developer Guide*."}},"type":"object","required":["replicaKmsKeyId"]},"aws-native:s3:BucketEventBridgeConfiguration":{"description":"Amazon S3 can send events to Amazon EventBridge whenever certain events happen in your bucket, see [Using EventBridge](https://docs.aws.amazon.com/AmazonS3/latest/userguide/EventBridge.html) in the *Amazon S3 User Guide*.\n Unlike other destinations, delivery of events to EventBridge can be either enabled or disabled for a bucket. If enabled, all events will be sent to EventBridge and you can use EventBridge rules to route events to additional targets. For more information, see [What Is Amazon EventBridge](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-what-is.html) in the *Amazon EventBridge User Guide*","properties":{"eventBridgeEnabled":{"type":"boolean","description":"Enables delivery of events to Amazon EventBridge."}},"type":"object","required":["eventBridgeEnabled"]},"aws-native:s3:BucketFilterRule":{"description":"Specifies the Amazon S3 object key name to filter on. An object key name is the name assigned to an object in your Amazon S3 bucket. You specify whether to filter on the suffix or prefix of the object key name. A prefix is a specific string of characters at the beginning of an object key name, which you can use to organize objects. For example, you can start the key names of related objects with a prefix, such as ``2023-`` or ``engineering/``. Then, you can use ``FilterRule`` to find objects in a bucket with key names that have the same prefix. A suffix is similar to a prefix, but it is at the end of the object key name instead of at the beginning.","properties":{"name":{"type":"string","description":"The object key name prefix or suffix identifying one or more objects to which the filtering rule applies. The maximum length is 1,024 characters. Overlapping prefixes and suffixes are not supported. For more information, see [Configuring Event Notifications](https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html) in the *Amazon S3 User Guide*."},"value":{"type":"string","description":"The value that the filter searches for in object key names."}},"type":"object","required":["name","value"]},"aws-native:s3:BucketIntelligentTieringConfiguration":{"description":"Specifies the S3 Intelligent-Tiering configuration for an Amazon S3 bucket.\n For information about the S3 Intelligent-Tiering storage class, see [Storage class for automatically optimizing frequently and infrequently accessed objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html#sc-dynamic-data-access).","properties":{"id":{"type":"string","description":"The ID used to identify the S3 Intelligent-Tiering configuration."},"prefix":{"type":"string","description":"An object key name prefix that identifies the subset of objects to which the rule applies."},"status":{"$ref":"#/types/aws-native:s3:BucketIntelligentTieringConfigurationStatus","description":"Specifies the status of the configuration."},"tagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTagFilter"},"description":"A container for a key-value pair."},"tierings":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTiering"},"description":"Specifies a list of S3 Intelligent-Tiering storage class tiers in the configuration. At least one tier must be defined in the list. At most, you can specify two tiers in the list, one for each available AccessTier: ``ARCHIVE_ACCESS`` and ``DEEP_ARCHIVE_ACCESS``.\n  You only need Intelligent Tiering Configuration enabled on a bucket if you want to automatically move objects stored in the Intelligent-Tiering storage class to Archive Access or Deep Archive Access tiers."}},"type":"object","required":["id","status","tierings"]},"aws-native:s3:BucketIntelligentTieringConfigurationStatus":{"description":"Specifies the status of the configuration.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:s3:BucketInventoryConfiguration":{"description":"Specifies the S3 Inventory configuration for an Amazon S3 bucket. For more information, see [GET Bucket inventory](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketGETInventoryConfig.html) in the *Amazon S3 API Reference*.","properties":{"destination":{"$ref":"#/types/aws-native:s3:BucketDestination","description":"Contains information about where to publish the inventory results."},"enabled":{"type":"boolean","description":"Specifies whether the inventory is enabled or disabled. If set to ``True``, an inventory list is generated. If set to ``False``, no inventory list is generated."},"id":{"type":"string","description":"The ID used to identify the inventory configuration."},"includedObjectVersions":{"$ref":"#/types/aws-native:s3:BucketInventoryConfigurationIncludedObjectVersions","description":"Object versions to include in the inventory list. If set to ``All``, the list includes all the object versions, which adds the version-related fields ``VersionId``, ``IsLatest``, and ``DeleteMarker`` to the list. If set to ``Current``, the list does not contain these version-related fields."},"optionalFields":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketInventoryConfigurationOptionalFieldsItem"},"description":"Contains the optional fields that are included in the inventory results."},"prefix":{"type":"string","description":"Specifies the inventory filter prefix."},"scheduleFrequency":{"$ref":"#/types/aws-native:s3:BucketInventoryConfigurationScheduleFrequency","description":"Specifies the schedule for generating inventory results."}},"type":"object","required":["destination","enabled","id","includedObjectVersions","scheduleFrequency"]},"aws-native:s3:BucketInventoryConfigurationIncludedObjectVersions":{"description":"Object versions to include in the inventory list. If set to ``All``, the list includes all the object versions, which adds the version-related fields ``VersionId``, ``IsLatest``, and ``DeleteMarker`` to the list. If set to ``Current``, the list does not contain these version-related fields.","type":"string","enum":[{"name":"All","value":"All"},{"name":"Current","value":"Current"}]},"aws-native:s3:BucketInventoryConfigurationOptionalFieldsItem":{"type":"string","enum":[{"name":"Size","value":"Size"},{"name":"LastModifiedDate","value":"LastModifiedDate"},{"name":"StorageClass","value":"StorageClass"},{"name":"ETag","value":"ETag"},{"name":"IsMultipartUploaded","value":"IsMultipartUploaded"},{"name":"ReplicationStatus","value":"ReplicationStatus"},{"name":"EncryptionStatus","value":"EncryptionStatus"},{"name":"ObjectLockRetainUntilDate","value":"ObjectLockRetainUntilDate"},{"name":"ObjectLockMode","value":"ObjectLockMode"},{"name":"ObjectLockLegalHoldStatus","value":"ObjectLockLegalHoldStatus"},{"name":"IntelligentTieringAccessTier","value":"IntelligentTieringAccessTier"},{"name":"BucketKeyStatus","value":"BucketKeyStatus"},{"name":"ChecksumAlgorithm","value":"ChecksumAlgorithm"},{"name":"ObjectAccessControlList","value":"ObjectAccessControlList"},{"name":"ObjectOwner","value":"ObjectOwner"},{"name":"LifecycleExpirationDate","value":"LifecycleExpirationDate"}]},"aws-native:s3:BucketInventoryConfigurationScheduleFrequency":{"description":"Specifies the schedule for generating inventory results.","type":"string","enum":[{"name":"Daily","value":"Daily"},{"name":"Weekly","value":"Weekly"}]},"aws-native:s3:BucketInventoryTableConfiguration":{"description":"The inventory table configuration for an S3 Metadata configuration.","properties":{"configurationState":{"$ref":"#/types/aws-native:s3:BucketInventoryTableConfigurationConfigurationState","description":"The configuration state of the inventory table, indicating whether the inventory table is enabled or disabled."},"encryptionConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataTableEncryptionConfiguration","description":"The encryption configuration for the inventory table."},"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the inventory table."},"tableName":{"type":"string","description":"The name of the inventory table."}},"type":"object","required":["configurationState"]},"aws-native:s3:BucketInventoryTableConfigurationConfigurationState":{"description":"The configuration state of the inventory table, indicating whether the inventory table is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:s3:BucketJournalTableConfiguration":{"description":"The journal table configuration for an S3 Metadata configuration.","properties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataTableEncryptionConfiguration","description":"The encryption configuration for the journal table."},"recordExpiration":{"$ref":"#/types/aws-native:s3:BucketRecordExpiration","description":"The journal table record expiration settings for the journal table."},"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the journal table."},"tableName":{"type":"string","description":"The name of the journal table."}},"type":"object","required":["recordExpiration"]},"aws-native:s3:BucketLambdaConfiguration":{"description":"Describes the LAMlong functions to invoke and the events for which to invoke them.","properties":{"event":{"type":"string","description":"The Amazon S3 bucket event for which to invoke the LAMlong function. For more information, see [Supported Event Types](https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html) in the *Amazon S3 User Guide*."},"filter":{"$ref":"#/types/aws-native:s3:BucketNotificationFilter","description":"The filtering rules that determine which objects invoke the AWS Lambda function. For example, you can create a filter so that only image files with a ``.jpg`` extension invoke the function when they are added to the Amazon S3 bucket."},"function":{"type":"string","description":"The Amazon Resource Name (ARN) of the LAMlong function that Amazon S3 invokes when the specified event type occurs."}},"type":"object","required":["event","function"]},"aws-native:s3:BucketLifecycleConfiguration":{"description":"Specifies the lifecycle configuration for objects in an Amazon S3 bucket. For more information, see [Object Lifecycle Management](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html) in the *Amazon S3 User Guide*.","properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketRule"},"description":"A lifecycle rule for individual objects in an Amazon S3 bucket."},"transitionDefaultMinimumObjectSize":{"$ref":"#/types/aws-native:s3:BucketLifecycleConfigurationTransitionDefaultMinimumObjectSize","description":"Indicates which default minimum object size behavior is applied to the lifecycle configuration.\n  This parameter applies to general purpose buckets only. It isn't supported for directory bucket lifecycle configurations.\n   +  ``all_storage_classes_128K`` - Objects smaller than 128 KB will not transition to any storage class by default.\n  +  ``varies_by_storage_class`` - Objects smaller than 128 KB will transition to Glacier Flexible Retrieval or Glacier Deep Archive storage classes. By default, all other storage classes will prevent transitions smaller than 128 KB. \n  \n To customize the minimum object size for any transition you can add a filter that specifies a custom ``ObjectSizeGreaterThan`` or ``ObjectSizeLessThan`` in the body of your transition rule. Custom filters always take precedence over the default transition behavior."}},"type":"object","required":["rules"]},"aws-native:s3:BucketLifecycleConfigurationTransitionDefaultMinimumObjectSize":{"description":"Indicates which default minimum object size behavior is applied to the lifecycle configuration.\n  This parameter applies to general purpose buckets only. It isn't supported for directory bucket lifecycle configurations.\n   +  ``all_storage_classes_128K`` - Objects smaller than 128 KB will not transition to any storage class by default.\n  +  ``varies_by_storage_class`` - Objects smaller than 128 KB will transition to Glacier Flexible Retrieval or Glacier Deep Archive storage classes. By default, all other storage classes will prevent transitions smaller than 128 KB. \n  \n To customize the minimum object size for any transition you can add a filter that specifies a custom ``ObjectSizeGreaterThan`` or ``ObjectSizeLessThan`` in the body of your transition rule. Custom filters always take precedence over the default transition behavior.","type":"string","enum":[{"name":"VariesByStorageClass","value":"varies_by_storage_class"},{"name":"AllStorageClasses128k","value":"all_storage_classes_128K"}]},"aws-native:s3:BucketLoggingConfiguration":{"description":"Describes where logs are stored and the prefix that Amazon S3 assigns to all log object keys for a bucket. For examples and more information, see [PUT Bucket logging](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTlogging.html) in the *Amazon S3 API Reference*.\n  To successfully complete the ``AWS::S3::Bucket LoggingConfiguration`` request, you must have ``s3:PutObject`` and ``s3:PutObjectAcl`` in your IAM permissions.","properties":{"destinationBucketName":{"type":"string","description":"The name of the bucket where Amazon S3 should store server access log files. You can store log files in any bucket that you own. By default, logs are stored in the bucket where the ``LoggingConfiguration`` property is defined."},"logFilePrefix":{"type":"string","description":"A prefix for all log object keys. If you store log files from multiple Amazon S3 buckets in a single bucket, you can use a prefix to distinguish which log files came from which bucket."},"targetObjectKeyFormat":{"$ref":"#/types/aws-native:s3:BucketTargetObjectKeyFormat","description":"Amazon S3 key format for log objects. Only one format, either PartitionedPrefix or SimplePrefix, is allowed."}},"type":"object"},"aws-native:s3:BucketMetadataConfiguration":{"description":"Creates a V2 S3 Metadata configuration of a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the *Amazon S3 User Guide*.","properties":{"destination":{"$ref":"#/types/aws-native:s3:BucketMetadataDestination","description":"The destination information for the S3 Metadata configuration."},"inventoryTableConfiguration":{"$ref":"#/types/aws-native:s3:BucketInventoryTableConfiguration","description":"The inventory table configuration for a metadata configuration."},"journalTableConfiguration":{"$ref":"#/types/aws-native:s3:BucketJournalTableConfiguration","description":"The journal table configuration for a metadata configuration."}},"type":"object","required":["journalTableConfiguration"]},"aws-native:s3:BucketMetadataDestination":{"description":"The destination information for the S3 Metadata configuration.","properties":{"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket where the metadata configuration is stored."},"tableBucketType":{"$ref":"#/types/aws-native:s3:BucketMetadataDestinationTableBucketType","description":"The type of the table bucket where the metadata configuration is stored. The ``aws`` value indicates an AWS managed table bucket, and the ``customer`` value indicates a customer-managed table bucket. V2 metadata configurations are stored in AWS managed table buckets, and V1 metadata configurations are stored in customer-managed table buckets."},"tableNamespace":{"type":"string","description":"The namespace in the table bucket where the metadata tables for a metadata configuration are stored."}},"type":"object","required":["tableBucketType"]},"aws-native:s3:BucketMetadataDestinationTableBucketType":{"description":"The type of the table bucket where the metadata configuration is stored. The ``aws`` value indicates an AWS managed table bucket, and the ``customer`` value indicates a customer-managed table bucket. V2 metadata configurations are stored in AWS managed table buckets, and V1 metadata configurations are stored in customer-managed table buckets.","type":"string","enum":[{"name":"Aws","value":"aws"},{"name":"Customer","value":"customer"}]},"aws-native:s3:BucketMetadataTableConfiguration":{"description":"We recommend that you create your S3 Metadata configurations by using the V2 [MetadataConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadataconfiguration.html) resource type. We no longer recommend using the V1 ``MetadataTableConfiguration`` resource type. \n If you created your S3 Metadata configuration before July 15, 2025, we recommend that you delete and re-create your configuration by using the [MetadataConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-s3-bucket-metadataconfiguration.html) resource type so that you can expire journal table records and create a live inventory table.\n  Creates a V1 S3 Metadata configuration for a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the *Amazon S3 User Guide*.","properties":{"s3TablesDestination":{"$ref":"#/types/aws-native:s3:BucketS3TablesDestination","description":"The destination information for the metadata table configuration. The destination table bucket must be in the same Region and AWS-account as the general purpose bucket. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket."}},"type":"object","required":["s3TablesDestination"]},"aws-native:s3:BucketMetadataTableEncryptionConfiguration":{"description":"The encryption settings for an S3 Metadata journal table or inventory table configuration.","properties":{"kmsKeyArn":{"type":"string","description":"If server-side encryption with KMSlong (KMS) keys (SSE-KMS) is specified, you must also specify the KMS key Amazon Resource Name (ARN). You must specify a customer-managed KMS key that's located in the same Region as the general purpose bucket that corresponds to the metadata table configuration."},"sseAlgorithm":{"$ref":"#/types/aws-native:s3:BucketMetadataTableEncryptionConfigurationSseAlgorithm","description":"The encryption type specified for a metadata table. To specify server-side encryption with KMSlong (KMS) keys (SSE-KMS), use the ``aws:kms`` value. To specify server-side encryption with Amazon S3 managed keys (SSE-S3), use the ``AES256`` value."}},"type":"object","required":["sseAlgorithm"]},"aws-native:s3:BucketMetadataTableEncryptionConfigurationSseAlgorithm":{"description":"The encryption type specified for a metadata table. To specify server-side encryption with KMSlong (KMS) keys (SSE-KMS), use the ``aws:kms`` value. To specify server-side encryption with Amazon S3 managed keys (SSE-S3), use the ``AES256`` value.","type":"string","enum":[{"name":"Awskms","value":"aws:kms"},{"name":"Aes256","value":"AES256"}]},"aws-native:s3:BucketMetrics":{"description":"A container specifying replication metrics-related settings enabling replication metrics and events.","properties":{"eventThreshold":{"$ref":"#/types/aws-native:s3:BucketReplicationTimeValue","description":"A container specifying the time threshold for emitting the ``s3:Replication:OperationMissedThreshold`` event."},"status":{"$ref":"#/types/aws-native:s3:BucketMetricsStatus","description":"Specifies whether the replication metrics are enabled."}},"type":"object","required":["status"]},"aws-native:s3:BucketMetricsConfiguration":{"description":"Specifies a metrics configuration for the CloudWatch request metrics (specified by the metrics configuration ID) from an Amazon S3 bucket. If you're updating an existing metrics configuration, note that this is a full replacement of the existing metrics configuration. If you don't include the elements you want to keep, they are erased. For examples, see [AWS::S3::Bucket](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html#aws-properties-s3-bucket--examples). For more information, see [PUT Bucket metrics](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTMetricConfiguration.html) in the *Amazon S3 API Reference*.","properties":{"accessPointArn":{"type":"string","description":"The access point that was used while performing operations on the object. The metrics configuration only includes objects that meet the filter's criteria."},"id":{"type":"string","description":"The ID used to identify the metrics configuration. This can be any value you choose that helps you identify your metrics configuration."},"prefix":{"type":"string","description":"The prefix that an object must have to be included in the metrics results."},"tagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTagFilter"},"description":"Specifies a list of tag filters to use as a metrics configuration filter. The metrics configuration includes only objects that meet the filter's criteria."}},"type":"object","required":["id"]},"aws-native:s3:BucketMetricsStatus":{"description":"Specifies whether the replication metrics are enabled.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:s3:BucketNamespace":{"type":"string","enum":[{"name":"Global","value":"global"},{"name":"AccountRegional","value":"account-regional"}]},"aws-native:s3:BucketNoncurrentVersionExpiration":{"description":"Specifies when noncurrent object versions expire. Upon expiration, S3 permanently deletes the noncurrent object versions. You set this lifecycle configuration action on a bucket that has versioning enabled (or suspended) to request that S3 delete noncurrent object versions at a specific period in the object's lifetime. For more information about setting a lifecycle rule configuration, see [AWS::S3::Bucket Rule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-lifecycleconfig-rule.html).","properties":{"newerNoncurrentVersions":{"type":"integer","description":"Specifies how many noncurrent versions S3 will retain. If there are this many more recent noncurrent versions, S3 will take the associated action. For more information about noncurrent versions, see [Lifecycle configuration elements](https://docs.aws.amazon.com/AmazonS3/latest/userguide/intro-lifecycle-rules.html) in the *Amazon S3 User Guide*."},"noncurrentDays":{"type":"integer","description":"Specifies the number of days an object is noncurrent before S3 can perform the associated action. For information about the noncurrent days calculations, see [How Amazon S3 Calculates When an Object Became Noncurrent](https://docs.aws.amazon.com/AmazonS3/latest/dev/intro-lifecycle-rules.html#non-current-days-calculations) in the *Amazon S3 User Guide*."}},"type":"object","required":["noncurrentDays"]},"aws-native:s3:BucketNoncurrentVersionTransition":{"description":"Container for the transition rule that describes when noncurrent objects transition to the ``STANDARD_IA``, ``ONEZONE_IA``, ``INTELLIGENT_TIERING``, ``GLACIER_IR``, ``GLACIER``, or ``DEEP_ARCHIVE`` storage class. If your bucket is versioning-enabled (or versioning is suspended), you can set this action to request that Amazon S3 transition noncurrent object versions to the ``STANDARD_IA``, ``ONEZONE_IA``, ``INTELLIGENT_TIERING``, ``GLACIER_IR``, ``GLACIER``, or ``DEEP_ARCHIVE`` storage class at a specific period in the object's lifetime. If you specify this property, don't specify the ``NoncurrentVersionTransitions`` property.","properties":{"newerNoncurrentVersions":{"type":"integer","description":"Specifies how many noncurrent versions S3 will retain. If there are this many more recent noncurrent versions, S3 will take the associated action. For more information about noncurrent versions, see [Lifecycle configuration elements](https://docs.aws.amazon.com/AmazonS3/latest/userguide/intro-lifecycle-rules.html) in the *Amazon S3 User Guide*."},"storageClass":{"$ref":"#/types/aws-native:s3:BucketNoncurrentVersionTransitionStorageClass","description":"The class of storage used to store the object."},"transitionInDays":{"type":"integer","description":"Specifies the number of days an object is noncurrent before Amazon S3 can perform the associated action. For information about the noncurrent days calculations, see [How Amazon S3 Calculates How Long an Object Has Been Noncurrent](https://docs.aws.amazon.com/AmazonS3/latest/dev/intro-lifecycle-rules.html#non-current-days-calculations) in the *Amazon S3 User Guide*."}},"type":"object","required":["storageClass","transitionInDays"]},"aws-native:s3:BucketNoncurrentVersionTransitionStorageClass":{"description":"The class of storage used to store the object.","type":"string","enum":[{"name":"DeepArchive","value":"DEEP_ARCHIVE"},{"name":"Glacier","value":"GLACIER"},{"name":"GlacierIr","value":"GLACIER_IR"},{"name":"IntelligentTiering","value":"INTELLIGENT_TIERING"},{"name":"OnezoneIa","value":"ONEZONE_IA"},{"name":"StandardIa","value":"STANDARD_IA"}]},"aws-native:s3:BucketNotificationConfiguration":{"description":"Describes the notification configuration for an Amazon S3 bucket.\n  If you create the target resource and related permissions in the same template, you might have a circular dependency.\n For example, you might use the ``AWS::Lambda::Permission`` resource to grant the bucket permission to invoke an AWS Lambda function. However, AWS CloudFormation can't create the bucket until the bucket has permission to invoke the function (AWS CloudFormation checks whether the bucket can invoke the function). If you're using Refs to pass the bucket name, this leads to a circular dependency.\n To avoid this dependency, you can create all resources without specifying the notification configuration. Then, update the stack with a notification configuration.\n For more information on permissions, see [AWS::Lambda::Permission](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html) and [Granting Permissions to Publish Event Notification Messages to a Destination](https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html#grant-destinations-permissions-to-s3).","properties":{"eventBridgeConfiguration":{"$ref":"#/types/aws-native:s3:BucketEventBridgeConfiguration","description":"Enables delivery of events to Amazon EventBridge."},"lambdaConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketLambdaConfiguration"},"description":"Describes the LAMlong functions to invoke and the events for which to invoke them."},"queueConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketQueueConfiguration"},"description":"The Amazon Simple Queue Service queues to publish messages to and the events for which to publish messages."},"topicConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTopicConfiguration"},"description":"The topic to which notifications are sent and the events for which notifications are generated."}},"type":"object"},"aws-native:s3:BucketNotificationFilter":{"description":"Specifies object key name filtering rules. For information about key name filtering, see [Configuring event notifications using object key name filtering](https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-how-to-filtering.html) in the *Amazon S3 User Guide*.","properties":{"s3Key":{"$ref":"#/types/aws-native:s3:BucketS3KeyFilter","description":"A container for object key name prefix and suffix filtering rules."}},"type":"object","required":["s3Key"]},"aws-native:s3:BucketObjectLockConfiguration":{"description":"Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see [Locking Objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html).","properties":{"objectLockEnabled":{"type":"string","description":"Indicates whether this bucket has an Object Lock configuration enabled. Enable ``ObjectLockEnabled`` when you apply ``ObjectLockConfiguration`` to a bucket."},"rule":{"$ref":"#/types/aws-native:s3:BucketObjectLockRule","description":"Specifies the Object Lock rule for the specified object. Enable this rule when you apply ``ObjectLockConfiguration`` to a bucket. If Object Lock is turned on, bucket settings require both ``Mode`` and a period of either ``Days`` or ``Years``. You cannot specify ``Days`` and ``Years`` at the same time. For more information, see [ObjectLockRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-objectlockrule.html) and [DefaultRetention](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-defaultretention.html)."}},"type":"object"},"aws-native:s3:BucketObjectLockRule":{"description":"Specifies the Object Lock rule for the specified object. Enable the this rule when you apply ``ObjectLockConfiguration`` to a bucket.","properties":{"defaultRetention":{"$ref":"#/types/aws-native:s3:BucketDefaultRetention","description":"The default Object Lock retention mode and period that you want to apply to new objects placed in the specified bucket. If Object Lock is turned on, bucket settings require both ``Mode`` and a period of either ``Days`` or ``Years``. You cannot specify ``Days`` and ``Years`` at the same time. For more information about allowable values for mode and period, see [DefaultRetention](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-defaultretention.html)."}},"type":"object"},"aws-native:s3:BucketOwnershipControls":{"description":"Specifies the container element for Object Ownership rules.\n S3 Object Ownership is an Amazon S3 bucket-level setting that you can use to disable access control lists (ACLs) and take ownership of every object in your bucket, simplifying access management for data stored in Amazon S3. For more information, see [Controlling ownership of objects and disabling ACLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html) in the *Amazon S3 User Guide*.","properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketOwnershipControlsRule"},"description":"Specifies the container element for Object Ownership rules."}},"type":"object","required":["rules"]},"aws-native:s3:BucketOwnershipControlsRule":{"description":"Specifies an Object Ownership rule.\n S3 Object Ownership is an Amazon S3 bucket-level setting that you can use to disable access control lists (ACLs) and take ownership of every object in your bucket, simplifying access management for data stored in Amazon S3. For more information, see [Controlling ownership of objects and disabling ACLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/about-object-ownership.html) in the *Amazon S3 User Guide*.","properties":{"objectOwnership":{"$ref":"#/types/aws-native:s3:BucketOwnershipControlsRuleObjectOwnership","description":"Specifies an object ownership rule."}},"type":"object"},"aws-native:s3:BucketOwnershipControlsRuleObjectOwnership":{"description":"Specifies an object ownership rule.","type":"string","enum":[{"name":"ObjectWriter","value":"ObjectWriter"},{"name":"BucketOwnerPreferred","value":"BucketOwnerPreferred"},{"name":"BucketOwnerEnforced","value":"BucketOwnerEnforced"}]},"aws-native:s3:BucketPublicAccessBlockConfiguration":{"description":"The PublicAccessBlock configuration that you want to apply to this Amazon S3 bucket. You can enable the configuration options in any combination. Bucket-level settings work alongside account-level settings (which may inherit from organization-level policies). For more information about when Amazon S3 considers a bucket or object public, see [The Meaning of \"Public\"](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status) in the *Amazon S3 User Guide*.","properties":{"blockPublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should block public access control lists (ACLs) for this bucket and objects in this bucket. Setting this element to ``TRUE`` causes the following behavior:\n  +  PUT Bucket ACL and PUT Object ACL calls fail if the specified ACL is public.\n  +  PUT Object calls fail if the request includes a public ACL.\n  +  PUT Bucket calls fail if the request includes a public ACL.\n  \n Enabling this setting doesn't affect existing policies or ACLs."},"blockPublicPolicy":{"type":"boolean","description":"Specifies whether Amazon S3 should block public bucket policies for this bucket. Setting this element to ``TRUE`` causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. \n Enabling this setting doesn't affect existing bucket policies."},"ignorePublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should ignore public ACLs for this bucket and objects in this bucket. Setting this element to ``TRUE`` causes Amazon S3 to ignore all public ACLs on this bucket and objects in this bucket.\n Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set."},"restrictPublicBuckets":{"type":"boolean","description":"Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to ``TRUE`` restricts access to this bucket to only AWS-service principals and authorized users within this account if the bucket has a public policy.\n Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked."}},"type":"object"},"aws-native:s3:BucketQueueConfiguration":{"description":"Specifies the configuration for publishing messages to an Amazon Simple Queue Service (Amazon SQS) queue when Amazon S3 detects specified events.","properties":{"event":{"type":"string","description":"The Amazon S3 bucket event about which you want to publish messages to Amazon SQS. For more information, see [Supported Event Types](https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html) in the *Amazon S3 User Guide*."},"filter":{"$ref":"#/types/aws-native:s3:BucketNotificationFilter","description":"The filtering rules that determine which objects trigger notifications. For example, you can create a filter so that Amazon S3 sends notifications only when image files with a ``.jpg`` extension are added to the bucket. For more information, see [Configuring event notifications using object key name filtering](https://docs.aws.amazon.com/AmazonS3/latest/user-guide/notification-how-to-filtering.html) in the *Amazon S3 User Guide*."},"queue":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon SQS queue to which Amazon S3 publishes a message when it detects events of the specified type. FIFO queues are not allowed when enabling an SQS queue as the event notification destination."}},"type":"object","required":["event","queue"]},"aws-native:s3:BucketRecordExpiration":{"description":"The journal table record expiration settings for a journal table in an S3 Metadata configuration.","properties":{"days":{"type":"integer","description":"If you enable journal table record expiration, you can set the number of days to retain your journal table records. Journal table records must be retained for a minimum of 7 days. To set this value, specify any whole number from ``7`` to ``2147483647``. For example, to retain your journal table records for one year, set this value to ``365``."},"expiration":{"$ref":"#/types/aws-native:s3:BucketRecordExpirationExpiration","description":"Specifies whether journal table record expiration is enabled or disabled."}},"type":"object","required":["expiration"]},"aws-native:s3:BucketRecordExpirationExpiration":{"description":"Specifies whether journal table record expiration is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:s3:BucketRedirectAllRequestsTo":{"description":"Specifies the redirect behavior of all requests to a website endpoint of an Amazon S3 bucket.","properties":{"hostName":{"type":"string","description":"Name of the host where requests are redirected."},"protocol":{"$ref":"#/types/aws-native:s3:BucketRedirectAllRequestsToProtocol","description":"Protocol to use when redirecting requests. The default is the protocol that is used in the original request."}},"type":"object","required":["hostName"]},"aws-native:s3:BucketRedirectAllRequestsToProtocol":{"description":"Protocol to use when redirecting requests. The default is the protocol that is used in the original request.","type":"string","enum":[{"name":"Http","value":"http"},{"name":"Https","value":"https"}]},"aws-native:s3:BucketRedirectRule":{"description":"Specifies how requests are redirected. In the event of an error, you can specify a different error code to return.","properties":{"hostName":{"type":"string","description":"The host name to use in the redirect request."},"httpRedirectCode":{"type":"string","description":"The HTTP redirect code to use on the response. Not required if one of the siblings is present."},"protocol":{"$ref":"#/types/aws-native:s3:BucketRedirectRuleProtocol","description":"Protocol to use when redirecting requests. The default is the protocol that is used in the original request."},"replaceKeyPrefixWith":{"type":"string","description":"The object key prefix to use in the redirect request. For example, to redirect requests for all pages with prefix ``docs/`` (objects in the ``docs/`` folder) to ``documents/``, you can set a condition block with ``KeyPrefixEquals`` set to ``docs/`` and in the Redirect set ``ReplaceKeyPrefixWith`` to ``/documents``. Not required if one of the siblings is present. Can be present only if ``ReplaceKeyWith`` is not provided.\n  Replacement must be made for object keys containing special characters (such as carriage returns) when using XML requests. For more information, see [XML related object key constraints](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-xml-related-constraints)."},"replaceKeyWith":{"type":"string","description":"The specific object key to use in the redirect request. For example, redirect request to ``error.html``. Not required if one of the siblings is present. Can be present only if ``ReplaceKeyPrefixWith`` is not provided.\n  Replacement must be made for object keys containing special characters (such as carriage returns) when using XML requests. For more information, see [XML related object key constraints](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-xml-related-constraints)."}},"type":"object"},"aws-native:s3:BucketRedirectRuleProtocol":{"description":"Protocol to use when redirecting requests. The default is the protocol that is used in the original request.","type":"string","enum":[{"name":"Http","value":"http"},{"name":"Https","value":"https"}]},"aws-native:s3:BucketReplicaModifications":{"description":"A filter that you can specify for selection for modifications on replicas.","properties":{"status":{"$ref":"#/types/aws-native:s3:BucketReplicaModificationsStatus","description":"Specifies whether Amazon S3 replicates modifications on replicas.\n *Allowed values*: ``Enabled`` | ``Disabled``"}},"type":"object","required":["status"]},"aws-native:s3:BucketReplicaModificationsStatus":{"description":"Specifies whether Amazon S3 replicates modifications on replicas.\n *Allowed values*: ``Enabled`` | ``Disabled``","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3:BucketReplicationConfiguration":{"description":"A container for replication rules. You can add up to 1,000 rules. The maximum size of a replication configuration is 2 MB. The latest version of the replication configuration XML is V2. For more information about XML V2 replication configurations, see [Replication configuration](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-add-config.html) in the *Amazon S3 User Guide*.","properties":{"role":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAMlong (IAM) role that Amazon S3 assumes when replicating objects. For more information, see [How to Set Up Replication](https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-how-setup.html) in the *Amazon S3 User Guide*."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketReplicationRule"},"description":"A container for one or more replication rules. A replication configuration must have at least one rule and can contain a maximum of 1,000 rules."}},"type":"object","required":["role","rules"]},"aws-native:s3:BucketReplicationDestination":{"description":"A container for information about the replication destination and its configurations including enabling the S3 Replication Time Control (S3 RTC).","properties":{"accessControlTranslation":{"$ref":"#/types/aws-native:s3:BucketAccessControlTranslation","description":"Specify this only in a cross-account scenario (where source and destination bucket owners are not the same), and you want to change replica ownership to the AWS-account that owns the destination bucket. If this is not specified in the replication configuration, the replicas are owned by same AWS-account that owns the source object."},"account":{"type":"string","description":"Destination bucket owner account ID. In a cross-account scenario, if you direct Amazon S3 to change replica ownership to the AWS-account that owns the destination bucket by specifying the ``AccessControlTranslation`` property, this is the account ID of the destination bucket owner. For more information, see [Cross-Region Replication Additional Configuration: Change Replica Owner](https://docs.aws.amazon.com/AmazonS3/latest/dev/crr-change-owner.html) in the *Amazon S3 User Guide*.\n If you specify the ``AccessControlTranslation`` property, the ``Account`` property is required."},"bucket":{"type":"string","description":"The Amazon Resource Name (ARN) of the bucket where you want Amazon S3 to store the results."},"encryptionConfiguration":{"$ref":"#/types/aws-native:s3:BucketEncryptionConfiguration","description":"Specifies encryption-related information."},"metrics":{"$ref":"#/types/aws-native:s3:BucketMetrics","description":"A container specifying replication metrics-related settings enabling replication metrics and events."},"replicationTime":{"$ref":"#/types/aws-native:s3:BucketReplicationTime","description":"A container specifying S3 Replication Time Control (S3 RTC), including whether S3 RTC is enabled and the time when all objects and operations on objects must be replicated. Must be specified together with a ``Metrics`` block."},"storageClass":{"$ref":"#/types/aws-native:s3:BucketReplicationDestinationStorageClass","description":"The storage class to use when replicating objects, such as S3 Standard or reduced redundancy. By default, Amazon S3 uses the storage class of the source object to create the object replica. \n For valid values, see the ``StorageClass`` element of the [PUT Bucket replication](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTreplication.html) action in the *Amazon S3 API Reference*.\n ``FSX_OPENZFS`` is not an accepted value when replicating objects."}},"type":"object","required":["bucket"]},"aws-native:s3:BucketReplicationDestinationStorageClass":{"description":"The storage class to use when replicating objects, such as S3 Standard or reduced redundancy. By default, Amazon S3 uses the storage class of the source object to create the object replica. \n For valid values, see the ``StorageClass`` element of the [PUT Bucket replication](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTreplication.html) action in the *Amazon S3 API Reference*.\n ``FSX_OPENZFS`` is not an accepted value when replicating objects.","type":"string","enum":[{"name":"DeepArchive","value":"DEEP_ARCHIVE"},{"name":"Glacier","value":"GLACIER"},{"name":"GlacierIr","value":"GLACIER_IR"},{"name":"IntelligentTiering","value":"INTELLIGENT_TIERING"},{"name":"OnezoneIa","value":"ONEZONE_IA"},{"name":"ReducedRedundancy","value":"REDUCED_REDUNDANCY"},{"name":"Standard","value":"STANDARD"},{"name":"StandardIa","value":"STANDARD_IA"}]},"aws-native:s3:BucketReplicationRule":{"description":"Specifies which Amazon S3 objects to replicate and where to store the replicas.","properties":{"deleteMarkerReplication":{"$ref":"#/types/aws-native:s3:BucketDeleteMarkerReplication","description":"Specifies whether Amazon S3 replicates delete markers. If you specify a ``Filter`` in your replication configuration, you must also include a ``DeleteMarkerReplication`` element. If your ``Filter`` includes a ``Tag`` element, the ``DeleteMarkerReplication````Status`` must be set to Disabled, because Amazon S3 does not support replicating delete markers for tag-based rules. For an example configuration, see [Basic Rule Configuration](https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-add-config.html#replication-config-min-rule-config). \n For more information about delete marker replication, see [Basic Rule Configuration](https://docs.aws.amazon.com/AmazonS3/latest/dev/delete-marker-replication.html). \n  If you are using an earlier version of the replication configuration, Amazon S3 handles replication of delete markers differently. For more information, see [Backward Compatibility](https://docs.aws.amazon.com/AmazonS3/latest/dev/replication-add-config.html#replication-backward-compat-considerations)."},"destination":{"$ref":"#/types/aws-native:s3:BucketReplicationDestination","description":"A container for information about the replication destination and its configurations including enabling the S3 Replication Time Control (S3 RTC)."},"filter":{"$ref":"#/types/aws-native:s3:BucketReplicationRuleFilter","description":"A filter that identifies the subset of objects to which the replication rule applies. A ``Filter`` must specify exactly one ``Prefix``, ``TagFilter``, or an ``And`` child element. The use of the filter field indicates that this is a V2 replication configuration. This field isn't supported in a V1 replication configuration.\n  V1 replication configuration only supports filtering by key prefix. To filter using a V1 replication configuration, add the ``Prefix`` directly as a child element of the ``Rule`` element."},"id":{"type":"string","description":"A unique identifier for the rule. The maximum value is 255 characters. If you don't specify a value, AWS CloudFormation generates a random ID. When using a V2 replication configuration this property is capitalized as \"ID\"."},"prefix":{"type":"string","description":"An object key name prefix that identifies the object or objects to which the rule applies. The maximum prefix length is 1,024 characters. To include all objects in a bucket, specify an empty string. To filter using a V1 replication configuration, add the ``Prefix`` directly as a child element of the ``Rule`` element.\n  Replacement must be made for object keys containing special characters (such as carriage returns) when using XML requests. For more information, see [XML related object key constraints](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-xml-related-constraints)."},"priority":{"type":"integer","description":"The priority indicates which rule has precedence whenever two or more replication rules conflict. Amazon S3 will attempt to replicate objects according to all replication rules. However, if there are two or more rules with the same destination bucket, then objects will be replicated according to the rule with the highest priority. The higher the number, the higher the priority. \n For more information, see [Replication](https://docs.aws.amazon.com/AmazonS3/latest/dev/replication.html) in the *Amazon S3 User Guide*."},"sourceSelectionCriteria":{"$ref":"#/types/aws-native:s3:BucketSourceSelectionCriteria","description":"A container that describes additional filters for identifying the source objects that you want to replicate. You can choose to enable or disable the replication of these objects."},"status":{"$ref":"#/types/aws-native:s3:BucketReplicationRuleStatus","description":"Specifies whether the rule is enabled."}},"type":"object","required":["destination","status"]},"aws-native:s3:BucketReplicationRuleAndOperator":{"description":"A container for specifying rule filters. The filters determine the subset of objects to which the rule applies. This element is required only if you specify more than one filter. \n For example:\n  +  If you specify both a ``Prefix`` and a ``TagFilter``, wrap these filters in an ``And`` tag. \n  +  If you specify a filter based on multiple tags, wrap the ``TagFilter`` elements in an ``And`` tag","properties":{"prefix":{"type":"string","description":"An object key name prefix that identifies the subset of objects to which the rule applies."},"tagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTagFilter"},"description":"An array of tags containing key and value pairs."}},"type":"object"},"aws-native:s3:BucketReplicationRuleFilter":{"description":"A filter that identifies the subset of objects to which the replication rule applies. A ``Filter`` must specify exactly one ``Prefix``, ``TagFilter``, or an ``And`` child element.","properties":{"and":{"$ref":"#/types/aws-native:s3:BucketReplicationRuleAndOperator","description":"A container for specifying rule filters. The filters determine the subset of objects to which the rule applies. This element is required only if you specify more than one filter. For example: \n  +  If you specify both a ``Prefix`` and a ``TagFilter``, wrap these filters in an ``And`` tag.\n  +  If you specify a filter based on multiple tags, wrap the ``TagFilter`` elements in an ``And`` tag."},"prefix":{"type":"string","description":"An object key name prefix that identifies the subset of objects to which the rule applies.\n  Replacement must be made for object keys containing special characters (such as carriage returns) when using XML requests. For more information, see [XML related object key constraints](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-xml-related-constraints)."},"tagFilter":{"$ref":"#/types/aws-native:s3:BucketTagFilter","description":"A container for specifying a tag key and value. \n The rule applies only to objects that have the tag in their tag set."}},"type":"object"},"aws-native:s3:BucketReplicationRuleStatus":{"description":"Specifies whether the rule is enabled.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:s3:BucketReplicationTime":{"description":"A container specifying S3 Replication Time Control (S3 RTC) related information, including whether S3 RTC is enabled and the time when all objects and operations on objects must be replicated. Must be specified together with a ``Metrics`` block.","properties":{"status":{"$ref":"#/types/aws-native:s3:BucketReplicationTimeStatus","description":"Specifies whether the replication time is enabled."},"time":{"$ref":"#/types/aws-native:s3:BucketReplicationTimeValue","description":"A container specifying the time by which replication should be complete for all objects and operations on objects."}},"type":"object","required":["status","time"]},"aws-native:s3:BucketReplicationTimeStatus":{"description":"Specifies whether the replication time is enabled.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:s3:BucketReplicationTimeValue":{"description":"A container specifying the time value for S3 Replication Time Control (S3 RTC) and replication metrics ``EventThreshold``.","properties":{"minutes":{"type":"integer","description":"Contains an integer specifying time in minutes. \n  Valid value: 15"}},"type":"object","required":["minutes"]},"aws-native:s3:BucketRoutingRule":{"description":"Specifies the redirect behavior and when a redirect is applied. For more information about routing rules, see [Configuring advanced conditional redirects](https://docs.aws.amazon.com/AmazonS3/latest/dev/how-to-page-redirect.html#advanced-conditional-redirects) in the *Amazon S3 User Guide*.","properties":{"redirectRule":{"$ref":"#/types/aws-native:s3:BucketRedirectRule","description":"Container for redirect information. You can redirect requests to another host, to another page, or with another protocol. In the event of an error, you can specify a different error code to return."},"routingRuleCondition":{"$ref":"#/types/aws-native:s3:BucketRoutingRuleCondition","description":"A container for describing a condition that must be met for the specified redirect to apply. For example, 1. If request is for pages in the ``/docs`` folder, redirect to the ``/documents`` folder. 2. If request results in HTTP error 4xx, redirect request to another host where you might process the error."}},"type":"object","required":["redirectRule"]},"aws-native:s3:BucketRoutingRuleCondition":{"description":"A container for describing a condition that must be met for the specified redirect to apply. For example, 1. If request is for pages in the ``/docs`` folder, redirect to the ``/documents`` folder. 2. If request results in HTTP error 4xx, redirect request to another host where you might process the error.","properties":{"httpErrorCodeReturnedEquals":{"type":"string","description":"The HTTP error code when the redirect is applied. In the event of an error, if the error code equals this value, then the specified redirect is applied.\n Required when parent element ``Condition`` is specified and sibling ``KeyPrefixEquals`` is not specified. If both are specified, then both must be true for the redirect to be applied."},"keyPrefixEquals":{"type":"string","description":"The object key name prefix when the redirect is applied. For example, to redirect requests for ``ExamplePage.html``, the key prefix will be ``ExamplePage.html``. To redirect request for all pages with the prefix ``docs/``, the key prefix will be ``docs/``, which identifies all objects in the docs/ folder.\n Required when the parent element ``Condition`` is specified and sibling ``HttpErrorCodeReturnedEquals`` is not specified. If both conditions are specified, both must be true for the redirect to be applied."}},"type":"object"},"aws-native:s3:BucketRule":{"description":"Specifies lifecycle rules for an Amazon S3 bucket. For more information, see [Put Bucket Lifecycle Configuration](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTlifecycle.html) in the *Amazon S3 API Reference*.\n You must specify at least one of the following properties: ``AbortIncompleteMultipartUpload``, ``ExpirationDate``, ``ExpirationInDays``, ``NoncurrentVersionExpirationInDays``, ``NoncurrentVersionTransition``, ``NoncurrentVersionTransitions``, ``Transition``, or ``Transitions``.","properties":{"abortIncompleteMultipartUpload":{"$ref":"#/types/aws-native:s3:BucketAbortIncompleteMultipartUpload","description":"Specifies a lifecycle rule that stops incomplete multipart uploads to an Amazon S3 bucket."},"expirationDate":{"type":"string","description":"Indicates when objects are deleted from Amazon S3 and Amazon S3 Glacier. The date value must be in ISO 8601 format. The time is always midnight UTC. If you specify an expiration and transition time, you must use the same time unit for both properties (either in days or by date). The expiration time must also be later than the transition time."},"expirationInDays":{"type":"integer","description":"Indicates the number of days after creation when objects are deleted from Amazon S3 and Amazon S3 Glacier. If you specify an expiration and transition time, you must use the same time unit for both properties (either in days or by date). The expiration time must also be later than the transition time."},"expiredObjectDeleteMarker":{"type":"boolean","description":"Indicates whether Amazon S3 will remove a delete marker without any noncurrent versions. If set to true, the delete marker will be removed if there are no noncurrent versions. This cannot be specified with ``ExpirationInDays``, ``ExpirationDate``, or ``TagFilters``."},"id":{"type":"string","description":"Unique identifier for the rule. The value can't be longer than 255 characters."},"noncurrentVersionExpiration":{"$ref":"#/types/aws-native:s3:BucketNoncurrentVersionExpiration","description":"Specifies when noncurrent object versions expire. Upon expiration, S3 permanently deletes the noncurrent object versions. You set this lifecycle configuration action on a bucket that has versioning enabled (or suspended) to request that S3 delete noncurrent object versions at a specific period in the object's lifetime."},"noncurrentVersionExpirationInDays":{"type":"integer","description":"(Deprecated.) For buckets with versioning enabled (or suspended), specifies the time, in days, between when a new version of the object is uploaded to the bucket and when old versions of the object expire. When object versions expire, Amazon S3 permanently deletes them. If you specify a transition and expiration time, the expiration time must be later than the transition time."},"noncurrentVersionTransition":{"$ref":"#/types/aws-native:s3:BucketNoncurrentVersionTransition","description":"(Deprecated.) For buckets with versioning enabled (or suspended), specifies when non-current objects transition to a specified storage class. If you specify a transition and expiration time, the expiration time must be later than the transition time. If you specify this property, don't specify the ``NoncurrentVersionTransitions`` property."},"noncurrentVersionTransitions":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketNoncurrentVersionTransition"},"description":"For buckets with versioning enabled (or suspended), one or more transition rules that specify when non-current objects transition to a specified storage class. If you specify a transition and expiration time, the expiration time must be later than the transition time. If you specify this property, don't specify the ``NoncurrentVersionTransition`` property."},"objectSizeGreaterThan":{"type":"string","description":"Specifies the minimum object size in bytes for this rule to apply to. Objects must be larger than this value in bytes. For more information about size based rules, see [Lifecycle configuration using size-based rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-configuration-examples.html#lc-size-rules) in the *Amazon S3 User Guide*."},"objectSizeLessThan":{"type":"string","description":"Specifies the maximum object size in bytes for this rule to apply to. Objects must be smaller than this value in bytes. For more information about sized based rules, see [Lifecycle configuration using size-based rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-configuration-examples.html#lc-size-rules) in the *Amazon S3 User Guide*."},"prefix":{"type":"string","description":"Object key prefix that identifies one or more objects to which this rule applies.\n  Replacement must be made for object keys containing special characters (such as carriage returns) when using XML requests. For more information, see [XML related object key constraints](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-xml-related-constraints)."},"status":{"$ref":"#/types/aws-native:s3:BucketRuleStatus","description":"If ``Enabled``, the rule is currently being applied. If ``Disabled``, the rule is not currently being applied."},"tagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTagFilter"},"description":"Tags to use to identify a subset of objects to which the lifecycle rule applies."},"transition":{"$ref":"#/types/aws-native:s3:BucketTransition","description":"(Deprecated.) Specifies when an object transitions to a specified storage class. If you specify an expiration and transition time, you must use the same time unit for both properties (either in days or by date). The expiration time must also be later than the transition time. If you specify this property, don't specify the ``Transitions`` property."},"transitions":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketTransition"},"description":"One or more transition rules that specify when an object transitions to a specified storage class. If you specify an expiration and transition time, you must use the same time unit for both properties (either in days or by date). The expiration time must also be later than the transition time. If you specify this property, don't specify the ``Transition`` property."}},"type":"object","required":["status"]},"aws-native:s3:BucketRuleStatus":{"description":"If ``Enabled``, the rule is currently being applied. If ``Disabled``, the rule is not currently being applied.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3:BucketS3KeyFilter":{"description":"A container for object key name prefix and suffix filtering rules. For more information about object key name filtering, see [Configuring event notifications using object key name filtering](https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-how-to-filtering.html) in the *Amazon S3 User Guide*.\n  The same type of filter rule cannot be used more than once. For example, you cannot specify two prefix rules.","properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketFilterRule"},"description":"A list of containers for the key-value pair that defines the criteria for the filter rule."}},"type":"object","required":["rules"]},"aws-native:s3:BucketS3TablesDestination":{"description":"The destination information for a V1 S3 Metadata configuration. The destination table bucket must be in the same Region and AWS-account as the general purpose bucket. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket.","properties":{"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the metadata table in the metadata table configuration. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket."},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the table bucket that's specified as the destination in the metadata table configuration. The destination table bucket must be in the same Region and AWS-account as the general purpose bucket."},"tableName":{"type":"string","description":"The name for the metadata table in your metadata table configuration. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket."},"tableNamespace":{"type":"string","description":"The table bucket namespace for the metadata table in your metadata table configuration. This value is always ``aws_s3_metadata``."}},"type":"object","required":["tableBucketArn","tableName"]},"aws-native:s3:BucketServerSideEncryptionByDefault":{"description":"Describes the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied. For more information, see [PutBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTencryption.html).\n   +  *General purpose buckets* - If you don't specify a customer managed key at configuration, Amazon S3 automatically creates an AWS KMS key (``aws/s3``) in your AWS account the first time that you add an object encrypted with SSE-KMS to a bucket. By default, Amazon S3 uses this KMS key for SSE-KMS. \n  +  *Directory buckets* - Your SSE-KMS configuration can only support 1 [customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) per directory bucket's lifetime. The [managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk) (``aws/s3``) isn't supported. \n  +  *Directory buckets* - For directory buckets, there are only two supported options for server-side encryption: SSE-S3 and SSE-KMS.","properties":{"kmsMasterKeyId":{"type":"string","description":"AWS Key Management Service (KMS) customer managed key ID to use for the default encryption. \n   +  *General purpose buckets* - This parameter is allowed if and only if ``SSEAlgorithm`` is set to ``aws:kms`` or ``aws:kms:dsse``.\n  +  *Directory buckets* - This parameter is allowed if and only if ``SSEAlgorithm`` is set to ``aws:kms``.\n  \n  You can specify the key ID, key alias, or the Amazon Resource Name (ARN) of the KMS key.\n  +  Key ID: ``1234abcd-12ab-34cd-56ef-1234567890ab``\n  +  Key ARN: ``arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab``\n  +  Key Alias: ``alias/alias-name``\n  \n If you are using encryption with cross-account or AWS service operations, you must use a fully qualified KMS key ARN. For more information, see [Using encryption for cross-account operations](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html#bucket-encryption-update-bucket-policy).\n   +  *General purpose buckets* - If you're specifying a customer managed KMS key, we recommend using a fully qualified KMS key ARN. If you use a KMS key alias instead, then KMS resolves the key within the requester’s account. This behavior can result in data that's encrypted with a KMS key that belongs to the requester, and not the bucket owner. Also, if you use a key ID, you can run into a LogDestination undeliverable error when creating a VPC flow log. \n  +  *Directory buckets* - When you specify an [customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) for encryption in your directory bucket, only use the key ID or key ARN. The key alias format of the KMS key isn't supported.\n  \n   Amazon S3 only supports symmetric encryption KMS keys. For more information, see [Asymmetric keys in KMS](https://docs.aws.amazon.com//kms/latest/developerguide/symmetric-asymmetric.html) in the *Key Management Service Developer Guide*."},"sseAlgorithm":{"$ref":"#/types/aws-native:s3:BucketServerSideEncryptionByDefaultSseAlgorithm","description":"Server-side encryption algorithm to use for the default encryption.\n  For directory buckets, there are only two supported values for server-side encryption: ``AES256`` and ``aws:kms``."}},"type":"object","required":["sseAlgorithm"]},"aws-native:s3:BucketServerSideEncryptionByDefaultSseAlgorithm":{"description":"Server-side encryption algorithm to use for the default encryption.\n  For directory buckets, there are only two supported values for server-side encryption: ``AES256`` and ``aws:kms``.","type":"string","enum":[{"name":"Awskms","value":"aws:kms"},{"name":"Aes256","value":"AES256"},{"name":"Awskmsdsse","value":"aws:kms:dsse"}]},"aws-native:s3:BucketServerSideEncryptionRule":{"description":"Specifies the default server-side encryption configuration.\n   +  *General purpose buckets* - If you're specifying a customer managed KMS key, we recommend using a fully qualified KMS key ARN. If you use a KMS key alias instead, then KMS resolves the key within the requester’s account. This behavior can result in data that's encrypted with a KMS key that belongs to the requester, and not the bucket owner.\n  +  *Directory buckets* - When you specify an [customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) for encryption in your directory bucket, only use the key ID or key ARN. The key alias format of the KMS key isn't supported.","properties":{"blockedEncryptionTypes":{"$ref":"#/types/aws-native:s3:BucketBlockedEncryptionTypes","description":"A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ``PutObject``, ``CopyObject``, ``PostObject``, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html).\n  Currently, this parameter only supports blocking or unblocking server-side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html)."},"bucketKeyEnabled":{"type":"boolean","description":"Specifies whether Amazon S3 should use an S3 Bucket Key with server-side encryption using KMS (SSE-KMS) for new objects in the bucket. Existing objects are not affected. Setting the ``BucketKeyEnabled`` element to ``true`` causes Amazon S3 to use an S3 Bucket Key. By default, S3 Bucket Key is not enabled.\n For more information, see [Amazon S3 Bucket Keys](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html) in the *Amazon S3 User Guide*."},"serverSideEncryptionByDefault":{"$ref":"#/types/aws-native:s3:BucketServerSideEncryptionByDefault","description":"Specifies the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied."}},"type":"object"},"aws-native:s3:BucketSourceSelectionCriteria":{"description":"A container that describes additional filters for identifying the source objects that you want to replicate. You can choose to enable or disable the replication of these objects.","properties":{"replicaModifications":{"$ref":"#/types/aws-native:s3:BucketReplicaModifications","description":"A filter that you can specify for selection for modifications on replicas."},"sseKmsEncryptedObjects":{"$ref":"#/types/aws-native:s3:BucketSseKmsEncryptedObjects","description":"A container for filter information for the selection of Amazon S3 objects encrypted with AWS KMS."}},"type":"object"},"aws-native:s3:BucketSseKmsEncryptedObjects":{"description":"A container for filter information for the selection of S3 objects encrypted with AWS KMS.","properties":{"status":{"$ref":"#/types/aws-native:s3:BucketSseKmsEncryptedObjectsStatus","description":"Specifies whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service."}},"type":"object","required":["status"]},"aws-native:s3:BucketSseKmsEncryptedObjectsStatus":{"description":"Specifies whether Amazon S3 replicates objects created with server-side encryption using an AWS KMS key stored in AWS Key Management Service.","type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:s3:BucketStorageClassAnalysis":{"description":"Specifies data related to access patterns to be collected and made available to analyze the tradeoffs between different storage classes for an Amazon S3 bucket.","properties":{"dataExport":{"$ref":"#/types/aws-native:s3:BucketDataExport","description":"Specifies how data related to the storage class analysis for an Amazon S3 bucket should be exported."}},"type":"object"},"aws-native:s3:BucketTag":{"description":"A container of a key value name pair.","properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:s3:BucketTagFilter":{"description":"Specifies tags to use to identify a subset of objects for an Amazon S3 bucket. For more information, see [Categorizing your storage using tags](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html) in the *Amazon Simple Storage Service User Guide*.","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:s3:BucketTargetObjectKeyFormat":{"description":"Describes the key format for server access log file in the target bucket. You can choose between SimplePrefix and PartitionedPrefix.","type":"object"},"aws-native:s3:BucketTiering":{"description":"The S3 Intelligent-Tiering storage class is designed to optimize storage costs by automatically moving data to the most cost-effective storage access tier, without additional operational overhead.","properties":{"accessTier":{"$ref":"#/types/aws-native:s3:BucketTieringAccessTier","description":"S3 Intelligent-Tiering access tier. See [Storage class for automatically optimizing frequently and infrequently accessed objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html#sc-dynamic-data-access) for a list of access tiers in the S3 Intelligent-Tiering storage class."},"days":{"type":"integer","description":"The number of consecutive days of no access after which an object will be eligible to be transitioned to the corresponding tier. The minimum number of days specified for Archive Access tier must be at least 90 days and Deep Archive Access tier must be at least 180 days. The maximum can be up to 2 years (730 days)."}},"type":"object","required":["accessTier","days"]},"aws-native:s3:BucketTieringAccessTier":{"description":"S3 Intelligent-Tiering access tier. See [Storage class for automatically optimizing frequently and infrequently accessed objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/storage-class-intro.html#sc-dynamic-data-access) for a list of access tiers in the S3 Intelligent-Tiering storage class.","type":"string","enum":[{"name":"ArchiveAccess","value":"ARCHIVE_ACCESS"},{"name":"DeepArchiveAccess","value":"DEEP_ARCHIVE_ACCESS"}]},"aws-native:s3:BucketTopicConfiguration":{"description":"A container for specifying the configuration for publication of messages to an Amazon Simple Notification Service (Amazon SNS) topic when Amazon S3 detects specified events.","properties":{"event":{"type":"string","description":"The Amazon S3 bucket event about which to send notifications. For more information, see [Supported Event Types](https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html) in the *Amazon S3 User Guide*."},"filter":{"$ref":"#/types/aws-native:s3:BucketNotificationFilter","description":"The filtering rules that determine for which objects to send notifications. For example, you can create a filter so that Amazon S3 sends notifications only when image files with a ``.jpg`` extension are added to the bucket."},"topic":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon SNS topic to which Amazon S3 publishes a message when it detects events of the specified type."}},"type":"object","required":["event","topic"]},"aws-native:s3:BucketTransition":{"description":"Specifies when an object transitions to a specified storage class. For more information about Amazon S3 lifecycle configuration rules, see [Transitioning Objects Using Amazon S3 Lifecycle](https://docs.aws.amazon.com/AmazonS3/latest/dev/lifecycle-transition-general-considerations.html) in the *Amazon S3 User Guide*.","properties":{"storageClass":{"$ref":"#/types/aws-native:s3:BucketTransitionStorageClass","description":"The storage class to which you want the object to transition."},"transitionDate":{"type":"string","description":"Indicates when objects are transitioned to the specified storage class. The date value must be in ISO 8601 format. The time is always midnight UTC."},"transitionInDays":{"type":"integer","description":"Indicates the number of days after creation when objects are transitioned to the specified storage class. If the specified storage class is ``INTELLIGENT_TIERING``, ``GLACIER_IR``, ``GLACIER``, or ``DEEP_ARCHIVE``, valid values are ``0`` or positive integers. If the specified storage class is ``STANDARD_IA`` or ``ONEZONE_IA``, valid values are positive integers greater than ``30``. Be aware that some storage classes have a minimum storage duration and that you're charged for transitioning objects before their minimum storage duration. For more information, see [Constraints and considerations for transitions](https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-transition-general-considerations.html#lifecycle-configuration-constraints) in the *Amazon S3 User Guide*."}},"type":"object","required":["storageClass"]},"aws-native:s3:BucketTransitionStorageClass":{"description":"The storage class to which you want the object to transition.","type":"string","enum":[{"name":"DeepArchive","value":"DEEP_ARCHIVE"},{"name":"Glacier","value":"GLACIER"},{"name":"GlacierIr","value":"GLACIER_IR"},{"name":"IntelligentTiering","value":"INTELLIGENT_TIERING"},{"name":"OnezoneIa","value":"ONEZONE_IA"},{"name":"StandardIa","value":"STANDARD_IA"}]},"aws-native:s3:BucketVersioningConfiguration":{"description":"Describes the versioning state of an Amazon S3 bucket. For more information, see [PUT Bucket versioning](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTVersioningStatus.html) in the *Amazon S3 API Reference*.\n Keep the following timing in mind when enabling, suspending, or transitioning between versioning states:\n  +  *Enabling versioning* - Changes may take up to 15 minutes to propagate across all AWS regions for full consistency.\n  +  *Suspending versioning* - Takes effect immediately with no propagation delay.\n  +  *Transitioning between states* - Any change from Suspended to Enabled has a 15-minute delay.","properties":{"status":{"$ref":"#/types/aws-native:s3:BucketVersioningConfigurationStatus","description":"The versioning state of the bucket."}},"type":"object","required":["status"]},"aws-native:s3:BucketVersioningConfigurationStatus":{"description":"The versioning state of the bucket.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Suspended","value":"Suspended"}]},"aws-native:s3:BucketWebsiteConfiguration":{"description":"Specifies website configuration parameters for an Amazon S3 bucket.","properties":{"errorDocument":{"type":"string","description":"The name of the error document for the website."},"indexDocument":{"type":"string","description":"The name of the index document for the website."},"redirectAllRequestsTo":{"$ref":"#/types/aws-native:s3:BucketRedirectAllRequestsTo","description":"The redirect behavior for every request to this bucket's website endpoint.\n  If you specify this property, you can't specify any other property."},"routingRules":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketRoutingRule"},"description":"Rules that define when a redirect is applied and the redirect behavior."}},"type":"object"},"aws-native:s3:MultiRegionAccessPointPolicyPolicyStatusPropertiesIsPublic":{"description":"Specifies whether the policy is public or not.","type":"string","enum":[{"name":"True","value":"true"},{"name":"False","value":"false"}]},"aws-native:s3:MultiRegionAccessPointPublicAccessBlockConfiguration":{"properties":{"blockPublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should block public access control lists (ACLs) for buckets in this account. Setting this element to TRUE causes the following behavior:\n- PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.\n - PUT Object calls fail if the request includes a public ACL.\n. - PUT Bucket calls fail if the request includes a public ACL.\nEnabling this setting doesn't affect existing policies or ACLs."},"blockPublicPolicy":{"type":"boolean","description":"Specifies whether Amazon S3 should block public bucket policies for buckets in this account. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. Enabling this setting doesn't affect existing bucket policies."},"ignorePublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should ignore public ACLs for buckets in this account. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on buckets in this account and any objects that they contain. Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set."},"restrictPublicBuckets":{"type":"boolean","description":"Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy.\nEnabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked."}},"type":"object"},"aws-native:s3:MultiRegionAccessPointRegion":{"properties":{"bucket":{"type":"string","description":"The name of the associated bucket for the Region."},"bucketAccountId":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket that's associated with this Multi-Region Access Point."}},"type":"object","required":["bucket"]},"aws-native:s3:PolicyStatusProperties":{"description":"The Policy Status associated with this Multi Region Access Point","properties":{"isPublic":{"$ref":"#/types/aws-native:s3:MultiRegionAccessPointPolicyPolicyStatusPropertiesIsPublic","description":"Specifies whether the policy is public or not."}},"type":"object","required":["isPublic"]},"aws-native:s3:StorageLensAccountLevel":{"description":"Account-level metrics configurations.","properties":{"activityMetrics":{"$ref":"#/types/aws-native:s3:StorageLensActivityMetrics","description":"This property contains the details of account-level activity metrics for S3 Storage Lens."},"advancedCostOptimizationMetrics":{"$ref":"#/types/aws-native:s3:StorageLensAdvancedCostOptimizationMetrics","description":"This property contains the details of account-level advanced cost optimization metrics for S3 Storage Lens."},"advancedDataProtectionMetrics":{"$ref":"#/types/aws-native:s3:StorageLensAdvancedDataProtectionMetrics","description":"This property contains the details of account-level advanced data protection metrics for S3 Storage Lens."},"advancedPerformanceMetrics":{"$ref":"#/types/aws-native:s3:StorageLensAdvancedPerformanceMetrics","description":"This property contains the account-level details for S3 Storage Lens advanced performance metrics."},"bucketLevel":{"$ref":"#/types/aws-native:s3:StorageLensBucketLevel","description":"This property contains the details of the account-level bucket-level configurations for Amazon S3 Storage Lens. To enable bucket-level configurations, make sure to also set the same metrics at the account level."},"detailedStatusCodesMetrics":{"$ref":"#/types/aws-native:s3:StorageLensDetailedStatusCodesMetrics","description":"This property contains the details of account-level detailed status code metrics for S3 Storage Lens."},"storageLensGroupLevel":{"$ref":"#/types/aws-native:s3:StorageLensGroupLevel","description":"This property determines the scope of Storage Lens group data that is displayed in the Storage Lens dashboard."}},"type":"object","required":["bucketLevel"]},"aws-native:s3:StorageLensActivityMetrics":{"description":"Enables activity metrics.","properties":{"isEnabled":{"type":"boolean","description":"Specifies whether activity metrics are enabled or disabled."}},"type":"object"},"aws-native:s3:StorageLensAdvancedCostOptimizationMetrics":{"description":"Enables advanced cost optimization metrics.","properties":{"isEnabled":{"type":"boolean","description":"Specifies whether advanced cost optimization metrics are enabled or disabled."}},"type":"object"},"aws-native:s3:StorageLensAdvancedDataProtectionMetrics":{"description":"Enables advanced data protection metrics.","properties":{"isEnabled":{"type":"boolean","description":"Specifies whether advanced data protection metrics are enabled or disabled."}},"type":"object"},"aws-native:s3:StorageLensAdvancedPerformanceMetrics":{"description":"Advanced Performance Metrics.","properties":{"isEnabled":{"type":"boolean","description":"Specifies whether the Advanced Performance Metrics is enabled or disabled."}},"type":"object"},"aws-native:s3:StorageLensAwsOrg":{"description":"The AWS Organizations ARN to use in the Amazon S3 Storage Lens configuration.","properties":{"arn":{"type":"string","description":"This resource contains the ARN of the AWS Organization."}},"type":"object","required":["arn"]},"aws-native:s3:StorageLensBucketLevel":{"description":"Bucket-level metrics configurations.","properties":{"activityMetrics":{"$ref":"#/types/aws-native:s3:StorageLensActivityMetrics","description":"A property for bucket-level activity metrics for S3 Storage Lens."},"advancedCostOptimizationMetrics":{"$ref":"#/types/aws-native:s3:StorageLensAdvancedCostOptimizationMetrics","description":"A property for bucket-level advanced cost optimization metrics for S3 Storage Lens."},"advancedDataProtectionMetrics":{"$ref":"#/types/aws-native:s3:StorageLensAdvancedDataProtectionMetrics","description":"A property for bucket-level advanced data protection metrics for S3 Storage Lens."},"advancedPerformanceMetrics":{"$ref":"#/types/aws-native:s3:StorageLensAdvancedPerformanceMetrics","description":"A property for bucket-level advanced performance metrics for S3 Storage Lens."},"detailedStatusCodesMetrics":{"$ref":"#/types/aws-native:s3:StorageLensDetailedStatusCodesMetrics","description":"A property for bucket-level detailed status code metrics for S3 Storage Lens."},"prefixLevel":{"$ref":"#/types/aws-native:s3:StorageLensPrefixLevel","description":"A property for bucket-level prefix-level storage metrics for S3 Storage Lens."}},"type":"object"},"aws-native:s3:StorageLensBucketsAndRegions":{"description":"S3 buckets and Regions to include/exclude in the Amazon S3 Storage Lens configuration.","properties":{"buckets":{"type":"array","items":{"type":"string"},"description":"This property contains the details of the buckets for the Amazon S3 Storage Lens configuration. This should be the bucket Amazon Resource Name(ARN). For valid values, see [Buckets ARN format here](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_Include.html#API_control_Include_Contents) in the *Amazon S3 API Reference* ."},"regions":{"type":"array","items":{"type":"string"},"description":"This property contains the details of the Regions for the S3 Storage Lens configuration."}},"type":"object"},"aws-native:s3:StorageLensCloudWatchMetrics":{"description":"CloudWatch metrics settings for the Amazon S3 Storage Lens metrics export.","properties":{"isEnabled":{"type":"boolean","description":"Specifies whether CloudWatch metrics are enabled or disabled."}},"type":"object","required":["isEnabled"]},"aws-native:s3:StorageLensConfiguration":{"description":"Specifies the details of Amazon S3 Storage Lens configuration.","properties":{"accountLevel":{"$ref":"#/types/aws-native:s3:StorageLensAccountLevel","description":"This property contains the details of the account-level metrics for Amazon S3 Storage Lens configuration."},"awsOrg":{"$ref":"#/types/aws-native:s3:StorageLensAwsOrg","description":"This property contains the details of the AWS Organization for the S3 Storage Lens configuration."},"dataExport":{"$ref":"#/types/aws-native:s3:StorageLensDataExport","description":"This property contains the details of this S3 Storage Lens configuration's metrics export."},"exclude":{"$ref":"#/types/aws-native:s3:StorageLensBucketsAndRegions","description":"This property contains the details of the bucket and or Regions excluded for Amazon S3 Storage Lens configuration."},"expandedPrefixesDataExport":{"$ref":"#/types/aws-native:s3:StorageLensExpandedPrefixesDataExport","description":"This property configures your S3 Storage Lens expanded prefixes metrics report."},"id":{"type":"string","description":"This property contains the details of the ID of the S3 Storage Lens configuration.","replaceOnChanges":true},"include":{"$ref":"#/types/aws-native:s3:StorageLensBucketsAndRegions","description":"This property contains the details of the bucket and or Regions included for Amazon S3 Storage Lens configuration."},"isEnabled":{"type":"boolean","description":"Specifies whether the Amazon S3 Storage Lens configuration is enabled or disabled."},"prefixDelimiter":{"type":"string","description":"The delimiter to divide S3 key into hierarchy of prefixes."},"storageLensArn":{"type":"string","description":"The ARN for the Amazon S3 Storage Lens configuration."}},"type":"object","required":["accountLevel","id","isEnabled"]},"aws-native:s3:StorageLensDataExport":{"description":"Specifies how Amazon S3 Storage Lens metrics should be exported.","properties":{"cloudWatchMetrics":{"$ref":"#/types/aws-native:s3:StorageLensCloudWatchMetrics","description":"This property enables the Amazon CloudWatch publishing option for S3 Storage Lens metrics."},"s3BucketDestination":{"$ref":"#/types/aws-native:s3:StorageLensS3BucketDestination","description":"This property contains the details of the bucket where the S3 Storage Lens metrics export will be placed."},"storageLensTableDestination":{"$ref":"#/types/aws-native:s3:StorageLensTableDestination","description":"This property contains the details of the S3 table bucket where the S3 Storage Lens default metrics report will be placed. This property enables you to store your Storage Lens metrics in read-only S3 Tables."}},"type":"object"},"aws-native:s3:StorageLensDetailedStatusCodesMetrics":{"description":"Enables detailed status codes metrics.","properties":{"isEnabled":{"type":"boolean","description":"Specifies whether detailed status codes metrics are enabled or disabled."}},"type":"object"},"aws-native:s3:StorageLensEncryption":{"description":"Configures the server-side encryption for Amazon S3 Storage Lens report files with either S3-managed keys (SSE-S3) or KMS-managed keys (SSE-KMS).","type":"object"},"aws-native:s3:StorageLensExpandedPrefixesDataExport":{"description":"Expanded Prefixes Data Export.","properties":{"s3BucketDestination":{"$ref":"#/types/aws-native:s3:StorageLensS3BucketDestination","description":"This property specifies the general purpose bucket where the S3 Storage Lens Expanded Prefixes metrics export files are located. At least one export destination must be specified."},"storageLensTableDestination":{"$ref":"#/types/aws-native:s3:StorageLensTableDestination","description":"This property configures S3 Storage Lens Expanded Prefixes metrics report to read-only S3 table buckets."}},"type":"object"},"aws-native:s3:StorageLensGroupAnd":{"description":"The Storage Lens group will include objects that match all of the specified filter values.","properties":{"matchAnyPrefix":{"type":"array","items":{"type":"string"},"description":"This property contains a list of prefixes. At least one prefix must be specified. Up to 10 prefixes are allowed."},"matchAnySuffix":{"type":"array","items":{"type":"string"},"description":"This property contains a list of suffixes. At least one suffix must be specified. Up to 10 suffixes are allowed."},"matchAnyTag":{"type":"array","items":{"$ref":"#/types/aws-native:s3:StorageLensGroupTag"},"description":"This property contains the list of object tags. At least one object tag must be specified. Up to 10 object tags are allowed."},"matchObjectAge":{"$ref":"#/types/aws-native:s3:StorageLensGroupMatchObjectAge","description":"This property contains `DaysGreaterThan` and `DaysLessThan` properties to define the object age range (minimum and maximum number of days)."},"matchObjectSize":{"$ref":"#/types/aws-native:s3:StorageLensGroupMatchObjectSize","description":"This property contains `BytesGreaterThan` and `BytesLessThan` to define the object size range (minimum and maximum number of Bytes)."}},"type":"object"},"aws-native:s3:StorageLensGroupFilter":{"description":"Sets the Storage Lens Group filter.","properties":{"and":{"$ref":"#/types/aws-native:s3:StorageLensGroupAnd","description":"This property contains the `And` logical operator, which allows multiple filter conditions to be joined for more complex comparisons of Storage Lens group data. Objects must match all of the listed filter conditions that are joined by the `And` logical operator. Only one of each filter condition is allowed."},"matchAnyPrefix":{"type":"array","items":{"type":"string"},"description":"This property contains a list of prefixes. At least one prefix must be specified. Up to 10 prefixes are allowed."},"matchAnySuffix":{"type":"array","items":{"type":"string"},"description":"This property contains a list of suffixes. At least one suffix must be specified. Up to 10 suffixes are allowed."},"matchAnyTag":{"type":"array","items":{"$ref":"#/types/aws-native:s3:StorageLensGroupTag"},"description":"This property contains the list of S3 object tags. At least one object tag must be specified. Up to 10 object tags are allowed."},"matchObjectAge":{"$ref":"#/types/aws-native:s3:StorageLensGroupMatchObjectAge","description":"This property contains `DaysGreaterThan` and `DaysLessThan` to define the object age range (minimum and maximum number of days)."},"matchObjectSize":{"$ref":"#/types/aws-native:s3:StorageLensGroupMatchObjectSize","description":"This property contains `BytesGreaterThan` and `BytesLessThan` to define the object size range (minimum and maximum number of Bytes)."},"or":{"$ref":"#/types/aws-native:s3:StorageLensGroupOr","description":"This property contains the `Or` logical operator, which allows multiple filter conditions to be joined. Objects can match any of the listed filter conditions, which are joined by the `Or` logical operator. Only one of each filter condition is allowed."}},"type":"object"},"aws-native:s3:StorageLensGroupLevel":{"description":"Specifies the details of Amazon S3 Storage Lens Group configuration.","properties":{"storageLensGroupSelectionCriteria":{"$ref":"#/types/aws-native:s3:StorageLensGroupSelectionCriteria","description":"This property indicates which Storage Lens group ARNs to include or exclude in the Storage Lens group aggregation. If this value is left null, then all Storage Lens groups are selected."}},"type":"object"},"aws-native:s3:StorageLensGroupMatchObjectAge":{"description":"Filter to match all of the specified values for the minimum and maximum object age.","properties":{"daysGreaterThan":{"type":"integer","description":"Minimum object age to which the rule applies."},"daysLessThan":{"type":"integer","description":"Maximum object age to which the rule applies."}},"type":"object"},"aws-native:s3:StorageLensGroupMatchObjectSize":{"description":"Filter to match all of the specified values for the minimum and maximum object size.","properties":{"bytesGreaterThan":{"type":"integer","description":"Minimum object size to which the rule applies."},"bytesLessThan":{"type":"integer","description":"Maximum object size to which the rule applies."}},"type":"object"},"aws-native:s3:StorageLensGroupOr":{"description":"The Storage Lens group will include objects that match any of the specified filter values.","properties":{"matchAnyPrefix":{"type":"array","items":{"type":"string"},"description":"This property contains a list of prefixes. At least one prefix must be specified. Up to 10 prefixes are allowed."},"matchAnySuffix":{"type":"array","items":{"type":"string"},"description":"This property contains the list of suffixes. At least one suffix must be specified. Up to 10 suffixes are allowed."},"matchAnyTag":{"type":"array","items":{"$ref":"#/types/aws-native:s3:StorageLensGroupTag"},"description":"This property contains the list of S3 object tags. At least one object tag must be specified. Up to 10 object tags are allowed."},"matchObjectAge":{"$ref":"#/types/aws-native:s3:StorageLensGroupMatchObjectAge","description":"This property filters objects that match the specified object age range."},"matchObjectSize":{"$ref":"#/types/aws-native:s3:StorageLensGroupMatchObjectSize","description":"This property contains the `BytesGreaterThan` and `BytesLessThan` values to define the object size range (minimum and maximum number of Bytes)."}},"type":"object"},"aws-native:s3:StorageLensGroupSelectionCriteria":{"description":"Selection criteria for Storage Lens Group level metrics","properties":{"exclude":{"type":"array","items":{"type":"string"},"description":"This property indicates which Storage Lens group ARNs to exclude from the Storage Lens group aggregation."},"include":{"type":"array","items":{"type":"string"},"description":"This property indicates which Storage Lens group ARNs to include in the Storage Lens group aggregation."}},"type":"object"},"aws-native:s3:StorageLensGroupTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:s3:StorageLensPrefixLevel":{"description":"Prefix-level metrics configurations.","properties":{"storageMetrics":{"$ref":"#/types/aws-native:s3:StorageLensPrefixLevelStorageMetrics","description":"A property for the prefix-level storage metrics for Amazon S3 Storage Lens."}},"type":"object","required":["storageMetrics"]},"aws-native:s3:StorageLensPrefixLevelStorageMetrics":{"properties":{"isEnabled":{"type":"boolean","description":"Specifies whether prefix-level storage metrics are enabled or disabled."},"selectionCriteria":{"$ref":"#/types/aws-native:s3:StorageLensSelectionCriteria","description":"This property identifies whether the details of the prefix-level storage metrics for S3 Storage Lens are enabled."}},"type":"object"},"aws-native:s3:StorageLensS3BucketDestination":{"description":"S3 bucket destination settings for the Amazon S3 Storage Lens metrics export.","properties":{"accountId":{"type":"string","description":"The AWS account ID that owns the destination S3 bucket."},"arn":{"type":"string","description":"The ARN of the bucket to which Amazon S3 Storage Lens exports will be placed."},"encryption":{"$ref":"#/types/aws-native:s3:StorageLensEncryption","description":"This property contains the details of the encryption of the bucket destination of the Amazon S3 Storage Lens metrics export."},"format":{"$ref":"#/types/aws-native:s3:StorageLensS3BucketDestinationFormat","description":"Specifies the file format to use when exporting Amazon S3 Storage Lens metrics export."},"outputSchemaVersion":{"$ref":"#/types/aws-native:s3:StorageLensS3BucketDestinationOutputSchemaVersion","description":"The version of the output schema to use when exporting Amazon S3 Storage Lens metrics."},"prefix":{"type":"string","description":"The prefix to use for Amazon S3 Storage Lens export."}},"type":"object","required":["accountId","arn","format","outputSchemaVersion"]},"aws-native:s3:StorageLensS3BucketDestinationFormat":{"description":"Specifies the file format to use when exporting Amazon S3 Storage Lens metrics export.","type":"string","enum":[{"name":"Csv","value":"CSV"},{"name":"Parquet","value":"Parquet"}]},"aws-native:s3:StorageLensS3BucketDestinationOutputSchemaVersion":{"description":"The version of the output schema to use when exporting Amazon S3 Storage Lens metrics.","type":"string","enum":[{"name":"V1","value":"V_1"}]},"aws-native:s3:StorageLensSelectionCriteria":{"description":"Selection criteria for prefix-level metrics.","properties":{"delimiter":{"type":"string","description":"Delimiter to divide S3 key into hierarchy of prefixes."},"maxDepth":{"type":"integer","description":"Max depth of prefixes of S3 key that Amazon S3 Storage Lens will analyze."},"minStorageBytesPercentage":{"type":"number","description":"The minimum storage bytes threshold for the prefixes to be included in the analysis."}},"type":"object"},"aws-native:s3:StorageLensTableDestination":{"description":"S3 Tables destination settings for the Amazon S3 Storage Lens metrics export.","properties":{"encryption":{"$ref":"#/types/aws-native:s3:StorageLensEncryption","description":"This resource configures your data encryption settings for Storage Lens metrics in read-only S3 table buckets."},"isEnabled":{"type":"boolean","description":"Specifies whether the export to S3 Tables is enabled or disabled."}},"type":"object","required":["isEnabled"]},"aws-native:s3:StorageLensTag":{"properties":{"key":{"type":"string","description":"Name of the object key."},"value":{"type":"string","description":"Value of the tag."}},"type":"object","required":["key","value"]},"aws-native:s3express:AccessPointNetworkOrigin":{"description":"Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies.","type":"string","enum":[{"name":"Internet","value":"Internet"},{"name":"Vpc","value":"VPC"}]},"aws-native:s3express:AccessPointPublicAccessBlockConfiguration":{"properties":{"blockPublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should block public access control lists (ACLs) for buckets in this account. Setting this element to TRUE causes the following behavior:\n- PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.\n - PUT Object calls fail if the request includes a public ACL.\n. - PUT Bucket calls fail if the request includes a public ACL.\nEnabling this setting doesn't affect existing policies or ACLs."},"blockPublicPolicy":{"type":"boolean","description":"Specifies whether Amazon S3 should block public bucket policies for buckets in this account. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. Enabling this setting doesn't affect existing bucket policies."},"ignorePublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should ignore public ACLs for buckets in this account. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on buckets in this account and any objects that they contain. Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set."},"restrictPublicBuckets":{"type":"boolean","description":"Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy.\nEnabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked."}},"type":"object"},"aws-native:s3express:AccessPointScope":{"properties":{"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:s3express:AccessPointScopePermissionsItem"},"description":"You can include one or more API operations as permissions"},"prefixes":{"type":"array","items":{"type":"string"},"description":"You can specify any amount of prefixes, but the total length of characters of all prefixes must be less than 256 bytes in size."}},"type":"object"},"aws-native:s3express:AccessPointScopePermissionsItem":{"type":"string","enum":[{"name":"GetObject","value":"GetObject"},{"name":"GetObjectAttributes","value":"GetObjectAttributes"},{"name":"ListMultipartUploadParts","value":"ListMultipartUploadParts"},{"name":"ListBucket","value":"ListBucket"},{"name":"ListBucketMultipartUploads","value":"ListBucketMultipartUploads"},{"name":"PutObject","value":"PutObject"},{"name":"DeleteObject","value":"DeleteObject"},{"name":"AbortMultipartUpload","value":"AbortMultipartUpload"}]},"aws-native:s3express:AccessPointTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Tags are key-value pairs that you use to label your access points. Tags can help you organize and control access to access points. For more information, see [Tagging S3 resources for cost allocation or attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html) ."},"value":{"type":"string","description":"The value of the tag. Tags are key-value pairs that you use to label your access points. Tags can help you organize and control access to access points. For more information, see [Tagging S3 resources for cost allocation or attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html) ."}},"type":"object","required":["key","value"]},"aws-native:s3express:AccessPointVpcConfiguration":{"description":"The Virtual Private Cloud (VPC) configuration for a bucket access point.","properties":{"vpcId":{"type":"string","description":"If this field is specified, this access point will only allow connections from the specified VPC ID."}},"type":"object"},"aws-native:s3express:DirectoryBucketAbortIncompleteMultipartUpload":{"description":"Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload.","properties":{"daysAfterInitiation":{"type":"integer","description":"Specifies the number of days after which Amazon S3 aborts an incomplete multipart upload."}},"type":"object","required":["daysAfterInitiation"]},"aws-native:s3express:DirectoryBucketBucketEncryption":{"description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3 managed keys (SSE-S3) or AWS KMS keys (SSE-KMS).","properties":{"serverSideEncryptionConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:s3express:DirectoryBucketServerSideEncryptionRule"},"description":"Specifies the default server-side-encryption configuration."}},"type":"object","required":["serverSideEncryptionConfiguration"]},"aws-native:s3express:DirectoryBucketDataRedundancy":{"description":"Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket.","type":"string","enum":[{"name":"SingleAvailabilityZone","value":"SingleAvailabilityZone"},{"name":"SingleLocalZone","value":"SingleLocalZone"}]},"aws-native:s3express:DirectoryBucketLifecycleConfiguration":{"properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:s3express:DirectoryBucketRule"},"description":"A lifecycle rule for individual objects in an Amazon S3 Express bucket."}},"type":"object","required":["rules"]},"aws-native:s3express:DirectoryBucketRule":{"description":"You must specify at least one of the following properties: AbortIncompleteMultipartUpload, or ExpirationInDays.","properties":{"abortIncompleteMultipartUpload":{"$ref":"#/types/aws-native:s3express:DirectoryBucketAbortIncompleteMultipartUpload","description":"Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload."},"expirationInDays":{"type":"integer","description":"Indicates the number of days after creation when objects are deleted from Amazon S3 and Amazon S3 Glacier. If you specify an expiration and transition time, you must use the same time unit for both properties (either in days or by date). The expiration time must also be later than the transition time."},"id":{"type":"string","description":"Unique identifier for the rule. The value can't be longer than 255 characters."},"objectSizeGreaterThan":{"type":"string","description":"Specifies the minimum object size in bytes for this rule to apply to. Objects must be larger than this value in bytes. For more information about size based rules, see [Lifecycle configuration using size-based rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-configuration-examples.html#lc-size-rules) in the *Amazon S3 User Guide* ."},"objectSizeLessThan":{"type":"string","description":"Specifies the maximum object size in bytes for this rule to apply to. Objects must be smaller than this value in bytes. For more information about sized based rules, see [Lifecycle configuration using size-based rules](https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-configuration-examples.html#lc-size-rules) in the *Amazon S3 User Guide* ."},"prefix":{"type":"string","description":"Object key prefix that identifies one or more objects to which this rule applies.\n\n\u003e Replacement must be made for object keys containing special characters (such as carriage returns) when using XML requests. For more information, see [XML related object key constraints](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html#object-key-xml-related-constraints) ."},"status":{"$ref":"#/types/aws-native:s3express:DirectoryBucketRuleStatus","description":"If `Enabled` , the rule is currently being applied. If `Disabled` , the rule is not currently being applied."}},"type":"object","required":["status"]},"aws-native:s3express:DirectoryBucketRuleStatus":{"description":"If `Enabled` , the rule is currently being applied. If `Disabled` , the rule is not currently being applied.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3express:DirectoryBucketServerSideEncryptionByDefault":{"description":"Specifies the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied.","properties":{"kmsMasterKeyId":{"type":"string","description":"AWS Key Management Service (KMS) customer managed key ID to use for the default encryption. This parameter is allowed only if SSEAlgorithm is set to aws:kms. You can specify this parameter with the key ID or the Amazon Resource Name (ARN) of the KMS key"},"sseAlgorithm":{"$ref":"#/types/aws-native:s3express:DirectoryBucketServerSideEncryptionByDefaultSseAlgorithm","description":"Server-side encryption algorithm to use for the default encryption.\n\n\u003e For directory buckets, there are only two supported values for server-side encryption: `AES256` and `aws:kms` ."}},"type":"object","required":["sseAlgorithm"]},"aws-native:s3express:DirectoryBucketServerSideEncryptionByDefaultSseAlgorithm":{"description":"Server-side encryption algorithm to use for the default encryption.\n\n\u003e For directory buckets, there are only two supported values for server-side encryption: `AES256` and `aws:kms` .","type":"string","enum":[{"name":"Awskms","value":"aws:kms"},{"name":"Aes256","value":"AES256"}]},"aws-native:s3express:DirectoryBucketServerSideEncryptionRule":{"description":"Specifies the default server-side encryption configuration.","properties":{"bucketKeyEnabled":{"type":"boolean","description":"Specifies whether Amazon S3 should use an S3 Bucket Key with server-side encryption using KMS (SSE-KMS) for new objects in the bucket. Existing objects are not affected. Amazon S3 Express One Zone uses an S3 Bucket Key with SSE-KMS and S3 Bucket Key cannot be disabled. It's only allowed to set the BucketKeyEnabled element to true."},"serverSideEncryptionByDefault":{"$ref":"#/types/aws-native:s3express:DirectoryBucketServerSideEncryptionByDefault","description":"Specifies the default server-side encryption to apply to new objects in the bucket. If a PUT Object request doesn't specify any server-side encryption, this default encryption will be applied."}},"type":"object"},"aws-native:s3express:DirectoryBucketTag":{"properties":{"key":{"type":"string","description":"The key of the tag. Tags are key-value pairs that you use to label your directory buckets. Tags can help you organize, track costs for, and control access to directory buckets. For more information, see [Using tags with directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) ."},"value":{"type":"string","description":"The value of the tag. Tags are key-value pairs that you use to label your directory buckets. Tags can help you organize, track costs for, and control access to directory buckets. For more information, see [Using tags with directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) ."}},"type":"object","required":["key","value"]},"aws-native:s3objectlambda:AccessPointAlias":{"properties":{"status":{"type":"string","description":"The status of the Object Lambda alias."},"value":{"type":"string","description":"The value of the Object Lambda alias."}},"type":"object","required":["value"]},"aws-native:s3objectlambda:AccessPointAwsLambda":{"properties":{"functionArn":{"type":"string"},"functionPayload":{"type":"string"}},"type":"object","required":["functionArn"]},"aws-native:s3objectlambda:AccessPointObjectLambdaConfiguration":{"description":"Configuration to be applied to this Object lambda Access Point. It specifies Supporting Access Point, Transformation Configurations. Customers can also set if they like to enable Cloudwatch metrics for accesses to this Object lambda Access Point. Default setting for Cloudwatch metrics is disable.","properties":{"allowedFeatures":{"type":"array","items":{"type":"string"},"description":"A container for allowed features. Valid inputs are `GetObject-Range` , `GetObject-PartNumber` , `HeadObject-Range` , and `HeadObject-PartNumber` ."},"cloudWatchMetricsEnabled":{"type":"boolean","description":"A container for whether the CloudWatch metrics configuration is enabled."},"supportingAccessPoint":{"type":"string","description":"Standard access point associated with the Object Lambda Access Point."},"transformationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointTransformationConfiguration"},"description":"A container for transformation configurations for an Object Lambda Access Point."}},"type":"object","required":["supportingAccessPoint","transformationConfigurations"]},"aws-native:s3objectlambda:AccessPointPolicyStatus":{"properties":{"isPublic":{"type":"boolean","description":"Specifies whether the Object lambda Access Point Policy is Public or not. Object lambda Access Points are private by default."}},"type":"object"},"aws-native:s3objectlambda:AccessPointPublicAccessBlockConfiguration":{"description":"The Public Access Block Configuration is used to block policies that would allow public access to this Object lambda Access Point. All public access to Object lambda Access Points are blocked by default, and any policy that would give public access to them will be also blocked. This behavior cannot be changed for Object lambda Access Points.","properties":{"blockPublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should block public access control lists (ACLs) to this object lambda access point. Setting this element to TRUE causes the following behavior:\n- PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.\n - PUT Object calls fail if the request includes a public ACL.\n. - PUT Bucket calls fail if the request includes a public ACL.\nEnabling this setting doesn't affect existing policies or ACLs."},"blockPublicPolicy":{"type":"boolean","description":"Specifies whether Amazon S3 should block public bucket policies for buckets in this account. Setting this element to TRUE causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access. Enabling this setting doesn't affect existing bucket policies."},"ignorePublicAcls":{"type":"boolean","description":"Specifies whether Amazon S3 should ignore public ACLs for buckets in this account. Setting this element to TRUE causes Amazon S3 to ignore all public ACLs on buckets in this account and any objects that they contain. Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set."},"restrictPublicBuckets":{"type":"boolean","description":"Specifies whether Amazon S3 should restrict public bucket policies for this bucket. Setting this element to TRUE restricts access to this bucket to only AWS services and authorized users within this account if the bucket has a public policy.\nEnabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked."}},"type":"object"},"aws-native:s3objectlambda:AccessPointTransformationConfiguration":{"description":"Configuration to define what content transformation will be applied on which S3 Action.","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"A container for the action of an Object Lambda Access Point configuration. Valid inputs are `GetObject` , `HeadObject` , `ListObject` , and `ListObjectV2` ."},"contentTransformation":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointTransformationConfigurationContentTransformationProperties","description":"A container for the content transformation of an Object Lambda Access Point configuration. Can include the FunctionArn and FunctionPayload. For more information, see [AwsLambdaTransformation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AwsLambdaTransformation.html) in the *Amazon S3 API Reference* ."}},"type":"object","required":["actions","contentTransformation"]},"aws-native:s3objectlambda:AccessPointTransformationConfigurationContentTransformation0Properties":{"description":"A container for the content transformation of an Object Lambda Access Point configuration. Can include the FunctionArn and FunctionPayload. For more information, see [AwsLambdaTransformation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AwsLambdaTransformation.html) in the *Amazon S3 API Reference* .","properties":{"awsLambda":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointAwsLambda"}},"type":"object","required":["awsLambda"]},"aws-native:s3objectlambda:AccessPointTransformationConfigurationContentTransformationProperties":{"description":"A container for the content transformation of an Object Lambda Access Point configuration. Can include the FunctionArn and FunctionPayload. For more information, see [AwsLambdaTransformation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AwsLambdaTransformation.html) in the *Amazon S3 API Reference* .","properties":{"awsLambda":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointAwsLambda"}},"type":"object","required":["awsLambda"]},"aws-native:s3outposts:AccessPointVpcConfiguration":{"properties":{"vpcId":{"type":"string","description":"Virtual Private Cloud (VPC) Id from which AccessPoint will allow requests."}},"type":"object"},"aws-native:s3outposts:BucketAbortIncompleteMultipartUpload":{"description":"Specifies the days since the initiation of an incomplete multipart upload that Amazon S3Outposts will wait before permanently removing all parts of the upload.","properties":{"daysAfterInitiation":{"type":"integer","description":"Specifies the number of days after which Amazon S3Outposts aborts an incomplete multipart upload."}},"type":"object","required":["daysAfterInitiation"]},"aws-native:s3outposts:BucketFilterAndOperator0Properties":{"properties":{"prefix":{"type":"string","description":"Prefix identifies one or more objects to which the rule applies."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:s3outposts:BucketFilterTag"},"description":"All of these tags must exist in the object's tag set in order for the rule to apply."}},"type":"object","required":["tags"]},"aws-native:s3outposts:BucketFilterAndOperatorProperties":{"properties":{"prefix":{"type":"string","description":"Prefix identifies one or more objects to which the rule applies."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:s3outposts:BucketFilterTag"},"description":"All of these tags must exist in the object's tag set in order for the rule to apply."}},"type":"object","required":["tags"]},"aws-native:s3outposts:BucketFilterTag":{"description":"Tag used to identify a subset of objects for an Amazon S3Outposts bucket.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:s3outposts:BucketLifecycleConfiguration":{"properties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:s3outposts:BucketRule"},"description":"A list of lifecycle rules for individual objects in an Amazon S3Outposts bucket."}},"type":"object","required":["rules"]},"aws-native:s3outposts:BucketRule":{"description":"Specifies lifecycle rules for an Amazon S3Outposts bucket. You must specify at least one of the following: AbortIncompleteMultipartUpload, ExpirationDate, ExpirationInDays.","properties":{"abortIncompleteMultipartUpload":{"$ref":"#/types/aws-native:s3outposts:BucketAbortIncompleteMultipartUpload","description":"Specifies a lifecycle rule that stops incomplete multipart uploads to an Amazon S3Outposts bucket."},"expirationDate":{"type":"string","description":"Indicates when objects are deleted from Amazon S3Outposts. The date value must be in ISO 8601 format. The time is always midnight UTC."},"expirationInDays":{"type":"integer","description":"Indicates the number of days after creation when objects are deleted from Amazon S3Outposts."},"filter":{"$ref":"#/types/aws-native:s3outposts:BucketRuleFilterProperties","description":"The container for the filter of the lifecycle rule."},"id":{"type":"string","description":"Unique identifier for the lifecycle rule. The value can't be longer than 255 characters."},"status":{"$ref":"#/types/aws-native:s3outposts:BucketRuleStatus","description":"If `Enabled` , the rule is currently being applied. If `Disabled` , the rule is not currently being applied."}},"type":"object"},"aws-native:s3outposts:BucketRuleFilterProperties":{"description":"The container for the filter of the lifecycle rule.","properties":{"andOperator":{"$ref":"#/types/aws-native:s3outposts:BucketFilterAndOperatorProperties","description":"The container for the AND condition for the lifecycle rule. A combination of Prefix and 1 or more Tags OR a minimum of 2 or more tags."},"prefix":{"type":"string","description":"Object key prefix that identifies one or more objects to which this rule applies."},"tag":{"$ref":"#/types/aws-native:s3outposts:BucketFilterTag","description":"Specifies a tag used to identify a subset of objects for an Amazon S3Outposts bucket."}},"type":"object"},"aws-native:s3outposts:BucketRuleStatus":{"description":"If `Enabled` , the rule is currently being applied. If `Disabled` , the rule is not currently being applied.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3outposts:BucketTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:s3outposts:EndpointAccessType":{"description":"The type of access for the on-premise network connectivity for the Outpost endpoint. To access endpoint from an on-premises network, you must specify the access type and provide the customer owned Ipv4 pool.","type":"string","enum":[{"name":"CustomerOwnedIp","value":"CustomerOwnedIp"},{"name":"Private","value":"Private"}]},"aws-native:s3outposts:EndpointFailedReason":{"properties":{"errorCode":{"type":"string","description":"The failure code, if any, for a create or delete endpoint operation."},"message":{"type":"string","description":"Additional error details describing the endpoint failure and recommended action."}},"type":"object"},"aws-native:s3outposts:EndpointNetworkInterface":{"description":"The container for the network interface.","properties":{"networkInterfaceId":{"type":"string","description":"The ID for the network interface."}},"type":"object","required":["networkInterfaceId"]},"aws-native:s3outposts:EndpointStatus":{"description":"The status of the endpoint.","type":"string","enum":[{"name":"Available","value":"Available"},{"name":"Pending","value":"Pending"},{"name":"Deleting","value":"Deleting"},{"name":"CreateFailed","value":"Create_Failed"},{"name":"DeleteFailed","value":"Delete_Failed"}]},"aws-native:s3tables:TableBucketEncryptionConfiguration":{"description":"Specifies encryption settings for the table bucket","properties":{"kmsKeyArn":{"type":"string","description":"ARN of the KMS key to use for encryption"},"sseAlgorithm":{"$ref":"#/types/aws-native:s3tables:TableBucketEncryptionConfigurationSseAlgorithm","description":"Server-side encryption algorithm"}},"type":"object"},"aws-native:s3tables:TableBucketEncryptionConfigurationSseAlgorithm":{"description":"Server-side encryption algorithm","type":"string","enum":[{"name":"Aes256","value":"AES256"},{"name":"Awskms","value":"aws:kms"}]},"aws-native:s3tables:TableBucketMetricsConfiguration":{"description":"Settings governing the Metric configuration for the table bucket.","properties":{"status":{"$ref":"#/types/aws-native:s3tables:TableBucketMetricsConfigurationStatus","description":"Indicates whether Metrics are enabled."}},"type":"object"},"aws-native:s3tables:TableBucketMetricsConfigurationStatus":{"description":"Indicates whether Metrics are enabled.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3tables:TableBucketPolicyResourcePolicy":{"description":"A policy document containing permissions to add to the specified table bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.","type":"object"},"aws-native:s3tables:TableBucketStorageClassConfiguration":{"description":"Specifies storage class settings for the table bucket","properties":{"storageClass":{"$ref":"#/types/aws-native:s3tables:TableBucketStorageClassConfigurationStorageClass","description":"The storage class for the table bucket"}},"type":"object"},"aws-native:s3tables:TableBucketStorageClassConfigurationStorageClass":{"description":"The storage class for the table bucket","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"IntelligentTiering","value":"INTELLIGENT_TIERING"}]},"aws-native:s3tables:TableBucketTag":{"properties":{"key":{"type":"string","description":"Tag key must be between 1 to 128 characters in length. Tag key cannot start with 'aws:' and can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."},"value":{"type":"string","description":"Tag value must be between 0 to 256 characters in length. Tag value can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."}},"type":"object","required":["key","value"]},"aws-native:s3tables:TableBucketUnreferencedFileRemoval":{"description":"Settings governing the Unreferenced File Removal maintenance action. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots.","properties":{"noncurrentDays":{"type":"integer","description":"S3 permanently deletes noncurrent objects after the number of days specified by the NoncurrentDays property."},"status":{"$ref":"#/types/aws-native:s3tables:TableBucketUnreferencedFileRemovalStatus","description":"Indicates whether the Unreferenced File Removal maintenance action is enabled."},"unreferencedDays":{"type":"integer","description":"For any object not referenced by your table and older than the UnreferencedDays property, S3 creates a delete marker and marks the object version as noncurrent."}},"type":"object"},"aws-native:s3tables:TableBucketUnreferencedFileRemovalStatus":{"description":"Indicates whether the Unreferenced File Removal maintenance action is enabled.","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"}]},"aws-native:s3tables:TableCompaction":{"description":"Settings governing the Compaction maintenance action. Contains details about the compaction settings for an Iceberg table.","properties":{"status":{"$ref":"#/types/aws-native:s3tables:TableCompactionStatus","description":"Indicates whether the Compaction maintenance action is enabled."},"targetFileSizeMb":{"type":"integer","description":"The target file size for the table in MB."}},"type":"object"},"aws-native:s3tables:TableCompactionStatus":{"description":"Indicates whether the Compaction maintenance action is enabled.","type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:s3tables:TableIcebergMetadata":{"description":"Contains details about the metadata for an Iceberg table.","properties":{"icebergPartitionSpec":{"$ref":"#/types/aws-native:s3tables:TableIcebergPartitionSpec"},"icebergSchema":{"$ref":"#/types/aws-native:s3tables:TableIcebergSchema","description":"The schema for an Iceberg table."},"icebergSortOrder":{"$ref":"#/types/aws-native:s3tables:TableIcebergSortOrder"},"tableProperties":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object","required":["icebergSchema"]},"aws-native:s3tables:TableIcebergPartitionField":{"description":"A partition field specification for an Iceberg table","properties":{"fieldId":{"type":"integer","description":"The partition field ID (auto-assigned starting from 1000 if not specified)"},"name":{"type":"string","description":"The name of the partition field"},"sourceId":{"type":"integer","description":"The source column ID to partition on"},"transform":{"type":"string","description":"The partition transform function (identity, bucket[N], truncate[N], year, month, day, hour)"}},"type":"object","required":["name","sourceId","transform"]},"aws-native:s3tables:TableIcebergPartitionSpec":{"description":"Partition specification for an Iceberg table","properties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:s3tables:TableIcebergPartitionField"},"description":"List of partition fields"},"specId":{"type":"integer","description":"The partition spec ID (defaults to 0 if not specified)"}},"type":"object","required":["fields"]},"aws-native:s3tables:TableIcebergSchema":{"description":"Contains details about the schema for an Iceberg table","properties":{"schemaFieldList":{"type":"array","items":{"$ref":"#/types/aws-native:s3tables:TableSchemaField"},"description":"The schema fields for the table"}},"type":"object","required":["schemaFieldList"]},"aws-native:s3tables:TableIcebergSortField":{"description":"A sort field specification for an Iceberg table","properties":{"direction":{"$ref":"#/types/aws-native:s3tables:TableIcebergSortFieldDirection","description":"Sort direction (asc or desc)"},"nullOrder":{"$ref":"#/types/aws-native:s3tables:TableIcebergSortFieldNullOrder","description":"Null value ordering (nulls-first or nulls-last)"},"sourceId":{"type":"integer","description":"The source column ID to sort on"},"transform":{"type":"string","description":"The sort transform function"}},"type":"object","required":["direction","nullOrder","sourceId","transform"]},"aws-native:s3tables:TableIcebergSortFieldDirection":{"description":"Sort direction (asc or desc)","type":"string","enum":[{"name":"Asc","value":"asc"},{"name":"Desc","value":"desc"}]},"aws-native:s3tables:TableIcebergSortFieldNullOrder":{"description":"Null value ordering (nulls-first or nulls-last)","type":"string","enum":[{"name":"NullsFirst","value":"nulls-first"},{"name":"NullsLast","value":"nulls-last"}]},"aws-native:s3tables:TableIcebergSortOrder":{"description":"Sort order specification for an Iceberg table","properties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:s3tables:TableIcebergSortField"},"description":"List of sort fields"},"orderId":{"type":"integer","description":"The sort order ID (defaults to 1 if not specified, 0 is reserved for unsorted)"}},"type":"object","required":["fields"]},"aws-native:s3tables:TableOpenTableFormat":{"description":"Format of the table.","type":"string","enum":[{"name":"Iceberg","value":"ICEBERG"}]},"aws-native:s3tables:TablePolicyResourcePolicy":{"description":"A policy document containing permissions to add to the specified table. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.","type":"object"},"aws-native:s3tables:TableSchemaField":{"description":"Contains details about the schema for an Iceberg table","properties":{"id":{"type":"integer","description":"The unique identifier for the field"},"name":{"type":"string","description":"The name of the field"},"required":{"type":"boolean","description":"A Boolean value that specifies whether values are required for each row in this field"},"type":{"type":"string","description":"The field type"}},"type":"object","required":["name","type"]},"aws-native:s3tables:TableSnapshotManagement":{"description":"Contains details about the snapshot management settings for an Iceberg table. A snapshot is expired when it exceeds MinSnapshotsToKeep and MaxSnapshotAgeHours.","properties":{"maxSnapshotAgeHours":{"type":"integer","description":"The maximum age of a snapshot before it can be expired."},"minSnapshotsToKeep":{"type":"integer","description":"The minimum number of snapshots to keep."},"status":{"$ref":"#/types/aws-native:s3tables:TableSnapshotManagementStatus","description":"Indicates whether the SnapshotManagement maintenance action is enabled."}},"type":"object"},"aws-native:s3tables:TableSnapshotManagementStatus":{"description":"Indicates whether the SnapshotManagement maintenance action is enabled.","type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:s3tables:TableStorageClassConfiguration":{"description":"Specifies storage class settings for the table","properties":{"storageClass":{"$ref":"#/types/aws-native:s3tables:TableStorageClassConfigurationStorageClass","description":"The storage class for the table"}},"type":"object"},"aws-native:s3tables:TableStorageClassConfigurationStorageClass":{"description":"The storage class for the table","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"IntelligentTiering","value":"INTELLIGENT_TIERING"}]},"aws-native:s3tables:TableTag":{"properties":{"key":{"type":"string","description":"Tag key must be between 1 to 128 characters in length. Tag key cannot start with 'aws:' and can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."},"value":{"type":"string","description":"Tag value must be between 0 to 256 characters in length. Tag value can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."}},"type":"object","required":["key","value"]},"aws-native:s3tables:TableWithoutMetadata":{"description":"Indicates that you don't want to specify a schema for the table. This property is mutually exclusive to 'IcebergMetadata', and its only possible value is 'Yes'.","type":"string","enum":[{"name":"Yes","value":"Yes"}]},"aws-native:s3vectors:IndexDataType":{"description":"The data type of the vectors to be inserted into the vector index.","type":"string","enum":[{"name":"Float32","value":"float32"}]},"aws-native:s3vectors:IndexDistanceMetric":{"description":"The distance metric to be used for similarity search.","type":"string","enum":[{"name":"Cosine","value":"cosine"},{"name":"Euclidean","value":"euclidean"}]},"aws-native:s3vectors:IndexEncryptionConfiguration":{"description":"The encryption configuration for the index.","properties":{"kmsKeyArn":{"type":"string","description":"AWS Key Management Service (KMS) customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if sseType is set to aws:kms"},"sseType":{"$ref":"#/types/aws-native:s3vectors:IndexEncryptionConfigurationSseType","description":"Defines the server-side encryption type for index encryption configuration. Defaults to the parent vector bucket's encryption settings when unspecified."}},"type":"object"},"aws-native:s3vectors:IndexEncryptionConfigurationSseType":{"description":"Defines the server-side encryption type for index encryption configuration. Defaults to the parent vector bucket's encryption settings when unspecified.","type":"string","enum":[{"name":"Aes256","value":"AES256"},{"name":"Awskms","value":"aws:kms"}]},"aws-native:s3vectors:IndexMetadataConfiguration":{"description":"The metadata configuration for the vector index.","properties":{"nonFilterableMetadataKeys":{"type":"array","items":{"type":"string"},"description":"Non-filterable metadata keys allow you to enrich vectors with additional context during storage and retrieval. Unlike default metadata keys, these keys cannot be used as query filters. Non-filterable metadata keys can be retrieved but cannot be searched, queried, or filtered. You can access non-filterable metadata keys of your vectors after finding the vectors."}},"type":"object"},"aws-native:s3vectors:IndexTag":{"properties":{"key":{"type":"string","description":"Tag key must be between 1 to 128 characters in length. Tag key cannot start with 'aws:' and can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."},"value":{"type":"string","description":"Tag value must be between 0 to 256 characters in length. Tag value can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."}},"type":"object","required":["key","value"]},"aws-native:s3vectors:VectorBucketEncryptionConfiguration":{"description":"The encryption configuration for the vector bucket.","properties":{"kmsKeyArn":{"type":"string","description":"AWS Key Management Service (KMS) customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if sseType is set to aws:kms"},"sseType":{"$ref":"#/types/aws-native:s3vectors:VectorBucketEncryptionConfigurationSseType","description":"The server-side encryption type to use for the encryption configuration of the vector bucket. By default, if you don't specify, all new vectors in Amazon S3 vector buckets use server-side encryption with Amazon S3 managed keys (SSE-S3), specifically AES256."}},"type":"object"},"aws-native:s3vectors:VectorBucketEncryptionConfigurationSseType":{"description":"The server-side encryption type to use for the encryption configuration of the vector bucket. By default, if you don't specify, all new vectors in Amazon S3 vector buckets use server-side encryption with Amazon S3 managed keys (SSE-S3), specifically AES256.","type":"string","enum":[{"name":"Aes256","value":"AES256"},{"name":"Awskms","value":"aws:kms"}]},"aws-native:s3vectors:VectorBucketPolicyPolicy":{"description":"A policy document containing permissions to add to the specified vector bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.","type":"object"},"aws-native:s3vectors:VectorBucketTag":{"properties":{"key":{"type":"string","description":"Tag key must be between 1 to 128 characters in length. Tag key cannot start with 'aws:' and can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."},"value":{"type":"string","description":"Tag value must be between 0 to 256 characters in length. Tag value can only contain alphanumeric characters, spaces, _, ., /, =, +, -, and @."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:AppImageConfigCodeEditorAppImageConfig":{"description":"The configuration for the kernels in a SageMaker image running as a CodeEditor app.","properties":{"containerConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigContainerConfig","description":"The container configuration for a SageMaker image."}},"type":"object"},"aws-native:sagemaker:AppImageConfigContainerConfig":{"description":"The container configuration for a SageMaker image.","properties":{"containerArguments":{"type":"array","items":{"type":"string"},"description":"A list of arguments to apply to the container."},"containerEntrypoint":{"type":"array","items":{"type":"string"},"description":"The custom entry point to use on container."},"containerEnvironmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigCustomImageContainerEnvironmentVariable"},"description":"A list of variables to apply to the custom container."}},"type":"object"},"aws-native:sagemaker:AppImageConfigCustomImageContainerEnvironmentVariable":{"properties":{"key":{"type":"string","description":"The key that identifies a container environment variable."},"value":{"type":"string","description":"The value of the container environment variable."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:AppImageConfigFileSystemConfig":{"description":"The Amazon Elastic File System (EFS) storage configuration for a SageMaker image.","properties":{"defaultGid":{"type":"integer","description":"The default POSIX group ID (GID). If not specified, defaults to 100."},"defaultUid":{"type":"integer","description":"The default POSIX user ID (UID). If not specified, defaults to 1000."},"mountPath":{"type":"string","description":"The path within the image to mount the user's EFS home directory. The directory should be empty. If not specified, defaults to /home/sagemaker-user."}},"type":"object"},"aws-native:sagemaker:AppImageConfigJupyterLabAppImageConfig":{"description":"The configuration for the kernels in a SageMaker image running as a JupyterLab app.","properties":{"containerConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigContainerConfig","description":"The container configuration for a SageMaker image."}},"type":"object"},"aws-native:sagemaker:AppImageConfigKernelGatewayImageConfig":{"description":"The configuration for the file system and kernels in a SageMaker image running as a KernelGateway app.","properties":{"fileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigFileSystemConfig","description":"The Amazon Elastic File System (EFS) storage configuration for a SageMaker image."},"kernelSpecs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigKernelSpec"},"description":"The specification of the Jupyter kernels in the image."}},"type":"object","required":["kernelSpecs"]},"aws-native:sagemaker:AppImageConfigKernelSpec":{"properties":{"displayName":{"type":"string","description":"The display name of the kernel."},"name":{"type":"string","description":"The name of the kernel."}},"type":"object","required":["name"]},"aws-native:sagemaker:AppImageConfigTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:AppResourceSpec":{"properties":{"instanceType":{"$ref":"#/types/aws-native:sagemaker:AppResourceSpecInstanceType","description":"The instance type that the image version runs on."},"lifecycleConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lifecycle Configuration to attach to the Resource."},"sageMakerImageArn":{"type":"string","description":"The ARN of the SageMaker image that the image version belongs to."},"sageMakerImageVersionArn":{"type":"string","description":"The ARN of the image version created on the instance."}},"type":"object"},"aws-native:sagemaker:AppResourceSpecInstanceType":{"description":"The instance type that the image version runs on.","type":"string","enum":[{"name":"System","value":"system"},{"name":"MlT3Micro","value":"ml.t3.micro"},{"name":"MlT3Small","value":"ml.t3.small"},{"name":"MlT3Medium","value":"ml.t3.medium"},{"name":"MlT3Large","value":"ml.t3.large"},{"name":"MlT3Xlarge","value":"ml.t3.xlarge"},{"name":"MlT32xlarge","value":"ml.t3.2xlarge"},{"name":"MlM5Large","value":"ml.m5.large"},{"name":"MlM5Xlarge","value":"ml.m5.xlarge"},{"name":"MlM52xlarge","value":"ml.m5.2xlarge"},{"name":"MlM54xlarge","value":"ml.m5.4xlarge"},{"name":"MlM58xlarge","value":"ml.m5.8xlarge"},{"name":"MlM512xlarge","value":"ml.m5.12xlarge"},{"name":"MlM516xlarge","value":"ml.m5.16xlarge"},{"name":"MlM524xlarge","value":"ml.m5.24xlarge"},{"name":"MlM5dLarge","value":"ml.m5d.large"},{"name":"MlM5dXlarge","value":"ml.m5d.xlarge"},{"name":"MlM5d2xlarge","value":"ml.m5d.2xlarge"},{"name":"MlM5d4xlarge","value":"ml.m5d.4xlarge"},{"name":"MlM5d8xlarge","value":"ml.m5d.8xlarge"},{"name":"MlM5d12xlarge","value":"ml.m5d.12xlarge"},{"name":"MlM5d16xlarge","value":"ml.m5d.16xlarge"},{"name":"MlM5d24xlarge","value":"ml.m5d.24xlarge"},{"name":"MlC5Large","value":"ml.c5.large"},{"name":"MlC5Xlarge","value":"ml.c5.xlarge"},{"name":"MlC52xlarge","value":"ml.c5.2xlarge"},{"name":"MlC54xlarge","value":"ml.c5.4xlarge"},{"name":"MlC59xlarge","value":"ml.c5.9xlarge"},{"name":"MlC512xlarge","value":"ml.c5.12xlarge"},{"name":"MlC518xlarge","value":"ml.c5.18xlarge"},{"name":"MlC524xlarge","value":"ml.c5.24xlarge"},{"name":"MlP32xlarge","value":"ml.p3.2xlarge"},{"name":"MlP38xlarge","value":"ml.p3.8xlarge"},{"name":"MlP316xlarge","value":"ml.p3.16xlarge"},{"name":"MlP3dn24xlarge","value":"ml.p3dn.24xlarge"},{"name":"MlG4dnXlarge","value":"ml.g4dn.xlarge"},{"name":"MlG4dn2xlarge","value":"ml.g4dn.2xlarge"},{"name":"MlG4dn4xlarge","value":"ml.g4dn.4xlarge"},{"name":"MlG4dn8xlarge","value":"ml.g4dn.8xlarge"},{"name":"MlG4dn12xlarge","value":"ml.g4dn.12xlarge"},{"name":"MlG4dn16xlarge","value":"ml.g4dn.16xlarge"},{"name":"MlR5Large","value":"ml.r5.large"},{"name":"MlR5Xlarge","value":"ml.r5.xlarge"},{"name":"MlR52xlarge","value":"ml.r5.2xlarge"},{"name":"MlR54xlarge","value":"ml.r5.4xlarge"},{"name":"MlR58xlarge","value":"ml.r5.8xlarge"},{"name":"MlR512xlarge","value":"ml.r5.12xlarge"},{"name":"MlR516xlarge","value":"ml.r5.16xlarge"},{"name":"MlR524xlarge","value":"ml.r5.24xlarge"},{"name":"MlG5Xlarge","value":"ml.g5.xlarge"},{"name":"MlG52xlarge","value":"ml.g5.2xlarge"},{"name":"MlG54xlarge","value":"ml.g5.4xlarge"},{"name":"MlG58xlarge","value":"ml.g5.8xlarge"},{"name":"MlG512xlarge","value":"ml.g5.12xlarge"},{"name":"MlG516xlarge","value":"ml.g5.16xlarge"},{"name":"MlG524xlarge","value":"ml.g5.24xlarge"},{"name":"MlG548xlarge","value":"ml.g5.48xlarge"},{"name":"MlG6Xlarge","value":"ml.g6.xlarge"},{"name":"MlG62xlarge","value":"ml.g6.2xlarge"},{"name":"MlG64xlarge","value":"ml.g6.4xlarge"},{"name":"MlG68xlarge","value":"ml.g6.8xlarge"},{"name":"MlG612xlarge","value":"ml.g6.12xlarge"},{"name":"MlG616xlarge","value":"ml.g6.16xlarge"},{"name":"MlG624xlarge","value":"ml.g6.24xlarge"},{"name":"MlG648xlarge","value":"ml.g6.48xlarge"},{"name":"MlG6eXlarge","value":"ml.g6e.xlarge"},{"name":"MlG6e2xlarge","value":"ml.g6e.2xlarge"},{"name":"MlG6e4xlarge","value":"ml.g6e.4xlarge"},{"name":"MlG6e8xlarge","value":"ml.g6e.8xlarge"},{"name":"MlG6e12xlarge","value":"ml.g6e.12xlarge"},{"name":"MlG6e16xlarge","value":"ml.g6e.16xlarge"},{"name":"MlG6e24xlarge","value":"ml.g6e.24xlarge"},{"name":"MlG6e48xlarge","value":"ml.g6e.48xlarge"},{"name":"MlGeospatialInteractive","value":"ml.geospatial.interactive"},{"name":"MlP4d24xlarge","value":"ml.p4d.24xlarge"},{"name":"MlP4de24xlarge","value":"ml.p4de.24xlarge"},{"name":"MlTrn12xlarge","value":"ml.trn1.2xlarge"},{"name":"MlTrn132xlarge","value":"ml.trn1.32xlarge"},{"name":"MlTrn1n32xlarge","value":"ml.trn1n.32xlarge"},{"name":"MlP548xlarge","value":"ml.p5.48xlarge"},{"name":"MlP5e48xlarge","value":"ml.p5e.48xlarge"},{"name":"MlP5en48xlarge","value":"ml.p5en.48xlarge"},{"name":"MlM6iLarge","value":"ml.m6i.large"},{"name":"MlM6iXlarge","value":"ml.m6i.xlarge"},{"name":"MlM6i2xlarge","value":"ml.m6i.2xlarge"},{"name":"MlM6i4xlarge","value":"ml.m6i.4xlarge"},{"name":"MlM6i8xlarge","value":"ml.m6i.8xlarge"},{"name":"MlM6i12xlarge","value":"ml.m6i.12xlarge"},{"name":"MlM6i16xlarge","value":"ml.m6i.16xlarge"},{"name":"MlM6i24xlarge","value":"ml.m6i.24xlarge"},{"name":"MlM6i32xlarge","value":"ml.m6i.32xlarge"},{"name":"MlM7iLarge","value":"ml.m7i.large"},{"name":"MlM7iXlarge","value":"ml.m7i.xlarge"},{"name":"MlM7i2xlarge","value":"ml.m7i.2xlarge"},{"name":"MlM7i4xlarge","value":"ml.m7i.4xlarge"},{"name":"MlM7i8xlarge","value":"ml.m7i.8xlarge"},{"name":"MlM7i12xlarge","value":"ml.m7i.12xlarge"},{"name":"MlM7i16xlarge","value":"ml.m7i.16xlarge"},{"name":"MlM7i24xlarge","value":"ml.m7i.24xlarge"},{"name":"MlM7i48xlarge","value":"ml.m7i.48xlarge"},{"name":"MlC6iLarge","value":"ml.c6i.large"},{"name":"MlC6iXlarge","value":"ml.c6i.xlarge"},{"name":"MlC6i2xlarge","value":"ml.c6i.2xlarge"},{"name":"MlC6i4xlarge","value":"ml.c6i.4xlarge"},{"name":"MlC6i8xlarge","value":"ml.c6i.8xlarge"},{"name":"MlC6i12xlarge","value":"ml.c6i.12xlarge"},{"name":"MlC6i16xlarge","value":"ml.c6i.16xlarge"},{"name":"MlC6i24xlarge","value":"ml.c6i.24xlarge"},{"name":"MlC6i32xlarge","value":"ml.c6i.32xlarge"},{"name":"MlC7iLarge","value":"ml.c7i.large"},{"name":"MlC7iXlarge","value":"ml.c7i.xlarge"},{"name":"MlC7i2xlarge","value":"ml.c7i.2xlarge"},{"name":"MlC7i4xlarge","value":"ml.c7i.4xlarge"},{"name":"MlC7i8xlarge","value":"ml.c7i.8xlarge"},{"name":"MlC7i12xlarge","value":"ml.c7i.12xlarge"},{"name":"MlC7i16xlarge","value":"ml.c7i.16xlarge"},{"name":"MlC7i24xlarge","value":"ml.c7i.24xlarge"},{"name":"MlC7i48xlarge","value":"ml.c7i.48xlarge"},{"name":"MlR6iLarge","value":"ml.r6i.large"},{"name":"MlR6iXlarge","value":"ml.r6i.xlarge"},{"name":"MlR6i2xlarge","value":"ml.r6i.2xlarge"},{"name":"MlR6i4xlarge","value":"ml.r6i.4xlarge"},{"name":"MlR6i8xlarge","value":"ml.r6i.8xlarge"},{"name":"MlR6i12xlarge","value":"ml.r6i.12xlarge"},{"name":"MlR6i16xlarge","value":"ml.r6i.16xlarge"},{"name":"MlR6i24xlarge","value":"ml.r6i.24xlarge"},{"name":"MlR6i32xlarge","value":"ml.r6i.32xlarge"},{"name":"MlR7iLarge","value":"ml.r7i.large"},{"name":"MlR7iXlarge","value":"ml.r7i.xlarge"},{"name":"MlR7i2xlarge","value":"ml.r7i.2xlarge"},{"name":"MlR7i4xlarge","value":"ml.r7i.4xlarge"},{"name":"MlR7i8xlarge","value":"ml.r7i.8xlarge"},{"name":"MlR7i12xlarge","value":"ml.r7i.12xlarge"},{"name":"MlR7i16xlarge","value":"ml.r7i.16xlarge"},{"name":"MlR7i24xlarge","value":"ml.r7i.24xlarge"},{"name":"MlR7i48xlarge","value":"ml.r7i.48xlarge"},{"name":"MlM6idLarge","value":"ml.m6id.large"},{"name":"MlM6idXlarge","value":"ml.m6id.xlarge"},{"name":"MlM6id2xlarge","value":"ml.m6id.2xlarge"},{"name":"MlM6id4xlarge","value":"ml.m6id.4xlarge"},{"name":"MlM6id8xlarge","value":"ml.m6id.8xlarge"},{"name":"MlM6id12xlarge","value":"ml.m6id.12xlarge"},{"name":"MlM6id16xlarge","value":"ml.m6id.16xlarge"},{"name":"MlM6id24xlarge","value":"ml.m6id.24xlarge"},{"name":"MlM6id32xlarge","value":"ml.m6id.32xlarge"},{"name":"MlC6idLarge","value":"ml.c6id.large"},{"name":"MlC6idXlarge","value":"ml.c6id.xlarge"},{"name":"MlC6id2xlarge","value":"ml.c6id.2xlarge"},{"name":"MlC6id4xlarge","value":"ml.c6id.4xlarge"},{"name":"MlC6id8xlarge","value":"ml.c6id.8xlarge"},{"name":"MlC6id12xlarge","value":"ml.c6id.12xlarge"},{"name":"MlC6id16xlarge","value":"ml.c6id.16xlarge"},{"name":"MlC6id24xlarge","value":"ml.c6id.24xlarge"},{"name":"MlC6id32xlarge","value":"ml.c6id.32xlarge"},{"name":"MlR6idLarge","value":"ml.r6id.large"},{"name":"MlR6idXlarge","value":"ml.r6id.xlarge"},{"name":"MlR6id2xlarge","value":"ml.r6id.2xlarge"},{"name":"MlR6id4xlarge","value":"ml.r6id.4xlarge"},{"name":"MlR6id8xlarge","value":"ml.r6id.8xlarge"},{"name":"MlR6id12xlarge","value":"ml.r6id.12xlarge"},{"name":"MlR6id16xlarge","value":"ml.r6id.16xlarge"},{"name":"MlR6id24xlarge","value":"ml.r6id.24xlarge"},{"name":"MlR6id32xlarge","value":"ml.r6id.32xlarge"}]},"aws-native:sagemaker:AppTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:AppType":{"description":"The type of app.","type":"string","enum":[{"name":"JupyterServer","value":"JupyterServer"},{"name":"KernelGateway","value":"KernelGateway"},{"name":"RStudioServerPro","value":"RStudioServerPro"},{"name":"RSessionGateway","value":"RSessionGateway"},{"name":"Canvas","value":"Canvas"}]},"aws-native:sagemaker:ClusterAlarmDetails":{"description":"The details of the alarm to monitor during the AMI update.","properties":{"alarmName":{"type":"string","description":"The name of the alarm."}},"type":"object","required":["alarmName"]},"aws-native:sagemaker:ClusterAutoScalingConfig":{"description":"Configuration for cluster auto-scaling","properties":{"autoScalerType":{"$ref":"#/types/aws-native:sagemaker:ClusterAutoScalingConfigAutoScalerType","description":"The type of auto-scaler to use"},"mode":{"$ref":"#/types/aws-native:sagemaker:ClusterAutoScalingConfigMode","description":"The auto-scaling mode for the cluster"}},"type":"object","required":["mode"]},"aws-native:sagemaker:ClusterAutoScalingConfigAutoScalerType":{"description":"The type of auto-scaler to use","type":"string","enum":[{"name":"Karpenter","value":"Karpenter"}]},"aws-native:sagemaker:ClusterAutoScalingConfigMode":{"description":"The auto-scaling mode for the cluster","type":"string","enum":[{"name":"Enable","value":"Enable"},{"name":"Disable","value":"Disable"}]},"aws-native:sagemaker:ClusterCapacityRequirements":{"description":"Specifies the capacity requirements configuration for an instance group","properties":{"onDemand":{"$ref":"#/types/aws-native:sagemaker:ClusterOnDemandOptions"},"spot":{"$ref":"#/types/aws-native:sagemaker:ClusterSpotOptions"}},"type":"object"},"aws-native:sagemaker:ClusterCapacitySizeConfig":{"description":"The configuration of the size measurements of the AMI update. Using this configuration, you can specify whether SageMaker should update your instance group by an amount or percentage of instances.","properties":{"type":{"type":"string","description":"Specifies whether SageMaker should process the update by amount or percentage of instances."},"value":{"type":"integer","description":"Specifies the amount or percentage of instances SageMaker updates at a time."}},"type":"object","required":["type","value"]},"aws-native:sagemaker:ClusterDeepHealthCheckType":{"description":"The type of deep health check(s) to be performed on the instances in the SageMaker HyperPod cluster instance group.","type":"string","enum":[{"name":"InstanceStress","value":"InstanceStress"},{"name":"InstanceConnectivity","value":"InstanceConnectivity"}]},"aws-native:sagemaker:ClusterDeploymentConfig":{"description":"The configuration to use when updating the AMI versions.","properties":{"autoRollbackConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterAlarmDetails"}},"rollingUpdatePolicy":{"$ref":"#/types/aws-native:sagemaker:ClusterRollingUpdatePolicy"},"waitIntervalInSeconds":{"type":"integer","description":"The duration in seconds that SageMaker waits before updating more instances in the cluster."}},"type":"object"},"aws-native:sagemaker:ClusterEnvironmentConfig":{"description":"The configuration for the restricted instance groups (RIG) environment.","properties":{"fSxLustreConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterFSxLustreConfig"}},"type":"object"},"aws-native:sagemaker:ClusterFSxLustreConfig":{"description":"Configuration settings for an Amazon FSx for Lustre file system to be used with the cluster.","properties":{"perUnitStorageThroughput":{"type":"integer","description":"The throughput capacity of the FSx for Lustre file system, measured in MB/s per TiB of storage."},"sizeInGiB":{"type":"integer","description":"The storage capacity of the FSx for Lustre file system, specified in gibibytes (GiB)."}},"type":"object","required":["perUnitStorageThroughput","sizeInGiB"]},"aws-native:sagemaker:ClusterInstanceGroup":{"description":"Details of an instance group in a SageMaker HyperPod cluster.","properties":{"capacityRequirements":{"$ref":"#/types/aws-native:sagemaker:ClusterCapacityRequirements"},"currentCount":{"type":"integer","description":"The number of instances that are currently in the instance group of a SageMaker HyperPod cluster."},"executionRole":{"type":"string","replaceOnChanges":true},"imageId":{"type":"string"},"instanceCount":{"type":"integer","description":"The number of instances you specified to add to the instance group of a SageMaker HyperPod cluster."},"instanceGroupName":{"type":"string","replaceOnChanges":true},"instanceStorageConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterInstanceStorageConfig"}},"instanceType":{"type":"string","replaceOnChanges":true},"kubernetesConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterKubernetesConfig"},"lifeCycleConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterLifeCycleConfig"},"minInstanceCount":{"type":"integer","description":"The minimum number of instances required for the instance group to be InService. MinInstanceCount must be less than or equal to InstanceCount."},"onStartDeepHealthChecks":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterDeepHealthCheckType"}},"overrideVpcConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterVpcConfig","replaceOnChanges":true},"scheduledUpdateConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterScheduledUpdateConfig"},"slurmConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterSlurmConfig"},"threadsPerCore":{"type":"integer","description":"The number you specified to TreadsPerCore in CreateCluster for enabling or disabling multithreading. For instance types that support multithreading, you can specify 1 for disabling multithreading and 2 for enabling multithreading.","replaceOnChanges":true},"trainingPlanArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the training plan to use for this cluster instance group. For more information about how to reserve GPU capacity for your SageMaker HyperPod clusters using Amazon SageMaker Training Plan, see CreateTrainingPlan."}},"type":"object","required":["executionRole","instanceCount","instanceGroupName","instanceType","lifeCycleConfig"]},"aws-native:sagemaker:ClusterInstanceStorageConfig":{"description":"Defines the configuration for attaching additional storage to the instances in the SageMaker HyperPod cluster instance group.","type":"object"},"aws-native:sagemaker:ClusterKubernetesConfig":{"description":"Kubernetes configuration for cluster nodes including labels and taints.","properties":{"labels":{"type":"object","additionalProperties":{"type":"string"}},"taints":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterKubernetesTaint"}}},"type":"object"},"aws-native:sagemaker:ClusterKubernetesTaint":{"description":"A Kubernetes taint to apply to cluster nodes.","properties":{"effect":{"$ref":"#/types/aws-native:sagemaker:ClusterKubernetesTaintEffect","description":"The effect of the taint."},"key":{"type":"string","description":"The key of the taint."},"value":{"type":"string","description":"The value of the taint."}},"type":"object","required":["effect","key"]},"aws-native:sagemaker:ClusterKubernetesTaintEffect":{"description":"The effect of the taint.","type":"string","enum":[{"name":"NoSchedule","value":"NoSchedule"},{"name":"PreferNoSchedule","value":"PreferNoSchedule"},{"name":"NoExecute","value":"NoExecute"}]},"aws-native:sagemaker:ClusterLifeCycleConfig":{"description":"The lifecycle configuration for a SageMaker HyperPod cluster.","properties":{"onCreate":{"type":"string","description":"The file name of the entrypoint script of lifecycle scripts under SourceS3Uri. This entrypoint script runs during cluster creation."},"sourceS3Uri":{"type":"string","description":"An Amazon S3 bucket path where your lifecycle scripts are stored."}},"type":"object","required":["onCreate","sourceS3Uri"]},"aws-native:sagemaker:ClusterNodeProvisioningMode":{"description":"Determines the scaling strategy for the SageMaker HyperPod cluster. When set to 'Continuous', enables continuous scaling which dynamically manages node provisioning. If the parameter is omitted, uses the standard scaling approach in previous release.","type":"string","enum":[{"name":"Continuous","value":"Continuous"}]},"aws-native:sagemaker:ClusterNodeRecovery":{"description":"If node auto-recovery is set to true, faulty nodes will be replaced or rebooted when a failure is detected. If set to false, nodes will be labelled when a fault is detected.","type":"string","enum":[{"name":"Automatic","value":"Automatic"},{"name":"None","value":"None"}]},"aws-native:sagemaker:ClusterOnDemandOptions":{"description":"Options for OnDemand capacity","type":"object"},"aws-native:sagemaker:ClusterOrchestrator":{"description":"Specifies parameter(s) specific to the orchestrator, e.g. specify the EKS cluster or Slurm configuration.","type":"object"},"aws-native:sagemaker:ClusterRestrictedInstanceGroup":{"description":"Details of a restricted instance group in a SageMaker HyperPod cluster.","properties":{"currentCount":{"type":"integer","description":"The number of instances that are currently in the restricted instance group of a SageMaker HyperPod cluster."},"environmentConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterEnvironmentConfig"},"executionRole":{"type":"string","replaceOnChanges":true},"instanceCount":{"type":"integer","description":"The number of instances you specified to add to the restricted instance group of a SageMaker HyperPod cluster."},"instanceGroupName":{"type":"string","replaceOnChanges":true},"instanceStorageConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterInstanceStorageConfig"}},"instanceType":{"type":"string","replaceOnChanges":true},"onStartDeepHealthChecks":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterDeepHealthCheckType"}},"overrideVpcConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterVpcConfig","replaceOnChanges":true},"threadsPerCore":{"type":"integer","description":"The number you specified to TreadsPerCore in CreateCluster for enabling or disabling multithreading. For instance types that support multithreading, you can specify 1 for disabling multithreading and 2 for enabling multithreading.","replaceOnChanges":true},"trainingPlanArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the training plan to use for this cluster restricted instance group. For more information about how to reserve GPU capacity for your SageMaker HyperPod clusters using Amazon SageMaker Training Plan, see CreateTrainingPlan."}},"type":"object","required":["environmentConfig","executionRole","instanceCount","instanceGroupName","instanceType"]},"aws-native:sagemaker:ClusterRollingUpdatePolicy":{"description":"The policy that SageMaker uses when updating the AMI versions of the cluster.","properties":{"maximumBatchSize":{"$ref":"#/types/aws-native:sagemaker:ClusterCapacitySizeConfig"},"rollbackMaximumBatchSize":{"$ref":"#/types/aws-native:sagemaker:ClusterCapacitySizeConfig"}},"type":"object","required":["maximumBatchSize"]},"aws-native:sagemaker:ClusterScheduledUpdateConfig":{"description":"The configuration object of the schedule that SageMaker follows when updating the AMI.","properties":{"deploymentConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterDeploymentConfig"},"scheduleExpression":{"type":"string","description":"A cron expression that specifies the schedule that SageMaker follows when updating the AMI."}},"type":"object","required":["scheduleExpression"]},"aws-native:sagemaker:ClusterSlurmConfig":{"description":"Slurm configuration for the instance group.","properties":{"nodeType":{"$ref":"#/types/aws-native:sagemaker:ClusterSlurmConfigNodeType","description":"The type of Slurm node for this instance group."},"partitionNames":{"type":"array","items":{"type":"string"},"description":"The Slurm partitions that this instance group belongs to. Maximum of 1 partition."}},"type":"object","required":["nodeType"]},"aws-native:sagemaker:ClusterSlurmConfigNodeType":{"description":"The type of Slurm node for this instance group.","type":"string","enum":[{"name":"Controller","value":"Controller"},{"name":"Login","value":"Login"},{"name":"Compute","value":"Compute"}]},"aws-native:sagemaker:ClusterSpotOptions":{"description":"Options for Spot capacity","type":"object"},"aws-native:sagemaker:ClusterStatus":{"description":"The status of the HyperPod Cluster.","type":"string","enum":[{"name":"Creating","value":"Creating"},{"name":"Deleting","value":"Deleting"},{"name":"Failed","value":"Failed"},{"name":"InService","value":"InService"},{"name":"RollingBack","value":"RollingBack"},{"name":"SystemUpdating","value":"SystemUpdating"},{"name":"Updating","value":"Updating"}]},"aws-native:sagemaker:ClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ClusterTieredStorageConfig":{"description":"Configuration for tiered storage in the SageMaker HyperPod cluster.","properties":{"instanceMemoryAllocationPercentage":{"type":"integer","description":"The percentage of instance memory to allocate for tiered storage."},"mode":{"$ref":"#/types/aws-native:sagemaker:ClusterTieredStorageConfigMode","description":"The mode of tiered storage."}},"type":"object","required":["mode"]},"aws-native:sagemaker:ClusterTieredStorageConfigMode":{"description":"The mode of tiered storage.","type":"string","enum":[{"name":"Enable","value":"Enable"},{"name":"Disable","value":"Disable"}]},"aws-native:sagemaker:ClusterVpcConfig":{"description":"Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the Subnets field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect your training job or model."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:DataQualityJobDefinitionBatchTransformInput":{"description":"The batch transform input for a monitoring job.","properties":{"dataCapturedDestinationS3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Batch Transform Job captures data."},"datasetFormat":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDatasetFormat","description":"The dataset format for your batch transform job."},"excludeFeaturesAttribute":{"type":"string","description":"Indexes or names of the features to be excluded from analysis"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionBatchTransformInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionBatchTransformInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."}},"type":"object","required":["dataCapturedDestinationS3Uri","datasetFormat","localPath"]},"aws-native:sagemaker:DataQualityJobDefinitionBatchTransformInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:DataQualityJobDefinitionBatchTransformInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:DataQualityJobDefinitionClusterConfig":{"description":"Configuration for the cluster used to run model monitoring jobs.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the model monitoring job. For distributed processing jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"type":"string","description":"The ML compute instance type for the processing job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job."},"volumeSizeInGb":{"type":"integer","description":"The size of the ML storage volume, in gigabytes, that you want to provision. You must specify sufficient ML storage for your scenario."}},"type":"object","required":["instanceCount","instanceType","volumeSizeInGb"]},"aws-native:sagemaker:DataQualityJobDefinitionConstraintsResource":{"description":"The baseline constraints resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for baseline constraint file in Amazon S3 that the current monitoring job should validated against."}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionCsv":{"description":"The CSV format","properties":{"header":{"type":"boolean","description":"A boolean flag indicating if given CSV has header"}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionDataQualityAppSpecification":{"description":"Container image configuration object for the monitoring job.","properties":{"containerArguments":{"type":"array","items":{"type":"string"},"description":"An array of arguments for the container used to run the monitoring job."},"containerEntrypoint":{"type":"array","items":{"type":"string"},"description":"Specifies the entrypoint for a container used to run the monitoring job."},"environment":{"$ref":"pulumi.json#/Any","description":"Sets the environment variables in the Docker container"},"imageUri":{"type":"string","description":"The container image to be run by the monitoring job."},"postAnalyticsProcessorSourceUri":{"type":"string","description":"An Amazon S3 URI to a script that is called after analysis has been performed. Applicable only for the built-in (first party) containers."},"recordPreprocessorSourceUri":{"type":"string","description":"An Amazon S3 URI to a script that is called per row prior to running analysis. It can base64 decode the payload and convert it into a flatted json so that the built-in container can use the converted data. Applicable only for the built-in (first party) containers"}},"type":"object","required":["imageUri"]},"aws-native:sagemaker:DataQualityJobDefinitionDataQualityBaselineConfig":{"description":"Baseline configuration used to validate that the data conforms to the specified constraints and statistics.","properties":{"baseliningJobName":{"type":"string","description":"The name of the job that performs baselining for the data quality monitoring job."},"constraintsResource":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionConstraintsResource","description":"The constraints resource for a monitoring job."},"statisticsResource":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionStatisticsResource","description":"Configuration for monitoring constraints and monitoring statistics. These baseline resources are compared against the results of the current job from the series of jobs scheduled to collect data periodically."}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionDataQualityJobInput":{"description":"The inputs for a monitoring job.","properties":{"batchTransformInput":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionBatchTransformInput","description":"Input object for the batch transform job."},"endpointInput":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionEndpointInput","description":"Input object for the endpoint"}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionDatasetFormat":{"description":"The dataset format of the data to monitor","properties":{"csv":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionCsv"},"json":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionJson"},"parquet":{"type":"boolean"}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionEndpointInput":{"description":"The endpoint for a monitoring job.","properties":{"endpointName":{"type":"string","description":"An endpoint in customer's account which has enabled `DataCaptureConfig` enabled."},"excludeFeaturesAttribute":{"type":"string","description":"Indexes or names of the features to be excluded from analysis"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionEndpointInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionEndpointInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."}},"type":"object","required":["endpointName","localPath"]},"aws-native:sagemaker:DataQualityJobDefinitionEndpointInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:DataQualityJobDefinitionEndpointInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:DataQualityJobDefinitionJson":{"description":"The Json format","properties":{"line":{"type":"boolean","description":"A boolean flag indicating if it is JSON line format"}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionMonitoringOutput":{"description":"The output object for a monitoring job.","properties":{"s3Output":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionS3Output","description":"The Amazon S3 storage location where the results of a monitoring job are saved."}},"type":"object","required":["s3Output"]},"aws-native:sagemaker:DataQualityJobDefinitionMonitoringOutputConfig":{"description":"The output configuration for monitoring jobs.","properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption."},"monitoringOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionMonitoringOutput"},"description":"Monitoring outputs for monitoring jobs. This is where the output of the periodic monitoring jobs is uploaded."}},"type":"object","required":["monitoringOutputs"]},"aws-native:sagemaker:DataQualityJobDefinitionMonitoringResources":{"description":"Identifies the resources to deploy for a monitoring job.","properties":{"clusterConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionClusterConfig","description":"The configuration for the cluster resources used to run the processing job."}},"type":"object","required":["clusterConfig"]},"aws-native:sagemaker:DataQualityJobDefinitionNetworkConfig":{"description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","properties":{"enableInterContainerTrafficEncryption":{"type":"boolean","description":"Whether to encrypt all communications between distributed processing jobs. Choose True to encrypt communications. Encryption provides greater security for distributed processing jobs, but the processing might take longer."},"enableNetworkIsolation":{"type":"boolean","description":"Whether to allow inbound and outbound network calls to and from the containers used for the processing job."},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionVpcConfig","description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC."}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionS3Output":{"description":"Information about where and how to store the results of a monitoring job.","properties":{"localPath":{"type":"string","description":"The local path to the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job. LocalPath is an absolute path for the output data."},"s3UploadMode":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionS3OutputS3UploadMode","description":"Whether to upload the results of the monitoring job continuously or after the job completes."},"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["localPath","s3Uri"]},"aws-native:sagemaker:DataQualityJobDefinitionS3OutputS3UploadMode":{"description":"Whether to upload the results of the monitoring job continuously or after the job completes.","type":"string","enum":[{"name":"Continuous","value":"Continuous"},{"name":"EndOfJob","value":"EndOfJob"}]},"aws-native:sagemaker:DataQualityJobDefinitionStatisticsResource":{"description":"The baseline statistics resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for the baseline statistics file in Amazon S3 that the current monitoring job should be validated against."}},"type":"object"},"aws-native:sagemaker:DataQualityJobDefinitionStoppingCondition":{"description":"Specifies a time limit for how long the monitoring job is allowed to run.","properties":{"maxRuntimeInSeconds":{"type":"integer","description":"The maximum runtime allowed in seconds."}},"type":"object","required":["maxRuntimeInSeconds"]},"aws-native:sagemaker:DataQualityJobDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:DataQualityJobDefinitionVpcConfig":{"description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the Subnets field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect to your monitoring jobs."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:Device":{"description":"Edge device you want to create","properties":{"description":{"type":"string","description":"Description of the device"},"deviceName":{"type":"string","description":"The name of the device","replaceOnChanges":true},"iotThingName":{"type":"string","description":"AWS Internet of Things (IoT) object name."}},"type":"object","required":["deviceName"]},"aws-native:sagemaker:DeviceFleetEdgeOutputConfig":{"properties":{"kmsKeyId":{"type":"string","description":"The KMS key id used for encryption on the S3 bucket"},"s3OutputLocation":{"type":"string","description":"The Amazon Simple Storage (S3) bucket URI"}},"type":"object","required":["s3OutputLocation"]},"aws-native:sagemaker:DeviceFleetTag":{"description":"Key-value pair to associate as a tag for the resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The key value of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:DeviceTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The key value of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:DomainAppInstanceType":{"description":"The instance type that the image version runs on.","type":"string","enum":[{"name":"System","value":"system"},{"name":"MlT3Micro","value":"ml.t3.micro"},{"name":"MlT3Small","value":"ml.t3.small"},{"name":"MlT3Medium","value":"ml.t3.medium"},{"name":"MlT3Large","value":"ml.t3.large"},{"name":"MlT3Xlarge","value":"ml.t3.xlarge"},{"name":"MlT32xlarge","value":"ml.t3.2xlarge"},{"name":"MlM5Large","value":"ml.m5.large"},{"name":"MlM5Xlarge","value":"ml.m5.xlarge"},{"name":"MlM52xlarge","value":"ml.m5.2xlarge"},{"name":"MlM54xlarge","value":"ml.m5.4xlarge"},{"name":"MlM58xlarge","value":"ml.m5.8xlarge"},{"name":"MlM512xlarge","value":"ml.m5.12xlarge"},{"name":"MlM516xlarge","value":"ml.m5.16xlarge"},{"name":"MlM524xlarge","value":"ml.m5.24xlarge"},{"name":"MlM5dLarge","value":"ml.m5d.large"},{"name":"MlM5dXlarge","value":"ml.m5d.xlarge"},{"name":"MlM5d2xlarge","value":"ml.m5d.2xlarge"},{"name":"MlM5d4xlarge","value":"ml.m5d.4xlarge"},{"name":"MlM5d8xlarge","value":"ml.m5d.8xlarge"},{"name":"MlM5d12xlarge","value":"ml.m5d.12xlarge"},{"name":"MlM5d16xlarge","value":"ml.m5d.16xlarge"},{"name":"MlM5d24xlarge","value":"ml.m5d.24xlarge"},{"name":"MlC5Large","value":"ml.c5.large"},{"name":"MlC5Xlarge","value":"ml.c5.xlarge"},{"name":"MlC52xlarge","value":"ml.c5.2xlarge"},{"name":"MlC54xlarge","value":"ml.c5.4xlarge"},{"name":"MlC59xlarge","value":"ml.c5.9xlarge"},{"name":"MlC512xlarge","value":"ml.c5.12xlarge"},{"name":"MlC518xlarge","value":"ml.c5.18xlarge"},{"name":"MlC524xlarge","value":"ml.c5.24xlarge"},{"name":"MlP32xlarge","value":"ml.p3.2xlarge"},{"name":"MlP38xlarge","value":"ml.p3.8xlarge"},{"name":"MlP316xlarge","value":"ml.p3.16xlarge"},{"name":"MlP3dn24xlarge","value":"ml.p3dn.24xlarge"},{"name":"MlG4dnXlarge","value":"ml.g4dn.xlarge"},{"name":"MlG4dn2xlarge","value":"ml.g4dn.2xlarge"},{"name":"MlG4dn4xlarge","value":"ml.g4dn.4xlarge"},{"name":"MlG4dn8xlarge","value":"ml.g4dn.8xlarge"},{"name":"MlG4dn12xlarge","value":"ml.g4dn.12xlarge"},{"name":"MlG4dn16xlarge","value":"ml.g4dn.16xlarge"},{"name":"MlR5Large","value":"ml.r5.large"},{"name":"MlR5Xlarge","value":"ml.r5.xlarge"},{"name":"MlR52xlarge","value":"ml.r5.2xlarge"},{"name":"MlR54xlarge","value":"ml.r5.4xlarge"},{"name":"MlR58xlarge","value":"ml.r5.8xlarge"},{"name":"MlR512xlarge","value":"ml.r5.12xlarge"},{"name":"MlR516xlarge","value":"ml.r5.16xlarge"},{"name":"MlR524xlarge","value":"ml.r5.24xlarge"},{"name":"MlG5Xlarge","value":"ml.g5.xlarge"},{"name":"MlG52xlarge","value":"ml.g5.2xlarge"},{"name":"MlG54xlarge","value":"ml.g5.4xlarge"},{"name":"MlG58xlarge","value":"ml.g5.8xlarge"},{"name":"MlG512xlarge","value":"ml.g5.12xlarge"},{"name":"MlG516xlarge","value":"ml.g5.16xlarge"},{"name":"MlG524xlarge","value":"ml.g5.24xlarge"},{"name":"MlG548xlarge","value":"ml.g5.48xlarge"},{"name":"MlG6Xlarge","value":"ml.g6.xlarge"},{"name":"MlG62xlarge","value":"ml.g6.2xlarge"},{"name":"MlG64xlarge","value":"ml.g6.4xlarge"},{"name":"MlG68xlarge","value":"ml.g6.8xlarge"},{"name":"MlG612xlarge","value":"ml.g6.12xlarge"},{"name":"MlG616xlarge","value":"ml.g6.16xlarge"},{"name":"MlG624xlarge","value":"ml.g6.24xlarge"},{"name":"MlG648xlarge","value":"ml.g6.48xlarge"},{"name":"MlG6eXlarge","value":"ml.g6e.xlarge"},{"name":"MlG6e2xlarge","value":"ml.g6e.2xlarge"},{"name":"MlG6e4xlarge","value":"ml.g6e.4xlarge"},{"name":"MlG6e8xlarge","value":"ml.g6e.8xlarge"},{"name":"MlG6e12xlarge","value":"ml.g6e.12xlarge"},{"name":"MlG6e16xlarge","value":"ml.g6e.16xlarge"},{"name":"MlG6e24xlarge","value":"ml.g6e.24xlarge"},{"name":"MlG6e48xlarge","value":"ml.g6e.48xlarge"},{"name":"MlGeospatialInteractive","value":"ml.geospatial.interactive"},{"name":"MlP4d24xlarge","value":"ml.p4d.24xlarge"},{"name":"MlP4de24xlarge","value":"ml.p4de.24xlarge"},{"name":"MlTrn12xlarge","value":"ml.trn1.2xlarge"},{"name":"MlTrn132xlarge","value":"ml.trn1.32xlarge"},{"name":"MlTrn1n32xlarge","value":"ml.trn1n.32xlarge"},{"name":"MlP548xlarge","value":"ml.p5.48xlarge"},{"name":"MlP5e48xlarge","value":"ml.p5e.48xlarge"},{"name":"MlP5en48xlarge","value":"ml.p5en.48xlarge"},{"name":"MlM6iLarge","value":"ml.m6i.large"},{"name":"MlM6iXlarge","value":"ml.m6i.xlarge"},{"name":"MlM6i2xlarge","value":"ml.m6i.2xlarge"},{"name":"MlM6i4xlarge","value":"ml.m6i.4xlarge"},{"name":"MlM6i8xlarge","value":"ml.m6i.8xlarge"},{"name":"MlM6i12xlarge","value":"ml.m6i.12xlarge"},{"name":"MlM6i16xlarge","value":"ml.m6i.16xlarge"},{"name":"MlM6i24xlarge","value":"ml.m6i.24xlarge"},{"name":"MlM6i32xlarge","value":"ml.m6i.32xlarge"},{"name":"MlM7iLarge","value":"ml.m7i.large"},{"name":"MlM7iXlarge","value":"ml.m7i.xlarge"},{"name":"MlM7i2xlarge","value":"ml.m7i.2xlarge"},{"name":"MlM7i4xlarge","value":"ml.m7i.4xlarge"},{"name":"MlM7i8xlarge","value":"ml.m7i.8xlarge"},{"name":"MlM7i12xlarge","value":"ml.m7i.12xlarge"},{"name":"MlM7i16xlarge","value":"ml.m7i.16xlarge"},{"name":"MlM7i24xlarge","value":"ml.m7i.24xlarge"},{"name":"MlM7i48xlarge","value":"ml.m7i.48xlarge"},{"name":"MlC6iLarge","value":"ml.c6i.large"},{"name":"MlC6iXlarge","value":"ml.c6i.xlarge"},{"name":"MlC6i2xlarge","value":"ml.c6i.2xlarge"},{"name":"MlC6i4xlarge","value":"ml.c6i.4xlarge"},{"name":"MlC6i8xlarge","value":"ml.c6i.8xlarge"},{"name":"MlC6i12xlarge","value":"ml.c6i.12xlarge"},{"name":"MlC6i16xlarge","value":"ml.c6i.16xlarge"},{"name":"MlC6i24xlarge","value":"ml.c6i.24xlarge"},{"name":"MlC6i32xlarge","value":"ml.c6i.32xlarge"},{"name":"MlC7iLarge","value":"ml.c7i.large"},{"name":"MlC7iXlarge","value":"ml.c7i.xlarge"},{"name":"MlC7i2xlarge","value":"ml.c7i.2xlarge"},{"name":"MlC7i4xlarge","value":"ml.c7i.4xlarge"},{"name":"MlC7i8xlarge","value":"ml.c7i.8xlarge"},{"name":"MlC7i12xlarge","value":"ml.c7i.12xlarge"},{"name":"MlC7i16xlarge","value":"ml.c7i.16xlarge"},{"name":"MlC7i24xlarge","value":"ml.c7i.24xlarge"},{"name":"MlC7i48xlarge","value":"ml.c7i.48xlarge"},{"name":"MlR6iLarge","value":"ml.r6i.large"},{"name":"MlR6iXlarge","value":"ml.r6i.xlarge"},{"name":"MlR6i2xlarge","value":"ml.r6i.2xlarge"},{"name":"MlR6i4xlarge","value":"ml.r6i.4xlarge"},{"name":"MlR6i8xlarge","value":"ml.r6i.8xlarge"},{"name":"MlR6i12xlarge","value":"ml.r6i.12xlarge"},{"name":"MlR6i16xlarge","value":"ml.r6i.16xlarge"},{"name":"MlR6i24xlarge","value":"ml.r6i.24xlarge"},{"name":"MlR6i32xlarge","value":"ml.r6i.32xlarge"},{"name":"MlR7iLarge","value":"ml.r7i.large"},{"name":"MlR7iXlarge","value":"ml.r7i.xlarge"},{"name":"MlR7i2xlarge","value":"ml.r7i.2xlarge"},{"name":"MlR7i4xlarge","value":"ml.r7i.4xlarge"},{"name":"MlR7i8xlarge","value":"ml.r7i.8xlarge"},{"name":"MlR7i12xlarge","value":"ml.r7i.12xlarge"},{"name":"MlR7i16xlarge","value":"ml.r7i.16xlarge"},{"name":"MlR7i24xlarge","value":"ml.r7i.24xlarge"},{"name":"MlR7i48xlarge","value":"ml.r7i.48xlarge"},{"name":"MlM6idLarge","value":"ml.m6id.large"},{"name":"MlM6idXlarge","value":"ml.m6id.xlarge"},{"name":"MlM6id2xlarge","value":"ml.m6id.2xlarge"},{"name":"MlM6id4xlarge","value":"ml.m6id.4xlarge"},{"name":"MlM6id8xlarge","value":"ml.m6id.8xlarge"},{"name":"MlM6id12xlarge","value":"ml.m6id.12xlarge"},{"name":"MlM6id16xlarge","value":"ml.m6id.16xlarge"},{"name":"MlM6id24xlarge","value":"ml.m6id.24xlarge"},{"name":"MlM6id32xlarge","value":"ml.m6id.32xlarge"},{"name":"MlC6idLarge","value":"ml.c6id.large"},{"name":"MlC6idXlarge","value":"ml.c6id.xlarge"},{"name":"MlC6id2xlarge","value":"ml.c6id.2xlarge"},{"name":"MlC6id4xlarge","value":"ml.c6id.4xlarge"},{"name":"MlC6id8xlarge","value":"ml.c6id.8xlarge"},{"name":"MlC6id12xlarge","value":"ml.c6id.12xlarge"},{"name":"MlC6id16xlarge","value":"ml.c6id.16xlarge"},{"name":"MlC6id24xlarge","value":"ml.c6id.24xlarge"},{"name":"MlC6id32xlarge","value":"ml.c6id.32xlarge"},{"name":"MlR6idLarge","value":"ml.r6id.large"},{"name":"MlR6idXlarge","value":"ml.r6id.xlarge"},{"name":"MlR6id2xlarge","value":"ml.r6id.2xlarge"},{"name":"MlR6id4xlarge","value":"ml.r6id.4xlarge"},{"name":"MlR6id8xlarge","value":"ml.r6id.8xlarge"},{"name":"MlR6id12xlarge","value":"ml.r6id.12xlarge"},{"name":"MlR6id16xlarge","value":"ml.r6id.16xlarge"},{"name":"MlR6id24xlarge","value":"ml.r6id.24xlarge"},{"name":"MlR6id32xlarge","value":"ml.r6id.32xlarge"}]},"aws-native:sagemaker:DomainAppLifecycleManagement":{"properties":{"idleSettings":{"$ref":"#/types/aws-native:sagemaker:DomainIdleSettings","description":"Settings related to idle shutdown of Studio applications."}},"type":"object"},"aws-native:sagemaker:DomainAppNetworkAccessType":{"description":"Specifies the VPC used for non-EFS traffic. The default value is PublicInternetOnly.","type":"string","enum":[{"name":"PublicInternetOnly","value":"PublicInternetOnly"},{"name":"VpcOnly","value":"VpcOnly"}]},"aws-native:sagemaker:DomainAppSecurityGroupManagement":{"description":"The entity that creates and manages the required security groups for inter-app communication in VPCOnly mode. Required when CreateDomain.AppNetworkAccessType is VPCOnly and DomainSettings.RStudioServerProDomainSettings.DomainExecutionRoleArn is provided.","type":"string","enum":[{"name":"Service","value":"Service"},{"name":"Customer","value":"Customer"}]},"aws-native:sagemaker:DomainAppType":{"type":"string","enum":[{"name":"JupyterServer","value":"JupyterServer"},{"name":"TensorBoard","value":"TensorBoard"},{"name":"RStudioServerPro","value":"RStudioServerPro"},{"name":"JupyterLab","value":"JupyterLab"},{"name":"CodeEditor","value":"CodeEditor"},{"name":"DetailedProfiler","value":"DetailedProfiler"},{"name":"Canvas","value":"Canvas"}]},"aws-native:sagemaker:DomainAuthMode":{"description":"The mode of authentication that members use to access the domain.","type":"string","enum":[{"name":"Sso","value":"SSO"},{"name":"Iam","value":"IAM"}]},"aws-native:sagemaker:DomainCodeEditorAppSettings":{"description":"The CodeEditor app settings.","properties":{"appLifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:DomainAppLifecycleManagement","description":"Settings that are used to configure and manage the lifecycle of CodeEditor applications."},"builtInLifecycleConfigArn":{"type":"string","description":"The lifecycle configuration that runs before the default lifecycle configuration."},"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCustomImage"},"description":"A list of custom images for use for CodeEditor apps."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:DomainResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the CodeEditor app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with CodeEditor apps."}},"type":"object"},"aws-native:sagemaker:DomainCodeRepository":{"properties":{"repositoryUrl":{"type":"string","description":"A CodeRepository (valid URL) to be used within Jupyter's Git extension."}},"type":"object","required":["repositoryUrl"]},"aws-native:sagemaker:DomainCustomFileSystemConfig":{"properties":{"efsFileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:DomainEfsFileSystemConfig","description":"The settings for a custom Amazon EFS file system."},"fSxLustreFileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:DomainFSxLustreFileSystemConfig","description":"The settings for a custom Amazon FSx for Lustre file system."},"s3FileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:DomainS3FileSystemConfig","description":"Configuration settings for a custom Amazon S3 file system."}},"type":"object"},"aws-native:sagemaker:DomainCustomImage":{"description":"A custom SageMaker image.","properties":{"appImageConfigName":{"type":"string","description":"The Name of the AppImageConfig."},"imageName":{"type":"string","description":"The name of the CustomImage. Must be unique to your account."},"imageVersionNumber":{"type":"integer","description":"The version number of the CustomImage."}},"type":"object","required":["appImageConfigName","imageName"]},"aws-native:sagemaker:DomainCustomPosixUserConfig":{"properties":{"gid":{"type":"integer","description":"The POSIX group ID."},"uid":{"type":"integer","description":"The POSIX user ID."}},"type":"object","required":["gid","uid"]},"aws-native:sagemaker:DomainDefaultEbsStorageSettings":{"description":"Properties related to the Amazon Elastic Block Store volume. Must be provided if storage type is Amazon EBS and must not be provided if storage type is not Amazon EBS","properties":{"defaultEbsVolumeSizeInGb":{"type":"integer","description":"Default size of the Amazon EBS volume in Gb"},"maximumEbsVolumeSizeInGb":{"type":"integer","description":"Maximum size of the Amazon EBS volume in Gb. Must be greater than or equal to the DefaultEbsVolumeSizeInGb."}},"type":"object","required":["defaultEbsVolumeSizeInGb","maximumEbsVolumeSizeInGb"]},"aws-native:sagemaker:DomainDefaultSpaceSettings":{"description":"A collection of settings that apply to spaces of Amazon SageMaker Studio. These settings are specified when the Create/Update Domain API is called.","properties":{"customFileSystemConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCustomFileSystemConfig"},"description":"The settings for assigning a custom file system to a domain. Permitted users can access this file system in Amazon SageMaker AI Studio."},"customPosixUserConfig":{"$ref":"#/types/aws-native:sagemaker:DomainCustomPosixUserConfig","description":"The Jupyter lab's custom posix user configurations."},"executionRole":{"type":"string","description":"The execution role for the space."},"jupyterLabAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainJupyterLabAppSettings","description":"The Jupyter lab's app settings."},"jupyterServerAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainJupyterServerAppSettings","description":"The Jupyter server's app settings."},"kernelGatewayAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainKernelGatewayAppSettings","description":"The kernel gateway app settings."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups for the Amazon Virtual Private Cloud (VPC) that Studio uses for communication."},"spaceStorageSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDefaultSpaceStorageSettings","description":"The Jupyter lab's space storage settings."}},"type":"object","required":["executionRole"]},"aws-native:sagemaker:DomainDefaultSpaceStorageSettings":{"description":"Default storage settings for a space.","properties":{"defaultEbsStorageSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDefaultEbsStorageSettings","description":"The default EBS storage settings for a space."}},"type":"object"},"aws-native:sagemaker:DomainDockerSettings":{"description":"A collection of settings that are required to start docker-proxy server.","properties":{"enableDockerAccess":{"$ref":"#/types/aws-native:sagemaker:DomainDockerSettingsEnableDockerAccess","description":"The flag to enable/disable docker-proxy server"},"vpcOnlyTrustedAccounts":{"type":"array","items":{"type":"string"},"description":"A list of account id's that would be used to pull images from in VpcOnly mode"}},"type":"object"},"aws-native:sagemaker:DomainDockerSettingsEnableDockerAccess":{"description":"The flag to enable/disable docker-proxy server","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:DomainEfsFileSystemConfig":{"properties":{"fileSystemId":{"type":"string","description":"The ID of your Amazon EFS file system."},"fileSystemPath":{"type":"string","description":"The path to the file system directory that is accessible in Amazon SageMaker AI Studio. Permitted users can access only this directory and below."}},"type":"object","required":["fileSystemId"]},"aws-native:sagemaker:DomainFSxLustreFileSystemConfig":{"properties":{"fileSystemId":{"type":"string","description":"The globally unique, 17-digit, ID of the file system, assigned by Amazon FSx for Lustre."},"fileSystemPath":{"type":"string","description":"The path to the file system directory that is accessible in Amazon SageMaker Studio. Permitted users can access only this directory and below."}},"type":"object","required":["fileSystemId"]},"aws-native:sagemaker:DomainHiddenSageMakerImage":{"properties":{"sageMakerImageName":{"$ref":"#/types/aws-native:sagemaker:DomainHiddenSageMakerImageSageMakerImageName","description":"The SageMaker image name that you are hiding from the Studio user interface."},"versionAliases":{"type":"array","items":{"type":"string"},"description":"The version aliases you are hiding from the Studio user interface."}},"type":"object"},"aws-native:sagemaker:DomainHiddenSageMakerImageSageMakerImageName":{"description":"The SageMaker image name that you are hiding from the Studio user interface.","type":"string","enum":[{"name":"SagemakerDistribution","value":"sagemaker_distribution"}]},"aws-native:sagemaker:DomainIdleSettings":{"properties":{"idleTimeoutInMinutes":{"type":"integer","description":"The time that SageMaker waits after the application becomes idle before shutting it down."},"lifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:DomainLifecycleManagement","description":"Indicates whether idle shutdown is activated for the application type."},"maxIdleTimeoutInMinutes":{"type":"integer","description":"The maximum value in minutes that custom idle shutdown can be set to by the user."},"minIdleTimeoutInMinutes":{"type":"integer","description":"The minimum value in minutes that custom idle shutdown can be set to by the user."}},"type":"object"},"aws-native:sagemaker:DomainIpAddressType":{"description":"A setting to indicate if IPv6 routing should be enabled along with IPv4 or not","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:sagemaker:DomainJupyterLabAppSettings":{"description":"The JupyterLab app settings.","properties":{"appLifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:DomainAppLifecycleManagement","description":"Indicates whether idle shutdown is activated for JupyterLab applications."},"builtInLifecycleConfigArn":{"type":"string","description":"The lifecycle configuration that runs before the default lifecycle configuration."},"codeRepositories":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCodeRepository"},"description":"A list of CodeRepositories available for use with JupyterLab apps."},"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCustomImage"},"description":"A list of custom images for use for JupyterLab apps."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:DomainResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the JupyterLab app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with JupyterLab apps."}},"type":"object"},"aws-native:sagemaker:DomainJupyterServerAppSettings":{"description":"The JupyterServer app settings.","properties":{"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:DomainResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the JupyterServer app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with JupyterServer apps."}},"type":"object"},"aws-native:sagemaker:DomainKernelGatewayAppSettings":{"description":"The kernel gateway app settings.","properties":{"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCustomImage"},"description":"A list of custom SageMaker images that are configured to run as a KernelGateway app."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:DomainResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the KernelGateway app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with KernelGateway apps."}},"type":"object"},"aws-native:sagemaker:DomainLifecycleManagement":{"description":"A flag to enable/disable AppLifecycleManagement settings","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:DomainMlTools":{"type":"string","enum":[{"name":"DataWrangler","value":"DataWrangler"},{"name":"FeatureStore","value":"FeatureStore"},{"name":"EmrClusters","value":"EmrClusters"},{"name":"AutoMl","value":"AutoMl"},{"name":"Experiments","value":"Experiments"},{"name":"Training","value":"Training"},{"name":"ModelEvaluation","value":"ModelEvaluation"},{"name":"Pipelines","value":"Pipelines"},{"name":"Models","value":"Models"},{"name":"JumpStart","value":"JumpStart"},{"name":"InferenceRecommender","value":"InferenceRecommender"},{"name":"Endpoints","value":"Endpoints"},{"name":"Projects","value":"Projects"},{"name":"InferenceOptimization","value":"InferenceOptimization"},{"name":"HyperPodClusters","value":"HyperPodClusters"},{"name":"Comet","value":"Comet"},{"name":"DeepchecksLlmEvaluation","value":"DeepchecksLLMEvaluation"},{"name":"Fiddler","value":"Fiddler"},{"name":"LakeraGuard","value":"LakeraGuard"},{"name":"PerformanceEvaluation","value":"PerformanceEvaluation"}]},"aws-native:sagemaker:DomainRSessionAppSettings":{"description":"A collection of settings that apply to an RSessionGateway app.","properties":{"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCustomImage"},"description":"A list of custom SageMaker images that are configured to run as a KernelGateway app."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:DomainResourceSpec","description":"Specifies the ARNs of a SageMaker image and SageMaker image version, and the instance type that the version runs on."}},"type":"object"},"aws-native:sagemaker:DomainRStudioServerProAppSettings":{"description":"A collection of settings that configure user interaction with the RStudioServerPro app.","properties":{"accessStatus":{"$ref":"#/types/aws-native:sagemaker:DomainRStudioServerProAppSettingsAccessStatus","description":"Indicates whether the current user has access to the RStudioServerPro app."},"userGroup":{"$ref":"#/types/aws-native:sagemaker:DomainRStudioServerProAppSettingsUserGroup","description":"The level of permissions that the user has within the RStudioServerPro app. This value defaults to User. The Admin value allows the user access to the RStudio Administrative Dashboard."}},"type":"object"},"aws-native:sagemaker:DomainRStudioServerProAppSettingsAccessStatus":{"description":"Indicates whether the current user has access to the RStudioServerPro app.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:DomainRStudioServerProAppSettingsUserGroup":{"description":"The level of permissions that the user has within the RStudioServerPro app. This value defaults to User. The Admin value allows the user access to the RStudio Administrative Dashboard.","type":"string","enum":[{"name":"RStudioAdmin","value":"R_STUDIO_ADMIN"},{"name":"RStudioUser","value":"R_STUDIO_USER"}]},"aws-native:sagemaker:DomainRStudioServerProDomainSettings":{"description":"A collection of settings that update the current configuration for the RStudioServerPro Domain-level app.","properties":{"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:DomainResourceSpec","description":"A collection that defines the default `InstanceType` , `SageMakerImageArn` , and `SageMakerImageVersionArn` for the Domain.","replaceOnChanges":true},"domainExecutionRoleArn":{"type":"string","description":"The ARN of the execution role for the RStudioServerPro Domain-level app."},"rStudioConnectUrl":{"type":"string","description":"A URL pointing to an RStudio Connect server."},"rStudioPackageManagerUrl":{"type":"string","description":"A URL pointing to an RStudio Package Manager server."}},"type":"object","required":["domainExecutionRoleArn"]},"aws-native:sagemaker:DomainResourceSpec":{"properties":{"instanceType":{"$ref":"#/types/aws-native:sagemaker:DomainAppInstanceType","description":"The instance type that the image version runs on.\n\n\u003e *JupyterServer apps* only support the `system` value.\n\u003e \n\u003e For *KernelGateway apps* , the `system` value is translated to `ml.t3.medium` . KernelGateway apps also support all other values for available instance types."},"lifecycleConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lifecycle Configuration to attach to the Resource."},"sageMakerImageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SageMaker image that the image version belongs to."},"sageMakerImageVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image version created on the instance."}},"type":"object"},"aws-native:sagemaker:DomainS3FileSystemConfig":{"properties":{"mountPath":{"type":"string","description":"The file system path where the Amazon S3 storage location will be mounted within the Amazon SageMaker Studio environment."},"s3Uri":{"type":"string","description":"The Amazon S3 URI of the S3 file system configuration."}},"type":"object"},"aws-native:sagemaker:DomainSettings":{"description":"A collection of Domain settings.","properties":{"dockerSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDockerSettings","description":"A collection of settings that configure the domain's Docker interaction."},"executionRoleIdentityConfig":{"$ref":"#/types/aws-native:sagemaker:DomainSettingsExecutionRoleIdentityConfig","description":"The configuration for attaching a SageMaker user profile name to the execution role as a sts:SourceIdentity key."},"ipAddressType":{"$ref":"#/types/aws-native:sagemaker:DomainIpAddressType","description":"The IP address type for the domain. Specify `ipv4` for IPv4-only connectivity or `dualstack` for both IPv4 and IPv6 connectivity. When you specify `dualstack` , the subnet must support IPv6 CIDR blocks. If not specified, defaults to `ipv4` ."},"rStudioServerProDomainSettings":{"$ref":"#/types/aws-native:sagemaker:DomainRStudioServerProDomainSettings","description":"A collection of settings that configure the `RStudioServerPro` Domain-level app."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security groups for the Amazon Virtual Private Cloud that the Domain uses for communication between Domain-level apps and user apps."},"unifiedStudioSettings":{"$ref":"#/types/aws-native:sagemaker:DomainUnifiedStudioSettings","description":"The settings that apply to an SageMaker AI domain when you use it in Amazon SageMaker Unified Studio."}},"type":"object"},"aws-native:sagemaker:DomainSettingsExecutionRoleIdentityConfig":{"description":"The configuration for attaching a SageMaker user profile name to the execution role as a sts:SourceIdentity key.","type":"string","enum":[{"name":"UserProfileName","value":"USER_PROFILE_NAME"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:DomainSharingSettings":{"description":"Specifies options when sharing an Amazon SageMaker Studio notebook. These settings are specified as part of DefaultUserSettings when the CreateDomain API is called, and as part of UserSettings when the CreateUserProfile API is called.","properties":{"notebookOutputOption":{"$ref":"#/types/aws-native:sagemaker:DomainSharingSettingsNotebookOutputOption","description":"Whether to include the notebook cell output when sharing the notebook. The default is Disabled."},"s3KmsKeyId":{"type":"string","description":"When NotebookOutputOption is Allowed, the AWS Key Management Service (KMS) encryption key ID used to encrypt the notebook cell output in the Amazon S3 bucket."},"s3OutputPath":{"type":"string","description":"When NotebookOutputOption is Allowed, the Amazon S3 bucket used to store the shared notebook snapshots."}},"type":"object"},"aws-native:sagemaker:DomainSharingSettingsNotebookOutputOption":{"description":"Whether to include the notebook cell output when sharing the notebook. The default is Disabled.","type":"string","enum":[{"name":"Allowed","value":"Allowed"},{"name":"Disabled","value":"Disabled"}]},"aws-native:sagemaker:DomainStudioWebPortalSettings":{"description":"Studio settings. If these settings are applied on a user level, they take priority over the settings applied on a domain level.","properties":{"hiddenAppTypes":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainAppType"},"description":"Applications supported in Studio that are hidden from the Studio left navigation pane."},"hiddenInstanceTypes":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainAppInstanceType"},"description":"The instance types you are hiding from the Studio user interface."},"hiddenMlTools":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainMlTools"},"description":"The machine learning tools that are hidden from the Studio left navigation pane."},"hiddenSageMakerImageVersionAliases":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainHiddenSageMakerImage"},"description":"The version aliases you are hiding from the Studio user interface."}},"type":"object"},"aws-native:sagemaker:DomainTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:DomainTagPropagation":{"description":"Indicates whether the tags added to Domain, User Profile and Space entity is propagated to all SageMaker resources.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:DomainUnifiedStudioSettings":{"description":"A collection of settings that apply to an Amazon SageMaker AI domain when you use it in Amazon SageMaker Unified Studio.","properties":{"domainAccountId":{"type":"string","description":"The ID of the AWS account that has the Amazon SageMaker Unified Studio domain. The default value, if you don't specify an ID, is the ID of the account that has the Amazon SageMaker AI domain."},"domainId":{"type":"string","description":"The ID of the Amazon SageMaker Unified Studio domain associated with this domain."},"domainRegion":{"type":"string","description":"The AWS Region where the domain is located in Amazon SageMaker Unified Studio. The default value, if you don't specify a Region, is the Region where the Amazon SageMaker AI domain is located."},"environmentId":{"type":"string","description":"The ID of the environment that Amazon SageMaker Unified Studio associates with the domain."},"projectId":{"type":"string","description":"The ID of the Amazon SageMaker Unified Studio project that corresponds to the domain."},"projectS3Path":{"type":"string","description":"The location where Amazon S3 stores temporary execution data and other artifacts for the project that corresponds to the domain."},"studioWebPortalAccess":{"$ref":"#/types/aws-native:sagemaker:DomainUnifiedStudioSettingsStudioWebPortalAccess","description":"Sets whether you can access the domain in Amazon SageMaker Studio:\n\nENABLED\nYou can access the domain in Amazon SageMaker Studio. If you migrate the domain to Amazon SageMaker Unified Studio, you can access it in both studio interfaces.\nDISABLED\nYou can't access the domain in Amazon SageMaker Studio. If you migrate the domain to Amazon SageMaker Unified Studio, you can access it only in that studio interface.\n"}},"type":"object"},"aws-native:sagemaker:DomainUnifiedStudioSettingsStudioWebPortalAccess":{"description":"Sets whether you can access the domain in Amazon SageMaker Studio:\n\nENABLED\nYou can access the domain in Amazon SageMaker Studio. If you migrate the domain to Amazon SageMaker Unified Studio, you can access it in both studio interfaces.\nDISABLED\nYou can't access the domain in Amazon SageMaker Studio. If you migrate the domain to Amazon SageMaker Unified Studio, you can access it only in that studio interface.\n","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:DomainUserSettings":{"description":"A collection of settings that apply to users of Amazon SageMaker Studio. These settings are specified when the CreateUserProfile API is called, and as DefaultUserSettings when the CreateDomain API is called.","properties":{"autoMountHomeEfs":{"$ref":"#/types/aws-native:sagemaker:DomainUserSettingsAutoMountHomeEfs","description":"Indicates whether auto-mounting of an EFS volume is supported for the user profile. "},"codeEditorAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainCodeEditorAppSettings","description":"The Code Editor application settings.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"customFileSystemConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:DomainCustomFileSystemConfig"},"description":"The settings for assigning a custom file system to a user profile. Permitted users can access this file system in Amazon SageMaker AI Studio.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"customPosixUserConfig":{"$ref":"#/types/aws-native:sagemaker:DomainCustomPosixUserConfig","description":"Details about the POSIX identity that is used for file system operations.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"defaultLandingUri":{"type":"string","description":"Defines which Amazon SageMaker application users are directed to by default."},"executionRole":{"type":"string","description":"The execution role for the user."},"jupyterLabAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainJupyterLabAppSettings","description":"The settings for the JupyterLab application.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"jupyterServerAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainJupyterServerAppSettings","description":"The Jupyter server's app settings."},"kernelGatewayAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainKernelGatewayAppSettings","description":"The kernel gateway app settings."},"rSessionAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainRSessionAppSettings","description":"A collection of settings that configure the `RSessionGateway` app."},"rStudioServerProAppSettings":{"$ref":"#/types/aws-native:sagemaker:DomainRStudioServerProAppSettings","description":"A collection of settings that configure user interaction with the `RStudioServerPro` app."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups for the Amazon Virtual Private Cloud (VPC) that Studio uses for communication."},"sharingSettings":{"$ref":"#/types/aws-native:sagemaker:DomainSharingSettings","description":"The sharing settings."},"spaceStorageSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDefaultSpaceStorageSettings","description":"The storage settings for a space.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"studioWebPortal":{"$ref":"#/types/aws-native:sagemaker:DomainUserSettingsStudioWebPortal","description":"Indicates whether the Studio experience is available to users. If not, users cannot access Studio."},"studioWebPortalSettings":{"$ref":"#/types/aws-native:sagemaker:DomainStudioWebPortalSettings","description":"Studio settings. If these settings are applied on a user level, they take priority over the settings applied on a domain level."}},"type":"object","required":["executionRole"]},"aws-native:sagemaker:DomainUserSettingsAutoMountHomeEfs":{"description":"Indicates whether auto-mounting of an EFS volume is supported for the user profile. ","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"},{"name":"DefaultAsDomain","value":"DefaultAsDomain"}]},"aws-native:sagemaker:DomainUserSettingsStudioWebPortal":{"description":"Indicates whether the Studio experience is available to users. If not, users cannot access Studio.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:EndpointAlarm":{"properties":{"alarmName":{"type":"string","description":"The name of the CloudWatch alarm."}},"type":"object","required":["alarmName"]},"aws-native:sagemaker:EndpointAutoRollbackConfig":{"properties":{"alarms":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:EndpointAlarm"},"description":"List of CloudWatch alarms to monitor during the deployment. If any alarm goes off, the deployment is rolled back."}},"type":"object","required":["alarms"]},"aws-native:sagemaker:EndpointBlueGreenUpdatePolicy":{"properties":{"maximumExecutionTimeoutInSeconds":{"type":"integer","description":"The maximum time allowed for the blue/green update, in seconds."},"terminationWaitInSeconds":{"type":"integer","description":"The wait time before terminating the old endpoint during a blue/green deployment."},"trafficRoutingConfiguration":{"$ref":"#/types/aws-native:sagemaker:EndpointTrafficRoutingConfig","description":"The traffic routing configuration for the blue/green deployment."}},"type":"object","required":["trafficRoutingConfiguration"]},"aws-native:sagemaker:EndpointCapacitySize":{"properties":{"type":{"type":"string","description":"Specifies whether the `Value` is an instance count or a capacity unit."},"value":{"type":"integer","description":"The value representing either the number of instances or the number of capacity units."}},"type":"object","required":["type","value"]},"aws-native:sagemaker:EndpointDeploymentConfig":{"properties":{"autoRollbackConfiguration":{"$ref":"#/types/aws-native:sagemaker:EndpointAutoRollbackConfig","description":"Configuration for automatic rollback if an error occurs during deployment."},"blueGreenUpdatePolicy":{"$ref":"#/types/aws-native:sagemaker:EndpointBlueGreenUpdatePolicy","description":"Configuration for blue-green update deployment policies."},"rollingUpdatePolicy":{"$ref":"#/types/aws-native:sagemaker:EndpointRollingUpdatePolicy","description":"Configuration for rolling update deployment policies."}},"type":"object"},"aws-native:sagemaker:EndpointRollingUpdatePolicy":{"properties":{"maximumBatchSize":{"$ref":"#/types/aws-native:sagemaker:EndpointCapacitySize","description":"Specifies the maximum batch size for each rolling update."},"maximumExecutionTimeoutInSeconds":{"type":"integer","description":"The maximum time allowed for the rolling update, in seconds."},"rollbackMaximumBatchSize":{"$ref":"#/types/aws-native:sagemaker:EndpointCapacitySize","description":"The maximum batch size for rollback during an update failure."},"waitIntervalInSeconds":{"type":"integer","description":"The time to wait between steps during the rolling update, in seconds."}},"type":"object","required":["maximumBatchSize","waitIntervalInSeconds"]},"aws-native:sagemaker:EndpointTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:EndpointTrafficRoutingConfig":{"properties":{"canarySize":{"$ref":"#/types/aws-native:sagemaker:EndpointCapacitySize","description":"Specifies the size of the canary traffic in a canary deployment."},"linearStepSize":{"$ref":"#/types/aws-native:sagemaker:EndpointCapacitySize","description":"Specifies the step size for linear traffic routing."},"type":{"type":"string","description":"Specifies the type of traffic routing (e.g., 'AllAtOnce', 'Canary', 'Linear')."},"waitIntervalInSeconds":{"type":"integer","description":"Specifies the wait interval between traffic shifts, in seconds."}},"type":"object","required":["type"]},"aws-native:sagemaker:EndpointVariantProperty":{"properties":{"variantPropertyType":{"type":"string","description":"The type of variant property (e.g., 'DesiredInstanceCount', 'DesiredWeight', 'DataCaptureConfig')."}},"type":"object"},"aws-native:sagemaker:FeatureGroupDataCatalogConfig":{"properties":{"catalog":{"type":"string","description":"The name of the Glue table catalog."},"database":{"type":"string","description":"The name of the Glue table database."},"tableName":{"type":"string","description":"The name of the Glue table."}},"type":"object","required":["catalog","database","tableName"]},"aws-native:sagemaker:FeatureGroupFeatureDefinition":{"properties":{"featureName":{"type":"string","description":"The name of a feature. The type must be a string. `FeatureName` cannot be any of the following: `is_deleted` , `write_time` , `api_invocation_time` .\n\nThe name:\n\n- Must start with an alphanumeric character.\n- Can only include alphanumeric characters, underscores, and hyphens. Spaces are not allowed."},"featureType":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupFeatureDefinitionFeatureType","description":"The value type of a feature. Valid values are Integral, Fractional, or String."}},"type":"object","required":["featureName","featureType"]},"aws-native:sagemaker:FeatureGroupFeatureDefinitionFeatureType":{"description":"The value type of a feature. Valid values are Integral, Fractional, or String.","type":"string","enum":[{"name":"Integral","value":"Integral"},{"name":"Fractional","value":"Fractional"},{"name":"String","value":"String"}]},"aws-native:sagemaker:FeatureGroupOnlineStoreSecurityConfig":{"properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (KMS) key ARN that SageMaker Feature Store uses to encrypt the Amazon S3 objects at rest using Amazon S3 server-side encryption.\n\nThe caller (either user or IAM role) of `CreateFeatureGroup` must have below permissions to the `OnlineStore` `KmsKeyId` :\n\n- `\"kms:Encrypt\"`\n- `\"kms:Decrypt\"`\n- `\"kms:DescribeKey\"`\n- `\"kms:CreateGrant\"`\n- `\"kms:RetireGrant\"`\n- `\"kms:ReEncryptFrom\"`\n- `\"kms:ReEncryptTo\"`\n- `\"kms:GenerateDataKey\"`\n- `\"kms:ListAliases\"`\n- `\"kms:ListGrants\"`\n- `\"kms:RevokeGrant\"`\n\nThe caller (either user or IAM role) to all DataPlane operations ( `PutRecord` , `GetRecord` , `DeleteRecord` ) must have the following permissions to the `KmsKeyId` :\n\n- `\"kms:Decrypt\"`"}},"type":"object"},"aws-native:sagemaker:FeatureGroupS3StorageConfig":{"properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (KMS) key ARN of the key used to encrypt any objects written into the `OfflineStore` S3 location.\n\nThe IAM `roleARN` that is passed as a parameter to `CreateFeatureGroup` must have below permissions to the `KmsKeyId` :\n\n- `\"kms:GenerateDataKey\"`"},"s3Uri":{"type":"string","description":"The S3 URI, or location in Amazon S3, of `OfflineStore` .\n\nS3 URIs have a format similar to the following: `s3://example-bucket/prefix/` ."}},"type":"object","required":["s3Uri"]},"aws-native:sagemaker:FeatureGroupStorageType":{"type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"InMemory","value":"InMemory"}]},"aws-native:sagemaker:FeatureGroupTableFormat":{"description":"Format for the offline store feature group. Iceberg is the optimal format for feature groups shared between offline and online stores.","type":"string","enum":[{"name":"Iceberg","value":"Iceberg"},{"name":"Glue","value":"Glue"}]},"aws-native:sagemaker:FeatureGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:FeatureGroupThroughputConfig":{"properties":{"provisionedReadCapacityUnits":{"type":"integer","description":"For provisioned feature groups with online store enabled, this indicates the read throughput you are billed for and can consume without throttling."},"provisionedWriteCapacityUnits":{"type":"integer","description":"For provisioned feature groups, this indicates the write throughput you are billed for and can consume without throttling."},"throughputMode":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupThroughputMode","description":"The mode used for your feature group throughput: `ON_DEMAND` or `PROVISIONED` ."}},"type":"object","required":["throughputMode"]},"aws-native:sagemaker:FeatureGroupThroughputMode":{"description":"Throughput mode configuration of the feature group","type":"string","enum":[{"name":"OnDemand","value":"OnDemand"},{"name":"Provisioned","value":"Provisioned"}]},"aws-native:sagemaker:FeatureGroupTtlDuration":{"description":"TTL configuration of the feature group","properties":{"unit":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupUnit","description":"`TtlDuration` time unit."},"value":{"type":"integer","description":"`TtlDuration` time value."}},"type":"object"},"aws-native:sagemaker:FeatureGroupUnit":{"description":"Unit of ttl configuration","type":"string","enum":[{"name":"Seconds","value":"Seconds"},{"name":"Minutes","value":"Minutes"},{"name":"Hours","value":"Hours"},{"name":"Days","value":"Days"},{"name":"Weeks","value":"Weeks"}]},"aws-native:sagemaker:ImageTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ImageVersionJobType":{"description":"Indicates SageMaker job type compatibility.","type":"string","enum":[{"name":"Training","value":"TRAINING"},{"name":"Inference","value":"INFERENCE"},{"name":"NotebookKernel","value":"NOTEBOOK_KERNEL"}]},"aws-native:sagemaker:ImageVersionProcessor":{"description":"Indicates CPU or GPU compatibility.","type":"string","enum":[{"name":"Cpu","value":"CPU"},{"name":"Gpu","value":"GPU"}]},"aws-native:sagemaker:ImageVersionVendorGuidance":{"description":"The availability of the image version specified by the maintainer.","type":"string","enum":[{"name":"NotProvided","value":"NOT_PROVIDED"},{"name":"Stable","value":"STABLE"},{"name":"ToBeArchived","value":"TO_BE_ARCHIVED"},{"name":"Archived","value":"ARCHIVED"}]},"aws-native:sagemaker:InferenceComponentAlarm":{"properties":{"alarmName":{"type":"string","description":"The name of a CloudWatch alarm in your account."}},"type":"object","required":["alarmName"]},"aws-native:sagemaker:InferenceComponentAutoRollbackConfiguration":{"properties":{"alarms":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentAlarm"}}},"type":"object","required":["alarms"]},"aws-native:sagemaker:InferenceComponentCapacitySize":{"description":"Capacity size configuration for the inference component","properties":{"type":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentCapacitySizeType","description":"Specifies the endpoint capacity type.\n\n- **COPY_COUNT** - The endpoint activates based on the number of inference component copies.\n- **CAPACITY_PERCENT** - The endpoint activates based on the specified percentage of capacity."},"value":{"type":"integer","description":"Defines the capacity size, either as a number of inference component copies or a capacity percentage."}},"type":"object","required":["type","value"]},"aws-native:sagemaker:InferenceComponentCapacitySizeType":{"type":"string","enum":[{"name":"CopyCount","value":"COPY_COUNT"},{"name":"CapacityPercent","value":"CAPACITY_PERCENT"}]},"aws-native:sagemaker:InferenceComponentComputeResourceRequirements":{"properties":{"maxMemoryRequiredInMb":{"type":"integer","description":"The maximum MB of memory to allocate to run a model that you assign to an inference component."},"minMemoryRequiredInMb":{"type":"integer","description":"The minimum MB of memory to allocate to run a model that you assign to an inference component."},"numberOfAcceleratorDevicesRequired":{"type":"number","description":"The number of accelerators to allocate to run a model that you assign to an inference component. Accelerators include GPUs and AWS Inferentia."},"numberOfCpuCoresRequired":{"type":"number","description":"The number of CPU cores to allocate to run a model that you assign to an inference component."}},"type":"object"},"aws-native:sagemaker:InferenceComponentContainerSpecification":{"properties":{"artifactUrl":{"type":"string","description":"The Amazon S3 path where the model artifacts, which result from model training, are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix)."},"deployedImage":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentDeployedImage"},"environment":{"type":"object","additionalProperties":{"type":"string"},"description":"The environment variables to set in the Docker container. Each key and value in the Environment string-to-string map can have length of up to 1024. We support up to 16 entries in the map."},"image":{"type":"string","description":"The Amazon Elastic Container Registry (Amazon ECR) path where the Docker image for the model is stored."}},"type":"object"},"aws-native:sagemaker:InferenceComponentDeployedImage":{"properties":{"resolutionTime":{"type":"string","description":"The date and time when the image path for the model resolved to the `ResolvedImage`"},"resolvedImage":{"type":"string","description":"The specific digest path of the image hosted in this `ProductionVariant` ."},"specifiedImage":{"type":"string","description":"The image path you specified when you created the model."}},"type":"object"},"aws-native:sagemaker:InferenceComponentDeploymentConfig":{"description":"The deployment config for the inference component","properties":{"autoRollbackConfiguration":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentAutoRollbackConfiguration"},"rollingUpdatePolicy":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentRollingUpdatePolicy","description":"Specifies a rolling deployment strategy for updating a SageMaker AI endpoint."}},"type":"object"},"aws-native:sagemaker:InferenceComponentRollingUpdatePolicy":{"description":"The rolling update policy for the inference component","properties":{"maximumBatchSize":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentCapacitySize","description":"The batch size for each rolling step in the deployment process. For each step, SageMaker AI provisions capacity on the new endpoint fleet, routes traffic to that fleet, and terminates capacity on the old endpoint fleet. The value must be between 5% to 50% of the copy count of the inference component."},"maximumExecutionTimeoutInSeconds":{"type":"integer","description":"The time limit for the total deployment. Exceeding this limit causes a timeout."},"rollbackMaximumBatchSize":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentCapacitySize","description":"The batch size for a rollback to the old endpoint fleet. If this field is absent, the value is set to the default, which is 100% of the total capacity. When the default is used, SageMaker AI provisions the entire capacity of the old fleet at once during rollback."},"waitIntervalInSeconds":{"type":"integer","description":"The length of the baking period, during which SageMaker AI monitors alarms for each batch on the new fleet."}},"type":"object"},"aws-native:sagemaker:InferenceComponentRuntimeConfig":{"description":"The runtime config for the inference component","properties":{"copyCount":{"type":"integer","description":"The number of runtime copies of the model container to deploy with the inference component. Each copy can serve inference requests."},"currentCopyCount":{"type":"integer"},"desiredCopyCount":{"type":"integer"}},"type":"object"},"aws-native:sagemaker:InferenceComponentSpecification":{"description":"The specification for the inference component","properties":{"baseInferenceComponentName":{"type":"string","description":"The name of an existing inference component that is to contain the inference component that you're creating with your request.\n\nSpecify this parameter only if your request is meant to create an adapter inference component. An adapter inference component contains the path to an adapter model. The purpose of the adapter model is to tailor the inference output of a base foundation model, which is hosted by the base inference component. The adapter inference component uses the compute resources that you assigned to the base inference component.\n\nWhen you create an adapter inference component, use the `Container` parameter to specify the location of the adapter artifacts. In the parameter value, use the `ArtifactUrl` parameter of the `InferenceComponentContainerSpecification` data type.\n\nBefore you can create an adapter inference component, you must have an existing inference component that contains the foundation model that you want to adapt."},"computeResourceRequirements":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentComputeResourceRequirements","description":"The compute resources allocated to run the model, plus any adapter models, that you assign to the inference component.\n\nOmit this parameter if your request is meant to create an adapter inference component. An adapter inference component is loaded by a base inference component, and it uses the compute resources of the base inference component."},"container":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentContainerSpecification","description":"Defines a container that provides the runtime environment for a model that you deploy with an inference component."},"modelName":{"type":"string","description":"The name of an existing SageMaker AI model object in your account that you want to deploy with the inference component."},"startupParameters":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentStartupParameters","description":"Settings that take effect while the model container starts up."}},"type":"object"},"aws-native:sagemaker:InferenceComponentStartupParameters":{"properties":{"containerStartupHealthCheckTimeoutInSeconds":{"type":"integer","description":"The timeout value, in seconds, for your inference container to pass health check by Amazon S3 Hosting. For more information about health check, see [How Your Container Should Respond to Health Check (Ping) Requests](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests) ."},"modelDataDownloadTimeoutInSeconds":{"type":"integer","description":"The timeout value, in seconds, to download and extract the model that you want to host from Amazon S3 to the individual inference instance associated with this inference component."}},"type":"object"},"aws-native:sagemaker:InferenceComponentStatus":{"type":"string","enum":[{"name":"InService","value":"InService"},{"name":"Creating","value":"Creating"},{"name":"Updating","value":"Updating"},{"name":"Failed","value":"Failed"},{"name":"Deleting","value":"Deleting"}]},"aws-native:sagemaker:InferenceComponentTag":{"description":"A tag in the form of a key-value pair to associate with the resource","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"}},"type":"object","required":["key","value"]},"aws-native:sagemaker:InferenceExperimentCaptureContentTypeHeader":{"description":"Configuration specifying how to treat different headers. If no headers are specified SageMaker will by default base64 encode when capturing the data.","properties":{"csvContentTypes":{"type":"array","items":{"type":"string"},"description":"The list of all content type headers that SageMaker will treat as CSV and capture accordingly."},"jsonContentTypes":{"type":"array","items":{"type":"string"},"description":"The list of all content type headers that SageMaker will treat as JSON and capture accordingly."}},"type":"object"},"aws-native:sagemaker:InferenceExperimentDataStorageConfig":{"description":"The Amazon S3 location and configuration for storing inference request and response data.","properties":{"contentType":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentCaptureContentTypeHeader","description":"Configuration specifying how to treat different headers. If no headers are specified SageMaker will by default base64 encode when capturing the data."},"destination":{"type":"string","description":"The Amazon S3 bucket where the inference request and response data is stored."},"kmsKey":{"type":"string","description":"The AWS Key Management Service key that Amazon SageMaker uses to encrypt captured data at rest using Amazon S3 server-side encryption."}},"type":"object","required":["destination"]},"aws-native:sagemaker:InferenceExperimentDesiredState":{"description":"The desired state of the experiment after starting or stopping operation.","type":"string","enum":[{"name":"Running","value":"Running"},{"name":"Completed","value":"Completed"},{"name":"Cancelled","value":"Cancelled"}]},"aws-native:sagemaker:InferenceExperimentEndpointMetadata":{"description":"The metadata of the endpoint on which the inference experiment ran.","properties":{"endpointConfigName":{"type":"string","description":"The name of the endpoint configuration."},"endpointName":{"type":"string","description":"The name of the endpoint."},"endpointStatus":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentEndpointMetadataEndpointStatus","description":"The status of the endpoint. For possible values of the status of an endpoint."}},"type":"object","required":["endpointName"]},"aws-native:sagemaker:InferenceExperimentEndpointMetadataEndpointStatus":{"description":"The status of the endpoint. For possible values of the status of an endpoint.","type":"string","enum":[{"name":"Creating","value":"Creating"},{"name":"Updating","value":"Updating"},{"name":"SystemUpdating","value":"SystemUpdating"},{"name":"RollingBack","value":"RollingBack"},{"name":"InService","value":"InService"},{"name":"OutOfService","value":"OutOfService"},{"name":"Deleting","value":"Deleting"},{"name":"Failed","value":"Failed"}]},"aws-native:sagemaker:InferenceExperimentModelInfrastructureConfig":{"description":"The configuration for the infrastructure that the model will be deployed to.","properties":{"infrastructureType":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentModelInfrastructureConfigInfrastructureType","description":"The type of the inference experiment that you want to run."},"realTimeInferenceConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentRealTimeInferenceConfig","description":"The infrastructure configuration for deploying the model to real-time inference."}},"type":"object","required":["infrastructureType","realTimeInferenceConfig"]},"aws-native:sagemaker:InferenceExperimentModelInfrastructureConfigInfrastructureType":{"description":"The type of the inference experiment that you want to run.","type":"string","enum":[{"name":"RealTimeInference","value":"RealTimeInference"}]},"aws-native:sagemaker:InferenceExperimentModelVariantConfig":{"description":"Contains information about the deployment options of a model.","properties":{"infrastructureConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentModelInfrastructureConfig","description":"The configuration for the infrastructure that the model will be deployed to."},"modelName":{"type":"string","description":"The name of the Amazon SageMaker Model entity."},"variantName":{"type":"string","description":"The name of the variant."}},"type":"object","required":["infrastructureConfig","modelName","variantName"]},"aws-native:sagemaker:InferenceExperimentRealTimeInferenceConfig":{"description":"The infrastructure configuration for deploying the model to a real-time inference endpoint.","properties":{"instanceCount":{"type":"integer","description":"The number of instances of the type specified by InstanceType."},"instanceType":{"type":"string","description":"The instance type the model is deployed to."}},"type":"object","required":["instanceCount","instanceType"]},"aws-native:sagemaker:InferenceExperimentSchedule":{"description":"The duration for which you want the inference experiment to run.","properties":{"endTime":{"type":"string","description":"The timestamp at which the inference experiment ended or will end."},"startTime":{"type":"string","description":"The timestamp at which the inference experiment started or will start."}},"type":"object"},"aws-native:sagemaker:InferenceExperimentShadowModeConfig":{"description":"The configuration of ShadowMode inference experiment type. Use this field to specify a production variant which takes all the inference requests, and a shadow variant to which Amazon SageMaker replicates a percentage of the inference requests. For the shadow variant also specify the percentage of requests that Amazon SageMaker replicates.","properties":{"shadowModelVariants":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentShadowModelVariantConfig"},"description":"List of shadow variant configurations."},"sourceModelVariantName":{"type":"string","description":"The name of the production variant, which takes all the inference requests."}},"type":"object","required":["shadowModelVariants","sourceModelVariantName"]},"aws-native:sagemaker:InferenceExperimentShadowModelVariantConfig":{"description":"The name and sampling percentage of a shadow variant.","properties":{"samplingPercentage":{"type":"integer","description":"The percentage of inference requests that Amazon SageMaker replicates from the production variant to the shadow variant."},"shadowModelVariantName":{"type":"string","description":"The name of the shadow variant."}},"type":"object","required":["samplingPercentage","shadowModelVariantName"]},"aws-native:sagemaker:InferenceExperimentStatus":{"description":"The status of the inference experiment.","type":"string","enum":[{"name":"Creating","value":"Creating"},{"name":"Created","value":"Created"},{"name":"Updating","value":"Updating"},{"name":"Starting","value":"Starting"},{"name":"Stopping","value":"Stopping"},{"name":"Running","value":"Running"},{"name":"Completed","value":"Completed"},{"name":"Cancelled","value":"Cancelled"}]},"aws-native:sagemaker:InferenceExperimentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:InferenceExperimentType":{"description":"The type of the inference experiment that you want to run.","type":"string","enum":[{"name":"ShadowMode","value":"ShadowMode"}]},"aws-native:sagemaker:MlflowTrackingServerTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:MlflowTrackingServerTrackingServerSize":{"description":"The size of the MLFlow Tracking Server.","type":"string","enum":[{"name":"Small","value":"Small"},{"name":"Medium","value":"Medium"},{"name":"Large","value":"Large"}]},"aws-native:sagemaker:ModelBiasJobDefinitionBatchTransformInput":{"description":"The batch transform input for a monitoring job.","properties":{"dataCapturedDestinationS3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Batch Transform Job captures data."},"datasetFormat":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionDatasetFormat","description":"The dataset format for your batch transform job."},"endTimeOffset":{"type":"string","description":"Monitoring end time offset, e.g. PT0H"},"featuresAttribute":{"type":"string","description":"JSONpath to locate features in JSONlines dataset"},"inferenceAttribute":{"type":"string","description":"Index or JSONpath to locate predicted label(s)"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"probabilityAttribute":{"type":"string","description":"Index or JSONpath to locate probabilities"},"probabilityThresholdAttribute":{"type":"number","description":"The threshold for the class probability to be evaluated as a positive result."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionBatchTransformInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionBatchTransformInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."},"startTimeOffset":{"type":"string","description":"Monitoring start time offset, e.g. -PT1H"}},"type":"object","required":["dataCapturedDestinationS3Uri","datasetFormat","localPath"]},"aws-native:sagemaker:ModelBiasJobDefinitionBatchTransformInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ModelBiasJobDefinitionBatchTransformInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:ModelBiasJobDefinitionClusterConfig":{"description":"Configuration for the cluster used to run model monitoring jobs.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the model monitoring job. For distributed processing jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"type":"string","description":"The ML compute instance type for the processing job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job."},"volumeSizeInGb":{"type":"integer","description":"The size of the ML storage volume, in gigabytes, that you want to provision. You must specify sufficient ML storage for your scenario."}},"type":"object","required":["instanceCount","instanceType","volumeSizeInGb"]},"aws-native:sagemaker:ModelBiasJobDefinitionConstraintsResource":{"description":"The baseline constraints resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for baseline constraint file in Amazon S3 that the current monitoring job should validated against."}},"type":"object"},"aws-native:sagemaker:ModelBiasJobDefinitionCsv":{"description":"The CSV format","properties":{"header":{"type":"boolean","description":"A boolean flag indicating if given CSV has header"}},"type":"object"},"aws-native:sagemaker:ModelBiasJobDefinitionDatasetFormat":{"description":"The dataset format of the data to monitor","properties":{"csv":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionCsv"},"json":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionJson"},"parquet":{"type":"boolean"}},"type":"object"},"aws-native:sagemaker:ModelBiasJobDefinitionEndpointInput":{"description":"The endpoint for a monitoring job.","properties":{"endTimeOffset":{"type":"string","description":"Monitoring end time offset, e.g. PT0H"},"endpointName":{"type":"string","description":"An endpoint in customer's account which has enabled `DataCaptureConfig` enabled."},"featuresAttribute":{"type":"string","description":"JSONpath to locate features in JSONlines dataset"},"inferenceAttribute":{"type":"string","description":"Index or JSONpath to locate predicted label(s)"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"probabilityAttribute":{"type":"string","description":"Index or JSONpath to locate probabilities"},"probabilityThresholdAttribute":{"type":"number","description":"The threshold for the class probability to be evaluated as a positive result."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionEndpointInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionEndpointInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."},"startTimeOffset":{"type":"string","description":"Monitoring start time offset, e.g. -PT1H"}},"type":"object","required":["endpointName","localPath"]},"aws-native:sagemaker:ModelBiasJobDefinitionEndpointInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ModelBiasJobDefinitionEndpointInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:ModelBiasJobDefinitionJson":{"description":"The Json format","properties":{"line":{"type":"boolean","description":"A boolean flag indicating if it is JSON line format"}},"type":"object"},"aws-native:sagemaker:ModelBiasJobDefinitionModelBiasAppSpecification":{"description":"Container image configuration object for the monitoring job.","properties":{"configUri":{"type":"string","description":"The S3 URI to an analysis configuration file"},"environment":{"$ref":"pulumi.json#/Any","description":"Sets the environment variables in the Docker container"},"imageUri":{"type":"string","description":"The container image to be run by the monitoring job."}},"type":"object","required":["configUri","imageUri"]},"aws-native:sagemaker:ModelBiasJobDefinitionModelBiasBaselineConfig":{"description":"Baseline configuration used to validate that the data conforms to the specified constraints and statistics.","properties":{"baseliningJobName":{"type":"string","description":"The name of the baseline model bias job."},"constraintsResource":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionConstraintsResource","description":"The constraints resource for a monitoring job."}},"type":"object"},"aws-native:sagemaker:ModelBiasJobDefinitionModelBiasJobInput":{"description":"The inputs for a monitoring job.","properties":{"batchTransformInput":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionBatchTransformInput","description":"Input object for the batch transform job."},"endpointInput":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionEndpointInput","description":"Input object for the endpoint"},"groundTruthS3Input":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionMonitoringGroundTruthS3Input","description":"Location of ground truth labels to use in model bias job."}},"type":"object","required":["groundTruthS3Input"]},"aws-native:sagemaker:ModelBiasJobDefinitionMonitoringGroundTruthS3Input":{"description":"Ground truth input provided in S3 ","properties":{"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["s3Uri"]},"aws-native:sagemaker:ModelBiasJobDefinitionMonitoringOutput":{"description":"The output object for a monitoring job.","properties":{"s3Output":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionS3Output","description":"The Amazon S3 storage location where the results of a monitoring job are saved."}},"type":"object","required":["s3Output"]},"aws-native:sagemaker:ModelBiasJobDefinitionMonitoringOutputConfig":{"description":"The output configuration for monitoring jobs.","properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption."},"monitoringOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionMonitoringOutput"},"description":"Monitoring outputs for monitoring jobs. This is where the output of the periodic monitoring jobs is uploaded."}},"type":"object","required":["monitoringOutputs"]},"aws-native:sagemaker:ModelBiasJobDefinitionMonitoringResources":{"description":"Identifies the resources to deploy for a monitoring job.","properties":{"clusterConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionClusterConfig","description":"The configuration for the cluster resources used to run the processing job."}},"type":"object","required":["clusterConfig"]},"aws-native:sagemaker:ModelBiasJobDefinitionNetworkConfig":{"description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","properties":{"enableInterContainerTrafficEncryption":{"type":"boolean","description":"Whether to encrypt all communications between distributed processing jobs. Choose True to encrypt communications. Encryption provides greater security for distributed processing jobs, but the processing might take longer."},"enableNetworkIsolation":{"type":"boolean","description":"Whether to allow inbound and outbound network calls to and from the containers used for the processing job."},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionVpcConfig","description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC."}},"type":"object"},"aws-native:sagemaker:ModelBiasJobDefinitionS3Output":{"description":"Information about where and how to store the results of a monitoring job.","properties":{"localPath":{"type":"string","description":"The local path to the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job. LocalPath is an absolute path for the output data."},"s3UploadMode":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionS3OutputS3UploadMode","description":"Whether to upload the results of the monitoring job continuously or after the job completes."},"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["localPath","s3Uri"]},"aws-native:sagemaker:ModelBiasJobDefinitionS3OutputS3UploadMode":{"description":"Whether to upload the results of the monitoring job continuously or after the job completes.","type":"string","enum":[{"name":"Continuous","value":"Continuous"},{"name":"EndOfJob","value":"EndOfJob"}]},"aws-native:sagemaker:ModelBiasJobDefinitionStoppingCondition":{"description":"Specifies a time limit for how long the monitoring job is allowed to run.","properties":{"maxRuntimeInSeconds":{"type":"integer","description":"The maximum runtime allowed in seconds."}},"type":"object","required":["maxRuntimeInSeconds"]},"aws-native:sagemaker:ModelBiasJobDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ModelBiasJobDefinitionVpcConfig":{"description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the Subnets field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect to your monitoring jobs."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:ModelCardAdditionalInformation":{"properties":{"caveatsAndRecommendations":{"type":"string","description":"Caveats and recommendations for people who might use this model in their applications."},"customDetails":{"type":"object","additionalProperties":{"type":"string"},"description":"customer details."},"ethicalConsiderations":{"type":"string","description":"Any ethical considerations that the author wants to provide."}},"type":"object"},"aws-native:sagemaker:ModelCardBarChartMetric":{"properties":{"name":{"type":"string"},"notes":{"type":"string"},"type":{"$ref":"#/types/aws-native:sagemaker:ModelCardBarChartMetricType"},"value":{"type":"array","items":{"type":"number"}},"xAxisName":{"type":"array","items":{"type":"string"}},"yAxisName":{"type":"string"}},"type":"object","required":["name","type","value"]},"aws-native:sagemaker:ModelCardBarChartMetricType":{"type":"string","enum":[{"name":"BarChart","value":"bar_chart"}]},"aws-native:sagemaker:ModelCardBusinessDetails":{"description":"Business details.","properties":{"businessProblem":{"type":"string","description":"What business problem does the model solve?"},"businessStakeholders":{"type":"string","description":"Business stakeholders."},"lineOfBusiness":{"type":"string","description":"Line of business."}},"type":"object"},"aws-native:sagemaker:ModelCardContainer":{"properties":{"image":{"type":"string","description":"Inference environment path. The Amazon EC2 Container Registry (Amazon ECR) path where inference code is stored."},"modelDataUrl":{"type":"string","description":"The Amazon S3 path where the model artifacts, which result from model training, are stored."},"nearestModelName":{"type":"string","description":"The name of a pre-trained machine learning benchmarked by Amazon SageMaker Inference Recommender model that matches your model."}},"type":"object","required":["image"]},"aws-native:sagemaker:ModelCardContent":{"description":"The content of the model card.","properties":{"additionalInformation":{"$ref":"#/types/aws-native:sagemaker:ModelCardAdditionalInformation","description":"Additional information about the model."},"businessDetails":{"$ref":"#/types/aws-native:sagemaker:ModelCardBusinessDetails","description":"Information about how the model supports business goals."},"evaluationDetails":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardEvaluationDetail"},"description":"An overview about the model's evaluation."},"intendedUses":{"$ref":"#/types/aws-native:sagemaker:ModelCardIntendedUses","description":"The intended usage of the model."},"modelOverview":{"$ref":"#/types/aws-native:sagemaker:ModelCardModelOverview","description":"An overview about the model"},"modelPackageDetails":{"$ref":"#/types/aws-native:sagemaker:ModelCardModelPackageDetails"},"trainingDetails":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingDetails","description":"An overview about model training."}},"type":"object"},"aws-native:sagemaker:ModelCardEvaluationDetail":{"description":"item of evaluation details","properties":{"datasets":{"type":"array","items":{"type":"string"}},"evaluationJobArn":{"type":"string"},"evaluationObservation":{"type":"string"},"metadata":{"type":"object","additionalProperties":{"type":"string"},"description":"additional attributes associated with the evaluation results."},"metricGroups":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardMetricGroup"}},"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:sagemaker:ModelCardInferenceSpecification":{"properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardContainer"},"description":"Contains inference related information which were used to create model package."}},"type":"object","required":["containers"]},"aws-native:sagemaker:ModelCardIntendedUses":{"description":"Intended usage of model.","properties":{"explanationsForRiskRating":{"type":"string","description":"An explanation of why your organization categorizes the model with its risk rating."},"factorsAffectingModelEfficiency":{"type":"string","description":"Factors affecting model efficacy."},"intendedUses":{"type":"string","description":"intended use cases."},"purposeOfModel":{"type":"string","description":"Why the model was developed?"},"riskRating":{"$ref":"#/types/aws-native:sagemaker:ModelCardRiskRating","description":"Your organization's risk rating. You can specify one the following values as the risk rating:\n\n- High\n- Medium\n- Low\n- Unknown"}},"type":"object"},"aws-native:sagemaker:ModelCardLinearGraphMetric":{"description":"Linear graph metric.","properties":{"name":{"type":"string"},"notes":{"type":"string"},"type":{"$ref":"#/types/aws-native:sagemaker:ModelCardLinearGraphMetricType"},"value":{"type":"array","items":{"type":"array","items":{"type":"number"}}},"xAxisName":{"type":"string"},"yAxisName":{"type":"string"}},"type":"object","required":["name","type","value"]},"aws-native:sagemaker:ModelCardLinearGraphMetricType":{"type":"string","enum":[{"name":"LinearGraph","value":"linear_graph"}]},"aws-native:sagemaker:ModelCardMatrixMetric":{"properties":{"name":{"type":"string"},"notes":{"type":"string"},"type":{"$ref":"#/types/aws-native:sagemaker:ModelCardMatrixMetricType"},"value":{"type":"array","items":{"type":"array","items":{"type":"number"}}},"xAxisName":{"type":"array","items":{"type":"string"}},"yAxisName":{"type":"array","items":{"type":"string"}}},"type":"object","required":["name","type","value"]},"aws-native:sagemaker:ModelCardMatrixMetricType":{"type":"string","enum":[{"name":"Matrix","value":"matrix"}]},"aws-native:sagemaker:ModelCardMetricGroup":{"description":"item in metric groups","properties":{"metricData":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:sagemaker:ModelCardSimpleMetric"},{"$ref":"#/types/aws-native:sagemaker:ModelCardLinearGraphMetric"},{"$ref":"#/types/aws-native:sagemaker:ModelCardBarChartMetric"},{"$ref":"#/types/aws-native:sagemaker:ModelCardMatrixMetric"}]}},"name":{"type":"string"}},"type":"object","required":["metricData","name"]},"aws-native:sagemaker:ModelCardModelOverview":{"description":"Overview about the model.","properties":{"algorithmType":{"type":"string","description":"Algorithm used to solve the problem."},"inferenceEnvironment":{"$ref":"#/types/aws-native:sagemaker:ModelCardModelOverviewInferenceEnvironmentProperties","description":"Overview about the inference."},"modelArtifact":{"type":"array","items":{"type":"string"},"description":"Location of the model artifact."},"modelCreator":{"type":"string","description":"Creator of model."},"modelDescription":{"type":"string","description":"description of model."},"modelId":{"type":"string","description":"SageMaker Model Arn or Non SageMaker Model id."},"modelName":{"type":"string","description":"Name of the model."},"modelOwner":{"type":"string","description":"Owner of model."},"modelVersion":{"type":"number","description":"Version of the model."},"problemType":{"type":"string","description":"Problem being solved with the model."}},"type":"object"},"aws-native:sagemaker:ModelCardModelOverviewInferenceEnvironmentProperties":{"description":"Overview about the inference.","properties":{"containerImage":{"type":"array","items":{"type":"string"},"description":"SageMaker inference image uri."}},"type":"object"},"aws-native:sagemaker:ModelCardModelPackageCreator":{"properties":{"userProfileName":{"type":"string","description":"The name of the user's profile in Studio"}},"type":"object"},"aws-native:sagemaker:ModelCardModelPackageDetails":{"description":"Metadata information related to model package version","properties":{"approvalDescription":{"type":"string","description":"A description provided for the model approval"},"createdBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardModelPackageCreator","description":"Information about the user who created model package."},"domain":{"type":"string","description":"The machine learning domain of the model package you specified. Common machine learning domains include computer vision and natural language processing."},"inferenceSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelCardInferenceSpecification","description":"Details about inference jobs that can be run with models based on this model package."},"modelApprovalStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardModelPackageDetailsModelApprovalStatus","description":"Current approval status of model package"},"modelPackageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the model package"},"modelPackageDescription":{"type":"string","description":"A brief summary of the model package"},"modelPackageGroupName":{"type":"string","description":"If the model is a versioned model, the name of the model group that the versioned model belongs to."},"modelPackageName":{"type":"string","description":"Name of the model package"},"modelPackageStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardModelPackageDetailsModelPackageStatus","description":"Current status of model package"},"modelPackageVersion":{"type":"number","description":"Version of the model package"},"sourceAlgorithms":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardSourceAlgorithm"},"description":"A list of algorithms that were used to create a model package."},"task":{"type":"string","description":"The machine learning task you specified that your model package accomplishes. Common machine learning tasks include object detection and image classification."}},"type":"object"},"aws-native:sagemaker:ModelCardModelPackageDetailsModelApprovalStatus":{"description":"Current approval status of model package","type":"string","enum":[{"name":"Approved","value":"Approved"},{"name":"Rejected","value":"Rejected"},{"name":"PendingManualApproval","value":"PendingManualApproval"}]},"aws-native:sagemaker:ModelCardModelPackageDetailsModelPackageStatus":{"description":"Current status of model package","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"InProgress","value":"InProgress"},{"name":"Completed","value":"Completed"},{"name":"Failed","value":"Failed"},{"name":"Deleting","value":"Deleting"}]},"aws-native:sagemaker:ModelCardObjectiveFunction":{"description":"the objective function the model will optimize for.","properties":{"function":{"$ref":"#/types/aws-native:sagemaker:ModelCardObjectiveFunctionFunctionProperties","description":"objective function that training job is optimized for."},"notes":{"type":"string","description":"Notes about the object function, including other considerations for possible objective functions."}},"type":"object"},"aws-native:sagemaker:ModelCardObjectiveFunctionFunctionProperties":{"description":"objective function that training job is optimized for.","properties":{"condition":{"type":"string"},"facet":{"type":"string"},"function":{"$ref":"#/types/aws-native:sagemaker:ModelCardObjectiveFunctionFunctionPropertiesFunction"}},"type":"object"},"aws-native:sagemaker:ModelCardObjectiveFunctionFunctionPropertiesFunction":{"type":"string","enum":[{"name":"Maximize","value":"Maximize"},{"name":"Minimize","value":"Minimize"}]},"aws-native:sagemaker:ModelCardProcessingStatus":{"description":"The processing status of model card deletion. The ModelCardProcessingStatus updates throughout the different deletion steps.","type":"string","enum":[{"name":"UnsetValue","value":"UnsetValue"},{"name":"DeleteInProgress","value":"DeleteInProgress"},{"name":"DeletePending","value":"DeletePending"},{"name":"ContentDeleted","value":"ContentDeleted"},{"name":"ExportJobsDeleted","value":"ExportJobsDeleted"},{"name":"DeleteCompleted","value":"DeleteCompleted"},{"name":"DeleteFailed","value":"DeleteFailed"}]},"aws-native:sagemaker:ModelCardRiskRating":{"description":"Risk rating of model.","type":"string","enum":[{"name":"High","value":"High"},{"name":"Medium","value":"Medium"},{"name":"Low","value":"Low"},{"name":"Unknown","value":"Unknown"}]},"aws-native:sagemaker:ModelCardSecurityConfig":{"description":"An optional Key Management Service key to encrypt, decrypt, and re-encrypt model card content for regulated workloads with highly sensitive data.\n\n","properties":{"kmsKeyId":{"type":"string","description":"A Key Management Service key ID to use for encrypting a model card."}},"type":"object"},"aws-native:sagemaker:ModelCardSimpleMetric":{"description":"metric data","properties":{"name":{"type":"string"},"notes":{"type":"string"},"type":{"$ref":"#/types/aws-native:sagemaker:ModelCardSimpleMetricType"},"value":{"oneOf":[{"type":"number"},{"type":"string"},{"type":"boolean"}]},"xAxisName":{"type":"string"},"yAxisName":{"type":"string"}},"type":"object","required":["name","type","value"]},"aws-native:sagemaker:ModelCardSimpleMetricType":{"type":"string","enum":[{"name":"Number","value":"number"},{"name":"String","value":"string"},{"name":"Boolean","value":"boolean"}]},"aws-native:sagemaker:ModelCardSourceAlgorithm":{"properties":{"algorithmName":{"type":"string","description":"The name of an algorithm that was used to create the model package. The algorithm must be either an algorithm resource in your SageMaker account or an algorithm in AWS Marketplace that you are subscribed to."},"modelDataUrl":{"type":"string","description":"The Amazon S3 path where the model artifacts, which result from model training, are stored."}},"type":"object","required":["algorithmName"]},"aws-native:sagemaker:ModelCardStatus":{"description":"The approval status of the model card within your organization. Different organizations might have different criteria for model card review and approval.","type":"string","enum":[{"name":"Draft","value":"Draft"},{"name":"PendingReview","value":"PendingReview"},{"name":"Approved","value":"Approved"},{"name":"Archived","value":"Archived"}]},"aws-native:sagemaker:ModelCardTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ModelCardTrainingDetails":{"description":"Overview about the training.","properties":{"objectiveFunction":{"$ref":"#/types/aws-native:sagemaker:ModelCardObjectiveFunction","description":"The function that is optimized during model training."},"trainingJobDetails":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingDetailsTrainingJobDetailsProperties","description":"Details about any associated training jobs."},"trainingObservations":{"type":"string","description":"Any observations about training."}},"type":"object"},"aws-native:sagemaker:ModelCardTrainingDetailsTrainingJobDetailsProperties":{"description":"Details about any associated training jobs.","properties":{"hyperParameters":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingHyperParameter"}},"trainingArn":{"type":"string","description":"SageMaker Training job arn."},"trainingDatasets":{"type":"array","items":{"type":"string"},"description":"Location of the model datasets."},"trainingEnvironment":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingDetailsTrainingJobDetailsPropertiesTrainingEnvironmentProperties"},"trainingMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingMetric"}},"userProvidedHyperParameters":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingHyperParameter"}},"userProvidedTrainingMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelCardTrainingMetric"}}},"type":"object"},"aws-native:sagemaker:ModelCardTrainingDetailsTrainingJobDetailsPropertiesTrainingEnvironmentProperties":{"properties":{"containerImage":{"type":"array","items":{"type":"string"},"description":"SageMaker training image uri."}},"type":"object"},"aws-native:sagemaker:ModelCardTrainingHyperParameter":{"description":"training hyper parameter","properties":{"name":{"type":"string","description":"The name of the hyper parameter."},"value":{"type":"string","description":"The value specified for the hyper parameter."}},"type":"object","required":["name","value"]},"aws-native:sagemaker:ModelCardTrainingMetric":{"description":"training metric data.","properties":{"name":{"type":"string","description":"The name of the result from the SageMaker AI training job."},"notes":{"type":"string","description":"Any additional notes describing the result of the training job."},"value":{"type":"number","description":"The value of a result from the SageMaker AI training job."}},"type":"object","required":["name","value"]},"aws-native:sagemaker:ModelCardUserContext":{"description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card.","properties":{"domainId":{"type":"string","description":"The domain associated with the user."},"userProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the user's profile."},"userProfileName":{"type":"string","description":"The name of the user's profile."}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionBatchTransformInput":{"description":"The batch transform input for a monitoring job.","properties":{"dataCapturedDestinationS3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Batch Transform Job captures data."},"datasetFormat":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionDatasetFormat","description":"The dataset format for your batch transform job."},"featuresAttribute":{"type":"string","description":"JSONpath to locate features in JSONlines dataset"},"inferenceAttribute":{"type":"string","description":"Index or JSONpath to locate predicted label(s)"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"probabilityAttribute":{"type":"string","description":"Index or JSONpath to locate probabilities"},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionBatchTransformInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionBatchTransformInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."}},"type":"object","required":["dataCapturedDestinationS3Uri","datasetFormat","localPath"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionBatchTransformInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionBatchTransformInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionClusterConfig":{"description":"Configuration for the cluster used to run model monitoring jobs.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the model monitoring job. For distributed processing jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"type":"string","description":"The ML compute instance type for the processing job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job."},"volumeSizeInGb":{"type":"integer","description":"The size of the ML storage volume, in gigabytes, that you want to provision. You must specify sufficient ML storage for your scenario."}},"type":"object","required":["instanceCount","instanceType","volumeSizeInGb"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionConstraintsResource":{"description":"The baseline constraints resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for baseline constraint file in Amazon S3 that the current monitoring job should validated against."}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionCsv":{"description":"The CSV format","properties":{"header":{"type":"boolean","description":"A boolean flag indicating if given CSV has header"}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionDatasetFormat":{"description":"The dataset format of the data to monitor","properties":{"csv":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionCsv"},"json":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionJson"},"parquet":{"type":"boolean"}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionEndpointInput":{"description":"The endpoint for a monitoring job.","properties":{"endpointName":{"type":"string","description":"An endpoint in customer's account which has enabled `DataCaptureConfig` enabled."},"featuresAttribute":{"type":"string","description":"JSONpath to locate features in JSONlines dataset"},"inferenceAttribute":{"type":"string","description":"Index or JSONpath to locate predicted label(s)"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"probabilityAttribute":{"type":"string","description":"Index or JSONpath to locate probabilities"},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionEndpointInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionEndpointInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."}},"type":"object","required":["endpointName","localPath"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionEndpointInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionEndpointInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionJson":{"description":"The Json format","properties":{"line":{"type":"boolean","description":"A boolean flag indicating if it is JSON line format"}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityAppSpecification":{"description":"Container image configuration object for the monitoring job.","properties":{"configUri":{"type":"string","description":"The S3 URI to an analysis configuration file"},"environment":{"$ref":"pulumi.json#/Any","description":"Sets the environment variables in the Docker container"},"imageUri":{"type":"string","description":"The container image to be run by the monitoring job."}},"type":"object","required":["configUri","imageUri"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityBaselineConfig":{"description":"Baseline configuration used to validate that the data conforms to the specified constraints and statistics.","properties":{"baseliningJobName":{"type":"string","description":"The name of the baseline model explainability job."},"constraintsResource":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionConstraintsResource","description":"The constraints resource for a model explainability job."}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityJobInput":{"description":"The inputs for a monitoring job.","properties":{"batchTransformInput":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionBatchTransformInput","description":"Input object for the batch transform job."},"endpointInput":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionEndpointInput","description":"Input object for the endpoint"}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringOutput":{"description":"The output object for a monitoring job.","properties":{"s3Output":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionS3Output","description":"The Amazon S3 storage location where the results of a monitoring job are saved."}},"type":"object","required":["s3Output"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringOutputConfig":{"description":"The output configuration for monitoring jobs.","properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption."},"monitoringOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringOutput"},"description":"Monitoring outputs for monitoring jobs. This is where the output of the periodic monitoring jobs is uploaded."}},"type":"object","required":["monitoringOutputs"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringResources":{"description":"Identifies the resources to deploy for a monitoring job.","properties":{"clusterConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionClusterConfig","description":"The configuration for the cluster resources used to run the processing job."}},"type":"object","required":["clusterConfig"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionNetworkConfig":{"description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","properties":{"enableInterContainerTrafficEncryption":{"type":"boolean","description":"Whether to encrypt all communications between distributed processing jobs. Choose True to encrypt communications. Encryption provides greater security for distributed processing jobs, but the processing might take longer."},"enableNetworkIsolation":{"type":"boolean","description":"Whether to allow inbound and outbound network calls to and from the containers used for the processing job."},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionVpcConfig","description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC."}},"type":"object"},"aws-native:sagemaker:ModelExplainabilityJobDefinitionS3Output":{"description":"Information about where and how to store the results of a monitoring job.","properties":{"localPath":{"type":"string","description":"The local path to the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job. LocalPath is an absolute path for the output data."},"s3UploadMode":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionS3OutputS3UploadMode","description":"Whether to upload the results of the monitoring job continuously or after the job completes."},"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["localPath","s3Uri"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionS3OutputS3UploadMode":{"description":"Whether to upload the results of the monitoring job continuously or after the job completes.","type":"string","enum":[{"name":"Continuous","value":"Continuous"},{"name":"EndOfJob","value":"EndOfJob"}]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionStoppingCondition":{"description":"Specifies a time limit for how long the monitoring job is allowed to run.","properties":{"maxRuntimeInSeconds":{"type":"integer","description":"The maximum runtime allowed in seconds."}},"type":"object","required":["maxRuntimeInSeconds"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ModelExplainabilityJobDefinitionVpcConfig":{"description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the Subnets field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect to your monitoring jobs."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:ModelPackageAdditionalInferenceSpecificationDefinition":{"description":"Additional Inference Specification specifies details about inference jobs that can be run with models based on this model package.AdditionalInferenceSpecifications can be added to existing model packages using AdditionalInferenceSpecificationsToAdd.","properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageContainerDefinition"},"description":"The Amazon ECR registry path of the Docker image that contains the inference code."},"description":{"type":"string","description":"A description of the additional Inference specification."},"name":{"type":"string","description":"A unique name to identify the additional inference specification. The name must be unique within the list of your additional inference specifications for a particular model package."},"supportedContentTypes":{"type":"array","items":{"type":"string"},"description":"The supported MIME types for the input data."},"supportedRealtimeInferenceInstanceTypes":{"type":"array","items":{"type":"string"},"description":"A list of the instance types that are used to generate inferences in real-time"},"supportedResponseMimeTypes":{"type":"array","items":{"type":"string"},"description":"The supported MIME types for the output data."},"supportedTransformInstanceTypes":{"type":"array","items":{"type":"string"},"description":"A list of the instance types on which a transformation job can be run or on which an endpoint can be deployed."}},"type":"object","required":["containers","name"]},"aws-native:sagemaker:ModelPackageBias":{"description":"Contains bias metrics for a model.","properties":{"postTrainingReport":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The post-training bias report for a model."},"preTrainingReport":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The pre-training bias report for a model."},"report":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The bias report for a model"}},"type":"object"},"aws-native:sagemaker:ModelPackageContainerDefinition":{"description":"Describes the Docker container for the model package.","properties":{"containerHostname":{"type":"string","description":"The DNS host name for the Docker container."},"environment":{"$ref":"#/types/aws-native:sagemaker:ModelPackageEnvironment"},"framework":{"type":"string","description":"The machine learning framework of the model package container image."},"frameworkVersion":{"type":"string","description":"The framework version of the Model Package Container Image."},"image":{"type":"string","description":"The Amazon EC2 Container Registry (Amazon ECR) path where inference code is stored."},"imageDigest":{"type":"string","description":"An MD5 hash of the training algorithm that identifies the Docker image used for training."},"modelDataSource":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelDataSource"},"modelDataUrl":{"type":"string","description":"A structure with Model Input details."},"modelInput":{"$ref":"#/types/aws-native:sagemaker:ModelPackageContainerDefinitionModelInputProperties"},"nearestModelName":{"type":"string","description":"The name of a pre-trained machine learning benchmarked by Amazon SageMaker Inference Recommender model that matches your model."}},"type":"object","required":["image"]},"aws-native:sagemaker:ModelPackageContainerDefinitionModelInputProperties":{"properties":{"dataInputConfig":{"type":"string","description":"The input configuration object for the model."}},"type":"object","required":["dataInputConfig"]},"aws-native:sagemaker:ModelPackageCustomerMetadataProperties":{"description":"The metadata properties associated with the model package versions.","type":"object"},"aws-native:sagemaker:ModelPackageDataSource":{"description":"Describes the input source of a transform job and the way the transform job consumes it.","properties":{"s3DataSource":{"$ref":"#/types/aws-native:sagemaker:ModelPackageS3DataSource","description":"The S3 location of the data source that is associated with a channel."}},"type":"object","required":["s3DataSource"]},"aws-native:sagemaker:ModelPackageDriftCheckBaselines":{"description":"Represents the drift check baselines that can be used when the model monitor is set using the model package.","properties":{"bias":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDriftCheckBias","description":"Represents the drift check bias baselines that can be used when the model monitor is set using the model package."},"explainability":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDriftCheckExplainability","description":"Represents the drift check explainability baselines that can be used when the model monitor is set using the model package."},"modelDataQuality":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDriftCheckModelDataQuality","description":"Represents the drift check model data quality baselines that can be used when the model monitor is set using the model package."},"modelQuality":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDriftCheckModelQuality","description":"Represents the drift check model quality baselines that can be used when the model monitor is set using the model package."}},"type":"object"},"aws-native:sagemaker:ModelPackageDriftCheckBias":{"description":"Represents the drift check bias baselines that can be used when the model monitor is set using the model package.","properties":{"configFile":{"$ref":"#/types/aws-native:sagemaker:ModelPackageFileSource","description":"The bias config file for a model."},"postTrainingConstraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The post-training constraints."},"preTrainingConstraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The pre-training constraints."}},"type":"object"},"aws-native:sagemaker:ModelPackageDriftCheckExplainability":{"description":"Contains explainability metrics for a model.","properties":{"configFile":{"$ref":"#/types/aws-native:sagemaker:ModelPackageFileSource","description":"The explainability config file for the model."},"constraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The drift check explainability constraints."}},"type":"object"},"aws-native:sagemaker:ModelPackageDriftCheckModelDataQuality":{"description":"Represents the drift check data quality baselines that can be used when the model monitor is set using the model package.","properties":{"constraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The drift check model data quality constraints."},"statistics":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The drift check model data quality statistics."}},"type":"object"},"aws-native:sagemaker:ModelPackageDriftCheckModelQuality":{"description":"Represents the drift check model quality baselines that can be used when the model monitor is set using the model package.","properties":{"constraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The drift check model quality constraints."},"statistics":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The drift check model quality statistics."}},"type":"object"},"aws-native:sagemaker:ModelPackageEnvironment":{"description":"Sets the environment variables in the Docker container","type":"object"},"aws-native:sagemaker:ModelPackageExplainability":{"description":"Contains explainability metrics for a model.","properties":{"report":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"The explainability report for a model."}},"type":"object"},"aws-native:sagemaker:ModelPackageFileSource":{"description":"Represents a File Source Object.","properties":{"contentDigest":{"type":"string","description":"The digest of the file source."},"contentType":{"type":"string","description":"The type of content stored in the file source."},"s3Uri":{"type":"string","description":"The Amazon S3 URI for the file source."}},"type":"object","required":["s3Uri"]},"aws-native:sagemaker:ModelPackageGroupStatus":{"description":"The status of a modelpackage group job.","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"InProgress","value":"InProgress"},{"name":"Completed","value":"Completed"},{"name":"Failed","value":"Failed"},{"name":"Deleting","value":"Deleting"},{"name":"DeleteFailed","value":"DeleteFailed"}]},"aws-native:sagemaker:ModelPackageGroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ModelPackageInferenceSpecification":{"description":"Details about inference jobs that can be run with models based on this model package.","properties":{"containers":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageContainerDefinition"},"description":"The Amazon ECR registry path of the Docker image that contains the inference code."},"supportedContentTypes":{"type":"array","items":{"type":"string"},"description":"The supported MIME types for the input data."},"supportedRealtimeInferenceInstanceTypes":{"type":"array","items":{"type":"string"},"description":"A list of the instance types that are used to generate inferences in real-time"},"supportedResponseMimeTypes":{"type":"array","items":{"type":"string"},"description":"The supported MIME types for the output data."},"supportedTransformInstanceTypes":{"type":"array","items":{"type":"string"},"description":"A list of the instance types on which a transformation job can be run or on which an endpoint can be deployed."}},"type":"object","required":["containers","supportedContentTypes","supportedResponseMimeTypes"]},"aws-native:sagemaker:ModelPackageMetadataProperties":{"description":"Metadata properties of the tracking entity, trial, or trial component.","properties":{"commitId":{"type":"string","description":"The commit ID."},"generatedBy":{"type":"string","description":"The entity this entity was generated by."},"projectId":{"type":"string","description":"The project ID metadata."},"repository":{"type":"string","description":"The repository metadata."}},"type":"object"},"aws-native:sagemaker:ModelPackageMetricsSource":{"description":"Represents a Metric Source Object.","properties":{"contentDigest":{"type":"string","description":"The digest of the metric source."},"contentType":{"type":"string","description":"The type of content stored in the metric source."},"s3Uri":{"type":"string","description":"The Amazon S3 URI for the metric source."}},"type":"object","required":["contentType","s3Uri"]},"aws-native:sagemaker:ModelPackageModelAccessConfig":{"description":"Specifies the access configuration file for the ML model.","properties":{"acceptEula":{"type":"boolean","description":"Specifies agreement to the model end-user license agreement (EULA)."}},"type":"object","required":["acceptEula"]},"aws-native:sagemaker:ModelPackageModelApprovalStatus":{"description":"The approval status of the model package.","type":"string","enum":[{"name":"Approved","value":"Approved"},{"name":"Rejected","value":"Rejected"},{"name":"PendingManualApproval","value":"PendingManualApproval"}]},"aws-native:sagemaker:ModelPackageModelCard":{"description":"The model card associated with the model package.","properties":{"modelCardContent":{"type":"string","description":"The content of the model card."},"modelCardStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelCardModelCardStatus","description":"The approval status of the model card within your organization."}},"type":"object","required":["modelCardContent","modelCardStatus"]},"aws-native:sagemaker:ModelPackageModelCardModelCardStatus":{"description":"The approval status of the model card within your organization.","type":"string","enum":[{"name":"Draft","value":"Draft"},{"name":"PendingReview","value":"PendingReview"},{"name":"Approved","value":"Approved"},{"name":"Archived","value":"Archived"}]},"aws-native:sagemaker:ModelPackageModelDataQuality":{"description":"Metrics that measure the quality of the input data for a model.","properties":{"constraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"Data quality constraints for a model."},"statistics":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"Data quality statistics for a model."}},"type":"object"},"aws-native:sagemaker:ModelPackageModelDataSource":{"description":"Specifies the location of ML model data to deploy during endpoint creation.","properties":{"s3DataSource":{"$ref":"#/types/aws-native:sagemaker:ModelPackageS3ModelDataSource"}},"type":"object"},"aws-native:sagemaker:ModelPackageModelMetrics":{"description":"A structure that contains model metrics reports.","properties":{"bias":{"$ref":"#/types/aws-native:sagemaker:ModelPackageBias","description":"Metrics that measure bias in a model."},"explainability":{"$ref":"#/types/aws-native:sagemaker:ModelPackageExplainability","description":"Metrics that help explain a model."},"modelDataQuality":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelDataQuality","description":"Metrics that measure the quality of the input data for a model."},"modelQuality":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelQuality","description":"Metrics that measure the quality of a model."}},"type":"object"},"aws-native:sagemaker:ModelPackageModelQuality":{"description":"Metrics that measure the quality of a model.","properties":{"constraints":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"Model quality constraints."},"statistics":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetricsSource","description":"Model quality statistics."}},"type":"object"},"aws-native:sagemaker:ModelPackageS3DataSource":{"description":"Describes the S3 data source.","properties":{"s3DataType":{"$ref":"#/types/aws-native:sagemaker:ModelPackageS3DataSourceS3DataType","description":"The S3 Data Source Type"},"s3Uri":{"type":"string","description":"Depending on the value specified for the S3DataType, identifies either a key name prefix or a manifest."}},"type":"object","required":["s3DataType","s3Uri"]},"aws-native:sagemaker:ModelPackageS3DataSourceS3DataType":{"description":"The S3 Data Source Type","type":"string","enum":[{"name":"ManifestFile","value":"ManifestFile"},{"name":"S3Prefix","value":"S3Prefix"},{"name":"AugmentedManifestFile","value":"AugmentedManifestFile"}]},"aws-native:sagemaker:ModelPackageS3ModelDataSource":{"description":"Specifies the S3 location of ML model data to deploy.","properties":{"compressionType":{"$ref":"#/types/aws-native:sagemaker:ModelPackageS3ModelDataSourceCompressionType","description":"Specifies how the ML model data is prepared."},"modelAccessConfig":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelAccessConfig"},"s3DataType":{"$ref":"#/types/aws-native:sagemaker:ModelPackageS3ModelDataSourceS3DataType","description":"Specifies the type of ML model data to deploy."},"s3Uri":{"type":"string","description":"Specifies the S3 path of ML model data to deploy."}},"type":"object","required":["compressionType","s3DataType","s3Uri"]},"aws-native:sagemaker:ModelPackageS3ModelDataSourceCompressionType":{"description":"Specifies how the ML model data is prepared.","type":"string","enum":[{"name":"None","value":"None"},{"name":"Gzip","value":"Gzip"}]},"aws-native:sagemaker:ModelPackageS3ModelDataSourceS3DataType":{"description":"Specifies the type of ML model data to deploy.","type":"string","enum":[{"name":"S3Prefix","value":"S3Prefix"},{"name":"S3Object","value":"S3Object"}]},"aws-native:sagemaker:ModelPackageSecurityConfig":{"description":"An optional AWS Key Management Service key to encrypt, decrypt, and re-encrypt model package information for regulated workloads with highly sensitive data.","properties":{"kmsKeyId":{"type":"string","description":"The AWS KMS Key ID (KMSKeyId) used for encryption of model package information."}},"type":"object","required":["kmsKeyId"]},"aws-native:sagemaker:ModelPackageSkipModelValidation":{"description":"Indicates if you want to skip model validation.","type":"string","enum":[{"name":"None","value":"None"},{"name":"All","value":"All"}]},"aws-native:sagemaker:ModelPackageSourceAlgorithm":{"description":"Specifies an algorithm that was used to create the model package. The algorithm must be either an algorithm resource in your Amazon SageMaker account or an algorithm in AWS Marketplace that you are subscribed to.","properties":{"algorithmName":{"type":"string","description":"The name of an algorithm that was used to create the model package. The algorithm must be either an algorithm resource in your Amazon SageMaker account or an algorithm in AWS Marketplace that you are subscribed to."},"modelDataUrl":{"type":"string","description":"The Amazon S3 path where the model artifacts, which result from model training, are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix)."}},"type":"object","required":["algorithmName"]},"aws-native:sagemaker:ModelPackageSourceAlgorithmSpecification":{"description":"Details about the algorithm that was used to create the model package.","properties":{"sourceAlgorithms":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSourceAlgorithm"},"description":"A list of algorithms that were used to create a model package."}},"type":"object","required":["sourceAlgorithms"]},"aws-native:sagemaker:ModelPackageStatus":{"description":"The current status of the model package.","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"Deleting","value":"Deleting"},{"name":"InProgress","value":"InProgress"},{"name":"Completed","value":"Completed"},{"name":"Failed","value":"Failed"}]},"aws-native:sagemaker:ModelPackageStatusDetails":{"description":"Details about the current status of the model package.","properties":{"validationStatuses":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatusItem"},"description":"The validation status of the model package."}},"type":"object"},"aws-native:sagemaker:ModelPackageStatusItem":{"description":"Represents the overall status of a model package.","properties":{"failureReason":{"type":"string","description":"If the overall status is Failed, the reason for the failure."},"name":{"type":"string","description":"The name of the model package for which the overall status is being reported."},"status":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatusItemStatus","description":"The current status."}},"type":"object","required":["name","status"]},"aws-native:sagemaker:ModelPackageStatusItemStatus":{"description":"The current status.","type":"string","enum":[{"name":"NotStarted","value":"NotStarted"},{"name":"Failed","value":"Failed"},{"name":"InProgress","value":"InProgress"},{"name":"Completed","value":"Completed"}]},"aws-native:sagemaker:ModelPackageTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ModelPackageTransformInput":{"description":"Describes the input source of a transform job and the way the transform job consumes it.","properties":{"compressionType":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformInputCompressionType","description":"If your transform data is compressed, specify the compression type. Amazon SageMaker automatically decompresses the data for the transform job accordingly. The default value is None."},"contentType":{"type":"string","description":"The multipurpose internet mail extension (MIME) type of the data. Amazon SageMaker uses the MIME type with each http call to transfer data to the transform job."},"dataSource":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDataSource","description":"Describes the location of the channel data, which is, the S3 location of the input data that the model can consume."},"splitType":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformInputSplitType","description":"The method to use to split the transform job's data files into smaller batches. "}},"type":"object","required":["dataSource"]},"aws-native:sagemaker:ModelPackageTransformInputCompressionType":{"description":"If your transform data is compressed, specify the compression type. Amazon SageMaker automatically decompresses the data for the transform job accordingly. The default value is None.","type":"string","enum":[{"name":"None","value":"None"},{"name":"Gzip","value":"Gzip"}]},"aws-native:sagemaker:ModelPackageTransformInputSplitType":{"description":"The method to use to split the transform job's data files into smaller batches. ","type":"string","enum":[{"name":"None","value":"None"},{"name":"TfRecord","value":"TFRecord"},{"name":"Line","value":"Line"},{"name":"RecordIo","value":"RecordIO"}]},"aws-native:sagemaker:ModelPackageTransformJobDefinition":{"description":"Defines the input needed to run a transform job using the inference specification specified in the algorithm.","properties":{"batchStrategy":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformJobDefinitionBatchStrategy","description":"A string that determines the number of records included in a single mini-batch."},"environment":{"$ref":"#/types/aws-native:sagemaker:ModelPackageEnvironment","description":"The environment variables to set in the Docker container. We support up to 16 key and values entries in the map."},"maxConcurrentTransforms":{"type":"integer","description":"The maximum number of parallel requests that can be sent to each instance in a transform job. The default value is 1."},"maxPayloadInMb":{"type":"integer","description":"The maximum payload size allowed, in MB. A payload is the data portion of a record (without metadata)."},"transformInput":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformInput","description":"A description of the input source and the way the transform job consumes it."},"transformOutput":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformOutput","description":"Identifies the Amazon S3 location where you want Amazon SageMaker to save the results from the transform job."},"transformResources":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformResources","description":"Identifies the ML compute instances for the transform job."}},"type":"object","required":["transformInput","transformOutput","transformResources"]},"aws-native:sagemaker:ModelPackageTransformJobDefinitionBatchStrategy":{"description":"A string that determines the number of records included in a single mini-batch.","type":"string","enum":[{"name":"MultiRecord","value":"MultiRecord"},{"name":"SingleRecord","value":"SingleRecord"}]},"aws-native:sagemaker:ModelPackageTransformOutput":{"description":"Describes the results of a transform job.","properties":{"accept":{"type":"string","description":"The MIME type used to specify the output data. Amazon SageMaker uses the MIME type with each http call to transfer data from the transform job."},"assembleWith":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformOutputAssembleWith","description":"Defines how to assemble the results of the transform job as a single S3 object."},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption."},"s3OutputPath":{"type":"string","description":"The Amazon S3 path where you want Amazon SageMaker to store the results of the transform job."}},"type":"object","required":["s3OutputPath"]},"aws-native:sagemaker:ModelPackageTransformOutputAssembleWith":{"description":"Defines how to assemble the results of the transform job as a single S3 object.","type":"string","enum":[{"name":"None","value":"None"},{"name":"Line","value":"Line"}]},"aws-native:sagemaker:ModelPackageTransformResources":{"description":"Describes the resources, including ML instance types and ML instance count, to use for transform job.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the transform job. For distributed transform jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"type":"string","description":"The ML compute instance type for the transform job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt model data on the storage volume attached to the ML compute instance(s) that run the batch transform job."}},"type":"object","required":["instanceCount","instanceType"]},"aws-native:sagemaker:ModelPackageValidationProfile":{"description":"Contains data, such as the inputs and targeted instance types that are used in the process of validating the model package.","properties":{"profileName":{"type":"string","description":"The name of the profile for the model package."},"transformJobDefinition":{"$ref":"#/types/aws-native:sagemaker:ModelPackageTransformJobDefinition","description":"The `TransformJobDefinition` object that describes the transform job used for the validation of the model package."}},"type":"object","required":["profileName","transformJobDefinition"]},"aws-native:sagemaker:ModelPackageValidationSpecification":{"description":"Specifies configurations for one or more transform jobs that Amazon SageMaker runs to test the model package.","properties":{"validationProfiles":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageValidationProfile"},"description":"An array of `ModelPackageValidationProfile` objects, each of which specifies a batch transform job that SageMaker runs to validate your model package."},"validationRole":{"type":"string","description":"The IAM roles to be used for the validation of the model package."}},"type":"object","required":["validationProfiles","validationRole"]},"aws-native:sagemaker:ModelQualityJobDefinitionBatchTransformInput":{"description":"The batch transform input for a monitoring job.","properties":{"dataCapturedDestinationS3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Batch Transform Job captures data."},"datasetFormat":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionDatasetFormat","description":"The dataset format for your batch transform job."},"endTimeOffset":{"type":"string","description":"Monitoring end time offset, e.g. PT0H"},"inferenceAttribute":{"type":"string","description":"Index or JSONpath to locate predicted label(s)"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"probabilityAttribute":{"type":"string","description":"Index or JSONpath to locate probabilities"},"probabilityThresholdAttribute":{"type":"number","description":"The threshold for the class probability to be evaluated as a positive result."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionBatchTransformInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionBatchTransformInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."},"startTimeOffset":{"type":"string","description":"Monitoring start time offset, e.g. -PT1H"}},"type":"object","required":["dataCapturedDestinationS3Uri","datasetFormat","localPath"]},"aws-native:sagemaker:ModelQualityJobDefinitionBatchTransformInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ModelQualityJobDefinitionBatchTransformInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:ModelQualityJobDefinitionClusterConfig":{"description":"Configuration for the cluster used to run model monitoring jobs.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the model monitoring job. For distributed processing jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"type":"string","description":"The ML compute instance type for the processing job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job."},"volumeSizeInGb":{"type":"integer","description":"The size of the ML storage volume, in gigabytes, that you want to provision. You must specify sufficient ML storage for your scenario."}},"type":"object","required":["instanceCount","instanceType","volumeSizeInGb"]},"aws-native:sagemaker:ModelQualityJobDefinitionConstraintsResource":{"description":"The baseline constraints resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for baseline constraint file in Amazon S3 that the current monitoring job should validated against."}},"type":"object"},"aws-native:sagemaker:ModelQualityJobDefinitionCsv":{"description":"The CSV format","properties":{"header":{"type":"boolean","description":"A boolean flag indicating if given CSV has header"}},"type":"object"},"aws-native:sagemaker:ModelQualityJobDefinitionDatasetFormat":{"description":"The dataset format of the data to monitor","properties":{"csv":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionCsv"},"json":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionJson"},"parquet":{"type":"boolean"}},"type":"object"},"aws-native:sagemaker:ModelQualityJobDefinitionEndpointInput":{"description":"The endpoint for a monitoring job.","properties":{"endTimeOffset":{"type":"string","description":"Monitoring end time offset, e.g. PT0H"},"endpointName":{"type":"string","description":"An endpoint in customer's account which has enabled `DataCaptureConfig` enabled."},"inferenceAttribute":{"type":"string","description":"Index or JSONpath to locate predicted label(s)"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"probabilityAttribute":{"type":"string","description":"Index or JSONpath to locate probabilities"},"probabilityThresholdAttribute":{"type":"number","description":"The threshold for the class probability to be evaluated as a positive result."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionEndpointInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionEndpointInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."},"startTimeOffset":{"type":"string","description":"Monitoring start time offset, e.g. -PT1H"}},"type":"object","required":["endpointName","localPath"]},"aws-native:sagemaker:ModelQualityJobDefinitionEndpointInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ModelQualityJobDefinitionEndpointInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:ModelQualityJobDefinitionJson":{"description":"The Json format","properties":{"line":{"type":"boolean","description":"A boolean flag indicating if it is JSON line format"}},"type":"object"},"aws-native:sagemaker:ModelQualityJobDefinitionModelQualityAppSpecification":{"description":"Container image configuration object for the monitoring job.","properties":{"containerArguments":{"type":"array","items":{"type":"string"},"description":"An array of arguments for the container used to run the monitoring job."},"containerEntrypoint":{"type":"array","items":{"type":"string"},"description":"Specifies the entrypoint for a container used to run the monitoring job."},"environment":{"$ref":"pulumi.json#/Any","description":"Sets the environment variables in the Docker container"},"imageUri":{"type":"string","description":"The container image to be run by the monitoring job."},"postAnalyticsProcessorSourceUri":{"type":"string","description":"An Amazon S3 URI to a script that is called after analysis has been performed. Applicable only for the built-in (first party) containers."},"problemType":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionProblemType","description":"The machine learning problem type of the model that the monitoring job monitors."},"recordPreprocessorSourceUri":{"type":"string","description":"An Amazon S3 URI to a script that is called per row prior to running analysis. It can base64 decode the payload and convert it into a flatted json so that the built-in container can use the converted data. Applicable only for the built-in (first party) containers"}},"type":"object","required":["imageUri","problemType"]},"aws-native:sagemaker:ModelQualityJobDefinitionModelQualityBaselineConfig":{"description":"Baseline configuration used to validate that the data conforms to the specified constraints and statistics.","properties":{"baseliningJobName":{"type":"string","description":"The name of the job that performs baselining for the monitoring job."},"constraintsResource":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionConstraintsResource","description":"The constraints resource for a monitoring job."}},"type":"object"},"aws-native:sagemaker:ModelQualityJobDefinitionModelQualityJobInput":{"description":"The inputs for a monitoring job.","properties":{"batchTransformInput":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionBatchTransformInput","description":"Input object for the batch transform job."},"endpointInput":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionEndpointInput","description":"Input object for the endpoint"},"groundTruthS3Input":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionMonitoringGroundTruthS3Input","description":"The ground truth label provided for the model."}},"type":"object","required":["groundTruthS3Input"]},"aws-native:sagemaker:ModelQualityJobDefinitionMonitoringGroundTruthS3Input":{"description":"Ground truth input provided in S3 ","properties":{"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["s3Uri"]},"aws-native:sagemaker:ModelQualityJobDefinitionMonitoringOutput":{"description":"The output object for a monitoring job.","properties":{"s3Output":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionS3Output","description":"The Amazon S3 storage location where the results of a monitoring job are saved."}},"type":"object","required":["s3Output"]},"aws-native:sagemaker:ModelQualityJobDefinitionMonitoringOutputConfig":{"description":"The output configuration for monitoring jobs.","properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption."},"monitoringOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionMonitoringOutput"},"description":"Monitoring outputs for monitoring jobs. This is where the output of the periodic monitoring jobs is uploaded."}},"type":"object","required":["monitoringOutputs"]},"aws-native:sagemaker:ModelQualityJobDefinitionMonitoringResources":{"description":"Identifies the resources to deploy for a monitoring job.","properties":{"clusterConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionClusterConfig","description":"The configuration for the cluster resources used to run the processing job."}},"type":"object","required":["clusterConfig"]},"aws-native:sagemaker:ModelQualityJobDefinitionNetworkConfig":{"description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","properties":{"enableInterContainerTrafficEncryption":{"type":"boolean","description":"Whether to encrypt all communications between distributed processing jobs. Choose True to encrypt communications. Encryption provides greater security for distributed processing jobs, but the processing might take longer."},"enableNetworkIsolation":{"type":"boolean","description":"Whether to allow inbound and outbound network calls to and from the containers used for the processing job."},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionVpcConfig","description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC."}},"type":"object"},"aws-native:sagemaker:ModelQualityJobDefinitionProblemType":{"description":"The status of the monitoring job.","type":"string","enum":[{"name":"BinaryClassification","value":"BinaryClassification"},{"name":"MulticlassClassification","value":"MulticlassClassification"},{"name":"Regression","value":"Regression"}]},"aws-native:sagemaker:ModelQualityJobDefinitionS3Output":{"description":"Information about where and how to store the results of a monitoring job.","properties":{"localPath":{"type":"string","description":"The local path to the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job. LocalPath is an absolute path for the output data."},"s3UploadMode":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionS3OutputS3UploadMode","description":"Whether to upload the results of the monitoring job continuously or after the job completes."},"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["localPath","s3Uri"]},"aws-native:sagemaker:ModelQualityJobDefinitionS3OutputS3UploadMode":{"description":"Whether to upload the results of the monitoring job continuously or after the job completes.","type":"string","enum":[{"name":"Continuous","value":"Continuous"},{"name":"EndOfJob","value":"EndOfJob"}]},"aws-native:sagemaker:ModelQualityJobDefinitionStoppingCondition":{"description":"Specifies a time limit for how long the monitoring job is allowed to run.","properties":{"maxRuntimeInSeconds":{"type":"integer","description":"The maximum runtime allowed in seconds."}},"type":"object","required":["maxRuntimeInSeconds"]},"aws-native:sagemaker:ModelQualityJobDefinitionTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ModelQualityJobDefinitionVpcConfig":{"description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the Subnets field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect to your monitoring jobs."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:MonitoringScheduleBaselineConfig":{"description":"Baseline configuration used to validate that the data conforms to the specified constraints and statistics.","properties":{"constraintsResource":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleConstraintsResource","description":"The Amazon S3 URI for the constraints resource."},"statisticsResource":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleStatisticsResource","description":"The baseline statistics file in Amazon S3 that the current monitoring job should be validated against."}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleBatchTransformInput":{"description":"The batch transform input for a monitoring job.","properties":{"dataCapturedDestinationS3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Batch Transform Job captures data."},"datasetFormat":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleDatasetFormat"},"excludeFeaturesAttribute":{"type":"string","description":"Indexes or names of the features to be excluded from analysis"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleBatchTransformInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleBatchTransformInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."}},"type":"object","required":["dataCapturedDestinationS3Uri","datasetFormat","localPath"]},"aws-native:sagemaker:MonitoringScheduleBatchTransformInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:MonitoringScheduleBatchTransformInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:MonitoringScheduleClusterConfig":{"description":"Configuration for the cluster used to run model monitoring jobs.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the model monitoring job. For distributed processing jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"type":"string","description":"The ML compute instance type for the processing job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job."},"volumeSizeInGb":{"type":"integer","description":"The size of the ML storage volume, in gigabytes, that you want to provision. You must specify sufficient ML storage for your scenario."}},"type":"object","required":["instanceCount","instanceType","volumeSizeInGb"]},"aws-native:sagemaker:MonitoringScheduleConfig":{"description":"The configuration object that specifies the monitoring schedule and defines the monitoring job.","properties":{"monitoringJobDefinition":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringJobDefinition","description":"Defines the monitoring job."},"monitoringJobDefinitionName":{"type":"string","description":"Name of the job definition"},"monitoringType":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringType","description":"The type of the monitoring job definition to schedule."},"scheduleConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleScheduleConfig","description":"Configures the monitoring schedule."}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleConstraintsResource":{"description":"The baseline constraints resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for baseline constraint file in Amazon S3 that the current monitoring job should validated against."}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleCsv":{"description":"The CSV format","properties":{"header":{"type":"boolean","description":"A boolean flag indicating if given CSV has header"}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleDatasetFormat":{"description":"The dataset format of the data to monitor","properties":{"csv":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleCsv"},"json":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleJson"},"parquet":{"type":"boolean"}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleEndpointInput":{"description":"The endpoint for a monitoring job.","properties":{"endpointName":{"type":"string"},"excludeFeaturesAttribute":{"type":"string","description":"Indexes or names of the features to be excluded from analysis"},"localPath":{"type":"string","description":"Path to the filesystem where the endpoint data is available to the container."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleEndpointInputS3DataDistributionType","description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated"},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleEndpointInputS3InputMode","description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File."}},"type":"object","required":["endpointName","localPath"]},"aws-native:sagemaker:MonitoringScheduleEndpointInputS3DataDistributionType":{"description":"Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defauts to FullyReplicated","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:MonitoringScheduleEndpointInputS3InputMode":{"description":"Whether the Pipe or File is used as the input mode for transfering data for the monitoring job. Pipe mode is recommended for large datasets. File mode is useful for small files that fit in memory. Defaults to File.","type":"string","enum":[{"name":"Pipe","value":"Pipe"},{"name":"File","value":"File"}]},"aws-native:sagemaker:MonitoringScheduleJson":{"description":"The Json format","properties":{"line":{"type":"boolean","description":"A boolean flag indicating if it is JSON line format"}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleMonitoringAppSpecification":{"description":"Container image configuration object for the monitoring job.","properties":{"containerArguments":{"type":"array","items":{"type":"string"},"description":"An array of arguments for the container used to run the monitoring job."},"containerEntrypoint":{"type":"array","items":{"type":"string"},"description":"Specifies the entrypoint for a container used to run the monitoring job."},"imageUri":{"type":"string","description":"The container image to be run by the monitoring job."},"postAnalyticsProcessorSourceUri":{"type":"string","description":"An Amazon S3 URI to a script that is called after analysis has been performed. Applicable only for the built-in (first party) containers."},"recordPreprocessorSourceUri":{"type":"string","description":"An Amazon S3 URI to a script that is called per row prior to running analysis. It can base64 decode the payload and convert it into a flatted json so that the built-in container can use the converted data. Applicable only for the built-in (first party) containers"}},"type":"object","required":["imageUri"]},"aws-native:sagemaker:MonitoringScheduleMonitoringExecutionSummary":{"description":"Summary of information about monitoring job","properties":{"creationTime":{"type":"string","description":"The time at which the monitoring job was created."},"endpointName":{"type":"string","description":"The name of the endpoint used to run the monitoring job."},"failureReason":{"type":"string","description":"Contains the reason a monitoring job failed, if it failed."},"lastModifiedTime":{"type":"string","description":"A timestamp that indicates the last time the monitoring job was modified."},"monitoringExecutionStatus":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringExecutionSummaryMonitoringExecutionStatus","description":"The status of the monitoring job."},"monitoringScheduleName":{"type":"string","description":"The name of the monitoring schedule."},"processingJobArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the monitoring job."},"scheduledTime":{"type":"string","description":"The time the monitoring job was scheduled."}},"type":"object","required":["creationTime","lastModifiedTime","monitoringExecutionStatus","monitoringScheduleName","scheduledTime"]},"aws-native:sagemaker:MonitoringScheduleMonitoringExecutionSummaryMonitoringExecutionStatus":{"description":"The status of the monitoring job.","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"Completed","value":"Completed"},{"name":"CompletedWithViolations","value":"CompletedWithViolations"},{"name":"InProgress","value":"InProgress"},{"name":"Failed","value":"Failed"},{"name":"Stopping","value":"Stopping"},{"name":"Stopped","value":"Stopped"}]},"aws-native:sagemaker:MonitoringScheduleMonitoringInput":{"description":"The inputs for a monitoring job.","properties":{"batchTransformInput":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleBatchTransformInput"},"endpointInput":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleEndpointInput"}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleMonitoringJobDefinition":{"description":"Defines the monitoring job.","properties":{"baselineConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleBaselineConfig","description":"Baseline configuration used to validate that the data conforms to the specified constraints and statistics"},"environment":{"$ref":"pulumi.json#/Any","description":"Sets the environment variables in the Docker container"},"monitoringAppSpecification":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringAppSpecification","description":"Configures the monitoring job to run a specified Docker container image."},"monitoringInputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringInput"},"description":"The array of inputs for the monitoring job. Currently we support monitoring an Amazon SageMaker AI Endpoint."},"monitoringOutputConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringOutputConfig","description":"The array of outputs from the monitoring job to be uploaded to Amazon S3."},"monitoringResources":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringResources","description":"Identifies the resources, ML compute instances, and ML storage volumes to deploy for a monitoring job. In distributed processing, you specify more than one instance."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleNetworkConfig","description":"Specifies networking options for an monitoring job."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf."},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleStoppingCondition","description":"Specifies a time limit for how long the monitoring job is allowed to run."}},"type":"object","required":["monitoringAppSpecification","monitoringInputs","monitoringOutputConfig","monitoringResources","roleArn"]},"aws-native:sagemaker:MonitoringScheduleMonitoringOutput":{"description":"The output object for a monitoring job.","properties":{"s3Output":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleS3Output","description":"The Amazon S3 storage location where the results of a monitoring job are saved."}},"type":"object","required":["s3Output"]},"aws-native:sagemaker:MonitoringScheduleMonitoringOutputConfig":{"description":"The output configuration for monitoring jobs.","properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption."},"monitoringOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringOutput"},"description":"Monitoring outputs for monitoring jobs. This is where the output of the periodic monitoring jobs is uploaded."}},"type":"object","required":["monitoringOutputs"]},"aws-native:sagemaker:MonitoringScheduleMonitoringResources":{"description":"Identifies the resources to deploy for a monitoring job.","properties":{"clusterConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleClusterConfig","description":"The configuration for the cluster resources used to run the processing job."}},"type":"object","required":["clusterConfig"]},"aws-native:sagemaker:MonitoringScheduleMonitoringType":{"description":"The type of monitoring job.","type":"string","enum":[{"name":"DataQuality","value":"DataQuality"},{"name":"ModelQuality","value":"ModelQuality"},{"name":"ModelBias","value":"ModelBias"},{"name":"ModelExplainability","value":"ModelExplainability"}]},"aws-native:sagemaker:MonitoringScheduleNetworkConfig":{"description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","properties":{"enableInterContainerTrafficEncryption":{"type":"boolean","description":"Whether to encrypt all communications between distributed processing jobs. Choose True to encrypt communications. Encryption provides greater security for distributed processing jobs, but the processing might take longer."},"enableNetworkIsolation":{"type":"boolean","description":"Whether to allow inbound and outbound network calls to and from the containers used for the processing job."},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleVpcConfig","description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC. For more information, see [Protect Endpoints by Using an Amazon Virtual Private Cloud](https://docs.aws.amazon.com/sagemaker/latest/dg/host-vpc.html) and [Protect Training Jobs by Using an Amazon Virtual Private Cloud](https://docs.aws.amazon.com/sagemaker/latest/dg/train-vpc.html) ."}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleS3Output":{"description":"Information about where and how to store the results of a monitoring job.","properties":{"localPath":{"type":"string","description":"The local path to the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job. LocalPath is an absolute path for the output data."},"s3UploadMode":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleS3OutputS3UploadMode","description":"Whether to upload the results of the monitoring job continuously or after the job completes."},"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 storage location where Amazon SageMaker saves the results of a monitoring job."}},"type":"object","required":["localPath","s3Uri"]},"aws-native:sagemaker:MonitoringScheduleS3OutputS3UploadMode":{"description":"Whether to upload the results of the monitoring job continuously or after the job completes.","type":"string","enum":[{"name":"Continuous","value":"Continuous"},{"name":"EndOfJob","value":"EndOfJob"}]},"aws-native:sagemaker:MonitoringScheduleScheduleConfig":{"description":"Configuration details about the monitoring schedule.","properties":{"dataAnalysisEndTime":{"type":"string","description":"Data Analysis end time, e.g. PT0H"},"dataAnalysisStartTime":{"type":"string","description":"Data Analysis start time, e.g. -PT1H"},"scheduleExpression":{"type":"string","description":"A cron expression or 'NOW' that describes details about the monitoring schedule."}},"type":"object","required":["scheduleExpression"]},"aws-native:sagemaker:MonitoringScheduleStatisticsResource":{"description":"The baseline statistics resource for a monitoring job.","properties":{"s3Uri":{"type":"string","description":"The Amazon S3 URI for the baseline statistics file in Amazon S3 that the current monitoring job should be validated against."}},"type":"object"},"aws-native:sagemaker:MonitoringScheduleStatus":{"description":"The status of a schedule job.","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"Failed","value":"Failed"},{"name":"Scheduled","value":"Scheduled"},{"name":"Stopped","value":"Stopped"}]},"aws-native:sagemaker:MonitoringScheduleStoppingCondition":{"description":"Specifies a time limit for how long the monitoring job is allowed to run.","properties":{"maxRuntimeInSeconds":{"type":"integer","description":"The maximum runtime allowed in seconds."}},"type":"object","required":["maxRuntimeInSeconds"]},"aws-native:sagemaker:MonitoringScheduleTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:MonitoringScheduleVpcConfig":{"description":"Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the Subnets field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect to your monitoring jobs."}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:OfflineStoreConfigProperties":{"description":"The configuration of an `OfflineStore` .","properties":{"dataCatalogConfig":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupDataCatalogConfig","description":"The meta data of the Glue table that is autogenerated when an `OfflineStore` is created."},"disableGlueTableCreation":{"type":"boolean","description":"Set to `True` to disable the automatic creation of an AWS Glue table when configuring an `OfflineStore` . If set to `False` , Feature Store will name the `OfflineStore` Glue table following [Athena's naming recommendations](https://docs.aws.amazon.com/athena/latest/ug/tables-databases-columns-names.html) .\n\nThe default value is `False` ."},"s3StorageConfig":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupS3StorageConfig","description":"The Amazon Simple Storage (Amazon S3) location of `OfflineStore` ."},"tableFormat":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupTableFormat","description":"Format for the offline store table. Supported formats are Glue (Default) and [Apache Iceberg](https://docs.aws.amazon.com/https://iceberg.apache.org/) ."}},"type":"object","required":["s3StorageConfig"]},"aws-native:sagemaker:OnlineStoreConfigProperties":{"description":"The configuration of an `OnlineStore` .","properties":{"enableOnlineStore":{"type":"boolean","description":"Turn `OnlineStore` off by specifying `False` for the `EnableOnlineStore` flag. Turn `OnlineStore` on by specifying `True` for the `EnableOnlineStore` flag.\n\nThe default value is `False` ."},"securityConfig":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupOnlineStoreSecurityConfig","description":"Use to specify KMS Key ID ( `KMSKeyId` ) for at-rest encryption of your `OnlineStore` ."},"storageType":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupStorageType","description":"Option for different tiers of low latency storage for real-time data retrieval.\n\n- `Standard` : A managed low latency data store for feature groups.\n- `InMemory` : A managed data store for feature groups that supports very low latency retrieval."},"ttlDuration":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupTtlDuration","description":"Time to live duration, where the record is hard deleted after the expiration time is reached; `ExpiresAt` = `EventTime` + `TtlDuration` . For information on HardDelete, see the [DeleteRecord](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_DeleteRecord.html) API in the Amazon SageMaker API Reference guide."}},"type":"object"},"aws-native:sagemaker:ParallelismConfigurationProperties":{"description":"The parallelism configuration applied to the pipeline.","properties":{"maxParallelExecutionSteps":{"type":"integer","description":"Maximum parallel execution steps"}},"type":"object","required":["maxParallelExecutionSteps"]},"aws-native:sagemaker:PartnerAppAuthType":{"description":"The Auth type of PartnerApp.","type":"string","enum":[{"name":"Iam","value":"IAM"}]},"aws-native:sagemaker:PartnerAppConfig":{"description":"A collection of configuration settings for the PartnerApp.","properties":{"adminUsers":{"type":"array","items":{"type":"string"},"description":"A list of users with administrator privileges for the PartnerApp."},"arguments":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of arguments to pass to the PartnerApp."}},"type":"object"},"aws-native:sagemaker:PartnerAppMaintenanceConfig":{"description":"A collection of settings that specify the maintenance schedule for the PartnerApp.","properties":{"maintenanceWindowStart":{"type":"string","description":"The maintenance window start day and time for the PartnerApp."}},"type":"object","required":["maintenanceWindowStart"]},"aws-native:sagemaker:PartnerAppTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:PartnerAppType":{"description":"The type of PartnerApp.","type":"string","enum":[{"name":"LakeraGuard","value":"lakera-guard"},{"name":"Comet","value":"comet"},{"name":"DeepchecksLlmEvaluation","value":"deepchecks-llm-evaluation"},{"name":"Fiddler","value":"fiddler"}]},"aws-native:sagemaker:PipelineDefinition0Properties":{"description":"The definition of the pipeline. This can be either a JSON string or an Amazon S3 location.","properties":{"pipelineDefinitionBody":{"type":"string","description":"A specification that defines the pipeline in JSON format."}},"type":"object","required":["pipelineDefinitionBody"]},"aws-native:sagemaker:PipelineDefinition1Properties":{"description":"The definition of the pipeline. This can be either a JSON string or an Amazon S3 location.","properties":{"pipelineDefinitionS3Location":{"$ref":"#/types/aws-native:sagemaker:PipelineS3Location"}},"type":"object","required":["pipelineDefinitionS3Location"]},"aws-native:sagemaker:PipelineS3Location":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket where the PipelineDefinition file is stored."},"eTag":{"type":"string","description":"The Amazon S3 ETag (a file checksum) of the PipelineDefinition file. If you don't specify a value, SageMaker skips ETag validation of your PipelineDefinition file."},"key":{"type":"string","description":"The file name of the PipelineDefinition file (Amazon S3 object name)."},"version":{"type":"string","description":"For versioning-enabled buckets, a specific version of the PipelineDefinition file."}},"type":"object","required":["bucket","key"]},"aws-native:sagemaker:PipelineTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ProcessingJobAppSpecification":{"description":"Configures the processing job to run a specified Docker container image.","properties":{"containerArguments":{"type":"array","items":{"type":"string"},"description":"The arguments for a container used to run a processing job."},"containerEntrypoint":{"type":"array","items":{"type":"string"},"description":"The entrypoint for a container used to run a processing job."},"imageUri":{"type":"string","description":"The container image to be run by the processing job."}},"type":"object","required":["imageUri"]},"aws-native:sagemaker:ProcessingJobAthenaDatasetDefinition":{"description":"Configuration for Athena Dataset Definition input.","properties":{"catalog":{"type":"string","description":"The name of the data catalog used in Athena query execution."},"database":{"type":"string","description":"The name of the database used in the Athena query execution."},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data generated from an Athena query execution."},"outputCompression":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobAthenaDatasetDefinitionOutputCompression","description":"The compression used for Athena query results."},"outputFormat":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobAthenaDatasetDefinitionOutputFormat","description":"The data storage format for Athena query results."},"outputS3Uri":{"type":"string","description":"The location in Amazon S3 where Athena query results are stored."},"queryString":{"type":"string","description":"The SQL query statements, to be executed."},"workGroup":{"type":"string","description":"The name of the workgroup in which the Athena query is being started."}},"type":"object","required":["catalog","database","outputFormat","outputS3Uri","queryString"]},"aws-native:sagemaker:ProcessingJobAthenaDatasetDefinitionOutputCompression":{"description":"The compression used for Athena query results.","type":"string","enum":[{"name":"Gzip","value":"GZIP"},{"name":"Snappy","value":"SNAPPY"},{"name":"Zlib","value":"ZLIB"}]},"aws-native:sagemaker:ProcessingJobAthenaDatasetDefinitionOutputFormat":{"description":"The data storage format for Athena query results.","type":"string","enum":[{"name":"Parquet","value":"PARQUET"},{"name":"Avro","value":"AVRO"},{"name":"Orc","value":"ORC"},{"name":"Json","value":"JSON"},{"name":"Textfile","value":"TEXTFILE"}]},"aws-native:sagemaker:ProcessingJobClusterConfig":{"description":"Configuration for the cluster used to run a processing job.","properties":{"instanceCount":{"type":"integer","description":"The number of ML compute instances to use in the processing job. For distributed processing jobs, specify a value greater than 1. The default value is 1."},"instanceType":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobClusterConfigInstanceType","description":"The ML compute instance type for the processing job."},"volumeKmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the processing job."},"volumeSizeInGb":{"type":"integer","description":"The size of the ML storage volume in gigabytes that you want to provision. You must specify sufficient ML storage for your scenario."}},"type":"object","required":["instanceCount","instanceType","volumeSizeInGb"]},"aws-native:sagemaker:ProcessingJobClusterConfigInstanceType":{"description":"The ML compute instance type for the processing job.","type":"string","enum":[{"name":"MlT3Medium","value":"ml.t3.medium"},{"name":"MlT3Large","value":"ml.t3.large"},{"name":"MlT3Xlarge","value":"ml.t3.xlarge"},{"name":"MlT32xlarge","value":"ml.t3.2xlarge"},{"name":"MlM4Xlarge","value":"ml.m4.xlarge"},{"name":"MlM42xlarge","value":"ml.m4.2xlarge"},{"name":"MlM44xlarge","value":"ml.m4.4xlarge"},{"name":"MlM410xlarge","value":"ml.m4.10xlarge"},{"name":"MlM416xlarge","value":"ml.m4.16xlarge"},{"name":"MlC4Xlarge","value":"ml.c4.xlarge"},{"name":"MlC42xlarge","value":"ml.c4.2xlarge"},{"name":"MlC44xlarge","value":"ml.c4.4xlarge"},{"name":"MlC48xlarge","value":"ml.c4.8xlarge"},{"name":"MlC5Xlarge","value":"ml.c5.xlarge"},{"name":"MlC52xlarge","value":"ml.c5.2xlarge"},{"name":"MlC54xlarge","value":"ml.c5.4xlarge"},{"name":"MlC59xlarge","value":"ml.c5.9xlarge"},{"name":"MlC518xlarge","value":"ml.c5.18xlarge"},{"name":"MlM5Large","value":"ml.m5.large"},{"name":"MlM5Xlarge","value":"ml.m5.xlarge"},{"name":"MlM52xlarge","value":"ml.m5.2xlarge"},{"name":"MlM54xlarge","value":"ml.m5.4xlarge"},{"name":"MlM512xlarge","value":"ml.m5.12xlarge"},{"name":"MlM524xlarge","value":"ml.m5.24xlarge"},{"name":"MlR5Large","value":"ml.r5.large"},{"name":"MlR5Xlarge","value":"ml.r5.xlarge"},{"name":"MlR52xlarge","value":"ml.r5.2xlarge"},{"name":"MlR54xlarge","value":"ml.r5.4xlarge"},{"name":"MlR58xlarge","value":"ml.r5.8xlarge"},{"name":"MlR512xlarge","value":"ml.r5.12xlarge"},{"name":"MlR516xlarge","value":"ml.r5.16xlarge"},{"name":"MlR524xlarge","value":"ml.r5.24xlarge"},{"name":"MlG4dnXlarge","value":"ml.g4dn.xlarge"},{"name":"MlG4dn2xlarge","value":"ml.g4dn.2xlarge"},{"name":"MlG4dn4xlarge","value":"ml.g4dn.4xlarge"},{"name":"MlG4dn8xlarge","value":"ml.g4dn.8xlarge"},{"name":"MlG4dn12xlarge","value":"ml.g4dn.12xlarge"},{"name":"MlG4dn16xlarge","value":"ml.g4dn.16xlarge"},{"name":"MlG5Xlarge","value":"ml.g5.xlarge"},{"name":"MlG52xlarge","value":"ml.g5.2xlarge"},{"name":"MlG54xlarge","value":"ml.g5.4xlarge"},{"name":"MlG58xlarge","value":"ml.g5.8xlarge"},{"name":"MlG516xlarge","value":"ml.g5.16xlarge"},{"name":"MlG512xlarge","value":"ml.g5.12xlarge"},{"name":"MlG524xlarge","value":"ml.g5.24xlarge"},{"name":"MlG548xlarge","value":"ml.g5.48xlarge"},{"name":"MlR5dLarge","value":"ml.r5d.large"},{"name":"MlR5dXlarge","value":"ml.r5d.xlarge"},{"name":"MlR5d2xlarge","value":"ml.r5d.2xlarge"},{"name":"MlR5d4xlarge","value":"ml.r5d.4xlarge"},{"name":"MlR5d8xlarge","value":"ml.r5d.8xlarge"},{"name":"MlR5d12xlarge","value":"ml.r5d.12xlarge"},{"name":"MlR5d16xlarge","value":"ml.r5d.16xlarge"},{"name":"MlR5d24xlarge","value":"ml.r5d.24xlarge"},{"name":"MlG6Xlarge","value":"ml.g6.xlarge"},{"name":"MlG62xlarge","value":"ml.g6.2xlarge"},{"name":"MlG64xlarge","value":"ml.g6.4xlarge"},{"name":"MlG68xlarge","value":"ml.g6.8xlarge"},{"name":"MlG612xlarge","value":"ml.g6.12xlarge"},{"name":"MlG616xlarge","value":"ml.g6.16xlarge"},{"name":"MlG624xlarge","value":"ml.g6.24xlarge"},{"name":"MlG648xlarge","value":"ml.g6.48xlarge"},{"name":"MlG6eXlarge","value":"ml.g6e.xlarge"},{"name":"MlG6e2xlarge","value":"ml.g6e.2xlarge"},{"name":"MlG6e4xlarge","value":"ml.g6e.4xlarge"},{"name":"MlG6e8xlarge","value":"ml.g6e.8xlarge"},{"name":"MlG6e12xlarge","value":"ml.g6e.12xlarge"},{"name":"MlG6e16xlarge","value":"ml.g6e.16xlarge"},{"name":"MlG6e24xlarge","value":"ml.g6e.24xlarge"},{"name":"MlG6e48xlarge","value":"ml.g6e.48xlarge"},{"name":"MlM6iLarge","value":"ml.m6i.large"},{"name":"MlM6iXlarge","value":"ml.m6i.xlarge"},{"name":"MlM6i2xlarge","value":"ml.m6i.2xlarge"},{"name":"MlM6i4xlarge","value":"ml.m6i.4xlarge"},{"name":"MlM6i8xlarge","value":"ml.m6i.8xlarge"},{"name":"MlM6i12xlarge","value":"ml.m6i.12xlarge"},{"name":"MlM6i16xlarge","value":"ml.m6i.16xlarge"},{"name":"MlM6i24xlarge","value":"ml.m6i.24xlarge"},{"name":"MlM6i32xlarge","value":"ml.m6i.32xlarge"},{"name":"MlC6iXlarge","value":"ml.c6i.xlarge"},{"name":"MlC6i2xlarge","value":"ml.c6i.2xlarge"},{"name":"MlC6i4xlarge","value":"ml.c6i.4xlarge"},{"name":"MlC6i8xlarge","value":"ml.c6i.8xlarge"},{"name":"MlC6i12xlarge","value":"ml.c6i.12xlarge"},{"name":"MlC6i16xlarge","value":"ml.c6i.16xlarge"},{"name":"MlC6i24xlarge","value":"ml.c6i.24xlarge"},{"name":"MlC6i32xlarge","value":"ml.c6i.32xlarge"},{"name":"MlM7iLarge","value":"ml.m7i.large"},{"name":"MlM7iXlarge","value":"ml.m7i.xlarge"},{"name":"MlM7i2xlarge","value":"ml.m7i.2xlarge"},{"name":"MlM7i4xlarge","value":"ml.m7i.4xlarge"},{"name":"MlM7i8xlarge","value":"ml.m7i.8xlarge"},{"name":"MlM7i12xlarge","value":"ml.m7i.12xlarge"},{"name":"MlM7i16xlarge","value":"ml.m7i.16xlarge"},{"name":"MlM7i24xlarge","value":"ml.m7i.24xlarge"},{"name":"MlM7i48xlarge","value":"ml.m7i.48xlarge"},{"name":"MlC7iLarge","value":"ml.c7i.large"},{"name":"MlC7iXlarge","value":"ml.c7i.xlarge"},{"name":"MlC7i2xlarge","value":"ml.c7i.2xlarge"},{"name":"MlC7i4xlarge","value":"ml.c7i.4xlarge"},{"name":"MlC7i8xlarge","value":"ml.c7i.8xlarge"},{"name":"MlC7i12xlarge","value":"ml.c7i.12xlarge"},{"name":"MlC7i16xlarge","value":"ml.c7i.16xlarge"},{"name":"MlC7i24xlarge","value":"ml.c7i.24xlarge"},{"name":"MlC7i48xlarge","value":"ml.c7i.48xlarge"},{"name":"MlR7iLarge","value":"ml.r7i.large"},{"name":"MlR7iXlarge","value":"ml.r7i.xlarge"},{"name":"MlR7i2xlarge","value":"ml.r7i.2xlarge"},{"name":"MlR7i4xlarge","value":"ml.r7i.4xlarge"},{"name":"MlR7i8xlarge","value":"ml.r7i.8xlarge"},{"name":"MlR7i12xlarge","value":"ml.r7i.12xlarge"},{"name":"MlR7i16xlarge","value":"ml.r7i.16xlarge"},{"name":"MlR7i24xlarge","value":"ml.r7i.24xlarge"},{"name":"MlR7i48xlarge","value":"ml.r7i.48xlarge"}]},"aws-native:sagemaker:ProcessingJobDatasetDefinition":{"description":"Configuration for Dataset Definition inputs. The Dataset Definition input must specify exactly one of either `AthenaDatasetDefinition` or `RedshiftDatasetDefinition` types.","properties":{"athenaDatasetDefinition":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobAthenaDatasetDefinition","description":"Configuration for Athena Dataset Definition input."},"dataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobDatasetDefinitionDataDistributionType","description":"Whether the generated dataset is FullyReplicated or ShardedByS3Key (default)."},"inputMode":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobDatasetDefinitionInputMode","description":"Whether to use File or Pipe input mode. In File (default) mode, Amazon SageMaker copies the data from the input source onto the local Amazon Elastic Block Store (Amazon EBS) volumes before starting your training algorithm. This is the most commonly used input mode. In Pipe mode, Amazon SageMaker streams input data from the source directly to your algorithm without using the EBS volume."},"localPath":{"type":"string","description":"The local path where you want Amazon SageMaker to download the Dataset Definition inputs to run a processing job. LocalPath is an absolute path to the input data. This is a required parameter when AppManaged is False (default)."},"redshiftDatasetDefinition":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobRedshiftDatasetDefinition","description":"Configuration for Redshift Dataset Definition input."}},"type":"object"},"aws-native:sagemaker:ProcessingJobDatasetDefinitionDataDistributionType":{"description":"Whether the generated dataset is FullyReplicated or ShardedByS3Key (default).","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ProcessingJobDatasetDefinitionInputMode":{"description":"Whether to use File or Pipe input mode. In File (default) mode, Amazon SageMaker copies the data from the input source onto the local Amazon Elastic Block Store (Amazon EBS) volumes before starting your training algorithm. This is the most commonly used input mode. In Pipe mode, Amazon SageMaker streams input data from the source directly to your algorithm without using the EBS volume.","type":"string","enum":[{"name":"File","value":"File"},{"name":"Pipe","value":"Pipe"}]},"aws-native:sagemaker:ProcessingJobEnvironment":{"description":"Sets the environment variables in the Docker container","type":"object"},"aws-native:sagemaker:ProcessingJobExperimentConfig":{"description":"Associates a SageMaker job as a trial component with an experiment and trial.","properties":{"experimentName":{"type":"string","description":"The name of an existing experiment to associate with the trial component."},"runName":{"type":"string","description":"The name of the experiment run to associate with the trial component."},"trialComponentDisplayName":{"type":"string","description":"The display name for the trial component. If this key isn't specified, the display name is the trial component name."},"trialName":{"type":"string","description":"The name of an existing trial to associate the trial component with. If not specified, a new trial is created."}},"type":"object"},"aws-native:sagemaker:ProcessingJobFeatureStoreOutput":{"description":"Configuration for processing job outputs in Amazon SageMaker Feature Store.","properties":{"featureGroupName":{"type":"string","description":"The name of the Amazon SageMaker FeatureGroup to use as the destination for processing job output. Note that your processing script is responsible for putting records into your Feature Store."}},"type":"object","required":["featureGroupName"]},"aws-native:sagemaker:ProcessingJobNetworkConfig":{"description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","properties":{"enableInterContainerTrafficEncryption":{"type":"boolean","description":"Whether to encrypt all communications between distributed processing jobs. Choose True to encrypt communications. Encryption provides greater security for distributed processing jobs, but the processing might take longer."},"enableNetworkIsolation":{"type":"boolean","description":"Whether to allow inbound and outbound network calls to and from the containers used for the processing job."},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobVpcConfig","description":"Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC. For more information, see [Give SageMaker Access to Resources in your Amazon VPC](https://docs.aws.amazon.com/sagemaker/latest/dg/infrastructure-give-access.html) ."}},"type":"object"},"aws-native:sagemaker:ProcessingJobProcessingInputsObject":{"description":"The inputs for a processing job. The processing input must specify exactly one of either S3Input or DatasetDefinition types.","properties":{"appManaged":{"type":"boolean","description":"When True, input operations such as data download are managed natively by the processing job application. When False (default), input operations are managed by Amazon SageMaker."},"datasetDefinition":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobDatasetDefinition","description":"Configuration for Dataset Definition inputs. The Dataset Definition input must specify exactly one of either `AthenaDatasetDefinition` or `RedshiftDatasetDefinition` types."},"inputName":{"type":"string","description":"The name for the processing job input."},"s3Input":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3Input","description":"Configuration for downloading input data from Amazon S3 into the processing container."}},"type":"object","required":["inputName"]},"aws-native:sagemaker:ProcessingJobProcessingOutputConfig":{"description":"Configuration for uploading output from the processing container.","properties":{"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the processing job output. KmsKeyId can be an ID of a KMS key, ARN of a KMS key, or alias of a KMS key. The KmsKeyId is applied to all outputs."},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingOutputsObject"},"description":"An array of outputs configuring the data to upload from the processing container."}},"type":"object","required":["outputs"]},"aws-native:sagemaker:ProcessingJobProcessingOutputsObject":{"description":"Describes the results of a processing job. The processing output must specify exactly one of either S3Output or FeatureStoreOutput types.","properties":{"appManaged":{"type":"boolean","description":"When True, output operations such as data upload are managed natively by the processing job application. When False (default), output operations are managed by Amazon SageMaker."},"featureStoreOutput":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobFeatureStoreOutput","description":"Configuration for processing job outputs in Amazon SageMaker Feature Store."},"outputName":{"type":"string","description":"The name for the processing job output."},"s3Output":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3Output","description":"Configuration for uploading output data to Amazon S3 from the processing container."}},"type":"object","required":["outputName"]},"aws-native:sagemaker:ProcessingJobProcessingResources":{"description":"Identifies the resources, ML compute instances, and ML storage volumes to deploy for a processing job. In distributed training, you specify more than one instance.","properties":{"clusterConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobClusterConfig","description":"The configuration for the resources in a cluster used to run the processing job."}},"type":"object","required":["clusterConfig"]},"aws-native:sagemaker:ProcessingJobRedshiftDatasetDefinition":{"description":"Configuration for Redshift Dataset Definition input.","properties":{"clusterId":{"type":"string","description":"The Redshift cluster Identifier."},"clusterRoleArn":{"type":"string","description":"The IAM role attached to your Redshift cluster that Amazon SageMaker uses to generate datasets."},"database":{"type":"string","description":"The name of the Redshift database used in Redshift query execution."},"dbUser":{"type":"string","description":"The database user name used in Redshift query execution."},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data from a Redshift execution."},"outputCompression":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobRedshiftDatasetDefinitionOutputCompression","description":"The compression used for Redshift query results."},"outputFormat":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobRedshiftDatasetDefinitionOutputFormat","description":"The data storage format for Redshift query results."},"outputS3Uri":{"type":"string","description":"The location in Amazon S3 where the Redshift query results are stored."},"queryString":{"type":"string","description":"The SQL query statements to be executed."}},"type":"object","required":["clusterId","clusterRoleArn","database","dbUser","outputFormat","outputS3Uri","queryString"]},"aws-native:sagemaker:ProcessingJobRedshiftDatasetDefinitionOutputCompression":{"description":"The compression used for Redshift query results.","type":"string","enum":[{"name":"None","value":"None"},{"name":"Gzip","value":"GZIP"},{"name":"Snappy","value":"SNAPPY"},{"name":"Zstd","value":"ZSTD"},{"name":"Bzip2","value":"BZIP2"}]},"aws-native:sagemaker:ProcessingJobRedshiftDatasetDefinitionOutputFormat":{"description":"The data storage format for Redshift query results.","type":"string","enum":[{"name":"Parquet","value":"PARQUET"},{"name":"Csv","value":"CSV"}]},"aws-native:sagemaker:ProcessingJobS3Input":{"description":"Configuration for downloading input data from Amazon S3 into the processing container.","properties":{"localPath":{"type":"string","description":"The local path in your container where you want Amazon SageMaker to write input data to. `LocalPath` is an absolute path to the input data and must begin with `/opt/ml/processing/`. LocalPath is a required parameter when `AppManaged` is `False` (default)."},"s3CompressionType":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3InputS3CompressionType","description":"Whether to GZIP-decompress the data in Amazon S3 as it is streamed into the processing container. `Gzip` can only be used when `Pipe` mode is specified as the `S3InputMode`. In `Pipe` mode, Amazon SageMaker streams input data from the source directly to your container without using the EBS volume."},"s3DataDistributionType":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3InputS3DataDistributionType","description":"Whether to distribute the data from Amazon S3 to all processing instances with `FullyReplicated`, or whether the data from Amazon S3 is shared by Amazon S3 key, downloading one shard of data to each processing instance."},"s3DataType":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3InputS3DataType","description":"Whether you use an S3Prefix or a ManifestFile for the data type. If you choose S3Prefix, S3Uri identifies a key name prefix. Amazon SageMaker uses all objects with the specified key name prefix for the processing job. If you choose ManifestFile, S3Uri identifies an object that is a manifest file containing a list of object keys that you want Amazon SageMaker to use for the processing job."},"s3InputMode":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3InputS3InputMode","description":"Whether to use File or Pipe input mode. In File mode, Amazon SageMaker copies the data from the input source onto the local ML storage volume before starting your processing container. This is the most commonly used input mode. In Pipe mode, Amazon SageMaker streams input data from the source directly to your processing container into named pipes without using the ML storage volume."},"s3Uri":{"type":"string","description":"The URI of the Amazon S3 prefix Amazon SageMaker downloads data required to run a processing job."}},"type":"object","required":["s3DataType","s3Uri"]},"aws-native:sagemaker:ProcessingJobS3InputS3CompressionType":{"description":"Whether to GZIP-decompress the data in Amazon S3 as it is streamed into the processing container. `Gzip` can only be used when `Pipe` mode is specified as the `S3InputMode`. In `Pipe` mode, Amazon SageMaker streams input data from the source directly to your container without using the EBS volume.","type":"string","enum":[{"name":"None","value":"None"},{"name":"Gzip","value":"Gzip"}]},"aws-native:sagemaker:ProcessingJobS3InputS3DataDistributionType":{"description":"Whether to distribute the data from Amazon S3 to all processing instances with `FullyReplicated`, or whether the data from Amazon S3 is shared by Amazon S3 key, downloading one shard of data to each processing instance.","type":"string","enum":[{"name":"FullyReplicated","value":"FullyReplicated"},{"name":"ShardedByS3Key","value":"ShardedByS3Key"}]},"aws-native:sagemaker:ProcessingJobS3InputS3DataType":{"description":"Whether you use an S3Prefix or a ManifestFile for the data type. If you choose S3Prefix, S3Uri identifies a key name prefix. Amazon SageMaker uses all objects with the specified key name prefix for the processing job. If you choose ManifestFile, S3Uri identifies an object that is a manifest file containing a list of object keys that you want Amazon SageMaker to use for the processing job.","type":"string","enum":[{"name":"ManifestFile","value":"ManifestFile"},{"name":"S3Prefix","value":"S3Prefix"}]},"aws-native:sagemaker:ProcessingJobS3InputS3InputMode":{"description":"Whether to use File or Pipe input mode. In File mode, Amazon SageMaker copies the data from the input source onto the local ML storage volume before starting your processing container. This is the most commonly used input mode. In Pipe mode, Amazon SageMaker streams input data from the source directly to your processing container into named pipes without using the ML storage volume.","type":"string","enum":[{"name":"File","value":"File"},{"name":"Pipe","value":"Pipe"}]},"aws-native:sagemaker:ProcessingJobS3Output":{"description":"Configuration for uploading output data to Amazon S3 from the processing container.","properties":{"localPath":{"type":"string","description":"The local path of a directory where you want Amazon SageMaker to upload its contents to Amazon S3. LocalPath is an absolute path to a directory containing output files. This directory will be created by the platform and exist when your container's entrypoint is invoked."},"s3UploadMode":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobS3OutputS3UploadMode","description":"Whether to upload the results of the processing job continuously or after the job completes."},"s3Uri":{"type":"string","description":"A URI that identifies the Amazon S3 bucket where you want Amazon SageMaker to save the results of a processing job."}},"type":"object","required":["s3UploadMode","s3Uri"]},"aws-native:sagemaker:ProcessingJobS3OutputS3UploadMode":{"description":"Whether to upload the results of the processing job continuously or after the job completes.","type":"string","enum":[{"name":"Continuous","value":"Continuous"},{"name":"EndOfJob","value":"EndOfJob"}]},"aws-native:sagemaker:ProcessingJobStatus":{"description":"Provides the status of a processing job.","type":"string","enum":[{"name":"Completed","value":"Completed"},{"name":"InProgress","value":"InProgress"},{"name":"Stopping","value":"Stopping"},{"name":"Stopped","value":"Stopped"},{"name":"Failed","value":"Failed"}]},"aws-native:sagemaker:ProcessingJobStoppingCondition":{"description":"Configures conditions under which the processing job should be stopped, such as how long the processing job has been running. After the condition is met, the processing job is stopped.","properties":{"maxRuntimeInSeconds":{"type":"integer","description":"Specifies the maximum runtime in seconds."}},"type":"object","required":["maxRuntimeInSeconds"]},"aws-native:sagemaker:ProcessingJobTag":{"description":"A tag object that consists of a key and an optional value, used to manage metadata for SageMaker AWS resources.\nYou can add tags to notebook instances, training jobs, hyperparameter tuning jobs, batch transform jobs, models, labeling jobs, work teams, endpoint configurations, and endpoints. For more information on adding tags to SageMaker resources, see AddTags(https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddTags.html).\nFor more information on adding metadata to your AWS resources with tagging, see Tagging AWS resources(https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html). For advice on best practices for managing AWS resources with tagging, see Tagging Best Practices: Implement an Effective AWS Resource Tagging Strategy(https://d1.awsstatic.com/whitepapers/aws-tagging-best-practices.pdf).","properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ProcessingJobVpcConfig":{"description":"Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC. For more information, see https://docs.aws.amazon.com/sagemaker/latest/dg/infrastructure-give-access.html","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The VPC security group IDs, in the form 'sg-xxxxxxxx'. Specify the security groups for the VPC that is specified in the 'Subnets' field."},"subnets":{"type":"array","items":{"type":"string"},"description":"The ID of the subnets in the VPC to which you want to connect your training job or model. For information about the availability of specific instance types, see https://docs.aws.amazon.com/sagemaker/latest/dg/regions-quotas.html"}},"type":"object","required":["securityGroupIds","subnets"]},"aws-native:sagemaker:ProjectCfnStackParameter":{"properties":{"key":{"type":"string","description":"The key of the parameter."},"value":{"type":"string","description":"The value of the parameter."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ProjectCfnTemplateProviderDetail":{"description":"CloudFormation template provider details for a SageMaker project.","properties":{"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProjectCfnStackParameter"},"description":"An array of CloudFormation stack parameters."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used by the template provider."},"templateName":{"type":"string","description":"The name of the template used for the project."},"templateUrl":{"type":"string","description":"The URL of the CloudFormation template."}},"type":"object","required":["templateName","templateUrl"]},"aws-native:sagemaker:ProjectProvisioningParameter":{"description":"Information about a parameter used to provision a product.","properties":{"key":{"type":"string","description":"The parameter key."},"value":{"type":"string","description":"The parameter value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ProjectStatus":{"description":"The status of a project.","type":"string","enum":[{"name":"Pending","value":"Pending"},{"name":"CreateInProgress","value":"CreateInProgress"},{"name":"CreateCompleted","value":"CreateCompleted"},{"name":"CreateFailed","value":"CreateFailed"},{"name":"DeleteInProgress","value":"DeleteInProgress"},{"name":"DeleteFailed","value":"DeleteFailed"},{"name":"DeleteCompleted","value":"DeleteCompleted"}]},"aws-native:sagemaker:ProjectTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:sagemaker:ProjectTemplateProviderDetail":{"description":"Details about the template provider for the SageMaker project.","properties":{"cfnTemplateProviderDetail":{"$ref":"#/types/aws-native:sagemaker:ProjectCfnTemplateProviderDetail","description":"Details about a CloudFormation template provider configuration and associated provisioning information."}},"type":"object"},"aws-native:sagemaker:ServiceCatalogProvisionedProductDetailsProperties":{"description":"Provisioned ServiceCatalog  Details","properties":{"provisionedProductId":{"type":"string","description":"The ID of the provisioned product."},"provisionedProductStatusMessage":{"type":"string","description":"The current status of the product.\n\n- `AVAILABLE` - Stable state, ready to perform any operation. The most recent operation succeeded and completed.\n- `UNDER_CHANGE` - Transitive state. Operations performed might not have valid results. Wait for an AVAILABLE status before performing operations.\n- `TAINTED` - Stable state, ready to perform any operation. The stack has completed the requested operation but is not exactly what was requested. For example, a request to update to a new version failed and the stack rolled back to the current version.\n- `ERROR` - An unexpected error occurred. The provisioned product exists but the stack is not running. For example, CloudFormation received a parameter value that was not valid and could not launch the stack.\n- `PLAN_IN_PROGRESS` - Transitive state. The plan operations were performed to provision a new product, but resources have not yet been created. After reviewing the list of resources to be created, execute the plan. Wait for an AVAILABLE status before performing operations."}},"type":"object"},"aws-native:sagemaker:ServiceCatalogProvisioningDetailsProperties":{"description":"Input ServiceCatalog Provisioning Details","properties":{"pathId":{"type":"string","description":"The path identifier of the product. This value is optional if the product has a default path, and required if the product has more than one path."},"productId":{"type":"string","description":"The ID of the product to provision."},"provisioningArtifactId":{"type":"string","description":"The ID of the provisioning artifact."},"provisioningParameters":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProjectProvisioningParameter"},"description":"Parameters specified by the administrator that are required for provisioning the product."}},"type":"object","required":["productId"]},"aws-native:sagemaker:SpaceAppLifecycleManagement":{"properties":{"idleSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceIdleSettings","description":"Settings related to idle shutdown of Studio applications."}},"type":"object"},"aws-native:sagemaker:SpaceAppType":{"type":"string","enum":[{"name":"JupyterServer","value":"JupyterServer"},{"name":"KernelGateway","value":"KernelGateway"},{"name":"TensorBoard","value":"TensorBoard"},{"name":"RStudioServerPro","value":"RStudioServerPro"},{"name":"RSessionGateway","value":"RSessionGateway"},{"name":"JupyterLab","value":"JupyterLab"},{"name":"CodeEditor","value":"CodeEditor"}]},"aws-native:sagemaker:SpaceCodeEditorAppSettings":{"description":"The CodeEditor app settings.","properties":{"appLifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:SpaceAppLifecycleManagement","description":"Settings that are used to configure and manage the lifecycle of CodeEditor applications in a space."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:SpaceResourceSpec","description":"Specifies the ARNs of a SageMaker image and SageMaker image version, and the instance type that the version runs on."}},"type":"object"},"aws-native:sagemaker:SpaceCodeRepository":{"properties":{"repositoryUrl":{"type":"string","description":"A CodeRepository (valid URL) to be used within Jupyter's Git extension."}},"type":"object","required":["repositoryUrl"]},"aws-native:sagemaker:SpaceCustomFileSystem":{"properties":{"efsFileSystem":{"$ref":"#/types/aws-native:sagemaker:SpaceEfsFileSystem"},"fSxLustreFileSystem":{"$ref":"#/types/aws-native:sagemaker:SpaceFSxLustreFileSystem"},"s3FileSystem":{"$ref":"#/types/aws-native:sagemaker:SpaceS3FileSystem"}},"type":"object"},"aws-native:sagemaker:SpaceCustomImage":{"description":"A custom SageMaker image.","properties":{"appImageConfigName":{"type":"string","description":"The Name of the AppImageConfig."},"imageName":{"type":"string","description":"The name of the CustomImage. Must be unique to your account."},"imageVersionNumber":{"type":"integer","description":"The version number of the CustomImage."}},"type":"object","required":["appImageConfigName","imageName"]},"aws-native:sagemaker:SpaceEbsStorageSettings":{"description":"Properties related to the space's Amazon Elastic Block Store volume.","properties":{"ebsVolumeSizeInGb":{"type":"integer","description":"Size of the Amazon EBS volume in Gb"}},"type":"object","required":["ebsVolumeSizeInGb"]},"aws-native:sagemaker:SpaceEfsFileSystem":{"properties":{"fileSystemId":{"type":"string"}},"type":"object","required":["fileSystemId"]},"aws-native:sagemaker:SpaceFSxLustreFileSystem":{"properties":{"fileSystemId":{"type":"string"}},"type":"object","required":["fileSystemId"]},"aws-native:sagemaker:SpaceIdleSettings":{"properties":{"idleTimeoutInMinutes":{"type":"integer","description":"The space idle timeout value set in minutes"}},"type":"object"},"aws-native:sagemaker:SpaceJupyterLabAppSettings":{"description":"The JupyterServer app settings.","properties":{"appLifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:SpaceAppLifecycleManagement","description":"Settings that are used to configure and manage the lifecycle of JupyterLab applications in a space."},"codeRepositories":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:SpaceCodeRepository"},"description":"A list of CodeRepositories available for use with JupyterLab apps."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:SpaceResourceSpec","description":"Specifies the ARNs of a SageMaker image and SageMaker image version, and the instance type that the version runs on."}},"type":"object"},"aws-native:sagemaker:SpaceJupyterServerAppSettings":{"description":"The JupyterServer app settings.","properties":{"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:SpaceResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker AI image used by the JupyterServer app. If you use the `LifecycleConfigArns` parameter, then this parameter is also required."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with JupyterServer apps."}},"type":"object"},"aws-native:sagemaker:SpaceKernelGatewayAppSettings":{"description":"The kernel gateway app settings.","properties":{"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:SpaceCustomImage"},"description":"A list of custom SageMaker images that are configured to run as a KernelGateway app."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:SpaceResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the KernelGateway app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with KernelGateway apps."}},"type":"object"},"aws-native:sagemaker:SpaceManagedResources":{"description":"The flag to enable/disable creation of space managed resources.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:SpaceOwnershipSettings":{"properties":{"ownerUserProfileName":{"type":"string","description":"The user profile who is the owner of the space."}},"type":"object","required":["ownerUserProfileName"]},"aws-native:sagemaker:SpaceRemoteAccess":{"description":"The flag to enable/disable remote access for a space.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:SpaceResourceSpec":{"properties":{"instanceType":{"$ref":"#/types/aws-native:sagemaker:SpaceResourceSpecInstanceType","description":"The instance type that the image version runs on."},"lifecycleConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lifecycle Configuration to attach to the Resource."},"sageMakerImageArn":{"type":"string","description":"The ARN of the SageMaker image that the image version belongs to."},"sageMakerImageVersionArn":{"type":"string","description":"The ARN of the image version created on the instance."}},"type":"object"},"aws-native:sagemaker:SpaceResourceSpecInstanceType":{"description":"The instance type that the image version runs on.","type":"string","enum":[{"name":"System","value":"system"},{"name":"MlT3Micro","value":"ml.t3.micro"},{"name":"MlT3Small","value":"ml.t3.small"},{"name":"MlT3Medium","value":"ml.t3.medium"},{"name":"MlT3Large","value":"ml.t3.large"},{"name":"MlT3Xlarge","value":"ml.t3.xlarge"},{"name":"MlT32xlarge","value":"ml.t3.2xlarge"},{"name":"MlM5Large","value":"ml.m5.large"},{"name":"MlM5Xlarge","value":"ml.m5.xlarge"},{"name":"MlM52xlarge","value":"ml.m5.2xlarge"},{"name":"MlM54xlarge","value":"ml.m5.4xlarge"},{"name":"MlM58xlarge","value":"ml.m5.8xlarge"},{"name":"MlM512xlarge","value":"ml.m5.12xlarge"},{"name":"MlM516xlarge","value":"ml.m5.16xlarge"},{"name":"MlM524xlarge","value":"ml.m5.24xlarge"},{"name":"MlM5dLarge","value":"ml.m5d.large"},{"name":"MlM5dXlarge","value":"ml.m5d.xlarge"},{"name":"MlM5d2xlarge","value":"ml.m5d.2xlarge"},{"name":"MlM5d4xlarge","value":"ml.m5d.4xlarge"},{"name":"MlM5d8xlarge","value":"ml.m5d.8xlarge"},{"name":"MlM5d12xlarge","value":"ml.m5d.12xlarge"},{"name":"MlM5d16xlarge","value":"ml.m5d.16xlarge"},{"name":"MlM5d24xlarge","value":"ml.m5d.24xlarge"},{"name":"MlC5Large","value":"ml.c5.large"},{"name":"MlC5Xlarge","value":"ml.c5.xlarge"},{"name":"MlC52xlarge","value":"ml.c5.2xlarge"},{"name":"MlC54xlarge","value":"ml.c5.4xlarge"},{"name":"MlC59xlarge","value":"ml.c5.9xlarge"},{"name":"MlC512xlarge","value":"ml.c5.12xlarge"},{"name":"MlC518xlarge","value":"ml.c5.18xlarge"},{"name":"MlC524xlarge","value":"ml.c5.24xlarge"},{"name":"MlP32xlarge","value":"ml.p3.2xlarge"},{"name":"MlP38xlarge","value":"ml.p3.8xlarge"},{"name":"MlP316xlarge","value":"ml.p3.16xlarge"},{"name":"MlP3dn24xlarge","value":"ml.p3dn.24xlarge"},{"name":"MlG4dnXlarge","value":"ml.g4dn.xlarge"},{"name":"MlG4dn2xlarge","value":"ml.g4dn.2xlarge"},{"name":"MlG4dn4xlarge","value":"ml.g4dn.4xlarge"},{"name":"MlG4dn8xlarge","value":"ml.g4dn.8xlarge"},{"name":"MlG4dn12xlarge","value":"ml.g4dn.12xlarge"},{"name":"MlG4dn16xlarge","value":"ml.g4dn.16xlarge"},{"name":"MlR5Large","value":"ml.r5.large"},{"name":"MlR5Xlarge","value":"ml.r5.xlarge"},{"name":"MlR52xlarge","value":"ml.r5.2xlarge"},{"name":"MlR54xlarge","value":"ml.r5.4xlarge"},{"name":"MlR58xlarge","value":"ml.r5.8xlarge"},{"name":"MlR512xlarge","value":"ml.r5.12xlarge"},{"name":"MlR516xlarge","value":"ml.r5.16xlarge"},{"name":"MlR524xlarge","value":"ml.r5.24xlarge"},{"name":"MlG5Xlarge","value":"ml.g5.xlarge"},{"name":"MlG52xlarge","value":"ml.g5.2xlarge"},{"name":"MlG54xlarge","value":"ml.g5.4xlarge"},{"name":"MlG58xlarge","value":"ml.g5.8xlarge"},{"name":"MlG512xlarge","value":"ml.g5.12xlarge"},{"name":"MlG516xlarge","value":"ml.g5.16xlarge"},{"name":"MlG524xlarge","value":"ml.g5.24xlarge"},{"name":"MlG548xlarge","value":"ml.g5.48xlarge"},{"name":"MlG6Xlarge","value":"ml.g6.xlarge"},{"name":"MlG62xlarge","value":"ml.g6.2xlarge"},{"name":"MlG64xlarge","value":"ml.g6.4xlarge"},{"name":"MlG68xlarge","value":"ml.g6.8xlarge"},{"name":"MlG612xlarge","value":"ml.g6.12xlarge"},{"name":"MlG616xlarge","value":"ml.g6.16xlarge"},{"name":"MlG624xlarge","value":"ml.g6.24xlarge"},{"name":"MlG648xlarge","value":"ml.g6.48xlarge"},{"name":"MlG6eXlarge","value":"ml.g6e.xlarge"},{"name":"MlG6e2xlarge","value":"ml.g6e.2xlarge"},{"name":"MlG6e4xlarge","value":"ml.g6e.4xlarge"},{"name":"MlG6e8xlarge","value":"ml.g6e.8xlarge"},{"name":"MlG6e12xlarge","value":"ml.g6e.12xlarge"},{"name":"MlG6e16xlarge","value":"ml.g6e.16xlarge"},{"name":"MlG6e24xlarge","value":"ml.g6e.24xlarge"},{"name":"MlG6e48xlarge","value":"ml.g6e.48xlarge"},{"name":"MlGeospatialInteractive","value":"ml.geospatial.interactive"},{"name":"MlP4d24xlarge","value":"ml.p4d.24xlarge"},{"name":"MlP4de24xlarge","value":"ml.p4de.24xlarge"},{"name":"MlTrn12xlarge","value":"ml.trn1.2xlarge"},{"name":"MlTrn132xlarge","value":"ml.trn1.32xlarge"},{"name":"MlTrn1n32xlarge","value":"ml.trn1n.32xlarge"},{"name":"MlP548xlarge","value":"ml.p5.48xlarge"},{"name":"MlP5e48xlarge","value":"ml.p5e.48xlarge"},{"name":"MlP5en48xlarge","value":"ml.p5en.48xlarge"},{"name":"MlM6iLarge","value":"ml.m6i.large"},{"name":"MlM6iXlarge","value":"ml.m6i.xlarge"},{"name":"MlM6i2xlarge","value":"ml.m6i.2xlarge"},{"name":"MlM6i4xlarge","value":"ml.m6i.4xlarge"},{"name":"MlM6i8xlarge","value":"ml.m6i.8xlarge"},{"name":"MlM6i12xlarge","value":"ml.m6i.12xlarge"},{"name":"MlM6i16xlarge","value":"ml.m6i.16xlarge"},{"name":"MlM6i24xlarge","value":"ml.m6i.24xlarge"},{"name":"MlM6i32xlarge","value":"ml.m6i.32xlarge"},{"name":"MlM7iLarge","value":"ml.m7i.large"},{"name":"MlM7iXlarge","value":"ml.m7i.xlarge"},{"name":"MlM7i2xlarge","value":"ml.m7i.2xlarge"},{"name":"MlM7i4xlarge","value":"ml.m7i.4xlarge"},{"name":"MlM7i8xlarge","value":"ml.m7i.8xlarge"},{"name":"MlM7i12xlarge","value":"ml.m7i.12xlarge"},{"name":"MlM7i16xlarge","value":"ml.m7i.16xlarge"},{"name":"MlM7i24xlarge","value":"ml.m7i.24xlarge"},{"name":"MlM7i48xlarge","value":"ml.m7i.48xlarge"},{"name":"MlC6iLarge","value":"ml.c6i.large"},{"name":"MlC6iXlarge","value":"ml.c6i.xlarge"},{"name":"MlC6i2xlarge","value":"ml.c6i.2xlarge"},{"name":"MlC6i4xlarge","value":"ml.c6i.4xlarge"},{"name":"MlC6i8xlarge","value":"ml.c6i.8xlarge"},{"name":"MlC6i12xlarge","value":"ml.c6i.12xlarge"},{"name":"MlC6i16xlarge","value":"ml.c6i.16xlarge"},{"name":"MlC6i24xlarge","value":"ml.c6i.24xlarge"},{"name":"MlC6i32xlarge","value":"ml.c6i.32xlarge"},{"name":"MlC7iLarge","value":"ml.c7i.large"},{"name":"MlC7iXlarge","value":"ml.c7i.xlarge"},{"name":"MlC7i2xlarge","value":"ml.c7i.2xlarge"},{"name":"MlC7i4xlarge","value":"ml.c7i.4xlarge"},{"name":"MlC7i8xlarge","value":"ml.c7i.8xlarge"},{"name":"MlC7i12xlarge","value":"ml.c7i.12xlarge"},{"name":"MlC7i16xlarge","value":"ml.c7i.16xlarge"},{"name":"MlC7i24xlarge","value":"ml.c7i.24xlarge"},{"name":"MlC7i48xlarge","value":"ml.c7i.48xlarge"},{"name":"MlR6iLarge","value":"ml.r6i.large"},{"name":"MlR6iXlarge","value":"ml.r6i.xlarge"},{"name":"MlR6i2xlarge","value":"ml.r6i.2xlarge"},{"name":"MlR6i4xlarge","value":"ml.r6i.4xlarge"},{"name":"MlR6i8xlarge","value":"ml.r6i.8xlarge"},{"name":"MlR6i12xlarge","value":"ml.r6i.12xlarge"},{"name":"MlR6i16xlarge","value":"ml.r6i.16xlarge"},{"name":"MlR6i24xlarge","value":"ml.r6i.24xlarge"},{"name":"MlR6i32xlarge","value":"ml.r6i.32xlarge"},{"name":"MlR7iLarge","value":"ml.r7i.large"},{"name":"MlR7iXlarge","value":"ml.r7i.xlarge"},{"name":"MlR7i2xlarge","value":"ml.r7i.2xlarge"},{"name":"MlR7i4xlarge","value":"ml.r7i.4xlarge"},{"name":"MlR7i8xlarge","value":"ml.r7i.8xlarge"},{"name":"MlR7i12xlarge","value":"ml.r7i.12xlarge"},{"name":"MlR7i16xlarge","value":"ml.r7i.16xlarge"},{"name":"MlR7i24xlarge","value":"ml.r7i.24xlarge"},{"name":"MlR7i48xlarge","value":"ml.r7i.48xlarge"},{"name":"MlM6idLarge","value":"ml.m6id.large"},{"name":"MlM6idXlarge","value":"ml.m6id.xlarge"},{"name":"MlM6id2xlarge","value":"ml.m6id.2xlarge"},{"name":"MlM6id4xlarge","value":"ml.m6id.4xlarge"},{"name":"MlM6id8xlarge","value":"ml.m6id.8xlarge"},{"name":"MlM6id12xlarge","value":"ml.m6id.12xlarge"},{"name":"MlM6id16xlarge","value":"ml.m6id.16xlarge"},{"name":"MlM6id24xlarge","value":"ml.m6id.24xlarge"},{"name":"MlM6id32xlarge","value":"ml.m6id.32xlarge"},{"name":"MlC6idLarge","value":"ml.c6id.large"},{"name":"MlC6idXlarge","value":"ml.c6id.xlarge"},{"name":"MlC6id2xlarge","value":"ml.c6id.2xlarge"},{"name":"MlC6id4xlarge","value":"ml.c6id.4xlarge"},{"name":"MlC6id8xlarge","value":"ml.c6id.8xlarge"},{"name":"MlC6id12xlarge","value":"ml.c6id.12xlarge"},{"name":"MlC6id16xlarge","value":"ml.c6id.16xlarge"},{"name":"MlC6id24xlarge","value":"ml.c6id.24xlarge"},{"name":"MlC6id32xlarge","value":"ml.c6id.32xlarge"},{"name":"MlR6idLarge","value":"ml.r6id.large"},{"name":"MlR6idXlarge","value":"ml.r6id.xlarge"},{"name":"MlR6id2xlarge","value":"ml.r6id.2xlarge"},{"name":"MlR6id4xlarge","value":"ml.r6id.4xlarge"},{"name":"MlR6id8xlarge","value":"ml.r6id.8xlarge"},{"name":"MlR6id12xlarge","value":"ml.r6id.12xlarge"},{"name":"MlR6id16xlarge","value":"ml.r6id.16xlarge"},{"name":"MlR6id24xlarge","value":"ml.r6id.24xlarge"},{"name":"MlR6id32xlarge","value":"ml.r6id.32xlarge"}]},"aws-native:sagemaker:SpaceS3FileSystem":{"properties":{"s3Uri":{"type":"string"}},"type":"object"},"aws-native:sagemaker:SpaceSettings":{"description":"A collection of settings that apply to spaces of Amazon SageMaker Studio. These settings are specified when the CreateSpace API is called.","properties":{"appType":{"$ref":"#/types/aws-native:sagemaker:SpaceAppType","description":"The type of app created within the space.\n\nIf using the [UpdateSpace](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_UpdateSpace.html) API, you can't change the app type of your space by specifying a different value for this field."},"codeEditorAppSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceCodeEditorAppSettings","description":"The CodeEditor app settings."},"customFileSystems":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:SpaceCustomFileSystem"},"description":"A file system, created by you, that you assign to a space for an Amazon SageMaker AI Domain. Permitted users can access this file system in Amazon SageMaker AI Studio."},"jupyterLabAppSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceJupyterLabAppSettings","description":"The JupyterLab app settings."},"jupyterServerAppSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceJupyterServerAppSettings","description":"The Jupyter server's app settings."},"kernelGatewayAppSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceKernelGatewayAppSettings","description":"The kernel gateway app settings."},"remoteAccess":{"$ref":"#/types/aws-native:sagemaker:SpaceRemoteAccess","description":"This is a flag used to indicate if remote access is enabled."},"spaceManagedResources":{"$ref":"#/types/aws-native:sagemaker:SpaceManagedResources","description":"This is a flag used to indicate if space managed resources needs to be created."},"spaceStorageSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceStorageSettings","description":"Default storage settings for a space."}},"type":"object"},"aws-native:sagemaker:SpaceSharingSettings":{"properties":{"sharingType":{"$ref":"#/types/aws-native:sagemaker:SpaceSharingSettingsSharingType","description":"Specifies the sharing type of the space."}},"type":"object","required":["sharingType"]},"aws-native:sagemaker:SpaceSharingSettingsSharingType":{"description":"Specifies the sharing type of the space.","type":"string","enum":[{"name":"Private","value":"Private"},{"name":"Shared","value":"Shared"}]},"aws-native:sagemaker:SpaceStorageSettings":{"properties":{"ebsStorageSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceEbsStorageSettings","description":"A collection of EBS storage settings for a space."}},"type":"object"},"aws-native:sagemaker:SpaceTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:StudioLifecycleConfigAppType":{"description":"The App type that the Lifecycle Configuration is attached to.","type":"string","enum":[{"name":"JupyterServer","value":"JupyterServer"},{"name":"KernelGateway","value":"KernelGateway"},{"name":"CodeEditor","value":"CodeEditor"},{"name":"JupyterLab","value":"JupyterLab"}]},"aws-native:sagemaker:StudioLifecycleConfigTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:UserProfileAppInstanceType":{"description":"The instance type that the image version runs on.","type":"string","enum":[{"name":"System","value":"system"},{"name":"MlT3Micro","value":"ml.t3.micro"},{"name":"MlT3Small","value":"ml.t3.small"},{"name":"MlT3Medium","value":"ml.t3.medium"},{"name":"MlT3Large","value":"ml.t3.large"},{"name":"MlT3Xlarge","value":"ml.t3.xlarge"},{"name":"MlT32xlarge","value":"ml.t3.2xlarge"},{"name":"MlM5Large","value":"ml.m5.large"},{"name":"MlM5Xlarge","value":"ml.m5.xlarge"},{"name":"MlM52xlarge","value":"ml.m5.2xlarge"},{"name":"MlM54xlarge","value":"ml.m5.4xlarge"},{"name":"MlM58xlarge","value":"ml.m5.8xlarge"},{"name":"MlM512xlarge","value":"ml.m5.12xlarge"},{"name":"MlM516xlarge","value":"ml.m5.16xlarge"},{"name":"MlM524xlarge","value":"ml.m5.24xlarge"},{"name":"MlM5dLarge","value":"ml.m5d.large"},{"name":"MlM5dXlarge","value":"ml.m5d.xlarge"},{"name":"MlM5d2xlarge","value":"ml.m5d.2xlarge"},{"name":"MlM5d4xlarge","value":"ml.m5d.4xlarge"},{"name":"MlM5d8xlarge","value":"ml.m5d.8xlarge"},{"name":"MlM5d12xlarge","value":"ml.m5d.12xlarge"},{"name":"MlM5d16xlarge","value":"ml.m5d.16xlarge"},{"name":"MlM5d24xlarge","value":"ml.m5d.24xlarge"},{"name":"MlC5Large","value":"ml.c5.large"},{"name":"MlC5Xlarge","value":"ml.c5.xlarge"},{"name":"MlC52xlarge","value":"ml.c5.2xlarge"},{"name":"MlC54xlarge","value":"ml.c5.4xlarge"},{"name":"MlC59xlarge","value":"ml.c5.9xlarge"},{"name":"MlC512xlarge","value":"ml.c5.12xlarge"},{"name":"MlC518xlarge","value":"ml.c5.18xlarge"},{"name":"MlC524xlarge","value":"ml.c5.24xlarge"},{"name":"MlP32xlarge","value":"ml.p3.2xlarge"},{"name":"MlP38xlarge","value":"ml.p3.8xlarge"},{"name":"MlP316xlarge","value":"ml.p3.16xlarge"},{"name":"MlP3dn24xlarge","value":"ml.p3dn.24xlarge"},{"name":"MlG4dnXlarge","value":"ml.g4dn.xlarge"},{"name":"MlG4dn2xlarge","value":"ml.g4dn.2xlarge"},{"name":"MlG4dn4xlarge","value":"ml.g4dn.4xlarge"},{"name":"MlG4dn8xlarge","value":"ml.g4dn.8xlarge"},{"name":"MlG4dn12xlarge","value":"ml.g4dn.12xlarge"},{"name":"MlG4dn16xlarge","value":"ml.g4dn.16xlarge"},{"name":"MlR5Large","value":"ml.r5.large"},{"name":"MlR5Xlarge","value":"ml.r5.xlarge"},{"name":"MlR52xlarge","value":"ml.r5.2xlarge"},{"name":"MlR54xlarge","value":"ml.r5.4xlarge"},{"name":"MlR58xlarge","value":"ml.r5.8xlarge"},{"name":"MlR512xlarge","value":"ml.r5.12xlarge"},{"name":"MlR516xlarge","value":"ml.r5.16xlarge"},{"name":"MlR524xlarge","value":"ml.r5.24xlarge"},{"name":"MlG5Xlarge","value":"ml.g5.xlarge"},{"name":"MlG52xlarge","value":"ml.g5.2xlarge"},{"name":"MlG54xlarge","value":"ml.g5.4xlarge"},{"name":"MlG58xlarge","value":"ml.g5.8xlarge"},{"name":"MlG512xlarge","value":"ml.g5.12xlarge"},{"name":"MlG516xlarge","value":"ml.g5.16xlarge"},{"name":"MlG524xlarge","value":"ml.g5.24xlarge"},{"name":"MlG548xlarge","value":"ml.g5.48xlarge"},{"name":"MlG6Xlarge","value":"ml.g6.xlarge"},{"name":"MlG62xlarge","value":"ml.g6.2xlarge"},{"name":"MlG64xlarge","value":"ml.g6.4xlarge"},{"name":"MlG68xlarge","value":"ml.g6.8xlarge"},{"name":"MlG612xlarge","value":"ml.g6.12xlarge"},{"name":"MlG616xlarge","value":"ml.g6.16xlarge"},{"name":"MlG624xlarge","value":"ml.g6.24xlarge"},{"name":"MlG648xlarge","value":"ml.g6.48xlarge"},{"name":"MlG6eXlarge","value":"ml.g6e.xlarge"},{"name":"MlG6e2xlarge","value":"ml.g6e.2xlarge"},{"name":"MlG6e4xlarge","value":"ml.g6e.4xlarge"},{"name":"MlG6e8xlarge","value":"ml.g6e.8xlarge"},{"name":"MlG6e12xlarge","value":"ml.g6e.12xlarge"},{"name":"MlG6e16xlarge","value":"ml.g6e.16xlarge"},{"name":"MlG6e24xlarge","value":"ml.g6e.24xlarge"},{"name":"MlG6e48xlarge","value":"ml.g6e.48xlarge"},{"name":"MlGeospatialInteractive","value":"ml.geospatial.interactive"},{"name":"MlP4d24xlarge","value":"ml.p4d.24xlarge"},{"name":"MlP4de24xlarge","value":"ml.p4de.24xlarge"},{"name":"MlTrn12xlarge","value":"ml.trn1.2xlarge"},{"name":"MlTrn132xlarge","value":"ml.trn1.32xlarge"},{"name":"MlTrn1n32xlarge","value":"ml.trn1n.32xlarge"},{"name":"MlP548xlarge","value":"ml.p5.48xlarge"},{"name":"MlP5e48xlarge","value":"ml.p5e.48xlarge"},{"name":"MlP5en48xlarge","value":"ml.p5en.48xlarge"},{"name":"MlM6iLarge","value":"ml.m6i.large"},{"name":"MlM6iXlarge","value":"ml.m6i.xlarge"},{"name":"MlM6i2xlarge","value":"ml.m6i.2xlarge"},{"name":"MlM6i4xlarge","value":"ml.m6i.4xlarge"},{"name":"MlM6i8xlarge","value":"ml.m6i.8xlarge"},{"name":"MlM6i12xlarge","value":"ml.m6i.12xlarge"},{"name":"MlM6i16xlarge","value":"ml.m6i.16xlarge"},{"name":"MlM6i24xlarge","value":"ml.m6i.24xlarge"},{"name":"MlM6i32xlarge","value":"ml.m6i.32xlarge"},{"name":"MlM7iLarge","value":"ml.m7i.large"},{"name":"MlM7iXlarge","value":"ml.m7i.xlarge"},{"name":"MlM7i2xlarge","value":"ml.m7i.2xlarge"},{"name":"MlM7i4xlarge","value":"ml.m7i.4xlarge"},{"name":"MlM7i8xlarge","value":"ml.m7i.8xlarge"},{"name":"MlM7i12xlarge","value":"ml.m7i.12xlarge"},{"name":"MlM7i16xlarge","value":"ml.m7i.16xlarge"},{"name":"MlM7i24xlarge","value":"ml.m7i.24xlarge"},{"name":"MlM7i48xlarge","value":"ml.m7i.48xlarge"},{"name":"MlC6iLarge","value":"ml.c6i.large"},{"name":"MlC6iXlarge","value":"ml.c6i.xlarge"},{"name":"MlC6i2xlarge","value":"ml.c6i.2xlarge"},{"name":"MlC6i4xlarge","value":"ml.c6i.4xlarge"},{"name":"MlC6i8xlarge","value":"ml.c6i.8xlarge"},{"name":"MlC6i12xlarge","value":"ml.c6i.12xlarge"},{"name":"MlC6i16xlarge","value":"ml.c6i.16xlarge"},{"name":"MlC6i24xlarge","value":"ml.c6i.24xlarge"},{"name":"MlC6i32xlarge","value":"ml.c6i.32xlarge"},{"name":"MlC7iLarge","value":"ml.c7i.large"},{"name":"MlC7iXlarge","value":"ml.c7i.xlarge"},{"name":"MlC7i2xlarge","value":"ml.c7i.2xlarge"},{"name":"MlC7i4xlarge","value":"ml.c7i.4xlarge"},{"name":"MlC7i8xlarge","value":"ml.c7i.8xlarge"},{"name":"MlC7i12xlarge","value":"ml.c7i.12xlarge"},{"name":"MlC7i16xlarge","value":"ml.c7i.16xlarge"},{"name":"MlC7i24xlarge","value":"ml.c7i.24xlarge"},{"name":"MlC7i48xlarge","value":"ml.c7i.48xlarge"},{"name":"MlR6iLarge","value":"ml.r6i.large"},{"name":"MlR6iXlarge","value":"ml.r6i.xlarge"},{"name":"MlR6i2xlarge","value":"ml.r6i.2xlarge"},{"name":"MlR6i4xlarge","value":"ml.r6i.4xlarge"},{"name":"MlR6i8xlarge","value":"ml.r6i.8xlarge"},{"name":"MlR6i12xlarge","value":"ml.r6i.12xlarge"},{"name":"MlR6i16xlarge","value":"ml.r6i.16xlarge"},{"name":"MlR6i24xlarge","value":"ml.r6i.24xlarge"},{"name":"MlR6i32xlarge","value":"ml.r6i.32xlarge"},{"name":"MlR7iLarge","value":"ml.r7i.large"},{"name":"MlR7iXlarge","value":"ml.r7i.xlarge"},{"name":"MlR7i2xlarge","value":"ml.r7i.2xlarge"},{"name":"MlR7i4xlarge","value":"ml.r7i.4xlarge"},{"name":"MlR7i8xlarge","value":"ml.r7i.8xlarge"},{"name":"MlR7i12xlarge","value":"ml.r7i.12xlarge"},{"name":"MlR7i16xlarge","value":"ml.r7i.16xlarge"},{"name":"MlR7i24xlarge","value":"ml.r7i.24xlarge"},{"name":"MlR7i48xlarge","value":"ml.r7i.48xlarge"},{"name":"MlM6idLarge","value":"ml.m6id.large"},{"name":"MlM6idXlarge","value":"ml.m6id.xlarge"},{"name":"MlM6id2xlarge","value":"ml.m6id.2xlarge"},{"name":"MlM6id4xlarge","value":"ml.m6id.4xlarge"},{"name":"MlM6id8xlarge","value":"ml.m6id.8xlarge"},{"name":"MlM6id12xlarge","value":"ml.m6id.12xlarge"},{"name":"MlM6id16xlarge","value":"ml.m6id.16xlarge"},{"name":"MlM6id24xlarge","value":"ml.m6id.24xlarge"},{"name":"MlM6id32xlarge","value":"ml.m6id.32xlarge"},{"name":"MlC6idLarge","value":"ml.c6id.large"},{"name":"MlC6idXlarge","value":"ml.c6id.xlarge"},{"name":"MlC6id2xlarge","value":"ml.c6id.2xlarge"},{"name":"MlC6id4xlarge","value":"ml.c6id.4xlarge"},{"name":"MlC6id8xlarge","value":"ml.c6id.8xlarge"},{"name":"MlC6id12xlarge","value":"ml.c6id.12xlarge"},{"name":"MlC6id16xlarge","value":"ml.c6id.16xlarge"},{"name":"MlC6id24xlarge","value":"ml.c6id.24xlarge"},{"name":"MlC6id32xlarge","value":"ml.c6id.32xlarge"},{"name":"MlR6idLarge","value":"ml.r6id.large"},{"name":"MlR6idXlarge","value":"ml.r6id.xlarge"},{"name":"MlR6id2xlarge","value":"ml.r6id.2xlarge"},{"name":"MlR6id4xlarge","value":"ml.r6id.4xlarge"},{"name":"MlR6id8xlarge","value":"ml.r6id.8xlarge"},{"name":"MlR6id12xlarge","value":"ml.r6id.12xlarge"},{"name":"MlR6id16xlarge","value":"ml.r6id.16xlarge"},{"name":"MlR6id24xlarge","value":"ml.r6id.24xlarge"},{"name":"MlR6id32xlarge","value":"ml.r6id.32xlarge"}]},"aws-native:sagemaker:UserProfileAppLifecycleManagement":{"properties":{"idleSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileIdleSettings","description":"Settings related to idle shutdown of Studio applications."}},"type":"object"},"aws-native:sagemaker:UserProfileAppType":{"type":"string","enum":[{"name":"JupyterServer","value":"JupyterServer"},{"name":"TensorBoard","value":"TensorBoard"},{"name":"RStudioServerPro","value":"RStudioServerPro"},{"name":"JupyterLab","value":"JupyterLab"},{"name":"CodeEditor","value":"CodeEditor"},{"name":"DetailedProfiler","value":"DetailedProfiler"},{"name":"Canvas","value":"Canvas"}]},"aws-native:sagemaker:UserProfileCodeEditorAppSettings":{"description":"The CodeEditor app settings.","properties":{"appLifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:UserProfileAppLifecycleManagement","description":"Settings that are used to configure and manage the lifecycle of CodeEditor applications."},"builtInLifecycleConfigArn":{"type":"string","description":"The lifecycle configuration that runs before the default lifecycle configuration."},"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileCustomImage"},"description":"A list of custom images for use for CodeEditor apps."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:UserProfileResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the CodeEditor app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with CodeEditor apps."}},"type":"object"},"aws-native:sagemaker:UserProfileCodeRepository":{"properties":{"repositoryUrl":{"type":"string","description":"A CodeRepository (valid URL) to be used within Jupyter's Git extension."}},"type":"object","required":["repositoryUrl"]},"aws-native:sagemaker:UserProfileCustomFileSystemConfig":{"properties":{"efsFileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:UserProfileEfsFileSystemConfig","description":"The settings for a custom Amazon EFS file system."},"fSxLustreFileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:UserProfileFSxLustreFileSystemConfig","description":"The settings for a custom Amazon FSx for Lustre file system."},"s3FileSystemConfig":{"$ref":"#/types/aws-native:sagemaker:UserProfileS3FileSystemConfig","description":"Configuration settings for a custom Amazon S3 file system."}},"type":"object"},"aws-native:sagemaker:UserProfileCustomImage":{"description":"A custom SageMaker image.","properties":{"appImageConfigName":{"type":"string","description":"The Name of the AppImageConfig."},"imageName":{"type":"string","description":"The name of the CustomImage. Must be unique to your account."},"imageVersionNumber":{"type":"integer","description":"The version number of the CustomImage."}},"type":"object","required":["appImageConfigName","imageName"]},"aws-native:sagemaker:UserProfileCustomPosixUserConfig":{"properties":{"gid":{"type":"integer","description":"The POSIX group ID."},"uid":{"type":"integer","description":"The POSIX user ID."}},"type":"object","required":["gid","uid"]},"aws-native:sagemaker:UserProfileDefaultEbsStorageSettings":{"description":"Properties related to the Amazon Elastic Block Store volume.","properties":{"defaultEbsVolumeSizeInGb":{"type":"integer","description":"Default size of the Amazon EBS volume in Gb"},"maximumEbsVolumeSizeInGb":{"type":"integer","description":"Maximum size of the Amazon EBS volume in Gb. Must be greater than or equal to the DefaultEbsVolumeSizeInGb."}},"type":"object","required":["defaultEbsVolumeSizeInGb","maximumEbsVolumeSizeInGb"]},"aws-native:sagemaker:UserProfileDefaultSpaceStorageSettings":{"description":"Default storage settings for a space.","properties":{"defaultEbsStorageSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileDefaultEbsStorageSettings","description":"The default EBS storage settings for a space."}},"type":"object"},"aws-native:sagemaker:UserProfileEfsFileSystemConfig":{"properties":{"fileSystemId":{"type":"string","description":"The ID of your Amazon EFS file system."},"fileSystemPath":{"type":"string","description":"The path to the file system directory that is accessible in Amazon SageMaker AI Studio. Permitted users can access only this directory and below."}},"type":"object","required":["fileSystemId"]},"aws-native:sagemaker:UserProfileFSxLustreFileSystemConfig":{"properties":{"fileSystemId":{"type":"string","description":"The globally unique, 17-digit, ID of the file system, assigned by Amazon FSx for Lustre."},"fileSystemPath":{"type":"string","description":"The path to the file system directory that is accessible in Amazon SageMaker Studio. Permitted users can access only this directory and below."}},"type":"object","required":["fileSystemId"]},"aws-native:sagemaker:UserProfileHiddenSageMakerImage":{"properties":{"sageMakerImageName":{"$ref":"#/types/aws-native:sagemaker:UserProfileHiddenSageMakerImageSageMakerImageName","description":"The SageMaker image name that you are hiding from the Studio user interface."},"versionAliases":{"type":"array","items":{"type":"string"},"description":"The version aliases you are hiding from the Studio user interface."}},"type":"object"},"aws-native:sagemaker:UserProfileHiddenSageMakerImageSageMakerImageName":{"description":"The SageMaker image name that you are hiding from the Studio user interface.","type":"string","enum":[{"name":"SagemakerDistribution","value":"sagemaker_distribution"}]},"aws-native:sagemaker:UserProfileIdleSettings":{"properties":{"idleTimeoutInMinutes":{"type":"integer","description":"The time that SageMaker waits after the application becomes idle before shutting it down."},"lifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:UserProfileLifecycleManagement","description":"Indicates whether idle shutdown is activated for the application type."},"maxIdleTimeoutInMinutes":{"type":"integer","description":"The maximum value in minutes that custom idle shutdown can be set to by the user."},"minIdleTimeoutInMinutes":{"type":"integer","description":"The minimum value in minutes that custom idle shutdown can be set to by the user."}},"type":"object"},"aws-native:sagemaker:UserProfileJupyterLabAppSettings":{"description":"The JupyterLab app settings.","properties":{"appLifecycleManagement":{"$ref":"#/types/aws-native:sagemaker:UserProfileAppLifecycleManagement","description":"Indicates whether idle shutdown is activated for JupyterLab applications."},"builtInLifecycleConfigArn":{"type":"string","description":"The lifecycle configuration that runs before the default lifecycle configuration."},"codeRepositories":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileCodeRepository"},"description":"A list of CodeRepositories available for use with JupyterLab apps."},"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileCustomImage"},"description":"A list of custom images available for use for JupyterLab apps"},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:UserProfileResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the JupyterLab app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with JupyterLab apps."}},"type":"object"},"aws-native:sagemaker:UserProfileJupyterServerAppSettings":{"description":"The JupyterServer app settings.","properties":{"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:UserProfileResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the JupyterServer app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with JupyterServer apps."}},"type":"object"},"aws-native:sagemaker:UserProfileKernelGatewayAppSettings":{"description":"The kernel gateway app settings.","properties":{"customImages":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileCustomImage"},"description":"A list of custom SageMaker images that are configured to run as a KernelGateway app."},"defaultResourceSpec":{"$ref":"#/types/aws-native:sagemaker:UserProfileResourceSpec","description":"The default instance type and the Amazon Resource Name (ARN) of the default SageMaker image used by the KernelGateway app."},"lifecycleConfigArns":{"type":"array","items":{"type":"string"},"description":"A list of LifecycleConfigArns available for use with KernelGateway apps."}},"type":"object"},"aws-native:sagemaker:UserProfileLifecycleManagement":{"description":"A flag to enable/disable AppLifecycleManagement settings","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:UserProfileMlTools":{"type":"string","enum":[{"name":"DataWrangler","value":"DataWrangler"},{"name":"FeatureStore","value":"FeatureStore"},{"name":"EmrClusters","value":"EmrClusters"},{"name":"AutoMl","value":"AutoMl"},{"name":"Experiments","value":"Experiments"},{"name":"Training","value":"Training"},{"name":"ModelEvaluation","value":"ModelEvaluation"},{"name":"Pipelines","value":"Pipelines"},{"name":"Models","value":"Models"},{"name":"JumpStart","value":"JumpStart"},{"name":"InferenceRecommender","value":"InferenceRecommender"},{"name":"Endpoints","value":"Endpoints"},{"name":"Projects","value":"Projects"},{"name":"InferenceOptimization","value":"InferenceOptimization"},{"name":"HyperPodClusters","value":"HyperPodClusters"},{"name":"Comet","value":"Comet"},{"name":"DeepchecksLlmEvaluation","value":"DeepchecksLLMEvaluation"},{"name":"Fiddler","value":"Fiddler"},{"name":"LakeraGuard","value":"LakeraGuard"},{"name":"PerformanceEvaluation","value":"PerformanceEvaluation"}]},"aws-native:sagemaker:UserProfileRStudioServerProAppSettings":{"description":"A collection of settings that configure user interaction with the RStudioServerPro app.","properties":{"accessStatus":{"$ref":"#/types/aws-native:sagemaker:UserProfileRStudioServerProAppSettingsAccessStatus","description":"Indicates whether the current user has access to the RStudioServerPro app.","replaceOnChanges":true},"userGroup":{"$ref":"#/types/aws-native:sagemaker:UserProfileRStudioServerProAppSettingsUserGroup","description":"The level of permissions that the user has within the RStudioServerPro app. This value defaults to User. The Admin value allows the user access to the RStudio Administrative Dashboard.","replaceOnChanges":true}},"type":"object"},"aws-native:sagemaker:UserProfileRStudioServerProAppSettingsAccessStatus":{"description":"Indicates whether the current user has access to the RStudioServerPro app.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sagemaker:UserProfileRStudioServerProAppSettingsUserGroup":{"description":"The level of permissions that the user has within the RStudioServerPro app. This value defaults to User. The Admin value allows the user access to the RStudio Administrative Dashboard.","type":"string","enum":[{"name":"RStudioAdmin","value":"R_STUDIO_ADMIN"},{"name":"RStudioUser","value":"R_STUDIO_USER"}]},"aws-native:sagemaker:UserProfileResourceSpec":{"properties":{"instanceType":{"$ref":"#/types/aws-native:sagemaker:UserProfileAppInstanceType","description":"The instance type that the image version runs on.\n\n\u003e *JupyterServer apps* only support the `system` value.\n\u003e \n\u003e For *KernelGateway apps* , the `system` value is translated to `ml.t3.medium` . KernelGateway apps also support all other values for available instance types."},"lifecycleConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lifecycle Configuration to attach to the Resource."},"sageMakerImageArn":{"type":"string","description":"The ARN of the SageMaker image that the image version belongs to."},"sageMakerImageVersionArn":{"type":"string","description":"The ARN of the image version created on the instance."}},"type":"object"},"aws-native:sagemaker:UserProfileS3FileSystemConfig":{"properties":{"mountPath":{"type":"string","description":"The file system path where the Amazon S3 storage location will be mounted within the Amazon SageMaker Studio environment."},"s3Uri":{"type":"string","description":"The Amazon S3 URI of the S3 file system configuration."}},"type":"object"},"aws-native:sagemaker:UserProfileSharingSettings":{"description":"Specifies options when sharing an Amazon SageMaker Studio notebook. These settings are specified as part of DefaultUserSettings when the CreateDomain API is called, and as part of UserSettings when the CreateUserProfile API is called.","properties":{"notebookOutputOption":{"$ref":"#/types/aws-native:sagemaker:UserProfileSharingSettingsNotebookOutputOption","description":"Whether to include the notebook cell output when sharing the notebook. The default is Disabled."},"s3KmsKeyId":{"type":"string","description":"When NotebookOutputOption is Allowed, the AWS Key Management Service (KMS) encryption key ID used to encrypt the notebook cell output in the Amazon S3 bucket."},"s3OutputPath":{"type":"string","description":"When NotebookOutputOption is Allowed, the Amazon S3 bucket used to store the shared notebook snapshots."}},"type":"object"},"aws-native:sagemaker:UserProfileSharingSettingsNotebookOutputOption":{"description":"Whether to include the notebook cell output when sharing the notebook. The default is Disabled.","type":"string","enum":[{"name":"Allowed","value":"Allowed"},{"name":"Disabled","value":"Disabled"}]},"aws-native:sagemaker:UserProfileStudioWebPortalSettings":{"description":"Studio settings. If these settings are applied on a user level, they take priority over the settings applied on a domain level.","properties":{"hiddenAppTypes":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileAppType"},"description":"Applications supported in Studio that are hidden from the Studio left navigation pane."},"hiddenInstanceTypes":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileAppInstanceType"},"description":"The instance types you are hiding from the Studio user interface."},"hiddenMlTools":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileMlTools"},"description":"The machine learning tools that are hidden from the Studio left navigation pane."},"hiddenSageMakerImageVersionAliases":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileHiddenSageMakerImage"},"description":"The version aliases you are hiding from the Studio user interface."}},"type":"object"},"aws-native:sagemaker:UserProfileTag":{"properties":{"key":{"type":"string","description":"The tag key. Tag keys must be unique per resource."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:sagemaker:UserProfileUserSettings":{"description":"A collection of settings that apply to users of Amazon SageMaker Studio. These settings are specified when the CreateUserProfile API is called, and as DefaultUserSettings when the CreateDomain API is called.","properties":{"autoMountHomeEfs":{"$ref":"#/types/aws-native:sagemaker:UserProfileUserSettingsAutoMountHomeEfs","description":"Indicates whether auto-mounting of an EFS volume is supported for the user profile. "},"codeEditorAppSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileCodeEditorAppSettings","description":"The Code Editor application settings.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"customFileSystemConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:UserProfileCustomFileSystemConfig"},"description":"The settings for assigning a custom file system to a user profile. Permitted users can access this file system in Amazon SageMaker AI Studio.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"customPosixUserConfig":{"$ref":"#/types/aws-native:sagemaker:UserProfileCustomPosixUserConfig","description":"Details about the POSIX identity that is used for file system operations.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"defaultLandingUri":{"type":"string","description":"Defines which Amazon SageMaker application users are directed to by default."},"executionRole":{"type":"string","description":"The user profile Amazon Resource Name (ARN)."},"jupyterLabAppSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileJupyterLabAppSettings","description":"The settings for the JupyterLab application.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"jupyterServerAppSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileJupyterServerAppSettings","description":"The Jupyter server's app settings."},"kernelGatewayAppSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileKernelGatewayAppSettings","description":"The kernel gateway app settings."},"rStudioServerProAppSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileRStudioServerProAppSettings","description":"A collection of settings that configure user interaction with the `RStudioServerPro` app."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups for the Amazon Virtual Private Cloud (VPC) that Studio uses for communication."},"sharingSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileSharingSettings","description":"The sharing settings."},"spaceStorageSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileDefaultSpaceStorageSettings","description":"The storage settings for a space.\n\nSageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces."},"studioWebPortal":{"$ref":"#/types/aws-native:sagemaker:UserProfileUserSettingsStudioWebPortal","description":"Indicates whether the Studio experience is available to users. If not, users cannot access Studio."},"studioWebPortalSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileStudioWebPortalSettings","description":"Studio settings. If these settings are applied on a user level, they take priority over the settings applied on a domain level."}},"type":"object"},"aws-native:sagemaker:UserProfileUserSettingsAutoMountHomeEfs":{"description":"Indicates whether auto-mounting of an EFS volume is supported for the user profile. ","type":"string","enum":[{"name":"Enabled","value":"Enabled"},{"name":"Disabled","value":"Disabled"},{"name":"DefaultAsDomain","value":"DefaultAsDomain"}]},"aws-native:sagemaker:UserProfileUserSettingsStudioWebPortal":{"description":"Indicates whether the Studio experience is available to users. If not, users cannot access Studio.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:scheduler:ScheduleAssignPublicIp":{"description":"Specifies whether the task's elastic network interface receives a public IP address. You can specify ENABLED only when LaunchType in EcsParameters is set to FARGATE.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:scheduler:ScheduleAwsVpcConfiguration":{"description":"This structure specifies the VPC subnets and security groups for the task, and whether a public IP address is to be used. This structure is relevant only for ECS tasks that use the awsvpc network mode.","properties":{"assignPublicIp":{"$ref":"#/types/aws-native:scheduler:ScheduleAssignPublicIp","description":"Specifies whether the task's elastic network interface receives a public IP address. You can specify `ENABLED` only when `LaunchType` in `EcsParameters` is set to `FARGATE` ."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"Specifies the security groups associated with the task. These security groups must all be in the same VPC. You can specify as many as five security groups. If you do not specify a security group, the default security group for the VPC is used."},"subnets":{"type":"array","items":{"type":"string"},"description":"Specifies the subnets associated with the task. These subnets must all be in the same VPC. You can specify as many as 16 subnets."}},"type":"object","required":["subnets"]},"aws-native:scheduler:ScheduleCapacityProviderStrategyItem":{"description":"The details of a capacity provider strategy.","properties":{"base":{"type":"number","description":"The base value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. If no value is specified, the default value of 0 is used."},"capacityProvider":{"type":"string","description":"The short name of the capacity provider."},"weight":{"type":"number","description":"The weight value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The weight value is taken into consideration after the base value, if defined, is satisfied."}},"type":"object","required":["capacityProvider"]},"aws-native:scheduler:ScheduleDeadLetterConfig":{"description":"A DeadLetterConfig object that contains information about a dead-letter queue configuration.","properties":{"arn":{"type":"string","description":"The ARN of the SQS queue specified as the target for the dead-letter queue."}},"type":"object"},"aws-native:scheduler:ScheduleEcsParameters":{"description":"The custom parameters to be used when the target is an Amazon ECS task.","properties":{"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:scheduler:ScheduleCapacityProviderStrategyItem"},"description":"The capacity provider strategy to use for the task."},"enableEcsManagedTags":{"type":"boolean","description":"Specifies whether to enable Amazon ECS managed tags for the task. For more information, see Tagging Your Amazon ECS Resources in the Amazon Elastic Container Service Developer Guide."},"enableExecuteCommand":{"type":"boolean","description":"Whether or not to enable the execute command functionality for the containers in this task. If true, this enables execute command functionality on all containers in the task."},"group":{"type":"string","description":"Specifies an ECS task group for the task. The maximum length is 255 characters."},"launchType":{"$ref":"#/types/aws-native:scheduler:ScheduleLaunchType","description":"Specifies the launch type on which your task is running. The launch type that you specify here must match one of the launch type (compatibilities) of the target task. The `FARGATE` value is supported only in the Regions where Fargate with Amazon ECS is supported. For more information, see [AWS Fargate on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/AWS_Fargate.html) in the *Amazon ECS Developer Guide* ."},"networkConfiguration":{"$ref":"#/types/aws-native:scheduler:ScheduleNetworkConfiguration","description":"This structure specifies the network configuration for an ECS task."},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:scheduler:SchedulePlacementConstraint"},"description":"An array of placement constraint objects to use for the task. You can specify up to 10 constraints per task (including constraints in the task definition and those specified at runtime)."},"placementStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:scheduler:SchedulePlacementStrategy"},"description":"The placement strategy objects to use for the task. You can specify a maximum of five strategy rules per task."},"platformVersion":{"type":"string","description":"Specifies the platform version for the task. Specify only the numeric portion of the platform version, such as 1.1.0."},"propagateTags":{"$ref":"#/types/aws-native:scheduler:SchedulePropagateTags","description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags are not propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the Amazon ECS [`TagResource`](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html) API action."},"referenceId":{"type":"string","description":"The reference ID to use for the task."},"tags":{"type":"array","items":{"type":"object","additionalProperties":{"type":"string"}},"description":"The metadata that you apply to the task to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. To learn more, see RunTask in the Amazon ECS API Reference."},"taskCount":{"type":"number","description":"The number of tasks to create based on TaskDefinition. The default is 1."},"taskDefinitionArn":{"type":"string","description":"The ARN of the task definition to use if the event target is an Amazon ECS task."}},"type":"object","required":["taskDefinitionArn"]},"aws-native:scheduler:ScheduleEventBridgeParameters":{"description":"EventBridge PutEvent predefined target type.","properties":{"detailType":{"type":"string","description":"Free-form string, with a maximum of 128 characters, used to decide what fields to expect in the event detail."},"source":{"type":"string","description":"The source of the event."}},"type":"object","required":["detailType","source"]},"aws-native:scheduler:ScheduleFlexibleTimeWindow":{"description":"Flexible time window allows configuration of a window within which a schedule can be invoked","properties":{"maximumWindowInMinutes":{"type":"number","description":"The maximum time window during which a schedule can be invoked."},"mode":{"$ref":"#/types/aws-native:scheduler:ScheduleFlexibleTimeWindowMode","description":"Determines whether the schedule is invoked within a flexible time window. You must use quotation marks when you specify this value in your JSON or YAML template.\n\n*Allowed Values* : `\"OFF\"` | `\"FLEXIBLE\"`"}},"type":"object","required":["mode"]},"aws-native:scheduler:ScheduleFlexibleTimeWindowMode":{"description":"Determines whether the schedule is executed within a flexible time window.","type":"string","enum":[{"name":"Off","value":"OFF"},{"name":"Flexible","value":"FLEXIBLE"}]},"aws-native:scheduler:ScheduleGroupState":{"description":"Specifies the state of the schedule group.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Deleting","value":"DELETING"}]},"aws-native:scheduler:ScheduleGroupTag":{"description":"Tag to associate with the resource.","properties":{"key":{"type":"string","description":"Key for the tag"},"value":{"type":"string","description":"Value for the tag"}},"type":"object","required":["key","value"]},"aws-native:scheduler:ScheduleKinesisParameters":{"description":"The custom parameter you can use to control the shard to which EventBridge Scheduler sends the event.","properties":{"partitionKey":{"type":"string","description":"The custom parameter used as the Kinesis partition key. For more information, see Amazon Kinesis Streams Key Concepts in the Amazon Kinesis Streams Developer Guide."}},"type":"object","required":["partitionKey"]},"aws-native:scheduler:ScheduleLaunchType":{"description":"Specifies the launch type on which your task is running. The launch type that you specify here must match one of the launch type (compatibilities) of the target task. The FARGATE value is supported only in the Regions where AWS Fargate with Amazon ECS is supported. For more information, see AWS Fargate on Amazon ECS in the Amazon Elastic Container Service Developer Guide.","type":"string","enum":[{"name":"Ec2","value":"EC2"},{"name":"Fargate","value":"FARGATE"},{"name":"External","value":"EXTERNAL"}]},"aws-native:scheduler:ScheduleNetworkConfiguration":{"description":"This structure specifies the network configuration for an ECS task.","properties":{"awsvpcConfiguration":{"$ref":"#/types/aws-native:scheduler:ScheduleAwsVpcConfiguration","description":"Specifies the Amazon VPC subnets and security groups for the task, and whether a public IP address is to be used. This structure is relevant only for ECS tasks that use the awsvpc network mode."}},"type":"object"},"aws-native:scheduler:SchedulePlacementConstraint":{"description":"An object representing a constraint on task placement.","properties":{"expression":{"type":"string","description":"A cluster query language expression to apply to the constraint. You cannot specify an expression if the constraint type is distinctInstance. To learn more, see Cluster Query Language in the Amazon Elastic Container Service Developer Guide."},"type":{"$ref":"#/types/aws-native:scheduler:SchedulePlacementConstraintType","description":"The type of constraint. Use `distinctInstance` to ensure that each task in a particular group is running on a different container instance. Use `memberOf` to restrict the selection to a group of valid candidates."}},"type":"object"},"aws-native:scheduler:SchedulePlacementConstraintType":{"description":"The type of constraint. Use distinctInstance to ensure that each task in a particular group is running on a different container instance. Use memberOf to restrict the selection to a group of valid candidates.","type":"string","enum":[{"name":"DistinctInstance","value":"distinctInstance"},{"name":"MemberOf","value":"memberOf"}]},"aws-native:scheduler:SchedulePlacementStrategy":{"description":"The task placement strategy for a task or service.","properties":{"field":{"type":"string","description":"The field to apply the placement strategy against. For the spread placement strategy, valid values are instanceId (or host, which has the same effect), or any platform or custom attribute that is applied to a container instance, such as attribute:ecs.availability-zone. For the binpack placement strategy, valid values are cpu and memory. For the random placement strategy, this field is not used."},"type":{"$ref":"#/types/aws-native:scheduler:SchedulePlacementStrategyType","description":"The type of placement strategy. The random placement strategy randomly places tasks on available candidates. The spread placement strategy spreads placement across available candidates evenly based on the field parameter. The binpack strategy places tasks on available candidates that have the least available amount of the resource that is specified with the field parameter. For example, if you binpack on memory, a task is placed on the instance with the least amount of remaining memory (but still enough to run the task)."}},"type":"object"},"aws-native:scheduler:SchedulePlacementStrategyType":{"description":"The type of placement strategy. The random placement strategy randomly places tasks on available candidates. The spread placement strategy spreads placement across available candidates evenly based on the field parameter. The binpack strategy places tasks on available candidates that have the least available amount of the resource that is specified with the field parameter. For example, if you binpack on memory, a task is placed on the instance with the least amount of remaining memory (but still enough to run the task).","type":"string","enum":[{"name":"Random","value":"random"},{"name":"Spread","value":"spread"},{"name":"Binpack","value":"binpack"}]},"aws-native:scheduler:SchedulePropagateTags":{"description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags are not propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the TagResource API action.","type":"string","enum":[{"name":"TaskDefinition","value":"TASK_DEFINITION"}]},"aws-native:scheduler:ScheduleRetryPolicy":{"description":"A RetryPolicy object that includes information about the retry policy settings.","properties":{"maximumEventAgeInSeconds":{"type":"number","description":"The maximum amount of time, in seconds, to continue to make retry attempts."},"maximumRetryAttempts":{"type":"number","description":"The maximum number of retry attempts to make before the request fails. Retry attempts with exponential backoff continue until either the maximum number of attempts is made or until the duration of the MaximumEventAgeInSeconds is reached."}},"type":"object"},"aws-native:scheduler:ScheduleSageMakerPipelineParameter":{"description":"Name/Value pair of a parameter to start execution of a SageMaker Model Building Pipeline.","properties":{"name":{"type":"string","description":"Name of parameter to start execution of a SageMaker Model Building Pipeline."},"value":{"type":"string","description":"Value of parameter to start execution of a SageMaker Model Building Pipeline."}},"type":"object","required":["name","value"]},"aws-native:scheduler:ScheduleSageMakerPipelineParameters":{"description":"These are custom parameters to use when the target is a SageMaker Model Building Pipeline that starts based on AWS EventBridge Scheduler schedules.","properties":{"pipelineParameterList":{"type":"array","items":{"$ref":"#/types/aws-native:scheduler:ScheduleSageMakerPipelineParameter"},"description":"List of Parameter names and values for SageMaker Model Building Pipeline execution."}},"type":"object"},"aws-native:scheduler:ScheduleSqsParameters":{"description":"Contains the message group ID to use when the target is a FIFO queue. If you specify an SQS FIFO queue as a target, the queue must have content-based deduplication enabled.","properties":{"messageGroupId":{"type":"string","description":"The FIFO message group ID to use as the target."}},"type":"object"},"aws-native:scheduler:ScheduleState":{"description":"Specifies whether the schedule is enabled or disabled.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:scheduler:ScheduleTarget":{"description":"The schedule target.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target."},"deadLetterConfig":{"$ref":"#/types/aws-native:scheduler:ScheduleDeadLetterConfig","description":"An object that contains information about an Amazon SQS queue that EventBridge Scheduler uses as a dead-letter queue for your schedule. If specified, EventBridge Scheduler delivers failed events that could not be successfully delivered to a target to the queue."},"ecsParameters":{"$ref":"#/types/aws-native:scheduler:ScheduleEcsParameters","description":"The templated target type for the Amazon ECS [`RunTask`](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html) API operation."},"eventBridgeParameters":{"$ref":"#/types/aws-native:scheduler:ScheduleEventBridgeParameters","description":"The templated target type for the EventBridge [`PutEvents`](https://docs.aws.amazon.com/eventbridge/latest/APIReference/API_PutEvents.html) API operation."},"input":{"type":"string","description":"The text, or well-formed JSON, passed to the target. If you are configuring a templated Lambda, AWS Step Functions, or Amazon EventBridge target, the input must be a well-formed JSON. For all other target types, a JSON is not required. If you do not specify anything for this field, EventBridge Scheduler delivers a default notification to the target."},"kinesisParameters":{"$ref":"#/types/aws-native:scheduler:ScheduleKinesisParameters","description":"The templated target type for the Amazon Kinesis [`PutRecord`](https://docs.aws.amazon.com/kinesis/latest/APIReference/API_PutRecord.html) API operation."},"retryPolicy":{"$ref":"#/types/aws-native:scheduler:ScheduleRetryPolicy","description":"A `RetryPolicy` object that includes information about the retry policy settings, including the maximum age of an event, and the maximum number of times EventBridge Scheduler will try to deliver the event to a target."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to be used for this target when the schedule is triggered."},"sageMakerPipelineParameters":{"$ref":"#/types/aws-native:scheduler:ScheduleSageMakerPipelineParameters","description":"The templated target type for the Amazon SageMaker [`StartPipelineExecution`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_StartPipelineExecution.html) API operation."},"sqsParameters":{"$ref":"#/types/aws-native:scheduler:ScheduleSqsParameters","description":"The templated target type for the Amazon SQS [`SendMessage`](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_SendMessage.html) API operation. Contains the message group ID to use when the target is a FIFO queue. If you specify an Amazon SQS FIFO queue as a target, the queue must have content-based deduplication enabled. For more information, see [Using the Amazon SQS message deduplication ID](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/using-messagededuplicationid-property.html) in the *Amazon SQS Developer Guide* ."}},"type":"object","required":["arn","roleArn"]},"aws-native:secretsmanager:RotationScheduleExternalSecretRotationMetadataItem":{"description":"The metadata needed to successfully rotate a managed external secret. Each metadata item is a key and value pair of strings in a JSON text string.","properties":{"key":{"type":"string","description":"The key name of the metadata item. You can specify a value that's 1 to 256 characters in length."},"value":{"type":"string","description":"The value for the metadata item. You can specify a value that's 1 to 2048 characters in length."}},"type":"object","required":["key","value"]},"aws-native:secretsmanager:RotationScheduleHostedRotationLambda":{"properties":{"excludeCharacters":{"type":"string","description":"A string of the characters that you don't want in the password."},"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key that Secrets Manager uses to encrypt the secret. If you don't specify this value, then Secrets Manager uses the key aws/secretsmanager. If aws/secretsmanager doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value."},"masterSecretArn":{"type":"string","description":"The ARN of the secret that contains superuser credentials, if you use the alternating users rotation strategy. CloudFormation grants the execution role for the Lambda rotation function GetSecretValue permission to the secret in this property."},"masterSecretKmsKeyArn":{"type":"string","description":"The ARN of the KMS key that Secrets Manager used to encrypt the superuser secret, if you use the alternating users strategy and the superuser secret is encrypted with a customer managed key. You don't need to specify this property if the superuser secret is encrypted using the key aws/secretsmanager. CloudFormation grants the execution role for the Lambda rotation function Decrypt, DescribeKey, and GenerateDataKey permission to the key in this property."},"rotationLambdaName":{"type":"string","description":"The name of the Lambda rotation function."},"rotationType":{"type":"string","description":"The type of rotation template to use"},"runtime":{"type":"string","description":"The python runtime associated with the Lambda function"},"superuserSecretArn":{"type":"string","description":"The ARN of the secret that contains superuser credentials, if you use the alternating users rotation strategy. CloudFormation grants the execution role for the Lambda rotation function GetSecretValue permission to the secret in this property."},"superuserSecretKmsKeyArn":{"type":"string","description":"The ARN of the KMS key that Secrets Manager used to encrypt the superuser secret, if you use the alternating users strategy and the superuser secret is encrypted with a customer managed key. You don't need to specify this property if the superuser secret is encrypted using the key aws/secretsmanager. CloudFormation grants the execution role for the Lambda rotation function Decrypt, DescribeKey, and GenerateDataKey permission to the key in this property."},"vpcSecurityGroupIds":{"type":"string","description":"A comma-separated list of security group IDs applied to the target database."},"vpcSubnetIds":{"type":"string","description":"A comma separated list of VPC subnet IDs of the target database network. The Lambda rotation function is in the same subnet group."}},"type":"object","required":["rotationType"]},"aws-native:secretsmanager:RotationScheduleRotationRules":{"properties":{"automaticallyAfterDays":{"type":"integer","description":"The number of days between automatic scheduled rotations of the secret. You can use this value to check that your secret meets your compliance guidelines for how often secrets must be rotated."},"duration":{"type":"string","description":"The length of the rotation window in hours, for example 3h for a three hour window. Secrets Manager rotates your secret at any time during this window. The window must not extend into the next rotation window or the next UTC day. The window starts according to the ScheduleExpression. If you don't specify a Duration, for a ScheduleExpression in hours, the window automatically closes after one hour. For a ScheduleExpression in days, the window automatically closes at the end of the UTC day."},"scheduleExpression":{"type":"string","description":"A cron() or rate() expression that defines the schedule for rotating your secret. Secrets Manager rotation schedules use UTC time zone."}},"type":"object"},"aws-native:secretsmanager:SecretGenerateSecretString":{"description":"Generates a random password. We recommend that you specify the maximum length and include every character type that the system you are generating a password for can support.\n *Required permissions:*``secretsmanager:GetRandomPassword``. For more information, see [IAM policy actions for Secrets Manager](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssecretsmanager.html#awssecretsmanager-actions-as-permissions) and [Authentication and access control in Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access.html).","properties":{"excludeCharacters":{"type":"string","description":"A string of the characters that you don't want in the password."},"excludeLowercase":{"type":"boolean","description":"Specifies whether to exclude lowercase letters from the password. If you don't include this switch, the password can contain lowercase letters."},"excludeNumbers":{"type":"boolean","description":"Specifies whether to exclude numbers from the password. If you don't include this switch, the password can contain numbers."},"excludePunctuation":{"type":"boolean","description":"Specifies whether to exclude the following punctuation characters from the password: ``! \" # $ % \u0026 ' ( ) * + , - . / : ; \u003c = \u003e ? @ [ \\ ] ^ _ ` { | } ~``. If you don't include this switch, the password can contain punctuation."},"excludeUppercase":{"type":"boolean","description":"Specifies whether to exclude uppercase letters from the password. If you don't include this switch, the password can contain uppercase letters."},"generateStringKey":{"type":"string","description":"The JSON key name for the key/value pair, where the value is the generated password. This pair is added to the JSON structure specified by the ``SecretStringTemplate`` parameter. If you specify this parameter, then you must also specify ``SecretStringTemplate``."},"includeSpace":{"type":"boolean","description":"Specifies whether to include the space character. If you include this switch, the password can contain space characters."},"passwordLength":{"type":"integer","description":"The length of the password. If you don't include this parameter, the default length is 32 characters."},"requireEachIncludedType":{"type":"boolean","description":"Specifies whether to include at least one upper and lowercase letter, one number, and one punctuation. If you don't include this switch, the password contains at least one of every character type."},"secretStringTemplate":{"type":"string","description":"A template that the generated string must match. When you make a change to this property, a new secret version is created."}},"type":"object"},"aws-native:secretsmanager:SecretReplicaRegion":{"description":"Specifies a ``Region`` and the ``KmsKeyId`` for a replica secret.","properties":{"kmsKeyId":{"type":"string","description":"The ARN, key ID, or alias of the KMS key to encrypt the secret. If you don't include this field, Secrets Manager uses ``aws/secretsmanager``."},"region":{"type":"string","description":"A string that represents a ``Region``, for example \"us-east-1\"."}},"type":"object","required":["region"]},"aws-native:secretsmanager:SecretTag":{"description":"A structure that contains information about a tag.","properties":{"key":{"type":"string","description":"The key identifier, or name, of the tag."},"value":{"type":"string","description":"The string value associated with the key of the tag."}},"type":"object","required":["key","value"]},"aws-native:securityhub:AggregatorV2RegionLinkingMode":{"description":"Indicates to link a list of included Regions","type":"string","enum":[{"name":"SpecifiedRegions","value":"SPECIFIED_REGIONS"}]},"aws-native:securityhub:AutomationRuleDateFilter":{"description":"A date filter for querying findings.","properties":{"dateRange":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateRange","description":"A date range for the date filter."},"end":{"type":"string","description":"A timestamp that provides the end date for the date filter.\n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps)."},"start":{"type":"string","description":"A timestamp that provides the start date for the date filter.\n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps)."}},"type":"object"},"aws-native:securityhub:AutomationRuleDateRange":{"description":"A date range for the date filter.","properties":{"unit":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateRangeUnit","description":"A date range unit for the date filter."},"value":{"type":"number","description":"A date range value for the date filter."}},"type":"object","required":["unit","value"]},"aws-native:securityhub:AutomationRuleDateRangeUnit":{"description":"A date range unit for the date filter.","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:securityhub:AutomationRuleMapFilter":{"description":"A map filter for filtering ASHlong findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.","properties":{"comparison":{"$ref":"#/types/aws-native:securityhub:AutomationRuleMapFilterComparison","description":"The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.\n To search for values that have the filter value, use one of the following comparison operators:\n  +  To search for values that include the filter value, use ``CONTAINS``. For example, for the ``ResourceTags`` field, the filter ``Department CONTAINS Security`` matches findings that include the value ``Security`` for the ``Department`` tag. In the same example, a finding with a value of ``Security team`` for the ``Department`` tag is a match.\n  +  To search for values that exactly match the filter value, use ``EQUALS``. For example, for the ``ResourceTags`` field, the filter ``Department EQUALS Security`` matches findings that have the value ``Security`` for the ``Department`` tag.\n  \n ``CONTAINS`` and ``EQUALS`` filters on the same field are joined by ``OR``. A finding matches if it matches any one of those filters. For example, the filters ``Department CONTAINS Security OR Department CONTAINS Finance`` match a finding that includes either ``Security``, ``Finance``, or both values.\n To search for values that don't have the filter value, use one of the following comparison operators:\n  +  To search for values that exclude the filter value, use ``NOT_CONTAINS``. For example, for the ``ResourceTags`` field, the filter ``Department NOT_CONTAINS Finance`` matches findings that exclude the value ``Finance`` for the ``Department`` tag.\n  +  To search for values other than the filter value, use ``NOT_EQUALS``. For example, for the ``ResourceTags`` field, the filter ``Department NOT_EQUALS Finance`` matches findings that don’t have the value ``Finance`` for the ``Department`` tag.\n  \n ``NOT_CONTAINS`` and ``NOT_EQUALS`` filters on the same field are joined by ``AND``. A finding matches only if it matches all of those filters. For example, the filters ``Department NOT_CONTAINS Security AND Department NOT_CONTAINS Finance`` match a finding that excludes both the ``Security`` and ``Finance`` values.\n ``CONTAINS`` filters can only be used with other ``CONTAINS`` filters. ``NOT_CONTAINS`` filters can only be used with other ``NOT_CONTAINS`` filters.\n You can’t have both a ``CONTAINS`` filter and a ``NOT_CONTAINS`` filter on the same field. Similarly, you can’t have both an ``EQUALS`` filter and a ``NOT_EQUALS`` filter on the same field. Combining filters in this way returns an error. \n ``CONTAINS`` and ``NOT_CONTAINS`` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *User Guide*."},"key":{"type":"string","description":"The key of the map filter. For example, for ``ResourceTags``, ``Key`` identifies the name of the tag. For ``UserDefinedFields``, ``Key`` is the name of the field."},"value":{"type":"string","description":"The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called ``Department`` might be ``Security``. If you provide ``security`` as the filter value, then there's no match."}},"type":"object","required":["comparison","key","value"]},"aws-native:securityhub:AutomationRuleMapFilterComparison":{"description":"The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.\n To search for values that have the filter value, use one of the following comparison operators:\n  +  To search for values that include the filter value, use ``CONTAINS``. For example, for the ``ResourceTags`` field, the filter ``Department CONTAINS Security`` matches findings that include the value ``Security`` for the ``Department`` tag. In the same example, a finding with a value of ``Security team`` for the ``Department`` tag is a match.\n  +  To search for values that exactly match the filter value, use ``EQUALS``. For example, for the ``ResourceTags`` field, the filter ``Department EQUALS Security`` matches findings that have the value ``Security`` for the ``Department`` tag.\n  \n ``CONTAINS`` and ``EQUALS`` filters on the same field are joined by ``OR``. A finding matches if it matches any one of those filters. For example, the filters ``Department CONTAINS Security OR Department CONTAINS Finance`` match a finding that includes either ``Security``, ``Finance``, or both values.\n To search for values that don't have the filter value, use one of the following comparison operators:\n  +  To search for values that exclude the filter value, use ``NOT_CONTAINS``. For example, for the ``ResourceTags`` field, the filter ``Department NOT_CONTAINS Finance`` matches findings that exclude the value ``Finance`` for the ``Department`` tag.\n  +  To search for values other than the filter value, use ``NOT_EQUALS``. For example, for the ``ResourceTags`` field, the filter ``Department NOT_EQUALS Finance`` matches findings that don’t have the value ``Finance`` for the ``Department`` tag.\n  \n ``NOT_CONTAINS`` and ``NOT_EQUALS`` filters on the same field are joined by ``AND``. A finding matches only if it matches all of those filters. For example, the filters ``Department NOT_CONTAINS Security AND Department NOT_CONTAINS Finance`` match a finding that excludes both the ``Security`` and ``Finance`` values.\n ``CONTAINS`` filters can only be used with other ``CONTAINS`` filters. ``NOT_CONTAINS`` filters can only be used with other ``NOT_CONTAINS`` filters.\n You can’t have both a ``CONTAINS`` filter and a ``NOT_CONTAINS`` filter on the same field. Similarly, you can’t have both an ``EQUALS`` filter and a ``NOT_EQUALS`` filter on the same field. Combining filters in this way returns an error. \n ``CONTAINS`` and ``NOT_CONTAINS`` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *User Guide*.","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"Contains","value":"CONTAINS"},{"name":"NotContains","value":"NOT_CONTAINS"}]},"aws-native:securityhub:AutomationRuleNoteUpdate":{"description":"The updated note.","properties":{"text":{"type":"string","description":"The updated note text."},"updatedBy":{"type":"string","description":"The principal that updated the note."}},"type":"object","required":["text","updatedBy"]},"aws-native:securityhub:AutomationRuleNumberFilter":{"description":"A number filter for querying findings.","properties":{"eq":{"type":"number","description":"The equal-to condition to be applied to a single field when querying for findings."},"gte":{"type":"number","description":"The greater-than-equal condition to be applied to a single field when querying for findings."},"lte":{"type":"number","description":"The less-than-equal condition to be applied to a single field when querying for findings."}},"type":"object"},"aws-native:securityhub:AutomationRuleRelatedFinding":{"description":"Provides details about a list of findings that the current finding relates to.","properties":{"id":{"type":"string","description":"The product-generated identifier for a related finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"productArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the product that generated a related finding."}},"type":"object","required":["id","productArn"]},"aws-native:securityhub:AutomationRuleRuleStatus":{"description":"Whether the rule is active after it is created. If this parameter is equal to ``ENABLED``, ASH applies the rule to findings and finding updates after the rule is created.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:securityhub:AutomationRuleSeverityUpdate":{"description":"Updates to the severity information for a finding.","properties":{"label":{"$ref":"#/types/aws-native:securityhub:AutomationRuleSeverityUpdateLabel","description":"The severity value of the finding. The allowed values are the following.\n  +  ``INFORMATIONAL`` - No issue was found.\n  +  ``LOW`` - The issue does not require action on its own.\n  +  ``MEDIUM`` - The issue must be addressed but not urgently.\n  +  ``HIGH`` - The issue must be addressed as a priority.\n  +  ``CRITICAL`` - The issue must be remediated immediately to avoid it escalating."},"normalized":{"type":"integer","description":"The normalized severity for the finding. This attribute is to be deprecated in favor of ``Label``.\n If you provide ``Normalized`` and don't provide ``Label``, ``Label`` is set automatically as follows.\n  +  0 - ``INFORMATIONAL``\n  +  1–39 - ``LOW``\n  +  40–69 - ``MEDIUM``\n  +  70–89 - ``HIGH``\n  +  90–100 - ``CRITICAL``"},"product":{"type":"number","description":"The native severity as defined by the AWS service or integrated partner product that generated the finding."}},"type":"object"},"aws-native:securityhub:AutomationRuleSeverityUpdateLabel":{"description":"The severity value of the finding. The allowed values are the following.\n  +  ``INFORMATIONAL`` - No issue was found.\n  +  ``LOW`` - The issue does not require action on its own.\n  +  ``MEDIUM`` - The issue must be addressed but not urgently.\n  +  ``HIGH`` - The issue must be addressed as a priority.\n  +  ``CRITICAL`` - The issue must be remediated immediately to avoid it escalating.","type":"string","enum":[{"name":"Informational","value":"INFORMATIONAL"},{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"},{"name":"Critical","value":"CRITICAL"}]},"aws-native:securityhub:AutomationRuleStringFilter":{"description":"A string filter for filtering ASHlong findings.","properties":{"comparison":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilterComparison","description":"The condition to apply to a string value when filtering Security Hub CSPM findings.\n To search for values that have the filter value, use one of the following comparison operators:\n  +  To search for values that include the filter value, use ``CONTAINS``. For example, the filter ``Title CONTAINS CloudFront`` matches findings that have a ``Title`` that includes the string CloudFront.\n  +  To search for values that exactly match the filter value, use ``EQUALS``. For example, the filter ``AwsAccountId EQUALS 123456789012`` only matches findings that have an account ID of ``123456789012``.\n  +  To search for values that start with the filter value, use ``PREFIX``. For example, the filter ``ResourceRegion PREFIX us`` matches findings that have a ``ResourceRegion`` that starts with ``us``. A ``ResourceRegion`` that starts with a different value, such as ``af``, ``ap``, or ``ca``, doesn't match.\n  \n ``CONTAINS``, ``EQUALS``, and ``PREFIX`` filters on the same field are joined by ``OR``. A finding matches if it matches any one of those filters. For example, the filters ``Title CONTAINS CloudFront OR Title CONTAINS CloudWatch`` match a finding that includes either ``CloudFront``, ``CloudWatch``, or both strings in the title.\n To search for values that don’t have the filter value, use one of the following comparison operators:\n  +  To search for values that exclude the filter value, use ``NOT_CONTAINS``. For example, the filter ``Title NOT_CONTAINS CloudFront`` matches findings that have a ``Title`` that excludes the string CloudFront.\n  +  To search for values other than the filter value, use ``NOT_EQUALS``. For example, the filter ``AwsAccountId NOT_EQUALS 123456789012`` only matches findings that have an account ID other than ``123456789012``.\n  +  To search for values that don't start with the filter value, use ``PREFIX_NOT_EQUALS``. For example, the filter ``ResourceRegion PREFIX_NOT_EQUALS us`` matches findings with a ``ResourceRegion`` that starts with a value other than ``us``.\n  \n ``NOT_CONTAINS``, ``NOT_EQUALS``, and ``PREFIX_NOT_EQUALS`` filters on the same field are joined by ``AND``. A finding matches only if it matches all of those filters. For example, the filters ``Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatch`` match a finding that excludes both ``CloudFront`` and ``CloudWatch`` in the title.\n You can’t have both a ``CONTAINS`` filter and a ``NOT_CONTAINS`` filter on the same field. Similarly, you can't provide both an ``EQUALS`` filter and a ``NOT_EQUALS`` or ``PREFIX_NOT_EQUALS`` filter on the same field. Combining filters in this way returns an error. ``CONTAINS`` filters can only be used with other ``CONTAINS`` filters. ``NOT_CONTAINS`` filters can only be used with other ``NOT_CONTAINS`` filters. \n You can combine ``PREFIX`` filters with ``NOT_EQUALS`` or ``PREFIX_NOT_EQUALS`` filters for the same field. Security Hub CSPM first processes the ``PREFIX`` filters, and then the ``NOT_EQUALS`` or ``PREFIX_NOT_EQUALS`` filters.\n For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either ``AwsIam`` or ``AwsEc2``. It then excludes findings that have a resource type of ``AwsIamPolicy`` and findings that have a resource type of ``AwsEc2NetworkInterface``.\n  +   ``ResourceType PREFIX AwsIam`` \n  +   ``ResourceType PREFIX AwsEc2`` \n  +   ``ResourceType NOT_EQUALS AwsIamPolicy`` \n  +   ``ResourceType NOT_EQUALS AwsEc2NetworkInterface`` \n  \n ``CONTAINS`` and ``NOT_CONTAINS`` operators can be used only with automation rules V1. ``CONTAINS_WORD`` operator is only supported in ``GetFindingsV2``, ``GetFindingStatisticsV2``, ``GetResourcesV2``, and ``GetResourceStatisticsV2`` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *User Guide*."},"value":{"type":"string","description":"The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is ``Security Hub CSPM``. If you provide ``security hub`` as the filter value, there's no match."}},"type":"object","required":["comparison","value"]},"aws-native:securityhub:AutomationRuleStringFilterComparison":{"description":"The condition to apply to a string value when filtering Security Hub findings.","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"Prefix","value":"PREFIX"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"PrefixNotEquals","value":"PREFIX_NOT_EQUALS"},{"name":"Contains","value":"CONTAINS"},{"name":"NotContains","value":"NOT_CONTAINS"}]},"aws-native:securityhub:AutomationRuleV2AllowedOperators":{"description":"The logical operator used to combine multiple conditions","type":"string","enum":[{"name":"And","value":"AND"},{"name":"Or","value":"OR"}]},"aws-native:securityhub:AutomationRuleV2AutomationRulesActionV2":{"description":"Allows you to configure automated responses","properties":{"externalIntegrationConfiguration":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2ExternalIntegrationConfiguration","description":"The settings for integrating automation rule actions with external systems or service."},"findingFieldsUpdate":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AutomationRulesFindingFieldsUpdateV2","description":"Specifies that the automation rule action is an update to a finding field."},"type":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AutomationRulesActionV2Type","description":"The category of action to be executed by the automation rule"}},"type":"object","required":["type"]},"aws-native:securityhub:AutomationRuleV2AutomationRulesActionV2Type":{"description":"The category of action to be executed by the automation rule","type":"string","enum":[{"name":"FindingFieldsUpdate","value":"FINDING_FIELDS_UPDATE"},{"name":"ExternalIntegration","value":"EXTERNAL_INTEGRATION"}]},"aws-native:securityhub:AutomationRuleV2AutomationRulesFindingFieldsUpdateV2":{"description":"The changes to be applied to fields in a security finding when an automation rule is triggered","properties":{"comment":{"type":"string","description":"Notes or contextual information for findings that are modified by the automation rule"},"severityId":{"type":"integer","description":"The severity level to be assigned to findings that match the automation rule criteria"},"statusId":{"type":"integer","description":"The status to be applied to findings that match automation rule criteria"}},"type":"object"},"aws-native:securityhub:AutomationRuleV2BooleanFilter":{"description":"Boolean filter for querying findings","properties":{"value":{"type":"boolean","description":"The value of the boolean"}},"type":"object","required":["value"]},"aws-native:securityhub:AutomationRuleV2CompositeFilter":{"description":"Enables the creation of filtering criteria for security findings","properties":{"booleanFilters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfBooleanFilter"},"description":"Enables filtering based on boolean field values"},"dateFilters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfDateFilter"},"description":"Enables filtering based on date and timestamp fields"},"mapFilters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfMapFilter"},"description":"Enables filtering based on map field value"},"numberFilters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfNumberFilter"},"description":"Enables filtering based on numerical field values"},"operator":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AllowedOperators","description":"The logical operator used to combine multiple filter conditions."},"stringFilters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfStringFilter"},"description":"Enables filtering based on string field values"}},"type":"object"},"aws-native:securityhub:AutomationRuleV2Criteria":{"description":"Defines the parameters and conditions used to evaluate and filter security findings","properties":{"ocsfFindingCriteria":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfFindingFilters","description":"The filtering conditions that align with OCSF standards."}},"type":"object"},"aws-native:securityhub:AutomationRuleV2DateFilter":{"description":"A date filter for querying findings","properties":{"dateRange":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2DateRange","description":"A date range for the date filter."},"end":{"type":"string","description":"A timestamp that provides the end date for the date filter.\n\nFor more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) ."},"start":{"type":"string","description":"A timestamp that provides the start date for the date filter.\n\nFor more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) ."}},"type":"object"},"aws-native:securityhub:AutomationRuleV2DateRange":{"description":"A date range for the date filter","properties":{"unit":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2DateRangeUnit","description":"A date range unit for the date filter"},"value":{"type":"number","description":"A date range value for the date filter"}},"type":"object","required":["unit","value"]},"aws-native:securityhub:AutomationRuleV2DateRangeUnit":{"description":"A date range unit for the date filter","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:securityhub:AutomationRuleV2ExternalIntegrationConfiguration":{"description":"The settings for integrating automation rule actions with external systems or service","properties":{"connectorArn":{"type":"string","description":"The ARN of the connector that establishes the integration"}},"type":"object"},"aws-native:securityhub:AutomationRuleV2MapFilter":{"description":"A map filter for filtering findings","properties":{"comparison":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2MapFilterComparison","description":"The condition to apply to the key value when filtering findings with a map filter"},"key":{"type":"string","description":"The key of the map filter"},"value":{"type":"string","description":"The value for the key in the map filter"}},"type":"object","required":["comparison","key","value"]},"aws-native:securityhub:AutomationRuleV2MapFilterComparison":{"description":"The condition to apply to the key value when filtering findings with a map filter","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"}]},"aws-native:securityhub:AutomationRuleV2NumberFilter":{"description":"A number filter for querying findings","properties":{"eq":{"type":"number","description":"The equal-to condition to be applied to a single field when querying for findings"},"gte":{"type":"number","description":"The greater-than-equal condition to be applied to a single field when querying for findings"},"lte":{"type":"number","description":"The less-than-equal condition to be applied to a single field when querying for findings"}},"type":"object"},"aws-native:securityhub:AutomationRuleV2OcsfBooleanFilter":{"description":"Enables filtering of security findings based on boolean field values in OCSF","properties":{"fieldName":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfBooleanFilterFieldName","description":"The name of the field"},"filter":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2BooleanFilter","description":"Enables filtering of security findings based on boolean field values in OCSF."}},"type":"object","required":["fieldName","filter"]},"aws-native:securityhub:AutomationRuleV2OcsfBooleanFilterFieldName":{"description":"The name of the field","type":"string","enum":[{"name":"ComplianceAssessmentsMeetsCriteria","value":"compliance.assessments.meets_criteria"},{"name":"VulnerabilitiesIsExploitAvailable","value":"vulnerabilities.is_exploit_available"},{"name":"VulnerabilitiesIsFixAvailable","value":"vulnerabilities.is_fix_available"}]},"aws-native:securityhub:AutomationRuleV2OcsfDateFilter":{"description":"Enables filtering of security findings based on date and timestamp fields in OCSF","properties":{"fieldName":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfDateFilterFieldName","description":"The name of the field"},"filter":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2DateFilter","description":"Enables filtering of security findings based on date and timestamp fields in OCSF."}},"type":"object","required":["fieldName","filter"]},"aws-native:securityhub:AutomationRuleV2OcsfDateFilterFieldName":{"description":"The name of the field","type":"string","enum":[{"name":"FindingInfoCreatedTimeDt","value":"finding_info.created_time_dt"},{"name":"FindingInfoFirstSeenTimeDt","value":"finding_info.first_seen_time_dt"},{"name":"FindingInfoLastSeenTimeDt","value":"finding_info.last_seen_time_dt"},{"name":"FindingInfoModifiedTimeDt","value":"finding_info.modified_time_dt"}]},"aws-native:securityhub:AutomationRuleV2OcsfFindingFilters":{"description":"The filtering conditions that align with OCSF standards","properties":{"compositeFilters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2CompositeFilter"},"description":"Enables the creation of complex filtering conditions by combining filter"},"compositeOperator":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AllowedOperators","description":"The logical operators used to combine the filtering on multiple `CompositeFilters` ."}},"type":"object"},"aws-native:securityhub:AutomationRuleV2OcsfMapFilter":{"description":"Enables filtering of security findings based on map field values in OCSF","properties":{"fieldName":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfMapFilterFieldName","description":"The name of the field"},"filter":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2MapFilter","description":"Enables filtering of security findings based on map field values in OCSF."}},"type":"object","required":["fieldName","filter"]},"aws-native:securityhub:AutomationRuleV2OcsfMapFilterFieldName":{"description":"The name of the field","type":"string","enum":[{"name":"ResourcesTags","value":"resources.tags"}]},"aws-native:securityhub:AutomationRuleV2OcsfNumberFilter":{"description":"Enables filtering of security findings based on numerical field values in OCSF","properties":{"fieldName":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfNumberFilterFieldName","description":"The name of the field"},"filter":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2NumberFilter","description":"Enables filtering of security findings based on numerical field values in OCSF."}},"type":"object","required":["fieldName","filter"]},"aws-native:securityhub:AutomationRuleV2OcsfNumberFilterFieldName":{"description":"The name of the field","type":"string","enum":[{"name":"ActivityId","value":"activity_id"},{"name":"ComplianceStatusId","value":"compliance.status_id"},{"name":"ConfidenceScore","value":"confidence_score"},{"name":"FindingInfoRelatedEventsCount","value":"finding_info.related_events_count"},{"name":"VendorAttributesSeverityId","value":"vendor_attributes.severity_id"}]},"aws-native:securityhub:AutomationRuleV2OcsfStringField":{"description":"The name of the field","type":"string","enum":[{"name":"ActivityName","value":"activity_name"},{"name":"CloudAccountName","value":"cloud.account.name"},{"name":"CloudAccountUid","value":"cloud.account.uid"},{"name":"CloudProvider","value":"cloud.provider"},{"name":"CloudRegion","value":"cloud.region"},{"name":"ComplianceAssessmentsCategory","value":"compliance.assessments.category"},{"name":"ComplianceAssessmentsName","value":"compliance.assessments.name"},{"name":"ComplianceControl","value":"compliance.control"},{"name":"ComplianceStatus","value":"compliance.status"},{"name":"ComplianceStandards","value":"compliance.standards"},{"name":"FindingInfoDesc","value":"finding_info.desc"},{"name":"FindingInfoSrcUrl","value":"finding_info.src_url"},{"name":"FindingInfoTitle","value":"finding_info.title"},{"name":"FindingInfoTypes","value":"finding_info.types"},{"name":"FindingInfoUid","value":"finding_info.uid"},{"name":"FindingInfoRelatedEventsUid","value":"finding_info.related_events.uid"},{"name":"FindingInfoRelatedEventsProductUid","value":"finding_info.related_events.product.uid"},{"name":"FindingInfoRelatedEventsTitle","value":"finding_info.related_events.title"},{"name":"MetadataProductFeatureUid","value":"metadata.product.feature.uid"},{"name":"MetadataProductName","value":"metadata.product.name"},{"name":"MetadataProductUid","value":"metadata.product.uid"},{"name":"MetadataProductVendorName","value":"metadata.product.vendor_name"},{"name":"RemediationDesc","value":"remediation.desc"},{"name":"RemediationReferences","value":"remediation.references"},{"name":"ResourcesCloudPartition","value":"resources.cloud_partition"},{"name":"ResourcesName","value":"resources.name"},{"name":"ResourcesRegion","value":"resources.region"},{"name":"ResourcesType","value":"resources.type"},{"name":"ResourcesUid","value":"resources.uid"},{"name":"VulnerabilitiesFixCoverage","value":"vulnerabilities.fix_coverage"},{"name":"ClassName","value":"class_name"},{"name":"VendorAttributesSeverity","value":"vendor_attributes.severity"}]},"aws-native:securityhub:AutomationRuleV2OcsfStringFilter":{"description":"Enables filtering of security findings based on string field values in OCSF","properties":{"fieldName":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2OcsfStringField","description":"The name of the field."},"filter":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2StringFilter","description":"Enables filtering of security findings based on string field values in OCSF."}},"type":"object","required":["fieldName","filter"]},"aws-native:securityhub:AutomationRuleV2RuleStatus":{"description":"The status of the automation rule","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:securityhub:AutomationRuleV2StringFilter":{"description":"A string filter for filtering findings","properties":{"comparison":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2StringFilterComparison","description":"The condition to apply to a string value when filtering findings"},"value":{"type":"string","description":"The string filter value"}},"type":"object","required":["comparison","value"]},"aws-native:securityhub:AutomationRuleV2StringFilterComparison":{"description":"The condition to apply to a string value when filtering findings","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"Prefix","value":"PREFIX"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"PrefixNotEquals","value":"PREFIX_NOT_EQUALS"},{"name":"Contains","value":"CONTAINS"}]},"aws-native:securityhub:AutomationRuleWorkflowUpdate":{"description":"Used to update information about the investigation into the finding.","properties":{"status":{"$ref":"#/types/aws-native:securityhub:AutomationRuleWorkflowUpdateStatus","description":"The status of the investigation into the finding. The workflow status is specific to an individual finding. It does not affect the generation of new findings. For example, setting the workflow status to ``SUPPRESSED`` or ``RESOLVED`` does not prevent a new finding for the same issue.\n The allowed values are the following.\n  +  ``NEW`` - The initial state of a finding, before it is reviewed.\n Security Hub CSPM also resets ``WorkFlowStatus`` from ``NOTIFIED`` or ``RESOLVED`` to ``NEW`` in the following cases:\n  +  The record state changes from ``ARCHIVED`` to ``ACTIVE``.\n  +  The compliance status changes from ``PASSED`` to either ``WARNING``, ``FAILED``, or ``NOT_AVAILABLE``.\n  \n  +  ``NOTIFIED`` - Indicates that you notified the resource owner about the security issue. Used when the initial reviewer is not the resource owner, and needs intervention from the resource owner.\n  +  ``RESOLVED`` - The finding was reviewed and remediated and is now considered resolved.\n  +  ``SUPPRESSED`` - Indicates that you reviewed the finding and don't believe that any action is needed. The finding is no longer updated."}},"type":"object","required":["status"]},"aws-native:securityhub:AutomationRuleWorkflowUpdateStatus":{"description":"The status of the investigation into the finding. The workflow status is specific to an individual finding. It does not affect the generation of new findings. For example, setting the workflow status to ``SUPPRESSED`` or ``RESOLVED`` does not prevent a new finding for the same issue.\n The allowed values are the following.\n  +  ``NEW`` - The initial state of a finding, before it is reviewed.\n Security Hub CSPM also resets ``WorkFlowStatus`` from ``NOTIFIED`` or ``RESOLVED`` to ``NEW`` in the following cases:\n  +  The record state changes from ``ARCHIVED`` to ``ACTIVE``.\n  +  The compliance status changes from ``PASSED`` to either ``WARNING``, ``FAILED``, or ``NOT_AVAILABLE``.\n  \n  +  ``NOTIFIED`` - Indicates that you notified the resource owner about the security issue. Used when the initial reviewer is not the resource owner, and needs intervention from the resource owner.\n  +  ``RESOLVED`` - The finding was reviewed and remediated and is now considered resolved.\n  +  ``SUPPRESSED`` - Indicates that you reviewed the finding and don't believe that any action is needed. The finding is no longer updated.","type":"string","enum":[{"name":"New","value":"NEW"},{"name":"Notified","value":"NOTIFIED"},{"name":"Resolved","value":"RESOLVED"},{"name":"Suppressed","value":"SUPPRESSED"}]},"aws-native:securityhub:AutomationRulesAction":{"description":"One or more actions that ASHlong takes when a finding matches the defined criteria of a rule.","properties":{"findingFieldsUpdate":{"$ref":"#/types/aws-native:securityhub:AutomationRulesFindingFieldsUpdate","description":"Specifies that the automation rule action is an update to a finding field."},"type":{"$ref":"#/types/aws-native:securityhub:AutomationRulesActionType","description":"Specifies the type of action that Security Hub CSPM takes when a finding matches the defined criteria of a rule."}},"type":"object","required":["findingFieldsUpdate","type"]},"aws-native:securityhub:AutomationRulesActionType":{"description":"Specifies the type of action that Security Hub CSPM takes when a finding matches the defined criteria of a rule.","type":"string","enum":[{"name":"FindingFieldsUpdate","value":"FINDING_FIELDS_UPDATE"}]},"aws-native:securityhub:AutomationRulesFindingFieldsUpdate":{"description":"Identifies the finding fields that the automation rule action updates when a finding matches the defined criteria.","properties":{"confidence":{"type":"integer","description":"The rule action updates the ``Confidence`` field of a finding."},"criticality":{"type":"integer","description":"The rule action updates the ``Criticality`` field of a finding."},"note":{"$ref":"#/types/aws-native:securityhub:AutomationRuleNoteUpdate","description":"The rule action will update the ``Note`` field of a finding."},"relatedFindings":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleRelatedFinding"},"description":"The rule action will update the ``RelatedFindings`` field of a finding."},"severity":{"$ref":"#/types/aws-native:securityhub:AutomationRuleSeverityUpdate","description":"The rule action will update the ``Severity`` field of a finding."},"types":{"type":"array","items":{"type":"string"},"description":"The rule action updates the ``Types`` field of a finding."},"userDefinedFields":{"type":"object","additionalProperties":{"type":"string"},"description":"The rule action updates the ``UserDefinedFields`` field of a finding."},"verificationState":{"$ref":"#/types/aws-native:securityhub:AutomationRulesFindingFieldsUpdateVerificationState","description":"The rule action updates the ``VerificationState`` field of a finding."},"workflow":{"$ref":"#/types/aws-native:securityhub:AutomationRuleWorkflowUpdate","description":"The rule action will update the ``Workflow`` field of a finding."}},"type":"object"},"aws-native:securityhub:AutomationRulesFindingFieldsUpdateVerificationState":{"description":"The rule action updates the ``VerificationState`` field of a finding.","type":"string","enum":[{"name":"Unknown","value":"UNKNOWN"},{"name":"TruePositive","value":"TRUE_POSITIVE"},{"name":"FalsePositive","value":"FALSE_POSITIVE"},{"name":"BenignPositive","value":"BENIGN_POSITIVE"}]},"aws-native:securityhub:AutomationRulesFindingFilters":{"description":"The criteria that determine which findings a rule applies to.","properties":{"awsAccountId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The AWS-account ID in which a finding was generated.\n  Array Members: Minimum number of 1 item. Maximum number of 100 items."},"companyName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The name of the company for the product that generated the finding. For control-based findings, the company is AWS. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"complianceAssociatedStandardsId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The unique identifier of a standard in which a control is enabled. This field consists of the resource portion of the Amazon Resource Name (ARN) returned for a standard in the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API response.\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"complianceSecurityControlId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The security control ID for which a finding was generated. Security control IDs are the same across standards.\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"complianceStatus":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The result of a security check. This field is only used for findings generated from controls. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"confidence":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleNumberFilter"},"description":"The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. ``Confidence`` is scored on a 0–100 basis using a ratio scale. A value of ``0`` means 0 percent confidence, and a value of ``100`` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see [Confidence](https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence) in the *User Guide*.\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"createdAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateFilter"},"description":"A timestamp that indicates when this finding record was created. \n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps).\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"criticality":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleNumberFilter"},"description":"The level of importance that is assigned to the resources that are associated with a finding. ``Criticality`` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of ``0`` means that the underlying resources have no criticality, and a score of ``100`` is reserved for the most critical resources. For more information, see [Criticality](https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality) in the *User Guide*.\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"description":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"A finding's description. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"firstObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateFilter"},"description":"A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product. \n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps).\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"generatorId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The identifier for the solution-specific component that generated a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 100 items."},"id":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The product-specific identifier for a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"lastObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateFilter"},"description":"A timestamp that indicates when the security findings provider most recently observed a change in the resource that is involved in the finding. \n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps).\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"noteText":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The text of a user-defined note that's added to a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"noteUpdatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateFilter"},"description":"The timestamp of when the note was updated.\n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps).\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"noteUpdatedBy":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The principal that created a note. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"productArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub CSPM. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"productName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub CSPM. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"recordState":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"Provides the current state of a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"relatedFindingsId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The product-generated identifier for a related finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"relatedFindingsProductArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The ARN for the product that generated a related finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"resourceDetailsOther":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleMapFilter"},"description":"Custom fields and values about the resource that a finding pertains to. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"resourceId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The identifier for the given resource type. For AWS resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS-service that created the resource. For non-AWS resources, this is a unique identifier that is associated with the resource. \n  Array Members: Minimum number of 1 item. Maximum number of 100 items."},"resourcePartition":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The partition in which the resource that the finding pertains to is located. A partition is a group of AWS-Regions. Each AWS-account is scoped to one partition. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"resourceRegion":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The AWS-Region where the resource that a finding pertains to is located. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleMapFilter"},"description":"A list of AWS tags associated with a resource at the time the finding was processed. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"resourceType":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"A finding's title. \n  Array Members: Minimum number of 1 item. Maximum number of 100 items."},"severityLabel":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"The severity value of the finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"sourceUrl":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"Provides a URL that links to a page about the current finding in the finding product. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"title":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"A finding's title. \n  Array Members: Minimum number of 1 item. Maximum number of 100 items."},"type":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"One or more finding types in the format of namespace/category/classifier that classify a finding. For a list of namespaces, classifiers, and categories, see [Types taxonomy for ASFF](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html) in the *User Guide*.\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"updatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleDateFilter"},"description":"A timestamp that indicates when the finding record was most recently updated. \n For more information about the validation and formatting of timestamp fields in ASHlong, see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps).\n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"userDefinedFields":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleMapFilter"},"description":"A list of user-defined name and value string pairs added to a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"verificationState":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"Provides the veracity of a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."},"workflowStatus":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleStringFilter"},"description":"Provides information about the status of the investigation into a finding. \n  Array Members: Minimum number of 1 item. Maximum number of 20 items."}},"type":"object"},"aws-native:securityhub:ConfigurationPolicyParameterConfiguration":{"description":"An object that provides the current value of a security control parameter and identifies whether it has been customized.","properties":{"value":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicyParameterValue"},"valueType":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicyParameterConfigurationValueType","description":"Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub behavior."}},"type":"object","required":["valueType"]},"aws-native:securityhub:ConfigurationPolicyParameterConfigurationValueType":{"description":"Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub behavior.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:securityhub:ConfigurationPolicyParameterValue":{"description":"An object that includes the data type of a security control parameter and its current value.","properties":{"boolean":{"type":"boolean","description":"A control parameter that is a boolean."},"double":{"type":"number","description":"A control parameter that is a double."},"enum":{"type":"string","description":"A control parameter that is an enum."},"enumList":{"type":"array","items":{"type":"string"},"description":"A control parameter that is a list of enums."},"integer":{"type":"integer","description":"A control parameter that is an integer."},"integerList":{"type":"array","items":{"type":"integer"},"description":"A control parameter that is a list of integers."},"string":{"type":"string","description":"A control parameter that is a string."},"stringList":{"type":"array","items":{"type":"string"},"description":"A control parameter that is a list of strings."}},"type":"object"},"aws-native:securityhub:ConfigurationPolicyPolicy":{"description":"An object that defines how Security Hub is configured.","properties":{"securityHub":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicySecurityHubPolicy","description":"The AWS service that the configuration policy applies to."}},"type":"object"},"aws-native:securityhub:ConfigurationPolicySecurityControlCustomParameter":{"description":"An object of security control and control parameter value that are included in a configuration policy.","properties":{"parameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicyParameterConfiguration"},"description":"An object that specifies parameter values for a control in a configuration policy."},"securityControlId":{"type":"string","description":"The ID of the security control."}},"type":"object"},"aws-native:securityhub:ConfigurationPolicySecurityControlsConfiguration":{"description":"An object that defines which security controls are enabled in an AWS Security Hub configuration policy.","properties":{"disabledSecurityControlIdentifiers":{"type":"array","items":{"type":"string"},"description":"A list of security controls that are disabled in the configuration policy"},"enabledSecurityControlIdentifiers":{"type":"array","items":{"type":"string"},"description":"A list of security controls that are enabled in the configuration policy."},"securityControlCustomParameters":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicySecurityControlCustomParameter"},"description":"A list of security controls and control parameter values that are included in a configuration policy."}},"type":"object"},"aws-native:securityhub:ConfigurationPolicySecurityHubPolicy":{"description":"An object that defines how AWS Security Hub is configured.","properties":{"enabledStandardIdentifiers":{"type":"array","items":{"type":"string"},"description":"A list that defines which security standards are enabled in the configuration policy."},"securityControlsConfiguration":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicySecurityControlsConfiguration","description":"An object that defines which security controls are enabled in the configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.\n\nThis property is required only if `ServiceEnabled` is set to true in your configuration policy."},"serviceEnabled":{"type":"boolean","description":"Indicates whether Security Hub is enabled in the policy."}},"type":"object"},"aws-native:securityhub:ConnectorV2ConnectorStatus":{"description":"The status of the connector","type":"string","enum":[{"name":"Connected","value":"CONNECTED"},{"name":"FailedToConnect","value":"FAILED_TO_CONNECT"},{"name":"PendingAuthorization","value":"PENDING_AUTHORIZATION"},{"name":"PendingConfiguration","value":"PENDING_CONFIGURATION"}]},"aws-native:securityhub:ConnectorV2Provider":{"description":"The third-party provider configuration for the connector","type":"object"},"aws-native:securityhub:DelegatedAdminStatus":{"description":"Whether the delegated Security Hub CSPM administrator is set for the organization.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"DisableInProgress","value":"DISABLE_IN_PROGRESS"}]},"aws-native:securityhub:FindingAggregatorRegionLinkingMode":{"description":"Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them.\n The selected option also determines how to use the Regions provided in the Regions list.\n In CFN, the options for this property are as follows:\n  +  ``ALL_REGIONS`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``ALL_REGIONS_EXCEPT_SPECIFIED`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the ``Regions`` parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``SPECIFIED_REGIONS`` - Indicates to aggregate findings only from the Regions listed in the ``Regions`` parameter. Security Hub does not automatically aggregate findings from new Regions.","type":"string","enum":[{"name":"AllRegions","value":"ALL_REGIONS"},{"name":"AllRegionsExceptSpecified","value":"ALL_REGIONS_EXCEPT_SPECIFIED"},{"name":"SpecifiedRegions","value":"SPECIFIED_REGIONS"}]},"aws-native:securityhub:InsightAwsSecurityFindingFilters":{"description":"A collection of filters that are applied to all active findings aggregated by AWS Security Hub.","properties":{"awsAccountId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The AWS account ID in which a finding is generated."},"awsAccountName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the AWS account in which a finding is generated."},"companyName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the findings provider (company) that owns the solution (product) that generates findings."},"complianceAssociatedStandardsId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The unique identifier of a standard in which a control is enabled."},"complianceSecurityControlId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The unique identifier of a control across standards."},"complianceSecurityControlParametersName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of a security control parameter."},"complianceSecurityControlParametersValue":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The current value of a security control parameter."},"complianceStatus":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard."},"confidence":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"A finding's confidence."},"createdAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"An ISO8601-formatted timestamp that indicates when the security findings provider captured the potential security issue that a finding captured."},"criticality":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The level of importance assigned to the resources associated with the finding."},"description":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"A finding's description."},"findingProviderFieldsConfidence":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The finding provider value for the finding confidence."},"findingProviderFieldsCriticality":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The finding provider value for the level of importance assigned to the resources associated with the findings."},"findingProviderFieldsRelatedFindingsId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The finding identifier of a related finding that is identified by the finding provider."},"findingProviderFieldsRelatedFindingsProductArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The ARN of the solution that generated a related finding that is identified by the finding provider."},"findingProviderFieldsSeverityLabel":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The finding provider value for the severity label."},"findingProviderFieldsSeverityOriginal":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The finding provider's original value for the severity."},"findingProviderFieldsTypes":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"One or more finding types that the finding provider assigned to the finding."},"firstObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"An ISO8601-formatted timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured."},"generatorId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The identifier for the solution-specific component (a discrete unit of logic) that generated a finding."},"id":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The security findings provider-specific identifier for a finding."},"keyword":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightKeywordFilter"},"description":"A keyword for a finding."},"lastObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"An ISO8601-formatted timestamp that indicates when the security findings provider most recently observed the potential security issue that a finding captured."},"malwareName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the malware that was observed."},"malwarePath":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The filesystem path of the malware that was observed."},"malwareState":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The state of the malware that was observed."},"malwareType":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The type of the malware that was observed."},"networkDestinationDomain":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The destination domain of network-related information about a finding."},"networkDestinationIpV4":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightIpFilter"},"description":"The destination IPv4 address of network-related information about a finding."},"networkDestinationIpV6":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightIpFilter"},"description":"The destination IPv6 address of network-related information about a finding."},"networkDestinationPort":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The destination port of network-related information about a finding."},"networkDirection":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"Indicates the direction of network traffic associated with a finding."},"networkProtocol":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The protocol of network-related information about a finding."},"networkSourceDomain":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The source domain of network-related information about a finding."},"networkSourceIpV4":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightIpFilter"},"description":"The source IPv4 address of network-related information about a finding."},"networkSourceIpV6":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightIpFilter"},"description":"The source IPv6 address of network-related information about a finding."},"networkSourceMac":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The source media access control (MAC) address of network-related information about a finding."},"networkSourcePort":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The source port of network-related information about a finding."},"noteText":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The text of a note."},"noteUpdatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"The timestamp of when the note was updated."},"noteUpdatedBy":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The principal that created a note."},"processLaunchedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"A timestamp that identifies when the process was launched."},"processName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the process."},"processParentPid":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The parent process ID."},"processPath":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The path to the process executable."},"processPid":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The process ID."},"processTerminatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"A timestamp that identifies when the process was terminated."},"productArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub."},"productFields":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightMapFilter"},"description":"A data type where security findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format."},"productName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the solution (product) that generates findings."},"recommendationText":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The recommendation of what to do about the issue described in a finding."},"recordState":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The updated record state for the finding."},"region":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The Region from which the finding was generated."},"relatedFindingsId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The solution-generated identifier for a related finding."},"relatedFindingsProductArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The ARN of the solution that generated a related finding."},"resourceApplicationArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The ARN of the application that is related to a finding."},"resourceApplicationName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the application that is related to a finding."},"resourceAwsEc2InstanceIamInstanceProfileArn":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The IAM profile ARN of the instance."},"resourceAwsEc2InstanceImageId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The Amazon Machine Image (AMI) ID of the instance."},"resourceAwsEc2InstanceIpV4Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightIpFilter"},"description":"The IPv4 addresses associated with the instance."},"resourceAwsEc2InstanceIpV6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightIpFilter"},"description":"The IPv6 addresses associated with the instance."},"resourceAwsEc2InstanceKeyName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The key name associated with the instance."},"resourceAwsEc2InstanceLaunchedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"The date and time the instance was launched."},"resourceAwsEc2InstanceSubnetId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The identifier of the subnet that the instance was launched in."},"resourceAwsEc2InstanceType":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The instance type of the instance."},"resourceAwsEc2InstanceVpcId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The identifier of the VPC that the instance was launched in."},"resourceAwsIamAccessKeyCreatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"The creation date/time of the IAM access key related to a finding."},"resourceAwsIamAccessKeyPrincipalName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the principal that is associated with an IAM access key."},"resourceAwsIamAccessKeyStatus":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The status of the IAM access key related to a finding."},"resourceAwsIamAccessKeyUserName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The user associated with the IAM access key related to a finding."},"resourceAwsIamUserUserName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of an IAM user."},"resourceAwsS3BucketOwnerId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The canonical user ID of the owner of the S3 bucket."},"resourceAwsS3BucketOwnerName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The display name of the owner of the S3 bucket."},"resourceContainerImageId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The identifier of the image related to a finding."},"resourceContainerImageName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the image related to a finding."},"resourceContainerLaunchedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"A timestamp that identifies when the container was started."},"resourceContainerName":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The name of the container related to a finding."},"resourceDetailsOther":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightMapFilter"},"description":"The details of a resource that doesn't have a specific subfield for the resource type defined."},"resourceId":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The canonical identifier for the given resource type."},"resourcePartition":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The canonical AWS partition name that the Region is assigned to."},"resourceRegion":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The canonical AWS external Region name where this resource is located."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightMapFilter"},"description":"A list of AWS tags associated with a resource at the time the finding was processed."},"resourceType":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"Specifies the type of the resource that details are provided for."},"sample":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightBooleanFilter"},"description":"Indicates whether or not sample findings are included in the filter results."},"severityLabel":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The label of a finding's severity."},"severityNormalized":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The normalized severity of a finding."},"severityProduct":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightNumberFilter"},"description":"The native severity as defined by the security findings provider's solution that generated the finding."},"sourceUrl":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"A URL that links to a page about the current finding in the security findings provider's solution."},"threatIntelIndicatorCategory":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The category of a threat intelligence indicator."},"threatIntelIndicatorLastObservedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"A timestamp that identifies the last observation of a threat intelligence indicator."},"threatIntelIndicatorSource":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The source of the threat intelligence."},"threatIntelIndicatorSourceUrl":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The URL for more details from the source of the threat intelligence."},"threatIntelIndicatorType":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The type of a threat intelligence indicator."},"threatIntelIndicatorValue":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The value of a threat intelligence indicator."},"title":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"A finding's title."},"type":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"A finding type in the format of namespace/category/classifier that classifies a finding."},"updatedAt":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightDateFilter"},"description":"An ISO8601-formatted timestamp that indicates when the security findings provider last updated the finding record."},"userDefinedFields":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightMapFilter"},"description":"A list of name/value string pairs associated with the finding."},"verificationState":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The veracity of a finding."},"vulnerabilitiesExploitAvailable":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"Indicates whether a software vulnerability in your environment has a known exploit."},"vulnerabilitiesFixAvailable":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"Indicates whether a vulnerability is fixed in a newer version of the affected software packages."},"workflowState":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The workflow state of a finding."},"workflowStatus":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:InsightStringFilter"},"description":"The status of the investigation into a finding."}},"type":"object"},"aws-native:securityhub:InsightBooleanFilter":{"description":"Boolean filter for querying findings.","properties":{"value":{"type":"boolean","description":"The value of the boolean."}},"type":"object","required":["value"]},"aws-native:securityhub:InsightDateFilter":{"description":"A date filter for querying findings.","properties":{"dateRange":{"$ref":"#/types/aws-native:securityhub:InsightDateRange","description":"A date range for the date filter."},"end":{"type":"string","description":"A timestamp that provides the end date for the date filter.\n\nFor more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) ."},"start":{"type":"string","description":"A timestamp that provides the start date for the date filter.\n\nFor more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) ."}},"type":"object"},"aws-native:securityhub:InsightDateRange":{"description":"A date range for the date filter.","properties":{"unit":{"$ref":"#/types/aws-native:securityhub:InsightDateRangeUnit","description":"A date range unit for the date filter."},"value":{"type":"number","description":"A date range value for the date filter."}},"type":"object","required":["unit","value"]},"aws-native:securityhub:InsightDateRangeUnit":{"description":"A date range unit for the date filter.","type":"string","enum":[{"name":"Days","value":"DAYS"}]},"aws-native:securityhub:InsightIpFilter":{"description":"The IP filter for querying findings.","properties":{"cidr":{"type":"string","description":"A finding's CIDR value."}},"type":"object","required":["cidr"]},"aws-native:securityhub:InsightKeywordFilter":{"description":"A keyword filter for querying findings.","properties":{"value":{"type":"string","description":"A value for the keyword."}},"type":"object","required":["value"]},"aws-native:securityhub:InsightMapFilter":{"description":"A map filter for filtering AWS Security Hub findings.","properties":{"comparison":{"$ref":"#/types/aws-native:securityhub:InsightMapFilterComparison","description":"The condition to apply to the key value when filtering Security Hub findings with a map filter."},"key":{"type":"string","description":"The key of the map filter. For example, for `ResourceTags` , `Key` identifies the name of the tag. For `UserDefinedFields` , `Key` is the name of the field."},"value":{"type":"string","description":"The value for the key in the map filter. Filter values are case sensitive. For example, one of the values for a tag called `Department` might be `Security` . If you provide `security` as the filter value, then there's no match."}},"type":"object","required":["comparison","key","value"]},"aws-native:securityhub:InsightMapFilterComparison":{"description":"The condition to apply to the key value when filtering Security Hub findings with a map filter.","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"}]},"aws-native:securityhub:InsightNumberFilter":{"description":"A number filter for querying findings.","properties":{"eq":{"type":"number","description":"The equal-to condition to be applied to a single field when querying for findings."},"gte":{"type":"number","description":"The greater-than-equal condition to be applied to a single field when querying for findings."},"lte":{"type":"number","description":"The less-than-equal condition to be applied to a single field when querying for findings."}},"type":"object"},"aws-native:securityhub:InsightStringFilter":{"description":"A string filter for filtering AWS Security Hub findings.","properties":{"comparison":{"$ref":"#/types/aws-native:securityhub:InsightStringFilterComparison","description":"The condition to apply to a string value when filtering Security Hub CSPM findings.\n\nTo search for values that have the filter value, use one of the following comparison operators:\n\n- To search for values that include the filter value, use `CONTAINS` . For example, the filter `Title CONTAINS CloudFront` matches findings that have a `Title` that includes the string CloudFront.\n- To search for values that exactly match the filter value, use `EQUALS` . For example, the filter `AwsAccountId EQUALS 123456789012` only matches findings that have an account ID of `123456789012` .\n- To search for values that start with the filter value, use `PREFIX` . For example, the filter `ResourceRegion PREFIX us` matches findings that have a `ResourceRegion` that starts with `us` . A `ResourceRegion` that starts with a different value, such as `af` , `ap` , or `ca` , doesn't match.\n\n`CONTAINS` , `EQUALS` , and `PREFIX` filters on the same field are joined by `OR` . A finding matches if it matches any one of those filters. For example, the filters `Title CONTAINS CloudFront OR Title CONTAINS CloudWatch` match a finding that includes either `CloudFront` , `CloudWatch` , or both strings in the title.\n\nTo search for values that don’t have the filter value, use one of the following comparison operators:\n\n- To search for values that exclude the filter value, use `NOT_CONTAINS` . For example, the filter `Title NOT_CONTAINS CloudFront` matches findings that have a `Title` that excludes the string CloudFront.\n- To search for values other than the filter value, use `NOT_EQUALS` . For example, the filter `AwsAccountId NOT_EQUALS 123456789012` only matches findings that have an account ID other than `123456789012` .\n- To search for values that don't start with the filter value, use `PREFIX_NOT_EQUALS` . For example, the filter `ResourceRegion PREFIX_NOT_EQUALS us` matches findings with a `ResourceRegion` that starts with a value other than `us` .\n\n`NOT_CONTAINS` , `NOT_EQUALS` , and `PREFIX_NOT_EQUALS` filters on the same field are joined by `AND` . A finding matches only if it matches all of those filters. For example, the filters `Title NOT_CONTAINS CloudFront AND Title NOT_CONTAINS CloudWatch` match a finding that excludes both `CloudFront` and `CloudWatch` in the title.\n\nYou can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.\n\nYou can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.\n\nFor example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .\n\n- `ResourceType PREFIX AwsIam`\n- `ResourceType PREFIX AwsEc2`\n- `ResourceType NOT_EQUALS AwsIamPolicy`\n- `ResourceType NOT_EQUALS AwsEc2NetworkInterface`\n\n`CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* ."},"value":{"type":"string","description":"The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match."}},"type":"object","required":["comparison","value"]},"aws-native:securityhub:InsightStringFilterComparison":{"description":"The condition to apply to a string value when filtering Security Hub findings.","type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"Prefix","value":"PREFIX"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"PrefixNotEquals","value":"PREFIX_NOT_EQUALS"}]},"aws-native:securityhub:OrganizationConfigurationAutoEnableStandards":{"description":"Whether to automatically enable Security Hub default standards in new member accounts when they join the organization.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"None","value":"NONE"}]},"aws-native:securityhub:OrganizationConfigurationConfigurationType":{"description":"Indicates whether the organization uses local or central configuration.","type":"string","enum":[{"name":"Central","value":"CENTRAL"},{"name":"Local","value":"LOCAL"}]},"aws-native:securityhub:OrganizationConfigurationStatus":{"description":"Describes whether central configuration could be enabled as the ConfigurationType for the organization.","type":"string","enum":[{"name":"Pending","value":"PENDING"},{"name":"Enabled","value":"ENABLED"},{"name":"Failed","value":"FAILED"}]},"aws-native:securityhub:PolicyAssociationAssociationStatus":{"description":"The current status of the association between the specified target and the configuration","type":"string","enum":[{"name":"Success","value":"SUCCESS"},{"name":"Pending","value":"PENDING"},{"name":"Failed","value":"FAILED"}]},"aws-native:securityhub:PolicyAssociationAssociationType":{"description":"Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent","type":"string","enum":[{"name":"Applied","value":"APPLIED"},{"name":"Inherited","value":"INHERITED"}]},"aws-native:securityhub:PolicyAssociationTargetType":{"description":"Indicates whether the target is an AWS account, organizational unit, or the organization root","type":"string","enum":[{"name":"Account","value":"ACCOUNT"},{"name":"OrganizationalUnit","value":"ORGANIZATIONAL_UNIT"},{"name":"Root","value":"ROOT"}]},"aws-native:securityhub:SecurityControlParameterConfiguration":{"properties":{"value":{"$ref":"#/types/aws-native:securityhub:SecurityControlParameterValue","description":"The current value of a control parameter."},"valueType":{"$ref":"#/types/aws-native:securityhub:SecurityControlParameterConfigurationValueType","description":"Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub CSPM behavior.\n\nWhen `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field.\n\nWhen `ValueType` is set equal to `CUSTOM` , the `Value` field can't be empty."}},"type":"object","required":["valueType"]},"aws-native:securityhub:SecurityControlParameterConfigurationValueType":{"description":"Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub CSPM behavior.\n\nWhen `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field.\n\nWhen `ValueType` is set equal to `CUSTOM` , the `Value` field can't be empty.","type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:securityhub:SecurityControlParameterValue":{"properties":{"boolean":{"type":"boolean","description":"A control parameter that is a boolean."},"double":{"type":"number","description":"A control parameter that is a double."},"enum":{"type":"string","description":"A control parameter that is a enum."},"enumList":{"type":"array","items":{"type":"string"},"description":"A control parameter that is a list of enums."},"integer":{"type":"integer","description":"A control parameter that is a integer."},"integerList":{"type":"array","items":{"type":"integer"},"description":"A control parameter that is a list of integers."},"string":{"type":"string","description":"A control parameter that is a string."},"stringList":{"type":"array","items":{"type":"string"},"description":"A control parameter that is a list of strings."}},"type":"object"},"aws-native:securityhub:StandardsControl":{"description":"Provides details about an individual security control. For a list of ASH controls, see [controls reference](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-controls-reference.html) in the *User Guide*.","properties":{"reason":{"type":"string","description":"A user-defined reason for changing a control's enablement status in a specified standard. If you are disabling a control, then this property is required."},"standardsControlArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the control."}},"type":"object","required":["standardsControlArn"]},"aws-native:securitylake:DataLakeEncryptionConfiguration":{"description":"Provides encryption details of Amazon Security Lake object.","properties":{"kmsKeyId":{"type":"string","description":"The id of KMS encryption key used by Amazon Security Lake to encrypt the Security Lake object."}},"type":"object"},"aws-native:securitylake:DataLakeExpiration":{"description":"Provides data expiration details of Amazon Security Lake object.","properties":{"days":{"type":"integer","description":"The number of days before data expires in the Amazon Security Lake object."}},"type":"object"},"aws-native:securitylake:DataLakeLifecycleConfiguration":{"description":"Provides lifecycle details of Amazon Security Lake object.","properties":{"expiration":{"$ref":"#/types/aws-native:securitylake:DataLakeExpiration","description":"Provides data expiration details of the Amazon Security Lake object."},"transitions":{"type":"array","items":{"$ref":"#/types/aws-native:securitylake:DataLakeTransitions"},"description":"Provides data storage transition details of Amazon Security Lake object."}},"type":"object"},"aws-native:securitylake:DataLakeReplicationConfiguration":{"description":"Provides replication details of Amazon Security Lake object.","properties":{"regions":{"type":"array","items":{"type":"string"},"description":"Specifies one or more centralized rollup Regions. The AWS Region specified in the region parameter of the `CreateDataLake` or `UpdateDataLake` operations contributes data to the rollup Region or Regions specified in this parameter.\n\nReplication enables automatic, asynchronous copying of objects across Amazon S3 buckets. S3 buckets that are configured for object replication can be owned by the same AWS account or by different accounts. You can replicate objects to a single destination bucket or to multiple destination buckets. The destination buckets can be in different Regions or within the same Region as the source bucket."},"roleArn":{"type":"string","description":"Replication settings for the Amazon S3 buckets. This parameter uses the AWS Identity and Access Management (IAM) role you created that is managed by Security Lake, to ensure the replication setting is correct."}},"type":"object"},"aws-native:securitylake:DataLakeTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_`, `.`, `/`, `=`, `+`, and `-`."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 characters in length."}},"type":"object","required":["key","value"]},"aws-native:securitylake:DataLakeTransitions":{"properties":{"days":{"type":"integer","description":"Number of days before data transitions to a different S3 Storage Class in the Amazon Security Lake object."},"storageClass":{"type":"string","description":"The range of storage classes that you can choose from based on the data access, resiliency, and cost requirements of your workloads."}},"type":"object"},"aws-native:securitylake:SubscriberAccessTypesItem":{"type":"string","enum":[{"name":"Lakeformation","value":"LAKEFORMATION"},{"name":"S3","value":"S3"}]},"aws-native:securitylake:SubscriberAwsLogSource":{"description":"Amazon Security Lake supports log and event collection for natively supported AWS services.","properties":{"sourceName":{"type":"string","description":"The name for a AWS source. This must be a Regionally unique value."},"sourceVersion":{"type":"string","description":"The version for a AWS source. This must be a Regionally unique value."}},"type":"object"},"aws-native:securitylake:SubscriberCustomLogSource":{"properties":{"sourceName":{"type":"string","description":"The name for a third-party custom source. This must be a Regionally unique value."},"sourceVersion":{"type":"string","description":"The version for a third-party custom source. This must be a Regionally unique value."}},"type":"object"},"aws-native:securitylake:SubscriberIdentityProperties":{"description":"The AWS identity used to access your data.","properties":{"externalId":{"type":"string","description":"The external ID used to establish trust relationship with the AWS identity."},"principal":{"type":"string","description":"The AWS identity principal."}},"type":"object","required":["externalId","principal"]},"aws-native:securitylake:SubscriberNotificationHttpsNotificationConfiguration":{"description":"The configuration for HTTPS subscriber notification.","properties":{"authorizationApiKeyName":{"type":"string","description":"The key name for the notification subscription."},"authorizationApiKeyValue":{"type":"string","description":"The key value for the notification subscription."},"endpoint":{"type":"string","description":"The subscription endpoint in Security Lake."},"httpMethod":{"$ref":"#/types/aws-native:securitylake:SubscriberNotificationHttpsNotificationConfigurationHttpMethod","description":"The HTTPS method used for the notification subscription."},"targetRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you created."}},"type":"object","required":["endpoint","targetRoleArn"]},"aws-native:securitylake:SubscriberNotificationHttpsNotificationConfigurationHttpMethod":{"description":"The HTTPS method used for the notification subscription.","type":"string","enum":[{"name":"Post","value":"POST"},{"name":"Put","value":"PUT"}]},"aws-native:securitylake:SubscriberNotificationNotificationConfiguration":{"properties":{"httpsNotificationConfiguration":{"$ref":"#/types/aws-native:securitylake:SubscriberNotificationHttpsNotificationConfiguration","description":"The configurations used for HTTPS subscriber notification."},"sqsNotificationConfiguration":{"$ref":"#/types/aws-native:securitylake:SubscriberNotificationSqsNotificationConfiguration","description":"The configurations for SQS subscriber notification. The members of this structure are context-dependent."}},"type":"object"},"aws-native:securitylake:SubscriberNotificationSqsNotificationConfiguration":{"description":"The configurations for SQS subscriber notification. The members of this structure are context-dependent.","type":"object"},"aws-native:securitylake:SubscriberSource":{"properties":{"awsLogSource":{"$ref":"#/types/aws-native:securitylake:SubscriberAwsLogSource"},"customLogSource":{"$ref":"#/types/aws-native:securitylake:SubscriberCustomLogSource"}},"type":"object"},"aws-native:securitylake:SubscriberTag":{"properties":{"key":{"type":"string","description":"The name of the tag. This is a general label that acts as a category for a more specific tag value (value)."},"value":{"type":"string","description":"The value that is associated with the specified tag key (key). This value acts as a descriptor for the tag key. A tag value cannot be null, but it can be an empty string."}},"type":"object","required":["key","value"]},"aws-native:servicecatalog:CloudFormationProductCodeStarParameters":{"properties":{"artifactPath":{"type":"string","description":"The absolute path wehre the artifact resides within the repo and branch, formatted as \"folder/file.json.\""},"branch":{"type":"string","description":"The specific branch where the artifact resides."},"connectionArn":{"type":"string","description":"The CodeStar ARN, which is the connection between AWS Service Catalog and the external repository."},"repository":{"type":"string","description":"The specific repository where the product’s artifact-to-be-synced resides, formatted as \"Account/Repo.\""}},"type":"object","required":["artifactPath","branch","connectionArn","repository"]},"aws-native:servicecatalog:CloudFormationProductConnectionParameters":{"properties":{"codeStar":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductCodeStarParameters","description":"Provides `ConnectionType` details."}},"type":"object"},"aws-native:servicecatalog:CloudFormationProductProvisioningArtifactProperties":{"properties":{"description":{"type":"string","description":"The description of the provisioning artifact, including how it differs from the previous provisioning artifact."},"disableTemplateValidation":{"type":"boolean","description":"If set to true, AWS Service Catalog stops validating the specified provisioning artifact even if it is invalid."},"info":{"$ref":"pulumi.json#/Any","description":"Specify the template source with one of the following options, but not both. Keys accepted: [ `LoadTemplateFromURL` , `ImportFromPhysicalId` ]\n\nThe URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:\n\n`\"LoadTemplateFromURL\": \"https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/...\"`\n\n`ImportFromPhysicalId` : The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: `ImportFromPhysicalId: \"arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]`"},"name":{"type":"string","description":"The name of the provisioning artifact (for example, v1 v2beta). No spaces are allowed."},"type":{"type":"string","description":"The type of provisioning artifact.\n\n- `CLOUD_FORMATION_TEMPLATE` - AWS CloudFormation template\n- `TERRAFORM_OPEN_SOURCE` - Terraform Open Source configuration file\n- `TERRAFORM_CLOUD` - Terraform Cloud configuration file\n- `EXTERNAL` - External configuration file"}},"type":"object","required":["info"]},"aws-native:servicecatalog:CloudFormationProductSourceConnection":{"properties":{"connectionParameters":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductConnectionParameters","description":"The connection details based on the connection `Type` ."},"type":{"type":"string","description":"The only supported `SourceConnection` type is Codestar."}},"type":"object","required":["connectionParameters","type"]},"aws-native:servicecatalog:CloudFormationProductTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The value for this key."}},"type":"object","required":["key","value"]},"aws-native:servicecatalog:CloudFormationProvisionedProductAcceptLanguage":{"description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese","type":"string","enum":[{"name":"En","value":"en"},{"name":"Jp","value":"jp"},{"name":"Zh","value":"zh"}]},"aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningParameter":{"properties":{"key":{"type":"string","description":"The parameter key."},"value":{"type":"string","description":"The parameter value."}},"type":"object","required":["key","value"]},"aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningPreferences":{"properties":{"stackSetAccounts":{"type":"array","items":{"type":"string"},"description":"One or more AWS accounts where the provisioned product will be available.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\nThe specified accounts should be within the list of accounts from the `STACKSET` constraint. To get the list of accounts in the `STACKSET` constraint, use the `DescribeProvisioningParameters` operation.\n\nIf no values are specified, the default value is all acounts from the `STACKSET` constraint."},"stackSetFailureToleranceCount":{"type":"integer","description":"The number of accounts, per Region, for which this operation can fail before AWS Service Catalog stops the operation in that Region. If the operation is stopped in a Region, AWS Service Catalog doesn't attempt the operation in any subsequent Regions.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\nConditional: You must specify either `StackSetFailureToleranceCount` or `StackSetFailureTolerancePercentage` , but not both.\n\nThe default value is `0` if no value is specified."},"stackSetFailureTolerancePercentage":{"type":"integer","description":"The percentage of accounts, per Region, for which this stack operation can fail before AWS Service Catalog stops the operation in that Region. If the operation is stopped in a Region, AWS Service Catalog doesn't attempt the operation in any subsequent Regions.\n\nWhen calculating the number of accounts based on the specified percentage, AWS Service Catalog rounds down to the next whole number.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\nConditional: You must specify either `StackSetFailureToleranceCount` or `StackSetFailureTolerancePercentage` , but not both."},"stackSetMaxConcurrencyCount":{"type":"integer","description":"The maximum number of accounts in which to perform this operation at one time. This is dependent on the value of `StackSetFailureToleranceCount` . `StackSetMaxConcurrentCount` is at most one more than the `StackSetFailureToleranceCount` .\n\nNote that this setting lets you specify the maximum for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\nConditional: You must specify either `StackSetMaxConcurrentCount` or `StackSetMaxConcurrentPercentage` , but not both."},"stackSetMaxConcurrencyPercentage":{"type":"integer","description":"The maximum percentage of accounts in which to perform this operation at one time.\n\nWhen calculating the number of accounts based on the specified percentage, AWS Service Catalog rounds down to the next whole number. This is true except in cases where rounding down would result is zero. In this case, AWS Service Catalog sets the number as `1` instead.\n\nNote that this setting lets you specify the maximum for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\nConditional: You must specify either `StackSetMaxConcurrentCount` or `StackSetMaxConcurrentPercentage` , but not both."},"stackSetOperationType":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningPreferencesStackSetOperationType","description":"Determines what action AWS Service Catalog performs to a stack set or a stack instance represented by the provisioned product. The default value is `UPDATE` if nothing is specified.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\n- **CREATE** - Creates a new stack instance in the stack set represented by the provisioned product. In this case, only new stack instances are created based on accounts and Regions; if new ProductId or ProvisioningArtifactID are passed, they will be ignored.\n- **UPDATE** - Updates the stack set represented by the provisioned product and also its stack instances.\n- **DELETE** - Deletes a stack instance in the stack set represented by the provisioned product."},"stackSetRegions":{"type":"array","items":{"type":"string"},"description":"One or more AWS Regions where the provisioned product will be available.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\nThe specified Regions should be within the list of Regions from the `STACKSET` constraint. To get the list of Regions in the `STACKSET` constraint, use the `DescribeProvisioningParameters` operation.\n\nIf no values are specified, the default value is all Regions from the `STACKSET` constraint."}},"type":"object"},"aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningPreferencesStackSetOperationType":{"description":"Determines what action AWS Service Catalog performs to a stack set or a stack instance represented by the provisioned product. The default value is `UPDATE` if nothing is specified.\n\nApplicable only to a `CFN_STACKSET` provisioned product type.\n\n- **CREATE** - Creates a new stack instance in the stack set represented by the provisioned product. In this case, only new stack instances are created based on accounts and Regions; if new ProductId or ProvisioningArtifactID are passed, they will be ignored.\n- **UPDATE** - Updates the stack set represented by the provisioned product and also its stack instances.\n- **DELETE** - Deletes a stack instance in the stack set represented by the provisioned product.","type":"string","enum":[{"name":"Create","value":"CREATE"},{"name":"Update","value":"UPDATE"},{"name":"Delete","value":"DELETE"}]},"aws-native:servicecatalog:CloudFormationProvisionedProductTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The value for this key."}},"type":"object","required":["key","value"]},"aws-native:servicecatalog:PortfolioTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The value for this key."}},"type":"object","required":["key","value"]},"aws-native:servicecatalog:ServiceActionAcceptLanguage":{"description":"The language code.\n\n- `en` - English (default)\n- `jp` - Japanese\n- `zh` - Chinese","type":"string","enum":[{"name":"En","value":"en"},{"name":"Jp","value":"jp"},{"name":"Zh","value":"zh"}]},"aws-native:servicecatalog:ServiceActionDefinitionParameter":{"properties":{"key":{"type":"string","description":"The parameter key."},"value":{"type":"string","description":"The value of the parameter."}},"type":"object","required":["key","value"]},"aws-native:servicecatalog:ServiceActionDefinitionType":{"description":"The self-service action definition type. For example, `SSM_AUTOMATION` .","type":"string","enum":[{"name":"SsmAutomation","value":"SSM_AUTOMATION"}]},"aws-native:servicecatalogappregistry:ResourceAssociationResourceType":{"description":"The type of the CFN Resource for now it's enum CFN_STACK.","type":"string","enum":[{"name":"CfnStack","value":"CFN_STACK"}]},"aws-native:servicediscovery:ServiceDnsConfig":{"description":"DNS configuration settings for the service.","properties":{"dnsRecords":{"type":"array","items":{"$ref":"#/types/aws-native:servicediscovery:ServiceDnsRecord"},"description":"A list of DNS records associated with the service."},"namespaceId":{"type":"string","description":"The ID of the namespace for the DNS configuration."},"routingPolicy":{"type":"string","description":"The routing policy to use for DNS queries."}},"type":"object","required":["dnsRecords"]},"aws-native:servicediscovery:ServiceDnsRecord":{"description":"A DNS record associated with the service.","properties":{"ttl":{"type":"number","description":"The time-to-live (TTL) for the DNS record."},"type":{"type":"string","description":"The DNS record type (e.g., A, AAAA, SRV)."}},"type":"object","required":["ttl","type"]},"aws-native:servicediscovery:ServiceHealthCheckConfig":{"description":"Configuration for health checks for the service.","properties":{"failureThreshold":{"type":"number","description":"The number of consecutive health check failures that must occur before declaring the service unhealthy."},"resourcePath":{"type":"string","description":"The path to ping on the service for health checks."},"type":{"type":"string","description":"The type of health check (e.g., HTTP, HTTPS, TCP)."}},"type":"object","required":["type"]},"aws-native:servicediscovery:ServiceHealthCheckCustomConfig":{"description":"Configurations for custom health checks for the service.","properties":{"failureThreshold":{"type":"number","description":"The number of consecutive health check failures required before the service is considered unhealthy."}},"type":"object"},"aws-native:servicediscovery:ServiceTag":{"description":"A key-value pair to associate with the service.","properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:ses:ConfigurationSetArchivingOptions":{"description":"An object that defines a MailManager archive that is used to preserve emails that you send using the configuration set.","properties":{"archiveArn":{"type":"string","description":"The ARN of the MailManager archive to associate with the configuration set."}},"type":"object"},"aws-native:ses:ConfigurationSetDashboardOptions":{"description":"Preferences regarding the Dashboard feature.","properties":{"engagementMetrics":{"type":"string","description":"Whether emails sent with this configuration set have engagement tracking enabled."}},"type":"object","required":["engagementMetrics"]},"aws-native:ses:ConfigurationSetDeliveryOptions":{"description":"An object that defines the dedicated IP pool that is used to send emails that you send using the configuration set.","properties":{"maxDeliverySeconds":{"type":"number","description":"Specifies the maximum time until which SES will retry sending emails"},"sendingPoolName":{"type":"string","description":"The name of the dedicated IP pool to associate with the configuration set."},"tlsPolicy":{"type":"string","description":"Specifies whether messages that use the configuration set are required to use Transport Layer Security (TLS). If the value is Require , messages are only delivered if a TLS connection can be established. If the value is Optional , messages can be delivered in plain text if a TLS connection can't be established."}},"type":"object"},"aws-native:ses:ConfigurationSetEventDestinationCloudWatchDestination":{"description":"An object that contains the names, default values, and sources of the dimensions associated with an Amazon CloudWatch event destination.","properties":{"dimensionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationDimensionConfiguration"},"description":"A list of dimensions upon which to categorize your emails when you publish email sending events to Amazon CloudWatch."}},"type":"object"},"aws-native:ses:ConfigurationSetEventDestinationDimensionConfiguration":{"description":"A list of dimensions upon which to categorize your emails when you publish email sending events to Amazon CloudWatch.","properties":{"defaultDimensionValue":{"type":"string","description":"The default value of the dimension that is published to Amazon CloudWatch if you do not provide the value of the dimension when you send an email."},"dimensionName":{"type":"string","description":"The name of an Amazon CloudWatch dimension associated with an email sending metric."},"dimensionValueSource":{"type":"string","description":"The place where Amazon SES finds the value of a dimension to publish to Amazon CloudWatch. To use the message tags that you specify using an X-SES-MESSAGE-TAGS header or a parameter to the SendEmail/SendRawEmail API, specify messageTag. To use your own email headers, specify emailHeader. To put a custom tag on any link included in your email, specify linkTag."}},"type":"object","required":["defaultDimensionValue","dimensionName","dimensionValueSource"]},"aws-native:ses:ConfigurationSetEventDestinationEventBridgeDestination":{"description":"An object that contains Event bus ARN associated with the event bridge destination.","properties":{"eventBusArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon EventBridge bus to publish email events to. Only the default bus is supported."}},"type":"object","required":["eventBusArn"]},"aws-native:ses:ConfigurationSetEventDestinationEventDestination":{"properties":{"cloudWatchDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationCloudWatchDestination","description":"An object that contains the names, default values, and sources of the dimensions associated with an Amazon CloudWatch event destination."},"enabled":{"type":"boolean","description":"Sets whether Amazon SES publishes events to this destination when you send an email with the associated configuration set. Set to true to enable publishing to this destination; set to false to prevent publishing to this destination. The default value is false.   "},"eventBridgeDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationEventBridgeDestination","description":"An object that contains Event bus ARN associated with the event bridge destination."},"kinesisFirehoseDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationKinesisFirehoseDestination","description":"An object that contains the delivery stream ARN and the IAM role ARN associated with an Amazon Kinesis Firehose event destination."},"matchingEventTypes":{"type":"array","items":{"type":"string"},"description":"The type of email sending events, send, reject, bounce, complaint, delivery, open, click, renderingFailure, deliveryDelay, and subscription."},"name":{"type":"string","description":"The name of the event destination set."},"snsDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationSnsDestination","description":"An object that contains SNS topic ARN associated event destination."}},"type":"object","required":["matchingEventTypes"]},"aws-native:ses:ConfigurationSetEventDestinationKinesisFirehoseDestination":{"description":"An object that contains the delivery stream ARN and the IAM role ARN associated with an Amazon Kinesis Firehose event destination.","properties":{"deliveryStreamArn":{"type":"string","description":"The ARN of the Amazon Kinesis Firehose stream that email sending events should be published to."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role under which Amazon SES publishes email sending events to the Amazon Kinesis Firehose stream."}},"type":"object","required":["deliveryStreamArn","iamRoleArn"]},"aws-native:ses:ConfigurationSetEventDestinationSnsDestination":{"description":"An object that contains SNS topic ARN associated event destination.","properties":{"topicArn":{"type":"string","description":"The ARN of the Amazon SNS topic for email sending events. You can find the ARN of a topic by using the [ListTopics](https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html) Amazon SNS operation.\n\nFor more information about Amazon SNS topics, see the [Amazon SNS Developer Guide](https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html) ."}},"type":"object","required":["topicArn"]},"aws-native:ses:ConfigurationSetGuardianOptions":{"description":"Preferences regarding the Guardian feature.","properties":{"optimizedSharedDelivery":{"type":"string","description":"Whether emails sent with this configuration set have optimized delivery algorithm enabled."}},"type":"object","required":["optimizedSharedDelivery"]},"aws-native:ses:ConfigurationSetReputationOptions":{"description":"An object that defines whether or not Amazon SES collects reputation metrics for the emails that you send that use the configuration set.","properties":{"reputationMetricsEnabled":{"type":"boolean","description":"If true , tracking of reputation metrics is enabled for the configuration set. If false , tracking of reputation metrics is disabled for the configuration set."}},"type":"object"},"aws-native:ses:ConfigurationSetSendingOptions":{"description":"An object that defines whether or not Amazon SES can send email that you send using the configuration set.","properties":{"sendingEnabled":{"type":"boolean","description":"If `true` , email sending is enabled for the configuration set. If `false` , email sending is disabled for the configuration set."}},"type":"object"},"aws-native:ses:ConfigurationSetSuppressionOptions":{"description":"An object that contains information about the suppression list preferences for your account.","properties":{"suppressedReasons":{"type":"array","items":{"type":"string"},"description":"A list that contains the reasons that email addresses are automatically added to the suppression list for your account."},"validationOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSuppressionOptionsValidationOptionsProperties","description":"An object that contains information about the validation options for your account."}},"type":"object"},"aws-native:ses:ConfigurationSetSuppressionOptionsValidationOptionsProperties":{"description":"An object that contains information about the validation options for your account.","properties":{"conditionThreshold":{"$ref":"#/types/aws-native:ses:ConfigurationSetSuppressionOptionsValidationOptionsPropertiesConditionThresholdProperties","description":"The condition threshold settings for suppression validation."}},"type":"object","required":["conditionThreshold"]},"aws-native:ses:ConfigurationSetSuppressionOptionsValidationOptionsPropertiesConditionThresholdProperties":{"description":"The condition threshold settings for suppression validation.","properties":{"conditionThresholdEnabled":{"type":"string","description":"Whether the condition threshold is enabled or disabled."},"overallConfidenceThreshold":{"$ref":"#/types/aws-native:ses:ConfigurationSetSuppressionOptionsValidationOptionsPropertiesConditionThresholdPropertiesOverallConfidenceThresholdProperties","description":"The overall confidence threshold settings."}},"type":"object","required":["conditionThresholdEnabled"]},"aws-native:ses:ConfigurationSetSuppressionOptionsValidationOptionsPropertiesConditionThresholdPropertiesOverallConfidenceThresholdProperties":{"description":"The overall confidence threshold settings.","properties":{"confidenceVerdictThreshold":{"type":"string","description":"The confidence verdict threshold level."}},"type":"object","required":["confidenceVerdictThreshold"]},"aws-native:ses:ConfigurationSetTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:ConfigurationSetTrackingOptions":{"description":"An object that defines the open and click tracking options for emails that you send using the configuration set.","properties":{"customRedirectDomain":{"type":"string","description":"The domain to use for tracking open and click events."},"httpsPolicy":{"type":"string","description":"The https policy to use for tracking open and click events."}},"type":"object"},"aws-native:ses:ConfigurationSetVdmOptions":{"description":"An object that contains Virtual Deliverability Manager (VDM) settings for this configuration set.","properties":{"dashboardOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetDashboardOptions","description":"Specifies additional settings for your VDM configuration as applicable to the Dashboard."},"guardianOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetGuardianOptions","description":"Specifies additional settings for your VDM configuration as applicable to the Guardian."}},"type":"object"},"aws-native:ses:ContactListTag":{"properties":{"key":{"type":"string","description":"One part of a key-value pair that defines a tag. The maximum length of a tag key is 128 characters. The minimum length is 1 character."},"value":{"type":"string","description":"The optional part of a key-value pair that defines a tag. The maximum length of a tag value is 256 characters. The minimum length is 0 characters. If you don't want a resource to have a specific tag value, don't specify a value for this parameter. If you don't specify a value, Amazon SES sets the value to an empty string."}},"type":"object","required":["key","value"]},"aws-native:ses:ContactListTopic":{"properties":{"defaultSubscriptionStatus":{"type":"string","description":"The default subscription status to be applied to a contact if the contact has not noted their preference for subscribing to a topic."},"description":{"type":"string","description":"The description of the topic."},"displayName":{"type":"string","description":"The display name of the topic."},"topicName":{"type":"string","description":"The name of the topic."}},"type":"object","required":["defaultSubscriptionStatus","displayName","topicName"]},"aws-native:ses:CustomVerificationEmailTemplateTag":{"description":"An object that defines the tags (keys and values) that you want to associate with the tenant.","properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:DedicatedIpPoolTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:EmailIdentityConfigurationSetAttributes":{"description":"Used to associate a configuration set with an email identity.","properties":{"configurationSetName":{"type":"string","description":"The configuration set to use by default when sending from this identity. Note that any configuration set defined in the email sending request takes precedence."}},"type":"object"},"aws-native:ses:EmailIdentityDkimAttributes":{"description":"Used to enable or disable DKIM authentication for an email identity.","properties":{"signingEnabled":{"type":"boolean","description":"Sets the DKIM signing configuration for the identity. When you set this value true, then the messages that are sent from the identity are signed using DKIM. If you set this value to false, your messages are sent without DKIM signing."}},"type":"object"},"aws-native:ses:EmailIdentityDkimSigningAttributes":{"description":"If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for Easy DKIM.","properties":{"domainSigningPrivateKey":{"type":"string","description":"[Bring Your Own DKIM] A private key that's used to generate a DKIM signature. The private key must use 1024 or 2048-bit RSA encryption, and must be encoded using base64 encoding."},"domainSigningSelector":{"type":"string","description":"[Bring Your Own DKIM] A string that's used to identify a public key in the DNS configuration for a domain."},"nextSigningKeyLength":{"type":"string","description":"[Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day."}},"type":"object"},"aws-native:ses:EmailIdentityFeedbackAttributes":{"description":"Used to enable or disable feedback forwarding for an identity.","properties":{"emailForwardingEnabled":{"type":"boolean","description":"If the value is true, you receive email notifications when bounce or complaint events occur"}},"type":"object"},"aws-native:ses:EmailIdentityMailFromAttributes":{"description":"Used to enable or disable the custom Mail-From domain configuration for an email identity.","properties":{"behaviorOnMxFailure":{"type":"string","description":"The action to take if the required MX record isn't found when you send an email. When you set this value to UseDefaultValue , the mail is sent using amazonses.com as the MAIL FROM domain. When you set this value to RejectMessage , the Amazon SES API v2 returns a MailFromDomainNotVerified error, and doesn't attempt to deliver the email."},"mailFromDomain":{"type":"string","description":"The custom MAIL FROM domain that you want the verified identity to use"}},"type":"object"},"aws-native:ses:EmailIdentityTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerAddonInstanceTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerAddonSubscriptionTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerAddressListTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerArchiveArchiveRetention0Properties":{"properties":{"retentionPeriod":{"$ref":"#/types/aws-native:ses:MailManagerArchiveRetentionPeriod"}},"type":"object","required":["retentionPeriod"]},"aws-native:ses:MailManagerArchiveArchiveRetentionProperties":{"properties":{"retentionPeriod":{"$ref":"#/types/aws-native:ses:MailManagerArchiveRetentionPeriod"}},"type":"object","required":["retentionPeriod"]},"aws-native:ses:MailManagerArchiveArchiveState":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"PendingDeletion","value":"PENDING_DELETION"}]},"aws-native:ses:MailManagerArchiveRetentionPeriod":{"type":"string","enum":[{"name":"ThreeMonths","value":"THREE_MONTHS"},{"name":"SixMonths","value":"SIX_MONTHS"},{"name":"NineMonths","value":"NINE_MONTHS"},{"name":"OneYear","value":"ONE_YEAR"},{"name":"EighteenMonths","value":"EIGHTEEN_MONTHS"},{"name":"TwoYears","value":"TWO_YEARS"},{"name":"ThirtyMonths","value":"THIRTY_MONTHS"},{"name":"ThreeYears","value":"THREE_YEARS"},{"name":"FourYears","value":"FOUR_YEARS"},{"name":"FiveYears","value":"FIVE_YEARS"},{"name":"SixYears","value":"SIX_YEARS"},{"name":"SevenYears","value":"SEVEN_YEARS"},{"name":"EightYears","value":"EIGHT_YEARS"},{"name":"NineYears","value":"NINE_YEARS"},{"name":"TenYears","value":"TEN_YEARS"},{"name":"Permanent","value":"PERMANENT"}]},"aws-native:ses:MailManagerArchiveTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerIngressPointIngressPointConfiguration0Properties":{"properties":{"smtpPassword":{"type":"string"}},"type":"object","required":["smtpPassword"]},"aws-native:ses:MailManagerIngressPointIngressPointConfiguration1Properties":{"properties":{"secretArn":{"type":"string"}},"type":"object","required":["secretArn"]},"aws-native:ses:MailManagerIngressPointIngressPointStatus":{"type":"string","enum":[{"name":"Provisioning","value":"PROVISIONING"},{"name":"Deprovisioning","value":"DEPROVISIONING"},{"name":"Updating","value":"UPDATING"},{"name":"Active","value":"ACTIVE"},{"name":"Closed","value":"CLOSED"},{"name":"Failed","value":"FAILED"}]},"aws-native:ses:MailManagerIngressPointIngressPointStatusToUpdate":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Closed","value":"CLOSED"}]},"aws-native:ses:MailManagerIngressPointIngressPointType":{"type":"string","enum":[{"name":"Open","value":"OPEN"},{"name":"Auth","value":"AUTH"}]},"aws-native:ses:MailManagerIngressPointNetworkConfiguration0Properties":{"properties":{"publicNetworkConfiguration":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointPublicNetworkConfiguration"}},"type":"object","required":["publicNetworkConfiguration"]},"aws-native:ses:MailManagerIngressPointNetworkConfiguration1Properties":{"properties":{"privateNetworkConfiguration":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointPrivateNetworkConfiguration"}},"type":"object","required":["privateNetworkConfiguration"]},"aws-native:ses:MailManagerIngressPointPrivateNetworkConfiguration":{"properties":{"vpcEndpointId":{"type":"string"}},"type":"object","required":["vpcEndpointId"]},"aws-native:ses:MailManagerIngressPointPublicNetworkConfiguration":{"properties":{"ipType":{"$ref":"pulumi.json#/Any"}},"type":"object","required":["ipType"]},"aws-native:ses:MailManagerIngressPointTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerRelayNoAuthentication":{"type":"object"},"aws-native:ses:MailManagerRelayRelayAuthentication0Properties":{"properties":{"secretArn":{"type":"string"}},"type":"object","required":["secretArn"]},"aws-native:ses:MailManagerRelayRelayAuthentication1Properties":{"properties":{"noAuthentication":{"$ref":"#/types/aws-native:ses:MailManagerRelayNoAuthentication"}},"type":"object","required":["noAuthentication"]},"aws-native:ses:MailManagerRelayTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerRuleSetActionFailurePolicy":{"type":"string","enum":[{"name":"Continue","value":"CONTINUE"},{"name":"Drop","value":"DROP"}]},"aws-native:ses:MailManagerRuleSetAddHeaderAction":{"properties":{"headerName":{"type":"string"},"headerValue":{"type":"string"}},"type":"object","required":["headerName","headerValue"]},"aws-native:ses:MailManagerRuleSetAnalysis":{"properties":{"analyzer":{"type":"string"},"resultField":{"type":"string"}},"type":"object","required":["analyzer","resultField"]},"aws-native:ses:MailManagerRuleSetArchiveAction":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"targetArchive":{"type":"string"}},"type":"object","required":["targetArchive"]},"aws-native:ses:MailManagerRuleSetDeliverToMailboxAction":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"mailboxArn":{"type":"string"},"roleArn":{"type":"string"}},"type":"object","required":["mailboxArn","roleArn"]},"aws-native:ses:MailManagerRuleSetDeliverToQBusinessAction":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"applicationId":{"type":"string"},"indexId":{"type":"string"},"roleArn":{"type":"string"}},"type":"object","required":["applicationId","indexId","roleArn"]},"aws-native:ses:MailManagerRuleSetDropAction":{"type":"object"},"aws-native:ses:MailManagerRuleSetMailFrom":{"type":"string","enum":[{"name":"Replace","value":"REPLACE"},{"name":"Preserve","value":"PRESERVE"}]},"aws-native:ses:MailManagerRuleSetRelayAction":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"mailFrom":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetMailFrom"},"relay":{"type":"string"}},"type":"object","required":["relay"]},"aws-native:ses:MailManagerRuleSetReplaceRecipientAction":{"properties":{"replaceWith":{"type":"array","items":{"type":"string"}}},"type":"object"},"aws-native:ses:MailManagerRuleSetRule":{"properties":{"actions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction1Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction2Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction3Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction4Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction5Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction6Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction7Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction8Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAction9Properties"}]},"description":"The list of actions to execute when the conditions match the incoming email, and none of the \"unless conditions\" match."},"conditions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition1Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition2Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition3Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition4Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition5Properties"}]},"description":"The conditions of this rule. All conditions must match the email for the actions to be executed. An empty list of conditions means that all emails match, but are still subject to any \"unless conditions\""},"name":{"type":"string","description":"The user-friendly name of the rule."},"unless":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition1Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition2Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition3Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition4Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleCondition5Properties"}]},"description":"The \"unless conditions\" of this rule. None of the conditions can match the email for the actions to be executed. If any of these conditions do match the email, then the actions are not executed."}},"type":"object","required":["actions"]},"aws-native:ses:MailManagerRuleSetRuleAction0Properties":{"properties":{"drop":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetDropAction"}},"type":"object","required":["drop"]},"aws-native:ses:MailManagerRuleSetRuleAction1Properties":{"properties":{"relay":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRelayAction"}},"type":"object","required":["relay"]},"aws-native:ses:MailManagerRuleSetRuleAction2Properties":{"properties":{"archive":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetArchiveAction"}},"type":"object","required":["archive"]},"aws-native:ses:MailManagerRuleSetRuleAction3Properties":{"properties":{"writeToS3":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetS3Action"}},"type":"object","required":["writeToS3"]},"aws-native:ses:MailManagerRuleSetRuleAction4Properties":{"properties":{"send":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetSendAction"}},"type":"object","required":["send"]},"aws-native:ses:MailManagerRuleSetRuleAction5Properties":{"properties":{"addHeader":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetAddHeaderAction"}},"type":"object","required":["addHeader"]},"aws-native:ses:MailManagerRuleSetRuleAction6Properties":{"properties":{"replaceRecipient":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetReplaceRecipientAction"}},"type":"object","required":["replaceRecipient"]},"aws-native:ses:MailManagerRuleSetRuleAction7Properties":{"properties":{"deliverToMailbox":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetDeliverToMailboxAction"}},"type":"object","required":["deliverToMailbox"]},"aws-native:ses:MailManagerRuleSetRuleAction8Properties":{"properties":{"deliverToQBusiness":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetDeliverToQBusinessAction"}},"type":"object","required":["deliverToQBusiness"]},"aws-native:ses:MailManagerRuleSetRuleAction9Properties":{"properties":{"publishToSns":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetSnsAction"}},"type":"object","required":["publishToSns"]},"aws-native:ses:MailManagerRuleSetRuleAddressListEmailAttribute":{"type":"string","enum":[{"name":"Recipient","value":"RECIPIENT"},{"name":"MailFrom","value":"MAIL_FROM"},{"name":"Sender","value":"SENDER"},{"name":"From","value":"FROM"},{"name":"To","value":"TO"},{"name":"Cc","value":"CC"}]},"aws-native:ses:MailManagerRuleSetRuleBooleanEmailAttribute":{"type":"string","enum":[{"name":"ReadReceiptRequested","value":"READ_RECEIPT_REQUESTED"},{"name":"Tls","value":"TLS"},{"name":"TlsWrapped","value":"TLS_WRAPPED"}]},"aws-native:ses:MailManagerRuleSetRuleBooleanExpression":{"properties":{"evaluate":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleBooleanToEvaluate0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleBooleanToEvaluate1Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleBooleanToEvaluate2Properties"}]},"operator":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleBooleanOperator"}},"type":"object","required":["evaluate","operator"]},"aws-native:ses:MailManagerRuleSetRuleBooleanOperator":{"type":"string","enum":[{"name":"IsTrue","value":"IS_TRUE"},{"name":"IsFalse","value":"IS_FALSE"}]},"aws-native:ses:MailManagerRuleSetRuleBooleanToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleBooleanEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleBooleanToEvaluate1Properties":{"properties":{"analysis":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetAnalysis"}},"type":"object","required":["analysis"]},"aws-native:ses:MailManagerRuleSetRuleBooleanToEvaluate2Properties":{"properties":{"isInAddressList":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleIsInAddressList"}},"type":"object","required":["isInAddressList"]},"aws-native:ses:MailManagerRuleSetRuleCondition0Properties":{"properties":{"booleanExpression":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleBooleanExpression"}},"type":"object","required":["booleanExpression"]},"aws-native:ses:MailManagerRuleSetRuleCondition1Properties":{"properties":{"stringExpression":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleStringExpression"}},"type":"object","required":["stringExpression"]},"aws-native:ses:MailManagerRuleSetRuleCondition2Properties":{"properties":{"numberExpression":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleNumberExpression"}},"type":"object","required":["numberExpression"]},"aws-native:ses:MailManagerRuleSetRuleCondition3Properties":{"properties":{"ipExpression":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleIpExpression"}},"type":"object","required":["ipExpression"]},"aws-native:ses:MailManagerRuleSetRuleCondition4Properties":{"properties":{"verdictExpression":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleVerdictExpression"}},"type":"object","required":["verdictExpression"]},"aws-native:ses:MailManagerRuleSetRuleCondition5Properties":{"properties":{"dmarcExpression":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleDmarcExpression"}},"type":"object","required":["dmarcExpression"]},"aws-native:ses:MailManagerRuleSetRuleDmarcExpression":{"properties":{"operator":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleDmarcOperator"},"values":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleDmarcPolicy"}}},"type":"object","required":["operator","values"]},"aws-native:ses:MailManagerRuleSetRuleDmarcOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"}]},"aws-native:ses:MailManagerRuleSetRuleDmarcPolicy":{"type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Quarantine","value":"QUARANTINE"},{"name":"Reject","value":"REJECT"}]},"aws-native:ses:MailManagerRuleSetRuleIpEmailAttribute":{"type":"string","enum":[{"name":"SourceIp","value":"SOURCE_IP"}]},"aws-native:ses:MailManagerRuleSetRuleIpExpression":{"properties":{"evaluate":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleIpToEvaluateProperties"},"operator":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleIpOperator"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["evaluate","operator","values"]},"aws-native:ses:MailManagerRuleSetRuleIpOperator":{"type":"string","enum":[{"name":"CidrMatches","value":"CIDR_MATCHES"},{"name":"NotCidrMatches","value":"NOT_CIDR_MATCHES"}]},"aws-native:ses:MailManagerRuleSetRuleIpToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleIpEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleIpToEvaluateProperties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleIpEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleIsInAddressList":{"properties":{"addressLists":{"type":"array","items":{"type":"string"}},"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleAddressListEmailAttribute"}},"type":"object","required":["addressLists","attribute"]},"aws-native:ses:MailManagerRuleSetRuleNumberEmailAttribute":{"type":"string","enum":[{"name":"MessageSize","value":"MESSAGE_SIZE"}]},"aws-native:ses:MailManagerRuleSetRuleNumberExpression":{"properties":{"evaluate":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleNumberToEvaluateProperties"},"operator":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleNumberOperator"},"value":{"type":"number"}},"type":"object","required":["evaluate","operator","value"]},"aws-native:ses:MailManagerRuleSetRuleNumberOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"LessThan","value":"LESS_THAN"},{"name":"GreaterThan","value":"GREATER_THAN"},{"name":"LessThanOrEqual","value":"LESS_THAN_OR_EQUAL"},{"name":"GreaterThanOrEqual","value":"GREATER_THAN_OR_EQUAL"}]},"aws-native:ses:MailManagerRuleSetRuleNumberToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleNumberEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleNumberToEvaluateProperties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleNumberEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleStringEmailAttribute":{"type":"string","enum":[{"name":"MailFrom","value":"MAIL_FROM"},{"name":"Helo","value":"HELO"},{"name":"Recipient","value":"RECIPIENT"},{"name":"Sender","value":"SENDER"},{"name":"From","value":"FROM"},{"name":"Subject","value":"SUBJECT"},{"name":"To","value":"TO"},{"name":"Cc","value":"CC"}]},"aws-native:ses:MailManagerRuleSetRuleStringExpression":{"properties":{"evaluate":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleStringToEvaluate0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleStringToEvaluate1Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleStringToEvaluate2Properties"}]},"operator":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleStringOperator"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["evaluate","operator","values"]},"aws-native:ses:MailManagerRuleSetRuleStringOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"},{"name":"Contains","value":"CONTAINS"}]},"aws-native:ses:MailManagerRuleSetRuleStringToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleStringEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleStringToEvaluate1Properties":{"properties":{"mimeHeaderAttribute":{"type":"string"}},"type":"object","required":["mimeHeaderAttribute"]},"aws-native:ses:MailManagerRuleSetRuleStringToEvaluate2Properties":{"properties":{"analysis":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetAnalysis"}},"type":"object","required":["analysis"]},"aws-native:ses:MailManagerRuleSetRuleVerdict":{"type":"string","enum":[{"name":"Pass","value":"PASS"},{"name":"Fail","value":"FAIL"},{"name":"Gray","value":"GRAY"},{"name":"ProcessingFailed","value":"PROCESSING_FAILED"}]},"aws-native:ses:MailManagerRuleSetRuleVerdictAttribute":{"type":"string","enum":[{"name":"Spf","value":"SPF"},{"name":"Dkim","value":"DKIM"}]},"aws-native:ses:MailManagerRuleSetRuleVerdictExpression":{"properties":{"evaluate":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleVerdictToEvaluate0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleVerdictToEvaluate1Properties"}]},"operator":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleVerdictOperator"},"values":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleVerdict"}}},"type":"object","required":["evaluate","operator","values"]},"aws-native:ses:MailManagerRuleSetRuleVerdictOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"}]},"aws-native:ses:MailManagerRuleSetRuleVerdictToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRuleVerdictAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerRuleSetRuleVerdictToEvaluate1Properties":{"properties":{"analysis":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetAnalysis"}},"type":"object","required":["analysis"]},"aws-native:ses:MailManagerRuleSetS3Action":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"roleArn":{"type":"string"},"s3Bucket":{"type":"string"},"s3Prefix":{"type":"string"},"s3SseKmsKeyId":{"type":"string"}},"type":"object","required":["roleArn","s3Bucket"]},"aws-native:ses:MailManagerRuleSetSendAction":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"roleArn":{"type":"string"}},"type":"object","required":["roleArn"]},"aws-native:ses:MailManagerRuleSetSnsAction":{"properties":{"actionFailurePolicy":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetActionFailurePolicy"},"encoding":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetSnsNotificationEncoding"},"payloadType":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetSnsNotificationPayloadType"},"roleArn":{"type":"string"},"topicArn":{"type":"string"}},"type":"object","required":["roleArn","topicArn"]},"aws-native:ses:MailManagerRuleSetSnsNotificationEncoding":{"type":"string","enum":[{"name":"Utf8","value":"UTF-8"},{"name":"Base64","value":"BASE64"}]},"aws-native:ses:MailManagerRuleSetSnsNotificationPayloadType":{"type":"string","enum":[{"name":"Content","value":"CONTENT"},{"name":"Headers","value":"HEADERS"}]},"aws-native:ses:MailManagerRuleSetTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MailManagerTrafficPolicyAcceptAction":{"type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Deny","value":"DENY"}]},"aws-native:ses:MailManagerTrafficPolicyIngressAddressListEmailAttribute":{"type":"string","enum":[{"name":"Recipient","value":"RECIPIENT"}]},"aws-native:ses:MailManagerTrafficPolicyIngressAnalysis":{"properties":{"analyzer":{"type":"string"},"resultField":{"type":"string"}},"type":"object","required":["analyzer","resultField"]},"aws-native:ses:MailManagerTrafficPolicyIngressBooleanExpression":{"properties":{"evaluate":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressBooleanToEvaluate0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressBooleanToEvaluate1Properties"}]},"operator":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressBooleanOperator"}},"type":"object","required":["evaluate","operator"]},"aws-native:ses:MailManagerTrafficPolicyIngressBooleanOperator":{"type":"string","enum":[{"name":"IsTrue","value":"IS_TRUE"},{"name":"IsFalse","value":"IS_FALSE"}]},"aws-native:ses:MailManagerTrafficPolicyIngressBooleanToEvaluate0Properties":{"properties":{"analysis":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressAnalysis"}},"type":"object","required":["analysis"]},"aws-native:ses:MailManagerTrafficPolicyIngressBooleanToEvaluate1Properties":{"properties":{"isInAddressList":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIsInAddressList"}},"type":"object","required":["isInAddressList"]},"aws-native:ses:MailManagerTrafficPolicyIngressIpOperator":{"type":"string","enum":[{"name":"CidrMatches","value":"CIDR_MATCHES"},{"name":"NotCidrMatches","value":"NOT_CIDR_MATCHES"}]},"aws-native:ses:MailManagerTrafficPolicyIngressIpToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv4Attribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressIpToEvaluateProperties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv4Attribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressIpv4Attribute":{"type":"string","enum":[{"name":"SenderIp","value":"SENDER_IP"}]},"aws-native:ses:MailManagerTrafficPolicyIngressIpv4Expression":{"properties":{"evaluate":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpToEvaluateProperties"},"operator":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpOperator"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["evaluate","operator","values"]},"aws-native:ses:MailManagerTrafficPolicyIngressIpv6Attribute":{"type":"string","enum":[{"name":"SenderIpv6","value":"SENDER_IPV6"}]},"aws-native:ses:MailManagerTrafficPolicyIngressIpv6Expression":{"properties":{"evaluate":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv6ToEvaluateProperties"},"operator":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpOperator"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["evaluate","operator","values"]},"aws-native:ses:MailManagerTrafficPolicyIngressIpv6ToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv6Attribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressIpv6ToEvaluateProperties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv6Attribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressIsInAddressList":{"properties":{"addressLists":{"type":"array","items":{"type":"string"}},"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressAddressListEmailAttribute"}},"type":"object","required":["addressLists","attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressStringEmailAttribute":{"type":"string","enum":[{"name":"Recipient","value":"RECIPIENT"}]},"aws-native:ses:MailManagerTrafficPolicyIngressStringExpression":{"properties":{"evaluate":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressStringToEvaluate0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressStringToEvaluate1Properties"}]},"operator":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressStringOperator"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["evaluate","operator","values"]},"aws-native:ses:MailManagerTrafficPolicyIngressStringOperator":{"type":"string","enum":[{"name":"Equals","value":"EQUALS"},{"name":"NotEquals","value":"NOT_EQUALS"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"},{"name":"Contains","value":"CONTAINS"}]},"aws-native:ses:MailManagerTrafficPolicyIngressStringToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressStringEmailAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressStringToEvaluate1Properties":{"properties":{"analysis":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressAnalysis"}},"type":"object","required":["analysis"]},"aws-native:ses:MailManagerTrafficPolicyIngressTlsAttribute":{"type":"string","enum":[{"name":"TlsProtocol","value":"TLS_PROTOCOL"}]},"aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolAttribute":{"type":"string","enum":[{"name":"Tls12","value":"TLS1_2"},{"name":"Tls13","value":"TLS1_3"}]},"aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolExpression":{"properties":{"evaluate":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolToEvaluateProperties"},"operator":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolOperator"},"value":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolAttribute"}},"type":"object","required":["evaluate","operator","value"]},"aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolOperator":{"type":"string","enum":[{"name":"MinimumTlsVersion","value":"MINIMUM_TLS_VERSION"},{"name":"Is","value":"IS"}]},"aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolToEvaluate0Properties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressTlsAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolToEvaluateProperties":{"properties":{"attribute":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressTlsAttribute"}},"type":"object","required":["attribute"]},"aws-native:ses:MailManagerTrafficPolicyPolicyCondition0Properties":{"properties":{"stringExpression":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressStringExpression"}},"type":"object","required":["stringExpression"]},"aws-native:ses:MailManagerTrafficPolicyPolicyCondition1Properties":{"properties":{"ipExpression":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv4Expression"}},"type":"object","required":["ipExpression"]},"aws-native:ses:MailManagerTrafficPolicyPolicyCondition2Properties":{"properties":{"ipv6Expression":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressIpv6Expression"}},"type":"object","required":["ipv6Expression"]},"aws-native:ses:MailManagerTrafficPolicyPolicyCondition3Properties":{"properties":{"tlsExpression":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressTlsProtocolExpression"}},"type":"object","required":["tlsExpression"]},"aws-native:ses:MailManagerTrafficPolicyPolicyCondition4Properties":{"properties":{"booleanExpression":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyIngressBooleanExpression"}},"type":"object","required":["booleanExpression"]},"aws-native:ses:MailManagerTrafficPolicyPolicyStatement":{"properties":{"action":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyAcceptAction","description":"The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement."},"conditions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyCondition0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyCondition1Properties"},{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyCondition2Properties"},{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyCondition3Properties"},{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyCondition4Properties"}]},"description":"The list of conditions to apply to incoming messages for filtering email traffic."}},"type":"object","required":["action","conditions"]},"aws-native:ses:MailManagerTrafficPolicyTag":{"properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:MultiRegionEndpointDetails":{"description":"Contains details of a multi-region endpoint (global-endpoint) being created.","properties":{"routeDetails":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MultiRegionEndpointRouteDetailsItemProperties"},"description":"A list of route configuration details. Must contain exactly one route configuration."}},"type":"object","required":["routeDetails"]},"aws-native:ses:MultiRegionEndpointRouteDetailsItemProperties":{"properties":{"region":{"type":"string"}},"type":"object","required":["region"]},"aws-native:ses:MultiRegionEndpointTag":{"description":"An object that defines the tags that are associated with a resource.","properties":{"key":{"type":"string","description":"One part of a key-value pair that defines a tag."},"value":{"type":"string","description":"The optional part of a key-value pair that defines a tag."}},"type":"object","required":["key","value"]},"aws-native:ses:Template":{"description":"The content of the email, composed of a subject line, an HTML part, and a text-only part","properties":{"htmlPart":{"type":"string","description":"The HTML body of the email."},"subjectPart":{"type":"string","description":"The subject line of the email."},"templateName":{"type":"string","description":"The name of the template.","replaceOnChanges":true},"textPart":{"type":"string","description":"The email body that is visible to recipients whose email clients do not display HTML content."}},"type":"object","required":["subjectPart"]},"aws-native:ses:TemplateTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:ses:TenantResourceAssociation":{"description":"The resource to associate with the tenant","properties":{"resourceArn":{"type":"string","description":"The ARN of the resource to associate with the tenant"}},"type":"object","required":["resourceArn"]},"aws-native:ses:TenantTag":{"description":"An object that defines the tags (keys and values) that you want to associate with the tenant.","properties":{"key":{"type":"string","description":"The key of the key-value tag."},"value":{"type":"string","description":"The value of the key-value tag."}},"type":"object","required":["key","value"]},"aws-native:ses:VdmAttributesDashboardAttributes":{"description":"Preferences regarding the Dashboard feature.","properties":{"engagementMetrics":{"type":"string","description":"Whether emails sent from this account have engagement tracking enabled."}},"type":"object"},"aws-native:ses:VdmAttributesGuardianAttributes":{"description":"Preferences regarding the Guardian feature.","properties":{"optimizedSharedDelivery":{"type":"string","description":"Whether emails sent from this account have optimized delivery algorithm enabled."}},"type":"object"},"aws-native:shield:ProactiveEngagementEmergencyContact":{"description":"An emergency contact is used by Shield Response Team (SRT) to contact you for escalations to the SRT and to initiate proactive customer support. An emergency contact requires an email address.","properties":{"contactNotes":{"type":"string","description":"Additional notes regarding the contact."},"emailAddress":{"type":"string","description":"The email address for the contact."},"phoneNumber":{"type":"string","description":"The phone number for the contact"}},"type":"object","required":["emailAddress"]},"aws-native:shield:ProactiveEngagementStatus":{"description":"If `ENABLED`, the Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.\nIf `DISABLED`, the SRT will not proactively notify contacts about escalations or to initiate proactive customer support.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfiguration":{"description":"The automatic application layer DDoS mitigation settings for a Protection. This configuration determines whether Shield Advanced automatically manages rules in the web ACL in order to respond to application layer events that Shield Advanced determines to be DDoS attacks.","properties":{"action":{"oneOf":[{"$ref":"#/types/aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfigurationAction0Properties"},{"$ref":"#/types/aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfigurationAction1Properties"}],"description":"Specifies the action setting that Shield Advanced should use in the AWS WAF rules that it creates on behalf of the protected resource in response to DDoS attacks. You specify this as part of the configuration for the automatic application layer DDoS mitigation feature, when you enable or update automatic mitigation. Shield Advanced creates the AWS WAF rules in a Shield Advanced-managed rule group, inside the web ACL that you have associated with the resource."},"status":{"$ref":"#/types/aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfigurationStatus","description":"Indicates whether automatic application layer DDoS mitigation is enabled for the protection."}},"type":"object","required":["action","status"]},"aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfigurationAction0Properties":{"description":"Specifies the action setting that Shield Advanced should use in the AWS WAF rules that it creates on behalf of the protected resource in response to DDoS attacks. You specify this as part of the configuration for the automatic application layer DDoS mitigation feature, when you enable or update automatic mitigation. Shield Advanced creates the AWS WAF rules in a Shield Advanced-managed rule group, inside the web ACL that you have associated with the resource.","properties":{"count":{"$ref":"pulumi.json#/Any","description":"Specifies that Shield Advanced should configure its AWS WAF rules with the AWS WAF `Count` action.\nYou must specify exactly one action, either `Block` or `Count`."}},"type":"object"},"aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfigurationAction1Properties":{"description":"Specifies the action setting that Shield Advanced should use in the AWS WAF rules that it creates on behalf of the protected resource in response to DDoS attacks. You specify this as part of the configuration for the automatic application layer DDoS mitigation feature, when you enable or update automatic mitigation. Shield Advanced creates the AWS WAF rules in a Shield Advanced-managed rule group, inside the web ACL that you have associated with the resource.","properties":{"block":{"$ref":"pulumi.json#/Any","description":"Specifies that Shield Advanced should configure its AWS WAF rules with the AWS WAF `Block` action.\nYou must specify exactly one action, either `Block` or `Count`."}},"type":"object"},"aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfigurationStatus":{"description":"Indicates whether automatic application layer DDoS mitigation is enabled for the protection.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:shield:ProtectionGroupAggregation":{"description":"Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.\n* Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.\n* Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.\n* Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions.","type":"string","enum":[{"name":"Sum","value":"SUM"},{"name":"Mean","value":"MEAN"},{"name":"Max","value":"MAX"}]},"aws-native:shield:ProtectionGroupPattern":{"description":"The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Arbitrary","value":"ARBITRARY"},{"name":"ByResourceType","value":"BY_RESOURCE_TYPE"}]},"aws-native:shield:ProtectionGroupResourceType":{"description":"The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting.","type":"string","enum":[{"name":"CloudfrontDistribution","value":"CLOUDFRONT_DISTRIBUTION"},{"name":"Route53HostedZone","value":"ROUTE_53_HOSTED_ZONE"},{"name":"ElasticIpAllocation","value":"ELASTIC_IP_ALLOCATION"},{"name":"ClassicLoadBalancer","value":"CLASSIC_LOAD_BALANCER"},{"name":"ApplicationLoadBalancer","value":"APPLICATION_LOAD_BALANCER"},{"name":"GlobalAccelerator","value":"GLOBAL_ACCELERATOR"}]},"aws-native:shield:ProtectionGroupTag":{"description":"A tag associated with an AWS resource. Tags are key:value pairs that you can use to categorize and manage your resources, for purposes like billing or other management. Typically, the tag key represents a category, such as \"environment\", and the tag value represents a specific value within that category, such as \"test,\" \"development,\" or \"production\". Or you might set the tag key to \"customer\" and the value to the customer name or ID. You can specify one or more tags to add to each AWS resource, up to 50 tags for a resource.","properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:shield:ProtectionTag":{"description":"A tag associated with an AWS resource. Tags are key:value pairs that you can use to categorize and manage your resources, for purposes like billing or other management. Typically, the tag key represents a category, such as \"environment\", and the tag value represents a specific value within that category, such as \"test,\" \"development,\" or \"production\". Or you might set the tag key to \"customer\" and the value to the customer name or ID. You can specify one or more tags to add to each AWS resource, up to 50 tags for a resource.","properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object","required":["key","value"]},"aws-native:signer:SigningProfilePlatformId":{"type":"string","enum":[{"name":"AwsLambdaSha384ecdsa","value":"AWSLambda-SHA384-ECDSA"},{"name":"NotationOcisha384ecdsa","value":"Notation-OCI-SHA384-ECDSA"}]},"aws-native:signer:SigningProfileSignatureValidityPeriod":{"properties":{"type":{"$ref":"#/types/aws-native:signer:SigningProfileSignatureValidityPeriodType","description":"The time unit for signature validity: DAYS | MONTHS | YEARS."},"value":{"type":"integer","description":"The numerical value of the time unit for signature validity."}},"type":"object"},"aws-native:signer:SigningProfileSignatureValidityPeriodType":{"description":"The time unit for signature validity: DAYS | MONTHS | YEARS.","type":"string","enum":[{"name":"Days","value":"DAYS"},{"name":"Months","value":"MONTHS"},{"name":"Years","value":"YEARS"}]},"aws-native:signer:SigningProfileTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object"},"aws-native:simspaceweaver:SimulationS3Location":{"properties":{"bucketName":{"type":"string","description":"The Schema S3 bucket name."},"objectKey":{"type":"string","description":"This is the schema S3 object key, which includes the full path of \"folders\" from the bucket root to the schema."}},"type":"object","required":["bucketName","objectKey"]},"aws-native:smsvoice:ConfigurationSetCloudWatchLogsDestination":{"properties":{"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Identity and Access Management role that is able to write event data to an Amazon CloudWatch destination."},"logGroupArn":{"type":"string","description":"The name of the Amazon CloudWatch log group that you want to record events in."}},"type":"object","required":["iamRoleArn","logGroupArn"]},"aws-native:smsvoice:ConfigurationSetEventDestination":{"description":"An event destination is a location where you send message events. The event options are Amazon CloudWatch, Amazon Data Firehose, or Amazon SNS. For example, when a message is delivered successfully, you can send information about that event to an event destination, or send notifications to endpoints that are subscribed to an Amazon SNS topic.","properties":{"cloudWatchLogsDestination":{"$ref":"#/types/aws-native:smsvoice:ConfigurationSetCloudWatchLogsDestination","description":"An object that contains IamRoleArn and LogGroupArn associated with an Amazon CloudWatch event destination."},"enabled":{"type":"boolean","description":"When set to true events will be logged. By default this is set to true"},"eventDestinationName":{"type":"string","description":"The name that identifies the event destination."},"kinesisFirehoseDestination":{"$ref":"#/types/aws-native:smsvoice:ConfigurationSetKinesisFirehoseDestination","description":"An object that contains IamRoleArn and DeliveryStreamArn associated with an Amazon Kinesis Firehose event destination."},"matchingEventTypes":{"type":"array","items":{"type":"string"},"description":"An array of event types that determine which events to log. If 'ALL' is used, then AWS End User Messaging SMS and Voice logs every event type."},"snsDestination":{"$ref":"#/types/aws-native:smsvoice:ConfigurationSetSnsDestination","description":"An object that contains SNS TopicArn event destination."}},"type":"object","required":["enabled","eventDestinationName","matchingEventTypes"]},"aws-native:smsvoice:ConfigurationSetKinesisFirehoseDestination":{"properties":{"deliveryStreamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the delivery stream."},"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS Identity and Access Management role that is able to write event data to an Amazon CloudWatch destination."}},"type":"object","required":["deliveryStreamArn","iamRoleArn"]},"aws-native:smsvoice:ConfigurationSetSnsDestination":{"properties":{"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon SNS topic that you want to publish events to."}},"type":"object","required":["topicArn"]},"aws-native:smsvoice:ConfigurationSetTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:smsvoice:MandatoryKeywordsProperties":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords","properties":{"help":{"$ref":"#/types/aws-native:smsvoice:PoolMandatoryKeyword","description":"Specifies the pool's `HELP` keyword. For more information, see [Opt out list required keywords](https://docs.aws.amazon.com/sms-voice/latest/userguide/opt-out-list-keywords.html) in the End User Messaging  User Guide."},"stop":{"$ref":"#/types/aws-native:smsvoice:PoolMandatoryKeyword","description":"Specifies the pool's opt-out keyword. For more information, see [Required opt-out keywords](https://docs.aws.amazon.com/sms-voice/latest/userguide/keywords-required.html) in the End User Messaging  User Guide."}},"type":"object","required":["help","stop"]},"aws-native:smsvoice:OptOutListTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:smsvoice:PhoneNumberMandatoryKeyword":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords","properties":{"message":{"type":"string","description":"The message associated with the keyword."}},"type":"object","required":["message"]},"aws-native:smsvoice:PhoneNumberNumberCapabilitiesItem":{"type":"string","enum":[{"name":"Sms","value":"SMS"},{"name":"Voice","value":"VOICE"},{"name":"Mms","value":"MMS"}]},"aws-native:smsvoice:PhoneNumberNumberType":{"description":"The type of phone number to request.","type":"string","enum":[{"name":"LongCode","value":"LONG_CODE"},{"name":"TollFree","value":"TOLL_FREE"},{"name":"TenDlc","value":"TEN_DLC"},{"name":"Simulator","value":"SIMULATOR"}]},"aws-native:smsvoice:PhoneNumberOptionalKeyword":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message.","properties":{"action":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberOptionalKeywordAction","description":"The action to perform when the keyword is used."},"keyword":{"type":"string","description":"The new keyword to add."},"message":{"type":"string","description":"The message associated with the keyword."}},"type":"object","required":["action","keyword","message"]},"aws-native:smsvoice:PhoneNumberOptionalKeywordAction":{"description":"The action to perform when the keyword is used.","type":"string","enum":[{"name":"AutomaticResponse","value":"AUTOMATIC_RESPONSE"},{"name":"OptOut","value":"OPT_OUT"},{"name":"OptIn","value":"OPT_IN"}]},"aws-native:smsvoice:PhoneNumberTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:smsvoice:PoolMandatoryKeyword":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords","properties":{"message":{"type":"string","description":"The message associated with the keyword."}},"type":"object","required":["message"]},"aws-native:smsvoice:PoolOptionalKeyword":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message.","properties":{"action":{"$ref":"#/types/aws-native:smsvoice:PoolOptionalKeywordAction","description":"The action to perform when the keyword is used."},"keyword":{"type":"string","description":"The new keyword to add."},"message":{"type":"string","description":"The message associated with the keyword."}},"type":"object","required":["action","keyword","message"]},"aws-native:smsvoice:PoolOptionalKeywordAction":{"description":"The action to perform when the keyword is used.","type":"string","enum":[{"name":"AutomaticResponse","value":"AUTOMATIC_RESPONSE"},{"name":"OptOut","value":"OPT_OUT"},{"name":"OptIn","value":"OPT_IN"}]},"aws-native:smsvoice:PoolTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:smsvoice:ProtectConfigurationCountryRule":{"properties":{"countryCode":{"type":"string","description":"The two-letter ISO country code"},"protectStatus":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRuleProtectStatus","description":"The types of protection that can be used."}},"type":"object","required":["countryCode","protectStatus"]},"aws-native:smsvoice:ProtectConfigurationCountryRuleProtectStatus":{"description":"The types of protection that can be used.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Block","value":"BLOCK"},{"name":"Monitor","value":"MONITOR"},{"name":"Filter","value":"FILTER"}]},"aws-native:smsvoice:ProtectConfigurationCountryRuleSet":{"properties":{"mms":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRule"},"description":"The set of `CountryRule` s to control which destination countries End User Messaging  can send your MMS messages to."},"sms":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRule"},"description":"The set of `CountryRule` s to control which destination countries End User Messaging  can send your SMS messages to."},"voice":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRule"},"description":"The set of `CountryRule` s to control which destination countries End User Messaging  can send your VOICE messages to."}},"type":"object"},"aws-native:smsvoice:ProtectConfigurationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:smsvoice:SenderIdTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:smsvoice:TwoWayProperties":{"description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing.","properties":{"channelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the two way channel."},"channelRole":{"type":"string","description":"An optional IAM Role Arn for a service to assume, to be able to post inbound SMS messages."},"enabled":{"type":"boolean","description":"By default this is set to false. When set to true you can receive incoming text messages from your end recipients."}},"type":"object","required":["enabled"]},"aws-native:sns:TopicLoggingConfig":{"description":"The ``LoggingConfig`` property type specifies the ``Delivery`` status logging configuration for an [AWS::SNS::Topic](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-topic.html).","properties":{"failureFeedbackRoleArn":{"type":"string","description":"The IAM role ARN to be used when logging failed message deliveries in Amazon CloudWatch."},"protocol":{"$ref":"#/types/aws-native:sns:TopicLoggingConfigProtocol","description":"Indicates one of the supported protocols for the Amazon SNS topic.\n  At least one of the other three ``LoggingConfig`` properties is recommend along with ``Protocol``."},"successFeedbackRoleArn":{"type":"string","description":"The IAM role ARN to be used when logging successful message deliveries in Amazon CloudWatch."},"successFeedbackSampleRate":{"type":"string","description":"The percentage of successful message deliveries to be logged in Amazon CloudWatch. Valid percentage values range from 0 to 100."}},"type":"object","required":["protocol"]},"aws-native:sns:TopicLoggingConfigProtocol":{"description":"Indicates one of the supported protocols for the Amazon SNS topic.\n  At least one of the other three ``LoggingConfig`` properties is recommend along with ``Protocol``.","type":"string","enum":[{"name":"Https","value":"http/s"},{"name":"Sqs","value":"sqs"},{"name":"Lambda","value":"lambda"},{"name":"Firehose","value":"firehose"},{"name":"Application","value":"application"}]},"aws-native:sns:TopicSubscription":{"description":"``Subscription`` is an embedded property that describes the subscription endpoints of an SNS topic.\n  For full control over subscription behavior (for example, delivery policy, filtering, raw message delivery, and cross-region subscriptions), use the [AWS::SNS::Subscription](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sns-subscription.html) resource.","properties":{"endpoint":{"type":"string","description":"The endpoint that receives notifications from the SNS topic. The endpoint value depends on the protocol that you specify. For more information, see the ``Endpoint`` parameter of the ``Subscribe`` action in the *API Reference*."},"protocol":{"type":"string","description":"The subscription's protocol. For more information, see the ``Protocol`` parameter of the ``Subscribe`` action in the *API Reference*."}},"type":"object","required":["endpoint","protocol"]},"aws-native:sns:TopicTag":{"description":"The list of tags to be added to the specified topic.","properties":{"key":{"type":"string","description":"The required key portion of the tag."},"value":{"type":"string","description":"The optional value portion of the tag."}},"type":"object","required":["key","value"]},"aws-native:sqs:QueueTag":{"properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:ssm:AssociationComplianceSeverity":{"description":"The severity level that is assigned to the association.","type":"string","enum":[{"name":"Critical","value":"CRITICAL"},{"name":"High","value":"HIGH"},{"name":"Medium","value":"MEDIUM"},{"name":"Low","value":"LOW"},{"name":"Unspecified","value":"UNSPECIFIED"}]},"aws-native:ssm:AssociationInstanceAssociationOutputLocation":{"properties":{"s3Location":{"$ref":"#/types/aws-native:ssm:AssociationS3OutputLocation","description":"`S3OutputLocation` is a property of the [InstanceAssociationOutputLocation](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ssm-association-instanceassociationoutputlocation.html) property that specifies an Amazon S3 bucket where you want to store the results of this request."}},"type":"object"},"aws-native:ssm:AssociationS3OutputLocation":{"properties":{"outputS3BucketName":{"type":"string","description":"The name of the S3 bucket."},"outputS3KeyPrefix":{"type":"string","description":"The S3 bucket subfolder."},"outputS3Region":{"type":"string","description":"The AWS Region of the S3 bucket."}},"type":"object"},"aws-native:ssm:AssociationSyncCompliance":{"description":"The mode for generating association compliance. You can specify `AUTO` or `MANUAL` . In `AUTO` mode, the system uses the status of the association execution to determine the compliance status. If the association execution runs successfully, then the association is `COMPLIANT` . If the association execution doesn't run successfully, the association is `NON-COMPLIANT` .\n\nIn `MANUAL` mode, you must specify the `AssociationId` as a parameter for the `PutComplianceItems` API action. In this case, compliance data is not managed by State Manager. It is managed by your direct call to the `PutComplianceItems` API action.\n\nBy default, all associations use `AUTO` mode.","type":"string","enum":[{"name":"Auto","value":"AUTO"},{"name":"Manual","value":"MANUAL"}]},"aws-native:ssm:AssociationTarget":{"properties":{"key":{"type":"string","description":"User-defined criteria for sending commands that target managed nodes that meet the criteria."},"values":{"type":"array","items":{"type":"string"},"description":"User-defined criteria that maps to `Key` . For example, if you specified `tag:ServerRole` , you could specify `value:WebServer` to run a command on instances that include EC2 tags of `ServerRole,WebServer` .\n\nDepending on the type of target, the maximum number of values for a key might be lower than the global maximum of 50."}},"type":"object","required":["key","values"]},"aws-native:ssm:DocumentAttachmentsSource":{"properties":{"key":{"$ref":"#/types/aws-native:ssm:DocumentAttachmentsSourceKey","description":"The key of a key-value pair that identifies the location of an attachment to a document."},"name":{"type":"string","description":"The name of the document attachment file."},"values":{"type":"array","items":{"type":"string"},"description":"The value of a key-value pair that identifies the location of an attachment to a document. The format for Value depends on the type of key you specify."}},"type":"object"},"aws-native:ssm:DocumentAttachmentsSourceKey":{"description":"The key of a key-value pair that identifies the location of an attachment to a document.","type":"string","enum":[{"name":"SourceUrl","value":"SourceUrl"},{"name":"S3FileUrl","value":"S3FileUrl"},{"name":"AttachmentReference","value":"AttachmentReference"}]},"aws-native:ssm:DocumentFormat":{"description":"Specify the document format for the request. The document format can be either JSON or YAML. JSON is the default format.","type":"string","enum":[{"name":"Yaml","value":"YAML"},{"name":"Json","value":"JSON"},{"name":"Text","value":"TEXT"}]},"aws-native:ssm:DocumentRequires":{"properties":{"name":{"type":"string","description":"The name of the required SSM document. The name can be an Amazon Resource Name (ARN)."},"version":{"type":"string","description":"The document version required by the current document."}},"type":"object"},"aws-native:ssm:DocumentTag":{"properties":{"key":{"type":"string","description":"The name of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object"},"aws-native:ssm:DocumentType":{"description":"The type of document to create.","type":"string","enum":[{"name":"ApplicationConfiguration","value":"ApplicationConfiguration"},{"name":"ApplicationConfigurationSchema","value":"ApplicationConfigurationSchema"},{"name":"Automation","value":"Automation"},{"name":"AutomationChangeTemplate","value":"Automation.ChangeTemplate"},{"name":"AutoApprovalPolicy","value":"AutoApprovalPolicy"},{"name":"ChangeCalendar","value":"ChangeCalendar"},{"name":"CloudFormation","value":"CloudFormation"},{"name":"Command","value":"Command"},{"name":"DeploymentStrategy","value":"DeploymentStrategy"},{"name":"ManualApprovalPolicy","value":"ManualApprovalPolicy"},{"name":"Package","value":"Package"},{"name":"Policy","value":"Policy"},{"name":"ProblemAnalysis","value":"ProblemAnalysis"},{"name":"ProblemAnalysisTemplate","value":"ProblemAnalysisTemplate"},{"name":"Session","value":"Session"}]},"aws-native:ssm:DocumentUpdateMethod":{"description":"Update method - when set to 'Replace', the update will replace the existing document; when set to 'NewVersion', the update will create a new version.","type":"string","enum":[{"name":"Replace","value":"Replace"},{"name":"NewVersion","value":"NewVersion"}]},"aws-native:ssm:MaintenanceWindowTag":{"properties":{"key":{"type":"string","description":"The name of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:ssm:MaintenanceWindowTargetTargets":{"properties":{"key":{"type":"string","description":"User-defined criteria for sending commands that target managed nodes that meet the criteria."},"values":{"type":"array","items":{"type":"string"},"description":"User-defined criteria that maps to Key."}},"type":"object","required":["key","values"]},"aws-native:ssm:MaintenanceWindowTaskCloudWatchOutputConfig":{"properties":{"cloudWatchLogGroupName":{"type":"string","description":"The name of the CloudWatch log group where you want to send command output."},"cloudWatchOutputEnabled":{"type":"boolean","description":"Enables Systems Manager to send command output to CloudWatch Logs."}},"type":"object"},"aws-native:ssm:MaintenanceWindowTaskLoggingInfo":{"properties":{"region":{"type":"string","description":"The AWS Region where the S3 bucket is located."},"s3Bucket":{"type":"string","description":"The name of an S3 bucket where execution logs are stored."},"s3Prefix":{"type":"string","description":"The Amazon S3 bucket subfolder."}},"type":"object","required":["region","s3Bucket"]},"aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowAutomationParameters":{"properties":{"documentVersion":{"type":"string","description":"The version of an Automation runbook to use during task execution."},"parameters":{"$ref":"pulumi.json#/Any","description":"The parameters for the `AUTOMATION` type task."}},"type":"object"},"aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowLambdaParameters":{"properties":{"clientContext":{"type":"string","description":"Client-specific information to pass to the AWS Lambda function that you're invoking. You can then use the `context` variable to process the client information in your AWS Lambda function."},"payload":{"type":"string","description":"JSON to provide to your AWS Lambda function as input.\n\n\u003e Although `Type` is listed as \"String\" for this property, the payload content must be formatted as a Base64-encoded binary data object. \n\n*Length Constraint:* 4096"},"qualifier":{"type":"string","description":"An AWS Lambda function version or alias name. If you specify a function version, the action uses the qualified function Amazon Resource Name (ARN) to invoke a specific Lambda function. If you specify an alias name, the action uses the alias ARN to invoke the Lambda function version that the alias points to."}},"type":"object"},"aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowRunCommandParameters":{"properties":{"cloudWatchOutputConfig":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskCloudWatchOutputConfig","description":"Configuration options for sending command output to Amazon CloudWatch Logs."},"comment":{"type":"string","description":"Information about the command or commands to run."},"documentHash":{"type":"string","description":"The SHA-256 or SHA-1 hash created by the system when the document was created. SHA-1 hashes have been deprecated."},"documentHashType":{"type":"string","description":"The SHA-256 or SHA-1 hash type. SHA-1 hashes are deprecated."},"documentVersion":{"type":"string","description":"The AWS Systems Manager document (SSM document) version to use in the request. You can specify `$DEFAULT` , `$LATEST` , or a specific version number. If you run commands by using the AWS CLI, then you must escape the first two options by using a backslash. If you specify a version number, then you don't need to use the backslash. For example:\n\n`--document-version \"\\$DEFAULT\"`\n\n`--document-version \"\\$LATEST\"`\n\n`--document-version \"3\"`"},"notificationConfig":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskNotificationConfig","description":"Configurations for sending notifications about command status changes on a per-managed node basis."},"outputS3BucketName":{"type":"string","description":"The name of the Amazon Simple Storage Service (Amazon S3) bucket."},"outputS3KeyPrefix":{"type":"string","description":"The S3 bucket subfolder."},"parameters":{"$ref":"pulumi.json#/Any","description":"The parameters for the `RUN_COMMAND` task execution.\n\nThe supported parameters are the same as those for the `SendCommand` API call. For more information, see [SendCommand](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html) in the *AWS Systems Manager API Reference* ."},"serviceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task. If you do not specify a service role ARN, Systems Manager uses a service-linked role in your account. If no appropriate service-linked role for Systems Manager exists in your account, it is created when you run `RegisterTaskWithMaintenanceWindow` .\n\nHowever, for an improved security posture, we strongly recommend creating a custom policy and custom service role for running your maintenance window tasks. The policy can be crafted to provide only the permissions needed for your particular maintenance window tasks. For more information, see [Setting up Maintenance Windows](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html) in the in the *AWS Systems Manager User Guide* ."},"timeoutSeconds":{"type":"integer","description":"If this time is reached and the command hasn't already started running, it doesn't run."}},"type":"object"},"aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowStepFunctionsParameters":{"properties":{"input":{"type":"string","description":"The inputs for the `STEP_FUNCTIONS` task."},"name":{"type":"string","description":"The name of the `STEP_FUNCTIONS` task."}},"type":"object"},"aws-native:ssm:MaintenanceWindowTaskNotificationConfig":{"properties":{"notificationArn":{"type":"string","description":"An Amazon Resource Name (ARN) for an Amazon Simple Notification Service (Amazon SNS) topic. Run Command pushes notifications about command status changes to this topic."},"notificationEvents":{"type":"array","items":{"type":"string"},"description":"The different events that you can receive notifications for. These events include the following: `All` (events), `InProgress` , `Success` , `TimedOut` , `Cancelled` , `Failed` . To learn more about these events, see [Configuring Amazon SNS Notifications for AWS Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/monitoring-sns-notifications.html) in the *AWS Systems Manager User Guide* ."},"notificationType":{"type":"string","description":"The notification type.\n\n- `Command` : Receive notification when the status of a command changes.\n- `Invocation` : For commands sent to multiple instances, receive notification on a per-instance basis when the status of a command changes."}},"type":"object","required":["notificationArn"]},"aws-native:ssm:MaintenanceWindowTaskTarget":{"properties":{"key":{"type":"string","description":"User-defined criteria for sending commands that target instances that meet the criteria. `Key` can be `InstanceIds` or `WindowTargetIds` . For more information about how to target instances within a maintenance window task, see [About 'register-task-with-maintenance-window' Options and Values](https://docs.aws.amazon.com/systems-manager/latest/userguide/register-tasks-options.html) in the *AWS Systems Manager User Guide* ."},"values":{"type":"array","items":{"type":"string"},"description":"User-defined criteria that maps to `Key` . For example, if you specify `InstanceIds` , you can specify `i-1234567890abcdef0,i-9876543210abcdef0` to run a command on two EC2 instances. For more information about how to target instances within a maintenance window task, see [About 'register-task-with-maintenance-window' Options and Values](https://docs.aws.amazon.com/systems-manager/latest/userguide/register-tasks-options.html) in the *AWS Systems Manager User Guide* ."}},"type":"object","required":["key","values"]},"aws-native:ssm:MaintenanceWindowTaskTaskInvocationParameters":{"properties":{"maintenanceWindowAutomationParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowAutomationParameters","description":"The parameters for an `AUTOMATION` task type."},"maintenanceWindowLambdaParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowLambdaParameters","description":"The parameters for a `LAMBDA` task type."},"maintenanceWindowRunCommandParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowRunCommandParameters","description":"The parameters for a `RUN_COMMAND` task type."},"maintenanceWindowStepFunctionsParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskMaintenanceWindowStepFunctionsParameters","description":"The parameters for a `STEP_FUNCTIONS` task type."}},"type":"object"},"aws-native:ssm:ParameterDataType":{"description":"The data type of the parameter, such as ``text`` or ``aws:ec2:image``. The default is ``text``.","type":"string","enum":[{"name":"Text","value":"text"},{"name":"Awsec2image","value":"aws:ec2:image"}]},"aws-native:ssm:ParameterTier":{"description":"The parameter tier.","type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"Advanced","value":"Advanced"},{"name":"IntelligentTiering","value":"Intelligent-Tiering"}]},"aws-native:ssm:ParameterType":{"description":"The type of parameter.\n  Parameters of type ``SecureString`` are not supported by CFNlong.","type":"string","enum":[{"name":"String","value":"String"},{"name":"StringList","value":"StringList"}]},"aws-native:ssm:PatchBaselineApprovedPatchesComplianceLevel":{"description":"Defines the compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. The default value is UNSPECIFIED.","type":"string","enum":[{"name":"Critical","value":"CRITICAL"},{"name":"High","value":"HIGH"},{"name":"Medium","value":"MEDIUM"},{"name":"Low","value":"LOW"},{"name":"Informational","value":"INFORMATIONAL"},{"name":"Unspecified","value":"UNSPECIFIED"}]},"aws-native:ssm:PatchBaselineAvailableSecurityUpdatesComplianceStatus":{"description":"The compliance status for vendor recommended security updates that are not approved by this patch baseline.","type":"string","enum":[{"name":"NonCompliant","value":"NON_COMPLIANT"},{"name":"Compliant","value":"COMPLIANT"}]},"aws-native:ssm:PatchBaselineOperatingSystem":{"description":"Defines the operating system the patch baseline applies to. The Default value is WINDOWS.","type":"string","enum":[{"name":"Windows","value":"WINDOWS"},{"name":"AmazonLinux","value":"AMAZON_LINUX"},{"name":"AmazonLinux2","value":"AMAZON_LINUX_2"},{"name":"AmazonLinux2022","value":"AMAZON_LINUX_2022"},{"name":"AmazonLinux2023","value":"AMAZON_LINUX_2023"},{"name":"Ubuntu","value":"UBUNTU"},{"name":"RedhatEnterpriseLinux","value":"REDHAT_ENTERPRISE_LINUX"},{"name":"Suse","value":"SUSE"},{"name":"Centos","value":"CENTOS"},{"name":"OracleLinux","value":"ORACLE_LINUX"},{"name":"Debian","value":"DEBIAN"},{"name":"Macos","value":"MACOS"},{"name":"Raspbian","value":"RASPBIAN"},{"name":"RockyLinux","value":"ROCKY_LINUX"},{"name":"AlmaLinux","value":"ALMA_LINUX"}]},"aws-native:ssm:PatchBaselinePatchFilter":{"description":"Defines which patches should be included in a patch baseline.","properties":{"key":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchFilterKey","description":"The key for the filter.\n\nFor information about valid keys, see [PatchFilter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PatchFilter.html) in the *AWS Systems Manager API Reference* ."},"values":{"type":"array","items":{"type":"string"},"description":"The value for the filter key.\n\nFor information about valid values for each key based on operating system type, see [PatchFilter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PatchFilter.html) in the *AWS Systems Manager API Reference* ."}},"type":"object"},"aws-native:ssm:PatchBaselinePatchFilterGroup":{"description":"The patch filter group that defines the criteria for the rule.","properties":{"patchFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchFilter"},"description":"The set of patch filters that make up the group."}},"type":"object"},"aws-native:ssm:PatchBaselinePatchFilterKey":{"description":"The key for the filter.\n\nFor information about valid keys, see [PatchFilter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PatchFilter.html) in the *AWS Systems Manager API Reference* .","type":"string","enum":[{"name":"AdvisoryId","value":"ADVISORY_ID"},{"name":"Arch","value":"ARCH"},{"name":"BugzillaId","value":"BUGZILLA_ID"},{"name":"Classification","value":"CLASSIFICATION"},{"name":"CveId","value":"CVE_ID"},{"name":"Epoch","value":"EPOCH"},{"name":"MsrcSeverity","value":"MSRC_SEVERITY"},{"name":"Name","value":"NAME"},{"name":"PatchId","value":"PATCH_ID"},{"name":"PatchSet","value":"PATCH_SET"},{"name":"Priority","value":"PRIORITY"},{"name":"Product","value":"PRODUCT"},{"name":"ProductFamily","value":"PRODUCT_FAMILY"},{"name":"Release","value":"RELEASE"},{"name":"Repository","value":"REPOSITORY"},{"name":"Section","value":"SECTION"},{"name":"Security","value":"SECURITY"},{"name":"Severity","value":"SEVERITY"},{"name":"Version","value":"VERSION"}]},"aws-native:ssm:PatchBaselinePatchSource":{"description":"Information about the patches to use to update the instances, including target operating systems and source repository. Applies to Linux instances only.","properties":{"configuration":{"type":"string","description":"The value of the repo configuration.\n\n*Example for yum repositories*\n\n`[main]`\n\n`name=MyCustomRepository`\n\n`baseurl=https://my-custom-repository`\n\n`enabled=1`\n\nFor information about other options available for your yum repository configuration, see [dnf.conf(5)](https://docs.aws.amazon.com/https://man7.org/linux/man-pages/man5/dnf.conf.5.html) on the *man7.org* website.\n\n*Examples for Ubuntu Server and Debian Server*\n\n`deb http://security.ubuntu.com/ubuntu jammy main`\n\n`deb https://site.example.com/debian distribution component1 component2 component3`\n\nRepo information for Ubuntu Server repositories must be specifed in a single line. For more examples and information, see [jammy (5) sources.list.5.gz](https://docs.aws.amazon.com/https://manpages.ubuntu.com/manpages/jammy/man5/sources.list.5.html) on the *Ubuntu Server Manuals* website and [sources.list format](https://docs.aws.amazon.com/https://wiki.debian.org/SourcesList#sources.list_format) on the *Debian Wiki* ."},"name":{"type":"string","description":"The name specified to identify the patch source."},"products":{"type":"array","items":{"type":"string"},"description":"The specific operating system versions a patch repository applies to, such as \"Ubuntu16.04\", \"RedhatEnterpriseLinux7.2\" or \"Suse12.7\". For lists of supported product values, see [PatchFilter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PatchFilter.html) in the *AWS Systems Manager API Reference* ."}},"type":"object"},"aws-native:ssm:PatchBaselineRejectedPatchesAction":{"description":"The action for Patch Manager to take on patches included in the RejectedPackages list.","type":"string","enum":[{"name":"AllowAsDependency","value":"ALLOW_AS_DEPENDENCY"},{"name":"Block","value":"BLOCK"}]},"aws-native:ssm:PatchBaselineRule":{"description":"Defines an approval rule for a patch baseline.","properties":{"approveAfterDays":{"type":"integer","description":"The number of days after the release date of each patch matched by the rule that the patch is marked as approved in the patch baseline. For example, a value of `7` means that patches are approved seven days after they are released.\n\nPatch Manager evaluates patch release dates using Coordinated Universal Time (UTC). If the day represented by `7` is `2025-11-16` , patches released between `2025-11-16T00:00:00Z` and `2025-11-16T23:59:59Z` will be included in the approval.\n\nThis parameter is marked as `Required: No` , but your request must include a value for either `ApproveAfterDays` or `ApproveUntilDate` .\n\nNot supported for Debian Server or Ubuntu Server.\n\n\u003e Use caution when setting this value for Windows Server patch baselines. Because patch updates that are replaced by later updates are removed, setting too broad a value for this parameter can result in crucial patches not being installed. For more information, see the *Windows Server* tab in the topic [How security patches are selected](https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-selecting-patches.html) in the *AWS Systems Manager User Guide* ."},"approveUntilDate":{"type":"string","description":"The cutoff date for auto approval of released patches. Any patches released on or before this date are installed automatically.\n\nEnter dates in the format `YYYY-MM-DD` . For example, `2025-11-16` .\n\nPatch Manager evaluates patch release dates using Coordinated Universal Time (UTC). If you enter the date `2025-11-16` , patches released between `2025-11-16T00:00:00Z` and `2025-11-16T23:59:59Z` will be included in the approval.\n\nThis parameter is marked as `Required: No` , but your request must include a value for either `ApproveUntilDate` or `ApproveAfterDays` .\n\nNot supported for Debian Server or Ubuntu Server.\n\n\u003e Use caution when setting this value for Windows Server patch baselines. Because patch updates that are replaced by later updates are removed, setting too broad a value for this parameter can result in crucial patches not being installed. For more information, see the *Windows Server* tab in the topic [How security patches are selected](https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-selecting-patches.html) in the *AWS Systems Manager User Guide* ."},"complianceLevel":{"$ref":"#/types/aws-native:ssm:PatchBaselineRuleComplianceLevel","description":"A compliance severity level for all approved patches in a patch baseline. Valid compliance severity levels include the following: `UNSPECIFIED` , `CRITICAL` , `HIGH` , `MEDIUM` , `LOW` , and `INFORMATIONAL` ."},"enableNonSecurity":{"type":"boolean","description":"For managed nodes identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository. The default value is `false` . Applies to Linux managed nodes only."},"patchFilterGroup":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchFilterGroup","description":"The patch filter group that defines the criteria for the rule."}},"type":"object"},"aws-native:ssm:PatchBaselineRuleComplianceLevel":{"description":"A compliance severity level for all approved patches in a patch baseline. Valid compliance severity levels include the following: `UNSPECIFIED` , `CRITICAL` , `HIGH` , `MEDIUM` , `LOW` , and `INFORMATIONAL` .","type":"string","enum":[{"name":"Critical","value":"CRITICAL"},{"name":"High","value":"HIGH"},{"name":"Informational","value":"INFORMATIONAL"},{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"Unspecified","value":"UNSPECIFIED"}]},"aws-native:ssm:PatchBaselineRuleGroup":{"description":"A set of rules defining the approval rules for a patch baseline.","properties":{"patchRules":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:PatchBaselineRule"},"description":"The rules that make up the rule group."}},"type":"object"},"aws-native:ssm:PatchBaselineTag":{"description":"Metadata that you assign to your AWS resources.","properties":{"key":{"type":"string","description":"The name of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:ssm:ResourceDataSyncAwsOrganizationsSource":{"properties":{"organizationSourceType":{"type":"string","description":"If an AWS organization is present, this is either `OrganizationalUnits` or `EntireOrganization` . For `OrganizationalUnits` , the data is aggregated from a set of organization units. For `EntireOrganization` , the data is aggregated from the entire AWS organization."},"organizationalUnits":{"type":"array","items":{"type":"string"},"description":"The AWS Organizations organization units included in the sync."}},"type":"object","required":["organizationSourceType"]},"aws-native:ssm:ResourceDataSyncS3Destination":{"properties":{"bucketName":{"type":"string","description":"The name of the S3 bucket where the aggregated data is stored."},"bucketPrefix":{"type":"string","description":"An Amazon S3 prefix for the bucket."},"bucketRegion":{"type":"string","description":"The AWS Region with the S3 bucket targeted by the resource data sync."},"kmsKeyArn":{"type":"string","description":"The ARN of an encryption key for a destination in Amazon S3. Must belong to the same Region as the destination S3 bucket."},"syncFormat":{"type":"string","description":"A supported sync format. The following format is currently supported: JsonSerDe"}},"type":"object","required":["bucketName","bucketRegion","syncFormat"]},"aws-native:ssm:ResourceDataSyncSyncSource":{"properties":{"awsOrganizationsSource":{"$ref":"#/types/aws-native:ssm:ResourceDataSyncAwsOrganizationsSource","description":"Information about the AwsOrganizationsSource resource data sync source. A sync source of this type can synchronize data from AWS Organizations ."},"includeFutureRegions":{"type":"boolean","description":"Whether to automatically synchronize and aggregate data from new AWS Regions when those Regions come online."},"sourceRegions":{"type":"array","items":{"type":"string"},"description":"The `SyncSource` AWS Regions included in the resource data sync."},"sourceType":{"type":"string","description":"The type of data source for the resource data sync. `SourceType` is either `AwsOrganizations` (if an organization is present in AWS Organizations ) or `SingleAccountMultiRegions` ."}},"type":"object","required":["sourceRegions","sourceType"]},"aws-native:ssmcontacts:ContactChannelChannelType":{"description":"Device type, which specify notification channel. Currently supported values: \"SMS\", \"VOICE\", \"EMAIL\", \"CHATBOT.","type":"string","enum":[{"name":"Sms","value":"SMS"},{"name":"Voice","value":"VOICE"},{"name":"Email","value":"EMAIL"}]},"aws-native:ssmcontacts:ContactChannelTargetInfo":{"description":"Information about the contact channel that SSM Incident Manager uses to engage the contact.","properties":{"channelId":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact channel."},"retryIntervalInMinutes":{"type":"integer","description":"The number of minutes to wait to retry sending engagement in the case the engagement initially fails."}},"type":"object","required":["channelId","retryIntervalInMinutes"]},"aws-native:ssmcontacts:ContactStage":{"description":"A set amount of time that an escalation plan or engagement plan engages the specified contacts or contact methods.","properties":{"durationInMinutes":{"type":"integer","description":"The time to wait until beginning the next stage."},"rotationIds":{"type":"array","items":{"type":"string"},"description":"List of Rotation Ids to associate with Contact"},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:ContactTargets"},"description":"The contacts or contact methods that the escalation plan or engagement plan is engaging."}},"type":"object"},"aws-native:ssmcontacts:ContactTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag"},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:ssmcontacts:ContactTargetInfo":{"description":"The contact that SSM Incident Manager is engaging during an incident.","properties":{"contactId":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact."},"isEssential":{"type":"boolean","description":"A Boolean value determining if the contact's acknowledgement stops the progress of stages in the plan."}},"type":"object","required":["contactId","isEssential"]},"aws-native:ssmcontacts:ContactTargets":{"description":"The contacts or contact methods that the escalation plan or engagement plan is engaging.","properties":{"channelTargetInfo":{"$ref":"#/types/aws-native:ssmcontacts:ContactChannelTargetInfo","description":"Information about the contact channel that Incident Manager engages."},"contactTargetInfo":{"$ref":"#/types/aws-native:ssmcontacts:ContactTargetInfo","description":"The contact that Incident Manager is engaging during an incident."}},"type":"object"},"aws-native:ssmcontacts:ContactType":{"description":"Contact type, which specify type of contact. Currently supported values: \"PERSONAL\", \"SHARED\", \"OTHER\".","type":"string","enum":[{"name":"Personal","value":"PERSONAL"},{"name":"Escalation","value":"ESCALATION"},{"name":"OncallSchedule","value":"ONCALL_SCHEDULE"}]},"aws-native:ssmcontacts:PlanChannelTargetInfo":{"description":"Information about the contact channel that SSM Incident Manager uses to engage the contact.","properties":{"channelId":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact channel."},"retryIntervalInMinutes":{"type":"integer","description":"The number of minutes to wait to retry sending engagement in the case the engagement initially fails."}},"type":"object","required":["channelId","retryIntervalInMinutes"]},"aws-native:ssmcontacts:PlanContactTargetInfo":{"description":"The contact that SSM Incident Manager is engaging during an incident.","properties":{"contactId":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact."},"isEssential":{"type":"boolean","description":"A Boolean value determining if the contact's acknowledgement stops the progress of stages in the plan."}},"type":"object","required":["contactId","isEssential"]},"aws-native:ssmcontacts:PlanStage":{"description":"A set amount of time that an escalation plan or engagement plan engages the specified contacts or contact methods.","properties":{"durationInMinutes":{"type":"integer","description":"The time to wait until beginning the next stage."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:PlanTargets"},"description":"The contacts or contact methods that the escalation plan or engagement plan is engaging."}},"type":"object","required":["durationInMinutes"]},"aws-native:ssmcontacts:PlanTargets":{"description":"The contacts or contact methods that the escalation plan or engagement plan is engaging.","properties":{"channelTargetInfo":{"$ref":"#/types/aws-native:ssmcontacts:PlanChannelTargetInfo","description":"Information about the contact channel that Incident Manager engages."},"contactTargetInfo":{"$ref":"#/types/aws-native:ssmcontacts:PlanContactTargetInfo","description":"Information about the contact that Incident Manager engages."}},"type":"object"},"aws-native:ssmcontacts:RotationCoverageTime":{"description":"StartTime and EndTime for the Shift","properties":{"endTime":{"type":"string","description":"Information about when an on-call rotation shift ends."},"startTime":{"type":"string","description":"Information about when an on-call rotation shift begins."}},"type":"object","required":["endTime","startTime"]},"aws-native:ssmcontacts:RotationDayOfWeek":{"description":"The day of the week when weekly recurring on-call shift rotations begin. ","type":"string","enum":[{"name":"Mon","value":"MON"},{"name":"Tue","value":"TUE"},{"name":"Wed","value":"WED"},{"name":"Thu","value":"THU"},{"name":"Fri","value":"FRI"},{"name":"Sat","value":"SAT"},{"name":"Sun","value":"SUN"}]},"aws-native:ssmcontacts:RotationMonthlySetting":{"description":"DayOfWeek for Month and HandOff Time for Monthly Recurring Rotation.","properties":{"dayOfMonth":{"type":"integer","description":"The day of the month when monthly recurring on-call rotations begin."},"handOffTime":{"type":"string","description":"The time of day when a monthly recurring on-call shift rotation begins."}},"type":"object","required":["dayOfMonth","handOffTime"]},"aws-native:ssmcontacts:RotationRecurrenceSettings":{"description":"Information about when an on-call rotation is in effect and how long the rotation period lasts.","properties":{"dailySettings":{"type":"array","items":{"type":"string"},"description":"Information about on-call rotations that recur daily."},"monthlySettings":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:RotationMonthlySetting"},"description":"Information about on-call rotations that recur monthly."},"numberOfOnCalls":{"type":"integer","description":"Number of Oncalls per shift."},"recurrenceMultiplier":{"type":"integer","description":"The number of days, weeks, or months a single rotation lasts."},"shiftCoverages":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:RotationShiftCoverage"},"description":"Information about the days of the week included in on-call rotation coverage."},"weeklySettings":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:RotationWeeklySetting"},"description":"Information about on-call rotations that recur weekly."}},"type":"object"},"aws-native:ssmcontacts:RotationShiftCoverage":{"description":"Information about the days of the week included in on-call rotation coverage.","properties":{"coverageTimes":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:RotationCoverageTime"},"description":"Information about when an on-call shift begins and ends."},"dayOfWeek":{"$ref":"#/types/aws-native:ssmcontacts:RotationDayOfWeek","description":"A list of days on which the schedule is active."}},"type":"object","required":["coverageTimes","dayOfWeek"]},"aws-native:ssmcontacts:RotationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag"},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:ssmcontacts:RotationWeeklySetting":{"description":"DayOfWeek for Rotation and HandOff Time for Weekly Recurring Rotation.","properties":{"dayOfWeek":{"$ref":"#/types/aws-native:ssmcontacts:RotationDayOfWeek","description":"The day of the week when weekly recurring on-call shift rotations begins."},"handOffTime":{"type":"string","description":"The time of day when a weekly recurring on-call shift rotation begins."}},"type":"object","required":["dayOfWeek","handOffTime"]},"aws-native:ssmguiconnect:ConnectionRecordingPreferencesProperties":{"description":"The set of preferences used for recording RDP connections in the requesting AWS account and AWS Region. This includes details such as which S3 bucket recordings are stored in.","properties":{"kmsKeyArn":{"type":"string","description":"The ARN of a AWS  key that is used to encrypt data while it is being processed by the service. This key must exist in the same AWS Region as the node you start an RDP connection to."},"recordingDestinations":{"$ref":"#/types/aws-native:ssmguiconnect:PreferencesRecordingDestinations","description":"Determines where recordings of RDP connections are stored."}},"type":"object","required":["kmsKeyArn","recordingDestinations"]},"aws-native:ssmguiconnect:PreferencesRecordingDestinations":{"description":"Determines where recordings of RDP connections are stored.","properties":{"s3Buckets":{"type":"array","items":{"$ref":"#/types/aws-native:ssmguiconnect:PreferencesS3Bucket"},"description":"The S3 bucket where RDP connection recordings are stored."}},"type":"object","required":["s3Buckets"]},"aws-native:ssmguiconnect:PreferencesS3Bucket":{"description":"The S3 bucket where RDP connection recordings are stored.","properties":{"bucketName":{"type":"string"},"bucketOwner":{"type":"string"}},"type":"object","required":["bucketName","bucketOwner"]},"aws-native:ssmincidents:ReplicationSetRegionConfiguration":{"description":"The ReplicationSet regional configuration.","properties":{"sseKmsKeyId":{"type":"string","description":"The AWS Key Management Service key ID or Key Alias to use to encrypt your replication set."}},"type":"object","required":["sseKmsKeyId"]},"aws-native:ssmincidents:ReplicationSetReplicationRegion":{"description":"The ReplicationSet regional configuration.","properties":{"regionConfiguration":{"$ref":"#/types/aws-native:ssmincidents:ReplicationSetRegionConfiguration"},"regionName":{"type":"string"}},"type":"object"},"aws-native:ssmincidents:ReplicationSetTag":{"description":"A key-value pair to tag a resource.","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ssmincidents:ResponsePlanAction":{"description":"The automation configuration to launch.","properties":{"ssmAutomation":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanSsmAutomation","description":"Details about the Systems Manager automation document that will be used as a runbook during an incident."}},"type":"object"},"aws-native:ssmincidents:ResponsePlanChatChannel":{"description":"The chat channel configuration.","properties":{"chatbotSns":{"type":"array","items":{"type":"string"},"description":"The Amazon  targets that  uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon  topics"}},"type":"object"},"aws-native:ssmincidents:ResponsePlanDynamicSsmParameter":{"description":"A parameter with a dynamic value to set when starting the SSM automation document.","properties":{"key":{"type":"string","description":"The key parameter to use when running the Systems Manager Automation runbook."},"value":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanDynamicSsmParameterValue","description":"The dynamic parameter value."}},"type":"object","required":["key","value"]},"aws-native:ssmincidents:ResponsePlanDynamicSsmParameterValue":{"description":"Value of the dynamic parameter to set when starting the SSM automation document.","properties":{"variable":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanVariableType","description":"Variable dynamic parameters. A parameter value is determined when an incident is created."}},"type":"object"},"aws-native:ssmincidents:ResponsePlanIncidentTemplate":{"description":"The incident template configuration.","properties":{"dedupeString":{"type":"string","description":"The deduplication string."},"impact":{"type":"integer","description":"The impact value."},"incidentTags":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanTag"},"description":"Tags that get applied to incidents created by the StartIncident API action."},"notificationTargets":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanNotificationTargetItem"},"description":"The list of notification targets."},"summary":{"type":"string","description":"The summary string."},"title":{"type":"string","description":"The title string."}},"type":"object","required":["impact","title"]},"aws-native:ssmincidents:ResponsePlanIntegration":{"properties":{"pagerDutyConfiguration":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanPagerDutyConfiguration","description":"Information about the PagerDuty service where the response plan creates an incident."}},"type":"object"},"aws-native:ssmincidents:ResponsePlanNotificationTargetItem":{"description":"A notification target.","properties":{"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon  topic."}},"type":"object"},"aws-native:ssmincidents:ResponsePlanPagerDutyConfiguration":{"description":"The pagerDuty configuration to use when starting the incident.","properties":{"name":{"type":"string","description":"The name of the pagerDuty configuration."},"pagerDutyIncidentConfiguration":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanPagerDutyIncidentConfiguration","description":"Details about the PagerDuty service associated with the configuration."},"secretId":{"type":"string","description":"The AWS secrets manager secretId storing the pagerDuty token."}},"type":"object","required":["name","pagerDutyIncidentConfiguration","secretId"]},"aws-native:ssmincidents:ResponsePlanPagerDutyIncidentConfiguration":{"description":"The pagerDuty incident configuration.","properties":{"serviceId":{"type":"string","description":"The pagerDuty serviceId."}},"type":"object","required":["serviceId"]},"aws-native:ssmincidents:ResponsePlanSsmAutomation":{"description":"The configuration to use when starting the SSM automation document.","properties":{"documentName":{"type":"string","description":"The document name to use when starting the SSM automation document."},"documentVersion":{"type":"string","description":"The version of the document to use when starting the SSM automation document."},"dynamicParameters":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanDynamicSsmParameter"},"description":"The parameters with dynamic values to set when starting the SSM automation document."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanSsmParameter"},"description":"The parameters to set when starting the SSM automation document."},"roleArn":{"type":"string","description":"The role ARN to use when starting the SSM automation document."},"targetAccount":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanSsmAutomationTargetAccount","description":"The account type to use when starting the SSM automation document."}},"type":"object","required":["documentName","roleArn"]},"aws-native:ssmincidents:ResponsePlanSsmAutomationTargetAccount":{"description":"The account type to use when starting the SSM automation document.","type":"string","enum":[{"name":"ImpactedAccount","value":"IMPACTED_ACCOUNT"},{"name":"ResponsePlanOwnerAccount","value":"RESPONSE_PLAN_OWNER_ACCOUNT"}]},"aws-native:ssmincidents:ResponsePlanSsmParameter":{"description":"A parameter to set when starting the SSM automation document.","properties":{"key":{"type":"string","description":"The key parameter to use when running the Automation runbook."},"values":{"type":"array","items":{"type":"string"},"description":"The value parameter to use when running the Automation runbook."}},"type":"object","required":["key","values"]},"aws-native:ssmincidents:ResponsePlanTag":{"description":"A key-value pair to tag a resource.","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:ssmincidents:ResponsePlanVariableType":{"description":"The variable types used as dynamic parameter value when starting the SSM automation document.","type":"string","enum":[{"name":"IncidentRecordArn","value":"INCIDENT_RECORD_ARN"},{"name":"InvolvedResources","value":"INVOLVED_RESOURCES"}]},"aws-native:ssmquicksetup:ConfigurationManagerConfigurationDefinition":{"properties":{"id":{"type":"string","description":"The ID of the configuration definition."},"localDeploymentAdministrationRoleArn":{"type":"string","description":"The ARN of the IAM role used to administrate local configuration deployments.\n\n\u003e Although this element is listed as \"Required: No\", a value can be omitted only for organizational deployments of types other than `AWSQuickSetupType-PatchPolicy` . A value must be provided when you are running an organizational deployment for a patch policy or running any type of deployment for a single account."},"localDeploymentExecutionRoleName":{"type":"string","description":"The name of the IAM role used to deploy local configurations.\n\n\u003e Although this element is listed as \"Required: No\", a value can be omitted only for organizational deployments of types other than `AWSQuickSetupType-PatchPolicy` . A value must be provided when you are running an organizational deployment for a patch policy or running any type of deployment for a single account."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The parameters for the configuration definition type. Parameters for configuration definitions vary based the configuration type. The following lists outline the parameters for each configuration type.\n\n- **AWS Config Recording (Type: AWS QuickSetupType-CFGRecording)** - - `RecordAllResources`\n\n- Description: (Optional) A boolean value that determines whether all supported resources are recorded. The default value is \" `true` \".\n- `ResourceTypesToRecord`\n\n- Description: (Optional) A comma separated list of resource types you want to record.\n- `RecordGlobalResourceTypes`\n\n- Description: (Optional) A boolean value that determines whether global resources are recorded with all resource configurations. The default value is \" `false` \".\n- `GlobalResourceTypesRegion`\n\n- Description: (Optional) Determines the AWS Region where global resources are recorded.\n- `UseCustomBucket`\n\n- Description: (Optional) A boolean value that determines whether a custom Amazon S3 bucket is used for delivery. The default value is \" `false` \".\n- `DeliveryBucketName`\n\n- Description: (Optional) The name of the Amazon S3 bucket you want AWS Config to deliver configuration snapshots and configuration history files to.\n- `DeliveryBucketPrefix`\n\n- Description: (Optional) The key prefix you want to use in the custom Amazon S3 bucket.\n- `NotificationOptions`\n\n- Description: (Optional) Determines the notification configuration for the recorder. The valid values are `NoStreaming` , `UseExistingTopic` , and `CreateTopic` . The default value is `NoStreaming` .\n- `CustomDeliveryTopicAccountId`\n\n- Description: (Optional) The ID of the AWS account where the Amazon SNS topic you want to use for notifications resides. You must specify a value for this parameter if you use the `UseExistingTopic` notification option.\n- `CustomDeliveryTopicName`\n\n- Description: (Optional) The name of the Amazon SNS topic you want to use for notifications. You must specify a value for this parameter if you use the `UseExistingTopic` notification option.\n- `RemediationSchedule`\n\n- Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are `rate(30 days)` , `rate(7 days)` , `rate(1 days)` , and `none` . The default value is \" `none` \".\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) The ID of the root of your Organization. This configuration type doesn't currently support choosing specific OUs. The configuration will be deployed to all the OUs in the Organization.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Change Manager (Type: AWS QuickSetupType-SSMChangeMgr)** - - `DelegatedAccountId`\n\n- Description: (Required) The ID of the delegated administrator account.\n- `JobFunction`\n\n- Description: (Required) The name for the Change Manager job function.\n- `PermissionType`\n\n- Description: (Optional) Specifies whether you want to use default administrator permissions for the job function role, or provide a custom IAM policy. The valid values are `CustomPermissions` and `AdminPermissions` . The default value for the parameter is `CustomerPermissions` .\n- `CustomPermissions`\n\n- Description: (Optional) A JSON string containing the IAM policy you want your job function to use. You must provide a value for this parameter if you specify `CustomPermissions` for the `PermissionType` parameter.\n- `TargetOrganizationalUnits`\n\n- Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Conformance Packs (Type: AWS QuickSetupType-CFGCPacks)** - - `DelegatedAccountId`\n\n- Description: (Optional) The ID of the delegated administrator account. This parameter is required for Organization deployments.\n- `RemediationSchedule`\n\n- Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are `rate(30 days)` , `rate(14 days)` , `rate(2 days)` , and `none` . The default value is \" `none` \".\n- `CPackNames`\n\n- Description: (Required) A comma separated list of AWS Config conformance packs.\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) The ID of the root of your Organization. This configuration type doesn't currently support choosing specific OUs. The configuration will be deployed to all the OUs in the Organization.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Default Host Management Configuration (Type: AWS QuickSetupType-DHMC)** - - `UpdateSsmAgent`\n\n- Description: (Optional) A boolean value that determines whether the SSM Agent is updated on the target instances every 2 weeks. The default value is \" `true` \".\n- `TargetOrganizationalUnits`\n\n- Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **DevOps Guru (Type: AWS QuickSetupType-DevOpsGuru)** - - `AnalyseAllResources`\n\n- Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all CloudFormation stacks in the account. The default value is \" `false` \".\n- `EnableSnsNotifications`\n\n- Description: (Optional) A boolean value that determines whether DevOps Guru sends notifications when an insight is created. The default value is \" `true` \".\n- `EnableSsmOpsItems`\n\n- Description: (Optional) A boolean value that determines whether DevOps Guru creates an OpsCenter OpsItem when an insight is created. The default value is \" `true` \".\n- `EnableDriftRemediation`\n\n- Description: (Optional) A boolean value that determines whether a drift remediation schedule is used. The default value is \" `false` \".\n- `RemediationSchedule`\n\n- Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are `rate(30 days)` , `rate(14 days)` , `rate(1 days)` , and `none` . The default value is \" `none` \".\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Distributor (Type: AWS QuickSetupType-Distributor)** - - `PackagesToInstall`\n\n- Description: (Required) A comma separated list of packages you want to install on the target instances. The valid values are `AWSEFSTools` , `AWSCWAgent` , and `AWSEC2LaunchAgent` .\n- `RemediationSchedule`\n\n- Description: (Optional) A rate expression that defines the schedule for drift remediation. The valid values are `rate(30 days)` , `rate(14 days)` , `rate(2 days)` , and `none` . The default value is \" `rate(30 days)` \".\n- `IsPolicyAttachAllowed`\n\n- Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is \" `false` \".\n- `TargetType`\n\n- Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are `*` , `InstanceIds` , `ResourceGroups` , and `Tags` . Use `*` to target all instances in the account.\n- `TargetInstances`\n\n- Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify `InstanceIds` for the `TargetType` parameter.\n- `TargetTagKey`\n\n- Description: (Required) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify `Tags` for the `TargetType` parameter.\n- `TargetTagValue`\n\n- Description: (Required) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify `Tags` for the `TargetType` parameter.\n- `ResourceGroupName`\n\n- Description: (Required) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify `ResourceGroups` for the `TargetType` parameter.\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Host Management (Type: AWS QuickSetupType-SSMHostMgmt)** - - `UpdateSsmAgent`\n\n- Description: (Optional) A boolean value that determines whether the SSM Agent is updated on the target instances every 2 weeks. The default value is \" `true` \".\n- `UpdateEc2LaunchAgent`\n\n- Description: (Optional) A boolean value that determines whether the EC2 Launch agent is updated on the target instances every month. The default value is \" `false` \".\n- `CollectInventory`\n\n- Description: (Optional) A boolean value that determines whether instance metadata is collected on the target instances every 30 minutes. The default value is \" `true` \".\n- `ScanInstances`\n\n- Description: (Optional) A boolean value that determines whether the target instances are scanned daily for available patches. The default value is \" `true` \".\n- `InstallCloudWatchAgent`\n\n- Description: (Optional) A boolean value that determines whether the Amazon CloudWatch agent is installed on the target instances. The default value is \" `false` \".\n- `UpdateCloudWatchAgent`\n\n- Description: (Optional) A boolean value that determines whether the Amazon CloudWatch agent is updated on the target instances every month. The default value is \" `false` \".\n- `IsPolicyAttachAllowed`\n\n- Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is \" `false` \".\n- `TargetType`\n\n- Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are `*` , `InstanceIds` , `ResourceGroups` , and `Tags` . Use `*` to target all instances in the account.\n- `TargetInstances`\n\n- Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify `InstanceIds` for the `TargetType` parameter.\n- `TargetTagKey`\n\n- Description: (Optional) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify `Tags` for the `TargetType` parameter.\n- `TargetTagValue`\n\n- Description: (Optional) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify `Tags` for the `TargetType` parameter.\n- `ResourceGroupName`\n\n- Description: (Optional) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify `ResourceGroups` for the `TargetType` parameter.\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **OpsCenter (Type: AWS QuickSetupType-SSMOpsCenter)** - - `DelegatedAccountId`\n\n- Description: (Required) The ID of the delegated administrator account.\n- `TargetOrganizationalUnits`\n\n- Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Patch Policy (Type: AWS QuickSetupType-PatchPolicy)** - - `PatchPolicyName`\n\n- Description: (Required) A name for the patch policy. The value you provide is applied to target Amazon EC2 instances as a tag.\n- `SelectedPatchBaselines`\n\n- Description: (Required) An array of JSON objects containing the information for the patch baselines to include in your patch policy.\n- `PatchBaselineUseDefault`\n\n- Description: (Optional) A value that determines whether the selected patch baselines are all AWS provided. Supported values are `default` and `custom` .\n- `PatchBaselineRegion`\n\n- Description: (Required) The AWS Region where the patch baseline exist.\n- `ConfigurationOptionsPatchOperation`\n\n- Description: (Optional) Determines whether target instances scan for available patches, or scan and install available patches. The valid values are `Scan` and `ScanAndInstall` . The default value for the parameter is `Scan` .\n- `ConfigurationOptionsScanValue`\n\n- Description: (Optional) A cron expression that is used as the schedule for when instances scan for available patches.\n- `ConfigurationOptionsInstallValue`\n\n- Description: (Optional) A cron expression that is used as the schedule for when instances install available patches.\n- `ConfigurationOptionsScanNextInterval`\n\n- Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is \" `false` \".\n- `ConfigurationOptionsInstallNextInterval`\n\n- Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is \" `false` \".\n- `RebootOption`\n\n- Description: (Optional) Determines whether instances are rebooted after patches are installed. Valid values are `RebootIfNeeded` and `NoReboot` .\n- `IsPolicyAttachAllowed`\n\n- Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is \" `false` \".\n- `OutputLogEnableS3`\n\n- Description: (Optional) A boolean value that determines whether command output logs are sent to Amazon S3.\n- `OutputS3Location`\n\n- Description: (Optional) Information about the Amazon S3 bucket where you want to store the output details of the request.\n\n- `OutputBucketRegion`\n\n- Description: (Optional) The AWS Region where the Amazon S3 bucket you want to deliver command output to is located.\n- `OutputS3BucketName`\n\n- Description: (Optional) The name of the Amazon S3 bucket you want to deliver command output to.\n- `OutputS3KeyPrefix`\n\n- Description: (Optional) The key prefix you want to use in the custom Amazon S3 bucket.\n- `TargetType`\n\n- Description: (Optional) Determines how instances are targeted for local account deployments. Don't specify a value for this parameter if you're deploying to OUs. The valid values are `*` , `InstanceIds` , `ResourceGroups` , and `Tags` . Use `*` to target all instances in the account.\n- `TargetInstances`\n\n- Description: (Optional) A comma separated list of instance IDs. You must provide a value for this parameter if you specify `InstanceIds` for the `TargetType` parameter.\n- `TargetTagKey`\n\n- Description: (Required) The tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify `Tags` for the `TargetType` parameter.\n- `TargetTagValue`\n\n- Description: (Required) The value of the tag key assigned to the instances you want to target. You must provide a value for this parameter if you specify `Tags` for the `TargetType` parameter.\n- `ResourceGroupName`\n\n- Description: (Required) The name of the resource group associated with the instances you want to target. You must provide a value for this parameter if you specify `ResourceGroups` for the `TargetType` parameter.\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Resource Explorer (Type: AWS QuickSetupType-ResourceExplorer)** - - `SelectedAggregatorRegion`\n\n- Description: (Required) The AWS Region where you want to create the aggregator index.\n- `ReplaceExistingAggregator`\n\n- Description: (Required) A boolean value that determines whether to demote an existing aggregator if it is in a Region that differs from the value you specify for the `SelectedAggregatorRegion` .\n- `TargetOrganizationalUnits`\n\n- Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.\n- **Resource Scheduler (Type: AWS QuickSetupType-Scheduler)** - - `TargetTagKey`\n\n- Description: (Required) The tag key assigned to the instances you want to target.\n- `TargetTagValue`\n\n- Description: (Required) The value of the tag key assigned to the instances you want to target.\n- `ICalendarString`\n\n- Description: (Required) An iCalendar formatted string containing the schedule you want Change Manager to use.\n- `TargetAccounts`\n\n- Description: (Optional) The ID of the AWS account initiating the configuration deployment. You only need to provide a value for this parameter if you want to deploy the configuration locally. A value must be provided for either `TargetAccounts` or `TargetOrganizationalUnits` .\n- `TargetOrganizationalUnits`\n\n- Description: (Optional) A comma separated list of organizational units (OUs) you want to deploy the configuration to.\n- `TargetRegions`\n\n- Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to."},"type":{"type":"string","description":"The type of the Quick Setup configuration.","replaceOnChanges":true},"typeVersion":{"type":"string","description":"The version of the Quick Setup type used.","replaceOnChanges":true}},"type":"object","required":["parameters","type"]},"aws-native:ssmquicksetup:ConfigurationManagerStatus":{"type":"string","enum":[{"name":"Initializing","value":"INITIALIZING"},{"name":"Deploying","value":"DEPLOYING"},{"name":"Succeeded","value":"SUCCEEDED"},{"name":"Deleting","value":"DELETING"},{"name":"Stopping","value":"STOPPING"},{"name":"Failed","value":"FAILED"},{"name":"Stopped","value":"STOPPED"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"StopFailed","value":"STOP_FAILED"},{"name":"None","value":"NONE"}]},"aws-native:ssmquicksetup:ConfigurationManagerStatusSummary":{"properties":{"lastUpdatedAt":{"type":"string","description":"The datetime stamp when the status was last updated."},"status":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerStatus","description":"The current status."},"statusDetails":{"type":"object","additionalProperties":{"type":"string"},"description":"Details about the status."},"statusMessage":{"type":"string","description":"When applicable, returns an informational message relevant to the current status and status type of the status summary object. We don't recommend implementing parsing logic around this value since the messages returned can vary in format."},"statusType":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerStatusType","description":"The type of a status summary."}},"type":"object","required":["lastUpdatedAt","statusType"]},"aws-native:ssmquicksetup:ConfigurationManagerStatusType":{"type":"string","enum":[{"name":"Deployment","value":"Deployment"},{"name":"AsyncExecutions","value":"AsyncExecutions"}]},"aws-native:sso:ApplicationAssignmentPrincipalType":{"description":"The entity type for which the assignment will be created.","type":"string","enum":[{"name":"User","value":"USER"},{"name":"Group","value":"GROUP"}]},"aws-native:sso:ApplicationPortalOptionsConfiguration":{"description":"A structure that describes the options for the access portal associated with an application","properties":{"signInOptions":{"$ref":"#/types/aws-native:sso:ApplicationSignInOptions","description":"A structure that describes the sign-in options for the access portal"},"visibility":{"$ref":"#/types/aws-native:sso:ApplicationPortalOptionsConfigurationVisibility","description":"Indicates whether this application is visible in the access portal"}},"type":"object"},"aws-native:sso:ApplicationPortalOptionsConfigurationVisibility":{"description":"Indicates whether this application is visible in the access portal","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sso:ApplicationSignInOptions":{"description":"A structure that describes the sign-in options for an application portal","properties":{"applicationUrl":{"type":"string","description":"The URL that accepts authentication requests for an application, this is a required parameter if the Origin parameter is APPLICATION"},"origin":{"$ref":"#/types/aws-native:sso:ApplicationSignInOptionsOrigin","description":"This determines how IAM Identity Center navigates the user to the target application"}},"type":"object","required":["origin"]},"aws-native:sso:ApplicationSignInOptionsOrigin":{"description":"This determines how IAM Identity Center navigates the user to the target application","type":"string","enum":[{"name":"IdentityCenter","value":"IDENTITY_CENTER"},{"name":"Application","value":"APPLICATION"}]},"aws-native:sso:ApplicationStatus":{"description":"Specifies whether the application is enabled or disabled","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:sso:ApplicationTag":{"description":"The metadata that you apply to the Identity Center (SSO) Application to help you categorize and organize them.","properties":{"key":{"type":"string","description":"The key for the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:sso:AssignmentPrincipalType":{"description":"The assignee's type, user/group","type":"string","enum":[{"name":"User","value":"USER"},{"name":"Group","value":"GROUP"}]},"aws-native:sso:AssignmentTargetType":{"description":"The type of resource to be provisioned to, only aws account now","type":"string","enum":[{"name":"AwsAccount","value":"AWS_ACCOUNT"}]},"aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttribute":{"properties":{"key":{"type":"string"},"value":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttributeValue"}},"type":"object","required":["key","value"]},"aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttributeValue":{"properties":{"source":{"type":"array","items":{"type":"string"}}},"type":"object","required":["source"]},"aws-native:sso:InstanceAccessControlAttributeConfigurationProperties":{"description":"The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use  AccessControlAttributes property instead.","properties":{"accessControlAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttribute"}}},"type":"object","required":["accessControlAttributes"]},"aws-native:sso:InstanceStatus":{"description":"The status of the Identity Center (SSO) Instance, create_in_progress/delete_in_progress/active","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"Active","value":"ACTIVE"}]},"aws-native:sso:InstanceTag":{"description":"The metadata that you apply to the Identity Center (SSO) Instance to help you categorize and organize them.","properties":{"key":{"type":"string","description":"The key for the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:sso:PermissionSetCustomerManagedPolicyReference":{"properties":{"name":{"type":"string","description":"The name of the IAM policy that you have configured in each account where you want to deploy your permission set."},"path":{"type":"string","description":"The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is `/` . For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* ."}},"type":"object","required":["name"]},"aws-native:sso:PermissionSetPermissionsBoundary":{"properties":{"customerManagedPolicyReference":{"$ref":"#/types/aws-native:sso:PermissionSetCustomerManagedPolicyReference","description":"Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set."},"managedPolicyArn":{"type":"string","description":"The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary."}},"type":"object"},"aws-native:sso:PermissionSetTag":{"description":"The metadata that you apply to the permission set to help you categorize and organize them.","properties":{"key":{"type":"string","description":"The key for the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:stepfunctions:ActivityEncryptionConfiguration":{"properties":{"kmsDataKeyReusePeriodSeconds":{"type":"integer","description":"Maximum duration that Step Functions will reuse data keys. When the period expires, Step Functions will call `GenerateDataKey` . Only applies to customer managed keys."},"kmsKeyId":{"type":"string","description":"An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS  key to encrypt data. To specify a AWS  key in a different AWS account, you must use the key ARN or alias ARN."},"type":{"$ref":"#/types/aws-native:stepfunctions:ActivityEncryptionConfigurationType","description":"Encryption option for an activity."}},"type":"object","required":["type"]},"aws-native:stepfunctions:ActivityEncryptionConfigurationType":{"description":"Encryption option for an activity.","type":"string","enum":[{"name":"CustomerManagedKmsKey","value":"CUSTOMER_MANAGED_KMS_KEY"},{"name":"AwsOwnedKey","value":"AWS_OWNED_KEY"}]},"aws-native:stepfunctions:ActivityTagsEntry":{"properties":{"key":{"type":"string","description":"The `key` for a key-value pair in a tag entry."},"value":{"type":"string","description":"The `value` for a key-value pair in a tag entry."}},"type":"object","required":["key","value"]},"aws-native:stepfunctions:StateMachineAliasDeploymentPreference":{"description":"The settings to enable gradual state machine deployments.","properties":{"alarms":{"type":"array","items":{"type":"string"},"description":"A list of CloudWatch alarm names that will be monitored during the deployment. The deployment will fail and rollback if any alarms go into ALARM state."},"interval":{"type":"integer","description":"The time in minutes between each traffic shifting increment."},"percentage":{"type":"integer","description":"The percentage of traffic to shift to the new version in each increment."},"stateMachineVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the [`AWS::StepFunctions::StateMachineVersion`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-stepfunctions-statemachineversion.html) resource that will be the final version to which the alias points to when the traffic shifting is complete.\n\nWhile performing gradual deployments, you can only provide a single state machine version ARN. To explicitly set version weights in a CloudFormation template, use `RoutingConfiguration` instead."},"type":{"$ref":"#/types/aws-native:stepfunctions:StateMachineAliasDeploymentPreferenceType","description":"The type of deployment to perform."}},"type":"object","required":["stateMachineVersionArn","type"]},"aws-native:stepfunctions:StateMachineAliasDeploymentPreferenceType":{"description":"The type of deployment to perform.","type":"string","enum":[{"name":"Linear","value":"LINEAR"},{"name":"AllAtOnce","value":"ALL_AT_ONCE"},{"name":"Canary","value":"CANARY"}]},"aws-native:stepfunctions:StateMachineAliasRoutingConfigurationVersion":{"properties":{"stateMachineVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) that identifies one or two state machine versions defined in the routing configuration."},"weight":{"type":"integer","description":"The percentage of traffic you want to route to the state machine version. The sum of the weights in the routing configuration must be equal to 100."}},"type":"object","required":["stateMachineVersionArn","weight"]},"aws-native:stepfunctions:StateMachineCloudWatchLogsLogGroup":{"properties":{"logGroupArn":{"type":"string","description":"The ARN of the the CloudWatch log group to which you want your logs emitted to. The ARN must end with `:*`"}},"type":"object"},"aws-native:stepfunctions:StateMachineDefinition":{"type":"object"},"aws-native:stepfunctions:StateMachineEncryptionConfiguration":{"properties":{"kmsDataKeyReusePeriodSeconds":{"type":"integer","description":"Maximum duration that Step Functions will reuse data keys. When the period expires, Step Functions will call `GenerateDataKey` . Only applies to customer managed keys."},"kmsKeyId":{"type":"string","description":"An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS  key to encrypt data. To specify a AWS  key in a different AWS account, you must use the key ARN or alias ARN."},"type":{"$ref":"#/types/aws-native:stepfunctions:StateMachineEncryptionConfigurationType","description":"Encryption option for a state machine."}},"type":"object","required":["type"]},"aws-native:stepfunctions:StateMachineEncryptionConfigurationType":{"description":"Encryption option for a state machine.","type":"string","enum":[{"name":"CustomerManagedKmsKey","value":"CUSTOMER_MANAGED_KMS_KEY"},{"name":"AwsOwnedKey","value":"AWS_OWNED_KEY"}]},"aws-native:stepfunctions:StateMachineLogDestination":{"properties":{"cloudWatchLogsLogGroup":{"$ref":"#/types/aws-native:stepfunctions:StateMachineCloudWatchLogsLogGroup","description":"An object describing a CloudWatch log group. For more information, see [AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html) in the CloudFormation User Guide."}},"type":"object"},"aws-native:stepfunctions:StateMachineLoggingConfiguration":{"properties":{"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:stepfunctions:StateMachineLogDestination"},"description":"An array of objects that describes where your execution history events will be logged. Limited to size 1. Required, if your log level is not set to `OFF` ."},"includeExecutionData":{"type":"boolean","description":"Determines whether execution data is included in your log. When set to `false` , data is excluded."},"level":{"$ref":"#/types/aws-native:stepfunctions:StateMachineLoggingConfigurationLevel","description":"Defines which category of execution history events are logged."}},"type":"object"},"aws-native:stepfunctions:StateMachineLoggingConfigurationLevel":{"description":"Defines which category of execution history events are logged.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Error","value":"ERROR"},{"name":"Fatal","value":"FATAL"},{"name":"Off","value":"OFF"}]},"aws-native:stepfunctions:StateMachineS3Location":{"properties":{"bucket":{"type":"string","description":"The name of the S3 bucket where the state machine definition JSON or YAML file is stored."},"key":{"type":"string","description":"The name of the state machine definition file (Amazon S3 object name)."},"version":{"type":"string","description":"For versioning-enabled buckets, a specific version of the state machine definition."}},"type":"object","required":["bucket","key"]},"aws-native:stepfunctions:StateMachineTagsEntry":{"properties":{"key":{"type":"string","description":"The `key` for a key-value pair in a tag entry."},"value":{"type":"string","description":"The `value` for a key-value pair in a tag entry."}},"type":"object","required":["key","value"]},"aws-native:stepfunctions:StateMachineTracingConfiguration":{"properties":{"enabled":{"type":"boolean","description":"When set to `true` , X-Ray tracing is enabled."}},"type":"object"},"aws-native:stepfunctions:StateMachineType":{"description":"Determines whether a `STANDARD` or `EXPRESS` state machine is created. The default is `STANDARD` . You cannot update the `type` of a state machine once it has been created. For more information on `STANDARD` and `EXPRESS` workflows, see [Standard Versus Express Workflows](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-standard-vs-express.html) in the AWS Step Functions Developer Guide.","type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Express","value":"EXPRESS"}]},"aws-native:supportapp:SlackChannelConfigurationNotifyOnCaseSeverity":{"description":"The severity level of a support case that a customer wants to get notified for.","type":"string","enum":[{"name":"None","value":"none"},{"name":"All","value":"all"},{"name":"High","value":"high"}]},"aws-native:synthetics:CanaryArtifactConfig":{"properties":{"s3Encryption":{"$ref":"#/types/aws-native:synthetics:CanaryS3Encryption","description":"Encryption configuration for uploading artifacts to S3"}},"type":"object"},"aws-native:synthetics:CanaryBaseScreenshot":{"properties":{"ignoreCoordinates":{"type":"array","items":{"type":"string"},"description":"List of coordinates of rectangles to be ignored during visual testing"},"screenshotName":{"type":"string","description":"Name of the screenshot to be used as base reference for visual testing"}},"type":"object","required":["screenshotName"]},"aws-native:synthetics:CanaryBrowserConfig":{"properties":{"browserType":{"$ref":"#/types/aws-native:synthetics:CanaryBrowserType","description":"The browser type associated with this browser configuration."}},"type":"object","required":["browserType"]},"aws-native:synthetics:CanaryBrowserType":{"type":"string","enum":[{"name":"Chrome","value":"CHROME"},{"name":"Firefox","value":"FIREFOX"}]},"aws-native:synthetics:CanaryCode":{"properties":{"blueprintTypes":{"type":"array","items":{"type":"string"},"description":"`BlueprintTypes` are a list of templates that enable simplified canary creation. You can create canaries for common monitoring scenarios by providing only a JSON configuration file instead of writing custom scripts. `multi-checks` is the only supported value.\n\nWhen you specify `BlueprintTypes` , the `Handler` field cannot be specified since the blueprint provides a pre-defined entry point."},"dependencies":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryDependency"},"description":"List of Lambda layers to attach to the canary"},"handler":{"type":"string","description":"The entry point to use for the source code when running the canary. For canaries that use the `syn-python-selenium-1.0` runtime or a `syn-nodejs.puppeteer` runtime earlier than `syn-nodejs.puppeteer-3.4` , the handler must be specified as `*fileName* .handler` . For `syn-python-selenium-1.1` , `syn-nodejs.puppeteer-3.4` , and later runtimes, the handler can be specified as `*fileName* . *functionName*` , or you can specify a folder where canary scripts reside as `*folder* / *fileName* . *functionName*` .\n\nThis field is required when you don't specify `BlueprintTypes` and is not allowed when you specify `BlueprintTypes` ."},"s3Bucket":{"type":"string","description":"If your canary script is located in S3, specify the bucket name here. The bucket must already exist."},"s3Key":{"type":"string","description":"The Amazon S3 key of your script. For more information, see [Working with Amazon S3 Objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingObjects.html) ."},"s3ObjectVersion":{"type":"string","description":"The Amazon S3 version ID of your script."},"script":{"type":"string","description":"If you input your canary script directly into the canary instead of referring to an S3 location, the value of this parameter is the script in plain text. It can be up to 5 MB."},"sourceLocationArn":{"type":"string","description":"The ARN of the Lambda layer where Synthetics stores the canary script code."}},"type":"object"},"aws-native:synthetics:CanaryDependency":{"properties":{"reference":{"type":"string","description":"ARN of the Lambda layer"},"type":{"$ref":"#/types/aws-native:synthetics:CanaryDependencyType","description":"Type of dependency"}},"type":"object","required":["reference"]},"aws-native:synthetics:CanaryDependencyType":{"description":"Type of dependency","type":"string","enum":[{"name":"LambdaLayer","value":"LambdaLayer"}]},"aws-native:synthetics:CanaryProvisionedResourceCleanup":{"description":"Setting to control if provisioned resources created by Synthetics are deleted alongside the canary. Default is AUTOMATIC.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"Off","value":"OFF"}]},"aws-native:synthetics:CanaryResourceToTag":{"description":"Specifies which resources canary tags should be replicated to.","type":"string","enum":[{"name":"LambdaFunction","value":"lambda-function"}]},"aws-native:synthetics:CanaryRetryConfig":{"properties":{"maxRetries":{"type":"integer","description":"maximum times the canary will be retried upon the scheduled run failure"}},"type":"object","required":["maxRetries"]},"aws-native:synthetics:CanaryRunConfig":{"properties":{"activeTracing":{"type":"boolean","description":"Enable active tracing if set to true"},"environmentVariables":{"type":"object","additionalProperties":{"type":"string"},"description":"Environment variable key-value pairs."},"ephemeralStorage":{"type":"integer","description":"Provide ephemeralStorage available for canary in MB"},"memoryInMb":{"type":"integer","description":"Provide maximum memory available for canary in MB"},"timeoutInSeconds":{"type":"integer","description":"Provide maximum canary timeout per run in seconds"}},"type":"object"},"aws-native:synthetics:CanaryS3Encryption":{"properties":{"encryptionMode":{"type":"string","description":"Encryption mode for encrypting artifacts when uploading to S3. Valid values: SSE_S3 and SSE_KMS."},"kmsKeyArn":{"type":"string","description":"KMS key Arn for encrypting artifacts when uploading to S3. You must specify KMS key Arn for SSE_KMS encryption mode only."}},"type":"object"},"aws-native:synthetics:CanarySchedule":{"properties":{"durationInSeconds":{"type":"string","description":"How long, in seconds, for the canary to continue making regular runs according to the schedule in the `Expression` value. If you specify 0, the canary continues making runs until you stop it. If you omit this field, the default of 0 is used."},"expression":{"type":"string","description":"A `rate` expression or a `cron` expression that defines how often the canary is to run.\n\nFor a rate expression, The syntax is `rate( *number unit* )` . *unit* can be `minute` , `minutes` , or `hour` .\n\nFor example, `rate(1 minute)` runs the canary once a minute, `rate(10 minutes)` runs it once every 10 minutes, and `rate(1 hour)` runs it once every hour. You can specify a frequency between `rate(1 minute)` and `rate(1 hour)` .\n\nSpecifying `rate(0 minute)` or `rate(0 hour)` is a special value that causes the canary to run only once when it is started.\n\nUse `cron( *expression* )` to specify a cron expression. You can't schedule a canary to wait for more than a year before running. For information about the syntax for cron expressions, see [Scheduling canary runs using cron](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_cron.html) ."},"retryConfig":{"$ref":"#/types/aws-native:synthetics:CanaryRetryConfig","description":"Provide canary auto retry configuration"}},"type":"object","required":["expression"]},"aws-native:synthetics:CanaryTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:synthetics:CanaryVisualReference":{"properties":{"baseCanaryRunId":{"type":"string","description":"Canary run id to be used as base reference for visual testing"},"baseScreenshots":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryBaseScreenshot"},"description":"List of screenshots used as base reference for visual testing"},"browserType":{"$ref":"#/types/aws-native:synthetics:CanaryBrowserType","description":"The browser type associated with this visual reference configuration. Valid values are `CHROME` and `FIREFOX` ."}},"type":"object","required":["baseCanaryRunId"]},"aws-native:synthetics:CanaryVpcConfig":{"properties":{"ipv6AllowedForDualStack":{"type":"boolean","description":"Allow outbound IPv6 traffic on VPC canaries that are connected to dual-stack subnets if set to true"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups for this canary."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets where this canary is to run."},"vpcId":{"type":"string","description":"The ID of the VPC where this canary is to run."}},"type":"object","required":["securityGroupIds","subnetIds"]},"aws-native:synthetics:GroupTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:systemsmanagersap:ApplicationComponentInfo":{"properties":{"componentType":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationComponentInfoComponentType","description":"This string is the type of the component.\n\nAccepted value is `WD` ."},"ec2InstanceId":{"type":"string","description":"This is the Amazon EC2 instance on which your SAP component is running.\n\nAccepted values are alphanumeric."},"sid":{"type":"string","description":"This string is the SAP System ID of the component.\n\nAccepted values are alphanumeric."}},"type":"object"},"aws-native:systemsmanagersap:ApplicationComponentInfoComponentType":{"description":"This string is the type of the component.\n\nAccepted value is `WD` .","type":"string","enum":[{"name":"Hana","value":"HANA"},{"name":"HanaNode","value":"HANA_NODE"},{"name":"Abap","value":"ABAP"},{"name":"Ascs","value":"ASCS"},{"name":"Dialog","value":"DIALOG"},{"name":"Webdisp","value":"WEBDISP"},{"name":"Wd","value":"WD"},{"name":"Ers","value":"ERS"}]},"aws-native:systemsmanagersap:ApplicationCredential":{"properties":{"credentialType":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationCredentialCredentialType","description":"The type of the application credentials."},"databaseName":{"type":"string","description":"The name of the SAP HANA database."},"secretId":{"type":"string","description":"The secret ID created in AWS Secrets Manager to store the credentials of the SAP application."}},"type":"object"},"aws-native:systemsmanagersap:ApplicationCredentialCredentialType":{"description":"The type of the application credentials.","type":"string","enum":[{"name":"Admin","value":"ADMIN"}]},"aws-native:systemsmanagersap:ApplicationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key","value"]},"aws-native:systemsmanagersap:ApplicationType":{"description":"The type of the application.","type":"string","enum":[{"name":"Hana","value":"HANA"},{"name":"SapAbap","value":"SAP_ABAP"}]},"aws-native:timestream:DatabaseTag":{"description":"You can use the Resource Tags property to apply tags to resources, which can help you identify and categorize those resources.","properties":{"key":{"type":"string","description":"The key of the tag. Tag keys are case sensitive."},"value":{"type":"string","description":"The value of the tag. Tag values are case-sensitive and can be null."}},"type":"object"},"aws-native:timestream:InfluxDbClusterDbInstanceType":{"description":"The compute instance of the InfluxDB cluster.","type":"string","enum":[{"name":"DbInfluxMedium","value":"db.influx.medium"},{"name":"DbInfluxLarge","value":"db.influx.large"},{"name":"DbInfluxXlarge","value":"db.influx.xlarge"},{"name":"DbInflux2xlarge","value":"db.influx.2xlarge"},{"name":"DbInflux4xlarge","value":"db.influx.4xlarge"},{"name":"DbInflux8xlarge","value":"db.influx.8xlarge"},{"name":"DbInflux12xlarge","value":"db.influx.12xlarge"},{"name":"DbInflux16xlarge","value":"db.influx.16xlarge"},{"name":"DbInflux24xlarge","value":"db.influx.24xlarge"}]},"aws-native:timestream:InfluxDbClusterDbStorageType":{"description":"The storage type of the InfluxDB cluster.","type":"string","enum":[{"name":"InfluxIoIncludedT1","value":"InfluxIOIncludedT1"},{"name":"InfluxIoIncludedT2","value":"InfluxIOIncludedT2"},{"name":"InfluxIoIncludedT3","value":"InfluxIOIncludedT3"}]},"aws-native:timestream:InfluxDbClusterDeploymentType":{"description":"Deployment type of the InfluxDB cluster.","type":"string","enum":[{"name":"MultiNodeReadReplicas","value":"MULTI_NODE_READ_REPLICAS"}]},"aws-native:timestream:InfluxDbClusterEngineType":{"description":"The engine type for the InfluxDB cluster.","type":"string","enum":[{"name":"InfluxdbV2","value":"INFLUXDB_V2"},{"name":"InfluxdbV3Core","value":"INFLUXDB_V3_CORE"},{"name":"InfluxdbV3Enterprise","value":"INFLUXDB_V3_ENTERPRISE"}]},"aws-native:timestream:InfluxDbClusterFailoverMode":{"description":"Failover mode of the InfluxDB cluster.","type":"string","enum":[{"name":"Automatic","value":"AUTOMATIC"},{"name":"NoFailover","value":"NO_FAILOVER"}]},"aws-native:timestream:InfluxDbClusterNetworkType":{"description":"Network type of the InfluxDB cluster.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dual","value":"DUAL"}]},"aws-native:timestream:InfluxDbClusterStatus":{"description":"Status of the InfluxDB cluster.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Updating","value":"UPDATING"},{"name":"UpdatingInstanceType","value":"UPDATING_INSTANCE_TYPE"},{"name":"Maintenance","value":"MAINTENANCE"},{"name":"Deleting","value":"DELETING"},{"name":"Available","value":"AVAILABLE"},{"name":"Rebooting","value":"REBOOTING"},{"name":"RebootFailed","value":"REBOOT_FAILED"},{"name":"PartiallyAvailable","value":"PARTIALLY_AVAILABLE"},{"name":"Failed","value":"FAILED"},{"name":"Deleted","value":"DELETED"}]},"aws-native:timestream:InfluxDbClusterTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:timestream:InfluxDbInstanceDbInstanceType":{"description":"The compute instance of the InfluxDB instance.","type":"string","enum":[{"name":"DbInfluxMedium","value":"db.influx.medium"},{"name":"DbInfluxLarge","value":"db.influx.large"},{"name":"DbInfluxXlarge","value":"db.influx.xlarge"},{"name":"DbInflux2xlarge","value":"db.influx.2xlarge"},{"name":"DbInflux4xlarge","value":"db.influx.4xlarge"},{"name":"DbInflux8xlarge","value":"db.influx.8xlarge"},{"name":"DbInflux12xlarge","value":"db.influx.12xlarge"},{"name":"DbInflux16xlarge","value":"db.influx.16xlarge"},{"name":"DbInflux24xlarge","value":"db.influx.24xlarge"}]},"aws-native:timestream:InfluxDbInstanceDbStorageType":{"description":"The storage type of the InfluxDB instance.","type":"string","enum":[{"name":"InfluxIoIncludedT1","value":"InfluxIOIncludedT1"},{"name":"InfluxIoIncludedT2","value":"InfluxIOIncludedT2"},{"name":"InfluxIoIncludedT3","value":"InfluxIOIncludedT3"}]},"aws-native:timestream:InfluxDbInstanceDeploymentType":{"description":"Deployment type of the InfluxDB Instance.","type":"string","enum":[{"name":"SingleAz","value":"SINGLE_AZ"},{"name":"WithMultiazStandby","value":"WITH_MULTIAZ_STANDBY"}]},"aws-native:timestream:InfluxDbInstanceNetworkType":{"description":"Network type of the InfluxDB Instance.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dual","value":"DUAL"}]},"aws-native:timestream:InfluxDbInstanceStatus":{"description":"Status of the InfluxDB Instance.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Available","value":"AVAILABLE"},{"name":"Deleting","value":"DELETING"},{"name":"Modifying","value":"MODIFYING"},{"name":"Maintenance","value":"MAINTENANCE"},{"name":"Updating","value":"UPDATING"},{"name":"UpdatingDeploymentType","value":"UPDATING_DEPLOYMENT_TYPE"},{"name":"UpdatingInstanceType","value":"UPDATING_INSTANCE_TYPE"},{"name":"Rebooting","value":"REBOOTING"},{"name":"RebootFailed","value":"REBOOT_FAILED"},{"name":"Deleted","value":"DELETED"},{"name":"Failed","value":"FAILED"}]},"aws-native:timestream:InfluxDbInstanceTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. "}},"type":"object","required":["key"]},"aws-native:timestream:LogDeliveryConfigurationProperties":{"description":"Configuration for sending logs to customer account from the InfluxDB instance.","properties":{"s3Configuration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationPropertiesS3ConfigurationProperties","description":"S3 configuration for sending logs to customer account from the InfluxDB instance."}},"type":"object","required":["s3Configuration"]},"aws-native:timestream:LogDeliveryConfigurationPropertiesS3ConfigurationProperties":{"description":"S3 configuration for sending logs to customer account from the InfluxDB instance.","properties":{"bucketName":{"type":"string","description":"The bucket name for logs to be sent from the InfluxDB instance"},"enabled":{"type":"boolean","description":"Specifies whether logging to customer specified bucket is enabled."}},"type":"object","required":["bucketName","enabled"]},"aws-native:timestream:MagneticStoreWritePropertiesProperties":{"description":"The properties that determine whether magnetic store writes are enabled.","properties":{"enableMagneticStoreWrites":{"type":"boolean","description":"Boolean flag indicating whether magnetic store writes are enabled."},"magneticStoreRejectedDataLocation":{"$ref":"#/types/aws-native:timestream:MagneticStoreWritePropertiesPropertiesMagneticStoreRejectedDataLocationProperties","description":"Location to store information about records that were asynchronously rejected during magnetic store writes."}},"type":"object","required":["enableMagneticStoreWrites"]},"aws-native:timestream:MagneticStoreWritePropertiesPropertiesMagneticStoreRejectedDataLocationProperties":{"description":"Location to store information about records that were asynchronously rejected during magnetic store writes.","properties":{"s3Configuration":{"$ref":"#/types/aws-native:timestream:MagneticStoreWritePropertiesPropertiesMagneticStoreRejectedDataLocationPropertiesS3ConfigurationProperties","description":"S3 configuration for location to store rejections from magnetic store writes"}},"type":"object"},"aws-native:timestream:MagneticStoreWritePropertiesPropertiesMagneticStoreRejectedDataLocationPropertiesS3ConfigurationProperties":{"description":"S3 configuration for location to store rejections from magnetic store writes","properties":{"bucketName":{"type":"string","description":"The bucket name used to store the data."},"encryptionOption":{"type":"string","description":"Either SSE_KMS or SSE_S3."},"kmsKeyId":{"type":"string","description":"Must be provided if SSE_KMS is specified as the encryption option"},"objectKeyPrefix":{"type":"string","description":"String used to prefix all data in the bucket."}},"type":"object","required":["bucketName","encryptionOption"]},"aws-native:timestream:RetentionPropertiesProperties":{"description":"The retention duration of the memory store and the magnetic store.","properties":{"magneticStoreRetentionPeriodInDays":{"type":"string","description":"The duration for which data must be stored in the magnetic store."},"memoryStoreRetentionPeriodInHours":{"type":"string","description":"The duration for which data must be stored in the memory store."}},"type":"object"},"aws-native:timestream:ScheduledQueryDimensionMapping":{"description":"This type is used to map column(s) from the query result to a dimension in the destination table.","properties":{"dimensionValueType":{"$ref":"#/types/aws-native:timestream:ScheduledQueryDimensionValueType"},"name":{"type":"string"}},"type":"object","required":["dimensionValueType","name"]},"aws-native:timestream:ScheduledQueryDimensionValueType":{"description":"Type for the dimension.","type":"string","enum":[{"name":"Varchar","value":"VARCHAR"}]},"aws-native:timestream:ScheduledQueryEncryptionOption":{"description":"Encryption at rest options for the error reports. If no encryption option is specified, Timestream will choose SSE_S3 as default.","type":"string","enum":[{"name":"SseS3","value":"SSE_S3"},{"name":"SseKms","value":"SSE_KMS"}]},"aws-native:timestream:ScheduledQueryErrorReportConfiguration":{"description":"Configuration for error reporting. Error reports will be generated when a problem is encountered when writing the query results.","properties":{"s3Configuration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryS3Configuration","description":"The S3 configuration for the error reports."}},"type":"object","required":["s3Configuration"]},"aws-native:timestream:ScheduledQueryMixedMeasureMapping":{"description":"MixedMeasureMappings are mappings that can be used to ingest data into a mixture of narrow and multi measures in the derived table.","properties":{"measureName":{"type":"string"},"measureValueType":{"$ref":"#/types/aws-native:timestream:ScheduledQueryMixedMeasureMappingMeasureValueType"},"multiMeasureAttributeMappings":{"type":"array","items":{"$ref":"#/types/aws-native:timestream:ScheduledQueryMultiMeasureAttributeMapping"}},"sourceColumn":{"type":"string"},"targetMeasureName":{"type":"string"}},"type":"object","required":["measureValueType"]},"aws-native:timestream:ScheduledQueryMixedMeasureMappingMeasureValueType":{"description":"Type of the value that is to be read from SourceColumn. If the mapping is for MULTI, use MeasureValueType.MULTI.","type":"string","enum":[{"name":"Bigint","value":"BIGINT"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Double","value":"DOUBLE"},{"name":"Varchar","value":"VARCHAR"},{"name":"Multi","value":"MULTI"}]},"aws-native:timestream:ScheduledQueryMultiMeasureAttributeMapping":{"description":"An attribute mapping to be used for mapping query results to ingest data for multi-measure attributes.","properties":{"measureValueType":{"$ref":"#/types/aws-native:timestream:ScheduledQueryMultiMeasureAttributeMappingMeasureValueType"},"sourceColumn":{"type":"string"},"targetMultiMeasureAttributeName":{"type":"string"}},"type":"object","required":["measureValueType","sourceColumn"]},"aws-native:timestream:ScheduledQueryMultiMeasureAttributeMappingMeasureValueType":{"description":"Value type of the measure value column to be read from the query result.","type":"string","enum":[{"name":"Bigint","value":"BIGINT"},{"name":"Boolean","value":"BOOLEAN"},{"name":"Double","value":"DOUBLE"},{"name":"Varchar","value":"VARCHAR"},{"name":"Timestamp","value":"TIMESTAMP"}]},"aws-native:timestream:ScheduledQueryMultiMeasureMappings":{"description":"Only one of MixedMeasureMappings or MultiMeasureMappings is to be provided. MultiMeasureMappings can be used to ingest data as multi measures in the derived table.","properties":{"multiMeasureAttributeMappings":{"type":"array","items":{"$ref":"#/types/aws-native:timestream:ScheduledQueryMultiMeasureAttributeMapping"},"description":"Required. Attribute mappings to be used for mapping query results to ingest data for multi-measure attributes."},"targetMultiMeasureName":{"type":"string","description":"The name of the target multi-measure name in the derived table. This input is required when measureNameColumn is not provided. If MeasureNameColumn is provided, then value from that column will be used as multi-measure name."}},"type":"object","required":["multiMeasureAttributeMappings"]},"aws-native:timestream:ScheduledQueryNotificationConfiguration":{"description":"Notification configuration for the scheduled query. A notification is sent by Timestream when a query run finishes, when the state is updated or when you delete it.","properties":{"snsConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQuerySnsConfiguration","description":"Details on SNS configuration."}},"type":"object","required":["snsConfiguration"]},"aws-native:timestream:ScheduledQueryS3Configuration":{"description":"Details on S3 location for error reports that result from running a query.","properties":{"bucketName":{"type":"string","description":"Name of the S3 bucket under which error reports will be created."},"encryptionOption":{"$ref":"#/types/aws-native:timestream:ScheduledQueryEncryptionOption","description":"Encryption at rest options for the error reports. If no encryption option is specified, Timestream will choose SSE_S3 as default."},"objectKeyPrefix":{"type":"string","description":"Prefix for the error report key. Timestream by default adds the following prefix to the error report path."}},"type":"object","required":["bucketName"]},"aws-native:timestream:ScheduledQueryScheduleConfiguration":{"description":"Configuration for when the scheduled query is executed.","properties":{"scheduleExpression":{"type":"string","description":"An expression that denotes when to trigger the scheduled query run. This can be a cron expression or a rate expression."}},"type":"object","required":["scheduleExpression"]},"aws-native:timestream:ScheduledQuerySnsConfiguration":{"description":"SNS configuration for notification upon scheduled query execution.","properties":{"topicArn":{"type":"string","description":"SNS topic ARN that the scheduled query status notifications will be sent to."}},"type":"object","required":["topicArn"]},"aws-native:timestream:ScheduledQueryTag":{"description":"A key-value pair to label the scheduled query.","properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:timestream:ScheduledQueryTargetConfiguration":{"description":"Configuration of target store where scheduled query results are written to.","properties":{"timestreamConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryTimestreamConfiguration","description":"Configuration needed to write data into the Timestream database and table."}},"type":"object","required":["timestreamConfiguration"]},"aws-native:timestream:ScheduledQueryTimestreamConfiguration":{"description":"Configuration needed to write data into the Timestream database and table.","properties":{"databaseName":{"type":"string","description":"Name of Timestream database to which the query result will be written."},"dimensionMappings":{"type":"array","items":{"$ref":"#/types/aws-native:timestream:ScheduledQueryDimensionMapping"},"description":"This is to allow mapping column(s) from the query result to the dimension in the destination table."},"measureNameColumn":{"type":"string","description":"Name of the measure column. Also see `MultiMeasureMappings` and `MixedMeasureMappings` for how measure name properties on those relate to `MeasureNameColumn` ."},"mixedMeasureMappings":{"type":"array","items":{"$ref":"#/types/aws-native:timestream:ScheduledQueryMixedMeasureMapping"},"description":"Specifies how to map measures to multi-measure records."},"multiMeasureMappings":{"$ref":"#/types/aws-native:timestream:ScheduledQueryMultiMeasureMappings","description":"Multi-measure mappings."},"tableName":{"type":"string","description":"Name of Timestream table that the query result will be written to. The table should be within the same database that is provided in Timestream configuration."},"timeColumn":{"type":"string","description":"Column from query result that should be used as the time column in destination table. Column type for this should be TIMESTAMP."}},"type":"object","required":["databaseName","dimensionMappings","tableName","timeColumn"]},"aws-native:timestream:SchemaProperties":{"description":"A Schema specifies the expected data model of the table.","properties":{"compositePartitionKey":{"type":"array","items":{"$ref":"#/types/aws-native:timestream:TablePartitionKey"},"description":"A non-empty list of partition keys defining the attributes used to partition the table data. The order of the list determines the partition hierarchy. The name and type of each partition key as well as the partition key order cannot be changed after the table is created. However, the enforcement level of each partition key can be changed."}},"type":"object"},"aws-native:timestream:TablePartitionKey":{"description":"An attribute used in partitioning data in a table. There are two types of partition keys: dimension keys and measure keys. A dimension key partitions data on a dimension name, while a measure key partitions data on the measure name.","properties":{"enforcementInRecord":{"$ref":"#/types/aws-native:timestream:TablePartitionKeyEnforcementLevel"},"name":{"type":"string"},"type":{"$ref":"#/types/aws-native:timestream:TablePartitionKeyType"}},"type":"object","required":["type"]},"aws-native:timestream:TablePartitionKeyEnforcementLevel":{"description":"The level of enforcement for the specification of a dimension key in ingested records. Options are REQUIRED (dimension key must be specified) and OPTIONAL (dimension key does not have to be specified).","type":"string","enum":[{"name":"Required","value":"REQUIRED"},{"name":"Optional","value":"OPTIONAL"}]},"aws-native:timestream:TablePartitionKeyType":{"description":"The type of the partition key. Options are DIMENSION (dimension key) and MEASURE (measure key).","type":"string","enum":[{"name":"Dimension","value":"DIMENSION"},{"name":"Measure","value":"MEASURE"}]},"aws-native:timestream:TableTag":{"description":"You can use the Resource Tags property to apply tags to resources, which can help you identify and categorize those resources.","properties":{"key":{"type":"string","description":"The key of the tag. Tag keys are case sensitive."},"value":{"type":"string","description":"The value of the tag. Tag values are case-sensitive and can be null."}},"type":"object"},"aws-native:transfer:AgreementEnforceMessageSigning":{"description":"Specifies whether to enforce an AS2 message is signed for this agreement.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:transfer:AgreementPreserveFilename":{"description":"Specifies whether to preserve the filename received for this agreement.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:transfer:AgreementStatus":{"description":"Specifies the status of the agreement.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:transfer:AgreementTag":{"description":"Creates a key-value pair for a specific resource.","properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:transfer:As2ConfigProperties":{"description":"Configuration for an AS2 connector.","properties":{"asyncMdnConfig":{"$ref":"#/types/aws-native:transfer:ConnectorAsyncMdnConfig","description":"Configuration for an AS2 connector with ASYNC MDN Response"},"basicAuthSecretId":{"type":"string","description":"ARN or name of the secret in AWS Secrets Manager which contains the credentials for Basic authentication. If empty, Basic authentication is disabled for the AS2 connector"},"compression":{"$ref":"#/types/aws-native:transfer:ConnectorAs2ConfigPropertiesCompression","description":"Compression setting for this AS2 connector configuration."},"encryptionAlgorithm":{"$ref":"#/types/aws-native:transfer:ConnectorAs2ConfigPropertiesEncryptionAlgorithm","description":"Encryption algorithm for this AS2 connector configuration."},"localProfileId":{"type":"string","description":"A unique identifier for the local profile."},"mdnResponse":{"$ref":"#/types/aws-native:transfer:ConnectorAs2ConfigPropertiesMdnResponse","description":"MDN Response setting for this AS2 connector configuration."},"mdnSigningAlgorithm":{"$ref":"#/types/aws-native:transfer:ConnectorAs2ConfigPropertiesMdnSigningAlgorithm","description":"MDN Signing algorithm for this AS2 connector configuration."},"messageSubject":{"type":"string","description":"The message subject for this AS2 connector configuration."},"partnerProfileId":{"type":"string","description":"A unique identifier for the partner profile."},"preserveContentType":{"$ref":"#/types/aws-native:transfer:ConnectorAs2ConfigPropertiesPreserveContentType","description":"Specifies whether to use the AWS S3 object content-type as the content-type for the AS2 message."},"signingAlgorithm":{"$ref":"#/types/aws-native:transfer:ConnectorAs2ConfigPropertiesSigningAlgorithm","description":"Signing algorithm for this AS2 connector configuration."}},"type":"object"},"aws-native:transfer:CertificateStatus":{"description":"A status description for the certificate.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Pending","value":"PENDING"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:transfer:CertificateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:transfer:CertificateType":{"description":"Describing the type of certificate. With or without a private key.","type":"string","enum":[{"name":"Certificate","value":"CERTIFICATE"},{"name":"CertificateWithPrivateKey","value":"CERTIFICATE_WITH_PRIVATE_KEY"}]},"aws-native:transfer:CertificateUsage":{"description":"Specifies the usage type for the certificate.","type":"string","enum":[{"name":"Signing","value":"SIGNING"},{"name":"Encryption","value":"ENCRYPTION"},{"name":"Tls","value":"TLS"}]},"aws-native:transfer:ConnectorAs2ConfigPropertiesCompression":{"description":"Compression setting for this AS2 connector configuration.","type":"string","enum":[{"name":"Zlib","value":"ZLIB"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:transfer:ConnectorAs2ConfigPropertiesEncryptionAlgorithm":{"description":"Encryption algorithm for this AS2 connector configuration.","type":"string","enum":[{"name":"Aes128Cbc","value":"AES128_CBC"},{"name":"Aes192Cbc","value":"AES192_CBC"},{"name":"Aes256Cbc","value":"AES256_CBC"},{"name":"None","value":"NONE"},{"name":"DesEde3Cbc","value":"DES_EDE3_CBC"}]},"aws-native:transfer:ConnectorAs2ConfigPropertiesMdnResponse":{"description":"MDN Response setting for this AS2 connector configuration.","type":"string","enum":[{"name":"Sync","value":"SYNC"},{"name":"Async","value":"ASYNC"},{"name":"None","value":"NONE"}]},"aws-native:transfer:ConnectorAs2ConfigPropertiesMdnSigningAlgorithm":{"description":"MDN Signing algorithm for this AS2 connector configuration.","type":"string","enum":[{"name":"Sha256","value":"SHA256"},{"name":"Sha384","value":"SHA384"},{"name":"Sha512","value":"SHA512"},{"name":"Sha1","value":"SHA1"},{"name":"None","value":"NONE"},{"name":"Default","value":"DEFAULT"}]},"aws-native:transfer:ConnectorAs2ConfigPropertiesPreserveContentType":{"description":"Specifies whether to use the AWS S3 object content-type as the content-type for the AS2 message.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:transfer:ConnectorAs2ConfigPropertiesSigningAlgorithm":{"description":"Signing algorithm for this AS2 connector configuration.","type":"string","enum":[{"name":"Sha256","value":"SHA256"},{"name":"Sha384","value":"SHA384"},{"name":"Sha512","value":"SHA512"},{"name":"Sha1","value":"SHA1"},{"name":"None","value":"NONE"}]},"aws-native:transfer:ConnectorAsyncMdnConfig":{"properties":{"serverIds":{"type":"array","items":{"type":"string"}},"url":{"type":"string","description":"URL of the server to receive the MDN response on"}},"type":"object","required":["serverIds","url"]},"aws-native:transfer:ConnectorEgressConfig":{"properties":{"vpcLattice":{"$ref":"#/types/aws-native:transfer:ConnectorVpcLatticeEgressConfig","description":"VPC_LATTICE configuration for routing connector traffic through customer VPCs. Enables private connectivity to SFTP servers without requiring public internet access or complex network configurations."}},"type":"object","required":["vpcLattice"]},"aws-native:transfer:ConnectorEgressType":{"type":"string","enum":[{"name":"ServiceManaged","value":"SERVICE_MANAGED"},{"name":"VpcLattice","value":"VPC_LATTICE"}]},"aws-native:transfer:ConnectorStatus":{"type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Pending","value":"PENDING"},{"name":"Errored","value":"ERRORED"}]},"aws-native:transfer:ConnectorTag":{"description":"Creates a key-value pair for a specific resource.","properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:transfer:ConnectorVpcLatticeEgressConfig":{"properties":{"portNumber":{"type":"integer","description":"Port to connect to on the target VPC Lattice resource"},"resourceConfigurationArn":{"type":"string","description":"ARN of the VPC Lattice resource configuration"}},"type":"object","required":["resourceConfigurationArn"]},"aws-native:transfer:CustomDirectoriesProperties":{"description":"Specifies a separate directory for each type of file to store for an AS2 message.","properties":{"failedFilesDirectory":{"type":"string","description":"Specifies a location to store the failed files for an AS2 message."},"mdnFilesDirectory":{"type":"string","description":"Specifies a location to store the MDN file for an AS2 message."},"payloadFilesDirectory":{"type":"string","description":"Specifies a location to store the payload file for an AS2 message."},"statusFilesDirectory":{"type":"string","description":"Specifies a location to store the status file for an AS2 message."},"temporaryFilesDirectory":{"type":"string","description":"Specifies a location to store the temporary processing file for an AS2 message."}},"type":"object","required":["failedFilesDirectory","mdnFilesDirectory","payloadFilesDirectory","statusFilesDirectory","temporaryFilesDirectory"]},"aws-native:transfer:ProfileTag":{"description":"Creates a key-value pair for a specific resource.","properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:transfer:ProfileType":{"description":"Enum specifying whether the profile is local or associated with a trading partner.","type":"string","enum":[{"name":"Local","value":"LOCAL"},{"name":"Partner","value":"PARTNER"}]},"aws-native:transfer:ServerAs2Transport":{"type":"string","enum":[{"name":"Http","value":"HTTP"}]},"aws-native:transfer:ServerDirectoryListingOptimization":{"description":"Indicates whether optimization to directory listing on S3 servers is used. Disabled by default for compatibility.","type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:transfer:ServerDomain":{"type":"string","enum":[{"name":"S3","value":"S3"},{"name":"Efs","value":"EFS"}]},"aws-native:transfer:ServerEndpointDetails":{"properties":{"addressAllocationIds":{"type":"array","items":{"type":"string"},"description":"A list of address allocation IDs that are required to attach an Elastic IP address to your server's endpoint.\n\nAn address allocation ID corresponds to the allocation ID of an Elastic IP address. This value can be retrieved from the `allocationId` field from the Amazon EC2 [Address](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Address.html) data type. One way to retrieve this value is by calling the EC2 [DescribeAddresses](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAddresses.html) API.\n\nThis parameter is optional. Set this parameter if you want to make your VPC endpoint public-facing. For details, see [Create an internet-facing endpoint for your server](https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#create-internet-facing-endpoint) .\n\n\u003e This property can only be set as follows:\n\u003e \n\u003e - `EndpointType` must be set to `VPC`\n\u003e - The Transfer Family server must be offline.\n\u003e - You cannot set this parameter for Transfer Family servers that use the FTP protocol.\n\u003e - The server must already have `SubnetIds` populated ( `SubnetIds` and `AddressAllocationIds` cannot be updated simultaneously).\n\u003e - `AddressAllocationIds` can't contain duplicates, and must be equal in length to `SubnetIds` . For example, if you have three subnet IDs, you must also specify three address allocation IDs.\n\u003e - Call the `UpdateServer` API to set or change this parameter.\n\u003e - You can't set address allocation IDs for servers that have an `IpAddressType` set to `DUALSTACK` You can only set this property if `IpAddressType` is set to `IPV4` ."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security groups IDs that are available to attach to your server's endpoint.\n\n\u003e While `SecurityGroupIds` appears in the response syntax for consistency with `CreateServer` and `UpdateServer` operations, this field is not populated in `DescribeServer` responses. Security groups are managed at the VPC endpoint level and can be modified outside of the Transfer Family service. To retrieve current security group information, use the EC2 `DescribeVpcEndpoints` API with the `VpcEndpointId` returned in the response.\n\u003e \n\u003e This property can only be set when `EndpointType` is set to `VPC` .\n\u003e \n\u003e You can edit the `SecurityGroupIds` property in the [UpdateServer](https://docs.aws.amazon.com/transfer/latest/userguide/API_UpdateServer.html) API only if you are changing the `EndpointType` from `PUBLIC` or `VPC_ENDPOINT` to `VPC` . To change security groups associated with your server's VPC endpoint after creation, use the Amazon EC2 [ModifyVpcEndpoint](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyVpcEndpoint.html) API."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs that are required to host your server endpoint in your VPC.\n\n\u003e This property can only be set when `EndpointType` is set to `VPC` ."},"vpcEndpointId":{"type":"string","description":"The ID of the VPC endpoint.\n\n\u003e This property can only be set when `EndpointType` is set to `VPC_ENDPOINT` ."},"vpcId":{"type":"string","description":"The VPC ID of the virtual private cloud in which the server's endpoint will be hosted.\n\n\u003e This property can only be set when `EndpointType` is set to `VPC` ."}},"type":"object"},"aws-native:transfer:ServerEndpointType":{"type":"string","enum":[{"name":"Public","value":"PUBLIC"},{"name":"Vpc","value":"VPC"},{"name":"VpcEndpoint","value":"VPC_ENDPOINT"}]},"aws-native:transfer:ServerIdentityProviderDetails":{"properties":{"directoryId":{"type":"string","description":"The identifier of the AWS Directory Service directory that you want to use as your identity provider."},"function":{"type":"string","description":"The ARN for a Lambda function to use for the Identity provider."},"invocationRole":{"type":"string","description":"This parameter is only applicable if your `IdentityProviderType` is `API_GATEWAY` . Provides the type of `InvocationRole` used to authenticate the user account."},"sftpAuthenticationMethods":{"$ref":"#/types/aws-native:transfer:ServerSftpAuthenticationMethods","description":"For SFTP-enabled servers, and for custom identity providers *only* , you can specify whether to authenticate using a password, SSH key pair, or both.\n\n- `PASSWORD` - users must provide their password to connect.\n- `PUBLIC_KEY` - users must provide their private key to connect.\n- `PUBLIC_KEY_OR_PASSWORD` - users can authenticate with either their password or their key. This is the default value.\n- `PUBLIC_KEY_AND_PASSWORD` - users must provide both their private key and their password to connect. The server checks the key first, and then if the key is valid, the system prompts for a password. If the private key provided does not match the public key that is stored, authentication fails."},"url":{"type":"string","description":"Provides the location of the service endpoint used to authenticate users."}},"type":"object"},"aws-native:transfer:ServerIdentityProviderType":{"type":"string","enum":[{"name":"ServiceManaged","value":"SERVICE_MANAGED"},{"name":"ApiGateway","value":"API_GATEWAY"},{"name":"AwsDirectoryService","value":"AWS_DIRECTORY_SERVICE"},{"name":"AwsLambda","value":"AWS_LAMBDA"}]},"aws-native:transfer:ServerIpAddressType":{"type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:transfer:ServerProtocol":{"type":"string","enum":[{"name":"Sftp","value":"SFTP"},{"name":"Ftp","value":"FTP"},{"name":"Ftps","value":"FTPS"},{"name":"As2","value":"AS2"}]},"aws-native:transfer:ServerProtocolDetails":{"properties":{"as2Transports":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:ServerAs2Transport"},"description":"List of `As2Transport` objects."},"passiveIp":{"type":"string","description":"Indicates passive mode, for FTP and FTPS protocols. Enter a single IPv4 address, such as the public IP address of a firewall, router, or load balancer. For example:\n\n`aws transfer update-server --protocol-details PassiveIp=0.0.0.0`\n\nReplace `0.0.0.0` in the example above with the actual IP address you want to use.\n\n\u003e If you change the `PassiveIp` value, you must stop and then restart your Transfer Family server for the change to take effect. For details on using passive mode (PASV) in a NAT environment, see [Configuring your FTPS server behind a firewall or NAT with AWS Transfer Family](https://docs.aws.amazon.com/storage/configuring-your-ftps-server-behind-a-firewall-or-nat-with-aws-transfer-family/) .\n\u003e \n\u003e Additionally, avoid placing Network Load Balancers (NLBs) or NAT gateways in front of AWS Transfer Family servers. This configuration increases costs and can cause performance issues. When NLBs or NATs are in the communication path, Transfer Family cannot accurately recognize client IP addresses, which impacts connection sharding and limits FTPS servers to only 300 simultaneous connections instead of 10,000. If you must use an NLB, use port 21 for health checks and enable TLS session resumption by setting `TlsSessionResumptionMode = ENFORCED` . For optimal performance, migrate to VPC endpoints with Elastic IP addresses instead of using NLBs. For more details, see [Avoid placing NLBs and NATs in front of AWS Transfer Family](https://docs.aws.amazon.com/transfer/latest/userguide/infrastructure-security.html#nlb-considerations) . \n\n*Special values*\n\nThe `AUTO` and `0.0.0.0` are special values for the `PassiveIp` parameter. The value `PassiveIp=AUTO` is assigned by default to FTP and FTPS type servers. In this case, the server automatically responds with one of the endpoint IPs within the PASV response. `PassiveIp=0.0.0.0` has a more unique application for its usage. For example, if you have a High Availability (HA) Network Load Balancer (NLB) environment, where you have 3 subnets, you can only specify a single IP address using the `PassiveIp` parameter. This reduces the effectiveness of having High Availability. In this case, you can specify `PassiveIp=0.0.0.0` . This tells the client to use the same IP address as the Control connection and utilize all AZs for their connections. Note, however, that not all FTP clients support the `PassiveIp=0.0.0.0` response. FileZilla and WinSCP do support it. If you are using other clients, check to see if your client supports the `PassiveIp=0.0.0.0` response."},"setStatOption":{"$ref":"#/types/aws-native:transfer:ServerSetStatOption","description":"Use the `SetStatOption` to ignore the error that is generated when the client attempts to use `SETSTAT` on a file you are uploading to an S3 bucket.\n\nSome SFTP file transfer clients can attempt to change the attributes of remote files, including timestamp and permissions, using commands, such as `SETSTAT` when uploading the file. However, these commands are not compatible with object storage systems, such as Amazon S3. Due to this incompatibility, file uploads from these clients can result in errors even when the file is otherwise successfully uploaded.\n\nSet the value to `ENABLE_NO_OP` to have the Transfer Family server ignore the `SETSTAT` command, and upload files without needing to make any changes to your SFTP client. While the `SetStatOption` `ENABLE_NO_OP` setting ignores the error, it does generate a log entry in Amazon CloudWatch Logs, so you can determine when the client is making a `SETSTAT` call.\n\n\u003e If you want to preserve the original timestamp for your file, and modify other file attributes using `SETSTAT` , you can use Amazon EFS as backend storage with Transfer Family."},"tlsSessionResumptionMode":{"$ref":"#/types/aws-native:transfer:ServerTlsSessionResumptionMode","description":"A property used with Transfer Family servers that use the FTPS protocol. TLS Session Resumption provides a mechanism to resume or share a negotiated secret key between the control and data connection for an FTPS session. `TlsSessionResumptionMode` determines whether or not the server resumes recent, negotiated sessions through a unique session ID. This property is available during `CreateServer` and `UpdateServer` calls. If a `TlsSessionResumptionMode` value is not specified during `CreateServer` , it is set to `ENFORCED` by default.\n\n- `DISABLED` : the server does not process TLS session resumption client requests and creates a new TLS session for each request.\n- `ENABLED` : the server processes and accepts clients that are performing TLS session resumption. The server doesn't reject client data connections that do not perform the TLS session resumption client processing.\n- `ENFORCED` : the server processes and accepts clients that are performing TLS session resumption. The server rejects client data connections that do not perform the TLS session resumption client processing. Before you set the value to `ENFORCED` , test your clients.\n\n\u003e Not all FTPS clients perform TLS session resumption. So, if you choose to enforce TLS session resumption, you prevent any connections from FTPS clients that don't perform the protocol negotiation. To determine whether or not you can use the `ENFORCED` value, you need to test your clients."}},"type":"object"},"aws-native:transfer:ServerS3StorageOptions":{"properties":{"directoryListingOptimization":{"$ref":"#/types/aws-native:transfer:ServerDirectoryListingOptimization","description":"Specifies whether or not performance for your Amazon S3 directories is optimized.\n\n- If using the console, this is enabled by default.\n- If using the API or CLI, this is disabled by default.\n\nBy default, home directory mappings have a `TYPE` of `DIRECTORY` . If you enable this option, you would then need to explicitly set the `HomeDirectoryMapEntry` `Type` to `FILE` if you want a mapping to have a file target."}},"type":"object"},"aws-native:transfer:ServerSetStatOption":{"type":"string","enum":[{"name":"Default","value":"DEFAULT"},{"name":"EnableNoOp","value":"ENABLE_NO_OP"}]},"aws-native:transfer:ServerSftpAuthenticationMethods":{"type":"string","enum":[{"name":"Password","value":"PASSWORD"},{"name":"PublicKey","value":"PUBLIC_KEY"},{"name":"PublicKeyOrPassword","value":"PUBLIC_KEY_OR_PASSWORD"},{"name":"PublicKeyAndPassword","value":"PUBLIC_KEY_AND_PASSWORD"}]},"aws-native:transfer:ServerState":{"type":"string","enum":[{"name":"Offline","value":"OFFLINE"},{"name":"Online","value":"ONLINE"},{"name":"Starting","value":"STARTING"},{"name":"Stopping","value":"STOPPING"},{"name":"StartFailed","value":"START_FAILED"},{"name":"StopFailed","value":"STOP_FAILED"}]},"aws-native:transfer:ServerTag":{"properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:transfer:ServerTlsSessionResumptionMode":{"type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"},{"name":"Enforced","value":"ENFORCED"}]},"aws-native:transfer:ServerWorkflowDetail":{"properties":{"executionRole":{"type":"string","description":"Includes the necessary permissions for S3, EFS, and Lambda operations that Transfer can assume, so that all workflow steps can operate on the required resources"},"workflowId":{"type":"string","description":"A unique identifier for the workflow."}},"type":"object","required":["executionRole","workflowId"]},"aws-native:transfer:ServerWorkflowDetails":{"properties":{"onPartialUpload":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:ServerWorkflowDetail"},"description":"A trigger that starts a workflow if a file is only partially uploaded. You can attach a workflow to a server that executes whenever there is a partial upload.\n\nA *partial upload* occurs when a file is open when the session disconnects.\n\n\u003e `OnPartialUpload` can contain a maximum of one `WorkflowDetail` object."},"onUpload":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:ServerWorkflowDetail"},"description":"A trigger that starts a workflow: the workflow begins to execute after a file is uploaded.\n\nTo remove an associated workflow from a server, you can provide an empty `OnUpload` object, as in the following example.\n\n`aws transfer update-server --server-id s-01234567890abcdef --workflow-details '{\"OnUpload\":[]}'`\n\n\u003e `OnUpload` can contain a maximum of one `WorkflowDetail` object."}},"type":"object"},"aws-native:transfer:SftpConfigProperties":{"description":"Configuration for an SFTP connector.","properties":{"maxConcurrentConnections":{"type":"integer","description":"Specifies the number of active connections that your connector can establish with the remote server at the same time."},"trustedHostKeys":{"type":"array","items":{"type":"string"},"description":"List of public host keys, for the external server to which you are connecting."},"userSecretId":{"type":"string","description":"ARN or name of the secret in AWS Secrets Manager which contains the SFTP user's private keys or passwords."}},"type":"object"},"aws-native:transfer:UserHomeDirectoryMapEntry":{"properties":{"entry":{"type":"string","description":"Represents an entry for `HomeDirectoryMappings` ."},"target":{"type":"string","description":"Represents the map target that is used in a `HomeDirectoryMapEntry` ."},"type":{"$ref":"#/types/aws-native:transfer:UserMapType","description":"Specifies the type of mapping. Set the type to `FILE` if you want the mapping to point to a file, or `DIRECTORY` for the directory to point to a directory.\n\n\u003e By default, home directory mappings have a `Type` of `DIRECTORY` when you create a Transfer Family server. You would need to explicitly set `Type` to `FILE` if you want a mapping to have a file target."}},"type":"object","required":["entry","target"]},"aws-native:transfer:UserHomeDirectoryType":{"type":"string","enum":[{"name":"Path","value":"PATH"},{"name":"Logical","value":"LOGICAL"}]},"aws-native:transfer:UserMapType":{"type":"string","enum":[{"name":"File","value":"FILE"},{"name":"Directory","value":"DIRECTORY"}]},"aws-native:transfer:UserPosixProfile":{"properties":{"gid":{"type":"number","description":"The POSIX group ID used for all EFS operations by this user."},"secondaryGids":{"type":"array","items":{"type":"number"},"description":"The secondary POSIX group IDs used for all EFS operations by this user."},"uid":{"type":"number","description":"The POSIX user ID used for all EFS operations by this user."}},"type":"object","required":["gid","uid"]},"aws-native:transfer:UserTag":{"properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:transfer:WebAppCustomization":{"properties":{"faviconFile":{"type":"string","description":"Specifies a favicon to display in the browser tab."},"logoFile":{"type":"string","description":"Specifies a logo to display on the web app."},"title":{"type":"string","description":"Specifies a title to display on the web app."}},"type":"object"},"aws-native:transfer:WebAppEndpointDetails":{"properties":{"vpc":{"$ref":"#/types/aws-native:transfer:WebAppVpc"}},"type":"object"},"aws-native:transfer:WebAppEndpointPolicy":{"type":"string","enum":[{"name":"Standard","value":"STANDARD"},{"name":"Fips","value":"FIPS"}]},"aws-native:transfer:WebAppIdentityProviderDetails":{"description":"You can provide a structure that contains the details for the identity provider to use with your web app.","properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM Identity Center application: this value is set automatically when you create your web app."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM Identity Center used for the web app.","replaceOnChanges":true},"role":{"type":"string","description":"The IAM role in IAM Identity Center used for the web app."}},"type":"object"},"aws-native:transfer:WebAppTag":{"description":"Key-value pair that can be used to group and search for web apps.","properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:transfer:WebAppUnits0Properties":{"description":"A union that contains the value for number of concurrent connections or the user sessions on your web app.","properties":{"provisioned":{"type":"integer"}},"type":"object","required":["provisioned"]},"aws-native:transfer:WebAppUnitsProperties":{"description":"A union that contains the value for number of concurrent connections or the user sessions on your web app.","properties":{"provisioned":{"type":"integer"}},"type":"object","required":["provisioned"]},"aws-native:transfer:WebAppVpc":{"description":"You can provide a structure that contains the details for the VPC endpoint to use with your web app.","properties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"}},"vpcId":{"type":"string","replaceOnChanges":true}},"type":"object"},"aws-native:transfer:WorkflowEfsInputFileLocation":{"description":"Specifies the details for an EFS file.","properties":{"fileSystemId":{"type":"string","description":"Specifies the EFS filesystem that contains the file."},"path":{"type":"string","description":"The name assigned to the file when it was created in EFS. You use the object path to retrieve the object."}},"type":"object"},"aws-native:transfer:WorkflowInputFileLocation":{"description":"Specifies the location for the file being decrypted. Only applicable for the Decrypt type of workflow steps.","properties":{"efsFileLocation":{"$ref":"#/types/aws-native:transfer:WorkflowEfsInputFileLocation"},"s3FileLocation":{"$ref":"#/types/aws-native:transfer:WorkflowS3InputFileLocation"}},"type":"object"},"aws-native:transfer:WorkflowS3FileLocation":{"description":"Specifies the location for the file being copied. Only applicable for the Copy type of workflow steps.","properties":{"s3FileLocation":{"$ref":"#/types/aws-native:transfer:WorkflowS3InputFileLocation","description":"Specifies the details for the file location for the file that's being used in the workflow. Only applicable if you are using Amazon S3 storage."}},"type":"object"},"aws-native:transfer:WorkflowS3InputFileLocation":{"description":"Specifies the details for a S3 file.","properties":{"bucket":{"type":"string","description":"Specifies the S3 bucket that contains the file."},"key":{"type":"string","description":"The name assigned to the file when it was created in S3. You use the object key to retrieve the object."}},"type":"object"},"aws-native:transfer:WorkflowS3Tag":{"description":"Specifies the key-value pair that are assigned to a file during the execution of a Tagging step.","properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"The value that corresponds to the key."}},"type":"object","required":["key","value"]},"aws-native:transfer:WorkflowStep":{"description":"The basic building block of a workflow.","properties":{"copyStepDetails":{"$ref":"#/types/aws-native:transfer:WorkflowStepCopyStepDetailsProperties","description":"Details for a step that performs a file copy."},"customStepDetails":{"$ref":"#/types/aws-native:transfer:WorkflowStepCustomStepDetailsProperties","description":"Details for a step that invokes a lambda function."},"decryptStepDetails":{"$ref":"#/types/aws-native:transfer:WorkflowStepDecryptStepDetailsProperties","description":"Details for a step that performs a file decryption."},"deleteStepDetails":{"$ref":"#/types/aws-native:transfer:WorkflowStepDeleteStepDetailsProperties","description":"Details for a step that deletes the file."},"tagStepDetails":{"$ref":"#/types/aws-native:transfer:WorkflowStepTagStepDetailsProperties","description":"Details for a step that creates one or more tags."},"type":{"$ref":"#/types/aws-native:transfer:WorkflowStepType"}},"type":"object"},"aws-native:transfer:WorkflowStepCopyStepDetailsProperties":{"description":"Details for a step that performs a file copy.","properties":{"destinationFileLocation":{"$ref":"#/types/aws-native:transfer:WorkflowS3FileLocation"},"name":{"type":"string","description":"The name of the step, used as an identifier."},"overwriteExisting":{"$ref":"#/types/aws-native:transfer:WorkflowStepCopyStepDetailsPropertiesOverwriteExisting","description":"A flag that indicates whether or not to overwrite an existing file of the same name. The default is FALSE."},"sourceFileLocation":{"type":"string","description":"Specifies which file to use as input to the workflow step."}},"type":"object"},"aws-native:transfer:WorkflowStepCopyStepDetailsPropertiesOverwriteExisting":{"description":"A flag that indicates whether or not to overwrite an existing file of the same name. The default is FALSE.","type":"string","enum":[{"name":"True","value":"TRUE"},{"name":"False","value":"FALSE"}]},"aws-native:transfer:WorkflowStepCustomStepDetailsProperties":{"description":"Details for a step that invokes a lambda function.","properties":{"name":{"type":"string","description":"The name of the step, used as an identifier."},"sourceFileLocation":{"type":"string","description":"Specifies which file to use as input to the workflow step."},"target":{"type":"string","description":"The ARN for the lambda function that is being called."},"timeoutSeconds":{"type":"integer","description":"Timeout, in seconds, for the step."}},"type":"object"},"aws-native:transfer:WorkflowStepDecryptStepDetailsProperties":{"description":"Details for a step that performs a file decryption.","properties":{"destinationFileLocation":{"$ref":"#/types/aws-native:transfer:WorkflowInputFileLocation"},"name":{"type":"string","description":"The name of the step, used as an identifier."},"overwriteExisting":{"$ref":"#/types/aws-native:transfer:WorkflowStepDecryptStepDetailsPropertiesOverwriteExisting","description":"A flag that indicates whether or not to overwrite an existing file of the same name. The default is FALSE."},"sourceFileLocation":{"type":"string","description":"Specifies which file to use as input to the workflow step."},"type":{"$ref":"#/types/aws-native:transfer:WorkflowStepDecryptStepDetailsPropertiesType","description":"Specifies which encryption method to use."}},"type":"object","required":["destinationFileLocation","type"]},"aws-native:transfer:WorkflowStepDecryptStepDetailsPropertiesOverwriteExisting":{"description":"A flag that indicates whether or not to overwrite an existing file of the same name. The default is FALSE.","type":"string","enum":[{"name":"True","value":"TRUE"},{"name":"False","value":"FALSE"}]},"aws-native:transfer:WorkflowStepDecryptStepDetailsPropertiesType":{"description":"Specifies which encryption method to use.","type":"string","enum":[{"name":"Pgp","value":"PGP"}]},"aws-native:transfer:WorkflowStepDeleteStepDetailsProperties":{"description":"Details for a step that deletes the file.","properties":{"name":{"type":"string","description":"The name of the step, used as an identifier."},"sourceFileLocation":{"type":"string","description":"Specifies which file to use as input to the workflow step."}},"type":"object"},"aws-native:transfer:WorkflowStepTagStepDetailsProperties":{"description":"Details for a step that creates one or more tags.","properties":{"name":{"type":"string","description":"The name of the step, used as an identifier."},"sourceFileLocation":{"type":"string","description":"Specifies which file to use as input to the workflow step."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:WorkflowS3Tag"},"description":"Array that contains from 1 to 10 key/value pairs."}},"type":"object"},"aws-native:transfer:WorkflowStepType":{"type":"string","enum":[{"name":"Copy","value":"COPY"},{"name":"Custom","value":"CUSTOM"},{"name":"Decrypt","value":"DECRYPT"},{"name":"Delete","value":"DELETE"},{"name":"Tag","value":"TAG"}]},"aws-native:transfer:WorkflowTag":{"description":"Creates a key-value pair for a specific resource.","properties":{"key":{"type":"string","description":"The name assigned to the tag that you create."},"value":{"type":"string","description":"Contains one or more values that you assigned to the key name you create."}},"type":"object","required":["key","value"]},"aws-native:verifiedpermissions:EncryptionState0Properties":{"properties":{"kmsEncryptionState":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreKmsEncryptionState"}},"type":"object","required":["kmsEncryptionState"]},"aws-native:verifiedpermissions:EncryptionState1Properties":{"properties":{"default":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreDefault"}},"type":"object","required":["default"]},"aws-native:verifiedpermissions:IdentitySourceCognitoGroupConfiguration":{"properties":{"groupEntityType":{"type":"string"}},"type":"object","required":["groupEntityType"]},"aws-native:verifiedpermissions:IdentitySourceCognitoUserPoolConfiguration":{"properties":{"clientIds":{"type":"array","items":{"type":"string"}},"groupConfiguration":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceCognitoGroupConfiguration"},"userPoolArn":{"type":"string"}},"type":"object","required":["userPoolArn"]},"aws-native:verifiedpermissions:IdentitySourceConfiguration0Properties":{"properties":{"cognitoUserPoolConfiguration":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceCognitoUserPoolConfiguration"}},"type":"object","required":["cognitoUserPoolConfiguration"]},"aws-native:verifiedpermissions:IdentitySourceConfiguration1Properties":{"properties":{"openIdConnectConfiguration":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdConnectConfiguration"}},"type":"object","required":["openIdConnectConfiguration"]},"aws-native:verifiedpermissions:IdentitySourceDetails":{"properties":{"clientIds":{"type":"array","items":{"type":"string"}},"discoveryUrl":{"type":"string"},"openIdIssuer":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdIssuer"},"userPoolArn":{"type":"string"}},"type":"object"},"aws-native:verifiedpermissions:IdentitySourceOpenIdConnectAccessTokenConfiguration":{"properties":{"audiences":{"type":"array","items":{"type":"string"}},"principalIdClaim":{"type":"string"}},"type":"object"},"aws-native:verifiedpermissions:IdentitySourceOpenIdConnectConfiguration":{"properties":{"entityIdPrefix":{"type":"string"},"groupConfiguration":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdConnectGroupConfiguration"},"issuer":{"type":"string"},"tokenSelection":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdConnectTokenSelection0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdConnectTokenSelection1Properties"}]}},"type":"object","required":["issuer","tokenSelection"]},"aws-native:verifiedpermissions:IdentitySourceOpenIdConnectGroupConfiguration":{"properties":{"groupClaim":{"type":"string"},"groupEntityType":{"type":"string"}},"type":"object","required":["groupClaim","groupEntityType"]},"aws-native:verifiedpermissions:IdentitySourceOpenIdConnectIdentityTokenConfiguration":{"properties":{"clientIds":{"type":"array","items":{"type":"string"}},"principalIdClaim":{"type":"string"}},"type":"object"},"aws-native:verifiedpermissions:IdentitySourceOpenIdConnectTokenSelection0Properties":{"properties":{"accessTokenOnly":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdConnectAccessTokenConfiguration"}},"type":"object","required":["accessTokenOnly"]},"aws-native:verifiedpermissions:IdentitySourceOpenIdConnectTokenSelection1Properties":{"properties":{"identityTokenOnly":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceOpenIdConnectIdentityTokenConfiguration"}},"type":"object","required":["identityTokenOnly"]},"aws-native:verifiedpermissions:IdentitySourceOpenIdIssuer":{"type":"string","enum":[{"name":"Cognito","value":"COGNITO"}]},"aws-native:verifiedpermissions:PolicyDefinition0Properties":{"properties":{"static":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStaticPolicyDefinition"}},"type":"object","required":["static"]},"aws-native:verifiedpermissions:PolicyDefinition1Properties":{"properties":{"templateLinked":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyTemplateLinkedPolicyDefinition"}},"type":"object","required":["templateLinked"]},"aws-native:verifiedpermissions:PolicyEntityIdentifier":{"properties":{"entityId":{"type":"string"},"entityType":{"type":"string"}},"type":"object","required":["entityId","entityType"]},"aws-native:verifiedpermissions:PolicyStaticPolicyDefinition":{"properties":{"description":{"type":"string"},"statement":{"type":"string"}},"type":"object","required":["statement"]},"aws-native:verifiedpermissions:PolicyStoreDefault":{"type":"object"},"aws-native:verifiedpermissions:PolicyStoreDeletionMode":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:verifiedpermissions:PolicyStoreDeletionProtection":{"properties":{"mode":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreDeletionMode","description":"Specifies whether the policy store can be deleted. If enabled, the policy store can't be deleted.\n\nThe default state is `DISABLED` ."}},"type":"object","required":["mode"]},"aws-native:verifiedpermissions:PolicyStoreEncryptionSettings":{"type":"object"},"aws-native:verifiedpermissions:PolicyStoreKmsEncryptionState":{"properties":{"encryptionContext":{"type":"object","additionalProperties":{"type":"string"}},"key":{"type":"string"}},"type":"object","required":["encryptionContext","key"]},"aws-native:verifiedpermissions:PolicyStoreSchemaDefinition":{"properties":{"cedarJson":{"type":"string","description":"A JSON string representation of the schema supported by applications that use this policy store. For more information, see [Policy store schema](https://docs.aws.amazon.com/verifiedpermissions/latest/userguide/schema.html) in the AVP User Guide."}},"type":"object"},"aws-native:verifiedpermissions:PolicyStoreTag":{"properties":{"key":{"type":"string","description":"A string you can use to assign a value. The combination of tag keys and values can help you organize and categorize your resources."},"value":{"type":"string","description":"The value for the specified tag key."}},"type":"object","required":["key","value"]},"aws-native:verifiedpermissions:PolicyStoreValidationMode":{"type":"string","enum":[{"name":"Off","value":"OFF"},{"name":"Strict","value":"STRICT"}]},"aws-native:verifiedpermissions:PolicyStoreValidationSettings":{"properties":{"mode":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreValidationMode","description":"The validation mode currently configured for this policy store. The valid values are:\n\n- *OFF* – Neither Verified Permissions nor Cedar perform any validation on policies. No validation errors are reported by either service.\n- *STRICT* – Requires a schema to be present in the policy store. Cedar performs validation on all submitted new or updated static policies and policy templates. Any that fail validation are rejected and Cedar doesn't store them in the policy store.\n\n\u003e If `Mode=STRICT` and the policy store doesn't contain a schema, Verified Permissions rejects all static policies and policy templates because there is no schema to validate against.\n\u003e \n\u003e To submit a static policy or policy template without a schema, you must turn off validation."}},"type":"object","required":["mode"]},"aws-native:verifiedpermissions:PolicyTemplateLinkedPolicyDefinition":{"properties":{"policyTemplateId":{"type":"string"},"principal":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyEntityIdentifier"},"resource":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyEntityIdentifier"}},"type":"object","required":["policyTemplateId"]},"aws-native:verifiedpermissions:PolicyType":{"type":"string","enum":[{"name":"Static","value":"STATIC"},{"name":"TemplateLinked","value":"TEMPLATE_LINKED"}]},"aws-native:voiceid:DomainServerSideEncryptionConfiguration":{"properties":{"kmsKeyId":{"type":"string","description":"The identifier of the KMS key to use to encrypt data stored by Voice ID. Voice ID doesn't support asymmetric customer managed keys."}},"type":"object","required":["kmsKeyId"]},"aws-native:voiceid:DomainTag":{"properties":{"key":{"type":"string","description":"The first part of a key:value pair that forms a tag associated with a given resource. For example, in the tag 'Department':'Sales', the key is 'Department'."},"value":{"type":"string","description":"The second part of a key:value pair that forms a tag associated with a given resource. For example, in the tag 'Department':'Sales', the value is 'Sales'."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:AccessLogSubscriptionServiceNetworkLogType":{"description":"Log type of the service network.","type":"string","enum":[{"name":"Service","value":"SERVICE"},{"name":"Resource","value":"RESOURCE"}]},"aws-native:vpclattice:AccessLogSubscriptionTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:AuthPolicyState":{"description":"The state of the auth policy. The auth policy is only active when the auth type is set to `AWS _IAM` . If you provide a policy, then authentication and authorization decisions are made based on this policy and the client's IAM policy. If the auth type is `NONE` , then any auth policy you provide will remain inactive.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"Inactive","value":"INACTIVE"}]},"aws-native:vpclattice:DomainVerificationStatus":{"description":"The current status of the domain verification process.","type":"string","enum":[{"name":"Verified","value":"VERIFIED"},{"name":"Pending","value":"PENDING"},{"name":"VerificationTimedOut","value":"VERIFICATION_TIMED_OUT"}]},"aws-native:vpclattice:DomainVerificationTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:vpclattice:ListenerDefaultAction":{"properties":{"fixedResponse":{"$ref":"#/types/aws-native:vpclattice:ListenerFixedResponse","description":"Describes an action that returns a custom HTTP response."},"forward":{"$ref":"#/types/aws-native:vpclattice:ListenerForward","description":"Describes a forward action. You can use forward actions to route requests to one or more target groups."}},"type":"object"},"aws-native:vpclattice:ListenerFixedResponse":{"properties":{"statusCode":{"type":"integer","description":"The HTTP response code. Only `404` and `500` status codes are supported."}},"type":"object","required":["statusCode"]},"aws-native:vpclattice:ListenerForward":{"properties":{"targetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:vpclattice:ListenerWeightedTargetGroup"},"description":"The target groups. Traffic matching the rule is forwarded to the specified target groups. With forward actions, you can assign a weight that controls the prioritization and selection of each target group. This means that requests are distributed to individual target groups based on their weights. For example, if two target groups have the same weight, each target group receives half of the traffic.\n\nThe default value is 1. This means that if only one target group is provided, there is no need to set the weight; 100% of the traffic goes to that target group."}},"type":"object","required":["targetGroups"]},"aws-native:vpclattice:ListenerProtocol":{"description":"The listener protocol.","type":"string","enum":[{"name":"Http","value":"HTTP"},{"name":"Https","value":"HTTPS"},{"name":"TlsPassthrough","value":"TLS_PASSTHROUGH"}]},"aws-native:vpclattice:ListenerTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:ListenerWeightedTargetGroup":{"properties":{"targetGroupIdentifier":{"type":"string","description":"The ID of the target group."},"weight":{"type":"integer","description":"Only required if you specify multiple target groups for a forward action. The weight determines how requests are distributed to the target group. For example, if you specify two target groups, each with a weight of 10, each target group receives half the requests. If you specify two target groups, one with a weight of 10 and the other with a weight of 20, the target group with a weight of 20 receives twice as many requests as the other target group. If there's only one target group specified, then the default value is 100."}},"type":"object","required":["targetGroupIdentifier"]},"aws-native:vpclattice:ResourceConfigurationAuthType":{"description":"The auth type for the resource configuration.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"AwsIam","value":"AWS_IAM"}]},"aws-native:vpclattice:ResourceConfigurationDefinition0Properties":{"description":"Identifies the resource configuration in one of the following ways:\n\n- *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN.\n- *Domain name* - Any domain name that is publicly resolvable.\n- *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported.","properties":{"ipResource":{"type":"string"}},"type":"object","required":["ipResource"]},"aws-native:vpclattice:ResourceConfigurationDefinition1Properties":{"description":"Identifies the resource configuration in one of the following ways:\n\n- *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN.\n- *Domain name* - Any domain name that is publicly resolvable.\n- *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported.","properties":{"arnResource":{"type":"string"}},"type":"object","required":["arnResource"]},"aws-native:vpclattice:ResourceConfigurationDefinition2Properties":{"description":"Identifies the resource configuration in one of the following ways:\n\n- *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN.\n- *Domain name* - Any domain name that is publicly resolvable.\n- *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported.","properties":{"dnsResource":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDnsResource"}},"type":"object","required":["dnsResource"]},"aws-native:vpclattice:ResourceConfigurationDnsResource":{"properties":{"domainName":{"type":"string"},"ipAddressType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDnsResourceIpAddressType"}},"type":"object","required":["domainName","ipAddressType"]},"aws-native:vpclattice:ResourceConfigurationDnsResourceIpAddressType":{"type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:vpclattice:ResourceConfigurationProtocolType":{"description":"(SINGLE, GROUP) The protocol accepted by the resource configuration.","type":"string","enum":[{"name":"Tcp","value":"TCP"}]},"aws-native:vpclattice:ResourceConfigurationTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:vpclattice:ResourceConfigurationType":{"description":"The type of resource configuration. A resource configuration can be one of the following types:\n\n- *SINGLE* - A single resource.\n- *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration.\n- *CHILD* - A single resource that is part of a group resource configuration.\n- *ARN* - An AWS resource.","type":"string","enum":[{"name":"Group","value":"GROUP"},{"name":"Child","value":"CHILD"},{"name":"Single","value":"SINGLE"},{"name":"Arn","value":"ARN"}]},"aws-native:vpclattice:ResourceGatewayIpAddressType":{"description":"The type of IP address used by the resource gateway.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"},{"name":"Dualstack","value":"DUALSTACK"}]},"aws-native:vpclattice:ResourceGatewayTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key"]},"aws-native:vpclattice:RuleAction":{"properties":{"fixedResponse":{"$ref":"#/types/aws-native:vpclattice:RuleFixedResponse","description":"The fixed response action. The rule returns a custom HTTP response."},"forward":{"$ref":"#/types/aws-native:vpclattice:RuleForward","description":"The forward action. Traffic that matches the rule is forwarded to the specified target groups."}},"type":"object"},"aws-native:vpclattice:RuleFixedResponse":{"properties":{"statusCode":{"type":"integer","description":"The HTTP response code. Only `404` and `500` status codes are supported."}},"type":"object","required":["statusCode"]},"aws-native:vpclattice:RuleForward":{"properties":{"targetGroups":{"type":"array","items":{"$ref":"#/types/aws-native:vpclattice:RuleWeightedTargetGroup"},"description":"The target groups. Traffic matching the rule is forwarded to the specified target groups. With forward actions, you can assign a weight that controls the prioritization and selection of each target group. This means that requests are distributed to individual target groups based on their weights. For example, if two target groups have the same weight, each target group receives half of the traffic.\n\nThe default value is 1. This means that if only one target group is provided, there is no need to set the weight; 100% of the traffic goes to that target group."}},"type":"object","required":["targetGroups"]},"aws-native:vpclattice:RuleHeaderMatch":{"properties":{"caseSensitive":{"type":"boolean","description":"Indicates whether the match is case sensitive."},"match":{"$ref":"#/types/aws-native:vpclattice:RuleHeaderMatchType","description":"The header match type."},"name":{"type":"string","description":"The name of the header."}},"type":"object","required":["match","name"]},"aws-native:vpclattice:RuleHeaderMatchType":{"properties":{"contains":{"type":"string","description":"A contains type match."},"exact":{"type":"string","description":"An exact type match."},"prefix":{"type":"string","description":"A prefix type match. Matches the value with the prefix."}},"type":"object"},"aws-native:vpclattice:RuleHttpMatch":{"properties":{"headerMatches":{"type":"array","items":{"$ref":"#/types/aws-native:vpclattice:RuleHeaderMatch"},"description":"The header matches. Matches incoming requests with rule based on request header value before applying rule action."},"method":{"$ref":"#/types/aws-native:vpclattice:RuleHttpMatchMethod","description":"The HTTP method type."},"pathMatch":{"$ref":"#/types/aws-native:vpclattice:RulePathMatch","description":"The path match."}},"type":"object"},"aws-native:vpclattice:RuleHttpMatchMethod":{"description":"The HTTP method type.","type":"string","enum":[{"name":"Connect","value":"CONNECT"},{"name":"Delete","value":"DELETE"},{"name":"Get","value":"GET"},{"name":"Head","value":"HEAD"},{"name":"Options","value":"OPTIONS"},{"name":"Post","value":"POST"},{"name":"Put","value":"PUT"},{"name":"Trace","value":"TRACE"}]},"aws-native:vpclattice:RuleMatch":{"properties":{"httpMatch":{"$ref":"#/types/aws-native:vpclattice:RuleHttpMatch","description":"The HTTP criteria that a rule must match."}},"type":"object","required":["httpMatch"]},"aws-native:vpclattice:RulePathMatch":{"properties":{"caseSensitive":{"type":"boolean","description":"Indicates whether the match is case sensitive."},"match":{"$ref":"#/types/aws-native:vpclattice:RulePathMatchType","description":"The type of path match."}},"type":"object","required":["match"]},"aws-native:vpclattice:RulePathMatchType":{"properties":{"exact":{"type":"string","description":"An exact match of the path."},"prefix":{"type":"string","description":"A prefix match of the path."}},"type":"object"},"aws-native:vpclattice:RuleTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:RuleWeightedTargetGroup":{"properties":{"targetGroupIdentifier":{"type":"string","description":"The ID of the target group."},"weight":{"type":"integer","description":"Only required if you specify multiple target groups for a forward action. The weight determines how requests are distributed to the target group. For example, if you specify two target groups, each with a weight of 10, each target group receives half the requests. If you specify two target groups, one with a weight of 10 and the other with a weight of 20, the target group with a weight of 20 receives twice as many requests as the other target group. If there's only one target group specified, then the default value is 100."}},"type":"object","required":["targetGroupIdentifier"]},"aws-native:vpclattice:ServiceAuthType":{"description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"AwsIam","value":"AWS_IAM"}]},"aws-native:vpclattice:ServiceDnsEntry":{"properties":{"domainName":{"type":"string","description":"The domain name of the service."},"hostedZoneId":{"type":"string","description":"The ID of the hosted zone."}},"type":"object"},"aws-native:vpclattice:ServiceNetworkAuthType":{"description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"AwsIam","value":"AWS_IAM"}]},"aws-native:vpclattice:ServiceNetworkResourceAssociationTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"A tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:ServiceNetworkServiceAssociationDnsEntry":{"properties":{"domainName":{"type":"string","description":"The domain name of the service."},"hostedZoneId":{"type":"string","description":"The ID of the hosted zone."}},"type":"object"},"aws-native:vpclattice:ServiceNetworkServiceAssociationStatus":{"description":"The status of the association between the service network and the service.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"Active","value":"ACTIVE"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:vpclattice:ServiceNetworkServiceAssociationTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:ServiceNetworkSharingConfig":{"properties":{"enabled":{"type":"boolean","description":"Specify if the service network should be enabled for sharing."}},"type":"object","required":["enabled"]},"aws-native:vpclattice:ServiceNetworkTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:ServiceNetworkVpcAssociationDnsOptions":{"properties":{"privateDnsPreference":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkVpcAssociationDnsOptionsPrivateDnsPreference","description":"The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.","replaceOnChanges":true},"privateDnsSpecifiedDomains":{"type":"array","items":{"type":"string"},"description":"Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .","replaceOnChanges":true}},"type":"object"},"aws-native:vpclattice:ServiceNetworkVpcAssociationDnsOptionsPrivateDnsPreference":{"description":"The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.","type":"string","enum":[{"name":"VerifiedDomainsOnly","value":"VERIFIED_DOMAINS_ONLY"},{"name":"AllDomains","value":"ALL_DOMAINS"},{"name":"VerifiedDomainsAndSpecifiedDomains","value":"VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS"},{"name":"SpecifiedDomainsOnly","value":"SPECIFIED_DOMAINS_ONLY"}]},"aws-native:vpclattice:ServiceNetworkVpcAssociationStatus":{"description":"The status of the association.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"Active","value":"ACTIVE"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:vpclattice:ServiceNetworkVpcAssociationTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:ServiceStatus":{"description":"The status of the service.","type":"string","enum":[{"name":"Active","value":"ACTIVE"},{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:vpclattice:ServiceTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:TargetGroupConfig":{"properties":{"healthCheck":{"$ref":"#/types/aws-native:vpclattice:TargetGroupHealthCheckConfig","description":"The health check configuration. Not supported if the target group type is `LAMBDA` or `ALB` ."},"ipAddressType":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfigIpAddressType","description":"The type of IP address used for the target group. Supported only if the target group type is `IP` . The default is `IPV4` .","replaceOnChanges":true},"lambdaEventStructureVersion":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfigLambdaEventStructureVersion","description":"The version of the event structure that your Lambda function receives. Supported only if the target group type is `LAMBDA` . The default is `V1` .","replaceOnChanges":true},"port":{"type":"integer","description":"The port on which the targets are listening. For HTTP, the default is 80. For HTTPS, the default is 443. Not supported if the target group type is `LAMBDA` .","replaceOnChanges":true},"protocol":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfigProtocol","description":"The protocol to use for routing traffic to the targets. The default is the protocol of the target group. Not supported if the target group type is `LAMBDA` .","replaceOnChanges":true},"protocolVersion":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfigProtocolVersion","description":"The protocol version. The default is `HTTP1` . Not supported if the target group type is `LAMBDA` .","replaceOnChanges":true},"vpcIdentifier":{"type":"string","description":"The ID of the VPC. Not supported if the target group type is `LAMBDA` .","replaceOnChanges":true}},"type":"object"},"aws-native:vpclattice:TargetGroupConfigIpAddressType":{"description":"The type of IP address used for the target group. Supported only if the target group type is `IP` . The default is `IPV4` .","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"}]},"aws-native:vpclattice:TargetGroupConfigLambdaEventStructureVersion":{"description":"The version of the event structure that your Lambda function receives. Supported only if the target group type is `LAMBDA` . The default is `V1` .","type":"string","enum":[{"name":"V1","value":"V1"},{"name":"V2","value":"V2"}]},"aws-native:vpclattice:TargetGroupConfigProtocol":{"description":"The protocol to use for routing traffic to the targets. The default is the protocol of the target group. Not supported if the target group type is `LAMBDA` .","type":"string","enum":[{"name":"Http","value":"HTTP"},{"name":"Https","value":"HTTPS"},{"name":"Tcp","value":"TCP"}]},"aws-native:vpclattice:TargetGroupConfigProtocolVersion":{"description":"The protocol version. The default is `HTTP1` . Not supported if the target group type is `LAMBDA` .","type":"string","enum":[{"name":"Http1","value":"HTTP1"},{"name":"Http2","value":"HTTP2"},{"name":"Grpc","value":"GRPC"}]},"aws-native:vpclattice:TargetGroupHealthCheckConfig":{"properties":{"enabled":{"type":"boolean","description":"Indicates whether health checking is enabled."},"healthCheckIntervalSeconds":{"type":"integer","description":"The approximate amount of time, in seconds, between health checks of an individual target. The range is 5–300 seconds. The default is 30 seconds."},"healthCheckTimeoutSeconds":{"type":"integer","description":"The amount of time, in seconds, to wait before reporting a target as unhealthy. The range is 1–120 seconds. The default is 5 seconds."},"healthyThresholdCount":{"type":"integer","description":"The number of consecutive successful health checks required before considering an unhealthy target healthy. The range is 2–10. The default is 5."},"matcher":{"$ref":"#/types/aws-native:vpclattice:TargetGroupMatcher","description":"The codes to use when checking for a successful response from a target."},"path":{"type":"string","description":"The destination for health checks on the targets. If the protocol version is `HTTP/1.1` or `HTTP/2` , specify a valid URI (for example, `/path?query` ). The default path is `/` . Health checks are not supported if the protocol version is `gRPC` , however, you can choose `HTTP/1.1` or `HTTP/2` and specify a valid URI."},"port":{"type":"integer","description":"The port used when performing health checks on targets. The default setting is the port that a target receives traffic on."},"protocol":{"$ref":"#/types/aws-native:vpclattice:TargetGroupHealthCheckConfigProtocol","description":"The protocol used when performing health checks on targets. The possible protocols are `HTTP` and `HTTPS` . The default is `HTTP` ."},"protocolVersion":{"$ref":"#/types/aws-native:vpclattice:TargetGroupHealthCheckConfigProtocolVersion","description":"The protocol version used when performing health checks on targets. The possible protocol versions are `HTTP1` and `HTTP2` ."},"unhealthyThresholdCount":{"type":"integer","description":"The number of consecutive failed health checks required before considering a target unhealthy. The range is 2–10. The default is 2."}},"type":"object"},"aws-native:vpclattice:TargetGroupHealthCheckConfigProtocol":{"description":"The protocol used when performing health checks on targets. The possible protocols are `HTTP` and `HTTPS` . The default is `HTTP` .","type":"string","enum":[{"name":"Http","value":"HTTP"},{"name":"Https","value":"HTTPS"}]},"aws-native:vpclattice:TargetGroupHealthCheckConfigProtocolVersion":{"description":"The protocol version used when performing health checks on targets. The possible protocol versions are `HTTP1` and `HTTP2` .","type":"string","enum":[{"name":"Http1","value":"HTTP1"},{"name":"Http2","value":"HTTP2"}]},"aws-native:vpclattice:TargetGroupMatcher":{"properties":{"httpCode":{"type":"string","description":"The HTTP code to use when checking for a successful response from a target."}},"type":"object","required":["httpCode"]},"aws-native:vpclattice:TargetGroupStatus":{"description":"The operation's status. You can retry the operation if the status is `CREATE_FAILED` . However, if you retry it while the status is `CREATE_IN_PROGRESS` , there is no change in the status.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"Active","value":"ACTIVE"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"DeleteFailed","value":"DELETE_FAILED"}]},"aws-native:vpclattice:TargetGroupTag":{"properties":{"key":{"type":"string","description":"The tag key."},"value":{"type":"string","description":"The tag value."}},"type":"object","required":["key","value"]},"aws-native:vpclattice:TargetGroupTarget":{"properties":{"id":{"type":"string","description":"The ID of the target. If the target group type is `INSTANCE` , this is an instance ID. If the target group type is `IP` , this is an IP address. If the target group type is `LAMBDA` , this is the ARN of a Lambda function. If the target group type is `ALB` , this is the ARN of an Application Load Balancer."},"port":{"type":"integer","description":"The port on which the target is listening. For HTTP, the default is 80. For HTTPS, the default is 443."}},"type":"object","required":["id"]},"aws-native:vpclattice:TargetGroupType":{"description":"The type of target group.","type":"string","enum":[{"name":"Ip","value":"IP"},{"name":"Lambda","value":"LAMBDA"},{"name":"Instance","value":"INSTANCE"},{"name":"Alb","value":"ALB"}]},"aws-native:vpclattice:TxtMethodConfigProperties":{"properties":{"name":{"type":"string","description":"The name of the TXT record that must be created for domain verification."},"value":{"type":"string","description":"The value that must be added to the TXT record for domain verification."}},"type":"object"},"aws-native:wafv2:IpSetIpAddressVersion":{"description":"Type of addresses in the IPSet, use IPV4 for IPV4 IP addresses, IPV6 for IPV6 address.","type":"string","enum":[{"name":"Ipv4","value":"IPV4"},{"name":"Ipv6","value":"IPV6"}]},"aws-native:wafv2:IpSetScope":{"description":"Use CLOUDFRONT for CloudFront IPSet, use REGIONAL for Application Load Balancer and API Gateway.","type":"string","enum":[{"name":"Cloudfront","value":"CLOUDFRONT"},{"name":"Regional","value":"REGIONAL"}]},"aws-native:wafv2:IpSetTag":{"properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object"},"aws-native:wafv2:LoggingConfigurationCondition":{"properties":{"actionCondition":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationConditionActionConditionProperties","description":"A single action condition."},"labelNameCondition":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationConditionLabelNameConditionProperties","description":"A single label name condition."}},"type":"object"},"aws-native:wafv2:LoggingConfigurationConditionActionConditionProperties":{"description":"A single action condition.","properties":{"action":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationConditionActionConditionPropertiesAction","description":"Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition."}},"type":"object","required":["action"]},"aws-native:wafv2:LoggingConfigurationConditionActionConditionPropertiesAction":{"description":"Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.","type":"string","enum":[{"name":"Allow","value":"ALLOW"},{"name":"Block","value":"BLOCK"},{"name":"Count","value":"COUNT"},{"name":"Captcha","value":"CAPTCHA"},{"name":"Challenge","value":"CHALLENGE"},{"name":"ExcludedAsCount","value":"EXCLUDED_AS_COUNT"}]},"aws-native:wafv2:LoggingConfigurationConditionLabelNameConditionProperties":{"description":"A single label name condition.","properties":{"labelName":{"type":"string","description":"The label name that a log record must contain in order to meet the condition. This must be a fully qualified label name. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. "}},"type":"object","required":["labelName"]},"aws-native:wafv2:LoggingConfigurationFieldToMatch":{"description":"A key-value pair to associate with a resource.","properties":{"method":{"$ref":"pulumi.json#/Any","description":"Inspect the HTTP method. The method indicates the type of operation that the request is asking the origin to perform. "},"queryString":{"$ref":"pulumi.json#/Any","description":"Inspect the query string. This is the part of a URL that appears after a ? character, if any. "},"singleHeader":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFieldToMatchSingleHeaderProperties","description":"Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive."},"uriPath":{"$ref":"pulumi.json#/Any","description":"Inspect the request URI path. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg. "}},"type":"object"},"aws-native:wafv2:LoggingConfigurationFieldToMatchSingleHeaderProperties":{"description":"Inspect a single header. Provide the name of the header to inspect, for example, User-Agent or Referer. This setting isn't case sensitive.","properties":{"name":{"type":"string","description":"The name of the query header to inspect."}},"type":"object","required":["name"]},"aws-native:wafv2:LoggingConfigurationFilter":{"properties":{"behavior":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFilterBehavior","description":"How to handle logs that satisfy the filter's conditions and requirement. "},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationCondition"},"description":"Match conditions for the filter."},"requirement":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFilterRequirement","description":"Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition."}},"type":"object","required":["behavior","conditions","requirement"]},"aws-native:wafv2:LoggingConfigurationFilterBehavior":{"description":"How to handle logs that satisfy the filter's conditions and requirement. ","type":"string","enum":[{"name":"Keep","value":"KEEP"},{"name":"Drop","value":"DROP"}]},"aws-native:wafv2:LoggingConfigurationFilterRequirement":{"description":"Logic to apply to the filtering conditions. You can specify that, in order to satisfy the filter, a log must match all conditions or must match at least one condition.","type":"string","enum":[{"name":"MeetsAll","value":"MEETS_ALL"},{"name":"MeetsAny","value":"MEETS_ANY"}]},"aws-native:wafv2:LoggingConfigurationLoggingFilterPropertiesDefaultBehavior":{"description":"Default handling for logs that don't match any of the specified filtering conditions.","type":"string","enum":[{"name":"Keep","value":"KEEP"},{"name":"Drop","value":"DROP"}]},"aws-native:wafv2:LoggingFilterProperties":{"description":"Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation.","properties":{"defaultBehavior":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationLoggingFilterPropertiesDefaultBehavior","description":"Default handling for logs that don't match any of the specified filtering conditions."},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFilter"},"description":"The filters that you want to apply to the logs."}},"type":"object","required":["defaultBehavior","filters"]},"aws-native:wafv2:RegexPatternSetScope":{"description":"Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.","type":"string","enum":[{"name":"Cloudfront","value":"CLOUDFRONT"},{"name":"Regional","value":"REGIONAL"}]},"aws-native:wafv2:RegexPatternSetTag":{"properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object"},"aws-native:wafv2:RuleGroupAllowAction":{"description":"Allow traffic towards application.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomRequestHandling","description":"Defines custom handling for the web request.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:RuleGroupAndStatement":{"properties":{"statements":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupStatement"},"description":"The statements to combine with AND logic. You can use any statements that can be nested."}},"type":"object","required":["statements"]},"aws-native:wafv2:RuleGroupAsnMatchStatement":{"properties":{"asnList":{"type":"array","items":{"type":"integer"},"description":"Contains one or more Autonomous System Numbers (ASNs). ASNs are unique identifiers assigned to large internet networks managed by organizations such as internet service providers, enterprises, universities, or government agencies."},"forwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupForwardedIpConfiguration","description":"The configuration for inspecting IP addresses to match against an ASN in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name."}},"type":"object"},"aws-native:wafv2:RuleGroupBlockAction":{"description":"Block traffic towards application.","properties":{"customResponse":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomResponse","description":"Defines a custom response for the web request.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:RuleGroupBody":{"description":"The body of a web request. This immediately follows the request headers.","properties":{"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupOversizeHandling","description":"What AWS WAF should do if the body is larger than AWS WAF can inspect.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nYou can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.\n\nDefault: `CONTINUE`"}},"type":"object"},"aws-native:wafv2:RuleGroupBodyParsingFallbackBehavior":{"description":"The inspection behavior to fall back to if the JSON in the request body is invalid.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"},{"name":"EvaluateAsString","value":"EVALUATE_AS_STRING"}]},"aws-native:wafv2:RuleGroupByteMatchStatement":{"description":"Byte Match statement.","properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"positionalConstraint":{"$ref":"#/types/aws-native:wafv2:RuleGroupPositionalConstraint","description":"The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:\n\n*CONTAINS*\n\nThe specified part of the web request must include the value of `SearchString` , but the location doesn't matter.\n\n*CONTAINS_WORD*\n\nThe specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:\n\n- `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` .\n- `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .\n\n*EXACTLY*\n\nThe value of the specified part of the web request must exactly match the value of `SearchString` .\n\n*STARTS_WITH*\n\nThe value of `SearchString` must appear at the beginning of the specified part of the web request.\n\n*ENDS_WITH*\n\nThe value of `SearchString` must appear at the end of the specified part of the web request."},"searchString":{"type":"string","description":"A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.\n\nDon't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.\n\nFor example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .\n\nYou must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` ."},"searchStringBase64":{"type":"string","description":"String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.\n\nYou must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` ."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","positionalConstraint","textTransformations"]},"aws-native:wafv2:RuleGroupCaptchaAction":{"description":"Checks valid token exists with request.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomRequestHandling","description":"Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:RuleGroupCaptchaConfig":{"properties":{"immunityTimeProperty":{"$ref":"#/types/aws-native:wafv2:RuleGroupImmunityTimeProperty","description":"Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle."}},"type":"object"},"aws-native:wafv2:RuleGroupChallengeAction":{"description":"Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomRequestHandling","description":"Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:RuleGroupChallengeConfig":{"properties":{"immunityTimeProperty":{"$ref":"#/types/aws-native:wafv2:RuleGroupImmunityTimeProperty","description":"Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge."}},"type":"object"},"aws-native:wafv2:RuleGroupCookieMatchPattern":{"description":"The pattern to look for in the request cookies.","properties":{"all":{"$ref":"pulumi.json#/Any","description":"Inspect all parts of the web request cookies."},"excludedCookies":{"type":"array","items":{"type":"string"},"description":"Inspect only the cookies whose keys don't match any of the strings specified here."},"includedCookies":{"type":"array","items":{"type":"string"},"description":"Inspect only the cookies that have a key that matches one of the strings specified here."}},"type":"object"},"aws-native:wafv2:RuleGroupCookies":{"description":"Includes cookies of a web request.","properties":{"matchPattern":{"$ref":"#/types/aws-native:wafv2:RuleGroupCookieMatchPattern","description":"The filter to use to identify the subset of cookies to inspect in a web request.\n\nYou must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .\n\nExample JSON: `\"MatchPattern\": { \"IncludedCookies\": [ \"session-id-time\", \"session-id\" ] }`"},"matchScope":{"$ref":"#/types/aws-native:wafv2:RuleGroupMapMatchScope","description":"The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.\n\n`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values."},"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupOversizeHandling","description":"What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["matchPattern","matchScope","oversizeHandling"]},"aws-native:wafv2:RuleGroupCountAction":{"description":"Count traffic towards application.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomRequestHandling","description":"Defines custom handling for the web request.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:RuleGroupCustomHttpHeader":{"description":"HTTP header.","properties":{"name":{"type":"string","description":"The name of the custom header.\n\nFor custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` ."},"value":{"type":"string","description":"The value of the custom header."}},"type":"object","required":["name","value"]},"aws-native:wafv2:RuleGroupCustomRequestHandling":{"description":"Custom request handling.","properties":{"insertHeaders":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomHttpHeader"},"description":"Collection of HTTP headers."}},"type":"object","required":["insertHeaders"]},"aws-native:wafv2:RuleGroupCustomResponse":{"description":"Custom response.","properties":{"customResponseBodyKey":{"type":"string","description":"Custom response body key."},"responseCode":{"type":"integer","description":"The HTTP status code to return to the client.\n\nFor a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* ."},"responseHeaders":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomHttpHeader"},"description":"Collection of HTTP headers."}},"type":"object","required":["responseCode"]},"aws-native:wafv2:RuleGroupCustomResponseBody":{"description":"Custom response body.","properties":{"content":{"type":"string","description":"The payload of the custom response.\n\nYou can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* ."},"contentType":{"$ref":"#/types/aws-native:wafv2:RuleGroupResponseContentType","description":"The type of content in the payload that you are defining in the `Content` string."}},"type":"object","required":["content","contentType"]},"aws-native:wafv2:RuleGroupFieldToMatch":{"description":"Field of the request to match.","properties":{"allQueryArguments":{"$ref":"pulumi.json#/Any","description":"All query arguments of a web request."},"body":{"$ref":"#/types/aws-native:wafv2:RuleGroupBody","description":"Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nFor information about how to handle oversized request bodies, see the `Body` object configuration."},"cookies":{"$ref":"#/types/aws-native:wafv2:RuleGroupCookies","description":"Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.\n\nOnly the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service."},"headerOrder":{"$ref":"#/types/aws-native:wafv2:RuleGroupHeaderOrder"},"headers":{"$ref":"#/types/aws-native:wafv2:RuleGroupHeaders","description":"Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.\n\nOnly the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service."},"ja3Fingerprint":{"$ref":"#/types/aws-native:wafv2:RuleGroupJa3Fingerprint","description":"Available for use with Amazon CloudFront distributions and Application Load Balancers. Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.\n\n\u003e You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` . \n\nYou can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .\n\nProvide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration."},"ja4Fingerprint":{"$ref":"#/types/aws-native:wafv2:RuleGroupJa4Fingerprint","description":"Available for use with Amazon CloudFront distributions and Application Load Balancers. Match against the request's JA4 fingerprint. The JA4 fingerprint is a 36-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.\n\n\u003e You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` . \n\nYou can obtain the JA4 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .\n\nProvide the JA4 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration."},"jsonBody":{"$ref":"#/types/aws-native:wafv2:RuleGroupJsonBody","description":"Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nFor information about how to handle oversized request bodies, see the `JsonBody` object configuration."},"method":{"$ref":"pulumi.json#/Any","description":"The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform."},"queryString":{"$ref":"pulumi.json#/Any","description":"The query string of a web request. This is the part of a URL that appears after a ? character, if any."},"singleHeader":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatchSingleHeaderProperties","description":"Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.\n\nExample JSON: `\"SingleHeader\": { \"Name\": \"haystack\" }`\n\nAlternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting."},"singleQueryArgument":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatchSingleQueryArgumentProperties","description":"One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive."},"uriFragment":{"$ref":"#/types/aws-native:wafv2:RuleGroupUriFragment","description":"Inspect fragments of the request URI. You must configure scope and pattern matching filters in the `UriFragment` object, to define the fragment of a URI that AWS WAF inspects.\n\nOnly the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the `UriFragment` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service."},"uriPath":{"$ref":"pulumi.json#/Any","description":"The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg."}},"type":"object"},"aws-native:wafv2:RuleGroupFieldToMatchSingleHeaderProperties":{"description":"Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.\n\nExample JSON: `\"SingleHeader\": { \"Name\": \"haystack\" }`\n\nAlternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.","properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:wafv2:RuleGroupFieldToMatchSingleQueryArgumentProperties":{"description":"One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.","properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:wafv2:RuleGroupForwardedIpConfiguration":{"properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupForwardedIpConfigurationFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."},"headerName":{"type":"string","description":"The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."}},"type":"object","required":["fallbackBehavior","headerName"]},"aws-native:wafv2:RuleGroupForwardedIpConfigurationFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupGeoMatchStatement":{"properties":{"countryCodes":{"type":"array","items":{"type":"string"},"description":"An array of two-character country codes that you want to match against, for example, `[ \"US\", \"CN\" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.\n\nWhen you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site."},"forwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupForwardedIpConfiguration","description":"The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."}},"type":"object"},"aws-native:wafv2:RuleGroupHeaderMatchPattern":{"description":"The pattern to look for in the request headers.","properties":{"all":{"$ref":"pulumi.json#/Any","description":"Inspect all parts of the web request headers."},"excludedHeaders":{"type":"array","items":{"type":"string"},"description":"Inspect only the headers whose keys don't match any of the strings specified here."},"includedHeaders":{"type":"array","items":{"type":"string"},"description":"Inspect only the headers that have a key that matches one of the strings specified here."}},"type":"object"},"aws-native:wafv2:RuleGroupHeaderOrder":{"description":"The string containing the list of a web request's header names, ordered as they appear in the web request, separated by colons.","properties":{"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupOversizeHandling"}},"type":"object","required":["oversizeHandling"]},"aws-native:wafv2:RuleGroupHeaders":{"description":"Includes headers of a web request.","properties":{"matchPattern":{"$ref":"#/types/aws-native:wafv2:RuleGroupHeaderMatchPattern","description":"The filter to use to identify the subset of headers to inspect in a web request.\n\nYou must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .\n\nExample JSON: `\"MatchPattern\": { \"ExcludedHeaders\": [ \"KeyToExclude1\", \"KeyToExclude2\" ] }`"},"matchScope":{"$ref":"#/types/aws-native:wafv2:RuleGroupMapMatchScope","description":"The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.\n\n`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values."},"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupOversizeHandling","description":"What AWS WAF should do if the headers determined by your match scope are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["matchPattern","matchScope","oversizeHandling"]},"aws-native:wafv2:RuleGroupImmunityTimeProperty":{"properties":{"immunityTime":{"type":"integer","description":"The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.\n\nFor the Challenge action, the minimum setting is 300."}},"type":"object","required":["immunityTime"]},"aws-native:wafv2:RuleGroupIpSetForwardedIpConfiguration":{"properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupIpSetForwardedIpConfigurationFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."},"headerName":{"type":"string","description":"The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."},"position":{"$ref":"#/types/aws-native:wafv2:RuleGroupIpSetForwardedIpConfigurationPosition","description":"The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.\n\nThe options for this setting are the following:\n\n- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.\n- LAST - Inspect the last IP address in the list of IP addresses in the header.\n- ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10."}},"type":"object","required":["fallbackBehavior","headerName","position"]},"aws-native:wafv2:RuleGroupIpSetForwardedIpConfigurationFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupIpSetForwardedIpConfigurationPosition":{"description":"The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.\n\nThe options for this setting are the following:\n\n- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.\n- LAST - Inspect the last IP address in the list of IP addresses in the header.\n- ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.","type":"string","enum":[{"name":"First","value":"FIRST"},{"name":"Last","value":"LAST"},{"name":"Any","value":"ANY"}]},"aws-native:wafv2:RuleGroupIpSetReferenceStatement":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the `IPSet` that this statement references."},"ipSetForwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupIpSetForwardedIpConfiguration","description":"The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."}},"type":"object","required":["arn"]},"aws-native:wafv2:RuleGroupJa3Fingerprint":{"description":"Includes the JA3 fingerprint of a web request.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupJa3FingerprintFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:RuleGroupJa3FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupJa4Fingerprint":{"description":"Includes the JA4 fingerprint of a web request.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupJa4FingerprintFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:RuleGroupJa4FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupJsonBody":{"description":"Inspect the request body as JSON. The request body immediately follows the request headers.","properties":{"invalidFallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupBodyParsingFallbackBehavior","description":"What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:\n\n- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nIf you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.\n\n\u003e AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* ."},"matchPattern":{"$ref":"#/types/aws-native:wafv2:RuleGroupJsonMatchPattern","description":"The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria."},"matchScope":{"$ref":"#/types/aws-native:wafv2:RuleGroupJsonMatchScope","description":"The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.\n\n`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values."},"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:RuleGroupOversizeHandling","description":"What AWS WAF should do if the body is larger than AWS WAF can inspect.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nYou can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.\n\nDefault: `CONTINUE`"}},"type":"object","required":["matchPattern","matchScope"]},"aws-native:wafv2:RuleGroupJsonMatchPattern":{"description":"The pattern to look for in the JSON body.","properties":{"all":{"$ref":"pulumi.json#/Any","description":"Inspect all parts of the web request's JSON body."},"includedPaths":{"type":"array","items":{"type":"string"},"description":"Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.\n\nProvide the include paths using JSON Pointer syntax. For example, `\"IncludedPaths\": [\"/dogs/0/name\", \"/dogs/1/name\"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nYou must specify either this setting or the `All` setting, but not both.\n\n\u003e Don't use this option to include all paths. Instead, use the `All` setting."}},"type":"object"},"aws-native:wafv2:RuleGroupJsonMatchScope":{"description":"The parts of the JSON to match against using the MatchPattern.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Key","value":"KEY"},{"name":"Value","value":"VALUE"}]},"aws-native:wafv2:RuleGroupLabel":{"properties":{"name":{"type":"string","description":"The label string."}},"type":"object","required":["name"]},"aws-native:wafv2:RuleGroupLabelMatchScope":{"type":"string","enum":[{"name":"Label","value":"LABEL"},{"name":"Namespace","value":"NAMESPACE"}]},"aws-native:wafv2:RuleGroupLabelMatchStatement":{"properties":{"key":{"type":"string","description":"The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:\n\n- If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name.\n- If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.\n\nLabels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` ."},"scope":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelMatchScope","description":"Specify whether you want to match using the label name or just the namespace."}},"type":"object","required":["key","scope"]},"aws-native:wafv2:RuleGroupLabelSummary":{"properties":{"name":{"type":"string","description":"An individual label specification."}},"type":"object"},"aws-native:wafv2:RuleGroupMapMatchScope":{"description":"The parts of the request to match against using the MatchPattern.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Key","value":"KEY"},{"name":"Value","value":"VALUE"}]},"aws-native:wafv2:RuleGroupNotStatement":{"properties":{"statement":{"$ref":"#/types/aws-native:wafv2:RuleGroupStatement","description":"The statement to negate. You can use any statement that can be nested."}},"type":"object","required":["statement"]},"aws-native:wafv2:RuleGroupOrStatement":{"properties":{"statements":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupStatement"},"description":"The statements to combine with OR logic. You can use any statements that can be nested."}},"type":"object","required":["statements"]},"aws-native:wafv2:RuleGroupOversizeHandling":{"description":"Handling of requests containing oversize fields","type":"string","enum":[{"name":"Continue","value":"CONTINUE"},{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupPositionalConstraint":{"description":"Position of the evaluation in the FieldToMatch of request.","type":"string","enum":[{"name":"Exactly","value":"EXACTLY"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"},{"name":"Contains","value":"CONTAINS"},{"name":"ContainsWord","value":"CONTAINS_WORD"}]},"aws-native:wafv2:RuleGroupRateBasedStatement":{"properties":{"aggregateKeyType":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateBasedStatementAggregateKeyType","description":"Setting that indicates how to aggregate the request counts.\n\n\u003e Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling. \n\n- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.\n\nWith this option, you must configure the `ScopeDownStatement` property.\n- `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.\n\nWith this option, you must specify the aggregate keys in the `CustomKeys` property.\n\nTo aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .\n- `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.\n\nWith this option, you must specify the header to use in the `ForwardedIPConfig` property.\n\nTo aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .\n- `IP` - Aggregate the request counts on the IP address from the web request origin.\n\nTo aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` ."},"customKeys":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateBasedStatementCustomKey"},"description":"Specifies the aggregate keys to use in a rate-base rule."},"evaluationWindowSec":{"type":"integer","description":"The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.\n\nThis setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.\n\nDefault: `300` (5 minutes)"},"forwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupForwardedIpConfiguration","description":"The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nThis is required if you specify a forwarded IP in the rule's aggregate key settings."},"limit":{"type":"integer","description":"The limit on requests during the specified evaluation window for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.\n\nExamples:\n\n- If you aggregate on just the IP address, this is the limit on requests from any single IP address.\n- If you aggregate on the HTTP method and the query argument name \"city\", then this is the limit on requests for any single method, city pair."},"scopeDownStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupStatement","description":"An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement."}},"type":"object","required":["aggregateKeyType","limit"]},"aws-native:wafv2:RuleGroupRateBasedStatementAggregateKeyType":{"description":"Setting that indicates how to aggregate the request counts.\n\n\u003e Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling. \n\n- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.\n\nWith this option, you must configure the `ScopeDownStatement` property.\n- `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.\n\nWith this option, you must specify the aggregate keys in the `CustomKeys` property.\n\nTo aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .\n- `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.\n\nWith this option, you must specify the header to use in the `ForwardedIPConfig` property.\n\nTo aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .\n- `IP` - Aggregate the request counts on the IP address from the web request origin.\n\nTo aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .","type":"string","enum":[{"name":"Ip","value":"IP"},{"name":"ForwardedIp","value":"FORWARDED_IP"},{"name":"Constant","value":"CONSTANT"},{"name":"CustomKeys","value":"CUSTOM_KEYS"}]},"aws-native:wafv2:RuleGroupRateBasedStatementCustomKey":{"description":"Specifies a single custom aggregate key for a rate-base rule.","properties":{"asn":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitAsn","description":"Use an Autonomous System Number (ASN) derived from the request's originating or forwarded IP address as an aggregate key. Each distinct ASN contributes to the aggregation instance."},"cookie":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitCookie","description":"Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance."},"forwardedIp":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitForwardedIp","description":"Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.\n\nWhen you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .\n\nWith this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property."},"header":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitHeader","description":"Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance."},"httpMethod":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitHttpMethod","description":"Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance."},"ip":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitIp","description":"Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.\n\nWhen you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` ."},"ja3Fingerprint":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitJa3Fingerprint","description":"Use the request's JA3 fingerprint as an aggregate key. If you use a single JA3 fingerprint as your custom key, then each value fully defines an aggregation instance."},"ja4Fingerprint":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitJa4Fingerprint","description":"Use the request's JA4 fingerprint as an aggregate key. If you use a single JA4 fingerprint as your custom key, then each value fully defines an aggregation instance."},"labelNamespace":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitLabelNamespace","description":"Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.\n\nThis uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.\n\nFor information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* ."},"queryArgument":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitQueryArgument","description":"Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance."},"queryString":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitQueryString","description":"Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance."},"uriPath":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitUriPath","description":"Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance."}},"type":"object"},"aws-native:wafv2:RuleGroupRateLimitAsn":{"description":"Specifies the request's ASN as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:RuleGroupRateLimitCookie":{"description":"Specifies a cookie as an aggregate key for a rate-based rule.","properties":{"name":{"type":"string","description":"The name of the cookie to use."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["name","textTransformations"]},"aws-native:wafv2:RuleGroupRateLimitForwardedIp":{"description":"Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:RuleGroupRateLimitHeader":{"description":"Specifies a header as an aggregate key for a rate-based rule.","properties":{"name":{"type":"string","description":"The name of the header to use."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["name","textTransformations"]},"aws-native:wafv2:RuleGroupRateLimitHttpMethod":{"description":"Specifies the request's HTTP method as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:RuleGroupRateLimitIp":{"description":"Specifies the IP address in the web request as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:RuleGroupRateLimitJa3Fingerprint":{"description":"Specifies the request's JA3 fingerprint as an aggregate key for a rate-based rule.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitJa3FingerprintFallbackBehavior","description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:RuleGroupRateLimitJa3FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupRateLimitJa4Fingerprint":{"description":"Specifies the request's JA4 fingerprint as an aggregate key for a rate-based rule.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateLimitJa4FingerprintFallbackBehavior","description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:RuleGroupRateLimitJa4FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupRateLimitLabelNamespace":{"description":"Specifies a label namespace to use as an aggregate key for a rate-based rule.","properties":{"namespace":{"type":"string","description":"The namespace to use for aggregation."}},"type":"object","required":["namespace"]},"aws-native:wafv2:RuleGroupRateLimitQueryArgument":{"description":"Specifies a query argument in the request as an aggregate key for a rate-based rule.","properties":{"name":{"type":"string","description":"The name of the query argument to use."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["name","textTransformations"]},"aws-native:wafv2:RuleGroupRateLimitQueryString":{"description":"Specifies the request's query string as an aggregate key for a rate-based rule.","properties":{"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["textTransformations"]},"aws-native:wafv2:RuleGroupRateLimitUriPath":{"description":"Specifies the request's URI Path as an aggregate key for a rate-based rule.","properties":{"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["textTransformations"]},"aws-native:wafv2:RuleGroupRegexMatchStatement":{"properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"regexString":{"type":"string","description":"The string representing the regular expression."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","regexString","textTransformations"]},"aws-native:wafv2:RuleGroupRegexPatternSetReferenceStatement":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references."},"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["arn","fieldToMatch","textTransformations"]},"aws-native:wafv2:RuleGroupResponseContentType":{"description":"Valid values are TEXT_PLAIN, TEXT_HTML, and APPLICATION_JSON.","type":"string","enum":[{"name":"TextPlain","value":"TEXT_PLAIN"},{"name":"TextHtml","value":"TEXT_HTML"},{"name":"ApplicationJson","value":"APPLICATION_JSON"}]},"aws-native:wafv2:RuleGroupRule":{"description":"Rule of RuleGroup that contains condition and action.","properties":{"action":{"$ref":"#/types/aws-native:wafv2:RuleGroupRuleAction","description":"The action that AWS WAF should take on a web request when it matches the rule statement. Settings at the web ACL level can override the rule action setting."},"captchaConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupCaptchaConfig","description":"Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL."},"challengeConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupChallengeConfig","description":"Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL."},"name":{"type":"string","description":"The name of the rule.\n\nIf you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name."},"priority":{"type":"integer","description":"If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different."},"ruleLabels":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabel"},"description":"Collection of Rule Labels."},"statement":{"$ref":"#/types/aws-native:wafv2:RuleGroupStatement","description":"The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` ."},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection.\n\nIf you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name."}},"type":"object","required":["name","priority","statement","visibilityConfig"]},"aws-native:wafv2:RuleGroupRuleAction":{"description":"Action taken when Rule matches its condition.","properties":{"allow":{"$ref":"#/types/aws-native:wafv2:RuleGroupAllowAction","description":"Instructs AWS WAF to allow the web request."},"block":{"$ref":"#/types/aws-native:wafv2:RuleGroupBlockAction","description":"Instructs AWS WAF to block the web request."},"captcha":{"$ref":"#/types/aws-native:wafv2:RuleGroupCaptchaAction","description":"Specifies that AWS WAF should run a `CAPTCHA` check against the request:\n\n- If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` .\n- If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.\n\nAWS WAF generates a response that it sends back to the client, which includes the following:\n\n- The header `x-amzn-waf-action` with a value of `captcha` .\n- The HTTP status code `405 Method Not Allowed` .\n- If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.\n\nYou can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.\n\nThis action option is available for rules. It isn't available for web ACL default actions."},"challenge":{"$ref":"#/types/aws-native:wafv2:RuleGroupChallengeAction","description":"Instructs AWS WAF to run a `Challenge` check against the web request."},"count":{"$ref":"#/types/aws-native:wafv2:RuleGroupCountAction","description":"Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL."}},"type":"object"},"aws-native:wafv2:RuleGroupScope":{"description":"Use CLOUDFRONT for CloudFront RuleGroup, use REGIONAL for Application Load Balancer and API Gateway.","type":"string","enum":[{"name":"Cloudfront","value":"CLOUDFRONT"},{"name":"Regional","value":"REGIONAL"}]},"aws-native:wafv2:RuleGroupSensitivityLevel":{"description":"Sensitivity Level current only used for sqli match statements.","type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"High","value":"HIGH"}]},"aws-native:wafv2:RuleGroupSizeConstraintStatement":{"description":"Size Constraint statement.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:wafv2:RuleGroupSizeConstraintStatementComparisonOperator","description":"The operator to use to compare the request part to the size setting."},"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"size":{"type":"number","description":"The size, in byte, to compare to the request part, after any transformations."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["comparisonOperator","fieldToMatch","size","textTransformations"]},"aws-native:wafv2:RuleGroupSizeConstraintStatementComparisonOperator":{"description":"The operator to use to compare the request part to the size setting.","type":"string","enum":[{"name":"Eq","value":"EQ"},{"name":"Ne","value":"NE"},{"name":"Le","value":"LE"},{"name":"Lt","value":"LT"},{"name":"Ge","value":"GE"},{"name":"Gt","value":"GT"}]},"aws-native:wafv2:RuleGroupSqliMatchStatement":{"description":"Sqli Match Statement.","properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"sensitivityLevel":{"$ref":"#/types/aws-native:wafv2:RuleGroupSensitivityLevel","description":"The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.\n\n`HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .\n\n`LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.\n\nDefault: `LOW`"},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","textTransformations"]},"aws-native:wafv2:RuleGroupStatement":{"description":"First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc","properties":{"andStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupAndStatement","description":"A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` ."},"asnMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupAsnMatchStatement","description":"A rule statement that inspects web traffic based on the Autonomous System Number (ASN) associated with the request's IP address.\n\nFor additional details, see [ASN match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) ."},"byteMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupByteMatchStatement","description":"A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement."},"geoMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupGeoMatchStatement","description":"A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.\n\n- To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array.\n- Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.\n\nAWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .\n\nIf you use the web request origin, the label formats are `awswaf:clientip:geo:region:\u003cISO country code\u003e-\u003cISO region code\u003e` and `awswaf:clientip:geo:country:\u003cISO country code\u003e` .\n\nIf you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:\u003cISO country code\u003e-\u003cISO region code\u003e` and `awswaf:forwardedip:geo:country:\u003cISO country code\u003e` .\n\nFor additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) ."},"ipSetReferenceStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupIpSetReferenceStatement","description":"A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.\n\nEach IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it."},"labelMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelMatchStatement","description":"A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.\n\nThe label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement."},"notStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupNotStatement","description":"A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` ."},"orStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupOrStatement","description":"A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` ."},"rateBasedStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupRateBasedStatement","description":"A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.\n\n\u003e If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute. \n\nYou can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.\n\nEach unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.\n\nFor example, assume the rule evaluates web requests with the following IP address and HTTP method values:\n\n- IP address 10.1.1.1, HTTP method POST\n- IP address 10.1.1.1, HTTP method GET\n- IP address 127.0.0.0, HTTP method POST\n- IP address 10.1.1.1, HTTP method GET\n\nThe rule would create different aggregation instances according to your aggregation criteria, for example:\n\n- If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:\n\n- IP address 10.1.1.1: count 3\n- IP address 127.0.0.0: count 1\n- If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:\n\n- HTTP method POST: count 2\n- HTTP method GET: count 2\n- If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:\n\n- IP address 10.1.1.1, HTTP method POST: count 1\n- IP address 10.1.1.1, HTTP method GET: count 2\n- IP address 127.0.0.0, HTTP method POST: count 1\n\nFor any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.\n\nYou can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.\n\nYou cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.\n\nFor additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .\n\nIf you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.\n\nAWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF ."},"regexMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupRegexMatchStatement","description":"A rule statement used to search web request components for a match against a single regular expression."},"regexPatternSetReferenceStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupRegexPatternSetReferenceStatement","description":"A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.\n\nEach regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it."},"sizeConstraintStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupSizeConstraintStatement","description":"A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (\u003e) or less than (\u003c). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.\n\nIf you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.\n\nIf you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long."},"sqliMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupSqliMatchStatement","description":"A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it."},"xssMatchStatement":{"$ref":"#/types/aws-native:wafv2:RuleGroupXssMatchStatement","description":"A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers."}},"type":"object"},"aws-native:wafv2:RuleGroupTag":{"properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object"},"aws-native:wafv2:RuleGroupTextTransformation":{"description":"Text Transformation on the Search String before match.","properties":{"priority":{"type":"integer","description":"Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different."},"type":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformationType","description":"For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* ."}},"type":"object","required":["priority","type"]},"aws-native:wafv2:RuleGroupTextTransformationType":{"description":"Type of text transformation.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"CompressWhiteSpace","value":"COMPRESS_WHITE_SPACE"},{"name":"HtmlEntityDecode","value":"HTML_ENTITY_DECODE"},{"name":"Lowercase","value":"LOWERCASE"},{"name":"CmdLine","value":"CMD_LINE"},{"name":"UrlDecode","value":"URL_DECODE"},{"name":"Base64Decode","value":"BASE64_DECODE"},{"name":"HexDecode","value":"HEX_DECODE"},{"name":"Md5","value":"MD5"},{"name":"ReplaceComments","value":"REPLACE_COMMENTS"},{"name":"EscapeSeqDecode","value":"ESCAPE_SEQ_DECODE"},{"name":"SqlHexDecode","value":"SQL_HEX_DECODE"},{"name":"CssDecode","value":"CSS_DECODE"},{"name":"JsDecode","value":"JS_DECODE"},{"name":"NormalizePath","value":"NORMALIZE_PATH"},{"name":"NormalizePathWin","value":"NORMALIZE_PATH_WIN"},{"name":"RemoveNulls","value":"REMOVE_NULLS"},{"name":"ReplaceNulls","value":"REPLACE_NULLS"},{"name":"Base64DecodeExt","value":"BASE64_DECODE_EXT"},{"name":"UrlDecodeUni","value":"URL_DECODE_UNI"},{"name":"Utf8ToUnicode","value":"UTF8_TO_UNICODE"}]},"aws-native:wafv2:RuleGroupUriFragment":{"description":"The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:RuleGroupUriFragmentFallbackBehavior","description":"What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:\n\n- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nIf you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.\n\nExample JSON: `{ \"UriFragment\": { \"FallbackBehavior\": \"MATCH\"} }`\n\n\u003e AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:RuleGroupUriFragmentFallbackBehavior":{"description":"What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:\n\n- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nIf you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.\n\nExample JSON: `{ \"UriFragment\": { \"FallbackBehavior\": \"MATCH\"} }`\n\n\u003e AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* .","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:RuleGroupVisibilityConfig":{"description":"Visibility Metric of the RuleGroup.","properties":{"cloudWatchMetricsEnabled":{"type":"boolean","description":"Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .\n\nFor web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,\nsee [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* ."},"metricName":{"type":"string","description":"A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` ."},"sampledRequestsEnabled":{"type":"boolean","description":"Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.\n\nIf you configure data protection for the web ACL, the protection applies to the web ACL's sampled web request data.\n\n\u003e Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL."}},"type":"object","required":["cloudWatchMetricsEnabled","metricName","sampledRequestsEnabled"]},"aws-native:wafv2:RuleGroupXssMatchStatement":{"description":"Xss Match Statement.","properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:RuleGroupFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","textTransformations"]},"aws-native:wafv2:WebAclAllowAction":{"description":"Allow traffic towards application.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:WebAclCustomRequestHandling","description":"Defines custom handling for the web request.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:WebAclAndStatement":{"properties":{"statements":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclStatement"},"description":"The statements to combine with AND logic. You can use any statements that can be nested."}},"type":"object","required":["statements"]},"aws-native:wafv2:WebAclApplicationAttribute":{"description":"Application details defined during the \u0026webacl; creation process. Application attributes help WAF; give recommendations for protection packs.","properties":{"name":{"type":"string"},"values":{"type":"array","items":{"type":"string"}}},"type":"object","required":["name","values"]},"aws-native:wafv2:WebAclApplicationConfig":{"description":"Configures the ability for the WAF; console to store and retrieve application attributes during the webacl; creation process. Application attributes help WAF; give recommendations for protection packs.","properties":{"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclApplicationAttribute"},"description":"Contains the attribute name and a list of values for that attribute."}},"type":"object","required":["attributes"]},"aws-native:wafv2:WebAclAsnMatchStatement":{"properties":{"asnList":{"type":"array","items":{"type":"integer"},"description":"Contains one or more Autonomous System Numbers (ASNs). ASNs are unique identifiers assigned to large internet networks managed by organizations such as internet service providers, enterprises, universities, or government agencies."},"forwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:WebAclForwardedIpConfiguration","description":"The configuration for inspecting IP addresses to match against an ASN in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name."}},"type":"object"},"aws-native:wafv2:WebAclAssociationConfig":{"description":"AssociationConfig for body inspection","properties":{"requestBody":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:wafv2:WebAclRequestBodyAssociatedResourceTypeConfig"},"description":"Customizes the maximum size of the request body that your protected CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access resources forward to AWS WAF for inspection. The default size is 16 KB (16,384 bytes). You can change the setting for any of the available resource types.\n\n\u003e You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) . \n\nExample JSON: `{ \"API_GATEWAY\": \"KB_48\", \"APP_RUNNER_SERVICE\": \"KB_32\" }`\n\nFor Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes)."}},"type":"object"},"aws-native:wafv2:WebAclAwsManagedRulesAcfpRuleSet":{"description":"Configures how to use the Account creation fraud prevention managed rule group in the web ACL","properties":{"creationPath":{"type":"string","description":"The path of the account creation endpoint for your application. This is the page on your website that accepts the completed registration form for a new user. This page must accept `POST` requests.\n\nFor example, for the URL `https://example.com/web/newaccount` , you would provide the path `/web/newaccount` . Account creation page paths that start with the path that you provide are considered a match. For example `/web/newaccount` matches the account creation paths `/web/newaccount` , `/web/newaccount/` , `/web/newaccountPage` , and `/web/newaccount/thisPage` , but doesn't match the path `/home/web/newaccount` or `/website/newaccount` ."},"enableRegexInPath":{"type":"boolean","description":"Allow the use of regular expressions in the registration page path and the account creation path."},"registrationPagePath":{"type":"string","description":"The path of the account registration endpoint for your application. This is the page on your website that presents the registration form to new users.\n\n\u003e This page must accept `GET` text/html requests. \n\nFor example, for the URL `https://example.com/web/registration` , you would provide the path `/web/registration` . Registration page paths that start with the path that you provide are considered a match. For example `/web/registration` matches the registration paths `/web/registration` , `/web/registration/` , `/web/registrationPage` , and `/web/registration/thisPage` , but doesn't match the path `/home/web/registration` or `/website/registration` ."},"requestInspection":{"$ref":"#/types/aws-native:wafv2:WebAclRequestInspectionAcfp","description":"The criteria for inspecting account creation requests, used by the ACFP rule group to validate and track account creation attempts."},"responseInspection":{"$ref":"#/types/aws-native:wafv2:WebAclResponseInspection","description":"The criteria for inspecting responses to account creation requests, used by the ACFP rule group to track account creation success rates.\n\n\u003e Response inspection is available only in web ACLs that protect Amazon CloudFront distributions. \n\nThe ACFP rule group evaluates the responses that your protected resources send back to client account creation attempts, keeping count of successful and failed attempts from each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many successful account creation attempts in a short amount of time."}},"type":"object","required":["creationPath","registrationPagePath","requestInspection"]},"aws-native:wafv2:WebAclAwsManagedRulesAntiDDoSRuleSet":{"description":"Configures how to use the AntiDDOS AWS managed rule group in the web ACL","properties":{"clientSideActionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclClientSideActionConfig","description":"Configures the request handling that's applied by the managed rule group rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` during a distributed denial of service (DDoS) attack."},"sensitivityToBlock":{"$ref":"#/types/aws-native:wafv2:WebAclSensitivityToAct","description":"The sensitivity that the rule group rule `DDoSRequests` uses when matching against the DDoS suspicion labeling on a request. The managed rule group adds the labeling during DDoS events, before the `DDoSRequests` rule runs.\n\nThe higher the sensitivity, the more levels of labeling that the rule matches:\n\n- Low sensitivity is less sensitive, causing the rule to match only on the most likely participants in an attack, which are the requests with the high suspicion label `awswaf:managed:aws:anti-ddos:high-suspicion-ddos-request` .\n- Medium sensitivity causes the rule to match on the medium and high suspicion labels.\n- High sensitivity causes the rule to match on all of the suspicion labels: low, medium, and high.\n\nDefault: `LOW`"}},"type":"object","required":["clientSideActionConfig"]},"aws-native:wafv2:WebAclAwsManagedRulesAtpRuleSet":{"description":"Configures how to use the Account Takeover Prevention managed rule group in the web ACL","properties":{"enableRegexInPath":{"type":"boolean","description":"Allow the use of regular expressions in the login page path."},"loginPath":{"type":"string","description":"The path of the login endpoint for your application. For example, for the URL `https://example.com/web/login` , you would provide the path `/web/login` . Login paths that start with the path that you provide are considered a match. For example `/web/login` matches the login paths `/web/login` , `/web/login/` , `/web/loginPage` , and `/web/login/thisPage` , but doesn't match the login path `/home/web/login` or `/website/login` .\n\nThe rule group inspects only HTTP `POST` requests to your specified login endpoint."},"requestInspection":{"$ref":"#/types/aws-native:wafv2:WebAclRequestInspection","description":"The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage."},"responseInspection":{"$ref":"#/types/aws-native:wafv2:WebAclResponseInspection","description":"The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates.\n\n\u003e Response inspection is available only in web ACLs that protect Amazon CloudFront distributions. \n\nThe ATP rule group evaluates the responses that your protected resources send back to client login attempts, keeping count of successful and failed attempts for each IP address and client session. Using this information, the rule group labels and mitigates requests from client sessions and IP addresses that have had too many failed login attempts in a short amount of time."}},"type":"object","required":["loginPath"]},"aws-native:wafv2:WebAclAwsManagedRulesBotControlRuleSet":{"description":"Configures how to use the Bot Control managed rule group in the web ACL","properties":{"enableMachineLearning":{"type":"boolean","description":"Applies only to the targeted inspection level.\n\nDetermines whether to use machine learning (ML) to analyze your web traffic for bot-related activity. Machine learning is required for the Bot Control rules `TGT_ML_CoordinatedActivityLow` and `TGT_ML_CoordinatedActivityMedium` , which\ninspect for anomalous behavior that might indicate distributed, coordinated bot activity.\n\nFor more information about this choice, see the listing for these rules in the table at [Bot Control rules listing](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html#aws-managed-rule-groups-bot-rules) in the *AWS WAF Developer Guide* .\n\nDefault: `TRUE`"},"inspectionLevel":{"$ref":"#/types/aws-native:wafv2:WebAclAwsManagedRulesBotControlRuleSetInspectionLevel","description":"The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* ."}},"type":"object","required":["inspectionLevel"]},"aws-native:wafv2:WebAclAwsManagedRulesBotControlRuleSetInspectionLevel":{"description":"The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) in the *AWS WAF Developer Guide* .","type":"string","enum":[{"name":"Common","value":"COMMON"},{"name":"Targeted","value":"TARGETED"}]},"aws-native:wafv2:WebAclBlockAction":{"description":"Block traffic towards application.","properties":{"customResponse":{"$ref":"#/types/aws-native:wafv2:WebAclCustomResponse","description":"Defines a custom response for the web request.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:WebAclBody":{"description":"The body of a web request. This immediately follows the request headers.","properties":{"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:WebAclOversizeHandling","description":"What AWS WAF should do if the body is larger than AWS WAF can inspect.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nYou can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.\n\nDefault: `CONTINUE`"}},"type":"object"},"aws-native:wafv2:WebAclBodyParsingFallbackBehavior":{"description":"The inspection behavior to fall back to if the JSON in the request body is invalid.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"},{"name":"EvaluateAsString","value":"EVALUATE_AS_STRING"}]},"aws-native:wafv2:WebAclByteMatchStatement":{"description":"Byte Match statement.","properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"positionalConstraint":{"$ref":"#/types/aws-native:wafv2:WebAclPositionalConstraint","description":"The area within the portion of the web request that you want AWS WAF to search for `SearchString` . Valid values include the following:\n\n*CONTAINS*\n\nThe specified part of the web request must include the value of `SearchString` , but the location doesn't matter.\n\n*CONTAINS_WORD*\n\nThe specified part of the web request must include the value of `SearchString` , and `SearchString` must contain only alphanumeric characters or underscore (A-Z, a-z, 0-9, or _). In addition, `SearchString` must be a word, which means that both of the following are true:\n\n- `SearchString` is at the beginning of the specified part of the web request or is preceded by a character other than an alphanumeric character or underscore (_). Examples include the value of a header and `;BadBot` .\n- `SearchString` is at the end of the specified part of the web request or is followed by a character other than an alphanumeric character or underscore (_), for example, `BadBot;` and `-BadBot;` .\n\n*EXACTLY*\n\nThe value of the specified part of the web request must exactly match the value of `SearchString` .\n\n*STARTS_WITH*\n\nThe value of `SearchString` must appear at the beginning of the specified part of the web request.\n\n*ENDS_WITH*\n\nThe value of `SearchString` must appear at the end of the specified part of the web request."},"searchString":{"type":"string","description":"A string value that you want AWS WAF to search for. AWS WAF searches only in the part of web requests that you designate for inspection in `FieldToMatch` . The maximum length of the value is 200 bytes. For alphabetic characters A-Z and a-z, the value is case sensitive.\n\nDon't encode this string. Provide the value that you want AWS WAF to search for. AWS CloudFormation automatically base64 encodes the value for you.\n\nFor example, suppose the value of `Type` is `HEADER` and the value of `Data` is `User-Agent` . If you want to search the `User-Agent` header for the value `BadBot` , you provide the string `BadBot` in the value of `SearchString` .\n\nYou must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` ."},"searchStringBase64":{"type":"string","description":"String to search for in a web request component, base64-encoded. If you don't want to encode the string, specify the unencoded value in `SearchString` instead.\n\nYou must specify either `SearchString` or `SearchStringBase64` in a `ByteMatchStatement` ."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","positionalConstraint","textTransformations"]},"aws-native:wafv2:WebAclCaptchaAction":{"description":"Checks valid token exists with request.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:WebAclCustomRequestHandling","description":"Defines custom handling for the web request, used when the `CAPTCHA` inspection determines that the request's token is valid and unexpired.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:WebAclCaptchaConfig":{"properties":{"immunityTimeProperty":{"$ref":"#/types/aws-native:wafv2:WebAclImmunityTimeProperty","description":"Determines how long a `CAPTCHA` timestamp in the token remains valid after the client successfully solves a `CAPTCHA` puzzle."}},"type":"object"},"aws-native:wafv2:WebAclChallengeAction":{"description":"Checks that the request has a valid token with an unexpired challenge timestamp and, if not, returns a browser challenge to the client.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:WebAclCustomRequestHandling","description":"Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the [AWS WAF developer guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) ."}},"type":"object"},"aws-native:wafv2:WebAclChallengeConfig":{"properties":{"immunityTimeProperty":{"$ref":"#/types/aws-native:wafv2:WebAclImmunityTimeProperty","description":"Determines how long a challenge timestamp in the token remains valid after the client successfully responds to a challenge."}},"type":"object"},"aws-native:wafv2:WebAclClientSideAction":{"description":"Client side action config for AntiDDOS AMR.","properties":{"exemptUriRegularExpressions":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclRegex"},"description":"The regular expression to match against the web request URI, used to identify requests that can't handle a silent browser challenge. When the `ClientSideAction` setting `UsageOfAction` is enabled, the managed rule group uses this setting to determine which requests to label with `awswaf:managed:aws:anti-ddos:challengeable-request` . If `UsageOfAction` is disabled, this setting has no effect and the managed rule group doesn't add the label to any requests.\n\nThe anti-DDoS managed rule group doesn't evaluate the rules `ChallengeDDoSRequests` or `ChallengeAllDuringEvent` for web requests whose URIs match this regex. This is true regardless of whether you override the rule action for either of the rules in your web ACL configuration.\n\nAWS recommends using a regular expression.\n\nThis setting is required if `UsageOfAction` is set to `ENABLED` . If required, you can provide between 1 and 5 regex objects in the array of settings.\n\nAWS recommends starting with the following setting. Review and update it for your application's needs:\n\n`\\/api\\/|\\.(acc|avi|css|gif|jpe?g|js|mp[34]|ogg|otf|pdf|png|tiff?|ttf|webm|webp|woff2?)$`"},"sensitivity":{"$ref":"#/types/aws-native:wafv2:WebAclSensitivityToAct","description":"The sensitivity that the rule group rule `ChallengeDDoSRequests` uses when matching against the DDoS suspicion labeling on a request. The managed rule group adds the labeling during DDoS events, before the `ChallengeDDoSRequests` rule runs.\n\nThe higher the sensitivity, the more levels of labeling that the rule matches:\n\n- Low sensitivity is less sensitive, causing the rule to match only on the most likely participants in an attack, which are the requests with the high suspicion label `awswaf:managed:aws:anti-ddos:high-suspicion-ddos-request` .\n- Medium sensitivity causes the rule to match on the medium and high suspicion labels.\n- High sensitivity causes the rule to match on all of the suspicion labels: low, medium, and high.\n\nDefault: `HIGH`"},"usageOfAction":{"$ref":"#/types/aws-native:wafv2:WebAclUsageOfAction","description":"Determines whether to use the `AWSManagedRulesAntiDDoSRuleSet` rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` in the rule group evaluation and the related label `awswaf:managed:aws:anti-ddos:challengeable-request` .\n\n- If usage is enabled:\n\n- The managed rule group adds the label `awswaf:managed:aws:anti-ddos:challengeable-request` to any web request whose URL does *NOT* match the regular expressions provided in the `ClientSideAction` setting `ExemptUriRegularExpressions` .\n- The two rules are evaluated against web requests for protected resources that are experiencing a DDoS attack. The two rules only apply their action to matching requests that have the label `awswaf:managed:aws:anti-ddos:challengeable-request` .\n- If usage is disabled:\n\n- The managed rule group doesn't add the label `awswaf:managed:aws:anti-ddos:challengeable-request` to any web requests.\n- The two rules are not evaluated.\n- None of the other `ClientSideAction` settings have any effect.\n\n\u003e This setting only enables or disables the use of the two anti-DDOS rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` in the anti-DDoS managed rule group.\n\u003e \n\u003e This setting doesn't alter the action setting in the two rules. To override the actions used by the rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` , enable this setting, and then override the rule actions in the usual way, in your managed rule group configuration."}},"type":"object","required":["usageOfAction"]},"aws-native:wafv2:WebAclClientSideActionConfig":{"description":"Client side action config for AntiDDOS AMR.","properties":{"challenge":{"$ref":"#/types/aws-native:wafv2:WebAclClientSideAction","description":"Configuration for the use of the `AWSManagedRulesAntiDDoSRuleSet` rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` .\n\n\u003e This setting isn't related to the configuration of the `Challenge` action itself. It only configures the use of the two anti-DDoS rules named here. \n\nYou can enable or disable the use of these rules, and you can configure how to use them when they are enabled."}},"type":"object","required":["challenge"]},"aws-native:wafv2:WebAclCookieMatchPattern":{"description":"The pattern to look for in the request cookies.","properties":{"all":{"$ref":"pulumi.json#/Any","description":"Inspect all parts of the web request cookies."},"excludedCookies":{"type":"array","items":{"type":"string"},"description":"Inspect only the cookies whose keys don't match any of the strings specified here."},"includedCookies":{"type":"array","items":{"type":"string"},"description":"Inspect only the cookies that have a key that matches one of the strings specified here."}},"type":"object"},"aws-native:wafv2:WebAclCookies":{"description":"Includes cookies of a web request.","properties":{"matchPattern":{"$ref":"#/types/aws-native:wafv2:WebAclCookieMatchPattern","description":"The filter to use to identify the subset of cookies to inspect in a web request.\n\nYou must specify exactly one setting: either `All` , `IncludedCookies` , or `ExcludedCookies` .\n\nExample JSON: `\"MatchPattern\": { \"IncludedCookies\": [ \"session-id-time\", \"session-id\" ] }`"},"matchScope":{"$ref":"#/types/aws-native:wafv2:WebAclMapMatchScope","description":"The parts of the cookies to inspect with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.\n\n`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values."},"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:WebAclOversizeHandling","description":"What AWS WAF should do if the cookies of the request are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request cookies when they exceed 8 KB (8192 bytes) or 200 total cookies. The underlying host service forwards a maximum of 200 cookies and at most 8 KB of cookie contents to AWS WAF .\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available cookies normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["matchPattern","matchScope","oversizeHandling"]},"aws-native:wafv2:WebAclCountAction":{"description":"Allow traffic towards application.","properties":{"customRequestHandling":{"$ref":"#/types/aws-native:wafv2:WebAclCustomRequestHandling","description":"Defines custom handling for the web request.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:WebAclCustomHttpHeader":{"description":"HTTP header.","properties":{"name":{"type":"string","description":"The name of the custom header.\n\nFor custom request header insertion, when AWS WAF inserts the header into the request, it prefixes this name `x-amzn-waf-` , to avoid confusion with the headers that are already in the request. For example, for the header name `sample` , AWS WAF inserts the header `x-amzn-waf-sample` ."},"value":{"type":"string","description":"The value of the custom header."}},"type":"object","required":["name","value"]},"aws-native:wafv2:WebAclCustomRequestHandling":{"description":"Custom request handling.","properties":{"insertHeaders":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclCustomHttpHeader"},"description":"Collection of HTTP headers."}},"type":"object","required":["insertHeaders"]},"aws-native:wafv2:WebAclCustomResponse":{"description":"Custom response.","properties":{"customResponseBodyKey":{"type":"string","description":"Custom response body key."},"responseCode":{"type":"integer","description":"The HTTP status code to return to the client.\n\nFor a list of status codes that you can use in your custom responses, see [Supported status codes for custom response](https://docs.aws.amazon.com/waf/latest/developerguide/customizing-the-response-status-codes.html) in the *AWS WAF Developer Guide* ."},"responseHeaders":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclCustomHttpHeader"},"description":"Collection of HTTP headers."}},"type":"object","required":["responseCode"]},"aws-native:wafv2:WebAclCustomResponseBody":{"description":"Custom response body.","properties":{"content":{"type":"string","description":"The payload of the custom response.\n\nYou can use JSON escape strings in JSON content. To do this, you must specify JSON content in the `ContentType` setting.\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* ."},"contentType":{"$ref":"#/types/aws-native:wafv2:WebAclResponseContentType","description":"The type of content in the payload that you are defining in the `Content` string."}},"type":"object","required":["content","contentType"]},"aws-native:wafv2:WebAclDataProtect":{"properties":{"action":{"$ref":"#/types/aws-native:wafv2:WebAclDataProtectionAction"},"excludeRateBasedDetails":{"type":"boolean"},"excludeRuleMatchDetails":{"type":"boolean"},"field":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToProtect"}},"type":"object","required":["action","field"]},"aws-native:wafv2:WebAclDataProtectionAction":{"type":"string","enum":[{"name":"Substitution","value":"SUBSTITUTION"},{"name":"Hash","value":"HASH"}]},"aws-native:wafv2:WebAclDataProtectionConfig":{"properties":{"dataProtections":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclDataProtect"},"description":"An array of data protection configurations for specific web request field types. This is defined for each web ACL. AWS WAF applies the specified protection to all web requests that the web ACL inspects."}},"type":"object","required":["dataProtections"]},"aws-native:wafv2:WebAclDefaultAction":{"description":"Default Action WebACL will take against ingress traffic when there is no matching Rule.","properties":{"allow":{"$ref":"#/types/aws-native:wafv2:WebAclAllowAction","description":"Specifies that AWS WAF should allow requests by default."},"block":{"$ref":"#/types/aws-native:wafv2:WebAclBlockAction","description":"Specifies that AWS WAF should block requests by default."}},"type":"object"},"aws-native:wafv2:WebAclExcludedRule":{"description":"Excluded Rule in the RuleGroup or ManagedRuleGroup will not be evaluated.","properties":{"name":{"type":"string","description":"The name of the rule whose action you want to override to `Count` ."}},"type":"object","required":["name"]},"aws-native:wafv2:WebAclFieldIdentifier":{"properties":{"identifier":{"type":"string","description":"The name of the field.\n\nWhen the `PayloadType` in the request inspection is `JSON` , this identifier must be in JSON pointer syntax. For example `/form/username` . For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nWhen the `PayloadType` is `FORM_ENCODED` , use the HTML form names. For example, `username` .\n\nFor more information, see the descriptions for each field type in the request inspection properties."}},"type":"object","required":["identifier"]},"aws-native:wafv2:WebAclFieldToMatch":{"description":"Field of the request to match.","properties":{"allQueryArguments":{"$ref":"pulumi.json#/Any","description":"All query arguments of a web request."},"body":{"$ref":"#/types/aws-native:wafv2:WebAclBody","description":"Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nFor information about how to handle oversized request bodies, see the `Body` object configuration."},"cookies":{"$ref":"#/types/aws-native:wafv2:WebAclCookies","description":"Inspect the request cookies. You must configure scope and pattern matching filters in the `Cookies` object, to define the set of cookies and the parts of the cookies that AWS WAF inspects.\n\nOnly the first 8 KB (8192 bytes) of a request's cookies and only the first 200 cookies are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize cookie content in the `Cookies` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service."},"headerOrder":{"$ref":"#/types/aws-native:wafv2:WebAclHeaderOrder"},"headers":{"$ref":"#/types/aws-native:wafv2:WebAclHeaders","description":"Inspect the request headers. You must configure scope and pattern matching filters in the `Headers` object, to define the set of headers to and the parts of the headers that AWS WAF inspects.\n\nOnly the first 8 KB (8192 bytes) of a request's headers and only the first 200 headers are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize header content in the `Headers` object. AWS WAF applies the pattern matching filters to the headers that it receives from the underlying host service."},"ja3Fingerprint":{"$ref":"#/types/aws-native:wafv2:WebAclJa3Fingerprint","description":"Available for use with Amazon CloudFront distributions and Application Load Balancers. Match against the request's JA3 fingerprint. The JA3 fingerprint is a 32-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.\n\n\u003e You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` . \n\nYou can obtain the JA3 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .\n\nProvide the JA3 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration."},"ja4Fingerprint":{"$ref":"#/types/aws-native:wafv2:WebAclJa4Fingerprint","description":"Available for use with Amazon CloudFront distributions and Application Load Balancers. Match against the request's JA4 fingerprint. The JA4 fingerprint is a 36-character hash derived from the TLS Client Hello of an incoming request. This fingerprint serves as a unique identifier for the client's TLS configuration. AWS WAF calculates and logs this fingerprint for each request that has enough TLS Client Hello information for the calculation. Almost all web requests include this information.\n\n\u003e You can use this choice only with a string match `ByteMatchStatement` with the `PositionalConstraint` set to `EXACTLY` . \n\nYou can obtain the JA4 fingerprint for client requests from the web ACL logs. If AWS WAF is able to calculate the fingerprint, it includes it in the logs. For information about the logging fields, see [Log fields](https://docs.aws.amazon.com/waf/latest/developerguide/logging-fields.html) in the *AWS WAF Developer Guide* .\n\nProvide the JA4 fingerprint string from the logs in your string match statement specification, to match with any future requests that have the same TLS configuration."},"jsonBody":{"$ref":"#/types/aws-native:wafv2:WebAclJsonBody","description":"Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nFor information about how to handle oversized request bodies, see the `JsonBody` object configuration."},"method":{"$ref":"pulumi.json#/Any","description":"The HTTP method of a web request. The method indicates the type of operation that the request is asking the origin to perform."},"queryString":{"$ref":"pulumi.json#/Any","description":"The query string of a web request. This is the part of a URL that appears after a ? character, if any."},"singleHeader":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatchSingleHeaderProperties","description":"Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.\n\nExample JSON: `\"SingleHeader\": { \"Name\": \"haystack\" }`\n\nAlternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting."},"singleQueryArgument":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatchSingleQueryArgumentProperties","description":"One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive."},"uriFragment":{"$ref":"#/types/aws-native:wafv2:WebAclUriFragment","description":"Inspect fragments of the request URI. You must configure scope and pattern matching filters in the `UriFragment` object, to define the fragment of a URI that AWS WAF inspects.\n\nOnly the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the `UriFragment` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service."},"uriPath":{"$ref":"pulumi.json#/Any","description":"The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg."}},"type":"object"},"aws-native:wafv2:WebAclFieldToMatchSingleHeaderProperties":{"description":"Inspect a single header. Provide the name of the header to inspect, for example, `User-Agent` or `Referer` . This setting isn't case sensitive.\n\nExample JSON: `\"SingleHeader\": { \"Name\": \"haystack\" }`\n\nAlternately, you can filter and inspect all headers with the `Headers` `FieldToMatch` setting.","properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:wafv2:WebAclFieldToMatchSingleQueryArgumentProperties":{"description":"One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.","properties":{"name":{"type":"string"}},"type":"object","required":["name"]},"aws-native:wafv2:WebAclFieldToProtect":{"description":"Field in log to protect.","properties":{"fieldKeys":{"type":"array","items":{"type":"string"},"description":"List of field keys to protect"},"fieldType":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToProtectFieldType","description":"Field type to protect"}},"type":"object","required":["fieldType"]},"aws-native:wafv2:WebAclFieldToProtectFieldType":{"description":"Field type to protect","type":"string","enum":[{"name":"SingleHeader","value":"SINGLE_HEADER"},{"name":"SingleCookie","value":"SINGLE_COOKIE"},{"name":"SingleQueryArgument","value":"SINGLE_QUERY_ARGUMENT"},{"name":"QueryString","value":"QUERY_STRING"},{"name":"Body","value":"BODY"}]},"aws-native:wafv2:WebAclForwardedIpConfiguration":{"properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclForwardedIpConfigurationFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."},"headerName":{"type":"string","description":"The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."}},"type":"object","required":["fallbackBehavior","headerName"]},"aws-native:wafv2:WebAclForwardedIpConfigurationFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclGeoMatchStatement":{"properties":{"countryCodes":{"type":"array","items":{"type":"string"},"description":"An array of two-character country codes that you want to match against, for example, `[ \"US\", \"CN\" ]` , from the alpha-2 country ISO codes of the ISO 3166 international standard.\n\nWhen you use a geo match statement just for the region and country labels that it adds to requests, you still have to supply a country code for the rule to evaluate. In this case, you configure the rule to only count matching requests, but it will still generate logging and count metrics for any matches. You can reduce the logging and metrics that the rule produces by specifying a country that's unlikely to be a source of traffic to your site."},"forwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:WebAclForwardedIpConfiguration","description":"The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."}},"type":"object"},"aws-native:wafv2:WebAclHeaderMatchPattern":{"description":"The pattern to look for in the request headers.","properties":{"all":{"$ref":"pulumi.json#/Any","description":"Inspect all parts of the web request headers."},"excludedHeaders":{"type":"array","items":{"type":"string"},"description":"Inspect only the headers whose keys don't match any of the strings specified here."},"includedHeaders":{"type":"array","items":{"type":"string"},"description":"Inspect only the headers that have a key that matches one of the strings specified here."}},"type":"object"},"aws-native:wafv2:WebAclHeaderOrder":{"description":"The string containing the list of a web request's header names, ordered as they appear in the web request, separated by colons.","properties":{"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:WebAclOversizeHandling"}},"type":"object","required":["oversizeHandling"]},"aws-native:wafv2:WebAclHeaders":{"description":"Includes headers of a web request.","properties":{"matchPattern":{"$ref":"#/types/aws-native:wafv2:WebAclHeaderMatchPattern","description":"The filter to use to identify the subset of headers to inspect in a web request.\n\nYou must specify exactly one setting: either `All` , `IncludedHeaders` , or `ExcludedHeaders` .\n\nExample JSON: `\"MatchPattern\": { \"ExcludedHeaders\": [ \"KeyToExclude1\", \"KeyToExclude2\" ] }`"},"matchScope":{"$ref":"#/types/aws-native:wafv2:WebAclMapMatchScope","description":"The parts of the headers to match with the rule inspection criteria. If you specify `ALL` , AWS WAF inspects both keys and values.\n\n`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values."},"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:WebAclOversizeHandling","description":"What AWS WAF should do if the headers determined by your match scope are more numerous or larger than AWS WAF can inspect. AWS WAF does not support inspecting the entire contents of request headers when they exceed 8 KB (8192 bytes) or 200 total headers. The underlying host service forwards a maximum of 200 headers and at most 8 KB of header contents to AWS WAF .\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available headers normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["matchPattern","matchScope","oversizeHandling"]},"aws-native:wafv2:WebAclImmunityTimeProperty":{"properties":{"immunityTime":{"type":"integer","description":"The amount of time, in seconds, that a `CAPTCHA` or challenge timestamp is considered valid by AWS WAF . The default setting is 300.\n\nFor the Challenge action, the minimum setting is 300."}},"type":"object","required":["immunityTime"]},"aws-native:wafv2:WebAclIpSetForwardedIpConfiguration":{"properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclIpSetForwardedIpConfigurationFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."},"headerName":{"type":"string","description":"The name of the HTTP header to use for the IP address. For example, to use the X-Forwarded-For (XFF) header, set this to `X-Forwarded-For` .\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."},"position":{"$ref":"#/types/aws-native:wafv2:WebAclIpSetForwardedIpConfigurationPosition","description":"The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.\n\nThe options for this setting are the following:\n\n- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.\n- LAST - Inspect the last IP address in the list of IP addresses in the header.\n- ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10."}},"type":"object","required":["fallbackBehavior","headerName","position"]},"aws-native:wafv2:WebAclIpSetForwardedIpConfigurationFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclIpSetForwardedIpConfigurationPosition":{"description":"The position in the header to search for the IP address. The header can contain IP addresses of the original client and also of proxies. For example, the header value could be `10.1.1.1, 127.0.0.0, 10.10.10.10` where the first IP address identifies the original client and the rest identify proxies that the request went through.\n\nThe options for this setting are the following:\n\n- FIRST - Inspect the first IP address in the list of IP addresses in the header. This is usually the client's original IP.\n- LAST - Inspect the last IP address in the list of IP addresses in the header.\n- ANY - Inspect all IP addresses in the header for a match. If the header contains more than 10 IP addresses, AWS WAF inspects the last 10.","type":"string","enum":[{"name":"First","value":"FIRST"},{"name":"Last","value":"LAST"},{"name":"Any","value":"ANY"}]},"aws-native:wafv2:WebAclIpSetReferenceStatement":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the `IPSet` that this statement references."},"ipSetForwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:WebAclIpSetForwardedIpConfiguration","description":"The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all."}},"type":"object","required":["arn"]},"aws-native:wafv2:WebAclJa3Fingerprint":{"description":"Includes the JA3 fingerprint of a web request.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclJa3FingerprintFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:WebAclJa3FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclJa4Fingerprint":{"description":"Includes the JA4 fingerprint of a web request.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclJa4FingerprintFallbackBehavior","description":"The match status to assign to the web request if the request doesn't have a JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:WebAclJa4FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if the request doesn't have a JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclJsonBody":{"description":"Inspect the request body as JSON. The request body immediately follows the request headers.","properties":{"invalidFallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclBodyParsingFallbackBehavior","description":"What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:\n\n- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nIf you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.\n\n\u003e AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* ."},"matchPattern":{"$ref":"#/types/aws-native:wafv2:WebAclJsonMatchPattern","description":"The patterns to look for in the JSON body. AWS WAF inspects the results of these pattern matches against the rule inspection criteria."},"matchScope":{"$ref":"#/types/aws-native:wafv2:WebAclJsonMatchScope","description":"The parts of the JSON to match against using the `MatchPattern` . If you specify `ALL` , AWS WAF matches against keys and values.\n\n`All` does not require a match to be found in the keys and a match to be found in the values. It requires a match to be found in the keys or the values or both. To require a match in the keys and in the values, use a logical `AND` statement to combine two match rules, one that inspects the keys and another that inspects the values."},"oversizeHandling":{"$ref":"#/types/aws-native:wafv2:WebAclOversizeHandling","description":"What AWS WAF should do if the body is larger than AWS WAF can inspect.\n\nAWS WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. When a web request body is larger than the limit, the underlying host service only forwards the contents that are within the limit to AWS WAF for inspection.\n\n- For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).\n- For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.\n- For AWS Amplify , use the CloudFront limit.\n\nThe options for oversize handling are the following:\n\n- `CONTINUE` - Inspect the available body contents normally, according to the rule inspection criteria.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nYou can combine the `MATCH` or `NO_MATCH` settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.\n\nDefault: `CONTINUE`"}},"type":"object","required":["matchPattern","matchScope"]},"aws-native:wafv2:WebAclJsonMatchPattern":{"description":"The pattern to look for in the JSON body.","properties":{"all":{"$ref":"pulumi.json#/Any","description":"Inspect all parts of the web request's JSON body."},"includedPaths":{"type":"array","items":{"type":"string"},"description":"Match only the specified include paths. See also `MatchScope` in the `JsonBody` `FieldToMatch` specification.\n\nProvide the include paths using JSON Pointer syntax. For example, `\"IncludedPaths\": [\"/dogs/0/name\", \"/dogs/1/name\"]` . For information about this syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nYou must specify either this setting or the `All` setting, but not both.\n\n\u003e Don't use this option to include all paths. Instead, use the `All` setting."}},"type":"object"},"aws-native:wafv2:WebAclJsonMatchScope":{"description":"The parts of the JSON to match against using the MatchPattern.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Key","value":"KEY"},{"name":"Value","value":"VALUE"}]},"aws-native:wafv2:WebAclLabel":{"properties":{"name":{"type":"string","description":"The label string."}},"type":"object","required":["name"]},"aws-native:wafv2:WebAclLabelMatchScope":{"type":"string","enum":[{"name":"Label","value":"LABEL"},{"name":"Namespace","value":"NAMESPACE"}]},"aws-native:wafv2:WebAclLabelMatchStatement":{"properties":{"key":{"type":"string","description":"The string to match against. The setting you provide for this depends on the match statement's `Scope` setting:\n\n- If the `Scope` indicates `LABEL` , then this specification must include the name and can include any number of preceding namespace specifications and prefix up to providing the fully qualified label name.\n- If the `Scope` indicates `NAMESPACE` , then this specification can include any number of contiguous namespace strings, and can include the entire label namespace prefix from the rule group or web ACL where the label originates.\n\nLabels are case sensitive and components of a label must be separated by colon, for example `NS1:NS2:name` ."},"scope":{"$ref":"#/types/aws-native:wafv2:WebAclLabelMatchScope","description":"Specify whether you want to match using the label name or just the namespace."}},"type":"object","required":["key","scope"]},"aws-native:wafv2:WebAclManagedRuleGroupConfig":{"description":"ManagedRuleGroupConfig.","properties":{"awsManagedRulesAcfpRuleSet":{"$ref":"#/types/aws-native:wafv2:WebAclAwsManagedRulesAcfpRuleSet","description":"Additional configuration for using the account creation fraud prevention (ACFP) managed rule group, `AWSManagedRulesACFPRuleSet` . Use this to provide account creation request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to account creation requests.\n\nFor information about using the ACFP managed rule group, see [AWS WAF Fraud Control account creation fraud prevention (ACFP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-acfp.html) and [AWS WAF Fraud Control account creation fraud prevention (ACFP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-acfp.html) in the *AWS WAF Developer Guide* ."},"awsManagedRulesAntiDDoSRuleSet":{"$ref":"#/types/aws-native:wafv2:WebAclAwsManagedRulesAntiDDoSRuleSet","description":"Additional configuration for using the anti-DDoS managed rule group, `AWSManagedRulesAntiDDoSRuleSet` . Use this to configure anti-DDoS behavior for the rule group.\n\nFor information about using the anti-DDoS managed rule group, see [AWS WAF Anti-DDoS rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-anti-ddos.html) and [Distributed Denial of Service (DDoS) prevention](https://docs.aws.amazon.com/waf/latest/developerguide/waf-anti-ddos.html) in the *AWS WAF Developer Guide* ."},"awsManagedRulesAtpRuleSet":{"$ref":"#/types/aws-native:wafv2:WebAclAwsManagedRulesAtpRuleSet","description":"Additional configuration for using the account takeover prevention (ATP) managed rule group, `AWSManagedRulesATPRuleSet` . Use this to provide login request information to the rule group. For web ACLs that protect CloudFront distributions, use this to also provide the information about how your distribution responds to login requests.\n\nThis configuration replaces the individual configuration fields in `ManagedRuleGroupConfig` and provides additional feature configuration.\n\nFor information about using the ATP managed rule group, see [AWS WAF Fraud Control account takeover prevention (ATP) rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-atp.html) and [AWS WAF Fraud Control account takeover prevention (ATP)](https://docs.aws.amazon.com/waf/latest/developerguide/waf-atp.html) in the *AWS WAF Developer Guide* ."},"awsManagedRulesBotControlRuleSet":{"$ref":"#/types/aws-native:wafv2:WebAclAwsManagedRulesBotControlRuleSet","description":"Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. For information about using the Bot Control managed rule group, see [AWS WAF Bot Control rule group](https://docs.aws.amazon.com/waf/latest/developerguide/aws-managed-rule-groups-bot.html) and [AWS WAF Bot Control](https://docs.aws.amazon.com/waf/latest/developerguide/waf-bot-control.html) in the *AWS WAF Developer Guide* ."},"loginPath":{"type":"string","description":"\u003e Instead of this setting, provide your configuration under `AWSManagedRulesATPRuleSet` ."},"passwordField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"\u003e Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` ."},"payloadType":{"$ref":"#/types/aws-native:wafv2:WebAclManagedRuleGroupConfigPayloadType","description":"\u003e Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` ."},"usernameField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"\u003e Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` ."}},"type":"object"},"aws-native:wafv2:WebAclManagedRuleGroupConfigPayloadType":{"description":"\u003e Instead of this setting, provide your configuration under the request inspection configuration for `AWSManagedRulesATPRuleSet` or `AWSManagedRulesACFPRuleSet` .","type":"string","enum":[{"name":"Json","value":"JSON"},{"name":"FormEncoded","value":"FORM_ENCODED"}]},"aws-native:wafv2:WebAclManagedRuleGroupStatement":{"properties":{"excludedRules":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclExcludedRule"},"description":"Rules in the referenced rule group whose actions are set to `Count` .\n\n\u003e Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` ."},"managedRuleGroupConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclManagedRuleGroupConfig"},"description":"Collection of ManagedRuleGroupConfig."},"name":{"type":"string","description":"The name of the managed rule group. You use this, along with the vendor name, to identify the rule group."},"ruleActionOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclRuleActionOverride"},"description":"Action overrides for rules in the rule group."},"scopeDownStatement":{"$ref":"#/types/aws-native:wafv2:WebAclStatement","description":"An optional nested statement that narrows the scope of the web requests that are evaluated by the managed rule group. Requests are only evaluated by the rule group if they match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement."},"vendorName":{"type":"string","description":"The name of the managed rule group vendor. You use this, along with the rule group name, to identify a rule group."},"version":{"type":"string","description":"The version of the managed rule group to use. If you specify this, the version setting is fixed until you change it. If you don't specify this, AWS WAF uses the vendor's default version, and then keeps the version at the vendor's default when the vendor updates the managed rule group settings."}},"type":"object","required":["name","vendorName"]},"aws-native:wafv2:WebAclMapMatchScope":{"description":"The parts of the request to match against using the MatchPattern.","type":"string","enum":[{"name":"All","value":"ALL"},{"name":"Key","value":"KEY"},{"name":"Value","value":"VALUE"}]},"aws-native:wafv2:WebAclNotStatement":{"properties":{"statement":{"$ref":"#/types/aws-native:wafv2:WebAclStatement","description":"The statement to negate. You can use any statement that can be nested."}},"type":"object","required":["statement"]},"aws-native:wafv2:WebAclOnSourceDDoSProtectionConfig":{"description":"Configures the options for on-source DDoS protection provided by supported resource type.","properties":{"albLowReputationMode":{"$ref":"#/types/aws-native:wafv2:WebAclOnSourceDDoSProtectionConfigAlbLowReputationMode","description":"The level of DDoS protection that applies to web ACLs associated with Application Load Balancers. `ACTIVE_UNDER_DDOS` protection is enabled by default whenever a web ACL is associated with an Application Load Balancer. In the event that an Application Load Balancer experiences high-load conditions or suspected DDoS attacks, the `ACTIVE_UNDER_DDOS` protection automatically rate limits traffic from known low reputation sources without disrupting Application Load Balancer availability. `ALWAYS_ON` protection provides constant, always-on monitoring of known low reputation sources for suspected DDoS attacks. While this provides a higher level of protection, there may be potential impacts on legitimate traffic."}},"type":"object","required":["albLowReputationMode"]},"aws-native:wafv2:WebAclOnSourceDDoSProtectionConfigAlbLowReputationMode":{"description":"The level of DDoS protection that applies to web ACLs associated with Application Load Balancers. `ACTIVE_UNDER_DDOS` protection is enabled by default whenever a web ACL is associated with an Application Load Balancer. In the event that an Application Load Balancer experiences high-load conditions or suspected DDoS attacks, the `ACTIVE_UNDER_DDOS` protection automatically rate limits traffic from known low reputation sources without disrupting Application Load Balancer availability. `ALWAYS_ON` protection provides constant, always-on monitoring of known low reputation sources for suspected DDoS attacks. While this provides a higher level of protection, there may be potential impacts on legitimate traffic.","type":"string","enum":[{"name":"ActiveUnderDdos","value":"ACTIVE_UNDER_DDOS"},{"name":"AlwaysOn","value":"ALWAYS_ON"}]},"aws-native:wafv2:WebAclOrStatement":{"properties":{"statements":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclStatement"},"description":"The statements to combine with OR logic. You can use any statements that can be nested."}},"type":"object","required":["statements"]},"aws-native:wafv2:WebAclOverrideAction":{"description":"Override a RuleGroup or ManagedRuleGroup behavior. This can only be applied to Rule that has RuleGroupReferenceStatement or ManagedRuleGroupReferenceStatement.","properties":{"count":{"$ref":"pulumi.json#/Any","description":"Count traffic towards application."},"none":{"$ref":"pulumi.json#/Any","description":"Keep the RuleGroup or ManagedRuleGroup behavior as is."}},"type":"object"},"aws-native:wafv2:WebAclOversizeHandling":{"description":"Handling of requests containing oversize fields","type":"string","enum":[{"name":"Continue","value":"CONTINUE"},{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclPositionalConstraint":{"description":"Position of the evaluation in the FieldToMatch of request.","type":"string","enum":[{"name":"Exactly","value":"EXACTLY"},{"name":"StartsWith","value":"STARTS_WITH"},{"name":"EndsWith","value":"ENDS_WITH"},{"name":"Contains","value":"CONTAINS"},{"name":"ContainsWord","value":"CONTAINS_WORD"}]},"aws-native:wafv2:WebAclRateBasedStatement":{"properties":{"aggregateKeyType":{"$ref":"#/types/aws-native:wafv2:WebAclRateBasedStatementAggregateKeyType","description":"Setting that indicates how to aggregate the request counts.\n\n\u003e Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling. \n\n- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.\n\nWith this option, you must configure the `ScopeDownStatement` property.\n- `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.\n\nWith this option, you must specify the aggregate keys in the `CustomKeys` property.\n\nTo aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .\n- `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.\n\nWith this option, you must specify the header to use in the `ForwardedIPConfig` property.\n\nTo aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .\n- `IP` - Aggregate the request counts on the IP address from the web request origin.\n\nTo aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` ."},"customKeys":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclRateBasedStatementCustomKey"},"description":"Specifies the aggregate keys to use in a rate-base rule."},"evaluationWindowSec":{"type":"integer","description":"The amount of time, in seconds, that AWS WAF should include in its request counts, looking back from the current time. For example, for a setting of 120, when AWS WAF checks the rate, it counts the requests for the 2 minutes immediately preceding the current time. Valid settings are 60, 120, 300, and 600.\n\nThis setting doesn't determine how often AWS WAF checks the rate, but how far back it looks each time it checks. AWS WAF checks the rate about every 10 seconds.\n\nDefault: `300` (5 minutes)"},"forwardedIpConfig":{"$ref":"#/types/aws-native:wafv2:WebAclForwardedIpConfiguration","description":"The configuration for inspecting IP addresses in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.\n\n\u003e If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all. \n\nThis is required if you specify a forwarded IP in the rule's aggregate key settings."},"limit":{"type":"integer","description":"The limit on requests during the specified evaluation window for a single aggregation instance for the rate-based rule. If the rate-based statement includes a `ScopeDownStatement` , this limit is applied only to the requests that match the statement.\n\nExamples:\n\n- If you aggregate on just the IP address, this is the limit on requests from any single IP address.\n- If you aggregate on the HTTP method and the query argument name \"city\", then this is the limit on requests for any single method, city pair."},"scopeDownStatement":{"$ref":"#/types/aws-native:wafv2:WebAclStatement","description":"An optional nested statement that narrows the scope of the web requests that are evaluated and managed by the rate-based statement. When you use a scope-down statement, the rate-based rule only tracks and rate limits requests that match the scope-down statement. You can use any nestable `Statement` in the scope-down statement, and you can nest statements at any level, the same as you can for a rule statement."}},"type":"object","required":["aggregateKeyType","limit"]},"aws-native:wafv2:WebAclRateBasedStatementAggregateKeyType":{"description":"Setting that indicates how to aggregate the request counts.\n\n\u003e Web requests that are missing any of the components specified in the aggregation keys are omitted from the rate-based rule evaluation and handling. \n\n- `CONSTANT` - Count and limit the requests that match the rate-based rule's scope-down statement. With this option, the counted requests aren't further aggregated. The scope-down statement is the only specification used. When the count of all requests that satisfy the scope-down statement goes over the limit, AWS WAF applies the rule action to all requests that satisfy the scope-down statement.\n\nWith this option, you must configure the `ScopeDownStatement` property.\n- `CUSTOM_KEYS` - Aggregate the request counts using one or more web request components as the aggregate keys.\n\nWith this option, you must specify the aggregate keys in the `CustomKeys` property.\n\nTo aggregate on only the IP address or only the forwarded IP address, don't use custom keys. Instead, set the aggregate key type to `IP` or `FORWARDED_IP` .\n- `FORWARDED_IP` - Aggregate the request counts on the first IP address in an HTTP header.\n\nWith this option, you must specify the header to use in the `ForwardedIPConfig` property.\n\nTo aggregate on a combination of the forwarded IP address with other aggregate keys, use `CUSTOM_KEYS` .\n- `IP` - Aggregate the request counts on the IP address from the web request origin.\n\nTo aggregate on a combination of the IP address with other aggregate keys, use `CUSTOM_KEYS` .","type":"string","enum":[{"name":"Constant","value":"CONSTANT"},{"name":"Ip","value":"IP"},{"name":"ForwardedIp","value":"FORWARDED_IP"},{"name":"CustomKeys","value":"CUSTOM_KEYS"}]},"aws-native:wafv2:WebAclRateBasedStatementCustomKey":{"description":"Specifies a single custom aggregate key for a rate-base rule.","properties":{"asn":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitAsn","description":"Use an Autonomous System Number (ASN) derived from the request's originating or forwarded IP address as an aggregate key. Each distinct ASN contributes to the aggregation instance."},"cookie":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitCookie","description":"Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance."},"forwardedIp":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitForwardedIp","description":"Use the first IP address in an HTTP header as an aggregate key. Each distinct forwarded IP address contributes to the aggregation instance.\n\nWhen you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the forwarded IP address by specifying `FORWARDED_IP` in your rate-based statement's `AggregateKeyType` .\n\nWith this option, you must specify the header to use in the rate-based rule's `ForwardedIPConfig` property."},"header":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitHeader","description":"Use the value of a header in the request as an aggregate key. Each distinct value in the header contributes to the aggregation instance. If you use a single header as your custom key, then each value fully defines an aggregation instance."},"httpMethod":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitHttpMethod","description":"Use the request's HTTP method as an aggregate key. Each distinct HTTP method contributes to the aggregation instance. If you use just the HTTP method as your custom key, then each method fully defines an aggregation instance."},"ip":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitIp","description":"Use the request's originating IP address as an aggregate key. Each distinct IP address contributes to the aggregation instance.\n\nWhen you specify an IP or forwarded IP in the custom key settings, you must also specify at least one other key to use. You can aggregate on only the IP address by specifying `IP` in your rate-based statement's `AggregateKeyType` ."},"ja3Fingerprint":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitJa3Fingerprint","description":"Use the request's JA3 fingerprint as an aggregate key. If you use a single JA3 fingerprint as your custom key, then each value fully defines an aggregation instance."},"ja4Fingerprint":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitJa4Fingerprint","description":"Use the request's JA4 fingerprint as an aggregate key. If you use a single JA4 fingerprint as your custom key, then each value fully defines an aggregation instance."},"labelNamespace":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitLabelNamespace","description":"Use the specified label namespace as an aggregate key. Each distinct fully qualified label name that has the specified label namespace contributes to the aggregation instance. If you use just one label namespace as your custom key, then each label name fully defines an aggregation instance.\n\nThis uses only labels that have been added to the request by rules that are evaluated before this rate-based rule in the web ACL.\n\nFor information about label namespaces and names, see [Label syntax and naming requirements](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-label-requirements.html) in the *AWS WAF Developer Guide* ."},"queryArgument":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitQueryArgument","description":"Use the specified query argument as an aggregate key. Each distinct value for the named query argument contributes to the aggregation instance. If you use a single query argument as your custom key, then each value fully defines an aggregation instance."},"queryString":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitQueryString","description":"Use the request's query string as an aggregate key. Each distinct string contributes to the aggregation instance. If you use just the query string as your custom key, then each string fully defines an aggregation instance."},"uriPath":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitUriPath","description":"Use the request's URI path as an aggregate key. Each distinct URI path contributes to the aggregation instance. If you use just the URI path as your custom key, then each URI path fully defines an aggregation instance."}},"type":"object"},"aws-native:wafv2:WebAclRateLimitAsn":{"description":"Specifies the request's ASN as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:WebAclRateLimitCookie":{"description":"Specifies a cookie as an aggregate key for a rate-based rule.","properties":{"name":{"type":"string","description":"The name of the cookie to use."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["name","textTransformations"]},"aws-native:wafv2:WebAclRateLimitForwardedIp":{"description":"Specifies the first IP address in an HTTP header as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:WebAclRateLimitHeader":{"description":"Specifies a header as an aggregate key for a rate-based rule.","properties":{"name":{"type":"string","description":"The name of the header to use."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["name","textTransformations"]},"aws-native:wafv2:WebAclRateLimitHttpMethod":{"description":"Specifies the request's HTTP method as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:WebAclRateLimitIp":{"description":"Specifies the IP address in the web request as an aggregate key for a rate-based rule.","type":"object"},"aws-native:wafv2:WebAclRateLimitJa3Fingerprint":{"description":"Specifies the request's JA3 fingerprint as an aggregate key for a rate-based rule.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitJa3FingerprintFallbackBehavior","description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:WebAclRateLimitJa3FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA3 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclRateLimitJa4Fingerprint":{"description":"Specifies the request's JA4 fingerprint as an aggregate key for a rate-based rule.","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclRateLimitJa4FingerprintFallbackBehavior","description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement."}},"type":"object","required":["fallbackBehavior"]},"aws-native:wafv2:WebAclRateLimitJa4FingerprintFallbackBehavior":{"description":"The match status to assign to the web request if there is insufficient TSL Client Hello information to compute the JA4 fingerprint.\n\nYou can specify the following fallback behaviors:\n\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclRateLimitLabelNamespace":{"description":"Specifies a label namespace to use as an aggregate key for a rate-based rule.","properties":{"namespace":{"type":"string","description":"The namespace to use for aggregation."}},"type":"object","required":["namespace"]},"aws-native:wafv2:WebAclRateLimitQueryArgument":{"description":"Specifies a query argument in the request as an aggregate key for a rate-based rule.","properties":{"name":{"type":"string","description":"The name of the query argument to use."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["name","textTransformations"]},"aws-native:wafv2:WebAclRateLimitQueryString":{"description":"Specifies the request's query string as an aggregate key for a rate-based rule.","properties":{"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["textTransformations"]},"aws-native:wafv2:WebAclRateLimitUriPath":{"description":"Specifies the request's URI Path as an aggregate key for a rate-based rule.","properties":{"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. Text transformations are used in rule match statements, to transform the `FieldToMatch` request component before inspecting it, and they're used in rate-based rule statements, to transform request components before using them as custom aggregation keys. If you specify one or more transformations to apply, AWS WAF performs all transformations on the specified content, starting from the lowest priority setting, and then uses the transformed component contents."}},"type":"object","required":["textTransformations"]},"aws-native:wafv2:WebAclRegex":{"description":"Regex","properties":{"regexString":{"type":"string"}},"type":"object"},"aws-native:wafv2:WebAclRegexMatchStatement":{"properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"regexString":{"type":"string","description":"The string representing the regular expression."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","regexString","textTransformations"]},"aws-native:wafv2:WebAclRegexPatternSetReferenceStatement":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the `RegexPatternSet` that this statement references."},"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["arn","fieldToMatch","textTransformations"]},"aws-native:wafv2:WebAclRequestBodyAssociatedResourceTypeConfig":{"description":"Configures the inspection size in the request body.","properties":{"defaultSizeInspectionLimit":{"$ref":"#/types/aws-native:wafv2:WebAclSizeInspectionLimit","description":"Specifies the maximum size of the web request body component that an associated CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resource should send to AWS WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body.\n\nDefault: `16 KB (16,384 bytes)`"}},"type":"object","required":["defaultSizeInspectionLimit"]},"aws-native:wafv2:WebAclRequestInspection":{"description":"Configures the inspection of login requests","properties":{"passwordField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"The name of the field in the request payload that contains your customer's password.\n\nHow you specify this depends on the request inspection payload type.\n\n- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"password\": \"THE_PASSWORD\" } }` , the password field specification is `/form/password` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with the input element named `password1` , the password field specification is `password1` ."},"payloadType":{"$ref":"#/types/aws-native:wafv2:WebAclRequestInspectionPayloadType","description":"The payload type for your login endpoint, either JSON or form encoded."},"usernameField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"The name of the field in the request payload that contains your customer's username.\n\nHow you specify this depends on the request inspection payload type.\n\n- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"username\": \"THE_USERNAME\" } }` , the username field specification is `/form/username` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with the input element named `username1` , the username field specification is `username1`"}},"type":"object","required":["passwordField","payloadType","usernameField"]},"aws-native:wafv2:WebAclRequestInspectionAcfp":{"description":"Configures the inspection of sign-up requests","properties":{"addressFields":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier"},"description":"The names of the fields in the request payload that contain your customer's primary physical address.\n\nOrder the address fields in the array exactly as they are ordered in the request payload.\n\nHow you specify the address fields depends on the request inspection payload type.\n\n- For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"primaryaddressline1\": \"THE_ADDRESS1\", \"primaryaddressline2\": \"THE_ADDRESS2\", \"primaryaddressline3\": \"THE_ADDRESS3\" } }` , the address field idenfiers are `/form/primaryaddressline1` , `/form/primaryaddressline2` , and `/form/primaryaddressline3` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with input elements named `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` , the address fields identifiers are `primaryaddressline1` , `primaryaddressline2` , and `primaryaddressline3` ."},"emailField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"The name of the field in the request payload that contains your customer's email.\n\nHow you specify this depends on the request inspection payload type.\n\n- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"email\": \"THE_EMAIL\" } }` , the email field specification is `/form/email` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with the input element named `email1` , the email field specification is `email1` ."},"passwordField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"The name of the field in the request payload that contains your customer's password.\n\nHow you specify this depends on the request inspection payload type.\n\n- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"password\": \"THE_PASSWORD\" } }` , the password field specification is `/form/password` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with the input element named `password1` , the password field specification is `password1` ."},"payloadType":{"$ref":"#/types/aws-native:wafv2:WebAclRequestInspectionAcfpPayloadType","description":"The payload type for your account creation endpoint, either JSON or form encoded."},"phoneNumberFields":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier"},"description":"The names of the fields in the request payload that contain your customer's primary phone number.\n\nOrder the phone number fields in the array exactly as they are ordered in the request payload.\n\nHow you specify the phone number fields depends on the request inspection payload type.\n\n- For JSON payloads, specify the field identifiers in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"primaryphoneline1\": \"THE_PHONE1\", \"primaryphoneline2\": \"THE_PHONE2\", \"primaryphoneline3\": \"THE_PHONE3\" } }` , the phone number field identifiers are `/form/primaryphoneline1` , `/form/primaryphoneline2` , and `/form/primaryphoneline3` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with input elements named `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` , the phone number field identifiers are `primaryphoneline1` , `primaryphoneline2` , and `primaryphoneline3` ."},"usernameField":{"$ref":"#/types/aws-native:wafv2:WebAclFieldIdentifier","description":"The name of the field in the request payload that contains your customer's username.\n\nHow you specify this depends on the request inspection payload type.\n\n- For JSON payloads, specify the field name in JSON pointer syntax. For information about the JSON Pointer syntax, see the Internet Engineering Task Force (IETF) documentation [JavaScript Object Notation (JSON) Pointer](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6901) .\n\nFor example, for the JSON payload `{ \"form\": { \"username\": \"THE_USERNAME\" } }` , the username field specification is `/form/username` .\n- For form encoded payload types, use the HTML form names.\n\nFor example, for an HTML form with the input element named `username1` , the username field specification is `username1`"}},"type":"object","required":["payloadType"]},"aws-native:wafv2:WebAclRequestInspectionAcfpPayloadType":{"description":"The payload type for your account creation endpoint, either JSON or form encoded.","type":"string","enum":[{"name":"Json","value":"JSON"},{"name":"FormEncoded","value":"FORM_ENCODED"}]},"aws-native:wafv2:WebAclRequestInspectionPayloadType":{"description":"The payload type for your login endpoint, either JSON or form encoded.","type":"string","enum":[{"name":"Json","value":"JSON"},{"name":"FormEncoded","value":"FORM_ENCODED"}]},"aws-native:wafv2:WebAclResponseContentType":{"description":"Valid values are TEXT_PLAIN, TEXT_HTML, and APPLICATION_JSON.","type":"string","enum":[{"name":"TextPlain","value":"TEXT_PLAIN"},{"name":"TextHtml","value":"TEXT_HTML"},{"name":"ApplicationJson","value":"APPLICATION_JSON"}]},"aws-native:wafv2:WebAclResponseInspection":{"description":"Configures the inspection of login responses","properties":{"bodyContains":{"$ref":"#/types/aws-native:wafv2:WebAclResponseInspectionBodyContains","description":"Configures inspection of the response body for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response body."},"header":{"$ref":"#/types/aws-native:wafv2:WebAclResponseInspectionHeader","description":"Configures inspection of the response header for success and failure indicators."},"json":{"$ref":"#/types/aws-native:wafv2:WebAclResponseInspectionJson","description":"Configures inspection of the response JSON for success and failure indicators. AWS WAF can inspect the first 65,536 bytes (64 KB) of the response JSON."},"statusCode":{"$ref":"#/types/aws-native:wafv2:WebAclResponseInspectionStatusCode","description":"Configures inspection of the response status code for success and failure indicators."}},"type":"object"},"aws-native:wafv2:WebAclResponseInspectionBodyContains":{"description":"Response body contents that indicate success or failure of a login request","properties":{"failureStrings":{"type":"array","items":{"type":"string"},"description":"Strings in the body of the response that indicate a failed login or account creation attempt. To be counted as a failure, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.\n\nJSON example: `\"FailureStrings\": [ \"Request failed\" ]`"},"successStrings":{"type":"array","items":{"type":"string"},"description":"Strings in the body of the response that indicate a successful login or account creation attempt. To be counted as a success, the string can be anywhere in the body and must be an exact match, including case. Each string must be unique among the success and failure strings.\n\nJSON examples: `\"SuccessStrings\": [ \"Login successful\" ]` and `\"SuccessStrings\": [ \"Account creation successful\", \"Welcome to our site!\" ]`"}},"type":"object","required":["failureStrings","successStrings"]},"aws-native:wafv2:WebAclResponseInspectionHeader":{"description":"Response headers that indicate success or failure of a login request","properties":{"failureValues":{"type":"array","items":{"type":"string"},"description":"Values in the response header with the specified name that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.\n\nJSON examples: `\"FailureValues\": [ \"LoginFailed\", \"Failed login\" ]` and `\"FailureValues\": [ \"AccountCreationFailed\" ]`"},"name":{"type":"string","description":"The name of the header to match against. The name must be an exact match, including case.\n\nJSON example: `\"Name\": [ \"RequestResult\" ]`"},"successValues":{"type":"array","items":{"type":"string"},"description":"Values in the response header with the specified name that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.\n\nJSON examples: `\"SuccessValues\": [ \"LoginPassed\", \"Successful login\" ]` and `\"SuccessValues\": [ \"AccountCreated\", \"Successful account creation\" ]`"}},"type":"object","required":["failureValues","name","successValues"]},"aws-native:wafv2:WebAclResponseInspectionJson":{"description":"Response JSON that indicate success or failure of a login request","properties":{"failureValues":{"type":"array","items":{"type":"string"},"description":"Values for the specified identifier in the response JSON that indicate a failed login or account creation attempt. To be counted as a failure, the value must be an exact match, including case. Each value must be unique among the success and failure values.\n\nJSON example: `\"FailureValues\": [ \"False\", \"Failed\" ]`"},"identifier":{"type":"string","description":"The identifier for the value to match against in the JSON. The identifier must be an exact match, including case.\n\nJSON examples: `\"Identifier\": [ \"/login/success\" ]` and `\"Identifier\": [ \"/sign-up/success\" ]`"},"successValues":{"type":"array","items":{"type":"string"},"description":"Values for the specified identifier in the response JSON that indicate a successful login or account creation attempt. To be counted as a success, the value must be an exact match, including case. Each value must be unique among the success and failure values.\n\nJSON example: `\"SuccessValues\": [ \"True\", \"Succeeded\" ]`"}},"type":"object","required":["failureValues","identifier","successValues"]},"aws-native:wafv2:WebAclResponseInspectionStatusCode":{"description":"Response status codes that indicate success or failure of a login request","properties":{"failureCodes":{"type":"array","items":{"type":"integer"},"description":"Status codes in the response that indicate a failed login or account creation attempt. To be counted as a failure, the response status code must match one of these. Each code must be unique among the success and failure status codes.\n\nJSON example: `\"FailureCodes\": [ 400, 404 ]`"},"successCodes":{"type":"array","items":{"type":"integer"},"description":"Status codes in the response that indicate a successful login or account creation attempt. To be counted as a success, the response status code must match one of these. Each code must be unique among the success and failure status codes.\n\nJSON example: `\"SuccessCodes\": [ 200, 201 ]`"}},"type":"object","required":["failureCodes","successCodes"]},"aws-native:wafv2:WebAclRule":{"description":"Rule of WebACL that contains condition and action.","properties":{"action":{"$ref":"#/types/aws-native:wafv2:WebAclRuleAction","description":"The action that AWS WAF should take on a web request when it matches the rule's statement. Settings at the web ACL level can override the rule action setting.\n\nThis is used only for rules whose statements don't reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .\n\nYou must set either this `Action` setting or the rule's `OverrideAction` , but not both:\n\n- If the rule statement doesn't reference a rule group, you must set this rule action setting and you must not set the rule's override action setting.\n- If the rule statement references a rule group, you must not set this action setting, because the actions are already set on the rules inside the rule group. You must set the rule's override action setting to indicate specifically whether to override the actions that are set on the rules in the rule group."},"captchaConfig":{"$ref":"#/types/aws-native:wafv2:WebAclCaptchaConfig","description":"Specifies how AWS WAF should handle `CAPTCHA` evaluations. If you don't specify this, AWS WAF uses the `CAPTCHA` configuration that's defined for the web ACL."},"challengeConfig":{"$ref":"#/types/aws-native:wafv2:WebAclChallengeConfig","description":"Specifies how AWS WAF should handle `Challenge` evaluations. If you don't specify this, AWS WAF uses the challenge configuration that's defined for the web ACL."},"name":{"type":"string","description":"The name of the rule.\n\nIf you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name in the rule's `VisibilityConfig` settings. AWS WAF doesn't automatically update the metric name when you update the rule name."},"overrideAction":{"$ref":"#/types/aws-native:wafv2:WebAclOverrideAction","description":"The override action to apply to the rules in a rule group, instead of the individual rule action settings. This is used only for rules whose statements reference a rule group. Rule statements that reference a rule group are `RuleGroupReferenceStatement` and `ManagedRuleGroupStatement` .\n\nSet the override action to none to leave the rule group rule actions in effect. Set it to count to only count matches, regardless of the rule action settings.\n\nYou must set either this `OverrideAction` setting or the `Action` setting, but not both:\n\n- If the rule statement references a rule group, you must set this override action setting and you must not set the rule's action setting.\n- If the rule statement doesn't reference a rule group, you must set the rule action setting and you must not set the rule's override action setting."},"priority":{"type":"integer","description":"If you define more than one `Rule` in a `WebACL` , AWS WAF evaluates each request against the `Rules` in order based on the value of `Priority` . AWS WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different."},"ruleLabels":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclLabel"},"description":"Collection of Rule Labels."},"statement":{"$ref":"#/types/aws-native:wafv2:WebAclStatement","description":"The AWS WAF processing statement for the rule, for example `ByteMatchStatement` or `SizeConstraintStatement` ."},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:WebAclVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection.\n\nIf you change the name of a `Rule` after you create it and you want the rule's metric name to reflect the change, update the metric name as well. AWS WAF doesn't automatically update the metric name."}},"type":"object","required":["name","priority","statement","visibilityConfig"]},"aws-native:wafv2:WebAclRuleAction":{"description":"Action taken when Rule matches its condition.","properties":{"allow":{"$ref":"#/types/aws-native:wafv2:WebAclAllowAction","description":"Instructs AWS WAF to allow the web request."},"block":{"$ref":"#/types/aws-native:wafv2:WebAclBlockAction","description":"Instructs AWS WAF to block the web request."},"captcha":{"$ref":"#/types/aws-native:wafv2:WebAclCaptchaAction","description":"Specifies that AWS WAF should run a `CAPTCHA` check against the request:\n\n- If the request includes a valid, unexpired `CAPTCHA` token, AWS WAF allows the web request inspection to proceed to the next rule, similar to a `CountAction` .\n- If the request doesn't include a valid, unexpired `CAPTCHA` token, AWS WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.\n\nAWS WAF generates a response that it sends back to the client, which includes the following:\n\n- The header `x-amzn-waf-action` with a value of `captcha` .\n- The HTTP status code `405 Method Not Allowed` .\n- If the request contains an `Accept` header with a value of `text/html` , the response includes a `CAPTCHA` challenge.\n\nYou can configure the expiration time in the `CaptchaConfig` `ImmunityTimeProperty` setting at the rule and web ACL level. The rule setting overrides the web ACL setting.\n\nThis action option is available for rules. It isn't available for web ACL default actions."},"challenge":{"$ref":"#/types/aws-native:wafv2:WebAclChallengeAction","description":"Instructs AWS WAF to run a `Challenge` check against the web request."},"count":{"$ref":"#/types/aws-native:wafv2:WebAclCountAction","description":"Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL."}},"type":"object"},"aws-native:wafv2:WebAclRuleActionOverride":{"description":"Action override for rules in the rule group.","properties":{"actionToUse":{"$ref":"#/types/aws-native:wafv2:WebAclRuleAction","description":"The override action to use, in place of the configured action of the rule in the rule group."},"name":{"type":"string","description":"The name of the rule to override."}},"type":"object","required":["actionToUse","name"]},"aws-native:wafv2:WebAclRuleGroupReferenceStatement":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the entity."},"excludedRules":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclExcludedRule"},"description":"Rules in the referenced rule group whose actions are set to `Count` .\n\n\u003e Instead of this option, use `RuleActionOverrides` . It accepts any valid action setting, including `Count` ."},"ruleActionOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclRuleActionOverride"},"description":"Action overrides for rules in the rule group."}},"type":"object","required":["arn"]},"aws-native:wafv2:WebAclScope":{"description":"Use CLOUDFRONT for CloudFront WebACL, use REGIONAL for Application Load Balancer and API Gateway.","type":"string","enum":[{"name":"Cloudfront","value":"CLOUDFRONT"},{"name":"Regional","value":"REGIONAL"}]},"aws-native:wafv2:WebAclSensitivityLevel":{"description":"Sensitivity Level current only used for sqli match statements.","type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"High","value":"HIGH"}]},"aws-native:wafv2:WebAclSensitivityToAct":{"type":"string","enum":[{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:wafv2:WebAclSizeConstraintStatement":{"description":"Size Constraint statement.","properties":{"comparisonOperator":{"$ref":"#/types/aws-native:wafv2:WebAclSizeConstraintStatementComparisonOperator","description":"The operator to use to compare the request part to the size setting."},"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"size":{"type":"number","description":"The size, in byte, to compare to the request part, after any transformations."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["comparisonOperator","fieldToMatch","size","textTransformations"]},"aws-native:wafv2:WebAclSizeConstraintStatementComparisonOperator":{"description":"The operator to use to compare the request part to the size setting.","type":"string","enum":[{"name":"Eq","value":"EQ"},{"name":"Ne","value":"NE"},{"name":"Le","value":"LE"},{"name":"Lt","value":"LT"},{"name":"Ge","value":"GE"},{"name":"Gt","value":"GT"}]},"aws-native:wafv2:WebAclSizeInspectionLimit":{"type":"string","enum":[{"name":"Kb16","value":"KB_16"},{"name":"Kb32","value":"KB_32"},{"name":"Kb48","value":"KB_48"},{"name":"Kb64","value":"KB_64"}]},"aws-native:wafv2:WebAclSqliMatchStatement":{"description":"Sqli Match Statement.","properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"sensitivityLevel":{"$ref":"#/types/aws-native:wafv2:WebAclSensitivityLevel","description":"The sensitivity that you want AWS WAF to use to inspect for SQL injection attacks.\n\n`HIGH` detects more attacks, but might generate more false positives, especially if your web requests frequently contain unusual strings. For information about identifying and mitigating false positives, see [Testing and tuning](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-testing.html) in the *AWS WAF Developer Guide* .\n\n`LOW` is generally a better choice for resources that already have other protections against SQL injection attacks or that have a low tolerance for false positives.\n\nDefault: `LOW`"},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","textTransformations"]},"aws-native:wafv2:WebAclStatement":{"description":"First level statement that contains conditions, such as ByteMatch, SizeConstraint, etc","properties":{"andStatement":{"$ref":"#/types/aws-native:wafv2:WebAclAndStatement","description":"A logical rule statement used to combine other rule statements with AND logic. You provide more than one `Statement` within the `AndStatement` ."},"asnMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclAsnMatchStatement","description":"A rule statement that inspects web traffic based on the Autonomous System Number (ASN) associated with the request's IP address.\n\nFor additional details, see [ASN match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) ."},"byteMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclByteMatchStatement","description":"A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement."},"geoMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclGeoMatchStatement","description":"A rule statement that labels web requests by country and region and that matches against web requests based on country code. A geo match rule labels every request that it inspects regardless of whether it finds a match.\n\n- To manage requests only by country, you can use this statement by itself and specify the countries that you want to match against in the `CountryCodes` array.\n- Otherwise, configure your geo match rule with Count action so that it only labels requests. Then, add one or more label match rules to run after the geo match rule and configure them to match against the geographic labels and handle the requests as needed.\n\nAWS WAF labels requests using the alpha-2 country and region codes from the International Organization for Standardization (ISO) 3166 standard. AWS WAF determines the codes using either the IP address in the web request origin or, if you specify it, the address in the geo match `ForwardedIPConfig` .\n\nIf you use the web request origin, the label formats are `awswaf:clientip:geo:region:\u003cISO country code\u003e-\u003cISO region code\u003e` and `awswaf:clientip:geo:country:\u003cISO country code\u003e` .\n\nIf you use a forwarded IP address, the label formats are `awswaf:forwardedip:geo:region:\u003cISO country code\u003e-\u003cISO region code\u003e` and `awswaf:forwardedip:geo:country:\u003cISO country code\u003e` .\n\nFor additional details, see [Geographic match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-geo-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) ."},"ipSetReferenceStatement":{"$ref":"#/types/aws-native:wafv2:WebAclIpSetReferenceStatement","description":"A rule statement used to detect web requests coming from particular IP addresses or address ranges. To use this, create an `IPSet` that specifies the addresses you want to detect, then use the ARN of that set in this statement.\n\nEach IP set rule statement references an IP set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it."},"labelMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclLabelMatchStatement","description":"A rule statement to match against labels that have been added to the web request by rules that have already run in the web ACL.\n\nThe label match statement provides the label or namespace string to search for. The label string can represent a part or all of the fully qualified label name that had been added to the web request. Fully qualified labels have a prefix, optional namespaces, and label name. The prefix identifies the rule group or web ACL context of the rule that added the label. If you do not provide the fully qualified name in your label match string, AWS WAF performs the search for labels that were added in the same context as the label match statement."},"managedRuleGroupStatement":{"$ref":"#/types/aws-native:wafv2:WebAclManagedRuleGroupStatement","description":"A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names through the API call `ListAvailableManagedRuleGroups` .\n\nYou cannot nest a `ManagedRuleGroupStatement` , for example for use inside a `NotStatement` or `OrStatement` . It can only be referenced as a top-level statement within a rule.\n\n\u003e You are charged additional fees when you use the AWS WAF Bot Control managed rule group `AWSManagedRulesBotControlRuleSet` , the AWS WAF Fraud Control account takeover prevention (ATP) managed rule group `AWSManagedRulesATPRuleSet` , or the AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group `AWSManagedRulesACFPRuleSet` . For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) ."},"notStatement":{"$ref":"#/types/aws-native:wafv2:WebAclNotStatement","description":"A logical rule statement used to negate the results of another rule statement. You provide one `Statement` within the `NotStatement` ."},"orStatement":{"$ref":"#/types/aws-native:wafv2:WebAclOrStatement","description":"A logical rule statement used to combine other rule statements with OR logic. You provide more than one `Statement` within the `OrStatement` ."},"rateBasedStatement":{"$ref":"#/types/aws-native:wafv2:WebAclRateBasedStatement","description":"A rate-based rule counts incoming requests and rate limits requests when they are coming at too fast a rate. The rule categorizes requests according to your aggregation criteria, collects them into aggregation instances, and counts and rate limits the requests for each instance.\n\n\u003e If you change any of these settings in a rule that's currently in use, the change resets the rule's rate limiting counts. This can pause the rule's rate limiting activities for up to a minute. \n\nYou can specify individual aggregation keys, like IP address or HTTP method. You can also specify aggregation key combinations, like IP address and HTTP method, or HTTP method, query argument, and cookie.\n\nEach unique set of values for the aggregation keys that you specify is a separate aggregation instance, with the value from each key contributing to the aggregation instance definition.\n\nFor example, assume the rule evaluates web requests with the following IP address and HTTP method values:\n\n- IP address 10.1.1.1, HTTP method POST\n- IP address 10.1.1.1, HTTP method GET\n- IP address 127.0.0.0, HTTP method POST\n- IP address 10.1.1.1, HTTP method GET\n\nThe rule would create different aggregation instances according to your aggregation criteria, for example:\n\n- If the aggregation criteria is just the IP address, then each individual address is an aggregation instance, and AWS WAF counts requests separately for each. The aggregation instances and request counts for our example would be the following:\n\n- IP address 10.1.1.1: count 3\n- IP address 127.0.0.0: count 1\n- If the aggregation criteria is HTTP method, then each individual HTTP method is an aggregation instance. The aggregation instances and request counts for our example would be the following:\n\n- HTTP method POST: count 2\n- HTTP method GET: count 2\n- If the aggregation criteria is IP address and HTTP method, then each IP address and each HTTP method would contribute to the combined aggregation instance. The aggregation instances and request counts for our example would be the following:\n\n- IP address 10.1.1.1, HTTP method POST: count 1\n- IP address 10.1.1.1, HTTP method GET: count 2\n- IP address 127.0.0.0, HTTP method POST: count 1\n\nFor any n-tuple of aggregation keys, each unique combination of values for the keys defines a separate aggregation instance, which AWS WAF counts and rate-limits individually.\n\nYou can optionally nest another statement inside the rate-based statement, to narrow the scope of the rule so that it only counts and rate limits requests that match the nested statement. You can use this nested scope-down statement in conjunction with your aggregation key specifications or you can just count and rate limit all requests that match the scope-down statement, without additional aggregation. When you choose to just manage all requests that match a scope-down statement, the aggregation instance is singular for the rule.\n\nYou cannot nest a `RateBasedStatement` inside another statement, for example inside a `NotStatement` or `OrStatement` . You can define a `RateBasedStatement` inside a web ACL and inside a rule group.\n\nFor additional information about the options, see [Rate limiting web requests using rate-based rules](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rate-based-rules.html) in the *AWS WAF Developer Guide* .\n\nIf you only aggregate on the individual IP address or forwarded IP address, you can retrieve the list of IP addresses that AWS WAF is currently rate limiting for a rule through the API call `GetRateBasedStatementManagedKeys` . This option is not available for other aggregation configurations.\n\nAWS WAF tracks and manages web requests separately for each instance of a rate-based rule that you use. For example, if you provide the same rate-based rule settings in two web ACLs, each of the two rule statements represents a separate instance of the rate-based rule and gets its own tracking and management by AWS WAF . If you define a rate-based rule inside a rule group, and then use that rule group in multiple places, each use creates a separate instance of the rate-based rule that gets its own tracking and management by AWS WAF ."},"regexMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclRegexMatchStatement","description":"A rule statement used to search web request components for a match against a single regular expression."},"regexPatternSetReferenceStatement":{"$ref":"#/types/aws-native:wafv2:WebAclRegexPatternSetReferenceStatement","description":"A rule statement used to search web request components for matches with regular expressions. To use this, create a `RegexPatternSet` that specifies the expressions that you want to detect, then use the ARN of that set in this statement. A web request matches the pattern set rule statement if the request component matches any of the patterns in the set.\n\nEach regex pattern set rule statement references a regex pattern set. You create and maintain the set independent of your rules. This allows you to use the single set in multiple rules. When you update the referenced set, AWS WAF automatically updates all rules that reference it."},"ruleGroupReferenceStatement":{"$ref":"#/types/aws-native:wafv2:WebAclRuleGroupReferenceStatement","description":"A rule statement used to run the rules that are defined in a `RuleGroup` . To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.\n\nYou cannot nest a `RuleGroupReferenceStatement` , for example for use inside a `NotStatement` or `OrStatement` . You cannot use a rule group reference statement inside another rule group. You can only reference a rule group as a top-level statement within a rule that you define in a web ACL."},"sizeConstraintStatement":{"$ref":"#/types/aws-native:wafv2:WebAclSizeConstraintStatement","description":"A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (\u003e) or less than (\u003c). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.\n\nIf you configure AWS WAF to inspect the request body, AWS WAF inspects only the number of bytes in the body up to the limit for the web ACL and protected resource type. If you know that the request body for your web requests should never exceed the inspection limit, you can use a size constraint statement to block requests that have a larger request body size. For more information about the inspection limits, see `Body` and `JsonBody` settings for the `FieldToMatch` data type.\n\nIf you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI `/logo.jpg` is nine characters long."},"sqliMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclSqliMatchStatement","description":"A rule statement that inspects for malicious SQL code. Attackers insert malicious SQL code into web requests to do things like modify your database or extract data from it."},"xssMatchStatement":{"$ref":"#/types/aws-native:wafv2:WebAclXssMatchStatement","description":"A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers."}},"type":"object"},"aws-native:wafv2:WebAclTag":{"properties":{"key":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag key to describe a category of information, such as \"customer.\" Tag keys are case-sensitive."},"value":{"type":"string","description":"Part of the key:value pair that defines a tag. You can use a tag value to describe a specific value within a category, such as \"companyA\" or \"companyB.\" Tag values are case-sensitive."}},"type":"object"},"aws-native:wafv2:WebAclTextTransformation":{"description":"Text Transformation on the Search String before match.","properties":{"priority":{"type":"integer","description":"Sets the relative processing order for multiple transformations. AWS WAF processes all transformations, from lowest priority to highest, before inspecting the transformed content. The priorities don't need to be consecutive, but they must all be different."},"type":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformationType","description":"For detailed descriptions of each of the transformation types, see [Text transformations](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-transformation.html) in the *AWS WAF Developer Guide* ."}},"type":"object","required":["priority","type"]},"aws-native:wafv2:WebAclTextTransformationType":{"description":"Type of text transformation.","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"CompressWhiteSpace","value":"COMPRESS_WHITE_SPACE"},{"name":"HtmlEntityDecode","value":"HTML_ENTITY_DECODE"},{"name":"Lowercase","value":"LOWERCASE"},{"name":"CmdLine","value":"CMD_LINE"},{"name":"UrlDecode","value":"URL_DECODE"},{"name":"Base64Decode","value":"BASE64_DECODE"},{"name":"HexDecode","value":"HEX_DECODE"},{"name":"Md5","value":"MD5"},{"name":"ReplaceComments","value":"REPLACE_COMMENTS"},{"name":"EscapeSeqDecode","value":"ESCAPE_SEQ_DECODE"},{"name":"SqlHexDecode","value":"SQL_HEX_DECODE"},{"name":"CssDecode","value":"CSS_DECODE"},{"name":"JsDecode","value":"JS_DECODE"},{"name":"NormalizePath","value":"NORMALIZE_PATH"},{"name":"NormalizePathWin","value":"NORMALIZE_PATH_WIN"},{"name":"RemoveNulls","value":"REMOVE_NULLS"},{"name":"ReplaceNulls","value":"REPLACE_NULLS"},{"name":"Base64DecodeExt","value":"BASE64_DECODE_EXT"},{"name":"UrlDecodeUni","value":"URL_DECODE_UNI"},{"name":"Utf8ToUnicode","value":"UTF8_TO_UNICODE"}]},"aws-native:wafv2:WebAclUriFragment":{"description":"The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction","properties":{"fallbackBehavior":{"$ref":"#/types/aws-native:wafv2:WebAclUriFragmentFallbackBehavior","description":"What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:\n\n- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nIf you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.\n\nExample JSON: `{ \"UriFragment\": { \"FallbackBehavior\": \"MATCH\"} }`\n\n\u003e AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* ."}},"type":"object"},"aws-native:wafv2:WebAclUriFragmentFallbackBehavior":{"description":"What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:\n\n- `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.\n- `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.\n- `NO_MATCH` - Treat the web request as not matching the rule statement.\n\nIf you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.\n\nExample JSON: `{ \"UriFragment\": { \"FallbackBehavior\": \"MATCH\"} }`\n\n\u003e AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* .","type":"string","enum":[{"name":"Match","value":"MATCH"},{"name":"NoMatch","value":"NO_MATCH"}]},"aws-native:wafv2:WebAclUsageOfAction":{"type":"string","enum":[{"name":"Enabled","value":"ENABLED"},{"name":"Disabled","value":"DISABLED"}]},"aws-native:wafv2:WebAclVisibilityConfig":{"description":"Visibility Metric of the WebACL.","properties":{"cloudWatchMetricsEnabled":{"type":"boolean","description":"Indicates whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see [AWS WAF Metrics](https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics) in the *AWS WAF Developer Guide* .\n\nFor web ACLs, the metrics are for web requests that have the web ACL default action applied. AWS WAF applies the default action to web requests that pass the inspection of all rules in the web ACL without being either allowed or blocked. For more information,\nsee [The web ACL default action](https://docs.aws.amazon.com/waf/latest/developerguide/web-acl-default-action.html) in the *AWS WAF Developer Guide* ."},"metricName":{"type":"string","description":"A name of the Amazon CloudWatch metric dimension. The name can contain only the characters: A-Z, a-z, 0-9, - (hyphen), and _ (underscore). The name can be from one to 128 characters long. It can't contain whitespace or metric names that are reserved for AWS WAF , for example `All` and `Default_Action` ."},"sampledRequestsEnabled":{"type":"boolean","description":"Indicates whether AWS WAF should store a sampling of the web requests that match the rules. You can view the sampled requests through the AWS WAF console.\n\nIf you configure data protection for the web ACL, the protection applies to the web ACL's sampled web request data.\n\n\u003e Request sampling doesn't provide a field redaction option, and any field redaction that you specify in your logging configuration doesn't affect sampling. You can only exclude fields from request sampling by disabling sampling in the web ACL visibility configuration or by configuring data protection for the web ACL."}},"type":"object","required":["cloudWatchMetricsEnabled","metricName","sampledRequestsEnabled"]},"aws-native:wafv2:WebAclXssMatchStatement":{"description":"Xss Match Statement.","properties":{"fieldToMatch":{"$ref":"#/types/aws-native:wafv2:WebAclFieldToMatch","description":"The part of the web request that you want AWS WAF to inspect."},"textTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclTextTransformation"},"description":"Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, AWS WAF performs all transformations on the content of the request component identified by `FieldToMatch` , starting from the lowest priority setting, before inspecting the content for a match."}},"type":"object","required":["fieldToMatch","textTransformations"]},"aws-native:wisdom:AiAgentAiAgentAssociationConfigurationType":{"type":"string","enum":[{"name":"KnowledgeBase","value":"KNOWLEDGE_BASE"}]},"aws-native:wisdom:AiAgentAiAgentConfiguration0Properties":{"properties":{"manualSearchAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentManualSearchAiAgentConfiguration"}},"type":"object","required":["manualSearchAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration1Properties":{"properties":{"answerRecommendationAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentAnswerRecommendationAiAgentConfiguration"}},"type":"object","required":["answerRecommendationAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration2Properties":{"properties":{"selfServiceAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentSelfServiceAiAgentConfiguration"}},"type":"object","required":["selfServiceAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration3Properties":{"properties":{"emailResponseAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentEmailResponseAiAgentConfiguration"}},"type":"object","required":["emailResponseAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration4Properties":{"properties":{"emailOverviewAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentEmailOverviewAiAgentConfiguration"}},"type":"object","required":["emailOverviewAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration5Properties":{"properties":{"emailGenerativeAnswerAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentEmailGenerativeAnswerAiAgentConfiguration"}},"type":"object","required":["emailGenerativeAnswerAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration6Properties":{"properties":{"orchestrationAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentOrchestrationAiAgentConfiguration"}},"type":"object","required":["orchestrationAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration7Properties":{"properties":{"noteTakingAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentNoteTakingAiAgentConfiguration"}},"type":"object","required":["noteTakingAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentConfiguration8Properties":{"properties":{"caseSummarizationAiAgentConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentCaseSummarizationAiAgentConfiguration"}},"type":"object","required":["caseSummarizationAiAgentConfiguration"]},"aws-native:wisdom:AiAgentAiAgentType":{"type":"string","enum":[{"name":"ManualSearch","value":"MANUAL_SEARCH"},{"name":"AnswerRecommendation","value":"ANSWER_RECOMMENDATION"},{"name":"SelfService","value":"SELF_SERVICE"},{"name":"EmailResponse","value":"EMAIL_RESPONSE"},{"name":"EmailOverview","value":"EMAIL_OVERVIEW"},{"name":"EmailGenerativeAnswer","value":"EMAIL_GENERATIVE_ANSWER"},{"name":"Orchestration","value":"ORCHESTRATION"},{"name":"NoteTaking","value":"NOTE_TAKING"},{"name":"CaseSummarization","value":"CASE_SUMMARIZATION"}]},"aws-native:wisdom:AiAgentAnnotation":{"type":"object"},"aws-native:wisdom:AiAgentAnswerRecommendationAiAgentConfiguration":{"properties":{"answerGenerationAiGuardrailId":{"type":"string"},"answerGenerationAiPromptId":{"type":"string"},"associationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentAssociationConfiguration"}},"intentLabelingGenerationAiPromptId":{"type":"string"},"locale":{"type":"string"},"queryReformulationAiPromptId":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentAssociationConfiguration":{"properties":{"associationConfigurationData":{"$ref":"#/types/aws-native:wisdom:AiAgentAssociationConfigurationDataProperties"},"associationId":{"type":"string"},"associationType":{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentAssociationConfigurationType"}},"type":"object"},"aws-native:wisdom:AiAgentAssociationConfigurationData0Properties":{"properties":{"knowledgeBaseAssociationConfigurationData":{"$ref":"#/types/aws-native:wisdom:AiAgentKnowledgeBaseAssociationConfigurationData"}},"type":"object","required":["knowledgeBaseAssociationConfigurationData"]},"aws-native:wisdom:AiAgentAssociationConfigurationDataProperties":{"properties":{"knowledgeBaseAssociationConfigurationData":{"$ref":"#/types/aws-native:wisdom:AiAgentKnowledgeBaseAssociationConfigurationData"}},"type":"object","required":["knowledgeBaseAssociationConfigurationData"]},"aws-native:wisdom:AiAgentCaseSummarizationAiAgentConfiguration":{"properties":{"caseSummarizationAiGuardrailId":{"type":"string"},"caseSummarizationAiPromptId":{"type":"string"},"locale":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentEmailGenerativeAnswerAiAgentConfiguration":{"properties":{"associationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentAssociationConfiguration"}},"emailGenerativeAnswerAiPromptId":{"type":"string"},"emailQueryReformulationAiPromptId":{"type":"string"},"locale":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentEmailOverviewAiAgentConfiguration":{"properties":{"emailOverviewAiPromptId":{"type":"string"},"locale":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentEmailResponseAiAgentConfiguration":{"properties":{"associationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentAssociationConfiguration"}},"emailQueryReformulationAiPromptId":{"type":"string"},"emailResponseAiPromptId":{"type":"string"},"locale":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentKnowledgeBaseAssociationConfigurationData":{"properties":{"contentTagFilter":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:AiAgentTagFilter0Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentTagFilter1Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentTagFilter2Properties"}]},"maxResults":{"type":"number"},"overrideKnowledgeBaseSearchType":{"$ref":"#/types/aws-native:wisdom:AiAgentKnowledgeBaseSearchType"}},"type":"object"},"aws-native:wisdom:AiAgentKnowledgeBaseSearchType":{"type":"string","enum":[{"name":"Hybrid","value":"HYBRID"},{"name":"Semantic","value":"SEMANTIC"}]},"aws-native:wisdom:AiAgentManualSearchAiAgentConfiguration":{"properties":{"answerGenerationAiGuardrailId":{"type":"string"},"answerGenerationAiPromptId":{"type":"string"},"associationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentAssociationConfiguration"}},"locale":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentNoteTakingAiAgentConfiguration":{"properties":{"locale":{"type":"string"},"noteTakingAiGuardrailId":{"type":"string"},"noteTakingAiPromptId":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentOrCondition0Properties":{"properties":{"andConditions":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentTagCondition"}}},"type":"object","required":["andConditions"]},"aws-native:wisdom:AiAgentOrCondition1Properties":{"properties":{"tagCondition":{"$ref":"#/types/aws-native:wisdom:AiAgentTagCondition"}},"type":"object","required":["tagCondition"]},"aws-native:wisdom:AiAgentOrchestrationAiAgentConfiguration":{"properties":{"connectInstanceArn":{"type":"string"},"locale":{"type":"string"},"orchestrationAiGuardrailId":{"type":"string"},"orchestrationAiPromptId":{"type":"string"},"toolConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentToolConfiguration"}}},"type":"object","required":["orchestrationAiPromptId"]},"aws-native:wisdom:AiAgentSelfServiceAiAgentConfiguration":{"properties":{"associationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentAssociationConfiguration"}},"selfServiceAiGuardrailId":{"type":"string"},"selfServiceAnswerGenerationAiPromptId":{"type":"string"},"selfServicePreProcessingAiPromptId":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentTagCondition":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key"]},"aws-native:wisdom:AiAgentTagFilter0Properties":{"properties":{"tagCondition":{"$ref":"#/types/aws-native:wisdom:AiAgentTagCondition"}},"type":"object","required":["tagCondition"]},"aws-native:wisdom:AiAgentTagFilter1Properties":{"properties":{"andConditions":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentTagCondition"}}},"type":"object","required":["andConditions"]},"aws-native:wisdom:AiAgentTagFilter2Properties":{"properties":{"orConditions":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:AiAgentOrCondition0Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentOrCondition1Properties"}]}}},"type":"object","required":["orConditions"]},"aws-native:wisdom:AiAgentToolConfiguration":{"properties":{"annotations":{"$ref":"#/types/aws-native:wisdom:AiAgentAnnotation"},"description":{"type":"string"},"inputSchema":{"$ref":"pulumi.json#/Any"},"instruction":{"$ref":"#/types/aws-native:wisdom:AiAgentToolInstruction"},"outputFilters":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOutputFilter"}},"outputSchema":{"$ref":"pulumi.json#/Any"},"overrideInputValues":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOverrideInputValue"}},"title":{"type":"string"},"toolId":{"type":"string"},"toolName":{"type":"string"},"toolType":{"$ref":"#/types/aws-native:wisdom:AiAgentToolType"},"userInteractionConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentUserInteractionConfiguration"}},"type":"object","required":["toolName","toolType"]},"aws-native:wisdom:AiAgentToolInstruction":{"properties":{"examples":{"type":"array","items":{"type":"string"}},"instruction":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentToolOutputConfiguration":{"properties":{"outputVariableNameOverride":{"type":"string"},"sessionDataNamespace":{"type":"string"}},"type":"object"},"aws-native:wisdom:AiAgentToolOutputFilter":{"properties":{"jsonPath":{"type":"string"},"outputConfiguration":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOutputConfiguration"}},"type":"object","required":["jsonPath"]},"aws-native:wisdom:AiAgentToolOverrideConstantInputValue":{"properties":{"type":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOverrideInputValueType"},"value":{"type":"string"}},"type":"object","required":["type","value"]},"aws-native:wisdom:AiAgentToolOverrideInputValue":{"properties":{"jsonPath":{"type":"string"},"value":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOverrideInputValueConfigurationProperties"}},"type":"object","required":["jsonPath","value"]},"aws-native:wisdom:AiAgentToolOverrideInputValueConfiguration0Properties":{"properties":{"constant":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOverrideConstantInputValue"}},"type":"object","required":["constant"]},"aws-native:wisdom:AiAgentToolOverrideInputValueConfigurationProperties":{"properties":{"constant":{"$ref":"#/types/aws-native:wisdom:AiAgentToolOverrideConstantInputValue"}},"type":"object","required":["constant"]},"aws-native:wisdom:AiAgentToolOverrideInputValueType":{"type":"string","enum":[{"name":"String","value":"STRING"},{"name":"Number","value":"NUMBER"},{"name":"JsonString","value":"JSON_STRING"}]},"aws-native:wisdom:AiAgentToolType":{"type":"string","enum":[{"name":"ModelContextProtocol","value":"MODEL_CONTEXT_PROTOCOL"},{"name":"ReturnToControl","value":"RETURN_TO_CONTROL"},{"name":"Constant","value":"CONSTANT"}]},"aws-native:wisdom:AiAgentUserInteractionConfiguration":{"properties":{"isUserConfirmationRequired":{"type":"boolean"}},"type":"object"},"aws-native:wisdom:AiGuardrailAiGuardrailContentPolicyConfig":{"description":"Content policy config for a guardrail.","properties":{"filtersConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailContentFilterConfig"},"description":"List of content filter configs in content policy."}},"type":"object","required":["filtersConfig"]},"aws-native:wisdom:AiGuardrailAiGuardrailContextualGroundingPolicyConfig":{"description":"Contextual grounding policy config for a guardrail.","properties":{"filtersConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailContextualGroundingFilterConfig"},"description":"List of contextual grounding filter configs."}},"type":"object","required":["filtersConfig"]},"aws-native:wisdom:AiGuardrailAiGuardrailSensitiveInformationPolicyConfig":{"description":"Sensitive information policy config for a guardrail.","properties":{"piiEntitiesConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailPiiEntityConfig"},"description":"List of entities."},"regexesConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailRegexConfig"},"description":"List of regex."}},"type":"object"},"aws-native:wisdom:AiGuardrailAiGuardrailTopicPolicyConfig":{"description":"Topic policy config for a guardrail.","properties":{"topicsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailTopicConfig"},"description":"List of topic configs in topic policy."}},"type":"object","required":["topicsConfig"]},"aws-native:wisdom:AiGuardrailAiGuardrailWordPolicyConfig":{"description":"Word policy config for a guardrail.","properties":{"managedWordListsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailManagedWordsConfig"},"description":"A config for the list of managed words."},"wordsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailWordConfig"},"description":"List of custom word configs."}},"type":"object"},"aws-native:wisdom:AiGuardrailGuardrailContentFilterConfig":{"description":"Content filter config in content policy.","properties":{"inputStrength":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailFilterStrength","description":"The strength of the input for the guardrail content filter."},"outputStrength":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailFilterStrength","description":"The output strength of the guardrail content filter."},"type":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailContentFilterType","description":"The type of the guardrail content filter."}},"type":"object","required":["inputStrength","outputStrength","type"]},"aws-native:wisdom:AiGuardrailGuardrailContentFilterType":{"description":"Type of text to text filter in content policy","type":"string","enum":[{"name":"Sexual","value":"SEXUAL"},{"name":"Violence","value":"VIOLENCE"},{"name":"Hate","value":"HATE"},{"name":"Insults","value":"INSULTS"},{"name":"Misconduct","value":"MISCONDUCT"},{"name":"PromptAttack","value":"PROMPT_ATTACK"}]},"aws-native:wisdom:AiGuardrailGuardrailContextualGroundingFilterConfig":{"description":"A config for grounding filter.","properties":{"threshold":{"type":"number","description":"The threshold for this filter."},"type":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailContextualGroundingFilterType","description":"The type of this filter."}},"type":"object","required":["threshold","type"]},"aws-native:wisdom:AiGuardrailGuardrailContextualGroundingFilterType":{"description":"Type of contextual grounding filter","type":"string","enum":[{"name":"Grounding","value":"GROUNDING"},{"name":"Relevance","value":"RELEVANCE"}]},"aws-native:wisdom:AiGuardrailGuardrailFilterStrength":{"description":"Strength for filters","type":"string","enum":[{"name":"None","value":"NONE"},{"name":"Low","value":"LOW"},{"name":"Medium","value":"MEDIUM"},{"name":"High","value":"HIGH"}]},"aws-native:wisdom:AiGuardrailGuardrailManagedWordsConfig":{"description":"A managed words config.","properties":{"type":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailManagedWordsType","description":"The type of guardrail managed words."}},"type":"object","required":["type"]},"aws-native:wisdom:AiGuardrailGuardrailManagedWordsType":{"description":"Options for managed words.","type":"string","enum":[{"name":"Profanity","value":"PROFANITY"}]},"aws-native:wisdom:AiGuardrailGuardrailPiiEntityConfig":{"description":"Pii entity configuration.","properties":{"action":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailSensitiveInformationAction","description":"The action of guardrail PII entity configuration."},"type":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailPiiEntityType","description":"Configure AI Guardrail type when the PII entity is detected.\n\nThe following PIIs are used to block or mask sensitive information:\n\n- *General*\n\n- *ADDRESS*\n\nA physical address, such as \"100 Main Street, Anytown, USA\" or \"Suite #12, Building 123\". An address can include information such as the street, building, location, city, state, country, county, zip code, precinct, and neighborhood.\n- *AGE*\n\nAn individual's age, including the quantity and unit of time. For example, in the phrase \"I am 40 years old,\" Guarrails recognizes \"40 years\" as an age.\n- *NAME*\n\nAn individual's name. This entity type does not include titles, such as Dr., Mr., Mrs., or Miss. AI Guardrail doesn't apply this entity type to names that are part of organizations or addresses. For example, AI Guardrail recognizes the \"John Doe Organization\" as an organization, and it recognizes \"Jane Doe Street\" as an address.\n- *EMAIL*\n\nAn email address, such as *marymajor@email.com* .\n- *PHONE*\n\nA phone number. This entity type also includes fax and pager numbers.\n- *USERNAME*\n\nA user name that identifies an account, such as a login name, screen name, nick name, or handle.\n- *PASSWORD*\n\nAn alphanumeric string that is used as a password, such as \"* *very20special#pass** \".\n- *DRIVER_ID*\n\nThe number assigned to a driver's license, which is an official document permitting an individual to operate one or more motorized vehicles on a public road. A driver's license number consists of alphanumeric characters.\n- *LICENSE_PLATE*\n\nA license plate for a vehicle is issued by the state or country where the vehicle is registered. The format for passenger vehicles is typically five to eight digits, consisting of upper-case letters and numbers. The format varies depending on the location of the issuing state or country.\n- *VEHICLE_IDENTIFICATION_NUMBER*\n\nA Vehicle Identification Number (VIN) uniquely identifies a vehicle. VIN content and format are defined in the *ISO 3779* specification. Each country has specific codes and formats for VINs.\n- *Finance*\n\n- *CREDIT_DEBIT_CARD_CVV*\n\nA three-digit card verification code (CVV) that is present on VISA, MasterCard, and Discover credit and debit cards. For American Express credit or debit cards, the CVV is a four-digit numeric code.\n- *CREDIT_DEBIT_CARD_EXPIRY*\n\nThe expiration date for a credit or debit card. This number is usually four digits long and is often formatted as *month/year* or *MM/YY* . AI Guardrail recognizes expiration dates such as *01/21* , *01/2021* , and *Jan 2021* .\n- *CREDIT_DEBIT_CARD_NUMBER*\n\nThe number for a credit or debit card. These numbers can vary from 13 to 16 digits in length. However, Amazon Comprehend also recognizes credit or debit card numbers when only the last four digits are present.\n- *PIN*\n\nA four-digit personal identification number (PIN) with which you can access your bank account.\n- *INTERNATIONAL_BANK_ACCOUNT_NUMBER*\n\nAn International Bank Account Number has specific formats in each country. For more information, see [www.iban.com/structure](https://docs.aws.amazon.com/https://www.iban.com/structure) .\n- *SWIFT_CODE*\n\nA SWIFT code is a standard format of Bank Identifier Code (BIC) used to specify a particular bank or branch. Banks use these codes for money transfers such as international wire transfers.\n\nSWIFT codes consist of eight or 11 characters. The 11-digit codes refer to specific branches, while eight-digit codes (or 11-digit codes ending in 'XXX') refer to the head or primary office.\n- *IT*\n\n- *IP_ADDRESS*\n\nAn IPv4 address, such as *198.51.100.0* .\n- *MAC_ADDRESS*\n\nA *media access control* (MAC) address is a unique identifier assigned to a network interface controller (NIC).\n- *URL*\n\nA web address, such as *www.example.com* .\n- *AWS_ACCESS_KEY*\n\nA unique identifier that's associated with a secret access key; you use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *AWS_SECRET_KEY*\n\nA unique identifier that's associated with an access key. You use the access key ID and secret access key to sign programmatic AWS requests cryptographically.\n- *USA specific*\n\n- *US_BANK_ACCOUNT_NUMBER*\n\nA US bank account number, which is typically 10 to 12 digits long.\n- *US_BANK_ROUTING_NUMBER*\n\nA US bank account routing number. These are typically nine digits long,\n- *US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER*\n\nA US Individual Taxpayer Identification Number (ITIN) is a nine-digit number that starts with a \"9\" and contain a \"7\" or \"8\" as the fourth digit. An ITIN can be formatted with a space or a dash after the third and forth digits.\n- *US_PASSPORT_NUMBER*\n\nA US passport number. Passport numbers range from six to nine alphanumeric characters.\n- *US_SOCIAL_SECURITY_NUMBER*\n\nA US Social Security Number (SSN) is a nine-digit number that is issued to US citizens, permanent residents, and temporary working residents.\n- *Canada specific*\n\n- *CA_HEALTH_NUMBER*\n\nA Canadian Health Service Number is a 10-digit unique identifier, required for individuals to access healthcare benefits.\n- *CA_SOCIAL_INSURANCE_NUMBER*\n\nA Canadian Social Insurance Number (SIN) is a nine-digit unique identifier, required for individuals to access government programs and benefits.\n\nThe SIN is formatted as three groups of three digits, such as *123-456-789* . A SIN can be validated through a simple check-digit process called the [Luhn algorithm](https://docs.aws.amazon.com/https://www.wikipedia.org/wiki/Luhn_algorithm) .\n- *UK Specific*\n\n- *UK_NATIONAL_HEALTH_SERVICE_NUMBER*\n\nA UK National Health Service Number is a 10-17 digit number, such as *485 555 3456* . The current system formats the 10-digit number with spaces after the third and sixth digits. The final digit is an error-detecting checksum.\n- *UK_NATIONAL_INSURANCE_NUMBER*\n\nA UK National Insurance Number (NINO) provides individuals with access to National Insurance (social security) benefits. It is also used for some purposes in the UK tax system.\n\nThe number is nine digits long and starts with two letters, followed by six numbers and one letter. A NINO can be formatted with a space or a dash after the two letters and after the second, forth, and sixth digits.\n- *UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER*\n\nA UK Unique Taxpayer Reference (UTR) is a 10-digit number that identifies a taxpayer or a business.\n- *Custom*\n\n- *Regex filter* - You can use a regular expressions to define patterns for an AI Guardrail to recognize and act upon such as serial number, booking ID etc.."}},"type":"object","required":["action","type"]},"aws-native:wisdom:AiGuardrailGuardrailPiiEntityType":{"description":"The currently supported PII entities","type":"string","enum":[{"name":"Address","value":"ADDRESS"},{"name":"Age","value":"AGE"},{"name":"AwsAccessKey","value":"AWS_ACCESS_KEY"},{"name":"AwsSecretKey","value":"AWS_SECRET_KEY"},{"name":"CaHealthNumber","value":"CA_HEALTH_NUMBER"},{"name":"CaSocialInsuranceNumber","value":"CA_SOCIAL_INSURANCE_NUMBER"},{"name":"CreditDebitCardCvv","value":"CREDIT_DEBIT_CARD_CVV"},{"name":"CreditDebitCardExpiry","value":"CREDIT_DEBIT_CARD_EXPIRY"},{"name":"CreditDebitCardNumber","value":"CREDIT_DEBIT_CARD_NUMBER"},{"name":"DriverId","value":"DRIVER_ID"},{"name":"Email","value":"EMAIL"},{"name":"InternationalBankAccountNumber","value":"INTERNATIONAL_BANK_ACCOUNT_NUMBER"},{"name":"IpAddress","value":"IP_ADDRESS"},{"name":"LicensePlate","value":"LICENSE_PLATE"},{"name":"MacAddress","value":"MAC_ADDRESS"},{"name":"Name","value":"NAME"},{"name":"Password","value":"PASSWORD"},{"name":"Phone","value":"PHONE"},{"name":"Pin","value":"PIN"},{"name":"SwiftCode","value":"SWIFT_CODE"},{"name":"UkNationalHealthServiceNumber","value":"UK_NATIONAL_HEALTH_SERVICE_NUMBER"},{"name":"UkNationalInsuranceNumber","value":"UK_NATIONAL_INSURANCE_NUMBER"},{"name":"UkUniqueTaxpayerReferenceNumber","value":"UK_UNIQUE_TAXPAYER_REFERENCE_NUMBER"},{"name":"Url","value":"URL"},{"name":"Username","value":"USERNAME"},{"name":"UsBankAccountNumber","value":"US_BANK_ACCOUNT_NUMBER"},{"name":"UsBankRoutingNumber","value":"US_BANK_ROUTING_NUMBER"},{"name":"UsIndividualTaxIdentificationNumber","value":"US_INDIVIDUAL_TAX_IDENTIFICATION_NUMBER"},{"name":"UsPassportNumber","value":"US_PASSPORT_NUMBER"},{"name":"UsSocialSecurityNumber","value":"US_SOCIAL_SECURITY_NUMBER"},{"name":"VehicleIdentificationNumber","value":"VEHICLE_IDENTIFICATION_NUMBER"}]},"aws-native:wisdom:AiGuardrailGuardrailRegexConfig":{"description":"A regex configuration.","properties":{"action":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailSensitiveInformationAction","description":"The action of the guardrail regex configuration."},"description":{"type":"string","description":"The regex description."},"name":{"type":"string","description":"The regex name."},"pattern":{"type":"string","description":"The regex pattern."}},"type":"object","required":["action","name","pattern"]},"aws-native:wisdom:AiGuardrailGuardrailSensitiveInformationAction":{"description":"Options for sensitive information action.","type":"string","enum":[{"name":"Block","value":"BLOCK"},{"name":"Anonymize","value":"ANONYMIZE"}]},"aws-native:wisdom:AiGuardrailGuardrailTopicConfig":{"description":"Topic config in topic policy.","properties":{"definition":{"type":"string","description":"Definition of topic in topic policy"},"examples":{"type":"array","items":{"type":"string"},"description":"List of text examples"},"name":{"type":"string","description":"Name of topic in topic policy"},"type":{"$ref":"#/types/aws-native:wisdom:AiGuardrailGuardrailTopicType","description":"Type of topic in a policy."}},"type":"object","required":["definition","name","type"]},"aws-native:wisdom:AiGuardrailGuardrailTopicType":{"description":"Type of topic in a policy","type":"string","enum":[{"name":"Deny","value":"DENY"}]},"aws-native:wisdom:AiGuardrailGuardrailWordConfig":{"description":"A custom word config.","properties":{"text":{"type":"string","description":"The custom word text."}},"type":"object","required":["text"]},"aws-native:wisdom:AiPromptAiPromptApiFormat":{"type":"string","enum":[{"name":"AnthropicClaudeMessages","value":"ANTHROPIC_CLAUDE_MESSAGES"},{"name":"AnthropicClaudeTextCompletions","value":"ANTHROPIC_CLAUDE_TEXT_COMPLETIONS"},{"name":"Messages","value":"MESSAGES"},{"name":"TextCompletions","value":"TEXT_COMPLETIONS"}]},"aws-native:wisdom:AiPromptAiPromptTemplateConfiguration":{"type":"object"},"aws-native:wisdom:AiPromptAiPromptTemplateType":{"type":"string","enum":[{"name":"Text","value":"TEXT"}]},"aws-native:wisdom:AiPromptAiPromptType":{"type":"string","enum":[{"name":"AnswerGeneration","value":"ANSWER_GENERATION"},{"name":"IntentLabelingGeneration","value":"INTENT_LABELING_GENERATION"},{"name":"QueryReformulation","value":"QUERY_REFORMULATION"},{"name":"SelfServicePreProcessing","value":"SELF_SERVICE_PRE_PROCESSING"},{"name":"SelfServiceAnswerGeneration","value":"SELF_SERVICE_ANSWER_GENERATION"},{"name":"EmailResponse","value":"EMAIL_RESPONSE"},{"name":"EmailOverview","value":"EMAIL_OVERVIEW"},{"name":"EmailGenerativeAnswer","value":"EMAIL_GENERATIVE_ANSWER"},{"name":"EmailQueryReformulation","value":"EMAIL_QUERY_REFORMULATION"},{"name":"Orchestration","value":"ORCHESTRATION"},{"name":"NoteTaking","value":"NOTE_TAKING"},{"name":"CaseSummarization","value":"CASE_SUMMARIZATION"}]},"aws-native:wisdom:AssistantAssociationAssociationData0Properties":{"properties":{"knowledgeBaseId":{"type":"string"}},"type":"object","required":["knowledgeBaseId"]},"aws-native:wisdom:AssistantAssociationAssociationData1Properties":{"properties":{"externalBedrockKnowledgeBaseConfig":{"$ref":"#/types/aws-native:wisdom:AssistantAssociationExternalBedrockKnowledgeBaseConfig"}},"type":"object","required":["externalBedrockKnowledgeBaseConfig"]},"aws-native:wisdom:AssistantAssociationAssociationType":{"type":"string","enum":[{"name":"KnowledgeBase","value":"KNOWLEDGE_BASE"},{"name":"ExternalBedrockKnowledgeBase","value":"EXTERNAL_BEDROCK_KNOWLEDGE_BASE"}]},"aws-native:wisdom:AssistantAssociationExternalBedrockKnowledgeBaseConfig":{"properties":{"accessRoleArn":{"type":"string"},"bedrockKnowledgeBaseArn":{"type":"string"}},"type":"object","required":["accessRoleArn","bedrockKnowledgeBaseArn"]},"aws-native:wisdom:AssistantAssociationTag":{"properties":{"key":{"type":"string","description":"The key-value string map. The valid character set is `[a-zA-Z+-=._:/]` . The tag key can be up to 128 characters and must not start with `aws:` ."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object","required":["key","value"]},"aws-native:wisdom:AssistantServerSideEncryptionConfiguration":{"properties":{"kmsKeyId":{"type":"string","description":"The customer managed key used for encryption. The customer managed key must have a policy that allows `kms:CreateGrant` and `kms:DescribeKey` permissions to the IAM identity using the key to invoke Wisdom. To use Wisdom with chat, the key policy must also allow `kms:Decrypt` , `kms:GenerateDataKey*` , and `kms:DescribeKey` permissions to the `connect.amazonaws.com` service principal. For more information about setting up a customer managed key for Wisdom, see [Enable Amazon Connect Wisdom for your instance](https://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.html) . For information about valid ID values, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id) in the *AWS Key Management Service Developer Guide* ."}},"type":"object"},"aws-native:wisdom:AssistantTag":{"properties":{"key":{"type":"string","description":"The key-value string map. The valid character set is `[a-zA-Z+-=._:/]` . The tag key can be up to 128 characters and must not start with `aws:` ."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object","required":["key","value"]},"aws-native:wisdom:AssistantType":{"type":"string","enum":[{"name":"Agent","value":"AGENT"}]},"aws-native:wisdom:KnowledgeBaseAppIntegrationsConfiguration":{"properties":{"appIntegrationArn":{"type":"string"},"objectFields":{"type":"array","items":{"type":"string"}}},"type":"object","required":["appIntegrationArn"]},"aws-native:wisdom:KnowledgeBaseBedrockFoundationModelConfiguration":{"properties":{"modelArn":{"type":"string","description":"The model ARN of the Bedrock foundation model."},"parsingPrompt":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseBedrockFoundationModelConfigurationParsingPromptProperties","description":"The parsing prompt of the Bedrock foundation model configuration."}},"type":"object","required":["modelArn"]},"aws-native:wisdom:KnowledgeBaseBedrockFoundationModelConfigurationParsingPromptProperties":{"description":"The parsing prompt of the Bedrock foundation model configuration.","properties":{"parsingPromptText":{"type":"string"}},"type":"object","required":["parsingPromptText"]},"aws-native:wisdom:KnowledgeBaseFixedSizeChunkingConfiguration":{"properties":{"maxTokens":{"type":"number","description":"The maximum number of tokens to include in a chunk."},"overlapPercentage":{"type":"number","description":"The percentage of overlap between adjacent chunks of a data source."}},"type":"object","required":["maxTokens","overlapPercentage"]},"aws-native:wisdom:KnowledgeBaseHierarchicalChunkingConfiguration":{"properties":{"levelConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseHierarchicalChunkingLevelConfiguration"},"description":"Token settings for each layer."},"overlapTokens":{"type":"number","description":"The number of tokens to repeat across chunks in the same layer."}},"type":"object","required":["levelConfigurations","overlapTokens"]},"aws-native:wisdom:KnowledgeBaseHierarchicalChunkingLevelConfiguration":{"properties":{"maxTokens":{"type":"number","description":"The maximum number of tokens that a chunk can contain in this layer."}},"type":"object","required":["maxTokens"]},"aws-native:wisdom:KnowledgeBaseManagedSourceConfiguration0Properties":{"properties":{"webCrawlerConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseWebCrawlerConfiguration"}},"type":"object","required":["webCrawlerConfiguration"]},"aws-native:wisdom:KnowledgeBaseManagedSourceConfigurationProperties":{"properties":{"webCrawlerConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseWebCrawlerConfiguration"}},"type":"object","required":["webCrawlerConfiguration"]},"aws-native:wisdom:KnowledgeBaseRenderingConfiguration":{"properties":{"templateUri":{"type":"string","description":"A URI template containing exactly one variable in `${variableName}` format. This can only be set for `EXTERNAL` knowledge bases. For Salesforce, ServiceNow, and Zendesk, the variable must be one of the following:\n\n- Salesforce: `Id` , `ArticleNumber` , `VersionNumber` , `Title` , `PublishStatus` , or `IsDeleted`\n- ServiceNow: `number` , `short_description` , `sys_mod_count` , `workflow_state` , or `active`\n- Zendesk: `id` , `title` , `updated_at` , or `draft`\n\nThe variable is replaced with the actual value for a piece of content when calling [GetContent](https://docs.aws.amazon.com/amazon-q-connect/latest/APIReference/API_GetContent.html) ."}},"type":"object"},"aws-native:wisdom:KnowledgeBaseSeedUrl":{"properties":{"url":{"type":"string"}},"type":"object"},"aws-native:wisdom:KnowledgeBaseSemanticChunkingConfiguration":{"properties":{"breakpointPercentileThreshold":{"type":"number","description":"The dissimilarity threshold for splitting chunks."},"bufferSize":{"type":"number","description":"The buffer size."},"maxTokens":{"type":"number","description":"The maximum number of tokens that a chunk can contain."}},"type":"object","required":["breakpointPercentileThreshold","bufferSize","maxTokens"]},"aws-native:wisdom:KnowledgeBaseServerSideEncryptionConfiguration":{"properties":{"kmsKeyId":{"type":"string","description":"The customer managed key used for encryption.\n\nThis customer managed key must have a policy that allows `kms:CreateGrant` and `kms:DescribeKey` permissions to the IAM identity using the key to invoke Wisdom.\n\nFor more information about setting up a customer managed key for Wisdom, see [Enable Amazon Connect Wisdom for your instance](https://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.html) . For information about valid ID values, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id) ."}},"type":"object"},"aws-native:wisdom:KnowledgeBaseSourceConfiguration0Properties":{"properties":{"appIntegrations":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseAppIntegrationsConfiguration"}},"type":"object","required":["appIntegrations"]},"aws-native:wisdom:KnowledgeBaseSourceConfiguration1Properties":{"properties":{"managedSourceConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseManagedSourceConfigurationProperties"}},"type":"object","required":["managedSourceConfiguration"]},"aws-native:wisdom:KnowledgeBaseTag":{"properties":{"key":{"type":"string","description":"The key-value string map. The valid character set is `[a-zA-Z+-=._:/]` . The tag key can be up to 128 characters and must not start with `aws:` ."},"value":{"type":"string","description":"The tag value can be up to 256 characters."}},"type":"object","required":["key","value"]},"aws-native:wisdom:KnowledgeBaseType":{"type":"string","enum":[{"name":"External","value":"EXTERNAL"},{"name":"Custom","value":"CUSTOM"},{"name":"MessageTemplates","value":"MESSAGE_TEMPLATES"},{"name":"Managed","value":"MANAGED"},{"name":"QuickResponses","value":"QUICK_RESPONSES"}]},"aws-native:wisdom:KnowledgeBaseVectorIngestionConfiguration":{"properties":{"chunkingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationChunkingConfigurationProperties","description":"Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried."},"parsingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationParsingConfigurationProperties","description":"A custom parser for data source documents."}},"type":"object"},"aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationChunkingConfigurationProperties":{"description":"Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.","properties":{"chunkingStrategy":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationChunkingConfigurationPropertiesChunkingStrategy"},"fixedSizeChunkingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseFixedSizeChunkingConfiguration"},"hierarchicalChunkingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseHierarchicalChunkingConfiguration"},"semanticChunkingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseSemanticChunkingConfiguration"}},"type":"object","required":["chunkingStrategy"]},"aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationChunkingConfigurationPropertiesChunkingStrategy":{"type":"string","enum":[{"name":"FixedSize","value":"FIXED_SIZE"},{"name":"None","value":"NONE"},{"name":"Hierarchical","value":"HIERARCHICAL"},{"name":"Semantic","value":"SEMANTIC"}]},"aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationParsingConfigurationProperties":{"description":"A custom parser for data source documents.","properties":{"bedrockFoundationModelConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseBedrockFoundationModelConfiguration"},"parsingStrategy":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationParsingConfigurationPropertiesParsingStrategy"}},"type":"object","required":["parsingStrategy"]},"aws-native:wisdom:KnowledgeBaseVectorIngestionConfigurationParsingConfigurationPropertiesParsingStrategy":{"type":"string","enum":[{"name":"BedrockFoundationModel","value":"BEDROCK_FOUNDATION_MODEL"}]},"aws-native:wisdom:KnowledgeBaseWebCrawlerConfiguration":{"properties":{"crawlerLimits":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseWebCrawlerConfigurationCrawlerLimitsProperties"},"exclusionFilters":{"type":"array","items":{"type":"string"}},"inclusionFilters":{"type":"array","items":{"type":"string"}},"scope":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseWebCrawlerConfigurationScope"},"urlConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseWebCrawlerConfigurationUrlConfigurationProperties"}},"type":"object","required":["urlConfiguration"]},"aws-native:wisdom:KnowledgeBaseWebCrawlerConfigurationCrawlerLimitsProperties":{"properties":{"rateLimit":{"type":"number"}},"type":"object"},"aws-native:wisdom:KnowledgeBaseWebCrawlerConfigurationScope":{"type":"string","enum":[{"name":"HostOnly","value":"HOST_ONLY"},{"name":"Subdomains","value":"SUBDOMAINS"}]},"aws-native:wisdom:KnowledgeBaseWebCrawlerConfigurationUrlConfigurationProperties":{"properties":{"seedUrls":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseSeedUrl"}}},"type":"object"},"aws-native:wisdom:MessageTemplateAgentAttributes":{"description":"The agent attributes that are used with the message template.","properties":{"firstName":{"type":"string","description":"The agent’s first name as entered in their Amazon Connect user account."},"lastName":{"type":"string","description":"The agent’s last name as entered in their Amazon Connect user account."}},"type":"object"},"aws-native:wisdom:MessageTemplateAttachment":{"properties":{"attachmentId":{"type":"string","description":"The identifier of the attachment file."},"attachmentName":{"type":"string","description":"The name of the attachment file being uploaded. The name should include the file extension."},"s3PresignedUrl":{"type":"string","description":"The S3 Presigned URL for the attachment file. When generating the PreSignedUrl, please ensure that the expires-in time is set to 30 minutes. The URL can be generated through the AWS Console or through the AWS CLI. For more information, see [Sharing objects with presigned URLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html) ."}},"type":"object","required":["attachmentName","s3PresignedUrl"]},"aws-native:wisdom:MessageTemplateAttributes":{"description":"An object that specifies the default values to use for variables in the message template. This object contains different categories of key-value pairs. Each key defines a variable or placeholder in the message template. The corresponding value defines the default value for that variable.","properties":{"agentAttributes":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAgentAttributes","description":"The agent attributes that are used with the message template."},"customAttributes":{"type":"object","additionalProperties":{"type":"string"},"description":"The custom attributes that are used with the message template."},"customerProfileAttributes":{"$ref":"#/types/aws-native:wisdom:MessageTemplateCustomerProfileAttributes","description":"The customer profile attributes that are used with the message template."},"systemAttributes":{"$ref":"#/types/aws-native:wisdom:MessageTemplateSystemAttributes","description":"The system attributes that are used with the message template."}},"type":"object"},"aws-native:wisdom:MessageTemplateBodyContentProvider":{"description":"The container of message template body.","properties":{"content":{"type":"string","description":"The content of the message template."}},"type":"object"},"aws-native:wisdom:MessageTemplateChannelSubtype":{"description":"The channel subtype this message template applies to.","type":"string","enum":[{"name":"Email","value":"EMAIL"},{"name":"Sms","value":"SMS"}]},"aws-native:wisdom:MessageTemplateContent":{"description":"The content of the message template.","properties":{"emailMessageTemplateContent":{"$ref":"#/types/aws-native:wisdom:MessageTemplateEmailMessageTemplateContent","description":"The content of the message template that applies to the email channel subtype."},"smsMessageTemplateContent":{"$ref":"#/types/aws-native:wisdom:MessageTemplateSmsMessageTemplateContent","description":"The content of message template that applies to SMS channel subtype."}},"type":"object"},"aws-native:wisdom:MessageTemplateCustomerProfileAttributes":{"description":"The customer profile attributes that are used with the message template.","properties":{"accountNumber":{"type":"string","description":"A unique account number that you have given to the customer."},"additionalInformation":{"type":"string","description":"Any additional information relevant to the customer's profile."},"address1":{"type":"string","description":"The first line of a customer address."},"address2":{"type":"string","description":"The second line of a customer address."},"address3":{"type":"string","description":"The third line of a customer address."},"address4":{"type":"string","description":"The fourth line of a customer address."},"billingAddress1":{"type":"string","description":"The first line of a customer’s billing address."},"billingAddress2":{"type":"string","description":"The second line of a customer’s billing address."},"billingAddress3":{"type":"string","description":"The third line of a customer’s billing address."},"billingAddress4":{"type":"string","description":"The fourth line of a customer’s billing address."},"billingCity":{"type":"string","description":"The city of a customer’s billing address."},"billingCountry":{"type":"string","description":"The country of a customer’s billing address."},"billingCounty":{"type":"string","description":"The county of a customer’s billing address."},"billingPostalCode":{"type":"string","description":"The postal code of a customer’s billing address."},"billingProvince":{"type":"string","description":"The province of a customer’s billing address."},"billingState":{"type":"string","description":"The state of a customer’s billing address."},"birthDate":{"type":"string","description":"The customer's birth date."},"businessEmailAddress":{"type":"string","description":"The customer's business email address."},"businessName":{"type":"string","description":"The name of the customer's business."},"businessPhoneNumber":{"type":"string","description":"The customer's business phone number."},"city":{"type":"string","description":"The city in which a customer lives."},"country":{"type":"string","description":"The country in which a customer lives."},"county":{"type":"string","description":"The county in which a customer lives."},"custom":{"type":"object","additionalProperties":{"type":"string"},"description":"The custom attributes in customer profile attributes."},"emailAddress":{"type":"string","description":"The customer's email address, which has not been specified as a personal or business address."},"firstName":{"type":"string","description":"The customer's first name."},"gender":{"type":"string","description":"The customer's gender."},"homePhoneNumber":{"type":"string","description":"The customer's home phone number."},"lastName":{"type":"string","description":"The customer's last name."},"mailingAddress1":{"type":"string","description":"The first line of a customer’s mailing address."},"mailingAddress2":{"type":"string","description":"The second line of a customer’s mailing address."},"mailingAddress3":{"type":"string","description":"The third line of a customer’s mailing address."},"mailingAddress4":{"type":"string","description":"The fourth line of a customer’s mailing address."},"mailingCity":{"type":"string","description":"The city of a customer’s mailing address."},"mailingCountry":{"type":"string","description":"The country of a customer’s mailing address."},"mailingCounty":{"type":"string","description":"The county of a customer’s mailing address."},"mailingPostalCode":{"type":"string","description":"The postal code of a customer’s mailing address"},"mailingProvince":{"type":"string","description":"The province of a customer’s mailing address."},"mailingState":{"type":"string","description":"The state of a customer’s mailing address."},"middleName":{"type":"string","description":"The customer's middle name."},"mobilePhoneNumber":{"type":"string","description":"The customer's mobile phone number."},"partyType":{"type":"string","description":"The customer's party type."},"phoneNumber":{"type":"string","description":"The customer's phone number, which has not been specified as a mobile, home, or business number."},"postalCode":{"type":"string","description":"The postal code of a customer address."},"profileArn":{"type":"string","description":"The ARN of a customer profile."},"profileId":{"type":"string","description":"The unique identifier of a customer profile."},"province":{"type":"string","description":"The province in which a customer lives."},"shippingAddress1":{"type":"string","description":"The first line of a customer’s shipping address."},"shippingAddress2":{"type":"string","description":"The second line of a customer’s shipping address."},"shippingAddress3":{"type":"string","description":"The third line of a customer’s shipping address."},"shippingAddress4":{"type":"string","description":"The fourth line of a customer’s shipping address"},"shippingCity":{"type":"string","description":"The city of a customer’s shipping address."},"shippingCountry":{"type":"string","description":"The country of a customer’s shipping address."},"shippingCounty":{"type":"string","description":"The county of a customer’s shipping address."},"shippingPostalCode":{"type":"string","description":"The postal code of a customer’s shipping address."},"shippingProvince":{"type":"string","description":"The province of a customer’s shipping address."},"shippingState":{"type":"string","description":"The state of a customer’s shipping address."},"state":{"type":"string","description":"The state in which a customer lives."}},"type":"object"},"aws-native:wisdom:MessageTemplateEmailMessageTemplateContent":{"description":"The content of message template that applies to email channel subtype.","properties":{"body":{"$ref":"#/types/aws-native:wisdom:MessageTemplateEmailMessageTemplateContentBody","description":"The body to use in email messages."},"headers":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:MessageTemplateEmailMessageTemplateHeader"},"description":"The email headers to include in email messages."},"subject":{"type":"string","description":"The subject line, or title, to use in email messages."}},"type":"object","required":["body","headers","subject"]},"aws-native:wisdom:MessageTemplateEmailMessageTemplateContentBody":{"description":"The body to use in email messages.","properties":{"html":{"$ref":"#/types/aws-native:wisdom:MessageTemplateBodyContentProvider","description":"The message body, in HTML format, to use in email messages that are based on the message template. We recommend using HTML format for email clients that render HTML content. You can include links, formatted text, and more in an HTML message."},"plainText":{"$ref":"#/types/aws-native:wisdom:MessageTemplateBodyContentProvider","description":"The message body, in plain text format, to use in email messages that are based on the message template. We recommend using plain text format for email clients that don't render HTML content and clients that are connected to high-latency networks, such as mobile devices."}},"type":"object"},"aws-native:wisdom:MessageTemplateEmailMessageTemplateHeader":{"description":"The email header to include in email messages.","properties":{"name":{"type":"string","description":"The name of the email header."},"value":{"type":"string","description":"The value of the email header."}},"type":"object"},"aws-native:wisdom:MessageTemplateGroupingConfiguration":{"description":"The configuration information of the user groups that the message template is accessible to.","properties":{"criteria":{"type":"string","description":"The criteria used for grouping Amazon Q in Connect users."},"values":{"type":"array","items":{"type":"string"},"description":"The list of values that define different groups of Amazon Q in Connect users."}},"type":"object","required":["criteria","values"]},"aws-native:wisdom:MessageTemplateSmsMessageTemplateContent":{"description":"The content of message template that applies to SMS channel subtype.","properties":{"body":{"$ref":"#/types/aws-native:wisdom:MessageTemplateSmsMessageTemplateContentBody","description":"The body to use in SMS messages."}},"type":"object","required":["body"]},"aws-native:wisdom:MessageTemplateSmsMessageTemplateContentBody":{"description":"The body to use in SMS messages.","properties":{"plainText":{"$ref":"#/types/aws-native:wisdom:MessageTemplateBodyContentProvider","description":"The message body to use in SMS messages."}},"type":"object"},"aws-native:wisdom:MessageTemplateSystemAttributes":{"description":"The system attributes that are used with the message template.","properties":{"customerEndpoint":{"$ref":"#/types/aws-native:wisdom:MessageTemplateSystemEndpointAttributes","description":"The CustomerEndpoint attribute."},"name":{"type":"string","description":"The name of the task."},"systemEndpoint":{"$ref":"#/types/aws-native:wisdom:MessageTemplateSystemEndpointAttributes","description":"The SystemEndpoint attribute."}},"type":"object"},"aws-native:wisdom:MessageTemplateSystemEndpointAttributes":{"description":"The system endpoint attributes that are used with the message template.","properties":{"address":{"type":"string","description":"The customer's phone number if used with customerEndpoint, or the number the customer dialed to call your contact center if used with systemEndpoint."}},"type":"object"},"aws-native:wisdom:MessageTemplateTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"}},"type":"object","required":["key","value"]},"aws-native:wisdom:QuickResponseChannelType":{"type":"string","enum":[{"name":"Chat","value":"Chat"},{"name":"Email","value":"Email"}]},"aws-native:wisdom:QuickResponseContentProvider":{"description":"The container of quick response content.","properties":{"content":{"type":"string","description":"The content of the quick response."}},"type":"object"},"aws-native:wisdom:QuickResponseContents":{"description":"The content of the quick response stored in different media types.","properties":{"markdown":{"$ref":"#/types/aws-native:wisdom:QuickResponseContentProvider","description":"The quick response content in markdown format."},"plainText":{"$ref":"#/types/aws-native:wisdom:QuickResponseContentProvider","description":"The quick response content in plaintext format."}},"type":"object"},"aws-native:wisdom:QuickResponseGroupingConfiguration":{"description":"The configuration information of the user groups that the quick response is accessible to.","properties":{"criteria":{"type":"string","description":"The criteria used for grouping Amazon Q in Connect users."},"values":{"type":"array","items":{"type":"string"},"description":"The list of values that define different groups of Amazon Q in Connect users."}},"type":"object","required":["criteria","values"]},"aws-native:wisdom:QuickResponseStatus":{"description":"The status of the quick response data.","type":"string","enum":[{"name":"CreateInProgress","value":"CREATE_IN_PROGRESS"},{"name":"CreateFailed","value":"CREATE_FAILED"},{"name":"Created","value":"CREATED"},{"name":"DeleteInProgress","value":"DELETE_IN_PROGRESS"},{"name":"DeleteFailed","value":"DELETE_FAILED"},{"name":"Deleted","value":"DELETED"},{"name":"UpdateInProgress","value":"UPDATE_IN_PROGRESS"},{"name":"UpdateFailed","value":"UPDATE_FAILED"}]},"aws-native:wisdom:QuickResponseTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -"}},"type":"object","required":["key","value"]},"aws-native:workspaces:ConnectionAliasAssociation":{"properties":{"associatedAccountId":{"type":"string","description":"The identifier of the AWS account that associated the connection alias with a directory."},"associationStatus":{"$ref":"#/types/aws-native:workspaces:ConnectionAliasAssociationAssociationStatus","description":"The association status of the connection alias."},"connectionIdentifier":{"type":"string","description":"The identifier of the connection alias association. You use the connection identifier in the DNS TXT record when you're configuring your DNS routing policies."},"resourceId":{"type":"string","description":"The identifier of the directory associated with a connection alias."}},"type":"object"},"aws-native:workspaces:ConnectionAliasAssociationAssociationStatus":{"description":"The association status of the connection alias.","type":"string","enum":[{"name":"NotAssociated","value":"NOT_ASSOCIATED"},{"name":"PendingAssociation","value":"PENDING_ASSOCIATION"},{"name":"AssociatedWithOwnerAccount","value":"ASSOCIATED_WITH_OWNER_ACCOUNT"},{"name":"AssociatedWithSharedAccount","value":"ASSOCIATED_WITH_SHARED_ACCOUNT"},{"name":"PendingDisassociation","value":"PENDING_DISASSOCIATION"}]},"aws-native:workspaces:ConnectionAliasState":{"description":"The current state of the connection alias, returned as a string.","type":"string","enum":[{"name":"Creating","value":"CREATING"},{"name":"Created","value":"CREATED"},{"name":"Deleting","value":"DELETING"}]},"aws-native:workspaces:ConnectionAliasTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:workspaces:WorkspaceProperties":{"properties":{"computeTypeName":{"type":"string","description":"The compute type. For more information, see [Amazon WorkSpaces Bundles](https://docs.aws.amazon.com/workspaces/details/#Amazon_WorkSpaces_Bundles) ."},"rootVolumeSizeGib":{"type":"integer","description":"The size of the root volume. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) ."},"runningMode":{"type":"string","description":"The running mode. For more information, see [Manage the WorkSpace Running Mode](https://docs.aws.amazon.com/workspaces/latest/adminguide/running-mode.html) ."},"runningModeAutoStopTimeoutInMinutes":{"type":"integer","description":"The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals."},"userVolumeSizeGib":{"type":"integer","description":"The size of the user storage. For important information about how to modify the size of the root and user volumes, see [Modify a WorkSpace](https://docs.aws.amazon.com/workspaces/latest/adminguide/modify-workspaces.html) ."}},"type":"object"},"aws-native:workspaces:WorkspaceTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:workspaces:WorkspacesPoolApplicationSettings":{"properties":{"settingsGroup":{"type":"string","description":"The path prefix for the S3 bucket where users’ persistent application settings are stored."},"status":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolApplicationSettingsStatus","description":"Enables or disables persistent application settings for users during their pool sessions."}},"type":"object","required":["status"]},"aws-native:workspaces:WorkspacesPoolApplicationSettingsStatus":{"type":"string","enum":[{"name":"Disabled","value":"DISABLED"},{"name":"Enabled","value":"ENABLED"}]},"aws-native:workspaces:WorkspacesPoolCapacity":{"properties":{"desiredUserSessions":{"type":"integer","description":"The desired number of user sessions for the WorkSpaces in the pool."}},"type":"object","required":["desiredUserSessions"]},"aws-native:workspaces:WorkspacesPoolRunningMode":{"type":"string","enum":[{"name":"AlwaysOn","value":"ALWAYS_ON"},{"name":"AutoStop","value":"AUTO_STOP"}]},"aws-native:workspaces:WorkspacesPoolTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key","value"]},"aws-native:workspaces:WorkspacesPoolTimeoutSettings":{"properties":{"disconnectTimeoutInSeconds":{"type":"integer","description":"Specifies the amount of time, in seconds, that a streaming session remains active after users disconnect. If users try to reconnect to the streaming session after a disconnection or network interruption within the time set, they are connected to their previous session. Otherwise, they are connected to a new session with a new streaming instance."},"idleDisconnectTimeoutInSeconds":{"type":"integer","description":"The amount of time in seconds a connection will stay active while idle."},"maxUserDurationInSeconds":{"type":"integer","description":"Specifies the maximum amount of time, in seconds, that a streaming session can remain active. If users are still connected to a streaming instance five minutes before this limit is reached, they are prompted to save any open documents before being disconnected. After this time elapses, the instance is terminated and replaced by a new instance."}},"type":"object"},"aws-native:workspacesinstances:ManagedInstanceProperties":{"properties":{"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceBlockDeviceMapping"}},"capacityReservationSpecification":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceCapacityReservationSpecification"},"cpuOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceCpuOptionsRequest"},"creditSpecification":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceCreditSpecificationRequest"},"disableApiStop":{"type":"boolean"},"ebsOptimized":{"type":"boolean"},"enablePrimaryIpv6":{"type":"boolean"},"enclaveOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceEnclaveOptionsRequest"},"hibernationOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceHibernationOptionsRequest"},"iamInstanceProfile":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceIamInstanceProfileSpecification"},"imageId":{"type":"string"},"instanceType":{"type":"string"},"ipv6AddressCount":{"type":"integer"},"keyName":{"type":"string"},"licenseSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceLicenseConfigurationRequest"}},"maintenanceOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMaintenanceOptionsRequest"},"metadataOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequest"},"monitoring":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceRunInstancesMonitoringEnabled"},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceNetworkInterfaceSpecification"}},"networkPerformanceOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceNetworkPerformanceOptionsRequest"},"placement":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstancePlacement"},"privateDnsNameOptions":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstancePrivateDnsNameOptionsRequest"},"subnetId":{"type":"string"},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceTagSpecification"}},"userData":{"type":"string"}},"type":"object","required":["imageId","instanceType"]},"aws-native:workspacesinstances:VolumeAssociationDisassociateMode":{"description":"Mode to use when disassociating the volume","type":"string","enum":[{"name":"Force","value":"FORCE"},{"name":"NoForce","value":"NO_FORCE"}]},"aws-native:workspacesinstances:VolumeTag":{"properties":{"key":{"type":"string","description":"The key name of the tag"},"value":{"type":"string","description":"The value for the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesinstances:VolumeTagSpecification":{"properties":{"resourceType":{"$ref":"#/types/aws-native:workspacesinstances:VolumeTagSpecificationResourceType"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:VolumeTag"},"description":"The tags to apply to the resource"}},"type":"object"},"aws-native:workspacesinstances:VolumeTagSpecificationResourceType":{"type":"string","enum":[{"name":"Instance","value":"instance"},{"name":"Volume","value":"volume"},{"name":"SpotInstancesRequest","value":"spot-instances-request"},{"name":"NetworkInterface","value":"network-interface"}]},"aws-native:workspacesinstances:VolumeType":{"description":"The volume type","type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Io1","value":"io1"},{"name":"Io2","value":"io2"},{"name":"Gp2","value":"gp2"},{"name":"Sc1","value":"sc1"},{"name":"St1","value":"st1"},{"name":"Gp3","value":"gp3"}]},"aws-native:workspacesinstances:WorkspaceInstanceBlockDeviceMapping":{"properties":{"deviceName":{"type":"string"},"ebs":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceEbsBlockDevice"},"noDevice":{"type":"string"},"virtualName":{"type":"string"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceCapacityReservationSpecification":{"properties":{"capacityReservationPreference":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceCapacityReservationSpecificationCapacityReservationPreference"},"capacityReservationTarget":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceCapacityReservationTarget"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceCapacityReservationSpecificationCapacityReservationPreference":{"type":"string","enum":[{"name":"CapacityReservationsOnly","value":"capacity-reservations-only"},{"name":"Open","value":"open"},{"name":"None","value":"none"}]},"aws-native:workspacesinstances:WorkspaceInstanceCapacityReservationTarget":{"properties":{"capacityReservationId":{"type":"string"},"capacityReservationResourceGroupArn":{"type":"string"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceCpuOptionsRequest":{"properties":{"coreCount":{"type":"integer"},"threadsPerCore":{"type":"integer"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceCreditSpecificationRequest":{"properties":{"cpuCredits":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceCreditSpecificationRequestCpuCredits"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceCreditSpecificationRequestCpuCredits":{"type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Unlimited","value":"unlimited"}]},"aws-native:workspacesinstances:WorkspaceInstanceEbsBlockDevice":{"properties":{"encrypted":{"type":"boolean"},"iops":{"type":"integer"},"kmsKeyId":{"type":"string"},"throughput":{"type":"integer"},"volumeSize":{"type":"integer"},"volumeType":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceEbsBlockDeviceVolumeType"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceEbsBlockDeviceVolumeType":{"type":"string","enum":[{"name":"Standard","value":"standard"},{"name":"Io1","value":"io1"},{"name":"Io2","value":"io2"},{"name":"Gp2","value":"gp2"},{"name":"Sc1","value":"sc1"},{"name":"St1","value":"st1"},{"name":"Gp3","value":"gp3"}]},"aws-native:workspacesinstances:WorkspaceInstanceEc2ManagedInstance":{"properties":{"instanceId":{"type":"string"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceEnclaveOptionsRequest":{"properties":{"enabled":{"type":"boolean"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceHibernationOptionsRequest":{"properties":{"configured":{"type":"boolean"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceIamInstanceProfileSpecification":{"properties":{"arn":{"type":"string"},"name":{"type":"string"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMaintenanceOptionsRequest":{"properties":{"autoRecovery":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMaintenanceOptionsRequestAutoRecovery"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMaintenanceOptionsRequestAutoRecovery":{"type":"string","enum":[{"name":"Disabled","value":"disabled"},{"name":"Default","value":"default"}]},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequest":{"properties":{"httpEndpoint":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestHttpEndpoint"},"httpProtocolIpv6":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestHttpProtocolIpv6"},"httpPutResponseHopLimit":{"type":"integer"},"httpTokens":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestHttpTokens"},"instanceMetadataTags":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestInstanceMetadataTags"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestHttpEndpoint":{"type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestHttpProtocolIpv6":{"type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestHttpTokens":{"type":"string","enum":[{"name":"Optional","value":"optional"},{"name":"Required","value":"required"}]},"aws-native:workspacesinstances:WorkspaceInstanceInstanceMetadataOptionsRequestInstanceMetadataTags":{"type":"string","enum":[{"name":"Enabled","value":"enabled"},{"name":"Disabled","value":"disabled"}]},"aws-native:workspacesinstances:WorkspaceInstanceInstanceNetworkInterfaceSpecification":{"properties":{"description":{"type":"string"},"deviceIndex":{"type":"integer"},"groups":{"type":"array","items":{"type":"string"}},"subnetId":{"type":"string"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceInstanceNetworkPerformanceOptionsRequest":{"properties":{"bandwidthWeighting":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceInstanceNetworkPerformanceOptionsRequestBandwidthWeighting"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceInstanceNetworkPerformanceOptionsRequestBandwidthWeighting":{"type":"string","enum":[{"name":"Default","value":"default"},{"name":"Vpc1","value":"vpc-1"},{"name":"Ebs1","value":"ebs-1"}]},"aws-native:workspacesinstances:WorkspaceInstanceLicenseConfigurationRequest":{"properties":{"licenseConfigurationArn":{"type":"string"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstancePlacement":{"properties":{"availabilityZone":{"type":"string"},"groupId":{"type":"string"},"groupName":{"type":"string"},"partitionNumber":{"type":"integer"},"tenancy":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstancePlacementTenancy"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstancePlacementTenancy":{"type":"string","enum":[{"name":"Default","value":"default"},{"name":"Dedicated","value":"dedicated"},{"name":"Host","value":"host"}]},"aws-native:workspacesinstances:WorkspaceInstancePrivateDnsNameOptionsRequest":{"properties":{"enableResourceNameDnsARecord":{"type":"boolean"},"enableResourceNameDnsAaaaRecord":{"type":"boolean"},"hostnameType":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstancePrivateDnsNameOptionsRequestHostnameType"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstancePrivateDnsNameOptionsRequestHostnameType":{"type":"string","enum":[{"name":"IpName","value":"ip-name"},{"name":"ResourceName","value":"resource-name"}]},"aws-native:workspacesinstances:WorkspaceInstanceProvisionState":{"description":"The current state of the workspace instance","type":"string","enum":[{"name":"Allocating","value":"ALLOCATING"},{"name":"Allocated","value":"ALLOCATED"},{"name":"Deallocating","value":"DEALLOCATING"},{"name":"Deallocated","value":"DEALLOCATED"},{"name":"ErrorAllocating","value":"ERROR_ALLOCATING"},{"name":"ErrorDeallocating","value":"ERROR_DEALLOCATING"}]},"aws-native:workspacesinstances:WorkspaceInstanceRunInstancesMonitoringEnabled":{"properties":{"enabled":{"type":"boolean"}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceTag":{"properties":{"key":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["key"]},"aws-native:workspacesinstances:WorkspaceInstanceTagSpecification":{"properties":{"resourceType":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceTagSpecificationResourceType"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceTag"}}},"type":"object"},"aws-native:workspacesinstances:WorkspaceInstanceTagSpecificationResourceType":{"type":"string","enum":[{"name":"Instance","value":"instance"},{"name":"Volume","value":"volume"},{"name":"SpotInstancesRequest","value":"spot-instances-request"},{"name":"NetworkInterface","value":"network-interface"}]},"aws-native:workspacesthinclient:EnvironmentDayOfWeek":{"type":"string","enum":[{"name":"Monday","value":"MONDAY"},{"name":"Tuesday","value":"TUESDAY"},{"name":"Wednesday","value":"WEDNESDAY"},{"name":"Thursday","value":"THURSDAY"},{"name":"Friday","value":"FRIDAY"},{"name":"Saturday","value":"SATURDAY"},{"name":"Sunday","value":"SUNDAY"}]},"aws-native:workspacesthinclient:EnvironmentDesktopType":{"description":"The type of VDI.","type":"string","enum":[{"name":"Workspaces","value":"workspaces"},{"name":"Appstream","value":"appstream"},{"name":"WorkspacesWeb","value":"workspaces-web"}]},"aws-native:workspacesthinclient:EnvironmentMaintenanceWindow":{"properties":{"applyTimeOf":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentMaintenanceWindowApplyTimeOf","description":"The desired time zone maintenance window."},"daysOfTheWeek":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentDayOfWeek"},"description":"The date of maintenance window."},"endTimeHour":{"type":"integer","description":"The hour end time of maintenance window."},"endTimeMinute":{"type":"integer","description":"The minute end time of maintenance window."},"startTimeHour":{"type":"integer","description":"The hour start time of maintenance window."},"startTimeMinute":{"type":"integer","description":"The minute start time of maintenance window."},"type":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentMaintenanceWindowType","description":"The type of maintenance window."}},"type":"object","required":["type"]},"aws-native:workspacesthinclient:EnvironmentMaintenanceWindowApplyTimeOf":{"description":"The desired time zone maintenance window.","type":"string","enum":[{"name":"Utc","value":"UTC"},{"name":"Device","value":"DEVICE"}]},"aws-native:workspacesthinclient:EnvironmentMaintenanceWindowType":{"description":"The type of maintenance window.","type":"string","enum":[{"name":"System","value":"SYSTEM"},{"name":"Custom","value":"CUSTOM"}]},"aws-native:workspacesthinclient:EnvironmentSoftwareSetComplianceStatus":{"description":"Describes if the software currently installed on all devices in the environment is a supported version.","type":"string","enum":[{"name":"Compliant","value":"COMPLIANT"},{"name":"NotCompliant","value":"NOT_COMPLIANT"},{"name":"NoRegisteredDevices","value":"NO_REGISTERED_DEVICES"}]},"aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateMode":{"description":"An option to define which software updates to apply.","type":"string","enum":[{"name":"UseLatest","value":"USE_LATEST"},{"name":"UseDesired","value":"USE_DESIRED"}]},"aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateSchedule":{"description":"An option to define if software updates should be applied within a maintenance window.","type":"string","enum":[{"name":"UseMaintenanceWindow","value":"USE_MAINTENANCE_WINDOW"},{"name":"ApplyImmediately","value":"APPLY_IMMEDIATELY"}]},"aws-native:workspacesthinclient:EnvironmentTag":{"description":"A key-value pair to associate with a resource.","properties":{"key":{"type":"string","description":"The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."},"value":{"type":"string","description":"The value for the tag. You can specify a value that is 1 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -."}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:BrowserSettingsCategory":{"type":"string","enum":[{"name":"Cults","value":"Cults"},{"name":"Gambling","value":"Gambling"},{"name":"Nudity","value":"Nudity"},{"name":"Pornography","value":"Pornography"},{"name":"SexEducation","value":"SexEducation"},{"name":"Tasteless","value":"Tasteless"},{"name":"Violence","value":"Violence"},{"name":"DownloadSites","value":"DownloadSites"},{"name":"ImageSharing","value":"ImageSharing"},{"name":"PeerToPeer","value":"PeerToPeer"},{"name":"StreamingMediaAndDownloads","value":"StreamingMediaAndDownloads"},{"name":"GenerativeAi","value":"GenerativeAI"},{"name":"CriminalActivity","value":"CriminalActivity"},{"name":"Hacking","value":"Hacking"},{"name":"HateAndIntolerance","value":"HateAndIntolerance"},{"name":"IllegalDrug","value":"IllegalDrug"},{"name":"IllegalSoftware","value":"IllegalSoftware"},{"name":"SchoolCheating","value":"SchoolCheating"},{"name":"SelfHarm","value":"SelfHarm"},{"name":"Weapons","value":"Weapons"},{"name":"Chat","value":"Chat"},{"name":"Games","value":"Games"},{"name":"InstantMessaging","value":"InstantMessaging"},{"name":"ProfessionalNetwork","value":"ProfessionalNetwork"},{"name":"SocialNetworking","value":"SocialNetworking"},{"name":"WebBasedEmail","value":"WebBasedEmail"},{"name":"ParkedDomains","value":"ParkedDomains"}]},"aws-native:workspacesweb:BrowserSettingsTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:BrowserSettingsWebContentFilteringPolicy":{"properties":{"allowedUrls":{"type":"array","items":{"type":"string"},"description":"URLs and domains that are always accessible to end users."},"blockedCategories":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:BrowserSettingsCategory"},"description":"Categories of websites that are blocked on the end user's browsers."},"blockedUrls":{"type":"array","items":{"type":"string"},"description":"URLs and domains that end users cannot access."}},"type":"object"},"aws-native:workspacesweb:DataProtectionSettingsCustomPattern":{"properties":{"keywordRegex":{"type":"string","description":"The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, \"/ab+c/gi\""},"patternDescription":{"type":"string","description":"The pattern description for the customer pattern."},"patternName":{"type":"string","description":"The pattern name for the custom pattern."},"patternRegex":{"type":"string","description":"The pattern regex for the customer pattern. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: \"/ab+c/gi\"."}},"type":"object","required":["patternName","patternRegex"]},"aws-native:workspacesweb:DataProtectionSettingsInlineRedactionConfiguration":{"properties":{"globalConfidenceLevel":{"type":"number","description":"The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2."},"globalEnforcedUrls":{"type":"array","items":{"type":"string"},"description":"The global enforced URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level enforced URL list."},"globalExemptUrls":{"type":"array","items":{"type":"string"},"description":"The global exempt URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level exempt URL list."},"inlineRedactionPatterns":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsInlineRedactionPattern"},"description":"The inline redaction patterns to be enabled for the inline redaction configuration."}},"type":"object","required":["inlineRedactionPatterns"]},"aws-native:workspacesweb:DataProtectionSettingsInlineRedactionPattern":{"properties":{"builtInPatternId":{"type":"string","description":"The built-in pattern from the list of preconfigured patterns. Either a customPattern or builtInPatternId is required. To view the entire list of data types and their corresponding built-in pattern IDs, see [Base inline redaction](https://docs.aws.amazon.com/workspaces-web/latest/adminguide/base-inline-redaction.html) ."},"confidenceLevel":{"type":"number","description":"The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level."},"customPattern":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsCustomPattern","description":"The configuration for a custom pattern. Either a customPattern or builtInPatternId is required."},"enforcedUrls":{"type":"array","items":{"type":"string"},"description":"The enforced URL configuration for the inline redaction pattern. This will override the global enforced URL configuration."},"exemptUrls":{"type":"array","items":{"type":"string"},"description":"The exempt URL configuration for the inline redaction pattern. This will override the global exempt URL configuration for the inline redaction pattern."},"redactionPlaceHolder":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsRedactionPlaceHolder","description":"The redaction placeholder that will replace the redacted text in session for the inline redaction pattern."}},"type":"object","required":["redactionPlaceHolder"]},"aws-native:workspacesweb:DataProtectionSettingsRedactionPlaceHolder":{"properties":{"redactionPlaceHolderText":{"type":"string","description":"The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type."},"redactionPlaceHolderType":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsRedactionPlaceHolderType","description":"The redaction placeholder type that will replace the redacted text in session."}},"type":"object","required":["redactionPlaceHolderType"]},"aws-native:workspacesweb:DataProtectionSettingsRedactionPlaceHolderType":{"type":"string","enum":[{"name":"CustomText","value":"CustomText"}]},"aws-native:workspacesweb:DataProtectionSettingsTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag."}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:IdentityProviderTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:IdentityProviderType":{"type":"string","enum":[{"name":"Saml","value":"SAML"},{"name":"Facebook","value":"Facebook"},{"name":"Google","value":"Google"},{"name":"LoginWithAmazon","value":"LoginWithAmazon"},{"name":"SignInWithApple","value":"SignInWithApple"},{"name":"Oidc","value":"OIDC"}]},"aws-native:workspacesweb:IpAccessSettingsIpRule":{"properties":{"description":{"type":"string","description":"The description of the IP rule."},"ipRange":{"type":"string","description":"A single IP address or an IP address range in CIDR notation"}},"type":"object","required":["ipRange"]},"aws-native:workspacesweb:IpAccessSettingsTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:NetworkSettingsTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:PortalAuthenticationType":{"type":"string","enum":[{"name":"Standard","value":"Standard"},{"name":"IamIdentityCenter","value":"IAM_Identity_Center"}]},"aws-native:workspacesweb:PortalBrowserType":{"type":"string","enum":[{"name":"Chrome","value":"Chrome"}]},"aws-native:workspacesweb:PortalInstanceType":{"type":"string","enum":[{"name":"StandardRegular","value":"standard.regular"},{"name":"StandardLarge","value":"standard.large"},{"name":"StandardXlarge","value":"standard.xlarge"}]},"aws-native:workspacesweb:PortalRendererType":{"type":"string","enum":[{"name":"AppStream","value":"AppStream"}]},"aws-native:workspacesweb:PortalStatus":{"type":"string","enum":[{"name":"Incomplete","value":"Incomplete"},{"name":"Pending","value":"Pending"},{"name":"Active","value":"Active"}]},"aws-native:workspacesweb:PortalTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:SessionLoggerEvent":{"type":"string","enum":[{"name":"WebsiteInteract","value":"WebsiteInteract"},{"name":"FileDownloadFromSecureBrowserToRemoteDisk","value":"FileDownloadFromSecureBrowserToRemoteDisk"},{"name":"FileTransferFromRemoteToLocalDisk","value":"FileTransferFromRemoteToLocalDisk"},{"name":"FileTransferFromLocalToRemoteDisk","value":"FileTransferFromLocalToRemoteDisk"},{"name":"FileUploadFromRemoteDiskToSecureBrowser","value":"FileUploadFromRemoteDiskToSecureBrowser"},{"name":"ContentPasteToWebsite","value":"ContentPasteToWebsite"},{"name":"ContentTransferFromLocalToRemoteClipboard","value":"ContentTransferFromLocalToRemoteClipboard"},{"name":"ContentCopyFromWebsite","value":"ContentCopyFromWebsite"},{"name":"UrlLoad","value":"UrlLoad"},{"name":"TabOpen","value":"TabOpen"},{"name":"TabClose","value":"TabClose"},{"name":"PrintJobSubmit","value":"PrintJobSubmit"},{"name":"SessionConnect","value":"SessionConnect"},{"name":"SessionStart","value":"SessionStart"},{"name":"SessionDisconnect","value":"SessionDisconnect"},{"name":"SessionEnd","value":"SessionEnd"},{"name":"UrlBlockByContentFilter","value":"UrlBlockByContentFilter"}]},"aws-native:workspacesweb:SessionLoggerEventFilter0Properties":{"properties":{"all":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerUnit"}},"type":"object","required":["all"]},"aws-native:workspacesweb:SessionLoggerEventFilter1Properties":{"properties":{"include":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEvent"}}},"type":"object","required":["include"]},"aws-native:workspacesweb:SessionLoggerFolderStructure":{"type":"string","enum":[{"name":"Flat","value":"Flat"},{"name":"NestedByDate","value":"NestedByDate"}]},"aws-native:workspacesweb:SessionLoggerLogConfiguration":{"properties":{"s3":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerS3LogConfiguration","description":"The configuration for delivering the logs to S3."}},"type":"object"},"aws-native:workspacesweb:SessionLoggerLogFileFormat":{"type":"string","enum":[{"name":"JsonLines","value":"JSONLines"},{"name":"Json","value":"Json"}]},"aws-native:workspacesweb:SessionLoggerS3LogConfiguration":{"properties":{"bucket":{"type":"string","description":"The S3 bucket name where logs are delivered."},"bucketOwner":{"type":"string","description":"The expected bucket owner of the target S3 bucket. The caller must have permissions to write to the target bucket."},"folderStructure":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerFolderStructure","description":"The folder structure that defines the organizational structure for log files in S3."},"keyPrefix":{"type":"string","description":"The S3 path prefix that determines where log files are stored."},"logFileFormat":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerLogFileFormat","description":"The format of the LogFile that is written to S3."}},"type":"object","required":["bucket","folderStructure","logFileFormat"]},"aws-native:workspacesweb:SessionLoggerTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:SessionLoggerUnit":{"type":"object"},"aws-native:workspacesweb:TrustStoreTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:UserAccessLoggingSettingsTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:UserSettingsBrandingConfiguration":{"properties":{"colorTheme":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsColorTheme","description":"The color theme for components on the web portal. Choose `Light` if you upload a dark wallpaper, or `Dark` for a light wallpaper."},"favicon":{"type":"string","description":"The favicon image for the portal. Provide either a binary image file or an S3 URI pointing to the image file. Maximum 100 KB in JPEG, PNG, or ICO format."},"faviconMetadata":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsImageMetadata","description":"Read-only. Metadata for the favicon image file, including the MIME type, file extension, and upload timestamp. This property is automatically populated by the service and cannot be specified in your template. It can be retrieved using the `Fn::GetAtt` intrinsic function."},"localizedStrings":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsLocalizedBrandingStrings"},"description":"A map of localized text strings for different languages, allowing the portal to display content in the user's preferred language."},"logo":{"type":"string","description":"The logo image for the portal. Provide either a binary image file or an S3 URI pointing to the image file. Maximum 100 KB in JPEG, PNG, or ICO format."},"logoMetadata":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsImageMetadata","description":"Read-only. Metadata for the logo image file, including the MIME type, file extension, and upload timestamp. This property is automatically populated by the service and cannot be specified in your template. It can be retrieved using the `Fn::GetAtt` intrinsic function."},"termsOfService":{"type":"string","description":"The terms of service text in Markdown format that users must accept before accessing the portal."},"wallpaper":{"type":"string","description":"The wallpaper image for the portal. Provide either a binary image file or an S3 URI pointing to the image file. Maximum 5 MB in JPEG or PNG format."},"wallpaperMetadata":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsImageMetadata","description":"Read-only. Metadata for the wallpaper image file, including the MIME type, file extension, and upload timestamp. This property is automatically populated by the service and cannot be specified in your template. It can be retrieved using the `Fn::GetAtt` intrinsic function."}},"type":"object"},"aws-native:workspacesweb:UserSettingsColorTheme":{"type":"string","enum":[{"name":"Light","value":"Light"},{"name":"Dark","value":"Dark"}]},"aws-native:workspacesweb:UserSettingsCookieSpecification":{"properties":{"domain":{"type":"string","description":"The domain of the cookie."},"name":{"type":"string","description":"The name of the cookie."},"path":{"type":"string","description":"The path of the cookie."}},"type":"object","required":["domain"]},"aws-native:workspacesweb:UserSettingsCookieSynchronizationConfiguration":{"properties":{"allowlist":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsCookieSpecification"},"description":"The list of cookie specifications that are allowed to be synchronized to the remote browser."},"blocklist":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsCookieSpecification"},"description":"The list of cookie specifications that are blocked from being synchronized to the remote browser."}},"type":"object","required":["allowlist"]},"aws-native:workspacesweb:UserSettingsEnabledType":{"type":"string","enum":[{"name":"Disabled","value":"Disabled"},{"name":"Enabled","value":"Enabled"}]},"aws-native:workspacesweb:UserSettingsImageMetadata":{"properties":{"fileExtension":{"type":"string","description":"The file extension of the image."},"lastUploadTimestamp":{"type":"string","description":"The timestamp when the image was last uploaded."},"mimeType":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsMimeType","description":"The MIME type of the image."}},"type":"object","required":["fileExtension","lastUploadTimestamp","mimeType"]},"aws-native:workspacesweb:UserSettingsLocalizedBrandingStrings":{"properties":{"browserTabTitle":{"type":"string","description":"The text displayed in the browser tab title."},"contactButtonText":{"type":"string","description":"The text displayed on the contact button. This field is optional and defaults to \"Contact us\"."},"contactLink":{"type":"string","description":"A contact link URL. The URL must start with `https://` or `mailto:` . If not provided, the contact button will be hidden from the web portal screen."},"loadingText":{"type":"string","description":"The text displayed during session loading. This field is optional and defaults to \"Loading your session\"."},"loginButtonText":{"type":"string","description":"The text displayed on the login button. This field is optional and defaults to \"Sign In\"."},"loginDescription":{"type":"string","description":"The description text for the login section. This field is optional and defaults to \"Sign in to your session\"."},"loginTitle":{"type":"string","description":"The title text for the login section. This field is optional and defaults to \"Sign In\"."},"welcomeText":{"type":"string","description":"The welcome text displayed on the sign-in page."}},"type":"object","required":["browserTabTitle","welcomeText"]},"aws-native:workspacesweb:UserSettingsMaxDisplayResolution":{"type":"string","enum":[{"name":"Size4096x2160","value":"size4096X2160"},{"name":"Size3840x2160","value":"size3840X2160"},{"name":"Size3440x1440","value":"size3440X1440"},{"name":"Size2560x1440","value":"size2560X1440"},{"name":"Size1920x1080","value":"size1920X1080"},{"name":"Size1280x720","value":"size1280X720"},{"name":"Size1024x768","value":"size1024X768"},{"name":"Size800x600","value":"size800X600"}]},"aws-native:workspacesweb:UserSettingsMimeType":{"type":"string","enum":[{"name":"Imagepng","value":"image/png"},{"name":"Imagejpeg","value":"image/jpeg"},{"name":"ImagexIcon","value":"image/x-icon"}]},"aws-native:workspacesweb:UserSettingsTag":{"properties":{"key":{"type":"string","description":"The key of the tag."},"value":{"type":"string","description":"The value of the tag"}},"type":"object","required":["key","value"]},"aws-native:workspacesweb:UserSettingsToolbarConfiguration":{"properties":{"hiddenToolbarItems":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsToolbarItem"},"description":"The list of toolbar items to be hidden."},"maxDisplayResolution":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsMaxDisplayResolution","description":"The maximum display resolution that is allowed for the session."},"toolbarType":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsToolbarType","description":"The type of toolbar displayed during the session."},"visualMode":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsVisualMode","description":"The visual mode of the toolbar."}},"type":"object"},"aws-native:workspacesweb:UserSettingsToolbarItem":{"type":"string","enum":[{"name":"Windows","value":"Windows"},{"name":"DualMonitor","value":"DualMonitor"},{"name":"FullScreen","value":"FullScreen"},{"name":"Webcam","value":"Webcam"},{"name":"Microphone","value":"Microphone"}]},"aws-native:workspacesweb:UserSettingsToolbarType":{"type":"string","enum":[{"name":"Floating","value":"Floating"},{"name":"Docked","value":"Docked"}]},"aws-native:workspacesweb:UserSettingsVisualMode":{"type":"string","enum":[{"name":"Dark","value":"Dark"},{"name":"Light","value":"Light"}]},"aws-native:xray:GroupInsightsConfiguration":{"properties":{"insightsEnabled":{"type":"boolean","description":"Set the InsightsEnabled value to true to enable insights or false to disable insights."},"notificationsEnabled":{"type":"boolean","description":"Set the NotificationsEnabled value to true to enable insights notifications. Notifications can only be enabled on a group with InsightsEnabled set to true."}},"type":"object"},"aws-native:xray:GroupTag":{"properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:xray:SamplingRule":{"properties":{"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"Matches attributes derived from the request."},"fixedRate":{"type":"number","description":"The percentage of matching requests to instrument, after the reservoir is exhausted."},"host":{"type":"string","description":"Matches the hostname from a request URL."},"httpMethod":{"type":"string","description":"Matches the HTTP method from a request URL."},"priority":{"type":"integer","description":"The priority of the sampling rule."},"reservoirSize":{"type":"integer","description":"A fixed number of matching requests to instrument per second, prior to applying the fixed rate. The reservoir is not used directly by services, but applies to all services using the rule collectively."},"resourceArn":{"type":"string","description":"Matches the ARN of the AWS resource on which the service runs."},"ruleArn":{"type":"string","description":"The ARN of the sampling rule. Specify a rule by either name or ARN, but not both.\n\n\u003e Specifying a sampling rule by name is recommended, as specifying by ARN will be deprecated in future."},"ruleName":{"type":"string","description":"The name of the sampling rule. Specify a rule by either name or ARN, but not both."},"samplingRateBoost":{"$ref":"#/types/aws-native:xray:SamplingRuleSamplingRateBoost"},"serviceName":{"type":"string","description":"Matches the name that the service uses to identify itself in segments."},"serviceType":{"type":"string","description":"Matches the origin that the service uses to identify its type in segments."},"urlPath":{"type":"string","description":"Matches the path from a request URL."},"version":{"type":"integer","description":"The version of the sampling rule format (1)","replaceOnChanges":true}},"type":"object","required":["fixedRate","host","httpMethod","priority","reservoirSize","resourceArn","serviceName","serviceType","urlPath"]},"aws-native:xray:SamplingRuleRecord":{"properties":{"createdAt":{"type":"string","description":"When the rule was created, in Unix time seconds."},"modifiedAt":{"type":"string","description":"When the rule was modified, in Unix time seconds."},"samplingRule":{"$ref":"#/types/aws-native:xray:SamplingRule"}},"type":"object"},"aws-native:xray:SamplingRuleSamplingRateBoost":{"properties":{"cooldownWindowMinutes":{"type":"integer","description":"Time window (in minutes) in which only one sampling rate boost can be triggered. After a boost occurs, no further boosts are allowed until the next window."},"maxRate":{"type":"number","description":"The maximum sampling rate X-Ray will apply when it detects anomalies. X-Ray determines the appropriate rate between your baseline and the maximum, depending on anomaly activity."}},"type":"object","required":["cooldownWindowMinutes","maxRate"]},"aws-native:xray:SamplingRuleTag":{"properties":{"key":{"type":"string","description":"The key name of the tag."},"value":{"type":"string","description":"The value for the tag."}},"type":"object","required":["key","value"]},"aws-native:xray:SamplingRuleUpdate":{"properties":{"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"Matches attributes derived from the request."},"fixedRate":{"type":"number","description":"The percentage of matching requests to instrument, after the reservoir is exhausted."},"host":{"type":"string","description":"Matches the hostname from a request URL."},"httpMethod":{"type":"string","description":"Matches the HTTP method from a request URL."},"priority":{"type":"integer","description":"The priority of the sampling rule."},"reservoirSize":{"type":"integer","description":"A fixed number of matching requests to instrument per second, prior to applying the fixed rate. The reservoir is not used directly by services, but applies to all services using the rule collectively."},"resourceArn":{"type":"string","description":"Matches the ARN of the AWS resource on which the service runs."},"ruleArn":{"type":"string"},"ruleName":{"type":"string"},"samplingRateBoost":{"$ref":"#/types/aws-native:xray:SamplingRuleSamplingRateBoost"},"serviceName":{"type":"string","description":"Matches the name that the service uses to identify itself in segments."},"serviceType":{"type":"string","description":"Matches the origin that the service uses to identify its type in segments."},"urlPath":{"type":"string","description":"Matches the path from a request URL."}},"type":"object"}},"provider":{"description":"The provider type for the AWS Cloud Control package. By default, resources use package-wide configuration settings, however an explicit `Provider` instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the [documentation](https://www.pulumi.com/docs/reference/programming-model/#providers) for more information.","properties":{"allowedAccountIds":{"type":"array","items":{"type":"string"},"description":"List of allowed AWS account IDs to prevent you from mistakenly using an incorrect one. Conflicts with `forbiddenAccountIds`."},"assumeRole":{"$ref":"#/types/aws-native:index:ProviderAssumeRole","description":"Configuration for retrieving temporary credentials from the STS service."},"autoNaming":{"$ref":"#/types/aws-native:index:ProviderAutoNaming","description":"The configuration for automatically naming resources."},"defaultTags":{"$ref":"#/types/aws-native:index:ProviderDefaultTags","description":"Configuration block with resource tag settings to apply across all resources handled by this provider. This is designed to replace redundant per-resource `tags` configurations. Provider tags can be overridden with new values, but not excluded from specific resources. To override provider tag values, use the `tags` argument within a resource to configure new tag values for matching keys."},"endpoints":{"type":"array","items":{"$ref":"#/types/aws-native:index:ProviderEndpoint"},"description":"Configuration block for customizing service endpoints."},"forbiddenAccountIds":{"type":"array","items":{"type":"string"},"description":"List of forbidden AWS account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with `allowedAccountIds`."},"ignoreTags":{"$ref":"#/types/aws-native:index:ProviderIgnoreTags","description":"Configuration block with resource tag settings to ignore across all resources handled by this provider (except any individual service tag resources such as `ec2.Tag`) for situations where external systems are managing certain resource tags."},"insecure":{"type":"boolean","description":"Explicitly allow the provider to perform \"insecure\" SSL requests. If omitted,default value is `false`."},"maxRetries":{"type":"integer","description":"The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown."},"profile":{"type":"string","description":"The profile for API operations. If not set, the default profile created with `aws configure` will be used."},"region":{"type":"string","$ref":"#/types/aws-native:index/region:Region","description":"The region where AWS operations will take place. Examples are `us-east-1`, `us-west-2`, etc."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role for Cloud Control API to use when performing this resource operation. Note, this is a unique feature for server side security enforcement, not to be confused with assumeRole, which is used to obtain temporary client credentials. If you do not specify a role, Cloud Control API uses a temporary session created using your AWS user credentials instead."},"s3UsePathStyle":{"type":"boolean","description":"Set this to true to use path-style addressing, i.e., `http://s3.amazonaws.com/BUCKET/KEY`. By default, the S3 client will use virtual hosted bucket addressing when possible (`http://BUCKET.s3.amazonaws.com/KEY`). Specific to the Amazon S3 service."},"sharedCredentialsFile":{"type":"string","description":"The path to the shared credentials file. If not set this defaults to `~/.aws/credentials`."},"skipCredentialsValidation":{"type":"boolean","description":"Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented."},"skipGetEc2Platforms":{"type":"boolean","description":"Skip getting the supported EC2 platforms. Used by users that don't have `ec2:DescribeAccountAttributes` permissions."},"skipMetadataApiCheck":{"type":"boolean","description":"Skip the AWS Metadata API check. Useful for AWS API implementations that do not have a metadata API endpoint. Setting to true prevents Pulumi from authenticating via the Metadata API. You may need to use other authentication methods like static credentials, configuration variables, or environment variables."},"skipRegionValidation":{"type":"boolean","description":"Skip static validation of region name. Used by users of alternative AWS-like APIs or users with access to regions that are not public."},"skipRequestingAccountId":{"type":"boolean","description":"Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API."}},"inputProperties":{"accessKey":{"type":"string","description":"The access key for API operations. You can retrieve this from the ‘Security \u0026 Credentials’ section of the AWS console.","secret":true},"allowedAccountIds":{"type":"array","items":{"type":"string"},"description":"List of allowed AWS account IDs to prevent you from mistakenly using an incorrect one. Conflicts with `forbiddenAccountIds`."},"assumeRole":{"$ref":"#/types/aws-native:index:ProviderAssumeRole","description":"Configuration for retrieving temporary credentials from the STS service."},"autoNaming":{"$ref":"#/types/aws-native:index:ProviderAutoNaming","description":"The configuration for automatically naming resources."},"defaultTags":{"$ref":"#/types/aws-native:index:ProviderDefaultTags","description":"Configuration block with resource tag settings to apply across all resources handled by this provider. This is designed to replace redundant per-resource `tags` configurations. Provider tags can be overridden with new values, but not excluded from specific resources. To override provider tag values, use the `tags` argument within a resource to configure new tag values for matching keys."},"endpoints":{"type":"array","items":{"$ref":"#/types/aws-native:index:ProviderEndpoint"},"description":"Configuration block for customizing service endpoints."},"forbiddenAccountIds":{"type":"array","items":{"type":"string"},"description":"List of forbidden AWS account IDs to prevent you from mistakenly using the wrong one (and potentially end up destroying a live environment). Conflicts with `allowedAccountIds`."},"ignoreTags":{"$ref":"#/types/aws-native:index:ProviderIgnoreTags","description":"Configuration block with resource tag settings to ignore across all resources handled by this provider (except any individual service tag resources such as `ec2.Tag`) for situations where external systems are managing certain resource tags."},"insecure":{"type":"boolean","description":"Explicitly allow the provider to perform \"insecure\" SSL requests. If omitted,default value is `false`."},"maxRetries":{"type":"integer","description":"The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown."},"profile":{"type":"string","description":"The profile for API operations. If not set, the default profile created with `aws configure` will be used.","defaultInfo":{"environment":["AWS_PROFILE"]}},"region":{"type":"string","$ref":"#/types/aws-native:index/region:Region","description":"The region where AWS operations will take place. Examples are `us-east-1`, `us-west-2`, etc.","defaultInfo":{"environment":["AWS_REGION","AWS_DEFAULT_REGION"]}},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role for Cloud Control API to use when performing this resource operation. Note, this is a unique feature for server side security enforcement, not to be confused with assumeRole, which is used to obtain temporary client credentials. If you do not specify a role, Cloud Control API uses a temporary session created using your AWS user credentials instead."},"s3UsePathStyle":{"type":"boolean","description":"Set this to true to use path-style addressing, i.e., `http://s3.amazonaws.com/BUCKET/KEY`. By default, the S3 client will use virtual hosted bucket addressing when possible (`http://BUCKET.s3.amazonaws.com/KEY`). Specific to the Amazon S3 service."},"secretKey":{"type":"string","description":"The secret key for API operations. You can retrieve this from the 'Security \u0026 Credentials' section of the AWS console.","secret":true},"sharedCredentialsFile":{"type":"string","description":"The path to the shared credentials file. If not set this defaults to `~/.aws/credentials`.","defaultInfo":{"environment":["AWS_SHARED_CREDENTIALS_FILE"]}},"skipCredentialsValidation":{"type":"boolean","description":"Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.","default":true},"skipGetEc2Platforms":{"type":"boolean","description":"Skip getting the supported EC2 platforms. Used by users that don't have `ec2:DescribeAccountAttributes` permissions.","default":true},"skipMetadataApiCheck":{"type":"boolean","description":"Skip the AWS Metadata API check. Useful for AWS API implementations that do not have a metadata API endpoint. Setting to true prevents Pulumi from authenticating via the Metadata API. You may need to use other authentication methods like static credentials, configuration variables, or environment variables.","default":true},"skipRegionValidation":{"type":"boolean","description":"Skip static validation of region name. Used by users of alternative AWS-like APIs or users with access to regions that are not public.","default":true},"skipRequestingAccountId":{"type":"boolean","description":"Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API."},"token":{"type":"string","description":"Session token for validating temporary credentials. Typically provided after successful identity federation or Multi-Factor Authentication (MFA) login. With MFA login, this is the session token provided afterward, not the 6 digit MFA code used to get temporary credentials.","secret":true}},"requiredInputs":["region"]},"resources":{"aws-native:accessanalyzer:Analyzer":{"description":"The AWS::AccessAnalyzer::Analyzer type specifies an analyzer of the user's account\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var analyzer = new AwsNative.AccessAnalyzer.Analyzer(\"analyzer\", new()\n    {\n        AnalyzerName = \"DevAccountAnalyzer\",\n        ArchiveRules = new[]\n        {\n            new AwsNative.AccessAnalyzer.Inputs.AnalyzerArchiveRuleArgs\n            {\n                Filter = new[]\n                {\n                    new AwsNative.AccessAnalyzer.Inputs.AnalyzerFilterArgs\n                    {\n                        Eq = new[]\n                        {\n                            \"123456789012\",\n                        },\n                        Property = \"principal.AWS\",\n                    },\n                },\n                RuleName = \"ArchiveTrustedAccountAccess\",\n            },\n            new AwsNative.AccessAnalyzer.Inputs.AnalyzerArchiveRuleArgs\n            {\n                Filter = new[]\n                {\n                    new AwsNative.AccessAnalyzer.Inputs.AnalyzerFilterArgs\n                    {\n                        Contains = new[]\n                        {\n                            \"arn:aws:s3:::docs-bucket\",\n                            \"arn:aws:s3:::clients-bucket\",\n                        },\n                        Property = \"resource\",\n                    },\n                },\n                RuleName = \"ArchivePublicS3BucketsAccess\",\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Kind\",\n                Value = \"Dev\",\n            },\n        },\n        Type = \"ACCOUNT\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/accessanalyzer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := accessanalyzer.NewAnalyzer(ctx, \"analyzer\", \u0026accessanalyzer.AnalyzerArgs{\n\t\t\tAnalyzerName: pulumi.String(\"DevAccountAnalyzer\"),\n\t\t\tArchiveRules: accessanalyzer.AnalyzerArchiveRuleArray{\n\t\t\t\t\u0026accessanalyzer.AnalyzerArchiveRuleArgs{\n\t\t\t\t\tFilter: accessanalyzer.AnalyzerFilterArray{\n\t\t\t\t\t\t\u0026accessanalyzer.AnalyzerFilterArgs{\n\t\t\t\t\t\t\tEq: pulumi.StringArray{\n\t\t\t\t\t\t\t\tpulumi.String(\"123456789012\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tProperty: pulumi.String(\"principal.AWS\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tRuleName: pulumi.String(\"ArchiveTrustedAccountAccess\"),\n\t\t\t\t},\n\t\t\t\t\u0026accessanalyzer.AnalyzerArchiveRuleArgs{\n\t\t\t\t\tFilter: accessanalyzer.AnalyzerFilterArray{\n\t\t\t\t\t\t\u0026accessanalyzer.AnalyzerFilterArgs{\n\t\t\t\t\t\t\tContains: pulumi.StringArray{\n\t\t\t\t\t\t\t\tpulumi.String(\"arn:aws:s3:::docs-bucket\"),\n\t\t\t\t\t\t\t\tpulumi.String(\"arn:aws:s3:::clients-bucket\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\tProperty: pulumi.String(\"resource\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tRuleName: pulumi.String(\"ArchivePublicS3BucketsAccess\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Kind\"),\n\t\t\t\t\tValue: pulumi.String(\"Dev\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tType: pulumi.String(\"ACCOUNT\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst analyzer = new aws_native.accessanalyzer.Analyzer(\"analyzer\", {\n    analyzerName: \"DevAccountAnalyzer\",\n    archiveRules: [\n        {\n            filter: [{\n                eq: [\"123456789012\"],\n                property: \"principal.AWS\",\n            }],\n            ruleName: \"ArchiveTrustedAccountAccess\",\n        },\n        {\n            filter: [{\n                contains: [\n                    \"arn:aws:s3:::docs-bucket\",\n                    \"arn:aws:s3:::clients-bucket\",\n                ],\n                property: \"resource\",\n            }],\n            ruleName: \"ArchivePublicS3BucketsAccess\",\n        },\n    ],\n    tags: [{\n        key: \"Kind\",\n        value: \"Dev\",\n    }],\n    type: \"ACCOUNT\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanalyzer = aws_native.accessanalyzer.Analyzer(\"analyzer\",\n    analyzer_name=\"DevAccountAnalyzer\",\n    archive_rules=[\n        {\n            \"filter\": [{\n                \"eq\": [\"123456789012\"],\n                \"property\": \"principal.AWS\",\n            }],\n            \"rule_name\": \"ArchiveTrustedAccountAccess\",\n        },\n        {\n            \"filter\": [{\n                \"contains\": [\n                    \"arn:aws:s3:::docs-bucket\",\n                    \"arn:aws:s3:::clients-bucket\",\n                ],\n                \"property\": \"resource\",\n            }],\n            \"rule_name\": \"ArchivePublicS3BucketsAccess\",\n        },\n    ],\n    tags=[{\n        \"key\": \"Kind\",\n        \"value\": \"Dev\",\n    }],\n    type=\"ACCOUNT\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"analyzerConfiguration":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerConfigurationProperties","description":"The configuration for the analyzer"},"analyzerName":{"type":"string","description":"Analyzer name","replaceOnChanges":true},"archiveRules":{"type":"array","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerArchiveRule"},"description":"Specifies the archive rules to add for the analyzer. Archive rules automatically archive findings that meet the criteria you define for the rule."},"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the analyzer"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"type":"string","description":"The type of the analyzer, must be one of ACCOUNT, ORGANIZATION, ACCOUNT_INTERNAL_ACCESS, ORGANIZATION_INTERNAL_ACCESS, ACCOUNT_UNUSED_ACCESS and ORGANIZATION_UNUSED_ACCESS","replaceOnChanges":true}},"type":"object","required":["arn","type"],"inputProperties":{"analyzerConfiguration":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerConfigurationProperties","description":"The configuration for the analyzer"},"analyzerName":{"type":"string","description":"Analyzer name"},"archiveRules":{"type":"array","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerArchiveRule"},"description":"Specifies the archive rules to add for the analyzer. Archive rules automatically archive findings that meet the criteria you define for the rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"type":"string","description":"The type of the analyzer, must be one of ACCOUNT, ORGANIZATION, ACCOUNT_INTERNAL_ACCESS, ORGANIZATION_INTERNAL_ACCESS, ACCOUNT_UNUSED_ACCESS and ORGANIZATION_UNUSED_ACCESS"}},"requiredInputs":["type"]},"aws-native:acmpca:Certificate":{"description":"The ``AWS::ACMPCA::Certificate`` resource is used to issue a certificate using your private certificate authority. For more information, see the [IssueCertificate](https://docs.aws.amazon.com/privateca/latest/APIReference/API_IssueCertificate.html) action.","properties":{"apiPassthrough":{"$ref":"#/types/aws-native:acmpca:CertificateApiPassthrough","description":"Specifies X.509 certificate information to be included in the issued certificate. An ``APIPassthrough`` or ``APICSRPassthrough`` template variant must be selected, or else this parameter is ignored.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the issued certificate."},"certificate":{"type":"string","description":"The issued Base64 PEM-encoded certificate.","language":{"csharp":{"name":"CertificateValue"}}},"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the private CA issues the certificate.","replaceOnChanges":true},"certificateSigningRequest":{"type":"string","description":"The certificate signing request (CSR) for the certificate.","replaceOnChanges":true},"signingAlgorithm":{"type":"string","description":"The name of the algorithm that will be used to sign the certificate to be issued. \n This parameter should not be confused with the ``SigningAlgorithm`` parameter used to sign a CSR in the ``CreateCertificateAuthority`` action.\n  The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.","replaceOnChanges":true},"templateArn":{"type":"string","description":"Specifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, PCAshort defaults to the ``EndEntityCertificate/V1`` template. For more information about PCAshort templates, see [Using Templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html).","replaceOnChanges":true},"validity":{"$ref":"#/types/aws-native:acmpca:CertificateValidity","description":"The period of time during which the certificate will be valid.","replaceOnChanges":true},"validityNotBefore":{"$ref":"#/types/aws-native:acmpca:CertificateValidity","description":"Information describing the start of the validity period of the certificate. This parameter sets the \"Not Before\" date for the certificate.\n By default, when issuing a certificate, PCAshort sets the \"Not Before\" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The ``ValidityNotBefore`` parameter can be used to customize the \"Not Before\" value. \n Unlike the ``Validity`` parameter, the ``ValidityNotBefore`` parameter is optional.\n The ``ValidityNotBefore`` value is expressed as an explicit date and time, using the ``Validity`` type value ``ABSOLUTE``.","replaceOnChanges":true}},"type":"object","required":["arn","certificate","certificateAuthorityArn","certificateSigningRequest","signingAlgorithm","validity"],"inputProperties":{"apiPassthrough":{"$ref":"#/types/aws-native:acmpca:CertificateApiPassthrough","description":"Specifies X.509 certificate information to be included in the issued certificate. An ``APIPassthrough`` or ``APICSRPassthrough`` template variant must be selected, or else this parameter is ignored."},"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the private CA issues the certificate."},"certificateSigningRequest":{"type":"string","description":"The certificate signing request (CSR) for the certificate."},"signingAlgorithm":{"type":"string","description":"The name of the algorithm that will be used to sign the certificate to be issued. \n This parameter should not be confused with the ``SigningAlgorithm`` parameter used to sign a CSR in the ``CreateCertificateAuthority`` action.\n  The specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key."},"templateArn":{"type":"string","description":"Specifies a custom configuration template to use when issuing a certificate. If this parameter is not provided, PCAshort defaults to the ``EndEntityCertificate/V1`` template. For more information about PCAshort templates, see [Using Templates](https://docs.aws.amazon.com/privateca/latest/userguide/UsingTemplates.html)."},"validity":{"$ref":"#/types/aws-native:acmpca:CertificateValidity","description":"The period of time during which the certificate will be valid."},"validityNotBefore":{"$ref":"#/types/aws-native:acmpca:CertificateValidity","description":"Information describing the start of the validity period of the certificate. This parameter sets the \"Not Before\" date for the certificate.\n By default, when issuing a certificate, PCAshort sets the \"Not Before\" date to the issuance time minus 60 minutes. This compensates for clock inconsistencies across computer systems. The ``ValidityNotBefore`` parameter can be used to customize the \"Not Before\" value. \n Unlike the ``Validity`` parameter, the ``ValidityNotBefore`` parameter is optional.\n The ``ValidityNotBefore`` value is expressed as an explicit date and time, using the ``Validity`` type value ``ABSOLUTE``."}},"requiredInputs":["certificateAuthorityArn","certificateSigningRequest","signingAlgorithm","validity"]},"aws-native:acmpca:CertificateAuthority":{"description":"Private certificate authority.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var rootCA = new AwsNative.Acmpca.CertificateAuthority(\"rootCA\", new()\n    {\n        Type = \"ROOT\",\n        KeyAlgorithm = \"RSA_2048\",\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        Subject = new AwsNative.Acmpca.Inputs.CertificateAuthoritySubjectArgs\n        {\n            Country = \"US\",\n            Organization = \"string\",\n            OrganizationalUnit = \"string\",\n            DistinguishedNameQualifier = \"string\",\n            State = \"string\",\n            CommonName = \"123\",\n            SerialNumber = \"string\",\n            Locality = \"string\",\n            Title = \"string\",\n            Surname = \"string\",\n            GivenName = \"string\",\n            Initials = \"DG\",\n            Pseudonym = \"string\",\n            GenerationQualifier = \"DBG\",\n        },\n        RevocationConfiguration = new AwsNative.Acmpca.Inputs.CertificateAuthorityRevocationConfigurationArgs\n        {\n            CrlConfiguration = new AwsNative.Acmpca.Inputs.CertificateAuthorityCrlConfigurationArgs\n            {\n                Enabled = false,\n            },\n        },\n    });\n\n    var rootCACertificate = new AwsNative.Acmpca.Certificate(\"rootCACertificate\", new()\n    {\n        CertificateAuthorityArn = rootCA.Id,\n        CertificateSigningRequest = rootCA.CertificateSigningRequest,\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        TemplateArn = \"arn:aws:acm-pca:::template/RootCACertificate/V1\",\n        Validity = new AwsNative.Acmpca.Inputs.CertificateValidityArgs\n        {\n            Type = \"DAYS\",\n            Value = 100,\n        },\n    });\n\n    var rootCAActivation = new AwsNative.Acmpca.CertificateAuthorityActivation(\"rootCAActivation\", new()\n    {\n        CertificateAuthorityArn = rootCA.Id,\n        Certificate = rootCACertificate.Certificate,\n        Status = \"ACTIVE\",\n    });\n\n    var rootCAPermission = new AwsNative.Acmpca.Permission(\"rootCAPermission\", new()\n    {\n        Actions = new[]\n        {\n            \"IssueCertificate\",\n            \"GetCertificate\",\n            \"ListPermissions\",\n        },\n        CertificateAuthorityArn = rootCA.Id,\n        Principal = \"acm.amazonaws.com\",\n    });\n\n    var subordinateCAOne = new AwsNative.Acmpca.CertificateAuthority(\"subordinateCAOne\", new()\n    {\n        Type = \"SUBORDINATE\",\n        KeyAlgorithm = \"RSA_2048\",\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        Subject = new AwsNative.Acmpca.Inputs.CertificateAuthoritySubjectArgs\n        {\n            Country = \"US\",\n            Organization = \"string\",\n            OrganizationalUnit = \"string\",\n            DistinguishedNameQualifier = \"string\",\n            State = \"string\",\n            CommonName = \"Sub1\",\n            SerialNumber = \"string\",\n            Locality = \"string\",\n            Title = \"string\",\n            Surname = \"string\",\n            GivenName = \"string\",\n            Initials = \"DG\",\n            Pseudonym = \"string\",\n            GenerationQualifier = \"DBG\",\n        },\n        RevocationConfiguration = null,\n        Tags = new[] {},\n    });\n\n    var subordinateCAOneCACertificate = new AwsNative.Acmpca.Certificate(\"subordinateCAOneCACertificate\", new()\n    {\n        CertificateAuthorityArn = rootCA.Id,\n        CertificateSigningRequest = subordinateCAOne.CertificateSigningRequest,\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        TemplateArn = \"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen3/V1\",\n        Validity = new AwsNative.Acmpca.Inputs.CertificateValidityArgs\n        {\n            Type = \"DAYS\",\n            Value = 90,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            rootCAActivation,\n        },\n    });\n\n    var subordinateCAOneActivation = new AwsNative.Acmpca.CertificateAuthorityActivation(\"subordinateCAOneActivation\", new()\n    {\n        CertificateAuthorityArn = subordinateCAOne.Id,\n        Certificate = subordinateCAOneCACertificate.Certificate,\n        CertificateChain = rootCAActivation.CompleteCertificateChain,\n        Status = \"ACTIVE\",\n    });\n\n    var subordinateCAOnePermission = new AwsNative.Acmpca.Permission(\"subordinateCAOnePermission\", new()\n    {\n        Actions = new[]\n        {\n            \"IssueCertificate\",\n            \"GetCertificate\",\n            \"ListPermissions\",\n        },\n        CertificateAuthorityArn = subordinateCAOne.Id,\n        Principal = \"acm.amazonaws.com\",\n    });\n\n    var subordinateCATwo = new AwsNative.Acmpca.CertificateAuthority(\"subordinateCATwo\", new()\n    {\n        Type = \"SUBORDINATE\",\n        KeyAlgorithm = \"RSA_2048\",\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        Subject = new AwsNative.Acmpca.Inputs.CertificateAuthoritySubjectArgs\n        {\n            Country = \"US\",\n            Organization = \"string\",\n            OrganizationalUnit = \"string\",\n            DistinguishedNameQualifier = \"string\",\n            State = \"string\",\n            SerialNumber = \"string\",\n            Locality = \"string\",\n            Title = \"string\",\n            Surname = \"string\",\n            GivenName = \"string\",\n            Initials = \"DG\",\n            Pseudonym = \"string\",\n            GenerationQualifier = \"DBG\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key1\",\n                Value = \"Value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key2\",\n                Value = \"Value2\",\n            },\n        },\n    });\n\n    var subordinateCATwoCACertificate = new AwsNative.Acmpca.Certificate(\"subordinateCATwoCACertificate\", new()\n    {\n        CertificateAuthorityArn = subordinateCAOne.Id,\n        CertificateSigningRequest = subordinateCATwo.CertificateSigningRequest,\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        TemplateArn = \"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen2/V1\",\n        Validity = new AwsNative.Acmpca.Inputs.CertificateValidityArgs\n        {\n            Type = \"DAYS\",\n            Value = 80,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            subordinateCAOneActivation,\n        },\n    });\n\n    var subordinateCATwoActivation = new AwsNative.Acmpca.CertificateAuthorityActivation(\"subordinateCATwoActivation\", new()\n    {\n        CertificateAuthorityArn = subordinateCATwo.Id,\n        Certificate = subordinateCATwoCACertificate.Certificate,\n        CertificateChain = subordinateCAOneActivation.CompleteCertificateChain,\n    });\n\n    var subordinateCATwoPermission = new AwsNative.Acmpca.Permission(\"subordinateCATwoPermission\", new()\n    {\n        Actions = new[]\n        {\n            \"IssueCertificate\",\n            \"GetCertificate\",\n            \"ListPermissions\",\n        },\n        CertificateAuthorityArn = subordinateCATwo.Id,\n        Principal = \"acm.amazonaws.com\",\n    });\n\n    var endEntityCertificate = new AwsNative.Acmpca.Certificate(\"endEntityCertificate\", new()\n    {\n        CertificateAuthorityArn = subordinateCATwo.Id,\n        CertificateSigningRequest = @\"-----BEGIN CERTIFICATE REQUEST-----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\n97Ob1alpHPoZ7mWiEuJwjBPii6a9M9G30nUo39lBi1w=\n-----END CERTIFICATE REQUEST-----\",\n        SigningAlgorithm = \"SHA256WITHRSA\",\n        Validity = new AwsNative.Acmpca.Inputs.CertificateValidityArgs\n        {\n            Type = \"DAYS\",\n            Value = 70,\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            subordinateCATwoActivation,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"completeCertificateChain\"] = subordinateCATwoActivation.CompleteCertificateChain,\n        [\"certificateArn\"] = endEntityCertificate.Arn,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/acmpca\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\trootCA, err := acmpca.NewCertificateAuthority(ctx, \"rootCA\", \u0026acmpca.CertificateAuthorityArgs{\n\t\t\tType:             pulumi.String(\"ROOT\"),\n\t\t\tKeyAlgorithm:     pulumi.String(\"RSA_2048\"),\n\t\t\tSigningAlgorithm: pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tSubject: \u0026acmpca.CertificateAuthoritySubjectArgs{\n\t\t\t\tCountry:                    pulumi.String(\"US\"),\n\t\t\t\tOrganization:               pulumi.String(\"string\"),\n\t\t\t\tOrganizationalUnit:         pulumi.String(\"string\"),\n\t\t\t\tDistinguishedNameQualifier: pulumi.String(\"string\"),\n\t\t\t\tState:                      pulumi.String(\"string\"),\n\t\t\t\tCommonName:                 pulumi.String(\"123\"),\n\t\t\t\tSerialNumber:               pulumi.String(\"string\"),\n\t\t\t\tLocality:                   pulumi.String(\"string\"),\n\t\t\t\tTitle:                      pulumi.String(\"string\"),\n\t\t\t\tSurname:                    pulumi.String(\"string\"),\n\t\t\t\tGivenName:                  pulumi.String(\"string\"),\n\t\t\t\tInitials:                   pulumi.String(\"DG\"),\n\t\t\t\tPseudonym:                  pulumi.String(\"string\"),\n\t\t\t\tGenerationQualifier:        pulumi.String(\"DBG\"),\n\t\t\t},\n\t\t\tRevocationConfiguration: \u0026acmpca.CertificateAuthorityRevocationConfigurationArgs{\n\t\t\t\tCrlConfiguration: \u0026acmpca.CertificateAuthorityCrlConfigurationArgs{\n\t\t\t\t\tEnabled: pulumi.Bool(false),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\trootCACertificate, err := acmpca.NewCertificate(ctx, \"rootCACertificate\", \u0026acmpca.CertificateArgs{\n\t\t\tCertificateAuthorityArn:   rootCA.ID(),\n\t\t\tCertificateSigningRequest: rootCA.CertificateSigningRequest,\n\t\t\tSigningAlgorithm:          pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tTemplateArn:               pulumi.String(\"arn:aws:acm-pca:::template/RootCACertificate/V1\"),\n\t\t\tValidity: \u0026acmpca.CertificateValidityArgs{\n\t\t\t\tType:  pulumi.String(\"DAYS\"),\n\t\t\t\tValue: pulumi.Float64(100),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\trootCAActivation, err := acmpca.NewCertificateAuthorityActivation(ctx, \"rootCAActivation\", \u0026acmpca.CertificateAuthorityActivationArgs{\n\t\t\tCertificateAuthorityArn: rootCA.ID(),\n\t\t\tCertificate:             rootCACertificate.Certificate,\n\t\t\tStatus:                  pulumi.String(\"ACTIVE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = acmpca.NewPermission(ctx, \"rootCAPermission\", \u0026acmpca.PermissionArgs{\n\t\t\tActions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"IssueCertificate\"),\n\t\t\t\tpulumi.String(\"GetCertificate\"),\n\t\t\t\tpulumi.String(\"ListPermissions\"),\n\t\t\t},\n\t\t\tCertificateAuthorityArn: rootCA.ID(),\n\t\t\tPrincipal:               pulumi.String(\"acm.amazonaws.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsubordinateCAOne, err := acmpca.NewCertificateAuthority(ctx, \"subordinateCAOne\", \u0026acmpca.CertificateAuthorityArgs{\n\t\t\tType:             pulumi.String(\"SUBORDINATE\"),\n\t\t\tKeyAlgorithm:     pulumi.String(\"RSA_2048\"),\n\t\t\tSigningAlgorithm: pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tSubject: \u0026acmpca.CertificateAuthoritySubjectArgs{\n\t\t\t\tCountry:                    pulumi.String(\"US\"),\n\t\t\t\tOrganization:               pulumi.String(\"string\"),\n\t\t\t\tOrganizationalUnit:         pulumi.String(\"string\"),\n\t\t\t\tDistinguishedNameQualifier: pulumi.String(\"string\"),\n\t\t\t\tState:                      pulumi.String(\"string\"),\n\t\t\t\tCommonName:                 pulumi.String(\"Sub1\"),\n\t\t\t\tSerialNumber:               pulumi.String(\"string\"),\n\t\t\t\tLocality:                   pulumi.String(\"string\"),\n\t\t\t\tTitle:                      pulumi.String(\"string\"),\n\t\t\t\tSurname:                    pulumi.String(\"string\"),\n\t\t\t\tGivenName:                  pulumi.String(\"string\"),\n\t\t\t\tInitials:                   pulumi.String(\"DG\"),\n\t\t\t\tPseudonym:                  pulumi.String(\"string\"),\n\t\t\t\tGenerationQualifier:        pulumi.String(\"DBG\"),\n\t\t\t},\n\t\t\tRevocationConfiguration: \u0026acmpca.CertificateAuthorityRevocationConfigurationArgs{},\n\t\t\tTags:                    aws.TagArray{},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsubordinateCAOneCACertificate, err := acmpca.NewCertificate(ctx, \"subordinateCAOneCACertificate\", \u0026acmpca.CertificateArgs{\n\t\t\tCertificateAuthorityArn:   rootCA.ID(),\n\t\t\tCertificateSigningRequest: subordinateCAOne.CertificateSigningRequest,\n\t\t\tSigningAlgorithm:          pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tTemplateArn:               pulumi.String(\"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen3/V1\"),\n\t\t\tValidity: \u0026acmpca.CertificateValidityArgs{\n\t\t\t\tType:  pulumi.String(\"DAYS\"),\n\t\t\t\tValue: pulumi.Float64(90),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\trootCAActivation,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsubordinateCAOneActivation, err := acmpca.NewCertificateAuthorityActivation(ctx, \"subordinateCAOneActivation\", \u0026acmpca.CertificateAuthorityActivationArgs{\n\t\t\tCertificateAuthorityArn: subordinateCAOne.ID(),\n\t\t\tCertificate:             subordinateCAOneCACertificate.Certificate,\n\t\t\tCertificateChain:        rootCAActivation.CompleteCertificateChain,\n\t\t\tStatus:                  pulumi.String(\"ACTIVE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = acmpca.NewPermission(ctx, \"subordinateCAOnePermission\", \u0026acmpca.PermissionArgs{\n\t\t\tActions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"IssueCertificate\"),\n\t\t\t\tpulumi.String(\"GetCertificate\"),\n\t\t\t\tpulumi.String(\"ListPermissions\"),\n\t\t\t},\n\t\t\tCertificateAuthorityArn: subordinateCAOne.ID(),\n\t\t\tPrincipal:               pulumi.String(\"acm.amazonaws.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsubordinateCATwo, err := acmpca.NewCertificateAuthority(ctx, \"subordinateCATwo\", \u0026acmpca.CertificateAuthorityArgs{\n\t\t\tType:             pulumi.String(\"SUBORDINATE\"),\n\t\t\tKeyAlgorithm:     pulumi.String(\"RSA_2048\"),\n\t\t\tSigningAlgorithm: pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tSubject: \u0026acmpca.CertificateAuthoritySubjectArgs{\n\t\t\t\tCountry:                    pulumi.String(\"US\"),\n\t\t\t\tOrganization:               pulumi.String(\"string\"),\n\t\t\t\tOrganizationalUnit:         pulumi.String(\"string\"),\n\t\t\t\tDistinguishedNameQualifier: pulumi.String(\"string\"),\n\t\t\t\tState:                      pulumi.String(\"string\"),\n\t\t\t\tSerialNumber:               pulumi.String(\"string\"),\n\t\t\t\tLocality:                   pulumi.String(\"string\"),\n\t\t\t\tTitle:                      pulumi.String(\"string\"),\n\t\t\t\tSurname:                    pulumi.String(\"string\"),\n\t\t\t\tGivenName:                  pulumi.String(\"string\"),\n\t\t\t\tInitials:                   pulumi.String(\"DG\"),\n\t\t\t\tPseudonym:                  pulumi.String(\"string\"),\n\t\t\t\tGenerationQualifier:        pulumi.String(\"DBG\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key2\"),\n\t\t\t\t\tValue: pulumi.String(\"Value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsubordinateCATwoCACertificate, err := acmpca.NewCertificate(ctx, \"subordinateCATwoCACertificate\", \u0026acmpca.CertificateArgs{\n\t\t\tCertificateAuthorityArn:   subordinateCAOne.ID(),\n\t\t\tCertificateSigningRequest: subordinateCATwo.CertificateSigningRequest,\n\t\t\tSigningAlgorithm:          pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tTemplateArn:               pulumi.String(\"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen2/V1\"),\n\t\t\tValidity: \u0026acmpca.CertificateValidityArgs{\n\t\t\t\tType:  pulumi.String(\"DAYS\"),\n\t\t\t\tValue: pulumi.Float64(80),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tsubordinateCAOneActivation,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsubordinateCATwoActivation, err := acmpca.NewCertificateAuthorityActivation(ctx, \"subordinateCATwoActivation\", \u0026acmpca.CertificateAuthorityActivationArgs{\n\t\t\tCertificateAuthorityArn: subordinateCATwo.ID(),\n\t\t\tCertificate:             subordinateCATwoCACertificate.Certificate,\n\t\t\tCertificateChain:        subordinateCAOneActivation.CompleteCertificateChain,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = acmpca.NewPermission(ctx, \"subordinateCATwoPermission\", \u0026acmpca.PermissionArgs{\n\t\t\tActions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"IssueCertificate\"),\n\t\t\t\tpulumi.String(\"GetCertificate\"),\n\t\t\t\tpulumi.String(\"ListPermissions\"),\n\t\t\t},\n\t\t\tCertificateAuthorityArn: subordinateCATwo.ID(),\n\t\t\tPrincipal:               pulumi.String(\"acm.amazonaws.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tendEntityCertificate, err := acmpca.NewCertificate(ctx, \"endEntityCertificate\", \u0026acmpca.CertificateArgs{\n\t\t\tCertificateAuthorityArn: subordinateCATwo.ID(),\n\t\t\tCertificateSigningRequest: pulumi.String(`-----BEGIN CERTIFICATE REQUEST-----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\n97Ob1alpHPoZ7mWiEuJwjBPii6a9M9G30nUo39lBi1w=\n-----END CERTIFICATE REQUEST-----`),\n\t\t\tSigningAlgorithm: pulumi.String(\"SHA256WITHRSA\"),\n\t\t\tValidity: \u0026acmpca.CertificateValidityArgs{\n\t\t\t\tType:  pulumi.String(\"DAYS\"),\n\t\t\t\tValue: pulumi.Float64(70),\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tsubordinateCATwoActivation,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"completeCertificateChain\", subordinateCATwoActivation.CompleteCertificateChain)\n\t\tctx.Export(\"certificateArn\", endEntityCertificate.Arn)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst rootCA = new aws_native.acmpca.CertificateAuthority(\"rootCA\", {\n    type: \"ROOT\",\n    keyAlgorithm: \"RSA_2048\",\n    signingAlgorithm: \"SHA256WITHRSA\",\n    subject: {\n        country: \"US\",\n        organization: \"string\",\n        organizationalUnit: \"string\",\n        distinguishedNameQualifier: \"string\",\n        state: \"string\",\n        commonName: \"123\",\n        serialNumber: \"string\",\n        locality: \"string\",\n        title: \"string\",\n        surname: \"string\",\n        givenName: \"string\",\n        initials: \"DG\",\n        pseudonym: \"string\",\n        generationQualifier: \"DBG\",\n    },\n    revocationConfiguration: {\n        crlConfiguration: {\n            enabled: false,\n        },\n    },\n});\nconst rootCACertificate = new aws_native.acmpca.Certificate(\"rootCACertificate\", {\n    certificateAuthorityArn: rootCA.id,\n    certificateSigningRequest: rootCA.certificateSigningRequest,\n    signingAlgorithm: \"SHA256WITHRSA\",\n    templateArn: \"arn:aws:acm-pca:::template/RootCACertificate/V1\",\n    validity: {\n        type: \"DAYS\",\n        value: 100,\n    },\n});\nconst rootCAActivation = new aws_native.acmpca.CertificateAuthorityActivation(\"rootCAActivation\", {\n    certificateAuthorityArn: rootCA.id,\n    certificate: rootCACertificate.certificate,\n    status: \"ACTIVE\",\n});\nconst rootCAPermission = new aws_native.acmpca.Permission(\"rootCAPermission\", {\n    actions: [\n        \"IssueCertificate\",\n        \"GetCertificate\",\n        \"ListPermissions\",\n    ],\n    certificateAuthorityArn: rootCA.id,\n    principal: \"acm.amazonaws.com\",\n});\nconst subordinateCAOne = new aws_native.acmpca.CertificateAuthority(\"subordinateCAOne\", {\n    type: \"SUBORDINATE\",\n    keyAlgorithm: \"RSA_2048\",\n    signingAlgorithm: \"SHA256WITHRSA\",\n    subject: {\n        country: \"US\",\n        organization: \"string\",\n        organizationalUnit: \"string\",\n        distinguishedNameQualifier: \"string\",\n        state: \"string\",\n        commonName: \"Sub1\",\n        serialNumber: \"string\",\n        locality: \"string\",\n        title: \"string\",\n        surname: \"string\",\n        givenName: \"string\",\n        initials: \"DG\",\n        pseudonym: \"string\",\n        generationQualifier: \"DBG\",\n    },\n    revocationConfiguration: {},\n    tags: [],\n});\nconst subordinateCAOneCACertificate = new aws_native.acmpca.Certificate(\"subordinateCAOneCACertificate\", {\n    certificateAuthorityArn: rootCA.id,\n    certificateSigningRequest: subordinateCAOne.certificateSigningRequest,\n    signingAlgorithm: \"SHA256WITHRSA\",\n    templateArn: \"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen3/V1\",\n    validity: {\n        type: \"DAYS\",\n        value: 90,\n    },\n}, {\n    dependsOn: [rootCAActivation],\n});\nconst subordinateCAOneActivation = new aws_native.acmpca.CertificateAuthorityActivation(\"subordinateCAOneActivation\", {\n    certificateAuthorityArn: subordinateCAOne.id,\n    certificate: subordinateCAOneCACertificate.certificate,\n    certificateChain: rootCAActivation.completeCertificateChain,\n    status: \"ACTIVE\",\n});\nconst subordinateCAOnePermission = new aws_native.acmpca.Permission(\"subordinateCAOnePermission\", {\n    actions: [\n        \"IssueCertificate\",\n        \"GetCertificate\",\n        \"ListPermissions\",\n    ],\n    certificateAuthorityArn: subordinateCAOne.id,\n    principal: \"acm.amazonaws.com\",\n});\nconst subordinateCATwo = new aws_native.acmpca.CertificateAuthority(\"subordinateCATwo\", {\n    type: \"SUBORDINATE\",\n    keyAlgorithm: \"RSA_2048\",\n    signingAlgorithm: \"SHA256WITHRSA\",\n    subject: {\n        country: \"US\",\n        organization: \"string\",\n        organizationalUnit: \"string\",\n        distinguishedNameQualifier: \"string\",\n        state: \"string\",\n        serialNumber: \"string\",\n        locality: \"string\",\n        title: \"string\",\n        surname: \"string\",\n        givenName: \"string\",\n        initials: \"DG\",\n        pseudonym: \"string\",\n        generationQualifier: \"DBG\",\n    },\n    tags: [\n        {\n            key: \"Key1\",\n            value: \"Value1\",\n        },\n        {\n            key: \"Key2\",\n            value: \"Value2\",\n        },\n    ],\n});\nconst subordinateCATwoCACertificate = new aws_native.acmpca.Certificate(\"subordinateCATwoCACertificate\", {\n    certificateAuthorityArn: subordinateCAOne.id,\n    certificateSigningRequest: subordinateCATwo.certificateSigningRequest,\n    signingAlgorithm: \"SHA256WITHRSA\",\n    templateArn: \"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen2/V1\",\n    validity: {\n        type: \"DAYS\",\n        value: 80,\n    },\n}, {\n    dependsOn: [subordinateCAOneActivation],\n});\nconst subordinateCATwoActivation = new aws_native.acmpca.CertificateAuthorityActivation(\"subordinateCATwoActivation\", {\n    certificateAuthorityArn: subordinateCATwo.id,\n    certificate: subordinateCATwoCACertificate.certificate,\n    certificateChain: subordinateCAOneActivation.completeCertificateChain,\n});\nconst subordinateCATwoPermission = new aws_native.acmpca.Permission(\"subordinateCATwoPermission\", {\n    actions: [\n        \"IssueCertificate\",\n        \"GetCertificate\",\n        \"ListPermissions\",\n    ],\n    certificateAuthorityArn: subordinateCATwo.id,\n    principal: \"acm.amazonaws.com\",\n});\nconst endEntityCertificate = new aws_native.acmpca.Certificate(\"endEntityCertificate\", {\n    certificateAuthorityArn: subordinateCATwo.id,\n    certificateSigningRequest: `-----BEGIN CERTIFICATE REQUEST-----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\n97Ob1alpHPoZ7mWiEuJwjBPii6a9M9G30nUo39lBi1w=\n-----END CERTIFICATE REQUEST-----`,\n    signingAlgorithm: \"SHA256WITHRSA\",\n    validity: {\n        type: \"DAYS\",\n        value: 70,\n    },\n}, {\n    dependsOn: [subordinateCATwoActivation],\n});\nexport const completeCertificateChain = subordinateCATwoActivation.completeCertificateChain;\nexport const certificateArn = endEntityCertificate.arn;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nroot_ca = aws_native.acmpca.CertificateAuthority(\"rootCA\",\n    type=\"ROOT\",\n    key_algorithm=\"RSA_2048\",\n    signing_algorithm=\"SHA256WITHRSA\",\n    subject={\n        \"country\": \"US\",\n        \"organization\": \"string\",\n        \"organizational_unit\": \"string\",\n        \"distinguished_name_qualifier\": \"string\",\n        \"state\": \"string\",\n        \"common_name\": \"123\",\n        \"serial_number\": \"string\",\n        \"locality\": \"string\",\n        \"title\": \"string\",\n        \"surname\": \"string\",\n        \"given_name\": \"string\",\n        \"initials\": \"DG\",\n        \"pseudonym\": \"string\",\n        \"generation_qualifier\": \"DBG\",\n    },\n    revocation_configuration={\n        \"crl_configuration\": {\n            \"enabled\": False,\n        },\n    })\nroot_ca_certificate = aws_native.acmpca.Certificate(\"rootCACertificate\",\n    certificate_authority_arn=root_ca.id,\n    certificate_signing_request=root_ca.certificate_signing_request,\n    signing_algorithm=\"SHA256WITHRSA\",\n    template_arn=\"arn:aws:acm-pca:::template/RootCACertificate/V1\",\n    validity={\n        \"type\": \"DAYS\",\n        \"value\": 100,\n    })\nroot_ca_activation = aws_native.acmpca.CertificateAuthorityActivation(\"rootCAActivation\",\n    certificate_authority_arn=root_ca.id,\n    certificate=root_ca_certificate.certificate,\n    status=\"ACTIVE\")\nroot_ca_permission = aws_native.acmpca.Permission(\"rootCAPermission\",\n    actions=[\n        \"IssueCertificate\",\n        \"GetCertificate\",\n        \"ListPermissions\",\n    ],\n    certificate_authority_arn=root_ca.id,\n    principal=\"acm.amazonaws.com\")\nsubordinate_ca_one = aws_native.acmpca.CertificateAuthority(\"subordinateCAOne\",\n    type=\"SUBORDINATE\",\n    key_algorithm=\"RSA_2048\",\n    signing_algorithm=\"SHA256WITHRSA\",\n    subject={\n        \"country\": \"US\",\n        \"organization\": \"string\",\n        \"organizational_unit\": \"string\",\n        \"distinguished_name_qualifier\": \"string\",\n        \"state\": \"string\",\n        \"common_name\": \"Sub1\",\n        \"serial_number\": \"string\",\n        \"locality\": \"string\",\n        \"title\": \"string\",\n        \"surname\": \"string\",\n        \"given_name\": \"string\",\n        \"initials\": \"DG\",\n        \"pseudonym\": \"string\",\n        \"generation_qualifier\": \"DBG\",\n    },\n    revocation_configuration={},\n    tags=[])\nsubordinate_ca_one_ca_certificate = aws_native.acmpca.Certificate(\"subordinateCAOneCACertificate\",\n    certificate_authority_arn=root_ca.id,\n    certificate_signing_request=subordinate_ca_one.certificate_signing_request,\n    signing_algorithm=\"SHA256WITHRSA\",\n    template_arn=\"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen3/V1\",\n    validity={\n        \"type\": \"DAYS\",\n        \"value\": 90,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[root_ca_activation]))\nsubordinate_ca_one_activation = aws_native.acmpca.CertificateAuthorityActivation(\"subordinateCAOneActivation\",\n    certificate_authority_arn=subordinate_ca_one.id,\n    certificate=subordinate_ca_one_ca_certificate.certificate,\n    certificate_chain=root_ca_activation.complete_certificate_chain,\n    status=\"ACTIVE\")\nsubordinate_ca_one_permission = aws_native.acmpca.Permission(\"subordinateCAOnePermission\",\n    actions=[\n        \"IssueCertificate\",\n        \"GetCertificate\",\n        \"ListPermissions\",\n    ],\n    certificate_authority_arn=subordinate_ca_one.id,\n    principal=\"acm.amazonaws.com\")\nsubordinate_ca_two = aws_native.acmpca.CertificateAuthority(\"subordinateCATwo\",\n    type=\"SUBORDINATE\",\n    key_algorithm=\"RSA_2048\",\n    signing_algorithm=\"SHA256WITHRSA\",\n    subject={\n        \"country\": \"US\",\n        \"organization\": \"string\",\n        \"organizational_unit\": \"string\",\n        \"distinguished_name_qualifier\": \"string\",\n        \"state\": \"string\",\n        \"serial_number\": \"string\",\n        \"locality\": \"string\",\n        \"title\": \"string\",\n        \"surname\": \"string\",\n        \"given_name\": \"string\",\n        \"initials\": \"DG\",\n        \"pseudonym\": \"string\",\n        \"generation_qualifier\": \"DBG\",\n    },\n    tags=[\n        {\n            \"key\": \"Key1\",\n            \"value\": \"Value1\",\n        },\n        {\n            \"key\": \"Key2\",\n            \"value\": \"Value2\",\n        },\n    ])\nsubordinate_ca_two_ca_certificate = aws_native.acmpca.Certificate(\"subordinateCATwoCACertificate\",\n    certificate_authority_arn=subordinate_ca_one.id,\n    certificate_signing_request=subordinate_ca_two.certificate_signing_request,\n    signing_algorithm=\"SHA256WITHRSA\",\n    template_arn=\"arn:aws:acm-pca:::template/SubordinateCACertificate_PathLen2/V1\",\n    validity={\n        \"type\": \"DAYS\",\n        \"value\": 80,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[subordinate_ca_one_activation]))\nsubordinate_ca_two_activation = aws_native.acmpca.CertificateAuthorityActivation(\"subordinateCATwoActivation\",\n    certificate_authority_arn=subordinate_ca_two.id,\n    certificate=subordinate_ca_two_ca_certificate.certificate,\n    certificate_chain=subordinate_ca_one_activation.complete_certificate_chain)\nsubordinate_ca_two_permission = aws_native.acmpca.Permission(\"subordinateCATwoPermission\",\n    actions=[\n        \"IssueCertificate\",\n        \"GetCertificate\",\n        \"ListPermissions\",\n    ],\n    certificate_authority_arn=subordinate_ca_two.id,\n    principal=\"acm.amazonaws.com\")\nend_entity_certificate = aws_native.acmpca.Certificate(\"endEntityCertificate\",\n    certificate_authority_arn=subordinate_ca_two.id,\n    certificate_signing_request=\"\"\"-----BEGIN CERTIFICATE REQUEST-----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\n97Ob1alpHPoZ7mWiEuJwjBPii6a9M9G30nUo39lBi1w=\n-----END CERTIFICATE REQUEST-----\"\"\",\n    signing_algorithm=\"SHA256WITHRSA\",\n    validity={\n        \"type\": \"DAYS\",\n        \"value\": 70,\n    },\n    opts = pulumi.ResourceOptions(depends_on=[subordinate_ca_two_activation]))\npulumi.export(\"completeCertificateChain\", subordinate_ca_two_activation.complete_certificate_chain)\npulumi.export(\"certificateArn\", end_entity_certificate.arn)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate authority."},"certificateSigningRequest":{"type":"string","description":"The base64 PEM-encoded certificate signing request (CSR) for your certificate authority certificate."},"csrExtensions":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityCsrExtensions","description":"Structure that contains CSR pass through extension information used by the CreateCertificateAuthority action.","replaceOnChanges":true},"keyAlgorithm":{"type":"string","description":"Public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate.","replaceOnChanges":true},"keyStorageSecurityStandard":{"type":"string","description":"KeyStorageSecurityStadard defines a cryptographic key management compliance standard used for handling CA keys.","replaceOnChanges":true},"revocationConfiguration":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityRevocationConfiguration","description":"Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions."},"signingAlgorithm":{"type":"string","description":"Algorithm your CA uses to sign certificate requests.","replaceOnChanges":true},"subject":{"$ref":"#/types/aws-native:acmpca:CertificateAuthoritySubject","description":"Structure that contains X.500 distinguished name information for your CA.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that will be attached to the new private CA. You can associate up to 50 tags with a private CA. For information using tags with IAM to manage permissions, see [Controlling Access Using IAM Tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html) ."},"type":{"type":"string","description":"The type of the certificate authority.","replaceOnChanges":true},"usageMode":{"type":"string","description":"Usage mode of the ceritificate authority.","replaceOnChanges":true}},"type":"object","required":["arn","certificateSigningRequest","keyAlgorithm","signingAlgorithm","subject","type"],"inputProperties":{"csrExtensions":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityCsrExtensions","description":"Structure that contains CSR pass through extension information used by the CreateCertificateAuthority action."},"keyAlgorithm":{"type":"string","description":"Public key algorithm and size, in bits, of the key pair that your CA creates when it issues a certificate."},"keyStorageSecurityStandard":{"type":"string","description":"KeyStorageSecurityStadard defines a cryptographic key management compliance standard used for handling CA keys."},"revocationConfiguration":{"$ref":"#/types/aws-native:acmpca:CertificateAuthorityRevocationConfiguration","description":"Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions."},"signingAlgorithm":{"type":"string","description":"Algorithm your CA uses to sign certificate requests."},"subject":{"$ref":"#/types/aws-native:acmpca:CertificateAuthoritySubject","description":"Structure that contains X.500 distinguished name information for your CA."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that will be attached to the new private CA. You can associate up to 50 tags with a private CA. For information using tags with IAM to manage permissions, see [Controlling Access Using IAM Tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html) ."},"type":{"type":"string","description":"The type of the certificate authority."},"usageMode":{"type":"string","description":"Usage mode of the ceritificate authority."}},"requiredInputs":["keyAlgorithm","signingAlgorithm","subject","type"]},"aws-native:acmpca:CertificateAuthorityActivation":{"description":"Used to install the certificate authority certificate and update the certificate authority status.","properties":{"certificate":{"type":"string","description":"Certificate Authority certificate that will be installed in the Certificate Authority."},"certificateAuthorityArn":{"type":"string","description":"Arn of the Certificate Authority.","replaceOnChanges":true},"certificateChain":{"type":"string","description":"Certificate chain for the Certificate Authority certificate."},"completeCertificateChain":{"type":"string","description":"The complete certificate chain, including the Certificate Authority certificate."},"status":{"type":"string","description":"The status of the Certificate Authority."}},"type":"object","required":["certificate","certificateAuthorityArn","completeCertificateChain"],"inputProperties":{"certificate":{"type":"string","description":"Certificate Authority certificate that will be installed in the Certificate Authority."},"certificateAuthorityArn":{"type":"string","description":"Arn of the Certificate Authority."},"certificateChain":{"type":"string","description":"Certificate chain for the Certificate Authority certificate."},"status":{"type":"string","description":"The status of the Certificate Authority."}},"requiredInputs":["certificate","certificateAuthorityArn"]},"aws-native:acmpca:Permission":{"description":"Permission set on private certificate authority","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"The actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided.","replaceOnChanges":true},"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission.","replaceOnChanges":true},"principal":{"type":"string","description":"The AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com.","replaceOnChanges":true},"sourceAccount":{"type":"string","description":"The ID of the calling account.","replaceOnChanges":true}},"type":"object","required":["actions","certificateAuthorityArn","principal"],"inputProperties":{"actions":{"type":"array","items":{"type":"string"},"description":"The actions that the specified AWS service principal can use. Actions IssueCertificate, GetCertificate and ListPermissions must be provided."},"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Private Certificate Authority that grants the permission."},"principal":{"type":"string","description":"The AWS service or identity that receives the permission. At this time, the only valid principal is acm.amazonaws.com."},"sourceAccount":{"type":"string","description":"The ID of the calling account."}},"requiredInputs":["actions","certificateAuthorityArn","principal"]},"aws-native:aiops:InvestigationGroup":{"description":"Definition of AWS::AIOps::InvestigationGroup Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the investigation group."},"chatbotNotificationChannels":{"type":"array","items":{"$ref":"#/types/aws-native:aiops:InvestigationGroupChatbotNotificationChannel"},"description":"An array of key-value pairs of notification channels to apply to this resource."},"createdAt":{"type":"string","description":"The date and time that the investigation group was created."},"createdBy":{"type":"string","description":"The name of the user who created the investigation group."},"crossAccountConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:aiops:InvestigationGroupCrossAccountConfiguration"},"description":"An array of cross account configurations."},"encryptionConfig":{"$ref":"#/types/aws-native:aiops:InvestigationGroupEncryptionConfigMap","description":"Specifies the customer managed AWS  key that the investigation group uses to encrypt data, if there is one. If not, the investigation group uses an AWS key to encrypt the data."},"investigationGroupPolicy":{"type":"string","description":"Investigation Group policy"},"isCloudTrailEventHistoryEnabled":{"type":"boolean","description":"Flag to enable cloud trail history"},"lastModifiedAt":{"type":"string","description":"The date and time that the investigation group was most recently modified."},"lastModifiedBy":{"type":"string","description":"The name of the user who created the investigation group."},"name":{"type":"string","description":"Specify either the name or the ARN of the investigation group that you want to view. This is used to set the name of the investigation group.","replaceOnChanges":true},"retentionInDays":{"type":"integer","description":"The number of days to retain the investigation group","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the IAM role that the investigation group uses for permissions to gather data."},"tagKeyBoundaries":{"type":"array","items":{"type":"string"},"description":"Displays the custom tag keys for custom applications in your system that you have specified in the investigation group. Resource tags help CloudWatch investigations narrow the search space when it is unable to discover definite relationships between resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","createdAt","createdBy","lastModifiedAt","lastModifiedBy","name"],"inputProperties":{"chatbotNotificationChannels":{"type":"array","items":{"$ref":"#/types/aws-native:aiops:InvestigationGroupChatbotNotificationChannel"},"description":"An array of key-value pairs of notification channels to apply to this resource."},"crossAccountConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:aiops:InvestigationGroupCrossAccountConfiguration"},"description":"An array of cross account configurations."},"encryptionConfig":{"$ref":"#/types/aws-native:aiops:InvestigationGroupEncryptionConfigMap","description":"Specifies the customer managed AWS  key that the investigation group uses to encrypt data, if there is one. If not, the investigation group uses an AWS key to encrypt the data."},"investigationGroupPolicy":{"type":"string","description":"Investigation Group policy"},"isCloudTrailEventHistoryEnabled":{"type":"boolean","description":"Flag to enable cloud trail history"},"name":{"type":"string","description":"Specify either the name or the ARN of the investigation group that you want to view. This is used to set the name of the investigation group."},"retentionInDays":{"type":"integer","description":"The number of days to retain the investigation group"},"roleArn":{"type":"string","description":"The ARN of the IAM role that the investigation group uses for permissions to gather data."},"tagKeyBoundaries":{"type":"array","items":{"type":"string"},"description":"Displays the custom tag keys for custom applications in your system that you have specified in the investigation group. Resource tags help CloudWatch investigations narrow the search space when it is unable to discover definite relationships between resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:amazonmq:Broker":{"description":"Resource type definition for AWS::AmazonMQ::Broker\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicBroker = new AwsNative.AmazonMq.Broker(\"basicBroker\", new()\n    {\n        AutoMinorVersionUpgrade = false,\n        BrokerName = \"MyBasicActiveBroker\",\n        DeploymentMode = AwsNative.AmazonMq.BrokerDeploymentMode.SingleInstance,\n        EngineType = \"ActiveMQ\",\n        EngineVersion = \"5.15.0\",\n        HostInstanceType = \"mq.t2.micro\",\n        PubliclyAccessible = true,\n        Users = new[]\n        {\n            new AwsNative.AmazonMq.Inputs.BrokerUserArgs\n            {\n                ConsoleAccess = true,\n                Groups = new[]\n                {\n                    \"MyGroup\",\n                },\n                Password = \"AmazonMqPassword\",\n                Username = \"AmazonMqUsername\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewBroker(ctx, \"basicBroker\", \u0026amazonmq.BrokerArgs{\n\t\t\tAutoMinorVersionUpgrade: pulumi.Bool(false),\n\t\t\tBrokerName:              pulumi.String(\"MyBasicActiveBroker\"),\n\t\t\tDeploymentMode:          pulumi.String(amazonmq.BrokerDeploymentModeSingleInstance),\n\t\t\tEngineType:              pulumi.String(\"ActiveMQ\"),\n\t\t\tEngineVersion:           pulumi.String(\"5.15.0\"),\n\t\t\tHostInstanceType:        pulumi.String(\"mq.t2.micro\"),\n\t\t\tPubliclyAccessible:      pulumi.Bool(true),\n\t\t\tUsers: amazonmq.BrokerUserArray{\n\t\t\t\t\u0026amazonmq.BrokerUserArgs{\n\t\t\t\t\tConsoleAccess: pulumi.Bool(true),\n\t\t\t\t\tGroups: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"MyGroup\"),\n\t\t\t\t\t},\n\t\t\t\t\tPassword: pulumi.String(\"AmazonMqPassword\"),\n\t\t\t\t\tUsername: pulumi.String(\"AmazonMqUsername\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicBroker = new aws_native.amazonmq.Broker(\"basicBroker\", {\n    autoMinorVersionUpgrade: false,\n    brokerName: \"MyBasicActiveBroker\",\n    deploymentMode: aws_native.amazonmq.BrokerDeploymentMode.SingleInstance,\n    engineType: \"ActiveMQ\",\n    engineVersion: \"5.15.0\",\n    hostInstanceType: \"mq.t2.micro\",\n    publiclyAccessible: true,\n    users: [{\n        consoleAccess: true,\n        groups: [\"MyGroup\"],\n        password: \"AmazonMqPassword\",\n        username: \"AmazonMqUsername\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_broker = aws_native.amazonmq.Broker(\"basicBroker\",\n    auto_minor_version_upgrade=False,\n    broker_name=\"MyBasicActiveBroker\",\n    deployment_mode=aws_native.amazonmq.BrokerDeploymentMode.SINGLE_INSTANCE,\n    engine_type=\"ActiveMQ\",\n    engine_version=\"5.15.0\",\n    host_instance_type=\"mq.t2.micro\",\n    publicly_accessible=True,\n    users=[{\n        \"console_access\": True,\n        \"groups\": [\"MyGroup\"],\n        \"password\": \"AmazonMqPassword\",\n        \"username\": \"AmazonMqUsername\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicBroker = new AwsNative.AmazonMq.Broker(\"basicBroker\", new()\n    {\n        AutoMinorVersionUpgrade = false,\n        BrokerName = \"MyBasicRabbitBroker\",\n        DeploymentMode = AwsNative.AmazonMq.BrokerDeploymentMode.SingleInstance,\n        EngineType = \"RabbitMQ\",\n        EngineVersion = \"3.8.6\",\n        HostInstanceType = \"mq.t3.micro\",\n        PubliclyAccessible = true,\n        Users = new[]\n        {\n            new AwsNative.AmazonMq.Inputs.BrokerUserArgs\n            {\n                Password = \"AmazonMqPassword\",\n                Username = \"AmazonMqUsername\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewBroker(ctx, \"basicBroker\", \u0026amazonmq.BrokerArgs{\n\t\t\tAutoMinorVersionUpgrade: pulumi.Bool(false),\n\t\t\tBrokerName:              pulumi.String(\"MyBasicRabbitBroker\"),\n\t\t\tDeploymentMode:          pulumi.String(amazonmq.BrokerDeploymentModeSingleInstance),\n\t\t\tEngineType:              pulumi.String(\"RabbitMQ\"),\n\t\t\tEngineVersion:           pulumi.String(\"3.8.6\"),\n\t\t\tHostInstanceType:        pulumi.String(\"mq.t3.micro\"),\n\t\t\tPubliclyAccessible:      pulumi.Bool(true),\n\t\t\tUsers: amazonmq.BrokerUserArray{\n\t\t\t\t\u0026amazonmq.BrokerUserArgs{\n\t\t\t\t\tPassword: pulumi.String(\"AmazonMqPassword\"),\n\t\t\t\t\tUsername: pulumi.String(\"AmazonMqUsername\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicBroker = new aws_native.amazonmq.Broker(\"basicBroker\", {\n    autoMinorVersionUpgrade: false,\n    brokerName: \"MyBasicRabbitBroker\",\n    deploymentMode: aws_native.amazonmq.BrokerDeploymentMode.SingleInstance,\n    engineType: \"RabbitMQ\",\n    engineVersion: \"3.8.6\",\n    hostInstanceType: \"mq.t3.micro\",\n    publiclyAccessible: true,\n    users: [{\n        password: \"AmazonMqPassword\",\n        username: \"AmazonMqUsername\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_broker = aws_native.amazonmq.Broker(\"basicBroker\",\n    auto_minor_version_upgrade=False,\n    broker_name=\"MyBasicRabbitBroker\",\n    deployment_mode=aws_native.amazonmq.BrokerDeploymentMode.SINGLE_INSTANCE,\n    engine_type=\"RabbitMQ\",\n    engine_version=\"3.8.6\",\n    host_instance_type=\"mq.t3.micro\",\n    publicly_accessible=True,\n    users=[{\n        \"password\": \"AmazonMqPassword\",\n        \"username\": \"AmazonMqUsername\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicBroker = new AwsNative.AmazonMq.Broker(\"basicBroker\", new()\n    {\n        AutoMinorVersionUpgrade = false,\n        BrokerName = \"MyBasicActiveBroker\",\n        DeploymentMode = AwsNative.AmazonMq.BrokerDeploymentMode.SingleInstance,\n        EngineType = \"ActiveMQ\",\n        EngineVersion = \"5.15.0\",\n        HostInstanceType = \"mq.t2.micro\",\n        PubliclyAccessible = true,\n        Users = new[]\n        {\n            new AwsNative.AmazonMq.Inputs.BrokerUserArgs\n            {\n                ConsoleAccess = true,\n                Groups = new[]\n                {\n                    \"MyGroup\",\n                },\n                Password = \"AmazonMqPassword\",\n                Username = \"AmazonMqUsername\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewBroker(ctx, \"basicBroker\", \u0026amazonmq.BrokerArgs{\n\t\t\tAutoMinorVersionUpgrade: pulumi.Bool(false),\n\t\t\tBrokerName:              pulumi.String(\"MyBasicActiveBroker\"),\n\t\t\tDeploymentMode:          pulumi.String(amazonmq.BrokerDeploymentModeSingleInstance),\n\t\t\tEngineType:              pulumi.String(\"ActiveMQ\"),\n\t\t\tEngineVersion:           pulumi.String(\"5.15.0\"),\n\t\t\tHostInstanceType:        pulumi.String(\"mq.t2.micro\"),\n\t\t\tPubliclyAccessible:      pulumi.Bool(true),\n\t\t\tUsers: amazonmq.BrokerUserArray{\n\t\t\t\t\u0026amazonmq.BrokerUserArgs{\n\t\t\t\t\tConsoleAccess: pulumi.Bool(true),\n\t\t\t\t\tGroups: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"MyGroup\"),\n\t\t\t\t\t},\n\t\t\t\t\tPassword: pulumi.String(\"AmazonMqPassword\"),\n\t\t\t\t\tUsername: pulumi.String(\"AmazonMqUsername\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicBroker = new aws_native.amazonmq.Broker(\"basicBroker\", {\n    autoMinorVersionUpgrade: false,\n    brokerName: \"MyBasicActiveBroker\",\n    deploymentMode: aws_native.amazonmq.BrokerDeploymentMode.SingleInstance,\n    engineType: \"ActiveMQ\",\n    engineVersion: \"5.15.0\",\n    hostInstanceType: \"mq.t2.micro\",\n    publiclyAccessible: true,\n    users: [{\n        consoleAccess: true,\n        groups: [\"MyGroup\"],\n        password: \"AmazonMqPassword\",\n        username: \"AmazonMqUsername\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_broker = aws_native.amazonmq.Broker(\"basicBroker\",\n    auto_minor_version_upgrade=False,\n    broker_name=\"MyBasicActiveBroker\",\n    deployment_mode=aws_native.amazonmq.BrokerDeploymentMode.SINGLE_INSTANCE,\n    engine_type=\"ActiveMQ\",\n    engine_version=\"5.15.0\",\n    host_instance_type=\"mq.t2.micro\",\n    publicly_accessible=True,\n    users=[{\n        \"console_access\": True,\n        \"groups\": [\"MyGroup\"],\n        \"password\": \"AmazonMqPassword\",\n        \"username\": \"AmazonMqUsername\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicBroker = new AwsNative.AmazonMq.Broker(\"basicBroker\", new()\n    {\n        AutoMinorVersionUpgrade = false,\n        BrokerName = \"MyBasicRabbitBroker\",\n        DeploymentMode = AwsNative.AmazonMq.BrokerDeploymentMode.SingleInstance,\n        EngineType = \"RabbitMQ\",\n        EngineVersion = \"3.8.6\",\n        HostInstanceType = \"mq.t3.micro\",\n        PubliclyAccessible = true,\n        Users = new[]\n        {\n            new AwsNative.AmazonMq.Inputs.BrokerUserArgs\n            {\n                Password = \"AmazonMqPassword\",\n                Username = \"AmazonMqUsername\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewBroker(ctx, \"basicBroker\", \u0026amazonmq.BrokerArgs{\n\t\t\tAutoMinorVersionUpgrade: pulumi.Bool(false),\n\t\t\tBrokerName:              pulumi.String(\"MyBasicRabbitBroker\"),\n\t\t\tDeploymentMode:          pulumi.String(amazonmq.BrokerDeploymentModeSingleInstance),\n\t\t\tEngineType:              pulumi.String(\"RabbitMQ\"),\n\t\t\tEngineVersion:           pulumi.String(\"3.8.6\"),\n\t\t\tHostInstanceType:        pulumi.String(\"mq.t3.micro\"),\n\t\t\tPubliclyAccessible:      pulumi.Bool(true),\n\t\t\tUsers: amazonmq.BrokerUserArray{\n\t\t\t\t\u0026amazonmq.BrokerUserArgs{\n\t\t\t\t\tPassword: pulumi.String(\"AmazonMqPassword\"),\n\t\t\t\t\tUsername: pulumi.String(\"AmazonMqUsername\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicBroker = new aws_native.amazonmq.Broker(\"basicBroker\", {\n    autoMinorVersionUpgrade: false,\n    brokerName: \"MyBasicRabbitBroker\",\n    deploymentMode: aws_native.amazonmq.BrokerDeploymentMode.SingleInstance,\n    engineType: \"RabbitMQ\",\n    engineVersion: \"3.8.6\",\n    hostInstanceType: \"mq.t3.micro\",\n    publiclyAccessible: true,\n    users: [{\n        password: \"AmazonMqPassword\",\n        username: \"AmazonMqUsername\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_broker = aws_native.amazonmq.Broker(\"basicBroker\",\n    auto_minor_version_upgrade=False,\n    broker_name=\"MyBasicRabbitBroker\",\n    deployment_mode=aws_native.amazonmq.BrokerDeploymentMode.SINGLE_INSTANCE,\n    engine_type=\"RabbitMQ\",\n    engine_version=\"3.8.6\",\n    host_instance_type=\"mq.t3.micro\",\n    publicly_accessible=True,\n    users=[{\n        \"password\": \"AmazonMqPassword\",\n        \"username\": \"AmazonMqUsername\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var complexBroker = new AwsNative.AmazonMq.Broker(\"complexBroker\", new()\n    {\n        AutoMinorVersionUpgrade = true,\n        BrokerName = \"MyComplexRabbitBroker\",\n        DeploymentMode = AwsNative.AmazonMq.BrokerDeploymentMode.SingleInstance,\n        EngineType = \"RabbitMQ\",\n        EngineVersion = \"3.8.6\",\n        HostInstanceType = \"mq.t3.micro\",\n        Logs = new AwsNative.AmazonMq.Inputs.BrokerLogListArgs\n        {\n            General = true,\n        },\n        MaintenanceWindowStartTime = new AwsNative.AmazonMq.Inputs.BrokerMaintenanceWindowArgs\n        {\n            DayOfWeek = \"Monday\",\n            TimeOfDay = \"22:45\",\n            TimeZone = \"America/Los_Angeles\",\n        },\n        PubliclyAccessible = false,\n        SecurityGroups = new[]\n        {\n            \"sg-1a234b5cd6efgh7i8\",\n        },\n        SubnetIds = new[]\n        {\n            \"subnet-123456b7891abcd1f\",\n        },\n        Users = new[]\n        {\n            new AwsNative.AmazonMq.Inputs.BrokerUserArgs\n            {\n                Password = \"AmazonMqPassword\",\n                Username = \"AmazonMqUsername\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewBroker(ctx, \"complexBroker\", \u0026amazonmq.BrokerArgs{\n\t\t\tAutoMinorVersionUpgrade: pulumi.Bool(true),\n\t\t\tBrokerName:              pulumi.String(\"MyComplexRabbitBroker\"),\n\t\t\tDeploymentMode:          pulumi.String(amazonmq.BrokerDeploymentModeSingleInstance),\n\t\t\tEngineType:              pulumi.String(\"RabbitMQ\"),\n\t\t\tEngineVersion:           pulumi.String(\"3.8.6\"),\n\t\t\tHostInstanceType:        pulumi.String(\"mq.t3.micro\"),\n\t\t\tLogs: \u0026amazonmq.BrokerLogListArgs{\n\t\t\t\tGeneral: pulumi.Bool(true),\n\t\t\t},\n\t\t\tMaintenanceWindowStartTime: \u0026amazonmq.BrokerMaintenanceWindowArgs{\n\t\t\t\tDayOfWeek: pulumi.String(\"Monday\"),\n\t\t\t\tTimeOfDay: pulumi.String(\"22:45\"),\n\t\t\t\tTimeZone:  pulumi.String(\"America/Los_Angeles\"),\n\t\t\t},\n\t\t\tPubliclyAccessible: pulumi.Bool(false),\n\t\t\tSecurityGroups: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"sg-1a234b5cd6efgh7i8\"),\n\t\t\t},\n\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"subnet-123456b7891abcd1f\"),\n\t\t\t},\n\t\t\tUsers: amazonmq.BrokerUserArray{\n\t\t\t\t\u0026amazonmq.BrokerUserArgs{\n\t\t\t\t\tPassword: pulumi.String(\"AmazonMqPassword\"),\n\t\t\t\t\tUsername: pulumi.String(\"AmazonMqUsername\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst complexBroker = new aws_native.amazonmq.Broker(\"complexBroker\", {\n    autoMinorVersionUpgrade: true,\n    brokerName: \"MyComplexRabbitBroker\",\n    deploymentMode: aws_native.amazonmq.BrokerDeploymentMode.SingleInstance,\n    engineType: \"RabbitMQ\",\n    engineVersion: \"3.8.6\",\n    hostInstanceType: \"mq.t3.micro\",\n    logs: {\n        general: true,\n    },\n    maintenanceWindowStartTime: {\n        dayOfWeek: \"Monday\",\n        timeOfDay: \"22:45\",\n        timeZone: \"America/Los_Angeles\",\n    },\n    publiclyAccessible: false,\n    securityGroups: [\"sg-1a234b5cd6efgh7i8\"],\n    subnetIds: [\"subnet-123456b7891abcd1f\"],\n    users: [{\n        password: \"AmazonMqPassword\",\n        username: \"AmazonMqUsername\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncomplex_broker = aws_native.amazonmq.Broker(\"complexBroker\",\n    auto_minor_version_upgrade=True,\n    broker_name=\"MyComplexRabbitBroker\",\n    deployment_mode=aws_native.amazonmq.BrokerDeploymentMode.SINGLE_INSTANCE,\n    engine_type=\"RabbitMQ\",\n    engine_version=\"3.8.6\",\n    host_instance_type=\"mq.t3.micro\",\n    logs={\n        \"general\": True,\n    },\n    maintenance_window_start_time={\n        \"day_of_week\": \"Monday\",\n        \"time_of_day\": \"22:45\",\n        \"time_zone\": \"America/Los_Angeles\",\n    },\n    publicly_accessible=False,\n    security_groups=[\"sg-1a234b5cd6efgh7i8\"],\n    subnet_ids=[\"subnet-123456b7891abcd1f\"],\n    users=[{\n        \"password\": \"AmazonMqPassword\",\n        \"username\": \"AmazonMqUsername\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var complexBroker = new AwsNative.AmazonMq.Broker(\"complexBroker\", new()\n    {\n        AutoMinorVersionUpgrade = false,\n        BrokerName = \"MyComplexRabbitBroker\",\n        DeploymentMode = AwsNative.AmazonMq.BrokerDeploymentMode.SingleInstance,\n        EngineType = \"RabbitMQ\",\n        EngineVersion = \"3.8.6\",\n        HostInstanceType = \"mq.t3.micro\",\n        Logs = new AwsNative.AmazonMq.Inputs.BrokerLogListArgs\n        {\n            General = true,\n        },\n        MaintenanceWindowStartTime = new AwsNative.AmazonMq.Inputs.BrokerMaintenanceWindowArgs\n        {\n            DayOfWeek = \"Monday\",\n            TimeOfDay = \"22:45\",\n            TimeZone = \"America/Los_Angeles\",\n        },\n        PubliclyAccessible = false,\n        SecurityGroups = new[]\n        {\n            \"sg-1a234b5cd6efgh7i8\",\n        },\n        SubnetIds = new[]\n        {\n            \"subnet-123456b7891abcd1f\",\n        },\n        Users = new[]\n        {\n            new AwsNative.AmazonMq.Inputs.BrokerUserArgs\n            {\n                Password = \"AmazonMqPassword\",\n                Username = \"AmazonMqUsername\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewBroker(ctx, \"complexBroker\", \u0026amazonmq.BrokerArgs{\n\t\t\tAutoMinorVersionUpgrade: pulumi.Bool(false),\n\t\t\tBrokerName:              pulumi.String(\"MyComplexRabbitBroker\"),\n\t\t\tDeploymentMode:          pulumi.String(amazonmq.BrokerDeploymentModeSingleInstance),\n\t\t\tEngineType:              pulumi.String(\"RabbitMQ\"),\n\t\t\tEngineVersion:           pulumi.String(\"3.8.6\"),\n\t\t\tHostInstanceType:        pulumi.String(\"mq.t3.micro\"),\n\t\t\tLogs: \u0026amazonmq.BrokerLogListArgs{\n\t\t\t\tGeneral: pulumi.Bool(true),\n\t\t\t},\n\t\t\tMaintenanceWindowStartTime: \u0026amazonmq.BrokerMaintenanceWindowArgs{\n\t\t\t\tDayOfWeek: pulumi.String(\"Monday\"),\n\t\t\t\tTimeOfDay: pulumi.String(\"22:45\"),\n\t\t\t\tTimeZone:  pulumi.String(\"America/Los_Angeles\"),\n\t\t\t},\n\t\t\tPubliclyAccessible: pulumi.Bool(false),\n\t\t\tSecurityGroups: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"sg-1a234b5cd6efgh7i8\"),\n\t\t\t},\n\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"subnet-123456b7891abcd1f\"),\n\t\t\t},\n\t\t\tUsers: amazonmq.BrokerUserArray{\n\t\t\t\t\u0026amazonmq.BrokerUserArgs{\n\t\t\t\t\tPassword: pulumi.String(\"AmazonMqPassword\"),\n\t\t\t\t\tUsername: pulumi.String(\"AmazonMqUsername\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst complexBroker = new aws_native.amazonmq.Broker(\"complexBroker\", {\n    autoMinorVersionUpgrade: false,\n    brokerName: \"MyComplexRabbitBroker\",\n    deploymentMode: aws_native.amazonmq.BrokerDeploymentMode.SingleInstance,\n    engineType: \"RabbitMQ\",\n    engineVersion: \"3.8.6\",\n    hostInstanceType: \"mq.t3.micro\",\n    logs: {\n        general: true,\n    },\n    maintenanceWindowStartTime: {\n        dayOfWeek: \"Monday\",\n        timeOfDay: \"22:45\",\n        timeZone: \"America/Los_Angeles\",\n    },\n    publiclyAccessible: false,\n    securityGroups: [\"sg-1a234b5cd6efgh7i8\"],\n    subnetIds: [\"subnet-123456b7891abcd1f\"],\n    users: [{\n        password: \"AmazonMqPassword\",\n        username: \"AmazonMqUsername\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncomplex_broker = aws_native.amazonmq.Broker(\"complexBroker\",\n    auto_minor_version_upgrade=False,\n    broker_name=\"MyComplexRabbitBroker\",\n    deployment_mode=aws_native.amazonmq.BrokerDeploymentMode.SINGLE_INSTANCE,\n    engine_type=\"RabbitMQ\",\n    engine_version=\"3.8.6\",\n    host_instance_type=\"mq.t3.micro\",\n    logs={\n        \"general\": True,\n    },\n    maintenance_window_start_time={\n        \"day_of_week\": \"Monday\",\n        \"time_of_day\": \"22:45\",\n        \"time_zone\": \"America/Los_Angeles\",\n    },\n    publicly_accessible=False,\n    security_groups=[\"sg-1a234b5cd6efgh7i8\"],\n    subnet_ids=[\"subnet-123456b7891abcd1f\"],\n    users=[{\n        \"password\": \"AmazonMqPassword\",\n        \"username\": \"AmazonMqUsername\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"amqpEndpoints":{"type":"array","items":{"type":"string"},"description":"The AMQP endpoints of each broker instance as a list of strings.\n\n`amqp+ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:5671`"},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon MQ broker.\n\n`arn:aws:mq:us-east-2:123456789012:broker:MyBroker:b-1234a5b6-78cd-901e-2fgh-3i45j6k178l9`"},"authenticationStrategy":{"type":"string","description":"Optional. The authentication strategy used to secure the broker. The default is `SIMPLE` .","replaceOnChanges":true},"autoMinorVersionUpgrade":{"type":"boolean","description":"Enables automatic upgrades to new patch versions for brokers as new versions are released and supported by Amazon MQ. Automatic upgrades occur during the scheduled maintenance window or after a manual broker reboot. Set to `true` by default, if no value is specified.\n\n\u003e Must be set to `true` for ActiveMQ brokers version 5.18 and above and for RabbitMQ brokers version 3.13 and above."},"awsId":{"type":"string"},"brokerName":{"type":"string","description":"Required. The broker's name. This value must be unique in your AWS account , 1-50 characters long, must contain only letters, numbers, dashes, and underscores, and must not contain white spaces, brackets, wildcard characters, or special characters.\n\n\u003e Do not add personally identifiable information (PII) or other confidential or sensitive information in broker names. Broker names are accessible to other AWS services, including CloudWatch Logs . Broker names are not intended to be used for private or sensitive data.","replaceOnChanges":true},"configuration":{"$ref":"#/types/aws-native:amazonmq:BrokerConfigurationId","description":"The intended configuration (ID and revision) to be set when creating or updating.\nThis property is write-only so that applications of a ConfigurationAssociation do not cause drift.\n"},"configurationId":{"type":"string","description":"The ID of the current actual configuration."},"configurationRevision":{"type":"string","description":"The revision of the current actual configuration."},"consoleUrls":{"type":"array","items":{"type":"string"}},"dataReplicationMode":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerDataReplicationMode"},{"type":"string"}],"description":"Defines whether this broker is a part of a data replication pair."},"dataReplicationPrimaryBrokerArn":{"type":"string","description":"The ARN of the primary broker that is used to replicate data from in a data replication pair when creating a replica.\nThis field is only used at creation-time. Changes to it subsequently are ignored by CloudFormation.\nInformation on the current primary is available on the DataReplicationMetadata object returned by the API.\n"},"deploymentMode":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerDeploymentMode"},{"type":"string"}],"description":"Required. The broker's deployment mode.","replaceOnChanges":true},"encryptionOptions":{"$ref":"#/types/aws-native:amazonmq:BrokerEncryptionOptions","description":"Encryption options for the broker.","replaceOnChanges":true},"engineType":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerEngineType"},{"type":"string"}],"description":"Required. The type of broker engine. Currently, Amazon MQ supports `ACTIVEMQ` and `RABBITMQ` .","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The version specified to use. See also EngineVersionCurrent."},"engineVersionCurrent":{"type":"string","description":"The version in use. This may have more precision than the specified EngineVersion."},"hostInstanceType":{"type":"string","description":"Required. The broker's instance type."},"ipAddresses":{"type":"array","items":{"type":"string"},"description":"The IP addresses of each broker instance as a list of strings. Does not apply to RabbitMQ brokers.\n\n`['198.51.100.2', '203.0.113.9']`"},"ldapServerMetadata":{"$ref":"#/types/aws-native:amazonmq:BrokerLdapServerMetadata","description":"Optional. The metadata of the LDAP server used to authenticate and authorize connections to the broker. Does not apply to RabbitMQ brokers."},"logs":{"$ref":"#/types/aws-native:amazonmq:BrokerLogList","description":"Enables Amazon CloudWatch logging for brokers."},"maintenanceWindowStartTime":{"$ref":"#/types/aws-native:amazonmq:BrokerMaintenanceWindow","description":"The parameters that determine the WeeklyStartTime."},"mqttEndpoints":{"type":"array","items":{"type":"string"},"description":"The MQTT endpoints of each broker instance as a list of strings.\n\n`mqtt+ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:8883`"},"openWireEndpoints":{"type":"array","items":{"type":"string"},"description":"The OpenWire endpoints of each broker instance as a list of strings.\n\n`ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:61617`"},"publiclyAccessible":{"type":"boolean","description":"Enables connections from applications outside of the VPC that hosts the broker's subnets. Set to `false` by default, if no value is provided.","replaceOnChanges":true},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The list of rules (1 minimum, 125 maximum) that authorize connections to brokers."},"stompEndpoints":{"type":"array","items":{"type":"string"},"description":"The STOMP endpoints of each broker instance as a list of strings.\n\n`stomp+ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:61614`"},"storageType":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerStorageType"},{"type":"string"}],"description":"The broker's storage type.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of groups that define which subnets and IP ranges the broker can use from different Availability Zones. If you specify more than one subnet, the subnets must be in different Availability Zones. Amazon MQ will not be able to create VPC endpoints for your broker with multiple subnets in the same Availability Zone. A SINGLE_INSTANCE deployment requires one subnet (for example, the default subnet). An ACTIVE_STANDBY_MULTI_AZ Amazon MQ for ActiveMQ deployment requires two subnets. A CLUSTER_MULTI_AZ Amazon MQ for RabbitMQ deployment has no subnet requirements when deployed with public accessibility. Deployment without public accessibility requires at least one subnet.\n\n\u003e If you specify subnets in a [shared VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-sharing.html) for a RabbitMQ broker, the associated VPC to which the specified subnets belong must be owned by your AWS account . Amazon MQ will not be able to create VPC endpoints in VPCs that are not owned by your AWS account .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Create tags when creating the broker."},"users":{"type":"array","items":{"$ref":"#/types/aws-native:amazonmq:BrokerUser"},"description":"Users to configure on the broker. \nFor RabbitMQ, this should be one user, created when the broker is created, and changes thereafter are ignored.\nFor ActiveMQ, changes to anything but Password are detected and will trigger an update,\nbut changes to Password cannot be detected so updates to Password may not take effect unless there is some other change.\n"},"wssEndpoints":{"type":"array","items":{"type":"string"},"description":"The WSS endpoints of each broker instance as a list of strings.\n\n`wss://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:61619`"}},"type":"object","required":["amqpEndpoints","arn","awsId","brokerName","configurationId","configurationRevision","consoleUrls","deploymentMode","engineType","engineVersionCurrent","hostInstanceType","ipAddresses","mqttEndpoints","openWireEndpoints","publiclyAccessible","stompEndpoints","wssEndpoints"],"inputProperties":{"authenticationStrategy":{"type":"string","description":"Optional. The authentication strategy used to secure the broker. The default is `SIMPLE` ."},"autoMinorVersionUpgrade":{"type":"boolean","description":"Enables automatic upgrades to new patch versions for brokers as new versions are released and supported by Amazon MQ. Automatic upgrades occur during the scheduled maintenance window or after a manual broker reboot. Set to `true` by default, if no value is specified.\n\n\u003e Must be set to `true` for ActiveMQ brokers version 5.18 and above and for RabbitMQ brokers version 3.13 and above."},"brokerName":{"type":"string","description":"Required. The broker's name. This value must be unique in your AWS account , 1-50 characters long, must contain only letters, numbers, dashes, and underscores, and must not contain white spaces, brackets, wildcard characters, or special characters.\n\n\u003e Do not add personally identifiable information (PII) or other confidential or sensitive information in broker names. Broker names are accessible to other AWS services, including CloudWatch Logs . Broker names are not intended to be used for private or sensitive data."},"configuration":{"$ref":"#/types/aws-native:amazonmq:BrokerConfigurationId","description":"The intended configuration (ID and revision) to be set when creating or updating.\nThis property is write-only so that applications of a ConfigurationAssociation do not cause drift.\n"},"dataReplicationMode":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerDataReplicationMode"},{"type":"string"}],"description":"Defines whether this broker is a part of a data replication pair."},"dataReplicationPrimaryBrokerArn":{"type":"string","description":"The ARN of the primary broker that is used to replicate data from in a data replication pair when creating a replica.\nThis field is only used at creation-time. Changes to it subsequently are ignored by CloudFormation.\nInformation on the current primary is available on the DataReplicationMetadata object returned by the API.\n"},"deploymentMode":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerDeploymentMode"},{"type":"string"}],"description":"Required. The broker's deployment mode."},"encryptionOptions":{"$ref":"#/types/aws-native:amazonmq:BrokerEncryptionOptions","description":"Encryption options for the broker."},"engineType":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerEngineType"},{"type":"string"}],"description":"Required. The type of broker engine. Currently, Amazon MQ supports `ACTIVEMQ` and `RABBITMQ` ."},"engineVersion":{"type":"string","description":"The version specified to use. See also EngineVersionCurrent."},"hostInstanceType":{"type":"string","description":"Required. The broker's instance type."},"ldapServerMetadata":{"$ref":"#/types/aws-native:amazonmq:BrokerLdapServerMetadata","description":"Optional. The metadata of the LDAP server used to authenticate and authorize connections to the broker. Does not apply to RabbitMQ brokers."},"logs":{"$ref":"#/types/aws-native:amazonmq:BrokerLogList","description":"Enables Amazon CloudWatch logging for brokers."},"maintenanceWindowStartTime":{"$ref":"#/types/aws-native:amazonmq:BrokerMaintenanceWindow","description":"The parameters that determine the WeeklyStartTime."},"publiclyAccessible":{"type":"boolean","description":"Enables connections from applications outside of the VPC that hosts the broker's subnets. Set to `false` by default, if no value is provided."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The list of rules (1 minimum, 125 maximum) that authorize connections to brokers."},"storageType":{"oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerStorageType"},{"type":"string"}],"description":"The broker's storage type."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of groups that define which subnets and IP ranges the broker can use from different Availability Zones. If you specify more than one subnet, the subnets must be in different Availability Zones. Amazon MQ will not be able to create VPC endpoints for your broker with multiple subnets in the same Availability Zone. A SINGLE_INSTANCE deployment requires one subnet (for example, the default subnet). An ACTIVE_STANDBY_MULTI_AZ Amazon MQ for ActiveMQ deployment requires two subnets. A CLUSTER_MULTI_AZ Amazon MQ for RabbitMQ deployment has no subnet requirements when deployed with public accessibility. Deployment without public accessibility requires at least one subnet.\n\n\u003e If you specify subnets in a [shared VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-sharing.html) for a RabbitMQ broker, the associated VPC to which the specified subnets belong must be owned by your AWS account . Amazon MQ will not be able to create VPC endpoints in VPCs that are not owned by your AWS account ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Create tags when creating the broker."},"users":{"type":"array","items":{"$ref":"#/types/aws-native:amazonmq:BrokerUser"},"description":"Users to configure on the broker. \nFor RabbitMQ, this should be one user, created when the broker is created, and changes thereafter are ignored.\nFor ActiveMQ, changes to anything but Password are detected and will trigger an update,\nbut changes to Password cannot be detected so updates to Password may not take effect unless there is some other change.\n"}},"requiredInputs":["deploymentMode","engineType","hostInstanceType","publiclyAccessible"]},"aws-native:amazonmq:Configuration":{"description":"Resource Type definition for AWS::AmazonMQ::Configuration\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System;\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var configuration = new AwsNative.AmazonMq.Configuration(\"configuration\", new()\n    {\n        Data = Convert.ToBase64String(System.Text.Encoding.UTF8.GetBytes(@\"\u003c?xml version=\"\"1.0\"\" encoding=\"\"UTF-8\"\" standalone=\"\"yes\"\"?\u003e\n\u003cbroker xmlns=\"\"http://activemq.apache.org/schema/core\"\" start=\"\"false\"\"\u003e\n  \u003cdestinationPolicy\u003e\n    \u003cpolicyMap\u003e\n      \u003cpolicyEntries\u003e\n        \u003cpolicyEntry topic=\"\"\u003e\"\"\u003e\n          \u003cpendingMessageLimitStrategy\u003e\n            \u003cconstantPendingMessageLimitStrategy limit=\"\"3000\"\"/\u003e\n          \u003c/pendingMessageLimitStrategy\u003e\n        \u003c/policyEntry\u003e\n      \u003c/policyEntries\u003e\n    \u003c/policyMap\u003e\n  \u003c/destinationPolicy\u003e\n  \u003cplugins\u003e\n  \u003c/plugins\u003e\n\u003c/broker\u003e\n\")),\n        EngineType = \"ACTIVEMQ\",\n        EngineVersion = \"5.15.0\",\n        Name = \"my-configuration-1\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"encoding/base64\"\n\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/amazonmq\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := amazonmq.NewConfiguration(ctx, \"configuration\", \u0026amazonmq.ConfigurationArgs{\n\t\t\tData: pulumi.String(base64.StdEncoding.EncodeToString([]byte(`\u003c?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?\u003e\n\u003cbroker xmlns=\"http://activemq.apache.org/schema/core\" start=\"false\"\u003e\n  \u003cdestinationPolicy\u003e\n    \u003cpolicyMap\u003e\n      \u003cpolicyEntries\u003e\n        \u003cpolicyEntry topic=\"\u003e\"\u003e\n          \u003cpendingMessageLimitStrategy\u003e\n            \u003cconstantPendingMessageLimitStrategy limit=\"3000\"/\u003e\n          \u003c/pendingMessageLimitStrategy\u003e\n        \u003c/policyEntry\u003e\n      \u003c/policyEntries\u003e\n    \u003c/policyMap\u003e\n  \u003c/destinationPolicy\u003e\n  \u003cplugins\u003e\n  \u003c/plugins\u003e\n\u003c/broker\u003e\n`))),\n\t\t\tEngineType:    pulumi.String(\"ACTIVEMQ\"),\n\t\t\tEngineVersion: pulumi.String(\"5.15.0\"),\n\t\t\tName:          pulumi.String(\"my-configuration-1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst configuration = new aws_native.amazonmq.Configuration(\"configuration\", {\n    data: Buffer.from(`\u003c?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?\u003e\n\u003cbroker xmlns=\"http://activemq.apache.org/schema/core\" start=\"false\"\u003e\n  \u003cdestinationPolicy\u003e\n    \u003cpolicyMap\u003e\n      \u003cpolicyEntries\u003e\n        \u003cpolicyEntry topic=\"\u003e\"\u003e\n          \u003cpendingMessageLimitStrategy\u003e\n            \u003cconstantPendingMessageLimitStrategy limit=\"3000\"/\u003e\n          \u003c/pendingMessageLimitStrategy\u003e\n        \u003c/policyEntry\u003e\n      \u003c/policyEntries\u003e\n    \u003c/policyMap\u003e\n  \u003c/destinationPolicy\u003e\n  \u003cplugins\u003e\n  \u003c/plugins\u003e\n\u003c/broker\u003e\n`).toString(\"base64\"),\n    engineType: \"ACTIVEMQ\",\n    engineVersion: \"5.15.0\",\n    name: \"my-configuration-1\",\n});\n\n```\n\n```python\nimport pulumi\nimport base64\nimport pulumi_aws_native as aws_native\n\nconfiguration = aws_native.amazonmq.Configuration(\"configuration\",\n    data=base64.b64encode(\"\"\"\u003c?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?\u003e\n\u003cbroker xmlns=\"http://activemq.apache.org/schema/core\" start=\"false\"\u003e\n  \u003cdestinationPolicy\u003e\n    \u003cpolicyMap\u003e\n      \u003cpolicyEntries\u003e\n        \u003cpolicyEntry topic=\"\u003e\"\u003e\n          \u003cpendingMessageLimitStrategy\u003e\n            \u003cconstantPendingMessageLimitStrategy limit=\"3000\"/\u003e\n          \u003c/pendingMessageLimitStrategy\u003e\n        \u003c/policyEntry\u003e\n      \u003c/policyEntries\u003e\n    \u003c/policyMap\u003e\n  \u003c/destinationPolicy\u003e\n  \u003cplugins\u003e\n  \u003c/plugins\u003e\n\u003c/broker\u003e\n\"\"\".encode()).decode(),\n    engine_type=\"ACTIVEMQ\",\n    engine_version=\"5.15.0\",\n    name=\"my-configuration-1\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon MQ configuration."},"authenticationStrategy":{"type":"string","description":"The authentication strategy associated with the configuration. The default is SIMPLE.","replaceOnChanges":true},"awsId":{"type":"string","description":"The ID of the Amazon MQ configuration."},"data":{"type":"string","description":"The base64-encoded XML configuration."},"description":{"type":"string","description":"The description of the configuration."},"engineType":{"type":"string","description":"The type of broker engine. Note: Currently, Amazon MQ only supports ACTIVEMQ for creating and editing broker configurations.","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The version of the broker engine.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the configuration.","replaceOnChanges":true},"revision":{"type":"string","description":"The revision number of the configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Create tags when creating the configuration."}},"type":"object","required":["arn","awsId","engineType","name","revision"],"inputProperties":{"authenticationStrategy":{"type":"string","description":"The authentication strategy associated with the configuration. The default is SIMPLE."},"data":{"type":"string","description":"The base64-encoded XML configuration."},"description":{"type":"string","description":"The description of the configuration."},"engineType":{"type":"string","description":"The type of broker engine. Note: Currently, Amazon MQ only supports ACTIVEMQ for creating and editing broker configurations."},"engineVersion":{"type":"string","description":"The version of the broker engine."},"name":{"type":"string","description":"The name of the configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Create tags when creating the configuration."}},"requiredInputs":["engineType"]},"aws-native:amplify:App":{"description":"The AWS::Amplify::App resource creates Apps in the Amplify Console. An App is a collection of branches.","properties":{"accessToken":{"type":"string","description":"The personal access token for a GitHub repository for an Amplify app. The personal access token is used to authorize access to a GitHub repository using the Amplify GitHub App. The token is not stored.\n\nUse `AccessToken` for GitHub repositories only. To authorize access to a repository provider such as Bitbucket or CodeCommit, use `OauthToken` .\n\nYou must specify either `AccessToken` or `OauthToken` when you create a new app.\n\nExisting Amplify apps deployed from a GitHub repository using OAuth continue to work with CI/CD. However, we strongly recommend that you migrate these apps to use the GitHub App. For more information, see [Migrating an existing OAuth app to the Amplify GitHub App](https://docs.aws.amazon.com/amplify/latest/userguide/setting-up-GitHub-access.html#migrating-to-github-app-auth) in the *Amplify User Guide* ."},"appId":{"type":"string","description":"Unique Id for the Amplify App."},"appName":{"type":"string","description":"Name for the Amplify App."},"arn":{"type":"string","description":"ARN for the Amplify App."},"autoBranchCreationConfig":{"$ref":"#/types/aws-native:amplify:AppAutoBranchCreationConfig","description":"Sets the configuration for your automatic branch creation."},"basicAuthConfig":{"$ref":"#/types/aws-native:amplify:AppBasicAuthConfig","description":"The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format `user:password` ."},"buildSpec":{"type":"string","description":"The build specification (build spec) for an Amplify app."},"cacheConfig":{"$ref":"#/types/aws-native:amplify:AppCacheConfig","description":"The cache configuration for the Amplify app. If you don't specify the cache configuration `type` , Amplify uses the default `AMPLIFY_MANAGED` setting."},"computeRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the *Amplify User Guide* ."},"customHeaders":{"type":"string","description":"The custom HTTP headers for an Amplify app."},"customRules":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:AppCustomRule"},"description":"The custom rewrite and redirect rules for an Amplify app."},"defaultDomain":{"type":"string","description":"Default domain for the Amplify App."},"description":{"type":"string","description":"The description of the Amplify app."},"enableBranchAutoDeletion":{"type":"boolean","description":"Automatically disconnect a branch in Amplify Hosting when you delete a branch from your Git repository."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:AppEnvironmentVariable"},"description":"The environment variables for the Amplify app.\n\nFor a list of the environment variables that are accessible to Amplify by default, see [Amplify Environment variables](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-console-environment-variables.html) in the *Amplify Hosting User Guide* ."},"iamServiceRole":{"type":"string","description":"AWS Identity and Access Management ( IAM ) service role for the Amazon Resource Name (ARN) of the Amplify app."},"jobConfig":{"$ref":"#/types/aws-native:amplify:AppJobConfig","description":"The configuration details that apply to the jobs for an Amplify app."},"name":{"type":"string","description":"The name of the Amplify app."},"oauthToken":{"type":"string","description":"The OAuth token for a third-party source control system for an Amplify app. The OAuth token is used to create a webhook and a read-only deploy key using SSH cloning. The OAuth token is not stored.\n\nUse `OauthToken` for repository providers other than GitHub, such as Bitbucket or CodeCommit. To authorize access to GitHub as your repository provider, use `AccessToken` .\n\nYou must specify either `OauthToken` or `AccessToken` when you create a new app.\n\nExisting Amplify apps deployed from a GitHub repository using OAuth continue to work with CI/CD. However, we strongly recommend that you migrate these apps to use the GitHub App. For more information, see [Migrating an existing OAuth app to the Amplify GitHub App](https://docs.aws.amazon.com/amplify/latest/userguide/setting-up-GitHub-access.html#migrating-to-github-app-auth) in the *Amplify User Guide* ."},"platform":{"$ref":"#/types/aws-native:amplify:AppPlatform","description":"The platform for the Amplify app. For a static app, set the platform type to `WEB` . For a dynamic server-side rendered (SSR) app, set the platform type to `WEB_COMPUTE` . For an app requiring Amplify Hosting's original SSR support only, set the platform type to `WEB_DYNAMIC` .\n\nIf you are deploying an SSG only app with Next.js version 14 or later, you must set the platform type to `WEB_COMPUTE` and set the artifacts `baseDirectory` to `.next` in the application's build settings. For an example of the build specification settings, see [Amplify build settings for a Next.js 14 SSG application](https://docs.aws.amazon.com/amplify/latest/userguide/deploy-nextjs-app.html#build-setting-detection-ssg-14) in the *Amplify Hosting User Guide* ."},"repository":{"type":"string","description":"The Git repository for the Amplify app."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag for an Amplify app."}},"type":"object","required":["appId","appName","arn","defaultDomain","name"],"inputProperties":{"accessToken":{"type":"string","description":"The personal access token for a GitHub repository for an Amplify app. The personal access token is used to authorize access to a GitHub repository using the Amplify GitHub App. The token is not stored.\n\nUse `AccessToken` for GitHub repositories only. To authorize access to a repository provider such as Bitbucket or CodeCommit, use `OauthToken` .\n\nYou must specify either `AccessToken` or `OauthToken` when you create a new app.\n\nExisting Amplify apps deployed from a GitHub repository using OAuth continue to work with CI/CD. However, we strongly recommend that you migrate these apps to use the GitHub App. For more information, see [Migrating an existing OAuth app to the Amplify GitHub App](https://docs.aws.amazon.com/amplify/latest/userguide/setting-up-GitHub-access.html#migrating-to-github-app-auth) in the *Amplify User Guide* ."},"autoBranchCreationConfig":{"$ref":"#/types/aws-native:amplify:AppAutoBranchCreationConfig","description":"Sets the configuration for your automatic branch creation."},"basicAuthConfig":{"$ref":"#/types/aws-native:amplify:AppBasicAuthConfig","description":"The credentials for basic authorization for an Amplify app. You must base64-encode the authorization credentials and provide them in the format `user:password` ."},"buildSpec":{"type":"string","description":"The build specification (build spec) for an Amplify app."},"cacheConfig":{"$ref":"#/types/aws-native:amplify:AppCacheConfig","description":"The cache configuration for the Amplify app. If you don't specify the cache configuration `type` , Amplify uses the default `AMPLIFY_MANAGED` setting."},"computeRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the *Amplify User Guide* ."},"customHeaders":{"type":"string","description":"The custom HTTP headers for an Amplify app."},"customRules":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:AppCustomRule"},"description":"The custom rewrite and redirect rules for an Amplify app."},"description":{"type":"string","description":"The description of the Amplify app."},"enableBranchAutoDeletion":{"type":"boolean","description":"Automatically disconnect a branch in Amplify Hosting when you delete a branch from your Git repository."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:AppEnvironmentVariable"},"description":"The environment variables for the Amplify app.\n\nFor a list of the environment variables that are accessible to Amplify by default, see [Amplify Environment variables](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-console-environment-variables.html) in the *Amplify Hosting User Guide* ."},"iamServiceRole":{"type":"string","description":"AWS Identity and Access Management ( IAM ) service role for the Amazon Resource Name (ARN) of the Amplify app."},"jobConfig":{"$ref":"#/types/aws-native:amplify:AppJobConfig","description":"The configuration details that apply to the jobs for an Amplify app."},"name":{"type":"string","description":"The name of the Amplify app."},"oauthToken":{"type":"string","description":"The OAuth token for a third-party source control system for an Amplify app. The OAuth token is used to create a webhook and a read-only deploy key using SSH cloning. The OAuth token is not stored.\n\nUse `OauthToken` for repository providers other than GitHub, such as Bitbucket or CodeCommit. To authorize access to GitHub as your repository provider, use `AccessToken` .\n\nYou must specify either `OauthToken` or `AccessToken` when you create a new app.\n\nExisting Amplify apps deployed from a GitHub repository using OAuth continue to work with CI/CD. However, we strongly recommend that you migrate these apps to use the GitHub App. For more information, see [Migrating an existing OAuth app to the Amplify GitHub App](https://docs.aws.amazon.com/amplify/latest/userguide/setting-up-GitHub-access.html#migrating-to-github-app-auth) in the *Amplify User Guide* ."},"platform":{"$ref":"#/types/aws-native:amplify:AppPlatform","description":"The platform for the Amplify app. For a static app, set the platform type to `WEB` . For a dynamic server-side rendered (SSR) app, set the platform type to `WEB_COMPUTE` . For an app requiring Amplify Hosting's original SSR support only, set the platform type to `WEB_DYNAMIC` .\n\nIf you are deploying an SSG only app with Next.js version 14 or later, you must set the platform type to `WEB_COMPUTE` and set the artifacts `baseDirectory` to `.next` in the application's build settings. For an example of the build specification settings, see [Amplify build settings for a Next.js 14 SSG application](https://docs.aws.amazon.com/amplify/latest/userguide/deploy-nextjs-app.html#build-setting-detection-ssg-14) in the *Amplify Hosting User Guide* ."},"repository":{"type":"string","description":"The Git repository for the Amplify app."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag for an Amplify app."}}},"aws-native:amplify:Branch":{"description":"The AWS::Amplify::Branch resource creates a new branch within an app.","properties":{"appId":{"type":"string","description":"The unique ID for an Amplify app.","replaceOnChanges":true},"arn":{"type":"string","description":"ARN for a branch, part of an Amplify App."},"backend":{"$ref":"#/types/aws-native:amplify:BranchBackend","description":"The backend for a `Branch` of an Amplify app. Use for a backend created from an CloudFormation stack.\n\nThis field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code."},"basicAuthConfig":{"$ref":"#/types/aws-native:amplify:BranchBasicAuthConfig","description":"The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format `user:password` ."},"branchName":{"type":"string","description":"The name for the branch.","replaceOnChanges":true},"buildSpec":{"type":"string","description":"The build specification (build spec) for the branch."},"computeRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the *Amplify User Guide* ."},"description":{"type":"string","description":"The description for the branch that is part of an Amplify app."},"enableAutoBuild":{"type":"boolean","description":"Enables auto building for the branch."},"enablePerformanceMode":{"type":"boolean","description":"Enables performance mode for the branch.\n\nPerformance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out."},"enablePullRequestPreview":{"type":"boolean","description":"Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch.\n\nTo provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the `PullRequestEnvironmentName` property.\n\nFor more information, see [Web Previews](https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html) in the *AWS Amplify Hosting User Guide* ."},"enableSkewProtection":{"type":"boolean","description":"Specifies whether the skew protection feature is enabled for the branch.\n\nDeployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see [Skew protection for Amplify deployments](https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html) in the *Amplify User Guide* ."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:BranchEnvironmentVariable"},"description":"The environment variables for the branch."},"framework":{"type":"string","description":"The framework for the branch."},"pullRequestEnvironmentName":{"type":"string","description":"If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named `prod` , `test` , or `dev` that you initialized with the Amplify CLI and mapped to this branch.\n\nTo enable pull request previews, set the `EnablePullRequestPreview` property to `true` .\n\nIf you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed.\n\nFor more information about creating backend environments, see [Feature Branch Deployments and Team Workflows](https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html) in the *AWS Amplify Hosting User Guide* ."},"stage":{"$ref":"#/types/aws-native:amplify:BranchStage","description":"Describes the current stage for the branch."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag for the branch."}},"type":"object","required":["appId","arn","branchName"],"inputProperties":{"appId":{"type":"string","description":"The unique ID for an Amplify app."},"backend":{"$ref":"#/types/aws-native:amplify:BranchBackend","description":"The backend for a `Branch` of an Amplify app. Use for a backend created from an CloudFormation stack.\n\nThis field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code."},"basicAuthConfig":{"$ref":"#/types/aws-native:amplify:BranchBasicAuthConfig","description":"The basic authorization credentials for a branch of an Amplify app. You must base64-encode the authorization credentials and provide them in the format `user:password` ."},"branchName":{"type":"string","description":"The name for the branch."},"buildSpec":{"type":"string","description":"The build specification (build spec) for the branch."},"computeRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the *Amplify User Guide* ."},"description":{"type":"string","description":"The description for the branch that is part of an Amplify app."},"enableAutoBuild":{"type":"boolean","description":"Enables auto building for the branch."},"enablePerformanceMode":{"type":"boolean","description":"Enables performance mode for the branch.\n\nPerformance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out."},"enablePullRequestPreview":{"type":"boolean","description":"Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch.\n\nTo provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the `PullRequestEnvironmentName` property.\n\nFor more information, see [Web Previews](https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html) in the *AWS Amplify Hosting User Guide* ."},"enableSkewProtection":{"type":"boolean","description":"Specifies whether the skew protection feature is enabled for the branch.\n\nDeployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see [Skew protection for Amplify deployments](https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html) in the *Amplify User Guide* ."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:BranchEnvironmentVariable"},"description":"The environment variables for the branch."},"framework":{"type":"string","description":"The framework for the branch."},"pullRequestEnvironmentName":{"type":"string","description":"If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named `prod` , `test` , or `dev` that you initialized with the Amplify CLI and mapped to this branch.\n\nTo enable pull request previews, set the `EnablePullRequestPreview` property to `true` .\n\nIf you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed.\n\nFor more information about creating backend environments, see [Feature Branch Deployments and Team Workflows](https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html) in the *AWS Amplify Hosting User Guide* ."},"stage":{"$ref":"#/types/aws-native:amplify:BranchStage","description":"Describes the current stage for the branch."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag for the branch."}},"requiredInputs":["appId"]},"aws-native:amplify:Domain":{"description":"The AWS::Amplify::Domain resource allows you to connect a custom domain to your app.","properties":{"appId":{"type":"string","description":"The unique ID for an Amplify app.","replaceOnChanges":true},"arn":{"type":"string","description":"ARN for the Domain Association."},"autoSubDomainCreationPatterns":{"type":"array","items":{"type":"string"},"description":"Sets the branch patterns for automatic subdomain creation."},"autoSubDomainIamRole":{"type":"string","description":"The required AWS Identity and Access Management (IAMlong) service role for the Amazon Resource Name (ARN) for automatically creating subdomains."},"certificate":{"$ref":"#/types/aws-native:amplify:DomainCertificate"},"certificateRecord":{"type":"string","description":"DNS Record for certificate verification."},"certificateSettings":{"$ref":"#/types/aws-native:amplify:DomainCertificateSettings","description":"The type of SSL/TLS certificate to use for your custom domain. If you don't specify a certificate type, Amplify uses the default certificate that it provisions and manages for you."},"domainName":{"type":"string","description":"The domain name for the domain association.","replaceOnChanges":true},"domainStatus":{"type":"string","description":"Status for the Domain Association."},"enableAutoSubDomain":{"type":"boolean","description":"Enables the automated creation of subdomains for branches."},"statusReason":{"type":"string","description":"Reason for the current status of the domain."},"subDomainSettings":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:DomainSubDomainSetting"},"description":"The setting for the subdomain."},"updateStatus":{"type":"string","description":"The status of the domain update operation that is currently in progress. The following list describes the valid update states.\n\n- **REQUESTING_CERTIFICATE** - The certificate is in the process of being updated.\n- **PENDING_VERIFICATION** - Indicates that an Amplify managed certificate is in the process of being verified. This occurs during the creation of a custom domain or when a custom domain is updated to use a managed certificate.\n- **IMPORTING_CUSTOM_CERTIFICATE** - Indicates that an Amplify custom certificate is in the process of being imported. This occurs during the creation of a custom domain or when a custom domain is updated to use a custom certificate.\n- **PENDING_DEPLOYMENT** - Indicates that the subdomain or certificate changes are being propagated.\n- **AWAITING_APP_CNAME** - Amplify is waiting for CNAME records corresponding to subdomains to be propagated. If your custom domain is on Route 53, Amplify handles this for you automatically. For more information about custom domains, see [Setting up custom domains](https://docs.aws.amazon.com/amplify/latest/userguide/custom-domains.html) in the *Amplify Hosting User Guide* .\n- **UPDATE_COMPLETE** - The certificate has been associated with a domain.\n- **UPDATE_FAILED** - The certificate has failed to be provisioned or associated, and there is no existing active certificate to roll back to."}},"type":"object","required":["appId","arn","certificate","certificateRecord","domainName","domainStatus","statusReason","subDomainSettings","updateStatus"],"inputProperties":{"appId":{"type":"string","description":"The unique ID for an Amplify app."},"autoSubDomainCreationPatterns":{"type":"array","items":{"type":"string"},"description":"Sets the branch patterns for automatic subdomain creation."},"autoSubDomainIamRole":{"type":"string","description":"The required AWS Identity and Access Management (IAMlong) service role for the Amazon Resource Name (ARN) for automatically creating subdomains."},"certificateSettings":{"$ref":"#/types/aws-native:amplify:DomainCertificateSettings","description":"The type of SSL/TLS certificate to use for your custom domain. If you don't specify a certificate type, Amplify uses the default certificate that it provisions and manages for you."},"domainName":{"type":"string","description":"The domain name for the domain association."},"enableAutoSubDomain":{"type":"boolean","description":"Enables the automated creation of subdomains for branches."},"subDomainSettings":{"type":"array","items":{"$ref":"#/types/aws-native:amplify:DomainSubDomainSetting"},"description":"The setting for the subdomain."}},"requiredInputs":["appId","subDomainSettings"]},"aws-native:amplifyuibuilder:Component":{"description":"Definition of AWS::AmplifyUIBuilder::Component Resource Type","properties":{"appId":{"type":"string","description":"The unique ID of the Amplify app associated with the component.","replaceOnChanges":true},"awsId":{"type":"string","description":"The unique ID of the component."},"bindingProperties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentBindingPropertiesValue"},"description":"The information to connect a component's properties to data at runtime. You can't specify `tags` as a valid property for `bindingProperties` ."},"children":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentChild"},"description":"A list of the component's `ComponentChild` instances."},"collectionProperties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentDataConfiguration"},"description":"The data binding configuration for the component's properties. Use this for a collection component. You can't specify `tags` as a valid property for `collectionProperties` ."},"componentType":{"type":"string","description":"The type of the component. This can be an Amplify custom UI component or another custom component."},"createdAt":{"type":"string","description":"The time that the component was created."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app.","replaceOnChanges":true},"events":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentEvent"},"description":"Describes the events that can be raised on the component. Use for the workflow feature in Amplify Studio that allows you to bind events and actions to components."},"modifiedAt":{"type":"string","description":"The time that the component was modified."},"name":{"type":"string","description":"The name of the component."},"overrides":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"Describes the component's properties that can be overriden in a customized instance of the component. You can't specify `tags` as a valid property for `overrides` ."},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty"},"description":"Describes the component's properties. You can't specify `tags` as a valid property for `properties` ."},"schemaVersion":{"type":"string","description":"The schema version of the component when it was imported."},"sourceId":{"type":"string","description":"The unique ID of the component in its original source system, such as Figma."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the component."},"variants":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentVariant"},"description":"A list of the component's variants. A variant is a unique style configuration of a main component."}},"type":"object","required":["awsId","createdAt","modifiedAt"],"inputProperties":{"appId":{"type":"string","description":"The unique ID of the Amplify app associated with the component."},"bindingProperties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentBindingPropertiesValue"},"description":"The information to connect a component's properties to data at runtime. You can't specify `tags` as a valid property for `bindingProperties` ."},"children":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentChild"},"description":"A list of the component's `ComponentChild` instances."},"collectionProperties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentDataConfiguration"},"description":"The data binding configuration for the component's properties. Use this for a collection component. You can't specify `tags` as a valid property for `collectionProperties` ."},"componentType":{"type":"string","description":"The type of the component. This can be an Amplify custom UI component or another custom component."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app."},"events":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentEvent"},"description":"Describes the events that can be raised on the component. Use for the workflow feature in Amplify Studio that allows you to bind events and actions to components."},"name":{"type":"string","description":"The name of the component."},"overrides":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"Describes the component's properties that can be overriden in a customized instance of the component. You can't specify `tags` as a valid property for `overrides` ."},"properties":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty"},"description":"Describes the component's properties. You can't specify `tags` as a valid property for `properties` ."},"schemaVersion":{"type":"string","description":"The schema version of the component when it was imported."},"sourceId":{"type":"string","description":"The unique ID of the component in its original source system, such as Figma."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the component."},"variants":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentVariant"},"description":"A list of the component's variants. A variant is a unique style configuration of a main component."}}},"aws-native:amplifyuibuilder:Form":{"description":"Definition of AWS::AmplifyUIBuilder::Form Resource Type","properties":{"appId":{"type":"string","description":"The unique ID of the Amplify app associated with the form.","replaceOnChanges":true},"awsId":{"type":"string","description":"The ID for the form."},"cta":{"$ref":"#/types/aws-native:amplifyuibuilder:FormCta","description":"The `FormCTA` object that stores the call to action configuration for the form."},"dataType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormDataTypeConfig","description":"The type of data source to use to create the form."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app.","replaceOnChanges":true},"fields":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldConfig"},"description":"The configuration information for the form's fields."},"formActionType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormActionType","description":"Specifies whether to perform a create or update action on the form."},"labelDecorator":{"$ref":"#/types/aws-native:amplifyuibuilder:FormLabelDecorator","description":"Specifies an icon or decoration to display on the form."},"name":{"type":"string","description":"The name of the form."},"schemaVersion":{"type":"string","description":"The schema version of the form."},"sectionalElements":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormSectionalElement"},"description":"The configuration information for the visual helper elements for the form. These elements are not associated with any data."},"style":{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyle","description":"The configuration for the form's style."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the form data."}},"type":"object","required":["awsId"],"inputProperties":{"appId":{"type":"string","description":"The unique ID of the Amplify app associated with the form."},"cta":{"$ref":"#/types/aws-native:amplifyuibuilder:FormCta","description":"The `FormCTA` object that stores the call to action configuration for the form."},"dataType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormDataTypeConfig","description":"The type of data source to use to create the form."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app."},"fields":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldConfig"},"description":"The configuration information for the form's fields."},"formActionType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormActionType","description":"Specifies whether to perform a create or update action on the form."},"labelDecorator":{"$ref":"#/types/aws-native:amplifyuibuilder:FormLabelDecorator","description":"Specifies an icon or decoration to display on the form."},"name":{"type":"string","description":"The name of the form."},"schemaVersion":{"type":"string","description":"The schema version of the form."},"sectionalElements":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormSectionalElement"},"description":"The configuration information for the visual helper elements for the form. These elements are not associated with any data."},"style":{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyle","description":"The configuration for the form's style."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the form data."}}},"aws-native:amplifyuibuilder:Theme":{"description":"Definition of AWS::AmplifyUIBuilder::Theme Resource Type","properties":{"appId":{"type":"string","description":"The unique ID for the Amplify app associated with the theme.","replaceOnChanges":true},"awsId":{"type":"string","description":"The ID for the theme."},"createdAt":{"type":"string","description":"The time that the theme was created."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app.","replaceOnChanges":true},"modifiedAt":{"type":"string","description":"The time that the theme was modified."},"name":{"type":"string","description":"The name of the theme."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"description":"Describes the properties that can be overriden to customize a theme."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the theme."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"description":"A list of key-value pairs that defines the properties of the theme."}},"type":"object","required":["awsId","createdAt","modifiedAt"],"inputProperties":{"appId":{"type":"string","description":"The unique ID for the Amplify app associated with the theme."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app."},"name":{"type":"string","description":"The name of the theme."},"overrides":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"description":"Describes the properties that can be overriden to customize a theme."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the theme."},"values":{"type":"array","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"description":"A list of key-value pairs that defines the properties of the theme."}}},"aws-native:apigateway:Account":{"description":"The ``AWS::ApiGateway::Account`` resource specifies the IAM role that Amazon API Gateway uses to write API logs to Amazon CloudWatch Logs. To avoid overwriting other roles, you should only have one ``AWS::ApiGateway::Account`` resource per region per account. \n When you delete a stack containing this resource, API Gateway can still assume the provided IAM role to write API logs to CloudWatch Logs. To deny API Gateway access to write API logs to CloudWatch logs, update the permissions policies or change the IAM role to deny access.","properties":{"awsId":{"type":"string","description":"The ID for the account. For example: `abc123` ."},"cloudWatchRoleArn":{"type":"string","description":"The ARN of an Amazon CloudWatch role for the current Account."}},"type":"object","required":["awsId"],"inputProperties":{"cloudWatchRoleArn":{"type":"string","description":"The ARN of an Amazon CloudWatch role for the current Account."}}},"aws-native:apigateway:ApiKey":{"description":"The ``AWS::ApiGateway::ApiKey`` resource creates a unique key that you can distribute to clients who are executing API Gateway ``Method`` resources that require an API key. To specify which API key clients must use, map the API key with the ``RestApi`` and ``Stage`` resources that include the methods that require a key.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiKeyName = config.Require(\"apiKeyName\");\n    var customerId = config.Require(\"customerId\");\n    var generateDistinctId = config.Require(\"generateDistinctId\");\n    var apiKey = new AwsNative.ApiGateway.ApiKey(\"apiKey\", new()\n    {\n        CustomerId = customerId,\n        GenerateDistinctId = generateDistinctId,\n        Name = apiKeyName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiKeyName := cfg.Require(\"apiKeyName\")\n\t\tcustomerId := cfg.Require(\"customerId\")\n\t\tgenerateDistinctId := cfg.Require(\"generateDistinctId\")\n\t\t_, err := apigateway.NewApiKey(ctx, \"apiKey\", \u0026apigateway.ApiKeyArgs{\n\t\t\tCustomerId:         pulumi.String(pulumi.String(customerId)),\n\t\t\tGenerateDistinctId: pulumi.String(generateDistinctId),\n\t\t\tName:               pulumi.String(pulumi.String(apiKeyName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiKeyName = config.require(\"apiKeyName\");\nconst customerId = config.require(\"customerId\");\nconst generateDistinctId = config.require(\"generateDistinctId\");\nconst apiKey = new aws_native.apigateway.ApiKey(\"apiKey\", {\n    customerId: customerId,\n    generateDistinctId: generateDistinctId,\n    name: apiKeyName,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_key_name = config.require(\"apiKeyName\")\ncustomer_id = config.require(\"customerId\")\ngenerate_distinct_id = config.require(\"generateDistinctId\")\napi_key = aws_native.apigateway.ApiKey(\"apiKey\",\n    customer_id=customer_id,\n    generate_distinct_id=generate_distinct_id,\n    name=api_key_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiKeyName = config.Require(\"apiKeyName\");\n    var customerId = config.Require(\"customerId\");\n    var generateDistinctId = config.Require(\"generateDistinctId\");\n    var apiKey = new AwsNative.ApiGateway.ApiKey(\"apiKey\", new()\n    {\n        CustomerId = customerId,\n        GenerateDistinctId = generateDistinctId,\n        Name = apiKeyName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiKeyName := cfg.Require(\"apiKeyName\")\n\t\tcustomerId := cfg.Require(\"customerId\")\n\t\tgenerateDistinctId := cfg.Require(\"generateDistinctId\")\n\t\t_, err := apigateway.NewApiKey(ctx, \"apiKey\", \u0026apigateway.ApiKeyArgs{\n\t\t\tCustomerId:         pulumi.String(pulumi.String(customerId)),\n\t\t\tGenerateDistinctId: pulumi.String(generateDistinctId),\n\t\t\tName:               pulumi.String(pulumi.String(apiKeyName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiKeyName = config.require(\"apiKeyName\");\nconst customerId = config.require(\"customerId\");\nconst generateDistinctId = config.require(\"generateDistinctId\");\nconst apiKey = new aws_native.apigateway.ApiKey(\"apiKey\", {\n    customerId: customerId,\n    generateDistinctId: generateDistinctId,\n    name: apiKeyName,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_key_name = config.require(\"apiKeyName\")\ncustomer_id = config.require(\"customerId\")\ngenerate_distinct_id = config.require(\"generateDistinctId\")\napi_key = aws_native.apigateway.ApiKey(\"apiKey\",\n    customer_id=customer_id,\n    generate_distinct_id=generate_distinct_id,\n    name=api_key_name)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"apiKeyId":{"type":"string","description":"The ID for the API key. For example: `abc123` ."},"customerId":{"type":"string","description":"An AWS Marketplace customer identifier, when integrating with the AWS SaaS Marketplace."},"description":{"type":"string","description":"The description of the ApiKey."},"enabled":{"type":"boolean","description":"Specifies whether the ApiKey can be used by callers."},"generateDistinctId":{"type":"boolean","description":"Specifies whether ( `true` ) or not ( `false` ) the key identifier is distinct from the created API key value. This parameter is deprecated and should not be used.","replaceOnChanges":true},"name":{"type":"string","description":"A name for the API key. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the API key name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"stageKeys":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:ApiKeyStageKey"},"description":"DEPRECATED FOR USAGE PLANS - Specifies stages associated with the API key."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with `aws:` . The tag value can be up to 256 characters."},"value":{"type":"string","description":"Specifies a value of the API key.","replaceOnChanges":true}},"type":"object","required":["apiKeyId"],"inputProperties":{"customerId":{"type":"string","description":"An AWS Marketplace customer identifier, when integrating with the AWS SaaS Marketplace."},"description":{"type":"string","description":"The description of the ApiKey."},"enabled":{"type":"boolean","description":"Specifies whether the ApiKey can be used by callers."},"generateDistinctId":{"type":"boolean","description":"Specifies whether ( `true` ) or not ( `false` ) the key identifier is distinct from the created API key value. This parameter is deprecated and should not be used."},"name":{"type":"string","description":"A name for the API key. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the API key name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"stageKeys":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:ApiKeyStageKey"},"description":"DEPRECATED FOR USAGE PLANS - Specifies stages associated with the API key."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with `aws:` . The tag value can be up to 256 characters."},"value":{"type":"string","description":"Specifies a value of the API key."}}},"aws-native:apigateway:Authorizer":{"description":"The ``AWS::ApiGateway::Authorizer`` resource creates an authorization layer that API Gateway activates for methods that have authorization enabled. API Gateway activates the authorizer when a client calls those methods.","properties":{"authType":{"type":"string","description":"Optional customer-defined field, used in OpenAPI imports and exports without functional impact."},"authorizerCredentials":{"type":"string","description":"Specifies the required credentials as an IAM role for API Gateway to invoke the authorizer. To specify an IAM role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To use resource-based permissions on the Lambda function, specify null."},"authorizerId":{"type":"string","description":"The ID for the authorizer. For example: `abc123` ."},"authorizerResultTtlInSeconds":{"type":"integer","description":"The TTL in seconds of cached authorizer results. If it equals 0, authorization caching is disabled. If it is greater than 0, API Gateway will cache authorizer responses. If this field is not set, the default value is 300. The maximum value is 3600, or 1 hour."},"authorizerUri":{"type":"string","description":"Specifies the authorizer's Uniform Resource Identifier (URI). For `TOKEN` or `REQUEST` authorizers, this must be a well-formed Lambda function URI, for example, `arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:{account_id}:function:{lambda_function_name}/invocations` . In general, the URI has this form `arn:aws:apigateway:{region}:lambda:path/{service_api}` , where `{region}` is the same as the region hosting the Lambda function, `path` indicates that the remaining substring in the URI should be treated as the path to the resource, including the initial `/` . For Lambda functions, this is usually of the form `/2015-03-31/functions/[FunctionARN]/invocations` ."},"identitySource":{"type":"string","description":"The identity source for which authorization is requested. For a `TOKEN` or `COGNITO_USER_POOLS` authorizer, this is required and specifies the request header mapping expression for the custom header holding the authorization token submitted by the client. For example, if the token header name is `Auth` , the header mapping expression is `method.request.header.Auth` . For the `REQUEST` authorizer, this is required when authorization caching is enabled. The value is a comma-separated string of one or more mapping expressions of the specified request parameters. For example, if an `Auth` header, a `Name` query string parameter are defined as identity sources, this value is `method.request.header.Auth, method.request.querystring.Name` . These parameters will be used to derive the authorization caching key and to perform runtime validation of the `REQUEST` authorizer by verifying all of the identity-related request parameters are present, not null and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function, otherwise, it returns a 401 Unauthorized response without calling the Lambda function. The valid value is a string of comma-separated mapping expressions of the specified request parameters. When the authorization caching is not enabled, this property is optional."},"identityValidationExpression":{"type":"string","description":"A validation expression for the incoming identity token. For `TOKEN` authorizers, this value is a regular expression. For `COGNITO_USER_POOLS` authorizers, API Gateway will match the `aud` field of the incoming token from the client against the specified regular expression. It will invoke the authorizer's Lambda function when there is a match. Otherwise, it will return a 401 Unauthorized response without calling the Lambda function. The validation expression does not apply to the `REQUEST` authorizer."},"name":{"type":"string","description":"The name of the authorizer."},"providerArns":{"type":"array","items":{"type":"string"},"description":"A list of the Amazon Cognito user pool ARNs for the `COGNITO_USER_POOLS` authorizer. Each element is of this format: `arn:aws:cognito-idp:{region}:{account_id}:userpool/{user_pool_id}` . For a `TOKEN` or `REQUEST` authorizer, this is not defined."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true},"type":{"type":"string","description":"The authorizer type. Valid values are `TOKEN` for a Lambda function using a single authorization token submitted in a custom header, `REQUEST` for a Lambda function using incoming request parameters, and `COGNITO_USER_POOLS` for using an Amazon Cognito user pool."}},"type":"object","required":["authorizerId","name","restApiId","type"],"inputProperties":{"authType":{"type":"string","description":"Optional customer-defined field, used in OpenAPI imports and exports without functional impact."},"authorizerCredentials":{"type":"string","description":"Specifies the required credentials as an IAM role for API Gateway to invoke the authorizer. To specify an IAM role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To use resource-based permissions on the Lambda function, specify null."},"authorizerResultTtlInSeconds":{"type":"integer","description":"The TTL in seconds of cached authorizer results. If it equals 0, authorization caching is disabled. If it is greater than 0, API Gateway will cache authorizer responses. If this field is not set, the default value is 300. The maximum value is 3600, or 1 hour."},"authorizerUri":{"type":"string","description":"Specifies the authorizer's Uniform Resource Identifier (URI). For `TOKEN` or `REQUEST` authorizers, this must be a well-formed Lambda function URI, for example, `arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:{account_id}:function:{lambda_function_name}/invocations` . In general, the URI has this form `arn:aws:apigateway:{region}:lambda:path/{service_api}` , where `{region}` is the same as the region hosting the Lambda function, `path` indicates that the remaining substring in the URI should be treated as the path to the resource, including the initial `/` . For Lambda functions, this is usually of the form `/2015-03-31/functions/[FunctionARN]/invocations` ."},"identitySource":{"type":"string","description":"The identity source for which authorization is requested. For a `TOKEN` or `COGNITO_USER_POOLS` authorizer, this is required and specifies the request header mapping expression for the custom header holding the authorization token submitted by the client. For example, if the token header name is `Auth` , the header mapping expression is `method.request.header.Auth` . For the `REQUEST` authorizer, this is required when authorization caching is enabled. The value is a comma-separated string of one or more mapping expressions of the specified request parameters. For example, if an `Auth` header, a `Name` query string parameter are defined as identity sources, this value is `method.request.header.Auth, method.request.querystring.Name` . These parameters will be used to derive the authorization caching key and to perform runtime validation of the `REQUEST` authorizer by verifying all of the identity-related request parameters are present, not null and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function, otherwise, it returns a 401 Unauthorized response without calling the Lambda function. The valid value is a string of comma-separated mapping expressions of the specified request parameters. When the authorization caching is not enabled, this property is optional."},"identityValidationExpression":{"type":"string","description":"A validation expression for the incoming identity token. For `TOKEN` authorizers, this value is a regular expression. For `COGNITO_USER_POOLS` authorizers, API Gateway will match the `aud` field of the incoming token from the client against the specified regular expression. It will invoke the authorizer's Lambda function when there is a match. Otherwise, it will return a 401 Unauthorized response without calling the Lambda function. The validation expression does not apply to the `REQUEST` authorizer."},"name":{"type":"string","description":"The name of the authorizer."},"providerArns":{"type":"array","items":{"type":"string"},"description":"A list of the Amazon Cognito user pool ARNs for the `COGNITO_USER_POOLS` authorizer. Each element is of this format: `arn:aws:cognito-idp:{region}:{account_id}:userpool/{user_pool_id}` . For a `TOKEN` or `REQUEST` authorizer, this is not defined."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"type":{"type":"string","description":"The authorizer type. Valid values are `TOKEN` for a Lambda function using a single authorization token submitted in a custom header, `REQUEST` for a Lambda function using incoming request parameters, and `COGNITO_USER_POOLS` for using an Amazon Cognito user pool."}},"requiredInputs":["restApiId","type"]},"aws-native:apigateway:BasePathMapping":{"description":"The ``AWS::ApiGateway::BasePathMapping`` resource creates a base path that clients who call your API must use in the invocation URL. Supported only for public custom domain names.","properties":{"basePath":{"type":"string","description":"The base path name that callers of the API must provide as part of the URL after the domain name.","replaceOnChanges":true},"domainName":{"type":"string","description":"The domain name of the BasePathMapping resource to be described.","replaceOnChanges":true},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"stage":{"type":"string","description":"The name of the associated stage."}},"type":"object","required":["domainName"],"inputProperties":{"basePath":{"type":"string","description":"The base path name that callers of the API must provide as part of the URL after the domain name."},"domainName":{"type":"string","description":"The domain name of the BasePathMapping resource to be described."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"stage":{"type":"string","description":"The name of the associated stage."}},"requiredInputs":["domainName"]},"aws-native:apigateway:BasePathMappingV2":{"description":"Resource Type definition for AWS::ApiGateway::BasePathMappingV2","properties":{"basePath":{"type":"string","description":"The base path name that callers of the API must provide in the URL after the domain name.","replaceOnChanges":true},"basePathMappingArn":{"type":"string","description":"Amazon Resource Name (ARN) of the resource."},"domainNameArn":{"type":"string","description":"The Arn of an AWS::ApiGateway::DomainNameV2 resource.","replaceOnChanges":true},"restApiId":{"type":"string","description":"The ID of the API."},"stage":{"type":"string","description":"The name of the API's stage."}},"type":"object","required":["basePathMappingArn","domainNameArn","restApiId"],"inputProperties":{"basePath":{"type":"string","description":"The base path name that callers of the API must provide in the URL after the domain name."},"domainNameArn":{"type":"string","description":"The Arn of an AWS::ApiGateway::DomainNameV2 resource."},"restApiId":{"type":"string","description":"The ID of the API."},"stage":{"type":"string","description":"The name of the API's stage."}},"requiredInputs":["domainNameArn","restApiId"]},"aws-native:apigateway:ClientCertificate":{"description":"The ``AWS::ApiGateway::ClientCertificate`` resource creates a client certificate that API Gateway uses to configure client-side SSL authentication for sending requests to the integration endpoint.","properties":{"clientCertificateId":{"type":"string","description":"The ID for the client certificate. For example: `abc123` ."},"description":{"type":"string","description":"The description of the client certificate."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."}},"type":"object","required":["clientCertificateId"],"inputProperties":{"description":{"type":"string","description":"The description of the client certificate."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."}}},"aws-native:apigateway:Deployment":{"description":"The ``AWS::ApiGateway::Deployment`` resource deploys an API Gateway ``RestApi`` resource to a stage so that clients can call the API over the internet. The stage acts as an environment.","properties":{"deploymentCanarySettings":{"$ref":"#/types/aws-native:apigateway:DeploymentCanarySettings","description":"The input configuration for a canary deployment.","replaceOnChanges":true},"deploymentId":{"type":"string","description":"The ID for the deployment. For example: `abc123` ."},"description":{"type":"string","description":"The description for the Deployment resource to create."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true},"stageDescription":{"$ref":"#/types/aws-native:apigateway:DeploymentStageDescription","description":"The description of the Stage resource for the Deployment resource to create. To specify a stage description, you must also provide a stage name."},"stageName":{"type":"string","description":"The name of the Stage resource for the Deployment resource to create."}},"type":"object","required":["deploymentId","restApiId"],"inputProperties":{"deploymentCanarySettings":{"$ref":"#/types/aws-native:apigateway:DeploymentCanarySettings","description":"The input configuration for a canary deployment."},"description":{"type":"string","description":"The description for the Deployment resource to create."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"stageDescription":{"$ref":"#/types/aws-native:apigateway:DeploymentStageDescription","description":"The description of the Stage resource for the Deployment resource to create. To specify a stage description, you must also provide a stage name."},"stageName":{"type":"string","description":"The name of the Stage resource for the Deployment resource to create."}},"requiredInputs":["restApiId"]},"aws-native:apigateway:DocumentationPart":{"description":"The ``AWS::ApiGateway::DocumentationPart`` resource creates a documentation part for an API. For more information, see [Representation of API Documentation in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-documenting-api-content-representation.html) in the *API Gateway Developer Guide*.","properties":{"documentationPartId":{"type":"string","description":"The ID for the documentation part."},"location":{"$ref":"#/types/aws-native:apigateway:DocumentationPartLocation","description":"The location of the targeted API entity of the to-be-created documentation part.","replaceOnChanges":true},"properties":{"type":"string","description":"The new documentation content map of the targeted API entity. Enclosed key-value pairs are API-specific, but only OpenAPI-compliant key-value pairs can be exported and, hence, published."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true}},"type":"object","required":["documentationPartId","location","properties","restApiId"],"inputProperties":{"location":{"$ref":"#/types/aws-native:apigateway:DocumentationPartLocation","description":"The location of the targeted API entity of the to-be-created documentation part."},"properties":{"type":"string","description":"The new documentation content map of the targeted API entity. Enclosed key-value pairs are API-specific, but only OpenAPI-compliant key-value pairs can be exported and, hence, published."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"requiredInputs":["location","properties","restApiId"]},"aws-native:apigateway:DocumentationVersion":{"description":"The ``AWS::ApiGateway::DocumentationVersion`` resource creates a snapshot of the documentation for an API. For more information, see [Representation of API Documentation in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-documenting-api-content-representation.html) in the *API Gateway Developer Guide*.","properties":{"description":{"type":"string","description":"A description about the new documentation snapshot."},"documentationVersion":{"type":"string","description":"The version identifier of the to-be-updated documentation version.","language":{"csharp":{"name":"DocumentationVersionValue"}},"replaceOnChanges":true},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true}},"type":"object","required":["documentationVersion","restApiId"],"inputProperties":{"description":{"type":"string","description":"A description about the new documentation snapshot."},"documentationVersion":{"type":"string","description":"The version identifier of the to-be-updated documentation version.","language":{"csharp":{"name":"DocumentationVersionValue"}}},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"requiredInputs":["documentationVersion","restApiId"]},"aws-native:apigateway:DomainName":{"description":"The ``AWS::ApiGateway::DomainName`` resource specifies a public custom domain name for your API in API Gateway.\n To create a custom domain name for private APIs, use [AWS::ApiGateway::DomainNameV2](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html).\n You can use a custom domain name to provide a URL that's more intuitive and easier to recall. For more information about using custom domain names, see [Set up Custom Domain Name for an API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html) in the *API Gateway Developer Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var cfnDomainName = config.Require(\"cfnDomainName\");\n    var certificateArn = config.Require(\"certificateArn\");\n    var type = config.Require(\"type\");\n    var myDomainName = new AwsNative.ApiGateway.DomainName(\"myDomainName\", new()\n    {\n        CertificateArn = certificateArn,\n        DomainNameValue = cfnDomainName,\n        EndpointConfiguration = new AwsNative.ApiGateway.Inputs.DomainNameEndpointConfigurationArgs\n        {\n            Types = new[]\n            {\n                type,\n            },\n        },\n        RegionalCertificateArn = certificateArn,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"domainName\"] = myDomainName.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tcfnDomainName := cfg.Require(\"cfnDomainName\")\n\t\tcertificateArn := cfg.Require(\"certificateArn\")\n\t\t_type := cfg.Require(\"type\")\n\t\tmyDomainName, err := apigateway.NewDomainName(ctx, \"myDomainName\", \u0026apigateway.DomainNameArgs{\n\t\t\tCertificateArn: pulumi.String(pulumi.String(certificateArn)),\n\t\t\tDomainName:     pulumi.String(pulumi.String(cfnDomainName)),\n\t\t\tEndpointConfiguration: \u0026apigateway.DomainNameEndpointConfigurationArgs{\n\t\t\t\tTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(pulumi.String(_type)),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegionalCertificateArn: pulumi.String(pulumi.String(certificateArn)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"domainName\", myDomainName.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst cfnDomainName = config.require(\"cfnDomainName\");\nconst certificateArn = config.require(\"certificateArn\");\nconst type = config.require(\"type\");\nconst myDomainName = new aws_native.apigateway.DomainName(\"myDomainName\", {\n    certificateArn: certificateArn,\n    domainName: cfnDomainName,\n    endpointConfiguration: {\n        types: [type],\n    },\n    regionalCertificateArn: certificateArn,\n});\nexport const domainName = myDomainName.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ncfn_domain_name = config.require(\"cfnDomainName\")\ncertificate_arn = config.require(\"certificateArn\")\ntype = config.require(\"type\")\nmy_domain_name = aws_native.apigateway.DomainName(\"myDomainName\",\n    certificate_arn=certificate_arn,\n    domain_name=cfn_domain_name,\n    endpoint_configuration={\n        \"types\": [type],\n    },\n    regional_certificate_arn=certificate_arn)\npulumi.export(\"domainName\", my_domain_name.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var cfnDomainName = config.Require(\"cfnDomainName\");\n    var certificateArn = config.Require(\"certificateArn\");\n    var type = config.Require(\"type\");\n    var myDomainName = new AwsNative.ApiGateway.DomainName(\"myDomainName\", new()\n    {\n        CertificateArn = certificateArn,\n        DomainNameValue = cfnDomainName,\n        EndpointConfiguration = new AwsNative.ApiGateway.Inputs.DomainNameEndpointConfigurationArgs\n        {\n            Types = new[]\n            {\n                type,\n            },\n        },\n        RegionalCertificateArn = certificateArn,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"domainName\"] = myDomainName.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tcfnDomainName := cfg.Require(\"cfnDomainName\")\n\t\tcertificateArn := cfg.Require(\"certificateArn\")\n\t\t_type := cfg.Require(\"type\")\n\t\tmyDomainName, err := apigateway.NewDomainName(ctx, \"myDomainName\", \u0026apigateway.DomainNameArgs{\n\t\t\tCertificateArn: pulumi.String(pulumi.String(certificateArn)),\n\t\t\tDomainName:     pulumi.String(pulumi.String(cfnDomainName)),\n\t\t\tEndpointConfiguration: \u0026apigateway.DomainNameEndpointConfigurationArgs{\n\t\t\t\tTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(pulumi.String(_type)),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegionalCertificateArn: pulumi.String(pulumi.String(certificateArn)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"domainName\", myDomainName.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst cfnDomainName = config.require(\"cfnDomainName\");\nconst certificateArn = config.require(\"certificateArn\");\nconst type = config.require(\"type\");\nconst myDomainName = new aws_native.apigateway.DomainName(\"myDomainName\", {\n    certificateArn: certificateArn,\n    domainName: cfnDomainName,\n    endpointConfiguration: {\n        types: [type],\n    },\n    regionalCertificateArn: certificateArn,\n});\nexport const domainName = myDomainName.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ncfn_domain_name = config.require(\"cfnDomainName\")\ncertificate_arn = config.require(\"certificateArn\")\ntype = config.require(\"type\")\nmy_domain_name = aws_native.apigateway.DomainName(\"myDomainName\",\n    certificate_arn=certificate_arn,\n    domain_name=cfn_domain_name,\n    endpoint_configuration={\n        \"types\": [type],\n    },\n    regional_certificate_arn=certificate_arn)\npulumi.export(\"domainName\", my_domain_name.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"certificateArn":{"type":"string","description":"The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. Certificate Manager is the only supported source."},"distributionDomainName":{"type":"string","description":"The Amazon CloudFront distribution domain name that's mapped to the custom domain name. This is only applicable for endpoints whose type is `EDGE` .\n\nExample: `d111111abcdef8.cloudfront.net`"},"distributionHostedZoneId":{"type":"string","description":"The region-agnostic Amazon Route 53 Hosted Zone ID of the edge-optimized endpoint. The only valid value is `Z2FDTNDATAQYW2` for all regions."},"domainName":{"type":"string","description":"The custom domain name as an API host name, for example, `my-api.example.com` .","language":{"csharp":{"name":"DomainNameValue"}},"replaceOnChanges":true},"domainNameArn":{"type":"string","description":"The ARN of the domain name."},"endpointAccessMode":{"type":"string","description":"The endpoint access mode for your DomainName."},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:DomainNameEndpointConfiguration","description":"The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name."},"mutualTlsAuthentication":{"$ref":"#/types/aws-native:apigateway:DomainNameMutualTlsAuthentication","description":"The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API."},"ownershipVerificationCertificateArn":{"type":"string","description":"The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn."},"regionalCertificateArn":{"type":"string","description":"The reference to an AWS -managed certificate that will be used for validating the regional domain name. Certificate Manager is the only supported source."},"regionalDomainName":{"type":"string","description":"The domain name associated with the regional endpoint for this custom domain name. You set up this association by adding a DNS record that points the custom domain name to this regional domain name."},"regionalHostedZoneId":{"type":"string","description":"The region-specific Amazon Route 53 Hosted Zone ID of the regional endpoint."},"routingMode":{"$ref":"#/types/aws-native:apigateway:DomainNameRoutingMode","description":"The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version + cipher suite for this DomainName."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."}},"type":"object","required":["distributionDomainName","distributionHostedZoneId","domainNameArn","regionalDomainName","regionalHostedZoneId"],"inputProperties":{"certificateArn":{"type":"string","description":"The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. Certificate Manager is the only supported source."},"domainName":{"type":"string","description":"The custom domain name as an API host name, for example, `my-api.example.com` .","language":{"csharp":{"name":"DomainNameValue"}}},"endpointAccessMode":{"type":"string","description":"The endpoint access mode for your DomainName."},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:DomainNameEndpointConfiguration","description":"The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name."},"mutualTlsAuthentication":{"$ref":"#/types/aws-native:apigateway:DomainNameMutualTlsAuthentication","description":"The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API."},"ownershipVerificationCertificateArn":{"type":"string","description":"The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn."},"regionalCertificateArn":{"type":"string","description":"The reference to an AWS -managed certificate that will be used for validating the regional domain name. Certificate Manager is the only supported source."},"routingMode":{"$ref":"#/types/aws-native:apigateway:DomainNameRoutingMode","description":"The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version + cipher suite for this DomainName."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."}}},"aws-native:apigateway:DomainNameAccessAssociation":{"description":"Resource Type definition for AWS::ApiGateway::DomainNameAccessAssociation.","properties":{"accessAssociationSource":{"type":"string","description":"The source of the domain name access association resource.","replaceOnChanges":true},"accessAssociationSourceType":{"$ref":"#/types/aws-native:apigateway:DomainNameAccessAssociationAccessAssociationSourceType","description":"The source type of the domain name access association resource.","replaceOnChanges":true},"domainNameAccessAssociationArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name access association resource."},"domainNameArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name resource.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of arbitrary tags (key-value pairs) to associate with the domainname access association.","replaceOnChanges":true}},"type":"object","required":["accessAssociationSource","accessAssociationSourceType","domainNameAccessAssociationArn","domainNameArn"],"inputProperties":{"accessAssociationSource":{"type":"string","description":"The source of the domain name access association resource."},"accessAssociationSourceType":{"$ref":"#/types/aws-native:apigateway:DomainNameAccessAssociationAccessAssociationSourceType","description":"The source type of the domain name access association resource."},"domainNameArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of arbitrary tags (key-value pairs) to associate with the domainname access association."}},"requiredInputs":["accessAssociationSource","accessAssociationSourceType","domainNameArn"]},"aws-native:apigateway:DomainNameV2":{"description":"Resource Type definition for AWS::ApiGateway::DomainNameV2.","properties":{"certificateArn":{"type":"string","description":"The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source."},"domainName":{"type":"string","description":"Represents a custom domain name as a user-friendly host name of an API (RestApi).","replaceOnChanges":true},"domainNameArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name resource."},"domainNameId":{"type":"string","description":"The domain name ID."},"endpointAccessMode":{"type":"string","description":"The endpoint access mode for your DomainName."},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:DomainNameV2EndpointConfiguration","description":"The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."},"routingMode":{"$ref":"#/types/aws-native:apigateway:DomainNameV2RoutingMode","description":"The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY]. All other inputs are invalid."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version + cipher suite for this DomainName.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."}},"type":"object","required":["domainNameArn","domainNameId"],"inputProperties":{"certificateArn":{"type":"string","description":"The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source."},"domainName":{"type":"string","description":"Represents a custom domain name as a user-friendly host name of an API (RestApi)."},"endpointAccessMode":{"type":"string","description":"The endpoint access mode for your DomainName."},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:DomainNameV2EndpointConfiguration","description":"The endpoint configuration to indicate the types of endpoints an API (RestApi) or its custom domain name (DomainName) has and the IP address types that can invoke it."},"policy":{"$ref":"pulumi.json#/Any","description":"A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."},"routingMode":{"$ref":"#/types/aws-native:apigateway:DomainNameV2RoutingMode","description":"The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY]. All other inputs are invalid."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version + cipher suite for this DomainName."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."}}},"aws-native:apigateway:GatewayResponse":{"description":"The ``AWS::ApiGateway::GatewayResponse`` resource creates a gateway response for your API. When you delete a stack containing this resource, your custom gateway responses are reset. For more information, see [API Gateway Responses](https://docs.aws.amazon.com/apigateway/latest/developerguide/customize-gateway-responses.html#api-gateway-gatewayResponse-definition) in the *API Gateway Developer Guide*.","properties":{"awsId":{"type":"string","description":"The ID for the gateway response. For example: `abc123` ."},"responseParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Response parameters (paths, query strings and headers) of the GatewayResponse as a string-to-string map of key-value pairs."},"responseTemplates":{"type":"object","additionalProperties":{"type":"string"},"description":"Response templates of the GatewayResponse as a string-to-string map of key-value pairs."},"responseType":{"type":"string","description":"The response type of the associated GatewayResponse.","replaceOnChanges":true},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true},"statusCode":{"type":"string","description":"The HTTP status code for this GatewayResponse."}},"type":"object","required":["awsId","responseType","restApiId"],"inputProperties":{"responseParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Response parameters (paths, query strings and headers) of the GatewayResponse as a string-to-string map of key-value pairs."},"responseTemplates":{"type":"object","additionalProperties":{"type":"string"},"description":"Response templates of the GatewayResponse as a string-to-string map of key-value pairs."},"responseType":{"type":"string","description":"The response type of the associated GatewayResponse."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"statusCode":{"type":"string","description":"The HTTP status code for this GatewayResponse."}},"requiredInputs":["responseType","restApiId"]},"aws-native:apigateway:Method":{"description":"The ``AWS::ApiGateway::Method`` resource creates API Gateway methods that define the parameters and body that clients must send in their requests.","properties":{"apiKeyRequired":{"type":"boolean","description":"A boolean flag specifying whether a valid ApiKey is required to invoke this method."},"authorizationScopes":{"type":"array","items":{"type":"string"},"description":"A list of authorization scopes configured on the method. The scopes are used with a `COGNITO_USER_POOLS` authorizer to authorize the method invocation. The authorization works by matching the method scopes against the scopes parsed from the access token in the incoming request. The method invocation is authorized if any method scopes matches a claimed scope in the access token. Otherwise, the invocation is not authorized. When the method scope is configured, the client must provide an access token instead of an identity token for authorization purposes."},"authorizationType":{"type":"string","description":"The method's authorization type. This parameter is required. For valid values, see [Method](https://docs.aws.amazon.com/apigateway/latest/api/API_Method.html) in the *API Gateway API Reference*.\n  If you specify the ``AuthorizerId`` property, specify ``CUSTOM`` or ``COGNITO_USER_POOLS`` for this property."},"authorizerId":{"type":"string","description":"The identifier of an authorizer to use on this method. The method's authorization type must be `CUSTOM` or `COGNITO_USER_POOLS` ."},"httpMethod":{"type":"string","description":"The method's HTTP verb.","replaceOnChanges":true},"integration":{"$ref":"#/types/aws-native:apigateway:MethodIntegration","description":"Represents an `HTTP` , `HTTP_PROXY` , `AWS` , `AWS_PROXY` , or Mock integration."},"methodResponses":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:MethodResponse"},"description":"Gets a method response associated with a given HTTP status code."},"operationName":{"type":"string","description":"A human-friendly operation identifier for the method. For example, you can assign the `operationName` of `ListPets` for the `GET /pets` method in the `PetStore` example."},"requestModels":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value map specifying data schemas, represented by Model resources, (as the mapped value) of the request payloads of given content types (as the mapping key)."},"requestParameters":{"type":"object","additionalProperties":{"oneOf":[{"type":"boolean"},{"type":"string"}]},"description":"A key-value map defining required or optional method request parameters that can be accepted by API Gateway. A key is a method request parameter name matching the pattern of `method.request.{location}.{name}` , where `location` is `querystring` , `path` , or `header` and `name` is a valid and unique parameter name. The value associated with the key is a Boolean flag indicating whether the parameter is required ( `true` ) or optional ( `false` ). The method request parameter names defined here are available in Integration to be mapped to integration request parameters or templates."},"requestValidatorId":{"type":"string","description":"The identifier of a RequestValidator for request validation."},"resourceId":{"type":"string","description":"The Resource identifier for the MethodResponse resource.","replaceOnChanges":true},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true}},"type":"object","required":["httpMethod","resourceId","restApiId"],"inputProperties":{"apiKeyRequired":{"type":"boolean","description":"A boolean flag specifying whether a valid ApiKey is required to invoke this method."},"authorizationScopes":{"type":"array","items":{"type":"string"},"description":"A list of authorization scopes configured on the method. The scopes are used with a `COGNITO_USER_POOLS` authorizer to authorize the method invocation. The authorization works by matching the method scopes against the scopes parsed from the access token in the incoming request. The method invocation is authorized if any method scopes matches a claimed scope in the access token. Otherwise, the invocation is not authorized. When the method scope is configured, the client must provide an access token instead of an identity token for authorization purposes."},"authorizationType":{"type":"string","description":"The method's authorization type. This parameter is required. For valid values, see [Method](https://docs.aws.amazon.com/apigateway/latest/api/API_Method.html) in the *API Gateway API Reference*.\n  If you specify the ``AuthorizerId`` property, specify ``CUSTOM`` or ``COGNITO_USER_POOLS`` for this property."},"authorizerId":{"type":"string","description":"The identifier of an authorizer to use on this method. The method's authorization type must be `CUSTOM` or `COGNITO_USER_POOLS` ."},"httpMethod":{"type":"string","description":"The method's HTTP verb."},"integration":{"$ref":"#/types/aws-native:apigateway:MethodIntegration","description":"Represents an `HTTP` , `HTTP_PROXY` , `AWS` , `AWS_PROXY` , or Mock integration."},"methodResponses":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:MethodResponse"},"description":"Gets a method response associated with a given HTTP status code."},"operationName":{"type":"string","description":"A human-friendly operation identifier for the method. For example, you can assign the `operationName` of `ListPets` for the `GET /pets` method in the `PetStore` example."},"requestModels":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value map specifying data schemas, represented by Model resources, (as the mapped value) of the request payloads of given content types (as the mapping key)."},"requestParameters":{"type":"object","additionalProperties":{"oneOf":[{"type":"boolean"},{"type":"string"}]},"description":"A key-value map defining required or optional method request parameters that can be accepted by API Gateway. A key is a method request parameter name matching the pattern of `method.request.{location}.{name}` , where `location` is `querystring` , `path` , or `header` and `name` is a valid and unique parameter name. The value associated with the key is a Boolean flag indicating whether the parameter is required ( `true` ) or optional ( `false` ). The method request parameter names defined here are available in Integration to be mapped to integration request parameters or templates."},"requestValidatorId":{"type":"string","description":"The identifier of a RequestValidator for request validation."},"resourceId":{"type":"string","description":"The Resource identifier for the MethodResponse resource."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"requiredInputs":["httpMethod","resourceId","restApiId"]},"aws-native:apigateway:Model":{"description":"The ``AWS::ApiGateway::Model`` resource defines the structure of a request or response payload for an API method.","properties":{"contentType":{"type":"string","description":"The content-type for the model.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the model."},"name":{"type":"string","description":"A name for the model. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the model name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true},"schema":{"$ref":"pulumi.json#/Any","description":"The schema for the model. For `application/json` models, this should be JSON schema draft 4 model. Do not include \"\\*/\" characters in the description of any properties because such \"\\*/\" characters may be interpreted as the closing marker for comments in some languages, such as Java or JavaScript, causing the installation of your API's SDK generated by API Gateway to fail.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::Model` for more information about the expected schema for this property."}},"type":"object","required":["restApiId"],"inputProperties":{"contentType":{"type":"string","description":"The content-type for the model."},"description":{"type":"string","description":"The description of the model."},"name":{"type":"string","description":"A name for the model. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the model name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"schema":{"$ref":"pulumi.json#/Any","description":"The schema for the model. For `application/json` models, this should be JSON schema draft 4 model. Do not include \"\\*/\" characters in the description of any properties because such \"\\*/\" characters may be interpreted as the closing marker for comments in some languages, such as Java or JavaScript, causing the installation of your API's SDK generated by API Gateway to fail.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::Model` for more information about the expected schema for this property."}},"requiredInputs":["restApiId"]},"aws-native:apigateway:RequestValidator":{"description":"The ``AWS::ApiGateway::RequestValidator`` resource sets up basic validation rules for incoming requests to your API. For more information, see [Enable Basic Request Validation for an API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-method-request-validation.html) in the *API Gateway Developer Guide*.","properties":{"name":{"type":"string","description":"The name of this RequestValidator","replaceOnChanges":true},"requestValidatorId":{"type":"string","description":"The ID for the request validator. For example: `abc123` ."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true},"validateRequestBody":{"type":"boolean","description":"A Boolean flag to indicate whether to validate a request body according to the configured Model schema."},"validateRequestParameters":{"type":"boolean","description":"A Boolean flag to indicate whether to validate request parameters ( `true` ) or not ( `false` )."}},"type":"object","required":["requestValidatorId","restApiId"],"inputProperties":{"name":{"type":"string","description":"The name of this RequestValidator"},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"validateRequestBody":{"type":"boolean","description":"A Boolean flag to indicate whether to validate a request body according to the configured Model schema."},"validateRequestParameters":{"type":"boolean","description":"A Boolean flag to indicate whether to validate request parameters ( `true` ) or not ( `false` )."}},"requiredInputs":["restApiId"]},"aws-native:apigateway:Resource":{"description":"The ``AWS::ApiGateway::Resource`` resource creates a resource in an API.","properties":{"parentId":{"type":"string","description":"The parent resource's identifier.","replaceOnChanges":true},"pathPart":{"type":"string","description":"The last path segment for this resource.","replaceOnChanges":true},"resourceId":{"type":"string","description":"The ID for the resource. For example: `abc123` ."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true}},"type":"object","required":["parentId","pathPart","resourceId","restApiId"],"inputProperties":{"parentId":{"type":"string","description":"The parent resource's identifier."},"pathPart":{"type":"string","description":"The last path segment for this resource."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"requiredInputs":["parentId","pathPart","restApiId"]},"aws-native:apigateway:RestApi":{"description":"The ``AWS::ApiGateway::RestApi`` resource creates a REST API. For more information, see [restapi:create](https://docs.aws.amazon.com/apigateway/latest/api/API_CreateRestApi.html) in the *Amazon API Gateway REST API Reference*.\n  On January 1, 2016, the Swagger Specification was donated to the [OpenAPI initiative](https://docs.aws.amazon.com/https://www.openapis.org/), becoming the foundation of the OpenAPI Specification.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var description = config.Require(\"description\");\n    var version = config.Require(\"version\");\n    var type = config.Require(\"type\");\n    var property = config.Require(\"property\");\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = apiName,\n    });\n\n    var documentationPart = new AwsNative.ApiGateway.DocumentationPart(\"documentationPart\", new()\n    {\n        Location = new AwsNative.ApiGateway.Inputs.DocumentationPartLocationArgs\n        {\n            Type = System.Enum.Parse\u003cAwsNative.ApiGateway.DocumentationPartLocationType\u003e(type),\n        },\n        RestApiId = restApi.Id,\n        Properties = property,\n    });\n\n    var documentationVersion = new AwsNative.ApiGateway.DocumentationVersion(\"documentationVersion\", new()\n    {\n        Description = description,\n        DocumentationVersionValue = version,\n        RestApiId = restApi.Id,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            documentationPart,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tdescription := cfg.Require(\"description\")\n\t\tversion := cfg.Require(\"version\")\n\t\t_type := cfg.Require(\"type\")\n\t\tproperty := cfg.Require(\"property\")\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdocumentationPart, err := apigateway.NewDocumentationPart(ctx, \"documentationPart\", \u0026apigateway.DocumentationPartArgs{\n\t\t\tLocation: \u0026apigateway.DocumentationPartLocationArgs{\n\t\t\t\tType: apigateway.DocumentationPartLocationType(_type),\n\t\t\t},\n\t\t\tRestApiId:  restApi.ID(),\n\t\t\tProperties: pulumi.String(pulumi.String(property)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewDocumentationVersion(ctx, \"documentationVersion\", \u0026apigateway.DocumentationVersionArgs{\n\t\t\tDescription:          pulumi.String(pulumi.String(description)),\n\t\t\tDocumentationVersion: pulumi.String(pulumi.String(version)),\n\t\t\tRestApiId:            restApi.ID(),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tdocumentationPart,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst description = config.require(\"description\");\nconst version = config.require(\"version\");\nconst type = config.require(\"type\");\nconst property = config.require(\"property\");\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: apiName});\nconst documentationPart = new aws_native.apigateway.DocumentationPart(\"documentationPart\", {\n    location: {\n        type: aws_native.apigateway.DocumentationPartLocationType[type],\n    },\n    restApiId: restApi.id,\n    properties: property,\n});\nconst documentationVersion = new aws_native.apigateway.DocumentationVersion(\"documentationVersion\", {\n    description: description,\n    documentationVersion: version,\n    restApiId: restApi.id,\n}, {\n    dependsOn: [documentationPart],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\ndescription = config.require(\"description\")\nversion = config.require(\"version\")\ntype = config.require(\"type\")\nproperty = config.require(\"property\")\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=api_name)\ndocumentation_part = aws_native.apigateway.DocumentationPart(\"documentationPart\",\n    location={\n        \"type\": aws_native.apigateway.DocumentationPartLocationType(type),\n    },\n    rest_api_id=rest_api.id,\n    properties=property)\ndocumentation_version = aws_native.apigateway.DocumentationVersion(\"documentationVersion\",\n    description=description,\n    documentation_version=version,\n    rest_api_id=rest_api.id,\n    opts = pulumi.ResourceOptions(depends_on=[documentation_part]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var description = config.Require(\"description\");\n    var version = config.Require(\"version\");\n    var type = config.Require(\"type\");\n    var property = config.Require(\"property\");\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = apiName,\n    });\n\n    var documentationPart = new AwsNative.ApiGateway.DocumentationPart(\"documentationPart\", new()\n    {\n        Location = new AwsNative.ApiGateway.Inputs.DocumentationPartLocationArgs\n        {\n            Type = System.Enum.Parse\u003cAwsNative.ApiGateway.DocumentationPartLocationType\u003e(type),\n        },\n        RestApiId = restApi.Id,\n        Properties = property,\n    });\n\n    var documentationVersion = new AwsNative.ApiGateway.DocumentationVersion(\"documentationVersion\", new()\n    {\n        Description = description,\n        DocumentationVersionValue = version,\n        RestApiId = restApi.Id,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            documentationPart,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tdescription := cfg.Require(\"description\")\n\t\tversion := cfg.Require(\"version\")\n\t\t_type := cfg.Require(\"type\")\n\t\tproperty := cfg.Require(\"property\")\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdocumentationPart, err := apigateway.NewDocumentationPart(ctx, \"documentationPart\", \u0026apigateway.DocumentationPartArgs{\n\t\t\tLocation: \u0026apigateway.DocumentationPartLocationArgs{\n\t\t\t\tType: apigateway.DocumentationPartLocationType(_type),\n\t\t\t},\n\t\t\tRestApiId:  restApi.ID(),\n\t\t\tProperties: pulumi.String(pulumi.String(property)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewDocumentationVersion(ctx, \"documentationVersion\", \u0026apigateway.DocumentationVersionArgs{\n\t\t\tDescription:          pulumi.String(pulumi.String(description)),\n\t\t\tDocumentationVersion: pulumi.String(pulumi.String(version)),\n\t\t\tRestApiId:            restApi.ID(),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tdocumentationPart,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst description = config.require(\"description\");\nconst version = config.require(\"version\");\nconst type = config.require(\"type\");\nconst property = config.require(\"property\");\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: apiName});\nconst documentationPart = new aws_native.apigateway.DocumentationPart(\"documentationPart\", {\n    location: {\n        type: aws_native.apigateway.DocumentationPartLocationType[type],\n    },\n    restApiId: restApi.id,\n    properties: property,\n});\nconst documentationVersion = new aws_native.apigateway.DocumentationVersion(\"documentationVersion\", {\n    description: description,\n    documentationVersion: version,\n    restApiId: restApi.id,\n}, {\n    dependsOn: [documentationPart],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\ndescription = config.require(\"description\")\nversion = config.require(\"version\")\ntype = config.require(\"type\")\nproperty = config.require(\"property\")\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=api_name)\ndocumentation_part = aws_native.apigateway.DocumentationPart(\"documentationPart\",\n    location={\n        \"type\": aws_native.apigateway.DocumentationPartLocationType(type),\n    },\n    rest_api_id=rest_api.id,\n    properties=property)\ndocumentation_version = aws_native.apigateway.DocumentationVersion(\"documentationVersion\",\n    description=description,\n    documentation_version=version,\n    rest_api_id=rest_api.id,\n    opts = pulumi.ResourceOptions(depends_on=[documentation_part]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = \"myRestApi\",\n    });\n\n    var gatewayResponse = new AwsNative.ApiGateway.GatewayResponse(\"gatewayResponse\", new()\n    {\n        ResponseParameters = \n        {\n            { \"gatewayresponse.header.Access-Control-Allow-Origin\", \"'*'\" },\n            { \"gatewayresponse.header.Access-Control-Allow-Headers\", \"'*'\" },\n        },\n        ResponseType = \"MISSING_AUTHENTICATION_TOKEN\",\n        RestApiId = restApi.Id,\n        StatusCode = \"404\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(\"myRestApi\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewGatewayResponse(ctx, \"gatewayResponse\", \u0026apigateway.GatewayResponseArgs{\n\t\t\tResponseParameters: pulumi.StringMap{\n\t\t\t\t\"gatewayresponse.header.Access-Control-Allow-Origin\":  pulumi.String(\"'*'\"),\n\t\t\t\t\"gatewayresponse.header.Access-Control-Allow-Headers\": pulumi.String(\"'*'\"),\n\t\t\t},\n\t\t\tResponseType: pulumi.String(\"MISSING_AUTHENTICATION_TOKEN\"),\n\t\t\tRestApiId:    restApi.ID(),\n\t\t\tStatusCode:   pulumi.String(\"404\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: \"myRestApi\"});\nconst gatewayResponse = new aws_native.apigateway.GatewayResponse(\"gatewayResponse\", {\n    responseParameters: {\n        \"gatewayresponse.header.Access-Control-Allow-Origin\": \"'*'\",\n        \"gatewayresponse.header.Access-Control-Allow-Headers\": \"'*'\",\n    },\n    responseType: \"MISSING_AUTHENTICATION_TOKEN\",\n    restApiId: restApi.id,\n    statusCode: \"404\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=\"myRestApi\")\ngateway_response = aws_native.apigateway.GatewayResponse(\"gatewayResponse\",\n    response_parameters={\n        \"gatewayresponse.header.Access-Control-Allow-Origin\": \"'*'\",\n        \"gatewayresponse.header.Access-Control-Allow-Headers\": \"'*'\",\n    },\n    response_type=\"MISSING_AUTHENTICATION_TOKEN\",\n    rest_api_id=rest_api.id,\n    status_code=\"404\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = \"myRestApi\",\n    });\n\n    var gatewayResponse = new AwsNative.ApiGateway.GatewayResponse(\"gatewayResponse\", new()\n    {\n        ResponseParameters = \n        {\n            { \"gatewayresponse.header.Access-Control-Allow-Origin\", \"'*'\" },\n            { \"gatewayresponse.header.Access-Control-Allow-Headers\", \"'*'\" },\n        },\n        ResponseType = \"MISSING_AUTHENTICATION_TOKEN\",\n        RestApiId = restApi.Id,\n        StatusCode = \"404\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(\"myRestApi\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewGatewayResponse(ctx, \"gatewayResponse\", \u0026apigateway.GatewayResponseArgs{\n\t\t\tResponseParameters: pulumi.StringMap{\n\t\t\t\t\"gatewayresponse.header.Access-Control-Allow-Origin\":  pulumi.String(\"'*'\"),\n\t\t\t\t\"gatewayresponse.header.Access-Control-Allow-Headers\": pulumi.String(\"'*'\"),\n\t\t\t},\n\t\t\tResponseType: pulumi.String(\"MISSING_AUTHENTICATION_TOKEN\"),\n\t\t\tRestApiId:    restApi.ID(),\n\t\t\tStatusCode:   pulumi.String(\"404\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: \"myRestApi\"});\nconst gatewayResponse = new aws_native.apigateway.GatewayResponse(\"gatewayResponse\", {\n    responseParameters: {\n        \"gatewayresponse.header.Access-Control-Allow-Origin\": \"'*'\",\n        \"gatewayresponse.header.Access-Control-Allow-Headers\": \"'*'\",\n    },\n    responseType: \"MISSING_AUTHENTICATION_TOKEN\",\n    restApiId: restApi.id,\n    statusCode: \"404\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=\"myRestApi\")\ngateway_response = aws_native.apigateway.GatewayResponse(\"gatewayResponse\",\n    response_parameters={\n        \"gatewayresponse.header.Access-Control-Allow-Origin\": \"'*'\",\n        \"gatewayresponse.header.Access-Control-Allow-Headers\": \"'*'\",\n    },\n    response_type=\"MISSING_AUTHENTICATION_TOKEN\",\n    rest_api_id=rest_api.id,\n    status_code=\"404\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var responseParameter1 = config.Require(\"responseParameter1\");\n    var responseParameter2 = config.Require(\"responseParameter2\");\n    var responseType = config.Require(\"responseType\");\n    var statusCode = config.Require(\"statusCode\");\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = apiName,\n    });\n\n    var gatewayResponse = new AwsNative.ApiGateway.GatewayResponse(\"gatewayResponse\", new()\n    {\n        ResponseParameters = \n        {\n            { \"gatewayresponse.header.k1\", responseParameter1 },\n            { \"gatewayresponse.header.k2\", responseParameter2 },\n        },\n        ResponseType = responseType,\n        RestApiId = restApi.Id,\n        StatusCode = statusCode,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tresponseParameter1 := cfg.Require(\"responseParameter1\")\n\t\tresponseParameter2 := cfg.Require(\"responseParameter2\")\n\t\tresponseType := cfg.Require(\"responseType\")\n\t\tstatusCode := cfg.Require(\"statusCode\")\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewGatewayResponse(ctx, \"gatewayResponse\", \u0026apigateway.GatewayResponseArgs{\n\t\t\tResponseParameters: pulumi.StringMap{\n\t\t\t\t\"gatewayresponse.header.k1\": pulumi.String(pulumi.String(responseParameter1)),\n\t\t\t\t\"gatewayresponse.header.k2\": pulumi.String(pulumi.String(responseParameter2)),\n\t\t\t},\n\t\t\tResponseType: pulumi.String(pulumi.String(responseType)),\n\t\t\tRestApiId:    restApi.ID(),\n\t\t\tStatusCode:   pulumi.String(pulumi.String(statusCode)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst responseParameter1 = config.require(\"responseParameter1\");\nconst responseParameter2 = config.require(\"responseParameter2\");\nconst responseType = config.require(\"responseType\");\nconst statusCode = config.require(\"statusCode\");\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: apiName});\nconst gatewayResponse = new aws_native.apigateway.GatewayResponse(\"gatewayResponse\", {\n    responseParameters: {\n        \"gatewayresponse.header.k1\": responseParameter1,\n        \"gatewayresponse.header.k2\": responseParameter2,\n    },\n    responseType: responseType,\n    restApiId: restApi.id,\n    statusCode: statusCode,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\nresponse_parameter1 = config.require(\"responseParameter1\")\nresponse_parameter2 = config.require(\"responseParameter2\")\nresponse_type = config.require(\"responseType\")\nstatus_code = config.require(\"statusCode\")\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=api_name)\ngateway_response = aws_native.apigateway.GatewayResponse(\"gatewayResponse\",\n    response_parameters={\n        \"gatewayresponse.header.k1\": response_parameter1,\n        \"gatewayresponse.header.k2\": response_parameter2,\n    },\n    response_type=response_type,\n    rest_api_id=rest_api.id,\n    status_code=status_code)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var responseParameter1 = config.Require(\"responseParameter1\");\n    var responseParameter2 = config.Require(\"responseParameter2\");\n    var responseType = config.Require(\"responseType\");\n    var statusCode = config.Require(\"statusCode\");\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = apiName,\n    });\n\n    var gatewayResponse = new AwsNative.ApiGateway.GatewayResponse(\"gatewayResponse\", new()\n    {\n        ResponseParameters = \n        {\n            { \"gatewayresponse.header.k1\", responseParameter1 },\n            { \"gatewayresponse.header.k2\", responseParameter2 },\n        },\n        ResponseType = responseType,\n        RestApiId = restApi.Id,\n        StatusCode = statusCode,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tresponseParameter1 := cfg.Require(\"responseParameter1\")\n\t\tresponseParameter2 := cfg.Require(\"responseParameter2\")\n\t\tresponseType := cfg.Require(\"responseType\")\n\t\tstatusCode := cfg.Require(\"statusCode\")\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewGatewayResponse(ctx, \"gatewayResponse\", \u0026apigateway.GatewayResponseArgs{\n\t\t\tResponseParameters: pulumi.StringMap{\n\t\t\t\t\"gatewayresponse.header.k1\": pulumi.String(pulumi.String(responseParameter1)),\n\t\t\t\t\"gatewayresponse.header.k2\": pulumi.String(pulumi.String(responseParameter2)),\n\t\t\t},\n\t\t\tResponseType: pulumi.String(pulumi.String(responseType)),\n\t\t\tRestApiId:    restApi.ID(),\n\t\t\tStatusCode:   pulumi.String(pulumi.String(statusCode)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst responseParameter1 = config.require(\"responseParameter1\");\nconst responseParameter2 = config.require(\"responseParameter2\");\nconst responseType = config.require(\"responseType\");\nconst statusCode = config.require(\"statusCode\");\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: apiName});\nconst gatewayResponse = new aws_native.apigateway.GatewayResponse(\"gatewayResponse\", {\n    responseParameters: {\n        \"gatewayresponse.header.k1\": responseParameter1,\n        \"gatewayresponse.header.k2\": responseParameter2,\n    },\n    responseType: responseType,\n    restApiId: restApi.id,\n    statusCode: statusCode,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\nresponse_parameter1 = config.require(\"responseParameter1\")\nresponse_parameter2 = config.require(\"responseParameter2\")\nresponse_type = config.require(\"responseType\")\nstatus_code = config.require(\"statusCode\")\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=api_name)\ngateway_response = aws_native.apigateway.GatewayResponse(\"gatewayResponse\",\n    response_parameters={\n        \"gatewayresponse.header.k1\": response_parameter1,\n        \"gatewayresponse.header.k2\": response_parameter2,\n    },\n    response_type=response_type,\n    rest_api_id=rest_api.id,\n    status_code=status_code)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var contentHandling = config.Require(\"contentHandling\");\n    var operationName = config.Get(\"operationName\") ?? \"testoperationName\";\n    var restApiName = config.Get(\"restApiName\") ?? \"testrestApiName\";\n    var validatorName = config.Get(\"validatorName\") ?? \"testvalidatorName\";\n    var validateRequestBody = config.Get(\"validateRequestBody\") ?? \"testvalidateRequestBody\";\n    var validateRequestParameters = config.Get(\"validateRequestParameters\") ?? true;\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = restApiName,\n    });\n\n    var requestValidator = new AwsNative.ApiGateway.RequestValidator(\"requestValidator\", new()\n    {\n        Name = validatorName,\n        RestApiId = restApi.Id,\n        ValidateRequestBody = validateRequestBody,\n        ValidateRequestParameters = validateRequestParameters,\n    });\n\n    var method = new AwsNative.ApiGateway.Method(\"method\", new()\n    {\n        HttpMethod = \"POST\",\n        ResourceId = restApi.RootResourceId,\n        RestApiId = restApi.Id,\n        AuthorizationType = \"NONE\",\n        Integration = new AwsNative.ApiGateway.Inputs.MethodIntegrationArgs\n        {\n            Type = AwsNative.ApiGateway.MethodIntegrationType.Mock,\n            ContentHandling = System.Enum.Parse\u003cAwsNative.ApiGateway.MethodIntegrationContentHandling\u003e(contentHandling),\n            IntegrationResponses = new[]\n            {\n                new AwsNative.ApiGateway.Inputs.MethodIntegrationResponseArgs\n                {\n                    ContentHandling = System.Enum.Parse\u003cAwsNative.ApiGateway.MethodIntegrationResponseContentHandling\u003e(contentHandling),\n                    StatusCode = \"400\",\n                },\n            },\n        },\n        RequestValidatorId = requestValidator.Id,\n        OperationName = operationName,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"rootResourceId\"] = restApi.RootResourceId,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tcontentHandling := cfg.Require(\"contentHandling\")\n\t\toperationName := \"testoperationName\"\n\t\tif param := cfg.Get(\"operationName\"); param != \"\" {\n\t\t\toperationName = param\n\t\t}\n\t\trestApiName := \"testrestApiName\"\n\t\tif param := cfg.Get(\"restApiName\"); param != \"\" {\n\t\t\trestApiName = param\n\t\t}\n\t\tvalidatorName := \"testvalidatorName\"\n\t\tif param := cfg.Get(\"validatorName\"); param != \"\" {\n\t\t\tvalidatorName = param\n\t\t}\n\t\tvalidateRequestBody := \"testvalidateRequestBody\"\n\t\tif param := cfg.Get(\"validateRequestBody\"); param != \"\" {\n\t\t\tvalidateRequestBody = param\n\t\t}\n\t\tvalidateRequestParameters := true\n\t\tif param := cfg.Get(\"validateRequestParameters\"); param != \"\" {\n\t\t\tvalidateRequestParameters = param\n\t\t}\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(restApiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\trequestValidator, err := apigateway.NewRequestValidator(ctx, \"requestValidator\", \u0026apigateway.RequestValidatorArgs{\n\t\t\tName:                      pulumi.String(pulumi.String(validatorName)),\n\t\t\tRestApiId:                 restApi.ID(),\n\t\t\tValidateRequestBody:       pulumi.String(validateRequestBody),\n\t\t\tValidateRequestParameters: pulumi.String(validateRequestParameters),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewMethod(ctx, \"method\", \u0026apigateway.MethodArgs{\n\t\t\tHttpMethod:        pulumi.String(\"POST\"),\n\t\t\tResourceId:        restApi.RootResourceId,\n\t\t\tRestApiId:         restApi.ID(),\n\t\t\tAuthorizationType: pulumi.String(\"NONE\"),\n\t\t\tIntegration: \u0026apigateway.MethodIntegrationArgs{\n\t\t\t\tType:            apigateway.MethodIntegrationTypeMock,\n\t\t\t\tContentHandling: apigateway.MethodIntegrationContentHandling(contentHandling),\n\t\t\t\tIntegrationResponses: apigateway.MethodIntegrationResponseArray{\n\t\t\t\t\t\u0026apigateway.MethodIntegrationResponseArgs{\n\t\t\t\t\t\tContentHandling: apigateway.MethodIntegrationResponseContentHandling(contentHandling),\n\t\t\t\t\t\tStatusCode:      pulumi.String(\"400\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tRequestValidatorId: requestValidator.ID(),\n\t\t\tOperationName:      pulumi.String(pulumi.String(operationName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"rootResourceId\", restApi.RootResourceId)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst contentHandling = config.require(\"contentHandling\");\nconst operationName = config.get(\"operationName\") || \"testoperationName\";\nconst restApiName = config.get(\"restApiName\") || \"testrestApiName\";\nconst validatorName = config.get(\"validatorName\") || \"testvalidatorName\";\nconst validateRequestBody = config.get(\"validateRequestBody\") || \"testvalidateRequestBody\";\nconst validateRequestParameters = config.get(\"validateRequestParameters\") || true;\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: restApiName});\nconst requestValidator = new aws_native.apigateway.RequestValidator(\"requestValidator\", {\n    name: validatorName,\n    restApiId: restApi.id,\n    validateRequestBody: validateRequestBody,\n    validateRequestParameters: validateRequestParameters,\n});\nconst method = new aws_native.apigateway.Method(\"method\", {\n    httpMethod: \"POST\",\n    resourceId: restApi.rootResourceId,\n    restApiId: restApi.id,\n    authorizationType: \"NONE\",\n    integration: {\n        type: aws_native.apigateway.MethodIntegrationType.Mock,\n        contentHandling: aws_native.apigateway.MethodIntegrationContentHandling[contentHandling],\n        integrationResponses: [{\n            contentHandling: aws_native.apigateway.MethodIntegrationResponseContentHandling[contentHandling],\n            statusCode: \"400\",\n        }],\n    },\n    requestValidatorId: requestValidator.id,\n    operationName: operationName,\n});\nexport const rootResourceId = restApi.rootResourceId;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ncontent_handling = config.require(\"contentHandling\")\noperation_name = config.get(\"operationName\")\nif operation_name is None:\n    operation_name = \"testoperationName\"\nrest_api_name = config.get(\"restApiName\")\nif rest_api_name is None:\n    rest_api_name = \"testrestApiName\"\nvalidator_name = config.get(\"validatorName\")\nif validator_name is None:\n    validator_name = \"testvalidatorName\"\nvalidate_request_body = config.get(\"validateRequestBody\")\nif validate_request_body is None:\n    validate_request_body = \"testvalidateRequestBody\"\nvalidate_request_parameters = config.get(\"validateRequestParameters\")\nif validate_request_parameters is None:\n    validate_request_parameters = True\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=rest_api_name)\nrequest_validator = aws_native.apigateway.RequestValidator(\"requestValidator\",\n    name=validator_name,\n    rest_api_id=rest_api.id,\n    validate_request_body=validate_request_body,\n    validate_request_parameters=validate_request_parameters)\nmethod = aws_native.apigateway.Method(\"method\",\n    http_method=\"POST\",\n    resource_id=rest_api.root_resource_id,\n    rest_api_id=rest_api.id,\n    authorization_type=\"NONE\",\n    integration={\n        \"type\": aws_native.apigateway.MethodIntegrationType.MOCK,\n        \"content_handling\": aws_native.apigateway.MethodIntegrationContentHandling(content_handling),\n        \"integration_responses\": [{\n            \"content_handling\": aws_native.apigateway.MethodIntegrationResponseContentHandling(content_handling),\n            \"status_code\": \"400\",\n        }],\n    },\n    request_validator_id=request_validator.id,\n    operation_name=operation_name)\npulumi.export(\"rootResourceId\", rest_api.root_resource_id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var contentHandling = config.Require(\"contentHandling\");\n    var operationName = config.Get(\"operationName\") ?? \"testoperationName\";\n    var restApiName = config.Get(\"restApiName\") ?? \"testrestApiName\";\n    var validatorName = config.Get(\"validatorName\") ?? \"testvalidatorName\";\n    var validateRequestBody = config.Get(\"validateRequestBody\") ?? \"testvalidateRequestBody\";\n    var validateRequestParameters = config.Get(\"validateRequestParameters\") ?? true;\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = restApiName,\n    });\n\n    var requestValidator = new AwsNative.ApiGateway.RequestValidator(\"requestValidator\", new()\n    {\n        Name = validatorName,\n        RestApiId = restApi.Id,\n        ValidateRequestBody = validateRequestBody,\n        ValidateRequestParameters = validateRequestParameters,\n    });\n\n    var method = new AwsNative.ApiGateway.Method(\"method\", new()\n    {\n        HttpMethod = \"POST\",\n        ResourceId = restApi.RootResourceId,\n        RestApiId = restApi.Id,\n        AuthorizationType = \"NONE\",\n        Integration = new AwsNative.ApiGateway.Inputs.MethodIntegrationArgs\n        {\n            Type = AwsNative.ApiGateway.MethodIntegrationType.Mock,\n            ContentHandling = System.Enum.Parse\u003cAwsNative.ApiGateway.MethodIntegrationContentHandling\u003e(contentHandling),\n            IntegrationResponses = new[]\n            {\n                new AwsNative.ApiGateway.Inputs.MethodIntegrationResponseArgs\n                {\n                    ContentHandling = System.Enum.Parse\u003cAwsNative.ApiGateway.MethodIntegrationResponseContentHandling\u003e(contentHandling),\n                    StatusCode = \"400\",\n                },\n            },\n        },\n        RequestValidatorId = requestValidator.Id,\n        OperationName = operationName,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"rootResourceId\"] = restApi.RootResourceId,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tcontentHandling := cfg.Require(\"contentHandling\")\n\t\toperationName := \"testoperationName\"\n\t\tif param := cfg.Get(\"operationName\"); param != \"\" {\n\t\t\toperationName = param\n\t\t}\n\t\trestApiName := \"testrestApiName\"\n\t\tif param := cfg.Get(\"restApiName\"); param != \"\" {\n\t\t\trestApiName = param\n\t\t}\n\t\tvalidatorName := \"testvalidatorName\"\n\t\tif param := cfg.Get(\"validatorName\"); param != \"\" {\n\t\t\tvalidatorName = param\n\t\t}\n\t\tvalidateRequestBody := \"testvalidateRequestBody\"\n\t\tif param := cfg.Get(\"validateRequestBody\"); param != \"\" {\n\t\t\tvalidateRequestBody = param\n\t\t}\n\t\tvalidateRequestParameters := true\n\t\tif param := cfg.Get(\"validateRequestParameters\"); param != \"\" {\n\t\t\tvalidateRequestParameters = param\n\t\t}\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(restApiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\trequestValidator, err := apigateway.NewRequestValidator(ctx, \"requestValidator\", \u0026apigateway.RequestValidatorArgs{\n\t\t\tName:                      pulumi.String(pulumi.String(validatorName)),\n\t\t\tRestApiId:                 restApi.ID(),\n\t\t\tValidateRequestBody:       pulumi.String(validateRequestBody),\n\t\t\tValidateRequestParameters: pulumi.String(validateRequestParameters),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewMethod(ctx, \"method\", \u0026apigateway.MethodArgs{\n\t\t\tHttpMethod:        pulumi.String(\"POST\"),\n\t\t\tResourceId:        restApi.RootResourceId,\n\t\t\tRestApiId:         restApi.ID(),\n\t\t\tAuthorizationType: pulumi.String(\"NONE\"),\n\t\t\tIntegration: \u0026apigateway.MethodIntegrationArgs{\n\t\t\t\tType:            apigateway.MethodIntegrationTypeMock,\n\t\t\t\tContentHandling: apigateway.MethodIntegrationContentHandling(contentHandling),\n\t\t\t\tIntegrationResponses: apigateway.MethodIntegrationResponseArray{\n\t\t\t\t\t\u0026apigateway.MethodIntegrationResponseArgs{\n\t\t\t\t\t\tContentHandling: apigateway.MethodIntegrationResponseContentHandling(contentHandling),\n\t\t\t\t\t\tStatusCode:      pulumi.String(\"400\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tRequestValidatorId: requestValidator.ID(),\n\t\t\tOperationName:      pulumi.String(pulumi.String(operationName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"rootResourceId\", restApi.RootResourceId)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst contentHandling = config.require(\"contentHandling\");\nconst operationName = config.get(\"operationName\") || \"testoperationName\";\nconst restApiName = config.get(\"restApiName\") || \"testrestApiName\";\nconst validatorName = config.get(\"validatorName\") || \"testvalidatorName\";\nconst validateRequestBody = config.get(\"validateRequestBody\") || \"testvalidateRequestBody\";\nconst validateRequestParameters = config.get(\"validateRequestParameters\") || true;\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: restApiName});\nconst requestValidator = new aws_native.apigateway.RequestValidator(\"requestValidator\", {\n    name: validatorName,\n    restApiId: restApi.id,\n    validateRequestBody: validateRequestBody,\n    validateRequestParameters: validateRequestParameters,\n});\nconst method = new aws_native.apigateway.Method(\"method\", {\n    httpMethod: \"POST\",\n    resourceId: restApi.rootResourceId,\n    restApiId: restApi.id,\n    authorizationType: \"NONE\",\n    integration: {\n        type: aws_native.apigateway.MethodIntegrationType.Mock,\n        contentHandling: aws_native.apigateway.MethodIntegrationContentHandling[contentHandling],\n        integrationResponses: [{\n            contentHandling: aws_native.apigateway.MethodIntegrationResponseContentHandling[contentHandling],\n            statusCode: \"400\",\n        }],\n    },\n    requestValidatorId: requestValidator.id,\n    operationName: operationName,\n});\nexport const rootResourceId = restApi.rootResourceId;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ncontent_handling = config.require(\"contentHandling\")\noperation_name = config.get(\"operationName\")\nif operation_name is None:\n    operation_name = \"testoperationName\"\nrest_api_name = config.get(\"restApiName\")\nif rest_api_name is None:\n    rest_api_name = \"testrestApiName\"\nvalidator_name = config.get(\"validatorName\")\nif validator_name is None:\n    validator_name = \"testvalidatorName\"\nvalidate_request_body = config.get(\"validateRequestBody\")\nif validate_request_body is None:\n    validate_request_body = \"testvalidateRequestBody\"\nvalidate_request_parameters = config.get(\"validateRequestParameters\")\nif validate_request_parameters is None:\n    validate_request_parameters = True\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=rest_api_name)\nrequest_validator = aws_native.apigateway.RequestValidator(\"requestValidator\",\n    name=validator_name,\n    rest_api_id=rest_api.id,\n    validate_request_body=validate_request_body,\n    validate_request_parameters=validate_request_parameters)\nmethod = aws_native.apigateway.Method(\"method\",\n    http_method=\"POST\",\n    resource_id=rest_api.root_resource_id,\n    rest_api_id=rest_api.id,\n    authorization_type=\"NONE\",\n    integration={\n        \"type\": aws_native.apigateway.MethodIntegrationType.MOCK,\n        \"content_handling\": aws_native.apigateway.MethodIntegrationContentHandling(content_handling),\n        \"integration_responses\": [{\n            \"content_handling\": aws_native.apigateway.MethodIntegrationResponseContentHandling(content_handling),\n            \"status_code\": \"400\",\n        }],\n    },\n    request_validator_id=request_validator.id,\n    operation_name=operation_name)\npulumi.export(\"rootResourceId\", rest_api.root_resource_id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var validatorName = config.Require(\"validatorName\");\n    var validateRequestBody = config.Require(\"validateRequestBody\");\n    var validateRequestParameters = config.Require(\"validateRequestParameters\");\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = apiName,\n    });\n\n    var requestValidator = new AwsNative.ApiGateway.RequestValidator(\"requestValidator\", new()\n    {\n        Name = validatorName,\n        RestApiId = restApi.Id,\n        ValidateRequestBody = validateRequestBody,\n        ValidateRequestParameters = validateRequestParameters,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tvalidatorName := cfg.Require(\"validatorName\")\n\t\tvalidateRequestBody := cfg.Require(\"validateRequestBody\")\n\t\tvalidateRequestParameters := cfg.Require(\"validateRequestParameters\")\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewRequestValidator(ctx, \"requestValidator\", \u0026apigateway.RequestValidatorArgs{\n\t\t\tName:                      pulumi.String(pulumi.String(validatorName)),\n\t\t\tRestApiId:                 restApi.ID(),\n\t\t\tValidateRequestBody:       pulumi.String(validateRequestBody),\n\t\t\tValidateRequestParameters: pulumi.String(validateRequestParameters),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst validatorName = config.require(\"validatorName\");\nconst validateRequestBody = config.require(\"validateRequestBody\");\nconst validateRequestParameters = config.require(\"validateRequestParameters\");\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: apiName});\nconst requestValidator = new aws_native.apigateway.RequestValidator(\"requestValidator\", {\n    name: validatorName,\n    restApiId: restApi.id,\n    validateRequestBody: validateRequestBody,\n    validateRequestParameters: validateRequestParameters,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\nvalidator_name = config.require(\"validatorName\")\nvalidate_request_body = config.require(\"validateRequestBody\")\nvalidate_request_parameters = config.require(\"validateRequestParameters\")\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=api_name)\nrequest_validator = aws_native.apigateway.RequestValidator(\"requestValidator\",\n    name=validator_name,\n    rest_api_id=rest_api.id,\n    validate_request_body=validate_request_body,\n    validate_request_parameters=validate_request_parameters)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var validatorName = config.Require(\"validatorName\");\n    var validateRequestBody = config.Require(\"validateRequestBody\");\n    var validateRequestParameters = config.Require(\"validateRequestParameters\");\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Name = apiName,\n    });\n\n    var requestValidator = new AwsNative.ApiGateway.RequestValidator(\"requestValidator\", new()\n    {\n        Name = validatorName,\n        RestApiId = restApi.Id,\n        ValidateRequestBody = validateRequestBody,\n        ValidateRequestParameters = validateRequestParameters,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tvalidatorName := cfg.Require(\"validatorName\")\n\t\tvalidateRequestBody := cfg.Require(\"validateRequestBody\")\n\t\tvalidateRequestParameters := cfg.Require(\"validateRequestParameters\")\n\t\trestApi, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = apigateway.NewRequestValidator(ctx, \"requestValidator\", \u0026apigateway.RequestValidatorArgs{\n\t\t\tName:                      pulumi.String(pulumi.String(validatorName)),\n\t\t\tRestApiId:                 restApi.ID(),\n\t\t\tValidateRequestBody:       pulumi.String(validateRequestBody),\n\t\t\tValidateRequestParameters: pulumi.String(validateRequestParameters),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst validatorName = config.require(\"validatorName\");\nconst validateRequestBody = config.require(\"validateRequestBody\");\nconst validateRequestParameters = config.require(\"validateRequestParameters\");\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {name: apiName});\nconst requestValidator = new aws_native.apigateway.RequestValidator(\"requestValidator\", {\n    name: validatorName,\n    restApiId: restApi.id,\n    validateRequestBody: validateRequestBody,\n    validateRequestParameters: validateRequestParameters,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\nvalidator_name = config.require(\"validatorName\")\nvalidate_request_body = config.require(\"validateRequestBody\")\nvalidate_request_parameters = config.require(\"validateRequestParameters\")\nrest_api = aws_native.apigateway.RestApi(\"restApi\", name=api_name)\nrequest_validator = aws_native.apigateway.RequestValidator(\"requestValidator\",\n    name=validator_name,\n    rest_api_id=rest_api.id,\n    validate_request_body=validate_request_body,\n    validate_request_parameters=validate_request_parameters)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var type = config.Require(\"type\");\n    var myRestApi = new AwsNative.ApiGateway.RestApi(\"myRestApi\", new()\n    {\n        EndpointConfiguration = new AwsNative.ApiGateway.Inputs.RestApiEndpointConfigurationArgs\n        {\n            Types = new[]\n            {\n                type,\n            },\n        },\n        Name = apiName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\t_type := cfg.Require(\"type\")\n\t\t_, err := apigateway.NewRestApi(ctx, \"myRestApi\", \u0026apigateway.RestApiArgs{\n\t\t\tEndpointConfiguration: \u0026apigateway.RestApiEndpointConfigurationArgs{\n\t\t\t\tTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(pulumi.String(_type)),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst type = config.require(\"type\");\nconst myRestApi = new aws_native.apigateway.RestApi(\"myRestApi\", {\n    endpointConfiguration: {\n        types: [type],\n    },\n    name: apiName,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\ntype = config.require(\"type\")\nmy_rest_api = aws_native.apigateway.RestApi(\"myRestApi\",\n    endpoint_configuration={\n        \"types\": [type],\n    },\n    name=api_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiName = config.Require(\"apiName\");\n    var type = config.Require(\"type\");\n    var myRestApi = new AwsNative.ApiGateway.RestApi(\"myRestApi\", new()\n    {\n        EndpointConfiguration = new AwsNative.ApiGateway.Inputs.RestApiEndpointConfigurationArgs\n        {\n            Types = new[]\n            {\n                type,\n            },\n        },\n        Name = apiName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\t_type := cfg.Require(\"type\")\n\t\t_, err := apigateway.NewRestApi(ctx, \"myRestApi\", \u0026apigateway.RestApiArgs{\n\t\t\tEndpointConfiguration: \u0026apigateway.RestApiEndpointConfigurationArgs{\n\t\t\t\tTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(pulumi.String(_type)),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName: pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiName = config.require(\"apiName\");\nconst type = config.require(\"type\");\nconst myRestApi = new aws_native.apigateway.RestApi(\"myRestApi\", {\n    endpointConfiguration: {\n        types: [type],\n    },\n    name: apiName,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_name = config.require(\"apiName\")\ntype = config.require(\"type\")\nmy_rest_api = aws_native.apigateway.RestApi(\"myRestApi\",\n    endpoint_configuration={\n        \"types\": [type],\n    },\n    name=api_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Body = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"swagger\"] = 2,\n            [\"info\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"version\"] = \"0.0.1\",\n                [\"title\"] = \"test\",\n            },\n            [\"basePath\"] = \"/pete\",\n            [\"schemes\"] = new[]\n            {\n                \"https\",\n            },\n            [\"definitions\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"empty\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"type\"] = \"object\",\n                },\n            },\n        },\n        Name = \"myApi\",\n        Parameters = \n        {\n            { \"endpointConfigurationTypes\", \"REGIONAL\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tBody: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"swagger\": 2,\n\t\t\t\t\"info\": map[string]interface{}{\n\t\t\t\t\t\"version\": \"0.0.1\",\n\t\t\t\t\t\"title\":   \"test\",\n\t\t\t\t},\n\t\t\t\t\"basePath\": \"/pete\",\n\t\t\t\t\"schemes\": []string{\n\t\t\t\t\t\"https\",\n\t\t\t\t},\n\t\t\t\t\"definitions\": map[string]interface{}{\n\t\t\t\t\t\"empty\": map[string]interface{}{\n\t\t\t\t\t\t\"type\": \"object\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tName: pulumi.String(\"myApi\"),\n\t\t\tParameters: pulumi.StringMap{\n\t\t\t\t\"endpointConfigurationTypes\": pulumi.String(\"REGIONAL\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {\n    body: {\n        swagger: 2,\n        info: {\n            version: \"0.0.1\",\n            title: \"test\",\n        },\n        basePath: \"/pete\",\n        schemes: [\"https\"],\n        definitions: {\n            empty: {\n                type: \"object\",\n            },\n        },\n    },\n    name: \"myApi\",\n    parameters: {\n        endpointConfigurationTypes: \"REGIONAL\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nrest_api = aws_native.apigateway.RestApi(\"restApi\",\n    body={\n        \"swagger\": 2,\n        \"info\": {\n            \"version\": \"0.0.1\",\n            \"title\": \"test\",\n        },\n        \"basePath\": \"/pete\",\n        \"schemes\": [\"https\"],\n        \"definitions\": {\n            \"empty\": {\n                \"type\": \"object\",\n            },\n        },\n    },\n    name=\"myApi\",\n    parameters={\n        \"endpointConfigurationTypes\": \"REGIONAL\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var restApi = new AwsNative.ApiGateway.RestApi(\"restApi\", new()\n    {\n        Body = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"swagger\"] = 2,\n            [\"info\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"version\"] = \"0.0.1\",\n                [\"title\"] = \"test\",\n            },\n            [\"basePath\"] = \"/pete\",\n            [\"schemes\"] = new[]\n            {\n                \"https\",\n            },\n            [\"definitions\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"empty\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"type\"] = \"object\",\n                },\n            },\n        },\n        Name = \"myApi\",\n        Parameters = \n        {\n            { \"endpointConfigurationTypes\", \"REGIONAL\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := apigateway.NewRestApi(ctx, \"restApi\", \u0026apigateway.RestApiArgs{\n\t\t\tBody: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"swagger\": 2,\n\t\t\t\t\"info\": map[string]interface{}{\n\t\t\t\t\t\"version\": \"0.0.1\",\n\t\t\t\t\t\"title\":   \"test\",\n\t\t\t\t},\n\t\t\t\t\"basePath\": \"/pete\",\n\t\t\t\t\"schemes\": []string{\n\t\t\t\t\t\"https\",\n\t\t\t\t},\n\t\t\t\t\"definitions\": map[string]interface{}{\n\t\t\t\t\t\"empty\": map[string]interface{}{\n\t\t\t\t\t\t\"type\": \"object\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tName: pulumi.String(\"myApi\"),\n\t\t\tParameters: pulumi.StringMap{\n\t\t\t\t\"endpointConfigurationTypes\": pulumi.String(\"REGIONAL\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst restApi = new aws_native.apigateway.RestApi(\"restApi\", {\n    body: {\n        swagger: 2,\n        info: {\n            version: \"0.0.1\",\n            title: \"test\",\n        },\n        basePath: \"/pete\",\n        schemes: [\"https\"],\n        definitions: {\n            empty: {\n                type: \"object\",\n            },\n        },\n    },\n    name: \"myApi\",\n    parameters: {\n        endpointConfigurationTypes: \"REGIONAL\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nrest_api = aws_native.apigateway.RestApi(\"restApi\",\n    body={\n        \"swagger\": 2,\n        \"info\": {\n            \"version\": \"0.0.1\",\n            \"title\": \"test\",\n        },\n        \"basePath\": \"/pete\",\n        \"schemes\": [\"https\"],\n        \"definitions\": {\n            \"empty\": {\n                \"type\": \"object\",\n            },\n        },\n    },\n    name=\"myApi\",\n    parameters={\n        \"endpointConfigurationTypes\": \"REGIONAL\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiKeySourceType = config.Require(\"apiKeySourceType\");\n    var apiName = config.Require(\"apiName\");\n    var binaryMediaType1 = config.Require(\"binaryMediaType1\");\n    var binaryMediaType2 = config.Require(\"binaryMediaType2\");\n    var minimumCompressionSize = config.Require(\"minimumCompressionSize\");\n    var myRestApi = new AwsNative.ApiGateway.RestApi(\"myRestApi\", new()\n    {\n        ApiKeySourceType = apiKeySourceType,\n        BinaryMediaTypes = new[]\n        {\n            binaryMediaType1,\n            binaryMediaType2,\n        },\n        MinimumCompressionSize = minimumCompressionSize,\n        Name = apiName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiKeySourceType := cfg.Require(\"apiKeySourceType\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tbinaryMediaType1 := cfg.Require(\"binaryMediaType1\")\n\t\tbinaryMediaType2 := cfg.Require(\"binaryMediaType2\")\n\t\tminimumCompressionSize := cfg.Require(\"minimumCompressionSize\")\n\t\t_, err := apigateway.NewRestApi(ctx, \"myRestApi\", \u0026apigateway.RestApiArgs{\n\t\t\tApiKeySourceType: pulumi.String(pulumi.String(apiKeySourceType)),\n\t\t\tBinaryMediaTypes: pulumi.StringArray{\n\t\t\t\tpulumi.String(pulumi.String(binaryMediaType1)),\n\t\t\t\tpulumi.String(pulumi.String(binaryMediaType2)),\n\t\t\t},\n\t\t\tMinimumCompressionSize: pulumi.String(minimumCompressionSize),\n\t\t\tName:                   pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiKeySourceType = config.require(\"apiKeySourceType\");\nconst apiName = config.require(\"apiName\");\nconst binaryMediaType1 = config.require(\"binaryMediaType1\");\nconst binaryMediaType2 = config.require(\"binaryMediaType2\");\nconst minimumCompressionSize = config.require(\"minimumCompressionSize\");\nconst myRestApi = new aws_native.apigateway.RestApi(\"myRestApi\", {\n    apiKeySourceType: apiKeySourceType,\n    binaryMediaTypes: [\n        binaryMediaType1,\n        binaryMediaType2,\n    ],\n    minimumCompressionSize: minimumCompressionSize,\n    name: apiName,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_key_source_type = config.require(\"apiKeySourceType\")\napi_name = config.require(\"apiName\")\nbinary_media_type1 = config.require(\"binaryMediaType1\")\nbinary_media_type2 = config.require(\"binaryMediaType2\")\nminimum_compression_size = config.require(\"minimumCompressionSize\")\nmy_rest_api = aws_native.apigateway.RestApi(\"myRestApi\",\n    api_key_source_type=api_key_source_type,\n    binary_media_types=[\n        binary_media_type1,\n        binary_media_type2,\n    ],\n    minimum_compression_size=minimum_compression_size,\n    name=api_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var apiKeySourceType = config.Require(\"apiKeySourceType\");\n    var apiName = config.Require(\"apiName\");\n    var binaryMediaType1 = config.Require(\"binaryMediaType1\");\n    var binaryMediaType2 = config.Require(\"binaryMediaType2\");\n    var minimumCompressionSize = config.Require(\"minimumCompressionSize\");\n    var myRestApi = new AwsNative.ApiGateway.RestApi(\"myRestApi\", new()\n    {\n        ApiKeySourceType = apiKeySourceType,\n        BinaryMediaTypes = new[]\n        {\n            binaryMediaType1,\n            binaryMediaType2,\n        },\n        MinimumCompressionSize = minimumCompressionSize,\n        Name = apiName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/apigateway\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tapiKeySourceType := cfg.Require(\"apiKeySourceType\")\n\t\tapiName := cfg.Require(\"apiName\")\n\t\tbinaryMediaType1 := cfg.Require(\"binaryMediaType1\")\n\t\tbinaryMediaType2 := cfg.Require(\"binaryMediaType2\")\n\t\tminimumCompressionSize := cfg.Require(\"minimumCompressionSize\")\n\t\t_, err := apigateway.NewRestApi(ctx, \"myRestApi\", \u0026apigateway.RestApiArgs{\n\t\t\tApiKeySourceType: pulumi.String(pulumi.String(apiKeySourceType)),\n\t\t\tBinaryMediaTypes: pulumi.StringArray{\n\t\t\t\tpulumi.String(pulumi.String(binaryMediaType1)),\n\t\t\t\tpulumi.String(pulumi.String(binaryMediaType2)),\n\t\t\t},\n\t\t\tMinimumCompressionSize: pulumi.String(minimumCompressionSize),\n\t\t\tName:                   pulumi.String(pulumi.String(apiName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst apiKeySourceType = config.require(\"apiKeySourceType\");\nconst apiName = config.require(\"apiName\");\nconst binaryMediaType1 = config.require(\"binaryMediaType1\");\nconst binaryMediaType2 = config.require(\"binaryMediaType2\");\nconst minimumCompressionSize = config.require(\"minimumCompressionSize\");\nconst myRestApi = new aws_native.apigateway.RestApi(\"myRestApi\", {\n    apiKeySourceType: apiKeySourceType,\n    binaryMediaTypes: [\n        binaryMediaType1,\n        binaryMediaType2,\n    ],\n    minimumCompressionSize: minimumCompressionSize,\n    name: apiName,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\napi_key_source_type = config.require(\"apiKeySourceType\")\napi_name = config.require(\"apiName\")\nbinary_media_type1 = config.require(\"binaryMediaType1\")\nbinary_media_type2 = config.require(\"binaryMediaType2\")\nminimum_compression_size = config.require(\"minimumCompressionSize\")\nmy_rest_api = aws_native.apigateway.RestApi(\"myRestApi\",\n    api_key_source_type=api_key_source_type,\n    binary_media_types=[\n        binary_media_type1,\n        binary_media_type2,\n    ],\n    minimum_compression_size=minimum_compression_size,\n    name=api_name)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"apiKeySourceType":{"type":"string","description":"The source of the API key for metering requests according to a usage plan. Valid values are: `HEADER` to read the API key from the `X-API-Key` header of a request. `AUTHORIZER` to read the API key from the `UsageIdentifierKey` from a custom authorizer."},"binaryMediaTypes":{"type":"array","items":{"type":"string"},"description":"The list of binary media types supported by the RestApi. By default, the RestApi supports only UTF-8-encoded text payloads."},"body":{"$ref":"pulumi.json#/Any","description":"An OpenAPI specification that defines a set of RESTful APIs in JSON format. For YAML templates, you can also provide the specification in YAML format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::RestApi` for more information about the expected schema for this property."},"bodyS3Location":{"$ref":"#/types/aws-native:apigateway:RestApiS3Location","description":"The Amazon Simple Storage Service (Amazon S3) location that points to an OpenAPI file, which defines a set of RESTful APIs in JSON or YAML format."},"cloneFrom":{"type":"string","description":"The ID of the RestApi that you want to clone from."},"description":{"type":"string","description":"The description of the RestApi."},"disableExecuteApiEndpoint":{"type":"boolean","description":"Specifies whether clients can invoke your API by using the default `execute-api` endpoint. By default, clients can invoke your API with the default `https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint"},"endpointAccessMode":{"type":"string","description":"The endpoint access mode for your RestApi."},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:RestApiEndpointConfiguration","description":"A list of the endpoint types and IP address types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property."},"failOnWarnings":{"type":"boolean","description":"A query parameter to indicate whether to rollback the API update ( `true` ) or not ( `false` ) when a warning is encountered. The default value is `false` ."},"minimumCompressionSize":{"type":"integer","description":"A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size."},"mode":{"type":"string","description":"This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates.\n Valid values are ``overwrite`` or ``merge``. \n For ``overwrite``, the new API definition replaces the existing one. The existing API identifier remains unchanged.\n  For ``merge``, the new API definition is merged with the existing API.\n If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite``. For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. \n Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties."},"name":{"type":"string","description":"The name of the RestApi. A name is required if the REST API is not based on an OpenAPI specification."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Custom header parameters as part of the request. For example, to exclude DocumentationParts from an imported API, set `ignore=documentation` as a `parameters` value, as in the AWS CLI command of `aws apigateway import-rest-api --parameters ignore=documentation --body 'file:///path/to/imported-api-body.json'` ."},"policy":{"$ref":"pulumi.json#/Any","description":"A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``\"\"`` as delimiter and values of ``\"execute-api:/\"`` and ``\"*\"``.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::RestApi` for more information about the expected schema for this property."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"rootResourceId":{"type":"string","description":"The root resource ID for a `RestApi` resource, such as `a0bc123d4e` ."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version + cipher suite for this RestApi."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with `aws:` . The tag value can be up to 256 characters."}},"type":"object","required":["restApiId","rootResourceId"],"inputProperties":{"apiKeySourceType":{"type":"string","description":"The source of the API key for metering requests according to a usage plan. Valid values are: `HEADER` to read the API key from the `X-API-Key` header of a request. `AUTHORIZER` to read the API key from the `UsageIdentifierKey` from a custom authorizer."},"binaryMediaTypes":{"type":"array","items":{"type":"string"},"description":"The list of binary media types supported by the RestApi. By default, the RestApi supports only UTF-8-encoded text payloads."},"body":{"$ref":"pulumi.json#/Any","description":"An OpenAPI specification that defines a set of RESTful APIs in JSON format. For YAML templates, you can also provide the specification in YAML format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::RestApi` for more information about the expected schema for this property."},"bodyS3Location":{"$ref":"#/types/aws-native:apigateway:RestApiS3Location","description":"The Amazon Simple Storage Service (Amazon S3) location that points to an OpenAPI file, which defines a set of RESTful APIs in JSON or YAML format."},"cloneFrom":{"type":"string","description":"The ID of the RestApi that you want to clone from."},"description":{"type":"string","description":"The description of the RestApi."},"disableExecuteApiEndpoint":{"type":"boolean","description":"Specifies whether clients can invoke your API by using the default `execute-api` endpoint. By default, clients can invoke your API with the default `https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint"},"endpointAccessMode":{"type":"string","description":"The endpoint access mode for your RestApi."},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:RestApiEndpointConfiguration","description":"A list of the endpoint types and IP address types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property."},"failOnWarnings":{"type":"boolean","description":"A query parameter to indicate whether to rollback the API update ( `true` ) or not ( `false` ) when a warning is encountered. The default value is `false` ."},"minimumCompressionSize":{"type":"integer","description":"A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size."},"mode":{"type":"string","description":"This property applies only when you use OpenAPI to define your REST API. The ``Mode`` determines how API Gateway handles resource updates.\n Valid values are ``overwrite`` or ``merge``. \n For ``overwrite``, the new API definition replaces the existing one. The existing API identifier remains unchanged.\n  For ``merge``, the new API definition is merged with the existing API.\n If you don't specify this property, a default value is chosen. For REST APIs created before March 29, 2021, the default is ``overwrite``. For REST APIs created after March 29, 2021, the new API definition takes precedence, but any container types such as endpoint configurations and binary media types are merged with the existing API. \n Use the default mode to define top-level ``RestApi`` properties in addition to using OpenAPI. Generally, it's preferred to use API Gateway's OpenAPI extensions to model these properties."},"name":{"type":"string","description":"The name of the RestApi. A name is required if the REST API is not based on an OpenAPI specification."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Custom header parameters as part of the request. For example, to exclude DocumentationParts from an imported API, set `ignore=documentation` as a `parameters` value, as in the AWS CLI command of `aws apigateway import-rest-api --parameters ignore=documentation --body 'file:///path/to/imported-api-body.json'` ."},"policy":{"$ref":"pulumi.json#/Any","description":"A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``\"\"`` as delimiter and values of ``\"execute-api:/\"`` and ``\"*\"``.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::RestApi` for more information about the expected schema for this property."},"securityPolicy":{"type":"string","description":"The Transport Layer Security (TLS) version + cipher suite for this RestApi."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with `aws:` . The tag value can be up to 256 characters."}}},"aws-native:apigateway:Stage":{"description":"The ``AWS::ApiGateway::Stage`` resource creates a stage for a deployment.","properties":{"accessLogSetting":{"$ref":"#/types/aws-native:apigateway:StageAccessLogSetting","description":"Access log settings, including the access log format and access log destination ARN."},"cacheClusterEnabled":{"type":"boolean","description":"Specifies whether a cache cluster is enabled for the stage. To activate a method-level cache, set `CachingEnabled` to `true` for a method."},"cacheClusterSize":{"type":"string","description":"The stage's cache capacity in GB. For more information about choosing a cache size, see [Enabling API caching to enhance responsiveness](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html) ."},"canarySetting":{"$ref":"#/types/aws-native:apigateway:StageCanarySetting","description":"Settings for the canary deployment in this stage."},"clientCertificateId":{"type":"string","description":"The identifier of a client certificate for an API stage."},"deploymentId":{"type":"string","description":"The identifier of the Deployment that the stage points to."},"description":{"type":"string","description":"The stage's description."},"documentationVersion":{"type":"string","description":"The version of the associated API documentation."},"methodSettings":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:StageMethodSetting"},"description":"A map that defines the method settings for a Stage resource. Keys (designated as `/{method_setting_key` below) are method paths defined as `{resource_path}/{http_method}` for an individual method override, or `/\\*/\\*` for overriding all methods in the stage."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi.","replaceOnChanges":true},"stageName":{"type":"string","description":"The name of the stage is the first path segment in the Uniform Resource Identifier (URI) of a call to API Gateway. Stage names can only contain alphanumeric characters, hyphens, and underscores. Maximum length is 128 characters.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."},"tracingEnabled":{"type":"boolean","description":"Specifies whether active tracing with X-ray is enabled for the Stage."},"variables":{"type":"object","additionalProperties":{"type":"string"},"description":"A map (string-to-string map) that defines the stage variables, where the variable name is the key and the variable value is the value. Variable names are limited to alphanumeric characters. Values must match the following regular expression: ``[A-Za-z0-9-._~:/?#\u0026=,]+``."}},"type":"object","required":["restApiId"],"inputProperties":{"accessLogSetting":{"$ref":"#/types/aws-native:apigateway:StageAccessLogSetting","description":"Access log settings, including the access log format and access log destination ARN."},"cacheClusterEnabled":{"type":"boolean","description":"Specifies whether a cache cluster is enabled for the stage. To activate a method-level cache, set `CachingEnabled` to `true` for a method."},"cacheClusterSize":{"type":"string","description":"The stage's cache capacity in GB. For more information about choosing a cache size, see [Enabling API caching to enhance responsiveness](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html) ."},"canarySetting":{"$ref":"#/types/aws-native:apigateway:StageCanarySetting","description":"Settings for the canary deployment in this stage."},"clientCertificateId":{"type":"string","description":"The identifier of a client certificate for an API stage."},"deploymentId":{"type":"string","description":"The identifier of the Deployment that the stage points to."},"description":{"type":"string","description":"The stage's description."},"documentationVersion":{"type":"string","description":"The version of the associated API documentation."},"methodSettings":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:StageMethodSetting"},"description":"A map that defines the method settings for a Stage resource. Keys (designated as `/{method_setting_key` below) are method paths defined as `{resource_path}/{http_method}` for an individual method override, or `/\\*/\\*` for overriding all methods in the stage."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"stageName":{"type":"string","description":"The name of the stage is the first path segment in the Uniform Resource Identifier (URI) of a call to API Gateway. Stage names can only contain alphanumeric characters, hyphens, and underscores. Maximum length is 128 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."},"tracingEnabled":{"type":"boolean","description":"Specifies whether active tracing with X-ray is enabled for the Stage."},"variables":{"type":"object","additionalProperties":{"type":"string"},"description":"A map (string-to-string map) that defines the stage variables, where the variable name is the key and the variable value is the value. Variable names are limited to alphanumeric characters. Values must match the following regular expression: ``[A-Za-z0-9-._~:/?#\u0026=,]+``."}},"requiredInputs":["restApiId"]},"aws-native:apigateway:UsagePlan":{"description":"The ``AWS::ApiGateway::UsagePlan`` resource creates a usage plan for deployed APIs. A usage plan sets a target for the throttling and quota limits on individual client API keys. For more information, see [Creating and Using API Usage Plans in Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-api-usage-plans.html) in the *API Gateway Developer Guide*.\n In some cases clients can exceed the targets that you set. Don’t rely on usage plans to control costs. Consider using [](https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html) to monitor costs and [](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) to manage API requests.","properties":{"apiStages":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:UsagePlanApiStage"},"description":"The associated API stages of a usage plan."},"awsId":{"type":"string","description":"The ID for the usage plan. For example: `abc123` ."},"description":{"type":"string","description":"The description of a usage plan."},"quota":{"$ref":"#/types/aws-native:apigateway:UsagePlanQuotaSettings","description":"The target maximum number of permitted requests per a given unit time interval."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."},"throttle":{"$ref":"#/types/aws-native:apigateway:UsagePlanThrottleSettings","description":"A map containing method level throttling information for API stage in a usage plan."},"usagePlanName":{"type":"string","description":"The name of a usage plan."}},"type":"object","required":["awsId"],"inputProperties":{"apiStages":{"type":"array","items":{"$ref":"#/types/aws-native:apigateway:UsagePlanApiStage"},"description":"The associated API stages of a usage plan."},"description":{"type":"string","description":"The description of a usage plan."},"quota":{"$ref":"#/types/aws-native:apigateway:UsagePlanQuotaSettings","description":"The target maximum number of permitted requests per a given unit time interval."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The collection of tags. Each tag element is associated with a given resource."},"throttle":{"$ref":"#/types/aws-native:apigateway:UsagePlanThrottleSettings","description":"A map containing method level throttling information for API stage in a usage plan."},"usagePlanName":{"type":"string","description":"The name of a usage plan."}}},"aws-native:apigateway:UsagePlanKey":{"description":"The ``AWS::ApiGateway::UsagePlanKey`` resource associates an API key with a usage plan. This association determines which users the usage plan is applied to.","properties":{"awsId":{"type":"string","description":"The ID for the usage plan key. For example: `abc123` ."},"keyId":{"type":"string","description":"The Id of the UsagePlanKey resource.","replaceOnChanges":true},"keyType":{"$ref":"#/types/aws-native:apigateway:UsagePlanKeyKeyType","description":"The type of a UsagePlanKey resource for a plan customer.","replaceOnChanges":true},"usagePlanId":{"type":"string","description":"The Id of the UsagePlan resource representing the usage plan containing the UsagePlanKey resource representing a plan customer.","replaceOnChanges":true}},"type":"object","required":["awsId","keyId","keyType","usagePlanId"],"inputProperties":{"keyId":{"type":"string","description":"The Id of the UsagePlanKey resource."},"keyType":{"$ref":"#/types/aws-native:apigateway:UsagePlanKeyKeyType","description":"The type of a UsagePlanKey resource for a plan customer."},"usagePlanId":{"type":"string","description":"The Id of the UsagePlan resource representing the usage plan containing the UsagePlanKey resource representing a plan customer."}},"requiredInputs":["keyId","keyType","usagePlanId"]},"aws-native:apigateway:VpcLink":{"description":"The ``AWS::ApiGateway::VpcLink`` resource creates an API Gateway VPC link for a REST API to access resources in an Amazon Virtual Private Cloud (VPC). For more information, see [vpclink:create](https://docs.aws.amazon.com/apigateway/latest/api/API_CreateVpcLink.html) in the ``Amazon API Gateway REST API Reference``.","properties":{"description":{"type":"string","description":"The description of the VPC link."},"name":{"type":"string","description":"The name used to label and identify the VPC link."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of arbitrary tags (key-value pairs) to associate with the VPC link."},"targetArns":{"type":"array","items":{"type":"string"},"description":"The ARN of the network load balancer of the VPC targeted by the VPC link. The network load balancer must be owned by the same AWS account of the API owner.","replaceOnChanges":true},"vpcLinkId":{"type":"string","description":"The ID for the VPC link. For example: `abc123` ."}},"type":"object","required":["name","targetArns","vpcLinkId"],"inputProperties":{"description":{"type":"string","description":"The description of the VPC link."},"name":{"type":"string","description":"The name used to label and identify the VPC link."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of arbitrary tags (key-value pairs) to associate with the VPC link."},"targetArns":{"type":"array","items":{"type":"string"},"description":"The ARN of the network load balancer of the VPC targeted by the VPC link. The network load balancer must be owned by the same AWS account of the API owner."}},"requiredInputs":["targetArns"]},"aws-native:apigatewayv2:Api":{"description":"The ``AWS::ApiGatewayV2::Api`` resource creates an API. WebSocket APIs and HTTP APIs are supported. For more information about WebSocket APIs, see [About WebSocket APIs in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-overview.html) in the *API Gateway Developer Guide*. For more information about HTTP APIs, see [HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api.html) in the *API Gateway Developer Guide.*","properties":{"apiEndpoint":{"type":"string","description":"The default endpoint for an API. For example: `https://abcdef.execute-api.us-west-2.amazonaws.com` ."},"apiId":{"type":"string","description":"The API identifier."},"apiKeySelectionExpression":{"type":"string","description":"An API key selection expression. Supported only for WebSocket APIs. See [API Key Selection Expressions](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-selection-expressions.html#apigateway-websocket-api-apikey-selection-expressions)."},"basePath":{"type":"string","description":"Specifies how to interpret the base path of the API during import. Valid values are ``ignore``, ``prepend``, and ``split``. The default value is ``ignore``. To learn more, see [Set the OpenAPI basePath Property](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-import-api-basePath.html). Supported only for HTTP APIs."},"body":{"$ref":"pulumi.json#/Any","description":"The OpenAPI definition. Supported only for HTTP APIs. To import an HTTP API, you must specify a ``Body`` or ``BodyS3Location``. If you specify a ``Body`` or ``BodyS3Location``, don't specify CloudFormation resources such as ``AWS::ApiGatewayV2::Authorizer`` or ``AWS::ApiGatewayV2::Route``. API Gateway doesn't support the combination of OpenAPI and CloudFormation resources.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Api` for more information about the expected schema for this property."},"bodyS3Location":{"$ref":"#/types/aws-native:apigatewayv2:ApiBodyS3Location","description":"The S3 location of an OpenAPI definition. Supported only for HTTP APIs. To import an HTTP API, you must specify a ``Body`` or ``BodyS3Location``. If you specify a ``Body`` or ``BodyS3Location``, don't specify CloudFormation resources such as ``AWS::ApiGatewayV2::Authorizer`` or ``AWS::ApiGatewayV2::Route``. API Gateway doesn't support the combination of OpenAPI and CloudFormation resources."},"corsConfiguration":{"$ref":"#/types/aws-native:apigatewayv2:ApiCors","description":"A CORS configuration. Supported only for HTTP APIs. See [Configuring CORS](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-cors.html) for more information."},"credentialsArn":{"type":"string","description":"This property is part of quick create. It specifies the credentials required for the integration, if any. For a Lambda integration, three options are available. To specify an IAM Role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To require that the caller's identity be passed through from the request, specify ``arn:aws:iam::*:user/*``. To use resource-based permissions on supported AWS services, specify ``null``. Currently, this property is not used for HTTP integrations. Supported only for HTTP APIs."},"description":{"type":"string","description":"The description of the API."},"disableExecuteApiEndpoint":{"type":"boolean","description":"Specifies whether clients can invoke your API by using the default ``execute-api`` endpoint. By default, clients can invoke your API with the default https://{api_id}.execute-api.{region}.amazonaws.com endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint."},"disableSchemaValidation":{"type":"boolean","description":"Avoid validating models when creating a deployment. Supported only for WebSocket APIs."},"failOnWarnings":{"type":"boolean","description":"Specifies whether to rollback the API creation when a warning is encountered. By default, API creation continues if a warning is encountered."},"ipAddressType":{"type":"string","description":"The IP address types that can invoke the API. Use `ipv4` to allow only IPv4 addresses to invoke your API, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke your API.\n\nDon’t use IP address type for an HTTP API based on an OpenAPI specification. Instead, specify the IP address type in the OpenAPI specification."},"name":{"type":"string","description":"The name of the API. Required unless you specify an OpenAPI definition for ``Body`` or ``S3BodyLocation``."},"protocolType":{"type":"string","description":"The API protocol. Valid values are ``WEBSOCKET`` or ``HTTP``. Required unless you specify an OpenAPI definition for ``Body`` or ``S3BodyLocation``.","replaceOnChanges":true},"routeKey":{"type":"string","description":"This property is part of quick create. If you don't specify a ``routeKey``, a default route of ``$default`` is created. The ``$default`` route acts as a catch-all for any request made to your API, for a particular stage. The ``$default`` route key can't be modified. You can add routes after creating the API, and you can update the route keys of additional routes. Supported only for HTTP APIs."},"routeSelectionExpression":{"type":"string","description":"The route selection expression for the API. For HTTP APIs, the ``routeSelectionExpression`` must be ``${request.method} ${request.path}``. If not provided, this will be the default for HTTP APIs. This property is required for WebSocket APIs."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The collection of tags. Each tag element is associated with a given resource."},"target":{"type":"string","description":"This property is part of quick create. Quick create produces an API with an integration, a default catch-all route, and a default stage which is configured to automatically deploy changes. For HTTP integrations, specify a fully qualified URL. For Lambda integrations, specify a function ARN. The type of the integration will be HTTP_PROXY or AWS_PROXY, respectively. Supported only for HTTP APIs."},"version":{"type":"string","description":"A version identifier for the API."}},"type":"object","required":["apiEndpoint","apiId"],"inputProperties":{"apiKeySelectionExpression":{"type":"string","description":"An API key selection expression. Supported only for WebSocket APIs. See [API Key Selection Expressions](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-selection-expressions.html#apigateway-websocket-api-apikey-selection-expressions)."},"basePath":{"type":"string","description":"Specifies how to interpret the base path of the API during import. Valid values are ``ignore``, ``prepend``, and ``split``. The default value is ``ignore``. To learn more, see [Set the OpenAPI basePath Property](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-import-api-basePath.html). Supported only for HTTP APIs."},"body":{"$ref":"pulumi.json#/Any","description":"The OpenAPI definition. Supported only for HTTP APIs. To import an HTTP API, you must specify a ``Body`` or ``BodyS3Location``. If you specify a ``Body`` or ``BodyS3Location``, don't specify CloudFormation resources such as ``AWS::ApiGatewayV2::Authorizer`` or ``AWS::ApiGatewayV2::Route``. API Gateway doesn't support the combination of OpenAPI and CloudFormation resources.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Api` for more information about the expected schema for this property."},"bodyS3Location":{"$ref":"#/types/aws-native:apigatewayv2:ApiBodyS3Location","description":"The S3 location of an OpenAPI definition. Supported only for HTTP APIs. To import an HTTP API, you must specify a ``Body`` or ``BodyS3Location``. If you specify a ``Body`` or ``BodyS3Location``, don't specify CloudFormation resources such as ``AWS::ApiGatewayV2::Authorizer`` or ``AWS::ApiGatewayV2::Route``. API Gateway doesn't support the combination of OpenAPI and CloudFormation resources."},"corsConfiguration":{"$ref":"#/types/aws-native:apigatewayv2:ApiCors","description":"A CORS configuration. Supported only for HTTP APIs. See [Configuring CORS](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-cors.html) for more information."},"credentialsArn":{"type":"string","description":"This property is part of quick create. It specifies the credentials required for the integration, if any. For a Lambda integration, three options are available. To specify an IAM Role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To require that the caller's identity be passed through from the request, specify ``arn:aws:iam::*:user/*``. To use resource-based permissions on supported AWS services, specify ``null``. Currently, this property is not used for HTTP integrations. Supported only for HTTP APIs."},"description":{"type":"string","description":"The description of the API."},"disableExecuteApiEndpoint":{"type":"boolean","description":"Specifies whether clients can invoke your API by using the default ``execute-api`` endpoint. By default, clients can invoke your API with the default https://{api_id}.execute-api.{region}.amazonaws.com endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint."},"disableSchemaValidation":{"type":"boolean","description":"Avoid validating models when creating a deployment. Supported only for WebSocket APIs."},"failOnWarnings":{"type":"boolean","description":"Specifies whether to rollback the API creation when a warning is encountered. By default, API creation continues if a warning is encountered."},"ipAddressType":{"type":"string","description":"The IP address types that can invoke the API. Use `ipv4` to allow only IPv4 addresses to invoke your API, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke your API.\n\nDon’t use IP address type for an HTTP API based on an OpenAPI specification. Instead, specify the IP address type in the OpenAPI specification."},"name":{"type":"string","description":"The name of the API. Required unless you specify an OpenAPI definition for ``Body`` or ``S3BodyLocation``."},"protocolType":{"type":"string","description":"The API protocol. Valid values are ``WEBSOCKET`` or ``HTTP``. Required unless you specify an OpenAPI definition for ``Body`` or ``S3BodyLocation``."},"routeKey":{"type":"string","description":"This property is part of quick create. If you don't specify a ``routeKey``, a default route of ``$default`` is created. The ``$default`` route acts as a catch-all for any request made to your API, for a particular stage. The ``$default`` route key can't be modified. You can add routes after creating the API, and you can update the route keys of additional routes. Supported only for HTTP APIs."},"routeSelectionExpression":{"type":"string","description":"The route selection expression for the API. For HTTP APIs, the ``routeSelectionExpression`` must be ``${request.method} ${request.path}``. If not provided, this will be the default for HTTP APIs. This property is required for WebSocket APIs."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The collection of tags. Each tag element is associated with a given resource."},"target":{"type":"string","description":"This property is part of quick create. Quick create produces an API with an integration, a default catch-all route, and a default stage which is configured to automatically deploy changes. For HTTP integrations, specify a fully qualified URL. For Lambda integrations, specify a function ARN. The type of the integration will be HTTP_PROXY or AWS_PROXY, respectively. Supported only for HTTP APIs."},"version":{"type":"string","description":"A version identifier for the API."}}},"aws-native:apigatewayv2:ApiMapping":{"description":"The ``AWS::ApiGatewayV2::ApiMapping`` resource contains an API mapping. An API mapping relates a path of your custom domain name to a stage of your API. A custom domain name can have multiple API mappings, but the paths can't overlap. A custom domain can map only to APIs of the same protocol type. For more information, see [CreateApiMapping](https://docs.aws.amazon.com/apigatewayv2/latest/api-reference/domainnames-domainname-apimappings.html#CreateApiMapping) in the *Amazon API Gateway V2 API Reference*.","properties":{"apiId":{"type":"string","description":"The identifier of the API."},"apiMappingId":{"type":"string","description":"The API mapping resource ID."},"apiMappingKey":{"type":"string","description":"The API mapping key."},"domainName":{"type":"string","description":"The domain name.","replaceOnChanges":true},"stage":{"type":"string","description":"The API stage."}},"type":"object","required":["apiId","apiMappingId","domainName","stage"],"inputProperties":{"apiId":{"type":"string","description":"The identifier of the API."},"apiMappingKey":{"type":"string","description":"The API mapping key."},"domainName":{"type":"string","description":"The domain name."},"stage":{"type":"string","description":"The API stage."}},"requiredInputs":["apiId","domainName","stage"]},"aws-native:apigatewayv2:Authorizer":{"description":"The ``AWS::ApiGatewayV2::Authorizer`` resource creates an authorizer for a WebSocket API or an HTTP API. To learn more, see [Controlling and managing access to a WebSocket API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-control-access.html) and [Controlling and managing access to an HTTP API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-access-control.html) in the *API Gateway Developer Guide*.","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"authorizerCredentialsArn":{"type":"string","description":"Specifies the required credentials as an IAM role for API Gateway to invoke the authorizer. To specify an IAM role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To use resource-based permissions on the Lambda function, specify null. Supported only for ``REQUEST`` authorizers."},"authorizerId":{"type":"string","description":"The authorizer ID."},"authorizerPayloadFormatVersion":{"type":"string","description":"Specifies the format of the payload sent to an HTTP API Lambda authorizer. Required for HTTP API Lambda authorizers. Supported values are ``1.0`` and ``2.0``. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html)."},"authorizerResultTtlInSeconds":{"type":"integer","description":"The time to live (TTL) for cached authorizer results, in seconds. If it equals 0, authorization caching is disabled. If it is greater than 0, API Gateway caches authorizer responses. The maximum value is 3600, or 1 hour. Supported only for HTTP API Lambda authorizers."},"authorizerType":{"type":"string","description":"The authorizer type. Specify ``REQUEST`` for a Lambda function using incoming request parameters. Specify ``JWT`` to use JSON Web Tokens (supported only for HTTP APIs)."},"authorizerUri":{"type":"string","description":"The authorizer's Uniform Resource Identifier (URI). For ``REQUEST`` authorizers, this must be a well-formed Lambda function URI, for example, ``arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:{account_id}:function:{lambda_function_name}/invocations``. In general, the URI has this form: ``arn:aws:apigateway:{region}:lambda:path/{service_api}``, where *{region}* is the same as the region hosting the Lambda function, path indicates that the remaining substring in the URI should be treated as the path to the resource, including the initial ``/``. For Lambda functions, this is usually of the form ``/2015-03-31/functions/[FunctionARN]/invocations``."},"enableSimpleResponses":{"type":"boolean","description":"Specifies whether a Lambda authorizer returns a response in a simple format. By default, a Lambda authorizer must return an IAM policy. If enabled, the Lambda authorizer can return a boolean value instead of an IAM policy. Supported only for HTTP APIs. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html)."},"identitySource":{"type":"array","items":{"type":"string"},"description":"The identity source for which authorization is requested.\n For a ``REQUEST`` authorizer, this is optional. The value is a set of one or more mapping expressions of the specified request parameters. The identity source can be headers, query string parameters, stage variables, and context parameters. For example, if an Auth header and a Name query string parameter are defined as identity sources, this value is route.request.header.Auth, route.request.querystring.Name for WebSocket APIs. For HTTP APIs, use selection expressions prefixed with ``$``, for example, ``$request.header.Auth``, ``$request.querystring.Name``. These parameters are used to perform runtime validation for Lambda-based authorizers by verifying all of the identity-related request parameters are present in the request, not null, and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function. Otherwise, it returns a 401 Unauthorized response without calling the Lambda function. For HTTP APIs, identity sources are also used as the cache key when caching is enabled. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html).\n For ``JWT``, a single entry that specifies where to extract the JSON Web Token (JWT) from inbound requests. Currently only header-based and query parameter-based selections are supported, for example ``$request.header.Authorization``."},"identityValidationExpression":{"type":"string","description":"This parameter is not used."},"jwtConfiguration":{"$ref":"#/types/aws-native:apigatewayv2:AuthorizerJwtConfiguration","description":"The ``JWTConfiguration`` property specifies the configuration of a JWT authorizer. Required for the ``JWT`` authorizer type. Supported only for HTTP APIs."},"name":{"type":"string","description":"The name of the authorizer."}},"type":"object","required":["apiId","authorizerId","authorizerType","name"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"authorizerCredentialsArn":{"type":"string","description":"Specifies the required credentials as an IAM role for API Gateway to invoke the authorizer. To specify an IAM role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To use resource-based permissions on the Lambda function, specify null. Supported only for ``REQUEST`` authorizers."},"authorizerPayloadFormatVersion":{"type":"string","description":"Specifies the format of the payload sent to an HTTP API Lambda authorizer. Required for HTTP API Lambda authorizers. Supported values are ``1.0`` and ``2.0``. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html)."},"authorizerResultTtlInSeconds":{"type":"integer","description":"The time to live (TTL) for cached authorizer results, in seconds. If it equals 0, authorization caching is disabled. If it is greater than 0, API Gateway caches authorizer responses. The maximum value is 3600, or 1 hour. Supported only for HTTP API Lambda authorizers."},"authorizerType":{"type":"string","description":"The authorizer type. Specify ``REQUEST`` for a Lambda function using incoming request parameters. Specify ``JWT`` to use JSON Web Tokens (supported only for HTTP APIs)."},"authorizerUri":{"type":"string","description":"The authorizer's Uniform Resource Identifier (URI). For ``REQUEST`` authorizers, this must be a well-formed Lambda function URI, for example, ``arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:{account_id}:function:{lambda_function_name}/invocations``. In general, the URI has this form: ``arn:aws:apigateway:{region}:lambda:path/{service_api}``, where *{region}* is the same as the region hosting the Lambda function, path indicates that the remaining substring in the URI should be treated as the path to the resource, including the initial ``/``. For Lambda functions, this is usually of the form ``/2015-03-31/functions/[FunctionARN]/invocations``."},"enableSimpleResponses":{"type":"boolean","description":"Specifies whether a Lambda authorizer returns a response in a simple format. By default, a Lambda authorizer must return an IAM policy. If enabled, the Lambda authorizer can return a boolean value instead of an IAM policy. Supported only for HTTP APIs. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html)."},"identitySource":{"type":"array","items":{"type":"string"},"description":"The identity source for which authorization is requested.\n For a ``REQUEST`` authorizer, this is optional. The value is a set of one or more mapping expressions of the specified request parameters. The identity source can be headers, query string parameters, stage variables, and context parameters. For example, if an Auth header and a Name query string parameter are defined as identity sources, this value is route.request.header.Auth, route.request.querystring.Name for WebSocket APIs. For HTTP APIs, use selection expressions prefixed with ``$``, for example, ``$request.header.Auth``, ``$request.querystring.Name``. These parameters are used to perform runtime validation for Lambda-based authorizers by verifying all of the identity-related request parameters are present in the request, not null, and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function. Otherwise, it returns a 401 Unauthorized response without calling the Lambda function. For HTTP APIs, identity sources are also used as the cache key when caching is enabled. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html).\n For ``JWT``, a single entry that specifies where to extract the JSON Web Token (JWT) from inbound requests. Currently only header-based and query parameter-based selections are supported, for example ``$request.header.Authorization``."},"identityValidationExpression":{"type":"string","description":"This parameter is not used."},"jwtConfiguration":{"$ref":"#/types/aws-native:apigatewayv2:AuthorizerJwtConfiguration","description":"The ``JWTConfiguration`` property specifies the configuration of a JWT authorizer. Required for the ``JWT`` authorizer type. Supported only for HTTP APIs."},"name":{"type":"string","description":"The name of the authorizer."}},"requiredInputs":["apiId","authorizerType"]},"aws-native:apigatewayv2:Deployment":{"description":"The ``AWS::ApiGatewayV2::Deployment`` resource creates a deployment for an API.","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"deploymentId":{"type":"string","description":"The deployment ID."},"description":{"type":"string","description":"The description for the deployment resource."},"stageName":{"type":"string","description":"The name of an existing stage to associate with the deployment."}},"type":"object","required":["apiId","deploymentId"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"description":{"type":"string","description":"The description for the deployment resource."},"stageName":{"type":"string","description":"The name of an existing stage to associate with the deployment."}},"requiredInputs":["apiId"]},"aws-native:apigatewayv2:DomainName":{"description":"The ``AWS::ApiGatewayV2::DomainName`` resource specifies a custom domain name for your API in Amazon API Gateway (API Gateway). \n You can use a custom domain name to provide a URL that's more intuitive and easier to recall. For more information about using custom domain names, see [Set up Custom Domain Name for an API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html) in the *API Gateway Developer Guide*.","properties":{"domainName":{"type":"string","description":"The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore (``_``) character are not supported.","language":{"csharp":{"name":"DomainNameValue"}},"replaceOnChanges":true},"domainNameArn":{"type":"string","description":"Represents an Amazon Resource Name (ARN)."},"domainNameConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameConfiguration"},"description":"The domain name configurations."},"mutualTlsAuthentication":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameMutualTlsAuthentication","description":"The mutual TLS authentication configuration for a custom domain name."},"regionalDomainName":{"type":"string","description":"The domain name associated with the regional endpoint for this custom domain name. You set up this association by adding a DNS record that points the custom domain name to this regional domain name."},"regionalHostedZoneId":{"type":"string","description":"The region-specific Amazon Route 53 Hosted Zone ID of the regional endpoint."},"routingMode":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameRoutingMode","description":"The routing mode API Gateway uses to route traffic to your APIs."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The collection of tags associated with a domain name."}},"type":"object","required":["domainName","domainNameArn","regionalDomainName","regionalHostedZoneId"],"inputProperties":{"domainName":{"type":"string","description":"The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore (``_``) character are not supported.","language":{"csharp":{"name":"DomainNameValue"}}},"domainNameConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameConfiguration"},"description":"The domain name configurations."},"mutualTlsAuthentication":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameMutualTlsAuthentication","description":"The mutual TLS authentication configuration for a custom domain name."},"routingMode":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameRoutingMode","description":"The routing mode API Gateway uses to route traffic to your APIs."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The collection of tags associated with a domain name."}},"requiredInputs":["domainName"]},"aws-native:apigatewayv2:Integration":{"description":"Resource Type definition for AWS::ApiGatewayV2::Integration","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"connectionId":{"type":"string","description":"The ID of the VPC link for a private integration. Supported only for HTTP APIs."},"connectionType":{"type":"string","description":"The type of the network connection to the integration endpoint. Specify INTERNET for connections through the public routable internet or VPC_LINK for private connections between API Gateway and resources in a VPC. The default value is INTERNET."},"contentHandlingStrategy":{"type":"string","description":"Supported only for WebSocket APIs. Specifies how to handle response payload content type conversions. Supported values are CONVERT_TO_BINARY and CONVERT_TO_TEXT."},"credentialsArn":{"type":"string","description":"Specifies the credentials required for the integration, if any. For AWS integrations, three options are available. To specify an IAM Role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To require that the caller's identity be passed through from the request, specify the string arn:aws:iam::*:user/*. To use resource-based permissions on supported AWS services, don't specify this parameter."},"description":{"type":"string","description":"The description of the integration."},"integrationId":{"type":"string","description":"The integration ID."},"integrationMethod":{"type":"string","description":"Specifies the integration's HTTP method type."},"integrationSubtype":{"type":"string","description":"Supported only for HTTP API AWS_PROXY integrations. Specifies the AWS service action to invoke."},"integrationType":{"type":"string","description":"The integration type of an integration."},"integrationUri":{"type":"string","description":"For a Lambda integration, specify the URI of a Lambda function. For an HTTP integration, specify a fully-qualified URL. For an HTTP API private integration, specify the ARN of an Application Load Balancer listener, Network Load Balancer listener, or AWS Cloud Map service."},"passthroughBehavior":{"type":"string","description":"Specifies the pass-through behavior for incoming requests based on the Content-Type header in the request, and the available mapping templates specified as the requestTemplates property on the Integration resource. There are three valid values: WHEN_NO_MATCH, WHEN_NO_TEMPLATES, and NEVER. Supported only for WebSocket APIs."},"payloadFormatVersion":{"type":"string","description":"Specifies the format of the payload sent to an integration. Required for HTTP APIs. For HTTP APIs, supported values for Lambda proxy integrations are 1.0 and 2.0 For all other integrations, 1.0 is the only supported value."},"requestParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value map specifying parameters."},"requestTemplates":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of Velocity templates that are applied on the request payload based on the value of the Content-Type header sent by the client."},"responseParameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationResponseParameterMap"},"description":"Parameters that transform the HTTP response from a backend integration before returning the response to clients. Supported only for HTTP APIs."},"templateSelectionExpression":{"type":"string","description":"The template selection expression for the integration. Supported only for WebSocket APIs."},"timeoutInMillis":{"type":"integer","description":"Custom timeout between 50 and 29000 milliseconds for WebSocket APIs and between 50 and 30000 milliseconds for HTTP APIs. The default timeout is 29 seconds for WebSocket APIs and 30 seconds for HTTP APIs."},"tlsConfig":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationTlsConfig","description":"The TLS configuration for a private integration. If you specify a TLS configuration, private integration traffic uses the HTTPS protocol. Supported only for HTTP APIs."}},"type":"object","required":["apiId","integrationId","integrationType"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"connectionId":{"type":"string","description":"The ID of the VPC link for a private integration. Supported only for HTTP APIs."},"connectionType":{"type":"string","description":"The type of the network connection to the integration endpoint. Specify INTERNET for connections through the public routable internet or VPC_LINK for private connections between API Gateway and resources in a VPC. The default value is INTERNET."},"contentHandlingStrategy":{"type":"string","description":"Supported only for WebSocket APIs. Specifies how to handle response payload content type conversions. Supported values are CONVERT_TO_BINARY and CONVERT_TO_TEXT."},"credentialsArn":{"type":"string","description":"Specifies the credentials required for the integration, if any. For AWS integrations, three options are available. To specify an IAM Role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To require that the caller's identity be passed through from the request, specify the string arn:aws:iam::*:user/*. To use resource-based permissions on supported AWS services, don't specify this parameter."},"description":{"type":"string","description":"The description of the integration."},"integrationMethod":{"type":"string","description":"Specifies the integration's HTTP method type."},"integrationSubtype":{"type":"string","description":"Supported only for HTTP API AWS_PROXY integrations. Specifies the AWS service action to invoke."},"integrationType":{"type":"string","description":"The integration type of an integration."},"integrationUri":{"type":"string","description":"For a Lambda integration, specify the URI of a Lambda function. For an HTTP integration, specify a fully-qualified URL. For an HTTP API private integration, specify the ARN of an Application Load Balancer listener, Network Load Balancer listener, or AWS Cloud Map service."},"passthroughBehavior":{"type":"string","description":"Specifies the pass-through behavior for incoming requests based on the Content-Type header in the request, and the available mapping templates specified as the requestTemplates property on the Integration resource. There are three valid values: WHEN_NO_MATCH, WHEN_NO_TEMPLATES, and NEVER. Supported only for WebSocket APIs."},"payloadFormatVersion":{"type":"string","description":"Specifies the format of the payload sent to an integration. Required for HTTP APIs. For HTTP APIs, supported values for Lambda proxy integrations are 1.0 and 2.0 For all other integrations, 1.0 is the only supported value."},"requestParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value map specifying parameters."},"requestTemplates":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of Velocity templates that are applied on the request payload based on the value of the Content-Type header sent by the client."},"responseParameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationResponseParameterMap"},"description":"Parameters that transform the HTTP response from a backend integration before returning the response to clients. Supported only for HTTP APIs."},"templateSelectionExpression":{"type":"string","description":"The template selection expression for the integration. Supported only for WebSocket APIs."},"timeoutInMillis":{"type":"integer","description":"Custom timeout between 50 and 29000 milliseconds for WebSocket APIs and between 50 and 30000 milliseconds for HTTP APIs. The default timeout is 29 seconds for WebSocket APIs and 30 seconds for HTTP APIs."},"tlsConfig":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationTlsConfig","description":"The TLS configuration for a private integration. If you specify a TLS configuration, private integration traffic uses the HTTPS protocol. Supported only for HTTP APIs."}},"requiredInputs":["apiId","integrationType"]},"aws-native:apigatewayv2:IntegrationResponse":{"description":"The ``AWS::ApiGatewayV2::IntegrationResponse`` resource updates an integration response for an WebSocket API. For more information, see [Set up WebSocket API Integration Responses in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-integration-responses.html) in the *API Gateway Developer Guide*.","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"contentHandlingStrategy":{"type":"string","description":"Supported only for WebSocket APIs. Specifies how to handle response payload content type conversions. Supported values are ``CONVERT_TO_BINARY`` and ``CONVERT_TO_TEXT``, with the following behaviors:\n  ``CONVERT_TO_BINARY``: Converts a response payload from a Base64-encoded string to the corresponding binary blob.\n  ``CONVERT_TO_TEXT``: Converts a response payload from a binary blob to a Base64-encoded string.\n If this property is not defined, the response payload will be passed through from the integration response to the route response or method response without modification."},"integrationId":{"type":"string","description":"The integration ID.","replaceOnChanges":true},"integrationResponseId":{"type":"string","description":"The integration response ID."},"integrationResponseKey":{"type":"string","description":"The integration response key."},"responseParameters":{"$ref":"pulumi.json#/Any","description":"A key-value map specifying response parameters that are passed to the method response from the backend. The key is a method response header parameter name and the mapped value is an integration response header value, a static value enclosed within a pair of single quotes, or a JSON expression from the integration response body. The mapping key must match the pattern of ``method.response.header.{name}``, where name is a valid and unique header name. The mapped non-static value must match the pattern of ``integration.response.header.{name}`` or ``integration.response.body.{JSON-expression}``, where ``{name}`` is a valid and unique response header name and ``{JSON-expression}`` is a valid JSON expression without the ``$`` prefix.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::IntegrationResponse` for more information about the expected schema for this property."},"responseTemplates":{"$ref":"pulumi.json#/Any","description":"The collection of response templates for the integration response as a string-to-string map of key-value pairs. Response templates are represented as a key/value map, with a content-type as the key and a template as the value.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::IntegrationResponse` for more information about the expected schema for this property."},"templateSelectionExpression":{"type":"string","description":"The template selection expression for the integration response. Supported only for WebSocket APIs."}},"type":"object","required":["apiId","integrationId","integrationResponseId","integrationResponseKey"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"contentHandlingStrategy":{"type":"string","description":"Supported only for WebSocket APIs. Specifies how to handle response payload content type conversions. Supported values are ``CONVERT_TO_BINARY`` and ``CONVERT_TO_TEXT``, with the following behaviors:\n  ``CONVERT_TO_BINARY``: Converts a response payload from a Base64-encoded string to the corresponding binary blob.\n  ``CONVERT_TO_TEXT``: Converts a response payload from a binary blob to a Base64-encoded string.\n If this property is not defined, the response payload will be passed through from the integration response to the route response or method response without modification."},"integrationId":{"type":"string","description":"The integration ID."},"integrationResponseKey":{"type":"string","description":"The integration response key."},"responseParameters":{"$ref":"pulumi.json#/Any","description":"A key-value map specifying response parameters that are passed to the method response from the backend. The key is a method response header parameter name and the mapped value is an integration response header value, a static value enclosed within a pair of single quotes, or a JSON expression from the integration response body. The mapping key must match the pattern of ``method.response.header.{name}``, where name is a valid and unique header name. The mapped non-static value must match the pattern of ``integration.response.header.{name}`` or ``integration.response.body.{JSON-expression}``, where ``{name}`` is a valid and unique response header name and ``{JSON-expression}`` is a valid JSON expression without the ``$`` prefix.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::IntegrationResponse` for more information about the expected schema for this property."},"responseTemplates":{"$ref":"pulumi.json#/Any","description":"The collection of response templates for the integration response as a string-to-string map of key-value pairs. Response templates are represented as a key/value map, with a content-type as the key and a template as the value.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::IntegrationResponse` for more information about the expected schema for this property."},"templateSelectionExpression":{"type":"string","description":"The template selection expression for the integration response. Supported only for WebSocket APIs."}},"requiredInputs":["apiId","integrationId","integrationResponseKey"]},"aws-native:apigatewayv2:Model":{"description":"The ``AWS::ApiGatewayV2::Model`` resource updates data model for a WebSocket API. For more information, see [Model Selection Expressions](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-selection-expressions.html#apigateway-websocket-api-model-selection-expressions) in the *API Gateway Developer Guide*.","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"contentType":{"type":"string","description":"The content-type for the model, for example, \"application/json\"."},"description":{"type":"string","description":"The description of the model."},"modelId":{"type":"string","description":"The model ID."},"name":{"type":"string","description":"The name of the model."},"schema":{"$ref":"pulumi.json#/Any","description":"The schema for the model. For application/json models, this should be JSON schema draft 4 model.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Model` for more information about the expected schema for this property."}},"type":"object","required":["apiId","modelId","name","schema"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"contentType":{"type":"string","description":"The content-type for the model, for example, \"application/json\"."},"description":{"type":"string","description":"The description of the model."},"name":{"type":"string","description":"The name of the model."},"schema":{"$ref":"pulumi.json#/Any","description":"The schema for the model. For application/json models, this should be JSON schema draft 4 model.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Model` for more information about the expected schema for this property."}},"requiredInputs":["apiId","schema"]},"aws-native:apigatewayv2:Route":{"description":"The ``AWS::ApiGatewayV2::Route`` resource creates a route for an API.","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"apiKeyRequired":{"type":"boolean","description":"Specifies whether an API key is required for the route. Supported only for WebSocket APIs."},"authorizationScopes":{"type":"array","items":{"type":"string"},"description":"The authorization scopes supported by this route."},"authorizationType":{"type":"string","description":"The authorization type for the route. For WebSocket APIs, valid values are ``NONE`` for open access, ``AWS_IAM`` for using AWS IAM permissions, and ``CUSTOM`` for using a Lambda authorizer. For HTTP APIs, valid values are ``NONE`` for open access, ``JWT`` for using JSON Web Tokens, ``AWS_IAM`` for using AWS IAM permissions, and ``CUSTOM`` for using a Lambda authorizer."},"authorizerId":{"type":"string","description":"The identifier of the ``Authorizer`` resource to be associated with this route. The authorizer identifier is generated by API Gateway when you created the authorizer."},"modelSelectionExpression":{"type":"string","description":"The model selection expression for the route. Supported only for WebSocket APIs."},"operationName":{"type":"string","description":"The operation name for the route."},"requestModels":{"$ref":"pulumi.json#/Any","description":"The request models for the route. Supported only for WebSocket APIs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Route` for more information about the expected schema for this property."},"requestParameters":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RouteParameterConstraints"},"description":"The request parameters for the route. Supported only for WebSocket APIs."},"routeId":{"type":"string","description":"The route ID."},"routeKey":{"type":"string","description":"The route key for the route. For HTTP APIs, the route key can be either ``$default``, or a combination of an HTTP method and resource path, for example, ``GET /pets``."},"routeResponseSelectionExpression":{"type":"string","description":"The route response selection expression for the route. Supported only for WebSocket APIs."},"target":{"type":"string","description":"The target for the route."}},"type":"object","required":["apiId","routeId","routeKey"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"apiKeyRequired":{"type":"boolean","description":"Specifies whether an API key is required for the route. Supported only for WebSocket APIs."},"authorizationScopes":{"type":"array","items":{"type":"string"},"description":"The authorization scopes supported by this route."},"authorizationType":{"type":"string","description":"The authorization type for the route. For WebSocket APIs, valid values are ``NONE`` for open access, ``AWS_IAM`` for using AWS IAM permissions, and ``CUSTOM`` for using a Lambda authorizer. For HTTP APIs, valid values are ``NONE`` for open access, ``JWT`` for using JSON Web Tokens, ``AWS_IAM`` for using AWS IAM permissions, and ``CUSTOM`` for using a Lambda authorizer."},"authorizerId":{"type":"string","description":"The identifier of the ``Authorizer`` resource to be associated with this route. The authorizer identifier is generated by API Gateway when you created the authorizer."},"modelSelectionExpression":{"type":"string","description":"The model selection expression for the route. Supported only for WebSocket APIs."},"operationName":{"type":"string","description":"The operation name for the route."},"requestModels":{"$ref":"pulumi.json#/Any","description":"The request models for the route. Supported only for WebSocket APIs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Route` for more information about the expected schema for this property."},"requestParameters":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RouteParameterConstraints"},"description":"The request parameters for the route. Supported only for WebSocket APIs."},"routeKey":{"type":"string","description":"The route key for the route. For HTTP APIs, the route key can be either ``$default``, or a combination of an HTTP method and resource path, for example, ``GET /pets``."},"routeResponseSelectionExpression":{"type":"string","description":"The route response selection expression for the route. Supported only for WebSocket APIs."},"target":{"type":"string","description":"The target for the route."}},"requiredInputs":["apiId","routeKey"]},"aws-native:apigatewayv2:RouteResponse":{"description":"The ``AWS::ApiGatewayV2::RouteResponse`` resource creates a route response for a WebSocket API. For more information, see [Set up Route Responses for a WebSocket API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-route-response.html) in the *API Gateway Developer Guide*.","properties":{"apiId":{"type":"string","description":"The API identifier.","replaceOnChanges":true},"modelSelectionExpression":{"type":"string","description":"The model selection expression for the route response. Supported only for WebSocket APIs."},"responseModels":{"$ref":"pulumi.json#/Any","description":"The response models for the route response.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::RouteResponse` for more information about the expected schema for this property."},"responseParameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:apigatewayv2:RouteResponseParameterConstraints"},"description":"The route response parameters."},"routeId":{"type":"string","description":"The route ID.","replaceOnChanges":true},"routeResponseId":{"type":"string","description":"The route response ID."},"routeResponseKey":{"type":"string","description":"The route response key."}},"type":"object","required":["apiId","routeId","routeResponseId","routeResponseKey"],"inputProperties":{"apiId":{"type":"string","description":"The API identifier."},"modelSelectionExpression":{"type":"string","description":"The model selection expression for the route response. Supported only for WebSocket APIs."},"responseModels":{"$ref":"pulumi.json#/Any","description":"The response models for the route response.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::RouteResponse` for more information about the expected schema for this property."},"responseParameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:apigatewayv2:RouteResponseParameterConstraints"},"description":"The route response parameters."},"routeId":{"type":"string","description":"The route ID."},"routeResponseKey":{"type":"string","description":"The route response key."}},"requiredInputs":["apiId","routeId","routeResponseKey"]},"aws-native:apigatewayv2:RoutingRule":{"description":"Schema for AWS::ApiGatewayV2::RoutingRule","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleAction"},"description":"The resulting action based on matching a routing rules condition. Only InvokeApi is supported."},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleCondition"},"description":"The conditions of the routing rule."},"domainNameArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name resource.","replaceOnChanges":true},"priority":{"type":"integer","description":"The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported."},"routingRuleArn":{"type":"string","description":"Amazon Resource Name (ARN) of the resource."},"routingRuleId":{"type":"string","description":"RoutingRule Id generated by service"}},"type":"object","required":["actions","conditions","domainNameArn","priority","routingRuleArn","routingRuleId"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleAction"},"description":"The resulting action based on matching a routing rules condition. Only InvokeApi is supported."},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleCondition"},"description":"The conditions of the routing rule."},"domainNameArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name resource."},"priority":{"type":"integer","description":"The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported."}},"requiredInputs":["actions","conditions","domainNameArn","priority"]},"aws-native:apigatewayv2:VpcLink":{"description":"The ``AWS::ApiGatewayV2::VpcLink`` resource creates a VPC link. Supported only for HTTP APIs. The VPC link status must transition from ``PENDING`` to ``AVAILABLE`` to successfully create a VPC link, which can take up to 10 minutes. To learn more, see [Working with VPC Links for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-vpc-links.html) in the *API Gateway Developer Guide*.","properties":{"name":{"type":"string","description":"The name of the VPC link."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs for the VPC link.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs to include in the VPC link.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The collection of tags. Each tag element is associated with a given resource."},"vpcLinkId":{"type":"string","description":"The VPC link ID."}},"type":"object","required":["name","subnetIds","vpcLinkId"],"inputProperties":{"name":{"type":"string","description":"The name of the VPC link."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs for the VPC link."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs to include in the VPC link."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The collection of tags. Each tag element is associated with a given resource."}},"requiredInputs":["subnetIds"]},"aws-native:appconfig:Application":{"description":"Resource Type definition for AWS::AppConfig::Application\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var dependentApplication = new AwsNative.AppConfig.Application(\"dependentApplication\", new()\n    {\n        Name = \"MyApplication\",\n    });\n\n    var dependentConfigurationProfile = new AwsNative.AppConfig.ConfigurationProfile(\"dependentConfigurationProfile\", new()\n    {\n        ApplicationId = \"DependentApplication\",\n        Name = \"MyTestProfile\",\n        LocationUri = \"hosted\",\n    });\n\n    var basicHostedConfigurationVersion = new AwsNative.AppConfig.HostedConfigurationVersion(\"basicHostedConfigurationVersion\", new()\n    {\n        ApplicationId = \"DependentApplication\",\n        ConfigurationProfileId = \"DependentConfigurationProfile\",\n        Description = \"A sample hosted configuration version\",\n        Content = \"My hosted configuration content\",\n        ContentType = \"text/plain\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := appconfig.NewApplication(ctx, \"dependentApplication\", \u0026appconfig.ApplicationArgs{\n\t\t\tName: pulumi.String(\"MyApplication\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = appconfig.NewConfigurationProfile(ctx, \"dependentConfigurationProfile\", \u0026appconfig.ConfigurationProfileArgs{\n\t\t\tApplicationId: pulumi.String(\"DependentApplication\"),\n\t\t\tName:          pulumi.String(\"MyTestProfile\"),\n\t\t\tLocationUri:   pulumi.String(\"hosted\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = appconfig.NewHostedConfigurationVersion(ctx, \"basicHostedConfigurationVersion\", \u0026appconfig.HostedConfigurationVersionArgs{\n\t\t\tApplicationId:          pulumi.String(\"DependentApplication\"),\n\t\t\tConfigurationProfileId: pulumi.String(\"DependentConfigurationProfile\"),\n\t\t\tDescription:            pulumi.String(\"A sample hosted configuration version\"),\n\t\t\tContent:                pulumi.String(\"My hosted configuration content\"),\n\t\t\tContentType:            pulumi.String(\"text/plain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst dependentApplication = new aws_native.appconfig.Application(\"dependentApplication\", {name: \"MyApplication\"});\nconst dependentConfigurationProfile = new aws_native.appconfig.ConfigurationProfile(\"dependentConfigurationProfile\", {\n    applicationId: \"DependentApplication\",\n    name: \"MyTestProfile\",\n    locationUri: \"hosted\",\n});\nconst basicHostedConfigurationVersion = new aws_native.appconfig.HostedConfigurationVersion(\"basicHostedConfigurationVersion\", {\n    applicationId: \"DependentApplication\",\n    configurationProfileId: \"DependentConfigurationProfile\",\n    description: \"A sample hosted configuration version\",\n    content: \"My hosted configuration content\",\n    contentType: \"text/plain\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndependent_application = aws_native.appconfig.Application(\"dependentApplication\", name=\"MyApplication\")\ndependent_configuration_profile = aws_native.appconfig.ConfigurationProfile(\"dependentConfigurationProfile\",\n    application_id=\"DependentApplication\",\n    name=\"MyTestProfile\",\n    location_uri=\"hosted\")\nbasic_hosted_configuration_version = aws_native.appconfig.HostedConfigurationVersion(\"basicHostedConfigurationVersion\",\n    application_id=\"DependentApplication\",\n    configuration_profile_id=\"DependentConfigurationProfile\",\n    description=\"A sample hosted configuration version\",\n    content=\"My hosted configuration content\",\n    content_type=\"text/plain\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var dependentApplication = new AwsNative.AppConfig.Application(\"dependentApplication\", new()\n    {\n        Name = \"MyApplication\",\n    });\n\n    var dependentConfigurationProfile = new AwsNative.AppConfig.ConfigurationProfile(\"dependentConfigurationProfile\", new()\n    {\n        ApplicationId = dependentApplication.Id,\n        Name = \"MyTestProfile\",\n        LocationUri = \"hosted\",\n    });\n\n    var basicHostedConfigurationVersion = new AwsNative.AppConfig.HostedConfigurationVersion(\"basicHostedConfigurationVersion\", new()\n    {\n        ApplicationId = dependentApplication.Id,\n        ConfigurationProfileId = dependentConfigurationProfile.Id,\n        Description = \"A sample hosted configuration version\",\n        Content = \"My hosted configuration content\",\n        ContentType = \"text/plain\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tdependentApplication, err := appconfig.NewApplication(ctx, \"dependentApplication\", \u0026appconfig.ApplicationArgs{\n\t\t\tName: pulumi.String(\"MyApplication\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdependentConfigurationProfile, err := appconfig.NewConfigurationProfile(ctx, \"dependentConfigurationProfile\", \u0026appconfig.ConfigurationProfileArgs{\n\t\t\tApplicationId: dependentApplication.ID(),\n\t\t\tName:          pulumi.String(\"MyTestProfile\"),\n\t\t\tLocationUri:   pulumi.String(\"hosted\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = appconfig.NewHostedConfigurationVersion(ctx, \"basicHostedConfigurationVersion\", \u0026appconfig.HostedConfigurationVersionArgs{\n\t\t\tApplicationId:          dependentApplication.ID(),\n\t\t\tConfigurationProfileId: dependentConfigurationProfile.ID(),\n\t\t\tDescription:            pulumi.String(\"A sample hosted configuration version\"),\n\t\t\tContent:                pulumi.String(\"My hosted configuration content\"),\n\t\t\tContentType:            pulumi.String(\"text/plain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst dependentApplication = new aws_native.appconfig.Application(\"dependentApplication\", {name: \"MyApplication\"});\nconst dependentConfigurationProfile = new aws_native.appconfig.ConfigurationProfile(\"dependentConfigurationProfile\", {\n    applicationId: dependentApplication.id,\n    name: \"MyTestProfile\",\n    locationUri: \"hosted\",\n});\nconst basicHostedConfigurationVersion = new aws_native.appconfig.HostedConfigurationVersion(\"basicHostedConfigurationVersion\", {\n    applicationId: dependentApplication.id,\n    configurationProfileId: dependentConfigurationProfile.id,\n    description: \"A sample hosted configuration version\",\n    content: \"My hosted configuration content\",\n    contentType: \"text/plain\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndependent_application = aws_native.appconfig.Application(\"dependentApplication\", name=\"MyApplication\")\ndependent_configuration_profile = aws_native.appconfig.ConfigurationProfile(\"dependentConfigurationProfile\",\n    application_id=dependent_application.id,\n    name=\"MyTestProfile\",\n    location_uri=\"hosted\")\nbasic_hosted_configuration_version = aws_native.appconfig.HostedConfigurationVersion(\"basicHostedConfigurationVersion\",\n    application_id=dependent_application.id,\n    configuration_profile_id=dependent_configuration_profile.id,\n    description=\"A sample hosted configuration version\",\n    content=\"My hosted configuration content\",\n    content_type=\"text/plain\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"applicationId":{"type":"string","description":"The application Id"},"description":{"type":"string","description":"A description of the application."},"name":{"type":"string","description":"A name for the application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata to assign to the application. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define."}},"type":"object","required":["applicationId","name"],"inputProperties":{"description":{"type":"string","description":"A description of the application."},"name":{"type":"string","description":"A name for the application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata to assign to the application. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define."}}},"aws-native:appconfig:ConfigurationProfile":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"applicationId":{"type":"string","description":"The application ID.","replaceOnChanges":true},"configurationProfileId":{"type":"string","description":"The configuration profile ID"},"deletionProtectionCheck":{"$ref":"#/types/aws-native:appconfig:ConfigurationProfileDeletionProtectionCheck","description":"On resource deletion this controls whether the Deletion Protection check should be applied, bypassed, or (the default) whether the behavior should be controlled by the account-level Deletion Protection setting. See https://docs.aws.amazon.com/appconfig/latest/userguide/deletion-protection.html"},"description":{"type":"string","description":"A description of the configuration profile."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name of the AWS Key Management Service key to encrypt new configuration data versions in the AWS AppConfig hosted configuration store. This attribute is only used for hosted configuration types. To encrypt data managed in other configuration stores, see the documentation for how to specify an AWS KMS key for that particular service."},"kmsKeyIdentifier":{"type":"string","description":"The AWS Key Management Service key identifier (key ID, key alias, or key ARN) provided when the resource was created or updated."},"locationUri":{"type":"string","description":"A URI to locate the configuration. You can specify the AWS AppConfig hosted configuration store, Systems Manager (SSM) document, an SSM Parameter Store parameter, or an Amazon S3 object.","replaceOnChanges":true},"name":{"type":"string","description":"A name for the configuration profile."},"retrievalRoleArn":{"type":"string","description":"The ARN of an IAM role with permission to access the configuration at the specified LocationUri."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata to assign to the configuration profile. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define."},"type":{"type":"string","description":"The type of configurations contained in the profile. When calling this API, enter one of the following values for Type: AWS.AppConfig.FeatureFlags, AWS.Freeform","replaceOnChanges":true},"validators":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:ConfigurationProfileValidators"},"description":"A list of methods for validating the configuration."}},"type":"object","required":["applicationId","configurationProfileId","kmsKeyArn","locationUri","name"],"inputProperties":{"applicationId":{"type":"string","description":"The application ID."},"deletionProtectionCheck":{"$ref":"#/types/aws-native:appconfig:ConfigurationProfileDeletionProtectionCheck","description":"On resource deletion this controls whether the Deletion Protection check should be applied, bypassed, or (the default) whether the behavior should be controlled by the account-level Deletion Protection setting. See https://docs.aws.amazon.com/appconfig/latest/userguide/deletion-protection.html"},"description":{"type":"string","description":"A description of the configuration profile."},"kmsKeyIdentifier":{"type":"string","description":"The AWS Key Management Service key identifier (key ID, key alias, or key ARN) provided when the resource was created or updated."},"locationUri":{"type":"string","description":"A URI to locate the configuration. You can specify the AWS AppConfig hosted configuration store, Systems Manager (SSM) document, an SSM Parameter Store parameter, or an Amazon S3 object."},"name":{"type":"string","description":"A name for the configuration profile."},"retrievalRoleArn":{"type":"string","description":"The ARN of an IAM role with permission to access the configuration at the specified LocationUri."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata to assign to the configuration profile. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define."},"type":{"type":"string","description":"The type of configurations contained in the profile. When calling this API, enter one of the following values for Type: AWS.AppConfig.FeatureFlags, AWS.Freeform"},"validators":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:ConfigurationProfileValidators"},"description":"A list of methods for validating the configuration."}},"requiredInputs":["applicationId","locationUri"]},"aws-native:appconfig:Deployment":{"description":"Resource Type definition for AWS::AppConfig::Deployment","properties":{"applicationId":{"type":"string","description":"The application ID.","replaceOnChanges":true},"configurationProfileId":{"type":"string","description":"The configuration profile ID.","replaceOnChanges":true},"configurationVersion":{"type":"string","description":"The configuration version to deploy. If deploying an AWS AppConfig hosted configuration version, you can specify either the version number or version label. For all other configurations, you must specify the version number.","replaceOnChanges":true},"deploymentNumber":{"type":"string","description":"The sequence number of the deployment."},"deploymentStrategyId":{"type":"string","description":"The deployment strategy ID.","replaceOnChanges":true},"description":{"type":"string","description":"A description of the deployment.","replaceOnChanges":true},"dynamicExtensionParameters":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:DeploymentDynamicExtensionParameters"},"description":"A map of dynamic extension parameter names to values to pass to associated extensions with `PRE_START_DEPLOYMENT` actions.","replaceOnChanges":true},"environmentId":{"type":"string","description":"The environment ID.","replaceOnChanges":true},"kmsKeyIdentifier":{"type":"string","description":"The AWS Key Management Service key identifier (key ID, key alias, or key ARN) provided when the resource was created or updated.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:appconfig:DeploymentState","description":"The state of the deployment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["applicationId","configurationProfileId","configurationVersion","deploymentNumber","deploymentStrategyId","environmentId","state"],"inputProperties":{"applicationId":{"type":"string","description":"The application ID."},"configurationProfileId":{"type":"string","description":"The configuration profile ID."},"configurationVersion":{"type":"string","description":"The configuration version to deploy. If deploying an AWS AppConfig hosted configuration version, you can specify either the version number or version label. For all other configurations, you must specify the version number."},"deploymentStrategyId":{"type":"string","description":"The deployment strategy ID."},"description":{"type":"string","description":"A description of the deployment."},"dynamicExtensionParameters":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:DeploymentDynamicExtensionParameters"},"description":"A map of dynamic extension parameter names to values to pass to associated extensions with `PRE_START_DEPLOYMENT` actions."},"environmentId":{"type":"string","description":"The environment ID."},"kmsKeyIdentifier":{"type":"string","description":"The AWS Key Management Service key identifier (key ID, key alias, or key ARN) provided when the resource was created or updated."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["applicationId","configurationProfileId","configurationVersion","deploymentStrategyId","environmentId"]},"aws-native:appconfig:DeploymentStrategy":{"description":"Resource Type definition for AWS::AppConfig::DeploymentStrategy\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicDeploymentStrategy = new AwsNative.AppConfig.DeploymentStrategy(\"basicDeploymentStrategy\", new()\n    {\n        Name = \"MyTestDeploymentStrategy\",\n        Description = \"A sample test deployment strategy.\",\n        DeploymentDurationInMinutes = 3,\n        FinalBakeTimeInMinutes = 4,\n        GrowthFactor = 10,\n        GrowthType = AwsNative.AppConfig.DeploymentStrategyGrowthType.Linear,\n        ReplicateTo = AwsNative.AppConfig.DeploymentStrategyReplicateTo.None,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Env\",\n                Value = \"test\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := appconfig.NewDeploymentStrategy(ctx, \"basicDeploymentStrategy\", \u0026appconfig.DeploymentStrategyArgs{\n\t\t\tName:                        pulumi.String(\"MyTestDeploymentStrategy\"),\n\t\t\tDescription:                 pulumi.String(\"A sample test deployment strategy.\"),\n\t\t\tDeploymentDurationInMinutes: pulumi.Float64(3),\n\t\t\tFinalBakeTimeInMinutes:      pulumi.Float64(4),\n\t\t\tGrowthFactor:                pulumi.Float64(10),\n\t\t\tGrowthType:                  appconfig.DeploymentStrategyGrowthTypeLinear,\n\t\t\tReplicateTo:                 appconfig.DeploymentStrategyReplicateToNone,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Env\"),\n\t\t\t\t\tValue: pulumi.String(\"test\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicDeploymentStrategy = new aws_native.appconfig.DeploymentStrategy(\"basicDeploymentStrategy\", {\n    name: \"MyTestDeploymentStrategy\",\n    description: \"A sample test deployment strategy.\",\n    deploymentDurationInMinutes: 3,\n    finalBakeTimeInMinutes: 4,\n    growthFactor: 10,\n    growthType: aws_native.appconfig.DeploymentStrategyGrowthType.Linear,\n    replicateTo: aws_native.appconfig.DeploymentStrategyReplicateTo.None,\n    tags: [{\n        key: \"Env\",\n        value: \"test\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_deployment_strategy = aws_native.appconfig.DeploymentStrategy(\"basicDeploymentStrategy\",\n    name=\"MyTestDeploymentStrategy\",\n    description=\"A sample test deployment strategy.\",\n    deployment_duration_in_minutes=3,\n    final_bake_time_in_minutes=4,\n    growth_factor=10,\n    growth_type=aws_native.appconfig.DeploymentStrategyGrowthType.LINEAR,\n    replicate_to=aws_native.appconfig.DeploymentStrategyReplicateTo.NONE,\n    tags=[{\n        \"key\": \"Env\",\n        \"value\": \"test\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The deployment strategy ID."},"deploymentDurationInMinutes":{"type":"number","description":"Total amount of time for a deployment to last."},"description":{"type":"string","description":"A description of the deployment strategy."},"finalBakeTimeInMinutes":{"type":"number","description":"Specifies the amount of time AWS AppConfig monitors for Amazon CloudWatch alarms after the configuration has been deployed to 100% of its targets, before considering the deployment to be complete. If an alarm is triggered during this time, AWS AppConfig rolls back the deployment. You must configure permissions for AWS AppConfig to roll back based on CloudWatch alarms. For more information, see Configuring permissions for rollback based on Amazon CloudWatch alarms in the AWS AppConfig User Guide."},"growthFactor":{"type":"number","description":"The percentage of targets to receive a deployed configuration during each interval."},"growthType":{"$ref":"#/types/aws-native:appconfig:DeploymentStrategyGrowthType","description":"The algorithm used to define how percentage grows over time. AWS AppConfig supports the following growth types:\n\nLinear: For this type, AWS AppConfig processes the deployment by dividing the total number of targets by the value specified for Step percentage. For example, a linear deployment that uses a Step percentage of 10 deploys the configuration to 10 percent of the hosts. After those deployments are complete, the system deploys the configuration to the next 10 percent. This continues until 100% of the targets have successfully received the configuration.\n\nExponential: For this type, AWS AppConfig processes the deployment exponentially using the following formula: G*(2^N). In this formula, G is the growth factor specified by the user and N is the number of steps until the configuration is deployed to all targets. For example, if you specify a growth factor of 2, then the system rolls out the configuration as follows:\n\n2*(2^0)\n\n2*(2^1)\n\n2*(2^2)\n\nExpressed numerically, the deployment rolls out as follows: 2% of the targets, 4% of the targets, 8% of the targets, and continues until the configuration has been deployed to all targets."},"name":{"type":"string","description":"A name for the deployment strategy.","replaceOnChanges":true},"replicateTo":{"$ref":"#/types/aws-native:appconfig:DeploymentStrategyReplicateTo","description":"Save the deployment strategy to a Systems Manager (SSM) document.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Assigns metadata to an AWS AppConfig resource. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define. You can specify a maximum of 50 tags for a resource."}},"type":"object","required":["awsId","deploymentDurationInMinutes","growthFactor","name","replicateTo"],"inputProperties":{"deploymentDurationInMinutes":{"type":"number","description":"Total amount of time for a deployment to last."},"description":{"type":"string","description":"A description of the deployment strategy."},"finalBakeTimeInMinutes":{"type":"number","description":"Specifies the amount of time AWS AppConfig monitors for Amazon CloudWatch alarms after the configuration has been deployed to 100% of its targets, before considering the deployment to be complete. If an alarm is triggered during this time, AWS AppConfig rolls back the deployment. You must configure permissions for AWS AppConfig to roll back based on CloudWatch alarms. For more information, see Configuring permissions for rollback based on Amazon CloudWatch alarms in the AWS AppConfig User Guide."},"growthFactor":{"type":"number","description":"The percentage of targets to receive a deployed configuration during each interval."},"growthType":{"$ref":"#/types/aws-native:appconfig:DeploymentStrategyGrowthType","description":"The algorithm used to define how percentage grows over time. AWS AppConfig supports the following growth types:\n\nLinear: For this type, AWS AppConfig processes the deployment by dividing the total number of targets by the value specified for Step percentage. For example, a linear deployment that uses a Step percentage of 10 deploys the configuration to 10 percent of the hosts. After those deployments are complete, the system deploys the configuration to the next 10 percent. This continues until 100% of the targets have successfully received the configuration.\n\nExponential: For this type, AWS AppConfig processes the deployment exponentially using the following formula: G*(2^N). In this formula, G is the growth factor specified by the user and N is the number of steps until the configuration is deployed to all targets. For example, if you specify a growth factor of 2, then the system rolls out the configuration as follows:\n\n2*(2^0)\n\n2*(2^1)\n\n2*(2^2)\n\nExpressed numerically, the deployment rolls out as follows: 2% of the targets, 4% of the targets, 8% of the targets, and continues until the configuration has been deployed to all targets."},"name":{"type":"string","description":"A name for the deployment strategy."},"replicateTo":{"$ref":"#/types/aws-native:appconfig:DeploymentStrategyReplicateTo","description":"Save the deployment strategy to a Systems Manager (SSM) document."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Assigns metadata to an AWS AppConfig resource. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define. You can specify a maximum of 50 tags for a resource."}},"requiredInputs":["deploymentDurationInMinutes","growthFactor","replicateTo"]},"aws-native:appconfig:Environment":{"description":"Resource Type definition for AWS::AppConfig::Environment","properties":{"applicationId":{"type":"string","description":"The application ID.","replaceOnChanges":true},"deletionProtectionCheck":{"$ref":"#/types/aws-native:appconfig:EnvironmentDeletionProtectionCheck","description":"On resource deletion this controls whether the Deletion Protection check should be applied, bypassed, or (the default) whether the behavior should be controlled by the account-level Deletion Protection setting. See https://docs.aws.amazon.com/appconfig/latest/userguide/deletion-protection.html"},"description":{"type":"string","description":"A description of the environment."},"environmentId":{"type":"string","description":"The environment ID."},"monitors":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:EnvironmentMonitor"},"description":"Amazon CloudWatch alarms to monitor during the deployment process."},"name":{"type":"string","description":"A name for the environment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata to assign to the environment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define."}},"type":"object","required":["applicationId","environmentId","name"],"inputProperties":{"applicationId":{"type":"string","description":"The application ID."},"deletionProtectionCheck":{"$ref":"#/types/aws-native:appconfig:EnvironmentDeletionProtectionCheck","description":"On resource deletion this controls whether the Deletion Protection check should be applied, bypassed, or (the default) whether the behavior should be controlled by the account-level Deletion Protection setting. See https://docs.aws.amazon.com/appconfig/latest/userguide/deletion-protection.html"},"description":{"type":"string","description":"A description of the environment."},"monitors":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:EnvironmentMonitor"},"description":"Amazon CloudWatch alarms to monitor during the deployment process."},"name":{"type":"string","description":"A name for the environment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata to assign to the environment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define."}},"requiredInputs":["applicationId"]},"aws-native:appconfig:Extension":{"description":"Resource Type definition for AWS::AppConfig::Extension\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicExtension = new AwsNative.AppConfig.Extension(\"basicExtension\", new()\n    {\n        Name = \"My Test Extension\",\n        Description = \"My test extension\",\n        LatestVersionNumber = 0,\n        Actions = \n        {\n            { \"pre_create_hosted_configuration_version\", new[]\n            {\n                new AwsNative.AppConfig.Inputs.ExtensionActionArgs\n                {\n                    Name = \"My Test Action\",\n                    Uri = \"DependentLambda.Arn\",\n                    RoleArn = \"DependentRole.Arn\",\n                    Description = \"My test action point\",\n                },\n            } },\n        },\n        Parameters = \n        {\n            { \"myTestParam\", new AwsNative.AppConfig.Inputs.ExtensionParameterArgs\n            {\n                Required = false,\n                Description = \"My test parameter\",\n            } },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Ext\",\n                Value = \"Test\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appconfig\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := appconfig.NewExtension(ctx, \"basicExtension\", \u0026appconfig.ExtensionArgs{\n\t\t\tName:                pulumi.String(\"My Test Extension\"),\n\t\t\tDescription:         pulumi.String(\"My test extension\"),\n\t\t\tLatestVersionNumber: pulumi.Int(0),\n\t\t\tActions: appconfig.ExtensionActionArrayMap{\n\t\t\t\t\"pre_create_hosted_configuration_version\": appconfig.ExtensionActionArray{\n\t\t\t\t\t\u0026appconfig.ExtensionActionArgs{\n\t\t\t\t\t\tName:        pulumi.String(\"My Test Action\"),\n\t\t\t\t\t\tUri:         pulumi.String(\"DependentLambda.Arn\"),\n\t\t\t\t\t\tRoleArn:     pulumi.String(\"DependentRole.Arn\"),\n\t\t\t\t\t\tDescription: pulumi.String(\"My test action point\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: appconfig.ExtensionParameterMap{\n\t\t\t\t\"myTestParam\": \u0026appconfig.ExtensionParameterArgs{\n\t\t\t\t\tRequired:    pulumi.Bool(false),\n\t\t\t\t\tDescription: pulumi.String(\"My test parameter\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Ext\"),\n\t\t\t\t\tValue: pulumi.String(\"Test\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicExtension = new aws_native.appconfig.Extension(\"basicExtension\", {\n    name: \"My Test Extension\",\n    description: \"My test extension\",\n    latestVersionNumber: 0,\n    actions: {\n        pre_create_hosted_configuration_version: [{\n            name: \"My Test Action\",\n            uri: \"DependentLambda.Arn\",\n            roleArn: \"DependentRole.Arn\",\n            description: \"My test action point\",\n        }],\n    },\n    parameters: {\n        myTestParam: {\n            required: false,\n            description: \"My test parameter\",\n        },\n    },\n    tags: [{\n        key: \"Ext\",\n        value: \"Test\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_extension = aws_native.appconfig.Extension(\"basicExtension\",\n    name=\"My Test Extension\",\n    description=\"My test extension\",\n    latest_version_number=0,\n    actions={\n        \"pre_create_hosted_configuration_version\": [{\n            \"name\": \"My Test Action\",\n            \"uri\": \"DependentLambda.Arn\",\n            \"role_arn\": \"DependentRole.Arn\",\n            \"description\": \"My test action point\",\n        }],\n    },\n    parameters={\n        \"myTestParam\": {\n            \"required\": False,\n            \"description\": \"My test parameter\",\n        },\n    },\n    tags=[{\n        \"key\": \"Ext\",\n        \"value\": \"Test\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"actions":{"type":"object","additionalProperties":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:ExtensionAction"}},"description":"The actions defined in the extension."},"arn":{"type":"string","description":"The system-generated Amazon Resource Name (ARN) for the extension."},"awsId":{"type":"string","description":"The system-generated ID of the extension."},"description":{"type":"string","description":"Description of the extension."},"latestVersionNumber":{"type":"integer","description":"You can omit this field when you create an extension. When you create a new version, specify the most recent current version number. For example, you create version 3, enter 2 for this field."},"name":{"type":"string","description":"Name of the extension.","replaceOnChanges":true},"parameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:appconfig:ExtensionParameter"},"description":"The parameters accepted by the extension. You specify parameter values when you associate the extension to an AWS AppConfig resource by using the `CreateExtensionAssociation` API action. For AWS Lambda extension actions, these parameters are included in the Lambda request object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value tags to apply to this resource."},"versionNumber":{"type":"integer","description":"The extension version number."}},"type":"object","required":["actions","arn","awsId","name","versionNumber"],"inputProperties":{"actions":{"type":"object","additionalProperties":{"type":"array","items":{"$ref":"#/types/aws-native:appconfig:ExtensionAction"}},"description":"The actions defined in the extension."},"description":{"type":"string","description":"Description of the extension."},"latestVersionNumber":{"type":"integer","description":"You can omit this field when you create an extension. When you create a new version, specify the most recent current version number. For example, you create version 3, enter 2 for this field."},"name":{"type":"string","description":"Name of the extension."},"parameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:appconfig:ExtensionParameter"},"description":"The parameters accepted by the extension. You specify parameter values when you associate the extension to an AWS AppConfig resource by using the `CreateExtensionAssociation` API action. For AWS Lambda extension actions, these parameters are included in the Lambda request object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value tags to apply to this resource."}},"requiredInputs":["actions"]},"aws-native:appconfig:ExtensionAssociation":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"arn":{"type":"string","description":"The ARN of the extension defined in the association."},"awsId":{"type":"string","description":"The system-generated ID for the association."},"extensionArn":{"type":"string","description":"The ARN of the extension defined in the association."},"extensionIdentifier":{"type":"string","description":"The name, the ID, or the Amazon Resource Name (ARN) of the extension.","replaceOnChanges":true},"extensionVersionNumber":{"type":"integer","description":"The version number of the extension. If not specified, AWS AppConfig uses the maximum version of the extension.","replaceOnChanges":true},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The parameter names and values defined in the extensions. Extension parameters marked `Required` must be entered for this field."},"resourceArn":{"type":"string","description":"The ARNs of applications, configuration profiles, or environments defined in the association."},"resourceIdentifier":{"type":"string","description":"The ARN of an application, configuration profile, or environment.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","extensionArn","resourceArn"],"inputProperties":{"extensionIdentifier":{"type":"string","description":"The name, the ID, or the Amazon Resource Name (ARN) of the extension."},"extensionVersionNumber":{"type":"integer","description":"The version number of the extension. If not specified, AWS AppConfig uses the maximum version of the extension."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The parameter names and values defined in the extensions. Extension parameters marked `Required` must be entered for this field."},"resourceIdentifier":{"type":"string","description":"The ARN of an application, configuration profile, or environment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:appconfig:HostedConfigurationVersion":{"description":"Resource Type definition for AWS::AppConfig::HostedConfigurationVersion","properties":{"applicationId":{"type":"string","description":"The application ID.","replaceOnChanges":true},"configurationProfileId":{"type":"string","description":"The configuration profile ID.","replaceOnChanges":true},"content":{"type":"string","description":"The content of the configuration or the configuration data.","replaceOnChanges":true},"contentType":{"type":"string","description":"A standard MIME type describing the format of the configuration content.","replaceOnChanges":true},"description":{"type":"string","description":"A description of the hosted configuration version.","replaceOnChanges":true},"latestVersionNumber":{"type":"integer","description":"An optional locking token used to prevent race conditions from overwriting configuration updates when creating a new version. To ensure your data is not overwritten when creating multiple hosted configuration versions in rapid succession, specify the version number of the latest hosted configuration version.","replaceOnChanges":true},"versionLabel":{"type":"string","description":"A user-defined label for an AWS AppConfig hosted configuration version.","replaceOnChanges":true},"versionNumber":{"type":"string","description":"Current version number of hosted configuration version."}},"type":"object","required":["applicationId","configurationProfileId","content","contentType","versionNumber"],"inputProperties":{"applicationId":{"type":"string","description":"The application ID."},"configurationProfileId":{"type":"string","description":"The configuration profile ID."},"content":{"type":"string","description":"The content of the configuration or the configuration data."},"contentType":{"type":"string","description":"A standard MIME type describing the format of the configuration content."},"description":{"type":"string","description":"A description of the hosted configuration version."},"latestVersionNumber":{"type":"integer","description":"An optional locking token used to prevent race conditions from overwriting configuration updates when creating a new version. To ensure your data is not overwritten when creating multiple hosted configuration versions in rapid succession, specify the version number of the latest hosted configuration version."},"versionLabel":{"type":"string","description":"A user-defined label for an AWS AppConfig hosted configuration version."}},"requiredInputs":["applicationId","configurationProfileId","content","contentType"]},"aws-native:appflow:Connector":{"description":"Resource schema for AWS::AppFlow::Connector","properties":{"connectorArn":{"type":"string","description":" The arn of the connector. The arn is unique for each ConnectorRegistration in your AWS account."},"connectorLabel":{"type":"string","description":" The name of the connector. The name is unique for each ConnectorRegistration in your AWS account.","replaceOnChanges":true},"connectorProvisioningConfig":{"$ref":"#/types/aws-native:appflow:ConnectorProvisioningConfig","description":"Contains information about the configuration of the connector being registered."},"connectorProvisioningType":{"type":"string","description":"The provisioning type of the connector. Currently the only supported value is LAMBDA. "},"description":{"type":"string","description":"A description about the connector that's being registered."}},"type":"object","required":["connectorArn","connectorProvisioningConfig","connectorProvisioningType"],"inputProperties":{"connectorLabel":{"type":"string","description":" The name of the connector. The name is unique for each ConnectorRegistration in your AWS account."},"connectorProvisioningConfig":{"$ref":"#/types/aws-native:appflow:ConnectorProvisioningConfig","description":"Contains information about the configuration of the connector being registered."},"connectorProvisioningType":{"type":"string","description":"The provisioning type of the connector. Currently the only supported value is LAMBDA. "},"description":{"type":"string","description":"A description about the connector that's being registered."}},"requiredInputs":["connectorProvisioningConfig","connectorProvisioningType"]},"aws-native:appflow:ConnectorProfile":{"description":"Resource Type definition for AWS::AppFlow::ConnectorProfile","properties":{"connectionMode":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectionMode","description":"Mode in which data transfer should be enabled. Private connection mode is currently enabled for Salesforce, Snowflake, Trendmicro and Singular"},"connectorLabel":{"type":"string","description":"The label of the connector. The label is unique for each ConnectorRegistration in your AWS account. Only needed if calling for CUSTOMCONNECTOR connector type/.","replaceOnChanges":true},"connectorProfileArn":{"type":"string","description":"Unique identifier for connector profile resources"},"connectorProfileConfig":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConfig","description":"Connector specific configurations needed to create connector profile"},"connectorProfileName":{"type":"string","description":"The maximum number of items to retrieve in a single batch.","replaceOnChanges":true},"connectorType":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorType","description":"List of Saas providers that need connector profile to be created","replaceOnChanges":true},"credentialsArn":{"type":"string","description":"A unique Arn for Connector-Profile resource"},"kmsArn":{"type":"string","description":"The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key."}},"type":"object","required":["connectionMode","connectorProfileArn","connectorProfileName","connectorType","credentialsArn"],"inputProperties":{"connectionMode":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectionMode","description":"Mode in which data transfer should be enabled. Private connection mode is currently enabled for Salesforce, Snowflake, Trendmicro and Singular"},"connectorLabel":{"type":"string","description":"The label of the connector. The label is unique for each ConnectorRegistration in your AWS account. Only needed if calling for CUSTOMCONNECTOR connector type/."},"connectorProfileConfig":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConfig","description":"Connector specific configurations needed to create connector profile"},"connectorProfileName":{"type":"string","description":"The maximum number of items to retrieve in a single batch."},"connectorType":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectorType","description":"List of Saas providers that need connector profile to be created"},"kmsArn":{"type":"string","description":"The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key."}},"requiredInputs":["connectionMode","connectorType"]},"aws-native:appflow:Flow":{"description":"Resource schema for AWS::AppFlow::Flow.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testFlow = new AwsNative.AppFlow.Flow(\"testFlow\", new()\n    {\n        FlowName = \"MyEventFlow\",\n        Description = \"Test event flow for CloudFormation from salesforce to s3\",\n        TriggerConfig = new AwsNative.AppFlow.Inputs.FlowTriggerConfigArgs\n        {\n            TriggerType = AwsNative.AppFlow.FlowTriggerType.Event,\n        },\n        SourceFlowConfig = new AwsNative.AppFlow.Inputs.FlowSourceFlowConfigArgs\n        {\n            ConnectorType = AwsNative.AppFlow.FlowConnectorType.Salesforce,\n            ConnectorProfileName = \"TestConnectorProfile\",\n            SourceConnectorProperties = new AwsNative.AppFlow.Inputs.FlowSourceConnectorPropertiesArgs\n            {\n                Salesforce = new AwsNative.AppFlow.Inputs.FlowSalesforceSourcePropertiesArgs\n                {\n                    Object = \"Account\",\n                    EnableDynamicFieldUpdate = false,\n                    IncludeDeletedRecords = true,\n                },\n            },\n        },\n        DestinationFlowConfigList = new[]\n        {\n            new AwsNative.AppFlow.Inputs.FlowDestinationFlowConfigArgs\n            {\n                ConnectorType = AwsNative.AppFlow.FlowConnectorType.S3,\n                DestinationConnectorProperties = new AwsNative.AppFlow.Inputs.FlowDestinationConnectorPropertiesArgs\n                {\n                    S3 = new AwsNative.AppFlow.Inputs.FlowS3DestinationPropertiesArgs\n                    {\n                        BucketName = \"TestOutputBucket\",\n                        S3OutputFormatConfig = new AwsNative.AppFlow.Inputs.FlowS3OutputFormatConfigArgs\n                        {\n                            FileType = AwsNative.AppFlow.FlowFileType.Json,\n                            AggregationConfig = new AwsNative.AppFlow.Inputs.FlowAggregationConfigArgs\n                            {\n                                AggregationType = AwsNative.AppFlow.FlowAggregationType.None,\n                            },\n                        },\n                    },\n                },\n            },\n        },\n        Tasks = new[]\n        {\n            new AwsNative.AppFlow.Inputs.FlowTaskArgs\n            {\n                TaskType = AwsNative.AppFlow.FlowTaskType.Filter,\n                SourceFields = new[]\n                {\n                    \"Id\",\n                    \"Name\",\n                },\n                ConnectorOperator = new AwsNative.AppFlow.Inputs.FlowConnectorOperatorArgs\n                {\n                    Salesforce = AwsNative.AppFlow.FlowSalesforceConnectorOperator.Projection,\n                },\n            },\n            new AwsNative.AppFlow.Inputs.FlowTaskArgs\n            {\n                TaskType = AwsNative.AppFlow.FlowTaskType.Map,\n                SourceFields = new[]\n                {\n                    \"Id\",\n                },\n                TaskProperties = new[]\n                {\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.SourceDataType,\n                        Value = \"id\",\n                    },\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.DestinationDataType,\n                        Value = \"id\",\n                    },\n                },\n                DestinationField = \"Id\",\n                ConnectorOperator = new AwsNative.AppFlow.Inputs.FlowConnectorOperatorArgs\n                {\n                    Salesforce = AwsNative.AppFlow.FlowSalesforceConnectorOperator.NoOp,\n                },\n            },\n            new AwsNative.AppFlow.Inputs.FlowTaskArgs\n            {\n                TaskType = AwsNative.AppFlow.FlowTaskType.Map,\n                SourceFields = new[]\n                {\n                    \"Name\",\n                },\n                TaskProperties = new[]\n                {\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.SourceDataType,\n                        Value = \"string\",\n                    },\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.DestinationDataType,\n                        Value = \"string\",\n                    },\n                },\n                DestinationField = \"Name\",\n                ConnectorOperator = new AwsNative.AppFlow.Inputs.FlowConnectorOperatorArgs\n                {\n                    Salesforce = AwsNative.AppFlow.FlowSalesforceConnectorOperator.NoOp,\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"testKey\",\n                Value = \"testValue\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appflow\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := appflow.NewFlow(ctx, \"testFlow\", \u0026appflow.FlowArgs{\n\t\t\tFlowName:    pulumi.String(\"MyEventFlow\"),\n\t\t\tDescription: pulumi.String(\"Test event flow for CloudFormation from salesforce to s3\"),\n\t\t\tTriggerConfig: \u0026appflow.FlowTriggerConfigArgs{\n\t\t\t\tTriggerType: appflow.FlowTriggerTypeEvent,\n\t\t\t},\n\t\t\tSourceFlowConfig: \u0026appflow.FlowSourceFlowConfigArgs{\n\t\t\t\tConnectorType:        appflow.FlowConnectorTypeSalesforce,\n\t\t\t\tConnectorProfileName: pulumi.String(\"TestConnectorProfile\"),\n\t\t\t\tSourceConnectorProperties: \u0026appflow.FlowSourceConnectorPropertiesArgs{\n\t\t\t\t\tSalesforce: \u0026appflow.FlowSalesforceSourcePropertiesArgs{\n\t\t\t\t\t\tObject:                   pulumi.String(\"Account\"),\n\t\t\t\t\t\tEnableDynamicFieldUpdate: pulumi.Bool(false),\n\t\t\t\t\t\tIncludeDeletedRecords:    pulumi.Bool(true),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tDestinationFlowConfigList: appflow.FlowDestinationFlowConfigArray{\n\t\t\t\t\u0026appflow.FlowDestinationFlowConfigArgs{\n\t\t\t\t\tConnectorType: appflow.FlowConnectorTypeS3,\n\t\t\t\t\tDestinationConnectorProperties: \u0026appflow.FlowDestinationConnectorPropertiesArgs{\n\t\t\t\t\t\tS3: \u0026appflow.FlowS3DestinationPropertiesArgs{\n\t\t\t\t\t\t\tBucketName: pulumi.String(\"TestOutputBucket\"),\n\t\t\t\t\t\t\tS3OutputFormatConfig: \u0026appflow.FlowS3OutputFormatConfigArgs{\n\t\t\t\t\t\t\t\tFileType: appflow.FlowFileTypeJson,\n\t\t\t\t\t\t\t\tAggregationConfig: \u0026appflow.FlowAggregationConfigArgs{\n\t\t\t\t\t\t\t\t\tAggregationType: appflow.FlowAggregationTypeNone,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTasks: appflow.FlowTaskArray{\n\t\t\t\t\u0026appflow.FlowTaskArgs{\n\t\t\t\t\tTaskType: appflow.FlowTaskTypeFilter,\n\t\t\t\t\tSourceFields: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Id\"),\n\t\t\t\t\t\tpulumi.String(\"Name\"),\n\t\t\t\t\t},\n\t\t\t\t\tConnectorOperator: \u0026appflow.FlowConnectorOperatorArgs{\n\t\t\t\t\t\tSalesforce: appflow.FlowSalesforceConnectorOperatorProjection,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026appflow.FlowTaskArgs{\n\t\t\t\t\tTaskType: appflow.FlowTaskTypeMap,\n\t\t\t\t\tSourceFields: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Id\"),\n\t\t\t\t\t},\n\t\t\t\t\tTaskProperties: appflow.FlowTaskPropertiesObjectArray{\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysSourceDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"id\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysDestinationDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"id\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tDestinationField: pulumi.String(\"Id\"),\n\t\t\t\t\tConnectorOperator: \u0026appflow.FlowConnectorOperatorArgs{\n\t\t\t\t\t\tSalesforce: appflow.FlowSalesforceConnectorOperatorNoOp,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026appflow.FlowTaskArgs{\n\t\t\t\t\tTaskType: appflow.FlowTaskTypeMap,\n\t\t\t\t\tSourceFields: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Name\"),\n\t\t\t\t\t},\n\t\t\t\t\tTaskProperties: appflow.FlowTaskPropertiesObjectArray{\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysSourceDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"string\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysDestinationDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"string\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tDestinationField: pulumi.String(\"Name\"),\n\t\t\t\t\tConnectorOperator: \u0026appflow.FlowConnectorOperatorArgs{\n\t\t\t\t\t\tSalesforce: appflow.FlowSalesforceConnectorOperatorNoOp,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"testKey\"),\n\t\t\t\t\tValue: pulumi.String(\"testValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testFlow = new aws_native.appflow.Flow(\"testFlow\", {\n    flowName: \"MyEventFlow\",\n    description: \"Test event flow for CloudFormation from salesforce to s3\",\n    triggerConfig: {\n        triggerType: aws_native.appflow.FlowTriggerType.Event,\n    },\n    sourceFlowConfig: {\n        connectorType: aws_native.appflow.FlowConnectorType.Salesforce,\n        connectorProfileName: \"TestConnectorProfile\",\n        sourceConnectorProperties: {\n            salesforce: {\n                object: \"Account\",\n                enableDynamicFieldUpdate: false,\n                includeDeletedRecords: true,\n            },\n        },\n    },\n    destinationFlowConfigList: [{\n        connectorType: aws_native.appflow.FlowConnectorType.S3,\n        destinationConnectorProperties: {\n            s3: {\n                bucketName: \"TestOutputBucket\",\n                s3OutputFormatConfig: {\n                    fileType: aws_native.appflow.FlowFileType.Json,\n                    aggregationConfig: {\n                        aggregationType: aws_native.appflow.FlowAggregationType.None,\n                    },\n                },\n            },\n        },\n    }],\n    tasks: [\n        {\n            taskType: aws_native.appflow.FlowTaskType.Filter,\n            sourceFields: [\n                \"Id\",\n                \"Name\",\n            ],\n            connectorOperator: {\n                salesforce: aws_native.appflow.FlowSalesforceConnectorOperator.Projection,\n            },\n        },\n        {\n            taskType: aws_native.appflow.FlowTaskType.Map,\n            sourceFields: [\"Id\"],\n            taskProperties: [\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.SourceDataType,\n                    value: \"id\",\n                },\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.DestinationDataType,\n                    value: \"id\",\n                },\n            ],\n            destinationField: \"Id\",\n            connectorOperator: {\n                salesforce: aws_native.appflow.FlowSalesforceConnectorOperator.NoOp,\n            },\n        },\n        {\n            taskType: aws_native.appflow.FlowTaskType.Map,\n            sourceFields: [\"Name\"],\n            taskProperties: [\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.SourceDataType,\n                    value: \"string\",\n                },\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.DestinationDataType,\n                    value: \"string\",\n                },\n            ],\n            destinationField: \"Name\",\n            connectorOperator: {\n                salesforce: aws_native.appflow.FlowSalesforceConnectorOperator.NoOp,\n            },\n        },\n    ],\n    tags: [{\n        key: \"testKey\",\n        value: \"testValue\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_flow = aws_native.appflow.Flow(\"testFlow\",\n    flow_name=\"MyEventFlow\",\n    description=\"Test event flow for CloudFormation from salesforce to s3\",\n    trigger_config={\n        \"trigger_type\": aws_native.appflow.FlowTriggerType.EVENT,\n    },\n    source_flow_config={\n        \"connector_type\": aws_native.appflow.FlowConnectorType.SALESFORCE,\n        \"connector_profile_name\": \"TestConnectorProfile\",\n        \"source_connector_properties\": {\n            \"salesforce\": {\n                \"object\": \"Account\",\n                \"enable_dynamic_field_update\": False,\n                \"include_deleted_records\": True,\n            },\n        },\n    },\n    destination_flow_config_list=[{\n        \"connector_type\": aws_native.appflow.FlowConnectorType.S3,\n        \"destination_connector_properties\": {\n            \"s3\": {\n                \"bucket_name\": \"TestOutputBucket\",\n                \"s3_output_format_config\": {\n                    \"file_type\": aws_native.appflow.FlowFileType.JSON,\n                    \"aggregation_config\": {\n                        \"aggregation_type\": aws_native.appflow.FlowAggregationType.NONE,\n                    },\n                },\n            },\n        },\n    }],\n    tasks=[\n        {\n            \"task_type\": aws_native.appflow.FlowTaskType.FILTER,\n            \"source_fields\": [\n                \"Id\",\n                \"Name\",\n            ],\n            \"connector_operator\": {\n                \"salesforce\": aws_native.appflow.FlowSalesforceConnectorOperator.PROJECTION,\n            },\n        },\n        {\n            \"task_type\": aws_native.appflow.FlowTaskType.MAP,\n            \"source_fields\": [\"Id\"],\n            \"task_properties\": [\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.SOURCE_DATA_TYPE,\n                    \"value\": \"id\",\n                },\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.DESTINATION_DATA_TYPE,\n                    \"value\": \"id\",\n                },\n            ],\n            \"destination_field\": \"Id\",\n            \"connector_operator\": {\n                \"salesforce\": aws_native.appflow.FlowSalesforceConnectorOperator.NO_OP,\n            },\n        },\n        {\n            \"task_type\": aws_native.appflow.FlowTaskType.MAP,\n            \"source_fields\": [\"Name\"],\n            \"task_properties\": [\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.SOURCE_DATA_TYPE,\n                    \"value\": \"string\",\n                },\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.DESTINATION_DATA_TYPE,\n                    \"value\": \"string\",\n                },\n            ],\n            \"destination_field\": \"Name\",\n            \"connector_operator\": {\n                \"salesforce\": aws_native.appflow.FlowSalesforceConnectorOperator.NO_OP,\n            },\n        },\n    ],\n    tags=[{\n        \"key\": \"testKey\",\n        \"value\": \"testValue\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testFlow = new AwsNative.AppFlow.Flow(\"testFlow\", new()\n    {\n        FlowName = \"MyEventFlow\",\n        Description = \"Test flow for CloudFormation from salesforce to s3\",\n        TriggerConfig = new AwsNative.AppFlow.Inputs.FlowTriggerConfigArgs\n        {\n            TriggerType = AwsNative.AppFlow.FlowTriggerType.Event,\n        },\n        SourceFlowConfig = new AwsNative.AppFlow.Inputs.FlowSourceFlowConfigArgs\n        {\n            ConnectorType = AwsNative.AppFlow.FlowConnectorType.Salesforce,\n            ConnectorProfileName = \"TestConnectorProfile\",\n            SourceConnectorProperties = new AwsNative.AppFlow.Inputs.FlowSourceConnectorPropertiesArgs\n            {\n                Salesforce = new AwsNative.AppFlow.Inputs.FlowSalesforceSourcePropertiesArgs\n                {\n                    Object = \"Account\",\n                    EnableDynamicFieldUpdate = false,\n                    IncludeDeletedRecords = true,\n                },\n            },\n        },\n        DestinationFlowConfigList = new[]\n        {\n            new AwsNative.AppFlow.Inputs.FlowDestinationFlowConfigArgs\n            {\n                ConnectorType = AwsNative.AppFlow.FlowConnectorType.S3,\n                DestinationConnectorProperties = new AwsNative.AppFlow.Inputs.FlowDestinationConnectorPropertiesArgs\n                {\n                    S3 = new AwsNative.AppFlow.Inputs.FlowS3DestinationPropertiesArgs\n                    {\n                        BucketName = \"TestOutputBucket\",\n                        S3OutputFormatConfig = new AwsNative.AppFlow.Inputs.FlowS3OutputFormatConfigArgs\n                        {\n                            FileType = AwsNative.AppFlow.FlowFileType.Json,\n                            AggregationConfig = new AwsNative.AppFlow.Inputs.FlowAggregationConfigArgs\n                            {\n                                AggregationType = AwsNative.AppFlow.FlowAggregationType.None,\n                            },\n                        },\n                    },\n                },\n            },\n        },\n        Tasks = new[]\n        {\n            new AwsNative.AppFlow.Inputs.FlowTaskArgs\n            {\n                TaskType = AwsNative.AppFlow.FlowTaskType.Filter,\n                ConnectorOperator = new AwsNative.AppFlow.Inputs.FlowConnectorOperatorArgs\n                {\n                    Salesforce = AwsNative.AppFlow.FlowSalesforceConnectorOperator.Projection,\n                },\n                SourceFields = new[]\n                {\n                    \"Id\",\n                },\n            },\n            new AwsNative.AppFlow.Inputs.FlowTaskArgs\n            {\n                TaskType = AwsNative.AppFlow.FlowTaskType.Map,\n                SourceFields = new[]\n                {\n                    \"Id\",\n                },\n                TaskProperties = new[]\n                {\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.SourceDataType,\n                        Value = \"id\",\n                    },\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.DestinationDataType,\n                        Value = \"id\",\n                    },\n                },\n                DestinationField = \"Id\",\n                ConnectorOperator = new AwsNative.AppFlow.Inputs.FlowConnectorOperatorArgs\n                {\n                    Salesforce = AwsNative.AppFlow.FlowSalesforceConnectorOperator.NoOp,\n                },\n            },\n            new AwsNative.AppFlow.Inputs.FlowTaskArgs\n            {\n                TaskType = AwsNative.AppFlow.FlowTaskType.Map,\n                SourceFields = new[]\n                {\n                    \"Name\",\n                },\n                TaskProperties = new[]\n                {\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.SourceDataType,\n                        Value = \"string\",\n                    },\n                    new AwsNative.AppFlow.Inputs.FlowTaskPropertiesObjectArgs\n                    {\n                        Key = AwsNative.AppFlow.FlowOperatorPropertiesKeys.DestinationDataType,\n                        Value = \"string\",\n                    },\n                },\n                DestinationField = \"Name\",\n                ConnectorOperator = new AwsNative.AppFlow.Inputs.FlowConnectorOperatorArgs\n                {\n                    Salesforce = AwsNative.AppFlow.FlowSalesforceConnectorOperator.NoOp,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appflow\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := appflow.NewFlow(ctx, \"testFlow\", \u0026appflow.FlowArgs{\n\t\t\tFlowName:    pulumi.String(\"MyEventFlow\"),\n\t\t\tDescription: pulumi.String(\"Test flow for CloudFormation from salesforce to s3\"),\n\t\t\tTriggerConfig: \u0026appflow.FlowTriggerConfigArgs{\n\t\t\t\tTriggerType: appflow.FlowTriggerTypeEvent,\n\t\t\t},\n\t\t\tSourceFlowConfig: \u0026appflow.FlowSourceFlowConfigArgs{\n\t\t\t\tConnectorType:        appflow.FlowConnectorTypeSalesforce,\n\t\t\t\tConnectorProfileName: pulumi.String(\"TestConnectorProfile\"),\n\t\t\t\tSourceConnectorProperties: \u0026appflow.FlowSourceConnectorPropertiesArgs{\n\t\t\t\t\tSalesforce: \u0026appflow.FlowSalesforceSourcePropertiesArgs{\n\t\t\t\t\t\tObject:                   pulumi.String(\"Account\"),\n\t\t\t\t\t\tEnableDynamicFieldUpdate: pulumi.Bool(false),\n\t\t\t\t\t\tIncludeDeletedRecords:    pulumi.Bool(true),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tDestinationFlowConfigList: appflow.FlowDestinationFlowConfigArray{\n\t\t\t\t\u0026appflow.FlowDestinationFlowConfigArgs{\n\t\t\t\t\tConnectorType: appflow.FlowConnectorTypeS3,\n\t\t\t\t\tDestinationConnectorProperties: \u0026appflow.FlowDestinationConnectorPropertiesArgs{\n\t\t\t\t\t\tS3: \u0026appflow.FlowS3DestinationPropertiesArgs{\n\t\t\t\t\t\t\tBucketName: pulumi.String(\"TestOutputBucket\"),\n\t\t\t\t\t\t\tS3OutputFormatConfig: \u0026appflow.FlowS3OutputFormatConfigArgs{\n\t\t\t\t\t\t\t\tFileType: appflow.FlowFileTypeJson,\n\t\t\t\t\t\t\t\tAggregationConfig: \u0026appflow.FlowAggregationConfigArgs{\n\t\t\t\t\t\t\t\t\tAggregationType: appflow.FlowAggregationTypeNone,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTasks: appflow.FlowTaskArray{\n\t\t\t\t\u0026appflow.FlowTaskArgs{\n\t\t\t\t\tTaskType: appflow.FlowTaskTypeFilter,\n\t\t\t\t\tConnectorOperator: \u0026appflow.FlowConnectorOperatorArgs{\n\t\t\t\t\t\tSalesforce: appflow.FlowSalesforceConnectorOperatorProjection,\n\t\t\t\t\t},\n\t\t\t\t\tSourceFields: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Id\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026appflow.FlowTaskArgs{\n\t\t\t\t\tTaskType: appflow.FlowTaskTypeMap,\n\t\t\t\t\tSourceFields: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Id\"),\n\t\t\t\t\t},\n\t\t\t\t\tTaskProperties: appflow.FlowTaskPropertiesObjectArray{\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysSourceDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"id\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysDestinationDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"id\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tDestinationField: pulumi.String(\"Id\"),\n\t\t\t\t\tConnectorOperator: \u0026appflow.FlowConnectorOperatorArgs{\n\t\t\t\t\t\tSalesforce: appflow.FlowSalesforceConnectorOperatorNoOp,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026appflow.FlowTaskArgs{\n\t\t\t\t\tTaskType: appflow.FlowTaskTypeMap,\n\t\t\t\t\tSourceFields: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Name\"),\n\t\t\t\t\t},\n\t\t\t\t\tTaskProperties: appflow.FlowTaskPropertiesObjectArray{\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysSourceDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"string\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026appflow.FlowTaskPropertiesObjectArgs{\n\t\t\t\t\t\t\tKey:   appflow.FlowOperatorPropertiesKeysDestinationDataType,\n\t\t\t\t\t\t\tValue: pulumi.String(\"string\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tDestinationField: pulumi.String(\"Name\"),\n\t\t\t\t\tConnectorOperator: \u0026appflow.FlowConnectorOperatorArgs{\n\t\t\t\t\t\tSalesforce: appflow.FlowSalesforceConnectorOperatorNoOp,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testFlow = new aws_native.appflow.Flow(\"testFlow\", {\n    flowName: \"MyEventFlow\",\n    description: \"Test flow for CloudFormation from salesforce to s3\",\n    triggerConfig: {\n        triggerType: aws_native.appflow.FlowTriggerType.Event,\n    },\n    sourceFlowConfig: {\n        connectorType: aws_native.appflow.FlowConnectorType.Salesforce,\n        connectorProfileName: \"TestConnectorProfile\",\n        sourceConnectorProperties: {\n            salesforce: {\n                object: \"Account\",\n                enableDynamicFieldUpdate: false,\n                includeDeletedRecords: true,\n            },\n        },\n    },\n    destinationFlowConfigList: [{\n        connectorType: aws_native.appflow.FlowConnectorType.S3,\n        destinationConnectorProperties: {\n            s3: {\n                bucketName: \"TestOutputBucket\",\n                s3OutputFormatConfig: {\n                    fileType: aws_native.appflow.FlowFileType.Json,\n                    aggregationConfig: {\n                        aggregationType: aws_native.appflow.FlowAggregationType.None,\n                    },\n                },\n            },\n        },\n    }],\n    tasks: [\n        {\n            taskType: aws_native.appflow.FlowTaskType.Filter,\n            connectorOperator: {\n                salesforce: aws_native.appflow.FlowSalesforceConnectorOperator.Projection,\n            },\n            sourceFields: [\"Id\"],\n        },\n        {\n            taskType: aws_native.appflow.FlowTaskType.Map,\n            sourceFields: [\"Id\"],\n            taskProperties: [\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.SourceDataType,\n                    value: \"id\",\n                },\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.DestinationDataType,\n                    value: \"id\",\n                },\n            ],\n            destinationField: \"Id\",\n            connectorOperator: {\n                salesforce: aws_native.appflow.FlowSalesforceConnectorOperator.NoOp,\n            },\n        },\n        {\n            taskType: aws_native.appflow.FlowTaskType.Map,\n            sourceFields: [\"Name\"],\n            taskProperties: [\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.SourceDataType,\n                    value: \"string\",\n                },\n                {\n                    key: aws_native.appflow.FlowOperatorPropertiesKeys.DestinationDataType,\n                    value: \"string\",\n                },\n            ],\n            destinationField: \"Name\",\n            connectorOperator: {\n                salesforce: aws_native.appflow.FlowSalesforceConnectorOperator.NoOp,\n            },\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_flow = aws_native.appflow.Flow(\"testFlow\",\n    flow_name=\"MyEventFlow\",\n    description=\"Test flow for CloudFormation from salesforce to s3\",\n    trigger_config={\n        \"trigger_type\": aws_native.appflow.FlowTriggerType.EVENT,\n    },\n    source_flow_config={\n        \"connector_type\": aws_native.appflow.FlowConnectorType.SALESFORCE,\n        \"connector_profile_name\": \"TestConnectorProfile\",\n        \"source_connector_properties\": {\n            \"salesforce\": {\n                \"object\": \"Account\",\n                \"enable_dynamic_field_update\": False,\n                \"include_deleted_records\": True,\n            },\n        },\n    },\n    destination_flow_config_list=[{\n        \"connector_type\": aws_native.appflow.FlowConnectorType.S3,\n        \"destination_connector_properties\": {\n            \"s3\": {\n                \"bucket_name\": \"TestOutputBucket\",\n                \"s3_output_format_config\": {\n                    \"file_type\": aws_native.appflow.FlowFileType.JSON,\n                    \"aggregation_config\": {\n                        \"aggregation_type\": aws_native.appflow.FlowAggregationType.NONE,\n                    },\n                },\n            },\n        },\n    }],\n    tasks=[\n        {\n            \"task_type\": aws_native.appflow.FlowTaskType.FILTER,\n            \"connector_operator\": {\n                \"salesforce\": aws_native.appflow.FlowSalesforceConnectorOperator.PROJECTION,\n            },\n            \"source_fields\": [\"Id\"],\n        },\n        {\n            \"task_type\": aws_native.appflow.FlowTaskType.MAP,\n            \"source_fields\": [\"Id\"],\n            \"task_properties\": [\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.SOURCE_DATA_TYPE,\n                    \"value\": \"id\",\n                },\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.DESTINATION_DATA_TYPE,\n                    \"value\": \"id\",\n                },\n            ],\n            \"destination_field\": \"Id\",\n            \"connector_operator\": {\n                \"salesforce\": aws_native.appflow.FlowSalesforceConnectorOperator.NO_OP,\n            },\n        },\n        {\n            \"task_type\": aws_native.appflow.FlowTaskType.MAP,\n            \"source_fields\": [\"Name\"],\n            \"task_properties\": [\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.SOURCE_DATA_TYPE,\n                    \"value\": \"string\",\n                },\n                {\n                    \"key\": aws_native.appflow.FlowOperatorPropertiesKeys.DESTINATION_DATA_TYPE,\n                    \"value\": \"string\",\n                },\n            ],\n            \"destination_field\": \"Name\",\n            \"connector_operator\": {\n                \"salesforce\": aws_native.appflow.FlowSalesforceConnectorOperator.NO_OP,\n            },\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"description":{"type":"string","description":"Description of the flow."},"destinationFlowConfigList":{"type":"array","items":{"$ref":"#/types/aws-native:appflow:FlowDestinationFlowConfig"},"description":"List of Destination connectors of the flow."},"flowArn":{"type":"string","description":"ARN identifier of the flow."},"flowName":{"type":"string","description":"Name of the flow.","replaceOnChanges":true},"flowStatus":{"$ref":"#/types/aws-native:appflow:FlowStatus","description":"Flow activation status for Scheduled- and Event-triggered flows"},"kmsArn":{"type":"string","description":"The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key.","replaceOnChanges":true},"metadataCatalogConfig":{"$ref":"#/types/aws-native:appflow:FlowMetadataCatalogConfig","description":"Configurations of metadata catalog of the flow."},"sourceFlowConfig":{"$ref":"#/types/aws-native:appflow:FlowSourceFlowConfig","description":"Configurations of Source connector of the flow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags."},"tasks":{"type":"array","items":{"$ref":"#/types/aws-native:appflow:FlowTask"},"description":"List of tasks for the flow."},"triggerConfig":{"$ref":"#/types/aws-native:appflow:FlowTriggerConfig","description":"Trigger settings of the flow."}},"type":"object","required":["destinationFlowConfigList","flowArn","flowName","sourceFlowConfig","tasks","triggerConfig"],"inputProperties":{"description":{"type":"string","description":"Description of the flow."},"destinationFlowConfigList":{"type":"array","items":{"$ref":"#/types/aws-native:appflow:FlowDestinationFlowConfig"},"description":"List of Destination connectors of the flow."},"flowName":{"type":"string","description":"Name of the flow."},"flowStatus":{"$ref":"#/types/aws-native:appflow:FlowStatus","description":"Flow activation status for Scheduled- and Event-triggered flows"},"kmsArn":{"type":"string","description":"The ARN of the AWS Key Management Service (AWS KMS) key that's used to encrypt your function's environment variables. If it's not provided, AWS Lambda uses a default service key."},"metadataCatalogConfig":{"$ref":"#/types/aws-native:appflow:FlowMetadataCatalogConfig","description":"Configurations of metadata catalog of the flow."},"sourceFlowConfig":{"$ref":"#/types/aws-native:appflow:FlowSourceFlowConfig","description":"Configurations of Source connector of the flow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags."},"tasks":{"type":"array","items":{"$ref":"#/types/aws-native:appflow:FlowTask"},"description":"List of tasks for the flow."},"triggerConfig":{"$ref":"#/types/aws-native:appflow:FlowTriggerConfig","description":"Trigger settings of the flow."}},"requiredInputs":["destinationFlowConfigList","sourceFlowConfig","tasks","triggerConfig"]},"aws-native:appintegrations:Application":{"description":"Resource Type definition for AWS:AppIntegrations::Application","properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the application."},"applicationConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationConfig","description":"The application configuration. Cannot be used when IsService is true."},"applicationSourceConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationSourceConfigProperties","description":"Application source config"},"awsId":{"type":"string","description":"The id of the application."},"description":{"type":"string","description":"The application description."},"iframeConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationIframeConfig","description":"The iframe configuration"},"initializationTimeout":{"type":"integer","description":"The initialization timeout in milliseconds. Required when IsService is true."},"isService":{"type":"boolean","description":"Indicates if the application is a service"},"name":{"type":"string","description":"The name of the application."},"namespace":{"type":"string","description":"The namespace of the application."},"permissions":{"type":"array","items":{"type":"string"},"description":"The configuration of events or requests that the application has access to."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the application."}},"type":"object","required":["applicationArn","applicationSourceConfig","awsId","description","name","namespace"],"inputProperties":{"applicationConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationConfig","description":"The application configuration. Cannot be used when IsService is true."},"applicationSourceConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationSourceConfigProperties","description":"Application source config"},"description":{"type":"string","description":"The application description."},"iframeConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationIframeConfig","description":"The iframe configuration"},"initializationTimeout":{"type":"integer","description":"The initialization timeout in milliseconds. Required when IsService is true."},"isService":{"type":"boolean","description":"Indicates if the application is a service"},"name":{"type":"string","description":"The name of the application."},"namespace":{"type":"string","description":"The namespace of the application."},"permissions":{"type":"array","items":{"type":"string"},"description":"The configuration of events or requests that the application has access to."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the application."}},"requiredInputs":["applicationSourceConfig","description","namespace"]},"aws-native:appintegrations:DataIntegration":{"description":"Resource Type definition for AWS::AppIntegrations::DataIntegration","properties":{"awsId":{"type":"string","description":"The unique identifer of the data integration."},"dataIntegrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data integration."},"description":{"type":"string","description":"The data integration description."},"fileConfiguration":{"$ref":"#/types/aws-native:appintegrations:DataIntegrationFileConfiguration","description":"The configuration for what files should be pulled from the source."},"kmsKey":{"type":"string","description":"The KMS key of the data integration.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the data integration."},"objectConfiguration":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The configuration for what data should be pulled from the source."},"scheduleConfig":{"$ref":"#/types/aws-native:appintegrations:DataIntegrationScheduleConfig","description":"The name of the data and how often it should be pulled from the source.","replaceOnChanges":true},"sourceUri":{"type":"string","description":"The URI of the data source.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the data integration."}},"type":"object","required":["awsId","dataIntegrationArn","kmsKey","name","sourceUri"],"inputProperties":{"description":{"type":"string","description":"The data integration description."},"fileConfiguration":{"$ref":"#/types/aws-native:appintegrations:DataIntegrationFileConfiguration","description":"The configuration for what files should be pulled from the source."},"kmsKey":{"type":"string","description":"The KMS key of the data integration."},"name":{"type":"string","description":"The name of the data integration."},"objectConfiguration":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The configuration for what data should be pulled from the source."},"scheduleConfig":{"$ref":"#/types/aws-native:appintegrations:DataIntegrationScheduleConfig","description":"The name of the data and how often it should be pulled from the source."},"sourceUri":{"type":"string","description":"The URI of the data source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the data integration."}},"requiredInputs":["kmsKey","sourceUri"]},"aws-native:appintegrations:EventIntegration":{"description":"Resource Type definition for AWS::AppIntegrations::EventIntegration","properties":{"description":{"type":"string","description":"The event integration description."},"eventBridgeBus":{"type":"string","description":"The Amazon Eventbridge bus for the event integration.","replaceOnChanges":true},"eventFilter":{"$ref":"#/types/aws-native:appintegrations:EventIntegrationEventFilter","description":"The EventFilter (source) associated with the event integration.","replaceOnChanges":true},"eventIntegrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the event integration."},"name":{"type":"string","description":"The name of the event integration.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the event integration."}},"type":"object","required":["eventBridgeBus","eventFilter","eventIntegrationArn","name"],"inputProperties":{"description":{"type":"string","description":"The event integration description."},"eventBridgeBus":{"type":"string","description":"The Amazon Eventbridge bus for the event integration."},"eventFilter":{"$ref":"#/types/aws-native:appintegrations:EventIntegrationEventFilter","description":"The EventFilter (source) associated with the event integration."},"name":{"type":"string","description":"The name of the event integration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the event integration."}},"requiredInputs":["eventBridgeBus","eventFilter"]},"aws-native:applicationautoscaling:ScalableTarget":{"description":"The ``AWS::ApplicationAutoScaling::ScalableTarget`` resource specifies a resource that Application Auto Scaling can scale, such as an AWS::DynamoDB::Table or AWS::ECS::Service resource.\n For more information, see [Getting started](https://docs.aws.amazon.com/autoscaling/application/userguide/getting-started.html) in the *Application Auto Scaling User Guide*.\n  If the resource that you want Application Auto Scaling to scale is not yet created in your account, add a dependency on the resource when registering it as a scalable target using the [DependsOn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) attribute.","properties":{"awsId":{"type":"string"},"maxCapacity":{"type":"integer","description":"The maximum value that you plan to scale out to. When a scaling policy is in effect, Application Auto Scaling can scale out (expand) as needed to the maximum capacity limit in response to changing demand."},"minCapacity":{"type":"integer","description":"The minimum value that you plan to scale in to. When a scaling policy is in effect, Application Auto Scaling can scale in (contract) as needed to the minimum capacity limit in response to changing demand."},"resourceId":{"type":"string","description":"The identifier of the resource associated with the scalable target. This string consists of the resource type and unique identifier.\n  +  ECS service - The resource type is ``service`` and the unique identifier is the cluster name and service name. Example: ``service/my-cluster/my-service``.\n  +  Spot Fleet - The resource type is ``spot-fleet-request`` and the unique identifier is the Spot Fleet request ID. Example: ``spot-fleet-request/sfr-73fbd2ce-aa30-494c-8788-1cee4EXAMPLE``.\n  +  EMR cluster - The resource type is ``instancegroup`` and the unique identifier is the cluster ID and instance group ID. Example: ``instancegroup/j-2EEZNYKUA1NTV/ig-1791Y4E1L8YI0``.\n  +  AppStream 2.0 fleet - The resource type is ``fleet`` and the unique identifier is the fleet name. Example: ``fleet/sample-fleet``.\n  +  DynamoDB table - The resource type is ``table`` and the unique identifier is the table name. Example: ``table/my-table``.\n  +  DynamoDB global secondary index - The resource type is ``index`` and the unique identifier is the index name. Example: ``table/my-table/index/my-table-index``.\n  +  Aurora DB cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:my-db-cluster``.\n  +  SageMaker endpoint variant - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  Custom resources are not supported with a resource type. This parameter must specify the ``OutputValue`` from the CloudFormation template stack used to access the resources. The unique identifier is defined by the service provider. More information is available in our [GitHub repository](https://docs.aws.amazon.com/https://github.com/aws/aws-auto-scaling-custom-resource).\n  +  Amazon Comprehend document classification endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:document-classifier-endpoint/EXAMPLE``.\n  +  Amazon Comprehend entity recognizer endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:entity-recognizer-endpoint/EXAMPLE``.\n  +  Lambda provisioned concurrency - The resource type is ``function`` and the unique identifier is the function name with a function version or alias name suffix that is not ``$LATEST``. Example: ``function:my-function:prod`` or ``function:my-function:1``.\n  +  Amazon Keyspaces table - The resource type is ``table`` and the unique identifier is the table name. Example: ``keyspace/mykeyspace/table/mytable``.\n  +  Amazon MSK cluster - The resource type and unique identifier are specified using the cluster ARN. Example: ``arn:aws:kafka:us-east-1:123456789012:cluster/demo-cluster-1/6357e0b2-0e6a-4b86-a0b4-70df934c2e31-5``.\n  +  Amazon ElastiCache replication group - The resource type is ``replication-group`` and the unique identifier is the replication group name. Example: ``replication-group/mycluster``.\n  +  Amazon ElastiCache cache cluster - The resource type is ``cache-cluster`` and the unique identifier is the cache cluster name. Example: ``cache-cluster/mycluster``.\n  +  Neptune cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:mycluster``.\n  +  SageMaker serverless endpoint - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  SageMaker inference component - The resource type is ``inference-component`` and the unique identifier is the resource ID. Example: ``inference-component/my-inference-component``.\n  +  Pool of WorkSpaces - The resource type is ``workspacespool`` and the unique identifier is the pool ID. Example: ``workspacespool/wspool-123456``.","replaceOnChanges":true},"roleArn":{"type":"string","description":"Specify the Amazon Resource Name (ARN) of an Identity and Access Management (IAM) role that allows Application Auto Scaling to modify the scalable target on your behalf. This can be either an IAM service role that Application Auto Scaling can assume to make calls to other AWS resources on your behalf, or a service-linked role for the specified service. For more information, see [How Application Auto Scaling works with IAM](https://docs.aws.amazon.com/autoscaling/application/userguide/security_iam_service-with-iam.html) in the *Application Auto Scaling User Guide*.\n To automatically create a service-linked role (recommended), specify the full ARN of the service-linked role in your stack template. To find the exact ARN of the service-linked role for your AWS or custom resource, see the [Service-linked roles](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-service-linked-roles.html) topic in the *Application Auto Scaling User Guide*. Look for the ARN in the table at the bottom of the page."},"scalableDimension":{"type":"string","description":"The scalable dimension associated with the scalable target. This string consists of the service namespace, resource type, and scaling property.\n  +  ``ecs:service:DesiredCount`` - The task count of an ECS service.\n  +  ``elasticmapreduce:instancegroup:InstanceCount`` - The instance count of an EMR Instance Group.\n  +  ``ec2:spot-fleet-request:TargetCapacity`` - The target capacity of a Spot Fleet.\n  +  ``appstream:fleet:DesiredCapacity`` - The capacity of an AppStream 2.0 fleet.\n  +  ``dynamodb:table:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB table.\n  +  ``dynamodb:table:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB table.\n  +  ``dynamodb:index:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB global secondary index.\n  +  ``dynamodb:index:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB global secondary index.\n  +  ``rds:cluster:ReadReplicaCount`` - The count of Aurora Replicas in an Aurora DB cluster. Available for Aurora MySQL-compatible edition and Aurora PostgreSQL-compatible edition.\n  +  ``sagemaker:variant:DesiredInstanceCount`` - The number of EC2 instances for a SageMaker model endpoint variant.\n  +  ``custom-resource:ResourceType:Property`` - The scalable dimension for a custom resource provided by your own application or service.\n  +  ``comprehend:document-classifier-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend document classification endpoint.\n  +  ``comprehend:entity-recognizer-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend entity recognizer endpoint.\n  +  ``lambda:function:ProvisionedConcurrency`` - The provisioned concurrency for a Lambda function.\n  +  ``cassandra:table:ReadCapacityUnits`` - The provisioned read capacity for an Amazon Keyspaces table.\n  +  ``cassandra:table:WriteCapacityUnits`` - The provisioned write capacity for an Amazon Keyspaces table.\n  +  ``kafka:broker-storage:VolumeSize`` - The provisioned volume size (in GiB) for brokers in an Amazon MSK cluster.\n  +  ``elasticache:cache-cluster:Nodes`` - The number of nodes for an Amazon ElastiCache cache cluster.\n  +  ``elasticache:replication-group:NodeGroups`` - The number of node groups for an Amazon ElastiCache replication group.\n  +  ``elasticache:replication-group:Replicas`` - The number of replicas per node group for an Amazon ElastiCache replication group.\n  +  ``neptune:cluster:ReadReplicaCount`` - The count of read replicas in an Amazon Neptune DB cluster.\n  +  ``sagemaker:variant:DesiredProvisionedConcurrency`` - The provisioned concurrency for a SageMaker serverless endpoint.\n  +  ``sagemaker:inference-component:DesiredCopyCount`` - The number of copies across an endpoint for a SageMaker inference component.\n  +  ``workspaces:workspacespool:DesiredUserSessions`` - The number of user sessions for the WorkSpaces in the pool.","replaceOnChanges":true},"scheduledActions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetScheduledAction"},"description":"The scheduled actions for the scalable target. Duplicates aren't allowed."},"serviceNamespace":{"type":"string","description":"The namespace of the AWS service that provides the resource, or a ``custom-resource``.","replaceOnChanges":true},"suspendedState":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetSuspendedState","description":"An embedded object that contains attributes and attribute values that are used to suspend and resume automatic scaling. Setting the value of an attribute to ``true`` suspends the specified scaling activities. Setting it to ``false`` (default) resumes the specified scaling activities. \n  *Suspension Outcomes* \n  +  For ``DynamicScalingInSuspended``, while a suspension is in effect, all scale-in activities that are triggered by a scaling policy are suspended.\n  +  For ``DynamicScalingOutSuspended``, while a suspension is in effect, all scale-out activities that are triggered by a scaling policy are suspended.\n  +  For ``ScheduledScalingSuspended``, while a suspension is in effect, all scaling activities that involve scheduled actions are suspended."}},"type":"object","required":["awsId","maxCapacity","minCapacity","resourceId","scalableDimension","serviceNamespace"],"inputProperties":{"maxCapacity":{"type":"integer","description":"The maximum value that you plan to scale out to. When a scaling policy is in effect, Application Auto Scaling can scale out (expand) as needed to the maximum capacity limit in response to changing demand."},"minCapacity":{"type":"integer","description":"The minimum value that you plan to scale in to. When a scaling policy is in effect, Application Auto Scaling can scale in (contract) as needed to the minimum capacity limit in response to changing demand."},"resourceId":{"type":"string","description":"The identifier of the resource associated with the scalable target. This string consists of the resource type and unique identifier.\n  +  ECS service - The resource type is ``service`` and the unique identifier is the cluster name and service name. Example: ``service/my-cluster/my-service``.\n  +  Spot Fleet - The resource type is ``spot-fleet-request`` and the unique identifier is the Spot Fleet request ID. Example: ``spot-fleet-request/sfr-73fbd2ce-aa30-494c-8788-1cee4EXAMPLE``.\n  +  EMR cluster - The resource type is ``instancegroup`` and the unique identifier is the cluster ID and instance group ID. Example: ``instancegroup/j-2EEZNYKUA1NTV/ig-1791Y4E1L8YI0``.\n  +  AppStream 2.0 fleet - The resource type is ``fleet`` and the unique identifier is the fleet name. Example: ``fleet/sample-fleet``.\n  +  DynamoDB table - The resource type is ``table`` and the unique identifier is the table name. Example: ``table/my-table``.\n  +  DynamoDB global secondary index - The resource type is ``index`` and the unique identifier is the index name. Example: ``table/my-table/index/my-table-index``.\n  +  Aurora DB cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:my-db-cluster``.\n  +  SageMaker endpoint variant - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  Custom resources are not supported with a resource type. This parameter must specify the ``OutputValue`` from the CloudFormation template stack used to access the resources. The unique identifier is defined by the service provider. More information is available in our [GitHub repository](https://docs.aws.amazon.com/https://github.com/aws/aws-auto-scaling-custom-resource).\n  +  Amazon Comprehend document classification endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:document-classifier-endpoint/EXAMPLE``.\n  +  Amazon Comprehend entity recognizer endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:entity-recognizer-endpoint/EXAMPLE``.\n  +  Lambda provisioned concurrency - The resource type is ``function`` and the unique identifier is the function name with a function version or alias name suffix that is not ``$LATEST``. Example: ``function:my-function:prod`` or ``function:my-function:1``.\n  +  Amazon Keyspaces table - The resource type is ``table`` and the unique identifier is the table name. Example: ``keyspace/mykeyspace/table/mytable``.\n  +  Amazon MSK cluster - The resource type and unique identifier are specified using the cluster ARN. Example: ``arn:aws:kafka:us-east-1:123456789012:cluster/demo-cluster-1/6357e0b2-0e6a-4b86-a0b4-70df934c2e31-5``.\n  +  Amazon ElastiCache replication group - The resource type is ``replication-group`` and the unique identifier is the replication group name. Example: ``replication-group/mycluster``.\n  +  Amazon ElastiCache cache cluster - The resource type is ``cache-cluster`` and the unique identifier is the cache cluster name. Example: ``cache-cluster/mycluster``.\n  +  Neptune cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:mycluster``.\n  +  SageMaker serverless endpoint - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  SageMaker inference component - The resource type is ``inference-component`` and the unique identifier is the resource ID. Example: ``inference-component/my-inference-component``.\n  +  Pool of WorkSpaces - The resource type is ``workspacespool`` and the unique identifier is the pool ID. Example: ``workspacespool/wspool-123456``."},"roleArn":{"type":"string","description":"Specify the Amazon Resource Name (ARN) of an Identity and Access Management (IAM) role that allows Application Auto Scaling to modify the scalable target on your behalf. This can be either an IAM service role that Application Auto Scaling can assume to make calls to other AWS resources on your behalf, or a service-linked role for the specified service. For more information, see [How Application Auto Scaling works with IAM](https://docs.aws.amazon.com/autoscaling/application/userguide/security_iam_service-with-iam.html) in the *Application Auto Scaling User Guide*.\n To automatically create a service-linked role (recommended), specify the full ARN of the service-linked role in your stack template. To find the exact ARN of the service-linked role for your AWS or custom resource, see the [Service-linked roles](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-service-linked-roles.html) topic in the *Application Auto Scaling User Guide*. Look for the ARN in the table at the bottom of the page."},"scalableDimension":{"type":"string","description":"The scalable dimension associated with the scalable target. This string consists of the service namespace, resource type, and scaling property.\n  +  ``ecs:service:DesiredCount`` - The task count of an ECS service.\n  +  ``elasticmapreduce:instancegroup:InstanceCount`` - The instance count of an EMR Instance Group.\n  +  ``ec2:spot-fleet-request:TargetCapacity`` - The target capacity of a Spot Fleet.\n  +  ``appstream:fleet:DesiredCapacity`` - The capacity of an AppStream 2.0 fleet.\n  +  ``dynamodb:table:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB table.\n  +  ``dynamodb:table:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB table.\n  +  ``dynamodb:index:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB global secondary index.\n  +  ``dynamodb:index:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB global secondary index.\n  +  ``rds:cluster:ReadReplicaCount`` - The count of Aurora Replicas in an Aurora DB cluster. Available for Aurora MySQL-compatible edition and Aurora PostgreSQL-compatible edition.\n  +  ``sagemaker:variant:DesiredInstanceCount`` - The number of EC2 instances for a SageMaker model endpoint variant.\n  +  ``custom-resource:ResourceType:Property`` - The scalable dimension for a custom resource provided by your own application or service.\n  +  ``comprehend:document-classifier-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend document classification endpoint.\n  +  ``comprehend:entity-recognizer-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend entity recognizer endpoint.\n  +  ``lambda:function:ProvisionedConcurrency`` - The provisioned concurrency for a Lambda function.\n  +  ``cassandra:table:ReadCapacityUnits`` - The provisioned read capacity for an Amazon Keyspaces table.\n  +  ``cassandra:table:WriteCapacityUnits`` - The provisioned write capacity for an Amazon Keyspaces table.\n  +  ``kafka:broker-storage:VolumeSize`` - The provisioned volume size (in GiB) for brokers in an Amazon MSK cluster.\n  +  ``elasticache:cache-cluster:Nodes`` - The number of nodes for an Amazon ElastiCache cache cluster.\n  +  ``elasticache:replication-group:NodeGroups`` - The number of node groups for an Amazon ElastiCache replication group.\n  +  ``elasticache:replication-group:Replicas`` - The number of replicas per node group for an Amazon ElastiCache replication group.\n  +  ``neptune:cluster:ReadReplicaCount`` - The count of read replicas in an Amazon Neptune DB cluster.\n  +  ``sagemaker:variant:DesiredProvisionedConcurrency`` - The provisioned concurrency for a SageMaker serverless endpoint.\n  +  ``sagemaker:inference-component:DesiredCopyCount`` - The number of copies across an endpoint for a SageMaker inference component.\n  +  ``workspaces:workspacespool:DesiredUserSessions`` - The number of user sessions for the WorkSpaces in the pool."},"scheduledActions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetScheduledAction"},"description":"The scheduled actions for the scalable target. Duplicates aren't allowed."},"serviceNamespace":{"type":"string","description":"The namespace of the AWS service that provides the resource, or a ``custom-resource``."},"suspendedState":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetSuspendedState","description":"An embedded object that contains attributes and attribute values that are used to suspend and resume automatic scaling. Setting the value of an attribute to ``true`` suspends the specified scaling activities. Setting it to ``false`` (default) resumes the specified scaling activities. \n  *Suspension Outcomes* \n  +  For ``DynamicScalingInSuspended``, while a suspension is in effect, all scale-in activities that are triggered by a scaling policy are suspended.\n  +  For ``DynamicScalingOutSuspended``, while a suspension is in effect, all scale-out activities that are triggered by a scaling policy are suspended.\n  +  For ``ScheduledScalingSuspended``, while a suspension is in effect, all scaling activities that involve scheduled actions are suspended."}},"requiredInputs":["maxCapacity","minCapacity","resourceId","scalableDimension","serviceNamespace"]},"aws-native:applicationautoscaling:ScalingPolicy":{"description":"The ``AWS::ApplicationAutoScaling::ScalingPolicy`` resource defines a scaling policy that Application Auto Scaling uses to adjust the capacity of a scalable target. \n For more information, see [Target tracking scaling policies](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-target-tracking.html) and [Step scaling policies](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-step-scaling-policies.html) in the *Application Auto Scaling User Guide*.","properties":{"arn":{"type":"string","description":"Returns the ARN of a scaling policy."},"policyName":{"type":"string","description":"The name of the scaling policy.\n Updates to the name of a target tracking scaling policy are not supported, unless you also update the metric used for scaling. To change only a target tracking scaling policy's name, first delete the policy by removing the existing ``AWS::ApplicationAutoScaling::ScalingPolicy`` resource from the template and updating the stack. Then, recreate the resource with the same settings and a different name.","replaceOnChanges":true},"policyType":{"type":"string","description":"The scaling policy type.\n The following policy types are supported: \n ``TargetTrackingScaling``—Not supported for Amazon EMR\n ``StepScaling``—Not supported for DynamoDB, Amazon Comprehend, Lambda, Amazon Keyspaces, Amazon MSK, Amazon ElastiCache, or Neptune.\n ``PredictiveScaling``—Only supported for Amazon ECS"},"predictiveScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPolicyConfiguration","description":"The predictive scaling policy configuration."},"resourceId":{"type":"string","description":"The identifier of the resource associated with the scaling policy. This string consists of the resource type and unique identifier.\n  +  ECS service - The resource type is ``service`` and the unique identifier is the cluster name and service name. Example: ``service/my-cluster/my-service``.\n  +  Spot Fleet - The resource type is ``spot-fleet-request`` and the unique identifier is the Spot Fleet request ID. Example: ``spot-fleet-request/sfr-73fbd2ce-aa30-494c-8788-1cee4EXAMPLE``.\n  +  EMR cluster - The resource type is ``instancegroup`` and the unique identifier is the cluster ID and instance group ID. Example: ``instancegroup/j-2EEZNYKUA1NTV/ig-1791Y4E1L8YI0``.\n  +  AppStream 2.0 fleet - The resource type is ``fleet`` and the unique identifier is the fleet name. Example: ``fleet/sample-fleet``.\n  +  DynamoDB table - The resource type is ``table`` and the unique identifier is the table name. Example: ``table/my-table``.\n  +  DynamoDB global secondary index - The resource type is ``index`` and the unique identifier is the index name. Example: ``table/my-table/index/my-table-index``.\n  +  Aurora DB cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:my-db-cluster``.\n  +  SageMaker endpoint variant - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  Custom resources are not supported with a resource type. This parameter must specify the ``OutputValue`` from the CloudFormation template stack used to access the resources. The unique identifier is defined by the service provider. More information is available in our [GitHub repository](https://docs.aws.amazon.com/https://github.com/aws/aws-auto-scaling-custom-resource).\n  +  Amazon Comprehend document classification endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:document-classifier-endpoint/EXAMPLE``.\n  +  Amazon Comprehend entity recognizer endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:entity-recognizer-endpoint/EXAMPLE``.\n  +  Lambda provisioned concurrency - The resource type is ``function`` and the unique identifier is the function name with a function version or alias name suffix that is not ``$LATEST``. Example: ``function:my-function:prod`` or ``function:my-function:1``.\n  +  Amazon Keyspaces table - The resource type is ``table`` and the unique identifier is the table name. Example: ``keyspace/mykeyspace/table/mytable``.\n  +  Amazon MSK cluster - The resource type and unique identifier are specified using the cluster ARN. Example: ``arn:aws:kafka:us-east-1:123456789012:cluster/demo-cluster-1/6357e0b2-0e6a-4b86-a0b4-70df934c2e31-5``.\n  +  Amazon ElastiCache replication group - The resource type is ``replication-group`` and the unique identifier is the replication group name. Example: ``replication-group/mycluster``.\n  +  Amazon ElastiCache cache cluster - The resource type is ``cache-cluster`` and the unique identifier is the cache cluster name. Example: ``cache-cluster/mycluster``.\n  +  Neptune cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:mycluster``.\n  +  SageMaker serverless endpoint - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  SageMaker inference component - The resource type is ``inference-component`` and the unique identifier is the resource ID. Example: ``inference-component/my-inference-component``.\n  +  Pool of WorkSpaces - The resource type is ``workspacespool`` and the unique identifier is the pool ID. Example: ``workspacespool/wspool-123456``.","replaceOnChanges":true},"scalableDimension":{"type":"string","description":"The scalable dimension. This string consists of the service namespace, resource type, and scaling property.\n  +  ``ecs:service:DesiredCount`` - The task count of an ECS service.\n  +  ``elasticmapreduce:instancegroup:InstanceCount`` - The instance count of an EMR Instance Group.\n  +  ``ec2:spot-fleet-request:TargetCapacity`` - The target capacity of a Spot Fleet.\n  +  ``appstream:fleet:DesiredCapacity`` - The capacity of an AppStream 2.0 fleet.\n  +  ``dynamodb:table:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB table.\n  +  ``dynamodb:table:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB table.\n  +  ``dynamodb:index:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB global secondary index.\n  +  ``dynamodb:index:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB global secondary index.\n  +  ``rds:cluster:ReadReplicaCount`` - The count of Aurora Replicas in an Aurora DB cluster. Available for Aurora MySQL-compatible edition and Aurora PostgreSQL-compatible edition.\n  +  ``sagemaker:variant:DesiredInstanceCount`` - The number of EC2 instances for a SageMaker model endpoint variant.\n  +  ``custom-resource:ResourceType:Property`` - The scalable dimension for a custom resource provided by your own application or service.\n  +  ``comprehend:document-classifier-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend document classification endpoint.\n  +  ``comprehend:entity-recognizer-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend entity recognizer endpoint.\n  +  ``lambda:function:ProvisionedConcurrency`` - The provisioned concurrency for a Lambda function.\n  +  ``cassandra:table:ReadCapacityUnits`` - The provisioned read capacity for an Amazon Keyspaces table.\n  +  ``cassandra:table:WriteCapacityUnits`` - The provisioned write capacity for an Amazon Keyspaces table.\n  +  ``kafka:broker-storage:VolumeSize`` - The provisioned volume size (in GiB) for brokers in an Amazon MSK cluster.\n  +  ``elasticache:cache-cluster:Nodes`` - The number of nodes for an Amazon ElastiCache cache cluster.\n  +  ``elasticache:replication-group:NodeGroups`` - The number of node groups for an Amazon ElastiCache replication group.\n  +  ``elasticache:replication-group:Replicas`` - The number of replicas per node group for an Amazon ElastiCache replication group.\n  +  ``neptune:cluster:ReadReplicaCount`` - The count of read replicas in an Amazon Neptune DB cluster.\n  +  ``sagemaker:variant:DesiredProvisionedConcurrency`` - The provisioned concurrency for a SageMaker serverless endpoint.\n  +  ``sagemaker:inference-component:DesiredCopyCount`` - The number of copies across an endpoint for a SageMaker inference component.\n  +  ``workspaces:workspacespool:DesiredUserSessions`` - The number of user sessions for the WorkSpaces in the pool.","replaceOnChanges":true},"scalingTargetId":{"type":"string","description":"The CloudFormation-generated ID of an Application Auto Scaling scalable target. For more information about the ID, see the Return Value section of the ``AWS::ApplicationAutoScaling::ScalableTarget`` resource.\n  You must specify either the ``ScalingTargetId`` property, or the ``ResourceId``, ``ScalableDimension``, and ``ServiceNamespace`` properties, but not both.","replaceOnChanges":true},"serviceNamespace":{"type":"string","description":"The namespace of the AWS service that provides the resource, or a ``custom-resource``.","replaceOnChanges":true},"stepScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyStepScalingPolicyConfiguration","description":"A step scaling policy."},"targetTrackingScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingScalingPolicyConfiguration","description":"A target tracking scaling policy."}},"type":"object","required":["arn","policyName","policyType"],"inputProperties":{"policyName":{"type":"string","description":"The name of the scaling policy.\n Updates to the name of a target tracking scaling policy are not supported, unless you also update the metric used for scaling. To change only a target tracking scaling policy's name, first delete the policy by removing the existing ``AWS::ApplicationAutoScaling::ScalingPolicy`` resource from the template and updating the stack. Then, recreate the resource with the same settings and a different name."},"policyType":{"type":"string","description":"The scaling policy type.\n The following policy types are supported: \n ``TargetTrackingScaling``—Not supported for Amazon EMR\n ``StepScaling``—Not supported for DynamoDB, Amazon Comprehend, Lambda, Amazon Keyspaces, Amazon MSK, Amazon ElastiCache, or Neptune.\n ``PredictiveScaling``—Only supported for Amazon ECS"},"predictiveScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPolicyConfiguration","description":"The predictive scaling policy configuration."},"resourceId":{"type":"string","description":"The identifier of the resource associated with the scaling policy. This string consists of the resource type and unique identifier.\n  +  ECS service - The resource type is ``service`` and the unique identifier is the cluster name and service name. Example: ``service/my-cluster/my-service``.\n  +  Spot Fleet - The resource type is ``spot-fleet-request`` and the unique identifier is the Spot Fleet request ID. Example: ``spot-fleet-request/sfr-73fbd2ce-aa30-494c-8788-1cee4EXAMPLE``.\n  +  EMR cluster - The resource type is ``instancegroup`` and the unique identifier is the cluster ID and instance group ID. Example: ``instancegroup/j-2EEZNYKUA1NTV/ig-1791Y4E1L8YI0``.\n  +  AppStream 2.0 fleet - The resource type is ``fleet`` and the unique identifier is the fleet name. Example: ``fleet/sample-fleet``.\n  +  DynamoDB table - The resource type is ``table`` and the unique identifier is the table name. Example: ``table/my-table``.\n  +  DynamoDB global secondary index - The resource type is ``index`` and the unique identifier is the index name. Example: ``table/my-table/index/my-table-index``.\n  +  Aurora DB cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:my-db-cluster``.\n  +  SageMaker endpoint variant - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  Custom resources are not supported with a resource type. This parameter must specify the ``OutputValue`` from the CloudFormation template stack used to access the resources. The unique identifier is defined by the service provider. More information is available in our [GitHub repository](https://docs.aws.amazon.com/https://github.com/aws/aws-auto-scaling-custom-resource).\n  +  Amazon Comprehend document classification endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:document-classifier-endpoint/EXAMPLE``.\n  +  Amazon Comprehend entity recognizer endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:entity-recognizer-endpoint/EXAMPLE``.\n  +  Lambda provisioned concurrency - The resource type is ``function`` and the unique identifier is the function name with a function version or alias name suffix that is not ``$LATEST``. Example: ``function:my-function:prod`` or ``function:my-function:1``.\n  +  Amazon Keyspaces table - The resource type is ``table`` and the unique identifier is the table name. Example: ``keyspace/mykeyspace/table/mytable``.\n  +  Amazon MSK cluster - The resource type and unique identifier are specified using the cluster ARN. Example: ``arn:aws:kafka:us-east-1:123456789012:cluster/demo-cluster-1/6357e0b2-0e6a-4b86-a0b4-70df934c2e31-5``.\n  +  Amazon ElastiCache replication group - The resource type is ``replication-group`` and the unique identifier is the replication group name. Example: ``replication-group/mycluster``.\n  +  Amazon ElastiCache cache cluster - The resource type is ``cache-cluster`` and the unique identifier is the cache cluster name. Example: ``cache-cluster/mycluster``.\n  +  Neptune cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:mycluster``.\n  +  SageMaker serverless endpoint - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  SageMaker inference component - The resource type is ``inference-component`` and the unique identifier is the resource ID. Example: ``inference-component/my-inference-component``.\n  +  Pool of WorkSpaces - The resource type is ``workspacespool`` and the unique identifier is the pool ID. Example: ``workspacespool/wspool-123456``."},"scalableDimension":{"type":"string","description":"The scalable dimension. This string consists of the service namespace, resource type, and scaling property.\n  +  ``ecs:service:DesiredCount`` - The task count of an ECS service.\n  +  ``elasticmapreduce:instancegroup:InstanceCount`` - The instance count of an EMR Instance Group.\n  +  ``ec2:spot-fleet-request:TargetCapacity`` - The target capacity of a Spot Fleet.\n  +  ``appstream:fleet:DesiredCapacity`` - The capacity of an AppStream 2.0 fleet.\n  +  ``dynamodb:table:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB table.\n  +  ``dynamodb:table:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB table.\n  +  ``dynamodb:index:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB global secondary index.\n  +  ``dynamodb:index:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB global secondary index.\n  +  ``rds:cluster:ReadReplicaCount`` - The count of Aurora Replicas in an Aurora DB cluster. Available for Aurora MySQL-compatible edition and Aurora PostgreSQL-compatible edition.\n  +  ``sagemaker:variant:DesiredInstanceCount`` - The number of EC2 instances for a SageMaker model endpoint variant.\n  +  ``custom-resource:ResourceType:Property`` - The scalable dimension for a custom resource provided by your own application or service.\n  +  ``comprehend:document-classifier-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend document classification endpoint.\n  +  ``comprehend:entity-recognizer-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend entity recognizer endpoint.\n  +  ``lambda:function:ProvisionedConcurrency`` - The provisioned concurrency for a Lambda function.\n  +  ``cassandra:table:ReadCapacityUnits`` - The provisioned read capacity for an Amazon Keyspaces table.\n  +  ``cassandra:table:WriteCapacityUnits`` - The provisioned write capacity for an Amazon Keyspaces table.\n  +  ``kafka:broker-storage:VolumeSize`` - The provisioned volume size (in GiB) for brokers in an Amazon MSK cluster.\n  +  ``elasticache:cache-cluster:Nodes`` - The number of nodes for an Amazon ElastiCache cache cluster.\n  +  ``elasticache:replication-group:NodeGroups`` - The number of node groups for an Amazon ElastiCache replication group.\n  +  ``elasticache:replication-group:Replicas`` - The number of replicas per node group for an Amazon ElastiCache replication group.\n  +  ``neptune:cluster:ReadReplicaCount`` - The count of read replicas in an Amazon Neptune DB cluster.\n  +  ``sagemaker:variant:DesiredProvisionedConcurrency`` - The provisioned concurrency for a SageMaker serverless endpoint.\n  +  ``sagemaker:inference-component:DesiredCopyCount`` - The number of copies across an endpoint for a SageMaker inference component.\n  +  ``workspaces:workspacespool:DesiredUserSessions`` - The number of user sessions for the WorkSpaces in the pool."},"scalingTargetId":{"type":"string","description":"The CloudFormation-generated ID of an Application Auto Scaling scalable target. For more information about the ID, see the Return Value section of the ``AWS::ApplicationAutoScaling::ScalableTarget`` resource.\n  You must specify either the ``ScalingTargetId`` property, or the ``ResourceId``, ``ScalableDimension``, and ``ServiceNamespace`` properties, but not both."},"serviceNamespace":{"type":"string","description":"The namespace of the AWS service that provides the resource, or a ``custom-resource``."},"stepScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyStepScalingPolicyConfiguration","description":"A step scaling policy."},"targetTrackingScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingScalingPolicyConfiguration","description":"A target tracking scaling policy."}},"requiredInputs":["policyType"]},"aws-native:applicationinsights:Application":{"description":"Resource Type definition for AWS::ApplicationInsights::Application","properties":{"applicationArn":{"type":"string","description":"The ARN of the ApplicationInsights application."},"attachMissingPermission":{"type":"boolean","description":"If set to true, the managed policies for SSM and CW will be attached to the instance roles if they are missing"},"autoConfigurationEnabled":{"type":"boolean","description":"If set to true, application will be configured with recommended monitoring configuration."},"componentMonitoringSettings":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationComponentMonitoringSetting"},"description":"The monitoring settings of the components."},"customComponents":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationCustomComponent"},"description":"The custom grouped components."},"cweMonitorEnabled":{"type":"boolean","description":"Indicates whether Application Insights can listen to CloudWatch events for the application resources."},"groupingType":{"$ref":"#/types/aws-native:applicationinsights:ApplicationGroupingType","description":"The grouping type of the application","replaceOnChanges":true},"logPatternSets":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationLogPatternSet"},"description":"The log pattern sets."},"opsCenterEnabled":{"type":"boolean","description":"When set to true, creates opsItems for any problems detected on an application."},"opsItemSnsTopicArn":{"type":"string","description":"The SNS topic provided to Application Insights that is associated to the created opsItem."},"resourceGroupName":{"type":"string","description":"The name of the resource group.","replaceOnChanges":true},"snsNotificationArn":{"type":"string","description":"Application Insights sends notifications to this SNS topic whenever there is a problem update in the associated application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of Application Insights application."}},"type":"object","required":["applicationArn","resourceGroupName"],"inputProperties":{"attachMissingPermission":{"type":"boolean","description":"If set to true, the managed policies for SSM and CW will be attached to the instance roles if they are missing"},"autoConfigurationEnabled":{"type":"boolean","description":"If set to true, application will be configured with recommended monitoring configuration."},"componentMonitoringSettings":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationComponentMonitoringSetting"},"description":"The monitoring settings of the components."},"customComponents":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationCustomComponent"},"description":"The custom grouped components."},"cweMonitorEnabled":{"type":"boolean","description":"Indicates whether Application Insights can listen to CloudWatch events for the application resources."},"groupingType":{"$ref":"#/types/aws-native:applicationinsights:ApplicationGroupingType","description":"The grouping type of the application"},"logPatternSets":{"type":"array","items":{"$ref":"#/types/aws-native:applicationinsights:ApplicationLogPatternSet"},"description":"The log pattern sets."},"opsCenterEnabled":{"type":"boolean","description":"When set to true, creates opsItems for any problems detected on an application."},"opsItemSnsTopicArn":{"type":"string","description":"The SNS topic provided to Application Insights that is associated to the created opsItem."},"resourceGroupName":{"type":"string","description":"The name of the resource group."},"snsNotificationArn":{"type":"string","description":"Application Insights sends notifications to this SNS topic whenever there is a problem update in the associated application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of Application Insights application."}},"requiredInputs":["resourceGroupName"]},"aws-native:applicationsignals:Discovery":{"description":"Resource Type definition for AWS::ApplicationSignals::Discovery","properties":{"accountId":{"type":"string","description":"The 12 digit AWS Account ID for the account."}},"type":"object","required":["accountId"]},"aws-native:applicationsignals:GroupingConfiguration":{"description":"Resource Type definition for AWS::ApplicationSignals::GroupingConfiguration","properties":{"accountId":{"type":"string","description":"The 12 digit AWS Account ID for the account."},"groupingAttributeDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:GroupingConfigurationGroupingAttributeDefinition"},"description":"An array of grouping attribute definitions that specify how services should be grouped based on various attributes and source keys."},"updatedAt":{"type":"string","description":"The timestamp when this grouping configuration was last updated. When used in a raw HTTP Query API, it is formatted as epoch time in seconds."}},"type":"object","required":["accountId","groupingAttributeDefinitions","updatedAt"],"inputProperties":{"groupingAttributeDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:GroupingConfigurationGroupingAttributeDefinition"},"description":"An array of grouping attribute definitions that specify how services should be grouped based on various attributes and source keys."}},"requiredInputs":["groupingAttributeDefinitions"]},"aws-native:applicationsignals:ServiceLevelObjective":{"description":"Resource Type definition for AWS::ApplicationSignals::ServiceLevelObjective","properties":{"arn":{"type":"string","description":"The ARN of this SLO."},"burnRateConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveBurnRateConfiguration"},"description":"Each object in this array defines the length of the look-back window used to calculate one burn rate metric for this SLO. The burn rate measures how fast the service is consuming the error budget, relative to the attainment goal of the SLO."},"createdTime":{"type":"integer","description":"Epoch time in seconds of the time that this SLO was created"},"description":{"type":"string","description":"An optional description for this SLO. Default is 'No description'"},"evaluationType":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveEvaluationType","description":"Displays whether this is a period-based SLO or a request-based SLO."},"exclusionWindows":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveExclusionWindow"},"description":"The time window to be excluded from the SLO performance metrics."},"goal":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveGoal","description":"This structure contains the attributes that determine the goal of an SLO. This includes the time period for evaluation and the attainment threshold."},"lastUpdatedTime":{"type":"integer","description":"Epoch time in seconds of the time that this SLO was most recently updated"},"name":{"type":"string","description":"The name of this SLO.","replaceOnChanges":true},"requestBasedSli":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSli","description":"A structure containing information about the performance metric that this SLO monitors, if this is a request-based SLO."},"sli":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveSli","description":"A structure containing information about the performance metric that this SLO monitors, if this is a period-based SLO."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to associate with the SLO. You can associate as many as 50 tags with an SLO. To be able to associate tags with the SLO when you create the SLO, you must have the cloudwatch:TagResource permission.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values."}},"type":"object","required":["arn","createdTime","evaluationType","lastUpdatedTime","name"],"inputProperties":{"burnRateConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveBurnRateConfiguration"},"description":"Each object in this array defines the length of the look-back window used to calculate one burn rate metric for this SLO. The burn rate measures how fast the service is consuming the error budget, relative to the attainment goal of the SLO."},"description":{"type":"string","description":"An optional description for this SLO. Default is 'No description'"},"exclusionWindows":{"type":"array","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveExclusionWindow"},"description":"The time window to be excluded from the SLO performance metrics."},"goal":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveGoal","description":"This structure contains the attributes that determine the goal of an SLO. This includes the time period for evaluation and the attainment threshold."},"name":{"type":"string","description":"The name of this SLO."},"requestBasedSli":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSli","description":"A structure containing information about the performance metric that this SLO monitors, if this is a request-based SLO."},"sli":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveSli","description":"A structure containing information about the performance metric that this SLO monitors, if this is a period-based SLO."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to associate with the SLO. You can associate as many as 50 tags with an SLO. To be able to associate tags with the SLO when you create the SLO, you must have the cloudwatch:TagResource permission.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values."}}},"aws-native:apprunner:AutoScalingConfiguration":{"description":"Describes an AWS App Runner automatic configuration resource that enables automatic scaling of instances used to process web requests. You can share an auto scaling configuration across multiple services.","properties":{"autoScalingConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of this auto scaling configuration."},"autoScalingConfigurationName":{"type":"string","description":"The customer-provided auto scaling configuration name.  When you use it for the first time in an AWS Region, App Runner creates revision number 1 of this name. When you use the same name in subsequent calls, App Runner creates incremental revisions of the configuration. The auto scaling configuration name can be used in multiple revisions of a configuration.","replaceOnChanges":true},"autoScalingConfigurationRevision":{"type":"integer","description":"The revision of this auto scaling configuration. It's unique among all the active configurations (\"Status\": \"ACTIVE\") that share the same AutoScalingConfigurationName."},"latest":{"type":"boolean","description":"It's set to true for the configuration with the highest Revision among all configurations that share the same AutoScalingConfigurationName. It's set to false otherwise. App Runner temporarily doubles the number of provisioned instances during deployments, to maintain the same capacity for both old and new code."},"maxConcurrency":{"type":"integer","description":"The maximum number of concurrent requests that an instance processes. If the number of concurrent requests exceeds this limit, App Runner scales the service up to use more instances to process the requests.","replaceOnChanges":true},"maxSize":{"type":"integer","description":"The maximum number of instances that an App Runner service scales up to. At most MaxSize instances actively serve traffic for your service.","replaceOnChanges":true},"minSize":{"type":"integer","description":"The minimum number of instances that App Runner provisions for a service. The service always has at least MinSize provisioned instances. Some of them actively serve traffic. The rest of them (provisioned and inactive instances) are a cost-effective compute capacity reserve and are ready to be quickly activated. You pay for memory usage of all the provisioned instances. You pay for CPU usage of only the active subset.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of metadata items that you can associate with your auto scaling configuration resource. A tag is a key-value pair.","replaceOnChanges":true}},"type":"object","required":["autoScalingConfigurationArn","autoScalingConfigurationRevision","latest"],"inputProperties":{"autoScalingConfigurationName":{"type":"string","description":"The customer-provided auto scaling configuration name.  When you use it for the first time in an AWS Region, App Runner creates revision number 1 of this name. When you use the same name in subsequent calls, App Runner creates incremental revisions of the configuration. The auto scaling configuration name can be used in multiple revisions of a configuration."},"maxConcurrency":{"type":"integer","description":"The maximum number of concurrent requests that an instance processes. If the number of concurrent requests exceeds this limit, App Runner scales the service up to use more instances to process the requests."},"maxSize":{"type":"integer","description":"The maximum number of instances that an App Runner service scales up to. At most MaxSize instances actively serve traffic for your service."},"minSize":{"type":"integer","description":"The minimum number of instances that App Runner provisions for a service. The service always has at least MinSize provisioned instances. Some of them actively serve traffic. The rest of them (provisioned and inactive instances) are a cost-effective compute capacity reserve and are ready to be quickly activated. You pay for memory usage of all the provisioned instances. You pay for CPU usage of only the active subset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of metadata items that you can associate with your auto scaling configuration resource. A tag is a key-value pair."}}},"aws-native:apprunner:ObservabilityConfiguration":{"description":"The AWS::AppRunner::ObservabilityConfiguration resource  is an AWS App Runner resource type that specifies an App Runner observability configuration","properties":{"latest":{"type":"boolean","description":"It's set to true for the configuration with the highest Revision among all configurations that share the same Name. It's set to false otherwise."},"observabilityConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of this ObservabilityConfiguration"},"observabilityConfigurationName":{"type":"string","description":"A name for the observability configuration. When you use it for the first time in an AWS Region, App Runner creates revision number 1 of this name. When you use the same name in subsequent calls, App Runner creates incremental revisions of the configuration.","replaceOnChanges":true},"observabilityConfigurationRevision":{"type":"integer","description":"The revision of this observability configuration. It's unique among all the active configurations ('Status': 'ACTIVE') that share the same ObservabilityConfigurationName."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of metadata items that you can associate with your observability configuration resource. A tag is a key-value pair.","replaceOnChanges":true},"traceConfiguration":{"$ref":"#/types/aws-native:apprunner:ObservabilityConfigurationTraceConfiguration","description":"The configuration of the tracing feature within this observability configuration. If you don't specify it, App Runner doesn't enable tracing.","replaceOnChanges":true}},"type":"object","required":["latest","observabilityConfigurationArn","observabilityConfigurationRevision"],"inputProperties":{"observabilityConfigurationName":{"type":"string","description":"A name for the observability configuration. When you use it for the first time in an AWS Region, App Runner creates revision number 1 of this name. When you use the same name in subsequent calls, App Runner creates incremental revisions of the configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of metadata items that you can associate with your observability configuration resource. A tag is a key-value pair."},"traceConfiguration":{"$ref":"#/types/aws-native:apprunner:ObservabilityConfigurationTraceConfiguration","description":"The configuration of the tracing feature within this observability configuration. If you don't specify it, App Runner doesn't enable tracing."}}},"aws-native:apprunner:Service":{"description":"The AWS::AppRunner::Service resource specifies an AppRunner Service.","properties":{"autoScalingConfigurationArn":{"type":"string","description":"Autoscaling configuration ARN"},"encryptionConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceEncryptionConfiguration","description":"An optional custom encryption key that App Runner uses to encrypt the copy of your source repository that it maintains and your service logs. By default, App Runner uses an AWS managed key .","replaceOnChanges":true},"healthCheckConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceHealthCheckConfiguration","description":"The settings for the health check that AWS App Runner performs to monitor the health of the App Runner service."},"instanceConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceInstanceConfiguration","description":"The runtime configuration of instances (scaling units) of your service."},"networkConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceNetworkConfiguration","description":"Configuration settings related to network traffic of the web application that the App Runner service runs."},"observabilityConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceObservabilityConfiguration","description":"The observability configuration of your service."},"serviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AppRunner Service."},"serviceId":{"type":"string","description":"The AppRunner Service Id"},"serviceName":{"type":"string","description":"The AppRunner Service Name.","replaceOnChanges":true},"serviceUrl":{"type":"string","description":"The Service Url of the AppRunner Service."},"sourceConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceSourceConfiguration","description":"The source to deploy to the App Runner service. It can be a code or an image repository."},"status":{"type":"string","description":"AppRunner Service status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An optional list of metadata items that you can associate with the App Runner service resource. A tag is a key-value pair.","replaceOnChanges":true}},"type":"object","required":["serviceArn","serviceId","serviceUrl","sourceConfiguration","status"],"inputProperties":{"autoScalingConfigurationArn":{"type":"string","description":"Autoscaling configuration ARN"},"encryptionConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceEncryptionConfiguration","description":"An optional custom encryption key that App Runner uses to encrypt the copy of your source repository that it maintains and your service logs. By default, App Runner uses an AWS managed key ."},"healthCheckConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceHealthCheckConfiguration","description":"The settings for the health check that AWS App Runner performs to monitor the health of the App Runner service."},"instanceConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceInstanceConfiguration","description":"The runtime configuration of instances (scaling units) of your service."},"networkConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceNetworkConfiguration","description":"Configuration settings related to network traffic of the web application that the App Runner service runs."},"observabilityConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceObservabilityConfiguration","description":"The observability configuration of your service."},"serviceName":{"type":"string","description":"The AppRunner Service Name."},"sourceConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceSourceConfiguration","description":"The source to deploy to the App Runner service. It can be a code or an image repository."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An optional list of metadata items that you can associate with the App Runner service resource. A tag is a key-value pair."}},"requiredInputs":["sourceConfiguration"]},"aws-native:apprunner:VpcConnector":{"description":"The AWS::AppRunner::VpcConnector resource specifies an App Runner VpcConnector.","properties":{"securityGroups":{"type":"array","items":{"type":"string"},"description":"A list of IDs of security groups that App Runner should use for access to AWS resources under the specified subnets. If not specified, App Runner uses the default security group of the Amazon VPC. The default security group allows all outbound traffic.","replaceOnChanges":true},"subnets":{"type":"array","items":{"type":"string"},"description":"A list of IDs of subnets that App Runner should use when it associates your service with a custom Amazon VPC. Specify IDs of subnets of a single Amazon VPC. App Runner determines the Amazon VPC from the subnets you specify.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of metadata items that you can associate with your VPC connector resource. A tag is a key-value pair.","replaceOnChanges":true},"vpcConnectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of this VPC connector."},"vpcConnectorName":{"type":"string","description":"A name for the VPC connector. If you don't specify a name, AWS CloudFormation generates a name for your VPC connector.","replaceOnChanges":true},"vpcConnectorRevision":{"type":"integer","description":"The revision of this VPC connector. It's unique among all the active connectors (\"Status\": \"ACTIVE\") that share the same Name."}},"type":"object","required":["subnets","vpcConnectorArn","vpcConnectorRevision"],"inputProperties":{"securityGroups":{"type":"array","items":{"type":"string"},"description":"A list of IDs of security groups that App Runner should use for access to AWS resources under the specified subnets. If not specified, App Runner uses the default security group of the Amazon VPC. The default security group allows all outbound traffic."},"subnets":{"type":"array","items":{"type":"string"},"description":"A list of IDs of subnets that App Runner should use when it associates your service with a custom Amazon VPC. Specify IDs of subnets of a single Amazon VPC. App Runner determines the Amazon VPC from the subnets you specify."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of metadata items that you can associate with your VPC connector resource. A tag is a key-value pair."},"vpcConnectorName":{"type":"string","description":"A name for the VPC connector. If you don't specify a name, AWS CloudFormation generates a name for your VPC connector."}},"requiredInputs":["subnets"]},"aws-native:apprunner:VpcIngressConnection":{"description":"The AWS::AppRunner::VpcIngressConnection resource is an App Runner resource that specifies an App Runner VpcIngressConnection.","properties":{"domainName":{"type":"string","description":"The Domain name associated with the VPC Ingress Connection."},"ingressVpcConfiguration":{"$ref":"#/types/aws-native:apprunner:VpcIngressConnectionIngressVpcConfiguration","description":"Specifications for the customer’s Amazon VPC and the related AWS PrivateLink VPC endpoint that are used to create the VPC Ingress Connection resource."},"serviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:apprunner:VpcIngressConnectionStatus","description":"The current status of the VpcIngressConnection."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An optional list of metadata items that you can associate with the VPC Ingress Connection resource. A tag is a key-value pair.","replaceOnChanges":true},"vpcIngressConnectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VpcIngressConnection."},"vpcIngressConnectionName":{"type":"string","description":"The customer-provided Vpc Ingress Connection name.","replaceOnChanges":true}},"type":"object","required":["domainName","ingressVpcConfiguration","serviceArn","status","vpcIngressConnectionArn"],"inputProperties":{"ingressVpcConfiguration":{"$ref":"#/types/aws-native:apprunner:VpcIngressConnectionIngressVpcConfiguration","description":"Specifications for the customer’s Amazon VPC and the related AWS PrivateLink VPC endpoint that are used to create the VPC Ingress Connection resource."},"serviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An optional list of metadata items that you can associate with the VPC Ingress Connection resource. A tag is a key-value pair."},"vpcIngressConnectionName":{"type":"string","description":"The customer-provided Vpc Ingress Connection name."}},"requiredInputs":["ingressVpcConfiguration","serviceArn"]},"aws-native:appstream:AppBlock":{"description":"Resource Type definition for AWS::AppStream::AppBlock","properties":{"arn":{"type":"string","description":"The ARN of the app block."},"createdTime":{"type":"string","description":"The time when the app block was created."},"description":{"type":"string","description":"The description of the app block.","replaceOnChanges":true},"displayName":{"type":"string","description":"The display name of the app block.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the app block.\n\n*Pattern* : `^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,100}$`","replaceOnChanges":true},"packagingType":{"type":"string","description":"The packaging type of the app block.","replaceOnChanges":true},"postSetupScriptDetails":{"$ref":"#/types/aws-native:appstream:AppBlockScriptDetails","description":"The post setup script details of the app block.","replaceOnChanges":true},"setupScriptDetails":{"$ref":"#/types/aws-native:appstream:AppBlockScriptDetails","description":"The setup script details of the app block.","replaceOnChanges":true},"sourceS3Location":{"$ref":"#/types/aws-native:appstream:AppBlockS3Location","description":"The source S3 location of the app block.","replaceOnChanges":true},"tags":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:appstream:AppBlockTag0Properties"},{"$ref":"#/types/aws-native:appstream:AppBlockTag1Properties"}]},"description":"The tags of the app block."}},"type":"object","required":["arn","createdTime","name","sourceS3Location"],"inputProperties":{"description":{"type":"string","description":"The description of the app block."},"displayName":{"type":"string","description":"The display name of the app block."},"name":{"type":"string","description":"The name of the app block.\n\n*Pattern* : `^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,100}$`"},"packagingType":{"type":"string","description":"The packaging type of the app block."},"postSetupScriptDetails":{"$ref":"#/types/aws-native:appstream:AppBlockScriptDetails","description":"The post setup script details of the app block."},"setupScriptDetails":{"$ref":"#/types/aws-native:appstream:AppBlockScriptDetails","description":"The setup script details of the app block."},"sourceS3Location":{"$ref":"#/types/aws-native:appstream:AppBlockS3Location","description":"The source S3 location of the app block."},"tags":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:appstream:AppBlockTag0Properties"},{"$ref":"#/types/aws-native:appstream:AppBlockTag1Properties"}]},"description":"The tags of the app block."}},"requiredInputs":["sourceS3Location"]},"aws-native:appstream:AppBlockBuilder":{"description":"Resource Type definition for AWS::AppStream::AppBlockBuilder.","properties":{"accessEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:appstream:AppBlockBuilderAccessEndpoint"},"description":"The access endpoints of the app block builder."},"appBlockArns":{"type":"array","items":{"type":"string"},"description":"The ARN of the app block.\n\n*Maximum* : `1`"},"arn":{"type":"string","description":"The ARN of the app block builder."},"createdTime":{"type":"string","description":"The time when the app block builder was created."},"description":{"type":"string","description":"The description of the app block builder."},"displayName":{"type":"string","description":"The display name of the app block builder."},"enableDefaultInternetAccess":{"type":"boolean","description":"Indicates whether default internet access is enabled for the app block builder."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that is applied to the app block builder."},"instanceType":{"type":"string","description":"The instance type of the app block builder."},"name":{"type":"string","description":"The name of the app block builder.","replaceOnChanges":true},"platform":{"type":"string","description":"The platform of the app block builder.\n\n*Allowed values* : `WINDOWS_SERVER_2019`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the app block builder."},"vpcConfig":{"$ref":"#/types/aws-native:appstream:AppBlockBuilderVpcConfig","description":"The VPC configuration for the app block builder."}},"type":"object","required":["arn","createdTime","instanceType","name","platform","vpcConfig"],"inputProperties":{"accessEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:appstream:AppBlockBuilderAccessEndpoint"},"description":"The access endpoints of the app block builder."},"appBlockArns":{"type":"array","items":{"type":"string"},"description":"The ARN of the app block.\n\n*Maximum* : `1`"},"description":{"type":"string","description":"The description of the app block builder."},"displayName":{"type":"string","description":"The display name of the app block builder."},"enableDefaultInternetAccess":{"type":"boolean","description":"Indicates whether default internet access is enabled for the app block builder."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that is applied to the app block builder."},"instanceType":{"type":"string","description":"The instance type of the app block builder."},"name":{"type":"string","description":"The name of the app block builder."},"platform":{"type":"string","description":"The platform of the app block builder.\n\n*Allowed values* : `WINDOWS_SERVER_2019`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the app block builder."},"vpcConfig":{"$ref":"#/types/aws-native:appstream:AppBlockBuilderVpcConfig","description":"The VPC configuration for the app block builder."}},"requiredInputs":["instanceType","platform","vpcConfig"]},"aws-native:appstream:Application":{"description":"Resource Type definition for AWS::AppStream::Application","properties":{"appBlockArn":{"type":"string","description":"The app block ARN with which the application should be associated."},"arn":{"type":"string","description":"The ARN of the application."},"attributesToDelete":{"type":"array","items":{"type":"string"},"description":"A list of attributes to delete from an application."},"createdTime":{"type":"string","description":"The time when the application was created."},"description":{"type":"string","description":"The description of the application."},"displayName":{"type":"string","description":"The display name of the application. This name is visible to users in the application catalog."},"iconS3Location":{"$ref":"#/types/aws-native:appstream:ApplicationS3Location","description":"The icon S3 location of the application."},"instanceFamilies":{"type":"array","items":{"type":"string"},"description":"The instance families the application supports.\n\n*Allowed Values* : `GENERAL_PURPOSE` | `GRAPHICS_G4`","replaceOnChanges":true},"launchParameters":{"type":"string","description":"The launch parameters of the application."},"launchPath":{"type":"string","description":"The launch path of the application."},"name":{"type":"string","description":"The name of the application. This name is visible to users when a name is not specified in the DisplayName property.\n\n*Pattern* : `^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,100}$`","replaceOnChanges":true},"platforms":{"type":"array","items":{"type":"string"},"description":"The platforms the application supports.\n\n*Allowed Values* : `WINDOWS_SERVER_2019` | `AMAZON_LINUX2`","replaceOnChanges":true},"tags":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:appstream:ApplicationTag0Properties"},{"$ref":"#/types/aws-native:appstream:ApplicationTag1Properties"}]},"description":"The tags of the application."},"workingDirectory":{"type":"string","description":"The working directory of the application."}},"type":"object","required":["appBlockArn","arn","createdTime","iconS3Location","instanceFamilies","launchPath","name","platforms"],"inputProperties":{"appBlockArn":{"type":"string","description":"The app block ARN with which the application should be associated."},"attributesToDelete":{"type":"array","items":{"type":"string"},"description":"A list of attributes to delete from an application."},"description":{"type":"string","description":"The description of the application."},"displayName":{"type":"string","description":"The display name of the application. This name is visible to users in the application catalog."},"iconS3Location":{"$ref":"#/types/aws-native:appstream:ApplicationS3Location","description":"The icon S3 location of the application."},"instanceFamilies":{"type":"array","items":{"type":"string"},"description":"The instance families the application supports.\n\n*Allowed Values* : `GENERAL_PURPOSE` | `GRAPHICS_G4`"},"launchParameters":{"type":"string","description":"The launch parameters of the application."},"launchPath":{"type":"string","description":"The launch path of the application."},"name":{"type":"string","description":"The name of the application. This name is visible to users when a name is not specified in the DisplayName property.\n\n*Pattern* : `^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,100}$`"},"platforms":{"type":"array","items":{"type":"string"},"description":"The platforms the application supports.\n\n*Allowed Values* : `WINDOWS_SERVER_2019` | `AMAZON_LINUX2`"},"tags":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:appstream:ApplicationTag0Properties"},{"$ref":"#/types/aws-native:appstream:ApplicationTag1Properties"}]},"description":"The tags of the application."},"workingDirectory":{"type":"string","description":"The working directory of the application."}},"requiredInputs":["appBlockArn","iconS3Location","instanceFamilies","launchPath","platforms"]},"aws-native:appstream:ApplicationEntitlementAssociation":{"description":"Resource Type definition for AWS::AppStream::ApplicationEntitlementAssociation","properties":{"applicationIdentifier":{"type":"string","description":"The identifier of the application.","replaceOnChanges":true},"entitlementName":{"type":"string","description":"The name of the entitlement.","replaceOnChanges":true},"stackName":{"type":"string","description":"The name of the stack.","replaceOnChanges":true}},"type":"object","required":["applicationIdentifier","entitlementName","stackName"],"inputProperties":{"applicationIdentifier":{"type":"string","description":"The identifier of the application."},"entitlementName":{"type":"string","description":"The name of the entitlement."},"stackName":{"type":"string","description":"The name of the stack."}},"requiredInputs":["applicationIdentifier","entitlementName","stackName"]},"aws-native:appstream:ApplicationFleetAssociation":{"description":"Resource Type definition for AWS::AppStream::ApplicationFleetAssociation","properties":{"applicationArn":{"type":"string","description":"The ARN of the application.","replaceOnChanges":true},"fleetName":{"type":"string","description":"The name of the fleet.","replaceOnChanges":true}},"type":"object","required":["applicationArn","fleetName"],"inputProperties":{"applicationArn":{"type":"string","description":"The ARN of the application."},"fleetName":{"type":"string","description":"The name of the fleet."}},"requiredInputs":["applicationArn","fleetName"]},"aws-native:appstream:DirectoryConfig":{"description":"Resource Type definition for AWS::AppStream::DirectoryConfig","properties":{"certificateBasedAuthProperties":{"$ref":"#/types/aws-native:appstream:DirectoryConfigCertificateBasedAuthProperties","description":"The certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances."},"directoryName":{"type":"string","description":"The fully qualified name of the directory (for example, corp.example.com).","replaceOnChanges":true},"organizationalUnitDistinguishedNames":{"type":"array","items":{"type":"string"},"description":"The distinguished names of the organizational units for computer accounts."},"serviceAccountCredentials":{"$ref":"#/types/aws-native:appstream:DirectoryConfigServiceAccountCredentials","description":"The credentials for the service account used by the streaming instance to connect to the directory. Do not use this parameter directly. Use `ServiceAccountCredentials` as an input parameter with `noEcho` as shown in the [Parameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html) . For best practices information, see [Do Not Embed Credentials in Your Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#creds) ."}},"type":"object","required":["directoryName","organizationalUnitDistinguishedNames","serviceAccountCredentials"],"inputProperties":{"certificateBasedAuthProperties":{"$ref":"#/types/aws-native:appstream:DirectoryConfigCertificateBasedAuthProperties","description":"The certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances."},"directoryName":{"type":"string","description":"The fully qualified name of the directory (for example, corp.example.com)."},"organizationalUnitDistinguishedNames":{"type":"array","items":{"type":"string"},"description":"The distinguished names of the organizational units for computer accounts."},"serviceAccountCredentials":{"$ref":"#/types/aws-native:appstream:DirectoryConfigServiceAccountCredentials","description":"The credentials for the service account used by the streaming instance to connect to the directory. Do not use this parameter directly. Use `ServiceAccountCredentials` as an input parameter with `noEcho` as shown in the [Parameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html) . For best practices information, see [Do Not Embed Credentials in Your Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#creds) ."}},"requiredInputs":["directoryName","organizationalUnitDistinguishedNames","serviceAccountCredentials"]},"aws-native:appstream:Entitlement":{"description":"Resource Type definition for AWS::AppStream::Entitlement","properties":{"appVisibility":{"type":"string","description":"Specifies whether to entitle all apps or only selected apps."},"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:appstream:EntitlementAttribute"},"description":"The attributes of the entitlement."},"createdTime":{"type":"string","description":"The time when the entitlement was created."},"description":{"type":"string","description":"The description of the entitlement."},"lastModifiedTime":{"type":"string","description":"The time when the entitlement was last modified."},"name":{"type":"string","description":"The name of the entitlement.","replaceOnChanges":true},"stackName":{"type":"string","description":"The name of the stack.","replaceOnChanges":true}},"type":"object","required":["appVisibility","attributes","createdTime","lastModifiedTime","name","stackName"],"inputProperties":{"appVisibility":{"type":"string","description":"Specifies whether to entitle all apps or only selected apps."},"attributes":{"type":"array","items":{"$ref":"#/types/aws-native:appstream:EntitlementAttribute"},"description":"The attributes of the entitlement."},"description":{"type":"string","description":"The description of the entitlement."},"name":{"type":"string","description":"The name of the entitlement."},"stackName":{"type":"string","description":"The name of the stack."}},"requiredInputs":["appVisibility","attributes","stackName"]},"aws-native:appstream:ImageBuilder":{"description":"Resource Type definition for AWS::AppStream::ImageBuilder","properties":{"accessEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:appstream:ImageBuilderAccessEndpoint"},"description":"The list of virtual private cloud (VPC) interface endpoint objects. Administrators can connect to the image builder only through the specified endpoints."},"appstreamAgentVersion":{"type":"string","description":"The version of the WorkSpaces Applications agent to use for this image builder. To use the latest version of the WorkSpaces Applications agent, specify [LATEST]."},"description":{"type":"string","description":"The description to display."},"displayName":{"type":"string","description":"The image builder name to display."},"domainJoinInfo":{"$ref":"#/types/aws-native:appstream:ImageBuilderDomainJoinInfo","description":"The name of the directory and organizational unit (OU) to use to join the image builder to a Microsoft Active Directory domain."},"enableDefaultInternetAccess":{"type":"boolean","description":"Enables or disables default internet access for the image builder."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the Security Token Service `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the *appstream_machine_role* credential profile on the instance.\n\nFor more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the *Amazon AppStream 2.0 Administration Guide* ."},"imageArn":{"type":"string","description":"The ARN of the public, private, or shared image to use."},"imageName":{"type":"string","description":"The name of the image used to create the image builder."},"instanceType":{"type":"string","description":"The instance type to use when launching the image builder. The following instance types are available:\n\n- stream.standard.small\n- stream.standard.medium\n- stream.standard.large\n- stream.compute.large\n- stream.compute.xlarge\n- stream.compute.2xlarge\n- stream.compute.4xlarge\n- stream.compute.8xlarge\n- stream.memory.large\n- stream.memory.xlarge\n- stream.memory.2xlarge\n- stream.memory.4xlarge\n- stream.memory.8xlarge\n- stream.memory.z1d.large\n- stream.memory.z1d.xlarge\n- stream.memory.z1d.2xlarge\n- stream.memory.z1d.3xlarge\n- stream.memory.z1d.6xlarge\n- stream.memory.z1d.12xlarge\n- stream.graphics-design.large\n- stream.graphics-design.xlarge\n- stream.graphics-design.2xlarge\n- stream.graphics-design.4xlarge\n- stream.graphics.g4dn.xlarge\n- stream.graphics.g4dn.2xlarge\n- stream.graphics.g4dn.4xlarge\n- stream.graphics.g4dn.8xlarge\n- stream.graphics.g4dn.12xlarge\n- stream.graphics.g4dn.16xlarge\n- stream.graphics.g5.xlarge\n- stream.graphics.g5.2xlarge\n- stream.graphics.g5.4xlarge\n- stream.graphics.g5.8xlarge\n- stream.graphics.g5.16xlarge\n- stream.graphics.g5.12xlarge\n- stream.graphics.g5.24xlarge\n- stream.graphics.g6.xlarge\n- stream.graphics.g6.2xlarge\n- stream.graphics.g6.4xlarge\n- stream.graphics.g6.8xlarge\n- stream.graphics.g6.16xlarge\n- stream.graphics.g6.12xlarge\n- stream.graphics.g6.24xlarge\n- stream.graphics.gr6.4xlarge\n- stream.graphics.gr6.8xlarge\n- stream.graphics.g6f.large\n- stream.graphics.g6f.xlarge\n- stream.graphics.g6f.2xlarge\n- stream.graphics.g6f.4xlarge\n- stream.graphics.gr6f.4xlarge"},"name":{"type":"string","description":"A unique name for the image builder.","replaceOnChanges":true},"rootVolumeConfig":{"$ref":"#/types/aws-native:appstream:ImageBuilderVolumeConfig"},"softwaresToInstall":{"type":"array","items":{"type":"string"}},"softwaresToUninstall":{"type":"array","items":{"type":"string"}},"streamingUrl":{"type":"string","description":"The URL to start an image builder streaming session, returned as a string."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs."},"vpcConfig":{"$ref":"#/types/aws-native:appstream:ImageBuilderVpcConfig","description":"The VPC configuration for the image builder. You can specify only one subnet."}},"type":"object","required":["instanceType","name","streamingUrl"],"inputProperties":{"accessEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:appstream:ImageBuilderAccessEndpoint"},"description":"The list of virtual private cloud (VPC) interface endpoint objects. Administrators can connect to the image builder only through the specified endpoints."},"appstreamAgentVersion":{"type":"string","description":"The version of the WorkSpaces Applications agent to use for this image builder. To use the latest version of the WorkSpaces Applications agent, specify [LATEST]."},"description":{"type":"string","description":"The description to display."},"displayName":{"type":"string","description":"The image builder name to display."},"domainJoinInfo":{"$ref":"#/types/aws-native:appstream:ImageBuilderDomainJoinInfo","description":"The name of the directory and organizational unit (OU) to use to join the image builder to a Microsoft Active Directory domain."},"enableDefaultInternetAccess":{"type":"boolean","description":"Enables or disables default internet access for the image builder."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the Security Token Service `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the *appstream_machine_role* credential profile on the instance.\n\nFor more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the *Amazon AppStream 2.0 Administration Guide* ."},"imageArn":{"type":"string","description":"The ARN of the public, private, or shared image to use."},"imageName":{"type":"string","description":"The name of the image used to create the image builder."},"instanceType":{"type":"string","description":"The instance type to use when launching the image builder. The following instance types are available:\n\n- stream.standard.small\n- stream.standard.medium\n- stream.standard.large\n- stream.compute.large\n- stream.compute.xlarge\n- stream.compute.2xlarge\n- stream.compute.4xlarge\n- stream.compute.8xlarge\n- stream.memory.large\n- stream.memory.xlarge\n- stream.memory.2xlarge\n- stream.memory.4xlarge\n- stream.memory.8xlarge\n- stream.memory.z1d.large\n- stream.memory.z1d.xlarge\n- stream.memory.z1d.2xlarge\n- stream.memory.z1d.3xlarge\n- stream.memory.z1d.6xlarge\n- stream.memory.z1d.12xlarge\n- stream.graphics-design.large\n- stream.graphics-design.xlarge\n- stream.graphics-design.2xlarge\n- stream.graphics-design.4xlarge\n- stream.graphics.g4dn.xlarge\n- stream.graphics.g4dn.2xlarge\n- stream.graphics.g4dn.4xlarge\n- stream.graphics.g4dn.8xlarge\n- stream.graphics.g4dn.12xlarge\n- stream.graphics.g4dn.16xlarge\n- stream.graphics.g5.xlarge\n- stream.graphics.g5.2xlarge\n- stream.graphics.g5.4xlarge\n- stream.graphics.g5.8xlarge\n- stream.graphics.g5.16xlarge\n- stream.graphics.g5.12xlarge\n- stream.graphics.g5.24xlarge\n- stream.graphics.g6.xlarge\n- stream.graphics.g6.2xlarge\n- stream.graphics.g6.4xlarge\n- stream.graphics.g6.8xlarge\n- stream.graphics.g6.16xlarge\n- stream.graphics.g6.12xlarge\n- stream.graphics.g6.24xlarge\n- stream.graphics.gr6.4xlarge\n- stream.graphics.gr6.8xlarge\n- stream.graphics.g6f.large\n- stream.graphics.g6f.xlarge\n- stream.graphics.g6f.2xlarge\n- stream.graphics.g6f.4xlarge\n- stream.graphics.gr6f.4xlarge"},"name":{"type":"string","description":"A unique name for the image builder."},"rootVolumeConfig":{"$ref":"#/types/aws-native:appstream:ImageBuilderVolumeConfig"},"softwaresToInstall":{"type":"array","items":{"type":"string"}},"softwaresToUninstall":{"type":"array","items":{"type":"string"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs."},"vpcConfig":{"$ref":"#/types/aws-native:appstream:ImageBuilderVpcConfig","description":"The VPC configuration for the image builder. You can specify only one subnet."}},"requiredInputs":["instanceType"]},"aws-native:appsync:Api":{"description":"Resource schema for AppSync Api","properties":{"apiArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AppSync Api"},"apiId":{"type":"string","description":"The unique identifier for the AppSync Api generated by the service"},"dns":{"$ref":"#/types/aws-native:appsync:ApiDnsMap"},"eventConfig":{"$ref":"#/types/aws-native:appsync:ApiEventConfig","description":"Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API."},"name":{"type":"string","description":"The name of the `Api` ."},"ownerContact":{"type":"string","description":"The owner contact information for an API resource.\n\nThis field accepts any string input with a length of 0 - 256 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this API."}},"type":"object","required":["apiArn","apiId","dns","name"],"inputProperties":{"eventConfig":{"$ref":"#/types/aws-native:appsync:ApiEventConfig","description":"Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API."},"name":{"type":"string","description":"The name of the `Api` ."},"ownerContact":{"type":"string","description":"The owner contact information for an API resource.\n\nThis field accepts any string input with a length of 0 - 256 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this API."}}},"aws-native:appsync:ChannelNamespace":{"description":"Resource schema for AppSync ChannelNamespace","properties":{"apiId":{"type":"string","description":"AppSync Api Id that this Channel Namespace belongs to.","replaceOnChanges":true},"channelNamespaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the channel namespace."},"codeHandlers":{"type":"string","description":"The event handler functions that run custom business logic to process published events and subscribe requests."},"codeS3Location":{"type":"string","description":"The Amazon S3 endpoint where the code is located."},"handlerConfigs":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceHandlerConfigs","description":"The configuration for the `OnPublish` and `OnSubscribe` handlers."},"name":{"type":"string","description":"The name of the channel namespace. This name must be unique within the `Api` .","replaceOnChanges":true},"publishAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthMode"},"description":"List of AuthModes supported for Publish operations."},"subscribeAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthMode"},"description":"List of AuthModes supported for Subscribe operations."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this channel namespace."}},"type":"object","required":["apiId","channelNamespaceArn","name"],"inputProperties":{"apiId":{"type":"string","description":"AppSync Api Id that this Channel Namespace belongs to."},"codeHandlers":{"type":"string","description":"The event handler functions that run custom business logic to process published events and subscribe requests."},"codeS3Location":{"type":"string","description":"The Amazon S3 endpoint where the code is located."},"handlerConfigs":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceHandlerConfigs","description":"The configuration for the `OnPublish` and `OnSubscribe` handlers."},"name":{"type":"string","description":"The name of the channel namespace. This name must be unique within the `Api` ."},"publishAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthMode"},"description":"List of AuthModes supported for Publish operations."},"subscribeAuthModes":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthMode"},"description":"List of AuthModes supported for Subscribe operations."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this channel namespace."}},"requiredInputs":["apiId"]},"aws-native:appsync:DataSource":{"description":"Resource Type definition for AWS::AppSync::DataSource\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var graphQlApiId = config.Require(\"graphQlApiId\");\n    var dataSourceName = config.Require(\"dataSourceName\");\n    var dataSourceDescription = config.Require(\"dataSourceDescription\");\n    var serviceRoleArn = config.Require(\"serviceRoleArn\");\n    var lambdaFunctionArn = config.Require(\"lambdaFunctionArn\");\n    var dataSource = new AwsNative.AppSync.DataSource(\"dataSource\", new()\n    {\n        ApiId = graphQlApiId,\n        Name = dataSourceName,\n        Description = dataSourceDescription,\n        Type = \"AWS_LAMBDA\",\n        ServiceRoleArn = serviceRoleArn,\n        LambdaConfig = new AwsNative.AppSync.Inputs.DataSourceLambdaConfigArgs\n        {\n            LambdaFunctionArn = lambdaFunctionArn,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appsync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tgraphQlApiId := cfg.Require(\"graphQlApiId\")\n\t\tdataSourceName := cfg.Require(\"dataSourceName\")\n\t\tdataSourceDescription := cfg.Require(\"dataSourceDescription\")\n\t\tserviceRoleArn := cfg.Require(\"serviceRoleArn\")\n\t\tlambdaFunctionArn := cfg.Require(\"lambdaFunctionArn\")\n\t\t_, err := appsync.NewDataSource(ctx, \"dataSource\", \u0026appsync.DataSourceArgs{\n\t\t\tApiId:          pulumi.String(pulumi.String(graphQlApiId)),\n\t\t\tName:           pulumi.String(pulumi.String(dataSourceName)),\n\t\t\tDescription:    pulumi.String(pulumi.String(dataSourceDescription)),\n\t\t\tType:           pulumi.String(\"AWS_LAMBDA\"),\n\t\t\tServiceRoleArn: pulumi.String(pulumi.String(serviceRoleArn)),\n\t\t\tLambdaConfig: \u0026appsync.DataSourceLambdaConfigArgs{\n\t\t\t\tLambdaFunctionArn: pulumi.String(pulumi.String(lambdaFunctionArn)),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst graphQlApiId = config.require(\"graphQlApiId\");\nconst dataSourceName = config.require(\"dataSourceName\");\nconst dataSourceDescription = config.require(\"dataSourceDescription\");\nconst serviceRoleArn = config.require(\"serviceRoleArn\");\nconst lambdaFunctionArn = config.require(\"lambdaFunctionArn\");\nconst dataSource = new aws_native.appsync.DataSource(\"dataSource\", {\n    apiId: graphQlApiId,\n    name: dataSourceName,\n    description: dataSourceDescription,\n    type: \"AWS_LAMBDA\",\n    serviceRoleArn: serviceRoleArn,\n    lambdaConfig: {\n        lambdaFunctionArn: lambdaFunctionArn,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ngraph_ql_api_id = config.require(\"graphQlApiId\")\ndata_source_name = config.require(\"dataSourceName\")\ndata_source_description = config.require(\"dataSourceDescription\")\nservice_role_arn = config.require(\"serviceRoleArn\")\nlambda_function_arn = config.require(\"lambdaFunctionArn\")\ndata_source = aws_native.appsync.DataSource(\"dataSource\",\n    api_id=graph_ql_api_id,\n    name=data_source_name,\n    description=data_source_description,\n    type=\"AWS_LAMBDA\",\n    service_role_arn=service_role_arn,\n    lambda_config={\n        \"lambda_function_arn\": lambda_function_arn,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var graphQlApiId = config.Require(\"graphQlApiId\");\n    var dataSourceName = config.Require(\"dataSourceName\");\n    var dataSourceDescription = config.Require(\"dataSourceDescription\");\n    var serviceRoleArn = config.Require(\"serviceRoleArn\");\n    var lambdaFunctionArn = config.Require(\"lambdaFunctionArn\");\n    var dataSource = new AwsNative.AppSync.DataSource(\"dataSource\", new()\n    {\n        ApiId = graphQlApiId,\n        Name = dataSourceName,\n        Description = dataSourceDescription,\n        Type = \"AWS_LAMBDA\",\n        ServiceRoleArn = serviceRoleArn,\n        LambdaConfig = new AwsNative.AppSync.Inputs.DataSourceLambdaConfigArgs\n        {\n            LambdaFunctionArn = lambdaFunctionArn,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appsync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tgraphQlApiId := cfg.Require(\"graphQlApiId\")\n\t\tdataSourceName := cfg.Require(\"dataSourceName\")\n\t\tdataSourceDescription := cfg.Require(\"dataSourceDescription\")\n\t\tserviceRoleArn := cfg.Require(\"serviceRoleArn\")\n\t\tlambdaFunctionArn := cfg.Require(\"lambdaFunctionArn\")\n\t\t_, err := appsync.NewDataSource(ctx, \"dataSource\", \u0026appsync.DataSourceArgs{\n\t\t\tApiId:          pulumi.String(pulumi.String(graphQlApiId)),\n\t\t\tName:           pulumi.String(pulumi.String(dataSourceName)),\n\t\t\tDescription:    pulumi.String(pulumi.String(dataSourceDescription)),\n\t\t\tType:           pulumi.String(\"AWS_LAMBDA\"),\n\t\t\tServiceRoleArn: pulumi.String(pulumi.String(serviceRoleArn)),\n\t\t\tLambdaConfig: \u0026appsync.DataSourceLambdaConfigArgs{\n\t\t\t\tLambdaFunctionArn: pulumi.String(pulumi.String(lambdaFunctionArn)),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst graphQlApiId = config.require(\"graphQlApiId\");\nconst dataSourceName = config.require(\"dataSourceName\");\nconst dataSourceDescription = config.require(\"dataSourceDescription\");\nconst serviceRoleArn = config.require(\"serviceRoleArn\");\nconst lambdaFunctionArn = config.require(\"lambdaFunctionArn\");\nconst dataSource = new aws_native.appsync.DataSource(\"dataSource\", {\n    apiId: graphQlApiId,\n    name: dataSourceName,\n    description: dataSourceDescription,\n    type: \"AWS_LAMBDA\",\n    serviceRoleArn: serviceRoleArn,\n    lambdaConfig: {\n        lambdaFunctionArn: lambdaFunctionArn,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ngraph_ql_api_id = config.require(\"graphQlApiId\")\ndata_source_name = config.require(\"dataSourceName\")\ndata_source_description = config.require(\"dataSourceDescription\")\nservice_role_arn = config.require(\"serviceRoleArn\")\nlambda_function_arn = config.require(\"lambdaFunctionArn\")\ndata_source = aws_native.appsync.DataSource(\"dataSource\",\n    api_id=graph_ql_api_id,\n    name=data_source_name,\n    description=data_source_description,\n    type=\"AWS_LAMBDA\",\n    service_role_arn=service_role_arn,\n    lambda_config={\n        \"lambda_function_arn\": lambda_function_arn,\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"apiId":{"type":"string","description":"Unique AWS AppSync GraphQL API identifier where this data source will be created.","replaceOnChanges":true},"dataSourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the API key, such as arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/datasources/datasourcename."},"description":{"type":"string","description":"The description of the data source."},"dynamoDbConfig":{"$ref":"#/types/aws-native:appsync:DataSourceDynamoDbConfig","description":"AWS Region and TableName for an Amazon DynamoDB table in your account."},"elasticsearchConfig":{"$ref":"#/types/aws-native:appsync:DataSourceElasticsearchConfig","description":"AWS Region and Endpoints for an Amazon OpenSearch Service domain in your account.\nAs of September 2021, Amazon Elasticsearch Service is Amazon OpenSearch Service. This property is deprecated. For new data sources, use OpenSearchServiceConfig to specify an OpenSearch Service data source."},"eventBridgeConfig":{"$ref":"#/types/aws-native:appsync:DataSourceEventBridgeConfig","description":"ARN for the EventBridge bus."},"httpConfig":{"$ref":"#/types/aws-native:appsync:DataSourceHttpConfig","description":"Endpoints for an HTTP data source."},"lambdaConfig":{"$ref":"#/types/aws-native:appsync:DataSourceLambdaConfig","description":"An ARN of a Lambda function in valid ARN format. This can be the ARN of a Lambda function that exists in the current account or in another account."},"metricsConfig":{"$ref":"#/types/aws-native:appsync:DataSourceMetricsConfig","description":"Enables or disables enhanced data source metrics for specified data sources. Note that `MetricsConfig` won't be used unless the `dataSourceLevelMetricsBehavior` value is set to `PER_DATA_SOURCE_METRICS` . If the `dataSourceLevelMetricsBehavior` is set to `FULL_REQUEST_DATA_SOURCE_METRICS` instead, `MetricsConfig` will be ignored. However, you can still set its value.\n\n`MetricsConfig` can be `ENABLED` or `DISABLED` ."},"name":{"type":"string","description":"Friendly name for you to identify your AppSync data source after creation.","replaceOnChanges":true},"openSearchServiceConfig":{"$ref":"#/types/aws-native:appsync:DataSourceOpenSearchServiceConfig","description":"AWS Region and Endpoints for an Amazon OpenSearch Service domain in your account."},"relationalDatabaseConfig":{"$ref":"#/types/aws-native:appsync:DataSourceRelationalDatabaseConfig","description":"Relational Database configuration of the relational database data source."},"serviceRoleArn":{"type":"string","description":"The AWS Identity and Access Management service role ARN for the data source. The system assumes this role when accessing the data source."},"type":{"type":"string","description":"The type of the data source."}},"type":"object","required":["apiId","dataSourceArn","name","type"],"inputProperties":{"apiId":{"type":"string","description":"Unique AWS AppSync GraphQL API identifier where this data source will be created."},"description":{"type":"string","description":"The description of the data source."},"dynamoDbConfig":{"$ref":"#/types/aws-native:appsync:DataSourceDynamoDbConfig","description":"AWS Region and TableName for an Amazon DynamoDB table in your account."},"elasticsearchConfig":{"$ref":"#/types/aws-native:appsync:DataSourceElasticsearchConfig","description":"AWS Region and Endpoints for an Amazon OpenSearch Service domain in your account.\nAs of September 2021, Amazon Elasticsearch Service is Amazon OpenSearch Service. This property is deprecated. For new data sources, use OpenSearchServiceConfig to specify an OpenSearch Service data source."},"eventBridgeConfig":{"$ref":"#/types/aws-native:appsync:DataSourceEventBridgeConfig","description":"ARN for the EventBridge bus."},"httpConfig":{"$ref":"#/types/aws-native:appsync:DataSourceHttpConfig","description":"Endpoints for an HTTP data source."},"lambdaConfig":{"$ref":"#/types/aws-native:appsync:DataSourceLambdaConfig","description":"An ARN of a Lambda function in valid ARN format. This can be the ARN of a Lambda function that exists in the current account or in another account."},"metricsConfig":{"$ref":"#/types/aws-native:appsync:DataSourceMetricsConfig","description":"Enables or disables enhanced data source metrics for specified data sources. Note that `MetricsConfig` won't be used unless the `dataSourceLevelMetricsBehavior` value is set to `PER_DATA_SOURCE_METRICS` . If the `dataSourceLevelMetricsBehavior` is set to `FULL_REQUEST_DATA_SOURCE_METRICS` instead, `MetricsConfig` will be ignored. However, you can still set its value.\n\n`MetricsConfig` can be `ENABLED` or `DISABLED` ."},"name":{"type":"string","description":"Friendly name for you to identify your AppSync data source after creation."},"openSearchServiceConfig":{"$ref":"#/types/aws-native:appsync:DataSourceOpenSearchServiceConfig","description":"AWS Region and Endpoints for an Amazon OpenSearch Service domain in your account."},"relationalDatabaseConfig":{"$ref":"#/types/aws-native:appsync:DataSourceRelationalDatabaseConfig","description":"Relational Database configuration of the relational database data source."},"serviceRoleArn":{"type":"string","description":"The AWS Identity and Access Management service role ARN for the data source. The system assumes this role when accessing the data source."},"type":{"type":"string","description":"The type of the data source."}},"requiredInputs":["apiId","type"]},"aws-native:appsync:DomainName":{"description":"Resource Type definition for AWS::AppSync::DomainName","properties":{"appSyncDomainName":{"type":"string","description":"The domain name provided by AWS AppSync ."},"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate. This will be an Certificate Manager certificate.","replaceOnChanges":true},"description":{"type":"string","description":"The decription for your domain name."},"domainName":{"type":"string","description":"The domain name.","language":{"csharp":{"name":"DomainNameValue"}},"replaceOnChanges":true},"domainNameArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Domain Name."},"hostedZoneId":{"type":"string","description":"The ID of your Amazon Route 53 hosted zone."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this domain name."}},"type":"object","required":["appSyncDomainName","certificateArn","domainName","domainNameArn","hostedZoneId"],"inputProperties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate. This will be an Certificate Manager certificate."},"description":{"type":"string","description":"The decription for your domain name."},"domainName":{"type":"string","description":"The domain name.","language":{"csharp":{"name":"DomainNameValue"}}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this domain name."}},"requiredInputs":["certificateArn","domainName"]},"aws-native:appsync:DomainNameApiAssociation":{"description":"Resource Type definition for AWS::AppSync::DomainNameApiAssociation","properties":{"apiAssociationIdentifier":{"type":"string"},"apiId":{"type":"string","description":"The API ID."},"domainName":{"type":"string","description":"The domain name.","replaceOnChanges":true}},"type":"object","required":["apiAssociationIdentifier","apiId","domainName"],"inputProperties":{"apiId":{"type":"string","description":"The API ID."},"domainName":{"type":"string","description":"The domain name."}},"requiredInputs":["apiId","domainName"]},"aws-native:appsync:FunctionConfiguration":{"description":"An example resource schema demonstrating some basic constructs and validation rules.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var graphQlApiId = config.Require(\"graphQlApiId\");\n    var name = config.Require(\"name\");\n    var description = config.Require(\"description\");\n    var dataSourceName = config.Require(\"dataSourceName\");\n    var functionVersion = config.Require(\"functionVersion\");\n    var requestMappingTemplateS3LocationInput = config.Require(\"requestMappingTemplateS3LocationInput\");\n    var responseMappingTemplateS3LocationInput = config.Require(\"responseMappingTemplateS3LocationInput\");\n    var functionConfiguration = new AwsNative.AppSync.FunctionConfiguration(\"functionConfiguration\", new()\n    {\n        ApiId = graphQlApiId,\n        Name = name,\n        Description = description,\n        FunctionVersion = functionVersion,\n        DataSourceName = dataSourceName,\n        RequestMappingTemplateS3Location = requestMappingTemplateS3LocationInput,\n        ResponseMappingTemplateS3Location = responseMappingTemplateS3LocationInput,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appsync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tgraphQlApiId := cfg.Require(\"graphQlApiId\")\n\t\tname := cfg.Require(\"name\")\n\t\tdescription := cfg.Require(\"description\")\n\t\tdataSourceName := cfg.Require(\"dataSourceName\")\n\t\tfunctionVersion := cfg.Require(\"functionVersion\")\n\t\trequestMappingTemplateS3LocationInput := cfg.Require(\"requestMappingTemplateS3LocationInput\")\n\t\tresponseMappingTemplateS3LocationInput := cfg.Require(\"responseMappingTemplateS3LocationInput\")\n\t\t_, err := appsync.NewFunctionConfiguration(ctx, \"functionConfiguration\", \u0026appsync.FunctionConfigurationArgs{\n\t\t\tApiId:                             pulumi.String(pulumi.String(graphQlApiId)),\n\t\t\tName:                              pulumi.String(pulumi.String(name)),\n\t\t\tDescription:                       pulumi.String(pulumi.String(description)),\n\t\t\tFunctionVersion:                   pulumi.String(pulumi.String(functionVersion)),\n\t\t\tDataSourceName:                    pulumi.String(pulumi.String(dataSourceName)),\n\t\t\tRequestMappingTemplateS3Location:  pulumi.String(pulumi.String(requestMappingTemplateS3LocationInput)),\n\t\t\tResponseMappingTemplateS3Location: pulumi.String(pulumi.String(responseMappingTemplateS3LocationInput)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst graphQlApiId = config.require(\"graphQlApiId\");\nconst name = config.require(\"name\");\nconst description = config.require(\"description\");\nconst dataSourceName = config.require(\"dataSourceName\");\nconst functionVersion = config.require(\"functionVersion\");\nconst requestMappingTemplateS3LocationInput = config.require(\"requestMappingTemplateS3LocationInput\");\nconst responseMappingTemplateS3LocationInput = config.require(\"responseMappingTemplateS3LocationInput\");\nconst functionConfiguration = new aws_native.appsync.FunctionConfiguration(\"functionConfiguration\", {\n    apiId: graphQlApiId,\n    name: name,\n    description: description,\n    functionVersion: functionVersion,\n    dataSourceName: dataSourceName,\n    requestMappingTemplateS3Location: requestMappingTemplateS3LocationInput,\n    responseMappingTemplateS3Location: responseMappingTemplateS3LocationInput,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ngraph_ql_api_id = config.require(\"graphQlApiId\")\nname = config.require(\"name\")\ndescription = config.require(\"description\")\ndata_source_name = config.require(\"dataSourceName\")\nfunction_version = config.require(\"functionVersion\")\nrequest_mapping_template_s3_location_input = config.require(\"requestMappingTemplateS3LocationInput\")\nresponse_mapping_template_s3_location_input = config.require(\"responseMappingTemplateS3LocationInput\")\nfunction_configuration = aws_native.appsync.FunctionConfiguration(\"functionConfiguration\",\n    api_id=graph_ql_api_id,\n    name=name,\n    description=description,\n    function_version=function_version,\n    data_source_name=data_source_name,\n    request_mapping_template_s3_location=request_mapping_template_s3_location_input,\n    response_mapping_template_s3_location=response_mapping_template_s3_location_input)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"apiId":{"type":"string","description":"The AWS AppSync GraphQL API that you want to attach using this function.","replaceOnChanges":true},"code":{"type":"string","description":"The resolver code that contains the request and response functions. When code is used, the runtime is required. The runtime value must be APPSYNC_JS."},"codeS3Location":{"type":"string","description":"The Amazon S3 endpoint (where the code is located??)."},"dataSourceName":{"type":"string","description":"The name of data source this function will attach."},"description":{"type":"string","description":"The function description."},"functionArn":{"type":"string","description":"The ARN for the function generated by the service"},"functionId":{"type":"string","description":"The unique identifier for the function generated by the service"},"functionVersion":{"type":"string","description":"The version of the request mapping template. Currently, only the 2018-05-29 version of the template is supported."},"maxBatchSize":{"type":"integer","description":"The maximum number of resolver request inputs that will be sent to a single AWS Lambda function in a BatchInvoke operation."},"name":{"type":"string","description":"The name of the function."},"requestMappingTemplate":{"type":"string","description":"The Function request mapping template. Functions support only the 2018-05-29 version of the request mapping template."},"requestMappingTemplateS3Location":{"type":"string","description":"Describes a Sync configuration for a resolver. Contains information on which Conflict Detection, as well as Resolution strategy, should be performed when the resolver is invoked."},"responseMappingTemplate":{"type":"string","description":"The Function response mapping template."},"responseMappingTemplateS3Location":{"type":"string","description":"The location of a response mapping template in an Amazon S3 bucket. Use this if you want to provision with a template file in Amazon S3 rather than embedding it in your CloudFormation template."},"runtime":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationAppSyncRuntime","description":"Describes a runtime used by an AWS AppSync pipeline resolver or AWS AppSync function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified."},"syncConfig":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationSyncConfig","description":"Describes a Sync configuration for a resolver. Specifies which Conflict Detection strategy and Resolution strategy to use when the resolver is invoked."}},"type":"object","required":["apiId","dataSourceName","functionArn","functionId","name"],"inputProperties":{"apiId":{"type":"string","description":"The AWS AppSync GraphQL API that you want to attach using this function."},"code":{"type":"string","description":"The resolver code that contains the request and response functions. When code is used, the runtime is required. The runtime value must be APPSYNC_JS."},"codeS3Location":{"type":"string","description":"The Amazon S3 endpoint (where the code is located??)."},"dataSourceName":{"type":"string","description":"The name of data source this function will attach."},"description":{"type":"string","description":"The function description."},"functionVersion":{"type":"string","description":"The version of the request mapping template. Currently, only the 2018-05-29 version of the template is supported."},"maxBatchSize":{"type":"integer","description":"The maximum number of resolver request inputs that will be sent to a single AWS Lambda function in a BatchInvoke operation."},"name":{"type":"string","description":"The name of the function."},"requestMappingTemplate":{"type":"string","description":"The Function request mapping template. Functions support only the 2018-05-29 version of the request mapping template."},"requestMappingTemplateS3Location":{"type":"string","description":"Describes a Sync configuration for a resolver. Contains information on which Conflict Detection, as well as Resolution strategy, should be performed when the resolver is invoked."},"responseMappingTemplate":{"type":"string","description":"The Function response mapping template."},"responseMappingTemplateS3Location":{"type":"string","description":"The location of a response mapping template in an Amazon S3 bucket. Use this if you want to provision with a template file in Amazon S3 rather than embedding it in your CloudFormation template."},"runtime":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationAppSyncRuntime","description":"Describes a runtime used by an AWS AppSync pipeline resolver or AWS AppSync function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified."},"syncConfig":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationSyncConfig","description":"Describes a Sync configuration for a resolver. Specifies which Conflict Detection strategy and Resolution strategy to use when the resolver is invoked."}},"requiredInputs":["apiId","dataSourceName"]},"aws-native:appsync:GraphQlApi":{"description":"Resource Type definition for AWS::AppSync::GraphQLApi","properties":{"additionalAuthenticationProviders":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:GraphQlApiAdditionalAuthenticationProvider"},"description":"A list of additional authentication providers for the GraphqlApi API."},"apiId":{"type":"string","description":"Unique AWS AppSync GraphQL API identifier."},"apiType":{"type":"string","description":"The value that indicates whether the GraphQL API is a standard API (GRAPHQL) or merged API (MERGED)."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the API key"},"authenticationType":{"type":"string","description":"Security configuration for your GraphQL API"},"enhancedMetricsConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiEnhancedMetricsConfig","description":"Enables and controls the enhanced metrics feature. Enhanced metrics emit granular data on API usage and performance such as AppSync request and error counts, latency, and cache hits/misses. All enhanced metric data is sent to your CloudWatch account, and you can configure the types of data that will be sent."},"environmentVariables":{"type":"object","additionalProperties":{"type":"string"},"description":"A map containing the list of resources with their properties and environment variables."},"graphQlDns":{"type":"string","description":"The fully qualified domain name (FQDN) of the endpoint URL of your GraphQL API."},"graphQlEndpointArn":{"type":"string","description":"The GraphQL endpoint ARN."},"graphQlUrl":{"type":"string","description":"The Endpoint URL of your GraphQL API."},"introspectionConfig":{"type":"string","description":"Sets the value of the GraphQL API to enable (ENABLED) or disable (DISABLED) introspection. If no value is provided, the introspection configuration will be set to ENABLED by default. This field will produce an error if the operation attempts to use the introspection feature while this field is disabled."},"lambdaAuthorizerConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLambdaAuthorizerConfig","description":"A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time."},"logConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLogConfig","description":"The Amazon CloudWatch Logs configuration."},"mergedApiExecutionRoleArn":{"type":"string","description":"The AWS Identity and Access Management service role ARN for a merged API. "},"name":{"type":"string","description":"The API name"},"openIdConnectConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiOpenIdConnectConfig","description":"The OpenID Connect configuration."},"ownerContact":{"type":"string","description":"The owner contact information for an API resource."},"queryDepthLimit":{"type":"integer","description":"The maximum depth a query can have in a single request. Depth refers to the amount of nested levels allowed in the body of query."},"realtimeDns":{"type":"string","description":"The fully qualified domain name (FQDN) of the real-time endpoint URL of your GraphQL API."},"realtimeUrl":{"type":"string","description":"The GraphQL API real-time endpoint URL."},"resolverCountLimit":{"type":"integer","description":"The maximum number of resolvers that can be invoked in a single request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this GraphQL API.\n\n"},"userPoolConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiUserPoolConfig","description":"Optional authorization configuration for using Amazon Cognito user pools with your GraphQL endpoint.\n\n"},"visibility":{"type":"string","description":"Sets the scope of the GraphQL API to public (GLOBAL) or private (PRIVATE). By default, the scope is set to Global if no value is provided."},"xrayEnabled":{"type":"boolean","description":"A flag indicating whether to use AWS X-Ray tracing for this GraphqlApi.\n\n"}},"type":"object","required":["apiId","arn","authenticationType","graphQlDns","graphQlEndpointArn","graphQlUrl","name","realtimeDns","realtimeUrl"],"inputProperties":{"additionalAuthenticationProviders":{"type":"array","items":{"$ref":"#/types/aws-native:appsync:GraphQlApiAdditionalAuthenticationProvider"},"description":"A list of additional authentication providers for the GraphqlApi API."},"apiType":{"type":"string","description":"The value that indicates whether the GraphQL API is a standard API (GRAPHQL) or merged API (MERGED)."},"authenticationType":{"type":"string","description":"Security configuration for your GraphQL API"},"enhancedMetricsConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiEnhancedMetricsConfig","description":"Enables and controls the enhanced metrics feature. Enhanced metrics emit granular data on API usage and performance such as AppSync request and error counts, latency, and cache hits/misses. All enhanced metric data is sent to your CloudWatch account, and you can configure the types of data that will be sent."},"environmentVariables":{"type":"object","additionalProperties":{"type":"string"},"description":"A map containing the list of resources with their properties and environment variables."},"introspectionConfig":{"type":"string","description":"Sets the value of the GraphQL API to enable (ENABLED) or disable (DISABLED) introspection. If no value is provided, the introspection configuration will be set to ENABLED by default. This field will produce an error if the operation attempts to use the introspection feature while this field is disabled."},"lambdaAuthorizerConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLambdaAuthorizerConfig","description":"A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time."},"logConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLogConfig","description":"The Amazon CloudWatch Logs configuration."},"mergedApiExecutionRoleArn":{"type":"string","description":"The AWS Identity and Access Management service role ARN for a merged API. "},"name":{"type":"string","description":"The API name"},"openIdConnectConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiOpenIdConnectConfig","description":"The OpenID Connect configuration."},"ownerContact":{"type":"string","description":"The owner contact information for an API resource."},"queryDepthLimit":{"type":"integer","description":"The maximum depth a query can have in a single request. Depth refers to the amount of nested levels allowed in the body of query."},"resolverCountLimit":{"type":"integer","description":"The maximum number of resolvers that can be invoked in a single request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this GraphQL API.\n\n"},"userPoolConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiUserPoolConfig","description":"Optional authorization configuration for using Amazon Cognito user pools with your GraphQL endpoint.\n\n"},"visibility":{"type":"string","description":"Sets the scope of the GraphQL API to public (GLOBAL) or private (PRIVATE). By default, the scope is set to Global if no value is provided."},"xrayEnabled":{"type":"boolean","description":"A flag indicating whether to use AWS X-Ray tracing for this GraphqlApi.\n\n"}},"requiredInputs":["authenticationType"]},"aws-native:appsync:Resolver":{"description":"The ``AWS::AppSync::Resolver`` resource defines the logical GraphQL resolver that you attach to fields in a schema. Request and response templates for resolvers are written in Apache Velocity Template Language (VTL) format. For more information about resolvers, see [Resolver Mapping Template Reference](https://docs.aws.amazon.com/appsync/latest/devguide/resolver-mapping-template-reference.html).\n  When you submit an update, CFNLong updates resources based on differences between what you submit and the stack's current template. To cause this resource to be updated you must change a property value for this resource in the CFNshort template. Changing the S3 file content without changing a property value will not result in an update operation.\n See [Update Behaviors of Stack Resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html) in the *User Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var graphQlApiId = config.Require(\"graphQlApiId\");\n    var dataSourceName = config.Require(\"dataSourceName\");\n    var fieldName = config.Require(\"fieldName\");\n    var typeName = config.Require(\"typeName\");\n    var requestMappingTemplateS3LocationInput = config.Require(\"requestMappingTemplateS3LocationInput\");\n    var responseMappingTemplateS3LocationInput = config.Require(\"responseMappingTemplateS3LocationInput\");\n    var resolver = new AwsNative.AppSync.Resolver(\"resolver\", new()\n    {\n        ApiId = graphQlApiId,\n        TypeName = typeName,\n        FieldName = fieldName,\n        DataSourceName = dataSourceName,\n        RequestMappingTemplateS3Location = requestMappingTemplateS3LocationInput,\n        ResponseMappingTemplateS3Location = responseMappingTemplateS3LocationInput,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/appsync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tgraphQlApiId := cfg.Require(\"graphQlApiId\")\n\t\tdataSourceName := cfg.Require(\"dataSourceName\")\n\t\tfieldName := cfg.Require(\"fieldName\")\n\t\ttypeName := cfg.Require(\"typeName\")\n\t\trequestMappingTemplateS3LocationInput := cfg.Require(\"requestMappingTemplateS3LocationInput\")\n\t\tresponseMappingTemplateS3LocationInput := cfg.Require(\"responseMappingTemplateS3LocationInput\")\n\t\t_, err := appsync.NewResolver(ctx, \"resolver\", \u0026appsync.ResolverArgs{\n\t\t\tApiId:                             pulumi.String(pulumi.String(graphQlApiId)),\n\t\t\tTypeName:                          pulumi.String(pulumi.String(typeName)),\n\t\t\tFieldName:                         pulumi.String(pulumi.String(fieldName)),\n\t\t\tDataSourceName:                    pulumi.String(pulumi.String(dataSourceName)),\n\t\t\tRequestMappingTemplateS3Location:  pulumi.String(pulumi.String(requestMappingTemplateS3LocationInput)),\n\t\t\tResponseMappingTemplateS3Location: pulumi.String(pulumi.String(responseMappingTemplateS3LocationInput)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst graphQlApiId = config.require(\"graphQlApiId\");\nconst dataSourceName = config.require(\"dataSourceName\");\nconst fieldName = config.require(\"fieldName\");\nconst typeName = config.require(\"typeName\");\nconst requestMappingTemplateS3LocationInput = config.require(\"requestMappingTemplateS3LocationInput\");\nconst responseMappingTemplateS3LocationInput = config.require(\"responseMappingTemplateS3LocationInput\");\nconst resolver = new aws_native.appsync.Resolver(\"resolver\", {\n    apiId: graphQlApiId,\n    typeName: typeName,\n    fieldName: fieldName,\n    dataSourceName: dataSourceName,\n    requestMappingTemplateS3Location: requestMappingTemplateS3LocationInput,\n    responseMappingTemplateS3Location: responseMappingTemplateS3LocationInput,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ngraph_ql_api_id = config.require(\"graphQlApiId\")\ndata_source_name = config.require(\"dataSourceName\")\nfield_name = config.require(\"fieldName\")\ntype_name = config.require(\"typeName\")\nrequest_mapping_template_s3_location_input = config.require(\"requestMappingTemplateS3LocationInput\")\nresponse_mapping_template_s3_location_input = config.require(\"responseMappingTemplateS3LocationInput\")\nresolver = aws_native.appsync.Resolver(\"resolver\",\n    api_id=graph_ql_api_id,\n    type_name=type_name,\n    field_name=field_name,\n    data_source_name=data_source_name,\n    request_mapping_template_s3_location=request_mapping_template_s3_location_input,\n    response_mapping_template_s3_location=response_mapping_template_s3_location_input)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"apiId":{"type":"string","description":"The APSYlong GraphQL API to which you want to attach this resolver.","replaceOnChanges":true},"cachingConfig":{"$ref":"#/types/aws-native:appsync:ResolverCachingConfig","description":"The caching configuration for the resolver."},"code":{"type":"string","description":"The ``resolver`` code that contains the request and response functions. When code is used, the ``runtime`` is required. The runtime value must be ``APPSYNC_JS``."},"codeS3Location":{"type":"string","description":"The Amazon S3 endpoint."},"dataSourceName":{"type":"string","description":"The resolver data source name."},"fieldName":{"type":"string","description":"The GraphQL field on a type that invokes the resolver.","replaceOnChanges":true},"kind":{"type":"string","description":"The resolver type.\n  +  *UNIT*: A UNIT resolver type. A UNIT resolver is the default resolver type. You can use a UNIT resolver to run a GraphQL query against a single data source.\n  +  *PIPELINE*: A PIPELINE resolver type. You can use a PIPELINE resolver to invoke a series of ``Function`` objects in a serial manner. You can use a pipeline resolver to run a GraphQL query against multiple data sources."},"maxBatchSize":{"type":"integer","description":"The maximum number of resolver request inputs that will be sent to a single LAMlong function in a ``BatchInvoke`` operation."},"metricsConfig":{"$ref":"#/types/aws-native:appsync:ResolverMetricsConfig","description":"Enables or disables enhanced resolver metrics for specified resolvers. Note that ``MetricsConfig`` won't be used unless the ``resolverLevelMetricsBehavior`` value is set to ``PER_RESOLVER_METRICS``. If the ``resolverLevelMetricsBehavior`` is set to ``FULL_REQUEST_RESOLVER_METRICS`` instead, ``MetricsConfig`` will be ignored. However, you can still set its value."},"pipelineConfig":{"$ref":"#/types/aws-native:appsync:ResolverPipelineConfig","description":"Functions linked with the pipeline resolver."},"requestMappingTemplate":{"type":"string","description":"The request mapping template.\n Request mapping templates are optional when using a Lambda data source. For all other data sources, a request mapping template is required."},"requestMappingTemplateS3Location":{"type":"string","description":"The location of a request mapping template in an S3 bucket. Use this if you want to provision with a template file in S3 rather than embedding it in your CFNshort template."},"resolverArn":{"type":"string","description":"ARN of the resolver, such as `arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/types/typename/resolvers/resolvername` ."},"responseMappingTemplate":{"type":"string","description":"The response mapping template."},"responseMappingTemplateS3Location":{"type":"string","description":"The location of a response mapping template in an S3 bucket. Use this if you want to provision with a template file in S3 rather than embedding it in your CFNshort template."},"runtime":{"$ref":"#/types/aws-native:appsync:ResolverAppSyncRuntime","description":"Describes a runtime used by an APSYlong resolver or APSYlong function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified."},"syncConfig":{"$ref":"#/types/aws-native:appsync:ResolverSyncConfig","description":"The ``SyncConfig`` for a resolver attached to a versioned data source."},"typeName":{"type":"string","description":"The GraphQL type that invokes this resolver.","replaceOnChanges":true}},"type":"object","required":["apiId","fieldName","resolverArn","typeName"],"inputProperties":{"apiId":{"type":"string","description":"The APSYlong GraphQL API to which you want to attach this resolver."},"cachingConfig":{"$ref":"#/types/aws-native:appsync:ResolverCachingConfig","description":"The caching configuration for the resolver."},"code":{"type":"string","description":"The ``resolver`` code that contains the request and response functions. When code is used, the ``runtime`` is required. The runtime value must be ``APPSYNC_JS``."},"codeS3Location":{"type":"string","description":"The Amazon S3 endpoint."},"dataSourceName":{"type":"string","description":"The resolver data source name."},"fieldName":{"type":"string","description":"The GraphQL field on a type that invokes the resolver."},"kind":{"type":"string","description":"The resolver type.\n  +  *UNIT*: A UNIT resolver type. A UNIT resolver is the default resolver type. You can use a UNIT resolver to run a GraphQL query against a single data source.\n  +  *PIPELINE*: A PIPELINE resolver type. You can use a PIPELINE resolver to invoke a series of ``Function`` objects in a serial manner. You can use a pipeline resolver to run a GraphQL query against multiple data sources."},"maxBatchSize":{"type":"integer","description":"The maximum number of resolver request inputs that will be sent to a single LAMlong function in a ``BatchInvoke`` operation."},"metricsConfig":{"$ref":"#/types/aws-native:appsync:ResolverMetricsConfig","description":"Enables or disables enhanced resolver metrics for specified resolvers. Note that ``MetricsConfig`` won't be used unless the ``resolverLevelMetricsBehavior`` value is set to ``PER_RESOLVER_METRICS``. If the ``resolverLevelMetricsBehavior`` is set to ``FULL_REQUEST_RESOLVER_METRICS`` instead, ``MetricsConfig`` will be ignored. However, you can still set its value."},"pipelineConfig":{"$ref":"#/types/aws-native:appsync:ResolverPipelineConfig","description":"Functions linked with the pipeline resolver."},"requestMappingTemplate":{"type":"string","description":"The request mapping template.\n Request mapping templates are optional when using a Lambda data source. For all other data sources, a request mapping template is required."},"requestMappingTemplateS3Location":{"type":"string","description":"The location of a request mapping template in an S3 bucket. Use this if you want to provision with a template file in S3 rather than embedding it in your CFNshort template."},"responseMappingTemplate":{"type":"string","description":"The response mapping template."},"responseMappingTemplateS3Location":{"type":"string","description":"The location of a response mapping template in an S3 bucket. Use this if you want to provision with a template file in S3 rather than embedding it in your CFNshort template."},"runtime":{"$ref":"#/types/aws-native:appsync:ResolverAppSyncRuntime","description":"Describes a runtime used by an APSYlong resolver or APSYlong function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified."},"syncConfig":{"$ref":"#/types/aws-native:appsync:ResolverSyncConfig","description":"The ``SyncConfig`` for a resolver attached to a versioned data source."},"typeName":{"type":"string","description":"The GraphQL type that invokes this resolver."}},"requiredInputs":["apiId","fieldName","typeName"]},"aws-native:appsync:SourceApiAssociation":{"description":"Resource Type definition for AWS::AppSync::SourceApiAssociation","properties":{"associationArn":{"type":"string","description":"ARN of the SourceApiAssociation."},"associationId":{"type":"string","description":"Id of the SourceApiAssociation."},"description":{"type":"string","description":"Description of the SourceApiAssociation."},"lastSuccessfulMergeDate":{"type":"string","description":"Date of last schema successful merge."},"mergedApiArn":{"type":"string","description":"ARN of the Merged API in the association."},"mergedApiId":{"type":"string","description":"GraphQLApiId of the Merged API in the association."},"mergedApiIdentifier":{"type":"string","description":"Identifier of the Merged GraphQLApi to associate. It could be either GraphQLApi ApiId or ARN","replaceOnChanges":true},"sourceApiArn":{"type":"string","description":"ARN of the source API in the association."},"sourceApiAssociationConfig":{"$ref":"#/types/aws-native:appsync:SourceApiAssociationConfig","description":"Customized configuration for SourceApiAssociation."},"sourceApiAssociationStatus":{"$ref":"#/types/aws-native:appsync:SourceApiAssociationStatus","description":"Current status of SourceApiAssociation."},"sourceApiAssociationStatusDetail":{"type":"string","description":"Current SourceApiAssociation status details."},"sourceApiId":{"type":"string","description":"GraphQLApiId of the source API in the association."},"sourceApiIdentifier":{"type":"string","description":"Identifier of the Source GraphQLApi to associate. It could be either GraphQLApi ApiId or ARN","replaceOnChanges":true}},"type":"object","required":["associationArn","associationId","lastSuccessfulMergeDate","mergedApiArn","mergedApiId","sourceApiArn","sourceApiAssociationStatus","sourceApiAssociationStatusDetail","sourceApiId"],"inputProperties":{"description":{"type":"string","description":"Description of the SourceApiAssociation."},"mergedApiIdentifier":{"type":"string","description":"Identifier of the Merged GraphQLApi to associate. It could be either GraphQLApi ApiId or ARN"},"sourceApiAssociationConfig":{"$ref":"#/types/aws-native:appsync:SourceApiAssociationConfig","description":"Customized configuration for SourceApiAssociation."},"sourceApiIdentifier":{"type":"string","description":"Identifier of the Source GraphQLApi to associate. It could be either GraphQLApi ApiId or ARN"}}},"aws-native:aps:AnomalyDetector":{"description":"AnomalyDetector schema for cloudformation.","properties":{"alias":{"type":"string","description":"The AnomalyDetector alias.","replaceOnChanges":true},"arn":{"type":"string","description":"The AnomalyDetector ARN."},"configuration":{"$ref":"#/types/aws-native:aps:AnomalyDetectorConfiguration","description":"Determines the anomaly detector's algorithm and its configuration."},"evaluationIntervalInSeconds":{"type":"integer","description":"The AnomalyDetector period of detection and metric generation."},"labels":{"type":"array","items":{"$ref":"#/types/aws-native:aps:AnomalyDetectorLabel"},"description":"An array of key-value pairs to provide meta-data."},"missingDataAction":{"$ref":"#/types/aws-native:aps:AnomalyDetectorMissingDataAction","description":"The action to perform when running the expression returns no data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workspace":{"type":"string","description":"Required to identify a specific APS Workspace associated with this Anomaly Detector.","replaceOnChanges":true}},"type":"object","required":["alias","arn","configuration","workspace"],"inputProperties":{"alias":{"type":"string","description":"The AnomalyDetector alias."},"configuration":{"$ref":"#/types/aws-native:aps:AnomalyDetectorConfiguration","description":"Determines the anomaly detector's algorithm and its configuration."},"evaluationIntervalInSeconds":{"type":"integer","description":"The AnomalyDetector period of detection and metric generation."},"labels":{"type":"array","items":{"$ref":"#/types/aws-native:aps:AnomalyDetectorLabel"},"description":"An array of key-value pairs to provide meta-data."},"missingDataAction":{"$ref":"#/types/aws-native:aps:AnomalyDetectorMissingDataAction","description":"The action to perform when running the expression returns no data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workspace":{"type":"string","description":"Required to identify a specific APS Workspace associated with this Anomaly Detector."}},"requiredInputs":["alias","configuration","workspace"]},"aws-native:aps:ResourcePolicy":{"description":"Resource Type definition for AWS::APS::ResourcePolicy","properties":{"policyDocument":{"type":"string","description":"The JSON to use as the Resource-based Policy."},"workspaceArn":{"type":"string","description":"The Arn of an APS Workspace that the PolicyDocument will be attached to.","replaceOnChanges":true}},"type":"object","required":["policyDocument","workspaceArn"],"inputProperties":{"policyDocument":{"type":"string","description":"The JSON to use as the Resource-based Policy."},"workspaceArn":{"type":"string","description":"The Arn of an APS Workspace that the PolicyDocument will be attached to."}},"requiredInputs":["policyDocument","workspaceArn"]},"aws-native:aps:RuleGroupsNamespace":{"description":"RuleGroupsNamespace schema for cloudformation.","properties":{"arn":{"type":"string","description":"The RuleGroupsNamespace ARN."},"data":{"type":"string","description":"The RuleGroupsNamespace data."},"name":{"type":"string","description":"The RuleGroupsNamespace name.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workspace":{"type":"string","description":"Required to identify a specific APS Workspace associated with this RuleGroupsNamespace.","replaceOnChanges":true}},"type":"object","required":["arn","data","name","workspace"],"inputProperties":{"data":{"type":"string","description":"The RuleGroupsNamespace data."},"name":{"type":"string","description":"The RuleGroupsNamespace name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workspace":{"type":"string","description":"Required to identify a specific APS Workspace associated with this RuleGroupsNamespace."}},"requiredInputs":["data","workspace"]},"aws-native:aps:Scraper":{"description":"Resource Type definition for AWS::APS::Scraper","properties":{"alias":{"type":"string","description":"Scraper alias."},"arn":{"type":"string","description":"Scraper ARN."},"destination":{"$ref":"#/types/aws-native:aps:ScraperDestination","description":"The Amazon Managed Service for Prometheus workspace the scraper sends metrics to."},"roleArn":{"type":"string","description":"IAM role ARN for the scraper."},"roleConfiguration":{"$ref":"#/types/aws-native:aps:ScraperRoleConfiguration","description":"The role configuration in an Amazon Managed Service for Prometheus scraper."},"scrapeConfiguration":{"$ref":"#/types/aws-native:aps:ScraperScrapeConfiguration","description":"The configuration in use by the scraper."},"scraperId":{"type":"string","description":"Required to identify a specific scraper."},"scraperLoggingConfiguration":{"$ref":"#/types/aws-native:aps:ScraperLoggingConfiguration","description":"The definition of logging configuration in an Amazon Managed Service for Prometheus workspace."},"source":{"$ref":"#/types/aws-native:aps:ScraperSource","description":"The Amazon EKS cluster from which the scraper collects metrics.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","destination","roleArn","scrapeConfiguration","scraperId","source"],"inputProperties":{"alias":{"type":"string","description":"Scraper alias."},"destination":{"$ref":"#/types/aws-native:aps:ScraperDestination","description":"The Amazon Managed Service for Prometheus workspace the scraper sends metrics to."},"roleConfiguration":{"$ref":"#/types/aws-native:aps:ScraperRoleConfiguration","description":"The role configuration in an Amazon Managed Service for Prometheus scraper."},"scrapeConfiguration":{"$ref":"#/types/aws-native:aps:ScraperScrapeConfiguration","description":"The configuration in use by the scraper."},"scraperLoggingConfiguration":{"$ref":"#/types/aws-native:aps:ScraperLoggingConfiguration","description":"The definition of logging configuration in an Amazon Managed Service for Prometheus workspace."},"source":{"$ref":"#/types/aws-native:aps:ScraperSource","description":"The Amazon EKS cluster from which the scraper collects metrics."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["destination","scrapeConfiguration","source"]},"aws-native:aps:Workspace":{"description":"Resource Type definition for AWS::APS::Workspace\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var apsWorkspace = new AwsNative.Aps.Workspace(\"apsWorkspace\", new()\n    {\n        Alias = \"TestWorkspace\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"BusinessPurpose\",\n                Value = \"LoadTesting\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/aps\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := aps.NewWorkspace(ctx, \"apsWorkspace\", \u0026aps.WorkspaceArgs{\n\t\t\tAlias: pulumi.String(\"TestWorkspace\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"BusinessPurpose\"),\n\t\t\t\t\tValue: pulumi.String(\"LoadTesting\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst apsWorkspace = new aws_native.aps.Workspace(\"apsWorkspace\", {\n    alias: \"TestWorkspace\",\n    tags: [{\n        key: \"BusinessPurpose\",\n        value: \"LoadTesting\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naps_workspace = aws_native.aps.Workspace(\"apsWorkspace\",\n    alias=\"TestWorkspace\",\n    tags=[{\n        \"key\": \"BusinessPurpose\",\n        \"value\": \"LoadTesting\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var apsWorkspace = new AwsNative.Aps.Workspace(\"apsWorkspace\", new()\n    {\n        Alias = \"TestWorkspace\",\n        LoggingConfiguration = new AwsNative.Aps.Inputs.WorkspaceLoggingConfigurationArgs\n        {\n            LogGroupArn = \"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"BusinessPurpose\",\n                Value = \"LoadTesting\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/aps\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := aps.NewWorkspace(ctx, \"apsWorkspace\", \u0026aps.WorkspaceArgs{\n\t\t\tAlias: pulumi.String(\"TestWorkspace\"),\n\t\t\tLoggingConfiguration: \u0026aps.WorkspaceLoggingConfigurationArgs{\n\t\t\t\tLogGroupArn: pulumi.String(\"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"BusinessPurpose\"),\n\t\t\t\t\tValue: pulumi.String(\"LoadTesting\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst apsWorkspace = new aws_native.aps.Workspace(\"apsWorkspace\", {\n    alias: \"TestWorkspace\",\n    loggingConfiguration: {\n        logGroupArn: \"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\",\n    },\n    tags: [{\n        key: \"BusinessPurpose\",\n        value: \"LoadTesting\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naps_workspace = aws_native.aps.Workspace(\"apsWorkspace\",\n    alias=\"TestWorkspace\",\n    logging_configuration={\n        \"log_group_arn\": \"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\",\n    },\n    tags=[{\n        \"key\": \"BusinessPurpose\",\n        \"value\": \"LoadTesting\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var apsWorkspace = new AwsNative.Aps.Workspace(\"apsWorkspace\", new()\n    {\n        Alias = \"TestWorkspace\",\n        LoggingConfiguration = new AwsNative.Aps.Inputs.WorkspaceLoggingConfigurationArgs\n        {\n            LogGroupArn = \"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"BusinessPurpose\",\n                Value = \"LoadTesting\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/aps\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := aps.NewWorkspace(ctx, \"apsWorkspace\", \u0026aps.WorkspaceArgs{\n\t\t\tAlias: pulumi.String(\"TestWorkspace\"),\n\t\t\tLoggingConfiguration: \u0026aps.WorkspaceLoggingConfigurationArgs{\n\t\t\t\tLogGroupArn: pulumi.String(\"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"BusinessPurpose\"),\n\t\t\t\t\tValue: pulumi.String(\"LoadTesting\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst apsWorkspace = new aws_native.aps.Workspace(\"apsWorkspace\", {\n    alias: \"TestWorkspace\",\n    loggingConfiguration: {\n        logGroupArn: \"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\",\n    },\n    tags: [{\n        key: \"BusinessPurpose\",\n        value: \"LoadTesting\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naps_workspace = aws_native.aps.Workspace(\"apsWorkspace\",\n    alias=\"TestWorkspace\",\n    logging_configuration={\n        \"log_group_arn\": \"arn:aws:logs:{region}:{account}:log-group:test-log-group:*\",\n    },\n    tags=[{\n        \"key\": \"BusinessPurpose\",\n        \"value\": \"LoadTesting\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"alertManagerDefinition":{"type":"string","description":"The AMP Workspace alert manager definition data"},"alias":{"type":"string","description":"AMP Workspace alias."},"arn":{"type":"string","description":"Workspace arn."},"kmsKeyArn":{"type":"string","description":"KMS Key ARN used to encrypt and decrypt AMP workspace data.","replaceOnChanges":true},"loggingConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceLoggingConfiguration","description":"Contains information about the logging configuration for the workspace."},"prometheusEndpoint":{"type":"string","description":"AMP Workspace prometheus endpoint"},"queryLoggingConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceQueryLoggingConfiguration","description":"The definition of logging configuration in an Amazon Managed Service for Prometheus workspace."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workspaceConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceConfiguration","description":"Use this structure to define label sets and the ingestion limits for time series that match label sets, and to specify the retention period of the workspace."},"workspaceId":{"type":"string","description":"Required to identify a specific APS Workspace."}},"type":"object","required":["arn","prometheusEndpoint","workspaceId"],"inputProperties":{"alertManagerDefinition":{"type":"string","description":"The AMP Workspace alert manager definition data"},"alias":{"type":"string","description":"AMP Workspace alias."},"kmsKeyArn":{"type":"string","description":"KMS Key ARN used to encrypt and decrypt AMP workspace data."},"loggingConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceLoggingConfiguration","description":"Contains information about the logging configuration for the workspace."},"queryLoggingConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceQueryLoggingConfiguration","description":"The definition of logging configuration in an Amazon Managed Service for Prometheus workspace."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workspaceConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceConfiguration","description":"Use this structure to define label sets and the ingestion limits for time series that match label sets, and to specify the retention period of the workspace."}}},"aws-native:arcregionswitch:Plan":{"description":"Represents a plan that specifies Regions, IAM roles, and workflows of logic required to perform the desired change to your multi-Region application","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the plan."},"associatedAlarms":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:arcregionswitch:PlanAssociatedAlarm"},"description":"The associated application health alarms for a plan."},"description":{"type":"string","description":"The description for a plan."},"executionRole":{"type":"string","description":"The execution role for a plan."},"healthChecksForPlan":{"type":"object","additionalProperties":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanHealthCheckState"}}},"name":{"type":"string","description":"The name for a plan.","replaceOnChanges":true},"owner":{"type":"string","description":"The owner of a plan."},"planHealthChecks":{"type":"array","items":{"type":"string"}},"primaryRegion":{"type":"string","description":"The primary Region for a plan.","replaceOnChanges":true},"recoveryApproach":{"$ref":"#/types/aws-native:arcregionswitch:PlanRecoveryApproach","description":"The recovery approach for a Region switch plan, which can be active/active (activeActive) or active/passive (activePassive).","replaceOnChanges":true},"recoveryTimeObjectiveMinutes":{"type":"number","description":"The recovery time objective for a plan."},"regions":{"type":"array","items":{"type":"string"},"description":"The AWS Regions for a plan.","replaceOnChanges":true},"reportConfiguration":{"$ref":"#/types/aws-native:arcregionswitch:PlanReportConfiguration","description":"The report configuration for a plan."},"route53HealthChecks":{"$ref":"#/types/aws-native:arcregionswitch:Route53HealthChecksProperties"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"triggers":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanTrigger"},"description":"The triggers for a plan."},"version":{"type":"string","description":"The version for the plan."},"workflows":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanWorkflow"},"description":"The workflows for a plan."}},"type":"object","required":["arn","executionRole","healthChecksForPlan","name","owner","planHealthChecks","recoveryApproach","regions","route53HealthChecks","version","workflows"],"inputProperties":{"associatedAlarms":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:arcregionswitch:PlanAssociatedAlarm"},"description":"The associated application health alarms for a plan."},"description":{"type":"string","description":"The description for a plan."},"executionRole":{"type":"string","description":"The execution role for a plan."},"name":{"type":"string","description":"The name for a plan."},"primaryRegion":{"type":"string","description":"The primary Region for a plan."},"recoveryApproach":{"$ref":"#/types/aws-native:arcregionswitch:PlanRecoveryApproach","description":"The recovery approach for a Region switch plan, which can be active/active (activeActive) or active/passive (activePassive)."},"recoveryTimeObjectiveMinutes":{"type":"number","description":"The recovery time objective for a plan."},"regions":{"type":"array","items":{"type":"string"},"description":"The AWS Regions for a plan."},"reportConfiguration":{"$ref":"#/types/aws-native:arcregionswitch:PlanReportConfiguration","description":"The report configuration for a plan."},"tags":{"type":"object","additionalProperties":{"type":"string"}},"triggers":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanTrigger"},"description":"The triggers for a plan."},"workflows":{"type":"array","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanWorkflow"},"description":"The workflows for a plan."}},"requiredInputs":["executionRole","recoveryApproach","regions","workflows"]},"aws-native:arczonalshift:AutoshiftObserverNotificationStatus":{"description":"Definition of AWS::ARCZonalShift::AutoshiftObserverNotificationStatus Resource Type","properties":{"accountId":{"type":"string"},"region":{"type":"string"},"status":{"$ref":"#/types/aws-native:arczonalshift:AutoshiftObserverNotificationStatusEnum","replaceOnChanges":true}},"type":"object","required":["accountId","region","status"],"inputProperties":{"status":{"$ref":"#/types/aws-native:arczonalshift:AutoshiftObserverNotificationStatusEnum"}},"requiredInputs":["status"]},"aws-native:arczonalshift:ZonalAutoshiftConfiguration":{"description":"Definition of AWS::ARCZonalShift::ZonalAutoshiftConfiguration Resource Type","properties":{"practiceRunConfiguration":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationPracticeRunConfiguration","description":"A practice run configuration for a resource includes the Amazon CloudWatch alarms that you've specified for a practice run, as well as any blocked dates or blocked windows for the practice run. When a resource has a practice run configuration, ARC shifts traffic for the resource weekly for practice runs.\n\nPractice runs are required for zonal autoshift. The zonal shifts that ARC starts for practice runs help you to ensure that shifting away traffic from an Availability Zone during an autoshift is safe for your application.\n\nYou can update or delete a practice run configuration. Before you delete a practice run configuration, you must disable zonal autoshift for the resource. A practice run configuration is required when zonal autoshift is enabled."},"resourceIdentifier":{"type":"string","description":"The identifier for the resource that AWS shifts traffic for. The identifier is the Amazon Resource Name (ARN) for the resource.\n\nAt this time, supported resources are Network Load Balancers and Application Load Balancers.","replaceOnChanges":true},"zonalAutoshiftStatus":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationZonalAutoshiftStatus","description":"When zonal autoshift is `ENABLED` , you authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. Traffic is also shifted away for the required weekly practice runs."}},"type":"object","inputProperties":{"practiceRunConfiguration":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationPracticeRunConfiguration","description":"A practice run configuration for a resource includes the Amazon CloudWatch alarms that you've specified for a practice run, as well as any blocked dates or blocked windows for the practice run. When a resource has a practice run configuration, ARC shifts traffic for the resource weekly for practice runs.\n\nPractice runs are required for zonal autoshift. The zonal shifts that ARC starts for practice runs help you to ensure that shifting away traffic from an Availability Zone during an autoshift is safe for your application.\n\nYou can update or delete a practice run configuration. Before you delete a practice run configuration, you must disable zonal autoshift for the resource. A practice run configuration is required when zonal autoshift is enabled."},"resourceIdentifier":{"type":"string","description":"The identifier for the resource that AWS shifts traffic for. The identifier is the Amazon Resource Name (ARN) for the resource.\n\nAt this time, supported resources are Network Load Balancers and Application Load Balancers."},"zonalAutoshiftStatus":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationZonalAutoshiftStatus","description":"When zonal autoshift is `ENABLED` , you authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. Traffic is also shifted away for the required weekly practice runs."}}},"aws-native:athena:CapacityReservation":{"description":"Resource schema for AWS::Athena::CapacityReservation","properties":{"allocatedDpus":{"type":"integer","description":"The number of DPUs Athena has provisioned and allocated for the reservation"},"arn":{"type":"string","description":"The ARN of the capacity reservation."},"capacityAssignmentConfiguration":{"$ref":"#/types/aws-native:athena:CapacityReservationCapacityAssignmentConfiguration","description":"Assigns Athena workgroups (and hence their queries) to capacity reservations. A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to."},"creationTime":{"type":"string","description":"The date and time the reservation was created."},"lastSuccessfulAllocationTime":{"type":"string","description":"The timestamp when the last successful allocated was made"},"name":{"type":"string","description":"The reservation name.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:athena:CapacityReservationStatus","description":"The status of the reservation."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetDpus":{"type":"integer","description":"The number of DPUs to request to be allocated to the reservation."}},"type":"object","required":["allocatedDpus","arn","creationTime","lastSuccessfulAllocationTime","name","status","targetDpus"],"inputProperties":{"capacityAssignmentConfiguration":{"$ref":"#/types/aws-native:athena:CapacityReservationCapacityAssignmentConfiguration","description":"Assigns Athena workgroups (and hence their queries) to capacity reservations. A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to."},"name":{"type":"string","description":"The reservation name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetDpus":{"type":"integer","description":"The number of DPUs to request to be allocated to the reservation."}},"requiredInputs":["targetDpus"]},"aws-native:athena:DataCatalog":{"description":"Resource schema for AWS::Athena::DataCatalog\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myAthenaDataCatalog = new AwsNative.Athena.DataCatalog(\"myAthenaDataCatalog\", new()\n    {\n        Name = \"MyCustomDataCatalog\",\n        Type = AwsNative.Athena.DataCatalogType.Hive,\n        Description = \"Custom Hive Catalog Description\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key2\",\n                Value = \"value2\",\n            },\n        },\n        Parameters = \n        {\n            { \"metadata-function\", \"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewDataCatalog(ctx, \"myAthenaDataCatalog\", \u0026athena.DataCatalogArgs{\n\t\t\tName:        pulumi.String(\"MyCustomDataCatalog\"),\n\t\t\tType:        athena.DataCatalogTypeHive,\n\t\t\tDescription: pulumi.String(\"Custom Hive Catalog Description\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: pulumi.StringMap{\n\t\t\t\t\"metadata-function\": pulumi.String(\"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myAthenaDataCatalog = new aws_native.athena.DataCatalog(\"myAthenaDataCatalog\", {\n    name: \"MyCustomDataCatalog\",\n    type: aws_native.athena.DataCatalogType.Hive,\n    description: \"Custom Hive Catalog Description\",\n    tags: [\n        {\n            key: \"key1\",\n            value: \"value1\",\n        },\n        {\n            key: \"key2\",\n            value: \"value2\",\n        },\n    ],\n    parameters: {\n        \"metadata-function\": \"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_athena_data_catalog = aws_native.athena.DataCatalog(\"myAthenaDataCatalog\",\n    name=\"MyCustomDataCatalog\",\n    type=aws_native.athena.DataCatalogType.HIVE,\n    description=\"Custom Hive Catalog Description\",\n    tags=[\n        {\n            \"key\": \"key1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"key2\",\n            \"value\": \"value2\",\n        },\n    ],\n    parameters={\n        \"metadata-function\": \"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myAthenaDataCatalog = new AwsNative.Athena.DataCatalog(\"myAthenaDataCatalog\", new()\n    {\n        Name = \"MyCustomDataCatalog\",\n        Type = AwsNative.Athena.DataCatalogType.Hive,\n        Description = \"Custom Hive Catalog Description\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key2\",\n                Value = \"value2\",\n            },\n        },\n        Parameters = \n        {\n            { \"metadata-function\", \"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewDataCatalog(ctx, \"myAthenaDataCatalog\", \u0026athena.DataCatalogArgs{\n\t\t\tName:        pulumi.String(\"MyCustomDataCatalog\"),\n\t\t\tType:        athena.DataCatalogTypeHive,\n\t\t\tDescription: pulumi.String(\"Custom Hive Catalog Description\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: pulumi.StringMap{\n\t\t\t\t\"metadata-function\": pulumi.String(\"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myAthenaDataCatalog = new aws_native.athena.DataCatalog(\"myAthenaDataCatalog\", {\n    name: \"MyCustomDataCatalog\",\n    type: aws_native.athena.DataCatalogType.Hive,\n    description: \"Custom Hive Catalog Description\",\n    tags: [\n        {\n            key: \"key1\",\n            value: \"value1\",\n        },\n        {\n            key: \"key2\",\n            value: \"value2\",\n        },\n    ],\n    parameters: {\n        \"metadata-function\": \"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_athena_data_catalog = aws_native.athena.DataCatalog(\"myAthenaDataCatalog\",\n    name=\"MyCustomDataCatalog\",\n    type=aws_native.athena.DataCatalogType.HIVE,\n    description=\"Custom Hive Catalog Description\",\n    tags=[\n        {\n            \"key\": \"key1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"key2\",\n            \"value\": \"value2\",\n        },\n    ],\n    parameters={\n        \"metadata-function\": \"arn:aws:lambda:us-west-2:111122223333:function:lambdaname\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"connectionType":{"type":"string","description":"The type of connection for a FEDERATED data catalog"},"description":{"type":"string","description":"A description of the data catalog to be created. "},"error":{"type":"string","description":"Text of the error that occurred during data catalog creation or deletion."},"name":{"type":"string","description":"The name of the data catalog to create. The catalog name must be unique for the AWS account and can use a maximum of 128 alphanumeric, underscore, at sign, or hyphen characters. ","replaceOnChanges":true},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Specifies the Lambda function or functions to use for creating the data catalog. This is a mapping whose values depend on the catalog type. "},"status":{"$ref":"#/types/aws-native:athena:DataCatalogStatus","description":"The status of the creation or deletion of the data catalog. LAMBDA, GLUE, and HIVE data catalog types are created synchronously. Their status is either CREATE_COMPLETE or CREATE_FAILED. The FEDERATED data catalog type is created asynchronously."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of comma separated tags to add to the data catalog that is created. "},"type":{"$ref":"#/types/aws-native:athena:DataCatalogType","description":"The type of data catalog to create: LAMBDA for a federated catalog, GLUE for AWS Glue Catalog, or HIVE for an external hive metastore. FEDERATED is a federated catalog for which Athena creates the connection and the Lambda function for you based on the parameters that you pass."}},"type":"object","required":["name","type"],"inputProperties":{"connectionType":{"type":"string","description":"The type of connection for a FEDERATED data catalog"},"description":{"type":"string","description":"A description of the data catalog to be created. "},"error":{"type":"string","description":"Text of the error that occurred during data catalog creation or deletion."},"name":{"type":"string","description":"The name of the data catalog to create. The catalog name must be unique for the AWS account and can use a maximum of 128 alphanumeric, underscore, at sign, or hyphen characters. "},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Specifies the Lambda function or functions to use for creating the data catalog. This is a mapping whose values depend on the catalog type. "},"status":{"$ref":"#/types/aws-native:athena:DataCatalogStatus","description":"The status of the creation or deletion of the data catalog. LAMBDA, GLUE, and HIVE data catalog types are created synchronously. Their status is either CREATE_COMPLETE or CREATE_FAILED. The FEDERATED data catalog type is created asynchronously."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of comma separated tags to add to the data catalog that is created. "},"type":{"$ref":"#/types/aws-native:athena:DataCatalogType","description":"The type of data catalog to create: LAMBDA for a federated catalog, GLUE for AWS Glue Catalog, or HIVE for an external hive metastore. FEDERATED is a federated catalog for which Athena creates the connection and the Lambda function for you based on the parameters that you pass."}},"requiredInputs":["type"]},"aws-native:athena:NamedQuery":{"description":"Resource schema for AWS::Athena::NamedQuery\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var athenaNamedQuery = new AwsNative.Athena.NamedQuery(\"athenaNamedQuery\", new()\n    {\n        Database = \"swfmetadata\",\n        Description = \"A query that selects all aggregated data\",\n        Name = \"MostExpensiveWorkflow\",\n        QueryString = \"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewNamedQuery(ctx, \"athenaNamedQuery\", \u0026athena.NamedQueryArgs{\n\t\t\tDatabase:    pulumi.String(\"swfmetadata\"),\n\t\t\tDescription: pulumi.String(\"A query that selects all aggregated data\"),\n\t\t\tName:        pulumi.String(\"MostExpensiveWorkflow\"),\n\t\t\tQueryString: pulumi.String(\"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst athenaNamedQuery = new aws_native.athena.NamedQuery(\"athenaNamedQuery\", {\n    database: \"swfmetadata\",\n    description: \"A query that selects all aggregated data\",\n    name: \"MostExpensiveWorkflow\",\n    queryString: \"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nathena_named_query = aws_native.athena.NamedQuery(\"athenaNamedQuery\",\n    database=\"swfmetadata\",\n    description=\"A query that selects all aggregated data\",\n    name=\"MostExpensiveWorkflow\",\n    query_string=\"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var athenaNamedQuery = new AwsNative.Athena.NamedQuery(\"athenaNamedQuery\", new()\n    {\n        Database = \"swfmetadata\",\n        Description = \"A query that selects all aggregated data\",\n        Name = \"MostExpensiveWorkflow\",\n        QueryString = \"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewNamedQuery(ctx, \"athenaNamedQuery\", \u0026athena.NamedQueryArgs{\n\t\t\tDatabase:    pulumi.String(\"swfmetadata\"),\n\t\t\tDescription: pulumi.String(\"A query that selects all aggregated data\"),\n\t\t\tName:        pulumi.String(\"MostExpensiveWorkflow\"),\n\t\t\tQueryString: pulumi.String(\"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst athenaNamedQuery = new aws_native.athena.NamedQuery(\"athenaNamedQuery\", {\n    database: \"swfmetadata\",\n    description: \"A query that selects all aggregated data\",\n    name: \"MostExpensiveWorkflow\",\n    queryString: \"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nathena_named_query = aws_native.athena.NamedQuery(\"athenaNamedQuery\",\n    database=\"swfmetadata\",\n    description=\"A query that selects all aggregated data\",\n    name=\"MostExpensiveWorkflow\",\n    query_string=\"SELECT workflowname, AVG(activitytaskstarted) AS AverageWorkflow FROM swfmetadata WHERE year='17' AND GROUP BY workflowname ORDER BY AverageWorkflow DESC LIMIT 10\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"database":{"type":"string","description":"The database to which the query belongs.","replaceOnChanges":true},"description":{"type":"string","description":"The query description.","replaceOnChanges":true},"name":{"type":"string","description":"The query name.","replaceOnChanges":true},"namedQueryId":{"type":"string","description":"The unique ID of the query."},"queryString":{"type":"string","description":"The contents of the query with all query statements.","replaceOnChanges":true},"workGroup":{"type":"string","description":"The name of the workgroup that contains the named query.","replaceOnChanges":true}},"type":"object","required":["database","namedQueryId","queryString"],"inputProperties":{"database":{"type":"string","description":"The database to which the query belongs."},"description":{"type":"string","description":"The query description."},"name":{"type":"string","description":"The query name."},"queryString":{"type":"string","description":"The contents of the query with all query statements."},"workGroup":{"type":"string","description":"The name of the workgroup that contains the named query."}},"requiredInputs":["database","queryString"]},"aws-native:athena:PreparedStatement":{"description":"Resource schema for AWS::Athena::PreparedStatement","properties":{"description":{"type":"string","description":"The description of the prepared statement."},"queryStatement":{"type":"string","description":"The query string for the prepared statement."},"statementName":{"type":"string","description":"The name of the prepared statement.","replaceOnChanges":true},"workGroup":{"type":"string","description":"The name of the workgroup to which the prepared statement belongs.","replaceOnChanges":true}},"type":"object","required":["queryStatement","statementName","workGroup"],"inputProperties":{"description":{"type":"string","description":"The description of the prepared statement."},"queryStatement":{"type":"string","description":"The query string for the prepared statement."},"statementName":{"type":"string","description":"The name of the prepared statement."},"workGroup":{"type":"string","description":"The name of the workgroup to which the prepared statement belongs."}},"requiredInputs":["queryStatement","workGroup"]},"aws-native:athena:WorkGroup":{"description":"Resource schema for AWS::Athena::WorkGroup\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myAthenaWorkGroup = new AwsNative.Athena.WorkGroup(\"myAthenaWorkGroup\", new()\n    {\n        Name = \"MyCustomWorkGroup\",\n        Description = \"My WorkGroup\",\n        State = AwsNative.Athena.WorkGroupState.Enabled,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key2\",\n                Value = \"value2\",\n            },\n        },\n        WorkGroupConfiguration = new AwsNative.Athena.Inputs.WorkGroupConfigurationArgs\n        {\n            BytesScannedCutoffPerQuery = 200000000,\n            EnforceWorkGroupConfiguration = false,\n            PublishCloudWatchMetricsEnabled = false,\n            RequesterPaysEnabled = true,\n            ResultConfiguration = new AwsNative.Athena.Inputs.WorkGroupResultConfigurationArgs\n            {\n                OutputLocation = \"s3://path/to/my/bucket/\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewWorkGroup(ctx, \"myAthenaWorkGroup\", \u0026athena.WorkGroupArgs{\n\t\t\tName:        pulumi.String(\"MyCustomWorkGroup\"),\n\t\t\tDescription: pulumi.String(\"My WorkGroup\"),\n\t\t\tState:       athena.WorkGroupStateEnabled,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tWorkGroupConfiguration: \u0026athena.WorkGroupConfigurationArgs{\n\t\t\t\tBytesScannedCutoffPerQuery:      pulumi.Int(200000000),\n\t\t\t\tEnforceWorkGroupConfiguration:   pulumi.Bool(false),\n\t\t\t\tPublishCloudWatchMetricsEnabled: pulumi.Bool(false),\n\t\t\t\tRequesterPaysEnabled:            pulumi.Bool(true),\n\t\t\t\tResultConfiguration: \u0026athena.WorkGroupResultConfigurationArgs{\n\t\t\t\t\tOutputLocation: pulumi.String(\"s3://path/to/my/bucket/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myAthenaWorkGroup = new aws_native.athena.WorkGroup(\"myAthenaWorkGroup\", {\n    name: \"MyCustomWorkGroup\",\n    description: \"My WorkGroup\",\n    state: aws_native.athena.WorkGroupState.Enabled,\n    tags: [\n        {\n            key: \"key1\",\n            value: \"value1\",\n        },\n        {\n            key: \"key2\",\n            value: \"value2\",\n        },\n    ],\n    workGroupConfiguration: {\n        bytesScannedCutoffPerQuery: 200000000,\n        enforceWorkGroupConfiguration: false,\n        publishCloudWatchMetricsEnabled: false,\n        requesterPaysEnabled: true,\n        resultConfiguration: {\n            outputLocation: \"s3://path/to/my/bucket/\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_athena_work_group = aws_native.athena.WorkGroup(\"myAthenaWorkGroup\",\n    name=\"MyCustomWorkGroup\",\n    description=\"My WorkGroup\",\n    state=aws_native.athena.WorkGroupState.ENABLED,\n    tags=[\n        {\n            \"key\": \"key1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"key2\",\n            \"value\": \"value2\",\n        },\n    ],\n    work_group_configuration={\n        \"bytes_scanned_cutoff_per_query\": 200000000,\n        \"enforce_work_group_configuration\": False,\n        \"publish_cloud_watch_metrics_enabled\": False,\n        \"requester_pays_enabled\": True,\n        \"result_configuration\": {\n            \"output_location\": \"s3://path/to/my/bucket/\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myAthenaWorkGroup = new AwsNative.Athena.WorkGroup(\"myAthenaWorkGroup\", new()\n    {\n        Name = \"MyCustomWorkGroup\",\n        Description = \"My WorkGroup\",\n        State = AwsNative.Athena.WorkGroupState.Enabled,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key2\",\n                Value = \"value2\",\n            },\n        },\n        WorkGroupConfiguration = new AwsNative.Athena.Inputs.WorkGroupConfigurationArgs\n        {\n            BytesScannedCutoffPerQuery = 200000000,\n            EnforceWorkGroupConfiguration = false,\n            PublishCloudWatchMetricsEnabled = false,\n            RequesterPaysEnabled = true,\n            ResultConfiguration = new AwsNative.Athena.Inputs.WorkGroupResultConfigurationArgs\n            {\n                OutputLocation = \"s3://path/to/my/bucket/\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewWorkGroup(ctx, \"myAthenaWorkGroup\", \u0026athena.WorkGroupArgs{\n\t\t\tName:        pulumi.String(\"MyCustomWorkGroup\"),\n\t\t\tDescription: pulumi.String(\"My WorkGroup\"),\n\t\t\tState:       athena.WorkGroupStateEnabled,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tWorkGroupConfiguration: \u0026athena.WorkGroupConfigurationArgs{\n\t\t\t\tBytesScannedCutoffPerQuery:      pulumi.Int(200000000),\n\t\t\t\tEnforceWorkGroupConfiguration:   pulumi.Bool(false),\n\t\t\t\tPublishCloudWatchMetricsEnabled: pulumi.Bool(false),\n\t\t\t\tRequesterPaysEnabled:            pulumi.Bool(true),\n\t\t\t\tResultConfiguration: \u0026athena.WorkGroupResultConfigurationArgs{\n\t\t\t\t\tOutputLocation: pulumi.String(\"s3://path/to/my/bucket/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myAthenaWorkGroup = new aws_native.athena.WorkGroup(\"myAthenaWorkGroup\", {\n    name: \"MyCustomWorkGroup\",\n    description: \"My WorkGroup\",\n    state: aws_native.athena.WorkGroupState.Enabled,\n    tags: [\n        {\n            key: \"key1\",\n            value: \"value1\",\n        },\n        {\n            key: \"key2\",\n            value: \"value2\",\n        },\n    ],\n    workGroupConfiguration: {\n        bytesScannedCutoffPerQuery: 200000000,\n        enforceWorkGroupConfiguration: false,\n        publishCloudWatchMetricsEnabled: false,\n        requesterPaysEnabled: true,\n        resultConfiguration: {\n            outputLocation: \"s3://path/to/my/bucket/\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_athena_work_group = aws_native.athena.WorkGroup(\"myAthenaWorkGroup\",\n    name=\"MyCustomWorkGroup\",\n    description=\"My WorkGroup\",\n    state=aws_native.athena.WorkGroupState.ENABLED,\n    tags=[\n        {\n            \"key\": \"key1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"key2\",\n            \"value\": \"value2\",\n        },\n    ],\n    work_group_configuration={\n        \"bytes_scanned_cutoff_per_query\": 200000000,\n        \"enforce_work_group_configuration\": False,\n        \"publish_cloud_watch_metrics_enabled\": False,\n        \"requester_pays_enabled\": True,\n        \"result_configuration\": {\n            \"output_location\": \"s3://path/to/my/bucket/\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myAthenaWorkGroup = new AwsNative.Athena.WorkGroup(\"myAthenaWorkGroup\", new()\n    {\n        Name = \"MyCustomWorkGroup\",\n        Description = \"My WorkGroup Updated\",\n        State = AwsNative.Athena.WorkGroupState.Disabled,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key2\",\n                Value = \"value2\",\n            },\n        },\n        WorkGroupConfigurationUpdates = new AwsNative.Athena.Inputs.WorkGroupConfigurationUpdatesArgs\n        {\n            BytesScannedCutoffPerQuery = 10000000,\n            EnforceWorkGroupConfiguration = true,\n            PublishCloudWatchMetricsEnabled = true,\n            RequesterPaysEnabled = false,\n            ResultConfigurationUpdates = new AwsNative.Athena.Inputs.WorkGroupResultConfigurationUpdatesArgs\n            {\n                EncryptionConfiguration = new AwsNative.Athena.Inputs.WorkGroupEncryptionConfigurationArgs\n                {\n                    EncryptionOption = AwsNative.Athena.WorkGroupEncryptionOption.SseS3,\n                },\n                OutputLocation = \"s3://path/to/my/bucket/updated/\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewWorkGroup(ctx, \"myAthenaWorkGroup\", \u0026athena.WorkGroupArgs{\n\t\t\tName:        pulumi.String(\"MyCustomWorkGroup\"),\n\t\t\tDescription: pulumi.String(\"My WorkGroup Updated\"),\n\t\t\tState:       athena.WorkGroupStateDisabled,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tWorkGroupConfigurationUpdates: \u0026athena.WorkGroupConfigurationUpdatesArgs{\n\t\t\t\tBytesScannedCutoffPerQuery:      pulumi.Int(10000000),\n\t\t\t\tEnforceWorkGroupConfiguration:   pulumi.Bool(true),\n\t\t\t\tPublishCloudWatchMetricsEnabled: pulumi.Bool(true),\n\t\t\t\tRequesterPaysEnabled:            pulumi.Bool(false),\n\t\t\t\tResultConfigurationUpdates: \u0026athena.WorkGroupResultConfigurationUpdatesArgs{\n\t\t\t\t\tEncryptionConfiguration: \u0026athena.WorkGroupEncryptionConfigurationArgs{\n\t\t\t\t\t\tEncryptionOption: athena.WorkGroupEncryptionOptionSseS3,\n\t\t\t\t\t},\n\t\t\t\t\tOutputLocation: pulumi.String(\"s3://path/to/my/bucket/updated/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myAthenaWorkGroup = new aws_native.athena.WorkGroup(\"myAthenaWorkGroup\", {\n    name: \"MyCustomWorkGroup\",\n    description: \"My WorkGroup Updated\",\n    state: aws_native.athena.WorkGroupState.Disabled,\n    tags: [\n        {\n            key: \"key1\",\n            value: \"value1\",\n        },\n        {\n            key: \"key2\",\n            value: \"value2\",\n        },\n    ],\n    workGroupConfigurationUpdates: {\n        bytesScannedCutoffPerQuery: 10000000,\n        enforceWorkGroupConfiguration: true,\n        publishCloudWatchMetricsEnabled: true,\n        requesterPaysEnabled: false,\n        resultConfigurationUpdates: {\n            encryptionConfiguration: {\n                encryptionOption: aws_native.athena.WorkGroupEncryptionOption.SseS3,\n            },\n            outputLocation: \"s3://path/to/my/bucket/updated/\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_athena_work_group = aws_native.athena.WorkGroup(\"myAthenaWorkGroup\",\n    name=\"MyCustomWorkGroup\",\n    description=\"My WorkGroup Updated\",\n    state=aws_native.athena.WorkGroupState.DISABLED,\n    tags=[\n        {\n            \"key\": \"key1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"key2\",\n            \"value\": \"value2\",\n        },\n    ],\n    work_group_configuration_updates={\n        \"bytes_scanned_cutoff_per_query\": 10000000,\n        \"enforce_work_group_configuration\": True,\n        \"publish_cloud_watch_metrics_enabled\": True,\n        \"requester_pays_enabled\": False,\n        \"result_configuration_updates\": {\n            \"encryption_configuration\": {\n                \"encryption_option\": aws_native.athena.WorkGroupEncryptionOption.SSE_S3,\n            },\n            \"output_location\": \"s3://path/to/my/bucket/updated/\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myAthenaWorkGroup = new AwsNative.Athena.WorkGroup(\"myAthenaWorkGroup\", new()\n    {\n        Name = \"MyCustomWorkGroup\",\n        Description = \"My WorkGroup Updated\",\n        State = AwsNative.Athena.WorkGroupState.Disabled,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key2\",\n                Value = \"value2\",\n            },\n        },\n        WorkGroupConfigurationUpdates = new AwsNative.Athena.Inputs.WorkGroupConfigurationUpdatesArgs\n        {\n            BytesScannedCutoffPerQuery = 10000000,\n            EnforceWorkGroupConfiguration = true,\n            PublishCloudWatchMetricsEnabled = true,\n            RequesterPaysEnabled = false,\n            ResultConfigurationUpdates = new AwsNative.Athena.Inputs.WorkGroupResultConfigurationUpdatesArgs\n            {\n                EncryptionConfiguration = new AwsNative.Athena.Inputs.WorkGroupEncryptionConfigurationArgs\n                {\n                    EncryptionOption = AwsNative.Athena.WorkGroupEncryptionOption.SseS3,\n                },\n                OutputLocation = \"s3://path/to/my/bucket/updated/\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/athena\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := athena.NewWorkGroup(ctx, \"myAthenaWorkGroup\", \u0026athena.WorkGroupArgs{\n\t\t\tName:        pulumi.String(\"MyCustomWorkGroup\"),\n\t\t\tDescription: pulumi.String(\"My WorkGroup Updated\"),\n\t\t\tState:       athena.WorkGroupStateDisabled,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tWorkGroupConfigurationUpdates: \u0026athena.WorkGroupConfigurationUpdatesArgs{\n\t\t\t\tBytesScannedCutoffPerQuery:      pulumi.Int(10000000),\n\t\t\t\tEnforceWorkGroupConfiguration:   pulumi.Bool(true),\n\t\t\t\tPublishCloudWatchMetricsEnabled: pulumi.Bool(true),\n\t\t\t\tRequesterPaysEnabled:            pulumi.Bool(false),\n\t\t\t\tResultConfigurationUpdates: \u0026athena.WorkGroupResultConfigurationUpdatesArgs{\n\t\t\t\t\tEncryptionConfiguration: \u0026athena.WorkGroupEncryptionConfigurationArgs{\n\t\t\t\t\t\tEncryptionOption: athena.WorkGroupEncryptionOptionSseS3,\n\t\t\t\t\t},\n\t\t\t\t\tOutputLocation: pulumi.String(\"s3://path/to/my/bucket/updated/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myAthenaWorkGroup = new aws_native.athena.WorkGroup(\"myAthenaWorkGroup\", {\n    name: \"MyCustomWorkGroup\",\n    description: \"My WorkGroup Updated\",\n    state: aws_native.athena.WorkGroupState.Disabled,\n    tags: [\n        {\n            key: \"key1\",\n            value: \"value1\",\n        },\n        {\n            key: \"key2\",\n            value: \"value2\",\n        },\n    ],\n    workGroupConfigurationUpdates: {\n        bytesScannedCutoffPerQuery: 10000000,\n        enforceWorkGroupConfiguration: true,\n        publishCloudWatchMetricsEnabled: true,\n        requesterPaysEnabled: false,\n        resultConfigurationUpdates: {\n            encryptionConfiguration: {\n                encryptionOption: aws_native.athena.WorkGroupEncryptionOption.SseS3,\n            },\n            outputLocation: \"s3://path/to/my/bucket/updated/\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_athena_work_group = aws_native.athena.WorkGroup(\"myAthenaWorkGroup\",\n    name=\"MyCustomWorkGroup\",\n    description=\"My WorkGroup Updated\",\n    state=aws_native.athena.WorkGroupState.DISABLED,\n    tags=[\n        {\n            \"key\": \"key1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"key2\",\n            \"value\": \"value2\",\n        },\n    ],\n    work_group_configuration_updates={\n        \"bytes_scanned_cutoff_per_query\": 10000000,\n        \"enforce_work_group_configuration\": True,\n        \"publish_cloud_watch_metrics_enabled\": True,\n        \"requester_pays_enabled\": False,\n        \"result_configuration_updates\": {\n            \"encryption_configuration\": {\n                \"encryption_option\": aws_native.athena.WorkGroupEncryptionOption.SSE_S3,\n            },\n            \"output_location\": \"s3://path/to/my/bucket/updated/\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"creationTime":{"type":"string","description":"The date and time the workgroup was created."},"description":{"type":"string","description":"The workgroup description."},"name":{"type":"string","description":"The workGroup name.","replaceOnChanges":true},"recursiveDeleteOption":{"type":"boolean","description":"The option to delete the workgroup and its contents even if the workgroup contains any named queries."},"state":{"$ref":"#/types/aws-native:athena:WorkGroupState","description":"The state of the workgroup: ENABLED or DISABLED."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags, separated by commas, that you want to attach to the workgroup as you create it"},"workGroupConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupConfiguration","description":"The workgroup configuration"},"workGroupConfigurationUpdates":{"$ref":"#/types/aws-native:athena:WorkGroupConfigurationUpdates","description":"The workgroup configuration update object"}},"type":"object","required":["creationTime","name"],"inputProperties":{"description":{"type":"string","description":"The workgroup description."},"name":{"type":"string","description":"The workGroup name."},"recursiveDeleteOption":{"type":"boolean","description":"The option to delete the workgroup and its contents even if the workgroup contains any named queries."},"state":{"$ref":"#/types/aws-native:athena:WorkGroupState","description":"The state of the workgroup: ENABLED or DISABLED."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags, separated by commas, that you want to attach to the workgroup as you create it"},"workGroupConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupConfiguration","description":"The workgroup configuration"},"workGroupConfigurationUpdates":{"$ref":"#/types/aws-native:athena:WorkGroupConfigurationUpdates","description":"The workgroup configuration update object"}}},"aws-native:auditmanager:Assessment":{"description":"An entity that defines the scope of audit evidence collected by AWS Audit Manager.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the assessment."},"assessmentId":{"type":"string","description":"The unique identifier for the assessment."},"assessmentReportsDestination":{"$ref":"#/types/aws-native:auditmanager:AssessmentReportsDestination","description":"The destination that evidence reports are stored in for the assessment."},"awsAccount":{"$ref":"#/types/aws-native:auditmanager:AssessmentAwsAccount","description":"The AWS account that's associated with the assessment.","replaceOnChanges":true},"creationTime":{"type":"number","description":"Specifies when the assessment was created."},"delegations":{"type":"array","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentDelegation"},"description":"The list of delegations."},"description":{"type":"string","description":"The description of the assessment."},"frameworkId":{"type":"string","description":"The unique identifier for the framework.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the assessment."},"roles":{"type":"array","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentRole"},"description":"The list of roles for the specified assessment."},"scope":{"$ref":"#/types/aws-native:auditmanager:AssessmentScope","description":"The wrapper of AWS accounts and services that are in scope for the assessment."},"status":{"$ref":"#/types/aws-native:auditmanager:AssessmentStatus","description":"The overall status of the assessment.\n\nWhen you create a new assessment, the initial `Status` value is always `ACTIVE` . When you create an assessment, even if you specify the value as `INACTIVE` , the value overrides to `ACTIVE` .\n\nAfter you create an assessment, you can change the value of the `Status` property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status to `INACTIVE` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the assessment."}},"type":"object","required":["arn","assessmentId","creationTime"],"inputProperties":{"assessmentReportsDestination":{"$ref":"#/types/aws-native:auditmanager:AssessmentReportsDestination","description":"The destination that evidence reports are stored in for the assessment."},"awsAccount":{"$ref":"#/types/aws-native:auditmanager:AssessmentAwsAccount","description":"The AWS account that's associated with the assessment."},"delegations":{"type":"array","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentDelegation"},"description":"The list of delegations."},"description":{"type":"string","description":"The description of the assessment."},"frameworkId":{"type":"string","description":"The unique identifier for the framework."},"name":{"type":"string","description":"The name of the assessment."},"roles":{"type":"array","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentRole"},"description":"The list of roles for the specified assessment."},"scope":{"$ref":"#/types/aws-native:auditmanager:AssessmentScope","description":"The wrapper of AWS accounts and services that are in scope for the assessment."},"status":{"$ref":"#/types/aws-native:auditmanager:AssessmentStatus","description":"The overall status of the assessment.\n\nWhen you create a new assessment, the initial `Status` value is always `ACTIVE` . When you create an assessment, even if you specify the value as `INACTIVE` , the value overrides to `ACTIVE` .\n\nAfter you create an assessment, you can change the value of the `Status` property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status to `INACTIVE` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the assessment."}}},"aws-native:autoscaling:AutoScalingGroup":{"description":"The ``AWS::AutoScaling::AutoScalingGroup`` resource defines an Amazon EC2 Auto Scaling group, which is a collection of Amazon EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management. \n For more information about Amazon EC2 Auto Scaling, see the [Amazon EC2 Auto Scaling User Guide](https://docs.aws.amazon.com/autoscaling/ec2/userguide/what-is-amazon-ec2-auto-scaling.html). \n  Amazon EC2 Auto Scaling configures instances launched as part of an Auto Scaling group using either a [launch template](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html) or a launch configuration. We strongly recommend that you do not use launch configurations. For more information, see [Launch configurations](https://docs.aws.amazon.com/autoscaling/ec2/userguide/launch-configurations.html) in the *Amazon EC2 Auto Scaling User Guide*.\n For help migrating from launch configurations to launch templates, see [Migrate CloudFormation stacks from launch configurations to launch templates](https://docs.aws.amazon.com/autoscaling/ec2/userguide/migrate-launch-configurations-with-cloudformation.html) in the *Amazon EC2 Auto Scaling User Guide*.","properties":{"autoScalingGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Auto Scaling group."},"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group. This name must be unique per Region per account.\n The name can contain any ASCII character 33 to 126 including most punctuation characters, digits, and upper and lowercased letters.\n  You cannot use a colon (:) in the name.","replaceOnChanges":true},"availabilityZoneDistribution":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneDistribution","description":"The EC2 instance capacity distribution across Availability Zones for the Auto Scaling group."},"availabilityZoneImpairmentPolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneImpairmentPolicy","description":"The Availability Zone impairment policy for the Auto Scaling group."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of Availability Zones where instances in the Auto Scaling group can be created. Used for launching into the default VPC subnet in each Availability Zone when not using the ``VPCZoneIdentifier`` property, or for attaching a network interface when an existing network interface ID is specified in a launch template."},"capacityRebalance":{"type":"boolean","description":"Indicates whether Capacity Rebalancing is enabled. Otherwise, Capacity Rebalancing is disabled. When you turn on Capacity Rebalancing, Amazon EC2 Auto Scaling attempts to launch a Spot Instance whenever Amazon EC2 notifies that a Spot Instance is at an elevated risk of interruption. After launching a new instance, it then terminates an old instance. For more information, see [Use Capacity Rebalancing to handle Amazon EC2 Spot Interruptions](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-capacity-rebalancing.html) in the in the *Amazon EC2 Auto Scaling User Guide*."},"capacityReservationSpecification":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupCapacityReservationSpecification","description":"The capacity reservation specification for the Auto Scaling group."},"context":{"type":"string","description":"Reserved."},"cooldown":{"type":"string","description":"*Only needed if you use simple scaling policies.* \n The amount of time, in seconds, between one scaling activity ending and another one starting due to simple scaling policies. For more information, see [Scaling cooldowns for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-scaling-cooldowns.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Default: ``300`` seconds"},"defaultInstanceWarmup":{"type":"integer","description":"The amount of time, in seconds, until a new instance is considered to have finished initializing and resource consumption to become stable after it enters the ``InService`` state. \n During an instance refresh, Amazon EC2 Auto Scaling waits for the warm-up period after it replaces an instance before it moves on to replacing the next instance. Amazon EC2 Auto Scaling also waits for the warm-up period before aggregating the metrics for new instances with existing instances in the Amazon CloudWatch metrics that are used for scaling, resulting in more reliable usage data. For more information, see [Set the default instance warmup for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-default-instance-warmup.html) in the *Amazon EC2 Auto Scaling User Guide*.\n  To manage various warm-up settings at the group level, we recommend that you set the default instance warmup, *even if it is set to 0 seconds*. To remove a value that you previously set, include the property but specify ``-1`` for the value. However, we strongly recommend keeping the default instance warmup enabled by specifying a value of ``0`` or other nominal value.\n  Default: None"},"deletionProtection":{"type":"string","description":"The deletion protection setting for the Auto Scaling group."},"desiredCapacity":{"type":"string","description":"The desired capacity is the initial capacity of the Auto Scaling group at the time of its creation and the capacity it attempts to maintain. It can scale beyond this capacity if you configure automatic scaling.\n The number must be greater than or equal to the minimum size of the group and less than or equal to the maximum size of the group. If you do not specify a desired capacity when creating the stack, the default is the minimum size of the group.\n CloudFormation marks the Auto Scaling group as successful (by setting its status to CREATE_COMPLETE) when the desired capacity is reached. However, if a maximum Spot price is set in the launch template or launch configuration that you specified, then desired capacity is not used as a criteria for success. Whether your request is fulfilled depends on Spot Instance capacity and your maximum price."},"desiredCapacityType":{"type":"string","description":"The unit of measurement for the value specified for desired capacity. Amazon EC2 Auto Scaling supports ``DesiredCapacityType`` for attribute-based instance type selection only. For more information, see [Create a mixed instances group using attribute-based instance type selection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-mixed-instances-group-attribute-based-instance-type-selection.html) in the *Amazon EC2 Auto Scaling User Guide*.\n By default, Amazon EC2 Auto Scaling specifies ``units``, which translates into number of instances.\n Valid values: ``units`` | ``vcpu`` | ``memory-mib``"},"healthCheckGracePeriod":{"type":"integer","description":"The amount of time, in seconds, that Amazon EC2 Auto Scaling waits before checking the health status of an EC2 instance that has come into service and marking it unhealthy due to a failed health check. This is useful if your instances do not immediately pass their health checks after they enter the ``InService`` state. For more information, see [Set the health check grace period for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/health-check-grace-period.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Default: ``0`` seconds"},"healthCheckType":{"type":"string","description":"A comma-separated value string of one or more health check types.\n The valid values are ``EC2``, ``EBS``, ``ELB``, and ``VPC_LATTICE``. ``EC2`` is the default health check and cannot be disabled. For more information, see [Health checks for instances in an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-health-checks.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Only specify ``EC2`` if you must clear a value that was previously set."},"instanceId":{"type":"string","description":"The ID of the instance used to base the launch configuration on. For more information, see [Create an Auto Scaling group using an EC2 instance](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-asg-from-instance.html) in the *Amazon EC2 Auto Scaling User Guide*.\n If you specify ``LaunchTemplate``, ``MixedInstancesPolicy``, or ``LaunchConfigurationName``, don't specify ``InstanceId``.","replaceOnChanges":true},"instanceLifecyclePolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceLifecyclePolicy","description":"The instance lifecycle policy for the Auto Scaling group."},"instanceMaintenancePolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceMaintenancePolicy","description":"An instance maintenance policy. For more information, see [Set instance maintenance policy](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-maintenance-policy.html) in the *Amazon EC2 Auto Scaling User Guide*."},"launchConfigurationName":{"type":"string","description":"The name of the launch configuration to use to launch instances.\n Required only if you don't specify ``LaunchTemplate``, ``MixedInstancesPolicy``, or ``InstanceId``."},"launchTemplate":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplateSpecification","description":"Information used to specify the launch template and version to use to launch instances. You can alternatively associate a launch template to the Auto Scaling group by specifying a ``MixedInstancesPolicy``. For more information about creating launch templates, see [Create a launch template for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-launch-template.html) in the *Amazon EC2 Auto Scaling User Guide*.\n If you omit this property, you must specify ``MixedInstancesPolicy``, ``LaunchConfigurationName``, or ``InstanceId``."},"lifecycleHookSpecificationList":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLifecycleHookSpecification"},"description":"One or more lifecycle hooks to add to the Auto Scaling group before instances are launched."},"loadBalancerNames":{"type":"array","items":{"type":"string"},"description":"A list of Classic Load Balancers associated with this Auto Scaling group. For Application Load Balancers, Network Load Balancers, and Gateway Load Balancers, specify the ``TargetGroupARNs`` property instead."},"maxInstanceLifetime":{"type":"integer","description":"The maximum amount of time, in seconds, that an instance can be in service. The default is null. If specified, the value must be either 0 or a number equal to or greater than 86,400 seconds (1 day). For more information, see [Replace Auto Scaling instances based on maximum instance lifetime](https://docs.aws.amazon.com/autoscaling/ec2/userguide/asg-max-instance-lifetime.html) in the *Amazon EC2 Auto Scaling User Guide*."},"maxSize":{"type":"string","description":"The maximum size of the group.\n  With a mixed instances policy that uses instance weighting, Amazon EC2 Auto Scaling may need to go above ``MaxSize`` to meet your capacity requirements. In this event, Amazon EC2 Auto Scaling will never go above ``MaxSize`` by more than your largest instance weight (weights that define how many units each instance contributes to the desired capacity of the group)."},"metricsCollection":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMetricsCollection"},"description":"Enables the monitoring of group metrics of an Auto Scaling group. By default, these metrics are disabled."},"minSize":{"type":"string","description":"The minimum size of the group."},"mixedInstancesPolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMixedInstancesPolicy","description":"An embedded object that specifies a mixed instances policy.\n The policy includes properties that not only define the distribution of On-Demand Instances and Spot Instances, the maximum price to pay for Spot Instances (optional), and how the Auto Scaling group allocates instance types to fulfill On-Demand and Spot capacities, but also the properties that specify the instance configuration information—the launch template and instance types. The policy can also include a weight for each instance type and different launch templates for individual instance types.\n For more information, see [Auto Scaling groups with multiple instance types and purchase options](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups.html) in the *Amazon EC2 Auto Scaling User Guide*."},"newInstancesProtectedFromScaleIn":{"type":"boolean","description":"Indicates whether newly launched instances are protected from termination by Amazon EC2 Auto Scaling when scaling in. For more information about preventing instances from terminating on scale in, see [Use instance scale-in protection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-protection.html) in the *Amazon EC2 Auto Scaling User Guide*."},"notificationConfiguration":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNotificationConfiguration"},"notificationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNotificationConfiguration"},"description":"Configures an Auto Scaling group to send notifications when specified events take place."},"placementGroup":{"type":"string","description":"The name of the placement group into which to launch your instances. For more information, see [Placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html) in the *Amazon EC2 User Guide*.\n  A *cluster* placement group is a logical grouping of instances within a single Availability Zone. You cannot specify multiple Availability Zones and a cluster placement group."},"serviceLinkedRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service-linked role that the Auto Scaling group uses to call other AWS service on your behalf. By default, Amazon EC2 Auto Scaling uses a service-linked role named ``AWSServiceRoleForAutoScaling``, which it creates if it does not exist. For more information, see [Service-linked roles](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-service-linked-role.html) in the *Amazon EC2 Auto Scaling User Guide*."},"skipZonalShiftValidation":{"type":"boolean"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTagProperty"},"description":"One or more tags. You can tag your Auto Scaling group and propagate the tags to the Amazon EC2 instances it launches. Tags are not propagated to Amazon EBS volumes. To add tags to Amazon EBS volumes, specify the tags in a launch template but use caution. If the launch template specifies an instance tag with a key that is also specified for the Auto Scaling group, Amazon EC2 Auto Scaling overrides the value of that instance tag with the value specified by the Auto Scaling group. For more information, see [Tag Auto Scaling groups and instances](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-tagging.html) in the *Amazon EC2 Auto Scaling User Guide*."},"targetGroupArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the Elastic Load Balancing target groups to associate with the Auto Scaling group. Instances are registered as targets with the target groups. The target groups receive incoming traffic and route requests to one or more registered targets. For more information, see [Use Elastic Load Balancing to distribute traffic across the instances in your Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-load-balancer.html) in the *Amazon EC2 Auto Scaling User Guide*."},"terminationPolicies":{"type":"array","items":{"type":"string"},"description":"A policy or a list of policies that are used to select the instance to terminate. These policies are executed in the order that you list them. For more information, see [Configure termination policies for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-termination-policies.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Valid values: ``Default`` | ``AllocationStrategy`` | ``ClosestToNextInstanceHour`` | ``NewestInstance`` | ``OldestInstance`` | ``OldestLaunchConfiguration`` | ``OldestLaunchTemplate`` | ``arn:aws:lambda:region:account-id:function:my-function:my-alias``"},"trafficSources":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTrafficSourceIdentifier"},"description":"The traffic sources associated with this Auto Scaling group."},"vpcZoneIdentifier":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs for a virtual private cloud (VPC) where instances in the Auto Scaling group can be created.\n If this resource specifies public subnets and is also in a VPC that is defined in the same stack template, you must use the [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) to declare a dependency on the [VPC-gateway attachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc-gateway-attachment.html).\n  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. You can optionally specify how CloudFormation handles these updates by using an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html).\n  Required to launch instances into a nondefault VPC. If you specify ``VPCZoneIdentifier`` with ``AvailabilityZones``, the subnets that you specify for this property must reside in those Availability Zones."}},"type":"object","required":["autoScalingGroupArn","maxSize","minSize"],"inputProperties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group. This name must be unique per Region per account.\n The name can contain any ASCII character 33 to 126 including most punctuation characters, digits, and upper and lowercased letters.\n  You cannot use a colon (:) in the name."},"availabilityZoneDistribution":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneDistribution","description":"The EC2 instance capacity distribution across Availability Zones for the Auto Scaling group."},"availabilityZoneImpairmentPolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneImpairmentPolicy","description":"The Availability Zone impairment policy for the Auto Scaling group."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of Availability Zones where instances in the Auto Scaling group can be created. Used for launching into the default VPC subnet in each Availability Zone when not using the ``VPCZoneIdentifier`` property, or for attaching a network interface when an existing network interface ID is specified in a launch template."},"capacityRebalance":{"type":"boolean","description":"Indicates whether Capacity Rebalancing is enabled. Otherwise, Capacity Rebalancing is disabled. When you turn on Capacity Rebalancing, Amazon EC2 Auto Scaling attempts to launch a Spot Instance whenever Amazon EC2 notifies that a Spot Instance is at an elevated risk of interruption. After launching a new instance, it then terminates an old instance. For more information, see [Use Capacity Rebalancing to handle Amazon EC2 Spot Interruptions](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-capacity-rebalancing.html) in the in the *Amazon EC2 Auto Scaling User Guide*."},"capacityReservationSpecification":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupCapacityReservationSpecification","description":"The capacity reservation specification for the Auto Scaling group."},"context":{"type":"string","description":"Reserved."},"cooldown":{"type":"string","description":"*Only needed if you use simple scaling policies.* \n The amount of time, in seconds, between one scaling activity ending and another one starting due to simple scaling policies. For more information, see [Scaling cooldowns for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-scaling-cooldowns.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Default: ``300`` seconds"},"defaultInstanceWarmup":{"type":"integer","description":"The amount of time, in seconds, until a new instance is considered to have finished initializing and resource consumption to become stable after it enters the ``InService`` state. \n During an instance refresh, Amazon EC2 Auto Scaling waits for the warm-up period after it replaces an instance before it moves on to replacing the next instance. Amazon EC2 Auto Scaling also waits for the warm-up period before aggregating the metrics for new instances with existing instances in the Amazon CloudWatch metrics that are used for scaling, resulting in more reliable usage data. For more information, see [Set the default instance warmup for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-default-instance-warmup.html) in the *Amazon EC2 Auto Scaling User Guide*.\n  To manage various warm-up settings at the group level, we recommend that you set the default instance warmup, *even if it is set to 0 seconds*. To remove a value that you previously set, include the property but specify ``-1`` for the value. However, we strongly recommend keeping the default instance warmup enabled by specifying a value of ``0`` or other nominal value.\n  Default: None"},"deletionProtection":{"type":"string","description":"The deletion protection setting for the Auto Scaling group."},"desiredCapacity":{"type":"string","description":"The desired capacity is the initial capacity of the Auto Scaling group at the time of its creation and the capacity it attempts to maintain. It can scale beyond this capacity if you configure automatic scaling.\n The number must be greater than or equal to the minimum size of the group and less than or equal to the maximum size of the group. If you do not specify a desired capacity when creating the stack, the default is the minimum size of the group.\n CloudFormation marks the Auto Scaling group as successful (by setting its status to CREATE_COMPLETE) when the desired capacity is reached. However, if a maximum Spot price is set in the launch template or launch configuration that you specified, then desired capacity is not used as a criteria for success. Whether your request is fulfilled depends on Spot Instance capacity and your maximum price."},"desiredCapacityType":{"type":"string","description":"The unit of measurement for the value specified for desired capacity. Amazon EC2 Auto Scaling supports ``DesiredCapacityType`` for attribute-based instance type selection only. For more information, see [Create a mixed instances group using attribute-based instance type selection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-mixed-instances-group-attribute-based-instance-type-selection.html) in the *Amazon EC2 Auto Scaling User Guide*.\n By default, Amazon EC2 Auto Scaling specifies ``units``, which translates into number of instances.\n Valid values: ``units`` | ``vcpu`` | ``memory-mib``"},"healthCheckGracePeriod":{"type":"integer","description":"The amount of time, in seconds, that Amazon EC2 Auto Scaling waits before checking the health status of an EC2 instance that has come into service and marking it unhealthy due to a failed health check. This is useful if your instances do not immediately pass their health checks after they enter the ``InService`` state. For more information, see [Set the health check grace period for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/health-check-grace-period.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Default: ``0`` seconds"},"healthCheckType":{"type":"string","description":"A comma-separated value string of one or more health check types.\n The valid values are ``EC2``, ``EBS``, ``ELB``, and ``VPC_LATTICE``. ``EC2`` is the default health check and cannot be disabled. For more information, see [Health checks for instances in an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-health-checks.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Only specify ``EC2`` if you must clear a value that was previously set."},"instanceId":{"type":"string","description":"The ID of the instance used to base the launch configuration on. For more information, see [Create an Auto Scaling group using an EC2 instance](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-asg-from-instance.html) in the *Amazon EC2 Auto Scaling User Guide*.\n If you specify ``LaunchTemplate``, ``MixedInstancesPolicy``, or ``LaunchConfigurationName``, don't specify ``InstanceId``."},"instanceLifecyclePolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceLifecyclePolicy","description":"The instance lifecycle policy for the Auto Scaling group."},"instanceMaintenancePolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceMaintenancePolicy","description":"An instance maintenance policy. For more information, see [Set instance maintenance policy](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-maintenance-policy.html) in the *Amazon EC2 Auto Scaling User Guide*."},"launchConfigurationName":{"type":"string","description":"The name of the launch configuration to use to launch instances.\n Required only if you don't specify ``LaunchTemplate``, ``MixedInstancesPolicy``, or ``InstanceId``."},"launchTemplate":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplateSpecification","description":"Information used to specify the launch template and version to use to launch instances. You can alternatively associate a launch template to the Auto Scaling group by specifying a ``MixedInstancesPolicy``. For more information about creating launch templates, see [Create a launch template for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-launch-template.html) in the *Amazon EC2 Auto Scaling User Guide*.\n If you omit this property, you must specify ``MixedInstancesPolicy``, ``LaunchConfigurationName``, or ``InstanceId``."},"lifecycleHookSpecificationList":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLifecycleHookSpecification"},"description":"One or more lifecycle hooks to add to the Auto Scaling group before instances are launched."},"loadBalancerNames":{"type":"array","items":{"type":"string"},"description":"A list of Classic Load Balancers associated with this Auto Scaling group. For Application Load Balancers, Network Load Balancers, and Gateway Load Balancers, specify the ``TargetGroupARNs`` property instead."},"maxInstanceLifetime":{"type":"integer","description":"The maximum amount of time, in seconds, that an instance can be in service. The default is null. If specified, the value must be either 0 or a number equal to or greater than 86,400 seconds (1 day). For more information, see [Replace Auto Scaling instances based on maximum instance lifetime](https://docs.aws.amazon.com/autoscaling/ec2/userguide/asg-max-instance-lifetime.html) in the *Amazon EC2 Auto Scaling User Guide*."},"maxSize":{"type":"string","description":"The maximum size of the group.\n  With a mixed instances policy that uses instance weighting, Amazon EC2 Auto Scaling may need to go above ``MaxSize`` to meet your capacity requirements. In this event, Amazon EC2 Auto Scaling will never go above ``MaxSize`` by more than your largest instance weight (weights that define how many units each instance contributes to the desired capacity of the group)."},"metricsCollection":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMetricsCollection"},"description":"Enables the monitoring of group metrics of an Auto Scaling group. By default, these metrics are disabled."},"minSize":{"type":"string","description":"The minimum size of the group."},"mixedInstancesPolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMixedInstancesPolicy","description":"An embedded object that specifies a mixed instances policy.\n The policy includes properties that not only define the distribution of On-Demand Instances and Spot Instances, the maximum price to pay for Spot Instances (optional), and how the Auto Scaling group allocates instance types to fulfill On-Demand and Spot capacities, but also the properties that specify the instance configuration information—the launch template and instance types. The policy can also include a weight for each instance type and different launch templates for individual instance types.\n For more information, see [Auto Scaling groups with multiple instance types and purchase options](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups.html) in the *Amazon EC2 Auto Scaling User Guide*."},"newInstancesProtectedFromScaleIn":{"type":"boolean","description":"Indicates whether newly launched instances are protected from termination by Amazon EC2 Auto Scaling when scaling in. For more information about preventing instances from terminating on scale in, see [Use instance scale-in protection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-protection.html) in the *Amazon EC2 Auto Scaling User Guide*."},"notificationConfiguration":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNotificationConfiguration"},"notificationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNotificationConfiguration"},"description":"Configures an Auto Scaling group to send notifications when specified events take place."},"placementGroup":{"type":"string","description":"The name of the placement group into which to launch your instances. For more information, see [Placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html) in the *Amazon EC2 User Guide*.\n  A *cluster* placement group is a logical grouping of instances within a single Availability Zone. You cannot specify multiple Availability Zones and a cluster placement group."},"serviceLinkedRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service-linked role that the Auto Scaling group uses to call other AWS service on your behalf. By default, Amazon EC2 Auto Scaling uses a service-linked role named ``AWSServiceRoleForAutoScaling``, which it creates if it does not exist. For more information, see [Service-linked roles](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-service-linked-role.html) in the *Amazon EC2 Auto Scaling User Guide*."},"skipZonalShiftValidation":{"type":"boolean"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTagProperty"},"description":"One or more tags. You can tag your Auto Scaling group and propagate the tags to the Amazon EC2 instances it launches. Tags are not propagated to Amazon EBS volumes. To add tags to Amazon EBS volumes, specify the tags in a launch template but use caution. If the launch template specifies an instance tag with a key that is also specified for the Auto Scaling group, Amazon EC2 Auto Scaling overrides the value of that instance tag with the value specified by the Auto Scaling group. For more information, see [Tag Auto Scaling groups and instances](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-tagging.html) in the *Amazon EC2 Auto Scaling User Guide*."},"targetGroupArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the Elastic Load Balancing target groups to associate with the Auto Scaling group. Instances are registered as targets with the target groups. The target groups receive incoming traffic and route requests to one or more registered targets. For more information, see [Use Elastic Load Balancing to distribute traffic across the instances in your Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-load-balancer.html) in the *Amazon EC2 Auto Scaling User Guide*."},"terminationPolicies":{"type":"array","items":{"type":"string"},"description":"A policy or a list of policies that are used to select the instance to terminate. These policies are executed in the order that you list them. For more information, see [Configure termination policies for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-termination-policies.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Valid values: ``Default`` | ``AllocationStrategy`` | ``ClosestToNextInstanceHour`` | ``NewestInstance`` | ``OldestInstance`` | ``OldestLaunchConfiguration`` | ``OldestLaunchTemplate`` | ``arn:aws:lambda:region:account-id:function:my-function:my-alias``"},"trafficSources":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTrafficSourceIdentifier"},"description":"The traffic sources associated with this Auto Scaling group."},"vpcZoneIdentifier":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs for a virtual private cloud (VPC) where instances in the Auto Scaling group can be created.\n If this resource specifies public subnets and is also in a VPC that is defined in the same stack template, you must use the [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) to declare a dependency on the [VPC-gateway attachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc-gateway-attachment.html).\n  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. You can optionally specify how CloudFormation handles these updates by using an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html).\n  Required to launch instances into a nondefault VPC. If you specify ``VPCZoneIdentifier`` with ``AvailabilityZones``, the subnets that you specify for this property must reside in those Availability Zones."}},"requiredInputs":["maxSize","minSize"]},"aws-native:autoscaling:LaunchConfiguration":{"description":"The AWS::AutoScaling::LaunchConfiguration resource specifies the launch configuration that can be used by an Auto Scaling group to configure Amazon EC2 instances.","properties":{"associatePublicIpAddress":{"type":"boolean","description":"For Auto Scaling groups that are running in a virtual private cloud (VPC), specifies whether to assign a public IP address to the group's instances.","replaceOnChanges":true},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:LaunchConfigurationBlockDeviceMapping"},"description":"Specifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes.","replaceOnChanges":true},"classicLinkVpcId":{"type":"string","description":"The ID of a ClassicLink-enabled VPC to link your EC2-Classic instances to.","replaceOnChanges":true},"classicLinkVpcSecurityGroups":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more security groups for the VPC that you specified in the ClassicLinkVPCId property.","replaceOnChanges":true},"ebsOptimized":{"type":"boolean","description":"Specifies whether the launch configuration is optimized for EBS I/O (true) or not (false).","replaceOnChanges":true},"iamInstanceProfile":{"type":"string","description":"Provides the name or the Amazon Resource Name (ARN) of the instance profile associated with the IAM role for the instance. The instance profile contains the IAM role.","replaceOnChanges":true},"imageId":{"type":"string","description":"Provides the unique ID of the Amazon Machine Image (AMI) that was assigned during registration.","replaceOnChanges":true},"instanceId":{"type":"string","description":"The ID of the Amazon EC2 instance you want to use to create the launch configuration.","replaceOnChanges":true},"instanceMonitoring":{"type":"boolean","description":"Controls whether instances in this group are launched with detailed (true) or basic (false) monitoring.","replaceOnChanges":true},"instanceType":{"type":"string","description":"Specifies the instance type of the EC2 instance.","replaceOnChanges":true},"kernelId":{"type":"string","description":"Provides the ID of the kernel associated with the EC2 AMI.","replaceOnChanges":true},"keyName":{"type":"string","description":"Provides the name of the EC2 key pair.","replaceOnChanges":true},"launchConfigurationName":{"type":"string","description":"The name of the launch configuration. This name must be unique per Region per account.","replaceOnChanges":true},"metadataOptions":{"$ref":"#/types/aws-native:autoscaling:LaunchConfigurationMetadataOptions","description":"The metadata options for the instances.","replaceOnChanges":true},"placementTenancy":{"type":"string","description":"The tenancy of the instance, either default or dedicated.","replaceOnChanges":true},"ramDiskId":{"type":"string","description":"The ID of the RAM disk to select.","replaceOnChanges":true},"securityGroups":{"type":"array","items":{"type":"string"},"description":"A list that contains the security groups to assign to the instances in the Auto Scaling group.","replaceOnChanges":true},"spotPrice":{"type":"string","description":"The maximum hourly price you are willing to pay for any Spot Instances launched to fulfill the request.","replaceOnChanges":true},"userData":{"type":"string","description":"The Base64-encoded user data to make available to the launched EC2 instances.","replaceOnChanges":true}},"type":"object","required":["imageId","instanceType"],"inputProperties":{"associatePublicIpAddress":{"type":"boolean","description":"For Auto Scaling groups that are running in a virtual private cloud (VPC), specifies whether to assign a public IP address to the group's instances."},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:LaunchConfigurationBlockDeviceMapping"},"description":"Specifies how block devices are exposed to the instance. You can specify virtual devices and EBS volumes."},"classicLinkVpcId":{"type":"string","description":"The ID of a ClassicLink-enabled VPC to link your EC2-Classic instances to."},"classicLinkVpcSecurityGroups":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more security groups for the VPC that you specified in the ClassicLinkVPCId property."},"ebsOptimized":{"type":"boolean","description":"Specifies whether the launch configuration is optimized for EBS I/O (true) or not (false)."},"iamInstanceProfile":{"type":"string","description":"Provides the name or the Amazon Resource Name (ARN) of the instance profile associated with the IAM role for the instance. The instance profile contains the IAM role."},"imageId":{"type":"string","description":"Provides the unique ID of the Amazon Machine Image (AMI) that was assigned during registration."},"instanceId":{"type":"string","description":"The ID of the Amazon EC2 instance you want to use to create the launch configuration."},"instanceMonitoring":{"type":"boolean","description":"Controls whether instances in this group are launched with detailed (true) or basic (false) monitoring."},"instanceType":{"type":"string","description":"Specifies the instance type of the EC2 instance."},"kernelId":{"type":"string","description":"Provides the ID of the kernel associated with the EC2 AMI."},"keyName":{"type":"string","description":"Provides the name of the EC2 key pair."},"launchConfigurationName":{"type":"string","description":"The name of the launch configuration. This name must be unique per Region per account."},"metadataOptions":{"$ref":"#/types/aws-native:autoscaling:LaunchConfigurationMetadataOptions","description":"The metadata options for the instances."},"placementTenancy":{"type":"string","description":"The tenancy of the instance, either default or dedicated."},"ramDiskId":{"type":"string","description":"The ID of the RAM disk to select."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"A list that contains the security groups to assign to the instances in the Auto Scaling group."},"spotPrice":{"type":"string","description":"The maximum hourly price you are willing to pay for any Spot Instances launched to fulfill the request."},"userData":{"type":"string","description":"The Base64-encoded user data to make available to the launched EC2 instances."}},"requiredInputs":["imageId","instanceType"]},"aws-native:autoscaling:LifecycleHook":{"description":"Resource Type definition for AWS::AutoScaling::LifecycleHook","properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group for the lifecycle hook.","replaceOnChanges":true},"defaultResult":{"type":"string","description":"The action the Auto Scaling group takes when the lifecycle hook timeout elapses or if an unexpected failure occurs. The valid values are CONTINUE and ABANDON (default)."},"heartbeatTimeout":{"type":"integer","description":"The maximum time, in seconds, that can elapse before the lifecycle hook times out. The range is from 30 to 7200 seconds. The default value is 3600 seconds (1 hour). If the lifecycle hook times out, Amazon EC2 Auto Scaling performs the action that you specified in the DefaultResult property."},"lifecycleHookName":{"type":"string","description":"The name of the lifecycle hook.","replaceOnChanges":true},"lifecycleTransition":{"type":"string","description":"The instance state to which you want to attach the lifecycle hook."},"notificationMetadata":{"type":"string","description":"Additional information that is included any time Amazon EC2 Auto Scaling sends a message to the notification target."},"notificationTargetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the notification target that Amazon EC2 Auto Scaling uses to notify you when an instance is in the transition state for the lifecycle hook. You can specify an Amazon SQS queue or an Amazon SNS topic. The notification message includes the following information: lifecycle action token, user account ID, Auto Scaling group name, lifecycle hook name, instance ID, lifecycle transition, and notification metadata."},"roleArn":{"type":"string","description":"The ARN of the IAM role that allows the Auto Scaling group to publish to the specified notification target, for example, an Amazon SNS topic or an Amazon SQS queue."}},"type":"object","required":["autoScalingGroupName","lifecycleTransition"],"inputProperties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group for the lifecycle hook."},"defaultResult":{"type":"string","description":"The action the Auto Scaling group takes when the lifecycle hook timeout elapses or if an unexpected failure occurs. The valid values are CONTINUE and ABANDON (default)."},"heartbeatTimeout":{"type":"integer","description":"The maximum time, in seconds, that can elapse before the lifecycle hook times out. The range is from 30 to 7200 seconds. The default value is 3600 seconds (1 hour). If the lifecycle hook times out, Amazon EC2 Auto Scaling performs the action that you specified in the DefaultResult property."},"lifecycleHookName":{"type":"string","description":"The name of the lifecycle hook."},"lifecycleTransition":{"type":"string","description":"The instance state to which you want to attach the lifecycle hook."},"notificationMetadata":{"type":"string","description":"Additional information that is included any time Amazon EC2 Auto Scaling sends a message to the notification target."},"notificationTargetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the notification target that Amazon EC2 Auto Scaling uses to notify you when an instance is in the transition state for the lifecycle hook. You can specify an Amazon SQS queue or an Amazon SNS topic. The notification message includes the following information: lifecycle action token, user account ID, Auto Scaling group name, lifecycle hook name, instance ID, lifecycle transition, and notification metadata."},"roleArn":{"type":"string","description":"The ARN of the IAM role that allows the Auto Scaling group to publish to the specified notification target, for example, an Amazon SNS topic or an Amazon SQS queue."}},"requiredInputs":["autoScalingGroupName","lifecycleTransition"]},"aws-native:autoscaling:ScalingPolicy":{"description":"The AWS::AutoScaling::ScalingPolicy resource specifies an Amazon EC2 Auto Scaling scaling policy so that the Auto Scaling group can scale the number of instances available for your application.","properties":{"adjustmentType":{"type":"string","description":"Specifies how the scaling adjustment is interpreted. The valid values are ChangeInCapacity, ExactCapacity, and PercentChangeInCapacity."},"arn":{"type":"string","description":"The ARN of the AutoScaling scaling policy"},"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group.","replaceOnChanges":true},"cooldown":{"type":"string","description":"The duration of the policy's cooldown period, in seconds. When a cooldown period is specified here, it overrides the default cooldown period defined for the Auto Scaling group."},"estimatedInstanceWarmup":{"type":"integer","description":"The estimated time, in seconds, until a newly launched instance can contribute to the CloudWatch metrics. If not provided, the default is to use the value from the default cooldown period for the Auto Scaling group. Valid only if the policy type is TargetTrackingScaling or StepScaling."},"metricAggregationType":{"type":"string","description":"The aggregation type for the CloudWatch metrics. The valid values are Minimum, Maximum, and Average. If the aggregation type is null, the value is treated as Average. Valid only if the policy type is StepScaling."},"minAdjustmentMagnitude":{"type":"integer","description":"The minimum value to scale by when the adjustment type is PercentChangeInCapacity. For example, suppose that you create a step scaling policy to scale out an Auto Scaling group by 25 percent and you specify a MinAdjustmentMagnitude of 2. If the group has 4 instances and the scaling policy is performed, 25 percent of 4 is 1. However, because you specified a MinAdjustmentMagnitude of 2, Amazon EC2 Auto Scaling scales out the group by 2 instances."},"policyName":{"type":"string","description":"Returns the name of a scaling policy."},"policyType":{"type":"string","description":"One of the following policy types: TargetTrackingScaling, StepScaling, SimpleScaling (default), PredictiveScaling"},"predictiveScalingConfiguration":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingConfiguration","description":"A predictive scaling policy. Includes support for predefined metrics only."},"scalingAdjustment":{"type":"integer","description":"The amount by which to scale, based on the specified adjustment type. A positive value adds to the current capacity while a negative number removes from the current capacity. For exact capacity, you must specify a positive value. Required if the policy type is SimpleScaling. (Not used with any other policy type.)"},"stepAdjustments":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyStepAdjustment"},"description":"A set of adjustments that enable you to scale based on the size of the alarm breach. Required if the policy type is StepScaling. (Not used with any other policy type.)"},"targetTrackingConfiguration":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyTargetTrackingConfiguration","description":"A target tracking scaling policy. Includes support for predefined or customized metrics."}},"type":"object","required":["arn","autoScalingGroupName","policyName"],"inputProperties":{"adjustmentType":{"type":"string","description":"Specifies how the scaling adjustment is interpreted. The valid values are ChangeInCapacity, ExactCapacity, and PercentChangeInCapacity."},"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group."},"cooldown":{"type":"string","description":"The duration of the policy's cooldown period, in seconds. When a cooldown period is specified here, it overrides the default cooldown period defined for the Auto Scaling group."},"estimatedInstanceWarmup":{"type":"integer","description":"The estimated time, in seconds, until a newly launched instance can contribute to the CloudWatch metrics. If not provided, the default is to use the value from the default cooldown period for the Auto Scaling group. Valid only if the policy type is TargetTrackingScaling or StepScaling."},"metricAggregationType":{"type":"string","description":"The aggregation type for the CloudWatch metrics. The valid values are Minimum, Maximum, and Average. If the aggregation type is null, the value is treated as Average. Valid only if the policy type is StepScaling."},"minAdjustmentMagnitude":{"type":"integer","description":"The minimum value to scale by when the adjustment type is PercentChangeInCapacity. For example, suppose that you create a step scaling policy to scale out an Auto Scaling group by 25 percent and you specify a MinAdjustmentMagnitude of 2. If the group has 4 instances and the scaling policy is performed, 25 percent of 4 is 1. However, because you specified a MinAdjustmentMagnitude of 2, Amazon EC2 Auto Scaling scales out the group by 2 instances."},"policyType":{"type":"string","description":"One of the following policy types: TargetTrackingScaling, StepScaling, SimpleScaling (default), PredictiveScaling"},"predictiveScalingConfiguration":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingConfiguration","description":"A predictive scaling policy. Includes support for predefined metrics only."},"scalingAdjustment":{"type":"integer","description":"The amount by which to scale, based on the specified adjustment type. A positive value adds to the current capacity while a negative number removes from the current capacity. For exact capacity, you must specify a positive value. Required if the policy type is SimpleScaling. (Not used with any other policy type.)"},"stepAdjustments":{"type":"array","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyStepAdjustment"},"description":"A set of adjustments that enable you to scale based on the size of the alarm breach. Required if the policy type is StepScaling. (Not used with any other policy type.)"},"targetTrackingConfiguration":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyTargetTrackingConfiguration","description":"A target tracking scaling policy. Includes support for predefined or customized metrics."}},"requiredInputs":["autoScalingGroupName"]},"aws-native:autoscaling:ScheduledAction":{"description":"The AWS::AutoScaling::ScheduledAction resource specifies an Amazon EC2 Auto Scaling scheduled action so that the Auto Scaling group can change the number of instances available for your application in response to predictable load changes.","properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group.","replaceOnChanges":true},"desiredCapacity":{"type":"integer","description":"The desired capacity is the initial capacity of the Auto Scaling group after the scheduled action runs and the capacity it attempts to maintain."},"endTime":{"type":"string","description":"The latest scheduled start time to return. If scheduled action names are provided, this parameter is ignored."},"maxSize":{"type":"integer","description":"The minimum size of the Auto Scaling group."},"minSize":{"type":"integer","description":"The minimum size of the Auto Scaling group."},"recurrence":{"type":"string","description":"The recurring schedule for the action, in Unix cron syntax format. When StartTime and EndTime are specified with Recurrence , they form the boundaries of when the recurring action starts and stops."},"scheduledActionName":{"type":"string","description":"Auto-generated unique identifier"},"startTime":{"type":"string","description":"The earliest scheduled start time to return. If scheduled action names are provided, this parameter is ignored."},"timeZone":{"type":"string","description":"The time zone for the cron expression."}},"type":"object","required":["autoScalingGroupName","scheduledActionName"],"inputProperties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group."},"desiredCapacity":{"type":"integer","description":"The desired capacity is the initial capacity of the Auto Scaling group after the scheduled action runs and the capacity it attempts to maintain."},"endTime":{"type":"string","description":"The latest scheduled start time to return. If scheduled action names are provided, this parameter is ignored."},"maxSize":{"type":"integer","description":"The minimum size of the Auto Scaling group."},"minSize":{"type":"integer","description":"The minimum size of the Auto Scaling group."},"recurrence":{"type":"string","description":"The recurring schedule for the action, in Unix cron syntax format. When StartTime and EndTime are specified with Recurrence , they form the boundaries of when the recurring action starts and stops."},"startTime":{"type":"string","description":"The earliest scheduled start time to return. If scheduled action names are provided, this parameter is ignored."},"timeZone":{"type":"string","description":"The time zone for the cron expression."}},"requiredInputs":["autoScalingGroupName"]},"aws-native:autoscaling:WarmPool":{"description":"Resource schema for AWS::AutoScaling::WarmPool.","properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group.","replaceOnChanges":true},"instanceReusePolicy":{"$ref":"#/types/aws-native:autoscaling:WarmPoolInstanceReusePolicy","description":"Indicates whether instances in the Auto Scaling group can be returned to the warm pool on scale in. The default is to terminate instances in the Auto Scaling group when the group scales in."},"maxGroupPreparedCapacity":{"type":"integer","description":"Specifies the maximum number of instances that are allowed to be in the warm pool or in any state except `Terminated` for the Auto Scaling group. This is an optional property. Specify it only if you do not want the warm pool size to be determined by the difference between the group's maximum capacity and its desired capacity.\n\n\u003e If a value for `MaxGroupPreparedCapacity` is not specified, Amazon EC2 Auto Scaling launches and maintains the difference between the group's maximum capacity and its desired capacity. If you specify a value for `MaxGroupPreparedCapacity` , Amazon EC2 Auto Scaling uses the difference between the `MaxGroupPreparedCapacity` and the desired capacity instead.\n\u003e \n\u003e The size of the warm pool is dynamic. Only when `MaxGroupPreparedCapacity` and `MinSize` are set to the same value does the warm pool have an absolute size. \n\nIf the desired capacity of the Auto Scaling group is higher than the `MaxGroupPreparedCapacity` , the capacity of the warm pool is 0, unless you specify a value for `MinSize` . To remove a value that you previously set, include the property but specify -1 for the value."},"minSize":{"type":"integer","description":"Specifies the minimum number of instances to maintain in the warm pool. This helps you to ensure that there is always a certain number of warmed instances available to handle traffic spikes. Defaults to 0 if not specified."},"poolState":{"type":"string","description":"Sets the instance state to transition to after the lifecycle actions are complete. Default is `Stopped` ."}},"type":"object","required":["autoScalingGroupName"],"inputProperties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group."},"instanceReusePolicy":{"$ref":"#/types/aws-native:autoscaling:WarmPoolInstanceReusePolicy","description":"Indicates whether instances in the Auto Scaling group can be returned to the warm pool on scale in. The default is to terminate instances in the Auto Scaling group when the group scales in."},"maxGroupPreparedCapacity":{"type":"integer","description":"Specifies the maximum number of instances that are allowed to be in the warm pool or in any state except `Terminated` for the Auto Scaling group. This is an optional property. Specify it only if you do not want the warm pool size to be determined by the difference between the group's maximum capacity and its desired capacity.\n\n\u003e If a value for `MaxGroupPreparedCapacity` is not specified, Amazon EC2 Auto Scaling launches and maintains the difference between the group's maximum capacity and its desired capacity. If you specify a value for `MaxGroupPreparedCapacity` , Amazon EC2 Auto Scaling uses the difference between the `MaxGroupPreparedCapacity` and the desired capacity instead.\n\u003e \n\u003e The size of the warm pool is dynamic. Only when `MaxGroupPreparedCapacity` and `MinSize` are set to the same value does the warm pool have an absolute size. \n\nIf the desired capacity of the Auto Scaling group is higher than the `MaxGroupPreparedCapacity` , the capacity of the warm pool is 0, unless you specify a value for `MinSize` . To remove a value that you previously set, include the property but specify -1 for the value."},"minSize":{"type":"integer","description":"Specifies the minimum number of instances to maintain in the warm pool. This helps you to ensure that there is always a certain number of warmed instances available to handle traffic spikes. Defaults to 0 if not specified."},"poolState":{"type":"string","description":"Sets the instance state to transition to after the lifecycle actions are complete. Default is `Stopped` ."}},"requiredInputs":["autoScalingGroupName"]},"aws-native:b2bi:Capability":{"description":"Definition of AWS::B2BI::Capability Resource Type","properties":{"capabilityArn":{"type":"string","description":"Returns an Amazon Resource Name (ARN) for a specific AWS resource, such as a capability, partnership, profile, or transformer."},"capabilityId":{"type":"string","description":"Returns a system-assigned unique identifier for the capability."},"configuration":{"$ref":"#/types/aws-native:b2bi:CapabilityConfigurationProperties","description":"Specifies a structure that contains the details for a capability."},"createdAt":{"type":"string","description":"Returns a timestamp for creation date and time of the capability."},"instructionsDocuments":{"type":"array","items":{"$ref":"#/types/aws-native:b2bi:CapabilityS3Location"},"description":"Specifies one or more locations in Amazon S3, each specifying an EDI document that can be used with this capability. Each item contains the name of the bucket and the key, to identify the document's location."},"modifiedAt":{"type":"string","description":"Returns a timestamp that identifies the most recent date and time that the capability was modified."},"name":{"type":"string","description":"The display name of the capability."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the key-value pairs assigned to ARNs that you can use to group and search for resources by type. You can attach this metadata to resources (capabilities, partnerships, and so on) for any purpose."},"type":{"$ref":"#/types/aws-native:b2bi:CapabilityType","description":"Returns the type of the capability. Currently, only `edi` is supported.","replaceOnChanges":true}},"type":"object","required":["capabilityArn","capabilityId","configuration","createdAt","modifiedAt","name","type"],"inputProperties":{"configuration":{"$ref":"#/types/aws-native:b2bi:CapabilityConfigurationProperties","description":"Specifies a structure that contains the details for a capability."},"instructionsDocuments":{"type":"array","items":{"$ref":"#/types/aws-native:b2bi:CapabilityS3Location"},"description":"Specifies one or more locations in Amazon S3, each specifying an EDI document that can be used with this capability. Each item contains the name of the bucket and the key, to identify the document's location."},"name":{"type":"string","description":"The display name of the capability."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the key-value pairs assigned to ARNs that you can use to group and search for resources by type. You can attach this metadata to resources (capabilities, partnerships, and so on) for any purpose."},"type":{"$ref":"#/types/aws-native:b2bi:CapabilityType","description":"Returns the type of the capability. Currently, only `edi` is supported."}},"requiredInputs":["configuration","type"]},"aws-native:b2bi:Partnership":{"description":"Definition of AWS::B2BI::Partnership Resource Type","properties":{"capabilities":{"type":"array","items":{"type":"string"},"description":"Returns one or more capabilities associated with this partnership."},"capabilityOptions":{"$ref":"#/types/aws-native:b2bi:PartnershipCapabilityOptions","description":"Contains the details for an Outbound EDI capability."},"createdAt":{"type":"string","description":"Returns a timestamp for creation date and time of the partnership."},"email":{"type":"string","description":"Specifies the email address associated with this trading partner.","replaceOnChanges":true},"modifiedAt":{"type":"string","description":"Returns a timestamp that identifies the most recent date and time that the partnership was modified."},"name":{"type":"string","description":"Returns the name of the partnership."},"partnershipArn":{"type":"string","description":"Returns an Amazon Resource Name (ARN) for a specific AWS resource, such as a capability, partnership, profile, or transformer."},"partnershipId":{"type":"string","description":"Returns the unique, system-generated identifier for a partnership."},"phone":{"type":"string","description":"Specifies the phone number associated with the partnership.","replaceOnChanges":true},"profileId":{"type":"string","description":"Returns the unique, system-generated identifier for the profile connected to this partnership.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair for a specific partnership. Tags are metadata that you can use to search for and group capabilities for various purposes."},"tradingPartnerId":{"type":"string","description":"Returns the unique, system-generated identifier for a trading partner."}},"type":"object","required":["capabilities","createdAt","email","modifiedAt","name","partnershipArn","partnershipId","profileId","tradingPartnerId"],"inputProperties":{"capabilities":{"type":"array","items":{"type":"string"},"description":"Returns one or more capabilities associated with this partnership."},"capabilityOptions":{"$ref":"#/types/aws-native:b2bi:PartnershipCapabilityOptions","description":"Contains the details for an Outbound EDI capability."},"email":{"type":"string","description":"Specifies the email address associated with this trading partner."},"name":{"type":"string","description":"Returns the name of the partnership."},"phone":{"type":"string","description":"Specifies the phone number associated with the partnership."},"profileId":{"type":"string","description":"Returns the unique, system-generated identifier for the profile connected to this partnership."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair for a specific partnership. Tags are metadata that you can use to search for and group capabilities for various purposes."}},"requiredInputs":["capabilities","email","profileId"]},"aws-native:b2bi:Profile":{"description":"Definition of AWS::B2BI::Profile Resource Type","properties":{"businessName":{"type":"string","description":"Returns the name for the business associated with this profile."},"createdAt":{"type":"string","description":"Returns the timestamp for creation date and time of the profile."},"email":{"type":"string"},"logGroupName":{"type":"string","description":"Returns the name of the logging group."},"logging":{"$ref":"#/types/aws-native:b2bi:ProfileLogging","description":"Specifies whether or not logging is enabled for this profile.","replaceOnChanges":true},"modifiedAt":{"type":"string","description":"Returns the timestamp that identifies the most recent date and time that the profile was modified."},"name":{"type":"string","description":"Returns the display name for profile."},"phone":{"type":"string","description":"Specifies the phone number associated with the profile."},"profileArn":{"type":"string","description":"Returns an Amazon Resource Name (ARN) for the profile."},"profileId":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair for a specific profile. Tags are metadata that you can use to search for and group capabilities for various purposes."}},"type":"object","required":["businessName","createdAt","logGroupName","logging","modifiedAt","name","phone","profileArn","profileId"],"inputProperties":{"businessName":{"type":"string","description":"Returns the name for the business associated with this profile."},"email":{"type":"string"},"logging":{"$ref":"#/types/aws-native:b2bi:ProfileLogging","description":"Specifies whether or not logging is enabled for this profile."},"name":{"type":"string","description":"Returns the display name for profile."},"phone":{"type":"string","description":"Specifies the phone number associated with the profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair for a specific profile. Tags are metadata that you can use to search for and group capabilities for various purposes."}},"requiredInputs":["businessName","logging","phone"]},"aws-native:b2bi:Transformer":{"description":"Definition of AWS::B2BI::Transformer Resource Type","properties":{"createdAt":{"type":"string","description":"Returns a timestamp indicating when the transformer was created. For example, `2023-07-20T19:58:44.624Z` ."},"ediType":{"$ref":"#/types/aws-native:b2bi:TransformerEdiTypeProperties"},"fileFormat":{"$ref":"#/types/aws-native:b2bi:TransformerFileFormat"},"inputConversion":{"$ref":"#/types/aws-native:b2bi:TransformerInputConversion","description":"Returns a structure that contains the format options for the transformation."},"mapping":{"$ref":"#/types/aws-native:b2bi:TransformerMapping","description":"Returns the structure that contains the mapping template and its language (either XSLT or JSONATA)."},"mappingTemplate":{"type":"string","description":"This shape is deprecated: This is a legacy trait. Please use input-conversion or output-conversion."},"modifiedAt":{"type":"string","description":"Returns a timestamp representing the date and time for the most recent change for the transformer object."},"name":{"type":"string","description":"Returns the descriptive name for the transformer."},"outputConversion":{"$ref":"#/types/aws-native:b2bi:TransformerOutputConversion","description":"Returns the `OutputConversion` object, which contains the format options for the outbound transformation."},"sampleDocument":{"type":"string","description":"This shape is deprecated: This is a legacy trait. Please use input-conversion or output-conversion."},"sampleDocuments":{"$ref":"#/types/aws-native:b2bi:TransformerSampleDocuments","description":"Returns a structure that contains the Amazon S3 bucket and an array of the corresponding keys used to identify the location for your sample documents."},"status":{"$ref":"#/types/aws-native:b2bi:TransformerStatus","description":"Returns the state of the newly created transformer. The transformer can be either `active` or `inactive` . For the transformer to be used in a capability, its status must `active` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair for a specific transformer. Tags are metadata that you can use to search for and group capabilities for various purposes."},"transformerArn":{"type":"string","description":"Returns an Amazon Resource Name (ARN) for a specific transformer."},"transformerId":{"type":"string","description":"The system-assigned unique identifier for the transformer."}},"type":"object","required":["createdAt","modifiedAt","name","status","transformerArn","transformerId"],"inputProperties":{"ediType":{"$ref":"#/types/aws-native:b2bi:TransformerEdiTypeProperties"},"fileFormat":{"$ref":"#/types/aws-native:b2bi:TransformerFileFormat"},"inputConversion":{"$ref":"#/types/aws-native:b2bi:TransformerInputConversion","description":"Returns a structure that contains the format options for the transformation."},"mapping":{"$ref":"#/types/aws-native:b2bi:TransformerMapping","description":"Returns the structure that contains the mapping template and its language (either XSLT or JSONATA)."},"mappingTemplate":{"type":"string","description":"This shape is deprecated: This is a legacy trait. Please use input-conversion or output-conversion."},"name":{"type":"string","description":"Returns the descriptive name for the transformer."},"outputConversion":{"$ref":"#/types/aws-native:b2bi:TransformerOutputConversion","description":"Returns the `OutputConversion` object, which contains the format options for the outbound transformation."},"sampleDocument":{"type":"string","description":"This shape is deprecated: This is a legacy trait. Please use input-conversion or output-conversion."},"sampleDocuments":{"$ref":"#/types/aws-native:b2bi:TransformerSampleDocuments","description":"Returns a structure that contains the Amazon S3 bucket and an array of the corresponding keys used to identify the location for your sample documents."},"status":{"$ref":"#/types/aws-native:b2bi:TransformerStatus","description":"Returns the state of the newly created transformer. The transformer can be either `active` or `inactive` . For the transformer to be used in a capability, its status must `active` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair for a specific transformer. Tags are metadata that you can use to search for and group capabilities for various purposes."}},"requiredInputs":["status"]},"aws-native:backup:BackupPlan":{"description":"Resource Type definition for AWS::Backup::BackupPlan","properties":{"backupPlan":{"$ref":"#/types/aws-native:backup:BackupPlanResourceType","description":"Uniquely identifies the backup plan to be associated with the selection of resources.","language":{"csharp":{"name":"BackupPlanValue"}}},"backupPlanArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example, `arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50` ."},"backupPlanId":{"type":"string","description":"Uniquely identifies a backup plan."},"backupPlanTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the backup plan."},"versionId":{"type":"string","description":"Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes long. Version Ids cannot be edited."}},"type":"object","required":["backupPlan","backupPlanArn","backupPlanId","versionId"],"inputProperties":{"backupPlan":{"$ref":"#/types/aws-native:backup:BackupPlanResourceType","description":"Uniquely identifies the backup plan to be associated with the selection of resources.","language":{"csharp":{"name":"BackupPlanValue"}}},"backupPlanTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the backup plan."}},"requiredInputs":["backupPlan"]},"aws-native:backup:BackupSelection":{"description":"Resource Type definition for AWS::Backup::BackupSelection","properties":{"awsId":{"type":"string","description":"Uniquely identifies the backup selection."},"backupPlanId":{"type":"string","description":"Uniquely identifies a backup plan.","replaceOnChanges":true},"backupSelection":{"$ref":"#/types/aws-native:backup:BackupSelectionResourceType","description":"Specifies the body of a request to assign a set of resources to a backup plan.\n\nIt includes an array of resources, an optional array of patterns to exclude resources, an optional role to provide access to the AWS service the resource belongs to, and an optional array of tags used to identify a set of resources.","language":{"csharp":{"name":"BackupSelectionValue"}},"replaceOnChanges":true},"selectionId":{"type":"string","description":"Uniquely identifies a request to assign a set of resources to a backup plan."}},"type":"object","required":["awsId","backupPlanId","backupSelection","selectionId"],"inputProperties":{"backupPlanId":{"type":"string","description":"Uniquely identifies a backup plan."},"backupSelection":{"$ref":"#/types/aws-native:backup:BackupSelectionResourceType","description":"Specifies the body of a request to assign a set of resources to a backup plan.\n\nIt includes an array of resources, an optional array of patterns to exclude resources, an optional role to provide access to the AWS service the resource belongs to, and an optional array of tags used to identify a set of resources.","language":{"csharp":{"name":"BackupSelectionValue"}}}},"requiredInputs":["backupPlanId","backupSelection"]},"aws-native:backup:BackupVault":{"description":"Resource Type definition for AWS::Backup::BackupVault","properties":{"accessPolicy":{"$ref":"pulumi.json#/Any","description":"A resource-based policy that is used to manage access permissions on the target backup vault.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Backup::BackupVault` for more information about the expected schema for this property."},"backupVaultArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example, `arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault` ."},"backupVaultName":{"type":"string","description":"The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created.","replaceOnChanges":true},"backupVaultTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the backup vault."},"encryptionKeyArn":{"type":"string","description":"A server-side encryption key you can specify to encrypt your backups from services that support full AWS Backup management; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` . If you specify a key, you must specify its ARN, not its alias. If you do not specify a key, AWS Backup creates a KMS key for you by default.\n\nTo learn which AWS Backup services support full AWS Backup management and how AWS Backup handles encryption for backups from services that do not yet support full AWS Backup , see [Encryption for backups in AWS Backup](https://docs.aws.amazon.com/aws-backup/latest/devguide/encryption.html)","replaceOnChanges":true},"lockConfiguration":{"$ref":"#/types/aws-native:backup:BackupVaultLockConfigurationType","description":"Configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) ."},"notifications":{"$ref":"#/types/aws-native:backup:BackupVaultNotificationObjectType","description":"The SNS event notifications for the specified backup vault."}},"type":"object","required":["backupVaultArn","backupVaultName"],"inputProperties":{"accessPolicy":{"$ref":"pulumi.json#/Any","description":"A resource-based policy that is used to manage access permissions on the target backup vault.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Backup::BackupVault` for more information about the expected schema for this property."},"backupVaultName":{"type":"string","description":"The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created."},"backupVaultTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the backup vault."},"encryptionKeyArn":{"type":"string","description":"A server-side encryption key you can specify to encrypt your backups from services that support full AWS Backup management; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` . If you specify a key, you must specify its ARN, not its alias. If you do not specify a key, AWS Backup creates a KMS key for you by default.\n\nTo learn which AWS Backup services support full AWS Backup management and how AWS Backup handles encryption for backups from services that do not yet support full AWS Backup , see [Encryption for backups in AWS Backup](https://docs.aws.amazon.com/aws-backup/latest/devguide/encryption.html)"},"lockConfiguration":{"$ref":"#/types/aws-native:backup:BackupVaultLockConfigurationType","description":"Configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) ."},"notifications":{"$ref":"#/types/aws-native:backup:BackupVaultNotificationObjectType","description":"The SNS event notifications for the specified backup vault."}}},"aws-native:backup:Framework":{"description":"Contains detailed information about a framework. Frameworks contain controls, which evaluate and report on your backup events and resources. Frameworks generate daily compliance results.","properties":{"creationTime":{"type":"string","description":"The date and time that a framework is created, in ISO 8601 representation. The value of CreationTime is accurate to milliseconds. For example, 2020-07-10T15:00:00.000-08:00 represents the 10th of July 2020 at 3:00 PM 8 hours behind UTC."},"deploymentStatus":{"type":"string","description":"The deployment status of a framework. The statuses are: `CREATE_IN_PROGRESS | UPDATE_IN_PROGRESS | DELETE_IN_PROGRESS | COMPLETED | FAILED`"},"frameworkArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies Framework as a resource"},"frameworkControls":{"type":"array","items":{"$ref":"#/types/aws-native:backup:FrameworkControl"},"description":"Contains detailed information about all of the controls of a framework. Each framework must contain at least one control."},"frameworkDescription":{"type":"string","description":"An optional description of the framework with a maximum 1,024 characters."},"frameworkName":{"type":"string","description":"The unique name of a framework. This name is between 1 and 256 characters, starting with a letter, and consisting of letters (a-z, A-Z), numbers (0-9), and underscores (_).","replaceOnChanges":true},"frameworkStatus":{"type":"string","description":"A framework consists of one or more controls. Each control governs a resource, such as backup plans, backup selections, backup vaults, or recovery points. You can also turn AWS Config recording on or off for each resource. The statuses are:\n\n`ACTIVE` when recording is turned on for all resources governed by the framework.\n\n`PARTIALLY_ACTIVE` when recording is turned off for at least one resource governed by the framework.\n\n`INACTIVE` when recording is turned off for all resources governed by the framework.\n\n`UNAVAILABLE` when AWS Backup is unable to validate recording status at this time."},"frameworkTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."}},"type":"object","required":["creationTime","deploymentStatus","frameworkArn","frameworkControls","frameworkStatus"],"inputProperties":{"frameworkControls":{"type":"array","items":{"$ref":"#/types/aws-native:backup:FrameworkControl"},"description":"Contains detailed information about all of the controls of a framework. Each framework must contain at least one control."},"frameworkDescription":{"type":"string","description":"An optional description of the framework with a maximum 1,024 characters."},"frameworkName":{"type":"string","description":"The unique name of a framework. This name is between 1 and 256 characters, starting with a letter, and consisting of letters (a-z, A-Z), numbers (0-9), and underscores (_)."},"frameworkTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."}},"requiredInputs":["frameworkControls"]},"aws-native:backup:LogicallyAirGappedBackupVault":{"description":"Resource Type definition for AWS::Backup::LogicallyAirGappedBackupVault","properties":{"accessPolicy":{"$ref":"pulumi.json#/Any","description":"The backup vault access policy document in JSON format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Backup::LogicallyAirGappedBackupVault` for more information about the expected schema for this property."},"backupVaultArn":{"type":"string","description":"The ARN of the backup vault."},"backupVaultName":{"type":"string","description":"The name of a logical container where backups are stored. Logically air-gapped backup vaults are identified by names that are unique to the account used to create them and the Region where they are created.","replaceOnChanges":true},"backupVaultTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the vault."},"encryptionKeyArn":{"type":"string","description":"The server-side encryption key that is used to protect your backups; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nIf this field is left blank, AWS Backup will create an AWS owned key to be used to encrypt the content of the logically air-gapped vault. The ARN of this created key will be available as `Fn::GetAtt` output.","replaceOnChanges":true},"maxRetentionDays":{"type":"integer","description":"The maximum retention period that the vault retains its recovery points.","replaceOnChanges":true},"minRetentionDays":{"type":"integer","description":"This setting specifies the minimum retention period that the vault retains its recovery points.\n\nThe minimum value accepted is 7 days.","replaceOnChanges":true},"mpaApprovalTeamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MPA approval team to associate with the backup vault. This cannot be changed after it is set from the CloudFormation template."},"notifications":{"$ref":"#/types/aws-native:backup:LogicallyAirGappedBackupVaultNotificationObjectType","description":"Returns event notifications for the specified backup vault."},"vaultState":{"type":"string","description":"The vault state. The possible values are `CREATING` , `AVAILABLE` , and `FAILED` ."},"vaultType":{"type":"string","description":"The vault type. The possible values are `BACKUP_VAULT` and `LOGICALLY_AIR_GAPPED_BACKUP_VAULT` ."}},"type":"object","required":["backupVaultArn","backupVaultName","maxRetentionDays","minRetentionDays","vaultState","vaultType"],"inputProperties":{"accessPolicy":{"$ref":"pulumi.json#/Any","description":"The backup vault access policy document in JSON format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Backup::LogicallyAirGappedBackupVault` for more information about the expected schema for this property."},"backupVaultName":{"type":"string","description":"The name of a logical container where backups are stored. Logically air-gapped backup vaults are identified by names that are unique to the account used to create them and the Region where they are created."},"backupVaultTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to assign to the vault."},"encryptionKeyArn":{"type":"string","description":"The server-side encryption key that is used to protect your backups; for example, `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nIf this field is left blank, AWS Backup will create an AWS owned key to be used to encrypt the content of the logically air-gapped vault. The ARN of this created key will be available as `Fn::GetAtt` output."},"maxRetentionDays":{"type":"integer","description":"The maximum retention period that the vault retains its recovery points."},"minRetentionDays":{"type":"integer","description":"This setting specifies the minimum retention period that the vault retains its recovery points.\n\nThe minimum value accepted is 7 days."},"mpaApprovalTeamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MPA approval team to associate with the backup vault. This cannot be changed after it is set from the CloudFormation template."},"notifications":{"$ref":"#/types/aws-native:backup:LogicallyAirGappedBackupVaultNotificationObjectType","description":"Returns event notifications for the specified backup vault."}},"requiredInputs":["maxRetentionDays","minRetentionDays"]},"aws-native:backup:ReportPlan":{"description":"Contains detailed information about a report plan in AWS Backup Audit Manager.","properties":{"reportDeliveryChannel":{"$ref":"#/types/aws-native:backup:ReportDeliveryChannelProperties","description":"A structure that contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports."},"reportPlanArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN depends on the resource type."},"reportPlanDescription":{"type":"string","description":"An optional description of the report plan with a maximum of 1,024 characters."},"reportPlanName":{"type":"string","description":"The unique name of the report plan. The name must be between 1 and 256 characters, starting with a letter, and consisting of letters (a-z, A-Z), numbers (0-9), and underscores (_).","replaceOnChanges":true},"reportPlanTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the report plans that you create. Each tag is a key-value pair."},"reportSetting":{"$ref":"#/types/aws-native:backup:ReportSettingProperties","description":"Identifies the report template for the report. Reports are built using a report template."}},"type":"object","required":["reportDeliveryChannel","reportPlanArn","reportSetting"],"inputProperties":{"reportDeliveryChannel":{"$ref":"#/types/aws-native:backup:ReportDeliveryChannelProperties","description":"A structure that contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports."},"reportPlanDescription":{"type":"string","description":"An optional description of the report plan with a maximum of 1,024 characters."},"reportPlanName":{"type":"string","description":"The unique name of the report plan. The name must be between 1 and 256 characters, starting with a letter, and consisting of letters (a-z, A-Z), numbers (0-9), and underscores (_)."},"reportPlanTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the report plans that you create. Each tag is a key-value pair."},"reportSetting":{"$ref":"#/types/aws-native:backup:ReportSettingProperties","description":"Identifies the report template for the report. Reports are built using a report template."}},"requiredInputs":["reportDeliveryChannel","reportSetting"]},"aws-native:backup:RestoreTestingPlan":{"description":"Definition of AWS::Backup::RestoreTestingPlan Resource Type","properties":{"recoveryPointSelection":{"$ref":"#/types/aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointSelection","description":"The specified criteria to assign a set of resources, such as recovery point types or backup vaults."},"restoreTestingPlanArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies a restore testing plan."},"restoreTestingPlanName":{"type":"string","description":"The RestoreTestingPlanName is a unique string that is the name of the restore testing plan. This cannot be changed after creation, and it must consist of only alphanumeric characters and underscores.","replaceOnChanges":true},"scheduleExpression":{"type":"string","description":"A CRON expression in specified timezone when a restore testing plan is executed. When no CRON expression is provided, AWS Backup will use the default expression `cron(0 5 ? * * *)` ."},"scheduleExpressionTimezone":{"type":"string","description":"Optional. This is the timezone in which the schedule expression is set. By default, ScheduleExpressions are in UTC. You can modify this to a specified timezone."},"startWindowHours":{"type":"integer","description":"Defaults to 24 hours.\n\nA value in hours after a restore test is scheduled before a job will be canceled if it doesn't start successfully. This value is optional. If this value is included, this parameter has a maximum value of 168 hours (one week)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional tags to include. A tag is a key-value pair you can use to manage, filter, and search for your resources. Allowed characters include UTF-8 letters,numbers, spaces, and the following characters: `+ - = . _ : /.`"}},"type":"object","required":["recoveryPointSelection","restoreTestingPlanArn","restoreTestingPlanName","scheduleExpression"],"inputProperties":{"recoveryPointSelection":{"$ref":"#/types/aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointSelection","description":"The specified criteria to assign a set of resources, such as recovery point types or backup vaults."},"restoreTestingPlanName":{"type":"string","description":"The RestoreTestingPlanName is a unique string that is the name of the restore testing plan. This cannot be changed after creation, and it must consist of only alphanumeric characters and underscores."},"scheduleExpression":{"type":"string","description":"A CRON expression in specified timezone when a restore testing plan is executed. When no CRON expression is provided, AWS Backup will use the default expression `cron(0 5 ? * * *)` ."},"scheduleExpressionTimezone":{"type":"string","description":"Optional. This is the timezone in which the schedule expression is set. By default, ScheduleExpressions are in UTC. You can modify this to a specified timezone."},"startWindowHours":{"type":"integer","description":"Defaults to 24 hours.\n\nA value in hours after a restore test is scheduled before a job will be canceled if it doesn't start successfully. This value is optional. If this value is included, this parameter has a maximum value of 168 hours (one week)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional tags to include. A tag is a key-value pair you can use to manage, filter, and search for your resources. Allowed characters include UTF-8 letters,numbers, spaces, and the following characters: `+ - = . _ : /.`"}},"requiredInputs":["recoveryPointSelection","scheduleExpression"]},"aws-native:backup:RestoreTestingSelection":{"description":"Resource Type definition for AWS::Backup::RestoreTestingSelection","properties":{"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that AWS Backup uses to create the target resource; for example: `arn:aws:iam::123456789012:role/S3Access` ."},"protectedResourceArns":{"type":"array","items":{"type":"string"},"description":"You can include specific ARNs, such as `ProtectedResourceArns: [\"arn:aws:...\", \"arn:aws:...\"]` or you can include a wildcard: `ProtectedResourceArns: [\"*\"]` , but not both."},"protectedResourceConditions":{"$ref":"#/types/aws-native:backup:RestoreTestingSelectionProtectedResourceConditions","description":"In a resource testing selection, this parameter filters by specific conditions such as `StringEquals` or `StringNotEquals` ."},"protectedResourceType":{"type":"string","description":"The type of AWS resource included in a resource testing selection; for example, an Amazon EBS volume or an Amazon RDS database.","replaceOnChanges":true},"restoreMetadataOverrides":{"type":"object","additionalProperties":{"type":"string"},"description":"You can override certain restore metadata keys by including the parameter `RestoreMetadataOverrides` in the body of `RestoreTestingSelection` . Key values are not case sensitive.\n\nSee the complete list of [restore testing inferred metadata](https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing-inferred-metadata.html) ."},"restoreTestingPlanName":{"type":"string","description":"Unique string that is the name of the restore testing plan.\n\nThe name cannot be changed after creation. The name must consist of only alphanumeric characters and underscores. Maximum length is 50.","replaceOnChanges":true},"restoreTestingSelectionName":{"type":"string","description":"The unique name of the restore testing selection that belongs to the related restore testing plan.\n\nThe name consists of only alphanumeric characters and underscores. Maximum length is 50.","replaceOnChanges":true},"validationWindowHours":{"type":"integer","description":"This is amount of hours (1 to 168) available to run a validation script on the data. The data will be deleted upon the completion of the validation script or the end of the specified retention period, whichever comes first."}},"type":"object","required":["iamRoleArn","protectedResourceType","restoreTestingPlanName","restoreTestingSelectionName"],"inputProperties":{"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that AWS Backup uses to create the target resource; for example: `arn:aws:iam::123456789012:role/S3Access` ."},"protectedResourceArns":{"type":"array","items":{"type":"string"},"description":"You can include specific ARNs, such as `ProtectedResourceArns: [\"arn:aws:...\", \"arn:aws:...\"]` or you can include a wildcard: `ProtectedResourceArns: [\"*\"]` , but not both."},"protectedResourceConditions":{"$ref":"#/types/aws-native:backup:RestoreTestingSelectionProtectedResourceConditions","description":"In a resource testing selection, this parameter filters by specific conditions such as `StringEquals` or `StringNotEquals` ."},"protectedResourceType":{"type":"string","description":"The type of AWS resource included in a resource testing selection; for example, an Amazon EBS volume or an Amazon RDS database."},"restoreMetadataOverrides":{"type":"object","additionalProperties":{"type":"string"},"description":"You can override certain restore metadata keys by including the parameter `RestoreMetadataOverrides` in the body of `RestoreTestingSelection` . Key values are not case sensitive.\n\nSee the complete list of [restore testing inferred metadata](https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing-inferred-metadata.html) ."},"restoreTestingPlanName":{"type":"string","description":"Unique string that is the name of the restore testing plan.\n\nThe name cannot be changed after creation. The name must consist of only alphanumeric characters and underscores. Maximum length is 50."},"restoreTestingSelectionName":{"type":"string","description":"The unique name of the restore testing selection that belongs to the related restore testing plan.\n\nThe name consists of only alphanumeric characters and underscores. Maximum length is 50."},"validationWindowHours":{"type":"integer","description":"This is amount of hours (1 to 168) available to run a validation script on the data. The data will be deleted upon the completion of the validation script or the end of the specified retention period, whichever comes first."}},"requiredInputs":["iamRoleArn","protectedResourceType","restoreTestingPlanName"]},"aws-native:backup:TieringConfiguration":{"description":"Resource Type definition for AWS::Backup::TieringConfiguration","properties":{"backupVaultName":{"type":"string"},"creationTime":{"type":"string"},"lastUpdatedTime":{"type":"string"},"resourceSelection":{"type":"array","items":{"$ref":"#/types/aws-native:backup:TieringConfigurationResourceSelection"}},"tieringConfigurationArn":{"type":"string"},"tieringConfigurationName":{"type":"string","replaceOnChanges":true},"tieringConfigurationTags":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object","required":["backupVaultName","creationTime","lastUpdatedTime","resourceSelection","tieringConfigurationArn","tieringConfigurationName"],"inputProperties":{"backupVaultName":{"type":"string"},"resourceSelection":{"type":"array","items":{"$ref":"#/types/aws-native:backup:TieringConfigurationResourceSelection"}},"tieringConfigurationName":{"type":"string"},"tieringConfigurationTags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["backupVaultName","resourceSelection"]},"aws-native:backupgateway:Hypervisor":{"description":"Definition of AWS::BackupGateway::Hypervisor Resource Type","properties":{"host":{"type":"string","description":"The server host of the hypervisor. This can be either an IP address or a fully-qualified domain name (FQDN)."},"hypervisorArn":{"type":"string","description":"Returns `HypervisorArn` , an Amazon Resource Name (ARN) that uniquely identifies a Hypervisor. For example: `arn:aws:backup-gateway:us-east-1:123456789012:hypervisor/hype-1234D67D`"},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Key Management Service used to encrypt the hypervisor.","replaceOnChanges":true},"logGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the group of gateways within the requested log."},"name":{"type":"string","description":"The name of the hypervisor."},"password":{"type":"string","description":"The password for the hypervisor."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags of the hypervisor configuration to import.","replaceOnChanges":true},"username":{"type":"string","description":"The username for the hypervisor."}},"type":"object","required":["hypervisorArn"],"inputProperties":{"host":{"type":"string","description":"The server host of the hypervisor. This can be either an IP address or a fully-qualified domain name (FQDN)."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Key Management Service used to encrypt the hypervisor."},"logGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the group of gateways within the requested log."},"name":{"type":"string","description":"The name of the hypervisor."},"password":{"type":"string","description":"The password for the hypervisor."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags of the hypervisor configuration to import."},"username":{"type":"string","description":"The username for the hypervisor."}}},"aws-native:batch:ComputeEnvironment":{"description":"Resource Type definition for AWS::Batch::ComputeEnvironment","properties":{"computeEnvironmentArn":{"type":"string","description":"Returns the compute environment ARN, such as `batch: *us-east-1* : *111122223333* :compute-environment/ *ComputeEnvironmentName*` ."},"computeEnvironmentName":{"type":"string","description":"The name for your compute environment. It can be up to 128 characters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), and underscores (_).","replaceOnChanges":true},"computeResources":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentComputeResources","description":"The ComputeResources property type specifies details of the compute resources managed by the compute environment. This parameter is required for managed compute environments. For more information, see [Compute Environments](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html) in the ** ."},"context":{"type":"string","description":"Reserved."},"eksConfiguration":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentEksConfiguration","description":"The details for the Amazon EKS cluster that supports the compute environment.\n\n\u003e To create a compute environment that uses EKS resources, the caller must have permissions to call `eks:DescribeCluster` .","replaceOnChanges":true},"replaceComputeEnvironment":{"type":"boolean","description":"Specifies whether the compute environment is replaced if an update is made that requires replacing the instances in the compute environment. The default value is `true` . To enable more properties to be updated, set this property to `false` . When changing the value of this property to `false` , do not change any other properties at the same time. If other properties are changed at the same time, and the change needs to be rolled back but it can't, it's possible for the stack to go into the `UPDATE_ROLLBACK_FAILED` state. You can't update a stack that is in the `UPDATE_ROLLBACK_FAILED` state. However, if you can continue to roll it back, you can return the stack to its original settings and then try to update it again. For more information, see [Continue rolling back an update](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-continueupdaterollback.html) in the *AWS CloudFormation User Guide* .\n\n`ReplaceComputeEnvironment` is not applicable for Fargate compute environments. Fargate compute environments are always updated without interruption.\n\nThe properties that can't be changed without replacing the compute environment are in the [`ComputeResources`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html) property type: [`AllocationStrategy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-allocationstrategy) , [`BidPercentage`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-bidpercentage) , [`Ec2Configuration`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-ec2configuration) , [`Ec2KeyPair`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-ec2keypair) , [`Ec2KeyPair`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-ec2keypair) , [`ImageId`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-imageid) , [`InstanceRole`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-instancerole) , [`InstanceTypes`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-instancetypes) , [`LaunchTemplate`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-launchtemplate) , [`MaxvCpus`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-maxvcpus) , [`MinvCpus`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-minvcpus) , [`PlacementGroup`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-placementgroup) , [`SecurityGroupIds`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-securitygroupids) , [`Subnets`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-subnets) , [Tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-tags) , [`Type`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-type) , and [`UpdateToLatestImageVersion`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-updatetolatestimageversion) ."},"serviceRole":{"type":"string","description":"The full Amazon Resource Name (ARN) of the IAM role that allows AWS Batch to make calls to other AWS services on your behalf. For more information, see [AWS Batch service IAM role](https://docs.aws.amazon.com/batch/latest/userguide/service_IAM_role.html) in the *AWS Batch User Guide* .\n\n\u003e If your account already created the AWS Batch service-linked role, that role is used by default for your compute environment unless you specify a different role here. If the AWS Batch service-linked role doesn't exist in your account, and no role is specified here, the service attempts to create the AWS Batch service-linked role in your account. \n\nIf your specified role has a path other than `/` , then you must specify either the full role ARN (recommended) or prefix the role name with the path. For example, if a role with the name `bar` has a path of `/foo/` , specify `/foo/bar` as the role name. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .\n\n\u003e Depending on how you created your AWS Batch service role, its ARN might contain the `service-role` path prefix. When you only specify the name of the service role, AWS Batch assumes that your ARN doesn't use the `service-role` path prefix. Because of this, we recommend that you specify the full ARN of your service role when you create compute environments."},"state":{"type":"string","description":"The state of the compute environment. If the state is `ENABLED` , then the compute environment accepts jobs from a queue and can scale out automatically based on queues.\n\nIf the state is `ENABLED` , then the AWS Batch scheduler can attempt to place jobs from an associated job queue on the compute resources within the environment. If the compute environment is managed, then it can scale its instances out or in automatically, based on the job queue demand.\n\nIf the state is `DISABLED` , then the AWS Batch scheduler doesn't attempt to place jobs within the environment. Jobs in a `STARTING` or `RUNNING` state continue to progress normally. Managed compute environments in the `DISABLED` state don't scale out.\n\n\u003e Compute environments in a `DISABLED` state may continue to incur billing charges. To prevent additional charges, turn off and then delete the compute environment. For more information, see [State](https://docs.aws.amazon.com/batch/latest/userguide/compute_environment_parameters.html#compute_environment_state) in the *AWS Batch User Guide* . \n\nWhen an instance is idle, the instance scales down to the `minvCpus` value. However, the instance size doesn't change. For example, consider a `c5.8xlarge` instance with a `minvCpus` value of `4` and a `desiredvCpus` value of `36` . This instance doesn't scale down to a `c5.large` instance."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","replaceOnChanges":true},"type":{"type":"string","description":"The type of the compute environment: `MANAGED` or `UNMANAGED` . For more information, see [Compute Environments](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html) in the *AWS Batch User Guide* .","replaceOnChanges":true},"unmanagedvCpus":{"type":"integer","description":"The maximum number of vCPUs for an unmanaged compute environment. This parameter is only used for fair-share scheduling to reserve vCPU capacity for new share identifiers. If this parameter isn't provided for a fair-share job queue, no vCPU capacity is reserved.\n\n\u003e This parameter is only supported when the `type` parameter is set to `UNMANAGED` ."},"updatePolicy":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentUpdatePolicy","description":"Specifies the infrastructure update policy for the compute environment. For more information about infrastructure updates, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* ."}},"type":"object","required":["computeEnvironmentArn","type"],"inputProperties":{"computeEnvironmentName":{"type":"string","description":"The name for your compute environment. It can be up to 128 characters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), and underscores (_)."},"computeResources":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentComputeResources","description":"The ComputeResources property type specifies details of the compute resources managed by the compute environment. This parameter is required for managed compute environments. For more information, see [Compute Environments](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html) in the ** ."},"context":{"type":"string","description":"Reserved."},"eksConfiguration":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentEksConfiguration","description":"The details for the Amazon EKS cluster that supports the compute environment.\n\n\u003e To create a compute environment that uses EKS resources, the caller must have permissions to call `eks:DescribeCluster` ."},"replaceComputeEnvironment":{"type":"boolean","description":"Specifies whether the compute environment is replaced if an update is made that requires replacing the instances in the compute environment. The default value is `true` . To enable more properties to be updated, set this property to `false` . When changing the value of this property to `false` , do not change any other properties at the same time. If other properties are changed at the same time, and the change needs to be rolled back but it can't, it's possible for the stack to go into the `UPDATE_ROLLBACK_FAILED` state. You can't update a stack that is in the `UPDATE_ROLLBACK_FAILED` state. However, if you can continue to roll it back, you can return the stack to its original settings and then try to update it again. For more information, see [Continue rolling back an update](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-continueupdaterollback.html) in the *AWS CloudFormation User Guide* .\n\n`ReplaceComputeEnvironment` is not applicable for Fargate compute environments. Fargate compute environments are always updated without interruption.\n\nThe properties that can't be changed without replacing the compute environment are in the [`ComputeResources`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html) property type: [`AllocationStrategy`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-allocationstrategy) , [`BidPercentage`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-bidpercentage) , [`Ec2Configuration`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-ec2configuration) , [`Ec2KeyPair`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-ec2keypair) , [`Ec2KeyPair`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-ec2keypair) , [`ImageId`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-imageid) , [`InstanceRole`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-instancerole) , [`InstanceTypes`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-instancetypes) , [`LaunchTemplate`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-launchtemplate) , [`MaxvCpus`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-maxvcpus) , [`MinvCpus`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-minvcpus) , [`PlacementGroup`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-placementgroup) , [`SecurityGroupIds`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-securitygroupids) , [`Subnets`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-subnets) , [Tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-tags) , [`Type`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-type) , and [`UpdateToLatestImageVersion`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-computeenvironment-computeresources.html#cfn-batch-computeenvironment-computeresources-updatetolatestimageversion) ."},"serviceRole":{"type":"string","description":"The full Amazon Resource Name (ARN) of the IAM role that allows AWS Batch to make calls to other AWS services on your behalf. For more information, see [AWS Batch service IAM role](https://docs.aws.amazon.com/batch/latest/userguide/service_IAM_role.html) in the *AWS Batch User Guide* .\n\n\u003e If your account already created the AWS Batch service-linked role, that role is used by default for your compute environment unless you specify a different role here. If the AWS Batch service-linked role doesn't exist in your account, and no role is specified here, the service attempts to create the AWS Batch service-linked role in your account. \n\nIf your specified role has a path other than `/` , then you must specify either the full role ARN (recommended) or prefix the role name with the path. For example, if a role with the name `bar` has a path of `/foo/` , specify `/foo/bar` as the role name. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .\n\n\u003e Depending on how you created your AWS Batch service role, its ARN might contain the `service-role` path prefix. When you only specify the name of the service role, AWS Batch assumes that your ARN doesn't use the `service-role` path prefix. Because of this, we recommend that you specify the full ARN of your service role when you create compute environments."},"state":{"type":"string","description":"The state of the compute environment. If the state is `ENABLED` , then the compute environment accepts jobs from a queue and can scale out automatically based on queues.\n\nIf the state is `ENABLED` , then the AWS Batch scheduler can attempt to place jobs from an associated job queue on the compute resources within the environment. If the compute environment is managed, then it can scale its instances out or in automatically, based on the job queue demand.\n\nIf the state is `DISABLED` , then the AWS Batch scheduler doesn't attempt to place jobs within the environment. Jobs in a `STARTING` or `RUNNING` state continue to progress normally. Managed compute environments in the `DISABLED` state don't scale out.\n\n\u003e Compute environments in a `DISABLED` state may continue to incur billing charges. To prevent additional charges, turn off and then delete the compute environment. For more information, see [State](https://docs.aws.amazon.com/batch/latest/userguide/compute_environment_parameters.html#compute_environment_state) in the *AWS Batch User Guide* . \n\nWhen an instance is idle, the instance scales down to the `minvCpus` value. However, the instance size doesn't change. For example, consider a `c5.8xlarge` instance with a `minvCpus` value of `4` and a `desiredvCpus` value of `36` . This instance doesn't scale down to a `c5.large` instance."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"type":{"type":"string","description":"The type of the compute environment: `MANAGED` or `UNMANAGED` . For more information, see [Compute Environments](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html) in the *AWS Batch User Guide* ."},"unmanagedvCpus":{"type":"integer","description":"The maximum number of vCPUs for an unmanaged compute environment. This parameter is only used for fair-share scheduling to reserve vCPU capacity for new share identifiers. If this parameter isn't provided for a fair-share job queue, no vCPU capacity is reserved.\n\n\u003e This parameter is only supported when the `type` parameter is set to `UNMANAGED` ."},"updatePolicy":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentUpdatePolicy","description":"Specifies the infrastructure update policy for the compute environment. For more information about infrastructure updates, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* ."}},"requiredInputs":["type"]},"aws-native:batch:ConsumableResource":{"description":"Resource Type definition for AWS::Batch::ConsumableResource","properties":{"availableQuantity":{"type":"integer","description":"Available Quantity of ConsumableResource."},"consumableResourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the consumable resource."},"consumableResourceName":{"type":"string","description":"Name of ConsumableResource.","replaceOnChanges":true},"createdAt":{"type":"integer","description":"The Unix timestamp (in milliseconds) for when the consumable resource was created."},"inUseQuantity":{"type":"integer","description":"In-use Quantity of ConsumableResource."},"resourceType":{"$ref":"#/types/aws-native:batch:ConsumableResourceResourceType","description":"Indicates whether the resource is available to be re-used after a job completes. Can be one of:\n\n- `REPLENISHABLE`\n- `NON_REPLENISHABLE`","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","replaceOnChanges":true},"totalQuantity":{"type":"integer","description":"Total Quantity of ConsumableResource."}},"type":"object","required":["availableQuantity","consumableResourceArn","createdAt","inUseQuantity","resourceType","totalQuantity"],"inputProperties":{"consumableResourceName":{"type":"string","description":"Name of ConsumableResource."},"resourceType":{"$ref":"#/types/aws-native:batch:ConsumableResourceResourceType","description":"Indicates whether the resource is available to be re-used after a job completes. Can be one of:\n\n- `REPLENISHABLE`\n- `NON_REPLENISHABLE`"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"totalQuantity":{"type":"integer","description":"Total Quantity of ConsumableResource."}},"requiredInputs":["resourceType","totalQuantity"]},"aws-native:batch:JobDefinition":{"description":"Resource Type definition for AWS::Batch::JobDefinition","properties":{"consumableResourceProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionConsumableResourceProperties","description":"Contains a list of consumable resources required by the job."},"containerProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionContainerProperties","description":"An object with properties specific to Amazon ECS-based jobs. When `containerProperties` is used in the job definition, it can't be used in addition to `eksProperties` , `ecsProperties` , or `nodeProperties` ."},"ecsProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEcsProperties","description":"An object that contains the properties for the Amazon ECS resources of a job.When `ecsProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `eksProperties` , or `nodeProperties` ."},"eksProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEksProperties","description":"An object with properties that are specific to Amazon EKS-based jobs. When `eksProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `ecsProperties` , or `nodeProperties` ."},"jobDefinitionArn":{"type":"string","description":"The job definition ARN, such as `batch: *us-east-1* : *111122223333* :job-definition/ *test-gpu* : *2*` ."},"jobDefinitionName":{"type":"string","description":"The name of the job definition.","replaceOnChanges":true},"nodeProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionNodeProperties","description":"An object with properties that are specific to multi-node parallel jobs. When `nodeProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `ecsProperties` , or `eksProperties` .\n\n\u003e If the job runs on Fargate resources, don't specify `nodeProperties` . Use `containerProperties` instead."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Default parameters or parameter substitution placeholders that are set in the job definition. Parameters are specified as a key-value pair mapping. Parameters in a `SubmitJob` request override any corresponding parameter defaults from the job definition. For more information about specifying parameters, see [Job definition parameters](https://docs.aws.amazon.com/batch/latest/userguide/job_definition_parameters.html) in the *AWS Batch User Guide* ."},"platformCapabilities":{"type":"array","items":{"type":"string"},"description":"The platform capabilities required by the job definition. If no value is specified, it defaults to `EC2` . Jobs run on Fargate resources specify `FARGATE` ."},"propagateTags":{"type":"boolean","description":"Specifies whether to propagate the tags from the job or job definition to the corresponding Amazon ECS task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the tasks when the tasks are created. For tags with the same name, job tags are given priority over job definitions tags. If the total number of combined tags from the job and job definition is over 50, the job is moved to the `FAILED` state."},"resourceRetentionPolicy":{"$ref":"#/types/aws-native:batch:JobDefinitionResourceRetentionPolicy","description":"Specifies the resource retention policy settings for the job definition."},"retryStrategy":{"$ref":"#/types/aws-native:batch:JobDefinitionRetryStrategy","description":"The retry strategy to use for failed jobs that are submitted with this job definition."},"schedulingPriority":{"type":"integer","description":"The scheduling priority of the job definition. This only affects jobs in job queues with a fair-share policy. Jobs with a higher scheduling priority are scheduled before jobs with a lower scheduling priority."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"timeout":{"$ref":"#/types/aws-native:batch:JobDefinitionJobTimeout","description":"The timeout time for jobs that are submitted with this job definition. After the amount of time you specify passes, AWS Batch terminates your jobs if they aren't finished."},"type":{"type":"string","description":"The type of job definition. For more information about multi-node parallel jobs, see [Creating a multi-node parallel job definition](https://docs.aws.amazon.com/batch/latest/userguide/multi-node-job-def.html) in the *AWS Batch User Guide* .\n\n- If the value is `container` , then one of the following is required: `containerProperties` , `ecsProperties` , or `eksProperties` .\n- If the value is `multinode` , then `nodeProperties` is required.\n\n\u003e If the job is run on Fargate resources, then `multinode` isn't supported."}},"type":"object","required":["jobDefinitionArn","type"],"inputProperties":{"consumableResourceProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionConsumableResourceProperties","description":"Contains a list of consumable resources required by the job."},"containerProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionContainerProperties","description":"An object with properties specific to Amazon ECS-based jobs. When `containerProperties` is used in the job definition, it can't be used in addition to `eksProperties` , `ecsProperties` , or `nodeProperties` ."},"ecsProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEcsProperties","description":"An object that contains the properties for the Amazon ECS resources of a job.When `ecsProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `eksProperties` , or `nodeProperties` ."},"eksProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEksProperties","description":"An object with properties that are specific to Amazon EKS-based jobs. When `eksProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `ecsProperties` , or `nodeProperties` ."},"jobDefinitionName":{"type":"string","description":"The name of the job definition."},"nodeProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionNodeProperties","description":"An object with properties that are specific to multi-node parallel jobs. When `nodeProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `ecsProperties` , or `eksProperties` .\n\n\u003e If the job runs on Fargate resources, don't specify `nodeProperties` . Use `containerProperties` instead."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Default parameters or parameter substitution placeholders that are set in the job definition. Parameters are specified as a key-value pair mapping. Parameters in a `SubmitJob` request override any corresponding parameter defaults from the job definition. For more information about specifying parameters, see [Job definition parameters](https://docs.aws.amazon.com/batch/latest/userguide/job_definition_parameters.html) in the *AWS Batch User Guide* ."},"platformCapabilities":{"type":"array","items":{"type":"string"},"description":"The platform capabilities required by the job definition. If no value is specified, it defaults to `EC2` . Jobs run on Fargate resources specify `FARGATE` ."},"propagateTags":{"type":"boolean","description":"Specifies whether to propagate the tags from the job or job definition to the corresponding Amazon ECS task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the tasks when the tasks are created. For tags with the same name, job tags are given priority over job definitions tags. If the total number of combined tags from the job and job definition is over 50, the job is moved to the `FAILED` state."},"resourceRetentionPolicy":{"$ref":"#/types/aws-native:batch:JobDefinitionResourceRetentionPolicy","description":"Specifies the resource retention policy settings for the job definition."},"retryStrategy":{"$ref":"#/types/aws-native:batch:JobDefinitionRetryStrategy","description":"The retry strategy to use for failed jobs that are submitted with this job definition."},"schedulingPriority":{"type":"integer","description":"The scheduling priority of the job definition. This only affects jobs in job queues with a fair-share policy. Jobs with a higher scheduling priority are scheduled before jobs with a lower scheduling priority."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"timeout":{"$ref":"#/types/aws-native:batch:JobDefinitionJobTimeout","description":"The timeout time for jobs that are submitted with this job definition. After the amount of time you specify passes, AWS Batch terminates your jobs if they aren't finished."},"type":{"type":"string","description":"The type of job definition. For more information about multi-node parallel jobs, see [Creating a multi-node parallel job definition](https://docs.aws.amazon.com/batch/latest/userguide/multi-node-job-def.html) in the *AWS Batch User Guide* .\n\n- If the value is `container` , then one of the following is required: `containerProperties` , `ecsProperties` , or `eksProperties` .\n- If the value is `multinode` , then `nodeProperties` is required.\n\n\u003e If the job is run on Fargate resources, then `multinode` isn't supported."}},"requiredInputs":["type"]},"aws-native:batch:JobQueue":{"description":"Resource Type definition for AWS::Batch::JobQueue","properties":{"computeEnvironmentOrder":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobQueueComputeEnvironmentOrder"},"description":"The set of compute environments mapped to a job queue and their order relative to each other. The job scheduler uses this parameter to determine which compute environment runs a specific job. Compute environments must be in the `VALID` state before you can associate them with a job queue. You can associate up to three compute environments with a job queue. All of the compute environments must be either EC2 ( `EC2` or `SPOT` ) or Fargate ( `FARGATE` or `FARGATE_SPOT` ); EC2 and Fargate compute environments can't be mixed.\n\n\u003e All compute environments that are associated with a job queue must share the same architecture. AWS Batch doesn't support mixing compute environment architecture types in a single job queue."},"jobQueueArn":{"type":"string","description":"Returns the job queue ARN, such as `batch: *us-east-1* : *111122223333* :job-queue/ *JobQueueName*` ."},"jobQueueName":{"type":"string","description":"The name of the job queue. It can be up to 128 letters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), and underscores (_).","replaceOnChanges":true},"jobQueueType":{"type":"string","description":"The type of job queue. For service jobs that run on SageMaker AI , this value is `SAGEMAKER_TRAINING` . For regular container jobs, this value is `EKS` , `ECS` , or `ECS_FARGATE` depending on the compute environment.","replaceOnChanges":true},"jobStateTimeLimitActions":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobQueueJobStateTimeLimitAction"},"description":"The set of actions that AWS Batch perform on jobs that remain at the head of the job queue in the specified state longer than specified times. AWS Batch will perform each action after `maxTimeSeconds` has passed."},"priority":{"type":"integer","description":"The priority of the job queue. Job queues with a higher priority (or a higher integer value for the `priority` parameter) are evaluated first when associated with the same compute environment. Priority is determined in descending order. For example, a job queue with a priority value of `10` is given scheduling preference over a job queue with a priority value of `1` . All of the compute environments must be either EC2 ( `EC2` or `SPOT` ) or Fargate ( `FARGATE` or `FARGATE_SPOT` ); EC2 and Fargate compute environments can't be mixed."},"schedulingPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the scheduling policy. The format is `aws: *Partition* :batch: *Region* : *Account* :scheduling-policy/ *Name*` . For example, `aws:aws:batch:us-west-2:123456789012:scheduling-policy/MySchedulingPolicy` ."},"serviceEnvironmentOrder":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobQueueServiceEnvironmentOrder"},"description":"The order of the service environment associated with the job queue. Job queues with a higher priority are evaluated first when associated with the same service environment."},"state":{"$ref":"#/types/aws-native:batch:JobQueueState","description":"The state of the job queue. If the job queue state is `ENABLED` , it is able to accept jobs. If the job queue state is `DISABLED` , new jobs can't be added to the queue, but jobs already in the queue can finish."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","replaceOnChanges":true}},"type":"object","required":["jobQueueArn","priority"],"inputProperties":{"computeEnvironmentOrder":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobQueueComputeEnvironmentOrder"},"description":"The set of compute environments mapped to a job queue and their order relative to each other. The job scheduler uses this parameter to determine which compute environment runs a specific job. Compute environments must be in the `VALID` state before you can associate them with a job queue. You can associate up to three compute environments with a job queue. All of the compute environments must be either EC2 ( `EC2` or `SPOT` ) or Fargate ( `FARGATE` or `FARGATE_SPOT` ); EC2 and Fargate compute environments can't be mixed.\n\n\u003e All compute environments that are associated with a job queue must share the same architecture. AWS Batch doesn't support mixing compute environment architecture types in a single job queue."},"jobQueueName":{"type":"string","description":"The name of the job queue. It can be up to 128 letters long. It can contain uppercase and lowercase letters, numbers, hyphens (-), and underscores (_)."},"jobQueueType":{"type":"string","description":"The type of job queue. For service jobs that run on SageMaker AI , this value is `SAGEMAKER_TRAINING` . For regular container jobs, this value is `EKS` , `ECS` , or `ECS_FARGATE` depending on the compute environment."},"jobStateTimeLimitActions":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobQueueJobStateTimeLimitAction"},"description":"The set of actions that AWS Batch perform on jobs that remain at the head of the job queue in the specified state longer than specified times. AWS Batch will perform each action after `maxTimeSeconds` has passed."},"priority":{"type":"integer","description":"The priority of the job queue. Job queues with a higher priority (or a higher integer value for the `priority` parameter) are evaluated first when associated with the same compute environment. Priority is determined in descending order. For example, a job queue with a priority value of `10` is given scheduling preference over a job queue with a priority value of `1` . All of the compute environments must be either EC2 ( `EC2` or `SPOT` ) or Fargate ( `FARGATE` or `FARGATE_SPOT` ); EC2 and Fargate compute environments can't be mixed."},"schedulingPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the scheduling policy. The format is `aws: *Partition* :batch: *Region* : *Account* :scheduling-policy/ *Name*` . For example, `aws:aws:batch:us-west-2:123456789012:scheduling-policy/MySchedulingPolicy` ."},"serviceEnvironmentOrder":{"type":"array","items":{"$ref":"#/types/aws-native:batch:JobQueueServiceEnvironmentOrder"},"description":"The order of the service environment associated with the job queue. Job queues with a higher priority are evaluated first when associated with the same service environment."},"state":{"$ref":"#/types/aws-native:batch:JobQueueState","description":"The state of the job queue. If the job queue state is `ENABLED` , it is able to accept jobs. If the job queue state is `DISABLED` , new jobs can't be added to the queue, but jobs already in the queue can finish."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"requiredInputs":["priority"]},"aws-native:batch:QuotaShare":{"description":"Resource Type definition for AWS::Batch::QuotaShare","properties":{"capacityLimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:QuotaShareCapacityLimit"},"description":"The capacity limits for the quota share."},"jobQueue":{"type":"string","description":"The Amazon Resource Name (ARN) or name of the job queue.","replaceOnChanges":true},"preemptionConfiguration":{"$ref":"#/types/aws-native:batch:QuotaSharePreemptionConfiguration","description":"The preemption configuration for the quota share."},"quotaShareArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the quota share."},"quotaShareName":{"type":"string","description":"The name of the quota share.","replaceOnChanges":true},"resourceSharingConfiguration":{"$ref":"#/types/aws-native:batch:QuotaShareResourceSharingConfiguration","description":"The resource sharing configuration for the quota share."},"state":{"$ref":"#/types/aws-native:batch:QuotaShareState","description":"The state of the quota share."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"type":"object","required":["capacityLimits","jobQueue","preemptionConfiguration","quotaShareArn","quotaShareName","resourceSharingConfiguration"],"inputProperties":{"capacityLimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:QuotaShareCapacityLimit"},"description":"The capacity limits for the quota share."},"jobQueue":{"type":"string","description":"The Amazon Resource Name (ARN) or name of the job queue."},"preemptionConfiguration":{"$ref":"#/types/aws-native:batch:QuotaSharePreemptionConfiguration","description":"The preemption configuration for the quota share."},"quotaShareName":{"type":"string","description":"The name of the quota share."},"resourceSharingConfiguration":{"$ref":"#/types/aws-native:batch:QuotaShareResourceSharingConfiguration","description":"The resource sharing configuration for the quota share."},"state":{"$ref":"#/types/aws-native:batch:QuotaShareState","description":"The state of the quota share."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"requiredInputs":["capacityLimits","jobQueue","preemptionConfiguration","resourceSharingConfiguration"]},"aws-native:batch:SchedulingPolicy":{"description":"Resource Type definition for AWS::Batch::SchedulingPolicy","properties":{"arn":{"type":"string","description":"Returns the scheduling policy ARN, such as `batch: *us-east-1* : *111122223333* :scheduling-policy/ *HighPriority*` ."},"fairsharePolicy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyFairsharePolicy","description":"The fair-share scheduling policy details."},"name":{"type":"string","description":"Name of Scheduling Policy.","replaceOnChanges":true},"quotaSharePolicy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyQuotaSharePolicy"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","replaceOnChanges":true}},"type":"object","required":["arn"],"inputProperties":{"fairsharePolicy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyFairsharePolicy","description":"The fair-share scheduling policy details."},"name":{"type":"string","description":"Name of Scheduling Policy."},"quotaSharePolicy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyQuotaSharePolicy"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}}},"aws-native:batch:ServiceEnvironment":{"description":"Resource Type definition for AWS::Batch::ServiceEnvironment","properties":{"capacityLimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:ServiceEnvironmentCapacityLimit"},"description":"The capacity limits for the service environment. This defines the maximum resources that can be used by service jobs in this environment."},"serviceEnvironmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service environment."},"serviceEnvironmentName":{"type":"string","description":"The name of the service environment.","replaceOnChanges":true},"serviceEnvironmentType":{"type":"string","description":"The type of service environment. For SageMaker Training jobs, this value is `SAGEMAKER_TRAINING` .","replaceOnChanges":true},"state":{"type":"string","description":"The state of the service environment. Valid values are `ENABLED` and `DISABLED` ."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"type":"object","required":["capacityLimits","serviceEnvironmentArn","serviceEnvironmentType"],"inputProperties":{"capacityLimits":{"type":"array","items":{"$ref":"#/types/aws-native:batch:ServiceEnvironmentCapacityLimit"},"description":"The capacity limits for the service environment. This defines the maximum resources that can be used by service jobs in this environment."},"serviceEnvironmentName":{"type":"string","description":"The name of the service environment."},"serviceEnvironmentType":{"type":"string","description":"The type of service environment. For SageMaker Training jobs, this value is `SAGEMAKER_TRAINING` ."},"state":{"type":"string","description":"The state of the service environment. Valid values are `ENABLED` and `DISABLED` ."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"requiredInputs":["capacityLimits","serviceEnvironmentType"]},"aws-native:bedrock:Agent":{"description":"Definition of AWS::Bedrock::Agent Resource Type","properties":{"actionGroups":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentActionGroup"},"description":"List of ActionGroups"},"agentArn":{"type":"string","description":"Arn representation of the Agent."},"agentCollaboration":{"$ref":"#/types/aws-native:bedrock:AgentCollaboration","description":"The agent's collaboration settings."},"agentCollaborators":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentCollaborator"},"description":"List of Agent Collaborators"},"agentId":{"type":"string","description":"Identifier for a resource."},"agentName":{"type":"string","description":"Name for a resource."},"agentResourceRoleArn":{"type":"string","description":"ARN of a IAM role."},"agentStatus":{"$ref":"#/types/aws-native:bedrock:AgentStatus","description":"The status of the agent and whether it is ready for use. The following statuses are possible:\n\n- CREATING – The agent is being created.\n- PREPARING – The agent is being prepared.\n- PREPARED – The agent is prepared and ready to be invoked.\n- NOT_PREPARED – The agent has been created but not yet prepared.\n- FAILED – The agent API operation failed.\n- UPDATING – The agent is being updated.\n- DELETING – The agent is being deleted."},"agentVersion":{"type":"string","description":"Draft Agent Version."},"autoPrepare":{"type":"boolean","description":"Specifies whether to automatically prepare after creating or updating the agent."},"createdAt":{"type":"string","description":"Time Stamp."},"customOrchestration":{"$ref":"#/types/aws-native:bedrock:AgentCustomOrchestration","description":"Contains custom orchestration configurations for the agent."},"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"description":{"type":"string","description":"Description of the Resource."},"failureReasons":{"type":"array","items":{"type":"string"},"description":"Failure Reasons for Error."},"foundationModel":{"type":"string","description":"The foundation model used for orchestration by the agent."},"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentGuardrailConfiguration","description":"Details about the guardrail associated with the agent."},"idleSessionTtlInSeconds":{"type":"number","description":"Max Session Time."},"instruction":{"type":"string","description":"Instruction for the agent."},"knowledgeBases":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentKnowledgeBase"},"description":"List of Agent Knowledge Bases"},"memoryConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentMemoryConfiguration","description":"Contains memory configuration for the agent."},"orchestrationType":{"$ref":"#/types/aws-native:bedrock:AgentOrchestrationType","description":"Specifies the orchestration strategy for the agent."},"preparedAt":{"type":"string","description":"Time Stamp."},"promptOverrideConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentPromptOverrideConfiguration","description":"Contains configurations to override prompt templates in different parts of an agent sequence. For more information, see [Advanced prompts](https://docs.aws.amazon.com/bedrock/latest/userguide/advanced-prompts.html) ."},"recommendedActions":{"type":"array","items":{"type":"string"},"description":"The recommended actions users can take to resolve an error in failureReasons."},"skipResourceInUseCheckOnDelete":{"type":"boolean","description":"Specifies whether to allow deleting agent while it is in use."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"testAliasTags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"updatedAt":{"type":"string","description":"Time Stamp."}},"type":"object","required":["agentArn","agentId","agentName","agentStatus","agentVersion","createdAt","failureReasons","preparedAt","recommendedActions","updatedAt"],"inputProperties":{"actionGroups":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentActionGroup"},"description":"List of ActionGroups"},"agentCollaboration":{"$ref":"#/types/aws-native:bedrock:AgentCollaboration","description":"The agent's collaboration settings."},"agentCollaborators":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentCollaborator"},"description":"List of Agent Collaborators"},"agentName":{"type":"string","description":"Name for a resource."},"agentResourceRoleArn":{"type":"string","description":"ARN of a IAM role."},"autoPrepare":{"type":"boolean","description":"Specifies whether to automatically prepare after creating or updating the agent."},"customOrchestration":{"$ref":"#/types/aws-native:bedrock:AgentCustomOrchestration","description":"Contains custom orchestration configurations for the agent."},"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"description":{"type":"string","description":"Description of the Resource."},"foundationModel":{"type":"string","description":"The foundation model used for orchestration by the agent."},"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentGuardrailConfiguration","description":"Details about the guardrail associated with the agent."},"idleSessionTtlInSeconds":{"type":"number","description":"Max Session Time."},"instruction":{"type":"string","description":"Instruction for the agent."},"knowledgeBases":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentKnowledgeBase"},"description":"List of Agent Knowledge Bases"},"memoryConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentMemoryConfiguration","description":"Contains memory configuration for the agent."},"orchestrationType":{"$ref":"#/types/aws-native:bedrock:AgentOrchestrationType","description":"Specifies the orchestration strategy for the agent."},"promptOverrideConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentPromptOverrideConfiguration","description":"Contains configurations to override prompt templates in different parts of an agent sequence. For more information, see [Advanced prompts](https://docs.aws.amazon.com/bedrock/latest/userguide/advanced-prompts.html) ."},"skipResourceInUseCheckOnDelete":{"type":"boolean","description":"Specifies whether to allow deleting agent while it is in use."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"testAliasTags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"}}},"aws-native:bedrock:AgentAlias":{"description":"Definition of AWS::Bedrock::AgentAlias Resource Type","properties":{"agentAliasArn":{"type":"string","description":"Arn representation of the Agent Alias."},"agentAliasHistoryEvents":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentAliasHistoryEvent"},"description":"The list of history events for an alias for an Agent."},"agentAliasId":{"type":"string","description":"Id for an Agent Alias generated at the server side."},"agentAliasName":{"type":"string","description":"Name for a resource."},"agentAliasStatus":{"$ref":"#/types/aws-native:bedrock:AgentAliasStatus","description":"The status of the alias of the agent and whether it is ready for use. The following statuses are possible:\n\n- CREATING – The agent alias is being created.\n- PREPARED – The agent alias is finished being created or updated and is ready to be invoked.\n- FAILED – The agent alias API operation failed.\n- UPDATING – The agent alias is being updated.\n- DELETING – The agent alias is being deleted.\n- DISSOCIATED - The agent alias has no version associated with it."},"agentId":{"type":"string","description":"Identifier for a resource.","replaceOnChanges":true},"createdAt":{"type":"string","description":"Time Stamp."},"description":{"type":"string","description":"Description of the Resource."},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentAliasRoutingConfigurationListItem"},"description":"Routing configuration for an Agent alias."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"updatedAt":{"type":"string","description":"Time Stamp."}},"type":"object","required":["agentAliasArn","agentAliasHistoryEvents","agentAliasId","agentAliasName","agentAliasStatus","agentId","createdAt","updatedAt"],"inputProperties":{"agentAliasName":{"type":"string","description":"Name for a resource."},"agentId":{"type":"string","description":"Identifier for a resource."},"description":{"type":"string","description":"Description of the Resource."},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:AgentAliasRoutingConfigurationListItem"},"description":"Routing configuration for an Agent alias."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"}},"requiredInputs":["agentId"]},"aws-native:bedrock:ApplicationInferenceProfile":{"description":"Definition of AWS::Bedrock::ApplicationInferenceProfile Resource Type","properties":{"createdAt":{"type":"string","description":"Time Stamp"},"description":{"type":"string","description":"Description of the inference profile","replaceOnChanges":true},"inferenceProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the inference profile."},"inferenceProfileId":{"type":"string","description":"The unique identifier of the inference profile."},"inferenceProfileIdentifier":{"type":"string","description":"Inference profile identifier. Supports both system-defined inference profile ids, and inference profile ARNs."},"inferenceProfileName":{"type":"string","description":"The name of the inference profile.","replaceOnChanges":true},"modelSource":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModelSourceProperties","description":"Contains configurations for the inference profile to copy as the resource.","replaceOnChanges":true},"models":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModel"},"description":"List of model configuration"},"status":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileStatus","description":"The status of the inference profile. `ACTIVE` means that the inference profile is ready to be used."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"},"type":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileType","description":"The type of the inference profile. The following types are possible:\n\n- `SYSTEM_DEFINED` – The inference profile is defined by Amazon Bedrock. You can route inference requests across regions with these inference profiles.\n- `APPLICATION` – The inference profile was created by a user. This type of inference profile can track metrics and costs when invoking the model in it. The inference profile may route requests to one or multiple regions."},"updatedAt":{"type":"string","description":"Time Stamp"}},"type":"object","required":["createdAt","inferenceProfileArn","inferenceProfileId","inferenceProfileIdentifier","inferenceProfileName","models","status","type","updatedAt"],"inputProperties":{"description":{"type":"string","description":"Description of the inference profile"},"inferenceProfileName":{"type":"string","description":"The name of the inference profile."},"modelSource":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModelSourceProperties","description":"Contains configurations for the inference profile to copy as the resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"}}},"aws-native:bedrock:AutomatedReasoningPolicy":{"description":"Definition of AWS::Bedrock::AutomatedReasoningPolicy Resource Type","properties":{"createdAt":{"type":"string","description":"The timestamp when the policy was created."},"definitionHash":{"type":"string","description":"A hash of the policy definition used to identify the version."},"description":{"type":"string","description":"The description of the policy."},"forceDelete":{"type":"boolean","replaceOnChanges":true},"kmsKeyArn":{"type":"string"},"kmsKeyId":{"type":"string","replaceOnChanges":true},"name":{"type":"string","description":"The name of the policy."},"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."},"policyDefinition":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinition","description":"The complete policy definition generated by the build workflow, containing all rules, variables, and custom types extracted from the source documents."},"policyId":{"type":"string","description":"The unique identifier of the policy."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the Automated Reasoning policy."},"updatedAt":{"type":"string","description":"The timestamp when the policy was last updated."},"version":{"type":"string","description":"The version of the policy."}},"type":"object","required":["createdAt","definitionHash","kmsKeyArn","name","policyArn","policyId","updatedAt","version"],"inputProperties":{"description":{"type":"string","description":"The description of the policy."},"forceDelete":{"type":"boolean"},"kmsKeyId":{"type":"string"},"name":{"type":"string","description":"The name of the policy."},"policyDefinition":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinition","description":"The complete policy definition generated by the build workflow, containing all rules, variables, and custom types extracted from the source documents."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the Automated Reasoning policy."}}},"aws-native:bedrock:AutomatedReasoningPolicyVersion":{"description":"Definition of AWS::Bedrock::AutomatedReasoningPolicyVersion Resource Type","properties":{"createdAt":{"type":"string","description":"The timestamp when the policy version was created."},"definitionHash":{"type":"string","description":"A hash of the policy definition used to identify the version."},"description":{"type":"string","description":"The description of the policy version."},"lastUpdatedDefinitionHash":{"type":"string","description":"The hash of the policy definition that was last updated.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the policy version."},"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy.","replaceOnChanges":true},"policyId":{"type":"string","description":"The unique identifier of the policy."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags associated with the Automated Reasoning policy version.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The timestamp when the policy version was last updated."},"version":{"type":"string","description":"The version number of the policy version."}},"type":"object","required":["createdAt","definitionHash","description","name","policyArn","policyId","updatedAt","version"],"inputProperties":{"lastUpdatedDefinitionHash":{"type":"string","description":"The hash of the policy definition that was last updated."},"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags associated with the Automated Reasoning policy version."}},"requiredInputs":["policyArn"]},"aws-native:bedrock:Blueprint":{"description":"Definition of AWS::Bedrock::Blueprint Resource Type","properties":{"blueprintArn":{"type":"string","description":"ARN of a Blueprint"},"blueprintName":{"type":"string","description":"Name of the Blueprint","replaceOnChanges":true},"blueprintStage":{"$ref":"#/types/aws-native:bedrock:BlueprintStage","description":"Stage of the Blueprint"},"creationTime":{"type":"string","description":"Creation timestamp"},"kmsEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"KMS encryption context"},"kmsKeyId":{"type":"string","description":"KMS key identifier"},"lastModifiedTime":{"type":"string","description":"Last modified timestamp"},"schema":{"$ref":"pulumi.json#/Any","description":"Schema of the blueprint\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Bedrock::Blueprint` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"},"type":{"$ref":"#/types/aws-native:bedrock:BlueprintType","description":"Modality Type","replaceOnChanges":true}},"type":"object","required":["blueprintArn","blueprintName","blueprintStage","creationTime","lastModifiedTime","schema","type"],"inputProperties":{"blueprintName":{"type":"string","description":"Name of the Blueprint"},"kmsEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"KMS encryption context"},"kmsKeyId":{"type":"string","description":"KMS key identifier"},"schema":{"$ref":"pulumi.json#/Any","description":"Schema of the blueprint\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Bedrock::Blueprint` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"},"type":{"$ref":"#/types/aws-native:bedrock:BlueprintType","description":"Modality Type"}},"requiredInputs":["schema","type"]},"aws-native:bedrock:DataAutomationProject":{"description":"Definition of AWS::Bedrock::DataAutomationProject Resource Type","properties":{"creationTime":{"type":"string","description":"Time Stamp"},"customOutputConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectCustomOutputConfiguration","description":"Blueprints to apply to objects processed by the project."},"kmsEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"KMS encryption context"},"kmsKeyId":{"type":"string","description":"KMS key identifier"},"lastModifiedTime":{"type":"string","description":"Time Stamp"},"overrideConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectOverrideConfiguration","description":"Additional settings for the project."},"projectArn":{"type":"string","description":"ARN of a DataAutomationProject"},"projectDescription":{"type":"string","description":"Description of the DataAutomationProject"},"projectName":{"type":"string","description":"Name of the DataAutomationProject","replaceOnChanges":true},"projectStage":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStage","description":"The project's stage."},"projectType":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectProjectType","description":"Type of the DataAutomationProject - Sync or Async","replaceOnChanges":true},"standardOutputConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStandardOutputConfiguration","description":"The project's standard output configuration."},"status":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStatus","description":"The project's status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"}},"type":"object","required":["creationTime","lastModifiedTime","projectArn","projectName","projectStage","status"],"inputProperties":{"customOutputConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectCustomOutputConfiguration","description":"Blueprints to apply to objects processed by the project."},"kmsEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"KMS encryption context"},"kmsKeyId":{"type":"string","description":"KMS key identifier"},"overrideConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectOverrideConfiguration","description":"Additional settings for the project."},"projectDescription":{"type":"string","description":"Description of the DataAutomationProject"},"projectName":{"type":"string","description":"Name of the DataAutomationProject"},"projectType":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectProjectType","description":"Type of the DataAutomationProject - Sync or Async"},"standardOutputConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStandardOutputConfiguration","description":"The project's standard output configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"}}},"aws-native:bedrock:DataSource":{"description":"Definition of AWS::Bedrock::DataSource Resource Type","properties":{"createdAt":{"type":"string","description":"The time at which the data source was created."},"dataDeletionPolicy":{"$ref":"#/types/aws-native:bedrock:DataSourceDataDeletionPolicy","description":"The data deletion policy for the data source."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceConfiguration","description":"The connection configuration for the data source."},"dataSourceId":{"type":"string","description":"Identifier for a resource."},"dataSourceStatus":{"$ref":"#/types/aws-native:bedrock:DataSourceStatus","description":"The status of the data source. The following statuses are possible:\n\n- Available – The data source has been created and is ready for ingestion into the knowledge base.\n- Deleting – The data source is being deleted."},"description":{"type":"string","description":"Description of the Resource."},"failureReasons":{"type":"array","items":{"type":"string"},"description":"The details of the failure reasons related to the data source."},"knowledgeBaseId":{"type":"string","description":"The unique identifier of the knowledge base to which to add the data source.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the data source."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceServerSideEncryptionConfiguration","description":"Contains details about the configuration of the server-side encryption."},"updatedAt":{"type":"string","description":"The time at which the knowledge base was last updated."},"vectorIngestionConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceVectorIngestionConfiguration","description":"Contains details about how to ingest the documents in the data source."}},"type":"object","required":["createdAt","dataSourceConfiguration","dataSourceId","dataSourceStatus","failureReasons","knowledgeBaseId","name","updatedAt"],"inputProperties":{"dataDeletionPolicy":{"$ref":"#/types/aws-native:bedrock:DataSourceDataDeletionPolicy","description":"The data deletion policy for the data source."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceConfiguration","description":"The connection configuration for the data source."},"description":{"type":"string","description":"Description of the Resource."},"knowledgeBaseId":{"type":"string","description":"The unique identifier of the knowledge base to which to add the data source."},"name":{"type":"string","description":"The name of the data source."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceServerSideEncryptionConfiguration","description":"Contains details about the configuration of the server-side encryption."},"vectorIngestionConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceVectorIngestionConfiguration","description":"Contains details about how to ingest the documents in the data source."}},"requiredInputs":["dataSourceConfiguration","knowledgeBaseId"]},"aws-native:bedrock:Flow":{"description":"Definition of AWS::Bedrock::Flow Resource Type","properties":{"arn":{"type":"string","description":"Arn representation of the Flow"},"awsId":{"type":"string","description":"Identifier for a Flow"},"createdAt":{"type":"string","description":"Time Stamp."},"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"definition":{"$ref":"#/types/aws-native:bedrock:FlowDefinition","description":"The definition of the nodes and connections between the nodes in the flow."},"definitionS3Location":{"$ref":"#/types/aws-native:bedrock:FlowS3Location","description":"The Amazon S3 location of the flow definition."},"definitionString":{"type":"string","description":"A JSON string containing a Definition with the same schema as the Definition property of this resource"},"definitionSubstitutions":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"integer"},{"type":"boolean"}]},"description":"A map that specifies the mappings for placeholder variables in the prompt flow definition. This enables the customer to inject values obtained at runtime. Variables can be template parameter names, resource logical IDs, resource attributes, or a variable in a key-value map. Only supported with the `DefinitionString` and `DefinitionS3Location` fields.\n\nSubstitutions must follow the syntax: `${key_name}` or `${variable_1,variable_2,...}` ."},"description":{"type":"string","description":"Description of the flow"},"executionRoleArn":{"type":"string","description":"ARN of a IAM role"},"name":{"type":"string","description":"Name for the flow"},"status":{"$ref":"#/types/aws-native:bedrock:FlowStatus","description":"The status of the flow. The following statuses are possible:\n\n- NotPrepared – The flow has been created or updated, but hasn't been prepared. If you just created the flow, you can't test it. If you updated the flow, the `DRAFT` version won't contain the latest changes for testing. Send a [PrepareFlow](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PrepareFlow.html) request to package the latest changes into the `DRAFT` version.\n- Preparing – The flow is being prepared so that the `DRAFT` version contains the latest changes for testing.\n- Prepared – The flow is prepared and the `DRAFT` version contains the latest changes for testing.\n- Failed – The last API operation that you invoked on the flow failed. Send a [GetFlow](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlow.html) request and check the error message in the `validations` field."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"testAliasTags":{"type":"object","additionalProperties":{"type":"string"}},"updatedAt":{"type":"string","description":"Time Stamp."},"validations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowValidation"}},"version":{"type":"string","description":"Draft Version."}},"type":"object","required":["arn","awsId","createdAt","executionRoleArn","name","status","updatedAt","validations","version"],"inputProperties":{"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"definition":{"$ref":"#/types/aws-native:bedrock:FlowDefinition","description":"The definition of the nodes and connections between the nodes in the flow."},"definitionS3Location":{"$ref":"#/types/aws-native:bedrock:FlowS3Location","description":"The Amazon S3 location of the flow definition."},"definitionString":{"type":"string","description":"A JSON string containing a Definition with the same schema as the Definition property of this resource"},"definitionSubstitutions":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"integer"},{"type":"boolean"}]},"description":"A map that specifies the mappings for placeholder variables in the prompt flow definition. This enables the customer to inject values obtained at runtime. Variables can be template parameter names, resource logical IDs, resource attributes, or a variable in a key-value map. Only supported with the `DefinitionString` and `DefinitionS3Location` fields.\n\nSubstitutions must follow the syntax: `${key_name}` or `${variable_1,variable_2,...}` ."},"description":{"type":"string","description":"Description of the flow"},"executionRoleArn":{"type":"string","description":"ARN of a IAM role"},"name":{"type":"string","description":"Name for the flow"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"testAliasTags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["executionRoleArn"]},"aws-native:bedrock:FlowAlias":{"description":"Definition of AWS::Bedrock::FlowAlias Resource Type","properties":{"arn":{"type":"string","description":"Arn of the Flow Alias"},"awsId":{"type":"string","description":"Id for a Flow Alias generated at the server side."},"concurrencyConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowAliasConcurrencyConfiguration","description":"The configuration that specifies how nodes in the flow are executed concurrently."},"createdAt":{"type":"string","description":"Time Stamp."},"description":{"type":"string","description":"Description of the Resource."},"flowArn":{"type":"string","description":"Arn representation of the Flow","replaceOnChanges":true},"flowId":{"type":"string","description":"Identifier for a flow resource."},"name":{"type":"string","description":"Name for a resource."},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowAliasRoutingConfigurationListItem"},"description":"Routing configuration for a Flow alias."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"updatedAt":{"type":"string","description":"Time Stamp."}},"type":"object","required":["arn","awsId","createdAt","flowArn","flowId","name","routingConfiguration","updatedAt"],"inputProperties":{"concurrencyConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowAliasConcurrencyConfiguration","description":"The configuration that specifies how nodes in the flow are executed concurrently."},"description":{"type":"string","description":"Description of the Resource."},"flowArn":{"type":"string","description":"Arn representation of the Flow"},"name":{"type":"string","description":"Name for a resource."},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:FlowAliasRoutingConfigurationListItem"},"description":"Routing configuration for a Flow alias."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"}},"requiredInputs":["flowArn","routingConfiguration"]},"aws-native:bedrock:FlowVersion":{"description":"Definition of AWS::Bedrock::FlowVersion Resource Type","properties":{"createdAt":{"type":"string","description":"Time Stamp."},"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"definition":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowDefinition"},"description":{"type":"string","description":"Description of the flow version","replaceOnChanges":true},"executionRoleArn":{"type":"string","description":"ARN of a IAM role"},"flowArn":{"type":"string","description":"Arn representation of the Flow","replaceOnChanges":true},"flowId":{"type":"string","description":"Identifier for a Flow"},"name":{"type":"string","description":"Name for the flow"},"status":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowStatus","description":"The status of the flow."},"version":{"type":"string","description":"Numerical Version."}},"type":"object","required":["createdAt","customerEncryptionKeyArn","definition","executionRoleArn","flowArn","flowId","name","status","version"],"inputProperties":{"description":{"type":"string","description":"Description of the flow version"},"flowArn":{"type":"string","description":"Arn representation of the Flow"}},"requiredInputs":["flowArn"]},"aws-native:bedrock:Guardrail":{"description":"Definition of AWS::Bedrock::Guardrail Resource Type","properties":{"automatedReasoningPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailAutomatedReasoningPolicyConfig","description":"Configuration settings for integrating Automated Reasoning policies with Amazon Bedrock Guardrails."},"blockedInputMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"blockedOutputsMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"contentPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContentPolicyConfig","description":"The content filter policies to configure for the guardrail."},"contextualGroundingPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContextualGroundingPolicyConfig"},"createdAt":{"type":"string","description":"Time Stamp"},"crossRegionConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailCrossRegionConfig","description":"The system-defined guardrail profile that you're using with your guardrail. Guardrail profiles define the destination AWS Regions where guardrail inference requests can be automatically routed. Using guardrail profiles helps maintain guardrail performance and reliability when demand increases.\n\nFor more information, see the [Amazon Bedrock User Guide](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-cross-region.html) ."},"description":{"type":"string","description":"Description of the guardrail or its version"},"failureRecommendations":{"type":"array","items":{"type":"string"},"description":"List of failure recommendations"},"guardrailArn":{"type":"string","description":"Arn representation for the guardrail"},"guardrailId":{"type":"string","description":"Unique id for the guardrail"},"kmsKeyArn":{"type":"string","description":"The KMS key with which the guardrail was encrypted at rest"},"name":{"type":"string","description":"Name of the guardrail"},"sensitiveInformationPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationPolicyConfig","description":"The sensitive information policy to configure for the guardrail."},"status":{"$ref":"#/types/aws-native:bedrock:GuardrailStatus","description":"The status of the guardrail."},"statusReasons":{"type":"array","items":{"type":"string"},"description":"List of status reasons"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"},"topicPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicPolicyConfig","description":"The topic policies to configure for the guardrail."},"updatedAt":{"type":"string","description":"Time Stamp"},"version":{"type":"string","description":"Guardrail version"},"wordPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailWordPolicyConfig","description":"The word policy you configure for the guardrail."}},"type":"object","required":["blockedInputMessaging","blockedOutputsMessaging","createdAt","failureRecommendations","guardrailArn","guardrailId","name","status","statusReasons","updatedAt","version"],"inputProperties":{"automatedReasoningPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailAutomatedReasoningPolicyConfig","description":"Configuration settings for integrating Automated Reasoning policies with Amazon Bedrock Guardrails."},"blockedInputMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"blockedOutputsMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"contentPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContentPolicyConfig","description":"The content filter policies to configure for the guardrail."},"contextualGroundingPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContextualGroundingPolicyConfig"},"crossRegionConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailCrossRegionConfig","description":"The system-defined guardrail profile that you're using with your guardrail. Guardrail profiles define the destination AWS Regions where guardrail inference requests can be automatically routed. Using guardrail profiles helps maintain guardrail performance and reliability when demand increases.\n\nFor more information, see the [Amazon Bedrock User Guide](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-cross-region.html) ."},"description":{"type":"string","description":"Description of the guardrail or its version"},"kmsKeyArn":{"type":"string","description":"The KMS key with which the guardrail was encrypted at rest"},"name":{"type":"string","description":"Name of the guardrail"},"sensitiveInformationPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationPolicyConfig","description":"The sensitive information policy to configure for the guardrail."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"},"topicPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicPolicyConfig","description":"The topic policies to configure for the guardrail."},"wordPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailWordPolicyConfig","description":"The word policy you configure for the guardrail."}},"requiredInputs":["blockedInputMessaging","blockedOutputsMessaging"]},"aws-native:bedrock:GuardrailVersion":{"description":"Definition of AWS::Bedrock::GuardrailVersion Resource Type","properties":{"description":{"type":"string","description":"Description of the Guardrail version","replaceOnChanges":true},"guardrailArn":{"type":"string","description":"Arn representation for the guardrail"},"guardrailId":{"type":"string","description":"Unique id for the guardrail"},"guardrailIdentifier":{"type":"string","description":"Identifier (GuardrailId or GuardrailArn) for the guardrail","replaceOnChanges":true},"version":{"type":"string","description":"Guardrail version"}},"type":"object","required":["guardrailArn","guardrailId","guardrailIdentifier","version"],"inputProperties":{"description":{"type":"string","description":"Description of the Guardrail version"},"guardrailIdentifier":{"type":"string","description":"Identifier (GuardrailId or GuardrailArn) for the guardrail"}},"requiredInputs":["guardrailIdentifier"]},"aws-native:bedrock:IntelligentPromptRouter":{"description":"Definition of AWS::Bedrock::IntelligentPromptRouter Resource Type","properties":{"createdAt":{"type":"string","description":"Time Stamp"},"description":{"type":"string","description":"Description of the Prompt Router.","replaceOnChanges":true},"fallbackModel":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterTargetModel","description":"The default model to use when the routing criteria is not met.","replaceOnChanges":true},"models":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterTargetModel"},"description":"List of model configuration","replaceOnChanges":true},"promptRouterArn":{"type":"string","description":"Arn of the Prompt Router."},"promptRouterName":{"type":"string","description":"Name of the Prompt Router.","replaceOnChanges":true},"routingCriteria":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterRoutingCriteria","description":"Routing criteria for a prompt router.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterStatus","description":"The router's status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"},"type":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterType","description":"The router's type."},"updatedAt":{"type":"string","description":"Time Stamp"}},"type":"object","required":["createdAt","fallbackModel","models","promptRouterArn","promptRouterName","routingCriteria","status","type","updatedAt"],"inputProperties":{"description":{"type":"string","description":"Description of the Prompt Router."},"fallbackModel":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterTargetModel","description":"The default model to use when the routing criteria is not met."},"models":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterTargetModel"},"description":"List of model configuration"},"promptRouterName":{"type":"string","description":"Name of the Prompt Router."},"routingCriteria":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterRoutingCriteria","description":"Routing criteria for a prompt router."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of Tags"}},"requiredInputs":["fallbackModel","models","routingCriteria"]},"aws-native:bedrock:KnowledgeBase":{"description":"Definition of AWS::Bedrock::KnowledgeBase Resource Type","properties":{"createdAt":{"type":"string","description":"The time at which the knowledge base was created."},"description":{"type":"string","description":"Description of the Resource."},"failureReasons":{"type":"array","items":{"type":"string"},"description":"A list of reasons that the API operation on the knowledge base failed."},"knowledgeBaseArn":{"type":"string","description":"The ARN of the knowledge base."},"knowledgeBaseConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseConfiguration","description":"Contains details about the embeddings configuration of the knowledge base."},"knowledgeBaseId":{"type":"string","description":"The unique identifier of the knowledge base."},"name":{"type":"string","description":"The name of the knowledge base."},"roleArn":{"type":"string","description":"The ARN of the IAM role with permissions to invoke API operations on the knowledge base. The ARN must begin with AmazonBedrockExecutionRoleForKnowledgeBase_"},"status":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseStatus","description":"The status of the knowledge base."},"storageConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseStorageConfiguration","description":"Contains details about the storage configuration of the knowledge base.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"updatedAt":{"type":"string","description":"The time at which the knowledge base was last updated."}},"type":"object","required":["createdAt","failureReasons","knowledgeBaseArn","knowledgeBaseConfiguration","knowledgeBaseId","name","roleArn","status","updatedAt"],"inputProperties":{"description":{"type":"string","description":"Description of the Resource."},"knowledgeBaseConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseConfiguration","description":"Contains details about the embeddings configuration of the knowledge base."},"name":{"type":"string","description":"The name of the knowledge base."},"roleArn":{"type":"string","description":"The ARN of the IAM role with permissions to invoke API operations on the knowledge base. The ARN must begin with AmazonBedrockExecutionRoleForKnowledgeBase_"},"storageConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseStorageConfiguration","description":"Contains details about the storage configuration of the knowledge base."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"}},"requiredInputs":["knowledgeBaseConfiguration","roleArn"]},"aws-native:bedrock:Prompt":{"description":"Definition of AWS::Bedrock::Prompt Resource Type","properties":{"arn":{"type":"string","description":"ARN of a prompt resource possibly with a version"},"awsId":{"type":"string","description":"Identifier for a Prompt"},"createdAt":{"type":"string","description":"Time Stamp."},"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"defaultVariant":{"type":"string","description":"Name for a variant."},"description":{"type":"string","description":"Name for a prompt resource."},"name":{"type":"string","description":"Name for a prompt resource."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"updatedAt":{"type":"string","description":"Time Stamp."},"variants":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVariant"},"description":"List of prompt variants"},"version":{"type":"string","description":"Draft Version."}},"type":"object","required":["arn","awsId","createdAt","name","updatedAt","version"],"inputProperties":{"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"defaultVariant":{"type":"string","description":"Name for a variant."},"description":{"type":"string","description":"Name for a prompt resource."},"name":{"type":"string","description":"Name for a prompt resource."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)"},"variants":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVariant"},"description":"List of prompt variants"}}},"aws-native:bedrock:PromptVersion":{"description":"Definition of AWS::Bedrock::PromptVersion Resource Type","properties":{"arn":{"type":"string","description":"ARN of a prompt version resource"},"createdAt":{"type":"string","description":"Time Stamp."},"customerEncryptionKeyArn":{"type":"string","description":"A KMS key ARN"},"defaultVariant":{"type":"string","description":"Name for a variant."},"description":{"type":"string","description":"Description for a prompt version resource.","replaceOnChanges":true},"name":{"type":"string","description":"Name for a prompt resource."},"promptArn":{"type":"string","description":"ARN of a prompt resource possibly with a version","replaceOnChanges":true},"promptId":{"type":"string","description":"Identifier for a Prompt"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of tags attached to the prompt version and their values.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"Time Stamp."},"variants":{"type":"array","items":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptVariant"},"description":"List of prompt variants"},"version":{"type":"string","description":"Version."}},"type":"object","required":["arn","createdAt","customerEncryptionKeyArn","defaultVariant","name","promptArn","promptId","updatedAt","variants","version"],"inputProperties":{"description":{"type":"string","description":"Description for a prompt version resource."},"promptArn":{"type":"string","description":"ARN of a prompt resource possibly with a version"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of tags attached to the prompt version and their values."}},"requiredInputs":["promptArn"]},"aws-native:bedrockagentcore:BrowserCustom":{"description":"Resource definition for AWS::BedrockAgentCore::BrowserCustom","properties":{"browserArn":{"type":"string","description":"The ARN of a Browser resource."},"browserId":{"type":"string","description":"The id of the browser."},"browserSigning":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserSigning","description":"Browser signing configuration.","replaceOnChanges":true},"createdAt":{"type":"string","description":"Timestamp when the browser was created."},"description":{"type":"string","description":"The description of the browser.","replaceOnChanges":true},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the browser uses to access resources.","replaceOnChanges":true},"failureReason":{"type":"string","description":"The reason for failure if the browser creation or operation failed."},"lastUpdatedAt":{"type":"string","description":"Timestamp when the browser was last updated."},"name":{"type":"string","description":"The name of the browser.","replaceOnChanges":true},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserNetworkConfiguration","description":"Network configuration for browser.","replaceOnChanges":true},"recordingConfig":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomRecordingConfig","description":"Recording configuration for browser.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserStatus","description":"Status of browser."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the custom browser."}},"type":"object","required":["browserArn","browserId","createdAt","failureReason","lastUpdatedAt","name","networkConfiguration","status"],"inputProperties":{"browserSigning":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserSigning","description":"Browser signing configuration."},"description":{"type":"string","description":"The description of the browser."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the browser uses to access resources."},"name":{"type":"string","description":"The name of the browser."},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserNetworkConfiguration","description":"Network configuration for browser."},"recordingConfig":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomRecordingConfig","description":"Recording configuration for browser."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the custom browser."}},"requiredInputs":["networkConfiguration"]},"aws-native:bedrockagentcore:BrowserProfile":{"description":"Resource definition for AWS::BedrockAgentCore::BrowserProfile","properties":{"createdAt":{"type":"string"},"description":{"type":"string","replaceOnChanges":true},"lastSavedAt":{"type":"string"},"lastSavedBrowserId":{"type":"string"},"lastSavedBrowserSessionId":{"type":"string"},"lastUpdatedAt":{"type":"string"},"name":{"type":"string","replaceOnChanges":true},"profileArn":{"type":"string"},"profileId":{"type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserProfileStatus"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of tag keys and values."}},"type":"object","required":["createdAt","lastSavedAt","lastSavedBrowserId","lastSavedBrowserSessionId","lastUpdatedAt","name","profileArn","profileId","status"],"inputProperties":{"description":{"type":"string"},"name":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of tag keys and values."}}},"aws-native:bedrockagentcore:CodeInterpreterCustom":{"description":"Resource definition for AWS::BedrockAgentCore::CodeInterpreterCustom","properties":{"codeInterpreterArn":{"type":"string","description":"The ARN of a CodeInterpreter resource."},"codeInterpreterId":{"type":"string","description":"The id of the code interpreter."},"createdAt":{"type":"string","description":"Timestamp when the code interpreter was created."},"description":{"type":"string","description":"The description of the code interpreter.","replaceOnChanges":true},"executionRoleArn":{"type":"string","description":"The ARN of the IAM role that the code interpreter uses to access resources.","replaceOnChanges":true},"failureReason":{"type":"string","description":"The reason for failure if the code interpreter creation or operation failed."},"lastUpdatedAt":{"type":"string","description":"Timestamp when the code interpreter was last updated."},"name":{"type":"string","description":"The name of the code interpreter.","replaceOnChanges":true},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterNetworkConfiguration","description":"Network configuration for code interpreter.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterStatus","description":"Status of code interpreter."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the code interpreter."}},"type":"object","required":["codeInterpreterArn","codeInterpreterId","createdAt","failureReason","lastUpdatedAt","name","networkConfiguration","status"],"inputProperties":{"description":{"type":"string","description":"The description of the code interpreter."},"executionRoleArn":{"type":"string","description":"The ARN of the IAM role that the code interpreter uses to access resources."},"name":{"type":"string","description":"The name of the code interpreter."},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterNetworkConfiguration","description":"Network configuration for code interpreter."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the code interpreter."}},"requiredInputs":["networkConfiguration"]},"aws-native:bedrockagentcore:Evaluator":{"description":"Resource Type definition for AWS::BedrockAgentCore::Evaluator - Creates a custom evaluator for agent quality assessment using LLM-as-a-Judge configurations.","properties":{"createdAt":{"type":"string","description":"The timestamp when the evaluator was created."},"description":{"type":"string","description":"The description of the evaluator."},"evaluatorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the evaluator."},"evaluatorConfig":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorConfig","description":"The configuration for the evaluator."},"evaluatorId":{"type":"string","description":"The unique identifier of the evaluator."},"evaluatorName":{"type":"string","description":"The name of the evaluator. Must be unique within your account.","replaceOnChanges":true},"level":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorLevel","description":"The evaluation level that determines the scope of evaluation."},"status":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorStatus","description":"The current status of the evaluator."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to assign to the evaluator."},"updatedAt":{"type":"string","description":"The timestamp when the evaluator was last updated."}},"type":"object","required":["createdAt","evaluatorArn","evaluatorConfig","evaluatorId","evaluatorName","level","status","updatedAt"],"inputProperties":{"description":{"type":"string","description":"The description of the evaluator."},"evaluatorConfig":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorConfig","description":"The configuration for the evaluator."},"evaluatorName":{"type":"string","description":"The name of the evaluator. Must be unique within your account."},"level":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorLevel","description":"The evaluation level that determines the scope of evaluation."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to assign to the evaluator."}},"requiredInputs":["evaluatorConfig","level"]},"aws-native:bedrockagentcore:Gateway":{"description":"Definition of AWS::BedrockAgentCore::Gateway Resource Type","properties":{"authorizerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizerConfigurationProperties"},"authorizerType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizerType","description":"The authorizer type for the gateway."},"createdAt":{"type":"string","description":"The date and time at which the gateway was created."},"description":{"type":"string","description":"The description for the gateway."},"exceptionLevel":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayExceptionLevel","description":"The exception level for the gateway."},"gatewayArn":{"type":"string","description":"The ARN for the gateway."},"gatewayIdentifier":{"type":"string"},"gatewayUrl":{"type":"string","description":"The gateway URL for the gateway."},"interceptorConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayInterceptorConfiguration"}},"kmsKeyArn":{"type":"string","description":"The KMS key ARN for the gateway."},"name":{"type":"string","description":"The name for the gateway."},"policyEngineConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayPolicyEngineConfiguration"},"protocolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayProtocolConfigurationProperties","description":"The protocol configuration for the gateway target."},"protocolType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayProtocolType","description":"The protocol type for the gateway target."},"roleArn":{"type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayStatus","description":"The status for the gateway."},"statusReasons":{"type":"array","items":{"type":"string"},"description":"The status reasons for the gateway."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the gateway."},"updatedAt":{"type":"string"},"workloadIdentityDetails":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayWorkloadIdentityDetails"}},"type":"object","required":["authorizerType","createdAt","gatewayArn","gatewayIdentifier","gatewayUrl","name","protocolType","roleArn","status","statusReasons","updatedAt","workloadIdentityDetails"],"inputProperties":{"authorizerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizerConfigurationProperties"},"authorizerType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizerType","description":"The authorizer type for the gateway."},"description":{"type":"string","description":"The description for the gateway."},"exceptionLevel":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayExceptionLevel","description":"The exception level for the gateway."},"interceptorConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayInterceptorConfiguration"}},"kmsKeyArn":{"type":"string","description":"The KMS key ARN for the gateway."},"name":{"type":"string","description":"The name for the gateway."},"policyEngineConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayPolicyEngineConfiguration"},"protocolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayProtocolConfigurationProperties","description":"The protocol configuration for the gateway target."},"protocolType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayProtocolType","description":"The protocol type for the gateway target."},"roleArn":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the gateway."}},"requiredInputs":["authorizerType","protocolType","roleArn"]},"aws-native:bedrockagentcore:GatewayTarget":{"description":"Resource Type definition for AWS::BedrockAgentCore::GatewayTarget","properties":{"createdAt":{"type":"string","description":"The date and time at which the gateway target was created."},"credentialProviderConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetCredentialProviderConfiguration"},"description":"The OAuth credential provider configuration."},"description":{"type":"string","description":"The description for the gateway target."},"gatewayArn":{"type":"string"},"gatewayIdentifier":{"type":"string","description":"The gateway ID for the gateway target.","replaceOnChanges":true},"lastSynchronizedAt":{"type":"string"},"metadataConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMetadataConfiguration"},"name":{"type":"string","description":"The name for the gateway target."},"status":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetTargetStatus","description":"The status for the gateway target."},"statusReasons":{"type":"array","items":{"type":"string"},"description":"The status reasons for the gateway target."},"targetConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetTargetConfigurationProperties","description":"The target configuration for the Smithy model target."},"targetId":{"type":"string","description":"The target ID for the gateway target."},"updatedAt":{"type":"string","description":"The time at which the resource was updated."}},"type":"object","required":["createdAt","gatewayArn","lastSynchronizedAt","name","status","statusReasons","targetConfiguration","targetId","updatedAt"],"inputProperties":{"credentialProviderConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetCredentialProviderConfiguration"},"description":"The OAuth credential provider configuration."},"description":{"type":"string","description":"The description for the gateway target."},"gatewayIdentifier":{"type":"string","description":"The gateway ID for the gateway target."},"metadataConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMetadataConfiguration"},"name":{"type":"string","description":"The name for the gateway target."},"targetConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetTargetConfigurationProperties","description":"The target configuration for the Smithy model target."}},"requiredInputs":["targetConfiguration"]},"aws-native:bedrockagentcore:Memory":{"description":"Resource Type definition for AWS::BedrockAgentCore::Memory","properties":{"createdAt":{"type":"string","description":"The timestamp when the memory record was created."},"description":{"type":"string"},"encryptionKeyArn":{"type":"string","description":"The memory encryption key Amazon Resource Name (ARN).","replaceOnChanges":true},"eventExpiryDuration":{"type":"integer","description":"Duration in days until memory events expire"},"failureReason":{"type":"string"},"memoryArn":{"type":"string"},"memoryExecutionRoleArn":{"type":"string","description":"The memory role ARN."},"memoryId":{"type":"string","description":"The memory ID."},"memoryStrategies":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStrategy"},"description":"The memory strategies."},"name":{"type":"string","description":"The memory name.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStatus","description":"The memory status."},"streamDeliveryResources":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStreamDeliveryResources"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the resources."},"updatedAt":{"type":"string"}},"type":"object","required":["createdAt","eventExpiryDuration","failureReason","memoryArn","memoryId","name","status","updatedAt"],"inputProperties":{"description":{"type":"string"},"encryptionKeyArn":{"type":"string","description":"The memory encryption key Amazon Resource Name (ARN)."},"eventExpiryDuration":{"type":"integer","description":"Duration in days until memory events expire"},"memoryExecutionRoleArn":{"type":"string","description":"The memory role ARN."},"memoryStrategies":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStrategy"},"description":"The memory strategies."},"name":{"type":"string","description":"The memory name."},"streamDeliveryResources":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStreamDeliveryResources"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the resources."}},"requiredInputs":["eventExpiryDuration"]},"aws-native:bedrockagentcore:OnlineEvaluationConfig":{"description":"Resource Type definition for AWS::BedrockAgentCore::OnlineEvaluationConfig - Creates an online evaluation configuration for continuous monitoring of agent performance.","properties":{"createdAt":{"type":"string","description":"The timestamp when the online evaluation configuration was created."},"dataSourceConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigDataSourceConfig","description":"The data source configuration that specifies CloudWatch log groups and service names to monitor."},"description":{"type":"string","description":"The description of the online evaluation configuration."},"evaluationExecutionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants permissions for evaluation."},"evaluators":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigEvaluatorReference"},"description":"The list of evaluators to apply during online evaluation."},"executionStatus":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigExecutionStatus","description":"The execution status indicating whether the online evaluation is currently running."},"onlineEvaluationConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the online evaluation configuration."},"onlineEvaluationConfigId":{"type":"string","description":"The unique identifier of the online evaluation configuration."},"onlineEvaluationConfigName":{"type":"string","description":"The name of the online evaluation configuration. Must be unique within your account.","replaceOnChanges":true},"outputConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigOutputConfig","description":"The configuration that specifies where evaluation results should be written."},"rule":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigRule","description":"The evaluation rule that defines sampling configuration, filters, and session detection settings."},"status":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigStatus","description":"The status of the online evaluation configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to assign to the online evaluation configuration."},"updatedAt":{"type":"string","description":"The timestamp when the online evaluation configuration was last updated."}},"type":"object","required":["createdAt","dataSourceConfig","evaluationExecutionRoleArn","evaluators","executionStatus","onlineEvaluationConfigArn","onlineEvaluationConfigId","onlineEvaluationConfigName","outputConfig","rule","status","updatedAt"],"inputProperties":{"dataSourceConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigDataSourceConfig","description":"The data source configuration that specifies CloudWatch log groups and service names to monitor."},"description":{"type":"string","description":"The description of the online evaluation configuration."},"evaluationExecutionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants permissions for evaluation."},"evaluators":{"type":"array","items":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigEvaluatorReference"},"description":"The list of evaluators to apply during online evaluation."},"onlineEvaluationConfigName":{"type":"string","description":"The name of the online evaluation configuration. Must be unique within your account."},"rule":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigRule","description":"The evaluation rule that defines sampling configuration, filters, and session detection settings."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to assign to the online evaluation configuration."}},"requiredInputs":["dataSourceConfig","evaluationExecutionRoleArn","evaluators","rule"]},"aws-native:bedrockagentcore:Policy":{"description":"Resource Type definition for AWS::BedrockAgentCore::Policy","properties":{"createdAt":{"type":"string","description":"The timestamp when the policy was created."},"definition":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyDefinition"},"description":{"type":"string","description":"A human-readable description of the policy's purpose and functionality."},"name":{"type":"string","description":"The customer-assigned immutable name for the policy. Must be unique within the policy engine.","replaceOnChanges":true},"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."},"policyEngineId":{"type":"string","description":"The identifier of the policy engine which contains this policy.","replaceOnChanges":true},"policyId":{"type":"string","description":"The unique identifier for the policy."},"status":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyStatus","description":"The current status of the policy."},"statusReasons":{"type":"array","items":{"type":"string"},"description":"Additional information about the policy status."},"updatedAt":{"type":"string","description":"The timestamp when the policy was last updated."},"validationMode":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyValidationMode"}},"type":"object","required":["createdAt","definition","name","policyArn","policyEngineId","policyId","status","statusReasons","updatedAt"],"inputProperties":{"definition":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyDefinition"},"description":{"type":"string","description":"A human-readable description of the policy's purpose and functionality."},"name":{"type":"string","description":"The customer-assigned immutable name for the policy. Must be unique within the policy engine."},"policyEngineId":{"type":"string","description":"The identifier of the policy engine which contains this policy."},"validationMode":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyValidationMode"}},"requiredInputs":["definition","policyEngineId"]},"aws-native:bedrockagentcore:PolicyEngine":{"description":"Resource Type definition for AWS::BedrockAgentCore::PolicyEngine","properties":{"createdAt":{"type":"string","description":"The timestamp when the policy engine was created"},"description":{"type":"string","description":"A human-readable description of the policy engine's purpose and scope"},"encryptionKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the policy engine data","replaceOnChanges":true},"name":{"type":"string","description":"The customer-assigned immutable name for the policy engine","replaceOnChanges":true},"policyEngineArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy engine"},"policyEngineId":{"type":"string","description":"The unique identifier for the policy engine"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyEngineStatus","description":"The current status of the policy engine"},"statusReasons":{"type":"array","items":{"type":"string"},"description":"Additional information about the policy engine status"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to assign to the policy engine."},"updatedAt":{"type":"string","description":"The timestamp when the policy engine was last updated"}},"type":"object","required":["createdAt","name","policyEngineArn","policyEngineId","status","statusReasons","updatedAt"],"inputProperties":{"description":{"type":"string","description":"A human-readable description of the policy engine's purpose and scope"},"encryptionKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the policy engine data"},"name":{"type":"string","description":"The customer-assigned immutable name for the policy engine"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to assign to the policy engine."}}},"aws-native:bedrockagentcore:Runtime":{"description":"Resource Type definition for AWS::BedrockAgentCore::Runtime","properties":{"agentRuntimeArn":{"type":"string","description":"The Amazon Resource Name(ARN) that uniquely identifies the Agent"},"agentRuntimeArtifact":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAgentRuntimeArtifact","description":"The artifact of the agent"},"agentRuntimeId":{"type":"string","description":"Identifier for a resource"},"agentRuntimeName":{"type":"string","description":"Name for a resource","replaceOnChanges":true},"agentRuntimeVersion":{"type":"string","description":"Version of the Agent"},"authorizerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAuthorizerConfiguration","description":"Authorizer configuration for the agent runtime"},"createdAt":{"type":"string","description":"Timestamp when the Agent was created"},"description":{"type":"string","description":"Description of the resource"},"environmentVariables":{"type":"object","additionalProperties":{"type":"string"},"description":"Environment variables for the agent runtime"},"failureReason":{"type":"string","description":"The reason for failure if the agent is in a failed state."},"lastUpdatedAt":{"type":"string","description":"When resource was last updated"},"lifecycleConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeLifecycleConfiguration","description":"Lifecycle configuration for managing runtime sessions"},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeNetworkConfiguration","description":"Network access configuration for the Agent"},"protocolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeProtocolConfiguration","description":"Protocol configuration for the agent runtime"},"requestHeaderConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeRequestHeaderConfiguration","description":"Configuration for HTTP request headers"},"roleArn":{"type":"string","description":"Amazon Resource Name (ARN) of an IAM role"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAgentStatus","description":"Current status of the agent"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the agent."},"workloadIdentityDetails":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeWorkloadIdentityDetails","description":"Workload identity details for the agent"}},"type":"object","required":["agentRuntimeArn","agentRuntimeArtifact","agentRuntimeId","agentRuntimeName","agentRuntimeVersion","createdAt","failureReason","lastUpdatedAt","networkConfiguration","roleArn","status","workloadIdentityDetails"],"inputProperties":{"agentRuntimeArtifact":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAgentRuntimeArtifact","description":"The artifact of the agent"},"agentRuntimeName":{"type":"string","description":"Name for a resource"},"authorizerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAuthorizerConfiguration","description":"Authorizer configuration for the agent runtime"},"description":{"type":"string","description":"Description of the resource"},"environmentVariables":{"type":"object","additionalProperties":{"type":"string"},"description":"Environment variables for the agent runtime"},"lifecycleConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeLifecycleConfiguration","description":"Lifecycle configuration for managing runtime sessions"},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeNetworkConfiguration","description":"Network access configuration for the Agent"},"protocolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeProtocolConfiguration","description":"Protocol configuration for the agent runtime"},"requestHeaderConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeRequestHeaderConfiguration","description":"Configuration for HTTP request headers"},"roleArn":{"type":"string","description":"Amazon Resource Name (ARN) of an IAM role"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the agent."}},"requiredInputs":["agentRuntimeArtifact","agentRuntimeName","networkConfiguration","roleArn"]},"aws-native:bedrockagentcore:RuntimeEndpoint":{"description":"Resource definition for AWS::BedrockAgentCore::RuntimeEndpoint","properties":{"agentRuntimeArn":{"type":"string","description":"The ARN of the Agent Runtime"},"agentRuntimeEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AgentCore Runtime."},"agentRuntimeId":{"type":"string","description":"The ID of the parent Agent Runtime (required for creation)","replaceOnChanges":true},"agentRuntimeVersion":{"type":"string","description":"The version of the AgentCore Runtime to use for the endpoint."},"awsId":{"type":"string","description":"The unique identifier of the AgentCore Runtime endpoint."},"createdAt":{"type":"string","description":"The timestamp when the Agent Runtime Endpoint was created"},"description":{"type":"string","description":"The description of the AgentCore Runtime endpoint."},"failureReason":{"type":"string","description":"The reason for failure if the endpoint is in a failed state"},"lastUpdatedAt":{"type":"string","description":"The timestamp when the Agent Runtime Endpoint was last updated"},"liveVersion":{"type":"string","description":"The Live version of the Agent Runtime"},"name":{"type":"string","description":"The name of the Agent Runtime Endpoint","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeEndpointAgentRuntimeEndpointStatus","description":"The status of the Agent Runtime Endpoint"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the AgentCore Runtime endpoint."},"targetVersion":{"type":"string","description":"The target version of the AgentCore Runtime for the endpoint."}},"type":"object","required":["agentRuntimeArn","agentRuntimeEndpointArn","agentRuntimeId","awsId","createdAt","failureReason","lastUpdatedAt","liveVersion","name","status","targetVersion"],"inputProperties":{"agentRuntimeId":{"type":"string","description":"The ID of the parent Agent Runtime (required for creation)"},"agentRuntimeVersion":{"type":"string","description":"The version of the AgentCore Runtime to use for the endpoint."},"description":{"type":"string","description":"The description of the AgentCore Runtime endpoint."},"name":{"type":"string","description":"The name of the Agent Runtime Endpoint"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the AgentCore Runtime endpoint."}},"requiredInputs":["agentRuntimeId"]},"aws-native:bedrockagentcore:WorkloadIdentity":{"description":"Definition of AWS::BedrockAgentCore::WorkloadIdentity Resource Type","properties":{"allowedResourceOauth2ReturnUrls":{"type":"array","items":{"type":"string"},"description":"The list of allowed OAuth2 return URLs for resources associated with this workload identity."},"createdTime":{"type":"number","description":"The timestamp when the workload identity was created."},"lastUpdatedTime":{"type":"number","description":"The timestamp when the workload identity was last updated."},"name":{"type":"string","description":"The name of the workload identity. The name must be unique within your account.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workloadIdentityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the workload identity."}},"type":"object","required":["createdTime","lastUpdatedTime","name","workloadIdentityArn"],"inputProperties":{"allowedResourceOauth2ReturnUrls":{"type":"array","items":{"type":"string"},"description":"The list of allowed OAuth2 return URLs for resources associated with this workload identity."},"name":{"type":"string","description":"The name of the workload identity. The name must be unique within your account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:bedrockmantle:Project":{"description":"Resource type definition for AWS::BedrockMantle::Project","properties":{"arn":{"type":"string","description":"The ARN of the project."},"awsId":{"type":"string","description":"The unique identifier of the project."},"createdAt":{"type":"string","description":"The timestamp when the project was created."},"name":{"type":"string","description":"The name of the project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","createdAt","name"],"inputProperties":{"name":{"type":"string","description":"The name of the project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:billing:BillingView":{"description":"A billing view is a container of cost \u0026 usage metadata.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that can be used to uniquely identify the billing view."},"billingViewType":{"$ref":"#/types/aws-native:billing:BillingViewType","description":"The type of billing group."},"createdAt":{"type":"number","description":"The time when the billing view was created."},"dataFilterExpression":{"$ref":"#/types/aws-native:billing:DataFilterExpressionProperties","description":"See [Expression](https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_billing_Expression.html) . Billing view only supports `LINKED_ACCOUNT` and `Tags` ."},"description":{"type":"string","description":"The description of the billing view.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the billing view.","replaceOnChanges":true},"ownerAccountId":{"type":"string","description":"The account owner of the billing view."},"sourceViews":{"type":"array","items":{"type":"string"},"description":"An array of strings that define the billing view's source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs associated to the billing view being created."},"updatedAt":{"type":"number","description":"The time when the billing view was last updated."}},"type":"object","required":["arn","billingViewType","createdAt","name","ownerAccountId","sourceViews","updatedAt"],"inputProperties":{"dataFilterExpression":{"$ref":"#/types/aws-native:billing:DataFilterExpressionProperties","description":"See [Expression](https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_billing_Expression.html) . Billing view only supports `LINKED_ACCOUNT` and `Tags` ."},"description":{"type":"string","description":"The description of the billing view."},"name":{"type":"string","description":"The name of the billing view."},"sourceViews":{"type":"array","items":{"type":"string"},"description":"An array of strings that define the billing view's source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs associated to the billing view being created."}},"requiredInputs":["sourceViews"]},"aws-native:budgets:BudgetsAction":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"actionId":{"type":"string","description":"A system-generated universally unique identifier (UUID) for the action."},"actionThreshold":{"$ref":"#/types/aws-native:budgets:BudgetsActionActionThreshold","description":"The trigger threshold of the action."},"actionType":{"$ref":"#/types/aws-native:budgets:BudgetsActionActionType","description":"The type of action. This defines the type of tasks that can be carried out by this action. This field also determines the format for definition.","replaceOnChanges":true},"approvalModel":{"$ref":"#/types/aws-native:budgets:BudgetsActionApprovalModel","description":"This specifies if the action needs manual or automatic approval."},"budgetName":{"type":"string","description":"A string that represents the budget name. \":\" and \"\\\" characters aren't allowed.","replaceOnChanges":true},"definition":{"$ref":"#/types/aws-native:budgets:BudgetsActionDefinition","description":"Specifies all of the type-specific parameters."},"executionRoleArn":{"type":"string","description":"The role passed for action execution and reversion. Roles and actions must be in the same account."},"notificationType":{"$ref":"#/types/aws-native:budgets:BudgetsActionNotificationType","description":"The type of a notification."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional list of tags to associate with the specified budget action. Each tag consists of a key and a value, and each key must be unique for the resource."},"subscribers":{"type":"array","items":{"$ref":"#/types/aws-native:budgets:BudgetsActionSubscriber"},"description":"A list of subscribers."}},"type":"object","required":["actionId","actionThreshold","actionType","budgetName","definition","executionRoleArn","notificationType","subscribers"],"inputProperties":{"actionThreshold":{"$ref":"#/types/aws-native:budgets:BudgetsActionActionThreshold","description":"The trigger threshold of the action."},"actionType":{"$ref":"#/types/aws-native:budgets:BudgetsActionActionType","description":"The type of action. This defines the type of tasks that can be carried out by this action. This field also determines the format for definition."},"approvalModel":{"$ref":"#/types/aws-native:budgets:BudgetsActionApprovalModel","description":"This specifies if the action needs manual or automatic approval."},"budgetName":{"type":"string","description":"A string that represents the budget name. \":\" and \"\\\" characters aren't allowed."},"definition":{"$ref":"#/types/aws-native:budgets:BudgetsActionDefinition","description":"Specifies all of the type-specific parameters."},"executionRoleArn":{"type":"string","description":"The role passed for action execution and reversion. Roles and actions must be in the same account."},"notificationType":{"$ref":"#/types/aws-native:budgets:BudgetsActionNotificationType","description":"The type of a notification."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional list of tags to associate with the specified budget action. Each tag consists of a key and a value, and each key must be unique for the resource."},"subscribers":{"type":"array","items":{"$ref":"#/types/aws-native:budgets:BudgetsActionSubscriber"},"description":"A list of subscribers."}},"requiredInputs":["actionThreshold","actionType","budgetName","definition","executionRoleArn","notificationType","subscribers"]},"aws-native:cases:CaseRule":{"description":"A case rule. In the Amazon Connect admin website, case rules are known as case field conditions. Case rules are used to define the situations under which fields should have certain effects (such as required).","properties":{"caseRuleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a case rule."},"caseRuleId":{"type":"string","description":"The unique identifier of a case rule."},"createdTime":{"type":"string","description":"The time at which the case rule was created."},"description":{"type":"string","description":"A description explaining the purpose and behavior of this case rule. Helps administrators understand when and why this rule applies to case fields."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain.","replaceOnChanges":true},"lastModifiedTime":{"type":"string","description":"The time at which the case rule was created or last modified."},"name":{"type":"string","description":"A descriptive name for the case rule. Must be unique within the domain and should clearly indicate the rule's purpose (e.g., 'Priority Field Required for Urgent Cases')."},"rule":{"oneOf":[{"$ref":"#/types/aws-native:cases:CaseRuleDetails0Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleDetails1Properties"}],"description":"Represents what rule type should take place, under what conditions."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this case rule."}},"type":"object","required":["caseRuleArn","caseRuleId","createdTime","lastModifiedTime","name","rule"],"inputProperties":{"description":{"type":"string","description":"A description explaining the purpose and behavior of this case rule. Helps administrators understand when and why this rule applies to case fields."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain."},"name":{"type":"string","description":"A descriptive name for the case rule. Must be unique within the domain and should clearly indicate the rule's purpose (e.g., 'Priority Field Required for Urgent Cases')."},"rule":{"oneOf":[{"$ref":"#/types/aws-native:cases:CaseRuleDetails0Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleDetails1Properties"}],"description":"Represents what rule type should take place, under what conditions."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this case rule."}},"requiredInputs":["rule"]},"aws-native:cases:Domain":{"description":"A domain, which is a container for all case data, such as cases, fields, templates and layouts. Each Amazon Connect instance can be associated with only one Cases domain.","properties":{"createdTime":{"type":"string","description":"The time at which the domain was created."},"domainArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Cases domain."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain."},"domainStatus":{"$ref":"#/types/aws-native:cases:DomainStatus","description":"The status of the Cases domain."},"name":{"type":"string","description":"The name for your Cases domain. It must be unique for your AWS account.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this domain."}},"type":"object","required":["createdTime","domainArn","domainId","domainStatus","name"],"inputProperties":{"name":{"type":"string","description":"The name for your Cases domain. It must be unique for your AWS account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this domain."}}},"aws-native:cases:Field":{"description":"A field in the Cases domain. This field is used to define the case object model (that is, defines what data can be captured on cases) in a Cases domain.","properties":{"attributes":{"$ref":"#/types/aws-native:cases:FieldAttributes","description":"Field-type specific attributes that control rendering and validation behavior"},"createdTime":{"type":"string","description":"The time at which the field was created."},"description":{"type":"string","description":"A description explaining the purpose and usage of this field in cases. Helps agents and administrators understand what information should be captured in this field."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain.","replaceOnChanges":true},"fieldArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the field."},"fieldId":{"type":"string","description":"The unique identifier of a field."},"lastModifiedTime":{"type":"string","description":"The time at which the field was created or last modified."},"name":{"type":"string","description":"The display name of the field as it appears to agents in the case interface. Should be descriptive and user-friendly (e.g., 'Customer Priority Level', 'Issue Category')."},"namespace":{"$ref":"#/types/aws-native:cases:FieldNamespace","description":"Indicates whether this is a System field (predefined by AWS) or a Custom field (created by your organization). System fields cannot be modified or deleted."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:cases:FieldType","description":"Type of the field.","replaceOnChanges":true}},"type":"object","required":["createdTime","fieldArn","fieldId","lastModifiedTime","name","namespace","type"],"inputProperties":{"attributes":{"$ref":"#/types/aws-native:cases:FieldAttributes","description":"Field-type specific attributes that control rendering and validation behavior"},"description":{"type":"string","description":"A description explaining the purpose and usage of this field in cases. Helps agents and administrators understand what information should be captured in this field."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain."},"name":{"type":"string","description":"The display name of the field as it appears to agents in the case interface. Should be descriptive and user-friendly (e.g., 'Customer Priority Level', 'Issue Category')."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:cases:FieldType","description":"Type of the field."}},"requiredInputs":["type"]},"aws-native:cases:Layout":{"description":"A layout in the Cases domain. Layouts define the following configuration in the top section and More Info tab of the Cases user interface: Fields to display to the users and Field ordering.","properties":{"content":{"$ref":"#/types/aws-native:cases:LayoutContentProperties","description":"Object to store union of different versions of layout content."},"createdTime":{"type":"string","description":"The time at which the layout was created."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain.","replaceOnChanges":true},"lastModifiedTime":{"type":"string","description":"The time at which the layout was created or last modified."},"layoutArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the layout."},"layoutId":{"type":"string","description":"The unique identifier of the layout."},"name":{"type":"string","description":"A descriptive name for the layout. Must be unique within the Cases domain and should clearly indicate the layout's purpose and field organization."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["content","createdTime","lastModifiedTime","layoutArn","layoutId","name"],"inputProperties":{"content":{"$ref":"#/types/aws-native:cases:LayoutContentProperties","description":"Object to store union of different versions of layout content."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain."},"name":{"type":"string","description":"A descriptive name for the layout. Must be unique within the Cases domain and should clearly indicate the layout's purpose and field organization."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["content"]},"aws-native:cases:Template":{"description":"A template in the Cases domain. This template is used to define the case object model (that is, to define what data can be captured on cases) in a Cases domain. A template must have a unique name within a domain, and it must reference existing field IDs and layout IDs.","properties":{"createdTime":{"type":"string","description":"The time at which the template was created."},"description":{"type":"string","description":"A description explaining the purpose and use case for this template. Should indicate what types of cases this template is designed for and any specific workflow it supports."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain.","replaceOnChanges":true},"lastModifiedTime":{"type":"string","description":"The time at which the template was created or last modified."},"layoutConfiguration":{"$ref":"#/types/aws-native:cases:TemplateLayoutConfiguration","description":"Object to store configuration of layouts associated to the template."},"name":{"type":"string","description":"A name for the template. It must be unique per domain."},"requiredFields":{"type":"array","items":{"$ref":"#/types/aws-native:cases:TemplateRequiredField"},"description":"A list of fields that must contain a value for a case to be successfully created with this template."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:cases:TemplateRule"},"description":"A list of case rules (also known as case field conditions) on a template."},"status":{"$ref":"#/types/aws-native:cases:TemplateStatus","description":"The status of the template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this template."},"templateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the template."},"templateId":{"type":"string","description":"The unique identifier of a template."}},"type":"object","required":["createdTime","lastModifiedTime","name","templateArn","templateId"],"inputProperties":{"description":{"type":"string","description":"A description explaining the purpose and use case for this template. Should indicate what types of cases this template is designed for and any specific workflow it supports."},"domainId":{"type":"string","description":"The unique identifier of the Cases domain."},"layoutConfiguration":{"$ref":"#/types/aws-native:cases:TemplateLayoutConfiguration","description":"Object to store configuration of layouts associated to the template."},"name":{"type":"string","description":"A name for the template. It must be unique per domain."},"requiredFields":{"type":"array","items":{"$ref":"#/types/aws-native:cases:TemplateRequiredField"},"description":"A list of fields that must contain a value for a case to be successfully created with this template."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:cases:TemplateRule"},"description":"A list of case rules (also known as case field conditions) on a template."},"status":{"$ref":"#/types/aws-native:cases:TemplateStatus","description":"The status of the template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this template."}}},"aws-native:cassandra:Keyspace":{"description":"Resource schema for AWS::Cassandra::Keyspace\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewKeyspace = new AwsNative.Cassandra.Keyspace(\"myNewKeyspace\", new()\n    {\n        KeyspaceName = \"MyNewKeyspace\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag1\",\n                Value = \"val1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag2\",\n                Value = \"val2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewKeyspace(ctx, \"myNewKeyspace\", \u0026cassandra.KeyspaceArgs{\n\t\t\tKeyspaceName: pulumi.String(\"MyNewKeyspace\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1\"),\n\t\t\t\t\tValue: pulumi.String(\"val1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2\"),\n\t\t\t\t\tValue: pulumi.String(\"val2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewKeyspace = new aws_native.cassandra.Keyspace(\"myNewKeyspace\", {\n    keyspaceName: \"MyNewKeyspace\",\n    tags: [\n        {\n            key: \"tag1\",\n            value: \"val1\",\n        },\n        {\n            key: \"tag2\",\n            value: \"val2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_keyspace = aws_native.cassandra.Keyspace(\"myNewKeyspace\",\n    keyspace_name=\"MyNewKeyspace\",\n    tags=[\n        {\n            \"key\": \"tag1\",\n            \"value\": \"val1\",\n        },\n        {\n            \"key\": \"tag2\",\n            \"value\": \"val2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var multiRegionKeyspace = new AwsNative.Cassandra.Keyspace(\"multiRegionKeyspace\", new()\n    {\n        KeyspaceName = \"MultiRegionKeyspace\",\n        ReplicationSpecification = new AwsNative.Cassandra.Inputs.KeyspaceReplicationSpecificationArgs\n        {\n            ReplicationStrategy = AwsNative.Cassandra.KeyspaceReplicationSpecificationReplicationStrategy.MultiRegion,\n            RegionList = new[]\n            {\n                AwsNative.Cassandra.KeyspaceRegionListItem.UsEast1,\n                AwsNative.Cassandra.KeyspaceRegionListItem.UsWest2,\n                AwsNative.Cassandra.KeyspaceRegionListItem.EuWest1,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewKeyspace(ctx, \"multiRegionKeyspace\", \u0026cassandra.KeyspaceArgs{\n\t\t\tKeyspaceName: pulumi.String(\"MultiRegionKeyspace\"),\n\t\t\tReplicationSpecification: \u0026cassandra.KeyspaceReplicationSpecificationArgs{\n\t\t\t\tReplicationStrategy: cassandra.KeyspaceReplicationSpecificationReplicationStrategyMultiRegion,\n\t\t\t\tRegionList: cassandra.KeyspaceRegionListItemArray{\n\t\t\t\t\tcassandra.KeyspaceRegionListItemUsEast1,\n\t\t\t\t\tcassandra.KeyspaceRegionListItemUsWest2,\n\t\t\t\t\tcassandra.KeyspaceRegionListItemEuWest1,\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst multiRegionKeyspace = new aws_native.cassandra.Keyspace(\"multiRegionKeyspace\", {\n    keyspaceName: \"MultiRegionKeyspace\",\n    replicationSpecification: {\n        replicationStrategy: aws_native.cassandra.KeyspaceReplicationSpecificationReplicationStrategy.MultiRegion,\n        regionList: [\n            aws_native.cassandra.KeyspaceRegionListItem.UsEast1,\n            aws_native.cassandra.KeyspaceRegionListItem.UsWest2,\n            aws_native.cassandra.KeyspaceRegionListItem.EuWest1,\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmulti_region_keyspace = aws_native.cassandra.Keyspace(\"multiRegionKeyspace\",\n    keyspace_name=\"MultiRegionKeyspace\",\n    replication_specification={\n        \"replication_strategy\": aws_native.cassandra.KeyspaceReplicationSpecificationReplicationStrategy.MULTI_REGION,\n        \"region_list\": [\n            aws_native.cassandra.KeyspaceRegionListItem.US_EAST1,\n            aws_native.cassandra.KeyspaceRegionListItem.US_WEST2,\n            aws_native.cassandra.KeyspaceRegionListItem.EU_WEST1,\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var multiRegionKeyspace = new AwsNative.Cassandra.Keyspace(\"multiRegionKeyspace\", new()\n    {\n        KeyspaceName = \"MultiRegionKeyspace\",\n        ReplicationSpecification = new AwsNative.Cassandra.Inputs.KeyspaceReplicationSpecificationArgs\n        {\n            ReplicationStrategy = AwsNative.Cassandra.KeyspaceReplicationSpecificationReplicationStrategy.MultiRegion,\n            RegionList = new[]\n            {\n                AwsNative.Cassandra.KeyspaceRegionListItem.UsEast1,\n                AwsNative.Cassandra.KeyspaceRegionListItem.UsWest2,\n                AwsNative.Cassandra.KeyspaceRegionListItem.EuWest1,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewKeyspace(ctx, \"multiRegionKeyspace\", \u0026cassandra.KeyspaceArgs{\n\t\t\tKeyspaceName: pulumi.String(\"MultiRegionKeyspace\"),\n\t\t\tReplicationSpecification: \u0026cassandra.KeyspaceReplicationSpecificationArgs{\n\t\t\t\tReplicationStrategy: cassandra.KeyspaceReplicationSpecificationReplicationStrategyMultiRegion,\n\t\t\t\tRegionList: cassandra.KeyspaceRegionListItemArray{\n\t\t\t\t\tcassandra.KeyspaceRegionListItemUsEast1,\n\t\t\t\t\tcassandra.KeyspaceRegionListItemUsWest2,\n\t\t\t\t\tcassandra.KeyspaceRegionListItemEuWest1,\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst multiRegionKeyspace = new aws_native.cassandra.Keyspace(\"multiRegionKeyspace\", {\n    keyspaceName: \"MultiRegionKeyspace\",\n    replicationSpecification: {\n        replicationStrategy: aws_native.cassandra.KeyspaceReplicationSpecificationReplicationStrategy.MultiRegion,\n        regionList: [\n            aws_native.cassandra.KeyspaceRegionListItem.UsEast1,\n            aws_native.cassandra.KeyspaceRegionListItem.UsWest2,\n            aws_native.cassandra.KeyspaceRegionListItem.EuWest1,\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmulti_region_keyspace = aws_native.cassandra.Keyspace(\"multiRegionKeyspace\",\n    keyspace_name=\"MultiRegionKeyspace\",\n    replication_specification={\n        \"replication_strategy\": aws_native.cassandra.KeyspaceReplicationSpecificationReplicationStrategy.MULTI_REGION,\n        \"region_list\": [\n            aws_native.cassandra.KeyspaceRegionListItem.US_EAST1,\n            aws_native.cassandra.KeyspaceRegionListItem.US_WEST2,\n            aws_native.cassandra.KeyspaceRegionListItem.EU_WEST1,\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"clientSideTimestampsEnabled":{"type":"boolean","description":"Indicates whether client-side timestamps are enabled (true) or disabled (false) for all tables in the keyspace. To add a Region to a single-Region keyspace with at least one table, the value must be set to true. After you enabled client-side timestamps for a table, you can’t disable it again."},"keyspaceName":{"type":"string","description":"Name for Cassandra keyspace","replaceOnChanges":true},"replicationSpecification":{"$ref":"#/types/aws-native:cassandra:KeyspaceReplicationSpecification","description":"Specifies the `ReplicationStrategy` of a keyspace. The options are:\n\n- `SINGLE_REGION` for a single Region keyspace (optional) or\n- `MULTI_REGION` for a multi-Region keyspace\n\nIf no `ReplicationStrategy` is provided, the default is `SINGLE_REGION` . If you choose `MULTI_REGION` , you must also provide a `RegionList` with the AWS Regions that the keyspace is replicated in."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","inputProperties":{"clientSideTimestampsEnabled":{"type":"boolean","description":"Indicates whether client-side timestamps are enabled (true) or disabled (false) for all tables in the keyspace. To add a Region to a single-Region keyspace with at least one table, the value must be set to true. After you enabled client-side timestamps for a table, you can’t disable it again."},"keyspaceName":{"type":"string","description":"Name for Cassandra keyspace"},"replicationSpecification":{"$ref":"#/types/aws-native:cassandra:KeyspaceReplicationSpecification","description":"Specifies the `ReplicationStrategy` of a keyspace. The options are:\n\n- `SINGLE_REGION` for a single Region keyspace (optional) or\n- `MULTI_REGION` for a multi-Region keyspace\n\nIf no `ReplicationStrategy` is provided, the default is `SINGLE_REGION` . If you choose `MULTI_REGION` , you must also provide a `RegionList` with the AWS Regions that the keyspace is replicated in."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}}},"aws-native:cassandra:Table":{"description":"Resource schema for AWS::Cassandra::Table\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewTable = new AwsNative.Cassandra.Table(\"myNewTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"Message\",\n                ColumnType = \"ASCII\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myNewTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"Message\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewTable = new aws_native.cassandra.Table(\"myNewTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"Message\",\n        columnType: \"ASCII\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_table = aws_native.cassandra.Table(\"myNewTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"Message\",\n        \"column_type\": \"ASCII\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewTable = new AwsNative.Cassandra.Table(\"myNewTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"Message\",\n                ColumnType = \"ASCII\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myNewTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"Message\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewTable = new aws_native.cassandra.Table(\"myNewTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"Message\",\n        columnType: \"ASCII\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_table = aws_native.cassandra.Table(\"myNewTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"Message\",\n        \"column_type\": \"ASCII\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewTable = new AwsNative.Cassandra.Table(\"myNewTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"id\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        ClusteringKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableClusteringKeyColumnArgs\n            {\n                Column = new AwsNative.Cassandra.Inputs.TableColumnArgs\n                {\n                    ColumnName = \"division\",\n                    ColumnType = \"ASCII\",\n                },\n                OrderBy = AwsNative.Cassandra.TableClusteringKeyColumnOrderBy.Asc,\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"project\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"role\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"pay_scale\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"vacation_hrs\",\n                ColumnType = \"FLOAT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"manager_id\",\n                ColumnType = \"TEXT\",\n            },\n        },\n        BillingMode = new AwsNative.Cassandra.Inputs.TableBillingModeArgs\n        {\n            Mode = AwsNative.Cassandra.TableMode.Provisioned,\n            ProvisionedThroughput = new AwsNative.Cassandra.Inputs.TableProvisionedThroughputArgs\n            {\n                ReadCapacityUnits = 5,\n                WriteCapacityUnits = 5,\n            },\n        },\n        ClientSideTimestampsEnabled = true,\n        DefaultTimeToLive = 63072000,\n        PointInTimeRecoveryEnabled = true,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag1\",\n                Value = \"val1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag2\",\n                Value = \"val2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myNewTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tClusteringKeyColumns: cassandra.TableClusteringKeyColumnArray{\n\t\t\t\t\u0026cassandra.TableClusteringKeyColumnArgs{\n\t\t\t\t\tColumn: \u0026cassandra.TableColumnArgs{\n\t\t\t\t\t\tColumnName: pulumi.String(\"division\"),\n\t\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t\t},\n\t\t\t\t\tOrderBy: cassandra.TableClusteringKeyColumnOrderByAsc,\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"project\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"role\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"pay_scale\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"vacation_hrs\"),\n\t\t\t\t\tColumnType: pulumi.String(\"FLOAT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"manager_id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tBillingMode: \u0026cassandra.TableBillingModeArgs{\n\t\t\t\tMode: cassandra.TableModeProvisioned,\n\t\t\t\tProvisionedThroughput: \u0026cassandra.TableProvisionedThroughputArgs{\n\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t},\n\t\t\t},\n\t\t\tClientSideTimestampsEnabled: pulumi.Bool(true),\n\t\t\tDefaultTimeToLive:           pulumi.Int(63072000),\n\t\t\tPointInTimeRecoveryEnabled:  pulumi.Bool(true),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1\"),\n\t\t\t\t\tValue: pulumi.String(\"val1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2\"),\n\t\t\t\t\tValue: pulumi.String(\"val2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewTable = new aws_native.cassandra.Table(\"myNewTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"id\",\n        columnType: \"ASCII\",\n    }],\n    clusteringKeyColumns: [{\n        column: {\n            columnName: \"division\",\n            columnType: \"ASCII\",\n        },\n        orderBy: aws_native.cassandra.TableClusteringKeyColumnOrderBy.Asc,\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"project\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"role\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"pay_scale\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"vacation_hrs\",\n            columnType: \"FLOAT\",\n        },\n        {\n            columnName: \"manager_id\",\n            columnType: \"TEXT\",\n        },\n    ],\n    billingMode: {\n        mode: aws_native.cassandra.TableMode.Provisioned,\n        provisionedThroughput: {\n            readCapacityUnits: 5,\n            writeCapacityUnits: 5,\n        },\n    },\n    clientSideTimestampsEnabled: true,\n    defaultTimeToLive: 63072000,\n    pointInTimeRecoveryEnabled: true,\n    tags: [\n        {\n            key: \"tag1\",\n            value: \"val1\",\n        },\n        {\n            key: \"tag2\",\n            value: \"val2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_table = aws_native.cassandra.Table(\"myNewTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"id\",\n        \"column_type\": \"ASCII\",\n    }],\n    clustering_key_columns=[{\n        \"column\": {\n            \"column_name\": \"division\",\n            \"column_type\": \"ASCII\",\n        },\n        \"order_by\": aws_native.cassandra.TableClusteringKeyColumnOrderBy.ASC,\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"project\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"role\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"pay_scale\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"vacation_hrs\",\n            \"column_type\": \"FLOAT\",\n        },\n        {\n            \"column_name\": \"manager_id\",\n            \"column_type\": \"TEXT\",\n        },\n    ],\n    billing_mode={\n        \"mode\": aws_native.cassandra.TableMode.PROVISIONED,\n        \"provisioned_throughput\": {\n            \"read_capacity_units\": 5,\n            \"write_capacity_units\": 5,\n        },\n    },\n    client_side_timestamps_enabled=True,\n    default_time_to_live=63072000,\n    point_in_time_recovery_enabled=True,\n    tags=[\n        {\n            \"key\": \"tag1\",\n            \"value\": \"val1\",\n        },\n        {\n            \"key\": \"tag2\",\n            \"value\": \"val2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewTable = new AwsNative.Cassandra.Table(\"myNewTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"id\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        ClusteringKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableClusteringKeyColumnArgs\n            {\n                Column = new AwsNative.Cassandra.Inputs.TableColumnArgs\n                {\n                    ColumnName = \"division\",\n                    ColumnType = \"ASCII\",\n                },\n                OrderBy = AwsNative.Cassandra.TableClusteringKeyColumnOrderBy.Asc,\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"project\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"role\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"pay_scale\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"vacation_hrs\",\n                ColumnType = \"FLOAT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"manager_id\",\n                ColumnType = \"TEXT\",\n            },\n        },\n        BillingMode = new AwsNative.Cassandra.Inputs.TableBillingModeArgs\n        {\n            Mode = AwsNative.Cassandra.TableMode.Provisioned,\n            ProvisionedThroughput = new AwsNative.Cassandra.Inputs.TableProvisionedThroughputArgs\n            {\n                ReadCapacityUnits = 5,\n                WriteCapacityUnits = 5,\n            },\n        },\n        ClientSideTimestampsEnabled = true,\n        DefaultTimeToLive = 63072000,\n        PointInTimeRecoveryEnabled = true,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag1\",\n                Value = \"val1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag2\",\n                Value = \"val2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myNewTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tClusteringKeyColumns: cassandra.TableClusteringKeyColumnArray{\n\t\t\t\t\u0026cassandra.TableClusteringKeyColumnArgs{\n\t\t\t\t\tColumn: \u0026cassandra.TableColumnArgs{\n\t\t\t\t\t\tColumnName: pulumi.String(\"division\"),\n\t\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t\t},\n\t\t\t\t\tOrderBy: cassandra.TableClusteringKeyColumnOrderByAsc,\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"project\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"role\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"pay_scale\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"vacation_hrs\"),\n\t\t\t\t\tColumnType: pulumi.String(\"FLOAT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"manager_id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tBillingMode: \u0026cassandra.TableBillingModeArgs{\n\t\t\t\tMode: cassandra.TableModeProvisioned,\n\t\t\t\tProvisionedThroughput: \u0026cassandra.TableProvisionedThroughputArgs{\n\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t},\n\t\t\t},\n\t\t\tClientSideTimestampsEnabled: pulumi.Bool(true),\n\t\t\tDefaultTimeToLive:           pulumi.Int(63072000),\n\t\t\tPointInTimeRecoveryEnabled:  pulumi.Bool(true),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1\"),\n\t\t\t\t\tValue: pulumi.String(\"val1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2\"),\n\t\t\t\t\tValue: pulumi.String(\"val2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewTable = new aws_native.cassandra.Table(\"myNewTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"id\",\n        columnType: \"ASCII\",\n    }],\n    clusteringKeyColumns: [{\n        column: {\n            columnName: \"division\",\n            columnType: \"ASCII\",\n        },\n        orderBy: aws_native.cassandra.TableClusteringKeyColumnOrderBy.Asc,\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"project\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"role\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"pay_scale\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"vacation_hrs\",\n            columnType: \"FLOAT\",\n        },\n        {\n            columnName: \"manager_id\",\n            columnType: \"TEXT\",\n        },\n    ],\n    billingMode: {\n        mode: aws_native.cassandra.TableMode.Provisioned,\n        provisionedThroughput: {\n            readCapacityUnits: 5,\n            writeCapacityUnits: 5,\n        },\n    },\n    clientSideTimestampsEnabled: true,\n    defaultTimeToLive: 63072000,\n    pointInTimeRecoveryEnabled: true,\n    tags: [\n        {\n            key: \"tag1\",\n            value: \"val1\",\n        },\n        {\n            key: \"tag2\",\n            value: \"val2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_table = aws_native.cassandra.Table(\"myNewTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"id\",\n        \"column_type\": \"ASCII\",\n    }],\n    clustering_key_columns=[{\n        \"column\": {\n            \"column_name\": \"division\",\n            \"column_type\": \"ASCII\",\n        },\n        \"order_by\": aws_native.cassandra.TableClusteringKeyColumnOrderBy.ASC,\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"project\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"role\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"pay_scale\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"vacation_hrs\",\n            \"column_type\": \"FLOAT\",\n        },\n        {\n            \"column_name\": \"manager_id\",\n            \"column_type\": \"TEXT\",\n        },\n    ],\n    billing_mode={\n        \"mode\": aws_native.cassandra.TableMode.PROVISIONED,\n        \"provisioned_throughput\": {\n            \"read_capacity_units\": 5,\n            \"write_capacity_units\": 5,\n        },\n    },\n    client_side_timestamps_enabled=True,\n    default_time_to_live=63072000,\n    point_in_time_recovery_enabled=True,\n    tags=[\n        {\n            \"key\": \"tag1\",\n            \"value\": \"val1\",\n        },\n        {\n            \"key\": \"tag2\",\n            \"value\": \"val2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewTable = new AwsNative.Cassandra.Table(\"myNewTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"id\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        ClusteringKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableClusteringKeyColumnArgs\n            {\n                Column = new AwsNative.Cassandra.Inputs.TableColumnArgs\n                {\n                    ColumnName = \"division\",\n                    ColumnType = \"ASCII\",\n                },\n                OrderBy = AwsNative.Cassandra.TableClusteringKeyColumnOrderBy.Asc,\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"project\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"role\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"pay_scale\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"vacation_hrs\",\n                ColumnType = \"FLOAT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"manager_id\",\n                ColumnType = \"TEXT\",\n            },\n        },\n        BillingMode = new AwsNative.Cassandra.Inputs.TableBillingModeArgs\n        {\n            Mode = AwsNative.Cassandra.TableMode.Provisioned,\n            ProvisionedThroughput = new AwsNative.Cassandra.Inputs.TableProvisionedThroughputArgs\n            {\n                ReadCapacityUnits = 5,\n                WriteCapacityUnits = 5,\n            },\n        },\n        DefaultTimeToLive = 63072000,\n        EncryptionSpecification = new AwsNative.Cassandra.Inputs.TableEncryptionSpecificationArgs\n        {\n            EncryptionType = AwsNative.Cassandra.TableEncryptionType.CustomerManagedKmsKey,\n            KmsKeyIdentifier = \"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\",\n        },\n        PointInTimeRecoveryEnabled = true,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag1\",\n                Value = \"val1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag2\",\n                Value = \"val2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myNewTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tClusteringKeyColumns: cassandra.TableClusteringKeyColumnArray{\n\t\t\t\t\u0026cassandra.TableClusteringKeyColumnArgs{\n\t\t\t\t\tColumn: \u0026cassandra.TableColumnArgs{\n\t\t\t\t\t\tColumnName: pulumi.String(\"division\"),\n\t\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t\t},\n\t\t\t\t\tOrderBy: cassandra.TableClusteringKeyColumnOrderByAsc,\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"project\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"role\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"pay_scale\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"vacation_hrs\"),\n\t\t\t\t\tColumnType: pulumi.String(\"FLOAT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"manager_id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tBillingMode: \u0026cassandra.TableBillingModeArgs{\n\t\t\t\tMode: cassandra.TableModeProvisioned,\n\t\t\t\tProvisionedThroughput: \u0026cassandra.TableProvisionedThroughputArgs{\n\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t},\n\t\t\t},\n\t\t\tDefaultTimeToLive: pulumi.Int(63072000),\n\t\t\tEncryptionSpecification: \u0026cassandra.TableEncryptionSpecificationArgs{\n\t\t\t\tEncryptionType:   cassandra.TableEncryptionTypeCustomerManagedKmsKey,\n\t\t\t\tKmsKeyIdentifier: pulumi.String(\"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\"),\n\t\t\t},\n\t\t\tPointInTimeRecoveryEnabled: pulumi.Bool(true),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1\"),\n\t\t\t\t\tValue: pulumi.String(\"val1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2\"),\n\t\t\t\t\tValue: pulumi.String(\"val2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewTable = new aws_native.cassandra.Table(\"myNewTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"id\",\n        columnType: \"ASCII\",\n    }],\n    clusteringKeyColumns: [{\n        column: {\n            columnName: \"division\",\n            columnType: \"ASCII\",\n        },\n        orderBy: aws_native.cassandra.TableClusteringKeyColumnOrderBy.Asc,\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"project\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"role\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"pay_scale\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"vacation_hrs\",\n            columnType: \"FLOAT\",\n        },\n        {\n            columnName: \"manager_id\",\n            columnType: \"TEXT\",\n        },\n    ],\n    billingMode: {\n        mode: aws_native.cassandra.TableMode.Provisioned,\n        provisionedThroughput: {\n            readCapacityUnits: 5,\n            writeCapacityUnits: 5,\n        },\n    },\n    defaultTimeToLive: 63072000,\n    encryptionSpecification: {\n        encryptionType: aws_native.cassandra.TableEncryptionType.CustomerManagedKmsKey,\n        kmsKeyIdentifier: \"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\",\n    },\n    pointInTimeRecoveryEnabled: true,\n    tags: [\n        {\n            key: \"tag1\",\n            value: \"val1\",\n        },\n        {\n            key: \"tag2\",\n            value: \"val2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_table = aws_native.cassandra.Table(\"myNewTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"id\",\n        \"column_type\": \"ASCII\",\n    }],\n    clustering_key_columns=[{\n        \"column\": {\n            \"column_name\": \"division\",\n            \"column_type\": \"ASCII\",\n        },\n        \"order_by\": aws_native.cassandra.TableClusteringKeyColumnOrderBy.ASC,\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"project\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"role\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"pay_scale\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"vacation_hrs\",\n            \"column_type\": \"FLOAT\",\n        },\n        {\n            \"column_name\": \"manager_id\",\n            \"column_type\": \"TEXT\",\n        },\n    ],\n    billing_mode={\n        \"mode\": aws_native.cassandra.TableMode.PROVISIONED,\n        \"provisioned_throughput\": {\n            \"read_capacity_units\": 5,\n            \"write_capacity_units\": 5,\n        },\n    },\n    default_time_to_live=63072000,\n    encryption_specification={\n        \"encryption_type\": aws_native.cassandra.TableEncryptionType.CUSTOMER_MANAGED_KMS_KEY,\n        \"kms_key_identifier\": \"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\",\n    },\n    point_in_time_recovery_enabled=True,\n    tags=[\n        {\n            \"key\": \"tag1\",\n            \"value\": \"val1\",\n        },\n        {\n            \"key\": \"tag2\",\n            \"value\": \"val2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNewTable = new AwsNative.Cassandra.Table(\"myNewTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"id\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        ClusteringKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableClusteringKeyColumnArgs\n            {\n                Column = new AwsNative.Cassandra.Inputs.TableColumnArgs\n                {\n                    ColumnName = \"division\",\n                    ColumnType = \"ASCII\",\n                },\n                OrderBy = AwsNative.Cassandra.TableClusteringKeyColumnOrderBy.Asc,\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"project\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"role\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"pay_scale\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"vacation_hrs\",\n                ColumnType = \"FLOAT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"manager_id\",\n                ColumnType = \"TEXT\",\n            },\n        },\n        BillingMode = new AwsNative.Cassandra.Inputs.TableBillingModeArgs\n        {\n            Mode = AwsNative.Cassandra.TableMode.Provisioned,\n            ProvisionedThroughput = new AwsNative.Cassandra.Inputs.TableProvisionedThroughputArgs\n            {\n                ReadCapacityUnits = 5,\n                WriteCapacityUnits = 5,\n            },\n        },\n        DefaultTimeToLive = 63072000,\n        EncryptionSpecification = new AwsNative.Cassandra.Inputs.TableEncryptionSpecificationArgs\n        {\n            EncryptionType = AwsNative.Cassandra.TableEncryptionType.CustomerManagedKmsKey,\n            KmsKeyIdentifier = \"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\",\n        },\n        PointInTimeRecoveryEnabled = true,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag1\",\n                Value = \"val1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tag2\",\n                Value = \"val2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myNewTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tClusteringKeyColumns: cassandra.TableClusteringKeyColumnArray{\n\t\t\t\t\u0026cassandra.TableClusteringKeyColumnArgs{\n\t\t\t\t\tColumn: \u0026cassandra.TableColumnArgs{\n\t\t\t\t\t\tColumnName: pulumi.String(\"division\"),\n\t\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t\t},\n\t\t\t\t\tOrderBy: cassandra.TableClusteringKeyColumnOrderByAsc,\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"project\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"role\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"pay_scale\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"vacation_hrs\"),\n\t\t\t\t\tColumnType: pulumi.String(\"FLOAT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"manager_id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tBillingMode: \u0026cassandra.TableBillingModeArgs{\n\t\t\t\tMode: cassandra.TableModeProvisioned,\n\t\t\t\tProvisionedThroughput: \u0026cassandra.TableProvisionedThroughputArgs{\n\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t},\n\t\t\t},\n\t\t\tDefaultTimeToLive: pulumi.Int(63072000),\n\t\t\tEncryptionSpecification: \u0026cassandra.TableEncryptionSpecificationArgs{\n\t\t\t\tEncryptionType:   cassandra.TableEncryptionTypeCustomerManagedKmsKey,\n\t\t\t\tKmsKeyIdentifier: pulumi.String(\"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\"),\n\t\t\t},\n\t\t\tPointInTimeRecoveryEnabled: pulumi.Bool(true),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1\"),\n\t\t\t\t\tValue: pulumi.String(\"val1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2\"),\n\t\t\t\t\tValue: pulumi.String(\"val2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNewTable = new aws_native.cassandra.Table(\"myNewTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"id\",\n        columnType: \"ASCII\",\n    }],\n    clusteringKeyColumns: [{\n        column: {\n            columnName: \"division\",\n            columnType: \"ASCII\",\n        },\n        orderBy: aws_native.cassandra.TableClusteringKeyColumnOrderBy.Asc,\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"project\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"role\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"pay_scale\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"vacation_hrs\",\n            columnType: \"FLOAT\",\n        },\n        {\n            columnName: \"manager_id\",\n            columnType: \"TEXT\",\n        },\n    ],\n    billingMode: {\n        mode: aws_native.cassandra.TableMode.Provisioned,\n        provisionedThroughput: {\n            readCapacityUnits: 5,\n            writeCapacityUnits: 5,\n        },\n    },\n    defaultTimeToLive: 63072000,\n    encryptionSpecification: {\n        encryptionType: aws_native.cassandra.TableEncryptionType.CustomerManagedKmsKey,\n        kmsKeyIdentifier: \"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\",\n    },\n    pointInTimeRecoveryEnabled: true,\n    tags: [\n        {\n            key: \"tag1\",\n            value: \"val1\",\n        },\n        {\n            key: \"tag2\",\n            value: \"val2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_new_table = aws_native.cassandra.Table(\"myNewTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"id\",\n        \"column_type\": \"ASCII\",\n    }],\n    clustering_key_columns=[{\n        \"column\": {\n            \"column_name\": \"division\",\n            \"column_type\": \"ASCII\",\n        },\n        \"order_by\": aws_native.cassandra.TableClusteringKeyColumnOrderBy.ASC,\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"project\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"role\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"pay_scale\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"vacation_hrs\",\n            \"column_type\": \"FLOAT\",\n        },\n        {\n            \"column_name\": \"manager_id\",\n            \"column_type\": \"TEXT\",\n        },\n    ],\n    billing_mode={\n        \"mode\": aws_native.cassandra.TableMode.PROVISIONED,\n        \"provisioned_throughput\": {\n            \"read_capacity_units\": 5,\n            \"write_capacity_units\": 5,\n        },\n    },\n    default_time_to_live=63072000,\n    encryption_specification={\n        \"encryption_type\": aws_native.cassandra.TableEncryptionType.CUSTOMER_MANAGED_KMS_KEY,\n        \"kms_key_identifier\": \"arn:aws:kms:eu-west-1:5555555555555:key/11111111-1111-111-1111-111111111111\",\n    },\n    point_in_time_recovery_enabled=True,\n    tags=[\n        {\n            \"key\": \"tag1\",\n            \"value\": \"val1\",\n        },\n        {\n            \"key\": \"tag2\",\n            \"value\": \"val2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTable = new AwsNative.Cassandra.Table(\"myTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"Message\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"Message\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTable = new aws_native.cassandra.Table(\"myTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"Message\",\n        columnType: \"ASCII\",\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_table = aws_native.cassandra.Table(\"myTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"Message\",\n        \"column_type\": \"ASCII\",\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTable = new AwsNative.Cassandra.Table(\"myTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"Message\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"project\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"role\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"pay_scale\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"vacation_hrs\",\n                ColumnType = \"FLOAT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"manager_id\",\n                ColumnType = \"TEXT\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"Message\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"project\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"role\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"pay_scale\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"vacation_hrs\"),\n\t\t\t\t\tColumnType: pulumi.String(\"FLOAT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"manager_id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTable = new aws_native.cassandra.Table(\"myTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"Message\",\n        columnType: \"ASCII\",\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"project\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"role\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"pay_scale\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"vacation_hrs\",\n            columnType: \"FLOAT\",\n        },\n        {\n            columnName: \"manager_id\",\n            columnType: \"TEXT\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_table = aws_native.cassandra.Table(\"myTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"Message\",\n        \"column_type\": \"ASCII\",\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"project\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"role\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"pay_scale\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"vacation_hrs\",\n            \"column_type\": \"FLOAT\",\n        },\n        {\n            \"column_name\": \"manager_id\",\n            \"column_type\": \"TEXT\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTable = new AwsNative.Cassandra.Table(\"myTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"Message\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"Message\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTable = new aws_native.cassandra.Table(\"myTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"Message\",\n        columnType: \"ASCII\",\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_table = aws_native.cassandra.Table(\"myTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"Message\",\n        \"column_type\": \"ASCII\",\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTable = new AwsNative.Cassandra.Table(\"myTable\", new()\n    {\n        KeyspaceName = \"my_keyspace\",\n        TableName = \"my_table\",\n        PartitionKeyColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"Message\",\n                ColumnType = \"ASCII\",\n            },\n        },\n        RegularColumns = new[]\n        {\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"name\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"region\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"project\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"role\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"pay_scale\",\n                ColumnType = \"TEXT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"vacation_hrs\",\n                ColumnType = \"FLOAT\",\n            },\n            new AwsNative.Cassandra.Inputs.TableColumnArgs\n            {\n                ColumnName = \"manager_id\",\n                ColumnType = \"TEXT\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cassandra\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cassandra.NewTable(ctx, \"myTable\", \u0026cassandra.TableArgs{\n\t\t\tKeyspaceName: pulumi.String(\"my_keyspace\"),\n\t\t\tTableName:    pulumi.String(\"my_table\"),\n\t\t\tPartitionKeyColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"Message\"),\n\t\t\t\t\tColumnType: pulumi.String(\"ASCII\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRegularColumns: cassandra.TableColumnArray{\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"name\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"region\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"project\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"role\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"pay_scale\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"vacation_hrs\"),\n\t\t\t\t\tColumnType: pulumi.String(\"FLOAT\"),\n\t\t\t\t},\n\t\t\t\t\u0026cassandra.TableColumnArgs{\n\t\t\t\t\tColumnName: pulumi.String(\"manager_id\"),\n\t\t\t\t\tColumnType: pulumi.String(\"TEXT\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTable = new aws_native.cassandra.Table(\"myTable\", {\n    keyspaceName: \"my_keyspace\",\n    tableName: \"my_table\",\n    partitionKeyColumns: [{\n        columnName: \"Message\",\n        columnType: \"ASCII\",\n    }],\n    regularColumns: [\n        {\n            columnName: \"name\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"region\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"project\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"role\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"pay_scale\",\n            columnType: \"TEXT\",\n        },\n        {\n            columnName: \"vacation_hrs\",\n            columnType: \"FLOAT\",\n        },\n        {\n            columnName: \"manager_id\",\n            columnType: \"TEXT\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_table = aws_native.cassandra.Table(\"myTable\",\n    keyspace_name=\"my_keyspace\",\n    table_name=\"my_table\",\n    partition_key_columns=[{\n        \"column_name\": \"Message\",\n        \"column_type\": \"ASCII\",\n    }],\n    regular_columns=[\n        {\n            \"column_name\": \"name\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"region\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"project\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"role\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"pay_scale\",\n            \"column_type\": \"TEXT\",\n        },\n        {\n            \"column_name\": \"vacation_hrs\",\n            \"column_type\": \"FLOAT\",\n        },\n        {\n            \"column_name\": \"manager_id\",\n            \"column_type\": \"TEXT\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"autoScalingSpecifications":{"$ref":"#/types/aws-native:cassandra:TableAutoScalingSpecification","description":"The optional auto scaling capacity settings for a table in provisioned capacity mode."},"billingMode":{"$ref":"#/types/aws-native:cassandra:TableBillingMode","description":"The billing mode for the table, which determines how you'll be charged for reads and writes:\n\n- *On-demand mode* (default) - You pay based on the actual reads and writes your application performs.\n- *Provisioned mode* - Lets you specify the number of reads and writes per second that you need for your application.\n\nIf you don't specify a value for this property, then the table will use on-demand mode."},"cdcSpecification":{"$ref":"#/types/aws-native:cassandra:TableCdcSpecification","description":"The settings for the CDC stream of a table. For more information about CDC streams, see [Working with change data capture (CDC) streams in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/cdc.html) in the *Amazon Keyspaces Developer Guide* ."},"clientSideTimestampsEnabled":{"type":"boolean","description":"Indicates whether client side timestamps are enabled (true) or disabled (false) on the table. False by default, once it is enabled it cannot be disabled again.","replaceOnChanges":true},"clusteringKeyColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableClusteringKeyColumn"},"description":"Clustering key columns of the table","replaceOnChanges":true},"defaultTimeToLive":{"type":"integer","description":"Default TTL (Time To Live) in seconds, where zero is disabled. If the value is greater than zero, TTL is enabled for the entire table and an expiration timestamp is added to each column."},"encryptionSpecification":{"$ref":"#/types/aws-native:cassandra:TableEncryptionSpecification","description":"The encryption at rest options for the table.\n\n- *AWS owned key* (default) - The key is owned by Amazon Keyspaces .\n- *Customer managed key* - The key is stored in your account and is created, owned, and managed by you.\n\n\u003e If you choose encryption with a customer managed key, you must specify a valid customer managed KMS key with permissions granted to Amazon Keyspaces.\n\nFor more information, see [Encryption at rest in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/EncryptionAtRest.html) in the *Amazon Keyspaces Developer Guide* ."},"keyspaceName":{"type":"string","description":"Name for Cassandra keyspace","replaceOnChanges":true},"partitionKeyColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableColumn"},"description":"Partition key columns of the table","replaceOnChanges":true},"pointInTimeRecoveryEnabled":{"type":"boolean","description":"Indicates whether point in time recovery is enabled (true) or disabled (false) on the table"},"regularColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableColumn"},"description":"Non-key columns of the table"},"replicaSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableReplicaSpecification"},"description":"The AWS Region specific settings of a multi-Region table.\n\nFor a multi-Region table, you can configure the table's read capacity differently per AWS Region. You can do this by configuring the following parameters.\n\n- `region` : The Region where these settings are applied. (Required)\n- `readCapacityUnits` : The provisioned read capacity units. (Optional)\n- `readCapacityAutoScaling` : The read capacity auto scaling settings for the table. (Optional)"},"tableName":{"type":"string","description":"Name for Cassandra table","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"},"warmThroughput":{"$ref":"#/types/aws-native:cassandra:TableWarmThroughput"}},"type":"object","required":["keyspaceName","partitionKeyColumns"],"inputProperties":{"autoScalingSpecifications":{"$ref":"#/types/aws-native:cassandra:TableAutoScalingSpecification","description":"The optional auto scaling capacity settings for a table in provisioned capacity mode."},"billingMode":{"$ref":"#/types/aws-native:cassandra:TableBillingMode","description":"The billing mode for the table, which determines how you'll be charged for reads and writes:\n\n- *On-demand mode* (default) - You pay based on the actual reads and writes your application performs.\n- *Provisioned mode* - Lets you specify the number of reads and writes per second that you need for your application.\n\nIf you don't specify a value for this property, then the table will use on-demand mode."},"cdcSpecification":{"$ref":"#/types/aws-native:cassandra:TableCdcSpecification","description":"The settings for the CDC stream of a table. For more information about CDC streams, see [Working with change data capture (CDC) streams in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/cdc.html) in the *Amazon Keyspaces Developer Guide* ."},"clientSideTimestampsEnabled":{"type":"boolean","description":"Indicates whether client side timestamps are enabled (true) or disabled (false) on the table. False by default, once it is enabled it cannot be disabled again."},"clusteringKeyColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableClusteringKeyColumn"},"description":"Clustering key columns of the table"},"defaultTimeToLive":{"type":"integer","description":"Default TTL (Time To Live) in seconds, where zero is disabled. If the value is greater than zero, TTL is enabled for the entire table and an expiration timestamp is added to each column."},"encryptionSpecification":{"$ref":"#/types/aws-native:cassandra:TableEncryptionSpecification","description":"The encryption at rest options for the table.\n\n- *AWS owned key* (default) - The key is owned by Amazon Keyspaces .\n- *Customer managed key* - The key is stored in your account and is created, owned, and managed by you.\n\n\u003e If you choose encryption with a customer managed key, you must specify a valid customer managed KMS key with permissions granted to Amazon Keyspaces.\n\nFor more information, see [Encryption at rest in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/EncryptionAtRest.html) in the *Amazon Keyspaces Developer Guide* ."},"keyspaceName":{"type":"string","description":"Name for Cassandra keyspace"},"partitionKeyColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableColumn"},"description":"Partition key columns of the table"},"pointInTimeRecoveryEnabled":{"type":"boolean","description":"Indicates whether point in time recovery is enabled (true) or disabled (false) on the table"},"regularColumns":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableColumn"},"description":"Non-key columns of the table"},"replicaSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TableReplicaSpecification"},"description":"The AWS Region specific settings of a multi-Region table.\n\nFor a multi-Region table, you can configure the table's read capacity differently per AWS Region. You can do this by configuring the following parameters.\n\n- `region` : The Region where these settings are applied. (Required)\n- `readCapacityUnits` : The provisioned read capacity units. (Optional)\n- `readCapacityAutoScaling` : The read capacity auto scaling settings for the table. (Optional)"},"tableName":{"type":"string","description":"Name for Cassandra table"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"},"warmThroughput":{"$ref":"#/types/aws-native:cassandra:TableWarmThroughput"}},"requiredInputs":["keyspaceName","partitionKeyColumns"]},"aws-native:cassandra:Type":{"description":"Resource schema for AWS::Cassandra::Type","properties":{"directParentTypes":{"type":"array","items":{"type":"string"},"description":"List of parent User-Defined Types that directly reference the User-Defined Type in their fields."},"directReferringTables":{"type":"array","items":{"type":"string"},"description":"List of Tables that directly reference the User-Defined Type in their columns."},"fields":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TypeField"},"description":"Field definitions of the User-Defined Type","replaceOnChanges":true},"keyspaceArn":{"type":"string","description":"ARN of the Keyspace which contains the User-Defined Type."},"keyspaceName":{"type":"string","description":"Name of the Keyspace which contains the User-Defined Type.","replaceOnChanges":true},"lastModifiedTimestamp":{"type":"number","description":"Timestamp of the last time the User-Defined Type's meta data was modified."},"maxNestingDepth":{"type":"integer","description":"Maximum nesting depth of the User-Defined Type across the field types."},"typeName":{"type":"string","description":"Name of the User-Defined Type.","replaceOnChanges":true}},"type":"object","required":["directParentTypes","directReferringTables","fields","keyspaceArn","keyspaceName","lastModifiedTimestamp","maxNestingDepth","typeName"],"inputProperties":{"fields":{"type":"array","items":{"$ref":"#/types/aws-native:cassandra:TypeField"},"description":"Field definitions of the User-Defined Type"},"keyspaceName":{"type":"string","description":"Name of the Keyspace which contains the User-Defined Type."},"typeName":{"type":"string","description":"Name of the User-Defined Type."}},"requiredInputs":["fields","keyspaceName"]},"aws-native:ce:AnomalyMonitor":{"description":"AWS Cost Anomaly Detection leverages advanced Machine Learning technologies to identify anomalous spend and root causes, so you can quickly take action. You can use Cost Anomaly Detection by creating monitor.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalyServiceMonitor = new AwsNative.Ce.AnomalyMonitor(\"anomalyServiceMonitor\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Dimensional,\n        MonitorDimension = AwsNative.Ce.AnomalyMonitorMonitorDimension.Service,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"anomalyServiceMonitor\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:      pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:      ce.AnomalyMonitorMonitorTypeDimensional,\n\t\t\tMonitorDimension: ce.AnomalyMonitorMonitorDimensionService,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalyServiceMonitor = new aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Dimensional,\n    monitorDimension: aws_native.ce.AnomalyMonitorMonitorDimension.Service,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_service_monitor = aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.DIMENSIONAL,\n    monitor_dimension=aws_native.ce.AnomalyMonitorMonitorDimension.SERVICE)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalyServiceMonitor = new AwsNative.Ce.AnomalyMonitor(\"anomalyServiceMonitor\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Dimensional,\n        MonitorDimension = AwsNative.Ce.AnomalyMonitorMonitorDimension.Service,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"anomalyServiceMonitor\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:      pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:      ce.AnomalyMonitorMonitorTypeDimensional,\n\t\t\tMonitorDimension: ce.AnomalyMonitorMonitorDimensionService,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalyServiceMonitor = new aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Dimensional,\n    monitorDimension: aws_native.ce.AnomalyMonitorMonitorDimension.Service,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_service_monitor = aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.DIMENSIONAL,\n    monitor_dimension=aws_native.ce.AnomalyMonitorMonitorDimension.SERVICE)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithTags = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithTags\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithTags\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithTags = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithTags\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_tags = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithTags\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithTags = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithTags\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithTags\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithTags = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithTags\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_tags = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithTags\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Tags\\\" : { \\\"Key\\\" : \\\"Tag Key\\\", \\\"Values\\\" : [ \\\"TagValue1\\\", \\\"TagValue2\\\" ] } }\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithCC = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithCC\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithCC\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithCC = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithCC\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_cc = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithCC\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithCC = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithCC\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithCC\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithCC = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithCC\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_cc = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithCC\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"CostCategories\\\" : { \\\"Key\\\" : \\\"CostCategoryKey\\\", \\\"Values\\\" : [ \\\"CostCategoryValue\\\" ] } }\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithLinkedAccount = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithLinkedAccount\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithLinkedAccount = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_linked_account = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithLinkedAccount = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithLinkedAccount\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithLinkedAccount = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_linked_account = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithLinkedAccount = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n    });\n\n    var anomalyServiceMonitor = new AwsNative.Ce.AnomalyMonitor(\"anomalyServiceMonitor\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Dimensional,\n        MonitorDimension = AwsNative.Ce.AnomalyMonitorMonitorDimension.Service,\n    });\n\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        Threshold = 100,\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[]\n        {\n            customAnomalyMonitorWithLinkedAccount.Id,\n            anomalyServiceMonitor.Id,\n        },\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomAnomalyMonitorWithLinkedAccount, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithLinkedAccount\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tanomalyServiceMonitor, err := ce.NewAnomalyMonitor(ctx, \"anomalyServiceMonitor\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:      pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:      ce.AnomalyMonitorMonitorTypeDimensional,\n\t\t\tMonitorDimension: ce.AnomalyMonitorMonitorDimensionService,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName: pulumi.String(\"SubscriptionName\"),\n\t\t\tThreshold:        pulumi.Float64(100),\n\t\t\tFrequency:        ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList: pulumi.StringArray{\n\t\t\t\tcustomAnomalyMonitorWithLinkedAccount.ID(),\n\t\t\t\tanomalyServiceMonitor.ID(),\n\t\t\t},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithLinkedAccount = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n});\nconst anomalyServiceMonitor = new aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Dimensional,\n    monitorDimension: aws_native.ce.AnomalyMonitorMonitorDimension.Service,\n});\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    threshold: 100,\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [\n        customAnomalyMonitorWithLinkedAccount.id,\n        anomalyServiceMonitor.id,\n    ],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_linked_account = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\")\nanomaly_service_monitor = aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.DIMENSIONAL,\n    monitor_dimension=aws_native.ce.AnomalyMonitorMonitorDimension.SERVICE)\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold=100,\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[\n        custom_anomaly_monitor_with_linked_account.id,\n        anomaly_service_monitor.id,\n    ],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithLinkedAccount = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n    });\n\n    var anomalyServiceMonitor = new AwsNative.Ce.AnomalyMonitor(\"anomalyServiceMonitor\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Dimensional,\n        MonitorDimension = AwsNative.Ce.AnomalyMonitorMonitorDimension.Service,\n    });\n\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        Threshold = 100,\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[]\n        {\n            customAnomalyMonitorWithLinkedAccount.Id,\n            anomalyServiceMonitor.Id,\n        },\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomAnomalyMonitorWithLinkedAccount, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithLinkedAccount\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tanomalyServiceMonitor, err := ce.NewAnomalyMonitor(ctx, \"anomalyServiceMonitor\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:      pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:      ce.AnomalyMonitorMonitorTypeDimensional,\n\t\t\tMonitorDimension: ce.AnomalyMonitorMonitorDimensionService,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName: pulumi.String(\"SubscriptionName\"),\n\t\t\tThreshold:        pulumi.Float64(100),\n\t\t\tFrequency:        ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList: pulumi.StringArray{\n\t\t\t\tcustomAnomalyMonitorWithLinkedAccount.ID(),\n\t\t\t\tanomalyServiceMonitor.ID(),\n\t\t\t},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithLinkedAccount = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n});\nconst anomalyServiceMonitor = new aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Dimensional,\n    monitorDimension: aws_native.ce.AnomalyMonitorMonitorDimension.Service,\n});\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    threshold: 100,\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [\n        customAnomalyMonitorWithLinkedAccount.id,\n        anomalyServiceMonitor.id,\n    ],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_linked_account = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\")\nanomaly_service_monitor = aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.DIMENSIONAL,\n    monitor_dimension=aws_native.ce.AnomalyMonitorMonitorDimension.SERVICE)\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold=100,\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[\n        custom_anomaly_monitor_with_linked_account.id,\n        anomaly_service_monitor.id,\n    ],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithLinkedAccount = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n    });\n\n    var anomalyServiceMonitor = new AwsNative.Ce.AnomalyMonitor(\"anomalyServiceMonitor\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Dimensional,\n        MonitorDimension = AwsNative.Ce.AnomalyMonitorMonitorDimension.Service,\n    });\n\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        Threshold = 100,\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[]\n        {\n            customAnomalyMonitorWithLinkedAccount.Id,\n            anomalyServiceMonitor.Id,\n        },\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomAnomalyMonitorWithLinkedAccount, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithLinkedAccount\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tanomalyServiceMonitor, err := ce.NewAnomalyMonitor(ctx, \"anomalyServiceMonitor\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:      pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:      ce.AnomalyMonitorMonitorTypeDimensional,\n\t\t\tMonitorDimension: ce.AnomalyMonitorMonitorDimensionService,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName: pulumi.String(\"SubscriptionName\"),\n\t\t\tThreshold:        pulumi.Float64(100),\n\t\t\tFrequency:        ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList: pulumi.StringArray{\n\t\t\t\tcustomAnomalyMonitorWithLinkedAccount.ID(),\n\t\t\t\tanomalyServiceMonitor.ID(),\n\t\t\t},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithLinkedAccount = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n});\nconst anomalyServiceMonitor = new aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Dimensional,\n    monitorDimension: aws_native.ce.AnomalyMonitorMonitorDimension.Service,\n});\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    threshold: 100,\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [\n        customAnomalyMonitorWithLinkedAccount.id,\n        anomalyServiceMonitor.id,\n    ],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_linked_account = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\")\nanomaly_service_monitor = aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.DIMENSIONAL,\n    monitor_dimension=aws_native.ce.AnomalyMonitorMonitorDimension.SERVICE)\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold=100,\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[\n        custom_anomaly_monitor_with_linked_account.id,\n        anomaly_service_monitor.id,\n    ],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var customAnomalyMonitorWithLinkedAccount = new AwsNative.Ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Custom,\n        MonitorSpecification = \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n    });\n\n    var anomalyServiceMonitor = new AwsNative.Ce.AnomalyMonitor(\"anomalyServiceMonitor\", new()\n    {\n        MonitorName = \"MonitorName\",\n        MonitorType = AwsNative.Ce.AnomalyMonitorMonitorType.Dimensional,\n        MonitorDimension = AwsNative.Ce.AnomalyMonitorMonitorDimension.Service,\n    });\n\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        Threshold = 100,\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[]\n        {\n            customAnomalyMonitorWithLinkedAccount.Id,\n            anomalyServiceMonitor.Id,\n        },\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcustomAnomalyMonitorWithLinkedAccount, err := ce.NewAnomalyMonitor(ctx, \"customAnomalyMonitorWithLinkedAccount\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:          pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:          ce.AnomalyMonitorMonitorTypeCustom,\n\t\t\tMonitorSpecification: pulumi.String(\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tanomalyServiceMonitor, err := ce.NewAnomalyMonitor(ctx, \"anomalyServiceMonitor\", \u0026ce.AnomalyMonitorArgs{\n\t\t\tMonitorName:      pulumi.String(\"MonitorName\"),\n\t\t\tMonitorType:      ce.AnomalyMonitorMonitorTypeDimensional,\n\t\t\tMonitorDimension: ce.AnomalyMonitorMonitorDimensionService,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName: pulumi.String(\"SubscriptionName\"),\n\t\t\tThreshold:        pulumi.Float64(100),\n\t\t\tFrequency:        ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList: pulumi.StringArray{\n\t\t\t\tcustomAnomalyMonitorWithLinkedAccount.ID(),\n\t\t\t\tanomalyServiceMonitor.ID(),\n\t\t\t},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst customAnomalyMonitorWithLinkedAccount = new aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Custom,\n    monitorSpecification: \" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\",\n});\nconst anomalyServiceMonitor = new aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\", {\n    monitorName: \"MonitorName\",\n    monitorType: aws_native.ce.AnomalyMonitorMonitorType.Dimensional,\n    monitorDimension: aws_native.ce.AnomalyMonitorMonitorDimension.Service,\n});\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    threshold: 100,\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [\n        customAnomalyMonitorWithLinkedAccount.id,\n        anomalyServiceMonitor.id,\n    ],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncustom_anomaly_monitor_with_linked_account = aws_native.ce.AnomalyMonitor(\"customAnomalyMonitorWithLinkedAccount\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.CUSTOM,\n    monitor_specification=\" { \\\"Dimensions\\\" : { \\\"Key\\\" : \\\"LINKED_ACCOUNT\\\", \\\"Values\\\" : [ \\\"123456789012\\\", \\\"123456789013\\\" ] } }\")\nanomaly_service_monitor = aws_native.ce.AnomalyMonitor(\"anomalyServiceMonitor\",\n    monitor_name=\"MonitorName\",\n    monitor_type=aws_native.ce.AnomalyMonitorMonitorType.DIMENSIONAL,\n    monitor_dimension=aws_native.ce.AnomalyMonitorMonitorDimension.SERVICE)\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold=100,\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[\n        custom_anomaly_monitor_with_linked_account.id,\n        anomaly_service_monitor.id,\n    ],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"creationDate":{"type":"string","description":"The date when the monitor was created. "},"dimensionalValueCount":{"type":"integer","description":"The value for evaluated dimensions."},"lastEvaluatedDate":{"type":"string","description":"The date when the monitor last evaluated for anomalies."},"lastUpdatedDate":{"type":"string","description":"The date when the monitor was last updated."},"monitorArn":{"type":"string","description":"The Amazon Resource Name (ARN) value for the monitor."},"monitorDimension":{"$ref":"#/types/aws-native:ce:AnomalyMonitorMonitorDimension","description":"The dimensions to evaluate","replaceOnChanges":true},"monitorName":{"type":"string","description":"The name of the monitor."},"monitorSpecification":{"type":"string","description":"The array of `MonitorSpecification` in JSON array format. For instance, you can use `MonitorSpecification` to specify a tag, Cost Category, or linked account for your custom anomaly monitor. For further information, see the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ce-anomalymonitor.html#aws-resource-ce-anomalymonitor--examples) section of this page.","replaceOnChanges":true},"monitorType":{"$ref":"#/types/aws-native:ce:AnomalyMonitorMonitorType","description":"The type of the monitor.\n\nSet this to `DIMENSIONAL` for an AWS managed monitor. AWS managed monitors automatically track up to the top 5,000 values by cost within a dimension of your choosing. Each dimension value is evaluated independently. If you start incurring cost in a new value of your chosen dimension, it will automatically be analyzed by an AWS managed monitor.\n\nSet this to `CUSTOM` for a customer managed monitor. Customer managed monitors let you select specific dimension values that get monitored in aggregate.\n\nFor more information about monitor types, see [Monitor types](https://docs.aws.amazon.com/cost-management/latest/userguide/getting-started-ad.html#monitor-type-def) in the *Billing and Cost Management User Guide* .","replaceOnChanges":true},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Tags to assign to monitor.","replaceOnChanges":true}},"type":"object","required":["creationDate","dimensionalValueCount","lastEvaluatedDate","lastUpdatedDate","monitorArn","monitorName","monitorType"],"inputProperties":{"monitorDimension":{"$ref":"#/types/aws-native:ce:AnomalyMonitorMonitorDimension","description":"The dimensions to evaluate"},"monitorName":{"type":"string","description":"The name of the monitor."},"monitorSpecification":{"type":"string","description":"The array of `MonitorSpecification` in JSON array format. For instance, you can use `MonitorSpecification` to specify a tag, Cost Category, or linked account for your custom anomaly monitor. For further information, see the [Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ce-anomalymonitor.html#aws-resource-ce-anomalymonitor--examples) section of this page."},"monitorType":{"$ref":"#/types/aws-native:ce:AnomalyMonitorMonitorType","description":"The type of the monitor.\n\nSet this to `DIMENSIONAL` for an AWS managed monitor. AWS managed monitors automatically track up to the top 5,000 values by cost within a dimension of your choosing. Each dimension value is evaluated independently. If you start incurring cost in a new value of your chosen dimension, it will automatically be analyzed by an AWS managed monitor.\n\nSet this to `CUSTOM` for a customer managed monitor. Customer managed monitors let you select specific dimension values that get monitored in aggregate.\n\nFor more information about monitor types, see [Monitor types](https://docs.aws.amazon.com/cost-management/latest/userguide/getting-started-ad.html#monitor-type-def) in the *Billing and Cost Management User Guide* ."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Tags to assign to monitor."}},"requiredInputs":["monitorType"]},"aws-native:ce:AnomalySubscription":{"description":"AWS Cost Anomaly Detection leverages advanced Machine Learning technologies to identify anomalous spend and root causes, so you can quickly take action. Create subscription to be notified\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        ThresholdExpression = \"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"Values\\\": [ \\\"100\\\" ], \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ] } }\",\n        MonitorArnList = new[] {},\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Address = \"abc@def.com\",\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n            },\n        },\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName:    pulumi.String(\"SubscriptionName\"),\n\t\t\tThresholdExpression: pulumi.String(\"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"Values\\\": [ \\\"100\\\" ], \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ] } }\"),\n\t\t\tMonitorArnList:      pulumi.StringArray{},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t},\n\t\t\t},\n\t\t\tFrequency: ce.AnomalySubscriptionFrequencyDaily,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    thresholdExpression: \"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"Values\\\": [ \\\"100\\\" ], \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ] } }\",\n    monitorArnList: [],\n    subscribers: [{\n        address: \"abc@def.com\",\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n    }],\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold_expression=\"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"Values\\\": [ \\\"100\\\" ], \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ] } }\",\n    monitor_arn_list=[],\n    subscribers=[{\n        \"address\": \"abc@def.com\",\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n    }],\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"Subscription 1\",\n        ThresholdExpression = \"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }\",\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[] {},\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName:    pulumi.String(\"Subscription 1\"),\n\t\t\tThresholdExpression: pulumi.String(\"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }\"),\n\t\t\tFrequency:           ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList:      pulumi.StringArray{},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"Subscription 1\",\n    thresholdExpression: \"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }\",\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"Subscription 1\",\n    threshold_expression=\"{ \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }\",\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        ThresholdExpression = \"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n        MonitorArnList = new[] {},\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Address = \"abc@def.com\",\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n            },\n        },\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName:    pulumi.String(\"SubscriptionName\"),\n\t\t\tThresholdExpression: pulumi.String(\"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\"),\n\t\t\tMonitorArnList:      pulumi.StringArray{},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t},\n\t\t\t},\n\t\t\tFrequency: ce.AnomalySubscriptionFrequencyDaily,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    thresholdExpression: \"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    monitorArnList: [],\n    subscribers: [{\n        address: \"abc@def.com\",\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n    }],\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold_expression=\"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    monitor_arn_list=[],\n    subscribers=[{\n        \"address\": \"abc@def.com\",\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n    }],\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        ThresholdExpression = \"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[] {},\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName:    pulumi.String(\"SubscriptionName\"),\n\t\t\tThresholdExpression: pulumi.String(\"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\"),\n\t\t\tFrequency:           ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList:      pulumi.StringArray{},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    thresholdExpression: \"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold_expression=\"{ \\\"And\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        ThresholdExpression = \"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n        MonitorArnList = new[] {},\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Address = \"abc@def.com\",\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n            },\n        },\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName:    pulumi.String(\"SubscriptionName\"),\n\t\t\tThresholdExpression: pulumi.String(\"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\"),\n\t\t\tMonitorArnList:      pulumi.StringArray{},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t},\n\t\t\t},\n\t\t\tFrequency: ce.AnomalySubscriptionFrequencyDaily,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    thresholdExpression: \"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    monitorArnList: [],\n    subscribers: [{\n        address: \"abc@def.com\",\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n    }],\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold_expression=\"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    monitor_arn_list=[],\n    subscribers=[{\n        \"address\": \"abc@def.com\",\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n    }],\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var anomalySubscription = new AwsNative.Ce.AnomalySubscription(\"anomalySubscription\", new()\n    {\n        SubscriptionName = \"SubscriptionName\",\n        ThresholdExpression = \"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n        Frequency = AwsNative.Ce.AnomalySubscriptionFrequency.Daily,\n        MonitorArnList = new[] {},\n        Subscribers = new[]\n        {\n            new AwsNative.Ce.Inputs.AnomalySubscriptionSubscriberArgs\n            {\n                Type = AwsNative.Ce.AnomalySubscriptionSubscriberType.Email,\n                Address = \"abc@def.com\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ce\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ce.NewAnomalySubscription(ctx, \"anomalySubscription\", \u0026ce.AnomalySubscriptionArgs{\n\t\t\tSubscriptionName:    pulumi.String(\"SubscriptionName\"),\n\t\t\tThresholdExpression: pulumi.String(\"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\"),\n\t\t\tFrequency:           ce.AnomalySubscriptionFrequencyDaily,\n\t\t\tMonitorArnList:      pulumi.StringArray{},\n\t\t\tSubscribers: ce.AnomalySubscriptionSubscriberArray{\n\t\t\t\t\u0026ce.AnomalySubscriptionSubscriberArgs{\n\t\t\t\t\tType:    ce.AnomalySubscriptionSubscriberTypeEmail,\n\t\t\t\t\tAddress: pulumi.String(\"abc@def.com\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst anomalySubscription = new aws_native.ce.AnomalySubscription(\"anomalySubscription\", {\n    subscriptionName: \"SubscriptionName\",\n    thresholdExpression: \"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    frequency: aws_native.ce.AnomalySubscriptionFrequency.Daily,\n    monitorArnList: [],\n    subscribers: [{\n        type: aws_native.ce.AnomalySubscriptionSubscriberType.Email,\n        address: \"abc@def.com\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nanomaly_subscription = aws_native.ce.AnomalySubscription(\"anomalySubscription\",\n    subscription_name=\"SubscriptionName\",\n    threshold_expression=\"{ \\\"Or\\\": [ { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_PERCENTAGE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"100\\\" ] } }, { \\\"Dimensions\\\": { \\\"Key\\\": \\\"ANOMALY_TOTAL_IMPACT_ABSOLUTE\\\", \\\"MatchOptions\\\": [ \\\"GREATER_THAN_OR_EQUAL\\\" ], \\\"Values\\\": [ \\\"200\\\" ] } } ] }\",\n    frequency=aws_native.ce.AnomalySubscriptionFrequency.DAILY,\n    monitor_arn_list=[],\n    subscribers=[{\n        \"type\": aws_native.ce.AnomalySubscriptionSubscriberType.EMAIL,\n        \"address\": \"abc@def.com\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"accountId":{"type":"string","description":"The accountId"},"frequency":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionFrequency","description":"The frequency at which anomaly reports are sent over email. "},"monitorArnList":{"type":"array","items":{"type":"string"},"description":"A list of cost anomaly monitors."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Tags to assign to subscription.","replaceOnChanges":true},"subscribers":{"type":"array","items":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionSubscriber"},"description":"A list of subscriber"},"subscriptionArn":{"type":"string","description":"The `AnomalySubscription` Amazon Resource Name (ARN)."},"subscriptionName":{"type":"string","description":"The name of the subscription."},"threshold":{"type":"number","description":"The dollar value that triggers a notification if the threshold is exceeded. "},"thresholdExpression":{"type":"string","description":"An Expression object in JSON String format used to specify the anomalies that you want to generate alerts for."}},"type":"object","required":["accountId","frequency","monitorArnList","subscribers","subscriptionArn","subscriptionName"],"inputProperties":{"frequency":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionFrequency","description":"The frequency at which anomaly reports are sent over email. "},"monitorArnList":{"type":"array","items":{"type":"string"},"description":"A list of cost anomaly monitors."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Tags to assign to subscription."},"subscribers":{"type":"array","items":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionSubscriber"},"description":"A list of subscriber"},"subscriptionName":{"type":"string","description":"The name of the subscription."},"threshold":{"type":"number","description":"The dollar value that triggers a notification if the threshold is exceeded. "},"thresholdExpression":{"type":"string","description":"An Expression object in JSON String format used to specify the anomalies that you want to generate alerts for."}},"requiredInputs":["frequency","monitorArnList","subscribers"]},"aws-native:ce:CostCategory":{"description":"Resource Type definition for AWS::CE::CostCategory. Cost Category enables you to map your cost and usage into meaningful categories. You can use Cost Category to organize your costs using a rule-based engine.","properties":{"arn":{"type":"string","description":"Cost category ARN"},"defaultValue":{"type":"string","description":"The default value for the cost category"},"effectiveStart":{"type":"string","description":"The Cost Category's effective start date."},"name":{"type":"string","description":"The unique name of the Cost Category.","replaceOnChanges":true},"ruleVersion":{"$ref":"#/types/aws-native:ce:CostCategoryRuleVersion","description":"The rule schema version in this particular Cost Category."},"rules":{"type":"string","description":"JSON array format of Expression in Billing and Cost Management API"},"splitChargeRules":{"type":"string","description":"Json array format of CostCategorySplitChargeRule in Billing and Cost Management API"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the cost category."}},"type":"object","required":["arn","effectiveStart","name","ruleVersion","rules"],"inputProperties":{"defaultValue":{"type":"string","description":"The default value for the cost category"},"name":{"type":"string","description":"The unique name of the Cost Category."},"ruleVersion":{"$ref":"#/types/aws-native:ce:CostCategoryRuleVersion","description":"The rule schema version in this particular Cost Category."},"rules":{"type":"string","description":"JSON array format of Expression in Billing and Cost Management API"},"splitChargeRules":{"type":"string","description":"Json array format of CostCategorySplitChargeRule in Billing and Cost Management API"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the cost category."}},"requiredInputs":["ruleVersion","rules"]},"aws-native:certificatemanager:Account":{"description":"Resource schema for AWS::CertificateManager::Account.","properties":{"accountId":{"type":"string","description":"ID of the AWS account that owns the certificate."},"expiryEventsConfiguration":{"$ref":"#/types/aws-native:certificatemanager:AccountExpiryEventsConfiguration","description":"Object containing expiration events options associated with an AWS account . For more information, see [ExpiryEventsConfiguration](https://docs.aws.amazon.com/acm/latest/APIReference/API_ExpiryEventsConfiguration.html) in the API reference."}},"type":"object","required":["accountId","expiryEventsConfiguration"],"inputProperties":{"expiryEventsConfiguration":{"$ref":"#/types/aws-native:certificatemanager:AccountExpiryEventsConfiguration","description":"Object containing expiration events options associated with an AWS account . For more information, see [ExpiryEventsConfiguration](https://docs.aws.amazon.com/acm/latest/APIReference/API_ExpiryEventsConfiguration.html) in the API reference."}},"requiredInputs":["expiryEventsConfiguration"]},"aws-native:chatbot:CustomAction":{"description":"Definition of AWS::Chatbot::CustomAction Resource Type","properties":{"actionName":{"type":"string","description":"The name of the custom action. This name is included in the Amazon Resource Name (ARN).","replaceOnChanges":true},"aliasName":{"type":"string","description":"The name used to invoke this action in a chat channel. For example, `@Amazon Q run my-alias` ."},"attachments":{"type":"array","items":{"$ref":"#/types/aws-native:chatbot:CustomActionAttachment"},"description":"Defines when this custom action button should be attached to a notification."},"customActionArn":{"type":"string","description":"The fully defined ARN of the custom action."},"definition":{"$ref":"#/types/aws-native:chatbot:CustomActionDefinition","description":"The definition of the command to run when invoked as an alias or as an action button."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the configuration."}},"type":"object","required":["actionName","customActionArn","definition"],"inputProperties":{"actionName":{"type":"string","description":"The name of the custom action. This name is included in the Amazon Resource Name (ARN)."},"aliasName":{"type":"string","description":"The name used to invoke this action in a chat channel. For example, `@Amazon Q run my-alias` ."},"attachments":{"type":"array","items":{"$ref":"#/types/aws-native:chatbot:CustomActionAttachment"},"description":"Defines when this custom action button should be attached to a notification."},"definition":{"$ref":"#/types/aws-native:chatbot:CustomActionDefinition","description":"The definition of the command to run when invoked as an alias or as an action button."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the configuration."}},"requiredInputs":["definition"]},"aws-native:chatbot:MicrosoftTeamsChannelConfiguration":{"description":"Resource schema for AWS::Chatbot::MicrosoftTeamsChannelConfiguration.","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the configuration"},"configurationName":{"type":"string","description":"The name of the configuration","replaceOnChanges":true},"customizationResourceArns":{"type":"array","items":{"type":"string"},"description":"ARNs of Custom Actions to associate with notifications in the provided chat channel."},"guardrailPolicies":{"type":"array","items":{"type":"string"},"description":"The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that defines the permissions for AWS Chatbot"},"loggingLevel":{"type":"string","description":"Specifies the logging level for this configuration:ERROR,INFO or NONE. This property affects the log entries pushed to Amazon CloudWatch logs"},"snsTopicArns":{"type":"array","items":{"type":"string"},"description":"ARNs of SNS topics which delivers notifications to AWS Chatbot, for example CloudWatch alarm notifications."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the configuration"},"teamId":{"type":"string","description":"The id of the Microsoft Teams team","replaceOnChanges":true},"teamsChannelId":{"type":"string","description":"The id of the Microsoft Teams channel"},"teamsChannelName":{"type":"string","description":"The name of the Microsoft Teams channel"},"teamsTenantId":{"type":"string","description":"The id of the Microsoft Teams tenant","replaceOnChanges":true},"userRoleRequired":{"type":"boolean","description":"Enables use of a user role requirement in your chat configuration"}},"type":"object","required":["arn","configurationName","iamRoleArn","teamId","teamsChannelId","teamsTenantId"],"inputProperties":{"configurationName":{"type":"string","description":"The name of the configuration"},"customizationResourceArns":{"type":"array","items":{"type":"string"},"description":"ARNs of Custom Actions to associate with notifications in the provided chat channel."},"guardrailPolicies":{"type":"array","items":{"type":"string"},"description":"The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that defines the permissions for AWS Chatbot"},"loggingLevel":{"type":"string","description":"Specifies the logging level for this configuration:ERROR,INFO or NONE. This property affects the log entries pushed to Amazon CloudWatch logs"},"snsTopicArns":{"type":"array","items":{"type":"string"},"description":"ARNs of SNS topics which delivers notifications to AWS Chatbot, for example CloudWatch alarm notifications."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the configuration"},"teamId":{"type":"string","description":"The id of the Microsoft Teams team"},"teamsChannelId":{"type":"string","description":"The id of the Microsoft Teams channel"},"teamsChannelName":{"type":"string","description":"The name of the Microsoft Teams channel"},"teamsTenantId":{"type":"string","description":"The id of the Microsoft Teams tenant"},"userRoleRequired":{"type":"boolean","description":"Enables use of a user role requirement in your chat configuration"}},"requiredInputs":["iamRoleArn","teamId","teamsChannelId","teamsTenantId"]},"aws-native:chatbot:SlackChannelConfiguration":{"description":"Resource schema for AWS::Chatbot::SlackChannelConfiguration.","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the configuration"},"configurationName":{"type":"string","description":"The name of the configuration","replaceOnChanges":true},"customizationResourceArns":{"type":"array","items":{"type":"string"},"description":"ARNs of Custom Actions to associate with notifications in the provided chat channel."},"guardrailPolicies":{"type":"array","items":{"type":"string"},"description":"The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that defines the permissions for AWS Chatbot"},"loggingLevel":{"type":"string","description":"Specifies the logging level for this configuration:ERROR,INFO or NONE. This property affects the log entries pushed to Amazon CloudWatch logs"},"slackChannelId":{"type":"string","description":"The id of the Slack channel"},"slackWorkspaceId":{"type":"string","description":"The id of the Slack workspace","replaceOnChanges":true},"snsTopicArns":{"type":"array","items":{"type":"string"},"description":"ARNs of SNS topics which delivers notifications to AWS Chatbot, for example CloudWatch alarm notifications."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the configuration"},"userRoleRequired":{"type":"boolean","description":"Enables use of a user role requirement in your chat configuration"}},"type":"object","required":["arn","configurationName","iamRoleArn","slackChannelId","slackWorkspaceId"],"inputProperties":{"configurationName":{"type":"string","description":"The name of the configuration"},"customizationResourceArns":{"type":"array","items":{"type":"string"},"description":"ARNs of Custom Actions to associate with notifications in the provided chat channel."},"guardrailPolicies":{"type":"array","items":{"type":"string"},"description":"The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set."},"iamRoleArn":{"type":"string","description":"The ARN of the IAM role that defines the permissions for AWS Chatbot"},"loggingLevel":{"type":"string","description":"Specifies the logging level for this configuration:ERROR,INFO or NONE. This property affects the log entries pushed to Amazon CloudWatch logs"},"slackChannelId":{"type":"string","description":"The id of the Slack channel"},"slackWorkspaceId":{"type":"string","description":"The id of the Slack workspace"},"snsTopicArns":{"type":"array","items":{"type":"string"},"description":"ARNs of SNS topics which delivers notifications to AWS Chatbot, for example CloudWatch alarm notifications."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the configuration"},"userRoleRequired":{"type":"boolean","description":"Enables use of a user role requirement in your chat configuration"}},"requiredInputs":["iamRoleArn","slackChannelId","slackWorkspaceId"]},"aws-native:cleanrooms:AnalysisTemplate":{"description":"Represents a stored analysis within a collaboration","properties":{"analysisParameters":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisParameter"},"description":"The member who can query can provide this placeholder for a literal data value in an analysis template","replaceOnChanges":true},"analysisTemplateIdentifier":{"type":"string","description":"Returns the identifier for the analysis template.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE2222`"},"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the analysis template.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:membership/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/analysistemplates/a1b2c3d4-5678-90ab-cdef-EXAMPLE2222`"},"collaborationArn":{"type":"string","description":"Returns the unique ARN for the analysis template’s associated collaboration.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:collaboration/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"},"collaborationIdentifier":{"type":"string","description":"Returns the unique ID for the associated collaboration of the analysis template.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"},"description":{"type":"string","description":"The description of the analysis template."},"errorMessageConfiguration":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateErrorMessageConfiguration","description":"The configuration that specifies the level of detail in error messages returned by analyses using this template. When set to `DETAILED` , error messages include more information to help troubleshoot issues with PySpark jobs. Detailed error messages may expose underlying data, including sensitive information. Recommended for faster troubleshooting in development and testing environments.","replaceOnChanges":true},"format":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateFormat","description":"The format of the analysis template.","replaceOnChanges":true},"membershipArn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the member who created the analysis template.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:membership/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"membershipIdentifier":{"type":"string","description":"The identifier for a membership resource.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the analysis template.","replaceOnChanges":true},"schema":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSchema","description":"The entire schema object.","replaceOnChanges":true},"source":{"oneOf":[{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSource0Properties"},{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSource1Properties"}],"description":"The source of the analysis template.","replaceOnChanges":true},"sourceMetadata":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSourceMetadataProperties","description":"The source metadata for the analysis template."},"syntheticDataParameters":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateSyntheticDataParametersProperties","description":"The parameters used to generate synthetic data for this analysis template.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms analysis template."}},"type":"object","required":["analysisTemplateIdentifier","arn","collaborationArn","collaborationIdentifier","format","membershipArn","membershipIdentifier","name","source"],"inputProperties":{"analysisParameters":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisParameter"},"description":"The member who can query can provide this placeholder for a literal data value in an analysis template"},"description":{"type":"string","description":"The description of the analysis template."},"errorMessageConfiguration":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateErrorMessageConfiguration","description":"The configuration that specifies the level of detail in error messages returned by analyses using this template. When set to `DETAILED` , error messages include more information to help troubleshoot issues with PySpark jobs. Detailed error messages may expose underlying data, including sensitive information. Recommended for faster troubleshooting in development and testing environments."},"format":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateFormat","description":"The format of the analysis template."},"membershipIdentifier":{"type":"string","description":"The identifier for a membership resource."},"name":{"type":"string","description":"The name of the analysis template."},"schema":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSchema","description":"The entire schema object."},"source":{"oneOf":[{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSource0Properties"},{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSource1Properties"}],"description":"The source of the analysis template."},"sourceMetadata":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSourceMetadataProperties","description":"The source metadata for the analysis template."},"syntheticDataParameters":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateSyntheticDataParametersProperties","description":"The parameters used to generate synthetic data for this analysis template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms analysis template."}},"requiredInputs":["format","membershipIdentifier","source"]},"aws-native:cleanrooms:Collaboration":{"description":"Represents a collaboration between AWS accounts that allows for secure data collaboration","properties":{"allowedResultRegions":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationSupportedS3Region"},"description":"The AWS Regions where collaboration query results can be stored. Returns the list of Region identifiers that were specified when the collaboration was created. This list is used to enforce regional storage policies and compliance requirements.","replaceOnChanges":true},"analyticsEngine":{"$ref":"#/types/aws-native:cleanrooms:CollaborationAnalyticsEngine","description":"The analytics engine for the collaboration.\n\n\u003e After July 16, 2025, the `CLEAN_ROOMS_SQL` parameter will no longer be available."},"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified collaboration.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:collaboration/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"autoApprovedChangeTypes":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationAutoApprovedChangeType"},"description":"The types of change requests that are automatically approved for this collaboration.","replaceOnChanges":true},"collaborationIdentifier":{"type":"string","description":"Returns the unique identifier of the specified collaboration.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"creatorDisplayName":{"type":"string","description":"A display name of the collaboration creator.","replaceOnChanges":true},"creatorMemberAbilities":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMemberAbility"},"description":"The abilities granted to the collaboration creator.\n\n*Allowed values* `CAN_QUERY` | `CAN_RECEIVE_RESULTS` | `CAN_RUN_JOB`","replaceOnChanges":true},"creatorMlMemberAbilities":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMlMemberAbilities","description":"The ML member abilities for a collaboration member.","replaceOnChanges":true},"creatorPaymentConfiguration":{"$ref":"#/types/aws-native:cleanrooms:CollaborationPaymentConfiguration","description":"An object representing the collaboration member's payment responsibilities set by the collaboration creator.","replaceOnChanges":true},"dataEncryptionMetadata":{"$ref":"#/types/aws-native:cleanrooms:CollaborationDataEncryptionMetadata","description":"The settings for client-side encryption for cryptographic computing.","replaceOnChanges":true},"description":{"type":"string","description":"A description of the collaboration provided by the collaboration owner."},"isMetricsEnabled":{"type":"boolean"},"jobLogStatus":{"$ref":"#/types/aws-native:cleanrooms:CollaborationJobLogStatus","description":"An indicator as to whether job logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about jobs run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` .","replaceOnChanges":true},"members":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMemberSpecification"},"description":"A list of initial members, not including the creator. This list is immutable.","replaceOnChanges":true},"name":{"type":"string","description":"A human-readable identifier provided by the collaboration owner. Display names are not unique."},"queryLogStatus":{"$ref":"#/types/aws-native:cleanrooms:CollaborationQueryLogStatus","description":"An indicator as to whether query logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration."}},"type":"object","required":["arn","collaborationIdentifier","creatorDisplayName","description","name","queryLogStatus"],"inputProperties":{"allowedResultRegions":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationSupportedS3Region"},"description":"The AWS Regions where collaboration query results can be stored. Returns the list of Region identifiers that were specified when the collaboration was created. This list is used to enforce regional storage policies and compliance requirements."},"analyticsEngine":{"$ref":"#/types/aws-native:cleanrooms:CollaborationAnalyticsEngine","description":"The analytics engine for the collaboration.\n\n\u003e After July 16, 2025, the `CLEAN_ROOMS_SQL` parameter will no longer be available."},"autoApprovedChangeTypes":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationAutoApprovedChangeType"},"description":"The types of change requests that are automatically approved for this collaboration."},"creatorDisplayName":{"type":"string","description":"A display name of the collaboration creator."},"creatorMemberAbilities":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMemberAbility"},"description":"The abilities granted to the collaboration creator.\n\n*Allowed values* `CAN_QUERY` | `CAN_RECEIVE_RESULTS` | `CAN_RUN_JOB`"},"creatorMlMemberAbilities":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMlMemberAbilities","description":"The ML member abilities for a collaboration member."},"creatorPaymentConfiguration":{"$ref":"#/types/aws-native:cleanrooms:CollaborationPaymentConfiguration","description":"An object representing the collaboration member's payment responsibilities set by the collaboration creator."},"dataEncryptionMetadata":{"$ref":"#/types/aws-native:cleanrooms:CollaborationDataEncryptionMetadata","description":"The settings for client-side encryption for cryptographic computing."},"description":{"type":"string","description":"A description of the collaboration provided by the collaboration owner."},"isMetricsEnabled":{"type":"boolean"},"jobLogStatus":{"$ref":"#/types/aws-native:cleanrooms:CollaborationJobLogStatus","description":"An indicator as to whether job logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about jobs run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"members":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:CollaborationMemberSpecification"},"description":"A list of initial members, not including the creator. This list is immutable."},"name":{"type":"string","description":"A human-readable identifier provided by the collaboration owner. Display names are not unique."},"queryLogStatus":{"$ref":"#/types/aws-native:cleanrooms:CollaborationQueryLogStatus","description":"An indicator as to whether query logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration."}},"requiredInputs":["creatorDisplayName","description","queryLogStatus"]},"aws-native:cleanrooms:ConfiguredTable":{"description":"Represents a table that can be associated with collaborations","properties":{"allowedColumns":{"type":"array","items":{"type":"string"},"description":"The columns within the underlying AWS Glue table that can be used within collaborations."},"analysisMethod":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisMethod","description":"The analysis method for the configured table.\n\n`DIRECT_QUERY` allows SQL queries to be run directly on this table.\n\n`DIRECT_JOB` allows PySpark jobs to be run directly on this table.\n\n`MULTIPLE` allows both SQL queries and PySpark jobs to be run directly on this table."},"analysisRules":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRule"},"description":"The analysis rule that was created for the configured table."},"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified configured table.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:configuredtable/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"configuredTableIdentifier":{"type":"string","description":"Returns the unique identifier of the specified configured table.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"},"description":{"type":"string","description":"A description for the configured table."},"name":{"type":"string","description":"A name for the configured table."},"selectedAnalysisMethods":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSelectedAnalysisMethod"},"description":"The selected analysis methods for the configured table."},"tableReference":{"oneOf":[{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference0Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference1Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference2Properties"}],"description":"The table that this configured table represents."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration."}},"type":"object","required":["allowedColumns","analysisMethod","arn","configuredTableIdentifier","name","tableReference"],"inputProperties":{"allowedColumns":{"type":"array","items":{"type":"string"},"description":"The columns within the underlying AWS Glue table that can be used within collaborations."},"analysisMethod":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisMethod","description":"The analysis method for the configured table.\n\n`DIRECT_QUERY` allows SQL queries to be run directly on this table.\n\n`DIRECT_JOB` allows PySpark jobs to be run directly on this table.\n\n`MULTIPLE` allows both SQL queries and PySpark jobs to be run directly on this table."},"analysisRules":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRule"},"description":"The analysis rule that was created for the configured table."},"description":{"type":"string","description":"A description for the configured table."},"name":{"type":"string","description":"A name for the configured table."},"selectedAnalysisMethods":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSelectedAnalysisMethod"},"description":"The selected analysis methods for the configured table."},"tableReference":{"oneOf":[{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference0Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference1Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference2Properties"}],"description":"The table that this configured table represents."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration."}},"requiredInputs":["allowedColumns","analysisMethod","tableReference"]},"aws-native:cleanrooms:ConfiguredTableAssociation":{"description":"Represents a table that can be queried within a collaboration","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified configured table association.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:configuredtable/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"},"configuredTableAssociationAnalysisRules":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRule"},"description":"An analysis rule for a configured table association. This analysis rule specifies how data from the table can be used within its associated collaboration. In the console, the `ConfiguredTableAssociationAnalysisRule` is referred to as the *collaboration analysis rule* ."},"configuredTableAssociationIdentifier":{"type":"string","description":"Returns the unique identifier of the specified configured table association.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"},"configuredTableIdentifier":{"type":"string","description":"A unique identifier for the configured table to be associated to. Currently accepts a configured table ID.","replaceOnChanges":true},"description":{"type":"string","description":"A description of the configured table association."},"membershipIdentifier":{"type":"string","description":"The unique ID for the membership this configured table association belongs to.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the configured table association, in lowercase. The table is identified by this name when running protected queries against the underlying data.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The service will assume this role to access catalog metadata and query the table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration."}},"type":"object","required":["arn","configuredTableAssociationIdentifier","configuredTableIdentifier","membershipIdentifier","name","roleArn"],"inputProperties":{"configuredTableAssociationAnalysisRules":{"type":"array","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRule"},"description":"An analysis rule for a configured table association. This analysis rule specifies how data from the table can be used within its associated collaboration. In the console, the `ConfiguredTableAssociationAnalysisRule` is referred to as the *collaboration analysis rule* ."},"configuredTableIdentifier":{"type":"string","description":"A unique identifier for the configured table to be associated to. Currently accepts a configured table ID."},"description":{"type":"string","description":"A description of the configured table association."},"membershipIdentifier":{"type":"string","description":"The unique ID for the membership this configured table association belongs to."},"name":{"type":"string","description":"The name of the configured table association, in lowercase. The table is identified by this name when running protected queries against the underlying data."},"roleArn":{"type":"string","description":"The service will assume this role to access catalog metadata and query the table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration."}},"requiredInputs":["configuredTableIdentifier","membershipIdentifier","roleArn"]},"aws-native:cleanrooms:IdMappingTable":{"description":"Represents an association between an ID mapping workflow and a collaboration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ID mapping table."},"collaborationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the collaboration that contains this ID mapping table."},"collaborationIdentifier":{"type":"string","description":"The unique identifier of the collaboration that contains this ID mapping table."},"description":{"type":"string","description":"The description of the ID mapping table."},"idMappingTableIdentifier":{"type":"string","description":"The unique identifier of the ID mapping table identifier that you want to retrieve."},"inputReferenceConfig":{"$ref":"#/types/aws-native:cleanrooms:IdMappingTableInputReferenceConfig","description":"The input reference configuration for the ID mapping table.","replaceOnChanges":true},"inputReferenceProperties":{"$ref":"#/types/aws-native:cleanrooms:IdMappingTableInputReferenceProperties"},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS key."},"membershipArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the membership resource for the ID mapping table."},"membershipIdentifier":{"type":"string","description":"The unique identifier of the membership resource for the ID mapping table.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the ID mapping table.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource."}},"type":"object","required":["arn","collaborationArn","collaborationIdentifier","idMappingTableIdentifier","inputReferenceConfig","inputReferenceProperties","membershipArn","membershipIdentifier","name"],"inputProperties":{"description":{"type":"string","description":"The description of the ID mapping table."},"inputReferenceConfig":{"$ref":"#/types/aws-native:cleanrooms:IdMappingTableInputReferenceConfig","description":"The input reference configuration for the ID mapping table."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS key."},"membershipIdentifier":{"type":"string","description":"The unique identifier of the membership resource for the ID mapping table."},"name":{"type":"string","description":"The name of the ID mapping table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource."}},"requiredInputs":["inputReferenceConfig","membershipIdentifier"]},"aws-native:cleanrooms:IdNamespaceAssociation":{"description":"Represents an association between an ID namespace and a collaboration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ID namespace association."},"collaborationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the collaboration that contains this ID namespace association."},"collaborationIdentifier":{"type":"string","description":"The unique identifier of the collaboration that contains this ID namespace association."},"description":{"type":"string","description":"The description of the ID namespace association."},"idMappingConfig":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationIdMappingConfig","description":"The configuration settings for the ID mapping table."},"idNamespaceAssociationIdentifier":{"type":"string","description":"The unique identifier of the ID namespace association that you want to retrieve."},"inputReferenceConfig":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationInputReferenceConfig","description":"The input reference configuration for the ID namespace association.","replaceOnChanges":true},"inputReferenceProperties":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationInputReferenceProperties"},"membershipArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the membership resource for this ID namespace association."},"membershipIdentifier":{"type":"string","description":"The unique identifier of the membership that contains the ID namespace association.","replaceOnChanges":true},"name":{"type":"string","description":"The name of this ID namespace association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource."}},"type":"object","required":["arn","collaborationArn","collaborationIdentifier","idNamespaceAssociationIdentifier","inputReferenceConfig","inputReferenceProperties","membershipArn","membershipIdentifier","name"],"inputProperties":{"description":{"type":"string","description":"The description of the ID namespace association."},"idMappingConfig":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationIdMappingConfig","description":"The configuration settings for the ID mapping table."},"inputReferenceConfig":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationInputReferenceConfig","description":"The input reference configuration for the ID namespace association."},"membershipIdentifier":{"type":"string","description":"The unique identifier of the membership that contains the ID namespace association."},"name":{"type":"string","description":"The name of this ID namespace association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource."}},"requiredInputs":["inputReferenceConfig","membershipIdentifier"]},"aws-native:cleanrooms:Membership":{"description":"Represents an AWS account that is a part of a collaboration","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified membership.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:membership/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"collaborationArn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified collaboration.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:collaboration/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"collaborationCreatorAccountId":{"type":"string","description":"Returns the unique identifier of the specified collaboration creator account.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"},"collaborationIdentifier":{"type":"string","description":"The unique ID for the associated collaboration.","replaceOnChanges":true},"defaultJobResultConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedJobResultConfiguration","description":"The default job result configuration for the membership."},"defaultResultConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedQueryResultConfiguration","description":"The default protected query result configuration as specified by the member who can receive results."},"isMetricsEnabled":{"type":"boolean"},"jobLogStatus":{"$ref":"#/types/aws-native:cleanrooms:MembershipJobLogStatus","description":"An indicator as to whether job logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about jobs run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"membershipIdentifier":{"type":"string","description":"Returns the unique identifier of the specified membership.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE22222`"},"paymentConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipPaymentConfiguration","description":"The payment responsibilities accepted by the collaboration member."},"queryLogStatus":{"$ref":"#/types/aws-native:cleanrooms:MembershipQueryLogStatus","description":"An indicator as to whether query logging has been enabled or disabled for the membership.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms membership."}},"type":"object","required":["arn","collaborationArn","collaborationCreatorAccountId","collaborationIdentifier","membershipIdentifier","queryLogStatus"],"inputProperties":{"collaborationIdentifier":{"type":"string","description":"The unique ID for the associated collaboration."},"defaultJobResultConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedJobResultConfiguration","description":"The default job result configuration for the membership."},"defaultResultConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedQueryResultConfiguration","description":"The default protected query result configuration as specified by the member who can receive results."},"isMetricsEnabled":{"type":"boolean"},"jobLogStatus":{"$ref":"#/types/aws-native:cleanrooms:MembershipJobLogStatus","description":"An indicator as to whether job logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about jobs run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"paymentConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipPaymentConfiguration","description":"The payment responsibilities accepted by the collaboration member."},"queryLogStatus":{"$ref":"#/types/aws-native:cleanrooms:MembershipQueryLogStatus","description":"An indicator as to whether query logging has been enabled or disabled for the membership.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms membership."}},"requiredInputs":["collaborationIdentifier","queryLogStatus"]},"aws-native:cleanrooms:PrivacyBudgetTemplate":{"description":"Represents a privacy budget within a collaboration","properties":{"arn":{"type":"string","description":"The ARN of the privacy budget template."},"autoRefresh":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplateAutoRefresh","description":"How often the privacy budget refreshes.\n\n\u003e If you plan to regularly bring new data into the collaboration, use `CALENDAR_MONTH` to automatically get a new privacy budget for the collaboration every calendar month. Choosing this option allows arbitrary amounts of information to be revealed about rows of the data when repeatedly queried across refreshes. Avoid choosing this if the same rows will be repeatedly queried between privacy budget refreshes.","replaceOnChanges":true},"collaborationArn":{"type":"string","description":"The ARN of the collaboration that contains this privacy budget template."},"collaborationIdentifier":{"type":"string","description":"The unique ID of the collaboration that contains this privacy budget template."},"membershipArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the member who created the privacy budget template."},"membershipIdentifier":{"type":"string","description":"The identifier for a membership resource.","replaceOnChanges":true},"parameters":{"$ref":"#/types/aws-native:cleanrooms:ParametersProperties","description":"Specifies the epsilon and noise parameters for the privacy budget template."},"privacyBudgetTemplateIdentifier":{"type":"string","description":"A unique identifier for one of your memberships for a collaboration. The privacy budget template is created in the collaboration that this membership belongs to. Accepts a membership ID."},"privacyBudgetType":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplatePrivacyBudgetType","description":"Specifies the type of the privacy budget template.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms privacy budget template."}},"type":"object","required":["arn","autoRefresh","collaborationArn","collaborationIdentifier","membershipArn","membershipIdentifier","parameters","privacyBudgetTemplateIdentifier","privacyBudgetType"],"inputProperties":{"autoRefresh":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplateAutoRefresh","description":"How often the privacy budget refreshes.\n\n\u003e If you plan to regularly bring new data into the collaboration, use `CALENDAR_MONTH` to automatically get a new privacy budget for the collaboration every calendar month. Choosing this option allows arbitrary amounts of information to be revealed about rows of the data when repeatedly queried across refreshes. Avoid choosing this if the same rows will be repeatedly queried between privacy budget refreshes."},"membershipIdentifier":{"type":"string","description":"The identifier for a membership resource."},"parameters":{"$ref":"#/types/aws-native:cleanrooms:ParametersProperties","description":"Specifies the epsilon and noise parameters for the privacy budget template."},"privacyBudgetType":{"$ref":"#/types/aws-native:cleanrooms:PrivacyBudgetTemplatePrivacyBudgetType","description":"Specifies the type of the privacy budget template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms privacy budget template."}},"requiredInputs":["autoRefresh","membershipIdentifier","parameters","privacyBudgetType"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithm":{"description":"Definition of AWS::CleanRoomsML::ConfiguredModelAlgorithm Resource Type","properties":{"configuredModelAlgorithmArn":{"type":"string"},"description":{"type":"string","replaceOnChanges":true},"inferenceContainerConfig":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmInferenceContainerConfig","replaceOnChanges":true},"kmsKeyArn":{"type":"string","replaceOnChanges":true},"name":{"type":"string","replaceOnChanges":true},"roleArn":{"type":"string","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm."},"trainingContainerConfig":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmContainerConfig","replaceOnChanges":true}},"type":"object","required":["configuredModelAlgorithmArn","name","roleArn"],"inputProperties":{"description":{"type":"string"},"inferenceContainerConfig":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmInferenceContainerConfig"},"kmsKeyArn":{"type":"string"},"name":{"type":"string"},"roleArn":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm."},"trainingContainerConfig":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmContainerConfig"}},"requiredInputs":["roleArn"]},"aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociation":{"description":"Definition of AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation Resource Type","properties":{"collaborationIdentifier":{"type":"string"},"configuredModelAlgorithmArn":{"type":"string","replaceOnChanges":true},"configuredModelAlgorithmAssociationArn":{"type":"string"},"description":{"type":"string","replaceOnChanges":true},"membershipIdentifier":{"type":"string","replaceOnChanges":true},"name":{"type":"string","replaceOnChanges":true},"privacyConfiguration":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationPrivacyConfiguration","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm association."}},"type":"object","required":["collaborationIdentifier","configuredModelAlgorithmArn","configuredModelAlgorithmAssociationArn","membershipIdentifier","name"],"inputProperties":{"configuredModelAlgorithmArn":{"type":"string"},"description":{"type":"string"},"membershipIdentifier":{"type":"string"},"name":{"type":"string"},"privacyConfiguration":{"$ref":"#/types/aws-native:cleanroomsml:ConfiguredModelAlgorithmAssociationPrivacyConfiguration"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm association."}},"requiredInputs":["configuredModelAlgorithmArn","membershipIdentifier"]},"aws-native:cleanroomsml:TrainingDataset":{"description":"Definition of AWS::CleanRoomsML::TrainingDataset Resource Type","properties":{"description":{"type":"string","description":"The description of the training dataset.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the training dataset.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the IAM role that Clean Rooms ML can assume to read the data referred to in the `dataSource` field of each dataset.\n\nPassing a role across accounts is not allowed. If you pass a role that isn't in your account, you get an `AccessDeniedException` error.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetStatus","description":"The status of the training dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml training dataset."},"trainingData":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetDataset"},"description":"An array of information that lists the Dataset objects, which specifies the dataset type and details on its location and schema. You must provide a role that has read access to these tables.","replaceOnChanges":true},"trainingDatasetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the training dataset."}},"type":"object","required":["name","roleArn","status","trainingData","trainingDatasetArn"],"inputProperties":{"description":{"type":"string","description":"The description of the training dataset."},"name":{"type":"string","description":"The name of the training dataset."},"roleArn":{"type":"string","description":"The ARN of the IAM role that Clean Rooms ML can assume to read the data referred to in the `dataSource` field of each dataset.\n\nPassing a role across accounts is not allowed. If you pass a role that isn't in your account, you get an `AccessDeniedException` error."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml training dataset."},"trainingData":{"type":"array","items":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetDataset"},"description":"An array of information that lists the Dataset objects, which specifies the dataset type and details on its location and schema. You must provide a role that has read access to these tables."}},"requiredInputs":["roleArn","trainingData"]},"aws-native:cloudformation:CustomResourceEmulator":{"description":"The Custom Resource Emulator allows you to use AWS CloudFormation Custom Resources directly in your Pulumi programs. It provides a way to invoke AWS Lambda functions that implement custom provisioning logic following the CloudFormation Custom Resource protocol.\n\n\u003e **Note**: Currently, only Lambda-backed Custom Resources are supported. SNS-backed Custom Resources are not supported at this time.\n\n## Example Usage\n\n```typescript\nimport * as aws from \"@pulumi/aws-native\";\n\nconst bucket = new aws.s3.Bucket('custom-resource-emulator');\n\n// Create a Custom Resource that invokes a Lambda function\nconst cr = new aws.cloudformation.CustomResourceEmulator('cr', {\n    bucketName: bucket.id,\n    bucketKeyPrefix: 'custom-resource-emulator',\n    customResourceProperties: {\n        hello: \"world\"\n    },\n    serviceToken: \"arn:aws:lambda:us-west-2:123456789012:function:my-custom-resource\",\n    resourceType: 'Custom::MyResource',\n}, { customTimeouts: { create: '5m', update: '5m', delete: '5m' } });\n\n// Access the response data\nexport const customResourceData = customResource.data;\n```\n\nA full example of creating a CloudFormation Custom Resource Lambda function and using it in Pulumi can be found [here](https://github.com/pulumi/pulumi-aws-native/tree/master/examples/cfn-custom-resource).\n\n## About CloudFormation Custom Resources\n\nCloudFormation Custom Resources allow you to write custom provisioning logic for resources that aren't directly available as AWS CloudFormation resource types. Common use cases include:\n\n- Implementing complex provisioning logic\n- Performing custom validations or transformations\n- Integrating with third-party services\n- Implementing organization-specific infrastructure patterns\n\nFor more information about CloudFormation Custom Resources, see [Custom Resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.html) in the AWS CloudFormation User Guide.\n\n## Permissions\n\nThe IAM principal used by your Pulumi program must have the following permissions:\n\n1. `lambda:InvokeFunction` on the Lambda function specified in `serviceToken`\n2. S3 permissions on the bucket specified in `bucketName`:\n   - `s3:PutObject`\n   - `s3:GetObject`\n   - `s3:HeadObject`\n\n## Lambda Function Requirements\n\nThe Lambda function specified in `serviceToken` must implement the CloudFormation Custom Resource lifecycle.\nFor detailed information about implementing Lambda-backed Custom Resources, see [AWS Lambda-backed Custom Resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources-lambda.html) in the AWS CloudFormation User Guide.\n\n## Timeouts\n\nCustom Resources have a default timeout of 60 minutes, matching the CloudFormation timeout for custom resource operations. You can customize it using the [`customTimeouts`](https://www.pulumi.com/docs/iac/concepts/options/customtimeouts/) resource option.\n","properties":{"bucket":{"type":"string","description":"The name of the S3 bucket to use for storing the response from the Custom Resource."},"data":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The response data returned by invoking the Custom Resource."},"noEcho":{"type":"boolean","description":"Whether the response data contains sensitive information that should be marked as secret and not logged."},"physicalResourceId":{"type":"string","description":"The name or unique identifier that corresponds to the `PhysicalResourceId` included in the Custom Resource response. If no `PhysicalResourceId` is provided in the response, a random ID will be generated."},"resourceType":{"type":"string","description":"The CloudFormation type of the Custom Resource provider. For example, `Custom::MyCustomResource`."},"serviceToken":{"type":"string","description":"The service token, such as a Lambda function ARN, that is invoked when the resource is created, updated, or deleted."},"stackId":{"type":"string","description":"A stand-in value for the CloudFormation stack ID."}},"required":["physicalResourceId","data","stackId","serviceToken","bucket","resourceType","noEcho"],"inputProperties":{"bucketKeyPrefix":{"type":"string","description":"The prefix to use for the bucket key when storing the response from the Custom Resource provider."},"bucketName":{"type":"string","description":"The name of the S3 bucket to use for storing the response from the Custom Resource.\n\nThe IAM principal configured for the provider must have `s3:PutObject`, `s3:HeadObject` and `s3:GetObject` permissions on this bucket."},"customResourceProperties":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The properties to pass as an input to the Custom Resource.\nThe properties are passed as a map of key-value pairs whereas all primitive values (number, boolean) are converted to strings for CloudFormation interoperability."},"resourceType":{"type":"string","description":"The CloudFormation type of the Custom Resource. For example, `Custom::MyCustomResource`.\nThis is required for CloudFormation interoperability."},"serviceToken":{"type":"string","description":"The service token to use for the Custom Resource. The service token is invoked when the resource is created, updated, or deleted.\nThis can be a Lambda Function ARN with optional version or alias identifiers.\n\nThe IAM principal configured for the provider must have `lambda:InvokeFunction` permissions on this service token."},"stackId":{"type":"string","description":"A stand-in value for the CloudFormation stack ID. This is required for CloudFormation interoperability.\nIf not provided, the Pulumi Stack ID is used."}},"requiredInputs":["bucketName","bucketKeyPrefix","serviceToken","customResourceProperties","resourceType"]},"aws-native:cloudformation:GuardHook":{"description":"This is a CloudFormation resource for activating the first-party AWS::Hooks::GuardHook.","properties":{"alias":{"type":"string","description":"The typename alias for the hook.","replaceOnChanges":true},"executionRole":{"type":"string","description":"The execution role ARN assumed by hooks to read Guard rules from S3 and write Guard outputs to S3.","replaceOnChanges":true},"failureMode":{"$ref":"#/types/aws-native:cloudformation:GuardHookFailureMode","description":"Attribute to specify CloudFormation behavior on hook failure."},"hookArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the activated hook"},"hookStatus":{"$ref":"#/types/aws-native:cloudformation:GuardHookHookStatus","description":"Attribute to specify which stacks this hook applies to or should get invoked for"},"logBucket":{"type":"string","description":"S3 Bucket where the guard validate report will be uploaded to"},"options":{"$ref":"#/types/aws-native:cloudformation:OptionsProperties","description":"Specifies the S3 location of your input parameters."},"ruleLocation":{"$ref":"#/types/aws-native:cloudformation:GuardHookS3Location","description":"Specifies the S3 location of your Guard rules."},"stackFilters":{"$ref":"#/types/aws-native:cloudformation:StackFiltersProperties","description":"Filters to allow hooks to target specific stack attributes"},"targetFilters":{"oneOf":[{"$ref":"#/types/aws-native:cloudformation:TargetFilters0Properties"},{"$ref":"#/types/aws-native:cloudformation:TargetFilters1Properties"}],"description":"Attribute to specify which targets should invoke the hook"},"targetOperations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:GuardHookTargetOperation"},"description":"Which operations should this Hook run against? Resource changes, stacks or change sets."}},"type":"object","required":["alias","executionRole","failureMode","hookArn","hookStatus","ruleLocation","targetOperations"],"inputProperties":{"alias":{"type":"string","description":"The typename alias for the hook."},"executionRole":{"type":"string","description":"The execution role ARN assumed by hooks to read Guard rules from S3 and write Guard outputs to S3."},"failureMode":{"$ref":"#/types/aws-native:cloudformation:GuardHookFailureMode","description":"Attribute to specify CloudFormation behavior on hook failure."},"hookStatus":{"$ref":"#/types/aws-native:cloudformation:GuardHookHookStatus","description":"Attribute to specify which stacks this hook applies to or should get invoked for"},"logBucket":{"type":"string","description":"S3 Bucket where the guard validate report will be uploaded to"},"options":{"$ref":"#/types/aws-native:cloudformation:OptionsProperties","description":"Specifies the S3 location of your input parameters."},"ruleLocation":{"$ref":"#/types/aws-native:cloudformation:GuardHookS3Location","description":"Specifies the S3 location of your Guard rules."},"stackFilters":{"$ref":"#/types/aws-native:cloudformation:StackFiltersProperties","description":"Filters to allow hooks to target specific stack attributes"},"targetFilters":{"oneOf":[{"$ref":"#/types/aws-native:cloudformation:TargetFilters0Properties"},{"$ref":"#/types/aws-native:cloudformation:TargetFilters1Properties"}],"description":"Attribute to specify which targets should invoke the hook"},"targetOperations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:GuardHookTargetOperation"},"description":"Which operations should this Hook run against? Resource changes, stacks or change sets."}},"requiredInputs":["alias","executionRole","failureMode","hookStatus","ruleLocation","targetOperations"]},"aws-native:cloudformation:HookDefaultVersion":{"description":"Set a version as default version for a hook in CloudFormation Registry.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeVersionArn = \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeVersionArn: pulumi.String(\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {typeVersionArn: \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", type_version_arn=\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeVersionArn = \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeVersionArn: pulumi.String(\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {typeVersionArn: \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", type_version_arn=\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook/00000001\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        VersionId = \"1\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeName:  pulumi.String(\"My::Sample::Hook\"),\n\t\t\tVersionId: pulumi.String(\"1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {\n    typeName: \"My::Sample::Hook\",\n    versionId: \"1\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\",\n    type_name=\"My::Sample::Hook\",\n    version_id=\"1\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        VersionId = \"1\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeName:  pulumi.String(\"My::Sample::Hook\"),\n\t\t\tVersionId: pulumi.String(\"1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {\n    typeName: \"My::Sample::Hook\",\n    versionId: \"1\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\",\n    type_name=\"My::Sample::Hook\",\n    version_id=\"1\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type. This is used to uniquely identify a HookDefaultVersion"},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."},"typeVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type version."},"versionId":{"type":"string","description":"The ID of an existing version of the hook to set as the default."}},"type":"object","required":["arn"],"inputProperties":{"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."},"typeVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type version."},"versionId":{"type":"string","description":"The ID of an existing version of the hook to set as the default."}}},"aws-native:cloudformation:HookTypeConfig":{"description":"Specifies the configuration data for a registered hook in CloudFormation Registry.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookTypeConfig = new AwsNative.CloudFormation.HookTypeConfig(\"hookTypeConfig\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        Configuration = \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookTypeConfig(ctx, \"hookTypeConfig\", \u0026cloudformation.HookTypeConfigArgs{\n\t\t\tTypeName:      pulumi.String(\"My::Sample::Hook\"),\n\t\t\tConfiguration: pulumi.String(\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookTypeConfig = new aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\", {\n    typeName: \"My::Sample::Hook\",\n    configuration: \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_type_config = aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\",\n    type_name=\"My::Sample::Hook\",\n    configuration=\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookTypeConfig = new AwsNative.CloudFormation.HookTypeConfig(\"hookTypeConfig\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        Configuration = \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookTypeConfig(ctx, \"hookTypeConfig\", \u0026cloudformation.HookTypeConfigArgs{\n\t\t\tTypeName:      pulumi.String(\"My::Sample::Hook\"),\n\t\t\tConfiguration: pulumi.String(\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookTypeConfig = new aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\", {\n    typeName: \"My::Sample::Hook\",\n    configuration: \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_type_config = aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\",\n    type_name=\"My::Sample::Hook\",\n    configuration=\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookTypeConfig = new AwsNative.CloudFormation.HookTypeConfig(\"hookTypeConfig\", new()\n    {\n        TypeArn = \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\",\n        Configuration = \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookTypeConfig(ctx, \"hookTypeConfig\", \u0026cloudformation.HookTypeConfigArgs{\n\t\t\tTypeArn:       pulumi.String(\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\"),\n\t\t\tConfiguration: pulumi.String(\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookTypeConfig = new aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\", {\n    typeArn: \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\",\n    configuration: \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_type_config = aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\",\n    type_arn=\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\",\n    configuration=\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookTypeConfig = new AwsNative.CloudFormation.HookTypeConfig(\"hookTypeConfig\", new()\n    {\n        TypeArn = \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\",\n        Configuration = \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookTypeConfig(ctx, \"hookTypeConfig\", \u0026cloudformation.HookTypeConfigArgs{\n\t\t\tTypeArn:       pulumi.String(\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\"),\n\t\t\tConfiguration: pulumi.String(\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookTypeConfig = new aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\", {\n    typeArn: \"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\",\n    configuration: \"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_type_config = aws_native.cloudformation.HookTypeConfig(\"hookTypeConfig\",\n    type_arn=\"arn:aws:cloudformation:us-west-2:123456789012:type/hook/My-Sample-Hook\",\n    configuration=\"{\\\"CloudFormationConfiguration\\\":{\\\"HookConfiguration\\\":{\\\"TargetStacks\\\":\\\"ALL\\\",\\\"FailureMode\\\":\\\"WARN\\\",\\\"Properties\\\":{\\\"limitSize\\\": \\\"1\\\",\\\"encryptionAlgorithm\\\": \\\"aws:kms\\\"}}}}\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"configuration":{"type":"string","description":"The configuration data for the extension, in this account and region."},"configurationAlias":{"$ref":"#/types/aws-native:cloudformation:HookTypeConfigConfigurationAlias","description":"An alias by which to refer to this extension configuration data.","replaceOnChanges":true},"configurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the configuration data, in this account and region."},"typeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type without version number."},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."}},"type":"object","required":["configurationArn"],"inputProperties":{"configuration":{"type":"string","description":"The configuration data for the extension, in this account and region."},"configurationAlias":{"$ref":"#/types/aws-native:cloudformation:HookTypeConfigConfigurationAlias","description":"An alias by which to refer to this extension configuration data."},"typeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type without version number."},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."}}},"aws-native:cloudformation:HookVersion":{"description":"Publishes new or first hook version to AWS CloudFormation Registry.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookVersion = new AwsNative.CloudFormation.HookVersion(\"hookVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        SchemaHandlerPackage = \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n    });\n\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeVersionArn = hookVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\thookVersion, err := cloudformation.NewHookVersion(ctx, \"hookVersion\", \u0026cloudformation.HookVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Hook\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeVersionArn: hookVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookVersion = new aws_native.cloudformation.HookVersion(\"hookVersion\", {\n    typeName: \"My::Sample::Hook\",\n    schemaHandlerPackage: \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n});\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {typeVersionArn: hookVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_version = aws_native.cloudformation.HookVersion(\"hookVersion\",\n    type_name=\"My::Sample::Hook\",\n    schema_handler_package=\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\")\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", type_version_arn=hook_version.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookVersion = new AwsNative.CloudFormation.HookVersion(\"hookVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        SchemaHandlerPackage = \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n    });\n\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeVersionArn = hookVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\thookVersion, err := cloudformation.NewHookVersion(ctx, \"hookVersion\", \u0026cloudformation.HookVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Hook\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeVersionArn: hookVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookVersion = new aws_native.cloudformation.HookVersion(\"hookVersion\", {\n    typeName: \"My::Sample::Hook\",\n    schemaHandlerPackage: \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n});\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {typeVersionArn: hookVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_version = aws_native.cloudformation.HookVersion(\"hookVersion\",\n    type_name=\"My::Sample::Hook\",\n    schema_handler_package=\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\")\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", type_version_arn=hook_version.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookVersion = new AwsNative.CloudFormation.HookVersion(\"hookVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        SchemaHandlerPackage = \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookVersion(ctx, \"hookVersion\", \u0026cloudformation.HookVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Hook\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookVersion = new aws_native.cloudformation.HookVersion(\"hookVersion\", {\n    typeName: \"My::Sample::Hook\",\n    schemaHandlerPackage: \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_version = aws_native.cloudformation.HookVersion(\"hookVersion\",\n    type_name=\"My::Sample::Hook\",\n    schema_handler_package=\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookVersion = new AwsNative.CloudFormation.HookVersion(\"hookVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        SchemaHandlerPackage = \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewHookVersion(ctx, \"hookVersion\", \u0026cloudformation.HookVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Hook\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookVersion = new aws_native.cloudformation.HookVersion(\"hookVersion\", {\n    typeName: \"My::Sample::Hook\",\n    schemaHandlerPackage: \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_version = aws_native.cloudformation.HookVersion(\"hookVersion\",\n    type_name=\"My::Sample::Hook\",\n    schema_handler_package=\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookVersion = new AwsNative.CloudFormation.HookVersion(\"hookVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        SchemaHandlerPackage = \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n    });\n\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeVersionArn = hookVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\thookVersion, err := cloudformation.NewHookVersion(ctx, \"hookVersion\", \u0026cloudformation.HookVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Hook\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeVersionArn: hookVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookVersion = new aws_native.cloudformation.HookVersion(\"hookVersion\", {\n    typeName: \"My::Sample::Hook\",\n    schemaHandlerPackage: \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n});\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {typeVersionArn: hookVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_version = aws_native.cloudformation.HookVersion(\"hookVersion\",\n    type_name=\"My::Sample::Hook\",\n    schema_handler_package=\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\")\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", type_version_arn=hook_version.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hookVersion = new AwsNative.CloudFormation.HookVersion(\"hookVersion\", new()\n    {\n        TypeName = \"My::Sample::Hook\",\n        SchemaHandlerPackage = \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n    });\n\n    var hookDefaultVersion = new AwsNative.CloudFormation.HookDefaultVersion(\"hookDefaultVersion\", new()\n    {\n        TypeVersionArn = hookVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\thookVersion, err := cloudformation.NewHookVersion(ctx, \"hookVersion\", \u0026cloudformation.HookVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Hook\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewHookDefaultVersion(ctx, \"hookDefaultVersion\", \u0026cloudformation.HookDefaultVersionArgs{\n\t\t\tTypeVersionArn: hookVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hookVersion = new aws_native.cloudformation.HookVersion(\"hookVersion\", {\n    typeName: \"My::Sample::Hook\",\n    schemaHandlerPackage: \"s3://my-sample-hookversion-bucket/my-sample-hook.zip\",\n});\nconst hookDefaultVersion = new aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", {typeVersionArn: hookVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhook_version = aws_native.cloudformation.HookVersion(\"hookVersion\",\n    type_name=\"My::Sample::Hook\",\n    schema_handler_package=\"s3://my-sample-hookversion-bucket/my-sample-hook.zip\")\nhook_default_version = aws_native.cloudformation.HookDefaultVersion(\"hookDefaultVersion\", type_version_arn=hook_version.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type, here the HookVersion. This is used to uniquely identify a HookVersion resource"},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM execution role to use to register the type. If your resource type calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. CloudFormation then assumes that execution role to provide your resource type with the appropriate credentials.","replaceOnChanges":true},"isDefaultVersion":{"type":"boolean","description":"Indicates if this type version is the current default version"},"loggingConfig":{"$ref":"#/types/aws-native:cloudformation:HookVersionLoggingConfig","description":"Specifies logging configuration information for a type.","replaceOnChanges":true},"schemaHandlerPackage":{"type":"string","description":"A url to the S3 bucket containing the schema handler package that contains the schema, event handlers, and associated files for the type you want to register.\n\nFor information on generating a schema handler package for the type you want to register, see submit in the CloudFormation CLI User Guide.","replaceOnChanges":true},"typeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type without the versionID."},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","replaceOnChanges":true},"versionId":{"type":"string","description":"The ID of the version of the type represented by this hook instance."},"visibility":{"$ref":"#/types/aws-native:cloudformation:HookVersionVisibility","description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nValid values include:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.\n\nPUBLIC: The type is publically visible and usable within any Amazon account."}},"type":"object","required":["arn","isDefaultVersion","schemaHandlerPackage","typeArn","typeName","versionId","visibility"],"inputProperties":{"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM execution role to use to register the type. If your resource type calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. CloudFormation then assumes that execution role to provide your resource type with the appropriate credentials."},"loggingConfig":{"$ref":"#/types/aws-native:cloudformation:HookVersionLoggingConfig","description":"Specifies logging configuration information for a type."},"schemaHandlerPackage":{"type":"string","description":"A url to the S3 bucket containing the schema handler package that contains the schema, event handlers, and associated files for the type you want to register.\n\nFor information on generating a schema handler package for the type you want to register, see submit in the CloudFormation CLI User Guide."},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."}},"requiredInputs":["schemaHandlerPackage","typeName"]},"aws-native:cloudformation:LambdaHook":{"description":"This is a CloudFormation resource for the first-party AWS::Hooks::LambdaHook.","properties":{"alias":{"type":"string","description":"The typename alias for the hook.","replaceOnChanges":true},"executionRole":{"type":"string","description":"The execution role ARN assumed by Hooks to invoke Lambda."},"failureMode":{"$ref":"#/types/aws-native:cloudformation:LambdaHookFailureMode","description":"Attribute to specify CloudFormation behavior on hook failure."},"hookArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the activated hook"},"hookStatus":{"$ref":"#/types/aws-native:cloudformation:LambdaHookHookStatus","description":"Attribute to specify which stacks this hook applies to or should get invoked for"},"lambdaFunction":{"type":"string","description":"Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook."},"stackFilters":{"$ref":"#/types/aws-native:cloudformation:StackFiltersProperties","description":"Filters to allow hooks to target specific stack attributes"},"targetFilters":{"oneOf":[{"$ref":"#/types/aws-native:cloudformation:TargetFilters0Properties"},{"$ref":"#/types/aws-native:cloudformation:TargetFilters1Properties"}],"description":"Attribute to specify which targets should invoke the hook"},"targetOperations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:LambdaHookTargetOperation"},"description":"Which operations should this Hook run against? Resource changes, stacks or change sets."}},"type":"object","required":["alias","executionRole","failureMode","hookArn","hookStatus","lambdaFunction","targetOperations"],"inputProperties":{"alias":{"type":"string","description":"The typename alias for the hook."},"executionRole":{"type":"string","description":"The execution role ARN assumed by Hooks to invoke Lambda."},"failureMode":{"$ref":"#/types/aws-native:cloudformation:LambdaHookFailureMode","description":"Attribute to specify CloudFormation behavior on hook failure."},"hookStatus":{"$ref":"#/types/aws-native:cloudformation:LambdaHookHookStatus","description":"Attribute to specify which stacks this hook applies to or should get invoked for"},"lambdaFunction":{"type":"string","description":"Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook."},"stackFilters":{"$ref":"#/types/aws-native:cloudformation:StackFiltersProperties","description":"Filters to allow hooks to target specific stack attributes"},"targetFilters":{"oneOf":[{"$ref":"#/types/aws-native:cloudformation:TargetFilters0Properties"},{"$ref":"#/types/aws-native:cloudformation:TargetFilters1Properties"}],"description":"Attribute to specify which targets should invoke the hook"},"targetOperations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:LambdaHookTargetOperation"},"description":"Which operations should this Hook run against? Resource changes, stacks or change sets."}},"requiredInputs":["alias","executionRole","failureMode","hookStatus","lambdaFunction","targetOperations"]},"aws-native:cloudformation:ModuleDefaultVersion":{"description":"A module that has been registered in the CloudFormation registry as the default version","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the module version to set as the default version.","replaceOnChanges":true},"moduleName":{"type":"string","description":"The name of a module existing in the registry.","replaceOnChanges":true},"versionId":{"type":"string","description":"The ID of an existing version of the named module to set as the default.","replaceOnChanges":true}},"type":"object","inputProperties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the module version to set as the default version."},"moduleName":{"type":"string","description":"The name of a module existing in the registry."},"versionId":{"type":"string","description":"The ID of an existing version of the named module to set as the default."}}},"aws-native:cloudformation:ModuleVersion":{"description":"A module that has been registered in the CloudFormation registry.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var moduleVersion1 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion1\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n    });\n\n    var moduleVersion2 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion2\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            moduleVersion1,\n        },\n    });\n\n    var moduleDefaultVersion = new AwsNative.CloudFormation.ModuleDefaultVersion(\"moduleDefaultVersion\", new()\n    {\n        Arn = moduleVersion2.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmoduleVersion1, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion1\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmoduleVersion2, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion2\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tmoduleVersion1,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewModuleDefaultVersion(ctx, \"moduleDefaultVersion\", \u0026cloudformation.ModuleDefaultVersionArgs{\n\t\t\tArn: moduleVersion2.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst moduleVersion1 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion1\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n});\nconst moduleVersion2 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion2\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n}, {\n    dependsOn: [moduleVersion1],\n});\nconst moduleDefaultVersion = new aws_native.cloudformation.ModuleDefaultVersion(\"moduleDefaultVersion\", {arn: moduleVersion2.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmodule_version1 = aws_native.cloudformation.ModuleVersion(\"moduleVersion1\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\")\nmodule_version2 = aws_native.cloudformation.ModuleVersion(\"moduleVersion2\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    opts = pulumi.ResourceOptions(depends_on=[module_version1]))\nmodule_default_version = aws_native.cloudformation.ModuleDefaultVersion(\"moduleDefaultVersion\", arn=module_version2.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var moduleVersion1 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion1\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n    });\n\n    var moduleVersion2 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion2\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            moduleVersion1,\n        },\n    });\n\n    var moduleDefaultVersion = new AwsNative.CloudFormation.ModuleDefaultVersion(\"moduleDefaultVersion\", new()\n    {\n        Arn = moduleVersion2.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmoduleVersion1, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion1\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmoduleVersion2, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion2\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tmoduleVersion1,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewModuleDefaultVersion(ctx, \"moduleDefaultVersion\", \u0026cloudformation.ModuleDefaultVersionArgs{\n\t\t\tArn: moduleVersion2.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst moduleVersion1 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion1\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n});\nconst moduleVersion2 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion2\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n}, {\n    dependsOn: [moduleVersion1],\n});\nconst moduleDefaultVersion = new aws_native.cloudformation.ModuleDefaultVersion(\"moduleDefaultVersion\", {arn: moduleVersion2.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmodule_version1 = aws_native.cloudformation.ModuleVersion(\"moduleVersion1\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\")\nmodule_version2 = aws_native.cloudformation.ModuleVersion(\"moduleVersion2\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    opts = pulumi.ResourceOptions(depends_on=[module_version1]))\nmodule_default_version = aws_native.cloudformation.ModuleDefaultVersion(\"moduleDefaultVersion\", arn=module_version2.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var moduleVersion = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst moduleVersion = new aws_native.cloudformation.ModuleVersion(\"moduleVersion\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmodule_version = aws_native.cloudformation.ModuleVersion(\"moduleVersion\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var moduleVersion = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst moduleVersion = new aws_native.cloudformation.ModuleVersion(\"moduleVersion\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmodule_version = aws_native.cloudformation.ModuleVersion(\"moduleVersion\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var moduleVersion1 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion1\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n    });\n\n    var moduleVersion2 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion2\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            moduleVersion1,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmoduleVersion1, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion1\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewModuleVersion(ctx, \"moduleVersion2\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tmoduleVersion1,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst moduleVersion1 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion1\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n});\nconst moduleVersion2 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion2\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n}, {\n    dependsOn: [moduleVersion1],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmodule_version1 = aws_native.cloudformation.ModuleVersion(\"moduleVersion1\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\")\nmodule_version2 = aws_native.cloudformation.ModuleVersion(\"moduleVersion2\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    opts = pulumi.ResourceOptions(depends_on=[module_version1]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var moduleVersion1 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion1\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n    });\n\n    var moduleVersion2 = new AwsNative.CloudFormation.ModuleVersion(\"moduleVersion2\", new()\n    {\n        ModuleName = \"My::Sample::Test::MODULE\",\n        ModulePackage = \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            moduleVersion1,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmoduleVersion1, err := cloudformation.NewModuleVersion(ctx, \"moduleVersion1\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewModuleVersion(ctx, \"moduleVersion2\", \u0026cloudformation.ModuleVersionArgs{\n\t\t\tModuleName:    pulumi.String(\"My::Sample::Test::MODULE\"),\n\t\t\tModulePackage: pulumi.String(\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tmoduleVersion1,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst moduleVersion1 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion1\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\",\n});\nconst moduleVersion2 = new aws_native.cloudformation.ModuleVersion(\"moduleVersion2\", {\n    moduleName: \"My::Sample::Test::MODULE\",\n    modulePackage: \"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n}, {\n    dependsOn: [moduleVersion1],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmodule_version1 = aws_native.cloudformation.ModuleVersion(\"moduleVersion1\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v1.zip\")\nmodule_version2 = aws_native.cloudformation.ModuleVersion(\"moduleVersion2\",\n    module_name=\"My::Sample::Test::MODULE\",\n    module_package=\"s3://my-sample-moduleversion-bucket/sample-module-package-v2.zip\",\n    opts = pulumi.ResourceOptions(depends_on=[module_version1]))\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the module."},"description":{"type":"string","description":"The description of the registered module."},"documentationUrl":{"type":"string","description":"The URL of a page providing detailed documentation for this module."},"isDefaultVersion":{"type":"boolean","description":"Indicator of whether this module version is the current default version"},"moduleName":{"type":"string","description":"The name of the module being registered.\n\nRecommended module naming pattern: company_or_organization::service::type::MODULE.","replaceOnChanges":true},"modulePackage":{"type":"string","description":"The url to the S3 bucket containing the schema and template fragment for the module you want to register.","replaceOnChanges":true},"schema":{"type":"string","description":"The schema defining input parameters to and resources generated by the module."},"timeCreated":{"type":"string","description":"The time that the specified module version was registered."},"versionId":{"type":"string","description":"The version ID of the module represented by this module instance."},"visibility":{"$ref":"#/types/aws-native:cloudformation:ModuleVersionVisibility","description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nThe only allowed value at present is:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE."}},"type":"object","required":["arn","description","documentationUrl","isDefaultVersion","moduleName","modulePackage","schema","timeCreated","versionId","visibility"],"inputProperties":{"moduleName":{"type":"string","description":"The name of the module being registered.\n\nRecommended module naming pattern: company_or_organization::service::type::MODULE."},"modulePackage":{"type":"string","description":"The url to the S3 bucket containing the schema and template fragment for the module you want to register."}},"requiredInputs":["moduleName","modulePackage"]},"aws-native:cloudformation:PublicTypeVersion":{"description":"Test and Publish a resource that has been registered in the CloudFormation Registry.","properties":{"arn":{"type":"string","description":"The Amazon Resource Number (ARN) of the extension.","replaceOnChanges":true},"logDeliveryBucket":{"type":"string","description":"A url to the S3 bucket where logs for the testType run will be available","replaceOnChanges":true},"publicTypeArn":{"type":"string","description":"The Amazon Resource Number (ARN) assigned to the public extension upon publication"},"publicVersionNumber":{"type":"string","description":"The version number of a public third-party extension","replaceOnChanges":true},"publisherId":{"type":"string","description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region."},"type":{"$ref":"#/types/aws-native:cloudformation:PublicTypeVersionType","description":"The kind of extension","replaceOnChanges":true},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","replaceOnChanges":true},"typeVersionArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the extension with the versionId."}},"type":"object","required":["publicTypeArn","publisherId","typeVersionArn"],"inputProperties":{"arn":{"type":"string","description":"The Amazon Resource Number (ARN) of the extension."},"logDeliveryBucket":{"type":"string","description":"A url to the S3 bucket where logs for the testType run will be available"},"publicVersionNumber":{"type":"string","description":"The version number of a public third-party extension"},"type":{"$ref":"#/types/aws-native:cloudformation:PublicTypeVersionType","description":"The kind of extension"},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."}}},"aws-native:cloudformation:Publisher":{"description":"Register as a publisher in the CloudFormation Registry.","properties":{"acceptTermsAndConditions":{"type":"boolean","description":"Whether you accept the terms and conditions for publishing extensions in the CloudFormation registry. You must accept the terms and conditions in order to publish public extensions to the CloudFormation registry. The terms and conditions can be found at https://cloudformation-registry-documents.s3.amazonaws.com/Terms_and_Conditions_for_AWS_CloudFormation_Registry_Publishers.pdf","replaceOnChanges":true},"connectionArn":{"type":"string","description":"If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account.","replaceOnChanges":true},"identityProvider":{"$ref":"#/types/aws-native:cloudformation:PublisherIdentityProvider","description":"The type of account used as the identity provider when registering this publisher with CloudFormation."},"publisherId":{"type":"string","description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region."},"publisherProfile":{"type":"string","description":"The URL to the publisher's profile with the identity provider."},"publisherStatus":{"$ref":"#/types/aws-native:cloudformation:PublisherStatus","description":"Whether the publisher is verified."}},"type":"object","required":["acceptTermsAndConditions","identityProvider","publisherId","publisherProfile","publisherStatus"],"inputProperties":{"acceptTermsAndConditions":{"type":"boolean","description":"Whether you accept the terms and conditions for publishing extensions in the CloudFormation registry. You must accept the terms and conditions in order to publish public extensions to the CloudFormation registry. The terms and conditions can be found at https://cloudformation-registry-documents.s3.amazonaws.com/Terms_and_Conditions_for_AWS_CloudFormation_Registry_Publishers.pdf"},"connectionArn":{"type":"string","description":"If you are using a Bitbucket or GitHub account for identity verification, the Amazon Resource Name (ARN) for your connection to that account."}},"requiredInputs":["acceptTermsAndConditions"]},"aws-native:cloudformation:ResourceDefaultVersion":{"description":"The default version of a resource that has been registered in the CloudFormation Registry.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type. This is used to uniquely identify a ResourceDefaultVersion"},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."},"typeVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type version."},"versionId":{"type":"string","description":"The ID of an existing version of the resource to set as the default."}},"type":"object","required":["arn"],"inputProperties":{"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."},"typeVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type version."},"versionId":{"type":"string","description":"The ID of an existing version of the resource to set as the default."}}},"aws-native:cloudformation:ResourceVersion":{"description":"A resource that has been registered in the CloudFormation Registry.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var resourceVersion = new AwsNative.CloudFormation.ResourceVersion(\"resourceVersion\", new()\n    {\n        TypeName = \"My::Sample::Resource\",\n        SchemaHandlerPackage = \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n    });\n\n    var resourceDefaultVersion = new AwsNative.CloudFormation.ResourceDefaultVersion(\"resourceDefaultVersion\", new()\n    {\n        TypeVersionArn = resourceVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tresourceVersion, err := cloudformation.NewResourceVersion(ctx, \"resourceVersion\", \u0026cloudformation.ResourceVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Resource\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewResourceDefaultVersion(ctx, \"resourceDefaultVersion\", \u0026cloudformation.ResourceDefaultVersionArgs{\n\t\t\tTypeVersionArn: resourceVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst resourceVersion = new aws_native.cloudformation.ResourceVersion(\"resourceVersion\", {\n    typeName: \"My::Sample::Resource\",\n    schemaHandlerPackage: \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n});\nconst resourceDefaultVersion = new aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", {typeVersionArn: resourceVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nresource_version = aws_native.cloudformation.ResourceVersion(\"resourceVersion\",\n    type_name=\"My::Sample::Resource\",\n    schema_handler_package=\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\")\nresource_default_version = aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", type_version_arn=resource_version.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var resourceVersion = new AwsNative.CloudFormation.ResourceVersion(\"resourceVersion\", new()\n    {\n        TypeName = \"My::Sample::Resource\",\n        SchemaHandlerPackage = \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n    });\n\n    var resourceDefaultVersion = new AwsNative.CloudFormation.ResourceDefaultVersion(\"resourceDefaultVersion\", new()\n    {\n        TypeVersionArn = resourceVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tresourceVersion, err := cloudformation.NewResourceVersion(ctx, \"resourceVersion\", \u0026cloudformation.ResourceVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Resource\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewResourceDefaultVersion(ctx, \"resourceDefaultVersion\", \u0026cloudformation.ResourceDefaultVersionArgs{\n\t\t\tTypeVersionArn: resourceVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst resourceVersion = new aws_native.cloudformation.ResourceVersion(\"resourceVersion\", {\n    typeName: \"My::Sample::Resource\",\n    schemaHandlerPackage: \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n});\nconst resourceDefaultVersion = new aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", {typeVersionArn: resourceVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nresource_version = aws_native.cloudformation.ResourceVersion(\"resourceVersion\",\n    type_name=\"My::Sample::Resource\",\n    schema_handler_package=\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\")\nresource_default_version = aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", type_version_arn=resource_version.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var resourceVersion = new AwsNative.CloudFormation.ResourceVersion(\"resourceVersion\", new()\n    {\n        TypeName = \"My::Sample::Resource\",\n        SchemaHandlerPackage = \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewResourceVersion(ctx, \"resourceVersion\", \u0026cloudformation.ResourceVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Resource\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst resourceVersion = new aws_native.cloudformation.ResourceVersion(\"resourceVersion\", {\n    typeName: \"My::Sample::Resource\",\n    schemaHandlerPackage: \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nresource_version = aws_native.cloudformation.ResourceVersion(\"resourceVersion\",\n    type_name=\"My::Sample::Resource\",\n    schema_handler_package=\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var resourceVersion = new AwsNative.CloudFormation.ResourceVersion(\"resourceVersion\", new()\n    {\n        TypeName = \"My::Sample::Resource\",\n        SchemaHandlerPackage = \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudformation.NewResourceVersion(ctx, \"resourceVersion\", \u0026cloudformation.ResourceVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Resource\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst resourceVersion = new aws_native.cloudformation.ResourceVersion(\"resourceVersion\", {\n    typeName: \"My::Sample::Resource\",\n    schemaHandlerPackage: \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nresource_version = aws_native.cloudformation.ResourceVersion(\"resourceVersion\",\n    type_name=\"My::Sample::Resource\",\n    schema_handler_package=\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var resourceVersion = new AwsNative.CloudFormation.ResourceVersion(\"resourceVersion\", new()\n    {\n        TypeName = \"My::Sample::Resource\",\n        SchemaHandlerPackage = \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n    });\n\n    var resourceDefaultVersion = new AwsNative.CloudFormation.ResourceDefaultVersion(\"resourceDefaultVersion\", new()\n    {\n        TypeVersionArn = resourceVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tresourceVersion, err := cloudformation.NewResourceVersion(ctx, \"resourceVersion\", \u0026cloudformation.ResourceVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Resource\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewResourceDefaultVersion(ctx, \"resourceDefaultVersion\", \u0026cloudformation.ResourceDefaultVersionArgs{\n\t\t\tTypeVersionArn: resourceVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst resourceVersion = new aws_native.cloudformation.ResourceVersion(\"resourceVersion\", {\n    typeName: \"My::Sample::Resource\",\n    schemaHandlerPackage: \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n});\nconst resourceDefaultVersion = new aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", {typeVersionArn: resourceVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nresource_version = aws_native.cloudformation.ResourceVersion(\"resourceVersion\",\n    type_name=\"My::Sample::Resource\",\n    schema_handler_package=\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\")\nresource_default_version = aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", type_version_arn=resource_version.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var resourceVersion = new AwsNative.CloudFormation.ResourceVersion(\"resourceVersion\", new()\n    {\n        TypeName = \"My::Sample::Resource\",\n        SchemaHandlerPackage = \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n    });\n\n    var resourceDefaultVersion = new AwsNative.CloudFormation.ResourceDefaultVersion(\"resourceDefaultVersion\", new()\n    {\n        TypeVersionArn = resourceVersion.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudformation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tresourceVersion, err := cloudformation.NewResourceVersion(ctx, \"resourceVersion\", \u0026cloudformation.ResourceVersionArgs{\n\t\t\tTypeName:             pulumi.String(\"My::Sample::Resource\"),\n\t\t\tSchemaHandlerPackage: pulumi.String(\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudformation.NewResourceDefaultVersion(ctx, \"resourceDefaultVersion\", \u0026cloudformation.ResourceDefaultVersionArgs{\n\t\t\tTypeVersionArn: resourceVersion.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst resourceVersion = new aws_native.cloudformation.ResourceVersion(\"resourceVersion\", {\n    typeName: \"My::Sample::Resource\",\n    schemaHandlerPackage: \"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\",\n});\nconst resourceDefaultVersion = new aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", {typeVersionArn: resourceVersion.id});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nresource_version = aws_native.cloudformation.ResourceVersion(\"resourceVersion\",\n    type_name=\"My::Sample::Resource\",\n    schema_handler_package=\"s3://my-sample-resourceversion-bucket/my-sample-resource.zip\")\nresource_default_version = aws_native.cloudformation.ResourceDefaultVersion(\"resourceDefaultVersion\", type_version_arn=resource_version.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type, here the ResourceVersion. This is used to uniquely identify a ResourceVersion resource"},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM execution role to use to register the type. If your resource type calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. CloudFormation then assumes that execution role to provide your resource type with the appropriate credentials.","replaceOnChanges":true},"isDefaultVersion":{"type":"boolean","description":"Indicates if this type version is the current default version"},"loggingConfig":{"$ref":"#/types/aws-native:cloudformation:ResourceVersionLoggingConfig","description":"Specifies logging configuration information for a type.","replaceOnChanges":true},"provisioningType":{"$ref":"#/types/aws-native:cloudformation:ResourceVersionProvisioningType","description":"The provisioning behavior of the type. AWS CloudFormation determines the provisioning type during registration, based on the types of handlers in the schema handler package submitted."},"schemaHandlerPackage":{"type":"string","description":"A url to the S3 bucket containing the schema handler package that contains the schema, event handlers, and associated files for the type you want to register.\n\nFor information on generating a schema handler package for the type you want to register, see submit in the CloudFormation CLI User Guide.","replaceOnChanges":true},"typeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type without the versionID."},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","replaceOnChanges":true},"versionId":{"type":"string","description":"The ID of the version of the type represented by this resource instance."},"visibility":{"$ref":"#/types/aws-native:cloudformation:ResourceVersionVisibility","description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nValid values include:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.\n\nPUBLIC: The type is publically visible and usable within any Amazon account."}},"type":"object","required":["arn","isDefaultVersion","provisioningType","schemaHandlerPackage","typeArn","typeName","versionId","visibility"],"inputProperties":{"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM execution role to use to register the type. If your resource type calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. CloudFormation then assumes that execution role to provide your resource type with the appropriate credentials."},"loggingConfig":{"$ref":"#/types/aws-native:cloudformation:ResourceVersionLoggingConfig","description":"Specifies logging configuration information for a type."},"schemaHandlerPackage":{"type":"string","description":"A url to the S3 bucket containing the schema handler package that contains the schema, event handlers, and associated files for the type you want to register.\n\nFor information on generating a schema handler package for the type you want to register, see submit in the CloudFormation CLI User Guide."},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."}},"requiredInputs":["schemaHandlerPackage","typeName"]},"aws-native:cloudformation:Stack":{"description":"The AWS::CloudFormation::Stack resource nests a stack as a resource in a top-level template.","properties":{"capabilities":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackCapabilitiesItem"},"description":"In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.\n\n- `CAPABILITY_IAM` and `CAPABILITY_NAMED_IAM`\n\nSome stack templates might include resources that can affect permissions in your AWS account ; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.\n\nThe following IAM resources require you to specify either the `CAPABILITY_IAM` or `CAPABILITY_NAMED_IAM` capability.\n\n- If you have IAM resources, you can specify either capability.\n- If you have IAM resources with custom names, you *must* specify `CAPABILITY_NAMED_IAM` .\n- If you don't specify either of these capabilities, CloudFormation returns an `InsufficientCapabilities` error.\n\nIf your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.\n\n- [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html)\n- [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html)\n- [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html)\n- [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html)\n- [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)\n- [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html)\n- [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html)\n\nFor more information, see [Acknowledging IAM resources in CloudFormation templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities) in the *CloudFormation User Guide* .\n- `CAPABILITY_AUTO_EXPAND`\n\nSome template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the [AWS::Include](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-include.html) and [AWS::Serverless](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-serverless.html) transforms, which are macros hosted by CloudFormation .\n\nIf you want to create a stack from a stack template that contains macros *and* nested stacks, you must create the stack directly from the template using this capability.\n\n\u003e You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.\n\u003e \n\u003e Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified. \n\nFor more information, see [Perform custom processing on CloudFormation templates with template macros](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html) in the *CloudFormation User Guide* ."},"changeSetId":{"type":"string","description":"Returns the unique identifier of the change set."},"creationTime":{"type":"string","description":"Returns the time the stack was created."},"description":{"type":"string","description":"A user-defined description associated with the stack."},"disableRollback":{"type":"boolean","description":"Set to `true` to disable rollback of the stack if stack creation failed. You can specify either `DisableRollback` or `OnFailure` , but not both.\n\nDefault: `false`"},"enableTerminationProtection":{"type":"boolean","description":"Whether to enable termination protection on the specified stack. If a user attempts to delete a stack with termination protection enabled, the operation fails and the stack remains unchanged. For more information, see [Protect CloudFormation stacks from being deleted](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-protect-stacks.html) in the *CloudFormation User Guide* . Termination protection is deactivated on stacks by default.\n\nFor nested stacks, termination protection is set on the root stack and can't be changed directly on the nested stack."},"lastUpdateTime":{"type":"string","description":"Returns the time the stack was last updated. This will only be returned if the stack has been updated at least once."},"notificationArns":{"type":"array","items":{"type":"string"},"description":"The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI)."},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackOutput"},"description":"Returns a list of output structures."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter.\n\n\u003e If you use the `Ref` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type `String` . In other words, you can't pass values that are of type `CommaDelimitedList` to nested stacks. \n\nRequired if the nested stack requires input parameters.\n\nWhether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced."},"parentId":{"type":"string","description":"For nested stacks, returns the stack ID of the direct parent of this stack. For the first level of nested stacks, the root stack is also the parent stack."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that CloudFormation assumes to create the stack. CloudFormation uses the role's credentials to make calls on your behalf. CloudFormation always uses this role for all future operations on the stack. Provided that users have permission to operate on the stack, CloudFormation uses this role even if the users don't have permission to pass it. Ensure that the role grants least privilege.\n\nIf you don't specify a value, CloudFormation uses the role that was previously associated with the stack. If no role is available, CloudFormation uses a temporary session that's generated from your user credentials."},"rootId":{"type":"string","description":"For nested stacks, returns the stack ID of the top-level stack to which the nested stack ultimately belongs."},"stackId":{"type":"string","description":"Returns the unique identifier of the stack."},"stackName":{"type":"string","description":"The name that's associated with the stack. The name must be unique in the Region in which you are creating the stack.\n\n\u003e A stack name can contain only alphanumeric characters (case sensitive) and hyphens. It must start with an alphabetical character and can't be longer than 128 characters.","replaceOnChanges":true},"stackPolicyBody":{"$ref":"pulumi.json#/Any","description":"Structure that contains the stack policy body. For more information, see [Prevent updates to stack resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html) in the *CloudFormation User Guide* . You can specify either the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudFormation::Stack` for more information about the expected schema for this property."},"stackPolicyUrl":{"type":"string","description":"Location of a file that contains the stack policy. The URL must point to a policy (maximum size: 16 KB) located in an S3 bucket in the same Region as the stack. You can specify either the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both."},"stackStatus":{"$ref":"#/types/aws-native:cloudformation:StackStatus","description":"Returns a success or failure message associated with the stack status."},"stackStatusReason":{"type":"string","description":"Success/failure message associated with the stack status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified."},"templateBody":{"$ref":"pulumi.json#/Any","description":"Structure that contains the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.\n\nConditional: You must specify either the `TemplateBody` or the `TemplateURL` parameter, but not both.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudFormation::Stack` for more information about the expected schema for this property."},"templateUrl":{"type":"string","description":"The URL of a file that contains the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with `https://` .\n\nWhether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced."},"timeoutInMinutes":{"type":"integer","description":"The length of time, in minutes, that CloudFormation waits for the nested stack to reach the `CREATE_COMPLETE` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the `CREATE_COMPLETE` state, it marks the nested stack resource as `CREATE_COMPLETE` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches `CREATE_COMPLETE` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack.\n\nUpdates aren't supported."}},"type":"object","required":["changeSetId","creationTime","lastUpdateTime","outputs","parentId","rootId","stackId","stackName","stackStatus"],"inputProperties":{"capabilities":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackCapabilitiesItem"},"description":"In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.\n\n- `CAPABILITY_IAM` and `CAPABILITY_NAMED_IAM`\n\nSome stack templates might include resources that can affect permissions in your AWS account ; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.\n\nThe following IAM resources require you to specify either the `CAPABILITY_IAM` or `CAPABILITY_NAMED_IAM` capability.\n\n- If you have IAM resources, you can specify either capability.\n- If you have IAM resources with custom names, you *must* specify `CAPABILITY_NAMED_IAM` .\n- If you don't specify either of these capabilities, CloudFormation returns an `InsufficientCapabilities` error.\n\nIf your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.\n\n- [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html)\n- [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html)\n- [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html)\n- [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html)\n- [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)\n- [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html)\n- [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html)\n\nFor more information, see [Acknowledging IAM resources in CloudFormation templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities) in the *CloudFormation User Guide* .\n- `CAPABILITY_AUTO_EXPAND`\n\nSome template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the [AWS::Include](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-include.html) and [AWS::Serverless](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-serverless.html) transforms, which are macros hosted by CloudFormation .\n\nIf you want to create a stack from a stack template that contains macros *and* nested stacks, you must create the stack directly from the template using this capability.\n\n\u003e You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.\n\u003e \n\u003e Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified. \n\nFor more information, see [Perform custom processing on CloudFormation templates with template macros](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html) in the *CloudFormation User Guide* ."},"description":{"type":"string","description":"A user-defined description associated with the stack."},"disableRollback":{"type":"boolean","description":"Set to `true` to disable rollback of the stack if stack creation failed. You can specify either `DisableRollback` or `OnFailure` , but not both.\n\nDefault: `false`"},"enableTerminationProtection":{"type":"boolean","description":"Whether to enable termination protection on the specified stack. If a user attempts to delete a stack with termination protection enabled, the operation fails and the stack remains unchanged. For more information, see [Protect CloudFormation stacks from being deleted](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-protect-stacks.html) in the *CloudFormation User Guide* . Termination protection is deactivated on stacks by default.\n\nFor nested stacks, termination protection is set on the root stack and can't be changed directly on the nested stack."},"notificationArns":{"type":"array","items":{"type":"string"},"description":"The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI)."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter.\n\n\u003e If you use the `Ref` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type `String` . In other words, you can't pass values that are of type `CommaDelimitedList` to nested stacks. \n\nRequired if the nested stack requires input parameters.\n\nWhether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that CloudFormation assumes to create the stack. CloudFormation uses the role's credentials to make calls on your behalf. CloudFormation always uses this role for all future operations on the stack. Provided that users have permission to operate on the stack, CloudFormation uses this role even if the users don't have permission to pass it. Ensure that the role grants least privilege.\n\nIf you don't specify a value, CloudFormation uses the role that was previously associated with the stack. If no role is available, CloudFormation uses a temporary session that's generated from your user credentials."},"stackName":{"type":"string","description":"The name that's associated with the stack. The name must be unique in the Region in which you are creating the stack.\n\n\u003e A stack name can contain only alphanumeric characters (case sensitive) and hyphens. It must start with an alphabetical character and can't be longer than 128 characters."},"stackPolicyBody":{"$ref":"pulumi.json#/Any","description":"Structure that contains the stack policy body. For more information, see [Prevent updates to stack resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html) in the *CloudFormation User Guide* . You can specify either the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudFormation::Stack` for more information about the expected schema for this property."},"stackPolicyUrl":{"type":"string","description":"Location of a file that contains the stack policy. The URL must point to a policy (maximum size: 16 KB) located in an S3 bucket in the same Region as the stack. You can specify either the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both."},"stackStatusReason":{"type":"string","description":"Success/failure message associated with the stack status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified."},"templateBody":{"$ref":"pulumi.json#/Any","description":"Structure that contains the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.\n\nConditional: You must specify either the `TemplateBody` or the `TemplateURL` parameter, but not both.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudFormation::Stack` for more information about the expected schema for this property."},"templateUrl":{"type":"string","description":"The URL of a file that contains the template body. The URL must point to a template (max size: 1 MB) that's located in an Amazon S3 bucket. The location for an Amazon S3 bucket must start with `https://` .\n\nWhether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced."},"timeoutInMinutes":{"type":"integer","description":"The length of time, in minutes, that CloudFormation waits for the nested stack to reach the `CREATE_COMPLETE` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the `CREATE_COMPLETE` state, it marks the nested stack resource as `CREATE_COMPLETE` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches `CREATE_COMPLETE` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack.\n\nUpdates aren't supported."}}},"aws-native:cloudformation:StackSet":{"description":"StackSet as a resource provides one-click experience for provisioning a StackSet and StackInstances","properties":{"administrationRoleArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account."},"autoDeployment":{"$ref":"#/types/aws-native:cloudformation:StackSetAutoDeployment","description":"Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to the target organization or organizational unit (OU). Specify only if PermissionModel is SERVICE_MANAGED."},"callAs":{"$ref":"#/types/aws-native:cloudformation:StackSetCallAs","description":"Specifies the AWS account that you are acting from. By default, SELF is specified. For self-managed permissions, specify SELF; for service-managed permissions, if you are signed in to the organization's management account, specify SELF. If you are signed in to a delegated administrator account, specify DELEGATED_ADMIN."},"capabilities":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetCapability"},"description":"In some cases, you must explicitly acknowledge that your stack set template contains certain capabilities in order for AWS CloudFormation to create the stack set and related stack instances."},"description":{"type":"string","description":"A description of the stack set. You can use the description to identify the stack set's purpose or other important information."},"executionRoleName":{"type":"string","description":"The name of the IAM execution role to use to create the stack set. If you do not specify an execution role, AWS CloudFormation uses the AWSCloudFormationStackSetExecutionRole role for the stack set operation."},"managedExecution":{"$ref":"#/types/aws-native:cloudformation:ManagedExecutionProperties","description":"Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations."},"operationPreferences":{"$ref":"#/types/aws-native:cloudformation:StackSetOperationPreferences","description":"The user-specified preferences for how CloudFormation performs a StackSet operation."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetParameter"},"description":"The input parameters for the stack set template."},"permissionModel":{"$ref":"#/types/aws-native:cloudformation:StackSetPermissionModel","description":"Describes how the IAM roles required for stack set operations are created. By default, SELF-MANAGED is specified.","replaceOnChanges":true},"stackInstancesGroup":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetStackInstances"},"description":"A group of stack instances with parameters in some specific accounts and regions."},"stackSetId":{"type":"string","description":"The ID of the stack set that you're creating."},"stackSetName":{"type":"string","description":"The name to associate with the stack set. The name must be unique in the Region where you create your stack set.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key-value pairs to associate with this stack set and the stacks created from it. AWS CloudFormation also propagates these tags to supported resources that are created in the stacks. A maximum number of 50 tags can be specified."},"templateBody":{"type":"string","description":"The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes."},"templateUrl":{"type":"string","description":"Location of file containing the template body. The URL must point to a template (max size: 460,800 bytes) that is located in an Amazon S3 bucket."}},"type":"object","required":["permissionModel","stackSetId","stackSetName"],"inputProperties":{"administrationRoleArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account."},"autoDeployment":{"$ref":"#/types/aws-native:cloudformation:StackSetAutoDeployment","description":"Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to the target organization or organizational unit (OU). Specify only if PermissionModel is SERVICE_MANAGED."},"callAs":{"$ref":"#/types/aws-native:cloudformation:StackSetCallAs","description":"Specifies the AWS account that you are acting from. By default, SELF is specified. For self-managed permissions, specify SELF; for service-managed permissions, if you are signed in to the organization's management account, specify SELF. If you are signed in to a delegated administrator account, specify DELEGATED_ADMIN."},"capabilities":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetCapability"},"description":"In some cases, you must explicitly acknowledge that your stack set template contains certain capabilities in order for AWS CloudFormation to create the stack set and related stack instances."},"description":{"type":"string","description":"A description of the stack set. You can use the description to identify the stack set's purpose or other important information."},"executionRoleName":{"type":"string","description":"The name of the IAM execution role to use to create the stack set. If you do not specify an execution role, AWS CloudFormation uses the AWSCloudFormationStackSetExecutionRole role for the stack set operation."},"managedExecution":{"$ref":"#/types/aws-native:cloudformation:ManagedExecutionProperties","description":"Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations."},"operationPreferences":{"$ref":"#/types/aws-native:cloudformation:StackSetOperationPreferences","description":"The user-specified preferences for how CloudFormation performs a StackSet operation."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetParameter"},"description":"The input parameters for the stack set template."},"permissionModel":{"$ref":"#/types/aws-native:cloudformation:StackSetPermissionModel","description":"Describes how the IAM roles required for stack set operations are created. By default, SELF-MANAGED is specified."},"stackInstancesGroup":{"type":"array","items":{"$ref":"#/types/aws-native:cloudformation:StackSetStackInstances"},"description":"A group of stack instances with parameters in some specific accounts and regions."},"stackSetName":{"type":"string","description":"The name to associate with the stack set. The name must be unique in the Region where you create your stack set."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key-value pairs to associate with this stack set and the stacks created from it. AWS CloudFormation also propagates these tags to supported resources that are created in the stacks. A maximum number of 50 tags can be specified."},"templateBody":{"type":"string","description":"The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes."},"templateUrl":{"type":"string","description":"Location of file containing the template body. The URL must point to a template (max size: 460,800 bytes) that is located in an Amazon S3 bucket."}},"requiredInputs":["permissionModel"]},"aws-native:cloudformation:TypeActivation":{"description":"Enable a resource that has been published in the CloudFormation Registry.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the extension."},"autoUpdate":{"type":"boolean","description":"Whether to automatically update the extension in this account and region when a new minor version is published by the extension publisher. Major versions released by the publisher must be manually updated."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM execution role to use to register the type. If your resource type calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. CloudFormation then assumes that execution role to provide your resource type with the appropriate credentials."},"loggingConfig":{"$ref":"#/types/aws-native:cloudformation:TypeActivationLoggingConfig","description":"Specifies logging configuration information for a type.","replaceOnChanges":true},"majorVersion":{"type":"string","description":"The Major Version of the type you want to enable"},"publicTypeArn":{"type":"string","description":"The Amazon Resource Number (ARN) assigned to the public extension upon publication"},"publisherId":{"type":"string","description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region."},"type":{"$ref":"#/types/aws-native:cloudformation:TypeActivationType","description":"The kind of extension"},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."},"typeNameAlias":{"type":"string","description":"An alias to assign to the public extension in this account and region. If you specify an alias for the extension, you must then use the alias to refer to the extension in your templates."},"versionBump":{"$ref":"#/types/aws-native:cloudformation:TypeActivationVersionBump","description":"Manually updates a previously-enabled type to a new major or minor version, if available. You can also use this parameter to update the value of AutoUpdateEnabled"}},"type":"object","required":["arn"],"inputProperties":{"autoUpdate":{"type":"boolean","description":"Whether to automatically update the extension in this account and region when a new minor version is published by the extension publisher. Major versions released by the publisher must be manually updated."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM execution role to use to register the type. If your resource type calls AWS APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those AWS APIs, and provision that execution role in your account. CloudFormation then assumes that execution role to provide your resource type with the appropriate credentials."},"loggingConfig":{"$ref":"#/types/aws-native:cloudformation:TypeActivationLoggingConfig","description":"Specifies logging configuration information for a type."},"majorVersion":{"type":"string","description":"The Major Version of the type you want to enable"},"publicTypeArn":{"type":"string","description":"The Amazon Resource Number (ARN) assigned to the public extension upon publication"},"publisherId":{"type":"string","description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region."},"type":{"$ref":"#/types/aws-native:cloudformation:TypeActivationType","description":"The kind of extension"},"typeName":{"type":"string","description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type."},"typeNameAlias":{"type":"string","description":"An alias to assign to the public extension in this account and region. If you specify an alias for the extension, you must then use the alias to refer to the extension in your templates."},"versionBump":{"$ref":"#/types/aws-native:cloudformation:TypeActivationVersionBump","description":"Manually updates a previously-enabled type to a new major or minor version, if available. You can also use this parameter to update the value of AutoUpdateEnabled"}}},"aws-native:cloudfront:CachePolicy":{"description":"A cache policy.\n When it's attached to a cache behavior, the cache policy determines the following:\n  +  The values that CloudFront includes in the cache key. These values can include HTTP headers, cookies, and URL query strings. CloudFront uses the cache key to find an object in its cache that it can return to the viewer.\n  +  The default, minimum, and maximum time to live (TTL) values that you want objects to stay in the CloudFront cache.\n  \n The headers, cookies, and query strings that are included in the cache key are also included in requests that CloudFront sends to the origin. CloudFront sends a request when it can't find a valid object in its cache that matches the request's cache key. If you want to send values to the origin but *not* include them in the cache key, use ``OriginRequestPolicy``.","properties":{"awsId":{"type":"string","description":"The unique identifier for the cache policy. For example: `2766f7b2-75c5-41c6-8f06-bf4303a2f2f5` ."},"cachePolicyConfig":{"$ref":"#/types/aws-native:cloudfront:CachePolicyConfig","description":"The cache policy configuration."},"lastModifiedTime":{"type":"string","description":"The date and time when the cache policy was last modified."}},"type":"object","required":["awsId","cachePolicyConfig","lastModifiedTime"],"inputProperties":{"cachePolicyConfig":{"$ref":"#/types/aws-native:cloudfront:CachePolicyConfig","description":"The cache policy configuration."}},"requiredInputs":["cachePolicyConfig"]},"aws-native:cloudfront:CloudFrontOriginAccessIdentity":{"description":"The request to create a new origin access identity (OAI). An origin access identity is a special CloudFront user that you can associate with Amazon S3 origins, so that you can secure all or just some of your Amazon S3 content. For more information, see [Restricting Access to Amazon S3 Content by Using an Origin Access Identity](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) in the *Amazon CloudFront Developer Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudfrontoriginaccessidentity = new AwsNative.CloudFront.CloudFrontOriginAccessIdentity(\"cloudfrontoriginaccessidentity\", new()\n    {\n        CloudFrontOriginAccessIdentityConfig = new AwsNative.CloudFront.Inputs.CloudFrontOriginAccessIdentityConfigArgs\n        {\n            Comment = \"string-value\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudfront\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudfront.NewCloudFrontOriginAccessIdentity(ctx, \"cloudfrontoriginaccessidentity\", \u0026cloudfront.CloudFrontOriginAccessIdentityArgs{\n\t\t\tCloudFrontOriginAccessIdentityConfig: \u0026cloudfront.CloudFrontOriginAccessIdentityConfigArgs{\n\t\t\t\tComment: pulumi.String(\"string-value\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst cloudfrontoriginaccessidentity = new aws_native.cloudfront.CloudFrontOriginAccessIdentity(\"cloudfrontoriginaccessidentity\", {cloudFrontOriginAccessIdentityConfig: {\n    comment: \"string-value\",\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncloudfrontoriginaccessidentity = aws_native.cloudfront.CloudFrontOriginAccessIdentity(\"cloudfrontoriginaccessidentity\", cloud_front_origin_access_identity_config={\n    \"comment\": \"string-value\",\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudfrontoriginaccessidentity = new AwsNative.CloudFront.CloudFrontOriginAccessIdentity(\"cloudfrontoriginaccessidentity\", new()\n    {\n        CloudFrontOriginAccessIdentityConfig = new AwsNative.CloudFront.Inputs.CloudFrontOriginAccessIdentityConfigArgs\n        {\n            Comment = \"string-value\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudfront\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudfront.NewCloudFrontOriginAccessIdentity(ctx, \"cloudfrontoriginaccessidentity\", \u0026cloudfront.CloudFrontOriginAccessIdentityArgs{\n\t\t\tCloudFrontOriginAccessIdentityConfig: \u0026cloudfront.CloudFrontOriginAccessIdentityConfigArgs{\n\t\t\t\tComment: pulumi.String(\"string-value\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst cloudfrontoriginaccessidentity = new aws_native.cloudfront.CloudFrontOriginAccessIdentity(\"cloudfrontoriginaccessidentity\", {cloudFrontOriginAccessIdentityConfig: {\n    comment: \"string-value\",\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncloudfrontoriginaccessidentity = aws_native.cloudfront.CloudFrontOriginAccessIdentity(\"cloudfrontoriginaccessidentity\", cloud_front_origin_access_identity_config={\n    \"comment\": \"string-value\",\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The ID for the origin access identity, for example, `E74FTE3AJFJ256A` ."},"cloudFrontOriginAccessIdentityConfig":{"$ref":"#/types/aws-native:cloudfront:CloudFrontOriginAccessIdentityConfig","description":"The current configuration information for the identity."},"s3CanonicalUserId":{"type":"string","description":"The Amazon S3 canonical user ID for the origin access identity, used when giving the origin access identity read permission to an object in Amazon S3. For example: `b970b42360b81c8ddbd79d2f5df0069ba9033c8a79655752abe380cd6d63ba8bcf23384d568fcf89fc49700b5e11a0fd` ."}},"type":"object","required":["awsId","cloudFrontOriginAccessIdentityConfig","s3CanonicalUserId"],"inputProperties":{"cloudFrontOriginAccessIdentityConfig":{"$ref":"#/types/aws-native:cloudfront:CloudFrontOriginAccessIdentityConfig","description":"The current configuration information for the identity."}},"requiredInputs":["cloudFrontOriginAccessIdentityConfig"]},"aws-native:cloudfront:ConnectionFunction":{"description":"A connection function.","properties":{"autoPublish":{"type":"boolean","description":"A flag that determines whether to automatically publish the function to the ``LIVE`` stage when it’s created. To automatically publish to the ``LIVE`` stage, set this property to ``true``."},"awsId":{"type":"string","description":"The connection function ID."},"connectionFunctionArn":{"type":"string","description":"The connection function Amazon Resource Name (ARN)."},"connectionFunctionCode":{"type":"string","description":"The code for the connection function."},"connectionFunctionConfig":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionConfig","description":"Contains configuration information about a CloudFront function."},"createdTime":{"type":"string","description":"The connection function created time."},"eTag":{"type":"string","description":"A complex type that contains `Tag` key and `Tag` value."},"lastModifiedTime":{"type":"string","description":"The connection function last modified time."},"name":{"type":"string","description":"The connection function name.","replaceOnChanges":true},"stage":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionStage","description":"The connection function stage."},"status":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionStatus","description":"The connection function status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"type":"object","required":["awsId","connectionFunctionArn","connectionFunctionCode","connectionFunctionConfig","createdTime","eTag","lastModifiedTime","name","stage","status"],"inputProperties":{"autoPublish":{"type":"boolean","description":"A flag that determines whether to automatically publish the function to the ``LIVE`` stage when it’s created. To automatically publish to the ``LIVE`` stage, set this property to ``true``."},"connectionFunctionCode":{"type":"string","description":"The code for the connection function."},"connectionFunctionConfig":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionConfig","description":"Contains configuration information about a CloudFront function."},"name":{"type":"string","description":"The connection function name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"requiredInputs":["connectionFunctionCode","connectionFunctionConfig"]},"aws-native:cloudfront:ConnectionGroup":{"description":"The connection group for your distribution tenants. When you first create a distribution tenant and you don't specify a connection group, CloudFront will automatically create a default connection group for you. When you create a new distribution tenant and don't specify a connection group, the default one will be associated with your distribution tenant.","properties":{"anycastIpListId":{"type":"string","description":"The ID of the Anycast static IP list."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connection group."},"awsId":{"type":"string","description":"The ID of the connection group."},"createdTime":{"type":"string","description":"The date and time when the connection group was created."},"eTag":{"type":"string","description":"The current version of the connection group."},"enabled":{"type":"boolean","description":"Whether the connection group is enabled."},"ipv6Enabled":{"type":"boolean","description":"IPv6 is enabled for the connection group."},"isDefault":{"type":"boolean","description":"Whether the connection group is the default connection group for the distribution tenants."},"lastModifiedTime":{"type":"string","description":"The date and time when the connection group was updated."},"name":{"type":"string","description":"The name of the connection group.","replaceOnChanges":true},"routingEndpoint":{"type":"string","description":"The routing endpoint (also known as the DNS name) that is assigned to the connection group, such as d111111abcdef8.cloudfront.net."},"status":{"type":"string","description":"The status of the connection group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"type":"object","required":["arn","awsId","createdTime","eTag","isDefault","lastModifiedTime","name","routingEndpoint","status"],"inputProperties":{"anycastIpListId":{"type":"string","description":"The ID of the Anycast static IP list."},"enabled":{"type":"boolean","description":"Whether the connection group is enabled."},"ipv6Enabled":{"type":"boolean","description":"IPv6 is enabled for the connection group."},"name":{"type":"string","description":"The name of the connection group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}}},"aws-native:cloudfront:ContinuousDeploymentPolicy":{"description":"Creates a continuous deployment policy that routes a subset of production traffic from a primary distribution to a staging distribution.\n After you create and update a staging distribution, you can use a continuous deployment policy to incrementally move traffic to the staging distribution. This enables you to test changes to a distribution's configuration before moving all of your production traffic to the new configuration.\n For more information, see [Using CloudFront continuous deployment to safely test CDN configuration changes](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/continuous-deployment.html) in the *Amazon CloudFront Developer Guide*.","properties":{"awsId":{"type":"string","description":"The identifier of the cotinuous deployment policy."},"continuousDeploymentPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyConfig","description":"Contains the configuration for a continuous deployment policy."},"lastModifiedTime":{"type":"string","description":"The date and time when the continuous deployment policy was last modified."}},"type":"object","required":["awsId","continuousDeploymentPolicyConfig","lastModifiedTime"],"inputProperties":{"continuousDeploymentPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyConfig","description":"Contains the configuration for a continuous deployment policy."}},"requiredInputs":["continuousDeploymentPolicyConfig"]},"aws-native:cloudfront:Distribution":{"description":"A distribution tells CloudFront where you want content to be delivered from, and the details about how to track and manage content delivery.","properties":{"awsId":{"type":"string","description":"The distribution's identifier. For example: `E1U5RQF7T870K0` ."},"distributionConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionConfig","description":"The distribution's configuration."},"domainName":{"type":"string","description":"The domain name of the resource, such as `d111111abcdef8.cloudfront.net` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"type":"object","required":["awsId","distributionConfig","domainName"],"inputProperties":{"distributionConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionConfig","description":"The distribution's configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"requiredInputs":["distributionConfig"]},"aws-native:cloudfront:DistributionTenant":{"description":"The distribution tenant.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution tenant."},"awsId":{"type":"string","description":"The ID of the distribution tenant."},"connectionGroupId":{"type":"string","description":"The ID of the connection group for the distribution tenant. If you don't specify a connection group, CloudFront uses the default connection group."},"createdTime":{"type":"string","description":"The date and time when the distribution tenant was created."},"customizations":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantCustomizations","description":"Customizations for the distribution tenant. For each distribution tenant, you can specify the geographic restrictions, and the Amazon Resource Names (ARNs) for the ACM certificate and WAF web ACL. These are specific values that you can override or disable from the multi-tenant distribution that was used to create the distribution tenant."},"distributionId":{"type":"string","description":"The ID of the multi-tenant distribution."},"domainResults":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantDomainResult"}},"domains":{"type":"array","items":{"type":"string"},"description":"The domains associated with the distribution tenant."},"eTag":{"type":"string","description":"The current version of the distribution tenant."},"enabled":{"type":"boolean","description":"Indicates whether the distribution tenant is in an enabled state. If disabled, the distribution tenant won't serve traffic."},"lastModifiedTime":{"type":"string","description":"The date and time when the distribution tenant was updated."},"managedCertificateRequest":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantManagedCertificateRequest","description":"An object that represents the request for the Amazon CloudFront managed ACM certificate."},"name":{"type":"string","description":"The name of the distribution tenant.","replaceOnChanges":true},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantParameter"},"description":"A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution."},"status":{"type":"string","description":"The status of the distribution tenant."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"type":"object","required":["arn","awsId","createdTime","distributionId","domainResults","domains","eTag","lastModifiedTime","name","status"],"inputProperties":{"connectionGroupId":{"type":"string","description":"The ID of the connection group for the distribution tenant. If you don't specify a connection group, CloudFront uses the default connection group."},"customizations":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantCustomizations","description":"Customizations for the distribution tenant. For each distribution tenant, you can specify the geographic restrictions, and the Amazon Resource Names (ARNs) for the ACM certificate and WAF web ACL. These are specific values that you can override or disable from the multi-tenant distribution that was used to create the distribution tenant."},"distributionId":{"type":"string","description":"The ID of the multi-tenant distribution."},"domains":{"type":"array","items":{"type":"string"},"description":"The domains associated with the distribution tenant."},"enabled":{"type":"boolean","description":"Indicates whether the distribution tenant is in an enabled state. If disabled, the distribution tenant won't serve traffic."},"managedCertificateRequest":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantManagedCertificateRequest","description":"An object that represents the request for the Amazon CloudFront managed ACM certificate."},"name":{"type":"string","description":"The name of the distribution tenant."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantParameter"},"description":"A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"requiredInputs":["distributionId","domains"]},"aws-native:cloudfront:Function":{"description":"Creates a CF function.\n To create a function, you provide the function code and some configuration information about the function. The response contains an Amazon Resource Name (ARN) that uniquely identifies the function, and the function’s stage.\n By default, when you create a function, it’s in the ``DEVELOPMENT`` stage. In this stage, you can [test the function](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/test-function.html) in the CF console (or with ``TestFunction`` in the CF API).\n When you’re ready to use your function with a CF distribution, publish the function to the ``LIVE`` stage. You can do this in the CF console, with ``PublishFunction`` in the CF API, or by updating the ``AWS::CloudFront::Function`` resource with the ``AutoPublish`` property set to ``true``. When the function is published to the ``LIVE`` stage, you can attach it to a distribution’s cache behavior, using the function’s ARN.\n To automatically publish the function to the ``LIVE`` stage when it’s created, set the ``AutoPublish`` property to ``true``.","properties":{"autoPublish":{"type":"boolean","description":"A flag that determines whether to automatically publish the function to the ``LIVE`` stage when it’s created. To automatically publish to the ``LIVE`` stage, set this property to ``true``."},"functionArn":{"type":"string","description":"The ARN of the function. For example:\n\n`arn:aws:cloudfront::123456789012:function/ExampleFunction` .\n\nTo get the function ARN, use the following syntax:\n\n`!GetAtt *Function_Logical_ID* .FunctionMetadata.FunctionARN`"},"functionCode":{"type":"string","description":"The function code. For more information about writing a CloudFront function, see [Writing function code for CloudFront Functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/writing-function-code.html) in the *Amazon CloudFront Developer Guide*."},"functionConfig":{"$ref":"#/types/aws-native:cloudfront:FunctionConfig","description":"Contains configuration information about a CloudFront function."},"functionMetadata":{"$ref":"#/types/aws-native:cloudfront:FunctionMetadata","description":"Contains metadata about a CloudFront function."},"name":{"type":"string","description":"A name to identify the function.","replaceOnChanges":true},"stage":{"type":"string"}},"type":"object","required":["functionArn","functionCode","functionConfig","name","stage"],"inputProperties":{"autoPublish":{"type":"boolean","description":"A flag that determines whether to automatically publish the function to the ``LIVE`` stage when it’s created. To automatically publish to the ``LIVE`` stage, set this property to ``true``."},"functionCode":{"type":"string","description":"The function code. For more information about writing a CloudFront function, see [Writing function code for CloudFront Functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/writing-function-code.html) in the *Amazon CloudFront Developer Guide*."},"functionConfig":{"$ref":"#/types/aws-native:cloudfront:FunctionConfig","description":"Contains configuration information about a CloudFront function."},"functionMetadata":{"$ref":"#/types/aws-native:cloudfront:FunctionMetadata","description":"Contains metadata about a CloudFront function."},"name":{"type":"string","description":"A name to identify the function."}},"requiredInputs":["functionCode","functionConfig"]},"aws-native:cloudfront:KeyGroup":{"description":"A key group.\n A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html).","properties":{"awsId":{"type":"string","description":"The identifier for the key group."},"keyGroupConfig":{"$ref":"#/types/aws-native:cloudfront:KeyGroupConfig","description":"The key group configuration."},"lastModifiedTime":{"type":"string","description":"The date and time when the key group was last modified."}},"type":"object","required":["awsId","keyGroupConfig","lastModifiedTime"],"inputProperties":{"keyGroupConfig":{"$ref":"#/types/aws-native:cloudfront:KeyGroupConfig","description":"The key group configuration."}},"requiredInputs":["keyGroupConfig"]},"aws-native:cloudfront:KeyValueStore":{"description":"The key value store. Use this to separate data from function code, allowing you to update data without having to publish a new version of a function. The key value store holds keys and their corresponding values.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the key value store."},"awsId":{"type":"string","description":"The unique Id for the key value store."},"comment":{"type":"string","description":"A comment for the key value store."},"importSource":{"$ref":"#/types/aws-native:cloudfront:KeyValueStoreImportSource","description":"The import source for the key value store."},"name":{"type":"string","description":"The name of the key value store.","replaceOnChanges":true},"status":{"type":"string","description":"The current status of the key value store. For more information, see [Key value store statuses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/kvs-with-functions-create.html#key-value-store-status) in the *.*"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"type":"object","required":["arn","awsId","name","status"],"inputProperties":{"comment":{"type":"string","description":"A comment for the key value store."},"importSource":{"$ref":"#/types/aws-native:cloudfront:KeyValueStoreImportSource","description":"The import source for the key value store."},"name":{"type":"string","description":"The name of the key value store."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}}},"aws-native:cloudfront:MonitoringSubscription":{"description":"A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.","properties":{"distributionId":{"type":"string","description":"The ID of the distribution that you are enabling metrics for.","replaceOnChanges":true},"monitoringSubscription":{"$ref":"#/types/aws-native:cloudfront:MonitoringSubscription","description":"A subscription configuration for additional CloudWatch metrics.","language":{"csharp":{"name":"MonitoringSubscriptionValue"}}}},"type":"object","required":["distributionId","monitoringSubscription"],"inputProperties":{"distributionId":{"type":"string","description":"The ID of the distribution that you are enabling metrics for."},"monitoringSubscription":{"$ref":"#/types/aws-native:cloudfront:MonitoringSubscription","description":"A subscription configuration for additional CloudWatch metrics.","language":{"csharp":{"name":"MonitoringSubscriptionValue"}}}},"requiredInputs":["distributionId","monitoringSubscription"]},"aws-native:cloudfront:OriginAccessControl":{"description":"Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.\n This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.\n For more information about using a CloudFront origin access control, see [Restricting access to an origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the *Amazon CloudFront Developer Guide*.","properties":{"awsId":{"type":"string","description":"The unique identifier of the origin access control."},"originAccessControlConfig":{"$ref":"#/types/aws-native:cloudfront:OriginAccessControlConfig","description":"The origin access control."}},"type":"object","required":["awsId","originAccessControlConfig"],"inputProperties":{"originAccessControlConfig":{"$ref":"#/types/aws-native:cloudfront:OriginAccessControlConfig","description":"The origin access control."}},"requiredInputs":["originAccessControlConfig"]},"aws-native:cloudfront:OriginRequestPolicy":{"description":"An origin request policy.\n When it's attached to a cache behavior, the origin request policy determines the values that CloudFront includes in requests that it sends to the origin. Each request that CloudFront sends to the origin includes the following:\n  +  The request body and the URL path (without the domain name) from the viewer request.\n  +  The headers that CloudFront automatically includes in every origin request, including ``Host``, ``User-Agent``, and ``X-Amz-Cf-Id``.\n  +  All HTTP headers, cookies, and URL query strings that are specified in the cache policy or the origin request policy. These can include items from the viewer request and, in the case of headers, additional ones that are added by CloudFront.\n  \n CloudFront sends a request when it can't find an object in its cache that matches the request. If you want to send values to the origin and also include them in the cache key, use ``CachePolicy``.","properties":{"awsId":{"type":"string","description":"The unique identifier for the origin request policy. For example: `befd7079-9bbc-4ebf-8ade-498a3694176c` ."},"lastModifiedTime":{"type":"string","description":"The date and time when the origin request policy was last modified."},"originRequestPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:OriginRequestPolicyConfig","description":"The origin request policy configuration."}},"type":"object","required":["awsId","lastModifiedTime","originRequestPolicyConfig"],"inputProperties":{"originRequestPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:OriginRequestPolicyConfig","description":"The origin request policy configuration."}},"requiredInputs":["originRequestPolicyConfig"]},"aws-native:cloudfront:PublicKey":{"description":"A public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html).\n CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.","properties":{"awsId":{"type":"string","description":"The identifier of the public key."},"createdTime":{"type":"string","description":"The date and time when the public key was uploaded."},"publicKeyConfig":{"$ref":"#/types/aws-native:cloudfront:PublicKeyConfig","description":"Configuration information about a public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html)."}},"type":"object","required":["awsId","createdTime","publicKeyConfig"],"inputProperties":{"publicKeyConfig":{"$ref":"#/types/aws-native:cloudfront:PublicKeyConfig","description":"Configuration information about a public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html)."}},"requiredInputs":["publicKeyConfig"]},"aws-native:cloudfront:RealtimeLogConfig":{"description":"A real-time log configuration.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the real-time log configuration. For example: `arn:aws:cloudfront::111122223333:realtime-log-config/ExampleNameForRealtimeLogConfig` ."},"endPoints":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:RealtimeLogConfigEndPoint"},"description":"Contains information about the Amazon Kinesis data stream where you are sending real-time log data for this real-time log configuration."},"fields":{"type":"array","items":{"type":"string"},"description":"A list of fields that are included in each real-time log record. In an API response, the fields are provided in the same order in which they are sent to the Amazon Kinesis data stream.\n For more information about fields, see [Real-time log configuration fields](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields) in the *Amazon CloudFront Developer Guide*."},"name":{"type":"string","description":"The unique name of this real-time log configuration.","replaceOnChanges":true},"samplingRate":{"type":"number","description":"The sampling rate for this real-time log configuration. The sampling rate determines the percentage of viewer requests that are represented in the real-time log data. The sampling rate is an integer between 1 and 100, inclusive."}},"type":"object","required":["arn","endPoints","fields","name","samplingRate"],"inputProperties":{"endPoints":{"type":"array","items":{"$ref":"#/types/aws-native:cloudfront:RealtimeLogConfigEndPoint"},"description":"Contains information about the Amazon Kinesis data stream where you are sending real-time log data for this real-time log configuration."},"fields":{"type":"array","items":{"type":"string"},"description":"A list of fields that are included in each real-time log record. In an API response, the fields are provided in the same order in which they are sent to the Amazon Kinesis data stream.\n For more information about fields, see [Real-time log configuration fields](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields) in the *Amazon CloudFront Developer Guide*."},"name":{"type":"string","description":"The unique name of this real-time log configuration."},"samplingRate":{"type":"number","description":"The sampling rate for this real-time log configuration. The sampling rate determines the percentage of viewer requests that are represented in the real-time log data. The sampling rate is an integer between 1 and 100, inclusive."}},"requiredInputs":["endPoints","fields","samplingRate"]},"aws-native:cloudfront:ResponseHeadersPolicy":{"description":"A response headers policy.\n A response headers policy contains information about a set of HTTP response headers.\n After you create a response headers policy, you can use its ID to attach it to one or more cache behaviors in a CloudFront distribution. When it's attached to a cache behavior, the response headers policy affects the HTTP headers that CloudFront includes in HTTP responses to requests that match the cache behavior. CloudFront adds or removes response headers according to the configuration of the response headers policy.\n For more information, see [Adding or removing HTTP headers in CloudFront responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/modifying-response-headers.html) in the *Amazon CloudFront Developer Guide*.","properties":{"awsId":{"type":"string","description":"The unique identifier for the response headers policy. For example: `57f99797-3b20-4e1b-a728-27972a74082a` ."},"lastModifiedTime":{"type":"string","description":"The date and time when the response headers policy was last modified."},"responseHeadersPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyConfig","description":"A response headers policy configuration."}},"type":"object","required":["awsId","lastModifiedTime","responseHeadersPolicyConfig"],"inputProperties":{"responseHeadersPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyConfig","description":"A response headers policy configuration."}},"requiredInputs":["responseHeadersPolicyConfig"]},"aws-native:cloudfront:TrustStore":{"description":"A trust store.","properties":{"arn":{"type":"string","description":"The trust store's Amazon Resource Name (ARN)."},"awsId":{"type":"string","description":"The trust store's ID."},"caCertificatesBundleSource":{"$ref":"#/types/aws-native:cloudfront:TrustStoreCaCertificatesBundleSource","description":"A CA certificates bundle source."},"eTag":{"type":"string","description":"The version identifier for the current version of the trust store."},"lastModifiedTime":{"type":"string","description":"The trust store's last modified time."},"name":{"type":"string","description":"The trust store's name.","replaceOnChanges":true},"numberOfCaCertificates":{"type":"integer","description":"The trust store's number of CA certificates."},"status":{"$ref":"#/types/aws-native:cloudfront:TrustStoreStatus","description":"The trust store's status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}},"type":"object","required":["arn","awsId","eTag","lastModifiedTime","name","numberOfCaCertificates","status"],"inputProperties":{"caCertificatesBundleSource":{"$ref":"#/types/aws-native:cloudfront:TrustStoreCaCertificatesBundleSource","description":"A CA certificates bundle source."},"name":{"type":"string","description":"The trust store's name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."}}},"aws-native:cloudfront:VpcOrigin":{"description":"An Amazon CloudFront VPC origin.","properties":{"accountId":{"type":"string","description":"The account ID of the AWS account that owns the VPC origin."},"arn":{"type":"string","description":"The VPC origin ARN."},"awsId":{"type":"string","description":"The VPC origin ID."},"createdTime":{"type":"string","description":"The VPC origin created time."},"lastModifiedTime":{"type":"string","description":"The VPC origin last modified time."},"status":{"type":"string","description":"The VPC origin status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."},"vpcOriginEndpointConfig":{"$ref":"#/types/aws-native:cloudfront:VpcOriginEndpointConfig","description":"The VPC origin endpoint configuration."}},"type":"object","required":["accountId","arn","awsId","createdTime","lastModifiedTime","status","vpcOriginEndpointConfig"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A complex type that contains zero or more ``Tag`` elements."},"vpcOriginEndpointConfig":{"$ref":"#/types/aws-native:cloudfront:VpcOriginEndpointConfig","description":"The VPC origin endpoint configuration."}},"requiredInputs":["vpcOriginEndpointConfig"]},"aws-native:cloudtrail:Channel":{"description":"A channel receives events from a specific source (such as an on-premises storage solution or application, or a partner event data source), and delivers the events to one or more event data stores. You use channels to ingest events into CloudTrail from sources outside AWS.","properties":{"channelArn":{"type":"string","description":"`Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` ."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:ChannelDestination"},"description":"One or more resources to which events arriving through a channel are logged and stored."},"name":{"type":"string","description":"The name of the channel."},"source":{"type":"string","description":"The ARN of an on-premises storage solution or application, or a partner event source.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["channelArn"],"inputProperties":{"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:ChannelDestination"},"description":"One or more resources to which events arriving through a channel are logged and stored."},"name":{"type":"string","description":"The name of the channel."},"source":{"type":"string","description":"The ARN of an on-premises storage solution or application, or a partner event source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:cloudtrail:Dashboard":{"description":"The Amazon CloudTrail dashboard resource allows customers to manage managed dashboards and create custom dashboards. You can manually refresh custom and managed dashboards. For custom dashboards, you can also set up an automatic refresh schedule and modify dashboard widgets.","properties":{"createdTimestamp":{"type":"string","description":"The timestamp of the dashboard creation."},"dashboardArn":{"type":"string","description":"The ARN of the dashboard."},"name":{"type":"string","description":"The name of the dashboard."},"refreshSchedule":{"$ref":"#/types/aws-native:cloudtrail:DashboardRefreshSchedule","description":"Configures the automatic refresh schedule for the dashboard. Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule."},"status":{"$ref":"#/types/aws-native:cloudtrail:DashboardStatus","description":"The status of the dashboard. Values are CREATING, CREATED, UPDATING, UPDATED and DELETING."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags."},"terminationProtectionEnabled":{"type":"boolean","description":"Indicates whether the dashboard is protected from termination."},"type":{"$ref":"#/types/aws-native:cloudtrail:DashboardType","description":"The type of the dashboard. Values are CUSTOM and MANAGED."},"updatedTimestamp":{"type":"string","description":"The timestamp showing when the dashboard was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp."},"widgets":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:DashboardWidget"},"description":"List of widgets on the dashboard"}},"type":"object","required":["createdTimestamp","dashboardArn","status","type","updatedTimestamp"],"inputProperties":{"name":{"type":"string","description":"The name of the dashboard."},"refreshSchedule":{"$ref":"#/types/aws-native:cloudtrail:DashboardRefreshSchedule","description":"Configures the automatic refresh schedule for the dashboard. Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags."},"terminationProtectionEnabled":{"type":"boolean","description":"Indicates whether the dashboard is protected from termination."},"widgets":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:DashboardWidget"},"description":"List of widgets on the dashboard"}}},"aws-native:cloudtrail:EventDataStore":{"description":"A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 7 to 2557 or 3653 days (about seven or ten years) depending on the selected BillingMode.","properties":{"advancedEventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreAdvancedEventSelector"},"description":"The advanced event selectors that were used to select events for the data store."},"billingMode":{"type":"string","description":"The mode that the event data store will use to charge for event storage."},"contextKeySelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreContextKeySelector"},"description":"An array that enriches event records in an existing event data store by including additional information specified in individual ContexKeySelector entries. If you add ContextKeySelectors, you must set MaxEventSize to Large."},"createdTimestamp":{"type":"string","description":"The timestamp of the event data store's creation."},"eventDataStoreArn":{"type":"string","description":"The ARN of the event data store."},"federationEnabled":{"type":"boolean","description":"Indicates whether federation is enabled on an event data store."},"federationRoleArn":{"type":"string","description":"The ARN of the role used for event data store federation."},"ingestionEnabled":{"type":"boolean","description":"Indicates whether the event data store is ingesting events."},"insightSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreInsightSelector"},"description":"Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store."},"insightsDestination":{"type":"string","description":"Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store"},"kmsKeyId":{"type":"string","description":"Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier."},"maxEventSize":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreMaxEventSize","description":"Specifies the maximum size allowed for the event. Valid values are Standard and Large. If you add ContextKeySelectors, this value must be set to Large."},"multiRegionEnabled":{"type":"boolean","description":"Indicates whether the event data store includes events from all regions, or only from the region in which it was created."},"name":{"type":"string","description":"The name of the event data store."},"organizationEnabled":{"type":"boolean","description":"Indicates that an event data store is collecting logged events for an organization."},"retentionPeriod":{"type":"integer","description":"The retention period, in days."},"status":{"type":"string","description":"The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags."},"terminationProtectionEnabled":{"type":"boolean","description":"Indicates whether the event data store is protected from termination."},"updatedTimestamp":{"type":"string","description":"The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp."}},"type":"object","required":["createdTimestamp","eventDataStoreArn","status","updatedTimestamp"],"inputProperties":{"advancedEventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreAdvancedEventSelector"},"description":"The advanced event selectors that were used to select events for the data store."},"billingMode":{"type":"string","description":"The mode that the event data store will use to charge for event storage."},"contextKeySelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreContextKeySelector"},"description":"An array that enriches event records in an existing event data store by including additional information specified in individual ContexKeySelector entries. If you add ContextKeySelectors, you must set MaxEventSize to Large."},"federationEnabled":{"type":"boolean","description":"Indicates whether federation is enabled on an event data store."},"federationRoleArn":{"type":"string","description":"The ARN of the role used for event data store federation."},"ingestionEnabled":{"type":"boolean","description":"Indicates whether the event data store is ingesting events."},"insightSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreInsightSelector"},"description":"Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store."},"insightsDestination":{"type":"string","description":"Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store"},"kmsKeyId":{"type":"string","description":"Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier."},"maxEventSize":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreMaxEventSize","description":"Specifies the maximum size allowed for the event. Valid values are Standard and Large. If you add ContextKeySelectors, this value must be set to Large."},"multiRegionEnabled":{"type":"boolean","description":"Indicates whether the event data store includes events from all regions, or only from the region in which it was created."},"name":{"type":"string","description":"The name of the event data store."},"organizationEnabled":{"type":"boolean","description":"Indicates that an event data store is collecting logged events for an organization."},"retentionPeriod":{"type":"integer","description":"The retention period, in days."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags."},"terminationProtectionEnabled":{"type":"boolean","description":"Indicates whether the event data store is protected from termination."}}},"aws-native:cloudtrail:ResourcePolicy":{"description":"Resource Type definition for AWS::CloudTrail::ResourcePolicy","properties":{"resourceArn":{"type":"string","description":"The ARN of the AWS CloudTrail resource to which the policy applies.","replaceOnChanges":true},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}},"type":"object","required":["resourceArn","resourcePolicy"],"inputProperties":{"resourceArn":{"type":"string","description":"The ARN of the AWS CloudTrail resource to which the policy applies."},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}},"requiredInputs":["resourceArn","resourcePolicy"]},"aws-native:cloudtrail:Trail":{"description":"Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket. A maximum of five trails can exist in a region, irrespective of the region in which they were created.","properties":{"advancedEventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAdvancedEventSelector"},"description":"The advanced event selectors that were used to select events for the data store."},"aggregationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAggregationConfiguration"},"description":"Specifies the aggregation configuration to aggregate CloudTrail Events. A maximum of 1 aggregation configuration is allowed."},"arn":{"type":"string","description":"`Ref` returns the ARN of the CloudTrail trail, such as `arn:aws:cloudtrail:us-east-2:123456789012:trail/myCloudTrail` ."},"cloudWatchLogsLogGroupArn":{"type":"string","description":"Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn."},"cloudWatchLogsRoleArn":{"type":"string","description":"Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group."},"enableLogFileValidation":{"type":"boolean","description":"Specifies whether log file validation is enabled. The default is false."},"eventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailEventSelector"},"description":"Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail."},"includeGlobalServiceEvents":{"type":"boolean","description":"Specifies whether the trail is publishing events from global services such as IAM to the log files."},"insightSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailInsightSelector"},"description":"Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail."},"isLogging":{"type":"boolean","description":"Whether the CloudTrail is currently logging AWS API calls."},"isMultiRegionTrail":{"type":"boolean","description":"Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions."},"isOrganizationTrail":{"type":"boolean","description":"Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations."},"kmsKeyId":{"type":"string","description":"Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier."},"s3BucketName":{"type":"string","description":"Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements."},"s3KeyPrefix":{"type":"string","description":"Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters."},"snsTopicArn":{"type":"string","description":"`Ref` returns the ARN of the Amazon  topic that's associated with the CloudTrail trail, such as `arn:aws:sns:us-east-2:123456789012:mySNSTopic` ."},"snsTopicName":{"type":"string","description":"Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A custom set of tags (key-value pairs) for this trail."},"trailName":{"type":"string","description":"Specifies the name of the trail. The name must meet the following requirements:\n\n- Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)\n- Start with a letter or number, and end with a letter or number\n- Be between 3 and 128 characters\n- Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.\n- Not be in IP address format (for example, 192.168.5.4)","replaceOnChanges":true}},"type":"object","required":["arn","isLogging","s3BucketName","snsTopicArn"],"inputProperties":{"advancedEventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAdvancedEventSelector"},"description":"The advanced event selectors that were used to select events for the data store."},"aggregationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAggregationConfiguration"},"description":"Specifies the aggregation configuration to aggregate CloudTrail Events. A maximum of 1 aggregation configuration is allowed."},"cloudWatchLogsLogGroupArn":{"type":"string","description":"Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn."},"cloudWatchLogsRoleArn":{"type":"string","description":"Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group."},"enableLogFileValidation":{"type":"boolean","description":"Specifies whether log file validation is enabled. The default is false."},"eventSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailEventSelector"},"description":"Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail."},"includeGlobalServiceEvents":{"type":"boolean","description":"Specifies whether the trail is publishing events from global services such as IAM to the log files."},"insightSelectors":{"type":"array","items":{"$ref":"#/types/aws-native:cloudtrail:TrailInsightSelector"},"description":"Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail."},"isLogging":{"type":"boolean","description":"Whether the CloudTrail is currently logging AWS API calls."},"isMultiRegionTrail":{"type":"boolean","description":"Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions."},"isOrganizationTrail":{"type":"boolean","description":"Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations."},"kmsKeyId":{"type":"string","description":"Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier."},"s3BucketName":{"type":"string","description":"Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements."},"s3KeyPrefix":{"type":"string","description":"Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters."},"snsTopicName":{"type":"string","description":"Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A custom set of tags (key-value pairs) for this trail."},"trailName":{"type":"string","description":"Specifies the name of the trail. The name must meet the following requirements:\n\n- Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)\n- Start with a letter or number, and end with a letter or number\n- Be between 3 and 128 characters\n- Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.\n- Not be in IP address format (for example, 192.168.5.4)"}},"requiredInputs":["isLogging","s3BucketName"]},"aws-native:cloudwatch:Alarm":{"description":"The ``AWS::CloudWatch::Alarm`` type specifies an alarm and associates it with the specified metric or metric math expression.\n When this operation creates an alarm, the alarm state is immediately set to ``INSUFFICIENT_DATA``. The alarm is then evaluated and its state is set appropriately. Any actions associated with the new state are then executed.\n When you update an existing alarm, its state is left unchanged, but the update completely overwrites the previous configuration of the alarm.","properties":{"actionsEnabled":{"type":"boolean","description":"Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE."},"alarmActions":{"type":"array","items":{"type":"string"},"description":"The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN). For more information about creating alarms and the actions that you can specify, see [PutMetricAlarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricAlarm.html) in the *API Reference*."},"alarmDescription":{"type":"string","description":"The description of the alarm."},"alarmName":{"type":"string","description":"The name of the alarm. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the alarm name. \n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"arn":{"type":"string","description":"The ARN of the CloudWatch alarm, such as `arn:aws:cloudwatch:us-west-2:123456789012:alarm:myCloudWatchAlarm-CPUAlarm-UXMMZK36R55Z` ."},"comparisonOperator":{"type":"string","description":"The arithmetic operation to use when comparing the specified statistic and threshold. The specified statistic value is used as the first operand."},"datapointsToAlarm":{"type":"integer","description":"The number of datapoints that must be breaching to trigger the alarm. This is used only if you are setting an \"M out of N\" alarm. In that case, this value is the M, and the value that you set for ``EvaluationPeriods`` is the N value. For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*.\n If you omit this parameter, CW uses the same value here that you set for ``EvaluationPeriods``, and the alarm goes to alarm state if that many consecutive periods are breaching."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmDimension"},"description":"The dimensions for the metric associated with the alarm. For an alarm based on a math expression, you can't specify ``Dimensions``. Instead, you use ``Metrics``."},"evaluateLowSampleCountPercentile":{"type":"string","description":"Used only for alarms based on percentiles. If ``ignore``, the alarm state does not change during periods with too few data points to be statistically significant. If ``evaluate`` or this parameter is not used, the alarm is always evaluated and possibly changes state no matter how many data points are available."},"evaluationPeriods":{"type":"integer","description":"The number of periods over which data is compared to the specified threshold. If you are setting an alarm that requires that a number of consecutive data points be breaching to trigger the alarm, this value specifies that number. If you are setting an \"M out of N\" alarm, this value is the N, and ``DatapointsToAlarm`` is the M.\n For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*."},"extendedStatistic":{"type":"string","description":"The percentile statistic for the metric associated with the alarm. Specify a value between p0.0 and p100.\n For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.\n For an alarm based on a math expression, you can't specify ``ExtendedStatistic``. Instead, you use ``Metrics``."},"insufficientDataActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the ``INSUFFICIENT_DATA`` state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"metricName":{"type":"string","description":"The name of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you use ``Metrics`` instead and you can't specify ``MetricName``."},"metrics":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmMetricDataQuery"},"description":"An array that enables you to create an alarm based on the result of a metric math expression. Each item in the array either retrieves a metric or performs a math expression.\n If you specify the ``Metrics`` parameter, you cannot specify ``MetricName``, ``Dimensions``, ``Period``, ``Namespace``, ``Statistic``, ``ExtendedStatistic``, or ``Unit``."},"namespace":{"type":"string","description":"The namespace of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you can't specify ``Namespace`` and you use ``Metrics`` instead.\n For a list of namespaces for metrics from AWS services, see [Services That Publish Metrics.](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html)"},"okActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the ``OK`` state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"period":{"type":"integer","description":"The period, in seconds, over which the statistic is applied. This is required for an alarm based on a metric. Valid values are 10, 20, 30, 60, and any multiple of 60.\n For an alarm based on a math expression, you can't specify ``Period``, and instead you use the ``Metrics`` parameter.\n *Minimum:* 10"},"statistic":{"type":"string","description":"The statistic for the metric associated with the alarm, other than percentile. For percentile statistics, use ``ExtendedStatistic``.\n For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.\n For an alarm based on a math expression, you can't specify ``Statistic``. Instead, you use ``Metrics``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to associate with the alarm. You can associate as many as 50 tags with an alarm. To be able to associate tags with the alarm when you create the alarm, you must have the ``cloudwatch:TagResource`` permission.\n Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values."},"threshold":{"type":"number","description":"The value to compare with the specified statistic."},"thresholdMetricId":{"type":"string","description":"In an alarm based on an anomaly detection model, this is the ID of the ``ANOMALY_DETECTION_BAND`` function used as the threshold for the alarm."},"treatMissingData":{"type":"string","description":"Sets how this alarm is to handle missing data points. Valid values are ``breaching``, ``notBreaching``, ``ignore``, and ``missing``. For more information, see [Configuring How Alarms Treat Missing Data](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarms-and-missing-data) in the *Amazon User Guide*.\n If you omit this parameter, the default behavior of ``missing`` is used."},"unit":{"type":"string","description":"The unit of the metric associated with the alarm. Specify this only if you are creating an alarm based on a single metric. Do not specify this if you are specifying a ``Metrics`` array.\n  You can specify the following values: Seconds, Microseconds, Milliseconds, Bytes, Kilobytes, Megabytes, Gigabytes, Terabytes, Bits, Kilobits, Megabits, Gigabits, Terabits, Percent, Count, Bytes/Second, Kilobytes/Second, Megabytes/Second, Gigabytes/Second, Terabytes/Second, Bits/Second, Kilobits/Second, Megabits/Second, Gigabits/Second, Terabits/Second, Count/Second, or None."}},"type":"object","required":["arn"],"inputProperties":{"actionsEnabled":{"type":"boolean","description":"Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE."},"alarmActions":{"type":"array","items":{"type":"string"},"description":"The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN). For more information about creating alarms and the actions that you can specify, see [PutMetricAlarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricAlarm.html) in the *API Reference*."},"alarmDescription":{"type":"string","description":"The description of the alarm."},"alarmName":{"type":"string","description":"The name of the alarm. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the alarm name. \n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"comparisonOperator":{"type":"string","description":"The arithmetic operation to use when comparing the specified statistic and threshold. The specified statistic value is used as the first operand."},"datapointsToAlarm":{"type":"integer","description":"The number of datapoints that must be breaching to trigger the alarm. This is used only if you are setting an \"M out of N\" alarm. In that case, this value is the M, and the value that you set for ``EvaluationPeriods`` is the N value. For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*.\n If you omit this parameter, CW uses the same value here that you set for ``EvaluationPeriods``, and the alarm goes to alarm state if that many consecutive periods are breaching."},"dimensions":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmDimension"},"description":"The dimensions for the metric associated with the alarm. For an alarm based on a math expression, you can't specify ``Dimensions``. Instead, you use ``Metrics``."},"evaluateLowSampleCountPercentile":{"type":"string","description":"Used only for alarms based on percentiles. If ``ignore``, the alarm state does not change during periods with too few data points to be statistically significant. If ``evaluate`` or this parameter is not used, the alarm is always evaluated and possibly changes state no matter how many data points are available."},"evaluationPeriods":{"type":"integer","description":"The number of periods over which data is compared to the specified threshold. If you are setting an alarm that requires that a number of consecutive data points be breaching to trigger the alarm, this value specifies that number. If you are setting an \"M out of N\" alarm, this value is the N, and ``DatapointsToAlarm`` is the M.\n For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*."},"extendedStatistic":{"type":"string","description":"The percentile statistic for the metric associated with the alarm. Specify a value between p0.0 and p100.\n For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.\n For an alarm based on a math expression, you can't specify ``ExtendedStatistic``. Instead, you use ``Metrics``."},"insufficientDataActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the ``INSUFFICIENT_DATA`` state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"metricName":{"type":"string","description":"The name of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you use ``Metrics`` instead and you can't specify ``MetricName``."},"metrics":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmMetricDataQuery"},"description":"An array that enables you to create an alarm based on the result of a metric math expression. Each item in the array either retrieves a metric or performs a math expression.\n If you specify the ``Metrics`` parameter, you cannot specify ``MetricName``, ``Dimensions``, ``Period``, ``Namespace``, ``Statistic``, ``ExtendedStatistic``, or ``Unit``."},"namespace":{"type":"string","description":"The namespace of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you can't specify ``Namespace`` and you use ``Metrics`` instead.\n For a list of namespaces for metrics from AWS services, see [Services That Publish Metrics.](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html)"},"okActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the ``OK`` state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"period":{"type":"integer","description":"The period, in seconds, over which the statistic is applied. This is required for an alarm based on a metric. Valid values are 10, 20, 30, 60, and any multiple of 60.\n For an alarm based on a math expression, you can't specify ``Period``, and instead you use the ``Metrics`` parameter.\n *Minimum:* 10"},"statistic":{"type":"string","description":"The statistic for the metric associated with the alarm, other than percentile. For percentile statistics, use ``ExtendedStatistic``.\n For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.\n For an alarm based on a math expression, you can't specify ``Statistic``. Instead, you use ``Metrics``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to associate with the alarm. You can associate as many as 50 tags with an alarm. To be able to associate tags with the alarm when you create the alarm, you must have the ``cloudwatch:TagResource`` permission.\n Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values."},"threshold":{"type":"number","description":"The value to compare with the specified statistic."},"thresholdMetricId":{"type":"string","description":"In an alarm based on an anomaly detection model, this is the ID of the ``ANOMALY_DETECTION_BAND`` function used as the threshold for the alarm."},"treatMissingData":{"type":"string","description":"Sets how this alarm is to handle missing data points. Valid values are ``breaching``, ``notBreaching``, ``ignore``, and ``missing``. For more information, see [Configuring How Alarms Treat Missing Data](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarms-and-missing-data) in the *Amazon User Guide*.\n If you omit this parameter, the default behavior of ``missing`` is used."},"unit":{"type":"string","description":"The unit of the metric associated with the alarm. Specify this only if you are creating an alarm based on a single metric. Do not specify this if you are specifying a ``Metrics`` array.\n  You can specify the following values: Seconds, Microseconds, Milliseconds, Bytes, Kilobytes, Megabytes, Gigabytes, Terabytes, Bits, Kilobits, Megabits, Gigabits, Terabits, Percent, Count, Bytes/Second, Kilobytes/Second, Megabytes/Second, Gigabytes/Second, Terabytes/Second, Bits/Second, Kilobits/Second, Megabits/Second, Gigabits/Second, Terabits/Second, Count/Second, or None."}}},"aws-native:cloudwatch:AlarmMuteRule":{"description":"Resource Type definition for AWS::CloudWatch::AlarmMuteRule that allows defining a rule and targeting alarms to mute their actions during the specified window.","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the AlarmMuteRule"},"description":{"type":"string","description":"The description of the AlarmMuteRule"},"expireDate":{"type":"string","description":"The date, with the same timezone offset as \"ScheduleTimezone\" after which the alarm mute rule will be expired."},"lastUpdatedTimestamp":{"type":"string","description":"The last update timestamp of the alarm mute schedule"},"muteTargets":{"$ref":"#/types/aws-native:cloudwatch:MuteTargetsProperties","description":"Targets to be muted"},"muteType":{"type":"string","description":"The mute type of the alarm mute "},"name":{"type":"string","description":"The name of the AlarmMuteRule","replaceOnChanges":true},"rule":{"$ref":"#/types/aws-native:cloudwatch:RuleProperties","description":"The rule for the mute"},"startDate":{"type":"string","description":"The date, with the same timezone offset as \"ScheduleTimezone\", after which the alarm mute rule will become active."},"status":{"$ref":"#/types/aws-native:cloudwatch:AlarmMuteRuleStatus","description":"The current status of the AlarmMuteRule"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","lastUpdatedTimestamp","muteType","rule","status"],"inputProperties":{"description":{"type":"string","description":"The description of the AlarmMuteRule"},"expireDate":{"type":"string","description":"The date, with the same timezone offset as \"ScheduleTimezone\" after which the alarm mute rule will be expired."},"muteTargets":{"$ref":"#/types/aws-native:cloudwatch:MuteTargetsProperties","description":"Targets to be muted"},"name":{"type":"string","description":"The name of the AlarmMuteRule"},"rule":{"$ref":"#/types/aws-native:cloudwatch:RuleProperties","description":"The rule for the mute"},"startDate":{"type":"string","description":"The date, with the same timezone offset as \"ScheduleTimezone\", after which the alarm mute rule will become active."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["rule"]},"aws-native:cloudwatch:CompositeAlarm":{"description":"The AWS::CloudWatch::CompositeAlarm type specifies an alarm which aggregates the states of other Alarms (Metric or Composite Alarms) as defined by the AlarmRule expression","properties":{"actionsEnabled":{"type":"boolean","description":"Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE."},"actionsSuppressor":{"type":"string","description":"Actions will be suppressed if the suppressor alarm is in the ALARM state. ActionsSuppressor can be an AlarmName or an Amazon Resource Name (ARN) from an existing alarm. "},"actionsSuppressorExtensionPeriod":{"type":"integer","description":"Actions will be suppressed if WaitPeriod is active. The length of time that actions are suppressed is in seconds."},"actionsSuppressorWaitPeriod":{"type":"integer","description":"Actions will be suppressed if ExtensionPeriod is active. The length of time that actions are suppressed is in seconds."},"alarmActions":{"type":"array","items":{"type":"string"},"description":"The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN)."},"alarmDescription":{"type":"string","description":"The description of the alarm"},"alarmName":{"type":"string","description":"The name of the Composite Alarm","replaceOnChanges":true},"alarmRule":{"type":"string","description":"Expression which aggregates the state of other Alarms (Metric or Composite Alarms)"},"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the alarm"},"insufficientDataActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the INSUFFICIENT_DATA state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"okActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the OK state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to associate with the composite alarm. You can associate as many as 50 tags with an alarm."}},"type":"object","required":["alarmRule","arn"],"inputProperties":{"actionsEnabled":{"type":"boolean","description":"Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE."},"actionsSuppressor":{"type":"string","description":"Actions will be suppressed if the suppressor alarm is in the ALARM state. ActionsSuppressor can be an AlarmName or an Amazon Resource Name (ARN) from an existing alarm. "},"actionsSuppressorExtensionPeriod":{"type":"integer","description":"Actions will be suppressed if WaitPeriod is active. The length of time that actions are suppressed is in seconds."},"actionsSuppressorWaitPeriod":{"type":"integer","description":"Actions will be suppressed if ExtensionPeriod is active. The length of time that actions are suppressed is in seconds."},"alarmActions":{"type":"array","items":{"type":"string"},"description":"The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN)."},"alarmDescription":{"type":"string","description":"The description of the alarm"},"alarmName":{"type":"string","description":"The name of the Composite Alarm"},"alarmRule":{"type":"string","description":"Expression which aggregates the state of other Alarms (Metric or Composite Alarms)"},"insufficientDataActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the INSUFFICIENT_DATA state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"okActions":{"type":"array","items":{"type":"string"},"description":"The actions to execute when this alarm transitions to the OK state from any other state. Each action is specified as an Amazon Resource Name (ARN)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to associate with the composite alarm. You can associate as many as 50 tags with an alarm."}},"requiredInputs":["alarmRule"]},"aws-native:cloudwatch:Dashboard":{"description":"Resource Type definition for AWS::CloudWatch::Dashboard","properties":{"dashboardBody":{"type":"string","description":"The detailed information about the dashboard in JSON format, including the widgets to include and their location on the dashboard"},"dashboardName":{"type":"string","description":"The name of the dashboard. The name must be between 1 and 255 characters. If you do not specify a name, one will be generated automatically.","replaceOnChanges":true}},"type":"object","required":["dashboardBody"],"inputProperties":{"dashboardBody":{"type":"string","description":"The detailed information about the dashboard in JSON format, including the widgets to include and their location on the dashboard"},"dashboardName":{"type":"string","description":"The name of the dashboard. The name must be between 1 and 255 characters. If you do not specify a name, one will be generated automatically."}},"requiredInputs":["dashboardBody"]},"aws-native:cloudwatch:MetricStream":{"description":"Resource Type definition for Metric Stream\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myMetricStream = new AwsNative.CloudWatch.MetricStream(\"myMetricStream\", new()\n    {\n        OutputFormat = \"json\",\n        FirehoseArn = \"arn:aws:firehose:us-east-1:123456789012:deliverystream/MyDeliveryStream\",\n        RoleArn = \"arn:aws:iam::123456789012:role/service-role/MyRole\",\n        IncludeFilters = new[]\n        {\n            new AwsNative.CloudWatch.Inputs.MetricStreamFilterArgs\n            {\n                Namespace = \"AWS/ELB\",\n            },\n            new AwsNative.CloudWatch.Inputs.MetricStreamFilterArgs\n            {\n                Namespace = \"AWS/EC2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudwatch\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := cloudwatch.NewMetricStream(ctx, \"myMetricStream\", \u0026cloudwatch.MetricStreamArgs{\n\t\t\tOutputFormat: pulumi.String(\"json\"),\n\t\t\tFirehoseArn:  pulumi.String(\"arn:aws:firehose:us-east-1:123456789012:deliverystream/MyDeliveryStream\"),\n\t\t\tRoleArn:      pulumi.String(\"arn:aws:iam::123456789012:role/service-role/MyRole\"),\n\t\t\tIncludeFilters: cloudwatch.MetricStreamFilterArray{\n\t\t\t\t\u0026cloudwatch.MetricStreamFilterArgs{\n\t\t\t\t\tNamespace: pulumi.String(\"AWS/ELB\"),\n\t\t\t\t},\n\t\t\t\t\u0026cloudwatch.MetricStreamFilterArgs{\n\t\t\t\t\tNamespace: pulumi.String(\"AWS/EC2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myMetricStream = new aws_native.cloudwatch.MetricStream(\"myMetricStream\", {\n    outputFormat: \"json\",\n    firehoseArn: \"arn:aws:firehose:us-east-1:123456789012:deliverystream/MyDeliveryStream\",\n    roleArn: \"arn:aws:iam::123456789012:role/service-role/MyRole\",\n    includeFilters: [\n        {\n            namespace: \"AWS/ELB\",\n        },\n        {\n            namespace: \"AWS/EC2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_metric_stream = aws_native.cloudwatch.MetricStream(\"myMetricStream\",\n    output_format=\"json\",\n    firehose_arn=\"arn:aws:firehose:us-east-1:123456789012:deliverystream/MyDeliveryStream\",\n    role_arn=\"arn:aws:iam::123456789012:role/service-role/MyRole\",\n    include_filters=[\n        {\n            \"namespace\": \"AWS/ELB\",\n        },\n        {\n            \"namespace\": \"AWS/EC2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Amazon Resource Name of the metric stream."},"creationDate":{"type":"string","description":"The date of creation of the metric stream."},"excludeFilters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamFilter"},"description":"Define which metrics will be not streamed. Metrics matched by multiple instances of MetricStreamFilter are joined with an OR operation by default. If both IncludeFilters and ExcludeFilters are omitted, all metrics in the account will be streamed. IncludeFilters and ExcludeFilters are mutually exclusive. Default to null."},"firehoseArn":{"type":"string","description":"The ARN of the Kinesis Firehose where to stream the data."},"includeFilters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamFilter"},"description":"Define which metrics will be streamed. Metrics matched by multiple instances of MetricStreamFilter are joined with an OR operation by default. If both IncludeFilters and ExcludeFilters are omitted, all metrics in the account will be streamed. IncludeFilters and ExcludeFilters are mutually exclusive. Default to null."},"includeLinkedAccountsMetrics":{"type":"boolean","description":"If you are creating a metric stream in a monitoring account, specify true to include metrics from source accounts that are linked to this monitoring account, in the metric stream. The default is false."},"lastUpdateDate":{"type":"string","description":"The date of the last update of the metric stream."},"name":{"type":"string","description":"Name of the metric stream.","replaceOnChanges":true},"outputFormat":{"type":"string","description":"The output format of the data streamed to the Kinesis Firehose."},"roleArn":{"type":"string","description":"The ARN of the role that provides access to the Kinesis Firehose."},"state":{"type":"string","description":"Displays the state of the Metric Stream."},"statisticsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamStatisticsConfiguration"},"description":"By default, a metric stream always sends the MAX, MIN, SUM, and SAMPLECOUNT statistics for each metric that is streamed. You can use this parameter to have the metric stream also send additional statistics in the stream. This array can have up to 100 members."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags to assign to the delivery stream."}},"type":"object","required":["arn","creationDate","lastUpdateDate","state"],"inputProperties":{"excludeFilters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamFilter"},"description":"Define which metrics will be not streamed. Metrics matched by multiple instances of MetricStreamFilter are joined with an OR operation by default. If both IncludeFilters and ExcludeFilters are omitted, all metrics in the account will be streamed. IncludeFilters and ExcludeFilters are mutually exclusive. Default to null."},"firehoseArn":{"type":"string","description":"The ARN of the Kinesis Firehose where to stream the data."},"includeFilters":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamFilter"},"description":"Define which metrics will be streamed. Metrics matched by multiple instances of MetricStreamFilter are joined with an OR operation by default. If both IncludeFilters and ExcludeFilters are omitted, all metrics in the account will be streamed. IncludeFilters and ExcludeFilters are mutually exclusive. Default to null."},"includeLinkedAccountsMetrics":{"type":"boolean","description":"If you are creating a metric stream in a monitoring account, specify true to include metrics from source accounts that are linked to this monitoring account, in the metric stream. The default is false."},"name":{"type":"string","description":"Name of the metric stream."},"outputFormat":{"type":"string","description":"The output format of the data streamed to the Kinesis Firehose."},"roleArn":{"type":"string","description":"The ARN of the role that provides access to the Kinesis Firehose."},"statisticsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamStatisticsConfiguration"},"description":"By default, a metric stream always sends the MAX, MIN, SUM, and SAMPLECOUNT statistics for each metric that is streamed. You can use this parameter to have the metric stream also send additional statistics in the stream. This array can have up to 100 members."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags to assign to the delivery stream."}}},"aws-native:codeartifact:Domain":{"description":"The resource schema to create a CodeArtifact domain.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n        EncryptionKey = \"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\",\n        PermissionsPolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"action\"] = new[]\n                    {\n                        \"codeartifact:ReadFromRepository\",\n                        \"codeartifact:DescribePackageVersion\",\n                        \"codeartifact:DescribeRepository\",\n                        \"codeartifact:GetPackageVersionReadme\",\n                        \"codeartifact:GetRepositoryEndpoint\",\n                        \"codeartifact:ListPackageVersionAssets\",\n                        \"codeartifact:ListPackageVersionDependencies\",\n                        \"codeartifact:ListPackageVersions\",\n                        \"codeartifact:ListPackages\",\n                        \"codeartifact:ReadFromRepository\",\n                    },\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"aws\"] = \"arn:aws:iam::123456789012:root\",\n                    },\n                    [\"resource\"] = \"*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName:    pulumi.String(\"my-domain\"),\n\t\t\tEncryptionKey: pulumi.String(\"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\"),\n\t\t\tPermissionsPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"codeartifact:ReadFromRepository\",\n\t\t\t\t\t\t\t\"codeartifact:DescribePackageVersion\",\n\t\t\t\t\t\t\t\"codeartifact:DescribeRepository\",\n\t\t\t\t\t\t\t\"codeartifact:GetPackageVersionReadme\",\n\t\t\t\t\t\t\t\"codeartifact:GetRepositoryEndpoint\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackageVersionAssets\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackageVersionDependencies\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackageVersions\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackages\",\n\t\t\t\t\t\t\t\"codeartifact:ReadFromRepository\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"aws\": \"arn:aws:iam::123456789012:root\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {\n    domainName: \"my-domain\",\n    encryptionKey: \"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\",\n    permissionsPolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            action: [\n                \"codeartifact:ReadFromRepository\",\n                \"codeartifact:DescribePackageVersion\",\n                \"codeartifact:DescribeRepository\",\n                \"codeartifact:GetPackageVersionReadme\",\n                \"codeartifact:GetRepositoryEndpoint\",\n                \"codeartifact:ListPackageVersionAssets\",\n                \"codeartifact:ListPackageVersionDependencies\",\n                \"codeartifact:ListPackageVersions\",\n                \"codeartifact:ListPackages\",\n                \"codeartifact:ReadFromRepository\",\n            ],\n            effect: \"Allow\",\n            principal: {\n                aws: \"arn:aws:iam::123456789012:root\",\n            },\n            resource: \"*\",\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\",\n    domain_name=\"my-domain\",\n    encryption_key=\"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\",\n    permissions_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"action\": [\n                \"codeartifact:ReadFromRepository\",\n                \"codeartifact:DescribePackageVersion\",\n                \"codeartifact:DescribeRepository\",\n                \"codeartifact:GetPackageVersionReadme\",\n                \"codeartifact:GetRepositoryEndpoint\",\n                \"codeartifact:ListPackageVersionAssets\",\n                \"codeartifact:ListPackageVersionDependencies\",\n                \"codeartifact:ListPackageVersions\",\n                \"codeartifact:ListPackages\",\n                \"codeartifact:ReadFromRepository\",\n            ],\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"aws\": \"arn:aws:iam::123456789012:root\",\n            },\n            \"resource\": \"*\",\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n        EncryptionKey = \"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\",\n        PermissionsPolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"action\"] = new[]\n                    {\n                        \"codeartifact:ReadFromRepository\",\n                        \"codeartifact:DescribePackageVersion\",\n                        \"codeartifact:DescribeRepository\",\n                        \"codeartifact:GetPackageVersionReadme\",\n                        \"codeartifact:GetRepositoryEndpoint\",\n                        \"codeartifact:ListPackageVersionAssets\",\n                        \"codeartifact:ListPackageVersionDependencies\",\n                        \"codeartifact:ListPackageVersions\",\n                        \"codeartifact:ListPackages\",\n                        \"codeartifact:ReadFromRepository\",\n                    },\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"aws\"] = \"arn:aws:iam::123456789012:root\",\n                    },\n                    [\"resource\"] = \"*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName:    pulumi.String(\"my-domain\"),\n\t\t\tEncryptionKey: pulumi.String(\"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\"),\n\t\t\tPermissionsPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"codeartifact:ReadFromRepository\",\n\t\t\t\t\t\t\t\"codeartifact:DescribePackageVersion\",\n\t\t\t\t\t\t\t\"codeartifact:DescribeRepository\",\n\t\t\t\t\t\t\t\"codeartifact:GetPackageVersionReadme\",\n\t\t\t\t\t\t\t\"codeartifact:GetRepositoryEndpoint\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackageVersionAssets\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackageVersionDependencies\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackageVersions\",\n\t\t\t\t\t\t\t\"codeartifact:ListPackages\",\n\t\t\t\t\t\t\t\"codeartifact:ReadFromRepository\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"aws\": \"arn:aws:iam::123456789012:root\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {\n    domainName: \"my-domain\",\n    encryptionKey: \"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\",\n    permissionsPolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            action: [\n                \"codeartifact:ReadFromRepository\",\n                \"codeartifact:DescribePackageVersion\",\n                \"codeartifact:DescribeRepository\",\n                \"codeartifact:GetPackageVersionReadme\",\n                \"codeartifact:GetRepositoryEndpoint\",\n                \"codeartifact:ListPackageVersionAssets\",\n                \"codeartifact:ListPackageVersionDependencies\",\n                \"codeartifact:ListPackageVersions\",\n                \"codeartifact:ListPackages\",\n                \"codeartifact:ReadFromRepository\",\n            ],\n            effect: \"Allow\",\n            principal: {\n                aws: \"arn:aws:iam::123456789012:root\",\n            },\n            resource: \"*\",\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\",\n    domain_name=\"my-domain\",\n    encryption_key=\"arn:aws:kms:us-west-2:123456789012:key/12345678-9abc-def1-2345-6789abcdef12\",\n    permissions_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"action\": [\n                \"codeartifact:ReadFromRepository\",\n                \"codeartifact:DescribePackageVersion\",\n                \"codeartifact:DescribeRepository\",\n                \"codeartifact:GetPackageVersionReadme\",\n                \"codeartifact:GetRepositoryEndpoint\",\n                \"codeartifact:ListPackageVersionAssets\",\n                \"codeartifact:ListPackageVersionDependencies\",\n                \"codeartifact:ListPackageVersions\",\n                \"codeartifact:ListPackages\",\n                \"codeartifact:ReadFromRepository\",\n            ],\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"aws\": \"arn:aws:iam::123456789012:root\",\n            },\n            \"resource\": \"*\",\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {\n    domainName: \"my-domain\",\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\",\n    domain_name=\"my-domain\",\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {\n    domainName: \"my-domain\",\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\",\n    domain_name=\"my-domain\",\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n    var myCodeArtifactRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactRepository\", new()\n    {\n        RepositoryName = \"my-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyCodeArtifactDomain, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = codeartifact.NewRepository(ctx, \"myCodeArtifactRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\nconst myCodeArtifactRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactRepository\", {\n    repositoryName: \"my-repo\",\n    domainName: myCodeArtifactDomain.name,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\nmy_code_artifact_repository = aws_native.codeartifact.Repository(\"myCodeArtifactRepository\",\n    repository_name=\"my-repo\",\n    domain_name=my_code_artifact_domain.name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n    var myCodeArtifactRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactRepository\", new()\n    {\n        RepositoryName = \"my-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyCodeArtifactDomain, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = codeartifact.NewRepository(ctx, \"myCodeArtifactRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\nconst myCodeArtifactRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactRepository\", {\n    repositoryName: \"my-repo\",\n    domainName: myCodeArtifactDomain.name,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\nmy_code_artifact_repository = aws_native.codeartifact.Repository(\"myCodeArtifactRepository\",\n    repository_name=\"my-repo\",\n    domain_name=my_code_artifact_domain.name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n    var myCodeArtifactUpstreamRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactUpstreamRepository\", new()\n    {\n        RepositoryName = \"my-upstream-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n        ExternalConnections = new[]\n        {\n            \"public:npmjs\",\n        },\n    });\n\n    var myCodeArtifactRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactRepository\", new()\n    {\n        RepositoryName = \"my-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n        Upstreams = new[]\n        {\n            myCodeArtifactUpstreamRepository.Name,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyCodeArtifactDomain, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyCodeArtifactUpstreamRepository, err := codeartifact.NewRepository(ctx, \"myCodeArtifactUpstreamRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-upstream-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t\tExternalConnections: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"public:npmjs\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = codeartifact.NewRepository(ctx, \"myCodeArtifactRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t\tUpstreams: pulumi.StringArray{\n\t\t\t\tmyCodeArtifactUpstreamRepository.Name,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\nconst myCodeArtifactUpstreamRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactUpstreamRepository\", {\n    repositoryName: \"my-upstream-repo\",\n    domainName: myCodeArtifactDomain.name,\n    externalConnections: [\"public:npmjs\"],\n});\nconst myCodeArtifactRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactRepository\", {\n    repositoryName: \"my-repo\",\n    domainName: myCodeArtifactDomain.name,\n    upstreams: [myCodeArtifactUpstreamRepository.name],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\nmy_code_artifact_upstream_repository = aws_native.codeartifact.Repository(\"myCodeArtifactUpstreamRepository\",\n    repository_name=\"my-upstream-repo\",\n    domain_name=my_code_artifact_domain.name,\n    external_connections=[\"public:npmjs\"])\nmy_code_artifact_repository = aws_native.codeartifact.Repository(\"myCodeArtifactRepository\",\n    repository_name=\"my-repo\",\n    domain_name=my_code_artifact_domain.name,\n    upstreams=[my_code_artifact_upstream_repository.name])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n    var myCodeArtifactUpstreamRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactUpstreamRepository\", new()\n    {\n        RepositoryName = \"my-upstream-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n        ExternalConnections = new[]\n        {\n            \"public:npmjs\",\n        },\n    });\n\n    var myCodeArtifactRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactRepository\", new()\n    {\n        RepositoryName = \"my-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n        Upstreams = new[]\n        {\n            myCodeArtifactUpstreamRepository.Name,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyCodeArtifactDomain, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyCodeArtifactUpstreamRepository, err := codeartifact.NewRepository(ctx, \"myCodeArtifactUpstreamRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-upstream-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t\tExternalConnections: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"public:npmjs\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = codeartifact.NewRepository(ctx, \"myCodeArtifactRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t\tUpstreams: pulumi.StringArray{\n\t\t\t\tmyCodeArtifactUpstreamRepository.Name,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\nconst myCodeArtifactUpstreamRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactUpstreamRepository\", {\n    repositoryName: \"my-upstream-repo\",\n    domainName: myCodeArtifactDomain.name,\n    externalConnections: [\"public:npmjs\"],\n});\nconst myCodeArtifactRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactRepository\", {\n    repositoryName: \"my-repo\",\n    domainName: myCodeArtifactDomain.name,\n    upstreams: [myCodeArtifactUpstreamRepository.name],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\nmy_code_artifact_upstream_repository = aws_native.codeartifact.Repository(\"myCodeArtifactUpstreamRepository\",\n    repository_name=\"my-upstream-repo\",\n    domain_name=my_code_artifact_domain.name,\n    external_connections=[\"public:npmjs\"])\nmy_code_artifact_repository = aws_native.codeartifact.Repository(\"myCodeArtifactRepository\",\n    repository_name=\"my-repo\",\n    domain_name=my_code_artifact_domain.name,\n    upstreams=[my_code_artifact_upstream_repository.name])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n    var myCodeArtifactRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactRepository\", new()\n    {\n        RepositoryName = \"my-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyCodeArtifactDomain, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = codeartifact.NewRepository(ctx, \"myCodeArtifactRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\nconst myCodeArtifactRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactRepository\", {\n    repositoryName: \"my-repo\",\n    domainName: myCodeArtifactDomain.name,\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\nmy_code_artifact_repository = aws_native.codeartifact.Repository(\"myCodeArtifactRepository\",\n    repository_name=\"my-repo\",\n    domain_name=my_code_artifact_domain.name,\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCodeArtifactDomain = new AwsNative.CodeArtifact.Domain(\"myCodeArtifactDomain\", new()\n    {\n        DomainName = \"my-domain\",\n    });\n\n    var myCodeArtifactRepository = new AwsNative.CodeArtifact.Repository(\"myCodeArtifactRepository\", new()\n    {\n        RepositoryName = \"my-repo\",\n        DomainName = myCodeArtifactDomain.Name,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codeartifact\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyCodeArtifactDomain, err := codeartifact.NewDomain(ctx, \"myCodeArtifactDomain\", \u0026codeartifact.DomainArgs{\n\t\t\tDomainName: pulumi.String(\"my-domain\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = codeartifact.NewRepository(ctx, \"myCodeArtifactRepository\", \u0026codeartifact.RepositoryArgs{\n\t\t\tRepositoryName: pulumi.String(\"my-repo\"),\n\t\t\tDomainName:     myCodeArtifactDomain.Name,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCodeArtifactDomain = new aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", {domainName: \"my-domain\"});\nconst myCodeArtifactRepository = new aws_native.codeartifact.Repository(\"myCodeArtifactRepository\", {\n    repositoryName: \"my-repo\",\n    domainName: myCodeArtifactDomain.name,\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_code_artifact_domain = aws_native.codeartifact.Domain(\"myCodeArtifactDomain\", domain_name=\"my-domain\")\nmy_code_artifact_repository = aws_native.codeartifact.Repository(\"myCodeArtifactRepository\",\n    repository_name=\"my-repo\",\n    domain_name=my_code_artifact_domain.name,\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the domain."},"domainName":{"type":"string","description":"The name of the domain.","replaceOnChanges":true},"encryptionKey":{"type":"string","description":"The ARN of an AWS Key Management Service (AWS KMS) key associated with a domain.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the domain. This field is used for GetAtt"},"owner":{"type":"string","description":"The 12-digit account ID of the AWS account that owns the domain. This field is used for GetAtt"},"permissionsPolicyDocument":{"$ref":"pulumi.json#/Any","description":"The access control resource policy on the provided domain.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CodeArtifact::Domain` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","domainName","encryptionKey","name","owner"],"inputProperties":{"domainName":{"type":"string","description":"The name of the domain."},"encryptionKey":{"type":"string","description":"The ARN of an AWS Key Management Service (AWS KMS) key associated with a domain."},"permissionsPolicyDocument":{"$ref":"pulumi.json#/Any","description":"The access control resource policy on the provided domain.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CodeArtifact::Domain` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:codeartifact:PackageGroup":{"description":"The resource schema to create a CodeArtifact package group.","properties":{"arn":{"type":"string","description":"The ARN of the package group."},"contactInfo":{"type":"string","description":"The contact info of the package group."},"description":{"type":"string","description":"The text description of the package group."},"domainName":{"type":"string","description":"The name of the domain that contains the package group.","replaceOnChanges":true},"domainOwner":{"type":"string","description":"The 12-digit account ID of the AWS account that owns the domain."},"originConfiguration":{"$ref":"#/types/aws-native:codeartifact:PackageGroupOriginConfiguration","description":"The package origin configuration of the package group."},"pattern":{"type":"string","description":"The package group pattern that is used to gather packages.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to the package group."}},"type":"object","required":["arn","domainName","pattern"],"inputProperties":{"contactInfo":{"type":"string","description":"The contact info of the package group."},"description":{"type":"string","description":"The text description of the package group."},"domainName":{"type":"string","description":"The name of the domain that contains the package group."},"domainOwner":{"type":"string","description":"The 12-digit account ID of the AWS account that owns the domain."},"originConfiguration":{"$ref":"#/types/aws-native:codeartifact:PackageGroupOriginConfiguration","description":"The package origin configuration of the package group."},"pattern":{"type":"string","description":"The package group pattern that is used to gather packages."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to the package group."}},"requiredInputs":["domainName","pattern"]},"aws-native:codeartifact:Repository":{"description":"The resource schema to create a CodeArtifact repository.","properties":{"arn":{"type":"string","description":"The ARN of the repository."},"description":{"type":"string","description":"A text description of the repository."},"domainName":{"type":"string","description":"The name of the domain that contains the repository.","replaceOnChanges":true},"domainOwner":{"type":"string","description":"The 12-digit account ID of the AWS account that owns the domain.","replaceOnChanges":true},"externalConnections":{"type":"array","items":{"type":"string"},"description":"A list of external connections associated with the repository."},"name":{"type":"string","description":"The name of the repository. This is used for GetAtt"},"permissionsPolicyDocument":{"$ref":"pulumi.json#/Any","description":"The access control resource policy on the provided repository.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CodeArtifact::Repository` for more information about the expected schema for this property."},"repositoryName":{"type":"string","description":"The name of the repository.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"upstreams":{"type":"array","items":{"type":"string"},"description":"A list of upstream repositories associated with the repository."}},"type":"object","required":["arn","domainName","domainOwner","name","repositoryName"],"inputProperties":{"description":{"type":"string","description":"A text description of the repository."},"domainName":{"type":"string","description":"The name of the domain that contains the repository."},"domainOwner":{"type":"string","description":"The 12-digit account ID of the AWS account that owns the domain."},"externalConnections":{"type":"array","items":{"type":"string"},"description":"A list of external connections associated with the repository."},"permissionsPolicyDocument":{"$ref":"pulumi.json#/Any","description":"The access control resource policy on the provided repository.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CodeArtifact::Repository` for more information about the expected schema for this property."},"repositoryName":{"type":"string","description":"The name of the repository."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"upstreams":{"type":"array","items":{"type":"string"},"description":"A list of upstream repositories associated with the repository."}},"requiredInputs":["domainName"]},"aws-native:codebuild:Fleet":{"description":"Resource Type definition for AWS::CodeBuild::Fleet","properties":{"arn":{"type":"string","description":"The ARN of the compute fleet."},"baseCapacity":{"type":"integer","description":"The initial number of machines allocated to the compute fleet, which defines the number of builds that can run in parallel."},"computeConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetComputeConfiguration","description":"The compute configuration of the compute fleet. This is only required if `computeType` is set to `ATTRIBUTE_BASED_COMPUTE` or `CUSTOM_INSTANCE_TYPE` ."},"computeType":{"$ref":"#/types/aws-native:codebuild:FleetComputeType","description":"Information about the compute resources the compute fleet uses. Available values include:\n\n- `ATTRIBUTE_BASED_COMPUTE` : Specify the amount of vCPUs, memory, disk space, and the type of machine.\n\n\u003e If you use `ATTRIBUTE_BASED_COMPUTE` , you must define your attributes by using `computeConfiguration` . AWS CodeBuild will select the cheapest instance that satisfies your specified attributes. For more information, see [Reserved capacity environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.types) in the *AWS CodeBuild User Guide* .\n- `BUILD_GENERAL1_SMALL` : Use up to 4 GiB memory and 2 vCPUs for builds.\n- `BUILD_GENERAL1_MEDIUM` : Use up to 8 GiB memory and 4 vCPUs for builds.\n- `BUILD_GENERAL1_LARGE` : Use up to 16 GiB memory and 8 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_XLARGE` : Use up to 72 GiB memory and 36 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_2XLARGE` : Use up to 144 GiB memory, 72 vCPUs, and 824 GB of SSD storage for builds. This compute type supports Docker images up to 100 GB uncompressed.\n- `BUILD_LAMBDA_1GB` : Use up to 1 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_2GB` : Use up to 2 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_4GB` : Use up to 4 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_8GB` : Use up to 8 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_10GB` : Use up to 10 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n\nIf you use `BUILD_GENERAL1_SMALL` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 16 GiB memory, 4 vCPUs, and 1 NVIDIA A10G Tensor Core GPU for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs on ARM-based processors for builds.\n\nIf you use `BUILD_GENERAL1_LARGE` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 255 GiB memory, 32 vCPUs, and 4 NVIDIA Tesla V100 GPUs for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs on ARM-based processors for builds.\n\nFor more information, see [On-demand environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types) in the *AWS CodeBuild User Guide.*"},"environmentType":{"$ref":"#/types/aws-native:codebuild:FleetEnvironmentType","description":"The environment type of the compute fleet.\n\n- The environment type `ARM_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), EU (Frankfurt), and South America (São Paulo).\n- The environment type `ARM_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_GPU_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), and Asia Pacific (Sydney).\n- The environment type `MAC_ARM` is available only in regions US East (Ohio), US East (N. Virginia), US West (Oregon), Europe (Frankfurt), and Asia Pacific (Sydney).\n- The environment type `WINDOWS_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `WINDOWS_SERVER_2019_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Mumbai) and EU (Ireland).\n- The environment type `WINDOWS_SERVER_2022_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Tokyo), South America (São Paulo) and Asia Pacific (Mumbai).\n\nFor more information, see [Build environment compute types](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-compute-types.html) in the *AWS CodeBuild user guide* ."},"fleetProxyConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetProxyConfiguration","description":"Information about the proxy configurations that apply network access control to your reserved capacity instances."},"fleetServiceRole":{"type":"string","description":"The service role associated with the compute fleet. For more information, see [Allow a user to add a permission policy for a fleet service role](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-permission-policy-fleet-service-role.html) in the *AWS CodeBuild User Guide* ."},"fleetVpcConfig":{"$ref":"#/types/aws-native:codebuild:FleetVpcConfig","description":"Information about the VPC configuration that AWS CodeBuild accesses."},"imageId":{"type":"string","description":"The Amazon Machine Image (AMI) of the compute fleet."},"name":{"type":"string","description":"The name of the compute fleet."},"overflowBehavior":{"$ref":"#/types/aws-native:codebuild:FleetOverflowBehavior","description":"The compute fleet overflow behavior.\n\n- For overflow behavior `QUEUE` , your overflow builds need to wait on the existing fleet instance to become available.\n- For overflow behavior `ON_DEMAND` , your overflow builds run on CodeBuild on-demand.\n\n\u003e If you choose to set your overflow behavior to on-demand while creating a VPC-connected fleet, make sure that you add the required VPC permissions to your project service role. For more information, see [Example policy statement to allow CodeBuild access to AWS services required to create a VPC network interface](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-create-vpc-network-interface) ."},"scalingConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetScalingConfigurationInput","description":"The scaling configuration of the compute fleet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tag key and value pairs associated with this compute fleet.\n\nThese tags are available for use by AWS services that support AWS CodeBuild compute fleet tags."}},"type":"object","required":["arn"],"inputProperties":{"baseCapacity":{"type":"integer","description":"The initial number of machines allocated to the compute fleet, which defines the number of builds that can run in parallel."},"computeConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetComputeConfiguration","description":"The compute configuration of the compute fleet. This is only required if `computeType` is set to `ATTRIBUTE_BASED_COMPUTE` or `CUSTOM_INSTANCE_TYPE` ."},"computeType":{"$ref":"#/types/aws-native:codebuild:FleetComputeType","description":"Information about the compute resources the compute fleet uses. Available values include:\n\n- `ATTRIBUTE_BASED_COMPUTE` : Specify the amount of vCPUs, memory, disk space, and the type of machine.\n\n\u003e If you use `ATTRIBUTE_BASED_COMPUTE` , you must define your attributes by using `computeConfiguration` . AWS CodeBuild will select the cheapest instance that satisfies your specified attributes. For more information, see [Reserved capacity environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.types) in the *AWS CodeBuild User Guide* .\n- `BUILD_GENERAL1_SMALL` : Use up to 4 GiB memory and 2 vCPUs for builds.\n- `BUILD_GENERAL1_MEDIUM` : Use up to 8 GiB memory and 4 vCPUs for builds.\n- `BUILD_GENERAL1_LARGE` : Use up to 16 GiB memory and 8 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_XLARGE` : Use up to 72 GiB memory and 36 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_2XLARGE` : Use up to 144 GiB memory, 72 vCPUs, and 824 GB of SSD storage for builds. This compute type supports Docker images up to 100 GB uncompressed.\n- `BUILD_LAMBDA_1GB` : Use up to 1 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_2GB` : Use up to 2 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_4GB` : Use up to 4 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_8GB` : Use up to 8 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_10GB` : Use up to 10 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n\nIf you use `BUILD_GENERAL1_SMALL` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 16 GiB memory, 4 vCPUs, and 1 NVIDIA A10G Tensor Core GPU for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs on ARM-based processors for builds.\n\nIf you use `BUILD_GENERAL1_LARGE` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 255 GiB memory, 32 vCPUs, and 4 NVIDIA Tesla V100 GPUs for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs on ARM-based processors for builds.\n\nFor more information, see [On-demand environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types) in the *AWS CodeBuild User Guide.*"},"environmentType":{"$ref":"#/types/aws-native:codebuild:FleetEnvironmentType","description":"The environment type of the compute fleet.\n\n- The environment type `ARM_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), EU (Frankfurt), and South America (São Paulo).\n- The environment type `ARM_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_GPU_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), and Asia Pacific (Sydney).\n- The environment type `MAC_ARM` is available only in regions US East (Ohio), US East (N. Virginia), US West (Oregon), Europe (Frankfurt), and Asia Pacific (Sydney).\n- The environment type `WINDOWS_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `WINDOWS_SERVER_2019_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Mumbai) and EU (Ireland).\n- The environment type `WINDOWS_SERVER_2022_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Tokyo), South America (São Paulo) and Asia Pacific (Mumbai).\n\nFor more information, see [Build environment compute types](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-compute-types.html) in the *AWS CodeBuild user guide* ."},"fleetProxyConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetProxyConfiguration","description":"Information about the proxy configurations that apply network access control to your reserved capacity instances."},"fleetServiceRole":{"type":"string","description":"The service role associated with the compute fleet. For more information, see [Allow a user to add a permission policy for a fleet service role](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-permission-policy-fleet-service-role.html) in the *AWS CodeBuild User Guide* ."},"fleetVpcConfig":{"$ref":"#/types/aws-native:codebuild:FleetVpcConfig","description":"Information about the VPC configuration that AWS CodeBuild accesses."},"imageId":{"type":"string","description":"The Amazon Machine Image (AMI) of the compute fleet."},"name":{"type":"string","description":"The name of the compute fleet."},"overflowBehavior":{"$ref":"#/types/aws-native:codebuild:FleetOverflowBehavior","description":"The compute fleet overflow behavior.\n\n- For overflow behavior `QUEUE` , your overflow builds need to wait on the existing fleet instance to become available.\n- For overflow behavior `ON_DEMAND` , your overflow builds run on CodeBuild on-demand.\n\n\u003e If you choose to set your overflow behavior to on-demand while creating a VPC-connected fleet, make sure that you add the required VPC permissions to your project service role. For more information, see [Example policy statement to allow CodeBuild access to AWS services required to create a VPC network interface](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-create-vpc-network-interface) ."},"scalingConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetScalingConfigurationInput","description":"The scaling configuration of the compute fleet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tag key and value pairs associated with this compute fleet.\n\nThese tags are available for use by AWS services that support AWS CodeBuild compute fleet tags."}}},"aws-native:codeconnections:Connection":{"description":"Schema for AWS::CodeConnections::Connection resource which can be used to connect external source providers with other AWS services (i.e. AWS CodePipeline)","properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the  connection. The ARN is used as the connection reference when the connection is shared between AWS services."},"connectionName":{"type":"string","description":"The name of the connection. Connection names must be unique in an AWS user account.","replaceOnChanges":true},"connectionStatus":{"type":"string","description":"The current status of the connection."},"hostArn":{"type":"string","description":"The host arn configured to represent the infrastructure where your third-party provider is installed. You must specify either a ProviderType or a HostArn.","replaceOnChanges":true},"ownerAccountId":{"type":"string","description":"The name of the external provider where your third-party code repository is configured. For Bitbucket, this is the account ID of the owner of the Bitbucket repository."},"providerType":{"type":"string","description":"The name of the external provider where your third-party code repository is configured. You must specify either a ProviderType or a HostArn.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to a connection."}},"type":"object","required":["connectionArn","connectionName","connectionStatus","ownerAccountId"],"inputProperties":{"connectionName":{"type":"string","description":"The name of the connection. Connection names must be unique in an AWS user account."},"hostArn":{"type":"string","description":"The host arn configured to represent the infrastructure where your third-party provider is installed. You must specify either a ProviderType or a HostArn."},"providerType":{"type":"string","description":"The name of the external provider where your third-party code repository is configured. You must specify either a ProviderType or a HostArn."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to a connection."}}},"aws-native:codedeploy:Application":{"description":"The AWS::CodeDeploy::Application resource creates an AWS CodeDeploy application","properties":{"applicationName":{"type":"string","description":"A name for the application. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the application name.","replaceOnChanges":true},"computePlatform":{"type":"string","description":"The compute platform that CodeDeploy deploys the application to.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to CodeDeploy applications to help you organize and categorize them. Each tag consists of a key and an optional value, both of which you define. "}},"type":"object","inputProperties":{"applicationName":{"type":"string","description":"A name for the application. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the application name."},"computePlatform":{"type":"string","description":"The compute platform that CodeDeploy deploys the application to."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to CodeDeploy applications to help you organize and categorize them. Each tag consists of a key and an optional value, both of which you define. "}}},"aws-native:codedeploy:DeploymentConfig":{"description":"Resource Type definition for AWS::CodeDeploy::DeploymentConfig","properties":{"computePlatform":{"type":"string","description":"The destination platform type for the deployment (Lambda, Server, or ECS).","replaceOnChanges":true},"deploymentConfigName":{"type":"string","description":"A name for the deployment configuration. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the deployment configuration name. For more information, see Name Type.","replaceOnChanges":true},"minimumHealthyHosts":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigMinimumHealthyHosts","description":"The minimum number of healthy instances that should be available at any time during the deployment. There are two parameters expected in the input: type and value.","replaceOnChanges":true},"trafficRoutingConfig":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigTrafficRoutingConfig","description":"The configuration that specifies how the deployment traffic is routed.","replaceOnChanges":true},"zonalConfig":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigZonalConfig","description":"The zonal deployment config that specifies how the zonal deployment behaves","replaceOnChanges":true}},"type":"object","inputProperties":{"computePlatform":{"type":"string","description":"The destination platform type for the deployment (Lambda, Server, or ECS)."},"deploymentConfigName":{"type":"string","description":"A name for the deployment configuration. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the deployment configuration name. For more information, see Name Type."},"minimumHealthyHosts":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigMinimumHealthyHosts","description":"The minimum number of healthy instances that should be available at any time during the deployment. There are two parameters expected in the input: type and value."},"trafficRoutingConfig":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigTrafficRoutingConfig","description":"The configuration that specifies how the deployment traffic is routed."},"zonalConfig":{"$ref":"#/types/aws-native:codedeploy:DeploymentConfigZonalConfig","description":"The zonal deployment config that specifies how the zonal deployment behaves"}}},"aws-native:codedeploy:DeploymentGroup":{"description":"Resource type definition for AWS::CodeDeploy::DeploymentGroup","properties":{"alarmConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAlarmConfiguration","description":"Information about the Amazon CloudWatch alarms that are associated with the deployment group."},"applicationName":{"type":"string","description":"The name of an existing CodeDeploy application to associate this deployment group with.","replaceOnChanges":true},"autoRollbackConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAutoRollbackConfiguration","description":"Information about the automatic rollback configuration that is associated with the deployment group. If you specify this property, don't specify the Deployment property."},"autoScalingGroups":{"type":"array","items":{"type":"string"},"description":"A list of associated Auto Scaling groups that CodeDeploy automatically deploys revisions to when new instances are created. Duplicates are not allowed."},"blueGreenDeploymentConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupBlueGreenDeploymentConfiguration","description":"Information about blue/green deployment options for a deployment group."},"deployment":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeployment","description":"The application revision to deploy to this deployment group. If you specify this property, your target application revision is deployed as soon as the provisioning process is complete. If you specify this property, don't specify the AutoRollbackConfiguration property."},"deploymentConfigName":{"type":"string","description":"A deployment configuration name or a predefined configuration name. With predefined configurations, you can deploy application revisions to one instance at a time (CodeDeployDefault.OneAtATime), half of the instances at a time (CodeDeployDefault.HalfAtATime), or all the instances at once (CodeDeployDefault.AllAtOnce)."},"deploymentGroupName":{"type":"string","description":"A name for the deployment group. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the deployment group name.","replaceOnChanges":true},"deploymentStyle":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeploymentStyle","description":"Attributes that determine the type of deployment to run and whether to route deployment traffic behind a load balancer. If you specify this property with a blue/green deployment type, don't specify the AutoScalingGroups, LoadBalancerInfo, or Deployment properties."},"ec2TagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagFilter"},"description":"The Amazon EC2 tags that are already applied to Amazon EC2 instances that you want to include in the deployment group. CodeDeploy includes all Amazon EC2 instances identified by any of the tags you specify in this deployment group. Duplicates are not allowed. You can specify EC2TagFilters or Ec2TagSet, but not both."},"ec2TagSet":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagSet","description":"Information about groups of tags applied to Amazon EC2 instances. Use when the deployment group includes only Amazon EC2 instances identified by all the tag groups. Cannot be used in the same call as ec2TagFilter."},"ecsServices":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEcsService"},"description":"The target Amazon ECS services in the deployment group. This applies only to deployment groups that use the Amazon ECS compute platform. A target Amazon ECS service is specified as an Amazon ECS cluster and service name pair using the format \u003cclustername\u003e:\u003cservicename\u003e."},"loadBalancerInfo":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupLoadBalancerInfo","description":"Information about the load balancer to use in a deployment."},"onPremisesInstanceTagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTagFilter"},"description":"The on-premises instance tags already applied to on-premises instances that you want to include in the deployment group. CodeDeploy includes all on-premises instances identified by any of the tags you specify in this deployment group. Duplicates are not allowed. You can specify OnPremisesInstanceTagFilters or OnPremisesInstanceTagSet, but not both."},"onPremisesTagSet":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupOnPremisesTagSet","description":"Information about groups of tags applied to on-premises instances. The deployment group includes only on-premises instances identified by all the tag groups. You can specify OnPremisesInstanceTagFilters or OnPremisesInstanceTagSet, but not both."},"outdatedInstancesStrategy":{"type":"string","description":"Indicates what happens when new Amazon EC2 instances are launched mid-deployment and do not receive the deployed application revision. If this option is set to UPDATE or is unspecified, CodeDeploy initiates one or more 'auto-update outdated instances' deployments to apply the deployed application revision to the new Amazon EC2 instances. If this option is set to IGNORE, CodeDeploy does not initiate a deployment to update the new Amazon EC2 instances. This may result in instances having different revisions."},"serviceRoleArn":{"type":"string","description":"A service role Amazon Resource Name (ARN) that grants CodeDeploy permission to make calls to AWS services on your behalf. For more information, see 'Create a Service Role for AWS CodeDeploy' in the AWS CodeDeploy User Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to CodeDeploy deployment groups to help you organize and categorize them. Each tag consists of a key and an optional value, both of which you define."},"terminationHookEnabled":{"type":"boolean","description":"Indicates whether the deployment group was configured to have CodeDeploy install a termination hook into an Auto Scaling group."},"triggerConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTriggerConfig"},"description":"Information about triggers associated with the deployment group. Duplicates are not allowed."}},"type":"object","required":["applicationName","serviceRoleArn"],"inputProperties":{"alarmConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAlarmConfiguration","description":"Information about the Amazon CloudWatch alarms that are associated with the deployment group."},"applicationName":{"type":"string","description":"The name of an existing CodeDeploy application to associate this deployment group with."},"autoRollbackConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAutoRollbackConfiguration","description":"Information about the automatic rollback configuration that is associated with the deployment group. If you specify this property, don't specify the Deployment property."},"autoScalingGroups":{"type":"array","items":{"type":"string"},"description":"A list of associated Auto Scaling groups that CodeDeploy automatically deploys revisions to when new instances are created. Duplicates are not allowed."},"blueGreenDeploymentConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupBlueGreenDeploymentConfiguration","description":"Information about blue/green deployment options for a deployment group."},"deployment":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeployment","description":"The application revision to deploy to this deployment group. If you specify this property, your target application revision is deployed as soon as the provisioning process is complete. If you specify this property, don't specify the AutoRollbackConfiguration property."},"deploymentConfigName":{"type":"string","description":"A deployment configuration name or a predefined configuration name. With predefined configurations, you can deploy application revisions to one instance at a time (CodeDeployDefault.OneAtATime), half of the instances at a time (CodeDeployDefault.HalfAtATime), or all the instances at once (CodeDeployDefault.AllAtOnce)."},"deploymentGroupName":{"type":"string","description":"A name for the deployment group. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the deployment group name."},"deploymentStyle":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeploymentStyle","description":"Attributes that determine the type of deployment to run and whether to route deployment traffic behind a load balancer. If you specify this property with a blue/green deployment type, don't specify the AutoScalingGroups, LoadBalancerInfo, or Deployment properties."},"ec2TagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagFilter"},"description":"The Amazon EC2 tags that are already applied to Amazon EC2 instances that you want to include in the deployment group. CodeDeploy includes all Amazon EC2 instances identified by any of the tags you specify in this deployment group. Duplicates are not allowed. You can specify EC2TagFilters or Ec2TagSet, but not both."},"ec2TagSet":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagSet","description":"Information about groups of tags applied to Amazon EC2 instances. Use when the deployment group includes only Amazon EC2 instances identified by all the tag groups. Cannot be used in the same call as ec2TagFilter."},"ecsServices":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEcsService"},"description":"The target Amazon ECS services in the deployment group. This applies only to deployment groups that use the Amazon ECS compute platform. A target Amazon ECS service is specified as an Amazon ECS cluster and service name pair using the format \u003cclustername\u003e:\u003cservicename\u003e."},"loadBalancerInfo":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupLoadBalancerInfo","description":"Information about the load balancer to use in a deployment."},"onPremisesInstanceTagFilters":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTagFilter"},"description":"The on-premises instance tags already applied to on-premises instances that you want to include in the deployment group. CodeDeploy includes all on-premises instances identified by any of the tags you specify in this deployment group. Duplicates are not allowed. You can specify OnPremisesInstanceTagFilters or OnPremisesInstanceTagSet, but not both."},"onPremisesTagSet":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupOnPremisesTagSet","description":"Information about groups of tags applied to on-premises instances. The deployment group includes only on-premises instances identified by all the tag groups. You can specify OnPremisesInstanceTagFilters or OnPremisesInstanceTagSet, but not both."},"outdatedInstancesStrategy":{"type":"string","description":"Indicates what happens when new Amazon EC2 instances are launched mid-deployment and do not receive the deployed application revision. If this option is set to UPDATE or is unspecified, CodeDeploy initiates one or more 'auto-update outdated instances' deployments to apply the deployed application revision to the new Amazon EC2 instances. If this option is set to IGNORE, CodeDeploy does not initiate a deployment to update the new Amazon EC2 instances. This may result in instances having different revisions."},"serviceRoleArn":{"type":"string","description":"A service role Amazon Resource Name (ARN) that grants CodeDeploy permission to make calls to AWS services on your behalf. For more information, see 'Create a Service Role for AWS CodeDeploy' in the AWS CodeDeploy User Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to CodeDeploy deployment groups to help you organize and categorize them. Each tag consists of a key and an optional value, both of which you define."},"terminationHookEnabled":{"type":"boolean","description":"Indicates whether the deployment group was configured to have CodeDeploy install a termination hook into an Auto Scaling group."},"triggerConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTriggerConfig"},"description":"Information about triggers associated with the deployment group. Duplicates are not allowed."}},"requiredInputs":["applicationName","serviceRoleArn"]},"aws-native:codeguruprofiler:ProfilingGroup":{"description":"This resource schema represents the Profiling Group resource in the Amazon CodeGuru Profiler service.","properties":{"agentPermissions":{"$ref":"#/types/aws-native:codeguruprofiler:AgentPermissionsProperties","description":"The agent permissions attached to this profiling group."},"anomalyDetectionNotificationConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:codeguruprofiler:ProfilingGroupChannel"},"description":"Configuration for Notification Channels for Anomaly Detection feature in CodeGuru Profiler which enables customers to detect anomalies in the application profile for those methods that represent the highest proportion of CPU time or latency"},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified profiling group."},"computePlatform":{"$ref":"#/types/aws-native:codeguruprofiler:ProfilingGroupComputePlatform","description":"The compute platform of the profiling group.","replaceOnChanges":true},"profilingGroupName":{"type":"string","description":"The name of the profiling group.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with a profiling group."}},"type":"object","required":["arn","profilingGroupName"],"inputProperties":{"agentPermissions":{"$ref":"#/types/aws-native:codeguruprofiler:AgentPermissionsProperties","description":"The agent permissions attached to this profiling group."},"anomalyDetectionNotificationConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:codeguruprofiler:ProfilingGroupChannel"},"description":"Configuration for Notification Channels for Anomaly Detection feature in CodeGuru Profiler which enables customers to detect anomalies in the application profile for those methods that represent the highest proportion of CPU time or latency"},"computePlatform":{"$ref":"#/types/aws-native:codeguruprofiler:ProfilingGroupComputePlatform","description":"The compute platform of the profiling group."},"profilingGroupName":{"type":"string","description":"The name of the profiling group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with a profiling group."}}},"aws-native:codegurureviewer:RepositoryAssociation":{"description":"This resource schema represents the RepositoryAssociation resource in the Amazon CodeGuru Reviewer service.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyRepository\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.CodeCommit,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName: pulumi.String(\"MyRepository\"),\n\t\t\tType: codegurureviewer.RepositoryAssociationTypeCodeCommit,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyRepository\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.CodeCommit,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyRepository\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.CODE_COMMIT)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyRepository\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.CodeCommit,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName: pulumi.String(\"MyRepository\"),\n\t\t\tType: codegurureviewer.RepositoryAssociationTypeCodeCommit,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyRepository\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.CodeCommit,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyRepository\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.CODE_COMMIT)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyBitbucketRepoName\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.Bitbucket,\n        ConnectionArn = \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n        Owner = \"MyOwnerName\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName:          pulumi.String(\"MyBitbucketRepoName\"),\n\t\t\tType:          codegurureviewer.RepositoryAssociationTypeBitbucket,\n\t\t\tConnectionArn: pulumi.String(\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\"),\n\t\t\tOwner:         pulumi.String(\"MyOwnerName\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyBitbucketRepoName\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.Bitbucket,\n    connectionArn: \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner: \"MyOwnerName\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyBitbucketRepoName\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.BITBUCKET,\n    connection_arn=\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner=\"MyOwnerName\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyBitbucketRepoName\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.Bitbucket,\n        ConnectionArn = \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n        Owner = \"MyOwnerName\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName:          pulumi.String(\"MyBitbucketRepoName\"),\n\t\t\tType:          codegurureviewer.RepositoryAssociationTypeBitbucket,\n\t\t\tConnectionArn: pulumi.String(\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\"),\n\t\t\tOwner:         pulumi.String(\"MyOwnerName\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyBitbucketRepoName\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.Bitbucket,\n    connectionArn: \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner: \"MyOwnerName\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyBitbucketRepoName\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.BITBUCKET,\n    connection_arn=\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner=\"MyOwnerName\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyGitHubEnterpriseRepoName\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.GitHubEnterpriseServer,\n        ConnectionArn = \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n        Owner = \"MyOwnerName\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName:          pulumi.String(\"MyGitHubEnterpriseRepoName\"),\n\t\t\tType:          codegurureviewer.RepositoryAssociationTypeGitHubEnterpriseServer,\n\t\t\tConnectionArn: pulumi.String(\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\"),\n\t\t\tOwner:         pulumi.String(\"MyOwnerName\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyGitHubEnterpriseRepoName\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.GitHubEnterpriseServer,\n    connectionArn: \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner: \"MyOwnerName\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyGitHubEnterpriseRepoName\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.GIT_HUB_ENTERPRISE_SERVER,\n    connection_arn=\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner=\"MyOwnerName\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyGitHubEnterpriseRepoName\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.GitHubEnterpriseServer,\n        ConnectionArn = \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n        Owner = \"MyOwnerName\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName:          pulumi.String(\"MyGitHubEnterpriseRepoName\"),\n\t\t\tType:          codegurureviewer.RepositoryAssociationTypeGitHubEnterpriseServer,\n\t\t\tConnectionArn: pulumi.String(\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\"),\n\t\t\tOwner:         pulumi.String(\"MyOwnerName\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyGitHubEnterpriseRepoName\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.GitHubEnterpriseServer,\n    connectionArn: \"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner: \"MyOwnerName\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyGitHubEnterpriseRepoName\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.GIT_HUB_ENTERPRISE_SERVER,\n    connection_arn=\"arn:aws:codestar-connections:us-west-2:123456789012:connection/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee\",\n    owner=\"MyOwnerName\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyRepository\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.CodeCommit,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.CreateOnlyTagArgs\n            {\n                Key = \"tag1-key\",\n                Value = \"tag1-value\",\n            },\n            new AwsNative.Inputs.CreateOnlyTagArgs\n            {\n                Key = \"tag2-key\",\n                Value = \"tag2-value\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName: pulumi.String(\"MyRepository\"),\n\t\t\tType: codegurureviewer.RepositoryAssociationTypeCodeCommit,\n\t\t\tTags: aws.CreateOnlyTagArray{\n\t\t\t\t\u0026aws.CreateOnlyTagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1-key\"),\n\t\t\t\t\tValue: pulumi.String(\"tag1-value\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.CreateOnlyTagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2-key\"),\n\t\t\t\t\tValue: pulumi.String(\"tag2-value\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyRepository\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.CodeCommit,\n    tags: [\n        {\n            key: \"tag1-key\",\n            value: \"tag1-value\",\n        },\n        {\n            key: \"tag2-key\",\n            value: \"tag2-value\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyRepository\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.CODE_COMMIT,\n    tags=[\n        {\n            \"key\": \"tag1-key\",\n            \"value\": \"tag1-value\",\n        },\n        {\n            \"key\": \"tag2-key\",\n            \"value\": \"tag2-value\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRepositoryAssociation = new AwsNative.CodeGuruReviewer.RepositoryAssociation(\"myRepositoryAssociation\", new()\n    {\n        Name = \"MyRepository\",\n        Type = AwsNative.CodeGuruReviewer.RepositoryAssociationType.CodeCommit,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.CreateOnlyTagArgs\n            {\n                Key = \"tag1-key\",\n                Value = \"tag1-value\",\n            },\n            new AwsNative.Inputs.CreateOnlyTagArgs\n            {\n                Key = \"tag2-key\",\n                Value = \"tag2-value\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codegurureviewer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codegurureviewer.NewRepositoryAssociation(ctx, \"myRepositoryAssociation\", \u0026codegurureviewer.RepositoryAssociationArgs{\n\t\t\tName: pulumi.String(\"MyRepository\"),\n\t\t\tType: codegurureviewer.RepositoryAssociationTypeCodeCommit,\n\t\t\tTags: aws.CreateOnlyTagArray{\n\t\t\t\t\u0026aws.CreateOnlyTagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag1-key\"),\n\t\t\t\t\tValue: pulumi.String(\"tag1-value\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.CreateOnlyTagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tag2-key\"),\n\t\t\t\t\tValue: pulumi.String(\"tag2-value\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRepositoryAssociation = new aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\", {\n    name: \"MyRepository\",\n    type: aws_native.codegurureviewer.RepositoryAssociationType.CodeCommit,\n    tags: [\n        {\n            key: \"tag1-key\",\n            value: \"tag1-value\",\n        },\n        {\n            key: \"tag2-key\",\n            value: \"tag2-value\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_repository_association = aws_native.codegurureviewer.RepositoryAssociation(\"myRepositoryAssociation\",\n    name=\"MyRepository\",\n    type=aws_native.codegurureviewer.RepositoryAssociationType.CODE_COMMIT,\n    tags=[\n        {\n            \"key\": \"tag1-key\",\n            \"value\": \"tag1-value\",\n        },\n        {\n            \"key\": \"tag2-key\",\n            \"value\": \"tag2-value\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"associationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the repository association."},"bucketName":{"type":"string","description":"The name of the S3 bucket associated with an associated S3 repository. It must start with `codeguru-reviewer-`.","replaceOnChanges":true},"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS CodeStar Connections connection.","replaceOnChanges":true},"name":{"type":"string","description":"Name of the repository to be associated.","replaceOnChanges":true},"owner":{"type":"string","description":"The owner of the repository. For a Bitbucket repository, this is the username for the account that owns the repository.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags associated with a repository association.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:codegurureviewer:RepositoryAssociationType","description":"The type of repository to be associated.","replaceOnChanges":true}},"type":"object","required":["associationArn","name","type"],"inputProperties":{"bucketName":{"type":"string","description":"The name of the S3 bucket associated with an associated S3 repository. It must start with `codeguru-reviewer-`."},"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an AWS CodeStar Connections connection."},"name":{"type":"string","description":"Name of the repository to be associated."},"owner":{"type":"string","description":"The owner of the repository. For a Bitbucket repository, this is the username for the account that owns the repository."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags associated with a repository association."},"type":{"$ref":"#/types/aws-native:codegurureviewer:RepositoryAssociationType","description":"The type of repository to be associated."}},"requiredInputs":["type"]},"aws-native:codepipeline:CustomActionType":{"description":"The AWS::CodePipeline::CustomActionType resource creates a custom action for activities that aren't included in the CodePipeline default actions, such as running an internally developed build process or a test suite. You can use these custom actions in the stage of a pipeline.","properties":{"awsId":{"type":"string"},"category":{"type":"string","description":"The category of the custom action, such as a build action or a test action.","replaceOnChanges":true},"configurationProperties":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeConfigurationProperties"},"description":"The configuration properties for the custom action.","replaceOnChanges":true},"inputArtifactDetails":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeArtifactDetails","description":"The details of the input artifact for the action, such as its commit ID.","replaceOnChanges":true},"outputArtifactDetails":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeArtifactDetails","description":"The details of the output artifact of the action, such as its commit ID.","replaceOnChanges":true},"provider":{"type":"string","description":"The provider of the service used in the custom action, such as AWS CodeDeploy.","replaceOnChanges":true},"settings":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeSettings","description":"URLs that provide users information about this custom action.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the custom action."},"version":{"type":"string","description":"The version identifier of the custom action.","replaceOnChanges":true}},"type":"object","required":["awsId","category","inputArtifactDetails","outputArtifactDetails","provider","version"],"inputProperties":{"category":{"type":"string","description":"The category of the custom action, such as a build action or a test action."},"configurationProperties":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeConfigurationProperties"},"description":"The configuration properties for the custom action."},"inputArtifactDetails":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeArtifactDetails","description":"The details of the input artifact for the action, such as its commit ID."},"outputArtifactDetails":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeArtifactDetails","description":"The details of the output artifact of the action, such as its commit ID."},"provider":{"type":"string","description":"The provider of the service used in the custom action, such as AWS CodeDeploy."},"settings":{"$ref":"#/types/aws-native:codepipeline:CustomActionTypeSettings","description":"URLs that provide users information about this custom action."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the custom action."},"version":{"type":"string","description":"The version identifier of the custom action."}},"requiredInputs":["category","inputArtifactDetails","outputArtifactDetails","provider","version"]},"aws-native:codepipeline:Pipeline":{"description":"The AWS::CodePipeline::Pipeline resource creates a CodePipeline pipeline that describes how software changes go through a release process.","properties":{"artifactStore":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStore","description":"The S3 bucket where artifacts for the pipeline are stored."},"artifactStores":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStoreMap"},"description":"A mapping of artifactStore objects and their corresponding AWS Regions. There must be an artifact store for the pipeline Region and for each cross-region action in the pipeline."},"disableInboundStageTransitions":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineStageTransition"},"description":"Represents the input of a DisableStageTransition action."},"executionMode":{"$ref":"#/types/aws-native:codepipeline:PipelineExecutionMode","description":"The method that the pipeline will use to handle multiple executions. The default mode is SUPERSEDED."},"name":{"type":"string","description":"The name of the pipeline.","replaceOnChanges":true},"pipelineType":{"$ref":"#/types/aws-native:codepipeline:PipelineType","description":"CodePipeline provides the following pipeline types, which differ in characteristics and price, so that you can tailor your pipeline features and cost to the needs of your applications."},"restartExecutionOnUpdate":{"type":"boolean","description":"Indicates whether to rerun the CodePipeline pipeline after you update it."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for CodePipeline to use to either perform actions with no actionRoleArn, or to use to assume roles for actions with an actionRoleArn"},"stages":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineStageDeclaration"},"description":"Represents information about a stage and its definition."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to the pipeline."},"triggers":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineTriggerDeclaration"},"description":"The trigger configuration specifying a type of event, such as Git tags, that starts the pipeline."},"variables":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineVariableDeclaration"},"description":"A list that defines the pipeline variables for a pipeline resource. Variable names can have alphanumeric and underscore characters, and the values must match [A-Za-z0-9@\\-_]+."},"version":{"type":"string","description":"The version of the pipeline."}},"type":"object","required":["roleArn","stages","version"],"inputProperties":{"artifactStore":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStore","description":"The S3 bucket where artifacts for the pipeline are stored."},"artifactStores":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStoreMap"},"description":"A mapping of artifactStore objects and their corresponding AWS Regions. There must be an artifact store for the pipeline Region and for each cross-region action in the pipeline."},"disableInboundStageTransitions":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineStageTransition"},"description":"Represents the input of a DisableStageTransition action."},"executionMode":{"$ref":"#/types/aws-native:codepipeline:PipelineExecutionMode","description":"The method that the pipeline will use to handle multiple executions. The default mode is SUPERSEDED."},"name":{"type":"string","description":"The name of the pipeline."},"pipelineType":{"$ref":"#/types/aws-native:codepipeline:PipelineType","description":"CodePipeline provides the following pipeline types, which differ in characteristics and price, so that you can tailor your pipeline features and cost to the needs of your applications."},"restartExecutionOnUpdate":{"type":"boolean","description":"Indicates whether to rerun the CodePipeline pipeline after you update it."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for CodePipeline to use to either perform actions with no actionRoleArn, or to use to assume roles for actions with an actionRoleArn"},"stages":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineStageDeclaration"},"description":"Represents information about a stage and its definition."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to the pipeline."},"triggers":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineTriggerDeclaration"},"description":"The trigger configuration specifying a type of event, such as Git tags, that starts the pipeline."},"variables":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:PipelineVariableDeclaration"},"description":"A list that defines the pipeline variables for a pipeline resource. Variable names can have alphanumeric and underscore characters, and the values must match [A-Za-z0-9@\\-_]+."}},"requiredInputs":["roleArn","stages"]},"aws-native:codepipeline:Webhook":{"description":"Resource Type definition for AWS::CodePipeline::Webhook","properties":{"authentication":{"$ref":"#/types/aws-native:codepipeline:WebhookAuthentication","description":"Supported options are GITHUB_HMAC, IP, and UNAUTHENTICATED."},"authenticationConfiguration":{"$ref":"#/types/aws-native:codepipeline:WebhookAuthConfiguration","description":"Properties that configure the authentication applied to incoming webhook trigger requests"},"awsId":{"type":"string","description":"logical id of the webhook"},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:WebhookFilterRule"},"description":"A list of rules applied to the body/payload sent in the POST request to a webhook URL"},"name":{"type":"string","description":"The name of the webhook","replaceOnChanges":true},"registerWithThirdParty":{"type":"boolean","description":"Configures a connection between the webhook that was created and the external tool with events to be detected."},"targetAction":{"type":"string","description":"The name of the action in a pipeline you want to connect to the webhook."},"targetPipeline":{"type":"string","description":"The name of the pipeline you want to connect to the webhook."},"targetPipelineVersion":{"type":"integer","description":"The version number of the pipeline to be connected to the trigger request."},"url":{"type":"string","description":"The webhook URL generated by AWS CodePipeline"}},"type":"object","required":["authentication","authenticationConfiguration","awsId","filters","targetAction","targetPipeline","url"],"inputProperties":{"authentication":{"$ref":"#/types/aws-native:codepipeline:WebhookAuthentication","description":"Supported options are GITHUB_HMAC, IP, and UNAUTHENTICATED."},"authenticationConfiguration":{"$ref":"#/types/aws-native:codepipeline:WebhookAuthConfiguration","description":"Properties that configure the authentication applied to incoming webhook trigger requests"},"filters":{"type":"array","items":{"$ref":"#/types/aws-native:codepipeline:WebhookFilterRule"},"description":"A list of rules applied to the body/payload sent in the POST request to a webhook URL"},"name":{"type":"string","description":"The name of the webhook"},"registerWithThirdParty":{"type":"boolean","description":"Configures a connection between the webhook that was created and the external tool with events to be detected."},"targetAction":{"type":"string","description":"The name of the action in a pipeline you want to connect to the webhook."},"targetPipeline":{"type":"string","description":"The name of the pipeline you want to connect to the webhook."},"targetPipelineVersion":{"type":"integer","description":"The version number of the pipeline to be connected to the trigger request."}},"requiredInputs":["authentication","authenticationConfiguration","filters","targetAction","targetPipeline"]},"aws-native:codestarconnections:Connection":{"description":"Schema for AWS::CodeStarConnections::Connection resource which can be used to connect external source providers with AWS CodePipeline\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleConnection = new AwsNative.CodeStarConnections.Connection(\"sampleConnection\", new()\n    {\n        ConnectionName = \"MyConnection\",\n        ProviderType = \"Bitbucket\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Project\",\n                Value = \"ProjectB\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codestarconnections\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codestarconnections.NewConnection(ctx, \"sampleConnection\", \u0026codestarconnections.ConnectionArgs{\n\t\t\tConnectionName: pulumi.String(\"MyConnection\"),\n\t\t\tProviderType:   pulumi.String(\"Bitbucket\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Project\"),\n\t\t\t\t\tValue: pulumi.String(\"ProjectB\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleConnection = new aws_native.codestarconnections.Connection(\"sampleConnection\", {\n    connectionName: \"MyConnection\",\n    providerType: \"Bitbucket\",\n    tags: [{\n        key: \"Project\",\n        value: \"ProjectB\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_connection = aws_native.codestarconnections.Connection(\"sampleConnection\",\n    connection_name=\"MyConnection\",\n    provider_type=\"Bitbucket\",\n    tags=[{\n        \"key\": \"Project\",\n        \"value\": \"ProjectB\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleConnection = new AwsNative.CodeStarConnections.Connection(\"sampleConnection\", new()\n    {\n        ConnectionName = \"MyConnection\",\n        ProviderType = \"Bitbucket\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Project\",\n                Value = \"ProjectB\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codestarconnections\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codestarconnections.NewConnection(ctx, \"sampleConnection\", \u0026codestarconnections.ConnectionArgs{\n\t\t\tConnectionName: pulumi.String(\"MyConnection\"),\n\t\t\tProviderType:   pulumi.String(\"Bitbucket\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Project\"),\n\t\t\t\t\tValue: pulumi.String(\"ProjectB\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleConnection = new aws_native.codestarconnections.Connection(\"sampleConnection\", {\n    connectionName: \"MyConnection\",\n    providerType: \"Bitbucket\",\n    tags: [{\n        key: \"Project\",\n        value: \"ProjectB\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_connection = aws_native.codestarconnections.Connection(\"sampleConnection\",\n    connection_name=\"MyConnection\",\n    provider_type=\"Bitbucket\",\n    tags=[{\n        \"key\": \"Project\",\n        \"value\": \"ProjectB\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleConnection = new AwsNative.CodeStarConnections.Connection(\"sampleConnection\", new()\n    {\n        ConnectionName = \"MyConnection\",\n        ProviderType = \"GitHubEnterpriseServer\",\n        HostArn = \"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Project\",\n                Value = \"ProjectB\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codestarconnections\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codestarconnections.NewConnection(ctx, \"sampleConnection\", \u0026codestarconnections.ConnectionArgs{\n\t\t\tConnectionName: pulumi.String(\"MyConnection\"),\n\t\t\tProviderType:   pulumi.String(\"GitHubEnterpriseServer\"),\n\t\t\tHostArn:        pulumi.String(\"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Project\"),\n\t\t\t\t\tValue: pulumi.String(\"ProjectB\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleConnection = new aws_native.codestarconnections.Connection(\"sampleConnection\", {\n    connectionName: \"MyConnection\",\n    providerType: \"GitHubEnterpriseServer\",\n    hostArn: \"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\",\n    tags: [{\n        key: \"Project\",\n        value: \"ProjectB\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_connection = aws_native.codestarconnections.Connection(\"sampleConnection\",\n    connection_name=\"MyConnection\",\n    provider_type=\"GitHubEnterpriseServer\",\n    host_arn=\"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\",\n    tags=[{\n        \"key\": \"Project\",\n        \"value\": \"ProjectB\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleConnection = new AwsNative.CodeStarConnections.Connection(\"sampleConnection\", new()\n    {\n        ConnectionName = \"MyConnection\",\n        ProviderType = \"GitHubEnterpriseServer\",\n        HostArn = \"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Project\",\n                Value = \"ProjectB\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/codestarconnections\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := codestarconnections.NewConnection(ctx, \"sampleConnection\", \u0026codestarconnections.ConnectionArgs{\n\t\t\tConnectionName: pulumi.String(\"MyConnection\"),\n\t\t\tProviderType:   pulumi.String(\"GitHubEnterpriseServer\"),\n\t\t\tHostArn:        pulumi.String(\"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Project\"),\n\t\t\t\t\tValue: pulumi.String(\"ProjectB\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleConnection = new aws_native.codestarconnections.Connection(\"sampleConnection\", {\n    connectionName: \"MyConnection\",\n    providerType: \"GitHubEnterpriseServer\",\n    hostArn: \"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\",\n    tags: [{\n        key: \"Project\",\n        value: \"ProjectB\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_connection = aws_native.codestarconnections.Connection(\"sampleConnection\",\n    connection_name=\"MyConnection\",\n    provider_type=\"GitHubEnterpriseServer\",\n    host_arn=\"arn:aws:codestar-connections:us-west-2:123456789123:host/abc123-example\",\n    tags=[{\n        \"key\": \"Project\",\n        \"value\": \"ProjectB\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the  connection. The ARN is used as the connection reference when the connection is shared between AWS services."},"connectionName":{"type":"string","description":"The name of the connection. Connection names must be unique in an AWS user account.","replaceOnChanges":true},"connectionStatus":{"type":"string","description":"The current status of the connection."},"hostArn":{"type":"string","description":"The host arn configured to represent the infrastructure where your third-party provider is installed. You must specify either a ProviderType or a HostArn.","replaceOnChanges":true},"ownerAccountId":{"type":"string","description":"The name of the external provider where your third-party code repository is configured. For Bitbucket, this is the account ID of the owner of the Bitbucket repository."},"providerType":{"type":"string","description":"The name of the external provider where your third-party code repository is configured. You must specify either a ProviderType or a HostArn.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to a connection."}},"type":"object","required":["connectionArn","connectionName","connectionStatus","ownerAccountId"],"inputProperties":{"connectionName":{"type":"string","description":"The name of the connection. Connection names must be unique in an AWS user account."},"hostArn":{"type":"string","description":"The host arn configured to represent the infrastructure where your third-party provider is installed. You must specify either a ProviderType or a HostArn."},"providerType":{"type":"string","description":"The name of the external provider where your third-party code repository is configured. You must specify either a ProviderType or a HostArn."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to a connection."}}},"aws-native:codestarconnections:RepositoryLink":{"description":"Schema for AWS::CodeStarConnections::RepositoryLink resource which is used to aggregate repository metadata relevant to synchronizing source provider content to AWS Resources.","properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CodeStarConnection. The ARN is used as the connection reference when the connection is shared between AWS services."},"encryptionKeyArn":{"type":"string","description":"The ARN of the KMS key that the customer can optionally specify to use to encrypt RepositoryLink properties. If not specified, a default key will be used."},"ownerId":{"type":"string","description":"the ID of the entity that owns the repository.","replaceOnChanges":true},"providerType":{"$ref":"#/types/aws-native:codestarconnections:RepositoryLinkProviderType","description":"The name of the external provider where your third-party code repository is configured."},"repositoryLinkArn":{"type":"string","description":"A unique Amazon Resource Name (ARN) to designate the repository link."},"repositoryLinkId":{"type":"string","description":"A UUID that uniquely identifies the RepositoryLink."},"repositoryName":{"type":"string","description":"The repository for which the link is being created.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to a RepositoryLink."}},"type":"object","required":["connectionArn","ownerId","providerType","repositoryLinkArn","repositoryLinkId","repositoryName"],"inputProperties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CodeStarConnection. The ARN is used as the connection reference when the connection is shared between AWS services."},"encryptionKeyArn":{"type":"string","description":"The ARN of the KMS key that the customer can optionally specify to use to encrypt RepositoryLink properties. If not specified, a default key will be used."},"ownerId":{"type":"string","description":"the ID of the entity that owns the repository."},"repositoryName":{"type":"string","description":"The repository for which the link is being created."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to a RepositoryLink."}},"requiredInputs":["connectionArn","ownerId","repositoryName"]},"aws-native:codestarconnections:SyncConfiguration":{"description":"Schema for AWS::CodeStarConnections::SyncConfiguration resource which is used to enables an AWS resource to be synchronized from a source-provider.","properties":{"branch":{"type":"string","description":"The name of the branch of the repository from which resources are to be synchronized,"},"configFile":{"type":"string","description":"The source provider repository path of the sync configuration file of the respective SyncType."},"ownerId":{"type":"string","description":"the ID of the entity that owns the repository."},"providerType":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationProviderType","description":"The name of the external provider where your third-party code repository is configured."},"publishDeploymentStatus":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationPublishDeploymentStatus","description":"Whether to enable or disable publishing of deployment status to source providers."},"repositoryLinkId":{"type":"string","description":"A UUID that uniquely identifies the RepositoryLink that the SyncConfig is associated with."},"repositoryName":{"type":"string","description":"The name of the repository that is being synced to."},"resourceName":{"type":"string","description":"The name of the resource that is being synchronized to the repository.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The IAM Role that allows AWS to update CloudFormation stacks based on content in the specified repository."},"syncType":{"type":"string","description":"The type of resource synchronization service that is to be configured, for example, CFN_STACK_SYNC.","replaceOnChanges":true},"triggerResourceUpdateOn":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationTriggerResourceUpdateOn","description":"When to trigger Git sync to begin the stack update."}},"type":"object","required":["branch","configFile","ownerId","providerType","repositoryLinkId","repositoryName","resourceName","roleArn","syncType"],"inputProperties":{"branch":{"type":"string","description":"The name of the branch of the repository from which resources are to be synchronized,"},"configFile":{"type":"string","description":"The source provider repository path of the sync configuration file of the respective SyncType."},"publishDeploymentStatus":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationPublishDeploymentStatus","description":"Whether to enable or disable publishing of deployment status to source providers."},"repositoryLinkId":{"type":"string","description":"A UUID that uniquely identifies the RepositoryLink that the SyncConfig is associated with."},"resourceName":{"type":"string","description":"The name of the resource that is being synchronized to the repository."},"roleArn":{"type":"string","description":"The IAM Role that allows AWS to update CloudFormation stacks based on content in the specified repository."},"syncType":{"type":"string","description":"The type of resource synchronization service that is to be configured, for example, CFN_STACK_SYNC."},"triggerResourceUpdateOn":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationTriggerResourceUpdateOn","description":"When to trigger Git sync to begin the stack update."}},"requiredInputs":["branch","configFile","repositoryLinkId","resourceName","roleArn","syncType"]},"aws-native:codestarnotifications:NotificationRule":{"description":"Resource Type definition for AWS::CodeStarNotifications::NotificationRule","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the notification rule."},"createdBy":{"type":"string","description":"The name or email alias of the person who created the notification rule."},"detailType":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleDetailType","description":"The level of detail to include in the notifications for this resource. `BASIC` will include only the contents of the event as it would appear in Amazon CloudWatch. `FULL` will include any supplemental information provided by AWS CodeStar Notifications and/or the service for the resource for which the notification is created."},"eventTypeId":{"type":"string","description":"The event type associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* ."},"eventTypeIds":{"type":"array","items":{"type":"string"},"description":"A list of event types associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* ."},"name":{"type":"string","description":"The name for the notification rule. Notification rule names must be unique in your AWS account ."},"resource":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource to associate with the notification rule. Supported resources include pipelines in AWS CodePipeline , repositories in AWS CodeCommit , and build projects in AWS CodeBuild .","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleStatus","description":"The status of the notification rule. The default value is `ENABLED` . If the status is set to `DISABLED` , notifications aren't sent for the notification rule."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of tags to apply to this notification rule. Key names cannot start with \" `aws` \"."},"targetAddress":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon  topic or  client."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleTarget"},"description":"A list of Amazon Resource Names (ARNs) of Amazon  topics and  clients to associate with the notification rule."}},"type":"object","required":["arn","detailType","eventTypeIds","name","resource","targets"],"inputProperties":{"createdBy":{"type":"string","description":"The name or email alias of the person who created the notification rule."},"detailType":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleDetailType","description":"The level of detail to include in the notifications for this resource. `BASIC` will include only the contents of the event as it would appear in Amazon CloudWatch. `FULL` will include any supplemental information provided by AWS CodeStar Notifications and/or the service for the resource for which the notification is created."},"eventTypeId":{"type":"string","description":"The event type associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* ."},"eventTypeIds":{"type":"array","items":{"type":"string"},"description":"A list of event types associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* ."},"name":{"type":"string","description":"The name for the notification rule. Notification rule names must be unique in your AWS account ."},"resource":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource to associate with the notification rule. Supported resources include pipelines in AWS CodePipeline , repositories in AWS CodeCommit , and build projects in AWS CodeBuild ."},"status":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleStatus","description":"The status of the notification rule. The default value is `ENABLED` . If the status is set to `DISABLED` , notifications aren't sent for the notification rule."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of tags to apply to this notification rule. Key names cannot start with \" `aws` \"."},"targetAddress":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon  topic or  client."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleTarget"},"description":"A list of Amazon Resource Names (ARNs) of Amazon  topics and  clients to associate with the notification rule."}},"requiredInputs":["detailType","eventTypeIds","resource","targets"]},"aws-native:cognito:IdentityPool":{"description":"Resource Type definition for AWS::Cognito::IdentityPool","properties":{"allowClassicFlow":{"type":"boolean","description":"Enables the Basic (Classic) authentication flow."},"allowUnauthenticatedIdentities":{"type":"boolean","description":"Specifies whether the identity pool supports unauthenticated logins."},"awsId":{"type":"string"},"cognitoEvents":{"$ref":"pulumi.json#/Any","description":"The events to configure.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property."},"cognitoIdentityProviders":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:IdentityPoolCognitoIdentityProvider"},"description":"The Amazon Cognito user pools and their client IDs."},"cognitoStreams":{"$ref":"#/types/aws-native:cognito:IdentityPoolCognitoStreams","description":"Configuration options for configuring Amazon Cognito streams."},"developerProviderName":{"type":"string","description":"The \"domain\" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).\n\n*Minimum length* : 1\n\n*Maximum length* : 100"},"identityPoolName":{"type":"string","description":"The name of your Amazon Cognito identity pool.\n\n*Minimum length* : 1\n\n*Maximum length* : 128\n\n*Pattern* : `[\\w\\s+=,.@-]+`"},"identityPoolTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"name":{"type":"string","description":"The name of the Amazon Cognito identity pool, returned as a string."},"openIdConnectProviderArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the OpenID connect providers."},"pushSync":{"$ref":"#/types/aws-native:cognito:IdentityPoolPushSync","description":"The configuration options to be applied to the identity pool."},"samlProviderArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers."},"supportedLoginProviders":{"$ref":"pulumi.json#/Any","description":"Key-value pairs that map provider names to provider app IDs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property."}},"type":"object","required":["allowUnauthenticatedIdentities","awsId","name"],"inputProperties":{"allowClassicFlow":{"type":"boolean","description":"Enables the Basic (Classic) authentication flow."},"allowUnauthenticatedIdentities":{"type":"boolean","description":"Specifies whether the identity pool supports unauthenticated logins."},"cognitoEvents":{"$ref":"pulumi.json#/Any","description":"The events to configure.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property."},"cognitoIdentityProviders":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:IdentityPoolCognitoIdentityProvider"},"description":"The Amazon Cognito user pools and their client IDs."},"cognitoStreams":{"$ref":"#/types/aws-native:cognito:IdentityPoolCognitoStreams","description":"Configuration options for configuring Amazon Cognito streams."},"developerProviderName":{"type":"string","description":"The \"domain\" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).\n\n*Minimum length* : 1\n\n*Maximum length* : 100"},"identityPoolName":{"type":"string","description":"The name of your Amazon Cognito identity pool.\n\n*Minimum length* : 1\n\n*Maximum length* : 128\n\n*Pattern* : `[\\w\\s+=,.@-]+`"},"identityPoolTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"openIdConnectProviderArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the OpenID connect providers."},"pushSync":{"$ref":"#/types/aws-native:cognito:IdentityPoolPushSync","description":"The configuration options to be applied to the identity pool."},"samlProviderArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers."},"supportedLoginProviders":{"$ref":"pulumi.json#/Any","description":"Key-value pairs that map provider names to provider app IDs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property."}},"requiredInputs":["allowUnauthenticatedIdentities"]},"aws-native:cognito:IdentityPoolPrincipalTag":{"description":"Resource Type definition for AWS::Cognito::IdentityPoolPrincipalTag","properties":{"identityPoolId":{"type":"string","description":"The identity pool that you want to associate with this principal tag map.","replaceOnChanges":true},"identityProviderName":{"type":"string","description":"The identity pool identity provider (IdP) that you want to associate with this principal tag map.","replaceOnChanges":true},"principalTags":{"$ref":"pulumi.json#/Any","description":"A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property."},"useDefaults":{"type":"boolean","description":"Use a default set of mappings between claims and tags for this provider, instead of a custom map."}},"type":"object","required":["identityPoolId","identityProviderName"],"inputProperties":{"identityPoolId":{"type":"string","description":"The identity pool that you want to associate with this principal tag map."},"identityProviderName":{"type":"string","description":"The identity pool identity provider (IdP) that you want to associate with this principal tag map."},"principalTags":{"$ref":"pulumi.json#/Any","description":"A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property."},"useDefaults":{"type":"boolean","description":"Use a default set of mappings between claims and tags for this provider, instead of a custom map."}},"requiredInputs":["identityPoolId","identityProviderName"]},"aws-native:cognito:IdentityPoolRoleAttachment":{"description":"Resource Type definition for AWS::Cognito::IdentityPoolRoleAttachment","properties":{"awsId":{"type":"string","description":"The resource ID."},"identityPoolId":{"type":"string","description":"An identity pool ID in the format `REGION:GUID` .","replaceOnChanges":true},"roleMappings":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:cognito:IdentityPoolRoleAttachmentRoleMapping"},"description":"How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .\n\nIf the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.\n\nFor more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) ."},"roles":{"type":"object","additionalProperties":{"type":"string"},"description":"The map of the roles associated with this pool. For a given role, the key is either \"authenticated\" or \"unauthenticated\". The value is the role ARN."}},"type":"object","required":["awsId","identityPoolId"],"inputProperties":{"identityPoolId":{"type":"string","description":"An identity pool ID in the format `REGION:GUID` ."},"roleMappings":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:cognito:IdentityPoolRoleAttachmentRoleMapping"},"description":"How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .\n\nIf the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.\n\nFor more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) ."},"roles":{"type":"object","additionalProperties":{"type":"string"},"description":"The map of the roles associated with this pool. For a given role, the key is either \"authenticated\" or \"unauthenticated\". The value is the role ARN."}},"requiredInputs":["identityPoolId"]},"aws-native:cognito:LogDeliveryConfiguration":{"description":"Resource Type definition for AWS::Cognito::LogDeliveryConfiguration","properties":{"awsId":{"type":"string","description":"A user pool ID, for example `us-east-1_EXAMPLE` ."},"logConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:LogDeliveryConfigurationLogConfiguration"},"description":"A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs."},"userPoolId":{"type":"string","description":"The ID of the user pool where you configured logging.","replaceOnChanges":true}},"type":"object","required":["awsId","userPoolId"],"inputProperties":{"logConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:LogDeliveryConfigurationLogConfiguration"},"description":"A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs."},"userPoolId":{"type":"string","description":"The ID of the user pool where you configured logging."}},"requiredInputs":["userPoolId"]},"aws-native:cognito:ManagedLoginBranding":{"description":"Resource Type definition for AWS::Cognito::ManagedLoginBranding","properties":{"assets":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:ManagedLoginBrandingAssetType"},"description":"An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode."},"clientId":{"type":"string","description":"The app client that you want to assign the branding style to. Each style is linked to an app client until you delete it.","replaceOnChanges":true},"managedLoginBrandingId":{"type":"string","description":"The ID of the managed login branding style."},"returnMergedResources":{"type":"boolean","description":"When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."},"settings":{"$ref":"pulumi.json#/Any","description":"A JSON file, encoded as a `Document` type, with the the settings that you want to apply to your style.\n\nThe following components are not currently implemented and reserved for future use:\n\n- `signUp`\n- `instructions`\n- `sessionTimerDisplay`\n- `languageSelector` (for localization, see [Managed login localization)](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html#managed-login-localization)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::ManagedLoginBranding` for more information about the expected schema for this property."},"useCognitoProvidedValues":{"type":"boolean","description":"When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."},"userPoolId":{"type":"string","description":"The user pool where the branding style is assigned.","replaceOnChanges":true}},"type":"object","required":["managedLoginBrandingId","userPoolId"],"inputProperties":{"assets":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:ManagedLoginBrandingAssetType"},"description":"An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode."},"clientId":{"type":"string","description":"The app client that you want to assign the branding style to. Each style is linked to an app client until you delete it."},"returnMergedResources":{"type":"boolean","description":"When `true` , returns values for branding options that are unchanged from Amazon Cognito defaults. When `false` or when you omit this parameter, returns only values that you customized in your branding style."},"settings":{"$ref":"pulumi.json#/Any","description":"A JSON file, encoded as a `Document` type, with the the settings that you want to apply to your style.\n\nThe following components are not currently implemented and reserved for future use:\n\n- `signUp`\n- `instructions`\n- `sessionTimerDisplay`\n- `languageSelector` (for localization, see [Managed login localization)](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html#managed-login-localization)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::ManagedLoginBranding` for more information about the expected schema for this property."},"useCognitoProvidedValues":{"type":"boolean","description":"When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request."},"userPoolId":{"type":"string","description":"The user pool where the branding style is assigned."}},"requiredInputs":["userPoolId"]},"aws-native:cognito:Terms":{"description":"Resource Type definition for AWS::Cognito::Terms","properties":{"clientId":{"type":"string","description":"The ID of the app client that the terms documents are assigned to.","replaceOnChanges":true},"enforcement":{"$ref":"#/types/aws-native:cognito:TermsEnforcementType","description":"This parameter is reserved for future use and currently accepts one value."},"links":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of URLs to languages. For each localized language that will view the requested `TermsName` , assign a URL. A selection of `cognito:default` displays for all languages that don't have a language-specific URL.\n\nFor example, `\"cognito:default\": \"https://terms.example.com\", \"cognito:spanish\": \"https://terms.example.com/es\"` ."},"termsId":{"type":"string","description":"The ID of the terms documents."},"termsName":{"type":"string","description":"The type and friendly name of the terms documents."},"termsSource":{"$ref":"#/types/aws-native:cognito:TermsSourceType","description":"This parameter is reserved for future use and currently accepts one value."},"userPoolId":{"type":"string","description":"The ID of the user pool that contains the terms documents.","replaceOnChanges":true}},"type":"object","required":["enforcement","links","termsId","termsName","termsSource","userPoolId"],"inputProperties":{"clientId":{"type":"string","description":"The ID of the app client that the terms documents are assigned to."},"enforcement":{"$ref":"#/types/aws-native:cognito:TermsEnforcementType","description":"This parameter is reserved for future use and currently accepts one value."},"links":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of URLs to languages. For each localized language that will view the requested `TermsName` , assign a URL. A selection of `cognito:default` displays for all languages that don't have a language-specific URL.\n\nFor example, `\"cognito:default\": \"https://terms.example.com\", \"cognito:spanish\": \"https://terms.example.com/es\"` ."},"termsName":{"type":"string","description":"The type and friendly name of the terms documents."},"termsSource":{"$ref":"#/types/aws-native:cognito:TermsSourceType","description":"This parameter is reserved for future use and currently accepts one value."},"userPoolId":{"type":"string","description":"The ID of the user pool that contains the terms documents."}},"requiredInputs":["enforcement","links","termsSource","userPoolId"]},"aws-native:cognito:UserPool":{"description":"Definition of AWS::Cognito::UserPool Resource Type","properties":{"accountRecoverySetting":{"$ref":"#/types/aws-native:cognito:UserPoolAccountRecoverySetting","description":"The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email."},"adminCreateUserConfig":{"$ref":"#/types/aws-native:cognito:UserPoolAdminCreateUserConfig","description":"The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire."},"aliasAttributes":{"type":"array","items":{"type":"string"},"description":"Attributes supported as an alias for this user pool. For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the user pool, such as `arn:aws:cognito-idp:us-east-1:123412341234:userpool/us-east-1_123412341` ."},"autoVerifiedAttributes":{"type":"array","items":{"type":"string"},"description":"The attributes that you want your user pool to automatically verify. For more information, see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."},"deletionProtection":{"type":"string","description":"When active, `DeletionProtection` prevents accidental deletion of your user\npool. Before you can delete a user pool that you have protected against deletion, you\nmust deactivate this feature.\n\nWhen you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request."},"deviceConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolDeviceConfiguration","description":"The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more information, see [Working with devices](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) ."},"emailAuthenticationMessage":{"type":"string"},"emailAuthenticationSubject":{"type":"string"},"emailConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolEmailConfiguration","description":"The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool."},"emailVerificationMessage":{"type":"string","description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) ."},"emailVerificationSubject":{"type":"string","description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) ."},"enabledMfas":{"type":"array","items":{"type":"string"},"description":"Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:\n\n- `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` .\n- `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool.\n- `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .\n\nAllowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`"},"lambdaConfig":{"$ref":"#/types/aws-native:cognito:UserPoolLambdaConfig","description":"A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them."},"mfaConfiguration":{"type":"string","description":"Displays the state of multi-factor authentication (MFA) as on, off, or optional. When `ON` , all users must set up MFA before they can sign in. When `OPTIONAL` , your application must make a client-side determination of whether a user wants to register an MFA device. For user pools with adaptive authentication with threat protection, choose `OPTIONAL` .\n\nWhen `MfaConfiguration` is `OPTIONAL` , managed login doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in API responses and in managed login for users who have chosen and configured a preferred MFA factor."},"policies":{"$ref":"#/types/aws-native:cognito:UserPoolPolicies","description":"A list of user pool policies. Contains the policy that sets password-complexity requirements."},"providerName":{"type":"string","description":"A friendly name for the IdP."},"providerUrl":{"type":"string","description":"The URL of the provider of the Amazon Cognito user pool, specified as a `String` ."},"schema":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolSchemaAttribute"},"description":"An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."},"smsAuthenticationMessage":{"type":"string","description":"The contents of the SMS authentication message."},"smsConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolSmsConfiguration","description":"The settings for your Amazon Cognito user pool to send SMS messages with Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."},"smsVerificationMessage":{"type":"string","description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) ."},"userAttributeUpdateSettings":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeUpdateSettings","description":"The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` ,\na user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For\nmore information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) ."},"userPoolAddOns":{"$ref":"#/types/aws-native:cognito:UserPoolAddOns","description":"Contains settings for activation of threat protection, including the operating mode and additional authentication types. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to potentially unwanted traffic to your user pool, set to `ENFORCED` .\n\nFor more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . To activate this setting, your user pool must be on the [Plus tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-plus.html) ."},"userPoolId":{"type":"string","description":"The ID of the user pool."},"userPoolName":{"type":"string","description":"A friendly name for your user pool."},"userPoolTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria."},"userPoolTier":{"$ref":"#/types/aws-native:cognito:UserPoolTier","description":"The user pool [feature plan](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-sign-in-feature-plans.html) , or tier. This parameter determines the eligibility of the user pool for features like managed login, access-token customization, and threat protection. Defaults to `ESSENTIALS` ."},"usernameAttributes":{"type":"array","items":{"type":"string"},"description":"Specifies whether a user can use an email address or phone number as a username when they sign up."},"usernameConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolUsernameConfiguration","description":"Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."},"verificationMessageTemplate":{"$ref":"#/types/aws-native:cognito:UserPoolVerificationMessageTemplate","description":"The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."},"webAuthnRelyingPartyId":{"type":"string","description":"Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."},"webAuthnUserVerification":{"type":"string","description":"When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."}},"type":"object","required":["arn","providerName","providerUrl","userPoolId"],"inputProperties":{"accountRecoverySetting":{"$ref":"#/types/aws-native:cognito:UserPoolAccountRecoverySetting","description":"The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email."},"adminCreateUserConfig":{"$ref":"#/types/aws-native:cognito:UserPoolAdminCreateUserConfig","description":"The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire."},"aliasAttributes":{"type":"array","items":{"type":"string"},"description":"Attributes supported as an alias for this user pool. For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."},"autoVerifiedAttributes":{"type":"array","items":{"type":"string"},"description":"The attributes that you want your user pool to automatically verify. For more information, see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) ."},"deletionProtection":{"type":"string","description":"When active, `DeletionProtection` prevents accidental deletion of your user\npool. Before you can delete a user pool that you have protected against deletion, you\nmust deactivate this feature.\n\nWhen you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request."},"deviceConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolDeviceConfiguration","description":"The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more information, see [Working with devices](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) ."},"emailAuthenticationMessage":{"type":"string"},"emailAuthenticationSubject":{"type":"string"},"emailConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolEmailConfiguration","description":"The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool."},"emailVerificationMessage":{"type":"string","description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) ."},"emailVerificationSubject":{"type":"string","description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) ."},"enabledMfas":{"type":"array","items":{"type":"string"},"description":"Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:\n\n- `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` .\n- `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool.\n- `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .\n\nAllowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`"},"lambdaConfig":{"$ref":"#/types/aws-native:cognito:UserPoolLambdaConfig","description":"A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them."},"mfaConfiguration":{"type":"string","description":"Displays the state of multi-factor authentication (MFA) as on, off, or optional. When `ON` , all users must set up MFA before they can sign in. When `OPTIONAL` , your application must make a client-side determination of whether a user wants to register an MFA device. For user pools with adaptive authentication with threat protection, choose `OPTIONAL` .\n\nWhen `MfaConfiguration` is `OPTIONAL` , managed login doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in API responses and in managed login for users who have chosen and configured a preferred MFA factor."},"policies":{"$ref":"#/types/aws-native:cognito:UserPoolPolicies","description":"A list of user pool policies. Contains the policy that sets password-complexity requirements."},"schema":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolSchemaAttribute"},"description":"An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) ."},"smsAuthenticationMessage":{"type":"string","description":"The contents of the SMS authentication message."},"smsConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolSmsConfiguration","description":"The settings for your Amazon Cognito user pool to send SMS messages with Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."},"smsVerificationMessage":{"type":"string","description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) ."},"userAttributeUpdateSettings":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeUpdateSettings","description":"The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` ,\na user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For\nmore information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) ."},"userPoolAddOns":{"$ref":"#/types/aws-native:cognito:UserPoolAddOns","description":"Contains settings for activation of threat protection, including the operating mode and additional authentication types. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to potentially unwanted traffic to your user pool, set to `ENFORCED` .\n\nFor more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . To activate this setting, your user pool must be on the [Plus tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-plus.html) ."},"userPoolName":{"type":"string","description":"A friendly name for your user pool."},"userPoolTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria."},"userPoolTier":{"$ref":"#/types/aws-native:cognito:UserPoolTier","description":"The user pool [feature plan](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-sign-in-feature-plans.html) , or tier. This parameter determines the eligibility of the user pool for features like managed login, access-token customization, and threat protection. Defaults to `ESSENTIALS` ."},"usernameAttributes":{"type":"array","items":{"type":"string"},"description":"Specifies whether a user can use an email address or phone number as a username when they sign up."},"usernameConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolUsernameConfiguration","description":"Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."},"verificationMessageTemplate":{"$ref":"#/types/aws-native:cognito:UserPoolVerificationMessageTemplate","description":"The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."},"webAuthnRelyingPartyId":{"type":"string","description":"Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI."},"webAuthnUserVerification":{"type":"string","description":"When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it."}}},"aws-native:cognito:UserPoolClient":{"description":"Resource Type definition for AWS::Cognito::UserPoolClient","properties":{"accessTokenValidity":{"type":"integer","description":"The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with\ntheir access token for 10 hours.\n\nThe default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your access\ntokens are valid for one hour."},"allowedOAuthFlows":{"type":"array","items":{"type":"string"},"description":"The OAuth grant types that you want your app client to generate for clients in managed login authentication. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.\n\n- **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint.\n- **implicit** - Issue the access token, and the ID token when scopes like `openid` and `profile` are requested, directly to your user.\n- **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user, authorized by a combination of the client ID and client secret."},"allowedOAuthFlowsUserPoolClient":{"type":"boolean","description":"Set to `true` to use OAuth 2.0 authorization server features in your app client.\n\nThis parameter must have a value of `true` before you can configure the following features in your app client.\n\n- `CallBackURLs` : Callback URLs.\n- `LogoutURLs` : Sign-out redirect URLs.\n- `AllowedOAuthScopes` : OAuth 2.0 scopes.\n- `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.\n\nTo use authorization server features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` . When `false` , only SDK-based API sign-in is permitted."},"allowedOAuthScopes":{"type":"array","items":{"type":"string"},"description":"The OAuth, OpenID Connect (OIDC), and custom scopes that you want to permit your app client to authorize access with. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Scope values include `phone` , `email` , `openid` , and `profile` . The `aws.cognito.signin.user.admin` scope authorizes user self-service operations. Custom scopes with resource servers authorize access to external APIs."},"analyticsConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration","description":"The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."},"authSessionValidity":{"type":"integer","description":"Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires."},"callbackUrls":{"type":"array","items":{"type":"string"},"description":"A list of allowed redirect, or callback, URLs for managed login authentication. These URLs are the paths where you want to send your users' browsers after they complete authentication with managed login or a third-party IdP. Typically, callback URLs are the home of an application that uses OAuth or OIDC libraries to process authentication outcomes.\n\nA redirect URI must meet the following requirements:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for callback URLs to `http://localhost` , `http://127.0.0.1` and `http://[::1]` . These callback URLs are for testing purposes only. You can specify custom TCP ports for your callback URLs.\n\nApp callback URLs such as `myapp://example` are also supported."},"clientId":{"type":"string","description":"The ID of the app client, for example `1example23456789` ."},"clientName":{"type":"string","description":"A friendly name for the app client that you want to create."},"clientSecret":{"type":"string"},"defaultRedirectUri":{"type":"string","description":"The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."},"enablePropagateAdditionalUserContextData":{"type":"boolean","description":"When `true` , your application can include additional `UserContextData` in authentication requests. This data includes the IP address, and contributes to analysis by threat protection features. For more information about propagation of user context data, see [Adding session data to API requests](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint) . If you don’t include this parameter, you can't send the source IP address to Amazon Cognito threat protection features. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret."},"enableTokenRevocation":{"type":"boolean","description":"Activates or deactivates token revocation.\n\nIf you don't include this parameter, token revocation is automatically activated for the new user pool client."},"explicitAuthFlows":{"type":"array","items":{"type":"string"},"description":"The [authentication flows](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow-methods.html) that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.\n\n\u003e If you don't specify a value for `ExplicitAuthFlows` , your app client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` . \n\nThe values for authentication flow options include the following.\n\n- `ALLOW_USER_AUTH` : Enable selection-based sign-in with `USER_AUTH` . This setting covers username-password, secure remote password (SRP), passwordless, and passkey authentication. This authentiation flow can do username-password and SRP authentication without other `ExplicitAuthFlows` permitting them. For example users can complete an SRP challenge through `USER_AUTH` without the flow `USER_SRP_AUTH` being active for the app client. This flow doesn't include `CUSTOM_AUTH` .\n\nTo activate this setting, your user pool must be in the [Essentials tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html) or higher.\n- `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password.\n- `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication.\n- `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords.\n- `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication.\n- `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.\n\nIn some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` ,\nlike `ALLOW_USER_SRP_AUTH` ."},"generateSecret":{"type":"boolean","description":"When `true` , generates a client secret for the app client. Client secrets are used with server-side and machine-to-machine applications. Client secrets are automatically generated; you can't specify a secret value. For more information, see [App client types](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#user-pool-settings-client-app-client-types) .","replaceOnChanges":true},"idTokenValidity":{"type":"integer","description":"The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.\n\nThe default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your ID\ntokens are valid for one hour."},"logoutUrls":{"type":"array","items":{"type":"string"},"description":"A list of allowed logout URLs for managed login authentication. When you pass `logout_uri` and `client_id` parameters to `/logout` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of `logout_uri` . A typical use of these URLs is when a user selects \"Sign out\" and you redirect them to your public homepage. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."},"name":{"type":"string"},"preventUserExistenceErrors":{"type":"string","description":"Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.\n\nValid values include:\n\n- `ENABLED` - This prevents user existence-related errors.\n- `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.\n\nDefaults to `LEGACY` when you don't provide a value."},"readAttributes":{"type":"array","items":{"type":"string"},"description":"The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information.\n\nWhen you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes."},"refreshTokenRotation":{"$ref":"#/types/aws-native:cognito:UserPoolClientRefreshTokenRotation","description":"The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens."},"refreshTokenValidity":{"type":"integer","description":"The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session\nand retrieve new access and ID tokens for 10 days.\n\nThe default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your refresh\ntokens are valid for 30 days."},"supportedIdentityProviders":{"type":"array","items":{"type":"string"},"description":"A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis parameter sets the IdPs that [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) will display on the login page for your app client. The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."},"tokenValidityUnits":{"$ref":"#/types/aws-native:cognito:UserPoolClientTokenValidityUnits","description":"The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create an app client.","replaceOnChanges":true},"writeAttributes":{"type":"array","items":{"type":"string"},"description":"The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list.\n\nWhen you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.\n\nIf your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) ."}},"type":"object","required":["clientId","clientSecret","name","userPoolId"],"inputProperties":{"accessTokenValidity":{"type":"integer","description":"The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with\ntheir access token for 10 hours.\n\nThe default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your access\ntokens are valid for one hour."},"allowedOAuthFlows":{"type":"array","items":{"type":"string"},"description":"The OAuth grant types that you want your app client to generate for clients in managed login authentication. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.\n\n- **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint.\n- **implicit** - Issue the access token, and the ID token when scopes like `openid` and `profile` are requested, directly to your user.\n- **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user, authorized by a combination of the client ID and client secret."},"allowedOAuthFlowsUserPoolClient":{"type":"boolean","description":"Set to `true` to use OAuth 2.0 authorization server features in your app client.\n\nThis parameter must have a value of `true` before you can configure the following features in your app client.\n\n- `CallBackURLs` : Callback URLs.\n- `LogoutURLs` : Sign-out redirect URLs.\n- `AllowedOAuthScopes` : OAuth 2.0 scopes.\n- `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.\n\nTo use authorization server features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` . When `false` , only SDK-based API sign-in is permitted."},"allowedOAuthScopes":{"type":"array","items":{"type":"string"},"description":"The OAuth, OpenID Connect (OIDC), and custom scopes that you want to permit your app client to authorize access with. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Scope values include `phone` , `email` , `openid` , and `profile` . The `aws.cognito.signin.user.admin` scope authorizes user self-service operations. Custom scopes with resource servers authorize access to external APIs."},"analyticsConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration","description":"The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."},"authSessionValidity":{"type":"integer","description":"Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires."},"callbackUrls":{"type":"array","items":{"type":"string"},"description":"A list of allowed redirect, or callback, URLs for managed login authentication. These URLs are the paths where you want to send your users' browsers after they complete authentication with managed login or a third-party IdP. Typically, callback URLs are the home of an application that uses OAuth or OIDC libraries to process authentication outcomes.\n\nA redirect URI must meet the following requirements:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for callback URLs to `http://localhost` , `http://127.0.0.1` and `http://[::1]` . These callback URLs are for testing purposes only. You can specify custom TCP ports for your callback URLs.\n\nApp callback URLs such as `myapp://example` are also supported."},"clientName":{"type":"string","description":"A friendly name for the app client that you want to create."},"defaultRedirectUri":{"type":"string","description":"The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list."},"enablePropagateAdditionalUserContextData":{"type":"boolean","description":"When `true` , your application can include additional `UserContextData` in authentication requests. This data includes the IP address, and contributes to analysis by threat protection features. For more information about propagation of user context data, see [Adding session data to API requests](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint) . If you don’t include this parameter, you can't send the source IP address to Amazon Cognito threat protection features. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret."},"enableTokenRevocation":{"type":"boolean","description":"Activates or deactivates token revocation.\n\nIf you don't include this parameter, token revocation is automatically activated for the new user pool client."},"explicitAuthFlows":{"type":"array","items":{"type":"string"},"description":"The [authentication flows](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow-methods.html) that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.\n\n\u003e If you don't specify a value for `ExplicitAuthFlows` , your app client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` . \n\nThe values for authentication flow options include the following.\n\n- `ALLOW_USER_AUTH` : Enable selection-based sign-in with `USER_AUTH` . This setting covers username-password, secure remote password (SRP), passwordless, and passkey authentication. This authentiation flow can do username-password and SRP authentication without other `ExplicitAuthFlows` permitting them. For example users can complete an SRP challenge through `USER_AUTH` without the flow `USER_SRP_AUTH` being active for the app client. This flow doesn't include `CUSTOM_AUTH` .\n\nTo activate this setting, your user pool must be in the [Essentials tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html) or higher.\n- `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password.\n- `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication.\n- `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords.\n- `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication.\n- `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.\n\nIn some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` ,\nlike `ALLOW_USER_SRP_AUTH` ."},"generateSecret":{"type":"boolean","description":"When `true` , generates a client secret for the app client. Client secrets are used with server-side and machine-to-machine applications. Client secrets are automatically generated; you can't specify a secret value. For more information, see [App client types](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#user-pool-settings-client-app-client-types) ."},"idTokenValidity":{"type":"integer","description":"The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.\n\nThe default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your ID\ntokens are valid for one hour."},"logoutUrls":{"type":"array","items":{"type":"string"},"description":"A list of allowed logout URLs for managed login authentication. When you pass `logout_uri` and `client_id` parameters to `/logout` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of `logout_uri` . A typical use of these URLs is when a user selects \"Sign out\" and you redirect them to your public homepage. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) ."},"preventUserExistenceErrors":{"type":"string","description":"Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.\n\nValid values include:\n\n- `ENABLED` - This prevents user existence-related errors.\n- `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.\n\nDefaults to `LEGACY` when you don't provide a value."},"readAttributes":{"type":"array","items":{"type":"string"},"description":"The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information.\n\nWhen you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes."},"refreshTokenRotation":{"$ref":"#/types/aws-native:cognito:UserPoolClientRefreshTokenRotation","description":"The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens."},"refreshTokenValidity":{"type":"integer","description":"The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session\nand retrieve new access and ID tokens for 10 days.\n\nThe default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your refresh\ntokens are valid for 30 days."},"supportedIdentityProviders":{"type":"array","items":{"type":"string"},"description":"A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis parameter sets the IdPs that [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) will display on the login page for your app client. The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) ."},"tokenValidityUnits":{"$ref":"#/types/aws-native:cognito:UserPoolClientTokenValidityUnits","description":"The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create an app client."},"writeAttributes":{"type":"array","items":{"type":"string"},"description":"The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list.\n\nWhen you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.\n\nIf your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) ."}},"requiredInputs":["userPoolId"]},"aws-native:cognito:UserPoolDomain":{"description":"Resource Type definition for AWS::Cognito::UserPoolDomain","properties":{"cloudFrontDistribution":{"type":"string","description":"The Amazon CloudFront endpoint that you use as the target of the alias that you set up with your Domain Name Service (DNS) provider."},"customDomainConfig":{"$ref":"#/types/aws-native:cognito:UserPoolDomainCustomDomainConfigType","description":"The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.\n\nWhen you create a custom domain, the passkey RP ID defaults to the custom domain. If you had a prefix domain active, this will cause passkey integration for your prefix domain to stop working due to a mismatch in RP ID. To keep the prefix domain passkey integration working, you can explicitly set RP ID to the prefix domain."},"domain":{"type":"string","description":"The name of the domain that you want to update. For custom domains, this is the fully-qualified domain name, for example `auth.example.com` . For prefix domains, this is the prefix alone, such as `myprefix` .","replaceOnChanges":true},"managedLoginVersion":{"type":"integer","description":"A version number that indicates the state of managed login for your domain. Version `1` is hosted UI (classic). Version `2` is the newer managed login with the branding editor. For more information, see [Managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) ."},"userPoolId":{"type":"string","description":"The ID of the user pool that is associated with the domain you're updating.","replaceOnChanges":true}},"type":"object","required":["cloudFrontDistribution","domain","userPoolId"],"inputProperties":{"customDomainConfig":{"$ref":"#/types/aws-native:cognito:UserPoolDomainCustomDomainConfigType","description":"The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.\n\nWhen you create a custom domain, the passkey RP ID defaults to the custom domain. If you had a prefix domain active, this will cause passkey integration for your prefix domain to stop working due to a mismatch in RP ID. To keep the prefix domain passkey integration working, you can explicitly set RP ID to the prefix domain."},"domain":{"type":"string","description":"The name of the domain that you want to update. For custom domains, this is the fully-qualified domain name, for example `auth.example.com` . For prefix domains, this is the prefix alone, such as `myprefix` ."},"managedLoginVersion":{"type":"integer","description":"A version number that indicates the state of managed login for your domain. Version `1` is hosted UI (classic). Version `2` is the newer managed login with the branding editor. For more information, see [Managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) ."},"userPoolId":{"type":"string","description":"The ID of the user pool that is associated with the domain you're updating."}},"requiredInputs":["domain","userPoolId"]},"aws-native:cognito:UserPoolGroup":{"description":"Resource Type definition for AWS::Cognito::UserPoolGroup","properties":{"description":{"type":"string","description":"A description of the group that you're creating."},"groupName":{"type":"string","description":"A name for the group. This name must be unique in your user pool.","replaceOnChanges":true},"precedence":{"type":"integer","description":"A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a user group.","replaceOnChanges":true}},"type":"object","required":["userPoolId"],"inputProperties":{"description":{"type":"string","description":"A description of the group that you're creating."},"groupName":{"type":"string","description":"A name for the group. This name must be unique in your user pool."},"precedence":{"type":"integer","description":"A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a user group."}},"requiredInputs":["userPoolId"]},"aws-native:cognito:UserPoolIdentityProvider":{"description":"Resource Type definition for AWS::Cognito::UserPoolIdentityProvider","properties":{"attributeMapping":{"type":"object","additionalProperties":{"type":"string"},"description":"A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."},"idpIdentifiers":{"type":"array","items":{"type":"string"},"description":"An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."},"providerDetails":{"type":"object","additionalProperties":{"type":"string"},"description":"The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`"},"providerName":{"type":"string","description":"The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP.","replaceOnChanges":true},"providerType":{"type":"string","description":"The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs.","replaceOnChanges":true},"userPoolId":{"type":"string","description":"The Id of the user pool where you want to create an IdP.","replaceOnChanges":true}},"type":"object","required":["providerDetails","providerName","providerType","userPoolId"],"inputProperties":{"attributeMapping":{"type":"object","additionalProperties":{"type":"string"},"description":"A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value."},"idpIdentifiers":{"type":"array","items":{"type":"string"},"description":"An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) ."},"providerDetails":{"type":"object","additionalProperties":{"type":"string"},"description":"The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`"},"providerName":{"type":"string","description":"The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP."},"providerType":{"type":"string","description":"The type of IdP that you want to add. Amazon Cognito supports OIDC, SAML 2.0, Login With Amazon, Sign In With Apple, Google, and Facebook IdPs."},"userPoolId":{"type":"string","description":"The Id of the user pool where you want to create an IdP."}},"requiredInputs":["providerDetails","providerType","userPoolId"]},"aws-native:cognito:UserPoolResourceServer":{"description":"Resource Type definition for AWS::Cognito::UserPoolResourceServer","properties":{"identifier":{"type":"string","description":"A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.\n\nAmazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.","replaceOnChanges":true},"name":{"type":"string","description":"A friendly name for the resource server."},"scopes":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolResourceServerResourceServerScopeType"},"description":"A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` ."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a resource server.","replaceOnChanges":true}},"type":"object","required":["identifier","name","userPoolId"],"inputProperties":{"identifier":{"type":"string","description":"A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.\n\nAmazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens."},"name":{"type":"string","description":"A friendly name for the resource server."},"scopes":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolResourceServerResourceServerScopeType"},"description":"A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` ."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a resource server."}},"requiredInputs":["identifier","userPoolId"]},"aws-native:cognito:UserPoolRiskConfigurationAttachment":{"description":"Resource Type definition for AWS::Cognito::UserPoolRiskConfigurationAttachment","properties":{"accountTakeoverRiskConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType","description":"The settings for automated responses and notification templates for adaptive authentication with threat protection."},"clientId":{"type":"string","description":"The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.","replaceOnChanges":true},"compromisedCredentialsRiskConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType","description":"Settings for compromised-credentials actions and authentication types with threat protection in full-function `ENFORCED` mode."},"riskExceptionConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType","description":"Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges."},"userPoolId":{"type":"string","description":"The ID of the user pool that has the risk configuration applied.","replaceOnChanges":true}},"type":"object","required":["clientId","userPoolId"],"inputProperties":{"accountTakeoverRiskConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType","description":"The settings for automated responses and notification templates for adaptive authentication with threat protection."},"clientId":{"type":"string","description":"The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings."},"compromisedCredentialsRiskConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType","description":"Settings for compromised-credentials actions and authentication types with threat protection in full-function `ENFORCED` mode."},"riskExceptionConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType","description":"Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges."},"userPoolId":{"type":"string","description":"The ID of the user pool that has the risk configuration applied."}},"requiredInputs":["clientId","userPoolId"]},"aws-native:cognito:UserPoolUiCustomizationAttachment":{"description":"Resource Type definition for AWS::Cognito::UserPoolUICustomizationAttachment","properties":{"clientId":{"type":"string","description":"The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..","replaceOnChanges":true},"css":{"type":"string","description":"A plaintext CSS file that contains the custom fields that you want to apply to your user pool or app client. To download a template, go to the Amazon Cognito console. Navigate to your user pool *App clients* tab, select *Login pages* , edit *Hosted UI (classic) style* , and select the link to `CSS template.css` ."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to apply branding to the classic hosted UI.","replaceOnChanges":true}},"type":"object","required":["clientId","userPoolId"],"inputProperties":{"clientId":{"type":"string","description":"The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings.."},"css":{"type":"string","description":"A plaintext CSS file that contains the custom fields that you want to apply to your user pool or app client. To download a template, go to the Amazon Cognito console. Navigate to your user pool *App clients* tab, select *Login pages* , edit *Hosted UI (classic) style* , and select the link to `CSS template.css` ."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to apply branding to the classic hosted UI."}},"requiredInputs":["clientId","userPoolId"]},"aws-native:cognito:UserPoolUser":{"description":"Resource Type definition for AWS::Cognito::UserPoolUser","properties":{"clientMetadata":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers.\n\nWhen Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nTo review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see [Connecting API actions to Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the `ClientMetadata` parameter, note that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the `ClientMetadata` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the `ClientMetadata` parameter serves no purpose.\n\u003e - Validate the `ClientMetadata` value.\n\u003e - Encrypt the `ClientMetadata` value. Don't send sensitive information in this parameter.","replaceOnChanges":true},"desiredDeliveryMediums":{"type":"array","items":{"type":"string"},"description":"Specify `EMAIL` if email will be used to send the welcome message. Specify `SMS` if the phone number will be used. The default value is `SMS` . You can specify more than one value.","replaceOnChanges":true},"forceAliasCreation":{"type":"boolean","description":"This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the `UserAttributes` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .","replaceOnChanges":true},"messageAction":{"type":"string","description":"Set to `RESEND` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.","replaceOnChanges":true},"userAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeType"},"description":"An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than `Username` . However, any attributes that you specify as required (when creating a user pool or in the *Attributes* tab of the console) either you should supply (in your call to `AdminCreateUser` ) or the user should supply (when they sign up in response to your welcome message).\n\nFor custom attributes, you must prepend the `custom:` prefix to the attribute name.\n\nTo send a message inviting the user to sign up, you must specify the user's email address or phone number. You can do this in your call to AdminCreateUser or in the *Users* tab of the Amazon Cognito console for managing your user pools.\n\nYou must also provide an email address or phone number when you expect the user to do passwordless sign-in with an email or SMS OTP. These attributes must be provided when passwordless options are the only available, or when you don't submit a `TemporaryPassword` .\n\nIn your call to `AdminCreateUser` , you can set the `email_verified` attribute to `True` , and you can set the `phone_number_verified` attribute to `True` .\n\n- *email* : The email address of the user to whom the message that contains the code and username will be sent. Required if the `email_verified` attribute is set to `True` , or if `\"EMAIL\"` is specified in the `DesiredDeliveryMediums` parameter.\n- *phone_number* : The phone number of the user to whom the message that contains the code and username will be sent. Required if the `phone_number_verified` attribute is set to `True` , or if `\"SMS\"` is specified in the `DesiredDeliveryMediums` parameter.","replaceOnChanges":true},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a user.","replaceOnChanges":true},"username":{"type":"string","description":"The value that you want to set as the username sign-in attribute. The following conditions apply to the username parameter.\n\n- The username can't be a duplicate of another username in the same user pool.\n- You can't change the value of a username after you create it.\n- You can only provide a value if usernames are a valid sign-in attribute for your user pool. If your user pool only supports phone numbers or email addresses as sign-in attributes, Amazon Cognito automatically generates a username value. For more information, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) .","replaceOnChanges":true},"validationData":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeType"},"description":"Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda trigger. This set of key-value pairs are for custom validation of information that you collect from your users but don't need to retain.\n\nYour Lambda function can analyze this additional data and act on it. Your function can automatically confirm and verify select users or perform external API operations like logging user attributes and validation data to Amazon CloudWatch Logs.\n\nFor more information about the pre sign-up Lambda trigger, see [Pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) .","replaceOnChanges":true}},"type":"object","required":["userPoolId"],"inputProperties":{"clientMetadata":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers.\n\nWhen Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the `clientMetadata` value to enhance your workflow for your specific needs.\n\nTo review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see [Connecting API actions to Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event) in the *Amazon Cognito Developer Guide* .\n\n\u003e When you use the `ClientMetadata` parameter, note that Amazon Cognito won't do the following:\n\u003e \n\u003e - Store the `ClientMetadata` value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the `ClientMetadata` parameter serves no purpose.\n\u003e - Validate the `ClientMetadata` value.\n\u003e - Encrypt the `ClientMetadata` value. Don't send sensitive information in this parameter."},"desiredDeliveryMediums":{"type":"array","items":{"type":"string"},"description":"Specify `EMAIL` if email will be used to send the welcome message. Specify `SMS` if the phone number will be used. The default value is `SMS` . You can specify more than one value."},"forceAliasCreation":{"type":"boolean","description":"This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.\n\nIf this parameter is set to `True` and the phone number or email address specified in the `UserAttributes` parameter already exists as an alias with a different user, this request migrates the alias from the previous user to the newly-created user. The previous user will no longer be able to log in using that alias.\n\nIf this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` ."},"messageAction":{"type":"string","description":"Set to `RESEND` to resend the invitation message to a user that already exists, and to reset the temporary-password duration with a new temporary password. Set to `SUPPRESS` to suppress sending the message. You can specify only one value."},"userAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeType"},"description":"An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than `Username` . However, any attributes that you specify as required (when creating a user pool or in the *Attributes* tab of the console) either you should supply (in your call to `AdminCreateUser` ) or the user should supply (when they sign up in response to your welcome message).\n\nFor custom attributes, you must prepend the `custom:` prefix to the attribute name.\n\nTo send a message inviting the user to sign up, you must specify the user's email address or phone number. You can do this in your call to AdminCreateUser or in the *Users* tab of the Amazon Cognito console for managing your user pools.\n\nYou must also provide an email address or phone number when you expect the user to do passwordless sign-in with an email or SMS OTP. These attributes must be provided when passwordless options are the only available, or when you don't submit a `TemporaryPassword` .\n\nIn your call to `AdminCreateUser` , you can set the `email_verified` attribute to `True` , and you can set the `phone_number_verified` attribute to `True` .\n\n- *email* : The email address of the user to whom the message that contains the code and username will be sent. Required if the `email_verified` attribute is set to `True` , or if `\"EMAIL\"` is specified in the `DesiredDeliveryMediums` parameter.\n- *phone_number* : The phone number of the user to whom the message that contains the code and username will be sent. Required if the `phone_number_verified` attribute is set to `True` , or if `\"SMS\"` is specified in the `DesiredDeliveryMediums` parameter."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a user."},"username":{"type":"string","description":"The value that you want to set as the username sign-in attribute. The following conditions apply to the username parameter.\n\n- The username can't be a duplicate of another username in the same user pool.\n- You can't change the value of a username after you create it.\n- You can only provide a value if usernames are a valid sign-in attribute for your user pool. If your user pool only supports phone numbers or email addresses as sign-in attributes, Amazon Cognito automatically generates a username value. For more information, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) ."},"validationData":{"type":"array","items":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeType"},"description":"Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda trigger. This set of key-value pairs are for custom validation of information that you collect from your users but don't need to retain.\n\nYour Lambda function can analyze this additional data and act on it. Your function can automatically confirm and verify select users or perform external API operations like logging user attributes and validation data to Amazon CloudWatch Logs.\n\nFor more information about the pre sign-up Lambda trigger, see [Pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) ."}},"requiredInputs":["userPoolId"]},"aws-native:cognito:UserPoolUserToGroupAttachment":{"description":"Resource Type definition for AWS::Cognito::UserPoolUserToGroupAttachment","properties":{"groupName":{"type":"string","description":"The name of the group that you want to add your user to.","replaceOnChanges":true},"userPoolId":{"type":"string","description":"The ID of the user pool that contains the group that you want to add the user to.","replaceOnChanges":true},"username":{"type":"string","description":"The user's username.","replaceOnChanges":true}},"type":"object","required":["groupName","userPoolId","username"],"inputProperties":{"groupName":{"type":"string","description":"The name of the group that you want to add your user to."},"userPoolId":{"type":"string","description":"The ID of the user pool that contains the group that you want to add the user to."},"username":{"type":"string","description":"The user's username."}},"requiredInputs":["groupName","userPoolId","username"]},"aws-native:comprehend:DocumentClassifier":{"description":"Document Classifier enables training document classifier models.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the document classifier."},"dataAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend read access to your input data.","replaceOnChanges":true},"documentClassifierName":{"type":"string","description":"The name of the document classifier.","replaceOnChanges":true},"inputDataConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierInputDataConfig","description":"Specifies the format and location of the input data for the job.","replaceOnChanges":true},"languageCode":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierLanguageCode","description":"The language of the input documents. You can specify any of the languages supported by Amazon Comprehend. All documents must be in the same language.","replaceOnChanges":true},"mode":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierMode","description":"Indicates the mode in which the classifier will be trained. The classifier can be trained in multi-class (single-label) mode or multi-label mode. Multi-class mode identifies a single class label for each document and multi-label mode identifies one or more class labels for each document. Multiple labels for an individual document are separated by a delimiter. The default delimiter between labels is a pipe (|).","replaceOnChanges":true},"modelKmsKeyId":{"type":"string","description":"ID for the AWS  key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:\n\n- KMS Key ID: `\"1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- Amazon Resource Name (ARN) of a KMS Key: `\"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"`","replaceOnChanges":true},"modelPolicy":{"type":"string","description":"The resource-based policy to attach to your custom document classifier model. You can use this policy to allow another AWS account to import your custom model.\n\nProvide your policy as a JSON body that you enter as a UTF-8 encoded string without line breaks. To provide valid JSON, enclose the attribute names and values in double quotes. If the JSON body is also enclosed in double quotes, then you must escape the double quotes that are inside the policy:\n\n`\"{\\\"attribute\\\": \\\"value\\\", \\\"attribute\\\": [\\\"value\\\"]}\"`\n\nTo avoid escaping quotes, you can use single quotes to enclose the policy and double quotes to enclose the JSON names and values:\n\n`'{\"attribute\": \"value\", \"attribute\": [\"value\"]}'`"},"outputDataConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierOutputDataConfig","description":"Provides output results configuration parameters for custom classifier jobs.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to associate with the document classifier. A tag is a key-value pair that adds as a metadata to a resource used by Amazon Comprehend. For example, a tag with \"Sales\" as the key might be added to a resource to indicate its use by the sales department."},"versionName":{"type":"string","description":"The version name given to the newly created classifier. Version names can have a maximum of 256 characters. Alphanumeric characters, hyphens (-) and underscores (_) are allowed. The version name must be unique among all models with the same classifier name in the AWS account / AWS Region .","replaceOnChanges":true},"volumeKmsKeyId":{"type":"string","description":"ID for the AWS Key Management Service (KMS) key that Amazon Comprehend uses to encrypt data on the storage volume attached to the ML compute instance(s) that process the analysis job. The VolumeKmsKeyId can be either of the following formats:\n\n- KMS Key ID: `\"1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- Amazon Resource Name (ARN) of a KMS Key: `\"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"`","replaceOnChanges":true},"vpcConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierVpcConfig","description":"Configuration parameters for a private Virtual Private Cloud (VPC) containing the resources you are using for your custom classifier. For more information, see [Amazon VPC](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-vpc.html) .","replaceOnChanges":true}},"type":"object","required":["arn","dataAccessRoleArn","documentClassifierName","inputDataConfig","languageCode"],"inputProperties":{"dataAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend read access to your input data."},"documentClassifierName":{"type":"string","description":"The name of the document classifier."},"inputDataConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierInputDataConfig","description":"Specifies the format and location of the input data for the job."},"languageCode":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierLanguageCode","description":"The language of the input documents. You can specify any of the languages supported by Amazon Comprehend. All documents must be in the same language."},"mode":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierMode","description":"Indicates the mode in which the classifier will be trained. The classifier can be trained in multi-class (single-label) mode or multi-label mode. Multi-class mode identifies a single class label for each document and multi-label mode identifies one or more class labels for each document. Multiple labels for an individual document are separated by a delimiter. The default delimiter between labels is a pipe (|)."},"modelKmsKeyId":{"type":"string","description":"ID for the AWS  key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:\n\n- KMS Key ID: `\"1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- Amazon Resource Name (ARN) of a KMS Key: `\"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"`"},"modelPolicy":{"type":"string","description":"The resource-based policy to attach to your custom document classifier model. You can use this policy to allow another AWS account to import your custom model.\n\nProvide your policy as a JSON body that you enter as a UTF-8 encoded string without line breaks. To provide valid JSON, enclose the attribute names and values in double quotes. If the JSON body is also enclosed in double quotes, then you must escape the double quotes that are inside the policy:\n\n`\"{\\\"attribute\\\": \\\"value\\\", \\\"attribute\\\": [\\\"value\\\"]}\"`\n\nTo avoid escaping quotes, you can use single quotes to enclose the policy and double quotes to enclose the JSON names and values:\n\n`'{\"attribute\": \"value\", \"attribute\": [\"value\"]}'`"},"outputDataConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierOutputDataConfig","description":"Provides output results configuration parameters for custom classifier jobs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to associate with the document classifier. A tag is a key-value pair that adds as a metadata to a resource used by Amazon Comprehend. For example, a tag with \"Sales\" as the key might be added to a resource to indicate its use by the sales department."},"versionName":{"type":"string","description":"The version name given to the newly created classifier. Version names can have a maximum of 256 characters. Alphanumeric characters, hyphens (-) and underscores (_) are allowed. The version name must be unique among all models with the same classifier name in the AWS account / AWS Region ."},"volumeKmsKeyId":{"type":"string","description":"ID for the AWS Key Management Service (KMS) key that Amazon Comprehend uses to encrypt data on the storage volume attached to the ML compute instance(s) that process the analysis job. The VolumeKmsKeyId can be either of the following formats:\n\n- KMS Key ID: `\"1234abcd-12ab-34cd-56ef-1234567890ab\"`\n- Amazon Resource Name (ARN) of a KMS Key: `\"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"`"},"vpcConfig":{"$ref":"#/types/aws-native:comprehend:DocumentClassifierVpcConfig","description":"Configuration parameters for a private Virtual Private Cloud (VPC) containing the resources you are using for your custom classifier. For more information, see [Amazon VPC](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-vpc.html) ."}},"requiredInputs":["dataAccessRoleArn","inputDataConfig","languageCode"]},"aws-native:comprehend:Flywheel":{"description":"The AWS::Comprehend::Flywheel resource creates an Amazon Comprehend Flywheel that enables customer to train their model.","properties":{"activeModelArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the active model version."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the flywheel."},"dataAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend permission to access the flywheel data."},"dataLakeS3Uri":{"type":"string","description":"Amazon S3 URI of the data lake location.","replaceOnChanges":true},"dataSecurityConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelDataSecurityConfig","description":"Data security configuration."},"flywheelName":{"type":"string","description":"Name for the flywheel.","replaceOnChanges":true},"modelType":{"$ref":"#/types/aws-native:comprehend:FlywheelModelType","description":"Model type of the flywheel's model.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the endpoint being created. A tag is a key-value pair that adds metadata to the endpoint. For example, a tag with \"Sales\" as the key might be added to an endpoint to indicate its use by the sales department."},"taskConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelTaskConfig","description":"Configuration about the model associated with a flywheel.","replaceOnChanges":true}},"type":"object","required":["arn","dataAccessRoleArn","dataLakeS3Uri","flywheelName"],"inputProperties":{"activeModelArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the active model version."},"dataAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend permission to access the flywheel data."},"dataLakeS3Uri":{"type":"string","description":"Amazon S3 URI of the data lake location."},"dataSecurityConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelDataSecurityConfig","description":"Data security configuration."},"flywheelName":{"type":"string","description":"Name for the flywheel."},"modelType":{"$ref":"#/types/aws-native:comprehend:FlywheelModelType","description":"Model type of the flywheel's model."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the endpoint being created. A tag is a key-value pair that adds metadata to the endpoint. For example, a tag with \"Sales\" as the key might be added to an endpoint to indicate its use by the sales department."},"taskConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelTaskConfig","description":"Configuration about the model associated with a flywheel."}},"requiredInputs":["dataAccessRoleArn","dataLakeS3Uri"]},"aws-native:computeoptimizer:AutomationRule":{"description":"Creates an AWS Compute Optimizer automation rule that automatically implements recommended actions based on your defined criteria and schedule. Automation rules are global resources that manage automated actions across all AWS Regions where Compute Optimizer Automation is available. Organization-level rules can only be created by the management account or delegated administrator.","properties":{"accountId":{"type":"string","description":"The AWS account ID that owns the automation rule."},"createdTimestamp":{"type":"string","description":"The timestamp when the automation rule was created."},"criteria":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleCriteria","description":"Filter criteria that specify which recommended actions qualify for implementation."},"description":{"type":"string","description":"The description of the automation rule."},"lastUpdatedTimestamp":{"type":"string","description":"The timestamp when the automation rule was last updated."},"name":{"type":"string","description":"The name of the automation rule."},"organizationConfiguration":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleOrganizationConfiguration","description":"Organization configuration for organization rules, including rule apply order and account scope."},"priority":{"type":"string","description":"Rule priority within its group"},"recommendedActionTypes":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleRecommendedActionTypesItem"},"description":"The types of recommended actions this rule will implement."},"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the automation rule."},"ruleId":{"type":"string","description":"The unique identifier of the automation rule."},"ruleRevision":{"type":"string","description":"The revision number of the automation rule."},"ruleType":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleRuleType","description":"The type of automation rule."},"schedule":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleSchedule","description":"The schedule configuration for when the rule runs."},"status":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStatus","description":"The status of the automation rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the automation rule."}},"type":"object","required":["accountId","createdTimestamp","lastUpdatedTimestamp","name","recommendedActionTypes","ruleArn","ruleId","ruleRevision","ruleType","schedule","status"],"inputProperties":{"criteria":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleCriteria","description":"Filter criteria that specify which recommended actions qualify for implementation."},"description":{"type":"string","description":"The description of the automation rule."},"name":{"type":"string","description":"The name of the automation rule."},"organizationConfiguration":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleOrganizationConfiguration","description":"Organization configuration for organization rules, including rule apply order and account scope."},"priority":{"type":"string","description":"Rule priority within its group"},"recommendedActionTypes":{"type":"array","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleRecommendedActionTypesItem"},"description":"The types of recommended actions this rule will implement."},"ruleType":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleRuleType","description":"The type of automation rule."},"schedule":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleSchedule","description":"The schedule configuration for when the rule runs."},"status":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStatus","description":"The status of the automation rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the automation rule."}},"requiredInputs":["recommendedActionTypes","ruleType","schedule","status"]},"aws-native:configuration:AggregationAuthorization":{"description":"Resource Type definition for AWS::Config::AggregationAuthorization","properties":{"aggregationAuthorizationArn":{"type":"string","description":"The ARN of the AggregationAuthorization."},"authorizedAccountId":{"type":"string","description":"The 12-digit account ID of the account authorized to aggregate data.","replaceOnChanges":true},"authorizedAwsRegion":{"type":"string","description":"The region authorized to collect aggregated data.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the AggregationAuthorization."}},"type":"object","required":["aggregationAuthorizationArn","authorizedAccountId","authorizedAwsRegion"],"inputProperties":{"authorizedAccountId":{"type":"string","description":"The 12-digit account ID of the account authorized to aggregate data."},"authorizedAwsRegion":{"type":"string","description":"The region authorized to collect aggregated data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the AggregationAuthorization."}},"requiredInputs":["authorizedAccountId","authorizedAwsRegion"]},"aws-native:configuration:ConfigRule":{"description":"You must first create and start the CC configuration recorder in order to create CC managed rules with CFNlong. For more information, see [Managing the Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html).\n  Adds or updates an CC rule to evaluate if your AWS resources comply with your desired configurations. For information on how many CC rules you can have per account, see [Service Limits](https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html) in the *Developer Guide*.\n There are two types of rules: *Managed Rules* and *Custom Rules*. You can use the ``ConfigRule`` resource to create both CC Managed Rules and CC Custom Rules.\n  CC Managed Rules are predefined, customizable rules created by CC. For a list of managed rules, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an CC managed rule, you must specify the rule's identifier for the ``SourceIdentifier`` key.\n  CC Custom Rules are rules that you create from scratch. There are two ways to create CC custom rules: with Lambda functions ([Developer Guide](https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with CFNGUARDshort ([Guard GitHub Repository](https://docs.aws.amazon.com/https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. CC custom rules created with LAMlong are called *Custom Lambda Rules* and CC custom rules created with CFNGUARDshort are called *Custom Policy Rules*.\n If you are adding a new CC Custom LAM rule, you first need to create an LAMlong function that the rule invokes to evaluate your resources. When you use the ``ConfigRule`` resource to add a Custom LAM rule to CC, you must specify the Amazon Resource Name (ARN) that LAMlong assigns to the function. You specify the ARN in the ``SourceIdentifier`` key. This key is part of the ``Source`` object, which is part of the ``ConfigRule`` object. \n For any new CC rule that you add, specify the ``ConfigRuleName`` in the ``ConfigRule`` object. Do not specify the ``ConfigRuleArn`` or the ``ConfigRuleId``. These values are generated by CC for new rules.\n If you are updating a rule that you added previously, you can specify the rule by ``ConfigRuleName``, ``ConfigRuleId``, or ``ConfigRuleArn`` in the ``ConfigRule`` data type that you use in this request.\n For more information about developing and using CC rules, see [Evaluating Resources with Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html) in the *Developer Guide*.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Config rule, such as `arn:aws:config:us-east-1:123456789012:config-rule/config-rule-a1bzhi` ."},"compliance":{"$ref":"#/types/aws-native:configuration:ComplianceProperties","description":"Indicates whether an AWS resource or CC rule is compliant and provides the number of contributors that affect the compliance."},"configRuleId":{"type":"string","description":"The ID of the AWS Config rule, such as `config-rule-a1bzhi` ."},"configRuleName":{"type":"string","description":"A name for the CC rule. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the rule name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).","replaceOnChanges":true},"description":{"type":"string","description":"The description that you provide for the CC rule."},"evaluationModes":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConfigRuleEvaluationModeConfiguration"},"description":"The modes the CC rule can be evaluated in. The valid values are distinct objects. By default, the value is Detective evaluation mode only."},"inputParameters":{"$ref":"pulumi.json#/Any","description":"A string, in JSON format, that is passed to the CC rule Lambda function.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Config::ConfigRule` for more information about the expected schema for this property."},"maximumExecutionFrequency":{"type":"string","description":"The maximum frequency with which CC runs evaluations for a rule. You can specify a value for ``MaximumExecutionFrequency`` when:\n  +  You are using an AWS managed rule that is triggered at a periodic frequency.\n  +  Your custom rule is triggered when CC delivers the configuration snapshot. For more information, see [ConfigSnapshotDeliveryProperties](https://docs.aws.amazon.com/config/latest/APIReference/API_ConfigSnapshotDeliveryProperties.html).\n  \n  By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the ``MaximumExecutionFrequency`` parameter."},"scope":{"$ref":"#/types/aws-native:configuration:ConfigRuleScope","description":"Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.\n  The scope can be empty."},"source":{"$ref":"#/types/aws-native:configuration:ConfigRuleSource","description":"Provides the rule owner (```` for managed rules, ``CUSTOM_POLICY`` for Custom Policy rules, and ``CUSTOM_LAMBDA`` for Custom Lambda rules), the rule identifier, and the notifications that cause the function to evaluate your AWS resources."}},"type":"object","required":["arn","configRuleId","source"],"inputProperties":{"compliance":{"$ref":"#/types/aws-native:configuration:ComplianceProperties","description":"Indicates whether an AWS resource or CC rule is compliant and provides the number of contributors that affect the compliance."},"configRuleName":{"type":"string","description":"A name for the CC rule. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the rule name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html)."},"description":{"type":"string","description":"The description that you provide for the CC rule."},"evaluationModes":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConfigRuleEvaluationModeConfiguration"},"description":"The modes the CC rule can be evaluated in. The valid values are distinct objects. By default, the value is Detective evaluation mode only."},"inputParameters":{"$ref":"pulumi.json#/Any","description":"A string, in JSON format, that is passed to the CC rule Lambda function.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Config::ConfigRule` for more information about the expected schema for this property."},"maximumExecutionFrequency":{"type":"string","description":"The maximum frequency with which CC runs evaluations for a rule. You can specify a value for ``MaximumExecutionFrequency`` when:\n  +  You are using an AWS managed rule that is triggered at a periodic frequency.\n  +  Your custom rule is triggered when CC delivers the configuration snapshot. For more information, see [ConfigSnapshotDeliveryProperties](https://docs.aws.amazon.com/config/latest/APIReference/API_ConfigSnapshotDeliveryProperties.html).\n  \n  By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the ``MaximumExecutionFrequency`` parameter."},"scope":{"$ref":"#/types/aws-native:configuration:ConfigRuleScope","description":"Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.\n  The scope can be empty."},"source":{"$ref":"#/types/aws-native:configuration:ConfigRuleSource","description":"Provides the rule owner (```` for managed rules, ``CUSTOM_POLICY`` for Custom Policy rules, and ``CUSTOM_LAMBDA`` for Custom Lambda rules), the rule identifier, and the notifications that cause the function to evaluate your AWS resources."}},"requiredInputs":["source"]},"aws-native:configuration:ConfigurationAggregator":{"description":"Resource Type definition for AWS::Config::ConfigurationAggregator","properties":{"accountAggregationSources":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConfigurationAggregatorAccountAggregationSource"},"description":"Provides a list of source accounts and regions to be aggregated."},"configurationAggregatorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the aggregator."},"configurationAggregatorName":{"type":"string","description":"The name of the aggregator.","replaceOnChanges":true},"organizationAggregationSource":{"$ref":"#/types/aws-native:configuration:ConfigurationAggregatorOrganizationAggregationSource","description":"Provides an organization and list of regions to be aggregated."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the configuration aggregator."}},"type":"object","required":["configurationAggregatorArn"],"inputProperties":{"accountAggregationSources":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConfigurationAggregatorAccountAggregationSource"},"description":"Provides a list of source accounts and regions to be aggregated."},"configurationAggregatorName":{"type":"string","description":"The name of the aggregator."},"organizationAggregationSource":{"$ref":"#/types/aws-native:configuration:ConfigurationAggregatorOrganizationAggregationSource","description":"Provides an organization and list of regions to be aggregated."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the configuration aggregator."}}},"aws-native:configuration:ConformancePack":{"description":"A conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed as a single entity in an account and a region or across an entire AWS Organization.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var conformancePack = new AwsNative.Configuration.ConformancePack(\"conformancePack\", new()\n    {\n        ConformancePackName = \"ConformancePackName\",\n        DeliveryS3Bucket = \"DeliveryS3Bucket\",\n        TemplateS3Uri = \"s3://bucketname/prefix\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/configuration\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := configuration.NewConformancePack(ctx, \"conformancePack\", \u0026configuration.ConformancePackArgs{\n\t\t\tConformancePackName: pulumi.String(\"ConformancePackName\"),\n\t\t\tDeliveryS3Bucket:    pulumi.String(\"DeliveryS3Bucket\"),\n\t\t\tTemplateS3Uri:       pulumi.String(\"s3://bucketname/prefix\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst conformancePack = new aws_native.configuration.ConformancePack(\"conformancePack\", {\n    conformancePackName: \"ConformancePackName\",\n    deliveryS3Bucket: \"DeliveryS3Bucket\",\n    templateS3Uri: \"s3://bucketname/prefix\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconformance_pack = aws_native.configuration.ConformancePack(\"conformancePack\",\n    conformance_pack_name=\"ConformancePackName\",\n    delivery_s3_bucket=\"DeliveryS3Bucket\",\n    template_s3_uri=\"s3://bucketname/prefix\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cloudFormationCanaryPack = new AwsNative.Configuration.ConformancePack(\"cloudFormationCanaryPack\", new()\n    {\n        ConformancePackName = \"ConformancePackName\",\n        DeliveryS3Bucket = \"DeliveryS3Bucket\",\n        TemplateS3Uri = \"s3://bucketname/prefix\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/configuration\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := configuration.NewConformancePack(ctx, \"cloudFormationCanaryPack\", \u0026configuration.ConformancePackArgs{\n\t\t\tConformancePackName: pulumi.String(\"ConformancePackName\"),\n\t\t\tDeliveryS3Bucket:    pulumi.String(\"DeliveryS3Bucket\"),\n\t\t\tTemplateS3Uri:       pulumi.String(\"s3://bucketname/prefix\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst cloudFormationCanaryPack = new aws_native.configuration.ConformancePack(\"cloudFormationCanaryPack\", {\n    conformancePackName: \"ConformancePackName\",\n    deliveryS3Bucket: \"DeliveryS3Bucket\",\n    templateS3Uri: \"s3://bucketname/prefix\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncloud_formation_canary_pack = aws_native.configuration.ConformancePack(\"cloudFormationCanaryPack\",\n    conformance_pack_name=\"ConformancePackName\",\n    delivery_s3_bucket=\"DeliveryS3Bucket\",\n    template_s3_uri=\"s3://bucketname/prefix\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"conformancePackInputParameters":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConformancePackInputParameter"},"description":"A list of ConformancePackInputParameter objects."},"conformancePackName":{"type":"string","description":"Name of the conformance pack which will be assigned as the unique identifier.","replaceOnChanges":true},"deliveryS3Bucket":{"type":"string","description":"AWS Config stores intermediate files while processing conformance pack template."},"deliveryS3KeyPrefix":{"type":"string","description":"The prefix for delivery S3 bucket."},"templateBody":{"type":"string","description":"A string containing full conformance pack template body. You can only specify one of the template body or template S3Uri fields."},"templateS3Uri":{"type":"string","description":"Location of file containing the template body which points to the conformance pack template that is located in an Amazon S3 bucket. You can only specify one of the template body or template S3Uri fields."},"templateSsmDocumentDetails":{"$ref":"#/types/aws-native:configuration:TemplateSsmDocumentDetailsProperties","description":"The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document."}},"type":"object","required":["conformancePackName"],"inputProperties":{"conformancePackInputParameters":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:ConformancePackInputParameter"},"description":"A list of ConformancePackInputParameter objects."},"conformancePackName":{"type":"string","description":"Name of the conformance pack which will be assigned as the unique identifier."},"deliveryS3Bucket":{"type":"string","description":"AWS Config stores intermediate files while processing conformance pack template."},"deliveryS3KeyPrefix":{"type":"string","description":"The prefix for delivery S3 bucket."},"templateBody":{"type":"string","description":"A string containing full conformance pack template body. You can only specify one of the template body or template S3Uri fields."},"templateS3Uri":{"type":"string","description":"Location of file containing the template body which points to the conformance pack template that is located in an Amazon S3 bucket. You can only specify one of the template body or template S3Uri fields."},"templateSsmDocumentDetails":{"$ref":"#/types/aws-native:configuration:TemplateSsmDocumentDetailsProperties","description":"The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document."}}},"aws-native:configuration:OrganizationConformancePack":{"description":"Resource Type definition for AWS::Config::OrganizationConformancePack.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var organizationConformancePack = new AwsNative.Configuration.OrganizationConformancePack(\"organizationConformancePack\", new()\n    {\n        OrganizationConformancePackName = \"OrganizationConformancePackName\",\n        DeliveryS3Bucket = \"DeliveryS3Bucket\",\n        TemplateS3Uri = \"s3://bucketname/prefix\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/configuration\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := configuration.NewOrganizationConformancePack(ctx, \"organizationConformancePack\", \u0026configuration.OrganizationConformancePackArgs{\n\t\t\tOrganizationConformancePackName: pulumi.String(\"OrganizationConformancePackName\"),\n\t\t\tDeliveryS3Bucket:                pulumi.String(\"DeliveryS3Bucket\"),\n\t\t\tTemplateS3Uri:                   pulumi.String(\"s3://bucketname/prefix\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst organizationConformancePack = new aws_native.configuration.OrganizationConformancePack(\"organizationConformancePack\", {\n    organizationConformancePackName: \"OrganizationConformancePackName\",\n    deliveryS3Bucket: \"DeliveryS3Bucket\",\n    templateS3Uri: \"s3://bucketname/prefix\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\norganization_conformance_pack = aws_native.configuration.OrganizationConformancePack(\"organizationConformancePack\",\n    organization_conformance_pack_name=\"OrganizationConformancePackName\",\n    delivery_s3_bucket=\"DeliveryS3Bucket\",\n    template_s3_uri=\"s3://bucketname/prefix\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var organizationConformancePack = new AwsNative.Configuration.OrganizationConformancePack(\"organizationConformancePack\", new()\n    {\n        OrganizationConformancePackName = \"OrganizationConformancePackName\",\n        DeliveryS3Bucket = \"DeliveryS3Bucket\",\n        TemplateS3Uri = \"s3://bucketname/prefix\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/configuration\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := configuration.NewOrganizationConformancePack(ctx, \"organizationConformancePack\", \u0026configuration.OrganizationConformancePackArgs{\n\t\t\tOrganizationConformancePackName: pulumi.String(\"OrganizationConformancePackName\"),\n\t\t\tDeliveryS3Bucket:                pulumi.String(\"DeliveryS3Bucket\"),\n\t\t\tTemplateS3Uri:                   pulumi.String(\"s3://bucketname/prefix\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst organizationConformancePack = new aws_native.configuration.OrganizationConformancePack(\"organizationConformancePack\", {\n    organizationConformancePackName: \"OrganizationConformancePackName\",\n    deliveryS3Bucket: \"DeliveryS3Bucket\",\n    templateS3Uri: \"s3://bucketname/prefix\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\norganization_conformance_pack = aws_native.configuration.OrganizationConformancePack(\"organizationConformancePack\",\n    organization_conformance_pack_name=\"OrganizationConformancePackName\",\n    delivery_s3_bucket=\"DeliveryS3Bucket\",\n    template_s3_uri=\"s3://bucketname/prefix\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"conformancePackInputParameters":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:OrganizationConformancePackConformancePackInputParameter"},"description":"A list of ConformancePackInputParameter objects."},"deliveryS3Bucket":{"type":"string","description":"AWS Config stores intermediate files while processing conformance pack template."},"deliveryS3KeyPrefix":{"type":"string","description":"The prefix for the delivery S3 bucket."},"excludedAccounts":{"type":"array","items":{"type":"string"},"description":"A list of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack."},"organizationConformancePackName":{"type":"string","description":"The name of the organization conformance pack.","replaceOnChanges":true},"templateBody":{"type":"string","description":"A string containing full conformance pack template body."},"templateS3Uri":{"type":"string","description":"Location of file containing the template body."}},"type":"object","required":["organizationConformancePackName"],"inputProperties":{"conformancePackInputParameters":{"type":"array","items":{"$ref":"#/types/aws-native:configuration:OrganizationConformancePackConformancePackInputParameter"},"description":"A list of ConformancePackInputParameter objects."},"deliveryS3Bucket":{"type":"string","description":"AWS Config stores intermediate files while processing conformance pack template."},"deliveryS3KeyPrefix":{"type":"string","description":"The prefix for the delivery S3 bucket."},"excludedAccounts":{"type":"array","items":{"type":"string"},"description":"A list of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack."},"organizationConformancePackName":{"type":"string","description":"The name of the organization conformance pack."},"templateBody":{"type":"string","description":"A string containing full conformance pack template body."},"templateS3Uri":{"type":"string","description":"Location of file containing the template body."}}},"aws-native:configuration:StoredQuery":{"description":"Resource Type definition for AWS::Config::StoredQuery","properties":{"queryArn":{"type":"string","description":"Amazon Resource Name (ARN) of the query. For example, arn:partition:service:region:account-id:resource-type/resource-name/resource-id."},"queryDescription":{"type":"string","description":"A unique description for the query."},"queryExpression":{"type":"string","description":"The expression of the query. For example, `SELECT resourceId, resourceType, supplementaryConfiguration.BucketVersioningConfiguration.status WHERE resourceType = 'AWS::S3::Bucket' AND supplementaryConfiguration.BucketVersioningConfiguration.status = 'Off'.`"},"queryId":{"type":"string","description":"The ID of the query."},"queryName":{"type":"string","description":"The name of the query.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the stored query."}},"type":"object","required":["queryArn","queryExpression","queryId","queryName"],"inputProperties":{"queryDescription":{"type":"string","description":"A unique description for the query."},"queryExpression":{"type":"string","description":"The expression of the query. For example, `SELECT resourceId, resourceType, supplementaryConfiguration.BucketVersioningConfiguration.status WHERE resourceType = 'AWS::S3::Bucket' AND supplementaryConfiguration.BucketVersioningConfiguration.status = 'Off'.`"},"queryName":{"type":"string","description":"The name of the query."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the stored query."}},"requiredInputs":["queryExpression"]},"aws-native:connect:AgentStatus":{"description":"Resource Type definition for AWS::Connect::AgentStatus","properties":{"agentStatusArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the agent status."},"description":{"type":"string","description":"The description of the status."},"displayOrder":{"type":"integer","description":"The display order of the status."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"lastModifiedRegion":{"type":"string","description":"Last modified region."},"lastModifiedTime":{"type":"number","description":"Last modified time."},"name":{"type":"string","description":"The name of the status."},"resetOrderNumber":{"type":"boolean","description":"A number indicating the reset order of the agent status."},"state":{"$ref":"#/types/aws-native:connect:AgentStatusState","description":"The state of the status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:connect:AgentStatusType","description":"The type of agent status."}},"type":"object","required":["agentStatusArn","instanceArn","lastModifiedRegion","lastModifiedTime","name","state"],"inputProperties":{"description":{"type":"string","description":"The description of the status."},"displayOrder":{"type":"integer","description":"The display order of the status."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the status."},"resetOrderNumber":{"type":"boolean","description":"A number indicating the reset order of the agent status."},"state":{"$ref":"#/types/aws-native:connect:AgentStatusState","description":"The state of the status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:connect:AgentStatusType","description":"The type of agent status."}},"requiredInputs":["instanceArn","state"]},"aws-native:connect:ApprovedOrigin":{"description":"Resource Type definition for AWS::Connect::ApprovedOrigin\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var approvedOrigin = new AwsNative.Connect.ApprovedOrigin(\"approvedOrigin\", new()\n    {\n        InstanceId = \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n        Origin = \"https://aws.amazon.com\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewApprovedOrigin(ctx, \"approvedOrigin\", \u0026connect.ApprovedOriginArgs{\n\t\t\tInstanceId: pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\"),\n\t\t\tOrigin:     pulumi.String(\"https://aws.amazon.com\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst approvedOrigin = new aws_native.connect.ApprovedOrigin(\"approvedOrigin\", {\n    instanceId: \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    origin: \"https://aws.amazon.com\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\napproved_origin = aws_native.connect.ApprovedOrigin(\"approvedOrigin\",\n    instance_id=\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    origin=\"https://aws.amazon.com\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`","replaceOnChanges":true},"origin":{"type":"string","description":"Domain name to be added to the allow-list of the instance.\n\n*Maximum* : `267`","replaceOnChanges":true}},"type":"object","required":["instanceId","origin"],"inputProperties":{"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`"},"origin":{"type":"string","description":"Domain name to be added to the allow-list of the instance.\n\n*Maximum* : `267`"}},"requiredInputs":["instanceId","origin"]},"aws-native:connect:ContactFlow":{"description":"Resource Type definition for AWS::Connect::ContactFlow\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var flow = new AwsNative.Connect.ContactFlow(\"flow\", new()\n    {\n        Name = \"ExampleFlow\",\n        Description = \"flow created using cfn\",\n        InstanceArn = \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n        Type = AwsNative.Connect.ContactFlowType.ContactFlow,\n        Content = \"ExampleFlow content(JSON) using Amazon Connect Flow Language.\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"testkey\",\n                Value = \"testValue\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewContactFlow(ctx, \"flow\", \u0026connect.ContactFlowArgs{\n\t\t\tName:        pulumi.String(\"ExampleFlow\"),\n\t\t\tDescription: pulumi.String(\"flow created using cfn\"),\n\t\t\tInstanceArn: pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\"),\n\t\t\tType:        connect.ContactFlowTypeContactFlow,\n\t\t\tContent:     pulumi.String(\"ExampleFlow content(JSON) using Amazon Connect Flow Language.\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"testkey\"),\n\t\t\t\t\tValue: pulumi.String(\"testValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst flow = new aws_native.connect.ContactFlow(\"flow\", {\n    name: \"ExampleFlow\",\n    description: \"flow created using cfn\",\n    instanceArn: \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    type: aws_native.connect.ContactFlowType.ContactFlow,\n    content: \"ExampleFlow content(JSON) using Amazon Connect Flow Language.\",\n    tags: [{\n        key: \"testkey\",\n        value: \"testValue\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nflow = aws_native.connect.ContactFlow(\"flow\",\n    name=\"ExampleFlow\",\n    description=\"flow created using cfn\",\n    instance_arn=\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    type=aws_native.connect.ContactFlowType.CONTACT_FLOW,\n    content=\"ExampleFlow content(JSON) using Amazon Connect Flow Language.\",\n    tags=[{\n        \"key\": \"testkey\",\n        \"value\": \"testValue\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"contactFlowArn":{"type":"string","description":"The identifier of the contact flow (ARN)."},"content":{"type":"string","description":"The content of the contact flow in JSON format."},"description":{"type":"string","description":"The description of the contact flow."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance (ARN)."},"name":{"type":"string","description":"The name of the contact flow."},"state":{"$ref":"#/types/aws-native:connect:ContactFlowState","description":"The state of the contact flow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"type":{"$ref":"#/types/aws-native:connect:ContactFlowType","description":"The type of the contact flow.","replaceOnChanges":true}},"type":"object","required":["contactFlowArn","content","instanceArn","name","type"],"inputProperties":{"content":{"type":"string","description":"The content of the contact flow in JSON format."},"description":{"type":"string","description":"The description of the contact flow."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance (ARN)."},"name":{"type":"string","description":"The name of the contact flow."},"state":{"$ref":"#/types/aws-native:connect:ContactFlowState","description":"The state of the contact flow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"type":{"$ref":"#/types/aws-native:connect:ContactFlowType","description":"The type of the contact flow."}},"requiredInputs":["content","instanceArn","type"]},"aws-native:connect:ContactFlowModule":{"description":"Resource Type definition for AWS::Connect::ContactFlowModule.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var cf11 = new AwsNative.Connect.ContactFlowModule(\"cf11\", new()\n    {\n        Name = \"ExampleFlowModule\",\n        Description = \"flow module created using cfn\",\n        InstanceArn = \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n        Content = \"ExampleFlowModule content(JSON) using Amazon Connect Flow Language.\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"testkey\",\n                Value = \"testValue\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewContactFlowModule(ctx, \"cf11\", \u0026connect.ContactFlowModuleArgs{\n\t\t\tName:        pulumi.String(\"ExampleFlowModule\"),\n\t\t\tDescription: pulumi.String(\"flow module created using cfn\"),\n\t\t\tInstanceArn: pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\"),\n\t\t\tContent:     pulumi.String(\"ExampleFlowModule content(JSON) using Amazon Connect Flow Language.\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"testkey\"),\n\t\t\t\t\tValue: pulumi.String(\"testValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst cf11 = new aws_native.connect.ContactFlowModule(\"cf11\", {\n    name: \"ExampleFlowModule\",\n    description: \"flow module created using cfn\",\n    instanceArn: \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    content: \"ExampleFlowModule content(JSON) using Amazon Connect Flow Language.\",\n    tags: [{\n        key: \"testkey\",\n        value: \"testValue\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncf11 = aws_native.connect.ContactFlowModule(\"cf11\",\n    name=\"ExampleFlowModule\",\n    description=\"flow module created using cfn\",\n    instance_arn=\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    content=\"ExampleFlowModule content(JSON) using Amazon Connect Flow Language.\",\n    tags=[{\n        \"key\": \"testkey\",\n        \"value\": \"testValue\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"contactFlowModuleArn":{"type":"string","description":"The identifier of the contact flow module (ARN)."},"content":{"type":"string","description":"The content of the contact flow module in JSON format."},"description":{"type":"string","description":"The description of the contact flow module."},"externalInvocationConfiguration":{"$ref":"#/types/aws-native:connect:ExternalInvocationConfigurationProperties","description":"Defines the external invocation configuration of the flow module resource"},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance (ARN)."},"name":{"type":"string","description":"The name of the contact flow module."},"settings":{"type":"string","description":"The schema of the settings for contact flow module in JSON Schema V4 format."},"state":{"type":"string","description":"The state of the contact flow module."},"status":{"type":"string","description":"The status of the contact flow module."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["contactFlowModuleArn","content","instanceArn","name","status"],"inputProperties":{"content":{"type":"string","description":"The content of the contact flow module in JSON format."},"description":{"type":"string","description":"The description of the contact flow module."},"externalInvocationConfiguration":{"$ref":"#/types/aws-native:connect:ExternalInvocationConfigurationProperties","description":"Defines the external invocation configuration of the flow module resource"},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance (ARN)."},"name":{"type":"string","description":"The name of the contact flow module."},"settings":{"type":"string","description":"The schema of the settings for contact flow module in JSON Schema V4 format."},"state":{"type":"string","description":"The state of the contact flow module."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["content","instanceArn"]},"aws-native:connect:ContactFlowModuleAlias":{"description":"Resource Type definition for ContactFlowModuleAlias","properties":{"aliasId":{"type":"string","description":"The unique identifier of the alias."},"contactFlowModuleAliasArn":{"type":"string","description":"The identifier of the contact flow module alias (ARN). This is constructed from the ContactFlowModuleArn and AliasId."},"contactFlowModuleId":{"type":"string","description":"The identifier of the contact flow module (ARN) this alias is tied to.","replaceOnChanges":true},"contactFlowModuleVersion":{"type":"integer","description":"The version number of the contact flow module this alias points to."},"description":{"type":"string","description":"The description of the alias."},"name":{"type":"string","description":"The name of the alias."}},"type":"object","required":["aliasId","contactFlowModuleAliasArn","contactFlowModuleId","contactFlowModuleVersion","name"],"inputProperties":{"contactFlowModuleId":{"type":"string","description":"The identifier of the contact flow module (ARN) this alias is tied to."},"contactFlowModuleVersion":{"type":"integer","description":"The version number of the contact flow module this alias points to."},"description":{"type":"string","description":"The description of the alias."},"name":{"type":"string","description":"The name of the alias."}},"requiredInputs":["contactFlowModuleId","contactFlowModuleVersion"]},"aws-native:connect:ContactFlowModuleVersion":{"description":"Resource Type definition for ContactFlowModuleVersion","properties":{"contactFlowModuleId":{"type":"string","description":"The identifier of the contact flow module (ARN) this version is tied to.","replaceOnChanges":true},"contactFlowModuleVersionArn":{"type":"string","description":"The identifier of the contact flow module version (ARN)."},"description":{"type":"string","description":"The description of the version.","replaceOnChanges":true},"flowModuleContentSha256":{"type":"string","description":"Indicates the checksum value of the latest published flow module content"},"version":{"type":"integer","description":"The version number of this revision"}},"type":"object","required":["contactFlowModuleId","contactFlowModuleVersionArn","flowModuleContentSha256","version"],"inputProperties":{"contactFlowModuleId":{"type":"string","description":"The identifier of the contact flow module (ARN) this version is tied to."},"description":{"type":"string","description":"The description of the version."}},"requiredInputs":["contactFlowModuleId"]},"aws-native:connect:ContactFlowVersion":{"description":"Resource Type Definition for ContactFlowVersion","properties":{"contactFlowId":{"type":"string","description":"The ARN of the contact flow this version is tied to.","replaceOnChanges":true},"contactFlowVersionArn":{"type":"string","description":"The identifier of the contact flow version (ARN)."},"description":{"type":"string","description":"The description of the version.","replaceOnChanges":true},"flowContentSha256":{"type":"string","description":"Indicates the checksum value of the latest published flow content"},"version":{"type":"integer","description":"The version number of this revision"}},"type":"object","required":["contactFlowId","contactFlowVersionArn","flowContentSha256","version"],"inputProperties":{"contactFlowId":{"type":"string","description":"The ARN of the contact flow this version is tied to."},"description":{"type":"string","description":"The description of the version."}},"requiredInputs":["contactFlowId"]},"aws-native:connect:DataTable":{"description":"Resource Type definition for AWS::Connect::DataTable","properties":{"arn":{"type":"string","description":"The arn of the Data Table"},"createdTime":{"type":"number","description":"The creation time of the Data Table"},"description":{"type":"string","description":"The description of the Data Table."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance.","replaceOnChanges":true},"lastModifiedRegion":{"type":"string","description":"Last modified region."},"lastModifiedTime":{"type":"number","description":"Last modified time."},"lockVersion":{"$ref":"#/types/aws-native:connect:LockVersionProperties","description":"The lock version of the Data Table"},"name":{"type":"string","description":"The name of the Data Table"},"status":{"$ref":"#/types/aws-native:connect:DataTableStatus","description":"The status of the Data Table","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"timeZone":{"type":"string","description":"The time zone of the Data Table"},"valueLockLevel":{"$ref":"#/types/aws-native:connect:DataTableValueLockLevel","description":"The value lock level of the Data Table"}},"type":"object","required":["arn","createdTime","lastModifiedRegion","lastModifiedTime","lockVersion"],"inputProperties":{"description":{"type":"string","description":"The description of the Data Table."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the Data Table"},"status":{"$ref":"#/types/aws-native:connect:DataTableStatus","description":"The status of the Data Table"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"timeZone":{"type":"string","description":"The time zone of the Data Table"},"valueLockLevel":{"$ref":"#/types/aws-native:connect:DataTableValueLockLevel","description":"The value lock level of the Data Table"}}},"aws-native:connect:DataTableAttribute":{"description":"Resource Type definition for AWS::Connect::DataTableAttribute","properties":{"attributeId":{"type":"string","description":"The unique identifier for the attribute within the data table."},"dataTableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data table that contains this attribute.","replaceOnChanges":true},"description":{"type":"string","description":"An optional description explaining the purpose and usage of this attribute."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.","replaceOnChanges":true},"lastModifiedRegion":{"type":"string","description":"The AWS Region where this attribute was last modified, used for region replication."},"lastModifiedTime":{"type":"number","description":"The timestamp when this attribute was last modified."},"lockVersion":{"$ref":"#/types/aws-native:connect:LockVersionProperties"},"name":{"type":"string","description":"The human-readable name of the attribute. Must be unique within the data table and conform to Connect naming standards."},"primary":{"type":"boolean","description":"Boolean indicating whether this attribute is used as a primary key for record identification. Primary attributes must have unique value combinations and cannot contain expressions."},"validation":{"$ref":"#/types/aws-native:connect:ValidationProperties","description":"The validation rules applied to values of this attribute. Based on JSON Schema Draft 2020-12 with additional Connect-specific validations for data integrity."},"valueType":{"$ref":"#/types/aws-native:connect:DataTableAttributeValueType","description":"The type of value allowed for this attribute. Must be one of TEXT, TEXT_LIST, NUMBER, NUMBER_LIST, or BOOLEAN. Determines how values are validated and processed."}},"type":"object","required":["attributeId","lastModifiedRegion","lastModifiedTime","lockVersion"],"inputProperties":{"dataTableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data table that contains this attribute."},"description":{"type":"string","description":"An optional description explaining the purpose and usage of this attribute."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."},"name":{"type":"string","description":"The human-readable name of the attribute. Must be unique within the data table and conform to Connect naming standards."},"primary":{"type":"boolean","description":"Boolean indicating whether this attribute is used as a primary key for record identification. Primary attributes must have unique value combinations and cannot contain expressions."},"validation":{"$ref":"#/types/aws-native:connect:ValidationProperties","description":"The validation rules applied to values of this attribute. Based on JSON Schema Draft 2020-12 with additional Connect-specific validations for data integrity."},"valueType":{"$ref":"#/types/aws-native:connect:DataTableAttributeValueType","description":"The type of value allowed for this attribute. Must be one of TEXT, TEXT_LIST, NUMBER, NUMBER_LIST, or BOOLEAN. Determines how values are validated and processed."}}},"aws-native:connect:DataTableRecord":{"description":"Resource Type definition for AWS::Connect::DataTableRecord","properties":{"dataTableArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the data table. Does not include version aliases.","replaceOnChanges":true},"dataTableRecord":{"$ref":"#/types/aws-native:connect:DataTableRecordProperties","language":{"csharp":{"name":"DataTableRecordValue"}}},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.","replaceOnChanges":true},"recordId":{"type":"string"}},"type":"object","required":["recordId"],"inputProperties":{"dataTableArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the data table. Does not include version aliases."},"dataTableRecord":{"$ref":"#/types/aws-native:connect:DataTableRecordProperties","language":{"csharp":{"name":"DataTableRecordValue"}}},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."}}},"aws-native:connect:EmailAddress":{"description":"Resource Type definition for AWS::Connect::EmailAddress","properties":{"aliasConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EmailAddressAliasConfiguration"},"description":"List of alias configurations for the email address"},"description":{"type":"string","description":"A description for the email address."},"displayName":{"type":"string","description":"The display name for the email address."},"emailAddress":{"type":"string","description":"Email address to be created for this instance","language":{"csharp":{"name":"EmailAddressValue"}},"replaceOnChanges":true},"emailAddressArn":{"type":"string","description":"The identifier of the email address."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["emailAddress","emailAddressArn","instanceArn"],"inputProperties":{"aliasConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EmailAddressAliasConfiguration"},"description":"List of alias configurations for the email address"},"description":{"type":"string","description":"A description for the email address."},"displayName":{"type":"string","description":"The display name for the email address."},"emailAddress":{"type":"string","description":"Email address to be created for this instance","language":{"csharp":{"name":"EmailAddressValue"}}},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["emailAddress","instanceArn"]},"aws-native:connect:EvaluationForm":{"description":"Creates an evaluation form for the specified CON instance.","properties":{"autoEvaluationConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormAutoEvaluationConfiguration","description":"The automatic evaluation configuration of an evaluation form."},"description":{"type":"string","description":"The description of the evaluation form.\n *Length Constraints*: Minimum length of 0. Maximum length of 1024."},"evaluationFormArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the evaluation form."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"items":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormBaseItem"},"description":"Items that are part of the evaluation form. The total number of sections and questions must not exceed 100 each. Questions must be contained in a section.\n *Minimum size*: 1\n *Maximum size*: 100"},"languageConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormLanguageConfiguration","description":"Configuration for language settings of this evaluation form."},"reviewConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormEvaluationReviewConfiguration","description":"Configuration for evaluation review settings of this evaluation form."},"scoringStrategy":{"$ref":"#/types/aws-native:connect:EvaluationFormScoringStrategy","description":"A scoring strategy of the evaluation form."},"status":{"$ref":"#/types/aws-native:connect:EvaluationFormStatus","description":"The status of the evaluation form.\n *Allowed values*: ``DRAFT`` | ``ACTIVE``"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"targetConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormTargetConfiguration","description":"Configuration that specifies the target for this evaluation form."},"title":{"type":"string","description":"A title of the evaluation form."}},"type":"object","required":["evaluationFormArn","instanceArn","items","status","title"],"inputProperties":{"autoEvaluationConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormAutoEvaluationConfiguration","description":"The automatic evaluation configuration of an evaluation form."},"description":{"type":"string","description":"The description of the evaluation form.\n *Length Constraints*: Minimum length of 0. Maximum length of 1024."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"items":{"type":"array","items":{"$ref":"#/types/aws-native:connect:EvaluationFormBaseItem"},"description":"Items that are part of the evaluation form. The total number of sections and questions must not exceed 100 each. Questions must be contained in a section.\n *Minimum size*: 1\n *Maximum size*: 100"},"languageConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormLanguageConfiguration","description":"Configuration for language settings of this evaluation form."},"reviewConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormEvaluationReviewConfiguration","description":"Configuration for evaluation review settings of this evaluation form."},"scoringStrategy":{"$ref":"#/types/aws-native:connect:EvaluationFormScoringStrategy","description":"A scoring strategy of the evaluation form."},"status":{"$ref":"#/types/aws-native:connect:EvaluationFormStatus","description":"The status of the evaluation form.\n *Allowed values*: ``DRAFT`` | ``ACTIVE``"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"targetConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormTargetConfiguration","description":"Configuration that specifies the target for this evaluation form."},"title":{"type":"string","description":"A title of the evaluation form."}},"requiredInputs":["instanceArn","items","status","title"]},"aws-native:connect:HoursOfOperation":{"description":"Resource Type definition for AWS::Connect::HoursOfOperation\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var hoursOfOperation = new AwsNative.Connect.HoursOfOperation(\"hoursOfOperation\", new()\n    {\n        Name = \"ExampleHoursOfOperation\",\n        Description = \"hours of operation created using cfn\",\n        InstanceArn = \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n        TimeZone = \"Pacific/Midway\",\n        Config = new[]\n        {\n            new AwsNative.Connect.Inputs.HoursOfOperationConfigArgs\n            {\n                Day = AwsNative.Connect.HoursOfOperationConfigDay.Sunday,\n                EndTime = new AwsNative.Connect.Inputs.HoursOfOperationTimeSliceArgs\n                {\n                    Hours = 11,\n                    Minutes = 59,\n                },\n                StartTime = new AwsNative.Connect.Inputs.HoursOfOperationTimeSliceArgs\n                {\n                    Hours = 10,\n                    Minutes = 1,\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"tagKey\",\n                Value = \"tagValue\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewHoursOfOperation(ctx, \"hoursOfOperation\", \u0026connect.HoursOfOperationArgs{\n\t\t\tName:        pulumi.String(\"ExampleHoursOfOperation\"),\n\t\t\tDescription: pulumi.String(\"hours of operation created using cfn\"),\n\t\t\tInstanceArn: pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\"),\n\t\t\tTimeZone:    pulumi.String(\"Pacific/Midway\"),\n\t\t\tConfig: connect.HoursOfOperationConfigArray{\n\t\t\t\t\u0026connect.HoursOfOperationConfigArgs{\n\t\t\t\t\tDay: connect.HoursOfOperationConfigDaySunday,\n\t\t\t\t\tEndTime: \u0026connect.HoursOfOperationTimeSliceArgs{\n\t\t\t\t\t\tHours:   pulumi.Int(11),\n\t\t\t\t\t\tMinutes: pulumi.Int(59),\n\t\t\t\t\t},\n\t\t\t\t\tStartTime: \u0026connect.HoursOfOperationTimeSliceArgs{\n\t\t\t\t\t\tHours:   pulumi.Int(10),\n\t\t\t\t\t\tMinutes: pulumi.Int(1),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"tagKey\"),\n\t\t\t\t\tValue: pulumi.String(\"tagValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst hoursOfOperation = new aws_native.connect.HoursOfOperation(\"hoursOfOperation\", {\n    name: \"ExampleHoursOfOperation\",\n    description: \"hours of operation created using cfn\",\n    instanceArn: \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    timeZone: \"Pacific/Midway\",\n    config: [{\n        day: aws_native.connect.HoursOfOperationConfigDay.Sunday,\n        endTime: {\n            hours: 11,\n            minutes: 59,\n        },\n        startTime: {\n            hours: 10,\n            minutes: 1,\n        },\n    }],\n    tags: [{\n        key: \"tagKey\",\n        value: \"tagValue\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nhours_of_operation = aws_native.connect.HoursOfOperation(\"hoursOfOperation\",\n    name=\"ExampleHoursOfOperation\",\n    description=\"hours of operation created using cfn\",\n    instance_arn=\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    time_zone=\"Pacific/Midway\",\n    config=[{\n        \"day\": aws_native.connect.HoursOfOperationConfigDay.SUNDAY,\n        \"end_time\": {\n            \"hours\": 11,\n            \"minutes\": 59,\n        },\n        \"start_time\": {\n            \"hours\": 10,\n            \"minutes\": 1,\n        },\n    }],\n    tags=[{\n        \"key\": \"tagKey\",\n        \"value\": \"tagValue\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"childHoursOfOperations":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationsIdentifier"},"description":"List of child hours of operations."},"config":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationConfig"},"description":"Configuration information for the hours of operation: day, start time, and end time."},"description":{"type":"string","description":"The description of the hours of operation."},"hoursOfOperationArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the hours of operation."},"hoursOfOperationOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverride"},"description":"One or more hours of operation overrides assigned to an hour of operation."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the hours of operation."},"parentHoursOfOperations":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationsIdentifier"},"description":"List of parent hours of operations."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"timeZone":{"type":"string","description":"The time zone of the hours of operation."}},"type":"object","required":["config","hoursOfOperationArn","instanceArn","name","timeZone"],"inputProperties":{"childHoursOfOperations":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationsIdentifier"},"description":"List of child hours of operations."},"config":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationConfig"},"description":"Configuration information for the hours of operation: day, start time, and end time."},"description":{"type":"string","description":"The description of the hours of operation."},"hoursOfOperationOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverride"},"description":"One or more hours of operation overrides assigned to an hour of operation."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the hours of operation."},"parentHoursOfOperations":{"type":"array","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationsIdentifier"},"description":"List of parent hours of operations."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"timeZone":{"type":"string","description":"The time zone of the hours of operation."}},"requiredInputs":["config","instanceArn","timeZone"]},"aws-native:connect:Instance":{"description":"Resource Type definition for AWS::Connect::Instance","properties":{"arn":{"type":"string","description":"An instanceArn is automatically generated on creation based on instanceId."},"attributes":{"$ref":"#/types/aws-native:connect:InstanceAttributes","description":"The attributes for the instance."},"awsId":{"type":"string","description":"An instanceId is automatically generated on creation and assigned as the unique identifier."},"createdTime":{"type":"string","description":"Timestamp of instance creation logged as part of instance creation."},"directoryId":{"type":"string","description":"Existing directoryId user wants to map to the new Connect instance.","replaceOnChanges":true},"identityManagementType":{"$ref":"#/types/aws-native:connect:InstanceIdentityManagementType","description":"Specifies the type of directory integration for new instance.","replaceOnChanges":true},"instanceAlias":{"type":"string","description":"Alias of the new directory created as part of new instance creation.","replaceOnChanges":true},"instanceStatus":{"$ref":"#/types/aws-native:connect:InstanceStatus","description":"Specifies the creation status of new instance."},"serviceRole":{"type":"string","description":"Service linked role created as part of instance creation."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","attributes","awsId","createdTime","identityManagementType","instanceStatus","serviceRole"],"inputProperties":{"attributes":{"$ref":"#/types/aws-native:connect:InstanceAttributes","description":"The attributes for the instance."},"directoryId":{"type":"string","description":"Existing directoryId user wants to map to the new Connect instance."},"identityManagementType":{"$ref":"#/types/aws-native:connect:InstanceIdentityManagementType","description":"Specifies the type of directory integration for new instance."},"instanceAlias":{"type":"string","description":"Alias of the new directory created as part of new instance creation."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["attributes","identityManagementType"]},"aws-native:connect:InstanceStorageConfig":{"description":"Resource Type definition for AWS::Connect::InstanceStorageConfig","properties":{"associationId":{"type":"string","description":"The existing association identifier that uniquely identifies the resource type and storage config for the given instance ID."},"instanceArn":{"type":"string","description":"Connect Instance ID with which the storage config will be associated","replaceOnChanges":true},"kinesisFirehoseConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisFirehoseConfig","description":"The configuration of the Kinesis Firehose delivery stream."},"kinesisStreamConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisStreamConfig","description":"The configuration of the Kinesis data stream."},"kinesisVideoStreamConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisVideoStreamConfig","description":"The configuration of the Kinesis video stream."},"resourceType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigInstanceStorageResourceType","description":"A valid resource type. Following are the valid resource types: `CHAT_TRANSCRIPTS` | `CALL_RECORDINGS` | `SCHEDULED_REPORTS` | `MEDIA_STREAMS` | `CONTACT_TRACE_RECORDS` | `AGENT_EVENTS`","replaceOnChanges":true},"s3Config":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigS3Config","description":"The S3 bucket configuration."},"storageType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigStorageType","description":"A valid storage type."}},"type":"object","required":["associationId","instanceArn","resourceType","storageType"],"inputProperties":{"instanceArn":{"type":"string","description":"Connect Instance ID with which the storage config will be associated"},"kinesisFirehoseConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisFirehoseConfig","description":"The configuration of the Kinesis Firehose delivery stream."},"kinesisStreamConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisStreamConfig","description":"The configuration of the Kinesis data stream."},"kinesisVideoStreamConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisVideoStreamConfig","description":"The configuration of the Kinesis video stream."},"resourceType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigInstanceStorageResourceType","description":"A valid resource type. Following are the valid resource types: `CHAT_TRANSCRIPTS` | `CALL_RECORDINGS` | `SCHEDULED_REPORTS` | `MEDIA_STREAMS` | `CONTACT_TRACE_RECORDS` | `AGENT_EVENTS`"},"s3Config":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigS3Config","description":"The S3 bucket configuration."},"storageType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigStorageType","description":"A valid storage type."}},"requiredInputs":["instanceArn","resourceType","storageType"]},"aws-native:connect:IntegrationAssociation":{"description":"Resource Type definition for AWS::Connect::IntegrationAssociation\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var integrationAssociation = new AwsNative.Connect.IntegrationAssociation(\"integrationAssociation\", new()\n    {\n        InstanceId = \"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n        IntegrationType = AwsNative.Connect.IntegrationAssociationIntegrationType.LexBot,\n        IntegrationArn = \"arn:aws:lex:region-name:aws-account-id:bot/bot-name\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewIntegrationAssociation(ctx, \"integrationAssociation\", \u0026connect.IntegrationAssociationArgs{\n\t\t\tInstanceId:      pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-id\"),\n\t\t\tIntegrationType: connect.IntegrationAssociationIntegrationTypeLexBot,\n\t\t\tIntegrationArn:  pulumi.String(\"arn:aws:lex:region-name:aws-account-id:bot/bot-name\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst integrationAssociation = new aws_native.connect.IntegrationAssociation(\"integrationAssociation\", {\n    instanceId: \"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n    integrationType: aws_native.connect.IntegrationAssociationIntegrationType.LexBot,\n    integrationArn: \"arn:aws:lex:region-name:aws-account-id:bot/bot-name\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nintegration_association = aws_native.connect.IntegrationAssociation(\"integrationAssociation\",\n    instance_id=\"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n    integration_type=aws_native.connect.IntegrationAssociationIntegrationType.LEX_BOT,\n    integration_arn=\"arn:aws:lex:region-name:aws-account-id:bot/bot-name\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var integrationAssociation = new AwsNative.Connect.IntegrationAssociation(\"integrationAssociation\", new()\n    {\n        InstanceId = \"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n        IntegrationType = AwsNative.Connect.IntegrationAssociationIntegrationType.LexBot,\n        IntegrationArn = \"arn:aws:lex:region-name:aws-account-id:bot-alias/bot-id/alias-id\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewIntegrationAssociation(ctx, \"integrationAssociation\", \u0026connect.IntegrationAssociationArgs{\n\t\t\tInstanceId:      pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-id\"),\n\t\t\tIntegrationType: connect.IntegrationAssociationIntegrationTypeLexBot,\n\t\t\tIntegrationArn:  pulumi.String(\"arn:aws:lex:region-name:aws-account-id:bot-alias/bot-id/alias-id\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst integrationAssociation = new aws_native.connect.IntegrationAssociation(\"integrationAssociation\", {\n    instanceId: \"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n    integrationType: aws_native.connect.IntegrationAssociationIntegrationType.LexBot,\n    integrationArn: \"arn:aws:lex:region-name:aws-account-id:bot-alias/bot-id/alias-id\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nintegration_association = aws_native.connect.IntegrationAssociation(\"integrationAssociation\",\n    instance_id=\"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n    integration_type=aws_native.connect.IntegrationAssociationIntegrationType.LEX_BOT,\n    integration_arn=\"arn:aws:lex:region-name:aws-account-id:bot-alias/bot-id/alias-id\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var integrationAssociation = new AwsNative.Connect.IntegrationAssociation(\"integrationAssociation\", new()\n    {\n        InstanceId = \"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n        IntegrationType = AwsNative.Connect.IntegrationAssociationIntegrationType.LambdaFunction,\n        IntegrationArn = \"arn:aws:lambda:region-name:aws-account-id:function:function-arn\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewIntegrationAssociation(ctx, \"integrationAssociation\", \u0026connect.IntegrationAssociationArgs{\n\t\t\tInstanceId:      pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-id\"),\n\t\t\tIntegrationType: connect.IntegrationAssociationIntegrationTypeLambdaFunction,\n\t\t\tIntegrationArn:  pulumi.String(\"arn:aws:lambda:region-name:aws-account-id:function:function-arn\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst integrationAssociation = new aws_native.connect.IntegrationAssociation(\"integrationAssociation\", {\n    instanceId: \"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n    integrationType: aws_native.connect.IntegrationAssociationIntegrationType.LambdaFunction,\n    integrationArn: \"arn:aws:lambda:region-name:aws-account-id:function:function-arn\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nintegration_association = aws_native.connect.IntegrationAssociation(\"integrationAssociation\",\n    instance_id=\"arn:aws:connect:region-name:aws-account-id:instance/instance-id\",\n    integration_type=aws_native.connect.IntegrationAssociationIntegrationType.LAMBDA_FUNCTION,\n    integration_arn=\"arn:aws:lambda:region-name:aws-account-id:function:function-arn\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`","replaceOnChanges":true},"integrationArn":{"type":"string","description":"ARN of the integration being associated with the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `140`","replaceOnChanges":true},"integrationAssociationId":{"type":"string","description":"Identifier of the association with an Amazon Connect instance."},"integrationType":{"$ref":"#/types/aws-native:connect:IntegrationAssociationIntegrationType","description":"Specifies the integration type to be associated with the instance.\n\n*Allowed Values* : `LEX_BOT` | `LAMBDA_FUNCTION`","replaceOnChanges":true}},"type":"object","required":["instanceId","integrationArn","integrationAssociationId","integrationType"],"inputProperties":{"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`"},"integrationArn":{"type":"string","description":"ARN of the integration being associated with the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `140`"},"integrationType":{"$ref":"#/types/aws-native:connect:IntegrationAssociationIntegrationType","description":"Specifies the integration type to be associated with the instance.\n\n*Allowed Values* : `LEX_BOT` | `LAMBDA_FUNCTION`"}},"requiredInputs":["instanceId","integrationArn","integrationType"]},"aws-native:connect:Notification":{"description":"Resource Type definition for AWS::Connect::Notification","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the notification."},"awsId":{"type":"string","description":"The identifier of the notification."},"content":{"$ref":"#/types/aws-native:connect:NotificationContent","description":"The content of the notification."},"createdAt":{"type":"string","description":"The time a notification was created"},"expiresAt":{"type":"string","description":"The time a notification will expire","replaceOnChanges":true},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance.","replaceOnChanges":true},"priority":{"$ref":"#/types/aws-native:connect:NotificationPriority","description":"The priority of the notification.","replaceOnChanges":true},"recipients":{"type":"array","items":{"type":"string"},"description":"The recipients of the notification.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["arn","awsId","content","createdAt","instanceArn"],"inputProperties":{"content":{"$ref":"#/types/aws-native:connect:NotificationContent","description":"The content of the notification."},"expiresAt":{"type":"string","description":"The time a notification will expire"},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"priority":{"$ref":"#/types/aws-native:connect:NotificationPriority","description":"The priority of the notification."},"recipients":{"type":"array","items":{"type":"string"},"description":"The recipients of the notification."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["content","instanceArn"]},"aws-native:connect:PhoneNumber":{"description":"Resource Type definition for AWS::Connect::PhoneNumber","properties":{"address":{"type":"string","description":"The phone number e164 address."},"countryCode":{"type":"string","description":"The phone number country code.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the phone number."},"phoneNumberArn":{"type":"string","description":"The phone number ARN"},"prefix":{"type":"string","description":"The phone number prefix.","replaceOnChanges":true},"sourcePhoneNumberArn":{"type":"string","description":"The source phone number arn.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"targetArn":{"type":"string","description":"The ARN of the target the phone number is claimed to."},"type":{"type":"string","description":"The phone number type","replaceOnChanges":true}},"type":"object","required":["address","phoneNumberArn","targetArn"],"inputProperties":{"countryCode":{"type":"string","description":"The phone number country code."},"description":{"type":"string","description":"The description of the phone number."},"prefix":{"type":"string","description":"The phone number prefix."},"sourcePhoneNumberArn":{"type":"string","description":"The source phone number arn."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"targetArn":{"type":"string","description":"The ARN of the target the phone number is claimed to."},"type":{"type":"string","description":"The phone number type"}},"requiredInputs":["targetArn"]},"aws-native:connect:PredefinedAttribute":{"description":"Resource Type definition for AWS::Connect::PredefinedAttribute","properties":{"attributeConfiguration":{"$ref":"#/types/aws-native:connect:AttributeConfigurationProperties","description":"Custom metadata associated to a Predefined attribute that controls how the attribute behaves when used by upstream services."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance.","replaceOnChanges":true},"lastModifiedRegion":{"type":"string","description":"Last modified region."},"lastModifiedTime":{"type":"number","description":"Last modified time."},"name":{"type":"string","description":"The name of the predefined attribute.","replaceOnChanges":true},"purposes":{"type":"array","items":{"type":"string"},"description":"The assigned purposes of the predefined attribute."},"values":{"$ref":"#/types/aws-native:connect:ValuesProperties","description":"The values of a predefined attribute."}},"type":"object","required":["instanceArn","lastModifiedRegion","lastModifiedTime","name"],"inputProperties":{"attributeConfiguration":{"$ref":"#/types/aws-native:connect:AttributeConfigurationProperties","description":"Custom metadata associated to a Predefined attribute that controls how the attribute behaves when used by upstream services."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the predefined attribute."},"purposes":{"type":"array","items":{"type":"string"},"description":"The assigned purposes of the predefined attribute."},"values":{"$ref":"#/types/aws-native:connect:ValuesProperties","description":"The values of a predefined attribute."}},"requiredInputs":["instanceArn"]},"aws-native:connect:Prompt":{"description":"Resource Type definition for AWS::Connect::Prompt","properties":{"description":{"type":"string","description":"The description of the prompt."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the prompt."},"promptArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the prompt."},"s3Uri":{"type":"string","description":"S3 URI of the customer's audio file for creating prompts resource.."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["instanceArn","name","promptArn"],"inputProperties":{"description":{"type":"string","description":"The description of the prompt."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the prompt."},"s3Uri":{"type":"string","description":"S3 URI of the customer's audio file for creating prompts resource.."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["instanceArn"]},"aws-native:connect:Queue":{"description":"Resource Type definition for AWS::Connect::Queue","properties":{"additionalEmailAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:connect:QueueEmailAddress"},"description":"The email addresses that agents can use when replying to or initiating email contacts"},"description":{"type":"string","description":"The description of the queue."},"hoursOfOperationArn":{"type":"string","description":"The identifier for the hours of operation."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"maxContacts":{"type":"integer","description":"The maximum number of contacts that can be in the queue before it is considered full."},"name":{"type":"string","description":"The name of the queue."},"outboundCallerConfig":{"$ref":"#/types/aws-native:connect:QueueOutboundCallerConfig","description":"The outbound caller ID name, number, and outbound whisper flow."},"outboundEmailConfig":{"$ref":"#/types/aws-native:connect:QueueOutboundEmailConfig","description":"The outbound email address ID."},"queueArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the queue."},"quickConnectArns":{"type":"array","items":{"type":"string"},"description":"The quick connects available to agents who are working the queue."},"status":{"$ref":"#/types/aws-native:connect:QueueStatus","description":"The status of the queue."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:connect:QueueType","description":"The type of queue."}},"type":"object","required":["hoursOfOperationArn","instanceArn","name","queueArn","type"],"inputProperties":{"additionalEmailAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:connect:QueueEmailAddress"},"description":"The email addresses that agents can use when replying to or initiating email contacts"},"description":{"type":"string","description":"The description of the queue."},"hoursOfOperationArn":{"type":"string","description":"The identifier for the hours of operation."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"maxContacts":{"type":"integer","description":"The maximum number of contacts that can be in the queue before it is considered full."},"name":{"type":"string","description":"The name of the queue."},"outboundCallerConfig":{"$ref":"#/types/aws-native:connect:QueueOutboundCallerConfig","description":"The outbound caller ID name, number, and outbound whisper flow."},"outboundEmailConfig":{"$ref":"#/types/aws-native:connect:QueueOutboundEmailConfig","description":"The outbound email address ID."},"quickConnectArns":{"type":"array","items":{"type":"string"},"description":"The quick connects available to agents who are working the queue."},"status":{"$ref":"#/types/aws-native:connect:QueueStatus","description":"The status of the queue."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["hoursOfOperationArn","instanceArn"]},"aws-native:connect:QuickConnect":{"description":"Resource Type definition for AWS::Connect::QuickConnect","properties":{"description":{"type":"string","description":"The description of the quick connect."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the quick connect."},"quickConnectArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the quick connect."},"quickConnectConfig":{"$ref":"#/types/aws-native:connect:QuickConnectConfig","description":"Configuration settings for the quick connect."},"quickConnectType":{"$ref":"#/types/aws-native:connect:QuickConnectType","description":"The type of quick connect. In the Amazon Connect console, when you create a quick connect, you are prompted to assign one of the following types: Agent (USER), External (PHONE_NUMBER), or Queue (QUEUE)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["instanceArn","name","quickConnectArn","quickConnectConfig","quickConnectType"],"inputProperties":{"description":{"type":"string","description":"The description of the quick connect."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the quick connect."},"quickConnectConfig":{"$ref":"#/types/aws-native:connect:QuickConnectConfig","description":"Configuration settings for the quick connect."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["instanceArn","quickConnectConfig"]},"aws-native:connect:RoutingProfile":{"description":"Resource Type definition for AWS::Connect::RoutingProfile","properties":{"agentAvailabilityTimer":{"$ref":"#/types/aws-native:connect:RoutingProfileAgentAvailabilityTimer","description":"Whether agents with this routing profile will have their routing order calculated based on longest idle time or time since their last inbound contact."},"defaultOutboundQueueArn":{"type":"string","description":"The identifier of the default outbound queue for this routing profile."},"description":{"type":"string","description":"The description of the routing profile."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"manualAssignmentQueueConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RoutingProfileManualAssignmentQueueConfig"},"description":"The manual assignment queues to associate with this routing profile."},"mediaConcurrencies":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RoutingProfileMediaConcurrency"},"description":"The channels agents can handle in the Contact Control Panel (CCP) for this routing profile."},"name":{"type":"string","description":"The name of the routing profile."},"queueConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RoutingProfileQueueConfig"},"description":"The queues to associate with this routing profile."},"routingProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the routing profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["defaultOutboundQueueArn","description","instanceArn","mediaConcurrencies","name","routingProfileArn"],"inputProperties":{"agentAvailabilityTimer":{"$ref":"#/types/aws-native:connect:RoutingProfileAgentAvailabilityTimer","description":"Whether agents with this routing profile will have their routing order calculated based on longest idle time or time since their last inbound contact."},"defaultOutboundQueueArn":{"type":"string","description":"The identifier of the default outbound queue for this routing profile."},"description":{"type":"string","description":"The description of the routing profile."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"manualAssignmentQueueConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RoutingProfileManualAssignmentQueueConfig"},"description":"The manual assignment queues to associate with this routing profile."},"mediaConcurrencies":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RoutingProfileMediaConcurrency"},"description":"The channels agents can handle in the Contact Control Panel (CCP) for this routing profile."},"name":{"type":"string","description":"The name of the routing profile."},"queueConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:RoutingProfileQueueConfig"},"description":"The queues to associate with this routing profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["defaultOutboundQueueArn","description","instanceArn","mediaConcurrencies"]},"aws-native:connect:Rule":{"description":"Creates a rule for the specified CON instance.","properties":{"actions":{"$ref":"#/types/aws-native:connect:RuleActions","description":"A list of actions to be run when the rule is triggered."},"function":{"type":"string","description":"The conditions of the rule."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the rule."},"publishStatus":{"$ref":"#/types/aws-native:connect:RulePublishStatus","description":"The publish status of the rule.\n *Allowed values*: ``DRAFT`` | ``PUBLISHED``"},"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"triggerEventSource":{"$ref":"#/types/aws-native:connect:RuleTriggerEventSource","description":"The event source to trigger the rule.","replaceOnChanges":true}},"type":"object","required":["actions","function","instanceArn","name","publishStatus","ruleArn","triggerEventSource"],"inputProperties":{"actions":{"$ref":"#/types/aws-native:connect:RuleActions","description":"A list of actions to be run when the rule is triggered."},"function":{"type":"string","description":"The conditions of the rule."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."},"name":{"type":"string","description":"The name of the rule."},"publishStatus":{"$ref":"#/types/aws-native:connect:RulePublishStatus","description":"The publish status of the rule.\n *Allowed values*: ``DRAFT`` | ``PUBLISHED``"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"triggerEventSource":{"$ref":"#/types/aws-native:connect:RuleTriggerEventSource","description":"The event source to trigger the rule."}},"requiredInputs":["actions","function","instanceArn","publishStatus","triggerEventSource"]},"aws-native:connect:SecurityKey":{"description":"Resource Type definition for AWS::Connect::SecurityKey\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var securityKey = new AwsNative.Connect.SecurityKey(\"securityKey\", new()\n    {\n        InstanceId = \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n        Key = \"valid-pem-key\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/connect\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := connect.NewSecurityKey(ctx, \"securityKey\", \u0026connect.SecurityKeyArgs{\n\t\t\tInstanceId: pulumi.String(\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\"),\n\t\t\tKey:        pulumi.String(\"valid-pem-key\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst securityKey = new aws_native.connect.SecurityKey(\"securityKey\", {\n    instanceId: \"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    key: \"valid-pem-key\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsecurity_key = aws_native.connect.SecurityKey(\"securityKey\",\n    instance_id=\"arn:aws:connect:region-name:aws-account-id:instance/instance-arn\",\n    key=\"valid-pem-key\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"associationId":{"type":"string","description":"An `AssociationId` is automatically generated when a storage config is associated with an instance."},"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`","replaceOnChanges":true},"key":{"type":"string","description":"A valid security key in PEM format. For example:\n\n`\"-----BEGIN PUBLIC KEY-----\\ [a lot of characters] ----END PUBLIC KEY-----\"`\n\n*Minimum* : `1`\n\n*Maximum* : `1024`","replaceOnChanges":true}},"type":"object","required":["associationId","instanceId","key"],"inputProperties":{"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`"},"key":{"type":"string","description":"A valid security key in PEM format. For example:\n\n`\"-----BEGIN PUBLIC KEY-----\\ [a lot of characters] ----END PUBLIC KEY-----\"`\n\n*Minimum* : `1`\n\n*Maximum* : `1024`"}},"requiredInputs":["instanceId","key"]},"aws-native:connect:SecurityProfile":{"description":"Resource Type definition for AWS::Connect::SecurityProfile","properties":{"allowedAccessControlHierarchyGroupId":{"type":"string","description":"The identifier of the hierarchy group that a security profile uses to restrict access to resources in Amazon Connect."},"allowedAccessControlTags":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfileTag"},"description":"The list of tags that a security profile uses to restrict access to resources in Amazon Connect."},"allowedFlowModules":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfileFlowModule"},"description":"The list of flow-module resources to be linked to a security profile in Amazon Connect."},"applications":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfileApplication"},"description":"A list of third-party applications that the security profile will give access to."},"description":{"type":"string","description":"The description of the security profile."},"granularAccessControlConfiguration":{"$ref":"#/types/aws-native:connect:GranularAccessControlConfigurationProperties","description":"The granular access control configuration for the security profile, including data table permissions."},"hierarchyRestrictedResources":{"type":"array","items":{"type":"string"},"description":"The list of resources that a security profile applies hierarchy restrictions to in Amazon Connect."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance.","replaceOnChanges":true},"lastModifiedRegion":{"type":"string","description":"The AWS Region where this resource was last modified."},"lastModifiedTime":{"type":"number","description":"The timestamp when this resource was last modified."},"permissions":{"type":"array","items":{"type":"string"},"description":"Permissions assigned to the security profile."},"securityProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the security profile."},"securityProfileName":{"type":"string","description":"The name of the security profile.","replaceOnChanges":true},"tagRestrictedResources":{"type":"array","items":{"type":"string"},"description":"The list of resources that a security profile applies tag restrictions to in Amazon Connect."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"type":"object","required":["instanceArn","lastModifiedRegion","lastModifiedTime","securityProfileArn","securityProfileName"],"inputProperties":{"allowedAccessControlHierarchyGroupId":{"type":"string","description":"The identifier of the hierarchy group that a security profile uses to restrict access to resources in Amazon Connect."},"allowedAccessControlTags":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfileTag"},"description":"The list of tags that a security profile uses to restrict access to resources in Amazon Connect."},"allowedFlowModules":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfileFlowModule"},"description":"The list of flow-module resources to be linked to a security profile in Amazon Connect."},"applications":{"type":"array","items":{"$ref":"#/types/aws-native:connect:SecurityProfileApplication"},"description":"A list of third-party applications that the security profile will give access to."},"description":{"type":"string","description":"The description of the security profile."},"granularAccessControlConfiguration":{"$ref":"#/types/aws-native:connect:GranularAccessControlConfigurationProperties","description":"The granular access control configuration for the security profile, including data table permissions."},"hierarchyRestrictedResources":{"type":"array","items":{"type":"string"},"description":"The list of resources that a security profile applies hierarchy restrictions to in Amazon Connect."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"permissions":{"type":"array","items":{"type":"string"},"description":"Permissions assigned to the security profile."},"securityProfileName":{"type":"string","description":"The name of the security profile."},"tagRestrictedResources":{"type":"array","items":{"type":"string"},"description":"The list of resources that a security profile applies tag restrictions to in Amazon Connect."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"requiredInputs":["instanceArn"]},"aws-native:connect:TaskTemplate":{"description":"Resource Type definition for AWS::Connect::TaskTemplate.","properties":{"arn":{"type":"string","description":"The identifier (arn) of the task template."},"clientToken":{"type":"string","description":"A unique, case-sensitive identifier that you provide to ensure the idempotency of the request."},"constraints":{"$ref":"#/types/aws-native:connect:ConstraintsProperties","description":"The constraints for the task template"},"contactFlowArn":{"type":"string","description":"The identifier of the contact flow."},"defaults":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateDefaultFieldValue"},"description":"The default values for fields when a task is created by referencing this template."},"description":{"type":"string","description":"The description of the task template."},"fields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateField"},"description":"The list of task template's fields"},"instanceArn":{"type":"string","description":"The identifier (arn) of the instance."},"name":{"type":"string","description":"The name of the task template."},"selfAssignContactFlowArn":{"type":"string","description":"The identifier of the contact flow."},"status":{"$ref":"#/types/aws-native:connect:TaskTemplateStatus","description":"The status of the task template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["arn","instanceArn"],"inputProperties":{"clientToken":{"type":"string","description":"A unique, case-sensitive identifier that you provide to ensure the idempotency of the request."},"constraints":{"$ref":"#/types/aws-native:connect:ConstraintsProperties","description":"The constraints for the task template"},"contactFlowArn":{"type":"string","description":"The identifier of the contact flow."},"defaults":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateDefaultFieldValue"},"description":"The default values for fields when a task is created by referencing this template."},"description":{"type":"string","description":"The description of the task template."},"fields":{"type":"array","items":{"$ref":"#/types/aws-native:connect:TaskTemplateField"},"description":"The list of task template's fields"},"instanceArn":{"type":"string","description":"The identifier (arn) of the instance."},"name":{"type":"string","description":"The name of the task template."},"selfAssignContactFlowArn":{"type":"string","description":"The identifier of the contact flow."},"status":{"$ref":"#/types/aws-native:connect:TaskTemplateStatus","description":"The status of the task template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["instanceArn"]},"aws-native:connect:TrafficDistributionGroup":{"description":"Resource Type definition for AWS::Connect::TrafficDistributionGroup","properties":{"description":{"type":"string","description":"A description for the traffic distribution group.","replaceOnChanges":true},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance that has been replicated."},"isDefault":{"type":"boolean","description":"If this is the default traffic distribution group."},"name":{"type":"string","description":"The name for the traffic distribution group.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:connect:TrafficDistributionGroupStatus","description":"The status of the traffic distribution group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"trafficDistributionGroupArn":{"type":"string","description":"The identifier of the traffic distribution group."}},"type":"object","required":["instanceArn","isDefault","name","status","trafficDistributionGroupArn"],"inputProperties":{"description":{"type":"string","description":"A description for the traffic distribution group."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance that has been replicated."},"name":{"type":"string","description":"The name for the traffic distribution group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["instanceArn"]},"aws-native:connect:User":{"description":"Resource Type definition for AWS::Connect::User","properties":{"afterContactWorkConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserAfterContactWorkConfigPerChannel"},"description":"After Contact Work configurations of a user."},"autoAcceptConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserAutoAcceptConfig"},"description":"Auto-accept configurations of a user."},"directoryUserId":{"type":"string","description":"The identifier of the user account in the directory used for identity management."},"hierarchyGroupArn":{"type":"string","description":"The identifier of the hierarchy group for the user."},"identityInfo":{"$ref":"#/types/aws-native:connect:UserIdentityInfo","description":"The information about the identity of the user."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"password":{"type":"string","description":"The password for the user account. A password is required if you are using Amazon Connect for identity management. Otherwise, it is an error to include a password."},"persistentConnectionConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserPersistentConnectionConfig"},"description":"Persistent Connection configurations of a user."},"phoneConfig":{"$ref":"#/types/aws-native:connect:UserPhoneConfig","description":"The phone settings for the user."},"phoneNumberConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserPhoneNumberConfig"},"description":"Phone Number configurations of a user."},"routingProfileArn":{"type":"string","description":"The identifier of the routing profile for the user."},"securityProfileArns":{"type":"array","items":{"type":"string"},"description":"One or more security profile arns for the user"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"userArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the user."},"userProficiencies":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserProficiency"},"description":"One or more predefined attributes assigned to a user, with a level that indicates how skilled they are."},"username":{"type":"string","description":"The user name for the account."},"voiceEnhancementConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserVoiceEnhancementConfig"},"description":"Voice Enhancement configurations of a user."}},"type":"object","required":["instanceArn","routingProfileArn","securityProfileArns","userArn","username"],"inputProperties":{"afterContactWorkConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserAfterContactWorkConfigPerChannel"},"description":"After Contact Work configurations of a user."},"autoAcceptConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserAutoAcceptConfig"},"description":"Auto-accept configurations of a user."},"directoryUserId":{"type":"string","description":"The identifier of the user account in the directory used for identity management."},"hierarchyGroupArn":{"type":"string","description":"The identifier of the hierarchy group for the user."},"identityInfo":{"$ref":"#/types/aws-native:connect:UserIdentityInfo","description":"The information about the identity of the user."},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"password":{"type":"string","description":"The password for the user account. A password is required if you are using Amazon Connect for identity management. Otherwise, it is an error to include a password."},"persistentConnectionConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserPersistentConnectionConfig"},"description":"Persistent Connection configurations of a user."},"phoneConfig":{"$ref":"#/types/aws-native:connect:UserPhoneConfig","description":"The phone settings for the user."},"phoneNumberConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserPhoneNumberConfig"},"description":"Phone Number configurations of a user."},"routingProfileArn":{"type":"string","description":"The identifier of the routing profile for the user."},"securityProfileArns":{"type":"array","items":{"type":"string"},"description":"One or more security profile arns for the user"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"userProficiencies":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserProficiency"},"description":"One or more predefined attributes assigned to a user, with a level that indicates how skilled they are."},"username":{"type":"string","description":"The user name for the account."},"voiceEnhancementConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:connect:UserVoiceEnhancementConfig"},"description":"Voice Enhancement configurations of a user."}},"requiredInputs":["instanceArn","routingProfileArn","securityProfileArns"]},"aws-native:connect:UserHierarchyGroup":{"description":"Resource Type definition for AWS::Connect::UserHierarchyGroup","properties":{"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the user hierarchy group."},"parentGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the parent user hierarchy group.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"userHierarchyGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the user hierarchy group."}},"type":"object","required":["instanceArn","name","userHierarchyGroupArn"],"inputProperties":{"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the user hierarchy group."},"parentGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the parent user hierarchy group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["instanceArn"]},"aws-native:connect:UserHierarchyStructure":{"description":"Resource Type definition for AWS::Connect::UserHierarchyStructure","properties":{"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance.","replaceOnChanges":true},"userHierarchyStructure":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureProperties","description":"Information about the hierarchy structure.","language":{"csharp":{"name":"UserHierarchyStructureValue"}}},"userHierarchyStructureArn":{"type":"string","description":"The identifier of the User Hierarchy Structure."}},"type":"object","required":["instanceArn","userHierarchyStructureArn"],"inputProperties":{"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"userHierarchyStructure":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureProperties","description":"Information about the hierarchy structure.","language":{"csharp":{"name":"UserHierarchyStructureValue"}}}},"requiredInputs":["instanceArn"]},"aws-native:connect:View":{"description":"Resource Type definition for AWS::Connect::View","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"The actions of the view in an array."},"description":{"type":"string","description":"The description of the view."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."},"name":{"type":"string","description":"The name of the view."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"template":{"$ref":"pulumi.json#/Any","description":"The template of the view as JSON.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Connect::View` for more information about the expected schema for this property."},"viewArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the view."},"viewContentSha256":{"type":"string","description":"The view content hash."},"viewId":{"type":"string","description":"The view id of the view."}},"type":"object","required":["actions","instanceArn","name","template","viewArn","viewContentSha256","viewId"],"inputProperties":{"actions":{"type":"array","items":{"type":"string"},"description":"The actions of the view in an array."},"description":{"type":"string","description":"The description of the view."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."},"name":{"type":"string","description":"The name of the view."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"template":{"$ref":"pulumi.json#/Any","description":"The template of the view as JSON.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Connect::View` for more information about the expected schema for this property."}},"requiredInputs":["actions","instanceArn","template"]},"aws-native:connect:ViewVersion":{"description":"Resource Type definition for AWS::Connect::ViewVersion","properties":{"version":{"type":"integer","description":"The version of the view."},"versionDescription":{"type":"string","description":"The description for the view version."},"viewArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the view for which a version is being created.","replaceOnChanges":true},"viewContentSha256":{"type":"string","description":"The view content hash to be checked.","replaceOnChanges":true},"viewVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the created view version."}},"type":"object","required":["version","viewArn","viewVersionArn"],"inputProperties":{"versionDescription":{"type":"string","description":"The description for the view version."},"viewArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the view for which a version is being created."},"viewContentSha256":{"type":"string","description":"The view content hash to be checked."}},"requiredInputs":["viewArn"]},"aws-native:connect:Workspace":{"description":"Resource Type definition for AWS::Connect::Workspace","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the workspace."},"associations":{"type":"array","items":{"type":"string"},"description":"The resource ARNs associated with the workspace"},"awsId":{"type":"string","description":"The identifier of the workspace."},"description":{"type":"string","description":"The description of the workspace"},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance.","replaceOnChanges":true},"media":{"type":"array","items":{"$ref":"#/types/aws-native:connect:WorkspaceMediaItem"},"description":"The media items for the workspace"},"name":{"type":"string","description":"The name of the workspace."},"pages":{"type":"array","items":{"$ref":"#/types/aws-native:connect:WorkspacePage"},"description":"The pages associated with the workspace"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"theme":{"$ref":"#/types/aws-native:connect:WorkspaceTheme","description":"The theme configuration for the workspace"},"title":{"type":"string","description":"The title of the workspace"},"visibility":{"$ref":"#/types/aws-native:connect:WorkspaceVisibility","description":"The visibility of the workspace. Will always be set to ASSIGNED oninitial creation."}},"type":"object","required":["arn","awsId","instanceArn","name"],"inputProperties":{"associations":{"type":"array","items":{"type":"string"},"description":"The resource ARNs associated with the workspace"},"description":{"type":"string","description":"The description of the workspace"},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"media":{"type":"array","items":{"$ref":"#/types/aws-native:connect:WorkspaceMediaItem"},"description":"The media items for the workspace"},"name":{"type":"string","description":"The name of the workspace."},"pages":{"type":"array","items":{"$ref":"#/types/aws-native:connect:WorkspacePage"},"description":"The pages associated with the workspace"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"theme":{"$ref":"#/types/aws-native:connect:WorkspaceTheme","description":"The theme configuration for the workspace"},"title":{"type":"string","description":"The title of the workspace"},"visibility":{"$ref":"#/types/aws-native:connect:WorkspaceVisibility","description":"The visibility of the workspace. Will always be set to ASSIGNED oninitial creation."}},"requiredInputs":["instanceArn"]},"aws-native:connectcampaigns:Campaign":{"description":"Definition of AWS::ConnectCampaigns::Campaign Resource Type","properties":{"arn":{"type":"string","description":"Amazon Connect Campaign Arn"},"connectInstanceArn":{"type":"string","description":"Amazon Connect Instance Arn","replaceOnChanges":true},"dialerConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignDialerConfig","description":"Contains information about the dialer configuration."},"name":{"type":"string","description":"Amazon Connect Campaign Name"},"outboundCallConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignOutboundCallConfig","description":"Contains information about the outbound call configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["arn","connectInstanceArn","dialerConfig","name","outboundCallConfig"],"inputProperties":{"connectInstanceArn":{"type":"string","description":"Amazon Connect Instance Arn"},"dialerConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignDialerConfig","description":"Contains information about the dialer configuration."},"name":{"type":"string","description":"Amazon Connect Campaign Name"},"outboundCallConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignOutboundCallConfig","description":"Contains information about the outbound call configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["connectInstanceArn","dialerConfig","outboundCallConfig"]},"aws-native:connectcampaignsv2:Campaign":{"description":"Definition of AWS::ConnectCampaignsV2::Campaign Resource Type","properties":{"arn":{"type":"string","description":"Amazon Connect Campaign Arn"},"channelSubtypeConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignChannelSubtypeConfig","description":"Contains channel subtype configuration for an outbound campaign."},"communicationLimitsOverride":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationLimitsConfig","description":"Communication limits configuration for an outbound campaign."},"communicationTimeConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationTimeConfig","description":"Contains communication time configuration for an outbound campaign."},"connectCampaignFlowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Connect campaign flow associated with the outbound campaign."},"connectInstanceId":{"type":"string","description":"The identifier of the Amazon Connect instance. You can find the `instanceId` in the ARN of the instance.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the outbound campaign."},"schedule":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSchedule","description":"Contains the schedule configuration."},"source":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSource","description":"Contains source configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"type":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignType","description":"The type of campaign."}},"type":"object","required":["arn","connectInstanceId","name"],"inputProperties":{"channelSubtypeConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignChannelSubtypeConfig","description":"Contains channel subtype configuration for an outbound campaign."},"communicationLimitsOverride":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationLimitsConfig","description":"Communication limits configuration for an outbound campaign."},"communicationTimeConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationTimeConfig","description":"Contains communication time configuration for an outbound campaign."},"connectCampaignFlowArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Connect campaign flow associated with the outbound campaign."},"connectInstanceId":{"type":"string","description":"The identifier of the Amazon Connect instance. You can find the `instanceId` in the ARN of the instance."},"name":{"type":"string","description":"The name of the outbound campaign."},"schedule":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSchedule","description":"Contains the schedule configuration."},"source":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSource","description":"Contains source configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."},"type":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignType","description":"The type of campaign."}},"requiredInputs":["connectInstanceId"]},"aws-native:controltower:EnabledBaseline":{"description":"Definition of AWS::ControlTower::EnabledBaseline Resource Type","properties":{"baselineIdentifier":{"type":"string","description":"The specific `Baseline` enabled as part of the `EnabledBaseline` resource.","replaceOnChanges":true},"baselineVersion":{"type":"string","description":"The enabled version of the `Baseline` ."},"enabledBaselineIdentifier":{"type":"string"},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:controltower:EnabledBaselineParameter"},"description":"Shows the parameters that are applied when enabling this `Baseline` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"targetIdentifier":{"type":"string","description":"The target on which to enable the `Baseline` .","replaceOnChanges":true}},"type":"object","required":["baselineIdentifier","baselineVersion","enabledBaselineIdentifier","targetIdentifier"],"inputProperties":{"baselineIdentifier":{"type":"string","description":"The specific `Baseline` enabled as part of the `EnabledBaseline` resource."},"baselineVersion":{"type":"string","description":"The enabled version of the `Baseline` ."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:controltower:EnabledBaselineParameter"},"description":"Shows the parameters that are applied when enabling this `Baseline` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"targetIdentifier":{"type":"string","description":"The target on which to enable the `Baseline` ."}},"requiredInputs":["baselineIdentifier","baselineVersion","targetIdentifier"]},"aws-native:controltower:EnabledControl":{"description":"Enables a control on a specified target.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myExampleControl = new AwsNative.ControlTower.EnabledControl(\"myExampleControl\", new()\n    {\n        ControlIdentifier = \"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\",\n        TargetIdentifier = \"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/controltower\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := controltower.NewEnabledControl(ctx, \"myExampleControl\", \u0026controltower.EnabledControlArgs{\n\t\t\tControlIdentifier: pulumi.String(\"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\"),\n\t\t\tTargetIdentifier:  pulumi.String(\"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myExampleControl = new aws_native.controltower.EnabledControl(\"myExampleControl\", {\n    controlIdentifier: \"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\",\n    targetIdentifier: \"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_example_control = aws_native.controltower.EnabledControl(\"myExampleControl\",\n    control_identifier=\"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\",\n    target_identifier=\"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myExampleControl = new AwsNative.ControlTower.EnabledControl(\"myExampleControl\", new()\n    {\n        ControlIdentifier = \"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\",\n        TargetIdentifier = \"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/controltower\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := controltower.NewEnabledControl(ctx, \"myExampleControl\", \u0026controltower.EnabledControlArgs{\n\t\t\tControlIdentifier: pulumi.String(\"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\"),\n\t\t\tTargetIdentifier:  pulumi.String(\"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myExampleControl = new aws_native.controltower.EnabledControl(\"myExampleControl\", {\n    controlIdentifier: \"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\",\n    targetIdentifier: \"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_example_control = aws_native.controltower.EnabledControl(\"myExampleControl\",\n    control_identifier=\"arn:aws:controltower:us-east-2::control/EXAMPLE_NAME\",\n    target_identifier=\"arn:aws:organizations::01234567890:ou/o-EXAMPLE/ou-zzxx-zzx0zzz2\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"controlIdentifier":{"type":"string","description":"Arn of the control.","replaceOnChanges":true},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:controltower:EnabledControlParameter"},"description":"Parameters to configure the enabled control behavior."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags to assign to the enabled control."},"targetIdentifier":{"type":"string","description":"Arn for Organizational unit to which the control needs to be applied","replaceOnChanges":true}},"type":"object","required":["controlIdentifier","targetIdentifier"],"inputProperties":{"controlIdentifier":{"type":"string","description":"Arn of the control."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:controltower:EnabledControlParameter"},"description":"Parameters to configure the enabled control behavior."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags to assign to the enabled control."},"targetIdentifier":{"type":"string","description":"Arn for Organizational unit to which the control needs to be applied"}},"requiredInputs":["controlIdentifier","targetIdentifier"]},"aws-native:controltower:LandingZone":{"description":"Definition of AWS::ControlTower::LandingZone Resource Type","properties":{"arn":{"type":"string","description":"The ARN of the landing zone."},"driftStatus":{"$ref":"#/types/aws-native:controltower:LandingZoneDriftStatus","description":"The drift status of the landing zone."},"landingZoneIdentifier":{"type":"string","description":"The unique identifier of the landing zone."},"latestAvailableVersion":{"type":"string","description":"The latest available version of the landing zone."},"manifest":{"$ref":"pulumi.json#/Any","description":"The landing zone manifest JSON text file that specifies the landing zone configurations.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ControlTower::LandingZone` for more information about the expected schema for this property."},"remediationTypes":{"type":"array","items":{"$ref":"#/types/aws-native:controltower:LandingZoneRemediationTypesItem"},"description":"The types of remediation actions configured for the landing zone, such as automatic drift correction or compliance enforcement."},"status":{"$ref":"#/types/aws-native:controltower:LandingZoneStatus","description":"The landing zone deployment status. One of `ACTIVE` , `PROCESSING` , `FAILED` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to be applied to the landing zone."},"version":{"type":"string","description":"The landing zone's current deployed version."}},"type":"object","required":["arn","driftStatus","landingZoneIdentifier","latestAvailableVersion","manifest","status","version"],"inputProperties":{"manifest":{"$ref":"pulumi.json#/Any","description":"The landing zone manifest JSON text file that specifies the landing zone configurations.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ControlTower::LandingZone` for more information about the expected schema for this property."},"remediationTypes":{"type":"array","items":{"$ref":"#/types/aws-native:controltower:LandingZoneRemediationTypesItem"},"description":"The types of remediation actions configured for the landing zone, such as automatic drift correction or compliance enforcement."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to be applied to the landing zone."},"version":{"type":"string","description":"The landing zone's current deployed version."}},"requiredInputs":["manifest","version"]},"aws-native:customerprofiles:CalculatedAttributeDefinition":{"description":"A calculated attribute definition for Customer Profiles","properties":{"attributeDetails":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionAttributeDetails","description":"Mathematical expression and a list of attribute items specified in that expression."},"calculatedAttributeName":{"type":"string","description":"The name of an attribute defined in a profile object type.","replaceOnChanges":true},"conditions":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionConditions","description":"The conditions including range, object count, and threshold for the calculated attribute."},"createdAt":{"type":"string","description":"The timestamp of when the calculated attribute definition was created."},"description":{"type":"string","description":"The description of the calculated attribute."},"displayName":{"type":"string","description":"The display name of the calculated attribute."},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"lastUpdatedAt":{"type":"string","description":"The timestamp of when the calculated attribute definition was most recently edited."},"readiness":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionReadiness"},"statistic":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionStatistic","description":"The aggregation operation to perform for the calculated attribute."},"status":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionStatus","description":"The status of the calculated attribute definition."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"useHistoricalData":{"type":"boolean","description":"Whether to use historical data for the calculated attribute.","replaceOnChanges":true}},"type":"object","required":["attributeDetails","calculatedAttributeName","createdAt","domainName","lastUpdatedAt","readiness","statistic","status"],"inputProperties":{"attributeDetails":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionAttributeDetails","description":"Mathematical expression and a list of attribute items specified in that expression."},"calculatedAttributeName":{"type":"string","description":"The name of an attribute defined in a profile object type."},"conditions":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionConditions","description":"The conditions including range, object count, and threshold for the calculated attribute."},"description":{"type":"string","description":"The description of the calculated attribute."},"displayName":{"type":"string","description":"The display name of the calculated attribute."},"domainName":{"type":"string","description":"The unique name of the domain."},"statistic":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionStatistic","description":"The aggregation operation to perform for the calculated attribute."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"useHistoricalData":{"type":"boolean","description":"Whether to use historical data for the calculated attribute."}},"requiredInputs":["attributeDetails","calculatedAttributeName","domainName","statistic"]},"aws-native:customerprofiles:Domain":{"description":"A domain defined for 3rd party data source in Profile Service","properties":{"createdAt":{"type":"string","description":"The time of this integration got created"},"dataStore":{"$ref":"#/types/aws-native:customerprofiles:DomainDataStore"},"deadLetterQueueUrl":{"type":"string","description":"The URL of the SQS dead letter queue"},"defaultEncryptionKey":{"type":"string","description":"The default encryption key"},"defaultExpirationDays":{"type":"integer","description":"The default number of days until the data within the domain expires."},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"lastUpdatedAt":{"type":"string","description":"The time of this integration got last updated at"},"matching":{"$ref":"#/types/aws-native:customerprofiles:DomainMatching","description":"The process of matching duplicate profiles."},"ruleBasedMatching":{"$ref":"#/types/aws-native:customerprofiles:DomainRuleBasedMatching","description":"The process of matching duplicate profiles using Rule-Based matching."},"stats":{"$ref":"#/types/aws-native:customerprofiles:DomainStats"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the domain"}},"type":"object","required":["createdAt","defaultExpirationDays","domainName","lastUpdatedAt","stats"],"inputProperties":{"dataStore":{"$ref":"#/types/aws-native:customerprofiles:DomainDataStore"},"deadLetterQueueUrl":{"type":"string","description":"The URL of the SQS dead letter queue"},"defaultEncryptionKey":{"type":"string","description":"The default encryption key"},"defaultExpirationDays":{"type":"integer","description":"The default number of days until the data within the domain expires."},"domainName":{"type":"string","description":"The unique name of the domain."},"matching":{"$ref":"#/types/aws-native:customerprofiles:DomainMatching","description":"The process of matching duplicate profiles."},"ruleBasedMatching":{"$ref":"#/types/aws-native:customerprofiles:DomainRuleBasedMatching","description":"The process of matching duplicate profiles using Rule-Based matching."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the domain"}},"requiredInputs":["defaultExpirationDays"]},"aws-native:customerprofiles:EventStream":{"description":"An Event Stream resource of Amazon Connect Customer Profiles","properties":{"createdAt":{"type":"string","description":"The timestamp of when the export was created."},"destinationDetails":{"$ref":"#/types/aws-native:customerprofiles:DestinationDetailsProperties","description":"Details regarding the Kinesis stream."},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"eventStreamArn":{"type":"string","description":"A unique identifier for the event stream."},"eventStreamName":{"type":"string","description":"The name of the event stream.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:customerprofiles:EventStreamState","description":"The operational state of destination stream for export."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"uri":{"type":"string","description":"The StreamARN of the destination to deliver profile events to. For example, arn:aws:kinesis:region:account-id:stream/stream-name.","replaceOnChanges":true}},"type":"object","required":["createdAt","destinationDetails","domainName","eventStreamArn","eventStreamName","state","uri"],"inputProperties":{"domainName":{"type":"string","description":"The unique name of the domain."},"eventStreamName":{"type":"string","description":"The name of the event stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"uri":{"type":"string","description":"The StreamARN of the destination to deliver profile events to. For example, arn:aws:kinesis:region:account-id:stream/stream-name."}},"requiredInputs":["domainName","uri"]},"aws-native:customerprofiles:EventTrigger":{"description":"An event trigger resource of Amazon Connect Customer Profiles","properties":{"createdAt":{"type":"string","description":"The timestamp of when the event trigger was created."},"description":{"type":"string","description":"The description of the event trigger."},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"eventTriggerConditions":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerCondition"},"description":"A list of conditions that determine when an event should trigger the destination."},"eventTriggerLimits":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerLimits","description":"Defines limits controlling whether an event triggers the destination, based on ingestion latency and the number of invocations per profile over specific time periods."},"eventTriggerName":{"type":"string","description":"The unique name of the event trigger.","replaceOnChanges":true},"lastUpdatedAt":{"type":"string","description":"The timestamp of when the event trigger was most recently updated."},"objectTypeName":{"type":"string","description":"The unique name of the object type."},"segmentFilter":{"type":"string","description":"The destination is triggered only for profiles that meet the criteria of a segment definition."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["createdAt","domainName","eventTriggerConditions","eventTriggerName","lastUpdatedAt","objectTypeName"],"inputProperties":{"description":{"type":"string","description":"The description of the event trigger."},"domainName":{"type":"string","description":"The unique name of the domain."},"eventTriggerConditions":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerCondition"},"description":"A list of conditions that determine when an event should trigger the destination."},"eventTriggerLimits":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerLimits","description":"Defines limits controlling whether an event triggers the destination, based on ingestion latency and the number of invocations per profile over specific time periods."},"eventTriggerName":{"type":"string","description":"The unique name of the event trigger."},"objectTypeName":{"type":"string","description":"The unique name of the object type."},"segmentFilter":{"type":"string","description":"The destination is triggered only for profiles that meet the criteria of a segment definition."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["domainName","eventTriggerConditions","objectTypeName"]},"aws-native:customerprofiles:Integration":{"description":"The resource schema for creating an Amazon Connect Customer Profiles Integration.","properties":{"createdAt":{"type":"string","description":"The time of this integration got created"},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"eventTriggerNames":{"type":"array","items":{"type":"string"},"description":"A list of unique names for active event triggers associated with the integration."},"flowDefinition":{"$ref":"#/types/aws-native:customerprofiles:IntegrationFlowDefinition","description":"The configuration that controls how Customer Profiles retrieves data from the source."},"lastUpdatedAt":{"type":"string","description":"The time of this integration got last updated at"},"objectTypeName":{"type":"string","description":"The name of the ObjectType defined for the 3rd party data in Profile Service"},"objectTypeNames":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:IntegrationObjectTypeMapping"},"description":"The mapping between 3rd party event types and ObjectType names"},"scope":{"$ref":"#/types/aws-native:customerprofiles:IntegrationScope","description":"Scope of the integration, such as 'PROFILE' or 'DOMAIN'"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the integration"},"uri":{"type":"string","description":"The URI of the S3 bucket or any other type of data source.","replaceOnChanges":true}},"type":"object","required":["createdAt","domainName","lastUpdatedAt"],"inputProperties":{"domainName":{"type":"string","description":"The unique name of the domain."},"eventTriggerNames":{"type":"array","items":{"type":"string"},"description":"A list of unique names for active event triggers associated with the integration."},"flowDefinition":{"$ref":"#/types/aws-native:customerprofiles:IntegrationFlowDefinition","description":"The configuration that controls how Customer Profiles retrieves data from the source."},"objectTypeName":{"type":"string","description":"The name of the ObjectType defined for the 3rd party data in Profile Service"},"objectTypeNames":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:IntegrationObjectTypeMapping"},"description":"The mapping between 3rd party event types and ObjectType names"},"scope":{"$ref":"#/types/aws-native:customerprofiles:IntegrationScope","description":"Scope of the integration, such as 'PROFILE' or 'DOMAIN'"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the integration"},"uri":{"type":"string","description":"The URI of the S3 bucket or any other type of data source."}},"requiredInputs":["domainName"]},"aws-native:customerprofiles:ObjectType":{"description":"An ObjectType resource of Amazon Connect Customer Profiles","properties":{"allowProfileCreation":{"type":"boolean","description":"Indicates whether a profile should be created when data is received."},"createdAt":{"type":"string","description":"The time of this integration got created."},"description":{"type":"string","description":"Description of the profile object type."},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"encryptionKey":{"type":"string","description":"The default encryption key"},"expirationDays":{"type":"integer","description":"The default number of days until the data within the domain expires."},"fields":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeFieldMap"},"description":"A list of the name and ObjectType field."},"keys":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeKeyMap"},"description":"A list of unique keys that can be used to map data to the profile."},"lastUpdatedAt":{"type":"string","description":"The time of this integration got last updated at."},"maxAvailableProfileObjectCount":{"type":"integer","description":"The maximum available number of profile objects"},"maxProfileObjectCount":{"type":"integer","description":"The maximum number of profile objects for this object type"},"objectTypeName":{"type":"string","description":"The name of the profile object type.","replaceOnChanges":true},"sourceLastUpdatedTimestampFormat":{"type":"string","description":"The format of your sourceLastUpdatedTimestamp that was previously set up."},"sourcePriority":{"type":"integer","description":"Defines the priority order of object types. Lower value indicates higher priority."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the integration."},"templateId":{"type":"string","description":"A unique identifier for the object template."}},"type":"object","required":["createdAt","description","domainName","lastUpdatedAt","maxAvailableProfileObjectCount","objectTypeName"],"inputProperties":{"allowProfileCreation":{"type":"boolean","description":"Indicates whether a profile should be created when data is received."},"description":{"type":"string","description":"Description of the profile object type."},"domainName":{"type":"string","description":"The unique name of the domain."},"encryptionKey":{"type":"string","description":"The default encryption key"},"expirationDays":{"type":"integer","description":"The default number of days until the data within the domain expires."},"fields":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeFieldMap"},"description":"A list of the name and ObjectType field."},"keys":{"type":"array","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeKeyMap"},"description":"A list of unique keys that can be used to map data to the profile."},"maxProfileObjectCount":{"type":"integer","description":"The maximum number of profile objects for this object type"},"objectTypeName":{"type":"string","description":"The name of the profile object type."},"sourceLastUpdatedTimestampFormat":{"type":"string","description":"The format of your sourceLastUpdatedTimestamp that was previously set up."},"sourcePriority":{"type":"integer","description":"Defines the priority order of object types. Lower value indicates higher priority."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the integration."},"templateId":{"type":"string","description":"A unique identifier for the object template."}},"requiredInputs":["description","domainName"]},"aws-native:customerprofiles:SegmentDefinition":{"description":"A segment definition resource of Amazon Connect Customer Profiles","properties":{"createdAt":{"type":"string","description":"The time of this segment definition got created."},"description":{"type":"string","description":"The description of the segment definition."},"displayName":{"type":"string","description":"The display name of the segment definition.","replaceOnChanges":true},"domainName":{"type":"string","description":"The unique name of the domain.","replaceOnChanges":true},"segmentDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the segment definition."},"segmentDefinitionName":{"type":"string","description":"The unique name of the segment definition.","replaceOnChanges":true},"segmentGroups":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionSegmentGroup","description":"An array that defines the set of segment criteria to evaluate when handling segment groups for the segment.","replaceOnChanges":true},"segmentSqlQuery":{"type":"string","description":"The SQL query that defines the segment criteria.","replaceOnChanges":true},"segmentType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionSegmentType","description":"The SQL query that defines the segment criteria."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"type":"object","required":["createdAt","displayName","domainName","segmentDefinitionArn","segmentDefinitionName","segmentType"],"inputProperties":{"description":{"type":"string","description":"The description of the segment definition."},"displayName":{"type":"string","description":"The display name of the segment definition."},"domainName":{"type":"string","description":"The unique name of the domain."},"segmentDefinitionName":{"type":"string","description":"The unique name of the segment definition."},"segmentGroups":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionSegmentGroup","description":"An array that defines the set of segment criteria to evaluate when handling segment groups for the segment."},"segmentSqlQuery":{"type":"string","description":"The SQL query that defines the segment criteria."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"requiredInputs":["displayName","domainName"]},"aws-native:databrew:Dataset":{"description":"Resource schema for AWS::DataBrew::Dataset.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testDataBrewDataset = new AwsNative.DataBrew.Dataset(\"testDataBrewDataset\", new()\n    {\n        Name = \"cf-test-dataset1\",\n        Input = new AwsNative.DataBrew.Inputs.DatasetInputArgs\n        {\n            S3InputDefinition = new AwsNative.DataBrew.Inputs.DatasetS3LocationArgs\n            {\n                Bucket = \"test-location\",\n                Key = \"test.xlsx\",\n            },\n        },\n        FormatOptions = new AwsNative.DataBrew.Inputs.DatasetFormatOptionsArgs\n        {\n            Excel = new AwsNative.DataBrew.Inputs.DatasetExcelOptionsArgs\n            {\n                SheetNames = new[]\n                {\n                    \"test\",\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/databrew\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := databrew.NewDataset(ctx, \"testDataBrewDataset\", \u0026databrew.DatasetArgs{\n\t\t\tName: pulumi.String(\"cf-test-dataset1\"),\n\t\t\tInput: \u0026databrew.DatasetInputTypeArgs{\n\t\t\t\tS3InputDefinition: \u0026databrew.DatasetS3LocationArgs{\n\t\t\t\t\tBucket: pulumi.String(\"test-location\"),\n\t\t\t\t\tKey:    pulumi.String(\"test.xlsx\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tFormatOptions: \u0026databrew.DatasetFormatOptionsArgs{\n\t\t\t\tExcel: \u0026databrew.DatasetExcelOptionsArgs{\n\t\t\t\t\tSheetNames: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"test\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testDataBrewDataset = new aws_native.databrew.Dataset(\"testDataBrewDataset\", {\n    name: \"cf-test-dataset1\",\n    input: {\n        s3InputDefinition: {\n            bucket: \"test-location\",\n            key: \"test.xlsx\",\n        },\n    },\n    formatOptions: {\n        excel: {\n            sheetNames: [\"test\"],\n        },\n    },\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_data_brew_dataset = aws_native.databrew.Dataset(\"testDataBrewDataset\",\n    name=\"cf-test-dataset1\",\n    input={\n        \"s3_input_definition\": {\n            \"bucket\": \"test-location\",\n            \"key\": \"test.xlsx\",\n        },\n    },\n    format_options={\n        \"excel\": {\n            \"sheet_names\": [\"test\"],\n        },\n    },\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"format":{"$ref":"#/types/aws-native:databrew:DatasetFormat","description":"Dataset format"},"formatOptions":{"$ref":"#/types/aws-native:databrew:DatasetFormatOptions","description":"Format options for dataset"},"input":{"$ref":"#/types/aws-native:databrew:DatasetInput","description":"Input"},"name":{"type":"string","description":"Dataset name","replaceOnChanges":true},"pathOptions":{"$ref":"#/types/aws-native:databrew:DatasetPathOptions","description":"PathOptions"},"source":{"$ref":"#/types/aws-native:databrew:DatasetSource","description":"Source type of the dataset"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the dataset."}},"type":"object","required":["input","name"],"inputProperties":{"format":{"$ref":"#/types/aws-native:databrew:DatasetFormat","description":"Dataset format"},"formatOptions":{"$ref":"#/types/aws-native:databrew:DatasetFormatOptions","description":"Format options for dataset"},"input":{"$ref":"#/types/aws-native:databrew:DatasetInput","description":"Input"},"name":{"type":"string","description":"Dataset name"},"pathOptions":{"$ref":"#/types/aws-native:databrew:DatasetPathOptions","description":"PathOptions"},"source":{"$ref":"#/types/aws-native:databrew:DatasetSource","description":"Source type of the dataset"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the dataset."}},"requiredInputs":["input"]},"aws-native:databrew:Job":{"description":"Resource schema for AWS::DataBrew::Job.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDataBrewProfileJob = new AwsNative.DataBrew.Job(\"myDataBrewProfileJob\", new()\n    {\n        Type = AwsNative.DataBrew.JobType.Profile,\n        Name = \"job-test\",\n        DatasetName = \"dataset-test\",\n        RoleArn = \"arn:aws:iam::1234567891011:role/PassRoleAdmin\",\n        JobSample = new AwsNative.DataBrew.Inputs.JobSampleArgs\n        {\n            Mode = AwsNative.DataBrew.JobSampleMode.FullDataset,\n        },\n        OutputLocation = new AwsNative.DataBrew.Inputs.JobOutputLocationArgs\n        {\n            Bucket = \"test-output\",\n            Key = \"job-output.json\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/databrew\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := databrew.NewJob(ctx, \"myDataBrewProfileJob\", \u0026databrew.JobArgs{\n\t\t\tType:        databrew.JobTypeProfile,\n\t\t\tName:        pulumi.String(\"job-test\"),\n\t\t\tDatasetName: pulumi.String(\"dataset-test\"),\n\t\t\tRoleArn:     pulumi.String(\"arn:aws:iam::1234567891011:role/PassRoleAdmin\"),\n\t\t\tJobSample: \u0026databrew.JobSampleArgs{\n\t\t\t\tMode: databrew.JobSampleModeFullDataset,\n\t\t\t},\n\t\t\tOutputLocation: \u0026databrew.JobOutputLocationArgs{\n\t\t\t\tBucket: pulumi.String(\"test-output\"),\n\t\t\t\tKey:    pulumi.String(\"job-output.json\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDataBrewProfileJob = new aws_native.databrew.Job(\"myDataBrewProfileJob\", {\n    type: aws_native.databrew.JobType.Profile,\n    name: \"job-test\",\n    datasetName: \"dataset-test\",\n    roleArn: \"arn:aws:iam::1234567891011:role/PassRoleAdmin\",\n    jobSample: {\n        mode: aws_native.databrew.JobSampleMode.FullDataset,\n    },\n    outputLocation: {\n        bucket: \"test-output\",\n        key: \"job-output.json\",\n    },\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_data_brew_profile_job = aws_native.databrew.Job(\"myDataBrewProfileJob\",\n    type=aws_native.databrew.JobType.PROFILE,\n    name=\"job-test\",\n    dataset_name=\"dataset-test\",\n    role_arn=\"arn:aws:iam::1234567891011:role/PassRoleAdmin\",\n    job_sample={\n        \"mode\": aws_native.databrew.JobSampleMode.FULL_DATASET,\n    },\n    output_location={\n        \"bucket\": \"test-output\",\n        \"key\": \"job-output.json\",\n    },\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"dataCatalogOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobDataCatalogOutput"},"description":"One or more artifacts that represent the AWS Glue Data Catalog output from running the job."},"databaseOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobDatabaseOutput"},"description":"Represents a list of JDBC database output objects which defines the output destination for a DataBrew recipe job to write into."},"datasetName":{"type":"string","description":"Dataset name"},"encryptionKeyArn":{"type":"string","description":"Encryption Key Arn"},"encryptionMode":{"$ref":"#/types/aws-native:databrew:JobEncryptionMode","description":"Encryption mode"},"jobSample":{"$ref":"#/types/aws-native:databrew:JobSample","description":"Job Sample"},"logSubscription":{"$ref":"#/types/aws-native:databrew:JobLogSubscription","description":"Log subscription"},"maxCapacity":{"type":"integer","description":"Max capacity"},"maxRetries":{"type":"integer","description":"Max retries"},"name":{"type":"string","description":"Job name","replaceOnChanges":true},"outputLocation":{"$ref":"#/types/aws-native:databrew:JobOutputLocation","description":"Output location"},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobOutput"},"description":"One or more artifacts that represent output from running the job."},"profileConfiguration":{"$ref":"#/types/aws-native:databrew:JobProfileConfiguration","description":"Profile Job configuration"},"projectName":{"type":"string","description":"Project name"},"recipe":{"$ref":"#/types/aws-native:databrew:JobRecipe","description":"A series of data transformation steps that the job runs."},"roleArn":{"type":"string","description":"Role arn"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the job."},"timeout":{"type":"integer","description":"Timeout"},"type":{"$ref":"#/types/aws-native:databrew:JobType","description":"Job type","replaceOnChanges":true},"validationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobValidationConfiguration"},"description":"Data quality rules configuration"}},"type":"object","required":["name","roleArn","type"],"inputProperties":{"dataCatalogOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobDataCatalogOutput"},"description":"One or more artifacts that represent the AWS Glue Data Catalog output from running the job."},"databaseOutputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobDatabaseOutput"},"description":"Represents a list of JDBC database output objects which defines the output destination for a DataBrew recipe job to write into."},"datasetName":{"type":"string","description":"Dataset name"},"encryptionKeyArn":{"type":"string","description":"Encryption Key Arn"},"encryptionMode":{"$ref":"#/types/aws-native:databrew:JobEncryptionMode","description":"Encryption mode"},"jobSample":{"$ref":"#/types/aws-native:databrew:JobSample","description":"Job Sample"},"logSubscription":{"$ref":"#/types/aws-native:databrew:JobLogSubscription","description":"Log subscription"},"maxCapacity":{"type":"integer","description":"Max capacity"},"maxRetries":{"type":"integer","description":"Max retries"},"name":{"type":"string","description":"Job name"},"outputLocation":{"$ref":"#/types/aws-native:databrew:JobOutputLocation","description":"Output location"},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobOutput"},"description":"One or more artifacts that represent output from running the job."},"profileConfiguration":{"$ref":"#/types/aws-native:databrew:JobProfileConfiguration","description":"Profile Job configuration"},"projectName":{"type":"string","description":"Project name"},"recipe":{"$ref":"#/types/aws-native:databrew:JobRecipe","description":"A series of data transformation steps that the job runs."},"roleArn":{"type":"string","description":"Role arn"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the job."},"timeout":{"type":"integer","description":"Timeout"},"type":{"$ref":"#/types/aws-native:databrew:JobType","description":"Job type"},"validationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:JobValidationConfiguration"},"description":"Data quality rules configuration"}},"requiredInputs":["roleArn","type"]},"aws-native:databrew:Project":{"description":"Resource schema for AWS::DataBrew::Project.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testDataBrewProject = new AwsNative.DataBrew.Project(\"testDataBrewProject\", new()\n    {\n        Name = \"project-name\",\n        RecipeName = \"recipe-name\",\n        DatasetName = \"dataset-name\",\n        RoleArn = \"arn:aws:iam::12345678910:role/PassRoleAdmin\",\n        Sample = new AwsNative.DataBrew.Inputs.ProjectSampleArgs\n        {\n            Size = 500,\n            Type = AwsNative.DataBrew.ProjectSampleType.LastN,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/databrew\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := databrew.NewProject(ctx, \"testDataBrewProject\", \u0026databrew.ProjectArgs{\n\t\t\tName:        pulumi.String(\"project-name\"),\n\t\t\tRecipeName:  pulumi.String(\"recipe-name\"),\n\t\t\tDatasetName: pulumi.String(\"dataset-name\"),\n\t\t\tRoleArn:     pulumi.String(\"arn:aws:iam::12345678910:role/PassRoleAdmin\"),\n\t\t\tSample: \u0026databrew.ProjectSampleArgs{\n\t\t\t\tSize: pulumi.Int(500),\n\t\t\t\tType: databrew.ProjectSampleTypeLastN,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testDataBrewProject = new aws_native.databrew.Project(\"testDataBrewProject\", {\n    name: \"project-name\",\n    recipeName: \"recipe-name\",\n    datasetName: \"dataset-name\",\n    roleArn: \"arn:aws:iam::12345678910:role/PassRoleAdmin\",\n    sample: {\n        size: 500,\n        type: aws_native.databrew.ProjectSampleType.LastN,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_data_brew_project = aws_native.databrew.Project(\"testDataBrewProject\",\n    name=\"project-name\",\n    recipe_name=\"recipe-name\",\n    dataset_name=\"dataset-name\",\n    role_arn=\"arn:aws:iam::12345678910:role/PassRoleAdmin\",\n    sample={\n        \"size\": 500,\n        \"type\": aws_native.databrew.ProjectSampleType.LAST_N,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDataBrewProject = new AwsNative.DataBrew.Project(\"myDataBrewProject\", new()\n    {\n        Name = \"test-project\",\n        RecipeName = \"test-project-recipe\",\n        DatasetName = \"test-dataset\",\n        RoleArn = \"arn:aws:iam::1234567891011:role/PassRoleAdmin\",\n        Sample = new AwsNative.DataBrew.Inputs.ProjectSampleArgs\n        {\n            Size = 500,\n            Type = AwsNative.DataBrew.ProjectSampleType.LastN,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/databrew\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := databrew.NewProject(ctx, \"myDataBrewProject\", \u0026databrew.ProjectArgs{\n\t\t\tName:        pulumi.String(\"test-project\"),\n\t\t\tRecipeName:  pulumi.String(\"test-project-recipe\"),\n\t\t\tDatasetName: pulumi.String(\"test-dataset\"),\n\t\t\tRoleArn:     pulumi.String(\"arn:aws:iam::1234567891011:role/PassRoleAdmin\"),\n\t\t\tSample: \u0026databrew.ProjectSampleArgs{\n\t\t\t\tSize: pulumi.Int(500),\n\t\t\t\tType: databrew.ProjectSampleTypeLastN,\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDataBrewProject = new aws_native.databrew.Project(\"myDataBrewProject\", {\n    name: \"test-project\",\n    recipeName: \"test-project-recipe\",\n    datasetName: \"test-dataset\",\n    roleArn: \"arn:aws:iam::1234567891011:role/PassRoleAdmin\",\n    sample: {\n        size: 500,\n        type: aws_native.databrew.ProjectSampleType.LastN,\n    },\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_data_brew_project = aws_native.databrew.Project(\"myDataBrewProject\",\n    name=\"test-project\",\n    recipe_name=\"test-project-recipe\",\n    dataset_name=\"test-dataset\",\n    role_arn=\"arn:aws:iam::1234567891011:role/PassRoleAdmin\",\n    sample={\n        \"size\": 500,\n        \"type\": aws_native.databrew.ProjectSampleType.LAST_N,\n    },\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"datasetName":{"type":"string","description":"Dataset name"},"name":{"type":"string","description":"Project name","replaceOnChanges":true},"recipeName":{"type":"string","description":"Recipe name"},"roleArn":{"type":"string","description":"Role arn"},"sample":{"$ref":"#/types/aws-native:databrew:ProjectSample","description":"Sample"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the project."}},"type":"object","required":["datasetName","name","recipeName","roleArn"],"inputProperties":{"datasetName":{"type":"string","description":"Dataset name"},"name":{"type":"string","description":"Project name"},"recipeName":{"type":"string","description":"Recipe name"},"roleArn":{"type":"string","description":"Role arn"},"sample":{"$ref":"#/types/aws-native:databrew:ProjectSample","description":"Sample"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the project."}},"requiredInputs":["datasetName","recipeName","roleArn"]},"aws-native:databrew:Recipe":{"description":"Resource schema for AWS::DataBrew::Recipe.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testDataBrewRecipe = new AwsNative.DataBrew.Recipe(\"testDataBrewRecipe\", new()\n    {\n        Name = \"recipe-name\",\n        Description = \"This is the recipe description.\",\n        Steps = new[]\n        {\n            new AwsNative.DataBrew.Inputs.RecipeStepArgs\n            {\n                Action = new AwsNative.DataBrew.Inputs.RecipeActionArgs\n                {\n                    Operation = \"EXTRACT_PATTERN\",\n                    Parameters = \n                    {\n                        { \"sourceColumn\", \"Consulate\" },\n                        { \"pattern\", \"A\" },\n                        { \"targetColumn\", \"extract_pattern\" },\n                    },\n                },\n                ConditionExpressions = new[]\n                {\n                    new AwsNative.DataBrew.Inputs.RecipeConditionExpressionArgs\n                    {\n                        Condition = \"LESS_THAN_EQUAL\",\n                        Value = \"5\",\n                        TargetColumn = \"Target\",\n                    },\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/databrew\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := databrew.NewRecipe(ctx, \"testDataBrewRecipe\", \u0026databrew.RecipeArgs{\n\t\t\tName:        pulumi.String(\"recipe-name\"),\n\t\t\tDescription: pulumi.String(\"This is the recipe description.\"),\n\t\t\tSteps: databrew.RecipeStepArray{\n\t\t\t\t\u0026databrew.RecipeStepArgs{\n\t\t\t\t\tAction: \u0026databrew.RecipeActionArgs{\n\t\t\t\t\t\tOperation: pulumi.String(\"EXTRACT_PATTERN\"),\n\t\t\t\t\t\tParameters: pulumi.Any{\n\t\t\t\t\t\t\tSourceColumn: pulumi.String(\"Consulate\"),\n\t\t\t\t\t\t\tPattern:      pulumi.String(\"A\"),\n\t\t\t\t\t\t\tTargetColumn: pulumi.String(\"extract_pattern\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tConditionExpressions: databrew.RecipeConditionExpressionArray{\n\t\t\t\t\t\t\u0026databrew.RecipeConditionExpressionArgs{\n\t\t\t\t\t\t\tCondition:    pulumi.String(\"LESS_THAN_EQUAL\"),\n\t\t\t\t\t\t\tValue:        pulumi.String(\"5\"),\n\t\t\t\t\t\t\tTargetColumn: pulumi.String(\"Target\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testDataBrewRecipe = new aws_native.databrew.Recipe(\"testDataBrewRecipe\", {\n    name: \"recipe-name\",\n    description: \"This is the recipe description.\",\n    steps: [{\n        action: {\n            operation: \"EXTRACT_PATTERN\",\n            parameters: {\n                sourceColumn: \"Consulate\",\n                pattern: \"A\",\n                targetColumn: \"extract_pattern\",\n            },\n        },\n        conditionExpressions: [{\n            condition: \"LESS_THAN_EQUAL\",\n            value: \"5\",\n            targetColumn: \"Target\",\n        }],\n    }],\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_data_brew_recipe = aws_native.databrew.Recipe(\"testDataBrewRecipe\",\n    name=\"recipe-name\",\n    description=\"This is the recipe description.\",\n    steps=[{\n        \"action\": {\n            \"operation\": \"EXTRACT_PATTERN\",\n            \"parameters\": {\n                \"sourceColumn\": \"Consulate\",\n                \"pattern\": \"A\",\n                \"targetColumn\": \"extract_pattern\",\n            },\n        },\n        \"condition_expressions\": [{\n            \"condition\": \"LESS_THAN_EQUAL\",\n            \"value\": \"5\",\n            \"target_column\": \"Target\",\n        }],\n    }],\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"description":{"type":"string","description":"Description of the recipe"},"name":{"type":"string","description":"Recipe name","replaceOnChanges":true},"steps":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RecipeStep"},"description":"A list of steps that are defined by the recipe."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the recipe."}},"type":"object","required":["name","steps"],"inputProperties":{"description":{"type":"string","description":"Description of the recipe"},"name":{"type":"string","description":"Recipe name"},"steps":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RecipeStep"},"description":"A list of steps that are defined by the recipe."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the recipe."}},"requiredInputs":["steps"]},"aws-native:databrew:Ruleset":{"description":"Resource schema for AWS::DataBrew::Ruleset.","properties":{"description":{"type":"string","description":"Description of the Ruleset"},"name":{"type":"string","description":"Name of the Ruleset","replaceOnChanges":true},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RulesetRule"},"description":"List of the data quality rules in the ruleset"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"targetArn":{"type":"string","description":"Arn of the target resource (dataset) to apply the ruleset to","replaceOnChanges":true}},"type":"object","required":["name","rules","targetArn"],"inputProperties":{"description":{"type":"string","description":"Description of the Ruleset"},"name":{"type":"string","description":"Name of the Ruleset"},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:databrew:RulesetRule"},"description":"List of the data quality rules in the ruleset"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"targetArn":{"type":"string","description":"Arn of the target resource (dataset) to apply the ruleset to"}},"requiredInputs":["rules","targetArn"]},"aws-native:databrew:Schedule":{"description":"Resource schema for AWS::DataBrew::Schedule.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testDataBrewSchedule = new AwsNative.DataBrew.Schedule(\"testDataBrewSchedule\", new()\n    {\n        JobNames = new[]\n        {\n            \"job-name\",\n        },\n        Name = \"schedule-name\",\n        CronExpression = \"cron(0 0/1 ? * * *)\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/databrew\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := databrew.NewSchedule(ctx, \"testDataBrewSchedule\", \u0026databrew.ScheduleArgs{\n\t\t\tJobNames: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"job-name\"),\n\t\t\t},\n\t\t\tName:           pulumi.String(\"schedule-name\"),\n\t\t\tCronExpression: pulumi.String(\"cron(0 0/1 ? * * *)\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testDataBrewSchedule = new aws_native.databrew.Schedule(\"testDataBrewSchedule\", {\n    jobNames: [\"job-name\"],\n    name: \"schedule-name\",\n    cronExpression: \"cron(0 0/1 ? * * *)\",\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_data_brew_schedule = aws_native.databrew.Schedule(\"testDataBrewSchedule\",\n    job_names=[\"job-name\"],\n    name=\"schedule-name\",\n    cron_expression=\"cron(0 0/1 ? * * *)\",\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"cronExpression":{"type":"string","description":"Schedule cron"},"jobNames":{"type":"array","items":{"type":"string"},"description":"A list of jobs to be run, according to the schedule."},"name":{"type":"string","description":"Schedule Name","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the schedule."}},"type":"object","required":["cronExpression","name"],"inputProperties":{"cronExpression":{"type":"string","description":"Schedule cron"},"jobNames":{"type":"array","items":{"type":"string"},"description":"A list of jobs to be run, according to the schedule."},"name":{"type":"string","description":"Schedule Name"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata tags that have been applied to the schedule."}},"requiredInputs":["cronExpression"]},"aws-native:datapipeline:Pipeline":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"activate":{"type":"boolean","description":"Indicates whether to validate and start the pipeline or stop an active pipeline. By default, the value is set to true."},"description":{"type":"string","description":"A description of the pipeline.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the pipeline.","replaceOnChanges":true},"parameterObjects":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterObject"},"description":"The parameter objects used with the pipeline."},"parameterValues":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterValue"},"description":"The parameter values used with the pipeline."},"pipelineId":{"type":"string","description":"The ID of the pipeline."},"pipelineObjects":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineObject"},"description":"The objects that define the pipeline. These objects overwrite the existing pipeline definition. Not all objects, fields, and values can be updated. For information about restrictions, see Editing Your Pipeline in the AWS Data Pipeline Developer Guide."},"pipelineTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of arbitrary tags (key-value pairs) to associate with the pipeline, which you can use to control permissions. For more information, see Controlling Access to Pipelines and Resources in the AWS Data Pipeline Developer Guide."}},"type":"object","required":["name","pipelineId"],"inputProperties":{"activate":{"type":"boolean","description":"Indicates whether to validate and start the pipeline or stop an active pipeline. By default, the value is set to true."},"description":{"type":"string","description":"A description of the pipeline."},"name":{"type":"string","description":"The name of the pipeline."},"parameterObjects":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterObject"},"description":"The parameter objects used with the pipeline."},"parameterValues":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterValue"},"description":"The parameter values used with the pipeline."},"pipelineObjects":{"type":"array","items":{"$ref":"#/types/aws-native:datapipeline:PipelineObject"},"description":"The objects that define the pipeline. These objects overwrite the existing pipeline definition. Not all objects, fields, and values can be updated. For information about restrictions, see Editing Your Pipeline in the AWS Data Pipeline Developer Guide."},"pipelineTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of arbitrary tags (key-value pairs) to associate with the pipeline, which you can use to control permissions. For more information, see Controlling Access to Pipelines and Resources in the AWS Data Pipeline Developer Guide."}}},"aws-native:datasync:Agent":{"description":"Resource schema for AWS::DataSync::Agent.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var agent = new AwsNative.DataSync.Agent(\"agent\", new()\n    {\n        ActivationKey = \"AAAAA-7AAAA-GG7MC-3I9R3-27COD\",\n        AgentName = \"MyAgent\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewAgent(ctx, \"agent\", \u0026datasync.AgentArgs{\n\t\t\tActivationKey: pulumi.String(\"AAAAA-7AAAA-GG7MC-3I9R3-27COD\"),\n\t\t\tAgentName:     pulumi.String(\"MyAgent\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst agent = new aws_native.datasync.Agent(\"agent\", {\n    activationKey: \"AAAAA-7AAAA-GG7MC-3I9R3-27COD\",\n    agentName: \"MyAgent\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nagent = aws_native.datasync.Agent(\"agent\",\n    activation_key=\"AAAAA-7AAAA-GG7MC-3I9R3-27COD\",\n    agent_name=\"MyAgent\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var agent = new AwsNative.DataSync.Agent(\"agent\", new()\n    {\n        ActivationKey = \"AAAAA-7AAAA-GG7MC-3I9R3-27COD\",\n        AgentName = \"MyAgent\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewAgent(ctx, \"agent\", \u0026datasync.AgentArgs{\n\t\t\tActivationKey: pulumi.String(\"AAAAA-7AAAA-GG7MC-3I9R3-27COD\"),\n\t\t\tAgentName:     pulumi.String(\"MyAgent\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst agent = new aws_native.datasync.Agent(\"agent\", {\n    activationKey: \"AAAAA-7AAAA-GG7MC-3I9R3-27COD\",\n    agentName: \"MyAgent\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nagent = aws_native.datasync.Agent(\"agent\",\n    activation_key=\"AAAAA-7AAAA-GG7MC-3I9R3-27COD\",\n    agent_name=\"MyAgent\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"activationKey":{"type":"string","description":"Activation key of the Agent.","replaceOnChanges":true},"agentArn":{"type":"string","description":"The DataSync Agent ARN."},"agentName":{"type":"string","description":"The name configured for the agent. Text reference used to identify the agent in the console."},"endpointType":{"$ref":"#/types/aws-native:datasync:AgentEndpointType","description":"The service endpoints that the agent will connect to."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security group used to protect your data transfer task subnets.","replaceOnChanges":true},"subnetArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the subnets in which DataSync will create elastic network interfaces for each data transfer task.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcEndpointId":{"type":"string","description":"The ID of the VPC endpoint that the agent has access to.","replaceOnChanges":true}},"type":"object","required":["agentArn","endpointType"],"inputProperties":{"activationKey":{"type":"string","description":"Activation key of the Agent."},"agentName":{"type":"string","description":"The name configured for the agent. Text reference used to identify the agent in the console."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security group used to protect your data transfer task subnets."},"subnetArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the subnets in which DataSync will create elastic network interfaces for each data transfer task."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcEndpointId":{"type":"string","description":"The ID of the VPC endpoint that the agent has access to."}}},"aws-native:datasync:LocationAzureBlob":{"description":"Resource Type definition for AWS::DataSync::LocationAzureBlob.","properties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect with your Azure Blob Storage container. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter."},"azureAccessTier":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureAccessTier","description":"Specifies an access tier for the objects you're transferring into your Azure Blob Storage container."},"azureBlobAuthenticationType":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobAuthenticationType","description":"The specific authentication type that you want DataSync to use to access your Azure Blob Container."},"azureBlobContainerUrl":{"type":"string","description":"The URL of the Azure Blob container that was described.","replaceOnChanges":true},"azureBlobSasConfiguration":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobSasConfiguration","description":"Specifies the SAS configuration that allows DataSync to access your Azure Blob Storage.\n\n\u003e If you provide an authentication token using `SasConfiguration` , but do not provide secret configuration details using `CmkSecretConfig` or `CustomSecretConfig` , then DataSync stores the token using your AWS account's secrets manager secret."},"azureBlobType":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobType","description":"Specifies a blob type for the objects you're transferring into your Azure Blob Storage container."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Azure Blob Location that is created."},"locationUri":{"type":"string","description":"The URL of the Azure Blob Location that was described."},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobManagedSecretConfig"},"subdirectory":{"type":"string","description":"The subdirectory in the Azure Blob Container that is used to read data from the Azure Blob Source Location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["azureBlobAuthenticationType","locationArn","locationUri","managedSecretConfig"],"inputProperties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect with your Azure Blob Storage container. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter."},"azureAccessTier":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureAccessTier","description":"Specifies an access tier for the objects you're transferring into your Azure Blob Storage container."},"azureBlobAuthenticationType":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobAuthenticationType","description":"The specific authentication type that you want DataSync to use to access your Azure Blob Container."},"azureBlobContainerUrl":{"type":"string","description":"The URL of the Azure Blob container that was described."},"azureBlobSasConfiguration":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobSasConfiguration","description":"Specifies the SAS configuration that allows DataSync to access your Azure Blob Storage.\n\n\u003e If you provide an authentication token using `SasConfiguration` , but do not provide secret configuration details using `CmkSecretConfig` or `CustomSecretConfig` , then DataSync stores the token using your AWS account's secrets manager secret."},"azureBlobType":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobType","description":"Specifies a blob type for the objects you're transferring into your Azure Blob Storage container."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"subdirectory":{"type":"string","description":"The subdirectory in the Azure Blob Container that is used to read data from the Azure Blob Source Location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["azureBlobAuthenticationType"]},"aws-native:datasync:LocationEfs":{"description":"Resource schema for AWS::DataSync::LocationEFS.","properties":{"accessPointArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Amazon EFS Access point that DataSync uses when accessing the EFS file system."},"ec2Config":{"$ref":"#/types/aws-native:datasync:LocationEfsEc2Config","description":"Specifies the subnet and security groups DataSync uses to connect to one of your Amazon EFS file system's [mount targets](https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html) .","replaceOnChanges":true},"efsFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Amazon EFS file system.","replaceOnChanges":true},"fileSystemAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS IAM role that the DataSync will assume when mounting the EFS file system."},"inTransitEncryption":{"$ref":"#/types/aws-native:datasync:LocationEfsInTransitEncryption","description":"Protocol that is used for encrypting the traffic exchanged between the DataSync Agent and the EFS file system."},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon EFS file system location that is created."},"locationUri":{"type":"string","description":"The URL of the EFS location that was described."},"subdirectory":{"type":"string","description":"A subdirectory in the location's path. This subdirectory in the EFS file system is used to read data from the EFS source location or write data to the EFS destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["ec2Config","locationArn","locationUri"],"inputProperties":{"accessPointArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Amazon EFS Access point that DataSync uses when accessing the EFS file system."},"ec2Config":{"$ref":"#/types/aws-native:datasync:LocationEfsEc2Config","description":"Specifies the subnet and security groups DataSync uses to connect to one of your Amazon EFS file system's [mount targets](https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html) ."},"efsFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Amazon EFS file system."},"fileSystemAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS IAM role that the DataSync will assume when mounting the EFS file system."},"inTransitEncryption":{"$ref":"#/types/aws-native:datasync:LocationEfsInTransitEncryption","description":"Protocol that is used for encrypting the traffic exchanged between the DataSync Agent and the EFS file system."},"subdirectory":{"type":"string","description":"A subdirectory in the location's path. This subdirectory in the EFS file system is used to read data from the EFS source location or write data to the EFS destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["ec2Config"]},"aws-native:datasync:LocationFSxLustre":{"description":"Resource schema for AWS::DataSync::LocationFSxLustre.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var locationFSxLustre = new AwsNative.DataSync.LocationFSxLustre(\"locationFSxLustre\", new()\n    {\n        FsxFilesystemArn = \"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\",\n        SecurityGroupArns = new[]\n        {\n            \"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\",\n        },\n        Subdirectory = \"/MySubdirectory\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewLocationFSxLustre(ctx, \"locationFSxLustre\", \u0026datasync.LocationFSxLustreArgs{\n\t\t\tFsxFilesystemArn: pulumi.String(\"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\"),\n\t\t\tSecurityGroupArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\"),\n\t\t\t},\n\t\t\tSubdirectory: pulumi.String(\"/MySubdirectory\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst locationFSxLustre = new aws_native.datasync.LocationFSxLustre(\"locationFSxLustre\", {\n    fsxFilesystemArn: \"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\",\n    securityGroupArns: [\"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\"],\n    subdirectory: \"/MySubdirectory\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlocation_f_sx_lustre = aws_native.datasync.LocationFSxLustre(\"locationFSxLustre\",\n    fsx_filesystem_arn=\"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\",\n    security_group_arns=[\"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\"],\n    subdirectory=\"/MySubdirectory\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var locationFSxLustre = new AwsNative.DataSync.LocationFSxLustre(\"locationFSxLustre\", new()\n    {\n        FsxFilesystemArn = \"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\",\n        SecurityGroupArns = new[]\n        {\n            \"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\",\n        },\n        Subdirectory = \"/MySubdirectory\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewLocationFSxLustre(ctx, \"locationFSxLustre\", \u0026datasync.LocationFSxLustreArgs{\n\t\t\tFsxFilesystemArn: pulumi.String(\"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\"),\n\t\t\tSecurityGroupArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\"),\n\t\t\t},\n\t\t\tSubdirectory: pulumi.String(\"/MySubdirectory\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst locationFSxLustre = new aws_native.datasync.LocationFSxLustre(\"locationFSxLustre\", {\n    fsxFilesystemArn: \"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\",\n    securityGroupArns: [\"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\"],\n    subdirectory: \"/MySubdirectory\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlocation_f_sx_lustre = aws_native.datasync.LocationFSxLustre(\"locationFSxLustre\",\n    fsx_filesystem_arn=\"arn:aws:fsx:us-east-2:111222333444:file-system/fs-12345fsx\",\n    security_group_arns=[\"arn:aws:ec2:us-east-2:11122233344:security-group/sg-12345678901212345\"],\n    subdirectory=\"/MySubdirectory\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx for Lustre file system.","replaceOnChanges":true},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx for Lustre file system location that is created."},"locationUri":{"type":"string","description":"The URL of the FSx for Lustre location that was described."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx for Lustre file system.","replaceOnChanges":true},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["locationArn","locationUri","securityGroupArns"],"inputProperties":{"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx for Lustre file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx for Lustre file system."},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["securityGroupArns"]},"aws-native:datasync:LocationFSxOntap":{"description":"Resource Type definition for AWS::DataSync::LocationFSxONTAP.","properties":{"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx ONAP file system."},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx ONTAP file system location that is created."},"locationUri":{"type":"string","description":"The URL of the FSx ONTAP file system that was described."},"protocol":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapProtocol","description":"Specifies the data transfer protocol that DataSync uses to access your Amazon FSx file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx ONTAP file system.","replaceOnChanges":true},"storageVirtualMachineArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx ONTAP SVM.","replaceOnChanges":true},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["fsxFilesystemArn","locationArn","locationUri","securityGroupArns","storageVirtualMachineArn"],"inputProperties":{"protocol":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapProtocol","description":"Specifies the data transfer protocol that DataSync uses to access your Amazon FSx file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx ONTAP file system."},"storageVirtualMachineArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx ONTAP SVM."},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["securityGroupArns","storageVirtualMachineArn"]},"aws-native:datasync:LocationFSxOpenZfs":{"description":"Resource schema for AWS::DataSync::LocationFSxOpenZFS.","properties":{"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx OpenZFS file system.","replaceOnChanges":true},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx OpenZFS file system location that is created."},"locationUri":{"type":"string","description":"The URL of the FSx OpenZFS that was described."},"protocol":{"$ref":"#/types/aws-native:datasync:LocationFSxOpenZfsProtocol","description":"The type of protocol that AWS DataSync uses to access your file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx OpenZFS file system.","replaceOnChanges":true},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["locationArn","locationUri","protocol","securityGroupArns"],"inputProperties":{"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx OpenZFS file system."},"protocol":{"$ref":"#/types/aws-native:datasync:LocationFSxOpenZfsProtocol","description":"The type of protocol that AWS DataSync uses to access your file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx OpenZFS file system."},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["protocol","securityGroupArns"]},"aws-native:datasync:LocationFSxWindows":{"description":"Resource Type definition for AWS::DataSync::LocationFSxWindows.","properties":{"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsCustomSecretConfig"},"domain":{"type":"string","description":"The name of the Windows domain that the FSx for Windows server belongs to."},"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx for Windows file system.","replaceOnChanges":true},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx for Windows file system location that is created."},"locationUri":{"type":"string","description":"The URL of the FSx for Windows location that was described."},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsManagedSecretConfig"},"password":{"type":"string","description":"The password of the user who has the permissions to access files and folders in the FSx for Windows file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx for Windows file system.","replaceOnChanges":true},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"user":{"type":"string","description":"The user who has the permissions to access files and folders in the FSx for Windows file system."}},"type":"object","required":["locationArn","locationUri","managedSecretConfig","securityGroupArns","user"],"inputProperties":{"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsCustomSecretConfig"},"domain":{"type":"string","description":"The name of the Windows domain that the FSx for Windows server belongs to."},"fsxFilesystemArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the FSx for Windows file system."},"password":{"type":"string","description":"The password of the user who has the permissions to access files and folders in the FSx for Windows file system."},"securityGroupArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the security groups that are to use to configure the FSx for Windows file system."},"subdirectory":{"type":"string","description":"A subdirectory in the location's path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"user":{"type":"string","description":"The user who has the permissions to access files and folders in the FSx for Windows file system."}},"requiredInputs":["securityGroupArns","user"]},"aws-native:datasync:LocationHdfs":{"description":"Resource Type definition for AWS::DataSync::LocationHDFS.","properties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"ARN(s) of the agent(s) to use for an HDFS location."},"authenticationType":{"$ref":"#/types/aws-native:datasync:LocationHdfsAuthenticationType","description":"The authentication mode used to determine identity of user."},"blockSize":{"type":"integer","description":"Size of chunks (blocks) in bytes that the data is divided into when stored in the HDFS cluster."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsCustomSecretConfig"},"kerberosKeytab":{"type":"string","description":"The Base64 string representation of the Keytab file."},"kerberosKrb5Conf":{"type":"string","description":"The string representation of the Krb5Conf file, or the presigned URL to access the Krb5.conf file within an S3 bucket."},"kerberosPrincipal":{"type":"string","description":"The unique identity, or principal, to which Kerberos can assign tickets."},"kmsKeyProviderUri":{"type":"string","description":"The identifier for the Key Management Server where the encryption keys that encrypt data inside HDFS clusters are stored."},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the HDFS location."},"locationUri":{"type":"string","description":"The URL of the HDFS location that was described."},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsManagedSecretConfig"},"nameNodes":{"type":"array","items":{"$ref":"#/types/aws-native:datasync:LocationHdfsNameNode"},"description":"An array of Name Node(s) of the HDFS location."},"qopConfiguration":{"$ref":"#/types/aws-native:datasync:LocationHdfsQopConfiguration","description":"The Quality of Protection (QOP) configuration specifies the Remote Procedure Call (RPC) and data transfer protection settings configured on the Hadoop Distributed File System (HDFS) cluster. If `QopConfiguration` isn't specified, `RpcProtection` and `DataTransferProtection` default to `PRIVACY` . If you set `RpcProtection` or `DataTransferProtection` , the other parameter assumes the same value."},"replicationFactor":{"type":"integer","description":"Number of copies of each block that exists inside the HDFS cluster."},"simpleUser":{"type":"string","description":"The user name that has read and write permissions on the specified HDFS cluster."},"subdirectory":{"type":"string","description":"The subdirectory in HDFS that is used to read data from the HDFS source location or write data to the HDFS destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["agentArns","authenticationType","locationArn","locationUri","managedSecretConfig","nameNodes"],"inputProperties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"ARN(s) of the agent(s) to use for an HDFS location."},"authenticationType":{"$ref":"#/types/aws-native:datasync:LocationHdfsAuthenticationType","description":"The authentication mode used to determine identity of user."},"blockSize":{"type":"integer","description":"Size of chunks (blocks) in bytes that the data is divided into when stored in the HDFS cluster."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsCustomSecretConfig"},"kerberosKeytab":{"type":"string","description":"The Base64 string representation of the Keytab file."},"kerberosKrb5Conf":{"type":"string","description":"The string representation of the Krb5Conf file, or the presigned URL to access the Krb5.conf file within an S3 bucket."},"kerberosPrincipal":{"type":"string","description":"The unique identity, or principal, to which Kerberos can assign tickets."},"kmsKeyProviderUri":{"type":"string","description":"The identifier for the Key Management Server where the encryption keys that encrypt data inside HDFS clusters are stored."},"nameNodes":{"type":"array","items":{"$ref":"#/types/aws-native:datasync:LocationHdfsNameNode"},"description":"An array of Name Node(s) of the HDFS location."},"qopConfiguration":{"$ref":"#/types/aws-native:datasync:LocationHdfsQopConfiguration","description":"The Quality of Protection (QOP) configuration specifies the Remote Procedure Call (RPC) and data transfer protection settings configured on the Hadoop Distributed File System (HDFS) cluster. If `QopConfiguration` isn't specified, `RpcProtection` and `DataTransferProtection` default to `PRIVACY` . If you set `RpcProtection` or `DataTransferProtection` , the other parameter assumes the same value."},"replicationFactor":{"type":"integer","description":"Number of copies of each block that exists inside the HDFS cluster."},"simpleUser":{"type":"string","description":"The user name that has read and write permissions on the specified HDFS cluster."},"subdirectory":{"type":"string","description":"The subdirectory in HDFS that is used to read data from the HDFS source location or write data to the HDFS destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["agentArns","authenticationType","nameNodes"]},"aws-native:datasync:LocationNfs":{"description":"Resource schema for AWS::DataSync::LocationNFS","properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the NFS location."},"locationUri":{"type":"string","description":"The URL of the NFS location that was described."},"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationNfsMountOptions","description":"Specifies the options that DataSync can use to mount your NFS file server."},"onPremConfig":{"$ref":"#/types/aws-native:datasync:LocationNfsOnPremConfig","description":"Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect to your NFS file server.\n\nYou can specify more than one agent. For more information, see [Using multiple DataSync agents](https://docs.aws.amazon.com/datasync/latest/userguide/do-i-need-datasync-agent.html#multiple-agents) ."},"serverHostname":{"type":"string","description":"The name of the NFS server. This value is the IP address or DNS name of the NFS server."},"subdirectory":{"type":"string","description":"The subdirectory in the NFS file system that is used to read data from the NFS source location or write data to the NFS destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["locationArn","locationUri","onPremConfig"],"inputProperties":{"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationNfsMountOptions","description":"Specifies the options that DataSync can use to mount your NFS file server."},"onPremConfig":{"$ref":"#/types/aws-native:datasync:LocationNfsOnPremConfig","description":"Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect to your NFS file server.\n\nYou can specify more than one agent. For more information, see [Using multiple DataSync agents](https://docs.aws.amazon.com/datasync/latest/userguide/do-i-need-datasync-agent.html#multiple-agents) ."},"serverHostname":{"type":"string","description":"The name of the NFS server. This value is the IP address or DNS name of the NFS server."},"subdirectory":{"type":"string","description":"The subdirectory in the NFS file system that is used to read data from the NFS source location or write data to the NFS destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["onPremConfig"]},"aws-native:datasync:LocationObjectStorage":{"description":"Resource Type definition for AWS::DataSync::LocationObjectStorage.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var locationObjectStorage = new AwsNative.DataSync.LocationObjectStorage(\"locationObjectStorage\", new()\n    {\n        AgentArns = new[]\n        {\n            \"arn:aws:datasync:us-east-2:111222333444:agent/agent-0b0addbeef44b3nfs\",\n        },\n        BucketName = \"MyBucket\",\n        ServerHostname = \"MyServer@example.com\",\n        ServerProtocol = AwsNative.DataSync.LocationObjectStorageServerProtocol.Https,\n        Subdirectory = \"/MySubdirectory\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewLocationObjectStorage(ctx, \"locationObjectStorage\", \u0026datasync.LocationObjectStorageArgs{\n\t\t\tAgentArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:datasync:us-east-2:111222333444:agent/agent-0b0addbeef44b3nfs\"),\n\t\t\t},\n\t\t\tBucketName:     pulumi.String(\"MyBucket\"),\n\t\t\tServerHostname: pulumi.String(\"MyServer@example.com\"),\n\t\t\tServerProtocol: datasync.LocationObjectStorageServerProtocolHttps,\n\t\t\tSubdirectory:   pulumi.String(\"/MySubdirectory\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst locationObjectStorage = new aws_native.datasync.LocationObjectStorage(\"locationObjectStorage\", {\n    agentArns: [\"arn:aws:datasync:us-east-2:111222333444:agent/agent-0b0addbeef44b3nfs\"],\n    bucketName: \"MyBucket\",\n    serverHostname: \"MyServer@example.com\",\n    serverProtocol: aws_native.datasync.LocationObjectStorageServerProtocol.Https,\n    subdirectory: \"/MySubdirectory\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlocation_object_storage = aws_native.datasync.LocationObjectStorage(\"locationObjectStorage\",\n    agent_arns=[\"arn:aws:datasync:us-east-2:111222333444:agent/agent-0b0addbeef44b3nfs\"],\n    bucket_name=\"MyBucket\",\n    server_hostname=\"MyServer@example.com\",\n    server_protocol=aws_native.datasync.LocationObjectStorageServerProtocol.HTTPS,\n    subdirectory=\"/MySubdirectory\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"accessKey":{"type":"string","description":"Optional. The access key is used if credentials are required to access the self-managed object storage server."},"agentArns":{"type":"array","items":{"type":"string"},"description":"Specifies the Amazon Resource Names (ARNs) of the DataSync agents that can connect with your object storage system. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter."},"bucketName":{"type":"string","description":"The name of the bucket on the self-managed object storage server.","replaceOnChanges":true},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, which includes the `SecretKey` that DataSync uses to access a specific object storage location, with a customer-managed AWS KMS key .\n\nWhen you include this parameter as part of a `CreateLocationObjectStorage` request, you provide only the KMS key ARN. DataSync uses this KMS key together with the value you specify for the `SecretKey` parameter to create a DataSync-managed secret to store the location access credentials.\n\nMake sure that DataSync has permission to access the KMS key that you specify.\n\n\u003e You can use either `CmkSecretConfig` (with `SecretKey` ) or `CustomSecretConfig` (without `SecretKey` ) to provide credentials for a `CreateLocationObjectStorage` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where the secret key for a specific object storage location is stored in plain text, in Secrets Manager. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` (with `SecretKey` ) or `CustomSecretConfig` (without `SecretKey` ) to provide credentials for a `CreateLocationObjectStorage` request. Do not provide both parameters for the same request."},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the location that is created."},"locationUri":{"type":"string","description":"The URL of the object storage location that was described."},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageManagedSecretConfig"},"secretKey":{"type":"string","description":"Optional. The secret key is used if credentials are required to access the self-managed object storage server."},"serverCertificate":{"type":"string","description":"X.509 PEM content containing a certificate authority or chain to trust."},"serverHostname":{"type":"string","description":"The name of the self-managed object storage server. This value is the IP address or Domain Name Service (DNS) name of the object storage server."},"serverPort":{"type":"integer","description":"The port that your self-managed server accepts inbound network traffic on."},"serverProtocol":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageServerProtocol","description":"The protocol that the object storage server uses to communicate."},"subdirectory":{"type":"string","description":"The subdirectory in the self-managed object storage server that is used to read data from."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["locationArn","locationUri","managedSecretConfig"],"inputProperties":{"accessKey":{"type":"string","description":"Optional. The access key is used if credentials are required to access the self-managed object storage server."},"agentArns":{"type":"array","items":{"type":"string"},"description":"Specifies the Amazon Resource Names (ARNs) of the DataSync agents that can connect with your object storage system. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter."},"bucketName":{"type":"string","description":"The name of the bucket on the self-managed object storage server."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, which includes the `SecretKey` that DataSync uses to access a specific object storage location, with a customer-managed AWS KMS key .\n\nWhen you include this parameter as part of a `CreateLocationObjectStorage` request, you provide only the KMS key ARN. DataSync uses this KMS key together with the value you specify for the `SecretKey` parameter to create a DataSync-managed secret to store the location access credentials.\n\nMake sure that DataSync has permission to access the KMS key that you specify.\n\n\u003e You can use either `CmkSecretConfig` (with `SecretKey` ) or `CustomSecretConfig` (without `SecretKey` ) to provide credentials for a `CreateLocationObjectStorage` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where the secret key for a specific object storage location is stored in plain text, in Secrets Manager. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` (with `SecretKey` ) or `CustomSecretConfig` (without `SecretKey` ) to provide credentials for a `CreateLocationObjectStorage` request. Do not provide both parameters for the same request."},"secretKey":{"type":"string","description":"Optional. The secret key is used if credentials are required to access the self-managed object storage server."},"serverCertificate":{"type":"string","description":"X.509 PEM content containing a certificate authority or chain to trust."},"serverHostname":{"type":"string","description":"The name of the self-managed object storage server. This value is the IP address or Domain Name Service (DNS) name of the object storage server."},"serverPort":{"type":"integer","description":"The port that your self-managed server accepts inbound network traffic on."},"serverProtocol":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageServerProtocol","description":"The protocol that the object storage server uses to communicate."},"subdirectory":{"type":"string","description":"The subdirectory in the self-managed object storage server that is used to read data from."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:datasync:LocationS3":{"description":"Resource schema for AWS::DataSync::LocationS3\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var locationS3 = new AwsNative.DataSync.LocationS3(\"locationS3\", new()\n    {\n        S3BucketArn = \"arn:aws:s3:::MyBucket\",\n        S3Config = new AwsNative.DataSync.Inputs.LocationS3s3ConfigArgs\n        {\n            BucketAccessRoleArn = \"arn:aws:iam::111222333444:role/MyBucketAccessRole\",\n        },\n        S3StorageClass = AwsNative.DataSync.LocationS3S3StorageClass.Standard,\n        Subdirectory = \"/MyFolder\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewLocationS3(ctx, \"locationS3\", \u0026datasync.LocationS3Args{\n\t\t\tS3BucketArn: pulumi.String(\"arn:aws:s3:::MyBucket\"),\n\t\t\tS3Config: \u0026datasync.LocationS3s3ConfigArgs{\n\t\t\t\tBucketAccessRoleArn: pulumi.String(\"arn:aws:iam::111222333444:role/MyBucketAccessRole\"),\n\t\t\t},\n\t\t\tS3StorageClass: datasync.LocationS3S3StorageClassStandard,\n\t\t\tSubdirectory:   pulumi.String(\"/MyFolder\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst locationS3 = new aws_native.datasync.LocationS3(\"locationS3\", {\n    s3BucketArn: \"arn:aws:s3:::MyBucket\",\n    s3Config: {\n        bucketAccessRoleArn: \"arn:aws:iam::111222333444:role/MyBucketAccessRole\",\n    },\n    s3StorageClass: aws_native.datasync.LocationS3S3StorageClass.Standard,\n    subdirectory: \"/MyFolder\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlocation_s3 = aws_native.datasync.LocationS3(\"locationS3\",\n    s3_bucket_arn=\"arn:aws:s3:::MyBucket\",\n    s3_config={\n        \"bucket_access_role_arn\": \"arn:aws:iam::111222333444:role/MyBucketAccessRole\",\n    },\n    s3_storage_class=aws_native.datasync.LocationS3S3StorageClass.STANDARD,\n    subdirectory=\"/MyFolder\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var locationS3 = new AwsNative.DataSync.LocationS3(\"locationS3\", new()\n    {\n        S3BucketArn = \"arn:aws:s3:::MyBucket\",\n        S3Config = new AwsNative.DataSync.Inputs.LocationS3s3ConfigArgs\n        {\n            BucketAccessRoleArn = \"arn:aws:iam::111222333444:role/MyBucketAccessRole\",\n        },\n        S3StorageClass = AwsNative.DataSync.LocationS3S3StorageClass.Standard,\n        Subdirectory = \"/MyFolder\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewLocationS3(ctx, \"locationS3\", \u0026datasync.LocationS3Args{\n\t\t\tS3BucketArn: pulumi.String(\"arn:aws:s3:::MyBucket\"),\n\t\t\tS3Config: \u0026datasync.LocationS3s3ConfigArgs{\n\t\t\t\tBucketAccessRoleArn: pulumi.String(\"arn:aws:iam::111222333444:role/MyBucketAccessRole\"),\n\t\t\t},\n\t\t\tS3StorageClass: datasync.LocationS3S3StorageClassStandard,\n\t\t\tSubdirectory:   pulumi.String(\"/MyFolder\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst locationS3 = new aws_native.datasync.LocationS3(\"locationS3\", {\n    s3BucketArn: \"arn:aws:s3:::MyBucket\",\n    s3Config: {\n        bucketAccessRoleArn: \"arn:aws:iam::111222333444:role/MyBucketAccessRole\",\n    },\n    s3StorageClass: aws_native.datasync.LocationS3S3StorageClass.Standard,\n    subdirectory: \"/MyFolder\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlocation_s3 = aws_native.datasync.LocationS3(\"locationS3\",\n    s3_bucket_arn=\"arn:aws:s3:::MyBucket\",\n    s3_config={\n        \"bucket_access_role_arn\": \"arn:aws:iam::111222333444:role/MyBucketAccessRole\",\n    },\n    s3_storage_class=aws_native.datasync.LocationS3S3StorageClass.STANDARD,\n    subdirectory=\"/MyFolder\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket location."},"locationUri":{"type":"string","description":"The URL of the S3 location that was described."},"s3BucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket.","replaceOnChanges":true},"s3Config":{"$ref":"#/types/aws-native:datasync:LocationS3s3Config","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that is used to access an Amazon S3 bucket.\n\nFor detailed information about using such a role, see [Creating a Location for Amazon S3](https://docs.aws.amazon.com/datasync/latest/userguide/working-with-locations.html#create-s3-location) in the *AWS DataSync User Guide* ."},"s3StorageClass":{"$ref":"#/types/aws-native:datasync:LocationS3S3StorageClass","description":"The Amazon S3 storage class you want to store your files in when this location is used as a task destination."},"subdirectory":{"type":"string","description":"A subdirectory in the Amazon S3 bucket. This subdirectory in Amazon S3 is used to read data from the S3 source location or write data to the S3 destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["locationArn","locationUri","s3Config"],"inputProperties":{"s3BucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket."},"s3Config":{"$ref":"#/types/aws-native:datasync:LocationS3s3Config","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that is used to access an Amazon S3 bucket.\n\nFor detailed information about using such a role, see [Creating a Location for Amazon S3](https://docs.aws.amazon.com/datasync/latest/userguide/working-with-locations.html#create-s3-location) in the *AWS DataSync User Guide* ."},"s3StorageClass":{"$ref":"#/types/aws-native:datasync:LocationS3S3StorageClass","description":"The Amazon S3 storage class you want to store your files in when this location is used as a task destination."},"subdirectory":{"type":"string","description":"A subdirectory in the Amazon S3 bucket. This subdirectory in Amazon S3 is used to read data from the S3 source location or write data to the S3 destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["s3Config"]},"aws-native:datasync:LocationSmb":{"description":"Resource Type definition for AWS::DataSync::LocationSMB.","properties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of agents to use for a Simple Message Block (SMB) location."},"authenticationType":{"$ref":"#/types/aws-native:datasync:LocationSmbAuthenticationType","description":"The authentication mode used to determine identity of user."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"dnsIpAddresses":{"type":"array","items":{"type":"string"},"description":"Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server."},"domain":{"type":"string","description":"The name of the Windows domain that the SMB server belongs to."},"kerberosKeytab":{"type":"string","description":"The Base64 string representation of the Keytab file. Specifies your Kerberos key table (keytab) file, which includes mappings between your service principal name (SPN) and encryption keys. To avoid task execution errors, make sure that the SPN in the keytab file matches exactly what you specify for KerberosPrincipal and in your krb5.conf file."},"kerberosKrb5Conf":{"type":"string","description":"The string representation of the Krb5Conf file, or the presigned URL to access the Krb5.conf file within an S3 bucket. Specifies a Kerberos configuration file (krb5.conf) that defines your Kerberos realm configuration. To avoid task execution errors, make sure that the service principal name (SPN) in the krb5.conf file matches exactly what you specify for KerberosPrincipal and in your keytab file."},"kerberosPrincipal":{"type":"string","description":"Specifies a service principal name (SPN), which is an identity in your Kerberos realm that has permission to access the files, folders, and file metadata in your SMB file server. SPNs are case sensitive and must include a prepended cifs/. For example, an SPN might look like cifs/kerberosuser@EXAMPLE.COM. Your task execution will fail if the SPN that you provide for this parameter doesn't match exactly what's in your keytab or krb5.conf files."},"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SMB location that is created."},"locationUri":{"type":"string","description":"The URL of the SMB location that was described."},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbManagedSecretConfig"},"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationSmbMountOptions","description":"Specifies the version of the SMB protocol that DataSync uses to access your SMB file server."},"password":{"type":"string","description":"The password of the user who can mount the share and has the permissions to access files and folders in the SMB share."},"serverHostname":{"type":"string","description":"The name of the SMB server. This value is the IP address or Domain Name Service (DNS) name of the SMB server."},"subdirectory":{"type":"string","description":"The subdirectory in the SMB file system that is used to read data from the SMB source location or write data to the SMB destination"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"user":{"type":"string","description":"The user who can mount the share, has the permissions to access files and folders in the SMB share."}},"type":"object","required":["agentArns","locationArn","locationUri","managedSecretConfig"],"inputProperties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of agents to use for a Simple Message Block (SMB) location."},"authenticationType":{"$ref":"#/types/aws-native:datasync:LocationSmbAuthenticationType","description":"The authentication mode used to determine identity of user."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"dnsIpAddresses":{"type":"array","items":{"type":"string"},"description":"Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server."},"domain":{"type":"string","description":"The name of the Windows domain that the SMB server belongs to."},"kerberosKeytab":{"type":"string","description":"The Base64 string representation of the Keytab file. Specifies your Kerberos key table (keytab) file, which includes mappings between your service principal name (SPN) and encryption keys. To avoid task execution errors, make sure that the SPN in the keytab file matches exactly what you specify for KerberosPrincipal and in your krb5.conf file."},"kerberosKrb5Conf":{"type":"string","description":"The string representation of the Krb5Conf file, or the presigned URL to access the Krb5.conf file within an S3 bucket. Specifies a Kerberos configuration file (krb5.conf) that defines your Kerberos realm configuration. To avoid task execution errors, make sure that the service principal name (SPN) in the krb5.conf file matches exactly what you specify for KerberosPrincipal and in your keytab file."},"kerberosPrincipal":{"type":"string","description":"Specifies a service principal name (SPN), which is an identity in your Kerberos realm that has permission to access the files, folders, and file metadata in your SMB file server. SPNs are case sensitive and must include a prepended cifs/. For example, an SPN might look like cifs/kerberosuser@EXAMPLE.COM. Your task execution will fail if the SPN that you provide for this parameter doesn't match exactly what's in your keytab or krb5.conf files."},"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationSmbMountOptions","description":"Specifies the version of the SMB protocol that DataSync uses to access your SMB file server."},"password":{"type":"string","description":"The password of the user who can mount the share and has the permissions to access files and folders in the SMB share."},"serverHostname":{"type":"string","description":"The name of the SMB server. This value is the IP address or Domain Name Service (DNS) name of the SMB server."},"subdirectory":{"type":"string","description":"The subdirectory in the SMB file system that is used to read data from the SMB source location or write data to the SMB destination"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"user":{"type":"string","description":"The user who can mount the share, has the permissions to access files and folders in the SMB share."}},"requiredInputs":["agentArns"]},"aws-native:datasync:StorageSystem":{"description":"Resource schema for AWS::DataSync::StorageSystem.","properties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"The ARN of the DataSync agent that connects to and reads from the on-premises storage system's management interface."},"cloudWatchLogGroupArn":{"type":"string","description":"The ARN of the Amazon CloudWatch log group used to monitor and log discovery job events."},"connectivityStatus":{"$ref":"#/types/aws-native:datasync:StorageSystemConnectivityStatus","description":"Indicates whether the DataSync agent can access the on-premises storage system."},"name":{"type":"string","description":"A familiar name for the on-premises storage system."},"secretsManagerArn":{"type":"string","description":"The ARN of a secret stored by AWS Secrets Manager."},"serverConfiguration":{"$ref":"#/types/aws-native:datasync:StorageSystemServerConfiguration"},"serverCredentials":{"$ref":"#/types/aws-native:datasync:StorageSystemServerCredentials"},"storageSystemArn":{"type":"string","description":"The ARN of the on-premises storage system added to DataSync Discovery."},"systemType":{"$ref":"#/types/aws-native:datasync:StorageSystemSystemType","description":"The type of on-premises storage system that DataSync Discovery will analyze."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["agentArns","connectivityStatus","secretsManagerArn","serverConfiguration","storageSystemArn","systemType"],"inputProperties":{"agentArns":{"type":"array","items":{"type":"string"},"description":"The ARN of the DataSync agent that connects to and reads from the on-premises storage system's management interface."},"cloudWatchLogGroupArn":{"type":"string","description":"The ARN of the Amazon CloudWatch log group used to monitor and log discovery job events."},"name":{"type":"string","description":"A familiar name for the on-premises storage system."},"serverConfiguration":{"$ref":"#/types/aws-native:datasync:StorageSystemServerConfiguration"},"serverCredentials":{"$ref":"#/types/aws-native:datasync:StorageSystemServerCredentials"},"systemType":{"$ref":"#/types/aws-native:datasync:StorageSystemSystemType","description":"The type of on-premises storage system that DataSync Discovery will analyze."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["agentArns","serverConfiguration","systemType"]},"aws-native:datasync:Task":{"description":"Resource schema for AWS::DataSync::Task.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var task = new AwsNative.DataSync.Task(\"task\", new()\n    {\n        SourceLocationArn = \"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\",\n        DestinationLocationArn = \"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewTask(ctx, \"task\", \u0026datasync.TaskArgs{\n\t\t\tSourceLocationArn:      pulumi.String(\"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\"),\n\t\t\tDestinationLocationArn: pulumi.String(\"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst task = new aws_native.datasync.Task(\"task\", {\n    sourceLocationArn: \"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\",\n    destinationLocationArn: \"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntask = aws_native.datasync.Task(\"task\",\n    source_location_arn=\"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\",\n    destination_location_arn=\"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var task = new AwsNative.DataSync.Task(\"task\", new()\n    {\n        SourceLocationArn = \"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\",\n        DestinationLocationArn = \"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/datasync\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := datasync.NewTask(ctx, \"task\", \u0026datasync.TaskArgs{\n\t\t\tSourceLocationArn:      pulumi.String(\"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\"),\n\t\t\tDestinationLocationArn: pulumi.String(\"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst task = new aws_native.datasync.Task(\"task\", {\n    sourceLocationArn: \"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\",\n    destinationLocationArn: \"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntask = aws_native.datasync.Task(\"task\",\n    source_location_arn=\"arn:aws:datasync:us-east-2:111222333444:location/loc-07db7abfc326c50s3\",\n    destination_location_arn=\"arn:aws:datasync:us-east-2:111222333444:location/loc-18ec8bcgd437d61t4\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"cloudWatchLogGroupArn":{"type":"string","description":"The ARN of the Amazon CloudWatch log group that is used to monitor and log events in the task."},"destinationLocationArn":{"type":"string","description":"The ARN of an AWS storage resource's location.","replaceOnChanges":true},"destinationNetworkInterfaceArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the destination elastic network interfaces (ENIs) that were created for your subnet."},"excludes":{"type":"array","items":{"$ref":"#/types/aws-native:datasync:TaskFilterRule"},"description":"Specifies exclude filters that define the files, objects, and folders in your source location that you don't want DataSync to transfer. For more information and examples, see [Specifying what DataSync transfers by using filters](https://docs.aws.amazon.com/datasync/latest/userguide/filtering.html) ."},"includes":{"type":"array","items":{"$ref":"#/types/aws-native:datasync:TaskFilterRule"},"description":"Specifies include filters that define the files, objects, and folders in your source location that you want DataSync to transfer. For more information and examples, see [Specifying what DataSync transfers by using filters](https://docs.aws.amazon.com/datasync/latest/userguide/filtering.html) ."},"manifestConfig":{"$ref":"#/types/aws-native:datasync:TaskManifestConfig","description":"The configuration of the manifest that lists the files or objects that you want DataSync to transfer. For more information, see [Specifying what DataSync transfers by using a manifest](https://docs.aws.amazon.com/datasync/latest/userguide/transferring-with-manifest.html) ."},"name":{"type":"string","description":"The name of a task. This value is a text reference that is used to identify the task in the console."},"options":{"$ref":"#/types/aws-native:datasync:TaskOptions","description":"Specifies your task's settings, such as preserving file metadata, verifying data integrity, among other options."},"schedule":{"$ref":"#/types/aws-native:datasync:TaskSchedule","description":"Specifies a schedule for when you want your task to run. For more information, see [Scheduling your task](https://docs.aws.amazon.com/datasync/latest/userguide/task-scheduling.html) ."},"sourceLocationArn":{"type":"string","description":"The ARN of the source location for the task.","replaceOnChanges":true},"sourceNetworkInterfaceArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the source ENIs that were created for your subnet."},"status":{"$ref":"#/types/aws-native:datasync:TaskStatus","description":"The status of the task that was described."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"taskArn":{"type":"string","description":"The ARN of the task."},"taskMode":{"$ref":"#/types/aws-native:datasync:TaskMode","description":"Specifies the task mode for the task.","replaceOnChanges":true},"taskReportConfig":{"$ref":"#/types/aws-native:datasync:TaskReportConfig","description":"The configuration of your task report, which provides detailed information about your DataSync transfer. For more information, see [Monitoring your DataSync transfers with task reports](https://docs.aws.amazon.com/datasync/latest/userguide/task-reports.html) ."}},"type":"object","required":["destinationLocationArn","destinationNetworkInterfaceArns","sourceLocationArn","sourceNetworkInterfaceArns","status","taskArn"],"inputProperties":{"cloudWatchLogGroupArn":{"type":"string","description":"The ARN of the Amazon CloudWatch log group that is used to monitor and log events in the task."},"destinationLocationArn":{"type":"string","description":"The ARN of an AWS storage resource's location."},"excludes":{"type":"array","items":{"$ref":"#/types/aws-native:datasync:TaskFilterRule"},"description":"Specifies exclude filters that define the files, objects, and folders in your source location that you don't want DataSync to transfer. For more information and examples, see [Specifying what DataSync transfers by using filters](https://docs.aws.amazon.com/datasync/latest/userguide/filtering.html) ."},"includes":{"type":"array","items":{"$ref":"#/types/aws-native:datasync:TaskFilterRule"},"description":"Specifies include filters that define the files, objects, and folders in your source location that you want DataSync to transfer. For more information and examples, see [Specifying what DataSync transfers by using filters](https://docs.aws.amazon.com/datasync/latest/userguide/filtering.html) ."},"manifestConfig":{"$ref":"#/types/aws-native:datasync:TaskManifestConfig","description":"The configuration of the manifest that lists the files or objects that you want DataSync to transfer. For more information, see [Specifying what DataSync transfers by using a manifest](https://docs.aws.amazon.com/datasync/latest/userguide/transferring-with-manifest.html) ."},"name":{"type":"string","description":"The name of a task. This value is a text reference that is used to identify the task in the console."},"options":{"$ref":"#/types/aws-native:datasync:TaskOptions","description":"Specifies your task's settings, such as preserving file metadata, verifying data integrity, among other options."},"schedule":{"$ref":"#/types/aws-native:datasync:TaskSchedule","description":"Specifies a schedule for when you want your task to run. For more information, see [Scheduling your task](https://docs.aws.amazon.com/datasync/latest/userguide/task-scheduling.html) ."},"sourceLocationArn":{"type":"string","description":"The ARN of the source location for the task."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"taskMode":{"$ref":"#/types/aws-native:datasync:TaskMode","description":"Specifies the task mode for the task."},"taskReportConfig":{"$ref":"#/types/aws-native:datasync:TaskReportConfig","description":"The configuration of your task report, which provides detailed information about your DataSync transfer. For more information, see [Monitoring your DataSync transfers with task reports](https://docs.aws.amazon.com/datasync/latest/userguide/task-reports.html) ."}},"requiredInputs":["destinationLocationArn","sourceLocationArn"]},"aws-native:datazone:Connection":{"description":"Connections enables users to connect their DataZone resources (domains, projects, and environments) to external resources/services (data, compute, etc)","properties":{"awsLocation":{"$ref":"#/types/aws-native:datazone:ConnectionAwsLocation","description":"The location where the connection is created."},"connectionId":{"type":"string","description":"The ID of the connection."},"description":{"type":"string","description":"The description of the connection."},"domainId":{"type":"string","description":"The ID of the domain in which the connection is created."},"domainIdentifier":{"type":"string","description":"The identifier of the domain in which the connection is created.","replaceOnChanges":true},"domainUnitId":{"type":"string","description":"The ID of the domain unit in which the connection is created."},"enableTrustedIdentityPropagation":{"type":"boolean","description":"Specifies whether the trusted identity propagation is enabled","replaceOnChanges":true},"environmentId":{"type":"string","description":"The ID of the environment in which the connection is created."},"environmentIdentifier":{"type":"string","description":"The identifier of the environment in which the connection is created.","replaceOnChanges":true},"environmentUserRole":{"type":"string","description":"The role of the user in the environment."},"name":{"type":"string","description":"The name of the connection.","replaceOnChanges":true},"projectId":{"type":"string","description":"The ID of the project in which the connection is created."},"projectIdentifier":{"type":"string","description":"The identifier of the project in which the connection should be created. If ","replaceOnChanges":true},"props":{"oneOf":[{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput0Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput1Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput2Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput3Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput4Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput5Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput6Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput7Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput8Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput9Properties"}],"description":"Connection props."},"scope":{"$ref":"#/types/aws-native:datazone:ConnectionScope","description":"The scope of the connection.","replaceOnChanges":true},"type":{"type":"string","description":"The type of the connection."}},"type":"object","required":["connectionId","domainId","domainIdentifier","domainUnitId","environmentId","environmentUserRole","name","projectId","type"],"inputProperties":{"awsLocation":{"$ref":"#/types/aws-native:datazone:ConnectionAwsLocation","description":"The location where the connection is created."},"description":{"type":"string","description":"The description of the connection."},"domainIdentifier":{"type":"string","description":"The identifier of the domain in which the connection is created."},"enableTrustedIdentityPropagation":{"type":"boolean","description":"Specifies whether the trusted identity propagation is enabled"},"environmentIdentifier":{"type":"string","description":"The identifier of the environment in which the connection is created."},"name":{"type":"string","description":"The name of the connection."},"projectIdentifier":{"type":"string","description":"The identifier of the project in which the connection should be created. If "},"props":{"oneOf":[{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput0Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput1Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput2Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput3Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput4Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput5Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput6Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput7Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput8Properties"},{"$ref":"#/types/aws-native:datazone:ConnectionPropertiesInput9Properties"}],"description":"Connection props."},"scope":{"$ref":"#/types/aws-native:datazone:ConnectionScope","description":"The scope of the connection."}},"requiredInputs":["domainIdentifier"]},"aws-native:datazone:DataSource":{"description":"A data source is used to import technical metadata of assets (data) from the source databases or data warehouses into Amazon DataZone. ","properties":{"assetFormsInput":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:DataSourceFormInput"},"description":"The metadata forms that are to be attached to the assets that this data source works with."},"awsId":{"type":"string","description":"The unique identifier of the data source."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:datazone:DataSourceConfigurationInput0Properties"},{"$ref":"#/types/aws-native:datazone:DataSourceConfigurationInput1Properties"},{"$ref":"#/types/aws-native:datazone:DataSourceConfigurationInput2Properties"}],"description":"Configuration of the data source. It can be set to either glueRunConfiguration or redshiftRunConfiguration."},"connectionId":{"type":"string","description":"The unique identifier of a connection used to fetch relevant parameters from connection during Datasource run"},"connectionIdentifier":{"type":"string","description":"The unique identifier of a connection used to fetch relevant parameters from connection during Datasource run","replaceOnChanges":true},"createdAt":{"type":"string","description":"The timestamp of when the data source was created."},"description":{"type":"string","description":"The description of the data source."},"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain where the data source is created."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain where the data source is created.","replaceOnChanges":true},"enableSetting":{"$ref":"#/types/aws-native:datazone:DataSourceEnableSetting","description":"Specifies whether the data source is enabled."},"environmentId":{"type":"string","description":"The unique identifier of the Amazon DataZone environment to which the data source publishes assets."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the Amazon DataZone environment to which the data source publishes assets.","replaceOnChanges":true},"lastRunAssetCount":{"type":"number","description":"The number of assets created by the data source during its last run."},"lastRunAt":{"type":"string","description":"The timestamp that specifies when the data source was last run."},"lastRunStatus":{"type":"string","description":"The status of the last run of this data source."},"name":{"type":"string","description":"The name of the data source."},"projectId":{"type":"string","description":"The ID of the Amazon DataZone project to which the data source is added."},"projectIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone project in which you want to add the data source.","replaceOnChanges":true},"publishOnImport":{"type":"boolean","description":"Specifies whether the assets that this data source creates in the inventory are to be also automatically published to the catalog."},"recommendation":{"$ref":"#/types/aws-native:datazone:DataSourceRecommendationConfiguration","description":"Specifies whether the business name generation is to be enabled for this data source."},"schedule":{"$ref":"#/types/aws-native:datazone:DataSourceScheduleConfiguration","description":"The schedule of the data source runs."},"status":{"$ref":"#/types/aws-native:datazone:DataSourceStatus","description":"The status of the data source."},"type":{"type":"string","description":"The type of the data source.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The timestamp of when this data source was updated."}},"type":"object","required":["awsId","connectionId","createdAt","domainId","domainIdentifier","environmentId","lastRunAssetCount","lastRunAt","lastRunStatus","name","projectId","projectIdentifier","status","type","updatedAt"],"inputProperties":{"assetFormsInput":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:DataSourceFormInput"},"description":"The metadata forms that are to be attached to the assets that this data source works with."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:datazone:DataSourceConfigurationInput0Properties"},{"$ref":"#/types/aws-native:datazone:DataSourceConfigurationInput1Properties"},{"$ref":"#/types/aws-native:datazone:DataSourceConfigurationInput2Properties"}],"description":"Configuration of the data source. It can be set to either glueRunConfiguration or redshiftRunConfiguration."},"connectionIdentifier":{"type":"string","description":"The unique identifier of a connection used to fetch relevant parameters from connection during Datasource run"},"description":{"type":"string","description":"The description of the data source."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain where the data source is created."},"enableSetting":{"$ref":"#/types/aws-native:datazone:DataSourceEnableSetting","description":"Specifies whether the data source is enabled."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the Amazon DataZone environment to which the data source publishes assets."},"name":{"type":"string","description":"The name of the data source."},"projectIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone project in which you want to add the data source."},"publishOnImport":{"type":"boolean","description":"Specifies whether the assets that this data source creates in the inventory are to be also automatically published to the catalog."},"recommendation":{"$ref":"#/types/aws-native:datazone:DataSourceRecommendationConfiguration","description":"Specifies whether the business name generation is to be enabled for this data source."},"schedule":{"$ref":"#/types/aws-native:datazone:DataSourceScheduleConfiguration","description":"The schedule of the data source runs."},"type":{"type":"string","description":"The type of the data source."}},"requiredInputs":["domainIdentifier","projectIdentifier","type"]},"aws-native:datazone:Domain":{"description":"A domain is an organizing entity for connecting together assets, users, and their projects","properties":{"arn":{"type":"string","description":"The ARN of the Amazon DataZone domain."},"awsId":{"type":"string","description":"The id of the Amazon DataZone domain."},"createdAt":{"type":"string","description":"The timestamp of when the Amazon DataZone domain was last updated."},"description":{"type":"string","description":"The description of the Amazon DataZone domain."},"domainExecutionRole":{"type":"string","description":"The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the AWS account that houses the Amazon DataZone domain."},"domainVersion":{"$ref":"#/types/aws-native:datazone:DomainVersion","description":"The version of the domain.","replaceOnChanges":true},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data.","replaceOnChanges":true},"lastUpdatedAt":{"type":"string","description":"The timestamp of when the Amazon DataZone domain was last updated."},"managedAccountId":{"type":"string","description":"The identifier of the AWS account that manages the domain."},"name":{"type":"string","description":"The name of the Amazon DataZone domain."},"portalUrl":{"type":"string","description":"The URL of the data portal for this Amazon DataZone domain."},"rootDomainUnitId":{"type":"string","description":"The ID of the root domain in Amazon Datazone."},"serviceRole":{"type":"string","description":"The service role of the domain that is created."},"singleSignOn":{"$ref":"#/types/aws-native:datazone:DomainSingleSignOn","description":"The single-sign on configuration of the Amazon DataZone domain."},"status":{"$ref":"#/types/aws-native:datazone:DomainStatus","description":"The status of the Amazon DataZone domain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags specified for the Amazon DataZone domain."}},"type":"object","required":["arn","awsId","createdAt","domainExecutionRole","lastUpdatedAt","managedAccountId","name","portalUrl","rootDomainUnitId","status"],"inputProperties":{"description":{"type":"string","description":"The description of the Amazon DataZone domain."},"domainExecutionRole":{"type":"string","description":"The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the AWS account that houses the Amazon DataZone domain."},"domainVersion":{"$ref":"#/types/aws-native:datazone:DomainVersion","description":"The version of the domain."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data."},"name":{"type":"string","description":"The name of the Amazon DataZone domain."},"serviceRole":{"type":"string","description":"The service role of the domain that is created."},"singleSignOn":{"$ref":"#/types/aws-native:datazone:DomainSingleSignOn","description":"The single-sign on configuration of the Amazon DataZone domain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags specified for the Amazon DataZone domain."}},"requiredInputs":["domainExecutionRole"]},"aws-native:datazone:DomainUnit":{"description":"A domain unit enables you to easily organize your assets and other domain entities under specific business units and teams.","properties":{"awsId":{"type":"string","description":"The ID of the domain unit."},"createdAt":{"type":"string","description":"The timestamp at which the domain unit was created."},"description":{"type":"string","description":"The description of the domain unit."},"domainId":{"type":"string","description":"The ID of the domain where the domain unit was created."},"domainIdentifier":{"type":"string","description":"The ID of the domain where you want to create a domain unit.","replaceOnChanges":true},"identifier":{"type":"string","description":"The identifier of the domain unit that you want to get."},"lastUpdatedAt":{"type":"string","description":"The timestamp at which the domain unit was last updated."},"name":{"type":"string","description":"The name of the domain unit."},"parentDomainUnitId":{"type":"string","description":"The ID of the parent domain unit."},"parentDomainUnitIdentifier":{"type":"string","description":"The ID of the parent domain unit.","replaceOnChanges":true}},"type":"object","required":["awsId","createdAt","domainId","domainIdentifier","identifier","lastUpdatedAt","name","parentDomainUnitId","parentDomainUnitIdentifier"],"inputProperties":{"description":{"type":"string","description":"The description of the domain unit."},"domainIdentifier":{"type":"string","description":"The ID of the domain where you want to create a domain unit."},"name":{"type":"string","description":"The name of the domain unit."},"parentDomainUnitIdentifier":{"type":"string","description":"The ID of the parent domain unit."}},"requiredInputs":["domainIdentifier","parentDomainUnitIdentifier"]},"aws-native:datazone:Environment":{"description":"Definition of AWS::DataZone::Environment Resource Type","properties":{"awsAccountId":{"type":"string","description":"The AWS account in which the Amazon DataZone environment is created."},"awsAccountRegion":{"type":"string","description":"The AWS region in which the Amazon DataZone environment is created."},"awsId":{"type":"string","description":"The ID of the Amazon DataZone environment."},"createdAt":{"type":"string","description":"The timestamp of when the environment was created."},"createdBy":{"type":"string","description":"The Amazon DataZone user who created the environment."},"deploymentOrder":{"type":"integer","description":"The deployment order for the environment.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the Amazon DataZone environment."},"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment is created."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment would be created.","replaceOnChanges":true},"environmentAccountIdentifier":{"type":"string","description":"The AWS account in which the Amazon DataZone environment is created.","replaceOnChanges":true},"environmentAccountRegion":{"type":"string","description":"The AWS region in which the Amazon DataZone environment is created.","replaceOnChanges":true},"environmentBlueprintId":{"type":"string","description":"The ID of the blueprint with which the Amazon DataZone environment was created."},"environmentBlueprintIdentifier":{"type":"string","description":"The identifier of the environment blueprint.","replaceOnChanges":true},"environmentConfigurationId":{"type":"string","description":"The identifier of the environment configuration.","replaceOnChanges":true},"environmentProfileId":{"type":"string","description":"The ID of the environment profile with which the Amazon DataZone environment was created."},"environmentProfileIdentifier":{"type":"string","description":"The ID of the environment profile with which the Amazon DataZone environment would be created.","replaceOnChanges":true},"environmentRoleArn":{"type":"string","description":"Environment role arn for custom aws environment permissions"},"glossaryTerms":{"type":"array","items":{"type":"string"},"description":"The glossary terms that can be used in the Amazon DataZone environment."},"name":{"type":"string","description":"The name of the environment."},"projectId":{"type":"string","description":"The ID of the Amazon DataZone project in which the environment is created."},"projectIdentifier":{"type":"string","description":"The ID of the Amazon DataZone project in which the environment would be created.","replaceOnChanges":true},"provider":{"type":"string","description":"The provider of the Amazon DataZone environment."},"status":{"$ref":"#/types/aws-native:datazone:EnvironmentStatus","description":"The status of the Amazon DataZone environment."},"updatedAt":{"type":"string","description":"The timestamp of when the environment was updated."},"userParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentParameter"},"description":"The user parameters of the Amazon DataZone environment.","replaceOnChanges":true}},"type":"object","required":["awsAccountId","awsAccountRegion","awsId","createdAt","createdBy","domainId","domainIdentifier","environmentBlueprintId","environmentProfileId","name","projectId","projectIdentifier","provider","status","updatedAt"],"inputProperties":{"deploymentOrder":{"type":"integer","description":"The deployment order for the environment."},"description":{"type":"string","description":"The description of the Amazon DataZone environment."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment would be created."},"environmentAccountIdentifier":{"type":"string","description":"The AWS account in which the Amazon DataZone environment is created."},"environmentAccountRegion":{"type":"string","description":"The AWS region in which the Amazon DataZone environment is created."},"environmentBlueprintIdentifier":{"type":"string","description":"The identifier of the environment blueprint."},"environmentConfigurationId":{"type":"string","description":"The identifier of the environment configuration."},"environmentProfileIdentifier":{"type":"string","description":"The ID of the environment profile with which the Amazon DataZone environment would be created."},"environmentRoleArn":{"type":"string","description":"Environment role arn for custom aws environment permissions"},"glossaryTerms":{"type":"array","items":{"type":"string"},"description":"The glossary terms that can be used in the Amazon DataZone environment."},"name":{"type":"string","description":"The name of the environment."},"projectIdentifier":{"type":"string","description":"The ID of the Amazon DataZone project in which the environment would be created."},"userParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentParameter"},"description":"The user parameters of the Amazon DataZone environment."}},"requiredInputs":["domainIdentifier","projectIdentifier"]},"aws-native:datazone:EnvironmentActions":{"description":"Definition of AWS::DataZone::EnvironmentActions Resource Type","properties":{"awsId":{"type":"string","description":"The ID of the Amazon DataZone environment action."},"description":{"type":"string","description":"The description of the Amazon DataZone environment action."},"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment is created."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment would be created.","replaceOnChanges":true},"environmentId":{"type":"string","description":"The identifier of the Amazon DataZone environment in which the action is taking place"},"environmentIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone environment in which the action is taking place","replaceOnChanges":true},"identifier":{"type":"string","description":"The ID of the Amazon DataZone environment action."},"name":{"type":"string","description":"The name of the environment action."},"parameters":{"$ref":"#/types/aws-native:datazone:EnvironmentActionsAwsConsoleLinkParameters","description":"The parameters of the environment action."}},"type":"object","required":["awsId","domainId","environmentId","name"],"inputProperties":{"description":{"type":"string","description":"The description of the Amazon DataZone environment action."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment would be created."},"environmentIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone environment in which the action is taking place"},"identifier":{"type":"string","description":"The ID of the Amazon DataZone environment action."},"name":{"type":"string","description":"The name of the environment action."},"parameters":{"$ref":"#/types/aws-native:datazone:EnvironmentActionsAwsConsoleLinkParameters","description":"The parameters of the environment action."}}},"aws-native:datazone:EnvironmentBlueprintConfiguration":{"description":"Definition of AWS::DataZone::EnvironmentBlueprintConfiguration Resource Type","properties":{"createdAt":{"type":"string","description":"The timestamp of when an environment blueprint was created."},"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which an environment blueprint exists."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which an environment blueprint exists.","replaceOnChanges":true},"enabledRegions":{"type":"array","items":{"type":"string"},"description":"The enabled AWS Regions specified in a blueprint configuration."},"environmentBlueprintId":{"type":"string","description":"The identifier of the environment blueprint. This identifier should be used when creating environment profiles."},"environmentBlueprintIdentifier":{"type":"string","description":"The identifier of the environment blueprint.\n\nIn the current release, only the following values are supported: `DefaultDataLake` and `DefaultDataWarehouse` .","replaceOnChanges":true},"environmentRolePermissionBoundary":{"type":"string","description":"The environment role permission boundary."},"globalParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Region-agnostic environment blueprint parameters."},"manageAccessRoleArn":{"type":"string","description":"The ARN of the manage access role."},"provisioningConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationProvisioningConfigurationProperties"},"description":"The provisioning configuration of a blueprint."},"provisioningRoleArn":{"type":"string","description":"The ARN of the provisioning role."},"regionalParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationRegionalParameter"},"description":"The regional parameters of the environment blueprint."},"updatedAt":{"type":"string","description":"The timestamp of when the environment blueprint was updated."}},"type":"object","required":["createdAt","domainId","domainIdentifier","enabledRegions","environmentBlueprintId","environmentBlueprintIdentifier","updatedAt"],"inputProperties":{"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which an environment blueprint exists."},"enabledRegions":{"type":"array","items":{"type":"string"},"description":"The enabled AWS Regions specified in a blueprint configuration."},"environmentBlueprintIdentifier":{"type":"string","description":"The identifier of the environment blueprint.\n\nIn the current release, only the following values are supported: `DefaultDataLake` and `DefaultDataWarehouse` ."},"environmentRolePermissionBoundary":{"type":"string","description":"The environment role permission boundary."},"globalParameters":{"type":"object","additionalProperties":{"type":"string"},"description":"Region-agnostic environment blueprint parameters."},"manageAccessRoleArn":{"type":"string","description":"The ARN of the manage access role."},"provisioningConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationProvisioningConfigurationProperties"},"description":"The provisioning configuration of a blueprint."},"provisioningRoleArn":{"type":"string","description":"The ARN of the provisioning role."},"regionalParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationRegionalParameter"},"description":"The regional parameters of the environment blueprint."}},"requiredInputs":["domainIdentifier","enabledRegions","environmentBlueprintIdentifier"]},"aws-native:datazone:EnvironmentProfile":{"description":"AWS Datazone Environment Profile is pre-configured set of resources and blueprints that provide reusable templates for creating environments.","properties":{"awsAccountId":{"type":"string","description":"The AWS account in which the Amazon DataZone environment is created."},"awsAccountRegion":{"type":"string","description":"The AWS region in which this environment profile is created."},"awsId":{"type":"string","description":"The ID of this Amazon DataZone environment profile."},"createdAt":{"type":"string","description":"The timestamp of when this environment profile was created."},"createdBy":{"type":"string","description":"The Amazon DataZone user who created this environment profile."},"description":{"type":"string","description":"The description of this Amazon DataZone environment profile."},"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain in which this environment profile is created."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this environment profile is created.","replaceOnChanges":true},"environmentBlueprintId":{"type":"string","description":"The ID of the blueprint with which this environment profile is created."},"environmentBlueprintIdentifier":{"type":"string","description":"The ID of the blueprint with which this environment profile is created.","replaceOnChanges":true},"name":{"type":"string","description":"The name of this Amazon DataZone environment profile."},"projectId":{"type":"string","description":"The identifier of the project in which to create the environment profile."},"projectIdentifier":{"type":"string","description":"The identifier of the project in which to create the environment profile.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The timestamp of when this environment profile was updated."},"userParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentProfileEnvironmentParameter"},"description":"The user parameters of this Amazon DataZone environment profile."}},"type":"object","required":["awsAccountId","awsAccountRegion","awsId","createdAt","createdBy","domainId","domainIdentifier","environmentBlueprintId","environmentBlueprintIdentifier","name","projectId","projectIdentifier","updatedAt"],"inputProperties":{"awsAccountId":{"type":"string","description":"The AWS account in which the Amazon DataZone environment is created."},"awsAccountRegion":{"type":"string","description":"The AWS region in which this environment profile is created."},"description":{"type":"string","description":"The description of this Amazon DataZone environment profile."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this environment profile is created."},"environmentBlueprintIdentifier":{"type":"string","description":"The ID of the blueprint with which this environment profile is created."},"name":{"type":"string","description":"The name of this Amazon DataZone environment profile."},"projectIdentifier":{"type":"string","description":"The identifier of the project in which to create the environment profile."},"userParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:EnvironmentProfileEnvironmentParameter"},"description":"The user parameters of this Amazon DataZone environment profile."}},"requiredInputs":["awsAccountId","awsAccountRegion","domainIdentifier","environmentBlueprintIdentifier","projectIdentifier"]},"aws-native:datazone:FormType":{"description":"Create and manage form types in Amazon Datazone","properties":{"createdAt":{"type":"string","description":"The timestamp of when this Amazon DataZone metadata form type was created."},"createdBy":{"type":"string","description":"The user who created this Amazon DataZone metadata form type."},"description":{"type":"string","description":"The description of this Amazon DataZone metadata form type."},"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain in which this metadata form type is created."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this metadata form type is created.","replaceOnChanges":true},"formTypeIdentifier":{"type":"string","description":"The ID of this Amazon DataZone metadata form type."},"model":{"$ref":"#/types/aws-native:datazone:FormTypeModel","description":"The model of this Amazon DataZone metadata form type."},"name":{"type":"string","description":"The name of this Amazon DataZone metadata form type.","replaceOnChanges":true},"owningProjectId":{"type":"string","description":"The ID of the project that owns this Amazon DataZone metadata form type."},"owningProjectIdentifier":{"type":"string","description":"The ID of the Amazon DataZone project that owns this metadata form type."},"revision":{"type":"string","description":"The revision of this Amazon DataZone metadata form type."},"status":{"$ref":"#/types/aws-native:datazone:FormTypeStatus","description":"The status of this Amazon DataZone metadata form type."}},"type":"object","required":["createdAt","createdBy","domainId","domainIdentifier","formTypeIdentifier","model","name","owningProjectId","owningProjectIdentifier","revision"],"inputProperties":{"description":{"type":"string","description":"The description of this Amazon DataZone metadata form type."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this metadata form type is created."},"model":{"$ref":"#/types/aws-native:datazone:FormTypeModel","description":"The model of this Amazon DataZone metadata form type."},"name":{"type":"string","description":"The name of this Amazon DataZone metadata form type."},"owningProjectIdentifier":{"type":"string","description":"The ID of the Amazon DataZone project that owns this metadata form type."},"status":{"$ref":"#/types/aws-native:datazone:FormTypeStatus","description":"The status of this Amazon DataZone metadata form type."}},"requiredInputs":["domainIdentifier","model","owningProjectIdentifier"]},"aws-native:datazone:GroupProfile":{"description":"Group profiles represent groups of Amazon DataZone users. Groups can be manually created, or mapped to Active Directory groups of enterprise customers. In Amazon DataZone, groups serve two purposes. First, a group can map to a team of users in the organizational chart, and thus reduce the administrative work of a Amazon DataZone project owner when there are new employees joining or leaving a team. Second, corporate administrators use Active Directory groups to manage and update user statuses and so Amazon DataZone domain administrators can use these group memberships to implement Amazon DataZone domain policies.","properties":{"awsId":{"type":"string","description":"The ID of the Amazon DataZone group profile."},"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the group profile is created."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the group profile would be created.","replaceOnChanges":true},"groupIdentifier":{"type":"string","description":"The ID of the group.","replaceOnChanges":true},"groupName":{"type":"string","description":"The group-name of the Group Profile."},"status":{"$ref":"#/types/aws-native:datazone:GroupProfileStatus","description":"The status of a group profile."}},"type":"object","required":["awsId","domainId","domainIdentifier","groupIdentifier","groupName"],"inputProperties":{"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the group profile would be created."},"groupIdentifier":{"type":"string","description":"The ID of the group."},"status":{"$ref":"#/types/aws-native:datazone:GroupProfileStatus","description":"The status of a group profile."}},"requiredInputs":["domainIdentifier","groupIdentifier"]},"aws-native:datazone:Owner":{"description":"A owner can set up authorization permissions on their resources.","properties":{"domainIdentifier":{"type":"string","description":"The ID of the domain in which you want to add the entity owner.","replaceOnChanges":true},"entityIdentifier":{"type":"string","description":"The ID of the entity to which you want to add an owner.","replaceOnChanges":true},"entityType":{"$ref":"#/types/aws-native:datazone:OwnerEntityType","description":"The type of an entity.","replaceOnChanges":true},"owner":{"$ref":"#/types/aws-native:datazone:OwnerProperties","description":"The owner that you want to add to the entity.","language":{"csharp":{"name":"OwnerValue"}},"replaceOnChanges":true},"ownerIdentifier":{"type":"string","description":"The ID of the entity to which you want to add an owner."},"ownerType":{"$ref":"#/types/aws-native:datazone:OwnerType","description":"The owner that you want to add to the entity."}},"type":"object","required":["domainIdentifier","entityIdentifier","entityType","owner","ownerIdentifier","ownerType"],"inputProperties":{"domainIdentifier":{"type":"string","description":"The ID of the domain in which you want to add the entity owner."},"entityIdentifier":{"type":"string","description":"The ID of the entity to which you want to add an owner."},"entityType":{"$ref":"#/types/aws-native:datazone:OwnerEntityType","description":"The type of an entity."},"owner":{"$ref":"#/types/aws-native:datazone:OwnerProperties","description":"The owner that you want to add to the entity.","language":{"csharp":{"name":"OwnerValue"}}}},"requiredInputs":["domainIdentifier","entityIdentifier","entityType","owner"]},"aws-native:datazone:PolicyGrant":{"description":"Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.","properties":{"createdAt":{"type":"string","description":"Specifies the timestamp at which policy grant member was created."},"createdBy":{"type":"string","description":"Specifies the user who created the policy grant member."},"detail":{"oneOf":[{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail0Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail1Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail2Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail3Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail4Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail5Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail6Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail7Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail8Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail9Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail10Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail11Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail12Properties"}],"description":"The details of the policy grant member.","replaceOnChanges":true},"domainIdentifier":{"type":"string","description":"The ID of the domain where you want to add a policy grant.","replaceOnChanges":true},"entityIdentifier":{"type":"string","description":"The ID of the entity (resource) to which you want to add a policy grant.","replaceOnChanges":true},"entityType":{"$ref":"#/types/aws-native:datazone:PolicyGrantTargetEntityType","description":"The type of entity (resource) to which the grant is added.","replaceOnChanges":true},"grantId":{"type":"string","description":"The unique identifier of the policy grant returned by the AddPolicyGrant API"},"policyType":{"$ref":"#/types/aws-native:datazone:PolicyGrantManagedPolicyType","description":"The type of policy that you want to grant.","replaceOnChanges":true},"principal":{"oneOf":[{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal0Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal1Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal2Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal3Properties"}],"description":"The principal of the policy grant member.","replaceOnChanges":true}},"type":"object","required":["createdAt","createdBy","domainIdentifier","entityIdentifier","entityType","grantId","policyType"],"inputProperties":{"detail":{"oneOf":[{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail0Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail1Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail2Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail3Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail4Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail5Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail6Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail7Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail8Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail9Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail10Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail11Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantDetail12Properties"}],"description":"The details of the policy grant member."},"domainIdentifier":{"type":"string","description":"The ID of the domain where you want to add a policy grant."},"entityIdentifier":{"type":"string","description":"The ID of the entity (resource) to which you want to add a policy grant."},"entityType":{"$ref":"#/types/aws-native:datazone:PolicyGrantTargetEntityType","description":"The type of entity (resource) to which the grant is added."},"policyType":{"$ref":"#/types/aws-native:datazone:PolicyGrantManagedPolicyType","description":"The type of policy that you want to grant."},"principal":{"oneOf":[{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal0Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal1Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal2Properties"},{"$ref":"#/types/aws-native:datazone:PolicyGrantPrincipal3Properties"}],"description":"The principal of the policy grant member."}},"requiredInputs":["domainIdentifier","entityIdentifier","entityType","policyType"]},"aws-native:datazone:Project":{"description":"Amazon DataZone projects are business use case–based groupings of people, assets (data), and tools used to simplify access to the AWS analytics.","properties":{"awsId":{"type":"string","description":"The ID of the Amazon DataZone project."},"createdAt":{"type":"string","description":"The timestamp of when the project was created."},"createdBy":{"type":"string","description":"The Amazon DataZone user who created the project."},"description":{"type":"string","description":"The description of the Amazon DataZone project."},"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the project was created."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this project is created.","replaceOnChanges":true},"domainUnitId":{"type":"string","description":"The ID of the domain unit."},"glossaryTerms":{"type":"array","items":{"type":"string"},"description":"The glossary terms that can be used in this Amazon DataZone project."},"lastUpdatedAt":{"type":"string","description":"The timestamp of when the project was last updated."},"name":{"type":"string","description":"The name of the Amazon DataZone project."},"projectProfileId":{"type":"string","description":"The project profile ID.","replaceOnChanges":true},"projectProfileVersion":{"type":"string","description":"The project profile version to which the project should be updated. You can only specify the following string for this parameter: latest."},"projectStatus":{"$ref":"#/types/aws-native:datazone:ProjectStatus","description":"The status of the project."},"userParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectEnvironmentConfigurationUserParameter"},"description":"The user parameters of the project."}},"type":"object","required":["awsId","createdAt","createdBy","domainId","domainIdentifier","lastUpdatedAt","name","projectStatus"],"inputProperties":{"description":{"type":"string","description":"The description of the Amazon DataZone project."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this project is created."},"domainUnitId":{"type":"string","description":"The ID of the domain unit."},"glossaryTerms":{"type":"array","items":{"type":"string"},"description":"The glossary terms that can be used in this Amazon DataZone project."},"name":{"type":"string","description":"The name of the Amazon DataZone project."},"projectProfileId":{"type":"string","description":"The project profile ID."},"projectProfileVersion":{"type":"string","description":"The project profile version to which the project should be updated. You can only specify the following string for this parameter: latest."},"userParameters":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectEnvironmentConfigurationUserParameter"},"description":"The user parameters of the project."}},"requiredInputs":["domainIdentifier"]},"aws-native:datazone:ProjectMembership":{"description":"Definition of AWS::DataZone::ProjectMembership Resource Type","properties":{"designation":{"$ref":"#/types/aws-native:datazone:ProjectMembershipUserDesignation","description":"The designated role of a project member."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which project membership is created.","replaceOnChanges":true},"member":{"oneOf":[{"$ref":"#/types/aws-native:datazone:ProjectMembershipMember0Properties"},{"$ref":"#/types/aws-native:datazone:ProjectMembershipMember1Properties"}],"description":"The details about a project member.","replaceOnChanges":true},"memberIdentifier":{"type":"string"},"memberIdentifierType":{"$ref":"#/types/aws-native:datazone:ProjectMembershipMemberIdentifierType"},"projectIdentifier":{"type":"string","description":"The ID of the project for which this project membership was created.","replaceOnChanges":true}},"type":"object","required":["designation","domainIdentifier","member","memberIdentifier","memberIdentifierType","projectIdentifier"],"inputProperties":{"designation":{"$ref":"#/types/aws-native:datazone:ProjectMembershipUserDesignation","description":"The designated role of a project member."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which project membership is created."},"member":{"oneOf":[{"$ref":"#/types/aws-native:datazone:ProjectMembershipMember0Properties"},{"$ref":"#/types/aws-native:datazone:ProjectMembershipMember1Properties"}],"description":"The details about a project member."},"projectIdentifier":{"type":"string","description":"The ID of the project for which this project membership was created."}},"requiredInputs":["designation","domainIdentifier","member","projectIdentifier"]},"aws-native:datazone:ProjectProfile":{"description":"Definition of AWS::DataZone::ProjectProfile Resource Type","properties":{"awsId":{"type":"string","description":"The ID of the project profile."},"createdAt":{"type":"string","description":"The timestamp of when the project profile was created."},"createdBy":{"type":"string","description":"The user who created the project profile."},"description":{"type":"string","description":"The description of the project profile."},"domainId":{"type":"string","description":"The domain ID of the project profile."},"domainIdentifier":{"type":"string","description":"A domain ID of the project profile.","replaceOnChanges":true},"domainUnitId":{"type":"string","description":"The domain unit ID of the project profile."},"domainUnitIdentifier":{"type":"string","description":"A domain unit ID of the project profile."},"environmentConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectProfileEnvironmentConfiguration"},"description":"Environment configurations of a project profile."},"identifier":{"type":"string","description":"Project profile ID."},"lastUpdatedAt":{"type":"string","description":"The timestamp at which a project profile was last updated."},"name":{"type":"string","description":"The name of a project profile."},"status":{"$ref":"#/types/aws-native:datazone:ProjectProfileStatus","description":"The status of a project profile."},"useDefaultConfigurations":{"type":"boolean","replaceOnChanges":true}},"type":"object","required":["awsId","createdAt","createdBy","domainId","domainUnitId","identifier","lastUpdatedAt","name"],"inputProperties":{"description":{"type":"string","description":"The description of the project profile."},"domainIdentifier":{"type":"string","description":"A domain ID of the project profile."},"domainUnitIdentifier":{"type":"string","description":"A domain unit ID of the project profile."},"environmentConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:ProjectProfileEnvironmentConfiguration"},"description":"Environment configurations of a project profile."},"name":{"type":"string","description":"The name of a project profile."},"status":{"$ref":"#/types/aws-native:datazone:ProjectProfileStatus","description":"The status of a project profile."},"useDefaultConfigurations":{"type":"boolean"}}},"aws-native:datazone:SubscriptionTarget":{"description":"Subscription targets enables one to access the data to which you have subscribed in your projects.","properties":{"applicableAssetTypes":{"type":"array","items":{"type":"string"},"description":"The asset types that can be included in the subscription target."},"authorizedPrincipals":{"type":"array","items":{"type":"string"},"description":"The authorized principals of the subscription target."},"awsId":{"type":"string","description":"The ID of the subscription target."},"createdAt":{"type":"string","description":"The timestamp of when the subscription target was created."},"createdBy":{"type":"string","description":"The Amazon DataZone user who created the subscription target."},"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain in which subscription target is created."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which subscription target would be created.","replaceOnChanges":true},"environmentId":{"type":"string","description":"The ID of the environment in which subscription target is created."},"environmentIdentifier":{"type":"string","description":"The ID of the environment in which subscription target would be created.","replaceOnChanges":true},"manageAccessRole":{"type":"string","description":"The manage access role that is used to create the subscription target."},"name":{"type":"string","description":"The name of the subscription target."},"projectId":{"type":"string","description":"The identifier of the project specified in the subscription target."},"provider":{"type":"string","description":"The provider of the subscription target."},"subscriptionTargetConfig":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:SubscriptionTargetForm"},"description":"The configuration of the subscription target."},"type":{"type":"string","description":"The type of the subscription target.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The timestamp of when the subscription target was updated."},"updatedBy":{"type":"string","description":"The Amazon DataZone user who updated the subscription target."}},"type":"object","required":["applicableAssetTypes","authorizedPrincipals","awsId","createdAt","createdBy","domainId","domainIdentifier","environmentId","environmentIdentifier","name","projectId","subscriptionTargetConfig","type","updatedAt","updatedBy"],"inputProperties":{"applicableAssetTypes":{"type":"array","items":{"type":"string"},"description":"The asset types that can be included in the subscription target."},"authorizedPrincipals":{"type":"array","items":{"type":"string"},"description":"The authorized principals of the subscription target."},"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which subscription target would be created."},"environmentIdentifier":{"type":"string","description":"The ID of the environment in which subscription target would be created."},"manageAccessRole":{"type":"string","description":"The manage access role that is used to create the subscription target."},"name":{"type":"string","description":"The name of the subscription target."},"provider":{"type":"string","description":"The provider of the subscription target."},"subscriptionTargetConfig":{"type":"array","items":{"$ref":"#/types/aws-native:datazone:SubscriptionTargetForm"},"description":"The configuration of the subscription target."},"type":{"type":"string","description":"The type of the subscription target."}},"requiredInputs":["applicableAssetTypes","authorizedPrincipals","domainIdentifier","environmentIdentifier","subscriptionTargetConfig","type"]},"aws-native:datazone:UserProfile":{"description":"A user profile represents Amazon DataZone users. Amazon DataZone supports both IAM roles and SSO identities to interact with the Amazon DataZone Management Console and the data portal for different purposes. Domain administrators use IAM roles to perform the initial administrative domain-related work in the Amazon DataZone Management Console, including creating new Amazon DataZone domains, configuring metadata form types, and implementing policies. Data workers use their SSO corporate identities via Identity Center to log into the Amazon DataZone Data Portal and access projects where they have memberships.","properties":{"awsId":{"type":"string","description":"The ID of the Amazon DataZone user profile."},"details":{"oneOf":[{"$ref":"#/types/aws-native:datazone:UserProfileDetails0Properties"},{"$ref":"#/types/aws-native:datazone:UserProfileDetails1Properties"}]},"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the user profile is created."},"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the user profile would be created.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:datazone:UserProfileStatus","description":"The status of the user profile."},"type":{"$ref":"#/types/aws-native:datazone:UserProfileType","description":"The type of the user profile."},"userIdentifier":{"type":"string","description":"The ID of the user.","replaceOnChanges":true},"userType":{"$ref":"#/types/aws-native:datazone:UserProfileUserType","description":"The user type of the user for which the user profile is created.","replaceOnChanges":true}},"type":"object","required":["awsId","details","domainId","domainIdentifier","type","userIdentifier"],"inputProperties":{"domainIdentifier":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the user profile would be created."},"status":{"$ref":"#/types/aws-native:datazone:UserProfileStatus","description":"The status of the user profile."},"userIdentifier":{"type":"string","description":"The ID of the user."},"userType":{"$ref":"#/types/aws-native:datazone:UserProfileUserType","description":"The user type of the user for which the user profile is created."}},"requiredInputs":["domainIdentifier","userIdentifier"]},"aws-native:dax:SubnetGroup":{"description":"Resource Type definition for AWS::DAX::SubnetGroup","properties":{"awsId":{"type":"string"},"description":{"type":"string","description":"The description of the subnet group."},"subnetGroupName":{"type":"string","description":"The name of the subnet group.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC subnet IDs for the subnet group."}},"type":"object","required":["awsId","subnetIds"],"inputProperties":{"description":{"type":"string","description":"The description of the subnet group."},"subnetGroupName":{"type":"string","description":"The name of the subnet group."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC subnet IDs for the subnet group."}},"requiredInputs":["subnetIds"]},"aws-native:deadline:Farm":{"description":"Definition of AWS::Deadline::Farm Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the farm."},"costScaleFactor":{"type":"number"},"description":{"type":"string","description":"A description of the farm that helps identify what the farm is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The display name of the farm.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The farm ID."},"kmsKeyArn":{"type":"string","description":"The ARN for the KMS key.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","displayName","farmId"],"inputProperties":{"costScaleFactor":{"type":"number"},"description":{"type":"string","description":"A description of the farm that helps identify what the farm is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The display name of the farm.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"kmsKeyArn":{"type":"string","description":"The ARN for the KMS key."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["displayName"]},"aws-native:deadline:Fleet":{"description":"Definition of AWS::Deadline::Fleet Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the fleet."},"capabilities":{"$ref":"#/types/aws-native:deadline:FleetCapabilities"},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:deadline:FleetConfiguration0Properties"},{"$ref":"#/types/aws-native:deadline:FleetConfiguration1Properties"}],"description":"The configuration details for the fleet."},"description":{"type":"string","description":"A description that helps identify what the fleet is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The display name of the fleet summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The farm ID.","replaceOnChanges":true},"fleetId":{"type":"string","description":"The fleet ID."},"hostConfiguration":{"$ref":"#/types/aws-native:deadline:FleetHostConfiguration","description":"Provides a script that runs as a worker is starting up that you can use to provide additional configuration for workers in your fleet.\n\nTo remove a script from a fleet, use the [UpdateFleet](https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFleet.html) operation with the `hostConfiguration` `scriptBody` parameter set to an empty string (\"\")."},"maxWorkerCount":{"type":"integer","description":"The maximum number of workers specified in the fleet."},"minWorkerCount":{"type":"integer","description":"The minimum number of workers in the fleet."},"roleArn":{"type":"string","description":"The IAM role that workers in the fleet use when processing jobs."},"status":{"$ref":"#/types/aws-native:deadline:FleetStatus","description":"The status of the fleet."},"statusMessage":{"type":"string","description":"A message that communicates a suspended status of the fleet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"workerCount":{"type":"integer","description":"The number of workers in the fleet summary."}},"type":"object","required":["arn","capabilities","configuration","displayName","farmId","fleetId","maxWorkerCount","roleArn","status","statusMessage","workerCount"],"inputProperties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:deadline:FleetConfiguration0Properties"},{"$ref":"#/types/aws-native:deadline:FleetConfiguration1Properties"}],"description":"The configuration details for the fleet."},"description":{"type":"string","description":"A description that helps identify what the fleet is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The display name of the fleet summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The farm ID."},"hostConfiguration":{"$ref":"#/types/aws-native:deadline:FleetHostConfiguration","description":"Provides a script that runs as a worker is starting up that you can use to provide additional configuration for workers in your fleet.\n\nTo remove a script from a fleet, use the [UpdateFleet](https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFleet.html) operation with the `hostConfiguration` `scriptBody` parameter set to an empty string (\"\")."},"maxWorkerCount":{"type":"integer","description":"The maximum number of workers specified in the fleet."},"minWorkerCount":{"type":"integer","description":"The minimum number of workers in the fleet."},"roleArn":{"type":"string","description":"The IAM role that workers in the fleet use when processing jobs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["configuration","displayName","farmId","maxWorkerCount","roleArn"]},"aws-native:deadline:LicenseEndpoint":{"description":"Definition of AWS::Deadline::LicenseEndpoint Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the license endpoint."},"dnsName":{"type":"string","description":"The DNS name of the license server endpoint."},"licenseEndpointId":{"type":"string","description":"The license endpoint ID."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The identifier of the Amazon EC2 security group that controls access to the license endpoint.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:deadline:LicenseEndpointStatus","description":"The status of the license endpoint."},"statusMessage":{"type":"string","description":"The status message of the license endpoint."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"Identifies the VPC subnets that can connect to a license endpoint.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcId":{"type":"string","description":"The VPC (virtual private cloud) ID associated with the license endpoint.","replaceOnChanges":true}},"type":"object","required":["arn","dnsName","licenseEndpointId","securityGroupIds","status","statusMessage","subnetIds","vpcId"],"inputProperties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The identifier of the Amazon EC2 security group that controls access to the license endpoint."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"Identifies the VPC subnets that can connect to a license endpoint."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcId":{"type":"string","description":"The VPC (virtual private cloud) ID associated with the license endpoint."}},"requiredInputs":["securityGroupIds","subnetIds","vpcId"]},"aws-native:deadline:Limit":{"description":"Definition of AWS::Deadline::Limit Resource Type","properties":{"amountRequirementName":{"type":"string","description":"The value that you specify as the `name` in the `amounts` field of the `hostRequirements` in a step of a job template to declare the limit requirement.","replaceOnChanges":true},"currentCount":{"type":"integer","description":"The number of resources from the limit that are being used by jobs. The result is delayed and may not be the count at the time that you called the operation."},"description":{"type":"string","description":"A description of the limit. A clear description helps you identify the purpose of the limit.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The name of the limit used in lists to identify the limit.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The unique identifier of the farm that contains the limit.","replaceOnChanges":true},"limitId":{"type":"string","description":"The unique identifier of the limit."},"maxCount":{"type":"integer","description":"The maximum number of resources constrained by this limit. When all of the resources are in use, steps that require the limit won't be scheduled until the resource is available.\n\nThe `maxValue` must not be 0. If the value is -1, there is no restriction on the number of resources that can be acquired for this limit."}},"type":"object","required":["amountRequirementName","currentCount","displayName","farmId","limitId","maxCount"],"inputProperties":{"amountRequirementName":{"type":"string","description":"The value that you specify as the `name` in the `amounts` field of the `hostRequirements` in a step of a job template to declare the limit requirement."},"description":{"type":"string","description":"A description of the limit. A clear description helps you identify the purpose of the limit.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The name of the limit used in lists to identify the limit.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The unique identifier of the farm that contains the limit."},"maxCount":{"type":"integer","description":"The maximum number of resources constrained by this limit. When all of the resources are in use, steps that require the limit won't be scheduled until the resource is available.\n\nThe `maxValue` must not be 0. If the value is -1, there is no restriction on the number of resources that can be acquired for this limit."}},"requiredInputs":["amountRequirementName","displayName","farmId","maxCount"]},"aws-native:deadline:MeteredProduct":{"description":"Definition of AWS::Deadline::MeteredProduct Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the metered product."},"family":{"type":"string","description":"The family to which the metered product belongs."},"licenseEndpointId":{"type":"string","description":"The Amazon EC2 identifier of the license endpoint.","replaceOnChanges":true},"port":{"type":"integer","description":"The port on which the metered product should run."},"productId":{"type":"string","description":"The product ID.","replaceOnChanges":true},"vendor":{"type":"string","description":"The vendor."}},"type":"object","required":["arn","family","port","vendor"],"inputProperties":{"licenseEndpointId":{"type":"string","description":"The Amazon EC2 identifier of the license endpoint."},"productId":{"type":"string","description":"The product ID."}}},"aws-native:deadline:Monitor":{"description":"Definition of AWS::Deadline::Monitor Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the monitor."},"displayName":{"type":"string","description":"The name of the monitor that displays on the Deadline Cloud console.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"identityCenterApplicationArn":{"type":"string","description":"The Amazon Resource Name that the IAM Identity Center assigned to the monitor when it was created."},"identityCenterInstanceArn":{"type":"string","description":"The Amazon Resource Name of the IAM Identity Center instance responsible for authenticating monitor users.","replaceOnChanges":true},"monitorId":{"type":"string","description":"The unique identifier for the monitor."},"roleArn":{"type":"string","description":"The Amazon Resource Name of the IAM role for the monitor. Users of the monitor use this role to access Deadline Cloud resources."},"subdomain":{"type":"string","description":"The subdomain used for the monitor URL. The full URL of the monitor is subdomain.Region.deadlinecloud.amazonaws.com."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"url":{"type":"string","description":"The complete URL of the monitor. The full URL of the monitor is subdomain.Region.deadlinecloud.amazonaws.com."}},"type":"object","required":["arn","displayName","identityCenterApplicationArn","identityCenterInstanceArn","monitorId","roleArn","subdomain","url"],"inputProperties":{"displayName":{"type":"string","description":"The name of the monitor that displays on the Deadline Cloud console.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"identityCenterInstanceArn":{"type":"string","description":"The Amazon Resource Name of the IAM Identity Center instance responsible for authenticating monitor users."},"roleArn":{"type":"string","description":"The Amazon Resource Name of the IAM role for the monitor. Users of the monitor use this role to access Deadline Cloud resources."},"subdomain":{"type":"string","description":"The subdomain used for the monitor URL. The full URL of the monitor is subdomain.Region.deadlinecloud.amazonaws.com."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["displayName","identityCenterInstanceArn","roleArn","subdomain"]},"aws-native:deadline:Queue":{"description":"Definition of AWS::Deadline::Queue Resource Type","properties":{"allowedStorageProfileIds":{"type":"array","items":{"type":"string"},"description":"The identifiers of the storage profiles that this queue can use to share assets between workers using different operating systems."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the queue."},"defaultBudgetAction":{"$ref":"#/types/aws-native:deadline:QueueDefaultQueueBudgetAction","description":"The default action taken on a queue summary if a budget wasn't configured."},"description":{"type":"string","description":"A description of the queue that helps identify what the queue is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The display name of the queue summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The farm ID.","replaceOnChanges":true},"jobAttachmentSettings":{"$ref":"#/types/aws-native:deadline:QueueJobAttachmentSettings","description":"The job attachment settings. These are the Amazon S3 bucket name and the Amazon S3 prefix."},"jobRunAsUser":{"$ref":"#/types/aws-native:deadline:QueueJobRunAsUser","description":"Identifies the user for a job."},"queueId":{"type":"string","description":"The queue ID."},"requiredFileSystemLocationNames":{"type":"array","items":{"type":"string"},"description":"The file system location that the queue uses."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that workers use when running jobs in this queue."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","displayName","farmId","queueId"],"inputProperties":{"allowedStorageProfileIds":{"type":"array","items":{"type":"string"},"description":"The identifiers of the storage profiles that this queue can use to share assets between workers using different operating systems."},"defaultBudgetAction":{"$ref":"#/types/aws-native:deadline:QueueDefaultQueueBudgetAction","description":"The default action taken on a queue summary if a budget wasn't configured."},"description":{"type":"string","description":"A description of the queue that helps identify what the queue is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"displayName":{"type":"string","description":"The display name of the queue summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The farm ID."},"jobAttachmentSettings":{"$ref":"#/types/aws-native:deadline:QueueJobAttachmentSettings","description":"The job attachment settings. These are the Amazon S3 bucket name and the Amazon S3 prefix."},"jobRunAsUser":{"$ref":"#/types/aws-native:deadline:QueueJobRunAsUser","description":"Identifies the user for a job."},"requiredFileSystemLocationNames":{"type":"array","items":{"type":"string"},"description":"The file system location that the queue uses."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that workers use when running jobs in this queue."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["displayName","farmId"]},"aws-native:deadline:QueueEnvironment":{"description":"Definition of AWS::Deadline::QueueEnvironment Resource Type","properties":{"farmId":{"type":"string","description":"The identifier assigned to the farm that contains the queue.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the queue environment."},"priority":{"type":"integer","description":"The queue environment's priority."},"queueEnvironmentId":{"type":"string","description":"The queue environment ID."},"queueId":{"type":"string","description":"The unique identifier of the queue that contains the environment.","replaceOnChanges":true},"template":{"type":"string","description":"A JSON or YAML template that describes the processing environment for the queue."},"templateType":{"$ref":"#/types/aws-native:deadline:QueueEnvironmentEnvironmentTemplateType","description":"Specifies whether the template for the queue environment is JSON or YAML."}},"type":"object","required":["farmId","name","priority","queueEnvironmentId","queueId","template","templateType"],"inputProperties":{"farmId":{"type":"string","description":"The identifier assigned to the farm that contains the queue."},"priority":{"type":"integer","description":"The queue environment's priority."},"queueId":{"type":"string","description":"The unique identifier of the queue that contains the environment."},"template":{"type":"string","description":"A JSON or YAML template that describes the processing environment for the queue."},"templateType":{"$ref":"#/types/aws-native:deadline:QueueEnvironmentEnvironmentTemplateType","description":"Specifies whether the template for the queue environment is JSON or YAML."}},"requiredInputs":["farmId","priority","queueId","template","templateType"]},"aws-native:deadline:QueueFleetAssociation":{"description":"Definition of AWS::Deadline::QueueFleetAssociation Resource Type","properties":{"farmId":{"type":"string","description":"The identifier of the farm that contains the queue and the fleet.","replaceOnChanges":true},"fleetId":{"type":"string","description":"The fleet ID.","replaceOnChanges":true},"queueId":{"type":"string","description":"The queue ID.","replaceOnChanges":true}},"type":"object","required":["farmId","fleetId","queueId"],"inputProperties":{"farmId":{"type":"string","description":"The identifier of the farm that contains the queue and the fleet."},"fleetId":{"type":"string","description":"The fleet ID."},"queueId":{"type":"string","description":"The queue ID."}},"requiredInputs":["farmId","fleetId","queueId"]},"aws-native:deadline:QueueLimitAssociation":{"description":"Definition of AWS::Deadline::QueueLimitAssociation Resource Type","properties":{"farmId":{"type":"string","description":"The unique identifier of the farm that contains the queue-limit association.","replaceOnChanges":true},"limitId":{"type":"string","description":"The unique identifier of the limit in the association.","replaceOnChanges":true},"queueId":{"type":"string","description":"The unique identifier of the queue in the association.","replaceOnChanges":true}},"type":"object","required":["farmId","limitId","queueId"],"inputProperties":{"farmId":{"type":"string","description":"The unique identifier of the farm that contains the queue-limit association."},"limitId":{"type":"string","description":"The unique identifier of the limit in the association."},"queueId":{"type":"string","description":"The unique identifier of the queue in the association."}},"requiredInputs":["farmId","limitId","queueId"]},"aws-native:deadline:StorageProfile":{"description":"Definition of AWS::Deadline::StorageProfile Resource Type","properties":{"displayName":{"type":"string","description":"The display name of the storage profile summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The unique identifier of the farm that contains the storage profile.","replaceOnChanges":true},"fileSystemLocations":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:StorageProfileFileSystemLocation"},"description":"Operating system specific file system path to the storage location."},"osFamily":{"$ref":"#/types/aws-native:deadline:StorageProfileOperatingSystemFamily","description":"The operating system (OS) family."},"storageProfileId":{"type":"string","description":"The storage profile ID."}},"type":"object","required":["displayName","farmId","osFamily","storageProfileId"],"inputProperties":{"displayName":{"type":"string","description":"The display name of the storage profile summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field."},"farmId":{"type":"string","description":"The unique identifier of the farm that contains the storage profile."},"fileSystemLocations":{"type":"array","items":{"$ref":"#/types/aws-native:deadline:StorageProfileFileSystemLocation"},"description":"Operating system specific file system path to the storage location."},"osFamily":{"$ref":"#/types/aws-native:deadline:StorageProfileOperatingSystemFamily","description":"The operating system (OS) family."}},"requiredInputs":["displayName","farmId","osFamily"]},"aws-native:detective:Graph":{"description":"Resource schema for AWS::Detective::Graph","properties":{"arn":{"type":"string","description":"The Detective graph ARN"},"autoEnableMembers":{"type":"boolean","description":"Indicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag values to assign to the new behavior graph."}},"type":"object","required":["arn"],"inputProperties":{"autoEnableMembers":{"type":"boolean","description":"Indicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag values to assign to the new behavior graph."}}},"aws-native:detective:MemberInvitation":{"description":"Resource schema for AWS::Detective::MemberInvitation","properties":{"disableEmailNotification":{"type":"boolean","description":"When set to true, invitation emails are not sent to the member accounts. Member accounts must still accept the invitation before they are added to the behavior graph. Updating this field has no effect."},"graphArn":{"type":"string","description":"The ARN of the graph to which the member account will be invited","replaceOnChanges":true},"memberEmailAddress":{"type":"string","description":"The root email address for the account to be invited, for validation. Updating this field has no effect."},"memberId":{"type":"string","description":"The AWS account ID to be invited to join the graph as a member","replaceOnChanges":true},"message":{"type":"string","description":"A message to be included in the email invitation sent to the invited account. Updating this field has no effect."}},"type":"object","required":["graphArn","memberEmailAddress","memberId"],"inputProperties":{"disableEmailNotification":{"type":"boolean","description":"When set to true, invitation emails are not sent to the member accounts. Member accounts must still accept the invitation before they are added to the behavior graph. Updating this field has no effect."},"graphArn":{"type":"string","description":"The ARN of the graph to which the member account will be invited"},"memberEmailAddress":{"type":"string","description":"The root email address for the account to be invited, for validation. Updating this field has no effect."},"memberId":{"type":"string","description":"The AWS account ID to be invited to join the graph as a member"},"message":{"type":"string","description":"A message to be included in the email invitation sent to the invited account. Updating this field has no effect."}},"requiredInputs":["graphArn","memberEmailAddress","memberId"]},"aws-native:detective:OrganizationAdmin":{"description":"Resource schema for AWS::Detective::OrganizationAdmin","properties":{"accountId":{"type":"string","description":"The account ID of the account that should be registered as your Organization's delegated administrator for Detective","replaceOnChanges":true},"graphArn":{"type":"string","description":"The Detective graph ARN"}},"type":"object","required":["accountId","graphArn"],"inputProperties":{"accountId":{"type":"string","description":"The account ID of the account that should be registered as your Organization's delegated administrator for Detective"}},"requiredInputs":["accountId"]},"aws-native:devicefarm:DevicePool":{"description":"Resource Type definition for a Device Pool for a given Device Farm Project","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the device pool. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."},"description":{"type":"string","description":"The device pool's description."},"maxDevices":{"type":"integer","description":"The number of devices that Device Farm can add to your device pool. Device Farm adds devices that are available and meet the criteria that you assign for the `rules` parameter. Depending on how many devices meet these constraints, your device pool might contain fewer devices than the value for this parameter.\n\nBy specifying the maximum number of devices, you can control the costs that you incur by running tests."},"name":{"type":"string","description":"The device pool's name."},"projectArn":{"type":"string","description":"The ARN of the project for the device pool.","replaceOnChanges":true},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:devicefarm:DevicePoolRule"},"description":"The device pool's rules."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."}},"type":"object","required":["arn","name","projectArn","rules"],"inputProperties":{"description":{"type":"string","description":"The device pool's description."},"maxDevices":{"type":"integer","description":"The number of devices that Device Farm can add to your device pool. Device Farm adds devices that are available and meet the criteria that you assign for the `rules` parameter. Depending on how many devices meet these constraints, your device pool might contain fewer devices than the value for this parameter.\n\nBy specifying the maximum number of devices, you can control the costs that you incur by running tests."},"name":{"type":"string","description":"The device pool's name."},"projectArn":{"type":"string","description":"The ARN of the project for the device pool."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:devicefarm:DevicePoolRule"},"description":"The device pool's rules."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."}},"requiredInputs":["projectArn","rules"]},"aws-native:devicefarm:InstanceProfile":{"description":"Resource Type definition for a Device Farm Instance Profile","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance profile. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."},"description":{"type":"string","description":"The description of the instance profile."},"excludeAppPackagesFromCleanup":{"type":"array","items":{"type":"string"},"description":"An array of strings containing the list of app packages that should not be cleaned up from the device after a test run completes.\n\nThe list of packages is considered only if you set `packageCleanup` to `true` ."},"name":{"type":"string","description":"The name of the instance profile."},"packageCleanup":{"type":"boolean","description":"When set to `true` , Device Farm removes app packages after a test run. The default value is `false` for private devices."},"rebootAfterUse":{"type":"boolean","description":"When set to `true` , Device Farm reboots the instance after a test run. The default value is `true` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."}},"type":"object","required":["arn","name"],"inputProperties":{"description":{"type":"string","description":"The description of the instance profile."},"excludeAppPackagesFromCleanup":{"type":"array","items":{"type":"string"},"description":"An array of strings containing the list of app packages that should not be cleaned up from the device after a test run completes.\n\nThe list of packages is considered only if you set `packageCleanup` to `true` ."},"name":{"type":"string","description":"The name of the instance profile."},"packageCleanup":{"type":"boolean","description":"When set to `true` , Device Farm removes app packages after a test run. The default value is `false` for private devices."},"rebootAfterUse":{"type":"boolean","description":"When set to `true` , Device Farm reboots the instance after a test run. The default value is `true` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."}}},"aws-native:devicefarm:NetworkProfile":{"description":"Resource Type definition for a Device Farm Network Profile","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the network profile. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."},"description":{"type":"string","description":"The description of the network profile."},"downlinkBandwidthBits":{"type":"integer","description":"The data throughput rate in bits per second, as an integer from 0 to 104857600."},"downlinkDelayMs":{"type":"integer","description":"Delay time for all packets to destination in milliseconds as an integer from 0 to 2000."},"downlinkJitterMs":{"type":"integer","description":"Time variation in the delay of received packets in milliseconds as an integer from 0 to 2000."},"downlinkLossPercent":{"type":"integer","description":"Proportion of received packets that fail to arrive from 0 to 100 percent."},"name":{"type":"string","description":"The name of the network profile."},"projectArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified project.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."},"uplinkBandwidthBits":{"type":"integer","description":"The data throughput rate in bits per second, as an integer from 0 to 104857600."},"uplinkDelayMs":{"type":"integer","description":"Delay time for all packets to destination in milliseconds as an integer from 0 to 2000."},"uplinkJitterMs":{"type":"integer","description":"Time variation in the delay of received packets in milliseconds as an integer from 0 to 2000."},"uplinkLossPercent":{"type":"integer","description":"Proportion of transmitted packets that fail to arrive from 0 to 100 percent."}},"type":"object","required":["arn","name","projectArn"],"inputProperties":{"description":{"type":"string","description":"The description of the network profile."},"downlinkBandwidthBits":{"type":"integer","description":"The data throughput rate in bits per second, as an integer from 0 to 104857600."},"downlinkDelayMs":{"type":"integer","description":"Delay time for all packets to destination in milliseconds as an integer from 0 to 2000."},"downlinkJitterMs":{"type":"integer","description":"Time variation in the delay of received packets in milliseconds as an integer from 0 to 2000."},"downlinkLossPercent":{"type":"integer","description":"Proportion of received packets that fail to arrive from 0 to 100 percent."},"name":{"type":"string","description":"The name of the network profile."},"projectArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."},"uplinkBandwidthBits":{"type":"integer","description":"The data throughput rate in bits per second, as an integer from 0 to 104857600."},"uplinkDelayMs":{"type":"integer","description":"Delay time for all packets to destination in milliseconds as an integer from 0 to 2000."},"uplinkJitterMs":{"type":"integer","description":"Time variation in the delay of received packets in milliseconds as an integer from 0 to 2000."},"uplinkLossPercent":{"type":"integer","description":"Proportion of transmitted packets that fail to arrive from 0 to 100 percent."}},"requiredInputs":["projectArn"]},"aws-native:devicefarm:Project":{"description":"Resource Type definition for a Device Farm Project","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the project. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."},"defaultJobTimeoutMinutes":{"type":"integer","description":"Sets the execution timeout value (in minutes) for a project. All test runs in this project use the specified execution timeout value unless overridden when scheduling a run."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:devicefarm:ProjectEnvironmentVariable"}},"executionRoleArn":{"type":"string"},"name":{"type":"string","description":"The project's name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the resource. A tag is an array of key-value pairs. Tag keys can have a maximum character length of 128 characters. Tag values can have a maximum length of 256 characters."},"vpcConfig":{"$ref":"#/types/aws-native:devicefarm:ProjectVpcConfig","description":"The VPC security groups and subnets that are attached to a project."}},"type":"object","required":["arn","name"],"inputProperties":{"defaultJobTimeoutMinutes":{"type":"integer","description":"Sets the execution timeout value (in minutes) for a project. All test runs in this project use the specified execution timeout value unless overridden when scheduling a run."},"environmentVariables":{"type":"array","items":{"$ref":"#/types/aws-native:devicefarm:ProjectEnvironmentVariable"}},"executionRoleArn":{"type":"string"},"name":{"type":"string","description":"The project's name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the resource. A tag is an array of key-value pairs. Tag keys can have a maximum character length of 128 characters. Tag values can have a maximum length of 256 characters."},"vpcConfig":{"$ref":"#/types/aws-native:devicefarm:ProjectVpcConfig","description":"The VPC security groups and subnets that are attached to a project."}}},"aws-native:devicefarm:TestGridProject":{"description":"Resource Type definition for a Device Farm TestGrid Project","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the `TestGrid` project. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."},"description":{"type":"string","description":"A human-readable description for the project."},"name":{"type":"string","description":"A human-readable name for the project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."},"vpcConfig":{"$ref":"#/types/aws-native:devicefarm:TestGridProjectVpcConfig","description":"The VPC security groups and subnets that are attached to a project."}},"type":"object","required":["arn","name"],"inputProperties":{"description":{"type":"string","description":"A human-readable description for the project."},"name":{"type":"string","description":"A human-readable name for the project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."},"vpcConfig":{"$ref":"#/types/aws-native:devicefarm:TestGridProjectVpcConfig","description":"The VPC security groups and subnets that are attached to a project."}}},"aws-native:devicefarm:VpceConfiguration":{"description":"Resource Type definition for a Device Farm VPCE Configuration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VPC endpoint. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."},"serviceDnsName":{"type":"string","description":"The DNS name that Device Farm will use to map to the private service you want to access."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."},"vpceConfigurationDescription":{"type":"string","description":"An optional description that provides details about your VPC endpoint configuration."},"vpceConfigurationName":{"type":"string","description":"The friendly name you give to your VPC endpoint configuration to manage your configurations more easily."},"vpceServiceName":{"type":"string","description":"The name of the VPC endpoint service that you want to access from Device Farm.\n\nThe name follows the format `com.amazonaws.vpce.us-west-2.vpce-svc-id` ."}},"type":"object","required":["arn","serviceDnsName","vpceConfigurationName","vpceServiceName"],"inputProperties":{"serviceDnsName":{"type":"string","description":"The DNS name that Device Farm will use to map to the private service you want to access."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* ."},"vpceConfigurationDescription":{"type":"string","description":"An optional description that provides details about your VPC endpoint configuration."},"vpceConfigurationName":{"type":"string","description":"The friendly name you give to your VPC endpoint configuration to manage your configurations more easily."},"vpceServiceName":{"type":"string","description":"The name of the VPC endpoint service that you want to access from Device Farm.\n\nThe name follows the format `com.amazonaws.vpce.us-west-2.vpce-svc-id` ."}},"requiredInputs":["serviceDnsName","vpceServiceName"]},"aws-native:devopsguru:LogAnomalyDetectionIntegration":{"description":"This resource schema represents the LogAnomalyDetectionIntegration resource in the Amazon DevOps Guru.","properties":{"accountId":{"type":"string","description":"The account ID associated with the integration of DevOps Guru with CloudWatch log groups for log anomaly detection."}},"type":"object","required":["accountId"]},"aws-native:devopsguru:NotificationChannel":{"description":"This resource schema represents the NotificationChannel resource in the Amazon DevOps Guru.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNotificationChannel = new AwsNative.DevOpsGuru.NotificationChannel(\"myNotificationChannel\", new()\n    {\n        Config = new AwsNative.DevOpsGuru.Inputs.NotificationChannelConfigArgs\n        {\n            Filters = new AwsNative.DevOpsGuru.Inputs.NotificationChannelNotificationFilterConfigArgs\n            {\n                MessageTypes = new[]\n                {\n                    AwsNative.DevOpsGuru.NotificationChannelNotificationMessageType.NewInsight,\n                    AwsNative.DevOpsGuru.NotificationChannelNotificationMessageType.ClosedInsight,\n                    AwsNative.DevOpsGuru.NotificationChannelNotificationMessageType.SeverityUpgraded,\n                },\n                Severities = new[]\n                {\n                    AwsNative.DevOpsGuru.NotificationChannelInsightSeverity.Medium,\n                    AwsNative.DevOpsGuru.NotificationChannelInsightSeverity.High,\n                },\n            },\n            Sns = new AwsNative.DevOpsGuru.Inputs.NotificationChannelSnsChannelConfigArgs\n            {\n                TopicArn = \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewNotificationChannel(ctx, \"myNotificationChannel\", \u0026devopsguru.NotificationChannelArgs{\n\t\t\tConfig: \u0026devopsguru.NotificationChannelConfigArgs{\n\t\t\t\tFilters: \u0026devopsguru.NotificationChannelNotificationFilterConfigArgs{\n\t\t\t\t\tMessageTypes: devopsguru.NotificationChannelNotificationMessageTypeArray{\n\t\t\t\t\t\tdevopsguru.NotificationChannelNotificationMessageTypeNewInsight,\n\t\t\t\t\t\tdevopsguru.NotificationChannelNotificationMessageTypeClosedInsight,\n\t\t\t\t\t\tdevopsguru.NotificationChannelNotificationMessageTypeSeverityUpgraded,\n\t\t\t\t\t},\n\t\t\t\t\tSeverities: devopsguru.NotificationChannelInsightSeverityArray{\n\t\t\t\t\t\tdevopsguru.NotificationChannelInsightSeverityMedium,\n\t\t\t\t\t\tdevopsguru.NotificationChannelInsightSeverityHigh,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSns: \u0026devopsguru.NotificationChannelSnsChannelConfigArgs{\n\t\t\t\t\tTopicArn: pulumi.String(\"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNotificationChannel = new aws_native.devopsguru.NotificationChannel(\"myNotificationChannel\", {config: {\n    filters: {\n        messageTypes: [\n            aws_native.devopsguru.NotificationChannelNotificationMessageType.NewInsight,\n            aws_native.devopsguru.NotificationChannelNotificationMessageType.ClosedInsight,\n            aws_native.devopsguru.NotificationChannelNotificationMessageType.SeverityUpgraded,\n        ],\n        severities: [\n            aws_native.devopsguru.NotificationChannelInsightSeverity.Medium,\n            aws_native.devopsguru.NotificationChannelInsightSeverity.High,\n        ],\n    },\n    sns: {\n        topicArn: \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_notification_channel = aws_native.devopsguru.NotificationChannel(\"myNotificationChannel\", config={\n    \"filters\": {\n        \"message_types\": [\n            aws_native.devopsguru.NotificationChannelNotificationMessageType.NEW_INSIGHT,\n            aws_native.devopsguru.NotificationChannelNotificationMessageType.CLOSED_INSIGHT,\n            aws_native.devopsguru.NotificationChannelNotificationMessageType.SEVERITY_UPGRADED,\n        ],\n        \"severities\": [\n            aws_native.devopsguru.NotificationChannelInsightSeverity.MEDIUM,\n            aws_native.devopsguru.NotificationChannelInsightSeverity.HIGH,\n        ],\n    },\n    \"sns\": {\n        \"topic_arn\": \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n    },\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNotificationChannel1 = new AwsNative.DevOpsGuru.NotificationChannel(\"myNotificationChannel1\", new()\n    {\n        Config = new AwsNative.DevOpsGuru.Inputs.NotificationChannelConfigArgs\n        {\n            Sns = new AwsNative.DevOpsGuru.Inputs.NotificationChannelSnsChannelConfigArgs\n            {\n                TopicArn = \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n            },\n        },\n    });\n\n    var myNotificationChannel2 = new AwsNative.DevOpsGuru.NotificationChannel(\"myNotificationChannel2\", new()\n    {\n        Config = new AwsNative.DevOpsGuru.Inputs.NotificationChannelConfigArgs\n        {\n            Sns = new AwsNative.DevOpsGuru.Inputs.NotificationChannelSnsChannelConfigArgs\n            {\n                TopicArn = \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewNotificationChannel(ctx, \"myNotificationChannel1\", \u0026devopsguru.NotificationChannelArgs{\n\t\t\tConfig: \u0026devopsguru.NotificationChannelConfigArgs{\n\t\t\t\tSns: \u0026devopsguru.NotificationChannelSnsChannelConfigArgs{\n\t\t\t\t\tTopicArn: pulumi.String(\"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = devopsguru.NewNotificationChannel(ctx, \"myNotificationChannel2\", \u0026devopsguru.NotificationChannelArgs{\n\t\t\tConfig: \u0026devopsguru.NotificationChannelConfigArgs{\n\t\t\t\tSns: \u0026devopsguru.NotificationChannelSnsChannelConfigArgs{\n\t\t\t\t\tTopicArn: pulumi.String(\"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNotificationChannel1 = new aws_native.devopsguru.NotificationChannel(\"myNotificationChannel1\", {config: {\n    sns: {\n        topicArn: \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n    },\n}});\nconst myNotificationChannel2 = new aws_native.devopsguru.NotificationChannel(\"myNotificationChannel2\", {config: {\n    sns: {\n        topicArn: \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\",\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_notification_channel1 = aws_native.devopsguru.NotificationChannel(\"myNotificationChannel1\", config={\n    \"sns\": {\n        \"topic_arn\": \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n    },\n})\nmy_notification_channel2 = aws_native.devopsguru.NotificationChannel(\"myNotificationChannel2\", config={\n    \"sns\": {\n        \"topic_arn\": \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\",\n    },\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myNotificationChannel1 = new AwsNative.DevOpsGuru.NotificationChannel(\"myNotificationChannel1\", new()\n    {\n        Config = new AwsNative.DevOpsGuru.Inputs.NotificationChannelConfigArgs\n        {\n            Sns = new AwsNative.DevOpsGuru.Inputs.NotificationChannelSnsChannelConfigArgs\n            {\n                TopicArn = \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n            },\n        },\n    });\n\n    var myNotificationChannel2 = new AwsNative.DevOpsGuru.NotificationChannel(\"myNotificationChannel2\", new()\n    {\n        Config = new AwsNative.DevOpsGuru.Inputs.NotificationChannelConfigArgs\n        {\n            Sns = new AwsNative.DevOpsGuru.Inputs.NotificationChannelSnsChannelConfigArgs\n            {\n                TopicArn = \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewNotificationChannel(ctx, \"myNotificationChannel1\", \u0026devopsguru.NotificationChannelArgs{\n\t\t\tConfig: \u0026devopsguru.NotificationChannelConfigArgs{\n\t\t\t\tSns: \u0026devopsguru.NotificationChannelSnsChannelConfigArgs{\n\t\t\t\t\tTopicArn: pulumi.String(\"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = devopsguru.NewNotificationChannel(ctx, \"myNotificationChannel2\", \u0026devopsguru.NotificationChannelArgs{\n\t\t\tConfig: \u0026devopsguru.NotificationChannelConfigArgs{\n\t\t\t\tSns: \u0026devopsguru.NotificationChannelSnsChannelConfigArgs{\n\t\t\t\t\tTopicArn: pulumi.String(\"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myNotificationChannel1 = new aws_native.devopsguru.NotificationChannel(\"myNotificationChannel1\", {config: {\n    sns: {\n        topicArn: \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n    },\n}});\nconst myNotificationChannel2 = new aws_native.devopsguru.NotificationChannel(\"myNotificationChannel2\", {config: {\n    sns: {\n        topicArn: \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\",\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_notification_channel1 = aws_native.devopsguru.NotificationChannel(\"myNotificationChannel1\", config={\n    \"sns\": {\n        \"topic_arn\": \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel\",\n    },\n})\nmy_notification_channel2 = aws_native.devopsguru.NotificationChannel(\"myNotificationChannel2\", config={\n    \"sns\": {\n        \"topic_arn\": \"arn:aws:sns:us-east-1:123456789012:DefaultNotificationChannel2\",\n    },\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The ID of a notification channel."},"config":{"$ref":"#/types/aws-native:devopsguru:NotificationChannelConfig","description":"A `NotificationChannelConfig` object that contains information about configured notification channels.","replaceOnChanges":true}},"type":"object","required":["awsId","config"],"inputProperties":{"config":{"$ref":"#/types/aws-native:devopsguru:NotificationChannelConfig","description":"A `NotificationChannelConfig` object that contains information about configured notification channels."}},"requiredInputs":["config"]},"aws-native:devopsguru:ResourceCollection":{"description":"This resource schema represents the ResourceCollection resource in the Amazon DevOps Guru.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myResourceCollection = new AwsNative.DevOpsGuru.ResourceCollection(\"myResourceCollection\", new()\n    {\n        ResourceCollectionFilter = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionFilterArgs\n        {\n            CloudFormation = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionCloudFormationCollectionFilterArgs\n            {\n                StackNames = new[]\n                {\n                    \"StackA\",\n                    \"StackB\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewResourceCollection(ctx, \"myResourceCollection\", \u0026devopsguru.ResourceCollectionArgs{\n\t\t\tResourceCollectionFilter: \u0026devopsguru.ResourceCollectionFilterArgs{\n\t\t\t\tCloudFormation: \u0026devopsguru.ResourceCollectionCloudFormationCollectionFilterArgs{\n\t\t\t\t\tStackNames: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"StackA\"),\n\t\t\t\t\t\tpulumi.String(\"StackB\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myResourceCollection = new aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", {resourceCollectionFilter: {\n    cloudFormation: {\n        stackNames: [\n            \"StackA\",\n            \"StackB\",\n        ],\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_resource_collection = aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", resource_collection_filter={\n    \"cloud_formation\": {\n        \"stack_names\": [\n            \"StackA\",\n            \"StackB\",\n        ],\n    },\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myResourceCollection = new AwsNative.DevOpsGuru.ResourceCollection(\"myResourceCollection\", new()\n    {\n        ResourceCollectionFilter = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionFilterArgs\n        {\n            CloudFormation = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionCloudFormationCollectionFilterArgs\n            {\n                StackNames = new[]\n                {\n                    \"StackA\",\n                    \"StackB\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewResourceCollection(ctx, \"myResourceCollection\", \u0026devopsguru.ResourceCollectionArgs{\n\t\t\tResourceCollectionFilter: \u0026devopsguru.ResourceCollectionFilterArgs{\n\t\t\t\tCloudFormation: \u0026devopsguru.ResourceCollectionCloudFormationCollectionFilterArgs{\n\t\t\t\t\tStackNames: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"StackA\"),\n\t\t\t\t\t\tpulumi.String(\"StackB\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myResourceCollection = new aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", {resourceCollectionFilter: {\n    cloudFormation: {\n        stackNames: [\n            \"StackA\",\n            \"StackB\",\n        ],\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_resource_collection = aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", resource_collection_filter={\n    \"cloud_formation\": {\n        \"stack_names\": [\n            \"StackA\",\n            \"StackB\",\n        ],\n    },\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myResourceCollection = new AwsNative.DevOpsGuru.ResourceCollection(\"myResourceCollection\", new()\n    {\n        ResourceCollectionFilter = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionFilterArgs\n        {\n            CloudFormation = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionCloudFormationCollectionFilterArgs\n            {\n                StackNames = new[]\n                {\n                    \"*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewResourceCollection(ctx, \"myResourceCollection\", \u0026devopsguru.ResourceCollectionArgs{\n\t\t\tResourceCollectionFilter: \u0026devopsguru.ResourceCollectionFilterArgs{\n\t\t\t\tCloudFormation: \u0026devopsguru.ResourceCollectionCloudFormationCollectionFilterArgs{\n\t\t\t\t\tStackNames: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"*\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myResourceCollection = new aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", {resourceCollectionFilter: {\n    cloudFormation: {\n        stackNames: [\"*\"],\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_resource_collection = aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", resource_collection_filter={\n    \"cloud_formation\": {\n        \"stack_names\": [\"*\"],\n    },\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myResourceCollection = new AwsNative.DevOpsGuru.ResourceCollection(\"myResourceCollection\", new()\n    {\n        ResourceCollectionFilter = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionFilterArgs\n        {\n            CloudFormation = new AwsNative.DevOpsGuru.Inputs.ResourceCollectionCloudFormationCollectionFilterArgs\n            {\n                StackNames = new[]\n                {\n                    \"*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/devopsguru\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := devopsguru.NewResourceCollection(ctx, \"myResourceCollection\", \u0026devopsguru.ResourceCollectionArgs{\n\t\t\tResourceCollectionFilter: \u0026devopsguru.ResourceCollectionFilterArgs{\n\t\t\t\tCloudFormation: \u0026devopsguru.ResourceCollectionCloudFormationCollectionFilterArgs{\n\t\t\t\t\tStackNames: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"*\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myResourceCollection = new aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", {resourceCollectionFilter: {\n    cloudFormation: {\n        stackNames: [\"*\"],\n    },\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_resource_collection = aws_native.devopsguru.ResourceCollection(\"myResourceCollection\", resource_collection_filter={\n    \"cloud_formation\": {\n        \"stack_names\": [\"*\"],\n    },\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"resourceCollectionFilter":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionFilter","description":"Information about a filter used to specify which AWS resources are analyzed for anomalous behavior by DevOps Guru."},"resourceCollectionType":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionType","description":"The type of ResourceCollection"}},"type":"object","required":["resourceCollectionFilter","resourceCollectionType"],"inputProperties":{"resourceCollectionFilter":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionFilter","description":"Information about a filter used to specify which AWS resources are analyzed for anomalous behavior by DevOps Guru."}},"requiredInputs":["resourceCollectionFilter"]},"aws-native:directconnect:Connection":{"description":"Resource Type definition for AWS::DirectConnect::Connection","properties":{"bandwidth":{"type":"string","description":"The bandwidth of the connection.","replaceOnChanges":true},"connectionArn":{"type":"string","description":"The ARN of the connection."},"connectionId":{"type":"string","description":"The ID of the connection."},"connectionName":{"type":"string","description":"The name of the connection."},"connectionState":{"type":"string","description":"The state of the connection."},"lagId":{"type":"string","description":"The ID or ARN of the LAG to associate the connection with."},"location":{"type":"string","description":"The location of the connection.","replaceOnChanges":true},"providerName":{"type":"string","description":"The name of the service provider associated with the requested connection.","replaceOnChanges":true},"requestMacSec":{"type":"boolean","description":"Indicates whether you want the connection to support MAC Security (MACsec).","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the connection."}},"type":"object","required":["bandwidth","connectionArn","connectionId","connectionName","connectionState","location"],"inputProperties":{"bandwidth":{"type":"string","description":"The bandwidth of the connection."},"connectionName":{"type":"string","description":"The name of the connection."},"lagId":{"type":"string","description":"The ID or ARN of the LAG to associate the connection with."},"location":{"type":"string","description":"The location of the connection."},"providerName":{"type":"string","description":"The name of the service provider associated with the requested connection."},"requestMacSec":{"type":"boolean","description":"Indicates whether you want the connection to support MAC Security (MACsec)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the connection."}},"requiredInputs":["bandwidth","location"]},"aws-native:directconnect:DirectConnectGateway":{"description":"Resource Type definition for AWS::DirectConnect::DirectConnectGateway","properties":{"amazonSideAsn":{"type":"string","description":"The autonomous system number (ASN) for the Amazon side of the connection.","replaceOnChanges":true},"directConnectGatewayArn":{"type":"string","description":"The ARN of the Direct Connect gateway."},"directConnectGatewayId":{"type":"string","description":"The ID of the Direct Connect gateway."},"directConnectGatewayName":{"type":"string","description":"The name of the Direct Connect gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the Direct Connect gateway."}},"type":"object","required":["directConnectGatewayArn","directConnectGatewayId","directConnectGatewayName"],"inputProperties":{"amazonSideAsn":{"type":"string","description":"The autonomous system number (ASN) for the Amazon side of the connection."},"directConnectGatewayName":{"type":"string","description":"The name of the Direct Connect gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the Direct Connect gateway."}}},"aws-native:directconnect:DirectConnectGatewayAssociation":{"description":"Resource Type definition for AWS::DirectConnect::DirectConnectGatewayAssociation","properties":{"acceptDirectConnectGatewayAssociationProposalRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to accept the Direct Connect Gateway association proposal. Needs directconnect:AcceptDirectConnectGatewayAssociationProposal permissions.","replaceOnChanges":true},"allowedPrefixesToDirectConnectGateway":{"type":"array","items":{"type":"string"},"description":"The Amazon VPC prefixes to advertise to the Direct Connect gateway. This parameter is required when you create an association to a transit gateway."},"associatedGatewayId":{"type":"string","description":"The ID or ARN of the virtual private gateway or transit gateway.","replaceOnChanges":true},"associationId":{"type":"string","description":"The ID of the Direct Connect gateway association."},"directConnectGatewayId":{"type":"string","description":"The ID or ARN of the Direct Connect gateway.","replaceOnChanges":true}},"type":"object","required":["associatedGatewayId","associationId","directConnectGatewayId"],"inputProperties":{"acceptDirectConnectGatewayAssociationProposalRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to accept the Direct Connect Gateway association proposal. Needs directconnect:AcceptDirectConnectGatewayAssociationProposal permissions."},"allowedPrefixesToDirectConnectGateway":{"type":"array","items":{"type":"string"},"description":"The Amazon VPC prefixes to advertise to the Direct Connect gateway. This parameter is required when you create an association to a transit gateway."},"associatedGatewayId":{"type":"string","description":"The ID or ARN of the virtual private gateway or transit gateway."},"directConnectGatewayId":{"type":"string","description":"The ID or ARN of the Direct Connect gateway."}},"requiredInputs":["associatedGatewayId","directConnectGatewayId"]},"aws-native:directconnect:Lag":{"description":"Resource Type definition for AWS::DirectConnect::Lag","properties":{"connectionsBandwidth":{"type":"string","description":"The bandwidth of the individual physical dedicated connections bundled by the LAG.","replaceOnChanges":true},"lagArn":{"type":"string","description":"The ARN of the LAG."},"lagId":{"type":"string","description":"The ID of the LAG."},"lagName":{"type":"string","description":"The name of the LAG."},"lagState":{"type":"string","description":"The state of the LAG."},"location":{"type":"string","description":"The location for the LAG.","replaceOnChanges":true},"minimumLinks":{"type":"integer","description":"The minimum number of physical dedicated connections that must be operational for the LAG itself to be operational."},"providerName":{"type":"string","description":"The name of the service provider associated with the requested LAG.","replaceOnChanges":true},"requestMacSec":{"type":"boolean","description":"Indicates whether you want the LAG to support MAC Security (MACsec).","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the LAG."}},"type":"object","required":["connectionsBandwidth","lagArn","lagId","lagName","lagState","location"],"inputProperties":{"connectionsBandwidth":{"type":"string","description":"The bandwidth of the individual physical dedicated connections bundled by the LAG."},"lagName":{"type":"string","description":"The name of the LAG."},"location":{"type":"string","description":"The location for the LAG."},"minimumLinks":{"type":"integer","description":"The minimum number of physical dedicated connections that must be operational for the LAG itself to be operational."},"providerName":{"type":"string","description":"The name of the service provider associated with the requested LAG."},"requestMacSec":{"type":"boolean","description":"Indicates whether you want the LAG to support MAC Security (MACsec)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the LAG."}},"requiredInputs":["connectionsBandwidth","location"]},"aws-native:directconnect:PrivateVirtualInterface":{"description":"Resource Type definition for AWS::DirectConnect::PrivateVirtualInterface","properties":{"allocatePrivateVirtualInterfaceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to allocate the private virtual interface. Needs directconnect:AllocatePrivateVirtualInterface permissions and tag permissions if applicable.","replaceOnChanges":true},"bgpPeers":{"type":"array","items":{"$ref":"#/types/aws-native:directconnect:PrivateVirtualInterfaceBgpPeer"},"description":"The BGP peers configured on this virtual interface."},"connectionId":{"type":"string","description":"The ID or ARN of the connection or LAG."},"directConnectGatewayId":{"type":"string","description":"The ID or ARN of the Direct Connect gateway.","replaceOnChanges":true},"enableSiteLink":{"type":"boolean","description":"Indicates whether to enable or disable SiteLink."},"mtu":{"type":"integer","description":"The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 9001. The default value is 1500."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the private virtual interface."},"virtualGatewayId":{"type":"string","description":"The ID or ARN of the virtual private gateway.","replaceOnChanges":true},"virtualInterfaceArn":{"type":"string","description":"The ID of the virtual interface."},"virtualInterfaceId":{"type":"string","description":"The ID of the virtual interface."},"virtualInterfaceName":{"type":"string","description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-)."},"vlan":{"type":"integer","description":"The ID of the VLAN.","replaceOnChanges":true}},"type":"object","required":["bgpPeers","connectionId","virtualInterfaceArn","virtualInterfaceId","virtualInterfaceName","vlan"],"inputProperties":{"allocatePrivateVirtualInterfaceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to allocate the private virtual interface. Needs directconnect:AllocatePrivateVirtualInterface permissions and tag permissions if applicable."},"bgpPeers":{"type":"array","items":{"$ref":"#/types/aws-native:directconnect:PrivateVirtualInterfaceBgpPeer"},"description":"The BGP peers configured on this virtual interface."},"connectionId":{"type":"string","description":"The ID or ARN of the connection or LAG."},"directConnectGatewayId":{"type":"string","description":"The ID or ARN of the Direct Connect gateway."},"enableSiteLink":{"type":"boolean","description":"Indicates whether to enable or disable SiteLink."},"mtu":{"type":"integer","description":"The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 9001. The default value is 1500."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the private virtual interface."},"virtualGatewayId":{"type":"string","description":"The ID or ARN of the virtual private gateway."},"virtualInterfaceName":{"type":"string","description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-)."},"vlan":{"type":"integer","description":"The ID of the VLAN."}},"requiredInputs":["bgpPeers","connectionId","vlan"]},"aws-native:directconnect:PublicVirtualInterface":{"description":"Resource Type definition for AWS::DirectConnect::PublicVirtualInterface","properties":{"allocatePublicVirtualInterfaceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to allocate the public virtual interface. Needs directconnect:AllocatePublicVirtualInterface permissions and tag permissions if applicable.","replaceOnChanges":true},"bgpPeers":{"type":"array","items":{"$ref":"#/types/aws-native:directconnect:PublicVirtualInterfaceBgpPeer"},"description":"The BGP peers configured on this virtual interface."},"connectionId":{"type":"string","description":"The ID or ARN of the connection or LAG."},"routeFilterPrefixes":{"type":"array","items":{"type":"string"},"description":"The routes to be advertised to the AWS network in this region.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the public virtual interface."},"virtualInterfaceArn":{"type":"string","description":"The ARN of the virtual interface."},"virtualInterfaceId":{"type":"string","description":"The ID of the virtual interface."},"virtualInterfaceName":{"type":"string","description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-)."},"vlan":{"type":"integer","description":"The ID of the VLAN.","replaceOnChanges":true}},"type":"object","required":["bgpPeers","connectionId","virtualInterfaceArn","virtualInterfaceId","virtualInterfaceName","vlan"],"inputProperties":{"allocatePublicVirtualInterfaceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to allocate the public virtual interface. Needs directconnect:AllocatePublicVirtualInterface permissions and tag permissions if applicable."},"bgpPeers":{"type":"array","items":{"$ref":"#/types/aws-native:directconnect:PublicVirtualInterfaceBgpPeer"},"description":"The BGP peers configured on this virtual interface."},"connectionId":{"type":"string","description":"The ID or ARN of the connection or LAG."},"routeFilterPrefixes":{"type":"array","items":{"type":"string"},"description":"The routes to be advertised to the AWS network in this region."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the public virtual interface."},"virtualInterfaceName":{"type":"string","description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-)."},"vlan":{"type":"integer","description":"The ID of the VLAN."}},"requiredInputs":["bgpPeers","connectionId","vlan"]},"aws-native:directconnect:TransitVirtualInterface":{"description":"Resource Type definition for AWS::DirectConnect::TransitVirtualInterface","properties":{"allocateTransitVirtualInterfaceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to allocate the TransitVifAllocation. Needs directconnect:AllocateTransitVirtualInterface permissions and tag permissions if applicable.","replaceOnChanges":true},"bgpPeers":{"type":"array","items":{"$ref":"#/types/aws-native:directconnect:TransitVirtualInterfaceBgpPeer"},"description":"The BGP peers configured on this virtual interface.."},"connectionId":{"type":"string","description":"The ID or ARN of the connection or LAG."},"directConnectGatewayId":{"type":"string","description":"The ID or ARN of the Direct Connect gateway.","replaceOnChanges":true},"enableSiteLink":{"type":"boolean","description":"Indicates whether to enable or disable SiteLink."},"mtu":{"type":"integer","description":"The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 9001. The default value is 1500."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the private virtual interface."},"virtualInterfaceArn":{"type":"string","description":"The ARN of the virtual interface."},"virtualInterfaceId":{"type":"string","description":"The ID of the virtual interface."},"virtualInterfaceName":{"type":"string","description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-)."},"vlan":{"type":"integer","description":"The ID of the VLAN.","replaceOnChanges":true}},"type":"object","required":["bgpPeers","connectionId","directConnectGatewayId","virtualInterfaceArn","virtualInterfaceId","virtualInterfaceName","vlan"],"inputProperties":{"allocateTransitVirtualInterfaceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to allocate the TransitVifAllocation. Needs directconnect:AllocateTransitVirtualInterface permissions and tag permissions if applicable."},"bgpPeers":{"type":"array","items":{"$ref":"#/types/aws-native:directconnect:TransitVirtualInterfaceBgpPeer"},"description":"The BGP peers configured on this virtual interface.."},"connectionId":{"type":"string","description":"The ID or ARN of the connection or LAG."},"directConnectGatewayId":{"type":"string","description":"The ID or ARN of the Direct Connect gateway."},"enableSiteLink":{"type":"boolean","description":"Indicates whether to enable or disable SiteLink."},"mtu":{"type":"integer","description":"The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 9001. The default value is 1500."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the private virtual interface."},"virtualInterfaceName":{"type":"string","description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-)."},"vlan":{"type":"integer","description":"The ID of the VLAN."}},"requiredInputs":["bgpPeers","connectionId","directConnectGatewayId","vlan"]},"aws-native:directoryservice:SimpleAd":{"description":"Resource Type definition for AWS::DirectoryService::SimpleAD","properties":{"alias":{"type":"string","description":"The alias for a directory."},"createAlias":{"type":"boolean","description":"The name of the configuration set.","replaceOnChanges":true},"description":{"type":"string","description":"Description for the directory.","replaceOnChanges":true},"directoryId":{"type":"string","description":"The unique identifier for a directory."},"dnsIpAddresses":{"type":"array","items":{"type":"string"},"description":"The IP addresses of the DNS servers for the directory, such as [ \"172.31.3.154\", \"172.31.63.203\" ]."},"enableSso":{"type":"boolean","description":"Whether to enable single sign-on for a Simple Active Directory in AWS."},"name":{"type":"string","description":"The fully qualified domain name for the AWS Managed Simple AD directory.","replaceOnChanges":true},"password":{"type":"string","description":"The password for the default administrative user named Admin.","replaceOnChanges":true},"shortName":{"type":"string","description":"The NetBIOS name for your domain.","replaceOnChanges":true},"size":{"type":"string","description":"The size of the directory.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"vpcSettings":{"$ref":"#/types/aws-native:directoryservice:SimpleAdVpcSettings","description":"VPC settings of the Simple AD directory server in AWS.","replaceOnChanges":true}},"type":"object","required":["alias","directoryId","dnsIpAddresses","name","size","vpcSettings"],"inputProperties":{"createAlias":{"type":"boolean","description":"The name of the configuration set."},"description":{"type":"string","description":"Description for the directory."},"enableSso":{"type":"boolean","description":"Whether to enable single sign-on for a Simple Active Directory in AWS."},"name":{"type":"string","description":"The fully qualified domain name for the AWS Managed Simple AD directory."},"password":{"type":"string","description":"The password for the default administrative user named Admin."},"shortName":{"type":"string","description":"The NetBIOS name for your domain."},"size":{"type":"string","description":"The size of the directory."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"vpcSettings":{"$ref":"#/types/aws-native:directoryservice:SimpleAdVpcSettings","description":"VPC settings of the Simple AD directory server in AWS."}},"requiredInputs":["size","vpcSettings"]},"aws-native:dms:DataMigration":{"description":"Resource schema for AWS::DMS::DataMigration.","properties":{"dataMigrationArn":{"type":"string","description":"The property describes an ARN of the data migration."},"dataMigrationCreateTime":{"type":"string","description":"The property describes the create time of the data migration."},"dataMigrationIdentifier":{"type":"string","description":"The property describes an ARN of the data migration."},"dataMigrationName":{"type":"string","description":"The property describes a name to identify the data migration."},"dataMigrationSettings":{"$ref":"#/types/aws-native:dms:DataMigrationSettings","description":"The property describes the settings for the data migration."},"dataMigrationType":{"$ref":"#/types/aws-native:dms:DataMigrationType","description":"The property describes the type of migration."},"migrationProjectIdentifier":{"type":"string","description":"The property describes an identifier for the migration project. It is used for describing/deleting/modifying can be name/arn"},"serviceAccessRoleArn":{"type":"string","description":"The property describes Amazon Resource Name (ARN) of the service access role."},"sourceDataSettings":{"type":"array","items":{"$ref":"#/types/aws-native:dms:DataMigrationSourceDataSettings"},"description":"The property describes the settings for the data migration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["dataMigrationArn","dataMigrationCreateTime","dataMigrationType","migrationProjectIdentifier","serviceAccessRoleArn"],"inputProperties":{"dataMigrationIdentifier":{"type":"string","description":"The property describes an ARN of the data migration."},"dataMigrationName":{"type":"string","description":"The property describes a name to identify the data migration."},"dataMigrationSettings":{"$ref":"#/types/aws-native:dms:DataMigrationSettings","description":"The property describes the settings for the data migration."},"dataMigrationType":{"$ref":"#/types/aws-native:dms:DataMigrationType","description":"The property describes the type of migration."},"migrationProjectIdentifier":{"type":"string","description":"The property describes an identifier for the migration project. It is used for describing/deleting/modifying can be name/arn"},"serviceAccessRoleArn":{"type":"string","description":"The property describes Amazon Resource Name (ARN) of the service access role."},"sourceDataSettings":{"type":"array","items":{"$ref":"#/types/aws-native:dms:DataMigrationSourceDataSettings"},"description":"The property describes the settings for the data migration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["dataMigrationType","migrationProjectIdentifier","serviceAccessRoleArn"]},"aws-native:dms:DataProvider":{"description":"Resource schema for AWS::DMS::DataProvider","properties":{"dataProviderArn":{"type":"string","description":"The data provider ARN."},"dataProviderCreationTime":{"type":"string","description":"The data provider creation time."},"dataProviderIdentifier":{"type":"string","description":"The property describes an identifier for the data provider. It is used for describing/deleting/modifying can be name/arn"},"dataProviderName":{"type":"string","description":"The property describes a name to identify the data provider."},"description":{"type":"string","description":"The optional description of the data provider."},"engine":{"$ref":"#/types/aws-native:dms:DataProviderEngine","description":"The property describes a data engine for the data provider."},"exactSettings":{"type":"boolean","description":"The property describes the exact settings which can be modified"},"settings":{"$ref":"#/types/aws-native:dms:SettingsProperties","description":"The property identifies the exact type of settings for the data provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["dataProviderArn","dataProviderCreationTime","engine"],"inputProperties":{"dataProviderIdentifier":{"type":"string","description":"The property describes an identifier for the data provider. It is used for describing/deleting/modifying can be name/arn"},"dataProviderName":{"type":"string","description":"The property describes a name to identify the data provider."},"description":{"type":"string","description":"The optional description of the data provider."},"engine":{"$ref":"#/types/aws-native:dms:DataProviderEngine","description":"The property describes a data engine for the data provider."},"exactSettings":{"type":"boolean","description":"The property describes the exact settings which can be modified"},"settings":{"$ref":"#/types/aws-native:dms:SettingsProperties","description":"The property identifies the exact type of settings for the data provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["engine"]},"aws-native:dms:InstanceProfile":{"description":"Resource schema for AWS::DMS::InstanceProfile.","properties":{"availabilityZone":{"type":"string","description":"The property describes an availability zone of the instance profile."},"description":{"type":"string","description":"The optional description of the instance profile."},"instanceProfileArn":{"type":"string","description":"The property describes an ARN of the instance profile."},"instanceProfileCreationTime":{"type":"string","description":"The property describes a creating time of the instance profile."},"instanceProfileIdentifier":{"type":"string","description":"The property describes an identifier for the instance profile. It is used for describing/deleting/modifying. Can be name/arn"},"instanceProfileName":{"type":"string","description":"The property describes a name for the instance profile."},"kmsKeyArn":{"type":"string","description":"The property describes kms key arn for the instance profile."},"networkType":{"$ref":"#/types/aws-native:dms:InstanceProfileNetworkType","description":"The property describes a network type for the instance profile."},"publiclyAccessible":{"type":"boolean","description":"The property describes the publicly accessible of the instance profile"},"subnetGroupIdentifier":{"type":"string","description":"The property describes a subnet group identifier for the instance profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcSecurityGroups":{"type":"array","items":{"type":"string"},"description":"The property describes vps security groups for the instance profile."}},"type":"object","required":["instanceProfileArn","instanceProfileCreationTime"],"inputProperties":{"availabilityZone":{"type":"string","description":"The property describes an availability zone of the instance profile."},"description":{"type":"string","description":"The optional description of the instance profile."},"instanceProfileIdentifier":{"type":"string","description":"The property describes an identifier for the instance profile. It is used for describing/deleting/modifying. Can be name/arn"},"instanceProfileName":{"type":"string","description":"The property describes a name for the instance profile."},"kmsKeyArn":{"type":"string","description":"The property describes kms key arn for the instance profile."},"networkType":{"$ref":"#/types/aws-native:dms:InstanceProfileNetworkType","description":"The property describes a network type for the instance profile."},"publiclyAccessible":{"type":"boolean","description":"The property describes the publicly accessible of the instance profile"},"subnetGroupIdentifier":{"type":"string","description":"The property describes a subnet group identifier for the instance profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcSecurityGroups":{"type":"array","items":{"type":"string"},"description":"The property describes vps security groups for the instance profile."}}},"aws-native:dms:MigrationProject":{"description":"Resource schema for AWS::DMS::MigrationProject","properties":{"description":{"type":"string","description":"The optional description of the migration project."},"instanceProfileArn":{"type":"string","description":"The property describes an instance profile arn for the migration project. For read"},"instanceProfileIdentifier":{"type":"string","description":"The property describes an instance profile identifier for the migration project. For create"},"instanceProfileName":{"type":"string","description":"The property describes an instance profile name for the migration project. For read"},"migrationProjectArn":{"type":"string","description":"The property describes an ARN of the migration project."},"migrationProjectCreationTime":{"type":"string","description":"The property describes a creating time of the migration project."},"migrationProjectIdentifier":{"type":"string","description":"The property describes an identifier for the migration project. It is used for describing/deleting/modifying can be name/arn"},"migrationProjectName":{"type":"string","description":"The property describes a name to identify the migration project."},"schemaConversionApplicationAttributes":{"$ref":"#/types/aws-native:dms:SchemaConversionApplicationAttributesProperties","description":"The property describes schema conversion application attributes for the migration project."},"sourceDataProviderDescriptors":{"type":"array","items":{"$ref":"#/types/aws-native:dms:MigrationProjectDataProviderDescriptor"},"description":"The property describes source data provider descriptors for the migration project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetDataProviderDescriptors":{"type":"array","items":{"$ref":"#/types/aws-native:dms:MigrationProjectDataProviderDescriptor"},"description":"The property describes target data provider descriptors for the migration project."},"transformationRules":{"type":"string","description":"The property describes transformation rules for the migration project."}},"type":"object","required":["migrationProjectArn"],"inputProperties":{"description":{"type":"string","description":"The optional description of the migration project."},"instanceProfileArn":{"type":"string","description":"The property describes an instance profile arn for the migration project. For read"},"instanceProfileIdentifier":{"type":"string","description":"The property describes an instance profile identifier for the migration project. For create"},"instanceProfileName":{"type":"string","description":"The property describes an instance profile name for the migration project. For read"},"migrationProjectCreationTime":{"type":"string","description":"The property describes a creating time of the migration project."},"migrationProjectIdentifier":{"type":"string","description":"The property describes an identifier for the migration project. It is used for describing/deleting/modifying can be name/arn"},"migrationProjectName":{"type":"string","description":"The property describes a name to identify the migration project."},"schemaConversionApplicationAttributes":{"$ref":"#/types/aws-native:dms:SchemaConversionApplicationAttributesProperties","description":"The property describes schema conversion application attributes for the migration project."},"sourceDataProviderDescriptors":{"type":"array","items":{"$ref":"#/types/aws-native:dms:MigrationProjectDataProviderDescriptor"},"description":"The property describes source data provider descriptors for the migration project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetDataProviderDescriptors":{"type":"array","items":{"$ref":"#/types/aws-native:dms:MigrationProjectDataProviderDescriptor"},"description":"The property describes target data provider descriptors for the migration project."},"transformationRules":{"type":"string","description":"The property describes transformation rules for the migration project."}}},"aws-native:dms:ReplicationConfig":{"description":"A replication configuration that you later provide to configure and start a AWS DMS Serverless replication","properties":{"computeConfig":{"$ref":"#/types/aws-native:dms:ReplicationConfigComputeConfig","description":"Configuration parameters for provisioning an AWS DMS Serverless replication."},"replicationConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Replication Config"},"replicationConfigIdentifier":{"type":"string","description":"A unique identifier of replication configuration"},"replicationSettings":{"$ref":"pulumi.json#/Any","description":"JSON settings for Servereless replications that are provisioned using this replication configuration\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"replicationType":{"$ref":"#/types/aws-native:dms:ReplicationConfigReplicationType","description":"The type of AWS DMS Serverless replication to provision using this replication configuration"},"resourceIdentifier":{"type":"string","description":"A unique value or name that you get set for a given resource that can be used to construct an Amazon Resource Name (ARN) for that resource","replaceOnChanges":true},"sourceEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the source endpoint for this AWS DMS Serverless replication configuration"},"supplementalSettings":{"$ref":"pulumi.json#/Any","description":"JSON settings for specifying supplemental data\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"tableMappings":{"$ref":"pulumi.json#/Any","description":"JSON table mappings for AWS DMS Serverless replications that are provisioned using this replication configuration\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eContains a map of the key-value pairs for the resource tag or tags assigned to the dataset.\u003c/p\u003e"},"targetEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target endpoint for this AWS DMS Serverless replication configuration"}},"type":"object","required":["computeConfig","replicationConfigArn","replicationConfigIdentifier","replicationType","sourceEndpointArn","tableMappings","targetEndpointArn"],"inputProperties":{"computeConfig":{"$ref":"#/types/aws-native:dms:ReplicationConfigComputeConfig","description":"Configuration parameters for provisioning an AWS DMS Serverless replication."},"replicationConfigIdentifier":{"type":"string","description":"A unique identifier of replication configuration"},"replicationSettings":{"$ref":"pulumi.json#/Any","description":"JSON settings for Servereless replications that are provisioned using this replication configuration\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"replicationType":{"$ref":"#/types/aws-native:dms:ReplicationConfigReplicationType","description":"The type of AWS DMS Serverless replication to provision using this replication configuration"},"resourceIdentifier":{"type":"string","description":"A unique value or name that you get set for a given resource that can be used to construct an Amazon Resource Name (ARN) for that resource"},"sourceEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the source endpoint for this AWS DMS Serverless replication configuration"},"supplementalSettings":{"$ref":"pulumi.json#/Any","description":"JSON settings for specifying supplemental data\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"tableMappings":{"$ref":"pulumi.json#/Any","description":"JSON table mappings for AWS DMS Serverless replications that are provisioned using this replication configuration\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eContains a map of the key-value pairs for the resource tag or tags assigned to the dataset.\u003c/p\u003e"},"targetEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target endpoint for this AWS DMS Serverless replication configuration"}},"requiredInputs":["computeConfig","replicationConfigIdentifier","replicationType","sourceEndpointArn","tableMappings","targetEndpointArn"]},"aws-native:docdb:GlobalCluster":{"description":"The AWS::DocDB::GlobalCluster resource represents an Amazon DocumentDB Global Cluster.","properties":{"deletionProtection":{"type":"boolean","description":"Indicates whether the global cluster has deletion protection enabled. The global cluster can't be deleted when deletion protection is enabled."},"engine":{"$ref":"#/types/aws-native:docdb:GlobalClusterEngine","description":"The database engine to use for this global cluster.","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The engine version to use for this global cluster.","replaceOnChanges":true},"globalClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the global cluster."},"globalClusterIdentifier":{"type":"string","description":"The cluster identifier of the global cluster.","replaceOnChanges":true},"globalClusterResourceId":{"type":"string","description":"The AWS Region-unique, immutable identifier for the global database cluster. This identifier is found in AWS CloudTrail log entries whenever the AWS KMS key for the DB cluster is accessed."},"sourceDbClusterIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) to use as the primary cluster of the global cluster. You may also choose to instead specify the DBClusterIdentifier. If you provide a value for this parameter, don't specify values for the following settings because Amazon DocumentDB uses the values from the specified source DB cluster: Engine, EngineVersion, StorageEncrypted","replaceOnChanges":true},"storageEncrypted":{"type":"boolean","description":"Indicates whether the global cluster has storage encryption enabled.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be assigned to the Amazon DocumentDB resource."}},"type":"object","required":["globalClusterArn","globalClusterIdentifier","globalClusterResourceId"],"inputProperties":{"deletionProtection":{"type":"boolean","description":"Indicates whether the global cluster has deletion protection enabled. The global cluster can't be deleted when deletion protection is enabled."},"engine":{"$ref":"#/types/aws-native:docdb:GlobalClusterEngine","description":"The database engine to use for this global cluster."},"engineVersion":{"type":"string","description":"The engine version to use for this global cluster."},"globalClusterIdentifier":{"type":"string","description":"The cluster identifier of the global cluster."},"sourceDbClusterIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) to use as the primary cluster of the global cluster. You may also choose to instead specify the DBClusterIdentifier. If you provide a value for this parameter, don't specify values for the following settings because Amazon DocumentDB uses the values from the specified source DB cluster: Engine, EngineVersion, StorageEncrypted"},"storageEncrypted":{"type":"boolean","description":"Indicates whether the global cluster has storage encryption enabled."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be assigned to the Amazon DocumentDB resource."}},"requiredInputs":["globalClusterIdentifier"]},"aws-native:docdbelastic:Cluster":{"description":"The AWS::DocDBElastic::Cluster Amazon DocumentDB (with MongoDB compatibility) Elastic Scale resource describes a Cluster","properties":{"adminUserName":{"type":"string","description":"The name of the Amazon DocumentDB elastic clusters administrator.\n\n*Constraints* :\n\n- Must be from 1 to 63 letters or numbers.\n- The first character must be a letter.\n- Cannot be a reserved word.","replaceOnChanges":true},"adminUserPassword":{"type":"string","description":"The password for the Elastic DocumentDB cluster administrator and can contain any printable ASCII characters.\n\n*Constraints* :\n\n- Must contain from 8 to 100 characters.\n- Cannot contain a forward slash (/), double quote (\"), or the \"at\" symbol (@).\n- A valid `AdminUserName` entry is also required."},"authType":{"type":"string","description":"The authentication type used to determine where to fetch the password used for accessing the elastic cluster. Valid types are `PLAIN_TEXT` or `SECRET_ARN` .","replaceOnChanges":true},"backupRetentionPeriod":{"type":"integer","description":"The number of days for which automatic snapshots are retained."},"clusterArn":{"type":"string"},"clusterEndpoint":{"type":"string","description":"The URL used to connect to the elastic cluster."},"clusterName":{"type":"string","description":"The name of the new elastic cluster. This parameter is stored as a lowercase string.\n\n*Constraints* :\n\n- Must contain from 1 to 63 letters, numbers, or hyphens.\n- The first character must be a letter.\n- Cannot end with a hyphen or contain two consecutive hyphens.\n\n*Example* : `my-cluster`","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The KMS key identifier to use to encrypt the new elastic cluster.\n\nThe KMS key identifier is the Amazon Resource Name (ARN) for the KMS encryption key. If you are creating a cluster using the same Amazon account that owns this KMS encryption key, you can use the KMS key alias instead of the ARN as the KMS encryption key.\n\nIf an encryption key is not specified, Amazon DocumentDB uses the default encryption key that KMS creates for your account. Your account has a different default encryption key for each Amazon Region.","replaceOnChanges":true},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created if automated backups are enabled, as determined by `backupRetentionPeriod` ."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n\n*Format* : `ddd:hh24:mi-ddd:hh24:mi`\n\n*Default* : a 30-minute window selected at random from an 8-hour block of time for each AWS Region , occurring on a random day of the week.\n\n*Valid days* : Mon, Tue, Wed, Thu, Fri, Sat, Sun\n\n*Constraints* : Minimum 30-minute window."},"shardCapacity":{"type":"integer","description":"The number of vCPUs assigned to each elastic cluster shard. Maximum is 64. Allowed values are 2, 4, 8, 16, 32, 64."},"shardCount":{"type":"integer","description":"The number of shards assigned to the elastic cluster. Maximum is 32."},"shardInstanceCount":{"type":"integer","description":"The number of replica instances applying to all shards in the cluster. A `shardInstanceCount` value of 1 means there is one writer instance, and any additional instances are replicas that can be used for reads and to improve availability."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 subnet IDs for the new elastic cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be assigned to the new elastic cluster."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 VPC security groups to associate with the new elastic cluster."}},"type":"object","required":["adminUserName","authType","clusterArn","clusterEndpoint","clusterName","shardCapacity","shardCount"],"inputProperties":{"adminUserName":{"type":"string","description":"The name of the Amazon DocumentDB elastic clusters administrator.\n\n*Constraints* :\n\n- Must be from 1 to 63 letters or numbers.\n- The first character must be a letter.\n- Cannot be a reserved word."},"adminUserPassword":{"type":"string","description":"The password for the Elastic DocumentDB cluster administrator and can contain any printable ASCII characters.\n\n*Constraints* :\n\n- Must contain from 8 to 100 characters.\n- Cannot contain a forward slash (/), double quote (\"), or the \"at\" symbol (@).\n- A valid `AdminUserName` entry is also required."},"authType":{"type":"string","description":"The authentication type used to determine where to fetch the password used for accessing the elastic cluster. Valid types are `PLAIN_TEXT` or `SECRET_ARN` ."},"backupRetentionPeriod":{"type":"integer","description":"The number of days for which automatic snapshots are retained."},"clusterName":{"type":"string","description":"The name of the new elastic cluster. This parameter is stored as a lowercase string.\n\n*Constraints* :\n\n- Must contain from 1 to 63 letters, numbers, or hyphens.\n- The first character must be a letter.\n- Cannot end with a hyphen or contain two consecutive hyphens.\n\n*Example* : `my-cluster`"},"kmsKeyId":{"type":"string","description":"The KMS key identifier to use to encrypt the new elastic cluster.\n\nThe KMS key identifier is the Amazon Resource Name (ARN) for the KMS encryption key. If you are creating a cluster using the same Amazon account that owns this KMS encryption key, you can use the KMS key alias instead of the ARN as the KMS encryption key.\n\nIf an encryption key is not specified, Amazon DocumentDB uses the default encryption key that KMS creates for your account. Your account has a different default encryption key for each Amazon Region."},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created if automated backups are enabled, as determined by `backupRetentionPeriod` ."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n\n*Format* : `ddd:hh24:mi-ddd:hh24:mi`\n\n*Default* : a 30-minute window selected at random from an 8-hour block of time for each AWS Region , occurring on a random day of the week.\n\n*Valid days* : Mon, Tue, Wed, Thu, Fri, Sat, Sun\n\n*Constraints* : Minimum 30-minute window."},"shardCapacity":{"type":"integer","description":"The number of vCPUs assigned to each elastic cluster shard. Maximum is 64. Allowed values are 2, 4, 8, 16, 32, 64."},"shardCount":{"type":"integer","description":"The number of shards assigned to the elastic cluster. Maximum is 32."},"shardInstanceCount":{"type":"integer","description":"The number of replica instances applying to all shards in the cluster. A `shardInstanceCount` value of 1 means there is one writer instance, and any additional instances are replicas that can be used for reads and to improve availability."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 subnet IDs for the new elastic cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be assigned to the new elastic cluster."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 VPC security groups to associate with the new elastic cluster."}},"requiredInputs":["adminUserName","authType","shardCapacity","shardCount"]},"aws-native:dsql:Cluster":{"description":"Resource Type definition for AWS::DSQL::Cluster","properties":{"creationTime":{"type":"string","description":"The time of when the cluster was created in ISO-8601 format."},"deletionProtectionEnabled":{"type":"boolean","description":"Whether deletion protection is enabled in this cluster."},"encryptionDetails":{"$ref":"#/types/aws-native:dsql:EncryptionDetailsProperties","description":"The encryption configuration details for the cluster."},"endpoint":{"type":"string","description":"The DSQL cluster endpoint."},"identifier":{"type":"string","description":"The ID of the created cluster."},"kmsEncryptionKey":{"type":"string","description":"The KMS key that encrypts data on the cluster."},"multiRegionProperties":{"$ref":"#/types/aws-native:dsql:MultiRegionPropertiesProperties","description":"The Multi-region properties associated to this cluster."},"policyDocument":{"type":"string","description":"The IAM policy applied to the cluster resource."},"policyVersion":{"type":"string","description":"The version number of the cluster's resource based policy"},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the cluster."},"status":{"type":"string","description":"The status of the cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of key and value pairs this cluster is tagged with."},"vpcEndpoint":{"type":"string","description":"The DSQL cluster VPC endpoint."},"vpcEndpointServiceName":{"type":"string","description":"The VPC endpoint service name."}},"type":"object","required":["creationTime","encryptionDetails","endpoint","identifier","policyVersion","resourceArn","status","vpcEndpoint","vpcEndpointServiceName"],"inputProperties":{"deletionProtectionEnabled":{"type":"boolean","description":"Whether deletion protection is enabled in this cluster."},"kmsEncryptionKey":{"type":"string","description":"The KMS key that encrypts data on the cluster."},"multiRegionProperties":{"$ref":"#/types/aws-native:dsql:MultiRegionPropertiesProperties","description":"The Multi-region properties associated to this cluster."},"policyDocument":{"type":"string","description":"The IAM policy applied to the cluster resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of key and value pairs this cluster is tagged with."}}},"aws-native:dynamodb:GlobalTable":{"description":"Version: None. Resource Type definition for AWS::DynamoDB::GlobalTable","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the DynamoDB table, such as `arn:aws:dynamodb:us-east-2:123456789012:table/myDynamoDBTable` . The ARN returned is that of the replica in the region the stack is deployed to."},"attributeDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableAttributeDefinition"},"description":"A list of attributes that describe the key schema for the global table and indexes."},"billingMode":{"type":"string","description":"Specifies how you are charged for read and write throughput and how you manage capacity. Valid values are:\n\n- `PAY_PER_REQUEST`\n- `PROVISIONED`\n\nAll replicas in your global table will have the same billing mode. If you use `PROVISIONED` billing mode, you must provide an auto scaling configuration via the `WriteProvisionedThroughputSettings` property. The default value of this property is `PROVISIONED` ."},"globalSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalSecondaryIndex"},"description":"Global secondary indexes to be created on the global table. You can create up to 20 global secondary indexes. Each replica in your global table will have the same global secondary index settings. You can only create or delete one global secondary index in a single stack operation.\n\nSince the backfilling of an index could take a long time, CloudFormation does not wait for the index to become active. If a stack operation rolls back, CloudFormation might not delete an index that has been added. In that case, you will need to delete the index manually."},"globalTableSourceArn":{"type":"string"},"globalTableWitnesses":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWitness"},"description":"The list of witnesses of the MRSC global table. Only one witness Region can be configured per MRSC global table."},"keySchema":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKeySchema"},"description":"Specifies the attributes that make up the primary key for the table. The attributes in the `KeySchema` property must also be defined in the `AttributeDefinitions` property."},"localSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableLocalSecondaryIndex"},"description":"Local secondary indexes to be created on the table. You can create up to five local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes. Each replica in your global table will have the same local secondary index settings."},"multiRegionConsistency":{"$ref":"#/types/aws-native:dynamodb:GlobalTableMultiRegionConsistency","description":"Specifies the consistency mode for a new global table.\n\nYou can specify one of the following consistency modes:\n\n- `EVENTUAL` : Configures a new global table for multi-Region eventual consistency (MREC).\n- `STRONG` : Configures a new global table for multi-Region strong consistency (MRSC).\n\nIf you don't specify this field, the global table consistency mode defaults to `EVENTUAL` . For more information about global tables consistency modes, see [Consistency modes](https://docs.aws.amazon.com/V2globaltables_HowItWorks.html#V2globaltables_HowItWorks.consistency-modes) in DynamoDB developer guide."},"readOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings"},"readProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalReadProvisionedThroughputSettings"},"replicas":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaSpecification"},"description":"Specifies the list of replicas for your global table. The list must contain at least one element, the region where the stack defining the global table is deployed. For example, if you define your table in a stack deployed to us-east-1, you must have an entry in `Replicas` with the region us-east-1. You cannot remove the replica in the stack region.\n\n\u003e Adding a replica might take a few minutes for an empty table, or up to several hours for large tables. If you want to add or remove a replica, we recommend submitting an `UpdateStack` operation containing only that change.\n\u003e \n\u003e If you add or delete a replica during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new replica, you might need to manually delete the replica. \n\nYou can create a new global table with as many replicas as needed. You can add or remove replicas after table creation, but you can only add or remove a single replica in each update. For Multi-Region Strong Consistency (MRSC), you can add or remove up to 3 replicas, or 2 replicas plus a witness Region."},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableSseSpecification","description":"Specifies the settings to enable server-side encryption. These settings will be applied to all replicas. If you plan to use customer-managed KMS keys, you must provide a key for each replica using the `ReplicaSpecification.ReplicaSSESpecification` property."},"streamArn":{"type":"string","description":"The ARN of the DynamoDB stream, such as `arn:aws:dynamodb:us-east-1:123456789012:table/testddbstack-myDynamoDBTable-012A1SL7SMP5Q/stream/2015-11-30T20:10:00.000` . The `StreamArn` returned is that of the replica in the region the stack is deployed to.\n\n\u003e You must specify the `StreamSpecification` property to use this attribute."},"streamSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableStreamSpecification","description":"Specifies the streams settings on your global table. You must provide a value for this property if your global table contains more than one replica. You can only change the streams settings if your global table has only one replica. For Multi-Region Strong Consistency (MRSC), you do not need to provide a value for this property and can change the settings at any time."},"tableId":{"type":"string","description":"Unique identifier for the table, such as `a123b456-01ab-23cd-123a-111222aaabbb` . The `TableId` returned is that of the replica in the region the stack is deployed to."},"tableName":{"type":"string","description":"A name for the global table. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID as the table name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .\n\n\u003e If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"timeToLiveSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableTimeToLiveSpecification","description":"Specifies the time to live (TTL) settings for the table. This setting will be applied to all replicas."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWarmThroughput","description":"Provides visibility into the number of read and write operations your table or secondary index can instantaneously support. The settings can be modified using the `UpdateTable` operation to meet the throughput requirements of an upcoming peak event."},"writeOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteOnDemandThroughputSettings","description":"Sets the write request settings for a global table or a global secondary index. You can only specify this setting if your resource uses the `PAY_PER_REQUEST` `BillingMode` ."},"writeProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteProvisionedThroughputSettings","description":"Specifies an auto scaling policy for write capacity. This policy will be applied to all replicas. This setting must be specified if `BillingMode` is set to `PROVISIONED` ."}},"type":"object","required":["arn","replicas","streamArn","tableId"],"inputProperties":{"attributeDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableAttributeDefinition"},"description":"A list of attributes that describe the key schema for the global table and indexes."},"billingMode":{"type":"string","description":"Specifies how you are charged for read and write throughput and how you manage capacity. Valid values are:\n\n- `PAY_PER_REQUEST`\n- `PROVISIONED`\n\nAll replicas in your global table will have the same billing mode. If you use `PROVISIONED` billing mode, you must provide an auto scaling configuration via the `WriteProvisionedThroughputSettings` property. The default value of this property is `PROVISIONED` ."},"globalSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalSecondaryIndex"},"description":"Global secondary indexes to be created on the global table. You can create up to 20 global secondary indexes. Each replica in your global table will have the same global secondary index settings. You can only create or delete one global secondary index in a single stack operation.\n\nSince the backfilling of an index could take a long time, CloudFormation does not wait for the index to become active. If a stack operation rolls back, CloudFormation might not delete an index that has been added. In that case, you will need to delete the index manually."},"globalTableSourceArn":{"type":"string"},"globalTableWitnesses":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWitness"},"description":"The list of witnesses of the MRSC global table. Only one witness Region can be configured per MRSC global table."},"keySchema":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKeySchema"},"description":"Specifies the attributes that make up the primary key for the table. The attributes in the `KeySchema` property must also be defined in the `AttributeDefinitions` property."},"localSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableLocalSecondaryIndex"},"description":"Local secondary indexes to be created on the table. You can create up to five local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes. Each replica in your global table will have the same local secondary index settings."},"multiRegionConsistency":{"$ref":"#/types/aws-native:dynamodb:GlobalTableMultiRegionConsistency","description":"Specifies the consistency mode for a new global table.\n\nYou can specify one of the following consistency modes:\n\n- `EVENTUAL` : Configures a new global table for multi-Region eventual consistency (MREC).\n- `STRONG` : Configures a new global table for multi-Region strong consistency (MRSC).\n\nIf you don't specify this field, the global table consistency mode defaults to `EVENTUAL` . For more information about global tables consistency modes, see [Consistency modes](https://docs.aws.amazon.com/V2globaltables_HowItWorks.html#V2globaltables_HowItWorks.consistency-modes) in DynamoDB developer guide."},"readOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings"},"readProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalReadProvisionedThroughputSettings"},"replicas":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaSpecification"},"description":"Specifies the list of replicas for your global table. The list must contain at least one element, the region where the stack defining the global table is deployed. For example, if you define your table in a stack deployed to us-east-1, you must have an entry in `Replicas` with the region us-east-1. You cannot remove the replica in the stack region.\n\n\u003e Adding a replica might take a few minutes for an empty table, or up to several hours for large tables. If you want to add or remove a replica, we recommend submitting an `UpdateStack` operation containing only that change.\n\u003e \n\u003e If you add or delete a replica during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new replica, you might need to manually delete the replica. \n\nYou can create a new global table with as many replicas as needed. You can add or remove replicas after table creation, but you can only add or remove a single replica in each update. For Multi-Region Strong Consistency (MRSC), you can add or remove up to 3 replicas, or 2 replicas plus a witness Region."},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableSseSpecification","description":"Specifies the settings to enable server-side encryption. These settings will be applied to all replicas. If you plan to use customer-managed KMS keys, you must provide a key for each replica using the `ReplicaSpecification.ReplicaSSESpecification` property."},"streamSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableStreamSpecification","description":"Specifies the streams settings on your global table. You must provide a value for this property if your global table contains more than one replica. You can only change the streams settings if your global table has only one replica. For Multi-Region Strong Consistency (MRSC), you do not need to provide a value for this property and can change the settings at any time."},"tableName":{"type":"string","description":"A name for the global table. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID as the table name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .\n\n\u003e If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"timeToLiveSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableTimeToLiveSpecification","description":"Specifies the time to live (TTL) settings for the table. This setting will be applied to all replicas."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWarmThroughput","description":"Provides visibility into the number of read and write operations your table or secondary index can instantaneously support. The settings can be modified using the `UpdateTable` operation to meet the throughput requirements of an upcoming peak event."},"writeOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteOnDemandThroughputSettings","description":"Sets the write request settings for a global table or a global secondary index. You can only specify this setting if your resource uses the `PAY_PER_REQUEST` `BillingMode` ."},"writeProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteProvisionedThroughputSettings","description":"Specifies an auto scaling policy for write capacity. This policy will be applied to all replicas. This setting must be specified if `BillingMode` is set to `PROVISIONED` ."}},"requiredInputs":["replicas"]},"aws-native:dynamodb:Table":{"description":"The ``AWS::DynamoDB::Table`` resource creates a DDB table. For more information, see [CreateTable](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_CreateTable.html) in the *API Reference*.\n You should be aware of the following behaviors when working with DDB tables:\n  +  CFNlong typically creates DDB tables in parallel. However, if your template includes multiple DDB tables with indexes, you must declare dependencies so that the tables are created sequentially. DDBlong limits the number of tables with secondary indexes that are in the creating state. If you create multiple tables with indexes at the same time, DDB returns an error and the stack operation fails. For an example, see [DynamoDB Table with a DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html#aws-resource-dynamodb-table--examples--DynamoDB_Table_with_a_DependsOn_Attribute).\n  \n   Our guidance is to use the latest schema documented for your CFNlong templates. This schema supports the provisioning of all table settings below. When using this schema in your CFNlong templates, please ensure that your Identity and Access Management (IAM) policies are updated with appropriate permissions to allow for the authorization of these setting changes.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDynamoDBTable = new AwsNative.DynamoDb.Table(\"myDynamoDBTable\", new()\n    {\n        AttributeDefinitions = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"Album\",\n                AttributeType = \"S\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"Artist\",\n                AttributeType = \"S\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"Sales\",\n                AttributeType = \"N\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"NumberOfSongs\",\n                AttributeType = \"N\",\n            },\n        },\n        KeySchema = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n            {\n                AttributeName = \"Album\",\n                KeyType = \"HASH\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n            {\n                AttributeName = \"Artist\",\n                KeyType = \"RANGE\",\n            },\n        },\n        ProvisionedThroughput = new AwsNative.DynamoDb.Inputs.TableProvisionedThroughputArgs\n        {\n            ReadCapacityUnits = 5,\n            WriteCapacityUnits = 5,\n        },\n        TableName = \"myTableName\",\n        GlobalSecondaryIndexes = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableGlobalSecondaryIndexArgs\n            {\n                IndexName = \"myGSI\",\n                KeySchema = new[]\n                {\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Sales\",\n                        KeyType = \"HASH\",\n                    },\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Artist\",\n                        KeyType = \"RANGE\",\n                    },\n                },\n                Projection = new AwsNative.DynamoDb.Inputs.TableProjectionArgs\n                {\n                    NonKeyAttributes = new[]\n                    {\n                        \"Album\",\n                        \"NumberOfSongs\",\n                    },\n                    ProjectionType = \"INCLUDE\",\n                },\n                ProvisionedThroughput = new AwsNative.DynamoDb.Inputs.TableProvisionedThroughputArgs\n                {\n                    ReadCapacityUnits = 5,\n                    WriteCapacityUnits = 5,\n                },\n            },\n            new AwsNative.DynamoDb.Inputs.TableGlobalSecondaryIndexArgs\n            {\n                IndexName = \"myGSI2\",\n                KeySchema = new[]\n                {\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"NumberOfSongs\",\n                        KeyType = \"HASH\",\n                    },\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Sales\",\n                        KeyType = \"RANGE\",\n                    },\n                },\n                Projection = new AwsNative.DynamoDb.Inputs.TableProjectionArgs\n                {\n                    NonKeyAttributes = new[]\n                    {\n                        \"Album\",\n                        \"Artist\",\n                    },\n                    ProjectionType = \"INCLUDE\",\n                },\n                ProvisionedThroughput = new AwsNative.DynamoDb.Inputs.TableProvisionedThroughputArgs\n                {\n                    ReadCapacityUnits = 5,\n                    WriteCapacityUnits = 5,\n                },\n            },\n        },\n        LocalSecondaryIndexes = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableLocalSecondaryIndexArgs\n            {\n                IndexName = \"myLSI\",\n                KeySchema = new[]\n                {\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Album\",\n                        KeyType = \"HASH\",\n                    },\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Sales\",\n                        KeyType = \"RANGE\",\n                    },\n                },\n                Projection = new AwsNative.DynamoDb.Inputs.TableProjectionArgs\n                {\n                    NonKeyAttributes = new[]\n                    {\n                        \"Artist\",\n                        \"NumberOfSongs\",\n                    },\n                    ProjectionType = \"INCLUDE\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/dynamodb\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := dynamodb.NewTable(ctx, \"myDynamoDBTable\", \u0026dynamodb.TableArgs{\n\t\t\tAttributeDefinitions: dynamodb.TableAttributeDefinitionArray{\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Album\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"S\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Artist\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"S\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"N\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"N\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tKeySchema: pulumi.Any{\n\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Album\"),\n\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Artist\"),\n\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tProvisionedThroughput: \u0026dynamodb.TableProvisionedThroughputArgs{\n\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t},\n\t\t\tTableName: pulumi.String(\"myTableName\"),\n\t\t\tGlobalSecondaryIndexes: dynamodb.TableGlobalSecondaryIndexArray{\n\t\t\t\t\u0026dynamodb.TableGlobalSecondaryIndexArgs{\n\t\t\t\t\tIndexName: pulumi.String(\"myGSI\"),\n\t\t\t\t\tKeySchema: dynamodb.TableKeySchemaArray{\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Artist\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tProjection: \u0026dynamodb.TableProjectionArgs{\n\t\t\t\t\t\tNonKeyAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Album\"),\n\t\t\t\t\t\t\tpulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tProjectionType: pulumi.String(\"INCLUDE\"),\n\t\t\t\t\t},\n\t\t\t\t\tProvisionedThroughput: \u0026dynamodb.TableProvisionedThroughputArgs{\n\t\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableGlobalSecondaryIndexArgs{\n\t\t\t\t\tIndexName: pulumi.String(\"myGSI2\"),\n\t\t\t\t\tKeySchema: dynamodb.TableKeySchemaArray{\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tProjection: \u0026dynamodb.TableProjectionArgs{\n\t\t\t\t\t\tNonKeyAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Album\"),\n\t\t\t\t\t\t\tpulumi.String(\"Artist\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tProjectionType: pulumi.String(\"INCLUDE\"),\n\t\t\t\t\t},\n\t\t\t\t\tProvisionedThroughput: \u0026dynamodb.TableProvisionedThroughputArgs{\n\t\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tLocalSecondaryIndexes: dynamodb.TableLocalSecondaryIndexArray{\n\t\t\t\t\u0026dynamodb.TableLocalSecondaryIndexArgs{\n\t\t\t\t\tIndexName: pulumi.String(\"myLSI\"),\n\t\t\t\t\tKeySchema: dynamodb.TableKeySchemaArray{\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Album\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tProjection: \u0026dynamodb.TableProjectionArgs{\n\t\t\t\t\t\tNonKeyAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Artist\"),\n\t\t\t\t\t\t\tpulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tProjectionType: pulumi.String(\"INCLUDE\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDynamoDBTable = new aws_native.dynamodb.Table(\"myDynamoDBTable\", {\n    attributeDefinitions: [\n        {\n            attributeName: \"Album\",\n            attributeType: \"S\",\n        },\n        {\n            attributeName: \"Artist\",\n            attributeType: \"S\",\n        },\n        {\n            attributeName: \"Sales\",\n            attributeType: \"N\",\n        },\n        {\n            attributeName: \"NumberOfSongs\",\n            attributeType: \"N\",\n        },\n    ],\n    keySchema: [\n        {\n            attributeName: \"Album\",\n            keyType: \"HASH\",\n        },\n        {\n            attributeName: \"Artist\",\n            keyType: \"RANGE\",\n        },\n    ],\n    provisionedThroughput: {\n        readCapacityUnits: 5,\n        writeCapacityUnits: 5,\n    },\n    tableName: \"myTableName\",\n    globalSecondaryIndexes: [\n        {\n            indexName: \"myGSI\",\n            keySchema: [\n                {\n                    attributeName: \"Sales\",\n                    keyType: \"HASH\",\n                },\n                {\n                    attributeName: \"Artist\",\n                    keyType: \"RANGE\",\n                },\n            ],\n            projection: {\n                nonKeyAttributes: [\n                    \"Album\",\n                    \"NumberOfSongs\",\n                ],\n                projectionType: \"INCLUDE\",\n            },\n            provisionedThroughput: {\n                readCapacityUnits: 5,\n                writeCapacityUnits: 5,\n            },\n        },\n        {\n            indexName: \"myGSI2\",\n            keySchema: [\n                {\n                    attributeName: \"NumberOfSongs\",\n                    keyType: \"HASH\",\n                },\n                {\n                    attributeName: \"Sales\",\n                    keyType: \"RANGE\",\n                },\n            ],\n            projection: {\n                nonKeyAttributes: [\n                    \"Album\",\n                    \"Artist\",\n                ],\n                projectionType: \"INCLUDE\",\n            },\n            provisionedThroughput: {\n                readCapacityUnits: 5,\n                writeCapacityUnits: 5,\n            },\n        },\n    ],\n    localSecondaryIndexes: [{\n        indexName: \"myLSI\",\n        keySchema: [\n            {\n                attributeName: \"Album\",\n                keyType: \"HASH\",\n            },\n            {\n                attributeName: \"Sales\",\n                keyType: \"RANGE\",\n            },\n        ],\n        projection: {\n            nonKeyAttributes: [\n                \"Artist\",\n                \"NumberOfSongs\",\n            ],\n            projectionType: \"INCLUDE\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dynamo_db_table = aws_native.dynamodb.Table(\"myDynamoDBTable\",\n    attribute_definitions=[\n        {\n            \"attribute_name\": \"Album\",\n            \"attribute_type\": \"S\",\n        },\n        {\n            \"attribute_name\": \"Artist\",\n            \"attribute_type\": \"S\",\n        },\n        {\n            \"attribute_name\": \"Sales\",\n            \"attribute_type\": \"N\",\n        },\n        {\n            \"attribute_name\": \"NumberOfSongs\",\n            \"attribute_type\": \"N\",\n        },\n    ],\n    key_schema=[\n        {\n            \"attributeName\": \"Album\",\n            \"keyType\": \"HASH\",\n        },\n        {\n            \"attributeName\": \"Artist\",\n            \"keyType\": \"RANGE\",\n        },\n    ],\n    provisioned_throughput={\n        \"read_capacity_units\": 5,\n        \"write_capacity_units\": 5,\n    },\n    table_name=\"myTableName\",\n    global_secondary_indexes=[\n        {\n            \"index_name\": \"myGSI\",\n            \"key_schema\": [\n                {\n                    \"attribute_name\": \"Sales\",\n                    \"key_type\": \"HASH\",\n                },\n                {\n                    \"attribute_name\": \"Artist\",\n                    \"key_type\": \"RANGE\",\n                },\n            ],\n            \"projection\": {\n                \"non_key_attributes\": [\n                    \"Album\",\n                    \"NumberOfSongs\",\n                ],\n                \"projection_type\": \"INCLUDE\",\n            },\n            \"provisioned_throughput\": {\n                \"read_capacity_units\": 5,\n                \"write_capacity_units\": 5,\n            },\n        },\n        {\n            \"index_name\": \"myGSI2\",\n            \"key_schema\": [\n                {\n                    \"attribute_name\": \"NumberOfSongs\",\n                    \"key_type\": \"HASH\",\n                },\n                {\n                    \"attribute_name\": \"Sales\",\n                    \"key_type\": \"RANGE\",\n                },\n            ],\n            \"projection\": {\n                \"non_key_attributes\": [\n                    \"Album\",\n                    \"Artist\",\n                ],\n                \"projection_type\": \"INCLUDE\",\n            },\n            \"provisioned_throughput\": {\n                \"read_capacity_units\": 5,\n                \"write_capacity_units\": 5,\n            },\n        },\n    ],\n    local_secondary_indexes=[{\n        \"index_name\": \"myLSI\",\n        \"key_schema\": [\n            {\n                \"attribute_name\": \"Album\",\n                \"key_type\": \"HASH\",\n            },\n            {\n                \"attribute_name\": \"Sales\",\n                \"key_type\": \"RANGE\",\n            },\n        ],\n        \"projection\": {\n            \"non_key_attributes\": [\n                \"Artist\",\n                \"NumberOfSongs\",\n            ],\n            \"projection_type\": \"INCLUDE\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDynamoDBTable = new AwsNative.DynamoDb.Table(\"myDynamoDBTable\", new()\n    {\n        AttributeDefinitions = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"Album\",\n                AttributeType = \"S\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"Artist\",\n                AttributeType = \"S\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"Sales\",\n                AttributeType = \"N\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableAttributeDefinitionArgs\n            {\n                AttributeName = \"NumberOfSongs\",\n                AttributeType = \"N\",\n            },\n        },\n        KeySchema = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n            {\n                AttributeName = \"Album\",\n                KeyType = \"HASH\",\n            },\n            new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n            {\n                AttributeName = \"Artist\",\n                KeyType = \"RANGE\",\n            },\n        },\n        ProvisionedThroughput = new AwsNative.DynamoDb.Inputs.TableProvisionedThroughputArgs\n        {\n            ReadCapacityUnits = 5,\n            WriteCapacityUnits = 5,\n        },\n        TableName = \"myTableName\",\n        GlobalSecondaryIndexes = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableGlobalSecondaryIndexArgs\n            {\n                IndexName = \"myGSI\",\n                KeySchema = new[]\n                {\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Sales\",\n                        KeyType = \"HASH\",\n                    },\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Artist\",\n                        KeyType = \"RANGE\",\n                    },\n                },\n                Projection = new AwsNative.DynamoDb.Inputs.TableProjectionArgs\n                {\n                    NonKeyAttributes = new[]\n                    {\n                        \"Album\",\n                        \"NumberOfSongs\",\n                    },\n                    ProjectionType = \"INCLUDE\",\n                },\n                ProvisionedThroughput = new AwsNative.DynamoDb.Inputs.TableProvisionedThroughputArgs\n                {\n                    ReadCapacityUnits = 5,\n                    WriteCapacityUnits = 5,\n                },\n            },\n            new AwsNative.DynamoDb.Inputs.TableGlobalSecondaryIndexArgs\n            {\n                IndexName = \"myGSI2\",\n                KeySchema = new[]\n                {\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"NumberOfSongs\",\n                        KeyType = \"HASH\",\n                    },\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Sales\",\n                        KeyType = \"RANGE\",\n                    },\n                },\n                Projection = new AwsNative.DynamoDb.Inputs.TableProjectionArgs\n                {\n                    NonKeyAttributes = new[]\n                    {\n                        \"Album\",\n                        \"Artist\",\n                    },\n                    ProjectionType = \"INCLUDE\",\n                },\n                ProvisionedThroughput = new AwsNative.DynamoDb.Inputs.TableProvisionedThroughputArgs\n                {\n                    ReadCapacityUnits = 5,\n                    WriteCapacityUnits = 5,\n                },\n            },\n        },\n        LocalSecondaryIndexes = new[]\n        {\n            new AwsNative.DynamoDb.Inputs.TableLocalSecondaryIndexArgs\n            {\n                IndexName = \"myLSI\",\n                KeySchema = new[]\n                {\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Album\",\n                        KeyType = \"HASH\",\n                    },\n                    new AwsNative.DynamoDb.Inputs.TableKeySchemaArgs\n                    {\n                        AttributeName = \"Sales\",\n                        KeyType = \"RANGE\",\n                    },\n                },\n                Projection = new AwsNative.DynamoDb.Inputs.TableProjectionArgs\n                {\n                    NonKeyAttributes = new[]\n                    {\n                        \"Artist\",\n                        \"NumberOfSongs\",\n                    },\n                    ProjectionType = \"INCLUDE\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/dynamodb\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := dynamodb.NewTable(ctx, \"myDynamoDBTable\", \u0026dynamodb.TableArgs{\n\t\t\tAttributeDefinitions: dynamodb.TableAttributeDefinitionArray{\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Album\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"S\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Artist\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"S\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"N\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableAttributeDefinitionArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\tAttributeType: pulumi.String(\"N\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tKeySchema: pulumi.Any{\n\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Album\"),\n\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\tAttributeName: pulumi.String(\"Artist\"),\n\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tProvisionedThroughput: \u0026dynamodb.TableProvisionedThroughputArgs{\n\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t},\n\t\t\tTableName: pulumi.String(\"myTableName\"),\n\t\t\tGlobalSecondaryIndexes: dynamodb.TableGlobalSecondaryIndexArray{\n\t\t\t\t\u0026dynamodb.TableGlobalSecondaryIndexArgs{\n\t\t\t\t\tIndexName: pulumi.String(\"myGSI\"),\n\t\t\t\t\tKeySchema: dynamodb.TableKeySchemaArray{\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Artist\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tProjection: \u0026dynamodb.TableProjectionArgs{\n\t\t\t\t\t\tNonKeyAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Album\"),\n\t\t\t\t\t\t\tpulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tProjectionType: pulumi.String(\"INCLUDE\"),\n\t\t\t\t\t},\n\t\t\t\t\tProvisionedThroughput: \u0026dynamodb.TableProvisionedThroughputArgs{\n\t\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026dynamodb.TableGlobalSecondaryIndexArgs{\n\t\t\t\t\tIndexName: pulumi.String(\"myGSI2\"),\n\t\t\t\t\tKeySchema: dynamodb.TableKeySchemaArray{\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tProjection: \u0026dynamodb.TableProjectionArgs{\n\t\t\t\t\t\tNonKeyAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Album\"),\n\t\t\t\t\t\t\tpulumi.String(\"Artist\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tProjectionType: pulumi.String(\"INCLUDE\"),\n\t\t\t\t\t},\n\t\t\t\t\tProvisionedThroughput: \u0026dynamodb.TableProvisionedThroughputArgs{\n\t\t\t\t\t\tReadCapacityUnits:  pulumi.Int(5),\n\t\t\t\t\t\tWriteCapacityUnits: pulumi.Int(5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tLocalSecondaryIndexes: dynamodb.TableLocalSecondaryIndexArray{\n\t\t\t\t\u0026dynamodb.TableLocalSecondaryIndexArgs{\n\t\t\t\t\tIndexName: pulumi.String(\"myLSI\"),\n\t\t\t\t\tKeySchema: dynamodb.TableKeySchemaArray{\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Album\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"HASH\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026dynamodb.TableKeySchemaArgs{\n\t\t\t\t\t\t\tAttributeName: pulumi.String(\"Sales\"),\n\t\t\t\t\t\t\tKeyType:       pulumi.String(\"RANGE\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tProjection: \u0026dynamodb.TableProjectionArgs{\n\t\t\t\t\t\tNonKeyAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Artist\"),\n\t\t\t\t\t\t\tpulumi.String(\"NumberOfSongs\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tProjectionType: pulumi.String(\"INCLUDE\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDynamoDBTable = new aws_native.dynamodb.Table(\"myDynamoDBTable\", {\n    attributeDefinitions: [\n        {\n            attributeName: \"Album\",\n            attributeType: \"S\",\n        },\n        {\n            attributeName: \"Artist\",\n            attributeType: \"S\",\n        },\n        {\n            attributeName: \"Sales\",\n            attributeType: \"N\",\n        },\n        {\n            attributeName: \"NumberOfSongs\",\n            attributeType: \"N\",\n        },\n    ],\n    keySchema: [\n        {\n            attributeName: \"Album\",\n            keyType: \"HASH\",\n        },\n        {\n            attributeName: \"Artist\",\n            keyType: \"RANGE\",\n        },\n    ],\n    provisionedThroughput: {\n        readCapacityUnits: 5,\n        writeCapacityUnits: 5,\n    },\n    tableName: \"myTableName\",\n    globalSecondaryIndexes: [\n        {\n            indexName: \"myGSI\",\n            keySchema: [\n                {\n                    attributeName: \"Sales\",\n                    keyType: \"HASH\",\n                },\n                {\n                    attributeName: \"Artist\",\n                    keyType: \"RANGE\",\n                },\n            ],\n            projection: {\n                nonKeyAttributes: [\n                    \"Album\",\n                    \"NumberOfSongs\",\n                ],\n                projectionType: \"INCLUDE\",\n            },\n            provisionedThroughput: {\n                readCapacityUnits: 5,\n                writeCapacityUnits: 5,\n            },\n        },\n        {\n            indexName: \"myGSI2\",\n            keySchema: [\n                {\n                    attributeName: \"NumberOfSongs\",\n                    keyType: \"HASH\",\n                },\n                {\n                    attributeName: \"Sales\",\n                    keyType: \"RANGE\",\n                },\n            ],\n            projection: {\n                nonKeyAttributes: [\n                    \"Album\",\n                    \"Artist\",\n                ],\n                projectionType: \"INCLUDE\",\n            },\n            provisionedThroughput: {\n                readCapacityUnits: 5,\n                writeCapacityUnits: 5,\n            },\n        },\n    ],\n    localSecondaryIndexes: [{\n        indexName: \"myLSI\",\n        keySchema: [\n            {\n                attributeName: \"Album\",\n                keyType: \"HASH\",\n            },\n            {\n                attributeName: \"Sales\",\n                keyType: \"RANGE\",\n            },\n        ],\n        projection: {\n            nonKeyAttributes: [\n                \"Artist\",\n                \"NumberOfSongs\",\n            ],\n            projectionType: \"INCLUDE\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dynamo_db_table = aws_native.dynamodb.Table(\"myDynamoDBTable\",\n    attribute_definitions=[\n        {\n            \"attribute_name\": \"Album\",\n            \"attribute_type\": \"S\",\n        },\n        {\n            \"attribute_name\": \"Artist\",\n            \"attribute_type\": \"S\",\n        },\n        {\n            \"attribute_name\": \"Sales\",\n            \"attribute_type\": \"N\",\n        },\n        {\n            \"attribute_name\": \"NumberOfSongs\",\n            \"attribute_type\": \"N\",\n        },\n    ],\n    key_schema=[\n        {\n            \"attributeName\": \"Album\",\n            \"keyType\": \"HASH\",\n        },\n        {\n            \"attributeName\": \"Artist\",\n            \"keyType\": \"RANGE\",\n        },\n    ],\n    provisioned_throughput={\n        \"read_capacity_units\": 5,\n        \"write_capacity_units\": 5,\n    },\n    table_name=\"myTableName\",\n    global_secondary_indexes=[\n        {\n            \"index_name\": \"myGSI\",\n            \"key_schema\": [\n                {\n                    \"attribute_name\": \"Sales\",\n                    \"key_type\": \"HASH\",\n                },\n                {\n                    \"attribute_name\": \"Artist\",\n                    \"key_type\": \"RANGE\",\n                },\n            ],\n            \"projection\": {\n                \"non_key_attributes\": [\n                    \"Album\",\n                    \"NumberOfSongs\",\n                ],\n                \"projection_type\": \"INCLUDE\",\n            },\n            \"provisioned_throughput\": {\n                \"read_capacity_units\": 5,\n                \"write_capacity_units\": 5,\n            },\n        },\n        {\n            \"index_name\": \"myGSI2\",\n            \"key_schema\": [\n                {\n                    \"attribute_name\": \"NumberOfSongs\",\n                    \"key_type\": \"HASH\",\n                },\n                {\n                    \"attribute_name\": \"Sales\",\n                    \"key_type\": \"RANGE\",\n                },\n            ],\n            \"projection\": {\n                \"non_key_attributes\": [\n                    \"Album\",\n                    \"Artist\",\n                ],\n                \"projection_type\": \"INCLUDE\",\n            },\n            \"provisioned_throughput\": {\n                \"read_capacity_units\": 5,\n                \"write_capacity_units\": 5,\n            },\n        },\n    ],\n    local_secondary_indexes=[{\n        \"index_name\": \"myLSI\",\n        \"key_schema\": [\n            {\n                \"attribute_name\": \"Album\",\n                \"key_type\": \"HASH\",\n            },\n            {\n                \"attribute_name\": \"Sales\",\n                \"key_type\": \"RANGE\",\n            },\n        ],\n        \"projection\": {\n            \"non_key_attributes\": [\n                \"Artist\",\n                \"NumberOfSongs\",\n            ],\n            \"projection_type\": \"INCLUDE\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the DynamoDB table, such as `arn:aws:dynamodb:us-east-2:123456789012:table/myDynamoDBTable` ."},"attributeDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableAttributeDefinition"},"description":"A list of attributes that describe the key schema for the table and indexes.\n This property is required to create a DDB table.\n Update requires: [Some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt). Replacement if you edit an existing AttributeDefinition."},"billingMode":{"type":"string","description":"Specify how you are charged for read and write throughput and how you manage capacity.\n Valid values include:\n  +  ``PAY_PER_REQUEST`` - We recommend using ``PAY_PER_REQUEST`` for most DynamoDB workloads. ``PAY_PER_REQUEST`` sets the billing mode to [On-demand capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/on-demand-capacity-mode.html). \n  +  ``PROVISIONED`` - We recommend using ``PROVISIONED`` for steady workloads with predictable growth where capacity requirements can be reliably forecasted. ``PROVISIONED`` sets the billing mode to [Provisioned capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/provisioned-capacity-mode.html).\n  \n If not specified, the default is ``PROVISIONED``."},"contributorInsightsSpecification":{"$ref":"#/types/aws-native:dynamodb:TableContributorInsightsSpecification","description":"The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor."},"deletionProtectionEnabled":{"type":"boolean","description":"Determines if a table is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see [Using deletion protection](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection) in the *Developer Guide*."},"globalSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableGlobalSecondaryIndex"},"description":"Global secondary indexes to be created on the table. You can create up to 20 global secondary indexes.\n  If you update a table to include a new global secondary index, CFNlong initiates the index creation and then proceeds with the stack update. CFNlong doesn't wait for the index to complete creation because the backfilling phase can take a long time, depending on the size of the table. You can't use the index or update the table until the index's status is ``ACTIVE``. You can track its status by using the DynamoDB [DescribeTable](https://docs.aws.amazon.com/cli/latest/reference/dynamodb/describe-table.html) command.\n If you add or delete an index during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new index, you must manually delete the index. \n Updates are not supported. The following are exceptions:\n  +  If you update either the contributor insights specification or the provisioned throughput values of global secondary indexes, you can update the table without interruption.\n  +  You can delete or add one global secondary index without interruption. If you do both in the same update (for example, by changing the index's logical ID), the update fails."},"importSourceSpecification":{"$ref":"#/types/aws-native:dynamodb:TableImportSourceSpecification","description":"Specifies the properties of data being imported from the S3 bucket source to the\" table.\n  If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission.","replaceOnChanges":true},"keySchema":{"oneOf":[{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableKeySchema"}},{"$ref":"pulumi.json#/Any"}],"description":"Specifies the attributes that make up the primary key for the table. The attributes in the ``KeySchema`` property must also be defined in the ``AttributeDefinitions`` property."},"kinesisStreamSpecification":{"$ref":"#/types/aws-native:dynamodb:TableKinesisStreamSpecification","description":"The Kinesis Data Streams configuration for the specified table."},"localSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableLocalSecondaryIndex"},"description":"Local secondary indexes to be created on the table. You can create up to 5 local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes."},"onDemandThroughput":{"$ref":"#/types/aws-native:dynamodb:TableOnDemandThroughput","description":"Sets the maximum number of read and write units for the specified on-demand table. If you use this property, you must specify ``MaxReadRequestUnits``, ``MaxWriteRequestUnits``, or both."},"pointInTimeRecoverySpecification":{"$ref":"#/types/aws-native:dynamodb:TablePointInTimeRecoverySpecification","description":"The settings used to enable point in time recovery."},"provisionedThroughput":{"$ref":"#/types/aws-native:dynamodb:TableProvisionedThroughput","description":"Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits``. For more information about the contents of a provisioned throughput structure, see [Amazon DynamoDB Table ProvisionedThroughput](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html). \n If you set ``BillingMode`` as ``PROVISIONED``, you must specify this property. If you set ``BillingMode`` as ``PAY_PER_REQUEST``, you cannot specify this property."},"resourcePolicy":{"$ref":"#/types/aws-native:dynamodb:TableResourcePolicy","description":"An AWS resource-based policy document in JSON format that will be attached to the table.\n When you attach a resource-based policy while creating a table, the policy application is *strongly consistent*.\n The maximum size supported for a resource-based policy document is 20 KB. DynamoDB counts whitespaces when calculating the size of a policy against this limit. For a full list of all considerations that apply for resource-based policies, see [Resource-based policy considerations](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html).\n  You need to specify the ``CreateTable`` and ``PutResourcePolicy`` IAM actions for authorizing a user to create a table with a resource-based policy."},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:TableSseSpecification","description":"Specifies the settings to enable server-side encryption."},"streamArn":{"type":"string","description":"The ARN of the DynamoDB stream, such as `arn:aws:dynamodb:us-east-1:123456789012:table/testddbstack-myDynamoDBTable-012A1SL7SMP5Q/stream/2015-11-30T20:10:00.000` .\n\n\u003e You must specify the `StreamSpecification` property to use this attribute."},"streamSpecification":{"$ref":"#/types/aws-native:dynamodb:TableStreamSpecification","description":"The settings for the DDB table stream, which captures changes to items stored in the table. Including this property in your CFNlong template automatically enables streaming."},"tableClass":{"type":"string","description":"The table class of the new table. Valid values are ``STANDARD`` and ``STANDARD_INFREQUENT_ACCESS``."},"tableName":{"type":"string","description":"A name for the table. If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the table name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."},"timeToLiveSpecification":{"$ref":"#/types/aws-native:dynamodb:TableTimeToLiveSpecification","description":"Specifies the Time to Live (TTL) settings for the table.\n  For detailed information about the limits in DynamoDB, see [Limits in Amazon DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html) in the Amazon DynamoDB Developer Guide."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:TableWarmThroughput","description":"Represents the warm throughput (in read units per second and write units per second) for creating a table."}},"type":"object","required":["arn","keySchema","streamArn"],"inputProperties":{"attributeDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableAttributeDefinition"},"description":"A list of attributes that describe the key schema for the table and indexes.\n This property is required to create a DDB table.\n Update requires: [Some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt). Replacement if you edit an existing AttributeDefinition."},"billingMode":{"type":"string","description":"Specify how you are charged for read and write throughput and how you manage capacity.\n Valid values include:\n  +  ``PAY_PER_REQUEST`` - We recommend using ``PAY_PER_REQUEST`` for most DynamoDB workloads. ``PAY_PER_REQUEST`` sets the billing mode to [On-demand capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/on-demand-capacity-mode.html). \n  +  ``PROVISIONED`` - We recommend using ``PROVISIONED`` for steady workloads with predictable growth where capacity requirements can be reliably forecasted. ``PROVISIONED`` sets the billing mode to [Provisioned capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/provisioned-capacity-mode.html).\n  \n If not specified, the default is ``PROVISIONED``."},"contributorInsightsSpecification":{"$ref":"#/types/aws-native:dynamodb:TableContributorInsightsSpecification","description":"The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor."},"deletionProtectionEnabled":{"type":"boolean","description":"Determines if a table is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see [Using deletion protection](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection) in the *Developer Guide*."},"globalSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableGlobalSecondaryIndex"},"description":"Global secondary indexes to be created on the table. You can create up to 20 global secondary indexes.\n  If you update a table to include a new global secondary index, CFNlong initiates the index creation and then proceeds with the stack update. CFNlong doesn't wait for the index to complete creation because the backfilling phase can take a long time, depending on the size of the table. You can't use the index or update the table until the index's status is ``ACTIVE``. You can track its status by using the DynamoDB [DescribeTable](https://docs.aws.amazon.com/cli/latest/reference/dynamodb/describe-table.html) command.\n If you add or delete an index during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new index, you must manually delete the index. \n Updates are not supported. The following are exceptions:\n  +  If you update either the contributor insights specification or the provisioned throughput values of global secondary indexes, you can update the table without interruption.\n  +  You can delete or add one global secondary index without interruption. If you do both in the same update (for example, by changing the index's logical ID), the update fails."},"importSourceSpecification":{"$ref":"#/types/aws-native:dynamodb:TableImportSourceSpecification","description":"Specifies the properties of data being imported from the S3 bucket source to the\" table.\n  If you specify the ``ImportSourceSpecification`` property, and also specify either the ``StreamSpecification``, the ``TableClass`` property, the ``DeletionProtectionEnabled`` property, or the ``WarmThroughput`` property, the IAM entity creating/updating stack must have ``UpdateTable`` permission."},"keySchema":{"oneOf":[{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableKeySchema"}},{"$ref":"pulumi.json#/Any"}],"description":"Specifies the attributes that make up the primary key for the table. The attributes in the ``KeySchema`` property must also be defined in the ``AttributeDefinitions`` property."},"kinesisStreamSpecification":{"$ref":"#/types/aws-native:dynamodb:TableKinesisStreamSpecification","description":"The Kinesis Data Streams configuration for the specified table."},"localSecondaryIndexes":{"type":"array","items":{"$ref":"#/types/aws-native:dynamodb:TableLocalSecondaryIndex"},"description":"Local secondary indexes to be created on the table. You can create up to 5 local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes."},"onDemandThroughput":{"$ref":"#/types/aws-native:dynamodb:TableOnDemandThroughput","description":"Sets the maximum number of read and write units for the specified on-demand table. If you use this property, you must specify ``MaxReadRequestUnits``, ``MaxWriteRequestUnits``, or both."},"pointInTimeRecoverySpecification":{"$ref":"#/types/aws-native:dynamodb:TablePointInTimeRecoverySpecification","description":"The settings used to enable point in time recovery."},"provisionedThroughput":{"$ref":"#/types/aws-native:dynamodb:TableProvisionedThroughput","description":"Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits``. For more information about the contents of a provisioned throughput structure, see [Amazon DynamoDB Table ProvisionedThroughput](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html). \n If you set ``BillingMode`` as ``PROVISIONED``, you must specify this property. If you set ``BillingMode`` as ``PAY_PER_REQUEST``, you cannot specify this property."},"resourcePolicy":{"$ref":"#/types/aws-native:dynamodb:TableResourcePolicy","description":"An AWS resource-based policy document in JSON format that will be attached to the table.\n When you attach a resource-based policy while creating a table, the policy application is *strongly consistent*.\n The maximum size supported for a resource-based policy document is 20 KB. DynamoDB counts whitespaces when calculating the size of a policy against this limit. For a full list of all considerations that apply for resource-based policies, see [Resource-based policy considerations](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html).\n  You need to specify the ``CreateTable`` and ``PutResourcePolicy`` IAM actions for authorizing a user to create a table with a resource-based policy."},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:TableSseSpecification","description":"Specifies the settings to enable server-side encryption."},"streamSpecification":{"$ref":"#/types/aws-native:dynamodb:TableStreamSpecification","description":"The settings for the DDB table stream, which captures changes to items stored in the table. Including this property in your CFNlong template automatically enables streaming."},"tableClass":{"type":"string","description":"The table class of the new table. Valid values are ``STANDARD`` and ``STANDARD_INFREQUENT_ACCESS``."},"tableName":{"type":"string","description":"A name for the table. If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the table name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."},"timeToLiveSpecification":{"$ref":"#/types/aws-native:dynamodb:TableTimeToLiveSpecification","description":"Specifies the Time to Live (TTL) settings for the table.\n  For detailed information about the limits in DynamoDB, see [Limits in Amazon DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html) in the Amazon DynamoDB Developer Guide."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:TableWarmThroughput","description":"Represents the warm throughput (in read units per second and write units per second) for creating a table."}},"requiredInputs":["keySchema"]},"aws-native:ec2:CapacityManagerDataExport":{"description":"Resource Type definition for AWS::EC2::CapacityManagerDataExport","properties":{"capacityManagerDataExportId":{"type":"string","description":"The unique identifier of the capacity manager data export."},"outputFormat":{"$ref":"#/types/aws-native:ec2:CapacityManagerDataExportOutputFormat","description":"The format of the exported capacity manager data. Choose 'csv' for comma-separated values or 'parquet' for optimized columnar storage format.","replaceOnChanges":true},"s3BucketName":{"type":"string","description":"The name of the Amazon S3 bucket where the capacity manager data export will be stored. The bucket must exist and be accessible by EC2 Capacity Manager service.","replaceOnChanges":true},"s3BucketPrefix":{"type":"string","description":"The prefix for the S3 bucket location where exported files will be placed. If not specified, files will be placed in the root of the bucket.","replaceOnChanges":true},"schedule":{"$ref":"#/types/aws-native:ec2:CapacityManagerDataExportSchedule","description":"The schedule for the capacity manager data export. Currently supports hourly exports that provide periodic snapshots of capacity manager data.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to the capacity manager data export."}},"type":"object","required":["capacityManagerDataExportId","outputFormat","s3BucketName","schedule"],"inputProperties":{"outputFormat":{"$ref":"#/types/aws-native:ec2:CapacityManagerDataExportOutputFormat","description":"The format of the exported capacity manager data. Choose 'csv' for comma-separated values or 'parquet' for optimized columnar storage format."},"s3BucketName":{"type":"string","description":"The name of the Amazon S3 bucket where the capacity manager data export will be stored. The bucket must exist and be accessible by EC2 Capacity Manager service."},"s3BucketPrefix":{"type":"string","description":"The prefix for the S3 bucket location where exported files will be placed. If not specified, files will be placed in the root of the bucket."},"schedule":{"$ref":"#/types/aws-native:ec2:CapacityManagerDataExportSchedule","description":"The schedule for the capacity manager data export. Currently supports hourly exports that provide periodic snapshots of capacity manager data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to the capacity manager data export."}},"requiredInputs":["outputFormat","s3BucketName","schedule"]},"aws-native:ec2:CapacityReservation":{"description":"Resource Type definition for AWS::EC2::CapacityReservation","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create the Capacity Reservation.","replaceOnChanges":true},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which the capacity is reserved.","replaceOnChanges":true},"availableInstanceCount":{"type":"integer","description":"Returns the remaining capacity, which indicates the number of instances that can be launched in the Capacity Reservation. For example: `9` ."},"awsId":{"type":"string","description":"The ID of the Capacity Reservation."},"capacityAllocationSet":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationCapacityAllocation"}},"capacityReservationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Capacity Reservation."},"capacityReservationFleetId":{"type":"string","description":"The ID of the Capacity Reservation Fleet to which the Capacity Reservation belongs. Only valid for Capacity Reservations that were created by a Capacity Reservation Fleet."},"commitmentInfo":{"$ref":"#/types/aws-native:ec2:CommitmentInfoProperties"},"createDate":{"type":"string","description":"The date and time the Capacity Reservation was created."},"deliveryPreference":{"type":"string","description":"The delivery method for a future-dated Capacity Reservation. `incremental` indicates that the requested capacity is delivered in addition to any running instances and reserved capacity that you have in your account at the requested date and time."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance.","replaceOnChanges":true},"endDate":{"type":"string","description":"The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to `expired` when it reaches its end date and time.\n\nYou must provide an `EndDate` value if `EndDateType` is `limited` . Omit `EndDate` if `EndDateType` is `unlimited` .\n\nIf the `EndDateType` is `limited` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.\n\nIf you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration."},"endDateType":{"type":"string","description":"Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types:\n\n- `unlimited` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an `EndDate` if the `EndDateType` is `unlimited` .\n- `limited` - The Capacity Reservation expires automatically at a specified date and time. You must provide an `EndDate` value if the `EndDateType` value is `limited` ."},"ephemeralStorage":{"type":"boolean","description":"*Deprecated.*","replaceOnChanges":true},"instanceCount":{"type":"integer","description":"The number of instances for which to reserve capacity.\n\n\u003e You can request future-dated Capacity Reservations for an instance count with a minimum of 32 vCPUs. For example, if you request a future-dated Capacity Reservation for `m5.xlarge` instances, you must request at least 8 instances ( *8 * m5.xlarge = 32 vCPUs* ). \n\nValid range: 1 - 1000"},"instanceMatchCriteria":{"type":"string","description":"Indicates the type of instance launches that the Capacity Reservation accepts. The options include:\n\n- `open` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters.\n- `targeted` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity.\n\n\u003e If you are requesting a future-dated Capacity Reservation, you must specify `targeted` . \n\nDefault: `open`"},"instancePlatform":{"type":"string","description":"The type of operating system for which to reserve capacity.","replaceOnChanges":true},"instanceType":{"type":"string","description":"The instance type for which to reserve capacity.\n\n\u003e You can request future-dated Capacity Reservations for instance types in the C, M, R, I, T, and G instance families only. \n\nFor more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide* .","replaceOnChanges":true},"outPostArn":{"type":"string","description":"\u003e Not supported for future-dated Capacity Reservations. \n\nThe Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation.","replaceOnChanges":true},"ownerId":{"type":"string","description":"The ID of the AWS account that owns the Capacity Reservation."},"placementGroupArn":{"type":"string","description":"\u003e Not supported for future-dated Capacity Reservations. \n\nThe Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see [Capacity Reservations for cluster placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html) in the *Amazon EC2 User Guide* .","replaceOnChanges":true},"reservationType":{"type":"string","description":"The type of Capacity Reservation."},"startDate":{"type":"string","description":"The date and time the Capacity Reservation was started."},"state":{"type":"string","description":"The current state of the Capacity Reservation. A Capacity Reservation can be in one of the following states:\n\n- `active` - The capacity is available for use.\n- `expired` - The Capacity Reservation expired automatically at the date and time specified in your reservation request. The reserved capacity is no longer available for your use.\n- `cancelled` - The Capacity Reservation was canceled. The reserved capacity is no longer available for your use.\n- `pending` - The Capacity Reservation request was successful but the capacity provisioning is still pending.\n- `failed` - The Capacity Reservation request has failed. A request can fail due to request parameters that are not valid, capacity constraints, or instance limit constraints. You can view a failed request for 60 minutes.\n- `scheduled` - ( *Future-dated Capacity Reservations* ) The future-dated Capacity Reservation request was approved and the Capacity Reservation is scheduled for delivery on the requested start date.\n- `payment-pending` - ( *Capacity Blocks* ) The upfront payment has not been processed yet.\n- `payment-failed` - ( *Capacity Blocks* ) The upfront payment was not processed in the 12-hour time frame. Your Capacity Block was released.\n- `assessing` - ( *Future-dated Capacity Reservations* ) Amazon EC2 is assessing your request for a future-dated Capacity Reservation.\n- `delayed` - ( *Future-dated Capacity Reservations* ) Amazon EC2 encountered a delay in provisioning the requested future-dated Capacity Reservation. Amazon EC2 is unable to deliver the requested capacity by the requested start date and time.\n- `unsupported` - ( *Future-dated Capacity Reservations* ) Amazon EC2 can't support the future-dated Capacity Reservation request due to capacity constraints. You can view unsupported requests for 30 days. The Capacity Reservation will not be delivered."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationTagSpecification"},"description":"The tags to apply to the Capacity Reservation during launch.","replaceOnChanges":true},"tenancy":{"type":"string","description":"Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:\n\n- `default` - The Capacity Reservation is created on hardware that is shared with other AWS accounts .\n- `dedicated` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account .","replaceOnChanges":true},"totalInstanceCount":{"type":"integer","description":"Returns the total number of instances for which the Capacity Reservation reserves capacity. For example: `15` ."},"unusedReservationBillingOwnerId":{"type":"string","description":"The ID of the AWS account to which to assign billing of the unused capacity of the Capacity Reservation. A request will be sent to the specified account. That account must accept the request for the billing to be assigned to their account. For more information, see [Billing assignment for shared Amazon EC2 Capacity Reservations](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/assign-billing.html) .\n\nYou can assign billing only for shared Capacity Reservations. To share a Capacity Reservation, you must add it to a resource share. For more information, see [AWS::RAM::ResourceShare](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-resourceshare.html) ."}},"type":"object","required":["availableInstanceCount","awsId","capacityAllocationSet","capacityReservationArn","capacityReservationFleetId","commitmentInfo","createDate","deliveryPreference","instanceCount","instancePlatform","instanceType","ownerId","reservationType","startDate","state","totalInstanceCount"],"inputProperties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create the Capacity Reservation."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which the capacity is reserved."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the Capacity Reservation supports EBS-optimized instances. This optimization provides dedicated throughput to Amazon EBS and an optimized configuration stack to provide optimal I/O performance. This optimization isn't available with all instance types. Additional usage charges apply when using an EBS- optimized instance."},"endDate":{"type":"string","description":"The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to `expired` when it reaches its end date and time.\n\nYou must provide an `EndDate` value if `EndDateType` is `limited` . Omit `EndDate` if `EndDateType` is `unlimited` .\n\nIf the `EndDateType` is `limited` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.\n\nIf you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration."},"endDateType":{"type":"string","description":"Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types:\n\n- `unlimited` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an `EndDate` if the `EndDateType` is `unlimited` .\n- `limited` - The Capacity Reservation expires automatically at a specified date and time. You must provide an `EndDate` value if the `EndDateType` value is `limited` ."},"ephemeralStorage":{"type":"boolean","description":"*Deprecated.*"},"instanceCount":{"type":"integer","description":"The number of instances for which to reserve capacity.\n\n\u003e You can request future-dated Capacity Reservations for an instance count with a minimum of 32 vCPUs. For example, if you request a future-dated Capacity Reservation for `m5.xlarge` instances, you must request at least 8 instances ( *8 * m5.xlarge = 32 vCPUs* ). \n\nValid range: 1 - 1000"},"instanceMatchCriteria":{"type":"string","description":"Indicates the type of instance launches that the Capacity Reservation accepts. The options include:\n\n- `open` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters.\n- `targeted` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity.\n\n\u003e If you are requesting a future-dated Capacity Reservation, you must specify `targeted` . \n\nDefault: `open`"},"instancePlatform":{"type":"string","description":"The type of operating system for which to reserve capacity."},"instanceType":{"type":"string","description":"The instance type for which to reserve capacity.\n\n\u003e You can request future-dated Capacity Reservations for instance types in the C, M, R, I, T, and G instance families only. \n\nFor more information, see [Instance types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html) in the *Amazon EC2 User Guide* ."},"outPostArn":{"type":"string","description":"\u003e Not supported for future-dated Capacity Reservations. \n\nThe Amazon Resource Name (ARN) of the Outpost on which to create the Capacity Reservation."},"placementGroupArn":{"type":"string","description":"\u003e Not supported for future-dated Capacity Reservations. \n\nThe Amazon Resource Name (ARN) of the cluster placement group in which to create the Capacity Reservation. For more information, see [Capacity Reservations for cluster placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-cpg.html) in the *Amazon EC2 User Guide* ."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationTagSpecification"},"description":"The tags to apply to the Capacity Reservation during launch."},"tenancy":{"type":"string","description":"Indicates the tenancy of the Capacity Reservation. A Capacity Reservation can have one of the following tenancy settings:\n\n- `default` - The Capacity Reservation is created on hardware that is shared with other AWS accounts .\n- `dedicated` - The Capacity Reservation is created on single-tenant hardware that is dedicated to a single AWS account ."},"unusedReservationBillingOwnerId":{"type":"string","description":"The ID of the AWS account to which to assign billing of the unused capacity of the Capacity Reservation. A request will be sent to the specified account. That account must accept the request for the billing to be assigned to their account. For more information, see [Billing assignment for shared Amazon EC2 Capacity Reservations](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/assign-billing.html) .\n\nYou can assign billing only for shared Capacity Reservations. To share a Capacity Reservation, you must add it to a resource share. For more information, see [AWS::RAM::ResourceShare](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ram-resourceshare.html) ."}},"requiredInputs":["instanceCount","instancePlatform","instanceType"]},"aws-native:ec2:CapacityReservationFleet":{"description":"Resource Type definition for AWS::EC2::CapacityReservationFleet\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var ec2CapacityReservationFleetCanary = new AwsNative.Ec2.CapacityReservationFleet(\"ec2CapacityReservationFleetCanary\", new()\n    {\n        AllocationStrategy = \"prioritized\",\n        InstanceTypeSpecifications = new[]\n        {\n            new AwsNative.Ec2.Inputs.CapacityReservationFleetInstanceTypeSpecificationArgs\n            {\n                InstanceType = \"c4.large\",\n                InstancePlatform = \"Linux/UNIX\",\n                AvailabilityZone = \"us-east-1a\",\n                Weight = 1,\n                Priority = 1,\n            },\n            new AwsNative.Ec2.Inputs.CapacityReservationFleetInstanceTypeSpecificationArgs\n            {\n                InstanceType = \"c5.large\",\n                InstancePlatform = \"Linux/UNIX\",\n                AvailabilityZone = \"us-east-1a\",\n                Weight = 1,\n                Priority = 2,\n            },\n        },\n        Tenancy = AwsNative.Ec2.CapacityReservationFleetTenancy.Default,\n        TotalTargetCapacity = 2,\n        InstanceMatchCriteria = AwsNative.Ec2.CapacityReservationFleetInstanceMatchCriteria.Open,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ec2.NewCapacityReservationFleet(ctx, \"ec2CapacityReservationFleetCanary\", \u0026ec2.CapacityReservationFleetArgs{\n\t\t\tAllocationStrategy: pulumi.String(\"prioritized\"),\n\t\t\tInstanceTypeSpecifications: ec2.CapacityReservationFleetInstanceTypeSpecificationArray{\n\t\t\t\t\u0026ec2.CapacityReservationFleetInstanceTypeSpecificationArgs{\n\t\t\t\t\tInstanceType:     pulumi.String(\"c4.large\"),\n\t\t\t\t\tInstancePlatform: pulumi.String(\"Linux/UNIX\"),\n\t\t\t\t\tAvailabilityZone: pulumi.String(\"us-east-1a\"),\n\t\t\t\t\tWeight:           pulumi.Float64(1),\n\t\t\t\t\tPriority:         pulumi.Int(1),\n\t\t\t\t},\n\t\t\t\t\u0026ec2.CapacityReservationFleetInstanceTypeSpecificationArgs{\n\t\t\t\t\tInstanceType:     pulumi.String(\"c5.large\"),\n\t\t\t\t\tInstancePlatform: pulumi.String(\"Linux/UNIX\"),\n\t\t\t\t\tAvailabilityZone: pulumi.String(\"us-east-1a\"),\n\t\t\t\t\tWeight:           pulumi.Float64(1),\n\t\t\t\t\tPriority:         pulumi.Int(2),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTenancy:               ec2.CapacityReservationFleetTenancyDefault,\n\t\t\tTotalTargetCapacity:   pulumi.Int(2),\n\t\t\tInstanceMatchCriteria: ec2.CapacityReservationFleetInstanceMatchCriteriaOpen,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst ec2CapacityReservationFleetCanary = new aws_native.ec2.CapacityReservationFleet(\"ec2CapacityReservationFleetCanary\", {\n    allocationStrategy: \"prioritized\",\n    instanceTypeSpecifications: [\n        {\n            instanceType: \"c4.large\",\n            instancePlatform: \"Linux/UNIX\",\n            availabilityZone: \"us-east-1a\",\n            weight: 1,\n            priority: 1,\n        },\n        {\n            instanceType: \"c5.large\",\n            instancePlatform: \"Linux/UNIX\",\n            availabilityZone: \"us-east-1a\",\n            weight: 1,\n            priority: 2,\n        },\n    ],\n    tenancy: aws_native.ec2.CapacityReservationFleetTenancy.Default,\n    totalTargetCapacity: 2,\n    instanceMatchCriteria: aws_native.ec2.CapacityReservationFleetInstanceMatchCriteria.Open,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nec2_capacity_reservation_fleet_canary = aws_native.ec2.CapacityReservationFleet(\"ec2CapacityReservationFleetCanary\",\n    allocation_strategy=\"prioritized\",\n    instance_type_specifications=[\n        {\n            \"instance_type\": \"c4.large\",\n            \"instance_platform\": \"Linux/UNIX\",\n            \"availability_zone\": \"us-east-1a\",\n            \"weight\": 1,\n            \"priority\": 1,\n        },\n        {\n            \"instance_type\": \"c5.large\",\n            \"instance_platform\": \"Linux/UNIX\",\n            \"availability_zone\": \"us-east-1a\",\n            \"weight\": 1,\n            \"priority\": 2,\n        },\n    ],\n    tenancy=aws_native.ec2.CapacityReservationFleetTenancy.DEFAULT,\n    total_target_capacity=2,\n    instance_match_criteria=aws_native.ec2.CapacityReservationFleetInstanceMatchCriteria.OPEN)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"allocationStrategy":{"type":"string","description":"The strategy used by the Capacity Reservation Fleet to determine which of the specified instance types to use. Currently, only the `prioritized` allocation strategy is supported. For more information, see [Allocation strategy](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#allocation-strategy) in the *Amazon EC2 User Guide* .\n\nValid values: `prioritized`","replaceOnChanges":true},"capacityReservationFleetId":{"type":"string","description":"The ID of the Capacity Reservation Fleet."},"endDate":{"type":"string","description":"The date and time at which the Capacity Reservation Fleet expires. When the Capacity Reservation Fleet expires, its state changes to `expired` and all of the Capacity Reservations in the Fleet expire.\n\nThe Capacity Reservation Fleet expires within an hour after the specified time. For example, if you specify `5/31/2019` , `13:30:55` , the Capacity Reservation Fleet is guaranteed to expire between `13:30:55` and `14:30:55` on `5/31/2019` .","replaceOnChanges":true},"instanceMatchCriteria":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetInstanceMatchCriteria","description":"Indicates the type of instance launches that the Capacity Reservation Fleet accepts. All Capacity Reservations in the Fleet inherit this instance matching criteria.\n\nCurrently, Capacity Reservation Fleets support `open` instance matching criteria only. This means that instances that have matching attributes (instance type, platform, and Availability Zone) run in the Capacity Reservations automatically. Instances do not need to explicitly target a Capacity Reservation Fleet to use its reserved capacity.","replaceOnChanges":true},"instanceTypeSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetInstanceTypeSpecification"},"description":"Information about the instance types for which to reserve the capacity.","replaceOnChanges":true},"noRemoveEndDate":{"type":"boolean","description":"Used to add an end date to a Capacity Reservation Fleet that has no end date and time. To add an end date to a Capacity Reservation Fleet, specify `true` for this paramater and specify the end date and time (in UTC time format) for the *EndDate* parameter."},"removeEndDate":{"type":"boolean","description":"Used to remove an end date from a Capacity Reservation Fleet that is configured to end automatically at a specific date and time. To remove the end date from a Capacity Reservation Fleet, specify `true` for this paramater and omit the *EndDate* parameter."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetTagSpecification"},"description":"The tags to assign to the Capacity Reservation Fleet. The tags are automatically assigned to the Capacity Reservations in the Fleet.","replaceOnChanges":true},"tenancy":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetTenancy","description":"Indicates the tenancy of the Capacity Reservation Fleet. All Capacity Reservations in the Fleet inherit this tenancy. The Capacity Reservation Fleet can have one of the following tenancy settings:\n\n- `default` - The Capacity Reservation Fleet is created on hardware that is shared with other AWS accounts .\n- `dedicated` - The Capacity Reservations are created on single-tenant hardware that is dedicated to a single AWS account .","replaceOnChanges":true},"totalTargetCapacity":{"type":"integer","description":"The total number of capacity units to be reserved by the Capacity Reservation Fleet. This value, together with the instance type weights that you assign to each instance type used by the Fleet determine the number of instances for which the Fleet reserves capacity. Both values are based on units that make sense for your workload. For more information, see [Total target capacity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity) in the *Amazon EC2 User Guide* ."}},"type":"object","required":["capacityReservationFleetId"],"inputProperties":{"allocationStrategy":{"type":"string","description":"The strategy used by the Capacity Reservation Fleet to determine which of the specified instance types to use. Currently, only the `prioritized` allocation strategy is supported. For more information, see [Allocation strategy](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#allocation-strategy) in the *Amazon EC2 User Guide* .\n\nValid values: `prioritized`"},"endDate":{"type":"string","description":"The date and time at which the Capacity Reservation Fleet expires. When the Capacity Reservation Fleet expires, its state changes to `expired` and all of the Capacity Reservations in the Fleet expire.\n\nThe Capacity Reservation Fleet expires within an hour after the specified time. For example, if you specify `5/31/2019` , `13:30:55` , the Capacity Reservation Fleet is guaranteed to expire between `13:30:55` and `14:30:55` on `5/31/2019` ."},"instanceMatchCriteria":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetInstanceMatchCriteria","description":"Indicates the type of instance launches that the Capacity Reservation Fleet accepts. All Capacity Reservations in the Fleet inherit this instance matching criteria.\n\nCurrently, Capacity Reservation Fleets support `open` instance matching criteria only. This means that instances that have matching attributes (instance type, platform, and Availability Zone) run in the Capacity Reservations automatically. Instances do not need to explicitly target a Capacity Reservation Fleet to use its reserved capacity."},"instanceTypeSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetInstanceTypeSpecification"},"description":"Information about the instance types for which to reserve the capacity."},"noRemoveEndDate":{"type":"boolean","description":"Used to add an end date to a Capacity Reservation Fleet that has no end date and time. To add an end date to a Capacity Reservation Fleet, specify `true` for this paramater and specify the end date and time (in UTC time format) for the *EndDate* parameter."},"removeEndDate":{"type":"boolean","description":"Used to remove an end date from a Capacity Reservation Fleet that is configured to end automatically at a specific date and time. To remove the end date from a Capacity Reservation Fleet, specify `true` for this paramater and omit the *EndDate* parameter."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetTagSpecification"},"description":"The tags to assign to the Capacity Reservation Fleet. The tags are automatically assigned to the Capacity Reservations in the Fleet."},"tenancy":{"$ref":"#/types/aws-native:ec2:CapacityReservationFleetTenancy","description":"Indicates the tenancy of the Capacity Reservation Fleet. All Capacity Reservations in the Fleet inherit this tenancy. The Capacity Reservation Fleet can have one of the following tenancy settings:\n\n- `default` - The Capacity Reservation Fleet is created on hardware that is shared with other AWS accounts .\n- `dedicated` - The Capacity Reservations are created on single-tenant hardware that is dedicated to a single AWS account ."},"totalTargetCapacity":{"type":"integer","description":"The total number of capacity units to be reserved by the Capacity Reservation Fleet. This value, together with the instance type weights that you assign to each instance type used by the Fleet determine the number of instances for which the Fleet reserves capacity. Both values are based on units that make sense for your workload. For more information, see [Total target capacity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity) in the *Amazon EC2 User Guide* ."}}},"aws-native:ec2:CarrierGateway":{"description":"Resource Type definition for Carrier Gateway which describes the Carrier Gateway resource","properties":{"carrierGatewayId":{"type":"string","description":"The ID of the carrier gateway."},"ownerId":{"type":"string","description":"The ID of the owner."},"state":{"type":"string","description":"The state of the carrier gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the carrier gateway."},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["carrierGatewayId","ownerId","state","vpcId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the carrier gateway."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["vpcId"]},"aws-native:ec2:CustomerGateway":{"description":"Specifies a customer gateway.","properties":{"bgpAsn":{"type":"integer","description":"For customer gateway devices that support BGP, specify the device's ASN. You must specify either ``BgpAsn`` or ``BgpAsnExtended`` when creating the customer gateway. If the ASN is larger than ``2,147,483,647``, you must use ``BgpAsnExtended``.\n Default: 65000\n Valid values: ``1`` to ``2,147,483,647``","replaceOnChanges":true},"bgpAsnExtended":{"type":"number","description":"For customer gateway devices that support BGP, specify the device's ASN. You must specify either ``BgpAsn`` or ``BgpAsnExtended`` when creating the customer gateway. If the ASN is larger than ``2,147,483,647``, you must use ``BgpAsnExtended``.\n Valid values: ``2,147,483,648`` to ``4,294,967,295``","replaceOnChanges":true},"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the customer gateway certificate.","replaceOnChanges":true},"customerGatewayId":{"type":"string","description":"The ID of the customer gateway."},"deviceName":{"type":"string","description":"The name of customer gateway device.","replaceOnChanges":true},"ipAddress":{"type":"string","description":"The IP address for the customer gateway device's outside interface. The address must be static. If ``OutsideIpAddressType`` in your VPN connection options is set to ``PrivateIpv4``, you can use an RFC6598 or RFC1918 private IPv4 address. If ``OutsideIpAddressType`` is set to ``Ipv6``, you can use an IPv6 address.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags for the customer gateway."},"type":{"type":"string","description":"The type of VPN connection that this customer gateway supports (``ipsec.1``).","replaceOnChanges":true}},"type":"object","required":["customerGatewayId","ipAddress","type"],"inputProperties":{"bgpAsn":{"type":"integer","description":"For customer gateway devices that support BGP, specify the device's ASN. You must specify either ``BgpAsn`` or ``BgpAsnExtended`` when creating the customer gateway. If the ASN is larger than ``2,147,483,647``, you must use ``BgpAsnExtended``.\n Default: 65000\n Valid values: ``1`` to ``2,147,483,647``"},"bgpAsnExtended":{"type":"number","description":"For customer gateway devices that support BGP, specify the device's ASN. You must specify either ``BgpAsn`` or ``BgpAsnExtended`` when creating the customer gateway. If the ASN is larger than ``2,147,483,647``, you must use ``BgpAsnExtended``.\n Valid values: ``2,147,483,648`` to ``4,294,967,295``"},"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the customer gateway certificate."},"deviceName":{"type":"string","description":"The name of customer gateway device."},"ipAddress":{"type":"string","description":"The IP address for the customer gateway device's outside interface. The address must be static. If ``OutsideIpAddressType`` in your VPN connection options is set to ``PrivateIpv4``, you can use an RFC6598 or RFC1918 private IPv4 address. If ``OutsideIpAddressType`` is set to ``Ipv6``, you can use an IPv6 address."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags for the customer gateway."},"type":{"type":"string","description":"The type of VPN connection that this customer gateway supports (``ipsec.1``)."}},"requiredInputs":["ipAddress","type"]},"aws-native:ec2:DhcpOptions":{"description":"Resource Type definition for AWS::EC2::DHCPOptions","properties":{"dhcpOptionsId":{"type":"string","description":"The ID of the DHCP options set."},"domainName":{"type":"string","description":"This value is used to complete unqualified DNS hostnames.","replaceOnChanges":true},"domainNameServers":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses of up to four domain name servers, or AmazonProvidedDNS.","replaceOnChanges":true},"ipv6AddressPreferredLeaseTime":{"type":"integer","description":"The preferred Lease Time for ipV6 address in seconds.","replaceOnChanges":true},"netbiosNameServers":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses of up to four NetBIOS name servers.","replaceOnChanges":true},"netbiosNodeType":{"type":"integer","description":"The NetBIOS node type (1, 2, 4, or 8).","replaceOnChanges":true},"ntpServers":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses of up to four Network Time Protocol (NTP) servers.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the DHCP options set."}},"type":"object","required":["dhcpOptionsId"],"inputProperties":{"domainName":{"type":"string","description":"This value is used to complete unqualified DNS hostnames."},"domainNameServers":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses of up to four domain name servers, or AmazonProvidedDNS."},"ipv6AddressPreferredLeaseTime":{"type":"integer","description":"The preferred Lease Time for ipV6 address in seconds."},"netbiosNameServers":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses of up to four NetBIOS name servers."},"netbiosNodeType":{"type":"integer","description":"The NetBIOS node type (1, 2, 4, or 8)."},"ntpServers":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses of up to four Network Time Protocol (NTP) servers."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the DHCP options set."}}},"aws-native:ec2:Ec2Fleet":{"description":"Resource Type definition for AWS::EC2::EC2Fleet","properties":{"context":{"type":"string","description":"Reserved."},"excessCapacityTerminationPolicy":{"$ref":"#/types/aws-native:ec2:Ec2FleetExcessCapacityTerminationPolicy","description":"Indicates whether running instances should be terminated if the total target capacity of the EC2 Fleet is decreased below the current size of the EC2 Fleet.\n\nSupported only for fleets of type `maintain` ."},"fleetId":{"type":"string","description":"The ID of the EC2 Fleet."},"launchTemplateConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetFleetLaunchTemplateConfigRequest"},"description":"The configuration for the EC2 Fleet.","replaceOnChanges":true},"onDemandOptions":{"$ref":"#/types/aws-native:ec2:Ec2FleetOnDemandOptionsRequest","description":"Describes the configuration of On-Demand Instances in an EC2 Fleet.","replaceOnChanges":true},"replaceUnhealthyInstances":{"type":"boolean","description":"Indicates whether EC2 Fleet should replace unhealthy Spot Instances. Supported only for fleets of type `maintain` . For more information, see [EC2 Fleet health checks](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/manage-ec2-fleet.html#ec2-fleet-health-checks) in the *Amazon EC2 User Guide* .","replaceOnChanges":true},"spotOptions":{"$ref":"#/types/aws-native:ec2:Ec2FleetSpotOptionsRequest","description":"Describes the configuration of Spot Instances in an EC2 Fleet.","replaceOnChanges":true},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetTagSpecification"},"description":"The key-value pair for tagging the EC2 Fleet request on creation. For more information, see [Tag your resources](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#tag-resources) .\n\nIf the fleet type is `instant` , specify a resource type of `fleet` to tag the fleet or `instance` to tag the instances at launch.\n\nIf the fleet type is `maintain` or `request` , specify a resource type of `fleet` to tag the fleet. You cannot specify a resource type of `instance` . To tag instances at launch, specify the tags in a [launch template](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template) .","replaceOnChanges":true},"targetCapacitySpecification":{"$ref":"#/types/aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequest","description":"The number of units to request."},"terminateInstancesWithExpiration":{"type":"boolean","description":"Indicates whether running instances should be terminated when the EC2 Fleet expires.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:ec2:Ec2FleetType","description":"The fleet type. The default value is `maintain` .\n\n- `maintain` - The EC2 Fleet places an asynchronous request for your desired capacity, and continues to maintain your desired Spot capacity by replenishing interrupted Spot Instances.\n- `request` - The EC2 Fleet places an asynchronous one-time request for your desired capacity, but does submit Spot requests in alternative capacity pools if Spot capacity is unavailable, and does not maintain Spot capacity if Spot Instances are interrupted.\n- `instant` - The EC2 Fleet places a synchronous one-time request for your desired capacity, and returns errors for any instances that could not be launched.\n\nFor more information, see [EC2 Fleet request types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-request-type.html) in the *Amazon EC2 User Guide* .","replaceOnChanges":true},"validFrom":{"type":"string","description":"The start date and time of the request, in UTC format (for example, *YYYY* - *MM* - *DD* T *HH* : *MM* : *SS* Z). The default is to start fulfilling the request immediately.","replaceOnChanges":true},"validUntil":{"type":"string","description":"The end date and time of the request, in UTC format (for example, *YYYY* - *MM* - *DD* T *HH* : *MM* : *SS* Z). At this point, no new EC2 Fleet requests are placed or able to fulfill the request. If no value is specified, the request remains until you cancel it.","replaceOnChanges":true}},"type":"object","required":["fleetId","launchTemplateConfigs","targetCapacitySpecification"],"inputProperties":{"context":{"type":"string","description":"Reserved."},"excessCapacityTerminationPolicy":{"$ref":"#/types/aws-native:ec2:Ec2FleetExcessCapacityTerminationPolicy","description":"Indicates whether running instances should be terminated if the total target capacity of the EC2 Fleet is decreased below the current size of the EC2 Fleet.\n\nSupported only for fleets of type `maintain` ."},"launchTemplateConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetFleetLaunchTemplateConfigRequest"},"description":"The configuration for the EC2 Fleet."},"onDemandOptions":{"$ref":"#/types/aws-native:ec2:Ec2FleetOnDemandOptionsRequest","description":"Describes the configuration of On-Demand Instances in an EC2 Fleet."},"replaceUnhealthyInstances":{"type":"boolean","description":"Indicates whether EC2 Fleet should replace unhealthy Spot Instances. Supported only for fleets of type `maintain` . For more information, see [EC2 Fleet health checks](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/manage-ec2-fleet.html#ec2-fleet-health-checks) in the *Amazon EC2 User Guide* ."},"spotOptions":{"$ref":"#/types/aws-native:ec2:Ec2FleetSpotOptionsRequest","description":"Describes the configuration of Spot Instances in an EC2 Fleet."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:Ec2FleetTagSpecification"},"description":"The key-value pair for tagging the EC2 Fleet request on creation. For more information, see [Tag your resources](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#tag-resources) .\n\nIf the fleet type is `instant` , specify a resource type of `fleet` to tag the fleet or `instance` to tag the instances at launch.\n\nIf the fleet type is `maintain` or `request` , specify a resource type of `fleet` to tag the fleet. You cannot specify a resource type of `instance` . To tag instances at launch, specify the tags in a [launch template](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html#create-launch-template) ."},"targetCapacitySpecification":{"$ref":"#/types/aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequest","description":"The number of units to request."},"terminateInstancesWithExpiration":{"type":"boolean","description":"Indicates whether running instances should be terminated when the EC2 Fleet expires."},"type":{"$ref":"#/types/aws-native:ec2:Ec2FleetType","description":"The fleet type. The default value is `maintain` .\n\n- `maintain` - The EC2 Fleet places an asynchronous request for your desired capacity, and continues to maintain your desired Spot capacity by replenishing interrupted Spot Instances.\n- `request` - The EC2 Fleet places an asynchronous one-time request for your desired capacity, but does submit Spot requests in alternative capacity pools if Spot capacity is unavailable, and does not maintain Spot capacity if Spot Instances are interrupted.\n- `instant` - The EC2 Fleet places a synchronous one-time request for your desired capacity, and returns errors for any instances that could not be launched.\n\nFor more information, see [EC2 Fleet request types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-fleet-request-type.html) in the *Amazon EC2 User Guide* ."},"validFrom":{"type":"string","description":"The start date and time of the request, in UTC format (for example, *YYYY* - *MM* - *DD* T *HH* : *MM* : *SS* Z). The default is to start fulfilling the request immediately."},"validUntil":{"type":"string","description":"The end date and time of the request, in UTC format (for example, *YYYY* - *MM* - *DD* T *HH* : *MM* : *SS* Z). At this point, no new EC2 Fleet requests are placed or able to fulfill the request. If no value is specified, the request remains until you cancel it."}},"requiredInputs":["launchTemplateConfigs","targetCapacitySpecification"]},"aws-native:ec2:EgressOnlyInternetGateway":{"description":"Resource Type definition for AWS::EC2::EgressOnlyInternetGateway","properties":{"awsId":{"type":"string","description":"Service Generated ID of the EgressOnlyInternetGateway"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the egress only internet gateway."},"vpcId":{"type":"string","description":"The ID of the VPC for which to create the egress-only internet gateway.","replaceOnChanges":true}},"type":"object","required":["awsId","vpcId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the egress only internet gateway."},"vpcId":{"type":"string","description":"The ID of the VPC for which to create the egress-only internet gateway."}},"requiredInputs":["vpcId"]},"aws-native:ec2:Eip":{"description":"Specifies an Elastic IP (EIP) address and can, optionally, associate it with an Amazon EC2 instance.\n You can allocate an Elastic IP address from an address pool owned by AWS or from an address pool created from a public IPv4 address range that you have brought to AWS for use with your AWS resources using bring your own IP addresses (BYOIP). For more information, see [Bring Your Own IP Addresses (BYOIP)](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html) in the *Amazon EC2 User Guide*.\n For more information, see [Elastic IP Addresses](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html) in the *Amazon EC2 User Guide*.","properties":{"address":{"type":"string","description":"An Elastic IP address or a carrier IP address in a Wavelength Zone.","replaceOnChanges":true},"allocationId":{"type":"string","description":"The ID that AWS assigns to represent the allocation of the address for use with Amazon VPC. This is returned only for VPC elastic IP addresses. For example, `eipalloc-5723d13e` ."},"domain":{"type":"string","description":"The network (``vpc``).\n If you define an Elastic IP address and associate it with a VPC that is defined in the same template, you must declare a dependency on the VPC-gateway attachment by using the [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) on this resource."},"instanceId":{"type":"string","description":"The ID of the instance.\n  Updates to the ``InstanceId`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource."},"ipamPoolId":{"type":"string","description":"The ID of an IPAM pool which has an Amazon-provided or BYOIP public IPv4 CIDR provisioned to it. For more information, see [Allocate sequential Elastic IP addresses from an IPAM pool](https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-eip-pool.html) in the *Amazon VPC IPAM User Guide* .","replaceOnChanges":true},"networkBorderGroup":{"type":"string","description":"A unique set of Availability Zones, Local Zones, or Wavelength Zones from which AWS advertises IP addresses. Use this parameter to limit the IP address to this location. IP addresses cannot move between network border groups.\n Use [DescribeAvailabilityZones](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAvailabilityZones.html) to view the network border groups.","replaceOnChanges":true},"publicIp":{"type":"string","description":"The Elastic IP address."},"publicIpv4Pool":{"type":"string","description":"The ID of an address pool that you own. Use this parameter to let Amazon EC2 select an address from the address pool.\n  Updates to the ``PublicIpv4Pool`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the Elastic IP address.\n  Updates to the ``Tags`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource."},"transferAddress":{"type":"string","description":"The Elastic IP address you are accepting for transfer. You can only accept one transferred address. For more information on Elastic IP address transfers, see [Transfer Elastic IP addresses](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#transfer-EIPs-intro) in the *Amazon Virtual Private Cloud User Guide*.","replaceOnChanges":true}},"type":"object","required":["allocationId","publicIp"],"inputProperties":{"address":{"type":"string","description":"An Elastic IP address or a carrier IP address in a Wavelength Zone."},"domain":{"type":"string","description":"The network (``vpc``).\n If you define an Elastic IP address and associate it with a VPC that is defined in the same template, you must declare a dependency on the VPC-gateway attachment by using the [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) on this resource."},"instanceId":{"type":"string","description":"The ID of the instance.\n  Updates to the ``InstanceId`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource."},"ipamPoolId":{"type":"string","description":"The ID of an IPAM pool which has an Amazon-provided or BYOIP public IPv4 CIDR provisioned to it. For more information, see [Allocate sequential Elastic IP addresses from an IPAM pool](https://docs.aws.amazon.com/vpc/latest/ipam/tutorials-eip-pool.html) in the *Amazon VPC IPAM User Guide* ."},"networkBorderGroup":{"type":"string","description":"A unique set of Availability Zones, Local Zones, or Wavelength Zones from which AWS advertises IP addresses. Use this parameter to limit the IP address to this location. IP addresses cannot move between network border groups.\n Use [DescribeAvailabilityZones](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAvailabilityZones.html) to view the network border groups."},"publicIpv4Pool":{"type":"string","description":"The ID of an address pool that you own. Use this parameter to let Amazon EC2 select an address from the address pool.\n  Updates to the ``PublicIpv4Pool`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the Elastic IP address.\n  Updates to the ``Tags`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource."},"transferAddress":{"type":"string","description":"The Elastic IP address you are accepting for transfer. You can only accept one transferred address. For more information on Elastic IP address transfers, see [Transfer Elastic IP addresses](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#transfer-EIPs-intro) in the *Amazon Virtual Private Cloud User Guide*."}}},"aws-native:ec2:EipAssociation":{"description":"Associates an Elastic IP address with an instance or a network interface. Before you can use an Elastic IP address, you must allocate it to your account. For more information about working with Elastic IP addresses, see [Elastic IP address concepts and rules](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#vpc-eip-overview).\n You must specify ``AllocationId`` and either ``InstanceId``, ``NetworkInterfaceId``, or ``PrivateIpAddress``.","properties":{"allocationId":{"type":"string","description":"The allocation ID. This is required.","replaceOnChanges":true},"awsId":{"type":"string","description":"The ID of the association."},"eip":{"type":"string","replaceOnChanges":true},"instanceId":{"type":"string","description":"The ID of the instance. The instance must have exactly one attached network interface. You can specify either the instance ID or the network interface ID, but not both.","replaceOnChanges":true},"networkInterfaceId":{"type":"string","description":"The ID of the network interface. If the instance has more than one network interface, you must specify a network interface ID.\n You can specify either the instance ID or the network interface ID, but not both.","replaceOnChanges":true},"privateIpAddress":{"type":"string","description":"The primary or secondary private IP address to associate with the Elastic IP address. If no private IP address is specified, the Elastic IP address is associated with the primary private IP address.","replaceOnChanges":true}},"type":"object","required":["awsId"],"inputProperties":{"allocationId":{"type":"string","description":"The allocation ID. This is required."},"eip":{"type":"string"},"instanceId":{"type":"string","description":"The ID of the instance. The instance must have exactly one attached network interface. You can specify either the instance ID or the network interface ID, but not both."},"networkInterfaceId":{"type":"string","description":"The ID of the network interface. If the instance has more than one network interface, you must specify a network interface ID.\n You can specify either the instance ID or the network interface ID, but not both."},"privateIpAddress":{"type":"string","description":"The primary or secondary private IP address to associate with the Elastic IP address. If no private IP address is specified, the Elastic IP address is associated with the primary private IP address."}}},"aws-native:ec2:EnclaveCertificateIamRoleAssociation":{"description":"Associates an AWS Identity and Access Management (IAM) role with an AWS Certificate Manager (ACM) certificate. This association is based on Amazon Resource Names and it enables the certificate to be used by the ACM for Nitro Enclaves application inside an enclave.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myEnclaveCertificateIamRoleAssociation = new AwsNative.Ec2.EnclaveCertificateIamRoleAssociation(\"myEnclaveCertificateIamRoleAssociation\", new()\n    {\n        CertificateArn = \"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\",\n        RoleArn = \"arn:aws:iam::123456789012:role/my-acm-role\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ec2.NewEnclaveCertificateIamRoleAssociation(ctx, \"myEnclaveCertificateIamRoleAssociation\", \u0026ec2.EnclaveCertificateIamRoleAssociationArgs{\n\t\t\tCertificateArn: pulumi.String(\"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\"),\n\t\t\tRoleArn:        pulumi.String(\"arn:aws:iam::123456789012:role/my-acm-role\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myEnclaveCertificateIamRoleAssociation = new aws_native.ec2.EnclaveCertificateIamRoleAssociation(\"myEnclaveCertificateIamRoleAssociation\", {\n    certificateArn: \"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\",\n    roleArn: \"arn:aws:iam::123456789012:role/my-acm-role\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_enclave_certificate_iam_role_association = aws_native.ec2.EnclaveCertificateIamRoleAssociation(\"myEnclaveCertificateIamRoleAssociation\",\n    certificate_arn=\"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\",\n    role_arn=\"arn:aws:iam::123456789012:role/my-acm-role\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCertAssociation = new AwsNative.Ec2.EnclaveCertificateIamRoleAssociation(\"myCertAssociation\", new()\n    {\n        CertificateArn = \"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\",\n        RoleArn = \"arn:aws:iam::123456789012:role/my-acm-role\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ec2.NewEnclaveCertificateIamRoleAssociation(ctx, \"myCertAssociation\", \u0026ec2.EnclaveCertificateIamRoleAssociationArgs{\n\t\t\tCertificateArn: pulumi.String(\"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\"),\n\t\t\tRoleArn:        pulumi.String(\"arn:aws:iam::123456789012:role/my-acm-role\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCertAssociation = new aws_native.ec2.EnclaveCertificateIamRoleAssociation(\"myCertAssociation\", {\n    certificateArn: \"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\",\n    roleArn: \"arn:aws:iam::123456789012:role/my-acm-role\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_cert_association = aws_native.ec2.EnclaveCertificateIamRoleAssociation(\"myCertAssociation\",\n    certificate_arn=\"arn:aws:acm:us-east-1:123456789012:certificate/123abcde-cdef-abcd-1234-123abEXAMPLE\",\n    role_arn=\"arn:aws:iam::123456789012:role/my-acm-role\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role.","replaceOnChanges":true},"certificateS3BucketName":{"type":"string","description":"The name of the Amazon S3 bucket to which the certificate was uploaded."},"certificateS3ObjectKey":{"type":"string","description":"The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored."},"encryptionKmsKeyId":{"type":"string","description":"The ID of the AWS KMS CMK used to encrypt the private key of the certificate."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate.","replaceOnChanges":true}},"type":"object","required":["certificateArn","certificateS3BucketName","certificateS3ObjectKey","encryptionKmsKeyId","roleArn"],"inputProperties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate."}},"requiredInputs":["certificateArn","roleArn"]},"aws-native:ec2:FlowLog":{"description":"Specifies a VPC flow log, which enables you to capture IP traffic for a specific network interface, subnet, or VPC.","properties":{"awsId":{"type":"string","description":"The Flow Log ID"},"deliverCrossAccountRole":{"type":"string","description":"The ARN of the IAM role that allows Amazon EC2 to publish flow logs across accounts.","replaceOnChanges":true},"deliverLogsPermissionArn":{"type":"string","description":"The ARN for the IAM role that permits Amazon EC2 to publish flow logs to a CloudWatch Logs log group in your account. If you specify LogDestinationType as s3 or kinesis-data-firehose, do not specify DeliverLogsPermissionArn or LogGroupName.","replaceOnChanges":true},"destinationOptions":{"$ref":"#/types/aws-native:ec2:DestinationOptionsProperties","description":"The destination options.","replaceOnChanges":true},"logDestination":{"type":"string","description":"Specifies the destination to which the flow log data is to be published. Flow log data can be published to a CloudWatch Logs log group, an Amazon S3 bucket, or a Kinesis Firehose stream. The value specified for this parameter depends on the value specified for LogDestinationType.","replaceOnChanges":true},"logDestinationType":{"$ref":"#/types/aws-native:ec2:FlowLogLogDestinationType","description":"Specifies the type of destination to which the flow log data is to be published. Flow log data can be published to CloudWatch Logs or Amazon S3.","replaceOnChanges":true},"logFormat":{"type":"string","description":"The fields to include in the flow log record, in the order in which they should appear.","replaceOnChanges":true},"logGroupName":{"type":"string","description":"The name of a new or existing CloudWatch Logs log group where Amazon EC2 publishes your flow logs. If you specify LogDestinationType as s3 or kinesis-data-firehose, do not specify DeliverLogsPermissionArn or LogGroupName.","replaceOnChanges":true},"maxAggregationInterval":{"type":"integer","description":"The maximum interval of time during which a flow of packets is captured and aggregated into a flow log record. You can specify 60 seconds (1 minute) or 600 seconds (10 minutes).","replaceOnChanges":true},"resourceId":{"type":"string","description":"The ID of the subnet, network interface, or VPC for which you want to create a flow log.","replaceOnChanges":true},"resourceType":{"$ref":"#/types/aws-native:ec2:FlowLogResourceType","description":"The type of resource for which to create the flow log. For example, if you specified a VPC ID for the ResourceId property, specify VPC for this property.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the flow logs."},"trafficType":{"$ref":"#/types/aws-native:ec2:FlowLogTrafficType","description":"The type of traffic to log. You can log traffic that the resource accepts or rejects, or all traffic.","replaceOnChanges":true}},"type":"object","required":["awsId","resourceId","resourceType"],"inputProperties":{"deliverCrossAccountRole":{"type":"string","description":"The ARN of the IAM role that allows Amazon EC2 to publish flow logs across accounts."},"deliverLogsPermissionArn":{"type":"string","description":"The ARN for the IAM role that permits Amazon EC2 to publish flow logs to a CloudWatch Logs log group in your account. If you specify LogDestinationType as s3 or kinesis-data-firehose, do not specify DeliverLogsPermissionArn or LogGroupName."},"destinationOptions":{"$ref":"#/types/aws-native:ec2:DestinationOptionsProperties","description":"The destination options."},"logDestination":{"type":"string","description":"Specifies the destination to which the flow log data is to be published. Flow log data can be published to a CloudWatch Logs log group, an Amazon S3 bucket, or a Kinesis Firehose stream. The value specified for this parameter depends on the value specified for LogDestinationType."},"logDestinationType":{"$ref":"#/types/aws-native:ec2:FlowLogLogDestinationType","description":"Specifies the type of destination to which the flow log data is to be published. Flow log data can be published to CloudWatch Logs or Amazon S3."},"logFormat":{"type":"string","description":"The fields to include in the flow log record, in the order in which they should appear."},"logGroupName":{"type":"string","description":"The name of a new or existing CloudWatch Logs log group where Amazon EC2 publishes your flow logs. If you specify LogDestinationType as s3 or kinesis-data-firehose, do not specify DeliverLogsPermissionArn or LogGroupName."},"maxAggregationInterval":{"type":"integer","description":"The maximum interval of time during which a flow of packets is captured and aggregated into a flow log record. You can specify 60 seconds (1 minute) or 600 seconds (10 minutes)."},"resourceId":{"type":"string","description":"The ID of the subnet, network interface, or VPC for which you want to create a flow log."},"resourceType":{"$ref":"#/types/aws-native:ec2:FlowLogResourceType","description":"The type of resource for which to create the flow log. For example, if you specified a VPC ID for the ResourceId property, specify VPC for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the flow logs."},"trafficType":{"$ref":"#/types/aws-native:ec2:FlowLogTrafficType","description":"The type of traffic to log. You can log traffic that the resource accepts or rejects, or all traffic."}},"requiredInputs":["resourceId","resourceType"]},"aws-native:ec2:GatewayRouteTableAssociation":{"description":"Associates a gateway with a route table. The gateway and route table must be in the same VPC. This association causes the incoming traffic to the gateway to be routed according to the routes in the route table.","properties":{"associationId":{"type":"string","description":"The route table association ID."},"gatewayId":{"type":"string","description":"The ID of the gateway.","replaceOnChanges":true},"routeTableId":{"type":"string","description":"The ID of the route table."}},"type":"object","required":["associationId","gatewayId","routeTableId"],"inputProperties":{"gatewayId":{"type":"string","description":"The ID of the gateway."},"routeTableId":{"type":"string","description":"The ID of the route table."}},"requiredInputs":["gatewayId","routeTableId"]},"aws-native:ec2:Host":{"description":"Resource Type definition for AWS::EC2::Host","properties":{"assetId":{"type":"string","description":"The ID of the Outpost hardware asset.","replaceOnChanges":true},"autoPlacement":{"$ref":"#/types/aws-native:ec2:HostAutoPlacement","description":"Indicates whether the host accepts any untargeted instance launches that match its instance type configuration, or if it only accepts Host tenancy instance launches that specify its unique host ID."},"availabilityZone":{"type":"string","description":"The Availability Zone in which to allocate the Dedicated Host.","replaceOnChanges":true},"hostId":{"type":"string","description":"ID of the host created."},"hostMaintenance":{"$ref":"#/types/aws-native:ec2:HostMaintenance","description":"Automatically allocates a new dedicated host and moves your instances on to it if a degradation is detected on your current host."},"hostRecovery":{"$ref":"#/types/aws-native:ec2:HostRecovery","description":"Indicates whether to enable or disable host recovery for the Dedicated Host. Host recovery is disabled by default."},"instanceFamily":{"type":"string","description":"Specifies the instance family to be supported by the Dedicated Hosts. If you specify an instance family, the Dedicated Hosts support multiple instance types within that instance family.","replaceOnChanges":true},"instanceType":{"type":"string","description":"Specifies the instance type to be supported by the Dedicated Hosts. If you specify an instance type, the Dedicated Hosts support instances of the specified instance type only.","replaceOnChanges":true},"outpostArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Web Services Outpost on which to allocate the Dedicated Host.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the Host."}},"type":"object","required":["availabilityZone","hostId"],"inputProperties":{"assetId":{"type":"string","description":"The ID of the Outpost hardware asset."},"autoPlacement":{"$ref":"#/types/aws-native:ec2:HostAutoPlacement","description":"Indicates whether the host accepts any untargeted instance launches that match its instance type configuration, or if it only accepts Host tenancy instance launches that specify its unique host ID."},"availabilityZone":{"type":"string","description":"The Availability Zone in which to allocate the Dedicated Host."},"hostMaintenance":{"$ref":"#/types/aws-native:ec2:HostMaintenance","description":"Automatically allocates a new dedicated host and moves your instances on to it if a degradation is detected on your current host."},"hostRecovery":{"$ref":"#/types/aws-native:ec2:HostRecovery","description":"Indicates whether to enable or disable host recovery for the Dedicated Host. Host recovery is disabled by default."},"instanceFamily":{"type":"string","description":"Specifies the instance family to be supported by the Dedicated Hosts. If you specify an instance family, the Dedicated Hosts support multiple instance types within that instance family."},"instanceType":{"type":"string","description":"Specifies the instance type to be supported by the Dedicated Hosts. If you specify an instance type, the Dedicated Hosts support instances of the specified instance type only."},"outpostArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Web Services Outpost on which to allocate the Dedicated Host."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the Host."}},"requiredInputs":["availabilityZone"]},"aws-native:ec2:Instance":{"description":"Resource Type definition for AWS::EC2::Instance","properties":{"additionalInfo":{"type":"string","description":"This property is reserved for internal use. If you use it, the stack fails with this error: Bad property set: [Testing this property] (Service: AmazonEC2; Status Code: 400; Error Code: InvalidParameterCombination; Request ID: 0XXXXXX-49c7-4b40-8bcc-76885dcXXXXX)."},"affinity":{"$ref":"#/types/aws-native:ec2:InstanceAffinity","description":"Indicates whether the instance is associated with a dedicated host. If you want the instance to always restart on the same host on which it was launched, specify host. If you want the instance to restart on any available host, but try to launch onto the last host it ran on (on a best-effort basis), specify default."},"availabilityZone":{"type":"string","description":"The Availability Zone of the instance.","replaceOnChanges":true},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceBlockDeviceMapping"},"description":"The block device mapping entries that defines the block devices to attach to the instance at launch."},"cpuOptions":{"$ref":"#/types/aws-native:ec2:CpuOptionsProperties","description":"The CPU options for the instance.","replaceOnChanges":true},"creditSpecification":{"$ref":"#/types/aws-native:ec2:CreditSpecificationProperties","description":"The credit option for CPU usage of the burstable performance instance. Valid values are standard and unlimited."},"disableApiTermination":{"type":"boolean","description":"If you set this parameter to true, you can't terminate the instance using the Amazon EC2 console, CLI, or API; otherwise, you can."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the instance is optimized for Amazon EBS I/O."},"elasticGpuSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceElasticGpuSpecification"},"description":"An elastic GPU to associate with the instance. Amazon Elastic Graphics is no longer available.","replaceOnChanges":true},"elasticInferenceAccelerators":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceElasticInferenceAccelerator"},"description":"An elastic inference accelerator to associate with the instance. Amazon Elastic Inference is no longer available.","replaceOnChanges":true},"enclaveOptions":{"$ref":"#/types/aws-native:ec2:EnclaveOptionsProperties","description":"Indicates whether the instance is enabled for AWS Nitro Enclaves.","replaceOnChanges":true},"hibernationOptions":{"$ref":"#/types/aws-native:ec2:HibernationOptionsProperties","description":"Indicates whether an instance is enabled for hibernation.","replaceOnChanges":true},"hostId":{"type":"string","description":"If you specify host for the Affinity property, the ID of a dedicated host that the instance is associated with. If you don't specify an ID, Amazon EC2 launches the instance onto any available, compatible dedicated host in your account."},"hostResourceGroupArn":{"type":"string","description":"The ARN of the host resource group in which to launch the instances. If you specify a host resource group ARN, omit the Tenancy parameter or set it to host.","replaceOnChanges":true},"iamInstanceProfile":{"type":"string","description":"The IAM instance profile."},"imageId":{"type":"string","description":"The ID of the AMI. An AMI ID is required to launch an instance and must be specified here or in a launch template.","replaceOnChanges":true},"instanceId":{"type":"string","description":"The EC2 Instance ID."},"instanceInitiatedShutdownBehavior":{"type":"string","description":"Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown)."},"instanceType":{"type":"string","description":"The instance type."},"ipv6AddressCount":{"type":"integer","description":"[EC2-VPC] The number of IPv6 addresses to associate with the primary network interface. Amazon EC2 chooses the IPv6 addresses from the range of your subnet.","replaceOnChanges":true},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceIpv6Address"},"description":"[EC2-VPC] The IPv6 addresses from the range of the subnet to associate with the primary network interface.","replaceOnChanges":true},"kernelId":{"type":"string","description":"The ID of the kernel."},"keyName":{"type":"string","description":"The name of the key pair.","replaceOnChanges":true},"launchTemplate":{"$ref":"#/types/aws-native:ec2:InstanceLaunchTemplateSpecification","description":"The launch template to use to launch the instances.","replaceOnChanges":true},"licenseSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceLicenseSpecification"},"description":"The license configurations.","replaceOnChanges":true},"metadataOptions":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptions","description":"The metadata options for the instance"},"monitoring":{"type":"boolean","description":"Specifies whether detailed monitoring is enabled for the instance."},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceNetworkInterface"},"description":"The network interfaces to associate with the instance.","replaceOnChanges":true},"placementGroupName":{"type":"string","description":"The name of an existing placement group that you want to launch the instance into (cluster | partition | spread).","replaceOnChanges":true},"privateDnsName":{"type":"string","description":"The private DNS name of the specified instance. For example: ip-10-24-34-0.ec2.internal."},"privateDnsNameOptions":{"$ref":"#/types/aws-native:ec2:InstancePrivateDnsNameOptions","description":"The options for the instance hostname."},"privateIp":{"type":"string","description":"The private IP address of the specified instance. For example: 10.24.34.0."},"privateIpAddress":{"type":"string","description":"[EC2-VPC] The primary IPv4 address. You must specify a value from the IPv4 address range of the subnet.","replaceOnChanges":true},"propagateTagsToVolumeOnCreation":{"type":"boolean","description":"Indicates whether to assign the tags from the instance to all of the volumes attached to the instance at launch. If you specify true and you assign tags to the instance, those tags are automatically assigned to all of the volumes that you attach to the instance at launch. If you specify false, those tags are not assigned to the attached volumes."},"publicDnsName":{"type":"string","description":"The public DNS name of the specified instance. For example: ec2-107-20-50-45.compute-1.amazonaws.com."},"publicIp":{"type":"string","description":"The public IP address of the specified instance. For example: 192.0.2.0."},"ramdiskId":{"type":"string","description":"The ID of the RAM disk to select."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"the names of the security groups. For a nondefault VPC, you must use security group IDs instead.","replaceOnChanges":true},"sourceDestCheck":{"type":"boolean","description":"Specifies whether to enable an instance launched in a VPC to perform NAT."},"ssmAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceSsmAssociation"},"description":"The SSM document and parameter values in AWS Systems Manager to associate with this instance."},"state":{"$ref":"#/types/aws-native:ec2:InstanceState","description":"The current state of the instance."},"subnetId":{"type":"string","description":"[EC2-VPC] The ID of the subnet to launch the instance into.\n\n","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the instance."},"tenancy":{"type":"string","description":"The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware."},"userData":{"type":"string","description":"The user data to make available to the instance."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceVolume"},"description":"The volumes to attach to the instance."},"vpcId":{"type":"string","description":"The ID of the VPC that the instance is running in."}},"type":"object","required":["instanceId","privateDnsName","privateIp","publicDnsName","publicIp","state","vpcId"],"inputProperties":{"additionalInfo":{"type":"string","description":"This property is reserved for internal use. If you use it, the stack fails with this error: Bad property set: [Testing this property] (Service: AmazonEC2; Status Code: 400; Error Code: InvalidParameterCombination; Request ID: 0XXXXXX-49c7-4b40-8bcc-76885dcXXXXX)."},"affinity":{"$ref":"#/types/aws-native:ec2:InstanceAffinity","description":"Indicates whether the instance is associated with a dedicated host. If you want the instance to always restart on the same host on which it was launched, specify host. If you want the instance to restart on any available host, but try to launch onto the last host it ran on (on a best-effort basis), specify default."},"availabilityZone":{"type":"string","description":"The Availability Zone of the instance."},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceBlockDeviceMapping"},"description":"The block device mapping entries that defines the block devices to attach to the instance at launch."},"cpuOptions":{"$ref":"#/types/aws-native:ec2:CpuOptionsProperties","description":"The CPU options for the instance."},"creditSpecification":{"$ref":"#/types/aws-native:ec2:CreditSpecificationProperties","description":"The credit option for CPU usage of the burstable performance instance. Valid values are standard and unlimited."},"disableApiTermination":{"type":"boolean","description":"If you set this parameter to true, you can't terminate the instance using the Amazon EC2 console, CLI, or API; otherwise, you can."},"ebsOptimized":{"type":"boolean","description":"Indicates whether the instance is optimized for Amazon EBS I/O."},"elasticGpuSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceElasticGpuSpecification"},"description":"An elastic GPU to associate with the instance. Amazon Elastic Graphics is no longer available."},"elasticInferenceAccelerators":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceElasticInferenceAccelerator"},"description":"An elastic inference accelerator to associate with the instance. Amazon Elastic Inference is no longer available."},"enclaveOptions":{"$ref":"#/types/aws-native:ec2:EnclaveOptionsProperties","description":"Indicates whether the instance is enabled for AWS Nitro Enclaves."},"hibernationOptions":{"$ref":"#/types/aws-native:ec2:HibernationOptionsProperties","description":"Indicates whether an instance is enabled for hibernation."},"hostId":{"type":"string","description":"If you specify host for the Affinity property, the ID of a dedicated host that the instance is associated with. If you don't specify an ID, Amazon EC2 launches the instance onto any available, compatible dedicated host in your account."},"hostResourceGroupArn":{"type":"string","description":"The ARN of the host resource group in which to launch the instances. If you specify a host resource group ARN, omit the Tenancy parameter or set it to host."},"iamInstanceProfile":{"type":"string","description":"The IAM instance profile."},"imageId":{"type":"string","description":"The ID of the AMI. An AMI ID is required to launch an instance and must be specified here or in a launch template."},"instanceInitiatedShutdownBehavior":{"type":"string","description":"Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown)."},"instanceType":{"type":"string","description":"The instance type."},"ipv6AddressCount":{"type":"integer","description":"[EC2-VPC] The number of IPv6 addresses to associate with the primary network interface. Amazon EC2 chooses the IPv6 addresses from the range of your subnet."},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceIpv6Address"},"description":"[EC2-VPC] The IPv6 addresses from the range of the subnet to associate with the primary network interface."},"kernelId":{"type":"string","description":"The ID of the kernel."},"keyName":{"type":"string","description":"The name of the key pair."},"launchTemplate":{"$ref":"#/types/aws-native:ec2:InstanceLaunchTemplateSpecification","description":"The launch template to use to launch the instances."},"licenseSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceLicenseSpecification"},"description":"The license configurations."},"metadataOptions":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptions","description":"The metadata options for the instance"},"monitoring":{"type":"boolean","description":"Specifies whether detailed monitoring is enabled for the instance."},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceNetworkInterface"},"description":"The network interfaces to associate with the instance."},"placementGroupName":{"type":"string","description":"The name of an existing placement group that you want to launch the instance into (cluster | partition | spread)."},"privateDnsNameOptions":{"$ref":"#/types/aws-native:ec2:InstancePrivateDnsNameOptions","description":"The options for the instance hostname."},"privateIpAddress":{"type":"string","description":"[EC2-VPC] The primary IPv4 address. You must specify a value from the IPv4 address range of the subnet."},"propagateTagsToVolumeOnCreation":{"type":"boolean","description":"Indicates whether to assign the tags from the instance to all of the volumes attached to the instance at launch. If you specify true and you assign tags to the instance, those tags are automatically assigned to all of the volumes that you attach to the instance at launch. If you specify false, those tags are not assigned to the attached volumes."},"ramdiskId":{"type":"string","description":"The ID of the RAM disk to select."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"the names of the security groups. For a nondefault VPC, you must use security group IDs instead."},"sourceDestCheck":{"type":"boolean","description":"Specifies whether to enable an instance launched in a VPC to perform NAT."},"ssmAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceSsmAssociation"},"description":"The SSM document and parameter values in AWS Systems Manager to associate with this instance."},"subnetId":{"type":"string","description":"[EC2-VPC] The ID of the subnet to launch the instance into.\n\n"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the instance."},"tenancy":{"type":"string","description":"The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware."},"userData":{"type":"string","description":"The user data to make available to the instance."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:InstanceVolume"},"description":"The volumes to attach to the instance."}}},"aws-native:ec2:InstanceConnectEndpoint":{"description":"Resource Type definition for AWS::EC2::InstanceConnectEndpoint","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone of the EC2 Instance Connect Endpoint"},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone of the EC2 Instance Connect Endpoint"},"awsId":{"type":"string","description":"The ID of the EC2 Instance Connect Endpoint."},"clientToken":{"type":"string","description":"The client token of the instance connect endpoint.","replaceOnChanges":true},"createdAt":{"type":"string","description":"The date and time that the EC2 Instance Connect Endpoint was created"},"instanceConnectEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the EC2 Instance Connect Endpoint"},"networkInterfaceIds":{"type":"array","items":{"type":"string"},"description":"The ID of the elastic network interface that Amazon EC2 automatically created when creating the EC2 Instance Connect Endpoint"},"ownerId":{"type":"string","description":"The ID of the AWS account that created the EC2 Instance Connect Endpoint"},"preserveClientIp":{"type":"boolean","description":"Indicates whether your client's IP address is preserved as the source when you connect to a resource.","replaceOnChanges":true},"publicDnsNames":{"$ref":"#/types/aws-native:ec2:InstanceConnectEndpointPublicDnsNames","description":"The public DNS names of the endpoint"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security groups associated with the endpoint.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:ec2:InstanceConnectEndpointState","description":"The current state of the EC2 Instance Connect Endpoint"},"stateMessage":{"type":"string","description":"The message for the current state of the EC2 Instance Connect Endpoint. Can include a failure message"},"subnetId":{"type":"string","description":"The ID of the subnet in which the EC2 Instance Connect Endpoint was created.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the EC2 Instance Connect Endpoint."},"vpcId":{"type":"string","description":"The ID of the VPC in which the EC2 Instance Connect Endpoint was created"}},"type":"object","required":["availabilityZone","availabilityZoneId","awsId","createdAt","instanceConnectEndpointArn","networkInterfaceIds","ownerId","publicDnsNames","state","stateMessage","subnetId","vpcId"],"inputProperties":{"clientToken":{"type":"string","description":"The client token of the instance connect endpoint."},"preserveClientIp":{"type":"boolean","description":"Indicates whether your client's IP address is preserved as the source when you connect to a resource."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security groups associated with the endpoint."},"subnetId":{"type":"string","description":"The ID of the subnet in which the EC2 Instance Connect Endpoint was created."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the EC2 Instance Connect Endpoint."}},"requiredInputs":["subnetId"]},"aws-native:ec2:InternetGateway":{"description":"Allocates an internet gateway for use with a VPC. After creating the Internet gateway, you then attach it to a VPC.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myInternetGateway = new AwsNative.Ec2.InternetGateway(\"myInternetGateway\", new()\n    {\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"stack\",\n                Value = \"production\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ec2.NewInternetGateway(ctx, \"myInternetGateway\", \u0026ec2.InternetGatewayArgs{\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"stack\"),\n\t\t\t\t\tValue: pulumi.String(\"production\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myInternetGateway = new aws_native.ec2.InternetGateway(\"myInternetGateway\", {tags: [{\n    key: \"stack\",\n    value: \"production\",\n}]});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_internet_gateway = aws_native.ec2.InternetGateway(\"myInternetGateway\", tags=[{\n    \"key\": \"stack\",\n    \"value\": \"production\",\n}])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"internetGatewayId":{"type":"string","description":"The ID of the internet gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags to assign to the internet gateway."}},"type":"object","required":["internetGatewayId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags to assign to the internet gateway."}}},"aws-native:ec2:IpPoolRouteTableAssociation":{"description":"Resource Type definition for AWS::EC2::IpPoolRouteTableAssociation","properties":{"associationId":{"type":"string","description":"The route table association ID."},"publicIpv4Pool":{"type":"string","description":"The ID of the public IPv4 pool.","replaceOnChanges":true},"routeTableId":{"type":"string","description":"The ID of the route table.","replaceOnChanges":true}},"type":"object","required":["associationId","publicIpv4Pool","routeTableId"],"inputProperties":{"publicIpv4Pool":{"type":"string","description":"The ID of the public IPv4 pool."},"routeTableId":{"type":"string","description":"The ID of the route table."}},"requiredInputs":["publicIpv4Pool","routeTableId"]},"aws-native:ec2:Ipam":{"description":"Resource Schema of AWS::EC2::IPAM Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM."},"defaultResourceDiscoveryAssociationId":{"type":"string","description":"The Id of the default association to the default resource discovery, created with this IPAM."},"defaultResourceDiscoveryId":{"type":"string","description":"The Id of the default resource discovery, created with this IPAM."},"defaultResourceDiscoveryOrganizationalUnitExclusions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamOrganizationalUnitExclusion"},"description":"A set of organizational unit (OU) exclusions for the default resource discovery, created with this IPAM."},"description":{"type":"string","description":"The description for the IPAM."},"enablePrivateGua":{"type":"boolean","description":"Enable provisioning of GUA space in private pools."},"ipamId":{"type":"string","description":"Id of the IPAM."},"meteredAccount":{"$ref":"#/types/aws-native:ec2:IpamMeteredAccount","description":"A metered account is an account that is charged for active IP addresses managed in IPAM"},"operatingRegions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamOperatingRegion"},"description":"The regions IPAM is enabled for. Allows pools to be created in these regions, as well as enabling monitoring"},"privateDefaultScopeId":{"type":"string","description":"The Id of the default scope for publicly routable IP space, created with this IPAM."},"publicDefaultScopeId":{"type":"string","description":"The Id of the default scope for publicly routable IP space, created with this IPAM."},"resourceDiscoveryAssociationCount":{"type":"integer","description":"The count of resource discoveries associated with this IPAM."},"scopeCount":{"type":"integer","description":"The number of scopes that currently exist in this IPAM."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"tier":{"$ref":"#/types/aws-native:ec2:IpamTier","description":"The tier of the IPAM."}},"type":"object","required":["arn","defaultResourceDiscoveryAssociationId","defaultResourceDiscoveryId","ipamId","privateDefaultScopeId","publicDefaultScopeId","resourceDiscoveryAssociationCount","scopeCount"],"inputProperties":{"defaultResourceDiscoveryOrganizationalUnitExclusions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamOrganizationalUnitExclusion"},"description":"A set of organizational unit (OU) exclusions for the default resource discovery, created with this IPAM."},"description":{"type":"string","description":"The description for the IPAM."},"enablePrivateGua":{"type":"boolean","description":"Enable provisioning of GUA space in private pools."},"meteredAccount":{"$ref":"#/types/aws-native:ec2:IpamMeteredAccount","description":"A metered account is an account that is charged for active IP addresses managed in IPAM"},"operatingRegions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamOperatingRegion"},"description":"The regions IPAM is enabled for. Allows pools to be created in these regions, as well as enabling monitoring"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"tier":{"$ref":"#/types/aws-native:ec2:IpamTier","description":"The tier of the IPAM."}}},"aws-native:ec2:IpamAllocation":{"description":"Resource Schema of AWS::EC2::IPAMAllocation Type","properties":{"cidr":{"type":"string","description":"The CIDR you would like to allocate from the IPAM pool. Note the following:\n\n- If there is no DefaultNetmaskLength allocation rule set on the pool, you must specify either the NetmaskLength or the CIDR.\n- If the DefaultNetmaskLength allocation rule is set on the pool, you can specify either the NetmaskLength or the CIDR and the DefaultNetmaskLength allocation rule will be ignored.\n\nPossible values: Any available IPv4 or IPv6 CIDR.","replaceOnChanges":true},"description":{"type":"string","description":"A description for the allocation.","replaceOnChanges":true},"ipamPoolAllocationId":{"type":"string","description":"Id of the allocation."},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool.","replaceOnChanges":true},"netmaskLength":{"type":"integer","description":"The desired netmask length of the allocation. If set, IPAM will choose a block of free space with this size and return the CIDR representing it.","replaceOnChanges":true}},"type":"object","required":["ipamPoolAllocationId","ipamPoolId"],"inputProperties":{"cidr":{"type":"string","description":"The CIDR you would like to allocate from the IPAM pool. Note the following:\n\n- If there is no DefaultNetmaskLength allocation rule set on the pool, you must specify either the NetmaskLength or the CIDR.\n- If the DefaultNetmaskLength allocation rule is set on the pool, you can specify either the NetmaskLength or the CIDR and the DefaultNetmaskLength allocation rule will be ignored.\n\nPossible values: Any available IPv4 or IPv6 CIDR."},"description":{"type":"string","description":"A description for the allocation."},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool."},"netmaskLength":{"type":"integer","description":"The desired netmask length of the allocation. If set, IPAM will choose a block of free space with this size and return the CIDR representing it."}},"requiredInputs":["ipamPoolId"]},"aws-native:ec2:IpamPool":{"description":"Resource Schema of AWS::EC2::IPAMPool Type","properties":{"addressFamily":{"type":"string","description":"The address family of the address space in this pool. Either IPv4 or IPv6.","replaceOnChanges":true},"allocationDefaultNetmaskLength":{"type":"integer","description":"The default netmask length for allocations made from this pool. This value is used when the netmask length of an allocation isn't specified."},"allocationMaxNetmaskLength":{"type":"integer","description":"The maximum allowed netmask length for allocations made from this pool."},"allocationMinNetmaskLength":{"type":"integer","description":"The minimum allowed netmask length for allocations made from this pool."},"allocationResourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPoolTag"},"description":"When specified, an allocation will not be allowed unless a resource has a matching set of tags."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM Pool."},"autoImport":{"type":"boolean","description":"Determines what to do if IPAM discovers resources that haven't been assigned an allocation. If set to true, an allocation will be made automatically."},"awsService":{"$ref":"#/types/aws-native:ec2:IpamPoolAwsService","description":"Limits which service in Amazon Web Services that the pool can be used in.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the IPAM pool."},"ipamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM this pool is a part of."},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool."},"ipamScopeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the scope this pool is a part of."},"ipamScopeId":{"type":"string","description":"The Id of the scope this pool is a part of.","replaceOnChanges":true},"ipamScopeType":{"$ref":"#/types/aws-native:ec2:IpamPoolIpamScopeType","description":"Determines whether this scope contains publicly routable space or space for a private network"},"locale":{"type":"string","description":"The region of this pool. If not set, this will default to \"None\" which will disable non-custom allocations. If the locale has been specified for the source pool, this value must match.","replaceOnChanges":true},"poolDepth":{"type":"integer","description":"The depth of this pool in the source pool hierarchy."},"provisionedCidrs":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPoolProvisionedCidr"},"description":"A list of cidrs representing the address space available for allocation in this pool."},"publicIpSource":{"$ref":"#/types/aws-native:ec2:IpamPoolPublicIpSource","description":"The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is `byoip`.","replaceOnChanges":true},"publiclyAdvertisable":{"type":"boolean","description":"Determines whether or not address space from this pool is publicly advertised. Must be set if and only if the pool is IPv6.","replaceOnChanges":true},"sourceIpamPoolId":{"type":"string","description":"The Id of this pool's source. If set, all space provisioned in this pool must be free space provisioned in the parent pool.","replaceOnChanges":true},"sourceResource":{"$ref":"#/types/aws-native:ec2:IpamPoolSourceResource","description":"The resource used to provision CIDRs to a resource planning pool.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:ec2:IpamPoolState","description":"The state of this pool. This can be one of the following values: \"create-in-progress\", \"create-complete\", \"modify-in-progress\", \"modify-complete\", \"delete-in-progress\", or \"delete-complete\""},"stateMessage":{"type":"string","description":"An explanation of how the pool arrived at it current state."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["addressFamily","arn","ipamArn","ipamPoolId","ipamScopeArn","ipamScopeId","ipamScopeType","poolDepth","state","stateMessage"],"inputProperties":{"addressFamily":{"type":"string","description":"The address family of the address space in this pool. Either IPv4 or IPv6."},"allocationDefaultNetmaskLength":{"type":"integer","description":"The default netmask length for allocations made from this pool. This value is used when the netmask length of an allocation isn't specified."},"allocationMaxNetmaskLength":{"type":"integer","description":"The maximum allowed netmask length for allocations made from this pool."},"allocationMinNetmaskLength":{"type":"integer","description":"The minimum allowed netmask length for allocations made from this pool."},"allocationResourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPoolTag"},"description":"When specified, an allocation will not be allowed unless a resource has a matching set of tags."},"autoImport":{"type":"boolean","description":"Determines what to do if IPAM discovers resources that haven't been assigned an allocation. If set to true, an allocation will be made automatically."},"awsService":{"$ref":"#/types/aws-native:ec2:IpamPoolAwsService","description":"Limits which service in Amazon Web Services that the pool can be used in."},"description":{"type":"string","description":"The description of the IPAM pool."},"ipamScopeId":{"type":"string","description":"The Id of the scope this pool is a part of."},"locale":{"type":"string","description":"The region of this pool. If not set, this will default to \"None\" which will disable non-custom allocations. If the locale has been specified for the source pool, this value must match."},"provisionedCidrs":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPoolProvisionedCidr"},"description":"A list of cidrs representing the address space available for allocation in this pool."},"publicIpSource":{"$ref":"#/types/aws-native:ec2:IpamPoolPublicIpSource","description":"The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is `byoip`."},"publiclyAdvertisable":{"type":"boolean","description":"Determines whether or not address space from this pool is publicly advertised. Must be set if and only if the pool is IPv6."},"sourceIpamPoolId":{"type":"string","description":"The Id of this pool's source. If set, all space provisioned in this pool must be free space provisioned in the parent pool."},"sourceResource":{"$ref":"#/types/aws-native:ec2:IpamPoolSourceResource","description":"The resource used to provision CIDRs to a resource planning pool."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["addressFamily","ipamScopeId"]},"aws-native:ec2:IpamPoolCidr":{"description":"Resource Schema of AWS::EC2::IPAMPoolCidr Type","properties":{"cidr":{"type":"string","description":"Represents a single IPv4 or IPv6 CIDR","replaceOnChanges":true},"ipamPoolCidrId":{"type":"string","description":"Id of the IPAM Pool Cidr."},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool.","replaceOnChanges":true},"netmaskLength":{"type":"integer","description":"The desired netmask length of the provision. If set, IPAM will choose a block of free space with this size and return the CIDR representing it.","replaceOnChanges":true},"state":{"type":"string","description":"Provisioned state of the cidr."}},"type":"object","required":["ipamPoolCidrId","ipamPoolId","state"],"inputProperties":{"cidr":{"type":"string","description":"Represents a single IPv4 or IPv6 CIDR"},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool."},"netmaskLength":{"type":"integer","description":"The desired netmask length of the provision. If set, IPAM will choose a block of free space with this size and return the CIDR representing it."}},"requiredInputs":["ipamPoolId"]},"aws-native:ec2:IpamPrefixListResolver":{"description":"Resource Type definition for AWS::EC2::IPAMPrefixListResolver","properties":{"addressFamily":{"type":"string","description":"The address family of the address space in this Prefix List Resolver. Either IPv4 or IPv6.","replaceOnChanges":true},"description":{"type":"string"},"ipamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM this Prefix List Resolver is a part of."},"ipamId":{"type":"string","description":"The Id of the IPAM this Prefix List Resolver is a part of.","replaceOnChanges":true},"ipamPrefixListResolverArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM Prefix List Resolver"},"ipamPrefixListResolverId":{"type":"string","description":"Id of the IPAM Prefix List Resolver."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRule"},"description":"Rules define the business logic for selecting CIDRs from IPAM."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["addressFamily","ipamArn","ipamPrefixListResolverArn","ipamPrefixListResolverId"],"inputProperties":{"addressFamily":{"type":"string","description":"The address family of the address space in this Prefix List Resolver. Either IPv4 or IPv6."},"description":{"type":"string"},"ipamId":{"type":"string","description":"The Id of the IPAM this Prefix List Resolver is a part of."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRule"},"description":"Rules define the business logic for selecting CIDRs from IPAM."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["addressFamily"]},"aws-native:ec2:IpamPrefixListResolverTarget":{"description":"Resource Type definition for AWS::EC2::IPAMPrefixListResolverTarget","properties":{"desiredVersion":{"type":"integer","description":"The desired version of the Prefix List Resolver that this Target should synchronize with."},"ipamPrefixListResolverId":{"type":"string","description":"The Id of the IPAM Prefix List Resolver associated with this Target.","replaceOnChanges":true},"ipamPrefixListResolverTargetArn":{"type":"string","description":"Id of the IPAM Prefix List Resolver Target."},"ipamPrefixListResolverTargetId":{"type":"string","description":"Id of the IPAM Prefix List Resolver Target."},"prefixListId":{"type":"string","description":"The Id of the Managed Prefix List.","replaceOnChanges":true},"prefixListRegion":{"type":"string","description":"The region that the Managed Prefix List is located in.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trackLatestVersion":{"type":"boolean","description":"Indicates whether this Target automatically tracks the latest version of the Prefix List Resolver."}},"type":"object","required":["ipamPrefixListResolverId","ipamPrefixListResolverTargetArn","ipamPrefixListResolverTargetId","prefixListId","prefixListRegion","trackLatestVersion"],"inputProperties":{"desiredVersion":{"type":"integer","description":"The desired version of the Prefix List Resolver that this Target should synchronize with."},"ipamPrefixListResolverId":{"type":"string","description":"The Id of the IPAM Prefix List Resolver associated with this Target."},"prefixListId":{"type":"string","description":"The Id of the Managed Prefix List."},"prefixListRegion":{"type":"string","description":"The region that the Managed Prefix List is located in."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trackLatestVersion":{"type":"boolean","description":"Indicates whether this Target automatically tracks the latest version of the Prefix List Resolver."}},"requiredInputs":["ipamPrefixListResolverId","prefixListId","prefixListRegion","trackLatestVersion"]},"aws-native:ec2:IpamResourceDiscovery":{"description":"Resource Schema of AWS::EC2::IPAMResourceDiscovery Type","properties":{"description":{"type":"string","description":"The resource discovery description."},"ipamResourceDiscoveryArn":{"type":"string","description":"Amazon Resource Name (Arn) for the Resource Discovery."},"ipamResourceDiscoveryId":{"type":"string","description":"Id of the IPAM Pool."},"ipamResourceDiscoveryRegion":{"type":"string","description":"The region the resource discovery is setup in. "},"isDefault":{"type":"boolean","description":"Determines whether or not address space from this pool is publicly advertised. Must be set if and only if the pool is IPv6."},"operatingRegions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamResourceDiscoveryIpamOperatingRegion"},"description":"The regions Resource Discovery is enabled for. Allows resource discoveries to be created in these regions, as well as enabling monitoring"},"organizationalUnitExclusions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamResourceDiscoveryOrganizationalUnitExclusion"},"description":"A set of organizational unit (OU) exclusions for this resource."},"ownerId":{"type":"string","description":"Owner Account ID of the Resource Discovery"},"state":{"type":"string","description":"The state of this Resource Discovery."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["ipamResourceDiscoveryArn","ipamResourceDiscoveryId","ipamResourceDiscoveryRegion","isDefault","ownerId","state"],"inputProperties":{"description":{"type":"string","description":"The resource discovery description."},"operatingRegions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamResourceDiscoveryIpamOperatingRegion"},"description":"The regions Resource Discovery is enabled for. Allows resource discoveries to be created in these regions, as well as enabling monitoring"},"organizationalUnitExclusions":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:IpamResourceDiscoveryOrganizationalUnitExclusion"},"description":"A set of organizational unit (OU) exclusions for this resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:ec2:IpamResourceDiscoveryAssociation":{"description":"Resource Schema of AWS::EC2::IPAMResourceDiscoveryAssociation Type","properties":{"ipamArn":{"type":"string","description":"Arn of the IPAM."},"ipamId":{"type":"string","description":"The Id of the IPAM this Resource Discovery is associated to.","replaceOnChanges":true},"ipamRegion":{"type":"string","description":"The home region of the IPAM."},"ipamResourceDiscoveryAssociationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource discovery association is a part of."},"ipamResourceDiscoveryAssociationId":{"type":"string","description":"Id of the IPAM Resource Discovery Association."},"ipamResourceDiscoveryId":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM Resource Discovery Association.","replaceOnChanges":true},"isDefault":{"type":"boolean","description":"If the Resource Discovery Association exists due as part of CreateIpam."},"ownerId":{"type":"string","description":"The AWS Account ID for the account where the shared IPAM exists."},"resourceDiscoveryStatus":{"type":"string","description":"The status of the resource discovery."},"state":{"type":"string","description":"The operational state of the Resource Discovery Association. Related to Create/Delete activities."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["ipamArn","ipamId","ipamRegion","ipamResourceDiscoveryAssociationArn","ipamResourceDiscoveryAssociationId","ipamResourceDiscoveryId","isDefault","ownerId","resourceDiscoveryStatus","state"],"inputProperties":{"ipamId":{"type":"string","description":"The Id of the IPAM this Resource Discovery is associated to."},"ipamResourceDiscoveryId":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM Resource Discovery Association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["ipamId","ipamResourceDiscoveryId"]},"aws-native:ec2:IpamScope":{"description":"Resource Schema of AWS::EC2::IPAMScope Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM scope."},"description":{"type":"string","description":"The description of the scope."},"externalAuthorityConfiguration":{"$ref":"#/types/aws-native:ec2:IpamScopeExternalAuthorityConfiguration","description":"The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.\n\nFor more information, see [Integrate VPC IPAM with Infoblox infrastructure](https://docs.aws.amazon.com/vpc/latest/ipam/integrate-infoblox-ipam.html) in the *Amazon VPC IPAM User Guide* ."},"ipamArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IPAM this scope is a part of."},"ipamId":{"type":"string","description":"The Id of the IPAM this scope is a part of.","replaceOnChanges":true},"ipamScopeId":{"type":"string","description":"Id of the IPAM scope."},"ipamScopeType":{"$ref":"#/types/aws-native:ec2:IpamScopeType","description":"Determines whether this scope contains publicly routable space or space for a private network"},"isDefault":{"type":"boolean","description":"Is this one of the default scopes created with the IPAM."},"poolCount":{"type":"integer","description":"The number of pools that currently exist in this scope."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","ipamArn","ipamId","ipamScopeId","ipamScopeType","isDefault","poolCount"],"inputProperties":{"description":{"type":"string","description":"The description of the scope."},"externalAuthorityConfiguration":{"$ref":"#/types/aws-native:ec2:IpamScopeExternalAuthorityConfiguration","description":"The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.\n\nFor more information, see [Integrate VPC IPAM with Infoblox infrastructure](https://docs.aws.amazon.com/vpc/latest/ipam/integrate-infoblox-ipam.html) in the *Amazon VPC IPAM User Guide* ."},"ipamId":{"type":"string","description":"The Id of the IPAM this scope is a part of."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["ipamId"]},"aws-native:ec2:KeyPair":{"description":"Specifies a key pair for use with an EC2long instance as follows:\n  +  To import an existing key pair, include the ``PublicKeyMaterial`` property.\n  +  To create a new key pair, omit the ``PublicKeyMaterial`` property.\n  \n When you import an existing key pair, you specify the public key material for the key. We assume that you have the private key material for the key. CFNlong does not create or return the private key material when you import a key pair.\n When you create a new key pair, the private key is saved to SYSlong Parameter Store, using a parameter with the following name: ``/ec2/keypair/{key_pair_id}``. For more information about retrieving private key, and the required permissions, see [Create a key pair using](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-key-pairs.html#create-key-pair-cloudformation) in the *User Guide*.\n When CFN deletes a key pair that was created or imported by a stack, it also deletes the parameter that was used to store the private key material in Parameter Store.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var newKeyPair = new AwsNative.Ec2.KeyPair(\"newKeyPair\", new()\n    {\n        KeyName = \"MyKeyPair\",\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"ami-02b92c281a4d3dc79\",\n        KeyName = newKeyPair.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tnewKeyPair, err := ec2.NewKeyPair(ctx, \"newKeyPair\", \u0026ec2.KeyPairArgs{\n\t\t\tKeyName: pulumi.String(\"MyKeyPair\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId: pulumi.String(\"ami-02b92c281a4d3dc79\"),\n\t\t\tKeyName: newKeyPair.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst newKeyPair = new aws_native.ec2.KeyPair(\"newKeyPair\", {keyName: \"MyKeyPair\"});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"ami-02b92c281a4d3dc79\",\n    keyName: newKeyPair.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nnew_key_pair = aws_native.ec2.KeyPair(\"newKeyPair\", key_name=\"MyKeyPair\")\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"ami-02b92c281a4d3dc79\",\n    key_name=new_key_pair.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var newKeyPair = new AwsNative.Ec2.KeyPair(\"newKeyPair\", new()\n    {\n        KeyName = \"MyKeyPair\",\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"ami-02b92c281a4d3dc79\",\n        KeyName = newKeyPair.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tnewKeyPair, err := ec2.NewKeyPair(ctx, \"newKeyPair\", \u0026ec2.KeyPairArgs{\n\t\t\tKeyName: pulumi.String(\"MyKeyPair\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId: pulumi.String(\"ami-02b92c281a4d3dc79\"),\n\t\t\tKeyName: newKeyPair.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst newKeyPair = new aws_native.ec2.KeyPair(\"newKeyPair\", {keyName: \"MyKeyPair\"});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"ami-02b92c281a4d3dc79\",\n    keyName: newKeyPair.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nnew_key_pair = aws_native.ec2.KeyPair(\"newKeyPair\", key_name=\"MyKeyPair\")\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"ami-02b92c281a4d3dc79\",\n    key_name=new_key_pair.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var importedKeyPair = new AwsNative.Ec2.KeyPair(\"importedKeyPair\", new()\n    {\n        KeyName = \"NameForMyImportedKeyPair\",\n        PublicKeyMaterial = \"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\",\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"ami-02b92c281a4d3dc79\",\n        KeyName = importedKeyPair.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\timportedKeyPair, err := ec2.NewKeyPair(ctx, \"importedKeyPair\", \u0026ec2.KeyPairArgs{\n\t\t\tKeyName:           pulumi.String(\"NameForMyImportedKeyPair\"),\n\t\t\tPublicKeyMaterial: pulumi.String(\"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId: pulumi.String(\"ami-02b92c281a4d3dc79\"),\n\t\t\tKeyName: importedKeyPair.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst importedKeyPair = new aws_native.ec2.KeyPair(\"importedKeyPair\", {\n    keyName: \"NameForMyImportedKeyPair\",\n    publicKeyMaterial: \"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\",\n});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"ami-02b92c281a4d3dc79\",\n    keyName: importedKeyPair.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nimported_key_pair = aws_native.ec2.KeyPair(\"importedKeyPair\",\n    key_name=\"NameForMyImportedKeyPair\",\n    public_key_material=\"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\")\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"ami-02b92c281a4d3dc79\",\n    key_name=imported_key_pair.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var importedKeyPair = new AwsNative.Ec2.KeyPair(\"importedKeyPair\", new()\n    {\n        KeyName = \"NameForMyImportedKeyPair\",\n        PublicKeyMaterial = \"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\",\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"ami-02b92c281a4d3dc79\",\n        KeyName = importedKeyPair.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\timportedKeyPair, err := ec2.NewKeyPair(ctx, \"importedKeyPair\", \u0026ec2.KeyPairArgs{\n\t\t\tKeyName:           pulumi.String(\"NameForMyImportedKeyPair\"),\n\t\t\tPublicKeyMaterial: pulumi.String(\"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId: pulumi.String(\"ami-02b92c281a4d3dc79\"),\n\t\t\tKeyName: importedKeyPair.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst importedKeyPair = new aws_native.ec2.KeyPair(\"importedKeyPair\", {\n    keyName: \"NameForMyImportedKeyPair\",\n    publicKeyMaterial: \"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\",\n});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"ami-02b92c281a4d3dc79\",\n    keyName: importedKeyPair.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nimported_key_pair = aws_native.ec2.KeyPair(\"importedKeyPair\",\n    key_name=\"NameForMyImportedKeyPair\",\n    public_key_material=\"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICfp1F7DhdWZdqkYAUGCzcBsLmJeu9izpIyGpmmg7eCz example\")\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"ami-02b92c281a4d3dc79\",\n    key_name=imported_key_pair.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"keyFingerprint":{"type":"string","description":"If you created the key pair using Amazon EC2:\n\n- For RSA key pairs, the key fingerprint is the SHA-1 digest of the DER encoded private key.\n- For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which is the default for OpenSSH, starting with [OpenSSH 6.8](https://docs.aws.amazon.com/http://www.openssh.com/txt/release-6.8) .\n\nIf you imported the key pair to Amazon EC2:\n\n- For RSA key pairs, the key fingerprint is the MD5 public key fingerprint as specified in section 4 of RFC 4716.\n- For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which is the default for OpenSSH, starting with [OpenSSH 6.8](https://docs.aws.amazon.com/http://www.openssh.com/txt/release-6.8) ."},"keyFormat":{"$ref":"#/types/aws-native:ec2:KeyPairKeyFormat","description":"The format of the key pair.\n Default: ``pem``","replaceOnChanges":true},"keyName":{"type":"string","description":"A unique name for the key pair.\n Constraints: Up to 255 ASCII characters","replaceOnChanges":true},"keyPairId":{"type":"string","description":"The ID of the key pair."},"keyType":{"$ref":"#/types/aws-native:ec2:KeyPairKeyType","description":"The type of key pair. Note that ED25519 keys are not supported for Windows instances.\n If the ``PublicKeyMaterial`` property is specified, the ``KeyType`` property is ignored, and the key type is inferred from the ``PublicKeyMaterial`` value.\n Default: ``rsa``","replaceOnChanges":true},"publicKeyMaterial":{"type":"string","description":"The public key material. The ``PublicKeyMaterial`` property is used to import a key pair. If this property is not specified, then a new key pair will be created.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags to apply to the key pair.","replaceOnChanges":true}},"type":"object","required":["keyFingerprint","keyName","keyPairId"],"inputProperties":{"keyFormat":{"$ref":"#/types/aws-native:ec2:KeyPairKeyFormat","description":"The format of the key pair.\n Default: ``pem``"},"keyName":{"type":"string","description":"A unique name for the key pair.\n Constraints: Up to 255 ASCII characters"},"keyType":{"$ref":"#/types/aws-native:ec2:KeyPairKeyType","description":"The type of key pair. Note that ED25519 keys are not supported for Windows instances.\n If the ``PublicKeyMaterial`` property is specified, the ``KeyType`` property is ignored, and the key type is inferred from the ``PublicKeyMaterial`` value.\n Default: ``rsa``"},"publicKeyMaterial":{"type":"string","description":"The public key material. The ``PublicKeyMaterial`` property is used to import a key pair. If this property is not specified, then a new key pair will be created."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags to apply to the key pair."}},"requiredInputs":["keyName"]},"aws-native:ec2:LaunchTemplate":{"description":"Specifies the properties for creating a launch template.\n The minimum required properties for specifying a launch template are as follows:\n  +  You must specify at least one property for the launch template data.\n  +  You can optionally specify a name for the launch template. If you do not specify a name, CFN creates a name for you.\n  \n A launch template can contain some or all of the configuration information to launch an instance. When you launch an instance using a launch template, instance properties that are not specified in the launch template use default values, except the ``ImageId`` property, which has no default value. If you do not specify an AMI ID for the launch template ``ImageId`` property, you must specify an AMI ID for the instance ``ImageId`` property.\n For more information, see [Launch an instance from a launch template](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html) in the *Amazon EC2 User Guide*.","properties":{"defaultVersionNumber":{"type":"string","description":"The default version of the launch template, such as 2.\n\nThe default version of a launch template cannot be specified in AWS CloudFormation . The default version can be set in the Amazon EC2 console or by using the `modify-launch-template` AWS CLI command."},"latestVersionNumber":{"type":"string","description":"The latest version of the launch template, such as `5` ."},"launchTemplateData":{"$ref":"#/types/aws-native:ec2:LaunchTemplateData","description":"The information for the launch template."},"launchTemplateId":{"type":"string","description":"The ID of the launch template."},"launchTemplateName":{"type":"string","description":"A name for the launch template.","replaceOnChanges":true},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateTagSpecification"},"description":"The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."},"versionDescription":{"type":"string","description":"A description for the first version of the launch template."}},"type":"object","required":["defaultVersionNumber","latestVersionNumber","launchTemplateData","launchTemplateId"],"inputProperties":{"launchTemplateData":{"$ref":"#/types/aws-native:ec2:LaunchTemplateData","description":"The information for the launch template."},"launchTemplateName":{"type":"string","description":"A name for the launch template."},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:LaunchTemplateTagSpecification"},"description":"The tags to apply to the launch template on creation. To tag the launch template, the resource type must be ``launch-template``.\n To specify the tags for resources that are created during instance launch, use [TagSpecifications](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-launchtemplate-launchtemplatedata.html#cfn-ec2-launchtemplate-launchtemplatedata-tagspecifications)."},"versionDescription":{"type":"string","description":"A description for the first version of the launch template."}},"requiredInputs":["launchTemplateData"]},"aws-native:ec2:LocalGatewayRoute":{"description":"Resource Type definition for Local Gateway Route which describes a route for a local gateway route table.","properties":{"destinationCidrBlock":{"type":"string","description":"The CIDR block used for destination matches.","replaceOnChanges":true},"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table.","replaceOnChanges":true},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the virtual interface group."},"networkInterfaceId":{"type":"string","description":"The ID of the network interface."},"state":{"type":"string","description":"The state of the route."},"type":{"type":"string","description":"The route type."}},"type":"object","required":["state","type"],"inputProperties":{"destinationCidrBlock":{"type":"string","description":"The CIDR block used for destination matches."},"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table."},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the virtual interface group."},"networkInterfaceId":{"type":"string","description":"The ID of the network interface."}}},"aws-native:ec2:LocalGatewayRouteTable":{"description":"Resource Type definition for Local Gateway Route Table which describes a route table for a local gateway.","properties":{"localGatewayId":{"type":"string","description":"The ID of the local gateway.","replaceOnChanges":true},"localGatewayRouteTableArn":{"type":"string","description":"The ARN of the local gateway route table."},"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table."},"mode":{"type":"string","description":"The mode of the local gateway route table.","replaceOnChanges":true},"outpostArn":{"type":"string","description":"The ARN of the outpost."},"ownerId":{"type":"string","description":"The owner of the local gateway route table."},"state":{"type":"string","description":"The state of the local gateway route table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the local gateway route table."}},"type":"object","required":["localGatewayId","localGatewayRouteTableArn","localGatewayRouteTableId","outpostArn","ownerId","state"],"inputProperties":{"localGatewayId":{"type":"string","description":"The ID of the local gateway."},"mode":{"type":"string","description":"The mode of the local gateway route table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the local gateway route table."}},"requiredInputs":["localGatewayId"]},"aws-native:ec2:LocalGatewayRouteTableVirtualInterfaceGroupAssociation":{"description":"Resource Type definition for Local Gateway Route Table Virtual Interface Group Association which describes a local gateway route table virtual interface group association for a local gateway.","properties":{"localGatewayId":{"type":"string","description":"The ID of the local gateway."},"localGatewayRouteTableArn":{"type":"string","description":"The ARN of the local gateway route table."},"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table.","replaceOnChanges":true},"localGatewayRouteTableVirtualInterfaceGroupAssociationId":{"type":"string","description":"The ID of the local gateway route table virtual interface group association."},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the local gateway route table virtual interface group.","replaceOnChanges":true},"ownerId":{"type":"string","description":"The owner of the local gateway route table virtual interface group association."},"state":{"type":"string","description":"The state of the local gateway route table virtual interface group association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the local gateway route table virtual interface group association."}},"type":"object","required":["localGatewayId","localGatewayRouteTableArn","localGatewayRouteTableId","localGatewayRouteTableVirtualInterfaceGroupAssociationId","localGatewayVirtualInterfaceGroupId","ownerId","state"],"inputProperties":{"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table."},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the local gateway route table virtual interface group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the local gateway route table virtual interface group association."}},"requiredInputs":["localGatewayRouteTableId","localGatewayVirtualInterfaceGroupId"]},"aws-native:ec2:LocalGatewayRouteTableVpcAssociation":{"description":"Resource Type definition for Local Gateway Route Table VPC Association which describes an association between a local gateway route table and a VPC.","properties":{"localGatewayId":{"type":"string","description":"The ID of the local gateway."},"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table.","replaceOnChanges":true},"localGatewayRouteTableVpcAssociationId":{"type":"string","description":"The ID of the association."},"state":{"type":"string","description":"The state of the association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the association."},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["localGatewayId","localGatewayRouteTableId","localGatewayRouteTableVpcAssociationId","state","vpcId"],"inputProperties":{"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the association."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["localGatewayRouteTableId","vpcId"]},"aws-native:ec2:LocalGatewayVirtualInterface":{"description":"Resource Type definition for Local Gateway Virtual Interface which describes a virtual interface for AWS Outposts local gateways.","properties":{"configurationState":{"type":"string","description":"The current state of the local gateway virtual interface"},"localAddress":{"type":"string","description":"The local address.","replaceOnChanges":true},"localBgpAsn":{"type":"integer","description":"The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP)"},"localGatewayId":{"type":"string","description":"The ID of the local gateway"},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the virtual interface group","replaceOnChanges":true},"localGatewayVirtualInterfaceId":{"type":"string","description":"The ID of the virtual interface"},"outpostLagId":{"type":"string","description":"The Outpost LAG ID.","replaceOnChanges":true},"ownerId":{"type":"string","description":"The ID of the Amazon Web Services account that owns the local gateway virtual interface group"},"peerAddress":{"type":"string","description":"The peer address.","replaceOnChanges":true},"peerBgpAsn":{"type":"integer","description":"The peer BGP ASN.","replaceOnChanges":true},"peerBgpAsnExtended":{"type":"integer","description":"The extended 32-bit ASN of the BGP peer for use with larger ASN values.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vlan":{"type":"integer","description":"The ID of the VLAN.","replaceOnChanges":true}},"type":"object","required":["configurationState","localAddress","localBgpAsn","localGatewayId","localGatewayVirtualInterfaceGroupId","localGatewayVirtualInterfaceId","outpostLagId","ownerId","peerAddress","vlan"],"inputProperties":{"localAddress":{"type":"string","description":"The local address."},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the virtual interface group"},"outpostLagId":{"type":"string","description":"The Outpost LAG ID."},"peerAddress":{"type":"string","description":"The peer address."},"peerBgpAsn":{"type":"integer","description":"The peer BGP ASN."},"peerBgpAsnExtended":{"type":"integer","description":"The extended 32-bit ASN of the BGP peer for use with larger ASN values."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vlan":{"type":"integer","description":"The ID of the VLAN."}},"requiredInputs":["localAddress","localGatewayVirtualInterfaceGroupId","outpostLagId","peerAddress","vlan"]},"aws-native:ec2:LocalGatewayVirtualInterfaceGroup":{"description":"Resource Type definition for LocalGatewayVirtualInterfaceGroup which describes a group of LocalGateway VirtualInterfaces","properties":{"configurationState":{"type":"string","description":"The current state of the local gateway virtual interface group"},"localBgpAsn":{"type":"integer","description":"The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP)","replaceOnChanges":true},"localBgpAsnExtended":{"type":"integer","description":"The extended 32-bit ASN for the local BGP configuration","replaceOnChanges":true},"localGatewayId":{"type":"string","description":"The ID of the local gateway","replaceOnChanges":true},"localGatewayVirtualInterfaceGroupArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the local gateway virtual interface group"},"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the virtual interface group"},"localGatewayVirtualInterfaceIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the virtual interfaces"},"ownerId":{"type":"string","description":"The ID of the Amazon Web Services account that owns the local gateway virtual interface group"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the virtual interface group"}},"type":"object","required":["configurationState","localGatewayId","localGatewayVirtualInterfaceGroupArn","localGatewayVirtualInterfaceGroupId","localGatewayVirtualInterfaceIds","ownerId"],"inputProperties":{"localBgpAsn":{"type":"integer","description":"The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP)"},"localBgpAsnExtended":{"type":"integer","description":"The extended 32-bit ASN for the local BGP configuration"},"localGatewayId":{"type":"string","description":"The ID of the local gateway"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the virtual interface group"}},"requiredInputs":["localGatewayId"]},"aws-native:ec2:NatGateway":{"description":"Specifies a network address translation (NAT) gateway in the specified subnet. You can create either a public NAT gateway or a private NAT gateway. The default is a public NAT gateway. If you create a public NAT gateway, you must specify an elastic IP address.\n With a NAT gateway, instances in a private subnet can connect to the internet, other AWS services, or an on-premises network using the IP address of the NAT gateway. For more information, see [NAT gateways](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html) in the *Amazon VPC User Guide*.\n If you add a default route (``AWS::EC2::Route`` resource) that points to a NAT gateway, specify the NAT gateway ID for the route's ``NatGatewayId`` property.\n  When you associate an Elastic IP address or secondary Elastic IP address with a public NAT gateway, the network border group of the Elastic IP address must match the network border group of the Availability Zone (AZ) that the public NAT gateway is in. Otherwise, the NAT gateway fails to launch. You can see the network border group for the AZ by viewing the details of the subnet. Similarly, you can view the network border group for the Elastic IP address by viewing its details. For more information, see [Allocate an Elastic IP address](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#allocate-eip) in the *Amazon VPC User Guide*.","properties":{"allocationId":{"type":"string","description":"[Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway. This property is required for a public NAT gateway and cannot be specified with a private NAT gateway.","replaceOnChanges":true},"autoProvisionZones":{"type":"string","description":"For regional NAT gateways only: Indicates whether AWS automatically manages AZ coverage. When enabled, the NAT gateway associates EIPs in all AZs where your VPC has subnets to handle outbound NAT traffic, expands to new AZs when you create subnets there, and retracts from AZs where you've removed all subnets. When disabled, you must manually manage which AZs the NAT gateway supports and their corresponding EIPs.\n\nA regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n\nFor more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide* ."},"autoScalingIps":{"type":"string","description":"For regional NAT gateways only: Indicates whether AWS automatically allocates additional Elastic IP addresses (EIPs) in an AZ when the NAT gateway needs more ports due to increased concurrent connections to a single destination from that AZ.\n\nFor more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide* ."},"availabilityMode":{"type":"string","description":"Indicates whether this is a zonal (single-AZ) or regional (multi-AZ) NAT gateway.\n A zonal NAT gateway is a NAT Gateway that provides redundancy and scalability within a single availability zone. A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n For more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide*.","replaceOnChanges":true},"availabilityZoneAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NatGatewayAvailabilityZoneAddress"},"description":"For regional NAT gateways only: Specifies which Availability Zones you want the NAT gateway to support and the Elastic IP addresses (EIPs) to use in each AZ. The regional NAT gateway uses these EIPs to handle outbound NAT traffic from their respective AZs. If not specified, the NAT gateway will automatically expand to new AZs and associate EIPs upon detection of an elastic network interface. If you specify this parameter, auto-expansion is disabled and you must manually manage AZ coverage.\n A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n For more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide*."},"connectivityType":{"type":"string","description":"Indicates whether the NAT gateway supports public or private connectivity. The default is public connectivity.","replaceOnChanges":true},"eniId":{"type":"string","description":"The ID of the network interface."},"maxDrainDurationSeconds":{"type":"integer","description":"The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds."},"natGatewayId":{"type":"string","description":"The ID of the NAT gateway."},"privateIpAddress":{"type":"string","description":"The private IPv4 address to assign to the NAT gateway. If you don't provide an address, a private IPv4 address will be automatically assigned.","replaceOnChanges":true},"routeTableId":{"type":"string","description":"For regional NAT gateways only, this is the ID of the NAT gateway."},"secondaryAllocationIds":{"type":"array","items":{"type":"string"},"description":"Secondary EIP allocation IDs. For more information, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html) in the *Amazon VPC User Guide*."},"secondaryPrivateIpAddressCount":{"type":"integer","description":"[Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating) in the *Amazon Virtual Private Cloud User Guide*.\n ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time."},"secondaryPrivateIpAddresses":{"type":"array","items":{"type":"string"},"description":"Secondary private IPv4 addresses. For more information about secondary addresses, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating) in the *Amazon Virtual Private Cloud User Guide*.\n ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time."},"subnetId":{"type":"string","description":"The ID of the subnet in which the NAT gateway is located.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the NAT gateway."},"vpcId":{"type":"string","description":"The ID of the VPC in which the NAT gateway is located.","replaceOnChanges":true}},"type":"object","required":["autoProvisionZones","autoScalingIps","eniId","natGatewayId","routeTableId"],"inputProperties":{"allocationId":{"type":"string","description":"[Public NAT gateway only] The allocation ID of the Elastic IP address that's associated with the NAT gateway. This property is required for a public NAT gateway and cannot be specified with a private NAT gateway."},"availabilityMode":{"type":"string","description":"Indicates whether this is a zonal (single-AZ) or regional (multi-AZ) NAT gateway.\n A zonal NAT gateway is a NAT Gateway that provides redundancy and scalability within a single availability zone. A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n For more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide*."},"availabilityZoneAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NatGatewayAvailabilityZoneAddress"},"description":"For regional NAT gateways only: Specifies which Availability Zones you want the NAT gateway to support and the Elastic IP addresses (EIPs) to use in each AZ. The regional NAT gateway uses these EIPs to handle outbound NAT traffic from their respective AZs. If not specified, the NAT gateway will automatically expand to new AZs and associate EIPs upon detection of an elastic network interface. If you specify this parameter, auto-expansion is disabled and you must manually manage AZ coverage.\n A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n For more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide*."},"connectivityType":{"type":"string","description":"Indicates whether the NAT gateway supports public or private connectivity. The default is public connectivity."},"maxDrainDurationSeconds":{"type":"integer","description":"The maximum amount of time to wait (in seconds) before forcibly releasing the IP addresses if connections are still in progress. Default value is 350 seconds."},"privateIpAddress":{"type":"string","description":"The private IPv4 address to assign to the NAT gateway. If you don't provide an address, a private IPv4 address will be automatically assigned."},"secondaryAllocationIds":{"type":"array","items":{"type":"string"},"description":"Secondary EIP allocation IDs. For more information, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html) in the *Amazon VPC User Guide*."},"secondaryPrivateIpAddressCount":{"type":"integer","description":"[Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating) in the *Amazon Virtual Private Cloud User Guide*.\n ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time."},"secondaryPrivateIpAddresses":{"type":"array","items":{"type":"string"},"description":"Secondary private IPv4 addresses. For more information about secondary addresses, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating) in the *Amazon Virtual Private Cloud User Guide*.\n ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time."},"subnetId":{"type":"string","description":"The ID of the subnet in which the NAT gateway is located."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the NAT gateway."},"vpcId":{"type":"string","description":"The ID of the VPC in which the NAT gateway is located."}}},"aws-native:ec2:NetworkAcl":{"description":"Specifies a network ACL for your VPC.\n To add a network ACL entry, see [AWS::EC2::NetworkAclEntry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html).","properties":{"awsId":{"type":"string","description":"The ID of the network ACL."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the network ACL."},"vpcId":{"type":"string","description":"The ID of the VPC for the network ACL.","replaceOnChanges":true}},"type":"object","required":["awsId","vpcId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the network ACL."},"vpcId":{"type":"string","description":"The ID of the VPC for the network ACL."}},"requiredInputs":["vpcId"]},"aws-native:ec2:NetworkInsightsAccessScope":{"description":"Resource schema for AWS::EC2::NetworkInsightsAccessScope","properties":{"createdDate":{"type":"string","description":"The creation date."},"excludePaths":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAccessScopePathRequest"},"description":"The paths to exclude.","replaceOnChanges":true},"matchPaths":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAccessScopePathRequest"},"description":"The paths to match.","replaceOnChanges":true},"networkInsightsAccessScopeArn":{"type":"string","description":"The ARN of the Network Access Scope."},"networkInsightsAccessScopeId":{"type":"string","description":"The ID of the Network Access Scope."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags."},"updatedDate":{"type":"string","description":"The last updated date."}},"type":"object","required":["createdDate","networkInsightsAccessScopeArn","networkInsightsAccessScopeId","updatedDate"],"inputProperties":{"excludePaths":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAccessScopePathRequest"},"description":"The paths to exclude."},"matchPaths":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAccessScopePathRequest"},"description":"The paths to match."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags."}}},"aws-native:ec2:NetworkInsightsAccessScopeAnalysis":{"description":"Resource schema for AWS::EC2::NetworkInsightsAccessScopeAnalysis","properties":{"analyzedEniCount":{"type":"integer","description":"The number of network interfaces analyzed."},"endDate":{"type":"string","description":"The end date of the analysis."},"findingsFound":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAnalysisFindingsFound","description":"Indicates whether there are findings (true | false | unknown)."},"networkInsightsAccessScopeAnalysisArn":{"type":"string","description":"The ARN of the Network Access Scope analysis."},"networkInsightsAccessScopeAnalysisId":{"type":"string","description":"The ID of the Network Access Scope analysis."},"networkInsightsAccessScopeId":{"type":"string","description":"The ID of the Network Access Scope.","replaceOnChanges":true},"startDate":{"type":"string","description":"The start date of the analysis."},"status":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAnalysisStatus","description":"The status of the analysis (running | succeeded | failed)."},"statusMessage":{"type":"string","description":"The status message."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags."}},"type":"object","required":["analyzedEniCount","endDate","findingsFound","networkInsightsAccessScopeAnalysisArn","networkInsightsAccessScopeAnalysisId","networkInsightsAccessScopeId","startDate","status","statusMessage"],"inputProperties":{"networkInsightsAccessScopeId":{"type":"string","description":"The ID of the Network Access Scope."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags."}},"requiredInputs":["networkInsightsAccessScopeId"]},"aws-native:ec2:NetworkInsightsAnalysis":{"description":"Resource schema for AWS::EC2::NetworkInsightsAnalysis","properties":{"additionalAccounts":{"type":"array","items":{"type":"string"},"description":"The member accounts that contain resources that the path can traverse."},"alternatePathHints":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAlternatePathHint"},"description":"Potential intermediate components."},"explanations":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisExplanation"},"description":"The explanations. For more information, see [Reachability Analyzer explanation codes](https://docs.aws.amazon.com/vpc/latest/reachability/explanation-codes.html) ."},"filterInArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the resources that the path must traverse.","replaceOnChanges":true},"filterOutArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the resources that the path must ignore.","replaceOnChanges":true},"forwardPathComponents":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPathComponent"},"description":"The components in the path from source to destination."},"networkInsightsAnalysisArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the network insights analysis."},"networkInsightsAnalysisId":{"type":"string","description":"The ID of the network insights analysis."},"networkInsightsPathId":{"type":"string","description":"The ID of the path.","replaceOnChanges":true},"networkPathFound":{"type":"boolean","description":"Indicates whether the destination is reachable from the source."},"returnPathComponents":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPathComponent"},"description":"The components in the path from destination to source."},"startDate":{"type":"string","description":"The time the analysis started."},"status":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisStatus","description":"The status of the network insights analysis."},"statusMessage":{"type":"string","description":"The status message, if the status is `failed` ."},"suggestedAccounts":{"type":"array","items":{"type":"string"},"description":"The IDs of potential intermediate accounts."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply."}},"type":"object","required":["alternatePathHints","explanations","forwardPathComponents","networkInsightsAnalysisArn","networkInsightsAnalysisId","networkInsightsPathId","networkPathFound","returnPathComponents","startDate","status","statusMessage","suggestedAccounts"],"inputProperties":{"additionalAccounts":{"type":"array","items":{"type":"string"},"description":"The member accounts that contain resources that the path can traverse."},"filterInArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the resources that the path must traverse."},"filterOutArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the resources that the path must ignore."},"networkInsightsPathId":{"type":"string","description":"The ID of the path."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply."}},"requiredInputs":["networkInsightsPathId"]},"aws-native:ec2:NetworkInsightsPath":{"description":"Resource schema for AWS::EC2::NetworkInsightsPath","properties":{"createdDate":{"type":"string","description":"The time stamp when the path was created."},"destination":{"type":"string","description":"The ID or ARN of the destination. If the resource is in another account, you must specify an ARN.","replaceOnChanges":true},"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination."},"destinationIp":{"type":"string","description":"The IP address of the destination.","replaceOnChanges":true},"destinationPort":{"type":"integer","description":"The destination port.","replaceOnChanges":true},"filterAtDestination":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathPathFilter","description":"Scopes the analysis to network paths that match specific filters at the destination. If you specify this parameter, you can't specify the parameter for the destination IP address.","replaceOnChanges":true},"filterAtSource":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathPathFilter","description":"Scopes the analysis to network paths that match specific filters at the source. If you specify this parameter, you can't specify the parameters for the source IP address or the destination port.","replaceOnChanges":true},"networkInsightsPathArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the path."},"networkInsightsPathId":{"type":"string","description":"The ID of the path."},"protocol":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathProtocol","description":"The protocol.","replaceOnChanges":true},"source":{"type":"string","description":"The ID or ARN of the source. If the resource is in another account, you must specify an ARN.","replaceOnChanges":true},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the source."},"sourceIp":{"type":"string","description":"The IP address of the source.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the path."}},"type":"object","required":["createdDate","destinationArn","networkInsightsPathArn","networkInsightsPathId","protocol","source","sourceArn"],"inputProperties":{"destination":{"type":"string","description":"The ID or ARN of the destination. If the resource is in another account, you must specify an ARN."},"destinationIp":{"type":"string","description":"The IP address of the destination."},"destinationPort":{"type":"integer","description":"The destination port."},"filterAtDestination":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathPathFilter","description":"Scopes the analysis to network paths that match specific filters at the destination. If you specify this parameter, you can't specify the parameter for the destination IP address."},"filterAtSource":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathPathFilter","description":"Scopes the analysis to network paths that match specific filters at the source. If you specify this parameter, you can't specify the parameters for the source IP address or the destination port."},"protocol":{"$ref":"#/types/aws-native:ec2:NetworkInsightsPathProtocol","description":"The protocol."},"source":{"type":"string","description":"The ID or ARN of the source. If the resource is in another account, you must specify an ARN."},"sourceIp":{"type":"string","description":"The IP address of the source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the path."}},"requiredInputs":["protocol","source"]},"aws-native:ec2:NetworkInterface":{"description":"The AWS::EC2::NetworkInterface resource creates network interface","properties":{"awsId":{"type":"string","description":"Network interface id."},"connectionTrackingSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceConnectionTrackingSpecification","description":"A connection tracking specification for the network interface."},"description":{"type":"string","description":"A description for the network interface."},"enablePrimaryIpv6":{"type":"boolean","description":"If you have instances or ENIs that rely on the IPv6 address not changing, to avoid disrupting traffic to instances or ENIs, you can enable a primary IPv6 address. Enable this option to automatically assign an IPv6 associated with the ENI attached to your instance to be the primary IPv6 address. When you enable an IPv6 address to be a primary IPv6, you cannot disable it. Traffic will be routed to the primary IPv6 address until the instance is terminated or the ENI is detached. If you have multiple IPv6 addresses associated with an ENI and you enable a primary IPv6 address, the first IPv6 address associated with the ENI becomes the primary IPv6 address."},"groupSet":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs associated with this network interface."},"interfaceType":{"type":"string","description":"Indicates the type of network interface.","replaceOnChanges":true},"ipv4PrefixCount":{"type":"integer","description":"The number of IPv4 prefixes to assign to a network interface. When you specify a number of IPv4 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /28 prefixes. You can't specify a count of IPv4 prefixes if you've specified one of the following: specific IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses."},"ipv4Prefixes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceIpv4PrefixSpecification"},"description":"Assigns a list of IPv4 prefixes to the network interface. If you want EC2 to automatically assign IPv4 prefixes, use the Ipv4PrefixCount property and do not specify this property. Presently, only /28 prefixes are supported. You can't specify IPv4 prefixes if you've specified one of the following: a count of IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses."},"ipv6AddressCount":{"type":"integer","description":"The number of IPv6 addresses to assign to a network interface. Amazon EC2 automatically selects the IPv6 addresses from the subnet range. To specify specific IPv6 addresses, use the Ipv6Addresses property and don't specify this property."},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceInstanceIpv6Address"},"description":"One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet to associate with the network interface. If you're specifying a number of IPv6 addresses, use the Ipv6AddressCount property and don't specify this property."},"ipv6PrefixCount":{"type":"integer","description":"The number of IPv6 prefixes to assign to a network interface. When you specify a number of IPv6 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /80 prefixes. You can't specify a count of IPv6 prefixes if you've specified one of the following: specific IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses."},"ipv6Prefixes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceIpv6PrefixSpecification"},"description":"Assigns a list of IPv6 prefixes to the network interface. If you want EC2 to automatically assign IPv6 prefixes, use the Ipv6PrefixCount property and do not specify this property. Presently, only /80 prefixes are supported. You can't specify IPv6 prefixes if you've specified one of the following: a count of IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses."},"primaryIpv6Address":{"type":"string","description":"The primary IPv6 address"},"primaryPrivateIpAddress":{"type":"string","description":"Returns the primary private IP address of the network interface."},"privateIpAddress":{"type":"string","description":"Assigns a single private IP address to the network interface, which is used as the primary private IP address. If you want to specify multiple private IP address, use the PrivateIpAddresses property. ","replaceOnChanges":true},"privateIpAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePrivateIpAddressSpecification"},"description":"Assigns a list of private IP addresses to the network interface. You can specify a primary private IP address by setting the value of the Primary property to true in the PrivateIpAddressSpecification property. If you want EC2 to automatically assign private IP addresses, use the SecondaryPrivateIpAddressCount property and do not specify this property."},"publicIpDnsHostnameTypeSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePublicIpDnsHostnameTypeSpecification","description":"Public IP DNS hostname type"},"publicIpDnsNameOptions":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePublicIpDnsNameOptions"},"secondaryPrivateIpAddressCount":{"type":"integer","description":"The number of secondary private IPv4 addresses to assign to a network interface. When you specify a number of secondary IPv4 addresses, Amazon EC2 selects these IP addresses within the subnet's IPv4 CIDR range. You can't specify this option and specify more than one private IP address using privateIpAddresses"},"secondaryPrivateIpAddresses":{"type":"array","items":{"type":"string"},"description":"Returns the secondary private IP addresses of the network interface."},"sourceDestCheck":{"type":"boolean","description":"Indicates whether traffic to or from the instance is validated."},"subnetId":{"type":"string","description":"The ID of the subnet to associate with the network interface.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this network interface."},"vpcId":{"type":"string","description":"The ID of the VPC"}},"type":"object","required":["awsId","primaryIpv6Address","primaryPrivateIpAddress","publicIpDnsNameOptions","secondaryPrivateIpAddresses","subnetId","vpcId"],"inputProperties":{"connectionTrackingSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceConnectionTrackingSpecification","description":"A connection tracking specification for the network interface."},"description":{"type":"string","description":"A description for the network interface."},"enablePrimaryIpv6":{"type":"boolean","description":"If you have instances or ENIs that rely on the IPv6 address not changing, to avoid disrupting traffic to instances or ENIs, you can enable a primary IPv6 address. Enable this option to automatically assign an IPv6 associated with the ENI attached to your instance to be the primary IPv6 address. When you enable an IPv6 address to be a primary IPv6, you cannot disable it. Traffic will be routed to the primary IPv6 address until the instance is terminated or the ENI is detached. If you have multiple IPv6 addresses associated with an ENI and you enable a primary IPv6 address, the first IPv6 address associated with the ENI becomes the primary IPv6 address."},"groupSet":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs associated with this network interface."},"interfaceType":{"type":"string","description":"Indicates the type of network interface."},"ipv4PrefixCount":{"type":"integer","description":"The number of IPv4 prefixes to assign to a network interface. When you specify a number of IPv4 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /28 prefixes. You can't specify a count of IPv4 prefixes if you've specified one of the following: specific IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses."},"ipv4Prefixes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceIpv4PrefixSpecification"},"description":"Assigns a list of IPv4 prefixes to the network interface. If you want EC2 to automatically assign IPv4 prefixes, use the Ipv4PrefixCount property and do not specify this property. Presently, only /28 prefixes are supported. You can't specify IPv4 prefixes if you've specified one of the following: a count of IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses."},"ipv6AddressCount":{"type":"integer","description":"The number of IPv6 addresses to assign to a network interface. Amazon EC2 automatically selects the IPv6 addresses from the subnet range. To specify specific IPv6 addresses, use the Ipv6Addresses property and don't specify this property."},"ipv6Addresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceInstanceIpv6Address"},"description":"One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet to associate with the network interface. If you're specifying a number of IPv6 addresses, use the Ipv6AddressCount property and don't specify this property."},"ipv6PrefixCount":{"type":"integer","description":"The number of IPv6 prefixes to assign to a network interface. When you specify a number of IPv6 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /80 prefixes. You can't specify a count of IPv6 prefixes if you've specified one of the following: specific IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses."},"ipv6Prefixes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceIpv6PrefixSpecification"},"description":"Assigns a list of IPv6 prefixes to the network interface. If you want EC2 to automatically assign IPv6 prefixes, use the Ipv6PrefixCount property and do not specify this property. Presently, only /80 prefixes are supported. You can't specify IPv6 prefixes if you've specified one of the following: a count of IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses."},"privateIpAddress":{"type":"string","description":"Assigns a single private IP address to the network interface, which is used as the primary private IP address. If you want to specify multiple private IP address, use the PrivateIpAddresses property. "},"privateIpAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePrivateIpAddressSpecification"},"description":"Assigns a list of private IP addresses to the network interface. You can specify a primary private IP address by setting the value of the Primary property to true in the PrivateIpAddressSpecification property. If you want EC2 to automatically assign private IP addresses, use the SecondaryPrivateIpAddressCount property and do not specify this property."},"publicIpDnsHostnameTypeSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePublicIpDnsHostnameTypeSpecification","description":"Public IP DNS hostname type"},"secondaryPrivateIpAddressCount":{"type":"integer","description":"The number of secondary private IPv4 addresses to assign to a network interface. When you specify a number of secondary IPv4 addresses, Amazon EC2 selects these IP addresses within the subnet's IPv4 CIDR range. You can't specify this option and specify more than one private IP address using privateIpAddresses"},"sourceDestCheck":{"type":"boolean","description":"Indicates whether traffic to or from the instance is validated."},"subnetId":{"type":"string","description":"The ID of the subnet to associate with the network interface."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this network interface."}},"requiredInputs":["subnetId"]},"aws-native:ec2:NetworkInterfaceAttachment":{"description":"Attaches an elastic network interface (ENI) to an Amazon EC2 instance. You can use this resource type to attach additional network interfaces to an instance without interruption.","properties":{"attachmentId":{"type":"string","description":"The ID of the network interface attachment."},"deleteOnTermination":{"type":"boolean","description":"Whether to delete the network interface when the instance terminates. By default, this value is set to ``true``."},"deviceIndex":{"type":"string","description":"The network interface's position in the attachment order. For example, the first attached network interface has a ``DeviceIndex`` of 0.","replaceOnChanges":true},"enaQueueCount":{"type":"integer","description":"The number of ENA queues created with the instance."},"enaSrdSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceAttachmentEnaSrdSpecification","description":"Configures ENA Express for the network interface that this action attaches to the instance."},"instanceId":{"type":"string","description":"The ID of the instance to which you will attach the ENI.","replaceOnChanges":true},"networkInterfaceId":{"type":"string","description":"The ID of the ENI that you want to attach.","replaceOnChanges":true}},"type":"object","required":["attachmentId","deviceIndex","instanceId","networkInterfaceId"],"inputProperties":{"deleteOnTermination":{"type":"boolean","description":"Whether to delete the network interface when the instance terminates. By default, this value is set to ``true``."},"deviceIndex":{"type":"string","description":"The network interface's position in the attachment order. For example, the first attached network interface has a ``DeviceIndex`` of 0."},"enaQueueCount":{"type":"integer","description":"The number of ENA queues created with the instance."},"enaSrdSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceAttachmentEnaSrdSpecification","description":"Configures ENA Express for the network interface that this action attaches to the instance."},"instanceId":{"type":"string","description":"The ID of the instance to which you will attach the ENI."},"networkInterfaceId":{"type":"string","description":"The ID of the ENI that you want to attach."}},"requiredInputs":["deviceIndex","instanceId","networkInterfaceId"]},"aws-native:ec2:NetworkPerformanceMetricSubscription":{"description":"Resource Type definition for AWS::EC2::NetworkPerformanceMetricSubscription","properties":{"destination":{"type":"string","description":"The target Region or Availability Zone for the metric to subscribe to.","replaceOnChanges":true},"metric":{"type":"string","description":"The metric type to subscribe to.","replaceOnChanges":true},"source":{"type":"string","description":"The starting Region or Availability Zone for metric to subscribe to.","replaceOnChanges":true},"statistic":{"type":"string","description":"The statistic to subscribe to.","replaceOnChanges":true}},"type":"object","required":["destination","metric","source","statistic"],"inputProperties":{"destination":{"type":"string","description":"The target Region or Availability Zone for the metric to subscribe to."},"metric":{"type":"string","description":"The metric type to subscribe to."},"source":{"type":"string","description":"The starting Region or Availability Zone for metric to subscribe to."},"statistic":{"type":"string","description":"The statistic to subscribe to."}},"requiredInputs":["destination","metric","source","statistic"]},"aws-native:ec2:PlacementGroup":{"description":"Resource Type definition for AWS::EC2::PlacementGroup","properties":{"groupName":{"type":"string","description":"The Group Name of Placement Group."},"partitionCount":{"type":"integer","description":"The number of partitions. Valid only when **Strategy** is set to `partition`","replaceOnChanges":true},"spreadLevel":{"type":"string","description":"The Spread Level of Placement Group is an enum where it accepts either host or rack when strategy is spread","replaceOnChanges":true},"strategy":{"type":"string","description":"The placement strategy.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["groupName"],"inputProperties":{"partitionCount":{"type":"integer","description":"The number of partitions. Valid only when **Strategy** is set to `partition`"},"spreadLevel":{"type":"string","description":"The Spread Level of Placement Group is an enum where it accepts either host or rack when strategy is spread"},"strategy":{"type":"string","description":"The placement strategy."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:ec2:PrefixList":{"description":"Resource schema of AWS::EC2::PrefixList Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var newPrefixList = new AwsNative.Ec2.PrefixList(\"newPrefixList\", new()\n    {\n        PrefixListName = \"vpc-1-servers\",\n        AddressFamily = AwsNative.Ec2.PrefixListAddressFamily.IPv4,\n        MaxEntries = 10,\n        Entries = new[]\n        {\n            new AwsNative.Ec2.Inputs.PrefixListEntryArgs\n            {\n                Cidr = \"10.0.0.5/32\",\n                Description = \"Server 1\",\n            },\n            new AwsNative.Ec2.Inputs.PrefixListEntryArgs\n            {\n                Cidr = \"10.0.0.10/32\",\n                Description = \"Server 2\",\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"VPC-1-Servers\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ec2.NewPrefixList(ctx, \"newPrefixList\", \u0026ec2.PrefixListArgs{\n\t\t\tPrefixListName: pulumi.String(\"vpc-1-servers\"),\n\t\t\tAddressFamily:  ec2.PrefixListAddressFamilyIPv4,\n\t\t\tMaxEntries:     pulumi.Int(10),\n\t\t\tEntries: ec2.PrefixListEntryArray{\n\t\t\t\t\u0026ec2.PrefixListEntryArgs{\n\t\t\t\t\tCidr:        pulumi.String(\"10.0.0.5/32\"),\n\t\t\t\t\tDescription: pulumi.String(\"Server 1\"),\n\t\t\t\t},\n\t\t\t\t\u0026ec2.PrefixListEntryArgs{\n\t\t\t\t\tCidr:        pulumi.String(\"10.0.0.10/32\"),\n\t\t\t\t\tDescription: pulumi.String(\"Server 2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"VPC-1-Servers\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst newPrefixList = new aws_native.ec2.PrefixList(\"newPrefixList\", {\n    prefixListName: \"vpc-1-servers\",\n    addressFamily: aws_native.ec2.PrefixListAddressFamily.IPv4,\n    maxEntries: 10,\n    entries: [\n        {\n            cidr: \"10.0.0.5/32\",\n            description: \"Server 1\",\n        },\n        {\n            cidr: \"10.0.0.10/32\",\n            description: \"Server 2\",\n        },\n    ],\n    tags: [{\n        key: \"Name\",\n        value: \"VPC-1-Servers\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nnew_prefix_list = aws_native.ec2.PrefixList(\"newPrefixList\",\n    prefix_list_name=\"vpc-1-servers\",\n    address_family=aws_native.ec2.PrefixListAddressFamily.I_PV4,\n    max_entries=10,\n    entries=[\n        {\n            \"cidr\": \"10.0.0.5/32\",\n            \"description\": \"Server 1\",\n        },\n        {\n            \"cidr\": \"10.0.0.10/32\",\n            \"description\": \"Server 2\",\n        },\n    ],\n    tags=[{\n        \"key\": \"Name\",\n        \"value\": \"VPC-1-Servers\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var newPrefixList = new AwsNative.Ec2.PrefixList(\"newPrefixList\", new()\n    {\n        PrefixListName = \"vpc-1-servers\",\n        AddressFamily = AwsNative.Ec2.PrefixListAddressFamily.IPv4,\n        MaxEntries = 10,\n        Entries = new[]\n        {\n            new AwsNative.Ec2.Inputs.PrefixListEntryArgs\n            {\n                Cidr = \"10.0.0.5/32\",\n                Description = \"Server 1\",\n            },\n            new AwsNative.Ec2.Inputs.PrefixListEntryArgs\n            {\n                Cidr = \"10.0.0.10/32\",\n                Description = \"Server 2\",\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"VPC-1-Servers\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ec2.NewPrefixList(ctx, \"newPrefixList\", \u0026ec2.PrefixListArgs{\n\t\t\tPrefixListName: pulumi.String(\"vpc-1-servers\"),\n\t\t\tAddressFamily:  ec2.PrefixListAddressFamilyIPv4,\n\t\t\tMaxEntries:     pulumi.Int(10),\n\t\t\tEntries: ec2.PrefixListEntryArray{\n\t\t\t\t\u0026ec2.PrefixListEntryArgs{\n\t\t\t\t\tCidr:        pulumi.String(\"10.0.0.5/32\"),\n\t\t\t\t\tDescription: pulumi.String(\"Server 1\"),\n\t\t\t\t},\n\t\t\t\t\u0026ec2.PrefixListEntryArgs{\n\t\t\t\t\tCidr:        pulumi.String(\"10.0.0.10/32\"),\n\t\t\t\t\tDescription: pulumi.String(\"Server 2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"VPC-1-Servers\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst newPrefixList = new aws_native.ec2.PrefixList(\"newPrefixList\", {\n    prefixListName: \"vpc-1-servers\",\n    addressFamily: aws_native.ec2.PrefixListAddressFamily.IPv4,\n    maxEntries: 10,\n    entries: [\n        {\n            cidr: \"10.0.0.5/32\",\n            description: \"Server 1\",\n        },\n        {\n            cidr: \"10.0.0.10/32\",\n            description: \"Server 2\",\n        },\n    ],\n    tags: [{\n        key: \"Name\",\n        value: \"VPC-1-Servers\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nnew_prefix_list = aws_native.ec2.PrefixList(\"newPrefixList\",\n    prefix_list_name=\"vpc-1-servers\",\n    address_family=aws_native.ec2.PrefixListAddressFamily.I_PV4,\n    max_entries=10,\n    entries=[\n        {\n            \"cidr\": \"10.0.0.5/32\",\n            \"description\": \"Server 1\",\n        },\n        {\n            \"cidr\": \"10.0.0.10/32\",\n            \"description\": \"Server 2\",\n        },\n    ],\n    tags=[{\n        \"key\": \"Name\",\n        \"value\": \"VPC-1-Servers\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"addressFamily":{"$ref":"#/types/aws-native:ec2:PrefixListAddressFamily","description":"Ip Version of Prefix List."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Prefix List."},"entries":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:PrefixListEntry"},"description":"Entries of Prefix List."},"maxEntries":{"type":"integer","description":"Max Entries of Prefix List."},"ownerId":{"type":"string","description":"Owner Id of Prefix List."},"prefixListId":{"type":"string","description":"Id of Prefix List."},"prefixListName":{"type":"string","description":"Name of Prefix List."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for Prefix List"},"version":{"type":"integer","description":"Version of Prefix List."}},"type":"object","required":["addressFamily","arn","ownerId","prefixListId","prefixListName","version"],"inputProperties":{"addressFamily":{"$ref":"#/types/aws-native:ec2:PrefixListAddressFamily","description":"Ip Version of Prefix List."},"entries":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:PrefixListEntry"},"description":"Entries of Prefix List."},"maxEntries":{"type":"integer","description":"Max Entries of Prefix List."},"prefixListName":{"type":"string","description":"Name of Prefix List."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for Prefix List"}},"requiredInputs":["addressFamily"]},"aws-native:ec2:Route":{"description":"Specifies a route in a route table. For more information, see [Routes](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html#route-table-routes) in the *Amazon VPC User Guide*.\n You must specify either a destination CIDR block or prefix list ID. You must also specify exactly one of the resources as the target.\n If you create a route that references a transit gateway in the same template where you create the transit gateway, you must declare a dependency on the transit gateway attachment. The route table cannot use the transit gateway until it has successfully attached to the VPC. Add a [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) in the ``AWS::EC2::Route`` resource to explicitly declare a dependency on the ``AWS::EC2::TransitGatewayAttachment`` resource.","properties":{"carrierGatewayId":{"type":"string","description":"The ID of the carrier gateway.\n You can only use this option when the VPC contains a subnet which is associated with a Wavelength Zone."},"cidrBlock":{"type":"string","description":"The IPv4 CIDR block."},"coreNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the core network."},"destinationCidrBlock":{"type":"string","description":"The IPv4 CIDR address block used for the destination match. Routing decisions are based on the most specific match. We modify the specified CIDR block to its canonical form; for example, if you specify ``100.68.0.18/18``, we modify it to ``100.68.0.0/18``.","replaceOnChanges":true},"destinationIpv6CidrBlock":{"type":"string","description":"The IPv6 CIDR block used for the destination match. Routing decisions are based on the most specific match.","replaceOnChanges":true},"destinationPrefixListId":{"type":"string","description":"The ID of a prefix list used for the destination match.","replaceOnChanges":true},"egressOnlyInternetGatewayId":{"type":"string","description":"[IPv6 traffic only] The ID of an egress-only internet gateway."},"gatewayId":{"type":"string","description":"The ID of an internet gateway or virtual private gateway attached to your VPC."},"instanceId":{"type":"string","description":"The ID of a NAT instance in your VPC. The operation fails if you specify an instance ID unless exactly one network interface is attached."},"localGatewayId":{"type":"string","description":"The ID of the local gateway."},"natGatewayId":{"type":"string","description":"[IPv4 traffic only] The ID of a NAT gateway."},"networkInterfaceId":{"type":"string","description":"The ID of a network interface."},"routeTableId":{"type":"string","description":"The ID of the route table for the route.","replaceOnChanges":true},"transitGatewayId":{"type":"string","description":"The ID of a transit gateway."},"vpcEndpointId":{"type":"string","description":"The ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only."},"vpcPeeringConnectionId":{"type":"string","description":"The ID of a VPC peering connection."}},"type":"object","required":["cidrBlock","routeTableId"],"inputProperties":{"carrierGatewayId":{"type":"string","description":"The ID of the carrier gateway.\n You can only use this option when the VPC contains a subnet which is associated with a Wavelength Zone."},"coreNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the core network."},"destinationCidrBlock":{"type":"string","description":"The IPv4 CIDR address block used for the destination match. Routing decisions are based on the most specific match. We modify the specified CIDR block to its canonical form; for example, if you specify ``100.68.0.18/18``, we modify it to ``100.68.0.0/18``."},"destinationIpv6CidrBlock":{"type":"string","description":"The IPv6 CIDR block used for the destination match. Routing decisions are based on the most specific match."},"destinationPrefixListId":{"type":"string","description":"The ID of a prefix list used for the destination match."},"egressOnlyInternetGatewayId":{"type":"string","description":"[IPv6 traffic only] The ID of an egress-only internet gateway."},"gatewayId":{"type":"string","description":"The ID of an internet gateway or virtual private gateway attached to your VPC."},"instanceId":{"type":"string","description":"The ID of a NAT instance in your VPC. The operation fails if you specify an instance ID unless exactly one network interface is attached."},"localGatewayId":{"type":"string","description":"The ID of the local gateway."},"natGatewayId":{"type":"string","description":"[IPv4 traffic only] The ID of a NAT gateway."},"networkInterfaceId":{"type":"string","description":"The ID of a network interface."},"routeTableId":{"type":"string","description":"The ID of the route table for the route."},"transitGatewayId":{"type":"string","description":"The ID of a transit gateway."},"vpcEndpointId":{"type":"string","description":"The ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only."},"vpcPeeringConnectionId":{"type":"string","description":"The ID of a VPC peering connection."}},"requiredInputs":["routeTableId"]},"aws-native:ec2:RouteServer":{"description":"VPC Route Server","properties":{"amazonSideAsn":{"type":"integer","description":"The Amazon-side ASN of the Route Server.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Route Server."},"awsId":{"type":"string","description":"The ID of the Route Server."},"persistRoutes":{"$ref":"#/types/aws-native:ec2:RouteServerPersistRoutes","description":"Whether to enable persistent routes"},"persistRoutesDuration":{"type":"integer","description":"The duration of persistent routes in minutes"},"snsNotificationsEnabled":{"type":"boolean","description":"Whether to enable SNS notifications"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["amazonSideAsn","arn","awsId"],"inputProperties":{"amazonSideAsn":{"type":"integer","description":"The Amazon-side ASN of the Route Server."},"persistRoutes":{"$ref":"#/types/aws-native:ec2:RouteServerPersistRoutes","description":"Whether to enable persistent routes"},"persistRoutesDuration":{"type":"integer","description":"The duration of persistent routes in minutes"},"snsNotificationsEnabled":{"type":"boolean","description":"Whether to enable SNS notifications"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["amazonSideAsn"]},"aws-native:ec2:RouteServerAssociation":{"description":"VPC Route Server Association","properties":{"routeServerId":{"type":"string","description":"Route Server ID","replaceOnChanges":true},"vpcId":{"type":"string","description":"VPC ID","replaceOnChanges":true}},"type":"object","required":["routeServerId","vpcId"],"inputProperties":{"routeServerId":{"type":"string","description":"Route Server ID"},"vpcId":{"type":"string","description":"VPC ID"}},"requiredInputs":["routeServerId","vpcId"]},"aws-native:ec2:RouteServerEndpoint":{"description":"VPC Route Server Endpoint","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Route Server Endpoint."},"awsId":{"type":"string","description":"The ID of the Route Server Endpoint."},"eniAddress":{"type":"string","description":"Elastic Network Interface IP address owned by the Route Server Endpoint"},"eniId":{"type":"string","description":"Elastic Network Interface ID owned by the Route Server Endpoint"},"routeServerId":{"type":"string","description":"Route Server ID","replaceOnChanges":true},"subnetId":{"type":"string","description":"Subnet ID","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcId":{"type":"string","description":"VPC ID"}},"type":"object","required":["arn","awsId","eniAddress","eniId","routeServerId","subnetId","vpcId"],"inputProperties":{"routeServerId":{"type":"string","description":"Route Server ID"},"subnetId":{"type":"string","description":"Subnet ID"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["routeServerId","subnetId"]},"aws-native:ec2:RouteServerPeer":{"description":"VPC Route Server Peer","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Route Server Peer."},"awsId":{"type":"string","description":"The ID of the Route Server Peer."},"bgpOptions":{"$ref":"#/types/aws-native:ec2:RouteServerPeerBgpOptions","description":"The BGP configuration options for this peer, including ASN (Autonomous System Number) and BFD (Bidrectional Forwarding Detection) settings.","replaceOnChanges":true},"endpointEniAddress":{"type":"string","description":"Elastic Network Interface IP address owned by the Route Server Endpoint"},"endpointEniId":{"type":"string","description":"Elastic Network Interface ID owned by the Route Server Endpoint"},"peerAddress":{"type":"string","description":"IP address of the Route Server Peer","replaceOnChanges":true},"routeServerEndpointId":{"type":"string","description":"Route Server Endpoint ID","replaceOnChanges":true},"routeServerId":{"type":"string","description":"Route Server ID"},"subnetId":{"type":"string","description":"Subnet ID"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcId":{"type":"string","description":"VPC ID"}},"type":"object","required":["arn","awsId","bgpOptions","endpointEniAddress","endpointEniId","peerAddress","routeServerEndpointId","routeServerId","subnetId","vpcId"],"inputProperties":{"bgpOptions":{"$ref":"#/types/aws-native:ec2:RouteServerPeerBgpOptions","description":"The BGP configuration options for this peer, including ASN (Autonomous System Number) and BFD (Bidrectional Forwarding Detection) settings."},"peerAddress":{"type":"string","description":"IP address of the Route Server Peer"},"routeServerEndpointId":{"type":"string","description":"Route Server Endpoint ID"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["bgpOptions","peerAddress","routeServerEndpointId"]},"aws-native:ec2:RouteServerPropagation":{"description":"VPC Route Server Propagation","properties":{"routeServerId":{"type":"string","description":"Route Server ID","replaceOnChanges":true},"routeTableId":{"type":"string","description":"Route Table ID","replaceOnChanges":true}},"type":"object","required":["routeServerId","routeTableId"],"inputProperties":{"routeServerId":{"type":"string","description":"Route Server ID"},"routeTableId":{"type":"string","description":"Route Table ID"}},"requiredInputs":["routeServerId","routeTableId"]},"aws-native:ec2:RouteTable":{"description":"Specifies a route table for the specified VPC. After you create a route table, you can add routes and associate the table with a subnet.\n For more information, see [Route tables](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html) in the *Amazon VPC User Guide*.","properties":{"routeTableId":{"type":"string","description":"The ID of the route table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the route table."},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["routeTableId","vpcId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the route table."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["vpcId"]},"aws-native:ec2:SecurityGroup":{"description":"Resource Type definition for AWS::EC2::SecurityGroup","properties":{"awsId":{"type":"string","description":"The group name or group ID depending on whether the SG is created in default or specific VPC"},"groupDescription":{"type":"string","description":"A description for the security group.","replaceOnChanges":true},"groupId":{"type":"string","description":"The group ID of the specified security group."},"groupName":{"type":"string","description":"The name of the security group.","replaceOnChanges":true},"securityGroupEgress":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SecurityGroupEgress"},"description":"[VPC only] The outbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group."},"securityGroupIngress":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SecurityGroupIngress"},"description":"The inbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the security group."},"vpcId":{"type":"string","description":"The ID of the VPC for the security group.","replaceOnChanges":true}},"type":"object","required":["awsId","groupDescription","groupId"],"inputProperties":{"groupDescription":{"type":"string","description":"A description for the security group."},"groupName":{"type":"string","description":"The name of the security group."},"securityGroupEgress":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SecurityGroupEgress"},"description":"[VPC only] The outbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group."},"securityGroupIngress":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:SecurityGroupIngress"},"description":"The inbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the security group."},"vpcId":{"type":"string","description":"The ID of the VPC for the security group."}},"requiredInputs":["groupDescription"]},"aws-native:ec2:SecurityGroupEgress":{"description":"Adds the specified outbound (egress) rule to a security group.\n An outbound rule permits instances to send traffic to the specified IPv4 or IPv6 address range, the IP addresses that are specified by a prefix list, or the instances that are associated with a destination security group. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html).\n You must specify exactly one of the following destinations: an IPv4 address range, an IPv6 address range, a prefix list, or a security group.\n You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code. To specify all types or all codes, use -1.\n Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.","properties":{"awsId":{"type":"string"},"cidrIp":{"type":"string","description":"The IPv4 address range, in CIDR format.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.\n For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *User Guide*.","replaceOnChanges":true},"cidrIpv6":{"type":"string","description":"The IPv6 address range, in CIDR format.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.\n For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *User Guide*.","replaceOnChanges":true},"description":{"type":"string","description":"The description of an egress (outbound) security group rule.\n Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*"},"destinationPrefixListId":{"type":"string","description":"The prefix list IDs for an AWS service. This is the AWS service to access through a VPC endpoint from instances associated with the security group.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.","replaceOnChanges":true},"destinationSecurityGroupId":{"type":"string","description":"The ID of the security group.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.","replaceOnChanges":true},"fromPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types).","replaceOnChanges":true},"groupId":{"type":"string","description":"The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.","replaceOnChanges":true},"ipProtocol":{"type":"string","description":"The IP protocol name (``tcp``, ``udp``, ``icmp``, ``icmpv6``) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)).\n Use ``-1`` to specify all protocols. When authorizing security group rules, specifying ``-1`` or a protocol number other than ``tcp``, ``udp``, ``icmp``, or ``icmpv6`` allows traffic on all ports, regardless of any port range you specify. For ``tcp``, ``udp``, and ``icmp``, you must specify a port range. For ``icmpv6``, the port range is optional; if you omit the port range, traffic for all types and codes is allowed.","replaceOnChanges":true},"toPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes).","replaceOnChanges":true}},"type":"object","required":["awsId","groupId","ipProtocol"],"inputProperties":{"cidrIp":{"type":"string","description":"The IPv4 address range, in CIDR format.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.\n For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *User Guide*."},"cidrIpv6":{"type":"string","description":"The IPv6 address range, in CIDR format.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``.\n For examples of rules that you can add to security groups for specific access scenarios, see [Security group rules for different use cases](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html) in the *User Guide*."},"description":{"type":"string","description":"The description of an egress (outbound) security group rule.\n Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*"},"destinationPrefixListId":{"type":"string","description":"The prefix list IDs for an AWS service. This is the AWS service to access through a VPC endpoint from instances associated with the security group.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``."},"destinationSecurityGroupId":{"type":"string","description":"The ID of the security group.\n You must specify exactly one of the following: ``CidrIp``, ``CidrIpv6``, ``DestinationPrefixListId``, or ``DestinationSecurityGroupId``."},"fromPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the start of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types)."},"groupId":{"type":"string","description":"The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID."},"ipProtocol":{"type":"string","description":"The IP protocol name (``tcp``, ``udp``, ``icmp``, ``icmpv6``) or number (see [Protocol Numbers](https://docs.aws.amazon.com/http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml)).\n Use ``-1`` to specify all protocols. When authorizing security group rules, specifying ``-1`` or a protocol number other than ``tcp``, ``udp``, ``icmp``, or ``icmpv6`` allows traffic on all ports, regardless of any port range you specify. For ``tcp``, ``udp``, and ``icmp``, you must specify a port range. For ``icmpv6``, the port range is optional; if you omit the port range, traffic for all types and codes is allowed."},"toPort":{"type":"integer","description":"If the protocol is TCP or UDP, this is the end of the port range. If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes)."}},"requiredInputs":["groupId","ipProtocol"]},"aws-native:ec2:SecurityGroupIngress":{"description":"Resource Type definition for AWS::EC2::SecurityGroupIngress","properties":{"awsId":{"type":"string","description":"The Security Group Rule Id"},"cidrIp":{"type":"string","description":"The IPv4 ranges","replaceOnChanges":true},"cidrIpv6":{"type":"string","description":"[VPC only] The IPv6 ranges","replaceOnChanges":true},"description":{"type":"string","description":"Updates the description of an ingress (inbound) security group rule. You can replace an existing description, or add a description to a rule that did not have one previously"},"fromPort":{"type":"integer","description":"The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 type number. A value of -1 indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify all codes.\n\nUse this for ICMP and any protocol that uses ports.","replaceOnChanges":true},"groupId":{"type":"string","description":"The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.\n\nYou must specify the GroupName property or the GroupId property. For security groups that are in a VPC, you must use the GroupId property.","replaceOnChanges":true},"groupName":{"type":"string","description":"The name of the security group.","replaceOnChanges":true},"ipProtocol":{"type":"string","description":"The IP protocol name (tcp, udp, icmp, icmpv6) or number (see Protocol Numbers).\n\n[VPC only] Use -1 to specify all protocols. When authorizing security group rules, specifying -1 or a protocol number other than tcp, udp, icmp, or icmpv6 allows traffic on all ports, regardless of any port range you specify. For tcp, udp, and icmp, you must specify a port range. For icmpv6, the port range is optional; if you omit the port range, traffic for all types and codes is allowed.","replaceOnChanges":true},"sourcePrefixListId":{"type":"string","description":"[EC2-VPC only] The ID of a prefix list.\n\n","replaceOnChanges":true},"sourceSecurityGroupId":{"type":"string","description":"The ID of the security group. You must specify either the security group ID or the security group name. For security groups in a nondefault VPC, you must specify the security group ID.","replaceOnChanges":true},"sourceSecurityGroupName":{"type":"string","description":"[EC2-Classic, default VPC] The name of the source security group.\n\nYou must specify the GroupName property or the GroupId property. For security groups that are in a VPC, you must use the GroupId property.","replaceOnChanges":true},"sourceSecurityGroupOwnerId":{"type":"string","description":"[nondefault VPC] The AWS account ID that owns the source security group. You can't specify this property with an IP address range.\n\nIf you specify SourceSecurityGroupName or SourceSecurityGroupId and that security group is owned by a different account than the account creating the stack, you must specify the SourceSecurityGroupOwnerId; otherwise, this property is optional.","replaceOnChanges":true},"toPort":{"type":"integer","description":"The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code. A value of -1 indicates all ICMP/ICMPv6 codes for the specified ICMP type. If you specify all ICMP/ICMPv6 types, you must specify all codes.\n\nUse this for ICMP and any protocol that uses ports.","replaceOnChanges":true}},"type":"object","required":["awsId","ipProtocol"],"inputProperties":{"cidrIp":{"type":"string","description":"The IPv4 ranges"},"cidrIpv6":{"type":"string","description":"[VPC only] The IPv6 ranges"},"description":{"type":"string","description":"Updates the description of an ingress (inbound) security group rule. You can replace an existing description, or add a description to a rule that did not have one previously"},"fromPort":{"type":"integer","description":"The start of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 type number. A value of -1 indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify all codes.\n\nUse this for ICMP and any protocol that uses ports."},"groupId":{"type":"string","description":"The ID of the security group. You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.\n\nYou must specify the GroupName property or the GroupId property. For security groups that are in a VPC, you must use the GroupId property."},"groupName":{"type":"string","description":"The name of the security group."},"ipProtocol":{"type":"string","description":"The IP protocol name (tcp, udp, icmp, icmpv6) or number (see Protocol Numbers).\n\n[VPC only] Use -1 to specify all protocols. When authorizing security group rules, specifying -1 or a protocol number other than tcp, udp, icmp, or icmpv6 allows traffic on all ports, regardless of any port range you specify. For tcp, udp, and icmp, you must specify a port range. For icmpv6, the port range is optional; if you omit the port range, traffic for all types and codes is allowed."},"sourcePrefixListId":{"type":"string","description":"[EC2-VPC only] The ID of a prefix list.\n\n"},"sourceSecurityGroupId":{"type":"string","description":"The ID of the security group. You must specify either the security group ID or the security group name. For security groups in a nondefault VPC, you must specify the security group ID."},"sourceSecurityGroupName":{"type":"string","description":"[EC2-Classic, default VPC] The name of the source security group.\n\nYou must specify the GroupName property or the GroupId property. For security groups that are in a VPC, you must use the GroupId property."},"sourceSecurityGroupOwnerId":{"type":"string","description":"[nondefault VPC] The AWS account ID that owns the source security group. You can't specify this property with an IP address range.\n\nIf you specify SourceSecurityGroupName or SourceSecurityGroupId and that security group is owned by a different account than the account creating the stack, you must specify the SourceSecurityGroupOwnerId; otherwise, this property is optional."},"toPort":{"type":"integer","description":"The end of port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code. A value of -1 indicates all ICMP/ICMPv6 codes for the specified ICMP type. If you specify all ICMP/ICMPv6 types, you must specify all codes.\n\nUse this for ICMP and any protocol that uses ports."}},"requiredInputs":["ipProtocol"]},"aws-native:ec2:SecurityGroupVpcAssociation":{"description":"Resource type definition for the AWS::EC2::SecurityGroupVpcAssociation resource","properties":{"groupId":{"type":"string","description":"The group ID of the specified security group.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:ec2:SecurityGroupVpcAssociationState","description":"The state of the security group vpc association."},"stateReason":{"type":"string","description":"The reason for the state of the security group vpc association."},"vpcId":{"type":"string","description":"The ID of the VPC in the security group vpc association.","replaceOnChanges":true},"vpcOwnerId":{"type":"string","description":"The owner of the VPC in the security group vpc association."}},"type":"object","required":["groupId","state","stateReason","vpcId","vpcOwnerId"],"inputProperties":{"groupId":{"type":"string","description":"The group ID of the specified security group."},"vpcId":{"type":"string","description":"The ID of the VPC in the security group vpc association."}},"requiredInputs":["groupId","vpcId"]},"aws-native:ec2:SnapshotBlockPublicAccess":{"description":"Resource Type definition for AWS::EC2::SnapshotBlockPublicAccess","properties":{"accountId":{"type":"string","description":"The identifier for the specified AWS account."},"state":{"$ref":"#/types/aws-native:ec2:SnapshotBlockPublicAccessState","description":"The state of EBS Snapshot Block Public Access."}},"type":"object","required":["accountId","state"],"inputProperties":{"state":{"$ref":"#/types/aws-native:ec2:SnapshotBlockPublicAccessState","description":"The state of EBS Snapshot Block Public Access."}},"requiredInputs":["state"]},"aws-native:ec2:SpotFleet":{"description":"Resource Type definition for AWS::EC2::SpotFleet","properties":{"awsId":{"type":"string","description":"The ID of the Spot Fleet."},"spotFleetRequestConfigData":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigData","description":"Describes the configuration of a Spot Fleet request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to specify in SpotFleetRequestConfigData"}},"type":"object","required":["awsId","spotFleetRequestConfigData"],"inputProperties":{"spotFleetRequestConfigData":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigData","description":"Describes the configuration of a Spot Fleet request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to specify in SpotFleetRequestConfigData"}},"requiredInputs":["spotFleetRequestConfigData"]},"aws-native:ec2:SqlHaStandbyDetectedInstance":{"description":"Resource Type definition for AWS::EC2::SqlHaStandbyDetectedInstance","properties":{"haStatus":{"$ref":"#/types/aws-native:ec2:SqlHaStandbyDetectedInstanceHaStatus"},"instanceId":{"type":"string","replaceOnChanges":true},"lastUpdatedTime":{"type":"string"},"sqlServerCredentials":{"type":"string"},"sqlServerLicenseUsage":{"$ref":"#/types/aws-native:ec2:SqlHaStandbyDetectedInstanceSqlServerLicenseUsage"}},"type":"object","required":["haStatus","instanceId","lastUpdatedTime","sqlServerLicenseUsage"],"inputProperties":{"instanceId":{"type":"string"},"sqlServerCredentials":{"type":"string"}},"requiredInputs":["instanceId"]},"aws-native:ec2:Subnet":{"description":"Specifies a subnet for the specified VPC.\n For an IPv4 only subnet, specify an IPv4 CIDR block. If the VPC has an IPv6 CIDR block, you can create an IPv6 only subnet or a dual stack subnet instead. For an IPv6 only subnet, specify an IPv6 CIDR block. For a dual stack subnet, specify both an IPv4 CIDR block and an IPv6 CIDR block.\n For more information, see [Subnets for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html) in the *Amazon VPC User Guide*.","properties":{"assignIpv6AddressOnCreation":{"type":"boolean","description":"Indicates whether a network interface created in this subnet receives an IPv6 address. The default value is ``false``.\n If you specify ``AssignIpv6AddressOnCreation``, you must also specify an IPv6 CIDR block."},"availabilityZone":{"type":"string","description":"The Availability Zone of the subnet.\n If you update this property, you must also update the ``CidrBlock`` property.","replaceOnChanges":true},"availabilityZoneId":{"type":"string","description":"The AZ ID of the subnet.","replaceOnChanges":true},"blockPublicAccessStates":{"$ref":"#/types/aws-native:ec2:BlockPublicAccessStatesProperties"},"cidrBlock":{"type":"string","description":"The IPv4 CIDR block assigned to the subnet.\n If you update this property, we create a new subnet, and then delete the existing one.","replaceOnChanges":true},"enableDns64":{"type":"boolean","description":"Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations.\n  You must first configure a NAT gateway in a public subnet (separate from the subnet containing the IPv6-only workloads). For example, the subnet containing the NAT gateway should have a ``0.0.0.0/0`` route pointing to the internet gateway. For more information, see [Configure DNS64 and NAT64](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-nat64-dns64.html#nat-gateway-nat64-dns64-walkthrough) in the *User Guide*."},"enableLniAtDeviceIndex":{"type":"integer","description":"Indicates the device position for local network interfaces in this subnet. For example, ``1`` indicates local network interfaces in this subnet are the secondary network interface (eth1)."},"ipv4IpamPoolId":{"type":"string","description":"An IPv4 IPAM pool ID for the subnet.","replaceOnChanges":true},"ipv4NetmaskLength":{"type":"integer","description":"An IPv4 netmask length for the subnet.","replaceOnChanges":true},"ipv6CidrBlock":{"type":"string","description":"The IPv6 CIDR block.\n If you specify ``AssignIpv6AddressOnCreation``, you must also specify an IPv6 CIDR block."},"ipv6CidrBlocks":{"type":"array","items":{"type":"string"},"description":"The IPv6 CIDR blocks that are associated with the subnet."},"ipv6IpamPoolId":{"type":"string","description":"An IPv6 IPAM pool ID for the subnet.","replaceOnChanges":true},"ipv6Native":{"type":"boolean","description":"Indicates whether this is an IPv6 only subnet. For more information, see [Subnet basics](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html#subnet-basics) in the *User Guide*.","replaceOnChanges":true},"ipv6NetmaskLength":{"type":"integer","description":"An IPv6 netmask length for the subnet.","replaceOnChanges":true},"mapPublicIpOnLaunch":{"type":"boolean","description":"Indicates whether instances launched in this subnet receive a public IPv4 address. The default value is ``false``.\n AWS charges for all public IPv4 addresses, including public IPv4 addresses associated with running instances and Elastic IP addresses. For more information, see the *Public IPv4 Address* tab on the [VPC pricing page](https://docs.aws.amazon.com/vpc/pricing/)."},"networkAclAssociationId":{"type":"string","description":"The ID of the network ACL that is associated with the subnet's VPC, such as `acl-5fb85d36` ."},"outpostArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Outpost.","replaceOnChanges":true},"privateDnsNameOptionsOnLaunch":{"$ref":"#/types/aws-native:ec2:PrivateDnsNameOptionsOnLaunchProperties","description":"The hostname type for EC2 instances launched into this subnet and how DNS A and AAAA record queries to the instances should be handled. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*.\n Available options:\n  +  EnableResourceNameDnsAAAARecord (true | false)\n  +  EnableResourceNameDnsARecord (true | false)\n  +  HostnameType (ip-name | resource-name)"},"subnetId":{"type":"string","description":"The ID of the subnet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the subnet."},"vpcId":{"type":"string","description":"The ID of the VPC the subnet is in.\n If you update this property, you must also update the ``CidrBlock`` property.","replaceOnChanges":true}},"type":"object","required":["blockPublicAccessStates","ipv6CidrBlocks","networkAclAssociationId","subnetId","vpcId"],"inputProperties":{"assignIpv6AddressOnCreation":{"type":"boolean","description":"Indicates whether a network interface created in this subnet receives an IPv6 address. The default value is ``false``.\n If you specify ``AssignIpv6AddressOnCreation``, you must also specify an IPv6 CIDR block."},"availabilityZone":{"type":"string","description":"The Availability Zone of the subnet.\n If you update this property, you must also update the ``CidrBlock`` property."},"availabilityZoneId":{"type":"string","description":"The AZ ID of the subnet."},"cidrBlock":{"type":"string","description":"The IPv4 CIDR block assigned to the subnet.\n If you update this property, we create a new subnet, and then delete the existing one."},"enableDns64":{"type":"boolean","description":"Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations.\n  You must first configure a NAT gateway in a public subnet (separate from the subnet containing the IPv6-only workloads). For example, the subnet containing the NAT gateway should have a ``0.0.0.0/0`` route pointing to the internet gateway. For more information, see [Configure DNS64 and NAT64](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-nat64-dns64.html#nat-gateway-nat64-dns64-walkthrough) in the *User Guide*."},"enableLniAtDeviceIndex":{"type":"integer","description":"Indicates the device position for local network interfaces in this subnet. For example, ``1`` indicates local network interfaces in this subnet are the secondary network interface (eth1)."},"ipv4IpamPoolId":{"type":"string","description":"An IPv4 IPAM pool ID for the subnet."},"ipv4NetmaskLength":{"type":"integer","description":"An IPv4 netmask length for the subnet."},"ipv6CidrBlock":{"type":"string","description":"The IPv6 CIDR block.\n If you specify ``AssignIpv6AddressOnCreation``, you must also specify an IPv6 CIDR block."},"ipv6IpamPoolId":{"type":"string","description":"An IPv6 IPAM pool ID for the subnet."},"ipv6Native":{"type":"boolean","description":"Indicates whether this is an IPv6 only subnet. For more information, see [Subnet basics](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html#subnet-basics) in the *User Guide*."},"ipv6NetmaskLength":{"type":"integer","description":"An IPv6 netmask length for the subnet."},"mapPublicIpOnLaunch":{"type":"boolean","description":"Indicates whether instances launched in this subnet receive a public IPv4 address. The default value is ``false``.\n AWS charges for all public IPv4 addresses, including public IPv4 addresses associated with running instances and Elastic IP addresses. For more information, see the *Public IPv4 Address* tab on the [VPC pricing page](https://docs.aws.amazon.com/vpc/pricing/)."},"outpostArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Outpost."},"privateDnsNameOptionsOnLaunch":{"$ref":"#/types/aws-native:ec2:PrivateDnsNameOptionsOnLaunchProperties","description":"The hostname type for EC2 instances launched into this subnet and how DNS A and AAAA record queries to the instances should be handled. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*.\n Available options:\n  +  EnableResourceNameDnsAAAARecord (true | false)\n  +  EnableResourceNameDnsARecord (true | false)\n  +  HostnameType (ip-name | resource-name)"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the subnet."},"vpcId":{"type":"string","description":"The ID of the VPC the subnet is in.\n If you update this property, you must also update the ``CidrBlock`` property."}},"requiredInputs":["vpcId"]},"aws-native:ec2:SubnetCidrBlock":{"description":"The AWS::EC2::SubnetCidrBlock resource creates association between subnet and IPv6 CIDR","properties":{"awsId":{"type":"string","description":"Information about the IPv6 association."},"ipSource":{"type":"string","description":"The IP Source of an IPv6 Subnet CIDR Block."},"ipv6AddressAttribute":{"type":"string","description":"The value denoting whether an IPv6 Subnet CIDR Block is public or private."},"ipv6CidrBlock":{"type":"string","description":"The IPv6 network range for the subnet, in CIDR notation. The subnet size must use a /64 prefix length","replaceOnChanges":true},"ipv6IpamPoolId":{"type":"string","description":"The ID of an IPv6 Amazon VPC IP Address Manager (IPAM) pool from which to allocate, to get the subnet's CIDR","replaceOnChanges":true},"ipv6NetmaskLength":{"type":"integer","description":"The netmask length of the IPv6 CIDR to allocate to the subnet from an IPAM pool","replaceOnChanges":true},"subnetId":{"type":"string","description":"The ID of the subnet","replaceOnChanges":true}},"type":"object","required":["awsId","ipSource","ipv6AddressAttribute","subnetId"],"inputProperties":{"ipv6CidrBlock":{"type":"string","description":"The IPv6 network range for the subnet, in CIDR notation. The subnet size must use a /64 prefix length"},"ipv6IpamPoolId":{"type":"string","description":"The ID of an IPv6 Amazon VPC IP Address Manager (IPAM) pool from which to allocate, to get the subnet's CIDR"},"ipv6NetmaskLength":{"type":"integer","description":"The netmask length of the IPv6 CIDR to allocate to the subnet from an IPAM pool"},"subnetId":{"type":"string","description":"The ID of the subnet"}},"requiredInputs":["subnetId"]},"aws-native:ec2:SubnetNetworkAclAssociation":{"description":"Resource Type definition for AWS::EC2::SubnetNetworkAclAssociation","properties":{"associationId":{"type":"string","description":"Returns the value of this object's AssociationId property."},"networkAclId":{"type":"string","description":"The ID of the network ACL","replaceOnChanges":true},"subnetId":{"type":"string","description":"The ID of the subnet","replaceOnChanges":true}},"type":"object","required":["associationId","networkAclId","subnetId"],"inputProperties":{"networkAclId":{"type":"string","description":"The ID of the network ACL"},"subnetId":{"type":"string","description":"The ID of the subnet"}},"requiredInputs":["networkAclId","subnetId"]},"aws-native:ec2:SubnetRouteTableAssociation":{"description":"Associates a subnet with a route table. The subnet and route table must be in the same VPC. This association causes traffic originating from the subnet to be routed according to the routes in the route table. A route table can be associated with multiple subnets. To create a route table, see [AWS::EC2::RouteTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-routetable.html).","properties":{"awsId":{"type":"string","description":"The ID of the subnet route table association."},"routeTableId":{"type":"string","description":"The ID of the route table.\n The physical ID changes when the route table ID is changed.","replaceOnChanges":true},"subnetId":{"type":"string","description":"The ID of the subnet.","replaceOnChanges":true}},"type":"object","required":["awsId","routeTableId","subnetId"],"inputProperties":{"routeTableId":{"type":"string","description":"The ID of the route table.\n The physical ID changes when the route table ID is changed."},"subnetId":{"type":"string","description":"The ID of the subnet."}},"requiredInputs":["routeTableId","subnetId"]},"aws-native:ec2:TrafficMirrorFilter":{"description":"Resource schema for AWS::EC2::TrafficMirrorFilter","properties":{"awsId":{"type":"string","description":"The ID of a traffic mirror filter."},"description":{"type":"string","description":"The description of a traffic mirror filter.","replaceOnChanges":true},"networkServices":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterTrafficMirrorNetworkService"},"description":"The network service that is associated with the traffic mirror filter."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for a traffic mirror filter."}},"type":"object","required":["awsId"],"inputProperties":{"description":{"type":"string","description":"The description of a traffic mirror filter."},"networkServices":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterTrafficMirrorNetworkService"},"description":"The network service that is associated with the traffic mirror filter."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for a traffic mirror filter."}}},"aws-native:ec2:TrafficMirrorFilterRule":{"description":"Resource Type definition for for AWS::EC2::TrafficMirrorFilterRule","properties":{"description":{"type":"string","description":"The description of the Traffic Mirror Filter rule."},"destinationCidrBlock":{"type":"string","description":"The destination CIDR block to assign to the Traffic Mirror rule."},"destinationPortRange":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange","description":"The destination port range."},"protocol":{"type":"integer","description":"The number of protocol, for example 17 (UDP), to assign to the Traffic Mirror rule."},"ruleAction":{"type":"string","description":"The action to take on the filtered traffic (accept/reject)."},"ruleNumber":{"type":"integer","description":"The number of the Traffic Mirror rule."},"sourceCidrBlock":{"type":"string","description":"The source CIDR block to assign to the Traffic Mirror Filter rule."},"sourcePortRange":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange","description":"The source port range."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the Traffic Mirror Filter rule."},"trafficDirection":{"type":"string","description":"The direction of traffic (ingress/egress)."},"trafficMirrorFilterId":{"type":"string","description":"The ID of the filter that this rule is associated with.","replaceOnChanges":true},"trafficMirrorFilterRuleId":{"type":"string","description":"The ID of the Traffic Mirror Filter rule."}},"type":"object","required":["destinationCidrBlock","ruleAction","ruleNumber","sourceCidrBlock","trafficDirection","trafficMirrorFilterId","trafficMirrorFilterRuleId"],"inputProperties":{"description":{"type":"string","description":"The description of the Traffic Mirror Filter rule."},"destinationCidrBlock":{"type":"string","description":"The destination CIDR block to assign to the Traffic Mirror rule."},"destinationPortRange":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange","description":"The destination port range."},"protocol":{"type":"integer","description":"The number of protocol, for example 17 (UDP), to assign to the Traffic Mirror rule."},"ruleAction":{"type":"string","description":"The action to take on the filtered traffic (accept/reject)."},"ruleNumber":{"type":"integer","description":"The number of the Traffic Mirror rule."},"sourceCidrBlock":{"type":"string","description":"The source CIDR block to assign to the Traffic Mirror Filter rule."},"sourcePortRange":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange","description":"The source port range."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the Traffic Mirror Filter rule."},"trafficDirection":{"type":"string","description":"The direction of traffic (ingress/egress)."},"trafficMirrorFilterId":{"type":"string","description":"The ID of the filter that this rule is associated with."}},"requiredInputs":["destinationCidrBlock","ruleAction","ruleNumber","sourceCidrBlock","trafficDirection","trafficMirrorFilterId"]},"aws-native:ec2:TrafficMirrorSession":{"description":"Resource schema for AWS::EC2::TrafficMirrorSession","properties":{"awsId":{"type":"string","description":"The ID of a Traffic Mirror session."},"description":{"type":"string","description":"The description of the Traffic Mirror session."},"networkInterfaceId":{"type":"string","description":"The ID of the source network interface."},"ownerId":{"type":"string","description":"The ID of the account that owns the Traffic Mirror session."},"packetLength":{"type":"integer","description":"The number of bytes in each packet to mirror."},"sessionNumber":{"type":"integer","description":"The session number determines the order in which sessions are evaluated when an interface is used by multiple sessions. The first session with a matching filter is the one that mirrors the packets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the Traffic Mirror session."},"trafficMirrorFilterId":{"type":"string","description":"The ID of a Traffic Mirror filter."},"trafficMirrorTargetId":{"type":"string","description":"The ID of a Traffic Mirror target."},"virtualNetworkId":{"type":"integer","description":"The VXLAN ID for the Traffic Mirror session."}},"type":"object","required":["awsId","networkInterfaceId","sessionNumber","trafficMirrorFilterId","trafficMirrorTargetId"],"inputProperties":{"description":{"type":"string","description":"The description of the Traffic Mirror session."},"networkInterfaceId":{"type":"string","description":"The ID of the source network interface."},"ownerId":{"type":"string","description":"The ID of the account that owns the Traffic Mirror session."},"packetLength":{"type":"integer","description":"The number of bytes in each packet to mirror."},"sessionNumber":{"type":"integer","description":"The session number determines the order in which sessions are evaluated when an interface is used by multiple sessions. The first session with a matching filter is the one that mirrors the packets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the Traffic Mirror session."},"trafficMirrorFilterId":{"type":"string","description":"The ID of a Traffic Mirror filter."},"trafficMirrorTargetId":{"type":"string","description":"The ID of a Traffic Mirror target."},"virtualNetworkId":{"type":"integer","description":"The VXLAN ID for the Traffic Mirror session."}},"requiredInputs":["networkInterfaceId","sessionNumber","trafficMirrorFilterId","trafficMirrorTargetId"]},"aws-native:ec2:TrafficMirrorTarget":{"description":"The description of the Traffic Mirror target.","properties":{"awsId":{"type":"string"},"description":{"type":"string","description":"The description of the Traffic Mirror target.","replaceOnChanges":true},"gatewayLoadBalancerEndpointId":{"type":"string","description":"The ID of the Gateway Load Balancer endpoint.","replaceOnChanges":true},"networkInterfaceId":{"type":"string","description":"The network interface ID that is associated with the target.","replaceOnChanges":true},"networkLoadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Network Load Balancer that is associated with the target.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":" The tags to assign to the Traffic Mirror target."}},"type":"object","required":["awsId"],"inputProperties":{"description":{"type":"string","description":"The description of the Traffic Mirror target."},"gatewayLoadBalancerEndpointId":{"type":"string","description":"The ID of the Gateway Load Balancer endpoint."},"networkInterfaceId":{"type":"string","description":"The network interface ID that is associated with the target."},"networkLoadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Network Load Balancer that is associated with the target."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":" The tags to assign to the Traffic Mirror target."}}},"aws-native:ec2:TransitGateway":{"description":"Resource Type definition for AWS::EC2::TransitGateway","properties":{"amazonSideAsn":{"type":"integer","description":"A private Autonomous System Number (ASN) for the Amazon side of a BGP session. The range is 64512 to 65534 for 16-bit ASNs. The default is 64512.","replaceOnChanges":true},"associationDefaultRouteTableId":{"type":"string","description":"The ID of the default association route table."},"autoAcceptSharedAttachments":{"type":"string","description":"Enable or disable automatic acceptance of attachment requests. Disabled by default."},"awsId":{"type":"string","description":"The ID of the transit gateway."},"defaultRouteTableAssociation":{"type":"string","description":"Enable or disable automatic association with the default association route table. Enabled by default. If `DefaultRouteTableAssociation` is set to enable, AWS Transit Gateway will create the default transit gateway route table."},"defaultRouteTablePropagation":{"type":"string","description":"Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default. If `DefaultRouteTablePropagation` is set to enable, AWS Transit Gateway will create the default transit gateway route table."},"description":{"type":"string","description":"The description of the transit gateway."},"dnsSupport":{"type":"string","description":"Enable or disable DNS support. Enabled by default."},"encryptionSupport":{"$ref":"#/types/aws-native:ec2:TransitGatewayEncryptionSupport","description":"Enable or disable encryption support. Disabled by default."},"encryptionSupportState":{"type":"string","description":"The encryption support state of the transit gateway."},"multicastSupport":{"type":"string","description":"Indicates whether multicast is enabled on the transit gateway","replaceOnChanges":true},"propagationDefaultRouteTableId":{"type":"string","description":"The ID of the default propagation route table."},"securityGroupReferencingSupport":{"type":"string","description":"Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the transit gateway."},"transitGatewayArn":{"type":"string"},"transitGatewayCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The transit gateway CIDR blocks."},"vpnEcmpSupport":{"type":"string","description":"Enable or disable Equal Cost Multipath Protocol support. Enabled by default."}},"type":"object","required":["awsId","encryptionSupportState","transitGatewayArn"],"inputProperties":{"amazonSideAsn":{"type":"integer","description":"A private Autonomous System Number (ASN) for the Amazon side of a BGP session. The range is 64512 to 65534 for 16-bit ASNs. The default is 64512."},"associationDefaultRouteTableId":{"type":"string","description":"The ID of the default association route table."},"autoAcceptSharedAttachments":{"type":"string","description":"Enable or disable automatic acceptance of attachment requests. Disabled by default."},"defaultRouteTableAssociation":{"type":"string","description":"Enable or disable automatic association with the default association route table. Enabled by default. If `DefaultRouteTableAssociation` is set to enable, AWS Transit Gateway will create the default transit gateway route table."},"defaultRouteTablePropagation":{"type":"string","description":"Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default. If `DefaultRouteTablePropagation` is set to enable, AWS Transit Gateway will create the default transit gateway route table."},"description":{"type":"string","description":"The description of the transit gateway."},"dnsSupport":{"type":"string","description":"Enable or disable DNS support. Enabled by default."},"encryptionSupport":{"$ref":"#/types/aws-native:ec2:TransitGatewayEncryptionSupport","description":"Enable or disable encryption support. Disabled by default."},"multicastSupport":{"type":"string","description":"Indicates whether multicast is enabled on the transit gateway"},"propagationDefaultRouteTableId":{"type":"string","description":"The ID of the default propagation route table."},"securityGroupReferencingSupport":{"type":"string","description":"Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the transit gateway."},"transitGatewayCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The transit gateway CIDR blocks."},"vpnEcmpSupport":{"type":"string","description":"Enable or disable Equal Cost Multipath Protocol support. Enabled by default."}}},"aws-native:ec2:TransitGatewayAttachment":{"description":"Resource Type definition for AWS::EC2::TransitGatewayAttachment","properties":{"awsId":{"type":"string","description":"The ID of the attachment."},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway vpc attachment."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more subnets. You can specify only one subnet per Availability Zone. You must specify at least one subnet, but we recommend that you specify two subnets for better availability. The transit gateway uses one IP address from each specified subnet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["awsId","subnetIds","transitGatewayId","vpcId"],"inputProperties":{"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway vpc attachment."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more subnets. You can specify only one subnet per Availability Zone. You must specify at least one subnet, but we recommend that you specify two subnets for better availability. The transit gateway uses one IP address from each specified subnet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["subnetIds","transitGatewayId","vpcId"]},"aws-native:ec2:TransitGatewayConnect":{"description":"The AWS::EC2::TransitGatewayConnect type","properties":{"creationTime":{"type":"string","description":"The creation time."},"options":{"$ref":"#/types/aws-native:ec2:TransitGatewayConnectOptions","description":"The Connect attachment options.","replaceOnChanges":true},"state":{"type":"string","description":"The state of the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the attachment."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the Connect attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway."},"transportTransitGatewayAttachmentId":{"type":"string","description":"The ID of the attachment from which the Connect attachment was created.","replaceOnChanges":true}},"type":"object","required":["creationTime","options","state","transitGatewayAttachmentId","transitGatewayId","transportTransitGatewayAttachmentId"],"inputProperties":{"options":{"$ref":"#/types/aws-native:ec2:TransitGatewayConnectOptions","description":"The Connect attachment options."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the attachment."},"transportTransitGatewayAttachmentId":{"type":"string","description":"The ID of the attachment from which the Connect attachment was created."}},"requiredInputs":["options","transportTransitGatewayAttachmentId"]},"aws-native:ec2:TransitGatewayConnectPeer":{"description":"Resource Type definition for AWS::EC2::TransitGatewayConnectPeer","properties":{"connectPeerConfiguration":{"$ref":"#/types/aws-native:ec2:TransitGatewayConnectPeerConfiguration","description":"The Connect peer details.","replaceOnChanges":true},"creationTime":{"type":"string","description":"The creation time."},"state":{"type":"string","description":"The state of the Connect peer."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the Connect Peer."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the Connect attachment.","replaceOnChanges":true},"transitGatewayConnectPeerId":{"type":"string","description":"The ID of the Connect peer."}},"type":"object","required":["connectPeerConfiguration","creationTime","state","transitGatewayAttachmentId","transitGatewayConnectPeerId"],"inputProperties":{"connectPeerConfiguration":{"$ref":"#/types/aws-native:ec2:TransitGatewayConnectPeerConfiguration","description":"The Connect peer details."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the Connect Peer."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the Connect attachment."}},"requiredInputs":["connectPeerConfiguration","transitGatewayAttachmentId"]},"aws-native:ec2:TransitGatewayMeteringPolicy":{"description":"AWS::EC2::TransitGatewayMeteringPolicy Resource Definition","properties":{"middleboxAttachmentIds":{"type":"array","items":{"type":"string"},"description":"Middle box attachment Ids"},"state":{"type":"string","description":"State of the transit gateway metering policy"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the transit gateway metering policy."},"transitGatewayId":{"type":"string","description":"The Id of transit gateway","replaceOnChanges":true},"transitGatewayMeteringPolicyId":{"type":"string","description":"The Id of the transit gateway metering policy"},"updateEffectiveAt":{"type":"string","description":"The timestamp at which the latest action performed on the metering policy will become effective"}},"type":"object","required":["state","transitGatewayId","transitGatewayMeteringPolicyId","updateEffectiveAt"],"inputProperties":{"middleboxAttachmentIds":{"type":"array","items":{"type":"string"},"description":"Middle box attachment Ids"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to the transit gateway metering policy."},"transitGatewayId":{"type":"string","description":"The Id of transit gateway"}},"requiredInputs":["transitGatewayId"]},"aws-native:ec2:TransitGatewayMeteringPolicyEntry":{"description":"AWS::EC2::TransitGatewayMeteringPolicyEntry Resource Definition","properties":{"destinationCidrBlock":{"type":"string","description":"The list of IP addresses of the instances receiving traffic from the transit gateway","replaceOnChanges":true},"destinationPortRange":{"type":"string","description":"The list of ports on destination instances receiving traffic from the transit gateway","replaceOnChanges":true},"destinationTransitGatewayAttachmentId":{"type":"string","description":"The ID of the source attachment through which traffic leaves a transit gateway","replaceOnChanges":true},"destinationTransitGatewayAttachmentType":{"$ref":"#/types/aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayAttachmentResourceType","description":"The type of the attachment through which traffic leaves a transit gateway","replaceOnChanges":true},"meteredAccount":{"$ref":"#/types/aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayMeteringPayerType","description":"The resource owner information responsible for paying default billable charges for the traffic flow","replaceOnChanges":true},"policyRuleNumber":{"type":"integer","description":"The rule number of the metering policy entry","replaceOnChanges":true},"protocol":{"type":"string","description":"The protocol of the traffic","replaceOnChanges":true},"sourceCidrBlock":{"type":"string","description":"The list of IP addresses of the instances sending traffic to the transit gateway for which the metering policy entry is applicable","replaceOnChanges":true},"sourcePortRange":{"type":"string","description":"The list of ports on source instances sending traffic to the transit gateway","replaceOnChanges":true},"sourceTransitGatewayAttachmentId":{"type":"string","description":"The ID of the source attachment through which traffic enters a transit gateway","replaceOnChanges":true},"sourceTransitGatewayAttachmentType":{"$ref":"#/types/aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayAttachmentResourceType","description":"The type of the attachment through which traffic enters a  transit gateway","replaceOnChanges":true},"state":{"type":"string","description":"State of the transit gateway metering policy"},"transitGatewayMeteringPolicyId":{"type":"string","description":"The ID of the transit gateway metering policy for which the entry is being created","replaceOnChanges":true},"updateEffectiveAt":{"type":"string","description":"The timestamp at which the latest action performed on the metering policy entry will become effective"}},"type":"object","required":["meteredAccount","policyRuleNumber","state","transitGatewayMeteringPolicyId","updateEffectiveAt"],"inputProperties":{"destinationCidrBlock":{"type":"string","description":"The list of IP addresses of the instances receiving traffic from the transit gateway"},"destinationPortRange":{"type":"string","description":"The list of ports on destination instances receiving traffic from the transit gateway"},"destinationTransitGatewayAttachmentId":{"type":"string","description":"The ID of the source attachment through which traffic leaves a transit gateway"},"destinationTransitGatewayAttachmentType":{"$ref":"#/types/aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayAttachmentResourceType","description":"The type of the attachment through which traffic leaves a transit gateway"},"meteredAccount":{"$ref":"#/types/aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayMeteringPayerType","description":"The resource owner information responsible for paying default billable charges for the traffic flow"},"policyRuleNumber":{"type":"integer","description":"The rule number of the metering policy entry"},"protocol":{"type":"string","description":"The protocol of the traffic"},"sourceCidrBlock":{"type":"string","description":"The list of IP addresses of the instances sending traffic to the transit gateway for which the metering policy entry is applicable"},"sourcePortRange":{"type":"string","description":"The list of ports on source instances sending traffic to the transit gateway"},"sourceTransitGatewayAttachmentId":{"type":"string","description":"The ID of the source attachment through which traffic enters a transit gateway"},"sourceTransitGatewayAttachmentType":{"$ref":"#/types/aws-native:ec2:TransitGatewayMeteringPolicyEntryTransitGatewayAttachmentResourceType","description":"The type of the attachment through which traffic enters a  transit gateway"},"transitGatewayMeteringPolicyId":{"type":"string","description":"The ID of the transit gateway metering policy for which the entry is being created"}},"requiredInputs":["meteredAccount","policyRuleNumber","transitGatewayMeteringPolicyId"]},"aws-native:ec2:TransitGatewayMulticastDomain":{"description":"The AWS::EC2::TransitGatewayMulticastDomain type","properties":{"creationTime":{"type":"string","description":"The time the transit gateway multicast domain was created."},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway multicast domain."},"state":{"type":"string","description":"The state of the transit gateway multicast domain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the transit gateway multicast domain."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway.","replaceOnChanges":true},"transitGatewayMulticastDomainArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the transit gateway multicast domain."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"type":"object","required":["creationTime","state","transitGatewayId","transitGatewayMulticastDomainArn","transitGatewayMulticastDomainId"],"inputProperties":{"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway multicast domain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the transit gateway multicast domain."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway."}},"requiredInputs":["transitGatewayId"]},"aws-native:ec2:TransitGatewayMulticastDomainAssociation":{"description":"The AWS::EC2::TransitGatewayMulticastDomainAssociation type","properties":{"resourceId":{"type":"string","description":"The ID of the resource."},"resourceType":{"type":"string","description":"The type of resource, for example a VPC attachment."},"state":{"type":"string","description":"The state of the subnet association."},"subnetId":{"type":"string","description":"The IDs of the subnets to associate with the transit gateway multicast domain.","replaceOnChanges":true},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway attachment.","replaceOnChanges":true},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain.","replaceOnChanges":true}},"type":"object","required":["resourceId","resourceType","state","subnetId","transitGatewayAttachmentId","transitGatewayMulticastDomainId"],"inputProperties":{"subnetId":{"type":"string","description":"The IDs of the subnets to associate with the transit gateway multicast domain."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"requiredInputs":["subnetId","transitGatewayAttachmentId","transitGatewayMulticastDomainId"]},"aws-native:ec2:TransitGatewayMulticastGroupMember":{"description":"The AWS::EC2::TransitGatewayMulticastGroupMember registers and deregisters members and sources (network interfaces) with the transit gateway multicast group","properties":{"groupIpAddress":{"type":"string","description":"The IP address assigned to the transit gateway multicast group.","replaceOnChanges":true},"groupMember":{"type":"boolean","description":"Indicates that the resource is a transit gateway multicast group member."},"groupSource":{"type":"boolean","description":"Indicates that the resource is a transit gateway multicast group member."},"memberType":{"type":"string","description":"The member type (for example, static)."},"networkInterfaceId":{"type":"string","description":"The ID of the transit gateway attachment.","replaceOnChanges":true},"resourceId":{"type":"string","description":"The ID of the resource."},"resourceType":{"type":"string","description":"The type of resource, for example a VPC attachment."},"subnetId":{"type":"string","description":"The ID of the subnet."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain.","replaceOnChanges":true}},"type":"object","required":["groupIpAddress","groupMember","groupSource","memberType","networkInterfaceId","resourceId","resourceType","subnetId","transitGatewayAttachmentId","transitGatewayMulticastDomainId"],"inputProperties":{"groupIpAddress":{"type":"string","description":"The IP address assigned to the transit gateway multicast group."},"networkInterfaceId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"requiredInputs":["groupIpAddress","networkInterfaceId","transitGatewayMulticastDomainId"]},"aws-native:ec2:TransitGatewayMulticastGroupSource":{"description":"The AWS::EC2::TransitGatewayMulticastGroupSource registers and deregisters members and sources (network interfaces) with the transit gateway multicast group","properties":{"groupIpAddress":{"type":"string","description":"The IP address assigned to the transit gateway multicast group.","replaceOnChanges":true},"groupMember":{"type":"boolean","description":"Indicates that the resource is a transit gateway multicast group member."},"groupSource":{"type":"boolean","description":"Indicates that the resource is a transit gateway multicast group member."},"networkInterfaceId":{"type":"string","description":"The ID of the transit gateway attachment.","replaceOnChanges":true},"resourceId":{"type":"string","description":"The ID of the resource."},"resourceType":{"type":"string","description":"The type of resource, for example a VPC attachment."},"sourceType":{"type":"string","description":"The source type."},"subnetId":{"type":"string","description":"The ID of the subnet."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain.","replaceOnChanges":true}},"type":"object","required":["groupIpAddress","groupMember","groupSource","networkInterfaceId","resourceId","resourceType","sourceType","subnetId","transitGatewayAttachmentId","transitGatewayMulticastDomainId"],"inputProperties":{"groupIpAddress":{"type":"string","description":"The IP address assigned to the transit gateway multicast group."},"networkInterfaceId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"requiredInputs":["groupIpAddress","networkInterfaceId","transitGatewayMulticastDomainId"]},"aws-native:ec2:TransitGatewayPeeringAttachment":{"description":"The AWS::EC2::TransitGatewayPeeringAttachment type","properties":{"creationTime":{"type":"string","description":"The time the transit gateway peering attachment was created."},"peerAccountId":{"type":"string","description":"The ID of the peer account","replaceOnChanges":true},"peerRegion":{"type":"string","description":"Peer Region","replaceOnChanges":true},"peerTransitGatewayId":{"type":"string","description":"The ID of the peer transit gateway.","replaceOnChanges":true},"state":{"type":"string","description":"The state of the transit gateway peering attachment. Note that the initiating state has been deprecated."},"status":{"$ref":"#/types/aws-native:ec2:TransitGatewayPeeringAttachmentPeeringAttachmentStatus","description":"The status of the transit gateway peering attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the transit gateway peering attachment."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway peering attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway.","replaceOnChanges":true}},"type":"object","required":["creationTime","peerAccountId","peerRegion","peerTransitGatewayId","state","status","transitGatewayAttachmentId","transitGatewayId"],"inputProperties":{"peerAccountId":{"type":"string","description":"The ID of the peer account"},"peerRegion":{"type":"string","description":"Peer Region"},"peerTransitGatewayId":{"type":"string","description":"The ID of the peer transit gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the transit gateway peering attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway."}},"requiredInputs":["peerAccountId","peerRegion","peerTransitGatewayId","transitGatewayId"]},"aws-native:ec2:TransitGatewayRoute":{"description":"Resource Type definition for AWS::EC2::TransitGatewayRoute","properties":{"blackhole":{"type":"boolean","description":"Indicates whether to drop traffic that matches this route.","replaceOnChanges":true},"destinationCidrBlock":{"type":"string","description":"The CIDR range used for destination matches. Routing decisions are based on the most specific match.","replaceOnChanges":true},"transitGatewayAttachmentId":{"type":"string","description":"The ID of transit gateway attachment.","replaceOnChanges":true},"transitGatewayRouteTableId":{"type":"string","description":"The ID of transit gateway route table.","replaceOnChanges":true}},"type":"object","required":["destinationCidrBlock","transitGatewayRouteTableId"],"inputProperties":{"blackhole":{"type":"boolean","description":"Indicates whether to drop traffic that matches this route."},"destinationCidrBlock":{"type":"string","description":"The CIDR range used for destination matches. Routing decisions are based on the most specific match."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of transit gateway attachment."},"transitGatewayRouteTableId":{"type":"string","description":"The ID of transit gateway route table."}},"requiredInputs":["destinationCidrBlock","transitGatewayRouteTableId"]},"aws-native:ec2:TransitGatewayRouteTable":{"description":"Resource Type definition for AWS::EC2::TransitGatewayRouteTable","properties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags are composed of a Key/Value pair. You can use tags to categorize and track each parameter group. The tag value null is permitted."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway.","replaceOnChanges":true},"transitGatewayRouteTableId":{"type":"string","description":"Transit Gateway Route Table primary identifier"}},"type":"object","required":["transitGatewayId","transitGatewayRouteTableId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags are composed of a Key/Value pair. You can use tags to categorize and track each parameter group. The tag value null is permitted."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway."}},"requiredInputs":["transitGatewayId"]},"aws-native:ec2:TransitGatewayRouteTableAssociation":{"description":"Resource Type definition for AWS::EC2::TransitGatewayRouteTableAssociation","properties":{"transitGatewayAttachmentId":{"type":"string","description":"The ID of transit gateway attachment.","replaceOnChanges":true},"transitGatewayRouteTableId":{"type":"string","description":"The ID of transit gateway route table.","replaceOnChanges":true}},"type":"object","required":["transitGatewayAttachmentId","transitGatewayRouteTableId"],"inputProperties":{"transitGatewayAttachmentId":{"type":"string","description":"The ID of transit gateway attachment."},"transitGatewayRouteTableId":{"type":"string","description":"The ID of transit gateway route table."}},"requiredInputs":["transitGatewayAttachmentId","transitGatewayRouteTableId"]},"aws-native:ec2:TransitGatewayRouteTablePropagation":{"description":"AWS::EC2::TransitGatewayRouteTablePropagation Type","properties":{"transitGatewayAttachmentId":{"type":"string","description":"The ID of transit gateway attachment.","replaceOnChanges":true},"transitGatewayRouteTableId":{"type":"string","description":"The ID of transit gateway route table.","replaceOnChanges":true}},"type":"object","required":["transitGatewayAttachmentId","transitGatewayRouteTableId"],"inputProperties":{"transitGatewayAttachmentId":{"type":"string","description":"The ID of transit gateway attachment."},"transitGatewayRouteTableId":{"type":"string","description":"The ID of transit gateway route table."}},"requiredInputs":["transitGatewayAttachmentId","transitGatewayRouteTableId"]},"aws-native:ec2:TransitGatewayVpcAttachment":{"description":"Resource Type definition for AWS::EC2::TransitGatewayVpcAttachment","properties":{"addSubnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone."},"awsId":{"type":"string","description":"The ID of the attachment."},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway vpc attachment."},"removeSubnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more subnets to remove."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the VPC attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["awsId","subnetIds","transitGatewayId","vpcId"],"inputProperties":{"addSubnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more subnets to add. You can specify at most one subnet per Availability Zone."},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway vpc attachment."},"removeSubnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of one or more subnets to remove."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the VPC attachment."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["subnetIds","transitGatewayId","vpcId"]},"aws-native:ec2:VerifiedAccessEndpoint":{"description":"The AWS::EC2::VerifiedAccessEndpoint resource creates an AWS EC2 Verified Access Endpoint.","properties":{"applicationDomain":{"type":"string","description":"The DNS name for users to reach your application.","replaceOnChanges":true},"attachmentType":{"type":"string","description":"The type of attachment used to provide connectivity between the AWS Verified Access endpoint and the application.","replaceOnChanges":true},"cidrOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointCidrOptions","description":"The options for cidr type endpoint."},"creationTime":{"type":"string","description":"The creation time."},"description":{"type":"string","description":"A description for the AWS Verified Access endpoint."},"deviceValidationDomain":{"type":"string","description":"Returned if endpoint has a device trust provider attached."},"domainCertificateArn":{"type":"string","description":"The ARN of a public TLS/SSL certificate imported into or created with ACM.","replaceOnChanges":true},"endpointDomain":{"type":"string","description":"A DNS name that is generated for the endpoint."},"endpointDomainPrefix":{"type":"string","description":"A custom identifier that gets prepended to a DNS name that is generated for the endpoint.","replaceOnChanges":true},"endpointType":{"type":"string","description":"The type of AWS Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.The type of AWS Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.","replaceOnChanges":true},"lastUpdatedTime":{"type":"string","description":"The last updated time."},"loadBalancerOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointLoadBalancerOptions","description":"The load balancer details if creating the AWS Verified Access endpoint as load-balancer type."},"networkInterfaceOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointNetworkInterfaceOptions","description":"The options for network-interface type endpoint."},"policyDocument":{"type":"string","description":"The AWS Verified Access policy document."},"policyEnabled":{"type":"boolean","description":"The status of the Verified Access policy."},"rdsOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointRdsOptions","description":"The options for rds type endpoint."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups for the endpoint.","replaceOnChanges":true},"sseSpecification":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointSseSpecification","description":"The configuration options for customer provided KMS encryption."},"status":{"type":"string","description":"The endpoint status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verifiedAccessEndpointId":{"type":"string","description":"The ID of the AWS Verified Access endpoint."},"verifiedAccessGroupId":{"type":"string","description":"The ID of the AWS Verified Access group."},"verifiedAccessInstanceId":{"type":"string","description":"The ID of the AWS Verified Access instance."}},"type":"object","required":["attachmentType","creationTime","deviceValidationDomain","endpointDomain","endpointType","lastUpdatedTime","status","verifiedAccessEndpointId","verifiedAccessGroupId","verifiedAccessInstanceId"],"inputProperties":{"applicationDomain":{"type":"string","description":"The DNS name for users to reach your application."},"attachmentType":{"type":"string","description":"The type of attachment used to provide connectivity between the AWS Verified Access endpoint and the application."},"cidrOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointCidrOptions","description":"The options for cidr type endpoint."},"description":{"type":"string","description":"A description for the AWS Verified Access endpoint."},"domainCertificateArn":{"type":"string","description":"The ARN of a public TLS/SSL certificate imported into or created with ACM."},"endpointDomainPrefix":{"type":"string","description":"A custom identifier that gets prepended to a DNS name that is generated for the endpoint."},"endpointType":{"type":"string","description":"The type of AWS Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.The type of AWS Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified."},"loadBalancerOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointLoadBalancerOptions","description":"The load balancer details if creating the AWS Verified Access endpoint as load-balancer type."},"networkInterfaceOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointNetworkInterfaceOptions","description":"The options for network-interface type endpoint."},"policyDocument":{"type":"string","description":"The AWS Verified Access policy document."},"policyEnabled":{"type":"boolean","description":"The status of the Verified Access policy."},"rdsOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointRdsOptions","description":"The options for rds type endpoint."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups for the endpoint."},"sseSpecification":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointSseSpecification","description":"The configuration options for customer provided KMS encryption."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verifiedAccessGroupId":{"type":"string","description":"The ID of the AWS Verified Access group."}},"requiredInputs":["attachmentType","endpointType","verifiedAccessGroupId"]},"aws-native:ec2:VerifiedAccessGroup":{"description":"The AWS::EC2::VerifiedAccessGroup resource creates an AWS EC2 Verified Access Group.","properties":{"creationTime":{"type":"string","description":"Time this Verified Access Group was created."},"description":{"type":"string","description":"A description for the AWS Verified Access group."},"lastUpdatedTime":{"type":"string","description":"Time this Verified Access Group was last updated."},"owner":{"type":"string","description":"The AWS account number that owns the group."},"policyDocument":{"type":"string","description":"The AWS Verified Access policy document."},"policyEnabled":{"type":"boolean","description":"The status of the Verified Access policy."},"sseSpecification":{"$ref":"#/types/aws-native:ec2:VerifiedAccessGroupSseSpecification","description":"The configuration options for customer provided KMS encryption."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verifiedAccessGroupArn":{"type":"string","description":"The ARN of the Verified Access group."},"verifiedAccessGroupId":{"type":"string","description":"The ID of the AWS Verified Access group."},"verifiedAccessInstanceId":{"type":"string","description":"The ID of the AWS Verified Access instance."}},"type":"object","required":["creationTime","lastUpdatedTime","owner","verifiedAccessGroupArn","verifiedAccessGroupId","verifiedAccessInstanceId"],"inputProperties":{"description":{"type":"string","description":"A description for the AWS Verified Access group."},"policyDocument":{"type":"string","description":"The AWS Verified Access policy document."},"policyEnabled":{"type":"boolean","description":"The status of the Verified Access policy."},"sseSpecification":{"$ref":"#/types/aws-native:ec2:VerifiedAccessGroupSseSpecification","description":"The configuration options for customer provided KMS encryption."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verifiedAccessInstanceId":{"type":"string","description":"The ID of the AWS Verified Access instance."}},"requiredInputs":["verifiedAccessInstanceId"]},"aws-native:ec2:VerifiedAccessInstance":{"description":"The AWS::EC2::VerifiedAccessInstance resource creates an AWS EC2 Verified Access Instance.","properties":{"cidrEndpointsCustomSubDomain":{"type":"string","description":"Introduce CidrEndpointsCustomSubDomain property to represent the domain (say, ava.my-company.com)"},"cidrEndpointsCustomSubDomainNameServers":{"type":"array","items":{"type":"string"},"description":"Property to represent the name servers assoicated with the domain that AVA manages (say, ['ns1.amazonaws.com', 'ns2.amazonaws.com', 'ns3.amazonaws.com', 'ns4.amazonaws.com'])."},"creationTime":{"type":"string","description":"Time this Verified Access Instance was created."},"description":{"type":"string","description":"A description for the AWS Verified Access instance."},"fipsEnabled":{"type":"boolean","description":"Indicates whether FIPS is enabled"},"lastUpdatedTime":{"type":"string","description":"Time this Verified Access Instance was last updated."},"loggingConfigurations":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogs","description":"The configuration options for AWS Verified Access instances."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verifiedAccessInstanceId":{"type":"string","description":"The ID of the AWS Verified Access instance."},"verifiedAccessTrustProviderIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the AWS Verified Access trust providers."},"verifiedAccessTrustProviders":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessTrustProvider"},"description":"AWS Verified Access trust providers."}},"type":"object","required":["cidrEndpointsCustomSubDomainNameServers","creationTime","lastUpdatedTime","verifiedAccessInstanceId"],"inputProperties":{"cidrEndpointsCustomSubDomain":{"type":"string","description":"Introduce CidrEndpointsCustomSubDomain property to represent the domain (say, ava.my-company.com)"},"description":{"type":"string","description":"A description for the AWS Verified Access instance."},"fipsEnabled":{"type":"boolean","description":"Indicates whether FIPS is enabled"},"loggingConfigurations":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogs","description":"The configuration options for AWS Verified Access instances."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verifiedAccessTrustProviderIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the AWS Verified Access trust providers."},"verifiedAccessTrustProviders":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessTrustProvider"},"description":"AWS Verified Access trust providers."}}},"aws-native:ec2:VerifiedAccessTrustProvider":{"description":"The AWS::EC2::VerifiedAccessTrustProvider type describes a verified access trust provider","properties":{"creationTime":{"type":"string","description":"The creation time."},"description":{"type":"string","description":"A description for the Amazon Web Services Verified Access trust provider."},"deviceOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderDeviceOptions","description":"The options for device-identity trust provider.","replaceOnChanges":true},"deviceTrustProviderType":{"type":"string","description":"The type of device-based trust provider. Possible values: jamf|crowdstrike","replaceOnChanges":true},"lastUpdatedTime":{"type":"string","description":"The last updated time."},"nativeApplicationOidcOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderNativeApplicationOidcOptions","description":"The OpenID Connect (OIDC) options."},"oidcOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderOidcOptions","description":"The options for an OpenID Connect-compatible user-identity trust provider."},"policyReferenceName":{"type":"string","description":"The identifier to be used when working with policy rules.","replaceOnChanges":true},"sseSpecification":{"$ref":"#/types/aws-native:ec2:SseSpecificationProperties","description":"The configuration options for customer provided KMS encryption."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trustProviderType":{"type":"string","description":"Type of trust provider. Possible values: user|device","replaceOnChanges":true},"userTrustProviderType":{"type":"string","description":"The type of device-based trust provider. Possible values: oidc|iam-identity-center","replaceOnChanges":true},"verifiedAccessTrustProviderId":{"type":"string","description":"The ID of the Amazon Web Services Verified Access trust provider."}},"type":"object","required":["creationTime","lastUpdatedTime","policyReferenceName","trustProviderType","verifiedAccessTrustProviderId"],"inputProperties":{"description":{"type":"string","description":"A description for the Amazon Web Services Verified Access trust provider."},"deviceOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderDeviceOptions","description":"The options for device-identity trust provider."},"deviceTrustProviderType":{"type":"string","description":"The type of device-based trust provider. Possible values: jamf|crowdstrike"},"nativeApplicationOidcOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderNativeApplicationOidcOptions","description":"The OpenID Connect (OIDC) options."},"oidcOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderOidcOptions","description":"The options for an OpenID Connect-compatible user-identity trust provider."},"policyReferenceName":{"type":"string","description":"The identifier to be used when working with policy rules."},"sseSpecification":{"$ref":"#/types/aws-native:ec2:SseSpecificationProperties","description":"The configuration options for customer provided KMS encryption."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trustProviderType":{"type":"string","description":"Type of trust provider. Possible values: user|device"},"userTrustProviderType":{"type":"string","description":"The type of device-based trust provider. Possible values: oidc|iam-identity-center"}},"requiredInputs":["policyReferenceName","trustProviderType"]},"aws-native:ec2:Volume":{"description":"Specifies an Amazon Elastic Block Store (Amazon EBS) volume. You can create an empty volume, a volume from a snapshot, or a volume copy from an existing source volume.\n\n\u003e - When you use AWS CloudFormation to update an Amazon EBS volume that modifies `Iops` , `Size` , or `VolumeType` , there is a cooldown period before another operation can occur. This can cause your stack to report being in `UPDATE_IN_PROGRESS` or `UPDATE_ROLLBACK_IN_PROGRESS` for long periods of time. Some common scenarios when you might encounter a cooldown period for Amazon EBS include:\n\u003e \n\u003e - You successfully update an Amazon EBS volume and the update succeeds. When you attempt another update within the cooldown window, that update will be subject to a cooldown period.\n\u003e - You successfully update an Amazon EBS volume and the update succeeds but another change in your `update-stack` call fails. The rollback will be subject to a cooldown period.\n\u003e \n\u003e For more information, see [Requirements for EBS volume modifications](https://docs.aws.amazon.com/ebs/latest/userguide/modify-volume-requirements.html) .\n\u003e - Amazon EBS does not support sizing down an Amazon EBS volume. AWS CloudFormation does not attempt to modify an Amazon EBS volume to a smaller size on rollback. \n\n*DeletionPolicy attribute*\n\nTo control how AWS CloudFormation handles the volume when the stack is deleted, set a deletion policy for your volume. You can choose to retain the volume, to delete the volume, or to create a snapshot of the volume. For more information, see [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) .\n\n\u003e If you set a deletion policy that creates a snapshot, all tags on the volume are included in the snapshot.","properties":{"autoEnableIo":{"type":"boolean","description":"Indicates whether the volume is auto-enabled for I/O operations. By default, EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O."},"availabilityZone":{"type":"string","description":"The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a``.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.\n If you are creating a volume copy, omit this parameter. The volume copy is created in the same Availability Zone as the source volume."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which to create the volume. For example, ``use1-az1``.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.\n If you are creating a volume copy, omit this parameter. The volume copy is created in the same Availability Zone as the source volume."},"encrypted":{"type":"boolean","description":"Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new, from a snapshot, or from an existing volume), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see [Encryption by default](https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default) in the *Amazon EBS User Guide*.\n If you are creating a volume copy, omit this parameter. The volume is automatically encrypted with the same KMS key as the source volume. You can't copy unencrypted volumes."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS) to provision for the volume. Required for ``io1`` and ``io2`` volumes. Optional for ``gp3`` volumes. Omit for all other volume types. \n Valid ranges:\n  +  gp3: ``3,000``(*default*)``- 80,000`` IOPS\n  +  io1: ``100 - 64,000`` IOPS\n  +  io2: ``100 - 256,000`` IOPS\n  \n  [Instances built on the Nitro System](https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html) can support up to 256,000 IOPS. Other instances can support up to 32,000 IOPS."},"kmsKeyId":{"type":"string","description":"The identifier of the kms-key-long to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true``.\n If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true``, then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the aws-managed-key.\n Alternatively, if you want to specify a different key, you can specify one of the following:\n  +  Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.\n  +  Key alias. Specify the alias for the key, prefixed with ``alias/``. For example, for a key with the alias ``my_cmk``, use ``alias/my_cmk``. Or to specify the aws-managed-key, use ``alias/aws/ebs``.\n  +  Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.\n  +  Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.\n  \n If you are creating a volume copy, omit this parameter. The volume is automatically encrypted with the same KMS key as the source volume. You can't copy unencrypted volumes."},"multiAttachEnabled":{"type":"boolean","description":"Indicates whether Amazon EBS Multi-Attach is enabled.\n CFNlong does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume."},"outpostArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Outpost on which to create the volume.\n If you intend to use a volume with an instance running on an outpost, then you must create the volume on the same outpost as the instance. You can't use a volume created in an AWS Region with an instance on an AWS outpost, or the other way around."},"size":{"type":"integer","description":"The size of the volume, in GiBs.\n  +  Required for new empty volumes.\n  +  Optional for volumes created from snapshots and volume copies. In this case, the size defaults to the size of the snapshot or source volume. You can optionally specify a size that is equal to or larger than the size of the source snapshot or volume.\n  \n Supported volume sizes:\n  +  gp2: ``1 - 16,384`` GiB\n  +  gp3: ``1 - 65,536`` GiB\n  +  io1: ``4 - 16,384`` GiB\n  +  io2: ``4 - 65,536`` GiB\n  +  st1 and sc1: ``125 - 16,384`` GiB\n  +  standard: ``1 - 1024`` GiB"},"snapshotId":{"type":"string","description":"The snapshot from which to create the volume. Only specify to create a volume from a snapshot. To create a new empty volume, omit this parameter and specify a value for ``Size`` instead. To create a volume copy, omit this parameter and specify ``SourceVolumeId`` instead."},"sourceVolumeId":{"type":"string","description":"The ID of the source EBS volume to copy. When specified, the volume is created as an exact copy of the specified volume. Only specify to create a volume copy. To create a new empty volume or to create a volume from a snapshot, omit this parameter,"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the volume during creation."},"throughput":{"type":"integer","description":"The throughput to provision for a volume, with a maximum of 2,000 MiB/s.\n This parameter is valid only for ``gp3`` volumes. The default value is 125.\n Valid Range: Minimum value of 125. Maximum value of 2000.\n The maximum ratio of throughput to IOPS is 0.25 MiB/s per IOPS. For example, a volume with 3,000 IOPS can have a maximum throughput of 750 MiB/s (3,000 x 0.25)."},"volumeId":{"type":"string","description":"The ID of the volume."},"volumeInitializationRate":{"type":"integer","description":"Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization*. Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.\n This parameter is supported only for volumes created from snapshots. Omit this parameter if:\n  +  You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.\n  If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.\n   +  You want to create a volume that is initialized at the default rate.\n  \n For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EC2 User Guide*.\n Valid range: 100 - 300 MiB/s"},"volumeType":{"type":"string","description":"The volume type. This parameter can be one of the following values:\n  +  General Purpose SSD: ``gp2`` | ``gp3``\n  +  Provisioned IOPS SSD: ``io1`` | ``io2``\n  +  Throughput Optimized HDD: ``st1``\n  +  Cold HDD: ``sc1``\n  +  Magnetic: ``standard``\n  \n  Throughput Optimized HDD (``st1``) and Cold HDD (``sc1``) volumes can't be used as boot volumes.\n  For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide*.\n Default: ``gp2``"}},"type":"object","required":["volumeId"],"inputProperties":{"autoEnableIo":{"type":"boolean","description":"Indicates whether the volume is auto-enabled for I/O operations. By default, EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O."},"availabilityZone":{"type":"string","description":"The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a``.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.\n If you are creating a volume copy, omit this parameter. The volume copy is created in the same Availability Zone as the source volume."},"availabilityZoneId":{"type":"string","description":"The ID of the Availability Zone in which to create the volume. For example, ``use1-az1``.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.\n If you are creating a volume copy, omit this parameter. The volume copy is created in the same Availability Zone as the source volume."},"encrypted":{"type":"boolean","description":"Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new, from a snapshot, or from an existing volume), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see [Encryption by default](https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default) in the *Amazon EBS User Guide*.\n If you are creating a volume copy, omit this parameter. The volume is automatically encrypted with the same KMS key as the source volume. You can't copy unencrypted volumes."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS) to provision for the volume. Required for ``io1`` and ``io2`` volumes. Optional for ``gp3`` volumes. Omit for all other volume types. \n Valid ranges:\n  +  gp3: ``3,000``(*default*)``- 80,000`` IOPS\n  +  io1: ``100 - 64,000`` IOPS\n  +  io2: ``100 - 256,000`` IOPS\n  \n  [Instances built on the Nitro System](https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html) can support up to 256,000 IOPS. Other instances can support up to 32,000 IOPS."},"kmsKeyId":{"type":"string","description":"The identifier of the kms-key-long to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true``.\n If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true``, then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the aws-managed-key.\n Alternatively, if you want to specify a different key, you can specify one of the following:\n  +  Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.\n  +  Key alias. Specify the alias for the key, prefixed with ``alias/``. For example, for a key with the alias ``my_cmk``, use ``alias/my_cmk``. Or to specify the aws-managed-key, use ``alias/aws/ebs``.\n  +  Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.\n  +  Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.\n  \n If you are creating a volume copy, omit this parameter. The volume is automatically encrypted with the same KMS key as the source volume. You can't copy unencrypted volumes."},"multiAttachEnabled":{"type":"boolean","description":"Indicates whether Amazon EBS Multi-Attach is enabled.\n CFNlong does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume."},"outpostArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Outpost on which to create the volume.\n If you intend to use a volume with an instance running on an outpost, then you must create the volume on the same outpost as the instance. You can't use a volume created in an AWS Region with an instance on an AWS outpost, or the other way around."},"size":{"type":"integer","description":"The size of the volume, in GiBs.\n  +  Required for new empty volumes.\n  +  Optional for volumes created from snapshots and volume copies. In this case, the size defaults to the size of the snapshot or source volume. You can optionally specify a size that is equal to or larger than the size of the source snapshot or volume.\n  \n Supported volume sizes:\n  +  gp2: ``1 - 16,384`` GiB\n  +  gp3: ``1 - 65,536`` GiB\n  +  io1: ``4 - 16,384`` GiB\n  +  io2: ``4 - 65,536`` GiB\n  +  st1 and sc1: ``125 - 16,384`` GiB\n  +  standard: ``1 - 1024`` GiB"},"snapshotId":{"type":"string","description":"The snapshot from which to create the volume. Only specify to create a volume from a snapshot. To create a new empty volume, omit this parameter and specify a value for ``Size`` instead. To create a volume copy, omit this parameter and specify ``SourceVolumeId`` instead."},"sourceVolumeId":{"type":"string","description":"The ID of the source EBS volume to copy. When specified, the volume is created as an exact copy of the specified volume. Only specify to create a volume copy. To create a new empty volume or to create a volume from a snapshot, omit this parameter,"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the volume during creation."},"throughput":{"type":"integer","description":"The throughput to provision for a volume, with a maximum of 2,000 MiB/s.\n This parameter is valid only for ``gp3`` volumes. The default value is 125.\n Valid Range: Minimum value of 125. Maximum value of 2000.\n The maximum ratio of throughput to IOPS is 0.25 MiB/s per IOPS. For example, a volume with 3,000 IOPS can have a maximum throughput of 750 MiB/s (3,000 x 0.25)."},"volumeInitializationRate":{"type":"integer","description":"Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization*. Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.\n This parameter is supported only for volumes created from snapshots. Omit this parameter if:\n  +  You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.\n  If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.\n   +  You want to create a volume that is initialized at the default rate.\n  \n For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EC2 User Guide*.\n Valid range: 100 - 300 MiB/s"},"volumeType":{"type":"string","description":"The volume type. This parameter can be one of the following values:\n  +  General Purpose SSD: ``gp2`` | ``gp3``\n  +  Provisioned IOPS SSD: ``io1`` | ``io2``\n  +  Throughput Optimized HDD: ``st1``\n  +  Cold HDD: ``sc1``\n  +  Magnetic: ``standard``\n  \n  Throughput Optimized HDD (``st1``) and Cold HDD (``sc1``) volumes can't be used as boot volumes.\n  For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide*.\n Default: ``gp2``"}}},"aws-native:ec2:VolumeAttachment":{"description":"Attaches an Amazon EBS volume to a running instance and exposes it to the instance with the specified device name.\n Before this resource can be deleted (and therefore the volume detached), you must first unmount the volume in the instance. Failure to do so results in the volume being stuck in the busy state while it is trying to detach, which could possibly damage the file system or the data it contains.\n If an Amazon EBS volume is the root device of an instance, it cannot be detached while the instance is in the \"running\" state. To detach the root volume, stop the instance first.\n If the root volume is detached from an instance with an MKT product code, then the product codes from that volume are no longer associated with the instance.","properties":{"device":{"type":"string","description":"The device name (for example, ``/dev/sdh`` or ``xvdh``).","replaceOnChanges":true},"ebsCardIndex":{"type":"integer","description":"The index of the EBS card. Some instance types support multiple EBS cards. The default EBS card index is 0.","replaceOnChanges":true},"instanceId":{"type":"string","description":"The ID of the instance to which the volume attaches. This value can be a reference to an [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) resource, or it can be the physical ID of an existing EC2 instance.","replaceOnChanges":true},"volumeId":{"type":"string","description":"The ID of the Amazon EBS volume. The volume and instance must be within the same Availability Zone. This value can be a reference to an [AWS::EC2::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html) resource, or it can be the volume ID of an existing Amazon EBS volume.","replaceOnChanges":true}},"type":"object","required":["instanceId","volumeId"],"inputProperties":{"device":{"type":"string","description":"The device name (for example, ``/dev/sdh`` or ``xvdh``)."},"ebsCardIndex":{"type":"integer","description":"The index of the EBS card. Some instance types support multiple EBS cards. The default EBS card index is 0."},"instanceId":{"type":"string","description":"The ID of the instance to which the volume attaches. This value can be a reference to an [AWS::EC2::Instance](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html) resource, or it can be the physical ID of an existing EC2 instance."},"volumeId":{"type":"string","description":"The ID of the Amazon EBS volume. The volume and instance must be within the same Availability Zone. This value can be a reference to an [AWS::EC2::Volume](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html) resource, or it can be the volume ID of an existing Amazon EBS volume."}},"requiredInputs":["instanceId","volumeId"]},"aws-native:ec2:Vpc":{"description":"Specifies a virtual private cloud (VPC).\n To add an IPv6 CIDR block to the VPC, see [AWS::EC2::VPCCidrBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html).\n For more information, see [Virtual private clouds (VPC)](https://docs.aws.amazon.com/vpc/latest/userguide/configure-your-vpc.html) in the *Amazon VPC User Guide*.","properties":{"cidrBlock":{"type":"string","description":"The IPv4 network range for the VPC, in CIDR notation. For example, ``10.0.0.0/16``. We modify the specified CIDR block to its canonical form; for example, if you specify ``100.68.0.18/18``, we modify it to ``100.68.0.0/18``.\n You must specify either``CidrBlock`` or ``Ipv4IpamPoolId``.","replaceOnChanges":true},"cidrBlockAssociations":{"type":"array","items":{"type":"string"},"description":"The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ]."},"defaultNetworkAcl":{"type":"string","description":"The ID of the default network ACL for the VPC. For example, acl-814dafe3."},"defaultSecurityGroup":{"type":"string","description":"The ID of the default security group for the VPC. For example, sg-b178e0d3."},"enableDnsHostnames":{"type":"boolean","description":"Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support).\n You can only enable DNS hostnames if you've enabled DNS support."},"enableDnsSupport":{"type":"boolean","description":"Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support)."},"instanceTenancy":{"type":"string","description":"The allowed tenancy of instances launched into the VPC.\n  +  ``default``: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n  +  ``dedicated``: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of ``host`` during instance launch. You cannot specify a tenancy of ``default`` during instance launch.\n  \n Updating ``InstanceTenancy`` requires no replacement only if you are updating its value from ``dedicated`` to ``default``. Updating ``InstanceTenancy`` from ``default`` to ``dedicated`` requires replacement."},"ipv4IpamPoolId":{"type":"string","description":"The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide*.\n You must specify either``CidrBlock`` or ``Ipv4IpamPoolId``.","replaceOnChanges":true},"ipv4NetmaskLength":{"type":"integer","description":"The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide*.","replaceOnChanges":true},"ipv6CidrBlocks":{"type":"array","items":{"type":"string"},"description":"The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ]."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the VPC."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"type":"object","required":["cidrBlockAssociations","defaultNetworkAcl","defaultSecurityGroup","ipv6CidrBlocks","vpcId"],"inputProperties":{"cidrBlock":{"type":"string","description":"The IPv4 network range for the VPC, in CIDR notation. For example, ``10.0.0.0/16``. We modify the specified CIDR block to its canonical form; for example, if you specify ``100.68.0.18/18``, we modify it to ``100.68.0.0/18``.\n You must specify either``CidrBlock`` or ``Ipv4IpamPoolId``."},"enableDnsHostnames":{"type":"boolean","description":"Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support).\n You can only enable DNS hostnames if you've enabled DNS support."},"enableDnsSupport":{"type":"boolean","description":"Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support)."},"instanceTenancy":{"type":"string","description":"The allowed tenancy of instances launched into the VPC.\n  +  ``default``: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n  +  ``dedicated``: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of ``host`` during instance launch. You cannot specify a tenancy of ``default`` during instance launch.\n  \n Updating ``InstanceTenancy`` requires no replacement only if you are updating its value from ``dedicated`` to ``default``. Updating ``InstanceTenancy`` from ``default`` to ``dedicated`` requires replacement."},"ipv4IpamPoolId":{"type":"string","description":"The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide*.\n You must specify either``CidrBlock`` or ``Ipv4IpamPoolId``."},"ipv4NetmaskLength":{"type":"integer","description":"The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see [What is IPAM?](https://docs.aws.amazon.com//vpc/latest/ipam/what-is-it-ipam.html) in the *Amazon VPC IPAM User Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the VPC."}}},"aws-native:ec2:VpcBlockPublicAccessExclusion":{"description":"Resource Type definition for AWS::EC2::VPCBlockPublicAccessExclusion.","properties":{"exclusionId":{"type":"string","description":"The ID of the exclusion"},"internetGatewayExclusionMode":{"$ref":"#/types/aws-native:ec2:VpcBlockPublicAccessExclusionInternetGatewayExclusionMode","description":"The desired Block Public Access Exclusion Mode for a specific VPC/Subnet."},"subnetId":{"type":"string","description":"The ID of the subnet. Required only if you don't specify VpcId","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcId":{"type":"string","description":"The ID of the vpc. Required only if you don't specify SubnetId.","replaceOnChanges":true}},"type":"object","required":["exclusionId","internetGatewayExclusionMode"],"inputProperties":{"internetGatewayExclusionMode":{"$ref":"#/types/aws-native:ec2:VpcBlockPublicAccessExclusionInternetGatewayExclusionMode","description":"The desired Block Public Access Exclusion Mode for a specific VPC/Subnet."},"subnetId":{"type":"string","description":"The ID of the subnet. Required only if you don't specify VpcId"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcId":{"type":"string","description":"The ID of the vpc. Required only if you don't specify SubnetId."}},"requiredInputs":["internetGatewayExclusionMode"]},"aws-native:ec2:VpcBlockPublicAccessOptions":{"description":"Resource Type definition for AWS::EC2::VPCBlockPublicAccessOptions","properties":{"accountId":{"type":"string","description":"The identifier for the specified AWS account."},"exclusionsAllowed":{"type":"string","description":"Determines if exclusions are allowed. If you have enabled VPC BPA at the Organization level, exclusions may be not-allowed. Otherwise, they are allowed."},"internetGatewayBlockMode":{"$ref":"#/types/aws-native:ec2:VpcBlockPublicAccessOptionsInternetGatewayBlockMode","description":"The desired Block Public Access mode for Internet Gateways in your account. We do not allow to create in a off mode as this is the default value"}},"type":"object","required":["accountId","exclusionsAllowed","internetGatewayBlockMode"],"inputProperties":{"internetGatewayBlockMode":{"$ref":"#/types/aws-native:ec2:VpcBlockPublicAccessOptionsInternetGatewayBlockMode","description":"The desired Block Public Access mode for Internet Gateways in your account. We do not allow to create in a off mode as this is the default value"}},"requiredInputs":["internetGatewayBlockMode"]},"aws-native:ec2:VpcCidrBlock":{"description":"Resource Type definition for AWS::EC2::VPCCidrBlock","properties":{"amazonProvidedIpv6CidrBlock":{"type":"boolean","description":"Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IPv6 addresses, or the size of the CIDR block.","replaceOnChanges":true},"awsId":{"type":"string","description":"The Id of the VPC associated CIDR Block."},"cidrBlock":{"type":"string","description":"An IPv4 CIDR block to associate with the VPC.","replaceOnChanges":true},"ipSource":{"type":"string","description":"The IP Source of an IPv6 VPC CIDR Block."},"ipv4IpamPoolId":{"type":"string","description":"The ID of the IPv4 IPAM pool to Associate a CIDR from to a VPC.","replaceOnChanges":true},"ipv4NetmaskLength":{"type":"integer","description":"The netmask length of the IPv4 CIDR you would like to associate from an Amazon VPC IP Address Manager (IPAM) pool.","replaceOnChanges":true},"ipv6AddressAttribute":{"type":"string","description":"The value denoting whether an IPv6 VPC CIDR Block is public or private."},"ipv6CidrBlock":{"type":"string","description":"An IPv6 CIDR block from the IPv6 address pool.","replaceOnChanges":true},"ipv6CidrBlockNetworkBorderGroup":{"type":"string","description":"The name of the location from which we advertise the IPV6 CIDR block.","replaceOnChanges":true},"ipv6IpamPoolId":{"type":"string","description":"The ID of the IPv6 IPAM pool to Associate a CIDR from to a VPC.","replaceOnChanges":true},"ipv6NetmaskLength":{"type":"integer","description":"The netmask length of the IPv6 CIDR you would like to associate from an Amazon VPC IP Address Manager (IPAM) pool.","replaceOnChanges":true},"ipv6Pool":{"type":"string","description":"The ID of an IPv6 address pool from which to allocate the IPv6 CIDR block.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["awsId","ipSource","ipv6AddressAttribute","vpcId"],"inputProperties":{"amazonProvidedIpv6CidrBlock":{"type":"boolean","description":"Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IPv6 addresses, or the size of the CIDR block."},"cidrBlock":{"type":"string","description":"An IPv4 CIDR block to associate with the VPC."},"ipv4IpamPoolId":{"type":"string","description":"The ID of the IPv4 IPAM pool to Associate a CIDR from to a VPC."},"ipv4NetmaskLength":{"type":"integer","description":"The netmask length of the IPv4 CIDR you would like to associate from an Amazon VPC IP Address Manager (IPAM) pool."},"ipv6CidrBlock":{"type":"string","description":"An IPv6 CIDR block from the IPv6 address pool."},"ipv6CidrBlockNetworkBorderGroup":{"type":"string","description":"The name of the location from which we advertise the IPV6 CIDR block."},"ipv6IpamPoolId":{"type":"string","description":"The ID of the IPv6 IPAM pool to Associate a CIDR from to a VPC."},"ipv6NetmaskLength":{"type":"integer","description":"The netmask length of the IPv6 CIDR you would like to associate from an Amazon VPC IP Address Manager (IPAM) pool."},"ipv6Pool":{"type":"string","description":"The ID of an IPv6 address pool from which to allocate the IPv6 CIDR block."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["vpcId"]},"aws-native:ec2:VpcEncryptionControl":{"description":"Resource Type definition for AWS::EC2::VPCEncryptionControl","properties":{"egressOnlyInternetGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput","description":"Used to enable or disable EIGW exclusion"},"elasticFileSystemExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlElasticFileSystemExclusionInput","description":"Used to enable or disable EFS exclusion"},"internetGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlInternetGatewayExclusionInput","description":"Used to enable or disable IGW exclusion"},"lambdaExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlLambdaExclusionInput","description":"Used to enable or disable Lambda exclusion"},"mode":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlMode","description":"The VPC encryption control mode, either monitor or enforce."},"natGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlNatGatewayExclusionInput","description":"Used to enable or disable Nat gateway exclusion"},"resourceExclusions":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlResourceExclusions","description":"Enumerates the states of all the VPC encryption control resource exclusions"},"state":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlState","description":"The current state of the VPC encryption control."},"stateMessage":{"type":"string","description":"Provides additional context on the state of the VPC encryption control."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the VPC encryption control."},"virtualPrivateGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlVirtualPrivateGatewayExclusionInput","description":"Used to enable or disable VGW exclusion"},"vpcEncryptionControlId":{"type":"string","description":"The VPC encryption control resource id."},"vpcId":{"type":"string","description":"The VPC on which this VPC encryption control is applied.","replaceOnChanges":true},"vpcLatticeExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlVpcLatticeExclusionInput","description":"Used to enable or disable Vpc Lattice exclusion"},"vpcPeeringExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlVpcPeeringExclusionInput","description":"Used to enable or disable VPC peering exclusion"}},"type":"object","required":["resourceExclusions","state","stateMessage","vpcEncryptionControlId"],"inputProperties":{"egressOnlyInternetGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput","description":"Used to enable or disable EIGW exclusion"},"elasticFileSystemExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlElasticFileSystemExclusionInput","description":"Used to enable or disable EFS exclusion"},"internetGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlInternetGatewayExclusionInput","description":"Used to enable or disable IGW exclusion"},"lambdaExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlLambdaExclusionInput","description":"Used to enable or disable Lambda exclusion"},"mode":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlMode","description":"The VPC encryption control mode, either monitor or enforce."},"natGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlNatGatewayExclusionInput","description":"Used to enable or disable Nat gateway exclusion"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the VPC encryption control."},"virtualPrivateGatewayExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlVirtualPrivateGatewayExclusionInput","description":"Used to enable or disable VGW exclusion"},"vpcId":{"type":"string","description":"The VPC on which this VPC encryption control is applied."},"vpcLatticeExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlVpcLatticeExclusionInput","description":"Used to enable or disable Vpc Lattice exclusion"},"vpcPeeringExclusionInput":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlVpcPeeringExclusionInput","description":"Used to enable or disable VPC peering exclusion"}}},"aws-native:ec2:VpcEndpoint":{"description":"Specifies a VPC endpoint. A VPC endpoint provides a private connection between your VPC and an endpoint service. You can use an endpoint service provided by AWS , an AWS Marketplace Partner, or another AWS accounts in your organization. For more information, see the [AWS PrivateLink User Guide](https://docs.aws.amazon.com/vpc/latest/privatelink/) .\n\nAn endpoint of type `Interface` establishes connections between the subnets in your VPC and an AWS service , your own service, or a service hosted by another AWS account . With an interface VPC endpoint, you specify the subnets in which to create the endpoint and the security groups to associate with the endpoint network interfaces.\n\nAn endpoint of type `gateway` serves as a target for a route in your route table for traffic destined for Amazon S3 or DynamoDB . You can specify an endpoint policy for the endpoint, which controls access to the service from your VPC. You can also specify the VPC route tables that use the endpoint. For more information about connectivity to Amazon S3 , see [Why can't I connect to an S3 bucket using a gateway VPC endpoint?](https://docs.aws.amazon.com/premiumsupport/knowledge-center/connect-s3-vpc-endpoint)\n\nAn endpoint of type `GatewayLoadBalancer` provides private connectivity between your VPC and virtual appliances from a service provider.","properties":{"awsId":{"type":"string","description":"The ID of the VPC endpoint."},"creationTimestamp":{"type":"string","description":"The date and time the VPC endpoint was created. For example: `Fri Sep 28 23:34:36 UTC 2018.`"},"dnsEntries":{"type":"array","items":{"type":"string"},"description":"(Interface endpoints) The DNS entries for the endpoint. Each entry is a combination of the hosted zone ID and the DNS name. The entries are ordered as follows: regional public DNS, zonal public DNS, private DNS, and wildcard DNS. This order is not enforced for AWS Marketplace services.\n\nThe following is an example. In the first entry, the hosted zone ID is Z1HUB23UULQXV and the DNS name is vpce-01abc23456de78f9g-12abccd3.ec2.us-east-1.vpce.amazonaws.com.\n\n[\"Z1HUB23UULQXV:vpce-01abc23456de78f9g-12abccd3.ec2.us-east-1.vpce.amazonaws.com\", \"Z1HUB23UULQXV:vpce-01abc23456de78f9g-12abccd3-us-east-1a.ec2.us-east-1.vpce.amazonaws.com\", \"Z1C12344VYDITB0:ec2.us-east-1.amazonaws.com\"]\n\nIf you update the `PrivateDnsEnabled` or `SubnetIds` properties, the DNS entries in the list will change."},"dnsOptions":{"$ref":"#/types/aws-native:ec2:VpcEndpointDnsOptionsSpecification","description":"Describes the DNS options for an endpoint."},"ipAddressType":{"$ref":"#/types/aws-native:ec2:VpcEndpointIpAddressType","description":"The supported IP address types."},"networkInterfaceIds":{"type":"array","items":{"type":"string"},"description":"(Interface endpoints) The network interface IDs. If you update the `PrivateDnsEnabled` or `SubnetIds` properties, the items in this list might change."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"An endpoint policy, which controls access to the service from the VPC. The default endpoint policy allows full access to the service. Endpoint policies are supported only for gateway and interface endpoints.\n For CloudFormation templates in YAML, you can provide the policy in JSON or YAML format. For example, if you have a JSON policy, you can convert it to YAML before including it in the YAML template, and CFNlong converts the policy to JSON format before calling the API actions for privatelink. Alternatively, you can include the JSON directly in the YAML, as shown in the following ``Properties`` section:\n ``Properties: VpcEndpointType: 'Interface' ServiceName: !Sub 'com.amazonaws.${AWS::Region}.logs' PolicyDocument: '{ \"Version\":\"2012-10-17\", \"Statement\": [{ \"Effect\":\"Allow\", \"Principal\":\"*\", \"Action\":[\"logs:Describe*\",\"logs:Get*\",\"logs:List*\",\"logs:FilterLogEvents\"], \"Resource\":\"*\" }] }'``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EC2::VPCEndpoint` for more information about the expected schema for this property."},"privateDnsEnabled":{"type":"boolean","description":"Indicate whether to associate a private hosted zone with the specified VPC. The private hosted zone contains a record set for the default public DNS name for the service for the Region (for example, ``kinesis.us-east-1.amazonaws.com``), which resolves to the private IP addresses of the endpoint network interfaces in the VPC. This enables you to make requests to the default public DNS name for the service instead of the public DNS names that are automatically generated by the VPC endpoint service.\n To use a private hosted zone, you must set the following VPC attributes to ``true``: ``enableDnsHostnames`` and ``enableDnsSupport``.\n This property is supported only for interface endpoints.\n Default: ``false``"},"resourceConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource configuration.","replaceOnChanges":true},"routeTableIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the route tables. Routing is supported only for gateway endpoints."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups to associate with the endpoint network interfaces. If this parameter is not specified, we use the default security group for the VPC. Security groups are supported only for interface endpoints."},"serviceName":{"type":"string","description":"The name of the endpoint service.","replaceOnChanges":true},"serviceNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network.","replaceOnChanges":true},"serviceRegion":{"type":"string","description":"Describes a Region.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets in which to create endpoint network interfaces. You must specify this property for an interface endpoint or a Gateway Load Balancer endpoint. You can't specify this property for a gateway endpoint. For a Gateway Load Balancer endpoint, you can specify only one subnet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to associate with the endpoint."},"vpcEndpointType":{"$ref":"#/types/aws-native:ec2:VpcEndpointType","description":"The type of endpoint.\n Default: Gateway","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["awsId","creationTimestamp","dnsEntries","networkInterfaceIds","vpcId"],"inputProperties":{"dnsOptions":{"$ref":"#/types/aws-native:ec2:VpcEndpointDnsOptionsSpecification","description":"Describes the DNS options for an endpoint."},"ipAddressType":{"$ref":"#/types/aws-native:ec2:VpcEndpointIpAddressType","description":"The supported IP address types."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"An endpoint policy, which controls access to the service from the VPC. The default endpoint policy allows full access to the service. Endpoint policies are supported only for gateway and interface endpoints.\n For CloudFormation templates in YAML, you can provide the policy in JSON or YAML format. For example, if you have a JSON policy, you can convert it to YAML before including it in the YAML template, and CFNlong converts the policy to JSON format before calling the API actions for privatelink. Alternatively, you can include the JSON directly in the YAML, as shown in the following ``Properties`` section:\n ``Properties: VpcEndpointType: 'Interface' ServiceName: !Sub 'com.amazonaws.${AWS::Region}.logs' PolicyDocument: '{ \"Version\":\"2012-10-17\", \"Statement\": [{ \"Effect\":\"Allow\", \"Principal\":\"*\", \"Action\":[\"logs:Describe*\",\"logs:Get*\",\"logs:List*\",\"logs:FilterLogEvents\"], \"Resource\":\"*\" }] }'``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EC2::VPCEndpoint` for more information about the expected schema for this property."},"privateDnsEnabled":{"type":"boolean","description":"Indicate whether to associate a private hosted zone with the specified VPC. The private hosted zone contains a record set for the default public DNS name for the service for the Region (for example, ``kinesis.us-east-1.amazonaws.com``), which resolves to the private IP addresses of the endpoint network interfaces in the VPC. This enables you to make requests to the default public DNS name for the service instead of the public DNS names that are automatically generated by the VPC endpoint service.\n To use a private hosted zone, you must set the following VPC attributes to ``true``: ``enableDnsHostnames`` and ``enableDnsSupport``.\n This property is supported only for interface endpoints.\n Default: ``false``"},"resourceConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource configuration."},"routeTableIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the route tables. Routing is supported only for gateway endpoints."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups to associate with the endpoint network interfaces. If this parameter is not specified, we use the default security group for the VPC. Security groups are supported only for interface endpoints."},"serviceName":{"type":"string","description":"The name of the endpoint service."},"serviceNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network."},"serviceRegion":{"type":"string","description":"Describes a Region."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets in which to create endpoint network interfaces. You must specify this property for an interface endpoint or a Gateway Load Balancer endpoint. You can't specify this property for a gateway endpoint. For a Gateway Load Balancer endpoint, you can specify only one subnet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to associate with the endpoint."},"vpcEndpointType":{"$ref":"#/types/aws-native:ec2:VpcEndpointType","description":"The type of endpoint.\n Default: Gateway"},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["vpcId"]},"aws-native:ec2:VpcEndpointConnectionNotification":{"description":"Resource Type definition for AWS::EC2::VPCEndpointConnectionNotification","properties":{"connectionEvents":{"type":"array","items":{"type":"string"},"description":"The endpoint events for which to receive notifications."},"connectionNotificationArn":{"type":"string","description":"The ARN of the SNS topic for the notifications."},"serviceId":{"type":"string","description":"The ID of the endpoint service.","replaceOnChanges":true},"vpcEndpointConnectionNotificationId":{"type":"string","description":"VPC Endpoint Connection ID generated by service"},"vpcEndpointId":{"type":"string","description":"The ID of the endpoint.","replaceOnChanges":true}},"type":"object","required":["connectionEvents","connectionNotificationArn","vpcEndpointConnectionNotificationId"],"inputProperties":{"connectionEvents":{"type":"array","items":{"type":"string"},"description":"The endpoint events for which to receive notifications."},"connectionNotificationArn":{"type":"string","description":"The ARN of the SNS topic for the notifications."},"serviceId":{"type":"string","description":"The ID of the endpoint service."},"vpcEndpointId":{"type":"string","description":"The ID of the endpoint."}},"requiredInputs":["connectionEvents","connectionNotificationArn"]},"aws-native:ec2:VpcEndpointService":{"description":"Resource Type definition for AWS::EC2::VPCEndpointService","properties":{"acceptanceRequired":{"type":"boolean","description":"Indicates whether requests from service consumers to create an endpoint to your service must be accepted."},"contributorInsightsEnabled":{"type":"boolean","description":"Indicates whether to enable the built-in Contributor Insights rules provided by AWS PrivateLink ."},"gatewayLoadBalancerArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the Gateway Load Balancers."},"networkLoadBalancerArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the Network Load Balancers."},"payerResponsibility":{"type":"string","description":"The entity that is responsible for the endpoint costs. The default is the endpoint owner. If you set the payer responsibility to the service owner, you cannot set it back to the endpoint owner."},"serviceId":{"type":"string","description":"The ID of the endpoint service."},"supportedIpAddressTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpcEndpointServiceIpAddressType"},"description":"Specify which Ip Address types are supported for VPC endpoint service."},"supportedRegions":{"type":"array","items":{"type":"string"},"description":"The Regions from which service consumers can access the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the VPC endpoint service."}},"type":"object","required":["serviceId"],"inputProperties":{"acceptanceRequired":{"type":"boolean","description":"Indicates whether requests from service consumers to create an endpoint to your service must be accepted."},"contributorInsightsEnabled":{"type":"boolean","description":"Indicates whether to enable the built-in Contributor Insights rules provided by AWS PrivateLink ."},"gatewayLoadBalancerArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the Gateway Load Balancers."},"networkLoadBalancerArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the Network Load Balancers."},"payerResponsibility":{"type":"string","description":"The entity that is responsible for the endpoint costs. The default is the endpoint owner. If you set the payer responsibility to the service owner, you cannot set it back to the endpoint owner."},"supportedIpAddressTypes":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpcEndpointServiceIpAddressType"},"description":"Specify which Ip Address types are supported for VPC endpoint service."},"supportedRegions":{"type":"array","items":{"type":"string"},"description":"The Regions from which service consumers can access the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the VPC endpoint service."}}},"aws-native:ec2:VpcEndpointServicePermissions":{"description":"Resource Type definition for AWS::EC2::VPCEndpointServicePermissions","properties":{"allowedPrincipals":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of one or more principals (for example, users, IAM roles, and AWS accounts ). Permissions are granted to the principals in this list. To grant permissions to all principals, specify an asterisk (*). Permissions are revoked for principals not in this list. If the list is empty, then all permissions are revoked."},"serviceId":{"type":"string","description":"The ID of the service.","replaceOnChanges":true}},"type":"object","required":["serviceId"],"inputProperties":{"allowedPrincipals":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of one or more principals (for example, users, IAM roles, and AWS accounts ). Permissions are granted to the principals in this list. To grant permissions to all principals, specify an asterisk (*). Permissions are revoked for principals not in this list. If the list is empty, then all permissions are revoked."},"serviceId":{"type":"string","description":"The ID of the service."}},"requiredInputs":["serviceId"]},"aws-native:ec2:VpcGatewayAttachment":{"description":"Resource Type definition for AWS::EC2::VPCGatewayAttachment","properties":{"attachmentType":{"type":"string","description":"Used to identify if this resource is an Internet Gateway or Vpn Gateway Attachment "},"internetGatewayId":{"type":"string","description":"The ID of the internet gateway. You must specify either InternetGatewayId or VpnGatewayId, but not both."},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true},"vpnGatewayId":{"type":"string","description":"The ID of the virtual private gateway. You must specify either InternetGatewayId or VpnGatewayId, but not both."}},"type":"object","required":["attachmentType","vpcId"],"inputProperties":{"internetGatewayId":{"type":"string","description":"The ID of the internet gateway. You must specify either InternetGatewayId or VpnGatewayId, but not both."},"vpcId":{"type":"string","description":"The ID of the VPC."},"vpnGatewayId":{"type":"string","description":"The ID of the virtual private gateway. You must specify either InternetGatewayId or VpnGatewayId, but not both."}},"requiredInputs":["vpcId"]},"aws-native:ec2:VpcPeeringConnection":{"description":"Resource Type definition for AWS::EC2::VPCPeeringConnection","properties":{"assumeRoleRegion":{"type":"string","description":"The Region code to use when calling Security Token Service (STS) to assume the PeerRoleArn, if provided.","replaceOnChanges":true},"awsId":{"type":"string","description":"The ID of the peering connection."},"peerOwnerId":{"type":"string","description":"The AWS account ID of the owner of the accepter VPC.","replaceOnChanges":true},"peerRegion":{"type":"string","description":"The Region code for the accepter VPC, if the accepter VPC is located in a Region other than the Region in which you make the request.","replaceOnChanges":true},"peerRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VPC peer role for the peering connection in another AWS account.","replaceOnChanges":true},"peerVpcId":{"type":"string","description":"The ID of the VPC with which you are creating the VPC peering connection. You must specify this parameter in the request.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the resource."},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["awsId","peerVpcId","vpcId"],"inputProperties":{"assumeRoleRegion":{"type":"string","description":"The Region code to use when calling Security Token Service (STS) to assume the PeerRoleArn, if provided."},"peerOwnerId":{"type":"string","description":"The AWS account ID of the owner of the accepter VPC."},"peerRegion":{"type":"string","description":"The Region code for the accepter VPC, if the accepter VPC is located in a Region other than the Region in which you make the request."},"peerRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VPC peer role for the peering connection in another AWS account."},"peerVpcId":{"type":"string","description":"The ID of the VPC with which you are creating the VPC peering connection. You must specify this parameter in the request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the resource."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["peerVpcId","vpcId"]},"aws-native:ec2:VpcdhcpOptionsAssociation":{"description":"Associates a set of DHCP options with a VPC, or associates no DHCP options with the VPC.","properties":{"dhcpOptionsId":{"type":"string","description":"The ID of the DHCP options set, or default to associate no DHCP options with the VPC.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["dhcpOptionsId","vpcId"],"inputProperties":{"dhcpOptionsId":{"type":"string","description":"The ID of the DHCP options set, or default to associate no DHCP options with the VPC."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"requiredInputs":["dhcpOptionsId","vpcId"]},"aws-native:ec2:VpnConcentrator":{"description":"Describes a VPN concentrator.","properties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the VPN concentrator."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway attachment for the VPN concentrator."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway associated with the VPN concentrator.","replaceOnChanges":true},"type":{"type":"string","description":"The type of VPN concentrator.","replaceOnChanges":true},"vpnConcentratorId":{"type":"string","description":"The ID of the VPN concentrator to associate with the VPN connection."}},"type":"object","required":["transitGatewayAttachmentId","transitGatewayId","type","vpnConcentratorId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the VPN concentrator."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway associated with the VPN concentrator."},"type":{"type":"string","description":"The type of VPN concentrator."}},"requiredInputs":["transitGatewayId","type"]},"aws-native:ec2:VpnConnection":{"description":"Specifies a VPN connection between a virtual private gateway and a VPN customer gateway or a transit gateway and a VPN customer gateway.\n To specify a VPN connection between a transit gateway and customer gateway, use the ``TransitGatewayId`` and ``CustomerGatewayId`` properties.\n To specify a VPN connection between a virtual private gateway and customer gateway, use the ``VpnGatewayId`` and ``CustomerGatewayId`` properties.\n For more information, see [](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html) in the *User Guide*.","properties":{"customerGatewayId":{"type":"string","description":"The ID of the customer gateway at your end of the VPN connection."},"enableAcceleration":{"type":"boolean","description":"Indicate whether to enable acceleration for the VPN connection.\n Default: ``false``","replaceOnChanges":true},"localIpv4NetworkCidr":{"type":"string","description":"The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.\n Default: ``0.0.0.0/0``","replaceOnChanges":true},"localIpv6NetworkCidr":{"type":"string","description":"The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.\n Default: ``::/0``","replaceOnChanges":true},"outsideIpAddressType":{"type":"string","description":"The type of IP address assigned to the outside interface of the customer gateway device.\n Valid values: ``PrivateIpv4`` | ``PublicIpv4`` | ``Ipv6``\n Default: ``PublicIpv4``","replaceOnChanges":true},"preSharedKeyStorage":{"$ref":"#/types/aws-native:ec2:VpnConnectionPreSharedKeyStorage","description":"Describes the storage location for an instance store-backed AMI.","replaceOnChanges":true},"remoteIpv4NetworkCidr":{"type":"string","description":"The IPv4 CIDR on the AWS side of the VPN connection.\n Default: ``0.0.0.0/0``","replaceOnChanges":true},"remoteIpv6NetworkCidr":{"type":"string","description":"The IPv6 CIDR on the AWS side of the VPN connection.\n Default: ``::/0``","replaceOnChanges":true},"staticRoutesOnly":{"type":"boolean","description":"Indicates whether the VPN connection uses static routes only. Static routes must be used for devices that don't support BGP.\n If you are creating a VPN connection for a device that does not support Border Gateway Protocol (BGP), you must specify ``true``.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the VPN connection."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway associated with the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both."},"transportTransitGatewayAttachmentId":{"type":"string","description":"The transit gateway attachment ID to use for the VPN tunnel.\n Required if ``OutsideIpAddressType`` is set to ``PrivateIpv4``.","replaceOnChanges":true},"tunnelBandwidth":{"$ref":"#/types/aws-native:ec2:VpnConnectionTunnelBandwidth","description":"The desired bandwidth specification for the VPN tunnel, used when creating or modifying VPN connection options to set the tunnel's throughput capacity. ``standard`` supports up to 1.25 Gbps per tunnel, while ``large`` supports up to 5 Gbps per tunnel. The default value is ``standard``. Existing VPN connections without a bandwidth setting will automatically default to ``standard``.","replaceOnChanges":true},"tunnelInsideIpVersion":{"type":"string","description":"Indicate whether the VPN tunnels process IPv4 or IPv6 traffic.\n Default: ``ipv4``","replaceOnChanges":true},"type":{"type":"string","description":"The type of VPN connection.","replaceOnChanges":true},"vpnConcentratorId":{"type":"string","description":"The ID of the VPN concentrator to associate with the VPN connection.","replaceOnChanges":true},"vpnConnectionId":{"type":"string","description":"The ID of the VPN connection."},"vpnGatewayId":{"type":"string","description":"The ID of the virtual private gateway at the AWS side of the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both."},"vpnTunnelOptionsSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecification"},"description":"The tunnel options for the VPN connection."}},"type":"object","required":["customerGatewayId","type","vpnConnectionId"],"inputProperties":{"customerGatewayId":{"type":"string","description":"The ID of the customer gateway at your end of the VPN connection."},"enableAcceleration":{"type":"boolean","description":"Indicate whether to enable acceleration for the VPN connection.\n Default: ``false``"},"localIpv4NetworkCidr":{"type":"string","description":"The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.\n Default: ``0.0.0.0/0``"},"localIpv6NetworkCidr":{"type":"string","description":"The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.\n Default: ``::/0``"},"outsideIpAddressType":{"type":"string","description":"The type of IP address assigned to the outside interface of the customer gateway device.\n Valid values: ``PrivateIpv4`` | ``PublicIpv4`` | ``Ipv6``\n Default: ``PublicIpv4``"},"preSharedKeyStorage":{"$ref":"#/types/aws-native:ec2:VpnConnectionPreSharedKeyStorage","description":"Describes the storage location for an instance store-backed AMI."},"remoteIpv4NetworkCidr":{"type":"string","description":"The IPv4 CIDR on the AWS side of the VPN connection.\n Default: ``0.0.0.0/0``"},"remoteIpv6NetworkCidr":{"type":"string","description":"The IPv6 CIDR on the AWS side of the VPN connection.\n Default: ``::/0``"},"staticRoutesOnly":{"type":"boolean","description":"Indicates whether the VPN connection uses static routes only. Static routes must be used for devices that don't support BGP.\n If you are creating a VPN connection for a device that does not support Border Gateway Protocol (BGP), you must specify ``true``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the VPN connection."},"transitGatewayId":{"type":"string","description":"The ID of the transit gateway associated with the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both."},"transportTransitGatewayAttachmentId":{"type":"string","description":"The transit gateway attachment ID to use for the VPN tunnel.\n Required if ``OutsideIpAddressType`` is set to ``PrivateIpv4``."},"tunnelBandwidth":{"$ref":"#/types/aws-native:ec2:VpnConnectionTunnelBandwidth","description":"The desired bandwidth specification for the VPN tunnel, used when creating or modifying VPN connection options to set the tunnel's throughput capacity. ``standard`` supports up to 1.25 Gbps per tunnel, while ``large`` supports up to 5 Gbps per tunnel. The default value is ``standard``. Existing VPN connections without a bandwidth setting will automatically default to ``standard``."},"tunnelInsideIpVersion":{"type":"string","description":"Indicate whether the VPN tunnels process IPv4 or IPv6 traffic.\n Default: ``ipv4``"},"type":{"type":"string","description":"The type of VPN connection."},"vpnConcentratorId":{"type":"string","description":"The ID of the VPN concentrator to associate with the VPN connection."},"vpnGatewayId":{"type":"string","description":"The ID of the virtual private gateway at the AWS side of the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both."},"vpnTunnelOptionsSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecification"},"description":"The tunnel options for the VPN connection."}},"requiredInputs":["customerGatewayId","type"]},"aws-native:ec2:VpnConnectionRoute":{"description":"Specifies a static route for a VPN connection between an existing virtual private gateway and a VPN customer gateway. The static route allows traffic to be routed from the virtual private gateway to the VPN customer gateway.\n For more information, see [](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html) in the *User Guide*.","properties":{"destinationCidrBlock":{"type":"string","description":"The CIDR block associated with the local subnet of the customer network.","replaceOnChanges":true},"vpnConnectionId":{"type":"string","description":"The ID of the VPN connection.","replaceOnChanges":true}},"type":"object","required":["destinationCidrBlock","vpnConnectionId"],"inputProperties":{"destinationCidrBlock":{"type":"string","description":"The CIDR block associated with the local subnet of the customer network."},"vpnConnectionId":{"type":"string","description":"The ID of the VPN connection."}},"requiredInputs":["destinationCidrBlock","vpnConnectionId"]},"aws-native:ec2:VpnGateway":{"description":"Specifies a virtual private gateway. A virtual private gateway is the endpoint on the VPC side of your VPN connection. You can create a virtual private gateway before creating the VPC itself.\n For more information, see [](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html) in the *User Guide*.","properties":{"amazonSideAsn":{"type":"integer","description":"The private Autonomous System Number (ASN) for the Amazon side of a BGP session.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the virtual private gateway."},"type":{"type":"string","description":"The type of VPN connection the virtual private gateway supports.","replaceOnChanges":true},"vpnGatewayId":{"type":"string","description":"The ID of the VPN gateway."}},"type":"object","required":["type","vpnGatewayId"],"inputProperties":{"amazonSideAsn":{"type":"integer","description":"The private Autonomous System Number (ASN) for the Amazon side of a BGP session."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the virtual private gateway."},"type":{"type":"string","description":"The type of VPN connection the virtual private gateway supports."}},"requiredInputs":["type"]},"aws-native:ecr:PullThroughCacheRule":{"description":"The ``AWS::ECR::PullThroughCacheRule`` resource creates or updates a pull through cache rule. A pull through cache rule provides a way to cache images from an upstream registry in your Amazon ECR private registry.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myECRPullThroughCacheRule = new AwsNative.Ecr.PullThroughCacheRule(\"myECRPullThroughCacheRule\", new()\n    {\n        EcrRepositoryPrefix = \"my-ecr\",\n        UpstreamRegistryUrl = \"public.ecr.aws\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecr\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecr.NewPullThroughCacheRule(ctx, \"myECRPullThroughCacheRule\", \u0026ecr.PullThroughCacheRuleArgs{\n\t\t\tEcrRepositoryPrefix: pulumi.String(\"my-ecr\"),\n\t\t\tUpstreamRegistryUrl: pulumi.String(\"public.ecr.aws\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myECRPullThroughCacheRule = new aws_native.ecr.PullThroughCacheRule(\"myECRPullThroughCacheRule\", {\n    ecrRepositoryPrefix: \"my-ecr\",\n    upstreamRegistryUrl: \"public.ecr.aws\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_ecr_pull_through_cache_rule = aws_native.ecr.PullThroughCacheRule(\"myECRPullThroughCacheRule\",\n    ecr_repository_prefix=\"my-ecr\",\n    upstream_registry_url=\"public.ecr.aws\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myECRPullThroughCacheRule = new AwsNative.Ecr.PullThroughCacheRule(\"myECRPullThroughCacheRule\", new()\n    {\n        EcrRepositoryPrefix = \"my-ecr\",\n        UpstreamRegistryUrl = \"public.ecr.aws\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecr\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecr.NewPullThroughCacheRule(ctx, \"myECRPullThroughCacheRule\", \u0026ecr.PullThroughCacheRuleArgs{\n\t\t\tEcrRepositoryPrefix: pulumi.String(\"my-ecr\"),\n\t\t\tUpstreamRegistryUrl: pulumi.String(\"public.ecr.aws\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myECRPullThroughCacheRule = new aws_native.ecr.PullThroughCacheRule(\"myECRPullThroughCacheRule\", {\n    ecrRepositoryPrefix: \"my-ecr\",\n    upstreamRegistryUrl: \"public.ecr.aws\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_ecr_pull_through_cache_rule = aws_native.ecr.PullThroughCacheRule(\"myECRPullThroughCacheRule\",\n    ecr_repository_prefix=\"my-ecr\",\n    upstream_registry_url=\"public.ecr.aws\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"credentialArn":{"type":"string","description":"The ARN of the Secrets Manager secret associated with the pull through cache rule.","replaceOnChanges":true},"customRoleArn":{"type":"string","description":"The ARN of the IAM role associated with the pull through cache rule.","replaceOnChanges":true},"ecrRepositoryPrefix":{"type":"string","description":"The Amazon ECR repository prefix associated with the pull through cache rule.","replaceOnChanges":true},"upstreamRegistry":{"type":"string","description":"The name of the upstream source registry associated with the pull through cache rule.","replaceOnChanges":true},"upstreamRegistryUrl":{"type":"string","description":"The upstream registry URL associated with the pull through cache rule.","replaceOnChanges":true},"upstreamRepositoryPrefix":{"type":"string","description":"The upstream repository prefix associated with the pull through cache rule.","replaceOnChanges":true}},"type":"object","inputProperties":{"credentialArn":{"type":"string","description":"The ARN of the Secrets Manager secret associated with the pull through cache rule."},"customRoleArn":{"type":"string","description":"The ARN of the IAM role associated with the pull through cache rule."},"ecrRepositoryPrefix":{"type":"string","description":"The Amazon ECR repository prefix associated with the pull through cache rule."},"upstreamRegistry":{"type":"string","description":"The name of the upstream source registry associated with the pull through cache rule."},"upstreamRegistryUrl":{"type":"string","description":"The upstream registry URL associated with the pull through cache rule."},"upstreamRepositoryPrefix":{"type":"string","description":"The upstream repository prefix associated with the pull through cache rule."}}},"aws-native:ecr:PullTimeUpdateExclusion":{"description":"The ARN of the IAM principal to remove from the pull time update exclusion list.","properties":{"principalArn":{"type":"string","description":"The ARN of the IAM principal to remove from the pull time update exclusion list.","replaceOnChanges":true}},"type":"object","required":["principalArn"],"inputProperties":{"principalArn":{"type":"string","description":"The ARN of the IAM principal to remove from the pull time update exclusion list."}},"requiredInputs":["principalArn"]},"aws-native:ecr:RegistryPolicy":{"description":"The ``AWS::ECR::RegistryPolicy`` resource creates or updates the permissions policy for a private registry.\n A private registry policy is used to specify permissions for another AWS-account and is used when configuring cross-account replication. For more information, see [Registry permissions](https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry-permissions.html) in the *Amazon Elastic Container Registry User Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testRegistryPolicy = new AwsNative.Ecr.RegistryPolicy(\"testRegistryPolicy\", new()\n    {\n        PolicyText = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"sid\"] = \"UpdatedRegistryPolicy\",\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"aws\"] = \"arn:aws:iam::210987654321:root\",\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"ecr:CreateRepository\",\n                        \"ecr:ReplicateImage\",\n                    },\n                    [\"resource\"] = \"arn:aws:ecr:us-west-2:123456789012:repository/*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecr\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecr.NewRegistryPolicy(ctx, \"testRegistryPolicy\", \u0026ecr.RegistryPolicyArgs{\n\t\t\tPolicyText: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"sid\":    \"UpdatedRegistryPolicy\",\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"aws\": \"arn:aws:iam::210987654321:root\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"ecr:CreateRepository\",\n\t\t\t\t\t\t\t\"ecr:ReplicateImage\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"resource\": \"arn:aws:ecr:us-west-2:123456789012:repository/*\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testRegistryPolicy = new aws_native.ecr.RegistryPolicy(\"testRegistryPolicy\", {policyText: {\n    version: \"2012-10-17\",\n    statement: [{\n        sid: \"UpdatedRegistryPolicy\",\n        effect: \"Allow\",\n        principal: {\n            aws: \"arn:aws:iam::210987654321:root\",\n        },\n        action: [\n            \"ecr:CreateRepository\",\n            \"ecr:ReplicateImage\",\n        ],\n        resource: \"arn:aws:ecr:us-west-2:123456789012:repository/*\",\n    }],\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_registry_policy = aws_native.ecr.RegistryPolicy(\"testRegistryPolicy\", policy_text={\n    \"version\": \"2012-10-17\",\n    \"statement\": [{\n        \"sid\": \"UpdatedRegistryPolicy\",\n        \"effect\": \"Allow\",\n        \"principal\": {\n            \"aws\": \"arn:aws:iam::210987654321:root\",\n        },\n        \"action\": [\n            \"ecr:CreateRepository\",\n            \"ecr:ReplicateImage\",\n        ],\n        \"resource\": \"arn:aws:ecr:us-west-2:123456789012:repository/*\",\n    }],\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"policyText":{"$ref":"pulumi.json#/Any","description":"The JSON policy text for your registry.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ECR::RegistryPolicy` for more information about the expected schema for this property."},"registryId":{"type":"string","description":"The account ID of the private registry the policy is associated with."}},"type":"object","required":["policyText","registryId"],"inputProperties":{"policyText":{"$ref":"pulumi.json#/Any","description":"The JSON policy text for your registry.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ECR::RegistryPolicy` for more information about the expected schema for this property."}},"requiredInputs":["policyText"]},"aws-native:ecr:RegistryScanningConfiguration":{"description":"The scanning configuration for a private registry.","properties":{"registryId":{"type":"string","description":"The account ID of the destination registry."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanningRule"},"description":"The scanning rules associated with the registry."},"scanType":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanType","description":"The type of scanning configured for the registry."}},"type":"object","required":["registryId","rules","scanType"],"inputProperties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanningRule"},"description":"The scanning rules associated with the registry."},"scanType":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanType","description":"The type of scanning configured for the registry."}},"requiredInputs":["rules","scanType"]},"aws-native:ecr:ReplicationConfiguration":{"description":"The ``AWS::ECR::ReplicationConfiguration`` resource creates or updates the replication configuration for a private registry. The first time a replication configuration is applied to a private registry, a service-linked IAM role is created in your account for the replication process. For more information, see [Using Service-Linked Roles for Amazon ECR](https://docs.aws.amazon.com/AmazonECR/latest/userguide/using-service-linked-roles.html) in the *Amazon Elastic Container Registry User Guide*.\n  When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a private registry permissions policy. For more information, see ``AWS::ECR::RegistryPolicy``.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myReplicationConfig = new AwsNative.Ecr.ReplicationConfiguration(\"myReplicationConfig\", new()\n    {\n        ReplicationConfigurationValue = new AwsNative.Ecr.Inputs.ReplicationConfigurationArgs\n        {\n            Rules = new[]\n            {\n                new AwsNative.Ecr.Inputs.ReplicationConfigurationReplicationRuleArgs\n                {\n                    Destinations = new[]\n                    {\n                        new AwsNative.Ecr.Inputs.ReplicationConfigurationReplicationDestinationArgs\n                        {\n                            Region = \"us-east-2\",\n                            RegistryId = \"123456789012\",\n                        },\n                        new AwsNative.Ecr.Inputs.ReplicationConfigurationReplicationDestinationArgs\n                        {\n                            Region = \"us-west-1\",\n                            RegistryId = \"123456789012\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecr\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecr.NewReplicationConfiguration(ctx, \"myReplicationConfig\", \u0026ecr.ReplicationConfigurationArgs{\n\t\t\tReplicationConfiguration: \u0026ecr.ReplicationConfigurationTypeArgs{\n\t\t\t\tRules: ecr.ReplicationConfigurationReplicationRuleArray{\n\t\t\t\t\t\u0026ecr.ReplicationConfigurationReplicationRuleArgs{\n\t\t\t\t\t\tDestinations: ecr.ReplicationConfigurationReplicationDestinationArray{\n\t\t\t\t\t\t\t\u0026ecr.ReplicationConfigurationReplicationDestinationArgs{\n\t\t\t\t\t\t\t\tRegion:     pulumi.String(\"us-east-2\"),\n\t\t\t\t\t\t\t\tRegistryId: pulumi.String(\"123456789012\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\u0026ecr.ReplicationConfigurationReplicationDestinationArgs{\n\t\t\t\t\t\t\t\tRegion:     pulumi.String(\"us-west-1\"),\n\t\t\t\t\t\t\t\tRegistryId: pulumi.String(\"123456789012\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myReplicationConfig = new aws_native.ecr.ReplicationConfiguration(\"myReplicationConfig\", {replicationConfiguration: {\n    rules: [{\n        destinations: [\n            {\n                region: \"us-east-2\",\n                registryId: \"123456789012\",\n            },\n            {\n                region: \"us-west-1\",\n                registryId: \"123456789012\",\n            },\n        ],\n    }],\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_replication_config = aws_native.ecr.ReplicationConfiguration(\"myReplicationConfig\", replication_configuration={\n    \"rules\": [{\n        \"destinations\": [\n            {\n                \"region\": \"us-east-2\",\n                \"registry_id\": \"123456789012\",\n            },\n            {\n                \"region\": \"us-west-1\",\n                \"registry_id\": \"123456789012\",\n            },\n        ],\n    }],\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"registryId":{"type":"string","description":"The account ID of the destination registry."},"replicationConfiguration":{"$ref":"#/types/aws-native:ecr:ReplicationConfiguration","description":"The replication configuration for a registry.","language":{"csharp":{"name":"ReplicationConfigurationValue"}}}},"type":"object","required":["registryId","replicationConfiguration"],"inputProperties":{"replicationConfiguration":{"$ref":"#/types/aws-native:ecr:ReplicationConfiguration","description":"The replication configuration for a registry.","language":{"csharp":{"name":"ReplicationConfigurationValue"}}}},"requiredInputs":["replicationConfiguration"]},"aws-native:ecr:Repository":{"description":"The ``AWS::ECR::Repository`` resource specifies an Amazon Elastic Container Registry (Amazon ECR) repository, where users can push and pull Docker images, Open Container Initiative (OCI) images, and OCI compatible artifacts. For more information, see [Amazon ECR private repositories](https://docs.aws.amazon.com/AmazonECR/latest/userguide/Repositories.html) in the *Amazon ECR User Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var lifecyclePolicyText = config.Require(\"lifecyclePolicyText\");\n    var repositoryName = config.Require(\"repositoryName\");\n    var registryId = config.Require(\"registryId\");\n    var myRepository = new AwsNative.Ecr.Repository(\"myRepository\", new()\n    {\n        LifecyclePolicy = new AwsNative.Ecr.Inputs.RepositoryLifecyclePolicyArgs\n        {\n            LifecyclePolicyText = lifecyclePolicyText,\n            RegistryId = registryId,\n        },\n        RepositoryName = repositoryName,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"arn\"] = myRepository.Arn,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecr\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tlifecyclePolicyText := cfg.Require(\"lifecyclePolicyText\")\n\t\trepositoryName := cfg.Require(\"repositoryName\")\n\t\tregistryId := cfg.Require(\"registryId\")\n\t\tmyRepository, err := ecr.NewRepository(ctx, \"myRepository\", \u0026ecr.RepositoryArgs{\n\t\t\tLifecyclePolicy: \u0026ecr.RepositoryLifecyclePolicyArgs{\n\t\t\t\tLifecyclePolicyText: pulumi.String(pulumi.String(lifecyclePolicyText)),\n\t\t\t\tRegistryId:          pulumi.String(pulumi.String(registryId)),\n\t\t\t},\n\t\t\tRepositoryName: pulumi.String(pulumi.String(repositoryName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"arn\", myRepository.Arn)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst lifecyclePolicyText = config.require(\"lifecyclePolicyText\");\nconst repositoryName = config.require(\"repositoryName\");\nconst registryId = config.require(\"registryId\");\nconst myRepository = new aws_native.ecr.Repository(\"myRepository\", {\n    lifecyclePolicy: {\n        lifecyclePolicyText: lifecyclePolicyText,\n        registryId: registryId,\n    },\n    repositoryName: repositoryName,\n});\nexport const arn = myRepository.arn;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nlifecycle_policy_text = config.require(\"lifecyclePolicyText\")\nrepository_name = config.require(\"repositoryName\")\nregistry_id = config.require(\"registryId\")\nmy_repository = aws_native.ecr.Repository(\"myRepository\",\n    lifecycle_policy={\n        \"lifecycle_policy_text\": lifecycle_policy_text,\n        \"registry_id\": registry_id,\n    },\n    repository_name=repository_name)\npulumi.export(\"arn\", my_repository.arn)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var lifecyclePolicyText = config.Require(\"lifecyclePolicyText\");\n    var repositoryName = config.Require(\"repositoryName\");\n    var registryId = config.Require(\"registryId\");\n    var myRepository = new AwsNative.Ecr.Repository(\"myRepository\", new()\n    {\n        LifecyclePolicy = new AwsNative.Ecr.Inputs.RepositoryLifecyclePolicyArgs\n        {\n            LifecyclePolicyText = lifecyclePolicyText,\n            RegistryId = registryId,\n        },\n        RepositoryName = repositoryName,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"arn\"] = myRepository.Arn,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecr\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tlifecyclePolicyText := cfg.Require(\"lifecyclePolicyText\")\n\t\trepositoryName := cfg.Require(\"repositoryName\")\n\t\tregistryId := cfg.Require(\"registryId\")\n\t\tmyRepository, err := ecr.NewRepository(ctx, \"myRepository\", \u0026ecr.RepositoryArgs{\n\t\t\tLifecyclePolicy: \u0026ecr.RepositoryLifecyclePolicyArgs{\n\t\t\t\tLifecyclePolicyText: pulumi.String(pulumi.String(lifecyclePolicyText)),\n\t\t\t\tRegistryId:          pulumi.String(pulumi.String(registryId)),\n\t\t\t},\n\t\t\tRepositoryName: pulumi.String(pulumi.String(repositoryName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"arn\", myRepository.Arn)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst lifecyclePolicyText = config.require(\"lifecyclePolicyText\");\nconst repositoryName = config.require(\"repositoryName\");\nconst registryId = config.require(\"registryId\");\nconst myRepository = new aws_native.ecr.Repository(\"myRepository\", {\n    lifecyclePolicy: {\n        lifecyclePolicyText: lifecyclePolicyText,\n        registryId: registryId,\n    },\n    repositoryName: repositoryName,\n});\nexport const arn = myRepository.arn;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nlifecycle_policy_text = config.require(\"lifecyclePolicyText\")\nrepository_name = config.require(\"repositoryName\")\nregistry_id = config.require(\"registryId\")\nmy_repository = aws_native.ecr.Repository(\"myRepository\",\n    lifecycle_policy={\n        \"lifecycle_policy_text\": lifecycle_policy_text,\n        \"registry_id\": registry_id,\n    },\n    repository_name=repository_name)\npulumi.export(\"arn\", my_repository.arn)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the specified `AWS::ECR::Repository` resource. For example, `arn:aws:ecr: *eu-west-1* : *123456789012* :repository/ *test-repository*` ."},"emptyOnDelete":{"type":"boolean","description":"If true, deleting the repository force deletes the contents of the repository. If false, the repository must be empty before attempting to delete it."},"encryptionConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryEncryptionConfiguration","description":"The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.","replaceOnChanges":true},"imageScanningConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryImageScanningConfiguration","description":"The ``imageScanningConfiguration`` parameter is being deprecated, in favor of specifying the image scanning configuration at the registry level. For more information, see ``PutRegistryScanningConfiguration``.\n  The image scanning configuration for the repository. This determines whether images are scanned for known vulnerabilities after being pushed to the repository."},"imageTagMutability":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutability","description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten."},"imageTagMutabilityExclusionFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutabilityExclusionFilter"},"description":"A list of filters that specify which image tags are excluded from the repository's image tag mutability setting."},"lifecyclePolicy":{"$ref":"#/types/aws-native:ecr:RepositoryLifecyclePolicy","description":"Creates or updates a lifecycle policy. For information about lifecycle policy syntax, see [Lifecycle policy template](https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html)."},"repositoryName":{"type":"string","description":"The name to use for the repository. The repository name may be specified on its own (such as ``nginx-web-app``) or it can be prepended with a namespace to group the repository into a category (such as ``project-a/nginx-web-app``). If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the repository name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n The repository name must start with a letter and can only contain lowercase letters, numbers, hyphens, underscores, and forward slashes.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"repositoryPolicyText":{"$ref":"pulumi.json#/Any","description":"The JSON repository policy text to apply to the repository. For more information, see [Amazon ECR repository policies](https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html) in the *Amazon Elastic Container Registry User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ECR::Repository` for more information about the expected schema for this property."},"repositoryUri":{"type":"string","description":"Returns the URI for the specified `AWS::ECR::Repository` resource. For example, `*123456789012* .dkr.ecr. *us-west-2* .amazonaws.com/repository` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","repositoryUri"],"inputProperties":{"emptyOnDelete":{"type":"boolean","description":"If true, deleting the repository force deletes the contents of the repository. If false, the repository must be empty before attempting to delete it."},"encryptionConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryEncryptionConfiguration","description":"The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest."},"imageScanningConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryImageScanningConfiguration","description":"The ``imageScanningConfiguration`` parameter is being deprecated, in favor of specifying the image scanning configuration at the registry level. For more information, see ``PutRegistryScanningConfiguration``.\n  The image scanning configuration for the repository. This determines whether images are scanned for known vulnerabilities after being pushed to the repository."},"imageTagMutability":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutability","description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten."},"imageTagMutabilityExclusionFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutabilityExclusionFilter"},"description":"A list of filters that specify which image tags are excluded from the repository's image tag mutability setting."},"lifecyclePolicy":{"$ref":"#/types/aws-native:ecr:RepositoryLifecyclePolicy","description":"Creates or updates a lifecycle policy. For information about lifecycle policy syntax, see [Lifecycle policy template](https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html)."},"repositoryName":{"type":"string","description":"The name to use for the repository. The repository name may be specified on its own (such as ``nginx-web-app``) or it can be prepended with a namespace to group the repository into a category (such as ``project-a/nginx-web-app``). If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the repository name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n The repository name must start with a letter and can only contain lowercase letters, numbers, hyphens, underscores, and forward slashes.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"repositoryPolicyText":{"$ref":"pulumi.json#/Any","description":"The JSON repository policy text to apply to the repository. For more information, see [Amazon ECR repository policies](https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html) in the *Amazon Elastic Container Registry User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ECR::Repository` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:ecr:RepositoryCreationTemplate":{"description":"The details of the repository creation template associated with the request.","properties":{"appliedFor":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateAppliedForItem"},"description":"A list of enumerable Strings representing the repository creation scenarios that this template will apply towards. The supported scenarios are PULL_THROUGH_CACHE, REPLICATION, and CREATE_ON_PUSH"},"createdAt":{"type":"string","description":"The date and time, in JavaScript date format, when the repository creation template was created."},"customRoleArn":{"type":"string","description":"The ARN of the role to be assumed by Amazon ECR. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template."},"description":{"type":"string","description":"The description associated with the repository creation template."},"encryptionConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateEncryptionConfiguration","description":"The encryption configuration associated with the repository creation template."},"imageTagMutability":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutability","description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten."},"imageTagMutabilityExclusionFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutabilityExclusionFilter"},"description":"A list of filters that specify which image tags are excluded from the repository creation template's image tag mutability setting."},"lifecyclePolicy":{"type":"string","description":"The lifecycle policy to use for repositories created using the template."},"prefix":{"type":"string","description":"The repository namespace prefix associated with the repository creation template.","replaceOnChanges":true},"repositoryPolicy":{"type":"string","description":"The repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateTag"},"description":"The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters."},"updatedAt":{"type":"string","description":"The date and time, in JavaScript date format, when the repository creation template was last updated."}},"type":"object","required":["appliedFor","createdAt","prefix","updatedAt"],"inputProperties":{"appliedFor":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateAppliedForItem"},"description":"A list of enumerable Strings representing the repository creation scenarios that this template will apply towards. The supported scenarios are PULL_THROUGH_CACHE, REPLICATION, and CREATE_ON_PUSH"},"customRoleArn":{"type":"string","description":"The ARN of the role to be assumed by Amazon ECR. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template."},"description":{"type":"string","description":"The description associated with the repository creation template."},"encryptionConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateEncryptionConfiguration","description":"The encryption configuration associated with the repository creation template."},"imageTagMutability":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutability","description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten."},"imageTagMutabilityExclusionFilters":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutabilityExclusionFilter"},"description":"A list of filters that specify which image tags are excluded from the repository creation template's image tag mutability setting."},"lifecyclePolicy":{"type":"string","description":"The lifecycle policy to use for repositories created using the template."},"prefix":{"type":"string","description":"The repository namespace prefix associated with the repository creation template."},"repositoryPolicy":{"type":"string","description":"The repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateTag"},"description":"The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters."}},"requiredInputs":["appliedFor","prefix"]},"aws-native:ecr:SigningConfiguration":{"description":"The AWS::ECR::SigningConfiguration resource creates or updates the signing configuration for an Amazon ECR registry.","properties":{"registryId":{"type":"string","description":"12-digit AWS account ID of the ECR registry."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:SigningConfigurationRule"},"description":"Array of signing rules that define which repositories should be signed and with which signing profiles."}},"type":"object","required":["registryId","rules"],"inputProperties":{"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ecr:SigningConfigurationRule"},"description":"Array of signing rules that define which repositories should be signed and with which signing profiles."}},"requiredInputs":["rules"]},"aws-native:ecs:CapacityProvider":{"description":"Resource Type definition for AWS::ECS::CapacityProvider.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCapacityProvider = new AwsNative.Ecs.CapacityProvider(\"myCapacityProvider\", new()\n    {\n        AutoScalingGroupProvider = new AwsNative.Ecs.Inputs.CapacityProviderAutoScalingGroupProviderArgs\n        {\n            AutoScalingGroupArn = \"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\",\n            ManagedScaling = new AwsNative.Ecs.Inputs.CapacityProviderManagedScalingArgs\n            {\n                MaximumScalingStepSize = 10,\n                MinimumScalingStepSize = 1,\n                Status = AwsNative.Ecs.CapacityProviderManagedScalingStatus.Enabled,\n                TargetCapacity = 100,\n            },\n            ManagedTerminationProtection = AwsNative.Ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Enabled,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"environment\",\n                Value = \"production\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecs.NewCapacityProvider(ctx, \"myCapacityProvider\", \u0026ecs.CapacityProviderArgs{\n\t\t\tAutoScalingGroupProvider: \u0026ecs.CapacityProviderAutoScalingGroupProviderArgs{\n\t\t\t\tAutoScalingGroupArn: pulumi.String(\"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\"),\n\t\t\t\tManagedScaling: \u0026ecs.CapacityProviderManagedScalingArgs{\n\t\t\t\t\tMaximumScalingStepSize: pulumi.Int(10),\n\t\t\t\t\tMinimumScalingStepSize: pulumi.Int(1),\n\t\t\t\t\tStatus:                 ecs.CapacityProviderManagedScalingStatusEnabled,\n\t\t\t\t\tTargetCapacity:         pulumi.Int(100),\n\t\t\t\t},\n\t\t\t\tManagedTerminationProtection: ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtectionEnabled,\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"environment\"),\n\t\t\t\t\tValue: pulumi.String(\"production\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCapacityProvider = new aws_native.ecs.CapacityProvider(\"myCapacityProvider\", {\n    autoScalingGroupProvider: {\n        autoScalingGroupArn: \"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\",\n        managedScaling: {\n            maximumScalingStepSize: 10,\n            minimumScalingStepSize: 1,\n            status: aws_native.ecs.CapacityProviderManagedScalingStatus.Enabled,\n            targetCapacity: 100,\n        },\n        managedTerminationProtection: aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Enabled,\n    },\n    tags: [{\n        key: \"environment\",\n        value: \"production\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_capacity_provider = aws_native.ecs.CapacityProvider(\"myCapacityProvider\",\n    auto_scaling_group_provider={\n        \"auto_scaling_group_arn\": \"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\",\n        \"managed_scaling\": {\n            \"maximum_scaling_step_size\": 10,\n            \"minimum_scaling_step_size\": 1,\n            \"status\": aws_native.ecs.CapacityProviderManagedScalingStatus.ENABLED,\n            \"target_capacity\": 100,\n        },\n        \"managed_termination_protection\": aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.ENABLED,\n    },\n    tags=[{\n        \"key\": \"environment\",\n        \"value\": \"production\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myCapacityProvider = new AwsNative.Ecs.CapacityProvider(\"myCapacityProvider\", new()\n    {\n        AutoScalingGroupProvider = new AwsNative.Ecs.Inputs.CapacityProviderAutoScalingGroupProviderArgs\n        {\n            AutoScalingGroupArn = \"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\",\n            ManagedScaling = new AwsNative.Ecs.Inputs.CapacityProviderManagedScalingArgs\n            {\n                MaximumScalingStepSize = 10,\n                MinimumScalingStepSize = 1,\n                Status = AwsNative.Ecs.CapacityProviderManagedScalingStatus.Enabled,\n                TargetCapacity = 100,\n            },\n            ManagedTerminationProtection = AwsNative.Ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Enabled,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"environment\",\n                Value = \"production\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecs.NewCapacityProvider(ctx, \"myCapacityProvider\", \u0026ecs.CapacityProviderArgs{\n\t\t\tAutoScalingGroupProvider: \u0026ecs.CapacityProviderAutoScalingGroupProviderArgs{\n\t\t\t\tAutoScalingGroupArn: pulumi.String(\"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\"),\n\t\t\t\tManagedScaling: \u0026ecs.CapacityProviderManagedScalingArgs{\n\t\t\t\t\tMaximumScalingStepSize: pulumi.Int(10),\n\t\t\t\t\tMinimumScalingStepSize: pulumi.Int(1),\n\t\t\t\t\tStatus:                 ecs.CapacityProviderManagedScalingStatusEnabled,\n\t\t\t\t\tTargetCapacity:         pulumi.Int(100),\n\t\t\t\t},\n\t\t\t\tManagedTerminationProtection: ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtectionEnabled,\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"environment\"),\n\t\t\t\t\tValue: pulumi.String(\"production\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myCapacityProvider = new aws_native.ecs.CapacityProvider(\"myCapacityProvider\", {\n    autoScalingGroupProvider: {\n        autoScalingGroupArn: \"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\",\n        managedScaling: {\n            maximumScalingStepSize: 10,\n            minimumScalingStepSize: 1,\n            status: aws_native.ecs.CapacityProviderManagedScalingStatus.Enabled,\n            targetCapacity: 100,\n        },\n        managedTerminationProtection: aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Enabled,\n    },\n    tags: [{\n        key: \"environment\",\n        value: \"production\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_capacity_provider = aws_native.ecs.CapacityProvider(\"myCapacityProvider\",\n    auto_scaling_group_provider={\n        \"auto_scaling_group_arn\": \"arn:aws:autoscaling:us-west-2:123456789012:autoScalingGroup:a1b2c3d4-5678-90ab-cdef-EXAMPLE11111:autoScalingGroupName/MyAutoScalingGroup\",\n        \"managed_scaling\": {\n            \"maximum_scaling_step_size\": 10,\n            \"minimum_scaling_step_size\": 1,\n            \"status\": aws_native.ecs.CapacityProviderManagedScalingStatus.ENABLED,\n            \"target_capacity\": 100,\n        },\n        \"managed_termination_protection\": aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.ENABLED,\n    },\n    tags=[{\n        \"key\": \"environment\",\n        \"value\": \"production\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var autoScalingGroupArn1 = config.Require(\"autoScalingGroupArn1\");\n    var autoScalingGroupArn2 = config.Require(\"autoScalingGroupArn2\");\n    var capacityProvider1 = new AwsNative.Ecs.CapacityProvider(\"capacityProvider1\", new()\n    {\n        AutoScalingGroupProvider = new AwsNative.Ecs.Inputs.CapacityProviderAutoScalingGroupProviderArgs\n        {\n            AutoScalingGroupArn = autoScalingGroupArn1,\n            ManagedScaling = new AwsNative.Ecs.Inputs.CapacityProviderManagedScalingArgs\n            {\n                Status = AwsNative.Ecs.CapacityProviderManagedScalingStatus.Enabled,\n            },\n            ManagedTerminationProtection = AwsNative.Ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n        },\n    });\n\n    var capacityProvider2 = new AwsNative.Ecs.CapacityProvider(\"capacityProvider2\", new()\n    {\n        AutoScalingGroupProvider = new AwsNative.Ecs.Inputs.CapacityProviderAutoScalingGroupProviderArgs\n        {\n            AutoScalingGroupArn = autoScalingGroupArn2,\n            ManagedScaling = new AwsNative.Ecs.Inputs.CapacityProviderManagedScalingArgs\n            {\n                Status = AwsNative.Ecs.CapacityProviderManagedScalingStatus.Enabled,\n            },\n            ManagedTerminationProtection = AwsNative.Ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n        },\n    });\n\n    var cluster = new AwsNative.Ecs.Cluster(\"cluster\");\n\n    var clusterCPAssociation = new AwsNative.Ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", new()\n    {\n        Cluster = cluster.Id,\n        CapacityProviders = new[]\n        {\n            capacityProvider1.Id,\n            capacityProvider2.Id,\n        },\n        DefaultCapacityProviderStrategy = new[]\n        {\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 2,\n                Weight = 6,\n                CapacityProvider = capacityProvider1.Id,\n            },\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 0,\n                Weight = 10,\n                CapacityProvider = capacityProvider2.Id,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tautoScalingGroupArn1 := cfg.Require(\"autoScalingGroupArn1\")\n\t\tautoScalingGroupArn2 := cfg.Require(\"autoScalingGroupArn2\")\n\t\tcapacityProvider1, err := ecs.NewCapacityProvider(ctx, \"capacityProvider1\", \u0026ecs.CapacityProviderArgs{\n\t\t\tAutoScalingGroupProvider: \u0026ecs.CapacityProviderAutoScalingGroupProviderArgs{\n\t\t\t\tAutoScalingGroupArn: pulumi.String(pulumi.String(autoScalingGroupArn1)),\n\t\t\t\tManagedScaling: \u0026ecs.CapacityProviderManagedScalingArgs{\n\t\t\t\t\tStatus: ecs.CapacityProviderManagedScalingStatusEnabled,\n\t\t\t\t},\n\t\t\t\tManagedTerminationProtection: ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtectionDisabled,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcapacityProvider2, err := ecs.NewCapacityProvider(ctx, \"capacityProvider2\", \u0026ecs.CapacityProviderArgs{\n\t\t\tAutoScalingGroupProvider: \u0026ecs.CapacityProviderAutoScalingGroupProviderArgs{\n\t\t\t\tAutoScalingGroupArn: pulumi.String(pulumi.String(autoScalingGroupArn2)),\n\t\t\t\tManagedScaling: \u0026ecs.CapacityProviderManagedScalingArgs{\n\t\t\t\t\tStatus: ecs.CapacityProviderManagedScalingStatusEnabled,\n\t\t\t\t},\n\t\t\t\tManagedTerminationProtection: ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtectionDisabled,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcluster, err := ecs.NewCluster(ctx, \"cluster\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ecs.NewClusterCapacityProviderAssociations(ctx, \"clusterCPAssociation\", \u0026ecs.ClusterCapacityProviderAssociationsArgs{\n\t\t\tCluster: cluster.ID(),\n\t\t\tCapacityProviders: pulumi.StringArray{\n\t\t\t\tcapacityProvider1.ID(),\n\t\t\t\tcapacityProvider2.ID(),\n\t\t\t},\n\t\t\tDefaultCapacityProviderStrategy: ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArray{\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(2),\n\t\t\t\t\tWeight:           pulumi.Int(6),\n\t\t\t\t\tCapacityProvider: capacityProvider1.ID(),\n\t\t\t\t},\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(0),\n\t\t\t\t\tWeight:           pulumi.Int(10),\n\t\t\t\t\tCapacityProvider: capacityProvider2.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst autoScalingGroupArn1 = config.require(\"autoScalingGroupArn1\");\nconst autoScalingGroupArn2 = config.require(\"autoScalingGroupArn2\");\nconst capacityProvider1 = new aws_native.ecs.CapacityProvider(\"capacityProvider1\", {autoScalingGroupProvider: {\n    autoScalingGroupArn: autoScalingGroupArn1,\n    managedScaling: {\n        status: aws_native.ecs.CapacityProviderManagedScalingStatus.Enabled,\n    },\n    managedTerminationProtection: aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n}});\nconst capacityProvider2 = new aws_native.ecs.CapacityProvider(\"capacityProvider2\", {autoScalingGroupProvider: {\n    autoScalingGroupArn: autoScalingGroupArn2,\n    managedScaling: {\n        status: aws_native.ecs.CapacityProviderManagedScalingStatus.Enabled,\n    },\n    managedTerminationProtection: aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n}});\nconst cluster = new aws_native.ecs.Cluster(\"cluster\", {});\nconst clusterCPAssociation = new aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", {\n    cluster: cluster.id,\n    capacityProviders: [\n        capacityProvider1.id,\n        capacityProvider2.id,\n    ],\n    defaultCapacityProviderStrategy: [\n        {\n            base: 2,\n            weight: 6,\n            capacityProvider: capacityProvider1.id,\n        },\n        {\n            base: 0,\n            weight: 10,\n            capacityProvider: capacityProvider2.id,\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nauto_scaling_group_arn1 = config.require(\"autoScalingGroupArn1\")\nauto_scaling_group_arn2 = config.require(\"autoScalingGroupArn2\")\ncapacity_provider1 = aws_native.ecs.CapacityProvider(\"capacityProvider1\", auto_scaling_group_provider={\n    \"auto_scaling_group_arn\": auto_scaling_group_arn1,\n    \"managed_scaling\": {\n        \"status\": aws_native.ecs.CapacityProviderManagedScalingStatus.ENABLED,\n    },\n    \"managed_termination_protection\": aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.DISABLED,\n})\ncapacity_provider2 = aws_native.ecs.CapacityProvider(\"capacityProvider2\", auto_scaling_group_provider={\n    \"auto_scaling_group_arn\": auto_scaling_group_arn2,\n    \"managed_scaling\": {\n        \"status\": aws_native.ecs.CapacityProviderManagedScalingStatus.ENABLED,\n    },\n    \"managed_termination_protection\": aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.DISABLED,\n})\ncluster = aws_native.ecs.Cluster(\"cluster\")\ncluster_cpassociation = aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\",\n    cluster=cluster.id,\n    capacity_providers=[\n        capacity_provider1.id,\n        capacity_provider2.id,\n    ],\n    default_capacity_provider_strategy=[\n        {\n            \"base\": 2,\n            \"weight\": 6,\n            \"capacity_provider\": capacity_provider1.id,\n        },\n        {\n            \"base\": 0,\n            \"weight\": 10,\n            \"capacity_provider\": capacity_provider2.id,\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var autoScalingGroupArn1 = config.Require(\"autoScalingGroupArn1\");\n    var autoScalingGroupArn2 = config.Require(\"autoScalingGroupArn2\");\n    var capacityProvider1 = new AwsNative.Ecs.CapacityProvider(\"capacityProvider1\", new()\n    {\n        AutoScalingGroupProvider = new AwsNative.Ecs.Inputs.CapacityProviderAutoScalingGroupProviderArgs\n        {\n            AutoScalingGroupArn = autoScalingGroupArn1,\n            ManagedScaling = new AwsNative.Ecs.Inputs.CapacityProviderManagedScalingArgs\n            {\n                Status = AwsNative.Ecs.CapacityProviderManagedScalingStatus.Enabled,\n            },\n            ManagedTerminationProtection = AwsNative.Ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n        },\n    });\n\n    var capacityProvider2 = new AwsNative.Ecs.CapacityProvider(\"capacityProvider2\", new()\n    {\n        AutoScalingGroupProvider = new AwsNative.Ecs.Inputs.CapacityProviderAutoScalingGroupProviderArgs\n        {\n            AutoScalingGroupArn = autoScalingGroupArn2,\n            ManagedScaling = new AwsNative.Ecs.Inputs.CapacityProviderManagedScalingArgs\n            {\n                Status = AwsNative.Ecs.CapacityProviderManagedScalingStatus.Enabled,\n            },\n            ManagedTerminationProtection = AwsNative.Ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n        },\n    });\n\n    var cluster = new AwsNative.Ecs.Cluster(\"cluster\");\n\n    var clusterCPAssociation = new AwsNative.Ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", new()\n    {\n        Cluster = cluster.Id,\n        CapacityProviders = new[]\n        {\n            capacityProvider1.Id,\n            capacityProvider2.Id,\n        },\n        DefaultCapacityProviderStrategy = new[]\n        {\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 2,\n                Weight = 6,\n                CapacityProvider = capacityProvider1.Id,\n            },\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 0,\n                Weight = 10,\n                CapacityProvider = capacityProvider2.Id,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tautoScalingGroupArn1 := cfg.Require(\"autoScalingGroupArn1\")\n\t\tautoScalingGroupArn2 := cfg.Require(\"autoScalingGroupArn2\")\n\t\tcapacityProvider1, err := ecs.NewCapacityProvider(ctx, \"capacityProvider1\", \u0026ecs.CapacityProviderArgs{\n\t\t\tAutoScalingGroupProvider: \u0026ecs.CapacityProviderAutoScalingGroupProviderArgs{\n\t\t\t\tAutoScalingGroupArn: pulumi.String(pulumi.String(autoScalingGroupArn1)),\n\t\t\t\tManagedScaling: \u0026ecs.CapacityProviderManagedScalingArgs{\n\t\t\t\t\tStatus: ecs.CapacityProviderManagedScalingStatusEnabled,\n\t\t\t\t},\n\t\t\t\tManagedTerminationProtection: ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtectionDisabled,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcapacityProvider2, err := ecs.NewCapacityProvider(ctx, \"capacityProvider2\", \u0026ecs.CapacityProviderArgs{\n\t\t\tAutoScalingGroupProvider: \u0026ecs.CapacityProviderAutoScalingGroupProviderArgs{\n\t\t\t\tAutoScalingGroupArn: pulumi.String(pulumi.String(autoScalingGroupArn2)),\n\t\t\t\tManagedScaling: \u0026ecs.CapacityProviderManagedScalingArgs{\n\t\t\t\t\tStatus: ecs.CapacityProviderManagedScalingStatusEnabled,\n\t\t\t\t},\n\t\t\t\tManagedTerminationProtection: ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtectionDisabled,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcluster, err := ecs.NewCluster(ctx, \"cluster\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ecs.NewClusterCapacityProviderAssociations(ctx, \"clusterCPAssociation\", \u0026ecs.ClusterCapacityProviderAssociationsArgs{\n\t\t\tCluster: cluster.ID(),\n\t\t\tCapacityProviders: pulumi.StringArray{\n\t\t\t\tcapacityProvider1.ID(),\n\t\t\t\tcapacityProvider2.ID(),\n\t\t\t},\n\t\t\tDefaultCapacityProviderStrategy: ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArray{\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(2),\n\t\t\t\t\tWeight:           pulumi.Int(6),\n\t\t\t\t\tCapacityProvider: capacityProvider1.ID(),\n\t\t\t\t},\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(0),\n\t\t\t\t\tWeight:           pulumi.Int(10),\n\t\t\t\t\tCapacityProvider: capacityProvider2.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst autoScalingGroupArn1 = config.require(\"autoScalingGroupArn1\");\nconst autoScalingGroupArn2 = config.require(\"autoScalingGroupArn2\");\nconst capacityProvider1 = new aws_native.ecs.CapacityProvider(\"capacityProvider1\", {autoScalingGroupProvider: {\n    autoScalingGroupArn: autoScalingGroupArn1,\n    managedScaling: {\n        status: aws_native.ecs.CapacityProviderManagedScalingStatus.Enabled,\n    },\n    managedTerminationProtection: aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n}});\nconst capacityProvider2 = new aws_native.ecs.CapacityProvider(\"capacityProvider2\", {autoScalingGroupProvider: {\n    autoScalingGroupArn: autoScalingGroupArn2,\n    managedScaling: {\n        status: aws_native.ecs.CapacityProviderManagedScalingStatus.Enabled,\n    },\n    managedTerminationProtection: aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.Disabled,\n}});\nconst cluster = new aws_native.ecs.Cluster(\"cluster\", {});\nconst clusterCPAssociation = new aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", {\n    cluster: cluster.id,\n    capacityProviders: [\n        capacityProvider1.id,\n        capacityProvider2.id,\n    ],\n    defaultCapacityProviderStrategy: [\n        {\n            base: 2,\n            weight: 6,\n            capacityProvider: capacityProvider1.id,\n        },\n        {\n            base: 0,\n            weight: 10,\n            capacityProvider: capacityProvider2.id,\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nauto_scaling_group_arn1 = config.require(\"autoScalingGroupArn1\")\nauto_scaling_group_arn2 = config.require(\"autoScalingGroupArn2\")\ncapacity_provider1 = aws_native.ecs.CapacityProvider(\"capacityProvider1\", auto_scaling_group_provider={\n    \"auto_scaling_group_arn\": auto_scaling_group_arn1,\n    \"managed_scaling\": {\n        \"status\": aws_native.ecs.CapacityProviderManagedScalingStatus.ENABLED,\n    },\n    \"managed_termination_protection\": aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.DISABLED,\n})\ncapacity_provider2 = aws_native.ecs.CapacityProvider(\"capacityProvider2\", auto_scaling_group_provider={\n    \"auto_scaling_group_arn\": auto_scaling_group_arn2,\n    \"managed_scaling\": {\n        \"status\": aws_native.ecs.CapacityProviderManagedScalingStatus.ENABLED,\n    },\n    \"managed_termination_protection\": aws_native.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection.DISABLED,\n})\ncluster = aws_native.ecs.Cluster(\"cluster\")\ncluster_cpassociation = aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\",\n    cluster=cluster.id,\n    capacity_providers=[\n        capacity_provider1.id,\n        capacity_provider2.id,\n    ],\n    default_capacity_provider_strategy=[\n        {\n            \"base\": 2,\n            \"weight\": 6,\n            \"capacity_provider\": capacity_provider1.id,\n        },\n        {\n            \"base\": 0,\n            \"weight\": 10,\n            \"capacity_provider\": capacity_provider2.id,\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"autoScalingGroupProvider":{"$ref":"#/types/aws-native:ecs:CapacityProviderAutoScalingGroupProvider","description":"The Auto Scaling group settings for the capacity provider."},"clusterName":{"type":"string","description":"The cluster that this capacity provider is associated with. Managed instances capacity providers are cluster-scoped, meaning they can only be used within their associated cluster.\n\nThis is required for Managed instances.","replaceOnChanges":true},"managedInstancesProvider":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesProvider","description":"The configuration for the Amazon ECS Managed Instances provider. This includes the infrastructure role, the launch template configuration, and tag propagation settings."},"name":{"type":"string","description":"The name of the capacity provider. If a name is specified, it cannot start with `aws` , `ecs` , or `fargate` . If no name is specified, a default name in the `CFNStackName-CFNResourceName-RandomString` format is used.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the capacity provider to help you categorize and organize it. Each tag consists of a key and an optional value. You define both.\n\nThe following basic restrictions apply to tags:\n\n- Maximum number of tags per resource - 50\n- For each resource, each tag key must be unique, and each tag key can have only one value.\n- Maximum key length - 128 Unicode characters in UTF-8\n- Maximum value length - 256 Unicode characters in UTF-8\n- If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n- Tag keys and values are case-sensitive.\n- Do not use `aws:` , `AWS:` , or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."}},"type":"object","inputProperties":{"autoScalingGroupProvider":{"$ref":"#/types/aws-native:ecs:CapacityProviderAutoScalingGroupProvider","description":"The Auto Scaling group settings for the capacity provider."},"clusterName":{"type":"string","description":"The cluster that this capacity provider is associated with. Managed instances capacity providers are cluster-scoped, meaning they can only be used within their associated cluster.\n\nThis is required for Managed instances."},"managedInstancesProvider":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesProvider","description":"The configuration for the Amazon ECS Managed Instances provider. This includes the infrastructure role, the launch template configuration, and tag propagation settings."},"name":{"type":"string","description":"The name of the capacity provider. If a name is specified, it cannot start with `aws` , `ecs` , or `fargate` . If no name is specified, a default name in the `CFNStackName-CFNResourceName-RandomString` format is used."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the capacity provider to help you categorize and organize it. Each tag consists of a key and an optional value. You define both.\n\nThe following basic restrictions apply to tags:\n\n- Maximum number of tags per resource - 50\n- For each resource, each tag key must be unique, and each tag key can have only one value.\n- Maximum key length - 128 Unicode characters in UTF-8\n- Maximum value length - 256 Unicode characters in UTF-8\n- If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n- Tag keys and values are case-sensitive.\n- Do not use `aws:` , `AWS:` , or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."}}},"aws-native:ecs:Cluster":{"description":"The ``AWS::ECS::Cluster`` resource creates an Amazon Elastic Container Service (Amazon ECS) cluster.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon ECS cluster, such as `arn:aws:ecs:us-east-2:123456789012:cluster/MyECSCluster` ."},"capacityProviders":{"type":"array","items":{"type":"string"},"description":"The short name of one or more capacity providers to associate with the cluster. A capacity provider must be associated with a cluster before it can be included as part of the default capacity provider strategy of the cluster or used in a capacity provider strategy when calling the [CreateService](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateService.html) or [RunTask](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html) actions.\n If specifying a capacity provider that uses an Auto Scaling group, the capacity provider must be created but not associated with another cluster. New Auto Scaling group capacity providers can be created with the [CreateCapacityProvider](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateCapacityProvider.html) API operation.\n To use a FARGATElong capacity provider, specify either the ``FARGATE`` or ``FARGATE_SPOT`` capacity providers. The FARGATElong capacity providers are available to all accounts and only need to be associated with a cluster to be used.\n The [PutCapacityProvider](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutCapacityProvider.html) API operation is used to update the list of available capacity providers for a cluster after the cluster is created."},"clusterName":{"type":"string","description":"A user-generated string that you use to identify your cluster. If you don't specify a name, CFNlong generates a unique physical ID for the name.","replaceOnChanges":true},"clusterSettings":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ClusterSettings"},"description":"The settings to use when creating a cluster. This parameter is used to turn on CloudWatch Container Insights with enhanced observability or CloudWatch Container Insights for a cluster.\n Container Insights with enhanced observability provides all the Container Insights metrics, plus additional task and container metrics. This version supports enhanced observability for Amazon ECS clusters using the Amazon EC2 and Fargate launch types. After you configure Container Insights with enhanced observability on Amazon ECS, Container Insights auto-collects detailed infrastructure telemetry from the cluster level down to the container level in your environment and displays these critical performance data in curated dashboards removing the heavy lifting in observability set-up. \n For more information, see [Monitor Amazon ECS containers using Container Insights with enhanced observability](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html) in the *Amazon Elastic Container Service Developer Guide*."},"configuration":{"$ref":"#/types/aws-native:ecs:ClusterConfiguration","description":"The execute command and managed storage configuration for the cluster."},"defaultCapacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderStrategyItem"},"description":"The default capacity provider strategy for the cluster. When services or tasks are run in the cluster with no launch type or capacity provider strategy specified, the default capacity provider strategy is used."},"serviceConnectDefaults":{"$ref":"#/types/aws-native:ecs:ClusterServiceConnectDefaults","description":"Use this parameter to set a default Service Connect namespace. After you set a default Service Connect namespace, any new services with Service Connect turned on that are created in the cluster are added as client services in the namespace. This setting only applies to new services that set the ``enabled`` parameter to ``true`` in the ``ServiceConnectConfiguration``. You can set the namespace of each service individually in the ``ServiceConnectConfiguration`` to override this default parameter.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the cluster to help you categorize and organize them. Each tag consists of a key and an optional value. You define both.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."}},"type":"object","required":["arn"],"inputProperties":{"capacityProviders":{"type":"array","items":{"type":"string"},"description":"The short name of one or more capacity providers to associate with the cluster. A capacity provider must be associated with a cluster before it can be included as part of the default capacity provider strategy of the cluster or used in a capacity provider strategy when calling the [CreateService](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateService.html) or [RunTask](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html) actions.\n If specifying a capacity provider that uses an Auto Scaling group, the capacity provider must be created but not associated with another cluster. New Auto Scaling group capacity providers can be created with the [CreateCapacityProvider](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateCapacityProvider.html) API operation.\n To use a FARGATElong capacity provider, specify either the ``FARGATE`` or ``FARGATE_SPOT`` capacity providers. The FARGATElong capacity providers are available to all accounts and only need to be associated with a cluster to be used.\n The [PutCapacityProvider](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutCapacityProvider.html) API operation is used to update the list of available capacity providers for a cluster after the cluster is created."},"clusterName":{"type":"string","description":"A user-generated string that you use to identify your cluster. If you don't specify a name, CFNlong generates a unique physical ID for the name."},"clusterSettings":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ClusterSettings"},"description":"The settings to use when creating a cluster. This parameter is used to turn on CloudWatch Container Insights with enhanced observability or CloudWatch Container Insights for a cluster.\n Container Insights with enhanced observability provides all the Container Insights metrics, plus additional task and container metrics. This version supports enhanced observability for Amazon ECS clusters using the Amazon EC2 and Fargate launch types. After you configure Container Insights with enhanced observability on Amazon ECS, Container Insights auto-collects detailed infrastructure telemetry from the cluster level down to the container level in your environment and displays these critical performance data in curated dashboards removing the heavy lifting in observability set-up. \n For more information, see [Monitor Amazon ECS containers using Container Insights with enhanced observability](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html) in the *Amazon Elastic Container Service Developer Guide*."},"configuration":{"$ref":"#/types/aws-native:ecs:ClusterConfiguration","description":"The execute command and managed storage configuration for the cluster."},"defaultCapacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderStrategyItem"},"description":"The default capacity provider strategy for the cluster. When services or tasks are run in the cluster with no launch type or capacity provider strategy specified, the default capacity provider strategy is used."},"serviceConnectDefaults":{"$ref":"#/types/aws-native:ecs:ClusterServiceConnectDefaults","description":"Use this parameter to set a default Service Connect namespace. After you set a default Service Connect namespace, any new services with Service Connect turned on that are created in the cluster are added as client services in the namespace. This setting only applies to new services that set the ``enabled`` parameter to ``true`` in the ``ServiceConnectConfiguration``. You can set the namespace of each service individually in the ``ServiceConnectConfiguration`` to override this default parameter.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the cluster to help you categorize and organize them. Each tag consists of a key and an optional value. You define both.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."}}},"aws-native:ecs:ClusterCapacityProviderAssociations":{"description":"Associate a set of ECS Capacity Providers with a specified ECS Cluster\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var clusterName = config.Require(\"clusterName\");\n    var clusterCPAssociation = new AwsNative.Ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", new()\n    {\n        Cluster = clusterName,\n        CapacityProviders = new[]\n        {\n            AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n            AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n        },\n        DefaultCapacityProviderStrategy = new[]\n        {\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 2,\n                Weight = 1,\n                CapacityProvider = AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n            },\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 0,\n                Weight = 1,\n                CapacityProvider = AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tclusterName := cfg.Require(\"clusterName\")\n\t\t_, err := ecs.NewClusterCapacityProviderAssociations(ctx, \"clusterCPAssociation\", \u0026ecs.ClusterCapacityProviderAssociationsArgs{\n\t\t\tCluster: pulumi.String(pulumi.String(clusterName)),\n\t\t\tCapacityProviders: pulumi.StringArray{\n\t\t\t\tpulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargate),\n\t\t\t\tpulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargateSpot),\n\t\t\t},\n\t\t\tDefaultCapacityProviderStrategy: ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArray{\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(2),\n\t\t\t\t\tWeight:           pulumi.Int(1),\n\t\t\t\t\tCapacityProvider: pulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargate),\n\t\t\t\t},\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(0),\n\t\t\t\t\tWeight:           pulumi.Int(1),\n\t\t\t\t\tCapacityProvider: pulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargateSpot),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst clusterName = config.require(\"clusterName\");\nconst clusterCPAssociation = new aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", {\n    cluster: clusterName,\n    capacityProviders: [\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n    ],\n    defaultCapacityProviderStrategy: [\n        {\n            base: 2,\n            weight: 1,\n            capacityProvider: aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n        },\n        {\n            base: 0,\n            weight: 1,\n            capacityProvider: aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ncluster_name = config.require(\"clusterName\")\ncluster_cpassociation = aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\",\n    cluster=cluster_name,\n    capacity_providers=[\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE,\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE_SPOT,\n    ],\n    default_capacity_provider_strategy=[\n        {\n            \"base\": 2,\n            \"weight\": 1,\n            \"capacity_provider\": aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE,\n        },\n        {\n            \"base\": 0,\n            \"weight\": 1,\n            \"capacity_provider\": aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE_SPOT,\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var clusterName = config.Require(\"clusterName\");\n    var clusterCPAssociation = new AwsNative.Ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", new()\n    {\n        Cluster = clusterName,\n        CapacityProviders = new[]\n        {\n            AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n            AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n        },\n        DefaultCapacityProviderStrategy = new[]\n        {\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 2,\n                Weight = 1,\n                CapacityProvider = AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n            },\n            new AwsNative.Ecs.Inputs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs\n            {\n                Base = 0,\n                Weight = 1,\n                CapacityProvider = AwsNative.Ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tclusterName := cfg.Require(\"clusterName\")\n\t\t_, err := ecs.NewClusterCapacityProviderAssociations(ctx, \"clusterCPAssociation\", \u0026ecs.ClusterCapacityProviderAssociationsArgs{\n\t\t\tCluster: pulumi.String(pulumi.String(clusterName)),\n\t\t\tCapacityProviders: pulumi.StringArray{\n\t\t\t\tpulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargate),\n\t\t\t\tpulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargateSpot),\n\t\t\t},\n\t\t\tDefaultCapacityProviderStrategy: ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArray{\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(2),\n\t\t\t\t\tWeight:           pulumi.Int(1),\n\t\t\t\t\tCapacityProvider: pulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargate),\n\t\t\t\t},\n\t\t\t\t\u0026ecs.ClusterCapacityProviderAssociationsCapacityProviderStrategyArgs{\n\t\t\t\t\tBase:             pulumi.Int(0),\n\t\t\t\t\tWeight:           pulumi.Int(1),\n\t\t\t\t\tCapacityProvider: pulumi.String(ecs.ClusterCapacityProviderAssociationsCapacityProviderFargateSpot),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst clusterName = config.require(\"clusterName\");\nconst clusterCPAssociation = new aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\", {\n    cluster: clusterName,\n    capacityProviders: [\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n    ],\n    defaultCapacityProviderStrategy: [\n        {\n            base: 2,\n            weight: 1,\n            capacityProvider: aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.Fargate,\n        },\n        {\n            base: 0,\n            weight: 1,\n            capacityProvider: aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FargateSpot,\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ncluster_name = config.require(\"clusterName\")\ncluster_cpassociation = aws_native.ecs.ClusterCapacityProviderAssociations(\"clusterCPAssociation\",\n    cluster=cluster_name,\n    capacity_providers=[\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE,\n        aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE_SPOT,\n    ],\n    default_capacity_provider_strategy=[\n        {\n            \"base\": 2,\n            \"weight\": 1,\n            \"capacity_provider\": aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE,\n        },\n        {\n            \"base\": 0,\n            \"weight\": 1,\n            \"capacity_provider\": aws_native.ecs.ClusterCapacityProviderAssociationsCapacityProvider.FARGATE_SPOT,\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"capacityProviders":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProvider"},{"type":"string"}]},"description":"The capacity providers to associate with the cluster."},"cluster":{"type":"string","description":"The cluster the capacity provider association is the target of.","replaceOnChanges":true},"defaultCapacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProviderStrategy"},"description":"The default capacity provider strategy to associate with the cluster."}},"type":"object","required":["cluster","defaultCapacityProviderStrategy"],"inputProperties":{"capacityProviders":{"type":"array","items":{"oneOf":[{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProvider"},{"type":"string"}]},"description":"The capacity providers to associate with the cluster."},"cluster":{"type":"string","description":"The cluster the capacity provider association is the target of."},"defaultCapacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProviderStrategy"},"description":"The default capacity provider strategy to associate with the cluster."}},"requiredInputs":["cluster","defaultCapacityProviderStrategy"]},"aws-native:ecs:ExpressGatewayService":{"description":"Resource Type definition for AWS::ECS::ExpressGatewayService","properties":{"activeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceConfiguration"},"description":"The list of active service configurations for the Express service."},"cluster":{"type":"string","description":"The short name or full ARN of the cluster that hosts the Express service.","replaceOnChanges":true},"cpu":{"type":"string","description":"The CPU allocation for tasks in this service revision."},"createdAt":{"type":"string","description":"The Unix timestamp for when the Express service was created."},"ecsManagedResourceArns":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceEcsManagedResourceArns"},"endpoint":{"type":"string","description":"The Endpoint of the express service."},"executionRoleArn":{"type":"string","description":"The ARN of the task execution role for the service revision."},"healthCheckPath":{"type":"string","description":"The health check path for this service revision."},"infrastructureRoleArn":{"type":"string","description":"The ARN of the infrastructure role that manages AWS resources for the Express service.","replaceOnChanges":true},"memory":{"type":"string","description":"The memory allocation for tasks in this service revision."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceNetworkConfiguration","description":"The network configuration for tasks in this service revision."},"primaryContainer":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayContainer","description":"The primary container configuration for this service revision."},"scalingTarget":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayScalingTarget","description":"The auto-scaling configuration for this service revision."},"serviceArn":{"type":"string","description":"The ARN that identifies the Express service."},"serviceName":{"type":"string","description":"The name of the Express service.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The metadata applied to the Express service.","replaceOnChanges":true},"taskRoleArn":{"type":"string","description":"The ARN of the task role for the service revision."},"updatedAt":{"type":"string","description":"The Unix timestamp for when the Express service was last updated."}},"type":"object","required":["activeConfigurations","createdAt","ecsManagedResourceArns","endpoint","executionRoleArn","infrastructureRoleArn","primaryContainer","serviceArn","status","updatedAt"],"inputProperties":{"cluster":{"type":"string","description":"The short name or full ARN of the cluster that hosts the Express service."},"cpu":{"type":"string","description":"The CPU allocation for tasks in this service revision."},"executionRoleArn":{"type":"string","description":"The ARN of the task execution role for the service revision."},"healthCheckPath":{"type":"string","description":"The health check path for this service revision."},"infrastructureRoleArn":{"type":"string","description":"The ARN of the infrastructure role that manages AWS resources for the Express service."},"memory":{"type":"string","description":"The memory allocation for tasks in this service revision."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceNetworkConfiguration","description":"The network configuration for tasks in this service revision."},"primaryContainer":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayContainer","description":"The primary container configuration for this service revision."},"scalingTarget":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceExpressGatewayScalingTarget","description":"The auto-scaling configuration for this service revision."},"serviceName":{"type":"string","description":"The name of the Express service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The metadata applied to the Express service."},"taskRoleArn":{"type":"string","description":"The ARN of the task role for the service revision."}},"requiredInputs":["executionRoleArn","infrastructureRoleArn","primaryContainer"]},"aws-native:ecs:PrimaryTaskSet":{"description":"A pseudo-resource that manages which of your ECS task sets is primary.","properties":{"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that hosts the service to create the task set in.","replaceOnChanges":true},"service":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the service to create the task set in.","replaceOnChanges":true},"taskSetId":{"type":"string","description":"The ID or full Amazon Resource Name (ARN) of the task set."}},"type":"object","required":["cluster","service","taskSetId"],"inputProperties":{"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that hosts the service to create the task set in."},"service":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the service to create the task set in."},"taskSetId":{"type":"string","description":"The ID or full Amazon Resource Name (ARN) of the task set."}},"requiredInputs":["cluster","service","taskSetId"]},"aws-native:ecs:Service":{"description":"The ``AWS::ECS::Service`` resource creates an Amazon Elastic Container Service (Amazon ECS) service that runs and maintains the requested number of tasks and associated load balancers.\n  The stack update fails if you change any properties that require replacement and at least one ECS Service Connect ``ServiceConnectConfiguration`` property is configured. This is because AWS CloudFormation creates the replacement service first, but each ``ServiceConnectService`` must have a name that is unique in the namespace.\n   Starting April 15, 2023, AWS; will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, ECS, or EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service. \n   On June 12, 2025, Amazon ECS launched support for updating capacity provider configuration for ECS services. With this launch, ECS also aligned the CFN update behavior for ``CapacityProviderStrategy`` parameter with the standard practice. For more information, see [adds support for updating capacity provider configuration for ECS services](https://docs.aws.amazon.com/about-aws/whats-new/2025/05/amazon-ecs-capacity-provider-configuration-ecs/). Previously ECS ignored the ``CapacityProviderStrategy`` property if it was set to an empty list for example, ``[]`` in CFN, because updating capacity provider configuration was not supported. Now, with support for capacity provider updates, customers can remove capacity providers from a service by passing an empty list. When you specify an empty list (``[]``) for the ``CapacityProviderStrategy`` property in your CFN template, ECS will remove any capacity providers associated with the service, as follows:\n  +  For services created with a capacity provider strategy after the launch:\n  +  If there's a cluster default strategy set, the service will revert to using that default strategy.\n  +  If no cluster default strategy exists, you will receive the following error:\n No launch type to fall back to for empty capacity provider strategy. Your service was not created with a launch type.\n  \n  +  For services created with a capacity provider strategy prior to the launch:\n  +  If ``CapacityProviderStrategy`` had ``FARGATE_SPOT`` or ``FARGATE`` capacity providers, the launch type will be updated to ``FARGATE`` and the capacity provider will be removed.\n  +  If the strategy included Auto Scaling group capacity providers, the service will revert to EC2 launch type, and the Auto Scaling group capacity providers will not be used.\n  \n  \n Recommended Actions\n If you are currently using ``CapacityProviderStrategy: []`` in your CFN templates, you should take one of the following actions:\n  +  If you do not intend to update the Capacity Provider Strategy:\n  +  Remove the ``CapacityProviderStrategy`` property entirely from your CFN template\n  +  Alternatively, use ``!Ref ::NoValue`` for the ``CapacityProviderStrategy`` property in your template\n  \n  +  If you intend to maintain or update the Capacity Provider Strategy, specify the actual Capacity Provider Strategy for the service in your CFN template.\n  \n If your CFN template had an empty list ([]) for ``CapacityProviderStrategy`` prior to the aforementioned launch on June 12, and you are using the same template with ``CapacityProviderStrategy: []``, you might encounter the following error:\n  Invalid request provided: When switching from launch type to capacity provider strategy on an existing service, or making a change to a capacity provider strategy on a service that is already using one, you must force a new deployment. (Service: Ecs, Status Code: 400, Request ID: xxx) (SDK Attempt Count: 1)\" (RequestToken: xxx HandlerErrorCode: InvalidRequest) \n Note that CFN automatically initiates a new deployment when it detects a parameter change, but customers cannot choose to force a deployment through CFN. This is an invalid input scenario that requires one of the remediation actions listed above.\n If you are experiencing active production issues related to this change, contact AWS Support or your Technical Account Manager.","properties":{"availabilityZoneRebalancing":{"$ref":"#/types/aws-native:ecs:ServiceAvailabilityZoneRebalancing","description":"Indicates whether to use Availability Zone rebalancing for the service.\n For more information, see [Balancing an Amazon ECS service across Availability Zones](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-rebalancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default behavior of ``AvailabilityZoneRebalancing`` differs between create and update requests:\n  +  For create service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults the value to ``ENABLED``.\n  +  For update service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults to the existing service’s ``AvailabilityZoneRebalancing`` value. If the service never had an ``AvailabilityZoneRebalancing`` value set, Amazon ECS treats this as ``DISABLED``."},"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceCapacityProviderStrategyItem"},"description":"The capacity provider strategy to use for the service.\n If a ``capacityProviderStrategy`` is specified, the ``launchType`` parameter must be omitted. If no ``capacityProviderStrategy`` or ``launchType`` is specified, the ``defaultCapacityProviderStrategy`` for the cluster is used.\n A capacity provider strategy can contain a maximum of 20 capacity providers.\n  To remove this property from your service resource, specify an empty ``CapacityProviderStrategyItem`` array."},"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that you run your service on. If you do not specify a cluster, the default cluster is assumed.","replaceOnChanges":true},"deploymentConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentConfiguration","description":"Optional deployment parameters that control how many tasks run during the deployment and the ordering of stopping and starting tasks."},"deploymentController":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentController","description":"The deployment controller to use for the service."},"desiredCount":{"type":"integer","description":"The number of instantiations of the specified task definition to place and keep running in your service.\n For new services, if a desired count is not specified, a default value of ``1`` is used. When using the ``DAEMON`` scheduling strategy, the desired count is not required.\n For existing services, if a desired count is not specified, it is omitted from the operation."},"enableEcsManagedTags":{"type":"boolean","description":"Specifies whether to turn on Amazon ECS managed tags for the tasks within the service. For more information, see [Tagging your Amazon ECS resources](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html) in the *Amazon Elastic Container Service Developer Guide*.\n When you use Amazon ECS managed tags, you must set the ``propagateTags`` request parameter."},"enableExecuteCommand":{"type":"boolean","description":"Determines whether the execute command functionality is turned on for the service. If ``true``, the execute command functionality is turned on for all containers in tasks as part of the service."},"forceNewDeployment":{"$ref":"#/types/aws-native:ecs:ServiceForceNewDeployment","description":"Determines whether to force a new deployment of the service. By default, deployments aren't forced. You can use this option to start a new deployment with no service definition changes. For example, you can update a service's tasks to use a newer Docker image with the same image/tag combination (``my_image:latest``) or to roll Fargate tasks onto a newer platform version."},"healthCheckGracePeriodSeconds":{"type":"integer","description":"The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing, VPC Lattice, and container health checks after a task has first started. If you do not specify a health check grace period value, the default value of 0 is used. If you do not use any of the health checks, then ``healthCheckGracePeriodSeconds`` is unused.\n If your service has more running tasks than desired, unhealthy tasks in the grace period might be stopped to reach the desired count."},"launchType":{"$ref":"#/types/aws-native:ecs:ServiceLaunchType","description":"The launch type on which to run your service. For more information, see [Amazon ECS Launch Types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If you want to use Managed Instances, you must use the ``capacityProviderStrategy`` request parameter"},"loadBalancers":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceLoadBalancer"},"description":"A list of load balancer objects to associate with the service. If you specify the ``Role`` property, ``LoadBalancers`` must be specified as well. For information about the number of load balancers that you can specify per service, see [Service Load Balancing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-load-balancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n  To remove this property from your service resource, specify an empty ``LoadBalancer`` array."},"name":{"type":"string","description":"The name of the Amazon ECS service, such as `sample-webapp` ."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceNetworkConfiguration","description":"The network configuration for the service. This parameter is required for task definitions that use the ``awsvpc`` network mode to receive their own elastic network interface, and it is not supported for other network modes. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*."},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServicePlacementConstraint"},"description":"An array of placement constraint objects to use for tasks in your service. You can specify a maximum of 10 constraints for each task. This limit includes constraints in the task definition and those specified at runtime.\n  To remove this property from your service resource, specify an empty ``PlacementConstraint`` array."},"placementStrategies":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServicePlacementStrategy"},"description":"The placement strategy objects to use for tasks in your service. You can specify a maximum of 5 strategy rules for each service.\n  To remove this property from your service resource, specify an empty ``PlacementStrategy`` array."},"platformVersion":{"type":"string","description":"The platform version that your tasks in the service are running on. A platform version is specified only for tasks using the Fargate launch type. If one isn't specified, the ``LATEST`` platform version is used. For more information, see [platform versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html) in the *Amazon Elastic Container Service Developer Guide*."},"propagateTags":{"$ref":"#/types/aws-native:ecs:ServicePropagateTags","description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the [TagResource](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html) API action.\n You must set this to a value other than ``NONE`` when you use Cost Explorer. For more information, see [Amazon ECS usage reports](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/usage-reports.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default is ``NONE``."},"role":{"type":"string","description":"The name or full Amazon Resource Name (ARN) of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is only permitted if you are using a load balancer with your service and your task definition doesn't use the ``awsvpc`` network mode. If you specify the ``role`` parameter, you must also specify a load balancer object with the ``loadBalancers`` parameter.\n  If your account has already created the Amazon ECS service-linked role, that role is used for your service unless you specify a role here. The service-linked role is required if your task definition uses the ``awsvpc`` network mode or if the service is configured to use service discovery, an external deployment controller, multiple target groups, or Elastic Inference accelerators in which case you don't specify a role here. For more information, see [Using service-linked roles for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using-service-linked-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If your specified role has a path other than ``/``, then you must either specify the full role ARN (this is recommended) or prefix the role name with the path. For example, if a role with the name ``bar`` has a path of ``/foo/`` then you would specify ``/foo/bar`` as the role name. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide*.","replaceOnChanges":true},"schedulingStrategy":{"$ref":"#/types/aws-native:ecs:ServiceSchedulingStrategy","description":"The scheduling strategy to use for the service. For more information, see [Services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html).\n There are two service scheduler strategies available:\n  +  ``REPLICA``-The replica scheduling strategy places and maintains the desired number of tasks across your cluster. By default, the service scheduler spreads tasks across Availability Zones. You can use task placement strategies and constraints to customize task placement decisions. This scheduler strategy is required if the service uses the ``CODE_DEPLOY`` or ``EXTERNAL`` deployment controller types.\n  +  ``DAEMON``-The daemon scheduling strategy deploys exactly one task on each active container instance that meets all of the task placement constraints that you specify in your cluster. The service scheduler also evaluates the task placement constraints for running tasks and will stop tasks that don't meet the placement constraints. When you're using this strategy, you don't need to specify a desired number of tasks, a task placement strategy, or use Service Auto Scaling policies.\n  Tasks using the Fargate launch type or the ``CODE_DEPLOY`` or ``EXTERNAL`` deployment controller types don't support the ``DAEMON`` scheduling strategy.","replaceOnChanges":true},"serviceArn":{"type":"string","description":"The ARN that identifies the service. For more information about the ARN format, see [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#ecs-resource-ids) in the *Amazon ECS Developer Guide* ."},"serviceConnectConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceConnectConfiguration","description":"The configuration for this service to discover and connect to services, and be discovered by, and connected from, other services within a namespace.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"serviceName":{"type":"string","description":"The name of your service. Up to 255 letters (uppercase and lowercase), numbers, underscores, and hyphens are allowed. Service names must be unique within a cluster, but you can have similarly named services in multiple clusters within a Region or across multiple Regions.\n  The stack update fails if you change any properties that require replacement and the ``ServiceName`` is configured. This is because AWS CloudFormation creates the replacement service first, but each ``ServiceName`` must be unique in the cluster.","replaceOnChanges":true},"serviceRegistries":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceRegistry"},"description":"The details of the service discovery registry to associate with this service. For more information, see [Service discovery](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html).\n  Each service may be associated with one service registry. Multiple service registries for each service isn't supported.\n   To remove this property from your service resource, specify an empty ``ServiceRegistry`` array."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the service to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. When a service is deleted, the tags are deleted as well.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."},"taskDefinition":{"type":"string","description":"The ``family`` and ``revision`` (``family:revision``) or full ARN of the task definition to run in your service. If a ``revision`` isn't specified, the latest ``ACTIVE`` revision is used.\n A task definition must be specified if the service uses either the ``ECS`` or ``CODE_DEPLOY`` deployment controllers.\n For more information about deployment types, see [Amazon ECS deployment types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html)."},"volumeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceVolumeConfiguration"},"description":"The configuration for a volume specified in the task definition as a volume that is configured at launch time. Currently, the only supported volume type is an Amazon EBS volume.\n  To remove this property from your service resource, specify an empty ``ServiceVolumeConfiguration`` array."},"vpcLatticeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceVpcLatticeConfiguration"},"description":"The VPC Lattice configuration for the service being created."}},"type":"object","required":["name","serviceArn"],"inputProperties":{"availabilityZoneRebalancing":{"$ref":"#/types/aws-native:ecs:ServiceAvailabilityZoneRebalancing","description":"Indicates whether to use Availability Zone rebalancing for the service.\n For more information, see [Balancing an Amazon ECS service across Availability Zones](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-rebalancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default behavior of ``AvailabilityZoneRebalancing`` differs between create and update requests:\n  +  For create service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults the value to ``ENABLED``.\n  +  For update service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults to the existing service’s ``AvailabilityZoneRebalancing`` value. If the service never had an ``AvailabilityZoneRebalancing`` value set, Amazon ECS treats this as ``DISABLED``."},"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceCapacityProviderStrategyItem"},"description":"The capacity provider strategy to use for the service.\n If a ``capacityProviderStrategy`` is specified, the ``launchType`` parameter must be omitted. If no ``capacityProviderStrategy`` or ``launchType`` is specified, the ``defaultCapacityProviderStrategy`` for the cluster is used.\n A capacity provider strategy can contain a maximum of 20 capacity providers.\n  To remove this property from your service resource, specify an empty ``CapacityProviderStrategyItem`` array."},"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that you run your service on. If you do not specify a cluster, the default cluster is assumed."},"deploymentConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentConfiguration","description":"Optional deployment parameters that control how many tasks run during the deployment and the ordering of stopping and starting tasks."},"deploymentController":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentController","description":"The deployment controller to use for the service."},"desiredCount":{"type":"integer","description":"The number of instantiations of the specified task definition to place and keep running in your service.\n For new services, if a desired count is not specified, a default value of ``1`` is used. When using the ``DAEMON`` scheduling strategy, the desired count is not required.\n For existing services, if a desired count is not specified, it is omitted from the operation."},"enableEcsManagedTags":{"type":"boolean","description":"Specifies whether to turn on Amazon ECS managed tags for the tasks within the service. For more information, see [Tagging your Amazon ECS resources](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html) in the *Amazon Elastic Container Service Developer Guide*.\n When you use Amazon ECS managed tags, you must set the ``propagateTags`` request parameter."},"enableExecuteCommand":{"type":"boolean","description":"Determines whether the execute command functionality is turned on for the service. If ``true``, the execute command functionality is turned on for all containers in tasks as part of the service."},"forceNewDeployment":{"$ref":"#/types/aws-native:ecs:ServiceForceNewDeployment","description":"Determines whether to force a new deployment of the service. By default, deployments aren't forced. You can use this option to start a new deployment with no service definition changes. For example, you can update a service's tasks to use a newer Docker image with the same image/tag combination (``my_image:latest``) or to roll Fargate tasks onto a newer platform version."},"healthCheckGracePeriodSeconds":{"type":"integer","description":"The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing, VPC Lattice, and container health checks after a task has first started. If you do not specify a health check grace period value, the default value of 0 is used. If you do not use any of the health checks, then ``healthCheckGracePeriodSeconds`` is unused.\n If your service has more running tasks than desired, unhealthy tasks in the grace period might be stopped to reach the desired count."},"launchType":{"$ref":"#/types/aws-native:ecs:ServiceLaunchType","description":"The launch type on which to run your service. For more information, see [Amazon ECS Launch Types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If you want to use Managed Instances, you must use the ``capacityProviderStrategy`` request parameter"},"loadBalancers":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceLoadBalancer"},"description":"A list of load balancer objects to associate with the service. If you specify the ``Role`` property, ``LoadBalancers`` must be specified as well. For information about the number of load balancers that you can specify per service, see [Service Load Balancing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-load-balancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n  To remove this property from your service resource, specify an empty ``LoadBalancer`` array."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceNetworkConfiguration","description":"The network configuration for the service. This parameter is required for task definitions that use the ``awsvpc`` network mode to receive their own elastic network interface, and it is not supported for other network modes. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*."},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServicePlacementConstraint"},"description":"An array of placement constraint objects to use for tasks in your service. You can specify a maximum of 10 constraints for each task. This limit includes constraints in the task definition and those specified at runtime.\n  To remove this property from your service resource, specify an empty ``PlacementConstraint`` array."},"placementStrategies":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServicePlacementStrategy"},"description":"The placement strategy objects to use for tasks in your service. You can specify a maximum of 5 strategy rules for each service.\n  To remove this property from your service resource, specify an empty ``PlacementStrategy`` array."},"platformVersion":{"type":"string","description":"The platform version that your tasks in the service are running on. A platform version is specified only for tasks using the Fargate launch type. If one isn't specified, the ``LATEST`` platform version is used. For more information, see [platform versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html) in the *Amazon Elastic Container Service Developer Guide*."},"propagateTags":{"$ref":"#/types/aws-native:ecs:ServicePropagateTags","description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the [TagResource](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html) API action.\n You must set this to a value other than ``NONE`` when you use Cost Explorer. For more information, see [Amazon ECS usage reports](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/usage-reports.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default is ``NONE``."},"role":{"type":"string","description":"The name or full Amazon Resource Name (ARN) of the IAM role that allows Amazon ECS to make calls to your load balancer on your behalf. This parameter is only permitted if you are using a load balancer with your service and your task definition doesn't use the ``awsvpc`` network mode. If you specify the ``role`` parameter, you must also specify a load balancer object with the ``loadBalancers`` parameter.\n  If your account has already created the Amazon ECS service-linked role, that role is used for your service unless you specify a role here. The service-linked role is required if your task definition uses the ``awsvpc`` network mode or if the service is configured to use service discovery, an external deployment controller, multiple target groups, or Elastic Inference accelerators in which case you don't specify a role here. For more information, see [Using service-linked roles for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using-service-linked-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If your specified role has a path other than ``/``, then you must either specify the full role ARN (this is recommended) or prefix the role name with the path. For example, if a role with the name ``bar`` has a path of ``/foo/`` then you would specify ``/foo/bar`` as the role name. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide*."},"schedulingStrategy":{"$ref":"#/types/aws-native:ecs:ServiceSchedulingStrategy","description":"The scheduling strategy to use for the service. For more information, see [Services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html).\n There are two service scheduler strategies available:\n  +  ``REPLICA``-The replica scheduling strategy places and maintains the desired number of tasks across your cluster. By default, the service scheduler spreads tasks across Availability Zones. You can use task placement strategies and constraints to customize task placement decisions. This scheduler strategy is required if the service uses the ``CODE_DEPLOY`` or ``EXTERNAL`` deployment controller types.\n  +  ``DAEMON``-The daemon scheduling strategy deploys exactly one task on each active container instance that meets all of the task placement constraints that you specify in your cluster. The service scheduler also evaluates the task placement constraints for running tasks and will stop tasks that don't meet the placement constraints. When you're using this strategy, you don't need to specify a desired number of tasks, a task placement strategy, or use Service Auto Scaling policies.\n  Tasks using the Fargate launch type or the ``CODE_DEPLOY`` or ``EXTERNAL`` deployment controller types don't support the ``DAEMON`` scheduling strategy."},"serviceConnectConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceConnectConfiguration","description":"The configuration for this service to discover and connect to services, and be discovered by, and connected from, other services within a namespace.\n Tasks that run in a namespace can use short names to connect to services in the namespace. Tasks can connect to services across all of the clusters in the namespace. Tasks connect through a managed proxy container that collects logs and metrics for increased visibility. Only the tasks that Amazon ECS services create are supported with Service Connect. For more information, see [Service Connect](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html) in the *Amazon Elastic Container Service Developer Guide*."},"serviceName":{"type":"string","description":"The name of your service. Up to 255 letters (uppercase and lowercase), numbers, underscores, and hyphens are allowed. Service names must be unique within a cluster, but you can have similarly named services in multiple clusters within a Region or across multiple Regions.\n  The stack update fails if you change any properties that require replacement and the ``ServiceName`` is configured. This is because AWS CloudFormation creates the replacement service first, but each ``ServiceName`` must be unique in the cluster."},"serviceRegistries":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceRegistry"},"description":"The details of the service discovery registry to associate with this service. For more information, see [Service discovery](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html).\n  Each service may be associated with one service registry. Multiple service registries for each service isn't supported.\n   To remove this property from your service resource, specify an empty ``ServiceRegistry`` array."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the service to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. When a service is deleted, the tags are deleted as well.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."},"taskDefinition":{"type":"string","description":"The ``family`` and ``revision`` (``family:revision``) or full ARN of the task definition to run in your service. If a ``revision`` isn't specified, the latest ``ACTIVE`` revision is used.\n A task definition must be specified if the service uses either the ``ECS`` or ``CODE_DEPLOY`` deployment controllers.\n For more information about deployment types, see [Amazon ECS deployment types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html)."},"volumeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceVolumeConfiguration"},"description":"The configuration for a volume specified in the task definition as a volume that is configured at launch time. Currently, the only supported volume type is an Amazon EBS volume.\n  To remove this property from your service resource, specify an empty ``ServiceVolumeConfiguration`` array."},"vpcLatticeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:ServiceVpcLatticeConfiguration"},"description":"The VPC Lattice configuration for the service being created."}}},"aws-native:ecs:TaskDefinition":{"description":"Registers a new task definition from the supplied ``family`` and ``containerDefinitions``. Optionally, you can add data volumes to your containers with the ``volumes`` parameter. For more information about task definition parameters and defaults, see [Amazon ECS Task Definitions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_defintions.html) in the *Amazon Elastic Container Service Developer Guide*.\n You can specify a role for your task with the ``taskRoleArn`` parameter. When you specify a role for a task, its containers can then use the latest versions of the CLI or SDKs to make API requests to the AWS services that are specified in the policy that's associated with the role. For more information, see [IAM Roles for Tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n You can specify a Docker networking mode for the containers in your task definition with the ``networkMode`` parameter. If you specify the ``awsvpc`` network mode, the task is allocated an elastic network interface, and you must specify a [NetworkConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_NetworkConfiguration.html) when you create a service or run a task with the task definition. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*.\n  In the following example or examples, the Authorization header contents (``AUTHPARAMS``) must be replaced with an AWS Signature Version 4 signature. For more information, see [Signature Version 4 Signing Process](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) in the *General Reference*.\n You only need to learn how to sign HTTP requests if you intend to create them manually. When you use the [](https://docs.aws.amazon.com/cli/) or one of the [SDKs](https://docs.aws.amazon.com/tools/) to make requests to AWS, these tools automatically sign the requests for you, with the access key that you specify when you configure the tools. When you use these tools, you don't have to sign requests yourself.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var taskdefinition = new AwsNative.Ecs.TaskDefinition(\"taskdefinition\", new()\n    {\n        RequiresCompatibilities = new[]\n        {\n            \"EC2\",\n        },\n        ContainerDefinitions = new[]\n        {\n            new AwsNative.Ecs.Inputs.TaskDefinitionContainerDefinitionArgs\n            {\n                Name = \"my-app\",\n                MountPoints = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionMountPointArgs\n                    {\n                        SourceVolume = \"my-vol\",\n                        ContainerPath = \"/var/www/my-vol\",\n                    },\n                },\n                Image = \"amazon/amazon-ecs-sample\",\n                Cpu = 256,\n                EntryPoint = new[]\n                {\n                    \"/usr/sbin/apache2\",\n                    \"-D\",\n                    \"FOREGROUND\",\n                },\n                Memory = 512,\n                Essential = true,\n            },\n            new AwsNative.Ecs.Inputs.TaskDefinitionContainerDefinitionArgs\n            {\n                Name = \"busybox\",\n                Image = \"busybox\",\n                Cpu = 256,\n                EntryPoint = new[]\n                {\n                    \"sh\",\n                    \"-c\",\n                },\n                Memory = 512,\n                Command = new[]\n                {\n                    \"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\",\n                },\n                Essential = false,\n                DependsOn = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionContainerDependencyArgs\n                    {\n                        ContainerName = \"my-app\",\n                        Condition = \"START\",\n                    },\n                },\n                VolumesFrom = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionVolumeFromArgs\n                    {\n                        SourceContainer = \"my-app\",\n                    },\n                },\n            },\n        },\n        Volumes = new[]\n        {\n            new AwsNative.Ecs.Inputs.TaskDefinitionVolumeArgs\n            {\n                Host = new AwsNative.Ecs.Inputs.TaskDefinitionHostVolumePropertiesArgs\n                {\n                    SourcePath = \"/var/lib/docker/vfs/dir/\",\n                },\n                Name = \"my-vol\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecs.NewTaskDefinition(ctx, \"taskdefinition\", \u0026ecs.TaskDefinitionArgs{\n\t\t\tRequiresCompatibilities: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"EC2\"),\n\t\t\t},\n\t\t\tContainerDefinitions: ecs.TaskDefinitionContainerDefinitionArray{\n\t\t\t\t\u0026ecs.TaskDefinitionContainerDefinitionArgs{\n\t\t\t\t\tName: pulumi.String(\"my-app\"),\n\t\t\t\t\tMountPoints: ecs.TaskDefinitionMountPointArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionMountPointArgs{\n\t\t\t\t\t\t\tSourceVolume:  pulumi.String(\"my-vol\"),\n\t\t\t\t\t\t\tContainerPath: pulumi.String(\"/var/www/my-vol\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tImage: pulumi.String(\"amazon/amazon-ecs-sample\"),\n\t\t\t\t\tCpu:   pulumi.Int(256),\n\t\t\t\t\tEntryPoint: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"/usr/sbin/apache2\"),\n\t\t\t\t\t\tpulumi.String(\"-D\"),\n\t\t\t\t\t\tpulumi.String(\"FOREGROUND\"),\n\t\t\t\t\t},\n\t\t\t\t\tMemory:    pulumi.Int(512),\n\t\t\t\t\tEssential: pulumi.Bool(true),\n\t\t\t\t},\n\t\t\t\t\u0026ecs.TaskDefinitionContainerDefinitionArgs{\n\t\t\t\t\tName:  pulumi.String(\"busybox\"),\n\t\t\t\t\tImage: pulumi.String(\"busybox\"),\n\t\t\t\t\tCpu:   pulumi.Int(256),\n\t\t\t\t\tEntryPoint: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"sh\"),\n\t\t\t\t\t\tpulumi.String(\"-c\"),\n\t\t\t\t\t},\n\t\t\t\t\tMemory: pulumi.Int(512),\n\t\t\t\t\tCommand: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\"),\n\t\t\t\t\t},\n\t\t\t\t\tEssential: pulumi.Bool(false),\n\t\t\t\t\tDependsOn: ecs.TaskDefinitionContainerDependencyArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionContainerDependencyArgs{\n\t\t\t\t\t\t\tContainerName: pulumi.String(\"my-app\"),\n\t\t\t\t\t\t\tCondition:     pulumi.String(\"START\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tVolumesFrom: ecs.TaskDefinitionVolumeFromArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionVolumeFromArgs{\n\t\t\t\t\t\t\tSourceContainer: pulumi.String(\"my-app\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tVolumes: ecs.TaskDefinitionVolumeArray{\n\t\t\t\t\u0026ecs.TaskDefinitionVolumeArgs{\n\t\t\t\t\tHost: \u0026ecs.TaskDefinitionHostVolumePropertiesArgs{\n\t\t\t\t\t\tSourcePath: pulumi.String(\"/var/lib/docker/vfs/dir/\"),\n\t\t\t\t\t},\n\t\t\t\t\tName: pulumi.String(\"my-vol\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst taskdefinition = new aws_native.ecs.TaskDefinition(\"taskdefinition\", {\n    requiresCompatibilities: [\"EC2\"],\n    containerDefinitions: [\n        {\n            name: \"my-app\",\n            mountPoints: [{\n                sourceVolume: \"my-vol\",\n                containerPath: \"/var/www/my-vol\",\n            }],\n            image: \"amazon/amazon-ecs-sample\",\n            cpu: 256,\n            entryPoint: [\n                \"/usr/sbin/apache2\",\n                \"-D\",\n                \"FOREGROUND\",\n            ],\n            memory: 512,\n            essential: true,\n        },\n        {\n            name: \"busybox\",\n            image: \"busybox\",\n            cpu: 256,\n            entryPoint: [\n                \"sh\",\n                \"-c\",\n            ],\n            memory: 512,\n            command: [\"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\"],\n            essential: false,\n            dependsOn: [{\n                containerName: \"my-app\",\n                condition: \"START\",\n            }],\n            volumesFrom: [{\n                sourceContainer: \"my-app\",\n            }],\n        },\n    ],\n    volumes: [{\n        host: {\n            sourcePath: \"/var/lib/docker/vfs/dir/\",\n        },\n        name: \"my-vol\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntaskdefinition = aws_native.ecs.TaskDefinition(\"taskdefinition\",\n    requires_compatibilities=[\"EC2\"],\n    container_definitions=[\n        {\n            \"name\": \"my-app\",\n            \"mount_points\": [{\n                \"source_volume\": \"my-vol\",\n                \"container_path\": \"/var/www/my-vol\",\n            }],\n            \"image\": \"amazon/amazon-ecs-sample\",\n            \"cpu\": 256,\n            \"entry_point\": [\n                \"/usr/sbin/apache2\",\n                \"-D\",\n                \"FOREGROUND\",\n            ],\n            \"memory\": 512,\n            \"essential\": True,\n        },\n        {\n            \"name\": \"busybox\",\n            \"image\": \"busybox\",\n            \"cpu\": 256,\n            \"entry_point\": [\n                \"sh\",\n                \"-c\",\n            ],\n            \"memory\": 512,\n            \"command\": [\"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\"],\n            \"essential\": False,\n            \"depends_on\": [{\n                \"container_name\": \"my-app\",\n                \"condition\": \"START\",\n            }],\n            \"volumes_from\": [{\n                \"source_container\": \"my-app\",\n            }],\n        },\n    ],\n    volumes=[{\n        \"host\": {\n            \"source_path\": \"/var/lib/docker/vfs/dir/\",\n        },\n        \"name\": \"my-vol\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var taskdefinition = new AwsNative.Ecs.TaskDefinition(\"taskdefinition\", new()\n    {\n        RequiresCompatibilities = new[]\n        {\n            \"EC2\",\n        },\n        ContainerDefinitions = new[]\n        {\n            new AwsNative.Ecs.Inputs.TaskDefinitionContainerDefinitionArgs\n            {\n                Name = \"my-app\",\n                MountPoints = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionMountPointArgs\n                    {\n                        SourceVolume = \"my-vol\",\n                        ContainerPath = \"/var/www/my-vol\",\n                    },\n                },\n                Image = \"amazon/amazon-ecs-sample\",\n                Cpu = 256,\n                EntryPoint = new[]\n                {\n                    \"/usr/sbin/apache2\",\n                    \"-D\",\n                    \"FOREGROUND\",\n                },\n                Memory = 512,\n                Essential = true,\n            },\n            new AwsNative.Ecs.Inputs.TaskDefinitionContainerDefinitionArgs\n            {\n                Name = \"busybox\",\n                Image = \"busybox\",\n                Cpu = 256,\n                EntryPoint = new[]\n                {\n                    \"sh\",\n                    \"-c\",\n                },\n                Memory = 512,\n                Command = new[]\n                {\n                    \"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\",\n                },\n                Essential = false,\n                DependsOn = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionContainerDependencyArgs\n                    {\n                        ContainerName = \"my-app\",\n                        Condition = \"START\",\n                    },\n                },\n                VolumesFrom = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionVolumeFromArgs\n                    {\n                        SourceContainer = \"my-app\",\n                    },\n                },\n            },\n        },\n        Volumes = new[]\n        {\n            new AwsNative.Ecs.Inputs.TaskDefinitionVolumeArgs\n            {\n                Host = new AwsNative.Ecs.Inputs.TaskDefinitionHostVolumePropertiesArgs\n                {\n                    SourcePath = \"/var/lib/docker/vfs/dir/\",\n                },\n                Name = \"my-vol\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ecs.NewTaskDefinition(ctx, \"taskdefinition\", \u0026ecs.TaskDefinitionArgs{\n\t\t\tRequiresCompatibilities: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"EC2\"),\n\t\t\t},\n\t\t\tContainerDefinitions: ecs.TaskDefinitionContainerDefinitionArray{\n\t\t\t\t\u0026ecs.TaskDefinitionContainerDefinitionArgs{\n\t\t\t\t\tName: pulumi.String(\"my-app\"),\n\t\t\t\t\tMountPoints: ecs.TaskDefinitionMountPointArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionMountPointArgs{\n\t\t\t\t\t\t\tSourceVolume:  pulumi.String(\"my-vol\"),\n\t\t\t\t\t\t\tContainerPath: pulumi.String(\"/var/www/my-vol\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tImage: pulumi.String(\"amazon/amazon-ecs-sample\"),\n\t\t\t\t\tCpu:   pulumi.Int(256),\n\t\t\t\t\tEntryPoint: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"/usr/sbin/apache2\"),\n\t\t\t\t\t\tpulumi.String(\"-D\"),\n\t\t\t\t\t\tpulumi.String(\"FOREGROUND\"),\n\t\t\t\t\t},\n\t\t\t\t\tMemory:    pulumi.Int(512),\n\t\t\t\t\tEssential: pulumi.Bool(true),\n\t\t\t\t},\n\t\t\t\t\u0026ecs.TaskDefinitionContainerDefinitionArgs{\n\t\t\t\t\tName:  pulumi.String(\"busybox\"),\n\t\t\t\t\tImage: pulumi.String(\"busybox\"),\n\t\t\t\t\tCpu:   pulumi.Int(256),\n\t\t\t\t\tEntryPoint: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"sh\"),\n\t\t\t\t\t\tpulumi.String(\"-c\"),\n\t\t\t\t\t},\n\t\t\t\t\tMemory: pulumi.Int(512),\n\t\t\t\t\tCommand: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\"),\n\t\t\t\t\t},\n\t\t\t\t\tEssential: pulumi.Bool(false),\n\t\t\t\t\tDependsOn: ecs.TaskDefinitionContainerDependencyArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionContainerDependencyArgs{\n\t\t\t\t\t\t\tContainerName: pulumi.String(\"my-app\"),\n\t\t\t\t\t\t\tCondition:     pulumi.String(\"START\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tVolumesFrom: ecs.TaskDefinitionVolumeFromArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionVolumeFromArgs{\n\t\t\t\t\t\t\tSourceContainer: pulumi.String(\"my-app\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tVolumes: ecs.TaskDefinitionVolumeArray{\n\t\t\t\t\u0026ecs.TaskDefinitionVolumeArgs{\n\t\t\t\t\tHost: \u0026ecs.TaskDefinitionHostVolumePropertiesArgs{\n\t\t\t\t\t\tSourcePath: pulumi.String(\"/var/lib/docker/vfs/dir/\"),\n\t\t\t\t\t},\n\t\t\t\t\tName: pulumi.String(\"my-vol\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst taskdefinition = new aws_native.ecs.TaskDefinition(\"taskdefinition\", {\n    requiresCompatibilities: [\"EC2\"],\n    containerDefinitions: [\n        {\n            name: \"my-app\",\n            mountPoints: [{\n                sourceVolume: \"my-vol\",\n                containerPath: \"/var/www/my-vol\",\n            }],\n            image: \"amazon/amazon-ecs-sample\",\n            cpu: 256,\n            entryPoint: [\n                \"/usr/sbin/apache2\",\n                \"-D\",\n                \"FOREGROUND\",\n            ],\n            memory: 512,\n            essential: true,\n        },\n        {\n            name: \"busybox\",\n            image: \"busybox\",\n            cpu: 256,\n            entryPoint: [\n                \"sh\",\n                \"-c\",\n            ],\n            memory: 512,\n            command: [\"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\"],\n            essential: false,\n            dependsOn: [{\n                containerName: \"my-app\",\n                condition: \"START\",\n            }],\n            volumesFrom: [{\n                sourceContainer: \"my-app\",\n            }],\n        },\n    ],\n    volumes: [{\n        host: {\n            sourcePath: \"/var/lib/docker/vfs/dir/\",\n        },\n        name: \"my-vol\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntaskdefinition = aws_native.ecs.TaskDefinition(\"taskdefinition\",\n    requires_compatibilities=[\"EC2\"],\n    container_definitions=[\n        {\n            \"name\": \"my-app\",\n            \"mount_points\": [{\n                \"source_volume\": \"my-vol\",\n                \"container_path\": \"/var/www/my-vol\",\n            }],\n            \"image\": \"amazon/amazon-ecs-sample\",\n            \"cpu\": 256,\n            \"entry_point\": [\n                \"/usr/sbin/apache2\",\n                \"-D\",\n                \"FOREGROUND\",\n            ],\n            \"memory\": 512,\n            \"essential\": True,\n        },\n        {\n            \"name\": \"busybox\",\n            \"image\": \"busybox\",\n            \"cpu\": 256,\n            \"entry_point\": [\n                \"sh\",\n                \"-c\",\n            ],\n            \"memory\": 512,\n            \"command\": [\"/bin/sh -c \\\"while true; do /bin/date \u003e /var/www/my-vol/date; sleep 1; done\\\"\"],\n            \"essential\": False,\n            \"depends_on\": [{\n                \"container_name\": \"my-app\",\n                \"condition\": \"START\",\n            }],\n            \"volumes_from\": [{\n                \"source_container\": \"my-app\",\n            }],\n        },\n    ],\n    volumes=[{\n        \"host\": {\n            \"source_path\": \"/var/lib/docker/vfs/dir/\",\n        },\n        \"name\": \"my-vol\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var ecsTaskDefinitionResource = new AwsNative.Ecs.TaskDefinition(\"ecsTaskDefinitionResource\", new()\n    {\n        ContainerDefinitions = new[]\n        {\n            new AwsNative.Ecs.Inputs.TaskDefinitionContainerDefinitionArgs\n            {\n                Name = \"first-run-task\",\n                Image = \"httpd:2.4\",\n                Essential = true,\n                PortMappings = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionPortMappingArgs\n                    {\n                        ContainerPort = 80,\n                        Protocol = \"tcp\",\n                    },\n                },\n                Environment = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionKeyValuePairArgs\n                    {\n                        Name = \"entryPoint\",\n                        Value = \"sh, -c\",\n                    },\n                    new AwsNative.Ecs.Inputs.TaskDefinitionKeyValuePairArgs\n                    {\n                        Name = \"command\",\n                        Value = \"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\",\n                    },\n                },\n                EnvironmentFiles = new() { },\n            },\n        },\n        Family = \"first-run-task\",\n        Cpu = \"1 vCPU\",\n        Memory = \"3 GB\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"ecsTaskDefinition\"] = ecsTaskDefinitionResource.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tecsTaskDefinitionResource, err := ecs.NewTaskDefinition(ctx, \"ecsTaskDefinitionResource\", \u0026ecs.TaskDefinitionArgs{\n\t\t\tContainerDefinitions: ecs.TaskDefinitionContainerDefinitionArray{\n\t\t\t\t\u0026ecs.TaskDefinitionContainerDefinitionArgs{\n\t\t\t\t\tName:      pulumi.String(\"first-run-task\"),\n\t\t\t\t\tImage:     pulumi.String(\"httpd:2.4\"),\n\t\t\t\t\tEssential: pulumi.Bool(true),\n\t\t\t\t\tPortMappings: ecs.TaskDefinitionPortMappingArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionPortMappingArgs{\n\t\t\t\t\t\t\tContainerPort: pulumi.Int(80),\n\t\t\t\t\t\t\tProtocol:      pulumi.String(\"tcp\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tEnvironment: ecs.TaskDefinitionKeyValuePairArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionKeyValuePairArgs{\n\t\t\t\t\t\t\tName:  pulumi.String(\"entryPoint\"),\n\t\t\t\t\t\t\tValue: pulumi.String(\"sh, -c\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionKeyValuePairArgs{\n\t\t\t\t\t\t\tName:  pulumi.String(\"command\"),\n\t\t\t\t\t\t\tValue: pulumi.String(\"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tEnvironmentFiles: ecs.TaskDefinitionEnvironmentFileArray{},\n\t\t\t\t},\n\t\t\t},\n\t\t\tFamily: pulumi.String(\"first-run-task\"),\n\t\t\tCpu:    pulumi.String(\"1 vCPU\"),\n\t\t\tMemory: pulumi.String(\"3 GB\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"ecsTaskDefinition\", ecsTaskDefinitionResource.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst ecsTaskDefinitionResource = new aws_native.ecs.TaskDefinition(\"ecsTaskDefinitionResource\", {\n    containerDefinitions: [{\n        name: \"first-run-task\",\n        image: \"httpd:2.4\",\n        essential: true,\n        portMappings: [{\n            containerPort: 80,\n            protocol: \"tcp\",\n        }],\n        environment: [\n            {\n                name: \"entryPoint\",\n                value: \"sh, -c\",\n            },\n            {\n                name: \"command\",\n                value: \"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\",\n            },\n        ],\n        environmentFiles: [],\n    }],\n    family: \"first-run-task\",\n    cpu: \"1 vCPU\",\n    memory: \"3 GB\",\n});\nexport const ecsTaskDefinition = ecsTaskDefinitionResource.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\necs_task_definition_resource = aws_native.ecs.TaskDefinition(\"ecsTaskDefinitionResource\",\n    container_definitions=[{\n        \"name\": \"first-run-task\",\n        \"image\": \"httpd:2.4\",\n        \"essential\": True,\n        \"port_mappings\": [{\n            \"container_port\": 80,\n            \"protocol\": \"tcp\",\n        }],\n        \"environment\": [\n            {\n                \"name\": \"entryPoint\",\n                \"value\": \"sh, -c\",\n            },\n            {\n                \"name\": \"command\",\n                \"value\": \"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\",\n            },\n        ],\n        \"environment_files\": [],\n    }],\n    family=\"first-run-task\",\n    cpu=\"1 vCPU\",\n    memory=\"3 GB\")\npulumi.export(\"ecsTaskDefinition\", ecs_task_definition_resource.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var ecsTaskDefinitionResource = new AwsNative.Ecs.TaskDefinition(\"ecsTaskDefinitionResource\", new()\n    {\n        ContainerDefinitions = new[]\n        {\n            new AwsNative.Ecs.Inputs.TaskDefinitionContainerDefinitionArgs\n            {\n                Name = \"first-run-task\",\n                Image = \"httpd:2.4\",\n                Essential = true,\n                PortMappings = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionPortMappingArgs\n                    {\n                        ContainerPort = 80,\n                        Protocol = \"tcp\",\n                    },\n                },\n                Environment = new[]\n                {\n                    new AwsNative.Ecs.Inputs.TaskDefinitionKeyValuePairArgs\n                    {\n                        Name = \"entryPoint\",\n                        Value = \"sh, -c\",\n                    },\n                    new AwsNative.Ecs.Inputs.TaskDefinitionKeyValuePairArgs\n                    {\n                        Name = \"command\",\n                        Value = \"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\",\n                    },\n                },\n                EnvironmentFiles = new() { },\n            },\n        },\n        Family = \"first-run-task\",\n        Cpu = \"1 vCPU\",\n        Memory = \"3 GB\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"ecsTaskDefinition\"] = ecsTaskDefinitionResource.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ecs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tecsTaskDefinitionResource, err := ecs.NewTaskDefinition(ctx, \"ecsTaskDefinitionResource\", \u0026ecs.TaskDefinitionArgs{\n\t\t\tContainerDefinitions: ecs.TaskDefinitionContainerDefinitionArray{\n\t\t\t\t\u0026ecs.TaskDefinitionContainerDefinitionArgs{\n\t\t\t\t\tName:      pulumi.String(\"first-run-task\"),\n\t\t\t\t\tImage:     pulumi.String(\"httpd:2.4\"),\n\t\t\t\t\tEssential: pulumi.Bool(true),\n\t\t\t\t\tPortMappings: ecs.TaskDefinitionPortMappingArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionPortMappingArgs{\n\t\t\t\t\t\t\tContainerPort: pulumi.Int(80),\n\t\t\t\t\t\t\tProtocol:      pulumi.String(\"tcp\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tEnvironment: ecs.TaskDefinitionKeyValuePairArray{\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionKeyValuePairArgs{\n\t\t\t\t\t\t\tName:  pulumi.String(\"entryPoint\"),\n\t\t\t\t\t\t\tValue: pulumi.String(\"sh, -c\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026ecs.TaskDefinitionKeyValuePairArgs{\n\t\t\t\t\t\t\tName:  pulumi.String(\"command\"),\n\t\t\t\t\t\t\tValue: pulumi.String(\"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tEnvironmentFiles: ecs.TaskDefinitionEnvironmentFileArray{},\n\t\t\t\t},\n\t\t\t},\n\t\t\tFamily: pulumi.String(\"first-run-task\"),\n\t\t\tCpu:    pulumi.String(\"1 vCPU\"),\n\t\t\tMemory: pulumi.String(\"3 GB\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"ecsTaskDefinition\", ecsTaskDefinitionResource.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst ecsTaskDefinitionResource = new aws_native.ecs.TaskDefinition(\"ecsTaskDefinitionResource\", {\n    containerDefinitions: [{\n        name: \"first-run-task\",\n        image: \"httpd:2.4\",\n        essential: true,\n        portMappings: [{\n            containerPort: 80,\n            protocol: \"tcp\",\n        }],\n        environment: [\n            {\n                name: \"entryPoint\",\n                value: \"sh, -c\",\n            },\n            {\n                name: \"command\",\n                value: \"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\",\n            },\n        ],\n        environmentFiles: [],\n    }],\n    family: \"first-run-task\",\n    cpu: \"1 vCPU\",\n    memory: \"3 GB\",\n});\nexport const ecsTaskDefinition = ecsTaskDefinitionResource.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\necs_task_definition_resource = aws_native.ecs.TaskDefinition(\"ecsTaskDefinitionResource\",\n    container_definitions=[{\n        \"name\": \"first-run-task\",\n        \"image\": \"httpd:2.4\",\n        \"essential\": True,\n        \"port_mappings\": [{\n            \"container_port\": 80,\n            \"protocol\": \"tcp\",\n        }],\n        \"environment\": [\n            {\n                \"name\": \"entryPoint\",\n                \"value\": \"sh, -c\",\n            },\n            {\n                \"name\": \"command\",\n                \"value\": \"/bin/sh -c \\\\\\\"echo '\u003chtml\u003e \u003chead\u003e \u003ctitle\u003eAmazon ECS Sample App\u003c/title\u003e \u003cstyle\u003ebody {margin-top: 40px; background-color: #333;} \u003c/style\u003e \u003c/head\u003e\u003cbody\u003e \u003cdiv style=color:white;text-align:center\u003e \u003ch1\u003eAmazon ECS Sample App\u003c/h1\u003e \u003ch2\u003eCongratulations!\u003c/h2\u003e \u003cp\u003eYour application is now running on a container in Amazon ECS.\u003c/p\u003e \u003c/div\u003e\u003c/body\u003e\u003c/html\u003e' \u003e  /usr/local/apache2/htdocs/index.html \u0026\u0026 httpd-foreground\\\\\\\"\",\n            },\n        ],\n        \"environment_files\": [],\n    }],\n    family=\"first-run-task\",\n    cpu=\"1 vCPU\",\n    memory=\"3 GB\")\npulumi.export(\"ecsTaskDefinition\", ecs_task_definition_resource.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"containerDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionContainerDefinition"},"description":"A list of container definitions in JSON format that describe the different containers that make up your task. For more information about container definition parameters and defaults, see [Amazon ECS Task Definitions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_defintions.html) in the *Amazon Elastic Container Service Developer Guide*.","replaceOnChanges":true},"cpu":{"type":"string","description":"The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you're using the EC2 launch type or the external launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``196608`` CPU units (``192`` vCPUs). \n This field is required for Fargate. For information about the valid values, see [Task size](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size) in the *Amazon Elastic Container Service Developer Guide*.","replaceOnChanges":true},"enableFaultInjection":{"type":"boolean","description":"Enables fault injection and allows for fault injection requests to be accepted from the task's containers. The default value is ``false``.","replaceOnChanges":true},"ephemeralStorage":{"$ref":"#/types/aws-native:ecs:TaskDefinitionEphemeralStorage","description":"The ephemeral storage settings to use for tasks run with the task definition.","replaceOnChanges":true},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the task execution role that grants the Amazon ECS container agent permission to make AWS API calls on your behalf. For informationabout the required IAM roles for Amazon ECS, see [IAM roles for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-ecs-iam-role-overview.html) in the *Amazon Elastic Container Service Developer Guide*.","replaceOnChanges":true},"family":{"type":"string","description":"The name of a family that this task definition is registered to. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed.\n A family groups multiple versions of a task definition. Amazon ECS gives the first task definition that you registered to a family a revision number of 1. Amazon ECS gives sequential revision numbers to each task definition that you add.\n  To use revision numbers when you update a task definition, specify this property. If you don't specify a value, CFNlong generates a new task definition each time that you update it.","replaceOnChanges":true},"inferenceAccelerators":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionInferenceAccelerator"},"replaceOnChanges":true},"ipcMode":{"type":"string","description":"The IPC resource namespace to use for the containers in the task. The valid values are ``host``, ``task``, or ``none``. If ``host`` is specified, then all containers within the tasks that specified the ``host`` IPC mode on the same container instance share the same IPC resources with the host Amazon EC2 instance. If ``task`` is specified, all containers within the specified task share the same IPC resources. If ``none`` is specified, then IPC resources within the containers of a task are private and not shared with other containers in a task or on the container instance. If no value is specified, then the IPC resource namespace sharing depends on the Docker daemon setting on the container instance.\n If the ``host`` IPC mode is used, be aware that there is a heightened risk of undesired IPC namespace expose.\n If you are setting namespaced kernel parameters using ``systemControls`` for the containers in the task, the following will apply to your IPC resource namespace. For more information, see [System Controls](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html) in the *Amazon Elastic Container Service Developer Guide*.\n  +  For tasks that use the ``host`` IPC mode, IPC namespace related ``systemControls`` are not supported.\n  +  For tasks that use the ``task`` IPC mode, IPC namespace related ``systemControls`` will apply to all containers within a task.\n  \n  This parameter is not supported for Windows containers or tasks run on FARGATElong.","replaceOnChanges":true},"memory":{"type":"string","description":"The amount (in MiB) of memory used by the task.\n If your tasks runs on Amazon EC2 instances, you must specify either a task-level memory value or a container-level memory value. This field is optional and any value can be used. If a task-level memory value is specified, the container-level memory value is optional. For more information regarding container-level memory and memory reservation, see [ContainerDefinition](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ContainerDefinition.html).\n If your tasks runs on FARGATElong, this field is required. You must use one of the following values. The value you choose determines your range of valid values for the ``cpu`` parameter.\n  +  512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) - Available ``cpu`` values: 256 (.25 vCPU)\n  +  1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) - Available ``cpu`` values: 512 (.5 vCPU)\n  +  2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) - Available ``cpu`` values: 1024 (1 vCPU)\n  +  Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) - Available ``cpu`` values: 2048 (2 vCPU)\n  +  Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) - Available ``cpu`` values: 4096 (4 vCPU)\n  +  Between 16 GB and 60 GB in 4 GB increments - Available ``cpu`` values: 8192 (8 vCPU)\n This option requires Linux platform ``1.4.0`` or later.\n  +  Between 32GB and 120 GB in 8 GB increments - Available ``cpu`` values: 16384 (16 vCPU)\n This option requires Linux platform ``1.4.0`` or later.","replaceOnChanges":true},"networkMode":{"type":"string","description":"The Docker networking mode to use for the containers in the task. The valid values are ``none``, ``bridge``, ``awsvpc``, and ``host``. If no network mode is specified, the default is ``bridge``.\n For Amazon ECS tasks on Fargate, the ``awsvpc`` network mode is required. For Amazon ECS tasks on Amazon EC2 Linux instances, any network mode can be used. For Amazon ECS tasks on Amazon EC2 Windows instances, ``\u003cdefault\u003e`` or ``awsvpc`` can be used. If the network mode is set to ``none``, you cannot specify port mappings in your container definitions, and the tasks containers do not have external connectivity. The ``host`` and ``awsvpc`` network modes offer the highest networking performance for containers because they use the EC2 network stack instead of the virtualized network stack provided by the ``bridge`` mode.\n With the ``host`` and ``awsvpc`` network modes, exposed container ports are mapped directly to the corresponding host port (for the ``host`` network mode) or the attached elastic network interface port (for the ``awsvpc`` network mode), so you cannot take advantage of dynamic host port mappings. \n  When using the ``host`` network mode, you should not run containers using the root user (UID 0). It is considered best practice to use a non-root user.\n  If the network mode is ``awsvpc``, the task is allocated an elastic network interface, and you must specify a [NetworkConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_NetworkConfiguration.html) value when you create a service or run a task with the task definition. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*.\n If the network mode is ``host``, you cannot run multiple instantiations of the same task on a single container instance when port mappings are used.","replaceOnChanges":true},"pidMode":{"type":"string","description":"The process namespace to use for the containers in the task. The valid values are ``host`` or ``task``. On Fargate for Linux containers, the only valid value is ``task``. For example, monitoring sidecars might need ``pidMode`` to access information about other containers running in the same task.\n If ``host`` is specified, all containers within the tasks that specified the ``host`` PID mode on the same container instance share the same process namespace with the host Amazon EC2 instance.\n If ``task`` is specified, all containers within the specified task share the same process namespace.\n If no value is specified, the The default is a private namespace for each container.\n If the ``host`` PID mode is used, there's a heightened risk of undesired process namespace exposure.\n  This parameter is not supported for Windows containers.\n   This parameter is only supported for tasks that are hosted on FARGATElong if the tasks are using platform version ``1.4.0`` or later (Linux). This isn't supported for Windows containers on Fargate.","replaceOnChanges":true},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionPlacementConstraint"},"description":"An array of placement constraint objects to use for tasks.\n  This parameter isn't supported for tasks run on FARGATElong.","replaceOnChanges":true},"proxyConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionProxyConfiguration","description":"The configuration details for the App Mesh proxy.\n Your Amazon ECS container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ``ecs-init`` package to use a proxy configuration. If your container instances are launched from the Amazon ECS optimized AMI version ``20190301`` or later, they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) in the *Amazon Elastic Container Service Developer Guide*.","replaceOnChanges":true},"requiresCompatibilities":{"type":"array","items":{"type":"string"},"description":"The task launch types the task definition was validated against. The valid values are ``MANAGED_INSTANCES``, ``EC2``, ``FARGATE``, and ``EXTERNAL``. For more information, see [Amazon ECS launch types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html) in the *Amazon Elastic Container Service Developer Guide*.","replaceOnChanges":true},"runtimePlatform":{"$ref":"#/types/aws-native:ecs:TaskDefinitionRuntimePlatform","description":"The operating system that your tasks definitions run on.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the task definition to help you categorize and organize them. Each tag consists of a key and an optional value. You define both of them.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."},"taskDefinitionArn":{"type":"string","description":"The ARN of the task definition."},"taskRoleArn":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the IAMlong role that grants containers in the task permission to call AWS APIs on your behalf. For more information, see [Amazon ECS Task Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n IAM roles for tasks on Windows require that the ``-EnableTaskIAMRole`` option is set when you launch the Amazon ECS-optimized Windows AMI. Your containers must also run some configuration code to use the feature. For more information, see [Windows IAM roles for tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows_task_IAM_roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n  String validation is done on the ECS side. If an invalid string value is given for ``TaskRoleArn``, it may cause the Cloudformation job to hang.","replaceOnChanges":true},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionVolume"},"description":"The list of data volume definitions for the task. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html) in the *Amazon Elastic Container Service Developer Guide*.\n  The ``host`` and ``sourcePath`` parameters aren't supported for tasks run on FARGATElong.","replaceOnChanges":true}},"type":"object","required":["taskDefinitionArn"],"inputProperties":{"containerDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionContainerDefinition"},"description":"A list of container definitions in JSON format that describe the different containers that make up your task. For more information about container definition parameters and defaults, see [Amazon ECS Task Definitions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_defintions.html) in the *Amazon Elastic Container Service Developer Guide*."},"cpu":{"type":"string","description":"The number of ``cpu`` units used by the task. If you use the EC2 launch type, this field is optional. Any value can be used. If you use the Fargate launch type, this field is required. You must use one of the following values. The value that you choose determines your range of valid values for the ``memory`` parameter.\n If you're using the EC2 launch type or the external launch type, this field is optional. Supported values are between ``128`` CPU units (``0.125`` vCPUs) and ``196608`` CPU units (``192`` vCPUs). \n This field is required for Fargate. For information about the valid values, see [Task size](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size) in the *Amazon Elastic Container Service Developer Guide*."},"enableFaultInjection":{"type":"boolean","description":"Enables fault injection and allows for fault injection requests to be accepted from the task's containers. The default value is ``false``."},"ephemeralStorage":{"$ref":"#/types/aws-native:ecs:TaskDefinitionEphemeralStorage","description":"The ephemeral storage settings to use for tasks run with the task definition."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the task execution role that grants the Amazon ECS container agent permission to make AWS API calls on your behalf. For informationabout the required IAM roles for Amazon ECS, see [IAM roles for Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/security-ecs-iam-role-overview.html) in the *Amazon Elastic Container Service Developer Guide*."},"family":{"type":"string","description":"The name of a family that this task definition is registered to. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed.\n A family groups multiple versions of a task definition. Amazon ECS gives the first task definition that you registered to a family a revision number of 1. Amazon ECS gives sequential revision numbers to each task definition that you add.\n  To use revision numbers when you update a task definition, specify this property. If you don't specify a value, CFNlong generates a new task definition each time that you update it."},"inferenceAccelerators":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionInferenceAccelerator"}},"ipcMode":{"type":"string","description":"The IPC resource namespace to use for the containers in the task. The valid values are ``host``, ``task``, or ``none``. If ``host`` is specified, then all containers within the tasks that specified the ``host`` IPC mode on the same container instance share the same IPC resources with the host Amazon EC2 instance. If ``task`` is specified, all containers within the specified task share the same IPC resources. If ``none`` is specified, then IPC resources within the containers of a task are private and not shared with other containers in a task or on the container instance. If no value is specified, then the IPC resource namespace sharing depends on the Docker daemon setting on the container instance.\n If the ``host`` IPC mode is used, be aware that there is a heightened risk of undesired IPC namespace expose.\n If you are setting namespaced kernel parameters using ``systemControls`` for the containers in the task, the following will apply to your IPC resource namespace. For more information, see [System Controls](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html) in the *Amazon Elastic Container Service Developer Guide*.\n  +  For tasks that use the ``host`` IPC mode, IPC namespace related ``systemControls`` are not supported.\n  +  For tasks that use the ``task`` IPC mode, IPC namespace related ``systemControls`` will apply to all containers within a task.\n  \n  This parameter is not supported for Windows containers or tasks run on FARGATElong."},"memory":{"type":"string","description":"The amount (in MiB) of memory used by the task.\n If your tasks runs on Amazon EC2 instances, you must specify either a task-level memory value or a container-level memory value. This field is optional and any value can be used. If a task-level memory value is specified, the container-level memory value is optional. For more information regarding container-level memory and memory reservation, see [ContainerDefinition](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_ContainerDefinition.html).\n If your tasks runs on FARGATElong, this field is required. You must use one of the following values. The value you choose determines your range of valid values for the ``cpu`` parameter.\n  +  512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) - Available ``cpu`` values: 256 (.25 vCPU)\n  +  1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) - Available ``cpu`` values: 512 (.5 vCPU)\n  +  2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) - Available ``cpu`` values: 1024 (1 vCPU)\n  +  Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) - Available ``cpu`` values: 2048 (2 vCPU)\n  +  Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) - Available ``cpu`` values: 4096 (4 vCPU)\n  +  Between 16 GB and 60 GB in 4 GB increments - Available ``cpu`` values: 8192 (8 vCPU)\n This option requires Linux platform ``1.4.0`` or later.\n  +  Between 32GB and 120 GB in 8 GB increments - Available ``cpu`` values: 16384 (16 vCPU)\n This option requires Linux platform ``1.4.0`` or later."},"networkMode":{"type":"string","description":"The Docker networking mode to use for the containers in the task. The valid values are ``none``, ``bridge``, ``awsvpc``, and ``host``. If no network mode is specified, the default is ``bridge``.\n For Amazon ECS tasks on Fargate, the ``awsvpc`` network mode is required. For Amazon ECS tasks on Amazon EC2 Linux instances, any network mode can be used. For Amazon ECS tasks on Amazon EC2 Windows instances, ``\u003cdefault\u003e`` or ``awsvpc`` can be used. If the network mode is set to ``none``, you cannot specify port mappings in your container definitions, and the tasks containers do not have external connectivity. The ``host`` and ``awsvpc`` network modes offer the highest networking performance for containers because they use the EC2 network stack instead of the virtualized network stack provided by the ``bridge`` mode.\n With the ``host`` and ``awsvpc`` network modes, exposed container ports are mapped directly to the corresponding host port (for the ``host`` network mode) or the attached elastic network interface port (for the ``awsvpc`` network mode), so you cannot take advantage of dynamic host port mappings. \n  When using the ``host`` network mode, you should not run containers using the root user (UID 0). It is considered best practice to use a non-root user.\n  If the network mode is ``awsvpc``, the task is allocated an elastic network interface, and you must specify a [NetworkConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_NetworkConfiguration.html) value when you create a service or run a task with the task definition. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*.\n If the network mode is ``host``, you cannot run multiple instantiations of the same task on a single container instance when port mappings are used."},"pidMode":{"type":"string","description":"The process namespace to use for the containers in the task. The valid values are ``host`` or ``task``. On Fargate for Linux containers, the only valid value is ``task``. For example, monitoring sidecars might need ``pidMode`` to access information about other containers running in the same task.\n If ``host`` is specified, all containers within the tasks that specified the ``host`` PID mode on the same container instance share the same process namespace with the host Amazon EC2 instance.\n If ``task`` is specified, all containers within the specified task share the same process namespace.\n If no value is specified, the The default is a private namespace for each container.\n If the ``host`` PID mode is used, there's a heightened risk of undesired process namespace exposure.\n  This parameter is not supported for Windows containers.\n   This parameter is only supported for tasks that are hosted on FARGATElong if the tasks are using platform version ``1.4.0`` or later (Linux). This isn't supported for Windows containers on Fargate."},"placementConstraints":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionPlacementConstraint"},"description":"An array of placement constraint objects to use for tasks.\n  This parameter isn't supported for tasks run on FARGATElong."},"proxyConfiguration":{"$ref":"#/types/aws-native:ecs:TaskDefinitionProxyConfiguration","description":"The configuration details for the App Mesh proxy.\n Your Amazon ECS container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ``ecs-init`` package to use a proxy configuration. If your container instances are launched from the Amazon ECS optimized AMI version ``20190301`` or later, they contain the required versions of the container agent and ``ecs-init``. For more information, see [Amazon ECS-optimized Linux AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html) in the *Amazon Elastic Container Service Developer Guide*."},"requiresCompatibilities":{"type":"array","items":{"type":"string"},"description":"The task launch types the task definition was validated against. The valid values are ``MANAGED_INSTANCES``, ``EC2``, ``FARGATE``, and ``EXTERNAL``. For more information, see [Amazon ECS launch types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html) in the *Amazon Elastic Container Service Developer Guide*."},"runtimePlatform":{"$ref":"#/types/aws-native:ecs:TaskDefinitionRuntimePlatform","description":"The operating system that your tasks definitions run on."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the task definition to help you categorize and organize them. Each tag consists of a key and an optional value. You define both of them.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."},"taskRoleArn":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the IAMlong role that grants containers in the task permission to call AWS APIs on your behalf. For more information, see [Amazon ECS Task Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n IAM roles for tasks on Windows require that the ``-EnableTaskIAMRole`` option is set when you launch the Amazon ECS-optimized Windows AMI. Your containers must also run some configuration code to use the feature. For more information, see [Windows IAM roles for tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/windows_task_IAM_roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n  String validation is done on the ECS side. If an invalid string value is given for ``TaskRoleArn``, it may cause the Cloudformation job to hang."},"volumes":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskDefinitionVolume"},"description":"The list of data volume definitions for the task. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html) in the *Amazon Elastic Container Service Developer Guide*.\n  The ``host`` and ``sourcePath`` parameters aren't supported for tasks run on FARGATElong."}}},"aws-native:ecs:TaskSet":{"description":"Create a task set in the specified cluster and service. This is used when a service uses the EXTERNAL deployment controller type. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.htmlin the Amazon Elastic Container Service Developer Guide.","properties":{"awsId":{"type":"string","description":"The ID of the task set."},"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskSetCapacityProviderStrategyItem"},"description":"The capacity provider strategy that are associated with the task set.","replaceOnChanges":true},"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that hosts the service to create the task set in.","replaceOnChanges":true},"externalId":{"type":"string","description":"An optional non-unique tag that identifies this task set in external systems. If the task set is associated with a service discovery registry, the tasks in this task set will have the ECS_TASK_SET_EXTERNAL_ID AWS Cloud Map attribute set to the provided value. ","replaceOnChanges":true},"launchType":{"$ref":"#/types/aws-native:ecs:TaskSetLaunchType","description":"The launch type that new tasks in the task set will use. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html in the Amazon Elastic Container Service Developer Guide. ","replaceOnChanges":true},"loadBalancers":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskSetLoadBalancer"},"description":"A load balancer object representing the load balancer to use with the task set. The supported load balancer types are either an Application Load Balancer or a Network Load Balancer.","replaceOnChanges":true},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:TaskSetNetworkConfiguration","description":"The network configuration for the task set.","replaceOnChanges":true},"platformVersion":{"type":"string","description":"The platform version that the tasks in the task set should use. A platform version is specified only for tasks using the Fargate launch type. If one isn't specified, the LATEST platform version is used by default.","replaceOnChanges":true},"scale":{"$ref":"#/types/aws-native:ecs:TaskSetScale","description":"A floating-point percentage of the desired number of tasks to place and keep running in the task set."},"service":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the service to create the task set in.","replaceOnChanges":true},"serviceRegistries":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskSetServiceRegistry"},"description":"The details of the service discovery registries to assign to this task set. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the task set to help you categorize and organize them. Each tag consists of a key and an optional value. You define both.\n\nThe following basic restrictions apply to tags:\n\n- Maximum number of tags per resource - 50\n- For each resource, each tag key must be unique, and each tag key can have only one value.\n- Maximum key length - 128 Unicode characters in UTF-8\n- Maximum value length - 256 Unicode characters in UTF-8\n- If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n- Tag keys and values are case-sensitive.\n- Do not use `aws:` , `AWS:` , or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."},"taskDefinition":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the task definition for the tasks in the task set to use.","replaceOnChanges":true}},"type":"object","required":["awsId","cluster","service","taskDefinition"],"inputProperties":{"capacityProviderStrategy":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskSetCapacityProviderStrategyItem"},"description":"The capacity provider strategy that are associated with the task set."},"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that hosts the service to create the task set in."},"externalId":{"type":"string","description":"An optional non-unique tag that identifies this task set in external systems. If the task set is associated with a service discovery registry, the tasks in this task set will have the ECS_TASK_SET_EXTERNAL_ID AWS Cloud Map attribute set to the provided value. "},"launchType":{"$ref":"#/types/aws-native:ecs:TaskSetLaunchType","description":"The launch type that new tasks in the task set will use. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html in the Amazon Elastic Container Service Developer Guide. "},"loadBalancers":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskSetLoadBalancer"},"description":"A load balancer object representing the load balancer to use with the task set. The supported load balancer types are either an Application Load Balancer or a Network Load Balancer."},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:TaskSetNetworkConfiguration","description":"The network configuration for the task set."},"platformVersion":{"type":"string","description":"The platform version that the tasks in the task set should use. A platform version is specified only for tasks using the Fargate launch type. If one isn't specified, the LATEST platform version is used by default."},"scale":{"$ref":"#/types/aws-native:ecs:TaskSetScale","description":"A floating-point percentage of the desired number of tasks to place and keep running in the task set."},"service":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the service to create the task set in."},"serviceRegistries":{"type":"array","items":{"$ref":"#/types/aws-native:ecs:TaskSetServiceRegistry"},"description":"The details of the service discovery registries to assign to this task set. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The metadata that you apply to the task set to help you categorize and organize them. Each tag consists of a key and an optional value. You define both.\n\nThe following basic restrictions apply to tags:\n\n- Maximum number of tags per resource - 50\n- For each resource, each tag key must be unique, and each tag key can have only one value.\n- Maximum key length - 128 Unicode characters in UTF-8\n- Maximum value length - 256 Unicode characters in UTF-8\n- If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n- Tag keys and values are case-sensitive.\n- Do not use `aws:` , `AWS:` , or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit."},"taskDefinition":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the task definition for the tasks in the task set to use."}},"requiredInputs":["cluster","service","taskDefinition"]},"aws-native:efs:AccessPoint":{"description":"The ``AWS::EFS::AccessPoint`` resource creates an EFS access point. An access point is an application-specific view into an EFS file system that applies an operating system user and group, and a file system path, to any file system request made through the access point. The operating system user and group override any identity information provided by the NFS client. The file system path is exposed as the access point's root directory. Applications using the access point can only access data in its own directory and below. To learn more, see [Mounting a file system using EFS access points](https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html).\n This operation requires permissions for the ``elasticfilesystem:CreateAccessPoint`` action.","properties":{"accessPointId":{"type":"string","description":"The ID of the EFS access point."},"accessPointTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the access point."},"clientToken":{"type":"string","description":"The opaque string specified in the request to ensure idempotent creation.","replaceOnChanges":true},"fileSystemId":{"type":"string","description":"The ID of the EFS file system that the access point applies to. Accepts only the ID format for input when specifying a file system, for example ``fs-0123456789abcedf2``.","replaceOnChanges":true},"posixUser":{"$ref":"#/types/aws-native:efs:AccessPointPosixUser","description":"The full POSIX identity, including the user ID, group ID, and secondary group IDs on the access point that is used for all file operations by NFS clients using the access point.","replaceOnChanges":true},"rootDirectory":{"$ref":"#/types/aws-native:efs:AccessPointRootDirectory","description":"The directory on the EFS file system that the access point exposes as the root directory to NFS clients using the access point.","replaceOnChanges":true}},"type":"object","required":["accessPointId","arn","fileSystemId"],"inputProperties":{"accessPointTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."},"clientToken":{"type":"string","description":"The opaque string specified in the request to ensure idempotent creation."},"fileSystemId":{"type":"string","description":"The ID of the EFS file system that the access point applies to. Accepts only the ID format for input when specifying a file system, for example ``fs-0123456789abcedf2``."},"posixUser":{"$ref":"#/types/aws-native:efs:AccessPointPosixUser","description":"The full POSIX identity, including the user ID, group ID, and secondary group IDs on the access point that is used for all file operations by NFS clients using the access point."},"rootDirectory":{"$ref":"#/types/aws-native:efs:AccessPointRootDirectory","description":"The directory on the EFS file system that the access point exposes as the root directory to NFS clients using the access point."}},"requiredInputs":["fileSystemId"]},"aws-native:efs:FileSystem":{"description":"The ``AWS::EFS::FileSystem`` resource creates a new, empty file system in EFSlong (EFS). You must create a mount target ([AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html)) to mount your EFS file system on an EC2 or other AWS cloud compute resource.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the EFS file system.\n\nExample: `arn:aws:elasticfilesystem:us-west-2:1111333322228888:file-system/fs-0123456789abcdef8`"},"availabilityZoneName":{"type":"string","description":"For One Zone file systems, specify the AWS Availability Zone in which to create the file system. Use the format ``us-east-1a`` to specify the Availability Zone. For more information about One Zone file systems, see [EFS file system types](https://docs.aws.amazon.com/efs/latest/ug/availability-durability.html#file-system-type) in the *Amazon EFS User Guide*.\n  One Zone file systems are not available in all Availability Zones in AWS-Regions where Amazon EFS is available.","replaceOnChanges":true},"backupPolicy":{"$ref":"#/types/aws-native:efs:FileSystemBackupPolicy","description":"Use the ``BackupPolicy`` to turn automatic backups on or off for the file system."},"bypassPolicyLockoutSafetyCheck":{"type":"boolean","description":"(Optional) A boolean that specifies whether or not to bypass the ``FileSystemPolicy`` lockout safety check. The lockout safety check determines whether the policy in the request will lock out, or prevent, the IAM principal that is making the request from making future ``PutFileSystemPolicy`` requests on this file system. Set ``BypassPolicyLockoutSafetyCheck`` to ``True`` only when you intend to prevent the IAM principal that is making the request from making subsequent ``PutFileSystemPolicy`` requests on this file system. The default value is ``False``."},"encrypted":{"type":"boolean","description":"A Boolean value that, if true, creates an encrypted file system. When creating an encrypted file system, you have the option of specifying a KmsKeyId for an existing kms-key-long. If you don't specify a kms-key, then the default kms-key for EFS, ``/aws/elasticfilesystem``, is used to protect the encrypted file system.","replaceOnChanges":true},"fileSystemId":{"type":"string","description":"The ID of the EFS file system. For example: `fs-abcdef0123456789a`"},"fileSystemPolicy":{"$ref":"pulumi.json#/Any","description":"The ``FileSystemPolicy`` for the EFS file system. A file system policy is an IAM resource policy used to control NFS access to an EFS file system. For more information, see [Using to control NFS access to Amazon EFS](https://docs.aws.amazon.com/efs/latest/ug/iam-access-control-nfs-efs.html) in the *Amazon EFS User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EFS::FileSystem` for more information about the expected schema for this property."},"fileSystemProtection":{"$ref":"#/types/aws-native:efs:FileSystemProtection","description":"Describes the protection on the file system."},"fileSystemTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Use to create one or more tags associated with the file system. Each tag is a user-defined key-value pair. Name your file system on creation by including a ``\"Key\":\"Name\",\"Value\":\"{value}\"`` key-value pair. Each key must be unique. For more information, see [Tagging resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *General Reference Guide*."},"kmsKeyId":{"type":"string","description":"The ID of the kms-key-long to be used to protect the encrypted file system. This parameter is only required if you want to use a nondefault kms-key. If this parameter is not specified, the default kms-key for EFS is used. This ID can be in one of the following formats:\n  +  Key ID - A unique identifier of the key, for example ``1234abcd-12ab-34cd-56ef-1234567890ab``.\n  +  ARN - An Amazon Resource Name (ARN) for the key, for example ``arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab``.\n  +  Key alias - A previously created display name for a key, for example ``alias/projectKey1``.\n  +  Key alias ARN - An ARN for a key alias, for example ``arn:aws:kms:us-west-2:444455556666:alias/projectKey1``.\n  \n If ``KmsKeyId`` is specified, the ``Encrypted`` parameter must be set to true.","replaceOnChanges":true},"lifecyclePolicies":{"type":"array","items":{"$ref":"#/types/aws-native:efs:FileSystemLifecyclePolicy"},"description":"An array of ``LifecyclePolicy`` objects that define the file system's ``LifecycleConfiguration`` object. A ``LifecycleConfiguration`` object informs Lifecycle management of the following:\n  +  When to move files in the file system from primary storage to IA storage.\n  +  When to move files in the file system from primary storage or IA storage to Archive storage.\n  +  When to move files that are in IA or Archive storage to primary storage.\n  \n  EFS requires that each ``LifecyclePolicy`` object have only a single transition. This means that in a request body, ``LifecyclePolicies`` needs to be structured as an array of ``LifecyclePolicy`` objects, one object for each transition, ``TransitionToIA``, ``TransitionToArchive````TransitionToPrimaryStorageClass``. See the example requests in the following section for more information."},"performanceMode":{"type":"string","description":"The performance mode of the file system. We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems.\n  Due to the higher per-operation latencies with Max I/O, we recommend using General Purpose performance mode for all file systems.\n  Default is ``generalPurpose``.","replaceOnChanges":true},"provisionedThroughputInMibps":{"type":"number","description":"The throughput, measured in mebibytes per second (MiBps), that you want to provision for a file system that you're creating. Required if ``ThroughputMode`` is set to ``provisioned``. Valid values are 1-3414 MiBps, with the upper limit depending on Region. To increase this limit, contact SUP. For more information, see [Amazon EFS quotas that you can increase](https://docs.aws.amazon.com/efs/latest/ug/limits.html#soft-limits) in the *Amazon EFS User Guide*."},"replicationConfiguration":{"$ref":"#/types/aws-native:efs:FileSystemReplicationConfiguration","description":"Describes the replication configuration for a specific file system."},"throughputMode":{"type":"string","description":"Specifies the throughput mode for the file system. The mode can be ``bursting``, ``provisioned``, or ``elastic``. If you set ``ThroughputMode`` to ``provisioned``, you must also set a value for ``ProvisionedThroughputInMibps``. After you create the file system, you can decrease your file system's Provisioned throughput or change between the throughput modes, with certain time restrictions. For more information, see [Specifying throughput with provisioned mode](https://docs.aws.amazon.com/efs/latest/ug/performance.html#provisioned-throughput) in the *Amazon EFS User Guide*. \n Default is ``bursting``."}},"type":"object","required":["arn","fileSystemId"],"inputProperties":{"availabilityZoneName":{"type":"string","description":"For One Zone file systems, specify the AWS Availability Zone in which to create the file system. Use the format ``us-east-1a`` to specify the Availability Zone. For more information about One Zone file systems, see [EFS file system types](https://docs.aws.amazon.com/efs/latest/ug/availability-durability.html#file-system-type) in the *Amazon EFS User Guide*.\n  One Zone file systems are not available in all Availability Zones in AWS-Regions where Amazon EFS is available."},"backupPolicy":{"$ref":"#/types/aws-native:efs:FileSystemBackupPolicy","description":"Use the ``BackupPolicy`` to turn automatic backups on or off for the file system."},"bypassPolicyLockoutSafetyCheck":{"type":"boolean","description":"(Optional) A boolean that specifies whether or not to bypass the ``FileSystemPolicy`` lockout safety check. The lockout safety check determines whether the policy in the request will lock out, or prevent, the IAM principal that is making the request from making future ``PutFileSystemPolicy`` requests on this file system. Set ``BypassPolicyLockoutSafetyCheck`` to ``True`` only when you intend to prevent the IAM principal that is making the request from making subsequent ``PutFileSystemPolicy`` requests on this file system. The default value is ``False``."},"encrypted":{"type":"boolean","description":"A Boolean value that, if true, creates an encrypted file system. When creating an encrypted file system, you have the option of specifying a KmsKeyId for an existing kms-key-long. If you don't specify a kms-key, then the default kms-key for EFS, ``/aws/elasticfilesystem``, is used to protect the encrypted file system."},"fileSystemPolicy":{"$ref":"pulumi.json#/Any","description":"The ``FileSystemPolicy`` for the EFS file system. A file system policy is an IAM resource policy used to control NFS access to an EFS file system. For more information, see [Using to control NFS access to Amazon EFS](https://docs.aws.amazon.com/efs/latest/ug/iam-access-control-nfs-efs.html) in the *Amazon EFS User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EFS::FileSystem` for more information about the expected schema for this property."},"fileSystemProtection":{"$ref":"#/types/aws-native:efs:FileSystemProtection","description":"Describes the protection on the file system."},"fileSystemTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Use to create one or more tags associated with the file system. Each tag is a user-defined key-value pair. Name your file system on creation by including a ``\"Key\":\"Name\",\"Value\":\"{value}\"`` key-value pair. Each key must be unique. For more information, see [Tagging resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *General Reference Guide*."},"kmsKeyId":{"type":"string","description":"The ID of the kms-key-long to be used to protect the encrypted file system. This parameter is only required if you want to use a nondefault kms-key. If this parameter is not specified, the default kms-key for EFS is used. This ID can be in one of the following formats:\n  +  Key ID - A unique identifier of the key, for example ``1234abcd-12ab-34cd-56ef-1234567890ab``.\n  +  ARN - An Amazon Resource Name (ARN) for the key, for example ``arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab``.\n  +  Key alias - A previously created display name for a key, for example ``alias/projectKey1``.\n  +  Key alias ARN - An ARN for a key alias, for example ``arn:aws:kms:us-west-2:444455556666:alias/projectKey1``.\n  \n If ``KmsKeyId`` is specified, the ``Encrypted`` parameter must be set to true."},"lifecyclePolicies":{"type":"array","items":{"$ref":"#/types/aws-native:efs:FileSystemLifecyclePolicy"},"description":"An array of ``LifecyclePolicy`` objects that define the file system's ``LifecycleConfiguration`` object. A ``LifecycleConfiguration`` object informs Lifecycle management of the following:\n  +  When to move files in the file system from primary storage to IA storage.\n  +  When to move files in the file system from primary storage or IA storage to Archive storage.\n  +  When to move files that are in IA or Archive storage to primary storage.\n  \n  EFS requires that each ``LifecyclePolicy`` object have only a single transition. This means that in a request body, ``LifecyclePolicies`` needs to be structured as an array of ``LifecyclePolicy`` objects, one object for each transition, ``TransitionToIA``, ``TransitionToArchive````TransitionToPrimaryStorageClass``. See the example requests in the following section for more information."},"performanceMode":{"type":"string","description":"The performance mode of the file system. We recommend ``generalPurpose`` performance mode for all file systems. File systems using the ``maxIO`` performance mode can scale to higher levels of aggregate throughput and operations per second with a tradeoff of slightly higher latencies for most file operations. The performance mode can't be changed after the file system has been created. The ``maxIO`` mode is not supported on One Zone file systems.\n  Due to the higher per-operation latencies with Max I/O, we recommend using General Purpose performance mode for all file systems.\n  Default is ``generalPurpose``."},"provisionedThroughputInMibps":{"type":"number","description":"The throughput, measured in mebibytes per second (MiBps), that you want to provision for a file system that you're creating. Required if ``ThroughputMode`` is set to ``provisioned``. Valid values are 1-3414 MiBps, with the upper limit depending on Region. To increase this limit, contact SUP. For more information, see [Amazon EFS quotas that you can increase](https://docs.aws.amazon.com/efs/latest/ug/limits.html#soft-limits) in the *Amazon EFS User Guide*."},"replicationConfiguration":{"$ref":"#/types/aws-native:efs:FileSystemReplicationConfiguration","description":"Describes the replication configuration for a specific file system."},"throughputMode":{"type":"string","description":"Specifies the throughput mode for the file system. The mode can be ``bursting``, ``provisioned``, or ``elastic``. If you set ``ThroughputMode`` to ``provisioned``, you must also set a value for ``ProvisionedThroughputInMibps``. After you create the file system, you can decrease your file system's Provisioned throughput or change between the throughput modes, with certain time restrictions. For more information, see [Specifying throughput with provisioned mode](https://docs.aws.amazon.com/efs/latest/ug/performance.html#provisioned-throughput) in the *Amazon EFS User Guide*. \n Default is ``bursting``."}}},"aws-native:efs:MountTarget":{"description":"The ``AWS::EFS::MountTarget`` resource is an Amazon EFS resource that creates a mount target for an EFS file system. You can then mount the file system on Amazon EC2 instances or other resources by using the mount target.","properties":{"awsId":{"type":"string","description":"The ID of the Amazon EFS file system that the mount target provides access to.\n\nExample: `fs-0123456789111222a`"},"fileSystemId":{"type":"string","description":"The ID of the file system for which to create the mount target.","replaceOnChanges":true},"ipAddress":{"type":"string","description":"If the ``IpAddressType`` for the mount target is IPv4 ( ``IPV4_ONLY`` or ``DUAL_STACK``), then specify the IPv4 address to use. If you do not specify an ``IpAddress``, then Amazon EFS selects an unused IP address from the subnet specified for ``SubnetId``.","replaceOnChanges":true},"ipAddressType":{"$ref":"#/types/aws-native:efs:MountTargetIpAddressType","description":"The IP address type for the mount target. The possible values are ``IPV4_ONLY`` (only IPv4 addresses), ``IPV6_ONLY`` (only IPv6 addresses), and ``DUAL_STACK`` (dual-stack, both IPv4 and IPv6 addresses). If you don’t specify an ``IpAddressType``, then ``IPV4_ONLY`` is used.\n  The ``IPAddressType`` must match the IP type of the subnet. Additionally, the ``IPAddressType`` parameter overrides the value set as the default IP address for the subnet in the VPC. For example, if the ``IPAddressType`` is ``IPV4_ONLY`` and ``AssignIpv6AddressOnCreation`` is ``true``, then IPv4 is used for the mount target. For more information, see [Modify the IP addressing attributes of your subnet](https://docs.aws.amazon.com/vpc/latest/userguide/subnet-public-ip.html).","replaceOnChanges":true},"ipv6Address":{"type":"string","description":"If the ``IPAddressType`` for the mount target is IPv6 (``IPV6_ONLY`` or ``DUAL_STACK``), then specify the IPv6 address to use. If you do not specify an ``Ipv6Address``, then Amazon EFS selects an unused IP address from the subnet specified for ``SubnetId``.","replaceOnChanges":true},"securityGroups":{"type":"array","items":{"type":"string"},"description":"VPC security group IDs, of the form ``sg-xxxxxxxx``. These must be for the same VPC as the subnet specified. The maximum number of security groups depends on account quota. For more information, see [Amazon VPC Quotas](https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html) in the *Amazon VPC User Guide* (see the *Security Groups* table). If you don't specify a security group, then Amazon EFS uses the default security group for the subnet's VPC."},"subnetId":{"type":"string","description":"The ID of the subnet to add the mount target in. For One Zone file systems, use the subnet that is associated with the file system's Availability Zone. The subnet type must be the same type as the ``IpAddressType``.","replaceOnChanges":true}},"type":"object","required":["awsId","fileSystemId","securityGroups","subnetId"],"inputProperties":{"fileSystemId":{"type":"string","description":"The ID of the file system for which to create the mount target."},"ipAddress":{"type":"string","description":"If the ``IpAddressType`` for the mount target is IPv4 ( ``IPV4_ONLY`` or ``DUAL_STACK``), then specify the IPv4 address to use. If you do not specify an ``IpAddress``, then Amazon EFS selects an unused IP address from the subnet specified for ``SubnetId``."},"ipAddressType":{"$ref":"#/types/aws-native:efs:MountTargetIpAddressType","description":"The IP address type for the mount target. The possible values are ``IPV4_ONLY`` (only IPv4 addresses), ``IPV6_ONLY`` (only IPv6 addresses), and ``DUAL_STACK`` (dual-stack, both IPv4 and IPv6 addresses). If you don’t specify an ``IpAddressType``, then ``IPV4_ONLY`` is used.\n  The ``IPAddressType`` must match the IP type of the subnet. Additionally, the ``IPAddressType`` parameter overrides the value set as the default IP address for the subnet in the VPC. For example, if the ``IPAddressType`` is ``IPV4_ONLY`` and ``AssignIpv6AddressOnCreation`` is ``true``, then IPv4 is used for the mount target. For more information, see [Modify the IP addressing attributes of your subnet](https://docs.aws.amazon.com/vpc/latest/userguide/subnet-public-ip.html)."},"ipv6Address":{"type":"string","description":"If the ``IPAddressType`` for the mount target is IPv6 (``IPV6_ONLY`` or ``DUAL_STACK``), then specify the IPv6 address to use. If you do not specify an ``Ipv6Address``, then Amazon EFS selects an unused IP address from the subnet specified for ``SubnetId``."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"VPC security group IDs, of the form ``sg-xxxxxxxx``. These must be for the same VPC as the subnet specified. The maximum number of security groups depends on account quota. For more information, see [Amazon VPC Quotas](https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html) in the *Amazon VPC User Guide* (see the *Security Groups* table). If you don't specify a security group, then Amazon EFS uses the default security group for the subnet's VPC."},"subnetId":{"type":"string","description":"The ID of the subnet to add the mount target in. For One Zone file systems, use the subnet that is associated with the file system's Availability Zone. The subnet type must be the same type as the ``IpAddressType``."}},"requiredInputs":["fileSystemId","securityGroups","subnetId"]},"aws-native:eks:AccessEntry":{"description":"An object representing an Amazon EKS AccessEntry.","properties":{"accessEntryArn":{"type":"string","description":"The ARN of the access entry."},"accessPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:eks:AccessEntryAccessPolicy"},"description":"An array of access policies that are associated with the access entry."},"clusterName":{"type":"string","description":"The cluster that the access entry is created for.","replaceOnChanges":true},"kubernetesGroups":{"type":"array","items":{"type":"string"},"description":"The Kubernetes groups that the access entry is associated with."},"principalArn":{"type":"string","description":"The principal ARN that the access entry is created for.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"type":"string","description":"The node type to associate with the access entry.","replaceOnChanges":true},"username":{"type":"string","description":"The Kubernetes user that the access entry is associated with."}},"type":"object","required":["accessEntryArn","clusterName","principalArn"],"inputProperties":{"accessPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:eks:AccessEntryAccessPolicy"},"description":"An array of access policies that are associated with the access entry."},"clusterName":{"type":"string","description":"The cluster that the access entry is created for."},"kubernetesGroups":{"type":"array","items":{"type":"string"},"description":"The Kubernetes groups that the access entry is associated with."},"principalArn":{"type":"string","description":"The principal ARN that the access entry is created for."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"type":"string","description":"The node type to associate with the access entry."},"username":{"type":"string","description":"The Kubernetes user that the access entry is associated with."}},"requiredInputs":["clusterName","principalArn"]},"aws-native:eks:Addon":{"description":"Resource Schema for AWS::EKS::Addon","properties":{"addonName":{"type":"string","description":"Name of Addon","replaceOnChanges":true},"addonVersion":{"type":"string","description":"Version of Addon"},"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the add-on"},"clusterName":{"type":"string","description":"Name of Cluster","replaceOnChanges":true},"configurationValues":{"type":"string","description":"The configuration values to use with the add-on"},"namespaceConfig":{"$ref":"#/types/aws-native:eks:NamespaceConfigProperties","description":"The custom namespace configuration to use with the add-on","replaceOnChanges":true},"podIdentityAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:eks:AddonPodIdentityAssociation"},"description":"An array of pod identities to apply to this add-on."},"preserveOnDelete":{"type":"boolean","description":"PreserveOnDelete parameter value"},"resolveConflicts":{"$ref":"#/types/aws-native:eks:AddonResolveConflicts","description":"Resolve parameter value conflicts"},"serviceAccountRoleArn":{"type":"string","description":"IAM role to bind to the add-on's service account"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["addonName","arn","clusterName"],"inputProperties":{"addonName":{"type":"string","description":"Name of Addon"},"addonVersion":{"type":"string","description":"Version of Addon"},"clusterName":{"type":"string","description":"Name of Cluster"},"configurationValues":{"type":"string","description":"The configuration values to use with the add-on"},"namespaceConfig":{"$ref":"#/types/aws-native:eks:NamespaceConfigProperties","description":"The custom namespace configuration to use with the add-on"},"podIdentityAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:eks:AddonPodIdentityAssociation"},"description":"An array of pod identities to apply to this add-on."},"preserveOnDelete":{"type":"boolean","description":"PreserveOnDelete parameter value"},"resolveConflicts":{"$ref":"#/types/aws-native:eks:AddonResolveConflicts","description":"Resolve parameter value conflicts"},"serviceAccountRoleArn":{"type":"string","description":"IAM role to bind to the add-on's service account"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["clusterName"]},"aws-native:eks:Capability":{"description":"Resource Type definition for EKS Capability.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the capability."},"capabilityName":{"type":"string","description":"A unique name for the capability. The name must be unique within your cluster and can contain alphanumeric characters, hyphens, and underscores.","replaceOnChanges":true},"clusterName":{"type":"string","description":"The name of the EKS cluster where you want to create the capability.","replaceOnChanges":true},"configuration":{"$ref":"#/types/aws-native:eks:CapabilityConfiguration","description":"The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings."},"createdAt":{"type":"string","description":"The Unix epoch timestamp in seconds for when the capability was created."},"deletePropagationPolicy":{"$ref":"#/types/aws-native:eks:CapabilityDeletePropagationPolicy","description":"Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted."},"modifiedAt":{"type":"string","description":"The Unix epoch timestamp in seconds for when the capability was last modified."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating."},"status":{"type":"string","description":"The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:eks:CapabilityType","description":"The type of capability to create. Valid values are: ACK (AWS Controllers for Kubernetes, which lets you manage AWS resources directly from Kubernetes), ARGOCD (Argo CD for GitOps-based continuous delivery), or KRO (Kube Resource Orchestrator for composing and managing custom Kubernetes resources).","replaceOnChanges":true},"version":{"type":"string","description":"The version of the capability software that is currently running."}},"type":"object","required":["arn","capabilityName","clusterName","createdAt","deletePropagationPolicy","modifiedAt","roleArn","status","type","version"],"inputProperties":{"capabilityName":{"type":"string","description":"A unique name for the capability. The name must be unique within your cluster and can contain alphanumeric characters, hyphens, and underscores."},"clusterName":{"type":"string","description":"The name of the EKS cluster where you want to create the capability."},"configuration":{"$ref":"#/types/aws-native:eks:CapabilityConfiguration","description":"The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings."},"deletePropagationPolicy":{"$ref":"#/types/aws-native:eks:CapabilityDeletePropagationPolicy","description":"Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:eks:CapabilityType","description":"The type of capability to create. Valid values are: ACK (AWS Controllers for Kubernetes, which lets you manage AWS resources directly from Kubernetes), ARGOCD (Argo CD for GitOps-based continuous delivery), or KRO (Kube Resource Orchestrator for composing and managing custom Kubernetes resources)."}},"requiredInputs":["clusterName","deletePropagationPolicy","roleArn","type"]},"aws-native:eks:Cluster":{"description":"An object representing an Amazon EKS cluster.","properties":{"accessConfig":{"$ref":"#/types/aws-native:eks:ClusterAccessConfig","description":"The access configuration for the cluster."},"arn":{"type":"string","description":"The ARN of the cluster, such as arn:aws:eks:us-west-2:666666666666:cluster/prod."},"awsId":{"type":"string","description":"The unique ID given to your cluster."},"bootstrapSelfManagedAddons":{"type":"boolean","description":"Set this value to false to avoid creating the default networking add-ons when the cluster is created.","replaceOnChanges":true},"certificateAuthorityData":{"type":"string","description":"The certificate-authority-data for your cluster."},"clusterSecurityGroupId":{"type":"string","description":"The cluster security group that was created by Amazon EKS for the cluster. Managed node groups use this security group for control plane to data plane communication."},"computeConfig":{"$ref":"#/types/aws-native:eks:ClusterComputeConfig","description":"Indicates the current configuration of the compute capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the compute capability is enabled, EKS Auto Mode will create and delete EC2 Managed Instances in your AWS account. For more information, see EKS Auto Mode compute capability in the *Amazon EKS User Guide* ."},"controlPlaneScalingConfig":{"$ref":"#/types/aws-native:eks:ClusterControlPlaneScalingConfig","description":"The control plane scaling tier configuration. For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide."},"deletionProtection":{"type":"boolean","description":"Set this value to true to enable deletion protection for the cluster."},"encryptionConfig":{"type":"array","items":{"$ref":"#/types/aws-native:eks:ClusterEncryptionConfig"},"description":"The encryption configuration for the cluster.","replaceOnChanges":true},"encryptionConfigKeyArn":{"type":"string","description":"Amazon Resource Name (ARN) or alias of the customer master key (CMK)."},"endpoint":{"type":"string","description":"The endpoint for your Kubernetes API server, such as https://5E1D0CEXAMPLEA591B746AFC5AB30262.yl4.us-west-2.eks.amazonaws.com."},"force":{"type":"boolean","description":"Force cluster version update"},"kubernetesNetworkConfig":{"$ref":"#/types/aws-native:eks:ClusterKubernetesNetworkConfig","description":"The Kubernetes network configuration for the cluster."},"logging":{"$ref":"#/types/aws-native:eks:Logging","description":"The logging configuration for your cluster."},"name":{"type":"string","description":"The unique name to give to your cluster.","replaceOnChanges":true},"openIdConnectIssuerUrl":{"type":"string","description":"The issuer URL for the cluster's OIDC identity provider, such as https://oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B716D3041E. If you need to remove https:// from this output value, you can include the following code in your template."},"outpostConfig":{"$ref":"#/types/aws-native:eks:ClusterOutpostConfig","description":"An object representing the configuration of your local Amazon EKS cluster on an AWS Outpost. This object isn't available for clusters on the AWS cloud.","replaceOnChanges":true},"remoteNetworkConfig":{"$ref":"#/types/aws-native:eks:ClusterRemoteNetworkConfig","description":"The configuration in the cluster for EKS Hybrid Nodes. You can add, change, or remove this configuration after the cluster is created."},"resourcesVpcConfig":{"$ref":"#/types/aws-native:eks:ClusterResourcesVpcConfig","description":"The VPC configuration that's used by the cluster control plane. Amazon EKS VPC resources have specific requirements to work properly with Kubernetes. For more information, see [Cluster VPC Considerations](https://docs.aws.amazon.com/eks/latest/userguide/network_reqs.html) and [Cluster Security Group Considerations](https://docs.aws.amazon.com/eks/latest/userguide/sec-group-reqs.html) in the *Amazon EKS User Guide* . You must specify at least two subnets. You can specify up to five security groups, but we recommend that you use a dedicated security group for your cluster control plane."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that provides permissions for the Kubernetes control plane to make calls to AWS API operations on your behalf.","replaceOnChanges":true},"storageConfig":{"$ref":"#/types/aws-native:eks:ClusterStorageConfig","description":"Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"upgradePolicy":{"$ref":"#/types/aws-native:eks:ClusterUpgradePolicy","description":"This value indicates if extended support is enabled or disabled for the cluster.\n\n[Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)"},"version":{"type":"string","description":"The desired Kubernetes version for your cluster. If you don't specify a value here, the latest version available in Amazon EKS is used."},"zonalShiftConfig":{"$ref":"#/types/aws-native:eks:ClusterZonalShiftConfig","description":"The configuration for zonal shift for the cluster."}},"type":"object","required":["arn","awsId","certificateAuthorityData","clusterSecurityGroupId","encryptionConfigKeyArn","endpoint","openIdConnectIssuerUrl","resourcesVpcConfig","roleArn"],"inputProperties":{"accessConfig":{"$ref":"#/types/aws-native:eks:ClusterAccessConfig","description":"The access configuration for the cluster."},"bootstrapSelfManagedAddons":{"type":"boolean","description":"Set this value to false to avoid creating the default networking add-ons when the cluster is created."},"computeConfig":{"$ref":"#/types/aws-native:eks:ClusterComputeConfig","description":"Indicates the current configuration of the compute capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the compute capability is enabled, EKS Auto Mode will create and delete EC2 Managed Instances in your AWS account. For more information, see EKS Auto Mode compute capability in the *Amazon EKS User Guide* ."},"controlPlaneScalingConfig":{"$ref":"#/types/aws-native:eks:ClusterControlPlaneScalingConfig","description":"The control plane scaling tier configuration. For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide."},"deletionProtection":{"type":"boolean","description":"Set this value to true to enable deletion protection for the cluster."},"encryptionConfig":{"type":"array","items":{"$ref":"#/types/aws-native:eks:ClusterEncryptionConfig"},"description":"The encryption configuration for the cluster."},"force":{"type":"boolean","description":"Force cluster version update"},"kubernetesNetworkConfig":{"$ref":"#/types/aws-native:eks:ClusterKubernetesNetworkConfig","description":"The Kubernetes network configuration for the cluster."},"logging":{"$ref":"#/types/aws-native:eks:Logging","description":"The logging configuration for your cluster."},"name":{"type":"string","description":"The unique name to give to your cluster."},"outpostConfig":{"$ref":"#/types/aws-native:eks:ClusterOutpostConfig","description":"An object representing the configuration of your local Amazon EKS cluster on an AWS Outpost. This object isn't available for clusters on the AWS cloud."},"remoteNetworkConfig":{"$ref":"#/types/aws-native:eks:ClusterRemoteNetworkConfig","description":"The configuration in the cluster for EKS Hybrid Nodes. You can add, change, or remove this configuration after the cluster is created."},"resourcesVpcConfig":{"$ref":"#/types/aws-native:eks:ClusterResourcesVpcConfig","description":"The VPC configuration that's used by the cluster control plane. Amazon EKS VPC resources have specific requirements to work properly with Kubernetes. For more information, see [Cluster VPC Considerations](https://docs.aws.amazon.com/eks/latest/userguide/network_reqs.html) and [Cluster Security Group Considerations](https://docs.aws.amazon.com/eks/latest/userguide/sec-group-reqs.html) in the *Amazon EKS User Guide* . You must specify at least two subnets. You can specify up to five security groups, but we recommend that you use a dedicated security group for your cluster control plane."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that provides permissions for the Kubernetes control plane to make calls to AWS API operations on your behalf."},"storageConfig":{"$ref":"#/types/aws-native:eks:ClusterStorageConfig","description":"Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"upgradePolicy":{"$ref":"#/types/aws-native:eks:ClusterUpgradePolicy","description":"This value indicates if extended support is enabled or disabled for the cluster.\n\n[Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)"},"version":{"type":"string","description":"The desired Kubernetes version for your cluster. If you don't specify a value here, the latest version available in Amazon EKS is used."},"zonalShiftConfig":{"$ref":"#/types/aws-native:eks:ClusterZonalShiftConfig","description":"The configuration for zonal shift for the cluster."}},"requiredInputs":["resourcesVpcConfig","roleArn"]},"aws-native:eks:FargateProfile":{"description":"Resource Schema for AWS::EKS::FargateProfile","properties":{"arn":{"type":"string","description":"The ARN of the cluster, such as `arn:aws:eks:us-west-2:666666666666:fargateprofile/myCluster/myFargateProfile/1cb1a11a-1dc1-1d11-cf11-1111f11fa111` ."},"clusterName":{"type":"string","description":"Name of the Cluster","replaceOnChanges":true},"fargateProfileName":{"type":"string","description":"Name of FargateProfile","replaceOnChanges":true},"podExecutionRoleArn":{"type":"string","description":"The IAM policy arn for pods","replaceOnChanges":true},"selectors":{"type":"array","items":{"$ref":"#/types/aws-native:eks:FargateProfileSelector"},"description":"The selectors to match for a `Pod` to use this Fargate profile. Each selector must have an associated Kubernetes `namespace` . Optionally, you can also specify `labels` for a `namespace` . You may specify up to five selectors in a Fargate profile.","replaceOnChanges":true},"subnets":{"type":"array","items":{"type":"string"},"description":"The IDs of subnets to launch a `Pod` into. A `Pod` running on Fargate isn't assigned a public IP address, so only private subnets (with no direct route to an Internet Gateway) are accepted for this parameter.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","clusterName","podExecutionRoleArn","selectors"],"inputProperties":{"clusterName":{"type":"string","description":"Name of the Cluster"},"fargateProfileName":{"type":"string","description":"Name of FargateProfile"},"podExecutionRoleArn":{"type":"string","description":"The IAM policy arn for pods"},"selectors":{"type":"array","items":{"$ref":"#/types/aws-native:eks:FargateProfileSelector"},"description":"The selectors to match for a `Pod` to use this Fargate profile. Each selector must have an associated Kubernetes `namespace` . Optionally, you can also specify `labels` for a `namespace` . You may specify up to five selectors in a Fargate profile."},"subnets":{"type":"array","items":{"type":"string"},"description":"The IDs of subnets to launch a `Pod` into. A `Pod` running on Fargate isn't assigned a public IP address, so only private subnets (with no direct route to an Internet Gateway) are accepted for this parameter."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["clusterName","podExecutionRoleArn","selectors"]},"aws-native:eks:IdentityProviderConfig":{"description":"An object representing an Amazon EKS IdentityProviderConfig.","properties":{"clusterName":{"type":"string","description":"The name of the identity provider configuration.","replaceOnChanges":true},"identityProviderConfigArn":{"type":"string","description":"The ARN of the configuration."},"identityProviderConfigName":{"type":"string","description":"The name of the OIDC provider configuration.","replaceOnChanges":true},"oidc":{"$ref":"#/types/aws-native:eks:IdentityProviderConfigOidcIdentityProviderConfig","description":"An object representing an OpenID Connect (OIDC) identity provider configuration.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:eks:IdentityProviderConfigType","description":"The type of the identity provider configuration.","replaceOnChanges":true}},"type":"object","required":["clusterName","identityProviderConfigArn","type"],"inputProperties":{"clusterName":{"type":"string","description":"The name of the identity provider configuration."},"identityProviderConfigName":{"type":"string","description":"The name of the OIDC provider configuration."},"oidc":{"$ref":"#/types/aws-native:eks:IdentityProviderConfigOidcIdentityProviderConfig","description":"An object representing an OpenID Connect (OIDC) identity provider configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:eks:IdentityProviderConfigType","description":"The type of the identity provider configuration."}},"requiredInputs":["clusterName","type"]},"aws-native:eks:Nodegroup":{"description":"Resource schema for AWS::EKS::Nodegroup\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eksNodegroup = new AwsNative.Eks.Nodegroup(\"eksNodegroup\", new()\n    {\n        ClusterName = \"prod\",\n        NodeRole = \"arn:aws:iam::012345678910:role/eksInstanceRole\",\n        ScalingConfig = new AwsNative.Eks.Inputs.NodegroupScalingConfigArgs\n        {\n            MinSize = 3,\n            DesiredSize = 5,\n            MaxSize = 7,\n        },\n        Labels = \n        {\n            { \"key1\", \"Value1\" },\n            { \"key2\", \"Value2\" },\n        },\n        Subnets = new[]\n        {\n            \"subnet-6782e71e\",\n            \"subnet-e7e761ac\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eks\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eks.NewNodegroup(ctx, \"eksNodegroup\", \u0026eks.NodegroupArgs{\n\t\t\tClusterName: pulumi.String(\"prod\"),\n\t\t\tNodeRole:    pulumi.String(\"arn:aws:iam::012345678910:role/eksInstanceRole\"),\n\t\t\tScalingConfig: \u0026eks.NodegroupScalingConfigArgs{\n\t\t\t\tMinSize:     pulumi.Int(3),\n\t\t\t\tDesiredSize: pulumi.Int(5),\n\t\t\t\tMaxSize:     pulumi.Int(7),\n\t\t\t},\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"key1\": pulumi.String(\"Value1\"),\n\t\t\t\t\"key2\": pulumi.String(\"Value2\"),\n\t\t\t},\n\t\t\tSubnets: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"subnet-6782e71e\"),\n\t\t\t\tpulumi.String(\"subnet-e7e761ac\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst eksNodegroup = new aws_native.eks.Nodegroup(\"eksNodegroup\", {\n    clusterName: \"prod\",\n    nodeRole: \"arn:aws:iam::012345678910:role/eksInstanceRole\",\n    scalingConfig: {\n        minSize: 3,\n        desiredSize: 5,\n        maxSize: 7,\n    },\n    labels: {\n        key1: \"Value1\",\n        key2: \"Value2\",\n    },\n    subnets: [\n        \"subnet-6782e71e\",\n        \"subnet-e7e761ac\",\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\neks_nodegroup = aws_native.eks.Nodegroup(\"eksNodegroup\",\n    cluster_name=\"prod\",\n    node_role=\"arn:aws:iam::012345678910:role/eksInstanceRole\",\n    scaling_config={\n        \"min_size\": 3,\n        \"desired_size\": 5,\n        \"max_size\": 7,\n    },\n    labels={\n        \"key1\": \"Value1\",\n        \"key2\": \"Value2\",\n    },\n    subnets=[\n        \"subnet-6782e71e\",\n        \"subnet-e7e761ac\",\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eksNodegroup = new AwsNative.Eks.Nodegroup(\"eksNodegroup\", new()\n    {\n        ClusterName = \"prod\",\n        NodeRole = \"arn:aws:iam::012345678910:role/eksInstanceRole\",\n        ScalingConfig = new AwsNative.Eks.Inputs.NodegroupScalingConfigArgs\n        {\n            MinSize = 3,\n            DesiredSize = 5,\n            MaxSize = 7,\n        },\n        Labels = \n        {\n            { \"key1\", \"Value1\" },\n            { \"key2\", \"Value2\" },\n        },\n        Subnets = new[]\n        {\n            \"subnet-6782e71e\",\n            \"subnet-e7e761ac\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eks\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eks.NewNodegroup(ctx, \"eksNodegroup\", \u0026eks.NodegroupArgs{\n\t\t\tClusterName: pulumi.String(\"prod\"),\n\t\t\tNodeRole:    pulumi.String(\"arn:aws:iam::012345678910:role/eksInstanceRole\"),\n\t\t\tScalingConfig: \u0026eks.NodegroupScalingConfigArgs{\n\t\t\t\tMinSize:     pulumi.Int(3),\n\t\t\t\tDesiredSize: pulumi.Int(5),\n\t\t\t\tMaxSize:     pulumi.Int(7),\n\t\t\t},\n\t\t\tLabels: pulumi.StringMap{\n\t\t\t\t\"key1\": pulumi.String(\"Value1\"),\n\t\t\t\t\"key2\": pulumi.String(\"Value2\"),\n\t\t\t},\n\t\t\tSubnets: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"subnet-6782e71e\"),\n\t\t\t\tpulumi.String(\"subnet-e7e761ac\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst eksNodegroup = new aws_native.eks.Nodegroup(\"eksNodegroup\", {\n    clusterName: \"prod\",\n    nodeRole: \"arn:aws:iam::012345678910:role/eksInstanceRole\",\n    scalingConfig: {\n        minSize: 3,\n        desiredSize: 5,\n        maxSize: 7,\n    },\n    labels: {\n        key1: \"Value1\",\n        key2: \"Value2\",\n    },\n    subnets: [\n        \"subnet-6782e71e\",\n        \"subnet-e7e761ac\",\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\neks_nodegroup = aws_native.eks.Nodegroup(\"eksNodegroup\",\n    cluster_name=\"prod\",\n    node_role=\"arn:aws:iam::012345678910:role/eksInstanceRole\",\n    scaling_config={\n        \"min_size\": 3,\n        \"desired_size\": 5,\n        \"max_size\": 7,\n    },\n    labels={\n        \"key1\": \"Value1\",\n        \"key2\": \"Value2\",\n    },\n    subnets=[\n        \"subnet-6782e71e\",\n        \"subnet-e7e761ac\",\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"amiType":{"type":"string","description":"The AMI type for your node group.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) associated with the managed node group."},"awsId":{"type":"string"},"capacityType":{"type":"string","description":"The capacity type of your managed node group.","replaceOnChanges":true},"clusterName":{"type":"string","description":"Name of the cluster to create the node group in.","replaceOnChanges":true},"diskSize":{"type":"integer","description":"The root device disk size (in GiB) for your node group instances.","replaceOnChanges":true},"forceUpdateEnabled":{"type":"boolean","description":"Force the update if the existing node group's pods are unable to be drained due to a pod disruption budget issue."},"instanceTypes":{"type":"array","items":{"type":"string"},"description":"Specify the instance types for a node group.","replaceOnChanges":true},"labels":{"type":"object","additionalProperties":{"type":"string"},"description":"The Kubernetes labels to be applied to the nodes in the node group when they are created."},"launchTemplate":{"$ref":"#/types/aws-native:eks:NodegroupLaunchTemplateSpecification","description":"An object representing a node group's launch template specification."},"nodeRepairConfig":{"$ref":"#/types/aws-native:eks:NodegroupNodeRepairConfig","description":"The node auto repair configuration for node group."},"nodeRole":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to associate with your node group.","replaceOnChanges":true},"nodegroupName":{"type":"string","description":"The unique name to give your node group.","replaceOnChanges":true},"releaseVersion":{"type":"string","description":"The AMI version of the Amazon EKS-optimized AMI to use with your node group."},"remoteAccess":{"$ref":"#/types/aws-native:eks:NodegroupRemoteAccess","description":"The remote access (SSH) configuration to use with your node group.","replaceOnChanges":true},"scalingConfig":{"$ref":"#/types/aws-native:eks:NodegroupScalingConfig","description":"The scaling configuration details for the Auto Scaling group that is created for your node group."},"subnets":{"type":"array","items":{"type":"string"},"description":"The subnets to use for the Auto Scaling group that is created for your node group.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The metadata, as key-value pairs, to apply to the node group to assist with categorization and organization. Follows same schema as Labels for consistency."},"taints":{"type":"array","items":{"$ref":"#/types/aws-native:eks:NodegroupTaint"},"description":"The Kubernetes taints to be applied to the nodes in the node group when they are created."},"updateConfig":{"$ref":"#/types/aws-native:eks:NodegroupUpdateConfig","description":"The node group update configuration."},"version":{"type":"string","description":"The Kubernetes version to use for your managed nodes."}},"type":"object","required":["arn","awsId","clusterName","nodeRole","subnets"],"inputProperties":{"amiType":{"type":"string","description":"The AMI type for your node group."},"capacityType":{"type":"string","description":"The capacity type of your managed node group."},"clusterName":{"type":"string","description":"Name of the cluster to create the node group in."},"diskSize":{"type":"integer","description":"The root device disk size (in GiB) for your node group instances."},"forceUpdateEnabled":{"type":"boolean","description":"Force the update if the existing node group's pods are unable to be drained due to a pod disruption budget issue."},"instanceTypes":{"type":"array","items":{"type":"string"},"description":"Specify the instance types for a node group."},"labels":{"type":"object","additionalProperties":{"type":"string"},"description":"The Kubernetes labels to be applied to the nodes in the node group when they are created."},"launchTemplate":{"$ref":"#/types/aws-native:eks:NodegroupLaunchTemplateSpecification","description":"An object representing a node group's launch template specification."},"nodeRepairConfig":{"$ref":"#/types/aws-native:eks:NodegroupNodeRepairConfig","description":"The node auto repair configuration for node group."},"nodeRole":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to associate with your node group."},"nodegroupName":{"type":"string","description":"The unique name to give your node group."},"releaseVersion":{"type":"string","description":"The AMI version of the Amazon EKS-optimized AMI to use with your node group."},"remoteAccess":{"$ref":"#/types/aws-native:eks:NodegroupRemoteAccess","description":"The remote access (SSH) configuration to use with your node group."},"scalingConfig":{"$ref":"#/types/aws-native:eks:NodegroupScalingConfig","description":"The scaling configuration details for the Auto Scaling group that is created for your node group."},"subnets":{"type":"array","items":{"type":"string"},"description":"The subnets to use for the Auto Scaling group that is created for your node group."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The metadata, as key-value pairs, to apply to the node group to assist with categorization and organization. Follows same schema as Labels for consistency."},"taints":{"type":"array","items":{"$ref":"#/types/aws-native:eks:NodegroupTaint"},"description":"The Kubernetes taints to be applied to the nodes in the node group when they are created."},"updateConfig":{"$ref":"#/types/aws-native:eks:NodegroupUpdateConfig","description":"The node group update configuration."},"version":{"type":"string","description":"The Kubernetes version to use for your managed nodes."}},"requiredInputs":["clusterName","nodeRole","subnets"]},"aws-native:eks:PodIdentityAssociation":{"description":"An object representing an Amazon EKS PodIdentityAssociation.","properties":{"associationArn":{"type":"string","description":"The ARN of the pod identity association."},"associationId":{"type":"string","description":"The ID of the pod identity association."},"clusterName":{"type":"string","description":"The cluster that the pod identity association is created for.","replaceOnChanges":true},"disableSessionTags":{"type":"boolean","description":"The Disable Session Tags of the pod identity association."},"externalId":{"type":"string","description":"The External Id of the pod identity association."},"namespace":{"type":"string","description":"The Kubernetes namespace that the pod identity association is created for.","replaceOnChanges":true},"policy":{"type":"string","description":"The policy of the pod identity association."},"roleArn":{"type":"string","description":"The IAM role ARN that the pod identity association is created for."},"serviceAccount":{"type":"string","description":"The Kubernetes service account that the pod identity association is created for.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetRoleArn":{"type":"string","description":"The Target Role Arn of the pod identity association."}},"type":"object","required":["associationArn","associationId","clusterName","externalId","namespace","roleArn","serviceAccount"],"inputProperties":{"clusterName":{"type":"string","description":"The cluster that the pod identity association is created for."},"disableSessionTags":{"type":"boolean","description":"The Disable Session Tags of the pod identity association."},"namespace":{"type":"string","description":"The Kubernetes namespace that the pod identity association is created for."},"policy":{"type":"string","description":"The policy of the pod identity association."},"roleArn":{"type":"string","description":"The IAM role ARN that the pod identity association is created for."},"serviceAccount":{"type":"string","description":"The Kubernetes service account that the pod identity association is created for."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetRoleArn":{"type":"string","description":"The Target Role Arn of the pod identity association."}},"requiredInputs":["clusterName","namespace","roleArn","serviceAccount"]},"aws-native:elasticache:GlobalReplicationGroup":{"description":"The AWS::ElastiCache::GlobalReplicationGroup resource creates an Amazon ElastiCache Global Replication Group.","properties":{"automaticFailoverEnabled":{"type":"boolean","description":"AutomaticFailoverEnabled"},"cacheNodeType":{"type":"string","description":"The cache node type of the Global Datastore"},"cacheParameterGroupName":{"type":"string","description":"Cache parameter group name to use for the new engine version. This parameter cannot be modified independently."},"engine":{"type":"string","description":"The engine of the Global Datastore."},"engineVersion":{"type":"string","description":"The engine version of the Global Datastore."},"globalNodeGroupCount":{"type":"integer","description":"Indicates the number of node groups in the Global Datastore."},"globalReplicationGroupDescription":{"type":"string","description":"The optional description of the Global Datastore"},"globalReplicationGroupId":{"type":"string","description":"The name of the Global Datastore, it is generated by ElastiCache adding a prefix to GlobalReplicationGroupIdSuffix."},"globalReplicationGroupIdSuffix":{"type":"string","description":"The suffix name of a Global Datastore. Amazon ElastiCache automatically applies a prefix to the Global Datastore ID when it is created. Each AWS Region has its own prefix. "},"members":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupMember"},"description":"The replication groups that comprise the Global Datastore."},"regionalConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupRegionalConfiguration"},"description":"Describes the replication group IDs, the AWS regions where they are stored and the shard configuration for each that comprise the Global Datastore "},"status":{"type":"string","description":"The status of the Global Datastore"}},"type":"object","required":["globalReplicationGroupId","members","status"],"inputProperties":{"automaticFailoverEnabled":{"type":"boolean","description":"AutomaticFailoverEnabled"},"cacheNodeType":{"type":"string","description":"The cache node type of the Global Datastore"},"cacheParameterGroupName":{"type":"string","description":"Cache parameter group name to use for the new engine version. This parameter cannot be modified independently."},"engine":{"type":"string","description":"The engine of the Global Datastore."},"engineVersion":{"type":"string","description":"The engine version of the Global Datastore."},"globalNodeGroupCount":{"type":"integer","description":"Indicates the number of node groups in the Global Datastore."},"globalReplicationGroupDescription":{"type":"string","description":"The optional description of the Global Datastore"},"globalReplicationGroupIdSuffix":{"type":"string","description":"The suffix name of a Global Datastore. Amazon ElastiCache automatically applies a prefix to the Global Datastore ID when it is created. Each AWS Region has its own prefix. "},"members":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupMember"},"description":"The replication groups that comprise the Global Datastore."},"regionalConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupRegionalConfiguration"},"description":"Describes the replication group IDs, the AWS regions where they are stored and the shard configuration for each that comprise the Global Datastore "}},"requiredInputs":["members"]},"aws-native:elasticache:ParameterGroup":{"description":"Resource Type definition for AWS::ElastiCache::ParameterGroup","properties":{"cacheParameterGroupFamily":{"type":"string","description":"The name of the cache parameter group family that this cache parameter group is compatible with.","replaceOnChanges":true},"cacheParameterGroupName":{"type":"string","description":"The name of the Cache Parameter Group."},"description":{"type":"string","description":"The description for this cache parameter group."},"properties":{"type":"object","additionalProperties":{"type":"string"},"description":"A comma-delimited list of parameter name/value pairs. For more information see ModifyCacheParameterGroup in the Amazon ElastiCache API Reference Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags are composed of a Key/Value pair. You can use tags to categorize and track each parameter group. The tag value null is permitted."}},"type":"object","required":["cacheParameterGroupFamily","cacheParameterGroupName","description"],"inputProperties":{"cacheParameterGroupFamily":{"type":"string","description":"The name of the cache parameter group family that this cache parameter group is compatible with."},"description":{"type":"string","description":"The description for this cache parameter group."},"properties":{"type":"object","additionalProperties":{"type":"string"},"description":"A comma-delimited list of parameter name/value pairs. For more information see ModifyCacheParameterGroup in the Amazon ElastiCache API Reference Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags are composed of a Key/Value pair. You can use tags to categorize and track each parameter group. The tag value null is permitted."}},"requiredInputs":["cacheParameterGroupFamily","description"]},"aws-native:elasticache:ReplicationGroup":{"description":"Resource type definition for AWS::ElastiCache::ReplicationGroup","properties":{"atRestEncryptionEnabled":{"type":"boolean","description":"A flag that enables encryption at rest when set to true.AtRestEncryptionEnabled after the replication group is created. To enable encryption at rest on a replication group you must set AtRestEncryptionEnabled to true when you create the replication group.","replaceOnChanges":true},"authToken":{"type":"string","description":"Reserved parameter. The password used to access a password protected server.AuthToken can be specified only on replication groups where TransitEncryptionEnabled is true. For more information."},"autoMinorVersionUpgrade":{"type":"boolean","description":"This parameter is currently disabled."},"automaticFailoverEnabled":{"type":"boolean","description":"Specifies whether a read-only replica is automatically promoted to read/write primary if the existing primary fails. AutomaticFailoverEnabled must be enabled for Redis (cluster mode enabled) replication groups."},"cacheNodeType":{"type":"string","description":"The compute and memory capacity of the nodes in the node group (shard)."},"cacheParameterGroupName":{"type":"string","description":"The name of the parameter group to associate with this replication group. If this argument is omitted, the default cache parameter group for the specified engine is used."},"cacheSecurityGroupNames":{"type":"array","items":{"type":"string"},"description":"A list of cache security group names to associate with this replication group."},"cacheSubnetGroupName":{"type":"string","description":"The name of the cache subnet group to be used for the replication group.","replaceOnChanges":true},"clusterMode":{"type":"string","description":"Enabled or Disabled. To modify cluster mode from Disabled to Enabled, you must first set the cluster mode to Compatible. Compatible mode allows your Redis OSS clients to connect using both cluster mode enabled and cluster mode disabled. After you migrate all Redis OSS clients to use cluster mode enabled, you can then complete cluster mode configuration and set the cluster mode to Enabled. For more information, see Modify cluster mode."},"configurationEndPoint":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupEndpoint","description":"The configuration details of the replication group."},"dataTieringEnabled":{"type":"boolean","description":"Enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes.","replaceOnChanges":true},"engine":{"type":"string","description":"The name of the cache engine to be used for the clusters in this replication group."},"engineVersion":{"type":"string","description":"The version number of the cache engine to be used for the clusters in this replication group. To view the supported cache engine versions, use the DescribeCacheEngineVersions operation."},"globalReplicationGroupId":{"type":"string","description":"The name of the Global datastore","replaceOnChanges":true},"ipDiscovery":{"type":"string","description":"The network type you choose when creating a replication group, either ipv4 | ipv6. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system."},"kmsKeyId":{"type":"string","description":"The ID of the KMS key used to encrypt the disk on the cluster.","replaceOnChanges":true},"logDeliveryConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupLogDeliveryConfigurationRequest"},"description":"Specifies the destination, format and type of the logs."},"multiAzEnabled":{"type":"boolean","description":"A flag indicating if you have Multi-AZ enabled to enhance fault tolerance. For more information, see Minimizing Downtime: Multi-AZ."},"networkType":{"type":"string","description":"Must be either ipv4 | ipv6 | dual_stack. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system","replaceOnChanges":true},"nodeGroupConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupNodeGroupConfiguration"},"description":"NodeGroupConfiguration is a property of the AWS::ElastiCache::ReplicationGroup resource that configures an Amazon ElastiCache (ElastiCache) Redis cluster node group."},"notificationTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) topic to which notifications are sent."},"numCacheClusters":{"type":"integer","description":"The number of clusters this replication group initially has.This parameter is not used if there is more than one node group (shard). You should use ReplicasPerNodeGroup instead."},"numNodeGroups":{"type":"integer","description":"An optional parameter that specifies the number of node groups (shards) for this Redis (cluster mode enabled) replication group. For Redis (cluster mode disabled) either omit this parameter or set it to 1."},"port":{"type":"integer","description":"The port number on which each member of the replication group accepts connections.","replaceOnChanges":true},"preferredCacheClusterAzs":{"type":"array","items":{"type":"string"},"description":"A list of EC2 Availability Zones in which the replication group's clusters are created. The order of the Availability Zones in the list is the order in which clusters are allocated. The primary cluster is created in the first AZ in the list. This parameter is not used if there is more than one node group (shard). You should use NodeGroupConfiguration instead.","replaceOnChanges":true},"preferredMaintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum maintenance window is a 60 minute period."},"primaryClusterId":{"type":"string","description":"The identifier of the cluster that serves as the primary for this replication group. This cluster must already exist and have a status of available."},"primaryEndPoint":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupEndpoint","description":"The primary endpoint configuration"},"readEndPoint":{"$ref":"#/types/aws-native:elasticache:ReadEndPointProperties"},"readerEndPoint":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupEndpoint","description":"The endpoint of the reader node in the replication group."},"replicasPerNodeGroup":{"type":"integer","description":"An optional parameter that specifies the number of replica nodes in each node group (shard). Valid values are 0 to 5.","replaceOnChanges":true},"replicationGroupDescription":{"type":"string","description":"A user-created description for the replication group."},"replicationGroupId":{"type":"string","description":"The replication group identifier. This parameter is stored as a lowercase string.","replaceOnChanges":true},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more Amazon VPC security groups associated with this replication group."},"snapshotArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARN) that uniquely identify the Redis RDB snapshot files stored in Amazon S3.","replaceOnChanges":true},"snapshotName":{"type":"string","description":"The name of a snapshot from which to restore data into the new replication group. The snapshot status changes to restoring while the new replication group is being created.","replaceOnChanges":true},"snapshotRetentionLimit":{"type":"integer","description":"The number of days for which ElastiCache retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted."},"snapshotWindow":{"type":"string","description":"The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of your node group (shard)."},"snapshottingClusterId":{"type":"string","description":"The cluster ID that is used as the daily snapshot source for the replication group. This parameter cannot be set for Redis (cluster mode enabled) replication groups."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of cost allocation tags to be added to this resource. Tags are comma-separated key,value pairs (e.g. Key=myKey, Value=myKeyValue. You can include multiple tags as shown following: Key=myKey, Value=myKeyValue Key=mySecondKey, Value=mySecondKeyValue."},"transitEncryptionEnabled":{"type":"boolean","description":"A flag that enables in-transit encryption when set to true."},"transitEncryptionMode":{"type":"string","description":"A setting that allows you to migrate your clients to use in-transit encryption, with no downtime. When setting TransitEncryptionEnabled to true, you can set your TransitEncryptionMode to preferred in the same request, to allow both encrypted and unencrypted connections at the same time. Once you migrate all your Redis OSS clients to use encrypted connections you can modify the value to required to allow encrypted connections only. Setting TransitEncryptionMode to required is a two-step process that requires you to first set the TransitEncryptionMode to preferred, after that you can set TransitEncryptionMode to required. This process will not trigger the replacement of the replication group."},"userGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of user group to associate with the replication group."}},"type":"object","required":["configurationEndPoint","primaryEndPoint","readEndPoint","readerEndPoint","replicationGroupDescription"],"inputProperties":{"atRestEncryptionEnabled":{"type":"boolean","description":"A flag that enables encryption at rest when set to true.AtRestEncryptionEnabled after the replication group is created. To enable encryption at rest on a replication group you must set AtRestEncryptionEnabled to true when you create the replication group."},"authToken":{"type":"string","description":"Reserved parameter. The password used to access a password protected server.AuthToken can be specified only on replication groups where TransitEncryptionEnabled is true. For more information."},"autoMinorVersionUpgrade":{"type":"boolean","description":"This parameter is currently disabled."},"automaticFailoverEnabled":{"type":"boolean","description":"Specifies whether a read-only replica is automatically promoted to read/write primary if the existing primary fails. AutomaticFailoverEnabled must be enabled for Redis (cluster mode enabled) replication groups."},"cacheNodeType":{"type":"string","description":"The compute and memory capacity of the nodes in the node group (shard)."},"cacheParameterGroupName":{"type":"string","description":"The name of the parameter group to associate with this replication group. If this argument is omitted, the default cache parameter group for the specified engine is used."},"cacheSecurityGroupNames":{"type":"array","items":{"type":"string"},"description":"A list of cache security group names to associate with this replication group."},"cacheSubnetGroupName":{"type":"string","description":"The name of the cache subnet group to be used for the replication group."},"clusterMode":{"type":"string","description":"Enabled or Disabled. To modify cluster mode from Disabled to Enabled, you must first set the cluster mode to Compatible. Compatible mode allows your Redis OSS clients to connect using both cluster mode enabled and cluster mode disabled. After you migrate all Redis OSS clients to use cluster mode enabled, you can then complete cluster mode configuration and set the cluster mode to Enabled. For more information, see Modify cluster mode."},"dataTieringEnabled":{"type":"boolean","description":"Enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes."},"engine":{"type":"string","description":"The name of the cache engine to be used for the clusters in this replication group."},"engineVersion":{"type":"string","description":"The version number of the cache engine to be used for the clusters in this replication group. To view the supported cache engine versions, use the DescribeCacheEngineVersions operation."},"globalReplicationGroupId":{"type":"string","description":"The name of the Global datastore"},"ipDiscovery":{"type":"string","description":"The network type you choose when creating a replication group, either ipv4 | ipv6. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system."},"kmsKeyId":{"type":"string","description":"The ID of the KMS key used to encrypt the disk on the cluster."},"logDeliveryConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupLogDeliveryConfigurationRequest"},"description":"Specifies the destination, format and type of the logs."},"multiAzEnabled":{"type":"boolean","description":"A flag indicating if you have Multi-AZ enabled to enhance fault tolerance. For more information, see Minimizing Downtime: Multi-AZ."},"networkType":{"type":"string","description":"Must be either ipv4 | ipv6 | dual_stack. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system"},"nodeGroupConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupNodeGroupConfiguration"},"description":"NodeGroupConfiguration is a property of the AWS::ElastiCache::ReplicationGroup resource that configures an Amazon ElastiCache (ElastiCache) Redis cluster node group."},"notificationTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) topic to which notifications are sent."},"numCacheClusters":{"type":"integer","description":"The number of clusters this replication group initially has.This parameter is not used if there is more than one node group (shard). You should use ReplicasPerNodeGroup instead."},"numNodeGroups":{"type":"integer","description":"An optional parameter that specifies the number of node groups (shards) for this Redis (cluster mode enabled) replication group. For Redis (cluster mode disabled) either omit this parameter or set it to 1."},"port":{"type":"integer","description":"The port number on which each member of the replication group accepts connections."},"preferredCacheClusterAzs":{"type":"array","items":{"type":"string"},"description":"A list of EC2 Availability Zones in which the replication group's clusters are created. The order of the Availability Zones in the list is the order in which clusters are allocated. The primary cluster is created in the first AZ in the list. This parameter is not used if there is more than one node group (shard). You should use NodeGroupConfiguration instead."},"preferredMaintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum maintenance window is a 60 minute period."},"primaryClusterId":{"type":"string","description":"The identifier of the cluster that serves as the primary for this replication group. This cluster must already exist and have a status of available."},"replicasPerNodeGroup":{"type":"integer","description":"An optional parameter that specifies the number of replica nodes in each node group (shard). Valid values are 0 to 5."},"replicationGroupDescription":{"type":"string","description":"A user-created description for the replication group."},"replicationGroupId":{"type":"string","description":"The replication group identifier. This parameter is stored as a lowercase string."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more Amazon VPC security groups associated with this replication group."},"snapshotArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARN) that uniquely identify the Redis RDB snapshot files stored in Amazon S3."},"snapshotName":{"type":"string","description":"The name of a snapshot from which to restore data into the new replication group. The snapshot status changes to restoring while the new replication group is being created."},"snapshotRetentionLimit":{"type":"integer","description":"The number of days for which ElastiCache retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted."},"snapshotWindow":{"type":"string","description":"The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of your node group (shard)."},"snapshottingClusterId":{"type":"string","description":"The cluster ID that is used as the daily snapshot source for the replication group. This parameter cannot be set for Redis (cluster mode enabled) replication groups."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of cost allocation tags to be added to this resource. Tags are comma-separated key,value pairs (e.g. Key=myKey, Value=myKeyValue. You can include multiple tags as shown following: Key=myKey, Value=myKeyValue Key=mySecondKey, Value=mySecondKeyValue."},"transitEncryptionEnabled":{"type":"boolean","description":"A flag that enables in-transit encryption when set to true."},"transitEncryptionMode":{"type":"string","description":"A setting that allows you to migrate your clients to use in-transit encryption, with no downtime. When setting TransitEncryptionEnabled to true, you can set your TransitEncryptionMode to preferred in the same request, to allow both encrypted and unencrypted connections at the same time. Once you migrate all your Redis OSS clients to use encrypted connections you can modify the value to required to allow encrypted connections only. Setting TransitEncryptionMode to required is a two-step process that requires you to first set the TransitEncryptionMode to preferred, after that you can set TransitEncryptionMode to required. This process will not trigger the replacement of the replication group."},"userGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of user group to associate with the replication group."}},"requiredInputs":["replicationGroupDescription"]},"aws-native:elasticache:ServerlessCache":{"description":"The AWS::ElastiCache::ServerlessCache resource creates an Amazon ElastiCache Serverless Cache.","properties":{"arn":{"type":"string","description":"The ARN of the Serverless Cache."},"cacheUsageLimits":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheCacheUsageLimits","description":"The cache usage limit for the serverless cache."},"createTime":{"type":"string","description":"The creation time of the Serverless Cache."},"dailySnapshotTime":{"type":"string","description":"The daily time range (in UTC) during which the service takes automatic snapshot of the Serverless Cache."},"description":{"type":"string","description":"The description of the Serverless Cache."},"endpoint":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEndpoint","description":"Represents the information required for client programs to connect to a cache node. This value is read-only."},"engine":{"type":"string","description":"The engine name of the Serverless Cache."},"finalSnapshotName":{"type":"string","description":"The final snapshot name which is taken before Serverless Cache is deleted."},"fullEngineVersion":{"type":"string","description":"The full engine version of the Serverless Cache."},"kmsKeyId":{"type":"string","description":"The ID of the KMS key used to encrypt the cluster.","replaceOnChanges":true},"majorEngineVersion":{"type":"string","description":"The major engine version of the Serverless Cache."},"readerEndpoint":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEndpoint","description":"Represents the information required for client programs to connect to a cache node. This value is read-only."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more Amazon VPC security groups associated with this Serverless Cache."},"serverlessCacheName":{"type":"string","description":"The name of the Serverless Cache. This value must be unique.","replaceOnChanges":true},"snapshotArnsToRestore":{"type":"array","items":{"type":"string"},"description":"The ARN's of snapshot to restore Serverless Cache.","replaceOnChanges":true},"snapshotRetentionLimit":{"type":"integer","description":"The snapshot retention limit of the Serverless Cache."},"status":{"type":"string","description":"The status of the Serverless Cache."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnet id's of the Serverless Cache.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this Serverless Cache."},"userGroupId":{"type":"string","description":"The ID of the user group."}},"type":"object","required":["arn","createTime","engine","fullEngineVersion","serverlessCacheName","status"],"inputProperties":{"cacheUsageLimits":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheCacheUsageLimits","description":"The cache usage limit for the serverless cache."},"dailySnapshotTime":{"type":"string","description":"The daily time range (in UTC) during which the service takes automatic snapshot of the Serverless Cache."},"description":{"type":"string","description":"The description of the Serverless Cache."},"endpoint":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEndpoint","description":"Represents the information required for client programs to connect to a cache node. This value is read-only."},"engine":{"type":"string","description":"The engine name of the Serverless Cache."},"finalSnapshotName":{"type":"string","description":"The final snapshot name which is taken before Serverless Cache is deleted."},"kmsKeyId":{"type":"string","description":"The ID of the KMS key used to encrypt the cluster."},"majorEngineVersion":{"type":"string","description":"The major engine version of the Serverless Cache."},"readerEndpoint":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEndpoint","description":"Represents the information required for client programs to connect to a cache node. This value is read-only."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more Amazon VPC security groups associated with this Serverless Cache."},"serverlessCacheName":{"type":"string","description":"The name of the Serverless Cache. This value must be unique."},"snapshotArnsToRestore":{"type":"array","items":{"type":"string"},"description":"The ARN's of snapshot to restore Serverless Cache."},"snapshotRetentionLimit":{"type":"integer","description":"The snapshot retention limit of the Serverless Cache."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnet id's of the Serverless Cache."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this Serverless Cache."},"userGroupId":{"type":"string","description":"The ID of the user group."}},"requiredInputs":["engine"]},"aws-native:elasticache:SubnetGroup":{"description":"Resource Type definition for AWS::ElastiCache::SubnetGroup","properties":{"cacheSubnetGroupName":{"type":"string","description":"The name for the cache subnet group. This value is stored as a lowercase string.","replaceOnChanges":true},"description":{"type":"string","description":"The description for the cache subnet group."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The EC2 subnet IDs for the cache subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A tag that can be added to an ElastiCache subnet group. Tags are composed of a Key/Value pair. You can use tags to categorize and track all your subnet groups. A tag with a null Value is permitted."}},"type":"object","required":["description","subnetIds"],"inputProperties":{"cacheSubnetGroupName":{"type":"string","description":"The name for the cache subnet group. This value is stored as a lowercase string."},"description":{"type":"string","description":"The description for the cache subnet group."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The EC2 subnet IDs for the cache subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A tag that can be added to an ElastiCache subnet group. Tags are composed of a Key/Value pair. You can use tags to categorize and track all your subnet groups. A tag with a null Value is permitted."}},"requiredInputs":["description","subnetIds"]},"aws-native:elasticache:User":{"description":"Resource Type definition for AWS::ElastiCache::User","properties":{"accessString":{"type":"string","description":"Access permissions string used for this user account."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the user account."},"authenticationMode":{"$ref":"#/types/aws-native:elasticache:AuthenticationModeProperties","description":"Specifies the authentication mode to use. Below is an example of the possible JSON values:\n\n```\n{ Passwords: [\"*****\", \"******\"] // If Type is password.\n}\n```"},"engine":{"$ref":"#/types/aws-native:elasticache:UserEngine","description":"The target cache engine for the user."},"noPasswordRequired":{"type":"boolean","description":"Indicates a password is not required for this user account."},"passwords":{"type":"array","items":{"type":"string"},"description":"Passwords used for this user account. You can create up to two passwords for each user."},"status":{"type":"string","description":"Indicates the user status. Can be \"active\", \"modifying\" or \"deleting\"."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this user."},"userId":{"type":"string","description":"The ID of the user.","replaceOnChanges":true},"userName":{"type":"string","description":"The username of the user.","replaceOnChanges":true}},"type":"object","required":["arn","engine","status","userId","userName"],"inputProperties":{"accessString":{"type":"string","description":"Access permissions string used for this user account."},"authenticationMode":{"$ref":"#/types/aws-native:elasticache:AuthenticationModeProperties","description":"Specifies the authentication mode to use. Below is an example of the possible JSON values:\n\n```\n{ Passwords: [\"*****\", \"******\"] // If Type is password.\n}\n```"},"engine":{"$ref":"#/types/aws-native:elasticache:UserEngine","description":"The target cache engine for the user."},"noPasswordRequired":{"type":"boolean","description":"Indicates a password is not required for this user account."},"passwords":{"type":"array","items":{"type":"string"},"description":"Passwords used for this user account. You can create up to two passwords for each user."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this user."},"userId":{"type":"string","description":"The ID of the user."},"userName":{"type":"string","description":"The username of the user."}},"requiredInputs":["engine","userId"]},"aws-native:elasticache:UserGroup":{"description":"Resource Type definition for AWS::ElastiCache::UserGroup","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the user account."},"engine":{"$ref":"#/types/aws-native:elasticache:UserGroupEngine","description":"The target cache engine for the user group."},"status":{"type":"string","description":"Indicates user group status. Can be \"creating\", \"active\", \"modifying\", \"deleting\"."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this user."},"userGroupId":{"type":"string","description":"The ID of the user group.","replaceOnChanges":true},"userIds":{"type":"array","items":{"type":"string"},"description":"List of users associated to this user group."}},"type":"object","required":["arn","engine","status","userGroupId","userIds"],"inputProperties":{"engine":{"$ref":"#/types/aws-native:elasticache:UserGroupEngine","description":"The target cache engine for the user group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this user."},"userGroupId":{"type":"string","description":"The ID of the user group."},"userIds":{"type":"array","items":{"type":"string"},"description":"List of users associated to this user group."}},"requiredInputs":["engine","userGroupId","userIds"]},"aws-native:elasticbeanstalk:Application":{"description":"The AWS::ElasticBeanstalk::Application resource specifies an Elastic Beanstalk application.","properties":{"applicationName":{"type":"string","description":"A name for the Elastic Beanstalk application. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the application name.","replaceOnChanges":true},"description":{"type":"string","description":"Your description of the application."},"resourceLifecycleConfig":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationResourceLifecycleConfig","description":"Specifies an application resource lifecycle configuration to prevent your application from accumulating too many versions."}},"type":"object","inputProperties":{"applicationName":{"type":"string","description":"A name for the Elastic Beanstalk application. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the application name."},"description":{"type":"string","description":"Your description of the application."},"resourceLifecycleConfig":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationResourceLifecycleConfig","description":"Specifies an application resource lifecycle configuration to prevent your application from accumulating too many versions."}}},"aws-native:elasticbeanstalk:ApplicationVersion":{"description":"Resource Type definition for AWS::ElasticBeanstalk::ApplicationVersion","properties":{"applicationName":{"type":"string","description":"The name of the Elastic Beanstalk application that is associated with this application version. ","replaceOnChanges":true},"awsId":{"type":"string"},"description":{"type":"string","description":"A description of this application version."},"sourceBundle":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationVersionSourceBundle","description":"The Amazon S3 bucket and key that identify the location of the source bundle for this version. ","replaceOnChanges":true}},"type":"object","required":["applicationName","awsId","sourceBundle"],"inputProperties":{"applicationName":{"type":"string","description":"The name of the Elastic Beanstalk application that is associated with this application version. "},"description":{"type":"string","description":"A description of this application version."},"sourceBundle":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationVersionSourceBundle","description":"The Amazon S3 bucket and key that identify the location of the source bundle for this version. "}},"requiredInputs":["applicationName","sourceBundle"]},"aws-native:elasticbeanstalk:ConfigurationTemplate":{"description":"Resource Type definition for AWS::ElasticBeanstalk::ConfigurationTemplate","properties":{"applicationName":{"type":"string","description":"The name of the Elastic Beanstalk application to associate with this configuration template. ","replaceOnChanges":true},"description":{"type":"string","description":"An optional description for this configuration."},"environmentId":{"type":"string","description":"The ID of an environment whose settings you want to use to create the configuration template. You must specify EnvironmentId if you don't specify PlatformArn, SolutionStackName, or SourceConfiguration. ","replaceOnChanges":true},"optionSettings":{"type":"array","items":{"$ref":"#/types/aws-native:elasticbeanstalk:ConfigurationTemplateConfigurationOptionSetting"},"description":"Option values for the Elastic Beanstalk configuration, such as the instance type. If specified, these values override the values obtained from the solution stack or the source configuration template. For a complete list of Elastic Beanstalk configuration options, see [Option Values](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options.html) in the AWS Elastic Beanstalk Developer Guide. "},"platformArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom platform. For more information, see [Custom Platforms](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/custom-platforms.html) in the AWS Elastic Beanstalk Developer Guide. ","replaceOnChanges":true},"solutionStackName":{"type":"string","description":"The name of an Elastic Beanstalk solution stack (platform version) that this configuration uses. For example, 64bit Amazon Linux 2013.09 running Tomcat 7 Java 7. A solution stack specifies the operating system, runtime, and application server for a configuration template. It also determines the set of configuration options as well as the possible and default values. For more information, see [Supported Platforms](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.platforms.html) in the AWS Elastic Beanstalk Developer Guide.\n\n You must specify SolutionStackName if you don't specify PlatformArn, EnvironmentId, or SourceConfiguration.\n\n Use the ListAvailableSolutionStacks API to obtain a list of available solution stacks. ","replaceOnChanges":true},"sourceConfiguration":{"$ref":"#/types/aws-native:elasticbeanstalk:ConfigurationTemplateSourceConfiguration","description":"An Elastic Beanstalk configuration template to base this one on. If specified, Elastic Beanstalk uses the configuration values from the specified configuration template to create a new configuration.\n\nValues specified in OptionSettings override any values obtained from the SourceConfiguration.\n\nYou must specify SourceConfiguration if you don't specify PlatformArn, EnvironmentId, or SolutionStackName.\n\nConstraint: If both solution stack name and source configuration are specified, the solution stack of the source configuration template must match the specified solution stack name. ","replaceOnChanges":true},"templateName":{"type":"string","description":"The name of the configuration template"}},"type":"object","required":["applicationName","templateName"],"inputProperties":{"applicationName":{"type":"string","description":"The name of the Elastic Beanstalk application to associate with this configuration template. "},"description":{"type":"string","description":"An optional description for this configuration."},"environmentId":{"type":"string","description":"The ID of an environment whose settings you want to use to create the configuration template. You must specify EnvironmentId if you don't specify PlatformArn, SolutionStackName, or SourceConfiguration. "},"optionSettings":{"type":"array","items":{"$ref":"#/types/aws-native:elasticbeanstalk:ConfigurationTemplateConfigurationOptionSetting"},"description":"Option values for the Elastic Beanstalk configuration, such as the instance type. If specified, these values override the values obtained from the solution stack or the source configuration template. For a complete list of Elastic Beanstalk configuration options, see [Option Values](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options.html) in the AWS Elastic Beanstalk Developer Guide. "},"platformArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom platform. For more information, see [Custom Platforms](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/custom-platforms.html) in the AWS Elastic Beanstalk Developer Guide. "},"solutionStackName":{"type":"string","description":"The name of an Elastic Beanstalk solution stack (platform version) that this configuration uses. For example, 64bit Amazon Linux 2013.09 running Tomcat 7 Java 7. A solution stack specifies the operating system, runtime, and application server for a configuration template. It also determines the set of configuration options as well as the possible and default values. For more information, see [Supported Platforms](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.platforms.html) in the AWS Elastic Beanstalk Developer Guide.\n\n You must specify SolutionStackName if you don't specify PlatformArn, EnvironmentId, or SourceConfiguration.\n\n Use the ListAvailableSolutionStacks API to obtain a list of available solution stacks. "},"sourceConfiguration":{"$ref":"#/types/aws-native:elasticbeanstalk:ConfigurationTemplateSourceConfiguration","description":"An Elastic Beanstalk configuration template to base this one on. If specified, Elastic Beanstalk uses the configuration values from the specified configuration template to create a new configuration.\n\nValues specified in OptionSettings override any values obtained from the SourceConfiguration.\n\nYou must specify SourceConfiguration if you don't specify PlatformArn, EnvironmentId, or SolutionStackName.\n\nConstraint: If both solution stack name and source configuration are specified, the solution stack of the source configuration template must match the specified solution stack name. "}},"requiredInputs":["applicationName"]},"aws-native:elasticbeanstalk:Environment":{"description":"Resource Type definition for AWS::ElasticBeanstalk::Environment","properties":{"applicationName":{"type":"string","description":"The name of the application that is associated with this environment.","replaceOnChanges":true},"cnamePrefix":{"type":"string","description":"If specified, the environment attempts to use this value as the prefix for the CNAME in your Elastic Beanstalk environment URL. If not specified, the CNAME is generated automatically by appending a random alphanumeric string to the environment name.","replaceOnChanges":true},"description":{"type":"string","description":"Your description for this environment."},"endpointUrl":{"type":"string","description":"For load-balanced, autoscaling environments, the URL to the load balancer. For single-instance environments, the IP address of the instance.\n\nExample load balancer URL:\n\nExample instance IP address:\n\n`192.0.2.0`"},"environmentName":{"type":"string","description":"A unique name for the environment.","replaceOnChanges":true},"operationsRole":{"type":"string","description":"The Amazon Resource Name (ARN) of an existing IAM role to be used as the environment's operations role."},"optionSettings":{"type":"array","items":{"$ref":"#/types/aws-native:elasticbeanstalk:EnvironmentOptionSetting"},"description":"Key-value pairs defining configuration options for this environment, such as the instance type."},"platformArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom platform to use with the environment."},"solutionStackName":{"type":"string","description":"The name of an Elastic Beanstalk solution stack (platform version) to use with the environment.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to resources in the environment."},"templateName":{"type":"string","description":"The name of the Elastic Beanstalk configuration template to use with the environment."},"tier":{"$ref":"#/types/aws-native:elasticbeanstalk:EnvironmentTier","description":"Specifies the tier to use in creating this environment. The environment tier that you choose determines whether Elastic Beanstalk provisions resources to support a web application that handles HTTP(S) requests or a web application that handles background-processing tasks."},"versionLabel":{"type":"string","description":"The name of the application version to deploy."}},"type":"object","required":["applicationName","endpointUrl"],"inputProperties":{"applicationName":{"type":"string","description":"The name of the application that is associated with this environment."},"cnamePrefix":{"type":"string","description":"If specified, the environment attempts to use this value as the prefix for the CNAME in your Elastic Beanstalk environment URL. If not specified, the CNAME is generated automatically by appending a random alphanumeric string to the environment name."},"description":{"type":"string","description":"Your description for this environment."},"environmentName":{"type":"string","description":"A unique name for the environment."},"operationsRole":{"type":"string","description":"The Amazon Resource Name (ARN) of an existing IAM role to be used as the environment's operations role."},"optionSettings":{"type":"array","items":{"$ref":"#/types/aws-native:elasticbeanstalk:EnvironmentOptionSetting"},"description":"Key-value pairs defining configuration options for this environment, such as the instance type."},"platformArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom platform to use with the environment."},"solutionStackName":{"type":"string","description":"The name of an Elastic Beanstalk solution stack (platform version) to use with the environment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies the tags applied to resources in the environment."},"templateName":{"type":"string","description":"The name of the Elastic Beanstalk configuration template to use with the environment."},"tier":{"$ref":"#/types/aws-native:elasticbeanstalk:EnvironmentTier","description":"Specifies the tier to use in creating this environment. The environment tier that you choose determines whether Elastic Beanstalk provisions resources to support a web application that handles HTTP(S) requests or a web application that handles background-processing tasks."},"versionLabel":{"type":"string","description":"The name of the application version to deploy."}},"requiredInputs":["applicationName"]},"aws-native:elasticloadbalancingv2:Listener":{"description":"Specifies a listener for an Application Load Balancer, Network Load Balancer, or Gateway Load Balancer.","properties":{"alpnPolicy":{"type":"array","items":{"type":"string"},"description":"[TLS listener] The name of the Application-Layer Protocol Negotiation (ALPN) policy."},"certificates":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerCertificate"},"description":"The default SSL server certificate for a secure listener. You must provide exactly one certificate if the listener protocol is HTTPS or TLS.\n For an HTTPS listener, update requires some interruptions. For a TLS listener, update requires no interruption.\n To create a certificate list for a secure listener, use [AWS::ElasticLoadBalancingV2::ListenerCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenercertificate.html)."},"defaultActions":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAction"},"description":"The actions for the default rule. You cannot define a condition for a default rule.\n To create additional rules for an Application Load Balancer, use [AWS::ElasticLoadBalancingV2::ListenerRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenerrule.html)."},"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."},"listenerAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAttribute"},"description":"The listener attributes. Attributes that you do not modify retain their current values."},"loadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the load balancer.","replaceOnChanges":true},"mutualAuthentication":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerMutualAuthentication","description":"The mutual authentication configuration information."},"port":{"type":"integer","description":"The port on which the load balancer is listening. You can't specify a port for a Gateway Load Balancer."},"protocol":{"type":"string","description":"The protocol for connections from clients to the load balancer. For Application Load Balancers, the supported protocols are HTTP and HTTPS. For Network Load Balancers, the supported protocols are TCP, TLS, UDP, TCP_UDP, QUIC, and TCP_QUIC. You can’t specify the UDP, TCP_UDP, QUIC, or TCP_QUIC protocol if dual-stack mode is enabled. You can't specify a protocol for a Gateway Load Balancer."},"sslPolicy":{"type":"string","description":"[HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide*.\n [HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation."}},"type":"object","required":["defaultActions","listenerArn","loadBalancerArn"],"inputProperties":{"alpnPolicy":{"type":"array","items":{"type":"string"},"description":"[TLS listener] The name of the Application-Layer Protocol Negotiation (ALPN) policy."},"certificates":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerCertificate"},"description":"The default SSL server certificate for a secure listener. You must provide exactly one certificate if the listener protocol is HTTPS or TLS.\n For an HTTPS listener, update requires some interruptions. For a TLS listener, update requires no interruption.\n To create a certificate list for a secure listener, use [AWS::ElasticLoadBalancingV2::ListenerCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenercertificate.html)."},"defaultActions":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAction"},"description":"The actions for the default rule. You cannot define a condition for a default rule.\n To create additional rules for an Application Load Balancer, use [AWS::ElasticLoadBalancingV2::ListenerRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenerrule.html)."},"listenerAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAttribute"},"description":"The listener attributes. Attributes that you do not modify retain their current values."},"loadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the load balancer."},"mutualAuthentication":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerMutualAuthentication","description":"The mutual authentication configuration information."},"port":{"type":"integer","description":"The port on which the load balancer is listening. You can't specify a port for a Gateway Load Balancer."},"protocol":{"type":"string","description":"The protocol for connections from clients to the load balancer. For Application Load Balancers, the supported protocols are HTTP and HTTPS. For Network Load Balancers, the supported protocols are TCP, TLS, UDP, TCP_UDP, QUIC, and TCP_QUIC. You can’t specify the UDP, TCP_UDP, QUIC, or TCP_QUIC protocol if dual-stack mode is enabled. You can't specify a protocol for a Gateway Load Balancer."},"sslPolicy":{"type":"string","description":"[HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide*.\n [HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation."}},"requiredInputs":["defaultActions","loadBalancerArn"]},"aws-native:elasticloadbalancingv2:ListenerRule":{"description":"Specifies a listener rule. The listener must be associated with an Application Load Balancer. Each rule consists of a priority, one or more actions, and one or more conditions.\n For more information, see [Quotas for your Application Load Balancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-limits.html) in the *User Guide for Application Load Balancers*.","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleAction"},"description":"The actions.\n The rule must include exactly one of the following types of actions: ``forward``, ``fixed-response``, or ``redirect``, and it must be the last action to be performed. If the rule is for an HTTPS listener, it can also optionally include an authentication action."},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRuleCondition"},"description":"The conditions.\n The rule can optionally include up to one of each of the following conditions: ``http-request-method``, ``host-header``, ``path-pattern``, and ``source-ip``. A rule can also optionally include one or more of each of the following conditions: ``http-header`` and ``query-string``."},"isDefault":{"type":"boolean","description":"Indicates whether this is the default rule."},"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener.","replaceOnChanges":true},"priority":{"type":"integer","description":"The rule priority. A listener can't have multiple rules with the same priority.\n If you try to reorder rules by updating their priorities, do not specify a new priority if an existing rule already uses this priority, as this can cause an error. If you need to reuse a priority with a different rule, you must remove it as a priority first, and then specify it in a subsequent update."},"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule."},"transforms":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleTransform"}}},"type":"object","required":["actions","conditions","isDefault","priority","ruleArn"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleAction"},"description":"The actions.\n The rule must include exactly one of the following types of actions: ``forward``, ``fixed-response``, or ``redirect``, and it must be the last action to be performed. If the rule is for an HTTPS listener, it can also optionally include an authentication action."},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRuleCondition"},"description":"The conditions.\n The rule can optionally include up to one of each of the following conditions: ``http-request-method``, ``host-header``, ``path-pattern``, and ``source-ip``. A rule can also optionally include one or more of each of the following conditions: ``http-header`` and ``query-string``."},"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."},"priority":{"type":"integer","description":"The rule priority. A listener can't have multiple rules with the same priority.\n If you try to reorder rules by updating their priorities, do not specify a new priority if an existing rule already uses this priority, as this can cause an error. If you need to reuse a priority with a different rule, you must remove it as a priority first, and then specify it in a subsequent update."},"transforms":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleTransform"}}},"requiredInputs":["actions","conditions","priority"]},"aws-native:elasticloadbalancingv2:LoadBalancer":{"description":"Specifies an Application Load Balancer, a Network Load Balancer, or a Gateway Load Balancer.","properties":{"canonicalHostedZoneId":{"type":"string","description":"The ID of the Amazon Route 53 hosted zone associated with the load balancer. For example, `Z2P70J7EXAMPLE` ."},"dnsName":{"type":"string","description":"The DNS name for the load balancer. For example, `my-load-balancer-424835706.us-west-2.elb.amazonaws.com` ."},"enableCapacityReservationProvisionStabilize":{"type":"boolean","description":"Indicates whether to enable stabilization when creating or updating an LCU reservation. This ensures that the final stack status reflects the status of the LCU reservation. The default is ``false``."},"enablePrefixForIpv6SourceNat":{"type":"string","description":"[Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack``. The default value is ``off``."},"enforceSecurityGroupInboundRulesOnPrivateLinkTraffic":{"type":"string","description":"Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through privatelink. The default is ``on``.\n You can't configure this property on a Network Load Balancer unless you associated a security group with the load balancer when you created it."},"ipAddressType":{"type":"string","description":"The IP address type. Internal load balancers must use ``ipv4``.\n [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses).\n Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors.\n [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses)."},"ipv4IpamPoolId":{"type":"string","description":"The ID of the IPv4 IPAM pool."},"loadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the load balancer."},"loadBalancerAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerAttribute"},"description":"The load balancer attributes. Attributes that you do not modify retain their current values."},"loadBalancerFullName":{"type":"string","description":"The full name of the load balancer. For example, `app/my-load-balancer/50dc6c495c0c9188` ."},"loadBalancerName":{"type":"string","description":"The name of the load balancer. For example, `my-load-balancer` ."},"minimumLoadBalancerCapacity":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerMinimumLoadBalancerCapacity","description":"The minimum capacity for a load balancer."},"name":{"type":"string","description":"The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with \"internal-\".\n If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name.","replaceOnChanges":true},"scheme":{"type":"string","description":"The nodes of an Internet-facing load balancer have public IP addresses. The DNS name of an Internet-facing load balancer is publicly resolvable to the public IP addresses of the nodes. Therefore, Internet-facing load balancers can route requests from clients over the internet.\n The nodes of an internal load balancer have only private IP addresses. The DNS name of an internal load balancer is publicly resolvable to the private IP addresses of the nodes. Therefore, internal load balancers can route requests only from clients with access to the VPC for the load balancer.\n The default is an Internet-facing load balancer.\n You can't specify a scheme for a Gateway Load Balancer.","replaceOnChanges":true},"securityGroups":{"type":"array","items":{"type":"string"},"description":"[Application Load Balancers and Network Load Balancers] The IDs of the security groups for the load balancer."},"subnetMappings":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerSubnetMapping"},"description":"The IDs of the subnets. You can specify only one subnet per Availability Zone. You must specify either subnets or subnet mappings, but not both.\n [Application Load Balancers] You must specify subnets from at least two Availability Zones. You can't specify Elastic IP addresses for your subnets.\n [Application Load Balancers on Outposts] You must specify one Outpost subnet.\n [Application Load Balancers on Local Zones] You can specify subnets from one or more Local Zones.\n [Network Load Balancers] You can specify subnets from one or more Availability Zones. You can specify one Elastic IP address per subnet if you need static IP addresses for your internet-facing load balancer. For internal load balancers, you can specify one private IP address per subnet from the IPv4 range of the subnet. For internet-facing load balancer, you can specify one IPv6 address per subnet.\n [Gateway Load Balancers] You can specify subnets from one or more Availability Zones. You can't specify Elastic IP addresses for your subnets."},"subnets":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets. You can specify only one subnet per Availability Zone. You must specify either subnets or subnet mappings, but not both. To specify an Elastic IP address, specify subnet mappings instead of subnets.\n [Application Load Balancers] You must specify subnets from at least two Availability Zones.\n [Application Load Balancers on Outposts] You must specify one Outpost subnet.\n [Application Load Balancers on Local Zones] You can specify subnets from one or more Local Zones.\n [Network Load Balancers and Gateway Load Balancers] You can specify subnets from one or more Availability Zones."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the load balancer."},"type":{"type":"string","description":"The type of load balancer. The default is ``application``.","replaceOnChanges":true}},"type":"object","required":["canonicalHostedZoneId","dnsName","loadBalancerArn","loadBalancerFullName","loadBalancerName"],"inputProperties":{"enableCapacityReservationProvisionStabilize":{"type":"boolean","description":"Indicates whether to enable stabilization when creating or updating an LCU reservation. This ensures that the final stack status reflects the status of the LCU reservation. The default is ``false``."},"enablePrefixForIpv6SourceNat":{"type":"string","description":"[Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack``. The default value is ``off``."},"enforceSecurityGroupInboundRulesOnPrivateLinkTraffic":{"type":"string","description":"Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through privatelink. The default is ``on``.\n You can't configure this property on a Network Load Balancer unless you associated a security group with the load balancer when you created it."},"ipAddressType":{"type":"string","description":"The IP address type. Internal load balancers must use ``ipv4``.\n [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses).\n Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors.\n [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses)."},"ipv4IpamPoolId":{"type":"string","description":"The ID of the IPv4 IPAM pool."},"loadBalancerAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerAttribute"},"description":"The load balancer attributes. Attributes that you do not modify retain their current values."},"minimumLoadBalancerCapacity":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerMinimumLoadBalancerCapacity","description":"The minimum capacity for a load balancer."},"name":{"type":"string","description":"The name of the load balancer. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, must not begin or end with a hyphen, and must not begin with \"internal-\".\n If you don't specify a name, AWS CloudFormation generates a unique physical ID for the load balancer. If you specify a name, you cannot perform updates that require replacement of this resource, but you can perform other updates. To replace the resource, specify a new name."},"scheme":{"type":"string","description":"The nodes of an Internet-facing load balancer have public IP addresses. The DNS name of an Internet-facing load balancer is publicly resolvable to the public IP addresses of the nodes. Therefore, Internet-facing load balancers can route requests from clients over the internet.\n The nodes of an internal load balancer have only private IP addresses. The DNS name of an internal load balancer is publicly resolvable to the private IP addresses of the nodes. Therefore, internal load balancers can route requests only from clients with access to the VPC for the load balancer.\n The default is an Internet-facing load balancer.\n You can't specify a scheme for a Gateway Load Balancer."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"[Application Load Balancers and Network Load Balancers] The IDs of the security groups for the load balancer."},"subnetMappings":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerSubnetMapping"},"description":"The IDs of the subnets. You can specify only one subnet per Availability Zone. You must specify either subnets or subnet mappings, but not both.\n [Application Load Balancers] You must specify subnets from at least two Availability Zones. You can't specify Elastic IP addresses for your subnets.\n [Application Load Balancers on Outposts] You must specify one Outpost subnet.\n [Application Load Balancers on Local Zones] You can specify subnets from one or more Local Zones.\n [Network Load Balancers] You can specify subnets from one or more Availability Zones. You can specify one Elastic IP address per subnet if you need static IP addresses for your internet-facing load balancer. For internal load balancers, you can specify one private IP address per subnet from the IPv4 range of the subnet. For internet-facing load balancer, you can specify one IPv6 address per subnet.\n [Gateway Load Balancers] You can specify subnets from one or more Availability Zones. You can't specify Elastic IP addresses for your subnets."},"subnets":{"type":"array","items":{"type":"string"},"description":"The IDs of the subnets. You can specify only one subnet per Availability Zone. You must specify either subnets or subnet mappings, but not both. To specify an Elastic IP address, specify subnet mappings instead of subnets.\n [Application Load Balancers] You must specify subnets from at least two Availability Zones.\n [Application Load Balancers on Outposts] You must specify one Outpost subnet.\n [Application Load Balancers on Local Zones] You can specify subnets from one or more Local Zones.\n [Network Load Balancers and Gateway Load Balancers] You can specify subnets from one or more Availability Zones."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the load balancer."},"type":{"type":"string","description":"The type of load balancer. The default is ``application``."}}},"aws-native:elasticloadbalancingv2:TargetGroup":{"description":"Resource Type definition for AWS::ElasticLoadBalancingV2::TargetGroup","properties":{"healthCheckEnabled":{"type":"boolean","description":"Indicates whether health checks are enabled. If the target type is lambda, health checks are disabled by default but can be enabled. If the target type is instance, ip, or alb, health checks are always enabled and cannot be disabled."},"healthCheckIntervalSeconds":{"type":"integer","description":"The approximate amount of time, in seconds, between health checks of an individual target."},"healthCheckPath":{"type":"string","description":"[HTTP/HTTPS health checks] The destination for health checks on the targets. [HTTP1 or HTTP2 protocol version] The ping path. The default is /. [GRPC protocol version] The path of a custom health check method with the format /package.service/method. The default is /AWS.ALB/healthcheck."},"healthCheckPort":{"type":"string","description":"The port the load balancer uses when performing health checks on targets. "},"healthCheckProtocol":{"type":"string","description":"The protocol the load balancer uses when performing health checks on targets. "},"healthCheckTimeoutSeconds":{"type":"integer","description":"The amount of time, in seconds, during which no response from a target means a failed health check."},"healthyThresholdCount":{"type":"integer","description":"The number of consecutive health checks successes required before considering an unhealthy target healthy. "},"ipAddressType":{"type":"string","description":"The type of IP address used for this target group. The possible values are ipv4 and ipv6. ","replaceOnChanges":true},"loadBalancerArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the load balancers that route traffic to this target group."},"matcher":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupMatcher","description":"[HTTP/HTTPS health checks] The HTTP or gRPC codes to use when checking for a successful response from a target."},"name":{"type":"string","description":"The name of the target group.","replaceOnChanges":true},"port":{"type":"integer","description":"The port on which the targets receive traffic. This port is used unless you specify a port override when registering the target. If the target is a Lambda function, this parameter does not apply. If the protocol is GENEVE, the supported port is 6081.","replaceOnChanges":true},"protocol":{"type":"string","description":"The protocol to use for routing traffic to the targets.","replaceOnChanges":true},"protocolVersion":{"type":"string","description":"[HTTP/HTTPS protocol] The protocol version. The possible values are GRPC, HTTP1, and HTTP2.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags."},"targetControlPort":{"type":"integer","description":"The port that the target control agent uses to communicate the available capacity of targets to the load balancer."},"targetGroupArn":{"type":"string","description":"The ARN of the Target Group"},"targetGroupAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupAttribute"},"description":"The attributes."},"targetGroupFullName":{"type":"string","description":"The full name of the target group."},"targetGroupName":{"type":"string","description":"The name of the target group."},"targetType":{"type":"string","description":"The type of target that you must specify when registering targets with this target group. You can't specify targets for a target group using more than one target type.","replaceOnChanges":true},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupTargetDescription"},"description":"The targets."},"unhealthyThresholdCount":{"type":"integer","description":"The number of consecutive health check failures required before considering a target unhealthy."},"vpcId":{"type":"string","description":"The identifier of the virtual private cloud (VPC). If the target is a Lambda function, this parameter does not apply.","replaceOnChanges":true}},"type":"object","required":["loadBalancerArns","targetGroupArn","targetGroupFullName","targetGroupName"],"inputProperties":{"healthCheckEnabled":{"type":"boolean","description":"Indicates whether health checks are enabled. If the target type is lambda, health checks are disabled by default but can be enabled. If the target type is instance, ip, or alb, health checks are always enabled and cannot be disabled."},"healthCheckIntervalSeconds":{"type":"integer","description":"The approximate amount of time, in seconds, between health checks of an individual target."},"healthCheckPath":{"type":"string","description":"[HTTP/HTTPS health checks] The destination for health checks on the targets. [HTTP1 or HTTP2 protocol version] The ping path. The default is /. [GRPC protocol version] The path of a custom health check method with the format /package.service/method. The default is /AWS.ALB/healthcheck."},"healthCheckPort":{"type":"string","description":"The port the load balancer uses when performing health checks on targets. "},"healthCheckProtocol":{"type":"string","description":"The protocol the load balancer uses when performing health checks on targets. "},"healthCheckTimeoutSeconds":{"type":"integer","description":"The amount of time, in seconds, during which no response from a target means a failed health check."},"healthyThresholdCount":{"type":"integer","description":"The number of consecutive health checks successes required before considering an unhealthy target healthy. "},"ipAddressType":{"type":"string","description":"The type of IP address used for this target group. The possible values are ipv4 and ipv6. "},"matcher":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupMatcher","description":"[HTTP/HTTPS health checks] The HTTP or gRPC codes to use when checking for a successful response from a target."},"name":{"type":"string","description":"The name of the target group."},"port":{"type":"integer","description":"The port on which the targets receive traffic. This port is used unless you specify a port override when registering the target. If the target is a Lambda function, this parameter does not apply. If the protocol is GENEVE, the supported port is 6081."},"protocol":{"type":"string","description":"The protocol to use for routing traffic to the targets."},"protocolVersion":{"type":"string","description":"[HTTP/HTTPS protocol] The protocol version. The possible values are GRPC, HTTP1, and HTTP2."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags."},"targetControlPort":{"type":"integer","description":"The port that the target control agent uses to communicate the available capacity of targets to the load balancer."},"targetGroupAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupAttribute"},"description":"The attributes."},"targetType":{"type":"string","description":"The type of target that you must specify when registering targets with this target group. You can't specify targets for a target group using more than one target type."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupTargetDescription"},"description":"The targets."},"unhealthyThresholdCount":{"type":"integer","description":"The number of consecutive health check failures required before considering a target unhealthy."},"vpcId":{"type":"string","description":"The identifier of the virtual private cloud (VPC). If the target is a Lambda function, this parameter does not apply."}}},"aws-native:elasticloadbalancingv2:TrustStore":{"description":"Resource Type definition for AWS::ElasticLoadBalancingV2::TrustStore","properties":{"caCertificatesBundleS3Bucket":{"type":"string","description":"The name of the S3 bucket to fetch the CA certificate bundle from."},"caCertificatesBundleS3Key":{"type":"string","description":"The name of the S3 object to fetch the CA certificate bundle from."},"caCertificatesBundleS3ObjectVersion":{"type":"string","description":"The version of the S3 bucket that contains the CA certificate bundle."},"name":{"type":"string","description":"The name of the trust store.","replaceOnChanges":true},"numberOfCaCertificates":{"type":"integer","description":"The number of certificates associated with the trust store."},"status":{"type":"string","description":"The status of the trust store, could be either of ACTIVE or CREATING."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the trust store."},"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store."}},"type":"object","required":["numberOfCaCertificates","status","trustStoreArn"],"inputProperties":{"caCertificatesBundleS3Bucket":{"type":"string","description":"The name of the S3 bucket to fetch the CA certificate bundle from."},"caCertificatesBundleS3Key":{"type":"string","description":"The name of the S3 object to fetch the CA certificate bundle from."},"caCertificatesBundleS3ObjectVersion":{"type":"string","description":"The version of the S3 bucket that contains the CA certificate bundle."},"name":{"type":"string","description":"The name of the trust store."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the trust store."}}},"aws-native:elasticloadbalancingv2:TrustStoreRevocation":{"description":"Resource Type definition for AWS::ElasticLoadBalancingV2::TrustStoreRevocation","properties":{"revocationContents":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TrustStoreRevocationRevocationContent"},"description":"The attributes required to create a trust store revocation.","replaceOnChanges":true},"revocationId":{"type":"integer","description":"The ID associated with the revocation."},"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store.","replaceOnChanges":true},"trustStoreRevocations":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TrustStoreRevocation"},"description":"The data associated with a trust store revocation"}},"type":"object","required":["revocationId","trustStoreRevocations"],"inputProperties":{"revocationContents":{"type":"array","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TrustStoreRevocationRevocationContent"},"description":"The attributes required to create a trust store revocation."},"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store."}}},"aws-native:elementalinference:Feed":{"description":"Represents a feed that receives media for inference processing","properties":{"arn":{"type":"string"},"awsId":{"type":"string"},"dataEndpoints":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:elementalinference:FeedGetOutput"}},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object","required":["arn","awsId","dataEndpoints","name","outputs"],"inputProperties":{"name":{"type":"string"},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:elementalinference:FeedGetOutput"}},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["outputs"]},"aws-native:emr:SecurityConfiguration":{"description":"Use a SecurityConfiguration resource to configure data encryption, Kerberos authentication, and Amazon S3 authorization for EMRFS.","properties":{"name":{"type":"string","description":"The name of the security configuration.","replaceOnChanges":true},"securityConfiguration":{"$ref":"pulumi.json#/Any","description":"The security configuration details in JSON format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EMR::SecurityConfiguration` for more information about the expected schema for this property.","language":{"csharp":{"name":"SecurityConfigurationValue"}},"replaceOnChanges":true}},"type":"object","required":["securityConfiguration"],"inputProperties":{"name":{"type":"string","description":"The name of the security configuration."},"securityConfiguration":{"$ref":"pulumi.json#/Any","description":"The security configuration details in JSON format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EMR::SecurityConfiguration` for more information about the expected schema for this property.","language":{"csharp":{"name":"SecurityConfigurationValue"}}}},"requiredInputs":["securityConfiguration"]},"aws-native:emr:Step":{"description":"Schema for AWS::EMR::Step","properties":{"actionOnFailure":{"type":"string","description":"This specifies what action to take when the cluster step fails. Possible values are CANCEL_AND_WAIT and CONTINUE.","replaceOnChanges":true},"awsId":{"type":"string","description":"ID generated by service"},"encryptionKeyArn":{"type":"string","description":"The KMS key ARN to encrypt the logs published to the given Amazon S3 destination. When omitted, EMR falls back to cluster-level logging behavior.","replaceOnChanges":true},"hadoopJarStep":{"$ref":"#/types/aws-native:emr:StepHadoopJarStepConfig","description":"The HadoopJarStepConfig property type specifies a job flow step consisting of a JAR file whose main function will be executed. The main function submits a job for the cluster to execute as a step on the master node, and then waits for the job to finish or fail before executing subsequent steps.","replaceOnChanges":true},"jobFlowId":{"type":"string","description":"A string that uniquely identifies the cluster (job flow).","replaceOnChanges":true},"logUri":{"type":"string","description":"The Amazon S3 destination URI for log publishing. When omitted, EMR falls back to cluster-level logging behavior.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the cluster step.","replaceOnChanges":true}},"type":"object","required":["actionOnFailure","awsId","hadoopJarStep","jobFlowId","name"],"inputProperties":{"actionOnFailure":{"type":"string","description":"This specifies what action to take when the cluster step fails. Possible values are CANCEL_AND_WAIT and CONTINUE."},"encryptionKeyArn":{"type":"string","description":"The KMS key ARN to encrypt the logs published to the given Amazon S3 destination. When omitted, EMR falls back to cluster-level logging behavior."},"hadoopJarStep":{"$ref":"#/types/aws-native:emr:StepHadoopJarStepConfig","description":"The HadoopJarStepConfig property type specifies a job flow step consisting of a JAR file whose main function will be executed. The main function submits a job for the cluster to execute as a step on the master node, and then waits for the job to finish or fail before executing subsequent steps."},"jobFlowId":{"type":"string","description":"A string that uniquely identifies the cluster (job flow)."},"logUri":{"type":"string","description":"The Amazon S3 destination URI for log publishing. When omitted, EMR falls back to cluster-level logging behavior."},"name":{"type":"string","description":"The name of the cluster step."}},"requiredInputs":["actionOnFailure","hadoopJarStep","jobFlowId"]},"aws-native:emr:Studio":{"description":"Resource schema for AWS::EMR::Studio","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the EMR Studio."},"authMode":{"$ref":"#/types/aws-native:emr:StudioAuthMode","description":"Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.","replaceOnChanges":true},"defaultS3Location":{"type":"string","description":"The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace."},"description":{"type":"string","description":"A detailed description of the Studio."},"encryptionKeyArn":{"type":"string","description":"The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3.","replaceOnChanges":true},"engineSecurityGroupId":{"type":"string","description":"The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.","replaceOnChanges":true},"idcInstanceArn":{"type":"string","description":"The ARN of the IAM Identity Center instance to create the Studio application.","replaceOnChanges":true},"idcUserAssignment":{"$ref":"#/types/aws-native:emr:StudioIdcUserAssignment","description":"Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio.","replaceOnChanges":true},"idpAuthUrl":{"type":"string","description":"Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL."},"idpRelayStateParameterName":{"type":"string","description":"The name of relay state parameter for external Identity Provider."},"name":{"type":"string","description":"A descriptive name for the Amazon EMR Studio."},"serviceRole":{"type":"string","description":"The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.","replaceOnChanges":true},"studioId":{"type":"string","description":"The ID of the EMR Studio."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters."},"trustedIdentityPropagationEnabled":{"type":"boolean","description":"A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false.","replaceOnChanges":true},"url":{"type":"string","description":"The unique Studio access URL."},"userRole":{"type":"string","description":"The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.","replaceOnChanges":true},"workspaceSecurityGroupId":{"type":"string","description":"The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.","replaceOnChanges":true}},"type":"object","required":["arn","authMode","defaultS3Location","engineSecurityGroupId","name","serviceRole","studioId","subnetIds","url","vpcId","workspaceSecurityGroupId"],"inputProperties":{"authMode":{"$ref":"#/types/aws-native:emr:StudioAuthMode","description":"Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication."},"defaultS3Location":{"type":"string","description":"The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace."},"description":{"type":"string","description":"A detailed description of the Studio."},"encryptionKeyArn":{"type":"string","description":"The AWS KMS key identifier (ARN) used to encrypt AWS EMR Studio workspace and notebook files when backed up to AWS S3."},"engineSecurityGroupId":{"type":"string","description":"The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId."},"idcInstanceArn":{"type":"string","description":"The ARN of the IAM Identity Center instance to create the Studio application."},"idcUserAssignment":{"$ref":"#/types/aws-native:emr:StudioIdcUserAssignment","description":"Specifies whether IAM Identity Center user assignment is REQUIRED or OPTIONAL. If the value is set to REQUIRED, users must be explicitly assigned to the Studio application to access the Studio."},"idpAuthUrl":{"type":"string","description":"Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL."},"idpRelayStateParameterName":{"type":"string","description":"The name of relay state parameter for external Identity Provider."},"name":{"type":"string","description":"A descriptive name for the Amazon EMR Studio."},"serviceRole":{"type":"string","description":"The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters."},"trustedIdentityPropagationEnabled":{"type":"boolean","description":"A Boolean indicating whether to enable Trusted identity propagation for the Studio. The default value is false."},"userRole":{"type":"string","description":"The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies."},"vpcId":{"type":"string","description":"The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio."},"workspaceSecurityGroupId":{"type":"string","description":"The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId."}},"requiredInputs":["authMode","defaultS3Location","engineSecurityGroupId","serviceRole","subnetIds","vpcId","workspaceSecurityGroupId"]},"aws-native:emr:StudioSessionMapping":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"identityName":{"type":"string","description":"The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.","replaceOnChanges":true},"identityType":{"$ref":"#/types/aws-native:emr:StudioSessionMappingIdentityType","description":"Specifies whether the identity to map to the Studio is a user or a group.","replaceOnChanges":true},"sessionPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles."},"studioId":{"type":"string","description":"The ID of the Amazon EMR Studio to which the user or group will be mapped.","replaceOnChanges":true}},"type":"object","required":["identityName","identityType","sessionPolicyArn","studioId"],"inputProperties":{"identityName":{"type":"string","description":"The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified."},"identityType":{"$ref":"#/types/aws-native:emr:StudioSessionMappingIdentityType","description":"Specifies whether the identity to map to the Studio is a user or a group."},"sessionPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles."},"studioId":{"type":"string","description":"The ID of the Amazon EMR Studio to which the user or group will be mapped."}},"requiredInputs":["identityName","identityType","sessionPolicyArn","studioId"]},"aws-native:emr:WalWorkspace":{"description":"Resource schema for AWS::EMR::WALWorkspace Type","properties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"walWorkspaceName":{"type":"string","description":"The name of the emrwal container","replaceOnChanges":true}},"type":"object","inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"walWorkspaceName":{"type":"string","description":"The name of the emrwal container"}}},"aws-native:emrcontainers:Endpoint":{"description":"Resource Schema of AWS::EMRContainers::Endpoint Type","properties":{"arn":{"type":"string","description":"The ARN of the managed endpoint."},"awsId":{"type":"string","description":"The ID of the managed endpoint."},"certificateAuthority":{"$ref":"#/types/aws-native:emrcontainers:EndpointCertificate","description":"The certificate authority for the managed endpoint."},"configurationOverrides":{"$ref":"#/types/aws-native:emrcontainers:EndpointConfigurationOverrides","description":"The configuration overrides for the managed endpoint.","replaceOnChanges":true},"createdAt":{"type":"string","description":"The date and time when the managed endpoint was created."},"executionRoleArn":{"type":"string","description":"The execution role ARN for the managed endpoint.","replaceOnChanges":true},"failureReason":{"type":"string","description":"The reason for a failed managed endpoint."},"name":{"type":"string","description":"The name of the managed endpoint.","replaceOnChanges":true},"releaseLabel":{"type":"string","description":"The Amazon EMR release label.","replaceOnChanges":true},"securityGroup":{"type":"string","description":"The security group associated with the managed endpoint."},"serverUrl":{"type":"string","description":"The server URL of the managed endpoint."},"state":{"type":"string","description":"The state of the managed endpoint."},"stateDetails":{"type":"string","description":"Additional details about the state of the managed endpoint."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this managed endpoint."},"type":{"type":"string","description":"The type of the managed endpoint.","replaceOnChanges":true},"virtualClusterId":{"type":"string","description":"The ID of the virtual cluster for which the managed endpoint is created.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","certificateAuthority","createdAt","executionRoleArn","failureReason","releaseLabel","securityGroup","serverUrl","state","stateDetails","type","virtualClusterId"],"inputProperties":{"configurationOverrides":{"$ref":"#/types/aws-native:emrcontainers:EndpointConfigurationOverrides","description":"The configuration overrides for the managed endpoint."},"executionRoleArn":{"type":"string","description":"The execution role ARN for the managed endpoint."},"name":{"type":"string","description":"The name of the managed endpoint."},"releaseLabel":{"type":"string","description":"The Amazon EMR release label."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this managed endpoint."},"type":{"type":"string","description":"The type of the managed endpoint."},"virtualClusterId":{"type":"string","description":"The ID of the virtual cluster for which the managed endpoint is created."}},"requiredInputs":["executionRoleArn","releaseLabel","type","virtualClusterId"]},"aws-native:emrcontainers:SecurityConfiguration":{"description":"Resource Schema of AWS::EMRContainers::SecurityConfiguration Type","properties":{"arn":{"type":"string","description":"The ARN of the security configuration."},"awsId":{"type":"string","description":"The ID of the security configuration."},"containerProvider":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationContainerProvider","description":"Container provider for the security configuration.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the security configuration.","replaceOnChanges":true},"securityConfigurationData":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationData","description":"Security configuration input for the security configuration.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this security configuration."}},"type":"object","required":["arn","awsId","securityConfigurationData"],"inputProperties":{"containerProvider":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationContainerProvider","description":"Container provider for the security configuration."},"name":{"type":"string","description":"The name of the security configuration."},"securityConfigurationData":{"$ref":"#/types/aws-native:emrcontainers:SecurityConfigurationData","description":"Security configuration input for the security configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this security configuration."}},"requiredInputs":["securityConfigurationData"]},"aws-native:emrcontainers:VirtualCluster":{"description":"Resource Schema of AWS::EMRContainers::VirtualCluster Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testVirtualCluster = new AwsNative.EmrContainers.VirtualCluster(\"testVirtualCluster\", new()\n    {\n        Name = \"VirtualClusterName\",\n        ContainerProvider = new AwsNative.EmrContainers.Inputs.VirtualClusterContainerProviderArgs\n        {\n            Type = \"EKS\",\n            Id = \"EKSClusterName\",\n            Info = new AwsNative.EmrContainers.Inputs.VirtualClusterContainerInfoArgs\n            {\n                EksInfo = new AwsNative.EmrContainers.Inputs.VirtualClusterEksInfoArgs\n                {\n                    Namespace = \"EKSNamespace\",\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key1\",\n                Value = \"Value1\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"primaryId\"] = null,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/emrcontainers\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := emrcontainers.NewVirtualCluster(ctx, \"testVirtualCluster\", \u0026emrcontainers.VirtualClusterArgs{\n\t\t\tName: pulumi.String(\"VirtualClusterName\"),\n\t\t\tContainerProvider: \u0026emrcontainers.VirtualClusterContainerProviderArgs{\n\t\t\t\tType: pulumi.String(\"EKS\"),\n\t\t\t\tId:   pulumi.String(\"EKSClusterName\"),\n\t\t\t\tInfo: \u0026emrcontainers.VirtualClusterContainerInfoArgs{\n\t\t\t\t\tEksInfo: \u0026emrcontainers.VirtualClusterEksInfoArgs{\n\t\t\t\t\t\tNamespace: pulumi.String(\"EKSNamespace\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"primaryId\", nil)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testVirtualCluster = new aws_native.emrcontainers.VirtualCluster(\"testVirtualCluster\", {\n    name: \"VirtualClusterName\",\n    containerProvider: {\n        type: \"EKS\",\n        id: \"EKSClusterName\",\n        info: {\n            eksInfo: {\n                namespace: \"EKSNamespace\",\n            },\n        },\n    },\n    tags: [{\n        key: \"Key1\",\n        value: \"Value1\",\n    }],\n});\nexport const primaryId = null;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_virtual_cluster = aws_native.emrcontainers.VirtualCluster(\"testVirtualCluster\",\n    name=\"VirtualClusterName\",\n    container_provider={\n        \"type\": \"EKS\",\n        \"id\": \"EKSClusterName\",\n        \"info\": {\n            \"eks_info\": {\n                \"namespace\": \"EKSNamespace\",\n            },\n        },\n    },\n    tags=[{\n        \"key\": \"Key1\",\n        \"value\": \"Value1\",\n    }])\npulumi.export(\"primaryId\", None)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testVirtualCluster = new AwsNative.EmrContainers.VirtualCluster(\"testVirtualCluster\", new()\n    {\n        Name = \"VirtualClusterName\",\n        ContainerProvider = new AwsNative.EmrContainers.Inputs.VirtualClusterContainerProviderArgs\n        {\n            Type = \"EKS\",\n            Id = \"EKSClusterName\",\n            Info = new AwsNative.EmrContainers.Inputs.VirtualClusterContainerInfoArgs\n            {\n                EksInfo = new AwsNative.EmrContainers.Inputs.VirtualClusterEksInfoArgs\n                {\n                    Namespace = \"EKSNamespace\",\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key1\",\n                Value = \"Value1\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"primaryId\"] = testVirtualCluster.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/emrcontainers\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttestVirtualCluster, err := emrcontainers.NewVirtualCluster(ctx, \"testVirtualCluster\", \u0026emrcontainers.VirtualClusterArgs{\n\t\t\tName: pulumi.String(\"VirtualClusterName\"),\n\t\t\tContainerProvider: \u0026emrcontainers.VirtualClusterContainerProviderArgs{\n\t\t\t\tType: pulumi.String(\"EKS\"),\n\t\t\t\tId:   pulumi.String(\"EKSClusterName\"),\n\t\t\t\tInfo: \u0026emrcontainers.VirtualClusterContainerInfoArgs{\n\t\t\t\t\tEksInfo: \u0026emrcontainers.VirtualClusterEksInfoArgs{\n\t\t\t\t\t\tNamespace: pulumi.String(\"EKSNamespace\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"primaryId\", testVirtualCluster.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testVirtualCluster = new aws_native.emrcontainers.VirtualCluster(\"testVirtualCluster\", {\n    name: \"VirtualClusterName\",\n    containerProvider: {\n        type: \"EKS\",\n        id: \"EKSClusterName\",\n        info: {\n            eksInfo: {\n                namespace: \"EKSNamespace\",\n            },\n        },\n    },\n    tags: [{\n        key: \"Key1\",\n        value: \"Value1\",\n    }],\n});\nexport const primaryId = testVirtualCluster.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_virtual_cluster = aws_native.emrcontainers.VirtualCluster(\"testVirtualCluster\",\n    name=\"VirtualClusterName\",\n    container_provider={\n        \"type\": \"EKS\",\n        \"id\": \"EKSClusterName\",\n        \"info\": {\n            \"eks_info\": {\n                \"namespace\": \"EKSNamespace\",\n            },\n        },\n    },\n    tags=[{\n        \"key\": \"Key1\",\n        \"value\": \"Value1\",\n    }])\npulumi.export(\"primaryId\", test_virtual_cluster.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the project, such as `arn:aws:emr-containers:us-east-1:123456789012:/virtualclusters/ab4rp1abcs8xz47n3x0example` ."},"awsId":{"type":"string","description":"Id of the virtual cluster."},"containerProvider":{"$ref":"#/types/aws-native:emrcontainers:VirtualClusterContainerProvider","description":"Container provider of the virtual cluster.","replaceOnChanges":true},"name":{"type":"string","description":"Name of the virtual cluster.","replaceOnChanges":true},"securityConfigurationId":{"type":"string","description":"The ID of the security configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this virtual cluster."}},"type":"object","required":["arn","awsId","containerProvider","name"],"inputProperties":{"containerProvider":{"$ref":"#/types/aws-native:emrcontainers:VirtualClusterContainerProvider","description":"Container provider of the virtual cluster."},"name":{"type":"string","description":"Name of the virtual cluster."},"securityConfigurationId":{"type":"string","description":"The ID of the security configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this virtual cluster."}},"requiredInputs":["containerProvider"]},"aws-native:emrserverless:Application":{"description":"Resource schema for AWS::EMRServerless::Application Type","properties":{"applicationId":{"type":"string","description":"The ID of the EMR Serverless Application."},"architecture":{"$ref":"#/types/aws-native:emrserverless:ApplicationArchitecture","description":"The CPU architecture of an application."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the EMR Serverless Application."},"autoStartConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationAutoStartConfiguration","description":"Configuration for Auto Start of Application."},"autoStopConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationAutoStopConfiguration","description":"Configuration for Auto Stop of Application."},"identityCenterConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationIdentityCenterConfiguration","description":"The IAM IdentityCenter configuration for trusted-identity-propagation on this application. Supported with release labels emr-7.8.0 and above."},"imageConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationImageConfigurationInput","description":"The image configuration applied to all worker types."},"initialCapacity":{"type":"array","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationInitialCapacityConfigKeyValuePair"},"description":"Initial capacity initialized when an Application is started."},"interactiveConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationInteractiveConfiguration","description":"The interactive configuration object that enables the interactive use cases for an application."},"maximumCapacity":{"$ref":"#/types/aws-native:emrserverless:ApplicationMaximumAllowedResources","description":"Maximum allowed cumulative resources for an Application. No new resources will be created once the limit is hit."},"monitoringConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationMonitoringConfiguration","description":"A configuration specification to be used when provisioning an application. A configuration consists of a classification, properties, and optional nested configurations. A classification refers to an application-specific configuration file. Properties are the settings you want to change in that file."},"name":{"type":"string","description":"User friendly Application name.","replaceOnChanges":true},"networkConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationNetworkConfiguration","description":"Network Configuration for customer VPC connectivity."},"releaseLabel":{"type":"string","description":"EMR release label."},"runtimeConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationConfigurationObject"},"description":"The [Configuration](https://docs.aws.amazon.com/emr-serverless/latest/APIReference/API_Configuration.html) specifications of an application. Each configuration consists of a classification and properties. You use this parameter when creating or updating an application. To see the runtimeConfiguration object of an application, run the [GetApplication](https://docs.aws.amazon.com/emr-serverless/latest/APIReference/API_GetApplication.html) API operation."},"schedulerConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationSchedulerConfiguration","description":"The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tag map with key and value"},"type":{"type":"string","description":"The type of the application","replaceOnChanges":true},"workerTypeSpecifications":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:emrserverless:ApplicationWorkerTypeSpecificationInput"},"description":"The key-value pairs that specify worker type to WorkerTypeSpecificationInput. This parameter must contain all valid worker types for a Spark or Hive application. Valid worker types include Driver and Executor for Spark applications and HiveDriver and TezTask for Hive applications. You can either set image details in this parameter for each worker type, or in imageConfiguration for all worker types."}},"type":"object","required":["applicationId","arn","releaseLabel","type"],"inputProperties":{"architecture":{"$ref":"#/types/aws-native:emrserverless:ApplicationArchitecture","description":"The CPU architecture of an application."},"autoStartConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationAutoStartConfiguration","description":"Configuration for Auto Start of Application."},"autoStopConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationAutoStopConfiguration","description":"Configuration for Auto Stop of Application."},"identityCenterConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationIdentityCenterConfiguration","description":"The IAM IdentityCenter configuration for trusted-identity-propagation on this application. Supported with release labels emr-7.8.0 and above."},"imageConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationImageConfigurationInput","description":"The image configuration applied to all worker types."},"initialCapacity":{"type":"array","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationInitialCapacityConfigKeyValuePair"},"description":"Initial capacity initialized when an Application is started."},"interactiveConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationInteractiveConfiguration","description":"The interactive configuration object that enables the interactive use cases for an application."},"maximumCapacity":{"$ref":"#/types/aws-native:emrserverless:ApplicationMaximumAllowedResources","description":"Maximum allowed cumulative resources for an Application. No new resources will be created once the limit is hit."},"monitoringConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationMonitoringConfiguration","description":"A configuration specification to be used when provisioning an application. A configuration consists of a classification, properties, and optional nested configurations. A classification refers to an application-specific configuration file. Properties are the settings you want to change in that file."},"name":{"type":"string","description":"User friendly Application name."},"networkConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationNetworkConfiguration","description":"Network Configuration for customer VPC connectivity."},"releaseLabel":{"type":"string","description":"EMR release label."},"runtimeConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationConfigurationObject"},"description":"The [Configuration](https://docs.aws.amazon.com/emr-serverless/latest/APIReference/API_Configuration.html) specifications of an application. Each configuration consists of a classification and properties. You use this parameter when creating or updating an application. To see the runtimeConfiguration object of an application, run the [GetApplication](https://docs.aws.amazon.com/emr-serverless/latest/APIReference/API_GetApplication.html) API operation."},"schedulerConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationSchedulerConfiguration","description":"The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tag map with key and value"},"type":{"type":"string","description":"The type of the application"},"workerTypeSpecifications":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:emrserverless:ApplicationWorkerTypeSpecificationInput"},"description":"The key-value pairs that specify worker type to WorkerTypeSpecificationInput. This parameter must contain all valid worker types for a Spark or Hive application. Valid worker types include Driver and Executor for Spark applications and HiveDriver and TezTask for Hive applications. You can either set image details in this parameter for each worker type, or in imageConfiguration for all worker types."}},"requiredInputs":["releaseLabel","type"]},"aws-native:entityresolution:IdMappingWorkflow":{"description":"IdMappingWorkflow defined in AWS Entity Resolution service","properties":{"createdAt":{"type":"string"},"description":{"type":"string","description":"The description of the IdMappingWorkflow"},"idMappingIncrementalRunConfig":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingIncrementalRunConfig"},"idMappingTechniques":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingTechniques","description":"An object which defines the ID mapping technique and any additional configurations."},"inputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowInputSource"},"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` ."},"outputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowOutputSource"},"description":"A list of `IdMappingWorkflowOutputSource` objects, each of which contains fields `outputS3Path` and `KMSArn` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"updatedAt":{"type":"string"},"workflowArn":{"type":"string"},"workflowName":{"type":"string","description":"The name of the IdMappingWorkflow","replaceOnChanges":true}},"type":"object","required":["createdAt","idMappingTechniques","inputSourceConfig","roleArn","updatedAt","workflowArn","workflowName"],"inputProperties":{"description":{"type":"string","description":"The description of the IdMappingWorkflow"},"idMappingIncrementalRunConfig":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingIncrementalRunConfig"},"idMappingTechniques":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingTechniques","description":"An object which defines the ID mapping technique and any additional configurations."},"inputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowInputSource"},"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` ."},"outputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowOutputSource"},"description":"A list of `IdMappingWorkflowOutputSource` objects, each of which contains fields `outputS3Path` and `KMSArn` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"workflowName":{"type":"string","description":"The name of the IdMappingWorkflow"}},"requiredInputs":["idMappingTechniques","inputSourceConfig","roleArn"]},"aws-native:entityresolution:IdNamespace":{"description":"IdNamespace defined in AWS Entity Resolution service","properties":{"createdAt":{"type":"string","description":"The date and time when the IdNamespace was created"},"description":{"type":"string","description":"The description of the ID namespace."},"idMappingWorkflowProperties":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceIdMappingWorkflowProperties"},"description":"Determines the properties of `IdMappingWorflow` where this `IdNamespace` can be used as a `Source` or a `Target` ."},"idNamespaceArn":{"type":"string","description":"The arn associated with the IdNamespace"},"idNamespaceName":{"type":"string","description":"The name of the ID namespace.","replaceOnChanges":true},"inputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceInputSource"},"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to access the resources defined in this `IdNamespace` on your behalf as part of the workflow run."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"type":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceType","description":"The type of ID namespace. There are two types: `SOURCE` and `TARGET` .\n\nThe `SOURCE` contains configurations for `sourceId` data that will be processed in an ID mapping workflow.\n\nThe `TARGET` contains a configuration of `targetId` which all `sourceIds` will resolve to."},"updatedAt":{"type":"string","description":"The date and time when the IdNamespace was updated"}},"type":"object","required":["createdAt","idNamespaceArn","idNamespaceName","type","updatedAt"],"inputProperties":{"description":{"type":"string","description":"The description of the ID namespace."},"idMappingWorkflowProperties":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceIdMappingWorkflowProperties"},"description":"Determines the properties of `IdMappingWorflow` where this `IdNamespace` can be used as a `Source` or a `Target` ."},"idNamespaceName":{"type":"string","description":"The name of the ID namespace."},"inputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceInputSource"},"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to access the resources defined in this `IdNamespace` on your behalf as part of the workflow run."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"type":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceType","description":"The type of ID namespace. There are two types: `SOURCE` and `TARGET` .\n\nThe `SOURCE` contains configurations for `sourceId` data that will be processed in an ID mapping workflow.\n\nThe `TARGET` contains a configuration of `targetId` which all `sourceIds` will resolve to."}},"requiredInputs":["type"]},"aws-native:entityresolution:MatchingWorkflow":{"description":"MatchingWorkflow defined in AWS Entity Resolution service","properties":{"createdAt":{"type":"string"},"description":{"type":"string","description":"The description of the MatchingWorkflow"},"incrementalRunConfig":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowIncrementalRunConfig","description":"Optional. An object that defines the incremental run type. This object contains only the `incrementalRunType` field, which appears as \"Automatic\" in the console.\n\n\u003e For workflows where `resolutionType` is `ML_MATCHING` or `PROVIDER` , incremental processing is not supported."},"inputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowInputSource"},"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` ."},"outputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowOutputSource"},"description":"A list of `OutputSource` objects, each of which contains fields `outputS3Path` , `applyNormalization` , `KMSArn` , and `output` ."},"resolutionTechniques":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowResolutionTechniques","description":"An object which defines the `resolutionType` and the `ruleBasedProperties` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"updatedAt":{"type":"string"},"workflowArn":{"type":"string"},"workflowName":{"type":"string","description":"The name of the MatchingWorkflow","replaceOnChanges":true}},"type":"object","required":["createdAt","inputSourceConfig","outputSourceConfig","resolutionTechniques","roleArn","updatedAt","workflowArn","workflowName"],"inputProperties":{"description":{"type":"string","description":"The description of the MatchingWorkflow"},"incrementalRunConfig":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowIncrementalRunConfig","description":"Optional. An object that defines the incremental run type. This object contains only the `incrementalRunType` field, which appears as \"Automatic\" in the console.\n\n\u003e For workflows where `resolutionType` is `ML_MATCHING` or `PROVIDER` , incremental processing is not supported."},"inputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowInputSource"},"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` ."},"outputSourceConfig":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowOutputSource"},"description":"A list of `OutputSource` objects, each of which contains fields `outputS3Path` , `applyNormalization` , `KMSArn` , and `output` ."},"resolutionTechniques":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowResolutionTechniques","description":"An object which defines the `resolutionType` and the `ruleBasedProperties` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"workflowName":{"type":"string","description":"The name of the MatchingWorkflow"}},"requiredInputs":["inputSourceConfig","outputSourceConfig","resolutionTechniques","roleArn"]},"aws-native:entityresolution:PolicyStatement":{"description":"Policy Statement defined in AWS Entity Resolution Service","properties":{"action":{"type":"array","items":{"type":"string"},"description":"The action that the principal can use on the resource.\n\nFor example, `entityresolution:GetIdMappingJob` , `entityresolution:GetMatchingJob` ."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource that will be accessed by the principal.","replaceOnChanges":true},"condition":{"type":"string","description":"A set of condition keys that you can use in key policies."},"effect":{"$ref":"#/types/aws-native:entityresolution:PolicyStatementStatementEffect","description":"Determines whether the permissions specified in the policy are to be allowed ( `Allow` ) or denied ( `Deny` ).\n\n\u003e If you set the value of the `effect` parameter to `Deny` for the `AddPolicyStatement` operation, you must also set the value of the `effect` parameter in the `policy` to `Deny` for the `PutPolicy` operation."},"principal":{"type":"array","items":{"type":"string"},"description":"The AWS service or AWS account that can access the resource defined as ARN."},"statementId":{"type":"string","description":"A statement identifier that differentiates the statement from others in the same policy.","replaceOnChanges":true}},"type":"object","required":["arn","statementId"],"inputProperties":{"action":{"type":"array","items":{"type":"string"},"description":"The action that the principal can use on the resource.\n\nFor example, `entityresolution:GetIdMappingJob` , `entityresolution:GetMatchingJob` ."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource that will be accessed by the principal."},"condition":{"type":"string","description":"A set of condition keys that you can use in key policies."},"effect":{"$ref":"#/types/aws-native:entityresolution:PolicyStatementStatementEffect","description":"Determines whether the permissions specified in the policy are to be allowed ( `Allow` ) or denied ( `Deny` ).\n\n\u003e If you set the value of the `effect` parameter to `Deny` for the `AddPolicyStatement` operation, you must also set the value of the `effect` parameter in the `policy` to `Deny` for the `PutPolicy` operation."},"principal":{"type":"array","items":{"type":"string"},"description":"The AWS service or AWS account that can access the resource defined as ARN."},"statementId":{"type":"string","description":"A statement identifier that differentiates the statement from others in the same policy."}},"requiredInputs":["arn","statementId"]},"aws-native:entityresolution:SchemaMapping":{"description":"SchemaMapping defined in AWS Entity Resolution service","properties":{"createdAt":{"type":"string"},"description":{"type":"string","description":"The description of the SchemaMapping"},"hasWorkflows":{"type":"boolean"},"mappedInputFields":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:SchemaMappingSchemaInputAttribute"},"description":"The SchemaMapping attributes input"},"schemaArn":{"type":"string"},"schemaName":{"type":"string","description":"The name of the SchemaMapping","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."},"updatedAt":{"type":"string"}},"type":"object","required":["createdAt","hasWorkflows","mappedInputFields","schemaArn","schemaName","updatedAt"],"inputProperties":{"description":{"type":"string","description":"The description of the SchemaMapping"},"mappedInputFields":{"type":"array","items":{"$ref":"#/types/aws-native:entityresolution:SchemaMappingSchemaInputAttribute"},"description":"The SchemaMapping attributes input"},"schemaName":{"type":"string","description":"The name of the SchemaMapping"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"requiredInputs":["mappedInputFields","schemaName"]},"aws-native:events:ApiDestination":{"description":"Resource Type definition for AWS::Events::ApiDestination.","properties":{"arn":{"type":"string","description":"The arn of the api destination."},"arnForPolicy":{"type":"string","description":"The arn of the api destination to be used in IAM policies."},"connectionArn":{"type":"string","description":"The arn of the connection."},"description":{"type":"string","description":"A description for the API destination to create."},"httpMethod":{"$ref":"#/types/aws-native:events:ApiDestinationHttpMethod","description":"The method to use for the request to the HTTP invocation endpoint."},"invocationEndpoint":{"type":"string","description":"Url endpoint to invoke."},"invocationRateLimitPerSecond":{"type":"integer","description":"The maximum number of requests per second to send to the HTTP invocation endpoint."},"name":{"type":"string","description":"Name of the apiDestination.","replaceOnChanges":true}},"type":"object","required":["arn","arnForPolicy","connectionArn","httpMethod","invocationEndpoint"],"inputProperties":{"connectionArn":{"type":"string","description":"The arn of the connection."},"description":{"type":"string","description":"A description for the API destination to create."},"httpMethod":{"$ref":"#/types/aws-native:events:ApiDestinationHttpMethod","description":"The method to use for the request to the HTTP invocation endpoint."},"invocationEndpoint":{"type":"string","description":"Url endpoint to invoke."},"invocationRateLimitPerSecond":{"type":"integer","description":"The maximum number of requests per second to send to the HTTP invocation endpoint."},"name":{"type":"string","description":"Name of the apiDestination."}},"requiredInputs":["connectionArn","httpMethod","invocationEndpoint"]},"aws-native:events:Archive":{"description":"Resource Type definition for AWS::Events::Archive","properties":{"archiveName":{"type":"string","description":"The name for the archive to create.","replaceOnChanges":true},"arn":{"type":"string","description":"The ARN of the archive created."},"description":{"type":"string","description":"A description for the archive."},"eventPattern":{"$ref":"pulumi.json#/Any","description":"An event pattern to use to filter events sent to the archive.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::Archive` for more information about the expected schema for this property."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this archive. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nIf you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt the archive.\n\nFor more information, see [Identify and view keys](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html) in the *AWS Key Management Service Developer Guide* .\n\n\u003e If you have specified that EventBridge use a customer managed key for encrypting the source event bus, we strongly recommend you also specify a customer managed key for any archives for the event bus as well.\n\u003e \n\u003e For more information, see [Encrypting archives](https://docs.aws.amazon.com/eventbridge/latest/userguide/encryption-archives.html) in the *Amazon EventBridge User Guide* ."},"retentionDays":{"type":"integer","description":"The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely"},"sourceArn":{"type":"string","description":"The ARN of the event bus that sends events to the archive.","replaceOnChanges":true}},"type":"object","required":["arn","sourceArn"],"inputProperties":{"archiveName":{"type":"string","description":"The name for the archive to create."},"description":{"type":"string","description":"A description for the archive."},"eventPattern":{"$ref":"pulumi.json#/Any","description":"An event pattern to use to filter events sent to the archive.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::Archive` for more information about the expected schema for this property."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this archive. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nIf you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt the archive.\n\nFor more information, see [Identify and view keys](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html) in the *AWS Key Management Service Developer Guide* .\n\n\u003e If you have specified that EventBridge use a customer managed key for encrypting the source event bus, we strongly recommend you also specify a customer managed key for any archives for the event bus as well.\n\u003e \n\u003e For more information, see [Encrypting archives](https://docs.aws.amazon.com/eventbridge/latest/userguide/encryption-archives.html) in the *Amazon EventBridge User Guide* ."},"retentionDays":{"type":"integer","description":"The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely"},"sourceArn":{"type":"string","description":"The ARN of the event bus that sends events to the archive."}},"requiredInputs":["sourceArn"]},"aws-native:events:Connection":{"description":"Resource Type definition for AWS::Events::Connection.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var pagerDutyAPIKeyParam = config.Require(\"pagerDutyAPIKeyParam\");\n    var myConnection = new AwsNative.Events.Connection(\"myConnection\", new()\n    {\n        AuthorizationType = AwsNative.Events.ConnectionAuthorizationType.ApiKey,\n        Description = \"Connection to PagerDuty API\",\n        AuthParameters = new AwsNative.Events.Inputs.ConnectionAuthParametersArgs\n        {\n            ApiKeyAuthParameters = new AwsNative.Events.Inputs.ConnectionApiKeyAuthParametersArgs\n            {\n                ApiKeyName = \"PagerDuty Authorization\",\n                ApiKeyValue = pagerDutyAPIKeyParam,\n            },\n        },\n    });\n\n    var myApiDestination = new AwsNative.Events.ApiDestination(\"myApiDestination\", new()\n    {\n        ConnectionArn = myConnection.Arn,\n        Description = \"API Destination to send events to PagerDuty\",\n        HttpMethod = AwsNative.Events.ApiDestinationHttpMethod.Post,\n        InvocationEndpoint = \"https://events.pagerduty.com/v2/enqueue\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/events\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tpagerDutyAPIKeyParam := cfg.Require(\"pagerDutyAPIKeyParam\")\n\t\tmyConnection, err := events.NewConnection(ctx, \"myConnection\", \u0026events.ConnectionArgs{\n\t\t\tAuthorizationType: events.ConnectionAuthorizationTypeApiKey,\n\t\t\tDescription:       pulumi.String(\"Connection to PagerDuty API\"),\n\t\t\tAuthParameters: \u0026events.ConnectionAuthParametersArgs{\n\t\t\t\tApiKeyAuthParameters: \u0026events.ConnectionApiKeyAuthParametersArgs{\n\t\t\t\t\tApiKeyName:  pulumi.String(\"PagerDuty Authorization\"),\n\t\t\t\t\tApiKeyValue: pulumi.String(pulumi.String(pagerDutyAPIKeyParam)),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = events.NewApiDestination(ctx, \"myApiDestination\", \u0026events.ApiDestinationArgs{\n\t\t\tConnectionArn:      myConnection.Arn,\n\t\t\tDescription:        pulumi.String(\"API Destination to send events to PagerDuty\"),\n\t\t\tHttpMethod:         events.ApiDestinationHttpMethodPost,\n\t\t\tInvocationEndpoint: pulumi.String(\"https://events.pagerduty.com/v2/enqueue\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst pagerDutyAPIKeyParam = config.require(\"pagerDutyAPIKeyParam\");\nconst myConnection = new aws_native.events.Connection(\"myConnection\", {\n    authorizationType: aws_native.events.ConnectionAuthorizationType.ApiKey,\n    description: \"Connection to PagerDuty API\",\n    authParameters: {\n        apiKeyAuthParameters: {\n            apiKeyName: \"PagerDuty Authorization\",\n            apiKeyValue: pagerDutyAPIKeyParam,\n        },\n    },\n});\nconst myApiDestination = new aws_native.events.ApiDestination(\"myApiDestination\", {\n    connectionArn: myConnection.arn,\n    description: \"API Destination to send events to PagerDuty\",\n    httpMethod: aws_native.events.ApiDestinationHttpMethod.Post,\n    invocationEndpoint: \"https://events.pagerduty.com/v2/enqueue\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\npager_duty_api_key_param = config.require(\"pagerDutyAPIKeyParam\")\nmy_connection = aws_native.events.Connection(\"myConnection\",\n    authorization_type=aws_native.events.ConnectionAuthorizationType.API_KEY,\n    description=\"Connection to PagerDuty API\",\n    auth_parameters={\n        \"api_key_auth_parameters\": {\n            \"api_key_name\": \"PagerDuty Authorization\",\n            \"api_key_value\": pager_duty_api_key_param,\n        },\n    })\nmy_api_destination = aws_native.events.ApiDestination(\"myApiDestination\",\n    connection_arn=my_connection.arn,\n    description=\"API Destination to send events to PagerDuty\",\n    http_method=aws_native.events.ApiDestinationHttpMethod.POST,\n    invocation_endpoint=\"https://events.pagerduty.com/v2/enqueue\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The arn of the connection resource."},"arnForPolicy":{"type":"string","description":"The arn of the connection resource to be used in IAM policies."},"authParameters":{"$ref":"#/types/aws-native:events:ConnectionAuthParameters","description":"The authorization parameters to use to authorize with the endpoint.\n\nYou must include only authorization parameters for the `AuthorizationType` you specify."},"authorizationType":{"$ref":"#/types/aws-native:events:ConnectionAuthorizationType","description":"The type of authorization to use for the connection.\n\n\u003e OAUTH tokens are refreshed when a 401 or 407 response is returned."},"description":{"type":"string","description":"Description of the connection."},"invocationConnectivityParameters":{"$ref":"#/types/aws-native:events:InvocationConnectivityParametersProperties","description":"The private resource the HTTP request will be sent to."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this connection. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nIf you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt the connection.\n\nFor more information, see [Identify and view keys](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html) in the *AWS Key Management Service Developer Guide* ."},"name":{"type":"string","description":"Name of the connection.","replaceOnChanges":true},"secretArn":{"type":"string","description":"The arn of the secrets manager secret created in the customer account."}},"type":"object","required":["arn","arnForPolicy","secretArn"],"inputProperties":{"authParameters":{"$ref":"#/types/aws-native:events:ConnectionAuthParameters","description":"The authorization parameters to use to authorize with the endpoint.\n\nYou must include only authorization parameters for the `AuthorizationType` you specify."},"authorizationType":{"$ref":"#/types/aws-native:events:ConnectionAuthorizationType","description":"The type of authorization to use for the connection.\n\n\u003e OAUTH tokens are refreshed when a 401 or 407 response is returned."},"description":{"type":"string","description":"Description of the connection."},"invocationConnectivityParameters":{"$ref":"#/types/aws-native:events:InvocationConnectivityParametersProperties","description":"The private resource the HTTP request will be sent to."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this connection. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nIf you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt the connection.\n\nFor more information, see [Identify and view keys](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html) in the *AWS Key Management Service Developer Guide* ."},"name":{"type":"string","description":"Name of the connection."}}},"aws-native:events:Endpoint":{"description":"Resource Type definition for AWS::Events::Endpoint.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleEndpoint = new AwsNative.Events.Endpoint(\"sampleEndpoint\", new()\n    {\n        Name = \"CreateExampleEndpoint\",\n        RoutingConfig = new AwsNative.Events.Inputs.EndpointRoutingConfigArgs\n        {\n            FailoverConfig = new AwsNative.Events.Inputs.EndpointFailoverConfigArgs\n            {\n                Primary = new AwsNative.Events.Inputs.EndpointPrimaryArgs\n                {\n                    HealthCheck = \"arn:aws:route53:::healthcheck/0123456789abc\",\n                },\n                Secondary = new AwsNative.Events.Inputs.EndpointSecondaryArgs\n                {\n                    Route = \"us-east-1\",\n                },\n            },\n        },\n        ReplicationConfig = new AwsNative.Events.Inputs.EndpointReplicationConfigArgs\n        {\n            State = AwsNative.Events.EndpointReplicationState.Enabled,\n        },\n        RoleArn = \"arn:aws:iam::123456789012:role/EndpointReplicationRole\",\n        EventBuses = new[]\n        {\n            new AwsNative.Events.Inputs.EndpointEventBusArgs\n            {\n                EventBusArn = \"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\",\n            },\n            new AwsNative.Events.Inputs.EndpointEventBusArgs\n            {\n                EventBusArn = \"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"sampleEndpointName\"] = sampleEndpoint.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/events\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsampleEndpoint, err := events.NewEndpoint(ctx, \"sampleEndpoint\", \u0026events.EndpointArgs{\n\t\t\tName: pulumi.String(\"CreateExampleEndpoint\"),\n\t\t\tRoutingConfig: \u0026events.EndpointRoutingConfigArgs{\n\t\t\t\tFailoverConfig: \u0026events.EndpointFailoverConfigArgs{\n\t\t\t\t\tPrimary: \u0026events.EndpointPrimaryArgs{\n\t\t\t\t\t\tHealthCheck: pulumi.String(\"arn:aws:route53:::healthcheck/0123456789abc\"),\n\t\t\t\t\t},\n\t\t\t\t\tSecondary: \u0026events.EndpointSecondaryArgs{\n\t\t\t\t\t\tRoute: pulumi.String(\"us-east-1\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tReplicationConfig: \u0026events.EndpointReplicationConfigArgs{\n\t\t\t\tState: events.EndpointReplicationStateEnabled,\n\t\t\t},\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/EndpointReplicationRole\"),\n\t\t\tEventBuses: events.EndpointEventBusArray{\n\t\t\t\t\u0026events.EndpointEventBusArgs{\n\t\t\t\t\tEventBusArn: pulumi.String(\"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\"),\n\t\t\t\t},\n\t\t\t\t\u0026events.EndpointEventBusArgs{\n\t\t\t\t\tEventBusArn: pulumi.String(\"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"sampleEndpointName\", sampleEndpoint.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleEndpoint = new aws_native.events.Endpoint(\"sampleEndpoint\", {\n    name: \"CreateExampleEndpoint\",\n    routingConfig: {\n        failoverConfig: {\n            primary: {\n                healthCheck: \"arn:aws:route53:::healthcheck/0123456789abc\",\n            },\n            secondary: {\n                route: \"us-east-1\",\n            },\n        },\n    },\n    replicationConfig: {\n        state: aws_native.events.EndpointReplicationState.Enabled,\n    },\n    roleArn: \"arn:aws:iam::123456789012:role/EndpointReplicationRole\",\n    eventBuses: [\n        {\n            eventBusArn: \"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\",\n        },\n        {\n            eventBusArn: \"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\",\n        },\n    ],\n});\nexport const sampleEndpointName = sampleEndpoint.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_endpoint = aws_native.events.Endpoint(\"sampleEndpoint\",\n    name=\"CreateExampleEndpoint\",\n    routing_config={\n        \"failover_config\": {\n            \"primary\": {\n                \"health_check\": \"arn:aws:route53:::healthcheck/0123456789abc\",\n            },\n            \"secondary\": {\n                \"route\": \"us-east-1\",\n            },\n        },\n    },\n    replication_config={\n        \"state\": aws_native.events.EndpointReplicationState.ENABLED,\n    },\n    role_arn=\"arn:aws:iam::123456789012:role/EndpointReplicationRole\",\n    event_buses=[\n        {\n            \"event_bus_arn\": \"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\",\n        },\n        {\n            \"event_bus_arn\": \"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\",\n        },\n    ])\npulumi.export(\"sampleEndpointName\", sample_endpoint.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleEndpoint = new AwsNative.Events.Endpoint(\"sampleEndpoint\", new()\n    {\n        Name = \"CreateExampleEndpoint\",\n        RoutingConfig = new AwsNative.Events.Inputs.EndpointRoutingConfigArgs\n        {\n            FailoverConfig = new AwsNative.Events.Inputs.EndpointFailoverConfigArgs\n            {\n                Primary = new AwsNative.Events.Inputs.EndpointPrimaryArgs\n                {\n                    HealthCheck = \"arn:aws:route53:::healthcheck/0123456789abc\",\n                },\n                Secondary = new AwsNative.Events.Inputs.EndpointSecondaryArgs\n                {\n                    Route = \"us-east-1\",\n                },\n            },\n        },\n        ReplicationConfig = new AwsNative.Events.Inputs.EndpointReplicationConfigArgs\n        {\n            State = AwsNative.Events.EndpointReplicationState.Disabled,\n        },\n        EventBuses = new[]\n        {\n            new AwsNative.Events.Inputs.EndpointEventBusArgs\n            {\n                EventBusArn = \"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\",\n            },\n            new AwsNative.Events.Inputs.EndpointEventBusArgs\n            {\n                EventBusArn = \"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"sampleEndpointName\"] = sampleEndpoint.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/events\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tsampleEndpoint, err := events.NewEndpoint(ctx, \"sampleEndpoint\", \u0026events.EndpointArgs{\n\t\t\tName: pulumi.String(\"CreateExampleEndpoint\"),\n\t\t\tRoutingConfig: \u0026events.EndpointRoutingConfigArgs{\n\t\t\t\tFailoverConfig: \u0026events.EndpointFailoverConfigArgs{\n\t\t\t\t\tPrimary: \u0026events.EndpointPrimaryArgs{\n\t\t\t\t\t\tHealthCheck: pulumi.String(\"arn:aws:route53:::healthcheck/0123456789abc\"),\n\t\t\t\t\t},\n\t\t\t\t\tSecondary: \u0026events.EndpointSecondaryArgs{\n\t\t\t\t\t\tRoute: pulumi.String(\"us-east-1\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tReplicationConfig: \u0026events.EndpointReplicationConfigArgs{\n\t\t\t\tState: events.EndpointReplicationStateDisabled,\n\t\t\t},\n\t\t\tEventBuses: events.EndpointEventBusArray{\n\t\t\t\t\u0026events.EndpointEventBusArgs{\n\t\t\t\t\tEventBusArn: pulumi.String(\"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\"),\n\t\t\t\t},\n\t\t\t\t\u0026events.EndpointEventBusArgs{\n\t\t\t\t\tEventBusArn: pulumi.String(\"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"sampleEndpointName\", sampleEndpoint.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleEndpoint = new aws_native.events.Endpoint(\"sampleEndpoint\", {\n    name: \"CreateExampleEndpoint\",\n    routingConfig: {\n        failoverConfig: {\n            primary: {\n                healthCheck: \"arn:aws:route53:::healthcheck/0123456789abc\",\n            },\n            secondary: {\n                route: \"us-east-1\",\n            },\n        },\n    },\n    replicationConfig: {\n        state: aws_native.events.EndpointReplicationState.Disabled,\n    },\n    eventBuses: [\n        {\n            eventBusArn: \"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\",\n        },\n        {\n            eventBusArn: \"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\",\n        },\n    ],\n});\nexport const sampleEndpointName = sampleEndpoint.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_endpoint = aws_native.events.Endpoint(\"sampleEndpoint\",\n    name=\"CreateExampleEndpoint\",\n    routing_config={\n        \"failover_config\": {\n            \"primary\": {\n                \"health_check\": \"arn:aws:route53:::healthcheck/0123456789abc\",\n            },\n            \"secondary\": {\n                \"route\": \"us-east-1\",\n            },\n        },\n    },\n    replication_config={\n        \"state\": aws_native.events.EndpointReplicationState.DISABLED,\n    },\n    event_buses=[\n        {\n            \"event_bus_arn\": \"arn:aws:events:us-west-2:123456789012:event-bus/ExampleEventBus\",\n        },\n        {\n            \"event_bus_arn\": \"arn:aws:events:us-east-1:123456789012:event-bus/ExampleEventBus\",\n        },\n    ])\npulumi.export(\"sampleEndpointName\", sample_endpoint.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the endpoint."},"description":{"type":"string","description":"A description for the endpoint."},"endpointId":{"type":"string","description":"The ID of the endpoint."},"endpointUrl":{"type":"string","description":"The URL of the endpoint."},"eventBuses":{"type":"array","items":{"$ref":"#/types/aws-native:events:EndpointEventBus"},"description":"The event buses being used by the endpoint.\n\n*Exactly* : `2`"},"name":{"type":"string","description":"The name of the endpoint.","replaceOnChanges":true},"replicationConfig":{"$ref":"#/types/aws-native:events:EndpointReplicationConfig","description":"Whether event replication was enabled or disabled for this endpoint. The default state is `ENABLED` which means you must supply a `RoleArn` . If you don't have a `RoleArn` or you don't want event replication enabled, set the state to `DISABLED` ."},"roleArn":{"type":"string","description":"The ARN of the role used by event replication for the endpoint."},"routingConfig":{"$ref":"#/types/aws-native:events:EndpointRoutingConfig","description":"The routing configuration of the endpoint."},"state":{"$ref":"#/types/aws-native:events:EndpointState","description":"The main Region of the endpoint."},"stateReason":{"type":"string","description":"The reason the endpoint is in its current state."}},"type":"object","required":["arn","endpointId","endpointUrl","eventBuses","routingConfig","state","stateReason"],"inputProperties":{"description":{"type":"string","description":"A description for the endpoint."},"eventBuses":{"type":"array","items":{"$ref":"#/types/aws-native:events:EndpointEventBus"},"description":"The event buses being used by the endpoint.\n\n*Exactly* : `2`"},"name":{"type":"string","description":"The name of the endpoint."},"replicationConfig":{"$ref":"#/types/aws-native:events:EndpointReplicationConfig","description":"Whether event replication was enabled or disabled for this endpoint. The default state is `ENABLED` which means you must supply a `RoleArn` . If you don't have a `RoleArn` or you don't want event replication enabled, set the state to `DISABLED` ."},"roleArn":{"type":"string","description":"The ARN of the role used by event replication for the endpoint."},"routingConfig":{"$ref":"#/types/aws-native:events:EndpointRoutingConfig","description":"The routing configuration of the endpoint."}},"requiredInputs":["eventBuses","routingConfig"]},"aws-native:events:EventBus":{"description":"Resource type definition for AWS::Events::EventBus","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the event bus."},"deadLetterConfig":{"$ref":"#/types/aws-native:events:DeadLetterConfigProperties","description":"Dead Letter Queue for the event bus."},"description":{"type":"string","description":"The description of the event bus."},"eventSourceName":{"type":"string","description":"If you are creating a partner event bus, this specifies the partner event source that the new event bus will be matched with."},"kmsKeyIdentifier":{"type":"string","description":"Kms Key Identifier used to encrypt events at rest in the event bus."},"logConfig":{"$ref":"#/types/aws-native:events:LogConfigProperties","description":"The logging configuration settings for vended logs."},"name":{"type":"string","description":"The name of the event bus.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"A JSON string that describes the permission policy statement for the event bus.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::EventBus` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the event bus."}},"type":"object","required":["arn","name"],"inputProperties":{"deadLetterConfig":{"$ref":"#/types/aws-native:events:DeadLetterConfigProperties","description":"Dead Letter Queue for the event bus."},"description":{"type":"string","description":"The description of the event bus."},"eventSourceName":{"type":"string","description":"If you are creating a partner event bus, this specifies the partner event source that the new event bus will be matched with."},"kmsKeyIdentifier":{"type":"string","description":"Kms Key Identifier used to encrypt events at rest in the event bus."},"logConfig":{"$ref":"#/types/aws-native:events:LogConfigProperties","description":"The logging configuration settings for vended logs."},"name":{"type":"string","description":"The name of the event bus."},"policy":{"$ref":"pulumi.json#/Any","description":"A JSON string that describes the permission policy statement for the event bus.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::EventBus` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the event bus."}}},"aws-native:events:EventBusPolicy":{"description":"Resource Type definition for AWS::Events::EventBusPolicy","properties":{"action":{"type":"string","description":"The action that you are enabling the other account to perform."},"condition":{"$ref":"#/types/aws-native:events:EventBusPolicyCondition"},"eventBusName":{"type":"string","description":"The name of the event bus associated with the rule. If you omit this, the default event bus is used.","replaceOnChanges":true},"principal":{"type":"string","description":"The 12-digit AWS account ID that you are permitting to put events to your default event bus. Specify \"*\" to permit any account to put events to your default event bus."},"statement":{"$ref":"pulumi.json#/Any","description":"A JSON string that describes the permission policy statement. You can include a Policy parameter in the request instead of using the StatementId, Action, Principal, or Condition parameters.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::EventBusPolicy` for more information about the expected schema for this property."},"statementId":{"type":"string","description":"An identifier string for the external account that you are granting permissions to","replaceOnChanges":true}},"type":"object","required":["statementId"],"inputProperties":{"action":{"type":"string","description":"The action that you are enabling the other account to perform."},"condition":{"$ref":"#/types/aws-native:events:EventBusPolicyCondition"},"eventBusName":{"type":"string","description":"The name of the event bus associated with the rule. If you omit this, the default event bus is used."},"principal":{"type":"string","description":"The 12-digit AWS account ID that you are permitting to put events to your default event bus. Specify \"*\" to permit any account to put events to your default event bus."},"statement":{"$ref":"pulumi.json#/Any","description":"A JSON string that describes the permission policy statement. You can include a Policy parameter in the request instead of using the StatementId, Action, Principal, or Condition parameters.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::EventBusPolicy` for more information about the expected schema for this property."},"statementId":{"type":"string","description":"An identifier string for the external account that you are granting permissions to"}},"requiredInputs":["statementId"]},"aws-native:events:Rule":{"description":"Resource Type definition for AWS::Events::Rule\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var eventBridgeIAMrole = new AwsNative.Iam.Role(\"eventBridgeIAMrole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = \"events.amazonaws.com\",\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"PutEventsDestinationBus\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = new[]\n                            {\n                                \"events:PutEvents\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\",\n                            },\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var eventRuleRegion1 = new AwsNative.Events.Rule(\"eventRuleRegion1\", new()\n    {\n        Description = \"Routes to us-east-1 event bus\",\n        EventBusName = \"MyBusName\",\n        State = AwsNative.Events.RuleState.Enabled,\n        EventPattern = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"source\"] = new[]\n            {\n                \"MyTestApp\",\n            },\n            [\"detail\"] = new[]\n            {\n                \"MyTestAppDetail\",\n            },\n        },\n        Targets = new[]\n        {\n            new AwsNative.Events.Inputs.RuleTargetArgs\n            {\n                Arn = \"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\",\n                Id = \" CrossRegionDestinationBus\",\n                RoleArn = eventBridgeIAMrole.Arn,\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/events\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\teventBridgeIAMrole, err := iam.NewRole(ctx, \"eventBridgeIAMrole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": \"events.amazonaws.com\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"PutEventsDestinationBus\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"events:PutEvents\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = events.NewRule(ctx, \"eventRuleRegion1\", \u0026events.RuleArgs{\n\t\t\tDescription:  pulumi.String(\"Routes to us-east-1 event bus\"),\n\t\t\tEventBusName: pulumi.String(\"MyBusName\"),\n\t\t\tState:        events.RuleStateEnabled,\n\t\t\tEventPattern: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"source\": []string{\n\t\t\t\t\t\"MyTestApp\",\n\t\t\t\t},\n\t\t\t\t\"detail\": []string{\n\t\t\t\t\t\"MyTestAppDetail\",\n\t\t\t\t},\n\t\t\t}),\n\t\t\tTargets: events.RuleTargetArray{\n\t\t\t\t\u0026events.RuleTargetArgs{\n\t\t\t\t\tArn:     pulumi.String(\"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\"),\n\t\t\t\t\tId:      pulumi.String(\" CrossRegionDestinationBus\"),\n\t\t\t\t\tRoleArn: eventBridgeIAMrole.Arn,\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst eventBridgeIAMrole = new aws_native.iam.Role(\"eventBridgeIAMrole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: \"events.amazonaws.com\",\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"PutEventsDestinationBus\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: [\"events:PutEvents\"],\n                resource: [\"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\"],\n            }],\n        },\n    }],\n});\nconst eventRuleRegion1 = new aws_native.events.Rule(\"eventRuleRegion1\", {\n    description: \"Routes to us-east-1 event bus\",\n    eventBusName: \"MyBusName\",\n    state: aws_native.events.RuleState.Enabled,\n    eventPattern: {\n        source: [\"MyTestApp\"],\n        detail: [\"MyTestAppDetail\"],\n    },\n    targets: [{\n        arn: \"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\",\n        id: \" CrossRegionDestinationBus\",\n        roleArn: eventBridgeIAMrole.arn,\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nevent_bridge_ia_mrole = aws_native.iam.Role(\"eventBridgeIAMrole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": \"events.amazonaws.com\",\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"PutEventsDestinationBus\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": [\"events:PutEvents\"],\n                \"resource\": [\"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\"],\n            }],\n        },\n    }])\nevent_rule_region1 = aws_native.events.Rule(\"eventRuleRegion1\",\n    description=\"Routes to us-east-1 event bus\",\n    event_bus_name=\"MyBusName\",\n    state=aws_native.events.RuleState.ENABLED,\n    event_pattern={\n        \"source\": [\"MyTestApp\"],\n        \"detail\": [\"MyTestAppDetail\"],\n    },\n    targets=[{\n        \"arn\": \"arn:aws:events:us-east-1:123456789012:event-bus/CrossRegionDestinationBus\",\n        \"id\": \" CrossRegionDestinationBus\",\n        \"role_arn\": event_bridge_ia_mrole.arn,\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the rule, such as arn:aws:events:us-east-2:123456789012:rule/example."},"description":{"type":"string","description":"The description of the rule."},"eventBusName":{"type":"string","description":"The name or ARN of the event bus associated with the rule. If you omit this, the default event bus is used."},"eventPattern":{"$ref":"pulumi.json#/Any","description":"The event pattern of the rule. For more information, see Events and Event Patterns in the Amazon EventBridge User Guide.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::Rule` for more information about the expected schema for this property."},"name":{"type":"string","description":"The name of the rule.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role that is used for target invocation."},"scheduleExpression":{"type":"string","description":"The scheduling expression. For example, \"cron(0 20 * * ? *)\", \"rate(5 minutes)\". For more information, see Creating an Amazon EventBridge rule that runs on a schedule."},"state":{"$ref":"#/types/aws-native:events:RuleState","description":"The state of the rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the event rule."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:events:RuleTarget"},"description":"Adds the specified targets to the specified rule, or updates the targets if they are already associated with the rule.\nTargets are the resources that are invoked when a rule is triggered."}},"type":"object","required":["arn"],"inputProperties":{"description":{"type":"string","description":"The description of the rule."},"eventBusName":{"type":"string","description":"The name or ARN of the event bus associated with the rule. If you omit this, the default event bus is used."},"eventPattern":{"$ref":"pulumi.json#/Any","description":"The event pattern of the rule. For more information, see Events and Event Patterns in the Amazon EventBridge User Guide.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::Rule` for more information about the expected schema for this property."},"name":{"type":"string","description":"The name of the rule."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role that is used for target invocation."},"scheduleExpression":{"type":"string","description":"The scheduling expression. For example, \"cron(0 20 * * ? *)\", \"rate(5 minutes)\". For more information, see Creating an Amazon EventBridge rule that runs on a schedule."},"state":{"$ref":"#/types/aws-native:events:RuleState","description":"The state of the rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Any tags assigned to the event rule."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:events:RuleTarget"},"description":"Adds the specified targets to the specified rule, or updates the targets if they are already associated with the rule.\nTargets are the resources that are invoked when a rule is triggered."}}},"aws-native:eventschemas:Discoverer":{"description":"Resource Type definition for AWS::EventSchemas::Discoverer\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDiscoverer = new AwsNative.EventSchemas.Discoverer(\"myDiscoverer\", new()\n    {\n        SourceArn = \"arn:aws:events:us-west-2:012345678910:event-bus/default\",\n        Description = \"discover all custom schemas\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eventschemas\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eventschemas.NewDiscoverer(ctx, \"myDiscoverer\", \u0026eventschemas.DiscovererArgs{\n\t\t\tSourceArn:   pulumi.String(\"arn:aws:events:us-west-2:012345678910:event-bus/default\"),\n\t\t\tDescription: pulumi.String(\"discover all custom schemas\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDiscoverer = new aws_native.eventschemas.Discoverer(\"myDiscoverer\", {\n    sourceArn: \"arn:aws:events:us-west-2:012345678910:event-bus/default\",\n    description: \"discover all custom schemas\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_discoverer = aws_native.eventschemas.Discoverer(\"myDiscoverer\",\n    source_arn=\"arn:aws:events:us-west-2:012345678910:event-bus/default\",\n    description=\"discover all custom schemas\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"crossAccount":{"type":"boolean","description":"Defines whether event schemas from other accounts are discovered. Default is True."},"description":{"type":"string","description":"A description for the discoverer."},"discovererArn":{"type":"string","description":"The ARN of the discoverer."},"discovererId":{"type":"string","description":"The Id of the discoverer."},"sourceArn":{"type":"string","description":"The ARN of the event bus.","replaceOnChanges":true},"state":{"type":"string","description":"Defines the current state of the discoverer."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the resource."}},"type":"object","required":["discovererArn","discovererId","sourceArn","state"],"inputProperties":{"crossAccount":{"type":"boolean","description":"Defines whether event schemas from other accounts are discovered. Default is True."},"description":{"type":"string","description":"A description for the discoverer."},"sourceArn":{"type":"string","description":"The ARN of the event bus."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the resource."}},"requiredInputs":["sourceArn"]},"aws-native:eventschemas:Registry":{"description":"Resource Type definition for AWS::EventSchemas::Registry\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var statesSchemasRegistry = new AwsNative.EventSchemas.Registry(\"statesSchemasRegistry\", new()\n    {\n        RegistryName = \"aws.states\",\n        Description = \"Contains the schemas of events emitted by AWS Step Functions\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eventschemas\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eventschemas.NewRegistry(ctx, \"statesSchemasRegistry\", \u0026eventschemas.RegistryArgs{\n\t\t\tRegistryName: pulumi.String(\"aws.states\"),\n\t\t\tDescription:  pulumi.String(\"Contains the schemas of events emitted by AWS Step Functions\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst statesSchemasRegistry = new aws_native.eventschemas.Registry(\"statesSchemasRegistry\", {\n    registryName: \"aws.states\",\n    description: \"Contains the schemas of events emitted by AWS Step Functions\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nstates_schemas_registry = aws_native.eventschemas.Registry(\"statesSchemasRegistry\",\n    registry_name=\"aws.states\",\n    description=\"Contains the schemas of events emitted by AWS Step Functions\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"description":{"type":"string","description":"A description of the registry to be created."},"registryArn":{"type":"string","description":"The ARN of the registry."},"registryName":{"type":"string","description":"The name of the schema registry.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the resource."}},"type":"object","required":["registryArn"],"inputProperties":{"description":{"type":"string","description":"A description of the registry to be created."},"registryName":{"type":"string","description":"The name of the schema registry."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the resource."}}},"aws-native:eventschemas:RegistryPolicy":{"description":"Resource Type definition for AWS::EventSchemas::RegistryPolicy\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var registryPolicy = new AwsNative.EventSchemas.RegistryPolicy(\"registryPolicy\", new()\n    {\n        RegistryName = \"registryName\",\n        Policy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"sid\"] = 1,\n                [\"effect\"] = \"Allow\",\n                [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"aws\"] = \"arn:aws:iam::012345678901:user/TestAccountForRegistryPolicy\",\n                },\n                [\"action\"] = new[]\n                {\n                    \"schemas:DescribeRegistry\",\n                    \"schemas:CreateSchema\",\n                },\n                [\"resource\"] = \"registryArn\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eventschemas\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eventschemas.NewRegistryPolicy(ctx, \"registryPolicy\", \u0026eventschemas.RegistryPolicyArgs{\n\t\t\tRegistryName: pulumi.String(\"registryName\"),\n\t\t\tPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": map[string]interface{}{\n\t\t\t\t\t\"sid\":    1,\n\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\"aws\": \"arn:aws:iam::012345678901:user/TestAccountForRegistryPolicy\",\n\t\t\t\t\t},\n\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\"schemas:DescribeRegistry\",\n\t\t\t\t\t\t\"schemas:CreateSchema\",\n\t\t\t\t\t},\n\t\t\t\t\t\"resource\": \"registryArn\",\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst registryPolicy = new aws_native.eventschemas.RegistryPolicy(\"registryPolicy\", {\n    registryName: \"registryName\",\n    policy: {\n        version: \"2012-10-17\",\n        statement: {\n            sid: 1,\n            effect: \"Allow\",\n            principal: {\n                aws: \"arn:aws:iam::012345678901:user/TestAccountForRegistryPolicy\",\n            },\n            action: [\n                \"schemas:DescribeRegistry\",\n                \"schemas:CreateSchema\",\n            ],\n            resource: \"registryArn\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nregistry_policy = aws_native.eventschemas.RegistryPolicy(\"registryPolicy\",\n    registry_name=\"registryName\",\n    policy={\n        \"version\": \"2012-10-17\",\n        \"statement\": {\n            \"sid\": 1,\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"aws\": \"arn:aws:iam::012345678901:user/TestAccountForRegistryPolicy\",\n            },\n            \"action\": [\n                \"schemas:DescribeRegistry\",\n                \"schemas:CreateSchema\",\n            ],\n            \"resource\": \"registryArn\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var registryPolicy = new AwsNative.EventSchemas.RegistryPolicy(\"registryPolicy\", new()\n    {\n        RegistryName = \"MyRegistry\",\n        Policy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"sid\"] = \"Test\",\n                    [\"effect\"] = \"Allow\",\n                    [\"action\"] = new[]\n                    {\n                        \"schemas:*\",\n                    },\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"aws\"] = new[]\n                        {\n                            \"109876543210\",\n                        },\n                    },\n                    [\"resource\"] = new[]\n                    {\n                        \"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n                        \"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eventschemas\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eventschemas.NewRegistryPolicy(ctx, \"registryPolicy\", \u0026eventschemas.RegistryPolicyArgs{\n\t\t\tRegistryName: pulumi.String(\"MyRegistry\"),\n\t\t\tPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"sid\":    \"Test\",\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"schemas:*\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"aws\": []string{\n\t\t\t\t\t\t\t\t\"109876543210\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n\t\t\t\t\t\t\t\"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst registryPolicy = new aws_native.eventschemas.RegistryPolicy(\"registryPolicy\", {\n    registryName: \"MyRegistry\",\n    policy: {\n        version: \"2012-10-17\",\n        statement: [{\n            sid: \"Test\",\n            effect: \"Allow\",\n            action: [\"schemas:*\"],\n            principal: {\n                aws: [\"109876543210\"],\n            },\n            resource: [\n                \"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n                \"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n            ],\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nregistry_policy = aws_native.eventschemas.RegistryPolicy(\"registryPolicy\",\n    registry_name=\"MyRegistry\",\n    policy={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"sid\": \"Test\",\n            \"effect\": \"Allow\",\n            \"action\": [\"schemas:*\"],\n            \"principal\": {\n                \"aws\": [\"109876543210\"],\n            },\n            \"resource\": [\n                \"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n                \"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n            ],\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var registryPolicy = new AwsNative.EventSchemas.RegistryPolicy(\"registryPolicy\", new()\n    {\n        RegistryName = \"MyRegistry\",\n        Policy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"sid\"] = \"Test\",\n                    [\"effect\"] = \"Allow\",\n                    [\"action\"] = new[]\n                    {\n                        \"schemas:*\",\n                    },\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"aws\"] = new[]\n                        {\n                            \"109876543210\",\n                        },\n                    },\n                    [\"resource\"] = new[]\n                    {\n                        \"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n                        \"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eventschemas\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eventschemas.NewRegistryPolicy(ctx, \"registryPolicy\", \u0026eventschemas.RegistryPolicyArgs{\n\t\t\tRegistryName: pulumi.String(\"MyRegistry\"),\n\t\t\tPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"sid\":    \"Test\",\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"schemas:*\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"aws\": []string{\n\t\t\t\t\t\t\t\t\"109876543210\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n\t\t\t\t\t\t\t\"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst registryPolicy = new aws_native.eventschemas.RegistryPolicy(\"registryPolicy\", {\n    registryName: \"MyRegistry\",\n    policy: {\n        version: \"2012-10-17\",\n        statement: [{\n            sid: \"Test\",\n            effect: \"Allow\",\n            action: [\"schemas:*\"],\n            principal: {\n                aws: [\"109876543210\"],\n            },\n            resource: [\n                \"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n                \"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n            ],\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nregistry_policy = aws_native.eventschemas.RegistryPolicy(\"registryPolicy\",\n    registry_name=\"MyRegistry\",\n    policy={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"sid\": \"Test\",\n            \"effect\": \"Allow\",\n            \"action\": [\"schemas:*\"],\n            \"principal\": {\n                \"aws\": [\"109876543210\"],\n            },\n            \"resource\": [\n                \"arn:aws:schemas:us-east-1:012345678901:registry/MyRegistry\",\n                \"arn:aws:schemas:us-east-1:012345678901:schema/MyRegistry*\",\n            ],\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The ID of the policy."},"policy":{"$ref":"pulumi.json#/Any","description":"A resource-based policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EventSchemas::RegistryPolicy` for more information about the expected schema for this property."},"registryName":{"type":"string","description":"The name of the registry."},"revisionId":{"type":"string","description":"The revision ID of the policy."}},"type":"object","required":["awsId","policy","registryName"],"inputProperties":{"policy":{"$ref":"pulumi.json#/Any","description":"A resource-based policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EventSchemas::RegistryPolicy` for more information about the expected schema for this property."},"registryName":{"type":"string","description":"The name of the registry."},"revisionId":{"type":"string","description":"The revision ID of the policy."}},"requiredInputs":["policy","registryName"]},"aws-native:eventschemas:Schema":{"description":"Resource Type definition for AWS::EventSchemas::Schema\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var executionStatusChangeSchema = new AwsNative.EventSchemas.Schema(\"executionStatusChangeSchema\", new()\n    {\n        RegistryName = \"aws.events\",\n        SchemaName = \"ExecutionStatusChange\",\n        Description = \"event emitted when the status of a state machine execution change\",\n        Type = \"OpenApi3\",\n        Content = \"{   \\\"openapi\\\": \\\"3.0.0\\\",   \\\"info\\\": {     \\\"version\\\": \\\"1.0.0\\\",     \\\"title\\\": \\\"StepFunctionsExecutionStatusChange\\\"   },   \\\"paths\\\":{},   \\\"components\\\": {     \\\"schemas\\\": {       \\\"StepFunctionsExecutionStatusChange\\\": {         \\\"type\\\": \\\"object\\\",         \\\"required\\\": [ \\\"output\\\", \\\"input\\\", \\\"executionArn\\\", \\\"name\\\", \\\"stateMachineArn\\\", \\\"startDate\\\", \\\"stopDate\\\", \\\"status\\\" ],         \\\"properties\\\": {           \\\"output\\\": {\\\"type\\\": \\\"string\\\",\\\"nullable\\\": true},           \\\"input\\\": {\\\"type\\\": \\\"string\\\"},           \\\"executionArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"name\\\": {\\\"type\\\": \\\"string\\\"},           \\\"stateMachineArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"startDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\"},           \\\"stopDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\",\\\"nullable\\\": true},           \\\"status\\\": {\\\"type\\\": \\\"string\\\",\\\"enum\\\": [ \\\"FAILED\\\", \\\"RUNNING\\\", \\\"SUCCEEDED\\\", \\\"ABORTED\\\" ]}         }       }     }   } }\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/eventschemas\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := eventschemas.NewSchema(ctx, \"executionStatusChangeSchema\", \u0026eventschemas.SchemaArgs{\n\t\t\tRegistryName: pulumi.String(\"aws.events\"),\n\t\t\tSchemaName:   pulumi.String(\"ExecutionStatusChange\"),\n\t\t\tDescription:  pulumi.String(\"event emitted when the status of a state machine execution change\"),\n\t\t\tType:         pulumi.String(\"OpenApi3\"),\n\t\t\tContent:      pulumi.String(\"{   \\\"openapi\\\": \\\"3.0.0\\\",   \\\"info\\\": {     \\\"version\\\": \\\"1.0.0\\\",     \\\"title\\\": \\\"StepFunctionsExecutionStatusChange\\\"   },   \\\"paths\\\":{},   \\\"components\\\": {     \\\"schemas\\\": {       \\\"StepFunctionsExecutionStatusChange\\\": {         \\\"type\\\": \\\"object\\\",         \\\"required\\\": [ \\\"output\\\", \\\"input\\\", \\\"executionArn\\\", \\\"name\\\", \\\"stateMachineArn\\\", \\\"startDate\\\", \\\"stopDate\\\", \\\"status\\\" ],         \\\"properties\\\": {           \\\"output\\\": {\\\"type\\\": \\\"string\\\",\\\"nullable\\\": true},           \\\"input\\\": {\\\"type\\\": \\\"string\\\"},           \\\"executionArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"name\\\": {\\\"type\\\": \\\"string\\\"},           \\\"stateMachineArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"startDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\"},           \\\"stopDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\",\\\"nullable\\\": true},           \\\"status\\\": {\\\"type\\\": \\\"string\\\",\\\"enum\\\": [ \\\"FAILED\\\", \\\"RUNNING\\\", \\\"SUCCEEDED\\\", \\\"ABORTED\\\" ]}         }       }     }   } }\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst executionStatusChangeSchema = new aws_native.eventschemas.Schema(\"executionStatusChangeSchema\", {\n    registryName: \"aws.events\",\n    schemaName: \"ExecutionStatusChange\",\n    description: \"event emitted when the status of a state machine execution change\",\n    type: \"OpenApi3\",\n    content: \"{   \\\"openapi\\\": \\\"3.0.0\\\",   \\\"info\\\": {     \\\"version\\\": \\\"1.0.0\\\",     \\\"title\\\": \\\"StepFunctionsExecutionStatusChange\\\"   },   \\\"paths\\\":{},   \\\"components\\\": {     \\\"schemas\\\": {       \\\"StepFunctionsExecutionStatusChange\\\": {         \\\"type\\\": \\\"object\\\",         \\\"required\\\": [ \\\"output\\\", \\\"input\\\", \\\"executionArn\\\", \\\"name\\\", \\\"stateMachineArn\\\", \\\"startDate\\\", \\\"stopDate\\\", \\\"status\\\" ],         \\\"properties\\\": {           \\\"output\\\": {\\\"type\\\": \\\"string\\\",\\\"nullable\\\": true},           \\\"input\\\": {\\\"type\\\": \\\"string\\\"},           \\\"executionArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"name\\\": {\\\"type\\\": \\\"string\\\"},           \\\"stateMachineArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"startDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\"},           \\\"stopDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\",\\\"nullable\\\": true},           \\\"status\\\": {\\\"type\\\": \\\"string\\\",\\\"enum\\\": [ \\\"FAILED\\\", \\\"RUNNING\\\", \\\"SUCCEEDED\\\", \\\"ABORTED\\\" ]}         }       }     }   } }\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexecution_status_change_schema = aws_native.eventschemas.Schema(\"executionStatusChangeSchema\",\n    registry_name=\"aws.events\",\n    schema_name=\"ExecutionStatusChange\",\n    description=\"event emitted when the status of a state machine execution change\",\n    type=\"OpenApi3\",\n    content=\"{   \\\"openapi\\\": \\\"3.0.0\\\",   \\\"info\\\": {     \\\"version\\\": \\\"1.0.0\\\",     \\\"title\\\": \\\"StepFunctionsExecutionStatusChange\\\"   },   \\\"paths\\\":{},   \\\"components\\\": {     \\\"schemas\\\": {       \\\"StepFunctionsExecutionStatusChange\\\": {         \\\"type\\\": \\\"object\\\",         \\\"required\\\": [ \\\"output\\\", \\\"input\\\", \\\"executionArn\\\", \\\"name\\\", \\\"stateMachineArn\\\", \\\"startDate\\\", \\\"stopDate\\\", \\\"status\\\" ],         \\\"properties\\\": {           \\\"output\\\": {\\\"type\\\": \\\"string\\\",\\\"nullable\\\": true},           \\\"input\\\": {\\\"type\\\": \\\"string\\\"},           \\\"executionArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"name\\\": {\\\"type\\\": \\\"string\\\"},           \\\"stateMachineArn\\\": {\\\"type\\\": \\\"string\\\"},           \\\"startDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\"},           \\\"stopDate\\\": {\\\"type\\\": \\\"integer\\\",\\\"format\\\": \\\"int64\\\",\\\"nullable\\\": true},           \\\"status\\\": {\\\"type\\\": \\\"string\\\",\\\"enum\\\": [ \\\"FAILED\\\", \\\"RUNNING\\\", \\\"SUCCEEDED\\\", \\\"ABORTED\\\" ]}         }       }     }   } }\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"content":{"type":"string","description":"The source of the schema definition."},"description":{"type":"string","description":"A description of the schema."},"lastModified":{"type":"string","description":"The last modified time of the schema."},"registryName":{"type":"string","description":"The name of the schema registry.","replaceOnChanges":true},"schemaArn":{"type":"string","description":"The ARN of the schema."},"schemaName":{"type":"string","description":"The name of the schema.","replaceOnChanges":true},"schemaVersion":{"type":"string","description":"The version number of the schema."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the resource."},"type":{"type":"string","description":"The type of schema. Valid types include OpenApi3 and JSONSchemaDraft4."},"versionCreatedDate":{"type":"string","description":"The date the schema version was created."}},"type":"object","required":["content","lastModified","registryName","schemaArn","schemaVersion","type","versionCreatedDate"],"inputProperties":{"content":{"type":"string","description":"The source of the schema definition."},"description":{"type":"string","description":"A description of the schema."},"registryName":{"type":"string","description":"The name of the schema registry."},"schemaName":{"type":"string","description":"The name of the schema."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with the resource."},"type":{"type":"string","description":"The type of schema. Valid types include OpenApi3 and JSONSchemaDraft4."}},"requiredInputs":["content","registryName","type"]},"aws-native:evidently:Experiment":{"description":"Resource Type definition for AWS::Evidently::Experiment.","properties":{"arn":{"type":"string","description":"The ARN of the experiment. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/experiment/myExperiment`"},"description":{"type":"string","description":"An optional description of the experiment."},"metricGoals":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:ExperimentMetricGoalObject"},"description":"An array of structures that defines the metrics used for the experiment, and whether a higher or lower value for each metric is the goal. You can use up to three metrics in an experiment."},"name":{"type":"string","description":"A name for the new experiment.","replaceOnChanges":true},"onlineAbConfig":{"$ref":"#/types/aws-native:evidently:ExperimentOnlineAbConfigObject","description":"A structure that contains the configuration of which variation to use as the \"control\" version. The \"control\" version is used for comparison with other variations. This structure also specifies how much experiment traffic is allocated to each variation."},"project":{"type":"string","description":"The name or the ARN of the project where this experiment is to be created.","replaceOnChanges":true},"randomizationSalt":{"type":"string","description":"When Evidently assigns a particular user session to an experiment, it must use a randomization ID to determine which variation the user session is served. This randomization ID is a combination of the entity ID and `randomizationSalt` . If you omit `randomizationSalt` , Evidently uses the experiment name as the `randomizationSalt` ."},"removeSegment":{"type":"boolean","description":"Set this to `true` to remove the segment that is associated with this experiment. You can't use this parameter if the experiment is currently running."},"runningStatus":{"$ref":"#/types/aws-native:evidently:ExperimentRunningStatusObject","description":"Start Experiment. Default is False"},"samplingRate":{"type":"integer","description":"The portion of the available audience that you want to allocate to this experiment, in thousandths of a percent. The available audience is the total audience minus the audience that you have allocated to overrides or current launches of this feature.\n\nThis is represented in thousandths of a percent. For example, specify 10,000 to allocate 10% of the available audience."},"segment":{"type":"string","description":"Specifies an audience *segment* to use in the experiment. When a segment is used in an experiment, only user sessions that match the segment pattern are used in the experiment.\n\nFor more information, see [Segment rule pattern syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html#CloudWatch-Evidently-segments-syntax) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"treatments":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:ExperimentTreatmentObject"},"description":"An array of structures that describe the configuration of each feature variation used in the experiment."}},"type":"object","required":["arn","metricGoals","name","onlineAbConfig","project","treatments"],"inputProperties":{"description":{"type":"string","description":"An optional description of the experiment."},"metricGoals":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:ExperimentMetricGoalObject"},"description":"An array of structures that defines the metrics used for the experiment, and whether a higher or lower value for each metric is the goal. You can use up to three metrics in an experiment."},"name":{"type":"string","description":"A name for the new experiment."},"onlineAbConfig":{"$ref":"#/types/aws-native:evidently:ExperimentOnlineAbConfigObject","description":"A structure that contains the configuration of which variation to use as the \"control\" version. The \"control\" version is used for comparison with other variations. This structure also specifies how much experiment traffic is allocated to each variation."},"project":{"type":"string","description":"The name or the ARN of the project where this experiment is to be created."},"randomizationSalt":{"type":"string","description":"When Evidently assigns a particular user session to an experiment, it must use a randomization ID to determine which variation the user session is served. This randomization ID is a combination of the entity ID and `randomizationSalt` . If you omit `randomizationSalt` , Evidently uses the experiment name as the `randomizationSalt` ."},"removeSegment":{"type":"boolean","description":"Set this to `true` to remove the segment that is associated with this experiment. You can't use this parameter if the experiment is currently running."},"runningStatus":{"$ref":"#/types/aws-native:evidently:ExperimentRunningStatusObject","description":"Start Experiment. Default is False"},"samplingRate":{"type":"integer","description":"The portion of the available audience that you want to allocate to this experiment, in thousandths of a percent. The available audience is the total audience minus the audience that you have allocated to overrides or current launches of this feature.\n\nThis is represented in thousandths of a percent. For example, specify 10,000 to allocate 10% of the available audience."},"segment":{"type":"string","description":"Specifies an audience *segment* to use in the experiment. When a segment is used in an experiment, only user sessions that match the segment pattern are used in the experiment.\n\nFor more information, see [Segment rule pattern syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html#CloudWatch-Evidently-segments-syntax) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"treatments":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:ExperimentTreatmentObject"},"description":"An array of structures that describe the configuration of each feature variation used in the experiment."}},"requiredInputs":["metricGoals","onlineAbConfig","project","treatments"]},"aws-native:evidently:Feature":{"description":"Resource Type definition for AWS::Evidently::Feature.","properties":{"arn":{"type":"string","description":"The ARN of the feature. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/feature/myFeature` ."},"defaultVariation":{"type":"string","description":"The name of the variation to use as the default variation. The default variation is served to users who are not allocated to any ongoing launches or experiments of this feature.\n\nThis variation must also be listed in the `Variations` structure.\n\nIf you omit `DefaultVariation` , the first variation listed in the `Variations` structure is used as the default variation."},"description":{"type":"string","description":"An optional description of the feature."},"entityOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:FeatureEntityOverride"},"description":"Specify users that should always be served a specific variation of a feature. Each user is specified by a key-value pair . For each key, specify a user by entering their user ID, account ID, or some other identifier. For the value, specify the name of the variation that they are to be served."},"evaluationStrategy":{"$ref":"#/types/aws-native:evidently:FeatureEvaluationStrategy","description":"Specify `ALL_RULES` to activate the traffic allocation specified by any ongoing launches or experiments. Specify `DEFAULT_VARIATION` to serve the default variation to all users instead."},"name":{"type":"string","description":"The name for the feature. It can include up to 127 characters.","replaceOnChanges":true},"project":{"type":"string","description":"The name or ARN of the project that is to contain the new feature.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"variations":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:FeatureVariationObject"},"description":"An array of structures that contain the configuration of the feature's different variations.\n\nEach `VariationObject` in the `Variations` array for a feature must have the same type of value ( `BooleanValue` , `DoubleValue` , `LongValue` or `StringValue` )."}},"type":"object","required":["arn","name","project","variations"],"inputProperties":{"defaultVariation":{"type":"string","description":"The name of the variation to use as the default variation. The default variation is served to users who are not allocated to any ongoing launches or experiments of this feature.\n\nThis variation must also be listed in the `Variations` structure.\n\nIf you omit `DefaultVariation` , the first variation listed in the `Variations` structure is used as the default variation."},"description":{"type":"string","description":"An optional description of the feature."},"entityOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:FeatureEntityOverride"},"description":"Specify users that should always be served a specific variation of a feature. Each user is specified by a key-value pair . For each key, specify a user by entering their user ID, account ID, or some other identifier. For the value, specify the name of the variation that they are to be served."},"evaluationStrategy":{"$ref":"#/types/aws-native:evidently:FeatureEvaluationStrategy","description":"Specify `ALL_RULES` to activate the traffic allocation specified by any ongoing launches or experiments. Specify `DEFAULT_VARIATION` to serve the default variation to all users instead."},"name":{"type":"string","description":"The name for the feature. It can include up to 127 characters."},"project":{"type":"string","description":"The name or ARN of the project that is to contain the new feature."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"variations":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:FeatureVariationObject"},"description":"An array of structures that contain the configuration of the feature's different variations.\n\nEach `VariationObject` in the `Variations` array for a feature must have the same type of value ( `BooleanValue` , `DoubleValue` , `LongValue` or `StringValue` )."}},"requiredInputs":["project","variations"]},"aws-native:evidently:Launch":{"description":"Resource Type definition for AWS::Evidently::Launch.","properties":{"arn":{"type":"string","description":"The ARN of the launch. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/launch/myLaunch`"},"description":{"type":"string","description":"An optional description for the launch."},"executionStatus":{"$ref":"#/types/aws-native:evidently:LaunchExecutionStatusObject","description":"Start or Stop Launch Launch. Default is not started."},"groups":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchGroupObject"},"description":"An array of structures that contains the feature and variations that are to be used for the launch. You can up to five launch groups in a launch."},"metricMonitors":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchMetricDefinitionObject"},"description":"An array of structures that define the metrics that will be used to monitor the launch performance. You can have up to three metric monitors in the array."},"name":{"type":"string","description":"The name for the launch. It can include up to 127 characters.","replaceOnChanges":true},"project":{"type":"string","description":"The name or ARN of the project that you want to create the launch in.","replaceOnChanges":true},"randomizationSalt":{"type":"string","description":"When Evidently assigns a particular user session to a launch, it must use a randomization ID to determine which variation the user session is served. This randomization ID is a combination of the entity ID and `randomizationSalt` . If you omit `randomizationSalt` , Evidently uses the launch name as the `randomizationsSalt` ."},"scheduledSplitsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchStepConfig"},"description":"An array of structures that define the traffic allocation percentages among the feature variations during each step of the launch."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","groups","name","project","scheduledSplitsConfig"],"inputProperties":{"description":{"type":"string","description":"An optional description for the launch."},"executionStatus":{"$ref":"#/types/aws-native:evidently:LaunchExecutionStatusObject","description":"Start or Stop Launch Launch. Default is not started."},"groups":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchGroupObject"},"description":"An array of structures that contains the feature and variations that are to be used for the launch. You can up to five launch groups in a launch."},"metricMonitors":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchMetricDefinitionObject"},"description":"An array of structures that define the metrics that will be used to monitor the launch performance. You can have up to three metric monitors in the array."},"name":{"type":"string","description":"The name for the launch. It can include up to 127 characters."},"project":{"type":"string","description":"The name or ARN of the project that you want to create the launch in."},"randomizationSalt":{"type":"string","description":"When Evidently assigns a particular user session to a launch, it must use a randomization ID to determine which variation the user session is served. This randomization ID is a combination of the entity ID and `randomizationSalt` . If you omit `randomizationSalt` , Evidently uses the launch name as the `randomizationsSalt` ."},"scheduledSplitsConfig":{"type":"array","items":{"$ref":"#/types/aws-native:evidently:LaunchStepConfig"},"description":"An array of structures that define the traffic allocation percentages among the feature variations during each step of the launch."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["groups","project","scheduledSplitsConfig"]},"aws-native:evidently:Project":{"description":"Resource Type definition for AWS::Evidently::Project","properties":{"appConfigResource":{"$ref":"#/types/aws-native:evidently:ProjectAppConfigResourceObject","description":"Use this parameter if the project will use *client-side evaluation powered by AWS AppConfig* . Client-side evaluation allows your application to assign variations to user sessions locally instead of by calling the [EvaluateFeature](https://docs.aws.amazon.com/cloudwatchevidently/latest/APIReference/API_EvaluateFeature.html) operation. This mitigates the latency and availability risks that come with an API call. For more information, see [Use client-side evaluation - powered by AWS AppConfig .](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-client-side-evaluation.html)\n\nThis parameter is a structure that contains information about the AWS AppConfig application that will be used as for client-side evaluation.\n\nTo create a project that uses client-side evaluation, you must have the `evidently:ExportProjectAsConfiguration` permission."},"arn":{"type":"string","description":"The ARN of the project. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject`"},"dataDelivery":{"$ref":"#/types/aws-native:evidently:ProjectDataDeliveryObject","description":"A structure that contains information about where Evidently is to store evaluation events for longer term storage, if you choose to do so. If you choose not to store these events, Evidently deletes them after using them to produce metrics and other experiment results that you can view.\n\nYou can't specify both `CloudWatchLogs` and `S3Destination` in the same operation."},"description":{"type":"string","description":"An optional description of the project."},"name":{"type":"string","description":"The name for the project. It can include up to 127 characters.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","name"],"inputProperties":{"appConfigResource":{"$ref":"#/types/aws-native:evidently:ProjectAppConfigResourceObject","description":"Use this parameter if the project will use *client-side evaluation powered by AWS AppConfig* . Client-side evaluation allows your application to assign variations to user sessions locally instead of by calling the [EvaluateFeature](https://docs.aws.amazon.com/cloudwatchevidently/latest/APIReference/API_EvaluateFeature.html) operation. This mitigates the latency and availability risks that come with an API call. For more information, see [Use client-side evaluation - powered by AWS AppConfig .](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-client-side-evaluation.html)\n\nThis parameter is a structure that contains information about the AWS AppConfig application that will be used as for client-side evaluation.\n\nTo create a project that uses client-side evaluation, you must have the `evidently:ExportProjectAsConfiguration` permission."},"dataDelivery":{"$ref":"#/types/aws-native:evidently:ProjectDataDeliveryObject","description":"A structure that contains information about where Evidently is to store evaluation events for longer term storage, if you choose to do so. If you choose not to store these events, Evidently deletes them after using them to produce metrics and other experiment results that you can view.\n\nYou can't specify both `CloudWatchLogs` and `S3Destination` in the same operation."},"description":{"type":"string","description":"An optional description of the project."},"name":{"type":"string","description":"The name for the project. It can include up to 127 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:evidently:Segment":{"description":"Resource Type definition for AWS::Evidently::Segment","properties":{"arn":{"type":"string","description":"The ARN of the segment. For example, `arn:aws:evidently:us-west-2:123456789012:segment/australiaSegment`"},"description":{"type":"string","description":"An optional description for this segment."},"name":{"type":"string","description":"A name for the segment."},"pattern":{"type":"string","description":"The pattern to use for the segment. For more information about pattern syntax, see [Segment rule pattern syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html#CloudWatch-Evidently-segments-syntax) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","name"],"inputProperties":{"description":{"type":"string","description":"An optional description for this segment."},"name":{"type":"string","description":"A name for the segment."},"pattern":{"type":"string","description":"The pattern to use for the segment. For more information about pattern syntax, see [Segment rule pattern syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html#CloudWatch-Evidently-segments-syntax) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:evs:Environment":{"description":"An environment created within the EVS service","properties":{"checks":{"type":"array","items":{"$ref":"#/types/aws-native:evs:EnvironmentCheck"},"description":"A check on the environment to identify instance health and VMware VCF licensing issues. For example:\n\n`{ \"checks\": [ { \"type\": \"KEY_REUSE\", \"result\": \"PASSED\" }, { \"type\": \"KEY_COVERAGE\", \"result\": \"PASSED\" }, { \"type\": \"REACHABILITY\", \"result\": \"PASSED\" }, { \"type\": \"HOST_COUNT\", \"result\": \"PASSED\" } ] }`"},"connectivityInfo":{"$ref":"#/types/aws-native:evs:ConnectivityInfoProperties","description":"The connectivity configuration for the environment. Amazon EVS requires that you specify two route server peer IDs. During environment creation, the route server endpoints peer with the NSX uplink VLAN for connectivity to the NSX overlay network.","replaceOnChanges":true},"createdAt":{"type":"string","description":"The date and time that the environment was created. For example: `1749081600.000` ."},"credentials":{"type":"array","items":{"$ref":"#/types/aws-native:evs:EnvironmentSecret"},"description":"The VCF credentials that are stored as Amazon EVS managed secrets in AWS Secrets Manager. Amazon EVS stores credentials that are needed to install vCenter Server, NSX, and SDDC Manager. For example:\n\n`{ [ { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_vCenterAdmin-MnTMEi\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_vCenterRoot-87VyCF\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_NSXRoot-SR3k43\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_NSXAdmin-L5LUiD\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_NSXAudit-Q2oW46\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_SDDCManagerRoot-bFulOq\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_SDDCManagerVCF-Ec3gES\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_SDDCManagerAdmin-JMTAAb\" } ] }`"},"environmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is associated with the environment. For example: `arn:aws:evs:us-east-1:000000000000:environment/env-1234567890` ."},"environmentId":{"type":"string","description":"The unique ID for the environment. For example: `env-1234567890` ."},"environmentName":{"type":"string","description":"The name of an EVS environment","replaceOnChanges":true},"environmentState":{"$ref":"#/types/aws-native:evs:EnvironmentState","description":"The state of an environment. For example: `CREATED` ."},"hosts":{"type":"array","items":{"$ref":"#/types/aws-native:evs:EnvironmentHostInfoForCreate"},"description":"The initial hosts for environment only required upon creation. Modification after creation will have no effect"},"initialVlans":{"$ref":"#/types/aws-native:evs:InitialVlansProperties","description":"The initial Vlan configuration only required upon creation. Modification after creation will have no effect"},"kmsKeyId":{"type":"string","description":"The AWS KMS key ID that AWS Secrets Manager uses to encrypt secrets that are associated with the environment. These secrets contain the VCF credentials that are needed to install vCenter Server, NSX, and SDDC Manager.\n\nBy default, Amazon EVS use the AWS Secrets Manager managed key `aws/secretsmanager` . You can also specify a customer managed key.","replaceOnChanges":true},"licenseInfo":{"$ref":"#/types/aws-native:evs:LicenseInfoProperties","description":"The license information for an EVS environment","replaceOnChanges":true},"modifiedAt":{"type":"string","description":"The date and time that the environment was modified. For example: `1749081600.000` ."},"serviceAccessSecurityGroups":{"$ref":"#/types/aws-native:evs:ServiceAccessSecurityGroupsProperties","description":"The security groups that allow traffic between the Amazon EVS control plane and your VPC for service access. If a security group is not specified, Amazon EVS uses the default security group in your account for service access.","replaceOnChanges":true},"serviceAccessSubnetId":{"type":"string","description":"The subnet that is used to establish connectivity between the Amazon EVS control plane and VPC. Amazon EVS uses this subnet to perform validations and create the environment.","replaceOnChanges":true},"siteId":{"type":"string","description":"The Broadcom Site ID that is associated with your Amazon EVS environment. Amazon EVS uses the Broadcom Site ID that you provide to meet Broadcom VCF license usage reporting requirements for Amazon EVS.","replaceOnChanges":true},"stateDetails":{"type":"string","description":"A detailed description of the `environmentState` of an environment. For example: `Environment successfully created` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"termsAccepted":{"type":"boolean","description":"Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment. Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance. Amazon EVS does not validate license keys. To validate license keys, visit the Broadcom support portal.","replaceOnChanges":true},"vcfHostnames":{"$ref":"#/types/aws-native:evs:VcfHostnamesProperties","description":"The DNS hostnames to be used by the VCF management appliances in your environment.\n\nFor environment creation to be successful, each hostname entry must resolve to a domain name that you've registered in your DNS service of choice and configured in the DHCP option set of your VPC. DNS hostnames cannot be changed after environment creation has started.","replaceOnChanges":true},"vcfVersion":{"$ref":"#/types/aws-native:evs:EnvironmentVcfVersion","description":"The VCF version of the environment.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The VPC associated with the environment.","replaceOnChanges":true}},"type":"object","required":["checks","connectivityInfo","createdAt","credentials","environmentArn","environmentId","environmentState","licenseInfo","modifiedAt","serviceAccessSubnetId","siteId","stateDetails","termsAccepted","vcfHostnames","vcfVersion","vpcId"],"inputProperties":{"connectivityInfo":{"$ref":"#/types/aws-native:evs:ConnectivityInfoProperties","description":"The connectivity configuration for the environment. Amazon EVS requires that you specify two route server peer IDs. During environment creation, the route server endpoints peer with the NSX uplink VLAN for connectivity to the NSX overlay network."},"environmentName":{"type":"string","description":"The name of an EVS environment"},"hosts":{"type":"array","items":{"$ref":"#/types/aws-native:evs:EnvironmentHostInfoForCreate"},"description":"The initial hosts for environment only required upon creation. Modification after creation will have no effect"},"initialVlans":{"$ref":"#/types/aws-native:evs:InitialVlansProperties","description":"The initial Vlan configuration only required upon creation. Modification after creation will have no effect"},"kmsKeyId":{"type":"string","description":"The AWS KMS key ID that AWS Secrets Manager uses to encrypt secrets that are associated with the environment. These secrets contain the VCF credentials that are needed to install vCenter Server, NSX, and SDDC Manager.\n\nBy default, Amazon EVS use the AWS Secrets Manager managed key `aws/secretsmanager` . You can also specify a customer managed key."},"licenseInfo":{"$ref":"#/types/aws-native:evs:LicenseInfoProperties","description":"The license information for an EVS environment"},"serviceAccessSecurityGroups":{"$ref":"#/types/aws-native:evs:ServiceAccessSecurityGroupsProperties","description":"The security groups that allow traffic between the Amazon EVS control plane and your VPC for service access. If a security group is not specified, Amazon EVS uses the default security group in your account for service access."},"serviceAccessSubnetId":{"type":"string","description":"The subnet that is used to establish connectivity between the Amazon EVS control plane and VPC. Amazon EVS uses this subnet to perform validations and create the environment."},"siteId":{"type":"string","description":"The Broadcom Site ID that is associated with your Amazon EVS environment. Amazon EVS uses the Broadcom Site ID that you provide to meet Broadcom VCF license usage reporting requirements for Amazon EVS."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"termsAccepted":{"type":"boolean","description":"Customer confirmation that the customer has purchased and will continue to maintain the required number of VCF software licenses to cover all physical processor cores in the Amazon EVS environment. Information about your VCF software in Amazon EVS will be shared with Broadcom to verify license compliance. Amazon EVS does not validate license keys. To validate license keys, visit the Broadcom support portal."},"vcfHostnames":{"$ref":"#/types/aws-native:evs:VcfHostnamesProperties","description":"The DNS hostnames to be used by the VCF management appliances in your environment.\n\nFor environment creation to be successful, each hostname entry must resolve to a domain name that you've registered in your DNS service of choice and configured in the DHCP option set of your VPC. DNS hostnames cannot be changed after environment creation has started."},"vcfVersion":{"$ref":"#/types/aws-native:evs:EnvironmentVcfVersion","description":"The VCF version of the environment."},"vpcId":{"type":"string","description":"The VPC associated with the environment."}},"requiredInputs":["connectivityInfo","licenseInfo","serviceAccessSubnetId","siteId","termsAccepted","vcfHostnames","vcfVersion","vpcId"]},"aws-native:finspace:Environment":{"description":"An example resource schema demonstrating some basic constructs and validation rules.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var finSpaceEnvironment = new AwsNative.FinSpace.Environment(\"finSpaceEnvironment\", new()\n    {\n        Name = \"MyEnvironment\",\n        KmsKeyId = \"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\",\n        FederationMode = AwsNative.FinSpace.EnvironmentFederationMode.Local,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/finspace\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := finspace.NewEnvironment(ctx, \"finSpaceEnvironment\", \u0026finspace.EnvironmentArgs{\n\t\t\tName:           pulumi.String(\"MyEnvironment\"),\n\t\t\tKmsKeyId:       pulumi.String(\"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\"),\n\t\t\tFederationMode: finspace.EnvironmentFederationModeLocal,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst finSpaceEnvironment = new aws_native.finspace.Environment(\"finSpaceEnvironment\", {\n    name: \"MyEnvironment\",\n    kmsKeyId: \"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\",\n    federationMode: aws_native.finspace.EnvironmentFederationMode.Local,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfin_space_environment = aws_native.finspace.Environment(\"finSpaceEnvironment\",\n    name=\"MyEnvironment\",\n    kms_key_id=\"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\",\n    federation_mode=aws_native.finspace.EnvironmentFederationMode.LOCAL)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var finSpaceEnvironment = new AwsNative.FinSpace.Environment(\"finSpaceEnvironment\", new()\n    {\n        Name = \"MyEnvironment\",\n        KmsKeyId = \"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\",\n        FederationMode = AwsNative.FinSpace.EnvironmentFederationMode.Local,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/finspace\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := finspace.NewEnvironment(ctx, \"finSpaceEnvironment\", \u0026finspace.EnvironmentArgs{\n\t\t\tName:           pulumi.String(\"MyEnvironment\"),\n\t\t\tKmsKeyId:       pulumi.String(\"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\"),\n\t\t\tFederationMode: finspace.EnvironmentFederationModeLocal,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst finSpaceEnvironment = new aws_native.finspace.Environment(\"finSpaceEnvironment\", {\n    name: \"MyEnvironment\",\n    kmsKeyId: \"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\",\n    federationMode: aws_native.finspace.EnvironmentFederationMode.Local,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfin_space_environment = aws_native.finspace.Environment(\"finSpaceEnvironment\",\n    name=\"MyEnvironment\",\n    kms_key_id=\"arn:aws:kms:us-east-1:123456789012:key/44efed01-30d0-4b39-80e7-165d5ed34524\",\n    federation_mode=aws_native.finspace.EnvironmentFederationMode.LOCAL)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsAccountId":{"type":"string","description":"AWS account ID associated with the Environment"},"dataBundles":{"type":"array","items":{"type":"string"},"description":"ARNs of FinSpace Data Bundles to install","replaceOnChanges":true},"dedicatedServiceAccountId":{"type":"string","description":"ID for FinSpace created account used to store Environment artifacts"},"description":{"type":"string","description":"Description of the Environment"},"environmentArn":{"type":"string","description":"ARN of the Environment"},"environmentId":{"type":"string","description":"Unique identifier for representing FinSpace Environment"},"environmentUrl":{"type":"string","description":"URL used to login to the Environment"},"federationMode":{"$ref":"#/types/aws-native:finspace:EnvironmentFederationMode","description":"Federation mode used with the Environment"},"federationParameters":{"$ref":"#/types/aws-native:finspace:EnvironmentFederationParameters","description":"Configuration information when authentication mode is FEDERATED.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"KMS key used to encrypt customer data within FinSpace Environment infrastructure","replaceOnChanges":true},"name":{"type":"string","description":"Name of the Environment"},"sageMakerStudioDomainUrl":{"type":"string","description":"SageMaker Studio Domain URL associated with the Environment"},"status":{"$ref":"#/types/aws-native:finspace:EnvironmentStatus","description":"State of the Environment"},"superuserParameters":{"$ref":"#/types/aws-native:finspace:EnvironmentSuperuserParameters","description":"Configuration information for the superuser.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["awsAccountId","dedicatedServiceAccountId","environmentArn","environmentId","environmentUrl","name","sageMakerStudioDomainUrl","status"],"inputProperties":{"dataBundles":{"type":"array","items":{"type":"string"},"description":"ARNs of FinSpace Data Bundles to install"},"description":{"type":"string","description":"Description of the Environment"},"federationMode":{"$ref":"#/types/aws-native:finspace:EnvironmentFederationMode","description":"Federation mode used with the Environment"},"federationParameters":{"$ref":"#/types/aws-native:finspace:EnvironmentFederationParameters","description":"Configuration information when authentication mode is FEDERATED."},"kmsKeyId":{"type":"string","description":"KMS key used to encrypt customer data within FinSpace Environment infrastructure"},"name":{"type":"string","description":"Name of the Environment"},"superuserParameters":{"$ref":"#/types/aws-native:finspace:EnvironmentSuperuserParameters","description":"Configuration information for the superuser."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:fis:ExperimentTemplate":{"description":"Resource schema for AWS::FIS::ExperimentTemplate\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var fisRole = new AwsNative.Iam.Role(\"fisRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = \"fis.amazonaws.com\",\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"FISRoleEC2Actions\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = new[]\n                            {\n                                \"ec2:RebootInstances\",\n                                \"ec2:StopInstances\",\n                                \"ec2:StartInstances\",\n                                \"ec2:TerminateInstances\",\n                            },\n                            [\"resource\"] = \"arn:aws:ec2:*:*:instance/*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var experimentTemplate = new AwsNative.Fis.ExperimentTemplate(\"experimentTemplate\", new()\n    {\n        Description = \"stop an instance based on a tag\",\n        Actions = \n        {\n            { \"stopInstances\", new AwsNative.Fis.Inputs.ExperimentTemplateActionArgs\n            {\n                ActionId = \"aws:ec2:stop-instances\",\n                Parameters = \n                {\n                    { \"startInstancesAfterDuration\", \"PT2M\" },\n                },\n                Targets = \n                {\n                    { \"instances\", \"oneRandomInstance\" },\n                },\n            } },\n        },\n        Targets = \n        {\n            { \"oneRandomInstance\", new AwsNative.Fis.Inputs.ExperimentTemplateTargetArgs\n            {\n                ResourceTags = \n                {\n                    { \"env\", \"prod\" },\n                },\n                ResourceType = \"aws:ec2:instance\",\n                SelectionMode = \"COUNT(1)\",\n            } },\n        },\n        StopConditions = new[]\n        {\n            new AwsNative.Fis.Inputs.ExperimentTemplateStopConditionArgs\n            {\n                Source = \"none\",\n            },\n        },\n        Tags = \n        {\n            { \"name\", \"fisStopInstances\" },\n        },\n        RoleArn = fisRole.Arn,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/fis\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tfisRole, err := iam.NewRole(ctx, \"fisRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": \"fis.amazonaws.com\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"FISRoleEC2Actions\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"ec2:RebootInstances\",\n\t\t\t\t\t\t\t\t\t\"ec2:StopInstances\",\n\t\t\t\t\t\t\t\t\t\"ec2:StartInstances\",\n\t\t\t\t\t\t\t\t\t\"ec2:TerminateInstances\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": \"arn:aws:ec2:*:*:instance/*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = fis.NewExperimentTemplate(ctx, \"experimentTemplate\", \u0026fis.ExperimentTemplateArgs{\n\t\t\tDescription: pulumi.String(\"stop an instance based on a tag\"),\n\t\t\tActions: fis.ExperimentTemplateActionMap{\n\t\t\t\t\"stopInstances\": \u0026fis.ExperimentTemplateActionArgs{\n\t\t\t\t\tActionId: pulumi.String(\"aws:ec2:stop-instances\"),\n\t\t\t\t\tParameters: pulumi.StringMap{\n\t\t\t\t\t\t\"startInstancesAfterDuration\": pulumi.String(\"PT2M\"),\n\t\t\t\t\t},\n\t\t\t\t\tTargets: pulumi.StringMap{\n\t\t\t\t\t\t\"instances\": pulumi.String(\"oneRandomInstance\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTargets: fis.ExperimentTemplateTargetMap{\n\t\t\t\t\"oneRandomInstance\": \u0026fis.ExperimentTemplateTargetArgs{\n\t\t\t\t\tResourceTags: pulumi.StringMap{\n\t\t\t\t\t\t\"env\": pulumi.String(\"prod\"),\n\t\t\t\t\t},\n\t\t\t\t\tResourceType:  pulumi.String(\"aws:ec2:instance\"),\n\t\t\t\t\tSelectionMode: pulumi.String(\"COUNT(1)\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tStopConditions: fis.ExperimentTemplateStopConditionArray{\n\t\t\t\t\u0026fis.ExperimentTemplateStopConditionArgs{\n\t\t\t\t\tSource: pulumi.String(\"none\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"name\": pulumi.String(\"fisStopInstances\"),\n\t\t\t},\n\t\t\tRoleArn: fisRole.Arn,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst fisRole = new aws_native.iam.Role(\"fisRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: \"fis.amazonaws.com\",\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n    policies: [{\n        policyName: \"FISRoleEC2Actions\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: [\n                    \"ec2:RebootInstances\",\n                    \"ec2:StopInstances\",\n                    \"ec2:StartInstances\",\n                    \"ec2:TerminateInstances\",\n                ],\n                resource: \"arn:aws:ec2:*:*:instance/*\",\n            }],\n        },\n    }],\n});\nconst experimentTemplate = new aws_native.fis.ExperimentTemplate(\"experimentTemplate\", {\n    description: \"stop an instance based on a tag\",\n    actions: {\n        stopInstances: {\n            actionId: \"aws:ec2:stop-instances\",\n            parameters: {\n                startInstancesAfterDuration: \"PT2M\",\n            },\n            targets: {\n                instances: \"oneRandomInstance\",\n            },\n        },\n    },\n    targets: {\n        oneRandomInstance: {\n            resourceTags: {\n                env: \"prod\",\n            },\n            resourceType: \"aws:ec2:instance\",\n            selectionMode: \"COUNT(1)\",\n        },\n    },\n    stopConditions: [{\n        source: \"none\",\n    }],\n    tags: {\n        name: \"fisStopInstances\",\n    },\n    roleArn: fisRole.arn,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfis_role = aws_native.iam.Role(\"fisRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": \"fis.amazonaws.com\",\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    },\n    policies=[{\n        \"policy_name\": \"FISRoleEC2Actions\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": [\n                    \"ec2:RebootInstances\",\n                    \"ec2:StopInstances\",\n                    \"ec2:StartInstances\",\n                    \"ec2:TerminateInstances\",\n                ],\n                \"resource\": \"arn:aws:ec2:*:*:instance/*\",\n            }],\n        },\n    }])\nexperiment_template = aws_native.fis.ExperimentTemplate(\"experimentTemplate\",\n    description=\"stop an instance based on a tag\",\n    actions={\n        \"stopInstances\": {\n            \"action_id\": \"aws:ec2:stop-instances\",\n            \"parameters\": {\n                \"startInstancesAfterDuration\": \"PT2M\",\n            },\n            \"targets\": {\n                \"instances\": \"oneRandomInstance\",\n            },\n        },\n    },\n    targets={\n        \"oneRandomInstance\": {\n            \"resource_tags\": {\n                \"env\": \"prod\",\n            },\n            \"resource_type\": \"aws:ec2:instance\",\n            \"selection_mode\": \"COUNT(1)\",\n        },\n    },\n    stop_conditions=[{\n        \"source\": \"none\",\n    }],\n    tags={\n        \"name\": \"fisStopInstances\",\n    },\n    role_arn=fis_role.arn)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"actions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:fis:ExperimentTemplateAction"},"description":"The actions for the experiment."},"awsId":{"type":"string","description":"The ID of the experiment template."},"description":{"type":"string","description":"The description for the experiment template."},"experimentOptions":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentOptions","description":"The experiment options for an experiment template."},"experimentReportConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentReportConfiguration","description":"Describes the report configuration for the experiment template."},"logConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateLogConfiguration","description":"The configuration for experiment logging."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role."},"stopConditions":{"type":"array","items":{"$ref":"#/types/aws-native:fis:ExperimentTemplateStopCondition"},"description":"The stop conditions for the experiment."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the experiment template."},"targets":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:fis:ExperimentTemplateTarget"},"description":"The targets for the experiment."}},"type":"object","required":["awsId","description","roleArn","stopConditions","targets"],"inputProperties":{"actions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:fis:ExperimentTemplateAction"},"description":"The actions for the experiment."},"description":{"type":"string","description":"The description for the experiment template."},"experimentOptions":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentOptions","description":"The experiment options for an experiment template."},"experimentReportConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentReportConfiguration","description":"Describes the report configuration for the experiment template."},"logConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateLogConfiguration","description":"The configuration for experiment logging."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role."},"stopConditions":{"type":"array","items":{"$ref":"#/types/aws-native:fis:ExperimentTemplateStopCondition"},"description":"The stop conditions for the experiment."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags for the experiment template."},"targets":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:fis:ExperimentTemplateTarget"},"description":"The targets for the experiment."}},"requiredInputs":["description","roleArn","stopConditions","targets"]},"aws-native:fis:TargetAccountConfiguration":{"description":"Resource schema for AWS::FIS::TargetAccountConfiguration","properties":{"accountId":{"type":"string","description":"The AWS account ID of the target account.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the target account."},"experimentTemplateId":{"type":"string","description":"The ID of the experiment template.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role for the target account."}},"type":"object","required":["accountId","experimentTemplateId","roleArn"],"inputProperties":{"accountId":{"type":"string","description":"The AWS account ID of the target account."},"description":{"type":"string","description":"The description of the target account."},"experimentTemplateId":{"type":"string","description":"The ID of the experiment template."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role for the target account."}},"requiredInputs":["accountId","experimentTemplateId","roleArn"]},"aws-native:fms:NotificationChannel":{"description":"Designates the IAM role and Amazon Simple Notification Service (SNS) topic that AWS Firewall Manager uses to record SNS logs.","properties":{"snsRoleName":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that allows Amazon  to record AWS Firewall Manager activity."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic that collects notifications from AWS Firewall Manager .","replaceOnChanges":true}},"type":"object","required":["snsRoleName","snsTopicArn"],"inputProperties":{"snsRoleName":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that allows Amazon  to record AWS Firewall Manager activity."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic that collects notifications from AWS Firewall Manager ."}},"requiredInputs":["snsRoleName","snsTopicArn"]},"aws-native:fms:Policy":{"description":"Creates an AWS Firewall Manager policy.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."},"awsId":{"type":"string","description":"The ID of the policy."},"deleteAllPolicyResources":{"type":"boolean","description":"Used when deleting a policy. If `true` , Firewall Manager performs cleanup according to the policy type.\n\nFor AWS WAF and Shield Advanced policies, Firewall Manager does the following:\n\n- Deletes rule groups created by Firewall Manager\n- Removes web ACLs from in-scope resources\n- Deletes web ACLs that contain no rules or rule groups\n\nFor security group policies, Firewall Manager does the following for each security group in the policy:\n\n- Disassociates the security group from in-scope resources\n- Deletes the security group if it was created through Firewall Manager and if it's no longer associated with any resources through another policy\n\nAfter the cleanup, in-scope resources are no longer protected by web ACLs in this policy. Protection of out-of-scope resources remains unchanged. Scope is determined by tags that you create and accounts that you associate with the policy. When creating the policy, if you specify that only resources in specific accounts or with specific tags are in scope of the policy, those accounts and resources are handled by the policy. All others are out of scope. If you don't specify tags or accounts, all resources are in scope."},"excludeMap":{"$ref":"#/types/aws-native:fms:PolicyIeMap","description":"Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to exclude from the policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.\n\nYou can specify inclusions or exclusions, but not both. If you specify an `IncludeMap` , AWS Firewall Manager applies the policy to all accounts specified by the `IncludeMap` , and does not evaluate any `ExcludeMap` specifications. If you do not specify an `IncludeMap` , then Firewall Manager applies the policy to all accounts except for those specified by the `ExcludeMap` .\n\nYou can specify account IDs, OUs, or a combination:\n\n- Specify account IDs by setting the key to `ACCOUNT` . For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"]}` .\n- Specify OUs by setting the key to `ORGUNIT` . For example, the following is a valid map: `{\"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` .\n- Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"], \"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` ."},"excludeResourceTags":{"type":"boolean","description":"Used only when tags are specified in the `ResourceTags` property. If this property is `True` , resources with the specified tags are not in scope of the policy. If it's `False` , only resources with the specified tags are in scope of the policy."},"includeMap":{"$ref":"#/types/aws-native:fms:PolicyIeMap","description":"Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to include in the policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.\n\nYou can specify inclusions or exclusions, but not both. If you specify an `IncludeMap` , AWS Firewall Manager applies the policy to all accounts specified by the `IncludeMap` , and does not evaluate any `ExcludeMap` specifications. If you do not specify an `IncludeMap` , then Firewall Manager applies the policy to all accounts except for those specified by the `ExcludeMap` .\n\nYou can specify account IDs, OUs, or a combination:\n\n- Specify account IDs by setting the key to `ACCOUNT` . For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"]}` .\n- Specify OUs by setting the key to `ORGUNIT` . For example, the following is a valid map: `{\"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` .\n- Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"], \"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` ."},"policyDescription":{"type":"string","description":"Your description of the AWS Firewall Manager policy."},"policyName":{"type":"string","description":"The name of the AWS Firewall Manager policy."},"remediationEnabled":{"type":"boolean","description":"Indicates if the policy should be automatically applied to new resources."},"resourceSetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the resource sets used by the policy."},"resourceTagLogicalOperator":{"$ref":"#/types/aws-native:fms:PolicyResourceTagLogicalOperator","description":"Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag.\n\nDefault: `AND`"},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:fms:PolicyResourceTag"},"description":"An array of `ResourceTag` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also `ExcludeResourceTags` ."},"resourceType":{"type":"string","description":"The type of resource protected by or in scope of the policy. This is in the format shown in the [AWS Resource Types Reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html) . To apply this policy to multiple resource types, specify a resource type of `ResourceTypeList` and then specify the resource types in a `ResourceTypeList` .\n\nThe following are valid resource types for each Firewall Manager policy type:\n\n- AWS WAF Classic - `AWS::ApiGateway::Stage` , `AWS::CloudFront::Distribution` , and `AWS::ElasticLoadBalancingV2::LoadBalancer` .\n- AWS WAF - `AWS::ApiGateway::Stage` , `AWS::ElasticLoadBalancingV2::LoadBalancer` , and `AWS::CloudFront::Distribution` .\n- Shield Advanced - `AWS::ElasticLoadBalancingV2::LoadBalancer` , `AWS::ElasticLoadBalancing::LoadBalancer` , `AWS::EC2::EIP` , and `AWS::CloudFront::Distribution` .\n- Network ACL - `AWS::EC2::Subnet` .\n- Security group usage audit - `AWS::EC2::SecurityGroup` .\n- Security group content audit - `AWS::EC2::SecurityGroup` , `AWS::EC2::NetworkInterface` , and `AWS::EC2::Instance` .\n- DNS Firewall, AWS Network Firewall , and third-party firewall - `AWS::EC2::VPC` ."},"resourceTypeList":{"type":"array","items":{"type":"string"},"description":"An array of `ResourceType` objects. Use this only to specify multiple resource types. To specify a single resource type, use `ResourceType` ."},"resourcesCleanUp":{"type":"boolean","description":"Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope.\n\nBy default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources.\n\nThis option is not available for Shield Advanced or AWS WAF Classic policies."},"securityServicePolicyData":{"$ref":"#/types/aws-native:fms:PolicySecurityServicePolicyData","description":"Details about the security service that is being used to protect the resources.\n\nThis contains the following settings:\n\n- Type - Indicates the service type that the policy uses to protect the resource. For security group policies, Firewall Manager supports one security group for each common policy and for each content audit policy. This is an adjustable limit that you can increase by contacting  .\n\nValid values: `DNS_FIREWALL` | `NETWORK_FIREWALL` | `SECURITY_GROUPS_COMMON` | `SECURITY_GROUPS_CONTENT_AUDIT` | `SECURITY_GROUPS_USAGE_AUDIT` | `SHIELD_ADVANCED` | `THIRD_PARTY_FIREWALL` | `WAFV2` | `WAF`\n- ManagedServiceData - Details about the service that are specific to the service type, in JSON format.\n\n- Example: `DNS_FIREWALL`\n\n`\"{\\\"type\\\":\\\"DNS_FIREWALL\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-1\\\",\\\"priority\\\":10}],\\\"postProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-2\\\",\\\"priority\\\":9911}]}\"`\n\n\u003e Valid values for `preProcessRuleGroups` are between 1 and 99. Valid values for `postProcessRuleGroups` are between 9901 and 10000.\n- Example: `NETWORK_FIREWALL` - Centralized deployment model\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"awsNetworkFirewallConfig\\\":{\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}},\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"OFF\\\"},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nWith automatic Availbility Zone configuration, Firewall Manager chooses which Availability Zones to create the endpoints in. To use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"]},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\": \\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\", \\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{ \\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[ \\\"10.0.0.0/28\\\"]}]} },\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"OFF\\\",\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nWith custom Availability Zone configuration, you define which specific Availability Zones to create endpoints in by configuring `firewallCreationConfig` . To configure the Availability Zones in `firewallCreationConfig` , specify either the `availabilityZoneName` or `availabilityZoneId` parameter, not both parameters.\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"],\\\"routeManagementConfig\\\":{\\\"allowCrossAZTrafficIfNoEndpoint\\\":true}},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall centralized deployment model\n\n`\"{ \\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\", \\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\", \\\"thirdPartyFirewallConfig\\\":{ \\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `CENTRALIZED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall distributed deployment model\n\n`\"{\\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\",\\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\",\\\"thirdPartyFirewallConfig\\\":{\\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{ \\\"distributedFirewallDeploymentModel\\\":{ \\\"distributedFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{ \\\"availabilityZoneConfigList\\\":[ {\\\"availabilityZoneName\\\":\\\"${AvailabilityZone}\\\" } ] } }, \\\"allowedIPV4CidrList\\\":[ ] } } } }\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `DISTRIBUTED` .\n- Specification for `SHIELD_ADVANCED` for Amazon CloudFront distributions\n\n`\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED|IGNORED|DISABLED\\\", \\\"automaticResponseAction\\\":\\\"BLOCK|COUNT\\\"}, \\\"overrideCustomerWebaclClassic\\\":true|false}\"`\n\nFor example: `\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED\\\", \\\"automaticResponseAction\\\":\\\"COUNT\\\"}}\"`\n\nThe default value for `automaticResponseStatus` is `IGNORED` . The value for `automaticResponseAction` is only required when `automaticResponseStatus` is set to `ENABLED` . The default value for `overrideCustomerWebaclClassic` is `false` .\n\nFor other resource types that you can protect with a Shield Advanced policy, this `ManagedServiceData` configuration is an empty string.\n- Example: `WAFV2`\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"version\\\":null,\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesAmazonIpReputationList\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nIn the `loggingConfiguration` , you can specify one `logDestinationConfigs` , you can optionally provide up to 20 `redactedFields` , and the `RedactedFieldType` must be one of `URI` , `QUERY_STRING` , `HEADER` , or `METHOD` .\n- Example: `AWS WAF Classic`\n\n`\"{\\\"type\\\": \\\"WAF\\\", \\\"ruleGroups\\\": [{\\\"id\\\":\\\"12345678-1bcd-9012-efga-0987654321ab\\\", \\\"overrideAction\\\" : {\\\"type\\\": \\\"COUNT\\\"}}], \\\"defaultAction\\\": {\\\"type\\\": \\\"BLOCK\\\"}}\"`\n- Example: `WAFV2` - AWS Firewall Manager support for AWS WAF managed rule group versioning\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"versionEnabled\\\":true,\\\"version\\\":\\\"Version_2.0\\\",\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesCommonRuleSet\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nTo use a specific version of a AWS WAF managed rule group in your Firewall Manager policy, you must set `versionEnabled` to `true` , and set `version` to the version you'd like to use. If you don't set `versionEnabled` to `true` , or if you omit `versionEnabled` , then Firewall Manager uses the default version of the AWS WAF managed rule group.\n- Example: `SECURITY_GROUPS_COMMON`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: Shared VPCs. Apply the preceding policy to resources in shared VPCs as well as to those in VPCs that the account owns\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"includeSharedVPC\\\":true,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: `SECURITY_GROUPS_CONTENT_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_CONTENT_AUDIT\\\",\\\"securityGroups\\\":[{\\\"id\\\":\\\"sg-000e55995d61a06bd\\\"}],\\\"securityGroupAction\\\":{\\\"type\\\":\\\"ALLOW\\\"}}\"`\n\nThe security group action for content audit can be `ALLOW` or `DENY` . For `ALLOW` , all in-scope security group rules must be within the allowed range of the policy's security group rules. For `DENY` , all in-scope security group rules must not contain a value or a range that matches a rule value or range in the policy security group.\n- Example: `SECURITY_GROUPS_USAGE_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_USAGE_AUDIT\\\",\\\"deleteUnusedSecurityGroups\\\":true,\\\"coalesceRedundantSecurityGroups\\\":true}\"`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource."}},"type":"object","required":["arn","awsId","excludeResourceTags","policyName","remediationEnabled","securityServicePolicyData"],"inputProperties":{"deleteAllPolicyResources":{"type":"boolean","description":"Used when deleting a policy. If `true` , Firewall Manager performs cleanup according to the policy type.\n\nFor AWS WAF and Shield Advanced policies, Firewall Manager does the following:\n\n- Deletes rule groups created by Firewall Manager\n- Removes web ACLs from in-scope resources\n- Deletes web ACLs that contain no rules or rule groups\n\nFor security group policies, Firewall Manager does the following for each security group in the policy:\n\n- Disassociates the security group from in-scope resources\n- Deletes the security group if it was created through Firewall Manager and if it's no longer associated with any resources through another policy\n\nAfter the cleanup, in-scope resources are no longer protected by web ACLs in this policy. Protection of out-of-scope resources remains unchanged. Scope is determined by tags that you create and accounts that you associate with the policy. When creating the policy, if you specify that only resources in specific accounts or with specific tags are in scope of the policy, those accounts and resources are handled by the policy. All others are out of scope. If you don't specify tags or accounts, all resources are in scope."},"excludeMap":{"$ref":"#/types/aws-native:fms:PolicyIeMap","description":"Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to exclude from the policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.\n\nYou can specify inclusions or exclusions, but not both. If you specify an `IncludeMap` , AWS Firewall Manager applies the policy to all accounts specified by the `IncludeMap` , and does not evaluate any `ExcludeMap` specifications. If you do not specify an `IncludeMap` , then Firewall Manager applies the policy to all accounts except for those specified by the `ExcludeMap` .\n\nYou can specify account IDs, OUs, or a combination:\n\n- Specify account IDs by setting the key to `ACCOUNT` . For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"]}` .\n- Specify OUs by setting the key to `ORGUNIT` . For example, the following is a valid map: `{\"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` .\n- Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"], \"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` ."},"excludeResourceTags":{"type":"boolean","description":"Used only when tags are specified in the `ResourceTags` property. If this property is `True` , resources with the specified tags are not in scope of the policy. If it's `False` , only resources with the specified tags are in scope of the policy."},"includeMap":{"$ref":"#/types/aws-native:fms:PolicyIeMap","description":"Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to include in the policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.\n\nYou can specify inclusions or exclusions, but not both. If you specify an `IncludeMap` , AWS Firewall Manager applies the policy to all accounts specified by the `IncludeMap` , and does not evaluate any `ExcludeMap` specifications. If you do not specify an `IncludeMap` , then Firewall Manager applies the policy to all accounts except for those specified by the `ExcludeMap` .\n\nYou can specify account IDs, OUs, or a combination:\n\n- Specify account IDs by setting the key to `ACCOUNT` . For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"]}` .\n- Specify OUs by setting the key to `ORGUNIT` . For example, the following is a valid map: `{\"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` .\n- Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"], \"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` ."},"policyDescription":{"type":"string","description":"Your description of the AWS Firewall Manager policy."},"policyName":{"type":"string","description":"The name of the AWS Firewall Manager policy."},"remediationEnabled":{"type":"boolean","description":"Indicates if the policy should be automatically applied to new resources."},"resourceSetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the resource sets used by the policy."},"resourceTagLogicalOperator":{"$ref":"#/types/aws-native:fms:PolicyResourceTagLogicalOperator","description":"Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag.\n\nDefault: `AND`"},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:fms:PolicyResourceTag"},"description":"An array of `ResourceTag` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also `ExcludeResourceTags` ."},"resourceType":{"type":"string","description":"The type of resource protected by or in scope of the policy. This is in the format shown in the [AWS Resource Types Reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html) . To apply this policy to multiple resource types, specify a resource type of `ResourceTypeList` and then specify the resource types in a `ResourceTypeList` .\n\nThe following are valid resource types for each Firewall Manager policy type:\n\n- AWS WAF Classic - `AWS::ApiGateway::Stage` , `AWS::CloudFront::Distribution` , and `AWS::ElasticLoadBalancingV2::LoadBalancer` .\n- AWS WAF - `AWS::ApiGateway::Stage` , `AWS::ElasticLoadBalancingV2::LoadBalancer` , and `AWS::CloudFront::Distribution` .\n- Shield Advanced - `AWS::ElasticLoadBalancingV2::LoadBalancer` , `AWS::ElasticLoadBalancing::LoadBalancer` , `AWS::EC2::EIP` , and `AWS::CloudFront::Distribution` .\n- Network ACL - `AWS::EC2::Subnet` .\n- Security group usage audit - `AWS::EC2::SecurityGroup` .\n- Security group content audit - `AWS::EC2::SecurityGroup` , `AWS::EC2::NetworkInterface` , and `AWS::EC2::Instance` .\n- DNS Firewall, AWS Network Firewall , and third-party firewall - `AWS::EC2::VPC` ."},"resourceTypeList":{"type":"array","items":{"type":"string"},"description":"An array of `ResourceType` objects. Use this only to specify multiple resource types. To specify a single resource type, use `ResourceType` ."},"resourcesCleanUp":{"type":"boolean","description":"Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope.\n\nBy default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources.\n\nThis option is not available for Shield Advanced or AWS WAF Classic policies."},"securityServicePolicyData":{"$ref":"#/types/aws-native:fms:PolicySecurityServicePolicyData","description":"Details about the security service that is being used to protect the resources.\n\nThis contains the following settings:\n\n- Type - Indicates the service type that the policy uses to protect the resource. For security group policies, Firewall Manager supports one security group for each common policy and for each content audit policy. This is an adjustable limit that you can increase by contacting  .\n\nValid values: `DNS_FIREWALL` | `NETWORK_FIREWALL` | `SECURITY_GROUPS_COMMON` | `SECURITY_GROUPS_CONTENT_AUDIT` | `SECURITY_GROUPS_USAGE_AUDIT` | `SHIELD_ADVANCED` | `THIRD_PARTY_FIREWALL` | `WAFV2` | `WAF`\n- ManagedServiceData - Details about the service that are specific to the service type, in JSON format.\n\n- Example: `DNS_FIREWALL`\n\n`\"{\\\"type\\\":\\\"DNS_FIREWALL\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-1\\\",\\\"priority\\\":10}],\\\"postProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-2\\\",\\\"priority\\\":9911}]}\"`\n\n\u003e Valid values for `preProcessRuleGroups` are between 1 and 99. Valid values for `postProcessRuleGroups` are between 9901 and 10000.\n- Example: `NETWORK_FIREWALL` - Centralized deployment model\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"awsNetworkFirewallConfig\\\":{\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}},\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"OFF\\\"},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nWith automatic Availbility Zone configuration, Firewall Manager chooses which Availability Zones to create the endpoints in. To use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"]},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\": \\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\", \\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{ \\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[ \\\"10.0.0.0/28\\\"]}]} },\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"OFF\\\",\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nWith custom Availability Zone configuration, you define which specific Availability Zones to create endpoints in by configuring `firewallCreationConfig` . To configure the Availability Zones in `firewallCreationConfig` , specify either the `availabilityZoneName` or `availabilityZoneId` parameter, not both parameters.\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"],\\\"routeManagementConfig\\\":{\\\"allowCrossAZTrafficIfNoEndpoint\\\":true}},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall centralized deployment model\n\n`\"{ \\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\", \\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\", \\\"thirdPartyFirewallConfig\\\":{ \\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `CENTRALIZED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall distributed deployment model\n\n`\"{\\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\",\\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\",\\\"thirdPartyFirewallConfig\\\":{\\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{ \\\"distributedFirewallDeploymentModel\\\":{ \\\"distributedFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{ \\\"availabilityZoneConfigList\\\":[ {\\\"availabilityZoneName\\\":\\\"${AvailabilityZone}\\\" } ] } }, \\\"allowedIPV4CidrList\\\":[ ] } } } }\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `DISTRIBUTED` .\n- Specification for `SHIELD_ADVANCED` for Amazon CloudFront distributions\n\n`\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED|IGNORED|DISABLED\\\", \\\"automaticResponseAction\\\":\\\"BLOCK|COUNT\\\"}, \\\"overrideCustomerWebaclClassic\\\":true|false}\"`\n\nFor example: `\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED\\\", \\\"automaticResponseAction\\\":\\\"COUNT\\\"}}\"`\n\nThe default value for `automaticResponseStatus` is `IGNORED` . The value for `automaticResponseAction` is only required when `automaticResponseStatus` is set to `ENABLED` . The default value for `overrideCustomerWebaclClassic` is `false` .\n\nFor other resource types that you can protect with a Shield Advanced policy, this `ManagedServiceData` configuration is an empty string.\n- Example: `WAFV2`\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"version\\\":null,\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesAmazonIpReputationList\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nIn the `loggingConfiguration` , you can specify one `logDestinationConfigs` , you can optionally provide up to 20 `redactedFields` , and the `RedactedFieldType` must be one of `URI` , `QUERY_STRING` , `HEADER` , or `METHOD` .\n- Example: `AWS WAF Classic`\n\n`\"{\\\"type\\\": \\\"WAF\\\", \\\"ruleGroups\\\": [{\\\"id\\\":\\\"12345678-1bcd-9012-efga-0987654321ab\\\", \\\"overrideAction\\\" : {\\\"type\\\": \\\"COUNT\\\"}}], \\\"defaultAction\\\": {\\\"type\\\": \\\"BLOCK\\\"}}\"`\n- Example: `WAFV2` - AWS Firewall Manager support for AWS WAF managed rule group versioning\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"versionEnabled\\\":true,\\\"version\\\":\\\"Version_2.0\\\",\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesCommonRuleSet\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nTo use a specific version of a AWS WAF managed rule group in your Firewall Manager policy, you must set `versionEnabled` to `true` , and set `version` to the version you'd like to use. If you don't set `versionEnabled` to `true` , or if you omit `versionEnabled` , then Firewall Manager uses the default version of the AWS WAF managed rule group.\n- Example: `SECURITY_GROUPS_COMMON`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: Shared VPCs. Apply the preceding policy to resources in shared VPCs as well as to those in VPCs that the account owns\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"includeSharedVPC\\\":true,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: `SECURITY_GROUPS_CONTENT_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_CONTENT_AUDIT\\\",\\\"securityGroups\\\":[{\\\"id\\\":\\\"sg-000e55995d61a06bd\\\"}],\\\"securityGroupAction\\\":{\\\"type\\\":\\\"ALLOW\\\"}}\"`\n\nThe security group action for content audit can be `ALLOW` or `DENY` . For `ALLOW` , all in-scope security group rules must be within the allowed range of the policy's security group rules. For `DENY` , all in-scope security group rules must not contain a value or a range that matches a rule value or range in the policy security group.\n- Example: `SECURITY_GROUPS_USAGE_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_USAGE_AUDIT\\\",\\\"deleteUnusedSecurityGroups\\\":true,\\\"coalesceRedundantSecurityGroups\\\":true}\"`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource."}},"requiredInputs":["excludeResourceTags","remediationEnabled","securityServicePolicyData"]},"aws-native:fms:ResourceSet":{"description":"Creates an AWS Firewall Manager resource set.","properties":{"awsId":{"type":"string","description":"A unique identifier for the resource set. This ID is returned in the responses to create and list commands. You provide it to operations like update and delete."},"description":{"type":"string","description":"A description of the resource set."},"name":{"type":"string","description":"The descriptive name of the resource set. You can't change the name of a resource set after you create it."},"resourceTypeList":{"type":"array","items":{"type":"string"},"description":"Determines the resources that can be associated to the resource set. Depending on your setting for max results and the number of resource sets, a single call might not return the full list."},"resources":{"type":"array","items":{"type":"string"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"type":"object","required":["awsId","name","resourceTypeList"],"inputProperties":{"description":{"type":"string","description":"A description of the resource set."},"name":{"type":"string","description":"The descriptive name of the resource set. You can't change the name of a resource set after you create it."},"resourceTypeList":{"type":"array","items":{"type":"string"},"description":"Determines the resources that can be associated to the resource set. Depending on your setting for max results and the number of resource sets, a single call might not return the full list."},"resources":{"type":"array","items":{"type":"string"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["resourceTypeList"]},"aws-native:forecast:Dataset":{"description":"Resource Type Definition for AWS::Forecast::Dataset","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset."},"dataFrequency":{"type":"string","description":"Frequency of data collection. This parameter is required for RELATED_TIME_SERIES"},"datasetName":{"type":"string","description":"A name for the dataset","replaceOnChanges":true},"datasetType":{"$ref":"#/types/aws-native:forecast:DatasetType","description":"The dataset type"},"domain":{"$ref":"#/types/aws-native:forecast:DatasetDomain","description":"The domain associated with the dataset"},"encryptionConfig":{"$ref":"#/types/aws-native:forecast:EncryptionConfigProperties","description":"A Key Management Service (KMS) key and the Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key."},"schema":{"$ref":"#/types/aws-native:forecast:SchemaProperties","description":"The schema for the dataset. The schema attributes and their order must match the fields in your data. The dataset `Domain` and `DatasetType` that you choose determine the minimum required fields in your training data. For information about the required fields for a specific dataset domain and type, see [Dataset Domains and Dataset Types](https://docs.aws.amazon.com/forecast/latest/dg/howitworks-domains-ds-types.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["arn","datasetName","datasetType","domain","schema"],"inputProperties":{"dataFrequency":{"type":"string","description":"Frequency of data collection. This parameter is required for RELATED_TIME_SERIES"},"datasetName":{"type":"string","description":"A name for the dataset"},"datasetType":{"$ref":"#/types/aws-native:forecast:DatasetType","description":"The dataset type"},"domain":{"$ref":"#/types/aws-native:forecast:DatasetDomain","description":"The domain associated with the dataset"},"encryptionConfig":{"$ref":"#/types/aws-native:forecast:EncryptionConfigProperties","description":"A Key Management Service (KMS) key and the Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key."},"schema":{"$ref":"#/types/aws-native:forecast:SchemaProperties","description":"The schema for the dataset. The schema attributes and their order must match the fields in your data. The dataset `Domain` and `DatasetType` that you choose determine the minimum required fields in your training data. For information about the required fields for a specific dataset domain and type, see [Dataset Domains and Dataset Types](https://docs.aws.amazon.com/forecast/latest/dg/howitworks-domains-ds-types.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["datasetType","domain","schema"]},"aws-native:forecast:DatasetGroup":{"description":"Represents a dataset group that holds a collection of related datasets","properties":{"datasetArns":{"type":"array","items":{"type":"string"},"description":"An array of Amazon Resource Names (ARNs) of the datasets that you want to include in the dataset group."},"datasetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset group to delete."},"datasetGroupName":{"type":"string","description":"A name for the dataset group.","replaceOnChanges":true},"domain":{"$ref":"#/types/aws-native:forecast:DatasetGroupDomain","description":"The domain associated with the dataset group. When you add a dataset to a dataset group, this value and the value specified for the Domain parameter of the CreateDataset operation must match."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of Application Insights application."}},"type":"object","required":["datasetGroupArn","datasetGroupName","domain"],"inputProperties":{"datasetArns":{"type":"array","items":{"type":"string"},"description":"An array of Amazon Resource Names (ARNs) of the datasets that you want to include in the dataset group."},"datasetGroupName":{"type":"string","description":"A name for the dataset group."},"domain":{"$ref":"#/types/aws-native:forecast:DatasetGroupDomain","description":"The domain associated with the dataset group. When you add a dataset to a dataset group, this value and the value specified for the Domain parameter of the CreateDataset operation must match."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of Application Insights application."}},"requiredInputs":["domain"]},"aws-native:frauddetector:Detector":{"description":"A resource schema for a Detector in Amazon Fraud Detector.","properties":{"arn":{"type":"string","description":"The ARN of the detector."},"associatedModels":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorModel"},"description":"The models to associate with this detector."},"createdTime":{"type":"string","description":"The time when the detector was created."},"description":{"type":"string","description":"The description of the detector."},"detectorId":{"type":"string","description":"The ID of the detector","replaceOnChanges":true},"detectorVersionId":{"type":"string","description":"The active version ID of the detector"},"detectorVersionStatus":{"$ref":"#/types/aws-native:frauddetector:DetectorVersionStatus","description":"The desired detector version status for the detector"},"eventType":{"$ref":"#/types/aws-native:frauddetector:DetectorEventType","description":"The event type to associate this detector with."},"lastUpdatedTime":{"type":"string","description":"The time when the detector was last updated."},"ruleExecutionMode":{"$ref":"#/types/aws-native:frauddetector:DetectorRuleExecutionMode","description":"The rule execution mode for the rules included in the detector version.\n\nValid values: `FIRST_MATCHED | ALL_MATCHED` Default value: `FIRST_MATCHED`\n\nYou can define and edit the rule mode at the detector version level, when it is in draft status.\n\nIf you specify `FIRST_MATCHED` , Amazon Fraud Detector evaluates rules sequentially, first to last, stopping at the first matched rule. Amazon Fraud dectector then provides the outcomes for that single rule.\n\nIf you specifiy `ALL_MATCHED` , Amazon Fraud Detector evaluates all rules and returns the outcomes for all matched rules."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorRule"},"description":"The rules to include in the detector version."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this detector."}},"type":"object","required":["arn","createdTime","detectorId","detectorVersionId","eventType","lastUpdatedTime","rules"],"inputProperties":{"associatedModels":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorModel"},"description":"The models to associate with this detector."},"description":{"type":"string","description":"The description of the detector."},"detectorId":{"type":"string","description":"The ID of the detector"},"detectorVersionStatus":{"$ref":"#/types/aws-native:frauddetector:DetectorVersionStatus","description":"The desired detector version status for the detector"},"eventType":{"$ref":"#/types/aws-native:frauddetector:DetectorEventType","description":"The event type to associate this detector with."},"ruleExecutionMode":{"$ref":"#/types/aws-native:frauddetector:DetectorRuleExecutionMode","description":"The rule execution mode for the rules included in the detector version.\n\nValid values: `FIRST_MATCHED | ALL_MATCHED` Default value: `FIRST_MATCHED`\n\nYou can define and edit the rule mode at the detector version level, when it is in draft status.\n\nIf you specify `FIRST_MATCHED` , Amazon Fraud Detector evaluates rules sequentially, first to last, stopping at the first matched rule. Amazon Fraud dectector then provides the outcomes for that single rule.\n\nIf you specifiy `ALL_MATCHED` , Amazon Fraud Detector evaluates all rules and returns the outcomes for all matched rules."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:DetectorRule"},"description":"The rules to include in the detector version."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this detector."}},"requiredInputs":["detectorId","eventType","rules"]},"aws-native:frauddetector:EntityType":{"description":"An entity type for fraud detector.","properties":{"arn":{"type":"string","description":"The entity type ARN."},"createdTime":{"type":"string","description":"The timestamp when the entity type was created."},"description":{"type":"string","description":"The entity type description."},"lastUpdatedTime":{"type":"string","description":"The timestamp when the entity type was last updated."},"name":{"type":"string","description":"The name of the entity type.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this entity type."}},"type":"object","required":["arn","createdTime","lastUpdatedTime","name"],"inputProperties":{"description":{"type":"string","description":"The entity type description."},"name":{"type":"string","description":"The name of the entity type."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this entity type."}}},"aws-native:frauddetector:EventType":{"description":"A resource schema for an EventType in Amazon Fraud Detector.","properties":{"arn":{"type":"string","description":"The ARN of the event type."},"createdTime":{"type":"string","description":"The time when the event type was created."},"description":{"type":"string","description":"The description of the event type."},"entityTypes":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeEntityType"},"description":"The event type entity types."},"eventVariables":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeEventVariable"},"description":"The event type event variables."},"labels":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeLabel"},"description":"The event type labels."},"lastUpdatedTime":{"type":"string","description":"The time when the event type was last updated."},"name":{"type":"string","description":"The name for the event type","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this event type."}},"type":"object","required":["arn","createdTime","entityTypes","eventVariables","labels","lastUpdatedTime","name"],"inputProperties":{"description":{"type":"string","description":"The description of the event type."},"entityTypes":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeEntityType"},"description":"The event type entity types."},"eventVariables":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeEventVariable"},"description":"The event type event variables."},"labels":{"type":"array","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeLabel"},"description":"The event type labels."},"name":{"type":"string","description":"The name for the event type"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this event type."}},"requiredInputs":["entityTypes","eventVariables","labels"]},"aws-native:frauddetector:Label":{"description":"An label for fraud detector.","properties":{"arn":{"type":"string","description":"The label ARN."},"createdTime":{"type":"string","description":"The timestamp when the label was created."},"description":{"type":"string","description":"The label description."},"lastUpdatedTime":{"type":"string","description":"The timestamp when the label was last updated."},"name":{"type":"string","description":"The name of the label.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this label."}},"type":"object","required":["arn","createdTime","lastUpdatedTime","name"],"inputProperties":{"description":{"type":"string","description":"The label description."},"name":{"type":"string","description":"The name of the label."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this label."}}},"aws-native:frauddetector:List":{"description":"A resource schema for a List in Amazon Fraud Detector.","properties":{"arn":{"type":"string","description":"The list ARN."},"createdTime":{"type":"string","description":"The time when the list was created."},"description":{"type":"string","description":"The description of the list."},"elements":{"type":"array","items":{"type":"string"},"description":"The elements in this list."},"lastUpdatedTime":{"type":"string","description":"The time when the list was last updated."},"name":{"type":"string","description":"The name of the list.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this list."},"variableType":{"type":"string","description":"The variable type of the list."}},"type":"object","required":["arn","createdTime","lastUpdatedTime","name"],"inputProperties":{"description":{"type":"string","description":"The description of the list."},"elements":{"type":"array","items":{"type":"string"},"description":"The elements in this list."},"name":{"type":"string","description":"The name of the list."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this list."},"variableType":{"type":"string","description":"The variable type of the list."}}},"aws-native:frauddetector:Outcome":{"description":"An outcome for rule evaluation.","properties":{"arn":{"type":"string","description":"The outcome ARN."},"createdTime":{"type":"string","description":"The timestamp when the outcome was created."},"description":{"type":"string","description":"The outcome description."},"lastUpdatedTime":{"type":"string","description":"The timestamp when the outcome was last updated."},"name":{"type":"string","description":"The name of the outcome.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this outcome."}},"type":"object","required":["arn","createdTime","lastUpdatedTime","name"],"inputProperties":{"description":{"type":"string","description":"The outcome description."},"name":{"type":"string","description":"The name of the outcome."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this outcome."}}},"aws-native:frauddetector:Variable":{"description":"A resource schema for a Variable in Amazon Fraud Detector.","properties":{"arn":{"type":"string","description":"The ARN of the variable."},"createdTime":{"type":"string","description":"The time when the variable was created."},"dataSource":{"$ref":"#/types/aws-native:frauddetector:VariableDataSource","description":"The source of the data."},"dataType":{"$ref":"#/types/aws-native:frauddetector:VariableDataType","description":"The data type."},"defaultValue":{"type":"string","description":"The default value for the variable when no value is received."},"description":{"type":"string","description":"The description."},"lastUpdatedTime":{"type":"string","description":"The time when the variable was last updated."},"name":{"type":"string","description":"The name of the variable.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this variable."},"variableType":{"$ref":"#/types/aws-native:frauddetector:VariableType","description":"The variable type. For more information see https://docs.aws.amazon.com/frauddetector/latest/ug/create-a-variable.html#variable-types"}},"type":"object","required":["arn","createdTime","dataSource","dataType","defaultValue","lastUpdatedTime","name"],"inputProperties":{"dataSource":{"$ref":"#/types/aws-native:frauddetector:VariableDataSource","description":"The source of the data."},"dataType":{"$ref":"#/types/aws-native:frauddetector:VariableDataType","description":"The data type."},"defaultValue":{"type":"string","description":"The default value for the variable when no value is received."},"description":{"type":"string","description":"The description."},"name":{"type":"string","description":"The name of the variable."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags associated with this variable."},"variableType":{"$ref":"#/types/aws-native:frauddetector:VariableType","description":"The variable type. For more information see https://docs.aws.amazon.com/frauddetector/latest/ug/create-a-variable.html#variable-types"}},"requiredInputs":["dataSource","dataType","defaultValue"]},"aws-native:fsx:DataRepositoryAssociation":{"description":"Resource Type definition for AWS::FSx::DataRepositoryAssociation\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var fsId = config.Require(\"fsId\");\n    var draIdExportName = config.Require(\"draIdExportName\");\n    var fileSystemPath = config.Require(\"fileSystemPath\");\n    var importedFileChunkSize = config.Require(\"importedFileChunkSize\");\n    var testDRA = new AwsNative.FSx.DataRepositoryAssociation(\"testDRA\", new()\n    {\n        FileSystemId = fsId,\n        FileSystemPath = fileSystemPath,\n        DataRepositoryPath = \"s3://example-bucket\",\n        BatchImportMetaDataOnCreate = true,\n        ImportedFileChunkSize = importedFileChunkSize,\n        S3 = new AwsNative.FSx.Inputs.DataRepositoryAssociationS3Args\n        {\n            AutoImportPolicy = new AwsNative.FSx.Inputs.DataRepositoryAssociationAutoImportPolicyArgs\n            {\n                Events = new[]\n                {\n                    AwsNative.FSx.DataRepositoryAssociationEventType.New,\n                    AwsNative.FSx.DataRepositoryAssociationEventType.Changed,\n                    AwsNative.FSx.DataRepositoryAssociationEventType.Deleted,\n                },\n            },\n            AutoExportPolicy = new AwsNative.FSx.Inputs.DataRepositoryAssociationAutoExportPolicyArgs\n            {\n                Events = new[]\n                {\n                    AwsNative.FSx.DataRepositoryAssociationEventType.New,\n                    AwsNative.FSx.DataRepositoryAssociationEventType.Changed,\n                    AwsNative.FSx.DataRepositoryAssociationEventType.Deleted,\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Location\",\n                Value = \"Boston\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"draId\"] = testDRA.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/fsx\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tfsId := cfg.Require(\"fsId\")\n\t\tdraIdExportName := cfg.Require(\"draIdExportName\")\n\t\tfileSystemPath := cfg.Require(\"fileSystemPath\")\n\t\timportedFileChunkSize := cfg.Require(\"importedFileChunkSize\")\n\t\ttestDRA, err := fsx.NewDataRepositoryAssociation(ctx, \"testDRA\", \u0026fsx.DataRepositoryAssociationArgs{\n\t\t\tFileSystemId:                pulumi.String(pulumi.String(fsId)),\n\t\t\tFileSystemPath:              pulumi.String(pulumi.String(fileSystemPath)),\n\t\t\tDataRepositoryPath:          pulumi.String(\"s3://example-bucket\"),\n\t\t\tBatchImportMetaDataOnCreate: pulumi.Bool(true),\n\t\t\tImportedFileChunkSize:       pulumi.String(importedFileChunkSize),\n\t\t\tS3: \u0026fsx.DataRepositoryAssociationS3Args{\n\t\t\t\tAutoImportPolicy: \u0026fsx.DataRepositoryAssociationAutoImportPolicyArgs{\n\t\t\t\t\tEvents: fsx.DataRepositoryAssociationEventTypeArray{\n\t\t\t\t\t\tfsx.DataRepositoryAssociationEventTypeNew,\n\t\t\t\t\t\tfsx.DataRepositoryAssociationEventTypeChanged,\n\t\t\t\t\t\tfsx.DataRepositoryAssociationEventTypeDeleted,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tAutoExportPolicy: \u0026fsx.DataRepositoryAssociationAutoExportPolicyArgs{\n\t\t\t\t\tEvents: fsx.DataRepositoryAssociationEventTypeArray{\n\t\t\t\t\t\tfsx.DataRepositoryAssociationEventTypeNew,\n\t\t\t\t\t\tfsx.DataRepositoryAssociationEventTypeChanged,\n\t\t\t\t\t\tfsx.DataRepositoryAssociationEventTypeDeleted,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Location\"),\n\t\t\t\t\tValue: pulumi.String(\"Boston\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"draId\", testDRA.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst fsId = config.require(\"fsId\");\nconst draIdExportName = config.require(\"draIdExportName\");\nconst fileSystemPath = config.require(\"fileSystemPath\");\nconst importedFileChunkSize = config.require(\"importedFileChunkSize\");\nconst testDRA = new aws_native.fsx.DataRepositoryAssociation(\"testDRA\", {\n    fileSystemId: fsId,\n    fileSystemPath: fileSystemPath,\n    dataRepositoryPath: \"s3://example-bucket\",\n    batchImportMetaDataOnCreate: true,\n    importedFileChunkSize: importedFileChunkSize,\n    s3: {\n        autoImportPolicy: {\n            events: [\n                aws_native.fsx.DataRepositoryAssociationEventType.New,\n                aws_native.fsx.DataRepositoryAssociationEventType.Changed,\n                aws_native.fsx.DataRepositoryAssociationEventType.Deleted,\n            ],\n        },\n        autoExportPolicy: {\n            events: [\n                aws_native.fsx.DataRepositoryAssociationEventType.New,\n                aws_native.fsx.DataRepositoryAssociationEventType.Changed,\n                aws_native.fsx.DataRepositoryAssociationEventType.Deleted,\n            ],\n        },\n    },\n    tags: [{\n        key: \"Location\",\n        value: \"Boston\",\n    }],\n});\nexport const draId = testDRA.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nfs_id = config.require(\"fsId\")\ndra_id_export_name = config.require(\"draIdExportName\")\nfile_system_path = config.require(\"fileSystemPath\")\nimported_file_chunk_size = config.require(\"importedFileChunkSize\")\ntest_dra = aws_native.fsx.DataRepositoryAssociation(\"testDRA\",\n    file_system_id=fs_id,\n    file_system_path=file_system_path,\n    data_repository_path=\"s3://example-bucket\",\n    batch_import_meta_data_on_create=True,\n    imported_file_chunk_size=imported_file_chunk_size,\n    s3={\n        \"auto_import_policy\": {\n            \"events\": [\n                aws_native.fsx.DataRepositoryAssociationEventType.NEW,\n                aws_native.fsx.DataRepositoryAssociationEventType.CHANGED,\n                aws_native.fsx.DataRepositoryAssociationEventType.DELETED,\n            ],\n        },\n        \"auto_export_policy\": {\n            \"events\": [\n                aws_native.fsx.DataRepositoryAssociationEventType.NEW,\n                aws_native.fsx.DataRepositoryAssociationEventType.CHANGED,\n                aws_native.fsx.DataRepositoryAssociationEventType.DELETED,\n            ],\n        },\n    },\n    tags=[{\n        \"key\": \"Location\",\n        \"value\": \"Boston\",\n    }])\npulumi.export(\"draId\", test_dra.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"associationId":{"type":"string","description":"The system-generated, unique ID of the data repository association."},"batchImportMetaDataOnCreate":{"type":"boolean","description":"A boolean flag indicating whether an import data repository task to import metadata should run after the data repository association is created. The task runs if this flag is set to true.","replaceOnChanges":true},"dataRepositoryPath":{"type":"string","description":"The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format s3://myBucket/myPrefix/ . This path specifies where in the S3 data repository files will be imported from or exported to.","replaceOnChanges":true},"fileSystemId":{"type":"string","description":"The globally unique ID of the file system, assigned by Amazon FSx.","replaceOnChanges":true},"fileSystemPath":{"type":"string","description":"This path specifies where in your file system files will be exported from or imported to. This file system directory can be linked to only one Amazon S3 bucket, and no other S3 bucket can be linked to the directory.","replaceOnChanges":true},"importedFileChunkSize":{"type":"integer","description":"For files imported from a data repository, this value determines the stripe count and maximum amount of data per file (in MiB) stored on a single physical disk. The maximum number of disks that a single file can be striped across is limited by the total number of disks that make up the file system."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) for a given resource. ARNs uniquely identify Amazon Web Services resources. We require an ARN when you need to specify a resource unambiguously across all of Amazon Web Services. For more information, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference."},"s3":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationS3","description":"The configuration for an Amazon S3 data repository linked to an Amazon FSx Lustre file system with a data repository association. The configuration defines which file events (new, changed, or deleted files or directories) are automatically imported from the linked data repository to the file system or automatically exported from the file system to the data repository."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of Tag values, with a maximum of 50 elements."}},"type":"object","required":["associationId","dataRepositoryPath","fileSystemId","fileSystemPath","resourceArn"],"inputProperties":{"batchImportMetaDataOnCreate":{"type":"boolean","description":"A boolean flag indicating whether an import data repository task to import metadata should run after the data repository association is created. The task runs if this flag is set to true."},"dataRepositoryPath":{"type":"string","description":"The path to the Amazon S3 data repository that will be linked to the file system. The path can be an S3 bucket or prefix in the format s3://myBucket/myPrefix/ . This path specifies where in the S3 data repository files will be imported from or exported to."},"fileSystemId":{"type":"string","description":"The globally unique ID of the file system, assigned by Amazon FSx."},"fileSystemPath":{"type":"string","description":"This path specifies where in your file system files will be exported from or imported to. This file system directory can be linked to only one Amazon S3 bucket, and no other S3 bucket can be linked to the directory."},"importedFileChunkSize":{"type":"integer","description":"For files imported from a data repository, this value determines the stripe count and maximum amount of data per file (in MiB) stored on a single physical disk. The maximum number of disks that a single file can be striped across is limited by the total number of disks that make up the file system."},"s3":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationS3","description":"The configuration for an Amazon S3 data repository linked to an Amazon FSx Lustre file system with a data repository association. The configuration defines which file events (new, changed, or deleted files or directories) are automatically imported from the linked data repository to the file system or automatically exported from the file system to the data repository."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of Tag values, with a maximum of 50 elements."}},"requiredInputs":["dataRepositoryPath","fileSystemId","fileSystemPath"]},"aws-native:fsx:S3AccessPointAttachment":{"description":"Resource type definition for AWS::FSx::S3AccessPointAttachment","properties":{"name":{"type":"string","description":"The name of the S3 access point attachment; also used for the name of the S3 access point.","replaceOnChanges":true},"ontapConfiguration":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPointOntapConfiguration","description":"The OntapConfiguration of the S3 access point attachment.","replaceOnChanges":true},"openZfsConfiguration":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPointOpenZfsConfiguration","description":"The OpenZFSConfiguration of the S3 access point attachment.","replaceOnChanges":true},"s3AccessPoint":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPoint","description":"The S3 access point configuration of the S3 access point attachment.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentType","description":"The type of Amazon FSx volume that the S3 access point is attached to.","replaceOnChanges":true}},"type":"object","required":["name","type"],"inputProperties":{"name":{"type":"string","description":"The name of the S3 access point attachment; also used for the name of the S3 access point."},"ontapConfiguration":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPointOntapConfiguration","description":"The OntapConfiguration of the S3 access point attachment."},"openZfsConfiguration":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPointOpenZfsConfiguration","description":"The OpenZFSConfiguration of the S3 access point attachment."},"s3AccessPoint":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentS3AccessPoint","description":"The S3 access point configuration of the S3 access point attachment."},"type":{"$ref":"#/types/aws-native:fsx:S3AccessPointAttachmentType","description":"The type of Amazon FSx volume that the S3 access point is attached to."}},"requiredInputs":["type"]},"aws-native:gamelift:Alias":{"description":"The AWS::GameLift::Alias resource creates an alias for an Amazon GameLift (GameLift) fleet destination.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var aliasResource = new AwsNative.GameLift.Alias(\"aliasResource\", new()\n    {\n        Name = \"MyTerminalAlias\",\n        Description = \"A terminal alias\",\n        RoutingStrategy = new AwsNative.GameLift.Inputs.AliasRoutingStrategyArgs\n        {\n            Type = AwsNative.GameLift.AliasRoutingStrategyType.Terminal,\n            Message = \"Terminal routing strategy message\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := gamelift.NewAlias(ctx, \"aliasResource\", \u0026gamelift.AliasArgs{\n\t\t\tName:        pulumi.String(\"MyTerminalAlias\"),\n\t\t\tDescription: pulumi.String(\"A terminal alias\"),\n\t\t\tRoutingStrategy: \u0026gamelift.AliasRoutingStrategyArgs{\n\t\t\t\tType:    gamelift.AliasRoutingStrategyTypeTerminal,\n\t\t\t\tMessage: pulumi.String(\"Terminal routing strategy message\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst aliasResource = new aws_native.gamelift.Alias(\"aliasResource\", {\n    name: \"MyTerminalAlias\",\n    description: \"A terminal alias\",\n    routingStrategy: {\n        type: aws_native.gamelift.AliasRoutingStrategyType.Terminal,\n        message: \"Terminal routing strategy message\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nalias_resource = aws_native.gamelift.Alias(\"aliasResource\",\n    name=\"MyTerminalAlias\",\n    description=\"A terminal alias\",\n    routing_strategy={\n        \"type\": aws_native.gamelift.AliasRoutingStrategyType.TERMINAL,\n        \"message\": \"Terminal routing strategy message\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var aliasResource = new AwsNative.GameLift.Alias(\"aliasResource\", new()\n    {\n        Name = \"MyTerminalAlias\",\n        Description = \"A terminal alias\",\n        RoutingStrategy = new AwsNative.GameLift.Inputs.AliasRoutingStrategyArgs\n        {\n            Type = AwsNative.GameLift.AliasRoutingStrategyType.Terminal,\n            Message = \"Terminal routing strategy message\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := gamelift.NewAlias(ctx, \"aliasResource\", \u0026gamelift.AliasArgs{\n\t\t\tName:        pulumi.String(\"MyTerminalAlias\"),\n\t\t\tDescription: pulumi.String(\"A terminal alias\"),\n\t\t\tRoutingStrategy: \u0026gamelift.AliasRoutingStrategyArgs{\n\t\t\t\tType:    gamelift.AliasRoutingStrategyTypeTerminal,\n\t\t\t\tMessage: pulumi.String(\"Terminal routing strategy message\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst aliasResource = new aws_native.gamelift.Alias(\"aliasResource\", {\n    name: \"MyTerminalAlias\",\n    description: \"A terminal alias\",\n    routingStrategy: {\n        type: aws_native.gamelift.AliasRoutingStrategyType.Terminal,\n        message: \"Terminal routing strategy message\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nalias_resource = aws_native.gamelift.Alias(\"aliasResource\",\n    name=\"MyTerminalAlias\",\n    description=\"A terminal alias\",\n    routing_strategy={\n        \"type\": aws_native.gamelift.AliasRoutingStrategyType.TERMINAL,\n        \"message\": \"Terminal routing strategy message\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"aliasArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift Alias resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift Alias ARN, the resource ID matches the AliasId value."},"aliasId":{"type":"string","description":"Unique alias ID"},"description":{"type":"string","description":"A human-readable description of the alias."},"name":{"type":"string","description":"A descriptive label that is associated with an alias. Alias names do not need to be unique."},"routingStrategy":{"$ref":"#/types/aws-native:gamelift:AliasRoutingStrategy","description":"A routing configuration that specifies where traffic is directed for this alias, such as to a fleet or to a message."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["aliasArn","aliasId","name","routingStrategy"],"inputProperties":{"description":{"type":"string","description":"A human-readable description of the alias."},"name":{"type":"string","description":"A descriptive label that is associated with an alias. Alias names do not need to be unique."},"routingStrategy":{"$ref":"#/types/aws-native:gamelift:AliasRoutingStrategy","description":"A routing configuration that specifies where traffic is directed for this alias, such as to a fleet or to a message."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["routingStrategy"]},"aws-native:gamelift:Build":{"description":"Resource Type definition for AWS::GameLift::Build","properties":{"buildArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift build resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift build ARN, the resource ID matches the BuildId value."},"buildId":{"type":"string","description":"A unique identifier for a build to be deployed on the new fleet. If you are deploying the fleet with a custom game build, you must specify this property. The build must have been successfully uploaded to Amazon GameLift and be in a READY status. This fleet setting cannot be changed once the fleet is created."},"name":{"type":"string","description":"A descriptive label that is associated with a build. Build names do not need to be unique."},"operatingSystem":{"$ref":"#/types/aws-native:gamelift:BuildOperatingSystem","description":"The operating system that the game server binaries are built to run on. This value determines the type of fleet resources that you can use for this build. If your game build contains multiple executables, they all must run on the same operating system. If an operating system is not specified when creating a build, Amazon GameLift uses the default value (WINDOWS_2012). This value cannot be changed later.","replaceOnChanges":true},"serverSdkVersion":{"type":"string","description":"A server SDK version you used when integrating your game server build with Amazon GameLift. By default Amazon GameLift sets this value to 4.0.2.","replaceOnChanges":true},"storageLocation":{"$ref":"#/types/aws-native:gamelift:BuildStorageLocation","description":"Information indicating where your game build files are stored. Use this parameter only when creating a build with files stored in an Amazon S3 bucket that you own. The storage location must specify an Amazon S3 bucket name and key. The location must also specify a role ARN that you set up to allow Amazon GameLift to access your Amazon S3 bucket. The S3 bucket and your new build must be in the same Region.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"version":{"type":"string","description":"Version information that is associated with this build. Version strings do not need to be unique."}},"type":"object","required":["buildArn","buildId"],"inputProperties":{"name":{"type":"string","description":"A descriptive label that is associated with a build. Build names do not need to be unique."},"operatingSystem":{"$ref":"#/types/aws-native:gamelift:BuildOperatingSystem","description":"The operating system that the game server binaries are built to run on. This value determines the type of fleet resources that you can use for this build. If your game build contains multiple executables, they all must run on the same operating system. If an operating system is not specified when creating a build, Amazon GameLift uses the default value (WINDOWS_2012). This value cannot be changed later."},"serverSdkVersion":{"type":"string","description":"A server SDK version you used when integrating your game server build with Amazon GameLift. By default Amazon GameLift sets this value to 4.0.2."},"storageLocation":{"$ref":"#/types/aws-native:gamelift:BuildStorageLocation","description":"Information indicating where your game build files are stored. Use this parameter only when creating a build with files stored in an Amazon S3 bucket that you own. The storage location must specify an Amazon S3 bucket name and key. The location must also specify a role ARN that you set up to allow Amazon GameLift to access your Amazon S3 bucket. The S3 bucket and your new build must be in the same Region."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"version":{"type":"string","description":"Version information that is associated with this build. Version strings do not need to be unique."}}},"aws-native:gamelift:ContainerFleet":{"description":"The AWS::GameLift::ContainerFleet resource creates an Amazon GameLift (GameLift) container fleet to host game servers.","properties":{"billingType":{"$ref":"#/types/aws-native:gamelift:ContainerFleetBillingType","description":"Indicates whether to use On-Demand instances or Spot instances for this fleet. If empty, the default is ON_DEMAND. Both categories of instances use identical hardware and configurations based on the instance type selected for this fleet.","replaceOnChanges":true},"creationTime":{"type":"string","description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example \"1469498468.057\")."},"deploymentConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetDeploymentConfiguration","description":"Set of rules for processing a deployment for a container fleet update."},"deploymentDetails":{"$ref":"#/types/aws-native:gamelift:ContainerFleetDeploymentDetails"},"description":{"type":"string","description":"A human-readable description of a fleet."},"fleetArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift container fleet resource and uniquely identifies it across all AWS Regions."},"fleetId":{"type":"string","description":"Unique fleet ID"},"fleetRoleArn":{"type":"string","description":"A unique identifier for an AWS IAM role that manages access to your AWS services. Create a role or look up a role's ARN from the IAM dashboard in the AWS Management Console."},"gameServerContainerGroupDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the game server container group definition. This field will be empty if GameServerContainerGroupDefinitionName is not specified."},"gameServerContainerGroupDefinitionName":{"type":"string","description":"The name of the container group definition that will be created per game server. You must specify GAME_SERVER container group. You have the option to also specify one PER_INSTANCE container group."},"gameServerContainerGroupsPerInstance":{"type":"integer","description":"The number of desired game server container groups per instance, a number between 1-5000."},"gameSessionCreationLimitPolicy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetGameSessionCreationLimitPolicy","description":"A policy that limits the number of game sessions an individual player can create over a span of time for this fleet."},"instanceConnectionPortRange":{"$ref":"#/types/aws-native:gamelift:ContainerFleetConnectionPortRange","description":"The set of port numbers to open on each instance in a container fleet. Connection ports are used by inbound traffic to connect with processes that are running in containers on the fleet."},"instanceInboundPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetIpPermission"},"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift server."},"instanceType":{"type":"string","description":"The name of an EC2 instance type that is supported in Amazon GameLift. A fleet instance type determines the computing resources of each instance in the fleet, including CPU, memory, storage, and networking capacity. Amazon GameLift supports the following EC2 instance types. See Amazon EC2 Instance Types for detailed descriptions.","replaceOnChanges":true},"locations":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLocationConfiguration"}},"logConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLogConfiguration","description":"The method that is used to collect container logs for the fleet. Amazon GameLift Servers saves all standard output for each container in logs, including game session logs.\n\n- `CLOUDWATCH` -- Send logs to an Amazon CloudWatch log group that you define. Each container emits a log stream, which is organized in the log group.\n- `S3` -- Store logs in an Amazon S3 bucket that you define.\n- `NONE` -- Don't collect container logs."},"maximumGameServerContainerGroupsPerInstance":{"type":"integer","description":"The maximum number of game server container groups per instance, a number between 1-5000."},"metricGroups":{"type":"array","items":{"type":"string"},"description":"The name of an Amazon CloudWatch metric group. A metric group aggregates the metrics for all fleets in the group. Specify a string containing the metric group name. You can use an existing name or use a new name to create a new metric group. Currently, this parameter can have only one string."},"newGameSessionProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetNewGameSessionProtectionPolicy","description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions."},"perInstanceContainerGroupDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the per instance container group definition. This field will be empty if PerInstanceContainerGroupDefinitionName is not specified."},"perInstanceContainerGroupDefinitionName":{"type":"string","description":"The name of the container group definition that will be created per instance. This field is optional if you specify GameServerContainerGroupDefinitionName."},"playerGatewayMode":{"$ref":"#/types/aws-native:gamelift:ContainerFleetPlayerGatewayMode","description":"The player gateway mode for the container fleet.","replaceOnChanges":true},"scalingPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicy"},"description":"A list of rules that control how a fleet is scaled."},"status":{"$ref":"#/types/aws-native:gamelift:ContainerFleetStatus","description":"The current status of the container fleet."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["creationTime","deploymentDetails","fleetArn","fleetId","fleetRoleArn","gameServerContainerGroupDefinitionArn","maximumGameServerContainerGroupsPerInstance","perInstanceContainerGroupDefinitionArn","status"],"inputProperties":{"billingType":{"$ref":"#/types/aws-native:gamelift:ContainerFleetBillingType","description":"Indicates whether to use On-Demand instances or Spot instances for this fleet. If empty, the default is ON_DEMAND. Both categories of instances use identical hardware and configurations based on the instance type selected for this fleet."},"deploymentConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetDeploymentConfiguration","description":"Set of rules for processing a deployment for a container fleet update."},"description":{"type":"string","description":"A human-readable description of a fleet."},"fleetRoleArn":{"type":"string","description":"A unique identifier for an AWS IAM role that manages access to your AWS services. Create a role or look up a role's ARN from the IAM dashboard in the AWS Management Console."},"gameServerContainerGroupDefinitionName":{"type":"string","description":"The name of the container group definition that will be created per game server. You must specify GAME_SERVER container group. You have the option to also specify one PER_INSTANCE container group."},"gameServerContainerGroupsPerInstance":{"type":"integer","description":"The number of desired game server container groups per instance, a number between 1-5000."},"gameSessionCreationLimitPolicy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetGameSessionCreationLimitPolicy","description":"A policy that limits the number of game sessions an individual player can create over a span of time for this fleet."},"instanceConnectionPortRange":{"$ref":"#/types/aws-native:gamelift:ContainerFleetConnectionPortRange","description":"The set of port numbers to open on each instance in a container fleet. Connection ports are used by inbound traffic to connect with processes that are running in containers on the fleet."},"instanceInboundPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetIpPermission"},"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift server."},"instanceType":{"type":"string","description":"The name of an EC2 instance type that is supported in Amazon GameLift. A fleet instance type determines the computing resources of each instance in the fleet, including CPU, memory, storage, and networking capacity. Amazon GameLift supports the following EC2 instance types. See Amazon EC2 Instance Types for detailed descriptions."},"locations":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLocationConfiguration"}},"logConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLogConfiguration","description":"The method that is used to collect container logs for the fleet. Amazon GameLift Servers saves all standard output for each container in logs, including game session logs.\n\n- `CLOUDWATCH` -- Send logs to an Amazon CloudWatch log group that you define. Each container emits a log stream, which is organized in the log group.\n- `S3` -- Store logs in an Amazon S3 bucket that you define.\n- `NONE` -- Don't collect container logs."},"metricGroups":{"type":"array","items":{"type":"string"},"description":"The name of an Amazon CloudWatch metric group. A metric group aggregates the metrics for all fleets in the group. Specify a string containing the metric group name. You can use an existing name or use a new name to create a new metric group. Currently, this parameter can have only one string."},"newGameSessionProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetNewGameSessionProtectionPolicy","description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions."},"perInstanceContainerGroupDefinitionName":{"type":"string","description":"The name of the container group definition that will be created per instance. This field is optional if you specify GameServerContainerGroupDefinitionName."},"playerGatewayMode":{"$ref":"#/types/aws-native:gamelift:ContainerFleetPlayerGatewayMode","description":"The player gateway mode for the container fleet."},"scalingPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicy"},"description":"A list of rules that control how a fleet is scaled."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["fleetRoleArn"]},"aws-native:gamelift:ContainerGroupDefinition":{"description":"The AWS::GameLift::ContainerGroupDefinition resource creates an Amazon GameLift container group definition.","properties":{"containerGroupDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift container group resource and uniquely identifies it across all AWS Regions."},"containerGroupType":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerGroupType","description":"The scope of the container group","replaceOnChanges":true},"creationTime":{"type":"string","description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example \"1469498468.057\")."},"gameServerContainerDefinition":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionGameServerContainerDefinition","description":"The definition for the game server container in this group. This property is used only when the container group type is `GAME_SERVER` . This container definition specifies a container image with the game server build."},"name":{"type":"string","description":"A descriptive label for the container group definition.","replaceOnChanges":true},"operatingSystem":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionOperatingSystem","description":"The operating system of the container group"},"sourceVersionNumber":{"type":"integer","description":"A specific ContainerGroupDefinition version to be updated"},"status":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionStatus","description":"A string indicating ContainerGroupDefinition status."},"statusReason":{"type":"string","description":"A string indicating the reason for ContainerGroupDefinition status."},"supportContainerDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionSupportContainerDefinition"},"description":"A collection of support container definitions that define the containers in this group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"totalMemoryLimitMebibytes":{"type":"integer","description":"The total memory limit of container groups following this definition in MiB"},"totalVcpuLimit":{"type":"number","description":"The total amount of virtual CPUs on the container group definition"},"versionDescription":{"type":"string","description":"The description of this version"},"versionNumber":{"type":"integer","description":"The version of this ContainerGroupDefinition"}},"type":"object","required":["containerGroupDefinitionArn","creationTime","name","operatingSystem","status","statusReason","totalMemoryLimitMebibytes","totalVcpuLimit","versionNumber"],"inputProperties":{"containerGroupType":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionContainerGroupType","description":"The scope of the container group"},"gameServerContainerDefinition":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionGameServerContainerDefinition","description":"The definition for the game server container in this group. This property is used only when the container group type is `GAME_SERVER` . This container definition specifies a container image with the game server build."},"name":{"type":"string","description":"A descriptive label for the container group definition."},"operatingSystem":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionOperatingSystem","description":"The operating system of the container group"},"sourceVersionNumber":{"type":"integer","description":"A specific ContainerGroupDefinition version to be updated"},"supportContainerDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionSupportContainerDefinition"},"description":"A collection of support container definitions that define the containers in this group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"totalMemoryLimitMebibytes":{"type":"integer","description":"The total memory limit of container groups following this definition in MiB"},"totalVcpuLimit":{"type":"number","description":"The total amount of virtual CPUs on the container group definition"},"versionDescription":{"type":"string","description":"The description of this version"}},"requiredInputs":["operatingSystem","totalMemoryLimitMebibytes","totalVcpuLimit"]},"aws-native:gamelift:Fleet":{"description":"The AWS::GameLift::Fleet resource creates an Amazon GameLift (GameLift) fleet to host game servers. A fleet is a set of EC2 or Anywhere instances, each of which can host multiple game sessions.","properties":{"anywhereConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetAnywhereConfiguration","description":"Configuration for Anywhere fleet."},"applyCapacity":{"$ref":"#/types/aws-native:gamelift:FleetApplyCapacity","description":"Determines when and how to apply fleet or location capacities. Allowed options are ON_UPDATE (default), ON_CREATE_AND_UPDATE and ON_CREATE_AND_UPDATE_WITH_AUTOSCALING. If you choose ON_CREATE_AND_UPDATE_WITH_AUTOSCALING, MinSize and MaxSize will still be applied on creation and on updates, but DesiredEC2Instances will only be applied once on fleet creation and will be ignored during updates to prevent conflicts with auto-scaling. During updates with ON_CREATE_AND_UPDATE_WITH_AUTOSCALING chosen, if current desired instance is lower than the new MinSize, it will be increased to the new MinSize; if current desired instance is larger than the new MaxSize, it will be decreased to the new MaxSize."},"buildId":{"type":"string","description":"A unique identifier for a build to be deployed on the new fleet. If you are deploying the fleet with a custom game build, you must specify this property. The build must have been successfully uploaded to Amazon GameLift and be in a READY status. This fleet setting cannot be changed once the fleet is created.","replaceOnChanges":true},"certificateConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetCertificateConfiguration","description":"Indicates whether to generate a TLS/SSL certificate for the new fleet. TLS certificates are used for encrypting traffic between game clients and game servers running on GameLift. If this parameter is not set, certificate generation is disabled. This fleet setting cannot be changed once the fleet is created.","replaceOnChanges":true},"computeType":{"$ref":"#/types/aws-native:gamelift:FleetComputeType","description":"ComputeType to differentiate EC2 hardware managed by GameLift and Anywhere hardware managed by the customer.","replaceOnChanges":true},"description":{"type":"string","description":"A human-readable description of a fleet."},"desiredEc2Instances":{"type":"integer","description":"[DEPRECATED] The number of EC2 instances that you want this fleet to host. When creating a new fleet, GameLift automatically sets this value to \"1\" and initiates a single instance. Once the fleet is active, update this value to trigger GameLift to add or remove instances from the fleet."},"ec2InboundPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetIpPermission"},"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift server."},"ec2InstanceType":{"type":"string","description":"The name of an EC2 instance type that is supported in Amazon GameLift. A fleet instance type determines the computing resources of each instance in the fleet, including CPU, memory, storage, and networking capacity. Amazon GameLift supports the following EC2 instance types. See Amazon EC2 Instance Types for detailed descriptions.","replaceOnChanges":true},"fleetArn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift Servers Fleet resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift Fleet ARN, the resource ID matches the FleetId value."},"fleetId":{"type":"string","description":"Unique fleet ID"},"fleetType":{"$ref":"#/types/aws-native:gamelift:FleetType","description":"Indicates whether to use On-Demand instances or Spot instances for this fleet. If empty, the default is ON_DEMAND. Both categories of instances use identical hardware and configurations based on the instance type selected for this fleet.","replaceOnChanges":true},"instanceRoleArn":{"type":"string","description":"A unique identifier for an AWS IAM role that manages access to your AWS services. With an instance role ARN set, any application that runs on an instance in this fleet can assume the role, including install scripts, server processes, and daemons (background processes). Create a role or look up a role's ARN from the IAM dashboard in the AWS Management Console.","replaceOnChanges":true},"instanceRoleCredentialsProvider":{"$ref":"#/types/aws-native:gamelift:FleetInstanceRoleCredentialsProvider","description":"Credentials provider implementation that loads credentials from the Amazon EC2 Instance Metadata Service.","replaceOnChanges":true},"locations":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetLocationConfiguration"},"description":"A set of remote locations to deploy additional instances to and manage as a multi-location fleet. Use this parameter when creating a fleet in AWS Regions that support multiple locations. You can add any AWS Region or Local Zone that's supported by Amazon GameLift Servers. Provide a list of one or more AWS Region codes, such as `us-west-2` , or Local Zone names. When using this parameter, Amazon GameLift Servers requires you to include your home location in the request. For a list of supported Regions and Local Zones, see [Amazon GameLift Servers service locations](https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html) for managed hosting."},"logPaths":{"type":"array","items":{"type":"string"},"description":"This parameter is no longer used. When hosting a custom game build, specify where Amazon GameLift should store log files using the Amazon GameLift server API call ProcessReady()","replaceOnChanges":true},"maxSize":{"type":"integer","description":"[DEPRECATED] The maximum value that is allowed for the fleet's instance count. When creating a new fleet, GameLift automatically sets this value to \"1\". Once the fleet is active, you can change this value."},"metricGroups":{"type":"array","items":{"type":"string"},"description":"The name of an Amazon CloudWatch metric group. A metric group aggregates the metrics for all fleets in the group. Specify a string containing the metric group name. You can use an existing name or use a new name to create a new metric group. Currently, this parameter can have only one string."},"minSize":{"type":"integer","description":"[DEPRECATED] The minimum value allowed for the fleet's instance count. When creating a new fleet, GameLift automatically sets this value to \"0\". After the fleet is active, you can change this value."},"name":{"type":"string","description":"A descriptive label that is associated with a fleet. Fleet names do not need to be unique."},"newGameSessionProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:FleetNewGameSessionProtectionPolicy","description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions."},"peerVpcAwsAccountId":{"type":"string","description":"A unique identifier for the AWS account with the VPC that you want to peer your Amazon GameLift fleet with. You can find your account ID in the AWS Management Console under account settings.","replaceOnChanges":true},"peerVpcId":{"type":"string","description":"A unique identifier for a VPC with resources to be accessed by your Amazon GameLift fleet. The VPC must be in the same Region as your fleet. To look up a VPC ID, use the VPC Dashboard in the AWS Management Console.","replaceOnChanges":true},"playerGatewayConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetPlayerGatewayConfiguration","description":"Configuration for player gateway.","replaceOnChanges":true},"playerGatewayMode":{"$ref":"#/types/aws-native:gamelift:FleetPlayerGatewayMode","description":"The player gateway mode for the fleet.","replaceOnChanges":true},"resourceCreationLimitPolicy":{"$ref":"#/types/aws-native:gamelift:FleetResourceCreationLimitPolicy","description":"A policy that limits the number of game sessions an individual player can create over a span of time for this fleet."},"runtimeConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetRuntimeConfiguration","description":"Instructions for launching server processes on each instance in the fleet. Server processes run either a custom game build executable or a Realtime script. The runtime configuration defines the server executables or launch script file, launch parameters, and the number of processes to run concurrently on each instance. When creating a fleet, the runtime configuration must have at least one server process configuration; otherwise the request fails with an invalid request exception.\n\nThis parameter is required unless the parameters ServerLaunchPath and ServerLaunchParameters are defined. Runtime configuration has replaced these parameters, but fleets that use them will continue to work."},"scalingPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicy"},"description":"A list of rules that control how a fleet is scaled."},"scriptId":{"type":"string","description":"A unique identifier for a Realtime script to be deployed on a new Realtime Servers fleet. The script must have been successfully uploaded to Amazon GameLift. This fleet setting cannot be changed once the fleet is created.\n\nNote: It is not currently possible to use the !Ref command to reference a script created with a CloudFormation template for the fleet property ScriptId. Instead, use Fn::GetAtt Script.Arn or Fn::GetAtt Script.Id to retrieve either of these properties as input for ScriptId. Alternatively, enter a ScriptId string manually.","replaceOnChanges":true},"serverLaunchParameters":{"type":"string","description":"This parameter is no longer used but is retained for backward compatibility. Instead, specify server launch parameters in the RuntimeConfiguration parameter. A request must specify either a runtime configuration or values for both ServerLaunchParameters and ServerLaunchPath.","replaceOnChanges":true},"serverLaunchPath":{"type":"string","description":"This parameter is no longer used. Instead, specify a server launch path using the RuntimeConfiguration parameter. Requests that specify a server launch path and launch parameters instead of a runtime configuration will continue to work.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["fleetArn","fleetId","name"],"inputProperties":{"anywhereConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetAnywhereConfiguration","description":"Configuration for Anywhere fleet."},"applyCapacity":{"$ref":"#/types/aws-native:gamelift:FleetApplyCapacity","description":"Determines when and how to apply fleet or location capacities. Allowed options are ON_UPDATE (default), ON_CREATE_AND_UPDATE and ON_CREATE_AND_UPDATE_WITH_AUTOSCALING. If you choose ON_CREATE_AND_UPDATE_WITH_AUTOSCALING, MinSize and MaxSize will still be applied on creation and on updates, but DesiredEC2Instances will only be applied once on fleet creation and will be ignored during updates to prevent conflicts with auto-scaling. During updates with ON_CREATE_AND_UPDATE_WITH_AUTOSCALING chosen, if current desired instance is lower than the new MinSize, it will be increased to the new MinSize; if current desired instance is larger than the new MaxSize, it will be decreased to the new MaxSize."},"buildId":{"type":"string","description":"A unique identifier for a build to be deployed on the new fleet. If you are deploying the fleet with a custom game build, you must specify this property. The build must have been successfully uploaded to Amazon GameLift and be in a READY status. This fleet setting cannot be changed once the fleet is created."},"certificateConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetCertificateConfiguration","description":"Indicates whether to generate a TLS/SSL certificate for the new fleet. TLS certificates are used for encrypting traffic between game clients and game servers running on GameLift. If this parameter is not set, certificate generation is disabled. This fleet setting cannot be changed once the fleet is created."},"computeType":{"$ref":"#/types/aws-native:gamelift:FleetComputeType","description":"ComputeType to differentiate EC2 hardware managed by GameLift and Anywhere hardware managed by the customer."},"description":{"type":"string","description":"A human-readable description of a fleet."},"desiredEc2Instances":{"type":"integer","description":"[DEPRECATED] The number of EC2 instances that you want this fleet to host. When creating a new fleet, GameLift automatically sets this value to \"1\" and initiates a single instance. Once the fleet is active, update this value to trigger GameLift to add or remove instances from the fleet."},"ec2InboundPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetIpPermission"},"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift server."},"ec2InstanceType":{"type":"string","description":"The name of an EC2 instance type that is supported in Amazon GameLift. A fleet instance type determines the computing resources of each instance in the fleet, including CPU, memory, storage, and networking capacity. Amazon GameLift supports the following EC2 instance types. See Amazon EC2 Instance Types for detailed descriptions."},"fleetType":{"$ref":"#/types/aws-native:gamelift:FleetType","description":"Indicates whether to use On-Demand instances or Spot instances for this fleet. If empty, the default is ON_DEMAND. Both categories of instances use identical hardware and configurations based on the instance type selected for this fleet."},"instanceRoleArn":{"type":"string","description":"A unique identifier for an AWS IAM role that manages access to your AWS services. With an instance role ARN set, any application that runs on an instance in this fleet can assume the role, including install scripts, server processes, and daemons (background processes). Create a role or look up a role's ARN from the IAM dashboard in the AWS Management Console."},"instanceRoleCredentialsProvider":{"$ref":"#/types/aws-native:gamelift:FleetInstanceRoleCredentialsProvider","description":"Credentials provider implementation that loads credentials from the Amazon EC2 Instance Metadata Service."},"locations":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetLocationConfiguration"},"description":"A set of remote locations to deploy additional instances to and manage as a multi-location fleet. Use this parameter when creating a fleet in AWS Regions that support multiple locations. You can add any AWS Region or Local Zone that's supported by Amazon GameLift Servers. Provide a list of one or more AWS Region codes, such as `us-west-2` , or Local Zone names. When using this parameter, Amazon GameLift Servers requires you to include your home location in the request. For a list of supported Regions and Local Zones, see [Amazon GameLift Servers service locations](https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html) for managed hosting."},"logPaths":{"type":"array","items":{"type":"string"},"description":"This parameter is no longer used. When hosting a custom game build, specify where Amazon GameLift should store log files using the Amazon GameLift server API call ProcessReady()"},"maxSize":{"type":"integer","description":"[DEPRECATED] The maximum value that is allowed for the fleet's instance count. When creating a new fleet, GameLift automatically sets this value to \"1\". Once the fleet is active, you can change this value."},"metricGroups":{"type":"array","items":{"type":"string"},"description":"The name of an Amazon CloudWatch metric group. A metric group aggregates the metrics for all fleets in the group. Specify a string containing the metric group name. You can use an existing name or use a new name to create a new metric group. Currently, this parameter can have only one string."},"minSize":{"type":"integer","description":"[DEPRECATED] The minimum value allowed for the fleet's instance count. When creating a new fleet, GameLift automatically sets this value to \"0\". After the fleet is active, you can change this value."},"name":{"type":"string","description":"A descriptive label that is associated with a fleet. Fleet names do not need to be unique."},"newGameSessionProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:FleetNewGameSessionProtectionPolicy","description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions."},"peerVpcAwsAccountId":{"type":"string","description":"A unique identifier for the AWS account with the VPC that you want to peer your Amazon GameLift fleet with. You can find your account ID in the AWS Management Console under account settings."},"peerVpcId":{"type":"string","description":"A unique identifier for a VPC with resources to be accessed by your Amazon GameLift fleet. The VPC must be in the same Region as your fleet. To look up a VPC ID, use the VPC Dashboard in the AWS Management Console."},"playerGatewayConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetPlayerGatewayConfiguration","description":"Configuration for player gateway."},"playerGatewayMode":{"$ref":"#/types/aws-native:gamelift:FleetPlayerGatewayMode","description":"The player gateway mode for the fleet."},"resourceCreationLimitPolicy":{"$ref":"#/types/aws-native:gamelift:FleetResourceCreationLimitPolicy","description":"A policy that limits the number of game sessions an individual player can create over a span of time for this fleet."},"runtimeConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetRuntimeConfiguration","description":"Instructions for launching server processes on each instance in the fleet. Server processes run either a custom game build executable or a Realtime script. The runtime configuration defines the server executables or launch script file, launch parameters, and the number of processes to run concurrently on each instance. When creating a fleet, the runtime configuration must have at least one server process configuration; otherwise the request fails with an invalid request exception.\n\nThis parameter is required unless the parameters ServerLaunchPath and ServerLaunchParameters are defined. Runtime configuration has replaced these parameters, but fleets that use them will continue to work."},"scalingPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicy"},"description":"A list of rules that control how a fleet is scaled."},"scriptId":{"type":"string","description":"A unique identifier for a Realtime script to be deployed on a new Realtime Servers fleet. The script must have been successfully uploaded to Amazon GameLift. This fleet setting cannot be changed once the fleet is created.\n\nNote: It is not currently possible to use the !Ref command to reference a script created with a CloudFormation template for the fleet property ScriptId. Instead, use Fn::GetAtt Script.Arn or Fn::GetAtt Script.Id to retrieve either of these properties as input for ScriptId. Alternatively, enter a ScriptId string manually."},"serverLaunchParameters":{"type":"string","description":"This parameter is no longer used but is retained for backward compatibility. Instead, specify server launch parameters in the RuntimeConfiguration parameter. A request must specify either a runtime configuration or values for both ServerLaunchParameters and ServerLaunchPath."},"serverLaunchPath":{"type":"string","description":"This parameter is no longer used. Instead, specify a server launch path using the RuntimeConfiguration parameter. Requests that specify a server launch path and launch parameters instead of a runtime configuration will continue to work."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:gamelift:GameServerGroup":{"description":"The AWS::GameLift::GameServerGroup resource creates an Amazon GameLift (GameLift) GameServerGroup.","properties":{"autoScalingGroupArn":{"type":"string","description":"A generated unique ID for the EC2 Auto Scaling group that is associated with this game server group."},"autoScalingPolicy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupAutoScalingPolicy","description":"Configuration settings to define a scaling policy for the Auto Scaling group that is optimized for game hosting. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"balancingStrategy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupBalancingStrategy","description":"The fallback balancing method to use for the game server group when Spot Instances in a Region become unavailable or are not viable for game hosting."},"deleteOption":{"$ref":"#/types/aws-native:gamelift:GameServerGroupDeleteOption","description":"The type of delete to perform."},"gameServerGroupArn":{"type":"string","description":"A generated unique ID for the game server group."},"gameServerGroupName":{"type":"string","description":"An identifier for the new game server group."},"gameServerProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupGameServerProtectionPolicy","description":"A flag that indicates whether instances in the game server group are protected from early termination."},"instanceDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameServerGroupInstanceDefinition"},"description":"A set of EC2 instance types to use when creating instances in the group."},"launchTemplate":{"$ref":"#/types/aws-native:gamelift:GameServerGroupLaunchTemplate","description":"The EC2 launch template that contains configuration settings and game server code to be deployed to all instances in the game server group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"maxSize":{"type":"number","description":"The maximum number of instances allowed in the EC2 Auto Scaling group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"minSize":{"type":"number","description":"The minimum number of instances allowed in the EC2 Auto Scaling group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for an IAM role that allows Amazon GameLift to access your EC2 Auto Scaling groups."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of labels to assign to the new game server group resource. Updating game server group tags with CloudFormation will not take effect. Please update this property using AWS GameLift APIs instead."},"vpcSubnets":{"type":"array","items":{"type":"string"},"description":"A list of virtual private cloud (VPC) subnets to use with instances in the game server group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."}},"type":"object","required":["autoScalingGroupArn","gameServerGroupArn","gameServerGroupName","instanceDefinitions","roleArn"],"inputProperties":{"autoScalingPolicy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupAutoScalingPolicy","description":"Configuration settings to define a scaling policy for the Auto Scaling group that is optimized for game hosting. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"balancingStrategy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupBalancingStrategy","description":"The fallback balancing method to use for the game server group when Spot Instances in a Region become unavailable or are not viable for game hosting."},"deleteOption":{"$ref":"#/types/aws-native:gamelift:GameServerGroupDeleteOption","description":"The type of delete to perform."},"gameServerGroupName":{"type":"string","description":"An identifier for the new game server group."},"gameServerProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupGameServerProtectionPolicy","description":"A flag that indicates whether instances in the game server group are protected from early termination."},"instanceDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameServerGroupInstanceDefinition"},"description":"A set of EC2 instance types to use when creating instances in the group."},"launchTemplate":{"$ref":"#/types/aws-native:gamelift:GameServerGroupLaunchTemplate","description":"The EC2 launch template that contains configuration settings and game server code to be deployed to all instances in the game server group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"maxSize":{"type":"number","description":"The maximum number of instances allowed in the EC2 Auto Scaling group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"minSize":{"type":"number","description":"The minimum number of instances allowed in the EC2 Auto Scaling group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for an IAM role that allows Amazon GameLift to access your EC2 Auto Scaling groups."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of labels to assign to the new game server group resource. Updating game server group tags with CloudFormation will not take effect. Please update this property using AWS GameLift APIs instead."},"vpcSubnets":{"type":"array","items":{"type":"string"},"description":"A list of virtual private cloud (VPC) subnets to use with instances in the game server group. Updating this game server group property will not take effect for the created EC2 Auto Scaling group, please update the EC2 Auto Scaling group directly after creating the resource."}},"requiredInputs":["instanceDefinitions","roleArn"]},"aws-native:gamelift:GameSessionQueue":{"description":"The AWS::GameLift::GameSessionQueue resource creates an Amazon GameLift (GameLift) game session queue.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var queue = new AwsNative.GameLift.GameSessionQueue(\"queue\", new()\n    {\n        Name = \"MyGameSessionQueue\",\n        TimeoutInSeconds = 60,\n        NotificationTarget = \"arn:aws:sns:us-west-2:111122223333:My_Placement_SNS_Topic\",\n        Destinations = new[]\n        {\n            new AwsNative.GameLift.Inputs.GameSessionQueueDestinationArgs\n            {\n                DestinationArn = \"arn:aws:gamelift:us-west-2:012345678912:fleet/fleet-id\",\n            },\n            new AwsNative.GameLift.Inputs.GameSessionQueueDestinationArgs\n            {\n                DestinationArn = \"arn:aws:gamelift:us-west-2:012345678912:alias/alias-id\",\n            },\n        },\n        PlayerLatencyPolicies = new[]\n        {\n            new AwsNative.GameLift.Inputs.GameSessionQueuePlayerLatencyPolicyArgs\n            {\n                MaximumIndividualPlayerLatencyMilliseconds = 1000,\n                PolicyDurationSeconds = 60,\n            },\n        },\n        PriorityConfiguration = new AwsNative.GameLift.Inputs.GameSessionQueuePriorityConfigurationArgs\n        {\n            LocationOrder = new[]\n            {\n                \"us-west-2\",\n                \"us-east-1\",\n            },\n            PriorityOrder = new[]\n            {\n                AwsNative.GameLift.GameSessionQueuePriorityOrderItem.Cost,\n                AwsNative.GameLift.GameSessionQueuePriorityOrderItem.Latency,\n                AwsNative.GameLift.GameSessionQueuePriorityOrderItem.Location,\n                AwsNative.GameLift.GameSessionQueuePriorityOrderItem.Destination,\n            },\n        },\n        FilterConfiguration = new AwsNative.GameLift.Inputs.GameSessionQueueFilterConfigurationArgs\n        {\n            AllowedLocations = new[]\n            {\n                \"us-east-1\",\n                \"us-west-2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := gamelift.NewGameSessionQueue(ctx, \"queue\", \u0026gamelift.GameSessionQueueArgs{\n\t\t\tName:               pulumi.String(\"MyGameSessionQueue\"),\n\t\t\tTimeoutInSeconds:   pulumi.Int(60),\n\t\t\tNotificationTarget: pulumi.String(\"arn:aws:sns:us-west-2:111122223333:My_Placement_SNS_Topic\"),\n\t\t\tDestinations: gamelift.GameSessionQueueDestinationArray{\n\t\t\t\t\u0026gamelift.GameSessionQueueDestinationArgs{\n\t\t\t\t\tDestinationArn: pulumi.String(\"arn:aws:gamelift:us-west-2:012345678912:fleet/fleet-id\"),\n\t\t\t\t},\n\t\t\t\t\u0026gamelift.GameSessionQueueDestinationArgs{\n\t\t\t\t\tDestinationArn: pulumi.String(\"arn:aws:gamelift:us-west-2:012345678912:alias/alias-id\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPlayerLatencyPolicies: gamelift.GameSessionQueuePlayerLatencyPolicyArray{\n\t\t\t\t\u0026gamelift.GameSessionQueuePlayerLatencyPolicyArgs{\n\t\t\t\t\tMaximumIndividualPlayerLatencyMilliseconds: pulumi.Int(1000),\n\t\t\t\t\tPolicyDurationSeconds:                      pulumi.Int(60),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPriorityConfiguration: \u0026gamelift.GameSessionQueuePriorityConfigurationArgs{\n\t\t\t\tLocationOrder: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-west-2\"),\n\t\t\t\t\tpulumi.String(\"us-east-1\"),\n\t\t\t\t},\n\t\t\t\tPriorityOrder: gamelift.GameSessionQueuePriorityOrderItemArray{\n\t\t\t\t\tgamelift.GameSessionQueuePriorityOrderItemCost,\n\t\t\t\t\tgamelift.GameSessionQueuePriorityOrderItemLatency,\n\t\t\t\t\tgamelift.GameSessionQueuePriorityOrderItemLocation,\n\t\t\t\t\tgamelift.GameSessionQueuePriorityOrderItemDestination,\n\t\t\t\t},\n\t\t\t},\n\t\t\tFilterConfiguration: \u0026gamelift.GameSessionQueueFilterConfigurationArgs{\n\t\t\t\tAllowedLocations: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-east-1\"),\n\t\t\t\t\tpulumi.String(\"us-west-2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst queue = new aws_native.gamelift.GameSessionQueue(\"queue\", {\n    name: \"MyGameSessionQueue\",\n    timeoutInSeconds: 60,\n    notificationTarget: \"arn:aws:sns:us-west-2:111122223333:My_Placement_SNS_Topic\",\n    destinations: [\n        {\n            destinationArn: \"arn:aws:gamelift:us-west-2:012345678912:fleet/fleet-id\",\n        },\n        {\n            destinationArn: \"arn:aws:gamelift:us-west-2:012345678912:alias/alias-id\",\n        },\n    ],\n    playerLatencyPolicies: [{\n        maximumIndividualPlayerLatencyMilliseconds: 1000,\n        policyDurationSeconds: 60,\n    }],\n    priorityConfiguration: {\n        locationOrder: [\n            \"us-west-2\",\n            \"us-east-1\",\n        ],\n        priorityOrder: [\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.Cost,\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.Latency,\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.Location,\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.Destination,\n        ],\n    },\n    filterConfiguration: {\n        allowedLocations: [\n            \"us-east-1\",\n            \"us-west-2\",\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nqueue = aws_native.gamelift.GameSessionQueue(\"queue\",\n    name=\"MyGameSessionQueue\",\n    timeout_in_seconds=60,\n    notification_target=\"arn:aws:sns:us-west-2:111122223333:My_Placement_SNS_Topic\",\n    destinations=[\n        {\n            \"destination_arn\": \"arn:aws:gamelift:us-west-2:012345678912:fleet/fleet-id\",\n        },\n        {\n            \"destination_arn\": \"arn:aws:gamelift:us-west-2:012345678912:alias/alias-id\",\n        },\n    ],\n    player_latency_policies=[{\n        \"maximum_individual_player_latency_milliseconds\": 1000,\n        \"policy_duration_seconds\": 60,\n    }],\n    priority_configuration={\n        \"location_order\": [\n            \"us-west-2\",\n            \"us-east-1\",\n        ],\n        \"priority_order\": [\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.COST,\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.LATENCY,\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.LOCATION,\n            aws_native.gamelift.GameSessionQueuePriorityOrderItem.DESTINATION,\n        ],\n    },\n    filter_configuration={\n        \"allowed_locations\": [\n            \"us-east-1\",\n            \"us-west-2\",\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var queueResource = new AwsNative.GameLift.GameSessionQueue(\"queueResource\", new()\n    {\n        Name = \"MyGameSessionQueue\",\n    });\n\n    var matchmakingRuleSetResource = new AwsNative.GameLift.MatchmakingRuleSet(\"matchmakingRuleSetResource\", new()\n    {\n        Name = \"MyRuleSet\",\n        RuleSetBody = \"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\",\n    });\n\n    var matchmakingConfigurationResource = new AwsNative.GameLift.MatchmakingConfiguration(\"matchmakingConfigurationResource\", new()\n    {\n        Name = \"MyMatchmakingConfiguration\",\n        AcceptanceRequired = true,\n        AcceptanceTimeoutSeconds = 60,\n        AdditionalPlayerCount = 8,\n        BackfillMode = AwsNative.GameLift.MatchmakingConfigurationBackfillMode.Automatic,\n        CustomEventData = \"MyCustomEventData\",\n        Description = \"A basic matchmaking configuration for a GameLift-hosted game\",\n        FlexMatchMode = AwsNative.GameLift.MatchmakingConfigurationFlexMatchMode.WithQueue,\n        GameSessionData = \"MyGameSessionData\",\n        GameProperties = new[]\n        {\n            new AwsNative.GameLift.Inputs.MatchmakingConfigurationGamePropertyArgs\n            {\n                Key = \"level\",\n                Value = \"10\",\n            },\n            new AwsNative.GameLift.Inputs.MatchmakingConfigurationGamePropertyArgs\n            {\n                Key = \"gameMode\",\n                Value = \"hard\",\n            },\n        },\n        GameSessionQueueArns = new[]\n        {\n            queueResource.Arn,\n        },\n        RequestTimeoutSeconds = 100,\n        RuleSetName = matchmakingRuleSetResource.Id,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            queueResource,\n            matchmakingRuleSetResource,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tqueueResource, err := gamelift.NewGameSessionQueue(ctx, \"queueResource\", \u0026gamelift.GameSessionQueueArgs{\n\t\t\tName: pulumi.String(\"MyGameSessionQueue\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmatchmakingRuleSetResource, err := gamelift.NewMatchmakingRuleSet(ctx, \"matchmakingRuleSetResource\", \u0026gamelift.MatchmakingRuleSetArgs{\n\t\t\tName:        pulumi.String(\"MyRuleSet\"),\n\t\t\tRuleSetBody: pulumi.String(\"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = gamelift.NewMatchmakingConfiguration(ctx, \"matchmakingConfigurationResource\", \u0026gamelift.MatchmakingConfigurationArgs{\n\t\t\tName:                     pulumi.String(\"MyMatchmakingConfiguration\"),\n\t\t\tAcceptanceRequired:       pulumi.Bool(true),\n\t\t\tAcceptanceTimeoutSeconds: pulumi.Int(60),\n\t\t\tAdditionalPlayerCount:    pulumi.Int(8),\n\t\t\tBackfillMode:             gamelift.MatchmakingConfigurationBackfillModeAutomatic,\n\t\t\tCustomEventData:          pulumi.String(\"MyCustomEventData\"),\n\t\t\tDescription:              pulumi.String(\"A basic matchmaking configuration for a GameLift-hosted game\"),\n\t\t\tFlexMatchMode:            gamelift.MatchmakingConfigurationFlexMatchModeWithQueue,\n\t\t\tGameSessionData:          pulumi.String(\"MyGameSessionData\"),\n\t\t\tGameProperties: gamelift.MatchmakingConfigurationGamePropertyArray{\n\t\t\t\t\u0026gamelift.MatchmakingConfigurationGamePropertyArgs{\n\t\t\t\t\tKey:   pulumi.String(\"level\"),\n\t\t\t\t\tValue: pulumi.String(\"10\"),\n\t\t\t\t},\n\t\t\t\t\u0026gamelift.MatchmakingConfigurationGamePropertyArgs{\n\t\t\t\t\tKey:   pulumi.String(\"gameMode\"),\n\t\t\t\t\tValue: pulumi.String(\"hard\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tGameSessionQueueArns: pulumi.StringArray{\n\t\t\t\tqueueResource.Arn,\n\t\t\t},\n\t\t\tRequestTimeoutSeconds: pulumi.Int(100),\n\t\t\tRuleSetName:           matchmakingRuleSetResource.ID(),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tqueueResource,\n\t\t\tmatchmakingRuleSetResource,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst queueResource = new aws_native.gamelift.GameSessionQueue(\"queueResource\", {name: \"MyGameSessionQueue\"});\nconst matchmakingRuleSetResource = new aws_native.gamelift.MatchmakingRuleSet(\"matchmakingRuleSetResource\", {\n    name: \"MyRuleSet\",\n    ruleSetBody: \"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\",\n});\nconst matchmakingConfigurationResource = new aws_native.gamelift.MatchmakingConfiguration(\"matchmakingConfigurationResource\", {\n    name: \"MyMatchmakingConfiguration\",\n    acceptanceRequired: true,\n    acceptanceTimeoutSeconds: 60,\n    additionalPlayerCount: 8,\n    backfillMode: aws_native.gamelift.MatchmakingConfigurationBackfillMode.Automatic,\n    customEventData: \"MyCustomEventData\",\n    description: \"A basic matchmaking configuration for a GameLift-hosted game\",\n    flexMatchMode: aws_native.gamelift.MatchmakingConfigurationFlexMatchMode.WithQueue,\n    gameSessionData: \"MyGameSessionData\",\n    gameProperties: [\n        {\n            key: \"level\",\n            value: \"10\",\n        },\n        {\n            key: \"gameMode\",\n            value: \"hard\",\n        },\n    ],\n    gameSessionQueueArns: [queueResource.arn],\n    requestTimeoutSeconds: 100,\n    ruleSetName: matchmakingRuleSetResource.id,\n}, {\n    dependsOn: [\n        queueResource,\n        matchmakingRuleSetResource,\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nqueue_resource = aws_native.gamelift.GameSessionQueue(\"queueResource\", name=\"MyGameSessionQueue\")\nmatchmaking_rule_set_resource = aws_native.gamelift.MatchmakingRuleSet(\"matchmakingRuleSetResource\",\n    name=\"MyRuleSet\",\n    rule_set_body=\"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\")\nmatchmaking_configuration_resource = aws_native.gamelift.MatchmakingConfiguration(\"matchmakingConfigurationResource\",\n    name=\"MyMatchmakingConfiguration\",\n    acceptance_required=True,\n    acceptance_timeout_seconds=60,\n    additional_player_count=8,\n    backfill_mode=aws_native.gamelift.MatchmakingConfigurationBackfillMode.AUTOMATIC,\n    custom_event_data=\"MyCustomEventData\",\n    description=\"A basic matchmaking configuration for a GameLift-hosted game\",\n    flex_match_mode=aws_native.gamelift.MatchmakingConfigurationFlexMatchMode.WITH_QUEUE,\n    game_session_data=\"MyGameSessionData\",\n    game_properties=[\n        {\n            \"key\": \"level\",\n            \"value\": \"10\",\n        },\n        {\n            \"key\": \"gameMode\",\n            \"value\": \"hard\",\n        },\n    ],\n    game_session_queue_arns=[queue_resource.arn],\n    request_timeout_seconds=100,\n    rule_set_name=matchmaking_rule_set_resource.id,\n    opts = pulumi.ResourceOptions(depends_on=[\n            queue_resource,\n            matchmaking_rule_set_resource,\n        ]))\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift game session queue resource and uniquely identifies it."},"customEventData":{"type":"string","description":"Information that is added to all events that are related to this game session queue."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueueDestination"},"description":"A list of fleets and/or fleet aliases that can be used to fulfill game session placement requests in the queue."},"filterConfiguration":{"$ref":"#/types/aws-native:gamelift:GameSessionQueueFilterConfiguration","description":"A list of locations where a queue is allowed to place new game sessions."},"name":{"type":"string","description":"A descriptive label that is associated with game session queue. Queue names must be unique within each Region.","replaceOnChanges":true},"notificationTarget":{"type":"string","description":"An SNS topic ARN that is set up to receive game session placement notifications."},"playerLatencyPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePlayerLatencyPolicy"},"description":"A set of policies that act as a sliding cap on player latency."},"priorityConfiguration":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePriorityConfiguration","description":"Custom settings to use when prioritizing destinations and locations for game session placements."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"timeoutInSeconds":{"type":"integer","description":"The maximum time, in seconds, that a new game session placement request remains in the queue."}},"type":"object","required":["arn","name"],"inputProperties":{"customEventData":{"type":"string","description":"Information that is added to all events that are related to this game session queue."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueueDestination"},"description":"A list of fleets and/or fleet aliases that can be used to fulfill game session placement requests in the queue."},"filterConfiguration":{"$ref":"#/types/aws-native:gamelift:GameSessionQueueFilterConfiguration","description":"A list of locations where a queue is allowed to place new game sessions."},"name":{"type":"string","description":"A descriptive label that is associated with game session queue. Queue names must be unique within each Region."},"notificationTarget":{"type":"string","description":"An SNS topic ARN that is set up to receive game session placement notifications."},"playerLatencyPolicies":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePlayerLatencyPolicy"},"description":"A set of policies that act as a sliding cap on player latency."},"priorityConfiguration":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePriorityConfiguration","description":"Custom settings to use when prioritizing destinations and locations for game session placements."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"timeoutInSeconds":{"type":"integer","description":"The maximum time, in seconds, that a new game session placement request remains in the queue."}}},"aws-native:gamelift:Location":{"description":"The AWS::GameLift::Location resource creates an Amazon GameLift (GameLift) custom location.","properties":{"locationArn":{"type":"string","description":"A unique identifier for the custom location. For example, `arn:aws:gamelift:[region]::location/location-a1234567-b8c9-0d1e-2fa3-b45c6d7e8912` ."},"locationName":{"type":"string","description":"A descriptive name for the custom location.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["locationArn","locationName"],"inputProperties":{"locationName":{"type":"string","description":"A descriptive name for the custom location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:gamelift:MatchmakingConfiguration":{"description":"The AWS::GameLift::MatchmakingConfiguration resource creates an Amazon GameLift (GameLift) matchmaking configuration.","properties":{"acceptanceRequired":{"type":"boolean","description":"A flag that indicates whether a match that was created with this configuration must be accepted by the matched players"},"acceptanceTimeoutSeconds":{"type":"integer","description":"The length of time (in seconds) to wait for players to accept a proposed match, if acceptance is required."},"additionalPlayerCount":{"type":"integer","description":"The number of player slots in a match to keep open for future players."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift matchmaking configuration resource and uniquely identifies it."},"backfillMode":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationBackfillMode","description":"The method used to backfill game sessions created with this matchmaking configuration."},"creationTime":{"type":"string","description":"A time stamp indicating when this data object was created."},"customEventData":{"type":"string","description":"Information to attach to all events related to the matchmaking configuration."},"description":{"type":"string","description":"A descriptive label that is associated with matchmaking configuration."},"flexMatchMode":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationFlexMatchMode","description":"Indicates whether this matchmaking configuration is being used with Amazon GameLift hosting or as a standalone matchmaking solution."},"gameProperties":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationGameProperty"},"description":"A set of custom properties for a game session, formatted as key:value pairs."},"gameSessionData":{"type":"string","description":"A set of custom game session properties, formatted as a single string value."},"gameSessionQueueArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift game session queue resource and uniquely identifies it."},"name":{"type":"string","description":"A unique identifier for the matchmaking configuration.","replaceOnChanges":true},"notificationTarget":{"type":"string","description":"An SNS topic ARN that is set up to receive matchmaking notifications."},"requestTimeoutSeconds":{"type":"integer","description":"The maximum duration, in seconds, that a matchmaking ticket can remain in process before timing out."},"ruleSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) associated with the GameLift matchmaking rule set resource that this configuration uses."},"ruleSetName":{"type":"string","description":"A unique identifier for the matchmaking rule set to use with this configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["acceptanceRequired","arn","name","requestTimeoutSeconds","ruleSetName"],"inputProperties":{"acceptanceRequired":{"type":"boolean","description":"A flag that indicates whether a match that was created with this configuration must be accepted by the matched players"},"acceptanceTimeoutSeconds":{"type":"integer","description":"The length of time (in seconds) to wait for players to accept a proposed match, if acceptance is required."},"additionalPlayerCount":{"type":"integer","description":"The number of player slots in a match to keep open for future players."},"backfillMode":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationBackfillMode","description":"The method used to backfill game sessions created with this matchmaking configuration."},"creationTime":{"type":"string","description":"A time stamp indicating when this data object was created."},"customEventData":{"type":"string","description":"Information to attach to all events related to the matchmaking configuration."},"description":{"type":"string","description":"A descriptive label that is associated with matchmaking configuration."},"flexMatchMode":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationFlexMatchMode","description":"Indicates whether this matchmaking configuration is being used with Amazon GameLift hosting or as a standalone matchmaking solution."},"gameProperties":{"type":"array","items":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationGameProperty"},"description":"A set of custom properties for a game session, formatted as key:value pairs."},"gameSessionData":{"type":"string","description":"A set of custom game session properties, formatted as a single string value."},"gameSessionQueueArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift game session queue resource and uniquely identifies it."},"name":{"type":"string","description":"A unique identifier for the matchmaking configuration."},"notificationTarget":{"type":"string","description":"An SNS topic ARN that is set up to receive matchmaking notifications."},"requestTimeoutSeconds":{"type":"integer","description":"The maximum duration, in seconds, that a matchmaking ticket can remain in process before timing out."},"ruleSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) associated with the GameLift matchmaking rule set resource that this configuration uses."},"ruleSetName":{"type":"string","description":"A unique identifier for the matchmaking rule set to use with this configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["acceptanceRequired","requestTimeoutSeconds","ruleSetName"]},"aws-native:gamelift:MatchmakingRuleSet":{"description":"The AWS::GameLift::MatchmakingRuleSet resource creates an Amazon GameLift (GameLift) matchmaking rule set.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var matchmakingRuleSetResource = new AwsNative.GameLift.MatchmakingRuleSet(\"matchmakingRuleSetResource\", new()\n    {\n        Name = \"MyRuleSet\",\n        RuleSetBody = \"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\",\n    });\n\n    var matchmakingConfigurationResource = new AwsNative.GameLift.MatchmakingConfiguration(\"matchmakingConfigurationResource\", new()\n    {\n        Name = \"MyMatchmakingConfiguration\",\n        AcceptanceRequired = true,\n        AcceptanceTimeoutSeconds = 60,\n        BackfillMode = AwsNative.GameLift.MatchmakingConfigurationBackfillMode.Manual,\n        CustomEventData = \"MyCustomEventData\",\n        Description = \"A basic standalone matchmaking configuration\",\n        FlexMatchMode = AwsNative.GameLift.MatchmakingConfigurationFlexMatchMode.Standalone,\n        RequestTimeoutSeconds = 100,\n        RuleSetName = matchmakingRuleSetResource.Id,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            matchmakingRuleSetResource,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmatchmakingRuleSetResource, err := gamelift.NewMatchmakingRuleSet(ctx, \"matchmakingRuleSetResource\", \u0026gamelift.MatchmakingRuleSetArgs{\n\t\t\tName:        pulumi.String(\"MyRuleSet\"),\n\t\t\tRuleSetBody: pulumi.String(\"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = gamelift.NewMatchmakingConfiguration(ctx, \"matchmakingConfigurationResource\", \u0026gamelift.MatchmakingConfigurationArgs{\n\t\t\tName:                     pulumi.String(\"MyMatchmakingConfiguration\"),\n\t\t\tAcceptanceRequired:       pulumi.Bool(true),\n\t\t\tAcceptanceTimeoutSeconds: pulumi.Int(60),\n\t\t\tBackfillMode:             gamelift.MatchmakingConfigurationBackfillModeManual,\n\t\t\tCustomEventData:          pulumi.String(\"MyCustomEventData\"),\n\t\t\tDescription:              pulumi.String(\"A basic standalone matchmaking configuration\"),\n\t\t\tFlexMatchMode:            gamelift.MatchmakingConfigurationFlexMatchModeStandalone,\n\t\t\tRequestTimeoutSeconds:    pulumi.Int(100),\n\t\t\tRuleSetName:              matchmakingRuleSetResource.ID(),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tmatchmakingRuleSetResource,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst matchmakingRuleSetResource = new aws_native.gamelift.MatchmakingRuleSet(\"matchmakingRuleSetResource\", {\n    name: \"MyRuleSet\",\n    ruleSetBody: \"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\",\n});\nconst matchmakingConfigurationResource = new aws_native.gamelift.MatchmakingConfiguration(\"matchmakingConfigurationResource\", {\n    name: \"MyMatchmakingConfiguration\",\n    acceptanceRequired: true,\n    acceptanceTimeoutSeconds: 60,\n    backfillMode: aws_native.gamelift.MatchmakingConfigurationBackfillMode.Manual,\n    customEventData: \"MyCustomEventData\",\n    description: \"A basic standalone matchmaking configuration\",\n    flexMatchMode: aws_native.gamelift.MatchmakingConfigurationFlexMatchMode.Standalone,\n    requestTimeoutSeconds: 100,\n    ruleSetName: matchmakingRuleSetResource.id,\n}, {\n    dependsOn: [matchmakingRuleSetResource],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmatchmaking_rule_set_resource = aws_native.gamelift.MatchmakingRuleSet(\"matchmakingRuleSetResource\",\n    name=\"MyRuleSet\",\n    rule_set_body=\"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\")\nmatchmaking_configuration_resource = aws_native.gamelift.MatchmakingConfiguration(\"matchmakingConfigurationResource\",\n    name=\"MyMatchmakingConfiguration\",\n    acceptance_required=True,\n    acceptance_timeout_seconds=60,\n    backfill_mode=aws_native.gamelift.MatchmakingConfigurationBackfillMode.MANUAL,\n    custom_event_data=\"MyCustomEventData\",\n    description=\"A basic standalone matchmaking configuration\",\n    flex_match_mode=aws_native.gamelift.MatchmakingConfigurationFlexMatchMode.STANDALONE,\n    request_timeout_seconds=100,\n    rule_set_name=matchmaking_rule_set_resource.id,\n    opts = pulumi.ResourceOptions(depends_on=[matchmaking_rule_set_resource]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var matchmakingRuleSet = new AwsNative.GameLift.MatchmakingRuleSet(\"matchmakingRuleSet\", new()\n    {\n        Name = \"MyRuleSet\",\n        RuleSetBody = \"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := gamelift.NewMatchmakingRuleSet(ctx, \"matchmakingRuleSet\", \u0026gamelift.MatchmakingRuleSetArgs{\n\t\t\tName:        pulumi.String(\"MyRuleSet\"),\n\t\t\tRuleSetBody: pulumi.String(\"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst matchmakingRuleSet = new aws_native.gamelift.MatchmakingRuleSet(\"matchmakingRuleSet\", {\n    name: \"MyRuleSet\",\n    ruleSetBody: \"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmatchmaking_rule_set = aws_native.gamelift.MatchmakingRuleSet(\"matchmakingRuleSet\",\n    name=\"MyRuleSet\",\n    rule_set_body=\"{\\\"name\\\": \\\"MyMatchmakingRuleSet\\\",\\\"ruleLanguageVersion\\\": \\\"1.0\\\", \\\"teams\\\": [{\\\"name\\\": \\\"MyTeam\\\",\\\"minPlayers\\\": 1,\\\"maxPlayers\\\": 20}]}\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift matchmaking rule set resource and uniquely identifies it."},"creationTime":{"type":"string","description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds."},"name":{"type":"string","description":"A unique identifier for the matchmaking rule set.","replaceOnChanges":true},"ruleSetBody":{"type":"string","description":"A collection of matchmaking rules, formatted as a JSON string.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","creationTime","name","ruleSetBody"],"inputProperties":{"name":{"type":"string","description":"A unique identifier for the matchmaking rule set."},"ruleSetBody":{"type":"string","description":"A collection of matchmaking rules, formatted as a JSON string."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["ruleSetBody"]},"aws-native:gamelift:Script":{"description":"The AWS::GameLift::Script resource creates a new script record for your Realtime Servers script. Realtime scripts are JavaScript that provide configuration settings and optional custom game logic for your game. The script is deployed when you create a Realtime Servers fleet to host your game sessions. Script logic is executed during an active game session.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift script resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift script ARN, the resource ID matches the Id value."},"awsId":{"type":"string","description":"A unique identifier for the Realtime script"},"creationTime":{"type":"string","description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example \"1469498468.057\")."},"name":{"type":"string","description":"A descriptive label that is associated with a script. Script names do not need to be unique."},"nodeJsVersion":{"type":"string","description":"The Node.js version used for execution of the Realtime script.","replaceOnChanges":true},"sizeOnDisk":{"type":"integer","description":"The file size of the uploaded Realtime script, expressed in bytes. When files are uploaded from an S3 location, this value remains at \"0\"."},"storageLocation":{"$ref":"#/types/aws-native:gamelift:ScriptS3Location","description":"The location of the Amazon S3 bucket where a zipped file containing your Realtime scripts is stored. The storage location must specify the Amazon S3 bucket name, the zip file name (the \"key\"), and a role ARN that allows Amazon GameLift to access the Amazon S3 storage location. The S3 bucket must be in the same Region where you want to create a new script. By default, Amazon GameLift uploads the latest version of the zip file; if you have S3 object versioning turned on, you can use the ObjectVersion parameter to specify an earlier version."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"version":{"type":"string","description":"The version that is associated with a script. Version strings do not need to be unique."}},"type":"object","required":["arn","awsId","creationTime","sizeOnDisk","storageLocation"],"inputProperties":{"name":{"type":"string","description":"A descriptive label that is associated with a script. Script names do not need to be unique."},"nodeJsVersion":{"type":"string","description":"The Node.js version used for execution of the Realtime script."},"storageLocation":{"$ref":"#/types/aws-native:gamelift:ScriptS3Location","description":"The location of the Amazon S3 bucket where a zipped file containing your Realtime scripts is stored. The storage location must specify the Amazon S3 bucket name, the zip file name (the \"key\"), and a role ARN that allows Amazon GameLift to access the Amazon S3 storage location. The S3 bucket must be in the same Region where you want to create a new script. By default, Amazon GameLift uploads the latest version of the zip file; if you have S3 object versioning turned on, you can use the ObjectVersion parameter to specify an earlier version."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"version":{"type":"string","description":"The version that is associated with a script. Version strings do not need to be unique."}},"requiredInputs":["storageLocation"]},"aws-native:gameliftstreams:Application":{"description":"Definition of AWS::GameLiftStreams::Application Resource Type","properties":{"applicationLogOutputUri":{"type":"string","description":"An Amazon S3 URI to a bucket where you would like Amazon GameLift Streams to save application logs. Required if you specify one or more `ApplicationLogPaths` ."},"applicationLogPaths":{"type":"array","items":{"type":"string"},"description":"Locations of log files that your content generates during a stream session. Enter path values that are relative to the `ApplicationSourceUri` location. You can specify up to 10 log paths. Amazon GameLift Streams uploads designated log files to the Amazon S3 bucket that you specify in `ApplicationLogOutputUri` at the end of a stream session. To retrieve stored log files, call [GetStreamSession](https://docs.aws.amazon.com/gameliftstreams/latest/apireference/API_GetStreamSession.html) and get the `LogFileLocationUri` ."},"applicationSourceUri":{"type":"string","description":"The location of the content that you want to stream. Enter an Amazon S3 URI to a bucket that contains your game or other application. The location can have a multi-level prefix structure, but it must include all the files needed to run the content. Amazon GameLift Streams copies everything under the specified location.\n\nThis value is immutable. To designate a different content location, create a new application.\n\n\u003e The Amazon S3 bucket and the Amazon GameLift Streams application must be in the same AWS Region.","replaceOnChanges":true},"arn":{"type":"string","description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the application resource across all AWS Regions. For example:\n\n`arn:aws:gameliftstreams:us-west-2:123456789012:application/a-9ZY8X7Wv6` ."},"awsId":{"type":"string","description":"An ID that uniquely identifies the application resource. For example: `a-9ZY8X7Wv6` ."},"description":{"type":"string","description":"A human-readable label for the application. You can update this value later."},"executablePath":{"type":"string","description":"The relative path and file name of the executable file that Amazon GameLift Streams will stream. Specify a path relative to the location set in `ApplicationSourceUri` . The file must be contained within the application's root folder. For Windows applications, the file must be a valid Windows executable or batch file with a filename ending in .exe, .cmd, or .bat. For Linux applications, the file must be a valid Linux binary executable or a script that contains an initial interpreter line starting with a shebang (' `#!` ').","replaceOnChanges":true},"runtimeEnvironment":{"$ref":"#/types/aws-native:gameliftstreams:ApplicationRuntimeEnvironment","description":"A set of configuration settings to run the application on a stream group. This configures the operating system, and can include compatibility layers and other drivers.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of labels to assign to the new application resource. Tags are developer-defined key-value pairs. Tagging AWS resources is useful for resource management, access management and cost allocation. See [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *AWS General Reference* ."}},"type":"object","required":["applicationSourceUri","arn","awsId","description","executablePath","runtimeEnvironment"],"inputProperties":{"applicationLogOutputUri":{"type":"string","description":"An Amazon S3 URI to a bucket where you would like Amazon GameLift Streams to save application logs. Required if you specify one or more `ApplicationLogPaths` ."},"applicationLogPaths":{"type":"array","items":{"type":"string"},"description":"Locations of log files that your content generates during a stream session. Enter path values that are relative to the `ApplicationSourceUri` location. You can specify up to 10 log paths. Amazon GameLift Streams uploads designated log files to the Amazon S3 bucket that you specify in `ApplicationLogOutputUri` at the end of a stream session. To retrieve stored log files, call [GetStreamSession](https://docs.aws.amazon.com/gameliftstreams/latest/apireference/API_GetStreamSession.html) and get the `LogFileLocationUri` ."},"applicationSourceUri":{"type":"string","description":"The location of the content that you want to stream. Enter an Amazon S3 URI to a bucket that contains your game or other application. The location can have a multi-level prefix structure, but it must include all the files needed to run the content. Amazon GameLift Streams copies everything under the specified location.\n\nThis value is immutable. To designate a different content location, create a new application.\n\n\u003e The Amazon S3 bucket and the Amazon GameLift Streams application must be in the same AWS Region."},"description":{"type":"string","description":"A human-readable label for the application. You can update this value later."},"executablePath":{"type":"string","description":"The relative path and file name of the executable file that Amazon GameLift Streams will stream. Specify a path relative to the location set in `ApplicationSourceUri` . The file must be contained within the application's root folder. For Windows applications, the file must be a valid Windows executable or batch file with a filename ending in .exe, .cmd, or .bat. For Linux applications, the file must be a valid Linux binary executable or a script that contains an initial interpreter line starting with a shebang (' `#!` ')."},"runtimeEnvironment":{"$ref":"#/types/aws-native:gameliftstreams:ApplicationRuntimeEnvironment","description":"A set of configuration settings to run the application on a stream group. This configures the operating system, and can include compatibility layers and other drivers."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of labels to assign to the new application resource. Tags are developer-defined key-value pairs. Tagging AWS resources is useful for resource management, access management and cost allocation. See [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *AWS General Reference* ."}},"requiredInputs":["applicationSourceUri","description","executablePath","runtimeEnvironment"]},"aws-native:gameliftstreams:StreamGroup":{"description":"Definition of AWS::GameLiftStreams::StreamGroup Resource Type","properties":{"arn":{"type":"string","description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the stream group resource. For example: `arn:aws:gameliftstreams:us-west-2:123456789012:streamgroup/sg-1AB2C3De4` ."},"awsId":{"type":"string","description":"An ID that uniquely identifies the stream group resource. For example: `sg-1AB2C3De4` ."},"defaultApplication":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupDefaultApplication","description":"Object that identifies the Amazon GameLift Streams application to stream with this stream group."},"description":{"type":"string","description":"A descriptive label for the stream group."},"locationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupLocationConfiguration"},"description":"A set of one or more locations and the streaming capacity for each location. One of the locations MUST be your primary location, which is the AWS Region where you are specifying this resource."},"streamClass":{"type":"string","description":"The target stream quality for sessions that are hosted in this stream group. Set a stream class that is appropriate to the type of content that you're streaming. Stream class determines the type of computing resources Amazon GameLift Streams uses and impacts the cost of streaming. The following options are available:\n\nA stream class can be one of the following:\n\n- *`gen6n_pro_win2022` (NVIDIA, pro)* Supports applications with extremely high 3D scene complexity which require maximum resources. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 16 vCPUs, 64 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_pro` (NVIDIA, pro)* Supports applications with extremely high 3D scene complexity which require maximum resources. Uses dedicated NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 16 vCPUs, 64 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_ultra_win2022` (NVIDIA, ultra)* Supports applications with high 3D scene complexity. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_ultra` (NVIDIA, ultra)* Supports applications with high 3D scene complexity. Uses dedicated NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_high` (NVIDIA, high)* Supports applications with moderate to high 3D scene complexity. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 4 vCPUs, 16 GB RAM, 12 GB VRAM\n- Tenancy: Supports up to 2 concurrent stream sessions\n- *`gen6n_medium` (NVIDIA, medium)* Supports applications with moderate 3D scene complexity. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 2 vCPUs, 8 GB RAM, 6 GB VRAM\n- Tenancy: Supports up to 4 concurrent stream sessions\n- *`gen6n_small` (NVIDIA, small)* Supports applications with lightweight 3D scene complexity and low CPU usage. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 1 vCPUs, 4 GB RAM, 2 GB VRAM\n- Tenancy: Supports up to 12 concurrent stream sessions\n- *`gen5n_win2022` (NVIDIA, ultra)* Supports applications with extremely high 3D scene complexity. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA A10G Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen5n_high` (NVIDIA, high)* Supports applications with moderate to high 3D scene complexity. Uses NVIDIA A10G Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 4 vCPUs, 16 GB RAM, 12 GB VRAM\n- Tenancy: Supports up to 2 concurrent stream sessions\n- *`gen5n_ultra` (NVIDIA, ultra)* Supports applications with extremely high 3D scene complexity. Uses dedicated NVIDIA A10G Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen4n_win2022` (NVIDIA, ultra)* Supports applications with extremely high 3D scene complexity. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA T4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 16 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen4n_high` (NVIDIA, high)* Supports applications with moderate to high 3D scene complexity. Uses NVIDIA T4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 4 vCPUs, 16 GB RAM, 8 GB VRAM\n- Tenancy: Supports up to 2 concurrent stream sessions\n- *`gen4n_ultra` (NVIDIA, ultra)* Supports applications with high 3D scene complexity. Uses dedicated NVIDIA T4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 16 GB VRAM\n- Tenancy: Supports 1 concurrent stream session","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of labels to assign to the new stream group resource. Tags are developer-defined key-value pairs. Tagging AWS resources is useful for resource management, access management and cost allocation. See [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *AWS General Reference* ."}},"type":"object","required":["arn","awsId","description","locationConfigurations","streamClass"],"inputProperties":{"defaultApplication":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupDefaultApplication","description":"Object that identifies the Amazon GameLift Streams application to stream with this stream group."},"description":{"type":"string","description":"A descriptive label for the stream group."},"locationConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupLocationConfiguration"},"description":"A set of one or more locations and the streaming capacity for each location. One of the locations MUST be your primary location, which is the AWS Region where you are specifying this resource."},"streamClass":{"type":"string","description":"The target stream quality for sessions that are hosted in this stream group. Set a stream class that is appropriate to the type of content that you're streaming. Stream class determines the type of computing resources Amazon GameLift Streams uses and impacts the cost of streaming. The following options are available:\n\nA stream class can be one of the following:\n\n- *`gen6n_pro_win2022` (NVIDIA, pro)* Supports applications with extremely high 3D scene complexity which require maximum resources. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 16 vCPUs, 64 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_pro` (NVIDIA, pro)* Supports applications with extremely high 3D scene complexity which require maximum resources. Uses dedicated NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 16 vCPUs, 64 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_ultra_win2022` (NVIDIA, ultra)* Supports applications with high 3D scene complexity. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_ultra` (NVIDIA, ultra)* Supports applications with high 3D scene complexity. Uses dedicated NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen6n_high` (NVIDIA, high)* Supports applications with moderate to high 3D scene complexity. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 4 vCPUs, 16 GB RAM, 12 GB VRAM\n- Tenancy: Supports up to 2 concurrent stream sessions\n- *`gen6n_medium` (NVIDIA, medium)* Supports applications with moderate 3D scene complexity. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 2 vCPUs, 8 GB RAM, 6 GB VRAM\n- Tenancy: Supports up to 4 concurrent stream sessions\n- *`gen6n_small` (NVIDIA, small)* Supports applications with lightweight 3D scene complexity and low CPU usage. Uses NVIDIA L4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 1 vCPUs, 4 GB RAM, 2 GB VRAM\n- Tenancy: Supports up to 12 concurrent stream sessions\n- *`gen5n_win2022` (NVIDIA, ultra)* Supports applications with extremely high 3D scene complexity. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA A10G Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen5n_high` (NVIDIA, high)* Supports applications with moderate to high 3D scene complexity. Uses NVIDIA A10G Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 4 vCPUs, 16 GB RAM, 12 GB VRAM\n- Tenancy: Supports up to 2 concurrent stream sessions\n- *`gen5n_ultra` (NVIDIA, ultra)* Supports applications with extremely high 3D scene complexity. Uses dedicated NVIDIA A10G Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 24 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen4n_win2022` (NVIDIA, ultra)* Supports applications with extremely high 3D scene complexity. Runs applications on Microsoft Windows Server 2022 Base and supports DirectX 12. Compatible with Unreal Engine versions up through 5.6, 32 and 64-bit applications, and anti-cheat technology. Uses NVIDIA T4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 16 GB VRAM\n- Tenancy: Supports 1 concurrent stream session\n- *`gen4n_high` (NVIDIA, high)* Supports applications with moderate to high 3D scene complexity. Uses NVIDIA T4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 4 vCPUs, 16 GB RAM, 8 GB VRAM\n- Tenancy: Supports up to 2 concurrent stream sessions\n- *`gen4n_ultra` (NVIDIA, ultra)* Supports applications with high 3D scene complexity. Uses dedicated NVIDIA T4 Tensor Core GPU.\n\n- Reference resolution: 1080p\n- Reference frame rate: 60 fps\n- Workload specifications: 8 vCPUs, 32 GB RAM, 16 GB VRAM\n- Tenancy: Supports 1 concurrent stream session"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of labels to assign to the new stream group resource. Tags are developer-defined key-value pairs. Tagging AWS resources is useful for resource management, access management and cost allocation. See [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *AWS General Reference* ."}},"requiredInputs":["description","locationConfigurations","streamClass"]},"aws-native:globalaccelerator:Accelerator":{"description":"Resource Type definition for AWS::GlobalAccelerator::Accelerator","properties":{"acceleratorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the accelerator."},"dnsName":{"type":"string","description":"The Domain Name System (DNS) name that Global Accelerator creates that points to your accelerator's static IPv4 addresses."},"dualStackDnsName":{"type":"string","description":"The Domain Name System (DNS) name that Global Accelerator creates that points to your accelerator's static IPv4 and IPv6 addresses."},"enabled":{"type":"boolean","description":"Indicates whether an accelerator is enabled. The value is true or false."},"ipAddressType":{"$ref":"#/types/aws-native:globalaccelerator:AcceleratorIpAddressType","description":"IP Address type."},"ipAddresses":{"type":"array","items":{"type":"string"},"description":"The IP addresses from BYOIP Prefix pool."},"ipv4Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv4 addresses assigned to the accelerator."},"ipv6Addresses":{"type":"array","items":{"type":"string"},"description":"The IPv6 addresses assigned if the accelerator is dualstack"},"name":{"type":"string","description":"Name of accelerator."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Create tags for an accelerator.\n\nFor more information, see [Tagging](https://docs.aws.amazon.com/global-accelerator/latest/dg/tagging-in-global-accelerator.html) in the *AWS Global Accelerator Developer Guide* ."}},"type":"object","required":["acceleratorArn","dnsName","dualStackDnsName","ipv4Addresses","ipv6Addresses","name"],"inputProperties":{"enabled":{"type":"boolean","description":"Indicates whether an accelerator is enabled. The value is true or false."},"ipAddressType":{"$ref":"#/types/aws-native:globalaccelerator:AcceleratorIpAddressType","description":"IP Address type."},"ipAddresses":{"type":"array","items":{"type":"string"},"description":"The IP addresses from BYOIP Prefix pool."},"name":{"type":"string","description":"Name of accelerator."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Create tags for an accelerator.\n\nFor more information, see [Tagging](https://docs.aws.amazon.com/global-accelerator/latest/dg/tagging-in-global-accelerator.html) in the *AWS Global Accelerator Developer Guide* ."}}},"aws-native:globalaccelerator:CrossAccountAttachment":{"description":"Resource Type definition for AWS::GlobalAccelerator::CrossAccountAttachment","properties":{"attachmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the attachment."},"name":{"type":"string","description":"The Friendly identifier of the attachment."},"principals":{"type":"array","items":{"type":"string"},"description":"Principals to share the resources with."},"resources":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:CrossAccountAttachmentResource"},"description":"Resources shared using the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Add tags for a cross-account attachment.\n\nFor more information, see [Tagging in AWS Global Accelerator](https://docs.aws.amazon.com/global-accelerator/latest/dg/tagging-in-global-accelerator.html) in the *AWS Global Accelerator Developer Guide* ."}},"type":"object","required":["attachmentArn","name"],"inputProperties":{"name":{"type":"string","description":"The Friendly identifier of the attachment."},"principals":{"type":"array","items":{"type":"string"},"description":"Principals to share the resources with."},"resources":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:CrossAccountAttachmentResource"},"description":"Resources shared using the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Add tags for a cross-account attachment.\n\nFor more information, see [Tagging in AWS Global Accelerator](https://docs.aws.amazon.com/global-accelerator/latest/dg/tagging-in-global-accelerator.html) in the *AWS Global Accelerator Developer Guide* ."}}},"aws-native:globalaccelerator:EndpointGroup":{"description":"Resource Type definition for AWS::GlobalAccelerator::EndpointGroup","properties":{"endpointConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupEndpointConfiguration"},"description":"The list of endpoint objects."},"endpointGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint group"},"endpointGroupRegion":{"type":"string","description":"The name of the AWS Region where the endpoint group is located","replaceOnChanges":true},"healthCheckIntervalSeconds":{"type":"integer","description":"The time in seconds between each health check for an endpoint. Must be a value of 10 or 30"},"healthCheckPath":{"type":"string","description":"If the protocol is HTTP/S, then this value provides the ping path that Global Accelerator uses for the destination on the endpoints for health checks. The default is slash (/)."},"healthCheckPort":{"type":"integer","description":"The port that AWS Global Accelerator uses to check the health of endpoints in this endpoint group."},"healthCheckProtocol":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupHealthCheckProtocol","description":"The protocol that AWS Global Accelerator uses to check the health of endpoints in this endpoint group."},"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener","replaceOnChanges":true},"portOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupPortOverride"},"description":"Allows you to override the destination ports used to route traffic to an endpoint. Using a port override lets you map a list of external destination ports (that your users send traffic to) to a list of internal destination ports that you want an application endpoint to receive traffic on."},"thresholdCount":{"type":"integer","description":"The number of consecutive health checks required to set the state of the endpoint to unhealthy."},"trafficDialPercentage":{"type":"number","description":"The percentage of traffic to sent to an AWS Region"}},"type":"object","required":["endpointGroupArn","endpointGroupRegion","listenerArn"],"inputProperties":{"endpointConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupEndpointConfiguration"},"description":"The list of endpoint objects."},"endpointGroupRegion":{"type":"string","description":"The name of the AWS Region where the endpoint group is located"},"healthCheckIntervalSeconds":{"type":"integer","description":"The time in seconds between each health check for an endpoint. Must be a value of 10 or 30"},"healthCheckPath":{"type":"string","description":"If the protocol is HTTP/S, then this value provides the ping path that Global Accelerator uses for the destination on the endpoints for health checks. The default is slash (/)."},"healthCheckPort":{"type":"integer","description":"The port that AWS Global Accelerator uses to check the health of endpoints in this endpoint group."},"healthCheckProtocol":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupHealthCheckProtocol","description":"The protocol that AWS Global Accelerator uses to check the health of endpoints in this endpoint group."},"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener"},"portOverrides":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupPortOverride"},"description":"Allows you to override the destination ports used to route traffic to an endpoint. Using a port override lets you map a list of external destination ports (that your users send traffic to) to a list of internal destination ports that you want an application endpoint to receive traffic on."},"thresholdCount":{"type":"integer","description":"The number of consecutive health checks required to set the state of the endpoint to unhealthy."},"trafficDialPercentage":{"type":"number","description":"The percentage of traffic to sent to an AWS Region"}},"requiredInputs":["endpointGroupRegion","listenerArn"]},"aws-native:globalaccelerator:Listener":{"description":"Resource Type definition for AWS::GlobalAccelerator::Listener","properties":{"acceleratorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the accelerator.","replaceOnChanges":true},"clientAffinity":{"$ref":"#/types/aws-native:globalaccelerator:ListenerClientAffinity","description":"Client affinity lets you direct all requests from a user to the same endpoint."},"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."},"portRanges":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:ListenerPortRange"},"description":"The list of port ranges for the connections from clients to the accelerator."},"protocol":{"$ref":"#/types/aws-native:globalaccelerator:ListenerProtocol","description":"The protocol for the listener."}},"type":"object","required":["acceleratorArn","listenerArn","portRanges","protocol"],"inputProperties":{"acceleratorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the accelerator."},"clientAffinity":{"$ref":"#/types/aws-native:globalaccelerator:ListenerClientAffinity","description":"Client affinity lets you direct all requests from a user to the same endpoint."},"portRanges":{"type":"array","items":{"$ref":"#/types/aws-native:globalaccelerator:ListenerPortRange"},"description":"The list of port ranges for the connections from clients to the accelerator."},"protocol":{"$ref":"#/types/aws-native:globalaccelerator:ListenerProtocol","description":"The protocol for the listener."}},"requiredInputs":["acceleratorArn","portRanges","protocol"]},"aws-native:glue:Catalog":{"description":"Creates a catalog in the Glue Data Catalog.","properties":{"allowFullTableExternalDataAccess":{"$ref":"#/types/aws-native:glue:CatalogAllowFullTableExternalDataAccess","description":"Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation."},"catalogId":{"type":"string","description":"The ID of the catalog."},"catalogProperties":{"$ref":"#/types/aws-native:glue:CatalogProperties"},"createDatabaseDefaultPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissions"},"description":"An array of PrincipalPermissions objects for default database permissions."},"createTableDefaultPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissions"},"description":"An array of PrincipalPermissions objects for default table permissions."},"createTime":{"type":"integer","description":"The time at which the catalog was created."},"description":{"type":"string","description":"A description of the catalog."},"federatedCatalog":{"$ref":"#/types/aws-native:glue:CatalogFederatedCatalog"},"name":{"type":"string","description":"The name of the catalog to create.","replaceOnChanges":true},"overwriteChildResourcePermissionsWithDefault":{"$ref":"#/types/aws-native:glue:CatalogOverwriteChildResourcePermissionsWithDefault","description":"Specifies whether to overwrite child resource permissions with the default permissions."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of key-value pairs that define parameters and properties of the catalog."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the catalog."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetRedshiftCatalog":{"$ref":"#/types/aws-native:glue:CatalogTargetRedshiftCatalog"},"updateTime":{"type":"integer","description":"The time at which the catalog was last updated."}},"type":"object","required":["catalogId","createTime","name","resourceArn","updateTime"],"inputProperties":{"allowFullTableExternalDataAccess":{"$ref":"#/types/aws-native:glue:CatalogAllowFullTableExternalDataAccess","description":"Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation."},"catalogProperties":{"$ref":"#/types/aws-native:glue:CatalogProperties"},"createDatabaseDefaultPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissions"},"description":"An array of PrincipalPermissions objects for default database permissions."},"createTableDefaultPermissions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissions"},"description":"An array of PrincipalPermissions objects for default table permissions."},"description":{"type":"string","description":"A description of the catalog."},"federatedCatalog":{"$ref":"#/types/aws-native:glue:CatalogFederatedCatalog"},"name":{"type":"string","description":"The name of the catalog to create."},"overwriteChildResourcePermissionsWithDefault":{"$ref":"#/types/aws-native:glue:CatalogOverwriteChildResourcePermissionsWithDefault","description":"Specifies whether to overwrite child resource permissions with the default permissions."},"parameters":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of key-value pairs that define parameters and properties of the catalog."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetRedshiftCatalog":{"$ref":"#/types/aws-native:glue:CatalogTargetRedshiftCatalog"}}},"aws-native:glue:Crawler":{"description":"Resource Type definition for AWS::Glue::Crawler","properties":{"classifiers":{"type":"array","items":{"type":"string"},"description":"A list of UTF-8 strings that specify the names of custom classifiers that are associated with the crawler."},"configuration":{"type":"string","description":"Crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior."},"crawlerSecurityConfiguration":{"type":"string","description":"The name of the SecurityConfiguration structure to be used by this crawler."},"databaseName":{"type":"string","description":"The name of the database in which the crawler's output is stored."},"description":{"type":"string","description":"A description of the crawler."},"lakeFormationConfiguration":{"$ref":"#/types/aws-native:glue:CrawlerLakeFormationConfiguration","description":"Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials."},"name":{"type":"string","description":"The name of the crawler.","replaceOnChanges":true},"recrawlPolicy":{"$ref":"#/types/aws-native:glue:CrawlerRecrawlPolicy","description":"A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run."},"role":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that's used to access customer resources, such as Amazon Simple Storage Service (Amazon S3) data."},"schedule":{"$ref":"#/types/aws-native:glue:CrawlerSchedule","description":"For scheduled crawlers, the schedule when the crawler runs."},"schemaChangePolicy":{"$ref":"#/types/aws-native:glue:CrawlerSchemaChangePolicy","description":"The policy that specifies update and delete behaviors for the crawler. The policy tells the crawler what to do in the event that it detects a change in a table that already exists in the customer's database at the time of the crawl. The `SchemaChangePolicy` does not affect whether or how new tables and partitions are added. New tables and partitions are always created regardless of the `SchemaChangePolicy` on a crawler.\n\nThe SchemaChangePolicy consists of two components, `UpdateBehavior` and `DeleteBehavior` ."},"tablePrefix":{"type":"string","description":"The prefix added to the names of tables that are created."},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this crawler.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Crawler` for more information about the expected schema for this property."},"targets":{"$ref":"#/types/aws-native:glue:CrawlerTargets","description":"A collection of targets to crawl."}},"type":"object","required":["role","targets"],"inputProperties":{"classifiers":{"type":"array","items":{"type":"string"},"description":"A list of UTF-8 strings that specify the names of custom classifiers that are associated with the crawler."},"configuration":{"type":"string","description":"Crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior."},"crawlerSecurityConfiguration":{"type":"string","description":"The name of the SecurityConfiguration structure to be used by this crawler."},"databaseName":{"type":"string","description":"The name of the database in which the crawler's output is stored."},"description":{"type":"string","description":"A description of the crawler."},"lakeFormationConfiguration":{"$ref":"#/types/aws-native:glue:CrawlerLakeFormationConfiguration","description":"Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials."},"name":{"type":"string","description":"The name of the crawler."},"recrawlPolicy":{"$ref":"#/types/aws-native:glue:CrawlerRecrawlPolicy","description":"A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run."},"role":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that's used to access customer resources, such as Amazon Simple Storage Service (Amazon S3) data."},"schedule":{"$ref":"#/types/aws-native:glue:CrawlerSchedule","description":"For scheduled crawlers, the schedule when the crawler runs."},"schemaChangePolicy":{"$ref":"#/types/aws-native:glue:CrawlerSchemaChangePolicy","description":"The policy that specifies update and delete behaviors for the crawler. The policy tells the crawler what to do in the event that it detects a change in a table that already exists in the customer's database at the time of the crawl. The `SchemaChangePolicy` does not affect whether or how new tables and partitions are added. New tables and partitions are always created regardless of the `SchemaChangePolicy` on a crawler.\n\nThe SchemaChangePolicy consists of two components, `UpdateBehavior` and `DeleteBehavior` ."},"tablePrefix":{"type":"string","description":"The prefix added to the names of tables that are created."},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this crawler.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Crawler` for more information about the expected schema for this property."},"targets":{"$ref":"#/types/aws-native:glue:CrawlerTargets","description":"A collection of targets to crawl."}},"requiredInputs":["role","targets"]},"aws-native:glue:Database":{"description":"Resource Type definition for AWS::Glue::Database","properties":{"catalogId":{"type":"string","description":"The AWS account ID for the account in which to create the catalog object."},"databaseInput":{"$ref":"#/types/aws-native:glue:DatabaseInput","description":"The metadata for the database."},"databaseName":{"type":"string","description":"The name of the database. For hive compatibility, this is folded to lowercase when it is store.","replaceOnChanges":true}},"type":"object","required":["catalogId","databaseInput"],"inputProperties":{"catalogId":{"type":"string","description":"The AWS account ID for the account in which to create the catalog object."},"databaseInput":{"$ref":"#/types/aws-native:glue:DatabaseInput","description":"The metadata for the database."},"databaseName":{"type":"string","description":"The name of the database. For hive compatibility, this is folded to lowercase when it is store."}},"requiredInputs":["catalogId","databaseInput"]},"aws-native:glue:IdentityCenterConfiguration":{"description":"Resource Type definition for AWS::Glue::IdentityCenterConfiguration","properties":{"accountId":{"type":"string","description":"The identifier for the specified AWS account."},"applicationArn":{"type":"string","description":"The Glue IAM identity center application arn"},"instanceArn":{"type":"string","description":"The IAM identity center instance arn","replaceOnChanges":true},"scopes":{"type":"array","items":{"type":"string"},"description":"The downstream scopes that Glue identity center configuration can access"},"userBackgroundSessionsEnabled":{"type":"boolean","description":"Enable or disable user background sessions for Glue Identity Center"}},"type":"object","required":["accountId","applicationArn","instanceArn"],"inputProperties":{"instanceArn":{"type":"string","description":"The IAM identity center instance arn"},"scopes":{"type":"array","items":{"type":"string"},"description":"The downstream scopes that Glue identity center configuration can access"},"userBackgroundSessionsEnabled":{"type":"boolean","description":"Enable or disable user background sessions for Glue Identity Center"}},"requiredInputs":["instanceArn"]},"aws-native:glue:Integration":{"description":"Resource Type definition for AWS::Glue::Integration","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"An optional set of non-secret key–value pairs that contains additional contextual information for encryption. This can only be provided if `KMSKeyId` is provided.","replaceOnChanges":true},"createTime":{"type":"string","description":"The time (UTC) when the integration was created."},"dataFilter":{"type":"string","description":"Selects source tables for the integration using Maxwell filter syntax."},"description":{"type":"string","description":"A description for the integration."},"integrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the integration."},"integrationConfig":{"$ref":"#/types/aws-native:glue:IntegrationConfig","description":"The structure used to define properties associated with the zero-ETL integration. For more information, see [IntegrationConfig structure.](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-IntegrationConfig)","replaceOnChanges":true},"integrationName":{"type":"string","description":"The name of the integration.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"An KMS key identifier for the key to use to encrypt the integration. If you don't specify an encryption key, the default AWS owned KMS key is used.","replaceOnChanges":true},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database to use as the source for replication","replaceOnChanges":true},"status":{"type":"string","description":"The status of the integration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Glue data warehouse to use as the target for replication","replaceOnChanges":true}},"type":"object","required":["createTime","integrationArn","integrationName","sourceArn","status","targetArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"An optional set of non-secret key–value pairs that contains additional contextual information for encryption. This can only be provided if `KMSKeyId` is provided."},"dataFilter":{"type":"string","description":"Selects source tables for the integration using Maxwell filter syntax."},"description":{"type":"string","description":"A description for the integration."},"integrationConfig":{"$ref":"#/types/aws-native:glue:IntegrationConfig","description":"The structure used to define properties associated with the zero-ETL integration. For more information, see [IntegrationConfig structure.](https://docs.aws.amazon.com/glue/latest/dg/aws-glue-api-integrations.html#aws-glue-api-integrations-IntegrationConfig)"},"integrationName":{"type":"string","description":"The name of the integration."},"kmsKeyId":{"type":"string","description":"An KMS key identifier for the key to use to encrypt the integration. If you don't specify an encryption key, the default AWS owned KMS key is used."},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database to use as the source for replication"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Glue data warehouse to use as the target for replication"}},"requiredInputs":["sourceArn","targetArn"]},"aws-native:glue:IntegrationResourceProperty":{"description":"Resource Type definition for AWS::Glue::IntegrationResourceProperty","properties":{"resourceArn":{"type":"string","description":"The connection ARN of the source, or the database ARN of the target.","replaceOnChanges":true},"resourcePropertyArn":{"type":"string","description":"The integration resource property ARN."},"sourceProcessingProperties":{"$ref":"#/types/aws-native:glue:SourceProcessingPropertiesProperties","description":"The resource properties associated with the integration source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetProcessingProperties":{"$ref":"#/types/aws-native:glue:TargetProcessingPropertiesProperties","description":"The resource properties associated with the integration target."}},"type":"object","required":["resourceArn","resourcePropertyArn"],"inputProperties":{"resourceArn":{"type":"string","description":"The connection ARN of the source, or the database ARN of the target."},"sourceProcessingProperties":{"$ref":"#/types/aws-native:glue:SourceProcessingPropertiesProperties","description":"The resource properties associated with the integration source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetProcessingProperties":{"$ref":"#/types/aws-native:glue:TargetProcessingPropertiesProperties","description":"The resource properties associated with the integration target."}},"requiredInputs":["resourceArn"]},"aws-native:glue:Job":{"description":"Resource Type definition for AWS::Glue::Job","properties":{"allocatedCapacity":{"type":"number","description":"The number of capacity units that are allocated to this job."},"command":{"$ref":"#/types/aws-native:glue:JobCommand","description":"The code that executes a job."},"connections":{"$ref":"#/types/aws-native:glue:JobConnectionsList","description":"Specifies the connections used by a job"},"defaultArguments":{"$ref":"pulumi.json#/Any","description":"The default arguments for this job, specified as name-value pairs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"description":{"type":"string","description":"A description of the job."},"executionClass":{"type":"string","description":"Indicates whether the job is run with a standard or flexible execution class."},"executionProperty":{"$ref":"#/types/aws-native:glue:JobExecutionProperty","description":"The maximum number of concurrent runs that are allowed for this job."},"glueVersion":{"type":"string","description":"Glue version determines the versions of Apache Spark and Python that AWS Glue supports."},"jobMode":{"type":"string","description":"Property description not available."},"jobRunQueuingEnabled":{"type":"boolean","description":"Property description not available."},"logUri":{"type":"string","description":"This field is reserved for future use."},"maintenanceWindow":{"type":"string","description":"Property description not available."},"maxCapacity":{"type":"number","description":"The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs."},"maxRetries":{"type":"number","description":"The maximum number of times to retry this job after a JobRun fails"},"name":{"type":"string","description":"The name you assign to the job definition","replaceOnChanges":true},"nonOverridableArguments":{"$ref":"pulumi.json#/Any","description":"Non-overridable arguments for this job, specified as name-value pairs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"notificationProperty":{"$ref":"#/types/aws-native:glue:JobNotificationProperty","description":"Specifies configuration properties of a notification."},"numberOfWorkers":{"type":"integer","description":"The number of workers of a defined workerType that are allocated when a job runs."},"role":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the IAM role associated with this job."},"securityConfiguration":{"type":"string","description":"The name of the SecurityConfiguration structure to be used with this job."},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this job.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"timeout":{"type":"integer","description":"The maximum time that a job run can consume resources before it is terminated and enters TIMEOUT status."},"workerType":{"$ref":"#/types/aws-native:glue:JobWorkerType","description":"TThe type of predefined worker that is allocated when a job runs."}},"type":"object","required":["command","role"],"inputProperties":{"allocatedCapacity":{"type":"number","description":"The number of capacity units that are allocated to this job."},"command":{"$ref":"#/types/aws-native:glue:JobCommand","description":"The code that executes a job."},"connections":{"$ref":"#/types/aws-native:glue:JobConnectionsList","description":"Specifies the connections used by a job"},"defaultArguments":{"$ref":"pulumi.json#/Any","description":"The default arguments for this job, specified as name-value pairs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"description":{"type":"string","description":"A description of the job."},"executionClass":{"type":"string","description":"Indicates whether the job is run with a standard or flexible execution class."},"executionProperty":{"$ref":"#/types/aws-native:glue:JobExecutionProperty","description":"The maximum number of concurrent runs that are allowed for this job."},"glueVersion":{"type":"string","description":"Glue version determines the versions of Apache Spark and Python that AWS Glue supports."},"jobMode":{"type":"string","description":"Property description not available."},"jobRunQueuingEnabled":{"type":"boolean","description":"Property description not available."},"logUri":{"type":"string","description":"This field is reserved for future use."},"maintenanceWindow":{"type":"string","description":"Property description not available."},"maxCapacity":{"type":"number","description":"The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs."},"maxRetries":{"type":"number","description":"The maximum number of times to retry this job after a JobRun fails"},"name":{"type":"string","description":"The name you assign to the job definition"},"nonOverridableArguments":{"$ref":"pulumi.json#/Any","description":"Non-overridable arguments for this job, specified as name-value pairs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"notificationProperty":{"$ref":"#/types/aws-native:glue:JobNotificationProperty","description":"Specifies configuration properties of a notification."},"numberOfWorkers":{"type":"integer","description":"The number of workers of a defined workerType that are allocated when a job runs."},"role":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the IAM role associated with this job."},"securityConfiguration":{"type":"string","description":"The name of the SecurityConfiguration structure to be used with this job."},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this job.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"timeout":{"type":"integer","description":"The maximum time that a job run can consume resources before it is terminated and enters TIMEOUT status."},"workerType":{"$ref":"#/types/aws-native:glue:JobWorkerType","description":"TThe type of predefined worker that is allocated when a job runs."}},"requiredInputs":["command","role"]},"aws-native:glue:Registry":{"description":"This resource creates a Registry for authoring schemas as part of Glue Schema Registry.","properties":{"arn":{"type":"string","description":"Amazon Resource Name for the created Registry."},"description":{"type":"string","description":"A description of the registry. If description is not provided, there will not be any default value for this."},"name":{"type":"string","description":"Name of the registry to be created of max length of 255, and may only contain letters, numbers, hyphen, underscore, dollar sign, or hash mark.  No whitespace.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of tags to tag the Registry"}},"type":"object","required":["arn","name"],"inputProperties":{"description":{"type":"string","description":"A description of the registry. If description is not provided, there will not be any default value for this."},"name":{"type":"string","description":"Name of the registry to be created of max length of 255, and may only contain letters, numbers, hyphen, underscore, dollar sign, or hash mark.  No whitespace."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of tags to tag the Registry"}}},"aws-native:glue:Schema":{"description":"This resource represents a schema of Glue Schema Registry.","properties":{"arn":{"type":"string","description":"Amazon Resource Name for the Schema."},"checkpointVersion":{"$ref":"#/types/aws-native:glue:SchemaVersion","description":"Specify the `VersionNumber` or the `IsLatest` for setting the checkpoint for the schema. This is only required for updating a checkpoint."},"compatibility":{"$ref":"#/types/aws-native:glue:SchemaCompatibility","description":"Compatibility setting for the schema."},"dataFormat":{"$ref":"#/types/aws-native:glue:SchemaDataFormat","description":"Data format name to use for the schema. Accepted values: 'AVRO', 'JSON', 'PROTOBUF'","replaceOnChanges":true},"description":{"type":"string","description":"A description of the schema. If description is not provided, there will not be any default value for this."},"initialSchemaVersionId":{"type":"string","description":"Represents the version ID associated with the initial schema version."},"name":{"type":"string","description":"Name of the schema.","replaceOnChanges":true},"registry":{"$ref":"#/types/aws-native:glue:SchemaRegistry","description":"The registry where a schema is stored.","replaceOnChanges":true},"schemaDefinition":{"type":"string","description":"Definition for the initial schema version in plain-text.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of tags to tag the schema"}},"type":"object","required":["arn","compatibility","dataFormat","initialSchemaVersionId","name"],"inputProperties":{"checkpointVersion":{"$ref":"#/types/aws-native:glue:SchemaVersion","description":"Specify the `VersionNumber` or the `IsLatest` for setting the checkpoint for the schema. This is only required for updating a checkpoint."},"compatibility":{"$ref":"#/types/aws-native:glue:SchemaCompatibility","description":"Compatibility setting for the schema."},"dataFormat":{"$ref":"#/types/aws-native:glue:SchemaDataFormat","description":"Data format name to use for the schema. Accepted values: 'AVRO', 'JSON', 'PROTOBUF'"},"description":{"type":"string","description":"A description of the schema. If description is not provided, there will not be any default value for this."},"name":{"type":"string","description":"Name of the schema."},"registry":{"$ref":"#/types/aws-native:glue:SchemaRegistry","description":"The registry where a schema is stored."},"schemaDefinition":{"type":"string","description":"Definition for the initial schema version in plain-text."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"List of tags to tag the schema"}},"requiredInputs":["compatibility","dataFormat"]},"aws-native:glue:SchemaVersion":{"description":"This resource represents an individual schema version of a schema defined in Glue Schema Registry.","properties":{"schema":{"$ref":"#/types/aws-native:glue:SchemaVersionSchema","description":"The schema that includes the schema version.","replaceOnChanges":true},"schemaDefinition":{"type":"string","description":"Complete definition of the schema in plain-text.","replaceOnChanges":true},"versionId":{"type":"string","description":"Represents the version ID associated with the schema version."}},"type":"object","required":["schema","schemaDefinition","versionId"],"inputProperties":{"schema":{"$ref":"#/types/aws-native:glue:SchemaVersionSchema","description":"The schema that includes the schema version."},"schemaDefinition":{"type":"string","description":"Complete definition of the schema in plain-text."}},"requiredInputs":["schema","schemaDefinition"]},"aws-native:glue:SchemaVersionMetadata":{"description":"This resource adds Key-Value metadata to a Schema version of Glue Schema Registry.","properties":{"key":{"type":"string","description":"Metadata key","replaceOnChanges":true},"schemaVersionId":{"type":"string","description":"Represents the version ID associated with the schema version.","replaceOnChanges":true},"value":{"type":"string","description":"Metadata value","replaceOnChanges":true}},"type":"object","required":["key","schemaVersionId","value"],"inputProperties":{"key":{"type":"string","description":"Metadata key"},"schemaVersionId":{"type":"string","description":"Represents the version ID associated with the schema version."},"value":{"type":"string","description":"Metadata value"}},"requiredInputs":["key","schemaVersionId","value"]},"aws-native:glue:Trigger":{"description":"Resource Type definition for AWS::Glue::Trigger\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var onDemandJobTrigger = new AwsNative.Glue.Trigger(\"onDemandJobTrigger\", new()\n    {\n        Type = \"ON_DEMAND\",\n        Description = \"DESCRIPTION_ON_DEMAND\",\n        Actions = new[]\n        {\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = \"prod-job2\",\n            },\n        },\n        Name = \"prod-trigger1-ondemand\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := glue.NewTrigger(ctx, \"onDemandJobTrigger\", \u0026glue.TriggerArgs{\n\t\t\tType:        pulumi.String(\"ON_DEMAND\"),\n\t\t\tDescription: pulumi.String(\"DESCRIPTION_ON_DEMAND\"),\n\t\t\tActions: glue.TriggerActionArray{\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: pulumi.String(\"prod-job2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName: pulumi.String(\"prod-trigger1-ondemand\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst onDemandJobTrigger = new aws_native.glue.Trigger(\"onDemandJobTrigger\", {\n    type: \"ON_DEMAND\",\n    description: \"DESCRIPTION_ON_DEMAND\",\n    actions: [{\n        jobName: \"prod-job2\",\n    }],\n    name: \"prod-trigger1-ondemand\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\non_demand_job_trigger = aws_native.glue.Trigger(\"onDemandJobTrigger\",\n    type=\"ON_DEMAND\",\n    description=\"DESCRIPTION_ON_DEMAND\",\n    actions=[{\n        \"job_name\": \"prod-job2\",\n    }],\n    name=\"prod-trigger1-ondemand\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var onDemandJobTrigger = new AwsNative.Glue.Trigger(\"onDemandJobTrigger\", new()\n    {\n        Type = \"ON_DEMAND\",\n        Description = \"DESCRIPTION_ON_DEMAND\",\n        Actions = new[]\n        {\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = \"prod-job2\",\n            },\n        },\n        Name = \"prod-trigger1-ondemand\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := glue.NewTrigger(ctx, \"onDemandJobTrigger\", \u0026glue.TriggerArgs{\n\t\t\tType:        pulumi.String(\"ON_DEMAND\"),\n\t\t\tDescription: pulumi.String(\"DESCRIPTION_ON_DEMAND\"),\n\t\t\tActions: glue.TriggerActionArray{\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: pulumi.String(\"prod-job2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName: pulumi.String(\"prod-trigger1-ondemand\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst onDemandJobTrigger = new aws_native.glue.Trigger(\"onDemandJobTrigger\", {\n    type: \"ON_DEMAND\",\n    description: \"DESCRIPTION_ON_DEMAND\",\n    actions: [{\n        jobName: \"prod-job2\",\n    }],\n    name: \"prod-trigger1-ondemand\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\non_demand_job_trigger = aws_native.glue.Trigger(\"onDemandJobTrigger\",\n    type=\"ON_DEMAND\",\n    description=\"DESCRIPTION_ON_DEMAND\",\n    actions=[{\n        \"job_name\": \"prod-job2\",\n    }],\n    name=\"prod-trigger1-ondemand\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var scheduledJobTrigger = new AwsNative.Glue.Trigger(\"scheduledJobTrigger\", new()\n    {\n        Type = \"SCHEDULED\",\n        Description = \"DESCRIPTION_SCHEDULED\",\n        Schedule = \"cron(0 */2 * * ? *)\",\n        Actions = new[]\n        {\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = \"prod-job2\",\n            },\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = \"prod-job3\",\n                Arguments = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n                },\n            },\n        },\n        Name = \"prod-trigger1-scheduled\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := glue.NewTrigger(ctx, \"scheduledJobTrigger\", \u0026glue.TriggerArgs{\n\t\t\tType:        pulumi.String(\"SCHEDULED\"),\n\t\t\tDescription: pulumi.String(\"DESCRIPTION_SCHEDULED\"),\n\t\t\tSchedule:    pulumi.String(\"cron(0 */2 * * ? *)\"),\n\t\t\tActions: glue.TriggerActionArray{\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: pulumi.String(\"prod-job2\"),\n\t\t\t\t},\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: pulumi.String(\"prod-job3\"),\n\t\t\t\t\tArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName: pulumi.String(\"prod-trigger1-scheduled\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst scheduledJobTrigger = new aws_native.glue.Trigger(\"scheduledJobTrigger\", {\n    type: \"SCHEDULED\",\n    description: \"DESCRIPTION_SCHEDULED\",\n    schedule: \"cron(0 */2 * * ? *)\",\n    actions: [\n        {\n            jobName: \"prod-job2\",\n        },\n        {\n            jobName: \"prod-job3\",\n            arguments: {\n                \"--job-bookmark-option\": \"job-bookmark-enable\",\n            },\n        },\n    ],\n    name: \"prod-trigger1-scheduled\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nscheduled_job_trigger = aws_native.glue.Trigger(\"scheduledJobTrigger\",\n    type=\"SCHEDULED\",\n    description=\"DESCRIPTION_SCHEDULED\",\n    schedule=\"cron(0 */2 * * ? *)\",\n    actions=[\n        {\n            \"job_name\": \"prod-job2\",\n        },\n        {\n            \"job_name\": \"prod-job3\",\n            \"arguments\": {\n                \"--job-bookmark-option\": \"job-bookmark-enable\",\n            },\n        },\n    ],\n    name=\"prod-trigger1-scheduled\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var scheduledJobTrigger = new AwsNative.Glue.Trigger(\"scheduledJobTrigger\", new()\n    {\n        Type = \"SCHEDULED\",\n        Description = \"DESCRIPTION_SCHEDULED\",\n        Schedule = \"cron(0 */2 * * ? *)\",\n        Actions = new[]\n        {\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = \"prod-job2\",\n            },\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = \"prod-job3\",\n                Arguments = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n                },\n            },\n        },\n        Name = \"prod-trigger1-scheduled\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := glue.NewTrigger(ctx, \"scheduledJobTrigger\", \u0026glue.TriggerArgs{\n\t\t\tType:        pulumi.String(\"SCHEDULED\"),\n\t\t\tDescription: pulumi.String(\"DESCRIPTION_SCHEDULED\"),\n\t\t\tSchedule:    pulumi.String(\"cron(0 */2 * * ? *)\"),\n\t\t\tActions: glue.TriggerActionArray{\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: pulumi.String(\"prod-job2\"),\n\t\t\t\t},\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: pulumi.String(\"prod-job3\"),\n\t\t\t\t\tArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t\tName: pulumi.String(\"prod-trigger1-scheduled\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst scheduledJobTrigger = new aws_native.glue.Trigger(\"scheduledJobTrigger\", {\n    type: \"SCHEDULED\",\n    description: \"DESCRIPTION_SCHEDULED\",\n    schedule: \"cron(0 */2 * * ? *)\",\n    actions: [\n        {\n            jobName: \"prod-job2\",\n        },\n        {\n            jobName: \"prod-job3\",\n            arguments: {\n                \"--job-bookmark-option\": \"job-bookmark-enable\",\n            },\n        },\n    ],\n    name: \"prod-trigger1-scheduled\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nscheduled_job_trigger = aws_native.glue.Trigger(\"scheduledJobTrigger\",\n    type=\"SCHEDULED\",\n    description=\"DESCRIPTION_SCHEDULED\",\n    schedule=\"cron(0 */2 * * ? *)\",\n    actions=[\n        {\n            \"job_name\": \"prod-job2\",\n        },\n        {\n            \"job_name\": \"prod-job3\",\n            \"arguments\": {\n                \"--job-bookmark-option\": \"job-bookmark-enable\",\n            },\n        },\n    ],\n    name=\"prod-trigger1-scheduled\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:TriggerAction"},"description":"The actions initiated by this trigger."},"description":{"type":"string","description":"A description of this trigger."},"eventBatchingCondition":{"$ref":"#/types/aws-native:glue:TriggerEventBatchingCondition","description":"Batch condition that must be met (specified number of events received or batch time window expired) before EventBridge event trigger fires."},"name":{"type":"string","description":"The name of the trigger.","replaceOnChanges":true},"predicate":{"$ref":"#/types/aws-native:glue:TriggerPredicate","description":"The predicate of this trigger, which defines when it will fire."},"schedule":{"type":"string","description":"A cron expression used to specify the schedule."},"startOnCreation":{"type":"boolean","description":"Set to true to start SCHEDULED and CONDITIONAL triggers when created. True is not supported for ON_DEMAND triggers."},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this trigger.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Trigger` for more information about the expected schema for this property."},"type":{"type":"string","description":"The type of trigger that this is.","replaceOnChanges":true},"workflowName":{"type":"string","description":"The name of the workflow associated with the trigger.","replaceOnChanges":true}},"type":"object","required":["actions","type"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:glue:TriggerAction"},"description":"The actions initiated by this trigger."},"description":{"type":"string","description":"A description of this trigger."},"eventBatchingCondition":{"$ref":"#/types/aws-native:glue:TriggerEventBatchingCondition","description":"Batch condition that must be met (specified number of events received or batch time window expired) before EventBridge event trigger fires."},"name":{"type":"string","description":"The name of the trigger."},"predicate":{"$ref":"#/types/aws-native:glue:TriggerPredicate","description":"The predicate of this trigger, which defines when it will fire."},"schedule":{"type":"string","description":"A cron expression used to specify the schedule."},"startOnCreation":{"type":"boolean","description":"Set to true to start SCHEDULED and CONDITIONAL triggers when created. True is not supported for ON_DEMAND triggers."},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this trigger.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Trigger` for more information about the expected schema for this property."},"type":{"type":"string","description":"The type of trigger that this is."},"workflowName":{"type":"string","description":"The name of the workflow associated with the trigger."}},"requiredInputs":["actions","type"]},"aws-native:glue:UsageProfile":{"description":"This creates a Resource of UsageProfile type.","properties":{"configuration":{"$ref":"#/types/aws-native:glue:UsageProfileProfileConfiguration","description":"UsageProfile configuration for supported service ex: (Jobs, Sessions)."},"createdOn":{"type":"string","description":"Creation time."},"description":{"type":"string","description":"The description of the UsageProfile."},"name":{"type":"string","description":"The name of the UsageProfile.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be applied to this UsageProfiles."}},"type":"object","required":["createdOn","name"],"inputProperties":{"configuration":{"$ref":"#/types/aws-native:glue:UsageProfileProfileConfiguration","description":"UsageProfile configuration for supported service ex: (Jobs, Sessions)."},"description":{"type":"string","description":"The description of the UsageProfile."},"name":{"type":"string","description":"The name of the UsageProfile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be applied to this UsageProfiles."}}},"aws-native:grafana:Workspace":{"description":"Definition of AWS::Grafana::Workspace Resource Type","properties":{"accountAccessType":{"$ref":"#/types/aws-native:grafana:WorkspaceAccountAccessType","description":"Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization. If this is `ORGANIZATION` , the `OrganizationalUnits` parameter specifies which organizational units the workspace can access."},"authenticationProviders":{"type":"array","items":{"$ref":"#/types/aws-native:grafana:WorkspaceAuthenticationProviderTypes"},"description":"List of authentication providers to enable."},"awsId":{"type":"string","description":"The id that uniquely identifies a Grafana workspace."},"clientToken":{"type":"string","description":"A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request.","replaceOnChanges":true},"creationTimestamp":{"type":"string","description":"Timestamp when the workspace was created."},"dataSources":{"type":"array","items":{"$ref":"#/types/aws-native:grafana:WorkspaceDataSourceType"},"description":"List of data sources on the service managed IAM role."},"description":{"type":"string","description":"Description of a workspace."},"endpoint":{"type":"string","description":"Endpoint for the Grafana workspace."},"grafanaVersion":{"type":"string","description":"The version of Grafana to support in your workspace."},"modificationTimestamp":{"type":"string","description":"Timestamp when the workspace was last modified"},"name":{"type":"string","description":"The user friendly name of a workspace."},"networkAccessControl":{"$ref":"#/types/aws-native:grafana:WorkspaceNetworkAccessControl","description":"The configuration settings for network access to your workspace."},"notificationDestinations":{"type":"array","items":{"$ref":"#/types/aws-native:grafana:WorkspaceNotificationDestinationType"},"description":"List of notification destinations on the customers service managed IAM role that the Grafana workspace can query."},"organizationRoleName":{"type":"string","description":"The name of an IAM role that already exists to use with AWS Organizations to access AWS data sources and notification channels in other accounts in an organization."},"organizationalUnits":{"type":"array","items":{"type":"string"},"description":"List of Organizational Units containing AWS accounts the Grafana workspace can pull data from."},"permissionType":{"$ref":"#/types/aws-native:grafana:WorkspacePermissionType","description":"If this is `SERVICE_MANAGED` , and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels.\n\nIf this is `CUSTOMER_MANAGED` , you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other AWS accounts in the organization, this parameter must be set to `CUSTOMER_MANAGED` .\n\nFor more information about converting between customer and service managed, see [Managing permissions for data sources and notification channels](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-datasource-and-notification.html) . For more information about the roles and permissions that must be managed for customer managed workspaces, see [Amazon Managed Grafana permissions and policies for AWS data sources and notification channels](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html)"},"pluginAdminEnabled":{"type":"boolean","description":"Allow workspace admins to install plugins"},"roleArn":{"type":"string","description":"IAM Role that will be used to grant the Grafana workspace access to a customers AWS resources."},"samlConfiguration":{"$ref":"#/types/aws-native:grafana:WorkspaceSamlConfiguration","description":"If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the `Admin` and `Editor` roles in the workspace."},"samlConfigurationStatus":{"$ref":"#/types/aws-native:grafana:WorkspaceSamlConfigurationStatus","description":"Specifies whether the workspace's SAML configuration is complete.\n\nValid values: `CONFIGURED | NOT_CONFIGURED`\n\nType: String"},"ssoClientId":{"type":"string","description":"The client ID of the AWS SSO Managed Application."},"stackSetName":{"type":"string","description":"The name of the AWS CloudFormation stack set to use to generate IAM roles to be used for this workspace."},"status":{"$ref":"#/types/aws-native:grafana:WorkspaceStatus","description":"The current status of the workspace.\n\nValid values: `ACTIVE | CREATING | DELETING | FAILED | UPDATING | UPGRADING | DELETION_FAILED | CREATION_FAILED | UPDATE_FAILED | UPGRADE_FAILED | LICENSE_REMOVAL_FAILED`\n\nType: String"},"vpcConfiguration":{"$ref":"#/types/aws-native:grafana:WorkspaceVpcConfiguration","description":"The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.\n\n\u003e Connecting to a private VPC is not yet available in the Asia Pacific (Seoul) Region (ap-northeast-2)."}},"type":"object","required":["accountAccessType","authenticationProviders","awsId","creationTimestamp","endpoint","modificationTimestamp","permissionType","samlConfigurationStatus","ssoClientId","status"],"inputProperties":{"accountAccessType":{"$ref":"#/types/aws-native:grafana:WorkspaceAccountAccessType","description":"Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization. If this is `ORGANIZATION` , the `OrganizationalUnits` parameter specifies which organizational units the workspace can access."},"authenticationProviders":{"type":"array","items":{"$ref":"#/types/aws-native:grafana:WorkspaceAuthenticationProviderTypes"},"description":"List of authentication providers to enable."},"clientToken":{"type":"string","description":"A unique, case-sensitive, user-provided identifier to ensure the idempotency of the request."},"dataSources":{"type":"array","items":{"$ref":"#/types/aws-native:grafana:WorkspaceDataSourceType"},"description":"List of data sources on the service managed IAM role."},"description":{"type":"string","description":"Description of a workspace."},"grafanaVersion":{"type":"string","description":"The version of Grafana to support in your workspace."},"name":{"type":"string","description":"The user friendly name of a workspace."},"networkAccessControl":{"$ref":"#/types/aws-native:grafana:WorkspaceNetworkAccessControl","description":"The configuration settings for network access to your workspace."},"notificationDestinations":{"type":"array","items":{"$ref":"#/types/aws-native:grafana:WorkspaceNotificationDestinationType"},"description":"List of notification destinations on the customers service managed IAM role that the Grafana workspace can query."},"organizationRoleName":{"type":"string","description":"The name of an IAM role that already exists to use with AWS Organizations to access AWS data sources and notification channels in other accounts in an organization."},"organizationalUnits":{"type":"array","items":{"type":"string"},"description":"List of Organizational Units containing AWS accounts the Grafana workspace can pull data from."},"permissionType":{"$ref":"#/types/aws-native:grafana:WorkspacePermissionType","description":"If this is `SERVICE_MANAGED` , and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels.\n\nIf this is `CUSTOMER_MANAGED` , you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other AWS accounts in the organization, this parameter must be set to `CUSTOMER_MANAGED` .\n\nFor more information about converting between customer and service managed, see [Managing permissions for data sources and notification channels](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-datasource-and-notification.html) . For more information about the roles and permissions that must be managed for customer managed workspaces, see [Amazon Managed Grafana permissions and policies for AWS data sources and notification channels](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html)"},"pluginAdminEnabled":{"type":"boolean","description":"Allow workspace admins to install plugins"},"roleArn":{"type":"string","description":"IAM Role that will be used to grant the Grafana workspace access to a customers AWS resources."},"samlConfiguration":{"$ref":"#/types/aws-native:grafana:WorkspaceSamlConfiguration","description":"If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the `Admin` and `Editor` roles in the workspace."},"stackSetName":{"type":"string","description":"The name of the AWS CloudFormation stack set to use to generate IAM roles to be used for this workspace."},"vpcConfiguration":{"$ref":"#/types/aws-native:grafana:WorkspaceVpcConfiguration","description":"The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.\n\n\u003e Connecting to a private VPC is not yet available in the Asia Pacific (Seoul) Region (ap-northeast-2)."}},"requiredInputs":["accountAccessType","authenticationProviders","permissionType"]},"aws-native:greengrassv2:ComponentVersion":{"description":"Resource for Greengrass component version.","properties":{"arn":{"type":"string","description":"The ARN of the component version."},"componentName":{"type":"string","description":"The name of the component."},"componentVersion":{"type":"string","description":"The version of the component.","language":{"csharp":{"name":"ComponentVersionValue"}}},"inlineRecipe":{"type":"string","description":"The recipe to use to create the component. The recipe defines the component's metadata, parameters, dependencies, lifecycle, artifacts, and platform compatibility.\n\nYou must specify either `InlineRecipe` or `LambdaFunction` .","replaceOnChanges":true},"lambdaFunction":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaFunctionRecipeSource","description":"The parameters to create a component from a Lambda function.\n\nYou must specify either `InlineRecipe` or `LambdaFunction` .","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Application-specific metadata to attach to the component version. You can use tags in IAM policies to control access to AWS IoT Greengrass resources. You can also use tags to categorize your resources. For more information, see [Tag your AWS IoT Greengrass Version 2 resources](https://docs.aws.amazon.com/greengrass/v2/developerguide/tag-resources.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n\nThis `Json` property type is processed as a map of key-value pairs. It uses the following format, which is different from most `Tags` implementations in CloudFormation templates.\n\n```json\n\"Tags\": { \"KeyName0\": \"value\", \"KeyName1\": \"value\", \"KeyName2\": \"value\"\n}\n```"}},"type":"object","required":["arn","componentName","componentVersion"],"inputProperties":{"inlineRecipe":{"type":"string","description":"The recipe to use to create the component. The recipe defines the component's metadata, parameters, dependencies, lifecycle, artifacts, and platform compatibility.\n\nYou must specify either `InlineRecipe` or `LambdaFunction` ."},"lambdaFunction":{"$ref":"#/types/aws-native:greengrassv2:ComponentVersionLambdaFunctionRecipeSource","description":"The parameters to create a component from a Lambda function.\n\nYou must specify either `InlineRecipe` or `LambdaFunction` ."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Application-specific metadata to attach to the component version. You can use tags in IAM policies to control access to AWS IoT Greengrass resources. You can also use tags to categorize your resources. For more information, see [Tag your AWS IoT Greengrass Version 2 resources](https://docs.aws.amazon.com/greengrass/v2/developerguide/tag-resources.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n\nThis `Json` property type is processed as a map of key-value pairs. It uses the following format, which is different from most `Tags` implementations in CloudFormation templates.\n\n```json\n\"Tags\": { \"KeyName0\": \"value\", \"KeyName1\": \"value\", \"KeyName2\": \"value\"\n}\n```"}}},"aws-native:greengrassv2:Deployment":{"description":"Resource for Greengrass V2 deployment.","properties":{"components":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:greengrassv2:DeploymentComponentDeploymentSpecification"},"description":"The components to deploy. This is a dictionary, where each key is the name of a component, and each key's value is the version and configuration to deploy for that component.","replaceOnChanges":true},"deploymentId":{"type":"string","description":"The ID of the deployment."},"deploymentName":{"type":"string","description":"The name of the deployment.","replaceOnChanges":true},"deploymentPolicies":{"$ref":"#/types/aws-native:greengrassv2:DeploymentPolicies","description":"The deployment policies for the deployment. These policies define how the deployment updates components and handles failure.","replaceOnChanges":true},"iotJobConfiguration":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobConfiguration","description":"The job configuration for the deployment configuration. The job configuration specifies the rollout, timeout, and stop configurations for the deployment configuration.","replaceOnChanges":true},"parentTargetArn":{"type":"string","description":"The parent deployment's [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) for a subdeployment.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Application-specific metadata to attach to the deployment. You can use tags in IAM policies to control access to AWS IoT Greengrass resources. You can also use tags to categorize your resources. For more information, see [Tag your AWS IoT Greengrass Version 2 resources](https://docs.aws.amazon.com/greengrass/v2/developerguide/tag-resources.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n\nThis `Json` property type is processed as a map of key-value pairs. It uses the following format, which is different from most `Tags` implementations in CloudFormation templates.\n\n```json\n\"Tags\": { \"KeyName0\": \"value\", \"KeyName1\": \"value\", \"KeyName2\": \"value\"\n}\n```"},"targetArn":{"type":"string","description":"The ARN of the target AWS IoT thing or thing group.","replaceOnChanges":true}},"type":"object","required":["deploymentId","targetArn"],"inputProperties":{"components":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:greengrassv2:DeploymentComponentDeploymentSpecification"},"description":"The components to deploy. This is a dictionary, where each key is the name of a component, and each key's value is the version and configuration to deploy for that component."},"deploymentName":{"type":"string","description":"The name of the deployment."},"deploymentPolicies":{"$ref":"#/types/aws-native:greengrassv2:DeploymentPolicies","description":"The deployment policies for the deployment. These policies define how the deployment updates components and handles failure."},"iotJobConfiguration":{"$ref":"#/types/aws-native:greengrassv2:DeploymentIoTJobConfiguration","description":"The job configuration for the deployment configuration. The job configuration specifies the rollout, timeout, and stop configurations for the deployment configuration."},"parentTargetArn":{"type":"string","description":"The parent deployment's [ARN](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) for a subdeployment."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Application-specific metadata to attach to the deployment. You can use tags in IAM policies to control access to AWS IoT Greengrass resources. You can also use tags to categorize your resources. For more information, see [Tag your AWS IoT Greengrass Version 2 resources](https://docs.aws.amazon.com/greengrass/v2/developerguide/tag-resources.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n\nThis `Json` property type is processed as a map of key-value pairs. It uses the following format, which is different from most `Tags` implementations in CloudFormation templates.\n\n```json\n\"Tags\": { \"KeyName0\": \"value\", \"KeyName1\": \"value\", \"KeyName2\": \"value\"\n}\n```"},"targetArn":{"type":"string","description":"The ARN of the target AWS IoT thing or thing group."}},"requiredInputs":["targetArn"]},"aws-native:groundstation:Config":{"description":"AWS Ground Station config resource type for CloudFormation.","properties":{"arn":{"type":"string","description":"The ARN of the config, such as `arn:aws:groundstation:us-east-2:1234567890:config/tracking/9940bf3b-d2ba-427e-9906-842b5e5d2296` ."},"awsId":{"type":"string","description":"The ID of the config, such as `9940bf3b-d2ba-427e-9906-842b5e5d2296` ."},"configData":{"$ref":"#/types/aws-native:groundstation:ConfigData","description":"Object containing the parameters of a config. Only one subtype may be specified per config. See the subtype definitions for a description of each config subtype."},"name":{"type":"string","description":"The name of the config object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to a resource."},"type":{"type":"string","description":"The type of the config, such as `tracking` ."}},"type":"object","required":["arn","awsId","configData","name","type"],"inputProperties":{"configData":{"$ref":"#/types/aws-native:groundstation:ConfigData","description":"Object containing the parameters of a config. Only one subtype may be specified per config. See the subtype definitions for a description of each config subtype."},"name":{"type":"string","description":"The name of the config object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to a resource."}},"requiredInputs":["configData"]},"aws-native:groundstation:DataflowEndpointGroup":{"description":"AWS Ground Station DataflowEndpointGroup schema for CloudFormation\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDataflowEndpointGroup = new AwsNative.GroundStation.DataflowEndpointGroup(\"myDataflowEndpointGroup\", new()\n    {\n        EndpointDetails = new[]\n        {\n            new AwsNative.GroundStation.Inputs.DataflowEndpointGroupEndpointDetailsArgs\n            {\n                SecurityDetails = new AwsNative.GroundStation.Inputs.DataflowEndpointGroupSecurityDetailsArgs\n                {\n                    SubnetIds = new[]\n                    {\n                        \"subnet-6782e71e\",\n                    },\n                    SecurityGroupIds = new[]\n                    {\n                        \"sg-6979fe18\",\n                    },\n                    RoleArn = \"arn:aws:iam::012345678910:role/groundstation-service-role-AWSServiceRoleForAmazonGroundStation-EXAMPLEBQ4PI\",\n                },\n                Endpoint = new AwsNative.GroundStation.Inputs.DataflowEndpointGroupDataflowEndpointArgs\n                {\n                    Name = \"myEndpoint\",\n                    Address = new AwsNative.GroundStation.Inputs.DataflowEndpointGroupSocketAddressArgs\n                    {\n                        Name = \"172.10.0.2\",\n                        Port = 44720,\n                    },\n                    Mtu = 1500,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/groundstation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := groundstation.NewDataflowEndpointGroup(ctx, \"myDataflowEndpointGroup\", \u0026groundstation.DataflowEndpointGroupArgs{\n\t\t\tEndpointDetails: groundstation.DataflowEndpointGroupEndpointDetailsArray{\n\t\t\t\t\u0026groundstation.DataflowEndpointGroupEndpointDetailsArgs{\n\t\t\t\t\tSecurityDetails: \u0026groundstation.DataflowEndpointGroupSecurityDetailsArgs{\n\t\t\t\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"subnet-6782e71e\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tSecurityGroupIds: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"sg-6979fe18\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::012345678910:role/groundstation-service-role-AWSServiceRoleForAmazonGroundStation-EXAMPLEBQ4PI\"),\n\t\t\t\t\t},\n\t\t\t\t\tEndpoint: \u0026groundstation.DataflowEndpointGroupDataflowEndpointArgs{\n\t\t\t\t\t\tName: pulumi.String(\"myEndpoint\"),\n\t\t\t\t\t\tAddress: \u0026groundstation.DataflowEndpointGroupSocketAddressArgs{\n\t\t\t\t\t\t\tName: pulumi.String(\"172.10.0.2\"),\n\t\t\t\t\t\t\tPort: pulumi.Int(44720),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tMtu: pulumi.Int(1500),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDataflowEndpointGroup = new aws_native.groundstation.DataflowEndpointGroup(\"myDataflowEndpointGroup\", {endpointDetails: [{\n    securityDetails: {\n        subnetIds: [\"subnet-6782e71e\"],\n        securityGroupIds: [\"sg-6979fe18\"],\n        roleArn: \"arn:aws:iam::012345678910:role/groundstation-service-role-AWSServiceRoleForAmazonGroundStation-EXAMPLEBQ4PI\",\n    },\n    endpoint: {\n        name: \"myEndpoint\",\n        address: {\n            name: \"172.10.0.2\",\n            port: 44720,\n        },\n        mtu: 1500,\n    },\n}]});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dataflow_endpoint_group = aws_native.groundstation.DataflowEndpointGroup(\"myDataflowEndpointGroup\", endpoint_details=[{\n    \"security_details\": {\n        \"subnet_ids\": [\"subnet-6782e71e\"],\n        \"security_group_ids\": [\"sg-6979fe18\"],\n        \"role_arn\": \"arn:aws:iam::012345678910:role/groundstation-service-role-AWSServiceRoleForAmazonGroundStation-EXAMPLEBQ4PI\",\n    },\n    \"endpoint\": {\n        \"name\": \"myEndpoint\",\n        \"address\": {\n            \"name\": \"172.10.0.2\",\n            \"port\": 44720,\n        },\n        \"mtu\": 1500,\n    },\n}])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the dataflow endpoint group, such as `arn:aws:groundstation:us-east-2:1234567890:dataflow-endpoint-group/9940bf3b-d2ba-427e-9906-842b5e5d2296` ."},"awsId":{"type":"string","description":"UUID of a dataflow endpoint group."},"contactPostPassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, after a contact ends that the Ground Station Dataflow Endpoint Group will be in a POSTPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the POSTPASS state.","replaceOnChanges":true},"contactPrePassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, before a contact starts that the Ground Station Dataflow Endpoint Group will be in a PREPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the PREPASS state.","replaceOnChanges":true},"endpointDetails":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupEndpointDetails"},"description":"List of Endpoint Details, containing address and port for each endpoint. All dataflow endpoints within a single dataflow endpoint group must be of the same type. You cannot mix AWS Ground Station Agent endpoints with Dataflow endpoints in the same group. If your use case requires both types of endpoints, you must create separate dataflow endpoint groups for each type.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to a resource."}},"type":"object","required":["arn","awsId","endpointDetails"],"inputProperties":{"contactPostPassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, after a contact ends that the Ground Station Dataflow Endpoint Group will be in a POSTPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the POSTPASS state."},"contactPrePassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, before a contact starts that the Ground Station Dataflow Endpoint Group will be in a PREPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the PREPASS state."},"endpointDetails":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupEndpointDetails"},"description":"List of Endpoint Details, containing address and port for each endpoint. All dataflow endpoints within a single dataflow endpoint group must be of the same type. You cannot mix AWS Ground Station Agent endpoints with Dataflow endpoints in the same group. If your use case requires both types of endpoints, you must create separate dataflow endpoint groups for each type."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to a resource."}},"requiredInputs":["endpointDetails"]},"aws-native:groundstation:DataflowEndpointGroupV2":{"description":"Resource Type definition for AWS Ground Station DataflowEndpointGroupV2","properties":{"arn":{"type":"string"},"awsId":{"type":"string"},"contactPostPassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, after a contact ends that the Ground Station Dataflow Endpoint Group will be in a POSTPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the POSTPASS state.","replaceOnChanges":true},"contactPrePassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, before a contact starts that the Ground Station Dataflow Endpoint Group will be in a PREPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the PREPASS state.","replaceOnChanges":true},"endpointDetails":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2EndpointDetails"},"description":"Information about the endpoint details."},"endpoints":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2CreateEndpointDetails"},"description":"List of endpoints for the dataflow endpoint group.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to a resource."}},"type":"object","required":["arn","awsId","endpointDetails"],"inputProperties":{"contactPostPassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, after a contact ends that the Ground Station Dataflow Endpoint Group will be in a POSTPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the POSTPASS state."},"contactPrePassDurationSeconds":{"type":"integer","description":"Amount of time, in seconds, before a contact starts that the Ground Station Dataflow Endpoint Group will be in a PREPASS state. A Ground Station Dataflow Endpoint Group State Change event will be emitted when the Dataflow Endpoint Group enters and exits the PREPASS state."},"endpoints":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2CreateEndpointDetails"},"description":"List of endpoints for the dataflow endpoint group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to a resource."}}},"aws-native:groundstation:MissionProfile":{"description":"AWS Ground Station Mission Profile resource type for CloudFormation.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myMissionProfile = new AwsNative.GroundStation.MissionProfile(\"myMissionProfile\", new()\n    {\n        Name = \"My Mission Profile\",\n        ContactPrePassDurationSeconds = 120,\n        ContactPostPassDurationSeconds = 180,\n        MinimumViableContactDurationSeconds = 300,\n        TrackingConfigArn = \"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\",\n        DataflowEdges = new[]\n        {\n            new AwsNative.GroundStation.Inputs.MissionProfileDataflowEdgeArgs\n            {\n                Source = \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\",\n                Destination = \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\",\n            },\n            new AwsNative.GroundStation.Inputs.MissionProfileDataflowEdgeArgs\n            {\n                Source = \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\",\n                Destination = \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/groundstation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := groundstation.NewMissionProfile(ctx, \"myMissionProfile\", \u0026groundstation.MissionProfileArgs{\n\t\t\tName:                                pulumi.String(\"My Mission Profile\"),\n\t\t\tContactPrePassDurationSeconds:       pulumi.Int(120),\n\t\t\tContactPostPassDurationSeconds:      pulumi.Int(180),\n\t\t\tMinimumViableContactDurationSeconds: pulumi.Int(300),\n\t\t\tTrackingConfigArn:                   pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\"),\n\t\t\tDataflowEdges: groundstation.MissionProfileDataflowEdgeArray{\n\t\t\t\t\u0026groundstation.MissionProfileDataflowEdgeArgs{\n\t\t\t\t\tSource:      pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\"),\n\t\t\t\t\tDestination: pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\"),\n\t\t\t\t},\n\t\t\t\t\u0026groundstation.MissionProfileDataflowEdgeArgs{\n\t\t\t\t\tSource:      pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\"),\n\t\t\t\t\tDestination: pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myMissionProfile = new aws_native.groundstation.MissionProfile(\"myMissionProfile\", {\n    name: \"My Mission Profile\",\n    contactPrePassDurationSeconds: 120,\n    contactPostPassDurationSeconds: 180,\n    minimumViableContactDurationSeconds: 300,\n    trackingConfigArn: \"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\",\n    dataflowEdges: [\n        {\n            source: \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\",\n            destination: \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\",\n        },\n        {\n            source: \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\",\n            destination: \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_mission_profile = aws_native.groundstation.MissionProfile(\"myMissionProfile\",\n    name=\"My Mission Profile\",\n    contact_pre_pass_duration_seconds=120,\n    contact_post_pass_duration_seconds=180,\n    minimum_viable_contact_duration_seconds=300,\n    tracking_config_arn=\"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\",\n    dataflow_edges=[\n        {\n            \"source\": \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\",\n            \"destination\": \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\",\n        },\n        {\n            \"source\": \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\",\n            \"destination\": \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myMissionProfile = new AwsNative.GroundStation.MissionProfile(\"myMissionProfile\", new()\n    {\n        Name = \"Mission Profile\",\n        ContactPrePassDurationSeconds = 120,\n        ContactPostPassDurationSeconds = 180,\n        MinimumViableContactDurationSeconds = 300,\n        TrackingConfigArn = \"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\",\n        DataflowEdges = new[]\n        {\n            new AwsNative.GroundStation.Inputs.MissionProfileDataflowEdgeArgs\n            {\n                Source = \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\",\n                Destination = \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\",\n            },\n            new AwsNative.GroundStation.Inputs.MissionProfileDataflowEdgeArgs\n            {\n                Source = \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\",\n                Destination = \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/groundstation\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := groundstation.NewMissionProfile(ctx, \"myMissionProfile\", \u0026groundstation.MissionProfileArgs{\n\t\t\tName:                                pulumi.String(\"Mission Profile\"),\n\t\t\tContactPrePassDurationSeconds:       pulumi.Int(120),\n\t\t\tContactPostPassDurationSeconds:      pulumi.Int(180),\n\t\t\tMinimumViableContactDurationSeconds: pulumi.Int(300),\n\t\t\tTrackingConfigArn:                   pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\"),\n\t\t\tDataflowEdges: groundstation.MissionProfileDataflowEdgeArray{\n\t\t\t\t\u0026groundstation.MissionProfileDataflowEdgeArgs{\n\t\t\t\t\tSource:      pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\"),\n\t\t\t\t\tDestination: pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\"),\n\t\t\t\t},\n\t\t\t\t\u0026groundstation.MissionProfileDataflowEdgeArgs{\n\t\t\t\t\tSource:      pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\"),\n\t\t\t\t\tDestination: pulumi.String(\"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myMissionProfile = new aws_native.groundstation.MissionProfile(\"myMissionProfile\", {\n    name: \"Mission Profile\",\n    contactPrePassDurationSeconds: 120,\n    contactPostPassDurationSeconds: 180,\n    minimumViableContactDurationSeconds: 300,\n    trackingConfigArn: \"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\",\n    dataflowEdges: [\n        {\n            source: \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\",\n            destination: \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\",\n        },\n        {\n            source: \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\",\n            destination: \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_mission_profile = aws_native.groundstation.MissionProfile(\"myMissionProfile\",\n    name=\"Mission Profile\",\n    contact_pre_pass_duration_seconds=120,\n    contact_post_pass_duration_seconds=180,\n    minimum_viable_contact_duration_seconds=300,\n    tracking_config_arn=\"arn:aws:groundstation:us-east-2:1234567890:config/tracking/00000000-0000-0000-0000-000000000000\",\n    dataflow_edges=[\n        {\n            \"source\": \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-downlink/11111111-1111-1111-1111-111111111111\",\n            \"destination\": \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/22222222-2222-2222-2222-222222222222\",\n        },\n        {\n            \"source\": \"arn:aws:groundstation:us-east-2:1234567890:config/dataflow-endpoint/33333333-3333-3333-3333-333333333333\",\n            \"destination\": \"arn:aws:groundstation:us-east-2:1234567890:config/antenna-uplink/44444444-4444-4444-4444-444444444444\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the mission profile, such as `arn:aws:groundstation:us-east-2:1234567890:mission-profile/9940bf3b-d2ba-427e-9906-842b5e5d2296` ."},"awsId":{"type":"string","description":"The ID of the mission profile, such as `9940bf3b-d2ba-427e-9906-842b5e5d2296` ."},"contactPostPassDurationSeconds":{"type":"integer","description":"Post-pass time needed after the contact."},"contactPrePassDurationSeconds":{"type":"integer","description":"Pre-pass time needed before the contact."},"dataflowEdges":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:MissionProfileDataflowEdge"},"description":"A list containing lists of config ARNs. Each list of config ARNs is an edge, with a \"from\" config and a \"to\" config."},"minimumViableContactDurationSeconds":{"type":"integer","description":"Visibilities with shorter duration than the specified minimum viable contact duration will be ignored when searching for available contacts."},"name":{"type":"string","description":"A name used to identify a mission profile."},"region":{"type":"string","description":"The region of the mission profile."},"streamsKmsKey":{"$ref":"#/types/aws-native:groundstation:MissionProfileStreamsKmsKey","description":"The ARN of a KMS Key used for encrypting data during transmission from the source to destination locations."},"streamsKmsRole":{"type":"string","description":"The ARN of the KMS Key or Alias Key role used to define permissions on KMS Key usage."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to the mission profile."},"telemetrySinkConfigArn":{"type":"string","description":"ARN of a Config resource of type TelemetrySinkConfig used for telemetry data sink configuration."},"trackingConfigArn":{"type":"string","description":"The ARN of a tracking config objects that defines how to track the satellite through the sky during a contact."}},"type":"object","required":["arn","awsId","dataflowEdges","minimumViableContactDurationSeconds","name","region","trackingConfigArn"],"inputProperties":{"contactPostPassDurationSeconds":{"type":"integer","description":"Post-pass time needed after the contact."},"contactPrePassDurationSeconds":{"type":"integer","description":"Pre-pass time needed before the contact."},"dataflowEdges":{"type":"array","items":{"$ref":"#/types/aws-native:groundstation:MissionProfileDataflowEdge"},"description":"A list containing lists of config ARNs. Each list of config ARNs is an edge, with a \"from\" config and a \"to\" config."},"minimumViableContactDurationSeconds":{"type":"integer","description":"Visibilities with shorter duration than the specified minimum viable contact duration will be ignored when searching for available contacts."},"name":{"type":"string","description":"A name used to identify a mission profile."},"streamsKmsKey":{"$ref":"#/types/aws-native:groundstation:MissionProfileStreamsKmsKey","description":"The ARN of a KMS Key used for encrypting data during transmission from the source to destination locations."},"streamsKmsRole":{"type":"string","description":"The ARN of the KMS Key or Alias Key role used to define permissions on KMS Key usage."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags assigned to the mission profile."},"telemetrySinkConfigArn":{"type":"string","description":"ARN of a Config resource of type TelemetrySinkConfig used for telemetry data sink configuration."},"trackingConfigArn":{"type":"string","description":"The ARN of a tracking config objects that defines how to track the satellite through the sky during a contact."}},"requiredInputs":["dataflowEdges","minimumViableContactDurationSeconds","trackingConfigArn"]},"aws-native:guardduty:Detector":{"description":"Resource Type definition for AWS::GuardDuty::Detector","properties":{"awsId":{"type":"string","description":"The unique ID of the detector."},"dataSources":{"$ref":"#/types/aws-native:guardduty:DetectorCfnDataSourceConfigurations","description":"Describes which data sources will be enabled for the detector."},"enable":{"type":"boolean","description":"Specifies whether the detector is to be enabled on creation."},"features":{"type":"array","items":{"$ref":"#/types/aws-native:guardduty:DetectorCfnFeatureConfiguration"},"description":"A list of features that will be configured for the detector."},"findingPublishingFrequency":{"type":"string","description":"Specifies how frequently updated findings are exported."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies tags added to a new detector resource. Each tag consists of a key and an optional value, both of which you define.\n\nCurrently, support is available only for creating and deleting a tag. No support exists for updating the tags.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["awsId","enable"],"inputProperties":{"dataSources":{"$ref":"#/types/aws-native:guardduty:DetectorCfnDataSourceConfigurations","description":"Describes which data sources will be enabled for the detector."},"enable":{"type":"boolean","description":"Specifies whether the detector is to be enabled on creation."},"features":{"type":"array","items":{"$ref":"#/types/aws-native:guardduty:DetectorCfnFeatureConfiguration"},"description":"A list of features that will be configured for the detector."},"findingPublishingFrequency":{"type":"string","description":"Specifies how frequently updated findings are exported."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies tags added to a new detector resource. Each tag consists of a key and an optional value, both of which you define.\n\nCurrently, support is available only for creating and deleting a tag. No support exists for updating the tags.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["enable"]},"aws-native:guardduty:Filter":{"description":"Resource Type definition for AWS::GuardDuty::Filter","properties":{"action":{"type":"string","description":"Specifies the action that is to be applied to the findings that match the filter."},"description":{"type":"string","description":"The description of the filter. Valid characters include alphanumeric characters, and special characters such as hyphen, period, colon, underscore, parentheses ( `{ }` , `[ ]` , and `( )` ), forward slash, horizontal tab, vertical tab, newline, form feed, return, and whitespace."},"detectorId":{"type":"string","description":"The detector ID associated with the GuardDuty account for which you want to create a filter.\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.","replaceOnChanges":true},"findingCriteria":{"$ref":"#/types/aws-native:guardduty:FilterFindingCriteria","description":"Represents the criteria to be used in the filter for querying findings."},"name":{"type":"string","description":"The name of the filter. Valid characters include period (.), underscore (_), dash (-), and alphanumeric characters. A whitespace is considered to be an invalid character.","replaceOnChanges":true},"rank":{"type":"integer","description":"Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings. The minimum value for this property is 1 and the maximum is 100.\n\nBy default, filters may not be created in the same order as they are ranked. To ensure that the filters are created in the expected order, you can use an optional attribute, [DependsOn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , with the following syntax: `\"DependsOn\":[ \"ObjectName\" ]` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new filter resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["detectorId","findingCriteria","name"],"inputProperties":{"action":{"type":"string","description":"Specifies the action that is to be applied to the findings that match the filter."},"description":{"type":"string","description":"The description of the filter. Valid characters include alphanumeric characters, and special characters such as hyphen, period, colon, underscore, parentheses ( `{ }` , `[ ]` , and `( )` ), forward slash, horizontal tab, vertical tab, newline, form feed, return, and whitespace."},"detectorId":{"type":"string","description":"The detector ID associated with the GuardDuty account for which you want to create a filter.\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"findingCriteria":{"$ref":"#/types/aws-native:guardduty:FilterFindingCriteria","description":"Represents the criteria to be used in the filter for querying findings."},"name":{"type":"string","description":"The name of the filter. Valid characters include period (.), underscore (_), dash (-), and alphanumeric characters. A whitespace is considered to be an invalid character."},"rank":{"type":"integer","description":"Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings. The minimum value for this property is 1 and the maximum is 100.\n\nBy default, filters may not be created in the same order as they are ranked. To ensure that the filters are created in the expected order, you can use an optional attribute, [DependsOn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , with the following syntax: `\"DependsOn\":[ \"ObjectName\" ]` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new filter resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["detectorId","findingCriteria"]},"aws-native:guardduty:IpSet":{"description":"Resource Type definition for AWS::GuardDuty::IPSet","properties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active."},"awsId":{"type":"string"},"detectorId":{"type":"string","description":"The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.","replaceOnChanges":true},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhen you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation."},"format":{"type":"string","description":"The format of the file that contains the IPSet. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .","replaceOnChanges":true},"location":{"type":"string","description":"The URI of the file that contains the IPSet."},"name":{"type":"string","description":"The user-friendly name to identify the IPSet.\n\nThe name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["awsId","format","location"],"inputProperties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active."},"detectorId":{"type":"string","description":"The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhen you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation."},"format":{"type":"string","description":"The format of the file that contains the IPSet. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* ."},"location":{"type":"string","description":"The URI of the file that contains the IPSet."},"name":{"type":"string","description":"The user-friendly name to identify the IPSet.\n\nThe name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["format","location"]},"aws-native:guardduty:MalwareProtectionPlan":{"description":"Resource Type definition for AWS::GuardDuty::MalwareProtectionPlan","properties":{"actions":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnActions","description":"Specifies the action that is to be applied to the Malware Protection plan resource."},"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the protected resource."},"createdAt":{"type":"string","description":"The timestamp when the Malware Protection plan resource was created."},"malwareProtectionPlanId":{"type":"string","description":"A unique identifier associated with Malware Protection plan resource."},"protectedResource":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnProtectedResource","description":"Information about the protected resource. Presently, S3Bucket is the only supported protected resource."},"role":{"type":"string","description":"IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource."},"status":{"type":"string","description":"Status of the Malware Protection plan resource."},"statusReasons":{"type":"array","items":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnStatusReasons"},"description":"Status details associated with the Malware Protection plan resource status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify."}},"type":"object","required":["arn","createdAt","malwareProtectionPlanId","protectedResource","role","status","statusReasons"],"inputProperties":{"actions":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnActions","description":"Specifies the action that is to be applied to the Malware Protection plan resource."},"protectedResource":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnProtectedResource","description":"Information about the protected resource. Presently, S3Bucket is the only supported protected resource."},"role":{"type":"string","description":"IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify."}},"requiredInputs":["protectedResource","role"]},"aws-native:guardduty:Master":{"description":"GuardDuty Master resource schema","properties":{"detectorId":{"type":"string","description":"Unique ID of the detector of the GuardDuty member account.","replaceOnChanges":true},"invitationId":{"type":"string","description":"Value used to validate the master account to the member account.","replaceOnChanges":true},"masterId":{"type":"string","description":"ID of the account used as the master account.","replaceOnChanges":true}},"type":"object","required":["detectorId","masterId"],"inputProperties":{"detectorId":{"type":"string","description":"Unique ID of the detector of the GuardDuty member account."},"invitationId":{"type":"string","description":"Value used to validate the master account to the member account."},"masterId":{"type":"string","description":"ID of the account used as the master account."}},"requiredInputs":["detectorId","masterId"]},"aws-native:guardduty:Member":{"description":"Resource Type definition for AWS::GuardDuty::Member","properties":{"detectorId":{"type":"string","description":"The ID of the detector associated with the GuardDuty service to add the member to.","replaceOnChanges":true},"disableEmailNotification":{"type":"boolean","description":"Specifies whether or not to disable email notification for the member account that you invite."},"email":{"type":"string","description":"The email address associated with the member account."},"memberId":{"type":"string","description":"The AWS account ID of the account to designate as a member.","replaceOnChanges":true},"message":{"type":"string","description":"The invitation message that you want to send to the accounts that you're inviting to GuardDuty as members."},"status":{"type":"string","description":"You can use the `Status` property to update the status of the relationship between the member account and its administrator account. Valid values are `Created` and `Invited` when using an `AWS::GuardDuty::Member` resource. If the value for this property is not provided or set to `Created` , a member account is created but not invited. If the value of this property is set to `Invited` , a member account is created and invited."}},"type":"object","required":["email"],"inputProperties":{"detectorId":{"type":"string","description":"The ID of the detector associated with the GuardDuty service to add the member to."},"disableEmailNotification":{"type":"boolean","description":"Specifies whether or not to disable email notification for the member account that you invite."},"email":{"type":"string","description":"The email address associated with the member account."},"memberId":{"type":"string","description":"The AWS account ID of the account to designate as a member."},"message":{"type":"string","description":"The invitation message that you want to send to the accounts that you're inviting to GuardDuty as members."},"status":{"type":"string","description":"You can use the `Status` property to update the status of the relationship between the member account and its administrator account. Valid values are `Created` and `Invited` when using an `AWS::GuardDuty::Member` resource. If the value for this property is not provided or set to `Created` , a member account is created but not invited. If the value of this property is set to `Invited` , a member account is created and invited."}},"requiredInputs":["email"]},"aws-native:guardduty:PublishingDestination":{"description":"Resource Type definition for AWS::GuardDuty::PublishingDestination.","properties":{"awsId":{"type":"string","description":"The ID of the publishing destination."},"destinationProperties":{"$ref":"#/types/aws-native:guardduty:PublishingDestinationCfnDestinationProperties","description":"Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings."},"destinationType":{"type":"string","description":"The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported."},"detectorId":{"type":"string","description":"The ID of the GuardDuty detector associated with the publishing destination.","replaceOnChanges":true},"publishingFailureStartTimestamp":{"type":"string","description":"The time, in epoch millisecond format, at which GuardDuty was first unable to publish findings to the destination."},"status":{"type":"string","description":"The status of the publishing destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Describes a tag."}},"type":"object","required":["awsId","destinationProperties","destinationType","detectorId","publishingFailureStartTimestamp","status"],"inputProperties":{"destinationProperties":{"$ref":"#/types/aws-native:guardduty:PublishingDestinationCfnDestinationProperties","description":"Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings."},"destinationType":{"type":"string","description":"The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported."},"detectorId":{"type":"string","description":"The ID of the GuardDuty detector associated with the publishing destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Describes a tag."}},"requiredInputs":["destinationProperties","destinationType","detectorId"]},"aws-native:guardduty:ThreatEntitySet":{"description":"Resource Type definition for AWS::GuardDuty::ThreatEntitySet","properties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active."},"awsId":{"type":"string","description":"Returns the unique ID associated with the newly created threat entity set."},"createdAt":{"type":"string","description":"The timestamp when the threat entity set was created."},"detectorId":{"type":"string","description":"The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.\n\nTo find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.","replaceOnChanges":true},"errorDetails":{"type":"string","description":"The details associated with the *Error* status of your threat entity list."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list."},"format":{"type":"string","description":"The format of the file that contains the threat entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .","replaceOnChanges":true},"location":{"type":"string","description":"The URI of the file that contains the threat entity set."},"name":{"type":"string","description":"The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_)."},"status":{"$ref":"#/types/aws-native:guardduty:ThreatEntitySetStatus","description":"The status of your `ThreatEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"updatedAt":{"type":"string","description":"The timestamp when the threat entity set was updated."}},"type":"object","required":["awsId","createdAt","errorDetails","format","location","status","updatedAt"],"inputProperties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active."},"detectorId":{"type":"string","description":"The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.\n\nTo find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list."},"format":{"type":"string","description":"The format of the file that contains the threat entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* ."},"location":{"type":"string","description":"The URI of the file that contains the threat entity set."},"name":{"type":"string","description":"The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["format","location"]},"aws-native:guardduty:ThreatIntelSet":{"description":"Resource Type definition for AWS::GuardDuty::ThreatIntelSet","properties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active."},"awsId":{"type":"string","description":"The unique ID of the `threatIntelSet` ."},"detectorId":{"type":"string","description":"The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.","replaceOnChanges":true},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhen you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation."},"format":{"type":"string","description":"The format of the file that contains the `ThreatIntelSet` . For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .","replaceOnChanges":true},"location":{"type":"string","description":"The URI of the file that contains the ThreatIntelSet."},"name":{"type":"string","description":"The user-friendly name to identify the ThreatIntelSet.\n\nThe name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["awsId","format","location"],"inputProperties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active."},"detectorId":{"type":"string","description":"The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhen you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation."},"format":{"type":"string","description":"The format of the file that contains the `ThreatIntelSet` . For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* ."},"location":{"type":"string","description":"The URI of the file that contains the ThreatIntelSet."},"name":{"type":"string","description":"The user-friendly name to identify the ThreatIntelSet.\n\nThe name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["format","location"]},"aws-native:guardduty:TrustedEntitySet":{"description":"Resource Type definition for AWS::GuardDuty::TrustedEntitySet","properties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active."},"awsId":{"type":"string"},"createdAt":{"type":"string","description":"The timestamp when the trusted entity set was created."},"detectorId":{"type":"string","description":"The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.\n\nTo find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API.","replaceOnChanges":true},"errorDetails":{"type":"string","description":"Specifies the error details when the status of the trusted entity set shows as *Error* ."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` value owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list."},"format":{"type":"string","description":"The format of the file that contains the trusted entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* .","replaceOnChanges":true},"location":{"type":"string","description":"The URI of the file that contains the trusted entity set."},"name":{"type":"string","description":"A user-friendly name to identify the trusted entity set. Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_)."},"status":{"$ref":"#/types/aws-native:guardduty:TrustedEntitySetStatus","description":"The status of your `TrustedEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new trusted entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"updatedAt":{"type":"string","description":"The timestamp when the trusted entity set was updated."}},"type":"object","required":["awsId","createdAt","errorDetails","format","location","status","updatedAt"],"inputProperties":{"activate":{"type":"boolean","description":"A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active."},"detectorId":{"type":"string","description":"The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.\n\nTo find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"expectedBucketOwner":{"type":"string","description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` value owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list."},"format":{"type":"string","description":"The format of the file that contains the trusted entity set. For information about supported formats, see [List formats](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#prepare_list) in the *Amazon GuardDuty User Guide* ."},"location":{"type":"string","description":"The URI of the file that contains the trusted entity set."},"name":{"type":"string","description":"A user-friendly name to identify the trusted entity set. Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be added to a new trusted entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["format","location"]},"aws-native:healthimaging:Datastore":{"description":"Definition of AWS::HealthImaging::Datastore Resource Type","properties":{"createdAt":{"type":"string","description":"The timestamp when the data store was created."},"datastoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the data store."},"datastoreId":{"type":"string","description":"The data store identifier."},"datastoreName":{"type":"string","description":"The data store name.","replaceOnChanges":true},"datastoreStatus":{"$ref":"#/types/aws-native:healthimaging:DatastoreStatus","description":"The data store status."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the Key Management Service (KMS) key for accessing encrypted data.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags provided when creating a data store.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The timestamp when the data store was last updated."}},"type":"object","required":["createdAt","datastoreArn","datastoreId","datastoreStatus","updatedAt"],"inputProperties":{"datastoreName":{"type":"string","description":"The data store name."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the Key Management Service (KMS) key for accessing encrypted data."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags provided when creating a data store."}}},"aws-native:healthlake:FhirDatastore":{"description":"HealthLake FHIR Datastore","properties":{"createdAt":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreCreatedAt"},"datastoreArn":{"type":"string","description":"The Data Store ARN is generated during the creation of the Data Store and can be found in the output from the initial Data Store creation request."},"datastoreEndpoint":{"type":"string","description":"The endpoint for the created Data Store."},"datastoreId":{"type":"string","description":"The Amazon generated Data Store id. This id is in the output from the initial Data Store creation call."},"datastoreName":{"type":"string","description":"The data store name (user-generated).","replaceOnChanges":true},"datastoreStatus":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreDatastoreStatus","description":"The status of the FHIR Data Store. Possible statuses are ‘CREATING’, ‘ACTIVE’, ‘DELETING’, ‘DELETED’."},"datastoreTypeVersion":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreDatastoreTypeVersion","description":"The FHIR release version supported by the data store. Current support is for version `R4` .","replaceOnChanges":true},"identityProviderConfiguration":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreIdentityProviderConfiguration","description":"The identity provider configuration selected when the data store was created.","replaceOnChanges":true},"preloadDataConfig":{"$ref":"#/types/aws-native:healthlake:FhirDatastorePreloadDataConfig","description":"The preloaded Synthea data configuration for the data store.","replaceOnChanges":true},"sseConfiguration":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreSseConfiguration","description":"The server-side encryption key configuration for a customer-provided encryption key specified for creating a data store.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["createdAt","datastoreArn","datastoreEndpoint","datastoreId","datastoreStatus","datastoreTypeVersion"],"inputProperties":{"datastoreName":{"type":"string","description":"The data store name (user-generated)."},"datastoreTypeVersion":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreDatastoreTypeVersion","description":"The FHIR release version supported by the data store. Current support is for version `R4` ."},"identityProviderConfiguration":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreIdentityProviderConfiguration","description":"The identity provider configuration selected when the data store was created."},"preloadDataConfig":{"$ref":"#/types/aws-native:healthlake:FhirDatastorePreloadDataConfig","description":"The preloaded Synthea data configuration for the data store."},"sseConfiguration":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreSseConfiguration","description":"The server-side encryption key configuration for a customer-provided encryption key specified for creating a data store."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["datastoreTypeVersion"]},"aws-native:iam:Group":{"description":"Creates a new group.\n  For information about the number of groups you can create, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the specified `AWS::IAM::Group` resource. For example: `arn:aws:iam::123456789012:group/mystack-mygroup-1DZETITOWEKVO` ."},"groupName":{"type":"string","description":"The name of the group to create. Do not include the path in this value.\n The group name must be unique within the account. Group names are not distinguished by case. For example, you cannot create groups named both \"ADMINS\" and \"admins\". If you don't specify a name, CFN generates a unique physical ID and uses that ID for the group name.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.\n  If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``.","replaceOnChanges":true},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) of the IAM policy you want to attach.\n For more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"path":{"type":"string","description":"The path to the group. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters."},"policies":{"type":"array","items":{"$ref":"#/types/aws-native:iam:GroupPolicy"},"description":"Adds or updates an inline policy document that is embedded in the specified IAM group. To view AWS::IAM::Group snippets, see [Declaring an Group Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-group).\n  The name of each inline policy for a role, user, or group must be unique. If you don't choose unique names, updates to the IAM identity will fail. \n  For information about limits on the number of inline policies that you can embed in a group, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*."}},"type":"object","required":["arn"],"inputProperties":{"groupName":{"type":"string","description":"The name of the group to create. Do not include the path in this value.\n The group name must be unique within the account. Group names are not distinguished by case. For example, you cannot create groups named both \"ADMINS\" and \"admins\". If you don't specify a name, CFN generates a unique physical ID and uses that ID for the group name.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.\n  If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Name (ARN) of the IAM policy you want to attach.\n For more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"path":{"type":"string","description":"The path to the group. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters."},"policies":{"type":"array","items":{"$ref":"#/types/aws-native:iam:GroupPolicy"},"description":"Adds or updates an inline policy document that is embedded in the specified IAM group. To view AWS::IAM::Group snippets, see [Declaring an Group Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-group).\n  The name of each inline policy for a role, user, or group must be unique. If you don't choose unique names, updates to the IAM identity will fail. \n  For information about limits on the number of inline policies that you can embed in a group, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*."}}},"aws-native:iam:GroupPolicy":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM group.\n A group can also have managed policies attached to it. To attach a managed policy to a group, use [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.\n For information about the maximum number of inline policies that you can embed in a group, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","properties":{"groupName":{"type":"string","description":"The name of the group to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-.","replaceOnChanges":true},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::GroupPolicy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true}},"type":"object","required":["groupName","policyName"],"inputProperties":{"groupName":{"type":"string","description":"The name of the group to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::GroupPolicy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"requiredInputs":["groupName"]},"aws-native:iam:InstanceProfile":{"description":"Creates a new instance profile. For information about instance profiles, see [Using instance profiles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html).\n  For information about the number of instance profiles you can create, see [object quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *User Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myIamInstanceProfile = new AwsNative.Iam.InstanceProfile(\"myIamInstanceProfile\", new()\n    {\n        InstanceProfileName = \"MyIamInstanceProfile\",\n        Path = \"/\",\n        Roles = new[]\n        {\n            \"MyAdminRole\",\n        },\n    });\n\n    var myLaunchTemplate = new AwsNative.Ec2.LaunchTemplate(\"myLaunchTemplate\", new()\n    {\n        LaunchTemplateName = \"MyLaunchTemplate\",\n        LaunchTemplateData = new AwsNative.Ec2.Inputs.LaunchTemplateDataArgs\n        {\n            IamInstanceProfile = new AwsNative.Ec2.Inputs.LaunchTemplateIamInstanceProfileArgs\n            {\n                Arn = myIamInstanceProfile.Arn,\n            },\n            DisableApiTermination = true,\n            ImageId = \"ami-04d5cc9b88example\",\n            InstanceType = \"t2.micro\",\n            KeyName = \"MyKeyPair\",\n            SecurityGroupIds = new[]\n            {\n                \"sg-083cd3bfb8example\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyIamInstanceProfile, err := iam.NewInstanceProfile(ctx, \"myIamInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tInstanceProfileName: pulumi.String(\"MyIamInstanceProfile\"),\n\t\t\tPath:                pulumi.String(\"/\"),\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"MyAdminRole\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewLaunchTemplate(ctx, \"myLaunchTemplate\", \u0026ec2.LaunchTemplateArgs{\n\t\t\tLaunchTemplateName: pulumi.String(\"MyLaunchTemplate\"),\n\t\t\tLaunchTemplateData: \u0026ec2.LaunchTemplateDataArgs{\n\t\t\t\tIamInstanceProfile: \u0026ec2.LaunchTemplateIamInstanceProfileArgs{\n\t\t\t\t\tArn: myIamInstanceProfile.Arn,\n\t\t\t\t},\n\t\t\t\tDisableApiTermination: pulumi.Bool(true),\n\t\t\t\tImageId:               pulumi.String(\"ami-04d5cc9b88example\"),\n\t\t\t\tInstanceType:          pulumi.String(\"t2.micro\"),\n\t\t\t\tKeyName:               pulumi.String(\"MyKeyPair\"),\n\t\t\t\tSecurityGroupIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"sg-083cd3bfb8example\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myIamInstanceProfile = new aws_native.iam.InstanceProfile(\"myIamInstanceProfile\", {\n    instanceProfileName: \"MyIamInstanceProfile\",\n    path: \"/\",\n    roles: [\"MyAdminRole\"],\n});\nconst myLaunchTemplate = new aws_native.ec2.LaunchTemplate(\"myLaunchTemplate\", {\n    launchTemplateName: \"MyLaunchTemplate\",\n    launchTemplateData: {\n        iamInstanceProfile: {\n            arn: myIamInstanceProfile.arn,\n        },\n        disableApiTermination: true,\n        imageId: \"ami-04d5cc9b88example\",\n        instanceType: \"t2.micro\",\n        keyName: \"MyKeyPair\",\n        securityGroupIds: [\"sg-083cd3bfb8example\"],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_iam_instance_profile = aws_native.iam.InstanceProfile(\"myIamInstanceProfile\",\n    instance_profile_name=\"MyIamInstanceProfile\",\n    path=\"/\",\n    roles=[\"MyAdminRole\"])\nmy_launch_template = aws_native.ec2.LaunchTemplate(\"myLaunchTemplate\",\n    launch_template_name=\"MyLaunchTemplate\",\n    launch_template_data={\n        \"iam_instance_profile\": {\n            \"arn\": my_iam_instance_profile.arn,\n        },\n        \"disable_api_termination\": True,\n        \"image_id\": \"ami-04d5cc9b88example\",\n        \"instance_type\": \"t2.micro\",\n        \"key_name\": \"MyKeyPair\",\n        \"security_group_ids\": [\"sg-083cd3bfb8example\"],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myIamInstanceProfile = new AwsNative.Iam.InstanceProfile(\"myIamInstanceProfile\", new()\n    {\n        InstanceProfileName = \"MyIamInstanceProfile\",\n        Path = \"/\",\n        Roles = new[]\n        {\n            \"MyAdminRole\",\n        },\n    });\n\n    var myLaunchTemplate = new AwsNative.Ec2.LaunchTemplate(\"myLaunchTemplate\", new()\n    {\n        LaunchTemplateName = \"MyLaunchTemplate\",\n        LaunchTemplateData = new AwsNative.Ec2.Inputs.LaunchTemplateDataArgs\n        {\n            IamInstanceProfile = new AwsNative.Ec2.Inputs.LaunchTemplateIamInstanceProfileArgs\n            {\n                Arn = myIamInstanceProfile.Arn,\n            },\n            DisableApiTermination = true,\n            ImageId = \"ami-04d5cc9b88example\",\n            InstanceType = \"t2.micro\",\n            KeyName = \"MyKeyPair\",\n            SecurityGroupIds = new[]\n            {\n                \"sg-083cd3bfb8example\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyIamInstanceProfile, err := iam.NewInstanceProfile(ctx, \"myIamInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tInstanceProfileName: pulumi.String(\"MyIamInstanceProfile\"),\n\t\t\tPath:                pulumi.String(\"/\"),\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"MyAdminRole\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewLaunchTemplate(ctx, \"myLaunchTemplate\", \u0026ec2.LaunchTemplateArgs{\n\t\t\tLaunchTemplateName: pulumi.String(\"MyLaunchTemplate\"),\n\t\t\tLaunchTemplateData: \u0026ec2.LaunchTemplateDataArgs{\n\t\t\t\tIamInstanceProfile: \u0026ec2.LaunchTemplateIamInstanceProfileArgs{\n\t\t\t\t\tArn: myIamInstanceProfile.Arn,\n\t\t\t\t},\n\t\t\t\tDisableApiTermination: pulumi.Bool(true),\n\t\t\t\tImageId:               pulumi.String(\"ami-04d5cc9b88example\"),\n\t\t\t\tInstanceType:          pulumi.String(\"t2.micro\"),\n\t\t\t\tKeyName:               pulumi.String(\"MyKeyPair\"),\n\t\t\t\tSecurityGroupIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"sg-083cd3bfb8example\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myIamInstanceProfile = new aws_native.iam.InstanceProfile(\"myIamInstanceProfile\", {\n    instanceProfileName: \"MyIamInstanceProfile\",\n    path: \"/\",\n    roles: [\"MyAdminRole\"],\n});\nconst myLaunchTemplate = new aws_native.ec2.LaunchTemplate(\"myLaunchTemplate\", {\n    launchTemplateName: \"MyLaunchTemplate\",\n    launchTemplateData: {\n        iamInstanceProfile: {\n            arn: myIamInstanceProfile.arn,\n        },\n        disableApiTermination: true,\n        imageId: \"ami-04d5cc9b88example\",\n        instanceType: \"t2.micro\",\n        keyName: \"MyKeyPair\",\n        securityGroupIds: [\"sg-083cd3bfb8example\"],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_iam_instance_profile = aws_native.iam.InstanceProfile(\"myIamInstanceProfile\",\n    instance_profile_name=\"MyIamInstanceProfile\",\n    path=\"/\",\n    roles=[\"MyAdminRole\"])\nmy_launch_template = aws_native.ec2.LaunchTemplate(\"myLaunchTemplate\",\n    launch_template_name=\"MyLaunchTemplate\",\n    launch_template_data={\n        \"iam_instance_profile\": {\n            \"arn\": my_iam_instance_profile.arn,\n        },\n        \"disable_api_termination\": True,\n        \"image_id\": \"ami-04d5cc9b88example\",\n        \"instance_type\": \"t2.micro\",\n        \"key_name\": \"MyKeyPair\",\n        \"security_group_ids\": [\"sg-083cd3bfb8example\"],\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the instance profile. For example:\n\n`{\"Fn::GetAtt\" : [\"MyProfile\", \"Arn\"] }`\n\nThis returns a value such as `arn:aws:iam::1234567890:instance-profile/MyProfile-ASDNSDLKJ` ."},"instanceProfileName":{"type":"string","description":"The name of the instance profile to create.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true},"path":{"type":"string","description":"The path to the instance profile. For more information about paths, see [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters.","replaceOnChanges":true},"roles":{"type":"array","items":{"type":"string"},"description":"The name of the role to associate with the instance profile. Only one role can be assigned to an EC2 instance at a time, and all applications on the instance share the same role and permissions."}},"type":"object","required":["arn","roles"],"inputProperties":{"instanceProfileName":{"type":"string","description":"The name of the instance profile to create.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"path":{"type":"string","description":"The path to the instance profile. For more information about paths, see [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters."},"roles":{"type":"array","items":{"type":"string"},"description":"The name of the role to associate with the instance profile. Only one role can be assigned to an EC2 instance at a time, and all applications on the instance share the same role and permissions."}},"requiredInputs":["roles"]},"aws-native:iam:ManagedPolicy":{"description":"Creates a new managed policy for your AWS-account.\n This operation creates a policy version with a version identifier of ``v1`` and sets v1 as the policy's default version. For more information about policy versions, see [Versioning for managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html) in the *IAM User Guide*.\n As a best practice, you can validate your IAM policies. To learn more, see [Validating IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html) in the *IAM User Guide*.\n For more information about managed policies in general, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.","properties":{"attachmentCount":{"type":"integer","description":"The number of principal entities (users, groups, and roles) that the policy is attached to."},"createDate":{"type":"string","description":"The date and time, in [ISO 8601 date-time format](https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601) , when the policy was created."},"defaultVersionId":{"type":"string","description":"The identifier for the version of the policy that is set as the default (operative) version.\n\nFor more information about policy versions, see [Versioning for managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html) in the *IAM User Guide* ."},"description":{"type":"string","description":"A friendly description of the policy.\n Typically used to store information about the permissions defined in the policy. For example, \"Grants access to production DynamoDB tables.\"\n The policy description is immutable. After a value is assigned, it cannot be changed.","replaceOnChanges":true},"groups":{"type":"array","items":{"type":"string"},"description":"The name (friendly name, not ARN) of the group to attach the policy to.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"isAttachable":{"type":"boolean","description":"Specifies whether the policy can be attached to an IAM user, group, or role."},"managedPolicyName":{"type":"string","description":"The friendly name of the policy.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.\n  If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``.","replaceOnChanges":true},"path":{"type":"string","description":"The path for the policy.\n For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters.\n  You cannot use an asterisk (*) in the path name.","replaceOnChanges":true},"permissionsBoundaryUsageCount":{"type":"integer","description":"The number of entities (users and roles) for which the policy is used as the permissions boundary.\n\nFor more information about permissions boundaries, see [Permissions boundaries for IAM identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* ."},"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the managed policy that you want information about.\n\nFor more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* ."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON policy document that you want to use as the content for the new policy.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The maximum length of the policy document that you can pass in this operation, including whitespace, is listed below. To view the maximum character counts of a managed policy with no whitespaces, see [IAM and character quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length).\n To learn more about JSON policy grammar, see [Grammar of the IAM JSON policy language](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html) in the *IAM User Guide*. \n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::ManagedPolicy` for more information about the expected schema for this property."},"policyId":{"type":"string","description":"The stable and unique string identifying the policy.\n\nFor more information about IDs, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* ."},"roles":{"type":"array","items":{"type":"string"},"description":"The name (friendly name, not ARN) of the role to attach the policy to.\n This parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-\n  If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy``) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service``) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that CFN deletes the ``AWS::ECS::Service`` resource before deleting its role's policy."},"updateDate":{"type":"string","description":"The date and time, in [ISO 8601 date-time format](https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601) , when the policy was last updated.\n\nWhen a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created."},"users":{"type":"array","items":{"type":"string"},"description":"The name (friendly name, not ARN) of the IAM user to attach the policy to.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"type":"object","required":["attachmentCount","createDate","defaultVersionId","isAttachable","permissionsBoundaryUsageCount","policyArn","policyDocument","policyId","updateDate"],"inputProperties":{"description":{"type":"string","description":"A friendly description of the policy.\n Typically used to store information about the permissions defined in the policy. For example, \"Grants access to production DynamoDB tables.\"\n The policy description is immutable. After a value is assigned, it cannot be changed."},"groups":{"type":"array","items":{"type":"string"},"description":"The name (friendly name, not ARN) of the group to attach the policy to.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"managedPolicyName":{"type":"string","description":"The friendly name of the policy.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.\n  If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``."},"path":{"type":"string","description":"The path for the policy.\n For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters.\n  You cannot use an asterisk (*) in the path name."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON policy document that you want to use as the content for the new policy.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The maximum length of the policy document that you can pass in this operation, including whitespace, is listed below. To view the maximum character counts of a managed policy with no whitespaces, see [IAM and character quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length).\n To learn more about JSON policy grammar, see [Grammar of the IAM JSON policy language](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html) in the *IAM User Guide*. \n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::ManagedPolicy` for more information about the expected schema for this property."},"roles":{"type":"array","items":{"type":"string"},"description":"The name (friendly name, not ARN) of the role to attach the policy to.\n This parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-\n  If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy``) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service``) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that CFN deletes the ``AWS::ECS::Service`` resource before deleting its role's policy."},"users":{"type":"array","items":{"type":"string"},"description":"The name (friendly name, not ARN) of the IAM user to attach the policy to.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"requiredInputs":["policyDocument"]},"aws-native:iam:OidcProvider":{"description":"Resource Type definition for AWS::IAM::OIDCProvider","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the OIDC provider"},"clientIdList":{"type":"array","items":{"type":"string"},"description":"A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* ."},"thumbprintList":{"type":"array","items":{"type":"string"},"description":"A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) .\n\nThis property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate."},"url":{"type":"string","description":"The URL that the IAM OIDC provider resource object is associated with. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) .","replaceOnChanges":true}},"type":"object","required":["arn"],"inputProperties":{"clientIdList":{"type":"array","items":{"type":"string"},"description":"A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* ."},"thumbprintList":{"type":"array","items":{"type":"string"},"description":"A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) .\n\nThis property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate."},"url":{"type":"string","description":"The URL that the IAM OIDC provider resource object is associated with. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) ."}}},"aws-native:iam:Role":{"description":"Creates a new role for your AWS-account.\n  For more information about roles, see [IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) in the *IAM User Guide*. For information about quotas for role names and the number of roles you can create, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var iamRole = new AwsNative.Iam.Role(\"iamRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"cloudformation.amazonaws.com\",\n                            \"gamelift.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n        RoleName = \"ScriptIAMRole\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"ScriptResourceIAMPolicy\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                                \"s3:GetObjectVersion\",\n                                \"s3:GetObjectMetadata\",\n                                \"s3:*Object*\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"*\",\n                            },\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var scriptResource = new AwsNative.GameLift.Script(\"scriptResource\", new()\n    {\n        Name = \"MyRealtimeScript\",\n        Version = \"v1.0\",\n        StorageLocation = new AwsNative.GameLift.Inputs.ScriptS3LocationArgs\n        {\n            Bucket = \"MyBucketName\",\n            Key = \"MyScriptFiles.zip\",\n            RoleArn = iamRole.Arn,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tiamRole, err := iam.NewRole(ctx, \"iamRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"cloudformation.amazonaws.com\",\n\t\t\t\t\t\t\t\t\"gamelift.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tRoleName: pulumi.String(\"ScriptIAMRole\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"ScriptResourceIAMPolicy\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t\t\"s3:GetObjectVersion\",\n\t\t\t\t\t\t\t\t\t\"s3:GetObjectMetadata\",\n\t\t\t\t\t\t\t\t\t\"s3:*Object*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = gamelift.NewScript(ctx, \"scriptResource\", \u0026gamelift.ScriptArgs{\n\t\t\tName:    pulumi.String(\"MyRealtimeScript\"),\n\t\t\tVersion: pulumi.String(\"v1.0\"),\n\t\t\tStorageLocation: \u0026gamelift.ScriptS3LocationArgs{\n\t\t\t\tBucket:  pulumi.String(\"MyBucketName\"),\n\t\t\t\tKey:     pulumi.String(\"MyScriptFiles.zip\"),\n\t\t\t\tRoleArn: iamRole.Arn,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst iamRole = new aws_native.iam.Role(\"iamRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\n                    \"cloudformation.amazonaws.com\",\n                    \"gamelift.amazonaws.com\",\n                ],\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n    roleName: \"ScriptIAMRole\",\n    policies: [{\n        policyName: \"ScriptResourceIAMPolicy\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: [\n                    \"s3:GetObject\",\n                    \"s3:GetObjectVersion\",\n                    \"s3:GetObjectMetadata\",\n                    \"s3:*Object*\",\n                ],\n                resource: [\"*\"],\n            }],\n        },\n    }],\n});\nconst scriptResource = new aws_native.gamelift.Script(\"scriptResource\", {\n    name: \"MyRealtimeScript\",\n    version: \"v1.0\",\n    storageLocation: {\n        bucket: \"MyBucketName\",\n        key: \"MyScriptFiles.zip\",\n        roleArn: iamRole.arn,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\niam_role = aws_native.iam.Role(\"iamRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\n                    \"cloudformation.amazonaws.com\",\n                    \"gamelift.amazonaws.com\",\n                ],\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    },\n    role_name=\"ScriptIAMRole\",\n    policies=[{\n        \"policy_name\": \"ScriptResourceIAMPolicy\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": [\n                    \"s3:GetObject\",\n                    \"s3:GetObjectVersion\",\n                    \"s3:GetObjectMetadata\",\n                    \"s3:*Object*\",\n                ],\n                \"resource\": [\"*\"],\n            }],\n        },\n    }])\nscript_resource = aws_native.gamelift.Script(\"scriptResource\",\n    name=\"MyRealtimeScript\",\n    version=\"v1.0\",\n    storage_location={\n        \"bucket\": \"MyBucketName\",\n        \"key\": \"MyScriptFiles.zip\",\n        \"role_arn\": iam_role.arn,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var iamRole = new AwsNative.Iam.Role(\"iamRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"cloudformation.amazonaws.com\",\n                            \"gamelift.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n        RoleName = \"ScriptIAMRole\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"ScriptResourceIAMPolicy\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                                \"s3:GetObjectVersion\",\n                                \"s3:GetObjectMetadata\",\n                                \"s3:*Object*\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"*\",\n                            },\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var scriptResource = new AwsNative.GameLift.Script(\"scriptResource\", new()\n    {\n        Name = \"MyRealtimeScript\",\n        Version = \"v1.0\",\n        StorageLocation = new AwsNative.GameLift.Inputs.ScriptS3LocationArgs\n        {\n            Bucket = \"MyBucketName\",\n            Key = \"MyScriptFiles.zip\",\n            RoleArn = iamRole.Arn,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/gamelift\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tiamRole, err := iam.NewRole(ctx, \"iamRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"cloudformation.amazonaws.com\",\n\t\t\t\t\t\t\t\t\"gamelift.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tRoleName: pulumi.String(\"ScriptIAMRole\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"ScriptResourceIAMPolicy\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t\t\"s3:GetObjectVersion\",\n\t\t\t\t\t\t\t\t\t\"s3:GetObjectMetadata\",\n\t\t\t\t\t\t\t\t\t\"s3:*Object*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = gamelift.NewScript(ctx, \"scriptResource\", \u0026gamelift.ScriptArgs{\n\t\t\tName:    pulumi.String(\"MyRealtimeScript\"),\n\t\t\tVersion: pulumi.String(\"v1.0\"),\n\t\t\tStorageLocation: \u0026gamelift.ScriptS3LocationArgs{\n\t\t\t\tBucket:  pulumi.String(\"MyBucketName\"),\n\t\t\t\tKey:     pulumi.String(\"MyScriptFiles.zip\"),\n\t\t\t\tRoleArn: iamRole.Arn,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst iamRole = new aws_native.iam.Role(\"iamRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\n                    \"cloudformation.amazonaws.com\",\n                    \"gamelift.amazonaws.com\",\n                ],\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n    roleName: \"ScriptIAMRole\",\n    policies: [{\n        policyName: \"ScriptResourceIAMPolicy\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: [\n                    \"s3:GetObject\",\n                    \"s3:GetObjectVersion\",\n                    \"s3:GetObjectMetadata\",\n                    \"s3:*Object*\",\n                ],\n                resource: [\"*\"],\n            }],\n        },\n    }],\n});\nconst scriptResource = new aws_native.gamelift.Script(\"scriptResource\", {\n    name: \"MyRealtimeScript\",\n    version: \"v1.0\",\n    storageLocation: {\n        bucket: \"MyBucketName\",\n        key: \"MyScriptFiles.zip\",\n        roleArn: iamRole.arn,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\niam_role = aws_native.iam.Role(\"iamRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\n                    \"cloudformation.amazonaws.com\",\n                    \"gamelift.amazonaws.com\",\n                ],\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    },\n    role_name=\"ScriptIAMRole\",\n    policies=[{\n        \"policy_name\": \"ScriptResourceIAMPolicy\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": [\n                    \"s3:GetObject\",\n                    \"s3:GetObjectVersion\",\n                    \"s3:GetObjectMetadata\",\n                    \"s3:*Object*\",\n                ],\n                \"resource\": [\"*\"],\n            }],\n        },\n    }])\nscript_resource = aws_native.gamelift.Script(\"scriptResource\",\n    name=\"MyRealtimeScript\",\n    version=\"v1.0\",\n    storage_location={\n        \"bucket\": \"MyBucketName\",\n        \"key\": \"MyScriptFiles.zip\",\n        \"role_arn\": iam_role.arn,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myJobRole = new AwsNative.Iam.Role(\"myJobRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"glue.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"root\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = \"*\",\n                            [\"resource\"] = \"*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var myJob = new AwsNative.Glue.Job(\"myJob\", new()\n    {\n        Command = new AwsNative.Glue.Inputs.JobCommandArgs\n        {\n            Name = \"glueetl\",\n            ScriptLocation = \"s3://\u003cyour-S3-script-uri\u003e\",\n        },\n        DefaultArguments = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n        },\n        ExecutionProperty = new AwsNative.Glue.Inputs.JobExecutionPropertyArgs\n        {\n            MaxConcurrentRuns = 2,\n        },\n        MaxRetries = 0,\n        Name = \"cf-job1\",\n        Role = myJobRole.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyJobRole, err := iam.NewRole(ctx, \"myJobRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"glue.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"root\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t\t\"action\":   \"*\",\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = glue.NewJob(ctx, \"myJob\", \u0026glue.JobArgs{\n\t\t\tCommand: \u0026glue.JobCommandArgs{\n\t\t\t\tName:           pulumi.String(\"glueetl\"),\n\t\t\t\tScriptLocation: pulumi.String(\"s3://\u003cyour-S3-script-uri\u003e\"),\n\t\t\t},\n\t\t\tDefaultArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t}),\n\t\t\tExecutionProperty: \u0026glue.JobExecutionPropertyArgs{\n\t\t\t\tMaxConcurrentRuns: pulumi.Float64(2),\n\t\t\t},\n\t\t\tMaxRetries: pulumi.Float64(0),\n\t\t\tName:       pulumi.String(\"cf-job1\"),\n\t\t\tRole:       myJobRole.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myJobRole = new aws_native.iam.Role(\"myJobRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"glue.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"root\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: \"*\",\n                resource: \"*\",\n            }],\n        },\n    }],\n});\nconst myJob = new aws_native.glue.Job(\"myJob\", {\n    command: {\n        name: \"glueetl\",\n        scriptLocation: \"s3://\u003cyour-S3-script-uri\u003e\",\n    },\n    defaultArguments: {\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    executionProperty: {\n        maxConcurrentRuns: 2,\n    },\n    maxRetries: 0,\n    name: \"cf-job1\",\n    role: myJobRole.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_job_role = aws_native.iam.Role(\"myJobRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"glue.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"root\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": \"*\",\n                \"resource\": \"*\",\n            }],\n        },\n    }])\nmy_job = aws_native.glue.Job(\"myJob\",\n    command={\n        \"name\": \"glueetl\",\n        \"script_location\": \"s3://\u003cyour-S3-script-uri\u003e\",\n    },\n    default_arguments={\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    execution_property={\n        \"max_concurrent_runs\": 2,\n    },\n    max_retries=0,\n    name=\"cf-job1\",\n    role=my_job_role.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myJobRole = new AwsNative.Iam.Role(\"myJobRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"glue.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"root\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = \"*\",\n                            [\"resource\"] = \"*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var myJob = new AwsNative.Glue.Job(\"myJob\", new()\n    {\n        Command = new AwsNative.Glue.Inputs.JobCommandArgs\n        {\n            Name = \"glueetl\",\n            ScriptLocation = \"s3://\u003cyour-S3-script-uri\u003e\",\n        },\n        DefaultArguments = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n        },\n        ExecutionProperty = new AwsNative.Glue.Inputs.JobExecutionPropertyArgs\n        {\n            MaxConcurrentRuns = 2,\n        },\n        MaxRetries = 0,\n        Name = \"cf-job1\",\n        Role = myJobRole.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyJobRole, err := iam.NewRole(ctx, \"myJobRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"glue.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"root\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t\t\"action\":   \"*\",\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = glue.NewJob(ctx, \"myJob\", \u0026glue.JobArgs{\n\t\t\tCommand: \u0026glue.JobCommandArgs{\n\t\t\t\tName:           pulumi.String(\"glueetl\"),\n\t\t\t\tScriptLocation: pulumi.String(\"s3://\u003cyour-S3-script-uri\u003e\"),\n\t\t\t},\n\t\t\tDefaultArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t}),\n\t\t\tExecutionProperty: \u0026glue.JobExecutionPropertyArgs{\n\t\t\t\tMaxConcurrentRuns: pulumi.Float64(2),\n\t\t\t},\n\t\t\tMaxRetries: pulumi.Float64(0),\n\t\t\tName:       pulumi.String(\"cf-job1\"),\n\t\t\tRole:       myJobRole.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myJobRole = new aws_native.iam.Role(\"myJobRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"glue.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"root\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: \"*\",\n                resource: \"*\",\n            }],\n        },\n    }],\n});\nconst myJob = new aws_native.glue.Job(\"myJob\", {\n    command: {\n        name: \"glueetl\",\n        scriptLocation: \"s3://\u003cyour-S3-script-uri\u003e\",\n    },\n    defaultArguments: {\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    executionProperty: {\n        maxConcurrentRuns: 2,\n    },\n    maxRetries: 0,\n    name: \"cf-job1\",\n    role: myJobRole.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_job_role = aws_native.iam.Role(\"myJobRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"glue.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"root\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": \"*\",\n                \"resource\": \"*\",\n            }],\n        },\n    }])\nmy_job = aws_native.glue.Job(\"myJob\",\n    command={\n        \"name\": \"glueetl\",\n        \"script_location\": \"s3://\u003cyour-S3-script-uri\u003e\",\n    },\n    default_arguments={\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    execution_property={\n        \"max_concurrent_runs\": 2,\n    },\n    max_retries=0,\n    name=\"cf-job1\",\n    role=my_job_role.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myJobTriggerRole = new AwsNative.Iam.Role(\"myJobTriggerRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"glue.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"root\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = \"*\",\n                            [\"resource\"] = \"*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var myJob = new AwsNative.Glue.Job(\"myJob\", new()\n    {\n        Name = \"MyJobTriggerJob\",\n        LogUri = \"wikiData\",\n        Role = myJobTriggerRole.Id,\n        Command = new AwsNative.Glue.Inputs.JobCommandArgs\n        {\n            Name = \"glueetl\",\n            ScriptLocation = \"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\",\n        },\n        DefaultArguments = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n        },\n        MaxRetries = 0,\n    });\n\n    var myJobTrigger = new AwsNative.Glue.Trigger(\"myJobTrigger\", new()\n    {\n        Name = \"MyJobTrigger\",\n        Type = \"CONDITIONAL\",\n        Description = \"Description for a conditional job trigger\",\n        Actions = new[]\n        {\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = myJob.Id,\n                Arguments = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n                },\n            },\n        },\n        Predicate = new AwsNative.Glue.Inputs.TriggerPredicateArgs\n        {\n            Conditions = new[]\n            {\n                new AwsNative.Glue.Inputs.TriggerConditionArgs\n                {\n                    LogicalOperator = \"EQUALS\",\n                    JobName = myJob.Id,\n                    State = \"SUCCEEDED\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyJobTriggerRole, err := iam.NewRole(ctx, \"myJobTriggerRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"glue.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"root\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t\t\"action\":   \"*\",\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyJob, err := glue.NewJob(ctx, \"myJob\", \u0026glue.JobArgs{\n\t\t\tName:   pulumi.String(\"MyJobTriggerJob\"),\n\t\t\tLogUri: pulumi.String(\"wikiData\"),\n\t\t\tRole:   myJobTriggerRole.ID(),\n\t\t\tCommand: \u0026glue.JobCommandArgs{\n\t\t\t\tName:           pulumi.String(\"glueetl\"),\n\t\t\t\tScriptLocation: pulumi.String(\"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\"),\n\t\t\t},\n\t\t\tDefaultArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t}),\n\t\t\tMaxRetries: pulumi.Float64(0),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = glue.NewTrigger(ctx, \"myJobTrigger\", \u0026glue.TriggerArgs{\n\t\t\tName:        pulumi.String(\"MyJobTrigger\"),\n\t\t\tType:        pulumi.String(\"CONDITIONAL\"),\n\t\t\tDescription: pulumi.String(\"Description for a conditional job trigger\"),\n\t\t\tActions: glue.TriggerActionArray{\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: myJob.ID(),\n\t\t\t\t\tArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPredicate: \u0026glue.TriggerPredicateArgs{\n\t\t\t\tConditions: glue.TriggerConditionArray{\n\t\t\t\t\t\u0026glue.TriggerConditionArgs{\n\t\t\t\t\t\tLogicalOperator: pulumi.String(\"EQUALS\"),\n\t\t\t\t\t\tJobName:         myJob.ID(),\n\t\t\t\t\t\tState:           pulumi.String(\"SUCCEEDED\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myJobTriggerRole = new aws_native.iam.Role(\"myJobTriggerRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"glue.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"root\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: \"*\",\n                resource: \"*\",\n            }],\n        },\n    }],\n});\nconst myJob = new aws_native.glue.Job(\"myJob\", {\n    name: \"MyJobTriggerJob\",\n    logUri: \"wikiData\",\n    role: myJobTriggerRole.id,\n    command: {\n        name: \"glueetl\",\n        scriptLocation: \"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\",\n    },\n    defaultArguments: {\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    maxRetries: 0,\n});\nconst myJobTrigger = new aws_native.glue.Trigger(\"myJobTrigger\", {\n    name: \"MyJobTrigger\",\n    type: \"CONDITIONAL\",\n    description: \"Description for a conditional job trigger\",\n    actions: [{\n        jobName: myJob.id,\n        arguments: {\n            \"--job-bookmark-option\": \"job-bookmark-enable\",\n        },\n    }],\n    predicate: {\n        conditions: [{\n            logicalOperator: \"EQUALS\",\n            jobName: myJob.id,\n            state: \"SUCCEEDED\",\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_job_trigger_role = aws_native.iam.Role(\"myJobTriggerRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"glue.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"root\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": \"*\",\n                \"resource\": \"*\",\n            }],\n        },\n    }])\nmy_job = aws_native.glue.Job(\"myJob\",\n    name=\"MyJobTriggerJob\",\n    log_uri=\"wikiData\",\n    role=my_job_trigger_role.id,\n    command={\n        \"name\": \"glueetl\",\n        \"script_location\": \"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\",\n    },\n    default_arguments={\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    max_retries=0)\nmy_job_trigger = aws_native.glue.Trigger(\"myJobTrigger\",\n    name=\"MyJobTrigger\",\n    type=\"CONDITIONAL\",\n    description=\"Description for a conditional job trigger\",\n    actions=[{\n        \"job_name\": my_job.id,\n        \"arguments\": {\n            \"--job-bookmark-option\": \"job-bookmark-enable\",\n        },\n    }],\n    predicate={\n        \"conditions\": [{\n            \"logical_operator\": \"EQUALS\",\n            \"job_name\": my_job.id,\n            \"state\": \"SUCCEEDED\",\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myJobTriggerRole = new AwsNative.Iam.Role(\"myJobTriggerRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"glue.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"root\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = \"*\",\n                            [\"resource\"] = \"*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var myJob = new AwsNative.Glue.Job(\"myJob\", new()\n    {\n        Name = \"MyJobTriggerJob\",\n        LogUri = \"wikiData\",\n        Role = myJobTriggerRole.Id,\n        Command = new AwsNative.Glue.Inputs.JobCommandArgs\n        {\n            Name = \"glueetl\",\n            ScriptLocation = \"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\",\n        },\n        DefaultArguments = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n        },\n        MaxRetries = 0,\n    });\n\n    var myJobTrigger = new AwsNative.Glue.Trigger(\"myJobTrigger\", new()\n    {\n        Name = \"MyJobTrigger\",\n        Type = \"CONDITIONAL\",\n        Description = \"Description for a conditional job trigger\",\n        Actions = new[]\n        {\n            new AwsNative.Glue.Inputs.TriggerActionArgs\n            {\n                JobName = myJob.Id,\n                Arguments = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"--job-bookmark-option\"] = \"job-bookmark-enable\",\n                },\n            },\n        },\n        Predicate = new AwsNative.Glue.Inputs.TriggerPredicateArgs\n        {\n            Conditions = new[]\n            {\n                new AwsNative.Glue.Inputs.TriggerConditionArgs\n                {\n                    LogicalOperator = \"EQUALS\",\n                    JobName = myJob.Id,\n                    State = \"SUCCEEDED\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/glue\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyJobTriggerRole, err := iam.NewRole(ctx, \"myJobTriggerRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"glue.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"root\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t\t\"action\":   \"*\",\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyJob, err := glue.NewJob(ctx, \"myJob\", \u0026glue.JobArgs{\n\t\t\tName:   pulumi.String(\"MyJobTriggerJob\"),\n\t\t\tLogUri: pulumi.String(\"wikiData\"),\n\t\t\tRole:   myJobTriggerRole.ID(),\n\t\t\tCommand: \u0026glue.JobCommandArgs{\n\t\t\t\tName:           pulumi.String(\"glueetl\"),\n\t\t\t\tScriptLocation: pulumi.String(\"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\"),\n\t\t\t},\n\t\t\tDefaultArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t}),\n\t\t\tMaxRetries: pulumi.Float64(0),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = glue.NewTrigger(ctx, \"myJobTrigger\", \u0026glue.TriggerArgs{\n\t\t\tName:        pulumi.String(\"MyJobTrigger\"),\n\t\t\tType:        pulumi.String(\"CONDITIONAL\"),\n\t\t\tDescription: pulumi.String(\"Description for a conditional job trigger\"),\n\t\t\tActions: glue.TriggerActionArray{\n\t\t\t\t\u0026glue.TriggerActionArgs{\n\t\t\t\t\tJobName: myJob.ID(),\n\t\t\t\t\tArguments: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"--job-bookmark-option\": \"job-bookmark-enable\",\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPredicate: \u0026glue.TriggerPredicateArgs{\n\t\t\t\tConditions: glue.TriggerConditionArray{\n\t\t\t\t\t\u0026glue.TriggerConditionArgs{\n\t\t\t\t\t\tLogicalOperator: pulumi.String(\"EQUALS\"),\n\t\t\t\t\t\tJobName:         myJob.ID(),\n\t\t\t\t\t\tState:           pulumi.String(\"SUCCEEDED\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myJobTriggerRole = new aws_native.iam.Role(\"myJobTriggerRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"glue.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"root\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: \"*\",\n                resource: \"*\",\n            }],\n        },\n    }],\n});\nconst myJob = new aws_native.glue.Job(\"myJob\", {\n    name: \"MyJobTriggerJob\",\n    logUri: \"wikiData\",\n    role: myJobTriggerRole.id,\n    command: {\n        name: \"glueetl\",\n        scriptLocation: \"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\",\n    },\n    defaultArguments: {\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    maxRetries: 0,\n});\nconst myJobTrigger = new aws_native.glue.Trigger(\"myJobTrigger\", {\n    name: \"MyJobTrigger\",\n    type: \"CONDITIONAL\",\n    description: \"Description for a conditional job trigger\",\n    actions: [{\n        jobName: myJob.id,\n        arguments: {\n            \"--job-bookmark-option\": \"job-bookmark-enable\",\n        },\n    }],\n    predicate: {\n        conditions: [{\n            logicalOperator: \"EQUALS\",\n            jobName: myJob.id,\n            state: \"SUCCEEDED\",\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_job_trigger_role = aws_native.iam.Role(\"myJobTriggerRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"glue.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"root\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": \"*\",\n                \"resource\": \"*\",\n            }],\n        },\n    }])\nmy_job = aws_native.glue.Job(\"myJob\",\n    name=\"MyJobTriggerJob\",\n    log_uri=\"wikiData\",\n    role=my_job_trigger_role.id,\n    command={\n        \"name\": \"glueetl\",\n        \"script_location\": \"s3://testdata-bucket/s3-target/create-delete-job-xtf-ETL-s3-json-to-csv.py\",\n    },\n    default_arguments={\n        \"--job-bookmark-option\": \"job-bookmark-enable\",\n    },\n    max_retries=0)\nmy_job_trigger = aws_native.glue.Trigger(\"myJobTrigger\",\n    name=\"MyJobTrigger\",\n    type=\"CONDITIONAL\",\n    description=\"Description for a conditional job trigger\",\n    actions=[{\n        \"job_name\": my_job.id,\n        \"arguments\": {\n            \"--job-bookmark-option\": \"job-bookmark-enable\",\n        },\n    }],\n    predicate={\n        \"conditions\": [{\n            \"logical_operator\": \"EQUALS\",\n            \"job_name\": my_job.id,\n            \"state\": \"SUCCEEDED\",\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var amazonGrafanaWorkspaceIAMRole = new AwsNative.Iam.Role(\"amazonGrafanaWorkspaceIAMRole\", new()\n    {\n        ManagedPolicyArns = new[]\n        {\n            \"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\",\n        },\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"grafana.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n    });\n\n    var amazonGrafanaWorkspace = new AwsNative.Grafana.Workspace(\"amazonGrafanaWorkspace\", new()\n    {\n        AccountAccessType = AwsNative.Grafana.WorkspaceAccountAccessType.CurrentAccount,\n        Name = \"AmazonGrafanaWorkspace\",\n        Description = \"Amazon Grafana Workspace\",\n        AuthenticationProviders = new[]\n        {\n            AwsNative.Grafana.WorkspaceAuthenticationProviderTypes.Saml,\n        },\n        PermissionType = AwsNative.Grafana.WorkspacePermissionType.CustomerManaged,\n        GrafanaVersion = \"9.4\",\n        RoleArn = amazonGrafanaWorkspaceIAMRole.Arn,\n        SamlConfiguration = new AwsNative.Grafana.Inputs.WorkspaceSamlConfigurationArgs\n        {\n            IdpMetadata = new AwsNative.Grafana.Inputs.WorkspaceIdpMetadataArgs\n            {\n                Xml = \"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\",\n            },\n            AssertionAttributes = new AwsNative.Grafana.Inputs.WorkspaceAssertionAttributesArgs\n            {\n                Name = \"displayName\",\n                Login = \"login\",\n                Email = \"email\",\n                Groups = \"group\",\n                Role = \"role\",\n                Org = \"org\",\n            },\n            RoleValues = new AwsNative.Grafana.Inputs.WorkspaceRoleValuesArgs\n            {\n                Editor = new[]\n                {\n                    \"editor1\",\n                },\n                Admin = new[]\n                {\n                    \"admin1\",\n                },\n            },\n            AllowedOrganizations = new[]\n            {\n                \"org1\",\n            },\n            LoginValidityDuration = 60,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"workspaceEndpoint\"] = amazonGrafanaWorkspace.Endpoint,\n        [\"workspaceStatus\"] = amazonGrafanaWorkspace.Status,\n        [\"workspaceId\"] = amazonGrafanaWorkspace.Id,\n        [\"grafanaVersion\"] = amazonGrafanaWorkspace.GrafanaVersion,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/grafana\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tamazonGrafanaWorkspaceIAMRole, err := iam.NewRole(ctx, \"amazonGrafanaWorkspaceIAMRole\", \u0026iam.RoleArgs{\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\"),\n\t\t\t},\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"grafana.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tamazonGrafanaWorkspace, err := grafana.NewWorkspace(ctx, \"amazonGrafanaWorkspace\", \u0026grafana.WorkspaceArgs{\n\t\t\tAccountAccessType: grafana.WorkspaceAccountAccessTypeCurrentAccount,\n\t\t\tName:              pulumi.String(\"AmazonGrafanaWorkspace\"),\n\t\t\tDescription:       pulumi.String(\"Amazon Grafana Workspace\"),\n\t\t\tAuthenticationProviders: grafana.WorkspaceAuthenticationProviderTypesArray{\n\t\t\t\tgrafana.WorkspaceAuthenticationProviderTypesSaml,\n\t\t\t},\n\t\t\tPermissionType: grafana.WorkspacePermissionTypeCustomerManaged,\n\t\t\tGrafanaVersion: pulumi.String(\"9.4\"),\n\t\t\tRoleArn:        amazonGrafanaWorkspaceIAMRole.Arn,\n\t\t\tSamlConfiguration: \u0026grafana.WorkspaceSamlConfigurationArgs{\n\t\t\t\tIdpMetadata: \u0026grafana.WorkspaceIdpMetadataArgs{\n\t\t\t\t\tXml: pulumi.String(\"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\"),\n\t\t\t\t},\n\t\t\t\tAssertionAttributes: \u0026grafana.WorkspaceAssertionAttributesArgs{\n\t\t\t\t\tName:   pulumi.String(\"displayName\"),\n\t\t\t\t\tLogin:  pulumi.String(\"login\"),\n\t\t\t\t\tEmail:  pulumi.String(\"email\"),\n\t\t\t\t\tGroups: pulumi.String(\"group\"),\n\t\t\t\t\tRole:   pulumi.String(\"role\"),\n\t\t\t\t\tOrg:    pulumi.String(\"org\"),\n\t\t\t\t},\n\t\t\t\tRoleValues: \u0026grafana.WorkspaceRoleValuesArgs{\n\t\t\t\t\tEditor: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"editor1\"),\n\t\t\t\t\t},\n\t\t\t\t\tAdmin: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"admin1\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tAllowedOrganizations: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"org1\"),\n\t\t\t\t},\n\t\t\t\tLoginValidityDuration: pulumi.Float64(60),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"workspaceEndpoint\", amazonGrafanaWorkspace.Endpoint)\n\t\tctx.Export(\"workspaceStatus\", amazonGrafanaWorkspace.Status.ApplyT(func(x *string) grafana.WorkspaceStatus { return grafana.WorkspaceStatus(*x) }).(grafana.WorkspaceStatusOutput))\n\t\tctx.Export(\"workspaceId\", amazonGrafanaWorkspace.ID())\n\t\tctx.Export(\"grafanaVersion\", amazonGrafanaWorkspace.GrafanaVersion)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst amazonGrafanaWorkspaceIAMRole = new aws_native.iam.Role(\"amazonGrafanaWorkspaceIAMRole\", {\n    managedPolicyArns: [\"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\"],\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"grafana.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n});\nconst amazonGrafanaWorkspace = new aws_native.grafana.Workspace(\"amazonGrafanaWorkspace\", {\n    accountAccessType: aws_native.grafana.WorkspaceAccountAccessType.CurrentAccount,\n    name: \"AmazonGrafanaWorkspace\",\n    description: \"Amazon Grafana Workspace\",\n    authenticationProviders: [aws_native.grafana.WorkspaceAuthenticationProviderTypes.Saml],\n    permissionType: aws_native.grafana.WorkspacePermissionType.CustomerManaged,\n    grafanaVersion: \"9.4\",\n    roleArn: amazonGrafanaWorkspaceIAMRole.arn,\n    samlConfiguration: {\n        idpMetadata: {\n            xml: \"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\",\n        },\n        assertionAttributes: {\n            name: \"displayName\",\n            login: \"login\",\n            email: \"email\",\n            groups: \"group\",\n            role: \"role\",\n            org: \"org\",\n        },\n        roleValues: {\n            editor: [\"editor1\"],\n            admin: [\"admin1\"],\n        },\n        allowedOrganizations: [\"org1\"],\n        loginValidityDuration: 60,\n    },\n});\nexport const workspaceEndpoint = amazonGrafanaWorkspace.endpoint;\nexport const workspaceStatus = amazonGrafanaWorkspace.status;\nexport const workspaceId = amazonGrafanaWorkspace.id;\nexport const grafanaVersion = amazonGrafanaWorkspace.grafanaVersion;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\namazon_grafana_workspace_iam_role = aws_native.iam.Role(\"amazonGrafanaWorkspaceIAMRole\",\n    managed_policy_arns=[\"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\"],\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"grafana.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    })\namazon_grafana_workspace = aws_native.grafana.Workspace(\"amazonGrafanaWorkspace\",\n    account_access_type=aws_native.grafana.WorkspaceAccountAccessType.CURRENT_ACCOUNT,\n    name=\"AmazonGrafanaWorkspace\",\n    description=\"Amazon Grafana Workspace\",\n    authentication_providers=[aws_native.grafana.WorkspaceAuthenticationProviderTypes.SAML],\n    permission_type=aws_native.grafana.WorkspacePermissionType.CUSTOMER_MANAGED,\n    grafana_version=\"9.4\",\n    role_arn=amazon_grafana_workspace_iam_role.arn,\n    saml_configuration={\n        \"idp_metadata\": {\n            \"xml\": \"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\",\n        },\n        \"assertion_attributes\": {\n            \"name\": \"displayName\",\n            \"login\": \"login\",\n            \"email\": \"email\",\n            \"groups\": \"group\",\n            \"role\": \"role\",\n            \"org\": \"org\",\n        },\n        \"role_values\": {\n            \"editor\": [\"editor1\"],\n            \"admin\": [\"admin1\"],\n        },\n        \"allowed_organizations\": [\"org1\"],\n        \"login_validity_duration\": 60,\n    })\npulumi.export(\"workspaceEndpoint\", amazon_grafana_workspace.endpoint)\npulumi.export(\"workspaceStatus\", amazon_grafana_workspace.status)\npulumi.export(\"workspaceId\", amazon_grafana_workspace.id)\npulumi.export(\"grafanaVersion\", amazon_grafana_workspace.grafana_version)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var amazonGrafanaWorkspaceIAMRole = new AwsNative.Iam.Role(\"amazonGrafanaWorkspaceIAMRole\", new()\n    {\n        ManagedPolicyArns = new[]\n        {\n            \"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\",\n        },\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"grafana.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n    });\n\n    var amazonGrafanaWorkspace = new AwsNative.Grafana.Workspace(\"amazonGrafanaWorkspace\", new()\n    {\n        AccountAccessType = AwsNative.Grafana.WorkspaceAccountAccessType.CurrentAccount,\n        Name = \"AmazonGrafanaWorkspace\",\n        Description = \"Amazon Grafana Workspace\",\n        AuthenticationProviders = new[]\n        {\n            AwsNative.Grafana.WorkspaceAuthenticationProviderTypes.Saml,\n        },\n        PermissionType = AwsNative.Grafana.WorkspacePermissionType.CustomerManaged,\n        GrafanaVersion = \"9.4\",\n        RoleArn = amazonGrafanaWorkspaceIAMRole.Arn,\n        SamlConfiguration = new AwsNative.Grafana.Inputs.WorkspaceSamlConfigurationArgs\n        {\n            IdpMetadata = new AwsNative.Grafana.Inputs.WorkspaceIdpMetadataArgs\n            {\n                Xml = \"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\",\n            },\n            AssertionAttributes = new AwsNative.Grafana.Inputs.WorkspaceAssertionAttributesArgs\n            {\n                Name = \"displayName\",\n                Login = \"login\",\n                Email = \"email\",\n                Groups = \"group\",\n                Role = \"role\",\n                Org = \"org\",\n            },\n            RoleValues = new AwsNative.Grafana.Inputs.WorkspaceRoleValuesArgs\n            {\n                Editor = new[]\n                {\n                    \"editor1\",\n                },\n                Admin = new[]\n                {\n                    \"admin1\",\n                },\n            },\n            AllowedOrganizations = new[]\n            {\n                \"org1\",\n            },\n            LoginValidityDuration = 60,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"workspaceEndpoint\"] = amazonGrafanaWorkspace.Endpoint,\n        [\"workspaceStatus\"] = amazonGrafanaWorkspace.Status,\n        [\"workspaceId\"] = amazonGrafanaWorkspace.Id,\n        [\"grafanaVersion\"] = amazonGrafanaWorkspace.GrafanaVersion,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/grafana\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tamazonGrafanaWorkspaceIAMRole, err := iam.NewRole(ctx, \"amazonGrafanaWorkspaceIAMRole\", \u0026iam.RoleArgs{\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\"),\n\t\t\t},\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"grafana.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tamazonGrafanaWorkspace, err := grafana.NewWorkspace(ctx, \"amazonGrafanaWorkspace\", \u0026grafana.WorkspaceArgs{\n\t\t\tAccountAccessType: grafana.WorkspaceAccountAccessTypeCurrentAccount,\n\t\t\tName:              pulumi.String(\"AmazonGrafanaWorkspace\"),\n\t\t\tDescription:       pulumi.String(\"Amazon Grafana Workspace\"),\n\t\t\tAuthenticationProviders: grafana.WorkspaceAuthenticationProviderTypesArray{\n\t\t\t\tgrafana.WorkspaceAuthenticationProviderTypesSaml,\n\t\t\t},\n\t\t\tPermissionType: grafana.WorkspacePermissionTypeCustomerManaged,\n\t\t\tGrafanaVersion: pulumi.String(\"9.4\"),\n\t\t\tRoleArn:        amazonGrafanaWorkspaceIAMRole.Arn,\n\t\t\tSamlConfiguration: \u0026grafana.WorkspaceSamlConfigurationArgs{\n\t\t\t\tIdpMetadata: \u0026grafana.WorkspaceIdpMetadataArgs{\n\t\t\t\t\tXml: pulumi.String(\"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\"),\n\t\t\t\t},\n\t\t\t\tAssertionAttributes: \u0026grafana.WorkspaceAssertionAttributesArgs{\n\t\t\t\t\tName:   pulumi.String(\"displayName\"),\n\t\t\t\t\tLogin:  pulumi.String(\"login\"),\n\t\t\t\t\tEmail:  pulumi.String(\"email\"),\n\t\t\t\t\tGroups: pulumi.String(\"group\"),\n\t\t\t\t\tRole:   pulumi.String(\"role\"),\n\t\t\t\t\tOrg:    pulumi.String(\"org\"),\n\t\t\t\t},\n\t\t\t\tRoleValues: \u0026grafana.WorkspaceRoleValuesArgs{\n\t\t\t\t\tEditor: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"editor1\"),\n\t\t\t\t\t},\n\t\t\t\t\tAdmin: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"admin1\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tAllowedOrganizations: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"org1\"),\n\t\t\t\t},\n\t\t\t\tLoginValidityDuration: pulumi.Float64(60),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"workspaceEndpoint\", amazonGrafanaWorkspace.Endpoint)\n\t\tctx.Export(\"workspaceStatus\", amazonGrafanaWorkspace.Status.ApplyT(func(x *string) grafana.WorkspaceStatus { return grafana.WorkspaceStatus(*x) }).(grafana.WorkspaceStatusOutput))\n\t\tctx.Export(\"workspaceId\", amazonGrafanaWorkspace.ID())\n\t\tctx.Export(\"grafanaVersion\", amazonGrafanaWorkspace.GrafanaVersion)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst amazonGrafanaWorkspaceIAMRole = new aws_native.iam.Role(\"amazonGrafanaWorkspaceIAMRole\", {\n    managedPolicyArns: [\"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\"],\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"grafana.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n});\nconst amazonGrafanaWorkspace = new aws_native.grafana.Workspace(\"amazonGrafanaWorkspace\", {\n    accountAccessType: aws_native.grafana.WorkspaceAccountAccessType.CurrentAccount,\n    name: \"AmazonGrafanaWorkspace\",\n    description: \"Amazon Grafana Workspace\",\n    authenticationProviders: [aws_native.grafana.WorkspaceAuthenticationProviderTypes.Saml],\n    permissionType: aws_native.grafana.WorkspacePermissionType.CustomerManaged,\n    grafanaVersion: \"9.4\",\n    roleArn: amazonGrafanaWorkspaceIAMRole.arn,\n    samlConfiguration: {\n        idpMetadata: {\n            xml: \"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\",\n        },\n        assertionAttributes: {\n            name: \"displayName\",\n            login: \"login\",\n            email: \"email\",\n            groups: \"group\",\n            role: \"role\",\n            org: \"org\",\n        },\n        roleValues: {\n            editor: [\"editor1\"],\n            admin: [\"admin1\"],\n        },\n        allowedOrganizations: [\"org1\"],\n        loginValidityDuration: 60,\n    },\n});\nexport const workspaceEndpoint = amazonGrafanaWorkspace.endpoint;\nexport const workspaceStatus = amazonGrafanaWorkspace.status;\nexport const workspaceId = amazonGrafanaWorkspace.id;\nexport const grafanaVersion = amazonGrafanaWorkspace.grafanaVersion;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\namazon_grafana_workspace_iam_role = aws_native.iam.Role(\"amazonGrafanaWorkspaceIAMRole\",\n    managed_policy_arns=[\"arn:aws:iam::aws:policy/service-role/AmazonGrafanaAthenaAccess\"],\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"grafana.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    })\namazon_grafana_workspace = aws_native.grafana.Workspace(\"amazonGrafanaWorkspace\",\n    account_access_type=aws_native.grafana.WorkspaceAccountAccessType.CURRENT_ACCOUNT,\n    name=\"AmazonGrafanaWorkspace\",\n    description=\"Amazon Grafana Workspace\",\n    authentication_providers=[aws_native.grafana.WorkspaceAuthenticationProviderTypes.SAML],\n    permission_type=aws_native.grafana.WorkspacePermissionType.CUSTOMER_MANAGED,\n    grafana_version=\"9.4\",\n    role_arn=amazon_grafana_workspace_iam_role.arn,\n    saml_configuration={\n        \"idp_metadata\": {\n            \"xml\": \"\u003cmd:EntityDescriptor xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' entityID='entityId'\u003eDATA\u003c/md:EntityDescriptor\u003e\",\n        },\n        \"assertion_attributes\": {\n            \"name\": \"displayName\",\n            \"login\": \"login\",\n            \"email\": \"email\",\n            \"groups\": \"group\",\n            \"role\": \"role\",\n            \"org\": \"org\",\n        },\n        \"role_values\": {\n            \"editor\": [\"editor1\"],\n            \"admin\": [\"admin1\"],\n        },\n        \"allowed_organizations\": [\"org1\"],\n        \"login_validity_duration\": 60,\n    })\npulumi.export(\"workspaceEndpoint\", amazon_grafana_workspace.endpoint)\npulumi.export(\"workspaceStatus\", amazon_grafana_workspace.status)\npulumi.export(\"workspaceId\", amazon_grafana_workspace.id)\npulumi.export(\"grafanaVersion\", amazon_grafana_workspace.grafana_version)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var rootRole = new AwsNative.Iam.Role(\"rootRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"ec2.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"root\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = \"*\",\n                            [\"resource\"] = \"*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var rootInstanceProfile = new AwsNative.Iam.InstanceProfile(\"rootInstanceProfile\", new()\n    {\n        Path = \"/\",\n        Roles = new[]\n        {\n            rootRole.Id,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\trootRole, err := iam.NewRole(ctx, \"rootRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"ec2.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"root\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t\t\"action\":   \"*\",\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewInstanceProfile(ctx, \"rootInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\trootRole.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst rootRole = new aws_native.iam.Role(\"rootRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"ec2.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"root\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: \"*\",\n                resource: \"*\",\n            }],\n        },\n    }],\n});\nconst rootInstanceProfile = new aws_native.iam.InstanceProfile(\"rootInstanceProfile\", {\n    path: \"/\",\n    roles: [rootRole.id],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nroot_role = aws_native.iam.Role(\"rootRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"ec2.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"root\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": \"*\",\n                \"resource\": \"*\",\n            }],\n        },\n    }])\nroot_instance_profile = aws_native.iam.InstanceProfile(\"rootInstanceProfile\",\n    path=\"/\",\n    roles=[root_role.id])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var rootRole = new AwsNative.Iam.Role(\"rootRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"ec2.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyName = \"root\",\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"effect\"] = \"Allow\",\n                            [\"action\"] = \"*\",\n                            [\"resource\"] = \"*\",\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var rootInstanceProfile = new AwsNative.Iam.InstanceProfile(\"rootInstanceProfile\", new()\n    {\n        Path = \"/\",\n        Roles = new[]\n        {\n            rootRole.Id,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\trootRole, err := iam.NewRole(ctx, \"rootRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"ec2.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyName: pulumi.String(\"root\"),\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t\t\"action\":   \"*\",\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewInstanceProfile(ctx, \"rootInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\trootRole.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst rootRole = new aws_native.iam.Role(\"rootRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"ec2.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    policies: [{\n        policyName: \"root\",\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                effect: \"Allow\",\n                action: \"*\",\n                resource: \"*\",\n            }],\n        },\n    }],\n});\nconst rootInstanceProfile = new aws_native.iam.InstanceProfile(\"rootInstanceProfile\", {\n    path: \"/\",\n    roles: [rootRole.id],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nroot_role = aws_native.iam.Role(\"rootRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"ec2.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    policies=[{\n        \"policy_name\": \"root\",\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"effect\": \"Allow\",\n                \"action\": \"*\",\n                \"resource\": \"*\",\n            }],\n        },\n    }])\nroot_instance_profile = aws_native.iam.InstanceProfile(\"rootInstanceProfile\",\n    path=\"/\",\n    roles=[root_role.id])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var automationExecutionRole = new AwsNative.Iam.Role(\"automationExecutionRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = \"ssm.amazonaws.com\",\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        Path = \"/\",\n        ManagedPolicyArns = new[]\n        {\n            \"arn:${AWS::Partition}:iam::aws:policy/AmazonEC2FullAccess\",\n        },\n    });\n\n    var automationAssociation = new AwsNative.Ssm.Association(\"automationAssociation\", new()\n    {\n        Name = \"AWS-StopEC2Instance\",\n        Parameters = \n        {\n            { \"automationAssumeRole\", new[]\n            {\n                \"AutomationExecutionRole.Arn\",\n            } },\n        },\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"ParameterValues\",\n                Values = new[]\n                {\n                    \"i-1234567890abcdef0\",\n                },\n            },\n        },\n        AutomationTargetParameterName = \"InstanceId\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iam.NewRole(ctx, \"automationExecutionRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": \"ssm.amazonaws.com\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/AmazonEC2FullAccess\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewAssociation(ctx, \"automationAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tName: pulumi.String(\"AWS-StopEC2Instance\"),\n\t\t\tParameters: pulumi.StringArrayMap{\n\t\t\t\t\"automationAssumeRole\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"AutomationExecutionRole.Arn\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"ParameterValues\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"i-1234567890abcdef0\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tAutomationTargetParameterName: pulumi.String(\"InstanceId\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst automationExecutionRole = new aws_native.iam.Role(\"automationExecutionRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: \"ssm.amazonaws.com\",\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    path: \"/\",\n    managedPolicyArns: [\"arn:${AWS::Partition}:iam::aws:policy/AmazonEC2FullAccess\"],\n});\nconst automationAssociation = new aws_native.ssm.Association(\"automationAssociation\", {\n    name: \"AWS-StopEC2Instance\",\n    parameters: {\n        automationAssumeRole: [\"AutomationExecutionRole.Arn\"],\n    },\n    targets: [{\n        key: \"ParameterValues\",\n        values: [\"i-1234567890abcdef0\"],\n    }],\n    automationTargetParameterName: \"InstanceId\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nautomation_execution_role = aws_native.iam.Role(\"automationExecutionRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": \"ssm.amazonaws.com\",\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    path=\"/\",\n    managed_policy_arns=[\"arn:${AWS::Partition}:iam::aws:policy/AmazonEC2FullAccess\"])\nautomation_association = aws_native.ssm.Association(\"automationAssociation\",\n    name=\"AWS-StopEC2Instance\",\n    parameters={\n        \"automationAssumeRole\": [\"AutomationExecutionRole.Arn\"],\n    },\n    targets=[{\n        \"key\": \"ParameterValues\",\n        \"values\": [\"i-1234567890abcdef0\"],\n    }],\n    automation_target_parameter_name=\"InstanceId\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the role. For example:\n\n`{\"Fn::GetAtt\" : [\"MyRole\", \"Arn\"] }`\n\nThis will return a value such as `arn:aws:iam::1234567890:role/MyRole-AJJHDSKSDF` ."},"assumeRolePolicyDocument":{"$ref":"pulumi.json#/Any","description":"The trust policy that is associated with this role. Trust policies define which entities can assume the role. You can associate only one trust policy with a role. For an example of a policy that can be used to assume a role, see [Template Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#aws-resource-iam-role--examples). For more information about the elements that you can use in an IAM policy, see [Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the *User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::Role` for more information about the expected schema for this property."},"description":{"type":"string","description":"A description of the role that you provide."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARNs) of the IAM managed policies that you want to attach to the role.\n For more information about ARNs, see [Amazon Resource Names (ARNs) and Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"maxSessionDuration":{"type":"integer","description":"The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default value of one hour is applied. This setting can have a value from 1 hour to 12 hours.\n Anyone who assumes the role from the CLI or API can use the ``DurationSeconds`` API parameter or the ``duration-seconds``CLI parameter to request a longer session. The ``MaxSessionDuration`` setting determines the maximum duration that can be requested using the ``DurationSeconds`` parameter. If users don't specify a value for the ``DurationSeconds`` parameter, their security credentials are valid for one hour by default. This applies when you use the ``AssumeRole*`` API operations or the ``assume-role*``CLI operations but does not apply when you use those operations to create a console URL. For more information, see [Using IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html) in the *IAM User Guide*."},"path":{"type":"string","description":"The path to the role. For more information about paths, see [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters.","replaceOnChanges":true},"permissionsBoundary":{"type":"string","description":"The ARN of the policy used to set the permissions boundary for the role.\n For more information about permissions boundaries, see [Permissions boundaries for IAM identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide*."},"policies":{"type":"array","items":{"$ref":"#/types/aws-native:iam:RolePolicy"},"description":"Adds or updates an inline policy document that is embedded in the specified IAM role.\n\nWhen you embed an inline policy in a role, the inline policy is used as part of the role's access (permissions) policy. The role's trust policy is created at the same time as the role. You can update a role's trust policy later. For more information about IAM roles, go to [Using Roles to Delegate Permissions and Federate Identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html) .\n\nA role can also have an attached managed policy. For information about policies, see [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .\n\nFor information about limits on the number of inline policies that you can embed with a role, see [Limitations on IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *IAM User Guide* .\n\n\u003e If an external policy (such as `AWS::IAM::Policy` or `AWS::IAM::ManagedPolicy` ) has a `Ref` to a role and if a resource (such as `AWS::ECS::Service` ) also has a `Ref` to the same role, add a `DependsOn` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an `AWS::ECS::Service` resource, the `DependsOn` attribute ensures that CloudFormation deletes the `AWS::ECS::Service` resource before deleting its role's policy."},"roleId":{"type":"string","description":"Returns the stable and unique string identifying the role. For example, `AIDAJQABLZS4A3QDU576Q` .\n\nFor more information about IDs, see [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html) in the *IAM User Guide* ."},"roleName":{"type":"string","description":"A name for the IAM role, up to 64 characters in length. For valid values, see the `RoleName` parameter for the [`CreateRole`](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html) action in the *IAM User Guide* .\n\nThis parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-. The role name must be unique within the account. Role names are not distinguished by case. For example, you cannot create roles named both \"Role1\" and \"role1\".\n\nIf you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the role name.\n\nIf you specify a name, you must specify the `CAPABILITY_NAMED_IAM` value to acknowledge your template's capabilities. For more information, see [Acknowledging IAM Resources in CloudFormation Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities) .\n\n\u003e Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using `Fn::Join` and `AWS::Region` to create a Region-specific name, as in the following example: `{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}` .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that are attached to the role. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*."}},"type":"object","required":["arn","assumeRolePolicyDocument","roleId"],"inputProperties":{"assumeRolePolicyDocument":{"$ref":"pulumi.json#/Any","description":"The trust policy that is associated with this role. Trust policies define which entities can assume the role. You can associate only one trust policy with a role. For an example of a policy that can be used to assume a role, see [Template Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#aws-resource-iam-role--examples). For more information about the elements that you can use in an IAM policy, see [Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the *User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::Role` for more information about the expected schema for this property."},"description":{"type":"string","description":"A description of the role that you provide."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARNs) of the IAM managed policies that you want to attach to the role.\n For more information about ARNs, see [Amazon Resource Names (ARNs) and Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"maxSessionDuration":{"type":"integer","description":"The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default value of one hour is applied. This setting can have a value from 1 hour to 12 hours.\n Anyone who assumes the role from the CLI or API can use the ``DurationSeconds`` API parameter or the ``duration-seconds``CLI parameter to request a longer session. The ``MaxSessionDuration`` setting determines the maximum duration that can be requested using the ``DurationSeconds`` parameter. If users don't specify a value for the ``DurationSeconds`` parameter, their security credentials are valid for one hour by default. This applies when you use the ``AssumeRole*`` API operations or the ``assume-role*``CLI operations but does not apply when you use those operations to create a console URL. For more information, see [Using IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html) in the *IAM User Guide*."},"path":{"type":"string","description":"The path to the role. For more information about paths, see [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters."},"permissionsBoundary":{"type":"string","description":"The ARN of the policy used to set the permissions boundary for the role.\n For more information about permissions boundaries, see [Permissions boundaries for IAM identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide*."},"policies":{"type":"array","items":{"$ref":"#/types/aws-native:iam:RolePolicy"},"description":"Adds or updates an inline policy document that is embedded in the specified IAM role.\n\nWhen you embed an inline policy in a role, the inline policy is used as part of the role's access (permissions) policy. The role's trust policy is created at the same time as the role. You can update a role's trust policy later. For more information about IAM roles, go to [Using Roles to Delegate Permissions and Federate Identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html) .\n\nA role can also have an attached managed policy. For information about policies, see [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .\n\nFor information about limits on the number of inline policies that you can embed with a role, see [Limitations on IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *IAM User Guide* .\n\n\u003e If an external policy (such as `AWS::IAM::Policy` or `AWS::IAM::ManagedPolicy` ) has a `Ref` to a role and if a resource (such as `AWS::ECS::Service` ) also has a `Ref` to the same role, add a `DependsOn` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an `AWS::ECS::Service` resource, the `DependsOn` attribute ensures that CloudFormation deletes the `AWS::ECS::Service` resource before deleting its role's policy."},"roleName":{"type":"string","description":"A name for the IAM role, up to 64 characters in length. For valid values, see the `RoleName` parameter for the [`CreateRole`](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html) action in the *IAM User Guide* .\n\nThis parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-. The role name must be unique within the account. Role names are not distinguished by case. For example, you cannot create roles named both \"Role1\" and \"role1\".\n\nIf you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the role name.\n\nIf you specify a name, you must specify the `CAPABILITY_NAMED_IAM` value to acknowledge your template's capabilities. For more information, see [Acknowledging IAM Resources in CloudFormation Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities) .\n\n\u003e Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using `Fn::Join` and `AWS::Region` to create a Region-specific name, as in the following example: `{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that are attached to the role. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*."}},"requiredInputs":["assumeRolePolicyDocument"]},"aws-native:iam:RolePolicy":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM role.\n When you embed an inline policy in a role, the inline policy is used as part of the role's access (permissions) policy. The role's trust policy is created at the same time as the role, using [CreateRole](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html). You can update a role's trust policy using [UpdateAssumeRolePolicy](https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateAssumeRolePolicy.html). For information about roles, see [roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html) in the *IAM User Guide*.\n A role can also have a managed policy attached to it. To attach a managed policy to a role, use [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.\n For information about the maximum number of inline policies that you can embed with a role, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::RolePolicy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true},"roleName":{"type":"string","description":"The name of the role to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true}},"type":"object","required":["policyName","roleName"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::RolePolicy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"roleName":{"type":"string","description":"The name of the role to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"requiredInputs":["roleName"]},"aws-native:iam:SamlProvider":{"description":"Resource Type definition for AWS::IAM::SAMLProvider","properties":{"addPrivateKey":{"type":"string","description":"The private key from your external identity provider","replaceOnChanges":true},"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the SAML provider"},"assertionEncryptionMode":{"$ref":"#/types/aws-native:iam:SamlProviderAssertionEncryptionMode","description":"The encryption setting for the SAML provider"},"name":{"type":"string","description":"The name of the provider to create.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true},"privateKeyList":{"type":"array","items":{"$ref":"#/types/aws-native:iam:SamlProviderSamlPrivateKey"},"description":"The private key metadata for the SAML provider."},"removePrivateKey":{"type":"string","description":"The Key ID of the private key to remove","replaceOnChanges":true},"samlMetadataDocument":{"type":"string","description":"An XML document generated by an identity provider (IdP) that supports SAML 2.0. The document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP.\n\nFor more information, see [About SAML 2.0-based federation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html) in the *IAM User Guide*"},"samlProviderUuid":{"type":"string","description":"The unique identifier assigned to the SAML provider"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the new IAM SAML provider. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .\n\n\u003e If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created."}},"type":"object","required":["arn","samlProviderUuid"],"inputProperties":{"addPrivateKey":{"type":"string","description":"The private key from your external identity provider"},"assertionEncryptionMode":{"$ref":"#/types/aws-native:iam:SamlProviderAssertionEncryptionMode","description":"The encryption setting for the SAML provider"},"name":{"type":"string","description":"The name of the provider to create.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"privateKeyList":{"type":"array","items":{"$ref":"#/types/aws-native:iam:SamlProviderSamlPrivateKey"},"description":"The private key metadata for the SAML provider."},"removePrivateKey":{"type":"string","description":"The Key ID of the private key to remove"},"samlMetadataDocument":{"type":"string","description":"An XML document generated by an identity provider (IdP) that supports SAML 2.0. The document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP.\n\nFor more information, see [About SAML 2.0-based federation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html) in the *IAM User Guide*"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the new IAM SAML provider. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .\n\n\u003e If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created."}}},"aws-native:iam:ServerCertificate":{"description":"Resource Type definition for AWS::IAM::ServerCertificate","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the server certificate"},"certificateBody":{"type":"string","description":"The contents of the public key certificate.","replaceOnChanges":true},"certificateChain":{"type":"string","description":"The contents of the public key certificate chain.","replaceOnChanges":true},"path":{"type":"string","description":"The path for the server certificate. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* .\n\nThis parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( `\\u0021` ) through the DEL character ( `\\u007F` ), including most punctuation characters, digits, and upper and lowercased letters.\n\n\u003e If you are uploading a server certificate specifically for use with Amazon CloudFront distributions, you must specify a path using the `path` parameter. The path must begin with `/cloudfront` and must include a trailing slash (for example, `/cloudfront/test/` )."},"privateKey":{"type":"string","description":"The contents of the private key in PEM-encoded format.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n\n- Any printable ASCII character ranging from the space character ( `\\u0020` ) through the end of the ASCII character range\n- The printable characters in the Basic Latin and Latin-1 Supplement character set (through `\\u00FF` )\n- The special characters tab ( `\\u0009` ), line feed ( `\\u000A` ), and carriage return ( `\\u000D` )","replaceOnChanges":true},"serverCertificateName":{"type":"string","description":"The name for the server certificate. Do not include the path in this value. The name of the certificate cannot contain any spaces.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that are attached to the server certificate. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* ."}},"type":"object","required":["arn"],"inputProperties":{"certificateBody":{"type":"string","description":"The contents of the public key certificate."},"certificateChain":{"type":"string","description":"The contents of the public key certificate chain."},"path":{"type":"string","description":"The path for the server certificate. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* .\n\nThis parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( `\\u0021` ) through the DEL character ( `\\u007F` ), including most punctuation characters, digits, and upper and lowercased letters.\n\n\u003e If you are uploading a server certificate specifically for use with Amazon CloudFront distributions, you must specify a path using the `path` parameter. The path must begin with `/cloudfront` and must include a trailing slash (for example, `/cloudfront/test/` )."},"privateKey":{"type":"string","description":"The contents of the private key in PEM-encoded format.\n\nThe [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n\n- Any printable ASCII character ranging from the space character ( `\\u0020` ) through the end of the ASCII character range\n- The printable characters in the Basic Latin and Latin-1 Supplement character set (through `\\u00FF` )\n- The special characters tab ( `\\u0009` ), line feed ( `\\u000A` ), and carriage return ( `\\u000D` )"},"serverCertificateName":{"type":"string","description":"The name for the server certificate. Do not include the path in this value. The name of the certificate cannot contain any spaces.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that are attached to the server certificate. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* ."}}},"aws-native:iam:ServiceLinkedRole":{"description":"Resource Type definition for AWS::IAM::ServiceLinkedRole\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicSLR = new AwsNative.Iam.ServiceLinkedRole(\"basicSLR\", new()\n    {\n        AwsServiceName = \"autoscaling.amazonaws.com\",\n        Description = \"Test SLR description\",\n        CustomSuffix = \"TestSuffix\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"slrId\"] = basicSLR.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tbasicSLR, err := iam.NewServiceLinkedRole(ctx, \"basicSLR\", \u0026iam.ServiceLinkedRoleArgs{\n\t\t\tAwsServiceName: pulumi.String(\"autoscaling.amazonaws.com\"),\n\t\t\tDescription:    pulumi.String(\"Test SLR description\"),\n\t\t\tCustomSuffix:   pulumi.String(\"TestSuffix\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"slrId\", basicSLR.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicSLR = new aws_native.iam.ServiceLinkedRole(\"basicSLR\", {\n    awsServiceName: \"autoscaling.amazonaws.com\",\n    description: \"Test SLR description\",\n    customSuffix: \"TestSuffix\",\n});\nexport const slrId = basicSLR.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_slr = aws_native.iam.ServiceLinkedRole(\"basicSLR\",\n    aws_service_name=\"autoscaling.amazonaws.com\",\n    description=\"Test SLR description\",\n    custom_suffix=\"TestSuffix\")\npulumi.export(\"slrId\", basic_slr.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicSLR = new AwsNative.Iam.ServiceLinkedRole(\"basicSLR\", new()\n    {\n        AwsServiceName = \"autoscaling.amazonaws.com\",\n        Description = \"Test SLR description\",\n        CustomSuffix = \"TestSuffix\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"slrId\"] = basicSLR.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tbasicSLR, err := iam.NewServiceLinkedRole(ctx, \"basicSLR\", \u0026iam.ServiceLinkedRoleArgs{\n\t\t\tAwsServiceName: pulumi.String(\"autoscaling.amazonaws.com\"),\n\t\t\tDescription:    pulumi.String(\"Test SLR description\"),\n\t\t\tCustomSuffix:   pulumi.String(\"TestSuffix\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"slrId\", basicSLR.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicSLR = new aws_native.iam.ServiceLinkedRole(\"basicSLR\", {\n    awsServiceName: \"autoscaling.amazonaws.com\",\n    description: \"Test SLR description\",\n    customSuffix: \"TestSuffix\",\n});\nexport const slrId = basicSLR.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_slr = aws_native.iam.ServiceLinkedRole(\"basicSLR\",\n    aws_service_name=\"autoscaling.amazonaws.com\",\n    description=\"Test SLR description\",\n    custom_suffix=\"TestSuffix\")\npulumi.export(\"slrId\", basic_slr.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsServiceName":{"type":"string","description":"The service principal for the AWS service to which this role is attached.","replaceOnChanges":true},"customSuffix":{"type":"string","description":"A string that you provide, which is combined with the service-provided prefix to form the complete role name.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the role."},"roleName":{"type":"string","description":"The name of the role."}},"type":"object","required":["roleName"],"inputProperties":{"awsServiceName":{"type":"string","description":"The service principal for the AWS service to which this role is attached."},"customSuffix":{"type":"string","description":"A string that you provide, which is combined with the service-provided prefix to form the complete role name."},"description":{"type":"string","description":"The description of the role."}}},"aws-native:iam:User":{"description":"Creates a new IAM user for your AWS-account.\n  For information about quotas for the number of IAM users you can create, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the specified `AWS::IAM::User` resource. For example: `arn:aws:iam::123456789012:user/mystack-myuser-1CCXAFG2H2U4D` ."},"groups":{"type":"array","items":{"type":"string"},"description":"A list of group names to which you want to add the user."},"loginProfile":{"$ref":"#/types/aws-native:iam:UserLoginProfile","description":"Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the console.\n You can use the CLI, the AWS API, or the *Users* page in the IAM console to create a password for any IAM user. Use [ChangePassword](https://docs.aws.amazon.com/IAM/latest/APIReference/API_ChangePassword.html) to update your own existing password in the *My Security Credentials* page in the console.\n For more information about managing passwords, see [Managing passwords](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html) in the *User Guide*."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARNs) of the IAM managed policies that you want to attach to the user.\n For more information about ARNs, see [Amazon Resource Names (ARNs) and Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"path":{"type":"string","description":"The path for the user name. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters."},"permissionsBoundary":{"type":"string","description":"The ARN of the managed policy that is used to set the permissions boundary for the user.\n A permissions boundary policy defines the maximum permissions that identity-based policies can grant to an entity, but does not grant permissions. Permissions boundaries do not define the maximum permissions that a resource-based policy can grant to an entity. To learn more, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide*.\n For more information about policy types, see [Policy types](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policy-types) in the *IAM User Guide*."},"policies":{"type":"array","items":{"$ref":"#/types/aws-native:iam:UserPolicy"},"description":"Adds or updates an inline policy document that is embedded in the specified IAM user. To view AWS::IAM::User snippets, see [Declaring an User Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-user).\n  The name of each policy for a role, user, or group must be unique. If you don't choose unique names, updates to the IAM identity will fail. \n  For information about limits on the number of inline policies that you can embed in a user, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the new user. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*.\n  If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created."},"userName":{"type":"string","description":"The name of the user to create. Do not include the path in this value.\n This parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-. The user name must be unique within the account. User names are not distinguished by case. For example, you cannot create users named both \"John\" and \"john\".\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the user name.\n If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``.","replaceOnChanges":true}},"type":"object","required":["arn"],"inputProperties":{"groups":{"type":"array","items":{"type":"string"},"description":"A list of group names to which you want to add the user."},"loginProfile":{"$ref":"#/types/aws-native:iam:UserLoginProfile","description":"Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the console.\n You can use the CLI, the AWS API, or the *Users* page in the IAM console to create a password for any IAM user. Use [ChangePassword](https://docs.aws.amazon.com/IAM/latest/APIReference/API_ChangePassword.html) to update your own existing password in the *My Security Credentials* page in the console.\n For more information about managing passwords, see [Managing passwords](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html) in the *User Guide*."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARNs) of the IAM managed policies that you want to attach to the user.\n For more information about ARNs, see [Amazon Resource Names (ARNs) and Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"path":{"type":"string","description":"The path for the user name. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters."},"permissionsBoundary":{"type":"string","description":"The ARN of the managed policy that is used to set the permissions boundary for the user.\n A permissions boundary policy defines the maximum permissions that identity-based policies can grant to an entity, but does not grant permissions. Permissions boundaries do not define the maximum permissions that a resource-based policy can grant to an entity. To learn more, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide*.\n For more information about policy types, see [Policy types](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policy-types) in the *IAM User Guide*."},"policies":{"type":"array","items":{"$ref":"#/types/aws-native:iam:UserPolicy"},"description":"Adds or updates an inline policy document that is embedded in the specified IAM user. To view AWS::IAM::User snippets, see [Declaring an User Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-user).\n  The name of each policy for a role, user, or group must be unique. If you don't choose unique names, updates to the IAM identity will fail. \n  For information about limits on the number of inline policies that you can embed in a user, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the new user. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*.\n  If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created."},"userName":{"type":"string","description":"The name of the user to create. Do not include the path in this value.\n This parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-. The user name must be unique within the account. User names are not distinguished by case. For example, you cannot create users named both \"John\" and \"john\".\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the user name.\n If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``."}}},"aws-native:iam:UserPolicy":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM user.\n An IAM user can also have a managed policy attached to it. To attach a managed policy to a user, use [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.\n For information about the maximum number of inline policies that you can embed in a user, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::UserPolicy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true},"userName":{"type":"string","description":"The name of the user to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true}},"type":"object","required":["policyName","userName"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::UserPolicy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"userName":{"type":"string","description":"The name of the user to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"requiredInputs":["userName"]},"aws-native:iam:VirtualMfaDevice":{"description":"Resource Type definition for AWS::IAM::VirtualMFADevice","properties":{"path":{"type":"string","description":"The path for the virtual MFA device. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* .\n\nThis parameter is optional. If it is not included, it defaults to a slash (/).\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( `\\u0021` ) through the DEL character ( `\\u007F` ), including most punctuation characters, digits, and upper and lowercased letters.","replaceOnChanges":true},"serialNumber":{"type":"string","description":"Returns the serial number for the specified `AWS::IAM::VirtualMFADevice` resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the new IAM virtual MFA device. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .\n\n\u003e If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created."},"users":{"type":"array","items":{"type":"string"},"description":"The IAM user associated with this virtual MFA device."},"virtualMfaDeviceName":{"type":"string","description":"The name of the virtual MFA device, which must be unique. Use with path to uniquely identify a virtual MFA device.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","replaceOnChanges":true}},"type":"object","required":["serialNumber","users"],"inputProperties":{"path":{"type":"string","description":"The path for the virtual MFA device. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* .\n\nThis parameter is optional. If it is not included, it defaults to a slash (/).\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( `\\u0021` ) through the DEL character ( `\\u007F` ), including most punctuation characters, digits, and upper and lowercased letters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the new IAM virtual MFA device. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .\n\n\u003e If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created."},"users":{"type":"array","items":{"type":"string"},"description":"The IAM user associated with this virtual MFA device."},"virtualMfaDeviceName":{"type":"string","description":"The name of the virtual MFA device, which must be unique. Use with path to uniquely identify a virtual MFA device.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"requiredInputs":["users"]},"aws-native:identitystore:Group":{"description":"Resource Type definition for AWS::IdentityStore::Group","properties":{"description":{"type":"string","description":"A string containing the description of the group."},"displayName":{"type":"string","description":"A string containing the name of the group. This value is commonly displayed when the group is referenced."},"groupId":{"type":"string","description":"The unique identifier for a group in the identity store."},"identityStoreId":{"type":"string","description":"The globally unique identifier for the identity store.","replaceOnChanges":true}},"type":"object","required":["displayName","groupId","identityStoreId"],"inputProperties":{"description":{"type":"string","description":"A string containing the description of the group."},"displayName":{"type":"string","description":"A string containing the name of the group. This value is commonly displayed when the group is referenced."},"identityStoreId":{"type":"string","description":"The globally unique identifier for the identity store."}},"requiredInputs":["displayName","identityStoreId"]},"aws-native:identitystore:GroupMembership":{"description":"Resource Type Definition for AWS:IdentityStore::GroupMembership","properties":{"groupId":{"type":"string","description":"The unique identifier for a group in the identity store.","replaceOnChanges":true},"identityStoreId":{"type":"string","description":"The globally unique identifier for the identity store.","replaceOnChanges":true},"memberId":{"$ref":"#/types/aws-native:identitystore:GroupMembershipMemberId","description":"An object containing the identifier of a group member.","replaceOnChanges":true},"membershipId":{"type":"string","description":"The identifier for a GroupMembership in the identity store."}},"type":"object","required":["groupId","identityStoreId","memberId","membershipId"],"inputProperties":{"groupId":{"type":"string","description":"The unique identifier for a group in the identity store."},"identityStoreId":{"type":"string","description":"The globally unique identifier for the identity store."},"memberId":{"$ref":"#/types/aws-native:identitystore:GroupMembershipMemberId","description":"An object containing the identifier of a group member."}},"requiredInputs":["groupId","identityStoreId","memberId"]},"aws-native:imagebuilder:Component":{"description":"Resource schema for AWS::ImageBuilder::Component\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var componentAllParameters = new AwsNative.ImageBuilder.Component(\"componentAllParameters\", new()\n    {\n        Name = \"component-name\",\n        Platform = AwsNative.ImageBuilder.ComponentPlatform.Linux,\n        Version = \"1.0.0\",\n        Description = \"description\",\n        ChangeDescription = \"change-description\",\n        KmsKeyId = \"customer-kms-key-id\",\n        SupportedOsVersions = new[]\n        {\n            \"Amazon Linux 2\",\n        },\n        Tags = \n        {\n            { \"customerComponentTagKey1\", \"CustomerComponentTagValue1\" },\n            { \"customerComponentTagKey2\", \"CustomerComponentTagValue2\" },\n        },\n        Data = @\"name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"\"Hello World! Build.\"\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"\"Hello World! Validate.\"\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"\"Hello World! Test.\"\"\n\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/imagebuilder\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := imagebuilder.NewComponent(ctx, \"componentAllParameters\", \u0026imagebuilder.ComponentArgs{\n\t\t\tName:              pulumi.String(\"component-name\"),\n\t\t\tPlatform:          imagebuilder.ComponentPlatformLinux,\n\t\t\tVersion:           pulumi.String(\"1.0.0\"),\n\t\t\tDescription:       pulumi.String(\"description\"),\n\t\t\tChangeDescription: pulumi.String(\"change-description\"),\n\t\t\tKmsKeyId:          pulumi.String(\"customer-kms-key-id\"),\n\t\t\tSupportedOsVersions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"Amazon Linux 2\"),\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"customerComponentTagKey1\": pulumi.String(\"CustomerComponentTagValue1\"),\n\t\t\t\t\"customerComponentTagKey2\": pulumi.String(\"CustomerComponentTagValue2\"),\n\t\t\t},\n\t\t\tData: pulumi.String(`name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Build.\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Validate.\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Test.\"\n`),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst componentAllParameters = new aws_native.imagebuilder.Component(\"componentAllParameters\", {\n    name: \"component-name\",\n    platform: aws_native.imagebuilder.ComponentPlatform.Linux,\n    version: \"1.0.0\",\n    description: \"description\",\n    changeDescription: \"change-description\",\n    kmsKeyId: \"customer-kms-key-id\",\n    supportedOsVersions: [\"Amazon Linux 2\"],\n    tags: {\n        customerComponentTagKey1: \"CustomerComponentTagValue1\",\n        customerComponentTagKey2: \"CustomerComponentTagValue2\",\n    },\n    data: `name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Build.\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Validate.\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Test.\"\n`,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncomponent_all_parameters = aws_native.imagebuilder.Component(\"componentAllParameters\",\n    name=\"component-name\",\n    platform=aws_native.imagebuilder.ComponentPlatform.LINUX,\n    version=\"1.0.0\",\n    description=\"description\",\n    change_description=\"change-description\",\n    kms_key_id=\"customer-kms-key-id\",\n    supported_os_versions=[\"Amazon Linux 2\"],\n    tags={\n        \"customerComponentTagKey1\": \"CustomerComponentTagValue1\",\n        \"customerComponentTagKey2\": \"CustomerComponentTagValue2\",\n    },\n    data=\"\"\"name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Build.\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Validate.\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Test.\"\n\"\"\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var componentAllParameters = new AwsNative.ImageBuilder.Component(\"componentAllParameters\", new()\n    {\n        Name = \"component-name\",\n        Platform = AwsNative.ImageBuilder.ComponentPlatform.Linux,\n        Version = \"1.0.0\",\n        Description = \"description\",\n        ChangeDescription = \"change-description\",\n        KmsKeyId = \"customer-kms-key-id\",\n        SupportedOsVersions = new[]\n        {\n            \"Amazon Linux 2\",\n        },\n        Tags = \n        {\n            { \"customerComponentTagKey1\", \"CustomerComponentTagValue1\" },\n            { \"customerComponentTagKey2\", \"CustomerComponentTagValue2\" },\n        },\n        Data = @\"name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"\"Hello World! Build.\"\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"\"Hello World! Validate.\"\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"\"Hello World! Test.\"\"\n\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/imagebuilder\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := imagebuilder.NewComponent(ctx, \"componentAllParameters\", \u0026imagebuilder.ComponentArgs{\n\t\t\tName:              pulumi.String(\"component-name\"),\n\t\t\tPlatform:          imagebuilder.ComponentPlatformLinux,\n\t\t\tVersion:           pulumi.String(\"1.0.0\"),\n\t\t\tDescription:       pulumi.String(\"description\"),\n\t\t\tChangeDescription: pulumi.String(\"change-description\"),\n\t\t\tKmsKeyId:          pulumi.String(\"customer-kms-key-id\"),\n\t\t\tSupportedOsVersions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"Amazon Linux 2\"),\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"customerComponentTagKey1\": pulumi.String(\"CustomerComponentTagValue1\"),\n\t\t\t\t\"customerComponentTagKey2\": pulumi.String(\"CustomerComponentTagValue2\"),\n\t\t\t},\n\t\t\tData: pulumi.String(`name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Build.\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Validate.\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Test.\"\n`),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst componentAllParameters = new aws_native.imagebuilder.Component(\"componentAllParameters\", {\n    name: \"component-name\",\n    platform: aws_native.imagebuilder.ComponentPlatform.Linux,\n    version: \"1.0.0\",\n    description: \"description\",\n    changeDescription: \"change-description\",\n    kmsKeyId: \"customer-kms-key-id\",\n    supportedOsVersions: [\"Amazon Linux 2\"],\n    tags: {\n        customerComponentTagKey1: \"CustomerComponentTagValue1\",\n        customerComponentTagKey2: \"CustomerComponentTagValue2\",\n    },\n    data: `name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Build.\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Validate.\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Test.\"\n`,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncomponent_all_parameters = aws_native.imagebuilder.Component(\"componentAllParameters\",\n    name=\"component-name\",\n    platform=aws_native.imagebuilder.ComponentPlatform.LINUX,\n    version=\"1.0.0\",\n    description=\"description\",\n    change_description=\"change-description\",\n    kms_key_id=\"customer-kms-key-id\",\n    supported_os_versions=[\"Amazon Linux 2\"],\n    tags={\n        \"customerComponentTagKey1\": \"CustomerComponentTagValue1\",\n        \"customerComponentTagKey2\": \"CustomerComponentTagValue2\",\n    },\n    data=\"\"\"name: HelloWorldTestingLinuxDoc - InlineData\ndescription: This is hello world testing doc\nschemaVersion: 1.0\n\nphases:\n  - name: build\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Build.\"\n  - name: validate\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Validate.\"\n  - name: test\n    steps:\n      - name: HelloWorldStep\n        action: ExecuteBash\n        inputs:\n          commands:\n            - echo \"Hello World! Test.\"\n\"\"\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var componentAllParameters = new AwsNative.ImageBuilder.Component(\"componentAllParameters\", new()\n    {\n        Name = \"component-name\",\n        Platform = AwsNative.ImageBuilder.ComponentPlatform.Linux,\n        Version = \"1.0.0\",\n        Uri = \"s3://imagebuilder/component_document.yml\",\n        Description = \"description\",\n        ChangeDescription = \"change-description\",\n        KmsKeyId = \"customer-kms-key-id\",\n        SupportedOsVersions = new[]\n        {\n            \"CentOS\",\n            \"Red Hat Enterprise Linux\",\n        },\n        Tags = \n        {\n            { \"customerComponentTagKey1\", \"CustomerComponentTagValue1\" },\n            { \"customerComponentTagKey2\", \"CustomerComponentTagValue2\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/imagebuilder\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := imagebuilder.NewComponent(ctx, \"componentAllParameters\", \u0026imagebuilder.ComponentArgs{\n\t\t\tName:              pulumi.String(\"component-name\"),\n\t\t\tPlatform:          imagebuilder.ComponentPlatformLinux,\n\t\t\tVersion:           pulumi.String(\"1.0.0\"),\n\t\t\tUri:               pulumi.String(\"s3://imagebuilder/component_document.yml\"),\n\t\t\tDescription:       pulumi.String(\"description\"),\n\t\t\tChangeDescription: pulumi.String(\"change-description\"),\n\t\t\tKmsKeyId:          pulumi.String(\"customer-kms-key-id\"),\n\t\t\tSupportedOsVersions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"CentOS\"),\n\t\t\t\tpulumi.String(\"Red Hat Enterprise Linux\"),\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"customerComponentTagKey1\": pulumi.String(\"CustomerComponentTagValue1\"),\n\t\t\t\t\"customerComponentTagKey2\": pulumi.String(\"CustomerComponentTagValue2\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst componentAllParameters = new aws_native.imagebuilder.Component(\"componentAllParameters\", {\n    name: \"component-name\",\n    platform: aws_native.imagebuilder.ComponentPlatform.Linux,\n    version: \"1.0.0\",\n    uri: \"s3://imagebuilder/component_document.yml\",\n    description: \"description\",\n    changeDescription: \"change-description\",\n    kmsKeyId: \"customer-kms-key-id\",\n    supportedOsVersions: [\n        \"CentOS\",\n        \"Red Hat Enterprise Linux\",\n    ],\n    tags: {\n        customerComponentTagKey1: \"CustomerComponentTagValue1\",\n        customerComponentTagKey2: \"CustomerComponentTagValue2\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncomponent_all_parameters = aws_native.imagebuilder.Component(\"componentAllParameters\",\n    name=\"component-name\",\n    platform=aws_native.imagebuilder.ComponentPlatform.LINUX,\n    version=\"1.0.0\",\n    uri=\"s3://imagebuilder/component_document.yml\",\n    description=\"description\",\n    change_description=\"change-description\",\n    kms_key_id=\"customer-kms-key-id\",\n    supported_os_versions=[\n        \"CentOS\",\n        \"Red Hat Enterprise Linux\",\n    ],\n    tags={\n        \"customerComponentTagKey1\": \"CustomerComponentTagValue1\",\n        \"customerComponentTagKey2\": \"CustomerComponentTagValue2\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var componentAllParameters = new AwsNative.ImageBuilder.Component(\"componentAllParameters\", new()\n    {\n        Name = \"component-name\",\n        Platform = AwsNative.ImageBuilder.ComponentPlatform.Linux,\n        Version = \"1.0.0\",\n        Uri = \"s3://imagebuilder/component_document.yml\",\n        Description = \"description\",\n        ChangeDescription = \"change-description\",\n        KmsKeyId = \"customer-kms-key-id\",\n        SupportedOsVersions = new[]\n        {\n            \"CentOS\",\n            \"Red Hat Enterprise Linux\",\n        },\n        Tags = \n        {\n            { \"customerComponentTagKey1\", \"CustomerComponentTagValue1\" },\n            { \"customerComponentTagKey2\", \"CustomerComponentTagValue2\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/imagebuilder\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := imagebuilder.NewComponent(ctx, \"componentAllParameters\", \u0026imagebuilder.ComponentArgs{\n\t\t\tName:              pulumi.String(\"component-name\"),\n\t\t\tPlatform:          imagebuilder.ComponentPlatformLinux,\n\t\t\tVersion:           pulumi.String(\"1.0.0\"),\n\t\t\tUri:               pulumi.String(\"s3://imagebuilder/component_document.yml\"),\n\t\t\tDescription:       pulumi.String(\"description\"),\n\t\t\tChangeDescription: pulumi.String(\"change-description\"),\n\t\t\tKmsKeyId:          pulumi.String(\"customer-kms-key-id\"),\n\t\t\tSupportedOsVersions: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"CentOS\"),\n\t\t\t\tpulumi.String(\"Red Hat Enterprise Linux\"),\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"customerComponentTagKey1\": pulumi.String(\"CustomerComponentTagValue1\"),\n\t\t\t\t\"customerComponentTagKey2\": pulumi.String(\"CustomerComponentTagValue2\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst componentAllParameters = new aws_native.imagebuilder.Component(\"componentAllParameters\", {\n    name: \"component-name\",\n    platform: aws_native.imagebuilder.ComponentPlatform.Linux,\n    version: \"1.0.0\",\n    uri: \"s3://imagebuilder/component_document.yml\",\n    description: \"description\",\n    changeDescription: \"change-description\",\n    kmsKeyId: \"customer-kms-key-id\",\n    supportedOsVersions: [\n        \"CentOS\",\n        \"Red Hat Enterprise Linux\",\n    ],\n    tags: {\n        customerComponentTagKey1: \"CustomerComponentTagValue1\",\n        customerComponentTagKey2: \"CustomerComponentTagValue2\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncomponent_all_parameters = aws_native.imagebuilder.Component(\"componentAllParameters\",\n    name=\"component-name\",\n    platform=aws_native.imagebuilder.ComponentPlatform.LINUX,\n    version=\"1.0.0\",\n    uri=\"s3://imagebuilder/component_document.yml\",\n    description=\"description\",\n    change_description=\"change-description\",\n    kms_key_id=\"customer-kms-key-id\",\n    supported_os_versions=[\n        \"CentOS\",\n        \"Red Hat Enterprise Linux\",\n    ],\n    tags={\n        \"customerComponentTagKey1\": \"CustomerComponentTagValue1\",\n        \"customerComponentTagKey2\": \"CustomerComponentTagValue2\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the component."},"changeDescription":{"type":"string","description":"The change description of the component.","replaceOnChanges":true},"data":{"type":"string","description":"The data of the component.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the component.","replaceOnChanges":true},"encrypted":{"type":"boolean","description":"The encryption status of the component."},"kmsKeyId":{"type":"string","description":"The KMS key identifier used to encrypt the component.","replaceOnChanges":true},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ComponentLatestVersion","description":"The latest version references of the component."},"name":{"type":"string","description":"The name of the component.","replaceOnChanges":true},"platform":{"$ref":"#/types/aws-native:imagebuilder:ComponentPlatform","description":"The platform of the component.","replaceOnChanges":true},"supportedOsVersions":{"type":"array","items":{"type":"string"},"description":"The operating system (OS) version supported by the component.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the component."},"type":{"$ref":"#/types/aws-native:imagebuilder:ComponentType","description":"The type of the component denotes whether the component is used to build the image or only to test it. "},"uri":{"type":"string","description":"The uri of the component.","replaceOnChanges":true},"version":{"type":"string","description":"The version of the component.","replaceOnChanges":true}},"type":"object","required":["arn","encrypted","latestVersion","name","platform","type","version"],"inputProperties":{"changeDescription":{"type":"string","description":"The change description of the component."},"data":{"type":"string","description":"The data of the component."},"description":{"type":"string","description":"The description of the component."},"kmsKeyId":{"type":"string","description":"The KMS key identifier used to encrypt the component."},"name":{"type":"string","description":"The name of the component."},"platform":{"$ref":"#/types/aws-native:imagebuilder:ComponentPlatform","description":"The platform of the component."},"supportedOsVersions":{"type":"array","items":{"type":"string"},"description":"The operating system (OS) version supported by the component."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the component."},"uri":{"type":"string","description":"The uri of the component."},"version":{"type":"string","description":"The version of the component."}},"requiredInputs":["platform","version"]},"aws-native:imagebuilder:ContainerRecipe":{"description":"Resource schema for AWS::ImageBuilder::ContainerRecipe","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container recipe."},"components":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeComponentConfiguration"},"description":"Components for build and test that are included in the container recipe.","replaceOnChanges":true},"containerType":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeContainerType","description":"Specifies the type of container, such as Docker.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the container recipe.","replaceOnChanges":true},"dockerfileTemplateData":{"type":"string","description":"Dockerfiles are text documents that are used to build Docker containers, and ensure that they contain all of the elements required by the application running inside. The template data consists of contextual variables where Image Builder places build information or scripts, based on your container image recipe.","replaceOnChanges":true},"dockerfileTemplateUri":{"type":"string","description":"The S3 URI for the Dockerfile that will be used to build your container image.","replaceOnChanges":true},"imageOsVersionOverride":{"type":"string","description":"Specifies the operating system version for the source image.","replaceOnChanges":true},"instanceConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeInstanceConfiguration","description":"A group of options that can be used to configure an instance for building and testing container images.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"Identifies which KMS key is used to encrypt the container image.","replaceOnChanges":true},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeLatestVersion","description":"The latest version references of the container recipe."},"name":{"type":"string","description":"The name of the container recipe.","replaceOnChanges":true},"parentImage":{"type":"string","description":"The source image for the container recipe.","replaceOnChanges":true},"platformOverride":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipePlatformOverride","description":"Specifies the operating system platform when you use a custom source image.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags that are attached to the container recipe."},"targetRepository":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeTargetContainerRepository","description":"The destination repository for the container image.","replaceOnChanges":true},"version":{"type":"string","description":"The semantic version of the container recipe (\u003cmajor\u003e.\u003cminor\u003e.\u003cpatch\u003e).","replaceOnChanges":true},"workingDirectory":{"type":"string","description":"The working directory to be used during build and test workflows.","replaceOnChanges":true}},"type":"object","required":["arn","latestVersion"],"inputProperties":{"components":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeComponentConfiguration"},"description":"Components for build and test that are included in the container recipe."},"containerType":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeContainerType","description":"Specifies the type of container, such as Docker."},"description":{"type":"string","description":"The description of the container recipe."},"dockerfileTemplateData":{"type":"string","description":"Dockerfiles are text documents that are used to build Docker containers, and ensure that they contain all of the elements required by the application running inside. The template data consists of contextual variables where Image Builder places build information or scripts, based on your container image recipe."},"dockerfileTemplateUri":{"type":"string","description":"The S3 URI for the Dockerfile that will be used to build your container image."},"imageOsVersionOverride":{"type":"string","description":"Specifies the operating system version for the source image."},"instanceConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeInstanceConfiguration","description":"A group of options that can be used to configure an instance for building and testing container images."},"kmsKeyId":{"type":"string","description":"Identifies which KMS key is used to encrypt the container image."},"name":{"type":"string","description":"The name of the container recipe."},"parentImage":{"type":"string","description":"The source image for the container recipe."},"platformOverride":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipePlatformOverride","description":"Specifies the operating system platform when you use a custom source image."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags that are attached to the container recipe."},"targetRepository":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeTargetContainerRepository","description":"The destination repository for the container image."},"version":{"type":"string","description":"The semantic version of the container recipe (\u003cmajor\u003e.\u003cminor\u003e.\u003cpatch\u003e)."},"workingDirectory":{"type":"string","description":"The working directory to be used during build and test workflows."}}},"aws-native:imagebuilder:DistributionConfiguration":{"description":"Resource schema for AWS::ImageBuilder::DistributionConfiguration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution configuration."},"description":{"type":"string","description":"The description of the distribution configuration."},"distributions":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationDistribution"},"description":"The distributions of the distribution configuration."},"name":{"type":"string","description":"The name of the distribution configuration.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the component."}},"type":"object","required":["arn","distributions","name"],"inputProperties":{"description":{"type":"string","description":"The description of the distribution configuration."},"distributions":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationDistribution"},"description":"The distributions of the distribution configuration."},"name":{"type":"string","description":"The name of the distribution configuration."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the component."}},"requiredInputs":["distributions"]},"aws-native:imagebuilder:Image":{"description":"Resource schema for AWS::ImageBuilder::Image","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image."},"containerRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container recipe that defines how images are configured and tested.","replaceOnChanges":true},"deletionSettings":{"$ref":"#/types/aws-native:imagebuilder:ImageDeletionSettings","description":"The deletion settings of the image, indicating whether to delete the underlying resources in addition to the image."},"distributionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution configuration.","replaceOnChanges":true},"enhancedImageMetadataEnabled":{"type":"boolean","description":"Collects additional information about the image being created, including the operating system (OS) version and package list.","replaceOnChanges":true},"executionRole":{"type":"string","description":"The execution role name/ARN for the image build, if provided"},"imageId":{"type":"string","description":"The AMI ID of the EC2 AMI in current region."},"imagePipelineExecutionSettings":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineExecutionSettings","description":"The image pipeline execution settings of the image."},"imageRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed.","replaceOnChanges":true},"imageScanningConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageScanningConfiguration","description":"Contains settings for vulnerability scans.","replaceOnChanges":true},"imageTestsConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageTestsConfiguration","description":"The image tests configuration used when creating this image.","replaceOnChanges":true},"imageUri":{"type":"string","description":"URI for containers created in current Region with default ECR image tag"},"infrastructureConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure configuration.","replaceOnChanges":true},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ImageLatestVersion","description":"The latest version references of the image."},"loggingConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageLoggingConfiguration","description":"The logging configuration settings for the image."},"name":{"type":"string","description":"The name of the image."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the image."},"workflows":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageWorkflowConfiguration"},"description":"Workflows to define the image build process","replaceOnChanges":true}},"type":"object","required":["arn","imageId","imageUri","latestVersion","name"],"inputProperties":{"containerRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container recipe that defines how images are configured and tested."},"deletionSettings":{"$ref":"#/types/aws-native:imagebuilder:ImageDeletionSettings","description":"The deletion settings of the image, indicating whether to delete the underlying resources in addition to the image."},"distributionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution configuration."},"enhancedImageMetadataEnabled":{"type":"boolean","description":"Collects additional information about the image being created, including the operating system (OS) version and package list."},"executionRole":{"type":"string","description":"The execution role name/ARN for the image build, if provided"},"imagePipelineExecutionSettings":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineExecutionSettings","description":"The image pipeline execution settings of the image."},"imageRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed."},"imageScanningConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageScanningConfiguration","description":"Contains settings for vulnerability scans."},"imageTestsConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageTestsConfiguration","description":"The image tests configuration used when creating this image."},"infrastructureConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure configuration."},"loggingConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageLoggingConfiguration","description":"The logging configuration settings for the image."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the image."},"workflows":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageWorkflowConfiguration"},"description":"Workflows to define the image build process"}}},"aws-native:imagebuilder:ImagePipeline":{"description":"Resource schema for AWS::ImageBuilder::ImagePipeline","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image pipeline."},"containerRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container recipe that defines how images are configured and tested."},"deploymentId":{"type":"string","description":"The deployment ID of the pipeline, used for resource create/update triggers."},"description":{"type":"string","description":"The description of the image pipeline."},"distributionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution configuration associated with this image pipeline."},"enhancedImageMetadataEnabled":{"type":"boolean","description":"Collects additional information about the image being created, including the operating system (OS) version and package list."},"executionRole":{"type":"string","description":"The execution role name/ARN for the image build, if provided"},"imageRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed."},"imageScanningConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineImageScanningConfiguration","description":"Contains settings for vulnerability scans."},"imageTestsConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineImageTestsConfiguration","description":"The image tests configuration of the image pipeline."},"infrastructureConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure configuration associated with this image pipeline."},"loggingConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelinePipelineLoggingConfiguration","description":"The logging configuration settings for the image pipeline."},"name":{"type":"string","description":"The name of the image pipeline.","replaceOnChanges":true},"schedule":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineSchedule","description":"The schedule of the image pipeline."},"status":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineStatus","description":"The status of the image pipeline."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags of this image pipeline."},"workflows":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineWorkflowConfiguration"},"description":"Workflows to define the image build process"}},"type":"object","required":["arn","deploymentId"],"inputProperties":{"containerRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container recipe that defines how images are configured and tested."},"description":{"type":"string","description":"The description of the image pipeline."},"distributionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution configuration associated with this image pipeline."},"enhancedImageMetadataEnabled":{"type":"boolean","description":"Collects additional information about the image being created, including the operating system (OS) version and package list."},"executionRole":{"type":"string","description":"The execution role name/ARN for the image build, if provided"},"imageRecipeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed."},"imageScanningConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineImageScanningConfiguration","description":"Contains settings for vulnerability scans."},"imageTestsConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineImageTestsConfiguration","description":"The image tests configuration of the image pipeline."},"infrastructureConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure configuration associated with this image pipeline."},"loggingConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelinePipelineLoggingConfiguration","description":"The logging configuration settings for the image pipeline."},"name":{"type":"string","description":"The name of the image pipeline."},"schedule":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineSchedule","description":"The schedule of the image pipeline."},"status":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineStatus","description":"The status of the image pipeline."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags of this image pipeline."},"workflows":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineWorkflowConfiguration"},"description":"Workflows to define the image build process"}}},"aws-native:imagebuilder:ImageRecipe":{"description":"Resource schema for AWS::ImageBuilder::ImageRecipe","properties":{"additionalInstanceConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeAdditionalInstanceConfiguration","description":"Specify additional settings and launch scripts for your build instances."},"amiTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to the AMI created by this image recipe."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image recipe."},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeInstanceBlockDeviceMapping"},"description":"The block device mappings to apply when creating images from this recipe.","replaceOnChanges":true},"components":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeComponentConfiguration"},"description":"The components of the image recipe.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the image recipe.","replaceOnChanges":true},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeLatestVersion","description":"The latest version references of the image recipe."},"name":{"type":"string","description":"The name of the image recipe.","replaceOnChanges":true},"parentImage":{"type":"string","description":"The parent image of the image recipe.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags of the image recipe."},"version":{"type":"string","description":"The version of the image recipe.","replaceOnChanges":true},"workingDirectory":{"type":"string","description":"The working directory to be used during build and test workflows.","replaceOnChanges":true}},"type":"object","required":["arn","latestVersion","name","parentImage","version"],"inputProperties":{"additionalInstanceConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeAdditionalInstanceConfiguration","description":"Specify additional settings and launch scripts for your build instances."},"amiTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to the AMI created by this image recipe."},"blockDeviceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeInstanceBlockDeviceMapping"},"description":"The block device mappings to apply when creating images from this recipe."},"components":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeComponentConfiguration"},"description":"The components of the image recipe."},"description":{"type":"string","description":"The description of the image recipe."},"name":{"type":"string","description":"The name of the image recipe."},"parentImage":{"type":"string","description":"The parent image of the image recipe."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags of the image recipe."},"version":{"type":"string","description":"The version of the image recipe."},"workingDirectory":{"type":"string","description":"The working directory to be used during build and test workflows."}},"requiredInputs":["parentImage","version"]},"aws-native:imagebuilder:InfrastructureConfiguration":{"description":"Resource schema for AWS::ImageBuilder::InfrastructureConfiguration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure configuration."},"description":{"type":"string","description":"The description of the infrastructure configuration."},"instanceMetadataOptions":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationInstanceMetadataOptions","description":"The instance metadata option settings for the infrastructure configuration."},"instanceProfileName":{"type":"string","description":"The instance profile of the infrastructure configuration."},"instanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types of the infrastructure configuration."},"keyPair":{"type":"string","description":"The EC2 key pair of the infrastructure configuration.."},"logging":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationLogging","description":"The logging configuration of the infrastructure configuration."},"name":{"type":"string","description":"The name of the infrastructure configuration.","replaceOnChanges":true},"placement":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationPlacement","description":"The placement option settings for the infrastructure configuration."},"resourceTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags attached to the resource created by Image Builder."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security group IDs of the infrastructure configuration."},"snsTopicArn":{"type":"string","description":"The SNS Topic Amazon Resource Name (ARN) of the infrastructure configuration."},"subnetId":{"type":"string","description":"The subnet ID of the infrastructure configuration."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the component."},"terminateInstanceOnFailure":{"type":"boolean","description":"The terminate instance on failure configuration of the infrastructure configuration."}},"type":"object","required":["arn","instanceProfileName","name"],"inputProperties":{"description":{"type":"string","description":"The description of the infrastructure configuration."},"instanceMetadataOptions":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationInstanceMetadataOptions","description":"The instance metadata option settings for the infrastructure configuration."},"instanceProfileName":{"type":"string","description":"The instance profile of the infrastructure configuration."},"instanceTypes":{"type":"array","items":{"type":"string"},"description":"The instance types of the infrastructure configuration."},"keyPair":{"type":"string","description":"The EC2 key pair of the infrastructure configuration.."},"logging":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationLogging","description":"The logging configuration of the infrastructure configuration."},"name":{"type":"string","description":"The name of the infrastructure configuration."},"placement":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationPlacement","description":"The placement option settings for the infrastructure configuration."},"resourceTags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags attached to the resource created by Image Builder."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security group IDs of the infrastructure configuration."},"snsTopicArn":{"type":"string","description":"The SNS Topic Amazon Resource Name (ARN) of the infrastructure configuration."},"subnetId":{"type":"string","description":"The subnet ID of the infrastructure configuration."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the component."},"terminateInstanceOnFailure":{"type":"boolean","description":"The terminate instance on failure configuration of the infrastructure configuration."}},"requiredInputs":["instanceProfileName"]},"aws-native:imagebuilder:LifecyclePolicy":{"description":"Resource schema for AWS::ImageBuilder::LifecyclePolicy","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the lifecycle policy."},"description":{"type":"string","description":"The description of the lifecycle policy."},"executionRole":{"type":"string","description":"The execution role of the lifecycle policy."},"name":{"type":"string","description":"The name of the lifecycle policy.","replaceOnChanges":true},"policyDetails":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyPolicyDetail"},"description":"The policy details of the lifecycle policy."},"resourceSelection":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyResourceSelection","description":"The resource selection of the lifecycle policy."},"resourceType":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyResourceType","description":"The resource type of the lifecycle policy."},"status":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyStatus","description":"The status of the lifecycle policy."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the lifecycle policy."}},"type":"object","required":["arn","executionRole","name","policyDetails","resourceSelection","resourceType"],"inputProperties":{"description":{"type":"string","description":"The description of the lifecycle policy."},"executionRole":{"type":"string","description":"The execution role of the lifecycle policy."},"name":{"type":"string","description":"The name of the lifecycle policy."},"policyDetails":{"type":"array","items":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyPolicyDetail"},"description":"The policy details of the lifecycle policy."},"resourceSelection":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyResourceSelection","description":"The resource selection of the lifecycle policy."},"resourceType":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyResourceType","description":"The resource type of the lifecycle policy."},"status":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyStatus","description":"The status of the lifecycle policy."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the lifecycle policy."}},"requiredInputs":["executionRole","policyDetails","resourceSelection","resourceType"]},"aws-native:imagebuilder:Workflow":{"description":"Resource schema for AWS::ImageBuilder::Workflow","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the workflow."},"changeDescription":{"type":"string","description":"The change description of the workflow.","replaceOnChanges":true},"data":{"type":"string","description":"The data of the workflow.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the workflow.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The KMS key identifier used to encrypt the workflow.","replaceOnChanges":true},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:WorkflowLatestVersion","description":"The latest version references of the workflow."},"name":{"type":"string","description":"The name of the workflow.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the workflow."},"type":{"$ref":"#/types/aws-native:imagebuilder:WorkflowType","description":"The type of the workflow denotes whether the workflow is used to build, test, or distribute.","replaceOnChanges":true},"uri":{"type":"string","description":"The uri of the workflow.","replaceOnChanges":true},"version":{"type":"string","description":"The version of the workflow.","replaceOnChanges":true}},"type":"object","required":["arn","latestVersion","name","type","version"],"inputProperties":{"changeDescription":{"type":"string","description":"The change description of the workflow."},"data":{"type":"string","description":"The data of the workflow."},"description":{"type":"string","description":"The description of the workflow."},"kmsKeyId":{"type":"string","description":"The KMS key identifier used to encrypt the workflow."},"name":{"type":"string","description":"The name of the workflow."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags associated with the workflow."},"type":{"$ref":"#/types/aws-native:imagebuilder:WorkflowType","description":"The type of the workflow denotes whether the workflow is used to build, test, or distribute."},"uri":{"type":"string","description":"The uri of the workflow."},"version":{"type":"string","description":"The version of the workflow."}},"requiredInputs":["type","version"]},"aws-native:index:ExtensionResource":{"description":"A special resource that enables deploying CloudFormation Extensions (third-party resources). An extension has to be pre-registered in your AWS account in order to use this resource.","properties":{"outputs":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"Dictionary of the extension resource attributes."}},"required":["outputs"],"inputProperties":{"autoNaming":{"$ref":"#/types/aws-native:index:AutoNaming","description":"Optional auto-naming specification for the resource.\nIf provided and the name is not specified manually, the provider will automatically generate a name based on the Pulumi resource name and a random suffix."},"createOnly":{"type":"array","items":{"type":"string"},"description":"Property names as defined by `createOnlyProperties` in the CloudFormation schema. Create-only properties can't be set during updates, so will not be included in patches even if they are also marked as write-only, and will cause an error if attempted to be updated. Therefore any property here should also be included in the `replaceOnChanges` resource option too.\nIn the CloudFormation schema these are fully qualified property paths (e.g. `/properties/AccessToken`) whereas here we only include the top-level property name (e.g. `AccessToken`)."},"properties":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"Property bag containing the properties for the resource. These should be defined using the casing expected by the CloudControl API as these values are sent exact as provided."},"tagsProperty":{"type":"string","description":"Optional name of the property containing the tags. Defaults to \"Tags\" if the `tagsStyle` is set to either \"stringMap\" or \"keyValueArray\". This is used to apply default tags to the resource and can be ignored if not using default tags."},"tagsStyle":{"type":"string","description":"Optional style of tags this resource uses. Valid values are \"stringMap\", \"keyValueArray\" or \"none\". Defaults to `keyValueArray` if `tagsProperty` is set. This is used to apply default tags to the resource and can be ignored if not using default tags."},"type":{"type":"string","description":"CloudFormation type name. This has three parts, each separated by two colons. For AWS resources this starts with `AWS::` e.g. `AWS::Logs::LogGroup`. Third party resources should use a namespace prefix e.g. `MyCompany::MyService::MyResource`.","replaceOnChanges":true},"writeOnly":{"type":"array","items":{"type":"string"},"description":"Property names as defined by `writeOnlyProperties` in the CloudFormation schema. Write-only properties are not returned during read operations and have to be included in all update operations as CloudControl itself can't read their previous values.\nIn the CloudFormation schema these are fully qualified property paths (e.g. `/properties/AccessToken`) whereas here we only include the top-level property name (e.g. `AccessToken`)."}},"requiredInputs":["type","properties"]},"aws-native:inspector:AssessmentTarget":{"description":"Resource Type definition for AWS::Inspector::AssessmentTarget","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the assessment target that is created."},"assessmentTargetName":{"type":"string","description":"The name of the Amazon Inspector assessment target. The name must be unique within the AWS account .","replaceOnChanges":true},"resourceGroupArn":{"type":"string","description":"The ARN that specifies the resource group that is used to create the assessment target. If `resourceGroupArn` is not specified, all EC2 instances in the current AWS account and Region are included in the assessment target."}},"type":"object","required":["arn"],"inputProperties":{"assessmentTargetName":{"type":"string","description":"The name of the Amazon Inspector assessment target. The name must be unique within the AWS account ."},"resourceGroupArn":{"type":"string","description":"The ARN that specifies the resource group that is used to create the assessment target. If `resourceGroupArn` is not specified, all EC2 instances in the current AWS account and Region are included in the assessment target."}}},"aws-native:inspector:AssessmentTemplate":{"description":"Resource Type definition for AWS::Inspector::AssessmentTemplate","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the assessment template that is created."},"assessmentTargetArn":{"type":"string","description":"The ARN of the assessment target to be included in the assessment template.","replaceOnChanges":true},"assessmentTemplateName":{"type":"string","description":"The user-defined name that identifies the assessment template that you want to create. You can create several assessment templates for the same assessment target. The names of the assessment templates that correspond to a particular assessment target must be unique.","replaceOnChanges":true},"durationInSeconds":{"type":"integer","description":"The duration of the assessment run in seconds.","replaceOnChanges":true},"rulesPackageArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the rules packages that you want to use in the assessment template.","replaceOnChanges":true},"userAttributesForFindings":{"type":"array","items":{"$ref":"#/types/aws-native:inspector:AssessmentTemplateTag"},"description":"The user-defined attributes that are assigned to every finding that is generated by the assessment run that uses this assessment template. Within an assessment template, each key must be unique.","replaceOnChanges":true}},"type":"object","required":["arn","assessmentTargetArn","durationInSeconds","rulesPackageArns"],"inputProperties":{"assessmentTargetArn":{"type":"string","description":"The ARN of the assessment target to be included in the assessment template."},"assessmentTemplateName":{"type":"string","description":"The user-defined name that identifies the assessment template that you want to create. You can create several assessment templates for the same assessment target. The names of the assessment templates that correspond to a particular assessment target must be unique."},"durationInSeconds":{"type":"integer","description":"The duration of the assessment run in seconds."},"rulesPackageArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the rules packages that you want to use in the assessment template."},"userAttributesForFindings":{"type":"array","items":{"$ref":"#/types/aws-native:inspector:AssessmentTemplateTag"},"description":"The user-defined attributes that are assigned to every finding that is generated by the assessment run that uses this assessment template. Within an assessment template, each key must be unique."}},"requiredInputs":["assessmentTargetArn","durationInSeconds","rulesPackageArns"]},"aws-native:inspector:ResourceGroup":{"description":"Resource Type definition for AWS::Inspector::ResourceGroup","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the resource group that is created."},"resourceGroupTags":{"type":"array","items":{"$ref":"#/types/aws-native:inspector:ResourceGroupTag"},"description":"The tags (key and value pairs) that will be associated with the resource group.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","replaceOnChanges":true}},"type":"object","required":["arn","resourceGroupTags"],"inputProperties":{"resourceGroupTags":{"type":"array","items":{"$ref":"#/types/aws-native:inspector:ResourceGroupTag"},"description":"The tags (key and value pairs) that will be associated with the resource group.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["resourceGroupTags"]},"aws-native:inspectorv2:CisScanConfiguration":{"description":"CIS Scan Configuration resource schema","properties":{"arn":{"type":"string","description":"CIS Scan configuration unique identifier"},"scanName":{"type":"string","description":"Name of the scan"},"schedule":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationSchedule","description":"The CIS scan configuration's schedule."},"securityLevel":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationCisSecurityLevel","description":"The CIS scan configuration's CIS Benchmark level."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The CIS scan configuration's tags."},"targets":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationCisTargets","description":"The CIS scan configuration's targets."}},"type":"object","required":["arn","scanName","schedule","securityLevel","targets"],"inputProperties":{"scanName":{"type":"string","description":"Name of the scan"},"schedule":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationSchedule","description":"The CIS scan configuration's schedule."},"securityLevel":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationCisSecurityLevel","description":"The CIS scan configuration's CIS Benchmark level."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The CIS scan configuration's tags."},"targets":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationCisTargets","description":"The CIS scan configuration's targets."}},"requiredInputs":["scanName","schedule","securityLevel","targets"]},"aws-native:inspectorv2:CodeSecurityIntegration":{"description":"Inspector CodeSecurityIntegration resource schema","properties":{"arn":{"type":"string","description":"Code Security Integration ARN"},"authorizationUrl":{"type":"string","description":"Authorization URL for OAuth flow"},"createIntegrationDetails":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationCreateDetails","description":"Create Integration Details","replaceOnChanges":true},"createdAt":{"type":"string","description":"Creation timestamp"},"lastUpdatedAt":{"type":"string","description":"Last update timestamp"},"name":{"type":"string","description":"Code Security Integration name"},"status":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationIntegrationStatus","description":"Integration Status"},"statusReason":{"type":"string","description":"Reason for the current status"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to the code security integration.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationIntegrationType","description":"Integration Type"},"updateIntegrationDetails":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationUpdateDetails","description":"Update Integration Details"}},"type":"object","required":["arn","authorizationUrl","createdAt","lastUpdatedAt","status","statusReason"],"inputProperties":{"createIntegrationDetails":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationCreateDetails","description":"Create Integration Details"},"name":{"type":"string","description":"Code Security Integration name"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to the code security integration."},"type":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationIntegrationType","description":"Integration Type"},"updateIntegrationDetails":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationUpdateDetails","description":"Update Integration Details"}}},"aws-native:inspectorv2:CodeSecurityScanConfiguration":{"description":"Inspector CodeSecurityScanConfiguration resource schema","properties":{"arn":{"type":"string","description":"Code Security Scan Configuration ARN"},"configuration":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfiguration","description":"Code Security Scan Configuration"},"level":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationConfigurationLevel","description":"Configuration Level","replaceOnChanges":true},"name":{"type":"string","description":"Code Security Scan Configuration name","replaceOnChanges":true},"scopeSettings":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationScopeSettings","description":"Scope Settings","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to the scan configuration.","replaceOnChanges":true}},"type":"object","required":["arn"],"inputProperties":{"configuration":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfiguration","description":"Code Security Scan Configuration"},"level":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationConfigurationLevel","description":"Configuration Level"},"name":{"type":"string","description":"Code Security Scan Configuration name"},"scopeSettings":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfigurationScopeSettings","description":"Scope Settings"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to apply to the scan configuration."}}},"aws-native:inspectorv2:Filter":{"description":"Inspector Filter resource schema","properties":{"arn":{"type":"string","description":"Findings filter ARN."},"description":{"type":"string","description":"Findings filter description."},"filterAction":{"$ref":"#/types/aws-native:inspectorv2:FilterAction","description":"Findings filter action."},"filterCriteria":{"$ref":"#/types/aws-native:inspectorv2:FilterCriteria","description":"Findings filter criteria."},"name":{"type":"string","description":"Findings filter name."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags attached to the filter."}},"type":"object","required":["arn","filterAction","filterCriteria","name"],"inputProperties":{"description":{"type":"string","description":"Findings filter description."},"filterAction":{"$ref":"#/types/aws-native:inspectorv2:FilterAction","description":"Findings filter action."},"filterCriteria":{"$ref":"#/types/aws-native:inspectorv2:FilterCriteria","description":"Findings filter criteria."},"name":{"type":"string","description":"Findings filter name."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags attached to the filter."}},"requiredInputs":["filterAction","filterCriteria"]},"aws-native:internetmonitor:Monitor":{"description":"Represents a monitor, which defines the monitoring boundaries for measurements that Internet Monitor publishes information about for an application","properties":{"createdAt":{"type":"string","description":"The time when the monitor was created."},"healthEventsConfig":{"$ref":"#/types/aws-native:internetmonitor:MonitorHealthEventsConfig","description":"A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."},"includeLinkedAccounts":{"type":"boolean","description":"A boolean option that you can set to `TRUE` to include monitors for linked accounts in a list of monitors, when you've set up cross-account sharing in Internet Monitor. You configure cross-account sharing by using Amazon CloudWatch Observability Access Manager. For more information, see [Internet Monitor cross-account observability](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cwim-cross-account.html) in the Amazon CloudWatch User Guide."},"internetMeasurementsLogDelivery":{"$ref":"#/types/aws-native:internetmonitor:MonitorInternetMeasurementsLogDelivery","description":"Publish internet measurements for a monitor for all city-networks (up to the 500,000 service limit) to another location, such as an Amazon S3 bucket. Measurements are also published to Amazon CloudWatch Logs for the first 500 (by traffic volume) city-networks (client locations and ASNs, typically internet service providers or ISPs)."},"linkedAccountId":{"type":"string","description":"The account ID for an account that you've set up cross-account sharing for in Internet Monitor. You configure cross-account sharing by using Amazon CloudWatch Observability Access Manager. For more information, see [Internet Monitor cross-account observability](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cwim-cross-account.html) in the Amazon CloudWatch User Guide."},"maxCityNetworksToMonitor":{"type":"integer","description":"The maximum number of city-networks to monitor for your resources. A city-network is the location (city) where clients access your application resources from and the network, such as an internet service provider, that clients access the resources through.\n\nFor more information, see [Choosing a city-network maximum value](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/IMCityNetworksMaximum.html) in *Using Amazon CloudWatch Internet Monitor* ."},"modifiedAt":{"type":"string","description":"The last time that the monitor was modified."},"monitorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the monitor."},"monitorName":{"type":"string","description":"The name of the monitor. A monitor name can contain only alphanumeric characters, dashes (-), periods (.), and underscores (_).","replaceOnChanges":true},"processingStatus":{"$ref":"#/types/aws-native:internetmonitor:MonitorProcessingStatusCode","description":"The health of data processing for the monitor. For more information, see `ProcessingStatus` under [MonitorListMember](https://docs.aws.amazon.com/internet-monitor/latest/api/API_MonitorListMember.html) in the *Amazon CloudWatch Internet Monitor API Reference* ."},"processingStatusInfo":{"type":"string","description":"Additional information about the health of the data processing for the monitor."},"resources":{"type":"array","items":{"type":"string"},"description":"The resources that have been added for the monitor, listed by their Amazon Resource Names (ARNs). Use this option to add or remove resources when making an update.\n\n\u003e Be aware that if you include content in the `Resources` field when you update a monitor, the `ResourcesToAdd` and `ResourcesToRemove` fields must be empty."},"resourcesToAdd":{"type":"array","items":{"type":"string"},"description":"The resources to include in a monitor, which you provide as a set of Amazon Resource Names (ARNs). Resources can be Amazon Virtual Private Cloud VPCs, Network Load Balancers (NLBs), Amazon CloudFront distributions, or Amazon WorkSpaces directories.\n\nYou can add a combination of VPCs and CloudFront distributions, or you can add WorkSpaces directories, or you can add NLBs. You can't add NLBs or WorkSpaces directories together with any other resources.\n\nIf you add only VPC resources, at least one VPC must have an Internet Gateway attached to it, to make sure that it has internet connectivity.\n\n\u003e You can specify this field for a monitor update only if the `Resources` field is empty."},"resourcesToRemove":{"type":"array","items":{"type":"string"},"description":"The resources to remove from a monitor, which you provide as a set of Amazon Resource Names (ARNs)\n\n\u003e You can specify this field for a monitor update only if the `Resources` field is empty."},"status":{"$ref":"#/types/aws-native:internetmonitor:MonitorConfigState","description":"The status of a monitor. The accepted values that you can specify for `Status` are `ACTIVE` and `INACTIVE` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for a monitor, listed as a set of *key:value* pairs."},"trafficPercentageToMonitor":{"type":"integer","description":"The percentage of the internet-facing traffic for your application that you want to monitor. You can also, optionally, set a limit for the number of city-networks (client locations and ASNs, typically internet service providers) that Internet Monitor will monitor traffic for. The city-networks maximum limit caps the number of city-networks that Internet Monitor monitors for your application, regardless of the percentage of traffic that you choose to monitor."}},"type":"object","required":["createdAt","modifiedAt","monitorArn","monitorName","processingStatus","processingStatusInfo"],"inputProperties":{"healthEventsConfig":{"$ref":"#/types/aws-native:internetmonitor:MonitorHealthEventsConfig","description":"A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."},"includeLinkedAccounts":{"type":"boolean","description":"A boolean option that you can set to `TRUE` to include monitors for linked accounts in a list of monitors, when you've set up cross-account sharing in Internet Monitor. You configure cross-account sharing by using Amazon CloudWatch Observability Access Manager. For more information, see [Internet Monitor cross-account observability](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cwim-cross-account.html) in the Amazon CloudWatch User Guide."},"internetMeasurementsLogDelivery":{"$ref":"#/types/aws-native:internetmonitor:MonitorInternetMeasurementsLogDelivery","description":"Publish internet measurements for a monitor for all city-networks (up to the 500,000 service limit) to another location, such as an Amazon S3 bucket. Measurements are also published to Amazon CloudWatch Logs for the first 500 (by traffic volume) city-networks (client locations and ASNs, typically internet service providers or ISPs)."},"linkedAccountId":{"type":"string","description":"The account ID for an account that you've set up cross-account sharing for in Internet Monitor. You configure cross-account sharing by using Amazon CloudWatch Observability Access Manager. For more information, see [Internet Monitor cross-account observability](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cwim-cross-account.html) in the Amazon CloudWatch User Guide."},"maxCityNetworksToMonitor":{"type":"integer","description":"The maximum number of city-networks to monitor for your resources. A city-network is the location (city) where clients access your application resources from and the network, such as an internet service provider, that clients access the resources through.\n\nFor more information, see [Choosing a city-network maximum value](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/IMCityNetworksMaximum.html) in *Using Amazon CloudWatch Internet Monitor* ."},"monitorName":{"type":"string","description":"The name of the monitor. A monitor name can contain only alphanumeric characters, dashes (-), periods (.), and underscores (_)."},"resources":{"type":"array","items":{"type":"string"},"description":"The resources that have been added for the monitor, listed by their Amazon Resource Names (ARNs). Use this option to add or remove resources when making an update.\n\n\u003e Be aware that if you include content in the `Resources` field when you update a monitor, the `ResourcesToAdd` and `ResourcesToRemove` fields must be empty."},"resourcesToAdd":{"type":"array","items":{"type":"string"},"description":"The resources to include in a monitor, which you provide as a set of Amazon Resource Names (ARNs). Resources can be Amazon Virtual Private Cloud VPCs, Network Load Balancers (NLBs), Amazon CloudFront distributions, or Amazon WorkSpaces directories.\n\nYou can add a combination of VPCs and CloudFront distributions, or you can add WorkSpaces directories, or you can add NLBs. You can't add NLBs or WorkSpaces directories together with any other resources.\n\nIf you add only VPC resources, at least one VPC must have an Internet Gateway attached to it, to make sure that it has internet connectivity.\n\n\u003e You can specify this field for a monitor update only if the `Resources` field is empty."},"resourcesToRemove":{"type":"array","items":{"type":"string"},"description":"The resources to remove from a monitor, which you provide as a set of Amazon Resource Names (ARNs)\n\n\u003e You can specify this field for a monitor update only if the `Resources` field is empty."},"status":{"$ref":"#/types/aws-native:internetmonitor:MonitorConfigState","description":"The status of a monitor. The accepted values that you can specify for `Status` are `ACTIVE` and `INACTIVE` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for a monitor, listed as a set of *key:value* pairs."},"trafficPercentageToMonitor":{"type":"integer","description":"The percentage of the internet-facing traffic for your application that you want to monitor. You can also, optionally, set a limit for the number of city-networks (client locations and ASNs, typically internet service providers) that Internet Monitor will monitor traffic for. The city-networks maximum limit caps the number of city-networks that Internet Monitor monitors for your application, regardless of the percentage of traffic that you choose to monitor."}}},"aws-native:invoicing:InvoiceUnit":{"description":"An invoice unit is a set of mutually exclusive accounts that correspond to your business entity. Invoice units allow you to separate AWS account costs and configures your invoice for each business entity.","properties":{"description":{"type":"string","description":"The assigned description for an invoice unit. This information can't be modified or deleted."},"invoiceReceiver":{"type":"string","description":"The account that receives invoices related to the invoice unit.","replaceOnChanges":true},"invoiceUnitArn":{"type":"string","description":"The ARN to identify an invoice unit. This information can't be modified or deleted."},"lastModified":{"type":"number","description":"The last time the invoice unit was updated. This is important to determine the version of invoice unit configuration used to create the invoices. Any invoice created after this modified time will use this invoice unit configuration."},"name":{"type":"string","description":"A unique name that is distinctive within your AWS .","replaceOnChanges":true},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag structure that contains a tag key and value."},"rule":{"$ref":"#/types/aws-native:invoicing:InvoiceUnitRule","description":"An `InvoiceUnitRule` object used the categorize invoice units."},"taxInheritanceDisabled":{"type":"boolean","description":"Whether the invoice unit based tax inheritance is/ should be enabled or disabled."}},"type":"object","required":["invoiceReceiver","invoiceUnitArn","lastModified","name","rule"],"inputProperties":{"description":{"type":"string","description":"The assigned description for an invoice unit. This information can't be modified or deleted."},"invoiceReceiver":{"type":"string","description":"The account that receives invoices related to the invoice unit."},"name":{"type":"string","description":"A unique name that is distinctive within your AWS ."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag structure that contains a tag key and value."},"rule":{"$ref":"#/types/aws-native:invoicing:InvoiceUnitRule","description":"An `InvoiceUnitRule` object used the categorize invoice units."},"taxInheritanceDisabled":{"type":"boolean","description":"Whether the invoice unit based tax inheritance is/ should be enabled or disabled."}},"requiredInputs":["invoiceReceiver","rule"]},"aws-native:iot:AccountAuditConfiguration":{"description":"Configures the Device Defender audit settings for this account. Settings include how audit notifications are sent and which audit checks are enabled or disabled.","properties":{"accountId":{"type":"string","description":"Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).","replaceOnChanges":true},"auditCheckConfigurations":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfigurations","description":"Specifies which audit checks are enabled and disabled for this account.\n\nSome data collection might start immediately when certain checks are enabled. When a check is disabled, any data collected so far in relation to the check is deleted. To disable a check, set the value of the `Enabled:` key to `false` .\n\nIf an enabled check is removed from the template, it will also be disabled.\n\nYou can't disable a check if it's used by any scheduled audit. You must delete the check from the scheduled audit or delete the scheduled audit itself to disable the check.\n\nFor more information on available audit checks see [AWS::IoT::AccountAuditConfiguration AuditCheckConfigurations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-accountauditconfiguration-auditcheckconfigurations.html)"},"auditNotificationTargetConfigurations":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditNotificationTargetConfigurations","description":"Information about the targets to which audit notifications are sent."},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit."}},"type":"object","required":["accountId","auditCheckConfigurations","roleArn"],"inputProperties":{"accountId":{"type":"string","description":"Your 12-digit account ID (used as the primary identifier for the CloudFormation resource)."},"auditCheckConfigurations":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfigurations","description":"Specifies which audit checks are enabled and disabled for this account.\n\nSome data collection might start immediately when certain checks are enabled. When a check is disabled, any data collected so far in relation to the check is deleted. To disable a check, set the value of the `Enabled:` key to `false` .\n\nIf an enabled check is removed from the template, it will also be disabled.\n\nYou can't disable a check if it's used by any scheduled audit. You must delete the check from the scheduled audit or delete the scheduled audit itself to disable the check.\n\nFor more information on available audit checks see [AWS::IoT::AccountAuditConfiguration AuditCheckConfigurations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-accountauditconfiguration-auditcheckconfigurations.html)"},"auditNotificationTargetConfigurations":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditNotificationTargetConfigurations","description":"Information about the targets to which audit notifications are sent."},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit."}},"requiredInputs":["accountId","auditCheckConfigurations","roleArn"]},"aws-native:iot:Authorizer":{"description":"Creates an authorizer.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the authorizer."},"authorizerFunctionArn":{"type":"string","description":"The authorizer's Lambda function ARN."},"authorizerName":{"type":"string","description":"The authorizer name.","replaceOnChanges":true},"enableCachingForHttp":{"type":"boolean","description":"When `true` , the result from the authorizer's Lambda function is cached for clients that use persistent HTTP connections. The results are cached for the time specified by the Lambda function in `refreshAfterInSeconds` . This value doesn't affect authorization of clients that use MQTT connections."},"signingDisabled":{"type":"boolean","description":"Specifies whether AWS IoT validates the token signature in an authorization request.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:iot:AuthorizerStatus","description":"The status of the authorizer.\n\nValid values: `ACTIVE` | `INACTIVE`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the custom authorizer.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: \u0026\u0026tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\""},"tokenKeyName":{"type":"string","description":"The key used to extract the token from the HTTP headers."},"tokenSigningPublicKeys":{"type":"object","additionalProperties":{"type":"string"},"description":"The public keys used to validate the token signature returned by your custom authentication service."}},"type":"object","required":["arn","authorizerFunctionArn"],"inputProperties":{"authorizerFunctionArn":{"type":"string","description":"The authorizer's Lambda function ARN."},"authorizerName":{"type":"string","description":"The authorizer name."},"enableCachingForHttp":{"type":"boolean","description":"When `true` , the result from the authorizer's Lambda function is cached for clients that use persistent HTTP connections. The results are cached for the time specified by the Lambda function in `refreshAfterInSeconds` . This value doesn't affect authorization of clients that use MQTT connections."},"signingDisabled":{"type":"boolean","description":"Specifies whether AWS IoT validates the token signature in an authorization request."},"status":{"$ref":"#/types/aws-native:iot:AuthorizerStatus","description":"The status of the authorizer.\n\nValid values: `ACTIVE` | `INACTIVE`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the custom authorizer.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: \u0026\u0026tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\""},"tokenKeyName":{"type":"string","description":"The key used to extract the token from the HTTP headers."},"tokenSigningPublicKeys":{"type":"object","additionalProperties":{"type":"string"},"description":"The public keys used to validate the token signature returned by your custom authentication service."}},"requiredInputs":["authorizerFunctionArn"]},"aws-native:iot:BillingGroup":{"description":"Resource Type definition for AWS::IoT::BillingGroup","properties":{"arn":{"type":"string","description":"The ARN of the billing group."},"awsId":{"type":"string","description":"The ID of the billing group."},"billingGroupName":{"type":"string","description":"The name of the billing group.","replaceOnChanges":true},"billingGroupProperties":{"$ref":"#/types/aws-native:iot:BillingGroupPropertiesProperties","description":"The properties of the billing group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId"],"inputProperties":{"billingGroupName":{"type":"string","description":"The name of the billing group."},"billingGroupProperties":{"$ref":"#/types/aws-native:iot:BillingGroupPropertiesProperties","description":"The properties of the billing group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:iot:CaCertificate":{"description":"Registers a CA Certificate in IoT.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the CA certificate. For example:\n\n`{ \"Fn::GetAtt\": [\"MyCACertificate\", \"Arn\"] }`\n\nA value similar to the following is returned:\n\n`arn:aws:iot:us-east-1:123456789012:cacert/a6be6b84559801927e35a8f901fae08b5971d78d1562e29504ff9663b276a5f5`"},"autoRegistrationStatus":{"$ref":"#/types/aws-native:iot:CaCertificateAutoRegistrationStatus","description":"Whether the CA certificate is configured for auto registration of device certificates. Valid values are \"ENABLE\" and \"DISABLE\"."},"awsId":{"type":"string","description":"The CA certificate ID."},"caCertificatePem":{"type":"string","description":"The certificate data in PEM format.","replaceOnChanges":true},"certificateMode":{"$ref":"#/types/aws-native:iot:CaCertificateCertificateMode","description":"The mode of the CA.\n\nAll the device certificates that are registered using this CA will be registered in the same mode as the CA. For more information about certificate mode for device certificates, see [certificate mode](https://docs.aws.amazon.com//iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode) .\n\nValid values are \"DEFAULT\" and \"SNI_ONLY\".","replaceOnChanges":true},"registrationConfig":{"$ref":"#/types/aws-native:iot:CaCertificateRegistrationConfig","description":"Information about the registration configuration."},"removeAutoRegistration":{"type":"boolean","description":"If true, removes auto registration."},"status":{"$ref":"#/types/aws-native:iot:CaCertificateStatus","description":"The status of the CA certificate.\n\nValid values are \"ACTIVE\" and \"INACTIVE\"."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verificationCertificatePem":{"type":"string","description":"The private key verification certificate.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","caCertificatePem","status"],"inputProperties":{"autoRegistrationStatus":{"$ref":"#/types/aws-native:iot:CaCertificateAutoRegistrationStatus","description":"Whether the CA certificate is configured for auto registration of device certificates. Valid values are \"ENABLE\" and \"DISABLE\"."},"caCertificatePem":{"type":"string","description":"The certificate data in PEM format."},"certificateMode":{"$ref":"#/types/aws-native:iot:CaCertificateCertificateMode","description":"The mode of the CA.\n\nAll the device certificates that are registered using this CA will be registered in the same mode as the CA. For more information about certificate mode for device certificates, see [certificate mode](https://docs.aws.amazon.com//iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode) .\n\nValid values are \"DEFAULT\" and \"SNI_ONLY\"."},"registrationConfig":{"$ref":"#/types/aws-native:iot:CaCertificateRegistrationConfig","description":"Information about the registration configuration."},"removeAutoRegistration":{"type":"boolean","description":"If true, removes auto registration."},"status":{"$ref":"#/types/aws-native:iot:CaCertificateStatus","description":"The status of the CA certificate.\n\nValid values are \"ACTIVE\" and \"INACTIVE\"."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"verificationCertificatePem":{"type":"string","description":"The private key verification certificate."}},"requiredInputs":["caCertificatePem","status"]},"aws-native:iot:Certificate":{"description":"Use the AWS::IoT::Certificate resource to declare an AWS IoT X.509 certificate.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the certificate. For example:\n\n`{ \"Fn::GetAtt\": [\"MyCertificate\", \"Arn\"] }`\n\nA value similar to the following is returned:\n\n`arn:aws:iot:ap-southeast-2:123456789012:cert/a1234567b89c012d3e4fg567hij8k9l01mno1p23q45678901rs234567890t1u2`"},"awsId":{"type":"string","description":"The certificate ID."},"caCertificatePem":{"type":"string","description":"The CA certificate used to sign the device certificate being registered, not available when CertificateMode is SNI_ONLY.","replaceOnChanges":true},"certificateMode":{"$ref":"#/types/aws-native:iot:CertificateMode","description":"Specifies which mode of certificate registration to use with this resource. Valid options are DEFAULT with CaCertificatePem and CertificatePem, SNI_ONLY with CertificatePem, and Default with CertificateSigningRequest.\n\n`DEFAULT` : A certificate in `DEFAULT` mode is either generated by AWS IoT Core or registered with an issuer certificate authority (CA). Devices with certificates in `DEFAULT` mode aren't required to send the Server Name Indication (SNI) extension when connecting to AWS IoT Core . However, to use features such as custom domains and VPC endpoints, we recommend that you use the SNI extension when connecting to AWS IoT Core .\n\n`SNI_ONLY` : A certificate in `SNI_ONLY` mode is registered without an issuer CA. Devices with certificates in `SNI_ONLY` mode must send the SNI extension when connecting to AWS IoT Core .","replaceOnChanges":true},"certificatePem":{"type":"string","description":"The certificate data in PEM format. Requires SNI_ONLY for the certificate mode or the accompanying CACertificatePem for registration.","replaceOnChanges":true},"certificateSigningRequest":{"type":"string","description":"The certificate signing request (CSR).","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:iot:CertificateStatus","description":"The status of the certificate.\n\nValid values are ACTIVE, INACTIVE, REVOKED, PENDING_TRANSFER, and PENDING_ACTIVATION.\n\nThe status value REGISTER_INACTIVE is deprecated and should not be used."}},"type":"object","required":["arn","awsId","status"],"inputProperties":{"caCertificatePem":{"type":"string","description":"The CA certificate used to sign the device certificate being registered, not available when CertificateMode is SNI_ONLY."},"certificateMode":{"$ref":"#/types/aws-native:iot:CertificateMode","description":"Specifies which mode of certificate registration to use with this resource. Valid options are DEFAULT with CaCertificatePem and CertificatePem, SNI_ONLY with CertificatePem, and Default with CertificateSigningRequest.\n\n`DEFAULT` : A certificate in `DEFAULT` mode is either generated by AWS IoT Core or registered with an issuer certificate authority (CA). Devices with certificates in `DEFAULT` mode aren't required to send the Server Name Indication (SNI) extension when connecting to AWS IoT Core . However, to use features such as custom domains and VPC endpoints, we recommend that you use the SNI extension when connecting to AWS IoT Core .\n\n`SNI_ONLY` : A certificate in `SNI_ONLY` mode is registered without an issuer CA. Devices with certificates in `SNI_ONLY` mode must send the SNI extension when connecting to AWS IoT Core ."},"certificatePem":{"type":"string","description":"The certificate data in PEM format. Requires SNI_ONLY for the certificate mode or the accompanying CACertificatePem for registration."},"certificateSigningRequest":{"type":"string","description":"The certificate signing request (CSR)."},"status":{"$ref":"#/types/aws-native:iot:CertificateStatus","description":"The status of the certificate.\n\nValid values are ACTIVE, INACTIVE, REVOKED, PENDING_TRANSFER, and PENDING_ACTIVATION.\n\nThe status value REGISTER_INACTIVE is deprecated and should not be used."}},"requiredInputs":["status"]},"aws-native:iot:CertificateProvider":{"description":"Use the AWS::IoT::CertificateProvider resource to declare an AWS IoT Certificate Provider.","properties":{"accountDefaultForOperations":{"type":"array","items":{"$ref":"#/types/aws-native:iot:CertificateProviderOperation"},"description":"A list of the operations that the certificate provider will use to generate certificates. Valid value: `CreateCertificateFromCsr` ."},"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) for the certificate. For example:\n\n`{ \"Fn::GetAtt\": [\"MyCertificateProvider\", \"Arn\"] }`\n\nA value similar to the following is returned:\n\n`arn:aws:iot:ap-southeast-2:123456789012:certprovider/my-certificate-provider`"},"certificateProviderName":{"type":"string","description":"The name of the certificate provider.","replaceOnChanges":true},"lambdaFunctionArn":{"type":"string","description":"The ARN of the Lambda function."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["accountDefaultForOperations","arn","lambdaFunctionArn"],"inputProperties":{"accountDefaultForOperations":{"type":"array","items":{"$ref":"#/types/aws-native:iot:CertificateProviderOperation"},"description":"A list of the operations that the certificate provider will use to generate certificates. Valid value: `CreateCertificateFromCsr` ."},"certificateProviderName":{"type":"string","description":"The name of the certificate provider."},"lambdaFunctionArn":{"type":"string","description":"The ARN of the Lambda function."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["accountDefaultForOperations","lambdaFunctionArn"]},"aws-native:iot:Command":{"description":"Represents the resource definition of AWS IoT Command.","properties":{"commandArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the command."},"commandId":{"type":"string","description":"The unique identifier for the command.","replaceOnChanges":true},"createdAt":{"type":"string","description":"The date and time when the command was created."},"deprecated":{"type":"boolean","description":"A flag indicating whether the command is deprecated."},"description":{"type":"string","description":"The description of the command."},"displayName":{"type":"string","description":"The display name for the command."},"lastUpdatedAt":{"type":"string","description":"The date and time when the command was last updated."},"mandatoryParameters":{"type":"array","items":{"$ref":"#/types/aws-native:iot:CommandParameter"},"description":"The list of mandatory parameters for the command."},"namespace":{"$ref":"#/types/aws-native:iot:CommandNamespace","description":"The namespace to which the command belongs."},"payload":{"$ref":"#/types/aws-native:iot:CommandPayload","description":"The payload associated with the command."},"payloadTemplate":{"type":"string","description":"The payload template associated with the command.","replaceOnChanges":true},"pendingDeletion":{"type":"boolean","description":"A flag indicating whether the command is pending deletion."},"preprocessor":{"$ref":"#/types/aws-native:iot:CommandPreprocessor","description":"The command preprocessor configuration.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The customer role associated with the command."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be associated with the command."}},"type":"object","required":["commandArn","commandId"],"inputProperties":{"commandId":{"type":"string","description":"The unique identifier for the command."},"createdAt":{"type":"string","description":"The date and time when the command was created."},"deprecated":{"type":"boolean","description":"A flag indicating whether the command is deprecated."},"description":{"type":"string","description":"The description of the command."},"displayName":{"type":"string","description":"The display name for the command."},"lastUpdatedAt":{"type":"string","description":"The date and time when the command was last updated."},"mandatoryParameters":{"type":"array","items":{"$ref":"#/types/aws-native:iot:CommandParameter"},"description":"The list of mandatory parameters for the command."},"namespace":{"$ref":"#/types/aws-native:iot:CommandNamespace","description":"The namespace to which the command belongs."},"payload":{"$ref":"#/types/aws-native:iot:CommandPayload","description":"The payload associated with the command."},"payloadTemplate":{"type":"string","description":"The payload template associated with the command."},"pendingDeletion":{"type":"boolean","description":"A flag indicating whether the command is pending deletion."},"preprocessor":{"$ref":"#/types/aws-native:iot:CommandPreprocessor","description":"The command preprocessor configuration."},"roleArn":{"type":"string","description":"The customer role associated with the command."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to be associated with the command."}},"requiredInputs":["commandId"]},"aws-native:iot:CustomMetric":{"description":"A custom metric published by your devices to Device Defender.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var batteryPercentageMetric = new AwsNative.IoT.CustomMetric(\"batteryPercentageMetric\", new()\n    {\n        MetricName = \"batteryPercentage\",\n        DisplayName = \"Remaining battery percentage\",\n        MetricType = AwsNative.IoT.CustomMetricMetricType.Number,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iot\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iot.NewCustomMetric(ctx, \"batteryPercentageMetric\", \u0026iot.CustomMetricArgs{\n\t\t\tMetricName:  pulumi.String(\"batteryPercentage\"),\n\t\t\tDisplayName: pulumi.String(\"Remaining battery percentage\"),\n\t\t\tMetricType:  iot.CustomMetricMetricTypeNumber,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst batteryPercentageMetric = new aws_native.iot.CustomMetric(\"batteryPercentageMetric\", {\n    metricName: \"batteryPercentage\",\n    displayName: \"Remaining battery percentage\",\n    metricType: aws_native.iot.CustomMetricMetricType.Number,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbattery_percentage_metric = aws_native.iot.CustomMetric(\"batteryPercentageMetric\",\n    metric_name=\"batteryPercentage\",\n    display_name=\"Remaining battery percentage\",\n    metric_type=aws_native.iot.CustomMetricMetricType.NUMBER)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"displayName":{"type":"string","description":"Field represents a friendly name in the console for the custom metric; it doesn't have to be unique. Don't use this name as the metric identifier in the device metric report. Can be updated once defined."},"metricArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the custom metric."},"metricName":{"type":"string","description":"The name of the custom metric. This will be used in the metric report submitted from the device/thing. Shouldn't begin with aws: . Cannot be updated once defined.","replaceOnChanges":true},"metricType":{"$ref":"#/types/aws-native:iot:CustomMetricMetricType","description":"The type of the custom metric. Types include string-list, ip-address-list, number-list, and number.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["metricArn","metricType"],"inputProperties":{"displayName":{"type":"string","description":"Field represents a friendly name in the console for the custom metric; it doesn't have to be unique. Don't use this name as the metric identifier in the device metric report. Can be updated once defined."},"metricName":{"type":"string","description":"The name of the custom metric. This will be used in the metric report submitted from the device/thing. Shouldn't begin with aws: . Cannot be updated once defined."},"metricType":{"$ref":"#/types/aws-native:iot:CustomMetricMetricType","description":"The type of the custom metric. Types include string-list, ip-address-list, number-list, and number."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["metricType"]},"aws-native:iot:Dimension":{"description":"A dimension can be used to limit the scope of a metric used in a security profile for AWS IoT Device Defender.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var topicFilterForAuthMessagesDimension = new AwsNative.IoT.Dimension(\"topicFilterForAuthMessagesDimension\", new()\n    {\n        Name = \"TopicFilterForAuthMessages\",\n        Type = AwsNative.IoT.DimensionType.TopicFilter,\n        StringValues = new[]\n        {\n            \"device/+/auth\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Application\",\n                Value = \"SmartHome\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iot\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iot.NewDimension(ctx, \"topicFilterForAuthMessagesDimension\", \u0026iot.DimensionArgs{\n\t\t\tName: pulumi.String(\"TopicFilterForAuthMessages\"),\n\t\t\tType: iot.DimensionTypeTopicFilter,\n\t\t\tStringValues: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"device/+/auth\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Application\"),\n\t\t\t\t\tValue: pulumi.String(\"SmartHome\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst topicFilterForAuthMessagesDimension = new aws_native.iot.Dimension(\"topicFilterForAuthMessagesDimension\", {\n    name: \"TopicFilterForAuthMessages\",\n    type: aws_native.iot.DimensionType.TopicFilter,\n    stringValues: [\"device/+/auth\"],\n    tags: [{\n        key: \"Application\",\n        value: \"SmartHome\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntopic_filter_for_auth_messages_dimension = aws_native.iot.Dimension(\"topicFilterForAuthMessagesDimension\",\n    name=\"TopicFilterForAuthMessages\",\n    type=aws_native.iot.DimensionType.TOPIC_FILTER,\n    string_values=[\"device/+/auth\"],\n    tags=[{\n        \"key\": \"Application\",\n        \"value\": \"SmartHome\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN (Amazon resource name) of the created dimension."},"name":{"type":"string","description":"A unique identifier for the dimension.","replaceOnChanges":true},"stringValues":{"type":"array","items":{"type":"string"},"description":"Specifies the value or list of values for the dimension."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that can be used to manage the dimension."},"type":{"$ref":"#/types/aws-native:iot:DimensionType","description":"Specifies the type of the dimension.","replaceOnChanges":true}},"type":"object","required":["arn","stringValues","type"],"inputProperties":{"name":{"type":"string","description":"A unique identifier for the dimension."},"stringValues":{"type":"array","items":{"type":"string"},"description":"Specifies the value or list of values for the dimension."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that can be used to manage the dimension."},"type":{"$ref":"#/types/aws-native:iot:DimensionType","description":"Specifies the type of the dimension."}},"requiredInputs":["stringValues","type"]},"aws-native:iot:DomainConfiguration":{"description":"Create and manage a Domain Configuration","properties":{"applicationProtocol":{"$ref":"#/types/aws-native:iot:DomainConfigurationApplicationProtocol","description":"An enumerated string that specifies the application-layer protocol."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the domain configuration."},"authenticationType":{"$ref":"#/types/aws-native:iot:DomainConfigurationAuthenticationType","description":"An enumerated string that specifies the authentication type."},"authorizerConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationAuthorizerConfig","description":"An object that specifies the authorization service for a domain."},"clientCertificateConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationClientCertificateConfig","description":"An object that specifies the client certificate configuration for a domain."},"domainConfigurationName":{"type":"string","description":"The name of the domain configuration. This value must be unique to a region.","replaceOnChanges":true},"domainConfigurationStatus":{"$ref":"#/types/aws-native:iot:DomainConfigurationStatus","description":"The status to which the domain configuration should be updated.\n\nValid values: `ENABLED` | `DISABLED`"},"domainName":{"type":"string","description":"The name of the domain.","replaceOnChanges":true},"domainType":{"$ref":"#/types/aws-native:iot:DomainConfigurationDomainType","description":"The type of service delivered by the domain."},"serverCertificateArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the certificates that AWS IoT passes to the device during the TLS handshake. Currently you can specify only one certificate ARN. This value is not required for AWS -managed domains.","replaceOnChanges":true},"serverCertificateConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationServerCertificateConfig","description":"The server certificate configuration.\n\nFor more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide."},"serverCertificates":{"type":"array","items":{"$ref":"#/types/aws-native:iot:DomainConfigurationServerCertificateSummary"},"description":"The ARNs of the certificates that AWS IoT passes to the device during the TLS handshake. Currently you can specify only one certificate ARN. This value is not required for AWS -managed domains."},"serviceType":{"$ref":"#/types/aws-native:iot:DomainConfigurationServiceType","description":"The type of service delivered by the endpoint.\n\n\u003e AWS IoT Core currently supports only the `DATA` service type.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the domain configuration.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: \u0026\u0026tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\""},"tlsConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationTlsConfig","description":"An object that specifies the TLS configuration for a domain."},"validationCertificateArn":{"type":"string","description":"The certificate used to validate the server certificate and prove domain name ownership. This certificate must be signed by a public certificate authority. This value is not required for AWS -managed domains.","replaceOnChanges":true}},"type":"object","required":["arn","domainType","serverCertificates"],"inputProperties":{"applicationProtocol":{"$ref":"#/types/aws-native:iot:DomainConfigurationApplicationProtocol","description":"An enumerated string that specifies the application-layer protocol."},"authenticationType":{"$ref":"#/types/aws-native:iot:DomainConfigurationAuthenticationType","description":"An enumerated string that specifies the authentication type."},"authorizerConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationAuthorizerConfig","description":"An object that specifies the authorization service for a domain."},"clientCertificateConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationClientCertificateConfig","description":"An object that specifies the client certificate configuration for a domain."},"domainConfigurationName":{"type":"string","description":"The name of the domain configuration. This value must be unique to a region."},"domainConfigurationStatus":{"$ref":"#/types/aws-native:iot:DomainConfigurationStatus","description":"The status to which the domain configuration should be updated.\n\nValid values: `ENABLED` | `DISABLED`"},"domainName":{"type":"string","description":"The name of the domain."},"serverCertificateArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the certificates that AWS IoT passes to the device during the TLS handshake. Currently you can specify only one certificate ARN. This value is not required for AWS -managed domains."},"serverCertificateConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationServerCertificateConfig","description":"The server certificate configuration.\n\nFor more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide."},"serviceType":{"$ref":"#/types/aws-native:iot:DomainConfigurationServiceType","description":"The type of service delivered by the endpoint.\n\n\u003e AWS IoT Core currently supports only the `DATA` service type."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the domain configuration.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: \u0026\u0026tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\""},"tlsConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationTlsConfig","description":"An object that specifies the TLS configuration for a domain."},"validationCertificateArn":{"type":"string","description":"The certificate used to validate the server certificate and prove domain name ownership. This certificate must be signed by a public certificate authority. This value is not required for AWS -managed domains."}}},"aws-native:iot:EncryptionConfiguration":{"description":"Resource Type definition for AWS::IoT::EncryptionConfiguration","properties":{"accountId":{"type":"string","description":"The unique identifier (ID) of an AWS account."},"configurationDetails":{"$ref":"#/types/aws-native:iot:ConfigurationDetailsProperties"},"encryptionType":{"$ref":"#/types/aws-native:iot:EncryptionConfigurationEncryptionType","description":"The type of the KMS key."},"kmsAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS  on behalf of the customer."},"kmsKeyArn":{"type":"string","description":"The ARN of the customer managed KMS key."},"lastModifiedDate":{"type":"string","description":"The date when encryption configuration is last updated."}},"type":"object","required":["accountId","configurationDetails","encryptionType","lastModifiedDate"],"inputProperties":{"encryptionType":{"$ref":"#/types/aws-native:iot:EncryptionConfigurationEncryptionType","description":"The type of the KMS key."},"kmsAccessRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS  on behalf of the customer."},"kmsKeyArn":{"type":"string","description":"The ARN of the customer managed KMS key."}},"requiredInputs":["encryptionType"]},"aws-native:iot:FleetMetric":{"description":"An aggregated metric of certain devices in your fleet","properties":{"aggregationField":{"type":"string","description":"The aggregation field to perform aggregation and metric emission"},"aggregationType":{"$ref":"#/types/aws-native:iot:FleetMetricAggregationType","description":"The type of the aggregation query."},"creationDate":{"type":"string","description":"The creation date of a fleet metric"},"description":{"type":"string","description":"The description of a fleet metric"},"indexName":{"type":"string","description":"The index name of a fleet metric"},"lastModifiedDate":{"type":"string","description":"The last modified date of a fleet metric"},"metricArn":{"type":"string","description":"The Amazon Resource Number (ARN) of a fleet metric metric"},"metricName":{"type":"string","description":"The name of the fleet metric","replaceOnChanges":true},"period":{"type":"integer","description":"The period of metric emission in seconds"},"queryString":{"type":"string","description":"The Fleet Indexing query used by a fleet metric"},"queryVersion":{"type":"string","description":"The version of a Fleet Indexing query used by a fleet metric"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"},"unit":{"type":"string","description":"The unit of data points emitted by a fleet metric"},"version":{"type":"number","description":"The version of a fleet metric"}},"type":"object","required":["creationDate","lastModifiedDate","metricArn","metricName","version"],"inputProperties":{"aggregationField":{"type":"string","description":"The aggregation field to perform aggregation and metric emission"},"aggregationType":{"$ref":"#/types/aws-native:iot:FleetMetricAggregationType","description":"The type of the aggregation query."},"description":{"type":"string","description":"The description of a fleet metric"},"indexName":{"type":"string","description":"The index name of a fleet metric"},"metricName":{"type":"string","description":"The name of the fleet metric"},"period":{"type":"integer","description":"The period of metric emission in seconds"},"queryString":{"type":"string","description":"The Fleet Indexing query used by a fleet metric"},"queryVersion":{"type":"string","description":"The version of a Fleet Indexing query used by a fleet metric"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"},"unit":{"type":"string","description":"The unit of data points emitted by a fleet metric"}}},"aws-native:iot:JobTemplate":{"description":"Resource Type definition for AWS::IoT::JobTemplate. Job templates enable you to preconfigure jobs so that you can deploy them to multiple sets of target devices.","properties":{"abortConfig":{"$ref":"#/types/aws-native:iot:AbortConfigProperties","description":"The criteria that determine when and how a job abort takes place.","replaceOnChanges":true},"arn":{"type":"string","description":"The ARN of the job to use as the basis for the job template."},"description":{"type":"string","description":"A description of the Job Template.","replaceOnChanges":true},"destinationPackageVersions":{"type":"array","items":{"type":"string"},"description":"The package version Amazon Resource Names (ARNs) that are installed on the device’s reserved named shadow ( `$package` ) when the job successfully completes.\n\n*Note:* Up to 25 package version ARNS are allowed.","replaceOnChanges":true},"document":{"type":"string","description":"The job document. Required if you don't specify a value for documentSource.","replaceOnChanges":true},"documentSource":{"type":"string","description":"An S3 link to the job document to use in the template. Required if you don't specify a value for document.","replaceOnChanges":true},"jobArn":{"type":"string","description":"Optional for copying a JobTemplate from a pre-existing Job configuration.","replaceOnChanges":true},"jobExecutionsRetryConfig":{"$ref":"#/types/aws-native:iot:JobExecutionsRetryConfigProperties","description":"Allows you to create the criteria to retry a job.","replaceOnChanges":true},"jobExecutionsRolloutConfig":{"$ref":"#/types/aws-native:iot:JobExecutionsRolloutConfigProperties","description":"Allows you to create a staged rollout of a job.","replaceOnChanges":true},"jobTemplateId":{"type":"string","description":"A unique identifier for the job template. We recommend using a UUID. Alpha-numeric characters, \"-\", and \"_\" are valid for use here.","replaceOnChanges":true},"maintenanceWindows":{"type":"array","items":{"$ref":"#/types/aws-native:iot:JobTemplateMaintenanceWindow"},"description":"An optional configuration within the SchedulingConfig to setup a recurring maintenance window with a predetermined start time and duration for the rollout of a job document to all devices in a target group for a job.","replaceOnChanges":true},"presignedUrlConfig":{"$ref":"#/types/aws-native:iot:PresignedUrlConfigProperties","description":"Configuration for pre-signed S3 URLs.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Metadata that can be used to manage the JobTemplate.","replaceOnChanges":true},"timeoutConfig":{"$ref":"#/types/aws-native:iot:TimeoutConfigProperties","description":"Specifies the amount of time each device has to finish its execution of the job.","replaceOnChanges":true}},"type":"object","required":["arn","description","jobTemplateId"],"inputProperties":{"abortConfig":{"$ref":"#/types/aws-native:iot:AbortConfigProperties","description":"The criteria that determine when and how a job abort takes place."},"description":{"type":"string","description":"A description of the Job Template."},"destinationPackageVersions":{"type":"array","items":{"type":"string"},"description":"The package version Amazon Resource Names (ARNs) that are installed on the device’s reserved named shadow ( `$package` ) when the job successfully completes.\n\n*Note:* Up to 25 package version ARNS are allowed."},"document":{"type":"string","description":"The job document. Required if you don't specify a value for documentSource."},"documentSource":{"type":"string","description":"An S3 link to the job document to use in the template. Required if you don't specify a value for document."},"jobArn":{"type":"string","description":"Optional for copying a JobTemplate from a pre-existing Job configuration."},"jobExecutionsRetryConfig":{"$ref":"#/types/aws-native:iot:JobExecutionsRetryConfigProperties","description":"Allows you to create the criteria to retry a job."},"jobExecutionsRolloutConfig":{"$ref":"#/types/aws-native:iot:JobExecutionsRolloutConfigProperties","description":"Allows you to create a staged rollout of a job."},"jobTemplateId":{"type":"string","description":"A unique identifier for the job template. We recommend using a UUID. Alpha-numeric characters, \"-\", and \"_\" are valid for use here."},"maintenanceWindows":{"type":"array","items":{"$ref":"#/types/aws-native:iot:JobTemplateMaintenanceWindow"},"description":"An optional configuration within the SchedulingConfig to setup a recurring maintenance window with a predetermined start time and duration for the rollout of a job document to all devices in a target group for a job."},"presignedUrlConfig":{"$ref":"#/types/aws-native:iot:PresignedUrlConfigProperties","description":"Configuration for pre-signed S3 URLs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Metadata that can be used to manage the JobTemplate."},"timeoutConfig":{"$ref":"#/types/aws-native:iot:TimeoutConfigProperties","description":"Specifies the amount of time each device has to finish its execution of the job."}},"requiredInputs":["description","jobTemplateId"]},"aws-native:iot:Logging":{"description":"Logging Options enable you to configure your IoT V2 logging role and default logging level so that you can monitor progress events logs as it passes from your devices through Iot core service.","properties":{"accountId":{"type":"string","description":"Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).","replaceOnChanges":true},"defaultLogLevel":{"$ref":"#/types/aws-native:iot:LoggingDefaultLogLevel","description":"The log level to use. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED."},"eventConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:iot:LoggingEventConfiguration"},"description":"Configurations for event-based logging that specifies which event types to log and their logging settings. Overrides account-level logging for the specified event"},"roleArn":{"type":"string","description":"The ARN of the role that allows IoT to write to Cloudwatch logs."}},"type":"object","required":["accountId","defaultLogLevel","roleArn"],"inputProperties":{"accountId":{"type":"string","description":"Your 12-digit account ID (used as the primary identifier for the CloudFormation resource)."},"defaultLogLevel":{"$ref":"#/types/aws-native:iot:LoggingDefaultLogLevel","description":"The log level to use. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED."},"eventConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:iot:LoggingEventConfiguration"},"description":"Configurations for event-based logging that specifies which event types to log and their logging settings. Overrides account-level logging for the specified event"},"roleArn":{"type":"string","description":"The ARN of the role that allows IoT to write to Cloudwatch logs."}},"requiredInputs":["accountId","defaultLogLevel","roleArn"]},"aws-native:iot:MitigationAction":{"description":"Mitigation actions can be used to take actions to mitigate issues that were found in an Audit finding or Detect violation.","properties":{"actionName":{"type":"string","description":"A unique identifier for the mitigation action.","replaceOnChanges":true},"actionParams":{"$ref":"#/types/aws-native:iot:MitigationActionActionParams","description":"The set of parameters for this mitigation action. The parameters vary, depending on the kind of action you apply."},"mitigationActionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the mitigation action."},"mitigationActionId":{"type":"string","description":"The ID of the mitigation action."},"roleArn":{"type":"string","description":"The IAM role ARN used to apply this mitigation action."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["actionParams","mitigationActionArn","mitigationActionId","roleArn"],"inputProperties":{"actionName":{"type":"string","description":"A unique identifier for the mitigation action."},"actionParams":{"$ref":"#/types/aws-native:iot:MitigationActionActionParams","description":"The set of parameters for this mitigation action. The parameters vary, depending on the kind of action you apply."},"roleArn":{"type":"string","description":"The IAM role ARN used to apply this mitigation action."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["actionParams","roleArn"]},"aws-native:iot:Policy":{"description":"Resource Type definition for AWS::IoT::Policy","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS IoT policy, such as `arn:aws:iot:us-east-2:123456789012:policy/MyPolicy` ."},"awsId":{"type":"string","description":"The name of this policy."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON document that describes the policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IoT::Policy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The policy name.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"type":"object","required":["arn","awsId","policyDocument"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON document that describes the policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IoT::Policy` for more information about the expected schema for this property."},"policyName":{"type":"string","description":"The policy name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["policyDocument"]},"aws-native:iot:ProvisioningTemplate":{"description":"Creates a fleet provisioning template.","properties":{"description":{"type":"string","description":"The description of the fleet provisioning template."},"enabled":{"type":"boolean","description":"True to enable the fleet provisioning template, otherwise false."},"preProvisioningHook":{"$ref":"#/types/aws-native:iot:ProvisioningTemplateProvisioningHook","description":"Creates a pre-provisioning hook template."},"provisioningRoleArn":{"type":"string","description":"The role ARN for the role associated with the fleet provisioning template. This IoT role grants permission to provision a device."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that can be used to manage the fleet provisioning template."},"templateArn":{"type":"string","description":"The ARN that identifies the provisioning template."},"templateBody":{"type":"string","description":"The JSON formatted contents of the fleet provisioning template version."},"templateName":{"type":"string","description":"The name of the fleet provisioning template.","replaceOnChanges":true},"templateType":{"$ref":"#/types/aws-native:iot:ProvisioningTemplateTemplateType","description":"The type of the provisioning template.","replaceOnChanges":true}},"type":"object","required":["provisioningRoleArn","templateArn","templateBody"],"inputProperties":{"description":{"type":"string","description":"The description of the fleet provisioning template."},"enabled":{"type":"boolean","description":"True to enable the fleet provisioning template, otherwise false."},"preProvisioningHook":{"$ref":"#/types/aws-native:iot:ProvisioningTemplateProvisioningHook","description":"Creates a pre-provisioning hook template."},"provisioningRoleArn":{"type":"string","description":"The role ARN for the role associated with the fleet provisioning template. This IoT role grants permission to provision a device."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that can be used to manage the fleet provisioning template."},"templateBody":{"type":"string","description":"The JSON formatted contents of the fleet provisioning template version."},"templateName":{"type":"string","description":"The name of the fleet provisioning template."},"templateType":{"$ref":"#/types/aws-native:iot:ProvisioningTemplateTemplateType","description":"The type of the provisioning template."}},"requiredInputs":["provisioningRoleArn","templateBody"]},"aws-native:iot:ResourceSpecificLogging":{"description":"Resource-specific logging allows you to specify a logging level for a specific thing group.","properties":{"logLevel":{"$ref":"#/types/aws-native:iot:ResourceSpecificLoggingLogLevel","description":"The log level for a specific target. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED."},"targetId":{"type":"string","description":"Unique Id for a Target (TargetType:TargetName), this will be internally built to serve as primary identifier for a log target."},"targetName":{"type":"string","description":"The target name.","replaceOnChanges":true},"targetType":{"$ref":"#/types/aws-native:iot:ResourceSpecificLoggingTargetType","description":"The target type. Value must be THING_GROUP, CLIENT_ID, SOURCE_IP, PRINCIPAL_ID, or EVENT_TYPE.","replaceOnChanges":true}},"type":"object","required":["logLevel","targetId","targetName","targetType"],"inputProperties":{"logLevel":{"$ref":"#/types/aws-native:iot:ResourceSpecificLoggingLogLevel","description":"The log level for a specific target. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED."},"targetName":{"type":"string","description":"The target name."},"targetType":{"$ref":"#/types/aws-native:iot:ResourceSpecificLoggingTargetType","description":"The target type. Value must be THING_GROUP, CLIENT_ID, SOURCE_IP, PRINCIPAL_ID, or EVENT_TYPE."}},"requiredInputs":["logLevel","targetName","targetType"]},"aws-native:iot:RoleAlias":{"description":"Use the AWS::IoT::RoleAlias resource to declare an AWS IoT RoleAlias.","properties":{"credentialDurationSeconds":{"type":"integer","description":"The number of seconds for which the credential is valid."},"roleAlias":{"type":"string","description":"The role alias.","language":{"csharp":{"name":"RoleAliasValue"}},"replaceOnChanges":true},"roleAliasArn":{"type":"string","description":"The role alias ARN."},"roleArn":{"type":"string","description":"The role ARN."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["roleAliasArn","roleArn"],"inputProperties":{"credentialDurationSeconds":{"type":"integer","description":"The number of seconds for which the credential is valid."},"roleAlias":{"type":"string","description":"The role alias.","language":{"csharp":{"name":"RoleAliasValue"}}},"roleArn":{"type":"string","description":"The role ARN."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["roleArn"]},"aws-native:iot:ScheduledAudit":{"description":"Scheduled audits can be used to specify the checks you want to perform during an audit and how often the audit should be run.","properties":{"dayOfMonth":{"type":"string","description":"The day of the month on which the scheduled audit takes place. Can be 1 through 31 or LAST. This field is required if the frequency parameter is set to MONTHLY."},"dayOfWeek":{"$ref":"#/types/aws-native:iot:ScheduledAuditDayOfWeek","description":"The day of the week on which the scheduled audit takes place. Can be one of SUN, MON, TUE,WED, THU, FRI, or SAT. This field is required if the frequency parameter is set to WEEKLY or BIWEEKLY."},"frequency":{"$ref":"#/types/aws-native:iot:ScheduledAuditFrequency","description":"How often the scheduled audit takes place. Can be one of DAILY, WEEKLY, BIWEEKLY, or MONTHLY."},"scheduledAuditArn":{"type":"string","description":"The ARN (Amazon resource name) of the scheduled audit."},"scheduledAuditName":{"type":"string","description":"The name you want to give to the scheduled audit.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetCheckNames":{"type":"array","items":{"type":"string"},"description":"Which checks are performed during the scheduled audit. Checks must be enabled for your account."}},"type":"object","required":["frequency","scheduledAuditArn","targetCheckNames"],"inputProperties":{"dayOfMonth":{"type":"string","description":"The day of the month on which the scheduled audit takes place. Can be 1 through 31 or LAST. This field is required if the frequency parameter is set to MONTHLY."},"dayOfWeek":{"$ref":"#/types/aws-native:iot:ScheduledAuditDayOfWeek","description":"The day of the week on which the scheduled audit takes place. Can be one of SUN, MON, TUE,WED, THU, FRI, or SAT. This field is required if the frequency parameter is set to WEEKLY or BIWEEKLY."},"frequency":{"$ref":"#/types/aws-native:iot:ScheduledAuditFrequency","description":"How often the scheduled audit takes place. Can be one of DAILY, WEEKLY, BIWEEKLY, or MONTHLY."},"scheduledAuditName":{"type":"string","description":"The name you want to give to the scheduled audit."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetCheckNames":{"type":"array","items":{"type":"string"},"description":"Which checks are performed during the scheduled audit. Checks must be enabled for your account."}},"requiredInputs":["frequency","targetCheckNames"]},"aws-native:iot:SecurityProfile":{"description":"A security profile defines a set of expected behaviors for devices in your account.","properties":{"additionalMetricsToRetainV2":{"type":"array","items":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricToRetain"},"description":"A list of metrics whose data is retained (stored). By default, data is retained for any metric used in the profile's behaviors, but it is also retained for any metric specified here."},"alertTargets":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iot:SecurityProfileAlertTarget"},"description":"Specifies the destinations to which alerts are sent."},"behaviors":{"type":"array","items":{"$ref":"#/types/aws-native:iot:SecurityProfileBehavior"},"description":"Specifies the behaviors that, when violated by a device (thing), cause an alert."},"metricsExportConfig":{"$ref":"#/types/aws-native:iot:MetricsExportConfigProperties","description":"A structure containing the mqtt topic for metrics export."},"securityProfileArn":{"type":"string","description":"The ARN (Amazon resource name) of the created security profile."},"securityProfileDescription":{"type":"string","description":"A description of the security profile."},"securityProfileName":{"type":"string","description":"A unique identifier for the security profile.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that can be used to manage the security profile."},"targetArns":{"type":"array","items":{"type":"string"},"description":"A set of target ARNs that the security profile is attached to."}},"type":"object","required":["securityProfileArn"],"inputProperties":{"additionalMetricsToRetainV2":{"type":"array","items":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricToRetain"},"description":"A list of metrics whose data is retained (stored). By default, data is retained for any metric used in the profile's behaviors, but it is also retained for any metric specified here."},"alertTargets":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iot:SecurityProfileAlertTarget"},"description":"Specifies the destinations to which alerts are sent."},"behaviors":{"type":"array","items":{"$ref":"#/types/aws-native:iot:SecurityProfileBehavior"},"description":"Specifies the behaviors that, when violated by a device (thing), cause an alert."},"metricsExportConfig":{"$ref":"#/types/aws-native:iot:MetricsExportConfigProperties","description":"A structure containing the mqtt topic for metrics export."},"securityProfileDescription":{"type":"string","description":"A description of the security profile."},"securityProfileName":{"type":"string","description":"A unique identifier for the security profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that can be used to manage the security profile."},"targetArns":{"type":"array","items":{"type":"string"},"description":"A set of target ARNs that the security profile is attached to."}}},"aws-native:iot:SoftwarePackage":{"description":"resource definition","properties":{"description":{"type":"string","description":"A summary of the package being created. This can be used to outline the package's contents or purpose."},"packageArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the package."},"packageName":{"type":"string","description":"The name of the new software package.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["packageArn"],"inputProperties":{"description":{"type":"string","description":"A summary of the package being created. This can be used to outline the package's contents or purpose."},"packageName":{"type":"string","description":"The name of the new software package."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:iot:SoftwarePackageVersion":{"description":"resource definition","properties":{"artifact":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionPackageVersionArtifact"},"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that can be used to define a package version’s configuration. For example, the S3 file location, configuration options that are being sent to the device or fleet.\n\nThe combined size of all the attributes on a package version is limited to 3KB."},"description":{"type":"string","description":"A summary of the package version being created. This can be used to outline the package's contents or purpose."},"errorReason":{"type":"string","description":"Error reason for a package version failure during creation or update."},"packageName":{"type":"string","description":"The name of the associated software package.","replaceOnChanges":true},"packageVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the package."},"recipe":{"type":"string","description":"The inline json job document associated with a software package version"},"sbom":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionSbom"},"sbomValidationStatus":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionSbomValidationStatus"},"status":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionPackageVersionStatus","description":"The status of the package version. For more information, see [Package version lifecycle](https://docs.aws.amazon.com/iot/latest/developerguide/preparing-to-use-software-package-catalog.html#package-version-lifecycle) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"versionName":{"type":"string","description":"The name of the new package version.","replaceOnChanges":true}},"type":"object","required":["errorReason","packageName","packageVersionArn","sbomValidationStatus","status"],"inputProperties":{"artifact":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionPackageVersionArtifact"},"attributes":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata that can be used to define a package version’s configuration. For example, the S3 file location, configuration options that are being sent to the device or fleet.\n\nThe combined size of all the attributes on a package version is limited to 3KB."},"description":{"type":"string","description":"A summary of the package version being created. This can be used to outline the package's contents or purpose."},"packageName":{"type":"string","description":"The name of the associated software package."},"recipe":{"type":"string","description":"The inline json job document associated with a software package version"},"sbom":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionSbom"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"versionName":{"type":"string","description":"The name of the new package version."}},"requiredInputs":["packageName"]},"aws-native:iot:Thing":{"description":"Resource Type definition for AWS::IoT::Thing\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var nameParameter = config.Require(\"nameParameter\");\n    var myAttributeValueA = config.Get(\"myAttributeValueA\") ?? \"myStringA123\";\n    var myAttributeValueB = config.Get(\"myAttributeValueB\") ?? \"myStringB123\";\n    var myAttributeValueC = config.Get(\"myAttributeValueC\") ?? \"myStringC123\";\n    var myThing = new AwsNative.IoT.Thing(\"myThing\", new()\n    {\n        ThingName = nameParameter,\n        AttributePayload = new AwsNative.IoT.Inputs.ThingAttributePayloadArgs\n        {\n            Attributes = \n            {\n                { \"myAttributeA\", myAttributeValueA },\n                { \"myAttributeB\", myAttributeValueB },\n                { \"myAttributeC\", myAttributeValueC },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iot\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tnameParameter := cfg.Require(\"nameParameter\")\n\t\tmyAttributeValueA := \"myStringA123\"\n\t\tif param := cfg.Get(\"myAttributeValueA\"); param != \"\" {\n\t\t\tmyAttributeValueA = param\n\t\t}\n\t\tmyAttributeValueB := \"myStringB123\"\n\t\tif param := cfg.Get(\"myAttributeValueB\"); param != \"\" {\n\t\t\tmyAttributeValueB = param\n\t\t}\n\t\tmyAttributeValueC := \"myStringC123\"\n\t\tif param := cfg.Get(\"myAttributeValueC\"); param != \"\" {\n\t\t\tmyAttributeValueC = param\n\t\t}\n\t\t_, err := iot.NewThing(ctx, \"myThing\", \u0026iot.ThingArgs{\n\t\t\tThingName: pulumi.String(pulumi.String(nameParameter)),\n\t\t\tAttributePayload: \u0026iot.ThingAttributePayloadArgs{\n\t\t\t\tAttributes: pulumi.StringMap{\n\t\t\t\t\t\"myAttributeA\": pulumi.String(pulumi.String(myAttributeValueA)),\n\t\t\t\t\t\"myAttributeB\": pulumi.String(pulumi.String(myAttributeValueB)),\n\t\t\t\t\t\"myAttributeC\": pulumi.String(pulumi.String(myAttributeValueC)),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst nameParameter = config.require(\"nameParameter\");\nconst myAttributeValueA = config.get(\"myAttributeValueA\") || \"myStringA123\";\nconst myAttributeValueB = config.get(\"myAttributeValueB\") || \"myStringB123\";\nconst myAttributeValueC = config.get(\"myAttributeValueC\") || \"myStringC123\";\nconst myThing = new aws_native.iot.Thing(\"myThing\", {\n    thingName: nameParameter,\n    attributePayload: {\n        attributes: {\n            myAttributeA: myAttributeValueA,\n            myAttributeB: myAttributeValueB,\n            myAttributeC: myAttributeValueC,\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nname_parameter = config.require(\"nameParameter\")\nmy_attribute_value_a = config.get(\"myAttributeValueA\")\nif my_attribute_value_a is None:\n    my_attribute_value_a = \"myStringA123\"\nmy_attribute_value_b = config.get(\"myAttributeValueB\")\nif my_attribute_value_b is None:\n    my_attribute_value_b = \"myStringB123\"\nmy_attribute_value_c = config.get(\"myAttributeValueC\")\nif my_attribute_value_c is None:\n    my_attribute_value_c = \"myStringC123\"\nmy_thing = aws_native.iot.Thing(\"myThing\",\n    thing_name=name_parameter,\n    attribute_payload={\n        \"attributes\": {\n            \"myAttributeA\": my_attribute_value_a,\n            \"myAttributeB\": my_attribute_value_b,\n            \"myAttributeC\": my_attribute_value_c,\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS IoT thing, such as `arn:aws:iot:us-east-2:123456789012:thing/MyThing` ."},"attributePayload":{"$ref":"#/types/aws-native:iot:ThingAttributePayload","description":"A string that contains up to three key value pairs. Maximum length of 800. Duplicates not allowed."},"awsId":{"type":"string","description":"The Id of this thing."},"thingName":{"type":"string","description":"The name of the thing to update.\n\nYou can't change a thing's name. To change a thing's name, you must create a new thing, give it the new name, and then delete the old thing.","replaceOnChanges":true}},"type":"object","required":["arn","awsId"],"inputProperties":{"attributePayload":{"$ref":"#/types/aws-native:iot:ThingAttributePayload","description":"A string that contains up to three key value pairs. Maximum length of 800. Duplicates not allowed."},"thingName":{"type":"string","description":"The name of the thing to update.\n\nYou can't change a thing's name. To change a thing's name, you must create a new thing, give it the new name, and then delete the old thing."}}},"aws-native:iot:ThingGroup":{"description":"Resource Type definition for AWS::IoT::ThingGroup","properties":{"arn":{"type":"string","description":"The thing group ARN."},"awsId":{"type":"string","description":"The thing group ID."},"parentGroupName":{"type":"string","description":"The parent thing group name.\n\nA Dynamic Thing Group does not have `parentGroupName` defined.","replaceOnChanges":true},"queryString":{"type":"string","description":"The dynamic thing group search query string.\n\nThe `queryString` attribute *is* required for `CreateDynamicThingGroup` . The `queryString` attribute *is not* required for `CreateThingGroup` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"thingGroupName":{"type":"string","description":"The thing group name.","replaceOnChanges":true},"thingGroupProperties":{"$ref":"#/types/aws-native:iot:ThingGroupPropertiesProperties","description":"Thing group properties."}},"type":"object","required":["arn","awsId"],"inputProperties":{"parentGroupName":{"type":"string","description":"The parent thing group name.\n\nA Dynamic Thing Group does not have `parentGroupName` defined."},"queryString":{"type":"string","description":"The dynamic thing group search query string.\n\nThe `queryString` attribute *is* required for `CreateDynamicThingGroup` . The `queryString` attribute *is not* required for `CreateThingGroup` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"thingGroupName":{"type":"string","description":"The thing group name."},"thingGroupProperties":{"$ref":"#/types/aws-native:iot:ThingGroupPropertiesProperties","description":"Thing group properties."}}},"aws-native:iot:ThingType":{"description":"Resource Type definition for AWS::IoT::ThingType","properties":{"arn":{"type":"string","description":"The thing type arn."},"awsId":{"type":"string","description":"The thing type id."},"deprecateThingType":{"type":"boolean","description":"Deprecates a thing type. You can not associate new things with deprecated thing type.\n\nRequires permission to access the [DeprecateThingType](https://docs.aws.amazon.com//service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"thingTypeName":{"type":"string","description":"The name of the thing type.","replaceOnChanges":true},"thingTypeProperties":{"$ref":"#/types/aws-native:iot:ThingTypePropertiesProperties","description":"The thing type properties for the thing type to create. It contains information about the new thing type including a description, a list of searchable thing attribute names, and a list of propagating attributes. After a thing type is created, you can only update `Mqtt5Configuration` ."}},"type":"object","required":["arn","awsId"],"inputProperties":{"deprecateThingType":{"type":"boolean","description":"Deprecates a thing type. You can not associate new things with deprecated thing type.\n\nRequires permission to access the [DeprecateThingType](https://docs.aws.amazon.com//service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"thingTypeName":{"type":"string","description":"The name of the thing type."},"thingTypeProperties":{"$ref":"#/types/aws-native:iot:ThingTypePropertiesProperties","description":"The thing type properties for the thing type to create. It contains information about the new thing type including a description, a list of searchable thing attribute names, and a list of propagating attributes. After a thing type is created, you can only update `Mqtt5Configuration` ."}}},"aws-native:iot:TopicRule":{"description":"Resource Type definition for AWS::IoT::TopicRule","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS IoT rule, such as `arn:aws:iot:us-east-2:123456789012:rule/MyIoTRule` ."},"ruleName":{"type":"string","description":"The name of the rule.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the topic rule.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: --tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\""},"topicRulePayload":{"$ref":"#/types/aws-native:iot:TopicRulePayload","description":"The rule payload."}},"type":"object","required":["arn","topicRulePayload"],"inputProperties":{"ruleName":{"type":"string","description":"The name of the rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the topic rule.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: --tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\""},"topicRulePayload":{"$ref":"#/types/aws-native:iot:TopicRulePayload","description":"The rule payload."}},"requiredInputs":["topicRulePayload"]},"aws-native:iot:TopicRuleDestination":{"description":"Resource Type definition for AWS::IoT::TopicRuleDestination","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN)."},"httpUrlProperties":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationHttpUrlDestinationSummary","description":"HTTP URL destination properties.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationStatus","description":"The status of the TopicRuleDestination."},"statusReason":{"type":"string","description":"The reasoning for the current status of the TopicRuleDestination."},"vpcProperties":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationVpcDestinationProperties","description":"VPC destination properties.","replaceOnChanges":true}},"type":"object","required":["arn","statusReason"],"inputProperties":{"httpUrlProperties":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationHttpUrlDestinationSummary","description":"HTTP URL destination properties."},"status":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationStatus","description":"The status of the TopicRuleDestination."},"vpcProperties":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationVpcDestinationProperties","description":"VPC destination properties."}}},"aws-native:iotanalytics:Channel":{"description":"Resource Type definition for AWS::IoTAnalytics::Channel\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var channel = new AwsNative.IoTAnalytics.Channel(\"channel\", new()\n    {\n        ChannelName = \"SimpleChannel\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewChannel(ctx, \"channel\", \u0026iotanalytics.ChannelArgs{\n\t\t\tChannelName: pulumi.String(\"SimpleChannel\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst channel = new aws_native.iotanalytics.Channel(\"channel\", {channelName: \"SimpleChannel\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nchannel = aws_native.iotanalytics.Channel(\"channel\", channel_name=\"SimpleChannel\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var channel = new AwsNative.IoTAnalytics.Channel(\"channel\", new()\n    {\n        ChannelName = \"SimpleChannel\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewChannel(ctx, \"channel\", \u0026iotanalytics.ChannelArgs{\n\t\t\tChannelName: pulumi.String(\"SimpleChannel\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst channel = new aws_native.iotanalytics.Channel(\"channel\", {channelName: \"SimpleChannel\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nchannel = aws_native.iotanalytics.Channel(\"channel\", channel_name=\"SimpleChannel\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var channel = new AwsNative.IoTAnalytics.Channel(\"channel\", new()\n    {\n        ChannelName = \"ComplexChannel\",\n        RetentionPeriod = new AwsNative.IoTAnalytics.Inputs.ChannelRetentionPeriodArgs\n        {\n            Unlimited = false,\n            NumberOfDays = 10,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewChannel(ctx, \"channel\", \u0026iotanalytics.ChannelArgs{\n\t\t\tChannelName: pulumi.String(\"ComplexChannel\"),\n\t\t\tRetentionPeriod: \u0026iotanalytics.ChannelRetentionPeriodArgs{\n\t\t\t\tUnlimited:    pulumi.Bool(false),\n\t\t\t\tNumberOfDays: pulumi.Int(10),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst channel = new aws_native.iotanalytics.Channel(\"channel\", {\n    channelName: \"ComplexChannel\",\n    retentionPeriod: {\n        unlimited: false,\n        numberOfDays: 10,\n    },\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nchannel = aws_native.iotanalytics.Channel(\"channel\",\n    channel_name=\"ComplexChannel\",\n    retention_period={\n        \"unlimited\": False,\n        \"number_of_days\": 10,\n    },\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var channel = new AwsNative.IoTAnalytics.Channel(\"channel\", new()\n    {\n        ChannelName = \"ComplexChannel\",\n        RetentionPeriod = new AwsNative.IoTAnalytics.Inputs.ChannelRetentionPeriodArgs\n        {\n            Unlimited = false,\n            NumberOfDays = 10,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewChannel(ctx, \"channel\", \u0026iotanalytics.ChannelArgs{\n\t\t\tChannelName: pulumi.String(\"ComplexChannel\"),\n\t\t\tRetentionPeriod: \u0026iotanalytics.ChannelRetentionPeriodArgs{\n\t\t\t\tUnlimited:    pulumi.Bool(false),\n\t\t\t\tNumberOfDays: pulumi.Int(10),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst channel = new aws_native.iotanalytics.Channel(\"channel\", {\n    channelName: \"ComplexChannel\",\n    retentionPeriod: {\n        unlimited: false,\n        numberOfDays: 10,\n    },\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nchannel = aws_native.iotanalytics.Channel(\"channel\",\n    channel_name=\"ComplexChannel\",\n    retention_period={\n        \"unlimited\": False,\n        \"number_of_days\": 10,\n    },\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string"},"channelName":{"type":"string","description":"The name of the channel.","replaceOnChanges":true},"channelStorage":{"$ref":"#/types/aws-native:iotanalytics:ChannelStorage","description":"Where channel data is stored."},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:ChannelRetentionPeriod","description":"How long, in days, message data is kept for the channel."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the channel.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["awsId"],"inputProperties":{"channelName":{"type":"string","description":"The name of the channel."},"channelStorage":{"$ref":"#/types/aws-native:iotanalytics:ChannelStorage","description":"Where channel data is stored."},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:ChannelRetentionPeriod","description":"How long, in days, message data is kept for the channel."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the channel.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}}},"aws-native:iotanalytics:Dataset":{"description":"Resource Type definition for AWS::IoTAnalytics::Dataset\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var dataset = new AwsNative.IoTAnalytics.Dataset(\"dataset\", new()\n    {\n        DatasetName = \"SimpleSQLDataset\",\n        Actions = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetActionArgs\n            {\n                ActionName = \"SqlAction\",\n                QueryAction = new AwsNative.IoTAnalytics.Inputs.DatasetQueryActionArgs\n                {\n                    SqlQuery = \"select * from Datastore\",\n                },\n            },\n        },\n        Triggers = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetTriggerArgs\n            {\n                Schedule = new AwsNative.IoTAnalytics.Inputs.DatasetScheduleArgs\n                {\n                    ScheduleExpression = \"cron(0 12 * * ? *)\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDataset(ctx, \"dataset\", \u0026iotanalytics.DatasetArgs{\n\t\t\tDatasetName: pulumi.String(\"SimpleSQLDataset\"),\n\t\t\tActions: iotanalytics.DatasetActionArray{\n\t\t\t\t\u0026iotanalytics.DatasetActionArgs{\n\t\t\t\t\tActionName: pulumi.String(\"SqlAction\"),\n\t\t\t\t\tQueryAction: \u0026iotanalytics.DatasetQueryActionArgs{\n\t\t\t\t\t\tSqlQuery: pulumi.String(\"select * from Datastore\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTriggers: iotanalytics.DatasetTriggerArray{\n\t\t\t\t\u0026iotanalytics.DatasetTriggerArgs{\n\t\t\t\t\tSchedule: \u0026iotanalytics.DatasetScheduleArgs{\n\t\t\t\t\t\tScheduleExpression: pulumi.String(\"cron(0 12 * * ? *)\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst dataset = new aws_native.iotanalytics.Dataset(\"dataset\", {\n    datasetName: \"SimpleSQLDataset\",\n    actions: [{\n        actionName: \"SqlAction\",\n        queryAction: {\n            sqlQuery: \"select * from Datastore\",\n        },\n    }],\n    triggers: [{\n        schedule: {\n            scheduleExpression: \"cron(0 12 * * ? *)\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndataset = aws_native.iotanalytics.Dataset(\"dataset\",\n    dataset_name=\"SimpleSQLDataset\",\n    actions=[{\n        \"action_name\": \"SqlAction\",\n        \"query_action\": {\n            \"sql_query\": \"select * from Datastore\",\n        },\n    }],\n    triggers=[{\n        \"schedule\": {\n            \"schedule_expression\": \"cron(0 12 * * ? *)\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var dataset = new AwsNative.IoTAnalytics.Dataset(\"dataset\", new()\n    {\n        DatasetName = \"SimpleSQLDataset\",\n        Actions = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetActionArgs\n            {\n                ActionName = \"SqlAction\",\n                QueryAction = new AwsNative.IoTAnalytics.Inputs.DatasetQueryActionArgs\n                {\n                    SqlQuery = \"select * from Datastore\",\n                },\n            },\n        },\n        Triggers = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetTriggerArgs\n            {\n                Schedule = new AwsNative.IoTAnalytics.Inputs.DatasetScheduleArgs\n                {\n                    ScheduleExpression = \"cron(0 12 * * ? *)\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDataset(ctx, \"dataset\", \u0026iotanalytics.DatasetArgs{\n\t\t\tDatasetName: pulumi.String(\"SimpleSQLDataset\"),\n\t\t\tActions: iotanalytics.DatasetActionArray{\n\t\t\t\t\u0026iotanalytics.DatasetActionArgs{\n\t\t\t\t\tActionName: pulumi.String(\"SqlAction\"),\n\t\t\t\t\tQueryAction: \u0026iotanalytics.DatasetQueryActionArgs{\n\t\t\t\t\t\tSqlQuery: pulumi.String(\"select * from Datastore\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTriggers: iotanalytics.DatasetTriggerArray{\n\t\t\t\t\u0026iotanalytics.DatasetTriggerArgs{\n\t\t\t\t\tSchedule: \u0026iotanalytics.DatasetScheduleArgs{\n\t\t\t\t\t\tScheduleExpression: pulumi.String(\"cron(0 12 * * ? *)\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst dataset = new aws_native.iotanalytics.Dataset(\"dataset\", {\n    datasetName: \"SimpleSQLDataset\",\n    actions: [{\n        actionName: \"SqlAction\",\n        queryAction: {\n            sqlQuery: \"select * from Datastore\",\n        },\n    }],\n    triggers: [{\n        schedule: {\n            scheduleExpression: \"cron(0 12 * * ? *)\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndataset = aws_native.iotanalytics.Dataset(\"dataset\",\n    dataset_name=\"SimpleSQLDataset\",\n    actions=[{\n        \"action_name\": \"SqlAction\",\n        \"query_action\": {\n            \"sql_query\": \"select * from Datastore\",\n        },\n    }],\n    triggers=[{\n        \"schedule\": {\n            \"schedule_expression\": \"cron(0 12 * * ? *)\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var dataset = new AwsNative.IoTAnalytics.Dataset(\"dataset\", new()\n    {\n        DatasetName = \"ComplexSQLDataset\",\n        Actions = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetActionArgs\n            {\n                ActionName = \"SqlAction\",\n                QueryAction = new AwsNative.IoTAnalytics.Inputs.DatasetQueryActionArgs\n                {\n                    SqlQuery = \"select * from Datastore\",\n                    Filters = new[]\n                    {\n                        new AwsNative.IoTAnalytics.Inputs.DatasetFilterArgs\n                        {\n                            DeltaTime = new AwsNative.IoTAnalytics.Inputs.DatasetDeltaTimeArgs\n                            {\n                                OffsetSeconds = 1,\n                                TimeExpression = \"timestamp\",\n                            },\n                        },\n                    },\n                },\n            },\n        },\n        Triggers = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetTriggerArgs\n            {\n                Schedule = new AwsNative.IoTAnalytics.Inputs.DatasetScheduleArgs\n                {\n                    ScheduleExpression = \"cron(0 12 * * ? *)\",\n                },\n            },\n        },\n        RetentionPeriod = new AwsNative.IoTAnalytics.Inputs.DatasetRetentionPeriodArgs\n        {\n            Unlimited = false,\n            NumberOfDays = 10,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDataset(ctx, \"dataset\", \u0026iotanalytics.DatasetArgs{\n\t\t\tDatasetName: pulumi.String(\"ComplexSQLDataset\"),\n\t\t\tActions: iotanalytics.DatasetActionArray{\n\t\t\t\t\u0026iotanalytics.DatasetActionArgs{\n\t\t\t\t\tActionName: pulumi.String(\"SqlAction\"),\n\t\t\t\t\tQueryAction: \u0026iotanalytics.DatasetQueryActionArgs{\n\t\t\t\t\t\tSqlQuery: pulumi.String(\"select * from Datastore\"),\n\t\t\t\t\t\tFilters: iotanalytics.DatasetFilterArray{\n\t\t\t\t\t\t\t\u0026iotanalytics.DatasetFilterArgs{\n\t\t\t\t\t\t\t\tDeltaTime: \u0026iotanalytics.DatasetDeltaTimeArgs{\n\t\t\t\t\t\t\t\t\tOffsetSeconds:  pulumi.Int(1),\n\t\t\t\t\t\t\t\t\tTimeExpression: pulumi.String(\"timestamp\"),\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTriggers: iotanalytics.DatasetTriggerArray{\n\t\t\t\t\u0026iotanalytics.DatasetTriggerArgs{\n\t\t\t\t\tSchedule: \u0026iotanalytics.DatasetScheduleArgs{\n\t\t\t\t\t\tScheduleExpression: pulumi.String(\"cron(0 12 * * ? *)\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tRetentionPeriod: \u0026iotanalytics.DatasetRetentionPeriodArgs{\n\t\t\t\tUnlimited:    pulumi.Bool(false),\n\t\t\t\tNumberOfDays: pulumi.Int(10),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst dataset = new aws_native.iotanalytics.Dataset(\"dataset\", {\n    datasetName: \"ComplexSQLDataset\",\n    actions: [{\n        actionName: \"SqlAction\",\n        queryAction: {\n            sqlQuery: \"select * from Datastore\",\n            filters: [{\n                deltaTime: {\n                    offsetSeconds: 1,\n                    timeExpression: \"timestamp\",\n                },\n            }],\n        },\n    }],\n    triggers: [{\n        schedule: {\n            scheduleExpression: \"cron(0 12 * * ? *)\",\n        },\n    }],\n    retentionPeriod: {\n        unlimited: false,\n        numberOfDays: 10,\n    },\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndataset = aws_native.iotanalytics.Dataset(\"dataset\",\n    dataset_name=\"ComplexSQLDataset\",\n    actions=[{\n        \"action_name\": \"SqlAction\",\n        \"query_action\": {\n            \"sql_query\": \"select * from Datastore\",\n            \"filters\": [{\n                \"delta_time\": {\n                    \"offset_seconds\": 1,\n                    \"time_expression\": \"timestamp\",\n                },\n            }],\n        },\n    }],\n    triggers=[{\n        \"schedule\": {\n            \"schedule_expression\": \"cron(0 12 * * ? *)\",\n        },\n    }],\n    retention_period={\n        \"unlimited\": False,\n        \"number_of_days\": 10,\n    },\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var dataset = new AwsNative.IoTAnalytics.Dataset(\"dataset\", new()\n    {\n        DatasetName = \"ComplexSQLDataset\",\n        Actions = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetActionArgs\n            {\n                ActionName = \"SqlAction\",\n                QueryAction = new AwsNative.IoTAnalytics.Inputs.DatasetQueryActionArgs\n                {\n                    SqlQuery = \"select * from Datastore\",\n                    Filters = new[]\n                    {\n                        new AwsNative.IoTAnalytics.Inputs.DatasetFilterArgs\n                        {\n                            DeltaTime = new AwsNative.IoTAnalytics.Inputs.DatasetDeltaTimeArgs\n                            {\n                                OffsetSeconds = 1,\n                                TimeExpression = \"timestamp\",\n                            },\n                        },\n                    },\n                },\n            },\n        },\n        Triggers = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.DatasetTriggerArgs\n            {\n                Schedule = new AwsNative.IoTAnalytics.Inputs.DatasetScheduleArgs\n                {\n                    ScheduleExpression = \"cron(0 12 * * ? *)\",\n                },\n            },\n        },\n        RetentionPeriod = new AwsNative.IoTAnalytics.Inputs.DatasetRetentionPeriodArgs\n        {\n            Unlimited = false,\n            NumberOfDays = 10,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDataset(ctx, \"dataset\", \u0026iotanalytics.DatasetArgs{\n\t\t\tDatasetName: pulumi.String(\"ComplexSQLDataset\"),\n\t\t\tActions: iotanalytics.DatasetActionArray{\n\t\t\t\t\u0026iotanalytics.DatasetActionArgs{\n\t\t\t\t\tActionName: pulumi.String(\"SqlAction\"),\n\t\t\t\t\tQueryAction: \u0026iotanalytics.DatasetQueryActionArgs{\n\t\t\t\t\t\tSqlQuery: pulumi.String(\"select * from Datastore\"),\n\t\t\t\t\t\tFilters: iotanalytics.DatasetFilterArray{\n\t\t\t\t\t\t\t\u0026iotanalytics.DatasetFilterArgs{\n\t\t\t\t\t\t\t\tDeltaTime: \u0026iotanalytics.DatasetDeltaTimeArgs{\n\t\t\t\t\t\t\t\t\tOffsetSeconds:  pulumi.Int(1),\n\t\t\t\t\t\t\t\t\tTimeExpression: pulumi.String(\"timestamp\"),\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTriggers: iotanalytics.DatasetTriggerArray{\n\t\t\t\t\u0026iotanalytics.DatasetTriggerArgs{\n\t\t\t\t\tSchedule: \u0026iotanalytics.DatasetScheduleArgs{\n\t\t\t\t\t\tScheduleExpression: pulumi.String(\"cron(0 12 * * ? *)\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tRetentionPeriod: \u0026iotanalytics.DatasetRetentionPeriodArgs{\n\t\t\t\tUnlimited:    pulumi.Bool(false),\n\t\t\t\tNumberOfDays: pulumi.Int(10),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst dataset = new aws_native.iotanalytics.Dataset(\"dataset\", {\n    datasetName: \"ComplexSQLDataset\",\n    actions: [{\n        actionName: \"SqlAction\",\n        queryAction: {\n            sqlQuery: \"select * from Datastore\",\n            filters: [{\n                deltaTime: {\n                    offsetSeconds: 1,\n                    timeExpression: \"timestamp\",\n                },\n            }],\n        },\n    }],\n    triggers: [{\n        schedule: {\n            scheduleExpression: \"cron(0 12 * * ? *)\",\n        },\n    }],\n    retentionPeriod: {\n        unlimited: false,\n        numberOfDays: 10,\n    },\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndataset = aws_native.iotanalytics.Dataset(\"dataset\",\n    dataset_name=\"ComplexSQLDataset\",\n    actions=[{\n        \"action_name\": \"SqlAction\",\n        \"query_action\": {\n            \"sql_query\": \"select * from Datastore\",\n            \"filters\": [{\n                \"delta_time\": {\n                    \"offset_seconds\": 1,\n                    \"time_expression\": \"timestamp\",\n                },\n            }],\n        },\n    }],\n    triggers=[{\n        \"schedule\": {\n            \"schedule_expression\": \"cron(0 12 * * ? *)\",\n        },\n    }],\n    retention_period={\n        \"unlimited\": False,\n        \"number_of_days\": 10,\n    },\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetAction"},"description":"The `DatasetAction` objects that automatically create the dataset contents."},"awsId":{"type":"string"},"contentDeliveryRules":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetContentDeliveryRule"},"description":"When dataset contents are created they are delivered to destinations specified here."},"datasetName":{"type":"string","description":"The name of the dataset.","replaceOnChanges":true},"lateDataRules":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetLateDataRule"},"description":"A list of data rules that send notifications to CloudWatch, when data arrives late. To specify `lateDataRules` , the dataset must use a [DeltaTimer](https://docs.aws.amazon.com/iotanalytics/latest/APIReference/API_DeltaTime.html) filter."},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:DatasetRetentionPeriod","description":"Optional. How long, in days, message data is kept for the dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the data set.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"triggers":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetTrigger"},"description":"The `DatasetTrigger` objects that specify when the dataset is automatically updated."},"versioningConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetVersioningConfiguration","description":"Optional. How many versions of dataset contents are kept. If not specified or set to null, only the latest version plus the latest succeeded version (if they are different) are kept for the time period specified by the `retentionPeriod` parameter. For more information, see [Keeping Multiple Versions of ITA datasets](https://docs.aws.amazon.com/iotanalytics/latest/userguide/getting-started.html#aws-iot-analytics-dataset-versions) in the *ITA User Guide* ."}},"type":"object","required":["actions","awsId"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetAction"},"description":"The `DatasetAction` objects that automatically create the dataset contents."},"contentDeliveryRules":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetContentDeliveryRule"},"description":"When dataset contents are created they are delivered to destinations specified here."},"datasetName":{"type":"string","description":"The name of the dataset."},"lateDataRules":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetLateDataRule"},"description":"A list of data rules that send notifications to CloudWatch, when data arrives late. To specify `lateDataRules` , the dataset must use a [DeltaTimer](https://docs.aws.amazon.com/iotanalytics/latest/APIReference/API_DeltaTime.html) filter."},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:DatasetRetentionPeriod","description":"Optional. How long, in days, message data is kept for the dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the data set.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"triggers":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetTrigger"},"description":"The `DatasetTrigger` objects that specify when the dataset is automatically updated."},"versioningConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetVersioningConfiguration","description":"Optional. How many versions of dataset contents are kept. If not specified or set to null, only the latest version plus the latest succeeded version (if they are different) are kept for the time period specified by the `retentionPeriod` parameter. For more information, see [Keeping Multiple Versions of ITA datasets](https://docs.aws.amazon.com/iotanalytics/latest/userguide/getting-started.html#aws-iot-analytics-dataset-versions) in the *ITA User Guide* ."}},"requiredInputs":["actions"]},"aws-native:iotanalytics:Datastore":{"description":"Resource Type definition for AWS::IoTAnalytics::Datastore\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var datastore = new AwsNative.IoTAnalytics.Datastore(\"datastore\", new()\n    {\n        DatastoreName = \"SimpleDatastore\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDatastore(ctx, \"datastore\", \u0026iotanalytics.DatastoreArgs{\n\t\t\tDatastoreName: pulumi.String(\"SimpleDatastore\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst datastore = new aws_native.iotanalytics.Datastore(\"datastore\", {datastoreName: \"SimpleDatastore\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndatastore = aws_native.iotanalytics.Datastore(\"datastore\", datastore_name=\"SimpleDatastore\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var datastore = new AwsNative.IoTAnalytics.Datastore(\"datastore\", new()\n    {\n        DatastoreName = \"SimpleDatastore\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDatastore(ctx, \"datastore\", \u0026iotanalytics.DatastoreArgs{\n\t\t\tDatastoreName: pulumi.String(\"SimpleDatastore\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst datastore = new aws_native.iotanalytics.Datastore(\"datastore\", {datastoreName: \"SimpleDatastore\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndatastore = aws_native.iotanalytics.Datastore(\"datastore\", datastore_name=\"SimpleDatastore\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var datastore = new AwsNative.IoTAnalytics.Datastore(\"datastore\", new()\n    {\n        DatastoreName = \"ComplexDatastore\",\n        RetentionPeriod = new AwsNative.IoTAnalytics.Inputs.DatastoreRetentionPeriodArgs\n        {\n            Unlimited = false,\n            NumberOfDays = 10,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDatastore(ctx, \"datastore\", \u0026iotanalytics.DatastoreArgs{\n\t\t\tDatastoreName: pulumi.String(\"ComplexDatastore\"),\n\t\t\tRetentionPeriod: \u0026iotanalytics.DatastoreRetentionPeriodArgs{\n\t\t\t\tUnlimited:    pulumi.Bool(false),\n\t\t\t\tNumberOfDays: pulumi.Int(10),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst datastore = new aws_native.iotanalytics.Datastore(\"datastore\", {\n    datastoreName: \"ComplexDatastore\",\n    retentionPeriod: {\n        unlimited: false,\n        numberOfDays: 10,\n    },\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndatastore = aws_native.iotanalytics.Datastore(\"datastore\",\n    datastore_name=\"ComplexDatastore\",\n    retention_period={\n        \"unlimited\": False,\n        \"number_of_days\": 10,\n    },\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var datastore = new AwsNative.IoTAnalytics.Datastore(\"datastore\", new()\n    {\n        DatastoreName = \"ComplexDatastore\",\n        RetentionPeriod = new AwsNative.IoTAnalytics.Inputs.DatastoreRetentionPeriodArgs\n        {\n            Unlimited = false,\n            NumberOfDays = 10,\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewDatastore(ctx, \"datastore\", \u0026iotanalytics.DatastoreArgs{\n\t\t\tDatastoreName: pulumi.String(\"ComplexDatastore\"),\n\t\t\tRetentionPeriod: \u0026iotanalytics.DatastoreRetentionPeriodArgs{\n\t\t\t\tUnlimited:    pulumi.Bool(false),\n\t\t\t\tNumberOfDays: pulumi.Int(10),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst datastore = new aws_native.iotanalytics.Datastore(\"datastore\", {\n    datastoreName: \"ComplexDatastore\",\n    retentionPeriod: {\n        unlimited: false,\n        numberOfDays: 10,\n    },\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ndatastore = aws_native.iotanalytics.Datastore(\"datastore\",\n    datastore_name=\"ComplexDatastore\",\n    retention_period={\n        \"unlimited\": False,\n        \"number_of_days\": 10,\n    },\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string"},"datastoreName":{"type":"string","description":"The name of the data store.","replaceOnChanges":true},"datastorePartitions":{"$ref":"#/types/aws-native:iotanalytics:DatastorePartitions","description":"Information about the partition dimensions in a data store."},"datastoreStorage":{"$ref":"#/types/aws-native:iotanalytics:DatastoreStorage","description":"Where data store data is stored."},"fileFormatConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatastoreFileFormatConfiguration","description":"Contains the configuration information of file formats. ITA data stores support JSON and [Parquet](https://docs.aws.amazon.com/https://parquet.apache.org/) .\n\nThe default file format is JSON. You can specify only one format.\n\nYou can't change the file format after you create the data store."},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:DatastoreRetentionPeriod","description":"How long, in days, message data is kept for the data store. When `customerManagedS3` storage is selected, this parameter is ignored."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the data store.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["awsId"],"inputProperties":{"datastoreName":{"type":"string","description":"The name of the data store."},"datastorePartitions":{"$ref":"#/types/aws-native:iotanalytics:DatastorePartitions","description":"Information about the partition dimensions in a data store."},"datastoreStorage":{"$ref":"#/types/aws-native:iotanalytics:DatastoreStorage","description":"Where data store data is stored."},"fileFormatConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatastoreFileFormatConfiguration","description":"Contains the configuration information of file formats. ITA data stores support JSON and [Parquet](https://docs.aws.amazon.com/https://parquet.apache.org/) .\n\nThe default file format is JSON. You can specify only one format.\n\nYou can't change the file format after you create the data store."},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:DatastoreRetentionPeriod","description":"How long, in days, message data is kept for the data store. When `customerManagedS3` storage is selected, this parameter is ignored."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the data store.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}}},"aws-native:iotanalytics:Pipeline":{"description":"Resource Type definition for AWS::IoTAnalytics::Pipeline\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var pipeline = new AwsNative.IoTAnalytics.Pipeline(\"pipeline\", new()\n    {\n        PipelineName = \"SimplePipeline\",\n        PipelineActivities = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.PipelineActivityArgs\n            {\n                Channel = new AwsNative.IoTAnalytics.Inputs.PipelineChannelArgs\n                {\n                    Name = \"ChannelActivity\",\n                    ChannelName = \"SimpleChannel\",\n                    Next = \"DatastoreActivity\",\n                },\n                Datastore = new AwsNative.IoTAnalytics.Inputs.PipelineDatastoreArgs\n                {\n                    Name = \"DatastoreActivity\",\n                    DatastoreName = \"SimpleDatastore\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewPipeline(ctx, \"pipeline\", \u0026iotanalytics.PipelineArgs{\n\t\t\tPipelineName: pulumi.String(\"SimplePipeline\"),\n\t\t\tPipelineActivities: iotanalytics.PipelineActivityArray{\n\t\t\t\t\u0026iotanalytics.PipelineActivityArgs{\n\t\t\t\t\tChannel: \u0026iotanalytics.PipelineChannelArgs{\n\t\t\t\t\t\tName:        pulumi.String(\"ChannelActivity\"),\n\t\t\t\t\t\tChannelName: pulumi.String(\"SimpleChannel\"),\n\t\t\t\t\t\tNext:        pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDatastore: \u0026iotanalytics.PipelineDatastoreArgs{\n\t\t\t\t\t\tName:          pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t\tDatastoreName: pulumi.String(\"SimpleDatastore\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst pipeline = new aws_native.iotanalytics.Pipeline(\"pipeline\", {\n    pipelineName: \"SimplePipeline\",\n    pipelineActivities: [{\n        channel: {\n            name: \"ChannelActivity\",\n            channelName: \"SimpleChannel\",\n            next: \"DatastoreActivity\",\n        },\n        datastore: {\n            name: \"DatastoreActivity\",\n            datastoreName: \"SimpleDatastore\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\npipeline = aws_native.iotanalytics.Pipeline(\"pipeline\",\n    pipeline_name=\"SimplePipeline\",\n    pipeline_activities=[{\n        \"channel\": {\n            \"name\": \"ChannelActivity\",\n            \"channel_name\": \"SimpleChannel\",\n            \"next\": \"DatastoreActivity\",\n        },\n        \"datastore\": {\n            \"name\": \"DatastoreActivity\",\n            \"datastore_name\": \"SimpleDatastore\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var pipeline = new AwsNative.IoTAnalytics.Pipeline(\"pipeline\", new()\n    {\n        PipelineName = \"SimplePipeline\",\n        PipelineActivities = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.PipelineActivityArgs\n            {\n                Channel = new AwsNative.IoTAnalytics.Inputs.PipelineChannelArgs\n                {\n                    Name = \"ChannelActivity\",\n                    ChannelName = \"SimpleChannel\",\n                    Next = \"DatastoreActivity\",\n                },\n                Datastore = new AwsNative.IoTAnalytics.Inputs.PipelineDatastoreArgs\n                {\n                    Name = \"DatastoreActivity\",\n                    DatastoreName = \"SimpleDatastore\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewPipeline(ctx, \"pipeline\", \u0026iotanalytics.PipelineArgs{\n\t\t\tPipelineName: pulumi.String(\"SimplePipeline\"),\n\t\t\tPipelineActivities: iotanalytics.PipelineActivityArray{\n\t\t\t\t\u0026iotanalytics.PipelineActivityArgs{\n\t\t\t\t\tChannel: \u0026iotanalytics.PipelineChannelArgs{\n\t\t\t\t\t\tName:        pulumi.String(\"ChannelActivity\"),\n\t\t\t\t\t\tChannelName: pulumi.String(\"SimpleChannel\"),\n\t\t\t\t\t\tNext:        pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDatastore: \u0026iotanalytics.PipelineDatastoreArgs{\n\t\t\t\t\t\tName:          pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t\tDatastoreName: pulumi.String(\"SimpleDatastore\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst pipeline = new aws_native.iotanalytics.Pipeline(\"pipeline\", {\n    pipelineName: \"SimplePipeline\",\n    pipelineActivities: [{\n        channel: {\n            name: \"ChannelActivity\",\n            channelName: \"SimpleChannel\",\n            next: \"DatastoreActivity\",\n        },\n        datastore: {\n            name: \"DatastoreActivity\",\n            datastoreName: \"SimpleDatastore\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\npipeline = aws_native.iotanalytics.Pipeline(\"pipeline\",\n    pipeline_name=\"SimplePipeline\",\n    pipeline_activities=[{\n        \"channel\": {\n            \"name\": \"ChannelActivity\",\n            \"channel_name\": \"SimpleChannel\",\n            \"next\": \"DatastoreActivity\",\n        },\n        \"datastore\": {\n            \"name\": \"DatastoreActivity\",\n            \"datastore_name\": \"SimpleDatastore\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var pipeline = new AwsNative.IoTAnalytics.Pipeline(\"pipeline\", new()\n    {\n        PipelineName = \"ComplexPipeline\",\n        PipelineActivities = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.PipelineActivityArgs\n            {\n                Channel = new AwsNative.IoTAnalytics.Inputs.PipelineChannelArgs\n                {\n                    Name = \"ChannelActivity\",\n                    ChannelName = \"Channel\",\n                    Next = \"LambdaActivity\",\n                },\n                Lambda = new AwsNative.IoTAnalytics.Inputs.PipelineLambdaArgs\n                {\n                    Name = \"LambdaActivity\",\n                    LambdaName = \"Lambda\",\n                    BatchSize = 1,\n                    Next = \"AddAttributesActivity\",\n                },\n                AddAttributes = new AwsNative.IoTAnalytics.Inputs.PipelineAddAttributesArgs\n                {\n                    Name = \"AddAttributesActivity\",\n                    Attributes = \n                    {\n                        { \"key1\", \"attribute1\" },\n                        { \"key2\", \"attribute2\" },\n                    },\n                    Next = \"RemoveAttributesActivity\",\n                },\n                RemoveAttributes = new AwsNative.IoTAnalytics.Inputs.PipelineRemoveAttributesArgs\n                {\n                    Name = \"RemoveAttributesActivity\",\n                    Attributes = new[]\n                    {\n                        \"attribute1\",\n                        \"attribute2\",\n                    },\n                    Next = \"SelectAttributesActivity\",\n                },\n                SelectAttributes = new AwsNative.IoTAnalytics.Inputs.PipelineSelectAttributesArgs\n                {\n                    Name = \"SelectAttributesActivity\",\n                    Attributes = new[]\n                    {\n                        \"attribute1\",\n                        \"attribute2\",\n                    },\n                    Next = \"FilterActivity\",\n                },\n                Filter = new AwsNative.IoTAnalytics.Inputs.PipelineFilterArgs\n                {\n                    Name = \"FilterActivity\",\n                    Filter = \"attribute1 \u003e 40 AND attribute2 \u003c 20\",\n                    Next = \"MathActivity\",\n                },\n                Math = new AwsNative.IoTAnalytics.Inputs.PipelineMathArgs\n                {\n                    Name = \"MathActivity\",\n                    Attribute = \"attribute\",\n                    Math = \"attribute - 10\",\n                    Next = \"DeviceRegistryEnrichActivity\",\n                },\n                DeviceRegistryEnrich = new AwsNative.IoTAnalytics.Inputs.PipelineDeviceRegistryEnrichArgs\n                {\n                    Name = \"DeviceRegistryEnrichActivity\",\n                    Attribute = \"attribute\",\n                    ThingName = \"thingName\",\n                    RoleArn = \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n                    Next = \"DeviceShadowEnrichActivity\",\n                },\n                DeviceShadowEnrich = new AwsNative.IoTAnalytics.Inputs.PipelineDeviceShadowEnrichArgs\n                {\n                    Name = \"DeviceShadowEnrichActivity\",\n                    Attribute = \"attribute\",\n                    ThingName = \"thingName\",\n                    RoleArn = \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n                    Next = \"DatastoreActivity\",\n                },\n                Datastore = new AwsNative.IoTAnalytics.Inputs.PipelineDatastoreArgs\n                {\n                    Name = \"DatastoreActivity\",\n                    DatastoreName = \"Datastore\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewPipeline(ctx, \"pipeline\", \u0026iotanalytics.PipelineArgs{\n\t\t\tPipelineName: pulumi.String(\"ComplexPipeline\"),\n\t\t\tPipelineActivities: iotanalytics.PipelineActivityArray{\n\t\t\t\t\u0026iotanalytics.PipelineActivityArgs{\n\t\t\t\t\tChannel: \u0026iotanalytics.PipelineChannelArgs{\n\t\t\t\t\t\tName:        pulumi.String(\"ChannelActivity\"),\n\t\t\t\t\t\tChannelName: pulumi.String(\"Channel\"),\n\t\t\t\t\t\tNext:        pulumi.String(\"LambdaActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tLambda: \u0026iotanalytics.PipelineLambdaArgs{\n\t\t\t\t\t\tName:       pulumi.String(\"LambdaActivity\"),\n\t\t\t\t\t\tLambdaName: pulumi.String(\"Lambda\"),\n\t\t\t\t\t\tBatchSize:  pulumi.Int(1),\n\t\t\t\t\t\tNext:       pulumi.String(\"AddAttributesActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tAddAttributes: \u0026iotanalytics.PipelineAddAttributesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"AddAttributesActivity\"),\n\t\t\t\t\t\tAttributes: pulumi.StringMap{\n\t\t\t\t\t\t\t\"key1\": pulumi.String(\"attribute1\"),\n\t\t\t\t\t\t\t\"key2\": pulumi.String(\"attribute2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNext: pulumi.String(\"RemoveAttributesActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tRemoveAttributes: \u0026iotanalytics.PipelineRemoveAttributesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"RemoveAttributesActivity\"),\n\t\t\t\t\t\tAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"attribute1\"),\n\t\t\t\t\t\t\tpulumi.String(\"attribute2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNext: pulumi.String(\"SelectAttributesActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tSelectAttributes: \u0026iotanalytics.PipelineSelectAttributesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"SelectAttributesActivity\"),\n\t\t\t\t\t\tAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"attribute1\"),\n\t\t\t\t\t\t\tpulumi.String(\"attribute2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNext: pulumi.String(\"FilterActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tFilter: \u0026iotanalytics.PipelineFilterArgs{\n\t\t\t\t\t\tName:   pulumi.String(\"FilterActivity\"),\n\t\t\t\t\t\tFilter: pulumi.String(\"attribute1 \u003e 40 AND attribute2 \u003c 20\"),\n\t\t\t\t\t\tNext:   pulumi.String(\"MathActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tMath: \u0026iotanalytics.PipelineMathArgs{\n\t\t\t\t\t\tName:      pulumi.String(\"MathActivity\"),\n\t\t\t\t\t\tAttribute: pulumi.String(\"attribute\"),\n\t\t\t\t\t\tMath:      pulumi.String(\"attribute - 10\"),\n\t\t\t\t\t\tNext:      pulumi.String(\"DeviceRegistryEnrichActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDeviceRegistryEnrich: \u0026iotanalytics.PipelineDeviceRegistryEnrichArgs{\n\t\t\t\t\t\tName:      pulumi.String(\"DeviceRegistryEnrichActivity\"),\n\t\t\t\t\t\tAttribute: pulumi.String(\"attribute\"),\n\t\t\t\t\t\tThingName: pulumi.String(\"thingName\"),\n\t\t\t\t\t\tRoleArn:   pulumi.String(\"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\"),\n\t\t\t\t\t\tNext:      pulumi.String(\"DeviceShadowEnrichActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDeviceShadowEnrich: \u0026iotanalytics.PipelineDeviceShadowEnrichArgs{\n\t\t\t\t\t\tName:      pulumi.String(\"DeviceShadowEnrichActivity\"),\n\t\t\t\t\t\tAttribute: pulumi.String(\"attribute\"),\n\t\t\t\t\t\tThingName: pulumi.String(\"thingName\"),\n\t\t\t\t\t\tRoleArn:   pulumi.String(\"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\"),\n\t\t\t\t\t\tNext:      pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDatastore: \u0026iotanalytics.PipelineDatastoreArgs{\n\t\t\t\t\t\tName:          pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t\tDatastoreName: pulumi.String(\"Datastore\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst pipeline = new aws_native.iotanalytics.Pipeline(\"pipeline\", {\n    pipelineName: \"ComplexPipeline\",\n    pipelineActivities: [{\n        channel: {\n            name: \"ChannelActivity\",\n            channelName: \"Channel\",\n            next: \"LambdaActivity\",\n        },\n        lambda: {\n            name: \"LambdaActivity\",\n            lambdaName: \"Lambda\",\n            batchSize: 1,\n            next: \"AddAttributesActivity\",\n        },\n        addAttributes: {\n            name: \"AddAttributesActivity\",\n            attributes: {\n                key1: \"attribute1\",\n                key2: \"attribute2\",\n            },\n            next: \"RemoveAttributesActivity\",\n        },\n        removeAttributes: {\n            name: \"RemoveAttributesActivity\",\n            attributes: [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            next: \"SelectAttributesActivity\",\n        },\n        selectAttributes: {\n            name: \"SelectAttributesActivity\",\n            attributes: [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            next: \"FilterActivity\",\n        },\n        filter: {\n            name: \"FilterActivity\",\n            filter: \"attribute1 \u003e 40 AND attribute2 \u003c 20\",\n            next: \"MathActivity\",\n        },\n        math: {\n            name: \"MathActivity\",\n            attribute: \"attribute\",\n            math: \"attribute - 10\",\n            next: \"DeviceRegistryEnrichActivity\",\n        },\n        deviceRegistryEnrich: {\n            name: \"DeviceRegistryEnrichActivity\",\n            attribute: \"attribute\",\n            thingName: \"thingName\",\n            roleArn: \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            next: \"DeviceShadowEnrichActivity\",\n        },\n        deviceShadowEnrich: {\n            name: \"DeviceShadowEnrichActivity\",\n            attribute: \"attribute\",\n            thingName: \"thingName\",\n            roleArn: \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            next: \"DatastoreActivity\",\n        },\n        datastore: {\n            name: \"DatastoreActivity\",\n            datastoreName: \"Datastore\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\npipeline = aws_native.iotanalytics.Pipeline(\"pipeline\",\n    pipeline_name=\"ComplexPipeline\",\n    pipeline_activities=[{\n        \"channel\": {\n            \"name\": \"ChannelActivity\",\n            \"channel_name\": \"Channel\",\n            \"next\": \"LambdaActivity\",\n        },\n        \"lambda_\": {\n            \"name\": \"LambdaActivity\",\n            \"lambda_name\": \"Lambda\",\n            \"batch_size\": 1,\n            \"next\": \"AddAttributesActivity\",\n        },\n        \"add_attributes\": {\n            \"name\": \"AddAttributesActivity\",\n            \"attributes\": {\n                \"key1\": \"attribute1\",\n                \"key2\": \"attribute2\",\n            },\n            \"next\": \"RemoveAttributesActivity\",\n        },\n        \"remove_attributes\": {\n            \"name\": \"RemoveAttributesActivity\",\n            \"attributes\": [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            \"next\": \"SelectAttributesActivity\",\n        },\n        \"select_attributes\": {\n            \"name\": \"SelectAttributesActivity\",\n            \"attributes\": [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            \"next\": \"FilterActivity\",\n        },\n        \"filter\": {\n            \"name\": \"FilterActivity\",\n            \"filter\": \"attribute1 \u003e 40 AND attribute2 \u003c 20\",\n            \"next\": \"MathActivity\",\n        },\n        \"math\": {\n            \"name\": \"MathActivity\",\n            \"attribute\": \"attribute\",\n            \"math\": \"attribute - 10\",\n            \"next\": \"DeviceRegistryEnrichActivity\",\n        },\n        \"device_registry_enrich\": {\n            \"name\": \"DeviceRegistryEnrichActivity\",\n            \"attribute\": \"attribute\",\n            \"thing_name\": \"thingName\",\n            \"role_arn\": \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            \"next\": \"DeviceShadowEnrichActivity\",\n        },\n        \"device_shadow_enrich\": {\n            \"name\": \"DeviceShadowEnrichActivity\",\n            \"attribute\": \"attribute\",\n            \"thing_name\": \"thingName\",\n            \"role_arn\": \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            \"next\": \"DatastoreActivity\",\n        },\n        \"datastore\": {\n            \"name\": \"DatastoreActivity\",\n            \"datastore_name\": \"Datastore\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var pipeline = new AwsNative.IoTAnalytics.Pipeline(\"pipeline\", new()\n    {\n        PipelineName = \"ComplexPipeline\",\n        PipelineActivities = new[]\n        {\n            new AwsNative.IoTAnalytics.Inputs.PipelineActivityArgs\n            {\n                Channel = new AwsNative.IoTAnalytics.Inputs.PipelineChannelArgs\n                {\n                    Name = \"ChannelActivity\",\n                    ChannelName = \"Channel\",\n                    Next = \"LambdaActivity\",\n                },\n                Lambda = new AwsNative.IoTAnalytics.Inputs.PipelineLambdaArgs\n                {\n                    Name = \"LambdaActivity\",\n                    LambdaName = \"Lambda\",\n                    BatchSize = 1,\n                    Next = \"AddAttributesActivity\",\n                },\n                AddAttributes = new AwsNative.IoTAnalytics.Inputs.PipelineAddAttributesArgs\n                {\n                    Name = \"AddAttributesActivity\",\n                    Attributes = \n                    {\n                        { \"key1\", \"attribute1\" },\n                        { \"key2\", \"attribute2\" },\n                    },\n                    Next = \"RemoveAttributesActivity\",\n                },\n                RemoveAttributes = new AwsNative.IoTAnalytics.Inputs.PipelineRemoveAttributesArgs\n                {\n                    Name = \"RemoveAttributesActivity\",\n                    Attributes = new[]\n                    {\n                        \"attribute1\",\n                        \"attribute2\",\n                    },\n                    Next = \"SelectAttributesActivity\",\n                },\n                SelectAttributes = new AwsNative.IoTAnalytics.Inputs.PipelineSelectAttributesArgs\n                {\n                    Name = \"SelectAttributesActivity\",\n                    Attributes = new[]\n                    {\n                        \"attribute1\",\n                        \"attribute2\",\n                    },\n                    Next = \"FilterActivity\",\n                },\n                Filter = new AwsNative.IoTAnalytics.Inputs.PipelineFilterArgs\n                {\n                    Name = \"FilterActivity\",\n                    Filter = \"attribute1 \u003e 40 AND attribute2 \u003c 20\",\n                    Next = \"MathActivity\",\n                },\n                Math = new AwsNative.IoTAnalytics.Inputs.PipelineMathArgs\n                {\n                    Name = \"MathActivity\",\n                    Attribute = \"attribute\",\n                    Math = \"attribute - 10\",\n                    Next = \"DeviceRegistryEnrichActivity\",\n                },\n                DeviceRegistryEnrich = new AwsNative.IoTAnalytics.Inputs.PipelineDeviceRegistryEnrichArgs\n                {\n                    Name = \"DeviceRegistryEnrichActivity\",\n                    Attribute = \"attribute\",\n                    ThingName = \"thingName\",\n                    RoleArn = \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n                    Next = \"DeviceShadowEnrichActivity\",\n                },\n                DeviceShadowEnrich = new AwsNative.IoTAnalytics.Inputs.PipelineDeviceShadowEnrichArgs\n                {\n                    Name = \"DeviceShadowEnrichActivity\",\n                    Attribute = \"attribute\",\n                    ThingName = \"thingName\",\n                    RoleArn = \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n                    Next = \"DatastoreActivity\",\n                },\n                Datastore = new AwsNative.IoTAnalytics.Inputs.PipelineDatastoreArgs\n                {\n                    Name = \"DatastoreActivity\",\n                    DatastoreName = \"Datastore\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotanalytics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotanalytics.NewPipeline(ctx, \"pipeline\", \u0026iotanalytics.PipelineArgs{\n\t\t\tPipelineName: pulumi.String(\"ComplexPipeline\"),\n\t\t\tPipelineActivities: iotanalytics.PipelineActivityArray{\n\t\t\t\t\u0026iotanalytics.PipelineActivityArgs{\n\t\t\t\t\tChannel: \u0026iotanalytics.PipelineChannelArgs{\n\t\t\t\t\t\tName:        pulumi.String(\"ChannelActivity\"),\n\t\t\t\t\t\tChannelName: pulumi.String(\"Channel\"),\n\t\t\t\t\t\tNext:        pulumi.String(\"LambdaActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tLambda: \u0026iotanalytics.PipelineLambdaArgs{\n\t\t\t\t\t\tName:       pulumi.String(\"LambdaActivity\"),\n\t\t\t\t\t\tLambdaName: pulumi.String(\"Lambda\"),\n\t\t\t\t\t\tBatchSize:  pulumi.Int(1),\n\t\t\t\t\t\tNext:       pulumi.String(\"AddAttributesActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tAddAttributes: \u0026iotanalytics.PipelineAddAttributesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"AddAttributesActivity\"),\n\t\t\t\t\t\tAttributes: pulumi.StringMap{\n\t\t\t\t\t\t\t\"key1\": pulumi.String(\"attribute1\"),\n\t\t\t\t\t\t\t\"key2\": pulumi.String(\"attribute2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNext: pulumi.String(\"RemoveAttributesActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tRemoveAttributes: \u0026iotanalytics.PipelineRemoveAttributesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"RemoveAttributesActivity\"),\n\t\t\t\t\t\tAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"attribute1\"),\n\t\t\t\t\t\t\tpulumi.String(\"attribute2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNext: pulumi.String(\"SelectAttributesActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tSelectAttributes: \u0026iotanalytics.PipelineSelectAttributesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"SelectAttributesActivity\"),\n\t\t\t\t\t\tAttributes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"attribute1\"),\n\t\t\t\t\t\t\tpulumi.String(\"attribute2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNext: pulumi.String(\"FilterActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tFilter: \u0026iotanalytics.PipelineFilterArgs{\n\t\t\t\t\t\tName:   pulumi.String(\"FilterActivity\"),\n\t\t\t\t\t\tFilter: pulumi.String(\"attribute1 \u003e 40 AND attribute2 \u003c 20\"),\n\t\t\t\t\t\tNext:   pulumi.String(\"MathActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tMath: \u0026iotanalytics.PipelineMathArgs{\n\t\t\t\t\t\tName:      pulumi.String(\"MathActivity\"),\n\t\t\t\t\t\tAttribute: pulumi.String(\"attribute\"),\n\t\t\t\t\t\tMath:      pulumi.String(\"attribute - 10\"),\n\t\t\t\t\t\tNext:      pulumi.String(\"DeviceRegistryEnrichActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDeviceRegistryEnrich: \u0026iotanalytics.PipelineDeviceRegistryEnrichArgs{\n\t\t\t\t\t\tName:      pulumi.String(\"DeviceRegistryEnrichActivity\"),\n\t\t\t\t\t\tAttribute: pulumi.String(\"attribute\"),\n\t\t\t\t\t\tThingName: pulumi.String(\"thingName\"),\n\t\t\t\t\t\tRoleArn:   pulumi.String(\"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\"),\n\t\t\t\t\t\tNext:      pulumi.String(\"DeviceShadowEnrichActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDeviceShadowEnrich: \u0026iotanalytics.PipelineDeviceShadowEnrichArgs{\n\t\t\t\t\t\tName:      pulumi.String(\"DeviceShadowEnrichActivity\"),\n\t\t\t\t\t\tAttribute: pulumi.String(\"attribute\"),\n\t\t\t\t\t\tThingName: pulumi.String(\"thingName\"),\n\t\t\t\t\t\tRoleArn:   pulumi.String(\"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\"),\n\t\t\t\t\t\tNext:      pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t},\n\t\t\t\t\tDatastore: \u0026iotanalytics.PipelineDatastoreArgs{\n\t\t\t\t\t\tName:          pulumi.String(\"DatastoreActivity\"),\n\t\t\t\t\t\tDatastoreName: pulumi.String(\"Datastore\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst pipeline = new aws_native.iotanalytics.Pipeline(\"pipeline\", {\n    pipelineName: \"ComplexPipeline\",\n    pipelineActivities: [{\n        channel: {\n            name: \"ChannelActivity\",\n            channelName: \"Channel\",\n            next: \"LambdaActivity\",\n        },\n        lambda: {\n            name: \"LambdaActivity\",\n            lambdaName: \"Lambda\",\n            batchSize: 1,\n            next: \"AddAttributesActivity\",\n        },\n        addAttributes: {\n            name: \"AddAttributesActivity\",\n            attributes: {\n                key1: \"attribute1\",\n                key2: \"attribute2\",\n            },\n            next: \"RemoveAttributesActivity\",\n        },\n        removeAttributes: {\n            name: \"RemoveAttributesActivity\",\n            attributes: [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            next: \"SelectAttributesActivity\",\n        },\n        selectAttributes: {\n            name: \"SelectAttributesActivity\",\n            attributes: [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            next: \"FilterActivity\",\n        },\n        filter: {\n            name: \"FilterActivity\",\n            filter: \"attribute1 \u003e 40 AND attribute2 \u003c 20\",\n            next: \"MathActivity\",\n        },\n        math: {\n            name: \"MathActivity\",\n            attribute: \"attribute\",\n            math: \"attribute - 10\",\n            next: \"DeviceRegistryEnrichActivity\",\n        },\n        deviceRegistryEnrich: {\n            name: \"DeviceRegistryEnrichActivity\",\n            attribute: \"attribute\",\n            thingName: \"thingName\",\n            roleArn: \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            next: \"DeviceShadowEnrichActivity\",\n        },\n        deviceShadowEnrich: {\n            name: \"DeviceShadowEnrichActivity\",\n            attribute: \"attribute\",\n            thingName: \"thingName\",\n            roleArn: \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            next: \"DatastoreActivity\",\n        },\n        datastore: {\n            name: \"DatastoreActivity\",\n            datastoreName: \"Datastore\",\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\npipeline = aws_native.iotanalytics.Pipeline(\"pipeline\",\n    pipeline_name=\"ComplexPipeline\",\n    pipeline_activities=[{\n        \"channel\": {\n            \"name\": \"ChannelActivity\",\n            \"channel_name\": \"Channel\",\n            \"next\": \"LambdaActivity\",\n        },\n        \"lambda_\": {\n            \"name\": \"LambdaActivity\",\n            \"lambda_name\": \"Lambda\",\n            \"batch_size\": 1,\n            \"next\": \"AddAttributesActivity\",\n        },\n        \"add_attributes\": {\n            \"name\": \"AddAttributesActivity\",\n            \"attributes\": {\n                \"key1\": \"attribute1\",\n                \"key2\": \"attribute2\",\n            },\n            \"next\": \"RemoveAttributesActivity\",\n        },\n        \"remove_attributes\": {\n            \"name\": \"RemoveAttributesActivity\",\n            \"attributes\": [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            \"next\": \"SelectAttributesActivity\",\n        },\n        \"select_attributes\": {\n            \"name\": \"SelectAttributesActivity\",\n            \"attributes\": [\n                \"attribute1\",\n                \"attribute2\",\n            ],\n            \"next\": \"FilterActivity\",\n        },\n        \"filter\": {\n            \"name\": \"FilterActivity\",\n            \"filter\": \"attribute1 \u003e 40 AND attribute2 \u003c 20\",\n            \"next\": \"MathActivity\",\n        },\n        \"math\": {\n            \"name\": \"MathActivity\",\n            \"attribute\": \"attribute\",\n            \"math\": \"attribute - 10\",\n            \"next\": \"DeviceRegistryEnrichActivity\",\n        },\n        \"device_registry_enrich\": {\n            \"name\": \"DeviceRegistryEnrichActivity\",\n            \"attribute\": \"attribute\",\n            \"thing_name\": \"thingName\",\n            \"role_arn\": \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            \"next\": \"DeviceShadowEnrichActivity\",\n        },\n        \"device_shadow_enrich\": {\n            \"name\": \"DeviceShadowEnrichActivity\",\n            \"attribute\": \"attribute\",\n            \"thing_name\": \"thingName\",\n            \"role_arn\": \"arn:aws:iam::\u003cyour_Account_Id\u003e:role/Enrich\",\n            \"next\": \"DatastoreActivity\",\n        },\n        \"datastore\": {\n            \"name\": \"DatastoreActivity\",\n            \"datastore_name\": \"Datastore\",\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string"},"pipelineActivities":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:PipelineActivity"},"description":"A list of \"PipelineActivity\" objects. Activities perform transformations on your messages, such as removing, renaming or adding message attributes; filtering messages based on attribute values; invoking your Lambda functions on messages for advanced processing; or performing mathematical transformations to normalize device data.\n\nThe list can be 2-25 *PipelineActivity* objects and must contain both a `channel` and a `datastore` activity. Each entry in the list must contain only one activity, for example:\n\n`pipelineActivities = [ { \"channel\": { ... } }, { \"lambda\": { ... } }, ... ]`"},"pipelineName":{"type":"string","description":"The name of the pipeline.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the pipeline.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["awsId","pipelineActivities"],"inputProperties":{"pipelineActivities":{"type":"array","items":{"$ref":"#/types/aws-native:iotanalytics:PipelineActivity"},"description":"A list of \"PipelineActivity\" objects. Activities perform transformations on your messages, such as removing, renaming or adding message attributes; filtering messages based on attribute values; invoking your Lambda functions on messages for advanced processing; or performing mathematical transformations to normalize device data.\n\nThe list can be 2-25 *PipelineActivity* objects and must contain both a `channel` and a `datastore` activity. Each entry in the list must contain only one activity, for example:\n\n`pipelineActivities = [ { \"channel\": { ... } }, { \"lambda\": { ... } }, ... ]`"},"pipelineName":{"type":"string","description":"The name of the pipeline."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata which can be used to manage the pipeline.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["pipelineActivities"]},"aws-native:iotcoredeviceadvisor:SuiteDefinition":{"description":"An example resource schema demonstrating some basic constructs and validation rules.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testSuiteDefinition = new AwsNative.IoTCoreDeviceAdvisor.SuiteDefinition(\"testSuiteDefinition\", new()\n    {\n        SuiteDefinitionConfiguration = new AwsNative.IoTCoreDeviceAdvisor.Inputs.SuiteDefinitionConfigurationPropertiesArgs\n        {\n            SuiteDefinitionName = \"SuiteDefinitionName\",\n            DevicePermissionRoleArn = \"arn:aws:iam::123456789012:role/RoleName\",\n            Devices = new[]\n            {\n                new AwsNative.IoTCoreDeviceAdvisor.Inputs.SuiteDefinitionDeviceUnderTestArgs\n                {\n                    ThingArn = \"arn:aws:iot:us-east-1:123456789012:thing/ThingName\",\n                },\n            },\n            RootGroup = @\"{\n\"\"configuration\"\": {},\n\"\"tests\"\": [{\n\"\"name\"\": \"\"TestGroup\"\",\n\"\"configuration\"\": {\n\"\"EXECUTION_TIMEOUT\"\": \"\"30\"\"\n},\n\"\"tests\"\": [{\n\"\"name\"\": \"\"MQTTPublishTest\"\",\n\"\"configuration\"\": {\n\"\"TOPIC_FOR_PUBLISH_VALIDATION\"\": \"\"target\"\"\n},\n\"\"test\"\": {\n\"\"id\"\": \"\"MQTT_Publish\"\",\n\"\"version\"\": \"\"0.0.0\"\"\n}\n}]\n}]\n}\",\n            IntendedForQualification = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotcoredeviceadvisor\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotcoredeviceadvisor.NewSuiteDefinition(ctx, \"testSuiteDefinition\", \u0026iotcoredeviceadvisor.SuiteDefinitionArgs{\n\t\t\tSuiteDefinitionConfiguration: \u0026iotcoredeviceadvisor.SuiteDefinitionConfigurationPropertiesArgs{\n\t\t\t\tSuiteDefinitionName:     pulumi.String(\"SuiteDefinitionName\"),\n\t\t\t\tDevicePermissionRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/RoleName\"),\n\t\t\t\tDevices: iotcoredeviceadvisor.SuiteDefinitionDeviceUnderTestArray{\n\t\t\t\t\t\u0026iotcoredeviceadvisor.SuiteDefinitionDeviceUnderTestArgs{\n\t\t\t\t\t\tThingArn: pulumi.String(\"arn:aws:iot:us-east-1:123456789012:thing/ThingName\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRootGroup: pulumi.String(`{\n\"configuration\": {},\n\"tests\": [{\n\"name\": \"TestGroup\",\n\"configuration\": {\n\"EXECUTION_TIMEOUT\": \"30\"\n},\n\"tests\": [{\n\"name\": \"MQTTPublishTest\",\n\"configuration\": {\n\"TOPIC_FOR_PUBLISH_VALIDATION\": \"target\"\n},\n\"test\": {\n\"id\": \"MQTT_Publish\",\n\"version\": \"0.0.0\"\n}\n}]\n}]\n}`),\n\t\t\t\tIntendedForQualification: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testSuiteDefinition = new aws_native.iotcoredeviceadvisor.SuiteDefinition(\"testSuiteDefinition\", {suiteDefinitionConfiguration: {\n    suiteDefinitionName: \"SuiteDefinitionName\",\n    devicePermissionRoleArn: \"arn:aws:iam::123456789012:role/RoleName\",\n    devices: [{\n        thingArn: \"arn:aws:iot:us-east-1:123456789012:thing/ThingName\",\n    }],\n    rootGroup: `{\n\"configuration\": {},\n\"tests\": [{\n\"name\": \"TestGroup\",\n\"configuration\": {\n\"EXECUTION_TIMEOUT\": \"30\"\n},\n\"tests\": [{\n\"name\": \"MQTTPublishTest\",\n\"configuration\": {\n\"TOPIC_FOR_PUBLISH_VALIDATION\": \"target\"\n},\n\"test\": {\n\"id\": \"MQTT_Publish\",\n\"version\": \"0.0.0\"\n}\n}]\n}]\n}`,\n    intendedForQualification: false,\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_suite_definition = aws_native.iotcoredeviceadvisor.SuiteDefinition(\"testSuiteDefinition\", suite_definition_configuration={\n    \"suite_definition_name\": \"SuiteDefinitionName\",\n    \"device_permission_role_arn\": \"arn:aws:iam::123456789012:role/RoleName\",\n    \"devices\": [{\n        \"thing_arn\": \"arn:aws:iot:us-east-1:123456789012:thing/ThingName\",\n    }],\n    \"root_group\": \"\"\"{\n\"configuration\": {},\n\"tests\": [{\n\"name\": \"TestGroup\",\n\"configuration\": {\n\"EXECUTION_TIMEOUT\": \"30\"\n},\n\"tests\": [{\n\"name\": \"MQTTPublishTest\",\n\"configuration\": {\n\"TOPIC_FOR_PUBLISH_VALIDATION\": \"target\"\n},\n\"test\": {\n\"id\": \"MQTT_Publish\",\n\"version\": \"0.0.0\"\n}\n}]\n}]\n}\"\"\",\n    \"intended_for_qualification\": False,\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testSuiteDefinition = new AwsNative.IoTCoreDeviceAdvisor.SuiteDefinition(\"testSuiteDefinition\", new()\n    {\n        SuiteDefinitionConfiguration = new AwsNative.IoTCoreDeviceAdvisor.Inputs.SuiteDefinitionConfigurationPropertiesArgs\n        {\n            SuiteDefinitionName = \"SuiteDefinitionName\",\n            DevicePermissionRoleArn = \"arn:aws:iam::123456789012:role/RoleName\",\n            Devices = new[]\n            {\n                new AwsNative.IoTCoreDeviceAdvisor.Inputs.SuiteDefinitionDeviceUnderTestArgs\n                {\n                    ThingArn = \"arn:aws:iot:us-east-1:123456789012:thing/ThingName\",\n                },\n            },\n            RootGroup = \"{ \\\"configuration\\\": {}, \\\"tests\\\": [{ \\\"name\\\": \\\"TestGroup\\\", \\\"configuration\\\": { \\\"EXECUTION_TIMEOUT\\\": \\\"30\\\" }, \\\"tests\\\": [{ \\\"name\\\": \\\"MQTTPublishTest\\\", \\\"configuration\\\": { \\\"TOPIC_FOR_PUBLISH_VALIDATION\\\": \\\"target\\\" }, \\\"test\\\": { \\\"id\\\": \\\"MQTT_Publish\\\", \\\"version\\\": \\\"0.0.0\\\" } }] }] }\",\n            IntendedForQualification = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotcoredeviceadvisor\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotcoredeviceadvisor.NewSuiteDefinition(ctx, \"testSuiteDefinition\", \u0026iotcoredeviceadvisor.SuiteDefinitionArgs{\n\t\t\tSuiteDefinitionConfiguration: \u0026iotcoredeviceadvisor.SuiteDefinitionConfigurationPropertiesArgs{\n\t\t\t\tSuiteDefinitionName:     pulumi.String(\"SuiteDefinitionName\"),\n\t\t\t\tDevicePermissionRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/RoleName\"),\n\t\t\t\tDevices: iotcoredeviceadvisor.SuiteDefinitionDeviceUnderTestArray{\n\t\t\t\t\t\u0026iotcoredeviceadvisor.SuiteDefinitionDeviceUnderTestArgs{\n\t\t\t\t\t\tThingArn: pulumi.String(\"arn:aws:iot:us-east-1:123456789012:thing/ThingName\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRootGroup:                pulumi.String(\"{ \\\"configuration\\\": {}, \\\"tests\\\": [{ \\\"name\\\": \\\"TestGroup\\\", \\\"configuration\\\": { \\\"EXECUTION_TIMEOUT\\\": \\\"30\\\" }, \\\"tests\\\": [{ \\\"name\\\": \\\"MQTTPublishTest\\\", \\\"configuration\\\": { \\\"TOPIC_FOR_PUBLISH_VALIDATION\\\": \\\"target\\\" }, \\\"test\\\": { \\\"id\\\": \\\"MQTT_Publish\\\", \\\"version\\\": \\\"0.0.0\\\" } }] }] }\"),\n\t\t\t\tIntendedForQualification: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testSuiteDefinition = new aws_native.iotcoredeviceadvisor.SuiteDefinition(\"testSuiteDefinition\", {suiteDefinitionConfiguration: {\n    suiteDefinitionName: \"SuiteDefinitionName\",\n    devicePermissionRoleArn: \"arn:aws:iam::123456789012:role/RoleName\",\n    devices: [{\n        thingArn: \"arn:aws:iot:us-east-1:123456789012:thing/ThingName\",\n    }],\n    rootGroup: \"{ \\\"configuration\\\": {}, \\\"tests\\\": [{ \\\"name\\\": \\\"TestGroup\\\", \\\"configuration\\\": { \\\"EXECUTION_TIMEOUT\\\": \\\"30\\\" }, \\\"tests\\\": [{ \\\"name\\\": \\\"MQTTPublishTest\\\", \\\"configuration\\\": { \\\"TOPIC_FOR_PUBLISH_VALIDATION\\\": \\\"target\\\" }, \\\"test\\\": { \\\"id\\\": \\\"MQTT_Publish\\\", \\\"version\\\": \\\"0.0.0\\\" } }] }] }\",\n    intendedForQualification: false,\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_suite_definition = aws_native.iotcoredeviceadvisor.SuiteDefinition(\"testSuiteDefinition\", suite_definition_configuration={\n    \"suite_definition_name\": \"SuiteDefinitionName\",\n    \"device_permission_role_arn\": \"arn:aws:iam::123456789012:role/RoleName\",\n    \"devices\": [{\n        \"thing_arn\": \"arn:aws:iot:us-east-1:123456789012:thing/ThingName\",\n    }],\n    \"root_group\": \"{ \\\"configuration\\\": {}, \\\"tests\\\": [{ \\\"name\\\": \\\"TestGroup\\\", \\\"configuration\\\": { \\\"EXECUTION_TIMEOUT\\\": \\\"30\\\" }, \\\"tests\\\": [{ \\\"name\\\": \\\"MQTTPublishTest\\\", \\\"configuration\\\": { \\\"TOPIC_FOR_PUBLISH_VALIDATION\\\": \\\"target\\\" }, \\\"test\\\": { \\\"id\\\": \\\"MQTT_Publish\\\", \\\"version\\\": \\\"0.0.0\\\" } }] }] }\",\n    \"intended_for_qualification\": False,\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"suiteDefinitionArn":{"type":"string","description":"The Amazon Resource name for the suite definition."},"suiteDefinitionConfiguration":{"$ref":"#/types/aws-native:iotcoredeviceadvisor:SuiteDefinitionConfigurationProperties","description":"Gets the suite definition configuration."},"suiteDefinitionId":{"type":"string","description":"The unique identifier for the suite definition."},"suiteDefinitionVersion":{"type":"string","description":"The suite definition version of a test suite."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["suiteDefinitionArn","suiteDefinitionConfiguration","suiteDefinitionId","suiteDefinitionVersion"],"inputProperties":{"suiteDefinitionConfiguration":{"$ref":"#/types/aws-native:iotcoredeviceadvisor:SuiteDefinitionConfigurationProperties","description":"Gets the suite definition configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["suiteDefinitionConfiguration"]},"aws-native:iotevents:AlarmModel":{"description":"Represents an alarm model to monitor an ITE input attribute. You can use the alarm to get notified when the value is outside a specified range. For more information, see [Create an alarm model](https://docs.aws.amazon.com/iotevents/latest/developerguide/create-alarms.html) in the *Developer Guide*.","properties":{"alarmCapabilities":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmCapabilities","description":"Contains the configuration information of alarm state changes."},"alarmEventActions":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmEventActions","description":"Contains information about one or more alarm actions."},"alarmModelDescription":{"type":"string","description":"The description of the alarm model."},"alarmModelName":{"type":"string","description":"The name of the alarm model.","replaceOnChanges":true},"alarmRule":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmRule","description":"Defines when your alarm is invoked."},"key":{"type":"string","description":"An input attribute used as a key to create an alarm. ITE routes [inputs](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Input.html) associated with this key to the alarm.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the IAM role that allows the alarm to perform actions and access AWS resources. For more information, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"severity":{"type":"integer","description":"A non-negative integer that reflects the severity level of the alarm."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the alarm model. The tags help you manage the alarm model. For more information, see [Tagging your resources](https://docs.aws.amazon.com/iotevents/latest/developerguide/tagging-iotevents.html) in the *Developer Guide*.\n You can create up to 50 tags for one alarm model."}},"type":"object","required":["alarmRule","roleArn"],"inputProperties":{"alarmCapabilities":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmCapabilities","description":"Contains the configuration information of alarm state changes."},"alarmEventActions":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmEventActions","description":"Contains information about one or more alarm actions."},"alarmModelDescription":{"type":"string","description":"The description of the alarm model."},"alarmModelName":{"type":"string","description":"The name of the alarm model."},"alarmRule":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmRule","description":"Defines when your alarm is invoked."},"key":{"type":"string","description":"An input attribute used as a key to create an alarm. ITE routes [inputs](https://docs.aws.amazon.com/iotevents/latest/apireference/API_Input.html) associated with this key to the alarm."},"roleArn":{"type":"string","description":"The ARN of the IAM role that allows the alarm to perform actions and access AWS resources. For more information, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*."},"severity":{"type":"integer","description":"A non-negative integer that reflects the severity level of the alarm."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the alarm model. The tags help you manage the alarm model. For more information, see [Tagging your resources](https://docs.aws.amazon.com/iotevents/latest/developerguide/tagging-iotevents.html) in the *Developer Guide*.\n You can create up to 50 tags for one alarm model."}},"requiredInputs":["alarmRule","roleArn"]},"aws-native:iotevents:DetectorModel":{"description":"The AWS::IoTEvents::DetectorModel resource creates a detector model. You create a *detector model* (a model of your equipment or process) using *states*. For each state, you define conditional (Boolean) logic that evaluates the incoming inputs to detect significant events. When an event is detected, it can change the state or trigger custom-built or predefined actions using other AWS services. You can define additional events that trigger actions when entering or exiting a state and, optionally, when a condition is met. For more information, see [How to Use](https://docs.aws.amazon.com/iotevents/latest/developerguide/how-to-use-iotevents.html) in the *Developer Guide*.\n  When you successfully update a detector model (using the ITE console, ITE API or CLI commands, or CFN) all detector instances created by the model are reset to their initial states. (The detector's ``state``, and the values of any variables and timers are reset.)\n When you successfully update a detector model (using the ITE console, ITE API or CLI commands, or CFN) the version number of the detector model is incremented. (A detector model with version number 1 before the update has version number 2 after the update succeeds.)\n If you attempt to update a detector model using CFN and the update does not succeed, the system may, in some cases, restore the original detector model. When this occurs, the detector model's version is incremented twice (for example, from version 1 to version 3) and the detector instances are reset.\n Also, be aware that if you attempt to update several detector models at once using CFN, some updates may succeed and others fail. In this case, the effects on each detector model's detector instances and version number depend on whether the update succeeded or failed, with the results as stated.","properties":{"detectorModelDefinition":{"$ref":"#/types/aws-native:iotevents:DetectorModelDefinition","description":"Information that defines how a detector operates."},"detectorModelDescription":{"type":"string","description":"A brief description of the detector model."},"detectorModelName":{"type":"string","description":"The name of the detector model.","replaceOnChanges":true},"evaluationMethod":{"$ref":"#/types/aws-native:iotevents:DetectorModelEvaluationMethod","description":"Information about the order in which events are evaluated and how actions are executed."},"key":{"type":"string","description":"The value used to identify a detector instance. When a device or system sends input, a new detector instance with a unique key value is created. ITE can continue to route input to its corresponding detector instance based on this identifying information. \n This parameter uses a JSON-path expression to select the attribute-value pair in the message payload that is used for identification. To route the message to the correct detector instance, the device must send a message payload that contains the same attribute-value.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to ITE to perform its operations."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"type":"object","required":["detectorModelDefinition","roleArn"],"inputProperties":{"detectorModelDefinition":{"$ref":"#/types/aws-native:iotevents:DetectorModelDefinition","description":"Information that defines how a detector operates."},"detectorModelDescription":{"type":"string","description":"A brief description of the detector model."},"detectorModelName":{"type":"string","description":"The name of the detector model."},"evaluationMethod":{"$ref":"#/types/aws-native:iotevents:DetectorModelEvaluationMethod","description":"Information about the order in which events are evaluated and how actions are executed."},"key":{"type":"string","description":"The value used to identify a detector instance. When a device or system sends input, a new detector instance with a unique key value is created. ITE can continue to route input to its corresponding detector instance based on this identifying information. \n This parameter uses a JSON-path expression to select the attribute-value pair in the message payload that is used for identification. To route the message to the correct detector instance, the device must send a message payload that contains the same attribute-value."},"roleArn":{"type":"string","description":"The ARN of the role that grants permission to ITE to perform its operations."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"requiredInputs":["detectorModelDefinition","roleArn"]},"aws-native:iotevents:Input":{"description":"The AWS::IoTEvents::Input resource creates an input. To monitor your devices and processes, they must have a way to get telemetry data into ITE. This is done by sending messages as *inputs* to ITE. For more information, see [How to Use](https://docs.aws.amazon.com/iotevents/latest/developerguide/how-to-use-iotevents.html) in the *Developer Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myInput = new AwsNative.IoTEvents.Input(\"myInput\", new()\n    {\n        InputName = \"myInput\",\n        InputDescription = \"My Input created by CloudFormation\",\n        InputDefinition = new AwsNative.IoTEvents.Inputs.InputDefinitionArgs\n        {\n            Attributes = new[]\n            {\n                new AwsNative.IoTEvents.Inputs.InputAttributeArgs\n                {\n                    JsonPath = \"foo\",\n                },\n                new AwsNative.IoTEvents.Inputs.InputAttributeArgs\n                {\n                    JsonPath = \"bar\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotevents\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotevents.NewInput(ctx, \"myInput\", \u0026iotevents.InputArgs{\n\t\t\tInputName:        pulumi.String(\"myInput\"),\n\t\t\tInputDescription: pulumi.String(\"My Input created by CloudFormation\"),\n\t\t\tInputDefinition: \u0026iotevents.InputDefinitionArgs{\n\t\t\t\tAttributes: iotevents.InputAttributeArray{\n\t\t\t\t\t\u0026iotevents.InputAttributeArgs{\n\t\t\t\t\t\tJsonPath: pulumi.String(\"foo\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026iotevents.InputAttributeArgs{\n\t\t\t\t\t\tJsonPath: pulumi.String(\"bar\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myInput = new aws_native.iotevents.Input(\"myInput\", {\n    inputName: \"myInput\",\n    inputDescription: \"My Input created by CloudFormation\",\n    inputDefinition: {\n        attributes: [\n            {\n                jsonPath: \"foo\",\n            },\n            {\n                jsonPath: \"bar\",\n            },\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_input = aws_native.iotevents.Input(\"myInput\",\n    input_name=\"myInput\",\n    input_description=\"My Input created by CloudFormation\",\n    input_definition={\n        \"attributes\": [\n            {\n                \"json_path\": \"foo\",\n            },\n            {\n                \"json_path\": \"bar\",\n            },\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myInput = new AwsNative.IoTEvents.Input(\"myInput\", new()\n    {\n        InputName = \"myInput\",\n        InputDescription = \"My Input created by CloudFormation\",\n        InputDefinition = new AwsNative.IoTEvents.Inputs.InputDefinitionArgs\n        {\n            Attributes = new[]\n            {\n                new AwsNative.IoTEvents.Inputs.InputAttributeArgs\n                {\n                    JsonPath = \"foo\",\n                },\n                new AwsNative.IoTEvents.Inputs.InputAttributeArgs\n                {\n                    JsonPath = \"bar\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iotevents\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := iotevents.NewInput(ctx, \"myInput\", \u0026iotevents.InputArgs{\n\t\t\tInputName:        pulumi.String(\"myInput\"),\n\t\t\tInputDescription: pulumi.String(\"My Input created by CloudFormation\"),\n\t\t\tInputDefinition: \u0026iotevents.InputDefinitionArgs{\n\t\t\t\tAttributes: iotevents.InputAttributeArray{\n\t\t\t\t\t\u0026iotevents.InputAttributeArgs{\n\t\t\t\t\t\tJsonPath: pulumi.String(\"foo\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026iotevents.InputAttributeArgs{\n\t\t\t\t\t\tJsonPath: pulumi.String(\"bar\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myInput = new aws_native.iotevents.Input(\"myInput\", {\n    inputName: \"myInput\",\n    inputDescription: \"My Input created by CloudFormation\",\n    inputDefinition: {\n        attributes: [\n            {\n                jsonPath: \"foo\",\n            },\n            {\n                jsonPath: \"bar\",\n            },\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_input = aws_native.iotevents.Input(\"myInput\",\n    input_name=\"myInput\",\n    input_description=\"My Input created by CloudFormation\",\n    input_definition={\n        \"attributes\": [\n            {\n                \"json_path\": \"foo\",\n            },\n            {\n                \"json_path\": \"bar\",\n            },\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"inputDefinition":{"$ref":"#/types/aws-native:iotevents:InputDefinition","description":"The definition of the input."},"inputDescription":{"type":"string","description":"A brief description of the input."},"inputName":{"type":"string","description":"The name of the input.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"type":"object","required":["inputDefinition"],"inputProperties":{"inputDefinition":{"$ref":"#/types/aws-native:iotevents:InputDefinition","description":"The definition of the input."},"inputDescription":{"type":"string","description":"A brief description of the input."},"inputName":{"type":"string","description":"The name of the input."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"requiredInputs":["inputDefinition"]},"aws-native:iotfleethub:Application":{"description":"Resource schema for AWS::IoTFleetHub::Application","properties":{"applicationArn":{"type":"string","description":"The ARN of the application."},"applicationCreationDate":{"type":"integer","description":"When the Application was created"},"applicationDescription":{"type":"string","description":"Application Description, should be between 1 and 2048 characters."},"applicationId":{"type":"string","description":"The ID of the application."},"applicationLastUpdateDate":{"type":"integer","description":"When the Application was last updated"},"applicationName":{"type":"string","description":"Application Name, should be between 1 and 256 characters."},"applicationState":{"type":"string","description":"The current state of the application."},"applicationUrl":{"type":"string","description":"The URL of the application."},"errorMessage":{"type":"string","description":"A message indicating why Create or Delete Application failed."},"roleArn":{"type":"string","description":"The ARN of the role that the web application assumes when it interacts with AWS IoT Core. For more info on configuring this attribute, see https://docs.aws.amazon.com/iot/latest/apireference/API_iotfleethub_CreateApplication.html#API_iotfleethub_CreateApplication_RequestSyntax"},"ssoClientId":{"type":"string","description":"The AWS SSO application generated client ID (used with AWS SSO APIs)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the application."}},"type":"object","required":["applicationArn","applicationCreationDate","applicationId","applicationLastUpdateDate","applicationName","applicationState","applicationUrl","errorMessage","roleArn","ssoClientId"],"inputProperties":{"applicationDescription":{"type":"string","description":"Application Description, should be between 1 and 2048 characters."},"applicationName":{"type":"string","description":"Application Name, should be between 1 and 256 characters."},"roleArn":{"type":"string","description":"The ARN of the role that the web application assumes when it interacts with AWS IoT Core. For more info on configuring this attribute, see https://docs.aws.amazon.com/iot/latest/apireference/API_iotfleethub_CreateApplication.html#API_iotfleethub_CreateApplication_RequestSyntax"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the application."}},"requiredInputs":["roleArn"]},"aws-native:iotsitewise:AccessPolicy":{"description":"Resource schema for AWS::IoTSiteWise::AccessPolicy","properties":{"accessPolicyArn":{"type":"string","description":"The ARN of the access policy."},"accessPolicyId":{"type":"string","description":"The ID of the access policy."},"accessPolicyIdentity":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyIdentity","description":"The identity for this access policy. Choose either a user or a group but not both."},"accessPolicyPermission":{"type":"string","description":"The permission level for this access policy. Valid values are ADMINISTRATOR or VIEWER."},"accessPolicyResource":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyResource","description":"The AWS IoT SiteWise Monitor resource for this access policy. Choose either portal or project but not both."}},"type":"object","required":["accessPolicyArn","accessPolicyId","accessPolicyIdentity","accessPolicyPermission","accessPolicyResource"],"inputProperties":{"accessPolicyIdentity":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyIdentity","description":"The identity for this access policy. Choose either a user or a group but not both."},"accessPolicyPermission":{"type":"string","description":"The permission level for this access policy. Valid values are ADMINISTRATOR or VIEWER."},"accessPolicyResource":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyResource","description":"The AWS IoT SiteWise Monitor resource for this access policy. Choose either portal or project but not both."}},"requiredInputs":["accessPolicyIdentity","accessPolicyPermission","accessPolicyResource"]},"aws-native:iotsitewise:Asset":{"description":"Resource schema for AWS::IoTSiteWise::Asset","properties":{"assetArn":{"type":"string","description":"The ARN of the asset"},"assetDescription":{"type":"string","description":"A description for the asset"},"assetExternalId":{"type":"string","description":"The External ID of the asset"},"assetHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetHierarchy"},"description":"A list of asset hierarchies that each contain a `hierarchyId` . A hierarchy specifies allowed parent/child asset relationships."},"assetId":{"type":"string","description":"The ID of the asset"},"assetModelId":{"type":"string","description":"The ID of the asset model from which to create the asset."},"assetName":{"type":"string","description":"A unique, friendly name for the asset."},"assetProperties":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetProperty"},"description":"The list of asset properties for the asset.\n\nThis object doesn't include properties that you define in composite models. You can find composite model properties in the `assetCompositeModels` object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset."}},"type":"object","required":["assetArn","assetId","assetModelId","assetName"],"inputProperties":{"assetDescription":{"type":"string","description":"A description for the asset"},"assetExternalId":{"type":"string","description":"The External ID of the asset"},"assetHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetHierarchy"},"description":"A list of asset hierarchies that each contain a `hierarchyId` . A hierarchy specifies allowed parent/child asset relationships."},"assetModelId":{"type":"string","description":"The ID of the asset model from which to create the asset."},"assetName":{"type":"string","description":"A unique, friendly name for the asset."},"assetProperties":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetProperty"},"description":"The list of asset properties for the asset.\n\nThis object doesn't include properties that you define in composite models. You can find composite model properties in the `assetCompositeModels` object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset."}},"requiredInputs":["assetModelId"]},"aws-native:iotsitewise:AssetModel":{"description":"Resource schema for AWS::IoTSiteWise::AssetModel","properties":{"assetModelArn":{"type":"string","description":"The ARN of the asset model, which has the following format."},"assetModelCompositeModels":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelCompositeModel"},"description":"The composite asset models that are part of this asset model. Composite asset models are asset models that contain specific properties."},"assetModelDescription":{"type":"string","description":"A description for the asset model."},"assetModelExternalId":{"type":"string","description":"The external ID of the asset model."},"assetModelHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelHierarchy"},"description":"The hierarchy definitions of the asset model. Each hierarchy specifies an asset model whose assets can be children of any other assets created from this asset model. You can specify up to 10 hierarchies per asset model."},"assetModelId":{"type":"string","description":"The ID of the asset model."},"assetModelName":{"type":"string","description":"A unique, friendly name for the asset model."},"assetModelProperties":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelProperty"},"description":"The property definitions of the asset model. You can specify up to 200 properties per asset model."},"assetModelType":{"type":"string","description":"The type of the asset model (ASSET_MODEL OR COMPONENT_MODEL or INTERFACE)","replaceOnChanges":true},"enforcedAssetModelInterfaceRelationships":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelEnforcedAssetModelInterfaceRelationship"},"description":"a list of asset model and interface relationships"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}},"type":"object","required":["assetModelArn","assetModelId","assetModelName"],"inputProperties":{"assetModelCompositeModels":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelCompositeModel"},"description":"The composite asset models that are part of this asset model. Composite asset models are asset models that contain specific properties."},"assetModelDescription":{"type":"string","description":"A description for the asset model."},"assetModelExternalId":{"type":"string","description":"The external ID of the asset model."},"assetModelHierarchies":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelHierarchy"},"description":"The hierarchy definitions of the asset model. Each hierarchy specifies an asset model whose assets can be children of any other assets created from this asset model. You can specify up to 10 hierarchies per asset model."},"assetModelName":{"type":"string","description":"A unique, friendly name for the asset model."},"assetModelProperties":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelProperty"},"description":"The property definitions of the asset model. You can specify up to 200 properties per asset model."},"assetModelType":{"type":"string","description":"The type of the asset model (ASSET_MODEL OR COMPONENT_MODEL or INTERFACE)"},"enforcedAssetModelInterfaceRelationships":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelEnforcedAssetModelInterfaceRelationship"},"description":"a list of asset model and interface relationships"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}}},"aws-native:iotsitewise:Dashboard":{"description":"Resource schema for AWS::IoTSiteWise::Dashboard","properties":{"dashboardArn":{"type":"string","description":"The ARN of the dashboard."},"dashboardDefinition":{"type":"string","description":"The dashboard definition specified in a JSON literal."},"dashboardDescription":{"type":"string","description":"A description for the dashboard."},"dashboardId":{"type":"string","description":"The ID of the dashboard."},"dashboardName":{"type":"string","description":"A friendly name for the dashboard."},"projectId":{"type":"string","description":"The ID of the project in which to create the dashboard.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the dashboard."}},"type":"object","required":["dashboardArn","dashboardDefinition","dashboardDescription","dashboardId","dashboardName"],"inputProperties":{"dashboardDefinition":{"type":"string","description":"The dashboard definition specified in a JSON literal."},"dashboardDescription":{"type":"string","description":"A description for the dashboard."},"dashboardName":{"type":"string","description":"A friendly name for the dashboard."},"projectId":{"type":"string","description":"The ID of the project in which to create the dashboard."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the dashboard."}},"requiredInputs":["dashboardDefinition","dashboardDescription"]},"aws-native:iotsitewise:Dataset":{"description":"Resource schema for AWS::IoTSiteWise::Dataset.","properties":{"datasetArn":{"type":"string","description":"The ARN of the dataset."},"datasetDescription":{"type":"string","description":"A description about the dataset, and its functionality."},"datasetId":{"type":"string","description":"The ID of the dataset."},"datasetName":{"type":"string","description":"The name of the dataset."},"datasetSource":{"$ref":"#/types/aws-native:iotsitewise:DatasetSource","description":"The data source for the dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["datasetArn","datasetId","datasetName","datasetSource"],"inputProperties":{"datasetDescription":{"type":"string","description":"A description about the dataset, and its functionality."},"datasetName":{"type":"string","description":"The name of the dataset."},"datasetSource":{"$ref":"#/types/aws-native:iotsitewise:DatasetSource","description":"The data source for the dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["datasetSource"]},"aws-native:iotsitewise:Gateway":{"description":"Resource schema for AWS::IoTSiteWise::Gateway","properties":{"gatewayCapabilitySummaries":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:GatewayCapabilitySummary"},"description":"A list of gateway capability summaries that each contain a namespace and status."},"gatewayId":{"type":"string","description":"The ID of the gateway device."},"gatewayName":{"type":"string","description":"A unique, friendly name for the gateway."},"gatewayPlatform":{"$ref":"#/types/aws-native:iotsitewise:GatewayPlatform","description":"The gateway's platform. You can only specify one platform in a gateway.","replaceOnChanges":true},"gatewayVersion":{"type":"string","description":"The version of the gateway you want to create.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the gateway."}},"type":"object","required":["gatewayId","gatewayName","gatewayPlatform"],"inputProperties":{"gatewayCapabilitySummaries":{"type":"array","items":{"$ref":"#/types/aws-native:iotsitewise:GatewayCapabilitySummary"},"description":"A list of gateway capability summaries that each contain a namespace and status."},"gatewayName":{"type":"string","description":"A unique, friendly name for the gateway."},"gatewayPlatform":{"$ref":"#/types/aws-native:iotsitewise:GatewayPlatform","description":"The gateway's platform. You can only specify one platform in a gateway."},"gatewayVersion":{"type":"string","description":"The version of the gateway you want to create."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the gateway."}},"requiredInputs":["gatewayPlatform"]},"aws-native:iotsitewise:Portal":{"description":"Resource schema for AWS::IoTSiteWise::Portal","properties":{"alarms":{"$ref":"#/types/aws-native:iotsitewise:AlarmsProperties","description":"Contains the configuration information of an alarm created in an AWS IoT SiteWise Monitor portal. You can use the alarm to monitor an asset property and get notified when the asset property value is outside a specified range."},"notificationSenderEmail":{"type":"string","description":"The email address that sends alarm notifications."},"portalArn":{"type":"string","description":"The ARN of the portal, which has the following format."},"portalAuthMode":{"type":"string","description":"The service to use to authenticate users to the portal. Choose from SSO or IAM. You can't change this value after you create a portal.","replaceOnChanges":true},"portalClientId":{"type":"string","description":"The AWS SSO application generated client ID (used with AWS SSO APIs)."},"portalContactEmail":{"type":"string","description":"The AWS administrator's contact email address."},"portalDescription":{"type":"string","description":"A description for the portal."},"portalId":{"type":"string","description":"The ID of the portal."},"portalName":{"type":"string","description":"A friendly name for the portal."},"portalStartUrl":{"type":"string","description":"The public root URL for the AWS IoT AWS IoT SiteWise Monitor application portal."},"portalType":{"$ref":"#/types/aws-native:iotsitewise:PortalType","description":"The type of portal","replaceOnChanges":true},"portalTypeConfiguration":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iotsitewise:PortalTypeEntry"}},"roleArn":{"type":"string","description":"The ARN of a service role that allows the portal's users to access your AWS IoT SiteWise resources on your behalf."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the portal."}},"type":"object","required":["portalArn","portalClientId","portalContactEmail","portalId","portalName","portalStartUrl","roleArn"],"inputProperties":{"alarms":{"$ref":"#/types/aws-native:iotsitewise:AlarmsProperties","description":"Contains the configuration information of an alarm created in an AWS IoT SiteWise Monitor portal. You can use the alarm to monitor an asset property and get notified when the asset property value is outside a specified range."},"notificationSenderEmail":{"type":"string","description":"The email address that sends alarm notifications."},"portalAuthMode":{"type":"string","description":"The service to use to authenticate users to the portal. Choose from SSO or IAM. You can't change this value after you create a portal."},"portalContactEmail":{"type":"string","description":"The AWS administrator's contact email address."},"portalDescription":{"type":"string","description":"A description for the portal."},"portalName":{"type":"string","description":"A friendly name for the portal."},"portalType":{"$ref":"#/types/aws-native:iotsitewise:PortalType","description":"The type of portal"},"portalTypeConfiguration":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iotsitewise:PortalTypeEntry"}},"roleArn":{"type":"string","description":"The ARN of a service role that allows the portal's users to access your AWS IoT SiteWise resources on your behalf."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the portal."}},"requiredInputs":["portalContactEmail","roleArn"]},"aws-native:iotsitewise:Project":{"description":"Resource schema for AWS::IoTSiteWise::Project","properties":{"assetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the assets to be associated to the project."},"portalId":{"type":"string","description":"The ID of the portal in which to create the project.","replaceOnChanges":true},"projectArn":{"type":"string","description":"The ARN of the project."},"projectDescription":{"type":"string","description":"A description for the project."},"projectId":{"type":"string","description":"The ID of the project."},"projectName":{"type":"string","description":"A friendly name for the project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the project."}},"type":"object","required":["portalId","projectArn","projectId","projectName"],"inputProperties":{"assetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the assets to be associated to the project."},"portalId":{"type":"string","description":"The ID of the portal in which to create the project."},"projectDescription":{"type":"string","description":"A description for the project."},"projectName":{"type":"string","description":"A friendly name for the project."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the project."}},"requiredInputs":["portalId"]},"aws-native:iottwinmaker:ComponentType":{"description":"Resource schema for AWS::IoTTwinMaker::ComponentType","properties":{"arn":{"type":"string","description":"The ARN of the component type."},"componentTypeId":{"type":"string","description":"The ID of the component type.","replaceOnChanges":true},"compositeComponentTypes":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeCompositeComponentType"},"description":"An map of the composite component types in the component type. Each composite component type's key must be unique to this map."},"creationDateTime":{"type":"string","description":"The date and time when the component type was created."},"description":{"type":"string","description":"The description of the component type."},"extendsFrom":{"type":"array","items":{"type":"string"},"description":"Specifies the parent component type to extend."},"functions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeFunction"},"description":"a Map of functions in the component type. Each function's key must be unique to this map."},"isAbstract":{"type":"boolean","description":"A Boolean value that specifies whether the component type is abstract."},"isSchemaInitialized":{"type":"boolean","description":"A Boolean value that specifies whether the component type has a schema initializer and that the schema initializer has run."},"isSingleton":{"type":"boolean","description":"A Boolean value that specifies whether an entity can have more than one component of this type."},"propertyDefinitions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyDefinition"},"description":"An map of the property definitions in the component type. Each property definition's key must be unique to this map."},"propertyGroups":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyGroup"},"description":"An map of the property groups in the component type. Each property group's key must be unique to this map."},"status":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeStatus","description":"The current status of the component type."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of key-value pairs to associate with a resource."},"updateDateTime":{"type":"string","description":"The last date and time when the component type was updated."},"workspaceId":{"type":"string","description":"The ID of the workspace that contains the component type.","replaceOnChanges":true}},"type":"object","required":["arn","componentTypeId","creationDateTime","isAbstract","isSchemaInitialized","status","updateDateTime","workspaceId"],"inputProperties":{"componentTypeId":{"type":"string","description":"The ID of the component type."},"compositeComponentTypes":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeCompositeComponentType"},"description":"An map of the composite component types in the component type. Each composite component type's key must be unique to this map."},"description":{"type":"string","description":"The description of the component type."},"extendsFrom":{"type":"array","items":{"type":"string"},"description":"Specifies the parent component type to extend."},"functions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeFunction"},"description":"a Map of functions in the component type. Each function's key must be unique to this map."},"isSingleton":{"type":"boolean","description":"A Boolean value that specifies whether an entity can have more than one component of this type."},"propertyDefinitions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyDefinition"},"description":"An map of the property definitions in the component type. Each property definition's key must be unique to this map."},"propertyGroups":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyGroup"},"description":"An map of the property groups in the component type. Each property group's key must be unique to this map."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of key-value pairs to associate with a resource."},"workspaceId":{"type":"string","description":"The ID of the workspace that contains the component type."}},"requiredInputs":["componentTypeId","workspaceId"]},"aws-native:iottwinmaker:Entity":{"description":"Resource schema for AWS::IoTTwinMaker::Entity","properties":{"arn":{"type":"string","description":"The ARN of the entity."},"components":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityComponent"},"description":"A map that sets information about a component type."},"compositeComponents":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityCompositeComponent"},"description":"A map that sets information about a composite component."},"creationDateTime":{"type":"string","description":"The date and time when the entity was created."},"description":{"type":"string","description":"The description of the entity."},"entityId":{"type":"string","description":"The ID of the entity.","replaceOnChanges":true},"entityName":{"type":"string","description":"The name of the entity."},"hasChildEntities":{"type":"boolean","description":"A Boolean value that specifies whether the entity has child entities or not."},"parentEntityId":{"type":"string","description":"The ID of the parent entity."},"status":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatus","description":"The current status of the entity."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"updateDateTime":{"type":"string","description":"The last date and time when the entity was updated."},"workspaceId":{"type":"string","description":"The ID of the workspace.","replaceOnChanges":true}},"type":"object","required":["arn","creationDateTime","entityName","hasChildEntities","status","updateDateTime","workspaceId"],"inputProperties":{"components":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityComponent"},"description":"A map that sets information about a component type."},"compositeComponents":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityCompositeComponent"},"description":"A map that sets information about a composite component."},"description":{"type":"string","description":"The description of the entity."},"entityId":{"type":"string","description":"The ID of the entity."},"entityName":{"type":"string","description":"The name of the entity."},"parentEntityId":{"type":"string","description":"The ID of the parent entity."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"workspaceId":{"type":"string","description":"The ID of the workspace."}},"requiredInputs":["workspaceId"]},"aws-native:iottwinmaker:Scene":{"description":"Resource schema for AWS::IoTTwinMaker::Scene","properties":{"arn":{"type":"string","description":"The ARN of the scene."},"capabilities":{"type":"array","items":{"type":"string"},"description":"A list of capabilities that the scene uses to render."},"contentLocation":{"type":"string","description":"The relative path that specifies the location of the content definition file."},"creationDateTime":{"type":"string","description":"The date and time when the scene was created."},"description":{"type":"string","description":"The description of the scene."},"generatedSceneMetadata":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair of generated scene metadata for the scene."},"sceneId":{"type":"string","description":"The ID of the scene.","replaceOnChanges":true},"sceneMetadata":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair of scene metadata for the scene."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"updateDateTime":{"type":"string","description":"The date and time of the current update."},"workspaceId":{"type":"string","description":"The ID of the scene.","replaceOnChanges":true}},"type":"object","required":["arn","contentLocation","creationDateTime","generatedSceneMetadata","sceneId","updateDateTime","workspaceId"],"inputProperties":{"capabilities":{"type":"array","items":{"type":"string"},"description":"A list of capabilities that the scene uses to render."},"contentLocation":{"type":"string","description":"The relative path that specifies the location of the content definition file."},"description":{"type":"string","description":"The description of the scene."},"sceneId":{"type":"string","description":"The ID of the scene."},"sceneMetadata":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair of scene metadata for the scene."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"workspaceId":{"type":"string","description":"The ID of the scene."}},"requiredInputs":["contentLocation","sceneId","workspaceId"]},"aws-native:iottwinmaker:SyncJob":{"description":"Resource schema for AWS::IoTTwinMaker::SyncJob","properties":{"arn":{"type":"string","description":"The ARN of the SyncJob."},"creationDateTime":{"type":"string","description":"The date and time when the sync job was created."},"state":{"type":"string","description":"The state of SyncJob."},"syncRole":{"type":"string","description":"The IAM Role that execute SyncJob.","replaceOnChanges":true},"syncSource":{"type":"string","description":"The source of the SyncJob.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","replaceOnChanges":true},"updateDateTime":{"type":"string","description":"The date and time when the sync job was updated."},"workspaceId":{"type":"string","description":"The ID of the workspace.","replaceOnChanges":true}},"type":"object","required":["arn","creationDateTime","state","syncRole","syncSource","updateDateTime","workspaceId"],"inputProperties":{"syncRole":{"type":"string","description":"The IAM Role that execute SyncJob."},"syncSource":{"type":"string","description":"The source of the SyncJob."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"workspaceId":{"type":"string","description":"The ID of the workspace."}},"requiredInputs":["syncRole","syncSource","workspaceId"]},"aws-native:iottwinmaker:Workspace":{"description":"Resource schema for AWS::IoTTwinMaker::Workspace","properties":{"arn":{"type":"string","description":"The ARN of the workspace."},"creationDateTime":{"type":"string","description":"The date and time when the workspace was created."},"description":{"type":"string","description":"The description of the workspace."},"role":{"type":"string","description":"The ARN of the execution role associated with the workspace."},"s3Location":{"type":"string","description":"The ARN of the S3 bucket where resources associated with the workspace are stored."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of key-value pairs to associate with a resource."},"updateDateTime":{"type":"string","description":"The date and time of the current update."},"workspaceId":{"type":"string","description":"The ID of the workspace.","replaceOnChanges":true}},"type":"object","required":["arn","creationDateTime","role","s3Location","updateDateTime","workspaceId"],"inputProperties":{"description":{"type":"string","description":"The description of the workspace."},"role":{"type":"string","description":"The ARN of the execution role associated with the workspace."},"s3Location":{"type":"string","description":"The ARN of the S3 bucket where resources associated with the workspace are stored."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A map of key-value pairs to associate with a resource."},"workspaceId":{"type":"string","description":"The ID of the workspace."}},"requiredInputs":["role","s3Location","workspaceId"]},"aws-native:iotwireless:Destination":{"description":"Destination's resource schema demonstrating some basic constructs and validation rules.","properties":{"arn":{"type":"string","description":"Destination arn. Returned after successful create."},"description":{"type":"string","description":"Destination description"},"expression":{"type":"string","description":"Destination expression"},"expressionType":{"$ref":"#/types/aws-native:iotwireless:DestinationExpressionType","description":"Must be RuleName"},"name":{"type":"string","description":"Unique name of destination","replaceOnChanges":true},"roleArn":{"type":"string","description":"AWS role ARN that grants access"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the destination."}},"type":"object","required":["arn","expression","expressionType","name"],"inputProperties":{"description":{"type":"string","description":"Destination description"},"expression":{"type":"string","description":"Destination expression"},"expressionType":{"$ref":"#/types/aws-native:iotwireless:DestinationExpressionType","description":"Must be RuleName"},"name":{"type":"string","description":"Unique name of destination"},"roleArn":{"type":"string","description":"AWS role ARN that grants access"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the destination."}},"requiredInputs":["expression","expressionType"]},"aws-native:iotwireless:DeviceProfile":{"description":"Device Profile's resource schema demonstrating some basic constructs and validation rules.","properties":{"arn":{"type":"string","description":"Service profile Arn. Returned after successful create."},"awsId":{"type":"string","description":"Service profile Id. Returned after successful create."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:DeviceProfileLoRaWanDeviceProfile","description":"LoRaWANDeviceProfile supports all LoRa specific attributes for service profile for CreateDeviceProfile operation","replaceOnChanges":true},"name":{"type":"string","description":"Name of service profile","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the device profile."}},"type":"object","required":["arn","awsId"],"inputProperties":{"loRaWan":{"$ref":"#/types/aws-native:iotwireless:DeviceProfileLoRaWanDeviceProfile","description":"LoRaWANDeviceProfile supports all LoRa specific attributes for service profile for CreateDeviceProfile operation"},"name":{"type":"string","description":"Name of service profile"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the device profile."}}},"aws-native:iotwireless:FuotaTask":{"description":"Create and manage FUOTA tasks.","properties":{"arn":{"type":"string","description":"FUOTA task arn. Returned after successful create."},"associateMulticastGroup":{"type":"string","description":"Multicast group to associate. Only for update request."},"associateWirelessDevice":{"type":"string","description":"Wireless device to associate. Only for update request."},"awsId":{"type":"string","description":"FUOTA task id. Returned after successful create."},"description":{"type":"string","description":"FUOTA task description"},"disassociateMulticastGroup":{"type":"string","description":"Multicast group to disassociate. Only for update request."},"disassociateWirelessDevice":{"type":"string","description":"Wireless device to disassociate. Only for update request."},"firmwareUpdateImage":{"type":"string","description":"FUOTA task firmware update image binary S3 link"},"firmwareUpdateRole":{"type":"string","description":"FUOTA task firmware IAM role for reading S3"},"fuotaTaskStatus":{"type":"string","description":"FUOTA task status. Returned after successful read."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:FuotaTaskLoRaWan","description":"FUOTA task LoRaWAN"},"name":{"type":"string","description":"Name of FUOTA task"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the FUOTA task."}},"type":"object","required":["arn","awsId","firmwareUpdateImage","firmwareUpdateRole","fuotaTaskStatus","loRaWan"],"inputProperties":{"associateMulticastGroup":{"type":"string","description":"Multicast group to associate. Only for update request."},"associateWirelessDevice":{"type":"string","description":"Wireless device to associate. Only for update request."},"description":{"type":"string","description":"FUOTA task description"},"disassociateMulticastGroup":{"type":"string","description":"Multicast group to disassociate. Only for update request."},"disassociateWirelessDevice":{"type":"string","description":"Wireless device to disassociate. Only for update request."},"firmwareUpdateImage":{"type":"string","description":"FUOTA task firmware update image binary S3 link"},"firmwareUpdateRole":{"type":"string","description":"FUOTA task firmware IAM role for reading S3"},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:FuotaTaskLoRaWan","description":"FUOTA task LoRaWAN"},"name":{"type":"string","description":"Name of FUOTA task"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the FUOTA task."}},"requiredInputs":["firmwareUpdateImage","firmwareUpdateRole","loRaWan"]},"aws-native:iotwireless:MulticastGroup":{"description":"Create and manage Multicast groups.","properties":{"arn":{"type":"string","description":"Multicast group arn. Returned after successful create."},"associateWirelessDevice":{"type":"string","description":"Wireless device to associate. Only for update request."},"awsId":{"type":"string","description":"Multicast group id. Returned after successful create."},"description":{"type":"string","description":"Multicast group description"},"disassociateWirelessDevice":{"type":"string","description":"Wireless device to disassociate. Only for update request."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:MulticastGroupLoRaWan","description":"Multicast group LoRaWAN"},"name":{"type":"string","description":"Name of Multicast group"},"status":{"type":"string","description":"Multicast group status. Returned after successful read."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the Multicast group."}},"type":"object","required":["arn","awsId","loRaWan","status"],"inputProperties":{"associateWirelessDevice":{"type":"string","description":"Wireless device to associate. Only for update request."},"description":{"type":"string","description":"Multicast group description"},"disassociateWirelessDevice":{"type":"string","description":"Wireless device to disassociate. Only for update request."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:MulticastGroupLoRaWan","description":"Multicast group LoRaWAN"},"name":{"type":"string","description":"Name of Multicast group"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the Multicast group."}},"requiredInputs":["loRaWan"]},"aws-native:iotwireless:NetworkAnalyzerConfiguration":{"description":"Create and manage NetworkAnalyzerConfiguration resource.","properties":{"arn":{"type":"string","description":"Arn for network analyzer configuration, Returned upon successful create."},"description":{"type":"string","description":"The description of the new resource"},"name":{"type":"string","description":"Name of the network analyzer configuration","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"traceContent":{"$ref":"#/types/aws-native:iotwireless:TraceContentProperties","description":"Trace content for your wireless gateway and wireless device resources"},"wirelessDevices":{"type":"array","items":{"type":"string"},"description":"List of wireless gateway resources that have been added to the network analyzer configuration"},"wirelessGateways":{"type":"array","items":{"type":"string"},"description":"List of wireless gateway resources that have been added to the network analyzer configuration"}},"type":"object","required":["arn","name"],"inputProperties":{"description":{"type":"string","description":"The description of the new resource"},"name":{"type":"string","description":"Name of the network analyzer configuration"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"traceContent":{"$ref":"#/types/aws-native:iotwireless:TraceContentProperties","description":"Trace content for your wireless gateway and wireless device resources"},"wirelessDevices":{"type":"array","items":{"type":"string"},"description":"List of wireless gateway resources that have been added to the network analyzer configuration"},"wirelessGateways":{"type":"array","items":{"type":"string"},"description":"List of wireless gateway resources that have been added to the network analyzer configuration"}}},"aws-native:iotwireless:ServiceProfile":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"arn":{"type":"string","description":"Service profile Arn. Returned after successful create."},"awsId":{"type":"string","description":"Service profile Id. Returned after successful create."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:ServiceProfileLoRaWanServiceProfile","description":"LoRaWAN supports all LoRa specific attributes for service profile for CreateServiceProfile operation","replaceOnChanges":true},"name":{"type":"string","description":"Name of service profile","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the service profile."}},"type":"object","required":["arn","awsId"],"inputProperties":{"loRaWan":{"$ref":"#/types/aws-native:iotwireless:ServiceProfileLoRaWanServiceProfile","description":"LoRaWAN supports all LoRa specific attributes for service profile for CreateServiceProfile operation"},"name":{"type":"string","description":"Name of service profile"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the service profile."}}},"aws-native:iotwireless:TaskDefinition":{"description":"Creates a gateway task definition.","properties":{"arn":{"type":"string","description":"TaskDefinition arn. Returned after successful create."},"autoCreateTasks":{"type":"boolean","description":"Whether to automatically create tasks using this task definition for all gateways with the specified current version. If false, the task must me created by calling CreateWirelessGatewayTask."},"awsId":{"type":"string","description":"The ID of the new wireless gateway task definition"},"loRaWanUpdateGatewayTaskEntry":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanUpdateGatewayTaskEntry","description":"The list of task definitions."},"name":{"type":"string","description":"The name of the new resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the destination."},"taskDefinitionType":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionType","description":"A filter to list only the wireless gateway task definitions that use this task definition type"},"update":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionUpdateWirelessGatewayTaskCreate","description":"Information about the gateways to update."}},"type":"object","required":["arn","autoCreateTasks","awsId"],"inputProperties":{"autoCreateTasks":{"type":"boolean","description":"Whether to automatically create tasks using this task definition for all gateways with the specified current version. If false, the task must me created by calling CreateWirelessGatewayTask."},"loRaWanUpdateGatewayTaskEntry":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanUpdateGatewayTaskEntry","description":"The list of task definitions."},"name":{"type":"string","description":"The name of the new resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the destination."},"taskDefinitionType":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionType","description":"A filter to list only the wireless gateway task definitions that use this task definition type"},"update":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionUpdateWirelessGatewayTaskCreate","description":"Information about the gateways to update."}},"requiredInputs":["autoCreateTasks"]},"aws-native:iotwireless:WirelessDevice":{"description":"Create and manage wireless gateways, including LoRa gateways.","properties":{"arn":{"type":"string","description":"Wireless device arn. Returned after successful create."},"awsId":{"type":"string","description":"Wireless device Id. Returned after successful create."},"description":{"type":"string","description":"Wireless device description"},"destinationName":{"type":"string","description":"Wireless device destination name"},"lastUplinkReceivedAt":{"type":"string","description":"The date and time when the most recent uplink was received."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceLoRaWanDevice","description":"The combination of Package, Station and Model which represents the version of the LoRaWAN Wireless Device."},"name":{"type":"string","description":"Wireless device name"},"positioning":{"$ref":"#/types/aws-native:iotwireless:WirelessDevicePositioning","description":"FPort values for the GNSS, stream, and ClockSync functions of the positioning information."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the device. Currently not supported, will not create if tags are passed."},"thingArn":{"type":"string","description":"Thing arn. Passed into update to associate Thing with Wireless device."},"thingName":{"type":"string","description":"Thing Arn. If there is a Thing created, this can be returned with a Get call."},"type":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceType","description":"Wireless device type, currently only Sidewalk and LoRa"}},"type":"object","required":["arn","awsId","destinationName","thingName","type"],"inputProperties":{"description":{"type":"string","description":"Wireless device description"},"destinationName":{"type":"string","description":"Wireless device destination name"},"lastUplinkReceivedAt":{"type":"string","description":"The date and time when the most recent uplink was received."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceLoRaWanDevice","description":"The combination of Package, Station and Model which represents the version of the LoRaWAN Wireless Device."},"name":{"type":"string","description":"Wireless device name"},"positioning":{"$ref":"#/types/aws-native:iotwireless:WirelessDevicePositioning","description":"FPort values for the GNSS, stream, and ClockSync functions of the positioning information."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the device. Currently not supported, will not create if tags are passed."},"thingArn":{"type":"string","description":"Thing arn. Passed into update to associate Thing with Wireless device."},"type":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceType","description":"Wireless device type, currently only Sidewalk and LoRa"}},"requiredInputs":["destinationName","type"]},"aws-native:iotwireless:WirelessGateway":{"description":"Create and manage wireless gateways, including LoRa gateways.","properties":{"arn":{"type":"string","description":"Arn for Wireless Gateway. Returned upon successful create."},"awsId":{"type":"string","description":"Id for Wireless Gateway. Returned upon successful create."},"description":{"type":"string","description":"Description of Wireless Gateway."},"lastUplinkReceivedAt":{"type":"string","description":"The date and time when the most recent uplink was received."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:WirelessGatewayLoRaWanGateway","description":"The combination of Package, Station and Model which represents the version of the LoRaWAN Wireless Gateway."},"name":{"type":"string","description":"Name of Wireless Gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the gateway."},"thingArn":{"type":"string","description":"Thing Arn. Passed into Update to associate a Thing with the Wireless Gateway."},"thingName":{"type":"string","description":"Thing Name. If there is a Thing created, this can be returned with a Get call."}},"type":"object","required":["arn","awsId","loRaWan"],"inputProperties":{"description":{"type":"string","description":"Description of Wireless Gateway."},"lastUplinkReceivedAt":{"type":"string","description":"The date and time when the most recent uplink was received."},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:WirelessGatewayLoRaWanGateway","description":"The combination of Package, Station and Model which represents the version of the LoRaWAN Wireless Gateway."},"name":{"type":"string","description":"Name of Wireless Gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the gateway."},"thingArn":{"type":"string","description":"Thing Arn. Passed into Update to associate a Thing with the Wireless Gateway."},"thingName":{"type":"string","description":"Thing Name. If there is a Thing created, this can be returned with a Get call."}},"requiredInputs":["loRaWan"]},"aws-native:ivs:Channel":{"description":"Resource Type definition for AWS::IVS::Channel\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var channel = new AwsNative.Ivs.Channel(\"channel\", new()\n    {\n        Name = \"MyChannel\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n        InsecureIngest = true,\n    });\n\n    var streamKey = new AwsNative.Ivs.StreamKey(\"streamKey\", new()\n    {\n        ChannelArn = channel.Id,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"channelArn\"] = channel.Id,\n        [\"channelIngestEndpoint\"] = channel.IngestEndpoint,\n        [\"channelPlaybackUrl\"] = channel.PlaybackUrl,\n        [\"streamKeyArn\"] = streamKey.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tchannel, err := ivs.NewChannel(ctx, \"channel\", \u0026ivs.ChannelArgs{\n\t\t\tName: pulumi.String(\"MyChannel\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tInsecureIngest: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tstreamKey, err := ivs.NewStreamKey(ctx, \"streamKey\", \u0026ivs.StreamKeyArgs{\n\t\t\tChannelArn: channel.ID(),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"channelArn\", channel.ID())\n\t\tctx.Export(\"channelIngestEndpoint\", channel.IngestEndpoint)\n\t\tctx.Export(\"channelPlaybackUrl\", channel.PlaybackUrl)\n\t\tctx.Export(\"streamKeyArn\", streamKey.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst channel = new aws_native.ivs.Channel(\"channel\", {\n    name: \"MyChannel\",\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n    insecureIngest: true,\n});\nconst streamKey = new aws_native.ivs.StreamKey(\"streamKey\", {\n    channelArn: channel.id,\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n});\nexport const channelArn = channel.id;\nexport const channelIngestEndpoint = channel.ingestEndpoint;\nexport const channelPlaybackUrl = channel.playbackUrl;\nexport const streamKeyArn = streamKey.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nchannel = aws_native.ivs.Channel(\"channel\",\n    name=\"MyChannel\",\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }],\n    insecure_ingest=True)\nstream_key = aws_native.ivs.StreamKey(\"streamKey\",\n    channel_arn=channel.id,\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }])\npulumi.export(\"channelArn\", channel.id)\npulumi.export(\"channelIngestEndpoint\", channel.ingest_endpoint)\npulumi.export(\"channelPlaybackUrl\", channel.playback_url)\npulumi.export(\"streamKeyArn\", stream_key.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var channel = new AwsNative.Ivs.Channel(\"channel\", new()\n    {\n        Name = \"MyChannel\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n        InsecureIngest = true,\n    });\n\n    var streamKey = new AwsNative.Ivs.StreamKey(\"streamKey\", new()\n    {\n        ChannelArn = channel.Id,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"channelArn\"] = channel.Id,\n        [\"channelIngestEndpoint\"] = channel.IngestEndpoint,\n        [\"channelPlaybackUrl\"] = channel.PlaybackUrl,\n        [\"streamKeyArn\"] = streamKey.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tchannel, err := ivs.NewChannel(ctx, \"channel\", \u0026ivs.ChannelArgs{\n\t\t\tName: pulumi.String(\"MyChannel\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tInsecureIngest: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tstreamKey, err := ivs.NewStreamKey(ctx, \"streamKey\", \u0026ivs.StreamKeyArgs{\n\t\t\tChannelArn: channel.ID(),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"channelArn\", channel.ID())\n\t\tctx.Export(\"channelIngestEndpoint\", channel.IngestEndpoint)\n\t\tctx.Export(\"channelPlaybackUrl\", channel.PlaybackUrl)\n\t\tctx.Export(\"streamKeyArn\", streamKey.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst channel = new aws_native.ivs.Channel(\"channel\", {\n    name: \"MyChannel\",\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n    insecureIngest: true,\n});\nconst streamKey = new aws_native.ivs.StreamKey(\"streamKey\", {\n    channelArn: channel.id,\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n});\nexport const channelArn = channel.id;\nexport const channelIngestEndpoint = channel.ingestEndpoint;\nexport const channelPlaybackUrl = channel.playbackUrl;\nexport const streamKeyArn = streamKey.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nchannel = aws_native.ivs.Channel(\"channel\",\n    name=\"MyChannel\",\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }],\n    insecure_ingest=True)\nstream_key = aws_native.ivs.StreamKey(\"streamKey\",\n    channel_arn=channel.id,\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }])\npulumi.export(\"channelArn\", channel.id)\npulumi.export(\"channelIngestEndpoint\", channel.ingest_endpoint)\npulumi.export(\"channelPlaybackUrl\", channel.playback_url)\npulumi.export(\"streamKeyArn\", stream_key.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Channel ARN is automatically generated on creation and assigned as the unique identifier."},"authorized":{"type":"boolean","description":"Whether the channel is authorized."},"containerFormat":{"$ref":"#/types/aws-native:ivs:ChannelContainerFormat","description":"Indicates which content-packaging format is used (MPEG-TS or fMP4). If multitrackInputConfiguration is specified and enabled is true, then containerFormat is required and must be set to FRAGMENTED_MP4. Otherwise, containerFormat may be set to TS or FRAGMENTED_MP4. Default: TS."},"ingestEndpoint":{"type":"string","description":"Channel ingest endpoint, part of the definition of an ingest server, used when you set up streaming software."},"insecureIngest":{"type":"boolean","description":"Whether the channel allows insecure ingest."},"latencyMode":{"$ref":"#/types/aws-native:ivs:ChannelLatencyMode","description":"Channel latency mode."},"multitrackInputConfiguration":{"$ref":"#/types/aws-native:ivs:ChannelMultitrackInputConfiguration","description":"Object specifying multitrack input configuration. Default: no multitrack input configuration is specified."},"name":{"type":"string","description":"Channel"},"playbackUrl":{"type":"string","description":"Channel Playback URL."},"preset":{"$ref":"#/types/aws-native:ivs:ChannelPreset","description":"Optional transcode preset for the channel. This is selectable only for ADVANCED_HD and ADVANCED_SD channel types. For those channel types, the default preset is HIGHER_BANDWIDTH_DELIVERY. For other channel types (BASIC and STANDARD), preset is the empty string (\"\")."},"recordingConfigurationArn":{"type":"string","description":"Recording Configuration ARN. A value other than an empty string indicates that recording is enabled. Default: \"\" (recording is disabled)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"type":{"$ref":"#/types/aws-native:ivs:ChannelType","description":"Channel type, which determines the allowable resolution and bitrate. If you exceed the allowable resolution or bitrate, the stream probably will disconnect immediately."}},"type":"object","required":["arn","ingestEndpoint","playbackUrl"],"inputProperties":{"authorized":{"type":"boolean","description":"Whether the channel is authorized."},"containerFormat":{"$ref":"#/types/aws-native:ivs:ChannelContainerFormat","description":"Indicates which content-packaging format is used (MPEG-TS or fMP4). If multitrackInputConfiguration is specified and enabled is true, then containerFormat is required and must be set to FRAGMENTED_MP4. Otherwise, containerFormat may be set to TS or FRAGMENTED_MP4. Default: TS."},"insecureIngest":{"type":"boolean","description":"Whether the channel allows insecure ingest."},"latencyMode":{"$ref":"#/types/aws-native:ivs:ChannelLatencyMode","description":"Channel latency mode."},"multitrackInputConfiguration":{"$ref":"#/types/aws-native:ivs:ChannelMultitrackInputConfiguration","description":"Object specifying multitrack input configuration. Default: no multitrack input configuration is specified."},"name":{"type":"string","description":"Channel"},"preset":{"$ref":"#/types/aws-native:ivs:ChannelPreset","description":"Optional transcode preset for the channel. This is selectable only for ADVANCED_HD and ADVANCED_SD channel types. For those channel types, the default preset is HIGHER_BANDWIDTH_DELIVERY. For other channel types (BASIC and STANDARD), preset is the empty string (\"\")."},"recordingConfigurationArn":{"type":"string","description":"Recording Configuration ARN. A value other than an empty string indicates that recording is enabled. Default: \"\" (recording is disabled)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"type":{"$ref":"#/types/aws-native:ivs:ChannelType","description":"Channel type, which determines the allowable resolution and bitrate. If you exceed the allowable resolution or bitrate, the stream probably will disconnect immediately."}}},"aws-native:ivs:EncoderConfiguration":{"description":"Resource Type definition for AWS::IVS::EncoderConfiguration.","properties":{"arn":{"type":"string","description":"Encoder configuration identifier."},"name":{"type":"string","description":"Encoder configuration name.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"video":{"$ref":"#/types/aws-native:ivs:VideoProperties","description":"Video configuration. Default: video resolution 1280x720, bitrate 2500 kbps, 30 fps","replaceOnChanges":true}},"type":"object","required":["arn"],"inputProperties":{"name":{"type":"string","description":"Encoder configuration name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"video":{"$ref":"#/types/aws-native:ivs:VideoProperties","description":"Video configuration. Default: video resolution 1280x720, bitrate 2500 kbps, 30 fps"}}},"aws-native:ivs:IngestConfiguration":{"description":"Resource Type definition for AWS::IVS::IngestConfiguration","properties":{"arn":{"type":"string","description":"IngestConfiguration ARN is automatically generated on creation and assigned as the unique identifier."},"ingestProtocol":{"$ref":"#/types/aws-native:ivs:IngestConfigurationIngestProtocol","description":"Ingest Protocol.","replaceOnChanges":true},"insecureIngest":{"type":"boolean","description":"Whether ingest configuration allows insecure ingest.","replaceOnChanges":true},"name":{"type":"string","description":"IngestConfiguration","replaceOnChanges":true},"participantId":{"type":"string","description":"Participant Id is automatically generated on creation and assigned."},"stageArn":{"type":"string","description":"Stage ARN. A value other than an empty string indicates that stage is linked to IngestConfiguration. Default: \"\" (recording is disabled)."},"state":{"$ref":"#/types/aws-native:ivs:IngestConfigurationState","description":"State of IngestConfiguration which determines whether IngestConfiguration is in use or not."},"streamKey":{"type":"string","description":"Stream-key value."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"userId":{"type":"string","description":"User defined indentifier for participant associated with IngestConfiguration.","replaceOnChanges":true}},"type":"object","required":["arn","participantId","state","streamKey"],"inputProperties":{"ingestProtocol":{"$ref":"#/types/aws-native:ivs:IngestConfigurationIngestProtocol","description":"Ingest Protocol."},"insecureIngest":{"type":"boolean","description":"Whether ingest configuration allows insecure ingest."},"name":{"type":"string","description":"IngestConfiguration"},"stageArn":{"type":"string","description":"Stage ARN. A value other than an empty string indicates that stage is linked to IngestConfiguration. Default: \"\" (recording is disabled)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"userId":{"type":"string","description":"User defined indentifier for participant associated with IngestConfiguration."}}},"aws-native:ivs:PlaybackKeyPair":{"description":"Resource Type definition for AWS::IVS::PlaybackKeyPair\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var playbackKeyPair = new AwsNative.Ivs.PlaybackKeyPair(\"playbackKeyPair\", new()\n    {\n        PublicKeyMaterial = @\"-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n\",\n        Name = \"MyPlaybackKeyPair\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"playbackKeyPairArn\"] = playbackKeyPair.Id,\n        [\"playbackKeyPairFingerprint\"] = playbackKeyPair.Fingerprint,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tplaybackKeyPair, err := ivs.NewPlaybackKeyPair(ctx, \"playbackKeyPair\", \u0026ivs.PlaybackKeyPairArgs{\n\t\t\tPublicKeyMaterial: pulumi.String(`-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n`),\n\t\t\tName: pulumi.String(\"MyPlaybackKeyPair\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"playbackKeyPairArn\", playbackKeyPair.ID())\n\t\tctx.Export(\"playbackKeyPairFingerprint\", playbackKeyPair.Fingerprint)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst playbackKeyPair = new aws_native.ivs.PlaybackKeyPair(\"playbackKeyPair\", {\n    publicKeyMaterial: `-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n`,\n    name: \"MyPlaybackKeyPair\",\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n});\nexport const playbackKeyPairArn = playbackKeyPair.id;\nexport const playbackKeyPairFingerprint = playbackKeyPair.fingerprint;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nplayback_key_pair = aws_native.ivs.PlaybackKeyPair(\"playbackKeyPair\",\n    public_key_material=\"\"\"-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n\"\"\",\n    name=\"MyPlaybackKeyPair\",\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }])\npulumi.export(\"playbackKeyPairArn\", playback_key_pair.id)\npulumi.export(\"playbackKeyPairFingerprint\", playback_key_pair.fingerprint)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var playbackKeyPair = new AwsNative.Ivs.PlaybackKeyPair(\"playbackKeyPair\", new()\n    {\n        PublicKeyMaterial = @\"-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n\",\n        Name = \"MyPlaybackKeyPair\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"playbackKeyPairArn\"] = playbackKeyPair.Id,\n        [\"playbackKeyPairFingerprint\"] = playbackKeyPair.Fingerprint,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tplaybackKeyPair, err := ivs.NewPlaybackKeyPair(ctx, \"playbackKeyPair\", \u0026ivs.PlaybackKeyPairArgs{\n\t\t\tPublicKeyMaterial: pulumi.String(`-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n`),\n\t\t\tName: pulumi.String(\"MyPlaybackKeyPair\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"playbackKeyPairArn\", playbackKeyPair.ID())\n\t\tctx.Export(\"playbackKeyPairFingerprint\", playbackKeyPair.Fingerprint)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst playbackKeyPair = new aws_native.ivs.PlaybackKeyPair(\"playbackKeyPair\", {\n    publicKeyMaterial: `-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n`,\n    name: \"MyPlaybackKeyPair\",\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n});\nexport const playbackKeyPairArn = playbackKeyPair.id;\nexport const playbackKeyPairFingerprint = playbackKeyPair.fingerprint;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nplayback_key_pair = aws_native.ivs.PlaybackKeyPair(\"playbackKeyPair\",\n    public_key_material=\"\"\"-----BEGIN PUBLIC KEY-----\nMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEwOR43ETwEoWif1i14aL8GtDMNkT/kBQm\nh4sas9P//bjCU988rmQQXVBfftKT9xngg+W6hzOEpeUlCRlAtz6b6U79naYYRaSk\nK/UhYGWkXlbJlc9zn13imYWgVGe/BMFp\n-----END PUBLIC KEY-----\n\"\"\",\n    name=\"MyPlaybackKeyPair\",\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }])\npulumi.export(\"playbackKeyPairArn\", playback_key_pair.id)\npulumi.export(\"playbackKeyPairFingerprint\", playback_key_pair.fingerprint)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Key-pair identifier."},"fingerprint":{"type":"string","description":"Key-pair identifier."},"name":{"type":"string","description":"An arbitrary string (a nickname) assigned to a playback key pair that helps the customer identify that resource. The value does not need to be unique.","replaceOnChanges":true},"publicKeyMaterial":{"type":"string","description":"The public portion of a customer-generated key pair. This field is required to create the AWS::IVS::PlaybackKeyPair resource.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}},"type":"object","required":["arn","fingerprint"],"inputProperties":{"name":{"type":"string","description":"An arbitrary string (a nickname) assigned to a playback key pair that helps the customer identify that resource. The value does not need to be unique."},"publicKeyMaterial":{"type":"string","description":"The public portion of a customer-generated key pair. This field is required to create the AWS::IVS::PlaybackKeyPair resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}}},"aws-native:ivs:PlaybackRestrictionPolicy":{"description":"Resource Type definition for AWS::IVS::PlaybackRestrictionPolicy.","properties":{"allowedCountries":{"type":"array","items":{"type":"string"},"description":"A list of country codes that control geoblocking restriction. Allowed values are the officially assigned ISO 3166-1 alpha-2 codes. Default: All countries (an empty array)."},"allowedOrigins":{"type":"array","items":{"type":"string"},"description":"A list of origin sites that control CORS restriction. Allowed values are the same as valid values of the Origin header defined at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"},"arn":{"type":"string","description":"Playback-restriction-policy identifier."},"enableStrictOriginEnforcement":{"type":"boolean","description":"Whether channel playback is constrained by origin site."},"name":{"type":"string","description":"Playback-restriction-policy name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn"],"inputProperties":{"allowedCountries":{"type":"array","items":{"type":"string"},"description":"A list of country codes that control geoblocking restriction. Allowed values are the officially assigned ISO 3166-1 alpha-2 codes. Default: All countries (an empty array)."},"allowedOrigins":{"type":"array","items":{"type":"string"},"description":"A list of origin sites that control CORS restriction. Allowed values are the same as valid values of the Origin header defined at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin"},"enableStrictOriginEnforcement":{"type":"boolean","description":"Whether channel playback is constrained by origin site."},"name":{"type":"string","description":"Playback-restriction-policy name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:ivs:PublicKey":{"description":"Resource Type definition for AWS::IVS::PublicKey","properties":{"arn":{"type":"string","description":"Key-pair identifier."},"fingerprint":{"type":"string","description":"Key-pair identifier."},"name":{"type":"string","description":"Name of the public key to be imported. The value does not need to be unique.","replaceOnChanges":true},"publicKeyMaterial":{"type":"string","description":"The public portion of a customer-generated key pair. This field is required to create the AWS::IVS::PublicKey resource.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}},"type":"object","required":["arn","fingerprint"],"inputProperties":{"name":{"type":"string","description":"Name of the public key to be imported. The value does not need to be unique."},"publicKeyMaterial":{"type":"string","description":"The public portion of a customer-generated key pair. This field is required to create the AWS::IVS::PublicKey resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}}},"aws-native:ivs:RecordingConfiguration":{"description":"Resource Type definition for AWS::IVS::RecordingConfiguration","properties":{"arn":{"type":"string","description":"Recording Configuration ARN is automatically generated on creation and assigned as the unique identifier."},"destinationConfiguration":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationDestinationConfiguration","description":"A destination configuration describes an S3 bucket where recorded video will be stored. See the DestinationConfiguration property type for more information.","replaceOnChanges":true},"name":{"type":"string","description":"Recording Configuration Name.","replaceOnChanges":true},"recordingReconnectWindowSeconds":{"type":"integer","description":"Recording Reconnect Window Seconds. (0 means disabled)","replaceOnChanges":true},"renditionConfiguration":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationRenditionConfiguration","description":"A rendition configuration describes which renditions should be recorded for a stream. See the RenditionConfiguration property type for more information.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationState","description":"Recording Configuration State."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"thumbnailConfiguration":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationThumbnailConfiguration","description":"A thumbnail configuration enables/disables the recording of thumbnails for a live session and controls the interval at which thumbnails are generated for the live session. See the ThumbnailConfiguration property type for more information.","replaceOnChanges":true}},"type":"object","required":["arn","destinationConfiguration","state"],"inputProperties":{"destinationConfiguration":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationDestinationConfiguration","description":"A destination configuration describes an S3 bucket where recorded video will be stored. See the DestinationConfiguration property type for more information."},"name":{"type":"string","description":"Recording Configuration Name."},"recordingReconnectWindowSeconds":{"type":"integer","description":"Recording Reconnect Window Seconds. (0 means disabled)"},"renditionConfiguration":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationRenditionConfiguration","description":"A rendition configuration describes which renditions should be recorded for a stream. See the RenditionConfiguration property type for more information."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"thumbnailConfiguration":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationThumbnailConfiguration","description":"A thumbnail configuration enables/disables the recording of thumbnails for a live session and controls the interval at which thumbnails are generated for the live session. See the ThumbnailConfiguration property type for more information."}},"requiredInputs":["destinationConfiguration"]},"aws-native:ivs:Stage":{"description":"Resource Type definition for AWS::IVS::Stage.","properties":{"activeSessionId":{"type":"string","description":"ID of the active session within the stage."},"arn":{"type":"string","description":"Stage ARN is automatically generated on creation and assigned as the unique identifier."},"autoParticipantRecordingConfiguration":{"$ref":"#/types/aws-native:ivs:StageAutoParticipantRecordingConfiguration","description":"Configuration object for individual participant recording."},"name":{"type":"string","description":"Stage name"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["activeSessionId","arn"],"inputProperties":{"autoParticipantRecordingConfiguration":{"$ref":"#/types/aws-native:ivs:StageAutoParticipantRecordingConfiguration","description":"Configuration object for individual participant recording."},"name":{"type":"string","description":"Stage name"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:ivs:StorageConfiguration":{"description":"Resource Type definition for AWS::IVS::StorageConfiguration","properties":{"arn":{"type":"string","description":"Storage Configuration ARN is automatically generated on creation and assigned as the unique identifier."},"name":{"type":"string","description":"Storage Configuration Name.","replaceOnChanges":true},"s3":{"$ref":"#/types/aws-native:ivs:StorageConfigurationS3StorageConfiguration","description":"An S3 storage configuration contains information about where recorded video will be stored. See the [S3StorageConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-storageconfiguration-s3storageconfiguration.html) property type for more information.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}},"type":"object","required":["arn","s3"],"inputProperties":{"name":{"type":"string","description":"Storage Configuration Name."},"s3":{"$ref":"#/types/aws-native:ivs:StorageConfigurationS3StorageConfiguration","description":"An S3 storage configuration contains information about where recorded video will be stored. See the [S3StorageConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ivs-storageconfiguration-s3storageconfiguration.html) property type for more information."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}},"requiredInputs":["s3"]},"aws-native:ivs:StreamKey":{"description":"Resource Type definition for AWS::IVS::StreamKey","properties":{"arn":{"type":"string","description":"Stream Key ARN is automatically generated on creation and assigned as the unique identifier."},"channelArn":{"type":"string","description":"Channel ARN for the stream.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."},"value":{"type":"string","description":"Stream-key value."}},"type":"object","required":["arn","channelArn","value"],"inputProperties":{"channelArn":{"type":"string","description":"Channel ARN for the stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that contain metadata for the asset model."}},"requiredInputs":["channelArn"]},"aws-native:ivschat:LoggingConfiguration":{"description":"Resource type definition for AWS::IVSChat::LoggingConfiguration.","properties":{"arn":{"type":"string","description":"LoggingConfiguration ARN is automatically generated on creation and assigned as the unique identifier."},"awsId":{"type":"string","description":"The system-generated ID of the logging configuration."},"destinationConfiguration":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationDestinationConfiguration","description":"The DestinationConfiguration is a complex type that contains information about where chat content will be logged."},"name":{"type":"string","description":"The name of the logging configuration. The value does not need to be unique."},"state":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationState","description":"The state of the logging configuration. When the state is ACTIVE, the configuration is ready to log chat content."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","destinationConfiguration","state"],"inputProperties":{"destinationConfiguration":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationDestinationConfiguration","description":"The DestinationConfiguration is a complex type that contains information about where chat content will be logged."},"name":{"type":"string","description":"The name of the logging configuration. The value does not need to be unique."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["destinationConfiguration"]},"aws-native:ivschat:Room":{"description":"Resource type definition for AWS::IVSChat::Room.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var room = new AwsNative.IvsChat.Room(\"room\", new()\n    {\n        Name = \"MyRoom\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"roomArn\"] = room.Id,\n        [\"roomId\"] = room.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivschat\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\troom, err := ivschat.NewRoom(ctx, \"room\", \u0026ivschat.RoomArgs{\n\t\t\tName: pulumi.String(\"MyRoom\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"roomArn\", room.ID())\n\t\tctx.Export(\"roomId\", room.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst room = new aws_native.ivschat.Room(\"room\", {\n    name: \"MyRoom\",\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n});\nexport const roomArn = room.id;\nexport const roomId = room.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nroom = aws_native.ivschat.Room(\"room\",\n    name=\"MyRoom\",\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }])\npulumi.export(\"roomArn\", room.id)\npulumi.export(\"roomId\", room.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var room = new AwsNative.IvsChat.Room(\"room\", new()\n    {\n        Name = \"MyRoom\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"MyKey\",\n                Value = \"MyValue\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"roomArn\"] = room.Id,\n        [\"roomId\"] = room.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivschat\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\troom, err := ivschat.NewRoom(ctx, \"room\", \u0026ivschat.RoomArgs{\n\t\t\tName: pulumi.String(\"MyRoom\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"MyKey\"),\n\t\t\t\t\tValue: pulumi.String(\"MyValue\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"roomArn\", room.ID())\n\t\tctx.Export(\"roomId\", room.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst room = new aws_native.ivschat.Room(\"room\", {\n    name: \"MyRoom\",\n    tags: [{\n        key: \"MyKey\",\n        value: \"MyValue\",\n    }],\n});\nexport const roomArn = room.id;\nexport const roomId = room.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nroom = aws_native.ivschat.Room(\"room\",\n    name=\"MyRoom\",\n    tags=[{\n        \"key\": \"MyKey\",\n        \"value\": \"MyValue\",\n    }])\npulumi.export(\"roomArn\", room.id)\npulumi.export(\"roomId\", room.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Room ARN is automatically generated on creation and assigned as the unique identifier."},"awsId":{"type":"string","description":"The system-generated ID of the room."},"loggingConfigurationIdentifiers":{"type":"array","items":{"type":"string"},"description":"Array of logging configuration identifiers attached to the room."},"maximumMessageLength":{"type":"integer","description":"The maximum number of characters in a single message."},"maximumMessageRatePerSecond":{"type":"integer","description":"The maximum number of messages per second that can be sent to the room."},"messageReviewHandler":{"$ref":"#/types/aws-native:ivschat:RoomMessageReviewHandler","description":"Configuration information for optional review of messages."},"name":{"type":"string","description":"The name of the room. The value does not need to be unique."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId"],"inputProperties":{"loggingConfigurationIdentifiers":{"type":"array","items":{"type":"string"},"description":"Array of logging configuration identifiers attached to the room."},"maximumMessageLength":{"type":"integer","description":"The maximum number of characters in a single message."},"maximumMessageRatePerSecond":{"type":"integer","description":"The maximum number of messages per second that can be sent to the room."},"messageReviewHandler":{"$ref":"#/types/aws-native:ivschat:RoomMessageReviewHandler","description":"Configuration information for optional review of messages."},"name":{"type":"string","description":"The name of the room. The value does not need to be unique."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:kafkaconnect:Connector":{"description":"Resource Type definition for AWS::KafkaConnect::Connector","properties":{"capacity":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorCapacity","description":"The connector's compute capacity settings."},"connectorArn":{"type":"string","description":"Amazon Resource Name for the created Connector."},"connectorConfiguration":{"type":"object","additionalProperties":{"type":"string"},"description":"The configuration for the connector."},"connectorDescription":{"type":"string","description":"A summary description of the connector.","replaceOnChanges":true},"connectorName":{"type":"string","description":"The name of the connector.","replaceOnChanges":true},"kafkaCluster":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaCluster","description":"The details of the Apache Kafka cluster to which the connector is connected.","replaceOnChanges":true},"kafkaClusterClientAuthentication":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaClusterClientAuthentication","description":"The type of client authentication used to connect to the Apache Kafka cluster. The value is NONE when no client authentication is used.","replaceOnChanges":true},"kafkaClusterEncryptionInTransit":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaClusterEncryptionInTransit","description":"Details of encryption in transit to the Apache Kafka cluster.","replaceOnChanges":true},"kafkaConnectVersion":{"type":"string","description":"The version of Kafka Connect. It has to be compatible with both the Kafka cluster's version and the plugins.","replaceOnChanges":true},"logDelivery":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorLogDelivery","description":"The settings for delivering connector logs to Amazon CloudWatch Logs.","replaceOnChanges":true},"networkType":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorNetworkType","description":"The network type of the Connector.","replaceOnChanges":true},"plugins":{"type":"array","items":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorPlugin"},"description":"List of plugins to use with the connector.","replaceOnChanges":true},"serviceExecutionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used by the connector to access Amazon S3 objects and other external resources.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"},"workerConfiguration":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorWorkerConfiguration","description":"The worker configurations that are in use with the connector.","replaceOnChanges":true}},"type":"object","required":["capacity","connectorArn","connectorConfiguration","connectorName","kafkaCluster","kafkaClusterClientAuthentication","kafkaClusterEncryptionInTransit","kafkaConnectVersion","plugins","serviceExecutionRoleArn"],"inputProperties":{"capacity":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorCapacity","description":"The connector's compute capacity settings."},"connectorConfiguration":{"type":"object","additionalProperties":{"type":"string"},"description":"The configuration for the connector."},"connectorDescription":{"type":"string","description":"A summary description of the connector."},"connectorName":{"type":"string","description":"The name of the connector."},"kafkaCluster":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaCluster","description":"The details of the Apache Kafka cluster to which the connector is connected."},"kafkaClusterClientAuthentication":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaClusterClientAuthentication","description":"The type of client authentication used to connect to the Apache Kafka cluster. The value is NONE when no client authentication is used."},"kafkaClusterEncryptionInTransit":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorKafkaClusterEncryptionInTransit","description":"Details of encryption in transit to the Apache Kafka cluster."},"kafkaConnectVersion":{"type":"string","description":"The version of Kafka Connect. It has to be compatible with both the Kafka cluster's version and the plugins."},"logDelivery":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorLogDelivery","description":"The settings for delivering connector logs to Amazon CloudWatch Logs."},"networkType":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorNetworkType","description":"The network type of the Connector."},"plugins":{"type":"array","items":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorPlugin"},"description":"List of plugins to use with the connector."},"serviceExecutionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used by the connector to access Amazon S3 objects and other external resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"},"workerConfiguration":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorWorkerConfiguration","description":"The worker configurations that are in use with the connector."}},"requiredInputs":["capacity","connectorConfiguration","kafkaCluster","kafkaClusterClientAuthentication","kafkaClusterEncryptionInTransit","kafkaConnectVersion","plugins","serviceExecutionRoleArn"]},"aws-native:kafkaconnect:CustomPlugin":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"contentType":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginContentType","description":"The type of the plugin file.","replaceOnChanges":true},"customPluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom plugin to use."},"description":{"type":"string","description":"A summary description of the custom plugin.","replaceOnChanges":true},"fileDescription":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginFileDescription"},"location":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginLocation","description":"Information about the location of the custom plugin.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the custom plugin.","replaceOnChanges":true},"revision":{"type":"integer","description":"The revision of the custom plugin."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["contentType","customPluginArn","fileDescription","location","name","revision"],"inputProperties":{"contentType":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginContentType","description":"The type of the plugin file."},"description":{"type":"string","description":"A summary description of the custom plugin."},"location":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginLocation","description":"Information about the location of the custom plugin."},"name":{"type":"string","description":"The name of the custom plugin."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["contentType","location"]},"aws-native:kafkaconnect:WorkerConfiguration":{"description":"The configuration of the workers, which are the processes that run the connector logic.","properties":{"description":{"type":"string","description":"A summary description of the worker configuration.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the worker configuration.","replaceOnChanges":true},"propertiesFileContent":{"type":"string","description":"Base64 encoded contents of connect-distributed.properties file.","replaceOnChanges":true},"revision":{"type":"integer","description":"The description of a revision of the worker configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"},"workerConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom configuration."}},"type":"object","required":["name","propertiesFileContent","revision","workerConfigurationArn"],"inputProperties":{"description":{"type":"string","description":"A summary description of the worker configuration."},"name":{"type":"string","description":"The name of the worker configuration."},"propertiesFileContent":{"type":"string","description":"Base64 encoded contents of connect-distributed.properties file."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["propertiesFileContent"]},"aws-native:kendra:DataSource":{"description":"Kendra DataSource","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data source. For example:\n\n`arn:aws:kendra:us-west-2:111122223333:index/335c3741-41df-46a6-b5d3-61f85b787884/data-source/b8cae438-6787-4091-8897-684a652bbb0a`"},"awsId":{"type":"string","description":"The identifier for the data source. For example:\n\n`b8cae438-6787-4091-8897-684a652bbb0a` ."},"customDocumentEnrichmentConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceCustomDocumentEnrichmentConfiguration","description":"Configuration information for altering document metadata and content during the document ingestion process."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfiguration","description":"Configuration information for an Amazon Kendra data source. The contents of the configuration depend on the type of data source. You can only specify one type of data source in the configuration.\n\nYou can't specify the `Configuration` parameter when the `Type` parameter is set to `CUSTOM` .\n\nThe `Configuration` parameter is required for all other data sources."},"description":{"type":"string","description":"A description for the data source connector."},"indexId":{"type":"string","description":"The identifier of the index you want to use with the data source connector.","replaceOnChanges":true},"languageCode":{"type":"string","description":"The code for a language. This shows a supported language for all documents in the data source. English is supported by default. For more information on supported languages, including their codes, see [Adding documents in languages other than English](https://docs.aws.amazon.com/kendra/latest/dg/in-adding-languages.html) ."},"name":{"type":"string","description":"The name of the data source."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a role with permission to access the data source.\n\nYou can't specify the `RoleArn` parameter when the `Type` parameter is set to `CUSTOM` .\n\nThe `RoleArn` parameter is required for all other data sources."},"schedule":{"type":"string","description":"Sets the frequency that Amazon Kendra checks the documents in your data source and updates the index. If you don't set a schedule, Amazon Kendra doesn't periodically update the index."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the data source"},"type":{"$ref":"#/types/aws-native:kendra:DataSourceType","description":"The type of the data source.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","indexId","name","type"],"inputProperties":{"customDocumentEnrichmentConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceCustomDocumentEnrichmentConfiguration","description":"Configuration information for altering document metadata and content during the document ingestion process."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfiguration","description":"Configuration information for an Amazon Kendra data source. The contents of the configuration depend on the type of data source. You can only specify one type of data source in the configuration.\n\nYou can't specify the `Configuration` parameter when the `Type` parameter is set to `CUSTOM` .\n\nThe `Configuration` parameter is required for all other data sources."},"description":{"type":"string","description":"A description for the data source connector."},"indexId":{"type":"string","description":"The identifier of the index you want to use with the data source connector."},"languageCode":{"type":"string","description":"The code for a language. This shows a supported language for all documents in the data source. English is supported by default. For more information on supported languages, including their codes, see [Adding documents in languages other than English](https://docs.aws.amazon.com/kendra/latest/dg/in-adding-languages.html) ."},"name":{"type":"string","description":"The name of the data source."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a role with permission to access the data source.\n\nYou can't specify the `RoleArn` parameter when the `Type` parameter is set to `CUSTOM` .\n\nThe `RoleArn` parameter is required for all other data sources."},"schedule":{"type":"string","description":"Sets the frequency that Amazon Kendra checks the documents in your data source and updates the index. If you don't set a schedule, Amazon Kendra doesn't periodically update the index."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the data source"},"type":{"$ref":"#/types/aws-native:kendra:DataSourceType","description":"The type of the data source."}},"requiredInputs":["indexId","type"]},"aws-native:kendra:Faq":{"description":"A Kendra FAQ resource","properties":{"arn":{"type":"string","description":"`arn:aws:kendra:us-west-2:111122223333:index/335c3741-41df-46a6-b5d3-61f85b787884/faq/f61995a6-cd5c-4e99-9cfc-58816d8bfaa7`"},"awsId":{"type":"string","description":"The identifier for the FAQ. For example:\n\n`f61995a6-cd5c-4e99-9cfc-58816d8bfaa7`"},"description":{"type":"string","description":"FAQ description","replaceOnChanges":true},"fileFormat":{"$ref":"#/types/aws-native:kendra:FaqFileFormat","description":"FAQ file format","replaceOnChanges":true},"indexId":{"type":"string","description":"Index ID","replaceOnChanges":true},"languageCode":{"type":"string","description":"The code for a language. This shows a supported language for the FAQ document as part of the summary information for FAQs. English is supported by default. For more information on supported languages, including their codes, see [Adding documents in languages other than English](https://docs.aws.amazon.com/kendra/latest/dg/in-adding-languages.html) ."},"name":{"type":"string","description":"FAQ name","replaceOnChanges":true},"roleArn":{"type":"string","description":"FAQ role ARN","replaceOnChanges":true},"s3Path":{"$ref":"#/types/aws-native:kendra:FaqS3Path","description":"FAQ S3 path","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the FAQ"}},"type":"object","required":["arn","awsId","indexId","name","roleArn","s3Path"],"inputProperties":{"description":{"type":"string","description":"FAQ description"},"fileFormat":{"$ref":"#/types/aws-native:kendra:FaqFileFormat","description":"FAQ file format"},"indexId":{"type":"string","description":"Index ID"},"languageCode":{"type":"string","description":"The code for a language. This shows a supported language for the FAQ document as part of the summary information for FAQs. English is supported by default. For more information on supported languages, including their codes, see [Adding documents in languages other than English](https://docs.aws.amazon.com/kendra/latest/dg/in-adding-languages.html) ."},"name":{"type":"string","description":"FAQ name"},"roleArn":{"type":"string","description":"FAQ role ARN"},"s3Path":{"$ref":"#/types/aws-native:kendra:FaqS3Path","description":"FAQ S3 path"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the FAQ"}},"requiredInputs":["indexId","roleArn","s3Path"]},"aws-native:kendra:Index":{"description":"A Kendra index","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the index. For example: `arn:aws:kendra:us-west-2:111122223333:index/0123456789abcdef` ."},"awsId":{"type":"string","description":"The identifier for the index. For example: `f4aeaa10-8056-4b2c-a343-522ca0f41234` ."},"capacityUnits":{"$ref":"#/types/aws-native:kendra:IndexCapacityUnitsConfiguration","description":"Capacity units"},"description":{"type":"string","description":"A description for the index"},"documentMetadataConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:IndexDocumentMetadataConfiguration"},"description":"Document metadata configurations"},"edition":{"$ref":"#/types/aws-native:kendra:IndexEdition","description":"Indicates whether the index is a Enterprise Edition index, a Developer Edition index, or a GenAI Enterprise Edition index.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the index."},"roleArn":{"type":"string","description":"An IAM role that gives Amazon Kendra permissions to access your Amazon CloudWatch logs and metrics. This is also the role used when you use the [BatchPutDocument](https://docs.aws.amazon.com/kendra/latest/dg/BatchPutDocument.html) operation to index documents from an Amazon S3 bucket."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:kendra:IndexServerSideEncryptionConfiguration","description":"Server side encryption configuration","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the index"},"userContextPolicy":{"$ref":"#/types/aws-native:kendra:IndexUserContextPolicy","description":"The user context policy.\n\nATTRIBUTE_FILTER\n\n- All indexed content is searchable and displayable for all users. If you want to filter search results on user context, you can use the attribute filters of `_user_id` and `_group_ids` or you can provide user and group information in `UserContext` .\n\nUSER_TOKEN\n\n- Enables token-based user access control to filter search results on user context. All documents with no access control and all documents accessible to the user will be searchable and displayable."},"userTokenConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:IndexUserTokenConfiguration"},"description":"Defines the type of user token used for the index."}},"type":"object","required":["arn","awsId","edition","name","roleArn"],"inputProperties":{"capacityUnits":{"$ref":"#/types/aws-native:kendra:IndexCapacityUnitsConfiguration","description":"Capacity units"},"description":{"type":"string","description":"A description for the index"},"documentMetadataConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:IndexDocumentMetadataConfiguration"},"description":"Document metadata configurations"},"edition":{"$ref":"#/types/aws-native:kendra:IndexEdition","description":"Indicates whether the index is a Enterprise Edition index, a Developer Edition index, or a GenAI Enterprise Edition index."},"name":{"type":"string","description":"The name of the index."},"roleArn":{"type":"string","description":"An IAM role that gives Amazon Kendra permissions to access your Amazon CloudWatch logs and metrics. This is also the role used when you use the [BatchPutDocument](https://docs.aws.amazon.com/kendra/latest/dg/BatchPutDocument.html) operation to index documents from an Amazon S3 bucket."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:kendra:IndexServerSideEncryptionConfiguration","description":"Server side encryption configuration"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the index"},"userContextPolicy":{"$ref":"#/types/aws-native:kendra:IndexUserContextPolicy","description":"The user context policy.\n\nATTRIBUTE_FILTER\n\n- All indexed content is searchable and displayable for all users. If you want to filter search results on user context, you can use the attribute filters of `_user_id` and `_group_ids` or you can provide user and group information in `UserContext` .\n\nUSER_TOKEN\n\n- Enables token-based user access control to filter search results on user context. All documents with no access control and all documents accessible to the user will be searchable and displayable."},"userTokenConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:kendra:IndexUserTokenConfiguration"},"description":"Defines the type of user token used for the index."}},"requiredInputs":["edition","roleArn"]},"aws-native:kendraranking:ExecutionPlan":{"description":"A KendraRanking Rescore execution plan","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rescore execution plan."},"awsId":{"type":"string","description":"The identifier of the rescore execution plan."},"capacityUnits":{"$ref":"#/types/aws-native:kendraranking:ExecutionPlanCapacityUnitsConfiguration","description":"Capacity units"},"description":{"type":"string","description":"A description for the execution plan"},"name":{"type":"string","description":"A name for the rescore execution plan."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the execution plan"}},"type":"object","required":["arn","awsId","name"],"inputProperties":{"capacityUnits":{"$ref":"#/types/aws-native:kendraranking:ExecutionPlanCapacityUnitsConfiguration","description":"Capacity units"},"description":{"type":"string","description":"A description for the execution plan"},"name":{"type":"string","description":"A name for the rescore execution plan."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for labeling the execution plan"}}},"aws-native:kinesis:ResourcePolicy":{"description":"Resource Type definition for AWS::Kinesis::ResourcePolicy","properties":{"resourceArn":{"type":"string","description":"The ARN of the AWS Kinesis resource to which the policy applies.","replaceOnChanges":true},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Kinesis::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}},"type":"object","required":["resourceArn","resourcePolicy"],"inputProperties":{"resourceArn":{"type":"string","description":"The ARN of the AWS Kinesis resource to which the policy applies."},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Kinesis::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}},"requiredInputs":["resourceArn","resourcePolicy"]},"aws-native:kinesis:Stream":{"description":"Resource Type definition for AWS::Kinesis::Stream","properties":{"arn":{"type":"string","description":"The Amazon resource name (ARN) of the Kinesis stream"},"desiredShardLevelMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:kinesis:StreamEnhancedMetric"},"description":"The final list of shard-level metrics"},"maxRecordSizeInKiB":{"type":"integer","description":"Maximum size of a data record in KiB allowed to be put into Kinesis stream."},"name":{"type":"string","description":"The name of the Kinesis stream.","replaceOnChanges":true},"retentionPeriodHours":{"type":"integer","description":"The number of hours for the data records that are stored in shards to remain accessible."},"shardCount":{"type":"integer","description":"The number of shards that the stream uses. Required when StreamMode = PROVISIONED is passed."},"streamEncryption":{"$ref":"#/types/aws-native:kinesis:StreamEncryption","description":"When specified, enables or updates server-side encryption using an AWS KMS key for a specified stream."},"streamModeDetails":{"$ref":"#/types/aws-native:kinesis:StreamModeDetails","description":"The mode in which the stream is running."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) to associate with the Kinesis stream."},"warmThroughputMiBps":{"type":"integer","description":"Target warm throughput in MiB/s for the stream. This property can ONLY be set when StreamMode is ON_DEMAND."},"warmThroughputObject":{"$ref":"#/types/aws-native:kinesis:StreamWarmThroughputObject","description":"Warm throughput configuration details for the stream. Only present for ON_DEMAND streams."}},"type":"object","required":["arn","warmThroughputObject"],"inputProperties":{"desiredShardLevelMetrics":{"type":"array","items":{"$ref":"#/types/aws-native:kinesis:StreamEnhancedMetric"},"description":"The final list of shard-level metrics"},"maxRecordSizeInKiB":{"type":"integer","description":"Maximum size of a data record in KiB allowed to be put into Kinesis stream."},"name":{"type":"string","description":"The name of the Kinesis stream."},"retentionPeriodHours":{"type":"integer","description":"The number of hours for the data records that are stored in shards to remain accessible."},"shardCount":{"type":"integer","description":"The number of shards that the stream uses. Required when StreamMode = PROVISIONED is passed."},"streamEncryption":{"$ref":"#/types/aws-native:kinesis:StreamEncryption","description":"When specified, enables or updates server-side encryption using an AWS KMS key for a specified stream."},"streamModeDetails":{"$ref":"#/types/aws-native:kinesis:StreamModeDetails","description":"The mode in which the stream is running."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) to associate with the Kinesis stream."},"warmThroughputMiBps":{"type":"integer","description":"Target warm throughput in MiB/s for the stream. This property can ONLY be set when StreamMode is ON_DEMAND."}}},"aws-native:kinesis:StreamConsumer":{"description":"Resource Type definition for AWS::Kinesis::StreamConsumer","properties":{"consumerArn":{"type":"string","description":"The ARN returned by Kinesis Data Streams when you registered the consumer. If you don't know the ARN of the consumer that you want to deregister, you can use the ListStreamConsumers operation to get a list of the descriptions of all the consumers that are currently registered with a given data stream. The description of a consumer contains its ARN."},"consumerCreationTimestamp":{"type":"string","description":"Timestamp when the consumer was created."},"consumerName":{"type":"string","description":"The name of the Kinesis Stream Consumer. For a given Kinesis data stream, each consumer must have a unique name. However, consumer names don't have to be unique across data streams.","replaceOnChanges":true},"consumerStatus":{"type":"string","description":"A consumer can't read data while in the CREATING or DELETING states. Valid Values: CREATING | DELETING | ACTIVE"},"streamArn":{"type":"string","description":"The Amazon resource name (ARN) of the Kinesis data stream that you want to register the consumer with.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An arbitrary set of tags (key–value pairs) to associate with the Kinesis consumer.","replaceOnChanges":true}},"type":"object","required":["consumerArn","consumerCreationTimestamp","consumerName","consumerStatus","streamArn"],"inputProperties":{"consumerName":{"type":"string","description":"The name of the Kinesis Stream Consumer. For a given Kinesis data stream, each consumer must have a unique name. However, consumer names don't have to be unique across data streams."},"streamArn":{"type":"string","description":"The Amazon resource name (ARN) of the Kinesis data stream that you want to register the consumer with."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An arbitrary set of tags (key–value pairs) to associate with the Kinesis consumer."}},"requiredInputs":["streamArn"]},"aws-native:kinesisanalyticsv2:Application":{"description":"Creates an Amazon Kinesis Data Analytics application. For information about creating a Kinesis Data Analytics application, see [Creating an Application](https://docs.aws.amazon.com/kinesisanalytics/latest/java/getting-started.html).","properties":{"applicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationConfiguration","description":"Use this parameter to configure the application."},"applicationDescription":{"type":"string","description":"The description of the application."},"applicationMaintenanceConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMaintenanceConfiguration","description":"Used to configure start of maintenance window."},"applicationMode":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMode","description":"To create a Kinesis Data Analytics Studio notebook, you must set the mode to `INTERACTIVE`. However, for a Kinesis Data Analytics for Apache Flink application, the mode is optional.","replaceOnChanges":true},"applicationName":{"type":"string","description":"The name of the application.","replaceOnChanges":true},"runConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRunConfiguration","description":"Specifies run configuration (start parameters) of a Kinesis Data Analytics application. Evaluated on update for RUNNING applications an only."},"runtimeEnvironment":{"type":"string","description":"The runtime environment for the application."},"serviceExecutionRole":{"type":"string","description":"Specifies the IAM role that the application uses to access external resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of one or more tags to assign to the application. A tag is a key-value pair that identifies an application. Note that the maximum number of application tags includes system tags. The maximum number of user-defined application tags is 50."}},"type":"object","required":["runtimeEnvironment","serviceExecutionRole"],"inputProperties":{"applicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationConfiguration","description":"Use this parameter to configure the application."},"applicationDescription":{"type":"string","description":"The description of the application."},"applicationMaintenanceConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMaintenanceConfiguration","description":"Used to configure start of maintenance window."},"applicationMode":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMode","description":"To create a Kinesis Data Analytics Studio notebook, you must set the mode to `INTERACTIVE`. However, for a Kinesis Data Analytics for Apache Flink application, the mode is optional."},"applicationName":{"type":"string","description":"The name of the application."},"runConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationRunConfiguration","description":"Specifies run configuration (start parameters) of a Kinesis Data Analytics application. Evaluated on update for RUNNING applications an only."},"runtimeEnvironment":{"type":"string","description":"The runtime environment for the application."},"serviceExecutionRole":{"type":"string","description":"Specifies the IAM role that the application uses to access external resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of one or more tags to assign to the application. A tag is a key-value pair that identifies an application. Note that the maximum number of application tags includes system tags. The maximum number of user-defined application tags is 50."}},"requiredInputs":["runtimeEnvironment","serviceExecutionRole"]},"aws-native:kinesisfirehose:DeliveryStream":{"description":"Resource Type definition for AWS::KinesisFirehose::DeliveryStream","properties":{"amazonOpenSearchServerlessDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessDestinationConfiguration","description":"Describes the configuration of a destination in the Serverless offering for Amazon OpenSearch Service."},"amazonopensearchserviceDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfiguration","description":"The destination in Amazon OpenSearch Service. You can specify only one destination."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the delivery stream, such as `arn:aws:firehose:us-east-2:123456789012:deliverystream/delivery-stream-name` ."},"databaseSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfiguration","description":"The top level object for configuring streams with database as a source.\n\nAmazon Data Firehose is in preview release and is subject to change.","replaceOnChanges":true},"deliveryStreamEncryptionConfigurationInput":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationInput","description":"Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE)."},"deliveryStreamName":{"type":"string","description":"The name of the Firehose stream.","replaceOnChanges":true},"deliveryStreamType":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamType","description":"The Firehose stream type. This can be one of the following values:\n\n- `DirectPut` : Provider applications access the Firehose stream directly.\n- `KinesisStreamAsSource` : The Firehose stream uses a Kinesis data stream as a source.","replaceOnChanges":true},"directPutSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDirectPutSourceConfiguration","description":"The structure that configures parameters such as `ThroughputHintInMBs` for a stream configured with Direct PUT as a source.","replaceOnChanges":true},"elasticsearchDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfiguration","description":"An Amazon ES destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon ES destination to an Amazon S3 or Amazon Redshift destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"extendedS3DestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfiguration","description":"An Amazon S3 destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon Extended S3 destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"httpEndpointDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointDestinationConfiguration","description":"Enables configuring Kinesis Firehose to deliver data to any HTTP endpoint destination. You can specify only one destination."},"icebergDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamIcebergDestinationConfiguration","description":"Specifies the destination configure settings for Apache Iceberg Table."},"kinesisStreamSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamKinesisStreamSourceConfiguration","description":"When a Kinesis stream is used as the source for the delivery stream, a [KinesisStreamSourceConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-kinesisstreamsourceconfiguration.html) containing the Kinesis stream ARN and the role ARN for the source stream.","replaceOnChanges":true},"mskSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamMskSourceConfiguration","description":"The configuration for the Amazon MSK cluster to be used as the source for a delivery stream.","replaceOnChanges":true},"redshiftDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRedshiftDestinationConfiguration","description":"An Amazon Redshift destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon Redshift destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"s3DestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The `S3DestinationConfiguration` property type specifies an Amazon Simple Storage Service (Amazon S3) destination to which Amazon Kinesis Data Firehose (Kinesis Data Firehose) delivers data.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon S3 destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"snowflakeDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfiguration","description":"Configure Snowflake destination"},"splunkDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSplunkDestinationConfiguration","description":"The configuration of a destination in Splunk for the delivery stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the AWS Billing and Cost Management User Guide.\n\nYou can specify up to 50 tags when creating a Firehose stream.\n\nIf you specify tags in the `CreateDeliveryStream` action, Amazon Data Firehose performs an additional authorization on the `firehose:TagDeliveryStream` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose streams with IAM resource tags will fail with an `AccessDeniedException` such as following.\n\n*AccessDeniedException*\n\nUser: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy.\n\nFor an example IAM policy, see [Tag example.](https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples)"}},"type":"object","required":["arn"],"inputProperties":{"amazonOpenSearchServerlessDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonOpenSearchServerlessDestinationConfiguration","description":"Describes the configuration of a destination in the Serverless offering for Amazon OpenSearch Service."},"amazonopensearchserviceDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamAmazonopensearchserviceDestinationConfiguration","description":"The destination in Amazon OpenSearch Service. You can specify only one destination."},"databaseSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDatabaseSourceConfiguration","description":"The top level object for configuring streams with database as a source.\n\nAmazon Data Firehose is in preview release and is subject to change."},"deliveryStreamEncryptionConfigurationInput":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationInput","description":"Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE)."},"deliveryStreamName":{"type":"string","description":"The name of the Firehose stream."},"deliveryStreamType":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamType","description":"The Firehose stream type. This can be one of the following values:\n\n- `DirectPut` : Provider applications access the Firehose stream directly.\n- `KinesisStreamAsSource` : The Firehose stream uses a Kinesis data stream as a source."},"directPutSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamDirectPutSourceConfiguration","description":"The structure that configures parameters such as `ThroughputHintInMBs` for a stream configured with Direct PUT as a source."},"elasticsearchDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamElasticsearchDestinationConfiguration","description":"An Amazon ES destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon ES destination to an Amazon S3 or Amazon Redshift destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"extendedS3DestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfiguration","description":"An Amazon S3 destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon Extended S3 destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"httpEndpointDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointDestinationConfiguration","description":"Enables configuring Kinesis Firehose to deliver data to any HTTP endpoint destination. You can specify only one destination."},"icebergDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamIcebergDestinationConfiguration","description":"Specifies the destination configure settings for Apache Iceberg Table."},"kinesisStreamSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamKinesisStreamSourceConfiguration","description":"When a Kinesis stream is used as the source for the delivery stream, a [KinesisStreamSourceConfiguration](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesisfirehose-deliverystream-kinesisstreamsourceconfiguration.html) containing the Kinesis stream ARN and the role ARN for the source stream."},"mskSourceConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamMskSourceConfiguration","description":"The configuration for the Amazon MSK cluster to be used as the source for a delivery stream."},"redshiftDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRedshiftDestinationConfiguration","description":"An Amazon Redshift destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon Redshift destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"s3DestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamS3DestinationConfiguration","description":"The `S3DestinationConfiguration` property type specifies an Amazon Simple Storage Service (Amazon S3) destination to which Amazon Kinesis Data Firehose (Kinesis Data Firehose) delivers data.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon S3 destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"snowflakeDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSnowflakeDestinationConfiguration","description":"Configure Snowflake destination"},"splunkDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSplunkDestinationConfiguration","description":"The configuration of a destination in Splunk for the delivery stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the AWS Billing and Cost Management User Guide.\n\nYou can specify up to 50 tags when creating a Firehose stream.\n\nIf you specify tags in the `CreateDeliveryStream` action, Amazon Data Firehose performs an additional authorization on the `firehose:TagDeliveryStream` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose streams with IAM resource tags will fail with an `AccessDeniedException` such as following.\n\n*AccessDeniedException*\n\nUser: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy.\n\nFor an example IAM policy, see [Tag example.](https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples)"}}},"aws-native:kinesisvideo:SignalingChannel":{"description":"Resource Type Definition for AWS::KinesisVideo::SignalingChannel","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Kinesis Video Signaling Channel."},"messageTtlSeconds":{"type":"integer","description":"The period of time a signaling channel retains undelivered messages before they are discarded."},"name":{"type":"string","description":"The name of the Kinesis Video Signaling Channel.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:kinesisvideo:SignalingChannelType","description":"The type of the Kinesis Video Signaling Channel to create. Currently, SINGLE_MASTER is the only supported channel type."}},"type":"object","required":["arn"],"inputProperties":{"messageTtlSeconds":{"type":"integer","description":"The period of time a signaling channel retains undelivered messages before they are discarded."},"name":{"type":"string","description":"The name of the Kinesis Video Signaling Channel."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:kinesisvideo:SignalingChannelType","description":"The type of the Kinesis Video Signaling Channel to create. Currently, SINGLE_MASTER is the only supported channel type."}}},"aws-native:kinesisvideo:Stream":{"description":"Resource Type Definition for AWS::KinesisVideo::Stream","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Kinesis Video stream."},"dataRetentionInHours":{"type":"integer","description":"The number of hours till which Kinesis Video will retain the data in the stream"},"deviceName":{"type":"string","description":"The name of the device that is writing to the stream."},"kmsKeyId":{"type":"string","description":"AWS KMS key ID that Kinesis Video Streams uses to encrypt stream data."},"mediaType":{"type":"string","description":"The media type of the stream. Consumers of the stream can use this information when processing the stream."},"name":{"type":"string","description":"The name of the Kinesis Video stream.","replaceOnChanges":true},"streamStorageConfiguration":{"$ref":"#/types/aws-native:kinesisvideo:StreamStorageConfiguration","description":"Configuration for the storage tier of the Kinesis Video Stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs associated with the Kinesis Video Stream."}},"type":"object","required":["arn"],"inputProperties":{"dataRetentionInHours":{"type":"integer","description":"The number of hours till which Kinesis Video will retain the data in the stream"},"deviceName":{"type":"string","description":"The name of the device that is writing to the stream."},"kmsKeyId":{"type":"string","description":"AWS KMS key ID that Kinesis Video Streams uses to encrypt stream data."},"mediaType":{"type":"string","description":"The media type of the stream. Consumers of the stream can use this information when processing the stream."},"name":{"type":"string","description":"The name of the Kinesis Video stream."},"streamStorageConfiguration":{"$ref":"#/types/aws-native:kinesisvideo:StreamStorageConfiguration","description":"Configuration for the storage tier of the Kinesis Video Stream."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs associated with the Kinesis Video Stream."}}},"aws-native:kms:Alias":{"description":"The ``AWS::KMS::Alias`` resource specifies a display name for a [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys). You can use an alias to identify a KMS key in the KMS console, in the [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) operation, and in [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations), such as [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) and [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html).\n  Adding, deleting, or updating an alias can allow or deny permission to the KMS key. For details, see [ABAC for](https://docs.aws.amazon.com/kms/latest/developerguide/abac.html) in the *Developer Guide*.\n  Using an alias to refer to a KMS key can help you simplify key management. For example, an alias in your code can be associated with different KMS keys in different AWS-Regions. For more information, see [Using aliases](https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html) in the *Developer Guide*.\n When specifying an alias, observe the following rules.\n  +  Each alias is associated with one KMS key, but multiple aliases can be associated with the same KMS key.\n  +  The alias and its associated KMS key must be in the same AWS-account and Region.\n  +  The alias name must be unique in the AWS-account and Region. However, you can create aliases with the same name in different AWS-Regions. For example, you can have an ``alias/projectKey`` in multiple Regions, each of which is associated with a KMS key in its Region.\n  +  Each alias name must begin with ``alias/`` followed by a name, such as ``alias/exampleKey``. The alias name can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-). Alias names cannot begin with ``alias/aws/``. That alias name prefix is reserved for [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk).\n  \n  *Regions* \n KMS CloudFormation resources are available in all AWS-Regions in which KMS and CFN are supported.","properties":{"aliasName":{"type":"string","description":"Specifies the alias name. This value must begin with ``alias/`` followed by a name, such as ``alias/ExampleAlias``. \n  If you change the value of the ``AliasName`` property, the existing alias is deleted and a new alias is created for the specified KMS key. This change can disrupt applications that use the alias. It can also allow or deny access to a KMS key affected by attribute-based access control (ABAC).\n  The alias must be string of 1-256 characters. It can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-). The alias name cannot begin with ``alias/aws/``. The ``alias/aws/`` prefix is reserved for [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk).","replaceOnChanges":true},"targetKeyId":{"type":"string","description":"Associates the alias with the specified [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk). The KMS key must be in the same AWS-account and Region.\n A valid key ID is required. If you supply a null or empty string value, this operation returns an error.\n For help finding the key ID and ARN, see [Finding the key ID and ARN](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn) in the *Developer Guide*.\n Specify the key ID or the key ARN of the KMS key.\n For example:\n  +  Key ID: ``1234abcd-12ab-34cd-56ef-1234567890ab``\n  +  Key ARN: ``arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab``\n  \n To get the key ID and key ARN for a KMS key, use [ListKeys](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeys.html) or [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)."}},"type":"object","required":["aliasName","targetKeyId"],"inputProperties":{"aliasName":{"type":"string","description":"Specifies the alias name. This value must begin with ``alias/`` followed by a name, such as ``alias/ExampleAlias``. \n  If you change the value of the ``AliasName`` property, the existing alias is deleted and a new alias is created for the specified KMS key. This change can disrupt applications that use the alias. It can also allow or deny access to a KMS key affected by attribute-based access control (ABAC).\n  The alias must be string of 1-256 characters. It can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-). The alias name cannot begin with ``alias/aws/``. The ``alias/aws/`` prefix is reserved for [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk)."},"targetKeyId":{"type":"string","description":"Associates the alias with the specified [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk). The KMS key must be in the same AWS-account and Region.\n A valid key ID is required. If you supply a null or empty string value, this operation returns an error.\n For help finding the key ID and ARN, see [Finding the key ID and ARN](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn) in the *Developer Guide*.\n Specify the key ID or the key ARN of the KMS key.\n For example:\n  +  Key ID: ``1234abcd-12ab-34cd-56ef-1234567890ab``\n  +  Key ARN: ``arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab``\n  \n To get the key ID and key ARN for a KMS key, use [ListKeys](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeys.html) or [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)."}},"requiredInputs":["targetKeyId"]},"aws-native:kms:Key":{"description":"The ``AWS::KMS::Key`` resource specifies an [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys) in KMSlong. You can use this resource to create symmetric encryption KMS keys, asymmetric KMS keys for encryption or signing, and symmetric HMAC KMS keys. You can use ``AWS::KMS::Key`` to create [multi-Region primary keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-primary-key) of all supported types. To replicate a multi-Region key, use the ``AWS::KMS::ReplicaKey`` resource.\n  If you change the value of the ``KeySpec``, ``KeyUsage``, ``Origin``, or ``MultiRegion`` properties of an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing any of its immutable property values.\n   KMS replaced the term *customer master key (CMK)* with ** and *KMS key*. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.\n  You can use symmetric encryption KMS keys to encrypt and decrypt small amounts of data, but they are more commonly used to generate data keys and data key pairs. You can also use a symmetric encryption KMS key to encrypt data stored in AWS services that are [integrated with](https://docs.aws.amazon.com//kms/features/#AWS_Service_Integration). For more information, see [Symmetric encryption KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#symmetric-cmks) in the *Developer Guide*.\n You can use asymmetric KMS keys to encrypt and decrypt data or sign messages and verify signatures. To create an asymmetric key, you must specify an asymmetric ``KeySpec`` value and a ``KeyUsage`` value. For details, see [Asymmetric keys in](https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html) in the *Developer Guide*.\n You can use HMAC KMS keys (which are also symmetric keys) to generate and verify hash-based message authentication codes. To create an HMAC key, you must specify an HMAC ``KeySpec`` value and a ``KeyUsage`` value of ``GENERATE_VERIFY_MAC``. For details, see [HMAC keys in](https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html) in the *Developer Guide*.\n You can also create symmetric encryption, asymmetric, and HMAC multi-Region primary keys. To create a multi-Region primary key, set the ``MultiRegion`` property to ``true``. For information about multi-Region keys, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.\n You cannot use the ``AWS::KMS::Key`` resource to specify a KMS key with [imported key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) or a KMS key in a [custom key store](https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html).\n  *Regions* \n KMS CloudFormation resources are available in all Regions in which KMS and CFN are supported. You can use the ``AWS::KMS::Key`` resource to create and manage all KMS key types that are supported in a Region.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key, such as `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nFor information about the key ARN of a KMS key, see [Key ARN](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* ."},"bypassPolicyLockoutSafetyCheck":{"type":"boolean","description":"Skips (\"bypasses\") the key policy lockout safety check. The default value is false.\n  Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.\n For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key) in the *Developer Guide*.\n  Use this parameter only when you intend to prevent the principal that is making the request from making a subsequent [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) request on the KMS key."},"description":{"type":"string","description":"A description of the KMS key. Use a description that helps you to distinguish this KMS key from others in the account, such as its intended use."},"enableKeyRotation":{"type":"boolean","description":"Enables automatic rotation of the key material for the specified KMS key. By default, automatic key rotation is not enabled.\n KMS supports automatic rotation only for symmetric encryption KMS keys (``KeySpec`` = ``SYMMETRIC_DEFAULT``). For asymmetric KMS keys, HMAC KMS keys, and KMS keys with Origin ``EXTERNAL``, omit the ``EnableKeyRotation`` property or set it to ``false``.\n To enable automatic key rotation of the key material for a multi-Region KMS key, set ``EnableKeyRotation`` to ``true`` on the primary key (created by using ``AWS::KMS::Key``). KMS copies the rotation status to all replica keys. For details, see [Rotating multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-manage.html#multi-region-rotate) in the *Developer Guide*.\n When you enable automatic rotation, KMS automatically creates new key material for the KMS key one year after the enable date and every year thereafter. KMS retains all key material until you delete the KMS key. For detailed information about automatic key rotation, see [Rotating KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) in the *Developer Guide*."},"enabled":{"type":"boolean","description":"Specifies whether the KMS key is enabled. Disabled KMS keys cannot be used in cryptographic operations.\n When ``Enabled`` is ``true``, the *key state* of the KMS key is ``Enabled``. When ``Enabled`` is ``false``, the key state of the KMS key is ``Disabled``. The default value is ``true``.\n The actual key state of the KMS key might be affected by actions taken outside of CloudFormation, such as running the [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html), [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html), or [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) operations.\n For information about the key states of a KMS key, see [Key state: Effect on your KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the *Developer Guide*."},"keyId":{"type":"string","description":"The key ID of the KMS key, such as `1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nFor information about the key ID of a KMS key, see [Key ID](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-id) in the *AWS Key Management Service Developer Guide* ."},"keyPolicy":{"$ref":"pulumi.json#/Any","description":"The key policy to attach to the KMS key.\n If you provide a key policy, it must meet the following criteria:\n  +  The key policy must allow the caller to make a subsequent [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) request on the KMS key. This reduces the risk that the KMS key becomes unmanageable. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) in the *Developer Guide*. (To omit this condition, set ``BypassPolicyLockoutSafetyCheck`` to true.)\n  +  Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new AWS principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see [Changes that I make are not always immediately visible](https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_general.html#troubleshoot_general_eventual-consistency) in the *User Guide*.\n  \n If you do not provide a key policy, KMS attaches a default key policy to the KMS key. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) in the *Developer Guide*.\n A key policy document can include only the following characters:\n  +  Printable ASCII characters\n  +  Printable characters in the Basic Latin and Latin-1 Supplement character set\n  +  The tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``) special characters\n  \n *Minimum*: ``1``\n *Maximum*: ``32768``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::KMS::Key` for more information about the expected schema for this property."},"keySpec":{"$ref":"#/types/aws-native:kms:KeySpec","description":"Specifies the type of KMS key to create. The default value, ``SYMMETRIC_DEFAULT``, creates a KMS key with a 256-bit symmetric key for encryption and decryption. In China Regions, ``SYMMETRIC_DEFAULT`` creates a 128-bit symmetric key that uses SM4 encryption. You can't change the ``KeySpec`` value after the KMS key is created. For help choosing a key spec for your KMS key, see [Choosing a KMS key type](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html) in the *Developer Guide*.\n The ``KeySpec`` property determines the type of key material in the KMS key and the algorithms that the KMS key supports. To further restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For more information, see [condition keys](https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms) in the *Developer Guide*.\n  If you change the value of the ``KeySpec`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n   [services that are integrated with](https://docs.aws.amazon.com/kms/features/#AWS_Service_Integration) use symmetric encryption KMS keys to protect your data. These services do not support encryption with asymmetric KMS keys. For help determining whether a KMS key is asymmetric, see [Identifying asymmetric KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/find-symm-asymm.html) in the *Developer Guide*.\n  KMS supports the following key specs for KMS keys:\n  +  Symmetric encryption key (default)\n  +  ``SYMMETRIC_DEFAULT`` (AES-256-GCM)\n  \n  +  HMAC keys (symmetric)\n  +   ``HMAC_224`` \n  +   ``HMAC_256`` \n  +   ``HMAC_384`` \n  +   ``HMAC_512`` \n  \n  +  Asymmetric RSA key pairs (encryption and decryption *or* signing and verification)\n  +   ``RSA_2048`` \n  +   ``RSA_3072`` \n  +   ``RSA_4096`` \n  \n  +  Asymmetric NIST-recommended elliptic curve key pairs (signing and verification *or* deriving shared secrets)\n  +  ``ECC_NIST_P256`` (secp256r1)\n  +  ``ECC_NIST_P384`` (secp384r1)\n  +  ``ECC_NIST_P521`` (secp521r1)\n  +  ``ECC_NIST_EDWARDS25519`` (ed25519) - signing and verification only\n  +  *Note:* For ECC_NIST_EDWARDS25519 KMS keys, the ED25519_SHA_512 signing algorithm requires [MessageType:RAW](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType), while ED25519_PH_SHA_512 requires [MessageType:DIGEST](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType). These message types cannot be used interchangeably.\n  \n  \n  +  Other asymmetric elliptic curve key pairs (signing and verification)\n  +  ``ECC_SECG_P256K1`` (secp256k1), commonly used for cryptocurrencies.\n  \n  +  Asymmetric ML-DSA key pairs (signing and verification)\n  +   ``ML_DSA_44`` \n  +   ``ML_DSA_65`` \n  +   ``ML_DSA_87`` \n  \n  +  SM2 key pairs (encryption and decryption *or* signing and verification *or* deriving shared secrets)\n  +  ``SM2`` (China Regions only)"},"keyUsage":{"$ref":"#/types/aws-native:kms:KeyUsage","description":"Determines the [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. The default value is ``ENCRYPT_DECRYPT``. This property is required for asymmetric KMS keys and HMAC KMS keys. You can't change the ``KeyUsage`` value after the KMS key is created.\n  If you change the value of the ``KeyUsage`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  Select only one valid value.\n  +  For symmetric encryption KMS keys, omit the parameter or specify ``ENCRYPT_DECRYPT``.\n  +  For HMAC KMS keys (symmetric), specify ``GENERATE_VERIFY_MAC``.\n  +  For asymmetric KMS keys with RSA key pairs, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with NIST-recommended elliptic curve key pairs, specify ``SIGN_VERIFY`` or ``KEY_AGREEMENT``.\n  +  For asymmetric KMS keys with ``ECC_SECG_P256K1`` key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with ML-DSA key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with SM2 key pairs (China Regions only), specify ``ENCRYPT_DECRYPT``, ``SIGN_VERIFY``, or ``KEY_AGREEMENT``."},"multiRegion":{"type":"boolean","description":"Creates a multi-Region primary key that you can replicate in other AWS-Regions. You can't change the ``MultiRegion`` value after the KMS key is created.\n For a list of AWS-Regions in which multi-Region keys are supported, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the **.\n  If you change the value of the ``MultiRegion`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  For a multi-Region key, set to this property to ``true``. For a single-Region key, omit this property or set it to ``false``. The default value is ``false``.\n *Multi-Region keys* are an KMS feature that lets you create multiple interoperable KMS keys in different AWS-Regions. Because these KMS keys have the same key ID, key material, and other metadata, you can use them to encrypt data in one AWS-Region and decrypt it in a different AWS-Region without making a cross-Region call or exposing the plaintext data. For more information, see [Multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.\n You can create a symmetric encryption, HMAC, or asymmetric multi-Region KMS key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store.\n To create a replica of this primary key in a different AWS-Region , create an [AWS::KMS::ReplicaKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html) resource in a CloudFormation stack in the replica Region. Specify the key ARN of this primary key."},"origin":{"$ref":"#/types/aws-native:kms:KeyOrigin","description":"The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is ``AWS_KMS``, which means that KMS creates the key material.\n To [create a KMS key with no key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-create-cmk.html) (for imported key material), set this value to ``EXTERNAL``. For more information about importing key material into KMS, see [Importing Key Material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) in the *Developer Guide*.\n You can ignore ``ENABLED`` when Origin is ``EXTERNAL``. When a KMS key with Origin ``EXTERNAL`` is created, the key state is ``PENDING_IMPORT`` and ``ENABLED`` is ``false``. After you import the key material, ``ENABLED`` updated to ``true``. The KMS key can then be used for Cryptographic Operations. \n   +  CFN doesn't support creating an ``Origin`` parameter of the ``AWS_CLOUDHSM`` or ``EXTERNAL_KEY_STORE`` values.\n  +  ``EXTERNAL`` is not supported for ML-DSA keys."},"pendingWindowInDays":{"type":"integer","description":"Specifies the number of days in the waiting period before KMS deletes a KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days.\n When you remove a KMS key from a CloudFormation stack, KMS schedules the KMS key for deletion and starts the mandatory waiting period. The ``PendingWindowInDays`` property determines the length of waiting period. During the waiting period, the key state of KMS key is ``Pending Deletion`` or ``Pending Replica Deletion``, which prevents the KMS key from being used in cryptographic operations. When the waiting period expires, KMS permanently deletes the KMS key.\n KMS will not delete a [multi-Region primary key](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) that has replica keys. If you remove a multi-Region primary key from a CloudFormation stack, its key state changes to ``PendingReplicaDeletion`` so it cannot be replicated or used in cryptographic operations. This state can persist indefinitely. When the last of its replica keys is deleted, the key state of the primary key changes to ``PendingDeletion`` and the waiting period specified by ``PendingWindowInDays`` begins. When this waiting period expires, KMS deletes the primary key. For details, see [Deleting multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-delete.html) in the *Developer Guide*.\n You cannot use a CloudFormation template to cancel deletion of the KMS key after you remove it from the stack, regardless of the waiting period. If you specify a KMS key in your template, even one with the same name, CloudFormation creates a new KMS key. To cancel deletion of a KMS key, use the KMS console or the [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) operation.\n For information about the ``Pending Deletion`` and ``Pending Replica Deletion`` key states, see [Key state: Effect on your KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the *Developer Guide*. For more information about deleting KMS keys, see the [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) operation in the *API Reference* and [Deleting KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html) in the *Developer Guide*."},"rotationPeriodInDays":{"type":"integer","description":"Specifies a custom period of time between each rotation date. If no value is specified, the default value is 365 days.\n The rotation period defines the number of days after you enable automatic key rotation that KMS will rotate your key material, and the number of days between each automatic rotation thereafter.\n You can use the [kms:RotationPeriodInDays](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-rotation-period-in-days) condition key to further constrain the values that principals can specify in the ``RotationPeriodInDays`` parameter.\n For more information about rotating KMS keys and automatic rotation, see [Rotating keys](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) in the *Developer Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Assigns one or more tags to the replica key.\n  Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see [ABAC for](https://docs.aws.amazon.com/kms/latest/developerguide/abac.html) in the *Developer Guide*.\n  For information about tags in KMS, see [Tagging keys](https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html) in the *Developer Guide*. For information about tags in CloudFormation, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"type":"object","required":["arn","keyId"],"inputProperties":{"bypassPolicyLockoutSafetyCheck":{"type":"boolean","description":"Skips (\"bypasses\") the key policy lockout safety check. The default value is false.\n  Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately.\n For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-default.html#prevent-unmanageable-key) in the *Developer Guide*.\n  Use this parameter only when you intend to prevent the principal that is making the request from making a subsequent [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) request on the KMS key."},"description":{"type":"string","description":"A description of the KMS key. Use a description that helps you to distinguish this KMS key from others in the account, such as its intended use."},"enableKeyRotation":{"type":"boolean","description":"Enables automatic rotation of the key material for the specified KMS key. By default, automatic key rotation is not enabled.\n KMS supports automatic rotation only for symmetric encryption KMS keys (``KeySpec`` = ``SYMMETRIC_DEFAULT``). For asymmetric KMS keys, HMAC KMS keys, and KMS keys with Origin ``EXTERNAL``, omit the ``EnableKeyRotation`` property or set it to ``false``.\n To enable automatic key rotation of the key material for a multi-Region KMS key, set ``EnableKeyRotation`` to ``true`` on the primary key (created by using ``AWS::KMS::Key``). KMS copies the rotation status to all replica keys. For details, see [Rotating multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-manage.html#multi-region-rotate) in the *Developer Guide*.\n When you enable automatic rotation, KMS automatically creates new key material for the KMS key one year after the enable date and every year thereafter. KMS retains all key material until you delete the KMS key. For detailed information about automatic key rotation, see [Rotating KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) in the *Developer Guide*."},"enabled":{"type":"boolean","description":"Specifies whether the KMS key is enabled. Disabled KMS keys cannot be used in cryptographic operations.\n When ``Enabled`` is ``true``, the *key state* of the KMS key is ``Enabled``. When ``Enabled`` is ``false``, the key state of the KMS key is ``Disabled``. The default value is ``true``.\n The actual key state of the KMS key might be affected by actions taken outside of CloudFormation, such as running the [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html), [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html), or [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) operations.\n For information about the key states of a KMS key, see [Key state: Effect on your KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the *Developer Guide*."},"keyPolicy":{"$ref":"pulumi.json#/Any","description":"The key policy to attach to the KMS key.\n If you provide a key policy, it must meet the following criteria:\n  +  The key policy must allow the caller to make a subsequent [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) request on the KMS key. This reduces the risk that the KMS key becomes unmanageable. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) in the *Developer Guide*. (To omit this condition, set ``BypassPolicyLockoutSafetyCheck`` to true.)\n  +  Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new AWS principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see [Changes that I make are not always immediately visible](https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_general.html#troubleshoot_general_eventual-consistency) in the *User Guide*.\n  \n If you do not provide a key policy, KMS attaches a default key policy to the KMS key. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) in the *Developer Guide*.\n A key policy document can include only the following characters:\n  +  Printable ASCII characters\n  +  Printable characters in the Basic Latin and Latin-1 Supplement character set\n  +  The tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``) special characters\n  \n *Minimum*: ``1``\n *Maximum*: ``32768``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::KMS::Key` for more information about the expected schema for this property."},"keySpec":{"$ref":"#/types/aws-native:kms:KeySpec","description":"Specifies the type of KMS key to create. The default value, ``SYMMETRIC_DEFAULT``, creates a KMS key with a 256-bit symmetric key for encryption and decryption. In China Regions, ``SYMMETRIC_DEFAULT`` creates a 128-bit symmetric key that uses SM4 encryption. You can't change the ``KeySpec`` value after the KMS key is created. For help choosing a key spec for your KMS key, see [Choosing a KMS key type](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html) in the *Developer Guide*.\n The ``KeySpec`` property determines the type of key material in the KMS key and the algorithms that the KMS key supports. To further restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For more information, see [condition keys](https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms) in the *Developer Guide*.\n  If you change the value of the ``KeySpec`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n   [services that are integrated with](https://docs.aws.amazon.com/kms/features/#AWS_Service_Integration) use symmetric encryption KMS keys to protect your data. These services do not support encryption with asymmetric KMS keys. For help determining whether a KMS key is asymmetric, see [Identifying asymmetric KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/find-symm-asymm.html) in the *Developer Guide*.\n  KMS supports the following key specs for KMS keys:\n  +  Symmetric encryption key (default)\n  +  ``SYMMETRIC_DEFAULT`` (AES-256-GCM)\n  \n  +  HMAC keys (symmetric)\n  +   ``HMAC_224`` \n  +   ``HMAC_256`` \n  +   ``HMAC_384`` \n  +   ``HMAC_512`` \n  \n  +  Asymmetric RSA key pairs (encryption and decryption *or* signing and verification)\n  +   ``RSA_2048`` \n  +   ``RSA_3072`` \n  +   ``RSA_4096`` \n  \n  +  Asymmetric NIST-recommended elliptic curve key pairs (signing and verification *or* deriving shared secrets)\n  +  ``ECC_NIST_P256`` (secp256r1)\n  +  ``ECC_NIST_P384`` (secp384r1)\n  +  ``ECC_NIST_P521`` (secp521r1)\n  +  ``ECC_NIST_EDWARDS25519`` (ed25519) - signing and verification only\n  +  *Note:* For ECC_NIST_EDWARDS25519 KMS keys, the ED25519_SHA_512 signing algorithm requires [MessageType:RAW](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType), while ED25519_PH_SHA_512 requires [MessageType:DIGEST](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType). These message types cannot be used interchangeably.\n  \n  \n  +  Other asymmetric elliptic curve key pairs (signing and verification)\n  +  ``ECC_SECG_P256K1`` (secp256k1), commonly used for cryptocurrencies.\n  \n  +  Asymmetric ML-DSA key pairs (signing and verification)\n  +   ``ML_DSA_44`` \n  +   ``ML_DSA_65`` \n  +   ``ML_DSA_87`` \n  \n  +  SM2 key pairs (encryption and decryption *or* signing and verification *or* deriving shared secrets)\n  +  ``SM2`` (China Regions only)"},"keyUsage":{"$ref":"#/types/aws-native:kms:KeyUsage","description":"Determines the [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. The default value is ``ENCRYPT_DECRYPT``. This property is required for asymmetric KMS keys and HMAC KMS keys. You can't change the ``KeyUsage`` value after the KMS key is created.\n  If you change the value of the ``KeyUsage`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  Select only one valid value.\n  +  For symmetric encryption KMS keys, omit the parameter or specify ``ENCRYPT_DECRYPT``.\n  +  For HMAC KMS keys (symmetric), specify ``GENERATE_VERIFY_MAC``.\n  +  For asymmetric KMS keys with RSA key pairs, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with NIST-recommended elliptic curve key pairs, specify ``SIGN_VERIFY`` or ``KEY_AGREEMENT``.\n  +  For asymmetric KMS keys with ``ECC_SECG_P256K1`` key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with ML-DSA key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with SM2 key pairs (China Regions only), specify ``ENCRYPT_DECRYPT``, ``SIGN_VERIFY``, or ``KEY_AGREEMENT``."},"multiRegion":{"type":"boolean","description":"Creates a multi-Region primary key that you can replicate in other AWS-Regions. You can't change the ``MultiRegion`` value after the KMS key is created.\n For a list of AWS-Regions in which multi-Region keys are supported, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the **.\n  If you change the value of the ``MultiRegion`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  For a multi-Region key, set to this property to ``true``. For a single-Region key, omit this property or set it to ``false``. The default value is ``false``.\n *Multi-Region keys* are an KMS feature that lets you create multiple interoperable KMS keys in different AWS-Regions. Because these KMS keys have the same key ID, key material, and other metadata, you can use them to encrypt data in one AWS-Region and decrypt it in a different AWS-Region without making a cross-Region call or exposing the plaintext data. For more information, see [Multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.\n You can create a symmetric encryption, HMAC, or asymmetric multi-Region KMS key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store.\n To create a replica of this primary key in a different AWS-Region , create an [AWS::KMS::ReplicaKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html) resource in a CloudFormation stack in the replica Region. Specify the key ARN of this primary key."},"origin":{"$ref":"#/types/aws-native:kms:KeyOrigin","description":"The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is ``AWS_KMS``, which means that KMS creates the key material.\n To [create a KMS key with no key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-create-cmk.html) (for imported key material), set this value to ``EXTERNAL``. For more information about importing key material into KMS, see [Importing Key Material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) in the *Developer Guide*.\n You can ignore ``ENABLED`` when Origin is ``EXTERNAL``. When a KMS key with Origin ``EXTERNAL`` is created, the key state is ``PENDING_IMPORT`` and ``ENABLED`` is ``false``. After you import the key material, ``ENABLED`` updated to ``true``. The KMS key can then be used for Cryptographic Operations. \n   +  CFN doesn't support creating an ``Origin`` parameter of the ``AWS_CLOUDHSM`` or ``EXTERNAL_KEY_STORE`` values.\n  +  ``EXTERNAL`` is not supported for ML-DSA keys."},"pendingWindowInDays":{"type":"integer","description":"Specifies the number of days in the waiting period before KMS deletes a KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days.\n When you remove a KMS key from a CloudFormation stack, KMS schedules the KMS key for deletion and starts the mandatory waiting period. The ``PendingWindowInDays`` property determines the length of waiting period. During the waiting period, the key state of KMS key is ``Pending Deletion`` or ``Pending Replica Deletion``, which prevents the KMS key from being used in cryptographic operations. When the waiting period expires, KMS permanently deletes the KMS key.\n KMS will not delete a [multi-Region primary key](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) that has replica keys. If you remove a multi-Region primary key from a CloudFormation stack, its key state changes to ``PendingReplicaDeletion`` so it cannot be replicated or used in cryptographic operations. This state can persist indefinitely. When the last of its replica keys is deleted, the key state of the primary key changes to ``PendingDeletion`` and the waiting period specified by ``PendingWindowInDays`` begins. When this waiting period expires, KMS deletes the primary key. For details, see [Deleting multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-delete.html) in the *Developer Guide*.\n You cannot use a CloudFormation template to cancel deletion of the KMS key after you remove it from the stack, regardless of the waiting period. If you specify a KMS key in your template, even one with the same name, CloudFormation creates a new KMS key. To cancel deletion of a KMS key, use the KMS console or the [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) operation.\n For information about the ``Pending Deletion`` and ``Pending Replica Deletion`` key states, see [Key state: Effect on your KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the *Developer Guide*. For more information about deleting KMS keys, see the [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) operation in the *API Reference* and [Deleting KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/deleting-keys.html) in the *Developer Guide*."},"rotationPeriodInDays":{"type":"integer","description":"Specifies a custom period of time between each rotation date. If no value is specified, the default value is 365 days.\n The rotation period defines the number of days after you enable automatic key rotation that KMS will rotate your key material, and the number of days between each automatic rotation thereafter.\n You can use the [kms:RotationPeriodInDays](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-rotation-period-in-days) condition key to further constrain the values that principals can specify in the ``RotationPeriodInDays`` parameter.\n For more information about rotating KMS keys and automatic rotation, see [Rotating keys](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) in the *Developer Guide*."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Assigns one or more tags to the replica key.\n  Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see [ABAC for](https://docs.aws.amazon.com/kms/latest/developerguide/abac.html) in the *Developer Guide*.\n  For information about tags in KMS, see [Tagging keys](https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html) in the *Developer Guide*. For information about tags in CloudFormation, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}}},"aws-native:kms:ReplicaKey":{"description":"The AWS::KMS::ReplicaKey resource specifies a multi-region replica AWS KMS key in AWS Key Management Service (AWS KMS).","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the replica key, such as `arn:aws:kms:us-west-2:111122223333:key/mrk-1234abcd12ab34cd56ef1234567890ab` .\n\nThe key ARNs of related multi-Region keys differ only in the Region value. For information about the key ARNs of multi-Region keys, see [How multi-Region keys work](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-how-it-works) in the *AWS Key Management Service Developer Guide* ."},"description":{"type":"string","description":"A description of the AWS KMS key. Use a description that helps you to distinguish this AWS KMS key from others in the account, such as its intended use."},"enabled":{"type":"boolean","description":"Specifies whether the AWS KMS key is enabled. Disabled AWS KMS keys cannot be used in cryptographic operations."},"keyId":{"type":"string","description":"The key ID of the replica key, such as `mrk-1234abcd12ab34cd56ef1234567890ab` .\n\nRelated multi-Region keys have the same key ID. For information about the key IDs of multi-Region keys, see [How multi-Region keys work](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-how-it-works) in the *AWS Key Management Service Developer Guide* ."},"keyPolicy":{"$ref":"pulumi.json#/Any","description":"The key policy that authorizes use of the AWS KMS key. The key policy must observe the following rules.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::KMS::ReplicaKey` for more information about the expected schema for this property."},"pendingWindowInDays":{"type":"integer","description":"Specifies the number of days in the waiting period before AWS KMS deletes an AWS KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days."},"primaryKeyArn":{"type":"string","description":"Identifies the primary AWS KMS key to create a replica of. Specify the Amazon Resource Name (ARN) of the AWS KMS key. You cannot specify an alias or key ID. For help finding the ARN, see Finding the Key ID and ARN in the AWS Key Management Service Developer Guide.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","keyId","keyPolicy","primaryKeyArn"],"inputProperties":{"description":{"type":"string","description":"A description of the AWS KMS key. Use a description that helps you to distinguish this AWS KMS key from others in the account, such as its intended use."},"enabled":{"type":"boolean","description":"Specifies whether the AWS KMS key is enabled. Disabled AWS KMS keys cannot be used in cryptographic operations."},"keyPolicy":{"$ref":"pulumi.json#/Any","description":"The key policy that authorizes use of the AWS KMS key. The key policy must observe the following rules.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::KMS::ReplicaKey` for more information about the expected schema for this property."},"pendingWindowInDays":{"type":"integer","description":"Specifies the number of days in the waiting period before AWS KMS deletes an AWS KMS key that has been removed from a CloudFormation stack. Enter a value between 7 and 30 days. The default value is 30 days."},"primaryKeyArn":{"type":"string","description":"Identifies the primary AWS KMS key to create a replica of. Specify the Amazon Resource Name (ARN) of the AWS KMS key. You cannot specify an alias or key ID. For help finding the ARN, see Finding the Key ID and ARN in the AWS Key Management Service Developer Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["keyPolicy","primaryKeyArn"]},"aws-native:lakeformation:DataCellsFilter":{"description":"A resource schema representing a Lake Formation Data Cells Filter.","properties":{"columnNames":{"type":"array","items":{"type":"string"},"description":"A list of columns to be included in this Data Cells Filter.","replaceOnChanges":true},"columnWildcard":{"$ref":"#/types/aws-native:lakeformation:DataCellsFilterColumnWildcard","description":"An object representing the Data Cells Filter's Columns. Either Column Names or a Wildcard is required","replaceOnChanges":true},"databaseName":{"type":"string","description":"The name of the Database that the Table resides in.","replaceOnChanges":true},"name":{"type":"string","description":"The desired name of the Data Cells Filter.","replaceOnChanges":true},"rowFilter":{"$ref":"#/types/aws-native:lakeformation:DataCellsFilterRowFilter","description":"An object representing the Data Cells Filter's Row Filter. Either a Filter Expression or a Wildcard is required","replaceOnChanges":true},"tableCatalogId":{"type":"string","description":"The Catalog Id of the Table on which to create a Data Cells Filter.","replaceOnChanges":true},"tableName":{"type":"string","description":"The name of the Table to create a Data Cells Filter for.","replaceOnChanges":true}},"type":"object","required":["databaseName","name","tableCatalogId","tableName"],"inputProperties":{"columnNames":{"type":"array","items":{"type":"string"},"description":"A list of columns to be included in this Data Cells Filter."},"columnWildcard":{"$ref":"#/types/aws-native:lakeformation:DataCellsFilterColumnWildcard","description":"An object representing the Data Cells Filter's Columns. Either Column Names or a Wildcard is required"},"databaseName":{"type":"string","description":"The name of the Database that the Table resides in."},"name":{"type":"string","description":"The desired name of the Data Cells Filter."},"rowFilter":{"$ref":"#/types/aws-native:lakeformation:DataCellsFilterRowFilter","description":"An object representing the Data Cells Filter's Row Filter. Either a Filter Expression or a Wildcard is required"},"tableCatalogId":{"type":"string","description":"The Catalog Id of the Table on which to create a Data Cells Filter."},"tableName":{"type":"string","description":"The name of the Table to create a Data Cells Filter for."}},"requiredInputs":["databaseName","tableCatalogId","tableName"]},"aws-native:lakeformation:PrincipalPermissions":{"description":"The ``AWS::LakeFormation::PrincipalPermissions`` resource represents the permissions that a principal has on a GLUDC resource (such as GLUlong databases or GLUlong tables). When you create a ``PrincipalPermissions`` resource, the permissions are granted via the LFlong``GrantPermissions`` API operation. When you delete a ``PrincipalPermissions`` resource, the permissions on principal-resource pair are revoked via the LFlong``RevokePermissions`` API operation.","properties":{"catalog":{"type":"string","description":"The identifier for the GLUDC. By default, the account ID. The GLUDC is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.","replaceOnChanges":true},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsPermission"},"description":"The permissions granted or revoked.","replaceOnChanges":true},"permissionsWithGrantOption":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsPermission"},"description":"Indicates the ability to grant permissions (as a subset of permissions granted).","replaceOnChanges":true},"principal":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsDataLakePrincipal","description":"The principal to be granted a permission.","replaceOnChanges":true},"principalIdentifier":{"type":"string","description":"Json encoding of the input principal. For example: `{\"DataLakePrincipalIdentifier\":\"arn:aws:iam::123456789012:role/ExampleRole\"}`"},"resource":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsResource","description":"The resource to be granted or revoked permissions.","replaceOnChanges":true},"resourceIdentifier":{"type":"string","description":"Json encoding of the input resource. For example: `{\"Catalog\":null,\"Database\":null,\"Table\":null,\"TableWithColumns\":null,\"DataLocation\":null,\"DataCellsFilter\":{\"TableCatalogId\":\"123456789012\",\"DatabaseName\":\"ExampleDatabase\",\"TableName\":\"ExampleTable\",\"Name\":\"ExampleFilter\"},\"LFTag\":null,\"LFTagPolicy\":null}`"}},"type":"object","required":["permissions","permissionsWithGrantOption","principal","principalIdentifier","resource","resourceIdentifier"],"inputProperties":{"catalog":{"type":"string","description":"The identifier for the GLUDC. By default, the account ID. The GLUDC is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsPermission"},"description":"The permissions granted or revoked."},"permissionsWithGrantOption":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsPermission"},"description":"Indicates the ability to grant permissions (as a subset of permissions granted)."},"principal":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsDataLakePrincipal","description":"The principal to be granted a permission."},"resource":{"$ref":"#/types/aws-native:lakeformation:PrincipalPermissionsResource","description":"The resource to be granted or revoked permissions."}},"requiredInputs":["permissions","permissionsWithGrantOption","principal","resource"]},"aws-native:lakeformation:Tag":{"description":"A resource schema representing a Lake Formation Tag.","properties":{"catalogId":{"type":"string","description":"The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment.","replaceOnChanges":true},"tagKey":{"type":"string","description":"The key-name for the LF-tag.","replaceOnChanges":true},"tagValues":{"type":"array","items":{"type":"string"},"description":"A list of possible values an attribute can take."}},"type":"object","required":["tagKey","tagValues"],"inputProperties":{"catalogId":{"type":"string","description":"The identifier for the Data Catalog. By default, the account ID. The Data Catalog is the persistent metadata store. It contains database definitions, table definitions, and other control information to manage your Lake Formation environment."},"tagKey":{"type":"string","description":"The key-name for the LF-tag."},"tagValues":{"type":"array","items":{"type":"string"},"description":"A list of possible values an attribute can take."}},"requiredInputs":["tagKey","tagValues"]},"aws-native:lakeformation:TagAssociation":{"description":"A resource schema representing a Lake Formation Tag Association. While tag associations are not explicit Lake Formation resources, this CloudFormation resource can be used to associate tags with Lake Formation entities.","properties":{"lfTags":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:TagAssociationLfTagPair"},"description":"List of Lake Formation Tags to associate with the Lake Formation Resource","replaceOnChanges":true},"resource":{"$ref":"#/types/aws-native:lakeformation:TagAssociationResource","description":"Resource to tag with the Lake Formation Tags","replaceOnChanges":true},"resourceIdentifier":{"type":"string","description":"Unique string identifying the resource. Used as primary identifier, which ideally should be a string"},"tagsIdentifier":{"type":"string","description":"Unique string identifying the resource's tags. Used as primary identifier, which ideally should be a string"}},"type":"object","required":["lfTags","resource","resourceIdentifier","tagsIdentifier"],"inputProperties":{"lfTags":{"type":"array","items":{"$ref":"#/types/aws-native:lakeformation:TagAssociationLfTagPair"},"description":"List of Lake Formation Tags to associate with the Lake Formation Resource"},"resource":{"$ref":"#/types/aws-native:lakeformation:TagAssociationResource","description":"Resource to tag with the Lake Formation Tags"}},"requiredInputs":["lfTags","resource"]},"aws-native:lambda:Alias":{"description":"Resource Type definition for AWS::Lambda::Alias","properties":{"aliasArn":{"type":"string","description":"Lambda Alias ARN generated by the service."},"description":{"type":"string","description":"A description of the alias."},"functionName":{"type":"string","description":"The name of the Lambda function.","replaceOnChanges":true},"functionVersion":{"type":"string","description":"The function version that the alias invokes."},"name":{"type":"string","description":"The name of the alias.","replaceOnChanges":true},"provisionedConcurrencyConfig":{"$ref":"#/types/aws-native:lambda:AliasProvisionedConcurrencyConfiguration","description":"Specifies a provisioned concurrency configuration for a function's alias."},"routingConfig":{"$ref":"#/types/aws-native:lambda:AliasRoutingConfiguration","description":"The routing configuration of the alias."}},"type":"object","required":["aliasArn","functionName","functionVersion","name"],"inputProperties":{"description":{"type":"string","description":"A description of the alias."},"functionName":{"type":"string","description":"The name of the Lambda function."},"functionVersion":{"type":"string","description":"The function version that the alias invokes."},"name":{"type":"string","description":"The name of the alias."},"provisionedConcurrencyConfig":{"$ref":"#/types/aws-native:lambda:AliasProvisionedConcurrencyConfiguration","description":"Specifies a provisioned concurrency configuration for a function's alias."},"routingConfig":{"$ref":"#/types/aws-native:lambda:AliasRoutingConfiguration","description":"The routing configuration of the alias."}},"requiredInputs":["functionName","functionVersion"]},"aws-native:lambda:CapacityProvider":{"description":"Creates a capacity provider that manages compute resources for Lambda functions","properties":{"arn":{"type":"string"},"capacityProviderName":{"type":"string","replaceOnChanges":true},"capacityProviderScalingConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderScalingConfig","description":"The scaling configuration for the capacity provider."},"instanceRequirements":{"$ref":"#/types/aws-native:lambda:CapacityProviderInstanceRequirements","description":"The instance requirements for compute resources managed by the capacity provider.","replaceOnChanges":true},"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the capacity provider's resources.","replaceOnChanges":true},"permissionsConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderPermissionsConfig","description":"The permissions configuration for the capacity provider.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:lambda:CapacityProviderState","description":"The current state of the capacity provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair that provides metadata for the capacity provider."},"vpcConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderVpcConfig","description":"The VPC configuration for the capacity provider.","replaceOnChanges":true}},"type":"object","required":["arn","permissionsConfig","state","vpcConfig"],"inputProperties":{"capacityProviderName":{"type":"string"},"capacityProviderScalingConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderScalingConfig","description":"The scaling configuration for the capacity provider."},"instanceRequirements":{"$ref":"#/types/aws-native:lambda:CapacityProviderInstanceRequirements","description":"The instance requirements for compute resources managed by the capacity provider."},"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the capacity provider's resources."},"permissionsConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderPermissionsConfig","description":"The permissions configuration for the capacity provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair that provides metadata for the capacity provider."},"vpcConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderVpcConfig","description":"The VPC configuration for the capacity provider."}},"requiredInputs":["permissionsConfig","vpcConfig"]},"aws-native:lambda:CodeSigningConfig":{"description":"Resource Type definition for AWS::Lambda::CodeSigningConfig.","properties":{"allowedPublishers":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigAllowedPublishers","description":"When the CodeSigningConfig is later on attached to a function, the function code will be expected to be signed by profiles from this list"},"codeSigningConfigArn":{"type":"string","description":"A unique Arn for CodeSigningConfig resource"},"codeSigningConfigId":{"type":"string","description":"A unique identifier for CodeSigningConfig resource"},"codeSigningPolicies":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigCodeSigningPolicies","description":"Policies to control how to act if a signature is invalid"},"description":{"type":"string","description":"A description of the CodeSigningConfig"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to CodeSigningConfig resource"}},"type":"object","required":["allowedPublishers","codeSigningConfigArn","codeSigningConfigId"],"inputProperties":{"allowedPublishers":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigAllowedPublishers","description":"When the CodeSigningConfig is later on attached to a function, the function code will be expected to be signed by profiles from this list"},"codeSigningPolicies":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigCodeSigningPolicies","description":"Policies to control how to act if a signature is invalid"},"description":{"type":"string","description":"A description of the CodeSigningConfig"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to CodeSigningConfig resource"}},"requiredInputs":["allowedPublishers"]},"aws-native:lambda:EventInvokeConfig":{"description":"The AWS::Lambda::EventInvokeConfig resource configures options for asynchronous invocation on a version or an alias.","properties":{"destinationConfig":{"$ref":"#/types/aws-native:lambda:EventInvokeConfigDestinationConfig","description":"A destination for events after they have been sent to a function for processing.\n\n**Destinations** - *Function* - The Amazon Resource Name (ARN) of a Lambda function.\n- *Queue* - The ARN of a standard SQS queue.\n- *Bucket* - The ARN of an Amazon S3 bucket.\n- *Topic* - The ARN of a standard SNS topic.\n- *Event Bus* - The ARN of an Amazon EventBridge event bus.\n\n\u003e S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type."},"functionName":{"type":"string","description":"The name of the Lambda function.","replaceOnChanges":true},"maximumEventAgeInSeconds":{"type":"integer","description":"The maximum age of a request that Lambda sends to a function for processing."},"maximumRetryAttempts":{"type":"integer","description":"The maximum number of times to retry when the function returns an error."},"qualifier":{"type":"string","description":"The identifier of a version or alias.","replaceOnChanges":true}},"type":"object","required":["functionName","qualifier"],"inputProperties":{"destinationConfig":{"$ref":"#/types/aws-native:lambda:EventInvokeConfigDestinationConfig","description":"A destination for events after they have been sent to a function for processing.\n\n**Destinations** - *Function* - The Amazon Resource Name (ARN) of a Lambda function.\n- *Queue* - The ARN of a standard SQS queue.\n- *Bucket* - The ARN of an Amazon S3 bucket.\n- *Topic* - The ARN of a standard SNS topic.\n- *Event Bus* - The ARN of an Amazon EventBridge event bus.\n\n\u003e S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type."},"functionName":{"type":"string","description":"The name of the Lambda function."},"maximumEventAgeInSeconds":{"type":"integer","description":"The maximum age of a request that Lambda sends to a function for processing."},"maximumRetryAttempts":{"type":"integer","description":"The maximum number of times to retry when the function returns an error."},"qualifier":{"type":"string","description":"The identifier of a version or alias."}},"requiredInputs":["functionName","qualifier"]},"aws-native:lambda:EventSourceMapping":{"description":"The ``AWS::Lambda::EventSourceMapping`` resource creates a mapping between an event source and an LAMlong function. LAM reads items from the event source and triggers the function.\n For details about each event source type, see the following topics. In particular, each of the topics describes the required and optional parameters for the specific event source. \n  +   [Configuring a Dynamo DB stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n  +   [Configuring a Kinesis stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n  +   [Configuring an SQS queue as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n  +   [Configuring an MQ broker as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n  +   [Configuring MSK as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n  +   [Configuring Self-Managed Apache Kafka as an event source](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n  +   [Configuring Amazon DocumentDB as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html)","properties":{"amazonManagedKafkaEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingAmazonManagedKafkaEventSourceConfig","description":"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source."},"awsId":{"type":"string","description":"The event source mapping's ID."},"batchSize":{"type":"integer","description":"The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).\n  +  *Amazon Kinesis* – Default 100. Max 10,000.\n  +  *Amazon DynamoDB Streams* – Default 100. Max 10,000.\n  +  *Amazon Simple Queue Service* – Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n  +  *Amazon Managed Streaming for Apache Kafka* – Default 100. Max 10,000.\n  +  *Self-managed Apache Kafka* – Default 100. Max 10,000.\n  +  *Amazon MQ (ActiveMQ and RabbitMQ)* – Default 100. Max 10,000.\n  +  *DocumentDB* – Default 100. Max 10,000."},"bisectBatchOnFunctionError":{"type":"boolean","description":"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.\n  When using ``BisectBatchOnFunctionError``, check the ``BatchSize`` parameter in the ``OnFailure`` destination message's metadata. The ``BatchSize`` could be greater than 1 since LAM consolidates failed messages metadata when writing to the ``OnFailure`` destination."},"destinationConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDestinationConfig","description":"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka event sources only) A configuration object that specifies the destination of an event after Lambda processes it."},"documentDbEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDocumentDbEventSourceConfig","description":"Specific configuration settings for a DocumentDB event source."},"enabled":{"type":"boolean","description":"When true, the event source mapping is active. When false, Lambda pauses polling and invocation.\n Default: True"},"eventSourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the event source.\n  +  *Amazon Kinesis* – The ARN of the data stream or a stream consumer.\n  +  *Amazon DynamoDB Streams* – The ARN of the stream.\n  +  *Amazon Simple Queue Service* – The ARN of the queue.\n  +  *Amazon Managed Streaming for Apache Kafka* – The ARN of the cluster or the ARN of the VPC connection (for [cross-account event source mappings](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#msk-multi-vpc)).\n  +  *Amazon MQ* – The ARN of the broker.\n  +  *Amazon DocumentDB* – The ARN of the DocumentDB change stream.","replaceOnChanges":true},"eventSourceMappingArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the event source mapping."},"filterCriteria":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFilterCriteria","description":"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html)."},"functionName":{"type":"string","description":"The name or ARN of the Lambda function.\n  **Name formats**\n +  *Function name* – ``MyFunction``.\n  +  *Function ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction``.\n  +  *Version or Alias ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD``.\n  +  *Partial ARN* – ``123456789012:function:MyFunction``.\n  \n The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length."},"functionResponseTypes":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFunctionResponseTypesItem"},"description":"(Kinesis, DynamoDB Streams, and SQS) A list of current response type enums applied to the event source mapping.\n Valid Values: ``ReportBatchItemFailures``"},"kmsKeyArn":{"type":"string","description":"The ARN of the KMSlong (KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics)."},"loggingConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingLoggingConfig","description":"The function's Amazon CloudWatch Logs configuration settings."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.\n *Default (, , event sources)*: 0\n *Default (, Kafka, , event sources)*: 500 ms\n *Related setting:* For SQS event sources, when you set ``BatchSize`` to a value greater than 10, you must set ``MaximumBatchingWindowInSeconds`` to at least 1."},"maximumRecordAgeInSeconds":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.\n  The minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed"},"maximumRetryAttempts":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source."},"metricsConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingMetricsConfig","description":"The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics)."},"parallelizationFactor":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1."},"provisionedPollerConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingProvisionedPollerConfig","description":"(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode)."},"queues":{"type":"array","items":{"type":"string"},"description":"(Amazon MQ) The name of the Amazon MQ broker destination queue to consume."},"scalingConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingScalingConfig","description":"This property is for Amazon SQS event sources only. You cannot use ``ProvisionedPollerConfig`` while using ``ScalingConfig``. These options are mutually exclusive. To remove the scaling configuration, pass an empty value."},"selfManagedEventSource":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSelfManagedEventSource","description":"The self-managed Apache Kafka cluster for your event source.","replaceOnChanges":true},"selfManagedKafkaEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSelfManagedKafkaEventSourceConfig","description":"Specific configuration settings for a self-managed Apache Kafka event source."},"sourceAccessConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSourceAccessConfiguration"},"description":"An array of the authentication protocol, VPC components, or virtual host to secure and define your event source."},"startingPosition":{"type":"string","description":"The position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB.\n  +  *LATEST* - Read only new records.\n  +  *TRIM_HORIZON* - Process all available records.\n  +  *AT_TIMESTAMP* - Specify a time from which to start reading records.","replaceOnChanges":true},"startingPositionTimestamp":{"type":"number","description":"With ``StartingPosition`` set to ``AT_TIMESTAMP``, the time from which to start reading, in Unix time seconds. ``StartingPositionTimestamp`` cannot be in the future.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to add to the event source mapping.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update."},"topics":{"type":"array","items":{"type":"string"},"description":"The name of the Kafka topic."},"tumblingWindowInSeconds":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window."}},"type":"object","required":["awsId","eventSourceMappingArn","functionName"],"inputProperties":{"amazonManagedKafkaEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingAmazonManagedKafkaEventSourceConfig","description":"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source."},"batchSize":{"type":"integer","description":"The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).\n  +  *Amazon Kinesis* – Default 100. Max 10,000.\n  +  *Amazon DynamoDB Streams* – Default 100. Max 10,000.\n  +  *Amazon Simple Queue Service* – Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n  +  *Amazon Managed Streaming for Apache Kafka* – Default 100. Max 10,000.\n  +  *Self-managed Apache Kafka* – Default 100. Max 10,000.\n  +  *Amazon MQ (ActiveMQ and RabbitMQ)* – Default 100. Max 10,000.\n  +  *DocumentDB* – Default 100. Max 10,000."},"bisectBatchOnFunctionError":{"type":"boolean","description":"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.\n  When using ``BisectBatchOnFunctionError``, check the ``BatchSize`` parameter in the ``OnFailure`` destination message's metadata. The ``BatchSize`` could be greater than 1 since LAM consolidates failed messages metadata when writing to the ``OnFailure`` destination."},"destinationConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDestinationConfig","description":"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka event sources only) A configuration object that specifies the destination of an event after Lambda processes it."},"documentDbEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDocumentDbEventSourceConfig","description":"Specific configuration settings for a DocumentDB event source."},"enabled":{"type":"boolean","description":"When true, the event source mapping is active. When false, Lambda pauses polling and invocation.\n Default: True"},"eventSourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the event source.\n  +  *Amazon Kinesis* – The ARN of the data stream or a stream consumer.\n  +  *Amazon DynamoDB Streams* – The ARN of the stream.\n  +  *Amazon Simple Queue Service* – The ARN of the queue.\n  +  *Amazon Managed Streaming for Apache Kafka* – The ARN of the cluster or the ARN of the VPC connection (for [cross-account event source mappings](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#msk-multi-vpc)).\n  +  *Amazon MQ* – The ARN of the broker.\n  +  *Amazon DocumentDB* – The ARN of the DocumentDB change stream."},"filterCriteria":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFilterCriteria","description":"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html)."},"functionName":{"type":"string","description":"The name or ARN of the Lambda function.\n  **Name formats**\n +  *Function name* – ``MyFunction``.\n  +  *Function ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction``.\n  +  *Version or Alias ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD``.\n  +  *Partial ARN* – ``123456789012:function:MyFunction``.\n  \n The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length."},"functionResponseTypes":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFunctionResponseTypesItem"},"description":"(Kinesis, DynamoDB Streams, and SQS) A list of current response type enums applied to the event source mapping.\n Valid Values: ``ReportBatchItemFailures``"},"kmsKeyArn":{"type":"string","description":"The ARN of the KMSlong (KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics)."},"loggingConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingLoggingConfig","description":"The function's Amazon CloudWatch Logs configuration settings."},"maximumBatchingWindowInSeconds":{"type":"integer","description":"The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.\n *Default (, , event sources)*: 0\n *Default (, Kafka, , event sources)*: 500 ms\n *Related setting:* For SQS event sources, when you set ``BatchSize`` to a value greater than 10, you must set ``MaximumBatchingWindowInSeconds`` to at least 1."},"maximumRecordAgeInSeconds":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.\n  The minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed"},"maximumRetryAttempts":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source."},"metricsConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingMetricsConfig","description":"The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics)."},"parallelizationFactor":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1."},"provisionedPollerConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingProvisionedPollerConfig","description":"(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode)."},"queues":{"type":"array","items":{"type":"string"},"description":"(Amazon MQ) The name of the Amazon MQ broker destination queue to consume."},"scalingConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingScalingConfig","description":"This property is for Amazon SQS event sources only. You cannot use ``ProvisionedPollerConfig`` while using ``ScalingConfig``. These options are mutually exclusive. To remove the scaling configuration, pass an empty value."},"selfManagedEventSource":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSelfManagedEventSource","description":"The self-managed Apache Kafka cluster for your event source."},"selfManagedKafkaEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSelfManagedKafkaEventSourceConfig","description":"Specific configuration settings for a self-managed Apache Kafka event source."},"sourceAccessConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSourceAccessConfiguration"},"description":"An array of the authentication protocol, VPC components, or virtual host to secure and define your event source."},"startingPosition":{"type":"string","description":"The position in a stream from which to start reading. Required for Amazon Kinesis and Amazon DynamoDB.\n  +  *LATEST* - Read only new records.\n  +  *TRIM_HORIZON* - Process all available records.\n  +  *AT_TIMESTAMP* - Specify a time from which to start reading records."},"startingPositionTimestamp":{"type":"number","description":"With ``StartingPosition`` set to ``AT_TIMESTAMP``, the time from which to start reading, in Unix time seconds. ``StartingPositionTimestamp`` cannot be in the future."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to add to the event source mapping.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update."},"topics":{"type":"array","items":{"type":"string"},"description":"The name of the Kafka topic."},"tumblingWindowInSeconds":{"type":"integer","description":"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window."}},"requiredInputs":["functionName"]},"aws-native:lambda:Function":{"description":"The ``AWS::Lambda::Function`` resource creates a Lambda function. To create a function, you need a [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) and an [execution role](https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html). The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use AWS services, such as Amazon CloudWatch Logs for log streaming and AWS X-Ray for request tracing.\n You set the package type to ``Image`` if the deployment package is a [container image](https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html). For these functions, include the URI of the container image in the ECR registry in the [ImageUri property of the Code property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-imageuri). You do not need to specify the handler and runtime properties. \n You set the package type to ``Zip`` if the deployment package is a [.zip file archive](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html#gettingstarted-package-zip). For these functions, specify the S3 location of your .zip file in the ``Code`` property. Alternatively, for Node.js and Python functions, you can define your function inline in the [ZipFile property of the Code property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-zipfile). In both cases, you must also specify the handler and runtime properties.\n You can use [code signing](https://docs.aws.amazon.com/lambda/latest/dg/configuration-codesigning.html) if your deployment package is a .zip file archive. To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with ``UpdateFunctionCode``, Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.\n When you update a ``AWS::Lambda::Function`` resource, CFNshort calls the [UpdateFunctionConfiguration](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionConfiguration.html) and [UpdateFunctionCode](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionCode.html)LAM APIs under the hood. Because these calls happen sequentially, and invocations can happen between these calls, your function may encounter errors in the time between the calls. For example, if you remove an environment variable, and the code that references that environment variable in the same CFNshort update, you may see invocation errors related to a missing environment variable. To work around this, you can invoke your function against a version or alias by default, rather than the ``$LATEST`` version.\n Note that you configure [provisioned concurrency](https://docs.aws.amazon.com/lambda/latest/dg/provisioned-concurrency.html) on a ``AWS::Lambda::Version`` or a ``AWS::Lambda::Alias``.\n For a complete introduction to Lambda functions, see [What is Lambda?](https://docs.aws.amazon.com/lambda/latest/dg/lambda-welcome.html) in the *Lambda developer guide.*\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var function = new AwsNative.Lambda.Function(\"function\", new()\n    {\n        Handler = \"index.handler\",\n        Role = \"arn:aws:iam::123456789012:role/lambda-role\",\n        Code = new AwsNative.Lambda.Inputs.FunctionCodeArgs\n        {\n            ZipFile = @\"exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!')\n    }\n    return response\n};\n\",\n        },\n        Runtime = \"nodejs18.x\",\n        TracingConfig = new AwsNative.Lambda.Inputs.FunctionTracingConfigArgs\n        {\n            Mode = AwsNative.Lambda.FunctionTracingConfigMode.Active,\n        },\n    });\n\n    var version = new AwsNative.Lambda.Version(\"version\", new()\n    {\n        FunctionName = function.Id,\n        Description = \"v1\",\n    });\n\n    var @alias = new AwsNative.Lambda.Alias(\"alias\", new()\n    {\n        FunctionName = function.Id,\n        FunctionVersion = version.Version,\n        Name = \"BLUE\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/lambda\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tfunction, err := lambda.NewFunction(ctx, \"function\", \u0026lambda.FunctionArgs{\n\t\t\tHandler: pulumi.String(\"index.handler\"),\n\t\t\tRole:    pulumi.String(\"arn:aws:iam::123456789012:role/lambda-role\"),\n\t\t\tCode: \u0026lambda.FunctionCodeArgs{\n\t\t\t\tZipFile: pulumi.String(`exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!')\n    }\n    return response\n};\n`),\n\t\t\t},\n\t\t\tRuntime: pulumi.String(\"nodejs18.x\"),\n\t\t\tTracingConfig: \u0026lambda.FunctionTracingConfigArgs{\n\t\t\t\tMode: lambda.FunctionTracingConfigModeActive,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tversion, err := lambda.NewVersion(ctx, \"version\", \u0026lambda.VersionArgs{\n\t\t\tFunctionName: function.ID(),\n\t\t\tDescription:  pulumi.String(\"v1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = lambda.NewAlias(ctx, \"alias\", \u0026lambda.AliasArgs{\n\t\t\tFunctionName:    function.ID(),\n\t\t\tFunctionVersion: version.Version,\n\t\t\tName:            pulumi.String(\"BLUE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst _function = new aws_native.lambda.Function(\"function\", {\n    handler: \"index.handler\",\n    role: \"arn:aws:iam::123456789012:role/lambda-role\",\n    code: {\n        zipFile: `exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!')\n    }\n    return response\n};\n`,\n    },\n    runtime: \"nodejs18.x\",\n    tracingConfig: {\n        mode: aws_native.lambda.FunctionTracingConfigMode.Active,\n    },\n});\nconst version = new aws_native.lambda.Version(\"version\", {\n    functionName: _function.id,\n    description: \"v1\",\n});\nconst alias = new aws_native.lambda.Alias(\"alias\", {\n    functionName: _function.id,\n    functionVersion: version.version,\n    name: \"BLUE\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfunction = aws_native.lambda_.Function(\"function\",\n    handler=\"index.handler\",\n    role=\"arn:aws:iam::123456789012:role/lambda-role\",\n    code={\n        \"zip_file\": \"\"\"exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!')\n    }\n    return response\n};\n\"\"\",\n    },\n    runtime=\"nodejs18.x\",\n    tracing_config={\n        \"mode\": aws_native.lambda_.FunctionTracingConfigMode.ACTIVE,\n    })\nversion = aws_native.lambda_.Version(\"version\",\n    function_name=function.id,\n    description=\"v1\")\nalias = aws_native.lambda_.Alias(\"alias\",\n    function_name=function.id,\n    function_version=version.version,\n    name=\"BLUE\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var function = new AwsNative.Lambda.Function(\"function\", new()\n    {\n        Handler = \"index.handler\",\n        Role = \"arn:aws:iam::123456789012:role/lambda-role\",\n        Code = new AwsNative.Lambda.Inputs.FunctionCodeArgs\n        {\n            ZipFile = @\"exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello again from Lambda!')\n    }\n    return response\n}\n\",\n        },\n        Runtime = \"nodejs18.x\",\n        TracingConfig = new AwsNative.Lambda.Inputs.FunctionTracingConfigArgs\n        {\n            Mode = AwsNative.Lambda.FunctionTracingConfigMode.Active,\n        },\n    });\n\n    var version = new AwsNative.Lambda.Version(\"version\", new()\n    {\n        FunctionName = function.Id,\n        Description = \"v1\",\n    });\n\n    var newVersion = new AwsNative.Lambda.Version(\"newVersion\", new()\n    {\n        FunctionName = function.Id,\n        Description = \"v2\",\n    });\n\n    var @alias = new AwsNative.Lambda.Alias(\"alias\", new()\n    {\n        FunctionName = function.Id,\n        FunctionVersion = newVersion.Version,\n        Name = \"BLUE\",\n        RoutingConfig = new AwsNative.Lambda.Inputs.AliasRoutingConfigurationArgs\n        {\n            AdditionalVersionWeights = new[]\n            {\n                new AwsNative.Lambda.Inputs.AliasVersionWeightArgs\n                {\n                    FunctionVersion = version.Version,\n                    FunctionWeight = 0.5,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/lambda\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tfunction, err := lambda.NewFunction(ctx, \"function\", \u0026lambda.FunctionArgs{\n\t\t\tHandler: pulumi.String(\"index.handler\"),\n\t\t\tRole:    pulumi.String(\"arn:aws:iam::123456789012:role/lambda-role\"),\n\t\t\tCode: \u0026lambda.FunctionCodeArgs{\n\t\t\t\tZipFile: pulumi.String(`exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello again from Lambda!')\n    }\n    return response\n}\n`),\n\t\t\t},\n\t\t\tRuntime: pulumi.String(\"nodejs18.x\"),\n\t\t\tTracingConfig: \u0026lambda.FunctionTracingConfigArgs{\n\t\t\t\tMode: lambda.FunctionTracingConfigModeActive,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tversion, err := lambda.NewVersion(ctx, \"version\", \u0026lambda.VersionArgs{\n\t\t\tFunctionName: function.ID(),\n\t\t\tDescription:  pulumi.String(\"v1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tnewVersion, err := lambda.NewVersion(ctx, \"newVersion\", \u0026lambda.VersionArgs{\n\t\t\tFunctionName: function.ID(),\n\t\t\tDescription:  pulumi.String(\"v2\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = lambda.NewAlias(ctx, \"alias\", \u0026lambda.AliasArgs{\n\t\t\tFunctionName:    function.ID(),\n\t\t\tFunctionVersion: newVersion.Version,\n\t\t\tName:            pulumi.String(\"BLUE\"),\n\t\t\tRoutingConfig: \u0026lambda.AliasRoutingConfigurationArgs{\n\t\t\t\tAdditionalVersionWeights: lambda.AliasVersionWeightArray{\n\t\t\t\t\t\u0026lambda.AliasVersionWeightArgs{\n\t\t\t\t\t\tFunctionVersion: version.Version,\n\t\t\t\t\t\tFunctionWeight:  pulumi.Float64(0.5),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst _function = new aws_native.lambda.Function(\"function\", {\n    handler: \"index.handler\",\n    role: \"arn:aws:iam::123456789012:role/lambda-role\",\n    code: {\n        zipFile: `exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello again from Lambda!')\n    }\n    return response\n}\n`,\n    },\n    runtime: \"nodejs18.x\",\n    tracingConfig: {\n        mode: aws_native.lambda.FunctionTracingConfigMode.Active,\n    },\n});\nconst version = new aws_native.lambda.Version(\"version\", {\n    functionName: _function.id,\n    description: \"v1\",\n});\nconst newVersion = new aws_native.lambda.Version(\"newVersion\", {\n    functionName: _function.id,\n    description: \"v2\",\n});\nconst alias = new aws_native.lambda.Alias(\"alias\", {\n    functionName: _function.id,\n    functionVersion: newVersion.version,\n    name: \"BLUE\",\n    routingConfig: {\n        additionalVersionWeights: [{\n            functionVersion: version.version,\n            functionWeight: 0.5,\n        }],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfunction = aws_native.lambda_.Function(\"function\",\n    handler=\"index.handler\",\n    role=\"arn:aws:iam::123456789012:role/lambda-role\",\n    code={\n        \"zip_file\": \"\"\"exports.handler = function(event){\n    console.log(JSON.stringify(event, null, 2))\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello again from Lambda!')\n    }\n    return response\n}\n\"\"\",\n    },\n    runtime=\"nodejs18.x\",\n    tracing_config={\n        \"mode\": aws_native.lambda_.FunctionTracingConfigMode.ACTIVE,\n    })\nversion = aws_native.lambda_.Version(\"version\",\n    function_name=function.id,\n    description=\"v1\")\nnew_version = aws_native.lambda_.Version(\"newVersion\",\n    function_name=function.id,\n    description=\"v2\")\nalias = aws_native.lambda_.Alias(\"alias\",\n    function_name=function.id,\n    function_version=new_version.version,\n    name=\"BLUE\",\n    routing_config={\n        \"additional_version_weights\": [{\n            \"function_version\": version.version,\n            \"function_weight\": 0.5,\n        }],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var function = new AwsNative.Lambda.Function(\"function\", new()\n    {\n        Handler = \"index.handler\",\n        Role = \"arn:aws:iam::123456789012:role/lambda-role\",\n        Code = new AwsNative.Lambda.Inputs.FunctionCodeArgs\n        {\n            ZipFile = @\"exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n\",\n        },\n        Runtime = \"nodejs18.x\",\n        TracingConfig = new AwsNative.Lambda.Inputs.FunctionTracingConfigArgs\n        {\n            Mode = AwsNative.Lambda.FunctionTracingConfigMode.Active,\n        },\n    });\n\n    var version = new AwsNative.Lambda.Version(\"version\", new()\n    {\n        FunctionName = function.Id,\n    });\n\n    var asyncconfig = new AwsNative.Lambda.EventInvokeConfig(\"asyncconfig\", new()\n    {\n        DestinationConfig = new AwsNative.Lambda.Inputs.EventInvokeConfigDestinationConfigArgs\n        {\n            OnFailure = new AwsNative.Lambda.Inputs.EventInvokeConfigOnFailureArgs\n            {\n                Destination = \"arn:aws:sqs:us-east-2:123456789012:dlq\",\n            },\n            OnSuccess = new AwsNative.Lambda.Inputs.EventInvokeConfigOnSuccessArgs\n            {\n                Destination = \"arn:aws:sqs:us-east-2:123456789012:dlq\",\n            },\n        },\n        FunctionName = function.Id,\n        MaximumEventAgeInSeconds = 300,\n        MaximumRetryAttempts = 1,\n        Qualifier = version.Version,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/lambda\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tfunction, err := lambda.NewFunction(ctx, \"function\", \u0026lambda.FunctionArgs{\n\t\t\tHandler: pulumi.String(\"index.handler\"),\n\t\t\tRole:    pulumi.String(\"arn:aws:iam::123456789012:role/lambda-role\"),\n\t\t\tCode: \u0026lambda.FunctionCodeArgs{\n\t\t\t\tZipFile: pulumi.String(`exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n`),\n\t\t\t},\n\t\t\tRuntime: pulumi.String(\"nodejs18.x\"),\n\t\t\tTracingConfig: \u0026lambda.FunctionTracingConfigArgs{\n\t\t\t\tMode: lambda.FunctionTracingConfigModeActive,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tversion, err := lambda.NewVersion(ctx, \"version\", \u0026lambda.VersionArgs{\n\t\t\tFunctionName: function.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = lambda.NewEventInvokeConfig(ctx, \"asyncconfig\", \u0026lambda.EventInvokeConfigArgs{\n\t\t\tDestinationConfig: \u0026lambda.EventInvokeConfigDestinationConfigArgs{\n\t\t\t\tOnFailure: \u0026lambda.EventInvokeConfigOnFailureArgs{\n\t\t\t\t\tDestination: pulumi.String(\"arn:aws:sqs:us-east-2:123456789012:dlq\"),\n\t\t\t\t},\n\t\t\t\tOnSuccess: \u0026lambda.EventInvokeConfigOnSuccessArgs{\n\t\t\t\t\tDestination: pulumi.String(\"arn:aws:sqs:us-east-2:123456789012:dlq\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tFunctionName:             function.ID(),\n\t\t\tMaximumEventAgeInSeconds: pulumi.Int(300),\n\t\t\tMaximumRetryAttempts:     pulumi.Int(1),\n\t\t\tQualifier:                version.Version,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst _function = new aws_native.lambda.Function(\"function\", {\n    handler: \"index.handler\",\n    role: \"arn:aws:iam::123456789012:role/lambda-role\",\n    code: {\n        zipFile: `exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n`,\n    },\n    runtime: \"nodejs18.x\",\n    tracingConfig: {\n        mode: aws_native.lambda.FunctionTracingConfigMode.Active,\n    },\n});\nconst version = new aws_native.lambda.Version(\"version\", {functionName: _function.id});\nconst asyncconfig = new aws_native.lambda.EventInvokeConfig(\"asyncconfig\", {\n    destinationConfig: {\n        onFailure: {\n            destination: \"arn:aws:sqs:us-east-2:123456789012:dlq\",\n        },\n        onSuccess: {\n            destination: \"arn:aws:sqs:us-east-2:123456789012:dlq\",\n        },\n    },\n    functionName: _function.id,\n    maximumEventAgeInSeconds: 300,\n    maximumRetryAttempts: 1,\n    qualifier: version.version,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfunction = aws_native.lambda_.Function(\"function\",\n    handler=\"index.handler\",\n    role=\"arn:aws:iam::123456789012:role/lambda-role\",\n    code={\n        \"zip_file\": \"\"\"exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n\"\"\",\n    },\n    runtime=\"nodejs18.x\",\n    tracing_config={\n        \"mode\": aws_native.lambda_.FunctionTracingConfigMode.ACTIVE,\n    })\nversion = aws_native.lambda_.Version(\"version\", function_name=function.id)\nasyncconfig = aws_native.lambda_.EventInvokeConfig(\"asyncconfig\",\n    destination_config={\n        \"on_failure\": {\n            \"destination\": \"arn:aws:sqs:us-east-2:123456789012:dlq\",\n        },\n        \"on_success\": {\n            \"destination\": \"arn:aws:sqs:us-east-2:123456789012:dlq\",\n        },\n    },\n    function_name=function.id,\n    maximum_event_age_in_seconds=300,\n    maximum_retry_attempts=1,\n    qualifier=version.version)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var primer = new AwsNative.Lambda.Function(\"primer\", new()\n    {\n        Runtime = \"nodejs18.x\",\n        Role = \"arn:aws:iam::123456789012:role/lambda-role\",\n        Handler = \"index.handler\",\n        Code = new AwsNative.Lambda.Inputs.FunctionCodeArgs\n        {\n            ZipFile = @\"const { S3Client, ListBucketsCommand } = require(\"\"@aws-sdk/client-s3\"\");\nconst s3 = new S3Client({ region: \"\"us-east-1\"\" }); // replace \"\"us-east-1\"\" with your AWS region\n\nexports.handler = async function(event) {\n  const command = new ListBucketsCommand({});\n  const response = await s3.send(command);\n  return response.Buckets;\n};\n\",\n        },\n        Description = \"List Amazon S3 buckets in us-east-1.\",\n        TracingConfig = new AwsNative.Lambda.Inputs.FunctionTracingConfigArgs\n        {\n            Mode = AwsNative.Lambda.FunctionTracingConfigMode.Active,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/lambda\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := lambda.NewFunction(ctx, \"primer\", \u0026lambda.FunctionArgs{\n\t\t\tRuntime: pulumi.String(\"nodejs18.x\"),\n\t\t\tRole:    pulumi.String(\"arn:aws:iam::123456789012:role/lambda-role\"),\n\t\t\tHandler: pulumi.String(\"index.handler\"),\n\t\t\tCode: \u0026lambda.FunctionCodeArgs{\n\t\t\t\tZipFile: pulumi.String(`const { S3Client, ListBucketsCommand } = require(\"@aws-sdk/client-s3\");\nconst s3 = new S3Client({ region: \"us-east-1\" }); // replace \"us-east-1\" with your AWS region\n\nexports.handler = async function(event) {\n  const command = new ListBucketsCommand({});\n  const response = await s3.send(command);\n  return response.Buckets;\n};\n`),\n\t\t\t},\n\t\t\tDescription: pulumi.String(\"List Amazon S3 buckets in us-east-1.\"),\n\t\t\tTracingConfig: \u0026lambda.FunctionTracingConfigArgs{\n\t\t\t\tMode: lambda.FunctionTracingConfigModeActive,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst primer = new aws_native.lambda.Function(\"primer\", {\n    runtime: \"nodejs18.x\",\n    role: \"arn:aws:iam::123456789012:role/lambda-role\",\n    handler: \"index.handler\",\n    code: {\n        zipFile: `const { S3Client, ListBucketsCommand } = require(\"@aws-sdk/client-s3\");\nconst s3 = new S3Client({ region: \"us-east-1\" }); // replace \"us-east-1\" with your AWS region\n\nexports.handler = async function(event) {\n  const command = new ListBucketsCommand({});\n  const response = await s3.send(command);\n  return response.Buckets;\n};\n`,\n    },\n    description: \"List Amazon S3 buckets in us-east-1.\",\n    tracingConfig: {\n        mode: aws_native.lambda.FunctionTracingConfigMode.Active,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nprimer = aws_native.lambda_.Function(\"primer\",\n    runtime=\"nodejs18.x\",\n    role=\"arn:aws:iam::123456789012:role/lambda-role\",\n    handler=\"index.handler\",\n    code={\n        \"zip_file\": \"\"\"const { S3Client, ListBucketsCommand } = require(\"@aws-sdk/client-s3\");\nconst s3 = new S3Client({ region: \"us-east-1\" }); // replace \"us-east-1\" with your AWS region\n\nexports.handler = async function(event) {\n  const command = new ListBucketsCommand({});\n  const response = await s3.send(command);\n  return response.Buckets;\n};\n\"\"\",\n    },\n    description=\"List Amazon S3 buckets in us-east-1.\",\n    tracing_config={\n        \"mode\": aws_native.lambda_.FunctionTracingConfigMode.ACTIVE,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var function = new AwsNative.Lambda.Function(\"function\", new()\n    {\n        Handler = \"index.handler\",\n        Role = \"arn:aws:iam::123456789012:role/lambda-role\",\n        Code = new AwsNative.Lambda.Inputs.FunctionCodeArgs\n        {\n            S3Bucket = \"my-bucket\",\n            S3Key = \"function.zip\",\n        },\n        Runtime = \"nodejs18.x\",\n        Timeout = 5,\n        TracingConfig = new AwsNative.Lambda.Inputs.FunctionTracingConfigArgs\n        {\n            Mode = AwsNative.Lambda.FunctionTracingConfigMode.Active,\n        },\n        VpcConfig = new AwsNative.Lambda.Inputs.FunctionVpcConfigArgs\n        {\n            SecurityGroupIds = new[]\n            {\n                \"sg-085912345678492fb\",\n            },\n            SubnetIds = new[]\n            {\n                \"subnet-071f712345678e7c8\",\n                \"subnet-07fd123456788a036\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/lambda\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := lambda.NewFunction(ctx, \"function\", \u0026lambda.FunctionArgs{\n\t\t\tHandler: pulumi.String(\"index.handler\"),\n\t\t\tRole:    pulumi.String(\"arn:aws:iam::123456789012:role/lambda-role\"),\n\t\t\tCode: \u0026lambda.FunctionCodeArgs{\n\t\t\t\tS3Bucket: pulumi.String(\"my-bucket\"),\n\t\t\t\tS3Key:    pulumi.String(\"function.zip\"),\n\t\t\t},\n\t\t\tRuntime: pulumi.String(\"nodejs18.x\"),\n\t\t\tTimeout: pulumi.Int(5),\n\t\t\tTracingConfig: \u0026lambda.FunctionTracingConfigArgs{\n\t\t\t\tMode: lambda.FunctionTracingConfigModeActive,\n\t\t\t},\n\t\t\tVpcConfig: \u0026lambda.FunctionVpcConfigArgs{\n\t\t\t\tSecurityGroupIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"sg-085912345678492fb\"),\n\t\t\t\t},\n\t\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"subnet-071f712345678e7c8\"),\n\t\t\t\t\tpulumi.String(\"subnet-07fd123456788a036\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst _function = new aws_native.lambda.Function(\"function\", {\n    handler: \"index.handler\",\n    role: \"arn:aws:iam::123456789012:role/lambda-role\",\n    code: {\n        s3Bucket: \"my-bucket\",\n        s3Key: \"function.zip\",\n    },\n    runtime: \"nodejs18.x\",\n    timeout: 5,\n    tracingConfig: {\n        mode: aws_native.lambda.FunctionTracingConfigMode.Active,\n    },\n    vpcConfig: {\n        securityGroupIds: [\"sg-085912345678492fb\"],\n        subnetIds: [\n            \"subnet-071f712345678e7c8\",\n            \"subnet-07fd123456788a036\",\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfunction = aws_native.lambda_.Function(\"function\",\n    handler=\"index.handler\",\n    role=\"arn:aws:iam::123456789012:role/lambda-role\",\n    code={\n        \"s3_bucket\": \"my-bucket\",\n        \"s3_key\": \"function.zip\",\n    },\n    runtime=\"nodejs18.x\",\n    timeout=5,\n    tracing_config={\n        \"mode\": aws_native.lambda_.FunctionTracingConfigMode.ACTIVE,\n    },\n    vpc_config={\n        \"security_group_ids\": [\"sg-085912345678492fb\"],\n        \"subnet_ids\": [\n            \"subnet-071f712345678e7c8\",\n            \"subnet-07fd123456788a036\",\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var function = new AwsNative.Lambda.Function(\"function\", new()\n    {\n        Handler = \"index.handler\",\n        Role = \"arn:aws:iam::123456789012:role/lambda-role\",\n        Code = new AwsNative.Lambda.Inputs.FunctionCodeArgs\n        {\n            ZipFile = @\"exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n\",\n        },\n        Runtime = \"nodejs18.x\",\n        TracingConfig = new AwsNative.Lambda.Inputs.FunctionTracingConfigArgs\n        {\n            Mode = AwsNative.Lambda.FunctionTracingConfigMode.Active,\n        },\n    });\n\n    var version = new AwsNative.Lambda.Version(\"version\", new()\n    {\n        FunctionName = function.Id,\n        Description = \"v1\",\n        ProvisionedConcurrencyConfig = new AwsNative.Lambda.Inputs.VersionProvisionedConcurrencyConfigurationArgs\n        {\n            ProvisionedConcurrentExecutions = 20,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/lambda\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tfunction, err := lambda.NewFunction(ctx, \"function\", \u0026lambda.FunctionArgs{\n\t\t\tHandler: pulumi.String(\"index.handler\"),\n\t\t\tRole:    pulumi.String(\"arn:aws:iam::123456789012:role/lambda-role\"),\n\t\t\tCode: \u0026lambda.FunctionCodeArgs{\n\t\t\t\tZipFile: pulumi.String(`exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n`),\n\t\t\t},\n\t\t\tRuntime: pulumi.String(\"nodejs18.x\"),\n\t\t\tTracingConfig: \u0026lambda.FunctionTracingConfigArgs{\n\t\t\t\tMode: lambda.FunctionTracingConfigModeActive,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = lambda.NewVersion(ctx, \"version\", \u0026lambda.VersionArgs{\n\t\t\tFunctionName: function.ID(),\n\t\t\tDescription:  pulumi.String(\"v1\"),\n\t\t\tProvisionedConcurrencyConfig: \u0026lambda.VersionProvisionedConcurrencyConfigurationArgs{\n\t\t\t\tProvisionedConcurrentExecutions: pulumi.Int(20),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst _function = new aws_native.lambda.Function(\"function\", {\n    handler: \"index.handler\",\n    role: \"arn:aws:iam::123456789012:role/lambda-role\",\n    code: {\n        zipFile: `exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n`,\n    },\n    runtime: \"nodejs18.x\",\n    tracingConfig: {\n        mode: aws_native.lambda.FunctionTracingConfigMode.Active,\n    },\n});\nconst version = new aws_native.lambda.Version(\"version\", {\n    functionName: _function.id,\n    description: \"v1\",\n    provisionedConcurrencyConfig: {\n        provisionedConcurrentExecutions: 20,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nfunction = aws_native.lambda_.Function(\"function\",\n    handler=\"index.handler\",\n    role=\"arn:aws:iam::123456789012:role/lambda-role\",\n    code={\n        \"zip_file\": \"\"\"exports.handler = async (event) =\u003e {\n    console.log(JSON.stringify(event, null, 2));\n    const response = {\n        statusCode: 200,\n        body: JSON.stringify('Hello from Lambda!'),\n    };\n    return response;\n};\n\"\"\",\n    },\n    runtime=\"nodejs18.x\",\n    tracing_config={\n        \"mode\": aws_native.lambda_.FunctionTracingConfigMode.ACTIVE,\n    })\nversion = aws_native.lambda_.Version(\"version\",\n    function_name=function.id,\n    description=\"v1\",\n    provisioned_concurrency_config={\n        \"provisioned_concurrent_executions\": 20,\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"architectures":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:FunctionArchitecturesItem"},"description":"The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is ``x86_64``."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function."},"capacityProviderConfig":{"$ref":"#/types/aws-native:lambda:FunctionCapacityProviderConfig","description":"Configuration for the capacity provider that manages compute resources for Lambda functions."},"code":{"$ref":"#/types/aws-native:lambda:FunctionCode","description":"The code for the function. You can define your function code in multiple ways:\n  +  For .zip deployment packages, you can specify the S3 location of the .zip file in the ``S3Bucket``, ``S3Key``, and ``S3ObjectVersion`` properties.\n  +  For .zip deployment packages, you can alternatively define the function code inline in the ``ZipFile`` property. This method works only for Node.js and Python functions.\n  +  For container images, specify the URI of your container image in the ECR registry in the ``ImageUri`` property."},"codeSigningConfigArn":{"type":"string","description":"To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function."},"deadLetterConfig":{"$ref":"#/types/aws-native:lambda:FunctionDeadLetterConfig","description":"A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see [Dead-letter queues](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq)."},"description":{"type":"string","description":"A description of the function."},"durableConfig":{"$ref":"#/types/aws-native:lambda:FunctionDurableConfig","description":"Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout and retention period for execution history."},"environment":{"$ref":"#/types/aws-native:lambda:FunctionEnvironment","description":"Environment variables that are accessible from function code during execution."},"ephemeralStorage":{"$ref":"#/types/aws-native:lambda:FunctionEphemeralStorage","description":"The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB."},"fileSystemConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:FunctionFileSystemConfig"},"description":"Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function.\n For more information about using the ``DependsOn`` attribute, see [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html)."},"functionName":{"type":"string","description":"The name of the Lambda function, up to 64 characters in length. If you don't specify a name, CFN generates one.\n If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"functionScalingConfig":{"$ref":"#/types/aws-native:lambda:FunctionScalingConfig","description":"Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned."},"handler":{"type":"string","description":"The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see [Lambda programming model](https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html)."},"imageConfig":{"$ref":"#/types/aws-native:lambda:FunctionImageConfig","description":"Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms)."},"kmsKeyArn":{"type":"string","description":"The ARN of the KMSlong (KMS) customer managed key that's used to encrypt the following resources:\n  +  The function's [environment variables](https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption).\n  +  The function's [Lambda SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html) snapshots.\n  +  When used with ``SourceKMSKeyArn``, the unzipped version of the .zip deployment package that's used for function invocations. For more information, see [Specifying a customer managed key for Lambda](https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption).\n  +  The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see [Function lifecycle](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle).\n  \n If you don't provide a customer managed key, Lambda uses an [owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk) or an [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk)."},"layers":{"type":"array","items":{"type":"string"},"description":"A list of [function layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) to add to the function's execution environment. Specify each layer by its ARN, including the version."},"loggingConfig":{"$ref":"#/types/aws-native:lambda:FunctionLoggingConfig","description":"The function's Amazon CloudWatch Logs configuration settings."},"memorySize":{"type":"integer","description":"The amount of [memory available to the function](https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console) at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase."},"packageType":{"$ref":"#/types/aws-native:lambda:FunctionPackageType","description":"The type of deployment package. Set to ``Image`` for container image and set ``Zip`` for .zip file archive.","replaceOnChanges":true},"publishToLatestPublished":{"type":"boolean"},"recursiveLoop":{"$ref":"#/types/aws-native:lambda:FunctionRecursiveLoop","description":"The status of your function's recursive loop detection configuration.\n When this value is set to ``Allow``and Lambda detects your function being invoked as part of a recursive loop, it doesn't take any action.\n When this value is set to ``Terminate`` and Lambda detects your function being invoked as part of a recursive loop, it stops your function being invoked and notifies you."},"reservedConcurrentExecutions":{"type":"integer","description":"The number of simultaneous executions to reserve for the function."},"role":{"type":"string","description":"The Amazon Resource Name (ARN) of the function's execution role."},"runtime":{"type":"string","description":"The identifier of the function's [runtime](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html). Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.\n The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see [Runtime use after deprecation](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels).\n For a list of all currently supported runtimes, see [Supported runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported)."},"runtimeManagementConfig":{"$ref":"#/types/aws-native:lambda:FunctionRuntimeManagementConfig","description":"Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html)."},"snapStart":{"$ref":"#/types/aws-native:lambda:FunctionSnapStart","description":"The function's [SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting."},"snapStartResponse":{"$ref":"#/types/aws-native:lambda:FunctionSnapStartResponse"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of [tags](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the function.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update."},"tenancyConfig":{"$ref":"#/types/aws-native:lambda:FunctionTenancyConfig","description":"The function's tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant.","replaceOnChanges":true},"timeout":{"type":"integer","description":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see [Lambda execution environment](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html)."},"tracingConfig":{"$ref":"#/types/aws-native:lambda:FunctionTracingConfig","description":"Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with [X-Ray](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html)."},"vpcConfig":{"$ref":"#/types/aws-native:lambda:FunctionVpcConfig","description":"For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see [Configuring a Lambda function to access resources in a VPC](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html)."}},"type":"object","required":["arn","code","role","snapStartResponse"],"inputProperties":{"architectures":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:FunctionArchitecturesItem"},"description":"The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is ``x86_64``."},"capacityProviderConfig":{"$ref":"#/types/aws-native:lambda:FunctionCapacityProviderConfig","description":"Configuration for the capacity provider that manages compute resources for Lambda functions."},"code":{"$ref":"#/types/aws-native:lambda:FunctionCode","description":"The code for the function. You can define your function code in multiple ways:\n  +  For .zip deployment packages, you can specify the S3 location of the .zip file in the ``S3Bucket``, ``S3Key``, and ``S3ObjectVersion`` properties.\n  +  For .zip deployment packages, you can alternatively define the function code inline in the ``ZipFile`` property. This method works only for Node.js and Python functions.\n  +  For container images, specify the URI of your container image in the ECR registry in the ``ImageUri`` property."},"codeSigningConfigArn":{"type":"string","description":"To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function."},"deadLetterConfig":{"$ref":"#/types/aws-native:lambda:FunctionDeadLetterConfig","description":"A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see [Dead-letter queues](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq)."},"description":{"type":"string","description":"A description of the function."},"durableConfig":{"$ref":"#/types/aws-native:lambda:FunctionDurableConfig","description":"Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout and retention period for execution history."},"environment":{"$ref":"#/types/aws-native:lambda:FunctionEnvironment","description":"Environment variables that are accessible from function code during execution."},"ephemeralStorage":{"$ref":"#/types/aws-native:lambda:FunctionEphemeralStorage","description":"The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB."},"fileSystemConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:lambda:FunctionFileSystemConfig"},"description":"Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function.\n For more information about using the ``DependsOn`` attribute, see [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html)."},"functionName":{"type":"string","description":"The name of the Lambda function, up to 64 characters in length. If you don't specify a name, CFN generates one.\n If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"functionScalingConfig":{"$ref":"#/types/aws-native:lambda:FunctionScalingConfig","description":"Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned."},"handler":{"type":"string","description":"The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see [Lambda programming model](https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html)."},"imageConfig":{"$ref":"#/types/aws-native:lambda:FunctionImageConfig","description":"Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms)."},"kmsKeyArn":{"type":"string","description":"The ARN of the KMSlong (KMS) customer managed key that's used to encrypt the following resources:\n  +  The function's [environment variables](https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption).\n  +  The function's [Lambda SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html) snapshots.\n  +  When used with ``SourceKMSKeyArn``, the unzipped version of the .zip deployment package that's used for function invocations. For more information, see [Specifying a customer managed key for Lambda](https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption).\n  +  The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see [Function lifecycle](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle).\n  \n If you don't provide a customer managed key, Lambda uses an [owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk) or an [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk)."},"layers":{"type":"array","items":{"type":"string"},"description":"A list of [function layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) to add to the function's execution environment. Specify each layer by its ARN, including the version."},"loggingConfig":{"$ref":"#/types/aws-native:lambda:FunctionLoggingConfig","description":"The function's Amazon CloudWatch Logs configuration settings."},"memorySize":{"type":"integer","description":"The amount of [memory available to the function](https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console) at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase."},"packageType":{"$ref":"#/types/aws-native:lambda:FunctionPackageType","description":"The type of deployment package. Set to ``Image`` for container image and set ``Zip`` for .zip file archive."},"publishToLatestPublished":{"type":"boolean"},"recursiveLoop":{"$ref":"#/types/aws-native:lambda:FunctionRecursiveLoop","description":"The status of your function's recursive loop detection configuration.\n When this value is set to ``Allow``and Lambda detects your function being invoked as part of a recursive loop, it doesn't take any action.\n When this value is set to ``Terminate`` and Lambda detects your function being invoked as part of a recursive loop, it stops your function being invoked and notifies you."},"reservedConcurrentExecutions":{"type":"integer","description":"The number of simultaneous executions to reserve for the function."},"role":{"type":"string","description":"The Amazon Resource Name (ARN) of the function's execution role."},"runtime":{"type":"string","description":"The identifier of the function's [runtime](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html). Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.\n The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see [Runtime use after deprecation](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels).\n For a list of all currently supported runtimes, see [Supported runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported)."},"runtimeManagementConfig":{"$ref":"#/types/aws-native:lambda:FunctionRuntimeManagementConfig","description":"Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html)."},"snapStart":{"$ref":"#/types/aws-native:lambda:FunctionSnapStart","description":"The function's [SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of [tags](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the function.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update."},"tenancyConfig":{"$ref":"#/types/aws-native:lambda:FunctionTenancyConfig","description":"The function's tenant isolation configuration settings. Determines whether the Lambda function runs on a shared or dedicated infrastructure per unique tenant."},"timeout":{"type":"integer","description":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see [Lambda execution environment](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html)."},"tracingConfig":{"$ref":"#/types/aws-native:lambda:FunctionTracingConfig","description":"Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with [X-Ray](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html)."},"vpcConfig":{"$ref":"#/types/aws-native:lambda:FunctionVpcConfig","description":"For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see [Configuring a Lambda function to access resources in a VPC](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html)."}},"requiredInputs":["code","role"]},"aws-native:lambda:LayerVersion":{"description":"Resource Type definition for AWS::Lambda::LayerVersion","properties":{"compatibleArchitectures":{"type":"array","items":{"type":"string"},"description":"A list of compatible instruction set architectures.","replaceOnChanges":true},"compatibleRuntimes":{"type":"array","items":{"type":"string"},"description":"A list of compatible function runtimes. Used for filtering with ListLayers and ListLayerVersions.","replaceOnChanges":true},"content":{"$ref":"#/types/aws-native:lambda:LayerVersionContent","description":"The function layer archive.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the version.","replaceOnChanges":true},"layerName":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the layer.","replaceOnChanges":true},"layerVersionArn":{"type":"string","description":"The ARN of the layer version."},"licenseInfo":{"type":"string","description":"The layer's software license.","replaceOnChanges":true}},"type":"object","required":["content","layerVersionArn"],"inputProperties":{"compatibleArchitectures":{"type":"array","items":{"type":"string"},"description":"A list of compatible instruction set architectures."},"compatibleRuntimes":{"type":"array","items":{"type":"string"},"description":"A list of compatible function runtimes. Used for filtering with ListLayers and ListLayerVersions."},"content":{"$ref":"#/types/aws-native:lambda:LayerVersionContent","description":"The function layer archive."},"description":{"type":"string","description":"The description of the version."},"layerName":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the layer."},"licenseInfo":{"type":"string","description":"The layer's software license."}},"requiredInputs":["content"]},"aws-native:lambda:LayerVersionPermission":{"description":"Schema for Lambda LayerVersionPermission","properties":{"action":{"type":"string","description":"The API action that grants access to the layer.","replaceOnChanges":true},"awsId":{"type":"string","description":"ID generated by service"},"layerVersionArn":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the layer.","replaceOnChanges":true},"organizationId":{"type":"string","description":"With the principal set to *, grant permission to all accounts in the specified organization.","replaceOnChanges":true},"principal":{"type":"string","description":"An account ID, or * to grant layer usage permission to all accounts in an organization, or all AWS accounts (if organizationId is not specified).","replaceOnChanges":true}},"type":"object","required":["action","awsId","layerVersionArn","principal"],"inputProperties":{"action":{"type":"string","description":"The API action that grants access to the layer."},"layerVersionArn":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the layer."},"organizationId":{"type":"string","description":"With the principal set to *, grant permission to all accounts in the specified organization."},"principal":{"type":"string","description":"An account ID, or * to grant layer usage permission to all accounts in an organization, or all AWS accounts (if organizationId is not specified)."}},"requiredInputs":["action","layerVersionArn","principal"]},"aws-native:lambda:Permission":{"description":"The ``AWS::Lambda::Permission`` resource grants an AWS service or another account permission to use a function. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias. If you use a qualifier, the invoker must use the full Amazon Resource Name (ARN) of that version or alias to invoke the function.\n To grant permission to another account, specify the account ID as the ``Principal``. To grant permission to an organization defined in AOlong, specify the organization ID as the ``PrincipalOrgID``. For AWS services, the principal is a domain-style identifier defined by the service, like ``s3.amazonaws.com`` or ``sns.amazonaws.com``. For AWS services, you can also specify the ARN of the associated resource as the ``SourceArn``. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function.\n If your function has a function URL, you can specify the ``FunctionUrlAuthType`` parameter. This adds a condition to your permission that only applies when your function URL's ``AuthType`` matches the specified ``FunctionUrlAuthType``. For more information about the ``AuthType`` parameter, see [Control access to function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html).\n This resource adds a statement to a resource-based permission policy for the function. For more information about function policies, see [Lambda Function Policies](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html).","properties":{"action":{"type":"string","description":"The action that the principal can use on the function. For example, ``lambda:InvokeFunction`` or ``lambda:GetFunction``.","replaceOnChanges":true},"awsId":{"type":"string"},"eventSourceToken":{"type":"string","description":"For Alexa Smart Home functions, a token that the invoker must supply.","replaceOnChanges":true},"functionName":{"type":"string","description":"The name or ARN of the Lambda function, version, or alias.\n  **Name formats**\n +  *Function name* – ``my-function`` (name-only), ``my-function:v1`` (with alias).\n  +  *Function ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:my-function``.\n  +  *Partial ARN* – ``123456789012:function:my-function``.\n  \n You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.","replaceOnChanges":true},"functionUrlAuthType":{"$ref":"#/types/aws-native:lambda:PermissionFunctionUrlAuthType","description":"The type of authentication that your function URL uses. Set to ``AWS_IAM`` if you want to restrict access to authenticated users only. Set to ``NONE`` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html).","replaceOnChanges":true},"invokedViaFunctionUrl":{"type":"boolean","description":"Restricts the ``lambda:InvokeFunction`` action to function URL calls. When specified, this option prevents the principal from invoking the function by any means other than the function URL. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html).","replaceOnChanges":true},"principal":{"type":"string","description":"The AWS-service, AWS-account, IAM user, or IAM role that invokes the function. If you specify a service, use ``SourceArn`` or ``SourceAccount`` to limit who can invoke the function through that service.","replaceOnChanges":true},"principalOrgId":{"type":"string","description":"The identifier for your organization in AOlong. Use this to grant permissions to all the AWS-accounts under this organization.","replaceOnChanges":true},"sourceAccount":{"type":"string","description":"For AWS-service, the ID of the AWS-account that owns the resource. Use this together with ``SourceArn`` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account.","replaceOnChanges":true},"sourceArn":{"type":"string","description":"For AWS-services, the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.\n Note that Lambda configures the comparison using the ``StringLike`` operator.","replaceOnChanges":true}},"type":"object","required":["action","awsId","functionName","principal"],"inputProperties":{"action":{"type":"string","description":"The action that the principal can use on the function. For example, ``lambda:InvokeFunction`` or ``lambda:GetFunction``."},"eventSourceToken":{"type":"string","description":"For Alexa Smart Home functions, a token that the invoker must supply."},"functionName":{"type":"string","description":"The name or ARN of the Lambda function, version, or alias.\n  **Name formats**\n +  *Function name* – ``my-function`` (name-only), ``my-function:v1`` (with alias).\n  +  *Function ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:my-function``.\n  +  *Partial ARN* – ``123456789012:function:my-function``.\n  \n You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length."},"functionUrlAuthType":{"$ref":"#/types/aws-native:lambda:PermissionFunctionUrlAuthType","description":"The type of authentication that your function URL uses. Set to ``AWS_IAM`` if you want to restrict access to authenticated users only. Set to ``NONE`` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html)."},"invokedViaFunctionUrl":{"type":"boolean","description":"Restricts the ``lambda:InvokeFunction`` action to function URL calls. When specified, this option prevents the principal from invoking the function by any means other than the function URL. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html)."},"principal":{"type":"string","description":"The AWS-service, AWS-account, IAM user, or IAM role that invokes the function. If you specify a service, use ``SourceArn`` or ``SourceAccount`` to limit who can invoke the function through that service."},"principalOrgId":{"type":"string","description":"The identifier for your organization in AOlong. Use this to grant permissions to all the AWS-accounts under this organization."},"sourceAccount":{"type":"string","description":"For AWS-service, the ID of the AWS-account that owns the resource. Use this together with ``SourceArn`` to ensure that the specified account owns the resource. It is possible for an Amazon S3 bucket to be deleted by its owner and recreated by another account."},"sourceArn":{"type":"string","description":"For AWS-services, the ARN of the AWS resource that invokes the function. For example, an Amazon S3 bucket or Amazon SNS topic.\n Note that Lambda configures the comparison using the ``StringLike`` operator."}},"requiredInputs":["action","functionName","principal"]},"aws-native:lambda:Url":{"description":"Resource Type definition for AWS::Lambda::Url","properties":{"authType":{"$ref":"#/types/aws-native:lambda:UrlAuthType","description":"Can be either AWS_IAM if the requests are authorized via IAM, or NONE if no authorization is configured on the Function URL."},"cors":{"$ref":"#/types/aws-native:lambda:UrlCors","description":"The [Cross-Origin Resource Sharing (CORS)](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) settings for your function URL."},"functionArn":{"type":"string","description":"The full Amazon Resource Name (ARN) of the function associated with the Function URL."},"functionUrl":{"type":"string","description":"The generated url for this resource."},"invokeMode":{"$ref":"#/types/aws-native:lambda:UrlInvokeMode","description":"The invocation mode for the function's URL. Set to BUFFERED if you want to buffer responses before returning them to the client. Set to RESPONSE_STREAM if you want to stream responses, allowing faster time to first byte and larger response payload sizes. If not set, defaults to BUFFERED."},"qualifier":{"type":"string","description":"The alias qualifier for the target function. If TargetFunctionArn is unqualified then Qualifier must be passed.","replaceOnChanges":true},"targetFunctionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function associated with the Function URL.","replaceOnChanges":true}},"type":"object","required":["authType","functionArn","functionUrl","targetFunctionArn"],"inputProperties":{"authType":{"$ref":"#/types/aws-native:lambda:UrlAuthType","description":"Can be either AWS_IAM if the requests are authorized via IAM, or NONE if no authorization is configured on the Function URL."},"cors":{"$ref":"#/types/aws-native:lambda:UrlCors","description":"The [Cross-Origin Resource Sharing (CORS)](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) settings for your function URL."},"invokeMode":{"$ref":"#/types/aws-native:lambda:UrlInvokeMode","description":"The invocation mode for the function's URL. Set to BUFFERED if you want to buffer responses before returning them to the client. Set to RESPONSE_STREAM if you want to stream responses, allowing faster time to first byte and larger response payload sizes. If not set, defaults to BUFFERED."},"qualifier":{"type":"string","description":"The alias qualifier for the target function. If TargetFunctionArn is unqualified then Qualifier must be passed."},"targetFunctionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the function associated with the Function URL."}},"requiredInputs":["authType","targetFunctionArn"]},"aws-native:lambda:Version":{"description":"Resource Type definition for AWS::Lambda::Version","properties":{"codeSha256":{"type":"string","description":"Only publish a version if the hash value matches the value that's specified. Use this option to avoid publishing a version if the function code has changed since you last updated it. Updates are not supported for this property.","replaceOnChanges":true},"description":{"type":"string","description":"A description for the version to override the description in the function configuration. Updates are not supported for this property.","replaceOnChanges":true},"functionArn":{"type":"string","description":"The ARN of the version."},"functionName":{"type":"string","description":"The name of the Lambda function.","replaceOnChanges":true},"functionScalingConfig":{"$ref":"#/types/aws-native:lambda:VersionFunctionScalingConfig","description":"The scaling configuration to apply to the function, including minimum and maximum execution environment limits."},"provisionedConcurrencyConfig":{"$ref":"#/types/aws-native:lambda:VersionProvisionedConcurrencyConfiguration","description":"Specifies a provisioned concurrency configuration for a function's version. Updates are not supported for this property.","replaceOnChanges":true},"runtimePolicy":{"$ref":"#/types/aws-native:lambda:VersionRuntimePolicy","description":"Specifies the runtime management configuration of a function. Displays runtimeVersionArn only for Manual.","replaceOnChanges":true},"version":{"type":"string","description":"The version number.","language":{"csharp":{"name":"VersionValue"}}}},"type":"object","required":["functionArn","functionName","version"],"inputProperties":{"codeSha256":{"type":"string","description":"Only publish a version if the hash value matches the value that's specified. Use this option to avoid publishing a version if the function code has changed since you last updated it. Updates are not supported for this property."},"description":{"type":"string","description":"A description for the version to override the description in the function configuration. Updates are not supported for this property."},"functionName":{"type":"string","description":"The name of the Lambda function."},"functionScalingConfig":{"$ref":"#/types/aws-native:lambda:VersionFunctionScalingConfig","description":"The scaling configuration to apply to the function, including minimum and maximum execution environment limits."},"provisionedConcurrencyConfig":{"$ref":"#/types/aws-native:lambda:VersionProvisionedConcurrencyConfiguration","description":"Specifies a provisioned concurrency configuration for a function's version. Updates are not supported for this property."},"runtimePolicy":{"$ref":"#/types/aws-native:lambda:VersionRuntimePolicy","description":"Specifies the runtime management configuration of a function. Displays runtimeVersionArn only for Manual."}},"requiredInputs":["functionName"]},"aws-native:launchwizard:Deployment":{"description":"Definition of AWS::LaunchWizard::Deployment Resource Type","properties":{"arn":{"type":"string","description":"ARN of the LaunchWizard deployment"},"createdAt":{"type":"string","description":"Timestamp of LaunchWizard deployment creation"},"deletedAt":{"type":"string","description":"Timestamp of LaunchWizard deployment deletion"},"deploymentId":{"type":"string","description":"Deployment ID of the LaunchWizard deployment"},"deploymentPatternName":{"type":"string","description":"Workload deployment pattern name","replaceOnChanges":true},"name":{"type":"string","description":"Name of LaunchWizard deployment","replaceOnChanges":true},"resourceGroup":{"type":"string","description":"Resource Group Name created for LaunchWizard deployment"},"specifications":{"type":"object","additionalProperties":{"type":"string"},"description":"LaunchWizard deployment specifications"},"status":{"$ref":"#/types/aws-native:launchwizard:DeploymentStatus","description":"Status of LaunchWizard deployment"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for LaunchWizard deployment"},"workloadName":{"type":"string","description":"Workload Name for LaunchWizard deployment","replaceOnChanges":true}},"type":"object","required":["arn","createdAt","deletedAt","deploymentId","deploymentPatternName","name","resourceGroup","status","workloadName"],"inputProperties":{"deploymentPatternName":{"type":"string","description":"Workload deployment pattern name"},"name":{"type":"string","description":"Name of LaunchWizard deployment"},"specifications":{"type":"object","additionalProperties":{"type":"string"},"description":"LaunchWizard deployment specifications"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for LaunchWizard deployment"},"workloadName":{"type":"string","description":"Workload Name for LaunchWizard deployment"}},"requiredInputs":["deploymentPatternName","workloadName"]},"aws-native:lex:Bot":{"description":"Resource Type definition for an Amazon Lex conversational bot performing automated tasks such as ordering a pizza, booking a hotel, and so on.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the bot."},"autoBuildBotLocales":{"type":"boolean","description":"Indicates whether Amazon Lex V2 should automatically build the locales for the bot after a change."},"awsId":{"type":"string","description":"The unique identifier of the bot."},"botFileS3Location":{"$ref":"#/types/aws-native:lex:BotS3Location","description":"The Amazon S3 location of files used to import a bot. The files must be in the import format specified in [JSON format for importing and exporting](https://docs.aws.amazon.com/lexv2/latest/dg/import-export-format.html) in the *Amazon Lex developer guide.*"},"botLocales":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotLocale"},"description":"A list of locales for the bot."},"botTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to add to the bot. You can only add tags when you import a bot. You can't use the `UpdateBot` operation to update tags. To update tags, use the `TagResource` operation."},"dataPrivacy":{"$ref":"#/types/aws-native:lex:DataPrivacyProperties","description":"By default, data stored by Amazon Lex is encrypted. The `DataPrivacy` structure provides settings that determine how Amazon Lex handles special cases of securing the data for your bot."},"description":{"type":"string","description":"The description of the version."},"errorLogSettings":{"$ref":"#/types/aws-native:lex:ErrorLogSettingsProperties"},"idleSessionTtlInSeconds":{"type":"integer","description":"The time, in seconds, that Amazon Lex should keep information about a user's conversation with the bot.\n\nA user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Lex deletes any data provided before the timeout.\n\nYou can specify between 60 (1 minute) and 86,400 (24 hours) seconds."},"name":{"type":"string","description":"The name of the bot locale."},"replication":{"$ref":"#/types/aws-native:lex:BotReplication"},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used to build and run the bot."},"testBotAliasSettings":{"$ref":"#/types/aws-native:lex:BotTestBotAliasSettings","description":"Specifies configuration settings for the alias used to test the bot. If the `TestBotAliasSettings` property is not specified, the settings are configured with default values."},"testBotAliasTags":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotTag"},"description":"A list of tags to add to the test alias for a bot. You can only add tags when you import a bot. You can't use the `UpdateAlias` operation to update tags. To update tags on the test alias, use the `TagResource` operation."}},"type":"object","required":["arn","awsId","dataPrivacy","idleSessionTtlInSeconds","name","roleArn"],"inputProperties":{"autoBuildBotLocales":{"type":"boolean","description":"Indicates whether Amazon Lex V2 should automatically build the locales for the bot after a change."},"botFileS3Location":{"$ref":"#/types/aws-native:lex:BotS3Location","description":"The Amazon S3 location of files used to import a bot. The files must be in the import format specified in [JSON format for importing and exporting](https://docs.aws.amazon.com/lexv2/latest/dg/import-export-format.html) in the *Amazon Lex developer guide.*"},"botLocales":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotLocale"},"description":"A list of locales for the bot."},"botTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to add to the bot. You can only add tags when you import a bot. You can't use the `UpdateBot` operation to update tags. To update tags, use the `TagResource` operation."},"dataPrivacy":{"$ref":"#/types/aws-native:lex:DataPrivacyProperties","description":"By default, data stored by Amazon Lex is encrypted. The `DataPrivacy` structure provides settings that determine how Amazon Lex handles special cases of securing the data for your bot."},"description":{"type":"string","description":"The description of the version."},"errorLogSettings":{"$ref":"#/types/aws-native:lex:ErrorLogSettingsProperties"},"idleSessionTtlInSeconds":{"type":"integer","description":"The time, in seconds, that Amazon Lex should keep information about a user's conversation with the bot.\n\nA user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Lex deletes any data provided before the timeout.\n\nYou can specify between 60 (1 minute) and 86,400 (24 hours) seconds."},"name":{"type":"string","description":"The name of the bot locale."},"replication":{"$ref":"#/types/aws-native:lex:BotReplication"},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used to build and run the bot."},"testBotAliasSettings":{"$ref":"#/types/aws-native:lex:BotTestBotAliasSettings","description":"Specifies configuration settings for the alias used to test the bot. If the `TestBotAliasSettings` property is not specified, the settings are configured with default values."},"testBotAliasTags":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotTag"},"description":"A list of tags to add to the test alias for a bot. You can only add tags when you import a bot. You can't use the `UpdateAlias` operation to update tags. To update tags on the test alias, use the `TagResource` operation."}},"requiredInputs":["dataPrivacy","idleSessionTtlInSeconds","roleArn"]},"aws-native:lex:BotAlias":{"description":"Resource Type definition for a Bot Alias, which enables you to change the version of a bot without updating applications that use the bot","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the bot alias."},"botAliasId":{"type":"string","description":"The unique identifier of the bot alias."},"botAliasLocaleSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotAliasLocaleSettingsItem"},"description":"Specifies settings that are unique to a locale. For example, you can use different Lambda function depending on the bot's locale."},"botAliasName":{"type":"string","description":"The name of the bot alias."},"botAliasStatus":{"$ref":"#/types/aws-native:lex:BotAliasStatus","description":"The current status of the bot alias. When the status is Available the alias is ready for use with your bot."},"botAliasTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to add to the bot alias."},"botId":{"type":"string","description":"The unique identifier of the bot.","replaceOnChanges":true},"botVersion":{"type":"string","description":"The version of the bot that the bot alias references."},"conversationLogSettings":{"$ref":"#/types/aws-native:lex:BotAliasConversationLogSettings","description":"Specifies whether Amazon Lex logs text and audio for conversations with the bot. When you enable conversation logs, text logs store text input, transcripts of audio input, and associated metadata in Amazon CloudWatch logs. Audio logs store input in Amazon S3 ."},"description":{"type":"string","description":"The description of the bot alias."},"sentimentAnalysisSettings":{"$ref":"#/types/aws-native:lex:SentimentAnalysisSettingsProperties","description":"Determines whether Amazon Lex will use Amazon Comprehend to detect the sentiment of user utterances."}},"type":"object","required":["arn","botAliasId","botAliasName","botAliasStatus","botId"],"inputProperties":{"botAliasLocaleSettings":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotAliasLocaleSettingsItem"},"description":"Specifies settings that are unique to a locale. For example, you can use different Lambda function depending on the bot's locale."},"botAliasName":{"type":"string","description":"The name of the bot alias."},"botAliasTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to add to the bot alias."},"botId":{"type":"string","description":"The unique identifier of the bot."},"botVersion":{"type":"string","description":"The version of the bot that the bot alias references."},"conversationLogSettings":{"$ref":"#/types/aws-native:lex:BotAliasConversationLogSettings","description":"Specifies whether Amazon Lex logs text and audio for conversations with the bot. When you enable conversation logs, text logs store text input, transcripts of audio input, and associated metadata in Amazon CloudWatch logs. Audio logs store input in Amazon S3 ."},"description":{"type":"string","description":"The description of the bot alias."},"sentimentAnalysisSettings":{"$ref":"#/types/aws-native:lex:SentimentAnalysisSettingsProperties","description":"Determines whether Amazon Lex will use Amazon Comprehend to detect the sentiment of user utterances."}},"requiredInputs":["botId"]},"aws-native:lex:BotVersion":{"description":"Resource Type definition for bot versions, a numbered snapshot of your work that you can publish for use in different parts of your workflow, such as development, beta deployment, and production.","properties":{"botId":{"type":"string","description":"The unique identifier of the bot.","replaceOnChanges":true},"botVersion":{"type":"string","description":"The version of the bot.","language":{"csharp":{"name":"BotVersionValue"}}},"botVersionLocaleSpecification":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotVersionLocaleSpecification"},"description":"Specifies the locales that Amazon Lex adds to this version. You can choose the Draft version or any other previously published version for each locale. When you specify a source version, the locale data is copied from the source version to the new version."},"description":{"type":"string","description":"The description of the version."}},"type":"object","required":["botId","botVersion","botVersionLocaleSpecification"],"inputProperties":{"botId":{"type":"string","description":"The unique identifier of the bot."},"botVersionLocaleSpecification":{"type":"array","items":{"$ref":"#/types/aws-native:lex:BotVersionLocaleSpecification"},"description":"Specifies the locales that Amazon Lex adds to this version. You can choose the Draft version or any other previously published version for each locale. When you specify a source version, the locale data is copied from the source version to the new version."},"description":{"type":"string","description":"The description of the version."}},"requiredInputs":["botId","botVersionLocaleSpecification"]},"aws-native:lex:ResourcePolicy":{"description":"Resource Type definition for a resource policy with specified policy statements that attaches to a Lex bot or bot alias.","properties":{"awsId":{"type":"string","description":"The identifier of the resource policy."},"policy":{"$ref":"#/types/aws-native:lex:ResourcePolicyPolicy","description":"A resource policy to add to the resource. The policy is a JSON structure that contains one or more statements that define the policy. The policy must follow IAM syntax. If the policy isn't valid, Amazon Lex returns a validation exception."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the bot or bot alias that the resource policy is attached to.","replaceOnChanges":true},"revisionId":{"type":"string","description":"Specifies the current revision of a resource policy."}},"type":"object","required":["awsId","policy","resourceArn","revisionId"],"inputProperties":{"policy":{"$ref":"#/types/aws-native:lex:ResourcePolicyPolicy","description":"A resource policy to add to the resource. The policy is a JSON structure that contains one or more statements that define the policy. The policy must follow IAM syntax. If the policy isn't valid, Amazon Lex returns a validation exception."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the bot or bot alias that the resource policy is attached to."}},"requiredInputs":["policy","resourceArn"]},"aws-native:licensemanager:Grant":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"allowedOperations":{"type":"array","items":{"type":"string"},"description":"Allowed operations for the grant."},"grantArn":{"type":"string","description":"Arn of the grant."},"grantName":{"type":"string","description":"Name for the created Grant."},"homeRegion":{"type":"string","description":"Home region for the created grant."},"licenseArn":{"type":"string","description":"License Arn for the grant."},"principals":{"type":"array","items":{"type":"string"},"description":"The grant principals. You can specify one of the following as an Amazon Resource Name (ARN):\n\n- An AWS account, which includes only the account specified.\n\n- An organizational unit (OU), which includes all accounts in the OU.\n\n- An organization, which will include all accounts across your organization."},"status":{"type":"string","description":"Granted license status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach."},"version":{"type":"string","description":"The version of the grant."}},"type":"object","required":["grantArn","version"],"inputProperties":{"allowedOperations":{"type":"array","items":{"type":"string"},"description":"Allowed operations for the grant."},"grantName":{"type":"string","description":"Name for the created Grant."},"homeRegion":{"type":"string","description":"Home region for the created grant."},"licenseArn":{"type":"string","description":"License Arn for the grant."},"principals":{"type":"array","items":{"type":"string"},"description":"The grant principals. You can specify one of the following as an Amazon Resource Name (ARN):\n\n- An AWS account, which includes only the account specified.\n\n- An organizational unit (OU), which includes all accounts in the OU.\n\n- An organization, which will include all accounts across your organization."},"status":{"type":"string","description":"Granted license status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach."}}},"aws-native:licensemanager:License":{"description":"Resource Type definition for AWS::LicenseManager::License","properties":{"beneficiary":{"type":"string","description":"Beneficiary of the license."},"consumptionConfiguration":{"$ref":"#/types/aws-native:licensemanager:LicenseConsumptionConfiguration","description":"Configuration for consumption of the license."},"entitlements":{"type":"array","items":{"$ref":"#/types/aws-native:licensemanager:LicenseEntitlement"},"description":"License entitlements."},"homeRegion":{"type":"string","description":"Home region for the created license."},"issuer":{"$ref":"#/types/aws-native:licensemanager:LicenseIssuerData","description":"License issuer."},"licenseArn":{"type":"string","description":"Amazon Resource Name is a unique name for each resource."},"licenseMetadata":{"type":"array","items":{"$ref":"#/types/aws-native:licensemanager:LicenseMetadata"},"description":"License metadata."},"licenseName":{"type":"string","description":"Name for the created license."},"productName":{"type":"string","description":"Product name for the created license."},"productSku":{"type":"string","description":"ProductSKU of the license."},"status":{"type":"string","description":"License status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach."},"validity":{"$ref":"#/types/aws-native:licensemanager:LicenseValidityDateFormat","description":"Date and time range during which the license is valid, in ISO8601-UTC format."},"version":{"type":"string","description":"The version of the license."}},"type":"object","required":["beneficiary","consumptionConfiguration","entitlements","homeRegion","issuer","licenseArn","licenseName","productName","productSku","validity","version"],"inputProperties":{"beneficiary":{"type":"string","description":"Beneficiary of the license."},"consumptionConfiguration":{"$ref":"#/types/aws-native:licensemanager:LicenseConsumptionConfiguration","description":"Configuration for consumption of the license."},"entitlements":{"type":"array","items":{"$ref":"#/types/aws-native:licensemanager:LicenseEntitlement"},"description":"License entitlements."},"homeRegion":{"type":"string","description":"Home region for the created license."},"issuer":{"$ref":"#/types/aws-native:licensemanager:LicenseIssuerData","description":"License issuer."},"licenseMetadata":{"type":"array","items":{"$ref":"#/types/aws-native:licensemanager:LicenseMetadata"},"description":"License metadata."},"licenseName":{"type":"string","description":"Name for the created license."},"productName":{"type":"string","description":"Product name for the created license."},"productSku":{"type":"string","description":"ProductSKU of the license."},"status":{"type":"string","description":"License status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach."},"validity":{"$ref":"#/types/aws-native:licensemanager:LicenseValidityDateFormat","description":"Date and time range during which the license is valid, in ISO8601-UTC format."}},"requiredInputs":["beneficiary","consumptionConfiguration","entitlements","homeRegion","issuer","productName","productSku","validity"]},"aws-native:lightsail:Alarm":{"description":"Resource Type definition for AWS::Lightsail::Alarm","properties":{"alarmArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the alarm."},"alarmName":{"type":"string","description":"The name for the alarm. Specify the name of an existing alarm to update, and overwrite the previous configuration of the alarm.","replaceOnChanges":true},"comparisonOperator":{"type":"string","description":"The arithmetic operation to use when comparing the specified statistic to the threshold. The specified statistic value is used as the first operand."},"contactProtocols":{"type":"array","items":{"type":"string"},"description":"The contact protocols to use for the alarm, such as Email, SMS (text messaging), or both."},"datapointsToAlarm":{"type":"integer","description":"The number of data points that must be not within the specified threshold to trigger the alarm. If you are setting an \"M out of N\" alarm, this value (datapointsToAlarm) is the M."},"evaluationPeriods":{"type":"integer","description":"The number of most recent periods over which data is compared to the specified threshold. If you are setting an \"M out of N\" alarm, this value (evaluationPeriods) is the N."},"metricName":{"type":"string","description":"The name of the metric to associate with the alarm.","replaceOnChanges":true},"monitoredResourceName":{"type":"string","description":"The name of the Lightsail resource that the alarm monitors.","replaceOnChanges":true},"notificationEnabled":{"type":"boolean","description":"Indicates whether the alarm is enabled. Notifications are enabled by default if you don't specify this parameter."},"notificationTriggers":{"type":"array","items":{"type":"string"},"description":"The alarm states that trigger a notification."},"state":{"type":"string","description":"The current state of the alarm."},"threshold":{"type":"number","description":"The value against which the specified statistic is compared."},"treatMissingData":{"type":"string","description":"Sets how this alarm will handle missing data points."}},"type":"object","required":["alarmArn","alarmName","comparisonOperator","evaluationPeriods","metricName","monitoredResourceName","state","threshold"],"inputProperties":{"alarmName":{"type":"string","description":"The name for the alarm. Specify the name of an existing alarm to update, and overwrite the previous configuration of the alarm."},"comparisonOperator":{"type":"string","description":"The arithmetic operation to use when comparing the specified statistic to the threshold. The specified statistic value is used as the first operand."},"contactProtocols":{"type":"array","items":{"type":"string"},"description":"The contact protocols to use for the alarm, such as Email, SMS (text messaging), or both."},"datapointsToAlarm":{"type":"integer","description":"The number of data points that must be not within the specified threshold to trigger the alarm. If you are setting an \"M out of N\" alarm, this value (datapointsToAlarm) is the M."},"evaluationPeriods":{"type":"integer","description":"The number of most recent periods over which data is compared to the specified threshold. If you are setting an \"M out of N\" alarm, this value (evaluationPeriods) is the N."},"metricName":{"type":"string","description":"The name of the metric to associate with the alarm."},"monitoredResourceName":{"type":"string","description":"The name of the Lightsail resource that the alarm monitors."},"notificationEnabled":{"type":"boolean","description":"Indicates whether the alarm is enabled. Notifications are enabled by default if you don't specify this parameter."},"notificationTriggers":{"type":"array","items":{"type":"string"},"description":"The alarm states that trigger a notification."},"threshold":{"type":"number","description":"The value against which the specified statistic is compared."},"treatMissingData":{"type":"string","description":"Sets how this alarm will handle missing data points."}},"requiredInputs":["comparisonOperator","evaluationPeriods","metricName","monitoredResourceName","threshold"]},"aws-native:lightsail:Bucket":{"description":"Resource Type definition for AWS::Lightsail::Bucket","properties":{"ableToUpdateBundle":{"type":"boolean","description":"Indicates whether the bundle that is currently applied to a bucket can be changed to another bundle. You can update a bucket's bundle only one time within a monthly AWS billing cycle."},"accessRules":{"$ref":"#/types/aws-native:lightsail:BucketAccessRules","description":"An object that describes the access rules for the bucket."},"bucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the bucket."},"bucketName":{"type":"string","description":"The name for the bucket.","replaceOnChanges":true},"bundleId":{"type":"string","description":"The ID of the bundle to use for the bucket."},"objectVersioning":{"type":"boolean","description":"Specifies whether to enable or disable versioning of objects in the bucket."},"readOnlyAccessAccounts":{"type":"array","items":{"type":"string"},"description":"An array of strings to specify the AWS account IDs that can access the bucket."},"resourcesReceivingAccess":{"type":"array","items":{"type":"string"},"description":"The names of the Lightsail resources for which to set bucket access."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"url":{"type":"string","description":"The URL of the bucket."}},"type":"object","required":["ableToUpdateBundle","bucketArn","bucketName","bundleId","url"],"inputProperties":{"accessRules":{"$ref":"#/types/aws-native:lightsail:BucketAccessRules","description":"An object that describes the access rules for the bucket."},"bucketName":{"type":"string","description":"The name for the bucket."},"bundleId":{"type":"string","description":"The ID of the bundle to use for the bucket."},"objectVersioning":{"type":"boolean","description":"Specifies whether to enable or disable versioning of objects in the bucket."},"readOnlyAccessAccounts":{"type":"array","items":{"type":"string"},"description":"An array of strings to specify the AWS account IDs that can access the bucket."},"resourcesReceivingAccess":{"type":"array","items":{"type":"string"},"description":"The names of the Lightsail resources for which to set bucket access."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["bundleId"]},"aws-native:lightsail:Certificate":{"description":"Resource Type definition for AWS::Lightsail::Certificate.","properties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate."},"certificateName":{"type":"string","description":"The name for the certificate.","replaceOnChanges":true},"domainName":{"type":"string","description":"The domain name (e.g., example.com ) for the certificate.","replaceOnChanges":true},"status":{"type":"string","description":"The validation status of the certificate."},"subjectAlternativeNames":{"type":"array","items":{"type":"string"},"description":"An array of strings that specify the alternate domains (e.g., example2.com) and subdomains (e.g., blog.example.com) for the certificate.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["certificateArn","certificateName","domainName","status"],"inputProperties":{"certificateName":{"type":"string","description":"The name for the certificate."},"domainName":{"type":"string","description":"The domain name (e.g., example.com ) for the certificate."},"subjectAlternativeNames":{"type":"array","items":{"type":"string"},"description":"An array of strings that specify the alternate domains (e.g., example2.com) and subdomains (e.g., blog.example.com) for the certificate."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["domainName"]},"aws-native:lightsail:Container":{"description":"Resource Type definition for AWS::Lightsail::Container","properties":{"containerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container."},"containerServiceDeployment":{"$ref":"#/types/aws-native:lightsail:ContainerServiceDeployment","description":"Describes a container deployment configuration of an Amazon Lightsail container service."},"isDisabled":{"type":"boolean","description":"A Boolean value to indicate whether the container service is disabled."},"power":{"type":"string","description":"The power specification for the container service."},"principalArn":{"type":"string","description":"The principal ARN of the container service."},"privateRegistryAccess":{"$ref":"#/types/aws-native:lightsail:ContainerPrivateRegistryAccess","description":"A Boolean value to indicate whether the container service has access to private container image repositories, such as Amazon Elastic Container Registry (Amazon ECR) private repositories."},"publicDomainNames":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:ContainerPublicDomainName"},"description":"The public domain names to use with the container service, such as example.com and www.example.com."},"scale":{"type":"integer","description":"The scale specification for the container service."},"serviceName":{"type":"string","description":"The name for the container service.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"url":{"type":"string","description":"The publicly accessible URL of the container service."}},"type":"object","required":["containerArn","power","principalArn","scale","serviceName","url"],"inputProperties":{"containerServiceDeployment":{"$ref":"#/types/aws-native:lightsail:ContainerServiceDeployment","description":"Describes a container deployment configuration of an Amazon Lightsail container service."},"isDisabled":{"type":"boolean","description":"A Boolean value to indicate whether the container service is disabled."},"power":{"type":"string","description":"The power specification for the container service."},"privateRegistryAccess":{"$ref":"#/types/aws-native:lightsail:ContainerPrivateRegistryAccess","description":"A Boolean value to indicate whether the container service has access to private container image repositories, such as Amazon Elastic Container Registry (Amazon ECR) private repositories."},"publicDomainNames":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:ContainerPublicDomainName"},"description":"The public domain names to use with the container service, such as example.com and www.example.com."},"scale":{"type":"integer","description":"The scale specification for the container service."},"serviceName":{"type":"string","description":"The name for the container service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["power","scale","serviceName"]},"aws-native:lightsail:Database":{"description":"Resource Type definition for AWS::Lightsail::Database","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your new database. Use the us-east-2a case-sensitive format.","replaceOnChanges":true},"backupRetention":{"type":"boolean","description":"When true, enables automated backup retention for your database. Updates are applied during the next maintenance window because this can result in an outage."},"caCertificateIdentifier":{"type":"string","description":"Indicates the certificate that needs to be associated with the database."},"databaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database (for example, `arn:aws:lightsail:us-east-2:123456789101:RelationalDatabase/244ad76f-8aad-4741-809f-12345EXAMPLE` )."},"masterDatabaseName":{"type":"string","description":"The name of the database to create when the Lightsail database resource is created. For MySQL, if this parameter isn't specified, no database is created in the database resource. For PostgreSQL, if this parameter isn't specified, a database named postgres is created in the database resource.","replaceOnChanges":true},"masterUserPassword":{"type":"string","description":"The password for the master user. The password can include any printable ASCII character except \"/\", \"\"\", or \"@\". It cannot contain spaces."},"masterUsername":{"type":"string","description":"The name for the master user.","replaceOnChanges":true},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created for your new database if automated backups are enabled."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur on your new database."},"publiclyAccessible":{"type":"boolean","description":"Specifies the accessibility options for your new database. A value of true specifies a database that is available to resources outside of your Lightsail account. A value of false specifies a database that is available only to your Lightsail resources in the same region as your database."},"relationalDatabaseBlueprintId":{"type":"string","description":"The blueprint ID for your new database. A blueprint describes the major engine version of a database.","replaceOnChanges":true},"relationalDatabaseBundleId":{"type":"string","description":"The bundle ID for your new database. A bundle describes the performance specifications for your database.","replaceOnChanges":true},"relationalDatabaseName":{"type":"string","description":"The name to use for your new Lightsail database resource.","replaceOnChanges":true},"relationalDatabaseParameters":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:DatabaseRelationalDatabaseParameter"},"description":"Update one or more parameters of the relational database."},"rotateMasterUserPassword":{"type":"boolean","description":"When true, the master user password is changed to a new strong password generated by Lightsail. Use the get relational database master user password operation to get the new password."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["databaseArn","masterDatabaseName","masterUsername","relationalDatabaseBlueprintId","relationalDatabaseBundleId","relationalDatabaseName"],"inputProperties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your new database. Use the us-east-2a case-sensitive format."},"backupRetention":{"type":"boolean","description":"When true, enables automated backup retention for your database. Updates are applied during the next maintenance window because this can result in an outage."},"caCertificateIdentifier":{"type":"string","description":"Indicates the certificate that needs to be associated with the database."},"masterDatabaseName":{"type":"string","description":"The name of the database to create when the Lightsail database resource is created. For MySQL, if this parameter isn't specified, no database is created in the database resource. For PostgreSQL, if this parameter isn't specified, a database named postgres is created in the database resource."},"masterUserPassword":{"type":"string","description":"The password for the master user. The password can include any printable ASCII character except \"/\", \"\"\", or \"@\". It cannot contain spaces."},"masterUsername":{"type":"string","description":"The name for the master user."},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created for your new database if automated backups are enabled."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur on your new database."},"publiclyAccessible":{"type":"boolean","description":"Specifies the accessibility options for your new database. A value of true specifies a database that is available to resources outside of your Lightsail account. A value of false specifies a database that is available only to your Lightsail resources in the same region as your database."},"relationalDatabaseBlueprintId":{"type":"string","description":"The blueprint ID for your new database. A blueprint describes the major engine version of a database."},"relationalDatabaseBundleId":{"type":"string","description":"The bundle ID for your new database. A bundle describes the performance specifications for your database."},"relationalDatabaseName":{"type":"string","description":"The name to use for your new Lightsail database resource."},"relationalDatabaseParameters":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:DatabaseRelationalDatabaseParameter"},"description":"Update one or more parameters of the relational database."},"rotateMasterUserPassword":{"type":"boolean","description":"When true, the master user password is changed to a new strong password generated by Lightsail. Use the get relational database master user password operation to get the new password."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["masterDatabaseName","masterUsername","relationalDatabaseBlueprintId","relationalDatabaseBundleId","relationalDatabaseName"]},"aws-native:lightsail:DatabaseSnapshot":{"description":"Resource Type definition for AWS::Lightsail::DatabaseSnapshot","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database snapshot."},"createdAt":{"type":"string","description":"The timestamp when the database snapshot was created."},"engine":{"type":"string","description":"The software of the database snapshot (for example, MySQL)."},"engineVersion":{"type":"string","description":"The database engine version for the database snapshot (for example, 5.7.23)."},"fromRelationalDatabaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database from which the database snapshot was created."},"fromRelationalDatabaseBlueprintId":{"type":"string","description":"The blueprint ID of the database from which the database snapshot was created. A blueprint describes the major engine version of a database."},"fromRelationalDatabaseBundleId":{"type":"string","description":"The bundle ID of the database from which the database snapshot was created."},"fromRelationalDatabaseName":{"type":"string","description":"The name of the source database from which the database snapshot was created."},"location":{"$ref":"#/types/aws-native:lightsail:LocationProperties","description":"The Region name and Availability Zone where the database snapshot is located."},"name":{"type":"string","description":"The name of the database snapshot."},"relationalDatabaseName":{"type":"string","description":"The name of the database on which to base your new snapshot.","replaceOnChanges":true},"relationalDatabaseSnapshotName":{"type":"string","description":"The name for your new database snapshot.","replaceOnChanges":true},"resourceType":{"$ref":"#/types/aws-native:lightsail:DatabaseSnapshotResourceType","description":"The Lightsail resource type."},"sizeInGb":{"type":"integer","description":"The size of the disk in GB (for example, 32) for the database snapshot."},"state":{"type":"string","description":"The state of the database snapshot."},"supportCode":{"type":"string","description":"The support code for the database snapshot. Include this code in your email to support when you have questions about a database snapshot in Lightsail. This code enables our support team to look up your Lightsail information more easily."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","createdAt","engine","engineVersion","fromRelationalDatabaseArn","fromRelationalDatabaseBlueprintId","fromRelationalDatabaseBundleId","fromRelationalDatabaseName","location","name","relationalDatabaseName","relationalDatabaseSnapshotName","resourceType","sizeInGb","state","supportCode"],"inputProperties":{"relationalDatabaseName":{"type":"string","description":"The name of the database on which to base your new snapshot."},"relationalDatabaseSnapshotName":{"type":"string","description":"The name for your new database snapshot."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["relationalDatabaseName","relationalDatabaseSnapshotName"]},"aws-native:lightsail:Disk":{"description":"Resource Type definition for AWS::Lightsail::Disk","properties":{"addOns":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:DiskAddOn"},"description":"An array of objects representing the add-ons to enable for the new instance."},"attachedTo":{"type":"string","description":"Name of the attached Lightsail Instance"},"attachmentState":{"type":"string","description":"Attachment State of the Lightsail disk"},"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your instance. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request.","replaceOnChanges":true},"diskArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the disk."},"diskName":{"type":"string","description":"The names to use for your new Lightsail disk.","replaceOnChanges":true},"iops":{"type":"integer","description":"Iops of the Lightsail disk"},"isAttached":{"type":"boolean","description":"Check is Disk is attached state"},"location":{"$ref":"#/types/aws-native:lightsail:DiskLocation","description":"The AWS Region and Availability Zone where the disk is located."},"path":{"type":"string","description":"Path of the  attached Disk"},"resourceType":{"type":"string","description":"Resource type of Lightsail instance."},"sizeInGb":{"type":"integer","description":"Size of the Lightsail disk","replaceOnChanges":true},"state":{"type":"string","description":"State of the Lightsail disk"},"supportCode":{"type":"string","description":"Support code to help identify any issues"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["attachedTo","attachmentState","diskArn","diskName","iops","isAttached","path","resourceType","sizeInGb","state","supportCode"],"inputProperties":{"addOns":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:DiskAddOn"},"description":"An array of objects representing the add-ons to enable for the new instance."},"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your instance. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request."},"diskName":{"type":"string","description":"The names to use for your new Lightsail disk."},"location":{"$ref":"#/types/aws-native:lightsail:DiskLocation","description":"The AWS Region and Availability Zone where the disk is located."},"sizeInGb":{"type":"integer","description":"Size of the Lightsail disk"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["sizeInGb"]},"aws-native:lightsail:DiskSnapshot":{"description":"Resource Type definition for AWS::Lightsail::DiskSnapshot","properties":{"createdAt":{"type":"string","description":"The timestamp when the disk snapshot was created."},"diskName":{"type":"string","description":"The name of the source disk from which the snapshot was created.","replaceOnChanges":true},"diskSnapshotArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the disk snapshot."},"diskSnapshotName":{"type":"string","description":"The name of the disk snapshot (e.g., my-disk-snapshot).","replaceOnChanges":true},"fromDiskName":{"type":"string","description":"The name of the source disk from which the disk snapshot was created."},"isFromAutoSnapshot":{"type":"boolean","description":"A Boolean value indicating whether the snapshot was created from an automatic snapshot."},"location":{"$ref":"#/types/aws-native:lightsail:LocationProperties","description":"The AWS Region and Availability Zone where the disk snapshot was created."},"progress":{"type":"string","description":"The progress of the disk snapshot creation operation."},"resourceType":{"$ref":"#/types/aws-native:lightsail:DiskSnapshotResourceType","description":"The Lightsail resource type (DiskSnapshot)."},"sizeInGb":{"type":"integer","description":"The size of the disk snapshot in GB."},"state":{"$ref":"#/types/aws-native:lightsail:DiskSnapshotState","description":"The status of the disk snapshot operation."},"supportCode":{"type":"string","description":"The support code. Include this code in your email to support when you have questions about an instance or another resource in Lightsail."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["createdAt","diskName","diskSnapshotArn","diskSnapshotName","fromDiskName","isFromAutoSnapshot","location","progress","resourceType","sizeInGb","state","supportCode"],"inputProperties":{"diskName":{"type":"string","description":"The name of the source disk from which the snapshot was created."},"diskSnapshotName":{"type":"string","description":"The name of the disk snapshot (e.g., my-disk-snapshot)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["diskName"]},"aws-native:lightsail:Instance":{"description":"Resource Type definition for AWS::Lightsail::Instance","properties":{"addOns":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:InstanceAddOn"},"description":"An array of objects representing the add-ons to enable for the new instance."},"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your instance. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request.","replaceOnChanges":true},"blueprintId":{"type":"string","description":"The ID for a virtual private server image (e.g., app_wordpress_4_4 or app_lamp_7_0 ). Use the get blueprints operation to return a list of available images (or blueprints ).","replaceOnChanges":true},"bundleId":{"type":"string","description":"The bundle of specification information for your virtual private server (or instance ), including the pricing plan (e.g., micro_1_0 ).","replaceOnChanges":true},"hardware":{"$ref":"#/types/aws-native:lightsail:InstanceHardware","description":"The hardware properties for the instance, such as the vCPU count, attached disks, and amount of RAM.\n\n\u003e The instance restarts when performing an attach disk or detach disk request. This resets the public IP address of your instance if a static IP isn't attached to it."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance (for example, `arn:aws:lightsail:us-east-2:123456789101:Instance/244ad76f-8aad-4741-809f-12345EXAMPLE` )."},"instanceName":{"type":"string","description":"The names to use for your new Lightsail instance.","replaceOnChanges":true},"ipv6Addresses":{"type":"array","items":{"type":"string"},"description":"IPv6 addresses of the instance"},"isStaticIp":{"type":"boolean","description":"Is the IP Address of the Instance is the static IP"},"keyPairName":{"type":"string","description":"The name of your key pair."},"location":{"$ref":"#/types/aws-native:lightsail:InstanceLocation","description":"The location for the instance, such as the AWS Region and Availability Zone.\n\n\u003e The `Location` property is read-only and should not be specified in a create instance or update instance request."},"networking":{"$ref":"#/types/aws-native:lightsail:InstanceNetworking","description":"The public ports and the monthly amount of data transfer allocated for the instance."},"privateIpAddress":{"type":"string","description":"Private IP Address of the Instance"},"publicIpAddress":{"type":"string","description":"Public IP Address of the Instance"},"resourceType":{"type":"string","description":"Resource type of Lightsail instance."},"sshKeyName":{"type":"string","description":"SSH Key Name of the  Lightsail instance."},"state":{"$ref":"#/types/aws-native:lightsail:InstanceState","description":"The status code and the state (for example, `running` ) of the instance.\n\n\u003e The `State` property is read-only and should not be specified in a create instance or update instance request."},"supportCode":{"type":"string","description":"Support code to help identify any issues"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"userData":{"type":"string","description":"A launch script you can create that configures a server with additional user data. For example, you might want to run apt-get -y update."},"userName":{"type":"string","description":"Username of the  Lightsail instance."}},"type":"object","required":["blueprintId","bundleId","instanceArn","instanceName","ipv6Addresses","isStaticIp","privateIpAddress","publicIpAddress","resourceType","sshKeyName","supportCode","userName"],"inputProperties":{"addOns":{"type":"array","items":{"$ref":"#/types/aws-native:lightsail:InstanceAddOn"},"description":"An array of objects representing the add-ons to enable for the new instance."},"availabilityZone":{"type":"string","description":"The Availability Zone in which to create your instance. Use the following format: us-east-2a (case sensitive). Be sure to add the include Availability Zones parameter to your request."},"blueprintId":{"type":"string","description":"The ID for a virtual private server image (e.g., app_wordpress_4_4 or app_lamp_7_0 ). Use the get blueprints operation to return a list of available images (or blueprints )."},"bundleId":{"type":"string","description":"The bundle of specification information for your virtual private server (or instance ), including the pricing plan (e.g., micro_1_0 )."},"hardware":{"$ref":"#/types/aws-native:lightsail:InstanceHardware","description":"The hardware properties for the instance, such as the vCPU count, attached disks, and amount of RAM.\n\n\u003e The instance restarts when performing an attach disk or detach disk request. This resets the public IP address of your instance if a static IP isn't attached to it."},"instanceName":{"type":"string","description":"The names to use for your new Lightsail instance."},"keyPairName":{"type":"string","description":"The name of your key pair."},"location":{"$ref":"#/types/aws-native:lightsail:InstanceLocation","description":"The location for the instance, such as the AWS Region and Availability Zone.\n\n\u003e The `Location` property is read-only and should not be specified in a create instance or update instance request."},"networking":{"$ref":"#/types/aws-native:lightsail:InstanceNetworking","description":"The public ports and the monthly amount of data transfer allocated for the instance."},"state":{"$ref":"#/types/aws-native:lightsail:InstanceState","description":"The status code and the state (for example, `running` ) of the instance.\n\n\u003e The `State` property is read-only and should not be specified in a create instance or update instance request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"userData":{"type":"string","description":"A launch script you can create that configures a server with additional user data. For example, you might want to run apt-get -y update."}},"requiredInputs":["blueprintId","bundleId"]},"aws-native:lightsail:InstanceSnapshot":{"description":"Resource Type definition for AWS::Lightsail::InstanceSnapshot","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the snapshot."},"fromInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance from which the snapshot was created."},"fromInstanceName":{"type":"string","description":"The instance from which the snapshot was created."},"instanceName":{"type":"string","description":"The instance from which the snapshot was created.","replaceOnChanges":true},"instanceSnapshotName":{"type":"string","description":"The name of the snapshot.","replaceOnChanges":true},"isFromAutoSnapshot":{"type":"boolean","description":"A Boolean value indicating whether the snapshot was created from an automatic snapshot."},"location":{"$ref":"#/types/aws-native:lightsail:InstanceSnapshotLocation"},"resourceType":{"type":"string","description":"The type of resource (usually InstanceSnapshot)."},"sizeInGb":{"type":"integer","description":"The size in GB of the SSD"},"state":{"type":"string","description":"The state the snapshot is in."},"supportCode":{"type":"string","description":"Support code to help identify any issues"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","fromInstanceArn","fromInstanceName","instanceName","instanceSnapshotName","isFromAutoSnapshot","location","resourceType","sizeInGb","state","supportCode"],"inputProperties":{"instanceName":{"type":"string","description":"The instance from which the snapshot was created."},"instanceSnapshotName":{"type":"string","description":"The name of the snapshot."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["instanceName"]},"aws-native:lightsail:LoadBalancer":{"description":"Resource Type definition for AWS::Lightsail::LoadBalancer","properties":{"attachedInstances":{"type":"array","items":{"type":"string"},"description":"The names of the instances attached to the load balancer."},"healthCheckPath":{"type":"string","description":"The path you provided to perform the load balancer health check. If you didn't specify a health check path, Lightsail uses the root path of your website (e.g., \"/\")."},"instancePort":{"type":"integer","description":"The instance port where you're creating your load balancer.","replaceOnChanges":true},"ipAddressType":{"type":"string","description":"The IP address type for the load balancer. The possible values are ipv4 for IPv4 only, and dualstack for IPv4 and IPv6. The default value is dualstack.","replaceOnChanges":true},"loadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the load balancer."},"loadBalancerName":{"type":"string","description":"The name of your load balancer.","replaceOnChanges":true},"sessionStickinessEnabled":{"type":"boolean","description":"Configuration option to enable session stickiness."},"sessionStickinessLbCookieDurationSeconds":{"type":"string","description":"Configuration option to adjust session stickiness cookie duration parameter."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"tlsPolicyName":{"type":"string","description":"The name of the TLS policy to apply to the load balancer."}},"type":"object","required":["instancePort","loadBalancerArn","loadBalancerName"],"inputProperties":{"attachedInstances":{"type":"array","items":{"type":"string"},"description":"The names of the instances attached to the load balancer."},"healthCheckPath":{"type":"string","description":"The path you provided to perform the load balancer health check. If you didn't specify a health check path, Lightsail uses the root path of your website (e.g., \"/\")."},"instancePort":{"type":"integer","description":"The instance port where you're creating your load balancer."},"ipAddressType":{"type":"string","description":"The IP address type for the load balancer. The possible values are ipv4 for IPv4 only, and dualstack for IPv4 and IPv6. The default value is dualstack."},"loadBalancerName":{"type":"string","description":"The name of your load balancer."},"sessionStickinessEnabled":{"type":"boolean","description":"Configuration option to enable session stickiness."},"sessionStickinessLbCookieDurationSeconds":{"type":"string","description":"Configuration option to adjust session stickiness cookie duration parameter."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"tlsPolicyName":{"type":"string","description":"The name of the TLS policy to apply to the load balancer."}},"requiredInputs":["instancePort"]},"aws-native:lightsail:LoadBalancerTlsCertificate":{"description":"Resource Type definition for AWS::Lightsail::LoadBalancerTlsCertificate","properties":{"certificateAlternativeNames":{"type":"array","items":{"type":"string"},"description":"An array of strings listing alternative domains and subdomains for your SSL/TLS certificate.","replaceOnChanges":true},"certificateDomainName":{"type":"string","description":"The domain name (e.g., example.com ) for your SSL/TLS certificate.","replaceOnChanges":true},"certificateName":{"type":"string","description":"The SSL/TLS certificate name.","replaceOnChanges":true},"httpsRedirectionEnabled":{"type":"boolean","description":"A Boolean value that indicates whether HTTPS redirection is enabled for the load balancer."},"isAttached":{"type":"boolean","description":"When true, the SSL/TLS certificate is attached to the Lightsail load balancer."},"loadBalancerName":{"type":"string","description":"The name of your load balancer.","replaceOnChanges":true},"loadBalancerTlsCertificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SSL/TLS certificate."},"status":{"type":"string","description":"The validation status of the SSL/TLS certificate."}},"type":"object","required":["certificateDomainName","certificateName","loadBalancerName","loadBalancerTlsCertificateArn","status"],"inputProperties":{"certificateAlternativeNames":{"type":"array","items":{"type":"string"},"description":"An array of strings listing alternative domains and subdomains for your SSL/TLS certificate."},"certificateDomainName":{"type":"string","description":"The domain name (e.g., example.com ) for your SSL/TLS certificate."},"certificateName":{"type":"string","description":"The SSL/TLS certificate name."},"httpsRedirectionEnabled":{"type":"boolean","description":"A Boolean value that indicates whether HTTPS redirection is enabled for the load balancer."},"isAttached":{"type":"boolean","description":"When true, the SSL/TLS certificate is attached to the Lightsail load balancer."},"loadBalancerName":{"type":"string","description":"The name of your load balancer."}},"requiredInputs":["certificateDomainName","loadBalancerName"]},"aws-native:lightsail:StaticIp":{"description":"Resource Type definition for AWS::Lightsail::StaticIp","properties":{"attachedTo":{"type":"string","description":"The instance where the static IP is attached."},"ipAddress":{"type":"string","description":"The static IP address."},"isAttached":{"type":"boolean","description":"A Boolean value indicating whether the static IP is attached."},"staticIpArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the static IP (for example, `arn:aws:lightsail:us-east-2:123456789101:StaticIp/244ad76f-8aad-4741-809f-12345EXAMPLE` )."},"staticIpName":{"type":"string","description":"The name of the static IP address.","replaceOnChanges":true}},"type":"object","required":["ipAddress","isAttached","staticIpArn","staticIpName"],"inputProperties":{"attachedTo":{"type":"string","description":"The instance where the static IP is attached."},"staticIpName":{"type":"string","description":"The name of the static IP address."}}},"aws-native:location:ApiKey":{"description":"Definition of AWS::Location::APIKey Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS ."},"createTime":{"type":"string","description":"The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ."},"description":{"type":"string","description":"Updates the description for the API key resource."},"expireTime":{"type":"string","description":"The optional timestamp for when the API key resource will expire in [ISO 8601 format](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) ."},"forceDelete":{"type":"boolean","description":"ForceDelete bypasses an API key's expiry conditions and deletes the key. Set the parameter `true` to delete the key or to `false` to not preemptively delete the API key.\n\nValid values: `true` , or `false` .\n\n\u003e This action is irreversible. Only use ForceDelete if you are certain the key is no longer in use."},"forceUpdate":{"type":"boolean","description":"The boolean flag to be included for updating `ExpireTime` or Restrictions details.\nMust be set to `true` to update an API key resource that has been used in the past 7 days. `False` if force update is not preferred."},"keyArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS ."},"keyName":{"type":"string","description":"A custom name for the API key resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique API key name.\n- No spaces allowed. For example, `ExampleAPIKey` .","replaceOnChanges":true},"noExpiry":{"type":"boolean","description":"Whether the API key should expire. Set to `true` to set the API key to have no expiration time."},"restrictions":{"$ref":"#/types/aws-native:location:ApiKeyRestrictions","description":"The API key restrictions for the API key resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"updateTime":{"type":"string","description":"The timestamp for when the API key resource was last updated in ISO 8601 format: `YYYY-MM-DDThh:mm:ss.sssZ` ."}},"type":"object","required":["arn","createTime","keyArn","keyName","restrictions","updateTime"],"inputProperties":{"description":{"type":"string","description":"Updates the description for the API key resource."},"expireTime":{"type":"string","description":"The optional timestamp for when the API key resource will expire in [ISO 8601 format](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) ."},"forceDelete":{"type":"boolean","description":"ForceDelete bypasses an API key's expiry conditions and deletes the key. Set the parameter `true` to delete the key or to `false` to not preemptively delete the API key.\n\nValid values: `true` , or `false` .\n\n\u003e This action is irreversible. Only use ForceDelete if you are certain the key is no longer in use."},"forceUpdate":{"type":"boolean","description":"The boolean flag to be included for updating `ExpireTime` or Restrictions details.\nMust be set to `true` to update an API key resource that has been used in the past 7 days. `False` if force update is not preferred."},"keyName":{"type":"string","description":"A custom name for the API key resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique API key name.\n- No spaces allowed. For example, `ExampleAPIKey` ."},"noExpiry":{"type":"boolean","description":"Whether the API key should expire. Set to `true` to set the API key to have no expiration time."},"restrictions":{"$ref":"#/types/aws-native:location:ApiKeyRestrictions","description":"The API key restrictions for the API key resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["restrictions"]},"aws-native:location:GeofenceCollection":{"description":"Definition of AWS::Location::GeofenceCollection Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the geofence collection resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:geofence-collection/ExampleGeofenceCollection`"},"collectionArn":{"type":"string","description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the geofence collection resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:geofence-collection/ExampleGeofenceCollection`"},"collectionName":{"type":"string","description":"A custom name for the geofence collection.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique geofence collection name.\n- No spaces allowed. For example, `ExampleGeofenceCollection` .","replaceOnChanges":true},"createTime":{"type":"string","description":"The timestamp for when the geofence collection resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."},"description":{"type":"string","description":"An optional description for the geofence collection."},"kmsKeyId":{"type":"string","description":"A key identifier for an [AWS KMS customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html) . Enter a key ID, key ARN, alias name, or alias ARN.","replaceOnChanges":true},"pricingPlan":{"$ref":"#/types/aws-native:location:GeofenceCollectionPricingPlan"},"pricingPlanDataSource":{"type":"string","description":"This shape is deprecated since 2022-02-01: Deprecated. No longer allowed."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"updateTime":{"type":"string","description":"The timestamp for when the geofence collection resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."}},"type":"object","required":["arn","collectionArn","collectionName","createTime","updateTime"],"inputProperties":{"collectionName":{"type":"string","description":"A custom name for the geofence collection.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique geofence collection name.\n- No spaces allowed. For example, `ExampleGeofenceCollection` ."},"description":{"type":"string","description":"An optional description for the geofence collection."},"kmsKeyId":{"type":"string","description":"A key identifier for an [AWS KMS customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html) . Enter a key ID, key ARN, alias name, or alias ARN."},"pricingPlan":{"$ref":"#/types/aws-native:location:GeofenceCollectionPricingPlan"},"pricingPlanDataSource":{"type":"string","description":"This shape is deprecated since 2022-02-01: Deprecated. No longer allowed."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:location:Map":{"description":"Definition of AWS::Location::Map Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the map resource. Used to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:maps/ExampleMap`"},"configuration":{"$ref":"#/types/aws-native:location:MapConfiguration","description":"Specifies the `MapConfiguration` , including the map style, for the map resource that you create. The map style defines the look of maps and the data provider for your map resource.","replaceOnChanges":true},"createTime":{"type":"string","description":"The timestamp for when the map resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."},"description":{"type":"string","description":"An optional description for the map resource."},"mapArn":{"type":"string","description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the map resource. Used to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:maps/ExampleMap`"},"mapName":{"type":"string","description":"The name for the map resource.\n\nRequirements:\n\n- Must contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique map resource name.\n- No spaces allowed. For example, `ExampleMap` .","replaceOnChanges":true},"pricingPlan":{"$ref":"#/types/aws-native:location:MapPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"updateTime":{"type":"string","description":"The timestamp for when the map resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."}},"type":"object","required":["arn","configuration","createTime","mapArn","mapName","updateTime"],"inputProperties":{"configuration":{"$ref":"#/types/aws-native:location:MapConfiguration","description":"Specifies the `MapConfiguration` , including the map style, for the map resource that you create. The map style defines the look of maps and the data provider for your map resource."},"description":{"type":"string","description":"An optional description for the map resource."},"mapName":{"type":"string","description":"The name for the map resource.\n\nRequirements:\n\n- Must contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique map resource name.\n- No spaces allowed. For example, `ExampleMap` ."},"pricingPlan":{"$ref":"#/types/aws-native:location:MapPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["configuration"]},"aws-native:location:PlaceIndex":{"description":"Definition of AWS::Location::PlaceIndex Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the place index resource. Used to specify a resource across AWS .\n\n- Format example: `arn:aws:geo:region:account-id:place-index/ExamplePlaceIndex`"},"createTime":{"type":"string","description":"The timestamp for when the place index resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."},"dataSource":{"type":"string","description":"Specifies the geospatial data provider for the new place index.\n\n\u003e This field is case-sensitive. Enter the valid values as shown. For example, entering `HERE` returns an error. \n\nValid values include:\n\n- `Esri` – For additional information about [Esri](https://docs.aws.amazon.com/location/previous/developerguide/esri.html) 's coverage in your region of interest, see [Esri details on geocoding coverage](https://docs.aws.amazon.com/https://developers.arcgis.com/rest/geocode/api-reference/geocode-coverage.htm) .\n- `Grab` – Grab provides place index functionality for Southeast Asia. For additional information about [GrabMaps](https://docs.aws.amazon.com/location/previous/developerguide/grab.html) ' coverage, see [GrabMaps countries and areas covered](https://docs.aws.amazon.com/location/previous/developerguide/grab.html#grab-coverage-area) .\n- `Here` – For additional information about [HERE Technologies](https://docs.aws.amazon.com/location/previous/developerguide/HERE.html) ' coverage in your region of interest, see [HERE details on goecoding coverage](https://docs.aws.amazon.com/https://developer.here.com/documentation/geocoder/dev_guide/topics/coverage-geocoder.html) .\n\n\u003e If you specify HERE Technologies ( `Here` ) as the data provider, you may not [store results](https://docs.aws.amazon.com//location-places/latest/APIReference/API_DataSourceConfiguration.html) for locations in Japan. For more information, see the [AWS service terms](https://docs.aws.amazon.com/service-terms/) for Amazon Location Service.\n\nFor additional information , see [Data providers](https://docs.aws.amazon.com/location/previous/developerguide/what-is-data-provider.html) on the *Amazon Location Service developer guide* .","replaceOnChanges":true},"dataSourceConfiguration":{"$ref":"#/types/aws-native:location:PlaceIndexDataSourceConfiguration","description":"Specifies the data storage option requesting Places."},"description":{"type":"string","description":"The optional description for the place index resource."},"indexArn":{"type":"string","description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the place index resource. Used to specify a resource across AWS .\n\n- Format example: `arn:aws:geo:region:account-id:place-index/ExamplePlaceIndex`"},"indexName":{"type":"string","description":"The name of the place index resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique place index resource name.\n- No spaces allowed. For example, `ExamplePlaceIndex` .","replaceOnChanges":true},"pricingPlan":{"$ref":"#/types/aws-native:location:PlaceIndexPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"updateTime":{"type":"string","description":"The timestamp for when the place index resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."}},"type":"object","required":["arn","createTime","dataSource","indexArn","indexName","updateTime"],"inputProperties":{"dataSource":{"type":"string","description":"Specifies the geospatial data provider for the new place index.\n\n\u003e This field is case-sensitive. Enter the valid values as shown. For example, entering `HERE` returns an error. \n\nValid values include:\n\n- `Esri` – For additional information about [Esri](https://docs.aws.amazon.com/location/previous/developerguide/esri.html) 's coverage in your region of interest, see [Esri details on geocoding coverage](https://docs.aws.amazon.com/https://developers.arcgis.com/rest/geocode/api-reference/geocode-coverage.htm) .\n- `Grab` – Grab provides place index functionality for Southeast Asia. For additional information about [GrabMaps](https://docs.aws.amazon.com/location/previous/developerguide/grab.html) ' coverage, see [GrabMaps countries and areas covered](https://docs.aws.amazon.com/location/previous/developerguide/grab.html#grab-coverage-area) .\n- `Here` – For additional information about [HERE Technologies](https://docs.aws.amazon.com/location/previous/developerguide/HERE.html) ' coverage in your region of interest, see [HERE details on goecoding coverage](https://docs.aws.amazon.com/https://developer.here.com/documentation/geocoder/dev_guide/topics/coverage-geocoder.html) .\n\n\u003e If you specify HERE Technologies ( `Here` ) as the data provider, you may not [store results](https://docs.aws.amazon.com//location-places/latest/APIReference/API_DataSourceConfiguration.html) for locations in Japan. For more information, see the [AWS service terms](https://docs.aws.amazon.com/service-terms/) for Amazon Location Service.\n\nFor additional information , see [Data providers](https://docs.aws.amazon.com/location/previous/developerguide/what-is-data-provider.html) on the *Amazon Location Service developer guide* ."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:location:PlaceIndexDataSourceConfiguration","description":"Specifies the data storage option requesting Places."},"description":{"type":"string","description":"The optional description for the place index resource."},"indexName":{"type":"string","description":"The name of the place index resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique place index resource name.\n- No spaces allowed. For example, `ExamplePlaceIndex` ."},"pricingPlan":{"$ref":"#/types/aws-native:location:PlaceIndexPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["dataSource"]},"aws-native:location:RouteCalculator":{"description":"Definition of AWS::Location::RouteCalculator Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the route calculator resource. Use the ARN when you specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:route-calculator/ExampleCalculator`"},"calculatorArn":{"type":"string","description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the route calculator resource. Use the ARN when you specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:route-calculator/ExampleCalculator`"},"calculatorName":{"type":"string","description":"The name of the route calculator resource.\n\nRequirements:\n\n- Can use alphanumeric characters (A–Z, a–z, 0–9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique Route calculator resource name.\n- No spaces allowed. For example, `ExampleRouteCalculator` .","replaceOnChanges":true},"createTime":{"type":"string","description":"The timestamp for when the route calculator resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."},"dataSource":{"type":"string","description":"Specifies the data provider of traffic and road network data.\n\n\u003e This field is case-sensitive. Enter the valid values as shown. For example, entering `HERE` returns an error. \n\nValid values include:\n\n- `Esri` – For additional information about [Esri](https://docs.aws.amazon.com/location/previous/developerguide/esri.html) 's coverage in your region of interest, see [Esri details on street networks and traffic coverage](https://docs.aws.amazon.com/https://doc.arcgis.com/en/arcgis-online/reference/network-coverage.htm) .\n\nRoute calculators that use Esri as a data source only calculate routes that are shorter than 400 km.\n- `Grab` – Grab provides routing functionality for Southeast Asia. For additional information about [GrabMaps](https://docs.aws.amazon.com/location/previous/developerguide/grab.html) ' coverage, see [GrabMaps countries and areas covered](https://docs.aws.amazon.com/location/previous/developerguide/grab.html#grab-coverage-area) .\n- `Here` – For additional information about [HERE Technologies](https://docs.aws.amazon.com/location/previous/developerguide/HERE.html) ' coverage in your region of interest, see [HERE car routing coverage](https://docs.aws.amazon.com/https://developer.here.com/documentation/routing-api/dev_guide/topics/coverage/car-routing.html) and [HERE truck routing coverage](https://docs.aws.amazon.com/https://developer.here.com/documentation/routing-api/dev_guide/topics/coverage/truck-routing.html) .\n\nFor additional information , see [Data providers](https://docs.aws.amazon.com/location/previous/developerguide/what-is-data-provider.html) on the *Amazon Location Service Developer Guide* .","replaceOnChanges":true},"description":{"type":"string","description":"The optional description for the route calculator resource."},"pricingPlan":{"$ref":"#/types/aws-native:location:RouteCalculatorPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"updateTime":{"type":"string","description":"The timestamp for when the route calculator resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."}},"type":"object","required":["arn","calculatorArn","calculatorName","createTime","dataSource","updateTime"],"inputProperties":{"calculatorName":{"type":"string","description":"The name of the route calculator resource.\n\nRequirements:\n\n- Can use alphanumeric characters (A–Z, a–z, 0–9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique Route calculator resource name.\n- No spaces allowed. For example, `ExampleRouteCalculator` ."},"dataSource":{"type":"string","description":"Specifies the data provider of traffic and road network data.\n\n\u003e This field is case-sensitive. Enter the valid values as shown. For example, entering `HERE` returns an error. \n\nValid values include:\n\n- `Esri` – For additional information about [Esri](https://docs.aws.amazon.com/location/previous/developerguide/esri.html) 's coverage in your region of interest, see [Esri details on street networks and traffic coverage](https://docs.aws.amazon.com/https://doc.arcgis.com/en/arcgis-online/reference/network-coverage.htm) .\n\nRoute calculators that use Esri as a data source only calculate routes that are shorter than 400 km.\n- `Grab` – Grab provides routing functionality for Southeast Asia. For additional information about [GrabMaps](https://docs.aws.amazon.com/location/previous/developerguide/grab.html) ' coverage, see [GrabMaps countries and areas covered](https://docs.aws.amazon.com/location/previous/developerguide/grab.html#grab-coverage-area) .\n- `Here` – For additional information about [HERE Technologies](https://docs.aws.amazon.com/location/previous/developerguide/HERE.html) ' coverage in your region of interest, see [HERE car routing coverage](https://docs.aws.amazon.com/https://developer.here.com/documentation/routing-api/dev_guide/topics/coverage/car-routing.html) and [HERE truck routing coverage](https://docs.aws.amazon.com/https://developer.here.com/documentation/routing-api/dev_guide/topics/coverage/truck-routing.html) .\n\nFor additional information , see [Data providers](https://docs.aws.amazon.com/location/previous/developerguide/what-is-data-provider.html) on the *Amazon Location Service Developer Guide* ."},"description":{"type":"string","description":"The optional description for the route calculator resource."},"pricingPlan":{"$ref":"#/types/aws-native:location:RouteCalculatorPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["dataSource"]},"aws-native:location:Tracker":{"description":"Definition of AWS::Location::Tracker Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the tracker resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:tracker/ExampleTracker`"},"createTime":{"type":"string","description":"The timestamp for when the tracker resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."},"description":{"type":"string","description":"An optional description for the tracker resource."},"eventBridgeEnabled":{"type":"boolean"},"kmsKeyEnableGeospatialQueries":{"type":"boolean"},"kmsKeyId":{"type":"string","description":"A key identifier for an [AWS KMS customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html) . Enter a key ID, key ARN, alias name, or alias ARN.","replaceOnChanges":true},"positionFiltering":{"$ref":"#/types/aws-native:location:TrackerPositionFiltering","description":"Specifies the position filtering for the tracker resource.\n\nValid values:\n\n- `TimeBased` - Location updates are evaluated against linked geofence collections, but not every location update is stored. If your update frequency is more often than 30 seconds, only one update per 30 seconds is stored for each unique device ID.\n- `DistanceBased` - If the device has moved less than 30 m (98.4 ft), location updates are ignored. Location updates within this area are neither evaluated against linked geofence collections, nor stored. This helps control costs by reducing the number of geofence evaluations and historical device positions to paginate through. Distance-based filtering can also reduce the effects of GPS noise when displaying device trajectories on a map.\n- `AccuracyBased` - If the device has moved less than the measured accuracy, location updates are ignored. For example, if two consecutive updates from a device have a horizontal accuracy of 5 m and 10 m, the second update is ignored if the device has moved less than 15 m. Ignored location updates are neither evaluated against linked geofence collections, nor stored. This can reduce the effects of GPS noise when displaying device trajectories on a map, and can help control your costs by reducing the number of geofence evaluations.\n\nThis field is optional. If not specified, the default value is `TimeBased` ."},"pricingPlan":{"$ref":"#/types/aws-native:location:TrackerPricingPlan"},"pricingPlanDataSource":{"type":"string","description":"This shape is deprecated since 2022-02-01: Deprecated. No longer allowed."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trackerArn":{"type":"string","description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the tracker resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:tracker/ExampleTracker`"},"trackerName":{"type":"string","description":"The name for the tracker resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A-Z, a-z, 0-9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique tracker resource name.\n- No spaces allowed. For example, `ExampleTracker` .","replaceOnChanges":true},"updateTime":{"type":"string","description":"The timestamp for when the tracker resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` ."}},"type":"object","required":["arn","createTime","trackerArn","trackerName","updateTime"],"inputProperties":{"description":{"type":"string","description":"An optional description for the tracker resource."},"eventBridgeEnabled":{"type":"boolean"},"kmsKeyEnableGeospatialQueries":{"type":"boolean"},"kmsKeyId":{"type":"string","description":"A key identifier for an [AWS KMS customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html) . Enter a key ID, key ARN, alias name, or alias ARN."},"positionFiltering":{"$ref":"#/types/aws-native:location:TrackerPositionFiltering","description":"Specifies the position filtering for the tracker resource.\n\nValid values:\n\n- `TimeBased` - Location updates are evaluated against linked geofence collections, but not every location update is stored. If your update frequency is more often than 30 seconds, only one update per 30 seconds is stored for each unique device ID.\n- `DistanceBased` - If the device has moved less than 30 m (98.4 ft), location updates are ignored. Location updates within this area are neither evaluated against linked geofence collections, nor stored. This helps control costs by reducing the number of geofence evaluations and historical device positions to paginate through. Distance-based filtering can also reduce the effects of GPS noise when displaying device trajectories on a map.\n- `AccuracyBased` - If the device has moved less than the measured accuracy, location updates are ignored. For example, if two consecutive updates from a device have a horizontal accuracy of 5 m and 10 m, the second update is ignored if the device has moved less than 15 m. Ignored location updates are neither evaluated against linked geofence collections, nor stored. This can reduce the effects of GPS noise when displaying device trajectories on a map, and can help control your costs by reducing the number of geofence evaluations.\n\nThis field is optional. If not specified, the default value is `TimeBased` ."},"pricingPlan":{"$ref":"#/types/aws-native:location:TrackerPricingPlan"},"pricingPlanDataSource":{"type":"string","description":"This shape is deprecated since 2022-02-01: Deprecated. No longer allowed."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trackerName":{"type":"string","description":"The name for the tracker resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A-Z, a-z, 0-9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique tracker resource name.\n- No spaces allowed. For example, `ExampleTracker` ."}}},"aws-native:location:TrackerConsumer":{"description":"Definition of AWS::Location::TrackerConsumer Resource Type","properties":{"consumerArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the geofence collection to be associated to tracker resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:geofence-collection/ExampleGeofenceCollectionConsumer`","replaceOnChanges":true},"trackerName":{"type":"string","description":"The name for the tracker resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A-Z, a-z, 0-9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique tracker resource name.\n- No spaces allowed. For example, `ExampleTracker` .","replaceOnChanges":true}},"type":"object","required":["consumerArn","trackerName"],"inputProperties":{"consumerArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the geofence collection to be associated to tracker resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:geofence-collection/ExampleGeofenceCollectionConsumer`"},"trackerName":{"type":"string","description":"The name for the tracker resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A-Z, a-z, 0-9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique tracker resource name.\n- No spaces allowed. For example, `ExampleTracker` ."}},"requiredInputs":["consumerArn","trackerName"]},"aws-native:logs:AccountPolicy":{"description":"The AWS::Logs::AccountPolicy resource specifies a CloudWatch Logs AccountPolicy.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var accountPolicy = new AwsNative.Logs.AccountPolicy(\"accountPolicy\", new()\n    {\n        PolicyName = \"TestPolicy\",\n        PolicyDocument = \"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\",\n        PolicyType = AwsNative.Logs.AccountPolicyPolicyType.DataProtectionPolicy,\n        Scope = AwsNative.Logs.AccountPolicyScope.All,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/logs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := logs.NewAccountPolicy(ctx, \"accountPolicy\", \u0026logs.AccountPolicyArgs{\n\t\t\tPolicyName:     pulumi.String(\"TestPolicy\"),\n\t\t\tPolicyDocument: pulumi.String(\"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\"),\n\t\t\tPolicyType:     logs.AccountPolicyPolicyTypeDataProtectionPolicy,\n\t\t\tScope:          logs.AccountPolicyScopeAll,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst accountPolicy = new aws_native.logs.AccountPolicy(\"accountPolicy\", {\n    policyName: \"TestPolicy\",\n    policyDocument: \"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\",\n    policyType: aws_native.logs.AccountPolicyPolicyType.DataProtectionPolicy,\n    scope: aws_native.logs.AccountPolicyScope.All,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naccount_policy = aws_native.logs.AccountPolicy(\"accountPolicy\",\n    policy_name=\"TestPolicy\",\n    policy_document=\"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\",\n    policy_type=aws_native.logs.AccountPolicyPolicyType.DATA_PROTECTION_POLICY,\n    scope=aws_native.logs.AccountPolicyScope.ALL)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var accountPolicy = new AwsNative.Logs.AccountPolicy(\"accountPolicy\", new()\n    {\n        PolicyName = \"TestPolicy\",\n        PolicyDocument = \"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\",\n        PolicyType = AwsNative.Logs.AccountPolicyPolicyType.DataProtectionPolicy,\n        Scope = AwsNative.Logs.AccountPolicyScope.All,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/logs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := logs.NewAccountPolicy(ctx, \"accountPolicy\", \u0026logs.AccountPolicyArgs{\n\t\t\tPolicyName:     pulumi.String(\"TestPolicy\"),\n\t\t\tPolicyDocument: pulumi.String(\"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\"),\n\t\t\tPolicyType:     logs.AccountPolicyPolicyTypeDataProtectionPolicy,\n\t\t\tScope:          logs.AccountPolicyScopeAll,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst accountPolicy = new aws_native.logs.AccountPolicy(\"accountPolicy\", {\n    policyName: \"TestPolicy\",\n    policyDocument: \"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\",\n    policyType: aws_native.logs.AccountPolicyPolicyType.DataProtectionPolicy,\n    scope: aws_native.logs.AccountPolicyScope.All,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naccount_policy = aws_native.logs.AccountPolicy(\"accountPolicy\",\n    policy_name=\"TestPolicy\",\n    policy_document=\"{ \\\"Name\\\": \\\"data-protection-policy\\\", \\\"Description\\\": \\\"\\\", \\\"Version\\\": \\\"2021-06-01\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"audit-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Audit\\\": { \\\"FindingsDestination\\\": { \\\"CloudWatchLogs\\\": { \\\"LogGroup\\\": \\\"EXISTING_LOG_GROUP_NAME\\\" } } } } }, { \\\"Sid\\\": \\\"redact-policy\\\", \\\"DataIdentifier\\\": [ \\\"arn:aws:dataprotection::aws:data-identifier/EmailAddress\\\" ], \\\"Operation\\\": { \\\"Deidentify\\\": { \\\"MaskConfig\\\": {} } } } ] }\",\n    policy_type=aws_native.logs.AccountPolicyPolicyType.DATA_PROTECTION_POLICY,\n    scope=aws_native.logs.AccountPolicyScope.ALL)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"accountId":{"type":"string","description":"User account id"},"policyDocument":{"type":"string","description":"The body of the policy document you want to use for this topic.\n\nYou can only add one policy per PolicyType.\n\nThe policy must be in JSON string format.\n\nLength Constraints: Maximum length of 30720"},"policyName":{"type":"string","description":"The name of the account policy","replaceOnChanges":true},"policyType":{"$ref":"#/types/aws-native:logs:AccountPolicyPolicyType","description":"Type of the policy.","replaceOnChanges":true},"scope":{"$ref":"#/types/aws-native:logs:AccountPolicyScope","description":"Scope for policy application"},"selectionCriteria":{"type":"string","description":"Log group  selection criteria to apply policy only to a subset of log groups. SelectionCriteria string can be up to 25KB and cloudwatchlogs determines the length of selectionCriteria by using its UTF-8 bytes"}},"type":"object","required":["accountId","policyDocument","policyName","policyType"],"inputProperties":{"policyDocument":{"type":"string","description":"The body of the policy document you want to use for this topic.\n\nYou can only add one policy per PolicyType.\n\nThe policy must be in JSON string format.\n\nLength Constraints: Maximum length of 30720"},"policyName":{"type":"string","description":"The name of the account policy"},"policyType":{"$ref":"#/types/aws-native:logs:AccountPolicyPolicyType","description":"Type of the policy."},"scope":{"$ref":"#/types/aws-native:logs:AccountPolicyScope","description":"Scope for policy application"},"selectionCriteria":{"type":"string","description":"Log group  selection criteria to apply policy only to a subset of log groups. SelectionCriteria string can be up to 25KB and cloudwatchlogs determines the length of selectionCriteria by using its UTF-8 bytes"}},"requiredInputs":["policyDocument","policyType"]},"aws-native:logs:Delivery":{"description":"This structure contains information about one delivery in your account.\n\nA delivery is a connection between a logical delivery source and a logical delivery destination.\n\nFor more information, see [CreateDelivery](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateDelivery.html).","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies this delivery."},"deliveryDestinationArn":{"type":"string","description":"The ARN of the delivery destination that is associated with this delivery.","replaceOnChanges":true},"deliveryDestinationType":{"type":"string","description":"Displays whether the delivery destination associated with this delivery is CloudWatch Logs, Amazon S3, or Kinesis Data Firehose."},"deliveryId":{"type":"string","description":"The unique ID that identifies this delivery in your account."},"deliverySourceName":{"type":"string","description":"The name of the delivery source that is associated with this delivery.","replaceOnChanges":true},"fieldDelimiter":{"type":"string","description":"The field delimiter to use between record fields when the final output format of a delivery is in Plain , W3C , or Raw format."},"recordFields":{"type":"array","items":{"type":"string"},"description":"The list of record fields to be delivered to the destination, in order. If the delivery's log source has mandatory fields, they must be included in this list."},"s3EnableHiveCompatiblePath":{"type":"boolean","description":"This parameter causes the S3 objects that contain delivered logs to use a prefix structure that allows for integration with Apache Hive."},"s3SuffixPath":{"type":"string","description":"This string allows re-configuring the S3 object prefix to contain either static or variable sections. The valid variables to use in the suffix path will vary by each log source. See ConfigurationTemplate$allowedSuffixPathFields for more info on what values are supported in the suffix path for each log source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that have been assigned to this delivery."}},"type":"object","required":["arn","deliveryDestinationArn","deliveryDestinationType","deliveryId","deliverySourceName"],"inputProperties":{"deliveryDestinationArn":{"type":"string","description":"The ARN of the delivery destination that is associated with this delivery."},"deliverySourceName":{"type":"string","description":"The name of the delivery source that is associated with this delivery."},"fieldDelimiter":{"type":"string","description":"The field delimiter to use between record fields when the final output format of a delivery is in Plain , W3C , or Raw format."},"recordFields":{"type":"array","items":{"type":"string"},"description":"The list of record fields to be delivered to the destination, in order. If the delivery's log source has mandatory fields, they must be included in this list."},"s3EnableHiveCompatiblePath":{"type":"boolean","description":"This parameter causes the S3 objects that contain delivered logs to use a prefix structure that allows for integration with Apache Hive."},"s3SuffixPath":{"type":"string","description":"This string allows re-configuring the S3 object prefix to contain either static or variable sections. The valid variables to use in the suffix path will vary by each log source. See ConfigurationTemplate$allowedSuffixPathFields for more info on what values are supported in the suffix path for each log source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that have been assigned to this delivery."}},"requiredInputs":["deliveryDestinationArn","deliverySourceName"]},"aws-native:logs:DeliveryDestination":{"description":"This structure contains information about one delivery destination in your account.\n\nA delivery destination is an AWS resource that represents an AWS service that logs can be sent to CloudWatch Logs, Amazon S3, are supported as Kinesis Data Firehose delivery destinations.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies this delivery destination."},"deliveryDestinationPolicy":{"$ref":"#/types/aws-native:logs:DeliveryDestinationDestinationPolicy","description":"IAM policy that grants permissions to CloudWatch Logs to deliver logs cross-account to a specified destination in this account.\n\nThe policy must be in JSON string format.\n\nLength Constraints: Maximum length of 51200"},"deliveryDestinationType":{"type":"string","description":"Displays whether this delivery destination is CloudWatch Logs, Amazon S3, Kinesis Data Firehose, or XRay.","replaceOnChanges":true},"destinationResourceArn":{"type":"string","description":"The ARN of the Amazon Web Services destination that this delivery destination represents. That Amazon Web Services destination can be a log group in CloudWatch Logs, an Amazon S3 bucket, or a delivery stream in Firehose.","replaceOnChanges":true},"name":{"type":"string","description":"The name of this delivery destination.","replaceOnChanges":true},"outputFormat":{"type":"string","description":"The format of the logs that are sent to this delivery destination.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that have been assigned to this delivery destination."}},"type":"object","required":["arn","name"],"inputProperties":{"deliveryDestinationPolicy":{"$ref":"#/types/aws-native:logs:DeliveryDestinationDestinationPolicy","description":"IAM policy that grants permissions to CloudWatch Logs to deliver logs cross-account to a specified destination in this account.\n\nThe policy must be in JSON string format.\n\nLength Constraints: Maximum length of 51200"},"deliveryDestinationType":{"type":"string","description":"Displays whether this delivery destination is CloudWatch Logs, Amazon S3, Kinesis Data Firehose, or XRay."},"destinationResourceArn":{"type":"string","description":"The ARN of the Amazon Web Services destination that this delivery destination represents. That Amazon Web Services destination can be a log group in CloudWatch Logs, an Amazon S3 bucket, or a delivery stream in Firehose."},"name":{"type":"string","description":"The name of this delivery destination."},"outputFormat":{"type":"string","description":"The format of the logs that are sent to this delivery destination."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that have been assigned to this delivery destination."}}},"aws-native:logs:DeliverySource":{"description":" A delivery source is an AWS resource that sends logs to an AWS destination. The destination can be CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.\n\nOnly some AWS services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at [Enabling logging from AWS services](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html).","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies this delivery source."},"logType":{"type":"string","description":"The type of logs being delivered. Only mandatory when the resourceArn could match more than one. In such a case, the error message will contain all the possible options."},"name":{"type":"string","description":"The unique name of the Log source.","replaceOnChanges":true},"resourceArn":{"type":"string","description":"The ARN of the resource that will be sending the logs."},"resourceArns":{"type":"array","items":{"type":"string"},"description":"This array contains the ARN of the AWS resource that sends logs and is represented by this delivery source. Currently, only one ARN can be in the array."},"service":{"type":"string","description":"The AWS service that is sending logs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that have been assigned to this delivery source."}},"type":"object","required":["arn","name","resourceArns","service"],"inputProperties":{"logType":{"type":"string","description":"The type of logs being delivered. Only mandatory when the resourceArn could match more than one. In such a case, the error message will contain all the possible options."},"name":{"type":"string","description":"The unique name of the Log source."},"resourceArn":{"type":"string","description":"The ARN of the resource that will be sending the logs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that have been assigned to this delivery source."}}},"aws-native:logs:Destination":{"description":"The AWS::Logs::Destination resource specifies a CloudWatch Logs destination. A destination encapsulates a physical resource (such as an Amazon Kinesis data stream) and enables you to subscribe that resource to a stream of log events.","properties":{"arn":{"type":"string","description":"The ARN of the CloudWatch Logs destination, such as `arn:aws:logs:us-west-1:123456789012:destination:MyDestination` ."},"destinationName":{"type":"string","description":"The name of the destination resource","replaceOnChanges":true},"destinationPolicy":{"type":"string","description":"An IAM policy document that governs which AWS accounts can create subscription filters against this destination."},"roleArn":{"type":"string","description":"The ARN of an IAM role that permits CloudWatch Logs to send data to the specified AWS resource"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetArn":{"type":"string","description":"The ARN of the physical target where the log events are delivered (for example, a Kinesis stream)"}},"type":"object","required":["arn","destinationName","roleArn","targetArn"],"inputProperties":{"destinationName":{"type":"string","description":"The name of the destination resource"},"destinationPolicy":{"type":"string","description":"An IAM policy document that governs which AWS accounts can create subscription filters against this destination."},"roleArn":{"type":"string","description":"The ARN of an IAM role that permits CloudWatch Logs to send data to the specified AWS resource"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetArn":{"type":"string","description":"The ARN of the physical target where the log events are delivered (for example, a Kinesis stream)"}},"requiredInputs":["roleArn","targetArn"]},"aws-native:logs:Integration":{"description":"Resource Schema for Logs Integration Resource","properties":{"integrationName":{"type":"string","description":"User provided identifier for integration, unique to the user account.","replaceOnChanges":true},"integrationStatus":{"$ref":"#/types/aws-native:logs:IntegrationStatus","description":"Status of creation for the Integration and its resources"},"integrationType":{"$ref":"#/types/aws-native:logs:IntegrationType","description":"The type of the Integration.","replaceOnChanges":true},"resourceConfig":{"$ref":"#/types/aws-native:logs:ResourceConfigProperties","description":"OpenSearchResourceConfig for the given Integration","replaceOnChanges":true}},"type":"object","required":["integrationName","integrationStatus","integrationType","resourceConfig"],"inputProperties":{"integrationName":{"type":"string","description":"User provided identifier for integration, unique to the user account."},"integrationType":{"$ref":"#/types/aws-native:logs:IntegrationType","description":"The type of the Integration."},"resourceConfig":{"$ref":"#/types/aws-native:logs:ResourceConfigProperties","description":"OpenSearchResourceConfig for the given Integration"}},"requiredInputs":["integrationType","resourceConfig"]},"aws-native:logs:LogAnomalyDetector":{"description":"The AWS::Logs::LogAnomalyDetector resource specifies a CloudWatch Logs LogAnomalyDetector.","properties":{"accountId":{"type":"string","description":"Account ID for owner of detector"},"anomalyDetectorArn":{"type":"string","description":"ARN of LogAnomalyDetector"},"anomalyDetectorStatus":{"type":"string","description":"Current status of detector."},"anomalyVisibilityTime":{"type":"number","description":"The number of days to have visibility on an anomaly. After this time period has elapsed for an anomaly, it will be automatically baselined and the anomaly detector will treat new occurrences of a similar anomaly as normal. Therefore, if you do not correct the cause of an anomaly during the time period specified in `AnomalyVisibilityTime` , it will be considered normal going forward and will not be detected as an anomaly."},"creationTimeStamp":{"type":"number","description":"When detector was created."},"detectorName":{"type":"string","description":"Name of detector"},"evaluationFrequency":{"$ref":"#/types/aws-native:logs:LogAnomalyDetectorEvaluationFrequency","description":"How often log group is evaluated"},"filterPattern":{"type":"string","description":"You can use this parameter to limit the anomaly detection model to examine only log events that match the pattern you specify here. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html) ."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the CMK to use when encrypting log data."},"lastModifiedTimeStamp":{"type":"number","description":"When detector was lsat modified."},"logGroupArnList":{"type":"array","items":{"type":"string"},"description":"List of Arns for the given log group"}},"type":"object","required":["anomalyDetectorArn","anomalyDetectorStatus","creationTimeStamp","lastModifiedTimeStamp"],"inputProperties":{"accountId":{"type":"string","description":"Account ID for owner of detector"},"anomalyVisibilityTime":{"type":"number","description":"The number of days to have visibility on an anomaly. After this time period has elapsed for an anomaly, it will be automatically baselined and the anomaly detector will treat new occurrences of a similar anomaly as normal. Therefore, if you do not correct the cause of an anomaly during the time period specified in `AnomalyVisibilityTime` , it will be considered normal going forward and will not be detected as an anomaly."},"detectorName":{"type":"string","description":"Name of detector"},"evaluationFrequency":{"$ref":"#/types/aws-native:logs:LogAnomalyDetectorEvaluationFrequency","description":"How often log group is evaluated"},"filterPattern":{"type":"string","description":"You can use this parameter to limit the anomaly detection model to examine only log events that match the pattern you specify here. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html) ."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the CMK to use when encrypting log data."},"logGroupArnList":{"type":"array","items":{"type":"string"},"description":"List of Arns for the given log group"}}},"aws-native:logs:LogGroup":{"description":"The ``AWS::Logs::LogGroup`` resource specifies a log group. A log group defines common properties for log streams, such as their retention and access control rules. Each log stream must belong to one log group.\n You can create up to 1,000,000 log groups per Region per account. You must use the following guidelines when naming a log group:\n  +  Log group names must be unique within a Region for an AWS account.\n  +  Log group names can be between 1 and 512 characters long.\n  +  Log group names consist of the following characters: a-z, A-Z, 0-9, '_' (underscore), '-' (hyphen), '/' (forward slash), and '.' (period).","properties":{"arn":{"type":"string","description":"The ARN of the log group, such as `arn:aws:logs:us-west-1:123456789012:log-group:/mystack-testgroup-12ABC1AB12A1:*`"},"dataProtectionPolicy":{"$ref":"pulumi.json#/Any","description":"Creates a data protection policy and assigns it to the log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Logs::LogGroup` for more information about the expected schema for this property."},"deletionProtectionEnabled":{"type":"boolean","description":"Indicates whether deletion protection is enabled for this log group. When enabled, deletion protection blocks all deletion operations until it is explicitly disabled."},"fieldIndexPolicies":{"type":"array","items":{"$ref":"pulumi.json#/Any"},"description":"Creates or updates a *field index policy* for the specified log group. Only log groups in the Standard log class support field index policies. For more information about log classes, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html).\n You can use field index policies to create *field indexes* on fields found in log events in the log group. Creating field indexes lowers the costs for CWL Insights queries that reference those field indexes, because these queries attempt to skip the processing of log events that are known to not match the indexed field. Good fields to index are fields that you often need to query for and fields that have high cardinality of values Common examples of indexes include request ID, session ID, userID, and instance IDs. For more information, see [Create field indexes to improve query performance and reduce costs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Field-Indexing.html).\n Currently, this array supports only one field index policy object."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key to use when encrypting log data.\n To associate an KMS key with the log group, specify the ARN of that KMS key here. If you do so, ingested data is encrypted using this key. This association is stored as long as the data encrypted with the KMS key is still within CWL. This enables CWL to decrypt this data whenever it is requested.\n If you attempt to associate a KMS key with the log group but the KMS key doesn't exist or is deactivated, you will receive an ``InvalidParameterException`` error.\n Log group data is always encrypted in CWL. If you omit this key, the encryption does not use KMS. For more information, see [Encrypt log data in using](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)"},"logGroupClass":{"$ref":"#/types/aws-native:logs:LogGroupClass","description":"Specifies the log group class for this log group. There are two classes:\n  +  The ``Standard`` log class supports all CWL features.\n  +  The ``Infrequent Access`` log class supports a subset of CWL features and incurs lower costs.\n  \n For details about the features supported by each class, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)"},"logGroupName":{"type":"string","description":"The name of the log group. If you don't specify a name, CFNlong generates a unique ID for the log group.","replaceOnChanges":true},"resourcePolicyDocument":{"$ref":"pulumi.json#/Any","description":"Creates or updates a resource policy for the specified log group that allows other services to put log events to this account. A LogGroup can have 1 resource policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Logs::LogGroup` for more information about the expected schema for this property."},"retentionInDays":{"type":"integer","description":"The number of days to retain the log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, and 3653.\n To set a log group so that its log events do not expire, do not specify this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to the log group.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}},"type":"object","required":["arn"],"inputProperties":{"dataProtectionPolicy":{"$ref":"pulumi.json#/Any","description":"Creates a data protection policy and assigns it to the log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Logs::LogGroup` for more information about the expected schema for this property."},"deletionProtectionEnabled":{"type":"boolean","description":"Indicates whether deletion protection is enabled for this log group. When enabled, deletion protection blocks all deletion operations until it is explicitly disabled."},"fieldIndexPolicies":{"type":"array","items":{"$ref":"pulumi.json#/Any"},"description":"Creates or updates a *field index policy* for the specified log group. Only log groups in the Standard log class support field index policies. For more information about log classes, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html).\n You can use field index policies to create *field indexes* on fields found in log events in the log group. Creating field indexes lowers the costs for CWL Insights queries that reference those field indexes, because these queries attempt to skip the processing of log events that are known to not match the indexed field. Good fields to index are fields that you often need to query for and fields that have high cardinality of values Common examples of indexes include request ID, session ID, userID, and instance IDs. For more information, see [Create field indexes to improve query performance and reduce costs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Field-Indexing.html).\n Currently, this array supports only one field index policy object."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key to use when encrypting log data.\n To associate an KMS key with the log group, specify the ARN of that KMS key here. If you do so, ingested data is encrypted using this key. This association is stored as long as the data encrypted with the KMS key is still within CWL. This enables CWL to decrypt this data whenever it is requested.\n If you attempt to associate a KMS key with the log group but the KMS key doesn't exist or is deactivated, you will receive an ``InvalidParameterException`` error.\n Log group data is always encrypted in CWL. If you omit this key, the encryption does not use KMS. For more information, see [Encrypt log data in using](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)"},"logGroupClass":{"$ref":"#/types/aws-native:logs:LogGroupClass","description":"Specifies the log group class for this log group. There are two classes:\n  +  The ``Standard`` log class supports all CWL features.\n  +  The ``Infrequent Access`` log class supports a subset of CWL features and incurs lower costs.\n  \n For details about the features supported by each class, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)"},"logGroupName":{"type":"string","description":"The name of the log group. If you don't specify a name, CFNlong generates a unique ID for the log group."},"resourcePolicyDocument":{"$ref":"pulumi.json#/Any","description":"Creates or updates a resource policy for the specified log group that allows other services to put log events to this account. A LogGroup can have 1 resource policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Logs::LogGroup` for more information about the expected schema for this property."},"retentionInDays":{"type":"integer","description":"The number of days to retain the log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, and 3653.\n To set a log group so that its log events do not expire, do not specify this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to the log group.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html)."}}},"aws-native:logs:LogStream":{"description":"Resource Type definition for AWS::Logs::LogStream","properties":{"logGroupName":{"type":"string","description":"The name of the log group where the log stream is created.","replaceOnChanges":true},"logStreamName":{"type":"string","description":"The name of the log stream. The name must be unique wihtin the log group.","replaceOnChanges":true}},"type":"object","required":["logGroupName"],"inputProperties":{"logGroupName":{"type":"string","description":"The name of the log group where the log stream is created."},"logStreamName":{"type":"string","description":"The name of the log stream. The name must be unique wihtin the log group."}},"requiredInputs":["logGroupName"]},"aws-native:logs:MetricFilter":{"description":"The ``AWS::Logs::MetricFilter`` resource specifies a metric filter that describes how CWL extracts information from logs and transforms it into Amazon CloudWatch metrics. If you have multiple metric filters that are associated with a log group, all the filters are applied to the log streams in that group.\n The maximum number of metric filters that can be associated with a log group is 100.","properties":{"applyOnTransformedLogs":{"type":"boolean","description":"This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html).\n If this value is ``true``, the metric filter is applied on the transformed version of the log events instead of the original ingested log events."},"emitSystemFieldDimensions":{"type":"array","items":{"type":"string"},"description":"The list of system fields that are emitted as additional dimensions in the generated metrics. Returns the ``emitSystemFieldDimensions`` value if it was specified when the metric filter was created."},"fieldSelectionCriteria":{"type":"string","description":"The filter expression that specifies which log events are processed by this metric filter based on system fields. Returns the ``fieldSelectionCriteria`` value if it was specified when the metric filter was created."},"filterName":{"type":"string","description":"The name of the metric filter.","replaceOnChanges":true},"filterPattern":{"type":"string","description":"A filter pattern for extracting metric data out of ingested log events. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html)."},"logGroupName":{"type":"string","description":"The name of an existing log group that you want to associate with this metric filter.","replaceOnChanges":true},"metricTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:logs:MetricFilterMetricTransformation"},"description":"The metric transformations."}},"type":"object","required":["filterPattern","logGroupName","metricTransformations"],"inputProperties":{"applyOnTransformedLogs":{"type":"boolean","description":"This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html).\n If this value is ``true``, the metric filter is applied on the transformed version of the log events instead of the original ingested log events."},"emitSystemFieldDimensions":{"type":"array","items":{"type":"string"},"description":"The list of system fields that are emitted as additional dimensions in the generated metrics. Returns the ``emitSystemFieldDimensions`` value if it was specified when the metric filter was created."},"fieldSelectionCriteria":{"type":"string","description":"The filter expression that specifies which log events are processed by this metric filter based on system fields. Returns the ``fieldSelectionCriteria`` value if it was specified when the metric filter was created."},"filterName":{"type":"string","description":"The name of the metric filter."},"filterPattern":{"type":"string","description":"A filter pattern for extracting metric data out of ingested log events. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html)."},"logGroupName":{"type":"string","description":"The name of an existing log group that you want to associate with this metric filter."},"metricTransformations":{"type":"array","items":{"$ref":"#/types/aws-native:logs:MetricFilterMetricTransformation"},"description":"The metric transformations."}},"requiredInputs":["filterPattern","logGroupName","metricTransformations"]},"aws-native:logs:QueryDefinition":{"description":"The resource schema for AWSLogs QueryDefinition","properties":{"logGroupNames":{"type":"array","items":{"type":"string"},"description":"Optionally define specific log groups as part of your query definition"},"name":{"type":"string","description":"A name for the saved query definition"},"queryDefinitionId":{"type":"string","description":"Unique identifier of a query definition"},"queryLanguage":{"$ref":"#/types/aws-native:logs:QueryDefinitionQueryLanguage","description":"Query language of the query string. Possible values are CWLI, SQL, PPL, with CWLI being the default."},"queryString":{"type":"string","description":"The query string to use for this definition"}},"type":"object","required":["name","queryDefinitionId","queryString"],"inputProperties":{"logGroupNames":{"type":"array","items":{"type":"string"},"description":"Optionally define specific log groups as part of your query definition"},"name":{"type":"string","description":"A name for the saved query definition"},"queryLanguage":{"$ref":"#/types/aws-native:logs:QueryDefinitionQueryLanguage","description":"Query language of the query string. Possible values are CWLI, SQL, PPL, with CWLI being the default."},"queryString":{"type":"string","description":"The query string to use for this definition"}},"requiredInputs":["queryString"]},"aws-native:logs:ResourcePolicy":{"description":"The resource schema for AWSLogs ResourcePolicy","properties":{"policyDocument":{"type":"string","description":"The policy document"},"policyName":{"type":"string","description":"A name for resource policy","replaceOnChanges":true}},"type":"object","required":["policyDocument","policyName"],"inputProperties":{"policyDocument":{"type":"string","description":"The policy document"},"policyName":{"type":"string","description":"A name for resource policy"}},"requiredInputs":["policyDocument"]},"aws-native:logs:ScheduledQuery":{"description":"Creates a new Scheduled Query that allows you to define a Logs Insights query that will run on a schedule and configure actions to take with the query results.","properties":{"creationTime":{"type":"number"},"description":{"type":"string"},"destinationConfiguration":{"$ref":"#/types/aws-native:logs:ScheduledQueryDestinationConfiguration"},"executionRoleArn":{"type":"string"},"lastExecutionStatus":{"$ref":"#/types/aws-native:logs:ScheduledQueryLastExecutionStatus"},"lastTriggeredTime":{"type":"number"},"lastUpdatedTime":{"type":"number"},"logGroupIdentifiers":{"type":"array","items":{"type":"string"}},"name":{"type":"string","replaceOnChanges":true},"queryLanguage":{"type":"string"},"queryString":{"type":"string"},"scheduleEndTime":{"type":"number"},"scheduleExpression":{"type":"string"},"scheduleStartTime":{"type":"number"},"scheduledQueryArn":{"type":"string"},"startTimeOffset":{"type":"integer"},"state":{"$ref":"#/types/aws-native:logs:ScheduledQueryState"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"timezone":{"type":"string"}},"type":"object","required":["creationTime","executionRoleArn","lastExecutionStatus","lastTriggeredTime","lastUpdatedTime","name","queryLanguage","queryString","scheduleExpression","scheduledQueryArn"],"inputProperties":{"description":{"type":"string"},"destinationConfiguration":{"$ref":"#/types/aws-native:logs:ScheduledQueryDestinationConfiguration"},"executionRoleArn":{"type":"string"},"logGroupIdentifiers":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"queryLanguage":{"type":"string"},"queryString":{"type":"string"},"scheduleEndTime":{"type":"number"},"scheduleExpression":{"type":"string"},"scheduleStartTime":{"type":"number"},"startTimeOffset":{"type":"integer"},"state":{"$ref":"#/types/aws-native:logs:ScheduledQueryState"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"timezone":{"type":"string"}},"requiredInputs":["executionRoleArn","queryLanguage","queryString","scheduleExpression"]},"aws-native:logs:SubscriptionFilter":{"description":"The ``AWS::Logs::SubscriptionFilter`` resource specifies a subscription filter and associates it with the specified log group. Subscription filters allow you to subscribe to a real-time stream of log events and have them delivered to a specific destination. Currently, the supported destinations are:\n  +  An Amazon Kinesis data stream belonging to the same account as the subscription filter, for same-account delivery.\n  +  A logical destination that belongs to a different account, for cross-account delivery.\n  +  An Amazon Kinesis Firehose delivery stream that belongs to the same account as the subscription filter, for same-account delivery.\n  +  An LAMlong function that belongs to the same account as the subscription filter, for same-account delivery.\n  \n There can be as many as two subscription filters associated with a log group.","properties":{"applyOnTransformedLogs":{"type":"boolean","description":"This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html).\n If this value is ``true``, the subscription filter is applied on the transformed version of the log events instead of the original ingested log events."},"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination."},"distribution":{"$ref":"#/types/aws-native:logs:SubscriptionFilterDistribution","description":"The method used to distribute log data to the destination, which can be either random or grouped by log stream."},"emitSystemFields":{"type":"array","items":{"type":"string"},"description":"The list of system fields that are included in the log events sent to the subscription destination. Returns the ``emitSystemFields`` value if it was specified when the subscription filter was created."},"fieldSelectionCriteria":{"type":"string","description":"The filter expression that specifies which log events are processed by this subscription filter based on system fields. Returns the ``fieldSelectionCriteria`` value if it was specified when the subscription filter was created."},"filterName":{"type":"string","description":"The name of the subscription filter.","replaceOnChanges":true},"filterPattern":{"type":"string","description":"The filtering expressions that restrict what gets delivered to the destination AWS resource. For more information about the filter pattern syntax, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html)."},"logGroupName":{"type":"string","description":"The log group to associate with the subscription filter. All log events that are uploaded to this log group are filtered and delivered to the specified AWS resource if the filter pattern matches the log events.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of an IAM role that grants CWL permissions to deliver ingested log events to the destination stream. You don't need to provide the ARN when you are working with a logical destination for cross-account delivery."}},"type":"object","required":["destinationArn","filterPattern","logGroupName"],"inputProperties":{"applyOnTransformedLogs":{"type":"boolean","description":"This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html).\n If this value is ``true``, the subscription filter is applied on the transformed version of the log events instead of the original ingested log events."},"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination."},"distribution":{"$ref":"#/types/aws-native:logs:SubscriptionFilterDistribution","description":"The method used to distribute log data to the destination, which can be either random or grouped by log stream."},"emitSystemFields":{"type":"array","items":{"type":"string"},"description":"The list of system fields that are included in the log events sent to the subscription destination. Returns the ``emitSystemFields`` value if it was specified when the subscription filter was created."},"fieldSelectionCriteria":{"type":"string","description":"The filter expression that specifies which log events are processed by this subscription filter based on system fields. Returns the ``fieldSelectionCriteria`` value if it was specified when the subscription filter was created."},"filterName":{"type":"string","description":"The name of the subscription filter."},"filterPattern":{"type":"string","description":"The filtering expressions that restrict what gets delivered to the destination AWS resource. For more information about the filter pattern syntax, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html)."},"logGroupName":{"type":"string","description":"The log group to associate with the subscription filter. All log events that are uploaded to this log group are filtered and delivered to the specified AWS resource if the filter pattern matches the log events."},"roleArn":{"type":"string","description":"The ARN of an IAM role that grants CWL permissions to deliver ingested log events to the destination stream. You don't need to provide the ARN when you are working with a logical destination for cross-account delivery."}},"requiredInputs":["destinationArn","filterPattern","logGroupName"]},"aws-native:logs:Transformer":{"description":"Specifies a transformer on the log group to transform logs into consistent structured and information rich format.","properties":{"logGroupIdentifier":{"type":"string","description":"Existing log group that you want to associate with this transformer.","replaceOnChanges":true},"transformerConfig":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerProcessor"},"description":"List of processors in a transformer"}},"type":"object","required":["logGroupIdentifier","transformerConfig"],"inputProperties":{"logGroupIdentifier":{"type":"string","description":"Existing log group that you want to associate with this transformer."},"transformerConfig":{"type":"array","items":{"$ref":"#/types/aws-native:logs:TransformerProcessor"},"description":"List of processors in a transformer"}},"requiredInputs":["logGroupIdentifier","transformerConfig"]},"aws-native:lookoutvision:Project":{"description":"The AWS::LookoutVision::Project type creates an Amazon Lookout for Vision project. A project is a grouping of the resources needed to create and manage a Lookout for Vision model.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name of the project."},"projectName":{"type":"string","description":"The name of the project.","replaceOnChanges":true}},"type":"object","required":["arn","projectName"],"inputProperties":{"projectName":{"type":"string","description":"The name of the project."}}},"aws-native:m2:Application":{"description":"Represents an application that runs on an AWS Mainframe Modernization Environment","properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the application."},"applicationId":{"type":"string","description":"The identifier of the application."},"definition":{"oneOf":[{"$ref":"#/types/aws-native:m2:ApplicationDefinition0Properties"},{"$ref":"#/types/aws-native:m2:ApplicationDefinition1Properties"}],"description":"The application definition for a particular application. You can specify either inline JSON or an Amazon S3 bucket location.\n\nFor information about application definitions, see the [AWS Mainframe Modernization User Guide](https://docs.aws.amazon.com/m2/latest/userguide/applications-m2-definition.html) ."},"description":{"type":"string","description":"The description of the application."},"engineType":{"$ref":"#/types/aws-native:m2:ApplicationEngineType","description":"The type of the target platform for this application.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The ID or the Amazon Resource Name (ARN) of the customer managed KMS Key used for encrypting application-related resources.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the application.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role associated with the application.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["applicationArn","applicationId","engineType","name"],"inputProperties":{"definition":{"oneOf":[{"$ref":"#/types/aws-native:m2:ApplicationDefinition0Properties"},{"$ref":"#/types/aws-native:m2:ApplicationDefinition1Properties"}],"description":"The application definition for a particular application. You can specify either inline JSON or an Amazon S3 bucket location.\n\nFor information about application definitions, see the [AWS Mainframe Modernization User Guide](https://docs.aws.amazon.com/m2/latest/userguide/applications-m2-definition.html) ."},"description":{"type":"string","description":"The description of the application."},"engineType":{"$ref":"#/types/aws-native:m2:ApplicationEngineType","description":"The type of the target platform for this application."},"kmsKeyId":{"type":"string","description":"The ID or the Amazon Resource Name (ARN) of the customer managed KMS Key used for encrypting application-related resources."},"name":{"type":"string","description":"The name of the application."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role associated with the application."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["engineType"]},"aws-native:m2:Deployment":{"description":"Represents a deployment resource of an AWS Mainframe Modernization (M2) application to a specified environment","properties":{"applicationId":{"type":"string","description":"The application ID.","replaceOnChanges":true},"applicationVersion":{"type":"integer","description":"The version number of the application to deploy"},"deploymentId":{"type":"string","description":"The deployment ID."},"environmentId":{"type":"string","description":"The environment ID.","replaceOnChanges":true},"status":{"type":"string","description":"The status of the deployment."}},"type":"object","required":["applicationId","applicationVersion","deploymentId","environmentId","status"],"inputProperties":{"applicationId":{"type":"string","description":"The application ID."},"applicationVersion":{"type":"integer","description":"The version number of the application to deploy"},"environmentId":{"type":"string","description":"The environment ID."}},"requiredInputs":["applicationId","applicationVersion","environmentId"]},"aws-native:m2:Environment":{"description":"Represents a runtime environment that can run migrated mainframe applications.","properties":{"description":{"type":"string","description":"The description of the environment.","replaceOnChanges":true},"engineType":{"$ref":"#/types/aws-native:m2:EnvironmentEngineType","description":"The target platform for the runtime environment.","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The version of the runtime engine for the environment."},"environmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the runtime environment."},"environmentId":{"type":"string","description":"The unique identifier of the environment."},"highAvailabilityConfig":{"$ref":"#/types/aws-native:m2:EnvironmentHighAvailabilityConfig","description":"\u003e AWS Mainframe Modernization Service (Managed Runtime Environment experience) will no longer be open to new customers starting on November 7, 2025. If you would like to use the service, please sign up prior to November 7, 2025. For capabilities similar to AWS Mainframe Modernization Service (Managed Runtime Environment experience) explore AWS Mainframe Modernization Service (Self-Managed Experience). Existing customers can continue to use the service as normal. For more information, see [AWS Mainframe Modernization availability change](https://docs.aws.amazon.com/m2/latest/userguide/mainframe-modernization-availability-change.html) . \n\nDefines the details of a high availability configuration."},"instanceType":{"type":"string","description":"The type of instance underlying the environment."},"kmsKeyId":{"type":"string","description":"The ID or the Amazon Resource Name (ARN) of the customer managed KMS Key used for encrypting environment-related resources.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the environment.","replaceOnChanges":true},"networkType":{"$ref":"#/types/aws-native:m2:EnvironmentNetworkType","description":"The network type supported by the runtime environment.","replaceOnChanges":true},"preferredMaintenanceWindow":{"type":"string","description":"Configures a desired maintenance window for the environment. If you do not provide a value, a random system-generated value will be assigned."},"publiclyAccessible":{"type":"boolean","description":"Specifies whether the environment is publicly accessible.","replaceOnChanges":true},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The list of security groups for the VPC associated with this environment.","replaceOnChanges":true},"storageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:m2:EnvironmentStorageConfiguration"},"description":"The storage configurations defined for the runtime environment.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the subnets assigned to this runtime environment.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags associated to this environment."}},"type":"object","required":["engineType","environmentArn","environmentId","instanceType","name"],"inputProperties":{"description":{"type":"string","description":"The description of the environment."},"engineType":{"$ref":"#/types/aws-native:m2:EnvironmentEngineType","description":"The target platform for the runtime environment."},"engineVersion":{"type":"string","description":"The version of the runtime engine for the environment."},"highAvailabilityConfig":{"$ref":"#/types/aws-native:m2:EnvironmentHighAvailabilityConfig","description":"\u003e AWS Mainframe Modernization Service (Managed Runtime Environment experience) will no longer be open to new customers starting on November 7, 2025. If you would like to use the service, please sign up prior to November 7, 2025. For capabilities similar to AWS Mainframe Modernization Service (Managed Runtime Environment experience) explore AWS Mainframe Modernization Service (Self-Managed Experience). Existing customers can continue to use the service as normal. For more information, see [AWS Mainframe Modernization availability change](https://docs.aws.amazon.com/m2/latest/userguide/mainframe-modernization-availability-change.html) . \n\nDefines the details of a high availability configuration."},"instanceType":{"type":"string","description":"The type of instance underlying the environment."},"kmsKeyId":{"type":"string","description":"The ID or the Amazon Resource Name (ARN) of the customer managed KMS Key used for encrypting environment-related resources."},"name":{"type":"string","description":"The name of the environment."},"networkType":{"$ref":"#/types/aws-native:m2:EnvironmentNetworkType","description":"The network type supported by the runtime environment."},"preferredMaintenanceWindow":{"type":"string","description":"Configures a desired maintenance window for the environment. If you do not provide a value, a random system-generated value will be assigned."},"publiclyAccessible":{"type":"boolean","description":"Specifies whether the environment is publicly accessible."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The list of security groups for the VPC associated with this environment."},"storageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:m2:EnvironmentStorageConfiguration"},"description":"The storage configurations defined for the runtime environment."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the subnets assigned to this runtime environment."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags associated to this environment."}},"requiredInputs":["engineType","instanceType"]},"aws-native:macie:AllowList":{"description":"Macie AllowList resource schema","properties":{"arn":{"type":"string","description":"AllowList ARN."},"awsId":{"type":"string","description":"AllowList ID."},"criteria":{"$ref":"#/types/aws-native:macie:AllowListCriteria","description":"AllowList criteria."},"description":{"type":"string","description":"Description of AllowList."},"name":{"type":"string","description":"Name of AllowList."},"status":{"$ref":"#/types/aws-native:macie:AllowListStatus","description":"AllowList status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["arn","awsId","criteria","name","status"],"inputProperties":{"criteria":{"$ref":"#/types/aws-native:macie:AllowListCriteria","description":"AllowList criteria."},"description":{"type":"string","description":"Description of AllowList."},"name":{"type":"string","description":"Name of AllowList."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["criteria"]},"aws-native:macie:CustomDataIdentifier":{"description":"Macie CustomDataIdentifier resource schema","properties":{"arn":{"type":"string","description":"Custom data identifier ARN."},"awsId":{"type":"string","description":"Custom data identifier ID."},"description":{"type":"string","description":"Description of custom data identifier.","replaceOnChanges":true},"ignoreWords":{"type":"array","items":{"type":"string"},"description":"Words to be ignored.","replaceOnChanges":true},"keywords":{"type":"array","items":{"type":"string"},"description":"Keywords to be matched against.","replaceOnChanges":true},"maximumMatchDistance":{"type":"integer","description":"Maximum match distance.","replaceOnChanges":true},"name":{"type":"string","description":"Name of custom data identifier.","replaceOnChanges":true},"regex":{"type":"string","description":"Regular expression for custom data identifier.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["arn","awsId","name","regex"],"inputProperties":{"description":{"type":"string","description":"Description of custom data identifier."},"ignoreWords":{"type":"array","items":{"type":"string"},"description":"Words to be ignored."},"keywords":{"type":"array","items":{"type":"string"},"description":"Keywords to be matched against."},"maximumMatchDistance":{"type":"integer","description":"Maximum match distance."},"name":{"type":"string","description":"Name of custom data identifier."},"regex":{"type":"string","description":"Regular expression for custom data identifier."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["regex"]},"aws-native:macie:FindingsFilter":{"description":"Macie FindingsFilter resource schema.","properties":{"action":{"$ref":"#/types/aws-native:macie:FindingsFilterFindingFilterAction","description":"Findings filter action."},"arn":{"type":"string","description":"Findings filter ARN."},"awsId":{"type":"string","description":"Findings filter ID."},"description":{"type":"string","description":"Findings filter description"},"findingCriteria":{"$ref":"#/types/aws-native:macie:FindingsFilterFindingCriteria","description":"Findings filter criteria."},"name":{"type":"string","description":"Findings filter name"},"position":{"type":"integer","description":"Findings filter position."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["arn","awsId","findingCriteria","name"],"inputProperties":{"action":{"$ref":"#/types/aws-native:macie:FindingsFilterFindingFilterAction","description":"Findings filter action."},"description":{"type":"string","description":"Findings filter description"},"findingCriteria":{"$ref":"#/types/aws-native:macie:FindingsFilterFindingCriteria","description":"Findings filter criteria."},"name":{"type":"string","description":"Findings filter name"},"position":{"type":"integer","description":"Findings filter position."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["findingCriteria"]},"aws-native:macie:Session":{"description":"The AWS::Macie::Session resource specifies a new Amazon Macie session. A session is an object that represents the Amazon Macie service. A session is required for Amazon Macie to become operational.","properties":{"automatedDiscoveryStatus":{"$ref":"#/types/aws-native:macie:SessionAutomatedDiscoveryStatus","description":"The status of automated sensitive data discovery for the Macie session."},"awsAccountId":{"type":"string","description":"AWS account ID of customer"},"findingPublishingFrequency":{"$ref":"#/types/aws-native:macie:SessionFindingPublishingFrequency","description":"A enumeration value that specifies how frequently finding updates are published."},"serviceRole":{"type":"string","description":"Service role used by Macie"},"status":{"$ref":"#/types/aws-native:macie:SessionStatus","description":"A enumeration value that specifies the status of the Macie Session."}},"type":"object","required":["automatedDiscoveryStatus","awsAccountId","serviceRole"],"inputProperties":{"findingPublishingFrequency":{"$ref":"#/types/aws-native:macie:SessionFindingPublishingFrequency","description":"A enumeration value that specifies how frequently finding updates are published."},"status":{"$ref":"#/types/aws-native:macie:SessionStatus","description":"A enumeration value that specifies the status of the Macie Session."}}},"aws-native:mediaconnect:Bridge":{"description":"Resource schema for AWS::MediaConnect::Bridge","properties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge."},"bridgeState":{"$ref":"#/types/aws-native:mediaconnect:BridgeStateEnum","description":"The current status of the bridge. Possible values are: ACTIVE or STANDBY."},"egressGatewayBridge":{"$ref":"#/types/aws-native:mediaconnect:BridgeEgressGatewayBridge","description":"An egress bridge is a cloud-to-ground bridge. The content comes from an existing MediaConnect flow and is delivered to your premises."},"ingressGatewayBridge":{"$ref":"#/types/aws-native:mediaconnect:BridgeIngressGatewayBridge","description":"An ingress bridge is a ground-to-cloud bridge. The content originates at your premises and is delivered to the cloud."},"name":{"type":"string","description":"The name of the bridge."},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutput"},"description":"The outputs on this bridge."},"placementArn":{"type":"string","description":"The placement Amazon Resource Number (ARN) of the bridge."},"sourceFailoverConfig":{"$ref":"#/types/aws-native:mediaconnect:BridgeFailoverConfig","description":"The settings for source failover."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:BridgeSource"},"description":"The sources on this bridge."}},"type":"object","required":["bridgeArn","bridgeState","name","placementArn","sources"],"inputProperties":{"egressGatewayBridge":{"$ref":"#/types/aws-native:mediaconnect:BridgeEgressGatewayBridge","description":"An egress bridge is a cloud-to-ground bridge. The content comes from an existing MediaConnect flow and is delivered to your premises."},"ingressGatewayBridge":{"$ref":"#/types/aws-native:mediaconnect:BridgeIngressGatewayBridge","description":"An ingress bridge is a ground-to-cloud bridge. The content originates at your premises and is delivered to the cloud."},"name":{"type":"string","description":"The name of the bridge."},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutput"},"description":"The outputs on this bridge."},"placementArn":{"type":"string","description":"The placement Amazon Resource Number (ARN) of the bridge."},"sourceFailoverConfig":{"$ref":"#/types/aws-native:mediaconnect:BridgeFailoverConfig","description":"The settings for source failover."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:BridgeSource"},"description":"The sources on this bridge."}},"requiredInputs":["placementArn","sources"]},"aws-native:mediaconnect:BridgeOutputResource":{"description":"Resource schema for AWS::MediaConnect::BridgeOutput","properties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge.","replaceOnChanges":true},"name":{"type":"string","description":"The network output name.","replaceOnChanges":true},"networkOutput":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutputResourceBridgeNetworkOutput","description":"The output of the bridge."}},"type":"object","required":["bridgeArn","name","networkOutput"],"inputProperties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge."},"name":{"type":"string","description":"The network output name."},"networkOutput":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutputResourceBridgeNetworkOutput","description":"The output of the bridge."}},"requiredInputs":["bridgeArn","networkOutput"]},"aws-native:mediaconnect:BridgeSource":{"description":"Resource schema for AWS::MediaConnect::BridgeSource","properties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge.","replaceOnChanges":true},"flowSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceBridgeFlowSource","description":"The source of the flow."},"name":{"type":"string","description":"The name of the source.","replaceOnChanges":true},"networkSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceBridgeNetworkSource","description":"The source of the network."}},"type":"object","required":["bridgeArn","name"],"inputProperties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge."},"flowSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceBridgeFlowSource","description":"The source of the flow."},"name":{"type":"string","description":"The name of the source."},"networkSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceBridgeNetworkSource","description":"The source of the network."}},"requiredInputs":["bridgeArn"]},"aws-native:mediaconnect:Flow":{"description":"Resource Type definition for AWS::MediaConnect::Flow","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone that you want to create the flow in. These options are limited to the Availability Zones within the current AWS.","replaceOnChanges":true},"egressIp":{"type":"string","description":"The IP address from which video will be sent to output destinations."},"encodingConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowEncodingConfig","description":"The encoding configuration to apply to the NDI source content when transcoding it to a transport stream (TS) for downstream distribution. You can choose between several predefined encoding profiles based on common use cases."},"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow."},"flowAvailabilityZone":{"type":"string","description":"The Availability Zone that you want to create the flow in. These options are limited to the Availability Zones within the current AWS.(ReadOnly)"},"flowNdiMachineName":{"type":"string","description":"A prefix for the names of the NDI sources that the flow creates.(ReadOnly)"},"flowSize":{"$ref":"#/types/aws-native:mediaconnect:FlowSize","description":"Determines the processing capacity and feature set of the flow. Set this optional parameter to LARGE if you want to enable NDI sources or outputs on the flow."},"maintenance":{"$ref":"#/types/aws-native:mediaconnect:FlowMaintenance","description":"The maintenance settings you want to use for the flow."},"mediaStreams":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStream"},"description":"The media streams associated with the flow. You can associate any of these media streams with sources and outputs on the flow."},"name":{"type":"string","description":"The name of the flow.","replaceOnChanges":true},"ndiConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowNdiConfig","description":"Specifies the configuration settings for NDI sources and outputs. Required when the flow includes NDI sources or outputs."},"source":{"$ref":"#/types/aws-native:mediaconnect:FlowSource","description":"The source of the flow."},"sourceFailoverConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowFailoverConfig","description":"The source failover config of the flow."},"sourceMonitoringConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceMonitoringConfig","description":"The source monitoring config of the flow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag this flow."},"vpcInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowVpcInterface"},"description":"The VPC interfaces that you added to this flow."}},"type":"object","required":["egressIp","flowArn","flowAvailabilityZone","flowNdiMachineName","name","source"],"inputProperties":{"availabilityZone":{"type":"string","description":"The Availability Zone that you want to create the flow in. These options are limited to the Availability Zones within the current AWS."},"encodingConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowEncodingConfig","description":"The encoding configuration to apply to the NDI source content when transcoding it to a transport stream (TS) for downstream distribution. You can choose between several predefined encoding profiles based on common use cases."},"flowSize":{"$ref":"#/types/aws-native:mediaconnect:FlowSize","description":"Determines the processing capacity and feature set of the flow. Set this optional parameter to LARGE if you want to enable NDI sources or outputs on the flow."},"maintenance":{"$ref":"#/types/aws-native:mediaconnect:FlowMaintenance","description":"The maintenance settings you want to use for the flow."},"mediaStreams":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStream"},"description":"The media streams associated with the flow. You can associate any of these media streams with sources and outputs on the flow."},"name":{"type":"string","description":"The name of the flow."},"ndiConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowNdiConfig","description":"Specifies the configuration settings for NDI sources and outputs. Required when the flow includes NDI sources or outputs."},"source":{"$ref":"#/types/aws-native:mediaconnect:FlowSource","description":"The source of the flow."},"sourceFailoverConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowFailoverConfig","description":"The source failover config of the flow."},"sourceMonitoringConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceMonitoringConfig","description":"The source monitoring config of the flow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag this flow."},"vpcInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowVpcInterface"},"description":"The VPC interfaces that you added to this flow."}},"requiredInputs":["source"]},"aws-native:mediaconnect:FlowEntitlement":{"description":"Resource schema for AWS::MediaConnect::FlowEntitlement","properties":{"dataTransferSubscriberFeePercent":{"type":"integer","description":"Percentage from 0-100 of the data transfer cost to be billed to the subscriber.","replaceOnChanges":true},"description":{"type":"string","description":"A description of the entitlement."},"encryption":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEncryption","description":"The type of encryption that will be used on the output that is associated with this entitlement."},"entitlementArn":{"type":"string","description":"The ARN of the entitlement."},"entitlementStatus":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEntitlementStatus","description":" An indication of whether the entitlement is enabled."},"flowArn":{"type":"string","description":"The ARN of the flow.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the entitlement.","replaceOnChanges":true},"subscribers":{"type":"array","items":{"type":"string"},"description":"The AWS account IDs that you want to share your content with. The receiving accounts (subscribers) will be allowed to create their own flow using your content as the source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this flow entitlement."}},"type":"object","required":["description","entitlementArn","flowArn","name","subscribers"],"inputProperties":{"dataTransferSubscriberFeePercent":{"type":"integer","description":"Percentage from 0-100 of the data transfer cost to be billed to the subscriber."},"description":{"type":"string","description":"A description of the entitlement."},"encryption":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEncryption","description":"The type of encryption that will be used on the output that is associated with this entitlement."},"entitlementStatus":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEntitlementStatus","description":" An indication of whether the entitlement is enabled."},"flowArn":{"type":"string","description":"The ARN of the flow."},"name":{"type":"string","description":"The name of the entitlement."},"subscribers":{"type":"array","items":{"type":"string"},"description":"The AWS account IDs that you want to share your content with. The receiving accounts (subscribers) will be allowed to create their own flow using your content as the source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this flow entitlement."}},"requiredInputs":["description","flowArn","subscribers"]},"aws-native:mediaconnect:FlowOutput":{"description":"Resource schema for AWS::MediaConnect::FlowOutput","properties":{"cidrAllowList":{"type":"array","items":{"type":"string"},"description":"The range of IP addresses that should be allowed to initiate output requests to this flow. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."},"description":{"type":"string","description":"A description of the output."},"destination":{"type":"string","description":"The address where you want to send the output."},"encryption":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputEncryption","description":"The type of key used for the encryption. If no keyType is provided, the service will use the default setting (static-key)."},"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow.","replaceOnChanges":true},"maxLatency":{"type":"integer","description":"The maximum latency in milliseconds. This parameter applies only to RIST-based and Zixi-based streams."},"mediaStreamOutputConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputMediaStreamOutputConfiguration"},"description":"The definition for each media stream that is associated with the output."},"minLatency":{"type":"integer","description":"The minimum latency in milliseconds."},"name":{"type":"string","description":"The name of the output. This value must be unique within the current flow.","replaceOnChanges":true},"ndiProgramName":{"type":"string","description":"A suffix for the names of the NDI sources that the flow creates. If a custom name isn't specified, MediaConnect uses the output name."},"ndiSpeedHqQuality":{"type":"integer","description":"A quality setting for the NDI Speed HQ encoder."},"outputArn":{"type":"string","description":"The ARN of the output."},"outputStatus":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputOutputStatus","description":"An indication of whether the output should transmit data or not."},"port":{"type":"integer","description":"The port to use when content is distributed to this output."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputProtocol","description":"The protocol that is used by the source or output."},"remoteId":{"type":"string","description":"The remote ID for the Zixi-pull stream."},"routerIntegrationState":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputRouterIntegrationState"},"routerIntegrationTransitEncryption":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputFlowTransitEncryption","description":"Encryption information."},"smoothingLatency":{"type":"integer","description":"The smoothing latency in milliseconds for RIST, RTP, and RTP-FEC streams."},"streamId":{"type":"string","description":"The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this flow output."},"vpcInterfaceAttachment":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputVpcInterfaceAttachment","description":"The name of the VPC interface attachment to use for this output."}},"type":"object","required":["flowArn","outputArn"],"inputProperties":{"cidrAllowList":{"type":"array","items":{"type":"string"},"description":"The range of IP addresses that should be allowed to initiate output requests to this flow. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."},"description":{"type":"string","description":"A description of the output."},"destination":{"type":"string","description":"The address where you want to send the output."},"encryption":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputEncryption","description":"The type of key used for the encryption. If no keyType is provided, the service will use the default setting (static-key)."},"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow."},"maxLatency":{"type":"integer","description":"The maximum latency in milliseconds. This parameter applies only to RIST-based and Zixi-based streams."},"mediaStreamOutputConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputMediaStreamOutputConfiguration"},"description":"The definition for each media stream that is associated with the output."},"minLatency":{"type":"integer","description":"The minimum latency in milliseconds."},"name":{"type":"string","description":"The name of the output. This value must be unique within the current flow."},"ndiProgramName":{"type":"string","description":"A suffix for the names of the NDI sources that the flow creates. If a custom name isn't specified, MediaConnect uses the output name."},"ndiSpeedHqQuality":{"type":"integer","description":"A quality setting for the NDI Speed HQ encoder."},"outputStatus":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputOutputStatus","description":"An indication of whether the output should transmit data or not."},"port":{"type":"integer","description":"The port to use when content is distributed to this output."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputProtocol","description":"The protocol that is used by the source or output."},"remoteId":{"type":"string","description":"The remote ID for the Zixi-pull stream."},"routerIntegrationState":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputRouterIntegrationState"},"routerIntegrationTransitEncryption":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputFlowTransitEncryption","description":"Encryption information."},"smoothingLatency":{"type":"integer","description":"The smoothing latency in milliseconds for RIST, RTP, and RTP-FEC streams."},"streamId":{"type":"string","description":"The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this flow output."},"vpcInterfaceAttachment":{"$ref":"#/types/aws-native:mediaconnect:FlowOutputVpcInterfaceAttachment","description":"The name of the VPC interface attachment to use for this output."}},"requiredInputs":["flowArn"]},"aws-native:mediaconnect:FlowSource":{"description":"Resource Type definition for AWS::MediaConnect::FlowSource","properties":{"decryption":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceEncryption","description":"The type of encryption that is used on the content ingested from this source."},"description":{"type":"string","description":"A description for the source. This value is not used or seen outside of the current AWS Elemental MediaConnect account."},"entitlementArn":{"type":"string","description":"The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator's flow."},"flowArn":{"type":"string","description":"The ARN of the flow.","replaceOnChanges":true},"gatewayBridgeSource":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceGatewayBridgeSource","description":"The source configuration for cloud flows receiving a stream from a bridge."},"ingestIp":{"type":"string","description":"The IP address that the flow will be listening on for incoming content."},"ingestPort":{"type":"integer","description":"The port that the flow will be listening on for incoming content."},"maxBitrate":{"type":"integer","description":"The smoothing max bitrate for RIST, RTP, and RTP-FEC streams."},"maxLatency":{"type":"integer","description":"The maximum latency in milliseconds. This parameter applies only to RIST-based and Zixi-based streams."},"minLatency":{"type":"integer","description":"The minimum latency in milliseconds."},"name":{"type":"string","description":"The name of the source.","replaceOnChanges":true},"protocol":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceProtocol","description":"The protocol that is used by the source.","replaceOnChanges":true},"senderControlPort":{"type":"integer","description":"The port that the flow uses to send outbound requests to initiate connection with the sender for fujitsu-qos protocol."},"senderIpAddress":{"type":"string","description":"The IP address that the flow communicates with to initiate connection with the sender for fujitsu-qos protocol."},"sourceArn":{"type":"string","description":"The ARN of the source."},"sourceIngestPort":{"type":"string","description":"The port that the flow will be listening on for incoming content.(ReadOnly)"},"sourceListenerAddress":{"type":"string","description":"Source IP or domain name for SRT-caller protocol."},"sourceListenerPort":{"type":"integer","description":"Source port for SRT-caller protocol."},"streamId":{"type":"string","description":"The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this flow source."},"vpcInterfaceName":{"type":"string","description":"The name of the VPC Interface this Source is configured with."},"whitelistCidr":{"type":"string","description":"The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."}},"type":"object","required":["description","flowArn","ingestIp","name","sourceArn","sourceIngestPort"],"inputProperties":{"decryption":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceEncryption","description":"The type of encryption that is used on the content ingested from this source."},"description":{"type":"string","description":"A description for the source. This value is not used or seen outside of the current AWS Elemental MediaConnect account."},"entitlementArn":{"type":"string","description":"The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator's flow."},"flowArn":{"type":"string","description":"The ARN of the flow."},"gatewayBridgeSource":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceGatewayBridgeSource","description":"The source configuration for cloud flows receiving a stream from a bridge."},"ingestPort":{"type":"integer","description":"The port that the flow will be listening on for incoming content."},"maxBitrate":{"type":"integer","description":"The smoothing max bitrate for RIST, RTP, and RTP-FEC streams."},"maxLatency":{"type":"integer","description":"The maximum latency in milliseconds. This parameter applies only to RIST-based and Zixi-based streams."},"minLatency":{"type":"integer","description":"The minimum latency in milliseconds."},"name":{"type":"string","description":"The name of the source."},"protocol":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceProtocol","description":"The protocol that is used by the source."},"senderControlPort":{"type":"integer","description":"The port that the flow uses to send outbound requests to initiate connection with the sender for fujitsu-qos protocol."},"senderIpAddress":{"type":"string","description":"The IP address that the flow communicates with to initiate connection with the sender for fujitsu-qos protocol."},"sourceListenerAddress":{"type":"string","description":"Source IP or domain name for SRT-caller protocol."},"sourceListenerPort":{"type":"integer","description":"Source port for SRT-caller protocol."},"streamId":{"type":"string","description":"The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this flow source."},"vpcInterfaceName":{"type":"string","description":"The name of the VPC Interface this Source is configured with."},"whitelistCidr":{"type":"string","description":"The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."}},"requiredInputs":["description","flowArn"]},"aws-native:mediaconnect:FlowVpcInterface":{"description":"Resource schema for AWS::MediaConnect::FlowVpcInterface","properties":{"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow.","replaceOnChanges":true},"name":{"type":"string","description":"Immutable and has to be a unique against other VpcInterfaces in this Flow.","replaceOnChanges":true},"networkInterfaceIds":{"type":"array","items":{"type":"string"},"description":"IDs of the network interfaces created in customer's account by MediaConnect."},"roleArn":{"type":"string","description":"Role Arn MediaConnect can assume to create ENIs in customer's account."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"Security Group IDs to be used on ENI."},"subnetId":{"type":"string","description":"Subnet must be in the AZ of the Flow"}},"type":"object","required":["flowArn","name","networkInterfaceIds","roleArn","securityGroupIds","subnetId"],"inputProperties":{"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow."},"name":{"type":"string","description":"Immutable and has to be a unique against other VpcInterfaces in this Flow."},"roleArn":{"type":"string","description":"Role Arn MediaConnect can assume to create ENIs in customer's account."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"Security Group IDs to be used on ENI."},"subnetId":{"type":"string","description":"Subnet must be in the AZ of the Flow"}},"requiredInputs":["flowArn","roleArn","securityGroupIds","subnetId"]},"aws-native:mediaconnect:Gateway":{"description":"Resource schema for AWS::MediaConnect::Gateway","properties":{"egressCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The range of IP addresses that contribute content or initiate output requests for flows communicating with this gateway. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.","replaceOnChanges":true},"gatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the gateway."},"gatewayState":{"$ref":"#/types/aws-native:mediaconnect:GatewayState","description":"The current status of the gateway."},"name":{"type":"string","description":"The name of the gateway. This name can not be modified after the gateway is created.","replaceOnChanges":true},"networks":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:GatewayNetwork"},"description":"The list of networks in the gateway.","replaceOnChanges":true}},"type":"object","required":["egressCidrBlocks","gatewayArn","gatewayState","name","networks"],"inputProperties":{"egressCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The range of IP addresses that contribute content or initiate output requests for flows communicating with this gateway. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16."},"name":{"type":"string","description":"The name of the gateway. This name can not be modified after the gateway is created."},"networks":{"type":"array","items":{"$ref":"#/types/aws-native:mediaconnect:GatewayNetwork"},"description":"The list of networks in the gateway."}},"requiredInputs":["egressCidrBlocks","networks"]},"aws-native:mediaconnect:RouterInput":{"description":"Represents a router input in AWS Elemental MediaConnect that is used to ingest content to be transmitted to router outputs","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the router input."},"availabilityZone":{"type":"string","description":"The Availability Zone where you want to create the router input. This must be a valid Availability Zone for the region specified by regionName, or the current region if no regionName is provided.","replaceOnChanges":true},"awsId":{"type":"string","description":"The unique identifier of the router input."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration2Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration3Properties"}]},"createdAt":{"type":"string","description":"The timestamp when the router input was created."},"inputType":{"$ref":"#/types/aws-native:mediaconnect:RouterInputType","description":"The type of the router input."},"ipAddress":{"type":"string","description":"The IP address of the router input."},"maintenanceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceConfiguration1Properties"}],"description":"The maintenance configuration settings applied to this router input."},"maintenanceType":{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceType","description":"The type of maintenance configuration applied to this router input."},"maximumBitrate":{"type":"integer","description":"The maximum bitrate for the router input."},"name":{"type":"string","description":"The name of the router input."},"regionName":{"type":"string","description":"The AWS Region for the router input. Defaults to the current region if not specified.","replaceOnChanges":true},"routedOutputs":{"type":"integer","description":"The number of router outputs associated with the router input."},"routingScope":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRoutingScope","description":"Indicates whether the router input is configured for Regional or global routing."},"state":{"$ref":"#/types/aws-native:mediaconnect:RouterInputState","description":"The current state of the router input."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this router input."},"tier":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTier","description":"The tier level of the router input."},"transitEncryption":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTransitEncryption","description":"Encryption information."},"updatedAt":{"type":"string","description":"The timestamp when the router input was last updated."}},"type":"object","required":["arn","awsId","configuration","createdAt","inputType","ipAddress","maintenanceType","maximumBitrate","name","routedOutputs","routingScope","state","tier","updatedAt"],"inputProperties":{"availabilityZone":{"type":"string","description":"The Availability Zone where you want to create the router input. This must be a valid Availability Zone for the region specified by regionName, or the current region if no regionName is provided."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration2Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration3Properties"}]},"maintenanceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceConfiguration1Properties"}],"description":"The maintenance configuration settings applied to this router input."},"maximumBitrate":{"type":"integer","description":"The maximum bitrate for the router input."},"name":{"type":"string","description":"The name of the router input."},"regionName":{"type":"string","description":"The AWS Region for the router input. Defaults to the current region if not specified."},"routingScope":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRoutingScope","description":"Indicates whether the router input is configured for Regional or global routing."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this router input."},"tier":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTier","description":"The tier level of the router input."},"transitEncryption":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTransitEncryption","description":"Encryption information."}},"requiredInputs":["configuration","maximumBitrate","routingScope","tier"]},"aws-native:mediaconnect:RouterNetworkInterface":{"description":"Represents a router network interface in AWS Elemental MediaConnect that is used to define a network boundary for router resources","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the router network interface."},"associatedInputCount":{"type":"integer","description":"The number of router inputs associated with the network interface."},"associatedOutputCount":{"type":"integer","description":"The number of router outputs associated with the network interface."},"awsId":{"type":"string","description":"The unique identifier of the router network interface."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceConfiguration1Properties"}]},"createdAt":{"type":"string","description":"The timestamp when the router network interface was created."},"name":{"type":"string","description":"The name of the router network interface."},"networkInterfaceType":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceType","description":"The type of the router network interface."},"regionName":{"type":"string","description":"The AWS Region for the router network interface. Defaults to the current region if not specified.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceState","description":"The current state of the router network interface."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this router network interface."},"updatedAt":{"type":"string","description":"The timestamp when the router network interface was last updated."}},"type":"object","required":["arn","associatedInputCount","associatedOutputCount","awsId","configuration","createdAt","name","networkInterfaceType","state","updatedAt"],"inputProperties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceConfiguration1Properties"}]},"name":{"type":"string","description":"The name of the router network interface."},"regionName":{"type":"string","description":"The AWS Region for the router network interface. Defaults to the current region if not specified."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag and organize this router network interface."}},"requiredInputs":["configuration"]},"aws-native:mediaconnect:RouterOutputResource":{"description":"Represents a router input in AWS Elemental MediaConnect that can be used to egress content transmitted from router inputs","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the router output."},"availabilityZone":{"type":"string","description":"The Availability Zone where you want to create the router output. This must be a valid Availability Zone for the region specified by regionName, or the current region if no regionName is provided.","replaceOnChanges":true},"awsId":{"type":"string","description":"The unique identifier of the router output."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration2Properties"}]},"createdAt":{"type":"string","description":"The timestamp when the router output was created."},"ipAddress":{"type":"string","description":"The IP address of the router output."},"maintenanceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration1Properties"}],"description":"The maintenance configuration settings applied to this router output."},"maintenanceType":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceType","description":"The type of maintenance configuration applied to this router output."},"maximumBitrate":{"type":"integer","description":"The maximum bitrate for the router output."},"name":{"type":"string","description":"The name of the router output."},"outputType":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputType","description":"The type of the router output."},"regionName":{"type":"string","description":"The AWS Region for the router output. Defaults to the current region if not specified.","replaceOnChanges":true},"routedState":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputRoutedState","description":"The current state of the association between the router output and its input."},"routingScope":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRoutingScope","description":"Indicates whether the router output is configured for Regional or global routing."},"state":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputState","description":"The overall state of the router output."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag this router output."},"tier":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputTier","description":"The tier level of the router output."},"updatedAt":{"type":"string","description":"The timestamp when the router output was last updated."}},"type":"object","required":["arn","awsId","configuration","createdAt","ipAddress","maintenanceType","maximumBitrate","name","outputType","routedState","routingScope","state","tier","updatedAt"],"inputProperties":{"availabilityZone":{"type":"string","description":"The Availability Zone where you want to create the router output. This must be a valid Availability Zone for the region specified by regionName, or the current region if no regionName is provided."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration2Properties"}]},"maintenanceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration1Properties"}],"description":"The maintenance configuration settings applied to this router output."},"maximumBitrate":{"type":"integer","description":"The maximum bitrate for the router output."},"name":{"type":"string","description":"The name of the router output."},"regionName":{"type":"string","description":"The AWS Region for the router output. Defaults to the current region if not specified."},"routingScope":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRoutingScope","description":"Indicates whether the router output is configured for Regional or global routing."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to tag this router output."},"tier":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputTier","description":"The tier level of the router output."}},"requiredInputs":["configuration","maximumBitrate","routingScope","tier"]},"aws-native:medialive:ChannelPlacementGroup":{"description":"Definition of AWS::MediaLive::ChannelPlacementGroup Resource Type","properties":{"arn":{"type":"string","description":"The ARN of the channel placement group."},"awsId":{"type":"string","description":"Unique internal identifier."},"channels":{"type":"array","items":{"type":"string"},"description":"List of channel IDs added to the channel placement group."},"clusterId":{"type":"string","description":"The ID of the cluster the node is on.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the channel placement group."},"nodes":{"type":"array","items":{"type":"string"},"description":"List of nodes added to the channel placement group"},"state":{"$ref":"#/types/aws-native:medialive:ChannelPlacementGroupState"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}},"type":"object","required":["arn","awsId","channels","state"],"inputProperties":{"clusterId":{"type":"string","description":"The ID of the cluster the node is on."},"name":{"type":"string","description":"The name of the channel placement group."},"nodes":{"type":"array","items":{"type":"string"},"description":"List of nodes added to the channel placement group"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}}},"aws-native:medialive:CloudWatchAlarmTemplate":{"description":"Definition of AWS::MediaLive::CloudWatchAlarmTemplate Resource Type","properties":{"arn":{"type":"string","description":"A cloudwatch alarm template's ARN (Amazon Resource Name)"},"awsId":{"type":"string","description":"A cloudwatch alarm template's id. AWS provided templates have ids that start with `aws-`"},"comparisonOperator":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateComparisonOperator","description":"The comparison operator used to compare the specified statistic and the threshold."},"createdAt":{"type":"string","description":"The date and time of resource creation."},"datapointsToAlarm":{"type":"number","description":"The number of datapoints within the evaluation period that must be breaching to trigger the alarm."},"description":{"type":"string","description":"A resource's optional description."},"evaluationPeriods":{"type":"number","description":"The number of periods over which data is compared to the specified threshold."},"groupId":{"type":"string","description":"A cloudwatch alarm template group's id. AWS provided template groups have ids that start with `aws-`"},"groupIdentifier":{"type":"string","description":"A cloudwatch alarm template group's identifier. Can be either be its id or current name."},"identifier":{"type":"string"},"metricName":{"type":"string","description":"The name of the metric associated with the alarm. Must be compatible with targetResourceType."},"modifiedAt":{"type":"string","description":"The date and time of latest resource modification."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"period":{"type":"number","description":"The period, in seconds, over which the specified statistic is applied."},"statistic":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateStatistic","description":"The statistic to apply to the alarm's metric data."},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true},"targetResourceType":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateTargetResourceType","description":"The resource type this template should dynamically generate CloudWatch metric alarms for."},"threshold":{"type":"number","description":"The threshold value to compare with the specified statistic."},"treatMissingData":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateTreatMissingData","description":"Specifies how missing data points are treated when evaluating the alarm's condition."}},"type":"object","required":["arn","awsId","comparisonOperator","createdAt","evaluationPeriods","groupId","identifier","metricName","modifiedAt","name","period","statistic","targetResourceType","threshold","treatMissingData"],"inputProperties":{"comparisonOperator":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateComparisonOperator","description":"The comparison operator used to compare the specified statistic and the threshold."},"datapointsToAlarm":{"type":"number","description":"The number of datapoints within the evaluation period that must be breaching to trigger the alarm."},"description":{"type":"string","description":"A resource's optional description."},"evaluationPeriods":{"type":"number","description":"The number of periods over which data is compared to the specified threshold."},"groupIdentifier":{"type":"string","description":"A cloudwatch alarm template group's identifier. Can be either be its id or current name."},"metricName":{"type":"string","description":"The name of the metric associated with the alarm. Must be compatible with targetResourceType."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"period":{"type":"number","description":"The period, in seconds, over which the specified statistic is applied."},"statistic":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateStatistic","description":"The statistic to apply to the alarm's metric data."},"tags":{"type":"object","additionalProperties":{"type":"string"}},"targetResourceType":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateTargetResourceType","description":"The resource type this template should dynamically generate CloudWatch metric alarms for."},"threshold":{"type":"number","description":"The threshold value to compare with the specified statistic."},"treatMissingData":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateTreatMissingData","description":"Specifies how missing data points are treated when evaluating the alarm's condition."}},"requiredInputs":["comparisonOperator","evaluationPeriods","metricName","period","statistic","targetResourceType","threshold","treatMissingData"]},"aws-native:medialive:CloudWatchAlarmTemplateGroup":{"description":"Definition of AWS::MediaLive::CloudWatchAlarmTemplateGroup Resource Type","properties":{"arn":{"type":"string","description":"A cloudwatch alarm template group's ARN (Amazon Resource Name)"},"awsId":{"type":"string","description":"A cloudwatch alarm template group's id. AWS provided template groups have ids that start with `aws-`"},"createdAt":{"type":"string","description":"The date and time of resource creation."},"description":{"type":"string","description":"A resource's optional description."},"identifier":{"type":"string"},"modifiedAt":{"type":"string","description":"The date and time of latest resource modification."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true}},"type":"object","required":["arn","awsId","createdAt","identifier","modifiedAt","name"],"inputProperties":{"description":{"type":"string","description":"A resource's optional description."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"tags":{"type":"object","additionalProperties":{"type":"string"}}}},"aws-native:medialive:Cluster":{"description":"Definition of AWS::MediaLive::Cluster Resource Type","properties":{"arn":{"type":"string","description":"The ARN of the Cluster."},"awsId":{"type":"string","description":"The unique ID of the Cluster."},"channelIds":{"type":"array","items":{"type":"string"},"description":"The MediaLive Channels that are currently running on Nodes in this Cluster."},"clusterType":{"$ref":"#/types/aws-native:medialive:ClusterType","replaceOnChanges":true},"instanceRoleArn":{"type":"string","description":"The IAM role your nodes will use.","replaceOnChanges":true},"name":{"type":"string","description":"The user-specified name of the Cluster to be created."},"networkSettings":{"$ref":"#/types/aws-native:medialive:ClusterNetworkSettings"},"state":{"$ref":"#/types/aws-native:medialive:ClusterState"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}},"type":"object","required":["arn","awsId","channelIds","state"],"inputProperties":{"clusterType":{"$ref":"#/types/aws-native:medialive:ClusterType"},"instanceRoleArn":{"type":"string","description":"The IAM role your nodes will use."},"name":{"type":"string","description":"The user-specified name of the Cluster to be created."},"networkSettings":{"$ref":"#/types/aws-native:medialive:ClusterNetworkSettings"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}}},"aws-native:medialive:EventBridgeRuleTemplate":{"description":"Definition of AWS::MediaLive::EventBridgeRuleTemplate Resource Type","properties":{"arn":{"type":"string","description":"An eventbridge rule template's ARN (Amazon Resource Name)"},"awsId":{"type":"string","description":"An eventbridge rule template's id. AWS provided templates have ids that start with `aws-`"},"createdAt":{"type":"string","description":"Placeholder documentation for __timestampIso8601"},"description":{"type":"string","description":"A resource's optional description."},"eventTargets":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:EventBridgeRuleTemplateTarget"},"description":"Placeholder documentation for __listOfEventBridgeRuleTemplateTarget"},"eventType":{"$ref":"#/types/aws-native:medialive:EventBridgeRuleTemplateEventType","description":"The type of event to match with the rule."},"groupId":{"type":"string","description":"An eventbridge rule template group's id. AWS provided template groups have ids that start with `aws-`"},"groupIdentifier":{"type":"string","description":"An eventbridge rule template group's identifier. Can be either be its id or current name."},"identifier":{"type":"string","description":"Placeholder documentation for __string"},"modifiedAt":{"type":"string","description":"Placeholder documentation for __timestampIso8601"},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true}},"type":"object","required":["arn","awsId","createdAt","eventType","groupId","identifier","modifiedAt","name"],"inputProperties":{"description":{"type":"string","description":"A resource's optional description."},"eventTargets":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:EventBridgeRuleTemplateTarget"},"description":"Placeholder documentation for __listOfEventBridgeRuleTemplateTarget"},"eventType":{"$ref":"#/types/aws-native:medialive:EventBridgeRuleTemplateEventType","description":"The type of event to match with the rule."},"groupIdentifier":{"type":"string","description":"An eventbridge rule template group's identifier. Can be either be its id or current name."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["eventType"]},"aws-native:medialive:EventBridgeRuleTemplateGroup":{"description":"Definition of AWS::MediaLive::EventBridgeRuleTemplateGroup Resource Type","properties":{"arn":{"type":"string","description":"An eventbridge rule template group's ARN (Amazon Resource Name)"},"awsId":{"type":"string","description":"An eventbridge rule template group's id. AWS provided template groups have ids that start with `aws-`"},"createdAt":{"type":"string","description":"The date and time of resource creation."},"description":{"type":"string","description":"A resource's optional description."},"identifier":{"type":"string"},"modifiedAt":{"type":"string","description":"The date and time of latest resource modification."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true}},"type":"object","required":["arn","awsId","createdAt","identifier","modifiedAt","name"],"inputProperties":{"description":{"type":"string","description":"A resource's optional description."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"tags":{"type":"object","additionalProperties":{"type":"string"}}}},"aws-native:medialive:Multiplex":{"description":"Resource schema for AWS::MediaLive::Multiplex","properties":{"arn":{"type":"string","description":"The unique arn of the multiplex."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of availability zones for the multiplex.","replaceOnChanges":true},"awsId":{"type":"string","description":"The unique id of the multiplex."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:MultiplexOutputDestination"},"description":"A list of the multiplex output destinations."},"multiplexSettings":{"$ref":"#/types/aws-native:medialive:MultiplexSettings","description":"Configuration for a multiplex event."},"name":{"type":"string","description":"Name of multiplex."},"pipelinesRunningCount":{"type":"integer","description":"The number of currently healthy pipelines."},"programCount":{"type":"integer","description":"The number of programs in the multiplex."},"state":{"$ref":"#/types/aws-native:medialive:MultiplexState","description":"The current state of the multiplex."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}},"type":"object","required":["arn","availabilityZones","awsId","multiplexSettings","name","pipelinesRunningCount","programCount","state"],"inputProperties":{"availabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of availability zones for the multiplex."},"destinations":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:MultiplexOutputDestination"},"description":"A list of the multiplex output destinations."},"multiplexSettings":{"$ref":"#/types/aws-native:medialive:MultiplexSettings","description":"Configuration for a multiplex event."},"name":{"type":"string","description":"Name of multiplex."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}},"requiredInputs":["availabilityZones","multiplexSettings"]},"aws-native:medialive:Multiplexprogram":{"description":"Resource schema for AWS::MediaLive::Multiplexprogram","properties":{"channelId":{"type":"string","description":"The MediaLive channel associated with the program."},"multiplexId":{"type":"string","description":"The ID of the multiplex that the program belongs to.","replaceOnChanges":true},"multiplexProgramSettings":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramSettings","description":"The settings for this multiplex program."},"packetIdentifiersMap":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramPacketIdentifiersMap","description":"The packet identifier map for this multiplex program."},"pipelineDetails":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramPipelineDetail"},"description":"Contains information about the current sources for the specified program in the specified multiplex. Keep in mind that each multiplex pipeline connects to both pipelines in a given source channel (the channel identified by the program). But only one of those channel pipelines is ever active at one time."},"preferredChannelPipeline":{"$ref":"#/types/aws-native:medialive:MultiplexprogramPreferredChannelPipeline","description":"The settings for this multiplex program."},"programName":{"type":"string","description":"The name of the multiplex program.","replaceOnChanges":true}},"type":"object","required":["channelId"],"inputProperties":{"multiplexId":{"type":"string","description":"The ID of the multiplex that the program belongs to."},"multiplexProgramSettings":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramSettings","description":"The settings for this multiplex program."},"packetIdentifiersMap":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramPacketIdentifiersMap","description":"The packet identifier map for this multiplex program."},"pipelineDetails":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramPipelineDetail"},"description":"Contains information about the current sources for the specified program in the specified multiplex. Keep in mind that each multiplex pipeline connects to both pipelines in a given source channel (the channel identified by the program). But only one of those channel pipelines is ever active at one time."},"preferredChannelPipeline":{"$ref":"#/types/aws-native:medialive:MultiplexprogramPreferredChannelPipeline","description":"The settings for this multiplex program."},"programName":{"type":"string","description":"The name of the multiplex program."}}},"aws-native:medialive:Network":{"description":"Resource schema for AWS::MediaLive::Network.","properties":{"arn":{"type":"string","description":"The ARN of the Network."},"associatedClusterIds":{"type":"array","items":{"type":"string"}},"awsId":{"type":"string","description":"The unique ID of the Network."},"ipPools":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:NetworkIpPool"},"description":"The list of IP address cidr pools for the network"},"name":{"type":"string","description":"The user-specified name of the Network to be created."},"routes":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:NetworkRoute"},"description":"The routes for the network"},"state":{"$ref":"#/types/aws-native:medialive:NetworkState","description":"The current state of the Network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}},"type":"object","required":["arn","associatedClusterIds","awsId","ipPools","name","state"],"inputProperties":{"ipPools":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:NetworkIpPool"},"description":"The list of IP address cidr pools for the network"},"name":{"type":"string","description":"The user-specified name of the Network to be created."},"routes":{"type":"array","items":{"$ref":"#/types/aws-native:medialive:NetworkRoute"},"description":"The routes for the network"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."}},"requiredInputs":["ipPools"]},"aws-native:medialive:SdiSource":{"description":"Definition of AWS::MediaLive::SdiSource Resource Type","properties":{"arn":{"type":"string","description":"The unique arn of the SdiSource."},"awsId":{"type":"string","description":"The unique identifier of the SdiSource."},"inputs":{"type":"array","items":{"type":"string"},"description":"The list of inputs currently using this SDI source."},"mode":{"$ref":"#/types/aws-native:medialive:SdiSourceMode"},"name":{"type":"string","description":"The name of the SdiSource."},"state":{"$ref":"#/types/aws-native:medialive:SdiSourceState"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."},"type":{"$ref":"#/types/aws-native:medialive:SdiSourceType"}},"type":"object","required":["arn","awsId","inputs","name","state","type"],"inputProperties":{"mode":{"$ref":"#/types/aws-native:medialive:SdiSourceMode"},"name":{"type":"string","description":"The name of the SdiSource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of key-value pairs."},"type":{"$ref":"#/types/aws-native:medialive:SdiSourceType"}},"requiredInputs":["type"]},"aws-native:medialive:SignalMap":{"description":"Definition of AWS::MediaLive::SignalMap Resource Type","properties":{"arn":{"type":"string","description":"A signal map's ARN (Amazon Resource Name)"},"awsId":{"type":"string","description":"A signal map's id."},"cloudWatchAlarmTemplateGroupIdentifiers":{"type":"array","items":{"type":"string"},"description":"A cloudwatch alarm template group's identifier. Can be either be its id or current name."},"cloudWatchAlarmTemplateGroupIds":{"type":"array","items":{"type":"string"},"description":"An alarm template group's id."},"createdAt":{"type":"string","description":"The date and time of resource creation."},"description":{"type":"string","description":"A resource's optional description."},"discoveryEntryPointArn":{"type":"string","description":"A top-level supported AWS resource ARN to discovery a signal map from."},"errorMessage":{"type":"string","description":"Error message associated with a failed creation or failed update attempt of a signal map."},"eventBridgeRuleTemplateGroupIdentifiers":{"type":"array","items":{"type":"string"},"description":"An eventbridge rule template group's identifier. Can be either be its id or current name."},"eventBridgeRuleTemplateGroupIds":{"type":"array","items":{"type":"string"},"description":"An eventbridge rule template group's id."},"failedMediaResourceMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:medialive:SignalMapMediaResource"}},"forceRediscovery":{"type":"boolean","description":"If true, will force a rediscovery of a signal map if an unchanged discoveryEntryPointArn is provided."},"identifier":{"type":"string"},"lastDiscoveredAt":{"type":"string","description":"The date and time of latest discovery."},"lastSuccessfulMonitorDeployment":{"$ref":"#/types/aws-native:medialive:SignalMapSuccessfulMonitorDeployment"},"mediaResourceMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:medialive:SignalMapMediaResource"}},"modifiedAt":{"type":"string","description":"The date and time of latest resource modification."},"monitorChangesPendingDeployment":{"type":"boolean","description":"If true, there are pending monitor changes for this signal map that can be deployed."},"monitorDeployment":{"$ref":"#/types/aws-native:medialive:SignalMapMonitorDeployment"},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"status":{"$ref":"#/types/aws-native:medialive:SignalMapStatus","description":"A signal map's current status, which is dependent on its lifecycle actions or associated jobs."},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true}},"type":"object","required":["arn","awsId","cloudWatchAlarmTemplateGroupIds","createdAt","discoveryEntryPointArn","errorMessage","eventBridgeRuleTemplateGroupIds","failedMediaResourceMap","identifier","lastDiscoveredAt","lastSuccessfulMonitorDeployment","mediaResourceMap","modifiedAt","monitorChangesPendingDeployment","monitorDeployment","name","status"],"inputProperties":{"cloudWatchAlarmTemplateGroupIdentifiers":{"type":"array","items":{"type":"string"},"description":"A cloudwatch alarm template group's identifier. Can be either be its id or current name."},"description":{"type":"string","description":"A resource's optional description."},"discoveryEntryPointArn":{"type":"string","description":"A top-level supported AWS resource ARN to discovery a signal map from."},"eventBridgeRuleTemplateGroupIdentifiers":{"type":"array","items":{"type":"string"},"description":"An eventbridge rule template group's identifier. Can be either be its id or current name."},"forceRediscovery":{"type":"boolean","description":"If true, will force a rediscovery of a signal map if an unchanged discoveryEntryPointArn is provided."},"name":{"type":"string","description":"A resource's name. Names must be unique within the scope of a resource type in a specific region."},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["discoveryEntryPointArn"]},"aws-native:mediapackage:Asset":{"description":"Resource schema for AWS::MediaPackage::Asset","properties":{"arn":{"type":"string","description":"The ARN of the Asset."},"awsId":{"type":"string","description":"The unique identifier for the Asset."},"createdAt":{"type":"string","description":"The time the Asset was initially submitted for Ingest."},"egressEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:AssetEgressEndpoint"},"description":"The list of egress endpoints available for the Asset."},"packagingGroupId":{"type":"string","description":"The ID of the PackagingGroup for the Asset."},"resourceId":{"type":"string","description":"The resource ID to include in SPEKE key requests."},"sourceArn":{"type":"string","description":"ARN of the source object in S3."},"sourceRoleArn":{"type":"string","description":"The IAM role_arn used to access the source S3 bucket."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource","replaceOnChanges":true}},"type":"object","required":["arn","awsId","createdAt","packagingGroupId","sourceArn","sourceRoleArn"],"inputProperties":{"awsId":{"type":"string","description":"The unique identifier for the Asset."},"egressEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackage:AssetEgressEndpoint"},"description":"The list of egress endpoints available for the Asset."},"packagingGroupId":{"type":"string","description":"The ID of the PackagingGroup for the Asset."},"resourceId":{"type":"string","description":"The resource ID to include in SPEKE key requests."},"sourceArn":{"type":"string","description":"ARN of the source object in S3."},"sourceRoleArn":{"type":"string","description":"The IAM role_arn used to access the source S3 bucket."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["awsId","packagingGroupId","sourceArn","sourceRoleArn"]},"aws-native:mediapackage:Channel":{"description":"Resource schema for AWS::MediaPackage::Channel","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the Channel."},"awsId":{"type":"string","description":"The ID of the Channel."},"description":{"type":"string","description":"A short text description of the Channel."},"egressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:ChannelLogConfiguration","description":"The configuration parameters for egress access logging."},"hlsIngest":{"$ref":"#/types/aws-native:mediapackage:ChannelHlsIngest","description":"An HTTP Live Streaming (HLS) ingest resource configuration."},"ingressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:ChannelLogConfiguration","description":"The configuration parameters for egress access logging."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource","replaceOnChanges":true}},"type":"object","required":["arn","awsId"],"inputProperties":{"awsId":{"type":"string","description":"The ID of the Channel."},"description":{"type":"string","description":"A short text description of the Channel."},"egressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:ChannelLogConfiguration","description":"The configuration parameters for egress access logging."},"hlsIngest":{"$ref":"#/types/aws-native:mediapackage:ChannelHlsIngest","description":"An HTTP Live Streaming (HLS) ingest resource configuration."},"ingressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:ChannelLogConfiguration","description":"The configuration parameters for egress access logging."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["awsId"]},"aws-native:mediapackage:OriginEndpoint":{"description":"Resource schema for AWS::MediaPackage::OriginEndpoint","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the OriginEndpoint."},"authorization":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointAuthorization","description":"Parameters for CDN authorization."},"awsId":{"type":"string","description":"The ID of the OriginEndpoint."},"channelId":{"type":"string","description":"The ID of the Channel the OriginEndpoint is associated with."},"cmafPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointCmafPackage","description":"Parameters for Common Media Application Format (CMAF) packaging."},"dashPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackage","description":"Parameters for DASH packaging."},"description":{"type":"string","description":"A short text description of the OriginEndpoint."},"hlsPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsPackage","description":"Parameters for Apple HLS packaging."},"manifestName":{"type":"string","description":"A short string appended to the end of the OriginEndpoint URL."},"mssPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointMssPackage","description":"Parameters for Microsoft Smooth Streaming packaging."},"origination":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointOrigination","description":"Control whether origination of video is allowed for this OriginEndpoint. If set to ALLOW, the OriginEndpoint may by requested, pursuant to any other form of access control. If set to DENY, the OriginEndpoint may not be requested. This can be helpful for Live to VOD harvesting, or for temporarily disabling origination"},"startoverWindowSeconds":{"type":"integer","description":"Maximum duration (seconds) of content to retain for startover playback. If not specified, startover playback will be disabled for the OriginEndpoint."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"},"timeDelaySeconds":{"type":"integer","description":"Amount of delay (seconds) to enforce on the playback of live content. If not specified, there will be no time delay in effect for the OriginEndpoint."},"url":{"type":"string","description":"The URL of the packaged OriginEndpoint for consumption."},"whitelist":{"type":"array","items":{"type":"string"},"description":"A list of source IP CIDR blocks that will be allowed to access the OriginEndpoint."}},"type":"object","required":["arn","awsId","channelId","url"],"inputProperties":{"authorization":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointAuthorization","description":"Parameters for CDN authorization."},"awsId":{"type":"string","description":"The ID of the OriginEndpoint."},"channelId":{"type":"string","description":"The ID of the Channel the OriginEndpoint is associated with."},"cmafPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointCmafPackage","description":"Parameters for Common Media Application Format (CMAF) packaging."},"dashPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackage","description":"Parameters for DASH packaging."},"description":{"type":"string","description":"A short text description of the OriginEndpoint."},"hlsPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsPackage","description":"Parameters for Apple HLS packaging."},"manifestName":{"type":"string","description":"A short string appended to the end of the OriginEndpoint URL."},"mssPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointMssPackage","description":"Parameters for Microsoft Smooth Streaming packaging."},"origination":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointOrigination","description":"Control whether origination of video is allowed for this OriginEndpoint. If set to ALLOW, the OriginEndpoint may by requested, pursuant to any other form of access control. If set to DENY, the OriginEndpoint may not be requested. This can be helpful for Live to VOD harvesting, or for temporarily disabling origination"},"startoverWindowSeconds":{"type":"integer","description":"Maximum duration (seconds) of content to retain for startover playback. If not specified, startover playback will be disabled for the OriginEndpoint."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"},"timeDelaySeconds":{"type":"integer","description":"Amount of delay (seconds) to enforce on the playback of live content. If not specified, there will be no time delay in effect for the OriginEndpoint."},"whitelist":{"type":"array","items":{"type":"string"},"description":"A list of source IP CIDR blocks that will be allowed to access the OriginEndpoint."}},"requiredInputs":["awsId","channelId"]},"aws-native:mediapackage:PackagingConfiguration":{"description":"Resource schema for AWS::MediaPackage::PackagingConfiguration","properties":{"arn":{"type":"string","description":"The ARN of the PackagingConfiguration."},"awsId":{"type":"string","description":"The ID of the PackagingConfiguration."},"cmafPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationCmafPackage","description":"A CMAF packaging configuration."},"dashPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashPackage","description":"A Dynamic Adaptive Streaming over HTTP (DASH) packaging configuration."},"hlsPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsPackage","description":"An HTTP Live Streaming (HLS) packaging configuration."},"mssPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationMssPackage","description":"A Microsoft Smooth Streaming (MSS) PackagingConfiguration."},"packagingGroupId":{"type":"string","description":"The ID of a PackagingGroup."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["arn","awsId","packagingGroupId"],"inputProperties":{"awsId":{"type":"string","description":"The ID of the PackagingConfiguration."},"cmafPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationCmafPackage","description":"A CMAF packaging configuration."},"dashPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashPackage","description":"A Dynamic Adaptive Streaming over HTTP (DASH) packaging configuration."},"hlsPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsPackage","description":"An HTTP Live Streaming (HLS) packaging configuration."},"mssPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationMssPackage","description":"A Microsoft Smooth Streaming (MSS) PackagingConfiguration."},"packagingGroupId":{"type":"string","description":"The ID of a PackagingGroup."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["awsId","packagingGroupId"]},"aws-native:mediapackage:PackagingGroup":{"description":"Resource schema for AWS::MediaPackage::PackagingGroup","properties":{"arn":{"type":"string","description":"The ARN of the PackagingGroup."},"authorization":{"$ref":"#/types/aws-native:mediapackage:PackagingGroupAuthorization","description":"CDN Authorization"},"awsId":{"type":"string","description":"The ID of the PackagingGroup."},"domainName":{"type":"string","description":"The fully qualified domain name for Assets in the PackagingGroup."},"egressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:PackagingGroupLogConfiguration","description":"The configuration parameters for egress access logging."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource","replaceOnChanges":true}},"type":"object","required":["arn","awsId","domainName"],"inputProperties":{"authorization":{"$ref":"#/types/aws-native:mediapackage:PackagingGroupAuthorization","description":"CDN Authorization"},"awsId":{"type":"string","description":"The ID of the PackagingGroup."},"egressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:PackagingGroupLogConfiguration","description":"The configuration parameters for egress access logging."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["awsId"]},"aws-native:mediapackagev2:Channel":{"description":"\u003cp\u003eRepresents an entry point into AWS Elemental MediaPackage for an ABR video content stream sent from an upstream encoder such as AWS Elemental MediaLive. The channel continuously analyzes the content that it receives and prepares it to be distributed to consumers via one or more origin endpoints.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e"},"channelGroupName":{"type":"string","description":"The name of the channel group associated with the channel configuration.","replaceOnChanges":true},"channelName":{"type":"string","description":"The name of the channel.","replaceOnChanges":true},"createdAt":{"type":"string","description":"\u003cp\u003eThe date and time the channel was created.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eEnter any descriptive text that helps you to identify the channel.\u003c/p\u003e"},"ingestEndpointUrls":{"type":"array","items":{"type":"string"},"description":"The ingest domain URL where the source stream should be sent."},"ingestEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:ChannelIngestEndpoint"},"description":"\u003cp\u003eThe list of ingest endpoints.\u003c/p\u003e"},"inputSwitchConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:ChannelInputSwitchConfiguration","description":"The configuration for input switching based on the media quality confidence score (MQCS) as provided from AWS Elemental MediaLive."},"inputType":{"$ref":"#/types/aws-native:mediapackagev2:ChannelInputType","description":"The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest. If unprovided, it will default to HLS to preserve current behavior.\n\nThe allowed values are:\n\n- `HLS` - The HLS streaming specification (which defines M3U8 manifests and TS segments).\n- `CMAF` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests).","replaceOnChanges":true},"modifiedAt":{"type":"string","description":"\u003cp\u003eThe date and time the channel was modified.\u003c/p\u003e"},"outputHeaderConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:ChannelOutputHeaderConfiguration","description":"The settings for what common media server data (CMSD) headers AWS Elemental MediaPackage includes in responses to the CDN."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"type":"object","required":["arn","channelGroupName","channelName","createdAt","ingestEndpointUrls","ingestEndpoints","modifiedAt"],"inputProperties":{"channelGroupName":{"type":"string","description":"The name of the channel group associated with the channel configuration."},"channelName":{"type":"string","description":"The name of the channel."},"description":{"type":"string","description":"\u003cp\u003eEnter any descriptive text that helps you to identify the channel.\u003c/p\u003e"},"inputSwitchConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:ChannelInputSwitchConfiguration","description":"The configuration for input switching based on the media quality confidence score (MQCS) as provided from AWS Elemental MediaLive."},"inputType":{"$ref":"#/types/aws-native:mediapackagev2:ChannelInputType","description":"The input type will be an immutable field which will be used to define whether the channel will allow CMAF ingest or HLS ingest. If unprovided, it will default to HLS to preserve current behavior.\n\nThe allowed values are:\n\n- `HLS` - The HLS streaming specification (which defines M3U8 manifests and TS segments).\n- `CMAF` - The DASH-IF CMAF Ingest specification (which defines CMAF segments with optional DASH manifests)."},"outputHeaderConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:ChannelOutputHeaderConfiguration","description":"The settings for what common media server data (CMSD) headers AWS Elemental MediaPackage includes in responses to the CDN."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["channelGroupName"]},"aws-native:mediapackagev2:ChannelGroup":{"description":"\u003cp\u003eRepresents a channel group that facilitates the grouping of multiple channels.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e"},"channelGroupName":{"type":"string","description":"The name of the channel group.","replaceOnChanges":true},"createdAt":{"type":"string","description":"\u003cp\u003eThe date and time the channel group was created.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eEnter any descriptive text that helps you to identify the channel group.\u003c/p\u003e"},"egressDomain":{"type":"string","description":"\u003cp\u003eThe output domain where the source stream should be sent. Integrate the domain with a downstream CDN (such as Amazon CloudFront) or playback device.\u003c/p\u003e"},"modifiedAt":{"type":"string","description":"\u003cp\u003eThe date and time the channel group was modified.\u003c/p\u003e"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the channel group."}},"type":"object","required":["arn","channelGroupName","createdAt","egressDomain","modifiedAt"],"inputProperties":{"channelGroupName":{"type":"string","description":"The name of the channel group."},"description":{"type":"string","description":"\u003cp\u003eEnter any descriptive text that helps you to identify the channel group.\u003c/p\u003e"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the channel group."}}},"aws-native:mediapackagev2:ChannelPolicy":{"description":"\u003cp\u003eRepresents a resource-based policy that allows or denies access to a channel.\u003c/p\u003e","properties":{"channelGroupName":{"type":"string","description":"The name of the channel group associated with the channel policy.","replaceOnChanges":true},"channelName":{"type":"string","description":"The name of the channel associated with the channel policy.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"The policy associated with the channel.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaPackageV2::ChannelPolicy` for more information about the expected schema for this property."}},"type":"object","required":["channelGroupName","channelName","policy"],"inputProperties":{"channelGroupName":{"type":"string","description":"The name of the channel group associated with the channel policy."},"channelName":{"type":"string","description":"The name of the channel associated with the channel policy."},"policy":{"$ref":"pulumi.json#/Any","description":"The policy associated with the channel.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaPackageV2::ChannelPolicy` for more information about the expected schema for this property."}},"requiredInputs":["channelGroupName","channelName","policy"]},"aws-native:mediapackagev2:OriginEndpoint":{"description":"\u003cp\u003eRepresents an origin endpoint that is associated with a channel, offering a dynamically repackaged version of its content through various streaming media protocols. The content can be efficiently disseminated to end-users via a Content Delivery Network (CDN), like Amazon CloudFront.\u003c/p\u003e","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e"},"channelGroupName":{"type":"string","description":"The name of the channel group associated with the origin endpoint configuration.","replaceOnChanges":true},"channelName":{"type":"string","description":"The channel name associated with the origin endpoint.","replaceOnChanges":true},"containerType":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointContainerType","description":"The container type associated with the origin endpoint configuration."},"createdAt":{"type":"string","description":"\u003cp\u003eThe date and time the origin endpoint was created.\u003c/p\u003e"},"dashManifestUrls":{"type":"array","items":{"type":"string"},"description":"The egress domain URL for stream delivery from MediaPackage."},"dashManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashManifestConfiguration"},"description":"\u003cp\u003eA DASH manifest configuration.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eEnter any descriptive text that helps you to identify the origin endpoint.\u003c/p\u003e"},"forceEndpointErrorConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointForceEndpointErrorConfiguration","description":"The failover settings for the endpoint."},"hlsManifestUrls":{"type":"array","items":{"type":"string"},"description":"The egress domain URL for stream delivery from MediaPackage."},"hlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointHlsManifestConfiguration"},"description":"\u003cp\u003eAn HTTP live streaming (HLS) manifest configuration.\u003c/p\u003e"},"lowLatencyHlsManifestUrls":{"type":"array","items":{"type":"string"},"description":"The egress domain URL for stream delivery from MediaPackage."},"lowLatencyHlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointLowLatencyHlsManifestConfiguration"},"description":"\u003cp\u003eA low-latency HLS manifest configuration.\u003c/p\u003e"},"modifiedAt":{"type":"string","description":"\u003cp\u003eThe date and time the origin endpoint was modified.\u003c/p\u003e"},"mssManifestUrls":{"type":"array","items":{"type":"string"}},"mssManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointMssManifestConfiguration"},"description":"\u003cp\u003eThe Microsoft Smooth Streaming (MSS) manifest configurations associated with this origin endpoint.\u003c/p\u003e"},"originEndpointName":{"type":"string","description":"The name of the origin endpoint associated with the origin endpoint configuration.","replaceOnChanges":true},"segment":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointSegment","description":"The segment associated with the origin endpoint."},"startoverWindowSeconds":{"type":"integer","description":"\u003cp\u003eThe size of the window (in seconds) to create a window of the live stream that's available for on-demand viewing. Viewers can start-over or catch-up on content that falls within the window. The maximum startover window is 1,209,600 seconds (14 days).\u003c/p\u003e"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the origin endpoint."}},"type":"object","required":["arn","channelGroupName","channelName","containerType","createdAt","dashManifestUrls","hlsManifestUrls","lowLatencyHlsManifestUrls","modifiedAt","mssManifestUrls","originEndpointName"],"inputProperties":{"channelGroupName":{"type":"string","description":"The name of the channel group associated with the origin endpoint configuration."},"channelName":{"type":"string","description":"The channel name associated with the origin endpoint."},"containerType":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointContainerType","description":"The container type associated with the origin endpoint configuration."},"dashManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashManifestConfiguration"},"description":"\u003cp\u003eA DASH manifest configuration.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eEnter any descriptive text that helps you to identify the origin endpoint.\u003c/p\u003e"},"forceEndpointErrorConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointForceEndpointErrorConfiguration","description":"The failover settings for the endpoint."},"hlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointHlsManifestConfiguration"},"description":"\u003cp\u003eAn HTTP live streaming (HLS) manifest configuration.\u003c/p\u003e"},"lowLatencyHlsManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointLowLatencyHlsManifestConfiguration"},"description":"\u003cp\u003eA low-latency HLS manifest configuration.\u003c/p\u003e"},"mssManifests":{"type":"array","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointMssManifestConfiguration"},"description":"\u003cp\u003eThe Microsoft Smooth Streaming (MSS) manifest configurations associated with this origin endpoint.\u003c/p\u003e"},"originEndpointName":{"type":"string","description":"The name of the origin endpoint associated with the origin endpoint configuration."},"segment":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointSegment","description":"The segment associated with the origin endpoint."},"startoverWindowSeconds":{"type":"integer","description":"\u003cp\u003eThe size of the window (in seconds) to create a window of the live stream that's available for on-demand viewing. Viewers can start-over or catch-up on content that falls within the window. The maximum startover window is 1,209,600 seconds (14 days).\u003c/p\u003e"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the origin endpoint."}},"requiredInputs":["channelGroupName","channelName","containerType"]},"aws-native:mediapackagev2:OriginEndpointPolicy":{"description":"\u003cp\u003eRepresents a resource policy that allows or denies access to an origin endpoint.\u003c/p\u003e","properties":{"cdnAuthConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointPolicyCdnAuthConfiguration","description":"The settings to enable CDN authorization headers in MediaPackage."},"channelGroupName":{"type":"string","description":"The name of the channel group associated with the origin endpoint policy.","replaceOnChanges":true},"channelName":{"type":"string","description":"The channel name associated with the origin endpoint policy.","replaceOnChanges":true},"originEndpointName":{"type":"string","description":"The name of the origin endpoint associated with the origin endpoint policy.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"The policy associated with the origin endpoint.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaPackageV2::OriginEndpointPolicy` for more information about the expected schema for this property."}},"type":"object","required":["channelGroupName","channelName","originEndpointName","policy"],"inputProperties":{"cdnAuthConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointPolicyCdnAuthConfiguration","description":"The settings to enable CDN authorization headers in MediaPackage."},"channelGroupName":{"type":"string","description":"The name of the channel group associated with the origin endpoint policy."},"channelName":{"type":"string","description":"The channel name associated with the origin endpoint policy."},"originEndpointName":{"type":"string","description":"The name of the origin endpoint associated with the origin endpoint policy."},"policy":{"$ref":"pulumi.json#/Any","description":"The policy associated with the origin endpoint.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaPackageV2::OriginEndpointPolicy` for more information about the expected schema for this property."}},"requiredInputs":["channelGroupName","channelName","originEndpointName","policy"]},"aws-native:mediatailor:Channel":{"description":"Definition of AWS::MediaTailor::Channel Resource Type","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe ARN of the channel.\u003c/p\u003e"},"audiences":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe list of audiences defined in channel.\u003c/p\u003e"},"channelName":{"type":"string","description":"The name of the channel.","replaceOnChanges":true},"fillerSlate":{"$ref":"#/types/aws-native:mediatailor:ChannelSlateSource","description":"The slate used to fill gaps between programs in the schedule. You must configure filler slate if your channel uses the `LINEAR` `PlaybackMode` . MediaTailor doesn't support filler slate for channels using the `LOOP` `PlaybackMode` ."},"logConfiguration":{"$ref":"#/types/aws-native:mediatailor:ChannelLogConfigurationForChannel","description":"The log configuration."},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:ChannelRequestOutputItem"},"description":"\u003cp\u003eThe channel's output properties.\u003c/p\u003e"},"playbackMode":{"$ref":"#/types/aws-native:mediatailor:ChannelPlaybackMode","description":"The type of playback mode for this channel.\n\n`LINEAR` - Programs play back-to-back only once.\n\n`LOOP` - Programs play back-to-back in an endless loop. When the last program in the schedule plays, playback loops back to the first program in the schedule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the channel."},"tier":{"$ref":"#/types/aws-native:mediatailor:ChannelTier","description":"The tier for this channel. STANDARD tier channels can contain live programs.","replaceOnChanges":true},"timeShiftConfiguration":{"$ref":"#/types/aws-native:mediatailor:ChannelTimeShiftConfiguration","description":"The configuration for time-shifted viewing."}},"type":"object","required":["arn","channelName","outputs","playbackMode"],"inputProperties":{"audiences":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe list of audiences defined in channel.\u003c/p\u003e"},"channelName":{"type":"string","description":"The name of the channel."},"fillerSlate":{"$ref":"#/types/aws-native:mediatailor:ChannelSlateSource","description":"The slate used to fill gaps between programs in the schedule. You must configure filler slate if your channel uses the `LINEAR` `PlaybackMode` . MediaTailor doesn't support filler slate for channels using the `LOOP` `PlaybackMode` ."},"logConfiguration":{"$ref":"#/types/aws-native:mediatailor:ChannelLogConfigurationForChannel","description":"The log configuration."},"outputs":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:ChannelRequestOutputItem"},"description":"\u003cp\u003eThe channel's output properties.\u003c/p\u003e"},"playbackMode":{"$ref":"#/types/aws-native:mediatailor:ChannelPlaybackMode","description":"The type of playback mode for this channel.\n\n`LINEAR` - Programs play back-to-back only once.\n\n`LOOP` - Programs play back-to-back in an endless loop. When the last program in the schedule plays, playback loops back to the first program in the schedule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the channel."},"tier":{"$ref":"#/types/aws-native:mediatailor:ChannelTier","description":"The tier for this channel. STANDARD tier channels can contain live programs."},"timeShiftConfiguration":{"$ref":"#/types/aws-native:mediatailor:ChannelTimeShiftConfiguration","description":"The configuration for time-shifted viewing."}},"requiredInputs":["outputs","playbackMode"]},"aws-native:mediatailor:ChannelPolicy":{"description":"Definition of AWS::MediaTailor::ChannelPolicy Resource Type","properties":{"channelName":{"type":"string","description":"The name of the channel associated with this Channel Policy.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"\u003cp\u003eThe IAM policy for the channel. IAM policies are used to control access to your channel.\u003c/p\u003e\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaTailor::ChannelPolicy` for more information about the expected schema for this property."}},"type":"object","required":["channelName","policy"],"inputProperties":{"channelName":{"type":"string","description":"The name of the channel associated with this Channel Policy."},"policy":{"$ref":"pulumi.json#/Any","description":"\u003cp\u003eThe IAM policy for the channel. IAM policies are used to control access to your channel.\u003c/p\u003e\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaTailor::ChannelPolicy` for more information about the expected schema for this property."}},"requiredInputs":["channelName","policy"]},"aws-native:mediatailor:LiveSource":{"description":"Definition of AWS::MediaTailor::LiveSource Resource Type","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe ARN of the live source.\u003c/p\u003e"},"httpPackageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:LiveSourceHttpPackageConfiguration"},"description":"\u003cp\u003eA list of HTTP package configuration parameters for this live source.\u003c/p\u003e"},"liveSourceName":{"type":"string","description":"The name that's used to refer to a live source.","replaceOnChanges":true},"sourceLocationName":{"type":"string","description":"The name of the source location.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the live source."}},"type":"object","required":["arn","httpPackageConfigurations","liveSourceName","sourceLocationName"],"inputProperties":{"httpPackageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:LiveSourceHttpPackageConfiguration"},"description":"\u003cp\u003eA list of HTTP package configuration parameters for this live source.\u003c/p\u003e"},"liveSourceName":{"type":"string","description":"The name that's used to refer to a live source."},"sourceLocationName":{"type":"string","description":"The name of the source location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the live source."}},"requiredInputs":["httpPackageConfigurations","sourceLocationName"]},"aws-native:mediatailor:PlaybackConfiguration":{"description":"Resource schema for AWS::MediaTailor::PlaybackConfiguration","properties":{"adConditioningConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdConditioningConfiguration","description":"The setting that indicates what conditioning MediaTailor will perform on ads that the ad decision server (ADS) returns, and what priority MediaTailor uses when inserting ads."},"adDecisionServerConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdDecisionServerConfiguration"},"adDecisionServerUrl":{"type":"string","description":"The URL for the ad decision server (ADS). This includes the specification of static parameters and placeholders for dynamic parameters. AWS Elemental MediaTailor substitutes player-specific and session-specific parameters as needed when calling the ADS. Alternately, for testing you can provide a static VAST URL. The maximum length is 25,000 characters."},"availSuppression":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAvailSuppression","description":"The configuration for avail suppression, also known as ad suppression. For more information about ad suppression, see Ad Suppression (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html)."},"bumper":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationBumper","description":"The configuration for bumpers. Bumpers are short audio or video clips that play at the start or before the end of an ad break. To learn more about bumpers, see Bumpers (https://docs.aws.amazon.com/mediatailor/latest/ug/bumpers.html)."},"cdnConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationCdnConfiguration","description":"The configuration for using a content delivery network (CDN), like Amazon CloudFront, for content and ad segment management."},"configurationAliases":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The player parameters and aliases used as dynamic variables during session initialization. For more information, see Domain Variables. "},"dashConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationDashConfiguration","description":"The configuration for DASH content."},"hlsConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationHlsConfiguration","description":"The configuration for HLS content."},"insertionMode":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationInsertionMode","description":"The setting that controls whether players can use stitched or guided ad insertion. The default, STITCHED_ONLY, forces all player sessions to use stitched (server-side) ad insertion. Choosing PLAYER_SELECT allows players to select either stitched or guided ad insertion at session-initialization time. The default for players that do not specify an insertion mode is stitched."},"livePreRollConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationLivePreRollConfiguration","description":"The configuration for pre-roll ad insertion."},"logConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationLogConfiguration","description":"The configuration that defines where AWS Elemental MediaTailor sends logs for the playback configuration."},"manifestProcessingRules":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationManifestProcessingRules","description":"The configuration for manifest processing rules. Manifest processing rules enable customization of the personalized manifests created by MediaTailor."},"name":{"type":"string","description":"The identifier for the playback configuration.","replaceOnChanges":true},"personalizationThresholdSeconds":{"type":"integer","description":"Defines the maximum duration of underfilled ad time (in seconds) allowed in an ad break. If the duration of underfilled ad time exceeds the personalization threshold, then the personalization of the ad break is abandoned and the underlying content is shown. This feature applies to ad replacement in live and VOD streams, rather than ad insertion, because it relies on an underlying content stream. For more information about ad break behavior, including ad replacement and insertion, see Ad Behavior in AWS Elemental MediaTailor (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html)."},"playbackConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the playback configuration."},"playbackEndpointPrefix":{"type":"string","description":"The URL that the player accesses to get a manifest from MediaTailor. This session will use server-side reporting."},"sessionInitializationEndpointPrefix":{"type":"string","description":"The URL that the player uses to initialize a session that uses client-side reporting."},"slateAdUrl":{"type":"string","description":"The URL for a high-quality video asset to transcode and use to fill in time that's not used by ads. AWS Elemental MediaTailor shows the slate to fill in gaps in media content. Configuring the slate is optional for non-VPAID configurations. For VPAID, the slate is required because MediaTailor provides it in the slots that are designated for dynamic ad content. The slate must be a high-quality asset that contains both audio and video."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the playback configuration."},"transcodeProfileName":{"type":"string","description":"The name that is used to associate this playback configuration with a custom transcode profile. This overrides the dynamic transcoding defaults of MediaTailor. Use this only if you have already set up custom profiles with the help of AWS Support."},"videoContentSourceUrl":{"type":"string","description":"The URL prefix for the parent manifest for the stream, minus the asset ID. The maximum length is 512 characters."}},"type":"object","required":["adDecisionServerUrl","name","playbackConfigurationArn","playbackEndpointPrefix","sessionInitializationEndpointPrefix","videoContentSourceUrl"],"inputProperties":{"adConditioningConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdConditioningConfiguration","description":"The setting that indicates what conditioning MediaTailor will perform on ads that the ad decision server (ADS) returns, and what priority MediaTailor uses when inserting ads."},"adDecisionServerConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdDecisionServerConfiguration"},"adDecisionServerUrl":{"type":"string","description":"The URL for the ad decision server (ADS). This includes the specification of static parameters and placeholders for dynamic parameters. AWS Elemental MediaTailor substitutes player-specific and session-specific parameters as needed when calling the ADS. Alternately, for testing you can provide a static VAST URL. The maximum length is 25,000 characters."},"availSuppression":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAvailSuppression","description":"The configuration for avail suppression, also known as ad suppression. For more information about ad suppression, see Ad Suppression (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html)."},"bumper":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationBumper","description":"The configuration for bumpers. Bumpers are short audio or video clips that play at the start or before the end of an ad break. To learn more about bumpers, see Bumpers (https://docs.aws.amazon.com/mediatailor/latest/ug/bumpers.html)."},"cdnConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationCdnConfiguration","description":"The configuration for using a content delivery network (CDN), like Amazon CloudFront, for content and ad segment management."},"configurationAliases":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The player parameters and aliases used as dynamic variables during session initialization. For more information, see Domain Variables. "},"dashConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationDashConfiguration","description":"The configuration for DASH content."},"hlsConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationHlsConfiguration","description":"The configuration for HLS content."},"insertionMode":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationInsertionMode","description":"The setting that controls whether players can use stitched or guided ad insertion. The default, STITCHED_ONLY, forces all player sessions to use stitched (server-side) ad insertion. Choosing PLAYER_SELECT allows players to select either stitched or guided ad insertion at session-initialization time. The default for players that do not specify an insertion mode is stitched."},"livePreRollConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationLivePreRollConfiguration","description":"The configuration for pre-roll ad insertion."},"logConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationLogConfiguration","description":"The configuration that defines where AWS Elemental MediaTailor sends logs for the playback configuration."},"manifestProcessingRules":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationManifestProcessingRules","description":"The configuration for manifest processing rules. Manifest processing rules enable customization of the personalized manifests created by MediaTailor."},"name":{"type":"string","description":"The identifier for the playback configuration."},"personalizationThresholdSeconds":{"type":"integer","description":"Defines the maximum duration of underfilled ad time (in seconds) allowed in an ad break. If the duration of underfilled ad time exceeds the personalization threshold, then the personalization of the ad break is abandoned and the underlying content is shown. This feature applies to ad replacement in live and VOD streams, rather than ad insertion, because it relies on an underlying content stream. For more information about ad break behavior, including ad replacement and insertion, see Ad Behavior in AWS Elemental MediaTailor (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html)."},"slateAdUrl":{"type":"string","description":"The URL for a high-quality video asset to transcode and use to fill in time that's not used by ads. AWS Elemental MediaTailor shows the slate to fill in gaps in media content. Configuring the slate is optional for non-VPAID configurations. For VPAID, the slate is required because MediaTailor provides it in the slots that are designated for dynamic ad content. The slate must be a high-quality asset that contains both audio and video."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the playback configuration."},"transcodeProfileName":{"type":"string","description":"The name that is used to associate this playback configuration with a custom transcode profile. This overrides the dynamic transcoding defaults of MediaTailor. Use this only if you have already set up custom profiles with the help of AWS Support."},"videoContentSourceUrl":{"type":"string","description":"The URL prefix for the parent manifest for the stream, minus the asset ID. The maximum length is 512 characters."}},"requiredInputs":["adDecisionServerUrl","videoContentSourceUrl"]},"aws-native:mediatailor:SourceLocation":{"description":"Definition of AWS::MediaTailor::SourceLocation Resource Type","properties":{"accessConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationAccessConfiguration","description":"The access configuration for the source location."},"arn":{"type":"string","description":"\u003cp\u003eThe ARN of the source location.\u003c/p\u003e"},"defaultSegmentDeliveryConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationDefaultSegmentDeliveryConfiguration","description":"The default segment delivery configuration."},"httpConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationHttpConfiguration","description":"The HTTP configuration for the source location."},"segmentDeliveryConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:SourceLocationSegmentDeliveryConfiguration"},"description":"\u003cp\u003eA list of the segment delivery configurations associated with this resource.\u003c/p\u003e"},"sourceLocationName":{"type":"string","description":"The name of the source location.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the source location."}},"type":"object","required":["arn","httpConfiguration","sourceLocationName"],"inputProperties":{"accessConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationAccessConfiguration","description":"The access configuration for the source location."},"defaultSegmentDeliveryConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationDefaultSegmentDeliveryConfiguration","description":"The default segment delivery configuration."},"httpConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationHttpConfiguration","description":"The HTTP configuration for the source location."},"segmentDeliveryConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:SourceLocationSegmentDeliveryConfiguration"},"description":"\u003cp\u003eA list of the segment delivery configurations associated with this resource.\u003c/p\u003e"},"sourceLocationName":{"type":"string","description":"The name of the source location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the source location."}},"requiredInputs":["httpConfiguration"]},"aws-native:mediatailor:VodSource":{"description":"Definition of AWS::MediaTailor::VodSource Resource Type","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe ARN of the VOD source.\u003c/p\u003e"},"httpPackageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:VodSourceHttpPackageConfiguration"},"description":"\u003cp\u003eA list of HTTP package configuration parameters for this VOD source.\u003c/p\u003e"},"sourceLocationName":{"type":"string","description":"The name of the source location that the VOD source is associated with.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the VOD source."},"vodSourceName":{"type":"string","description":"The name of the VOD source.","replaceOnChanges":true}},"type":"object","required":["arn","httpPackageConfigurations","sourceLocationName","vodSourceName"],"inputProperties":{"httpPackageConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:mediatailor:VodSourceHttpPackageConfiguration"},"description":"\u003cp\u003eA list of HTTP package configuration parameters for this VOD source.\u003c/p\u003e"},"sourceLocationName":{"type":"string","description":"The name of the source location that the VOD source is associated with."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to assign to the VOD source."},"vodSourceName":{"type":"string","description":"The name of the VOD source."}},"requiredInputs":["httpPackageConfigurations","sourceLocationName"]},"aws-native:memorydb:Acl":{"description":"Resource Type definition for AWS::MemoryDB::ACL","properties":{"aclName":{"type":"string","description":"The name of the acl.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the acl."},"status":{"type":"string","description":"Indicates acl status. Can be \"creating\", \"active\", \"modifying\", \"deleting\"."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this cluster."},"userNames":{"type":"array","items":{"type":"string"},"description":"List of users associated to this acl."}},"type":"object","required":["aclName","arn","status"],"inputProperties":{"aclName":{"type":"string","description":"The name of the acl."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this cluster."},"userNames":{"type":"array","items":{"type":"string"},"description":"List of users associated to this acl."}}},"aws-native:memorydb:Cluster":{"description":"The AWS::MemoryDB::Cluster resource creates an Amazon MemoryDB Cluster.","properties":{"aclName":{"type":"string","description":"The name of the Access Control List to associate with the cluster."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cluster."},"autoMinorVersionUpgrade":{"type":"boolean","description":"A flag that enables automatic minor version upgrade when set to true.\n\nYou cannot modify the value of AutoMinorVersionUpgrade after the cluster is created. To enable AutoMinorVersionUpgrade on a cluster you must set AutoMinorVersionUpgrade to true when you create a cluster."},"clusterEndpoint":{"$ref":"#/types/aws-native:memorydb:ClusterEndpoint","description":"The cluster endpoint."},"clusterName":{"type":"string","description":"The name of the cluster. This value must be unique as it also serves as the cluster identifier.","replaceOnChanges":true},"dataTiering":{"$ref":"#/types/aws-native:memorydb:ClusterDataTieringStatus","description":"Enables data tiering. Data tiering is only supported for clusters using the r6gd node type. This parameter must be set when using r6gd nodes.","replaceOnChanges":true},"description":{"type":"string","description":"An optional description of the cluster."},"engine":{"type":"string","description":"The engine type used by the cluster."},"engineVersion":{"type":"string","description":"The Redis engine version used by the cluster."},"finalSnapshotName":{"type":"string","description":"The user-supplied name of a final cluster snapshot. This is the unique name that identifies the snapshot. MemoryDB creates the snapshot, and then deletes the cluster immediately afterward."},"ipDiscovery":{"$ref":"#/types/aws-native:memorydb:ClusterSupportedIpDiscoveryTypes","description":"For clusters wth dual stack NetworkType, IpDiscovery controls the Ip protocol (ipv4 or ipv6) returned by the engine commands such as `cluster info` and `cluster nodes` which are used by clients to connect to the nodes in the cluster."},"kmsKeyId":{"type":"string","description":"The ID of the KMS key used to encrypt the cluster.","replaceOnChanges":true},"maintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum maintenance window is a 60 minute period."},"multiRegionClusterName":{"type":"string","description":"The name of the Global Datastore, it is generated by MemoryDB adding a prefix to MultiRegionClusterNameSuffix.","replaceOnChanges":true},"networkType":{"$ref":"#/types/aws-native:memorydb:ClusterSupportedNetworkTypes","description":"Must be either ipv4 | ipv6 | dual_stack.","replaceOnChanges":true},"nodeType":{"type":"string","description":"The compute and memory capacity of the nodes in the cluster."},"numReplicasPerShard":{"type":"integer","description":"The number of replicas to apply to each shard. The limit is 5."},"numShards":{"type":"integer","description":"The number of shards the cluster will contain."},"parameterGroupName":{"type":"string","description":"The name of the parameter group associated with the cluster."},"parameterGroupStatus":{"type":"string","description":"The status of the parameter group used by the cluster."},"port":{"type":"integer","description":"The port number on which each member of the cluster accepts connections.","replaceOnChanges":true},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more Amazon VPC security groups associated with this cluster."},"snapshotArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARN) that uniquely identify the RDB snapshot files stored in Amazon S3. The snapshot files are used to populate the new cluster. The Amazon S3 object name in the ARN cannot contain any commas.","replaceOnChanges":true},"snapshotName":{"type":"string","description":"The name of a snapshot from which to restore data into the new cluster. The snapshot status changes to restoring while the new cluster is being created.","replaceOnChanges":true},"snapshotRetentionLimit":{"type":"integer","description":"The number of days for which MemoryDB retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted."},"snapshotWindow":{"type":"string","description":"The daily time range (in UTC) during which MemoryDB begins taking a daily snapshot of your cluster."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) topic to which notifications are sent."},"snsTopicStatus":{"type":"string","description":"The status of the Amazon SNS notification topic. Notifications are sent only if the status is enabled."},"status":{"type":"string","description":"The status of the cluster. For example, Available, Updating, Creating."},"subnetGroupName":{"type":"string","description":"The name of the subnet group to be used for the cluster.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this cluster."},"tlsEnabled":{"type":"boolean","description":"A flag that enables in-transit encryption when set to true.\n\nYou cannot modify the value of TransitEncryptionEnabled after the cluster is created. To enable in-transit encryption on a cluster you must set TransitEncryptionEnabled to true when you create a cluster.","replaceOnChanges":true}},"type":"object","required":["aclName","arn","clusterName","nodeType","parameterGroupStatus","status"],"inputProperties":{"aclName":{"type":"string","description":"The name of the Access Control List to associate with the cluster."},"autoMinorVersionUpgrade":{"type":"boolean","description":"A flag that enables automatic minor version upgrade when set to true.\n\nYou cannot modify the value of AutoMinorVersionUpgrade after the cluster is created. To enable AutoMinorVersionUpgrade on a cluster you must set AutoMinorVersionUpgrade to true when you create a cluster."},"clusterEndpoint":{"$ref":"#/types/aws-native:memorydb:ClusterEndpoint","description":"The cluster endpoint."},"clusterName":{"type":"string","description":"The name of the cluster. This value must be unique as it also serves as the cluster identifier."},"dataTiering":{"$ref":"#/types/aws-native:memorydb:ClusterDataTieringStatus","description":"Enables data tiering. Data tiering is only supported for clusters using the r6gd node type. This parameter must be set when using r6gd nodes."},"description":{"type":"string","description":"An optional description of the cluster."},"engine":{"type":"string","description":"The engine type used by the cluster."},"engineVersion":{"type":"string","description":"The Redis engine version used by the cluster."},"finalSnapshotName":{"type":"string","description":"The user-supplied name of a final cluster snapshot. This is the unique name that identifies the snapshot. MemoryDB creates the snapshot, and then deletes the cluster immediately afterward."},"ipDiscovery":{"$ref":"#/types/aws-native:memorydb:ClusterSupportedIpDiscoveryTypes","description":"For clusters wth dual stack NetworkType, IpDiscovery controls the Ip protocol (ipv4 or ipv6) returned by the engine commands such as `cluster info` and `cluster nodes` which are used by clients to connect to the nodes in the cluster."},"kmsKeyId":{"type":"string","description":"The ID of the KMS key used to encrypt the cluster."},"maintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum maintenance window is a 60 minute period."},"multiRegionClusterName":{"type":"string","description":"The name of the Global Datastore, it is generated by MemoryDB adding a prefix to MultiRegionClusterNameSuffix."},"networkType":{"$ref":"#/types/aws-native:memorydb:ClusterSupportedNetworkTypes","description":"Must be either ipv4 | ipv6 | dual_stack."},"nodeType":{"type":"string","description":"The compute and memory capacity of the nodes in the cluster."},"numReplicasPerShard":{"type":"integer","description":"The number of replicas to apply to each shard. The limit is 5."},"numShards":{"type":"integer","description":"The number of shards the cluster will contain."},"parameterGroupName":{"type":"string","description":"The name of the parameter group associated with the cluster."},"port":{"type":"integer","description":"The port number on which each member of the cluster accepts connections."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more Amazon VPC security groups associated with this cluster."},"snapshotArns":{"type":"array","items":{"type":"string"},"description":"A list of Amazon Resource Names (ARN) that uniquely identify the RDB snapshot files stored in Amazon S3. The snapshot files are used to populate the new cluster. The Amazon S3 object name in the ARN cannot contain any commas."},"snapshotName":{"type":"string","description":"The name of a snapshot from which to restore data into the new cluster. The snapshot status changes to restoring while the new cluster is being created."},"snapshotRetentionLimit":{"type":"integer","description":"The number of days for which MemoryDB retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted."},"snapshotWindow":{"type":"string","description":"The daily time range (in UTC) during which MemoryDB begins taking a daily snapshot of your cluster."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) topic to which notifications are sent."},"snsTopicStatus":{"type":"string","description":"The status of the Amazon SNS notification topic. Notifications are sent only if the status is enabled."},"subnetGroupName":{"type":"string","description":"The name of the subnet group to be used for the cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this cluster."},"tlsEnabled":{"type":"boolean","description":"A flag that enables in-transit encryption when set to true.\n\nYou cannot modify the value of TransitEncryptionEnabled after the cluster is created. To enable in-transit encryption on a cluster you must set TransitEncryptionEnabled to true when you create a cluster."}},"requiredInputs":["aclName","nodeType"]},"aws-native:memorydb:MultiRegionCluster":{"description":"The AWS::MemoryDB::Multi Region Cluster resource creates an Amazon MemoryDB Multi Region Cluster.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the multi region cluster."},"description":{"type":"string","description":"Description of the multi region cluster."},"engine":{"type":"string","description":"The engine type used by the multi region cluster."},"engineVersion":{"type":"string","description":"The Redis engine version used by the multi region cluster.","replaceOnChanges":true},"multiRegionClusterName":{"type":"string","description":"The name of the Global Datastore, it is generated by MemoryDB adding a prefix to MultiRegionClusterNameSuffix."},"multiRegionClusterNameSuffix":{"type":"string","description":"The name of the Multi Region cluster. This value must be unique as it also serves as the multi region cluster identifier.","replaceOnChanges":true},"multiRegionParameterGroupName":{"type":"string","description":"The name of the parameter group associated with the multi region cluster.","replaceOnChanges":true},"nodeType":{"type":"string","description":"The compute and memory capacity of the nodes in the multi region cluster."},"numShards":{"type":"integer","description":"The number of shards the multi region cluster will contain."},"status":{"type":"string","description":"The status of the multi region cluster. For example, Available, Updating, Creating."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this multi region cluster."},"tlsEnabled":{"type":"boolean","description":"A flag that enables in-transit encryption when set to true.\n\nYou cannot modify the value of TransitEncryptionEnabled after the cluster is created. To enable in-transit encryption on a cluster you must set TransitEncryptionEnabled to true when you create a cluster.","replaceOnChanges":true},"updateStrategy":{"$ref":"#/types/aws-native:memorydb:MultiRegionClusterUpdateStrategy","description":"An enum string value that determines the update strategy for scaling. Possible values are 'COORDINATED' and 'UNCOORDINATED'. Default is 'COORDINATED'."}},"type":"object","required":["arn","multiRegionClusterName","nodeType","status"],"inputProperties":{"description":{"type":"string","description":"Description of the multi region cluster."},"engine":{"type":"string","description":"The engine type used by the multi region cluster."},"engineVersion":{"type":"string","description":"The Redis engine version used by the multi region cluster."},"multiRegionClusterNameSuffix":{"type":"string","description":"The name of the Multi Region cluster. This value must be unique as it also serves as the multi region cluster identifier."},"multiRegionParameterGroupName":{"type":"string","description":"The name of the parameter group associated with the multi region cluster."},"nodeType":{"type":"string","description":"The compute and memory capacity of the nodes in the multi region cluster."},"numShards":{"type":"integer","description":"The number of shards the multi region cluster will contain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this multi region cluster."},"tlsEnabled":{"type":"boolean","description":"A flag that enables in-transit encryption when set to true.\n\nYou cannot modify the value of TransitEncryptionEnabled after the cluster is created. To enable in-transit encryption on a cluster you must set TransitEncryptionEnabled to true when you create a cluster."},"updateStrategy":{"$ref":"#/types/aws-native:memorydb:MultiRegionClusterUpdateStrategy","description":"An enum string value that determines the update strategy for scaling. Possible values are 'COORDINATED' and 'UNCOORDINATED'. Default is 'COORDINATED'."}},"requiredInputs":["nodeType"]},"aws-native:memorydb:ParameterGroup":{"description":"The AWS::MemoryDB::ParameterGroup resource creates an Amazon MemoryDB ParameterGroup.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the parameter group."},"description":{"type":"string","description":"A description of the parameter group.","replaceOnChanges":true},"family":{"type":"string","description":"The name of the parameter group family that this parameter group is compatible with.","replaceOnChanges":true},"parameterGroupName":{"type":"string","description":"The name of the parameter group.","replaceOnChanges":true},"parameters":{"$ref":"pulumi.json#/Any","description":"An map of parameter names and values for the parameter update. You must supply at least one parameter name and value; subsequent arguments are optional.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MemoryDB::ParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this parameter group."}},"type":"object","required":["arn","family","parameterGroupName"],"inputProperties":{"description":{"type":"string","description":"A description of the parameter group."},"family":{"type":"string","description":"The name of the parameter group family that this parameter group is compatible with."},"parameterGroupName":{"type":"string","description":"The name of the parameter group."},"parameters":{"$ref":"pulumi.json#/Any","description":"An map of parameter names and values for the parameter update. You must supply at least one parameter name and value; subsequent arguments are optional.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MemoryDB::ParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this parameter group."}},"requiredInputs":["family"]},"aws-native:memorydb:SubnetGroup":{"description":"The AWS::MemoryDB::SubnetGroup resource creates an Amazon MemoryDB Subnet Group.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the subnet group."},"description":{"type":"string","description":"An optional description of the subnet group."},"subnetGroupName":{"type":"string","description":"The name of the subnet group. This value must be unique as it also serves as the subnet group identifier.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC subnet IDs for the subnet group."},"supportedNetworkTypes":{"type":"array","items":{"type":"string"},"description":"Supported network types would be a list of network types supported by subnet group and can be either [ipv4] or [ipv4, dual_stack] or [ipv6]."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this subnet group."}},"type":"object","required":["arn","subnetGroupName","subnetIds","supportedNetworkTypes"],"inputProperties":{"description":{"type":"string","description":"An optional description of the subnet group."},"subnetGroupName":{"type":"string","description":"The name of the subnet group. This value must be unique as it also serves as the subnet group identifier."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of VPC subnet IDs for the subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this subnet group."}},"requiredInputs":["subnetIds"]},"aws-native:memorydb:User":{"description":"Resource Type definition for AWS::MemoryDB::User","properties":{"accessString":{"type":"string","description":"Access permissions string used for this user account."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the user account."},"authenticationMode":{"$ref":"#/types/aws-native:memorydb:AuthenticationModeProperties","description":"Denotes whether the user requires a password to authenticate.\n\n*Example:*\n\n`mynewdbuser: Type: AWS::MemoryDB::User Properties: AccessString: on ~* \u0026* +@all AuthenticationMode: Passwords: '1234567890123456' Type: password UserName: mynewdbuser AuthenticationMode: { \"Passwords\": [\"1234567890123456\"], \"Type\": \"Password\" }`"},"status":{"type":"string","description":"Indicates the user status. Can be \"active\", \"modifying\" or \"deleting\"."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this user."},"userName":{"type":"string","description":"The name of the user.","replaceOnChanges":true}},"type":"object","required":["arn","status","userName"],"inputProperties":{"accessString":{"type":"string","description":"Access permissions string used for this user account."},"authenticationMode":{"$ref":"#/types/aws-native:memorydb:AuthenticationModeProperties","description":"Denotes whether the user requires a password to authenticate.\n\n*Example:*\n\n`mynewdbuser: Type: AWS::MemoryDB::User Properties: AccessString: on ~* \u0026* +@all AuthenticationMode: Passwords: '1234567890123456' Type: password UserName: mynewdbuser AuthenticationMode: { \"Passwords\": [\"1234567890123456\"], \"Type\": \"Password\" }`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this user."},"userName":{"type":"string","description":"The name of the user."}}},"aws-native:msk:BatchScramSecret":{"description":"Resource Type definition for AWS::MSK::BatchScramSecret","properties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies the cluster.","replaceOnChanges":true},"secretArnList":{"type":"array","items":{"type":"string"},"description":"List of Amazon Resource Name (ARN)s of Secrets Manager secrets."}},"type":"object","required":["clusterArn"],"inputProperties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies the cluster."},"secretArnList":{"type":"array","items":{"type":"string"},"description":"List of Amazon Resource Name (ARN)s of Secrets Manager secrets."}},"requiredInputs":["clusterArn"]},"aws-native:msk:Cluster":{"description":"Resource Type definition for AWS::MSK::Cluster","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MSK cluster."},"brokerNodeGroupInfo":{"$ref":"#/types/aws-native:msk:ClusterBrokerNodeGroupInfo","description":"Information about the broker nodes in the cluster."},"clientAuthentication":{"$ref":"#/types/aws-native:msk:ClusterClientAuthentication","description":"Includes all client authentication related information."},"clusterName":{"type":"string","description":"The name of the cluster.","replaceOnChanges":true},"configurationInfo":{"$ref":"#/types/aws-native:msk:ClusterConfigurationInfo","description":"Represents the configuration that you want MSK to use for the cluster."},"currentVersion":{"type":"string","description":"The current version of the MSK cluster"},"encryptionInfo":{"$ref":"#/types/aws-native:msk:ClusterEncryptionInfo","description":"Includes all encryption-related information."},"enhancedMonitoring":{"$ref":"#/types/aws-native:msk:ClusterEnhancedMonitoring","description":"Specifies the level of monitoring for the MSK cluster."},"kafkaVersion":{"type":"string","description":"The version of Apache Kafka. You can use Amazon MSK to create clusters that use [supported Apache Kafka versions](https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html) ."},"loggingInfo":{"$ref":"#/types/aws-native:msk:ClusterLoggingInfo","description":"Logging info details for the cluster."},"numberOfBrokerNodes":{"type":"integer","description":"The number of broker nodes in the cluster."},"openMonitoring":{"$ref":"#/types/aws-native:msk:ClusterOpenMonitoring","description":"The settings for open monitoring."},"rebalancing":{"$ref":"#/types/aws-native:msk:ClusterRebalancing"},"storageMode":{"$ref":"#/types/aws-native:msk:ClusterStorageMode","description":"This controls storage mode for supported storage tiers."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"type":"object","required":["arn","brokerNodeGroupInfo","clusterName","currentVersion","kafkaVersion","numberOfBrokerNodes"],"inputProperties":{"brokerNodeGroupInfo":{"$ref":"#/types/aws-native:msk:ClusterBrokerNodeGroupInfo","description":"Information about the broker nodes in the cluster."},"clientAuthentication":{"$ref":"#/types/aws-native:msk:ClusterClientAuthentication","description":"Includes all client authentication related information."},"clusterName":{"type":"string","description":"The name of the cluster."},"configurationInfo":{"$ref":"#/types/aws-native:msk:ClusterConfigurationInfo","description":"Represents the configuration that you want MSK to use for the cluster."},"encryptionInfo":{"$ref":"#/types/aws-native:msk:ClusterEncryptionInfo","description":"Includes all encryption-related information."},"enhancedMonitoring":{"$ref":"#/types/aws-native:msk:ClusterEnhancedMonitoring","description":"Specifies the level of monitoring for the MSK cluster."},"kafkaVersion":{"type":"string","description":"The version of Apache Kafka. You can use Amazon MSK to create clusters that use [supported Apache Kafka versions](https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html) ."},"loggingInfo":{"$ref":"#/types/aws-native:msk:ClusterLoggingInfo","description":"Logging info details for the cluster."},"numberOfBrokerNodes":{"type":"integer","description":"The number of broker nodes in the cluster."},"openMonitoring":{"$ref":"#/types/aws-native:msk:ClusterOpenMonitoring","description":"The settings for open monitoring."},"rebalancing":{"$ref":"#/types/aws-native:msk:ClusterRebalancing"},"storageMode":{"$ref":"#/types/aws-native:msk:ClusterStorageMode","description":"This controls storage mode for supported storage tiers."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."}},"requiredInputs":["brokerNodeGroupInfo","kafkaVersion","numberOfBrokerNodes"]},"aws-native:msk:ClusterPolicy":{"description":"Resource Type definition for AWS::MSK::ClusterPolicy","properties":{"clusterArn":{"type":"string","description":"The arn of the cluster for the resource policy.","replaceOnChanges":true},"currentVersion":{"type":"string","description":"The current version of the policy attached to the specified cluster"},"policy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified cluster.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MSK::ClusterPolicy` for more information about the expected schema for this property."}},"type":"object","required":["clusterArn","currentVersion","policy"],"inputProperties":{"clusterArn":{"type":"string","description":"The arn of the cluster for the resource policy."},"policy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified cluster.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MSK::ClusterPolicy` for more information about the expected schema for this property."}},"requiredInputs":["clusterArn","policy"]},"aws-native:msk:Configuration":{"description":"Resource Type definition for AWS::MSK::Configuration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the configuration."},"description":{"type":"string","description":"The description of the configuration."},"kafkaVersionsList":{"type":"array","items":{"type":"string"},"description":"The [versions of Apache Kafka](https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html) with which you can use this MSK configuration.\n\nWhen you update the `KafkaVersionsList` property, CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a [resource replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) . To successfully update `KafkaVersionsList` , you must also update the `Name` property in the same operation.\n\nIf your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes.\n\nFor more information, see [Can’t update KafkaVersionsList in MSK configuration](https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure) in the *Amazon MSK Developer Guide* .","replaceOnChanges":true},"latestRevision":{"$ref":"#/types/aws-native:msk:ConfigurationLatestRevision","description":"Latest revision of the MSK configuration."},"name":{"type":"string","description":"The name of the configuration. Configuration names are strings that match the regex \"^[0-9A-Za-z][0-9A-Za-z-]{0,}$\".","replaceOnChanges":true},"serverProperties":{"type":"string","description":"Contents of the `server.properties` file. When using the console, the SDK, or the AWS CLI , the contents of `server.properties` can be in plaintext."}},"type":"object","required":["arn","name","serverProperties"],"inputProperties":{"description":{"type":"string","description":"The description of the configuration."},"kafkaVersionsList":{"type":"array","items":{"type":"string"},"description":"The [versions of Apache Kafka](https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html) with which you can use this MSK configuration.\n\nWhen you update the `KafkaVersionsList` property, CloudFormation recreates a new configuration with the updated property before deleting the old configuration. Such an update requires a [resource replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) . To successfully update `KafkaVersionsList` , you must also update the `Name` property in the same operation.\n\nIf your configuration is attached with any clusters created using the AWS Management Console or AWS CLI , you'll need to manually delete the old configuration from the console after the update completes.\n\nFor more information, see [Can’t update KafkaVersionsList in MSK configuration](https://docs.aws.amazon.com/msk/latest/developerguide/troubleshooting.html#troubleshoot-kafkaversionslist-cfn-update-failure) in the *Amazon MSK Developer Guide* ."},"latestRevision":{"$ref":"#/types/aws-native:msk:ConfigurationLatestRevision","description":"Latest revision of the MSK configuration."},"name":{"type":"string","description":"The name of the configuration. Configuration names are strings that match the regex \"^[0-9A-Za-z][0-9A-Za-z-]{0,}$\"."},"serverProperties":{"type":"string","description":"Contents of the `server.properties` file. When using the console, the SDK, or the AWS CLI , the contents of `server.properties` can be in plaintext."}},"requiredInputs":["serverProperties"]},"aws-native:msk:Replicator":{"description":"Resource Type definition for AWS::MSK::Replicator","properties":{"currentVersion":{"type":"string","description":"The current version of the MSK replicator."},"description":{"type":"string","description":"A summary description of the replicator.","replaceOnChanges":true},"kafkaClusters":{"type":"array","items":{"$ref":"#/types/aws-native:msk:ReplicatorKafkaCluster"},"description":"Specifies a list of Kafka clusters which are targets of the replicator.","replaceOnChanges":true},"replicationInfoList":{"type":"array","items":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationInfo"},"description":"A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow."},"replicatorArn":{"type":"string","description":"Amazon Resource Name for the created replicator."},"replicatorName":{"type":"string","description":"The name of the replicator.","replaceOnChanges":true},"serviceExecutionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used by the replicator to access external resources.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["currentVersion","kafkaClusters","replicationInfoList","replicatorArn","replicatorName","serviceExecutionRoleArn"],"inputProperties":{"description":{"type":"string","description":"A summary description of the replicator."},"kafkaClusters":{"type":"array","items":{"$ref":"#/types/aws-native:msk:ReplicatorKafkaCluster"},"description":"Specifies a list of Kafka clusters which are targets of the replicator."},"replicationInfoList":{"type":"array","items":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationInfo"},"description":"A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow."},"replicatorName":{"type":"string","description":"The name of the replicator."},"serviceExecutionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role used by the replicator to access external resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"requiredInputs":["kafkaClusters","replicationInfoList","serviceExecutionRoleArn"]},"aws-native:msk:ServerlessCluster":{"description":"Resource Type definition for AWS::MSK::ServerlessCluster","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MSK cluster."},"clientAuthentication":{"$ref":"#/types/aws-native:msk:ServerlessClusterClientAuthentication","description":"Includes all client authentication related information.","replaceOnChanges":true},"clusterName":{"type":"string","description":"The name of the cluster.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","replaceOnChanges":true},"vpcConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:msk:ServerlessClusterVpcConfig"},"description":"VPC configuration information for the serverless cluster.","replaceOnChanges":true}},"type":"object","required":["arn","clientAuthentication","clusterName","vpcConfigs"],"inputProperties":{"clientAuthentication":{"$ref":"#/types/aws-native:msk:ServerlessClusterClientAuthentication","description":"Includes all client authentication related information."},"clusterName":{"type":"string","description":"The name of the cluster."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource."},"vpcConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:msk:ServerlessClusterVpcConfig"},"description":"VPC configuration information for the serverless cluster."}},"requiredInputs":["clientAuthentication","vpcConfigs"]},"aws-native:msk:Topic":{"description":"Resource Type definition for AWS::MSK::Topic","properties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MSK cluster","replaceOnChanges":true},"configs":{"type":"string","description":"Base64 encoded configuration properties of the topic"},"partitionCount":{"type":"integer","description":"The number of partitions for the topic"},"replicationFactor":{"type":"integer","description":"The replication factor for the topic","replaceOnChanges":true},"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the topic"},"topicName":{"type":"string","description":"The name of the topic","replaceOnChanges":true}},"type":"object","required":["clusterArn","partitionCount","replicationFactor","topicArn","topicName"],"inputProperties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MSK cluster"},"configs":{"type":"string","description":"Base64 encoded configuration properties of the topic"},"partitionCount":{"type":"integer","description":"The number of partitions for the topic"},"replicationFactor":{"type":"integer","description":"The replication factor for the topic"},"topicName":{"type":"string","description":"The name of the topic"}},"requiredInputs":["clusterArn","partitionCount","replicationFactor"]},"aws-native:msk:VpcConnection":{"description":"Resource Type definition for AWS::MSK::VpcConnection","properties":{"arn":{"type":"string","description":"The ARN of the VPC connection."},"authentication":{"$ref":"#/types/aws-native:msk:VpcConnectionAuthentication","description":"The type of private link authentication.","replaceOnChanges":true},"clientSubnets":{"type":"array","items":{"type":"string"},"description":"The list of subnets in the client VPC to connect to.","replaceOnChanges":true},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups to attach to the ENIs for the broker nodes.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"An arbitrary set of tags (key-value pairs) you specify while creating the VPC connection."},"targetClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target cluster","replaceOnChanges":true},"vpcId":{"type":"string","description":"The VPC ID of the remote client.","replaceOnChanges":true}},"type":"object","required":["arn","authentication","clientSubnets","securityGroups","targetClusterArn","vpcId"],"inputProperties":{"authentication":{"$ref":"#/types/aws-native:msk:VpcConnectionAuthentication","description":"The type of private link authentication."},"clientSubnets":{"type":"array","items":{"type":"string"},"description":"The list of subnets in the client VPC to connect to."},"securityGroups":{"type":"array","items":{"type":"string"},"description":"The security groups to attach to the ENIs for the broker nodes."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"An arbitrary set of tags (key-value pairs) you specify while creating the VPC connection."},"targetClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target cluster"},"vpcId":{"type":"string","description":"The VPC ID of the remote client."}},"requiredInputs":["authentication","clientSubnets","securityGroups","targetClusterArn","vpcId"]},"aws-native:mwaa:Environment":{"description":"Resource schema for AWS::MWAA::Environment","properties":{"airflowConfigurationOptions":{"$ref":"pulumi.json#/Any","description":"Key/value pairs representing Airflow configuration variables.\n    Keys are prefixed by their section:\n\n    [core]\n    dags_folder={AIRFLOW_HOME}/dags\n\n    Would be represented as\n\n    \"core.dags_folder\": \"{AIRFLOW_HOME}/dags\"\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MWAA::Environment` for more information about the expected schema for this property."},"airflowVersion":{"type":"string","description":"The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version.\n\nIf you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect.\n\n*Allowed Values* : `2.7.2` | `2.8.1` | `2.9.2` | `2.10.1` | `2.10.3` | `3.0.6` (latest)"},"arn":{"type":"string","description":"The ARN for the Amazon MWAA environment."},"celeryExecutorQueue":{"type":"string","description":"The queue ARN for the environment's [Celery Executor](https://docs.aws.amazon.com/https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/executor/celery.html) . Amazon MWAA uses a Celery Executor to distribute tasks across multiple workers. When you create an environment in a shared VPC, you must provide access to the Celery Executor queue from your VPC."},"dagS3Path":{"type":"string","description":"The relative path to the DAGs folder on your Amazon S3 bucket. For example, `dags` . To learn more, see [Adding or updating DAGs](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html) ."},"databaseVpcEndpointService":{"type":"string","description":"The VPC endpoint for the environment's Amazon RDS database."},"endpointManagement":{"$ref":"#/types/aws-native:mwaa:EnvironmentEndpointManagement","description":"Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to `SERVICE` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to `CUSTOMER` , you must create, and manage, the VPC endpoints in your VPC.","replaceOnChanges":true},"environmentClass":{"type":"string","description":"The environment class type. Valid values: `mw1.micro` , `mw1.small` , `mw1.medium` , `mw1.large` , `mw1.1large` , and `mw1.2large` . To learn more, see [Amazon MWAA environment class](https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html) ."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access AWS resources in your environment. For example, `arn:aws:iam::123456789:role/my-execution-role` . To learn more, see [Amazon MWAA Execution role](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-create-role.html) ."},"kmsKey":{"type":"string","description":"The AWS Key Management Service (KMS) key to encrypt and decrypt the data in your environment. You can use an AWS KMS key managed by MWAA, or a customer-managed KMS key (advanced).","replaceOnChanges":true},"loggingConfiguration":{"$ref":"#/types/aws-native:mwaa:EnvironmentLoggingConfiguration","description":"The Apache Airflow logs being sent to CloudWatch Logs: `DagProcessingLogs` , `SchedulerLogs` , `TaskLogs` , `WebserverLogs` , `WorkerLogs` ."},"maxWebservers":{"type":"integer","description":"The maximum number of web servers that you want to run in your environment. Amazon MWAA scales the number of Apache Airflow web servers up to the number you specify for `MaxWebservers` when you interact with your Apache Airflow environment using Apache Airflow REST API, or the Apache Airflow CLI. For example, in scenarios where your workload requires network calls to the Apache Airflow REST API with a high transaction-per-second (TPS) rate, Amazon MWAA will increase the number of web servers up to the number set in `MaxWebserers` . As TPS rates decrease Amazon MWAA disposes of the additional web servers, and scales down to the number set in `MinxWebserers` .\n\nValid values: For environments larger than mw1.micro, accepts values from `2` to `5` . Defaults to `2` for all environment sizes except mw1.micro, which defaults to `1` ."},"maxWorkers":{"type":"integer","description":"The maximum number of workers that you want to run in your environment. MWAA scales the number of Apache Airflow workers up to the number you specify in the `MaxWorkers` field. For example, `20` . When there are no more tasks running, and no more in the queue, MWAA disposes of the extra workers leaving the one worker that is included with your environment, or the number you specify in `MinWorkers` ."},"minWebservers":{"type":"integer","description":"The minimum number of web servers that you want to run in your environment. Amazon MWAA scales the number of Apache Airflow web servers up to the number you specify for `MaxWebservers` when you interact with your Apache Airflow environment using Apache Airflow REST API, or the Apache Airflow CLI. As the transaction-per-second rate, and the network load, decrease, Amazon MWAA disposes of the additional web servers, and scales down to the number set in `MinxWebserers` .\n\nValid values: For environments larger than mw1.micro, accepts values from `2` to `5` . Defaults to `2` for all environment sizes except mw1.micro, which defaults to `1` ."},"minWorkers":{"type":"integer","description":"The minimum number of workers that you want to run in your environment. MWAA scales the number of Apache Airflow workers up to the number you specify in the `MaxWorkers` field. When there are no more tasks running, and no more in the queue, MWAA disposes of the extra workers leaving the worker count you specify in the `MinWorkers` field. For example, `2` ."},"name":{"type":"string","description":"The name of your Amazon MWAA environment.","replaceOnChanges":true},"networkConfiguration":{"$ref":"#/types/aws-native:mwaa:EnvironmentNetworkConfiguration","description":"The VPC networking components used to secure and enable network traffic between the AWS resources for your environment. To learn more, see [About networking on Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/networking-about.html) ."},"pluginsS3ObjectVersion":{"type":"string","description":"The version of the plugins.zip file on your Amazon S3 bucket. To learn more, see [Installing custom plugins](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-import-plugins.html) ."},"pluginsS3Path":{"type":"string","description":"The relative path to the `plugins.zip` file on your Amazon S3 bucket. For example, `plugins.zip` . To learn more, see [Installing custom plugins](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-import-plugins.html) ."},"requirementsS3ObjectVersion":{"type":"string","description":"The version of the requirements.txt file on your Amazon S3 bucket. To learn more, see [Installing Python dependencies](https://docs.aws.amazon.com/mwaa/latest/userguide/working-dags-dependencies.html) ."},"requirementsS3Path":{"type":"string","description":"The relative path to the `requirements.txt` file on your Amazon S3 bucket. For example, `requirements.txt` . To learn more, see [Installing Python dependencies](https://docs.aws.amazon.com/mwaa/latest/userguide/working-dags-dependencies.html) ."},"schedulers":{"type":"integer","description":"The number of schedulers that you want to run in your environment. Valid values:\n\n- *v2* - For environments larger than mw1.micro, accepts values from 2 to 5. Defaults to 2 for all environment sizes except mw1.micro, which defaults to 1.\n- *v1* - Accepts 1."},"sourceBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, `arn:aws:s3:::my-airflow-bucket-unique-name` . To learn more, see [Create an Amazon S3 bucket for Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-s3-bucket.html) ."},"startupScriptS3ObjectVersion":{"type":"string","description":"The version of the startup shell script in your Amazon S3 bucket. You must specify the [version ID](https://docs.aws.amazon.com/AmazonS3/latest/userguide/versioning-workflows.html) that Amazon S3 assigns to the file every time you update the script.\n\nVersion IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:\n\n`3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo`\n\nFor more information, see [Using a startup script](https://docs.aws.amazon.com/mwaa/latest/userguide/using-startup-script.html) ."},"startupScriptS3Path":{"type":"string","description":"The relative path to the startup shell script in your Amazon S3 bucket. For example, `s3://mwaa-environment/startup.sh` .\n\nAmazon MWAA runs the script as your environment starts, and before running the Apache Airflow process. You can use this script to install dependencies, modify Apache Airflow configuration options, and set environment variables. For more information, see [Using a startup script](https://docs.aws.amazon.com/mwaa/latest/userguide/using-startup-script.html) ."},"tags":{"$ref":"pulumi.json#/Any","description":"A map of tags for the environment.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MWAA::Environment` for more information about the expected schema for this property."},"webserverAccessMode":{"$ref":"#/types/aws-native:mwaa:EnvironmentWebserverAccessMode","description":"The Apache Airflow *Web server* access mode. To learn more, see [Apache Airflow access modes](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-networking.html) . Valid values: `PRIVATE_ONLY` or `PUBLIC_ONLY` ."},"webserverUrl":{"type":"string","description":"The URL of your Apache Airflow UI."},"webserverVpcEndpointService":{"type":"string","description":"The VPC endpoint for the environment's web server."},"weeklyMaintenanceWindowStart":{"type":"string","description":"The day and time of the week to start weekly maintenance updates of your environment in the following format: `DAY:HH:MM` . For example: `TUE:03:30` . You can specify a start time in 30 minute increments only. Supported input includes the following:\n\n- MON|TUE|WED|THU|FRI|SAT|SUN:([01]\\\\d|2[0-3]):(00|30)"},"workerReplacementStrategy":{"$ref":"#/types/aws-native:mwaa:EnvironmentWorkerReplacementStrategy"}},"type":"object","required":["arn","celeryExecutorQueue","databaseVpcEndpointService","name","webserverUrl","webserverVpcEndpointService"],"inputProperties":{"airflowConfigurationOptions":{"$ref":"pulumi.json#/Any","description":"Key/value pairs representing Airflow configuration variables.\n    Keys are prefixed by their section:\n\n    [core]\n    dags_folder={AIRFLOW_HOME}/dags\n\n    Would be represented as\n\n    \"core.dags_folder\": \"{AIRFLOW_HOME}/dags\"\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MWAA::Environment` for more information about the expected schema for this property."},"airflowVersion":{"type":"string","description":"The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version.\n\nIf you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect.\n\n*Allowed Values* : `2.7.2` | `2.8.1` | `2.9.2` | `2.10.1` | `2.10.3` | `3.0.6` (latest)"},"dagS3Path":{"type":"string","description":"The relative path to the DAGs folder on your Amazon S3 bucket. For example, `dags` . To learn more, see [Adding or updating DAGs](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html) ."},"endpointManagement":{"$ref":"#/types/aws-native:mwaa:EnvironmentEndpointManagement","description":"Defines whether the VPC endpoints configured for the environment are created, and managed, by the customer or by Amazon MWAA. If set to `SERVICE` , Amazon MWAA will create and manage the required VPC endpoints in your VPC. If set to `CUSTOMER` , you must create, and manage, the VPC endpoints in your VPC."},"environmentClass":{"type":"string","description":"The environment class type. Valid values: `mw1.micro` , `mw1.small` , `mw1.medium` , `mw1.large` , `mw1.1large` , and `mw1.2large` . To learn more, see [Amazon MWAA environment class](https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html) ."},"executionRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access AWS resources in your environment. For example, `arn:aws:iam::123456789:role/my-execution-role` . To learn more, see [Amazon MWAA Execution role](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-create-role.html) ."},"kmsKey":{"type":"string","description":"The AWS Key Management Service (KMS) key to encrypt and decrypt the data in your environment. You can use an AWS KMS key managed by MWAA, or a customer-managed KMS key (advanced)."},"loggingConfiguration":{"$ref":"#/types/aws-native:mwaa:EnvironmentLoggingConfiguration","description":"The Apache Airflow logs being sent to CloudWatch Logs: `DagProcessingLogs` , `SchedulerLogs` , `TaskLogs` , `WebserverLogs` , `WorkerLogs` ."},"maxWebservers":{"type":"integer","description":"The maximum number of web servers that you want to run in your environment. Amazon MWAA scales the number of Apache Airflow web servers up to the number you specify for `MaxWebservers` when you interact with your Apache Airflow environment using Apache Airflow REST API, or the Apache Airflow CLI. For example, in scenarios where your workload requires network calls to the Apache Airflow REST API with a high transaction-per-second (TPS) rate, Amazon MWAA will increase the number of web servers up to the number set in `MaxWebserers` . As TPS rates decrease Amazon MWAA disposes of the additional web servers, and scales down to the number set in `MinxWebserers` .\n\nValid values: For environments larger than mw1.micro, accepts values from `2` to `5` . Defaults to `2` for all environment sizes except mw1.micro, which defaults to `1` ."},"maxWorkers":{"type":"integer","description":"The maximum number of workers that you want to run in your environment. MWAA scales the number of Apache Airflow workers up to the number you specify in the `MaxWorkers` field. For example, `20` . When there are no more tasks running, and no more in the queue, MWAA disposes of the extra workers leaving the one worker that is included with your environment, or the number you specify in `MinWorkers` ."},"minWebservers":{"type":"integer","description":"The minimum number of web servers that you want to run in your environment. Amazon MWAA scales the number of Apache Airflow web servers up to the number you specify for `MaxWebservers` when you interact with your Apache Airflow environment using Apache Airflow REST API, or the Apache Airflow CLI. As the transaction-per-second rate, and the network load, decrease, Amazon MWAA disposes of the additional web servers, and scales down to the number set in `MinxWebserers` .\n\nValid values: For environments larger than mw1.micro, accepts values from `2` to `5` . Defaults to `2` for all environment sizes except mw1.micro, which defaults to `1` ."},"minWorkers":{"type":"integer","description":"The minimum number of workers that you want to run in your environment. MWAA scales the number of Apache Airflow workers up to the number you specify in the `MaxWorkers` field. When there are no more tasks running, and no more in the queue, MWAA disposes of the extra workers leaving the worker count you specify in the `MinWorkers` field. For example, `2` ."},"name":{"type":"string","description":"The name of your Amazon MWAA environment."},"networkConfiguration":{"$ref":"#/types/aws-native:mwaa:EnvironmentNetworkConfiguration","description":"The VPC networking components used to secure and enable network traffic between the AWS resources for your environment. To learn more, see [About networking on Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/networking-about.html) ."},"pluginsS3ObjectVersion":{"type":"string","description":"The version of the plugins.zip file on your Amazon S3 bucket. To learn more, see [Installing custom plugins](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-import-plugins.html) ."},"pluginsS3Path":{"type":"string","description":"The relative path to the `plugins.zip` file on your Amazon S3 bucket. For example, `plugins.zip` . To learn more, see [Installing custom plugins](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-import-plugins.html) ."},"requirementsS3ObjectVersion":{"type":"string","description":"The version of the requirements.txt file on your Amazon S3 bucket. To learn more, see [Installing Python dependencies](https://docs.aws.amazon.com/mwaa/latest/userguide/working-dags-dependencies.html) ."},"requirementsS3Path":{"type":"string","description":"The relative path to the `requirements.txt` file on your Amazon S3 bucket. For example, `requirements.txt` . To learn more, see [Installing Python dependencies](https://docs.aws.amazon.com/mwaa/latest/userguide/working-dags-dependencies.html) ."},"schedulers":{"type":"integer","description":"The number of schedulers that you want to run in your environment. Valid values:\n\n- *v2* - For environments larger than mw1.micro, accepts values from 2 to 5. Defaults to 2 for all environment sizes except mw1.micro, which defaults to 1.\n- *v1* - Accepts 1."},"sourceBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, `arn:aws:s3:::my-airflow-bucket-unique-name` . To learn more, see [Create an Amazon S3 bucket for Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-s3-bucket.html) ."},"startupScriptS3ObjectVersion":{"type":"string","description":"The version of the startup shell script in your Amazon S3 bucket. You must specify the [version ID](https://docs.aws.amazon.com/AmazonS3/latest/userguide/versioning-workflows.html) that Amazon S3 assigns to the file every time you update the script.\n\nVersion IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:\n\n`3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo`\n\nFor more information, see [Using a startup script](https://docs.aws.amazon.com/mwaa/latest/userguide/using-startup-script.html) ."},"startupScriptS3Path":{"type":"string","description":"The relative path to the startup shell script in your Amazon S3 bucket. For example, `s3://mwaa-environment/startup.sh` .\n\nAmazon MWAA runs the script as your environment starts, and before running the Apache Airflow process. You can use this script to install dependencies, modify Apache Airflow configuration options, and set environment variables. For more information, see [Using a startup script](https://docs.aws.amazon.com/mwaa/latest/userguide/using-startup-script.html) ."},"tags":{"$ref":"pulumi.json#/Any","description":"A map of tags for the environment.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MWAA::Environment` for more information about the expected schema for this property."},"webserverAccessMode":{"$ref":"#/types/aws-native:mwaa:EnvironmentWebserverAccessMode","description":"The Apache Airflow *Web server* access mode. To learn more, see [Apache Airflow access modes](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-networking.html) . Valid values: `PRIVATE_ONLY` or `PUBLIC_ONLY` ."},"weeklyMaintenanceWindowStart":{"type":"string","description":"The day and time of the week to start weekly maintenance updates of your environment in the following format: `DAY:HH:MM` . For example: `TUE:03:30` . You can specify a start time in 30 minute increments only. Supported input includes the following:\n\n- MON|TUE|WED|THU|FRI|SAT|SUN:([01]\\\\d|2[0-3]):(00|30)"},"workerReplacementStrategy":{"$ref":"#/types/aws-native:mwaa:EnvironmentWorkerReplacementStrategy"}}},"aws-native:mwaaserverless:Workflow":{"description":"Resource Type definition for AWS::MWAAServerless::Workflow resource","properties":{"createdAt":{"type":"string"},"definitionS3Location":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowS3Location"},"description":{"type":"string"},"encryptionConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowEncryptionConfiguration","replaceOnChanges":true},"loggingConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowLoggingConfiguration"},"modifiedAt":{"type":"string"},"name":{"type":"string","replaceOnChanges":true},"networkConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowNetworkConfiguration"},"roleArn":{"type":"string"},"scheduleConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowScheduleConfiguration"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"triggerMode":{"type":"string"},"workflowArn":{"type":"string"},"workflowStatus":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowStatus"},"workflowVersion":{"type":"string"}},"type":"object","required":["createdAt","definitionS3Location","modifiedAt","roleArn","scheduleConfiguration","workflowArn","workflowStatus","workflowVersion"],"inputProperties":{"definitionS3Location":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowS3Location"},"description":{"type":"string"},"encryptionConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowEncryptionConfiguration"},"loggingConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowLoggingConfiguration"},"name":{"type":"string"},"networkConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowNetworkConfiguration"},"roleArn":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"triggerMode":{"type":"string"}},"requiredInputs":["definitionS3Location","roleArn"]},"aws-native:neptune:DbCluster":{"description":"The AWS::Neptune::DBCluster resource creates an Amazon Neptune DB cluster.","properties":{"associatedRoles":{"type":"array","items":{"$ref":"#/types/aws-native:neptune:DbClusterDbClusterRole"},"description":"Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other AWS services on your behalf."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"Provides the list of EC2 Availability Zones that instances in the DB cluster can be created in.","replaceOnChanges":true},"backupRetentionPeriod":{"type":"integer","description":"Specifies the number of days for which automatic DB snapshots are retained."},"clusterResourceId":{"type":"string","description":"The resource id for the DB cluster. For example: `cluster-ABCD1234EFGH5678IJKL90MNOP`. The cluster ID uniquely identifies the cluster and is used in things like IAM authentication policies."},"copyTagsToSnapshot":{"type":"boolean","description":"A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default behaviour is not to copy them."},"dbClusterIdentifier":{"type":"string","description":"The DB cluster identifier. Contains a user-supplied DB cluster identifier. This identifier is the unique key that identifies a DB cluster stored as a lowercase string.","replaceOnChanges":true},"dbClusterParameterGroupName":{"type":"string","description":"Provides the name of the DB cluster parameter group."},"dbInstanceParameterGroupName":{"type":"string","description":"The name of the DB parameter group to apply to all instances of the DB cluster. Used only in case of a major EngineVersion upgrade request."},"dbPort":{"type":"integer","description":"The port number on which the DB instances in the DB cluster accept connections. \n\nIf not specified, the default port used is `8182`. \n\nNote: `Port` property will soon be deprecated from this resource. Please update existing templates to rename it with new property `DBPort` having same functionalities."},"dbSubnetGroupName":{"type":"string","description":"Specifies information on the subnet group associated with the DB cluster, including the name, description, and subnets in the subnet group.","replaceOnChanges":true},"deletionProtection":{"type":"boolean","description":"Indicates whether or not the DB cluster has deletion protection enabled. The database can't be deleted when deletion protection is enabled."},"enableCloudwatchLogsExports":{"type":"array","items":{"type":"string"},"description":"Specifies a list of log types that are enabled for export to CloudWatch Logs."},"endpoint":{"type":"string","description":"The connection endpoint for the DB cluster. For example: `mystack-mydbcluster-1apw1j4phylrk.cg034hpkmmjt.us-east-2.rds.amazonaws.com`"},"engineVersion":{"type":"string","description":"Indicates the database engine version."},"iamAuthEnabled":{"type":"boolean","description":"True if mapping of Amazon Identity and Access Management (IAM) accounts to database accounts is enabled, and otherwise false."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the database instances in the DB cluster, such as arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef. If you enable the StorageEncrypted property but don't specify this property, the default KMS key is used. If you specify this property, you must set the StorageEncrypted property to true.","replaceOnChanges":true},"port":{"type":"string","description":"The port number on which the DB cluster accepts connections. For example: `8182`."},"preferredBackupWindow":{"type":"string","description":"Specifies the daily time range during which automated backups are created if automated backups are enabled, as determined by the BackupRetentionPeriod."},"preferredMaintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC)."},"readEndpoint":{"type":"string","description":"The reader endpoint for the DB cluster. For example: `mystack-mydbcluster-ro-1apw1j4phylrk.cg034hpkmmjt.us-east-2.rds.amazonaws.com`"},"restoreToTime":{"type":"string","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.","replaceOnChanges":true},"restoreType":{"type":"string","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.","replaceOnChanges":true},"serverlessScalingConfiguration":{"$ref":"#/types/aws-native:neptune:DbClusterServerlessScalingConfiguration","description":"Contains the scaling configuration used by the Neptune Serverless Instances within this DB cluster."},"snapshotIdentifier":{"type":"string","description":"Specifies the identifier for a DB cluster snapshot. Must match the identifier of an existing snapshot.\n\nAfter you restore a DB cluster using a SnapshotIdentifier, you must specify the same SnapshotIdentifier for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the snapshot again, and the data in the database is not changed.\n\nHowever, if you don't specify the SnapshotIdentifier, an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, the DB cluster is restored from the snapshot specified by the SnapshotIdentifier, and the original DB cluster is deleted.","replaceOnChanges":true},"sourceDbClusterIdentifier":{"type":"string","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.","replaceOnChanges":true},"storageEncrypted":{"type":"boolean","description":"Indicates whether the DB cluster is encrypted.\n\nIf you specify the KmsKeyId property, then you must enable encryption and set this property to true.\n\nIf you enable the StorageEncrypted property but don't specify KmsKeyId property, then the default KMS key is used. If you specify KmsKeyId property, then that KMS Key is used to encrypt the database instances in the DB cluster.\n\nIf you specify the SourceDBClusterIdentifier property and don't specify this property or disable it. The value is inherited from the source DB cluster, and if the DB cluster is encrypted, the KmsKeyId property from the source cluster is used.\n\nIf you specify the DBSnapshotIdentifier and don't specify this property or disable it. The value is inherited from the snapshot, and the specified KmsKeyId property from the snapshot is used.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to this cluster."},"useLatestRestorableTime":{"type":"boolean","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.","replaceOnChanges":true},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"Provides a list of VPC security groups that the DB cluster belongs to."}},"type":"object","required":["clusterResourceId","endpoint","port","readEndpoint"],"inputProperties":{"associatedRoles":{"type":"array","items":{"$ref":"#/types/aws-native:neptune:DbClusterDbClusterRole"},"description":"Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other AWS services on your behalf."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"Provides the list of EC2 Availability Zones that instances in the DB cluster can be created in."},"backupRetentionPeriod":{"type":"integer","description":"Specifies the number of days for which automatic DB snapshots are retained."},"copyTagsToSnapshot":{"type":"boolean","description":"A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default behaviour is not to copy them."},"dbClusterIdentifier":{"type":"string","description":"The DB cluster identifier. Contains a user-supplied DB cluster identifier. This identifier is the unique key that identifies a DB cluster stored as a lowercase string."},"dbClusterParameterGroupName":{"type":"string","description":"Provides the name of the DB cluster parameter group."},"dbInstanceParameterGroupName":{"type":"string","description":"The name of the DB parameter group to apply to all instances of the DB cluster. Used only in case of a major EngineVersion upgrade request."},"dbPort":{"type":"integer","description":"The port number on which the DB instances in the DB cluster accept connections. \n\nIf not specified, the default port used is `8182`. \n\nNote: `Port` property will soon be deprecated from this resource. Please update existing templates to rename it with new property `DBPort` having same functionalities."},"dbSubnetGroupName":{"type":"string","description":"Specifies information on the subnet group associated with the DB cluster, including the name, description, and subnets in the subnet group."},"deletionProtection":{"type":"boolean","description":"Indicates whether or not the DB cluster has deletion protection enabled. The database can't be deleted when deletion protection is enabled."},"enableCloudwatchLogsExports":{"type":"array","items":{"type":"string"},"description":"Specifies a list of log types that are enabled for export to CloudWatch Logs."},"engineVersion":{"type":"string","description":"Indicates the database engine version."},"iamAuthEnabled":{"type":"boolean","description":"True if mapping of Amazon Identity and Access Management (IAM) accounts to database accounts is enabled, and otherwise false."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the database instances in the DB cluster, such as arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef. If you enable the StorageEncrypted property but don't specify this property, the default KMS key is used. If you specify this property, you must set the StorageEncrypted property to true."},"preferredBackupWindow":{"type":"string","description":"Specifies the daily time range during which automated backups are created if automated backups are enabled, as determined by the BackupRetentionPeriod."},"preferredMaintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC)."},"restoreToTime":{"type":"string","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group."},"restoreType":{"type":"string","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group."},"serverlessScalingConfiguration":{"$ref":"#/types/aws-native:neptune:DbClusterServerlessScalingConfiguration","description":"Contains the scaling configuration used by the Neptune Serverless Instances within this DB cluster."},"snapshotIdentifier":{"type":"string","description":"Specifies the identifier for a DB cluster snapshot. Must match the identifier of an existing snapshot.\n\nAfter you restore a DB cluster using a SnapshotIdentifier, you must specify the same SnapshotIdentifier for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the snapshot again, and the data in the database is not changed.\n\nHowever, if you don't specify the SnapshotIdentifier, an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, the DB cluster is restored from the snapshot specified by the SnapshotIdentifier, and the original DB cluster is deleted."},"sourceDbClusterIdentifier":{"type":"string","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group."},"storageEncrypted":{"type":"boolean","description":"Indicates whether the DB cluster is encrypted.\n\nIf you specify the KmsKeyId property, then you must enable encryption and set this property to true.\n\nIf you enable the StorageEncrypted property but don't specify KmsKeyId property, then the default KMS key is used. If you specify KmsKeyId property, then that KMS Key is used to encrypt the database instances in the DB cluster.\n\nIf you specify the SourceDBClusterIdentifier property and don't specify this property or disable it. The value is inherited from the source DB cluster, and if the DB cluster is encrypted, the KmsKeyId property from the source cluster is used.\n\nIf you specify the DBSnapshotIdentifier and don't specify this property or disable it. The value is inherited from the snapshot, and the specified KmsKeyId property from the snapshot is used."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags assigned to this cluster."},"useLatestRestorableTime":{"type":"boolean","description":"Creates a new DB cluster from a DB snapshot or DB cluster snapshot.\n\nIf a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.\n\nIf a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"Provides a list of VPC security groups that the DB cluster belongs to."}}},"aws-native:neptune:DbClusterParameterGroup":{"description":"The AWS::Neptune::DBClusterParameterGroup resource creates a new Amazon Neptune DB cluster parameter group","properties":{"description":{"type":"string","description":"Provides the customer-specified description for this DB cluster parameter group.","replaceOnChanges":true},"family":{"type":"string","description":"Must be neptune1 for engine versions prior to 1.2.0.0, or neptune1.2 for engine version 1.2.0.0 and higher.","replaceOnChanges":true},"name":{"type":"string","description":"Provides the name of the DB cluster parameter group.","replaceOnChanges":true},"parameters":{"$ref":"pulumi.json#/Any","description":"An array of parameters to be modified. A maximum of 20 parameters can be modified in a single request.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Neptune::DBClusterParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the cluster parameter group."}},"type":"object","required":["description","family","parameters"],"inputProperties":{"description":{"type":"string","description":"Provides the customer-specified description for this DB cluster parameter group."},"family":{"type":"string","description":"Must be neptune1 for engine versions prior to 1.2.0.0, or neptune1.2 for engine version 1.2.0.0 and higher."},"name":{"type":"string","description":"Provides the name of the DB cluster parameter group."},"parameters":{"$ref":"pulumi.json#/Any","description":"An array of parameters to be modified. A maximum of 20 parameters can be modified in a single request.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Neptune::DBClusterParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the cluster parameter group."}},"requiredInputs":["description","family","parameters"]},"aws-native:neptune:DbInstance":{"description":"The AWS::Neptune::DBInstance resource creates an Amazon Neptune DB instance.","properties":{"allowMajorVersionUpgrade":{"type":"boolean","description":"Indicates that major version upgrades are allowed. Changing this parameter doesn't result in an outage and the change is asynchronously applied as soon as possible. This parameter must be set to true when specifying a value for the EngineVersion parameter that is a different major version than the DB instance's current version."},"autoMinorVersionUpgrade":{"type":"boolean","description":"Indicates that minor version patches are applied automatically.\n\nWhen updating this property, some interruptions may occur."},"availabilityZone":{"type":"string","description":"Specifies the name of the Availability Zone the DB instance is located in.","replaceOnChanges":true},"dbClusterIdentifier":{"type":"string","description":"If the DB instance is a member of a DB cluster, contains the name of the DB cluster that the DB instance is a member of.","replaceOnChanges":true},"dbInstanceClass":{"type":"string","description":"Contains the name of the compute and memory capacity class of the DB instance.\n\nIf you update this property, some interruptions may occur."},"dbInstanceIdentifier":{"type":"string","description":"Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance.","replaceOnChanges":true},"dbParameterGroupName":{"type":"string","description":"The name of an existing DB parameter group or a reference to an AWS::Neptune::DBParameterGroup resource created in the template. If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot."},"dbSnapshotIdentifier":{"type":"string","description":"This parameter is not supported.\n\n`AWS::Neptune::DBInstance` does not support restoring from snapshots.\n\n`AWS::Neptune::DBCluster` does support restoring from snapshots.\n\n","replaceOnChanges":true},"dbSubnetGroupName":{"type":"string","description":"A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new virtual private cloud (VPC).","replaceOnChanges":true},"endpoint":{"type":"string","description":"The connection endpoint for the database. For example: `mystack-mydb-1apw1j4phylrk.cg034hpkmmjt.us-east-2.rds.amazonaws.com`."},"port":{"type":"string","description":"The port number on which the database accepts connections. For example: `8182`."},"preferredMaintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC)."},"publiclyAccessible":{"type":"boolean","description":"Indicates that public accessibility is enabled. This should be enabled in combination with IAM Auth enabled on the DBCluster"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this DB instance."}},"type":"object","required":["dbInstanceClass","endpoint","port"],"inputProperties":{"allowMajorVersionUpgrade":{"type":"boolean","description":"Indicates that major version upgrades are allowed. Changing this parameter doesn't result in an outage and the change is asynchronously applied as soon as possible. This parameter must be set to true when specifying a value for the EngineVersion parameter that is a different major version than the DB instance's current version."},"autoMinorVersionUpgrade":{"type":"boolean","description":"Indicates that minor version patches are applied automatically.\n\nWhen updating this property, some interruptions may occur."},"availabilityZone":{"type":"string","description":"Specifies the name of the Availability Zone the DB instance is located in."},"dbClusterIdentifier":{"type":"string","description":"If the DB instance is a member of a DB cluster, contains the name of the DB cluster that the DB instance is a member of."},"dbInstanceClass":{"type":"string","description":"Contains the name of the compute and memory capacity class of the DB instance.\n\nIf you update this property, some interruptions may occur."},"dbInstanceIdentifier":{"type":"string","description":"Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance."},"dbParameterGroupName":{"type":"string","description":"The name of an existing DB parameter group or a reference to an AWS::Neptune::DBParameterGroup resource created in the template. If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot."},"dbSnapshotIdentifier":{"type":"string","description":"This parameter is not supported.\n\n`AWS::Neptune::DBInstance` does not support restoring from snapshots.\n\n`AWS::Neptune::DBCluster` does support restoring from snapshots.\n\n"},"dbSubnetGroupName":{"type":"string","description":"A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new virtual private cloud (VPC)."},"preferredMaintenanceWindow":{"type":"string","description":"Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC)."},"publiclyAccessible":{"type":"boolean","description":"Indicates that public accessibility is enabled. This should be enabled in combination with IAM Auth enabled on the DBCluster"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this DB instance."}},"requiredInputs":["dbInstanceClass"]},"aws-native:neptune:DbParameterGroup":{"description":"AWS::Neptune::DBParameterGroup creates a new DB parameter group. This type can be declared in a template and referenced in the DBParameterGroupName parameter of AWS::Neptune::DBInstance","properties":{"description":{"type":"string","description":"Provides the customer-specified description for this DB parameter group.","replaceOnChanges":true},"family":{"type":"string","description":"Must be `neptune1` for engine versions prior to 1.2.0.0, or `neptune1.2` for engine version `1.2.0.0` and higher.","replaceOnChanges":true},"name":{"type":"string","description":"Provides the name of the DB parameter group.","replaceOnChanges":true},"parameters":{"$ref":"pulumi.json#/Any","description":"The parameters to set for this DB parameter group.\n\nThe parameters are expressed as a JSON object consisting of key-value pairs.\n\nChanges to dynamic parameters are applied immediately. During an update, if you have static parameters (whether they were changed or not), it triggers AWS CloudFormation to reboot the associated DB instance without failover.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Neptune::DBParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional array of key-value pairs to apply to this DB parameter group."}},"type":"object","required":["description","family","parameters"],"inputProperties":{"description":{"type":"string","description":"Provides the customer-specified description for this DB parameter group."},"family":{"type":"string","description":"Must be `neptune1` for engine versions prior to 1.2.0.0, or `neptune1.2` for engine version `1.2.0.0` and higher."},"name":{"type":"string","description":"Provides the name of the DB parameter group."},"parameters":{"$ref":"pulumi.json#/Any","description":"The parameters to set for this DB parameter group.\n\nThe parameters are expressed as a JSON object consisting of key-value pairs.\n\nChanges to dynamic parameters are applied immediately. During an update, if you have static parameters (whether they were changed or not), it triggers AWS CloudFormation to reboot the associated DB instance without failover.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Neptune::DBParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional array of key-value pairs to apply to this DB parameter group."}},"requiredInputs":["description","family","parameters"]},"aws-native:neptune:DbSubnetGroup":{"description":"The AWS::Neptune::DBSubnetGroup type creates an Amazon Neptune DB subnet group. Subnet groups must contain at least two subnets in two different Availability Zones in the same AWS Region.","properties":{"dbSubnetGroupDescription":{"type":"string","description":"The description for the DB subnet group."},"dbSubnetGroupName":{"type":"string","description":"The name for the DB subnet group. This value is stored as a lowercase string.\n\nConstraints: Must contain no more than 255 lowercase alphanumeric characters or hyphens. Must not be \"Default\".\n\nExample: mysubnetgroup\n\n","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 subnet IDs for the DB subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional array of key-value pairs to apply to this DB subnet group."}},"type":"object","required":["dbSubnetGroupDescription","subnetIds"],"inputProperties":{"dbSubnetGroupDescription":{"type":"string","description":"The description for the DB subnet group."},"dbSubnetGroupName":{"type":"string","description":"The name for the DB subnet group. This value is stored as a lowercase string.\n\nConstraints: Must contain no more than 255 lowercase alphanumeric characters or hyphens. Must not be \"Default\".\n\nExample: mysubnetgroup\n\n"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 subnet IDs for the DB subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional array of key-value pairs to apply to this DB subnet group."}},"requiredInputs":["dbSubnetGroupDescription","subnetIds"]},"aws-native:neptune:EventSubscription":{"description":"Resource Type definition for AWS::Neptune::EventSubscription","properties":{"enabled":{"type":"boolean","description":"A Boolean value; set to true to activate the subscription, set to false to create the subscription but not active it."},"eventCategories":{"type":"array","items":{"type":"string"},"description":"A list of event categories for a SourceType that you want to subscribe to. You can see a list of the categories for a given SourceType in the Events topic in the Amazon Neptune User Guide or by using the DescribeEventCategories action."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic created for event notification. The ARN is created by Amazon SNS when you create a topic and subscribe to it.","replaceOnChanges":true},"sourceIds":{"type":"array","items":{"type":"string"},"description":"The list of identifiers of the event sources for which events will be returned. If not specified, then all sources are included in the response. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens; it cannot end with a hyphen or contain two consecutive hyphens."},"sourceType":{"type":"string","description":"The type of source that will be generating the events. For example, if you want to be notified of events generated by a DB instance, you would set this parameter to db-instance. if this value is not specified, all events are returned."},"subscriptionName":{"type":"string","description":"The name of the subscription.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["snsTopicArn"],"inputProperties":{"enabled":{"type":"boolean","description":"A Boolean value; set to true to activate the subscription, set to false to create the subscription but not active it."},"eventCategories":{"type":"array","items":{"type":"string"},"description":"A list of event categories for a SourceType that you want to subscribe to. You can see a list of the categories for a given SourceType in the Events topic in the Amazon Neptune User Guide or by using the DescribeEventCategories action."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic created for event notification. The ARN is created by Amazon SNS when you create a topic and subscribe to it."},"sourceIds":{"type":"array","items":{"type":"string"},"description":"The list of identifiers of the event sources for which events will be returned. If not specified, then all sources are included in the response. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens; it cannot end with a hyphen or contain two consecutive hyphens."},"sourceType":{"type":"string","description":"The type of source that will be generating the events. For example, if you want to be notified of events generated by a DB instance, you would set this parameter to db-instance. if this value is not specified, all events are returned."},"subscriptionName":{"type":"string","description":"The name of the subscription."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["snsTopicArn"]},"aws-native:neptunegraph:Graph":{"description":"The AWS::NeptuneGraph::Graph resource creates an Amazon NeptuneGraph Graph.","properties":{"deletionProtection":{"type":"boolean","description":"Value that indicates whether the Graph has deletion protection enabled. The graph can't be deleted when deletion protection is enabled.\n\n_Default_: If not specified, the default value is true."},"endpoint":{"type":"string","description":"The connection endpoint for the graph. For example: `g-12a3bcdef4.us-east-1.neptune-graph.amazonaws.com`"},"graphArn":{"type":"string","description":"Graph resource ARN"},"graphId":{"type":"string","description":"The auto-generated id assigned by the service."},"graphName":{"type":"string","description":"Contains a user-supplied name for the Graph. \n\nIf you don't specify a name, we generate a unique Graph Name using a combination of Stack Name and a UUID comprising of 4 characters.\n\n_Important_: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"provisionedMemory":{"type":"integer","description":"Memory for the Graph."},"publicConnectivity":{"type":"boolean","description":"Specifies whether the Graph can be reached over the internet. Access to all graphs requires IAM authentication.\n\nWhen the Graph is publicly reachable, its Domain Name System (DNS) endpoint resolves to the public IP address from the internet.\n\nWhen the Graph isn't publicly reachable, you need to create a PrivateGraphEndpoint in a given VPC to ensure the DNS name resolves to a private IP address that is reachable from the VPC.\n\n_Default_: If not specified, the default value is false."},"replicaCount":{"type":"integer","description":"Specifies the number of replicas you want when finished. All replicas will be provisioned in different availability zones.\n\nReplica Count should always be less than or equal to 2.\n\n_Default_: If not specified, the default value is 1.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with this graph."},"vectorSearchConfiguration":{"$ref":"#/types/aws-native:neptunegraph:GraphVectorSearchConfiguration","description":"Vector Search Configuration","replaceOnChanges":true}},"type":"object","required":["endpoint","graphArn","graphId","provisionedMemory"],"inputProperties":{"deletionProtection":{"type":"boolean","description":"Value that indicates whether the Graph has deletion protection enabled. The graph can't be deleted when deletion protection is enabled.\n\n_Default_: If not specified, the default value is true."},"graphName":{"type":"string","description":"Contains a user-supplied name for the Graph. \n\nIf you don't specify a name, we generate a unique Graph Name using a combination of Stack Name and a UUID comprising of 4 characters.\n\n_Important_: If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"provisionedMemory":{"type":"integer","description":"Memory for the Graph."},"publicConnectivity":{"type":"boolean","description":"Specifies whether the Graph can be reached over the internet. Access to all graphs requires IAM authentication.\n\nWhen the Graph is publicly reachable, its Domain Name System (DNS) endpoint resolves to the public IP address from the internet.\n\nWhen the Graph isn't publicly reachable, you need to create a PrivateGraphEndpoint in a given VPC to ensure the DNS name resolves to a private IP address that is reachable from the VPC.\n\n_Default_: If not specified, the default value is false."},"replicaCount":{"type":"integer","description":"Specifies the number of replicas you want when finished. All replicas will be provisioned in different availability zones.\n\nReplica Count should always be less than or equal to 2.\n\n_Default_: If not specified, the default value is 1."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with this graph."},"vectorSearchConfiguration":{"$ref":"#/types/aws-native:neptunegraph:GraphVectorSearchConfiguration","description":"Vector Search Configuration"}},"requiredInputs":["provisionedMemory"]},"aws-native:neptunegraph:PrivateGraphEndpoint":{"description":"The AWS::NeptuneGraph::PrivateGraphEndpoint resource creates an Amazon NeptuneGraph PrivateGraphEndpoint.","properties":{"graphIdentifier":{"type":"string","description":"The auto-generated Graph Id assigned by the service.","replaceOnChanges":true},"privateGraphEndpointIdentifier":{"type":"string","description":"PrivateGraphEndpoint resource identifier generated by concatenating the associated GraphIdentifier and VpcId with an underscore separator.\n\n For example, if GraphIdentifier is `g-12a3bcdef4` and VpcId is `vpc-0a12bc34567de8f90`, the generated PrivateGraphEndpointIdentifier will be `g-12a3bcdef4_vpc-0a12bc34567de8f90`"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security group Ids associated with the VPC where you want the private graph endpoint to be created, ie, the graph will be reachable from within the VPC.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnet Ids associated with the VPC where you want the private graph endpoint to be created, ie, the graph will be reachable from within the VPC.","replaceOnChanges":true},"vpcEndpointId":{"type":"string","description":"VPC endpoint that provides a private connection between the Graph and specified VPC."},"vpcId":{"type":"string","description":"The VPC where you want the private graph endpoint to be created, ie, the graph will be reachable from within the VPC.","replaceOnChanges":true}},"type":"object","required":["graphIdentifier","privateGraphEndpointIdentifier","vpcEndpointId","vpcId"],"inputProperties":{"graphIdentifier":{"type":"string","description":"The auto-generated Graph Id assigned by the service."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The security group Ids associated with the VPC where you want the private graph endpoint to be created, ie, the graph will be reachable from within the VPC."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnet Ids associated with the VPC where you want the private graph endpoint to be created, ie, the graph will be reachable from within the VPC."},"vpcId":{"type":"string","description":"The VPC where you want the private graph endpoint to be created, ie, the graph will be reachable from within the VPC."}},"requiredInputs":["graphIdentifier","vpcId"]},"aws-native:networkfirewall:Firewall":{"description":"Resource type definition for AWS::NetworkFirewall::Firewall","properties":{"availabilityZoneChangeProtection":{"type":"boolean","description":"A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to `TRUE` , you must first disable this protection before adding or removing Availability Zones."},"availabilityZoneMappings":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallAvailabilityZoneMapping"},"description":"The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic."},"deleteProtection":{"type":"boolean","description":"A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` ."},"description":{"type":"string","description":"A description of the firewall."},"enabledAnalysisTypes":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallEnabledAnalysisType"},"description":"The types of analysis to enable for the firewall. Can be TLS_SNI, HTTP_HOST, or both."},"endpointIds":{"type":"array","items":{"type":"string"},"description":"The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall. The subnets are not listed in any particular order. For example: `[\"us-west-2c:vpce-111122223333\", \"us-west-2a:vpce-987654321098\", \"us-west-2b:vpce-012345678901\"]` ."},"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall."},"firewallId":{"type":"string","description":"The name of the firewallresource."},"firewallName":{"type":"string","description":"The descriptive name of the firewall. You can't change the name of a firewall after you create it.","replaceOnChanges":true},"firewallPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall policy.\n\nThe relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls."},"firewallPolicyChangeProtection":{"type":"boolean","description":"A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` ."},"subnetChangeProtection":{"type":"boolean","description":"A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` ."},"subnetMappings":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallSubnetMapping"},"description":"The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.\n\nThese subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.\n\nIn addition to these subnets, you can define other endpoints for the firewall in `VpcEndpointAssociation` resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"transitGatewayAttachmentId":{"type":"string","description":"The unique identifier of the transit gateway attachment associated with this firewall. This field is only present for transit gateway-attached firewalls."},"transitGatewayId":{"type":"string","description":"The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls."},"vpcId":{"type":"string","description":"The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall.","replaceOnChanges":true}},"type":"object","required":["endpointIds","firewallArn","firewallId","firewallName","firewallPolicyArn","transitGatewayAttachmentId"],"inputProperties":{"availabilityZoneChangeProtection":{"type":"boolean","description":"A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to `TRUE` , you must first disable this protection before adding or removing Availability Zones."},"availabilityZoneMappings":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallAvailabilityZoneMapping"},"description":"The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic."},"deleteProtection":{"type":"boolean","description":"A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` ."},"description":{"type":"string","description":"A description of the firewall."},"enabledAnalysisTypes":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallEnabledAnalysisType"},"description":"The types of analysis to enable for the firewall. Can be TLS_SNI, HTTP_HOST, or both."},"firewallName":{"type":"string","description":"The descriptive name of the firewall. You can't change the name of a firewall after you create it."},"firewallPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall policy.\n\nThe relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls."},"firewallPolicyChangeProtection":{"type":"boolean","description":"A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` ."},"subnetChangeProtection":{"type":"boolean","description":"A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` ."},"subnetMappings":{"type":"array","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallSubnetMapping"},"description":"The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.\n\nThese subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.\n\nIn addition to these subnets, you can define other endpoints for the firewall in `VpcEndpointAssociation` resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"transitGatewayId":{"type":"string","description":"The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls."},"vpcId":{"type":"string","description":"The unique identifier of the VPC where the firewall is in use. You can't change the VPC of a firewall after you create the firewall."}},"requiredInputs":["firewallPolicyArn"]},"aws-native:networkfirewall:FirewallPolicy":{"description":"Resource type definition for AWS::NetworkFirewall::FirewallPolicy","properties":{"description":{"type":"string","description":"A description of the firewall policy."},"firewallPolicy":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicy","description":"The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.","language":{"csharp":{"name":"FirewallPolicyValue"}}},"firewallPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall policy."},"firewallPolicyId":{"type":"string","description":"The unique ID of the firewall policy resource."},"firewallPolicyName":{"type":"string","description":"The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["firewallPolicy","firewallPolicyArn","firewallPolicyId","firewallPolicyName"],"inputProperties":{"description":{"type":"string","description":"A description of the firewall policy."},"firewallPolicy":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicy","description":"The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.","language":{"csharp":{"name":"FirewallPolicyValue"}}},"firewallPolicyName":{"type":"string","description":"The descriptive name of the firewall policy. You can't change the name of a firewall policy after you create it."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"requiredInputs":["firewallPolicy"]},"aws-native:networkfirewall:LoggingConfiguration":{"description":"Resource type definition for AWS::NetworkFirewall::LoggingConfiguration","properties":{"enableMonitoringDashboard":{"type":"boolean"},"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewallthat the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.","replaceOnChanges":true},"firewallName":{"type":"string","description":"The name of the firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration.","replaceOnChanges":true},"loggingConfiguration":{"$ref":"#/types/aws-native:networkfirewall:LoggingConfiguration","description":"Defines how AWS Network Firewall performs logging for a firewall.","language":{"csharp":{"name":"LoggingConfigurationValue"}}}},"type":"object","required":["firewallArn","loggingConfiguration"],"inputProperties":{"enableMonitoringDashboard":{"type":"boolean"},"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewallthat the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration."},"firewallName":{"type":"string","description":"The name of the firewall that the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration."},"loggingConfiguration":{"$ref":"#/types/aws-native:networkfirewall:LoggingConfiguration","description":"Defines how AWS Network Firewall performs logging for a firewall.","language":{"csharp":{"name":"LoggingConfigurationValue"}}}},"requiredInputs":["firewallArn","loggingConfiguration"]},"aws-native:networkfirewall:RuleGroup":{"description":"Resource type definition for AWS::NetworkFirewall::RuleGroup","properties":{"capacity":{"type":"integer","description":"The maximum operating resources that this rule group can use. You can't change a rule group's capacity setting after you create the rule group. When you update a rule group, you are limited to this capacity. When you reference a rule group from a firewall policy, Network Firewall reserves this capacity for the rule group.","replaceOnChanges":true},"description":{"type":"string","description":"A description of the rule group."},"ruleGroup":{"$ref":"#/types/aws-native:networkfirewall:RuleGroup","description":"An object that defines the rule group rules.","language":{"csharp":{"name":"RuleGroupValue"}}},"ruleGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule group."},"ruleGroupId":{"type":"string","description":"The unique ID of the rule group resource."},"ruleGroupName":{"type":"string","description":"The descriptive name of the rule group. You can't change the name of a rule group after you create it.","replaceOnChanges":true},"summaryConfiguration":{"$ref":"#/types/aws-native:networkfirewall:SummaryConfigurationProperties","description":"A complex type containing the currently selected rule option fields that will be displayed for rule summarization returned by `DescribeRuleGroupSummary` .\n\n- The `RuleOptions` specified in `SummaryConfiguration`\n- Rule metadata organization preferences"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"type":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupTypeEnum","description":"Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains\nstateless rules. If it is stateful, it contains stateful rules.","replaceOnChanges":true}},"type":"object","required":["capacity","ruleGroupArn","ruleGroupId","ruleGroupName","type"],"inputProperties":{"capacity":{"type":"integer","description":"The maximum operating resources that this rule group can use. You can't change a rule group's capacity setting after you create the rule group. When you update a rule group, you are limited to this capacity. When you reference a rule group from a firewall policy, Network Firewall reserves this capacity for the rule group."},"description":{"type":"string","description":"A description of the rule group."},"ruleGroup":{"$ref":"#/types/aws-native:networkfirewall:RuleGroup","description":"An object that defines the rule group rules.","language":{"csharp":{"name":"RuleGroupValue"}}},"ruleGroupName":{"type":"string","description":"The descriptive name of the rule group. You can't change the name of a rule group after you create it."},"summaryConfiguration":{"$ref":"#/types/aws-native:networkfirewall:SummaryConfigurationProperties","description":"A complex type containing the currently selected rule option fields that will be displayed for rule summarization returned by `DescribeRuleGroupSummary` .\n\n- The `RuleOptions` specified in `SummaryConfiguration`\n- Rule metadata organization preferences"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."},"type":{"$ref":"#/types/aws-native:networkfirewall:RuleGroupTypeEnum","description":"Indicates whether the rule group is stateless or stateful. If the rule group is stateless, it contains\nstateless rules. If it is stateful, it contains stateful rules."}},"requiredInputs":["capacity","type"]},"aws-native:networkfirewall:TlsInspectionConfiguration":{"description":"Resource type definition for AWS::NetworkFirewall::TLSInspectionConfiguration","properties":{"description":{"type":"string","description":"A description of the TLS inspection configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key:value pairs to associate with the resource."},"tlsInspectionConfiguration":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationTlsInspectionConfiguration","description":"The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .","language":{"csharp":{"name":"TLSInspectionConfigurationValue"}}},"tlsInspectionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the TLS inspection configuration."},"tlsInspectionConfigurationId":{"type":"string","description":"A unique identifier for the TLS inspection configuration. This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete."},"tlsInspectionConfigurationName":{"type":"string","description":"The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it.","replaceOnChanges":true}},"type":"object","required":["tlsInspectionConfiguration","tlsInspectionConfigurationArn","tlsInspectionConfigurationId","tlsInspectionConfigurationName"],"inputProperties":{"description":{"type":"string","description":"A description of the TLS inspection configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key:value pairs to associate with the resource."},"tlsInspectionConfiguration":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationTlsInspectionConfiguration","description":"The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .","language":{"csharp":{"name":"TLSInspectionConfigurationValue"}}},"tlsInspectionConfigurationName":{"type":"string","description":"The descriptive name of the TLS inspection configuration. You can't change the name of a TLS inspection configuration after you create it."}},"requiredInputs":["tlsInspectionConfiguration"]},"aws-native:networkfirewall:VpcEndpointAssociation":{"description":"Resource type definition for AWS::NetworkFirewall::VpcEndpointAssociation","properties":{"description":{"type":"string","description":"A description of the VPC endpoint association.","replaceOnChanges":true},"endpointId":{"type":"string","description":"The unique ID of the firewall endpoint for the subnet that you attached to the firewall.For example: \"vpce-111122223333\""},"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall.","replaceOnChanges":true},"subnetMapping":{"$ref":"#/types/aws-native:networkfirewall:VpcEndpointAssociationSubnetMapping","description":"The ID for a subnet that's used in an association with a firewall. This is used in `CreateFirewall` , `AssociateSubnets` , and `CreateVpcEndpointAssociation` . AWS Network Firewall creates an instance of the associated firewall in each subnet that you specify, to filter traffic in the subnet's Availability Zone.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key:value pairs to associate with the resource."},"vpcEndpointAssociationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a VPC endpoint association."},"vpcEndpointAssociationId":{"type":"string","description":"The unique identifier of the VPC endpoint association."},"vpcId":{"type":"string","description":"The unique identifier of the VPC for the endpoint association.","replaceOnChanges":true}},"type":"object","required":["endpointId","firewallArn","subnetMapping","vpcEndpointAssociationArn","vpcEndpointAssociationId","vpcId"],"inputProperties":{"description":{"type":"string","description":"A description of the VPC endpoint association."},"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall."},"subnetMapping":{"$ref":"#/types/aws-native:networkfirewall:VpcEndpointAssociationSubnetMapping","description":"The ID for a subnet that's used in an association with a firewall. This is used in `CreateFirewall` , `AssociateSubnets` , and `CreateVpcEndpointAssociation` . AWS Network Firewall creates an instance of the associated firewall in each subnet that you specify, to filter traffic in the subnet's Availability Zone."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The key:value pairs to associate with the resource."},"vpcId":{"type":"string","description":"The unique identifier of the VPC for the endpoint association."}},"requiredInputs":["firewallArn","subnetMapping","vpcId"]},"aws-native:networkmanager:ConnectAttachment":{"description":"AWS::NetworkManager::ConnectAttachment Resource Type Definition","properties":{"attachmentId":{"type":"string","description":"The ID of the attachment."},"attachmentPolicyRuleNumber":{"type":"integer","description":"The policy rule number associated with the attachment."},"attachmentType":{"type":"string","description":"The type of attachment."},"coreNetworkArn":{"type":"string","description":"The ARN of a core network."},"coreNetworkId":{"type":"string","description":"ID of the CoreNetwork that the attachment will be attached to.","replaceOnChanges":true},"createdAt":{"type":"string","description":"Creation time of the attachment."},"edgeLocation":{"type":"string","description":"Edge location of the attachment.","replaceOnChanges":true},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"options":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentOptions","description":"Protocol options for connect attachment","replaceOnChanges":true},"ownerAccountId":{"type":"string","description":"The ID of the attachment account owner."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"type":"string","description":"The attachment resource ARN."},"routingPolicyLabel":{"type":"string","description":"Routing policy label","replaceOnChanges":true},"segmentName":{"type":"string","description":"The name of the segment attachment."},"state":{"type":"string","description":"State of the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"transportAttachmentId":{"type":"string","description":"Id of transport attachment","replaceOnChanges":true},"updatedAt":{"type":"string","description":"Last update time of the attachment."}},"type":"object","required":["attachmentId","attachmentPolicyRuleNumber","attachmentType","coreNetworkArn","coreNetworkId","createdAt","edgeLocation","lastModificationErrors","options","ownerAccountId","resourceArn","segmentName","state","transportAttachmentId","updatedAt"],"inputProperties":{"coreNetworkId":{"type":"string","description":"ID of the CoreNetwork that the attachment will be attached to."},"edgeLocation":{"type":"string","description":"Edge location of the attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"options":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentOptions","description":"Protocol options for connect attachment"},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"routingPolicyLabel":{"type":"string","description":"Routing policy label"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"transportAttachmentId":{"type":"string","description":"Id of transport attachment"}},"requiredInputs":["coreNetworkId","edgeLocation","options","transportAttachmentId"]},"aws-native:networkmanager:ConnectPeer":{"description":"AWS::NetworkManager::ConnectPeer Resource Type Definition.","properties":{"bgpOptions":{"$ref":"#/types/aws-native:networkmanager:ConnectPeerBgpOptions","description":"Bgp options for connect peer.","replaceOnChanges":true},"configuration":{"$ref":"#/types/aws-native:networkmanager:ConnectPeerConfiguration","description":"Configuration of the connect peer."},"connectAttachmentId":{"type":"string","description":"The ID of the attachment to connect.","replaceOnChanges":true},"connectPeerId":{"type":"string","description":"The ID of the Connect peer."},"coreNetworkAddress":{"type":"string","description":"The IP address of a core network.","replaceOnChanges":true},"coreNetworkId":{"type":"string","description":"The ID of the core network."},"createdAt":{"type":"string","description":"Connect peer creation time."},"edgeLocation":{"type":"string","description":"The Connect peer Regions where edges are located."},"insideCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The inside IP addresses used for a Connect peer configuration.","replaceOnChanges":true},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the connect peer."},"peerAddress":{"type":"string","description":"The IP address of the Connect peer.","replaceOnChanges":true},"state":{"type":"string","description":"State of the connect peer."},"subnetArn":{"type":"string","description":"The subnet ARN for the connect peer.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["configuration","connectAttachmentId","connectPeerId","coreNetworkId","createdAt","edgeLocation","lastModificationErrors","peerAddress","state"],"inputProperties":{"bgpOptions":{"$ref":"#/types/aws-native:networkmanager:ConnectPeerBgpOptions","description":"Bgp options for connect peer."},"connectAttachmentId":{"type":"string","description":"The ID of the attachment to connect."},"coreNetworkAddress":{"type":"string","description":"The IP address of a core network."},"insideCidrBlocks":{"type":"array","items":{"type":"string"},"description":"The inside IP addresses used for a Connect peer configuration."},"peerAddress":{"type":"string","description":"The IP address of the Connect peer."},"subnetArn":{"type":"string","description":"The subnet ARN for the connect peer."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["connectAttachmentId","peerAddress"]},"aws-native:networkmanager:CoreNetwork":{"description":"AWS::NetworkManager::CoreNetwork Resource Type Definition.","properties":{"coreNetworkArn":{"type":"string","description":"The ARN (Amazon resource name) of core network"},"coreNetworkId":{"type":"string","description":"The Id of core network"},"createdAt":{"type":"string","description":"The creation time of core network"},"description":{"type":"string","description":"The description of core network"},"edges":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkEdge"},"description":"The edges within a core network."},"globalNetworkId":{"type":"string","description":"The ID of the global network that your core network is a part of.","replaceOnChanges":true},"networkFunctionGroups":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkNetworkFunctionGroup"},"description":"The network function groups within a core network."},"ownerAccount":{"type":"string","description":"Owner of the core network"},"policyDocument":{"$ref":"pulumi.json#/Any","description":"Live policy document for the core network, you must provide PolicyDocument in Json Format\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::NetworkManager::CoreNetwork` for more information about the expected schema for this property."},"segments":{"type":"array","items":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkSegment"},"description":"The segments within a core network."},"state":{"type":"string","description":"The state of core network"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the global network."}},"type":"object","required":["coreNetworkArn","coreNetworkId","createdAt","edges","globalNetworkId","networkFunctionGroups","ownerAccount","segments","state"],"inputProperties":{"description":{"type":"string","description":"The description of core network"},"globalNetworkId":{"type":"string","description":"The ID of the global network that your core network is a part of."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"Live policy document for the core network, you must provide PolicyDocument in Json Format\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::NetworkManager::CoreNetwork` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the global network."}},"requiredInputs":["globalNetworkId"]},"aws-native:networkmanager:CoreNetworkPrefixListAssociation":{"description":"Resource Type definition for AWS::NetworkManager::CoreNetworkPrefixListAssociation which associates a prefix list with a core network.","properties":{"coreNetworkId":{"type":"string","description":"The ID of the core network.","replaceOnChanges":true},"prefixListAlias":{"type":"string","description":"The alias of the prefix list","replaceOnChanges":true},"prefixListArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the prefix list.","replaceOnChanges":true}},"type":"object","required":["coreNetworkId","prefixListAlias","prefixListArn"],"inputProperties":{"coreNetworkId":{"type":"string","description":"The ID of the core network."},"prefixListAlias":{"type":"string","description":"The alias of the prefix list"},"prefixListArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the prefix list."}},"requiredInputs":["coreNetworkId","prefixListAlias","prefixListArn"]},"aws-native:networkmanager:CustomerGatewayAssociation":{"description":"The AWS::NetworkManager::CustomerGatewayAssociation type associates a customer gateway with a device and optionally, with a link.","properties":{"customerGatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the customer gateway.","replaceOnChanges":true},"deviceId":{"type":"string","description":"The ID of the device","replaceOnChanges":true},"globalNetworkId":{"type":"string","description":"The ID of the global network.","replaceOnChanges":true},"linkId":{"type":"string","description":"The ID of the link","replaceOnChanges":true}},"type":"object","required":["customerGatewayArn","deviceId","globalNetworkId"],"inputProperties":{"customerGatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the customer gateway."},"deviceId":{"type":"string","description":"The ID of the device"},"globalNetworkId":{"type":"string","description":"The ID of the global network."},"linkId":{"type":"string","description":"The ID of the link"}},"requiredInputs":["customerGatewayArn","deviceId","globalNetworkId"]},"aws-native:networkmanager:Device":{"description":"The AWS::NetworkManager::Device type describes a device.","properties":{"awsLocation":{"$ref":"#/types/aws-native:networkmanager:DeviceAwsLocation","description":"The Amazon Web Services location of the device, if applicable."},"createdAt":{"type":"string","description":"The date and time that the device was created."},"description":{"type":"string","description":"The description of the device."},"deviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the device."},"deviceId":{"type":"string","description":"The ID of the device."},"globalNetworkId":{"type":"string","description":"The ID of the global network.","replaceOnChanges":true},"location":{"$ref":"#/types/aws-native:networkmanager:DeviceLocation","description":"The site location."},"model":{"type":"string","description":"The device model"},"serialNumber":{"type":"string","description":"The device serial number."},"siteId":{"type":"string","description":"The site ID."},"state":{"type":"string","description":"The state of the device."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the device."},"type":{"type":"string","description":"The device type."},"vendor":{"type":"string","description":"The device vendor."}},"type":"object","required":["createdAt","deviceArn","deviceId","globalNetworkId","state"],"inputProperties":{"awsLocation":{"$ref":"#/types/aws-native:networkmanager:DeviceAwsLocation","description":"The Amazon Web Services location of the device, if applicable."},"description":{"type":"string","description":"The description of the device."},"globalNetworkId":{"type":"string","description":"The ID of the global network."},"location":{"$ref":"#/types/aws-native:networkmanager:DeviceLocation","description":"The site location."},"model":{"type":"string","description":"The device model"},"serialNumber":{"type":"string","description":"The device serial number."},"siteId":{"type":"string","description":"The site ID."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the device."},"type":{"type":"string","description":"The device type."},"vendor":{"type":"string","description":"The device vendor."}},"requiredInputs":["globalNetworkId"]},"aws-native:networkmanager:DirectConnectGatewayAttachment":{"description":"AWS::NetworkManager::DirectConnectGatewayAttachment Resource Type","properties":{"attachmentId":{"type":"string","description":"Id of the attachment."},"attachmentPolicyRuleNumber":{"type":"integer","description":"The policy rule number associated with the attachment."},"attachmentType":{"type":"string","description":"Attachment type."},"coreNetworkArn":{"type":"string","description":"The ARN of a core network for the Direct Connect Gateway attachment."},"coreNetworkId":{"type":"string","description":"The ID of a core network for the Direct Connect Gateway attachment.","replaceOnChanges":true},"createdAt":{"type":"string","description":"Creation time of the attachment."},"directConnectGatewayArn":{"type":"string","description":"The ARN of the Direct Connect Gateway.","replaceOnChanges":true},"edgeLocations":{"type":"array","items":{"type":"string"},"description":"The Regions where the edges are located."},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"ownerAccountId":{"type":"string","description":"Owner account of the attachment."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"type":"string","description":"The ARN of the Resource."},"routingPolicyLabel":{"type":"string","description":"Routing policy label","replaceOnChanges":true},"segmentName":{"type":"string","description":"The name of the segment attachment.."},"state":{"type":"string","description":"State of the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"updatedAt":{"type":"string","description":"Last update time of the attachment."}},"type":"object","required":["attachmentId","attachmentPolicyRuleNumber","attachmentType","coreNetworkArn","coreNetworkId","createdAt","directConnectGatewayArn","edgeLocations","lastModificationErrors","networkFunctionGroupName","ownerAccountId","resourceArn","segmentName","state","updatedAt"],"inputProperties":{"coreNetworkId":{"type":"string","description":"The ID of a core network for the Direct Connect Gateway attachment."},"directConnectGatewayArn":{"type":"string","description":"The ARN of the Direct Connect Gateway."},"edgeLocations":{"type":"array","items":{"type":"string"},"description":"The Regions where the edges are located."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"routingPolicyLabel":{"type":"string","description":"Routing policy label"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."}},"requiredInputs":["coreNetworkId","directConnectGatewayArn","edgeLocations"]},"aws-native:networkmanager:GlobalNetwork":{"description":"The AWS::NetworkManager::GlobalNetwork type specifies a global network of the user's account\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var globalNetwork = new AwsNative.NetworkManager.GlobalNetwork(\"globalNetwork\");\n\n    var site = new AwsNative.NetworkManager.Site(\"site\", new()\n    {\n        GlobalNetworkId = globalNetwork.Id,\n        Location = new AwsNative.NetworkManager.Inputs.SiteLocationArgs\n        {\n            Address = \"227 W Monroe St, Chicago, IL 60606\",\n            Latitude = \"41.8\",\n            Longitude = \"-87.6\",\n        },\n    });\n\n    var link = new AwsNative.NetworkManager.Link(\"link\", new()\n    {\n        Description = \"Broadband link\",\n        GlobalNetworkId = globalNetwork.Id,\n        SiteId = site.SiteId,\n        Bandwidth = new AwsNative.NetworkManager.Inputs.LinkBandwidthArgs\n        {\n            DownloadSpeed = 20,\n            UploadSpeed = 20,\n        },\n        Provider = \"AnyCompany\",\n        Type = \"Broadband\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"broadband-link-1\",\n            },\n        },\n    });\n\n    var device = new AwsNative.NetworkManager.Device(\"device\", new()\n    {\n        Description = \"Chicago office device\",\n        GlobalNetworkId = globalNetwork.Id,\n        SiteId = site.SiteId,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Network\",\n                Value = \"north-america\",\n            },\n        },\n    });\n\n    var linkAssociation = new AwsNative.NetworkManager.LinkAssociation(\"linkAssociation\", new()\n    {\n        GlobalNetworkId = globalNetwork.Id,\n        LinkId = link.LinkId,\n        DeviceId = device.DeviceId,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/networkmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tglobalNetwork, err := networkmanager.NewGlobalNetwork(ctx, \"globalNetwork\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsite, err := networkmanager.NewSite(ctx, \"site\", \u0026networkmanager.SiteArgs{\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tLocation: \u0026networkmanager.SiteLocationArgs{\n\t\t\t\tAddress:   pulumi.String(\"227 W Monroe St, Chicago, IL 60606\"),\n\t\t\t\tLatitude:  pulumi.String(\"41.8\"),\n\t\t\t\tLongitude: pulumi.String(\"-87.6\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tlink, err := networkmanager.NewLink(ctx, \"link\", \u0026networkmanager.LinkArgs{\n\t\t\tDescription:     pulumi.String(\"Broadband link\"),\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tSiteId:          site.SiteId,\n\t\t\tBandwidth: \u0026networkmanager.LinkBandwidthArgs{\n\t\t\t\tDownloadSpeed: pulumi.Int(20),\n\t\t\t\tUploadSpeed:   pulumi.Int(20),\n\t\t\t},\n\t\t\tProvider: pulumi.String(\"AnyCompany\"),\n\t\t\tType:     pulumi.String(\"Broadband\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"broadband-link-1\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdevice, err := networkmanager.NewDevice(ctx, \"device\", \u0026networkmanager.DeviceArgs{\n\t\t\tDescription:     pulumi.String(\"Chicago office device\"),\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tSiteId:          site.SiteId,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Network\"),\n\t\t\t\t\tValue: pulumi.String(\"north-america\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = networkmanager.NewLinkAssociation(ctx, \"linkAssociation\", \u0026networkmanager.LinkAssociationArgs{\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tLinkId:          link.LinkId,\n\t\t\tDeviceId:        device.DeviceId,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst globalNetwork = new aws_native.networkmanager.GlobalNetwork(\"globalNetwork\", {});\nconst site = new aws_native.networkmanager.Site(\"site\", {\n    globalNetworkId: globalNetwork.id,\n    location: {\n        address: \"227 W Monroe St, Chicago, IL 60606\",\n        latitude: \"41.8\",\n        longitude: \"-87.6\",\n    },\n});\nconst link = new aws_native.networkmanager.Link(\"link\", {\n    description: \"Broadband link\",\n    globalNetworkId: globalNetwork.id,\n    siteId: site.siteId,\n    bandwidth: {\n        downloadSpeed: 20,\n        uploadSpeed: 20,\n    },\n    provider: \"AnyCompany\",\n    type: \"Broadband\",\n    tags: [{\n        key: \"Name\",\n        value: \"broadband-link-1\",\n    }],\n});\nconst device = new aws_native.networkmanager.Device(\"device\", {\n    description: \"Chicago office device\",\n    globalNetworkId: globalNetwork.id,\n    siteId: site.siteId,\n    tags: [{\n        key: \"Network\",\n        value: \"north-america\",\n    }],\n});\nconst linkAssociation = new aws_native.networkmanager.LinkAssociation(\"linkAssociation\", {\n    globalNetworkId: globalNetwork.id,\n    linkId: link.linkId,\n    deviceId: device.deviceId,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nglobal_network = aws_native.networkmanager.GlobalNetwork(\"globalNetwork\")\nsite = aws_native.networkmanager.Site(\"site\",\n    global_network_id=global_network.id,\n    location={\n        \"address\": \"227 W Monroe St, Chicago, IL 60606\",\n        \"latitude\": \"41.8\",\n        \"longitude\": \"-87.6\",\n    })\nlink = aws_native.networkmanager.Link(\"link\",\n    description=\"Broadband link\",\n    global_network_id=global_network.id,\n    site_id=site.site_id,\n    bandwidth={\n        \"download_speed\": 20,\n        \"upload_speed\": 20,\n    },\n    provider=\"AnyCompany\",\n    type=\"Broadband\",\n    tags=[{\n        \"key\": \"Name\",\n        \"value\": \"broadband-link-1\",\n    }])\ndevice = aws_native.networkmanager.Device(\"device\",\n    description=\"Chicago office device\",\n    global_network_id=global_network.id,\n    site_id=site.site_id,\n    tags=[{\n        \"key\": \"Network\",\n        \"value\": \"north-america\",\n    }])\nlink_association = aws_native.networkmanager.LinkAssociation(\"linkAssociation\",\n    global_network_id=global_network.id,\n    link_id=link.link_id,\n    device_id=device.device_id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var globalNetwork = new AwsNative.NetworkManager.GlobalNetwork(\"globalNetwork\");\n\n    var site = new AwsNative.NetworkManager.Site(\"site\", new()\n    {\n        GlobalNetworkId = globalNetwork.Id,\n        Location = new AwsNative.NetworkManager.Inputs.SiteLocationArgs\n        {\n            Address = \"227 W Monroe St, Chicago, IL 60606\",\n            Latitude = \"41.8\",\n            Longitude = \"-87.6\",\n        },\n    });\n\n    var link = new AwsNative.NetworkManager.Link(\"link\", new()\n    {\n        Description = \"Broadband link\",\n        GlobalNetworkId = globalNetwork.Id,\n        SiteId = site.SiteId,\n        Bandwidth = new AwsNative.NetworkManager.Inputs.LinkBandwidthArgs\n        {\n            DownloadSpeed = 20,\n            UploadSpeed = 20,\n        },\n        Provider = \"AnyCompany\",\n        Type = \"Broadband\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"broadband-link-1\",\n            },\n        },\n    });\n\n    var device = new AwsNative.NetworkManager.Device(\"device\", new()\n    {\n        Description = \"Chicago office device\",\n        GlobalNetworkId = globalNetwork.Id,\n        SiteId = site.SiteId,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Network\",\n                Value = \"north-america\",\n            },\n        },\n    });\n\n    var linkAssociation = new AwsNative.NetworkManager.LinkAssociation(\"linkAssociation\", new()\n    {\n        GlobalNetworkId = globalNetwork.Id,\n        LinkId = link.LinkId,\n        DeviceId = device.DeviceId,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/networkmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tglobalNetwork, err := networkmanager.NewGlobalNetwork(ctx, \"globalNetwork\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tsite, err := networkmanager.NewSite(ctx, \"site\", \u0026networkmanager.SiteArgs{\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tLocation: \u0026networkmanager.SiteLocationArgs{\n\t\t\t\tAddress:   pulumi.String(\"227 W Monroe St, Chicago, IL 60606\"),\n\t\t\t\tLatitude:  pulumi.String(\"41.8\"),\n\t\t\t\tLongitude: pulumi.String(\"-87.6\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tlink, err := networkmanager.NewLink(ctx, \"link\", \u0026networkmanager.LinkArgs{\n\t\t\tDescription:     pulumi.String(\"Broadband link\"),\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tSiteId:          site.SiteId,\n\t\t\tBandwidth: \u0026networkmanager.LinkBandwidthArgs{\n\t\t\t\tDownloadSpeed: pulumi.Int(20),\n\t\t\t\tUploadSpeed:   pulumi.Int(20),\n\t\t\t},\n\t\t\tProvider: pulumi.String(\"AnyCompany\"),\n\t\t\tType:     pulumi.String(\"Broadband\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"broadband-link-1\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tdevice, err := networkmanager.NewDevice(ctx, \"device\", \u0026networkmanager.DeviceArgs{\n\t\t\tDescription:     pulumi.String(\"Chicago office device\"),\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tSiteId:          site.SiteId,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Network\"),\n\t\t\t\t\tValue: pulumi.String(\"north-america\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = networkmanager.NewLinkAssociation(ctx, \"linkAssociation\", \u0026networkmanager.LinkAssociationArgs{\n\t\t\tGlobalNetworkId: globalNetwork.ID(),\n\t\t\tLinkId:          link.LinkId,\n\t\t\tDeviceId:        device.DeviceId,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst globalNetwork = new aws_native.networkmanager.GlobalNetwork(\"globalNetwork\", {});\nconst site = new aws_native.networkmanager.Site(\"site\", {\n    globalNetworkId: globalNetwork.id,\n    location: {\n        address: \"227 W Monroe St, Chicago, IL 60606\",\n        latitude: \"41.8\",\n        longitude: \"-87.6\",\n    },\n});\nconst link = new aws_native.networkmanager.Link(\"link\", {\n    description: \"Broadband link\",\n    globalNetworkId: globalNetwork.id,\n    siteId: site.siteId,\n    bandwidth: {\n        downloadSpeed: 20,\n        uploadSpeed: 20,\n    },\n    provider: \"AnyCompany\",\n    type: \"Broadband\",\n    tags: [{\n        key: \"Name\",\n        value: \"broadband-link-1\",\n    }],\n});\nconst device = new aws_native.networkmanager.Device(\"device\", {\n    description: \"Chicago office device\",\n    globalNetworkId: globalNetwork.id,\n    siteId: site.siteId,\n    tags: [{\n        key: \"Network\",\n        value: \"north-america\",\n    }],\n});\nconst linkAssociation = new aws_native.networkmanager.LinkAssociation(\"linkAssociation\", {\n    globalNetworkId: globalNetwork.id,\n    linkId: link.linkId,\n    deviceId: device.deviceId,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nglobal_network = aws_native.networkmanager.GlobalNetwork(\"globalNetwork\")\nsite = aws_native.networkmanager.Site(\"site\",\n    global_network_id=global_network.id,\n    location={\n        \"address\": \"227 W Monroe St, Chicago, IL 60606\",\n        \"latitude\": \"41.8\",\n        \"longitude\": \"-87.6\",\n    })\nlink = aws_native.networkmanager.Link(\"link\",\n    description=\"Broadband link\",\n    global_network_id=global_network.id,\n    site_id=site.site_id,\n    bandwidth={\n        \"download_speed\": 20,\n        \"upload_speed\": 20,\n    },\n    provider=\"AnyCompany\",\n    type=\"Broadband\",\n    tags=[{\n        \"key\": \"Name\",\n        \"value\": \"broadband-link-1\",\n    }])\ndevice = aws_native.networkmanager.Device(\"device\",\n    description=\"Chicago office device\",\n    global_network_id=global_network.id,\n    site_id=site.site_id,\n    tags=[{\n        \"key\": \"Network\",\n        \"value\": \"north-america\",\n    }])\nlink_association = aws_native.networkmanager.LinkAssociation(\"linkAssociation\",\n    global_network_id=global_network.id,\n    link_id=link.link_id,\n    device_id=device.device_id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the global network."},"awsId":{"type":"string","description":"The ID of the global network."},"createdAt":{"type":"string","description":"The date and time that the global network was created."},"description":{"type":"string","description":"The description of the global network."},"state":{"type":"string","description":"The state of the global network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the global network."}},"type":"object","required":["arn","awsId"],"inputProperties":{"createdAt":{"type":"string","description":"The date and time that the global network was created."},"description":{"type":"string","description":"The description of the global network."},"state":{"type":"string","description":"The state of the global network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the global network."}}},"aws-native:networkmanager:Link":{"description":"The AWS::NetworkManager::Link type describes a link.","properties":{"bandwidth":{"$ref":"#/types/aws-native:networkmanager:LinkBandwidth","description":"The Bandwidth for the link."},"createdAt":{"type":"string","description":"The date and time that the device was created."},"description":{"type":"string","description":"The description of the link."},"globalNetworkId":{"type":"string","description":"The ID of the global network.","replaceOnChanges":true},"linkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the link."},"linkId":{"type":"string","description":"The ID of the link."},"provider":{"type":"string","description":"The provider of the link."},"siteId":{"type":"string","description":"The ID of the site","replaceOnChanges":true},"state":{"type":"string","description":"The state of the link."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the link."},"type":{"type":"string","description":"The type of the link."}},"type":"object","required":["bandwidth","createdAt","globalNetworkId","linkArn","linkId","siteId","state"],"inputProperties":{"bandwidth":{"$ref":"#/types/aws-native:networkmanager:LinkBandwidth","description":"The Bandwidth for the link."},"description":{"type":"string","description":"The description of the link."},"globalNetworkId":{"type":"string","description":"The ID of the global network."},"provider":{"type":"string","description":"The provider of the link."},"siteId":{"type":"string","description":"The ID of the site"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the link."},"type":{"type":"string","description":"The type of the link."}},"requiredInputs":["bandwidth","globalNetworkId","siteId"]},"aws-native:networkmanager:LinkAssociation":{"description":"The AWS::NetworkManager::LinkAssociation type associates a link to a device. The device and link must be in the same global network and the same site.","properties":{"deviceId":{"type":"string","description":"The ID of the device","replaceOnChanges":true},"globalNetworkId":{"type":"string","description":"The ID of the global network.","replaceOnChanges":true},"linkId":{"type":"string","description":"The ID of the link","replaceOnChanges":true}},"type":"object","required":["deviceId","globalNetworkId","linkId"],"inputProperties":{"deviceId":{"type":"string","description":"The ID of the device"},"globalNetworkId":{"type":"string","description":"The ID of the global network."},"linkId":{"type":"string","description":"The ID of the link"}},"requiredInputs":["deviceId","globalNetworkId","linkId"]},"aws-native:networkmanager:Site":{"description":"The AWS::NetworkManager::Site type describes a site.","properties":{"createdAt":{"type":"string","description":"The date and time that the device was created."},"description":{"type":"string","description":"The description of the site."},"globalNetworkId":{"type":"string","description":"The ID of the global network.","replaceOnChanges":true},"location":{"$ref":"#/types/aws-native:networkmanager:SiteLocation","description":"The location of the site."},"siteArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the site."},"siteId":{"type":"string","description":"The ID of the site."},"state":{"type":"string","description":"The state of the site."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the site."}},"type":"object","required":["createdAt","globalNetworkId","siteArn","siteId","state"],"inputProperties":{"description":{"type":"string","description":"The description of the site."},"globalNetworkId":{"type":"string","description":"The ID of the global network."},"location":{"$ref":"#/types/aws-native:networkmanager:SiteLocation","description":"The location of the site."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the site."}},"requiredInputs":["globalNetworkId"]},"aws-native:networkmanager:SiteToSiteVpnAttachment":{"description":"AWS::NetworkManager::SiteToSiteVpnAttachment Resource Type definition.","properties":{"attachmentId":{"type":"string","description":"The ID of the attachment."},"attachmentPolicyRuleNumber":{"type":"integer","description":"The policy rule number associated with the attachment."},"attachmentType":{"type":"string","description":"The type of attachment."},"coreNetworkArn":{"type":"string","description":"The ARN of a core network for the VPC attachment."},"coreNetworkId":{"type":"string","description":"The ID of a core network where you're creating a site-to-site VPN attachment.","replaceOnChanges":true},"createdAt":{"type":"string","description":"Creation time of the attachment."},"edgeLocation":{"type":"string","description":"The Region where the edge is located."},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"ownerAccountId":{"type":"string","description":"Owner account of the attachment."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"type":"string","description":"The ARN of the Resource."},"routingPolicyLabel":{"type":"string","description":"Routing policy label","replaceOnChanges":true},"segmentName":{"type":"string","description":"The name of the segment that attachment is in."},"state":{"type":"string","description":"The state of the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"updatedAt":{"type":"string","description":"Last update time of the attachment."},"vpnConnectionArn":{"type":"string","description":"The ARN of the site-to-site VPN attachment.","replaceOnChanges":true}},"type":"object","required":["attachmentId","attachmentPolicyRuleNumber","attachmentType","coreNetworkArn","coreNetworkId","createdAt","edgeLocation","lastModificationErrors","ownerAccountId","resourceArn","segmentName","state","updatedAt","vpnConnectionArn"],"inputProperties":{"coreNetworkId":{"type":"string","description":"The ID of a core network where you're creating a site-to-site VPN attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"routingPolicyLabel":{"type":"string","description":"Routing policy label"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"vpnConnectionArn":{"type":"string","description":"The ARN of the site-to-site VPN attachment."}},"requiredInputs":["coreNetworkId","vpnConnectionArn"]},"aws-native:networkmanager:TransitGatewayPeering":{"description":"AWS::NetworkManager::TransitGatewayPeering Resoruce Type.","properties":{"coreNetworkArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the core network that you want to peer a transit gateway to."},"coreNetworkId":{"type":"string","description":"The Id of the core network that you want to peer a transit gateway to.","replaceOnChanges":true},"createdAt":{"type":"string","description":"The creation time of the transit gateway peering"},"edgeLocation":{"type":"string","description":"The location of the transit gateway peering"},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the transit gateway peering."},"ownerAccountId":{"type":"string","description":"Peering owner account Id"},"peeringId":{"type":"string","description":"The Id of the transit gateway peering"},"peeringType":{"type":"string","description":"Peering type (TransitGatewayPeering)"},"resourceArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the resource that you will peer to a core network"},"state":{"type":"string","description":"The state of the transit gateway peering"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"transitGatewayArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the transit gateway that you will peer to a core network","replaceOnChanges":true},"transitGatewayPeeringAttachmentId":{"type":"string","description":"The ID of the TransitGatewayPeeringAttachment"}},"type":"object","required":["coreNetworkArn","coreNetworkId","createdAt","edgeLocation","lastModificationErrors","ownerAccountId","peeringId","peeringType","resourceArn","state","transitGatewayArn","transitGatewayPeeringAttachmentId"],"inputProperties":{"coreNetworkId":{"type":"string","description":"The Id of the core network that you want to peer a transit gateway to."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"transitGatewayArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the transit gateway that you will peer to a core network"}},"requiredInputs":["coreNetworkId","transitGatewayArn"]},"aws-native:networkmanager:TransitGatewayRegistration":{"description":"The AWS::NetworkManager::TransitGatewayRegistration type registers a transit gateway in your global network. The transit gateway can be in any AWS Region, but it must be owned by the same AWS account that owns the global network. You cannot register a transit gateway in more than one global network.","properties":{"globalNetworkId":{"type":"string","description":"The ID of the global network.","replaceOnChanges":true},"transitGatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the transit gateway.","replaceOnChanges":true}},"type":"object","required":["globalNetworkId","transitGatewayArn"],"inputProperties":{"globalNetworkId":{"type":"string","description":"The ID of the global network."},"transitGatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the transit gateway."}},"requiredInputs":["globalNetworkId","transitGatewayArn"]},"aws-native:networkmanager:TransitGatewayRouteTableAttachment":{"description":"AWS::NetworkManager::TransitGatewayRouteTableAttachment Resource Type definition.","properties":{"attachmentId":{"type":"string","description":"The ID of the attachment."},"attachmentPolicyRuleNumber":{"type":"integer","description":"The policy rule number associated with the attachment."},"attachmentType":{"type":"string","description":"The type of attachment."},"coreNetworkArn":{"type":"string","description":"The ARN of a core network for the VPC attachment."},"coreNetworkId":{"type":"string","description":"The ID of a core network where you're creating a site-to-site VPN attachment."},"createdAt":{"type":"string","description":"Creation time of the attachment."},"edgeLocation":{"type":"string","description":"The Region where the edge is located."},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"ownerAccountId":{"type":"string","description":"Owner account of the attachment."},"peeringId":{"type":"string","description":"The Id of peering between transit gateway and core network.","replaceOnChanges":true},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"type":"string","description":"The ARN of the Resource."},"routingPolicyLabel":{"type":"string","description":"Routing policy label","replaceOnChanges":true},"segmentName":{"type":"string","description":"The name of the segment that attachment is in."},"state":{"type":"string","description":"The state of the attachment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"transitGatewayRouteTableArn":{"type":"string","description":"The Arn of transit gateway route table.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"Last update time of the attachment."}},"type":"object","required":["attachmentId","attachmentPolicyRuleNumber","attachmentType","coreNetworkArn","coreNetworkId","createdAt","edgeLocation","lastModificationErrors","ownerAccountId","peeringId","resourceArn","segmentName","state","transitGatewayRouteTableArn","updatedAt"],"inputProperties":{"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"peeringId":{"type":"string","description":"The Id of peering between transit gateway and core network."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"routingPolicyLabel":{"type":"string","description":"Routing policy label"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"transitGatewayRouteTableArn":{"type":"string","description":"The Arn of transit gateway route table."}},"requiredInputs":["peeringId","transitGatewayRouteTableArn"]},"aws-native:networkmanager:VpcAttachment":{"description":"AWS::NetworkManager::VpcAttachment Resoruce Type","properties":{"attachmentId":{"type":"string","description":"Id of the attachment."},"attachmentPolicyRuleNumber":{"type":"integer","description":"The policy rule number associated with the attachment."},"attachmentType":{"type":"string","description":"Attachment type."},"coreNetworkArn":{"type":"string","description":"The ARN of a core network for the VPC attachment."},"coreNetworkId":{"type":"string","description":"The ID of a core network for the VPC attachment.","replaceOnChanges":true},"createdAt":{"type":"string","description":"Creation time of the attachment."},"edgeLocation":{"type":"string","description":"The Region where the edge is located."},"lastModificationErrors":{"type":"array","items":{"type":"string"},"description":"Errors from the last modification of the attachment."},"networkFunctionGroupName":{"type":"string","description":"The name of the network function group attachment."},"options":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentVpcOptions","description":"Vpc options of the attachment."},"ownerAccountId":{"type":"string","description":"Owner account of the attachment."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"type":"string","description":"The ARN of the Resource."},"routingPolicyLabel":{"type":"string","description":"Routing policy label","replaceOnChanges":true},"segmentName":{"type":"string","description":"The name of the segment attachment.."},"state":{"type":"string","description":"State of the attachment."},"subnetArns":{"type":"array","items":{"type":"string"},"description":"Subnet Arn list"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"updatedAt":{"type":"string","description":"Last update time of the attachment."},"vpcArn":{"type":"string","description":"The ARN of the VPC.","replaceOnChanges":true}},"type":"object","required":["attachmentId","attachmentPolicyRuleNumber","attachmentType","coreNetworkArn","coreNetworkId","createdAt","edgeLocation","lastModificationErrors","networkFunctionGroupName","ownerAccountId","resourceArn","segmentName","state","subnetArns","updatedAt","vpcArn"],"inputProperties":{"coreNetworkId":{"type":"string","description":"The ID of a core network for the VPC attachment."},"options":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentVpcOptions","description":"Vpc options of the attachment."},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"routingPolicyLabel":{"type":"string","description":"Routing policy label"},"subnetArns":{"type":"array","items":{"type":"string"},"description":"Subnet Arn list"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the attachment."},"vpcArn":{"type":"string","description":"The ARN of the VPC."}},"requiredInputs":["coreNetworkId","subnetArns","vpcArn"]},"aws-native:nimblestudio:LaunchProfile":{"description":"Resource Type definition for AWS::NimbleStudio::LaunchProfile","properties":{"description":{"type":"string"},"ec2SubnetIds":{"type":"array","items":{"type":"string"},"replaceOnChanges":true},"launchProfileId":{"type":"string"},"launchProfileProtocolVersions":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"streamConfiguration":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileStreamConfiguration"},"studioComponentIds":{"type":"array","items":{"type":"string"}},"studioId":{"type":"string","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true}},"type":"object","required":["ec2SubnetIds","launchProfileId","launchProfileProtocolVersions","name","streamConfiguration","studioComponentIds","studioId"],"inputProperties":{"description":{"type":"string"},"ec2SubnetIds":{"type":"array","items":{"type":"string"}},"launchProfileProtocolVersions":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"streamConfiguration":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileStreamConfiguration"},"studioComponentIds":{"type":"array","items":{"type":"string"}},"studioId":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["ec2SubnetIds","launchProfileProtocolVersions","streamConfiguration","studioComponentIds","studioId"]},"aws-native:nimblestudio:StreamingImage":{"description":"Resource Type definition for AWS::NimbleStudio::StreamingImage","properties":{"description":{"type":"string"},"ec2ImageId":{"type":"string","replaceOnChanges":true},"encryptionConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StreamingImageEncryptionConfiguration"},"encryptionConfigurationKeyArn":{"type":"string"},"encryptionConfigurationKeyType":{"type":"string"},"eulaIds":{"type":"array","items":{"type":"string"}},"name":{"type":"string"},"owner":{"type":"string"},"platform":{"type":"string"},"streamingImageId":{"type":"string"},"studioId":{"type":"string","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true}},"type":"object","required":["ec2ImageId","encryptionConfiguration","eulaIds","name","owner","platform","streamingImageId","studioId"],"inputProperties":{"description":{"type":"string"},"ec2ImageId":{"type":"string"},"encryptionConfigurationKeyArn":{"type":"string"},"encryptionConfigurationKeyType":{"type":"string"},"name":{"type":"string"},"studioId":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["ec2ImageId","studioId"]},"aws-native:nimblestudio:Studio":{"description":"Resource Type definition for AWS::NimbleStudio::Studio","properties":{"adminRoleArn":{"type":"string"},"displayName":{"type":"string"},"homeRegion":{"type":"string"},"ssoClientId":{"type":"string"},"studioEncryptionConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioEncryptionConfiguration"},"studioId":{"type":"string"},"studioName":{"type":"string","replaceOnChanges":true},"studioUrl":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true},"userRoleArn":{"type":"string"}},"type":"object","required":["adminRoleArn","displayName","homeRegion","ssoClientId","studioId","studioName","studioUrl","userRoleArn"],"inputProperties":{"adminRoleArn":{"type":"string"},"displayName":{"type":"string"},"studioEncryptionConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioEncryptionConfiguration"},"studioName":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"userRoleArn":{"type":"string"}},"requiredInputs":["adminRoleArn","displayName","userRoleArn"]},"aws-native:nimblestudio:StudioComponent":{"description":"Resource Type definition for AWS::NimbleStudio::StudioComponent","properties":{"configuration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentConfiguration"},"description":{"type":"string"},"ec2SecurityGroupIds":{"type":"array","items":{"type":"string"}},"initializationScripts":{"type":"array","items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentInitializationScript"}},"name":{"type":"string"},"scriptParameters":{"type":"array","items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentScriptParameterKeyValue"}},"studioComponentId":{"type":"string"},"studioId":{"type":"string","replaceOnChanges":true},"subtype":{"type":"string","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"replaceOnChanges":true},"type":{"type":"string"}},"type":"object","required":["name","studioComponentId","studioId","type"],"inputProperties":{"configuration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentConfiguration"},"description":{"type":"string"},"ec2SecurityGroupIds":{"type":"array","items":{"type":"string"}},"initializationScripts":{"type":"array","items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentInitializationScript"}},"name":{"type":"string"},"scriptParameters":{"type":"array","items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentScriptParameterKeyValue"}},"studioId":{"type":"string"},"subtype":{"type":"string"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"type":{"type":"string"}},"requiredInputs":["studioId","type"]},"aws-native:oam:Link":{"description":"Definition of AWS::Oam::Link Resource Type","properties":{"arn":{"type":"string","description":"The ARN of the link. For example, `arn:aws:oam:us-west-1:111111111111:link:abcd1234-a123-456a-a12b-a123b456c789`"},"label":{"type":"string","description":"The friendly human-readable name used to identify this source account when it is viewed from the monitoring account. For example, `my-account1` ."},"labelTemplate":{"type":"string","description":"Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account.\n\nYou can include the following variables in your template:\n\n- `$AccountName` is the name of the account\n- `$AccountEmail` is a globally-unique email address, which includes the email domain, such as `mariagarcia@example.com`\n- `$AccountEmailNoDomain` is an email address without the domain name, such as `mariagarcia`\n\n\u003e In the  and  Regions, the only supported option is to use custom labels, and the `$AccountName` , `$AccountEmail` , and `$AccountEmailNoDomain` variables all resolve as *account-id* instead of the specified variable.","replaceOnChanges":true},"linkConfiguration":{"$ref":"#/types/aws-native:oam:LinkConfiguration","description":"Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account."},"resourceTypes":{"type":"array","items":{"$ref":"#/types/aws-native:oam:LinkResourceType"},"description":"An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are `AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor` ."},"sinkIdentifier":{"type":"string","description":"The ARN of the sink in the monitoring account that you want to link to. You can use [ListSinks](https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html) to find the ARNs of sinks.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags to apply to the link"}},"type":"object","required":["arn","label","resourceTypes","sinkIdentifier"],"inputProperties":{"labelTemplate":{"type":"string","description":"Specify a friendly human-readable name to use to identify this source account when you are viewing data from it in the monitoring account.\n\nYou can include the following variables in your template:\n\n- `$AccountName` is the name of the account\n- `$AccountEmail` is a globally-unique email address, which includes the email domain, such as `mariagarcia@example.com`\n- `$AccountEmailNoDomain` is an email address without the domain name, such as `mariagarcia`\n\n\u003e In the  and  Regions, the only supported option is to use custom labels, and the `$AccountName` , `$AccountEmail` , and `$AccountEmailNoDomain` variables all resolve as *account-id* instead of the specified variable."},"linkConfiguration":{"$ref":"#/types/aws-native:oam:LinkConfiguration","description":"Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account."},"resourceTypes":{"type":"array","items":{"$ref":"#/types/aws-native:oam:LinkResourceType"},"description":"An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are `AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor` ."},"sinkIdentifier":{"type":"string","description":"The ARN of the sink in the monitoring account that you want to link to. You can use [ListSinks](https://docs.aws.amazon.com/OAM/latest/APIReference/API_ListSinks.html) to find the ARNs of sinks."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags to apply to the link"}},"requiredInputs":["resourceTypes","sinkIdentifier"]},"aws-native:oam:Sink":{"description":"Resource Type definition for AWS::Oam::Sink","properties":{"arn":{"type":"string","description":"The Amazon resource name (ARN) of the ObservabilityAccessManager Sink"},"name":{"type":"string","description":"The name of the ObservabilityAccessManager Sink.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"The policy of this ObservabilityAccessManager Sink.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Oam::Sink` for more information about the expected schema for this property."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags to apply to the sink"}},"type":"object","required":["arn","name"],"inputProperties":{"name":{"type":"string","description":"The name of the ObservabilityAccessManager Sink."},"policy":{"$ref":"pulumi.json#/Any","description":"The policy of this ObservabilityAccessManager Sink.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Oam::Sink` for more information about the expected schema for this property."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags to apply to the sink"}}},"aws-native:observabilityadmin:OrganizationCentralizationRule":{"description":"Resource schema for AWS:ObservabilityAdmin:OrganizationCentralizationRule","properties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRule"},"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the organization centralization rule."},"ruleName":{"type":"string","description":"The name of the organization centralization rule.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["rule","ruleArn","ruleName"],"inputProperties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRule"},"ruleName":{"type":"string","description":"The name of the organization centralization rule."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["rule"]},"aws-native:observabilityadmin:OrganizationTelemetryRule":{"description":"The AWS::ObservabilityAdmin::OrganizationTelemetryRule resource defines a CloudWatch Observability Admin Organization Telemetry Rule.","properties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryRule","description":"The name of the organization telemetry rule."},"ruleArn":{"type":"string","description":"The arn of the organization telemetry rule"},"ruleName":{"type":"string","description":"The name of the organization telemetry rule","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"type":"object","required":["rule","ruleArn","ruleName"],"inputProperties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryRule","description":"The name of the organization telemetry rule."},"ruleName":{"type":"string","description":"The name of the organization telemetry rule"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"requiredInputs":["rule"]},"aws-native:observabilityadmin:S3TableIntegration":{"description":"Resource Type definition for a CloudWatch Observability Admin S3 Table Integration.","properties":{"arn":{"type":"string","description":"The ARN of the S3 Table Integration"},"encryption":{"$ref":"#/types/aws-native:observabilityadmin:S3TableIntegrationEncryptionConfig","description":"Defines the encryption configuration for S3 Table integrations, including the encryption algorithm and KMS key settings.","replaceOnChanges":true},"logSources":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:S3TableIntegrationLogSource"},"description":"The CloudWatch Logs data sources to associate with the S3 Table Integration"},"roleArn":{"type":"string","description":"The ARN of the role used to access the S3 Table Integration","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"type":"object","required":["arn","encryption","roleArn"],"inputProperties":{"encryption":{"$ref":"#/types/aws-native:observabilityadmin:S3TableIntegrationEncryptionConfig","description":"Defines the encryption configuration for S3 Table integrations, including the encryption algorithm and KMS key settings."},"logSources":{"type":"array","items":{"$ref":"#/types/aws-native:observabilityadmin:S3TableIntegrationLogSource"},"description":"The CloudWatch Logs data sources to associate with the S3 Table Integration"},"roleArn":{"type":"string","description":"The ARN of the role used to access the S3 Table Integration"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"requiredInputs":["encryption","roleArn"]},"aws-native:observabilityadmin:TelemetryEnrichment":{"description":"AWS::ObservabilityAdmin::TelemetryEnrichment cloudformation resource enables the resource tags for telemetry feature in CloudWatch to enrich infrastructure metrics with AWS resource tags. For more details: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/resource-tags-for-telemetry.html","properties":{"scope":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryEnrichmentScope","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryEnrichmentStatus"}},"type":"object","required":["status"],"inputProperties":{"scope":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryEnrichmentScope"}}},"aws-native:observabilityadmin:TelemetryPipelines":{"description":"Resource Type definition for AWS::ObservabilityAdmin::TelemetryPipelines","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the created telemetry pipeline."},"configuration":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineConfiguration","description":"The configuration that defines how the telemetry pipeline processes data, including sources, processors, and destinations. For more information, see the [Amazon CloudWatch User Guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Creating-pipelines.html) ."},"name":{"type":"string","description":"The name of the telemetry pipeline to create. The name must be unique within your account.","replaceOnChanges":true},"pipeline":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipeline"},"pipelineIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) of the telemetry pipeline."},"status":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatus","description":"The current status of the telemetry pipeline."},"statusReason":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatusReason"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"type":"object","required":["arn","configuration","pipeline","pipelineIdentifier","status","statusReason"],"inputProperties":{"configuration":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineConfiguration","description":"The configuration that defines how the telemetry pipeline processes data, including sources, processors, and destinations. For more information, see the [Amazon CloudWatch User Guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Creating-pipelines.html) ."},"name":{"type":"string","description":"The name of the telemetry pipeline to create. The name must be unique within your account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"requiredInputs":["configuration"]},"aws-native:observabilityadmin:TelemetryRule":{"description":"The AWS::ObservabilityAdmin::TelemetryRule resource defines a CloudWatch Observability Admin Telemetry Rule.","properties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRule","description":"Retrieves the details of a specific telemetry rule in your account."},"ruleArn":{"type":"string","description":"The arn of the telemetry rule"},"ruleName":{"type":"string","description":"The name of the telemetry rule","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"type":"object","required":["rule","ruleArn","ruleName"],"inputProperties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRule","description":"Retrieves the details of a specific telemetry rule in your account."},"ruleName":{"type":"string","description":"The name of the telemetry rule"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource"}},"requiredInputs":["rule"]},"aws-native:odb:CloudAutonomousVmCluster":{"description":"The AWS::ODB::CloudAutonomousVmCluster resource creates a Cloud Autonomous VM Cluster","properties":{"autonomousDataStoragePercentage":{"type":"number","description":"The percentage of data storage currently in use for Autonomous Databases in the Autonomous VM cluster."},"autonomousDataStorageSizeInTbs":{"type":"number","description":"The data storage size allocated for Autonomous Databases in the Autonomous VM cluster, in TB.","replaceOnChanges":true},"availableAutonomousDataStorageSizeInTbs":{"type":"number","description":"The available data storage space for Autonomous Databases in the Autonomous VM cluster, in TB."},"availableContainerDatabases":{"type":"integer","description":"The number of Autonomous CDBs that you can create with the currently available storage."},"availableCpus":{"type":"number","description":"The number of CPU cores available for allocation to Autonomous Databases."},"cloudAutonomousVmClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Autonomous VM cluster."},"cloudAutonomousVmClusterId":{"type":"string","description":"The unique identifier of the Autonomous VM cluster."},"cloudExadataInfrastructureId":{"type":"string","description":"The unique identifier of the Cloud Exadata Infrastructure containing this Autonomous VM cluster.","replaceOnChanges":true},"computeModel":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterComputeModel","description":"The compute model of the Autonomous VM cluster: ECPU or OCPU."},"cpuCoreCount":{"type":"integer","description":"The total number of CPU cores in the Autonomous VM cluster."},"cpuCoreCountPerNode":{"type":"integer","description":"The number of CPU cores enabled per node in the Autonomous VM cluster.","replaceOnChanges":true},"cpuPercentage":{"type":"number","description":"The percentage of total CPU cores currently in use in the Autonomous VM cluster."},"dataStorageSizeInGbs":{"type":"number","description":"The total data storage allocated to the Autonomous VM cluster, in GB."},"dataStorageSizeInTbs":{"type":"number","description":"The total data storage allocated to the Autonomous VM cluster, in TB."},"dbNodeStorageSizeInGbs":{"type":"integer","description":"The local node storage allocated to the Autonomous VM cluster, in gigabytes (GB)."},"dbServers":{"type":"array","items":{"type":"string"},"description":"The list of database servers associated with the Autonomous VM cluster.","replaceOnChanges":true},"description":{"type":"string","description":"The user-provided description of the Autonomous VM cluster.","replaceOnChanges":true},"displayName":{"type":"string","description":"The display name of the Autonomous VM cluster.","replaceOnChanges":true},"domain":{"type":"string","description":"The domain name for the Autonomous VM cluster."},"exadataStorageInTbsLowestScaledValue":{"type":"number","description":"The minimum value to which you can scale down the Exadata storage, in TB."},"hostname":{"type":"string","description":"The hostname for the Autonomous VM cluster."},"iamRoles":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterIamRole"},"description":"The AWS Identity and Access Management (IAM) service roles associated with the Autonomous VM cluster."},"isMtlsEnabledVmCluster":{"type":"boolean","description":"Indicates whether mutual TLS (mTLS) authentication is enabled for the Autonomous VM cluster.","replaceOnChanges":true},"licenseModel":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterLicenseModel","description":"The Oracle license model that applies to the Autonomous VM cluster. Valid values are LICENSE_INCLUDED or BRING_YOUR_OWN_LICENSE.","replaceOnChanges":true},"maintenanceWindow":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterMaintenanceWindow","description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window.","replaceOnChanges":true},"maxAcdsLowestScaledValue":{"type":"integer","description":"The minimum value to which you can scale down the maximum number of Autonomous CDBs."},"memoryPerOracleComputeUnitInGbs":{"type":"integer","description":"The amount of memory allocated per Oracle Compute Unit, in GB.","replaceOnChanges":true},"memorySizeInGbs":{"type":"integer","description":"The total amount of memory allocated to the Autonomous VM cluster, in gigabytes (GB)."},"nodeCount":{"type":"integer","description":"The number of database server nodes in the Autonomous VM cluster."},"nonProvisionableAutonomousContainerDatabases":{"type":"integer","description":"The number of Autonomous CDBs that can't be provisioned because of resource constraints."},"ociResourceAnchorName":{"type":"string","description":"The name of the OCI resource anchor associated with this Autonomous VM cluster."},"ociUrl":{"type":"string","description":"The URL for accessing the OCI console page for this Autonomous VM cluster."},"ocid":{"type":"string","description":"The Oracle Cloud Identifier (OCID) of the Autonomous VM cluster."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network associated with this Autonomous VM cluster.","replaceOnChanges":true},"provisionableAutonomousContainerDatabases":{"type":"integer","description":"The number of Autonomous CDBs that can be provisioned in the Autonomous VM cluster."},"provisionedAutonomousContainerDatabases":{"type":"integer","description":"The number of Autonomous CDBs currently provisioned in the Autonomous VM cluster."},"provisionedCpus":{"type":"number","description":"The number of CPU cores currently provisioned in the Autonomous VM cluster."},"reclaimableCpus":{"type":"number","description":"The number of CPU cores that can be reclaimed from terminated or scaled-down Autonomous Databases."},"reservedCpus":{"type":"number","description":"The number of CPU cores reserved for system operations and redundancy."},"scanListenerPortNonTls":{"type":"integer","description":"The SCAN listener port for non-TLS (TCP) protocol. The default is 1521.","replaceOnChanges":true},"scanListenerPortTls":{"type":"integer","description":"The SCAN listener port for TLS (TCP) protocol. The default is 2484.","replaceOnChanges":true},"shape":{"type":"string","description":"The shape of the Exadata infrastructure for the Autonomous VM cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the Autonomous VM cluster."},"timeZone":{"type":"string","description":"The time zone of the Autonomous VM cluster.","replaceOnChanges":true},"totalContainerDatabases":{"type":"integer","description":"The total number of Autonomous Container Databases that can be created with the allocated local storage.","replaceOnChanges":true}},"type":"object","required":["autonomousDataStoragePercentage","availableAutonomousDataStorageSizeInTbs","availableContainerDatabases","availableCpus","cloudAutonomousVmClusterArn","cloudAutonomousVmClusterId","computeModel","cpuCoreCount","cpuPercentage","dataStorageSizeInGbs","dataStorageSizeInTbs","dbNodeStorageSizeInGbs","domain","exadataStorageInTbsLowestScaledValue","hostname","maxAcdsLowestScaledValue","memorySizeInGbs","nodeCount","nonProvisionableAutonomousContainerDatabases","ociResourceAnchorName","ociUrl","ocid","provisionableAutonomousContainerDatabases","provisionedAutonomousContainerDatabases","provisionedCpus","reclaimableCpus","reservedCpus","shape"],"inputProperties":{"autonomousDataStorageSizeInTbs":{"type":"number","description":"The data storage size allocated for Autonomous Databases in the Autonomous VM cluster, in TB."},"cloudExadataInfrastructureId":{"type":"string","description":"The unique identifier of the Cloud Exadata Infrastructure containing this Autonomous VM cluster."},"cpuCoreCountPerNode":{"type":"integer","description":"The number of CPU cores enabled per node in the Autonomous VM cluster."},"dbServers":{"type":"array","items":{"type":"string"},"description":"The list of database servers associated with the Autonomous VM cluster."},"description":{"type":"string","description":"The user-provided description of the Autonomous VM cluster."},"displayName":{"type":"string","description":"The display name of the Autonomous VM cluster."},"iamRoles":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterIamRole"},"description":"The AWS Identity and Access Management (IAM) service roles associated with the Autonomous VM cluster."},"isMtlsEnabledVmCluster":{"type":"boolean","description":"Indicates whether mutual TLS (mTLS) authentication is enabled for the Autonomous VM cluster."},"licenseModel":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterLicenseModel","description":"The Oracle license model that applies to the Autonomous VM cluster. Valid values are LICENSE_INCLUDED or BRING_YOUR_OWN_LICENSE."},"maintenanceWindow":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterMaintenanceWindow","description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window."},"memoryPerOracleComputeUnitInGbs":{"type":"integer","description":"The amount of memory allocated per Oracle Compute Unit, in GB."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network associated with this Autonomous VM cluster."},"scanListenerPortNonTls":{"type":"integer","description":"The SCAN listener port for non-TLS (TCP) protocol. The default is 1521."},"scanListenerPortTls":{"type":"integer","description":"The SCAN listener port for TLS (TCP) protocol. The default is 2484."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the Autonomous VM cluster."},"timeZone":{"type":"string","description":"The time zone of the Autonomous VM cluster."},"totalContainerDatabases":{"type":"integer","description":"The total number of Autonomous Container Databases that can be created with the allocated local storage."}}},"aws-native:odb:CloudExadataInfrastructure":{"description":"The AWS::ODB::CloudExadataInfrastructure resource creates an Exadata Infrastructure","properties":{"activatedStorageCount":{"type":"integer","description":"The number of storage servers requested for the Exadata infrastructure."},"additionalStorageCount":{"type":"integer","description":"The number of storage servers requested for the Exadata infrastructure."},"availabilityZone":{"type":"string","description":"The name of the Availability Zone (AZ) where the Exadata infrastructure is located.","replaceOnChanges":true},"availabilityZoneId":{"type":"string","description":"The AZ ID of the AZ where the Exadata infrastructure is located.","replaceOnChanges":true},"availableStorageSizeInGbs":{"type":"integer","description":"The amount of available storage, in gigabytes (GB), for the Exadata infrastructure."},"cloudExadataInfrastructureArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Exadata infrastructure."},"cloudExadataInfrastructureId":{"type":"string","description":"The unique identifier for the Exadata infrastructure."},"computeCount":{"type":"integer","description":"The number of database servers for the Exadata infrastructure.","replaceOnChanges":true},"computeModel":{"type":"string","description":"The OCI model compute model used when you create or clone an instance: ECPU or OCPU. An ECPU is an abstracted measure of compute resources. ECPUs are based on the number of cores elastically allocated from a pool of compute and storage servers. An OCPU is a legacy physical measure of compute resources. OCPUs are based on the physical core of a processor with hyper-threading enabled."},"cpuCount":{"type":"integer","description":"The total number of CPU cores that are allocated to the Exadata infrastructure."},"customerContactsToSendToOci":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureCustomerContact"},"description":"The email addresses of contacts to receive notification from Oracle about maintenance updates for the Exadata infrastructure.","replaceOnChanges":true},"dataStorageSizeInTbs":{"type":"number","description":"The size of the Exadata infrastructure's data disk group, in terabytes (TB)."},"databaseServerType":{"type":"string","description":"The database server model type of the Exadata infrastructure. For the list of valid model names, use the ListDbSystemShapes operation.","replaceOnChanges":true},"dbNodeStorageSizeInGbs":{"type":"integer","description":"The size of the Exadata infrastructure's local node storage, in gigabytes (GB)."},"dbServerIds":{"type":"array","items":{"type":"string"},"description":"The list of database server identifiers for the Exadata infrastructure."},"dbServerVersion":{"type":"string","description":"The software version of the database servers (dom0) in the Exadata infrastructure."},"displayName":{"type":"string","description":"The user-friendly name for the Exadata infrastructure.","replaceOnChanges":true},"maintenanceWindow":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureMaintenanceWindow","description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window."},"maxCpuCount":{"type":"integer","description":"The total number of CPU cores available on the Exadata infrastructure."},"maxDataStorageInTbs":{"type":"number","description":"The total amount of data disk group storage, in terabytes (TB), that's available on the Exadata infrastructure."},"maxDbNodeStorageSizeInGbs":{"type":"integer","description":"The total amount of local node storage, in gigabytes (GB), that's available on the Exadata infrastructure."},"maxMemoryInGbs":{"type":"integer","description":"The total amount of memory, in gigabytes (GB), that's available on the Exadata infrastructure."},"memorySizeInGbs":{"type":"integer","description":"The amount of memory, in gigabytes (GB), that's allocated on the Exadata infrastructure."},"ociResourceAnchorName":{"type":"string","description":"The name of the OCI resource anchor for the Exadata infrastructure."},"ociUrl":{"type":"string","description":"The HTTPS link to the Exadata infrastructure in OCI."},"ocid":{"type":"string","description":"The OCID of the Exadata infrastructure."},"shape":{"type":"string","description":"The model name of the Exadata infrastructure.","replaceOnChanges":true},"storageCount":{"type":"integer","description":"The number of storage servers that are activated for the Exadata infrastructure.","replaceOnChanges":true},"storageServerType":{"type":"string","description":"The storage server model type of the Exadata infrastructure. For the list of valid model names, use the ListDbSystemShapes operation.","replaceOnChanges":true},"storageServerVersion":{"type":"string","description":"The software version of the storage servers on the Exadata infrastructure."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Exadata Infrastructure."},"totalStorageSizeInGbs":{"type":"integer","description":"The total amount of storage, in gigabytes (GB), on the the Exadata infrastructure."}},"type":"object","required":["activatedStorageCount","additionalStorageCount","availableStorageSizeInGbs","cloudExadataInfrastructureArn","cloudExadataInfrastructureId","computeModel","cpuCount","dataStorageSizeInTbs","dbNodeStorageSizeInGbs","dbServerIds","dbServerVersion","maxCpuCount","maxDataStorageInTbs","maxDbNodeStorageSizeInGbs","maxMemoryInGbs","memorySizeInGbs","ociResourceAnchorName","ociUrl","ocid","storageServerVersion","totalStorageSizeInGbs"],"inputProperties":{"availabilityZone":{"type":"string","description":"The name of the Availability Zone (AZ) where the Exadata infrastructure is located."},"availabilityZoneId":{"type":"string","description":"The AZ ID of the AZ where the Exadata infrastructure is located."},"computeCount":{"type":"integer","description":"The number of database servers for the Exadata infrastructure."},"customerContactsToSendToOci":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureCustomerContact"},"description":"The email addresses of contacts to receive notification from Oracle about maintenance updates for the Exadata infrastructure."},"databaseServerType":{"type":"string","description":"The database server model type of the Exadata infrastructure. For the list of valid model names, use the ListDbSystemShapes operation."},"displayName":{"type":"string","description":"The user-friendly name for the Exadata infrastructure."},"maintenanceWindow":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureMaintenanceWindow","description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window."},"shape":{"type":"string","description":"The model name of the Exadata infrastructure."},"storageCount":{"type":"integer","description":"The number of storage servers that are activated for the Exadata infrastructure."},"storageServerType":{"type":"string","description":"The storage server model type of the Exadata infrastructure. For the list of valid model names, use the ListDbSystemShapes operation."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Exadata Infrastructure."}}},"aws-native:odb:CloudVmCluster":{"description":"The AWS::ODB::CloudVmCluster resource creates a Cloud VM Cluster","properties":{"cloudExadataInfrastructureId":{"type":"string","description":"The unique identifier of the Exadata infrastructure that this VM cluster belongs to.","replaceOnChanges":true},"cloudVmClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VM cluster."},"cloudVmClusterId":{"type":"string","description":"The unique identifier of the VM cluster."},"clusterName":{"type":"string","description":"The name of the Grid Infrastructure (GI) cluster.","replaceOnChanges":true},"computeModel":{"type":"string","description":"The OCI model compute model used when you create or clone an instance: ECPU or OCPU. An ECPU is an abstracted measure of compute resources. ECPUs are based on the number of cores elastically allocated from a pool of compute and storage servers. An OCPU is a legacy physical measure of compute resources. OCPUs are based on the physical core of a processor with hyper-threading enabled."},"cpuCoreCount":{"type":"integer","description":"The number of CPU cores enabled on the VM cluster.","replaceOnChanges":true},"dataCollectionOptions":{"$ref":"#/types/aws-native:odb:CloudVmClusterDataCollectionOptions","description":"The set of diagnostic collection options enabled for the VM cluster.","replaceOnChanges":true},"dataStorageSizeInTbs":{"type":"number","description":"The size of the data disk group, in terabytes (TB), that's allocated for the VM cluster.","replaceOnChanges":true},"dbNodeStorageSizeInGbs":{"type":"integer","description":"The amount of local node storage, in gigabytes (GB), that's allocated for the VM cluster.","replaceOnChanges":true},"dbNodes":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterDbNode"},"description":"The DB nodes that are implicitly created and managed as part of this VM Cluster."},"dbServers":{"type":"array","items":{"type":"string"},"description":"The list of database servers for the VM cluster.","replaceOnChanges":true},"diskRedundancy":{"type":"string","description":"The type of redundancy configured for the VM cluster. NORMAL is 2-way redundancy. HIGH is 3-way redundancy."},"displayName":{"type":"string","description":"The user-friendly name for the VM cluster.","replaceOnChanges":true},"domain":{"type":"string","description":"The domain of the VM cluster."},"giVersion":{"type":"string","description":"The software version of the Oracle Grid Infrastructure (GI) for the VM cluster.","replaceOnChanges":true},"hostname":{"type":"string","description":"The host name for the VM cluster.","replaceOnChanges":true},"iamRoles":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterIamRole"},"description":"The AWS Identity and Access Management (IAM) service roles associated with the VM cluster."},"isLocalBackupEnabled":{"type":"boolean","description":"Indicates whether database backups to local Exadata storage is enabled for the VM cluster.","replaceOnChanges":true},"isSparseDiskgroupEnabled":{"type":"boolean","description":"Indicates whether the VM cluster is configured with a sparse disk group.","replaceOnChanges":true},"licenseModel":{"$ref":"#/types/aws-native:odb:CloudVmClusterLicenseModel","description":"The Oracle license model applied to the VM cluster.","replaceOnChanges":true},"listenerPort":{"type":"integer","description":"The port number configured for the listener on the VM cluster."},"memorySizeInGbs":{"type":"integer","description":"The amount of memory, in gigabytes (GB), that's allocated for the VM cluster.","replaceOnChanges":true},"nodeCount":{"type":"integer","description":"The number of nodes in the VM cluster."},"ociResourceAnchorName":{"type":"string","description":"The name of the OCI resource anchor for the VM cluster."},"ociUrl":{"type":"string","description":"The HTTPS link to the VM cluster in OCI."},"ocid":{"type":"string","description":"The OCID of the VM cluster."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network for the VM cluster.","replaceOnChanges":true},"scanDnsName":{"type":"string","description":"The FQDN of the DNS record for the Single Client Access Name (SCAN) IP addresses that are associated with the VM cluster."},"scanIpIds":{"type":"array","items":{"type":"string"},"description":"The OCID of the SCAN IP addresses that are associated with the VM cluster."},"scanListenerPortTcp":{"type":"integer","description":"Property description not available.","replaceOnChanges":true},"shape":{"type":"string","description":"The hardware model name of the Exadata infrastructure that's running the VM cluster."},"sshPublicKeys":{"type":"array","items":{"type":"string"},"description":"The public key portion of one or more key pairs used for SSH access to the VM cluster.","replaceOnChanges":true},"storageSizeInGbs":{"type":"integer","description":"The amount of local node storage, in gigabytes (GB), that's allocated to the VM cluster."},"systemVersion":{"type":"string","description":"The operating system version of the image chosen for the VM cluster.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Vm Cluster."},"timeZone":{"type":"string","description":"The time zone of the VM cluster.","replaceOnChanges":true},"vipIds":{"type":"array","items":{"type":"string"},"description":"The virtual IP (VIP) addresses that are associated with the VM cluster. Oracle's Cluster Ready Services (CRS) creates and maintains one VIP address for each node in the VM cluster to enable failover. If one node fails, the VIP is reassigned to another active node in the cluster."}},"type":"object","required":["cloudVmClusterArn","cloudVmClusterId","computeModel","diskRedundancy","domain","listenerPort","nodeCount","ociResourceAnchorName","ociUrl","ocid","scanDnsName","scanIpIds","shape","storageSizeInGbs","vipIds"],"inputProperties":{"cloudExadataInfrastructureId":{"type":"string","description":"The unique identifier of the Exadata infrastructure that this VM cluster belongs to."},"clusterName":{"type":"string","description":"The name of the Grid Infrastructure (GI) cluster."},"cpuCoreCount":{"type":"integer","description":"The number of CPU cores enabled on the VM cluster."},"dataCollectionOptions":{"$ref":"#/types/aws-native:odb:CloudVmClusterDataCollectionOptions","description":"The set of diagnostic collection options enabled for the VM cluster."},"dataStorageSizeInTbs":{"type":"number","description":"The size of the data disk group, in terabytes (TB), that's allocated for the VM cluster."},"dbNodeStorageSizeInGbs":{"type":"integer","description":"The amount of local node storage, in gigabytes (GB), that's allocated for the VM cluster."},"dbNodes":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterDbNode"},"description":"The DB nodes that are implicitly created and managed as part of this VM Cluster."},"dbServers":{"type":"array","items":{"type":"string"},"description":"The list of database servers for the VM cluster."},"displayName":{"type":"string","description":"The user-friendly name for the VM cluster."},"giVersion":{"type":"string","description":"The software version of the Oracle Grid Infrastructure (GI) for the VM cluster."},"hostname":{"type":"string","description":"The host name for the VM cluster."},"iamRoles":{"type":"array","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterIamRole"},"description":"The AWS Identity and Access Management (IAM) service roles associated with the VM cluster."},"isLocalBackupEnabled":{"type":"boolean","description":"Indicates whether database backups to local Exadata storage is enabled for the VM cluster."},"isSparseDiskgroupEnabled":{"type":"boolean","description":"Indicates whether the VM cluster is configured with a sparse disk group."},"licenseModel":{"$ref":"#/types/aws-native:odb:CloudVmClusterLicenseModel","description":"The Oracle license model applied to the VM cluster."},"memorySizeInGbs":{"type":"integer","description":"The amount of memory, in gigabytes (GB), that's allocated for the VM cluster."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network for the VM cluster."},"scanListenerPortTcp":{"type":"integer","description":"Property description not available."},"sshPublicKeys":{"type":"array","items":{"type":"string"},"description":"The public key portion of one or more key pairs used for SSH access to the VM cluster."},"systemVersion":{"type":"string","description":"The operating system version of the image chosen for the VM cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Vm Cluster."},"timeZone":{"type":"string","description":"The time zone of the VM cluster."}}},"aws-native:odb:OdbNetwork":{"description":"The AWS::ODB::OdbNetwork resource creates an ODB Network","properties":{"availabilityZone":{"type":"string","description":"The AWS Availability Zone (AZ) where the ODB network is located.","replaceOnChanges":true},"availabilityZoneId":{"type":"string","description":"The AZ ID of the AZ where the ODB network is located.","replaceOnChanges":true},"backupSubnetCidr":{"type":"string","description":"The CIDR range of the backup subnet in the ODB network.","replaceOnChanges":true},"clientSubnetCidr":{"type":"string","description":"The CIDR range of the client subnet in the ODB network.","replaceOnChanges":true},"crossRegionS3RestoreSources":{"type":"array","items":{"type":"string"},"description":"The cross-Region Amazon S3 restore sources for the ODB network."},"customDomainName":{"type":"string","description":"The domain name to use for the resources in the ODB network.","replaceOnChanges":true},"defaultDnsPrefix":{"type":"string","description":"The DNS prefix to the default DNS domain name. The default DNS domain name is oraclevcn.com.","replaceOnChanges":true},"deleteAssociatedResources":{"type":"boolean","description":"Specifies whether to delete associated OCI networking resources along with the ODB network."},"displayName":{"type":"string","description":"The user-friendly name of the ODB network."},"kmsAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkKmsAccess","description":"The AWS Key Management Service (KMS) access configuration for the ODB network."},"kmsPolicyDocument":{"type":"string","description":"The AWS Key Management Service (KMS) policy document that defines permissions for key usage within the ODB network."},"managedServices":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServices"},"ociNetworkAnchorId":{"type":"string","description":"The unique identifier of the OCI network anchor for the ODB network."},"ociResourceAnchorName":{"type":"string","description":"The name of the OCI resource anchor that's associated with the ODB network."},"ociVcnUrl":{"type":"string","description":"The URL for the VCN that's associated with the ODB network."},"odbNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ODB network."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network."},"s3Access":{"$ref":"#/types/aws-native:odb:OdbNetworkS3Access","description":"Specifies the configuration for Amazon S3 access from the ODB network."},"s3PolicyDocument":{"type":"string","description":"Specifies the endpoint policy for Amazon S3 access from the ODB network."},"stsAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkStsAccess","description":"The AWS Security Token Service (STS) access configuration for the ODB network."},"stsPolicyDocument":{"type":"string","description":"The AWS Security Token Service (STS) policy document that defines permissions for token service usage within the ODB network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Odb Network."},"zeroEtlAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkZeroEtlAccess","description":"Specifies the configuration for Zero-ETL access from the ODB network."}},"type":"object","required":["managedServices","ociNetworkAnchorId","ociResourceAnchorName","ociVcnUrl","odbNetworkArn","odbNetworkId"],"inputProperties":{"availabilityZone":{"type":"string","description":"The AWS Availability Zone (AZ) where the ODB network is located."},"availabilityZoneId":{"type":"string","description":"The AZ ID of the AZ where the ODB network is located."},"backupSubnetCidr":{"type":"string","description":"The CIDR range of the backup subnet in the ODB network."},"clientSubnetCidr":{"type":"string","description":"The CIDR range of the client subnet in the ODB network."},"crossRegionS3RestoreSources":{"type":"array","items":{"type":"string"},"description":"The cross-Region Amazon S3 restore sources for the ODB network."},"customDomainName":{"type":"string","description":"The domain name to use for the resources in the ODB network."},"defaultDnsPrefix":{"type":"string","description":"The DNS prefix to the default DNS domain name. The default DNS domain name is oraclevcn.com."},"deleteAssociatedResources":{"type":"boolean","description":"Specifies whether to delete associated OCI networking resources along with the ODB network."},"displayName":{"type":"string","description":"The user-friendly name of the ODB network."},"kmsAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkKmsAccess","description":"The AWS Key Management Service (KMS) access configuration for the ODB network."},"kmsPolicyDocument":{"type":"string","description":"The AWS Key Management Service (KMS) policy document that defines permissions for key usage within the ODB network."},"s3Access":{"$ref":"#/types/aws-native:odb:OdbNetworkS3Access","description":"Specifies the configuration for Amazon S3 access from the ODB network."},"s3PolicyDocument":{"type":"string","description":"Specifies the endpoint policy for Amazon S3 access from the ODB network."},"stsAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkStsAccess","description":"The AWS Security Token Service (STS) access configuration for the ODB network."},"stsPolicyDocument":{"type":"string","description":"The AWS Security Token Service (STS) policy document that defines permissions for token service usage within the ODB network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Odb Network."},"zeroEtlAccess":{"$ref":"#/types/aws-native:odb:OdbNetworkZeroEtlAccess","description":"Specifies the configuration for Zero-ETL access from the ODB network."}}},"aws-native:odb:OdbPeeringConnection":{"description":"Resource Type definition for AWS::ODB::OdbPeeringConnection.","properties":{"additionalPeerNetworkCidrs":{"type":"array","items":{"type":"string"},"description":"The additional CIDR blocks for the ODB peering connection."},"displayName":{"type":"string","description":"The name of the ODB peering connection."},"odbNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ODB network."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network.","replaceOnChanges":true},"odbPeeringConnectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ODB peering connection."},"odbPeeringConnectionId":{"type":"string","description":"The unique identifier of the ODB peering connection."},"peerNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the peer network."},"peerNetworkCidrs":{"type":"array","items":{"type":"string"},"description":"The CIDR blocks for the ODB peering connection."},"peerNetworkId":{"type":"string","description":"The unique identifier of the peer network.","replaceOnChanges":true},"peerNetworkRouteTableIds":{"type":"array","items":{"type":"string"},"description":"The unique identifier of the VPC route table for which a route to the ODB network is automatically created during peering connection establishment.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Odb peering connection."}},"type":"object","required":["odbNetworkArn","odbPeeringConnectionArn","odbPeeringConnectionId","peerNetworkArn","peerNetworkCidrs"],"inputProperties":{"additionalPeerNetworkCidrs":{"type":"array","items":{"type":"string"},"description":"The additional CIDR blocks for the ODB peering connection."},"displayName":{"type":"string","description":"The name of the ODB peering connection."},"odbNetworkId":{"type":"string","description":"The unique identifier of the ODB network."},"peerNetworkId":{"type":"string","description":"The unique identifier of the peer network."},"peerNetworkRouteTableIds":{"type":"array","items":{"type":"string"},"description":"The unique identifier of the VPC route table for which a route to the ODB network is automatically created during peering connection establishment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the Odb peering connection."}}},"aws-native:omics:AnnotationStore":{"description":"Definition of AWS::Omics::AnnotationStore Resource Type","properties":{"awsId":{"type":"string","description":"The store's ID."},"creationTime":{"type":"string","description":"When the store was created."},"description":{"type":"string","description":"A description for the store."},"name":{"type":"string","description":"The name of the Annotation Store.","replaceOnChanges":true},"reference":{"$ref":"#/types/aws-native:omics:AnnotationStoreReferenceItem","description":"The genome reference for the store's annotations.","replaceOnChanges":true},"sseConfig":{"$ref":"#/types/aws-native:omics:AnnotationStoreSseConfig","description":"The store's server-side encryption (SSE) settings.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:omics:AnnotationStoreStoreStatus","description":"The store's status."},"statusMessage":{"type":"string","description":"The store's status message."},"storeArn":{"type":"string","description":"The store's ARN."},"storeFormat":{"$ref":"#/types/aws-native:omics:AnnotationStoreStoreFormat","description":"The annotation file format of the store.","replaceOnChanges":true},"storeOptions":{"$ref":"#/types/aws-native:omics:AnnotationStoreStoreOptionsProperties","description":"File parsing options for the annotation store.","replaceOnChanges":true},"storeSizeBytes":{"type":"number","description":"The store's size in bytes."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store.","replaceOnChanges":true},"updateTime":{"type":"string","description":"When the store was updated."}},"type":"object","required":["awsId","creationTime","name","status","statusMessage","storeArn","storeFormat","storeSizeBytes","updateTime"],"inputProperties":{"description":{"type":"string","description":"A description for the store."},"name":{"type":"string","description":"The name of the Annotation Store."},"reference":{"$ref":"#/types/aws-native:omics:AnnotationStoreReferenceItem","description":"The genome reference for the store's annotations."},"sseConfig":{"$ref":"#/types/aws-native:omics:AnnotationStoreSseConfig","description":"The store's server-side encryption (SSE) settings."},"storeFormat":{"$ref":"#/types/aws-native:omics:AnnotationStoreStoreFormat","description":"The annotation file format of the store."},"storeOptions":{"$ref":"#/types/aws-native:omics:AnnotationStoreStoreOptionsProperties","description":"File parsing options for the annotation store."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store."}},"requiredInputs":["storeFormat"]},"aws-native:omics:ReferenceStore":{"description":"Definition of AWS::Omics::ReferenceStore Resource Type","properties":{"arn":{"type":"string","description":"The store's ARN."},"creationTime":{"type":"string","description":"When the store was created."},"description":{"type":"string","description":"A description for the store.","replaceOnChanges":true},"name":{"type":"string","description":"A name for the store.","replaceOnChanges":true},"referenceStoreId":{"type":"string","description":"The store's ID."},"sseConfig":{"$ref":"#/types/aws-native:omics:ReferenceStoreSseConfig","description":"Server-side encryption (SSE) settings for the store.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store.","replaceOnChanges":true}},"type":"object","required":["arn","creationTime","name","referenceStoreId"],"inputProperties":{"description":{"type":"string","description":"A description for the store."},"name":{"type":"string","description":"A name for the store."},"sseConfig":{"$ref":"#/types/aws-native:omics:ReferenceStoreSseConfig","description":"Server-side encryption (SSE) settings for the store."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store."}}},"aws-native:omics:RunGroup":{"description":"Definition of AWS::Omics::RunGroup Resource Type","properties":{"arn":{"type":"string","description":"The run group's ARN."},"awsId":{"type":"string","description":"The run group's ID."},"creationTime":{"type":"string","description":"When the run group was created."},"maxCpus":{"type":"number","description":"The group's maximum CPU count setting."},"maxDuration":{"type":"number","description":"The group's maximum duration setting in minutes."},"maxGpus":{"type":"number","description":"The maximum GPUs that can be used by a run group."},"maxRuns":{"type":"number","description":"The group's maximum concurrent run setting."},"name":{"type":"string","description":"The group's name."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the group."}},"type":"object","required":["arn","awsId","creationTime"],"inputProperties":{"maxCpus":{"type":"number","description":"The group's maximum CPU count setting."},"maxDuration":{"type":"number","description":"The group's maximum duration setting in minutes."},"maxGpus":{"type":"number","description":"The maximum GPUs that can be used by a run group."},"maxRuns":{"type":"number","description":"The group's maximum concurrent run setting."},"name":{"type":"string","description":"The group's name."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the group."}}},"aws-native:omics:SequenceStore":{"description":"Resource Type definition for AWS::Omics::SequenceStore","properties":{"accessLogLocation":{"type":"string","description":"Location of the access logs."},"arn":{"type":"string","description":"The store's ARN."},"creationTime":{"type":"string","description":"When the store was created."},"description":{"type":"string","description":"A description for the store."},"eTagAlgorithmFamily":{"$ref":"#/types/aws-native:omics:SequenceStoreETagAlgorithmFamily","description":"The algorithm family of the ETag.","replaceOnChanges":true},"fallbackLocation":{"type":"string","description":"An S3 location that is used to store files that have failed a direct upload."},"name":{"type":"string","description":"A name for the store."},"propagatedSetLevelTags":{"type":"array","items":{"type":"string"},"description":"The tags keys to propagate to the S3 objects associated with read sets in the sequence store."},"s3AccessPointArn":{"type":"string","description":"This is ARN of the access point associated with the S3 bucket storing read sets."},"s3AccessPolicy":{"$ref":"pulumi.json#/Any","description":"The resource policy that controls S3 access on the store\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Omics::SequenceStore` for more information about the expected schema for this property."},"s3Uri":{"type":"string","description":"The S3 URI of the sequence store."},"sequenceStoreId":{"type":"string","description":"The store's ID."},"sseConfig":{"$ref":"#/types/aws-native:omics:SequenceStoreSseConfig","description":"Server-side encryption (SSE) settings for the store.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:omics:SequenceStoreStatus","description":"Status of the sequence store."},"statusMessage":{"type":"string","description":"The status message of the sequence store."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store."},"updateTime":{"type":"string","description":"The last-updated time of the sequence store."}},"type":"object","required":["arn","creationTime","name","s3AccessPointArn","s3Uri","sequenceStoreId","status","statusMessage","updateTime"],"inputProperties":{"accessLogLocation":{"type":"string","description":"Location of the access logs."},"description":{"type":"string","description":"A description for the store."},"eTagAlgorithmFamily":{"$ref":"#/types/aws-native:omics:SequenceStoreETagAlgorithmFamily","description":"The algorithm family of the ETag."},"fallbackLocation":{"type":"string","description":"An S3 location that is used to store files that have failed a direct upload."},"name":{"type":"string","description":"A name for the store."},"propagatedSetLevelTags":{"type":"array","items":{"type":"string"},"description":"The tags keys to propagate to the S3 objects associated with read sets in the sequence store."},"s3AccessPolicy":{"$ref":"pulumi.json#/Any","description":"The resource policy that controls S3 access on the store\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Omics::SequenceStore` for more information about the expected schema for this property."},"sseConfig":{"$ref":"#/types/aws-native:omics:SequenceStoreSseConfig","description":"Server-side encryption (SSE) settings for the store."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store."}}},"aws-native:omics:VariantStore":{"description":"Definition of AWS::Omics::VariantStore Resource Type","properties":{"awsId":{"type":"string","description":"The store's ID."},"creationTime":{"type":"string","description":"When the store was created."},"description":{"type":"string","description":"A description for the store."},"name":{"type":"string","description":"A name for the store.","replaceOnChanges":true},"reference":{"$ref":"#/types/aws-native:omics:VariantStoreReferenceItem","description":"The genome reference for the store's variants.","replaceOnChanges":true},"sseConfig":{"$ref":"#/types/aws-native:omics:VariantStoreSseConfig","description":"Server-side encryption (SSE) settings for the store.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:omics:VariantStoreStoreStatus","description":"The store's status."},"statusMessage":{"type":"string","description":"The store's status message."},"storeArn":{"type":"string","description":"The store's ARN."},"storeSizeBytes":{"type":"number","description":"The store's size in bytes."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store.","replaceOnChanges":true},"updateTime":{"type":"string","description":"When the store was updated."}},"type":"object","required":["awsId","creationTime","name","reference","status","statusMessage","storeArn","storeSizeBytes","updateTime"],"inputProperties":{"description":{"type":"string","description":"A description for the store."},"name":{"type":"string","description":"A name for the store."},"reference":{"$ref":"#/types/aws-native:omics:VariantStoreReferenceItem","description":"The genome reference for the store's variants."},"sseConfig":{"$ref":"#/types/aws-native:omics:VariantStoreSseConfig","description":"Server-side encryption (SSE) settings for the store."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the store."}},"requiredInputs":["reference"]},"aws-native:omics:Workflow":{"description":"Definition of AWS::Omics::Workflow Resource Type","properties":{"accelerators":{"$ref":"#/types/aws-native:omics:WorkflowAccelerators","replaceOnChanges":true},"arn":{"type":"string","description":"The ARN for the workflow."},"awsId":{"type":"string","description":"The workflow's ID."},"containerRegistryMap":{"$ref":"#/types/aws-native:omics:WorkflowContainerRegistryMap","description":"Use a container registry map to specify mappings between the ECR private repository and one or more upstream registries. For more information, see [Container images](https://docs.aws.amazon.com/omics/latest/dev/workflows-ecr.html) in the *AWS HealthOmics User Guide* .","replaceOnChanges":true},"containerRegistryMapUri":{"type":"string","replaceOnChanges":true},"creationTime":{"type":"string","description":"When the workflow was created."},"definitionRepository":{"$ref":"#/types/aws-native:omics:WorkflowDefinitionRepository","description":"Contains information about a source code repository that hosts the workflow definition files.","replaceOnChanges":true},"definitionUri":{"type":"string","description":"The URI of a definition for the workflow.","replaceOnChanges":true},"description":{"type":"string","description":"The parameter's description."},"engine":{"$ref":"#/types/aws-native:omics:WorkflowEngine","description":"An engine for the workflow.","replaceOnChanges":true},"main":{"type":"string","description":"The path of the main definition file for the workflow.","replaceOnChanges":true},"name":{"type":"string","description":"The workflow's name."},"parameterTemplate":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:omics:WorkflowParameter"},"description":"The workflow's parameter template.","replaceOnChanges":true},"parameterTemplatePath":{"type":"string","description":"Path to the primary workflow parameter template JSON file inside the repository","replaceOnChanges":true},"readmeMarkdown":{"type":"string","description":"The markdown content for the workflow's README file. This provides documentation and usage information for users of the workflow."},"readmePath":{"type":"string","description":"The path to the workflow README markdown file within the repository. This file provides documentation and usage information for the workflow. If not specified, the README.md file from the root directory of the repository will be used.","replaceOnChanges":true},"readmeUri":{"type":"string","description":"The S3 URI of the README file for the workflow. This file provides documentation and usage information for the workflow. The S3 URI must begin with s3://USER-OWNED-BUCKET/. The requester must have access to the S3 bucket and object. The max README content length is 500 KiB.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:omics:WorkflowStatus","description":"The workflow's status."},"storageCapacity":{"type":"number","description":"The default static storage capacity (in gibibytes) for runs that use this workflow or workflow version. The `storageCapacity` can be overwritten at run time. The storage capacity is not required for runs with a `DYNAMIC` storage type.","replaceOnChanges":true},"storageType":{"$ref":"#/types/aws-native:omics:WorkflowStorageType"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the workflow."},"type":{"$ref":"#/types/aws-native:omics:WorkflowType","description":"The workflow's type."},"uuid":{"type":"string"},"workflowBucketOwnerId":{"type":"string","description":"Optional workflow bucket owner ID to verify the workflow bucket","replaceOnChanges":true}},"type":"object","required":["arn","awsId","creationTime","status","type","uuid"],"inputProperties":{"accelerators":{"$ref":"#/types/aws-native:omics:WorkflowAccelerators"},"containerRegistryMap":{"$ref":"#/types/aws-native:omics:WorkflowContainerRegistryMap","description":"Use a container registry map to specify mappings between the ECR private repository and one or more upstream registries. For more information, see [Container images](https://docs.aws.amazon.com/omics/latest/dev/workflows-ecr.html) in the *AWS HealthOmics User Guide* ."},"containerRegistryMapUri":{"type":"string"},"definitionRepository":{"$ref":"#/types/aws-native:omics:WorkflowDefinitionRepository","description":"Contains information about a source code repository that hosts the workflow definition files."},"definitionUri":{"type":"string","description":"The URI of a definition for the workflow."},"description":{"type":"string","description":"The parameter's description."},"engine":{"$ref":"#/types/aws-native:omics:WorkflowEngine","description":"An engine for the workflow."},"main":{"type":"string","description":"The path of the main definition file for the workflow."},"name":{"type":"string","description":"The workflow's name."},"parameterTemplate":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:omics:WorkflowParameter"},"description":"The workflow's parameter template."},"parameterTemplatePath":{"type":"string","description":"Path to the primary workflow parameter template JSON file inside the repository"},"readmeMarkdown":{"type":"string","description":"The markdown content for the workflow's README file. This provides documentation and usage information for users of the workflow."},"readmePath":{"type":"string","description":"The path to the workflow README markdown file within the repository. This file provides documentation and usage information for the workflow. If not specified, the README.md file from the root directory of the repository will be used."},"readmeUri":{"type":"string","description":"The S3 URI of the README file for the workflow. This file provides documentation and usage information for the workflow. The S3 URI must begin with s3://USER-OWNED-BUCKET/. The requester must have access to the S3 bucket and object. The max README content length is 500 KiB."},"storageCapacity":{"type":"number","description":"The default static storage capacity (in gibibytes) for runs that use this workflow or workflow version. The `storageCapacity` can be overwritten at run time. The storage capacity is not required for runs with a `DYNAMIC` storage type."},"storageType":{"$ref":"#/types/aws-native:omics:WorkflowStorageType"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags for the workflow."},"workflowBucketOwnerId":{"type":"string","description":"Optional workflow bucket owner ID to verify the workflow bucket"}}},"aws-native:omics:WorkflowVersion":{"description":"Definition of AWS::Omics::WorkflowVersion Resource Type.","properties":{"accelerators":{"$ref":"#/types/aws-native:omics:WorkflowVersionAccelerators","replaceOnChanges":true},"arn":{"type":"string","description":"ARN of the workflow version."},"containerRegistryMap":{"$ref":"#/types/aws-native:omics:WorkflowVersionContainerRegistryMap","description":"Use a container registry map to specify mappings between the ECR private repository and one or more upstream registries. For more information, see [Container images](https://docs.aws.amazon.com/omics/latest/dev/workflows-ecr.html) in the *AWS HealthOmics User Guide* .","replaceOnChanges":true},"containerRegistryMapUri":{"type":"string","replaceOnChanges":true},"creationTime":{"type":"string","description":"The creation time of the workflow version."},"definitionRepository":{"$ref":"#/types/aws-native:omics:WorkflowVersionDefinitionRepository","description":"Contains information about a source code repository that hosts the workflow definition files.","replaceOnChanges":true},"definitionUri":{"type":"string","replaceOnChanges":true},"description":{"type":"string","description":"The description of the workflow version."},"engine":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowEngine","replaceOnChanges":true},"main":{"type":"string","replaceOnChanges":true},"parameterTemplate":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowParameter"},"replaceOnChanges":true},"parameterTemplatePath":{"type":"string","description":"Path to the primary workflow parameter template JSON file inside the repository","replaceOnChanges":true},"readmeMarkdown":{"type":"string","description":"The markdown content for the workflow's README file. This provides documentation and usage information for users of the workflow."},"readmePath":{"type":"string","description":"The path to the workflow README markdown file within the repository. This file provides documentation and usage information for the workflow. If not specified, the README.md file from the root directory of the repository will be used.","replaceOnChanges":true},"readmeUri":{"type":"string","description":"The S3 URI of the README file for the workflow. This file provides documentation and usage information for the workflow. The S3 URI must begin with s3://USER-OWNED-BUCKET/. The requester must have access to the S3 bucket and object. The max README content length is 500 KiB.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowStatus","description":"The status of the workflow version."},"storageCapacity":{"type":"number"},"storageType":{"$ref":"#/types/aws-native:omics:WorkflowVersionStorageType"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"type":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowType","description":"The type of the workflow version."},"uuid":{"type":"string"},"versionName":{"type":"string","description":"The name of the workflow version.","replaceOnChanges":true},"workflowBucketOwnerId":{"type":"string","replaceOnChanges":true},"workflowId":{"type":"string","description":"The workflow's ID.","replaceOnChanges":true}},"type":"object","required":["arn","creationTime","status","type","uuid","versionName","workflowId"],"inputProperties":{"accelerators":{"$ref":"#/types/aws-native:omics:WorkflowVersionAccelerators"},"containerRegistryMap":{"$ref":"#/types/aws-native:omics:WorkflowVersionContainerRegistryMap","description":"Use a container registry map to specify mappings between the ECR private repository and one or more upstream registries. For more information, see [Container images](https://docs.aws.amazon.com/omics/latest/dev/workflows-ecr.html) in the *AWS HealthOmics User Guide* ."},"containerRegistryMapUri":{"type":"string"},"definitionRepository":{"$ref":"#/types/aws-native:omics:WorkflowVersionDefinitionRepository","description":"Contains information about a source code repository that hosts the workflow definition files."},"definitionUri":{"type":"string"},"description":{"type":"string","description":"The description of the workflow version."},"engine":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowEngine"},"main":{"type":"string"},"parameterTemplate":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowParameter"}},"parameterTemplatePath":{"type":"string","description":"Path to the primary workflow parameter template JSON file inside the repository"},"readmeMarkdown":{"type":"string","description":"The markdown content for the workflow's README file. This provides documentation and usage information for users of the workflow."},"readmePath":{"type":"string","description":"The path to the workflow README markdown file within the repository. This file provides documentation and usage information for the workflow. If not specified, the README.md file from the root directory of the repository will be used."},"readmeUri":{"type":"string","description":"The S3 URI of the README file for the workflow. This file provides documentation and usage information for the workflow. The S3 URI must begin with s3://USER-OWNED-BUCKET/. The requester must have access to the S3 bucket and object. The max README content length is 500 KiB."},"storageCapacity":{"type":"number"},"storageType":{"$ref":"#/types/aws-native:omics:WorkflowVersionStorageType"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"versionName":{"type":"string","description":"The name of the workflow version."},"workflowBucketOwnerId":{"type":"string"},"workflowId":{"type":"string","description":"The workflow's ID."}},"requiredInputs":["workflowId"]},"aws-native:opensearchserverless:AccessPolicy":{"description":"Amazon OpenSearchServerless access policy resource","properties":{"description":{"type":"string","description":"The description of the policy"},"name":{"type":"string","description":"The name of the policy","replaceOnChanges":true},"policy":{"type":"string","description":"The JSON policy document that is the content for the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:AccessPolicyType","description":"The type of access policy. Currently the only option is `data` .","replaceOnChanges":true}},"type":"object","required":["name","policy","type"],"inputProperties":{"description":{"type":"string","description":"The description of the policy"},"name":{"type":"string","description":"The name of the policy"},"policy":{"type":"string","description":"The JSON policy document that is the content for the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:AccessPolicyType","description":"The type of access policy. Currently the only option is `data` ."}},"requiredInputs":["policy","type"]},"aws-native:opensearchserverless:Collection":{"description":"Amazon OpenSearchServerless collection resource\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var encryptionPolicy = new AwsNative.OpenSearchServerless.SecurityPolicy(\"encryptionPolicy\", new()\n    {\n        Name = \"test-encryption-policy\",\n        Type = AwsNative.OpenSearchServerless.SecurityPolicyType.Encryption,\n        Description = \"Encryption policy for test collection\",\n        Policy = \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n    });\n\n    var testCollection = new AwsNative.OpenSearchServerless.Collection(\"testCollection\", new()\n    {\n        Name = \"test-collection\",\n        Type = AwsNative.OpenSearchServerless.CollectionType.Search,\n        Description = \"Search collection\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            encryptionPolicy,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tencryptionPolicy, err := opensearchserverless.NewSecurityPolicy(ctx, \"encryptionPolicy\", \u0026opensearchserverless.SecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"test-encryption-policy\"),\n\t\t\tType:        opensearchserverless.SecurityPolicyTypeEncryption,\n\t\t\tDescription: pulumi.String(\"Encryption policy for test collection\"),\n\t\t\tPolicy:      pulumi.String(\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = opensearchserverless.NewCollection(ctx, \"testCollection\", \u0026opensearchserverless.CollectionArgs{\n\t\t\tName:        pulumi.String(\"test-collection\"),\n\t\t\tType:        opensearchserverless.CollectionTypeSearch,\n\t\t\tDescription: pulumi.String(\"Search collection\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tencryptionPolicy,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst encryptionPolicy = new aws_native.opensearchserverless.SecurityPolicy(\"encryptionPolicy\", {\n    name: \"test-encryption-policy\",\n    type: aws_native.opensearchserverless.SecurityPolicyType.Encryption,\n    description: \"Encryption policy for test collection\",\n    policy: \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n});\nconst testCollection = new aws_native.opensearchserverless.Collection(\"testCollection\", {\n    name: \"test-collection\",\n    type: aws_native.opensearchserverless.CollectionType.Search,\n    description: \"Search collection\",\n}, {\n    dependsOn: [encryptionPolicy],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nencryption_policy = aws_native.opensearchserverless.SecurityPolicy(\"encryptionPolicy\",\n    name=\"test-encryption-policy\",\n    type=aws_native.opensearchserverless.SecurityPolicyType.ENCRYPTION,\n    description=\"Encryption policy for test collection\",\n    policy=\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\")\ntest_collection = aws_native.opensearchserverless.Collection(\"testCollection\",\n    name=\"test-collection\",\n    type=aws_native.opensearchserverless.CollectionType.SEARCH,\n    description=\"Search collection\",\n    opts = pulumi.ResourceOptions(depends_on=[encryption_policy]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var encryptionPolicy = new AwsNative.OpenSearchServerless.SecurityPolicy(\"encryptionPolicy\", new()\n    {\n        Name = \"test-encryption-policy\",\n        Type = AwsNative.OpenSearchServerless.SecurityPolicyType.Encryption,\n        Description = \"Encryption policy for test collection\",\n        Policy = \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n    });\n\n    var testCollection = new AwsNative.OpenSearchServerless.Collection(\"testCollection\", new()\n    {\n        Name = \"test-collection\",\n        Type = AwsNative.OpenSearchServerless.CollectionType.Search,\n        Description = \"Search collection\",\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            encryptionPolicy,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tencryptionPolicy, err := opensearchserverless.NewSecurityPolicy(ctx, \"encryptionPolicy\", \u0026opensearchserverless.SecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"test-encryption-policy\"),\n\t\t\tType:        opensearchserverless.SecurityPolicyTypeEncryption,\n\t\t\tDescription: pulumi.String(\"Encryption policy for test collection\"),\n\t\t\tPolicy:      pulumi.String(\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = opensearchserverless.NewCollection(ctx, \"testCollection\", \u0026opensearchserverless.CollectionArgs{\n\t\t\tName:        pulumi.String(\"test-collection\"),\n\t\t\tType:        opensearchserverless.CollectionTypeSearch,\n\t\t\tDescription: pulumi.String(\"Search collection\"),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tencryptionPolicy,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst encryptionPolicy = new aws_native.opensearchserverless.SecurityPolicy(\"encryptionPolicy\", {\n    name: \"test-encryption-policy\",\n    type: aws_native.opensearchserverless.SecurityPolicyType.Encryption,\n    description: \"Encryption policy for test collection\",\n    policy: \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n});\nconst testCollection = new aws_native.opensearchserverless.Collection(\"testCollection\", {\n    name: \"test-collection\",\n    type: aws_native.opensearchserverless.CollectionType.Search,\n    description: \"Search collection\",\n}, {\n    dependsOn: [encryptionPolicy],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nencryption_policy = aws_native.opensearchserverless.SecurityPolicy(\"encryptionPolicy\",\n    name=\"test-encryption-policy\",\n    type=aws_native.opensearchserverless.SecurityPolicyType.ENCRYPTION,\n    description=\"Encryption policy for test collection\",\n    policy=\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/test-collection\\\"]}],\\\"AWSOwnedKey\\\":true}\")\ntest_collection = aws_native.opensearchserverless.Collection(\"testCollection\",\n    name=\"test-collection\",\n    type=aws_native.opensearchserverless.CollectionType.SEARCH,\n    description=\"Search collection\",\n    opts = pulumi.ResourceOptions(depends_on=[encryption_policy]))\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the collection."},"awsId":{"type":"string","description":"The identifier of the collection"},"collectionEndpoint":{"type":"string","description":"The endpoint for the collection."},"collectionGroupName":{"type":"string","description":"The name of the collection group to associate with the collection.","replaceOnChanges":true},"dashboardEndpoint":{"type":"string","description":"The OpenSearch Dashboards endpoint for the collection."},"description":{"type":"string","description":"The description of the collection"},"encryptionConfig":{"$ref":"#/types/aws-native:opensearchserverless:CollectionEncryptionConfig","replaceOnChanges":true},"kmsKeyArn":{"type":"string","description":"Key Management Service key used to encrypt the collection."},"name":{"type":"string","description":"The name of the collection.\n\nThe name must meet the following criteria:\nUnique to your account and AWS Region\nStarts with a lowercase letter\nContains only lowercase letters a-z, the numbers 0-9 and the hyphen (-)\nContains between 3 and 32 characters\n","replaceOnChanges":true},"standbyReplicas":{"$ref":"#/types/aws-native:opensearchserverless:CollectionStandbyReplicas","description":"Indicates whether to use standby replicas for the collection. You can't update this property after the collection is already created. If you attempt to modify this property, the collection continues to use the original value.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"List of tags to be added to the resource","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:opensearchserverless:CollectionType","description":"The type of collection. Possible values are `SEARCH` , `TIMESERIES` , and `VECTORSEARCH` . For more information, see [Choosing a collection type](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/serverless-overview.html#serverless-usecase) .","replaceOnChanges":true},"vectorOptions":{"$ref":"#/types/aws-native:opensearchserverless:CollectionVectorOptions","replaceOnChanges":true}},"type":"object","required":["arn","awsId","collectionEndpoint","dashboardEndpoint","kmsKeyArn","name"],"inputProperties":{"collectionGroupName":{"type":"string","description":"The name of the collection group to associate with the collection."},"description":{"type":"string","description":"The description of the collection"},"encryptionConfig":{"$ref":"#/types/aws-native:opensearchserverless:CollectionEncryptionConfig"},"name":{"type":"string","description":"The name of the collection.\n\nThe name must meet the following criteria:\nUnique to your account and AWS Region\nStarts with a lowercase letter\nContains only lowercase letters a-z, the numbers 0-9 and the hyphen (-)\nContains between 3 and 32 characters\n"},"standbyReplicas":{"$ref":"#/types/aws-native:opensearchserverless:CollectionStandbyReplicas","description":"Indicates whether to use standby replicas for the collection. You can't update this property after the collection is already created. If you attempt to modify this property, the collection continues to use the original value."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"List of tags to be added to the resource"},"type":{"$ref":"#/types/aws-native:opensearchserverless:CollectionType","description":"The type of collection. Possible values are `SEARCH` , `TIMESERIES` , and `VECTORSEARCH` . For more information, see [Choosing a collection type](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/serverless-overview.html#serverless-usecase) ."},"vectorOptions":{"$ref":"#/types/aws-native:opensearchserverless:CollectionVectorOptions"}}},"aws-native:opensearchserverless:CollectionGroup":{"description":"Resource Type definition for AWS::OpenSearchServerless::CollectionGroup","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the collection group."},"awsId":{"type":"string","description":"The unique identifier of the collection group."},"capacityLimits":{"$ref":"#/types/aws-native:opensearchserverless:CollectionGroupCapacityLimits"},"description":{"type":"string","description":"The description of the collection group."},"name":{"type":"string","description":"The name of the collection group.","replaceOnChanges":true},"standbyReplicas":{"$ref":"#/types/aws-native:opensearchserverless:CollectionGroupStandbyReplicas","description":"Indicates whether standby replicas are used for the collection group.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","name","standbyReplicas"],"inputProperties":{"capacityLimits":{"$ref":"#/types/aws-native:opensearchserverless:CollectionGroupCapacityLimits"},"description":{"type":"string","description":"The description of the collection group."},"name":{"type":"string","description":"The name of the collection group."},"standbyReplicas":{"$ref":"#/types/aws-native:opensearchserverless:CollectionGroupStandbyReplicas","description":"Indicates whether standby replicas are used for the collection group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["standbyReplicas"]},"aws-native:opensearchserverless:Index":{"description":"An OpenSearch Serverless index resource","properties":{"collectionEndpoint":{"type":"string","description":"The endpoint for the collection.","replaceOnChanges":true},"indexName":{"type":"string","description":"The name of the OpenSearch Serverless index.","replaceOnChanges":true},"mappings":{"$ref":"#/types/aws-native:opensearchserverless:MappingsProperties","description":"Index Mappings"},"settings":{"$ref":"#/types/aws-native:opensearchserverless:IndexSettings","description":"Index settings"},"uuid":{"type":"string","description":"The unique identifier for the index."}},"type":"object","required":["collectionEndpoint","indexName","uuid"],"inputProperties":{"collectionEndpoint":{"type":"string","description":"The endpoint for the collection."},"indexName":{"type":"string","description":"The name of the OpenSearch Serverless index."},"mappings":{"$ref":"#/types/aws-native:opensearchserverless:MappingsProperties","description":"Index Mappings"},"settings":{"$ref":"#/types/aws-native:opensearchserverless:IndexSettings","description":"Index settings"}},"requiredInputs":["collectionEndpoint"]},"aws-native:opensearchserverless:LifecyclePolicy":{"description":"Amazon OpenSearchServerless lifecycle policy resource","properties":{"description":{"type":"string","description":"The description of the policy"},"name":{"type":"string","description":"The name of the policy","replaceOnChanges":true},"policy":{"type":"string","description":"The JSON policy document that is the content for the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:LifecyclePolicyType","description":"The type of lifecycle policy.","replaceOnChanges":true}},"type":"object","required":["name","policy","type"],"inputProperties":{"description":{"type":"string","description":"The description of the policy"},"name":{"type":"string","description":"The name of the policy"},"policy":{"type":"string","description":"The JSON policy document that is the content for the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:LifecyclePolicyType","description":"The type of lifecycle policy."}},"requiredInputs":["policy","type"]},"aws-native:opensearchserverless:SecurityConfig":{"description":"Amazon OpenSearchServerless security config resource\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testSecurityConfig = new AwsNative.OpenSearchServerless.SecurityConfig(\"testSecurityConfig\", new()\n    {\n        Name = \"my-provider\",\n        Type = AwsNative.OpenSearchServerless.SecurityConfigType.Saml,\n        Description = \"Serverless SAML configuration\",\n        SamlOptions = new AwsNative.OpenSearchServerless.Inputs.SecurityConfigSamlConfigOptionsArgs\n        {\n            Metadata = \"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\",\n            UserAttribute = \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\",\n            GroupAttribute = \"ALLGroups\",\n            SessionTimeout = 120,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewSecurityConfig(ctx, \"testSecurityConfig\", \u0026opensearchserverless.SecurityConfigArgs{\n\t\t\tName:        pulumi.String(\"my-provider\"),\n\t\t\tType:        opensearchserverless.SecurityConfigTypeSaml,\n\t\t\tDescription: pulumi.String(\"Serverless SAML configuration\"),\n\t\t\tSamlOptions: \u0026opensearchserverless.SecurityConfigSamlConfigOptionsArgs{\n\t\t\t\tMetadata:       pulumi.String(\"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\"),\n\t\t\t\tUserAttribute:  pulumi.String(\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"),\n\t\t\t\tGroupAttribute: pulumi.String(\"ALLGroups\"),\n\t\t\t\tSessionTimeout: pulumi.Int(120),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testSecurityConfig = new aws_native.opensearchserverless.SecurityConfig(\"testSecurityConfig\", {\n    name: \"my-provider\",\n    type: aws_native.opensearchserverless.SecurityConfigType.Saml,\n    description: \"Serverless SAML configuration\",\n    samlOptions: {\n        metadata: \"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\",\n        userAttribute: \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\",\n        groupAttribute: \"ALLGroups\",\n        sessionTimeout: 120,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_security_config = aws_native.opensearchserverless.SecurityConfig(\"testSecurityConfig\",\n    name=\"my-provider\",\n    type=aws_native.opensearchserverless.SecurityConfigType.SAML,\n    description=\"Serverless SAML configuration\",\n    saml_options={\n        \"metadata\": \"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\",\n        \"user_attribute\": \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\",\n        \"group_attribute\": \"ALLGroups\",\n        \"session_timeout\": 120,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testSecurityConfig = new AwsNative.OpenSearchServerless.SecurityConfig(\"testSecurityConfig\", new()\n    {\n        Name = \"my-provider\",\n        Type = AwsNative.OpenSearchServerless.SecurityConfigType.Saml,\n        Description = \"Serverless SAML configuration\",\n        SamlOptions = new AwsNative.OpenSearchServerless.Inputs.SecurityConfigSamlConfigOptionsArgs\n        {\n            Metadata = \"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\",\n            UserAttribute = \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\",\n            GroupAttribute = \"ALLGroups\",\n            SessionTimeout = 120,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewSecurityConfig(ctx, \"testSecurityConfig\", \u0026opensearchserverless.SecurityConfigArgs{\n\t\t\tName:        pulumi.String(\"my-provider\"),\n\t\t\tType:        opensearchserverless.SecurityConfigTypeSaml,\n\t\t\tDescription: pulumi.String(\"Serverless SAML configuration\"),\n\t\t\tSamlOptions: \u0026opensearchserverless.SecurityConfigSamlConfigOptionsArgs{\n\t\t\t\tMetadata:       pulumi.String(\"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\"),\n\t\t\t\tUserAttribute:  pulumi.String(\"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\"),\n\t\t\t\tGroupAttribute: pulumi.String(\"ALLGroups\"),\n\t\t\t\tSessionTimeout: pulumi.Int(120),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testSecurityConfig = new aws_native.opensearchserverless.SecurityConfig(\"testSecurityConfig\", {\n    name: \"my-provider\",\n    type: aws_native.opensearchserverless.SecurityConfigType.Saml,\n    description: \"Serverless SAML configuration\",\n    samlOptions: {\n        metadata: \"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\",\n        userAttribute: \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\",\n        groupAttribute: \"ALLGroups\",\n        sessionTimeout: 120,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_security_config = aws_native.opensearchserverless.SecurityConfig(\"testSecurityConfig\",\n    name=\"my-provider\",\n    type=aws_native.opensearchserverless.SecurityConfigType.SAML,\n    description=\"Serverless SAML configuration\",\n    saml_options={\n        \"metadata\": \"\u003c?xml version=\\\"1.0\\\" encoding=\\\"UTF-8\\\"?\u003e\u003cmd:EntityDescriptor entityID=\\\"http://www.okta.com/foobar\\\" xmlns:md=\\\"urn:oasis:names:tc:SAML:2.0:metadata\\\"\u003e\u003cmd:IDPSSODescriptor WantAuthnRequestsSigned=\\\"false\\\" protocolSupportEnumeration=\\\"urn:oasis:names:tc:SAML:2.0:protocol\\\"\u003e\u003cmd:KeyDescriptor use=\\\"signing\\\"\u003e\u003cds:KeyInfo xmlns:ds=\\\"http://www.w3.org/2000/09/xmldsig#\\\"\u003e\u003cds:X509Data\u003e\u003cds:X509Certificate\u003eMfoobar\u003c/ds:X509Certificate\u003e\u003c/ds:X509Data\u003e\u003c/ds:KeyInfo\u003e\u003c/md:KeyDescriptor\u003e\u003cmd:NameIDFormat\u003eurn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\u003c/md:NameIDFormat\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003cmd:SingleSignOnService Binding=\\\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\\\" Location=\\\"https://trial-1234567.okta.com/app/trial-1234567_saml2_1/foobar/sso/saml\\\"/\u003e\u003c/md:IDPSSODescriptor\u003e\u003c/md:EntityDescriptor\u003e\",\n        \"user_attribute\": \"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier\",\n        \"group_attribute\": \"ALLGroups\",\n        \"session_timeout\": 120,\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The identifier of the security config"},"description":{"type":"string","description":"Security config description"},"iamFederationOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigIamFederationConfigOptions","description":"Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation."},"iamIdentityCenterOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigIamIdentityCenterConfigOptions","description":"Describes IAM Identity Center options in the form of a key-value map."},"name":{"type":"string","description":"The friendly name of the security config","replaceOnChanges":true},"samlOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigSamlConfigOptions","description":"SAML options for the security configuration in the form of a key-value map."},"type":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigType","description":"The type of security configuration. Currently the only option is `saml` .","replaceOnChanges":true}},"type":"object","required":["awsId"],"inputProperties":{"description":{"type":"string","description":"Security config description"},"iamFederationOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigIamFederationConfigOptions","description":"Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation."},"iamIdentityCenterOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigIamIdentityCenterConfigOptions","description":"Describes IAM Identity Center options in the form of a key-value map."},"name":{"type":"string","description":"The friendly name of the security config"},"samlOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigSamlConfigOptions","description":"SAML options for the security configuration in the form of a key-value map."},"type":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigType","description":"The type of security configuration. Currently the only option is `saml` ."}}},"aws-native:opensearchserverless:SecurityPolicy":{"description":"Amazon OpenSearchServerless security policy resource\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testSecurityPolicy = new AwsNative.OpenSearchServerless.SecurityPolicy(\"testSecurityPolicy\", new()\n    {\n        Name = \"logs-encryption-policy\",\n        Type = AwsNative.OpenSearchServerless.SecurityPolicyType.Encryption,\n        Description = \"Encryption policy for test collections\",\n        Policy = \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewSecurityPolicy(ctx, \"testSecurityPolicy\", \u0026opensearchserverless.SecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"logs-encryption-policy\"),\n\t\t\tType:        opensearchserverless.SecurityPolicyTypeEncryption,\n\t\t\tDescription: pulumi.String(\"Encryption policy for test collections\"),\n\t\t\tPolicy:      pulumi.String(\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testSecurityPolicy = new aws_native.opensearchserverless.SecurityPolicy(\"testSecurityPolicy\", {\n    name: \"logs-encryption-policy\",\n    type: aws_native.opensearchserverless.SecurityPolicyType.Encryption,\n    description: \"Encryption policy for test collections\",\n    policy: \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_security_policy = aws_native.opensearchserverless.SecurityPolicy(\"testSecurityPolicy\",\n    name=\"logs-encryption-policy\",\n    type=aws_native.opensearchserverless.SecurityPolicyType.ENCRYPTION,\n    description=\"Encryption policy for test collections\",\n    policy=\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testSecurityPolicy = new AwsNative.OpenSearchServerless.SecurityPolicy(\"testSecurityPolicy\", new()\n    {\n        Name = \"logs-encryption-policy\",\n        Type = AwsNative.OpenSearchServerless.SecurityPolicyType.Encryption,\n        Description = \"Encryption policy for test collections\",\n        Policy = \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewSecurityPolicy(ctx, \"testSecurityPolicy\", \u0026opensearchserverless.SecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"logs-encryption-policy\"),\n\t\t\tType:        opensearchserverless.SecurityPolicyTypeEncryption,\n\t\t\tDescription: pulumi.String(\"Encryption policy for test collections\"),\n\t\t\tPolicy:      pulumi.String(\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testSecurityPolicy = new aws_native.opensearchserverless.SecurityPolicy(\"testSecurityPolicy\", {\n    name: \"logs-encryption-policy\",\n    type: aws_native.opensearchserverless.SecurityPolicyType.Encryption,\n    description: \"Encryption policy for test collections\",\n    policy: \"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_security_policy = aws_native.opensearchserverless.SecurityPolicy(\"testSecurityPolicy\",\n    name=\"logs-encryption-policy\",\n    type=aws_native.opensearchserverless.SecurityPolicyType.ENCRYPTION,\n    description=\"Encryption policy for test collections\",\n    policy=\"{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AWSOwnedKey\\\":true}\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var securityPolicy = new AwsNative.OpenSearchServerless.SecurityPolicy(\"securityPolicy\", new()\n    {\n        Name = \"logs-network-policy\",\n        Type = AwsNative.OpenSearchServerless.SecurityPolicyType.Network,\n        Description = \"Network policy for test collections\",\n        Policy = \"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewSecurityPolicy(ctx, \"securityPolicy\", \u0026opensearchserverless.SecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"logs-network-policy\"),\n\t\t\tType:        opensearchserverless.SecurityPolicyTypeNetwork,\n\t\t\tDescription: pulumi.String(\"Network policy for test collections\"),\n\t\t\tPolicy:      pulumi.String(\"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst securityPolicy = new aws_native.opensearchserverless.SecurityPolicy(\"securityPolicy\", {\n    name: \"logs-network-policy\",\n    type: aws_native.opensearchserverless.SecurityPolicyType.Network,\n    description: \"Network policy for test collections\",\n    policy: \"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsecurity_policy = aws_native.opensearchserverless.SecurityPolicy(\"securityPolicy\",\n    name=\"logs-network-policy\",\n    type=aws_native.opensearchserverless.SecurityPolicyType.NETWORK,\n    description=\"Network policy for test collections\",\n    policy=\"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var securityPolicy = new AwsNative.OpenSearchServerless.SecurityPolicy(\"securityPolicy\", new()\n    {\n        Name = \"logs-network-policy\",\n        Type = AwsNative.OpenSearchServerless.SecurityPolicyType.Network,\n        Description = \"Network policy for test collections\",\n        Policy = \"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewSecurityPolicy(ctx, \"securityPolicy\", \u0026opensearchserverless.SecurityPolicyArgs{\n\t\t\tName:        pulumi.String(\"logs-network-policy\"),\n\t\t\tType:        opensearchserverless.SecurityPolicyTypeNetwork,\n\t\t\tDescription: pulumi.String(\"Network policy for test collections\"),\n\t\t\tPolicy:      pulumi.String(\"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst securityPolicy = new aws_native.opensearchserverless.SecurityPolicy(\"securityPolicy\", {\n    name: \"logs-network-policy\",\n    type: aws_native.opensearchserverless.SecurityPolicyType.Network,\n    description: \"Network policy for test collections\",\n    policy: \"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsecurity_policy = aws_native.opensearchserverless.SecurityPolicy(\"securityPolicy\",\n    name=\"logs-network-policy\",\n    type=aws_native.opensearchserverless.SecurityPolicyType.NETWORK,\n    description=\"Network policy for test collections\",\n    policy=\"[{\\\"Rules\\\":[{\\\"ResourceType\\\":\\\"collection\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}, {\\\"ResourceType\\\":\\\"dashboard\\\",\\\"Resource\\\":[\\\"collection/logs*\\\"]}],\\\"AllowFromPublic\\\":true}]\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"description":{"type":"string","description":"The description of the policy"},"name":{"type":"string","description":"The name of the policy","replaceOnChanges":true},"policy":{"type":"string","description":"The JSON policy document that is the content for the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:SecurityPolicyType","description":"The type of security policy. Can be either `encryption` or `network` .","replaceOnChanges":true}},"type":"object","required":["name","policy","type"],"inputProperties":{"description":{"type":"string","description":"The description of the policy"},"name":{"type":"string","description":"The name of the policy"},"policy":{"type":"string","description":"The JSON policy document that is the content for the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:SecurityPolicyType","description":"The type of security policy. Can be either `encryption` or `network` ."}},"requiredInputs":["policy","type"]},"aws-native:opensearchserverless:VpcEndpoint":{"description":"Amazon OpenSearchServerless vpc endpoint resource\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testAOSSVpcEndpoint = new AwsNative.OpenSearchServerless.VpcEndpoint(\"testAOSSVpcEndpoint\", new()\n    {\n        Name = \"test-vpcendpoint\",\n        VpcId = \"vpc-0d728b8430292b3f4\",\n        SubnetIds = new[]\n        {\n            \"subnet-0e855f5722a9598ee\",\n        },\n        SecurityGroupIds = new[]\n        {\n            \"sg-03843b03f369eb245\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewVpcEndpoint(ctx, \"testAOSSVpcEndpoint\", \u0026opensearchserverless.VpcEndpointArgs{\n\t\t\tName:  pulumi.String(\"test-vpcendpoint\"),\n\t\t\tVpcId: pulumi.String(\"vpc-0d728b8430292b3f4\"),\n\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"subnet-0e855f5722a9598ee\"),\n\t\t\t},\n\t\t\tSecurityGroupIds: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"sg-03843b03f369eb245\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testAOSSVpcEndpoint = new aws_native.opensearchserverless.VpcEndpoint(\"testAOSSVpcEndpoint\", {\n    name: \"test-vpcendpoint\",\n    vpcId: \"vpc-0d728b8430292b3f4\",\n    subnetIds: [\"subnet-0e855f5722a9598ee\"],\n    securityGroupIds: [\"sg-03843b03f369eb245\"],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_aoss_vpc_endpoint = aws_native.opensearchserverless.VpcEndpoint(\"testAOSSVpcEndpoint\",\n    name=\"test-vpcendpoint\",\n    vpc_id=\"vpc-0d728b8430292b3f4\",\n    subnet_ids=[\"subnet-0e855f5722a9598ee\"],\n    security_group_ids=[\"sg-03843b03f369eb245\"])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testAOSSVpcEndpoint = new AwsNative.OpenSearchServerless.VpcEndpoint(\"testAOSSVpcEndpoint\", new()\n    {\n        Name = \"test-vpcendpoint\",\n        VpcId = \"vpc-0d728b8430292b3f4\",\n        SubnetIds = new[]\n        {\n            \"subnet-0e855f5722a9598ee\",\n        },\n        SecurityGroupIds = new[]\n        {\n            \"sg-03843b03f369eb245\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opensearchserverless\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := opensearchserverless.NewVpcEndpoint(ctx, \"testAOSSVpcEndpoint\", \u0026opensearchserverless.VpcEndpointArgs{\n\t\t\tName:  pulumi.String(\"test-vpcendpoint\"),\n\t\t\tVpcId: pulumi.String(\"vpc-0d728b8430292b3f4\"),\n\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"subnet-0e855f5722a9598ee\"),\n\t\t\t},\n\t\t\tSecurityGroupIds: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"sg-03843b03f369eb245\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testAOSSVpcEndpoint = new aws_native.opensearchserverless.VpcEndpoint(\"testAOSSVpcEndpoint\", {\n    name: \"test-vpcendpoint\",\n    vpcId: \"vpc-0d728b8430292b3f4\",\n    subnetIds: [\"subnet-0e855f5722a9598ee\"],\n    securityGroupIds: [\"sg-03843b03f369eb245\"],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_aoss_vpc_endpoint = aws_native.opensearchserverless.VpcEndpoint(\"testAOSSVpcEndpoint\",\n    name=\"test-vpcendpoint\",\n    vpc_id=\"vpc-0d728b8430292b3f4\",\n    subnet_ids=[\"subnet-0e855f5722a9598ee\"],\n    security_group_ids=[\"sg-03843b03f369eb245\"])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The identifier of the VPC Endpoint"},"name":{"type":"string","description":"The name of the VPC Endpoint","replaceOnChanges":true},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more security groups to associate with the endpoint network interface"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more subnets in which to create an endpoint network interface"},"vpcId":{"type":"string","description":"The ID of the VPC in which the endpoint will be used.","replaceOnChanges":true}},"type":"object","required":["awsId","name","subnetIds","vpcId"],"inputProperties":{"name":{"type":"string","description":"The name of the VPC Endpoint"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more security groups to associate with the endpoint network interface"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more subnets in which to create an endpoint network interface"},"vpcId":{"type":"string","description":"The ID of the VPC in which the endpoint will be used."}},"requiredInputs":["subnetIds","vpcId"]},"aws-native:opensearchservice:Application":{"description":"Amazon OpenSearchService application resource","properties":{"appConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:opensearchservice:ApplicationAppConfig"},"description":"List of application configurations."},"arn":{"type":"string","description":"Amazon Resource Name (ARN) format."},"awsId":{"type":"string","description":"The identifier of the application."},"dataSources":{"type":"array","items":{"$ref":"#/types/aws-native:opensearchservice:ApplicationDataSource"},"description":"List of data sources."},"endpoint":{"type":"string","description":"The endpoint for the application."},"iamIdentityCenterOptions":{"$ref":"#/types/aws-native:opensearchservice:IamIdentityCenterOptionsProperties","description":"Options for configuring IAM Identity Center"},"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the application.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the application.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this application."}},"type":"object","required":["arn","awsId","name"],"inputProperties":{"appConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:opensearchservice:ApplicationAppConfig"},"description":"List of application configurations."},"dataSources":{"type":"array","items":{"$ref":"#/types/aws-native:opensearchservice:ApplicationDataSource"},"description":"List of data sources."},"endpoint":{"type":"string","description":"The endpoint for the application."},"iamIdentityCenterOptions":{"$ref":"#/types/aws-native:opensearchservice:IamIdentityCenterOptionsProperties","description":"Options for configuring IAM Identity Center"},"kmsKeyArn":{"type":"string","description":"The ARN of the KMS key used to encrypt the application."},"name":{"type":"string","description":"The name of the application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this application."}}},"aws-native:opensearchservice:Domain":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"accessPolicies":{"$ref":"pulumi.json#/Any","description":"An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see [Configuring access policies](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html#ac-creating) in the *Amazon OpenSearch Service Developer Guide* .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::OpenSearchService::Domain` for more information about the expected schema for this property."},"advancedOptions":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional options to specify for the OpenSearch Service domain. For more information, see [AdvancedOptions](https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateDomain.html#API_CreateDomain_RequestBody) in the OpenSearch Service API reference."},"advancedSecurityOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainAdvancedSecurityOptionsInput","description":"Specifies options for fine-grained access control and SAML authentication.\n\nIf you specify advanced security options, you must also enable node-to-node encryption ( [NodeToNodeEncryptionOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodetonodeencryptionoptions.html) ) and encryption at rest ( [EncryptionAtRestOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-encryptionatrestoptions.html) ). You must also enable `EnforceHTTPS` within [DomainEndpointOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-domainendpointoptions.html) , which requires HTTPS for all traffic to the domain."},"aimlOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainAimlOptions","description":"Container for parameters required to enable all machine learning features."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the CloudFormation stack."},"awsId":{"type":"string","description":"The resource ID. For example, `123456789012/my-domain` ."},"clusterConfig":{"$ref":"#/types/aws-native:opensearchservice:DomainClusterConfig","description":"Container for the cluster configuration of a domain."},"cognitoOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainCognitoOptions","description":"Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards."},"deploymentStrategyOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainDeploymentStrategyOptions"},"domainArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the domain. See [Identifiers for IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in *Using AWS Identity and Access Management* for more information."},"domainEndpoint":{"type":"string","description":"The domain-specific endpoint used for requests to the OpenSearch APIs, such as `search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com` ."},"domainEndpointOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEndpointOptions","description":"Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint."},"domainEndpointV2":{"type":"string","description":"If `IPAddressType` to set to `dualstack` , a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses."},"domainEndpoints":{"type":"object","additionalProperties":{"type":"string"}},"domainName":{"type":"string","description":"A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .\n\nRequired when creating a new domain.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"ebsOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEbsOptions","description":"The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* ."},"encryptionAtRestOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEncryptionAtRestOptions","description":"Whether the domain should encrypt data at rest, and if so, the AWS  key to use. See [Encryption of data at rest for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html) .\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property."},"engineVersion":{"type":"string","description":"The version of OpenSearch to use. The value must be in the format `OpenSearch_X.Y` or `Elasticsearch_X.Y` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see [Supported versions of OpenSearch and Elasticsearch](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you set the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain) update policy to `true` , you can update `EngineVersion` without interruption. When `EnableVersionUpgrade` is set to `false` , or is not specified, updating `EngineVersion` results in [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) ."},"identityCenterOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainIdentityCenterOptions","description":"Configuration options for controlling IAM Identity Center integration within a domain."},"ipAddressType":{"type":"string","description":"Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later."},"logPublishingOptions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:opensearchservice:DomainLogPublishingOption"},"description":"An object with one or more of the following keys: `SEARCH_SLOW_LOGS` , `ES_APPLICATION_LOGS` , `INDEX_SLOW_LOGS` , `AUDIT_LOGS` , depending on the types of logs you want to publish. Each key needs a valid `LogPublishingOption` value. For the full syntax, see the [examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples) ."},"nodeToNodeEncryptionOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainNodeToNodeEncryptionOptions","description":"Specifies whether node-to-node encryption is enabled. See [Node-to-node encryption for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html) ."},"offPeakWindowOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainOffPeakWindowOptions","description":"Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain."},"serviceSoftwareOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainServiceSoftwareOptions"},"skipShardMigrationWait":{"type":"boolean"},"snapshotOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSnapshotOptions","description":"*DEPRECATED* . The automated snapshot configuration for the OpenSearch Service domain indexes."},"softwareUpdateOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSoftwareUpdateOptions","description":"Service software update options for the domain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this Domain."},"vpcOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainVpcOptions","description":"The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see [Launching your Amazon OpenSearch Service domains within a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint."}},"type":"object","required":["arn","awsId","domainArn","domainEndpoint","domainEndpointV2","domainEndpoints","serviceSoftwareOptions"],"inputProperties":{"accessPolicies":{"$ref":"pulumi.json#/Any","description":"An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see [Configuring access policies](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html#ac-creating) in the *Amazon OpenSearch Service Developer Guide* .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::OpenSearchService::Domain` for more information about the expected schema for this property."},"advancedOptions":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional options to specify for the OpenSearch Service domain. For more information, see [AdvancedOptions](https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateDomain.html#API_CreateDomain_RequestBody) in the OpenSearch Service API reference."},"advancedSecurityOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainAdvancedSecurityOptionsInput","description":"Specifies options for fine-grained access control and SAML authentication.\n\nIf you specify advanced security options, you must also enable node-to-node encryption ( [NodeToNodeEncryptionOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodetonodeencryptionoptions.html) ) and encryption at rest ( [EncryptionAtRestOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-encryptionatrestoptions.html) ). You must also enable `EnforceHTTPS` within [DomainEndpointOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-domainendpointoptions.html) , which requires HTTPS for all traffic to the domain."},"aimlOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainAimlOptions","description":"Container for parameters required to enable all machine learning features."},"clusterConfig":{"$ref":"#/types/aws-native:opensearchservice:DomainClusterConfig","description":"Container for the cluster configuration of a domain."},"cognitoOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainCognitoOptions","description":"Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards."},"deploymentStrategyOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainDeploymentStrategyOptions"},"domainEndpointOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEndpointOptions","description":"Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint."},"domainName":{"type":"string","description":"A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .\n\nRequired when creating a new domain.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"ebsOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEbsOptions","description":"The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* ."},"encryptionAtRestOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEncryptionAtRestOptions","description":"Whether the domain should encrypt data at rest, and if so, the AWS  key to use. See [Encryption of data at rest for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html) .\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property."},"engineVersion":{"type":"string","description":"The version of OpenSearch to use. The value must be in the format `OpenSearch_X.Y` or `Elasticsearch_X.Y` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see [Supported versions of OpenSearch and Elasticsearch](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you set the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain) update policy to `true` , you can update `EngineVersion` without interruption. When `EnableVersionUpgrade` is set to `false` , or is not specified, updating `EngineVersion` results in [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) ."},"identityCenterOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainIdentityCenterOptions","description":"Configuration options for controlling IAM Identity Center integration within a domain."},"ipAddressType":{"type":"string","description":"Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later."},"logPublishingOptions":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:opensearchservice:DomainLogPublishingOption"},"description":"An object with one or more of the following keys: `SEARCH_SLOW_LOGS` , `ES_APPLICATION_LOGS` , `INDEX_SLOW_LOGS` , `AUDIT_LOGS` , depending on the types of logs you want to publish. Each key needs a valid `LogPublishingOption` value. For the full syntax, see the [examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples) ."},"nodeToNodeEncryptionOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainNodeToNodeEncryptionOptions","description":"Specifies whether node-to-node encryption is enabled. See [Node-to-node encryption for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html) ."},"offPeakWindowOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainOffPeakWindowOptions","description":"Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain."},"skipShardMigrationWait":{"type":"boolean"},"snapshotOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSnapshotOptions","description":"*DEPRECATED* . The automated snapshot configuration for the OpenSearch Service domain indexes."},"softwareUpdateOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSoftwareUpdateOptions","description":"Service software update options for the domain."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this Domain."},"vpcOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainVpcOptions","description":"The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see [Launching your Amazon OpenSearch Service domains within a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint."}}},"aws-native:opsworkscm:Server":{"description":"Resource Type definition for AWS::OpsWorksCM::Server\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var pivotalKey = config.Require(\"pivotalKey\");\n    var password = config.Require(\"password\");\n    var myChefServer = new AwsNative.OpsWorksCm.Server(\"myChefServer\", new()\n    {\n        BackupRetentionCount = 12,\n        CustomCertificate = \"-----BEGIN CERTIFICATE----- EXAMPLEqEXAMPLE== -----END CERTIFICATE-----\",\n        CustomDomain = \"https://aws.my-company.com\",\n        CustomPrivateKey = \"-----BEGIN RSA PRIVATE KEY----- EXAMPLEqEXAMPLE= -----END RSA PRIVATE KEY-----\",\n        DisableAutomatedBackup = false,\n        Engine = \"ChefAutomate\",\n        EngineVersion = \"2\",\n        EngineAttributes = new[]\n        {\n            new AwsNative.OpsWorksCm.Inputs.ServerEngineAttributeArgs\n            {\n                Name = \"CHEF_AUTOMATE_PIVOTAL_KEY\",\n                Value = pivotalKey,\n            },\n            new AwsNative.OpsWorksCm.Inputs.ServerEngineAttributeArgs\n            {\n                Name = \"CHEF_AUTOMATE_ADMIN_PASSWORD\",\n                Value = password,\n            },\n        },\n        EngineModel = \"Single\",\n        InstanceProfileArn = \"INSTANCE-PROFILE-ARN\",\n        InstanceType = \"r5.xlarge\",\n        PreferredBackupWindow = \"08:00\",\n        PreferredMaintenanceWindow = \"Fri:08:00\",\n        ServiceRoleArn = \"SERVICE-ROLE-ARN\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Stage\",\n                Value = \"Production\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"test-owcm-server\",\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"endpoint\"] = myChefServer.Endpoint,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/opsworkscm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tpivotalKey := cfg.Require(\"pivotalKey\")\n\t\tpassword := cfg.Require(\"password\")\n\t\tmyChefServer, err := opsworkscm.NewServer(ctx, \"myChefServer\", \u0026opsworkscm.ServerArgs{\n\t\t\tBackupRetentionCount:   pulumi.Int(12),\n\t\t\tCustomCertificate:      pulumi.String(\"-----BEGIN CERTIFICATE----- EXAMPLEqEXAMPLE== -----END CERTIFICATE-----\"),\n\t\t\tCustomDomain:           pulumi.String(\"https://aws.my-company.com\"),\n\t\t\tCustomPrivateKey:       pulumi.String(\"-----BEGIN RSA PRIVATE KEY----- EXAMPLEqEXAMPLE= -----END RSA PRIVATE KEY-----\"),\n\t\t\tDisableAutomatedBackup: pulumi.Bool(false),\n\t\t\tEngine:                 pulumi.String(\"ChefAutomate\"),\n\t\t\tEngineVersion:          pulumi.String(\"2\"),\n\t\t\tEngineAttributes: opsworkscm.ServerEngineAttributeArray{\n\t\t\t\t\u0026opsworkscm.ServerEngineAttributeArgs{\n\t\t\t\t\tName:  pulumi.String(\"CHEF_AUTOMATE_PIVOTAL_KEY\"),\n\t\t\t\t\tValue: pulumi.String(pulumi.String(pivotalKey)),\n\t\t\t\t},\n\t\t\t\t\u0026opsworkscm.ServerEngineAttributeArgs{\n\t\t\t\t\tName:  pulumi.String(\"CHEF_AUTOMATE_ADMIN_PASSWORD\"),\n\t\t\t\t\tValue: pulumi.String(pulumi.String(password)),\n\t\t\t\t},\n\t\t\t},\n\t\t\tEngineModel:                pulumi.String(\"Single\"),\n\t\t\tInstanceProfileArn:         pulumi.String(\"INSTANCE-PROFILE-ARN\"),\n\t\t\tInstanceType:               pulumi.String(\"r5.xlarge\"),\n\t\t\tPreferredBackupWindow:      pulumi.String(\"08:00\"),\n\t\t\tPreferredMaintenanceWindow: pulumi.String(\"Fri:08:00\"),\n\t\t\tServiceRoleArn:             pulumi.String(\"SERVICE-ROLE-ARN\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Stage\"),\n\t\t\t\t\tValue: pulumi.String(\"Production\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"test-owcm-server\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"endpoint\", myChefServer.Endpoint)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst pivotalKey = config.require(\"pivotalKey\");\nconst password = config.require(\"password\");\nconst myChefServer = new aws_native.opsworkscm.Server(\"myChefServer\", {\n    backupRetentionCount: 12,\n    customCertificate: \"-----BEGIN CERTIFICATE----- EXAMPLEqEXAMPLE== -----END CERTIFICATE-----\",\n    customDomain: \"https://aws.my-company.com\",\n    customPrivateKey: \"-----BEGIN RSA PRIVATE KEY----- EXAMPLEqEXAMPLE= -----END RSA PRIVATE KEY-----\",\n    disableAutomatedBackup: false,\n    engine: \"ChefAutomate\",\n    engineVersion: \"2\",\n    engineAttributes: [\n        {\n            name: \"CHEF_AUTOMATE_PIVOTAL_KEY\",\n            value: pivotalKey,\n        },\n        {\n            name: \"CHEF_AUTOMATE_ADMIN_PASSWORD\",\n            value: password,\n        },\n    ],\n    engineModel: \"Single\",\n    instanceProfileArn: \"INSTANCE-PROFILE-ARN\",\n    instanceType: \"r5.xlarge\",\n    preferredBackupWindow: \"08:00\",\n    preferredMaintenanceWindow: \"Fri:08:00\",\n    serviceRoleArn: \"SERVICE-ROLE-ARN\",\n    tags: [\n        {\n            key: \"Stage\",\n            value: \"Production\",\n        },\n        {\n            key: \"Name\",\n            value: \"test-owcm-server\",\n        },\n    ],\n});\nexport const endpoint = myChefServer.endpoint;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\npivotal_key = config.require(\"pivotalKey\")\npassword = config.require(\"password\")\nmy_chef_server = aws_native.opsworkscm.Server(\"myChefServer\",\n    backup_retention_count=12,\n    custom_certificate=\"-----BEGIN CERTIFICATE----- EXAMPLEqEXAMPLE== -----END CERTIFICATE-----\",\n    custom_domain=\"https://aws.my-company.com\",\n    custom_private_key=\"-----BEGIN RSA PRIVATE KEY----- EXAMPLEqEXAMPLE= -----END RSA PRIVATE KEY-----\",\n    disable_automated_backup=False,\n    engine=\"ChefAutomate\",\n    engine_version=\"2\",\n    engine_attributes=[\n        {\n            \"name\": \"CHEF_AUTOMATE_PIVOTAL_KEY\",\n            \"value\": pivotal_key,\n        },\n        {\n            \"name\": \"CHEF_AUTOMATE_ADMIN_PASSWORD\",\n            \"value\": password,\n        },\n    ],\n    engine_model=\"Single\",\n    instance_profile_arn=\"INSTANCE-PROFILE-ARN\",\n    instance_type=\"r5.xlarge\",\n    preferred_backup_window=\"08:00\",\n    preferred_maintenance_window=\"Fri:08:00\",\n    service_role_arn=\"SERVICE-ROLE-ARN\",\n    tags=[\n        {\n            \"key\": \"Stage\",\n            \"value\": \"Production\",\n        },\n        {\n            \"key\": \"Name\",\n            \"value\": \"test-owcm-server\",\n        },\n    ])\npulumi.export(\"endpoint\", my_chef_server.endpoint)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the server, such as `arn:aws:OpsWorksCM:us-east-1:123456789012:server/server-a1bzhi` ."},"associatePublicIpAddress":{"type":"boolean","description":"Associate a public IP address with a server that you are launching. Valid values are `true` or `false` . The default value is `true` .","replaceOnChanges":true},"awsId":{"type":"string","description":"The ID of the server."},"backupId":{"type":"string","description":"If you specify this field, AWS OpsWorks CM creates the server by using the backup represented by BackupId.","replaceOnChanges":true},"backupRetentionCount":{"type":"integer","description":"The number of automated backups that you want to keep. Whenever a new backup is created, AWS OpsWorks CM deletes the oldest backups if this number is exceeded. The default value is `1` ."},"customCertificate":{"type":"string","description":"Supported on servers running Chef Automate 2.0 only. A PEM-formatted HTTPS certificate. The value can be be a single, self-signed certificate, or a certificate chain. If you specify a custom certificate, you must also specify values for `CustomDomain` and `CustomPrivateKey` . The following are requirements for the `CustomCertificate` value:\n\n- You can provide either a self-signed, custom certificate, or the full certificate chain.\n- The certificate must be a valid X509 certificate, or a certificate chain in PEM format.\n- The certificate must be valid at the time of upload. A certificate can't be used before its validity period begins (the certificate's `NotBefore` date), or after it expires (the certificate's `NotAfter` date).\n- The certificate’s common name or subject alternative names (SANs), if present, must match the value of `CustomDomain` .\n- The certificate must match the value of `CustomPrivateKey` .","replaceOnChanges":true},"customDomain":{"type":"string","description":"Supported on servers running Chef Automate 2.0 only. An optional public endpoint of a server, such as `https://aws.my-company.com` . To access the server, create a CNAME DNS record in your preferred DNS service that points the custom domain to the endpoint that is generated when the server is created (the value of the CreateServer Endpoint attribute). You cannot access the server by using the generated `Endpoint` value if the server is using a custom domain. If you specify a custom domain, you must also specify values for `CustomCertificate` and `CustomPrivateKey` .","replaceOnChanges":true},"customPrivateKey":{"type":"string","description":"Supported on servers running Chef Automate 2.0 only. A private key in PEM format for connecting to the server by using HTTPS. The private key must not be encrypted; it cannot be protected by a password or passphrase. If you specify a custom private key, you must also specify values for `CustomDomain` and `CustomCertificate` .","replaceOnChanges":true},"disableAutomatedBackup":{"type":"boolean","description":"Enable or disable scheduled backups. Valid values are `true` or `false` . The default value is `true` ."},"endpoint":{"type":"string","description":"A DNS name that can be used to access the engine. Example: `myserver-asdfghjkl.us-east-1.opsworks.io` ."},"engine":{"type":"string","description":"The configuration management engine to use. Valid values include `ChefAutomate` and `Puppet` .","replaceOnChanges":true},"engineAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:opsworkscm:ServerEngineAttribute"},"description":"Optional engine attributes on a specified server.\n\n**Attributes accepted in a Chef createServer request:** - `CHEF_AUTOMATE_PIVOTAL_KEY` : A base64-encoded RSA public key. The corresponding private key is required to access the Chef API. When no CHEF_AUTOMATE_PIVOTAL_KEY is set, a private key is generated and returned in the response. When you are specifying the value of CHEF_AUTOMATE_PIVOTAL_KEY as a parameter in the CloudFormation console, you must add newline ( `\\n` ) characters at the end of each line of the pivotal key value.\n- `CHEF_AUTOMATE_ADMIN_PASSWORD` : The password for the administrative user in the Chef Automate web-based dashboard. The password length is a minimum of eight characters, and a maximum of 32. The password can contain letters, numbers, and special characters (!/@#$%^\u0026+=_). The password must contain at least one lower case letter, one upper case letter, one number, and one special character. When no CHEF_AUTOMATE_ADMIN_PASSWORD is set, one is generated and returned in the response.\n\n**Attributes accepted in a Puppet createServer request:** - `PUPPET_ADMIN_PASSWORD` : To work with the Puppet Enterprise console, a password must use ASCII characters.\n- `PUPPET_R10K_REMOTE` : The r10k remote is the URL of your control repository (for example, ssh://git@your.git-repo.com:user/control-repo.git). Specifying an r10k remote opens TCP port 8170.\n- `PUPPET_R10K_PRIVATE_KEY` : If you are using a private Git repository, add PUPPET_R10K_PRIVATE_KEY to specify a PEM-encoded private SSH key."},"engineModel":{"type":"string","description":"The engine model of the server. Valid values in this release include `Monolithic` for Puppet and `Single` for Chef.","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The major release version of the engine that you want to use. For a Chef server, the valid value for EngineVersion is currently `2` . For a Puppet server, valid values are `2019` or `2017` .","replaceOnChanges":true},"instanceProfileArn":{"type":"string","description":"The ARN of the instance profile that your Amazon EC2 instances use.","replaceOnChanges":true},"instanceType":{"type":"string","description":"The Amazon EC2 instance type to use. For example, `m5.large` .","replaceOnChanges":true},"keyPair":{"type":"string","description":"The Amazon EC2 key pair to set for the instance. This parameter is optional; if desired, you may specify this parameter to connect to your instances by using SSH.","replaceOnChanges":true},"preferredBackupWindow":{"type":"string","description":"The start time for a one-hour period during which AWS OpsWorks CM backs up application-level data on your server if automated backups are enabled. Valid values must be specified in one of the following formats:\n\n- `HH:MM` for daily backups\n- `DDD:HH:MM` for weekly backups\n\n`MM` must be specified as `00` . The specified time is in coordinated universal time (UTC). The default value is a random, daily start time.\n\n*Example:* `08:00` , which represents a daily start time of 08:00 UTC.\n\n*Example:* `Mon:08:00` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)"},"preferredMaintenanceWindow":{"type":"string","description":"The start time for a one-hour period each week during which AWS OpsWorks CM performs maintenance on the instance. Valid values must be specified in the following format: `DDD:HH:MM` . `MM` must be specified as `00` . The specified time is in coordinated universal time (UTC). The default value is a random one-hour period on Tuesday, Wednesday, or Friday. See `TimeWindowDefinition` for more information.\n\n*Example:* `Mon:08:00` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs to attach to the Amazon EC2 instance. If you add this parameter, the specified security groups must be within the VPC that is specified by `SubnetIds` .\n\nIf you do not specify this parameter, AWS OpsWorks CM creates one new security group that uses TCP ports 22 and 443, open to 0.0.0.0/0 (everyone).","replaceOnChanges":true},"serverName":{"type":"string","description":"The name of the server. The server name must be unique within your AWS account, within each region. Server names must start with a letter; then letters, numbers, or hyphens (-) are allowed, up to a maximum of 40 characters.","replaceOnChanges":true},"serviceRoleArn":{"type":"string","description":"The service role that the AWS OpsWorks CM service backend uses to work with your account.","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of subnets in which to launch the server EC2 instance.\n\nAmazon EC2-Classic customers: This field is required. All servers must run within a VPC. The VPC must have \"Auto Assign Public IP\" enabled.\n\nEC2-VPC customers: This field is optional. If you do not specify subnet IDs, your EC2 instances are created in a default subnet that is selected by Amazon EC2. If you specify subnet IDs, the VPC must have \"Auto Assign Public IP\" enabled.\n\nFor more information about supported Amazon EC2 platforms, see [Supported Platforms](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html) .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map that contains tag keys and tag values to attach to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server.\n\n- The key cannot be empty.\n- The key can be a maximum of 127 characters, and can contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : / @`\n- The value can be a maximum 255 characters, and contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : / @`\n- Leading and trailing spaces are trimmed from both the key and value.\n- A maximum of 50 user-applied tags is allowed for any AWS OpsWorks CM server."}},"type":"object","required":["arn","awsId","endpoint","instanceProfileArn","instanceType","serviceRoleArn"],"inputProperties":{"associatePublicIpAddress":{"type":"boolean","description":"Associate a public IP address with a server that you are launching. Valid values are `true` or `false` . The default value is `true` ."},"backupId":{"type":"string","description":"If you specify this field, AWS OpsWorks CM creates the server by using the backup represented by BackupId."},"backupRetentionCount":{"type":"integer","description":"The number of automated backups that you want to keep. Whenever a new backup is created, AWS OpsWorks CM deletes the oldest backups if this number is exceeded. The default value is `1` ."},"customCertificate":{"type":"string","description":"Supported on servers running Chef Automate 2.0 only. A PEM-formatted HTTPS certificate. The value can be be a single, self-signed certificate, or a certificate chain. If you specify a custom certificate, you must also specify values for `CustomDomain` and `CustomPrivateKey` . The following are requirements for the `CustomCertificate` value:\n\n- You can provide either a self-signed, custom certificate, or the full certificate chain.\n- The certificate must be a valid X509 certificate, or a certificate chain in PEM format.\n- The certificate must be valid at the time of upload. A certificate can't be used before its validity period begins (the certificate's `NotBefore` date), or after it expires (the certificate's `NotAfter` date).\n- The certificate’s common name or subject alternative names (SANs), if present, must match the value of `CustomDomain` .\n- The certificate must match the value of `CustomPrivateKey` ."},"customDomain":{"type":"string","description":"Supported on servers running Chef Automate 2.0 only. An optional public endpoint of a server, such as `https://aws.my-company.com` . To access the server, create a CNAME DNS record in your preferred DNS service that points the custom domain to the endpoint that is generated when the server is created (the value of the CreateServer Endpoint attribute). You cannot access the server by using the generated `Endpoint` value if the server is using a custom domain. If you specify a custom domain, you must also specify values for `CustomCertificate` and `CustomPrivateKey` ."},"customPrivateKey":{"type":"string","description":"Supported on servers running Chef Automate 2.0 only. A private key in PEM format for connecting to the server by using HTTPS. The private key must not be encrypted; it cannot be protected by a password or passphrase. If you specify a custom private key, you must also specify values for `CustomDomain` and `CustomCertificate` ."},"disableAutomatedBackup":{"type":"boolean","description":"Enable or disable scheduled backups. Valid values are `true` or `false` . The default value is `true` ."},"engine":{"type":"string","description":"The configuration management engine to use. Valid values include `ChefAutomate` and `Puppet` ."},"engineAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:opsworkscm:ServerEngineAttribute"},"description":"Optional engine attributes on a specified server.\n\n**Attributes accepted in a Chef createServer request:** - `CHEF_AUTOMATE_PIVOTAL_KEY` : A base64-encoded RSA public key. The corresponding private key is required to access the Chef API. When no CHEF_AUTOMATE_PIVOTAL_KEY is set, a private key is generated and returned in the response. When you are specifying the value of CHEF_AUTOMATE_PIVOTAL_KEY as a parameter in the CloudFormation console, you must add newline ( `\\n` ) characters at the end of each line of the pivotal key value.\n- `CHEF_AUTOMATE_ADMIN_PASSWORD` : The password for the administrative user in the Chef Automate web-based dashboard. The password length is a minimum of eight characters, and a maximum of 32. The password can contain letters, numbers, and special characters (!/@#$%^\u0026+=_). The password must contain at least one lower case letter, one upper case letter, one number, and one special character. When no CHEF_AUTOMATE_ADMIN_PASSWORD is set, one is generated and returned in the response.\n\n**Attributes accepted in a Puppet createServer request:** - `PUPPET_ADMIN_PASSWORD` : To work with the Puppet Enterprise console, a password must use ASCII characters.\n- `PUPPET_R10K_REMOTE` : The r10k remote is the URL of your control repository (for example, ssh://git@your.git-repo.com:user/control-repo.git). Specifying an r10k remote opens TCP port 8170.\n- `PUPPET_R10K_PRIVATE_KEY` : If you are using a private Git repository, add PUPPET_R10K_PRIVATE_KEY to specify a PEM-encoded private SSH key."},"engineModel":{"type":"string","description":"The engine model of the server. Valid values in this release include `Monolithic` for Puppet and `Single` for Chef."},"engineVersion":{"type":"string","description":"The major release version of the engine that you want to use. For a Chef server, the valid value for EngineVersion is currently `2` . For a Puppet server, valid values are `2019` or `2017` ."},"instanceProfileArn":{"type":"string","description":"The ARN of the instance profile that your Amazon EC2 instances use."},"instanceType":{"type":"string","description":"The Amazon EC2 instance type to use. For example, `m5.large` ."},"keyPair":{"type":"string","description":"The Amazon EC2 key pair to set for the instance. This parameter is optional; if desired, you may specify this parameter to connect to your instances by using SSH."},"preferredBackupWindow":{"type":"string","description":"The start time for a one-hour period during which AWS OpsWorks CM backs up application-level data on your server if automated backups are enabled. Valid values must be specified in one of the following formats:\n\n- `HH:MM` for daily backups\n- `DDD:HH:MM` for weekly backups\n\n`MM` must be specified as `00` . The specified time is in coordinated universal time (UTC). The default value is a random, daily start time.\n\n*Example:* `08:00` , which represents a daily start time of 08:00 UTC.\n\n*Example:* `Mon:08:00` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)"},"preferredMaintenanceWindow":{"type":"string","description":"The start time for a one-hour period each week during which AWS OpsWorks CM performs maintenance on the instance. Valid values must be specified in the following format: `DDD:HH:MM` . `MM` must be specified as `00` . The specified time is in coordinated universal time (UTC). The default value is a random one-hour period on Tuesday, Wednesday, or Friday. See `TimeWindowDefinition` for more information.\n\n*Example:* `Mon:08:00` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs to attach to the Amazon EC2 instance. If you add this parameter, the specified security groups must be within the VPC that is specified by `SubnetIds` .\n\nIf you do not specify this parameter, AWS OpsWorks CM creates one new security group that uses TCP ports 22 and 443, open to 0.0.0.0/0 (everyone)."},"serverName":{"type":"string","description":"The name of the server. The server name must be unique within your AWS account, within each region. Server names must start with a letter; then letters, numbers, or hyphens (-) are allowed, up to a maximum of 40 characters."},"serviceRoleArn":{"type":"string","description":"The service role that the AWS OpsWorks CM service backend uses to work with your account."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The IDs of subnets in which to launch the server EC2 instance.\n\nAmazon EC2-Classic customers: This field is required. All servers must run within a VPC. The VPC must have \"Auto Assign Public IP\" enabled.\n\nEC2-VPC customers: This field is optional. If you do not specify subnet IDs, your EC2 instances are created in a default subnet that is selected by Amazon EC2. If you specify subnet IDs, the VPC must have \"Auto Assign Public IP\" enabled.\n\nFor more information about supported Amazon EC2 platforms, see [Supported Platforms](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map that contains tag keys and tag values to attach to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server.\n\n- The key cannot be empty.\n- The key can be a maximum of 127 characters, and can contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : / @`\n- The value can be a maximum 255 characters, and contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : / @`\n- Leading and trailing spaces are trimmed from both the key and value.\n- A maximum of 50 user-applied tags is allowed for any AWS OpsWorks CM server."}},"requiredInputs":["instanceProfileArn","instanceType","serviceRoleArn"]},"aws-native:organizations:Account":{"description":"You can use AWS::Organizations::Account to manage accounts in organization.","properties":{"accountId":{"type":"string","description":"If the account was created successfully, the unique identifier (ID) of the new account."},"accountName":{"type":"string","description":"The friendly name of the member account."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the account."},"email":{"type":"string","description":"The email address of the owner to assign to the new member account."},"joinedMethod":{"$ref":"#/types/aws-native:organizations:AccountJoinedMethod","description":"The method by which the account joined the organization."},"joinedTimestamp":{"type":"string","description":"The date the account became a part of the organization."},"parentIds":{"type":"array","items":{"type":"string"},"description":"List of parent nodes for the member account. Currently only one parent at a time is supported. Default is root."},"roleName":{"type":"string","description":"The name of an IAM role that AWS Organizations automatically preconfigures in the new member account. Default name is OrganizationAccountAccessRole if not specified."},"state":{"$ref":"#/types/aws-native:organizations:AccountState","description":"The state of the account in the organization."},"status":{"$ref":"#/types/aws-native:organizations:AccountStatus","description":"The status of the account in the organization."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the newly created account. For each tag in the list, you must specify both a tag key and a value."}},"type":"object","required":["accountId","accountName","arn","email","joinedMethod","joinedTimestamp","state","status"],"inputProperties":{"accountName":{"type":"string","description":"The friendly name of the member account."},"email":{"type":"string","description":"The email address of the owner to assign to the new member account."},"parentIds":{"type":"array","items":{"type":"string"},"description":"List of parent nodes for the member account. Currently only one parent at a time is supported. Default is root."},"roleName":{"type":"string","description":"The name of an IAM role that AWS Organizations automatically preconfigures in the new member account. Default name is OrganizationAccountAccessRole if not specified."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the newly created account. For each tag in the list, you must specify both a tag key and a value."}},"requiredInputs":["email"]},"aws-native:organizations:Organization":{"description":"Resource schema for AWS::Organizations::Organization","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of an organization."},"awsId":{"type":"string","description":"The unique identifier (ID) of an organization."},"featureSet":{"$ref":"#/types/aws-native:organizations:OrganizationFeatureSet","description":"Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality."},"managementAccountArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the account that is designated as the management account for the organization."},"managementAccountEmail":{"type":"string","description":"The email address that is associated with the AWS account that is designated as the management account for the organization."},"managementAccountId":{"type":"string","description":"The unique identifier (ID) of the management account of an organization."},"rootId":{"type":"string","description":"The unique identifier (ID) for the root."}},"type":"object","required":["arn","awsId","managementAccountArn","managementAccountEmail","managementAccountId","rootId"],"inputProperties":{"featureSet":{"$ref":"#/types/aws-native:organizations:OrganizationFeatureSet","description":"Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality."}}},"aws-native:organizations:OrganizationalUnit":{"description":"You can use organizational units (OUs) to group accounts together to administer as a single unit. This greatly simplifies the management of your accounts. For example, you can attach a policy-based control to an OU, and all accounts within the OU automatically inherit the policy. You can create multiple OUs within a single organization, and you can create OUs within other OUs. Each OU can contain multiple accounts, and you can move accounts from one OU to another. However, OU names must be unique within a parent OU or root.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var organizationRootId = config.Require(\"organizationRootId\");\n    var testTemplateOU = new AwsNative.Organizations.OrganizationalUnit(\"testTemplateOU\", new()\n    {\n        Name = \"TestTemplateOU\",\n        ParentId = organizationRootId,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\torganizationRootId := cfg.Require(\"organizationRootId\")\n\t\t_, err := organizations.NewOrganizationalUnit(ctx, \"testTemplateOU\", \u0026organizations.OrganizationalUnitArgs{\n\t\t\tName:     pulumi.String(\"TestTemplateOU\"),\n\t\t\tParentId: pulumi.String(pulumi.String(organizationRootId)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst organizationRootId = config.require(\"organizationRootId\");\nconst testTemplateOU = new aws_native.organizations.OrganizationalUnit(\"testTemplateOU\", {\n    name: \"TestTemplateOU\",\n    parentId: organizationRootId,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\norganization_root_id = config.require(\"organizationRootId\")\ntest_template_ou = aws_native.organizations.OrganizationalUnit(\"testTemplateOU\",\n    name=\"TestTemplateOU\",\n    parent_id=organization_root_id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var organizationRootId = config.Require(\"organizationRootId\");\n    var testTemplateOU = new AwsNative.Organizations.OrganizationalUnit(\"testTemplateOU\", new()\n    {\n        Name = \"TestTemplateOU\",\n        ParentId = organizationRootId,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\torganizationRootId := cfg.Require(\"organizationRootId\")\n\t\t_, err := organizations.NewOrganizationalUnit(ctx, \"testTemplateOU\", \u0026organizations.OrganizationalUnitArgs{\n\t\t\tName:     pulumi.String(\"TestTemplateOU\"),\n\t\t\tParentId: pulumi.String(pulumi.String(organizationRootId)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst organizationRootId = config.require(\"organizationRootId\");\nconst testTemplateOU = new aws_native.organizations.OrganizationalUnit(\"testTemplateOU\", {\n    name: \"TestTemplateOU\",\n    parentId: organizationRootId,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\norganization_root_id = config.require(\"organizationRootId\")\ntest_template_ou = aws_native.organizations.OrganizationalUnit(\"testTemplateOU\",\n    name=\"TestTemplateOU\",\n    parent_id=organization_root_id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var organizationRootId = config.Require(\"organizationRootId\");\n    var parentOU = new AwsNative.Organizations.OrganizationalUnit(\"parentOU\", new()\n    {\n        Name = \"ParentOU\",\n        ParentId = organizationRootId,\n    });\n\n    var childOU = new AwsNative.Organizations.OrganizationalUnit(\"childOU\", new()\n    {\n        Name = \"ChildOU\",\n        ParentId = parentOU.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\torganizationRootId := cfg.Require(\"organizationRootId\")\n\t\tparentOU, err := organizations.NewOrganizationalUnit(ctx, \"parentOU\", \u0026organizations.OrganizationalUnitArgs{\n\t\t\tName:     pulumi.String(\"ParentOU\"),\n\t\t\tParentId: pulumi.String(pulumi.String(organizationRootId)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = organizations.NewOrganizationalUnit(ctx, \"childOU\", \u0026organizations.OrganizationalUnitArgs{\n\t\t\tName:     pulumi.String(\"ChildOU\"),\n\t\t\tParentId: parentOU.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst organizationRootId = config.require(\"organizationRootId\");\nconst parentOU = new aws_native.organizations.OrganizationalUnit(\"parentOU\", {\n    name: \"ParentOU\",\n    parentId: organizationRootId,\n});\nconst childOU = new aws_native.organizations.OrganizationalUnit(\"childOU\", {\n    name: \"ChildOU\",\n    parentId: parentOU.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\norganization_root_id = config.require(\"organizationRootId\")\nparent_ou = aws_native.organizations.OrganizationalUnit(\"parentOU\",\n    name=\"ParentOU\",\n    parent_id=organization_root_id)\nchild_ou = aws_native.organizations.OrganizationalUnit(\"childOU\",\n    name=\"ChildOU\",\n    parent_id=parent_ou.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var organizationRootId = config.Require(\"organizationRootId\");\n    var parentOU = new AwsNative.Organizations.OrganizationalUnit(\"parentOU\", new()\n    {\n        Name = \"ParentOU\",\n        ParentId = organizationRootId,\n    });\n\n    var childOU = new AwsNative.Organizations.OrganizationalUnit(\"childOU\", new()\n    {\n        Name = \"ChildOU\",\n        ParentId = parentOU.Id,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/organizations\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\torganizationRootId := cfg.Require(\"organizationRootId\")\n\t\tparentOU, err := organizations.NewOrganizationalUnit(ctx, \"parentOU\", \u0026organizations.OrganizationalUnitArgs{\n\t\t\tName:     pulumi.String(\"ParentOU\"),\n\t\t\tParentId: pulumi.String(pulumi.String(organizationRootId)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = organizations.NewOrganizationalUnit(ctx, \"childOU\", \u0026organizations.OrganizationalUnitArgs{\n\t\t\tName:     pulumi.String(\"ChildOU\"),\n\t\t\tParentId: parentOU.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst organizationRootId = config.require(\"organizationRootId\");\nconst parentOU = new aws_native.organizations.OrganizationalUnit(\"parentOU\", {\n    name: \"ParentOU\",\n    parentId: organizationRootId,\n});\nconst childOU = new aws_native.organizations.OrganizationalUnit(\"childOU\", {\n    name: \"ChildOU\",\n    parentId: parentOU.id,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\norganization_root_id = config.require(\"organizationRootId\")\nparent_ou = aws_native.organizations.OrganizationalUnit(\"parentOU\",\n    name=\"ParentOU\",\n    parent_id=organization_root_id)\nchild_ou = aws_native.organizations.OrganizationalUnit(\"childOU\",\n    name=\"ChildOU\",\n    parent_id=parent_ou.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of this OU."},"awsId":{"type":"string","description":"The unique identifier (ID) associated with this OU."},"name":{"type":"string","description":"The friendly name of this OU."},"parentId":{"type":"string","description":"The unique identifier (ID) of the parent root or OU that you want to create the new OU in.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the newly created OU."}},"type":"object","required":["arn","awsId","name","parentId"],"inputProperties":{"name":{"type":"string","description":"The friendly name of this OU."},"parentId":{"type":"string","description":"The unique identifier (ID) of the parent root or OU that you want to create the new OU in."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the newly created OU."}},"requiredInputs":["parentId"]},"aws-native:organizations:Policy":{"description":"Policies in AWS Organizations enable you to manage different features of the AWS accounts in your organization.  You can use policies when all features are enabled in your organization.","properties":{"arn":{"type":"string","description":"ARN of the Policy"},"awsId":{"type":"string","description":"Id of the Policy"},"awsManaged":{"type":"boolean","description":"A boolean value that indicates whether the specified policy is an AWS managed policy. If true, then you can attach the policy to roots, OUs, or accounts, but you cannot edit it."},"content":{"$ref":"pulumi.json#/Any","description":"The Policy text content. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Organizations::Policy` for more information about the expected schema for this property."},"description":{"type":"string","description":"Human readable description of the policy"},"name":{"type":"string","description":"Name of the Policy"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to null."},"targetIds":{"type":"array","items":{"type":"string"},"description":"List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to"},"type":{"$ref":"#/types/aws-native:organizations:PolicyType","description":"The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, BEDROCK_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, INSPECTOR_POLICY, NETWORK_SECURITY_DIRECTOR_POLICY, RESOURCE_CONTROL_POLICY, S3_POLICY, SECURITYHUB_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, UPGRADE_ROLLOUT_POLICY","replaceOnChanges":true}},"type":"object","required":["arn","awsId","awsManaged","content","name","type"],"inputProperties":{"content":{"$ref":"pulumi.json#/Any","description":"The Policy text content. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Organizations::Policy` for more information about the expected schema for this property."},"description":{"type":"string","description":"Human readable description of the policy"},"name":{"type":"string","description":"Name of the Policy"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to null."},"targetIds":{"type":"array","items":{"type":"string"},"description":"List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to"},"type":{"$ref":"#/types/aws-native:organizations:PolicyType","description":"The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, BEDROCK_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, INSPECTOR_POLICY, NETWORK_SECURITY_DIRECTOR_POLICY, RESOURCE_CONTROL_POLICY, S3_POLICY, SECURITYHUB_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, UPGRADE_ROLLOUT_POLICY"}},"requiredInputs":["content","type"]},"aws-native:organizations:ResourcePolicy":{"description":"You can use AWS::Organizations::ResourcePolicy to delegate policy management for AWS Organizations to specified member accounts to perform policy actions that are by default available only to the management account.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource policy."},"awsId":{"type":"string","description":"The unique identifier (ID) associated with this resource policy."},"content":{"$ref":"pulumi.json#/Any","description":"The policy document. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Organizations::ResourcePolicy` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the resource policy"}},"type":"object","required":["arn","awsId","content"],"inputProperties":{"content":{"$ref":"pulumi.json#/Any","description":"The policy document. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Organizations::ResourcePolicy` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags that you want to attach to the resource policy"}},"requiredInputs":["content"]},"aws-native:osis:Pipeline":{"description":"An OpenSearch Ingestion Service Data Prepper pipeline running Data Prepper.","properties":{"bufferOptions":{"$ref":"#/types/aws-native:osis:PipelineBufferOptions","description":"Options that specify the configuration of a persistent buffer. To configure how OpenSearch Ingestion encrypts this data, set the `EncryptionAtRestOptions` . For more information, see [Persistent buffering](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/osis-features-overview.html#persistent-buffering) ."},"encryptionAtRestOptions":{"$ref":"#/types/aws-native:osis:PipelineEncryptionAtRestOptions","description":"Options to control how OpenSearch encrypts buffer data."},"ingestEndpointUrls":{"type":"array","items":{"type":"string"},"description":"A list of endpoints that can be used for ingesting data into a pipeline"},"logPublishingOptions":{"$ref":"#/types/aws-native:osis:PipelineLogPublishingOptions","description":"Key-value pairs that represent log publishing settings."},"maxUnits":{"type":"integer","description":"The maximum pipeline capacity, in Ingestion OpenSearch Compute Units (OCUs)."},"minUnits":{"type":"integer","description":"The minimum pipeline capacity, in Ingestion OpenSearch Compute Units (OCUs)."},"pipelineArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the pipeline."},"pipelineConfigurationBody":{"type":"string","description":"The Data Prepper pipeline configuration."},"pipelineName":{"type":"string","description":"Name of the OpenSearch Ingestion Service pipeline to create. Pipeline names are unique across the pipelines owned by an account within an AWS Region.","replaceOnChanges":true},"pipelineRoleArn":{"type":"string","description":"The Pipeline Role (ARN) for the pipeline."},"resourcePolicy":{"$ref":"#/types/aws-native:osis:PipelineResourcePolicy"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcEndpointService":{"type":"string","description":"The VPC endpoint service name for the pipeline."},"vpcEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:osis:PipelineVpcEndpoint"},"description":"The VPC interface endpoints that have access to the pipeline."},"vpcOptions":{"$ref":"#/types/aws-native:osis:PipelineVpcOptions","description":"Options that specify the subnets and security groups for an OpenSearch Ingestion VPC endpoint."}},"type":"object","required":["ingestEndpointUrls","maxUnits","minUnits","pipelineArn","pipelineConfigurationBody","pipelineName","vpcEndpointService","vpcEndpoints"],"inputProperties":{"bufferOptions":{"$ref":"#/types/aws-native:osis:PipelineBufferOptions","description":"Options that specify the configuration of a persistent buffer. To configure how OpenSearch Ingestion encrypts this data, set the `EncryptionAtRestOptions` . For more information, see [Persistent buffering](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/osis-features-overview.html#persistent-buffering) ."},"encryptionAtRestOptions":{"$ref":"#/types/aws-native:osis:PipelineEncryptionAtRestOptions","description":"Options to control how OpenSearch encrypts buffer data."},"logPublishingOptions":{"$ref":"#/types/aws-native:osis:PipelineLogPublishingOptions","description":"Key-value pairs that represent log publishing settings."},"maxUnits":{"type":"integer","description":"The maximum pipeline capacity, in Ingestion OpenSearch Compute Units (OCUs)."},"minUnits":{"type":"integer","description":"The minimum pipeline capacity, in Ingestion OpenSearch Compute Units (OCUs)."},"pipelineConfigurationBody":{"type":"string","description":"The Data Prepper pipeline configuration."},"pipelineName":{"type":"string","description":"Name of the OpenSearch Ingestion Service pipeline to create. Pipeline names are unique across the pipelines owned by an account within an AWS Region."},"pipelineRoleArn":{"type":"string","description":"The Pipeline Role (ARN) for the pipeline."},"resourcePolicy":{"$ref":"#/types/aws-native:osis:PipelineResourcePolicy"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"vpcOptions":{"$ref":"#/types/aws-native:osis:PipelineVpcOptions","description":"Options that specify the subnets and security groups for an OpenSearch Ingestion VPC endpoint."}},"requiredInputs":["maxUnits","minUnits","pipelineConfigurationBody"]},"aws-native:panorama:ApplicationInstance":{"description":"Creates an application instance and deploys it to a device.","properties":{"applicationInstanceId":{"type":"string","description":"The application instance's ID."},"applicationInstanceIdToReplace":{"type":"string","description":"The ID of an application instance to replace with the new instance.","replaceOnChanges":true},"arn":{"type":"string","description":"The application instance's ARN."},"createdTime":{"type":"integer","description":"The application instance's created time."},"defaultRuntimeContextDevice":{"type":"string","description":"The device's ID.","replaceOnChanges":true},"defaultRuntimeContextDeviceName":{"type":"string","description":"The application instance's default runtime context device name."},"description":{"type":"string","description":"A description for the application instance.","replaceOnChanges":true},"healthStatus":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceHealthStatus","description":"The application instance's health status."},"lastUpdatedTime":{"type":"integer","description":"The application instance's last updated time."},"manifestOverridesPayload":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceManifestOverridesPayload","description":"Setting overrides for the application manifest.","replaceOnChanges":true},"manifestPayload":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceManifestPayload","description":"The application's manifest document.","replaceOnChanges":true},"name":{"type":"string","description":"A name for the application instance.","replaceOnChanges":true},"runtimeRoleArn":{"type":"string","description":"The ARN of a runtime role for the application instance.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceStatus","description":"The application instance's status."},"statusDescription":{"type":"string","description":"The application instance's status description."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the application instance."}},"type":"object","required":["applicationInstanceId","arn","createdTime","defaultRuntimeContextDevice","defaultRuntimeContextDeviceName","healthStatus","lastUpdatedTime","manifestPayload","status","statusDescription"],"inputProperties":{"applicationInstanceIdToReplace":{"type":"string","description":"The ID of an application instance to replace with the new instance."},"defaultRuntimeContextDevice":{"type":"string","description":"The device's ID."},"description":{"type":"string","description":"A description for the application instance."},"manifestOverridesPayload":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceManifestOverridesPayload","description":"Setting overrides for the application manifest."},"manifestPayload":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceManifestPayload","description":"The application's manifest document."},"name":{"type":"string","description":"A name for the application instance."},"runtimeRoleArn":{"type":"string","description":"The ARN of a runtime role for the application instance."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the application instance."}},"requiredInputs":["defaultRuntimeContextDevice","manifestPayload"]},"aws-native:panorama:Package":{"description":"Creates a package and storage location in an Amazon S3 access point.","properties":{"arn":{"type":"string","description":"The package's ARN."},"createdTime":{"type":"integer","description":"When the package was created."},"packageId":{"type":"string","description":"The package's ID."},"packageName":{"type":"string","description":"A name for the package.","replaceOnChanges":true},"storageLocation":{"$ref":"#/types/aws-native:panorama:PackageStorageLocation","description":"A storage location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the package."}},"type":"object","required":["arn","createdTime","packageId","packageName"],"inputProperties":{"packageName":{"type":"string","description":"A name for the package."},"storageLocation":{"$ref":"#/types/aws-native:panorama:PackageStorageLocation","description":"A storage location."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags for the package."}}},"aws-native:panorama:PackageVersion":{"description":"Registers a package version.","properties":{"isLatestPatch":{"type":"boolean","description":"Whether the package version is the latest version."},"markLatest":{"type":"boolean","description":"Whether to mark the new version as the latest version."},"ownerAccount":{"type":"string","description":"An owner account.","replaceOnChanges":true},"packageArn":{"type":"string","description":"The package version's ARN."},"packageId":{"type":"string","description":"A package ID.","replaceOnChanges":true},"packageName":{"type":"string","description":"The package version's name."},"packageVersion":{"type":"string","description":"A package version.","language":{"csharp":{"name":"PackageVersionValue"}},"replaceOnChanges":true},"patchVersion":{"type":"string","description":"A patch version.","replaceOnChanges":true},"registeredTime":{"type":"integer","description":"The package version's registered time."},"status":{"$ref":"#/types/aws-native:panorama:PackageVersionStatus","description":"The package version's status."},"statusDescription":{"type":"string","description":"The package version's status description."},"updatedLatestPatchVersion":{"type":"string","description":"If the version was marked latest, the new version to maker as latest."}},"type":"object","required":["isLatestPatch","packageArn","packageId","packageName","packageVersion","patchVersion","registeredTime","status","statusDescription"],"inputProperties":{"markLatest":{"type":"boolean","description":"Whether to mark the new version as the latest version."},"ownerAccount":{"type":"string","description":"An owner account."},"packageId":{"type":"string","description":"A package ID."},"packageVersion":{"type":"string","description":"A package version.","language":{"csharp":{"name":"PackageVersionValue"}}},"patchVersion":{"type":"string","description":"A patch version."},"updatedLatestPatchVersion":{"type":"string","description":"If the version was marked latest, the new version to maker as latest."}},"requiredInputs":["packageId","packageVersion","patchVersion"]},"aws-native:paymentcryptography:Alias":{"description":"Definition of AWS::PaymentCryptography::Alias Resource Type","properties":{"aliasName":{"type":"string","description":"A friendly name that you can use to refer to a key. The value must begin with `alias/` .\n\n\u003e Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in AWS CloudTrail logs and other output.","replaceOnChanges":true},"keyArn":{"type":"string","description":"The `KeyARN` of the key associated with the alias."}},"type":"object","required":["aliasName"],"inputProperties":{"aliasName":{"type":"string","description":"A friendly name that you can use to refer to a key. The value must begin with `alias/` .\n\n\u003e Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in AWS CloudTrail logs and other output."},"keyArn":{"type":"string","description":"The `KeyARN` of the key associated with the alias."}}},"aws-native:paymentcryptography:Key":{"description":"Definition of AWS::PaymentCryptography::Key Resource Type","properties":{"deriveKeyUsage":{"$ref":"#/types/aws-native:paymentcryptography:KeyDeriveKeyUsage","description":"The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec."},"enabled":{"type":"boolean","description":"Specifies whether the key is enabled."},"exportable":{"type":"boolean","description":"Specifies whether the key is exportable. This data is immutable after the key is created."},"keyAttributes":{"$ref":"#/types/aws-native:paymentcryptography:KeyAttributes","description":"The role of the key, the algorithm it supports, and the cryptographic operations allowed with the key. This data is immutable after the key is created."},"keyCheckValueAlgorithm":{"$ref":"#/types/aws-native:paymentcryptography:KeyCheckValueAlgorithm","description":"The algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity.\n\nFor TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result."},"keyIdentifier":{"type":"string"},"keyOrigin":{"$ref":"#/types/aws-native:paymentcryptography:KeyOrigin","description":"The source of the key material. For keys created within AWS Payment Cryptography, the value is `AWS_PAYMENT_CRYPTOGRAPHY` . For keys imported into AWS Payment Cryptography, the value is `EXTERNAL` ."},"keyState":{"$ref":"#/types/aws-native:paymentcryptography:KeyState","description":"The state of key that is being created or deleted."},"replicationRegions":{"type":"array","items":{"type":"string"},"description":"The list of AWS Regions to remove from the key's replication configuration.\n\nThe key will no longer be available for cryptographic operations in these regions after removal. Ensure no active operations depend on the key in these regions before removal."},"replicationStatus":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:paymentcryptography:KeyReplicationStatusType"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"type":"object","required":["exportable","keyAttributes","keyIdentifier","keyOrigin","keyState","replicationStatus"],"inputProperties":{"deriveKeyUsage":{"$ref":"#/types/aws-native:paymentcryptography:KeyDeriveKeyUsage","description":"The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec."},"enabled":{"type":"boolean","description":"Specifies whether the key is enabled."},"exportable":{"type":"boolean","description":"Specifies whether the key is exportable. This data is immutable after the key is created."},"keyAttributes":{"$ref":"#/types/aws-native:paymentcryptography:KeyAttributes","description":"The role of the key, the algorithm it supports, and the cryptographic operations allowed with the key. This data is immutable after the key is created."},"keyCheckValueAlgorithm":{"$ref":"#/types/aws-native:paymentcryptography:KeyCheckValueAlgorithm","description":"The algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity.\n\nFor TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result."},"replicationRegions":{"type":"array","items":{"type":"string"},"description":"The list of AWS Regions to remove from the key's replication configuration.\n\nThe key will no longer be available for cryptographic operations in these regions after removal. Ensure no active operations depend on the key in these regions before removal."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["exportable","keyAttributes"]},"aws-native:pcaconnectorad:Connector":{"description":"Represents a Connector that connects AWS PrivateCA and your directory","properties":{"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate authority being used.","replaceOnChanges":true},"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) ."},"directoryId":{"type":"string","description":"The identifier of the Active Directory.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata assigned to a connector consisting of a key-value pair."},"vpcInformation":{"$ref":"#/types/aws-native:pcaconnectorad:ConnectorVpcInformation","description":"Information of the VPC and security group(s) used with the connector.","replaceOnChanges":true}},"type":"object","required":["certificateAuthorityArn","connectorArn","directoryId","vpcInformation"],"inputProperties":{"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate authority being used."},"directoryId":{"type":"string","description":"The identifier of the Active Directory."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata assigned to a connector consisting of a key-value pair."},"vpcInformation":{"$ref":"#/types/aws-native:pcaconnectorad:ConnectorVpcInformation","description":"Information of the VPC and security group(s) used with the connector."}},"requiredInputs":["certificateAuthorityArn","directoryId","vpcInformation"]},"aws-native:pcaconnectorad:DirectoryRegistration":{"description":"Definition of AWS::PCAConnectorAD::DirectoryRegistration Resource Type","properties":{"directoryId":{"type":"string","description":"The identifier of the Active Directory.","replaceOnChanges":true},"directoryRegistrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateDirectoryRegistration](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateDirectoryRegistration.html) ."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata assigned to a directory registration consisting of a key-value pair."}},"type":"object","required":["directoryId","directoryRegistrationArn"],"inputProperties":{"directoryId":{"type":"string","description":"The identifier of the Active Directory."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata assigned to a directory registration consisting of a key-value pair."}},"requiredInputs":["directoryId"]},"aws-native:pcaconnectorad:ServicePrincipalName":{"description":"Definition of AWS::PCAConnectorAD::ServicePrincipalName Resource Type","properties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector.html](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) .","replaceOnChanges":true},"directoryRegistrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateDirectoryRegistration](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateDirectoryRegistration.html) .","replaceOnChanges":true}},"type":"object","inputProperties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector.html](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) ."},"directoryRegistrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateDirectoryRegistration](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateDirectoryRegistration.html) ."}}},"aws-native:pcaconnectorad:Template":{"description":"Represents a template that defines certificate configurations, both for issuance and client handling","properties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) .","replaceOnChanges":true},"definition":{"oneOf":[{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition0Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition1Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition2Properties"}],"description":"Template configuration to define the information included in certificates. Define certificate validity and renewal periods, certificate request handling and enrollment options, key usage extensions, application policies, and cryptography settings."},"name":{"type":"string","description":"Name of the templates. Template names must be unique.","replaceOnChanges":true},"reenrollAllCertificateHolders":{"type":"boolean","description":"This setting allows the major version of a template to be increased automatically. All members of Active Directory groups that are allowed to enroll with a template will receive a new certificate issued using that template."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata assigned to a template consisting of a key-value pair."},"templateArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateTemplate](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html) ."}},"type":"object","required":["connectorArn","definition","name","templateArn"],"inputProperties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) ."},"definition":{"oneOf":[{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition0Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition1Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition2Properties"}],"description":"Template configuration to define the information included in certificates. Define certificate validity and renewal periods, certificate request handling and enrollment options, key usage extensions, application policies, and cryptography settings."},"name":{"type":"string","description":"Name of the templates. Template names must be unique."},"reenrollAllCertificateHolders":{"type":"boolean","description":"This setting allows the major version of a template to be increased automatically. All members of Active Directory groups that are allowed to enroll with a template will receive a new certificate issued using that template."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Metadata assigned to a template consisting of a key-value pair."}},"requiredInputs":["connectorArn","definition"]},"aws-native:pcaconnectorad:TemplateGroupAccessControlEntry":{"description":"Definition of AWS::PCAConnectorAD::TemplateGroupAccessControlEntry Resource Type","properties":{"accessRights":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGroupAccessControlEntryAccessRights","description":"Permissions to allow or deny an Active Directory group to enroll or autoenroll certificates issued against a template."},"groupDisplayName":{"type":"string","description":"Name of the Active Directory group. This name does not need to match the group name in Active Directory."},"groupSecurityIdentifier":{"type":"string","description":"Security identifier (SID) of the group object from Active Directory. The SID starts with \"S-\".","replaceOnChanges":true},"templateArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateTemplate](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html) .","replaceOnChanges":true}},"type":"object","required":["accessRights","groupDisplayName"],"inputProperties":{"accessRights":{"$ref":"#/types/aws-native:pcaconnectorad:TemplateGroupAccessControlEntryAccessRights","description":"Permissions to allow or deny an Active Directory group to enroll or autoenroll certificates issued against a template."},"groupDisplayName":{"type":"string","description":"Name of the Active Directory group. This name does not need to match the group name in Active Directory."},"groupSecurityIdentifier":{"type":"string","description":"Security identifier (SID) of the group object from Active Directory. The SID starts with \"S-\"."},"templateArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateTemplate](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html) ."}},"requiredInputs":["accessRights","groupDisplayName"]},"aws-native:pcaconnectorscep:Challenge":{"description":"Represents a SCEP Challenge that is used for certificate enrollment","properties":{"challengeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the challenge."},"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connector.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"type":"object","required":["challengeArn","connectorArn"],"inputProperties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connector."},"tags":{"type":"object","additionalProperties":{"type":"string"}}},"requiredInputs":["connectorArn"]},"aws-native:pcaconnectorscep:Connector":{"description":"Represents a Connector that allows certificate issuance through Simple Certificate Enrollment Protocol (SCEP)","properties":{"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate authority associated with the connector.","replaceOnChanges":true},"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connector."},"endpoint":{"type":"string","description":"The connector's HTTPS public SCEP URL."},"mobileDeviceManagement":{"$ref":"#/types/aws-native:pcaconnectorscep:ConnectorMobileDeviceManagement","description":"Contains settings relevant to the mobile device management system that you chose for the connector. If you didn't configure `MobileDeviceManagement` , then the connector is for general-purpose use and this object is empty.","replaceOnChanges":true},"openIdConfiguration":{"$ref":"#/types/aws-native:pcaconnectorscep:ConnectorOpenIdConfiguration"},"tags":{"type":"object","additionalProperties":{"type":"string"}},"type":{"$ref":"#/types/aws-native:pcaconnectorscep:ConnectorType","description":"The connector type."},"vpcEndpointId":{"type":"string","replaceOnChanges":true}},"type":"object","required":["certificateAuthorityArn","connectorArn","endpoint","openIdConfiguration","type"],"inputProperties":{"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate authority associated with the connector."},"mobileDeviceManagement":{"$ref":"#/types/aws-native:pcaconnectorscep:ConnectorMobileDeviceManagement","description":"Contains settings relevant to the mobile device management system that you chose for the connector. If you didn't configure `MobileDeviceManagement` , then the connector is for general-purpose use and this object is empty."},"tags":{"type":"object","additionalProperties":{"type":"string"}},"vpcEndpointId":{"type":"string"}},"requiredInputs":["certificateAuthorityArn"]},"aws-native:pcs:Cluster":{"description":"AWS::PCS::Cluster resource creates an AWS PCS cluster.","properties":{"arn":{"type":"string","description":"The unique Amazon Resource Name (ARN) of the cluster."},"awsId":{"type":"string","description":"The generated unique ID of the cluster."},"endpoints":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:ClusterEndpoint"},"description":"The list of endpoints available for interaction with the scheduler."},"errorInfo":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:ClusterErrorInfo"},"description":"The list of errors that occurred during cluster provisioning."},"name":{"type":"string","description":"The name that identifies the cluster.","replaceOnChanges":true},"networking":{"$ref":"#/types/aws-native:pcs:NetworkingProperties","description":"The networking configuration for the cluster's control plane.","replaceOnChanges":true},"scheduler":{"$ref":"#/types/aws-native:pcs:SchedulerProperties","description":"The cluster management and job scheduling software associated with the cluster.","replaceOnChanges":true},"size":{"$ref":"#/types/aws-native:pcs:ClusterSize","description":"The size of the cluster.","replaceOnChanges":true},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"Additional options related to the Slurm scheduler."},"status":{"$ref":"#/types/aws-native:pcs:ClusterStatus","description":"The provisioning status of the cluster. The provisioning status doesn't indicate the overall health of the cluster."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string."}},"type":"object","required":["arn","awsId","endpoints","errorInfo","networking","scheduler","size","status"],"inputProperties":{"name":{"type":"string","description":"The name that identifies the cluster."},"networking":{"$ref":"#/types/aws-native:pcs:NetworkingProperties","description":"The networking configuration for the cluster's control plane."},"scheduler":{"$ref":"#/types/aws-native:pcs:SchedulerProperties","description":"The cluster management and job scheduling software associated with the cluster."},"size":{"$ref":"#/types/aws-native:pcs:ClusterSize","description":"The size of the cluster."},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"Additional options related to the Slurm scheduler."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string."}},"requiredInputs":["networking","scheduler","size"]},"aws-native:pcs:ComputeNodeGroup":{"description":"AWS::PCS::ComputeNodeGroup resource creates an AWS PCS compute node group.","properties":{"amiId":{"type":"string","description":"The ID of the Amazon Machine Image (AMI) that AWS PCS uses to launch instances. If not provided, AWS PCS uses the AMI ID specified in the custom launch template."},"arn":{"type":"string","description":"The unique Amazon Resource Name (ARN) of the compute node group."},"awsId":{"type":"string","description":"The generated unique ID of the compute node group."},"clusterId":{"type":"string","description":"The ID of the cluster of the compute node group.","replaceOnChanges":true},"customLaunchTemplate":{"$ref":"#/types/aws-native:pcs:CustomLaunchTemplateProperties","description":"An Amazon EC2 launch template AWS PCS uses to launch compute nodes."},"errorInfo":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupErrorInfo"},"description":"The list of errors that occurred during compute node group provisioning."},"iamInstanceProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have pcs:RegisterComputeNodeGroupInstance permissions attached to provision instances correctly."},"instanceConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupInstanceConfig"},"description":"A list of EC2 instance configurations that AWS PCS can provision in the compute node group.","replaceOnChanges":true},"name":{"type":"string","description":"The name that identifies the compute node group.","replaceOnChanges":true},"purchaseOption":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupPurchaseOption","description":"Specifies how EC2 instances are purchased on your behalf. AWS PCS supports On-Demand, Spot and Capacity Block instances. For more information, see Instance purchasing options in the Amazon Elastic Compute Cloud User Guide. If you don't provide this option, it defaults to On-Demand."},"scalingConfiguration":{"$ref":"#/types/aws-native:pcs:ScalingConfigurationProperties","description":"Specifies the boundaries of the compute node group auto scaling."},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"Additional options related to the Slurm scheduler."},"spotOptions":{"$ref":"#/types/aws-native:pcs:SpotOptionsProperties","description":"Additional configuration when you specify SPOT as the purchase option."},"status":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupStatus","description":"The provisioning status of the compute node group. The provisioning status doesn't indicate the overall health of the compute node group."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of subnet IDs where instances are provisioned by the compute node group. The subnets must be in the same VPC as the cluster."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string."}},"type":"object","required":["arn","awsId","clusterId","customLaunchTemplate","errorInfo","iamInstanceProfileArn","instanceConfigs","scalingConfiguration","status","subnetIds"],"inputProperties":{"amiId":{"type":"string","description":"The ID of the Amazon Machine Image (AMI) that AWS PCS uses to launch instances. If not provided, AWS PCS uses the AMI ID specified in the custom launch template."},"clusterId":{"type":"string","description":"The ID of the cluster of the compute node group."},"customLaunchTemplate":{"$ref":"#/types/aws-native:pcs:CustomLaunchTemplateProperties","description":"An Amazon EC2 launch template AWS PCS uses to launch compute nodes."},"iamInstanceProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have pcs:RegisterComputeNodeGroupInstance permissions attached to provision instances correctly."},"instanceConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupInstanceConfig"},"description":"A list of EC2 instance configurations that AWS PCS can provision in the compute node group."},"name":{"type":"string","description":"The name that identifies the compute node group."},"purchaseOption":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupPurchaseOption","description":"Specifies how EC2 instances are purchased on your behalf. AWS PCS supports On-Demand, Spot and Capacity Block instances. For more information, see Instance purchasing options in the Amazon Elastic Compute Cloud User Guide. If you don't provide this option, it defaults to On-Demand."},"scalingConfiguration":{"$ref":"#/types/aws-native:pcs:ScalingConfigurationProperties","description":"Specifies the boundaries of the compute node group auto scaling."},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"Additional options related to the Slurm scheduler."},"spotOptions":{"$ref":"#/types/aws-native:pcs:SpotOptionsProperties","description":"Additional configuration when you specify SPOT as the purchase option."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of subnet IDs where instances are provisioned by the compute node group. The subnets must be in the same VPC as the cluster."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string."}},"requiredInputs":["clusterId","customLaunchTemplate","iamInstanceProfileArn","instanceConfigs","scalingConfiguration","subnetIds"]},"aws-native:pcs:Queue":{"description":"AWS::PCS::Queue resource creates an AWS PCS queue.","properties":{"arn":{"type":"string","description":"The unique Amazon Resource Name (ARN) of the queue."},"awsId":{"type":"string","description":"The generated unique ID of the queue."},"clusterId":{"type":"string","description":"The ID of the cluster of the queue.","replaceOnChanges":true},"computeNodeGroupConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:QueueComputeNodeGroupConfiguration"},"description":"The list of compute node group configurations associated with the queue. Queues assign jobs to associated compute node groups."},"errorInfo":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:QueueErrorInfo"},"description":"The list of errors that occurred during queue provisioning."},"name":{"type":"string","description":"The name that identifies the queue.","replaceOnChanges":true},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"The Slurm configuration for the queue."},"status":{"$ref":"#/types/aws-native:pcs:QueueStatus","description":"The provisioning status of the queue. The provisioning status doesn't indicate the overall health of the queue."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string."}},"type":"object","required":["arn","awsId","clusterId","errorInfo","status"],"inputProperties":{"clusterId":{"type":"string","description":"The ID of the cluster of the queue."},"computeNodeGroupConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:pcs:QueueComputeNodeGroupConfiguration"},"description":"The list of compute node group configurations associated with the queue. Queues assign jobs to associated compute node groups."},"name":{"type":"string","description":"The name that identifies the queue."},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"The Slurm configuration for the queue."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string."}},"requiredInputs":["clusterId"]},"aws-native:personalize:Dataset":{"description":"Resource schema for AWS::Personalize::Dataset.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDataset = new AwsNative.Personalize.Dataset(\"myDataset\", new()\n    {\n        Name = \"my-dataset-name\",\n        DatasetType = AwsNative.Personalize.DatasetType.Interactions,\n        DatasetGroupArn = \"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\",\n        SchemaArn = \"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\",\n        DatasetImportJob = new AwsNative.Personalize.Inputs.DatasetImportJobArgs\n        {\n            JobName = \"my-import-job-name\",\n            DataSource = new AwsNative.Personalize.Inputs.DatasetImportJobDataSourcePropertiesArgs\n            {\n                DataLocation = \"s3://bucket-name/file-name.csv\",\n            },\n            RoleArn = \"arn:aws:iam::123456789012:role/personalize-role\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewDataset(ctx, \"myDataset\", \u0026personalize.DatasetArgs{\n\t\t\tName:            pulumi.String(\"my-dataset-name\"),\n\t\t\tDatasetType:     personalize.DatasetTypeInteractions,\n\t\t\tDatasetGroupArn: pulumi.String(\"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\"),\n\t\t\tSchemaArn:       pulumi.String(\"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\"),\n\t\t\tDatasetImportJob: \u0026personalize.DatasetImportJobArgs{\n\t\t\t\tJobName: pulumi.String(\"my-import-job-name\"),\n\t\t\t\tDataSource: \u0026personalize.DatasetImportJobDataSourcePropertiesArgs{\n\t\t\t\t\tDataLocation: pulumi.String(\"s3://bucket-name/file-name.csv\"),\n\t\t\t\t},\n\t\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/personalize-role\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDataset = new aws_native.personalize.Dataset(\"myDataset\", {\n    name: \"my-dataset-name\",\n    datasetType: aws_native.personalize.DatasetType.Interactions,\n    datasetGroupArn: \"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\",\n    schemaArn: \"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\",\n    datasetImportJob: {\n        jobName: \"my-import-job-name\",\n        dataSource: {\n            dataLocation: \"s3://bucket-name/file-name.csv\",\n        },\n        roleArn: \"arn:aws:iam::123456789012:role/personalize-role\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dataset = aws_native.personalize.Dataset(\"myDataset\",\n    name=\"my-dataset-name\",\n    dataset_type=aws_native.personalize.DatasetType.INTERACTIONS,\n    dataset_group_arn=\"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\",\n    schema_arn=\"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\",\n    dataset_import_job={\n        \"job_name\": \"my-import-job-name\",\n        \"data_source\": {\n            \"data_location\": \"s3://bucket-name/file-name.csv\",\n        },\n        \"role_arn\": \"arn:aws:iam::123456789012:role/personalize-role\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDataset = new AwsNative.Personalize.Dataset(\"myDataset\", new()\n    {\n        Name = \"my-dataset-name\",\n        DatasetType = AwsNative.Personalize.DatasetType.Interactions,\n        DatasetGroupArn = \"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\",\n        SchemaArn = \"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\",\n        DatasetImportJob = new AwsNative.Personalize.Inputs.DatasetImportJobArgs\n        {\n            JobName = \"my-import-job-name\",\n            DataSource = new AwsNative.Personalize.Inputs.DatasetImportJobDataSourcePropertiesArgs\n            {\n                DataLocation = \"s3://bucket-name/file-name.csv\",\n            },\n            RoleArn = \"arn:aws:iam::123456789012:role/personalize-role\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewDataset(ctx, \"myDataset\", \u0026personalize.DatasetArgs{\n\t\t\tName:            pulumi.String(\"my-dataset-name\"),\n\t\t\tDatasetType:     personalize.DatasetTypeInteractions,\n\t\t\tDatasetGroupArn: pulumi.String(\"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\"),\n\t\t\tSchemaArn:       pulumi.String(\"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\"),\n\t\t\tDatasetImportJob: \u0026personalize.DatasetImportJobArgs{\n\t\t\t\tJobName: pulumi.String(\"my-import-job-name\"),\n\t\t\t\tDataSource: \u0026personalize.DatasetImportJobDataSourcePropertiesArgs{\n\t\t\t\t\tDataLocation: pulumi.String(\"s3://bucket-name/file-name.csv\"),\n\t\t\t\t},\n\t\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/personalize-role\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDataset = new aws_native.personalize.Dataset(\"myDataset\", {\n    name: \"my-dataset-name\",\n    datasetType: aws_native.personalize.DatasetType.Interactions,\n    datasetGroupArn: \"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\",\n    schemaArn: \"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\",\n    datasetImportJob: {\n        jobName: \"my-import-job-name\",\n        dataSource: {\n            dataLocation: \"s3://bucket-name/file-name.csv\",\n        },\n        roleArn: \"arn:aws:iam::123456789012:role/personalize-role\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dataset = aws_native.personalize.Dataset(\"myDataset\",\n    name=\"my-dataset-name\",\n    dataset_type=aws_native.personalize.DatasetType.INTERACTIONS,\n    dataset_group_arn=\"arn:aws:personalize:us-west-2:123456789012:dataset-group/dataset-group-name\",\n    schema_arn=\"arn:aws:personalize:us-west-2:123456789012:schema/schema-name\",\n    dataset_import_job={\n        \"job_name\": \"my-import-job-name\",\n        \"data_source\": {\n            \"data_location\": \"s3://bucket-name/file-name.csv\",\n        },\n        \"role_arn\": \"arn:aws:iam::123456789012:role/personalize-role\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"datasetArn":{"type":"string","description":"The ARN of the dataset"},"datasetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset group to add the dataset to","replaceOnChanges":true},"datasetImportJob":{"$ref":"#/types/aws-native:personalize:DatasetImportJob","description":"Describes a job that imports training data from a data source (Amazon S3 bucket) to an Amazon Personalize dataset. If you specify a dataset import job as part of a dataset, all dataset import job fields are required."},"datasetType":{"$ref":"#/types/aws-native:personalize:DatasetType","description":"The type of dataset","replaceOnChanges":true},"name":{"type":"string","description":"The name for the dataset","replaceOnChanges":true},"schemaArn":{"type":"string","description":"The ARN of the schema to associate with the dataset. The schema defines the dataset fields.","replaceOnChanges":true}},"type":"object","required":["datasetArn","datasetGroupArn","datasetType","name","schemaArn"],"inputProperties":{"datasetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset group to add the dataset to"},"datasetImportJob":{"$ref":"#/types/aws-native:personalize:DatasetImportJob","description":"Describes a job that imports training data from a data source (Amazon S3 bucket) to an Amazon Personalize dataset. If you specify a dataset import job as part of a dataset, all dataset import job fields are required."},"datasetType":{"$ref":"#/types/aws-native:personalize:DatasetType","description":"The type of dataset"},"name":{"type":"string","description":"The name for the dataset"},"schemaArn":{"type":"string","description":"The ARN of the schema to associate with the dataset. The schema defines the dataset fields."}},"requiredInputs":["datasetGroupArn","datasetType","schemaArn"]},"aws-native:personalize:DatasetGroup":{"description":"Resource Schema for AWS::Personalize::DatasetGroup.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDatasetGroup = new AwsNative.Personalize.DatasetGroup(\"myDatasetGroup\", new()\n    {\n        Name = \"my-dataset-group-name\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewDatasetGroup(ctx, \"myDatasetGroup\", \u0026personalize.DatasetGroupArgs{\n\t\t\tName: pulumi.String(\"my-dataset-group-name\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDatasetGroup = new aws_native.personalize.DatasetGroup(\"myDatasetGroup\", {name: \"my-dataset-group-name\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dataset_group = aws_native.personalize.DatasetGroup(\"myDatasetGroup\", name=\"my-dataset-group-name\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDatasetGroup = new AwsNative.Personalize.DatasetGroup(\"myDatasetGroup\", new()\n    {\n        Name = \"my-dataset-group-name\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewDatasetGroup(ctx, \"myDatasetGroup\", \u0026personalize.DatasetGroupArgs{\n\t\t\tName: pulumi.String(\"my-dataset-group-name\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDatasetGroup = new aws_native.personalize.DatasetGroup(\"myDatasetGroup\", {name: \"my-dataset-group-name\"});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dataset_group = aws_native.personalize.DatasetGroup(\"myDatasetGroup\", name=\"my-dataset-group-name\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"datasetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset group."},"domain":{"$ref":"#/types/aws-native:personalize:DatasetGroupDomain","description":"The domain of a Domain dataset group.","replaceOnChanges":true},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name(ARN) of a AWS Key Management Service (KMS) key used to encrypt the datasets.","replaceOnChanges":true},"name":{"type":"string","description":"The name for the new dataset group.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the AWS Identity and Access Management (IAM) role that has permissions to access the AWS Key Management Service (KMS) key. Supplying an IAM role is only valid when also specifying a KMS key.","replaceOnChanges":true}},"type":"object","required":["datasetGroupArn","name"],"inputProperties":{"domain":{"$ref":"#/types/aws-native:personalize:DatasetGroupDomain","description":"The domain of a Domain dataset group."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name(ARN) of a AWS Key Management Service (KMS) key used to encrypt the datasets."},"name":{"type":"string","description":"The name for the new dataset group."},"roleArn":{"type":"string","description":"The ARN of the AWS Identity and Access Management (IAM) role that has permissions to access the AWS Key Management Service (KMS) key. Supplying an IAM role is only valid when also specifying a KMS key."}}},"aws-native:personalize:Schema":{"description":"Resource schema for AWS::Personalize::Schema.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var mySchema = new AwsNative.Personalize.Schema(\"mySchema\", new()\n    {\n        Name = \"my-schema-name\",\n        SchemaValue = \"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewSchema(ctx, \"mySchema\", \u0026personalize.SchemaArgs{\n\t\t\tName:   pulumi.String(\"my-schema-name\"),\n\t\t\tSchema: pulumi.String(\"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst mySchema = new aws_native.personalize.Schema(\"mySchema\", {\n    name: \"my-schema-name\",\n    schema: \"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_schema = aws_native.personalize.Schema(\"mySchema\",\n    name=\"my-schema-name\",\n    schema=\"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var mySchema = new AwsNative.Personalize.Schema(\"mySchema\", new()\n    {\n        Name = \"my-schema-name\",\n        SchemaValue = \"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewSchema(ctx, \"mySchema\", \u0026personalize.SchemaArgs{\n\t\t\tName:   pulumi.String(\"my-schema-name\"),\n\t\t\tSchema: pulumi.String(\"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst mySchema = new aws_native.personalize.Schema(\"mySchema\", {\n    name: \"my-schema-name\",\n    schema: \"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_schema = aws_native.personalize.Schema(\"mySchema\",\n    name=\"my-schema-name\",\n    schema=\"{\\\"type\\\": \\\"record\\\",\\\"name\\\": \\\"Interactions\\\", \\\"namespace\\\": \\\"com.amazonaws.personalize.schema\\\", \\\"fields\\\": [ { \\\"name\\\": \\\"USER_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"ITEM_ID\\\", \\\"type\\\": \\\"string\\\" }, { \\\"name\\\": \\\"TIMESTAMP\\\", \\\"type\\\": \\\"long\\\"}], \\\"version\\\": \\\"1.0\\\"}\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"domain":{"$ref":"#/types/aws-native:personalize:SchemaDomain","description":"The domain of a Domain dataset group.","replaceOnChanges":true},"name":{"type":"string","description":"Name for the schema.","replaceOnChanges":true},"schema":{"type":"string","description":"A schema in Avro JSON format.","language":{"csharp":{"name":"SchemaValue"}},"replaceOnChanges":true},"schemaArn":{"type":"string","description":"Arn for the schema."}},"type":"object","required":["name","schema","schemaArn"],"inputProperties":{"domain":{"$ref":"#/types/aws-native:personalize:SchemaDomain","description":"The domain of a Domain dataset group."},"name":{"type":"string","description":"Name for the schema."},"schema":{"type":"string","description":"A schema in Avro JSON format.","language":{"csharp":{"name":"SchemaValue"}}}},"requiredInputs":["schema"]},"aws-native:personalize:Solution":{"description":"Resource schema for AWS::Personalize::Solution.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var mySolution = new AwsNative.Personalize.Solution(\"mySolution\", new()\n    {\n        Name = \"my-solution-name\",\n        DatasetGroupArn = \"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\",\n        RecipeArn = \"arn:aws:personalize:::recipe/aws-user-personalization\",\n        SolutionConfig = new AwsNative.Personalize.Inputs.SolutionConfigArgs\n        {\n            EventValueThreshold = \".05\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewSolution(ctx, \"mySolution\", \u0026personalize.SolutionArgs{\n\t\t\tName:            pulumi.String(\"my-solution-name\"),\n\t\t\tDatasetGroupArn: pulumi.String(\"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\"),\n\t\t\tRecipeArn:       pulumi.String(\"arn:aws:personalize:::recipe/aws-user-personalization\"),\n\t\t\tSolutionConfig: \u0026personalize.SolutionConfigArgs{\n\t\t\t\tEventValueThreshold: pulumi.String(\".05\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst mySolution = new aws_native.personalize.Solution(\"mySolution\", {\n    name: \"my-solution-name\",\n    datasetGroupArn: \"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\",\n    recipeArn: \"arn:aws:personalize:::recipe/aws-user-personalization\",\n    solutionConfig: {\n        eventValueThreshold: \".05\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_solution = aws_native.personalize.Solution(\"mySolution\",\n    name=\"my-solution-name\",\n    dataset_group_arn=\"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\",\n    recipe_arn=\"arn:aws:personalize:::recipe/aws-user-personalization\",\n    solution_config={\n        \"event_value_threshold\": \".05\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var mySolution = new AwsNative.Personalize.Solution(\"mySolution\", new()\n    {\n        Name = \"my-solution-name\",\n        DatasetGroupArn = \"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\",\n        RecipeArn = \"arn:aws:personalize:::recipe/aws-user-personalization\",\n        SolutionConfig = new AwsNative.Personalize.Inputs.SolutionConfigArgs\n        {\n            EventValueThreshold = \".05\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/personalize\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := personalize.NewSolution(ctx, \"mySolution\", \u0026personalize.SolutionArgs{\n\t\t\tName:            pulumi.String(\"my-solution-name\"),\n\t\t\tDatasetGroupArn: pulumi.String(\"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\"),\n\t\t\tRecipeArn:       pulumi.String(\"arn:aws:personalize:::recipe/aws-user-personalization\"),\n\t\t\tSolutionConfig: \u0026personalize.SolutionConfigArgs{\n\t\t\t\tEventValueThreshold: pulumi.String(\".05\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst mySolution = new aws_native.personalize.Solution(\"mySolution\", {\n    name: \"my-solution-name\",\n    datasetGroupArn: \"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\",\n    recipeArn: \"arn:aws:personalize:::recipe/aws-user-personalization\",\n    solutionConfig: {\n        eventValueThreshold: \".05\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_solution = aws_native.personalize.Solution(\"mySolution\",\n    name=\"my-solution-name\",\n    dataset_group_arn=\"arn:aws:personalize:us-west-2:123456789012:dataset-group/my-dataset-group-name\",\n    recipe_arn=\"arn:aws:personalize:::recipe/aws-user-personalization\",\n    solution_config={\n        \"event_value_threshold\": \".05\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"datasetGroupArn":{"type":"string","description":"The ARN of the dataset group that provides the training data.","replaceOnChanges":true},"eventType":{"type":"string","description":"When your have multiple event types (using an EVENT_TYPE schema field), this parameter specifies which event type (for example, 'click' or 'like') is used for training the model. If you do not provide an eventType, Amazon Personalize will use all interactions for training with equal weight regardless of type.","replaceOnChanges":true},"name":{"type":"string","description":"The name for the solution","replaceOnChanges":true},"performAutoMl":{"type":"boolean","description":"Whether to perform automated machine learning (AutoML). The default is false. For this case, you must specify recipeArn.","replaceOnChanges":true},"performHpo":{"type":"boolean","description":"Whether to perform hyperparameter optimization (HPO) on the specified or selected recipe. The default is false. When performing AutoML, this parameter is always true and you should not set it to false.","replaceOnChanges":true},"recipeArn":{"type":"string","description":"The ARN of the recipe to use for model training. Only specified when performAutoML is false.","replaceOnChanges":true},"solutionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the solution."},"solutionConfig":{"$ref":"#/types/aws-native:personalize:SolutionConfig","description":"Describes the configuration properties for the solution.","replaceOnChanges":true}},"type":"object","required":["datasetGroupArn","name","solutionArn"],"inputProperties":{"datasetGroupArn":{"type":"string","description":"The ARN of the dataset group that provides the training data."},"eventType":{"type":"string","description":"When your have multiple event types (using an EVENT_TYPE schema field), this parameter specifies which event type (for example, 'click' or 'like') is used for training the model. If you do not provide an eventType, Amazon Personalize will use all interactions for training with equal weight regardless of type."},"name":{"type":"string","description":"The name for the solution"},"performAutoMl":{"type":"boolean","description":"Whether to perform automated machine learning (AutoML). The default is false. For this case, you must specify recipeArn."},"performHpo":{"type":"boolean","description":"Whether to perform hyperparameter optimization (HPO) on the specified or selected recipe. The default is false. When performing AutoML, this parameter is always true and you should not set it to false."},"recipeArn":{"type":"string","description":"The ARN of the recipe to use for model training. Only specified when performAutoML is false."},"solutionConfig":{"$ref":"#/types/aws-native:personalize:SolutionConfig","description":"Describes the configuration properties for the solution."}},"requiredInputs":["datasetGroupArn"]},"aws-native:pinpoint:InAppTemplate":{"description":"Resource Type definition for AWS::Pinpoint::InAppTemplate","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the message template."},"content":{"type":"array","items":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateInAppMessageContent"},"description":"An object that contains information about the content of an in-app message, including its title and body text, text colors, background colors, images, buttons, and behaviors."},"customConfig":{"$ref":"pulumi.json#/Any","description":"Custom data, in the form of key-value pairs, that is included in an in-app messaging payload.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Pinpoint::InAppTemplate` for more information about the expected schema for this property."},"layout":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateLayout","description":"A string that determines the appearance of the in-app message. You can specify one of the following:\n\n- `BOTTOM_BANNER` – a message that appears as a banner at the bottom of the page.\n- `TOP_BANNER` – a message that appears as a banner at the top of the page.\n- `OVERLAYS` – a message that covers entire screen.\n- `MOBILE_FEED` – a message that appears in a window in front of the page.\n- `MIDDLE_BANNER` – a message that appears as a banner in the middle of the page.\n- `CAROUSEL` – a scrollable layout of up to five unique messages."},"tags":{"$ref":"pulumi.json#/Any","description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Pinpoint::InAppTemplate` for more information about the expected schema for this property."},"templateDescription":{"type":"string","description":"An optional description of the in-app template."},"templateName":{"type":"string","description":"The name of the in-app message template.","replaceOnChanges":true}},"type":"object","required":["arn","templateName"],"inputProperties":{"content":{"type":"array","items":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateInAppMessageContent"},"description":"An object that contains information about the content of an in-app message, including its title and body text, text colors, background colors, images, buttons, and behaviors."},"customConfig":{"$ref":"pulumi.json#/Any","description":"Custom data, in the form of key-value pairs, that is included in an in-app messaging payload.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Pinpoint::InAppTemplate` for more information about the expected schema for this property."},"layout":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateLayout","description":"A string that determines the appearance of the in-app message. You can specify one of the following:\n\n- `BOTTOM_BANNER` – a message that appears as a banner at the bottom of the page.\n- `TOP_BANNER` – a message that appears as a banner at the top of the page.\n- `OVERLAYS` – a message that covers entire screen.\n- `MOBILE_FEED` – a message that appears in a window in front of the page.\n- `MIDDLE_BANNER` – a message that appears as a banner in the middle of the page.\n- `CAROUSEL` – a scrollable layout of up to five unique messages."},"tags":{"$ref":"pulumi.json#/Any","description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Pinpoint::InAppTemplate` for more information about the expected schema for this property."},"templateDescription":{"type":"string","description":"An optional description of the in-app template."},"templateName":{"type":"string","description":"The name of the in-app message template."}}},"aws-native:pipes:Pipe":{"description":"Definition of AWS::Pipes::Pipe Resource Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testPipe = new AwsNative.Pipes.Pipe(\"testPipe\", new()\n    {\n        Name = \"PipeCfnExample\",\n        RoleArn = \"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\",\n        Source = \"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\",\n        Enrichment = \"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\",\n        Target = \"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/pipes\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := pipes.NewPipe(ctx, \"testPipe\", \u0026pipes.PipeArgs{\n\t\t\tName:       pulumi.String(\"PipeCfnExample\"),\n\t\t\tRoleArn:    pulumi.String(\"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\"),\n\t\t\tSource:     pulumi.String(\"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\"),\n\t\t\tEnrichment: pulumi.String(\"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\"),\n\t\t\tTarget:     pulumi.String(\"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testPipe = new aws_native.pipes.Pipe(\"testPipe\", {\n    name: \"PipeCfnExample\",\n    roleArn: \"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\",\n    source: \"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\",\n    enrichment: \"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\",\n    target: \"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_pipe = aws_native.pipes.Pipe(\"testPipe\",\n    name=\"PipeCfnExample\",\n    role_arn=\"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\",\n    source=\"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\",\n    enrichment=\"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\",\n    target=\"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var testPipe = new AwsNative.Pipes.Pipe(\"testPipe\", new()\n    {\n        Name = \"PipeCfnExample\",\n        RoleArn = \"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\",\n        Source = \"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\",\n        Enrichment = \"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\",\n        Target = \"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/pipes\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := pipes.NewPipe(ctx, \"testPipe\", \u0026pipes.PipeArgs{\n\t\t\tName:       pulumi.String(\"PipeCfnExample\"),\n\t\t\tRoleArn:    pulumi.String(\"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\"),\n\t\t\tSource:     pulumi.String(\"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\"),\n\t\t\tEnrichment: pulumi.String(\"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\"),\n\t\t\tTarget:     pulumi.String(\"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst testPipe = new aws_native.pipes.Pipe(\"testPipe\", {\n    name: \"PipeCfnExample\",\n    roleArn: \"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\",\n    source: \"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\",\n    enrichment: \"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\",\n    target: \"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntest_pipe = aws_native.pipes.Pipe(\"testPipe\",\n    name=\"PipeCfnExample\",\n    role_arn=\"arn:aws:iam::123456789123:role/Pipe-Dev-All-Targets-Dummy-Execution-Role\",\n    source=\"arn:aws:sqs:us-east-1:123456789123:pipeDemoSource\",\n    enrichment=\"arn:aws:execute-api:us-east-1:123456789123:53eo2i89p9/*/POST/pets\",\n    target=\"arn:aws:states:us-east-1:123456789123:stateMachine:PipeTargetStateMachine\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the pipe."},"creationTime":{"type":"string","description":"The time the pipe was created."},"currentState":{"$ref":"#/types/aws-native:pipes:PipeState","description":"The state the pipe is in."},"description":{"type":"string","description":"A description of the pipe."},"desiredState":{"$ref":"#/types/aws-native:pipes:PipeRequestedPipeState","description":"The state the pipe should be in."},"enrichment":{"type":"string","description":"The ARN of the enrichment resource."},"enrichmentParameters":{"$ref":"#/types/aws-native:pipes:PipeEnrichmentParameters","description":"The parameters required to set up enrichment on your pipe."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nTo update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier.\n\nTo update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string.\n\nFor more information, see [Managing keys](https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html) in the *AWS Key Management Service Developer Guide* ."},"lastModifiedTime":{"type":"string","description":"When the pipe was last updated, in [ISO-8601 format](https://docs.aws.amazon.com/https://www.w3.org/TR/NOTE-datetime) (YYYY-MM-DDThh:mm:ss.sTZD)."},"logConfiguration":{"$ref":"#/types/aws-native:pipes:PipeLogConfiguration","description":"The logging configuration settings for the pipe."},"name":{"type":"string","description":"The name of the pipe.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the role that allows the pipe to send data to the target."},"source":{"type":"string","description":"The ARN of the source resource.","replaceOnChanges":true},"sourceParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceParameters","description":"The parameters required to set up a source for your pipe."},"stateReason":{"type":"string","description":"The reason the pipe is in its current state."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The list of key-value pairs to associate with the pipe."},"target":{"type":"string","description":"The ARN of the target resource."},"targetParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetParameters","description":"The parameters required to set up a target for your pipe.\n\nFor more information about pipe target parameters, including how to use dynamic path parameters, see [Target parameters](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-event-target.html) in the *Amazon EventBridge User Guide* ."}},"type":"object","required":["arn","creationTime","currentState","lastModifiedTime","roleArn","source","stateReason","target"],"inputProperties":{"description":{"type":"string","description":"A description of the pipe."},"desiredState":{"$ref":"#/types/aws-native:pipes:PipeRequestedPipeState","description":"The state the pipe should be in."},"enrichment":{"type":"string","description":"The ARN of the enrichment resource."},"enrichmentParameters":{"$ref":"#/types/aws-native:pipes:PipeEnrichmentParameters","description":"The parameters required to set up enrichment on your pipe."},"kmsKeyIdentifier":{"type":"string","description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nTo update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier.\n\nTo update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string.\n\nFor more information, see [Managing keys](https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html) in the *AWS Key Management Service Developer Guide* ."},"logConfiguration":{"$ref":"#/types/aws-native:pipes:PipeLogConfiguration","description":"The logging configuration settings for the pipe."},"name":{"type":"string","description":"The name of the pipe."},"roleArn":{"type":"string","description":"The ARN of the role that allows the pipe to send data to the target."},"source":{"type":"string","description":"The ARN of the source resource."},"sourceParameters":{"$ref":"#/types/aws-native:pipes:PipeSourceParameters","description":"The parameters required to set up a source for your pipe."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The list of key-value pairs to associate with the pipe."},"target":{"type":"string","description":"The ARN of the target resource."},"targetParameters":{"$ref":"#/types/aws-native:pipes:PipeTargetParameters","description":"The parameters required to set up a target for your pipe.\n\nFor more information about pipe target parameters, including how to use dynamic path parameters, see [Target parameters](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-pipes-event-target.html) in the *Amazon EventBridge User Guide* ."}},"requiredInputs":["roleArn","source","target"]},"aws-native:proton:EnvironmentAccountConnection":{"description":"Resource Schema describing various properties for AWS Proton Environment Account Connections resources.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the environment account connection."},"awsId":{"type":"string","description":"The ID of the environment account connection."},"codebuildRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM service role in the environment account. AWS Proton uses this role to provision infrastructure resources using CodeBuild-based provisioning in the associated environment account."},"componentRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role that AWS Proton uses when provisioning directly defined components in the associated environment account. It determines the scope of infrastructure that a component can provision in the account."},"environmentAccountId":{"type":"string","description":"The environment account that's connected to the environment account connection."},"environmentName":{"type":"string","description":"The name of the AWS Proton environment that's created in the associated management account."},"managementAccountId":{"type":"string","description":"The ID of the management account that accepts or rejects the environment account connection. You create an manage the AWS Proton environment in this account. If the management account accepts the environment account connection, AWS Proton can use the associated IAM role to provision environment infrastructure resources in the associated environment account."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role that's created in the environment account. AWS Proton uses this role to provision infrastructure resources in the associated environment account."},"status":{"$ref":"#/types/aws-native:proton:EnvironmentAccountConnectionStatus","description":"The status of the environment account connection."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton environment account connection. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e"}},"type":"object","required":["arn","awsId","status"],"inputProperties":{"codebuildRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM service role in the environment account. AWS Proton uses this role to provision infrastructure resources using CodeBuild-based provisioning in the associated environment account."},"componentRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role that AWS Proton uses when provisioning directly defined components in the associated environment account. It determines the scope of infrastructure that a component can provision in the account."},"environmentAccountId":{"type":"string","description":"The environment account that's connected to the environment account connection."},"environmentName":{"type":"string","description":"The name of the AWS Proton environment that's created in the associated management account."},"managementAccountId":{"type":"string","description":"The ID of the management account that accepts or rejects the environment account connection. You create an manage the AWS Proton environment in this account. If the management account accepts the environment account connection, AWS Proton can use the associated IAM role to provision environment infrastructure resources in the associated environment account."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role that's created in the environment account. AWS Proton uses this role to provision infrastructure resources in the associated environment account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton environment account connection. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e"}}},"aws-native:proton:EnvironmentTemplate":{"description":"Definition of AWS::Proton::EnvironmentTemplate Resource Type","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the environment template.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eA description of the environment template.\u003c/p\u003e"},"displayName":{"type":"string","description":"\u003cp\u003eThe environment template name as displayed in the developer interface.\u003c/p\u003e"},"encryptionKey":{"type":"string","description":"\u003cp\u003eA customer provided encryption key that Proton uses to encrypt data.\u003c/p\u003e","replaceOnChanges":true},"name":{"type":"string","description":"The name of the environment template.","replaceOnChanges":true},"provisioning":{"$ref":"#/types/aws-native:proton:EnvironmentTemplateProvisioning","description":"When included, indicates that the environment template is for customer provisioned and managed infrastructure.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton environment template. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e"}},"type":"object","required":["arn"],"inputProperties":{"description":{"type":"string","description":"\u003cp\u003eA description of the environment template.\u003c/p\u003e"},"displayName":{"type":"string","description":"\u003cp\u003eThe environment template name as displayed in the developer interface.\u003c/p\u003e"},"encryptionKey":{"type":"string","description":"\u003cp\u003eA customer provided encryption key that Proton uses to encrypt data.\u003c/p\u003e"},"name":{"type":"string","description":"The name of the environment template."},"provisioning":{"$ref":"#/types/aws-native:proton:EnvironmentTemplateProvisioning","description":"When included, indicates that the environment template is for customer provisioned and managed infrastructure."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton environment template. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e"}}},"aws-native:proton:ServiceTemplate":{"description":"Definition of AWS::Proton::ServiceTemplate Resource Type","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the service template.\u003c/p\u003e"},"description":{"type":"string","description":"\u003cp\u003eA description of the service template.\u003c/p\u003e"},"displayName":{"type":"string","description":"\u003cp\u003eThe name of the service template as displayed in the developer interface.\u003c/p\u003e"},"encryptionKey":{"type":"string","description":"\u003cp\u003eA customer provided encryption key that's used to encrypt data.\u003c/p\u003e","replaceOnChanges":true},"name":{"type":"string","description":"The name of the service template.","replaceOnChanges":true},"pipelineProvisioning":{"$ref":"#/types/aws-native:proton:ServiceTemplateProvisioning","description":"If `pipelineProvisioning` is `true` , a service pipeline is included in the service template. Otherwise, a service pipeline *isn't* included in the service template.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton service template. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e"}},"type":"object","required":["arn"],"inputProperties":{"description":{"type":"string","description":"\u003cp\u003eA description of the service template.\u003c/p\u003e"},"displayName":{"type":"string","description":"\u003cp\u003eThe name of the service template as displayed in the developer interface.\u003c/p\u003e"},"encryptionKey":{"type":"string","description":"\u003cp\u003eA customer provided encryption key that's used to encrypt data.\u003c/p\u003e"},"name":{"type":"string","description":"The name of the service template."},"pipelineProvisioning":{"$ref":"#/types/aws-native:proton:ServiceTemplateProvisioning","description":"If `pipelineProvisioning` is `true` , a service pipeline is included in the service template. Otherwise, a service pipeline *isn't* included in the service template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton service template. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e"}}},"aws-native:qbusiness:Application":{"description":"Definition of AWS::QBusiness::Application Resource Type","properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q Business application."},"applicationId":{"type":"string","description":"The identifier for the Amazon Q Business application."},"attachmentsConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationAttachmentsConfiguration","description":"Configuration information for the file upload during chat feature."},"autoSubscriptionConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationAutoSubscriptionConfiguration","description":"Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management."},"clientIdsForOidc":{"type":"array","items":{"type":"string"},"description":"The OIDC client ID for a Amazon Q Business application.","replaceOnChanges":true},"createdAt":{"type":"string","description":"The Unix timestamp when the Amazon Q Business application was created."},"description":{"type":"string","description":"A description for the Amazon Q Business application."},"displayName":{"type":"string","description":"The name of the Amazon Q Business application."},"encryptionConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationEncryptionConfiguration","description":"Provides the identifier of the AWS  key used to encrypt data indexed by Amazon Q Business. Amazon Q Business doesn't support asymmetric keys.","replaceOnChanges":true},"iamIdentityProviderArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an identity provider being used by an Amazon Q Business application.","replaceOnChanges":true},"identityCenterApplicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS SSO instance attached to your Amazon Q Business application."},"identityCenterInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM Identity Center instance you are either creating for—or connecting to—your Amazon Q Business application.\n\n*Required* : `Yes`"},"identityType":{"$ref":"#/types/aws-native:qbusiness:ApplicationIdentityType","description":"The authentication type being used by a Amazon Q Business application.","replaceOnChanges":true},"personalizationConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationPersonalizationConfiguration","description":"Configuration information about chat response personalization. For more information, see [Personalizing chat responses](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html) ."},"qAppsConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationQAppsConfiguration","description":"Configuration information about Amazon Q Apps."},"quickSightConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationQuickSightConfiguration","description":"The Amazon Quick Suite configuration for an Amazon Q Business application that uses Quick Suite as the identity provider.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics. If this property is not specified, Amazon Q Business will create a [service linked role (SLR)](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/using-service-linked-roles.html#slr-permissions) and use it as the application's role."},"status":{"$ref":"#/types/aws-native:qbusiness:ApplicationStatus","description":"The status of the Amazon Q Business application. The application is ready to use when the status is `ACTIVE` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"updatedAt":{"type":"string","description":"The Unix timestamp when the Amazon Q Business application was last updated."}},"type":"object","required":["applicationArn","applicationId","createdAt","displayName","identityCenterApplicationArn","status","updatedAt"],"inputProperties":{"attachmentsConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationAttachmentsConfiguration","description":"Configuration information for the file upload during chat feature."},"autoSubscriptionConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationAutoSubscriptionConfiguration","description":"Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management."},"clientIdsForOidc":{"type":"array","items":{"type":"string"},"description":"The OIDC client ID for a Amazon Q Business application."},"description":{"type":"string","description":"A description for the Amazon Q Business application."},"displayName":{"type":"string","description":"The name of the Amazon Q Business application."},"encryptionConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationEncryptionConfiguration","description":"Provides the identifier of the AWS  key used to encrypt data indexed by Amazon Q Business. Amazon Q Business doesn't support asymmetric keys."},"iamIdentityProviderArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an identity provider being used by an Amazon Q Business application."},"identityCenterInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM Identity Center instance you are either creating for—or connecting to—your Amazon Q Business application.\n\n*Required* : `Yes`"},"identityType":{"$ref":"#/types/aws-native:qbusiness:ApplicationIdentityType","description":"The authentication type being used by a Amazon Q Business application."},"personalizationConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationPersonalizationConfiguration","description":"Configuration information about chat response personalization. For more information, see [Personalizing chat responses](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html) ."},"qAppsConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationQAppsConfiguration","description":"Configuration information about Amazon Q Apps."},"quickSightConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationQuickSightConfiguration","description":"The Amazon Quick Suite configuration for an Amazon Q Business application that uses Quick Suite as the identity provider."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics. If this property is not specified, Amazon Q Business will create a [service linked role (SLR)](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/using-service-linked-roles.html#slr-permissions) and use it as the application's role."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."}},"requiredInputs":["displayName"]},"aws-native:qbusiness:DataAccessor":{"description":"Definition of AWS::QBusiness::DataAccessor Resource Type","properties":{"actionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:DataAccessorActionConfiguration"},"description":"A list of action configurations specifying the allowed actions and any associated filters."},"applicationId":{"type":"string","description":"The unique identifier of the Amazon Q Business application.","replaceOnChanges":true},"authenticationDetail":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAuthenticationDetail","description":"The authentication configuration details for the data accessor. This specifies how the ISV authenticates when accessing data through this data accessor."},"createdAt":{"type":"string","description":"The timestamp when the data accessor was created."},"dataAccessorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data accessor."},"dataAccessorId":{"type":"string","description":"The unique identifier of the data accessor."},"displayName":{"type":"string","description":"The friendly name of the data accessor."},"idcApplicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the associated IAM Identity Center application."},"principal":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role for the ISV associated with this data accessor.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to associate with the data accessor."},"updatedAt":{"type":"string","description":"The timestamp when the data accessor was last updated."}},"type":"object","required":["actionConfigurations","applicationId","createdAt","dataAccessorArn","dataAccessorId","displayName","idcApplicationArn","principal","updatedAt"],"inputProperties":{"actionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:DataAccessorActionConfiguration"},"description":"A list of action configurations specifying the allowed actions and any associated filters."},"applicationId":{"type":"string","description":"The unique identifier of the Amazon Q Business application."},"authenticationDetail":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAuthenticationDetail","description":"The authentication configuration details for the data accessor. This specifies how the ISV authenticates when accessing data through this data accessor."},"displayName":{"type":"string","description":"The friendly name of the data accessor."},"principal":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role for the ISV associated with this data accessor."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to associate with the data accessor."}},"requiredInputs":["actionConfigurations","applicationId","displayName","principal"]},"aws-native:qbusiness:DataSource":{"description":"Definition of AWS::QBusiness::DataSource Resource Type","properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application the data source will be attached to.","replaceOnChanges":true},"configuration":{"$ref":"pulumi.json#/Any","description":"Use this property to specify a JSON or YAML schema with configuration properties specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q .\n\nThe following links have the configuration properties and schemas for AWS CloudFormation for the following connectors:\n\n- [Amazon Simple Storage Service](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-cfn.html)\n- [Amazon Q Web Crawler](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-cfn.html)\n\nSimilarly, you can find configuration templates and properties for your specific data source using the following steps:\n\n- Navigate to the [Supported connectors](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html) page in the Amazon Q Business User Guide, and select the data source connector of your choice.\n- Then, from that specific data source connector's page, choose the topic containing *Using CloudFormation* to find the schemas for your data source connector, including configuration parameter descriptions and examples.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::QBusiness::DataSource` for more information about the expected schema for this property."},"createdAt":{"type":"string","description":"The Unix timestamp when the Amazon Q Business data source was created."},"dataSourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a data source in an Amazon Q Business application."},"dataSourceId":{"type":"string","description":"The identifier of the Amazon Q Business data source."},"description":{"type":"string","description":"A description for the data source connector."},"displayName":{"type":"string","description":"The name of the Amazon Q Business data source."},"documentEnrichmentConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentEnrichmentConfiguration","description":"Provides the configuration information for altering document metadata and content during the document ingestion process.\n\nFor more information, see [Custom document enrichment](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/custom-document-enrichment.html) ."},"indexId":{"type":"string","description":"The identifier of the index the data source is attached to.","replaceOnChanges":true},"mediaExtractionConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceMediaExtractionConfiguration","description":"The configuration for extracting information from media in documents."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources. This field is required for all connector types except custom connectors, where it is optional."},"status":{"$ref":"#/types/aws-native:qbusiness:DataSourceStatus","description":"The status of the Amazon Q Business data source."},"syncSchedule":{"type":"string","description":"Sets the frequency for Amazon Q Business to check the documents in your data source repository and update your index. If you don't set a schedule, Amazon Q Business won't periodically update the index.\n\nSpecify a `cron-` format schedule string or an empty string to indicate that the index is updated on demand. You can't specify the `Schedule` parameter when the `Type` parameter is set to `CUSTOM` . If you do, you receive a `ValidationException` exception."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"type":"string","description":"The type of the Amazon Q Business data source."},"updatedAt":{"type":"string","description":"The Unix timestamp when the Amazon Q Business data source was last updated."},"vpcConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceVpcConfiguration","description":"Configuration information for an Amazon VPC (Virtual Private Cloud) to connect to your data source. For more information, see [Using Amazon VPC with Amazon Q Business connectors](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connector-vpc.html) ."}},"type":"object","required":["applicationId","configuration","createdAt","dataSourceArn","dataSourceId","displayName","indexId","status","type","updatedAt"],"inputProperties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application the data source will be attached to."},"configuration":{"$ref":"pulumi.json#/Any","description":"Use this property to specify a JSON or YAML schema with configuration properties specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q .\n\nThe following links have the configuration properties and schemas for AWS CloudFormation for the following connectors:\n\n- [Amazon Simple Storage Service](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-cfn.html)\n- [Amazon Q Web Crawler](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-cfn.html)\n\nSimilarly, you can find configuration templates and properties for your specific data source using the following steps:\n\n- Navigate to the [Supported connectors](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html) page in the Amazon Q Business User Guide, and select the data source connector of your choice.\n- Then, from that specific data source connector's page, choose the topic containing *Using CloudFormation* to find the schemas for your data source connector, including configuration parameter descriptions and examples.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::QBusiness::DataSource` for more information about the expected schema for this property."},"description":{"type":"string","description":"A description for the data source connector."},"displayName":{"type":"string","description":"The name of the Amazon Q Business data source."},"documentEnrichmentConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentEnrichmentConfiguration","description":"Provides the configuration information for altering document metadata and content during the document ingestion process.\n\nFor more information, see [Custom document enrichment](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/custom-document-enrichment.html) ."},"indexId":{"type":"string","description":"The identifier of the index the data source is attached to."},"mediaExtractionConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceMediaExtractionConfiguration","description":"The configuration for extracting information from media in documents."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources. This field is required for all connector types except custom connectors, where it is optional."},"syncSchedule":{"type":"string","description":"Sets the frequency for Amazon Q Business to check the documents in your data source repository and update your index. If you don't set a schedule, Amazon Q Business won't periodically update the index.\n\nSpecify a `cron-` format schedule string or an empty string to indicate that the index is updated on demand. You can't specify the `Schedule` parameter when the `Type` parameter is set to `CUSTOM` . If you do, you receive a `ValidationException` exception."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"vpcConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceVpcConfiguration","description":"Configuration information for an Amazon VPC (Virtual Private Cloud) to connect to your data source. For more information, see [Using Amazon VPC with Amazon Q Business connectors](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connector-vpc.html) ."}},"requiredInputs":["applicationId","configuration","displayName","indexId"]},"aws-native:qbusiness:Index":{"description":"Definition of AWS::QBusiness::Index Resource Type","properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application using the index.","replaceOnChanges":true},"capacityConfiguration":{"$ref":"#/types/aws-native:qbusiness:IndexCapacityConfiguration","description":"The capacity units you want to provision for your index. You can add and remove capacity to fit your usage needs."},"createdAt":{"type":"string","description":"The Unix timestamp when the index was created."},"description":{"type":"string","description":"A description for the Amazon Q Business index."},"displayName":{"type":"string","description":"The name of the index."},"documentAttributeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:IndexDocumentAttributeConfiguration"},"description":"Configuration information for document attributes. Document attributes are metadata or fields associated with your documents. For example, the company department name associated with each document.\n\nFor more information, see [Understanding document attributes](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/doc-attributes.html) ."},"indexArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Amazon Q Business index."},"indexId":{"type":"string","description":"The identifier for the index."},"indexStatistics":{"$ref":"#/types/aws-native:qbusiness:IndexStatistics"},"status":{"$ref":"#/types/aws-native:qbusiness:IndexStatus","description":"The current status of the index. When the status is `ACTIVE` , the index is ready."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the index. You can also use tags to help control access to the index. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"$ref":"#/types/aws-native:qbusiness:IndexType","description":"The index type that's suitable for your needs. For more information on what's included in each type of index, see [Amazon Q Business tiers](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/tiers.html#index-tiers) .","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The Unix timestamp when the index was last updated."}},"type":"object","required":["applicationId","createdAt","displayName","indexArn","indexId","indexStatistics","status","updatedAt"],"inputProperties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application using the index."},"capacityConfiguration":{"$ref":"#/types/aws-native:qbusiness:IndexCapacityConfiguration","description":"The capacity units you want to provision for your index. You can add and remove capacity to fit your usage needs."},"description":{"type":"string","description":"A description for the Amazon Q Business index."},"displayName":{"type":"string","description":"The name of the index."},"documentAttributeConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:IndexDocumentAttributeConfiguration"},"description":"Configuration information for document attributes. Document attributes are metadata or fields associated with your documents. For example, the company department name associated with each document.\n\nFor more information, see [Understanding document attributes](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/doc-attributes.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the index. You can also use tags to help control access to the index. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"$ref":"#/types/aws-native:qbusiness:IndexType","description":"The index type that's suitable for your needs. For more information on what's included in each type of index, see [Amazon Q Business tiers](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/tiers.html#index-tiers) ."}},"requiredInputs":["applicationId","displayName"]},"aws-native:qbusiness:Permission":{"description":"Definition of AWS::QBusiness::Permission Resource Type","properties":{"actions":{"type":"array","items":{"type":"string"},"description":"The list of Amazon Q Business actions that the ISV is allowed to perform.","replaceOnChanges":true},"applicationId":{"type":"string","description":"The unique identifier of the Amazon Q Business application.","replaceOnChanges":true},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:PermissionCondition"},"replaceOnChanges":true},"principal":{"type":"string","description":"Provides user and group information used for filtering documents to use for generating Amazon Q Business conversation responses.","replaceOnChanges":true},"statementId":{"type":"string","description":"A unique identifier for the policy statement.","replaceOnChanges":true}},"type":"object","required":["actions","applicationId","principal","statementId"],"inputProperties":{"actions":{"type":"array","items":{"type":"string"},"description":"The list of Amazon Q Business actions that the ISV is allowed to perform."},"applicationId":{"type":"string","description":"The unique identifier of the Amazon Q Business application."},"conditions":{"type":"array","items":{"$ref":"#/types/aws-native:qbusiness:PermissionCondition"}},"principal":{"type":"string","description":"Provides user and group information used for filtering documents to use for generating Amazon Q Business conversation responses."},"statementId":{"type":"string","description":"A unique identifier for the policy statement."}},"requiredInputs":["actions","applicationId","principal","statementId"]},"aws-native:qbusiness:Plugin":{"description":"Definition of AWS::QBusiness::Plugin Resource Type","properties":{"applicationId":{"type":"string","description":"The identifier of the application that will contain the plugin.","replaceOnChanges":true},"authConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration1Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration2Properties"}],"description":"Authentication configuration information for an Amazon Q Business plugin."},"buildStatus":{"$ref":"#/types/aws-native:qbusiness:PluginBuildStatus","description":"The current status of a plugin. A plugin is modified asynchronously."},"createdAt":{"type":"string","description":"The timestamp for when the plugin was created."},"customPluginConfiguration":{"$ref":"#/types/aws-native:qbusiness:PluginCustomPluginConfiguration","description":"Configuration information required to create a custom plugin."},"displayName":{"type":"string","description":"The name of the plugin."},"pluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a plugin."},"pluginId":{"type":"string","description":"The identifier of the plugin."},"serverUrl":{"type":"string","description":"The plugin server URL used for configuration."},"state":{"$ref":"#/types/aws-native:qbusiness:PluginState","description":"The current status of the plugin."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"$ref":"#/types/aws-native:qbusiness:PluginType","description":"The type of the plugin.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The timestamp for when the plugin was last updated."}},"type":"object","required":["authConfiguration","buildStatus","createdAt","displayName","pluginArn","pluginId","type","updatedAt"],"inputProperties":{"applicationId":{"type":"string","description":"The identifier of the application that will contain the plugin."},"authConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration1Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration2Properties"}],"description":"Authentication configuration information for an Amazon Q Business plugin."},"customPluginConfiguration":{"$ref":"#/types/aws-native:qbusiness:PluginCustomPluginConfiguration","description":"Configuration information required to create a custom plugin."},"displayName":{"type":"string","description":"The name of the plugin."},"serverUrl":{"type":"string","description":"The plugin server URL used for configuration."},"state":{"$ref":"#/types/aws-native:qbusiness:PluginState","description":"The current status of the plugin."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"$ref":"#/types/aws-native:qbusiness:PluginType","description":"The type of the plugin."}},"requiredInputs":["authConfiguration","displayName","type"]},"aws-native:qbusiness:Retriever":{"description":"Definition of AWS::QBusiness::Retriever Resource Type","properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application using the retriever.","replaceOnChanges":true},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:RetrieverConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:RetrieverConfiguration1Properties"}],"description":"Provides information on how the retriever used for your Amazon Q Business application is configured."},"createdAt":{"type":"string","description":"The Unix timestamp when the retriever was created."},"displayName":{"type":"string","description":"The name of your retriever."},"retrieverArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role associated with the retriever."},"retrieverId":{"type":"string","description":"The identifier of the retriever used by your Amazon Q Business application."},"roleArn":{"type":"string","description":"The ARN of an IAM role used by Amazon Q Business to access the basic authentication credentials stored in a Secrets Manager secret."},"status":{"$ref":"#/types/aws-native:qbusiness:RetrieverStatus","description":"The status of your retriever."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the retriever. You can also use tags to help control access to the retriever. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"$ref":"#/types/aws-native:qbusiness:RetrieverType","description":"The type of your retriever.","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The Unix timestamp when the retriever was last updated."}},"type":"object","required":["applicationId","configuration","createdAt","displayName","retrieverArn","retrieverId","status","type","updatedAt"],"inputProperties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application using the retriever."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:RetrieverConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:RetrieverConfiguration1Properties"}],"description":"Provides information on how the retriever used for your Amazon Q Business application is configured."},"displayName":{"type":"string","description":"The name of your retriever."},"roleArn":{"type":"string","description":"The ARN of an IAM role used by Amazon Q Business to access the basic authentication credentials stored in a Secrets Manager secret."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize the retriever. You can also use tags to help control access to the retriever. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"type":{"$ref":"#/types/aws-native:qbusiness:RetrieverType","description":"The type of your retriever."}},"requiredInputs":["applicationId","configuration","displayName","type"]},"aws-native:qbusiness:WebExperience":{"description":"Definition of AWS::QBusiness::WebExperience Resource Type","properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business web experience.","replaceOnChanges":true},"browserExtensionConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceBrowserExtensionConfiguration","description":"The container for browser extension configuration for an Amazon Q Business web experience."},"createdAt":{"type":"string","description":"The Unix timestamp when the Amazon Q Business application was last updated."},"customizationConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceCustomizationConfiguration","description":"Contains the configuration information to customize the logo, font, and color of an Amazon Q Business web experience with individual files for each property or a CSS file for them all."},"defaultEndpoint":{"type":"string","description":"The endpoint URLs for your Amazon Q Business web experience. The URLs are unique and fully hosted by AWS ."},"identityProviderConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:WebExperienceIdentityProviderConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:WebExperienceIdentityProviderConfiguration1Properties"}],"description":"Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience."},"origins":{"type":"array","items":{"type":"string"},"description":"Sets the website domain origins that are allowed to embed the Amazon Q Business web experience. The *domain origin* refers to the base URL for accessing a website including the protocol ( `http/https` ), the domain name, and the port number (if specified).\n\n\u003e You must only submit a *base URL* and not a full path. For example, `https://docs.aws.amazon.com` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service role attached to your web experience.\n\n\u003e The `roleArn` parameter is required when your Amazon Q Business application is created with IAM Identity Center. It is not required for SAML-based applications."},"samplePromptsControlMode":{"$ref":"#/types/aws-native:qbusiness:WebExperienceSamplePromptsControlMode","description":"Determines whether sample prompts are enabled in the web experience for an end user."},"status":{"$ref":"#/types/aws-native:qbusiness:WebExperienceStatus","description":"The status of your Amazon Q Business web experience."},"subtitle":{"type":"string","description":"A subtitle to personalize your Amazon Q Business web experience."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"title":{"type":"string","description":"The title for your Amazon Q Business web experience."},"updatedAt":{"type":"string","description":"The Unix timestamp when your Amazon Q Business web experience was updated."},"webExperienceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an Amazon Q Business web experience."},"webExperienceId":{"type":"string","description":"The identifier of your Amazon Q Business web experience."},"welcomeMessage":{"type":"string","description":"A message in an Amazon Q Business web experience."}},"type":"object","required":["applicationId","createdAt","defaultEndpoint","status","updatedAt","webExperienceArn","webExperienceId"],"inputProperties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business web experience."},"browserExtensionConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceBrowserExtensionConfiguration","description":"The container for browser extension configuration for an Amazon Q Business web experience."},"customizationConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceCustomizationConfiguration","description":"Contains the configuration information to customize the logo, font, and color of an Amazon Q Business web experience with individual files for each property or a CSS file for them all."},"identityProviderConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:qbusiness:WebExperienceIdentityProviderConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:WebExperienceIdentityProviderConfiguration1Properties"}],"description":"Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience."},"origins":{"type":"array","items":{"type":"string"},"description":"Sets the website domain origins that are allowed to embed the Amazon Q Business web experience. The *domain origin* refers to the base URL for accessing a website including the protocol ( `http/https` ), the domain name, and the port number (if specified).\n\n\u003e You must only submit a *base URL* and not a full path. For example, `https://docs.aws.amazon.com` ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service role attached to your web experience.\n\n\u003e The `roleArn` parameter is required when your Amazon Q Business application is created with IAM Identity Center. It is not required for SAML-based applications."},"samplePromptsControlMode":{"$ref":"#/types/aws-native:qbusiness:WebExperienceSamplePromptsControlMode","description":"Determines whether sample prompts are enabled in the web experience for an end user."},"subtitle":{"type":"string","description":"A subtitle to personalize your Amazon Q Business web experience."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @."},"title":{"type":"string","description":"The title for your Amazon Q Business web experience."},"welcomeMessage":{"type":"string","description":"A message in an Amazon Q Business web experience."}},"requiredInputs":["applicationId"]},"aws-native:qldb:Stream":{"description":"Resource schema for AWS::QLDB::Stream.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myQLDBStream = new AwsNative.Qldb.Stream(\"myQLDBStream\", new()\n    {\n        ExclusiveEndTime = \"2020-05-29T22:59:59Z\",\n        InclusiveStartTime = \"2020-05-29T00:00:00Z\",\n        KinesisConfiguration = new AwsNative.Qldb.Inputs.StreamKinesisConfigurationArgs\n        {\n            AggregationEnabled = true,\n            StreamArn = \"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\",\n        },\n        LedgerName = \"exampleLedger\",\n        RoleArn = \"arn:aws:iam::123456789012:role/my-kinesis-stream-role\",\n        StreamName = \"exampleLedger-stream\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Domain\",\n                Value = \"Test\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/qldb\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := qldb.NewStream(ctx, \"myQLDBStream\", \u0026qldb.StreamArgs{\n\t\t\tExclusiveEndTime:   pulumi.String(\"2020-05-29T22:59:59Z\"),\n\t\t\tInclusiveStartTime: pulumi.String(\"2020-05-29T00:00:00Z\"),\n\t\t\tKinesisConfiguration: \u0026qldb.StreamKinesisConfigurationArgs{\n\t\t\t\tAggregationEnabled: pulumi.Bool(true),\n\t\t\t\tStreamArn:          pulumi.String(\"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\"),\n\t\t\t},\n\t\t\tLedgerName: pulumi.String(\"exampleLedger\"),\n\t\t\tRoleArn:    pulumi.String(\"arn:aws:iam::123456789012:role/my-kinesis-stream-role\"),\n\t\t\tStreamName: pulumi.String(\"exampleLedger-stream\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Domain\"),\n\t\t\t\t\tValue: pulumi.String(\"Test\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myQLDBStream = new aws_native.qldb.Stream(\"myQLDBStream\", {\n    exclusiveEndTime: \"2020-05-29T22:59:59Z\",\n    inclusiveStartTime: \"2020-05-29T00:00:00Z\",\n    kinesisConfiguration: {\n        aggregationEnabled: true,\n        streamArn: \"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\",\n    },\n    ledgerName: \"exampleLedger\",\n    roleArn: \"arn:aws:iam::123456789012:role/my-kinesis-stream-role\",\n    streamName: \"exampleLedger-stream\",\n    tags: [{\n        key: \"Domain\",\n        value: \"Test\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_qldb_stream = aws_native.qldb.Stream(\"myQLDBStream\",\n    exclusive_end_time=\"2020-05-29T22:59:59Z\",\n    inclusive_start_time=\"2020-05-29T00:00:00Z\",\n    kinesis_configuration={\n        \"aggregation_enabled\": True,\n        \"stream_arn\": \"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\",\n    },\n    ledger_name=\"exampleLedger\",\n    role_arn=\"arn:aws:iam::123456789012:role/my-kinesis-stream-role\",\n    stream_name=\"exampleLedger-stream\",\n    tags=[{\n        \"key\": \"Domain\",\n        \"value\": \"Test\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myQLDBStream = new AwsNative.Qldb.Stream(\"myQLDBStream\", new()\n    {\n        ExclusiveEndTime = \"2020-05-29T22:59:59Z\",\n        InclusiveStartTime = \"2020-05-29T00:00:00Z\",\n        KinesisConfiguration = new AwsNative.Qldb.Inputs.StreamKinesisConfigurationArgs\n        {\n            AggregationEnabled = true,\n            StreamArn = \"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\",\n        },\n        LedgerName = \"exampleLedger\",\n        RoleArn = \"arn:aws:iam::123456789012:role/my-kinesis-stream-role\",\n        StreamName = \"exampleLedger-stream\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Domain\",\n                Value = \"Test\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/qldb\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := qldb.NewStream(ctx, \"myQLDBStream\", \u0026qldb.StreamArgs{\n\t\t\tExclusiveEndTime:   pulumi.String(\"2020-05-29T22:59:59Z\"),\n\t\t\tInclusiveStartTime: pulumi.String(\"2020-05-29T00:00:00Z\"),\n\t\t\tKinesisConfiguration: \u0026qldb.StreamKinesisConfigurationArgs{\n\t\t\t\tAggregationEnabled: pulumi.Bool(true),\n\t\t\t\tStreamArn:          pulumi.String(\"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\"),\n\t\t\t},\n\t\t\tLedgerName: pulumi.String(\"exampleLedger\"),\n\t\t\tRoleArn:    pulumi.String(\"arn:aws:iam::123456789012:role/my-kinesis-stream-role\"),\n\t\t\tStreamName: pulumi.String(\"exampleLedger-stream\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Domain\"),\n\t\t\t\t\tValue: pulumi.String(\"Test\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myQLDBStream = new aws_native.qldb.Stream(\"myQLDBStream\", {\n    exclusiveEndTime: \"2020-05-29T22:59:59Z\",\n    inclusiveStartTime: \"2020-05-29T00:00:00Z\",\n    kinesisConfiguration: {\n        aggregationEnabled: true,\n        streamArn: \"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\",\n    },\n    ledgerName: \"exampleLedger\",\n    roleArn: \"arn:aws:iam::123456789012:role/my-kinesis-stream-role\",\n    streamName: \"exampleLedger-stream\",\n    tags: [{\n        key: \"Domain\",\n        value: \"Test\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_qldb_stream = aws_native.qldb.Stream(\"myQLDBStream\",\n    exclusive_end_time=\"2020-05-29T22:59:59Z\",\n    inclusive_start_time=\"2020-05-29T00:00:00Z\",\n    kinesis_configuration={\n        \"aggregation_enabled\": True,\n        \"stream_arn\": \"arn:aws:kinesis:us-east-1:123456789012:stream/stream-for-qldb\",\n    },\n    ledger_name=\"exampleLedger\",\n    role_arn=\"arn:aws:iam::123456789012:role/my-kinesis-stream-role\",\n    stream_name=\"exampleLedger-stream\",\n    tags=[{\n        \"key\": \"Domain\",\n        \"value\": \"Test\",\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the QLDB journal stream. For example: `arn:aws:qldb:us-east-1:123456789012:stream/exampleLedger/IiPT4brpZCqCq3f4MTHbYy` ."},"awsId":{"type":"string","description":"The unique ID that QLDB assigns to each QLDB journal stream. For example: `IiPT4brpZCqCq3f4MTHbYy` ."},"exclusiveEndTime":{"type":"string","description":"The exclusive date and time that specifies when the stream ends. If you don't define this parameter, the stream runs indefinitely until you cancel it.\n\nThe `ExclusiveEndTime` must be in `ISO 8601` date and time format and in Universal Coordinated Time (UTC). For example: `2019-06-13T21:36:34Z` .","replaceOnChanges":true},"inclusiveStartTime":{"type":"string","description":"The inclusive start date and time from which to start streaming journal data. This parameter must be in `ISO 8601` date and time format and in Universal Coordinated Time (UTC). For example: `2019-06-13T21:36:34Z` .\n\nThe `InclusiveStartTime` cannot be in the future and must be before `ExclusiveEndTime` .\n\nIf you provide an `InclusiveStartTime` that is before the ledger's `CreationDateTime` , QLDB effectively defaults it to the ledger's `CreationDateTime` .","replaceOnChanges":true},"kinesisConfiguration":{"$ref":"#/types/aws-native:qldb:StreamKinesisConfiguration","description":"The configuration settings of the Kinesis Data Streams destination for your stream request.","replaceOnChanges":true},"ledgerName":{"type":"string","description":"The name of the ledger.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants QLDB permissions for a journal stream to write data records to a Kinesis Data Streams resource.\n\nTo pass a role to QLDB when requesting a journal stream, you must have permissions to perform the `iam:PassRole` action on the IAM role resource. This is required for all journal stream requests.","replaceOnChanges":true},"streamName":{"type":"string","description":"The name that you want to assign to the QLDB journal stream. User-defined names can help identify and indicate the purpose of a stream.\n\nYour stream name must be unique among other *active* streams for a given ledger. Stream names have the same naming constraints as ledger names, as defined in [Quotas in Amazon QLDB](https://docs.aws.amazon.com/qldb/latest/developerguide/limits.html#limits.naming) in the *Amazon QLDB Developer Guide* .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","inclusiveStartTime","kinesisConfiguration","ledgerName","roleArn","streamName"],"inputProperties":{"exclusiveEndTime":{"type":"string","description":"The exclusive date and time that specifies when the stream ends. If you don't define this parameter, the stream runs indefinitely until you cancel it.\n\nThe `ExclusiveEndTime` must be in `ISO 8601` date and time format and in Universal Coordinated Time (UTC). For example: `2019-06-13T21:36:34Z` ."},"inclusiveStartTime":{"type":"string","description":"The inclusive start date and time from which to start streaming journal data. This parameter must be in `ISO 8601` date and time format and in Universal Coordinated Time (UTC). For example: `2019-06-13T21:36:34Z` .\n\nThe `InclusiveStartTime` cannot be in the future and must be before `ExclusiveEndTime` .\n\nIf you provide an `InclusiveStartTime` that is before the ledger's `CreationDateTime` , QLDB effectively defaults it to the ledger's `CreationDateTime` ."},"kinesisConfiguration":{"$ref":"#/types/aws-native:qldb:StreamKinesisConfiguration","description":"The configuration settings of the Kinesis Data Streams destination for your stream request."},"ledgerName":{"type":"string","description":"The name of the ledger."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that grants QLDB permissions for a journal stream to write data records to a Kinesis Data Streams resource.\n\nTo pass a role to QLDB when requesting a journal stream, you must have permissions to perform the `iam:PassRole` action on the IAM role resource. This is required for all journal stream requests."},"streamName":{"type":"string","description":"The name that you want to assign to the QLDB journal stream. User-defined names can help identify and indicate the purpose of a stream.\n\nYour stream name must be unique among other *active* streams for a given ledger. Stream names have the same naming constraints as ledger names, as defined in [Quotas in Amazon QLDB](https://docs.aws.amazon.com/qldb/latest/developerguide/limits.html#limits.naming) in the *Amazon QLDB Developer Guide* ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["inclusiveStartTime","kinesisConfiguration","ledgerName","roleArn"]},"aws-native:quicksight:ActionConnector":{"description":"Definition of the AWS::QuickSight::ActionConnector Resource Type.","properties":{"actionConnectorId":{"type":"string","replaceOnChanges":true},"arn":{"type":"string"},"authenticationConfig":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthConfig"},"awsAccountId":{"type":"string","replaceOnChanges":true},"createdTime":{"type":"string"},"description":{"type":"string"},"enabledActions":{"type":"array","items":{"type":"string"}},"lastUpdatedTime":{"type":"string"},"name":{"type":"string"},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:ActionConnectorResourcePermission"}},"status":{"$ref":"#/types/aws-native:quicksight:ActionConnectorResourceStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"type":{"$ref":"#/types/aws-native:quicksight:ActionConnectorType","replaceOnChanges":true},"vpcConnectionArn":{"type":"string"}},"type":"object","required":["actionConnectorId","arn","awsAccountId","createdTime","enabledActions","lastUpdatedTime","name","status","type"],"inputProperties":{"actionConnectorId":{"type":"string"},"authenticationConfig":{"$ref":"#/types/aws-native:quicksight:ActionConnectorAuthConfig"},"awsAccountId":{"type":"string"},"description":{"type":"string"},"name":{"type":"string"},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:ActionConnectorResourcePermission"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"type":{"$ref":"#/types/aws-native:quicksight:ActionConnectorType"},"vpcConnectionArn":{"type":"string"}},"requiredInputs":["actionConnectorId","awsAccountId","type"]},"aws-native:quicksight:Analysis":{"description":"Definition of the AWS::QuickSight::Analysis Resource Type.","properties":{"analysisId":{"type":"string","description":"The ID for the analysis that you're creating. This ID displays in the URL of the analysis.","replaceOnChanges":true},"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the analysis.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The ID of the AWS account where you are creating an analysis.","replaceOnChanges":true},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that the analysis was created.\u003c/p\u003e"},"dataSetArns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eThe ARNs of the datasets of the analysis.\u003c/p\u003e"},"definition":{"$ref":"#/types/aws-native:quicksight:AnalysisDefinition"},"errors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisError"},"description":"\u003cp\u003eErrors associated with the analysis.\u003c/p\u003e"},"folderArns":{"type":"array","items":{"type":"string"}},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe time that the analysis was last updated.\u003c/p\u003e"},"name":{"type":"string","description":"\u003cp\u003eThe descriptive name of the analysis.\u003c/p\u003e"},"parameters":{"$ref":"#/types/aws-native:quicksight:AnalysisParameters","description":"The parameter names and override values that you want to use. An analysis can have any parameter type, and some parameters might accept multiple values."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisResourcePermission"},"description":"A structure that describes the principals and the resource-level permissions on an analysis. You can use the `Permissions` structure to grant permissions by providing a list of AWS Identity and Access Management (IAM) action information for each principal listed by Amazon Resource Name (ARN).\n\nTo specify no permissions, omit `Permissions` ."},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheet"},"description":"\u003cp\u003eA list of the associated sheets with the unique identifier and name of each sheet.\u003c/p\u003e"},"sourceEntity":{"$ref":"#/types/aws-native:quicksight:AnalysisSourceEntity","description":"A source entity to use for the analysis that you're creating. This metadata structure contains details that describe a source template and one or more datasets.\n\nEither a `SourceEntity` or a `Definition` must be provided in order for the request to be valid."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisResourceStatus","description":"Status associated with the analysis."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the analysis."},"themeArn":{"type":"string","description":"\u003cp\u003eThe ARN of the theme of the analysis.\u003c/p\u003e"},"validationStrategy":{"$ref":"#/types/aws-native:quicksight:AnalysisValidationStrategy","description":"The option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to `LENIENT` , validation is skipped for specific errors."}},"type":"object","required":["analysisId","arn","awsAccountId","createdTime","dataSetArns","lastUpdatedTime","name"],"inputProperties":{"analysisId":{"type":"string","description":"The ID for the analysis that you're creating. This ID displays in the URL of the analysis."},"awsAccountId":{"type":"string","description":"The ID of the AWS account where you are creating an analysis."},"definition":{"$ref":"#/types/aws-native:quicksight:AnalysisDefinition"},"errors":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisError"},"description":"\u003cp\u003eErrors associated with the analysis.\u003c/p\u003e"},"folderArns":{"type":"array","items":{"type":"string"}},"name":{"type":"string","description":"\u003cp\u003eThe descriptive name of the analysis.\u003c/p\u003e"},"parameters":{"$ref":"#/types/aws-native:quicksight:AnalysisParameters","description":"The parameter names and override values that you want to use. An analysis can have any parameter type, and some parameters might accept multiple values."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisResourcePermission"},"description":"A structure that describes the principals and the resource-level permissions on an analysis. You can use the `Permissions` structure to grant permissions by providing a list of AWS Identity and Access Management (IAM) action information for each principal listed by Amazon Resource Name (ARN).\n\nTo specify no permissions, omit `Permissions` ."},"sheets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheet"},"description":"\u003cp\u003eA list of the associated sheets with the unique identifier and name of each sheet.\u003c/p\u003e"},"sourceEntity":{"$ref":"#/types/aws-native:quicksight:AnalysisSourceEntity","description":"A source entity to use for the analysis that you're creating. This metadata structure contains details that describe a source template and one or more datasets.\n\nEither a `SourceEntity` or a `Definition` must be provided in order for the request to be valid."},"status":{"$ref":"#/types/aws-native:quicksight:AnalysisResourceStatus","description":"Status associated with the analysis."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the analysis."},"themeArn":{"type":"string","description":"\u003cp\u003eThe ARN of the theme of the analysis.\u003c/p\u003e"},"validationStrategy":{"$ref":"#/types/aws-native:quicksight:AnalysisValidationStrategy","description":"The option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to `LENIENT` , validation is skipped for specific errors."}},"requiredInputs":["analysisId","awsAccountId"]},"aws-native:quicksight:CustomPermissions":{"description":"Definition of the AWS::QuickSight::CustomPermissions Resource Type.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom permissions profile."},"awsAccountId":{"type":"string","description":"The ID of the AWS account that contains the custom permission configuration that you want to update.","replaceOnChanges":true},"capabilities":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilities","description":"A set of actions in the custom permissions profile."},"customPermissionsName":{"type":"string","description":"The name of the custom permissions profile.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to associate with the custom permissions profile."}},"type":"object","required":["arn","awsAccountId","customPermissionsName"],"inputProperties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account that contains the custom permission configuration that you want to update."},"capabilities":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilities","description":"A set of actions in the custom permissions profile."},"customPermissionsName":{"type":"string","description":"The name of the custom permissions profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to associate with the custom permissions profile."}},"requiredInputs":["awsAccountId"]},"aws-native:quicksight:Dashboard":{"description":"Definition of the AWS::QuickSight::Dashboard Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The ID of the AWS account where you want to create the dashboard.","replaceOnChanges":true},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that this dashboard was created.\u003c/p\u003e"},"dashboardId":{"type":"string","description":"The ID for the dashboard, also added to the IAM policy.","replaceOnChanges":true},"dashboardPublishOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPublishOptions","description":"Options for publishing the dashboard when you create it:\n\n- `AvailabilityStatus` for `AdHocFilteringOption` - This status can be either `ENABLED` or `DISABLED` . When this is set to `DISABLED` , Amazon Quick Sight disables the left filter pane on the published dashboard, which can be used for ad hoc (one-time) filtering. This option is `ENABLED` by default.\n- `AvailabilityStatus` for `ExportToCSVOption` - This status can be either `ENABLED` or `DISABLED` . The visual option to export data to .CSV format isn't enabled when this is set to `DISABLED` . This option is `ENABLED` by default.\n- `VisibilityState` for `SheetControlsOption` - This visibility state can be either `COLLAPSED` or `EXPANDED` . This option is `COLLAPSED` by default.\n- `AvailabilityStatus` for `QuickSuiteActionsOption` - This status can be either `ENABLED` or `DISABLED` . Features related to Actions in Amazon Quick Suite on dashboards are disabled when this is set to `DISABLED` . This option is `DISABLED` by default.\n- `AvailabilityStatus` for `ExecutiveSummaryOption` - This status can be either `ENABLED` or `DISABLED` . The option to build an executive summary is disabled when this is set to `DISABLED` . This option is `ENABLED` by default.\n- `AvailabilityStatus` for `DataStoriesSharingOption` - This status can be either `ENABLED` or `DISABLED` . The option to share a data story is disabled when this is set to `DISABLED` . This option is `ENABLED` by default."},"definition":{"$ref":"#/types/aws-native:quicksight:DashboardVersionDefinition"},"folderArns":{"type":"array","items":{"type":"string"}},"lastPublishedTime":{"type":"string","description":"\u003cp\u003eThe last time that this dashboard was published.\u003c/p\u003e"},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe last time that this dashboard was updated.\u003c/p\u003e"},"linkEntities":{"type":"array","items":{"type":"string"},"description":"A list of analysis Amazon Resource Names (ARNs) to be linked to the dashboard."},"linkSharingConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardLinkSharingConfiguration","description":"A structure that contains the link sharing configurations that you want to apply overrides to."},"name":{"type":"string","description":"The display name of the dashboard."},"parameters":{"$ref":"#/types/aws-native:quicksight:DashboardParameters","description":"The parameters for the creation of the dashboard, which you want to use to override the default settings. A dashboard can have any type of parameters, and some parameters might accept multiple values."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardResourcePermission"},"description":"A structure that contains the permissions of the dashboard. You can use this structure for granting permissions by providing a list of IAM action information for each principal ARN.\n\nTo specify no permissions, omit the permissions list."},"sourceEntity":{"$ref":"#/types/aws-native:quicksight:DashboardSourceEntity","description":"The entity that you are using as a source when you create the dashboard. In `SourceEntity` , you specify the type of object that you want to use. You can only create a dashboard from a template, so you use a `SourceTemplate` entity. If you need to create a dashboard from an analysis, first convert the analysis to a template by using the `CreateTemplate` API operation. For `SourceTemplate` , specify the Amazon Resource Name (ARN) of the source template. The `SourceTemplate` ARN can contain any AWS account; and any QuickSight-supported AWS Region .\n\nUse the `DataSetReferences` entity within `SourceTemplate` to list the replacement datasets for the placeholders listed in the original. The schema in each dataset must match its placeholder."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the dashboard."},"themeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the theme that is being used for this dashboard. If you add a value for this field, it overrides the value that is used in the source entity. The theme ARN must exist in the same AWS account where you create the dashboard."},"validationStrategy":{"$ref":"#/types/aws-native:quicksight:DashboardValidationStrategy","description":"The option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to `LENIENT` , validation is skipped for specific errors."},"version":{"$ref":"#/types/aws-native:quicksight:DashboardVersion"},"versionDescription":{"type":"string","description":"A description for the first version of the dashboard being created."}},"type":"object","required":["arn","awsAccountId","createdTime","dashboardId","lastPublishedTime","lastUpdatedTime","name","version"],"inputProperties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account where you want to create the dashboard."},"dashboardId":{"type":"string","description":"The ID for the dashboard, also added to the IAM policy."},"dashboardPublishOptions":{"$ref":"#/types/aws-native:quicksight:DashboardPublishOptions","description":"Options for publishing the dashboard when you create it:\n\n- `AvailabilityStatus` for `AdHocFilteringOption` - This status can be either `ENABLED` or `DISABLED` . When this is set to `DISABLED` , Amazon Quick Sight disables the left filter pane on the published dashboard, which can be used for ad hoc (one-time) filtering. This option is `ENABLED` by default.\n- `AvailabilityStatus` for `ExportToCSVOption` - This status can be either `ENABLED` or `DISABLED` . The visual option to export data to .CSV format isn't enabled when this is set to `DISABLED` . This option is `ENABLED` by default.\n- `VisibilityState` for `SheetControlsOption` - This visibility state can be either `COLLAPSED` or `EXPANDED` . This option is `COLLAPSED` by default.\n- `AvailabilityStatus` for `QuickSuiteActionsOption` - This status can be either `ENABLED` or `DISABLED` . Features related to Actions in Amazon Quick Suite on dashboards are disabled when this is set to `DISABLED` . This option is `DISABLED` by default.\n- `AvailabilityStatus` for `ExecutiveSummaryOption` - This status can be either `ENABLED` or `DISABLED` . The option to build an executive summary is disabled when this is set to `DISABLED` . This option is `ENABLED` by default.\n- `AvailabilityStatus` for `DataStoriesSharingOption` - This status can be either `ENABLED` or `DISABLED` . The option to share a data story is disabled when this is set to `DISABLED` . This option is `ENABLED` by default."},"definition":{"$ref":"#/types/aws-native:quicksight:DashboardVersionDefinition"},"folderArns":{"type":"array","items":{"type":"string"}},"linkEntities":{"type":"array","items":{"type":"string"},"description":"A list of analysis Amazon Resource Names (ARNs) to be linked to the dashboard."},"linkSharingConfiguration":{"$ref":"#/types/aws-native:quicksight:DashboardLinkSharingConfiguration","description":"A structure that contains the link sharing configurations that you want to apply overrides to."},"name":{"type":"string","description":"The display name of the dashboard."},"parameters":{"$ref":"#/types/aws-native:quicksight:DashboardParameters","description":"The parameters for the creation of the dashboard, which you want to use to override the default settings. A dashboard can have any type of parameters, and some parameters might accept multiple values."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DashboardResourcePermission"},"description":"A structure that contains the permissions of the dashboard. You can use this structure for granting permissions by providing a list of IAM action information for each principal ARN.\n\nTo specify no permissions, omit the permissions list."},"sourceEntity":{"$ref":"#/types/aws-native:quicksight:DashboardSourceEntity","description":"The entity that you are using as a source when you create the dashboard. In `SourceEntity` , you specify the type of object that you want to use. You can only create a dashboard from a template, so you use a `SourceTemplate` entity. If you need to create a dashboard from an analysis, first convert the analysis to a template by using the `CreateTemplate` API operation. For `SourceTemplate` , specify the Amazon Resource Name (ARN) of the source template. The `SourceTemplate` ARN can contain any AWS account; and any QuickSight-supported AWS Region .\n\nUse the `DataSetReferences` entity within `SourceTemplate` to list the replacement datasets for the placeholders listed in the original. The schema in each dataset must match its placeholder."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the dashboard."},"themeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the theme that is being used for this dashboard. If you add a value for this field, it overrides the value that is used in the source entity. The theme ARN must exist in the same AWS account where you create the dashboard."},"validationStrategy":{"$ref":"#/types/aws-native:quicksight:DashboardValidationStrategy","description":"The option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to `LENIENT` , validation is skipped for specific errors."},"versionDescription":{"type":"string","description":"A description for the first version of the dashboard being created."}},"requiredInputs":["awsAccountId","dashboardId"]},"aws-native:quicksight:DataSet":{"description":"Definition of the AWS::QuickSight::DataSet Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The AWS account ID.","replaceOnChanges":true},"columnGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnGroup"},"description":"\u003cp\u003eGroupings of columns that work together in certain Quick Suite features. Currently, only geospatial hierarchy is supported.\u003c/p\u003e"},"columnLevelPermissionRules":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnLevelPermissionRule"},"description":"\u003cp\u003eA set of one or more definitions of a \u003ccode\u003e\n               \u003ca href=\"https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ColumnLevelPermissionRule.html\"\u003eColumnLevelPermissionRule\u003c/a\u003e\n            \u003c/code\u003e.\u003c/p\u003e"},"consumedSpiceCapacityInBytes":{"type":"number","description":"\u003cp\u003eThe amount of SPICE capacity used by this dataset. This is 0 if the dataset isn't\n            imported into SPICE.\u003c/p\u003e"},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that this dataset was created.\u003c/p\u003e"},"dataPrepConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepConfiguration","description":"The data preparation configuration associated with this dataset."},"dataSetId":{"type":"string","description":"An ID for the dataset that you want to create. This ID is unique per AWS Region for each AWS account.","replaceOnChanges":true},"dataSetRefreshProperties":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshProperties","description":"The refresh properties of a dataset."},"dataSetUsageConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetUsageConfiguration","description":"The usage configuration to apply to child datasets that reference this dataset as a source."},"datasetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameter"},"description":"\u003cp\u003eThe parameter declarations of the dataset.\u003c/p\u003e"},"fieldFolders":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetFieldFolder"},"description":"The folder that contains fields and nested subfolders for your dataset."},"folderArns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eWhen you create the dataset, Quick Suite adds the dataset to these folders.\u003c/p\u003e"},"importMode":{"$ref":"#/types/aws-native:quicksight:DataSetImportMode","description":"Indicates whether you want to import the data into SPICE."},"ingestionWaitPolicy":{"$ref":"#/types/aws-native:quicksight:DataSetIngestionWaitPolicy","description":"The wait policy to use when creating or updating a Dataset. The default is to wait for SPICE ingestion to finish with timeout of 36 hours."},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe last time that this dataset was updated.\u003c/p\u003e"},"logicalTableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetLogicalTable"}},"name":{"type":"string","description":"\u003cp\u003eThe display name for the dataset.\u003c/p\u003e"},"outputColumns":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetOutputColumn"},"description":"\u003cp\u003eThe list of columns after all transforms. These columns are available in templates,\n            analyses, and dashboards.\u003c/p\u003e"},"performanceConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetPerformanceConfiguration","description":"The performance optimization configuration of a dataset."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetResourcePermission"},"description":"\u003cp\u003eA list of resource permissions on the dataset.\u003c/p\u003e"},"physicalTableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetPhysicalTable"},"description":"Declares the physical tables that are available in the underlying data sources."},"rowLevelPermissionDataSet":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionDataSet"},"rowLevelPermissionTagConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionTagConfiguration"},"semanticModelConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetSemanticModelConfiguration","description":"The semantic model configuration associated with this dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eContains a map of the key-value pairs for the resource tag or tags assigned to the dataset.\u003c/p\u003e"},"useAs":{"$ref":"#/types/aws-native:quicksight:DataSetUseAs","description":"The usage of the dataset."}},"type":"object","required":["arn","consumedSpiceCapacityInBytes","createdTime","lastUpdatedTime","outputColumns"],"inputProperties":{"awsAccountId":{"type":"string","description":"The AWS account ID."},"columnGroups":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnGroup"},"description":"\u003cp\u003eGroupings of columns that work together in certain Quick Suite features. Currently, only geospatial hierarchy is supported.\u003c/p\u003e"},"columnLevelPermissionRules":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnLevelPermissionRule"},"description":"\u003cp\u003eA set of one or more definitions of a \u003ccode\u003e\n               \u003ca href=\"https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ColumnLevelPermissionRule.html\"\u003eColumnLevelPermissionRule\u003c/a\u003e\n            \u003c/code\u003e.\u003c/p\u003e"},"dataPrepConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepConfiguration","description":"The data preparation configuration associated with this dataset."},"dataSetId":{"type":"string","description":"An ID for the dataset that you want to create. This ID is unique per AWS Region for each AWS account."},"dataSetRefreshProperties":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshProperties","description":"The refresh properties of a dataset."},"dataSetUsageConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetUsageConfiguration","description":"The usage configuration to apply to child datasets that reference this dataset as a source."},"datasetParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameter"},"description":"\u003cp\u003eThe parameter declarations of the dataset.\u003c/p\u003e"},"fieldFolders":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetFieldFolder"},"description":"The folder that contains fields and nested subfolders for your dataset."},"folderArns":{"type":"array","items":{"type":"string"},"description":"\u003cp\u003eWhen you create the dataset, Quick Suite adds the dataset to these folders.\u003c/p\u003e"},"importMode":{"$ref":"#/types/aws-native:quicksight:DataSetImportMode","description":"Indicates whether you want to import the data into SPICE."},"ingestionWaitPolicy":{"$ref":"#/types/aws-native:quicksight:DataSetIngestionWaitPolicy","description":"The wait policy to use when creating or updating a Dataset. The default is to wait for SPICE ingestion to finish with timeout of 36 hours."},"logicalTableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetLogicalTable"}},"name":{"type":"string","description":"\u003cp\u003eThe display name for the dataset.\u003c/p\u003e"},"performanceConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetPerformanceConfiguration","description":"The performance optimization configuration of a dataset."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSetResourcePermission"},"description":"\u003cp\u003eA list of resource permissions on the dataset.\u003c/p\u003e"},"physicalTableMap":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetPhysicalTable"},"description":"Declares the physical tables that are available in the underlying data sources."},"rowLevelPermissionDataSet":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionDataSet"},"rowLevelPermissionTagConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionTagConfiguration"},"semanticModelConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetSemanticModelConfiguration","description":"The semantic model configuration associated with this dataset."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"\u003cp\u003eContains a map of the key-value pairs for the resource tag or tags assigned to the dataset.\u003c/p\u003e"},"useAs":{"$ref":"#/types/aws-native:quicksight:DataSetUseAs","description":"The usage of the dataset."}}},"aws-native:quicksight:DataSource":{"description":"Definition of the AWS::QuickSight::DataSource Resource Type.","properties":{"alternateDataSourceParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters"},"description":"\u003cp\u003eA set of alternate data source parameters that you want to share for the credentials\n            stored with this data source. The credentials are applied in tandem with the data source\n            parameters when you copy a data source by using a create or update request. The API\n            operation compares the \u003ccode\u003eDataSourceParameters\u003c/code\u003e structure that's in the request\n            with the structures in the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e allow list. If the\n            structures are an exact match, the request is allowed to use the credentials from this\n            existing data source. If the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e list is null,\n            the \u003ccode\u003eCredentials\u003c/code\u003e originally used with this \u003ccode\u003eDataSourceParameters\u003c/code\u003e\n            are automatically allowed.\u003c/p\u003e"},"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the data source.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The AWS account ID.","replaceOnChanges":true},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that this data source was created.\u003c/p\u003e"},"credentials":{"$ref":"#/types/aws-native:quicksight:DataSourceCredentials","description":"The credentials Amazon Quick Sight that uses to connect to your underlying source. Currently, only credentials based on user name and password are supported."},"dataSourceId":{"type":"string","description":"An ID for the data source. This ID is unique per AWS Region for each AWS account.","replaceOnChanges":true},"dataSourceParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters","description":"The parameters that Amazon Quick Sight uses to connect to your underlying source."},"errorInfo":{"$ref":"#/types/aws-native:quicksight:DataSourceErrorInfo","description":"Error information from the last update or the creation of the data source."},"folderArns":{"type":"array","items":{"type":"string"}},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe last time that this data source was updated.\u003c/p\u003e"},"name":{"type":"string","description":"A display name for the data source."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSourceResourcePermission"},"description":"A list of resource permissions on the data source."},"sslProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceSslProperties","description":"Secure Socket Layer (SSL) properties that apply when Amazon Quick Sight connects to your underlying source."},"status":{"$ref":"#/types/aws-native:quicksight:DataSourceResourceStatus","description":"The HTTP status of the request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the data source."},"type":{"$ref":"#/types/aws-native:quicksight:DataSourceType","description":"The type of the data source. To return a list of all data sources, use `ListDataSources` .\n\nUse `AMAZON_ELASTICSEARCH` for Amazon OpenSearch Service.","replaceOnChanges":true},"vpcConnectionProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceVpcConnectionProperties","description":"Use this parameter only when you want Amazon Quick Sight to use a VPC connection when connecting to your underlying source."}},"type":"object","required":["arn","createdTime","lastUpdatedTime","name","status","type"],"inputProperties":{"alternateDataSourceParameters":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters"},"description":"\u003cp\u003eA set of alternate data source parameters that you want to share for the credentials\n            stored with this data source. The credentials are applied in tandem with the data source\n            parameters when you copy a data source by using a create or update request. The API\n            operation compares the \u003ccode\u003eDataSourceParameters\u003c/code\u003e structure that's in the request\n            with the structures in the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e allow list. If the\n            structures are an exact match, the request is allowed to use the credentials from this\n            existing data source. If the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e list is null,\n            the \u003ccode\u003eCredentials\u003c/code\u003e originally used with this \u003ccode\u003eDataSourceParameters\u003c/code\u003e\n            are automatically allowed.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The AWS account ID."},"credentials":{"$ref":"#/types/aws-native:quicksight:DataSourceCredentials","description":"The credentials Amazon Quick Sight that uses to connect to your underlying source. Currently, only credentials based on user name and password are supported."},"dataSourceId":{"type":"string","description":"An ID for the data source. This ID is unique per AWS Region for each AWS account."},"dataSourceParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters","description":"The parameters that Amazon Quick Sight uses to connect to your underlying source."},"errorInfo":{"$ref":"#/types/aws-native:quicksight:DataSourceErrorInfo","description":"Error information from the last update or the creation of the data source."},"folderArns":{"type":"array","items":{"type":"string"}},"name":{"type":"string","description":"A display name for the data source."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:DataSourceResourcePermission"},"description":"A list of resource permissions on the data source."},"sslProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceSslProperties","description":"Secure Socket Layer (SSL) properties that apply when Amazon Quick Sight connects to your underlying source."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the data source."},"type":{"$ref":"#/types/aws-native:quicksight:DataSourceType","description":"The type of the data source. To return a list of all data sources, use `ListDataSources` .\n\nUse `AMAZON_ELASTICSEARCH` for Amazon OpenSearch Service."},"vpcConnectionProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceVpcConnectionProperties","description":"Use this parameter only when you want Amazon Quick Sight to use a VPC connection when connecting to your underlying source."}},"requiredInputs":["type"]},"aws-native:quicksight:Folder":{"description":"Definition of the AWS::QuickSight::Folder Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) for the folder.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The ID for the AWS account where you want to create the folder.","replaceOnChanges":true},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that the folder was created.\u003c/p\u003e"},"folderId":{"type":"string","description":"The ID of the folder.","replaceOnChanges":true},"folderType":{"$ref":"#/types/aws-native:quicksight:FolderType","description":"The type of folder it is.","replaceOnChanges":true},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe time that the folder was last updated.\u003c/p\u003e"},"name":{"type":"string","description":"A display name for the folder."},"parentFolderArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the folder.","replaceOnChanges":true},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:FolderResourcePermission"},"description":"A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` ."},"sharingModel":{"$ref":"#/types/aws-native:quicksight:FolderSharingModel","description":"The sharing scope of the folder.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags for the folders that you want to apply overrides to."}},"type":"object","required":["arn","createdTime","lastUpdatedTime"],"inputProperties":{"awsAccountId":{"type":"string","description":"The ID for the AWS account where you want to create the folder."},"folderId":{"type":"string","description":"The ID of the folder."},"folderType":{"$ref":"#/types/aws-native:quicksight:FolderType","description":"The type of folder it is."},"name":{"type":"string","description":"A display name for the folder."},"parentFolderArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the folder."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:FolderResourcePermission"},"description":"A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` ."},"sharingModel":{"$ref":"#/types/aws-native:quicksight:FolderSharingModel","description":"The sharing scope of the folder."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags for the folders that you want to apply overrides to."}}},"aws-native:quicksight:RefreshSchedule":{"description":"Definition of the AWS::QuickSight::RefreshSchedule Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the data source.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The AWS account ID of the account that you are creating a schedule in.","replaceOnChanges":true},"dataSetId":{"type":"string","description":"The ID of the dataset that you are creating a refresh schedule for.","replaceOnChanges":true},"schedule":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMap","description":"The refresh schedule of a dataset."}},"type":"object","required":["arn"],"inputProperties":{"awsAccountId":{"type":"string","description":"The AWS account ID of the account that you are creating a schedule in."},"dataSetId":{"type":"string","description":"The ID of the dataset that you are creating a refresh schedule for."},"schedule":{"$ref":"#/types/aws-native:quicksight:RefreshScheduleMap","description":"The refresh schedule of a dataset."}}},"aws-native:quicksight:Template":{"description":"Definition of the AWS::QuickSight::Template Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the template.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The ID for the AWS account that the group is in. You use the ID for the AWS account that contains your Amazon Quick Sight account.","replaceOnChanges":true},"createdTime":{"type":"string","description":"\u003cp\u003eTime when this was created.\u003c/p\u003e"},"definition":{"$ref":"#/types/aws-native:quicksight:TemplateVersionDefinition"},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eTime when this was last updated.\u003c/p\u003e"},"name":{"type":"string","description":"A display name for the template."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateResourcePermission"},"description":"A list of resource permissions to be set on the template."},"sourceEntity":{"$ref":"#/types/aws-native:quicksight:TemplateSourceEntity","description":"The entity that you are using as a source when you create the template. In `SourceEntity` , you specify the type of object you're using as source: `SourceTemplate` for a template or `SourceAnalysis` for an analysis. Both of these require an Amazon Resource Name (ARN). For `SourceTemplate` , specify the ARN of the source template. For `SourceAnalysis` , specify the ARN of the source analysis. The `SourceTemplate` ARN can contain any AWS account and any Quick Sight-supported AWS Region .\n\nUse the `DataSetReferences` entity within `SourceTemplate` or `SourceAnalysis` to list the replacement datasets for the placeholders listed in the original. The schema in each dataset must match its placeholder.\n\nEither a `SourceEntity` or a `Definition` must be provided in order for the request to be valid."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the resource."},"templateId":{"type":"string","description":"An ID for the template that you want to create. This template is unique per AWS Region ; in each AWS account.","replaceOnChanges":true},"validationStrategy":{"$ref":"#/types/aws-native:quicksight:TemplateValidationStrategy","description":"The option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to `LENIENT` , validation is skipped for specific errors."},"version":{"$ref":"#/types/aws-native:quicksight:TemplateVersion"},"versionDescription":{"type":"string","description":"A description of the current template version being created. This API operation creates the first version of the template. Every time `UpdateTemplate` is called, a new version is created. Each version of the template maintains a description of the version in the `VersionDescription` field."}},"type":"object","required":["arn","awsAccountId","createdTime","lastUpdatedTime","templateId","version"],"inputProperties":{"awsAccountId":{"type":"string","description":"The ID for the AWS account that the group is in. You use the ID for the AWS account that contains your Amazon Quick Sight account."},"definition":{"$ref":"#/types/aws-native:quicksight:TemplateVersionDefinition"},"name":{"type":"string","description":"A display name for the template."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TemplateResourcePermission"},"description":"A list of resource permissions to be set on the template."},"sourceEntity":{"$ref":"#/types/aws-native:quicksight:TemplateSourceEntity","description":"The entity that you are using as a source when you create the template. In `SourceEntity` , you specify the type of object you're using as source: `SourceTemplate` for a template or `SourceAnalysis` for an analysis. Both of these require an Amazon Resource Name (ARN). For `SourceTemplate` , specify the ARN of the source template. For `SourceAnalysis` , specify the ARN of the source analysis. The `SourceTemplate` ARN can contain any AWS account and any Quick Sight-supported AWS Region .\n\nUse the `DataSetReferences` entity within `SourceTemplate` or `SourceAnalysis` to list the replacement datasets for the placeholders listed in the original. The schema in each dataset must match its placeholder.\n\nEither a `SourceEntity` or a `Definition` must be provided in order for the request to be valid."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the resource."},"templateId":{"type":"string","description":"An ID for the template that you want to create. This template is unique per AWS Region ; in each AWS account."},"validationStrategy":{"$ref":"#/types/aws-native:quicksight:TemplateValidationStrategy","description":"The option to relax the validation that is required to create and update analyses, dashboards, and templates with definition objects. When you set this value to `LENIENT` , validation is skipped for specific errors."},"versionDescription":{"type":"string","description":"A description of the current template version being created. This API operation creates the first version of the template. Every time `UpdateTemplate` is called, a new version is created. Each version of the template maintains a description of the version in the `VersionDescription` field."}},"requiredInputs":["awsAccountId","templateId"]},"aws-native:quicksight:Theme":{"description":"Definition of the AWS::QuickSight::Theme Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the theme.\u003c/p\u003e"},"awsAccountId":{"type":"string","description":"The ID of the AWS account where you want to store the new theme.","replaceOnChanges":true},"baseThemeId":{"type":"string","description":"The ID of the theme that a custom theme will inherit from. All themes inherit from one of the starting themes defined by Amazon Quick Sight. For a list of the starting themes, use `ListThemes` or choose *Themes* from within an analysis."},"configuration":{"$ref":"#/types/aws-native:quicksight:ThemeConfiguration","description":"The theme configuration, which contains the theme display properties."},"createdTime":{"type":"string","description":"\u003cp\u003eThe date and time that the theme was created.\u003c/p\u003e"},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe date and time that the theme was last updated.\u003c/p\u003e"},"name":{"type":"string","description":"A display name for the theme."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:ThemeResourcePermission"},"description":"A valid grouping of resource permissions to apply to the new theme."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs for the resource tag or tags that you want to add to the resource."},"themeId":{"type":"string","description":"An ID for the theme that you want to create. The theme ID is unique per AWS Region in each AWS account.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:quicksight:ThemeType","description":"Theme type."},"version":{"$ref":"#/types/aws-native:quicksight:ThemeVersion"},"versionDescription":{"type":"string","description":"A description of the first version of the theme that you're creating. Every time `UpdateTheme` is called, a new version is created. Each version of the theme has a description of the version in the `VersionDescription` field."}},"type":"object","required":["arn","awsAccountId","baseThemeId","configuration","createdTime","lastUpdatedTime","name","themeId","type","version"],"inputProperties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account where you want to store the new theme."},"baseThemeId":{"type":"string","description":"The ID of the theme that a custom theme will inherit from. All themes inherit from one of the starting themes defined by Amazon Quick Sight. For a list of the starting themes, use `ListThemes` or choose *Themes* from within an analysis."},"configuration":{"$ref":"#/types/aws-native:quicksight:ThemeConfiguration","description":"The theme configuration, which contains the theme display properties."},"name":{"type":"string","description":"A display name for the theme."},"permissions":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:ThemeResourcePermission"},"description":"A valid grouping of resource permissions to apply to the new theme."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs for the resource tag or tags that you want to add to the resource."},"themeId":{"type":"string","description":"An ID for the theme that you want to create. The theme ID is unique per AWS Region in each AWS account."},"versionDescription":{"type":"string","description":"A description of the first version of the theme that you're creating. Every time `UpdateTheme` is called, a new version is created. Each version of the theme has a description of the version in the `VersionDescription` field."}},"requiredInputs":["awsAccountId","baseThemeId","configuration","themeId"]},"aws-native:quicksight:Topic":{"description":"Definition of the AWS::QuickSight::Topic Resource Type.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the topic."},"awsAccountId":{"type":"string","description":"The ID of the AWS account that you want to create a topic in.","replaceOnChanges":true},"configOptions":{"$ref":"#/types/aws-native:quicksight:TopicConfigOptions","description":"Configuration options for a `Topic` ."},"customInstructions":{"$ref":"#/types/aws-native:quicksight:TopicCustomInstructions"},"dataSets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicDatasetMetadata"},"description":"The data sets that the topic is associated with."},"description":{"type":"string","description":"The description of the topic."},"folderArns":{"type":"array","items":{"type":"string"},"replaceOnChanges":true},"name":{"type":"string","description":"The name of the topic."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"replaceOnChanges":true},"topicId":{"type":"string","description":"The ID for the topic. This ID is unique per AWS Region for each AWS account.","replaceOnChanges":true},"userExperienceVersion":{"$ref":"#/types/aws-native:quicksight:TopicUserExperienceVersion","description":"The user experience version of the topic."}},"type":"object","required":["arn"],"inputProperties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account that you want to create a topic in."},"configOptions":{"$ref":"#/types/aws-native:quicksight:TopicConfigOptions","description":"Configuration options for a `Topic` ."},"customInstructions":{"$ref":"#/types/aws-native:quicksight:TopicCustomInstructions"},"dataSets":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:TopicDatasetMetadata"},"description":"The data sets that the topic is associated with."},"description":{"type":"string","description":"The description of the topic."},"folderArns":{"type":"array","items":{"type":"string"}},"name":{"type":"string","description":"The name of the topic."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"}},"topicId":{"type":"string","description":"The ID for the topic. This ID is unique per AWS Region for each AWS account."},"userExperienceVersion":{"$ref":"#/types/aws-native:quicksight:TopicUserExperienceVersion","description":"The user experience version of the topic."}}},"aws-native:quicksight:VpcConnection":{"description":"Definition of the AWS::QuickSight::VPCConnection Resource Type.","properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the VPC connection.\u003c/p\u003e"},"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:VpcConnectionVpcConnectionAvailabilityStatus","description":"The availability status of the VPC connection."},"awsAccountId":{"type":"string","description":"The AWS account ID of the account where you want to create a new VPC connection.","replaceOnChanges":true},"createdTime":{"type":"string","description":"\u003cp\u003eThe time that the VPC connection was created.\u003c/p\u003e"},"dnsResolvers":{"type":"array","items":{"type":"string"},"description":"A list of IP addresses of DNS resolver endpoints for the VPC connection."},"lastUpdatedTime":{"type":"string","description":"\u003cp\u003eThe time that the VPC connection was last updated.\u003c/p\u003e"},"name":{"type":"string","description":"The display name for the VPC connection."},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:quicksight:VpcConnectionNetworkInterface"},"description":"\u003cp\u003eA list of network interfaces.\u003c/p\u003e"},"roleArn":{"type":"string","description":"The ARN of the IAM role associated with the VPC connection."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 security group IDs associated with the VPC connection."},"status":{"$ref":"#/types/aws-native:quicksight:VpcConnectionVpcConnectionResourceStatus","description":"The HTTP status of the request."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs for the VPC connection."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs for the resource tag or tags assigned to the VPC connection."},"vpcConnectionId":{"type":"string","description":"The ID of the VPC connection that you're creating. This ID is a unique identifier for each AWS Region in an AWS account.","replaceOnChanges":true},"vpcId":{"type":"string","description":"\u003cp\u003eThe Amazon EC2 VPC ID associated with the VPC connection.\u003c/p\u003e"}},"type":"object","required":["arn","createdTime","lastUpdatedTime","networkInterfaces","status","vpcId"],"inputProperties":{"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:VpcConnectionVpcConnectionAvailabilityStatus","description":"The availability status of the VPC connection."},"awsAccountId":{"type":"string","description":"The AWS account ID of the account where you want to create a new VPC connection."},"dnsResolvers":{"type":"array","items":{"type":"string"},"description":"A list of IP addresses of DNS resolver endpoints for the VPC connection."},"name":{"type":"string","description":"The display name for the VPC connection."},"roleArn":{"type":"string","description":"The ARN of the IAM role associated with the VPC connection."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 security group IDs associated with the VPC connection."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs for the VPC connection."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs for the resource tag or tags assigned to the VPC connection."},"vpcConnectionId":{"type":"string","description":"The ID of the VPC connection that you're creating. This ID is a unique identifier for each AWS Region in an AWS account."}}},"aws-native:ram:Permission":{"description":"Resource type definition for AWS::RAM::Permission","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the new permission."},"isResourceTypeDefault":{"type":"boolean","description":"Set to true to use this as the default permission."},"name":{"type":"string","description":"The name of the permission.","replaceOnChanges":true},"permissionType":{"type":"string","description":"The type of managed permission. This can be one of the following values:\n\n- *AWS_MANAGED_PERMISSION* – AWS created and manages this managed permission. You can associate it with your resource shares, but you can't modify it.\n- *CUSTOMER_MANAGED_PERMISSION* – You, or another principal in your account created this managed permission. You can associate it with your resource shares and create new versions that have different permissions."},"policyTemplate":{"$ref":"pulumi.json#/Any","description":"Policy template for the permission.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RAM::Permission` for more information about the expected schema for this property.","replaceOnChanges":true},"resourceType":{"type":"string","description":"The resource type this permission can be used with.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies a list of one or more tag key and value pairs to attach to the permission."},"version":{"type":"string","description":"Version of the permission."}},"type":"object","required":["arn","isResourceTypeDefault","name","permissionType","policyTemplate","resourceType","version"],"inputProperties":{"name":{"type":"string","description":"The name of the permission."},"policyTemplate":{"$ref":"pulumi.json#/Any","description":"Policy template for the permission.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RAM::Permission` for more information about the expected schema for this property."},"resourceType":{"type":"string","description":"The resource type this permission can be used with."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies a list of one or more tag key and value pairs to attach to the permission."}},"requiredInputs":["policyTemplate","resourceType"]},"aws-native:ram:ResourceShare":{"description":"Resource type definition for AWS::RAM::ResourceShare\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myresourceshare = new AwsNative.Ram.ResourceShare(\"myresourceshare\", new()\n    {\n        Name = \"My Resource Share\",\n        ResourceArns = new[]\n        {\n            \"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\",\n        },\n        Principals = new[]\n        {\n            \"210987654321\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key1\",\n                Value = \"Value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key2\",\n                Value = \"Value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ram\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ram.NewResourceShare(ctx, \"myresourceshare\", \u0026ram.ResourceShareArgs{\n\t\t\tName: pulumi.String(\"My Resource Share\"),\n\t\t\tResourceArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"),\n\t\t\t},\n\t\t\tPrincipals: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"210987654321\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key2\"),\n\t\t\t\t\tValue: pulumi.String(\"Value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myresourceshare = new aws_native.ram.ResourceShare(\"myresourceshare\", {\n    name: \"My Resource Share\",\n    resourceArns: [\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n    principals: [\"210987654321\"],\n    tags: [\n        {\n            key: \"Key1\",\n            value: \"Value1\",\n        },\n        {\n            key: \"Key2\",\n            value: \"Value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmyresourceshare = aws_native.ram.ResourceShare(\"myresourceshare\",\n    name=\"My Resource Share\",\n    resource_arns=[\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n    principals=[\"210987654321\"],\n    tags=[\n        {\n            \"key\": \"Key1\",\n            \"value\": \"Value1\",\n        },\n        {\n            \"key\": \"Key2\",\n            \"value\": \"Value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myresourceshare = new AwsNative.Ram.ResourceShare(\"myresourceshare\", new()\n    {\n        Name = \"My Resource Share\",\n        ResourceArns = new[]\n        {\n            \"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\",\n        },\n        Principals = new[]\n        {\n            \"210987654321\",\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key1\",\n                Value = \"Value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Key2\",\n                Value = \"Value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ram\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ram.NewResourceShare(ctx, \"myresourceshare\", \u0026ram.ResourceShareArgs{\n\t\t\tName: pulumi.String(\"My Resource Share\"),\n\t\t\tResourceArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"),\n\t\t\t},\n\t\t\tPrincipals: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"210987654321\"),\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key1\"),\n\t\t\t\t\tValue: pulumi.String(\"Value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Key2\"),\n\t\t\t\t\tValue: pulumi.String(\"Value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myresourceshare = new aws_native.ram.ResourceShare(\"myresourceshare\", {\n    name: \"My Resource Share\",\n    resourceArns: [\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n    principals: [\"210987654321\"],\n    tags: [\n        {\n            key: \"Key1\",\n            value: \"Value1\",\n        },\n        {\n            key: \"Key2\",\n            value: \"Value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmyresourceshare = aws_native.ram.ResourceShare(\"myresourceshare\",\n    name=\"My Resource Share\",\n    resource_arns=[\"arn:aws:ec2:us-east-1:123456789012:resource-type/12345678-1234-1234-1234-12345678\"],\n    principals=[\"210987654321\"],\n    tags=[\n        {\n            \"key\": \"Key1\",\n            \"value\": \"Value1\",\n        },\n        {\n            \"key\": \"Key2\",\n            \"value\": \"Value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"allowExternalPrincipals":{"type":"boolean","description":"Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource share."},"creationTime":{"type":"string","description":"The date and time when the resource share was created."},"featureSet":{"$ref":"#/types/aws-native:ram:ResourceShareFeatureSet","description":"The feature set of the resource share."},"lastUpdatedTime":{"type":"string","description":"The date and time when the resource share was last updated."},"name":{"type":"string","description":"Specifies the name of the resource share."},"owningAccountId":{"type":"string","description":"The ID of the AWS account that owns the resource share."},"permissionArns":{"type":"array","items":{"type":"string"},"description":"Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share."},"principals":{"type":"array","items":{"type":"string"},"description":"Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user"},"resourceArns":{"type":"array","items":{"type":"string"},"description":"Specifies a list of one or more ARNs of the resources to associate with the resource share."},"sources":{"type":"array","items":{"type":"string"},"description":"Specifies from which source accounts the service principal has access to the resources in this resource share."},"status":{"$ref":"#/types/aws-native:ram:ResourceShareStatus","description":"The current status of the resource share."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."}},"type":"object","required":["arn","creationTime","featureSet","lastUpdatedTime","name","owningAccountId","status"],"inputProperties":{"allowExternalPrincipals":{"type":"boolean","description":"Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`."},"name":{"type":"string","description":"Specifies the name of the resource share."},"permissionArns":{"type":"array","items":{"type":"string"},"description":"Specifies the [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) of the AWS RAM permission to associate with the resource share. If you do not specify an ARN for the permission, AWS RAM automatically attaches the default version of the permission for each resource type. You can associate only one permission with each resource type included in the resource share."},"principals":{"type":"array","items":{"type":"string"},"description":"Specifies the principals to associate with the resource share. The possible values are:\n\n- An AWS account ID\n\n- An Amazon Resource Name (ARN) of an organization in AWS Organizations\n\n- An ARN of an organizational unit (OU) in AWS Organizations\n\n- An ARN of an IAM role\n\n- An ARN of an IAM user"},"resourceArns":{"type":"array","items":{"type":"string"},"description":"Specifies a list of one or more ARNs of the resources to associate with the resource share."},"sources":{"type":"array","items":{"type":"string"},"description":"Specifies from which source accounts the service principal has access to the resources in this resource share."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share."}}},"aws-native:rbin:Rule":{"description":"Resource Type definition for AWS::Rbin::Rule","properties":{"arn":{"type":"string","description":"Rule Arn is unique for each rule."},"description":{"type":"string","description":"The description of the retention rule."},"excludeResourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:rbin:RuleResourceTag"},"description":"Information about the exclude resource tags used to identify resources that are excluded by the retention rule."},"identifier":{"type":"string","description":"The unique ID of the retention rule."},"lockConfiguration":{"$ref":"#/types/aws-native:rbin:RuleUnlockDelay","description":"Information about the retention rule lock configuration."},"lockState":{"type":"string","description":"The lock state for the retention rule."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:rbin:RuleResourceTag"},"description":"Information about the resource tags used to identify resources that are retained by the retention rule."},"resourceType":{"$ref":"#/types/aws-native:rbin:RuleResourceType","description":"The resource type retained by the retention rule.","replaceOnChanges":true},"retentionPeriod":{"$ref":"#/types/aws-native:rbin:RuleRetentionPeriod","description":"Information about the retention period for which the retention rule is to retain resources."},"status":{"type":"string","description":"The state of the retention rule. Only retention rules that are in the available state retain resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Information about the tags assigned to the retention rule."}},"type":"object","required":["arn","identifier","lockState","resourceType","retentionPeriod"],"inputProperties":{"description":{"type":"string","description":"The description of the retention rule."},"excludeResourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:rbin:RuleResourceTag"},"description":"Information about the exclude resource tags used to identify resources that are excluded by the retention rule."},"lockConfiguration":{"$ref":"#/types/aws-native:rbin:RuleUnlockDelay","description":"Information about the retention rule lock configuration."},"resourceTags":{"type":"array","items":{"$ref":"#/types/aws-native:rbin:RuleResourceTag"},"description":"Information about the resource tags used to identify resources that are retained by the retention rule."},"resourceType":{"$ref":"#/types/aws-native:rbin:RuleResourceType","description":"The resource type retained by the retention rule."},"retentionPeriod":{"$ref":"#/types/aws-native:rbin:RuleRetentionPeriod","description":"Information about the retention period for which the retention rule is to retain resources."},"status":{"type":"string","description":"The state of the retention rule. Only retention rules that are in the available state retain resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Information about the tags assigned to the retention rule."}},"requiredInputs":["resourceType","retentionPeriod"]},"aws-native:rds:CustomDbEngineVersion":{"description":"Creates a custom DB engine version (CEV).","properties":{"databaseInstallationFilesS3BucketName":{"type":"string","description":"The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``.","replaceOnChanges":true},"databaseInstallationFilesS3Prefix":{"type":"string","description":"The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed.","replaceOnChanges":true},"dbEngineVersionArn":{"type":"string","description":"The ARN of the custom engine version."},"description":{"type":"string","description":"An optional description of your CEV."},"engine":{"type":"string","description":"The database engine to use for your custom engine version (CEV).\n Valid values:\n  +   ``custom-oracle-ee`` \n  +   ``custom-oracle-ee-cdb``","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:*``^[a-z0-9_.-]{1,60$``}","replaceOnChanges":true},"imageId":{"type":"string","description":"A value that indicates the ID of the AMI.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys.","replaceOnChanges":true},"manifest":{"type":"string","description":"The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n  + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*.","replaceOnChanges":true},"sourceCustomDbEngineVersionIdentifier":{"type":"string","description":"The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:rds:CustomDbEngineVersionStatus","description":"A value that indicates the status of a custom engine version (CEV)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"},"useAwsProvidedLatestImage":{"type":"boolean","description":"Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``.","replaceOnChanges":true}},"type":"object","required":["dbEngineVersionArn","engine","engineVersion"],"inputProperties":{"databaseInstallationFilesS3BucketName":{"type":"string","description":"The name of an Amazon S3 bucket that contains database installation files for your CEV. For example, a valid bucket name is ``my-custom-installation-files``."},"databaseInstallationFilesS3Prefix":{"type":"string","description":"The Amazon S3 directory that contains the database installation files for your CEV. For example, a valid bucket name is ``123456789012/cev1``. If this setting isn't specified, no prefix is assumed."},"description":{"type":"string","description":"An optional description of your CEV."},"engine":{"type":"string","description":"The database engine to use for your custom engine version (CEV).\n Valid values:\n  +   ``custom-oracle-ee`` \n  +   ``custom-oracle-ee-cdb``"},"engineVersion":{"type":"string","description":"The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:*``^[a-z0-9_.-]{1,60$``}"},"imageId":{"type":"string","description":"A value that indicates the ID of the AMI."},"kmsKeyId":{"type":"string","description":"The AWS KMS key identifier for an encrypted CEV. A symmetric encryption KMS key is required for RDS Custom, but optional for Amazon RDS.\n If you have an existing symmetric encryption KMS key in your account, you can use it with RDS Custom. No further action is necessary. If you don't already have a symmetric encryption KMS key in your account, follow the instructions in [Creating a symmetric encryption KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html#create-symmetric-cmk) in the *Key Management Service Developer Guide*.\n You can choose the same symmetric encryption key when you create a CEV and a DB instance, or choose different keys."},"manifest":{"type":"string","description":"The CEV manifest, which is a JSON document that describes the installation .zip files stored in Amazon S3. Specify the name/value pairs in a file or a quoted string. RDS Custom applies the patches in the order in which they are listed.\n The following JSON fields are valid:\n  + MediaImportTemplateVersion Version of the CEV manifest. The date is in the format YYYY-MM-DD. + databaseInstallationFileNames Ordered list of installation files for the CEV. + opatchFileNames Ordered list of OPatch installers used for the Oracle DB engine. + psuRuPatchFileNames The PSU and RU patches for this CEV. + OtherPatchFileNames The patches that are not in the list of PSU and RU patches. Amazon RDS applies these patches after applying the PSU and RU patches. \n For more information, see [Creating the CEV manifest](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.preparing.manifest) in the *Amazon RDS User Guide*."},"sourceCustomDbEngineVersionIdentifier":{"type":"string","description":"The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``."},"status":{"$ref":"#/types/aws-native:rds:CustomDbEngineVersionStatus","description":"A value that indicates the status of a custom engine version (CEV)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*"},"useAwsProvidedLatestImage":{"type":"boolean","description":"Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``."}},"requiredInputs":["engine","engineVersion"]},"aws-native:rds:DbCluster":{"description":"The ``AWS::RDS::DBCluster`` resource creates an Amazon Aurora DB cluster or Multi-AZ DB cluster.\n For more information about creating an Aurora DB cluster, see [Creating an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.CreateInstance.html) in the *Amazon Aurora User Guide*.\n For more information about creating a Multi-AZ DB cluster, see [Creating a Multi-AZ DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/create-multi-az-db-cluster.html) in the *Amazon RDS User Guide*.\n  You can only create this resource in AWS Regions where Amazon Aurora or Multi-AZ DB clusters are supported.\n   *Updating DB clusters* \n When properties labeled \"*Update requires:*[Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\" are updated, AWS CloudFormation first creates a replacement DB cluster, then changes references from other dependent resources to point to the replacement DB cluster, and finally deletes the old DB cluster.\n  We highly recommend that you take a snapshot of the database before updating the stack. If you don't, you lose the data when AWS CloudFormation replaces your DB cluster. To preserve your data, perform the following procedure:\n  1.  Deactivate any applications that are using the DB cluster so that there's no activity on the DB instance.\n  1.  Create a snapshot of the DB cluster. For more information, see [Creating a DB cluster snapshot](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_CreateSnapshotCluster.html).\n  1.  If you want to restore your DB cluster using a DB cluster snapshot, modify the updated template with your DB cluster changes and add the ``SnapshotIdentifier`` property with the ID of the DB cluster snapshot that you want to use.\n After you restore a DB cluster with a ``SnapshotIdentifier`` property, you must specify the same ``SnapshotIdentifier`` property for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the DB cluster snapshot again, and the data in the database is not changed. However, if you don't specify the ``SnapshotIdentifier`` property, an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB cluster is restored from the specified ``SnapshotIdentifier`` property, and the original DB cluster is deleted.\n  1.  Update the stack.\n  \n  Currently, when you are updating the stack for an Aurora Serverless DB cluster, you can't include changes to any other properties when you specify one of the following properties: ``PreferredBackupWindow``, ``PreferredMaintenanceWindow``, and ``Port``. This limitation doesn't apply to provisioned DB clusters.\n For more information about updating other properties of this resource, see ``ModifyDBCluster``. For more information about updating stacks, see [CloudFormation Stacks Updates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html).\n  *Deleting DB clusters* \n The default ``DeletionPolicy`` for ``AWS::RDS::DBCluster`` resources is ``Snapshot``. For more information about how AWS CloudFormation deletes resources, see [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html).","properties":{"allocatedStorage":{"type":"integer","description":"The amount of storage in gibibytes (GiB) to allocate to each DB instance in the Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only\n This setting is required to create a Multi-AZ DB cluster."},"associatedRoles":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbClusterDbClusterRole"},"description":"Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other Amazon Web Services on your behalf.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"autoMinorVersionUpgrade":{"type":"boolean","description":"Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster.\n For more information about automatic minor version upgrades, see [Automatically upgrading the minor engine version](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades)."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of Availability Zones (AZs) where instances in the DB cluster can be created. For information on AWS Regions and Availability Zones, see [Choosing the Regions and Availability Zones](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html) in the *Amazon Aurora User Guide*. \n Valid for: Aurora DB clusters only","replaceOnChanges":true},"backtrackWindow":{"type":"integer","description":"The target backtrack window, in seconds. To disable backtracking, set this value to ``0``.\n Valid for Cluster Type: Aurora MySQL DB clusters only\n Default: ``0``\n Constraints:\n  +  If specified, this value must be set to a number from 0 to 259,200 (72 hours)."},"backupRetentionPeriod":{"type":"integer","description":"The number of days for which automated backups are retained.\n Default: 1\n Constraints:\n  +  Must be a value from 1 to 35\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"clusterScalabilityType":{"type":"string","description":"Specifies the scalability mode of the Aurora DB cluster. When set to ``limitless``, the cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities. When set to ``standard`` (the default), the cluster uses normal DB instance creation.\n *Important:* Automated backup retention isn't supported with Aurora Limitless Database clusters. If you set this property to ``limitless``, you cannot set ``DeleteAutomatedBackups`` to ``false``. To create a backup, use manual snapshots instead.","replaceOnChanges":true},"copyTagsToSnapshot":{"type":"boolean","description":"A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"databaseInsightsMode":{"type":"string","description":"The mode of Database Insights to enable for the DB cluster.\n If you set this value to ``advanced``, you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"databaseName":{"type":"string","description":"The name of your database. If you don't provide a name, then Amazon RDS won't create a database in this DB cluster. For naming constraints, see [Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon Aurora User Guide*. \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"dbClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the DB cluster."},"dbClusterIdentifier":{"type":"string","description":"The DB cluster identifier. This parameter is stored as a lowercase string.\n Constraints:\n  +  Must contain from 1 to 63 letters, numbers, or hyphens.\n  +  First character must be a letter.\n  +  Can't end with a hyphen or contain two consecutive hyphens.\n  \n Example: ``my-cluster1``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"dbClusterInstanceClass":{"type":"string","description":"The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge``. Not all DB instance classes are available in all AWS-Regions, or for all database engines.\n For the full list of DB instance classes and availability for your engine, see [DB instance class](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html) in the *Amazon RDS User Guide*.\n This setting is required to create a Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only"},"dbClusterParameterGroupName":{"type":"string","description":"The name of the DB cluster parameter group to associate with this DB cluster.\n  If you apply a parameter group to an existing DB cluster, then its DB instances might need to reboot. This can result in an outage while the DB instances are rebooting.\n If you apply a change to parameter group associated with a stopped DB cluster, then the update stack waits until the DB cluster is started.\n  To list all of the available DB cluster parameter group names, use the following command:\n  ``aws rds describe-db-cluster-parameter-groups --query \"DBClusterParameterGroups[].DBClusterParameterGroupName\" --output text`` \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"dbClusterResourceId":{"type":"string","description":"The AWS Region -unique, immutable identifier for the DB cluster. This identifier is found in AWS CloudTrail log entries whenever the KMS key for the DB cluster is accessed."},"dbInstanceParameterGroupName":{"type":"string","description":"The name of the DB parameter group to apply to all instances of the DB cluster.\n  When you apply a parameter group using the ``DBInstanceParameterGroupName`` parameter, the DB cluster isn't rebooted automatically. Also, parameter changes are applied immediately rather than during the next maintenance window.\n  Valid for Cluster Type: Aurora DB clusters only\n Default: The existing name setting\n Constraints:\n  +  The DB parameter group must be in the same DB parameter group family as this DB cluster.\n  +  The ``DBInstanceParameterGroupName`` parameter is valid in combination with the ``AllowMajorVersionUpgrade`` parameter for a major version upgrade only."},"dbSubnetGroupName":{"type":"string","description":"A DB subnet group that you want to associate with this DB cluster. \n If you are restoring a DB cluster to a point in time with ``RestoreType`` set to ``copy-on-write``, and don't specify a DB subnet group name, then the DB cluster is restored with a default DB subnet group.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"dbSystemId":{"type":"string","description":"Reserved for future use.","replaceOnChanges":true},"deleteAutomatedBackups":{"type":"boolean","description":"Specifies whether to remove automated backups immediately after the DB cluster is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule."},"deletionProtection":{"type":"boolean","description":"A value that indicates whether the DB cluster has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection is disabled.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"domain":{"type":"string","description":"Indicates the directory ID of the Active Directory to create the DB cluster.\n For Amazon Aurora DB clusters, Amazon RDS can use Kerberos authentication to authenticate users that connect to the DB cluster.\n For more information, see [Kerberos authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/kerberos-authentication.html) in the *Amazon Aurora User Guide*.\n Valid for: Aurora DB clusters only"},"domainIamRoleName":{"type":"string","description":"Specifies the name of the IAM role to use when making API calls to the Directory Service.\n Valid for: Aurora DB clusters only"},"enableCloudwatchLogsExports":{"type":"array","items":{"type":"string"},"description":"The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see [Publishing Database Logs to Amazon CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch) in the *Amazon Aurora User Guide*.\n  *Aurora MySQL* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Aurora PostgreSQL* \n Valid values: ``postgresql``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"enableGlobalWriteForwarding":{"type":"boolean","description":"Specifies whether to enable this DB cluster to forward write operations to the primary cluster of a global cluster (Aurora global database). By default, write operations are not allowed on Aurora DB clusters that are secondary clusters in an Aurora global database.\n You can set this value only on Aurora DB clusters that are members of an Aurora global database. With this parameter enabled, a secondary cluster can forward writes to the current primary cluster, and the resulting changes are replicated back to this cluster. For the primary DB cluster of an Aurora global database, this value is used immediately if the primary is demoted by a global cluster API operation, but it does nothing until then.\n Valid for Cluster Type: Aurora DB clusters only"},"enableHttpEndpoint":{"type":"boolean","description":"Specifies whether to enable the HTTP endpoint for the DB cluster. By default, the HTTP endpoint isn't enabled.\n When enabled, the HTTP endpoint provides a connectionless web service API (RDS Data API) for running SQL queries on the DB cluster. You can also query your database from inside the RDS console with the RDS query editor.\n For more information, see [Using RDS Data API](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html) in the *Amazon Aurora User Guide*.\n Valid for Cluster Type: Aurora DB clusters only"},"enableIamDatabaseAuthentication":{"type":"boolean","description":"A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled.\n For more information, see [IAM Database Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.html) in the *Amazon Aurora User Guide.*\n Valid for: Aurora DB clusters only"},"enableLocalWriteForwarding":{"type":"boolean","description":"Specifies whether read replicas can forward write operations to the writer DB instance in the DB cluster. By default, write operations aren't allowed on reader DB instances.\n Valid for: Aurora DB clusters only"},"endpoint":{"$ref":"#/types/aws-native:rds:DbClusterEndpoint"},"engine":{"type":"string","description":"The name of the database engine to be used for this DB cluster.\n Valid Values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``mysql`` \n  +   ``postgres`` \n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"engineLifecycleSupport":{"type":"string","description":"The life cycle type for this DB cluster.\n  By default, this value is set to ``open-source-rds-extended-support``, which enrolls your DB cluster into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled``. In this case, creating the DB cluster will fail if the DB major version is past its end of standard support date.\n  You can use this setting to enroll your DB cluster into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB cluster past the end of standard support for that engine version. For more information, see the following sections:\n  +  Amazon Aurora - [Amazon RDS Extended Support with Amazon Aurora](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/extended-support.html) in the *Amazon Aurora User Guide*\n  +  Amazon RDS - [Amazon RDS Extended Support with Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html) in the *Amazon RDS User Guide*\n  \n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled``\n Default: ``open-source-rds-extended-support``"},"engineMode":{"type":"string","description":"The DB engine mode of the DB cluster, either ``provisioned`` or ``serverless``.\n The ``serverless`` engine mode only applies for Aurora Serverless v1 DB clusters. Aurora Serverless v2 DB clusters use the ``provisioned`` engine mode.\n For information about limitations and requirements for Serverless DB clusters, see the following sections in the *Amazon Aurora User Guide*:\n  +   [Limitations of Aurora Serverless v1](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations) \n  +   [Requirements for Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html) \n  \n Valid for Cluster Type: Aurora DB clusters only","replaceOnChanges":true},"engineVersion":{"type":"string","description":"The version number of the database engine to use.\n  Don't use this property if your DB cluster is a member of a global database cluster. Instead, specify the ``EngineVersion`` property on the [AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html) resource. Major version upgrades aren't supported for individual members of a global cluster. Use ``ModifyGlobalCluster`` to upgrade all members of the global cluster.\n  To list all of the available engine versions for Aurora MySQL version 2 (5.7-compatible) and version 3 (8.0-compatible), use the following command:\n  ``aws rds describe-db-engine-versions --engine aurora-mysql --query \"DBEngineVersions[].EngineVersion\"`` \n You can supply either ``5.7`` or ``8.0`` to use the default engine version for Aurora MySQL version 2 or version 3, respectively.\n To list all of the available engine versions for Aurora PostgreSQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine aurora-postgresql --query \"DBEngineVersions[].EngineVersion\"`` \n To list all of the available engine versions for RDS for MySQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine mysql --query \"DBEngineVersions[].EngineVersion\"`` \n To list all of the available engine versions for RDS for PostgreSQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine postgres --query \"DBEngineVersions[].EngineVersion\"`` \n  *Aurora MySQL* \n For information, see [Database engine updates for Amazon Aurora MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Updates.html) in the *Amazon Aurora User Guide*.\n  *Aurora PostgreSQL* \n For information, see [Amazon Aurora PostgreSQL releases and engine versions](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Updates.20180305.html) in the *Amazon Aurora User Guide*.\n  *MySQL* \n For information, see [Amazon RDS for MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt) in the *Amazon RDS User Guide*.\n  *PostgreSQL* \n For information, see [Amazon RDS for PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts) in the *Amazon RDS User Guide*.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"globalClusterIdentifier":{"type":"string","description":"If you are configuring an Aurora global database cluster and want your Aurora DB cluster to be a secondary member in the global database cluster, specify the global cluster ID of the global database cluster. To define the primary database cluster of the global cluster, use the [AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html) resource. \n  If you aren't configuring a global database cluster, don't specify this property. \n  To remove the DB cluster from a global database cluster, specify an empty value for the ``GlobalClusterIdentifier`` property.\n  For information about Aurora global databases, see [Working with Amazon Aurora Global Databases](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-global-database.html) in the *Amazon Aurora User Guide*.\n Valid for: Aurora DB clusters only"},"iops":{"type":"integer","description":"The amount of Provisioned IOPS (input/output operations per second) to be initially allocated for each DB instance in the Multi-AZ DB cluster.\n For information about valid IOPS values, see [Provisioned IOPS storage](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#USER_PIOPS) in the *Amazon RDS User Guide*.\n This setting is required to create a Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only\n Constraints:\n  +  Must be a multiple between .5 and 50 of the storage amount for the DB cluster."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the database instances in the DB cluster, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef``. If you enable the ``StorageEncrypted`` property but don't specify this property, the default KMS key is used. If you specify this property, you must set the ``StorageEncrypted`` property to ``true``.\n If you specify the ``SnapshotIdentifier`` property, the ``StorageEncrypted`` property value is inherited from the snapshot, and if the DB cluster is encrypted, the specified ``KmsKeyId`` property is used.\n If you create a read replica of an encrypted DB cluster in another AWS Region, make sure to set ``KmsKeyId`` to a KMS key identifier that is valid in the destination AWS Region. This KMS key is used to encrypt the read replica in that AWS Region.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"manageMasterUserPassword":{"type":"boolean","description":"Specifies whether to manage the master user password with AWS Secrets Manager.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Constraints:\n  +  Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified."},"masterUserAuthenticationType":{"type":"string","description":"Specifies the authentication type for the master user. With IAM master user authentication, you can configure the master DB user with IAM database authentication when you create a DB cluster.\n You can specify one of the following values:\n  +  ``password`` - Use standard database authentication with a password.\n  +  ``iam-db-auth`` - Use IAM database authentication for the master user.\n  \n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n This option is only valid for RDS for MySQL, RDS for MariaDB, RDS for PostgreSQL, Aurora MySQL, and Aurora PostgreSQL engines."},"masterUserPassword":{"type":"string","description":"The master password for the DB instance.\n  If you specify the ``SourceDBClusterIdentifier``, ``SnapshotIdentifier``, or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"masterUserSecret":{"$ref":"#/types/aws-native:rds:DbClusterMasterUserSecret","description":"The secret managed by RDS in AWS Secrets Manager for the master user password.\n  When you restore a DB cluster from a snapshot, Amazon RDS generates a new secret instead of reusing the secret specified in the ``SecretArn`` property. This ensures that the restored DB cluster is securely managed with a dedicated secret. To maintain consistent integration with your application, you might need to update resource configurations to reference the newly created secret.\n  For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*"},"masterUsername":{"type":"string","description":"The name of the master user for the DB cluster.\n  If you specify the ``SourceDBClusterIdentifier``, ``SnapshotIdentifier``, or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"monitoringInterval":{"type":"integer","description":"The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0``.\n If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0``.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``\n Default: ``0``"},"monitoringRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess``. For information on creating a monitoring role, see [Setting up and enabling Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling) in the *Amazon RDS User Guide*.\n If ``MonitoringInterval`` is set to a value other than ``0``, supply a ``MonitoringRoleArn`` value.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"networkType":{"type":"string","description":"The network type of the DB cluster.\n Valid values:\n  +   ``IPV4`` \n  +   ``DUAL`` \n  \n The network type is determined by the ``DBSubnetGroup`` specified for the DB cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols (``DUAL``).\n For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the *Amazon Aurora User Guide.*\n Valid for: Aurora DB clusters only"},"performanceInsightsEnabled":{"type":"boolean","description":"Specifies whether to turn on Performance Insights for the DB cluster.\n For more information, see [Using Amazon Performance Insights](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html) in the *Amazon RDS User Guide*.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"performanceInsightsKmsKeyId":{"type":"string","description":"The AWS KMS key identifier for encryption of Performance Insights data.\n The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.\n If you don't specify a value for ``PerformanceInsightsKMSKeyId``, then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS-account. Your AWS-account has a different default KMS key for each AWS-Region.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"performanceInsightsRetentionPeriod":{"type":"integer","description":"The number of days to retain Performance Insights data. When creating a DB cluster without enabling Performance Insights, you can't specify the parameter ``PerformanceInsightsRetentionPeriod``.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values:\n  +   ``7`` \n  +  *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31)\n  +   ``731`` \n  \n Default: ``7`` days\n If you specify a retention period that isn't valid, such as ``94``, Amazon RDS issues an error."},"port":{"type":"integer","description":"The port number on which the DB instances in the DB cluster accept connections.\n Default:\n  +  RDS for MySQL and Aurora MySQL - ``3306``\n  +  RDS for PostgreSQL and Aurora PostgreSQL - ``5432``\n  \n  The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see [Port](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port) for the AWS::RDS::DBInstance resource.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created. For more information, see [Backup Window](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow) in the *Amazon Aurora User Guide.*\n Constraints:\n  +  Must be in the format ``hh24:mi-hh24:mi``.\n  +  Must be in Universal Coordinated Time (UTC).\n  +  Must not conflict with the preferred maintenance window.\n  +  Must be at least 30 minutes.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n Format: ``ddd:hh24:mi-ddd:hh24:mi``\n The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see [Maintaining an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora) in the *Amazon Aurora User Guide.*\n Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun.\n Constraints: Minimum 30-minute window.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"publiclyAccessible":{"type":"boolean","description":"Specifies whether the DB cluster is publicly accessible.\n Valid for Cluster Type: Multi-AZ DB clusters only\n When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its domain name system (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is controlled by its security group settings.\n When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address.\n The default behavior when ``PubliclyAccessible`` is not specified depends on whether a ``DBSubnetGroup`` is specified.\n If ``DBSubnetGroup`` isn't specified, ``PubliclyAccessible`` defaults to ``true``.\n If ``DBSubnetGroup`` is specified, ``PubliclyAccessible`` defaults to ``false`` unless the value of ``DBSubnetGroup`` is ``default``, in which case ``PubliclyAccessible`` defaults to ``true``.\n If ``PubliclyAccessible`` is true and the VPC that the ``DBSubnetGroup`` is in doesn't have an internet gateway attached to it, Amazon RDS returns an error.","replaceOnChanges":true},"readEndpoint":{"$ref":"#/types/aws-native:rds:DbClusterReadEndpoint"},"replicationSourceIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica.\n Valid for: Aurora DB clusters only"},"restoreToTime":{"type":"string","description":"The date and time to restore the DB cluster to.\n Valid Values: Value must be a time in Universal Coordinated Time (UTC) format\n Constraints:\n  +  Must be before the latest restorable time for the DB instance\n  +  Must be specified if ``UseLatestRestorableTime`` parameter isn't provided\n  +  Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled\n  +  Can't be specified if the ``RestoreType`` parameter is ``copy-on-write``\n  \n This property must be used with ``SourceDBClusterIdentifier`` property. The resulting cluster will have the identifier that matches the value of the ``DBclusterIdentifier`` property.\n Example: ``2015-03-07T23:45:00Z``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"restoreType":{"type":"string","description":"The type of restore to be performed. You can specify one of the following values:\n  +  ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster.\n  +  ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster.\n  \n If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"scalingConfiguration":{"$ref":"#/types/aws-native:rds:DbClusterScalingConfiguration","description":"The scaling configuration of an Aurora Serverless v1 DB cluster.\n This property is only supported for Aurora Serverless v1. For Aurora Serverless v2, Use the ``ServerlessV2ScalingConfiguration`` property.\n Valid for: Aurora Serverless v1 DB clusters only"},"serverlessV2ScalingConfiguration":{"$ref":"#/types/aws-native:rds:DbClusterServerlessV2ScalingConfiguration","description":"The scaling configuration of an Aurora Serverless V2 DB cluster. \n This property is only supported for Aurora Serverless v2. For Aurora Serverless v1, Use the ``ScalingConfiguration`` property.\n Valid for: Aurora Serverless v2 DB clusters only"},"snapshotIdentifier":{"type":"string","description":"The identifier for the DB snapshot or DB cluster snapshot to restore from.\n You can use either the name or the Amazon Resource Name (ARN) to specify a DB cluster snapshot. However, you can use only the ARN to specify a DB snapshot.\n After you restore a DB cluster with a ``SnapshotIdentifier`` property, you must specify the same ``SnapshotIdentifier`` property for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the snapshot again, and the data in the database is not changed. However, if you don't specify the ``SnapshotIdentifier`` property, an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB cluster is restored from the specified ``SnapshotIdentifier`` property, and the original DB cluster is deleted.\n If you specify the ``SnapshotIdentifier`` property to restore a DB cluster (as opposed to specifying it for DB cluster updates), then don't specify the following properties:\n  +   ``GlobalClusterIdentifier`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``ReplicationSourceIdentifier`` \n  +   ``RestoreType`` \n  +   ``SourceDBClusterIdentifier`` \n  +   ``SourceRegion`` \n  +  ``StorageEncrypted`` (for an encrypted snapshot)\n  +   ``UseLatestRestorableTime`` \n  \n Constraints:\n  +  Must match the identifier of an existing Snapshot.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"sourceDbClusterIdentifier":{"type":"string","description":"When restoring a DB cluster to a point in time, the identifier of the source DB cluster from which to restore.\n Constraints:\n  +  Must match the identifier of an existing DBCluster.\n  +  Cannot be specified if ``SourceDbClusterResourceId`` is specified. You must specify either ``SourceDBClusterIdentifier`` or ``SourceDbClusterResourceId``, but not both.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"sourceDbClusterResourceId":{"type":"string","description":"The resource ID of the source DB cluster from which to restore.","replaceOnChanges":true},"sourceRegion":{"type":"string","description":"The AWS Region which contains the source DB cluster when replicating a DB cluster. For example, ``us-east-1``. \n Valid for: Aurora DB clusters only","replaceOnChanges":true},"storageEncrypted":{"type":"boolean","description":"Indicates whether the DB cluster is encrypted.\n If you specify the ``KmsKeyId`` property, then you must enable encryption.\n If you specify the ``SourceDBClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, and if the DB cluster is encrypted, the specified ``KmsKeyId`` property is used.\n If you specify the ``SnapshotIdentifier`` and the specified snapshot is encrypted, don't specify this property. The value is inherited from the snapshot, and the specified ``KmsKeyId`` property is used.\n If you specify the ``SnapshotIdentifier`` and the specified snapshot isn't encrypted, you can use this property to specify that the restored DB cluster is encrypted. Specify the ``KmsKeyId`` property for the KMS key to use for encryption. If you don't want the restored DB cluster to be encrypted, then don't set this property or set it to ``false``.\n  If you specify both the ``StorageEncrypted`` and ``SnapshotIdentifier`` properties without specifying the ``KmsKeyId`` property, then the restored DB cluster inherits the encryption settings from the DB snapshot that provide.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"storageThroughput":{"type":"integer","description":"The storage throughput for the DB cluster. The throughput is automatically set based on the IOPS that you provision, and is not configurable.\n\nThis setting is only for non-Aurora Multi-AZ DB clusters."},"storageType":{"type":"string","description":"The storage type to associate with the DB cluster.\n For information on storage types for Aurora DB clusters, see [Storage configurations for Amazon Aurora DB clusters](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.StorageReliability.html#aurora-storage-type). For information on storage types for Multi-AZ DB clusters, see [Settings for creating Multi-AZ DB clusters](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/create-multi-az-db-cluster.html#create-multi-az-db-cluster-settings).\n This setting is required to create a Multi-AZ DB cluster.\n When specified for a Multi-AZ DB cluster, a value for the ``Iops`` parameter is required.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values:\n  +  Aurora DB clusters - ``aurora | aurora-iopt1``\n  +  Multi-AZ DB clusters - ``io1 | io2 | gp3``\n  \n Default:\n  +  Aurora DB clusters - ``aurora``\n  +  Multi-AZ DB clusters - ``io1``\n  \n  When you create an Aurora DB cluster with the storage type set to ``aurora-iopt1``, the storage type is returned in the response. The storage type isn't returned when you set it to ``aurora``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB cluster.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"useLatestRestorableTime":{"type":"boolean","description":"A value that indicates whether to restore the DB cluster to the latest restorable backup time. By default, the DB cluster is not restored to the latest restorable backup time. \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","replaceOnChanges":true},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 VPC security groups to associate with this DB cluster.\n If you plan to update the resource, don't specify VPC security groups in a shared VPC.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"}},"type":"object","required":["dbClusterArn","dbClusterResourceId","endpoint","readEndpoint","storageThroughput"],"inputProperties":{"allocatedStorage":{"type":"integer","description":"The amount of storage in gibibytes (GiB) to allocate to each DB instance in the Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only\n This setting is required to create a Multi-AZ DB cluster."},"associatedRoles":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbClusterDbClusterRole"},"description":"Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other Amazon Web Services on your behalf.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"autoMinorVersionUpgrade":{"type":"boolean","description":"Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster.\n For more information about automatic minor version upgrades, see [Automatically upgrading the minor engine version](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades)."},"availabilityZones":{"type":"array","items":{"type":"string"},"description":"A list of Availability Zones (AZs) where instances in the DB cluster can be created. For information on AWS Regions and Availability Zones, see [Choosing the Regions and Availability Zones](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.RegionsAndAvailabilityZones.html) in the *Amazon Aurora User Guide*. \n Valid for: Aurora DB clusters only"},"backtrackWindow":{"type":"integer","description":"The target backtrack window, in seconds. To disable backtracking, set this value to ``0``.\n Valid for Cluster Type: Aurora MySQL DB clusters only\n Default: ``0``\n Constraints:\n  +  If specified, this value must be set to a number from 0 to 259,200 (72 hours)."},"backupRetentionPeriod":{"type":"integer","description":"The number of days for which automated backups are retained.\n Default: 1\n Constraints:\n  +  Must be a value from 1 to 35\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"clusterScalabilityType":{"type":"string","description":"Specifies the scalability mode of the Aurora DB cluster. When set to ``limitless``, the cluster operates as an Aurora Limitless Database, allowing you to create a DB shard group for horizontal scaling (sharding) capabilities. When set to ``standard`` (the default), the cluster uses normal DB instance creation.\n *Important:* Automated backup retention isn't supported with Aurora Limitless Database clusters. If you set this property to ``limitless``, you cannot set ``DeleteAutomatedBackups`` to ``false``. To create a backup, use manual snapshots instead."},"copyTagsToSnapshot":{"type":"boolean","description":"A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"databaseInsightsMode":{"type":"string","description":"The mode of Database Insights to enable for the DB cluster.\n If you set this value to ``advanced``, you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"databaseName":{"type":"string","description":"The name of your database. If you don't provide a name, then Amazon RDS won't create a database in this DB cluster. For naming constraints, see [Naming Constraints](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon Aurora User Guide*. \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"dbClusterIdentifier":{"type":"string","description":"The DB cluster identifier. This parameter is stored as a lowercase string.\n Constraints:\n  +  Must contain from 1 to 63 letters, numbers, or hyphens.\n  +  First character must be a letter.\n  +  Can't end with a hyphen or contain two consecutive hyphens.\n  \n Example: ``my-cluster1``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"dbClusterInstanceClass":{"type":"string","description":"The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge``. Not all DB instance classes are available in all AWS-Regions, or for all database engines.\n For the full list of DB instance classes and availability for your engine, see [DB instance class](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html) in the *Amazon RDS User Guide*.\n This setting is required to create a Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only"},"dbClusterParameterGroupName":{"type":"string","description":"The name of the DB cluster parameter group to associate with this DB cluster.\n  If you apply a parameter group to an existing DB cluster, then its DB instances might need to reboot. This can result in an outage while the DB instances are rebooting.\n If you apply a change to parameter group associated with a stopped DB cluster, then the update stack waits until the DB cluster is started.\n  To list all of the available DB cluster parameter group names, use the following command:\n  ``aws rds describe-db-cluster-parameter-groups --query \"DBClusterParameterGroups[].DBClusterParameterGroupName\" --output text`` \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"dbInstanceParameterGroupName":{"type":"string","description":"The name of the DB parameter group to apply to all instances of the DB cluster.\n  When you apply a parameter group using the ``DBInstanceParameterGroupName`` parameter, the DB cluster isn't rebooted automatically. Also, parameter changes are applied immediately rather than during the next maintenance window.\n  Valid for Cluster Type: Aurora DB clusters only\n Default: The existing name setting\n Constraints:\n  +  The DB parameter group must be in the same DB parameter group family as this DB cluster.\n  +  The ``DBInstanceParameterGroupName`` parameter is valid in combination with the ``AllowMajorVersionUpgrade`` parameter for a major version upgrade only."},"dbSubnetGroupName":{"type":"string","description":"A DB subnet group that you want to associate with this DB cluster. \n If you are restoring a DB cluster to a point in time with ``RestoreType`` set to ``copy-on-write``, and don't specify a DB subnet group name, then the DB cluster is restored with a default DB subnet group.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"dbSystemId":{"type":"string","description":"Reserved for future use."},"deleteAutomatedBackups":{"type":"boolean","description":"Specifies whether to remove automated backups immediately after the DB cluster is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB cluster is deleted, unless the AWS Backup policy specifies a point-in-time restore rule."},"deletionProtection":{"type":"boolean","description":"A value that indicates whether the DB cluster has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection is disabled.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"domain":{"type":"string","description":"Indicates the directory ID of the Active Directory to create the DB cluster.\n For Amazon Aurora DB clusters, Amazon RDS can use Kerberos authentication to authenticate users that connect to the DB cluster.\n For more information, see [Kerberos authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/kerberos-authentication.html) in the *Amazon Aurora User Guide*.\n Valid for: Aurora DB clusters only"},"domainIamRoleName":{"type":"string","description":"Specifies the name of the IAM role to use when making API calls to the Directory Service.\n Valid for: Aurora DB clusters only"},"enableCloudwatchLogsExports":{"type":"array","items":{"type":"string"},"description":"The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see [Publishing Database Logs to Amazon CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch) in the *Amazon Aurora User Guide*.\n  *Aurora MySQL* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Aurora PostgreSQL* \n Valid values: ``postgresql``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"enableGlobalWriteForwarding":{"type":"boolean","description":"Specifies whether to enable this DB cluster to forward write operations to the primary cluster of a global cluster (Aurora global database). By default, write operations are not allowed on Aurora DB clusters that are secondary clusters in an Aurora global database.\n You can set this value only on Aurora DB clusters that are members of an Aurora global database. With this parameter enabled, a secondary cluster can forward writes to the current primary cluster, and the resulting changes are replicated back to this cluster. For the primary DB cluster of an Aurora global database, this value is used immediately if the primary is demoted by a global cluster API operation, but it does nothing until then.\n Valid for Cluster Type: Aurora DB clusters only"},"enableHttpEndpoint":{"type":"boolean","description":"Specifies whether to enable the HTTP endpoint for the DB cluster. By default, the HTTP endpoint isn't enabled.\n When enabled, the HTTP endpoint provides a connectionless web service API (RDS Data API) for running SQL queries on the DB cluster. You can also query your database from inside the RDS console with the RDS query editor.\n For more information, see [Using RDS Data API](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html) in the *Amazon Aurora User Guide*.\n Valid for Cluster Type: Aurora DB clusters only"},"enableIamDatabaseAuthentication":{"type":"boolean","description":"A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled.\n For more information, see [IAM Database Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.html) in the *Amazon Aurora User Guide.*\n Valid for: Aurora DB clusters only"},"enableLocalWriteForwarding":{"type":"boolean","description":"Specifies whether read replicas can forward write operations to the writer DB instance in the DB cluster. By default, write operations aren't allowed on reader DB instances.\n Valid for: Aurora DB clusters only"},"engine":{"type":"string","description":"The name of the database engine to be used for this DB cluster.\n Valid Values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``mysql`` \n  +   ``postgres`` \n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"engineLifecycleSupport":{"type":"string","description":"The life cycle type for this DB cluster.\n  By default, this value is set to ``open-source-rds-extended-support``, which enrolls your DB cluster into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled``. In this case, creating the DB cluster will fail if the DB major version is past its end of standard support date.\n  You can use this setting to enroll your DB cluster into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB cluster past the end of standard support for that engine version. For more information, see the following sections:\n  +  Amazon Aurora - [Amazon RDS Extended Support with Amazon Aurora](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/extended-support.html) in the *Amazon Aurora User Guide*\n  +  Amazon RDS - [Amazon RDS Extended Support with Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html) in the *Amazon RDS User Guide*\n  \n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled``\n Default: ``open-source-rds-extended-support``"},"engineMode":{"type":"string","description":"The DB engine mode of the DB cluster, either ``provisioned`` or ``serverless``.\n The ``serverless`` engine mode only applies for Aurora Serverless v1 DB clusters. Aurora Serverless v2 DB clusters use the ``provisioned`` engine mode.\n For information about limitations and requirements for Serverless DB clusters, see the following sections in the *Amazon Aurora User Guide*:\n  +   [Limitations of Aurora Serverless v1](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html#aurora-serverless.limitations) \n  +   [Requirements for Aurora Serverless v2](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless-v2.requirements.html) \n  \n Valid for Cluster Type: Aurora DB clusters only"},"engineVersion":{"type":"string","description":"The version number of the database engine to use.\n  Don't use this property if your DB cluster is a member of a global database cluster. Instead, specify the ``EngineVersion`` property on the [AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html) resource. Major version upgrades aren't supported for individual members of a global cluster. Use ``ModifyGlobalCluster`` to upgrade all members of the global cluster.\n  To list all of the available engine versions for Aurora MySQL version 2 (5.7-compatible) and version 3 (8.0-compatible), use the following command:\n  ``aws rds describe-db-engine-versions --engine aurora-mysql --query \"DBEngineVersions[].EngineVersion\"`` \n You can supply either ``5.7`` or ``8.0`` to use the default engine version for Aurora MySQL version 2 or version 3, respectively.\n To list all of the available engine versions for Aurora PostgreSQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine aurora-postgresql --query \"DBEngineVersions[].EngineVersion\"`` \n To list all of the available engine versions for RDS for MySQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine mysql --query \"DBEngineVersions[].EngineVersion\"`` \n To list all of the available engine versions for RDS for PostgreSQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine postgres --query \"DBEngineVersions[].EngineVersion\"`` \n  *Aurora MySQL* \n For information, see [Database engine updates for Amazon Aurora MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Updates.html) in the *Amazon Aurora User Guide*.\n  *Aurora PostgreSQL* \n For information, see [Amazon Aurora PostgreSQL releases and engine versions](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Updates.20180305.html) in the *Amazon Aurora User Guide*.\n  *MySQL* \n For information, see [Amazon RDS for MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt) in the *Amazon RDS User Guide*.\n  *PostgreSQL* \n For information, see [Amazon RDS for PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts) in the *Amazon RDS User Guide*.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"globalClusterIdentifier":{"type":"string","description":"If you are configuring an Aurora global database cluster and want your Aurora DB cluster to be a secondary member in the global database cluster, specify the global cluster ID of the global database cluster. To define the primary database cluster of the global cluster, use the [AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html) resource. \n  If you aren't configuring a global database cluster, don't specify this property. \n  To remove the DB cluster from a global database cluster, specify an empty value for the ``GlobalClusterIdentifier`` property.\n  For information about Aurora global databases, see [Working with Amazon Aurora Global Databases](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-global-database.html) in the *Amazon Aurora User Guide*.\n Valid for: Aurora DB clusters only"},"iops":{"type":"integer","description":"The amount of Provisioned IOPS (input/output operations per second) to be initially allocated for each DB instance in the Multi-AZ DB cluster.\n For information about valid IOPS values, see [Provisioned IOPS storage](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#USER_PIOPS) in the *Amazon RDS User Guide*.\n This setting is required to create a Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only\n Constraints:\n  +  Must be a multiple between .5 and 50 of the storage amount for the DB cluster."},"kmsKeyId":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS KMS key that is used to encrypt the database instances in the DB cluster, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef``. If you enable the ``StorageEncrypted`` property but don't specify this property, the default KMS key is used. If you specify this property, you must set the ``StorageEncrypted`` property to ``true``.\n If you specify the ``SnapshotIdentifier`` property, the ``StorageEncrypted`` property value is inherited from the snapshot, and if the DB cluster is encrypted, the specified ``KmsKeyId`` property is used.\n If you create a read replica of an encrypted DB cluster in another AWS Region, make sure to set ``KmsKeyId`` to a KMS key identifier that is valid in the destination AWS Region. This KMS key is used to encrypt the read replica in that AWS Region.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"manageMasterUserPassword":{"type":"boolean","description":"Specifies whether to manage the master user password with AWS Secrets Manager.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Constraints:\n  +  Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified."},"masterUserAuthenticationType":{"type":"string","description":"Specifies the authentication type for the master user. With IAM master user authentication, you can configure the master DB user with IAM database authentication when you create a DB cluster.\n You can specify one of the following values:\n  +  ``password`` - Use standard database authentication with a password.\n  +  ``iam-db-auth`` - Use IAM database authentication for the master user.\n  \n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n This option is only valid for RDS for MySQL, RDS for MariaDB, RDS for PostgreSQL, Aurora MySQL, and Aurora PostgreSQL engines."},"masterUserPassword":{"type":"string","description":"The master password for the DB instance.\n  If you specify the ``SourceDBClusterIdentifier``, ``SnapshotIdentifier``, or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"masterUserSecret":{"$ref":"#/types/aws-native:rds:DbClusterMasterUserSecret","description":"The secret managed by RDS in AWS Secrets Manager for the master user password.\n  When you restore a DB cluster from a snapshot, Amazon RDS generates a new secret instead of reusing the secret specified in the ``SecretArn`` property. This ensures that the restored DB cluster is securely managed with a dedicated secret. To maintain consistent integration with your application, you might need to update resource configurations to reference the newly created secret.\n  For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*"},"masterUsername":{"type":"string","description":"The name of the master user for the DB cluster.\n  If you specify the ``SourceDBClusterIdentifier``, ``SnapshotIdentifier``, or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"monitoringInterval":{"type":"integer","description":"The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0``.\n If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0``.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``\n Default: ``0``"},"monitoringRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess``. For information on creating a monitoring role, see [Setting up and enabling Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling) in the *Amazon RDS User Guide*.\n If ``MonitoringInterval`` is set to a value other than ``0``, supply a ``MonitoringRoleArn`` value.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"networkType":{"type":"string","description":"The network type of the DB cluster.\n Valid values:\n  +   ``IPV4`` \n  +   ``DUAL`` \n  \n The network type is determined by the ``DBSubnetGroup`` specified for the DB cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols (``DUAL``).\n For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the *Amazon Aurora User Guide.*\n Valid for: Aurora DB clusters only"},"performanceInsightsEnabled":{"type":"boolean","description":"Specifies whether to turn on Performance Insights for the DB cluster.\n For more information, see [Using Amazon Performance Insights](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html) in the *Amazon RDS User Guide*.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"performanceInsightsKmsKeyId":{"type":"string","description":"The AWS KMS key identifier for encryption of Performance Insights data.\n The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.\n If you don't specify a value for ``PerformanceInsightsKMSKeyId``, then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS-account. Your AWS-account has a different default KMS key for each AWS-Region.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"performanceInsightsRetentionPeriod":{"type":"integer","description":"The number of days to retain Performance Insights data. When creating a DB cluster without enabling Performance Insights, you can't specify the parameter ``PerformanceInsightsRetentionPeriod``.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values:\n  +   ``7`` \n  +  *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31)\n  +   ``731`` \n  \n Default: ``7`` days\n If you specify a retention period that isn't valid, such as ``94``, Amazon RDS issues an error."},"port":{"type":"integer","description":"The port number on which the DB instances in the DB cluster accept connections.\n Default:\n  +  RDS for MySQL and Aurora MySQL - ``3306``\n  +  RDS for PostgreSQL and Aurora PostgreSQL - ``5432``\n  \n  The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see [Port](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port) for the AWS::RDS::DBInstance resource.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created. For more information, see [Backup Window](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow) in the *Amazon Aurora User Guide.*\n Constraints:\n  +  Must be in the format ``hh24:mi-hh24:mi``.\n  +  Must be in Universal Coordinated Time (UTC).\n  +  Must not conflict with the preferred maintenance window.\n  +  Must be at least 30 minutes.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n Format: ``ddd:hh24:mi-ddd:hh24:mi``\n The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see [Maintaining an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora) in the *Amazon Aurora User Guide.*\n Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun.\n Constraints: Minimum 30-minute window.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"publiclyAccessible":{"type":"boolean","description":"Specifies whether the DB cluster is publicly accessible.\n Valid for Cluster Type: Multi-AZ DB clusters only\n When the DB cluster is publicly accessible and you connect from outside of the DB cluster's virtual private cloud (VPC), its domain name system (DNS) endpoint resolves to the public IP address. When you connect from within the same VPC as the DB cluster, the endpoint resolves to the private IP address. Access to the DB cluster is controlled by its security group settings.\n When the DB cluster isn't publicly accessible, it is an internal DB cluster with a DNS name that resolves to a private IP address.\n The default behavior when ``PubliclyAccessible`` is not specified depends on whether a ``DBSubnetGroup`` is specified.\n If ``DBSubnetGroup`` isn't specified, ``PubliclyAccessible`` defaults to ``true``.\n If ``DBSubnetGroup`` is specified, ``PubliclyAccessible`` defaults to ``false`` unless the value of ``DBSubnetGroup`` is ``default``, in which case ``PubliclyAccessible`` defaults to ``true``.\n If ``PubliclyAccessible`` is true and the VPC that the ``DBSubnetGroup`` is in doesn't have an internet gateway attached to it, Amazon RDS returns an error."},"replicationSourceIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica.\n Valid for: Aurora DB clusters only"},"restoreToTime":{"type":"string","description":"The date and time to restore the DB cluster to.\n Valid Values: Value must be a time in Universal Coordinated Time (UTC) format\n Constraints:\n  +  Must be before the latest restorable time for the DB instance\n  +  Must be specified if ``UseLatestRestorableTime`` parameter isn't provided\n  +  Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled\n  +  Can't be specified if the ``RestoreType`` parameter is ``copy-on-write``\n  \n This property must be used with ``SourceDBClusterIdentifier`` property. The resulting cluster will have the identifier that matches the value of the ``DBclusterIdentifier`` property.\n Example: ``2015-03-07T23:45:00Z``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"restoreType":{"type":"string","description":"The type of restore to be performed. You can specify one of the following values:\n  +  ``full-copy`` - The new DB cluster is restored as a full copy of the source DB cluster.\n  +  ``copy-on-write`` - The new DB cluster is restored as a clone of the source DB cluster.\n  \n If you don't specify a ``RestoreType`` value, then the new DB cluster is restored as a full copy of the source DB cluster.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"scalingConfiguration":{"$ref":"#/types/aws-native:rds:DbClusterScalingConfiguration","description":"The scaling configuration of an Aurora Serverless v1 DB cluster.\n This property is only supported for Aurora Serverless v1. For Aurora Serverless v2, Use the ``ServerlessV2ScalingConfiguration`` property.\n Valid for: Aurora Serverless v1 DB clusters only"},"serverlessV2ScalingConfiguration":{"$ref":"#/types/aws-native:rds:DbClusterServerlessV2ScalingConfiguration","description":"The scaling configuration of an Aurora Serverless V2 DB cluster. \n This property is only supported for Aurora Serverless v2. For Aurora Serverless v1, Use the ``ScalingConfiguration`` property.\n Valid for: Aurora Serverless v2 DB clusters only"},"snapshotIdentifier":{"type":"string","description":"The identifier for the DB snapshot or DB cluster snapshot to restore from.\n You can use either the name or the Amazon Resource Name (ARN) to specify a DB cluster snapshot. However, you can use only the ARN to specify a DB snapshot.\n After you restore a DB cluster with a ``SnapshotIdentifier`` property, you must specify the same ``SnapshotIdentifier`` property for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the snapshot again, and the data in the database is not changed. However, if you don't specify the ``SnapshotIdentifier`` property, an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB cluster is restored from the specified ``SnapshotIdentifier`` property, and the original DB cluster is deleted.\n If you specify the ``SnapshotIdentifier`` property to restore a DB cluster (as opposed to specifying it for DB cluster updates), then don't specify the following properties:\n  +   ``GlobalClusterIdentifier`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``ReplicationSourceIdentifier`` \n  +   ``RestoreType`` \n  +   ``SourceDBClusterIdentifier`` \n  +   ``SourceRegion`` \n  +  ``StorageEncrypted`` (for an encrypted snapshot)\n  +   ``UseLatestRestorableTime`` \n  \n Constraints:\n  +  Must match the identifier of an existing Snapshot.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"sourceDbClusterIdentifier":{"type":"string","description":"When restoring a DB cluster to a point in time, the identifier of the source DB cluster from which to restore.\n Constraints:\n  +  Must match the identifier of an existing DBCluster.\n  +  Cannot be specified if ``SourceDbClusterResourceId`` is specified. You must specify either ``SourceDBClusterIdentifier`` or ``SourceDbClusterResourceId``, but not both.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"sourceDbClusterResourceId":{"type":"string","description":"The resource ID of the source DB cluster from which to restore."},"sourceRegion":{"type":"string","description":"The AWS Region which contains the source DB cluster when replicating a DB cluster. For example, ``us-east-1``. \n Valid for: Aurora DB clusters only"},"storageEncrypted":{"type":"boolean","description":"Indicates whether the DB cluster is encrypted.\n If you specify the ``KmsKeyId`` property, then you must enable encryption.\n If you specify the ``SourceDBClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, and if the DB cluster is encrypted, the specified ``KmsKeyId`` property is used.\n If you specify the ``SnapshotIdentifier`` and the specified snapshot is encrypted, don't specify this property. The value is inherited from the snapshot, and the specified ``KmsKeyId`` property is used.\n If you specify the ``SnapshotIdentifier`` and the specified snapshot isn't encrypted, you can use this property to specify that the restored DB cluster is encrypted. Specify the ``KmsKeyId`` property for the KMS key to use for encryption. If you don't want the restored DB cluster to be encrypted, then don't set this property or set it to ``false``.\n  If you specify both the ``StorageEncrypted`` and ``SnapshotIdentifier`` properties without specifying the ``KmsKeyId`` property, then the restored DB cluster inherits the encryption settings from the DB snapshot that provide.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"storageType":{"type":"string","description":"The storage type to associate with the DB cluster.\n For information on storage types for Aurora DB clusters, see [Storage configurations for Amazon Aurora DB clusters](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.StorageReliability.html#aurora-storage-type). For information on storage types for Multi-AZ DB clusters, see [Settings for creating Multi-AZ DB clusters](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/create-multi-az-db-cluster.html#create-multi-az-db-cluster-settings).\n This setting is required to create a Multi-AZ DB cluster.\n When specified for a Multi-AZ DB cluster, a value for the ``Iops`` parameter is required.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values:\n  +  Aurora DB clusters - ``aurora | aurora-iopt1``\n  +  Multi-AZ DB clusters - ``io1 | io2 | gp3``\n  \n Default:\n  +  Aurora DB clusters - ``aurora``\n  +  Multi-AZ DB clusters - ``io1``\n  \n  When you create an Aurora DB cluster with the storage type set to ``aurora-iopt1``, the storage type is returned in the response. The storage type isn't returned when you set it to ``aurora``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB cluster.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters"},"useLatestRestorableTime":{"type":"boolean","description":"A value that indicates whether to restore the DB cluster to the latest restorable backup time. By default, the DB cluster is not restored to the latest restorable backup time. \n Valid for: Aurora DB clusters and Multi-AZ DB clusters"},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 VPC security groups to associate with this DB cluster.\n If you plan to update the resource, don't specify VPC security groups in a shared VPC.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"}}},"aws-native:rds:DbClusterParameterGroup":{"description":"The ``AWS::RDS::DBClusterParameterGroup`` resource creates a new Amazon RDS DB cluster parameter group.\n For information about configuring parameters for Amazon Aurora DB clusters, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  If you apply a parameter group to a DB cluster, then its DB instances might need to reboot. This can result in an outage while the DB instances are rebooting.\n If you apply a change to parameter group associated with a stopped DB cluster, then the updated stack waits until the DB cluster is started.","properties":{"dbClusterParameterGroupName":{"type":"string","description":"The name of the DB cluster parameter group.\n Constraints:\n  +  Must not match the name of an existing DB cluster parameter group.\n  \n  This value is stored as a lowercase string.","replaceOnChanges":true},"description":{"type":"string","description":"The description for the DB cluster parameter group.","replaceOnChanges":true},"family":{"type":"string","description":"The DB cluster parameter group family name. A DB cluster parameter group can be associated with one and only one DB cluster parameter group family, and can be applied only to a DB cluster running a database engine and engine version compatible with that DB cluster parameter group family.\n  *Aurora MySQL* \n Example: ``aurora-mysql5.7``, ``aurora-mysql8.0``\n  *Aurora PostgreSQL* \n Example: ``aurora-postgresql14``\n  *RDS for MySQL* \n Example: ``mysql8.0``\n  *RDS for PostgreSQL* \n Example: ``postgres13``\n To list all of the available parameter group families for a DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine \u003cengine\u003e`` \n For example, to list all of the available parameter group families for the Aurora PostgreSQL DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine aurora-postgresql`` \n  The output contains duplicates.\n  The following are the valid DB engine values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``mysql`` \n  +   ``postgres``","replaceOnChanges":true},"parameters":{"$ref":"pulumi.json#/Any","description":"Provides a list of parameters for the DB cluster parameter group.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RDS::DBClusterParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB cluster parameter group."}},"type":"object","required":["description","family","parameters"],"inputProperties":{"dbClusterParameterGroupName":{"type":"string","description":"The name of the DB cluster parameter group.\n Constraints:\n  +  Must not match the name of an existing DB cluster parameter group.\n  \n  This value is stored as a lowercase string."},"description":{"type":"string","description":"The description for the DB cluster parameter group."},"family":{"type":"string","description":"The DB cluster parameter group family name. A DB cluster parameter group can be associated with one and only one DB cluster parameter group family, and can be applied only to a DB cluster running a database engine and engine version compatible with that DB cluster parameter group family.\n  *Aurora MySQL* \n Example: ``aurora-mysql5.7``, ``aurora-mysql8.0``\n  *Aurora PostgreSQL* \n Example: ``aurora-postgresql14``\n  *RDS for MySQL* \n Example: ``mysql8.0``\n  *RDS for PostgreSQL* \n Example: ``postgres13``\n To list all of the available parameter group families for a DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine \u003cengine\u003e`` \n For example, to list all of the available parameter group families for the Aurora PostgreSQL DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine aurora-postgresql`` \n  The output contains duplicates.\n  The following are the valid DB engine values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``mysql`` \n  +   ``postgres``"},"parameters":{"$ref":"pulumi.json#/Any","description":"Provides a list of parameters for the DB cluster parameter group.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RDS::DBClusterParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB cluster parameter group."}},"requiredInputs":["description","family","parameters"]},"aws-native:rds:DbInstance":{"description":"The ``AWS::RDS::DBInstance`` resource creates an Amazon DB instance. The new DB instance can be an RDS DB instance, or it can be a DB instance in an Aurora DB cluster.\n For more information about creating an RDS DB instance, see [Creating an Amazon RDS DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_CreateDBInstance.html) in the *Amazon RDS User Guide*.\n For more information about creating a DB instance in an Aurora DB cluster, see [Creating an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.CreateInstance.html) in the *Amazon Aurora User Guide*.\n If you import an existing DB instance, and the template configuration doesn't match the actual configuration of the DB instance, AWS CloudFormation applies the changes in the template during the import operation.\n  If a DB instance is deleted or replaced during an update, AWS CloudFormation deletes all automated snapshots. However, it retains manual DB snapshots. During an update that requires replacement, you can apply a stack policy to prevent DB instances from being replaced. For more information, see [Prevent Updates to Stack Resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html).\n   *Updating DB instances* \n When properties labeled \"*Update requires:*[Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\" are updated, AWS CloudFormation first creates a replacement DB instance, then changes references from other dependent resources to point to the replacement DB instance, and finally deletes the old DB instance.\n  We highly recommend that you take a snapshot of the database before updating the stack. If you don't, you lose the data when AWS CloudFormation replaces your DB instance. To preserve your data, perform the following procedure:\n  1.  Deactivate any applications that are using the DB instance so that there's no activity on the DB instance.\n  1.  Create a snapshot of the DB instance. For more information, see [Creating a DB Snapshot](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_CreateSnapshot.html).\n  1.  If you want to restore your instance using a DB snapshot, modify the updated template with your DB instance changes and add the ``DBSnapshotIdentifier`` property with the ID of the DB snapshot that you want to use.\n After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you can delete the ``DBSnapshotIdentifier`` property. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted.\n  1.  Update the stack.\n  \n  For more information about updating other properties of this resource, see ``ModifyDBInstance``. For more information about updating stacks, see [CloudFormation Stacks Updates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html).\n  *Deleting DB instances* \n For DB instances that are part of an Aurora DB cluster, you can set a deletion policy for your DB instance to control how AWS CloudFormation handles the DB instance when the stack is deleted. For Amazon RDS DB instances, you can choose to *retain* the DB instance, to *delete* the DB instance, or to *create a snapshot* of the DB instance. The default AWS CloudFormation behavior depends on the ``DBClusterIdentifier`` property:\n  1.  For ``AWS::RDS::DBInstance`` resources that don't specify the ``DBClusterIdentifier`` property, AWS CloudFormation saves a snapshot of the DB instance.\n  1.   For ``AWS::RDS::DBInstance`` resources that do specify the ``DBClusterIdentifier`` property, AWS CloudFormation deletes the DB instance.\n  \n  For more information, see [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html).","properties":{"additionalStorageVolumes":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceAdditionalStorageVolume"},"description":"The additional storage volumes associated with the DB instance. RDS supports additional storage volumes for RDS for Oracle and RDS for SQL Server."},"allocatedStorage":{"type":"string","description":"The amount of storage in gibibytes (GiB) to be initially allocated for the database instance.\n  If any value is set in the ``Iops`` parameter, ``AllocatedStorage`` must be at least 100 GiB, which corresponds to the minimum Iops value of 1,000. If you increase the ``Iops`` value (in 1,000 IOPS increments), then you must also increase the ``AllocatedStorage`` value (in 100-GiB increments). \n   *Amazon Aurora* \n Not applicable. Aurora cluster volumes automatically grow as the amount of data in your database increases, though you are only charged for the space that you use in an Aurora cluster volume.\n  *Db2* \n Constraints to the amount of storage for each storage type are the following:\n  +  General Purpose (SSD) storage (gp3): Must be an integer from 20 to 64000.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 64000.\n  \n  *MySQL* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *MariaDB* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *PostgreSQL* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *Oracle* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 10 to 3072.\n  \n  *SQL Server* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 16384.\n  +  Web and Express editions: Must be an integer from 20 to 16384.\n  \n  +  Provisioned IOPS storage (io1):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 16384.\n  +  Web and Express editions: Must be an integer from 20 to 16384.\n  \n  +  Magnetic storage (standard):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 1024.\n  +  Web and Express editions: Must be an integer from 20 to 1024."},"allowMajorVersionUpgrade":{"type":"boolean","description":"A value that indicates whether major version upgrades are allowed. Changing this parameter doesn't result in an outage and the change is asynchronously applied as soon as possible.\n Constraints: Major version upgrades must be allowed when specifying a value for the ``EngineVersion`` parameter that is a different major version than the DB instance's current version."},"applyImmediately":{"type":"boolean","description":"Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``PreferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state.\n In addition to the settings described in [Modifying a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.DBInstance.Modifying.html), this property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group.\n Default: ``true``"},"associatedRoles":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceDbInstanceRole"},"description":"The IAMlong (IAM) roles associated with the DB instance. \n  *Amazon Aurora* \n Not applicable. The associated roles are managed by the DB cluster."},"autoMinorVersionUpgrade":{"type":"boolean","description":"A value that indicates whether minor engine upgrades are applied automatically to the DB instance during the maintenance window. By default, minor engine upgrades are applied automatically."},"automaticBackupReplicationKmsKeyId":{"type":"string","description":"The AWS KMS key identifier for encryption of the replicated automated backups. The KMS key ID is the Amazon Resource Name (ARN) for the KMS encryption key in the destination AWS-Region, for example, ``arn:aws:kms:us-east-1:123456789012:key/AKIAIOSFODNN7EXAMPLE``."},"automaticBackupReplicationRegion":{"type":"string","description":"The AWS-Region associated with the automated backup."},"automaticBackupReplicationRetentionPeriod":{"type":"integer","description":"The retention period for automated backups in a different AWS Region. Use this parameter to set a unique retention period that only applies to cross-Region automated backups. To enable automated backups in a different Region, specify a positive value for the ``AutomaticBackupReplicationRegion`` parameter. \n If not specified, this parameter defaults to the value of the ``BackupRetentionPeriod`` parameter. The maximum allowed value is 35."},"automaticRestartTime":{"type":"string","description":"The time when a stopped DB instance is restarted automatically."},"availabilityZone":{"type":"string","description":"The Availability Zone (AZ) where the database will be created. For information on AWS-Regions and Availability Zones, see [Regions and Availability Zones](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html).\n For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.\n Default: A random, system-chosen Availability Zone in the endpoint's AWS-Region.\n Constraints:\n  +  The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment.\n  +  The specified Availability Zone must be in the same AWS-Region as the current endpoint.\n  \n Example: ``us-east-1d``"},"backupRetentionPeriod":{"type":"integer","description":"The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups.\n  *Amazon Aurora* \n Not applicable. The retention period for automated backups is managed by the DB cluster.\n Default: 1\n Constraints:\n  +  Must be a value from 0 to 35\n  +  Can't be set to 0 if the DB instance is a source to read replicas"},"backupTarget":{"type":"string","description":"The location for storing automated backups and manual snapshots.\n Valid Values:\n  +  ``local`` (Dedicated Local Zone)\n  +  ``outposts`` (AWS Outposts)\n  +  ``region`` (AWS-Region)\n  \n Default: ``region``\n For more information, see [Working with Amazon RDS on Outposts](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-on-outposts.html) in the *Amazon RDS User Guide*.","replaceOnChanges":true},"caCertificateIdentifier":{"type":"string","description":"The identifier of the CA certificate for this DB instance.\n For more information, see [Using SSL/TLS to encrypt a connection to a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html) in the *Amazon RDS User Guide* and [Using SSL/TLS to encrypt a connection to a DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html) in the *Amazon Aurora User Guide*."},"certificateDetails":{"$ref":"#/types/aws-native:rds:DbInstanceCertificateDetails"},"certificateRotationRestart":{"type":"boolean","description":"Specifies whether the DB instance is restarted when you rotate your SSL/TLS certificate.\n By default, the DB instance is restarted when you rotate your SSL/TLS certificate. The certificate is not updated until the DB instance is restarted.\n  Set this parameter only if you are *not* using SSL/TLS to connect to the DB instance.\n  If you are using SSL/TLS to connect to the DB instance, follow the appropriate instructions for your DB engine to rotate your SSL/TLS certificate:\n  +  For more information about rotating your SSL/TLS certificate for RDS DB engines, see [Rotating Your SSL/TLS Certificate.](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html) in the *Amazon RDS User Guide.*\n  +  For more information about rotating your SSL/TLS certificate for Aurora DB engines, see [Rotating Your SSL/TLS Certificate](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL-certificate-rotation.html) in the *Amazon Aurora User Guide*.\n  \n This setting doesn't apply to RDS Custom DB instances."},"characterSetName":{"type":"string","description":"For supported engines, indicates that the DB instance should be associated with the specified character set.\n  *Amazon Aurora* \n Not applicable. The character set is managed by the DB cluster. For more information, see [AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html).","replaceOnChanges":true},"copyTagsToSnapshot":{"type":"boolean","description":"Specifies whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied.\n This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting."},"customIamInstanceProfile":{"type":"string","description":"The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance.\n This setting is required for RDS Custom.\n Constraints:\n  +  The profile must exist in your account.\n  +  The profile must have an IAM role that Amazon EC2 has permissions to assume.\n  +  The instance profile name and the associated IAM role name must start with the prefix ``AWSRDSCustom``.\n  \n For the list of permissions required for the IAM role, see [Configure IAM and your VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-setup-orcl.html#custom-setup-orcl.iam-vpc) in the *Amazon RDS User Guide*.","replaceOnChanges":true},"databaseInsightsMode":{"type":"string","description":"The mode of Database Insights to enable for the DB instance.\n  Aurora DB instances inherit this value from the DB cluster, so you can't change this value."},"dbClusterIdentifier":{"type":"string","description":"The identifier of the DB cluster that this DB instance will belong to.\n This setting doesn't apply to RDS Custom DB instances.","replaceOnChanges":true},"dbClusterSnapshotIdentifier":{"type":"string","description":"The identifier for the Multi-AZ DB cluster snapshot to restore from.\n For more information on Multi-AZ DB clusters, see [Multi-AZ DB cluster deployments](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/multi-az-db-clusters-concepts.html) in the *Amazon RDS User Guide*.\n Constraints:\n  +  Must match the identifier of an existing Multi-AZ DB cluster snapshot.\n  +  Can't be specified when ``DBSnapshotIdentifier`` is specified.\n  +  Must be specified when ``DBSnapshotIdentifier`` isn't specified.\n  +  If you are restoring from a shared manual Multi-AZ DB cluster snapshot, the ``DBClusterSnapshotIdentifier`` must be the ARN of the shared snapshot.\n  +  Can't be the identifier of an Aurora DB cluster snapshot."},"dbInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the DB instance."},"dbInstanceClass":{"type":"string","description":"The compute and memory capacity of the DB instance, for example ``db.m5.large``. Not all DB instance classes are available in all AWS-Regions, or for all database engines. For the full list of DB instance classes, and availability for your engine, see [DB instance classes](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html) in the *Amazon RDS User Guide* or [Aurora DB instance classes](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.DBInstanceClass.html) in the *Amazon Aurora User Guide*."},"dbInstanceIdentifier":{"type":"string","description":"A name for the DB instance. If you specify a name, AWS CloudFormation converts it to lowercase. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the DB instance. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n For information about constraints that apply to DB instance identifiers, see [Naming constraints in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon RDS User Guide*.\n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"dbInstanceStatus":{"type":"string","description":"The current state of this DB instance."},"dbName":{"type":"string","description":"The meaning of this parameter differs according to the database engine you use.\n  If you specify the ``DBSnapshotIdentifier`` property, this property only applies to RDS for Oracle.\n   *Amazon Aurora* \n Not applicable. The database name is managed by the DB cluster.\n  *Db2* \n The name of the database to create when the DB instance is created. If this parameter isn't specified, no database is created in the DB instance.\n Constraints:\n  +  Must contain 1 to 64 letters or numbers.\n  +  Must begin with a letter. Subsequent characters can be letters, underscores, or digits (0-9).\n  +  Can't be a word reserved by the specified database engine.\n  \n  *MySQL* \n The name of the database to create when the DB instance is created. If this parameter is not specified, no database is created in the DB instance.\n Constraints:\n  +  Must contain 1 to 64 letters or numbers.\n  +  Can't be a word reserved by the specified database engine\n  \n  *MariaDB* \n The name of the database to create when the DB instance is created. If this parameter is not specified, no database is created in the DB instance.\n Constraints:\n  +  Must contain 1 to 64 letters or numbers.\n  +  Can't be a word reserved by the specified database engine\n  \n  *PostgreSQL* \n The name of the database to create when the DB instance is created. If this parameter is not specified, the default ``postgres`` database is created in the DB instance.\n Constraints:\n  +  Must begin with a letter. Subsequent characters can be letters, underscores, or digits (0-9).\n  +  Must contain 1 to 63 characters.\n  +  Can't be a word reserved by the specified database engine\n  \n  *Oracle* \n The Oracle System ID (SID) of the created DB instance. If you specify ``null``, the default value ``ORCL`` is used. You can't specify the string NULL, or any other reserved word, for ``DBName``. \n Default: ``ORCL``\n Constraints:\n  +  Can't be longer than 8 characters\n  \n  *SQL Server* \n Not applicable. Must be null.","replaceOnChanges":true},"dbParameterGroupName":{"type":"string","description":"The name of an existing DB parameter group or a reference to an [AWS::RDS::DBParameterGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html) resource created in the template.\n To list all of the available DB parameter group names, use the following command:\n  ``aws rds describe-db-parameter-groups --query \"DBParameterGroups[].DBParameterGroupName\" --output text`` \n  If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot.\n  If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used."},"dbSecurityGroups":{"type":"array","items":{"type":"string"},"description":"A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template.\n  If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups.\n  If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations:\n  +   ``AllocatedStorage`` \n  +   ``AutoMinorVersionUpgrade`` \n  +   ``AvailabilityZone`` \n  +   ``BackupRetentionPeriod`` \n  +   ``CharacterSetName`` \n  +   ``DBInstanceClass`` \n  +   ``DBName`` \n  +   ``DBParameterGroupName`` \n  +   ``DBSecurityGroups`` \n  +   ``DBSubnetGroupName`` \n  +   ``Engine`` \n  +   ``EngineVersion`` \n  +   ``Iops`` \n  +   ``LicenseModel`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``MultiAZ`` \n  +   ``OptionGroupName`` \n  +   ``PreferredBackupWindow`` \n  +   ``PreferredMaintenanceWindow`` \n  \n All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType``, ``StorageEncrypted``, or ``KmsKeyId``. If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance."},"dbSnapshotIdentifier":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot.\n By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack.\n Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties, and the point-in-time recovery properties ``RestoreTime`` and ``UseLatestRestorableTime``. For information about the properties that you can specify, see the [RestoreDBInstanceFromDBSnapshot](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html) action in the *Amazon RDS API Reference*.\n After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted.\n If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties:\n  +   ``CharacterSetName`` \n  +   ``DBClusterIdentifier`` \n  +   ``DBName`` \n  +   ``KmsKeyId`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``PromotionTier`` \n  +   ``SourceDBInstanceIdentifier`` \n  +   ``SourceRegion`` \n  +  ``StorageEncrypted`` (for an unencrypted snapshot)\n  +   ``Timezone`` \n  \n  *Amazon Aurora* \n Not applicable. Snapshot restore is managed by the DB cluster."},"dbSubnetGroupName":{"type":"string","description":"A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. \n If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName``, the DB instance fails to launch. \n For more information about using Amazon RDS in a VPC, see [Amazon VPC and Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html) in the *Amazon RDS User Guide*. \n This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting.","replaceOnChanges":true},"dbSystemId":{"type":"string","description":"The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term \"Oracle database instance\" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB``. The Oracle SID is also the name of your CDB.","replaceOnChanges":true},"dbiResourceId":{"type":"string","description":"The AWS Region-unique, immutable identifier for the DB instance. This identifier is found in AWS CloudTrail log entries whenever the AWS KMS key for the DB instance is accessed."},"dedicatedLogVolume":{"type":"boolean","description":"Indicates whether the DB instance has a dedicated log volume (DLV) enabled."},"deleteAutomatedBackups":{"type":"boolean","description":"A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted.\n  *Amazon Aurora* \n Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted."},"deletionProtection":{"type":"boolean","description":"Specifies whether the DB instance has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection isn't enabled. For more information, see [Deleting a DB Instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html).\n This setting doesn't apply to Amazon Aurora DB instances. You can enable or disable deletion protection for the DB cluster. For more information, see ``CreateDBCluster``. DB instances in a DB cluster can be deleted even when deletion protection is enabled for the DB cluster."},"domain":{"type":"string","description":"The Active Directory directory ID to create the DB instance in. Currently, only Db2, MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances can be created in an Active Directory Domain.\n For more information, see [Kerberos Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html) in the *Amazon RDS User Guide*."},"domainAuthSecretArn":{"type":"string","description":"The ARN for the Secrets Manager secret with the credentials for the user joining the domain.\n Example: ``arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456``"},"domainDnsIps":{"type":"array","items":{"type":"string"},"description":"The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers.\n Constraints:\n  +  Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list.\n  \n Example: ``123.124.125.126,234.235.236.237``"},"domainFqdn":{"type":"string","description":"The fully qualified domain name (FQDN) of an Active Directory domain.\n Constraints:\n  +  Can't be longer than 64 characters.\n  \n Example: ``mymanagedADtest.mymanagedAD.mydomain``"},"domainIamRoleName":{"type":"string","description":"The name of the IAM role to use when making API calls to the Directory Service.\n This setting doesn't apply to the following DB instances:\n  +  Amazon Aurora (The domain is managed by the DB cluster.)\n  +  RDS Custom"},"domainOu":{"type":"string","description":"The Active Directory organizational unit for your DB instance to join.\n Constraints:\n  +  Must be in the distinguished name format.\n  +  Can't be longer than 64 characters.\n  \n Example: ``OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain``"},"enableCloudwatchLogsExports":{"type":"array","items":{"type":"string"},"description":"The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see [Publishing Database Logs to Amazon CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch) in the *Amazon Relational Database Service User Guide*.\n  *Amazon Aurora* \n Not applicable. CloudWatch Logs exports are managed by the DB cluster. \n  *Db2* \n Valid values: ``diag.log``, ``notify.log``\n  *MariaDB* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Microsoft SQL Server* \n Valid values: ``agent``, ``error``\n  *MySQL* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Oracle* \n Valid values: ``alert``, ``audit``, ``listener``, ``trace``, ``oemagent``\n  *PostgreSQL* \n Valid values: ``postgresql``, ``upgrade``"},"enableIamDatabaseAuthentication":{"type":"boolean","description":"A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled.\n This property is supported for RDS for MariaDB, RDS for MySQL, and RDS for PostgreSQL. For more information, see [IAM Database Authentication for MariaDB, MySQL, and PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html) in the *Amazon RDS User Guide.*\n  *Amazon Aurora* \n Not applicable. Mapping AWS IAM accounts to database accounts is managed by the DB cluster."},"enablePerformanceInsights":{"type":"boolean","description":"Specifies whether to enable Performance Insights for the DB instance. For more information, see [Using Amazon Performance Insights](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html) in the *Amazon RDS User Guide*.\n This setting doesn't apply to RDS Custom DB instances."},"endpoint":{"$ref":"#/types/aws-native:rds:DbInstanceEndpoint"},"engine":{"type":"string","description":"The name of the database engine to use for this DB instance. Not every database engine is available in every AWS Region.\n This property is required when creating a DB instance.\n  You can convert an Oracle database from the non-CDB architecture to the container database (CDB) architecture by updating the ``Engine`` value in your templates from ``oracle-ee`` to ``oracle-ee-cdb`` or from ``oracle-se2`` to ``oracle-se2-cdb``. Converting to the CDB architecture requires an interruption.\n  Valid Values:\n  +  ``aurora-mysql`` (for Aurora MySQL DB instances)\n  +  ``aurora-postgresql`` (for Aurora PostgreSQL DB instances)\n  +  ``custom-oracle-ee`` (for RDS Custom for Oracle DB instances)\n  +  ``custom-oracle-ee-cdb`` (for RDS Custom for Oracle DB instances)\n  +  ``custom-sqlserver-ee`` (for RDS Custom for SQL Server DB instances)\n  +  ``custom-sqlserver-se`` (for RDS Custom for SQL Server DB instances)\n  +  ``custom-sqlserver-web`` (for RDS Custom for SQL Server DB instances)\n  +   ``db2-ae`` \n  +   ``db2-se`` \n  +   ``mariadb`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``"},"engineLifecycleSupport":{"type":"string","description":"The life cycle type for this DB instance.\n  By default, this value is set to ``open-source-rds-extended-support``, which enrolls your DB instance into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled``. In this case, creating the DB instance will fail if the DB major version is past its end of standard support date.\n  This setting applies only to RDS for MySQL and RDS for PostgreSQL. For Amazon Aurora DB instances, the life cycle type is managed by the DB cluster.\n You can use this setting to enroll your DB instance into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB instance past the end of standard support for that engine version. For more information, see [Amazon RDS Extended Support with Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html) in the *Amazon RDS User Guide*.\n Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled``\n Default: ``open-source-rds-extended-support``"},"engineVersion":{"type":"string","description":"The version number of the database engine to use.\n For a list of valid engine versions, use the ``DescribeDBEngineVersions`` action.\n The following are the database engines and links to information about the major and minor versions that are available with Amazon RDS. Not every database engine is available for every AWS Region.\n  *Amazon Aurora* \n Not applicable. The version number of the database engine to be used by the DB instance is managed by the DB cluster.\n  *Db2* \n See [Amazon RDS for Db2](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Db2.html#Db2.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *MariaDB* \n See [MariaDB on Amazon RDS Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *Microsoft SQL Server* \n See [Microsoft SQL Server Versions on Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.VersionSupport) in the *Amazon RDS User Guide.*\n  *MySQL* \n See [MySQL on Amazon RDS Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *Oracle* \n See [Oracle Database Engine Release Notes](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.PatchComposition.html) in the *Amazon RDS User Guide.*\n  *PostgreSQL* \n See [Supported PostgreSQL Database Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.DBVersions) in the *Amazon RDS User Guide.*"},"instanceCreateTime":{"type":"string","description":"The date and time when the DB instance was created."},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS) that the database provisions. The value must be equal to or greater than 1000. \n If you specify this property, you must follow the range of allowed ratios of your requested IOPS rate to the amount of storage that you allocate (IOPS to allocated storage). For example, you can provision an Oracle database instance with 1000 IOPS and 200 GiB of storage (a ratio of 5:1), or specify 2000 IOPS with 200 GiB of storage (a ratio of 10:1). For more information, see [Amazon RDS Provisioned IOPS Storage to Improve Performance](https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/CHAP_Storage.html#USER_PIOPS) in the *Amazon RDS User Guide*.\n  If you specify ``io1`` for the ``StorageType`` property, then you must also specify the ``Iops`` property.\n  Constraints:\n  +  For RDS for Db2, MariaDB, MySQL, Oracle, and PostgreSQL - Must be a multiple between .5 and 50 of the storage amount for the DB instance.\n  +  For RDS for SQL Server - Must be a multiple between 1 and 50 of the storage amount for the DB instance."},"isStorageConfigUpgradeAvailable":{"type":"boolean","description":"Indicates whether an upgrade is recommended for the storage file system configuration on the DB instance."},"kmsKeyId":{"type":"string","description":"The ARN of the AWS KMS key that's used to encrypt the DB instance, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef``. If you enable the StorageEncrypted property but don't specify this property, AWS CloudFormation uses the default KMS key. If you specify this property, you must set the StorageEncrypted property to true. \n If you specify the ``SourceDBInstanceIdentifier`` or ``SourceDbiResourceId`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used. However, if the source DB instance is in a different AWS Region, you must specify a KMS key ID.\n If you specify the ``SourceDBInstanceAutomatedBackupsArn`` property, don't specify this property. The value is inherited from the source DB instance automated backup, and if the automated backup is encrypted, the specified ``KmsKeyId`` property is used.\n If you create an encrypted read replica in a different AWS Region, then you must specify a KMS key for the destination AWS Region. KMS encryption keys are specific to the region that they're created in, and you can't use encryption keys from one region in another region.\n If you specify the ``DBSnapshotIdentifier`` property, don't specify this property. The ``StorageEncrypted`` property value is inherited from the snapshot. If the DB instance is encrypted, the specified ``KmsKeyId`` property is also inherited from the snapshot.\n If you specify ``DBSecurityGroups``, AWS CloudFormation ignores this property. To specify both a security group and this property, you must use a VPC security group. For more information about Amazon RDS and VPC, see [Using Amazon RDS with Amazon VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html) in the *Amazon RDS User Guide*.\n  *Amazon Aurora* \n Not applicable. The KMS key identifier is managed by the DB cluster.","replaceOnChanges":true},"latestRestorableTime":{"type":"string","description":"The latest time to which a database in this DB instance can be restored with point-in-time restore."},"licenseModel":{"type":"string","description":"License model information for this DB instance.\n  Valid Values:\n  +  Aurora MySQL - ``general-public-license``\n  +  Aurora PostgreSQL - ``postgresql-license``\n  +  RDS for Db2 - ``bring-your-own-license``. For more information about RDS for Db2 licensing, see [](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/db2-licensing.html) in the *Amazon RDS User Guide.*\n  +  RDS for MariaDB - ``general-public-license``\n  +  RDS for Microsoft SQL Server - ``license-included``\n  +  RDS for MySQL - ``general-public-license``\n  +  RDS for Oracle - ``bring-your-own-license`` or ``license-included``\n  +  RDS for PostgreSQL - ``postgresql-license``\n  \n  If you've specified ``DBSecurityGroups`` and then you update the license model, AWS CloudFormation replaces the underlying DB instance. This will incur some interruptions to database availability."},"listenerEndpoint":{"$ref":"#/types/aws-native:rds:DbInstanceEndpoint"},"manageMasterUserPassword":{"type":"boolean","description":"Specifies whether to manage the master user password with AWS Secrets Manager.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide.*\n Constraints:\n  +  Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified."},"masterUserAuthenticationType":{"type":"string","description":"Specifies the authentication type for the master user. With IAM master user authentication, you can configure the master DB user with IAM database authentication when you create a DB instance.\n You can specify one of the following values:\n  +  ``password`` - Use standard database authentication with a password.\n  +  ``iam-db-auth`` - Use IAM database authentication for the master user.\n  \n This option is only valid for RDS for MySQL, RDS for MariaDB, RDS for PostgreSQL, Aurora MySQL, and Aurora PostgreSQL engines."},"masterUserPassword":{"type":"string","description":"The password for the master user. The password can include any printable ASCII character except \"/\", \"\"\", or \"@\".\n  *Amazon Aurora* \n Not applicable. The password for the master user is managed by the DB cluster.\n  *RDS for Db2* \n Must contain from 8 to 255 characters.\n  *RDS for MariaDB* \n Constraints: Must contain from 8 to 41 characters.\n  *RDS for Microsoft SQL Server* \n Constraints: Must contain from 8 to 128 characters.\n  *RDS for MySQL* \n Constraints: Must contain from 8 to 41 characters.\n  *RDS for Oracle* \n Constraints: Must contain from 8 to 30 characters.\n  *RDS for PostgreSQL* \n Constraints: Must contain from 8 to 128 characters."},"masterUserSecret":{"$ref":"#/types/aws-native:rds:DbInstanceMasterUserSecret","description":"The secret managed by RDS in AWS Secrets Manager for the master user password.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide.*"},"masterUsername":{"type":"string","description":"The master user name for the DB instance.\n  If you specify the ``SourceDBInstanceIdentifier`` or ``DBSnapshotIdentifier`` property, don't specify this property. The value is inherited from the source DB instance or snapshot.\n When migrating a self-managed Db2 database, we recommend that you use the same master username as your self-managed Db2 instance name.\n   *Amazon Aurora* \n Not applicable. The name for the master user is managed by the DB cluster. \n  *RDS for Db2* \n Constraints:\n  +  Must be 1 to 16 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for MariaDB* \n Constraints:\n  +  Must be 1 to 16 letters or numbers.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for Microsoft SQL Server* \n Constraints:\n  +  Must be 1 to 128 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for MySQL* \n Constraints:\n  +  Must be 1 to 16 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for Oracle* \n Constraints:\n  +  Must be 1 to 30 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for PostgreSQL* \n Constraints:\n  +  Must be 1 to 63 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.","replaceOnChanges":true},"maxAllocatedStorage":{"type":"integer","description":"The upper limit in gibibytes (GiB) to which Amazon RDS can automatically scale the storage of the DB instance.\n For more information about this setting, including limitations that apply to it, see [Managing capacity automatically with Amazon RDS storage autoscaling](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.StorageTypes.html#USER_PIOPS.Autoscaling) in the *Amazon RDS User Guide*.\n This setting doesn't apply to the following DB instances:\n  +  Amazon Aurora (Storage is managed by the DB cluster.)\n  +  RDS Custom"},"monitoringInterval":{"type":"integer","description":"The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB instance. To disable collection of Enhanced Monitoring metrics, specify ``0``.\n If ``MonitoringRoleArn`` is specified, then you must set ``MonitoringInterval`` to a value other than ``0``.\n This setting doesn't apply to RDS Custom DB instances.\n Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``\n Default: ``0``"},"monitoringRoleArn":{"type":"string","description":"The ARN for the IAM role that permits RDS to send enhanced monitoring metrics to Amazon CloudWatch Logs. For example, ``arn:aws:iam:123456789012:role/emaccess``. For information on creating a monitoring role, see [Setting Up and Enabling Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling) in the *Amazon RDS User Guide*.\n If ``MonitoringInterval`` is set to a value other than ``0``, then you must supply a ``MonitoringRoleArn`` value.\n This setting doesn't apply to RDS Custom DB instances."},"multiAz":{"type":"boolean","description":"Specifies whether the DB instance is a Multi-AZ deployment. You can't set the ``AvailabilityZone`` parameter if the DB instance is a Multi-AZ deployment.\n This setting doesn't apply to Amazon Aurora because the DB instance Availability Zones (AZs) are managed by the DB cluster."},"ncharCharacterSetName":{"type":"string","description":"The name of the NCHAR character set for the Oracle DB instance.\n This setting doesn't apply to RDS Custom DB instances.","replaceOnChanges":true},"networkType":{"type":"string","description":"The network type of the DB instance.\n Valid values:\n  +   ``IPV4`` \n  +   ``DUAL`` \n  \n The network type is determined by the ``DBSubnetGroup`` specified for the DB instance. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols (``DUAL``).\n For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the *Amazon RDS User Guide.*"},"optionGroupName":{"type":"string","description":"Indicates that the DB instance should be associated with the specified option group.\n Permanent options, such as the TDE option for Oracle Advanced Security TDE, can't be removed from an option group. Also, that option group can't be removed from a DB instance once it is associated with a DB instance."},"percentProgress":{"type":"string","description":"The progress of the storage optimization operation as a percentage."},"performanceInsightsKmsKeyId":{"type":"string","description":"The AWS KMS key identifier for encryption of Performance Insights data.\n The KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.\n If you do not specify a value for ``PerformanceInsightsKMSKeyId``, then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account. Your AWS account has a different default KMS key for each AWS Region.\n  *Update behavior:* Once Performance Insights is enabled with a KMS key, you cannot change to a different physical KMS key without replacing the DB instance. However, the following updates do not require replacement:\n  +  Enabling or disabling Performance Insights using the ``EnablePerformanceInsights`` property\n  +  Changing between different identifier formats (key ARN, key ID, alias ARN, alias name) of the same physical KMS key\n  +  Removing the ``PerformanceInsightsKMSKeyId`` property from your template\n  \n   *Drift behavior:* If you specify ``PerformanceInsightsKMSKeyId`` while ``EnablePerformanceInsights`` is set to ``false``, CloudFormation will report drift. This occurs because the RDS API does not allow setting a KMS key when Performance Insights is disabled. CloudFormation ignores the ``PerformanceInsightsKMSKeyId`` value during instance creation to avoid API errors, resulting in a mismatch between your template and the actual instance configuration.\n To avoid drift, omit both ``EnablePerformanceInsights`` and ``PerformanceInsightsKMSKeyId`` during initial instance creation, then set both properties together when you're ready to enable Performance Insights.\n  For information about enabling Performance Insights, see [EnablePerformanceInsights](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-enableperformanceinsights)."},"performanceInsightsRetentionPeriod":{"type":"integer","description":"The number of days to retain Performance Insights data. When creating a DB instance without enabling Performance Insights, you can't specify the parameter ``PerformanceInsightsRetentionPeriod``.\n This setting doesn't apply to RDS Custom DB instances.\n Valid Values:\n  +   ``7`` \n  +  *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31)\n  +   ``731`` \n  \n Default: ``7`` days\n If you specify a retention period that isn't valid, such as ``94``, Amazon RDS returns an error."},"port":{"type":"string","description":"The port number on which the database accepts connections.\n This setting doesn't apply to Aurora DB instances. The port number is managed by the cluster.\n Valid Values: ``1150-65535``\n Default:\n  +  RDS for Db2 - ``50000``\n  +  RDS for MariaDB - ``3306``\n  +  RDS for Microsoft SQL Server - ``1433``\n  +  RDS for MySQL - ``3306``\n  +  RDS for Oracle - ``1521``\n  +  RDS for PostgreSQL - ``5432``\n  \n Constraints:\n  +  For RDS for Microsoft SQL Server, the value can't be ``1234``, ``1434``, ``3260``, ``3343``, ``3389``, ``47001``, or ``49152-49156``."},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created if automated backups are enabled, using the ``BackupRetentionPeriod`` parameter. For more information, see [Backup Window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupWindow) in the *Amazon RDS User Guide.*\n Constraints:\n  +  Must be in the format ``hh24:mi-hh24:mi``.\n  +  Must be in Universal Coordinated Time (UTC).\n  +  Must not conflict with the preferred maintenance window.\n  +  Must be at least 30 minutes.\n  \n  *Amazon Aurora* \n Not applicable. The daily time range for creating automated backups is managed by the DB cluster."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n Format: ``ddd:hh24:mi-ddd:hh24:mi``\n The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see [Maintaining a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow) in the *Amazon RDS User Guide.*\n  This property applies when AWS CloudFormation initially creates the DB instance. If you use AWS CloudFormation to update the DB instance, those updates are applied immediately.\n  Constraints: Minimum 30-minute window."},"processorFeatures":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceProcessorFeature"},"description":"The number of CPU cores and the number of threads per core for the DB instance class of the DB instance.\n This setting doesn't apply to Amazon Aurora or RDS Custom DB instances."},"promotionTier":{"type":"integer","description":"The order of priority in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance. For more information, see [Fault Tolerance for an Aurora DB Cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.AuroraHighAvailability.html#Aurora.Managing.FaultTolerance) in the *Amazon Aurora User Guide*.\n This setting doesn't apply to RDS Custom DB instances.\n Default: ``1``\n Valid Values: ``0 - 15``"},"publiclyAccessible":{"type":"boolean","description":"Indicates whether the DB instance is an internet-facing instance. If you specify true, AWS CloudFormation creates an instance with a publicly resolvable DNS name, which resolves to a public IP address. If you specify false, AWS CloudFormation creates an internal instance with a DNS name that resolves to a private IP address. \n The default behavior value depends on your VPC setup and the database subnet group. For more information, see the ``PubliclyAccessible`` parameter in the [CreateDBInstance](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html) in the *Amazon RDS API Reference*."},"readReplicaDbClusterIdentifiers":{"type":"array","items":{"type":"string"},"description":"The identifiers of Aurora DB clusters to which the RDS DB instance is replicated as a read replica."},"readReplicaDbInstanceIdentifiers":{"type":"array","items":{"type":"string"},"description":"The identifiers of the read replicas associated with this DB instance."},"replicaMode":{"type":"string","description":"The open mode of an Oracle read replica. For more information, see [Working with Oracle Read Replicas for Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html) in the *Amazon RDS User Guide*.\n This setting is only supported in RDS for Oracle.\n Default: ``open-read-only``\n Valid Values: ``open-read-only`` or ``mounted``"},"restoreTime":{"type":"string","description":"The date and time to restore from. This parameter applies to point-in-time recovery. For more information, see [Restoring a DB instance to a specified time](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIT.html) in the in the *Amazon RDS User Guide*.\n Constraints:\n  +  Must be a time in Universal Coordinated Time (UTC) format.\n  +  Must be before the latest restorable time for the DB instance.\n  +  Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled.\n  \n Example: ``2009-09-07T23:45:00Z``"},"resumeFullAutomationModeTime":{"type":"string","description":"The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440."},"secondaryAvailabilityZone":{"type":"string","description":"If present, specifies the name of the secondary Availability Zone for a DB instance with multi-AZ support."},"sourceDbClusterIdentifier":{"type":"string","description":"The identifier of the Multi-AZ DB cluster that will act as the source for the read replica. Each DB cluster can have up to 15 read replicas.\n Constraints:\n  +  Must be the identifier of an existing Multi-AZ DB cluster.\n  +  Can't be specified if the ``SourceDBInstanceIdentifier`` parameter is also specified.\n  +  The specified DB cluster must have automatic backups enabled, that is, its backup retention period must be greater than 0.\n  +  The source DB cluster must be in the same AWS-Region as the read replica. Cross-Region replication isn't supported."},"sourceDbInstanceAutomatedBackupsArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the replicated automated backups from which to restore, for example, ``arn:aws:rds:us-east-1:123456789012:auto-backup:ab-L2IJCEXJP7XQ7HOJ4SIEXAMPLE``.\n This setting doesn't apply to RDS Custom."},"sourceDbInstanceIdentifier":{"type":"string","description":"If you want to create a read replica DB instance, specify the ID of the source DB instance. Each DB instance can have a limited number of read replicas. For more information, see [Working with Read Replicas](https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/USER_ReadRepl.html) in the *Amazon RDS User Guide*.\n For information about constraints that apply to DB instance identifiers, see [Naming constraints in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon RDS User Guide*.\n The ``SourceDBInstanceIdentifier`` property determines whether a DB instance is a read replica. If you remove the ``SourceDBInstanceIdentifier`` property from your template and then update your stack, AWS CloudFormation promotes the read replica to a standalone DB instance.\n If you specify the ``UseLatestRestorableTime`` or ``RestoreTime`` properties in conjunction with the ``SourceDBInstanceIdentifier`` property, RDS restores the DB instance to the requested point in time, thereby creating a new DB instance.\n   +  If you specify a source DB instance that uses VPC security groups, we recommend that you specify the ``VPCSecurityGroups`` property. If you don't specify the property, the read replica inherits the value of the ``VPCSecurityGroups`` property from the source DB when you create the replica. However, if you update the stack, AWS CloudFormation reverts the replica's ``VPCSecurityGroups`` property to the default value because it's not defined in the stack's template. This change might cause unexpected issues.\n  +  Read replicas don't support deletion policies. AWS CloudFormation ignores any deletion policy that's associated with a read replica.\n  +  If you specify ``SourceDBInstanceIdentifier``, don't specify the ``DBSnapshotIdentifier`` property. You can't create a read replica from a snapshot.\n  +  Don't set the ``BackupRetentionPeriod``, ``DBName``, ``MasterUsername``, ``MasterUserPassword``, and ``PreferredBackupWindow`` properties. The database attributes are inherited from the source DB instance, and backups are disabled for read replicas.\n  +  If the source DB instance is in a different region than the read replica, specify the source region in ``SourceRegion``, and specify an ARN for a valid DB instance in ``SourceDBInstanceIdentifier``. For more information, see [Constructing a Amazon RDS Amazon Resource Name (ARN)](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html#USER_Tagging.ARN) in the *Amazon RDS User Guide*.\n  +  For DB instances in Amazon Aurora clusters, don't specify this property. Amazon RDS automatically assigns writer and reader DB instances."},"sourceDbiResourceId":{"type":"string","description":"The resource ID of the source DB instance from which to restore."},"sourceRegion":{"type":"string","description":"The ID of the region that contains the source DB instance for the read replica.","replaceOnChanges":true},"statusInfos":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceDbInstanceStatusInfo"},"description":"The status of a read replica. If the DB instance isn't a read replica, the value is blank."},"storageEncrypted":{"type":"boolean","description":"A value that indicates whether the DB instance is encrypted. By default, it isn't encrypted.\n If you specify the ``KmsKeyId`` property, then you must enable encryption.\n If you specify the ``SourceDBInstanceIdentifier`` or ``SourceDbiResourceId`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used.\n If you specify the ``SourceDBInstanceAutomatedBackupsArn`` property, don't specify this property. The value is inherited from the source DB instance automated backup. \n If you specify ``DBSnapshotIdentifier`` property, don't specify this property. The value is inherited from the snapshot.\n  *Amazon Aurora* \n Not applicable. The encryption for DB instances is managed by the DB cluster.","replaceOnChanges":true},"storageThroughput":{"type":"integer","description":"Specifies the storage throughput value, in mebibyte per second (MiBps), for the DB instance. This setting applies only to the ``gp3`` storage type. \n This setting doesn't apply to RDS Custom or Amazon Aurora."},"storageType":{"type":"string","description":"The storage type to associate with the DB instance.\n If you specify ``io1``, ``io2``, or ``gp3``, you must also include a value for the ``Iops`` parameter.\n This setting doesn't apply to Amazon Aurora DB instances. Storage is managed by the DB cluster.\n Valid Values: ``gp2 | gp3 | io1 | io2 | standard``\n Default: ``io1``, if the ``Iops`` parameter is specified. Otherwise, ``gp3``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB instance."},"tdeCredentialArn":{"type":"string"},"tdeCredentialPassword":{"type":"string"},"timezone":{"type":"string","description":"The time zone of the DB instance. The time zone parameter is currently supported only by [RDS for Db2](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/db2-time-zone) and [RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.TimeZone).","replaceOnChanges":true},"useDefaultProcessorFeatures":{"type":"boolean","description":"Specifies whether the DB instance class of the DB instance uses its default processor features.\n This setting doesn't apply to RDS Custom DB instances."},"useLatestRestorableTime":{"type":"boolean","description":"Specifies whether the DB instance is restored from the latest backup time. By default, the DB instance isn't restored from the latest backup time. This parameter applies to point-in-time recovery. For more information, see [Restoring a DB instance to a specified time](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIT.html) in the in the *Amazon RDS User Guide*.\n Constraints:\n  +  Can't be specified if the ``RestoreTime`` parameter is provided."},"vpcSecurityGroups":{"type":"array","items":{"type":"string"},"description":"A list of the VPC security group IDs to assign to the DB instance. The list can include both the physical IDs of existing VPC security groups and references to [AWS::EC2::SecurityGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html) resources created in the template.\n If you plan to update the resource, don't specify VPC security groups in a shared VPC.\n  If you set ``VPCSecurityGroups``, you must not set [DBSecurityGroups](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsecuritygroups), and vice versa.\n  You can migrate a DB instance in your stack from an RDS DB security group to a VPC security group, but keep the following in mind:\n  +  You can't revert to using an RDS security group after you establish a VPC security group membership.\n  +  When you migrate your DB instance to VPC security groups, if your stack update rolls back because the DB instance update fails or because an update fails in another AWS CloudFormation resource, the rollback fails because it can't revert to an RDS security group.\n  +  To use the properties that are available when you use a VPC security group, you must recreate the DB instance. If you don't, AWS CloudFormation submits only the property values that are listed in the [DBSecurityGroups](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsecuritygroups) property.\n  \n  To avoid this situation, migrate your DB instance to using VPC security groups only when that is the only change in your stack template. \n  *Amazon Aurora* \n Not applicable. The associated list of EC2 VPC security groups is managed by the DB cluster. If specified, the setting must match the DB cluster setting."}},"type":"object","required":["automaticRestartTime","certificateDetails","dbInstanceArn","dbInstanceStatus","dbiResourceId","endpoint","instanceCreateTime","isStorageConfigUpgradeAvailable","latestRestorableTime","listenerEndpoint","percentProgress","readReplicaDbClusterIdentifiers","readReplicaDbInstanceIdentifiers","resumeFullAutomationModeTime","secondaryAvailabilityZone","statusInfos"],"inputProperties":{"additionalStorageVolumes":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceAdditionalStorageVolume"},"description":"The additional storage volumes associated with the DB instance. RDS supports additional storage volumes for RDS for Oracle and RDS for SQL Server."},"allocatedStorage":{"type":"string","description":"The amount of storage in gibibytes (GiB) to be initially allocated for the database instance.\n  If any value is set in the ``Iops`` parameter, ``AllocatedStorage`` must be at least 100 GiB, which corresponds to the minimum Iops value of 1,000. If you increase the ``Iops`` value (in 1,000 IOPS increments), then you must also increase the ``AllocatedStorage`` value (in 100-GiB increments). \n   *Amazon Aurora* \n Not applicable. Aurora cluster volumes automatically grow as the amount of data in your database increases, though you are only charged for the space that you use in an Aurora cluster volume.\n  *Db2* \n Constraints to the amount of storage for each storage type are the following:\n  +  General Purpose (SSD) storage (gp3): Must be an integer from 20 to 64000.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 64000.\n  \n  *MySQL* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *MariaDB* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *PostgreSQL* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *Oracle* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 10 to 3072.\n  \n  *SQL Server* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 16384.\n  +  Web and Express editions: Must be an integer from 20 to 16384.\n  \n  +  Provisioned IOPS storage (io1):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 16384.\n  +  Web and Express editions: Must be an integer from 20 to 16384.\n  \n  +  Magnetic storage (standard):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 1024.\n  +  Web and Express editions: Must be an integer from 20 to 1024."},"allowMajorVersionUpgrade":{"type":"boolean","description":"A value that indicates whether major version upgrades are allowed. Changing this parameter doesn't result in an outage and the change is asynchronously applied as soon as possible.\n Constraints: Major version upgrades must be allowed when specifying a value for the ``EngineVersion`` parameter that is a different major version than the DB instance's current version."},"applyImmediately":{"type":"boolean","description":"Specifies whether changes to the DB instance and any pending modifications are applied immediately, regardless of the ``PreferredMaintenanceWindow`` setting. If set to ``false``, changes are applied during the next maintenance window. Until RDS applies the changes, the DB instance remains in a drift state. As a result, the configuration doesn't fully reflect the requested modifications and temporarily diverges from the intended state.\n In addition to the settings described in [Modifying a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.DBInstance.Modifying.html), this property also determines whether the DB instance reboots when a static parameter is modified in the associated DB parameter group.\n Default: ``true``"},"associatedRoles":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceDbInstanceRole"},"description":"The IAMlong (IAM) roles associated with the DB instance. \n  *Amazon Aurora* \n Not applicable. The associated roles are managed by the DB cluster."},"autoMinorVersionUpgrade":{"type":"boolean","description":"A value that indicates whether minor engine upgrades are applied automatically to the DB instance during the maintenance window. By default, minor engine upgrades are applied automatically."},"automaticBackupReplicationKmsKeyId":{"type":"string","description":"The AWS KMS key identifier for encryption of the replicated automated backups. The KMS key ID is the Amazon Resource Name (ARN) for the KMS encryption key in the destination AWS-Region, for example, ``arn:aws:kms:us-east-1:123456789012:key/AKIAIOSFODNN7EXAMPLE``."},"automaticBackupReplicationRegion":{"type":"string","description":"The AWS-Region associated with the automated backup."},"automaticBackupReplicationRetentionPeriod":{"type":"integer","description":"The retention period for automated backups in a different AWS Region. Use this parameter to set a unique retention period that only applies to cross-Region automated backups. To enable automated backups in a different Region, specify a positive value for the ``AutomaticBackupReplicationRegion`` parameter. \n If not specified, this parameter defaults to the value of the ``BackupRetentionPeriod`` parameter. The maximum allowed value is 35."},"availabilityZone":{"type":"string","description":"The Availability Zone (AZ) where the database will be created. For information on AWS-Regions and Availability Zones, see [Regions and Availability Zones](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html).\n For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.\n Default: A random, system-chosen Availability Zone in the endpoint's AWS-Region.\n Constraints:\n  +  The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment.\n  +  The specified Availability Zone must be in the same AWS-Region as the current endpoint.\n  \n Example: ``us-east-1d``"},"backupRetentionPeriod":{"type":"integer","description":"The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups.\n  *Amazon Aurora* \n Not applicable. The retention period for automated backups is managed by the DB cluster.\n Default: 1\n Constraints:\n  +  Must be a value from 0 to 35\n  +  Can't be set to 0 if the DB instance is a source to read replicas"},"backupTarget":{"type":"string","description":"The location for storing automated backups and manual snapshots.\n Valid Values:\n  +  ``local`` (Dedicated Local Zone)\n  +  ``outposts`` (AWS Outposts)\n  +  ``region`` (AWS-Region)\n  \n Default: ``region``\n For more information, see [Working with Amazon RDS on Outposts](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-on-outposts.html) in the *Amazon RDS User Guide*."},"caCertificateIdentifier":{"type":"string","description":"The identifier of the CA certificate for this DB instance.\n For more information, see [Using SSL/TLS to encrypt a connection to a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html) in the *Amazon RDS User Guide* and [Using SSL/TLS to encrypt a connection to a DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html) in the *Amazon Aurora User Guide*."},"certificateRotationRestart":{"type":"boolean","description":"Specifies whether the DB instance is restarted when you rotate your SSL/TLS certificate.\n By default, the DB instance is restarted when you rotate your SSL/TLS certificate. The certificate is not updated until the DB instance is restarted.\n  Set this parameter only if you are *not* using SSL/TLS to connect to the DB instance.\n  If you are using SSL/TLS to connect to the DB instance, follow the appropriate instructions for your DB engine to rotate your SSL/TLS certificate:\n  +  For more information about rotating your SSL/TLS certificate for RDS DB engines, see [Rotating Your SSL/TLS Certificate.](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html) in the *Amazon RDS User Guide.*\n  +  For more information about rotating your SSL/TLS certificate for Aurora DB engines, see [Rotating Your SSL/TLS Certificate](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL-certificate-rotation.html) in the *Amazon Aurora User Guide*.\n  \n This setting doesn't apply to RDS Custom DB instances."},"characterSetName":{"type":"string","description":"For supported engines, indicates that the DB instance should be associated with the specified character set.\n  *Amazon Aurora* \n Not applicable. The character set is managed by the DB cluster. For more information, see [AWS::RDS::DBCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html)."},"copyTagsToSnapshot":{"type":"boolean","description":"Specifies whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied.\n This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting."},"customIamInstanceProfile":{"type":"string","description":"The instance profile associated with the underlying Amazon EC2 instance of an RDS Custom DB instance.\n This setting is required for RDS Custom.\n Constraints:\n  +  The profile must exist in your account.\n  +  The profile must have an IAM role that Amazon EC2 has permissions to assume.\n  +  The instance profile name and the associated IAM role name must start with the prefix ``AWSRDSCustom``.\n  \n For the list of permissions required for the IAM role, see [Configure IAM and your VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-setup-orcl.html#custom-setup-orcl.iam-vpc) in the *Amazon RDS User Guide*."},"databaseInsightsMode":{"type":"string","description":"The mode of Database Insights to enable for the DB instance.\n  Aurora DB instances inherit this value from the DB cluster, so you can't change this value."},"dbClusterIdentifier":{"type":"string","description":"The identifier of the DB cluster that this DB instance will belong to.\n This setting doesn't apply to RDS Custom DB instances."},"dbClusterSnapshotIdentifier":{"type":"string","description":"The identifier for the Multi-AZ DB cluster snapshot to restore from.\n For more information on Multi-AZ DB clusters, see [Multi-AZ DB cluster deployments](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/multi-az-db-clusters-concepts.html) in the *Amazon RDS User Guide*.\n Constraints:\n  +  Must match the identifier of an existing Multi-AZ DB cluster snapshot.\n  +  Can't be specified when ``DBSnapshotIdentifier`` is specified.\n  +  Must be specified when ``DBSnapshotIdentifier`` isn't specified.\n  +  If you are restoring from a shared manual Multi-AZ DB cluster snapshot, the ``DBClusterSnapshotIdentifier`` must be the ARN of the shared snapshot.\n  +  Can't be the identifier of an Aurora DB cluster snapshot."},"dbInstanceClass":{"type":"string","description":"The compute and memory capacity of the DB instance, for example ``db.m5.large``. Not all DB instance classes are available in all AWS-Regions, or for all database engines. For the full list of DB instance classes, and availability for your engine, see [DB instance classes](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html) in the *Amazon RDS User Guide* or [Aurora DB instance classes](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.DBInstanceClass.html) in the *Amazon Aurora User Guide*."},"dbInstanceIdentifier":{"type":"string","description":"A name for the DB instance. If you specify a name, AWS CloudFormation converts it to lowercase. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the DB instance. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n For information about constraints that apply to DB instance identifiers, see [Naming constraints in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon RDS User Guide*.\n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"dbName":{"type":"string","description":"The meaning of this parameter differs according to the database engine you use.\n  If you specify the ``DBSnapshotIdentifier`` property, this property only applies to RDS for Oracle.\n   *Amazon Aurora* \n Not applicable. The database name is managed by the DB cluster.\n  *Db2* \n The name of the database to create when the DB instance is created. If this parameter isn't specified, no database is created in the DB instance.\n Constraints:\n  +  Must contain 1 to 64 letters or numbers.\n  +  Must begin with a letter. Subsequent characters can be letters, underscores, or digits (0-9).\n  +  Can't be a word reserved by the specified database engine.\n  \n  *MySQL* \n The name of the database to create when the DB instance is created. If this parameter is not specified, no database is created in the DB instance.\n Constraints:\n  +  Must contain 1 to 64 letters or numbers.\n  +  Can't be a word reserved by the specified database engine\n  \n  *MariaDB* \n The name of the database to create when the DB instance is created. If this parameter is not specified, no database is created in the DB instance.\n Constraints:\n  +  Must contain 1 to 64 letters or numbers.\n  +  Can't be a word reserved by the specified database engine\n  \n  *PostgreSQL* \n The name of the database to create when the DB instance is created. If this parameter is not specified, the default ``postgres`` database is created in the DB instance.\n Constraints:\n  +  Must begin with a letter. Subsequent characters can be letters, underscores, or digits (0-9).\n  +  Must contain 1 to 63 characters.\n  +  Can't be a word reserved by the specified database engine\n  \n  *Oracle* \n The Oracle System ID (SID) of the created DB instance. If you specify ``null``, the default value ``ORCL`` is used. You can't specify the string NULL, or any other reserved word, for ``DBName``. \n Default: ``ORCL``\n Constraints:\n  +  Can't be longer than 8 characters\n  \n  *SQL Server* \n Not applicable. Must be null."},"dbParameterGroupName":{"type":"string","description":"The name of an existing DB parameter group or a reference to an [AWS::RDS::DBParameterGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html) resource created in the template.\n To list all of the available DB parameter group names, use the following command:\n  ``aws rds describe-db-parameter-groups --query \"DBParameterGroups[].DBParameterGroupName\" --output text`` \n  If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot.\n  If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used."},"dbSecurityGroups":{"type":"array","items":{"type":"string"},"description":"A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template.\n  If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups.\n  If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations:\n  +   ``AllocatedStorage`` \n  +   ``AutoMinorVersionUpgrade`` \n  +   ``AvailabilityZone`` \n  +   ``BackupRetentionPeriod`` \n  +   ``CharacterSetName`` \n  +   ``DBInstanceClass`` \n  +   ``DBName`` \n  +   ``DBParameterGroupName`` \n  +   ``DBSecurityGroups`` \n  +   ``DBSubnetGroupName`` \n  +   ``Engine`` \n  +   ``EngineVersion`` \n  +   ``Iops`` \n  +   ``LicenseModel`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``MultiAZ`` \n  +   ``OptionGroupName`` \n  +   ``PreferredBackupWindow`` \n  +   ``PreferredMaintenanceWindow`` \n  \n All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType``, ``StorageEncrypted``, or ``KmsKeyId``. If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance."},"dbSnapshotIdentifier":{"type":"string","description":"The name or Amazon Resource Name (ARN) of the DB snapshot that's used to restore the DB instance. If you're restoring from a shared manual DB snapshot, you must specify the ARN of the snapshot.\n By specifying this property, you can create a DB instance from the specified DB snapshot. If the ``DBSnapshotIdentifier`` property is an empty string or the ``AWS::RDS::DBInstance`` declaration has no ``DBSnapshotIdentifier`` property, AWS CloudFormation creates a new database. If the property contains a value (other than an empty string), AWS CloudFormation creates a database from the specified snapshot. If a snapshot with the specified name doesn't exist, AWS CloudFormation can't create the database and it rolls back the stack.\n Some DB instance properties aren't valid when you restore from a snapshot, such as the ``MasterUsername`` and ``MasterUserPassword`` properties, and the point-in-time recovery properties ``RestoreTime`` and ``UseLatestRestorableTime``. For information about the properties that you can specify, see the [RestoreDBInstanceFromDBSnapshot](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html) action in the *Amazon RDS API Reference*.\n After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you must specify the same ``DBSnapshotIdentifier`` property for any future updates to the DB instance. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted.\n If you specify the ``DBSnapshotIdentifier`` property to restore a DB instance (as opposed to specifying it for DB instance updates), then don't specify the following properties:\n  +   ``CharacterSetName`` \n  +   ``DBClusterIdentifier`` \n  +   ``DBName`` \n  +   ``KmsKeyId`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``PromotionTier`` \n  +   ``SourceDBInstanceIdentifier`` \n  +   ``SourceRegion`` \n  +  ``StorageEncrypted`` (for an unencrypted snapshot)\n  +   ``Timezone`` \n  \n  *Amazon Aurora* \n Not applicable. Snapshot restore is managed by the DB cluster."},"dbSubnetGroupName":{"type":"string","description":"A DB subnet group to associate with the DB instance. If you update this value, the new subnet group must be a subnet group in a new VPC. \n If you don't specify a DB subnet group, RDS uses the default DB subnet group if one exists. If a default DB subnet group does not exist, and you don't specify a ``DBSubnetGroupName``, the DB instance fails to launch. \n For more information about using Amazon RDS in a VPC, see [Amazon VPC and Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html) in the *Amazon RDS User Guide*. \n This setting doesn't apply to Amazon Aurora DB instances. The DB subnet group is managed by the DB cluster. If specified, the setting must match the DB cluster setting."},"dbSystemId":{"type":"string","description":"The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term \"Oracle database instance\" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to ``RDSCDB``. The Oracle SID is also the name of your CDB."},"dedicatedLogVolume":{"type":"boolean","description":"Indicates whether the DB instance has a dedicated log volume (DLV) enabled."},"deleteAutomatedBackups":{"type":"boolean","description":"A value that indicates whether to remove automated backups immediately after the DB instance is deleted. This parameter isn't case-sensitive. The default is to remove automated backups immediately after the DB instance is deleted.\n  *Amazon Aurora* \n Not applicable. When you delete a DB cluster, all automated backups for that DB cluster are deleted and can't be recovered. Manual DB cluster snapshots of the DB cluster are not deleted."},"deletionProtection":{"type":"boolean","description":"Specifies whether the DB instance has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection isn't enabled. For more information, see [Deleting a DB Instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html).\n This setting doesn't apply to Amazon Aurora DB instances. You can enable or disable deletion protection for the DB cluster. For more information, see ``CreateDBCluster``. DB instances in a DB cluster can be deleted even when deletion protection is enabled for the DB cluster."},"domain":{"type":"string","description":"The Active Directory directory ID to create the DB instance in. Currently, only Db2, MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances can be created in an Active Directory Domain.\n For more information, see [Kerberos Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html) in the *Amazon RDS User Guide*."},"domainAuthSecretArn":{"type":"string","description":"The ARN for the Secrets Manager secret with the credentials for the user joining the domain.\n Example: ``arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456``"},"domainDnsIps":{"type":"array","items":{"type":"string"},"description":"The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers.\n Constraints:\n  +  Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list.\n  \n Example: ``123.124.125.126,234.235.236.237``"},"domainFqdn":{"type":"string","description":"The fully qualified domain name (FQDN) of an Active Directory domain.\n Constraints:\n  +  Can't be longer than 64 characters.\n  \n Example: ``mymanagedADtest.mymanagedAD.mydomain``"},"domainIamRoleName":{"type":"string","description":"The name of the IAM role to use when making API calls to the Directory Service.\n This setting doesn't apply to the following DB instances:\n  +  Amazon Aurora (The domain is managed by the DB cluster.)\n  +  RDS Custom"},"domainOu":{"type":"string","description":"The Active Directory organizational unit for your DB instance to join.\n Constraints:\n  +  Must be in the distinguished name format.\n  +  Can't be longer than 64 characters.\n  \n Example: ``OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain``"},"enableCloudwatchLogsExports":{"type":"array","items":{"type":"string"},"description":"The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see [Publishing Database Logs to Amazon CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch) in the *Amazon Relational Database Service User Guide*.\n  *Amazon Aurora* \n Not applicable. CloudWatch Logs exports are managed by the DB cluster. \n  *Db2* \n Valid values: ``diag.log``, ``notify.log``\n  *MariaDB* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Microsoft SQL Server* \n Valid values: ``agent``, ``error``\n  *MySQL* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Oracle* \n Valid values: ``alert``, ``audit``, ``listener``, ``trace``, ``oemagent``\n  *PostgreSQL* \n Valid values: ``postgresql``, ``upgrade``"},"enableIamDatabaseAuthentication":{"type":"boolean","description":"A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled.\n This property is supported for RDS for MariaDB, RDS for MySQL, and RDS for PostgreSQL. For more information, see [IAM Database Authentication for MariaDB, MySQL, and PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html) in the *Amazon RDS User Guide.*\n  *Amazon Aurora* \n Not applicable. Mapping AWS IAM accounts to database accounts is managed by the DB cluster."},"enablePerformanceInsights":{"type":"boolean","description":"Specifies whether to enable Performance Insights for the DB instance. For more information, see [Using Amazon Performance Insights](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html) in the *Amazon RDS User Guide*.\n This setting doesn't apply to RDS Custom DB instances."},"engine":{"type":"string","description":"The name of the database engine to use for this DB instance. Not every database engine is available in every AWS Region.\n This property is required when creating a DB instance.\n  You can convert an Oracle database from the non-CDB architecture to the container database (CDB) architecture by updating the ``Engine`` value in your templates from ``oracle-ee`` to ``oracle-ee-cdb`` or from ``oracle-se2`` to ``oracle-se2-cdb``. Converting to the CDB architecture requires an interruption.\n  Valid Values:\n  +  ``aurora-mysql`` (for Aurora MySQL DB instances)\n  +  ``aurora-postgresql`` (for Aurora PostgreSQL DB instances)\n  +  ``custom-oracle-ee`` (for RDS Custom for Oracle DB instances)\n  +  ``custom-oracle-ee-cdb`` (for RDS Custom for Oracle DB instances)\n  +  ``custom-sqlserver-ee`` (for RDS Custom for SQL Server DB instances)\n  +  ``custom-sqlserver-se`` (for RDS Custom for SQL Server DB instances)\n  +  ``custom-sqlserver-web`` (for RDS Custom for SQL Server DB instances)\n  +   ``db2-ae`` \n  +   ``db2-se`` \n  +   ``mariadb`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``"},"engineLifecycleSupport":{"type":"string","description":"The life cycle type for this DB instance.\n  By default, this value is set to ``open-source-rds-extended-support``, which enrolls your DB instance into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled``. In this case, creating the DB instance will fail if the DB major version is past its end of standard support date.\n  This setting applies only to RDS for MySQL and RDS for PostgreSQL. For Amazon Aurora DB instances, the life cycle type is managed by the DB cluster.\n You can use this setting to enroll your DB instance into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB instance past the end of standard support for that engine version. For more information, see [Amazon RDS Extended Support with Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html) in the *Amazon RDS User Guide*.\n Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled``\n Default: ``open-source-rds-extended-support``"},"engineVersion":{"type":"string","description":"The version number of the database engine to use.\n For a list of valid engine versions, use the ``DescribeDBEngineVersions`` action.\n The following are the database engines and links to information about the major and minor versions that are available with Amazon RDS. Not every database engine is available for every AWS Region.\n  *Amazon Aurora* \n Not applicable. The version number of the database engine to be used by the DB instance is managed by the DB cluster.\n  *Db2* \n See [Amazon RDS for Db2](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Db2.html#Db2.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *MariaDB* \n See [MariaDB on Amazon RDS Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *Microsoft SQL Server* \n See [Microsoft SQL Server Versions on Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.VersionSupport) in the *Amazon RDS User Guide.*\n  *MySQL* \n See [MySQL on Amazon RDS Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *Oracle* \n See [Oracle Database Engine Release Notes](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.PatchComposition.html) in the *Amazon RDS User Guide.*\n  *PostgreSQL* \n See [Supported PostgreSQL Database Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.DBVersions) in the *Amazon RDS User Guide.*"},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS) that the database provisions. The value must be equal to or greater than 1000. \n If you specify this property, you must follow the range of allowed ratios of your requested IOPS rate to the amount of storage that you allocate (IOPS to allocated storage). For example, you can provision an Oracle database instance with 1000 IOPS and 200 GiB of storage (a ratio of 5:1), or specify 2000 IOPS with 200 GiB of storage (a ratio of 10:1). For more information, see [Amazon RDS Provisioned IOPS Storage to Improve Performance](https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/CHAP_Storage.html#USER_PIOPS) in the *Amazon RDS User Guide*.\n  If you specify ``io1`` for the ``StorageType`` property, then you must also specify the ``Iops`` property.\n  Constraints:\n  +  For RDS for Db2, MariaDB, MySQL, Oracle, and PostgreSQL - Must be a multiple between .5 and 50 of the storage amount for the DB instance.\n  +  For RDS for SQL Server - Must be a multiple between 1 and 50 of the storage amount for the DB instance."},"kmsKeyId":{"type":"string","description":"The ARN of the AWS KMS key that's used to encrypt the DB instance, such as ``arn:aws:kms:us-east-1:012345678910:key/abcd1234-a123-456a-a12b-a123b4cd56ef``. If you enable the StorageEncrypted property but don't specify this property, AWS CloudFormation uses the default KMS key. If you specify this property, you must set the StorageEncrypted property to true. \n If you specify the ``SourceDBInstanceIdentifier`` or ``SourceDbiResourceId`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used. However, if the source DB instance is in a different AWS Region, you must specify a KMS key ID.\n If you specify the ``SourceDBInstanceAutomatedBackupsArn`` property, don't specify this property. The value is inherited from the source DB instance automated backup, and if the automated backup is encrypted, the specified ``KmsKeyId`` property is used.\n If you create an encrypted read replica in a different AWS Region, then you must specify a KMS key for the destination AWS Region. KMS encryption keys are specific to the region that they're created in, and you can't use encryption keys from one region in another region.\n If you specify the ``DBSnapshotIdentifier`` property, don't specify this property. The ``StorageEncrypted`` property value is inherited from the snapshot. If the DB instance is encrypted, the specified ``KmsKeyId`` property is also inherited from the snapshot.\n If you specify ``DBSecurityGroups``, AWS CloudFormation ignores this property. To specify both a security group and this property, you must use a VPC security group. For more information about Amazon RDS and VPC, see [Using Amazon RDS with Amazon VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.html) in the *Amazon RDS User Guide*.\n  *Amazon Aurora* \n Not applicable. The KMS key identifier is managed by the DB cluster."},"licenseModel":{"type":"string","description":"License model information for this DB instance.\n  Valid Values:\n  +  Aurora MySQL - ``general-public-license``\n  +  Aurora PostgreSQL - ``postgresql-license``\n  +  RDS for Db2 - ``bring-your-own-license``. For more information about RDS for Db2 licensing, see [](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/db2-licensing.html) in the *Amazon RDS User Guide.*\n  +  RDS for MariaDB - ``general-public-license``\n  +  RDS for Microsoft SQL Server - ``license-included``\n  +  RDS for MySQL - ``general-public-license``\n  +  RDS for Oracle - ``bring-your-own-license`` or ``license-included``\n  +  RDS for PostgreSQL - ``postgresql-license``\n  \n  If you've specified ``DBSecurityGroups`` and then you update the license model, AWS CloudFormation replaces the underlying DB instance. This will incur some interruptions to database availability."},"manageMasterUserPassword":{"type":"boolean","description":"Specifies whether to manage the master user password with AWS Secrets Manager.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide.*\n Constraints:\n  +  Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified."},"masterUserAuthenticationType":{"type":"string","description":"Specifies the authentication type for the master user. With IAM master user authentication, you can configure the master DB user with IAM database authentication when you create a DB instance.\n You can specify one of the following values:\n  +  ``password`` - Use standard database authentication with a password.\n  +  ``iam-db-auth`` - Use IAM database authentication for the master user.\n  \n This option is only valid for RDS for MySQL, RDS for MariaDB, RDS for PostgreSQL, Aurora MySQL, and Aurora PostgreSQL engines."},"masterUserPassword":{"type":"string","description":"The password for the master user. The password can include any printable ASCII character except \"/\", \"\"\", or \"@\".\n  *Amazon Aurora* \n Not applicable. The password for the master user is managed by the DB cluster.\n  *RDS for Db2* \n Must contain from 8 to 255 characters.\n  *RDS for MariaDB* \n Constraints: Must contain from 8 to 41 characters.\n  *RDS for Microsoft SQL Server* \n Constraints: Must contain from 8 to 128 characters.\n  *RDS for MySQL* \n Constraints: Must contain from 8 to 41 characters.\n  *RDS for Oracle* \n Constraints: Must contain from 8 to 30 characters.\n  *RDS for PostgreSQL* \n Constraints: Must contain from 8 to 128 characters."},"masterUserSecret":{"$ref":"#/types/aws-native:rds:DbInstanceMasterUserSecret","description":"The secret managed by RDS in AWS Secrets Manager for the master user password.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide.*"},"masterUsername":{"type":"string","description":"The master user name for the DB instance.\n  If you specify the ``SourceDBInstanceIdentifier`` or ``DBSnapshotIdentifier`` property, don't specify this property. The value is inherited from the source DB instance or snapshot.\n When migrating a self-managed Db2 database, we recommend that you use the same master username as your self-managed Db2 instance name.\n   *Amazon Aurora* \n Not applicable. The name for the master user is managed by the DB cluster. \n  *RDS for Db2* \n Constraints:\n  +  Must be 1 to 16 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for MariaDB* \n Constraints:\n  +  Must be 1 to 16 letters or numbers.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for Microsoft SQL Server* \n Constraints:\n  +  Must be 1 to 128 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for MySQL* \n Constraints:\n  +  Must be 1 to 16 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for Oracle* \n Constraints:\n  +  Must be 1 to 30 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine.\n  \n  *RDS for PostgreSQL* \n Constraints:\n  +  Must be 1 to 63 letters or numbers.\n  +  First character must be a letter.\n  +  Can't be a reserved word for the chosen database engine."},"maxAllocatedStorage":{"type":"integer","description":"The upper limit in gibibytes (GiB) to which Amazon RDS can automatically scale the storage of the DB instance.\n For more information about this setting, including limitations that apply to it, see [Managing capacity automatically with Amazon RDS storage autoscaling](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.StorageTypes.html#USER_PIOPS.Autoscaling) in the *Amazon RDS User Guide*.\n This setting doesn't apply to the following DB instances:\n  +  Amazon Aurora (Storage is managed by the DB cluster.)\n  +  RDS Custom"},"monitoringInterval":{"type":"integer","description":"The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB instance. To disable collection of Enhanced Monitoring metrics, specify ``0``.\n If ``MonitoringRoleArn`` is specified, then you must set ``MonitoringInterval`` to a value other than ``0``.\n This setting doesn't apply to RDS Custom DB instances.\n Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``\n Default: ``0``"},"monitoringRoleArn":{"type":"string","description":"The ARN for the IAM role that permits RDS to send enhanced monitoring metrics to Amazon CloudWatch Logs. For example, ``arn:aws:iam:123456789012:role/emaccess``. For information on creating a monitoring role, see [Setting Up and Enabling Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling) in the *Amazon RDS User Guide*.\n If ``MonitoringInterval`` is set to a value other than ``0``, then you must supply a ``MonitoringRoleArn`` value.\n This setting doesn't apply to RDS Custom DB instances."},"multiAz":{"type":"boolean","description":"Specifies whether the DB instance is a Multi-AZ deployment. You can't set the ``AvailabilityZone`` parameter if the DB instance is a Multi-AZ deployment.\n This setting doesn't apply to Amazon Aurora because the DB instance Availability Zones (AZs) are managed by the DB cluster."},"ncharCharacterSetName":{"type":"string","description":"The name of the NCHAR character set for the Oracle DB instance.\n This setting doesn't apply to RDS Custom DB instances."},"networkType":{"type":"string","description":"The network type of the DB instance.\n Valid values:\n  +   ``IPV4`` \n  +   ``DUAL`` \n  \n The network type is determined by the ``DBSubnetGroup`` specified for the DB instance. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols (``DUAL``).\n For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the *Amazon RDS User Guide.*"},"optionGroupName":{"type":"string","description":"Indicates that the DB instance should be associated with the specified option group.\n Permanent options, such as the TDE option for Oracle Advanced Security TDE, can't be removed from an option group. Also, that option group can't be removed from a DB instance once it is associated with a DB instance."},"performanceInsightsKmsKeyId":{"type":"string","description":"The AWS KMS key identifier for encryption of Performance Insights data.\n The KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.\n If you do not specify a value for ``PerformanceInsightsKMSKeyId``, then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account. Your AWS account has a different default KMS key for each AWS Region.\n  *Update behavior:* Once Performance Insights is enabled with a KMS key, you cannot change to a different physical KMS key without replacing the DB instance. However, the following updates do not require replacement:\n  +  Enabling or disabling Performance Insights using the ``EnablePerformanceInsights`` property\n  +  Changing between different identifier formats (key ARN, key ID, alias ARN, alias name) of the same physical KMS key\n  +  Removing the ``PerformanceInsightsKMSKeyId`` property from your template\n  \n   *Drift behavior:* If you specify ``PerformanceInsightsKMSKeyId`` while ``EnablePerformanceInsights`` is set to ``false``, CloudFormation will report drift. This occurs because the RDS API does not allow setting a KMS key when Performance Insights is disabled. CloudFormation ignores the ``PerformanceInsightsKMSKeyId`` value during instance creation to avoid API errors, resulting in a mismatch between your template and the actual instance configuration.\n To avoid drift, omit both ``EnablePerformanceInsights`` and ``PerformanceInsightsKMSKeyId`` during initial instance creation, then set both properties together when you're ready to enable Performance Insights.\n  For information about enabling Performance Insights, see [EnablePerformanceInsights](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-enableperformanceinsights)."},"performanceInsightsRetentionPeriod":{"type":"integer","description":"The number of days to retain Performance Insights data. When creating a DB instance without enabling Performance Insights, you can't specify the parameter ``PerformanceInsightsRetentionPeriod``.\n This setting doesn't apply to RDS Custom DB instances.\n Valid Values:\n  +   ``7`` \n  +  *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31)\n  +   ``731`` \n  \n Default: ``7`` days\n If you specify a retention period that isn't valid, such as ``94``, Amazon RDS returns an error."},"port":{"type":"string","description":"The port number on which the database accepts connections.\n This setting doesn't apply to Aurora DB instances. The port number is managed by the cluster.\n Valid Values: ``1150-65535``\n Default:\n  +  RDS for Db2 - ``50000``\n  +  RDS for MariaDB - ``3306``\n  +  RDS for Microsoft SQL Server - ``1433``\n  +  RDS for MySQL - ``3306``\n  +  RDS for Oracle - ``1521``\n  +  RDS for PostgreSQL - ``5432``\n  \n Constraints:\n  +  For RDS for Microsoft SQL Server, the value can't be ``1234``, ``1434``, ``3260``, ``3343``, ``3389``, ``47001``, or ``49152-49156``."},"preferredBackupWindow":{"type":"string","description":"The daily time range during which automated backups are created if automated backups are enabled, using the ``BackupRetentionPeriod`` parameter. For more information, see [Backup Window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupWindow) in the *Amazon RDS User Guide.*\n Constraints:\n  +  Must be in the format ``hh24:mi-hh24:mi``.\n  +  Must be in Universal Coordinated Time (UTC).\n  +  Must not conflict with the preferred maintenance window.\n  +  Must be at least 30 minutes.\n  \n  *Amazon Aurora* \n Not applicable. The daily time range for creating automated backups is managed by the DB cluster."},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n Format: ``ddd:hh24:mi-ddd:hh24:mi``\n The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see [Maintaining a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow) in the *Amazon RDS User Guide.*\n  This property applies when AWS CloudFormation initially creates the DB instance. If you use AWS CloudFormation to update the DB instance, those updates are applied immediately.\n  Constraints: Minimum 30-minute window."},"processorFeatures":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbInstanceProcessorFeature"},"description":"The number of CPU cores and the number of threads per core for the DB instance class of the DB instance.\n This setting doesn't apply to Amazon Aurora or RDS Custom DB instances."},"promotionTier":{"type":"integer","description":"The order of priority in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance. For more information, see [Fault Tolerance for an Aurora DB Cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.AuroraHighAvailability.html#Aurora.Managing.FaultTolerance) in the *Amazon Aurora User Guide*.\n This setting doesn't apply to RDS Custom DB instances.\n Default: ``1``\n Valid Values: ``0 - 15``"},"publiclyAccessible":{"type":"boolean","description":"Indicates whether the DB instance is an internet-facing instance. If you specify true, AWS CloudFormation creates an instance with a publicly resolvable DNS name, which resolves to a public IP address. If you specify false, AWS CloudFormation creates an internal instance with a DNS name that resolves to a private IP address. \n The default behavior value depends on your VPC setup and the database subnet group. For more information, see the ``PubliclyAccessible`` parameter in the [CreateDBInstance](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html) in the *Amazon RDS API Reference*."},"replicaMode":{"type":"string","description":"The open mode of an Oracle read replica. For more information, see [Working with Oracle Read Replicas for Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html) in the *Amazon RDS User Guide*.\n This setting is only supported in RDS for Oracle.\n Default: ``open-read-only``\n Valid Values: ``open-read-only`` or ``mounted``"},"restoreTime":{"type":"string","description":"The date and time to restore from. This parameter applies to point-in-time recovery. For more information, see [Restoring a DB instance to a specified time](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIT.html) in the in the *Amazon RDS User Guide*.\n Constraints:\n  +  Must be a time in Universal Coordinated Time (UTC) format.\n  +  Must be before the latest restorable time for the DB instance.\n  +  Can't be specified if the ``UseLatestRestorableTime`` parameter is enabled.\n  \n Example: ``2009-09-07T23:45:00Z``"},"sourceDbClusterIdentifier":{"type":"string","description":"The identifier of the Multi-AZ DB cluster that will act as the source for the read replica. Each DB cluster can have up to 15 read replicas.\n Constraints:\n  +  Must be the identifier of an existing Multi-AZ DB cluster.\n  +  Can't be specified if the ``SourceDBInstanceIdentifier`` parameter is also specified.\n  +  The specified DB cluster must have automatic backups enabled, that is, its backup retention period must be greater than 0.\n  +  The source DB cluster must be in the same AWS-Region as the read replica. Cross-Region replication isn't supported."},"sourceDbInstanceAutomatedBackupsArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the replicated automated backups from which to restore, for example, ``arn:aws:rds:us-east-1:123456789012:auto-backup:ab-L2IJCEXJP7XQ7HOJ4SIEXAMPLE``.\n This setting doesn't apply to RDS Custom."},"sourceDbInstanceIdentifier":{"type":"string","description":"If you want to create a read replica DB instance, specify the ID of the source DB instance. Each DB instance can have a limited number of read replicas. For more information, see [Working with Read Replicas](https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/USER_ReadRepl.html) in the *Amazon RDS User Guide*.\n For information about constraints that apply to DB instance identifiers, see [Naming constraints in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon RDS User Guide*.\n The ``SourceDBInstanceIdentifier`` property determines whether a DB instance is a read replica. If you remove the ``SourceDBInstanceIdentifier`` property from your template and then update your stack, AWS CloudFormation promotes the read replica to a standalone DB instance.\n If you specify the ``UseLatestRestorableTime`` or ``RestoreTime`` properties in conjunction with the ``SourceDBInstanceIdentifier`` property, RDS restores the DB instance to the requested point in time, thereby creating a new DB instance.\n   +  If you specify a source DB instance that uses VPC security groups, we recommend that you specify the ``VPCSecurityGroups`` property. If you don't specify the property, the read replica inherits the value of the ``VPCSecurityGroups`` property from the source DB when you create the replica. However, if you update the stack, AWS CloudFormation reverts the replica's ``VPCSecurityGroups`` property to the default value because it's not defined in the stack's template. This change might cause unexpected issues.\n  +  Read replicas don't support deletion policies. AWS CloudFormation ignores any deletion policy that's associated with a read replica.\n  +  If you specify ``SourceDBInstanceIdentifier``, don't specify the ``DBSnapshotIdentifier`` property. You can't create a read replica from a snapshot.\n  +  Don't set the ``BackupRetentionPeriod``, ``DBName``, ``MasterUsername``, ``MasterUserPassword``, and ``PreferredBackupWindow`` properties. The database attributes are inherited from the source DB instance, and backups are disabled for read replicas.\n  +  If the source DB instance is in a different region than the read replica, specify the source region in ``SourceRegion``, and specify an ARN for a valid DB instance in ``SourceDBInstanceIdentifier``. For more information, see [Constructing a Amazon RDS Amazon Resource Name (ARN)](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html#USER_Tagging.ARN) in the *Amazon RDS User Guide*.\n  +  For DB instances in Amazon Aurora clusters, don't specify this property. Amazon RDS automatically assigns writer and reader DB instances."},"sourceDbiResourceId":{"type":"string","description":"The resource ID of the source DB instance from which to restore."},"sourceRegion":{"type":"string","description":"The ID of the region that contains the source DB instance for the read replica."},"storageEncrypted":{"type":"boolean","description":"A value that indicates whether the DB instance is encrypted. By default, it isn't encrypted.\n If you specify the ``KmsKeyId`` property, then you must enable encryption.\n If you specify the ``SourceDBInstanceIdentifier`` or ``SourceDbiResourceId`` property, don't specify this property. The value is inherited from the source DB instance, and if the DB instance is encrypted, the specified ``KmsKeyId`` property is used.\n If you specify the ``SourceDBInstanceAutomatedBackupsArn`` property, don't specify this property. The value is inherited from the source DB instance automated backup. \n If you specify ``DBSnapshotIdentifier`` property, don't specify this property. The value is inherited from the snapshot.\n  *Amazon Aurora* \n Not applicable. The encryption for DB instances is managed by the DB cluster."},"storageThroughput":{"type":"integer","description":"Specifies the storage throughput value, in mebibyte per second (MiBps), for the DB instance. This setting applies only to the ``gp3`` storage type. \n This setting doesn't apply to RDS Custom or Amazon Aurora."},"storageType":{"type":"string","description":"The storage type to associate with the DB instance.\n If you specify ``io1``, ``io2``, or ``gp3``, you must also include a value for the ``Iops`` parameter.\n This setting doesn't apply to Amazon Aurora DB instances. Storage is managed by the DB cluster.\n Valid Values: ``gp2 | gp3 | io1 | io2 | standard``\n Default: ``io1``, if the ``Iops`` parameter is specified. Otherwise, ``gp3``."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB instance."},"tdeCredentialArn":{"type":"string"},"tdeCredentialPassword":{"type":"string"},"timezone":{"type":"string","description":"The time zone of the DB instance. The time zone parameter is currently supported only by [RDS for Db2](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/db2-time-zone) and [RDS for SQL Server](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.TimeZone)."},"useDefaultProcessorFeatures":{"type":"boolean","description":"Specifies whether the DB instance class of the DB instance uses its default processor features.\n This setting doesn't apply to RDS Custom DB instances."},"useLatestRestorableTime":{"type":"boolean","description":"Specifies whether the DB instance is restored from the latest backup time. By default, the DB instance isn't restored from the latest backup time. This parameter applies to point-in-time recovery. For more information, see [Restoring a DB instance to a specified time](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIT.html) in the in the *Amazon RDS User Guide*.\n Constraints:\n  +  Can't be specified if the ``RestoreTime`` parameter is provided."},"vpcSecurityGroups":{"type":"array","items":{"type":"string"},"description":"A list of the VPC security group IDs to assign to the DB instance. The list can include both the physical IDs of existing VPC security groups and references to [AWS::EC2::SecurityGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html) resources created in the template.\n If you plan to update the resource, don't specify VPC security groups in a shared VPC.\n  If you set ``VPCSecurityGroups``, you must not set [DBSecurityGroups](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsecuritygroups), and vice versa.\n  You can migrate a DB instance in your stack from an RDS DB security group to a VPC security group, but keep the following in mind:\n  +  You can't revert to using an RDS security group after you establish a VPC security group membership.\n  +  When you migrate your DB instance to VPC security groups, if your stack update rolls back because the DB instance update fails or because an update fails in another AWS CloudFormation resource, the rollback fails because it can't revert to an RDS security group.\n  +  To use the properties that are available when you use a VPC security group, you must recreate the DB instance. If you don't, AWS CloudFormation submits only the property values that are listed in the [DBSecurityGroups](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsecuritygroups) property.\n  \n  To avoid this situation, migrate your DB instance to using VPC security groups only when that is the only change in your stack template. \n  *Amazon Aurora* \n Not applicable. The associated list of EC2 VPC security groups is managed by the DB cluster. If specified, the setting must match the DB cluster setting."}}},"aws-native:rds:DbParameterGroup":{"description":"The ``AWS::RDS::DBParameterGroup`` resource creates a custom parameter group for an RDS database family.\n This type can be declared in a template and referenced in the ``DBParameterGroupName`` property of an ``AWS::RDS::DBInstance`` resource.\n For information about configuring parameters for Amazon RDS DB instances, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide*.\n For information about configuring parameters for Amazon Aurora DB instances, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  Applying a parameter group to a DB instance may require the DB instance to reboot, resulting in a database outage for the duration of the reboot.","properties":{"dbParameterGroupName":{"type":"string","description":"The name of the DB parameter group.\n Constraints:\n  +  Must be 1 to 255 letters, numbers, or hyphens.\n  +  First character must be a letter\n  +  Can't end with a hyphen or contain two consecutive hyphens\n  \n If you don't specify a value for ``DBParameterGroupName`` property, a name is automatically created for the DB parameter group.\n  This value is stored as a lowercase string.","replaceOnChanges":true},"description":{"type":"string","description":"Provides the customer-specified description for this DB parameter group.","replaceOnChanges":true},"family":{"type":"string","description":"The DB parameter group family name. A DB parameter group can be associated with one and only one DB parameter group family, and can be applied only to a DB instance running a database engine and engine version compatible with that DB parameter group family.\n To list all of the available parameter group families for a DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine \u003cengine\u003e`` \n For example, to list all of the available parameter group families for the MySQL DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine mysql`` \n  The output contains duplicates.\n  The following are the valid DB engine values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``db2-ae`` \n  +   ``db2-se`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``","replaceOnChanges":true},"parameters":{"$ref":"pulumi.json#/Any","description":"A mapping of parameter names and values for the parameter update. You must specify at least one parameter name and value.\n For more information about parameter groups, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide*, or [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  AWS CloudFormation doesn't support specifying an apply method for each individual parameter. The default apply method for each parameter is used.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RDS::DBParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB parameter group."}},"type":"object","required":["description","family"],"inputProperties":{"dbParameterGroupName":{"type":"string","description":"The name of the DB parameter group.\n Constraints:\n  +  Must be 1 to 255 letters, numbers, or hyphens.\n  +  First character must be a letter\n  +  Can't end with a hyphen or contain two consecutive hyphens\n  \n If you don't specify a value for ``DBParameterGroupName`` property, a name is automatically created for the DB parameter group.\n  This value is stored as a lowercase string."},"description":{"type":"string","description":"Provides the customer-specified description for this DB parameter group."},"family":{"type":"string","description":"The DB parameter group family name. A DB parameter group can be associated with one and only one DB parameter group family, and can be applied only to a DB instance running a database engine and engine version compatible with that DB parameter group family.\n To list all of the available parameter group families for a DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine \u003cengine\u003e`` \n For example, to list all of the available parameter group families for the MySQL DB engine, use the following command:\n  ``aws rds describe-db-engine-versions --query \"DBEngineVersions[].DBParameterGroupFamily\" --engine mysql`` \n  The output contains duplicates.\n  The following are the valid DB engine values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``db2-ae`` \n  +   ``db2-se`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``"},"parameters":{"$ref":"pulumi.json#/Any","description":"A mapping of parameter names and values for the parameter update. You must specify at least one parameter name and value.\n For more information about parameter groups, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide*, or [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  AWS CloudFormation doesn't support specifying an apply method for each individual parameter. The default apply method for each parameter is used.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RDS::DBParameterGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB parameter group."}},"requiredInputs":["description","family"]},"aws-native:rds:DbProxy":{"description":"Resource schema for AWS::RDS::DBProxy","properties":{"auth":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbProxyAuthFormat"},"description":"The authorization mechanism that the proxy uses."},"dbProxyArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the proxy."},"dbProxyName":{"type":"string","description":"The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region.","replaceOnChanges":true},"debugLogging":{"type":"boolean","description":"Whether the proxy includes detailed information about SQL statements in its logs."},"defaultAuthScheme":{"$ref":"#/types/aws-native:rds:DbProxyDefaultAuthScheme","description":"The default authentication scheme that the proxy uses for client connections to the proxy and connections from the proxy to the underlying database."},"endpoint":{"type":"string","description":"The endpoint that you can use to connect to the proxy. You include the endpoint value in the connection string for a database client application."},"endpointNetworkType":{"$ref":"#/types/aws-native:rds:DbProxyEndpointNetworkType","description":"The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports.","replaceOnChanges":true},"engineFamily":{"$ref":"#/types/aws-native:rds:DbProxyEngineFamily","description":"The kinds of databases that the proxy can connect to.","replaceOnChanges":true},"idleClientTimeout":{"type":"integer","description":"The number of seconds that a connection to the proxy can be inactive before the proxy disconnects it."},"requireTls":{"type":"boolean","description":"A Boolean parameter that specifies whether Transport Layer Security (TLS) encryption is required for connections to the proxy."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets Manager."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the proxy."},"targetConnectionNetworkType":{"$ref":"#/types/aws-native:rds:DbProxyTargetConnectionNetworkType","description":"The network type that the proxy uses to connect to the target database. The network type determines the IP version that the proxy uses for connections to the database.","replaceOnChanges":true},"vpcId":{"type":"string","description":"VPC ID to associate with the new DB proxy."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"VPC security group IDs to associate with the new proxy."},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"VPC subnet IDs to associate with the new proxy.","replaceOnChanges":true}},"type":"object","required":["dbProxyArn","dbProxyName","endpoint","engineFamily","roleArn","vpcId","vpcSubnetIds"],"inputProperties":{"auth":{"type":"array","items":{"$ref":"#/types/aws-native:rds:DbProxyAuthFormat"},"description":"The authorization mechanism that the proxy uses."},"dbProxyName":{"type":"string","description":"The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region."},"debugLogging":{"type":"boolean","description":"Whether the proxy includes detailed information about SQL statements in its logs."},"defaultAuthScheme":{"$ref":"#/types/aws-native:rds:DbProxyDefaultAuthScheme","description":"The default authentication scheme that the proxy uses for client connections to the proxy and connections from the proxy to the underlying database."},"endpointNetworkType":{"$ref":"#/types/aws-native:rds:DbProxyEndpointNetworkType","description":"The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports."},"engineFamily":{"$ref":"#/types/aws-native:rds:DbProxyEngineFamily","description":"The kinds of databases that the proxy can connect to."},"idleClientTimeout":{"type":"integer","description":"The number of seconds that a connection to the proxy can be inactive before the proxy disconnects it."},"requireTls":{"type":"boolean","description":"A Boolean parameter that specifies whether Transport Layer Security (TLS) encryption is required for connections to the proxy."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets Manager."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the proxy."},"targetConnectionNetworkType":{"$ref":"#/types/aws-native:rds:DbProxyTargetConnectionNetworkType","description":"The network type that the proxy uses to connect to the target database. The network type determines the IP version that the proxy uses for connections to the database."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"VPC security group IDs to associate with the new proxy."},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"VPC subnet IDs to associate with the new proxy."}},"requiredInputs":["engineFamily","roleArn","vpcSubnetIds"]},"aws-native:rds:DbProxyEndpoint":{"description":"Resource schema for AWS::RDS::DBProxyEndpoint.","properties":{"dbProxyEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the DB proxy endpoint."},"dbProxyEndpointName":{"type":"string","description":"The identifier for the DB proxy endpoint. This name must be unique for all DB proxy endpoints owned by your AWS account in the specified AWS Region.","replaceOnChanges":true},"dbProxyName":{"type":"string","description":"The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region.","replaceOnChanges":true},"endpoint":{"type":"string","description":"The endpoint that you can use to connect to the DB proxy. You include the endpoint value in the connection string for a database client application."},"endpointNetworkType":{"$ref":"#/types/aws-native:rds:DbProxyEndpointEndpointNetworkType","description":"The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports.","replaceOnChanges":true},"isDefault":{"type":"boolean","description":"A value that indicates whether this endpoint is the default endpoint for the associated DB proxy. Default DB proxy endpoints always have read/write capability. Other endpoints that you associate with the DB proxy can be either read/write or read-only."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the DB proxy endpoint."},"targetRole":{"$ref":"#/types/aws-native:rds:DbProxyEndpointTargetRole","description":"A value that indicates whether the DB proxy endpoint can be used for read/write or read-only operations."},"vpcId":{"type":"string","description":"VPC ID to associate with the new DB proxy endpoint."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"VPC security group IDs to associate with the new DB proxy endpoint."},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"VPC subnet IDs to associate with the new DB proxy endpoint.","replaceOnChanges":true}},"type":"object","required":["dbProxyEndpointArn","dbProxyEndpointName","dbProxyName","endpoint","isDefault","vpcId","vpcSubnetIds"],"inputProperties":{"dbProxyEndpointName":{"type":"string","description":"The identifier for the DB proxy endpoint. This name must be unique for all DB proxy endpoints owned by your AWS account in the specified AWS Region."},"dbProxyName":{"type":"string","description":"The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region."},"endpointNetworkType":{"$ref":"#/types/aws-native:rds:DbProxyEndpointEndpointNetworkType","description":"The network type of the DB proxy endpoint. The network type determines the IP version that the proxy endpoint supports."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the DB proxy endpoint."},"targetRole":{"$ref":"#/types/aws-native:rds:DbProxyEndpointTargetRole","description":"A value that indicates whether the DB proxy endpoint can be used for read/write or read-only operations."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"VPC security group IDs to associate with the new DB proxy endpoint."},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"VPC subnet IDs to associate with the new DB proxy endpoint."}},"requiredInputs":["dbProxyName","vpcSubnetIds"]},"aws-native:rds:DbProxyTargetGroup":{"description":"Resource schema for AWS::RDS::DBProxyTargetGroup","properties":{"connectionPoolConfigurationInfo":{"$ref":"#/types/aws-native:rds:DbProxyTargetGroupConnectionPoolConfigurationInfoFormat","description":"Displays the settings that control the size and behavior of the connection pool associated with a `DBProxyTarget` ."},"dbClusterIdentifiers":{"type":"array","items":{"type":"string"},"description":"One or more DB cluster identifiers."},"dbInstanceIdentifiers":{"type":"array","items":{"type":"string"},"description":"One or more DB instance identifiers."},"dbProxyName":{"type":"string","description":"The identifier for the proxy.","replaceOnChanges":true},"targetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) representing the target group."},"targetGroupName":{"$ref":"#/types/aws-native:rds:DbProxyTargetGroupTargetGroupName","description":"The identifier for the DBProxyTargetGroup","replaceOnChanges":true}},"type":"object","required":["dbProxyName","targetGroupArn","targetGroupName"],"inputProperties":{"connectionPoolConfigurationInfo":{"$ref":"#/types/aws-native:rds:DbProxyTargetGroupConnectionPoolConfigurationInfoFormat","description":"Displays the settings that control the size and behavior of the connection pool associated with a `DBProxyTarget` ."},"dbClusterIdentifiers":{"type":"array","items":{"type":"string"},"description":"One or more DB cluster identifiers."},"dbInstanceIdentifiers":{"type":"array","items":{"type":"string"},"description":"One or more DB instance identifiers."},"dbProxyName":{"type":"string","description":"The identifier for the proxy."},"targetGroupName":{"$ref":"#/types/aws-native:rds:DbProxyTargetGroupTargetGroupName","description":"The identifier for the DBProxyTargetGroup"}},"requiredInputs":["dbProxyName","targetGroupName"]},"aws-native:rds:DbShardGroup":{"description":"Creates a new DB shard group for Aurora Limitless Database. You must enable Aurora Limitless Database to create a DB shard group.\n Valid for: Aurora DB clusters only","properties":{"computeRedundancy":{"type":"integer","description":"Specifies whether to create standby standby DB data access shard for the DB shard group. Valid values are the following:\n  +  0 - Creates a DB shard group without a standby DB data access shard. This is the default value.\n  +  1 - Creates a DB shard group with a standby DB data access shard in a different Availability Zone (AZ).\n  +  2 - Creates a DB shard group with two standby DB data access shard in two different AZs."},"dbClusterIdentifier":{"type":"string","description":"The name of the primary DB cluster for the DB shard group.","replaceOnChanges":true},"dbShardGroupIdentifier":{"type":"string","description":"The name of the DB shard group.","replaceOnChanges":true},"dbShardGroupResourceId":{"type":"string","description":"The AWS Region -unique, immutable identifier for the DB shard group."},"endpoint":{"type":"string","description":"This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions:\n\n- `CreateDBInstance`\n- `DescribeDBInstances`\n- `DeleteDBInstance`\n\nFor the data structure that represents Amazon Aurora DB cluster endpoints, see `DBClusterEndpoint` ."},"maxAcu":{"type":"number","description":"The maximum capacity of the DB shard group in Aurora capacity units (ACUs)."},"minAcu":{"type":"number","description":"The minimum capacity of the DB shard group in Aurora capacity units (ACUs)."},"publiclyAccessible":{"type":"boolean","description":"Specifies whether the DB shard group is publicly accessible.\n When the DB shard group is publicly accessible, its Domain Name System (DNS) endpoint resolves to the private IP address from within the DB shard group's virtual private cloud (VPC). It resolves to the public IP address from outside of the DB shard group's VPC. Access to the DB shard group is ultimately controlled by the security group it uses. That public access is not permitted if the security group assigned to the DB shard group doesn't permit it.\n When the DB shard group isn't publicly accessible, it is an internal DB shard group with a DNS name that resolves to a private IP address.\n Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified.\n If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies:\n  +  If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB shard group is private.\n  +  If the default VPC in the target Region has an internet gateway attached to it, the DB shard group is public.\n  \n If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies:\n  +  If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB shard group is private.\n  +  If the subnets are part of a VPC that has an internet gateway attached to it, the DB shard group is public.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the DB shard group."}},"type":"object","required":["dbClusterIdentifier","dbShardGroupResourceId","endpoint","maxAcu"],"inputProperties":{"computeRedundancy":{"type":"integer","description":"Specifies whether to create standby standby DB data access shard for the DB shard group. Valid values are the following:\n  +  0 - Creates a DB shard group without a standby DB data access shard. This is the default value.\n  +  1 - Creates a DB shard group with a standby DB data access shard in a different Availability Zone (AZ).\n  +  2 - Creates a DB shard group with two standby DB data access shard in two different AZs."},"dbClusterIdentifier":{"type":"string","description":"The name of the primary DB cluster for the DB shard group."},"dbShardGroupIdentifier":{"type":"string","description":"The name of the DB shard group."},"maxAcu":{"type":"number","description":"The maximum capacity of the DB shard group in Aurora capacity units (ACUs)."},"minAcu":{"type":"number","description":"The minimum capacity of the DB shard group in Aurora capacity units (ACUs)."},"publiclyAccessible":{"type":"boolean","description":"Specifies whether the DB shard group is publicly accessible.\n When the DB shard group is publicly accessible, its Domain Name System (DNS) endpoint resolves to the private IP address from within the DB shard group's virtual private cloud (VPC). It resolves to the public IP address from outside of the DB shard group's VPC. Access to the DB shard group is ultimately controlled by the security group it uses. That public access is not permitted if the security group assigned to the DB shard group doesn't permit it.\n When the DB shard group isn't publicly accessible, it is an internal DB shard group with a DNS name that resolves to a private IP address.\n Default: The default behavior varies depending on whether ``DBSubnetGroupName`` is specified.\n If ``DBSubnetGroupName`` isn't specified, and ``PubliclyAccessible`` isn't specified, the following applies:\n  +  If the default VPC in the target Region doesn’t have an internet gateway attached to it, the DB shard group is private.\n  +  If the default VPC in the target Region has an internet gateway attached to it, the DB shard group is public.\n  \n If ``DBSubnetGroupName`` is specified, and ``PubliclyAccessible`` isn't specified, the following applies:\n  +  If the subnets are part of a VPC that doesn’t have an internet gateway attached to it, the DB shard group is private.\n  +  If the subnets are part of a VPC that has an internet gateway attached to it, the DB shard group is public."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the DB shard group."}},"requiredInputs":["dbClusterIdentifier","maxAcu"]},"aws-native:rds:DbSubnetGroup":{"description":"The ``AWS::RDS::DBSubnetGroup`` resource creates a database subnet group. Subnet groups must contain at least two subnets in two different Availability Zones in the same region. \n For more information, see [Working with DB subnet groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Subnets) in the *Amazon RDS User Guide*.","properties":{"dbSubnetGroupDescription":{"type":"string","description":"The description for the DB subnet group."},"dbSubnetGroupName":{"type":"string","description":"The name for the DB subnet group. This value is stored as a lowercase string.\n Constraints:\n  +  Must contain no more than 255 letters, numbers, periods, underscores, spaces, or hyphens.\n  +  Must not be default.\n  +  First character must be a letter.\n  \n Example: ``mydbsubnetgroup``","replaceOnChanges":true},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The EC2 Subnet IDs for the DB subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB subnet group."}},"type":"object","required":["dbSubnetGroupDescription","subnetIds"],"inputProperties":{"dbSubnetGroupDescription":{"type":"string","description":"The description for the DB subnet group."},"dbSubnetGroupName":{"type":"string","description":"The name for the DB subnet group. This value is stored as a lowercase string.\n Constraints:\n  +  Must contain no more than 255 letters, numbers, periods, underscores, spaces, or hyphens.\n  +  Must not be default.\n  +  First character must be a letter.\n  \n Example: ``mydbsubnetgroup``"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The EC2 Subnet IDs for the DB subnet group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the DB subnet group."}},"requiredInputs":["dbSubnetGroupDescription","subnetIds"]},"aws-native:rds:EventSubscription":{"description":"The ``AWS::RDS::EventSubscription`` resource allows you to receive notifications for Amazon Relational Database Service events through the Amazon Simple Notification Service (Amazon SNS). For more information, see [Using Amazon RDS Event Notification](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html) in the *Amazon RDS User Guide*.","properties":{"enabled":{"type":"boolean","description":"Specifies whether to activate the subscription. If the event notification subscription isn't activated, the subscription is created but not active."},"eventCategories":{"type":"array","items":{"type":"string"},"description":"A list of event categories for a particular source type (``SourceType``) that you want to subscribe to. You can see a list of the categories for a given source type in the \"Amazon RDS event categories and event messages\" section of the [Amazon RDS User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.Messages.html) or the [Amazon Aurora User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.html). You can also see this list by using the ``DescribeEventCategories`` operation."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic created for event notification. SNS automatically creates the ARN when you create a topic and subscribe to it.\n  RDS doesn't support FIFO (first in, first out) topics. For more information, see [Message ordering and deduplication (FIFO topics)](https://docs.aws.amazon.com/sns/latest/dg/sns-fifo-topics.html) in the *Amazon Simple Notification Service Developer Guide*.","replaceOnChanges":true},"sourceIds":{"type":"array","items":{"type":"string"},"description":"The list of identifiers of the event sources for which events are returned. If not specified, then all sources are included in the response. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens. It can't end with a hyphen or contain two consecutive hyphens.\n Constraints:\n  +  If ``SourceIds`` are supplied, ``SourceType`` must also be provided.\n  +  If the source type is a DB instance, a ``DBInstanceIdentifier`` value must be supplied.\n  +  If the source type is a DB cluster, a ``DBClusterIdentifier`` value must be supplied.\n  +  If the source type is a DB parameter group, a ``DBParameterGroupName`` value must be supplied.\n  +  If the source type is a DB security group, a ``DBSecurityGroupName`` value must be supplied.\n  +  If the source type is a DB snapshot, a ``DBSnapshotIdentifier`` value must be supplied.\n  +  If the source type is a DB cluster snapshot, a ``DBClusterSnapshotIdentifier`` value must be supplied.\n  +  If the source type is an RDS Proxy, a ``DBProxyName`` value must be supplied."},"sourceType":{"type":"string","description":"The type of source that is generating the events. For example, if you want to be notified of events generated by a DB instance, you set this parameter to ``db-instance``. For RDS Proxy events, specify ``db-proxy``. If this value isn't specified, all events are returned.\n Valid Values:``db-instance | db-cluster | db-parameter-group | db-security-group | db-snapshot | db-cluster-snapshot | db-proxy | zero-etl | custom-engine-version | blue-green-deployment``"},"subscriptionName":{"type":"string","description":"The name of the subscription.\n Constraints: The name must be less than 255 characters.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional array of key-value pairs to apply to this subscription."}},"type":"object","required":["snsTopicArn"],"inputProperties":{"enabled":{"type":"boolean","description":"Specifies whether to activate the subscription. If the event notification subscription isn't activated, the subscription is created but not active."},"eventCategories":{"type":"array","items":{"type":"string"},"description":"A list of event categories for a particular source type (``SourceType``) that you want to subscribe to. You can see a list of the categories for a given source type in the \"Amazon RDS event categories and event messages\" section of the [Amazon RDS User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.Messages.html) or the [Amazon Aurora User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.html). You can also see this list by using the ``DescribeEventCategories`` operation."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic created for event notification. SNS automatically creates the ARN when you create a topic and subscribe to it.\n  RDS doesn't support FIFO (first in, first out) topics. For more information, see [Message ordering and deduplication (FIFO topics)](https://docs.aws.amazon.com/sns/latest/dg/sns-fifo-topics.html) in the *Amazon Simple Notification Service Developer Guide*."},"sourceIds":{"type":"array","items":{"type":"string"},"description":"The list of identifiers of the event sources for which events are returned. If not specified, then all sources are included in the response. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens. It can't end with a hyphen or contain two consecutive hyphens.\n Constraints:\n  +  If ``SourceIds`` are supplied, ``SourceType`` must also be provided.\n  +  If the source type is a DB instance, a ``DBInstanceIdentifier`` value must be supplied.\n  +  If the source type is a DB cluster, a ``DBClusterIdentifier`` value must be supplied.\n  +  If the source type is a DB parameter group, a ``DBParameterGroupName`` value must be supplied.\n  +  If the source type is a DB security group, a ``DBSecurityGroupName`` value must be supplied.\n  +  If the source type is a DB snapshot, a ``DBSnapshotIdentifier`` value must be supplied.\n  +  If the source type is a DB cluster snapshot, a ``DBClusterSnapshotIdentifier`` value must be supplied.\n  +  If the source type is an RDS Proxy, a ``DBProxyName`` value must be supplied."},"sourceType":{"type":"string","description":"The type of source that is generating the events. For example, if you want to be notified of events generated by a DB instance, you set this parameter to ``db-instance``. For RDS Proxy events, specify ``db-proxy``. If this value isn't specified, all events are returned.\n Valid Values:``db-instance | db-cluster | db-parameter-group | db-security-group | db-snapshot | db-cluster-snapshot | db-proxy | zero-etl | custom-engine-version | blue-green-deployment``"},"subscriptionName":{"type":"string","description":"The name of the subscription.\n Constraints: The name must be less than 255 characters."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An optional array of key-value pairs to apply to this subscription."}},"requiredInputs":["snsTopicArn"]},"aws-native:rds:GlobalCluster":{"description":"Resource Type definition for AWS::RDS::GlobalCluster","properties":{"deletionProtection":{"type":"boolean","description":"The deletion protection setting for the new global database. The global database can't be deleted when deletion protection is enabled."},"engine":{"$ref":"#/types/aws-native:rds:GlobalClusterEngine","description":"The name of the database engine to be used for this DB cluster. Valid Values: aurora (for MySQL 5.6-compatible Aurora), aurora-mysql (for MySQL 5.7-compatible Aurora).\nIf you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster.","replaceOnChanges":true},"engineLifecycleSupport":{"type":"string","description":"The life cycle type of the global cluster. You can use this setting to enroll your global cluster into Amazon RDS Extended Support."},"engineVersion":{"type":"string","description":"The version number of the database engine to use. If you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster."},"globalClusterIdentifier":{"type":"string","description":"The cluster identifier of the new global database cluster. This parameter is stored as a lowercase string.","replaceOnChanges":true},"globalEndpoint":{"$ref":"#/types/aws-native:rds:GlobalClusterGlobalEndpoint"},"sourceDbClusterIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) to use as the primary cluster of the global database. This parameter is optional. This parameter is stored as a lowercase string.","replaceOnChanges":true},"storageEncrypted":{"type":"boolean","description":" The storage encryption setting for the new global database cluster.\nIf you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["globalEndpoint"],"inputProperties":{"deletionProtection":{"type":"boolean","description":"The deletion protection setting for the new global database. The global database can't be deleted when deletion protection is enabled."},"engine":{"$ref":"#/types/aws-native:rds:GlobalClusterEngine","description":"The name of the database engine to be used for this DB cluster. Valid Values: aurora (for MySQL 5.6-compatible Aurora), aurora-mysql (for MySQL 5.7-compatible Aurora).\nIf you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster."},"engineLifecycleSupport":{"type":"string","description":"The life cycle type of the global cluster. You can use this setting to enroll your global cluster into Amazon RDS Extended Support."},"engineVersion":{"type":"string","description":"The version number of the database engine to use. If you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster."},"globalClusterIdentifier":{"type":"string","description":"The cluster identifier of the new global database cluster. This parameter is stored as a lowercase string."},"sourceDbClusterIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) to use as the primary cluster of the global database. This parameter is optional. This parameter is stored as a lowercase string."},"storageEncrypted":{"type":"boolean","description":" The storage encryption setting for the new global database cluster.\nIf you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:rds:Integration":{"description":"A zero-ETL integration with Amazon Redshift.","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"An optional set of non-secret key–value pairs that contains additional contextual information about the data. For more information, see [Encryption context](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context) in the *Key Management Service Developer Guide*.\n You can only include this parameter if you specify the ``KMSKeyId`` parameter.","replaceOnChanges":true},"createTime":{"type":"string","description":"The time when the integration was created, in Universal Coordinated Time (UTC)."},"dataFilter":{"type":"string","description":"Data filters for the integration. These filters determine which tables from the source database are sent to the target Amazon Redshift data warehouse."},"description":{"type":"string","description":"A description of the integration."},"integrationArn":{"type":"string","description":"The ARN of the integration."},"integrationName":{"type":"string","description":"The name of the integration."},"kmsKeyId":{"type":"string","description":"The AWS Key Management System (AWS KMS) key identifier for the key to use to encrypt the integration. If you don't specify an encryption key, RDS uses a default AWS owned key.","replaceOnChanges":true},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database to use as the source for replication.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*."},"targetArn":{"type":"string","description":"The ARN of the Redshift data warehouse to use as the target for replication.","replaceOnChanges":true}},"type":"object","required":["createTime","integrationArn","sourceArn","targetArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"An optional set of non-secret key–value pairs that contains additional contextual information about the data. For more information, see [Encryption context](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context) in the *Key Management Service Developer Guide*.\n You can only include this parameter if you specify the ``KMSKeyId`` parameter."},"dataFilter":{"type":"string","description":"Data filters for the integration. These filters determine which tables from the source database are sent to the target Amazon Redshift data warehouse."},"description":{"type":"string","description":"A description of the integration."},"integrationName":{"type":"string","description":"The name of the integration."},"kmsKeyId":{"type":"string","description":"The AWS Key Management System (AWS KMS) key identifier for the key to use to encrypt the integration. If you don't specify an encryption key, RDS uses a default AWS owned key."},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database to use as the source for replication."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*."},"targetArn":{"type":"string","description":"The ARN of the Redshift data warehouse to use as the target for replication."}},"requiredInputs":["sourceArn","targetArn"]},"aws-native:rds:OptionGroup":{"description":"The ``AWS::RDS::OptionGroup`` resource creates or updates an option group, to enable and configure features that are specific to a particular DB engine.","properties":{"engineName":{"type":"string","description":"Specifies the name of the engine that this option group should be associated with.\n Valid Values: \n  +   ``mariadb`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``","replaceOnChanges":true},"majorEngineVersion":{"type":"string","description":"Specifies the major version of the engine that this option group should be associated with.","replaceOnChanges":true},"optionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:rds:OptionGroupOptionConfiguration"},"description":"A list of all available options for an option group."},"optionGroupDescription":{"type":"string","description":"The description of the option group.","replaceOnChanges":true},"optionGroupName":{"type":"string","description":"The name of the option group to be created.\n Constraints:\n  +  Must be 1 to 255 letters, numbers, or hyphens\n  +  First character must be a letter\n  +  Can't end with a hyphen or contain two consecutive hyphens\n  \n Example: ``myoptiongroup``\n If you don't specify a value for ``OptionGroupName`` property, a name is automatically created for the option group.\n  This value is stored as a lowercase string.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the option group."}},"type":"object","required":["engineName","majorEngineVersion","optionGroupDescription"],"inputProperties":{"engineName":{"type":"string","description":"Specifies the name of the engine that this option group should be associated with.\n Valid Values: \n  +   ``mariadb`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``"},"majorEngineVersion":{"type":"string","description":"Specifies the major version of the engine that this option group should be associated with."},"optionConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:rds:OptionGroupOptionConfiguration"},"description":"A list of all available options for an option group."},"optionGroupDescription":{"type":"string","description":"The description of the option group."},"optionGroupName":{"type":"string","description":"The name of the option group to be created.\n Constraints:\n  +  Must be 1 to 255 letters, numbers, or hyphens\n  +  First character must be a letter\n  +  Can't end with a hyphen or contain two consecutive hyphens\n  \n Example: ``myoptiongroup``\n If you don't specify a value for ``OptionGroupName`` property, a name is automatically created for the option group.\n  This value is stored as a lowercase string."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags to assign to the option group."}},"requiredInputs":["engineName","majorEngineVersion","optionGroupDescription"]},"aws-native:redshift:Cluster":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"allowVersionUpgrade":{"type":"boolean","description":"Major version upgrades can be applied during the maintenance window to the Amazon Redshift engine that is running on the cluster. Default value is True"},"aquaConfigurationStatus":{"type":"string","description":"The value represents how the cluster is configured to use AQUA (Advanced Query Accelerator) after the cluster is restored. Possible values include the following.\n\nenabled - Use AQUA if it is available for the current Region and Amazon Redshift node type.\ndisabled - Don't use AQUA.\nauto - Amazon Redshift determines whether to use AQUA.\n"},"automatedSnapshotRetentionPeriod":{"type":"integer","description":"The number of days that automated snapshots are retained. If the value is 0, automated snapshots are disabled. Default value is 1"},"availabilityZone":{"type":"string","description":"The EC2 Availability Zone (AZ) in which you want Amazon Redshift to provision the cluster. Default: A random, system-chosen Availability Zone in the region that is specified by the endpoint"},"availabilityZoneRelocation":{"type":"boolean","description":"The option to enable relocation for an Amazon Redshift cluster between Availability Zones after the cluster modification is complete."},"availabilityZoneRelocationStatus":{"type":"string","description":"The availability zone relocation status of the cluster"},"classic":{"type":"boolean","description":"A boolean value indicating whether the resize operation is using the classic resize process. If you don't provide this parameter or set the value to false , the resize type is elastic."},"clusterIdentifier":{"type":"string","description":"A unique identifier for the cluster. You use this identifier to refer to the cluster for any subsequent cluster operations such as deleting or modifying. All alphabetical characters must be lower case, no hypens at the end, no two consecutive hyphens. Cluster name should be unique for all clusters within an AWS account","replaceOnChanges":true},"clusterNamespaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cluster namespace."},"clusterParameterGroupName":{"type":"string","description":"The name of the parameter group to be associated with this cluster."},"clusterSecurityGroups":{"type":"array","items":{"type":"string"},"description":"A list of security groups to be associated with this cluster."},"clusterSubnetGroupName":{"type":"string","description":"The name of a cluster subnet group to be associated with this cluster.","replaceOnChanges":true},"clusterType":{"type":"string","description":"The type of the cluster. When cluster type is specified as single-node, the NumberOfNodes parameter is not required and if multi-node, the NumberOfNodes parameter is required"},"clusterVersion":{"type":"string","description":"The version of the Amazon Redshift engine software that you want to deploy on the cluster.The version selected runs on all the nodes in the cluster."},"dbName":{"type":"string","description":"The name of the first database to be created when the cluster is created. To create additional databases after the cluster is created, connect to the cluster with a SQL client and use SQL commands to create a database.","replaceOnChanges":true},"deferMaintenance":{"type":"boolean","description":"A boolean indicating whether to enable the deferred maintenance window."},"deferMaintenanceDuration":{"type":"integer","description":"An integer indicating the duration of the maintenance window in days. If you specify a duration, you can't specify an end time. The duration must be 60 days or less."},"deferMaintenanceEndTime":{"type":"string","description":"A timestamp indicating end time for the deferred maintenance window. If you specify an end time, you can't specify a duration."},"deferMaintenanceIdentifier":{"type":"string","description":"A unique identifier for the deferred maintenance window."},"deferMaintenanceStartTime":{"type":"string","description":"A timestamp indicating the start time for the deferred maintenance window."},"destinationRegion":{"type":"string","description":"The destination AWS Region that you want to copy snapshots to. Constraints: Must be the name of a valid AWS Region. For more information, see Regions and Endpoints in the Amazon Web Services [https://docs.aws.amazon.com/general/latest/gr/rande.html#redshift_region] General Reference"},"elasticIp":{"type":"string","description":"The Elastic IP (EIP) address for the cluster."},"encrypted":{"type":"boolean","description":"If true, the data in the cluster is encrypted at rest."},"endpoint":{"$ref":"#/types/aws-native:redshift:ClusterEndpoint","description":"The connection endpoint."},"enhancedVpcRouting":{"type":"boolean","description":"An option that specifies whether to create the cluster with enhanced VPC routing enabled. To create a cluster that uses enhanced VPC routing, the cluster must be in a VPC. For more information, see Enhanced VPC Routing in the Amazon Redshift Cluster Management Guide.\n\nIf this option is true , enhanced VPC routing is enabled.\n\nDefault: false"},"hsmClientCertificateIdentifier":{"type":"string","description":"Specifies the name of the HSM client certificate the Amazon Redshift cluster uses to retrieve the data encryption keys stored in an HSM"},"hsmConfigurationIdentifier":{"type":"string","description":"Specifies the name of the HSM configuration that contains the information the Amazon Redshift cluster can use to retrieve and store keys in an HSM."},"iamRoles":{"type":"array","items":{"type":"string"},"description":"A list of AWS Identity and Access Management (IAM) roles that can be used by the cluster to access other AWS services. You must supply the IAM roles in their Amazon Resource Name (ARN) format. You can supply up to 50 IAM roles in a single request"},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (KMS) key ID of the encryption key that you want to use to encrypt data in the cluster."},"loggingProperties":{"$ref":"#/types/aws-native:redshift:ClusterLoggingProperties","description":"Specifies logging information, such as queries and connection attempts, for the specified Amazon Redshift cluster."},"maintenanceTrackName":{"type":"string","description":"The name for the maintenance track that you want to assign for the cluster. This name change is asynchronous. The new track name stays in the PendingModifiedValues for the cluster until the next maintenance window. When the maintenance track changes, the cluster is switched to the latest cluster release available for the maintenance track. At this point, the maintenance track name is applied."},"manageMasterPassword":{"type":"boolean","description":"A boolean indicating if the redshift cluster's admin user credentials is managed by Redshift or not. You can't use MasterUserPassword if ManageMasterPassword is true. If ManageMasterPassword is false or not set, Amazon Redshift uses MasterUserPassword for the admin user account's password."},"manualSnapshotRetentionPeriod":{"type":"integer","description":"The number of days to retain newly copied snapshots in the destination AWS Region after they are copied from the source AWS Region. If the value is -1, the manual snapshot is retained indefinitely.\n\nThe value must be either -1 or an integer between 1 and 3,653."},"masterPasswordSecretArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the cluster's admin user credentials secret."},"masterPasswordSecretKmsKeyId":{"type":"string","description":"The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin user credentials secret."},"masterUserPassword":{"type":"string","description":"The password associated with the master user account for the cluster that is being created. You can't use MasterUserPassword if ManageMasterPassword is true. Password must be between 8 and 64 characters in length, should have at least one uppercase letter.Must contain at least one lowercase letter.Must contain one number.Can be any printable ASCII character."},"masterUsername":{"type":"string","description":"The user name associated with the master user account for the cluster that is being created. The user name can't be PUBLIC and first character must be a letter.","replaceOnChanges":true},"multiAz":{"type":"boolean","description":"A boolean indicating if the redshift cluster is multi-az or not. If you don't provide this parameter or set the value to false, the redshift cluster will be single-az."},"namespaceResourcePolicy":{"$ref":"pulumi.json#/Any","description":"The namespace resource policy document that will be attached to a Redshift cluster.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Redshift::Cluster` for more information about the expected schema for this property."},"nodeType":{"type":"string","description":"The node type to be provisioned for the cluster.Valid Values: ds2.xlarge | ds2.8xlarge | dc1.large | dc1.8xlarge | dc2.large | dc2.8xlarge | ra3.large | ra3.4xlarge | ra3.16xlarge"},"numberOfNodes":{"type":"integer","description":"The number of compute nodes in the cluster. This parameter is required when the ClusterType parameter is specified as multi-node."},"ownerAccount":{"type":"string","description":"The AWS account used to create or copy the snapshot. Required if you are restoring a snapshot you do not own, optional if you own the snapshot.","replaceOnChanges":true},"port":{"type":"integer","description":"The port number on which the cluster accepts incoming connections. The cluster is accessible only via the JDBC and ODBC connection strings"},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range (in UTC) during which automated cluster maintenance can occur."},"publiclyAccessible":{"type":"boolean","description":"If true, the cluster can be accessed from a public network."},"resourceAction":{"type":"string","description":"The Redshift operation to be performed. Resource Action supports pause-cluster, resume-cluster, failover-primary-compute APIs"},"revisionTarget":{"type":"string","description":"The identifier of the database revision. You can retrieve this value from the response to the DescribeClusterDbRevisions request."},"rotateEncryptionKey":{"type":"boolean","description":"A boolean indicating if we want to rotate Encryption Keys."},"snapshotClusterIdentifier":{"type":"string","description":"The name of the cluster the source snapshot was created from. This parameter is required if your IAM user has a policy containing a snapshot resource element that specifies anything other than * for the cluster name.","replaceOnChanges":true},"snapshotCopyGrantName":{"type":"string","description":"The name of the snapshot copy grant to use when snapshots of an AWS KMS-encrypted cluster are copied to the destination region."},"snapshotCopyManual":{"type":"boolean","description":"Indicates whether to apply the snapshot retention period to newly copied manual snapshots instead of automated snapshots."},"snapshotCopyRetentionPeriod":{"type":"integer","description":"The number of days to retain automated snapshots in the destination region after they are copied from the source region. \n\n Default is 7. \n\n Constraints: Must be at least 1 and no more than 35."},"snapshotIdentifier":{"type":"string","description":"The name of the snapshot from which to create the new cluster. This parameter isn't case sensitive.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the cluster parameter group."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of Virtual Private Cloud (VPC) security groups to be associated with the cluster."}},"type":"object","required":["clusterNamespaceArn","clusterType","dbName","deferMaintenanceIdentifier","masterPasswordSecretArn","masterUsername","nodeType"],"inputProperties":{"allowVersionUpgrade":{"type":"boolean","description":"Major version upgrades can be applied during the maintenance window to the Amazon Redshift engine that is running on the cluster. Default value is True"},"aquaConfigurationStatus":{"type":"string","description":"The value represents how the cluster is configured to use AQUA (Advanced Query Accelerator) after the cluster is restored. Possible values include the following.\n\nenabled - Use AQUA if it is available for the current Region and Amazon Redshift node type.\ndisabled - Don't use AQUA.\nauto - Amazon Redshift determines whether to use AQUA.\n"},"automatedSnapshotRetentionPeriod":{"type":"integer","description":"The number of days that automated snapshots are retained. If the value is 0, automated snapshots are disabled. Default value is 1"},"availabilityZone":{"type":"string","description":"The EC2 Availability Zone (AZ) in which you want Amazon Redshift to provision the cluster. Default: A random, system-chosen Availability Zone in the region that is specified by the endpoint"},"availabilityZoneRelocation":{"type":"boolean","description":"The option to enable relocation for an Amazon Redshift cluster between Availability Zones after the cluster modification is complete."},"availabilityZoneRelocationStatus":{"type":"string","description":"The availability zone relocation status of the cluster"},"classic":{"type":"boolean","description":"A boolean value indicating whether the resize operation is using the classic resize process. If you don't provide this parameter or set the value to false , the resize type is elastic."},"clusterIdentifier":{"type":"string","description":"A unique identifier for the cluster. You use this identifier to refer to the cluster for any subsequent cluster operations such as deleting or modifying. All alphabetical characters must be lower case, no hypens at the end, no two consecutive hyphens. Cluster name should be unique for all clusters within an AWS account"},"clusterParameterGroupName":{"type":"string","description":"The name of the parameter group to be associated with this cluster."},"clusterSecurityGroups":{"type":"array","items":{"type":"string"},"description":"A list of security groups to be associated with this cluster."},"clusterSubnetGroupName":{"type":"string","description":"The name of a cluster subnet group to be associated with this cluster."},"clusterType":{"type":"string","description":"The type of the cluster. When cluster type is specified as single-node, the NumberOfNodes parameter is not required and if multi-node, the NumberOfNodes parameter is required"},"clusterVersion":{"type":"string","description":"The version of the Amazon Redshift engine software that you want to deploy on the cluster.The version selected runs on all the nodes in the cluster."},"dbName":{"type":"string","description":"The name of the first database to be created when the cluster is created. To create additional databases after the cluster is created, connect to the cluster with a SQL client and use SQL commands to create a database."},"deferMaintenance":{"type":"boolean","description":"A boolean indicating whether to enable the deferred maintenance window."},"deferMaintenanceDuration":{"type":"integer","description":"An integer indicating the duration of the maintenance window in days. If you specify a duration, you can't specify an end time. The duration must be 60 days or less."},"deferMaintenanceEndTime":{"type":"string","description":"A timestamp indicating end time for the deferred maintenance window. If you specify an end time, you can't specify a duration."},"deferMaintenanceStartTime":{"type":"string","description":"A timestamp indicating the start time for the deferred maintenance window."},"destinationRegion":{"type":"string","description":"The destination AWS Region that you want to copy snapshots to. Constraints: Must be the name of a valid AWS Region. For more information, see Regions and Endpoints in the Amazon Web Services [https://docs.aws.amazon.com/general/latest/gr/rande.html#redshift_region] General Reference"},"elasticIp":{"type":"string","description":"The Elastic IP (EIP) address for the cluster."},"encrypted":{"type":"boolean","description":"If true, the data in the cluster is encrypted at rest."},"endpoint":{"$ref":"#/types/aws-native:redshift:ClusterEndpoint","description":"The connection endpoint."},"enhancedVpcRouting":{"type":"boolean","description":"An option that specifies whether to create the cluster with enhanced VPC routing enabled. To create a cluster that uses enhanced VPC routing, the cluster must be in a VPC. For more information, see Enhanced VPC Routing in the Amazon Redshift Cluster Management Guide.\n\nIf this option is true , enhanced VPC routing is enabled.\n\nDefault: false"},"hsmClientCertificateIdentifier":{"type":"string","description":"Specifies the name of the HSM client certificate the Amazon Redshift cluster uses to retrieve the data encryption keys stored in an HSM"},"hsmConfigurationIdentifier":{"type":"string","description":"Specifies the name of the HSM configuration that contains the information the Amazon Redshift cluster can use to retrieve and store keys in an HSM."},"iamRoles":{"type":"array","items":{"type":"string"},"description":"A list of AWS Identity and Access Management (IAM) roles that can be used by the cluster to access other AWS services. You must supply the IAM roles in their Amazon Resource Name (ARN) format. You can supply up to 50 IAM roles in a single request"},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (KMS) key ID of the encryption key that you want to use to encrypt data in the cluster."},"loggingProperties":{"$ref":"#/types/aws-native:redshift:ClusterLoggingProperties","description":"Specifies logging information, such as queries and connection attempts, for the specified Amazon Redshift cluster."},"maintenanceTrackName":{"type":"string","description":"The name for the maintenance track that you want to assign for the cluster. This name change is asynchronous. The new track name stays in the PendingModifiedValues for the cluster until the next maintenance window. When the maintenance track changes, the cluster is switched to the latest cluster release available for the maintenance track. At this point, the maintenance track name is applied."},"manageMasterPassword":{"type":"boolean","description":"A boolean indicating if the redshift cluster's admin user credentials is managed by Redshift or not. You can't use MasterUserPassword if ManageMasterPassword is true. If ManageMasterPassword is false or not set, Amazon Redshift uses MasterUserPassword for the admin user account's password."},"manualSnapshotRetentionPeriod":{"type":"integer","description":"The number of days to retain newly copied snapshots in the destination AWS Region after they are copied from the source AWS Region. If the value is -1, the manual snapshot is retained indefinitely.\n\nThe value must be either -1 or an integer between 1 and 3,653."},"masterPasswordSecretKmsKeyId":{"type":"string","description":"The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin user credentials secret."},"masterUserPassword":{"type":"string","description":"The password associated with the master user account for the cluster that is being created. You can't use MasterUserPassword if ManageMasterPassword is true. Password must be between 8 and 64 characters in length, should have at least one uppercase letter.Must contain at least one lowercase letter.Must contain one number.Can be any printable ASCII character."},"masterUsername":{"type":"string","description":"The user name associated with the master user account for the cluster that is being created. The user name can't be PUBLIC and first character must be a letter."},"multiAz":{"type":"boolean","description":"A boolean indicating if the redshift cluster is multi-az or not. If you don't provide this parameter or set the value to false, the redshift cluster will be single-az."},"namespaceResourcePolicy":{"$ref":"pulumi.json#/Any","description":"The namespace resource policy document that will be attached to a Redshift cluster.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Redshift::Cluster` for more information about the expected schema for this property."},"nodeType":{"type":"string","description":"The node type to be provisioned for the cluster.Valid Values: ds2.xlarge | ds2.8xlarge | dc1.large | dc1.8xlarge | dc2.large | dc2.8xlarge | ra3.large | ra3.4xlarge | ra3.16xlarge"},"numberOfNodes":{"type":"integer","description":"The number of compute nodes in the cluster. This parameter is required when the ClusterType parameter is specified as multi-node."},"ownerAccount":{"type":"string","description":"The AWS account used to create or copy the snapshot. Required if you are restoring a snapshot you do not own, optional if you own the snapshot."},"port":{"type":"integer","description":"The port number on which the cluster accepts incoming connections. The cluster is accessible only via the JDBC and ODBC connection strings"},"preferredMaintenanceWindow":{"type":"string","description":"The weekly time range (in UTC) during which automated cluster maintenance can occur."},"publiclyAccessible":{"type":"boolean","description":"If true, the cluster can be accessed from a public network."},"resourceAction":{"type":"string","description":"The Redshift operation to be performed. Resource Action supports pause-cluster, resume-cluster, failover-primary-compute APIs"},"revisionTarget":{"type":"string","description":"The identifier of the database revision. You can retrieve this value from the response to the DescribeClusterDbRevisions request."},"rotateEncryptionKey":{"type":"boolean","description":"A boolean indicating if we want to rotate Encryption Keys."},"snapshotClusterIdentifier":{"type":"string","description":"The name of the cluster the source snapshot was created from. This parameter is required if your IAM user has a policy containing a snapshot resource element that specifies anything other than * for the cluster name."},"snapshotCopyGrantName":{"type":"string","description":"The name of the snapshot copy grant to use when snapshots of an AWS KMS-encrypted cluster are copied to the destination region."},"snapshotCopyManual":{"type":"boolean","description":"Indicates whether to apply the snapshot retention period to newly copied manual snapshots instead of automated snapshots."},"snapshotCopyRetentionPeriod":{"type":"integer","description":"The number of days to retain automated snapshots in the destination region after they are copied from the source region. \n\n Default is 7. \n\n Constraints: Must be at least 1 and no more than 35."},"snapshotIdentifier":{"type":"string","description":"The name of the snapshot from which to create the new cluster. This parameter isn't case sensitive."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the cluster parameter group."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of Virtual Private Cloud (VPC) security groups to be associated with the cluster."}},"requiredInputs":["clusterType","dbName","masterUsername","nodeType"]},"aws-native:redshift:ClusterParameterGroup":{"description":"Resource Type definition for AWS::Redshift::ClusterParameterGroup","properties":{"description":{"type":"string","description":"A description of the parameter group.","replaceOnChanges":true},"parameterGroupFamily":{"type":"string","description":"The Amazon Redshift engine version to which the cluster parameter group applies. The cluster engine version determines the set of parameters.","replaceOnChanges":true},"parameterGroupName":{"type":"string","description":"The name of the cluster parameter group.","replaceOnChanges":true},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:redshift:ClusterParameterGroupParameter"},"description":"An array of parameters to be modified. A maximum of 20 parameters can be modified in a single request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["description","parameterGroupFamily"],"inputProperties":{"description":{"type":"string","description":"A description of the parameter group."},"parameterGroupFamily":{"type":"string","description":"The Amazon Redshift engine version to which the cluster parameter group applies. The cluster engine version determines the set of parameters."},"parameterGroupName":{"type":"string","description":"The name of the cluster parameter group."},"parameters":{"type":"array","items":{"$ref":"#/types/aws-native:redshift:ClusterParameterGroupParameter"},"description":"An array of parameters to be modified. A maximum of 20 parameters can be modified in a single request."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["description","parameterGroupFamily"]},"aws-native:redshift:ClusterSubnetGroup":{"description":"Resource Type definition for AWS::Redshift::ClusterSubnetGroup. Specifies an Amazon Redshift subnet group.","properties":{"clusterSubnetGroupName":{"type":"string","description":"This name must be unique for all subnet groups that are created by your AWS account. If costumer do not provide it, cloudformation will generate it. Must not be \"Default\". "},"description":{"type":"string","description":"The description of the parameter group."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of VPC subnet IDs"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the cluster parameter group."}},"type":"object","required":["clusterSubnetGroupName","description","subnetIds"],"inputProperties":{"description":{"type":"string","description":"The description of the parameter group."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The list of VPC subnet IDs"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the cluster parameter group."}},"requiredInputs":["description","subnetIds"]},"aws-native:redshift:EndpointAccess":{"description":"Resource schema for a Redshift-managed VPC endpoint.","properties":{"address":{"type":"string","description":"The DNS address of the endpoint."},"clusterIdentifier":{"type":"string","description":"A unique identifier for the cluster. You use this identifier to refer to the cluster for any subsequent cluster operations such as deleting or modifying. All alphabetical characters must be lower case, no hypens at the end, no two consecutive hyphens. Cluster name should be unique for all clusters within an AWS account","replaceOnChanges":true},"endpointCreateTime":{"type":"string","description":"The time (UTC) that the endpoint was created."},"endpointName":{"type":"string","description":"The name of the endpoint.","replaceOnChanges":true},"endpointStatus":{"type":"string","description":"The status of the endpoint."},"port":{"type":"integer","description":"The port number on which the cluster accepts incoming connections."},"resourceOwner":{"type":"string","description":"The AWS account ID of the owner of the cluster.","replaceOnChanges":true},"subnetGroupName":{"type":"string","description":"The subnet group name where Amazon Redshift chooses to deploy the endpoint.","replaceOnChanges":true},"vpcEndpoint":{"$ref":"#/types/aws-native:redshift:VpcEndpointProperties","description":"The connection endpoint for connecting to an Amazon Redshift cluster through the proxy."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of vpc security group ids to apply to the created endpoint access."},"vpcSecurityGroups":{"type":"array","items":{"$ref":"#/types/aws-native:redshift:EndpointAccessVpcSecurityGroup"},"description":"A list of Virtual Private Cloud (VPC) security groups to be associated with the endpoint."}},"type":"object","required":["address","clusterIdentifier","endpointCreateTime","endpointName","endpointStatus","port","subnetGroupName","vpcEndpoint","vpcSecurityGroupIds","vpcSecurityGroups"],"inputProperties":{"clusterIdentifier":{"type":"string","description":"A unique identifier for the cluster. You use this identifier to refer to the cluster for any subsequent cluster operations such as deleting or modifying. All alphabetical characters must be lower case, no hypens at the end, no two consecutive hyphens. Cluster name should be unique for all clusters within an AWS account"},"endpointName":{"type":"string","description":"The name of the endpoint."},"resourceOwner":{"type":"string","description":"The AWS account ID of the owner of the cluster."},"subnetGroupName":{"type":"string","description":"The subnet group name where Amazon Redshift chooses to deploy the endpoint."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of vpc security group ids to apply to the created endpoint access."}},"requiredInputs":["clusterIdentifier","endpointName","subnetGroupName","vpcSecurityGroupIds"]},"aws-native:redshift:EndpointAuthorization":{"description":"Describes an endpoint authorization for authorizing Redshift-managed VPC endpoint access to a cluster across AWS accounts.","properties":{"account":{"type":"string","description":"The target AWS account ID to grant or revoke access for.","replaceOnChanges":true},"allowedAllVpcs":{"type":"boolean","description":"Indicates whether all VPCs in the grantee account are allowed access to the cluster."},"allowedVpcs":{"type":"array","items":{"type":"string"},"description":"The VPCs allowed access to the cluster."},"authorizeTime":{"type":"string","description":"The time (UTC) when the authorization was created."},"clusterIdentifier":{"type":"string","description":"The cluster identifier.","replaceOnChanges":true},"clusterStatus":{"type":"string","description":"The status of the cluster."},"endpointCount":{"type":"integer","description":"The number of Redshift-managed VPC endpoints created for the authorization."},"force":{"type":"boolean","description":" Indicates whether to force the revoke action. If true, the Redshift-managed VPC endpoints associated with the endpoint authorization are also deleted."},"grantee":{"type":"string","description":"The AWS account ID of the grantee of the cluster."},"grantor":{"type":"string","description":"The AWS account ID of the cluster owner."},"status":{"type":"string","description":"The status of the authorization action."},"vpcIds":{"type":"array","items":{"type":"string"},"description":"The virtual private cloud (VPC) identifiers to grant or revoke access to."}},"type":"object","required":["account","allowedAllVpcs","allowedVpcs","authorizeTime","clusterIdentifier","clusterStatus","endpointCount","grantee","grantor","status"],"inputProperties":{"account":{"type":"string","description":"The target AWS account ID to grant or revoke access for."},"clusterIdentifier":{"type":"string","description":"The cluster identifier."},"force":{"type":"boolean","description":" Indicates whether to force the revoke action. If true, the Redshift-managed VPC endpoints associated with the endpoint authorization are also deleted."},"vpcIds":{"type":"array","items":{"type":"string"},"description":"The virtual private cloud (VPC) identifiers to grant or revoke access to."}},"requiredInputs":["account","clusterIdentifier"]},"aws-native:redshift:EventSubscription":{"description":"The `AWS::Redshift::EventSubscription` resource creates an Amazon Redshift Event Subscription.","properties":{"custSubscriptionId":{"type":"string","description":"The name of the Amazon Redshift event notification subscription."},"customerAwsId":{"type":"string","description":"The AWS account associated with the Amazon Redshift event notification subscription."},"enabled":{"type":"boolean","description":"A boolean value; set to true to activate the subscription, and set to false to create the subscription but not activate it."},"eventCategories":{"type":"array","items":{"$ref":"#/types/aws-native:redshift:EventSubscriptionEventCategoriesItem"},"description":"Specifies the Amazon Redshift event categories to be published by the event notification subscription."},"eventCategoriesList":{"type":"array","items":{"type":"string"},"description":"The list of Amazon Redshift event categories specified in the event notification subscription."},"severity":{"$ref":"#/types/aws-native:redshift:EventSubscriptionSeverity","description":"Specifies the Amazon Redshift event severity to be published by the event notification subscription."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon SNS topic used to transmit the event notifications."},"sourceIds":{"type":"array","items":{"type":"string"},"description":"A list of one or more identifiers of Amazon Redshift source objects."},"sourceIdsList":{"type":"array","items":{"type":"string"},"description":"A list of the sources that publish events to the Amazon Redshift event notification subscription."},"sourceType":{"$ref":"#/types/aws-native:redshift:EventSubscriptionSourceType","description":"The type of source that will be generating the events."},"status":{"$ref":"#/types/aws-native:redshift:EventSubscriptionStatus","description":"The status of the Amazon Redshift event notification subscription."},"subscriptionCreationTime":{"type":"string","description":"The date and time the Amazon Redshift event notification subscription was created."},"subscriptionName":{"type":"string","description":"The name of the Amazon Redshift event notification subscription","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["custSubscriptionId","customerAwsId","eventCategoriesList","sourceIdsList","status","subscriptionCreationTime","subscriptionName"],"inputProperties":{"enabled":{"type":"boolean","description":"A boolean value; set to true to activate the subscription, and set to false to create the subscription but not activate it."},"eventCategories":{"type":"array","items":{"$ref":"#/types/aws-native:redshift:EventSubscriptionEventCategoriesItem"},"description":"Specifies the Amazon Redshift event categories to be published by the event notification subscription."},"severity":{"$ref":"#/types/aws-native:redshift:EventSubscriptionSeverity","description":"Specifies the Amazon Redshift event severity to be published by the event notification subscription."},"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon SNS topic used to transmit the event notifications."},"sourceIds":{"type":"array","items":{"type":"string"},"description":"A list of one or more identifiers of Amazon Redshift source objects."},"sourceType":{"$ref":"#/types/aws-native:redshift:EventSubscriptionSourceType","description":"The type of source that will be generating the events."},"subscriptionName":{"type":"string","description":"The name of the Amazon Redshift event notification subscription"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:redshift:Integration":{"description":"Integration from a source AWS service to a Redshift cluster","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The encryption context for the integration. For more information, see [Encryption context](https://docs.aws.amazon.com/) in the *AWS Key Management Service Developer Guide* .","replaceOnChanges":true},"createTime":{"type":"string","description":"The time (UTC) when the integration was created."},"integrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the integration."},"integrationName":{"type":"string","description":"The name of the integration."},"kmsKeyId":{"type":"string","description":"An KMS key identifier for the key to use to encrypt the integration. If you don't specify an encryption key, the default AWS owned KMS key is used.","replaceOnChanges":true},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database to use as the source for replication","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Redshift data warehouse to use as the target for replication","replaceOnChanges":true}},"type":"object","required":["createTime","integrationArn","sourceArn","targetArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The encryption context for the integration. For more information, see [Encryption context](https://docs.aws.amazon.com/) in the *AWS Key Management Service Developer Guide* ."},"integrationName":{"type":"string","description":"The name of the integration."},"kmsKeyId":{"type":"string","description":"An KMS key identifier for the key to use to encrypt the integration. If you don't specify an encryption key, the default AWS owned KMS key is used."},"sourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the database to use as the source for replication"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Redshift data warehouse to use as the target for replication"}},"requiredInputs":["sourceArn","targetArn"]},"aws-native:redshift:ScheduledAction":{"description":"The `AWS::Redshift::ScheduledAction` resource creates an Amazon Redshift Scheduled Action.","properties":{"enable":{"type":"boolean","description":"If true, the schedule is enabled. If false, the scheduled action does not trigger."},"endTime":{"type":"string","description":"The end time in UTC of the scheduled action. After this time, the scheduled action does not trigger."},"iamRole":{"type":"string","description":"The IAM role to assume to run the target action."},"nextInvocations":{"type":"array","items":{"type":"string"},"description":"List of times when the scheduled action will run."},"schedule":{"type":"string","description":"The schedule in `at( )` or `cron( )` format."},"scheduledActionDescription":{"type":"string","description":"The description of the scheduled action."},"scheduledActionName":{"type":"string","description":"The name of the scheduled action. The name must be unique within an account.","replaceOnChanges":true},"startTime":{"type":"string","description":"The start time in UTC of the scheduled action. Before this time, the scheduled action does not trigger."},"state":{"$ref":"#/types/aws-native:redshift:ScheduledActionState","description":"The state of the scheduled action."},"targetAction":{"$ref":"#/types/aws-native:redshift:ScheduledActionType","description":"A JSON format string of the Amazon Redshift API operation with input parameters."}},"type":"object","required":["nextInvocations","scheduledActionName","state"],"inputProperties":{"enable":{"type":"boolean","description":"If true, the schedule is enabled. If false, the scheduled action does not trigger."},"endTime":{"type":"string","description":"The end time in UTC of the scheduled action. After this time, the scheduled action does not trigger."},"iamRole":{"type":"string","description":"The IAM role to assume to run the target action."},"schedule":{"type":"string","description":"The schedule in `at( )` or `cron( )` format."},"scheduledActionDescription":{"type":"string","description":"The description of the scheduled action."},"scheduledActionName":{"type":"string","description":"The name of the scheduled action. The name must be unique within an account."},"startTime":{"type":"string","description":"The start time in UTC of the scheduled action. Before this time, the scheduled action does not trigger."},"targetAction":{"$ref":"#/types/aws-native:redshift:ScheduledActionType","description":"A JSON format string of the Amazon Redshift API operation with input parameters."}}},"aws-native:redshiftserverless:Namespace":{"description":"Definition of AWS::RedshiftServerless::Namespace Resource Type","properties":{"adminPasswordSecretKmsKeyId":{"type":"string","description":"The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true."},"adminUserPassword":{"type":"string","description":"The password associated with the admin user for the namespace that is being created. Password must be at least 8 characters in length, should be any printable ASCII character. Must contain at least one lowercase letter, one uppercase letter and one decimal digit. You can't use adminUserPassword if manageAdminPassword is true."},"adminUsername":{"type":"string","description":"The user name associated with the admin user for the namespace that is being created. Only alphanumeric characters and underscores are allowed. It should start with an alphabet."},"dbName":{"type":"string","description":"The database name associated for the namespace that is being created. Only alphanumeric characters and underscores are allowed. It should start with an alphabet."},"defaultIamRoleArn":{"type":"string","description":"The default IAM role ARN for the namespace that is being created."},"finalSnapshotName":{"type":"string","description":"The name of the namespace the source snapshot was created from. Please specify the name if needed before deleting namespace"},"finalSnapshotRetentionPeriod":{"type":"integer","description":"The number of days to retain automated snapshot in the destination region after they are copied from the source region. If the value is -1, the manual snapshot is retained indefinitely. The value must be either -1 or an integer between 1 and 3,653."},"iamRoles":{"type":"array","items":{"type":"string"},"description":"A list of AWS Identity and Access Management (IAM) roles that can be used by the namespace to access other AWS services. You must supply the IAM roles in their Amazon Resource Name (ARN) format. The Default role limit for each request is 10."},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (KMS) key ID of the encryption key that you want to use to encrypt data in the namespace."},"logExports":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceLogExport"},"description":"The collection of log types to be exported provided by the customer. Should only be one of the three supported log types: userlog, useractivitylog and connectionlog"},"manageAdminPassword":{"type":"boolean","description":"If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password."},"namespace":{"$ref":"#/types/aws-native:redshiftserverless:Namespace","description":"Definition of Namespace resource.","language":{"csharp":{"name":"NamespaceValue"}}},"namespaceName":{"type":"string","description":"A unique identifier for the namespace. You use this identifier to refer to the namespace for any subsequent namespace operations such as deleting or modifying. All alphabetical characters must be lower case. Namespace name should be unique for all namespaces within an AWS account.","replaceOnChanges":true},"namespaceResourcePolicy":{"$ref":"pulumi.json#/Any","description":"The resource policy document that will be attached to the namespace.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RedshiftServerless::Namespace` for more information about the expected schema for this property."},"redshiftIdcApplicationArn":{"type":"string","description":"The ARN for the Redshift application that integrates with IAM Identity Center."},"snapshotCopyConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceSnapshotCopyConfiguration"},"description":"The snapshot copy configurations for the namespace."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the namespace."}},"type":"object","required":["namespace","namespaceName"],"inputProperties":{"adminPasswordSecretKmsKeyId":{"type":"string","description":"The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true."},"adminUserPassword":{"type":"string","description":"The password associated with the admin user for the namespace that is being created. Password must be at least 8 characters in length, should be any printable ASCII character. Must contain at least one lowercase letter, one uppercase letter and one decimal digit. You can't use adminUserPassword if manageAdminPassword is true."},"adminUsername":{"type":"string","description":"The user name associated with the admin user for the namespace that is being created. Only alphanumeric characters and underscores are allowed. It should start with an alphabet."},"dbName":{"type":"string","description":"The database name associated for the namespace that is being created. Only alphanumeric characters and underscores are allowed. It should start with an alphabet."},"defaultIamRoleArn":{"type":"string","description":"The default IAM role ARN for the namespace that is being created."},"finalSnapshotName":{"type":"string","description":"The name of the namespace the source snapshot was created from. Please specify the name if needed before deleting namespace"},"finalSnapshotRetentionPeriod":{"type":"integer","description":"The number of days to retain automated snapshot in the destination region after they are copied from the source region. If the value is -1, the manual snapshot is retained indefinitely. The value must be either -1 or an integer between 1 and 3,653."},"iamRoles":{"type":"array","items":{"type":"string"},"description":"A list of AWS Identity and Access Management (IAM) roles that can be used by the namespace to access other AWS services. You must supply the IAM roles in their Amazon Resource Name (ARN) format. The Default role limit for each request is 10."},"kmsKeyId":{"type":"string","description":"The AWS Key Management Service (KMS) key ID of the encryption key that you want to use to encrypt data in the namespace."},"logExports":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceLogExport"},"description":"The collection of log types to be exported provided by the customer. Should only be one of the three supported log types: userlog, useractivitylog and connectionlog"},"manageAdminPassword":{"type":"boolean","description":"If true, Amazon Redshift uses AWS Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password."},"namespaceName":{"type":"string","description":"A unique identifier for the namespace. You use this identifier to refer to the namespace for any subsequent namespace operations such as deleting or modifying. All alphabetical characters must be lower case. Namespace name should be unique for all namespaces within an AWS account."},"namespaceResourcePolicy":{"$ref":"pulumi.json#/Any","description":"The resource policy document that will be attached to the namespace.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RedshiftServerless::Namespace` for more information about the expected schema for this property."},"redshiftIdcApplicationArn":{"type":"string","description":"The ARN for the Redshift application that integrates with IAM Identity Center."},"snapshotCopyConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceSnapshotCopyConfiguration"},"description":"The snapshot copy configurations for the namespace."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags for the namespace."}}},"aws-native:redshiftserverless:Snapshot":{"description":"Resource Type definition for AWS::RedshiftServerless::Snapshot Resource Type.","properties":{"namespaceName":{"type":"string","description":"The namespace the snapshot is associated with.","replaceOnChanges":true},"ownerAccount":{"type":"string","description":"The owner account of the snapshot."},"retentionPeriod":{"type":"integer","description":"The retention period of the snapshot."},"snapshot":{"$ref":"#/types/aws-native:redshiftserverless:Snapshot","description":"Definition for snapshot resource","language":{"csharp":{"name":"SnapshotValue"}}},"snapshotName":{"type":"string","description":"The name of the snapshot.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["ownerAccount","snapshot","snapshotName"],"inputProperties":{"namespaceName":{"type":"string","description":"The namespace the snapshot is associated with."},"retentionPeriod":{"type":"integer","description":"The retention period of the snapshot."},"snapshotName":{"type":"string","description":"The name of the snapshot."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:redshiftserverless:Workgroup":{"description":"Definition of AWS::RedshiftServerless::Workgroup Resource Type","properties":{"baseCapacity":{"type":"integer","description":"The base compute capacity of the workgroup in Redshift Processing Units (RPUs)."},"configParameters":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupConfigParameter"},"description":"A list of parameters to set for finer control over a database. Available options are datestyle, enable_user_activity_logging, query_group, search_path, max_query_execution_time, and require_ssl."},"enhancedVpcRouting":{"type":"boolean","description":"The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC."},"maxCapacity":{"type":"integer","description":"The max compute capacity of the workgroup in Redshift Processing Units (RPUs)."},"namespaceName":{"type":"string","description":"The namespace the workgroup is associated with.","replaceOnChanges":true},"port":{"type":"integer","description":"The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."},"pricePerformanceTarget":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget","description":"A property that represents the price performance target settings for the workgroup."},"publiclyAccessible":{"type":"boolean","description":"A value that specifies whether the workgroup can be accessible from a public network."},"recoveryPointId":{"type":"string","description":"The recovery point id to restore from."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs to associate with the workgroup."},"snapshotArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the snapshot to restore from."},"snapshotName":{"type":"string","description":"The snapshot name to restore from."},"snapshotOwnerAccount":{"type":"string","description":"The Amazon Web Services account that owns the snapshot."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs the workgroup is associated with."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The map of the key-value pairs used to tag the workgroup."},"trackName":{"type":"string","description":"An optional parameter for the name of the track for the workgroup. If you don't provide a track name, the workgroup is assigned to the current track."},"workgroup":{"$ref":"#/types/aws-native:redshiftserverless:Workgroup","description":"Definition for workgroup resource","language":{"csharp":{"name":"WorkgroupValue"}}},"workgroupName":{"type":"string","description":"The name of the workgroup.","replaceOnChanges":true}},"type":"object","required":["workgroupName"],"inputProperties":{"baseCapacity":{"type":"integer","description":"The base compute capacity of the workgroup in Redshift Processing Units (RPUs)."},"configParameters":{"type":"array","items":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupConfigParameter"},"description":"A list of parameters to set for finer control over a database. Available options are datestyle, enable_user_activity_logging, query_group, search_path, max_query_execution_time, and require_ssl."},"enhancedVpcRouting":{"type":"boolean","description":"The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC."},"maxCapacity":{"type":"integer","description":"The max compute capacity of the workgroup in Redshift Processing Units (RPUs)."},"namespaceName":{"type":"string","description":"The namespace the workgroup is associated with."},"port":{"type":"integer","description":"The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439."},"pricePerformanceTarget":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget","description":"A property that represents the price performance target settings for the workgroup."},"publiclyAccessible":{"type":"boolean","description":"A value that specifies whether the workgroup can be accessible from a public network."},"recoveryPointId":{"type":"string","description":"The recovery point id to restore from."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of security group IDs to associate with the workgroup."},"snapshotArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the snapshot to restore from."},"snapshotName":{"type":"string","description":"The snapshot name to restore from."},"snapshotOwnerAccount":{"type":"string","description":"The Amazon Web Services account that owns the snapshot."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"A list of subnet IDs the workgroup is associated with."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The map of the key-value pairs used to tag the workgroup."},"trackName":{"type":"string","description":"An optional parameter for the name of the track for the workgroup. If you don't provide a track name, the workgroup is assigned to the current track."},"workgroup":{"$ref":"#/types/aws-native:redshiftserverless:Workgroup","description":"Definition for workgroup resource","language":{"csharp":{"name":"WorkgroupValue"}}},"workgroupName":{"type":"string","description":"The name of the workgroup."}}},"aws-native:refactorspaces:Application":{"description":"Definition of AWS::RefactorSpaces::Application Resource Type","properties":{"apiGatewayId":{"type":"string","description":"The resource ID of the ABP for the proxy."},"apiGatewayProxy":{"$ref":"#/types/aws-native:refactorspaces:ApplicationApiGatewayProxyInput","description":"The endpoint URL of the Amazon API Gateway proxy.","replaceOnChanges":true},"applicationIdentifier":{"type":"string","description":"The unique identifier of the application."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the application."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the application.","replaceOnChanges":true},"nlbArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Network Load Balancer ."},"nlbName":{"type":"string","description":"The name of the Network Load Balancer configured by the API Gateway proxy."},"proxyType":{"$ref":"#/types/aws-native:refactorspaces:ApplicationProxyType","description":"The proxy type of the proxy created within the application.","replaceOnChanges":true},"proxyUrl":{"type":"string","description":"The endpoint URL of the ABPlong proxy."},"stageName":{"type":"string","description":"The name of the ABP stage. The name defaults to `prod` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"vpcId":{"type":"string","description":"The ID of the virtual private cloud (VPC).","replaceOnChanges":true},"vpcLinkId":{"type":"string","description":"The `VpcLink` ID of the ABP proxy."}},"type":"object","required":["apiGatewayId","applicationIdentifier","arn","environmentIdentifier","name","nlbArn","nlbName","proxyType","proxyUrl","stageName","vpcId","vpcLinkId"],"inputProperties":{"apiGatewayProxy":{"$ref":"#/types/aws-native:refactorspaces:ApplicationApiGatewayProxyInput","description":"The endpoint URL of the Amazon API Gateway proxy."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."},"name":{"type":"string","description":"The name of the application."},"proxyType":{"$ref":"#/types/aws-native:refactorspaces:ApplicationProxyType","description":"The proxy type of the proxy created within the application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"vpcId":{"type":"string","description":"The ID of the virtual private cloud (VPC)."}},"requiredInputs":["environmentIdentifier","proxyType","vpcId"]},"aws-native:refactorspaces:Environment":{"description":"Definition of AWS::RefactorSpaces::Environment Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the environment."},"description":{"type":"string","description":"A description of the environment.","replaceOnChanges":true},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."},"name":{"type":"string","description":"The name of the environment.","replaceOnChanges":true},"networkFabricType":{"$ref":"#/types/aws-native:refactorspaces:EnvironmentNetworkFabricType","description":"The network fabric type of the environment.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"transitGatewayId":{"type":"string","description":"The ID of the AWS Transit Gateway set up by the environment."}},"type":"object","required":["arn","environmentIdentifier","transitGatewayId"],"inputProperties":{"description":{"type":"string","description":"A description of the environment."},"name":{"type":"string","description":"The name of the environment."},"networkFabricType":{"$ref":"#/types/aws-native:refactorspaces:EnvironmentNetworkFabricType","description":"The network fabric type of the environment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."}}},"aws-native:refactorspaces:Route":{"description":"Definition of AWS::RefactorSpaces::Route Resource Type","properties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the route."},"defaultRoute":{"$ref":"#/types/aws-native:refactorspaces:RouteDefaultRouteInput","description":"Configuration for the default route type."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment.","replaceOnChanges":true},"pathResourceToId":{"type":"string","description":"A mapping of ABPlong path resources to resource IDs."},"routeIdentifier":{"type":"string","description":"The unique identifier of the route."},"routeType":{"$ref":"#/types/aws-native:refactorspaces:RouteType","description":"The route type of the route.","replaceOnChanges":true},"serviceIdentifier":{"type":"string","description":"The unique identifier of the service.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"uriPathRoute":{"$ref":"#/types/aws-native:refactorspaces:RouteUriPathRouteInput","description":"The configuration for the URI path route type."}},"type":"object","required":["applicationIdentifier","arn","environmentIdentifier","pathResourceToId","routeIdentifier","routeType","serviceIdentifier"],"inputProperties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application."},"defaultRoute":{"$ref":"#/types/aws-native:refactorspaces:RouteDefaultRouteInput","description":"Configuration for the default route type."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."},"routeType":{"$ref":"#/types/aws-native:refactorspaces:RouteType","description":"The route type of the route."},"serviceIdentifier":{"type":"string","description":"The unique identifier of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"uriPathRoute":{"$ref":"#/types/aws-native:refactorspaces:RouteUriPathRouteInput","description":"The configuration for the URI path route type."}},"requiredInputs":["applicationIdentifier","environmentIdentifier","routeType","serviceIdentifier"]},"aws-native:refactorspaces:Service":{"description":"Definition of AWS::RefactorSpaces::Service Resource Type","properties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."},"description":{"type":"string","description":"A description of the service.","replaceOnChanges":true},"endpointType":{"$ref":"#/types/aws-native:refactorspaces:ServiceEndpointType","description":"The endpoint type of the service.","replaceOnChanges":true},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment.","replaceOnChanges":true},"lambdaEndpoint":{"$ref":"#/types/aws-native:refactorspaces:ServiceLambdaEndpointInput","description":"A summary of the configuration for the AWS Lambda endpoint type.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the service.","replaceOnChanges":true},"serviceIdentifier":{"type":"string","description":"The unique identifier of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"urlEndpoint":{"$ref":"#/types/aws-native:refactorspaces:ServiceUrlEndpointInput","description":"The summary of the configuration for the URL endpoint type.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the virtual private cloud (VPC).","replaceOnChanges":true}},"type":"object","required":["applicationIdentifier","arn","endpointType","environmentIdentifier","name","serviceIdentifier"],"inputProperties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application."},"description":{"type":"string","description":"A description of the service."},"endpointType":{"$ref":"#/types/aws-native:refactorspaces:ServiceEndpointType","description":"The endpoint type of the service."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."},"lambdaEndpoint":{"$ref":"#/types/aws-native:refactorspaces:ServiceLambdaEndpointInput","description":"A summary of the configuration for the AWS Lambda endpoint type."},"name":{"type":"string","description":"The name of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair."},"urlEndpoint":{"$ref":"#/types/aws-native:refactorspaces:ServiceUrlEndpointInput","description":"The summary of the configuration for the URL endpoint type."},"vpcId":{"type":"string","description":"The ID of the virtual private cloud (VPC)."}},"requiredInputs":["applicationIdentifier","endpointType","environmentIdentifier"]},"aws-native:rekognition:Collection":{"description":"The AWS::Rekognition::Collection type creates an Amazon Rekognition Collection. A collection is a logical grouping of information about detected faces which can later be referenced for searches on the group","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name of the collection."},"collectionId":{"type":"string","description":"ID for the collection that you are creating.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","collectionId"],"inputProperties":{"collectionId":{"type":"string","description":"ID for the collection that you are creating."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["collectionId"]},"aws-native:rekognition:Project":{"description":"The AWS::Rekognition::Project type creates an Amazon Rekognition CustomLabels Project. A project is a grouping of the resources needed to create and manage Dataset and ProjectVersions.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name of the project."},"projectName":{"type":"string","description":"The name of the project to create.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","projectName"],"inputProperties":{"projectName":{"type":"string","description":"The name of the project to create."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:rekognition:StreamProcessor":{"description":"The AWS::Rekognition::StreamProcessor type is used to create an Amazon Rekognition StreamProcessor that you can use to analyze streaming videos.\n\n","properties":{"arn":{"type":"string","description":"Amazon Resource Name for the newly created stream processor."},"boundingBoxRegionsOfInterest":{"type":"array","items":{"$ref":"#/types/aws-native:rekognition:StreamProcessorBoundingBox"},"description":"The BoundingBoxRegionsOfInterest specifies an array of bounding boxes of interest in the video frames to analyze, as part of connected home feature. If an object is partially in a region of interest, Rekognition will tag it as detected if the overlap of the object with the region-of-interest is greater than 20%.","replaceOnChanges":true},"connectedHomeSettings":{"$ref":"#/types/aws-native:rekognition:StreamProcessorConnectedHomeSettings","description":"Connected home settings to use on a streaming video. You can use a stream processor for connected home features and select what you want the stream processor to detect, such as people or pets. When the stream processor has started, one notification is sent for each object class specified. For more information, see the ConnectedHome section of [StreamProcessorSettings](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorSettings) .","replaceOnChanges":true},"dataSharingPreference":{"$ref":"#/types/aws-native:rekognition:StreamProcessorDataSharingPreference","description":"Allows you to opt in or opt out to share data with Rekognition to improve model performance. You can choose this option at the account level or on a per-stream basis. Note that if you opt out at the account level this setting is ignored on individual streams. For more information, see [StreamProcessorDataSharingPreference](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorDataSharingPreference) .","replaceOnChanges":true},"faceSearchSettings":{"$ref":"#/types/aws-native:rekognition:StreamProcessorFaceSearchSettings","description":"The input parameters used to recognize faces in a streaming video analyzed by an Amazon Rekognition stream processor. For more information regarding the contents of the parameters, see [FaceSearchSettings](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_FaceSearchSettings) .","replaceOnChanges":true},"kinesisDataStream":{"$ref":"#/types/aws-native:rekognition:StreamProcessorKinesisDataStream","description":"Amazon Rekognition's Video Stream Processor takes a Kinesis video stream as input. This is the Amazon Kinesis Data Streams instance to which the Amazon Rekognition stream processor streams the analysis results. This must be created within the constraints specified at [KinesisDataStream](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_KinesisDataStream) .","replaceOnChanges":true},"kinesisVideoStream":{"$ref":"#/types/aws-native:rekognition:StreamProcessorKinesisVideoStream","description":"The Kinesis video stream that provides the source of the streaming video for an Amazon Rekognition Video stream processor. For more information, see [KinesisVideoStream](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_KinesisVideoStream) .","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The KMS key that is used by Rekognition to encrypt any intermediate customer metadata and store in the customer's S3 bucket.","replaceOnChanges":true},"name":{"type":"string","description":"Name of the stream processor. It's an identifier you assign to the stream processor. You can use it to manage the stream processor.","replaceOnChanges":true},"notificationChannel":{"$ref":"#/types/aws-native:rekognition:StreamProcessorNotificationChannel","description":"The Amazon Simple Notification Service topic to which Amazon Rekognition publishes the object detection results and completion status of a video analysis operation. Amazon Rekognition publishes a notification the first time an object of interest or a person is detected in the video stream. Amazon Rekognition also publishes an end-of-session notification with a summary when the stream processing session is complete. For more information, see [StreamProcessorNotificationChannel](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorNotificationChannel) .","replaceOnChanges":true},"polygonRegionsOfInterest":{"type":"array","items":{"type":"array","items":{"$ref":"#/types/aws-native:rekognition:StreamProcessorPoint"}},"description":"The PolygonRegionsOfInterest specifies a set of polygon areas of interest in the video frames to analyze, as part of connected home feature. Each polygon is in turn, an ordered list of Point","replaceOnChanges":true},"roleArn":{"type":"string","description":"ARN of the IAM role that allows access to the stream processor, and provides Rekognition read permissions for KVS stream and write permissions to S3 bucket and SNS topic.","replaceOnChanges":true},"s3Destination":{"$ref":"#/types/aws-native:rekognition:StreamProcessorS3Destination","description":"The Amazon S3 bucket location to which Amazon Rekognition publishes the detailed inference results of a video analysis operation. For more information, see the S3Destination section of [StreamProcessorOutput](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorOutput) .","replaceOnChanges":true},"status":{"type":"string","description":"Current status of the stream processor."},"statusMessage":{"type":"string","description":"Detailed status message about the stream processor."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","kinesisVideoStream","roleArn","status","statusMessage"],"inputProperties":{"boundingBoxRegionsOfInterest":{"type":"array","items":{"$ref":"#/types/aws-native:rekognition:StreamProcessorBoundingBox"},"description":"The BoundingBoxRegionsOfInterest specifies an array of bounding boxes of interest in the video frames to analyze, as part of connected home feature. If an object is partially in a region of interest, Rekognition will tag it as detected if the overlap of the object with the region-of-interest is greater than 20%."},"connectedHomeSettings":{"$ref":"#/types/aws-native:rekognition:StreamProcessorConnectedHomeSettings","description":"Connected home settings to use on a streaming video. You can use a stream processor for connected home features and select what you want the stream processor to detect, such as people or pets. When the stream processor has started, one notification is sent for each object class specified. For more information, see the ConnectedHome section of [StreamProcessorSettings](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorSettings) ."},"dataSharingPreference":{"$ref":"#/types/aws-native:rekognition:StreamProcessorDataSharingPreference","description":"Allows you to opt in or opt out to share data with Rekognition to improve model performance. You can choose this option at the account level or on a per-stream basis. Note that if you opt out at the account level this setting is ignored on individual streams. For more information, see [StreamProcessorDataSharingPreference](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorDataSharingPreference) ."},"faceSearchSettings":{"$ref":"#/types/aws-native:rekognition:StreamProcessorFaceSearchSettings","description":"The input parameters used to recognize faces in a streaming video analyzed by an Amazon Rekognition stream processor. For more information regarding the contents of the parameters, see [FaceSearchSettings](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_FaceSearchSettings) ."},"kinesisDataStream":{"$ref":"#/types/aws-native:rekognition:StreamProcessorKinesisDataStream","description":"Amazon Rekognition's Video Stream Processor takes a Kinesis video stream as input. This is the Amazon Kinesis Data Streams instance to which the Amazon Rekognition stream processor streams the analysis results. This must be created within the constraints specified at [KinesisDataStream](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_KinesisDataStream) ."},"kinesisVideoStream":{"$ref":"#/types/aws-native:rekognition:StreamProcessorKinesisVideoStream","description":"The Kinesis video stream that provides the source of the streaming video for an Amazon Rekognition Video stream processor. For more information, see [KinesisVideoStream](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_KinesisVideoStream) ."},"kmsKeyId":{"type":"string","description":"The KMS key that is used by Rekognition to encrypt any intermediate customer metadata and store in the customer's S3 bucket."},"name":{"type":"string","description":"Name of the stream processor. It's an identifier you assign to the stream processor. You can use it to manage the stream processor."},"notificationChannel":{"$ref":"#/types/aws-native:rekognition:StreamProcessorNotificationChannel","description":"The Amazon Simple Notification Service topic to which Amazon Rekognition publishes the object detection results and completion status of a video analysis operation. Amazon Rekognition publishes a notification the first time an object of interest or a person is detected in the video stream. Amazon Rekognition also publishes an end-of-session notification with a summary when the stream processing session is complete. For more information, see [StreamProcessorNotificationChannel](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorNotificationChannel) ."},"polygonRegionsOfInterest":{"type":"array","items":{"type":"array","items":{"$ref":"#/types/aws-native:rekognition:StreamProcessorPoint"}},"description":"The PolygonRegionsOfInterest specifies a set of polygon areas of interest in the video frames to analyze, as part of connected home feature. Each polygon is in turn, an ordered list of Point"},"roleArn":{"type":"string","description":"ARN of the IAM role that allows access to the stream processor, and provides Rekognition read permissions for KVS stream and write permissions to S3 bucket and SNS topic."},"s3Destination":{"$ref":"#/types/aws-native:rekognition:StreamProcessorS3Destination","description":"The Amazon S3 bucket location to which Amazon Rekognition publishes the detailed inference results of a video analysis operation. For more information, see the S3Destination section of [StreamProcessorOutput](https://docs.aws.amazon.com/rekognition/latest/APIReference/API_StreamProcessorOutput) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["kinesisVideoStream","roleArn"]},"aws-native:resiliencehub:App":{"description":"Resource Type Definition for AWS::ResilienceHub::App.","properties":{"appArn":{"type":"string","description":"Amazon Resource Name (ARN) of the App."},"appAssessmentSchedule":{"$ref":"#/types/aws-native:resiliencehub:AppAssessmentSchedule","description":"Assessment execution schedule."},"appTemplateBody":{"type":"string","description":"A string containing full ResilienceHub app template body."},"description":{"type":"string","description":"App description."},"driftStatus":{"$ref":"#/types/aws-native:resiliencehub:AppDriftStatus","description":"Indicates if compliance drifts (deviations) were detected while running an assessment for your application."},"eventSubscriptions":{"type":"array","items":{"$ref":"#/types/aws-native:resiliencehub:AppEventSubscription"},"description":"The list of events you would like to subscribe and get notification for."},"name":{"type":"string","description":"Name of the app.","replaceOnChanges":true},"permissionModel":{"$ref":"#/types/aws-native:resiliencehub:AppPermissionModel","description":"Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment."},"resiliencyPolicyArn":{"type":"string","description":"Amazon Resource Name (ARN) of the Resiliency Policy."},"resourceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:resiliencehub:AppResourceMapping"},"description":"An array of ResourceMapping objects."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair."}},"type":"object","required":["appArn","appTemplateBody","driftStatus","name","resourceMappings"],"inputProperties":{"appAssessmentSchedule":{"$ref":"#/types/aws-native:resiliencehub:AppAssessmentSchedule","description":"Assessment execution schedule."},"appTemplateBody":{"type":"string","description":"A string containing full ResilienceHub app template body."},"description":{"type":"string","description":"App description."},"eventSubscriptions":{"type":"array","items":{"$ref":"#/types/aws-native:resiliencehub:AppEventSubscription"},"description":"The list of events you would like to subscribe and get notification for."},"name":{"type":"string","description":"Name of the app."},"permissionModel":{"$ref":"#/types/aws-native:resiliencehub:AppPermissionModel","description":"Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment."},"resiliencyPolicyArn":{"type":"string","description":"Amazon Resource Name (ARN) of the Resiliency Policy."},"resourceMappings":{"type":"array","items":{"$ref":"#/types/aws-native:resiliencehub:AppResourceMapping"},"description":"An array of ResourceMapping objects."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair."}},"requiredInputs":["appTemplateBody","resourceMappings"]},"aws-native:resiliencehub:ResiliencyPolicy":{"description":"Resource Type Definition for Resiliency Policy.","properties":{"dataLocationConstraint":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyDataLocationConstraint","description":"Data Location Constraint of the Policy."},"policy":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyPolicyMap","description":"The resiliency policy."},"policyArn":{"type":"string","description":"Amazon Resource Name (ARN) of the Resiliency Policy."},"policyDescription":{"type":"string","description":"Description of Resiliency Policy."},"policyName":{"type":"string","description":"Name of Resiliency Policy."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair."},"tier":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyTier","description":"Resiliency Policy Tier."}},"type":"object","required":["policy","policyArn","policyName","tier"],"inputProperties":{"dataLocationConstraint":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyDataLocationConstraint","description":"Data Location Constraint of the Policy."},"policy":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyPolicyMap","description":"The resiliency policy."},"policyDescription":{"type":"string","description":"Description of Resiliency Policy."},"policyName":{"type":"string","description":"Name of Resiliency Policy."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair."},"tier":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyTier","description":"Resiliency Policy Tier."}},"requiredInputs":["policy","tier"]},"aws-native:resourceexplorer2:DefaultViewAssociation":{"description":"Definition of AWS::ResourceExplorer2::DefaultViewAssociation Resource Type","properties":{"associatedAwsPrincipal":{"type":"string","description":"The AWS principal that the default view is associated with, used as the unique identifier for this resource."},"viewArn":{"type":"string","description":"The ARN of the view to set as the default for the AWS Region and AWS account in which you call this operation. The specified view must already exist in the specified Region."}},"type":"object","required":["associatedAwsPrincipal","viewArn"],"inputProperties":{"viewArn":{"type":"string","description":"The ARN of the view to set as the default for the AWS Region and AWS account in which you call this operation. The specified view must already exist in the specified Region."}},"requiredInputs":["viewArn"]},"aws-native:resourceexplorer2:Index":{"description":"Definition of AWS::ResourceExplorer2::Index Resource Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleIndex = new AwsNative.ResourceExplorer2.Index(\"sampleIndex\", new()\n    {\n        Type = AwsNative.ResourceExplorer2.IndexType.Aggregator,\n        Tags = \n        {\n            { \"purpose\", \"ResourceExplorer Sample Stack\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/resourceexplorer2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := resourceexplorer2.NewIndex(ctx, \"sampleIndex\", \u0026resourceexplorer2.IndexArgs{\n\t\t\tType: resourceexplorer2.IndexTypeAggregator,\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"purpose\": pulumi.String(\"ResourceExplorer Sample Stack\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleIndex = new aws_native.resourceexplorer2.Index(\"sampleIndex\", {\n    type: aws_native.resourceexplorer2.IndexType.Aggregator,\n    tags: {\n        purpose: \"ResourceExplorer Sample Stack\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_index = aws_native.resourceexplorer2.Index(\"sampleIndex\",\n    type=aws_native.resourceexplorer2.IndexType.AGGREGATOR,\n    tags={\n        \"purpose\": \"ResourceExplorer Sample Stack\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleIndex = new AwsNative.ResourceExplorer2.Index(\"sampleIndex\", new()\n    {\n        Type = AwsNative.ResourceExplorer2.IndexType.Aggregator,\n        Tags = \n        {\n            { \"purpose\", \"ResourceExplorer Sample Stack\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/resourceexplorer2\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := resourceexplorer2.NewIndex(ctx, \"sampleIndex\", \u0026resourceexplorer2.IndexArgs{\n\t\t\tType: resourceexplorer2.IndexTypeAggregator,\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"purpose\": pulumi.String(\"ResourceExplorer Sample Stack\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleIndex = new aws_native.resourceexplorer2.Index(\"sampleIndex\", {\n    type: aws_native.resourceexplorer2.IndexType.Aggregator,\n    tags: {\n        purpose: \"ResourceExplorer Sample Stack\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_index = aws_native.resourceexplorer2.Index(\"sampleIndex\",\n    type=aws_native.resourceexplorer2.IndexType.AGGREGATOR,\n    tags={\n        \"purpose\": \"ResourceExplorer Sample Stack\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The ARN of the new index for the AWS Region . For example:\n\n`arn:aws:resource-explorer-2:us-east-1:123456789012:index/EXAMPLE8-90ab-cdef-fedc-EXAMPLE22222`"},"indexState":{"$ref":"#/types/aws-native:resourceexplorer2:IndexState","description":"Indicates the current state of the index. For example:\n\n`CREATING`"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The specified tags are attached to only the index created in this AWS Region . The tags don't attach to any of the resources listed in the index."},"type":{"$ref":"#/types/aws-native:resourceexplorer2:IndexType","description":"Specifies the type of the index in this Region. For information about the aggregator index and how it differs from a local index, see [Turning on cross-Region search by creating an aggregator index](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-aggregator-region.html) in the *AWS Resource Explorer User Guide.* ."}},"type":"object","required":["arn","indexState","type"],"inputProperties":{"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The specified tags are attached to only the index created in this AWS Region . The tags don't attach to any of the resources listed in the index."},"type":{"$ref":"#/types/aws-native:resourceexplorer2:IndexType","description":"Specifies the type of the index in this Region. For information about the aggregator index and how it differs from a local index, see [Turning on cross-Region search by creating an aggregator index](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-aggregator-region.html) in the *AWS Resource Explorer User Guide.* ."}},"requiredInputs":["type"]},"aws-native:resourceexplorer2:View":{"description":"Definition of AWS::ResourceExplorer2::View Resource Type","properties":{"filters":{"$ref":"#/types/aws-native:resourceexplorer2:ViewSearchFilter","description":"An array of strings that include search keywords, prefixes, and operators that filter the results that are returned for queries made using this view. When you use this view in a [Search](https://docs.aws.amazon.com/resource-explorer/latest/apireference/API_Search.html) operation, the filter string is combined with the search's `QueryString` parameter using a logical `AND` operator.\n\nFor information about the supported syntax, see [Search query reference for Resource Explorer](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html) in the *AWS Resource Explorer User Guide* .\n\n\u003e This query string in the context of this operation supports only [filter prefixes](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-filters) with optional [operators](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-operators) . It doesn't support free-form text. For example, the string `region:us* service:ec2 -tag:stage=prod` includes all Amazon EC2 resources in any AWS Region that begin with the letters `us` and are *not* tagged with a key `Stage` that has the value `prod` ."},"includedProperties":{"type":"array","items":{"$ref":"#/types/aws-native:resourceexplorer2:ViewIncludedProperty"},"description":"A list of fields that provide additional information about the view."},"scope":{"type":"string","description":"The root ARN of the account, an organizational unit (OU), or an organization ARN. If left empty, the default is account.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tag key and value pairs that are attached to the view."},"viewArn":{"type":"string","description":"The ARN of the new view. For example:\n\n`arn:aws:resource-explorer-2:us-east-1:123456789012:view/MyView/EXAMPLE8-90ab-cdef-fedc-EXAMPLE22222`"},"viewName":{"type":"string","description":"The name of the new view.","replaceOnChanges":true}},"type":"object","required":["viewArn","viewName"],"inputProperties":{"filters":{"$ref":"#/types/aws-native:resourceexplorer2:ViewSearchFilter","description":"An array of strings that include search keywords, prefixes, and operators that filter the results that are returned for queries made using this view. When you use this view in a [Search](https://docs.aws.amazon.com/resource-explorer/latest/apireference/API_Search.html) operation, the filter string is combined with the search's `QueryString` parameter using a logical `AND` operator.\n\nFor information about the supported syntax, see [Search query reference for Resource Explorer](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html) in the *AWS Resource Explorer User Guide* .\n\n\u003e This query string in the context of this operation supports only [filter prefixes](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-filters) with optional [operators](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-operators) . It doesn't support free-form text. For example, the string `region:us* service:ec2 -tag:stage=prod` includes all Amazon EC2 resources in any AWS Region that begin with the letters `us` and are *not* tagged with a key `Stage` that has the value `prod` ."},"includedProperties":{"type":"array","items":{"$ref":"#/types/aws-native:resourceexplorer2:ViewIncludedProperty"},"description":"A list of fields that provide additional information about the view."},"scope":{"type":"string","description":"The root ARN of the account, an organizational unit (OU), or an organization ARN. If left empty, the default is account."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tag key and value pairs that are attached to the view."},"viewName":{"type":"string","description":"The name of the new view."}}},"aws-native:resourcegroups:Group":{"description":"Schema for ResourceGroups::Group","properties":{"arn":{"type":"string","description":"The Resource Group ARN."},"configuration":{"type":"array","items":{"$ref":"#/types/aws-native:resourcegroups:GroupConfigurationItem"},"description":"The service configuration currently associated with the resource group and in effect for the members of the resource group. A `Configuration` consists of one or more `ConfigurationItem` entries. For information about service configurations for resource groups and how to construct them, see [Service configurations for resource groups](https://docs.aws.amazon.com//ARG/latest/APIReference/about-slg.html) in the *Resource Groups User Guide* .\n\n\u003e You can include either a `Configuration` or a `ResourceQuery` , but not both."},"description":{"type":"string","description":"The description of the resource group"},"name":{"type":"string","description":"The name of the resource group","replaceOnChanges":true},"resourceQuery":{"$ref":"#/types/aws-native:resourcegroups:GroupResourceQuery","description":"The resource query structure that is used to dynamically determine which AWS resources are members of the associated resource group. For more information about queries and how to construct them, see [Build queries and groups in Resource Groups](https://docs.aws.amazon.com//ARG/latest/userguide/gettingstarted-query.html) in the *Resource Groups User Guide*\n\n\u003e - You can include either a `ResourceQuery` or a `Configuration` , but not both.\n\u003e - You can specify the group's membership either by using a `ResourceQuery` or by using a list of `Resources` , but not both."},"resources":{"type":"array","items":{"type":"string"},"description":"A list of the Amazon Resource Names (ARNs) of AWS resources that you want to add to the specified group.\n\n\u003e - You can specify the group membership either by using a list of `Resources` or by using a `ResourceQuery` , but not both.\n\u003e - You can include a `Resources` property only if you also specify a `Configuration` property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag key and value pairs that are attached to the resource group."}},"type":"object","required":["arn","name"],"inputProperties":{"configuration":{"type":"array","items":{"$ref":"#/types/aws-native:resourcegroups:GroupConfigurationItem"},"description":"The service configuration currently associated with the resource group and in effect for the members of the resource group. A `Configuration` consists of one or more `ConfigurationItem` entries. For information about service configurations for resource groups and how to construct them, see [Service configurations for resource groups](https://docs.aws.amazon.com//ARG/latest/APIReference/about-slg.html) in the *Resource Groups User Guide* .\n\n\u003e You can include either a `Configuration` or a `ResourceQuery` , but not both."},"description":{"type":"string","description":"The description of the resource group"},"name":{"type":"string","description":"The name of the resource group"},"resourceQuery":{"$ref":"#/types/aws-native:resourcegroups:GroupResourceQuery","description":"The resource query structure that is used to dynamically determine which AWS resources are members of the associated resource group. For more information about queries and how to construct them, see [Build queries and groups in Resource Groups](https://docs.aws.amazon.com//ARG/latest/userguide/gettingstarted-query.html) in the *Resource Groups User Guide*\n\n\u003e - You can include either a `ResourceQuery` or a `Configuration` , but not both.\n\u003e - You can specify the group's membership either by using a `ResourceQuery` or by using a list of `Resources` , but not both."},"resources":{"type":"array","items":{"type":"string"},"description":"A list of the Amazon Resource Names (ARNs) of AWS resources that you want to add to the specified group.\n\n\u003e - You can specify the group membership either by using a list of `Resources` or by using a `ResourceQuery` , but not both.\n\u003e - You can include a `Resources` property only if you also specify a `Configuration` property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tag key and value pairs that are attached to the resource group."}}},"aws-native:resourcegroups:TagSyncTask":{"description":"Schema for ResourceGroups::TagSyncTask","properties":{"group":{"type":"string","description":"The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task","replaceOnChanges":true},"groupArn":{"type":"string","description":"The Amazon resource name (ARN) of the ApplicationGroup for which the TagSyncTask is created"},"groupName":{"type":"string","description":"The Name of the application group for which the TagSyncTask is created"},"roleArn":{"type":"string","description":"The Amazon resource name (ARN) of the role assumed by the service to tag and untag resources on your behalf.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:resourcegroups:TagSyncTaskStatus","description":"The status of the TagSyncTask"},"tagKey":{"type":"string","description":"The tag key. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.","replaceOnChanges":true},"tagValue":{"type":"string","description":"The tag value. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application.","replaceOnChanges":true},"taskArn":{"type":"string","description":"The ARN of the TagSyncTask resource"}},"type":"object","required":["group","groupArn","groupName","roleArn","status","tagKey","tagValue","taskArn"],"inputProperties":{"group":{"type":"string","description":"The Amazon resource name (ARN) or name of the application group for which you want to create a tag-sync task"},"roleArn":{"type":"string","description":"The Amazon resource name (ARN) of the role assumed by the service to tag and untag resources on your behalf."},"tagKey":{"type":"string","description":"The tag key. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application."},"tagValue":{"type":"string","description":"The tag value. Resources tagged with this tag key-value pair will be added to the application. If a resource with this tag is later untagged, the tag-sync task removes the resource from the application."}},"requiredInputs":["group","roleArn","tagKey","tagValue"]},"aws-native:rolesanywhere:Crl":{"description":"Definition of AWS::RolesAnywhere::CRL Resource Type","properties":{"crlData":{"type":"string","description":"The x509 v3 specified certificate revocation list (CRL)."},"crlId":{"type":"string","description":"The unique primary identifier of the Crl"},"enabled":{"type":"boolean","description":"Specifies whether the certificate revocation list (CRL) is enabled."},"name":{"type":"string","description":"The name of the certificate revocation list (CRL)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach to the certificate revocation list (CRL)."},"trustAnchorArn":{"type":"string","description":"The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for."}},"type":"object","required":["crlData","crlId","name"],"inputProperties":{"crlData":{"type":"string","description":"The x509 v3 specified certificate revocation list (CRL)."},"enabled":{"type":"boolean","description":"Specifies whether the certificate revocation list (CRL) is enabled."},"name":{"type":"string","description":"The name of the certificate revocation list (CRL)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach to the certificate revocation list (CRL)."},"trustAnchorArn":{"type":"string","description":"The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for."}},"requiredInputs":["crlData"]},"aws-native:rolesanywhere:Profile":{"description":"Definition of AWS::RolesAnywhere::Profile Resource Type","properties":{"acceptRoleSessionName":{"type":"boolean","description":"Used to determine if a custom role session name will be accepted in a temporary credential request."},"attributeMappings":{"type":"array","items":{"$ref":"#/types/aws-native:rolesanywhere:ProfileAttributeMapping"},"description":"A mapping applied to the authenticating end-entity certificate."},"durationSeconds":{"type":"number","description":"The number of seconds vended session credentials will be valid for"},"enabled":{"type":"boolean","description":"The enabled status of the resource."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials."},"name":{"type":"string","description":"The customer specified name of the resource."},"profileArn":{"type":"string","description":"The ARN of the profile."},"profileId":{"type":"string","description":"The unique primary identifier of the Profile"},"requireInstanceProperties":{"type":"boolean","description":"Specifies whether instance properties are required in CreateSession requests with this profile.","replaceOnChanges":true},"roleArns":{"type":"array","items":{"type":"string"},"description":"A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request."},"sessionPolicy":{"type":"string","description":"A session policy that will applied to the trust boundary of the vended session credentials."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of Tags."}},"type":"object","required":["name","profileArn","profileId","roleArns"],"inputProperties":{"acceptRoleSessionName":{"type":"boolean","description":"Used to determine if a custom role session name will be accepted in a temporary credential request."},"attributeMappings":{"type":"array","items":{"$ref":"#/types/aws-native:rolesanywhere:ProfileAttributeMapping"},"description":"A mapping applied to the authenticating end-entity certificate."},"durationSeconds":{"type":"number","description":"The number of seconds vended session credentials will be valid for"},"enabled":{"type":"boolean","description":"The enabled status of the resource."},"managedPolicyArns":{"type":"array","items":{"type":"string"},"description":"A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials."},"name":{"type":"string","description":"The customer specified name of the resource."},"requireInstanceProperties":{"type":"boolean","description":"Specifies whether instance properties are required in CreateSession requests with this profile."},"roleArns":{"type":"array","items":{"type":"string"},"description":"A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request."},"sessionPolicy":{"type":"string","description":"A session policy that will applied to the trust boundary of the vended session credentials."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of Tags."}},"requiredInputs":["roleArns"]},"aws-native:rolesanywhere:TrustAnchor":{"description":"Definition of AWS::RolesAnywhere::TrustAnchor Resource Type.","properties":{"enabled":{"type":"boolean","description":"Indicates whether the trust anchor is enabled."},"name":{"type":"string","description":"The name of the trust anchor."},"notificationSettings":{"type":"array","items":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorNotificationSetting"},"description":"A list of notification settings to be associated to the trust anchor."},"source":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorSource","description":"The trust anchor type and its related certificate data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to attach to the trust anchor."},"trustAnchorArn":{"type":"string","description":"The ARN of the trust anchor."},"trustAnchorId":{"type":"string","description":"The unique identifier of the trust anchor."}},"type":"object","required":["name","source","trustAnchorArn","trustAnchorId"],"inputProperties":{"enabled":{"type":"boolean","description":"Indicates whether the trust anchor is enabled."},"name":{"type":"string","description":"The name of the trust anchor."},"notificationSettings":{"type":"array","items":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorNotificationSetting"},"description":"A list of notification settings to be associated to the trust anchor."},"source":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorSource","description":"The trust anchor type and its related certificate data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to attach to the trust anchor."}},"requiredInputs":["source"]},"aws-native:route53:CidrCollection":{"description":"Resource Type definition for AWS::Route53::CidrCollection.","properties":{"arn":{"type":"string","description":"The Amazon resource name (ARN) to uniquely identify the AWS resource."},"awsId":{"type":"string","description":"UUID of the CIDR collection."},"locations":{"type":"array","items":{"$ref":"#/types/aws-native:route53:CidrCollectionLocation"},"description":"A complex type that contains information about the list of CIDR locations."},"name":{"type":"string","description":"A unique name for the CIDR collection.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","name"],"inputProperties":{"locations":{"type":"array","items":{"$ref":"#/types/aws-native:route53:CidrCollectionLocation"},"description":"A complex type that contains information about the list of CIDR locations."},"name":{"type":"string","description":"A unique name for the CIDR collection."}}},"aws-native:route53:Dnssec":{"description":"Resource used to control (enable/disable) DNSSEC in a specific hosted zone.","properties":{"hostedZoneId":{"type":"string","description":"The unique string (ID) used to identify a hosted zone.","replaceOnChanges":true}},"type":"object","required":["hostedZoneId"],"inputProperties":{"hostedZoneId":{"type":"string","description":"The unique string (ID) used to identify a hosted zone."}},"requiredInputs":["hostedZoneId"]},"aws-native:route53:HealthCheck":{"description":"Resource schema for AWS::Route53::HealthCheck.","properties":{"healthCheckConfig":{"$ref":"#/types/aws-native:route53:HealthCheckConfigProperties","description":"A complex type that contains information about the health check."},"healthCheckId":{"type":"string","description":"The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long."},"healthCheckTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["healthCheckConfig","healthCheckId"],"inputProperties":{"healthCheckConfig":{"$ref":"#/types/aws-native:route53:HealthCheckConfigProperties","description":"A complex type that contains information about the health check."},"healthCheckTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["healthCheckConfig"]},"aws-native:route53:HostedZone":{"description":"Creates a new public or private hosted zone. You create records in a public hosted zone to define how you want to route traffic on the internet for a domain, such as example.com, and its subdomains (apex.example.com, acme.example.com). You create records in a private hosted zone to define how you want to route traffic for a domain and its subdomains within one or more Amazon Virtual Private Clouds (Amazon VPCs). \n  You can't convert a public hosted zone to a private hosted zone or vice versa. Instead, you must create a new hosted zone with the same name and create new resource record sets.\n  For more information about charges for hosted zones, see [Amazon Route 53 Pricing](https://docs.aws.amazon.com/route53/pricing/).\n Note the following:\n  +  You can't create a hosted zone for a top-level domain (TLD) such as .com.\n  +  If your domain is registered with a registrar other than Route 53, you must update the name servers with your registrar to make Route 53 the DNS service for the domain. For more information, see [Migrating DNS Service for an Existing Domain to Amazon Route 53](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/MigratingDNS.html) in the *Amazon Route 53 Developer Guide*. \n  \n When you submit a ``CreateHostedZone`` request, the initial status of the hosted zone is ``PENDING``. For public hosted zones, this means that the NS and SOA records are not yet available on all Route 53 DNS servers. When the NS and SOA records are available, the status of the zone changes to ``INSYNC``.\n The ``CreateHostedZone`` request requires the caller to have an ``ec2:DescribeVpcs`` permission.\n  When creating private hosted zones, the Amazon VPC must belong to the same partition where the hosted zone is created. A partition is a group of AWS-Regions. Each AWS-account is scoped to one partition.\n The following are the supported partitions:\n  +  ``aws`` - AWS-Regions\n  +  ``aws-cn`` - China Regions\n  +  ``aws-us-gov`` - govcloud-us-region\n  \n For more information, see [Access Management](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.","properties":{"awsId":{"type":"string","description":"The ID that Amazon Route 53 assigned to the hosted zone when you created it."},"hostedZoneConfig":{"$ref":"#/types/aws-native:route53:HostedZoneConfig","description":"A complex type that contains an optional comment.\n If you don't want to specify a comment, omit the ``HostedZoneConfig`` and ``Comment`` elements."},"hostedZoneFeatures":{"$ref":"#/types/aws-native:route53:HostedZoneFeatures","description":"The features configuration for the hosted zone, including accelerated recovery settings and status information."},"hostedZoneTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Adds, edits, or deletes tags for a health check or a hosted zone.\n For information about using tags for cost allocation, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the *User Guide*."},"name":{"type":"string","description":"The name of the domain. Specify a fully qualified domain name, for example, *www.example.com*. The trailing dot is optional; Amazon Route 53 assumes that the domain name is fully qualified. This means that Route 53 treats *www.example.com* (without a trailing dot) and *www.example.com.* (with a trailing dot) as identical.\n If you're creating a public hosted zone, this is the name you have registered with your DNS registrar. If your domain name is registered with a registrar other than Route 53, change the name servers for your domain to the set of ``NameServers`` that are returned by the ``Fn::GetAtt`` intrinsic function.","replaceOnChanges":true},"nameServers":{"type":"array","items":{"type":"string"},"description":"Returns the set of name servers for the specific hosted zone. For example: `ns1.example.com` .\n\nThis attribute is not supported for private hosted zones."},"queryLoggingConfig":{"$ref":"#/types/aws-native:route53:HostedZoneQueryLoggingConfig","description":"Creates a configuration for DNS query logging. After you create a query logging configuration, Amazon Route 53 begins to publish log data to an Amazon CloudWatch Logs log group.\n DNS query logs contain information about the queries that Route 53 receives for a specified public hosted zone, such as the following:\n  +  Route 53 edge location that responded to the DNS query\n  +  Domain or subdomain that was requested\n  +  DNS record type, such as A or AAAA\n  +  DNS response code, such as ``NoError`` or ``ServFail``\n  \n  + Log Group and Resource Policy Before you create a query logging configuration, perform the following operations. If you create a query logging configuration using the Route 53 console, Route 53 performs these operations automatically. Create a CloudWatch Logs log group, and make note of the ARN, which you specify when you create a query logging configuration. Note the following: You must create the log group in the us-east-1 region. You must use the same to create the log group and the hosted zone that you want to configure query logging for. When you create log groups for query logging, we recommend that you use a consistent prefix, for example: /aws/route53/hosted zone name In the next step, you'll create a resource policy, which controls access to one or more log groups and the associated resources, such as Route 53 hosted zones. There's a limit on the number of resource policies that you can create, so we recommend that you use a consistent prefix so you can use the same resource policy for all the log groups that you create for query logging. Create a CloudWatch Logs resource policy, and give it the permissions that Route 53 needs to create log streams and to send query logs to log streams. You must create the CloudWatch Logs resource policy in the us-east-1 region. For the value of Resource, specify the ARN for the log group that you created in the previous step. To use the same resource policy for all the CloudWatch Logs log groups that you created for query logging configurations, replace the hosted zone name with *, for example: arn:aws:logs:us-east-1:123412341234:log-group:/aws/route53/* To avoid the confused deputy problem, a security issue where an entity without a permission for an action can coerce a more-privileged entity to perform it, you can optionally limit the permissions that a service has to a resource in a resource-based policy by supplying the following values: For aws:SourceArn, supply the hosted zone ARN used in creating the query logging configuration. For example, aws:SourceArn: arn:aws:route53:::hostedzone/hosted zone ID. For aws:SourceAccount, supply the account ID for the account that creates the query logging configuration. For example, aws:SourceAccount:111111111111. For more information, see The confused deputy problem in the IAM User Guide. You can't use the CloudWatch console to create or edit a resource policy. You must use the CloudWatch API, one of the SDKs, or the . + Log Streams and Edge Locations When Route 53 finishes creating the configuration for DNS query logging, it does the following: Creates a log stream for an edge location the first time that the edge location responds to DNS queries for the specified hosted zone. That log stream is used to log all queries that Route 53 responds to for that edge location. Begins to send query logs to the applicable log stream. The name of each log stream is in the following format: hosted zone ID/edge location code The edge location code is a three-letter code and an arbitrarily assigned number, for example, DFW3. The three-letter code typically corresponds with the International Air Transport Association airport code for an airport near the edge location. (These abbreviations might change in the future.) For a list of edge locations, see \"The Route 53 Global Network\" on the Route 53 Product Details page. + Queries That Are Logged Query logs contain only the queries that DNS resolvers forward to Route 53. If a DNS resolver has already cached the response to a query (such as the IP address for a load balancer for example.com), the resolver will continue to return the cached response. It doesn't forward another query to Route 53 until the TTL for the corresponding resource record set expires. Depending on how many DNS queries are submitted for a resource record set, and depending on the TTL for that resource record set, query logs might contain information about only one query out of every several thousand queries that are submitted to DNS. For more information about how DNS works, see Routing Internet Traffic to Your Website or Web Application in the Amazon Route 53 Developer Guide. + Log File Format For a list of the values in each query log and the format of each value, see Logging DNS Queries in the Amazon Route 53 Developer Guide. + Pricing For information about charges for query logs, see Amazon CloudWatch Pricing. + How to Stop Logging If you want Route 53 to stop sending query logs to CloudWatch Logs, delete the query logging configuration. For more information, see DeleteQueryLoggingConfig."},"vpcs":{"type":"array","items":{"$ref":"#/types/aws-native:route53:HostedZoneVpc"},"description":"*Private hosted zones:* A complex type that contains information about the VPCs that are associated with the specified hosted zone.\n  For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``."}},"type":"object","required":["awsId","nameServers"],"inputProperties":{"hostedZoneConfig":{"$ref":"#/types/aws-native:route53:HostedZoneConfig","description":"A complex type that contains an optional comment.\n If you don't want to specify a comment, omit the ``HostedZoneConfig`` and ``Comment`` elements."},"hostedZoneFeatures":{"$ref":"#/types/aws-native:route53:HostedZoneFeatures","description":"The features configuration for the hosted zone, including accelerated recovery settings and status information."},"hostedZoneTags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Adds, edits, or deletes tags for a health check or a hosted zone.\n For information about using tags for cost allocation, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the *User Guide*."},"name":{"type":"string","description":"The name of the domain. Specify a fully qualified domain name, for example, *www.example.com*. The trailing dot is optional; Amazon Route 53 assumes that the domain name is fully qualified. This means that Route 53 treats *www.example.com* (without a trailing dot) and *www.example.com.* (with a trailing dot) as identical.\n If you're creating a public hosted zone, this is the name you have registered with your DNS registrar. If your domain name is registered with a registrar other than Route 53, change the name servers for your domain to the set of ``NameServers`` that are returned by the ``Fn::GetAtt`` intrinsic function."},"queryLoggingConfig":{"$ref":"#/types/aws-native:route53:HostedZoneQueryLoggingConfig","description":"Creates a configuration for DNS query logging. After you create a query logging configuration, Amazon Route 53 begins to publish log data to an Amazon CloudWatch Logs log group.\n DNS query logs contain information about the queries that Route 53 receives for a specified public hosted zone, such as the following:\n  +  Route 53 edge location that responded to the DNS query\n  +  Domain or subdomain that was requested\n  +  DNS record type, such as A or AAAA\n  +  DNS response code, such as ``NoError`` or ``ServFail``\n  \n  + Log Group and Resource Policy Before you create a query logging configuration, perform the following operations. If you create a query logging configuration using the Route 53 console, Route 53 performs these operations automatically. Create a CloudWatch Logs log group, and make note of the ARN, which you specify when you create a query logging configuration. Note the following: You must create the log group in the us-east-1 region. You must use the same to create the log group and the hosted zone that you want to configure query logging for. When you create log groups for query logging, we recommend that you use a consistent prefix, for example: /aws/route53/hosted zone name In the next step, you'll create a resource policy, which controls access to one or more log groups and the associated resources, such as Route 53 hosted zones. There's a limit on the number of resource policies that you can create, so we recommend that you use a consistent prefix so you can use the same resource policy for all the log groups that you create for query logging. Create a CloudWatch Logs resource policy, and give it the permissions that Route 53 needs to create log streams and to send query logs to log streams. You must create the CloudWatch Logs resource policy in the us-east-1 region. For the value of Resource, specify the ARN for the log group that you created in the previous step. To use the same resource policy for all the CloudWatch Logs log groups that you created for query logging configurations, replace the hosted zone name with *, for example: arn:aws:logs:us-east-1:123412341234:log-group:/aws/route53/* To avoid the confused deputy problem, a security issue where an entity without a permission for an action can coerce a more-privileged entity to perform it, you can optionally limit the permissions that a service has to a resource in a resource-based policy by supplying the following values: For aws:SourceArn, supply the hosted zone ARN used in creating the query logging configuration. For example, aws:SourceArn: arn:aws:route53:::hostedzone/hosted zone ID. For aws:SourceAccount, supply the account ID for the account that creates the query logging configuration. For example, aws:SourceAccount:111111111111. For more information, see The confused deputy problem in the IAM User Guide. You can't use the CloudWatch console to create or edit a resource policy. You must use the CloudWatch API, one of the SDKs, or the . + Log Streams and Edge Locations When Route 53 finishes creating the configuration for DNS query logging, it does the following: Creates a log stream for an edge location the first time that the edge location responds to DNS queries for the specified hosted zone. That log stream is used to log all queries that Route 53 responds to for that edge location. Begins to send query logs to the applicable log stream. The name of each log stream is in the following format: hosted zone ID/edge location code The edge location code is a three-letter code and an arbitrarily assigned number, for example, DFW3. The three-letter code typically corresponds with the International Air Transport Association airport code for an airport near the edge location. (These abbreviations might change in the future.) For a list of edge locations, see \"The Route 53 Global Network\" on the Route 53 Product Details page. + Queries That Are Logged Query logs contain only the queries that DNS resolvers forward to Route 53. If a DNS resolver has already cached the response to a query (such as the IP address for a load balancer for example.com), the resolver will continue to return the cached response. It doesn't forward another query to Route 53 until the TTL for the corresponding resource record set expires. Depending on how many DNS queries are submitted for a resource record set, and depending on the TTL for that resource record set, query logs might contain information about only one query out of every several thousand queries that are submitted to DNS. For more information about how DNS works, see Routing Internet Traffic to Your Website or Web Application in the Amazon Route 53 Developer Guide. + Log File Format For a list of the values in each query log and the format of each value, see Logging DNS Queries in the Amazon Route 53 Developer Guide. + Pricing For information about charges for query logs, see Amazon CloudWatch Pricing. + How to Stop Logging If you want Route 53 to stop sending query logs to CloudWatch Logs, delete the query logging configuration. For more information, see DeleteQueryLoggingConfig."},"vpcs":{"type":"array","items":{"$ref":"#/types/aws-native:route53:HostedZoneVpc"},"description":"*Private hosted zones:* A complex type that contains information about the VPCs that are associated with the specified hosted zone.\n  For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``."}}},"aws-native:route53:KeySigningKey":{"description":"Represents a key signing key (KSK) associated with a hosted zone. You can only have two KSKs per hosted zone.","properties":{"hostedZoneId":{"type":"string","description":"The unique string (ID) used to identify a hosted zone.","replaceOnChanges":true},"keyManagementServiceArn":{"type":"string","description":"The Amazon resource name (ARN) for a customer managed key (CMK) in AWS Key Management Service (KMS). The KeyManagementServiceArn must be unique for each key signing key (KSK) in a single hosted zone.","replaceOnChanges":true},"name":{"type":"string","description":"An alphanumeric string used to identify a key signing key (KSK). Name must be unique for each key signing key in the same hosted zone.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:route53:KeySigningKeyStatus","description":"A string specifying the initial status of the key signing key (KSK). You can set the value to ACTIVE or INACTIVE."}},"type":"object","required":["hostedZoneId","keyManagementServiceArn","name","status"],"inputProperties":{"hostedZoneId":{"type":"string","description":"The unique string (ID) used to identify a hosted zone."},"keyManagementServiceArn":{"type":"string","description":"The Amazon resource name (ARN) for a customer managed key (CMK) in AWS Key Management Service (KMS). The KeyManagementServiceArn must be unique for each key signing key (KSK) in a single hosted zone."},"name":{"type":"string","description":"An alphanumeric string used to identify a key signing key (KSK). Name must be unique for each key signing key in the same hosted zone."},"status":{"$ref":"#/types/aws-native:route53:KeySigningKeyStatus","description":"A string specifying the initial status of the key signing key (KSK). You can set the value to ACTIVE or INACTIVE."}},"requiredInputs":["hostedZoneId","keyManagementServiceArn","status"]},"aws-native:route53globalresolver:AccessSource":{"description":"Resource schema for AWS::Route53GlobalResolver::AccessSource","properties":{"accessSourceId":{"type":"string"},"arn":{"type":"string"},"cidr":{"type":"string"},"clientToken":{"type":"string","replaceOnChanges":true},"createdAt":{"type":"string"},"dnsViewId":{"type":"string","replaceOnChanges":true},"ipAddressType":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceIpAddressType"},"name":{"type":"string"},"protocol":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceDnsProtocol"},"status":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceCrResourceStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedAt":{"type":"string"}},"type":"object","required":["accessSourceId","arn","cidr","createdAt","dnsViewId","protocol","status","updatedAt"],"inputProperties":{"cidr":{"type":"string"},"clientToken":{"type":"string"},"dnsViewId":{"type":"string"},"ipAddressType":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceIpAddressType"},"name":{"type":"string"},"protocol":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceDnsProtocol"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["cidr","dnsViewId","protocol"]},"aws-native:route53globalresolver:AccessToken":{"description":"Resource schema for AWS::Route53GlobalResolver::AccessToken","properties":{"accessTokenId":{"type":"string"},"arn":{"type":"string"},"clientToken":{"type":"string","replaceOnChanges":true},"createdAt":{"type":"string"},"dnsViewId":{"type":"string","replaceOnChanges":true},"expiresAt":{"type":"string","replaceOnChanges":true},"globalResolverId":{"type":"string"},"name":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:AccessTokenTokenStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedAt":{"type":"string"},"value":{"type":"string"}},"type":"object","required":["accessTokenId","arn","createdAt","dnsViewId","globalResolverId","status","updatedAt","value"],"inputProperties":{"clientToken":{"type":"string"},"dnsViewId":{"type":"string"},"expiresAt":{"type":"string"},"name":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["dnsViewId"]},"aws-native:route53globalresolver:DnsView":{"description":"Resource schema for AWS::Route53GlobalResolver::DnsView","properties":{"arn":{"type":"string"},"clientToken":{"type":"string","replaceOnChanges":true},"createdAt":{"type":"string"},"description":{"type":"string"},"dnsViewId":{"type":"string"},"dnssecValidation":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewDnsSecValidationType"},"ednsClientSubnet":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewEdnsClientSubnetType"},"firewallRulesFailOpen":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewFirewallRulesFailOpenType"},"globalResolverId":{"type":"string","replaceOnChanges":true},"name":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewProfileResourceStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedAt":{"type":"string"}},"type":"object","required":["arn","createdAt","dnsViewId","globalResolverId","name","status","updatedAt"],"inputProperties":{"clientToken":{"type":"string"},"description":{"type":"string"},"dnssecValidation":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewDnsSecValidationType"},"ednsClientSubnet":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewEdnsClientSubnetType"},"firewallRulesFailOpen":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewFirewallRulesFailOpenType"},"globalResolverId":{"type":"string"},"name":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["globalResolverId"]},"aws-native:route53globalresolver:FirewallDomainList":{"description":"Resource schema for AWS::Route53GlobalResolver::FirewallDomainList","properties":{"arn":{"type":"string"},"clientToken":{"type":"string","replaceOnChanges":true},"createdAt":{"type":"string"},"description":{"type":"string","replaceOnChanges":true},"domainCount":{"type":"integer"},"domainFileUrl":{"type":"string","description":"S3 URL to import domains from."},"domains":{"type":"array","items":{"type":"string"}},"firewallDomainListId":{"type":"string"},"globalResolverId":{"type":"string","replaceOnChanges":true},"name":{"type":"string","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:route53globalresolver:FirewallDomainListCrResourceStatus"},"statusMessage":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedAt":{"type":"string"}},"type":"object","required":["arn","createdAt","domainCount","firewallDomainListId","globalResolverId","name","status","statusMessage","updatedAt"],"inputProperties":{"clientToken":{"type":"string"},"description":{"type":"string"},"domainFileUrl":{"type":"string","description":"S3 URL to import domains from."},"domains":{"type":"array","items":{"type":"string"}},"globalResolverId":{"type":"string"},"name":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["globalResolverId"]},"aws-native:route53globalresolver:FirewallRule":{"description":"Resource schema for AWS::Route53GlobalResolver::FirewallRule","properties":{"action":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleAction"},"blockOverrideDnsType":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleBlockOverrideDnsQueryType"},"blockOverrideDomain":{"type":"string"},"blockOverrideTtl":{"type":"integer"},"blockResponse":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleFirewallBlockResponse"},"clientToken":{"type":"string","replaceOnChanges":true},"confidenceThreshold":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleConfidenceThreshold"},"createdAt":{"type":"string"},"description":{"type":"string"},"dnsAdvancedProtection":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleDnsAdvancedProtection"},"dnsViewId":{"type":"string","replaceOnChanges":true},"firewallDomainListId":{"type":"string","replaceOnChanges":true},"firewallRuleId":{"type":"string"},"name":{"type":"string"},"priority":{"type":"integer"},"qType":{"type":"string","replaceOnChanges":true},"queryType":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleCrResourceStatus"},"updatedAt":{"type":"string"}},"type":"object","required":["action","createdAt","dnsViewId","firewallRuleId","name","queryType","status","updatedAt"],"inputProperties":{"action":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleAction"},"blockOverrideDnsType":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleBlockOverrideDnsQueryType"},"blockOverrideDomain":{"type":"string"},"blockOverrideTtl":{"type":"integer"},"blockResponse":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleFirewallBlockResponse"},"clientToken":{"type":"string"},"confidenceThreshold":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleConfidenceThreshold"},"description":{"type":"string"},"dnsAdvancedProtection":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleDnsAdvancedProtection"},"dnsViewId":{"type":"string"},"firewallDomainListId":{"type":"string"},"name":{"type":"string"},"priority":{"type":"integer"},"qType":{"type":"string"}},"requiredInputs":["action","dnsViewId"]},"aws-native:route53globalresolver:GlobalResolver":{"description":"Resource schema for AWS::Route53GlobalResolver::GlobalResolver","properties":{"arn":{"type":"string"},"clientToken":{"type":"string","replaceOnChanges":true},"createdAt":{"type":"string"},"description":{"type":"string"},"dnsName":{"type":"string"},"globalResolverId":{"type":"string"},"iPv4Addresses":{"type":"array","items":{"type":"string"}},"iPv6Addresses":{"type":"array","items":{"type":"string"}},"ipAddressType":{"$ref":"#/types/aws-native:route53globalresolver:GlobalResolverIpAddressType"},"name":{"type":"string"},"observabilityRegion":{"type":"string"},"regions":{"type":"array","items":{"type":"string"},"replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:route53globalresolver:GlobalResolverCrResourceStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedAt":{"type":"string"}},"type":"object","required":["arn","createdAt","dnsName","globalResolverId","iPv4Addresses","iPv6Addresses","name","regions","status","updatedAt"],"inputProperties":{"clientToken":{"type":"string"},"description":{"type":"string"},"ipAddressType":{"$ref":"#/types/aws-native:route53globalresolver:GlobalResolverIpAddressType"},"name":{"type":"string"},"observabilityRegion":{"type":"string"},"regions":{"type":"array","items":{"type":"string"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["regions"]},"aws-native:route53globalresolver:HostedZoneAssociation":{"description":"Resource schema for AWS::Route53GlobalResolver::HostedZoneAssociation","properties":{"createdAt":{"type":"string"},"hostedZoneAssociationId":{"type":"string"},"hostedZoneId":{"type":"string","replaceOnChanges":true},"hostedZoneName":{"type":"string"},"name":{"type":"string"},"resourceArn":{"type":"string","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:route53globalresolver:HostedZoneAssociationStatus"},"updatedAt":{"type":"string"}},"type":"object","required":["createdAt","hostedZoneAssociationId","hostedZoneId","hostedZoneName","name","resourceArn","status","updatedAt"],"inputProperties":{"hostedZoneId":{"type":"string"},"name":{"type":"string"},"resourceArn":{"type":"string"}},"requiredInputs":["hostedZoneId","resourceArn"]},"aws-native:route53profiles:Profile":{"description":"Resource Type definition for AWS::Route53Profiles::Profile","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resolver profile."},"awsId":{"type":"string","description":"The ID of the profile."},"clientToken":{"type":"string","description":"The id of the creator request"},"name":{"type":"string","description":"The name of the profile.","replaceOnChanges":true},"shareStatus":{"$ref":"#/types/aws-native:route53profiles:ProfileShareStatus","description":"The sharing status of the profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","clientToken","name","shareStatus"],"inputProperties":{"name":{"type":"string","description":"The name of the profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:route53profiles:ProfileAssociation":{"description":"Resource Type definition for AWS::Route53Profiles::ProfileAssociation","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the profile association."},"awsId":{"type":"string","description":"Primary Identifier for  Profile Association"},"name":{"type":"string","description":"The name of an association between a  Profile and a VPC.","replaceOnChanges":true},"profileId":{"type":"string","description":"The ID of the  profile that you associated with the resource that is specified by ResourceId.","replaceOnChanges":true},"resourceId":{"type":"string","description":"The resource that you associated the  profile with.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["awsId","name","profileId","resourceId"],"inputProperties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the profile association."},"name":{"type":"string","description":"The name of an association between a  Profile and a VPC."},"profileId":{"type":"string","description":"The ID of the  profile that you associated with the resource that is specified by ResourceId."},"resourceId":{"type":"string","description":"The resource that you associated the  profile with."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["profileId","resourceId"]},"aws-native:route53profiles:ProfileResourceAssociation":{"description":"Resource Type definition for AWS::Route53Profiles::ProfileResourceAssociation","properties":{"awsId":{"type":"string","description":"Primary Identifier for  Profile Resource Association"},"name":{"type":"string","description":"The name of an association between the  Profile and resource.","replaceOnChanges":true},"profileId":{"type":"string","description":"The ID of the  profile that you associated the resource to that is specified by ResourceArn.","replaceOnChanges":true},"resourceArn":{"type":"string","description":"The arn of the resource that you associated to the  Profile.","replaceOnChanges":true},"resourceProperties":{"type":"string","description":"A JSON-formatted string with key-value pairs specifying the properties of the associated resource."},"resourceType":{"type":"string","description":"The type of the resource associated to the  Profile."}},"type":"object","required":["awsId","name","profileId","resourceArn","resourceType"],"inputProperties":{"name":{"type":"string","description":"The name of an association between the  Profile and resource."},"profileId":{"type":"string","description":"The ID of the  profile that you associated the resource to that is specified by ResourceArn."},"resourceArn":{"type":"string","description":"The arn of the resource that you associated to the  Profile."},"resourceProperties":{"type":"string","description":"A JSON-formatted string with key-value pairs specifying the properties of the associated resource."}},"requiredInputs":["profileId","resourceArn"]},"aws-native:route53recoverycontrol:Cluster":{"description":"AWS Route53 Recovery Control Cluster resource schema","properties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cluster."},"clusterEndpoints":{"type":"array","items":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterEndpoint"},"description":"Endpoints for the cluster."},"name":{"type":"string","description":"Name of a Cluster. You can use any non-white space character in the name","replaceOnChanges":true},"networkType":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterNetworkType","description":"Cluster supports IPv4 endpoints and Dual-stack IPv4 and IPv6 endpoints. NetworkType can be IPV4 or DUALSTACK."},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterStatus","description":"Deployment status of a resource. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource","replaceOnChanges":true}},"type":"object","required":["clusterArn","clusterEndpoints","name","status"],"inputProperties":{"name":{"type":"string","description":"Name of a Cluster. You can use any non-white space character in the name"},"networkType":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterNetworkType","description":"Cluster supports IPv4 endpoints and Dual-stack IPv4 and IPv6 endpoints. NetworkType can be IPV4 or DUALSTACK."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource"}}},"aws-native:route53recoverycontrol:ControlPanel":{"description":"AWS Route53 Recovery Control Control Panel resource schema .","properties":{"clusterArn":{"type":"string","description":"Cluster to associate with the Control Panel","replaceOnChanges":true},"controlPanelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cluster."},"defaultControlPanel":{"type":"boolean","description":"A flag that Amazon Route 53 Application Recovery Controller sets to true to designate the default control panel for a cluster. When you create a cluster, Amazon Route 53 Application Recovery Controller creates a control panel, and sets this flag for that control panel. If you create a control panel yourself, this flag is set to false."},"name":{"type":"string","description":"The name of the control panel. You can use any non-white space character in the name."},"routingControlCount":{"type":"integer","description":"Count of associated routing controls"},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:ControlPanelStatus","description":"The deployment status of control panel. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource","replaceOnChanges":true}},"type":"object","required":["controlPanelArn","defaultControlPanel","name","routingControlCount","status"],"inputProperties":{"clusterArn":{"type":"string","description":"Cluster to associate with the Control Panel"},"name":{"type":"string","description":"The name of the control panel. You can use any non-white space character in the name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A collection of tags associated with a resource"}}},"aws-native:route53recoverycontrol:RoutingControl":{"description":"AWS Route53 Recovery Control Routing Control resource schema .","properties":{"clusterArn":{"type":"string","description":"Arn associated with Control Panel","replaceOnChanges":true},"controlPanelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the control panel.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the routing control. You can use any non-white space character in the name."},"routingControlArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the routing control."},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:RoutingControlStatus","description":"The deployment status of the routing control. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."}},"type":"object","required":["name","routingControlArn","status"],"inputProperties":{"clusterArn":{"type":"string","description":"Arn associated with Control Panel"},"controlPanelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the control panel."},"name":{"type":"string","description":"The name of the routing control. You can use any non-white space character in the name."}}},"aws-native:route53recoverycontrol:SafetyRule":{"description":"Resource schema for AWS Route53 Recovery Control basic constructs and validation rules.","properties":{"assertionRule":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleAssertionRule","description":"An assertion rule enforces that, when you change a routing control state, that the criteria that you set in the rule configuration is met. Otherwise, the change to the routing control is not accepted. For example, the criteria might be that at least one routing control state is `On` after the transaction so that traffic continues to flow to at least one cell for the application. This ensures that you avoid a fail-open scenario."},"controlPanelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the control panel."},"gatingRule":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleGatingRule","description":"A gating rule verifies that a gating routing control or set of gating routing controls, evaluates as true, based on a rule configuration that you specify, which allows a set of routing control state changes to complete.\n\nFor example, if you specify one gating routing control and you set the `Type` in the rule configuration to `OR` , that indicates that you must set the gating routing control to `On` for the rule to evaluate as true; that is, for the gating control switch to be On. When you do that, then you can update the routing control states for the target routing controls that you specify in the gating rule."},"name":{"type":"string","description":"The name of the assertion rule. The name must be unique within a control panel. You can use any non-white space character in the name except the following: \u0026 \u003e \u003c ' (single quote) \" (double quote) ; (semicolon)"},"ruleConfig":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleRuleConfig","description":"The criteria that you set for specific assertion controls (routing controls) that designate how many control states must be `ON` as the result of a transaction. For example, if you have three assertion controls, you might specify `ATLEAST 2` for your rule configuration. This means that at least two assertion controls must be `ON` , so that at least two AWS Regions have traffic flowing to them."},"safetyRuleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the safety rule."},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleStatus","description":"The deployment status of the routing control. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["safetyRuleArn","status"],"inputProperties":{"assertionRule":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleAssertionRule","description":"An assertion rule enforces that, when you change a routing control state, that the criteria that you set in the rule configuration is met. Otherwise, the change to the routing control is not accepted. For example, the criteria might be that at least one routing control state is `On` after the transaction so that traffic continues to flow to at least one cell for the application. This ensures that you avoid a fail-open scenario."},"controlPanelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the control panel."},"gatingRule":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleGatingRule","description":"A gating rule verifies that a gating routing control or set of gating routing controls, evaluates as true, based on a rule configuration that you specify, which allows a set of routing control state changes to complete.\n\nFor example, if you specify one gating routing control and you set the `Type` in the rule configuration to `OR` , that indicates that you must set the gating routing control to `On` for the rule to evaluate as true; that is, for the gating control switch to be On. When you do that, then you can update the routing control states for the target routing controls that you specify in the gating rule."},"name":{"type":"string","description":"The name of the assertion rule. The name must be unique within a control panel. You can use any non-white space character in the name except the following: \u0026 \u003e \u003c ' (single quote) \" (double quote) ; (semicolon)"},"ruleConfig":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleRuleConfig","description":"The criteria that you set for specific assertion controls (routing controls) that designate how many control states must be `ON` as the result of a transaction. For example, if you have three assertion controls, you might specify `ATLEAST 2` for your rule configuration. This means that at least two assertion controls must be `ON` , so that at least two AWS Regions have traffic flowing to them."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}}},"aws-native:route53recoveryreadiness:Cell":{"description":"The API Schema for AWS Route53 Recovery Readiness Cells.","properties":{"cellArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cell."},"cellName":{"type":"string","description":"The name of the cell to create.","replaceOnChanges":true},"cells":{"type":"array","items":{"type":"string"},"description":"A list of cell Amazon Resource Names (ARNs) contained within this cell, for use in nested cells. For example, Availability Zones within specific Regions."},"parentReadinessScopes":{"type":"array","items":{"type":"string"},"description":"The readiness scope for the cell, which can be a cell Amazon Resource Name (ARN) or a recovery group ARN. This is a list but currently can have only one element."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}},"type":"object","required":["cellArn","parentReadinessScopes"],"inputProperties":{"cellName":{"type":"string","description":"The name of the cell to create."},"cells":{"type":"array","items":{"type":"string"},"description":"A list of cell Amazon Resource Names (ARNs) contained within this cell, for use in nested cells. For example, Availability Zones within specific Regions."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource"}}},"aws-native:route53recoveryreadiness:ReadinessCheck":{"description":"Aws Route53 Recovery Readiness Check Schema and API specification.","properties":{"readinessCheckArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the readiness check."},"readinessCheckName":{"type":"string","description":"Name of the ReadinessCheck to create.","replaceOnChanges":true},"resourceSetName":{"type":"string","description":"The name of the resource set to check."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource."}},"type":"object","required":["readinessCheckArn"],"inputProperties":{"readinessCheckName":{"type":"string","description":"Name of the ReadinessCheck to create."},"resourceSetName":{"type":"string","description":"The name of the resource set to check."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource."}}},"aws-native:route53recoveryreadiness:RecoveryGroup":{"description":"AWS Route53 Recovery Readiness Recovery Group Schema and API specifications.","properties":{"cells":{"type":"array","items":{"type":"string"},"description":"A list of the cell Amazon Resource Names (ARNs) in the recovery group."},"recoveryGroupArn":{"type":"string","description":"A collection of tags associated with a resource."},"recoveryGroupName":{"type":"string","description":"The name of the recovery group to create.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource."}},"type":"object","required":["recoveryGroupArn"],"inputProperties":{"cells":{"type":"array","items":{"type":"string"},"description":"A list of the cell Amazon Resource Names (ARNs) in the recovery group."},"recoveryGroupName":{"type":"string","description":"The name of the recovery group to create."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A collection of tags associated with a resource."}}},"aws-native:route53recoveryreadiness:ResourceSet":{"description":"Schema for the AWS Route53 Recovery Readiness ResourceSet Resource and API.","properties":{"resourceSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource set."},"resourceSetName":{"type":"string","description":"The name of the resource set to create.","replaceOnChanges":true},"resourceSetType":{"type":"string","description":"The resource type of the resources in the resource set. Enter one of the following values for resource type: \n\nAWS: :AutoScaling: :AutoScalingGroup, AWS: :CloudWatch: :Alarm, AWS: :EC2: :CustomerGateway, AWS: :DynamoDB: :Table, AWS: :EC2: :Volume, AWS: :ElasticLoadBalancing: :LoadBalancer, AWS: :ElasticLoadBalancingV2: :LoadBalancer, AWS: :MSK: :Cluster, AWS: :RDS: :DBCluster, AWS: :Route53: :HealthCheck, AWS: :SQS: :Queue, AWS: :SNS: :Topic, AWS: :SNS: :Subscription, AWS: :EC2: :VPC, AWS: :EC2: :VPNConnection, AWS: :EC2: :VPNGateway, AWS::Route53RecoveryReadiness::DNSTargetResource","replaceOnChanges":true},"resources":{"type":"array","items":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetResource"},"description":"A list of resource objects in the resource set."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A tag to associate with the parameters for a resource set."}},"type":"object","required":["resourceSetArn","resourceSetType","resources"],"inputProperties":{"resourceSetName":{"type":"string","description":"The name of the resource set to create."},"resourceSetType":{"type":"string","description":"The resource type of the resources in the resource set. Enter one of the following values for resource type: \n\nAWS: :AutoScaling: :AutoScalingGroup, AWS: :CloudWatch: :Alarm, AWS: :EC2: :CustomerGateway, AWS: :DynamoDB: :Table, AWS: :EC2: :Volume, AWS: :ElasticLoadBalancing: :LoadBalancer, AWS: :ElasticLoadBalancingV2: :LoadBalancer, AWS: :MSK: :Cluster, AWS: :RDS: :DBCluster, AWS: :Route53: :HealthCheck, AWS: :SQS: :Queue, AWS: :SNS: :Topic, AWS: :SNS: :Subscription, AWS: :EC2: :VPC, AWS: :EC2: :VPNConnection, AWS: :EC2: :VPNGateway, AWS::Route53RecoveryReadiness::DNSTargetResource"},"resources":{"type":"array","items":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetResource"},"description":"A list of resource objects in the resource set."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A tag to associate with the parameters for a resource set."}},"requiredInputs":["resourceSetType","resources"]},"aws-native:route53resolver:FirewallDomainList":{"description":"Resource schema for AWS::Route53Resolver::FirewallDomainList.","properties":{"arn":{"type":"string","description":"Arn"},"awsId":{"type":"string","description":"ResourceId"},"creationTime":{"type":"string","description":"Rfc3339TimeString"},"creatorRequestId":{"type":"string","description":"The id of the creator request."},"domainCount":{"type":"integer","description":"Count"},"domainFileUrl":{"type":"string","description":"S3 URL to import domains from."},"domains":{"type":"array","items":{"type":"string"},"description":"A list of the domain lists that you have defined."},"managedOwnerName":{"type":"string","description":"ServicePrincipal"},"modificationTime":{"type":"string","description":"Rfc3339TimeString"},"name":{"type":"string","description":"FirewallDomainListName","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:route53resolver:FirewallDomainListStatus","description":"ResolverFirewallDomainList, possible values are COMPLETE, DELETING, UPDATING, COMPLETE_IMPORT_FAILED, IMPORTING, and INACTIVE_OWNER_ACCOUNT_CLOSED."},"statusMessage":{"type":"string","description":"FirewallDomainListAssociationStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags"}},"type":"object","required":["arn","awsId","creationTime","creatorRequestId","domainCount","managedOwnerName","modificationTime","status","statusMessage"],"inputProperties":{"domainFileUrl":{"type":"string","description":"S3 URL to import domains from."},"domains":{"type":"array","items":{"type":"string"},"description":"A list of the domain lists that you have defined."},"name":{"type":"string","description":"FirewallDomainListName"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags"}}},"aws-native:route53resolver:FirewallRuleGroup":{"description":"Resource schema for AWS::Route53Resolver::FirewallRuleGroup.","properties":{"arn":{"type":"string","description":"Arn"},"awsId":{"type":"string","description":"ResourceId"},"creationTime":{"type":"string","description":"Rfc3339TimeString"},"creatorRequestId":{"type":"string","description":"The id of the creator request."},"firewallRules":{"type":"array","items":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRule"},"description":"FirewallRules"},"modificationTime":{"type":"string","description":"Rfc3339TimeString"},"name":{"type":"string","description":"FirewallRuleGroupName","replaceOnChanges":true},"ownerId":{"type":"string","description":"AccountId"},"ruleCount":{"type":"integer","description":"Count"},"shareStatus":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupShareStatus","description":"ShareStatus, possible values are NOT_SHARED, SHARED_WITH_ME, SHARED_BY_ME."},"status":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupStatus","description":"ResolverFirewallRuleGroupAssociation, possible values are COMPLETE, DELETING, UPDATING, and INACTIVE_OWNER_ACCOUNT_CLOSED."},"statusMessage":{"type":"string","description":"FirewallRuleGroupStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags"}},"type":"object","required":["arn","awsId","creationTime","creatorRequestId","modificationTime","ownerId","ruleCount","shareStatus","status","statusMessage"],"inputProperties":{"firewallRules":{"type":"array","items":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRule"},"description":"FirewallRules"},"name":{"type":"string","description":"FirewallRuleGroupName"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags"}}},"aws-native:route53resolver:FirewallRuleGroupAssociation":{"description":"Resource schema for AWS::Route53Resolver::FirewallRuleGroupAssociation.","properties":{"arn":{"type":"string","description":"Arn"},"awsId":{"type":"string","description":"Id"},"creationTime":{"type":"string","description":"Rfc3339TimeString"},"creatorRequestId":{"type":"string","description":"The id of the creator request."},"firewallRuleGroupId":{"type":"string","description":"FirewallRuleGroupId","replaceOnChanges":true},"managedOwnerName":{"type":"string","description":"ServicePrincipal"},"modificationTime":{"type":"string","description":"Rfc3339TimeString"},"mutationProtection":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupAssociationMutationProtection","description":"MutationProtectionStatus"},"name":{"type":"string","description":"FirewallRuleGroupAssociationName"},"priority":{"type":"integer","description":"Priority"},"status":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupAssociationStatus","description":"ResolverFirewallRuleGroupAssociation, possible values are COMPLETE, DELETING, UPDATING, and INACTIVE_OWNER_ACCOUNT_CLOSED."},"statusMessage":{"type":"string","description":"FirewallDomainListAssociationStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags"},"vpcId":{"type":"string","description":"VpcId","replaceOnChanges":true}},"type":"object","required":["arn","awsId","creationTime","creatorRequestId","firewallRuleGroupId","managedOwnerName","modificationTime","priority","status","statusMessage","vpcId"],"inputProperties":{"firewallRuleGroupId":{"type":"string","description":"FirewallRuleGroupId"},"mutationProtection":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupAssociationMutationProtection","description":"MutationProtectionStatus"},"name":{"type":"string","description":"FirewallRuleGroupAssociationName"},"priority":{"type":"integer","description":"Priority"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Tags"},"vpcId":{"type":"string","description":"VpcId"}},"requiredInputs":["firewallRuleGroupId","priority","vpcId"]},"aws-native:route53resolver:OutpostResolver":{"description":"Resource schema for AWS::Route53Resolver::OutpostResolver.","properties":{"arn":{"type":"string","description":"The OutpostResolver ARN."},"awsId":{"type":"string","description":"Id"},"creationTime":{"type":"string","description":"The OutpostResolver creation time"},"creatorRequestId":{"type":"string","description":"The id of the creator request."},"instanceCount":{"type":"integer","description":"The number of OutpostResolvers."},"modificationTime":{"type":"string","description":"The OutpostResolver last modified time"},"name":{"type":"string","description":"The OutpostResolver name."},"outpostArn":{"type":"string","description":"The Outpost ARN.","replaceOnChanges":true},"preferredInstanceType":{"type":"string","description":"The OutpostResolver instance type."},"status":{"$ref":"#/types/aws-native:route53resolver:OutpostResolverStatus","description":"The OutpostResolver status, possible values are CREATING, OPERATIONAL, UPDATING, DELETING, ACTION_NEEDED, FAILED_CREATION and FAILED_DELETION."},"statusMessage":{"type":"string","description":"The OutpostResolver status message."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","awsId","creationTime","creatorRequestId","modificationTime","name","outpostArn","preferredInstanceType","status","statusMessage"],"inputProperties":{"instanceCount":{"type":"integer","description":"The number of OutpostResolvers."},"name":{"type":"string","description":"The OutpostResolver name."},"outpostArn":{"type":"string","description":"The Outpost ARN."},"preferredInstanceType":{"type":"string","description":"The OutpostResolver instance type."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["outpostArn","preferredInstanceType"]},"aws-native:route53resolver:ResolverConfig":{"description":"Resource schema for AWS::Route53Resolver::ResolverConfig.","properties":{"autodefinedReverse":{"$ref":"#/types/aws-native:route53resolver:ResolverConfigAutodefinedReverse","description":"ResolverAutodefinedReverseStatus, possible values are ENABLING, ENABLED, DISABLING AND DISABLED."},"autodefinedReverseFlag":{"$ref":"#/types/aws-native:route53resolver:ResolverConfigAutodefinedReverseFlag","description":"Represents the desired status of AutodefinedReverse. The only supported value on creation is DISABLE. Deletion of this resource will return AutodefinedReverse to its default value (ENABLED).","replaceOnChanges":true},"awsId":{"type":"string","description":"Id"},"ownerId":{"type":"string","description":"AccountId"},"resourceId":{"type":"string","description":"ResourceId","replaceOnChanges":true}},"type":"object","required":["autodefinedReverse","autodefinedReverseFlag","awsId","ownerId","resourceId"],"inputProperties":{"autodefinedReverseFlag":{"$ref":"#/types/aws-native:route53resolver:ResolverConfigAutodefinedReverseFlag","description":"Represents the desired status of AutodefinedReverse. The only supported value on creation is DISABLE. Deletion of this resource will return AutodefinedReverse to its default value (ENABLED)."},"resourceId":{"type":"string","description":"ResourceId"}},"requiredInputs":["autodefinedReverseFlag","resourceId"]},"aws-native:route53resolver:ResolverDnssecConfig":{"description":"Resource schema for AWS::Route53Resolver::ResolverDNSSECConfig.","properties":{"awsId":{"type":"string","description":"Id"},"ownerId":{"type":"string","description":"AccountId"},"resourceId":{"type":"string","description":"ResourceId","replaceOnChanges":true},"validationStatus":{"$ref":"#/types/aws-native:route53resolver:ResolverDnssecConfigValidationStatus","description":"ResolverDNSSECValidationStatus, possible values are ENABLING, ENABLED, DISABLING AND DISABLED."}},"type":"object","required":["awsId","ownerId","validationStatus"],"inputProperties":{"resourceId":{"type":"string","description":"ResourceId"}}},"aws-native:route53resolver:ResolverEndpoint":{"description":"Resource type definition for AWS::Route53Resolver::ResolverEndpoint","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resolver endpoint, such as arn:aws:route53resolver:us-east-1:123456789012:resolver-endpoint/resolver-endpoint-a1bzhi."},"direction":{"type":"string","description":"Indicates whether the Resolver endpoint allows inbound or outbound DNS queries:\n- INBOUND: allows DNS queries to your VPC from your network \n- OUTBOUND: allows DNS queries from your VPC to your network \n- INBOUND_DELEGATION: allows DNS queries to your VPC from your network with authoritative answers from private hosted zones","replaceOnChanges":true},"hostVpcId":{"type":"string","description":"The ID of the VPC that you want to create the resolver endpoint in."},"ipAddressCount":{"type":"string","description":"The number of IP addresses that the resolver endpoint can use for DNS queries."},"ipAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:route53resolver:ResolverEndpointIpAddressRequest"},"description":"The subnets and IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). The subnet ID uniquely identifies a VPC."},"name":{"type":"string","description":"A friendly name that lets you easily find a configuration in the Resolver dashboard in the Route 53 console."},"outpostArn":{"type":"string","description":"The ARN (Amazon Resource Name) for the Outpost.","replaceOnChanges":true},"preferredInstanceType":{"type":"string","description":"The Amazon EC2 instance type.","replaceOnChanges":true},"protocols":{"type":"array","items":{"type":"string"},"description":"Protocols used for the endpoint. DoH-FIPS is applicable for inbound endpoints only."},"resolverEndpointId":{"type":"string","description":"The ID of the resolver endpoint."},"resolverEndpointType":{"$ref":"#/types/aws-native:route53resolver:ResolverEndpointType","description":"The Resolver endpoint IP address type."},"rniEnhancedMetricsEnabled":{"type":"boolean","description":"Specifies whether RNI enhanced metrics are enabled for the Resolver Endpoints. When set to true, one-minute granular metrics are published in CloudWatch for each RNI associated with this endpoint. When set to false, metrics are not published. Default is false."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more security groups that control access to this VPC. The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetNameServerMetricsEnabled":{"type":"boolean","description":"Specifies whether target name server metrics are enabled for the Outbound Resolver Endpoint. When set to true, one-minute granular metrics are published in CloudWatch for each target name server associated with this endpoint. When set to false, metrics are not published. Default is false."}},"type":"object","required":["arn","direction","hostVpcId","ipAddressCount","ipAddresses","resolverEndpointId","securityGroupIds"],"inputProperties":{"direction":{"type":"string","description":"Indicates whether the Resolver endpoint allows inbound or outbound DNS queries:\n- INBOUND: allows DNS queries to your VPC from your network \n- OUTBOUND: allows DNS queries from your VPC to your network \n- INBOUND_DELEGATION: allows DNS queries to your VPC from your network with authoritative answers from private hosted zones"},"ipAddresses":{"type":"array","items":{"$ref":"#/types/aws-native:route53resolver:ResolverEndpointIpAddressRequest"},"description":"The subnets and IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). The subnet ID uniquely identifies a VPC."},"name":{"type":"string","description":"A friendly name that lets you easily find a configuration in the Resolver dashboard in the Route 53 console."},"outpostArn":{"type":"string","description":"The ARN (Amazon Resource Name) for the Outpost."},"preferredInstanceType":{"type":"string","description":"The Amazon EC2 instance type."},"protocols":{"type":"array","items":{"type":"string"},"description":"Protocols used for the endpoint. DoH-FIPS is applicable for inbound endpoints only."},"resolverEndpointType":{"$ref":"#/types/aws-native:route53resolver:ResolverEndpointType","description":"The Resolver endpoint IP address type."},"rniEnhancedMetricsEnabled":{"type":"boolean","description":"Specifies whether RNI enhanced metrics are enabled for the Resolver Endpoints. When set to true, one-minute granular metrics are published in CloudWatch for each RNI associated with this endpoint. When set to false, metrics are not published. Default is false."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more security groups that control access to this VPC. The security group must include one or more inbound rules (for inbound endpoints) or outbound rules (for outbound endpoints). Inbound and outbound rules must allow TCP and UDP access. For inbound access, open port 53. For outbound access, open the port that you're using for DNS queries on your network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetNameServerMetricsEnabled":{"type":"boolean","description":"Specifies whether target name server metrics are enabled for the Outbound Resolver Endpoint. When set to true, one-minute granular metrics are published in CloudWatch for each target name server associated with this endpoint. When set to false, metrics are not published. Default is false."}},"requiredInputs":["direction","ipAddresses","securityGroupIds"]},"aws-native:route53resolver:ResolverQueryLoggingConfig":{"description":"Resource schema for AWS::Route53Resolver::ResolverQueryLoggingConfig.","properties":{"arn":{"type":"string","description":"Arn"},"associationCount":{"type":"integer","description":"Count"},"awsId":{"type":"string","description":"ResourceId"},"creationTime":{"type":"string","description":"Rfc3339TimeString"},"creatorRequestId":{"type":"string","description":"The id of the creator request."},"destinationArn":{"type":"string","description":"destination arn","replaceOnChanges":true},"name":{"type":"string","description":"ResolverQueryLogConfigName","replaceOnChanges":true},"ownerId":{"type":"string","description":"AccountId"},"shareStatus":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigShareStatus","description":"ShareStatus, possible values are NOT_SHARED, SHARED_WITH_ME, SHARED_BY_ME."},"status":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigStatus","description":"ResolverQueryLogConfigStatus, possible values are CREATING, CREATED, DELETED AND FAILED."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["arn","associationCount","awsId","creationTime","creatorRequestId","ownerId","shareStatus","status"],"inputProperties":{"destinationArn":{"type":"string","description":"destination arn"},"name":{"type":"string","description":"ResolverQueryLogConfigName"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:route53resolver:ResolverQueryLoggingConfigAssociation":{"description":"Resource schema for AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation.","properties":{"awsId":{"type":"string","description":"Id"},"creationTime":{"type":"string","description":"Rfc3339TimeString"},"error":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigAssociationError","description":"ResolverQueryLogConfigAssociationError"},"errorMessage":{"type":"string","description":"ResolverQueryLogConfigAssociationErrorMessage"},"resolverQueryLogConfigId":{"type":"string","description":"ResolverQueryLogConfigId","replaceOnChanges":true},"resourceId":{"type":"string","description":"ResourceId","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigAssociationStatus","description":"ResolverQueryLogConfigAssociationStatus"}},"type":"object","required":["awsId","creationTime","error","errorMessage","status"],"inputProperties":{"resolverQueryLogConfigId":{"type":"string","description":"ResolverQueryLogConfigId"},"resourceId":{"type":"string","description":"ResourceId"}}},"aws-native:route53resolver:ResolverRule":{"description":"Resource Type definition for AWS::Route53Resolver::ResolverRule","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resolver rule."},"delegationRecord":{"type":"string","description":"The name server domain for queries to be delegated to if a query matches the delegation record."},"domainName":{"type":"string","description":"DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps"},"name":{"type":"string","description":"The name for the Resolver rule"},"resolverEndpointId":{"type":"string","description":"The ID of the endpoint that the rule is associated with."},"resolverRuleId":{"type":"string","description":"The ID of the endpoint that the rule is associated with."},"ruleType":{"$ref":"#/types/aws-native:route53resolver:ResolverRuleRuleType","description":"When you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD. When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetIps":{"type":"array","items":{"$ref":"#/types/aws-native:route53resolver:ResolverRuleTargetAddress"},"description":"An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network. Specify IPv4 addresses. IPv6 is not supported."}},"type":"object","required":["arn","resolverRuleId","ruleType"],"inputProperties":{"delegationRecord":{"type":"string","description":"The name server domain for queries to be delegated to if a query matches the delegation record."},"domainName":{"type":"string","description":"DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps"},"name":{"type":"string","description":"The name for the Resolver rule"},"resolverEndpointId":{"type":"string","description":"The ID of the endpoint that the rule is associated with."},"ruleType":{"$ref":"#/types/aws-native:route53resolver:ResolverRuleRuleType","description":"When you want to forward DNS queries for specified domain name to resolvers on your network, specify FORWARD. When you have a forwarding rule to forward DNS queries for a domain to your network and you want Resolver to process queries for a subdomain of that domain, specify SYSTEM."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"targetIps":{"type":"array","items":{"$ref":"#/types/aws-native:route53resolver:ResolverRuleTargetAddress"},"description":"An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network. Specify IPv4 addresses. IPv6 is not supported."}},"requiredInputs":["ruleType"]},"aws-native:route53resolver:ResolverRuleAssociation":{"description":"In the response to an [AssociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_AssociateResolverRule.html), [DisassociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_DisassociateResolverRule.html), or [ListResolverRuleAssociations](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListResolverRuleAssociations.html) request, provides information about an association between a resolver rule and a VPC. The association determines which DNS queries that originate in the VPC are forwarded to your network.","properties":{"name":{"type":"string","description":"The name of an association between a Resolver rule and a VPC.\n The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers.","replaceOnChanges":true},"resolverRuleAssociationId":{"type":"string","description":"The ID of the resolver rule association that you want to get information about, such as `rslvr-rrassoc-97242eaf88example` ."},"resolverRuleId":{"type":"string","description":"The ID of the Resolver rule that you associated with the VPC that is specified by ``VPCId``.","replaceOnChanges":true},"vpcId":{"type":"string","description":"The ID of the VPC that you associated the Resolver rule with.","replaceOnChanges":true}},"type":"object","required":["resolverRuleAssociationId","resolverRuleId","vpcId"],"inputProperties":{"name":{"type":"string","description":"The name of an association between a Resolver rule and a VPC.\n The name can be up to 64 characters long and can contain letters (a-z, A-Z), numbers (0-9), hyphens (-), underscores (_), and spaces. The name cannot consist of only numbers."},"resolverRuleId":{"type":"string","description":"The ID of the Resolver rule that you associated with the VPC that is specified by ``VPCId``."},"vpcId":{"type":"string","description":"The ID of the VPC that you associated the Resolver rule with."}},"requiredInputs":["resolverRuleId","vpcId"]},"aws-native:rtbfabric:InboundExternalLink":{"description":"Resource Type definition for AWS::RTBFabric::InboundExternalLink Resource Type","properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"domainName":{"type":"string"},"gatewayId":{"type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkAttributes"},"linkId":{"type":"string"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkLogSettings"},"linkStatus":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkStatus"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedTimestamp":{"type":"string"}},"type":"object","required":["arn","createdTimestamp","domainName","gatewayId","linkId","linkLogSettings","linkStatus","updatedTimestamp"],"inputProperties":{"gatewayId":{"type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkAttributes"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkLogSettings"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["gatewayId","linkLogSettings"]},"aws-native:rtbfabric:Link":{"description":"Resource Type definition for AWS::RTBFabric::Link Resource Type","properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"gatewayId":{"type":"string","description":"The unique identifier of the gateway."},"httpResponderAllowed":{"type":"boolean","description":"Boolean to specify if an HTTP responder is allowed."},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:LinkAttributes","description":"Attributes of the link."},"linkDirection":{"$ref":"#/types/aws-native:rtbfabric:LinkDirection"},"linkId":{"type":"string","description":"The unique identifier of the link."},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:LinkLogSettings","description":"Settings for the application logs."},"linkStatus":{"$ref":"#/types/aws-native:rtbfabric:LinkStatus"},"moduleConfigurationList":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:LinkModuleConfiguration"}},"peerGatewayId":{"type":"string","description":"The unique identifier of the peer gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs of the tag or tags to assign to the resource."},"updatedTimestamp":{"type":"string"}},"type":"object","required":["arn","createdTimestamp","gatewayId","linkDirection","linkId","linkLogSettings","linkStatus","peerGatewayId","updatedTimestamp"],"inputProperties":{"gatewayId":{"type":"string","description":"The unique identifier of the gateway."},"httpResponderAllowed":{"type":"boolean","description":"Boolean to specify if an HTTP responder is allowed."},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:LinkAttributes","description":"Attributes of the link."},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:LinkLogSettings","description":"Settings for the application logs."},"moduleConfigurationList":{"type":"array","items":{"$ref":"#/types/aws-native:rtbfabric:LinkModuleConfiguration"}},"peerGatewayId":{"type":"string","description":"The unique identifier of the peer gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs of the tag or tags to assign to the resource."}},"requiredInputs":["gatewayId","linkLogSettings","peerGatewayId"]},"aws-native:rtbfabric:OutboundExternalLink":{"description":"Resource Type definition for AWS::RTBFabric::OutboundExternalLink Resource Type","properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"gatewayId":{"type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkAttributes"},"linkId":{"type":"string"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkLogSettings"},"linkStatus":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkStatus"},"publicEndpoint":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"updatedTimestamp":{"type":"string"}},"type":"object","required":["arn","createdTimestamp","gatewayId","linkId","linkLogSettings","linkStatus","publicEndpoint","updatedTimestamp"],"inputProperties":{"gatewayId":{"type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkAttributes"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkLogSettings"},"publicEndpoint":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["gatewayId","linkLogSettings","publicEndpoint"]},"aws-native:rtbfabric:RequesterGateway":{"description":"Resource Type definition for AWS::RTBFabric::RequesterGateway Resource Type.","properties":{"activeLinksCount":{"type":"integer"},"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"description":{"type":"string","description":"An optional description for the requester gateway."},"domainName":{"type":"string"},"gatewayId":{"type":"string"},"requesterGatewayStatus":{"$ref":"#/types/aws-native:rtbfabric:RequesterGatewayStatus"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the security groups."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs of the tag or tags to assign to the resource."},"totalLinksCount":{"type":"integer"},"updatedTimestamp":{"type":"string"},"vpcId":{"type":"string","description":"The unique identifier of the Virtual Private Cloud (VPC)."}},"type":"object","required":["activeLinksCount","arn","createdTimestamp","domainName","gatewayId","requesterGatewayStatus","securityGroupIds","subnetIds","totalLinksCount","updatedTimestamp","vpcId"],"inputProperties":{"description":{"type":"string","description":"An optional description for the requester gateway."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the security groups."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs of the tag or tags to assign to the resource."},"vpcId":{"type":"string","description":"The unique identifier of the Virtual Private Cloud (VPC)."}},"requiredInputs":["securityGroupIds","subnetIds","vpcId"]},"aws-native:rtbfabric:ResponderGateway":{"description":"Resource Type definition for AWS::RTBFabric::ResponderGateway Resource Type","properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"description":{"type":"string","description":"An optional description for the responder gateway."},"domainName":{"type":"string","description":"The domain name for the responder gateway."},"gatewayId":{"type":"string"},"managedEndpointConfiguration":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayManagedEndpointConfiguration","description":"The configuration for the managed endpoint."},"port":{"type":"integer","description":"The networking port to use."},"protocol":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayProtocol","description":"The networking protocol to use."},"responderGatewayStatus":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayStatus"},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the security groups."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs of the tag or tags to assign to the resource."},"trustStoreConfiguration":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayTrustStoreConfiguration","description":"The configuration of the trust store."},"updatedTimestamp":{"type":"string"},"vpcId":{"type":"string","description":"The unique identifier of the Virtual Private Cloud (VPC)."}},"type":"object","required":["arn","createdTimestamp","gatewayId","port","protocol","responderGatewayStatus","securityGroupIds","subnetIds","updatedTimestamp","vpcId"],"inputProperties":{"description":{"type":"string","description":"An optional description for the responder gateway."},"domainName":{"type":"string","description":"The domain name for the responder gateway."},"managedEndpointConfiguration":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayManagedEndpointConfiguration","description":"The configuration for the managed endpoint."},"port":{"type":"integer","description":"The networking port to use."},"protocol":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayProtocol","description":"The networking protocol to use."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the security groups."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The unique identifiers of the subnets."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A map of the key-value pairs of the tag or tags to assign to the resource."},"trustStoreConfiguration":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayTrustStoreConfiguration","description":"The configuration of the trust store."},"vpcId":{"type":"string","description":"The unique identifier of the Virtual Private Cloud (VPC)."}},"requiredInputs":["port","protocol","securityGroupIds","subnetIds","vpcId"]},"aws-native:rum:AppMonitor":{"description":"Resource Type definition for AWS::RUM::AppMonitor","properties":{"appMonitorConfiguration":{"$ref":"#/types/aws-native:rum:AppMonitorConfiguration","description":"A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include `AppMonitorConfiguration` , you must set up your own authorization method. For more information, see [Authorize your application to send data to AWS](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html) .\n\nIf you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions."},"awsId":{"type":"string","description":"The unique ID of the new app monitor."},"customEvents":{"$ref":"#/types/aws-native:rum:AppMonitorCustomEvents","description":"Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are `DISABLED` ."},"cwLogEnabled":{"type":"boolean","description":"Data collected by RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether RUM sends a copy of this telemetry data to CWLlong in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur CWLlong charges. If you omit this parameter, the default is false"},"deobfuscationConfiguration":{"$ref":"#/types/aws-native:rum:AppMonitorDeobfuscationConfiguration","description":"A structure that contains the configuration for how an app monitor can deobfuscate stack traces."},"domain":{"type":"string","description":"The top-level internet domain name for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list."},"domainList":{"type":"array","items":{"type":"string"},"description":"The top-level internet domain names for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list."},"name":{"type":"string","description":"A name for the app monitor","replaceOnChanges":true},"platform":{"$ref":"#/types/aws-native:rum:AppMonitorPlatform","replaceOnChanges":true},"resourcePolicy":{"$ref":"#/types/aws-native:rum:AppMonitorResourcePolicy","description":"Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Assigns one or more tags (key-value pairs) to the app monitor.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.\n\nTags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters.\n\nYou can associate as many as 50 tags with an app monitor.\n\nFor more information, see [Tagging AWS resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) ."}},"type":"object","required":["awsId","name"],"inputProperties":{"appMonitorConfiguration":{"$ref":"#/types/aws-native:rum:AppMonitorConfiguration","description":"A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include `AppMonitorConfiguration` , you must set up your own authorization method. For more information, see [Authorize your application to send data to AWS](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html) .\n\nIf you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions."},"customEvents":{"$ref":"#/types/aws-native:rum:AppMonitorCustomEvents","description":"Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are `DISABLED` ."},"cwLogEnabled":{"type":"boolean","description":"Data collected by RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether RUM sends a copy of this telemetry data to CWLlong in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur CWLlong charges. If you omit this parameter, the default is false"},"deobfuscationConfiguration":{"$ref":"#/types/aws-native:rum:AppMonitorDeobfuscationConfiguration","description":"A structure that contains the configuration for how an app monitor can deobfuscate stack traces."},"domain":{"type":"string","description":"The top-level internet domain name for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list."},"domainList":{"type":"array","items":{"type":"string"},"description":"The top-level internet domain names for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list."},"name":{"type":"string","description":"A name for the app monitor"},"platform":{"$ref":"#/types/aws-native:rum:AppMonitorPlatform"},"resourcePolicy":{"$ref":"#/types/aws-native:rum:AppMonitorResourcePolicy","description":"Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Assigns one or more tags (key-value pairs) to the app monitor.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.\n\nTags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters.\n\nYou can associate as many as 50 tags with an app monitor.\n\nFor more information, see [Tagging AWS resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) ."}}},"aws-native:s3:AccessGrant":{"description":"The AWS::S3::AccessGrant resource is an Amazon S3 resource type representing permissions to a specific S3 bucket or prefix hosted in an S3 Access Grants instance. ","properties":{"accessGrantArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified access grant."},"accessGrantId":{"type":"string","description":"The ID assigned to this access grant."},"accessGrantsLocationConfiguration":{"$ref":"#/types/aws-native:s3:AccessGrantsLocationConfiguration","description":"The configuration options of the grant location, which is the S3 path to the data to which you are granting access."},"accessGrantsLocationId":{"type":"string","description":"The custom S3 location to be accessed by the grantee"},"applicationArn":{"type":"string","description":"The ARN of the application grantees will use to access the location"},"grantScope":{"type":"string","description":"The S3 path of the data to which you are granting access. It is a combination of the S3 path of the registered location and the subprefix."},"grantee":{"$ref":"#/types/aws-native:s3:AccessGrantGrantee","description":"The principal who will be granted permission to access S3."},"permission":{"$ref":"#/types/aws-native:s3:AccessGrantPermission","description":"The level of access to be afforded to the grantee"},"s3PrefixType":{"$ref":"#/types/aws-native:s3:AccessGrantS3PrefixType","description":"The type of S3SubPrefix.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The AWS resource tags that you are adding to the access grant. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources.","replaceOnChanges":true}},"type":"object","required":["accessGrantArn","accessGrantId","accessGrantsLocationId","grantScope","grantee","permission"],"inputProperties":{"accessGrantsLocationConfiguration":{"$ref":"#/types/aws-native:s3:AccessGrantsLocationConfiguration","description":"The configuration options of the grant location, which is the S3 path to the data to which you are granting access."},"accessGrantsLocationId":{"type":"string","description":"The custom S3 location to be accessed by the grantee"},"applicationArn":{"type":"string","description":"The ARN of the application grantees will use to access the location"},"grantee":{"$ref":"#/types/aws-native:s3:AccessGrantGrantee","description":"The principal who will be granted permission to access S3."},"permission":{"$ref":"#/types/aws-native:s3:AccessGrantPermission","description":"The level of access to be afforded to the grantee"},"s3PrefixType":{"$ref":"#/types/aws-native:s3:AccessGrantS3PrefixType","description":"The type of S3SubPrefix."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The AWS resource tags that you are adding to the access grant. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources."}},"requiredInputs":["accessGrantsLocationId","grantee","permission"]},"aws-native:s3:AccessGrantsInstance":{"description":"The AWS::S3::AccessGrantsInstance resource is an Amazon S3 resource type that hosts Access Grants and their associated locations","properties":{"accessGrantsInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified Access Grants instance."},"accessGrantsInstanceId":{"type":"string","description":"A unique identifier for the specified access grants instance."},"identityCenterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified AWS Identity Center."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The AWS resource tags that you are adding to the S3 Access Grants instance. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources.","replaceOnChanges":true}},"type":"object","required":["accessGrantsInstanceArn","accessGrantsInstanceId"],"inputProperties":{"identityCenterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified AWS Identity Center."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The AWS resource tags that you are adding to the S3 Access Grants instance. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources."}}},"aws-native:s3:AccessGrantsLocation":{"description":"The AWS::S3::AccessGrantsLocation resource is an Amazon S3 resource type hosted in an access grants instance which can be the target of S3 access grants.","properties":{"accessGrantsLocationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified Access Grants location."},"accessGrantsLocationId":{"type":"string","description":"The unique identifier for the specified Access Grants location."},"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the access grant location's associated IAM role."},"locationScope":{"type":"string","description":"Descriptor for where the location actually points"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The AWS resource tags that you are adding to the S3 Access Grants location. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources.","replaceOnChanges":true}},"type":"object","required":["accessGrantsLocationArn","accessGrantsLocationId","iamRoleArn","locationScope"],"inputProperties":{"iamRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the access grant location's associated IAM role."},"locationScope":{"type":"string","description":"Descriptor for where the location actually points"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The AWS resource tags that you are adding to the S3 Access Grants location. Each tag is a label consisting of a user-defined key and value. Tags can help you manage, identify, organize, search for, and filter resources."}},"requiredInputs":["iamRoleArn","locationScope"]},"aws-native:s3:AccessPoint":{"description":"The AWS::S3::AccessPoint resource is an Amazon S3 resource type that you can use to access buckets.","properties":{"alias":{"type":"string","description":"The alias of this Access Point. This alias can be used for compatibility purposes with other AWS services and third-party applications."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified accesspoint."},"bucket":{"type":"string","description":"The name of the bucket that you want to associate this Access Point with.","replaceOnChanges":true},"bucketAccountId":{"type":"string","description":"The AWS account ID associated with the S3 bucket associated with this access point.","replaceOnChanges":true},"name":{"type":"string","description":"The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name.","replaceOnChanges":true},"networkOrigin":{"$ref":"#/types/aws-native:s3:AccessPointNetworkOrigin","description":"Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies."},"policy":{"$ref":"pulumi.json#/Any","description":"The Access Point Policy you want to apply to this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::AccessPoint` for more information about the expected schema for this property."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this S3 Access Point."},"vpcConfiguration":{"$ref":"#/types/aws-native:s3:AccessPointVpcConfiguration","description":"If you include this field, Amazon S3 restricts access to this Access Point to requests from the specified Virtual Private Cloud (VPC).","replaceOnChanges":true}},"type":"object","required":["alias","arn","bucket","networkOrigin"],"inputProperties":{"bucket":{"type":"string","description":"The name of the bucket that you want to associate this Access Point with."},"bucketAccountId":{"type":"string","description":"The AWS account ID associated with the S3 bucket associated with this access point."},"name":{"type":"string","description":"The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name."},"policy":{"$ref":"pulumi.json#/Any","description":"The Access Point Policy you want to apply to this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::AccessPoint` for more information about the expected schema for this property."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this S3 Access Point."},"vpcConfiguration":{"$ref":"#/types/aws-native:s3:AccessPointVpcConfiguration","description":"If you include this field, Amazon S3 restricts access to this Access Point to requests from the specified Virtual Private Cloud (VPC)."}},"requiredInputs":["bucket"]},"aws-native:s3:Bucket":{"description":"The ``AWS::S3::Bucket`` resource creates an Amazon S3 bucket in the same AWS Region where you create the AWS CloudFormation stack.\n To control how AWS CloudFormation handles the bucket when the stack is deleted, you can set a deletion policy for your bucket. You can choose to *retain* the bucket or to *delete* the bucket. For more information, see [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html).\n  You can only delete empty buckets. Deletion fails for buckets that have contents.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var s3Bucket = new AwsNative.S3.Bucket(\"s3Bucket\");\n\n    var recordingConfiguration = new AwsNative.Ivs.RecordingConfiguration(\"recordingConfiguration\", new()\n    {\n        Name = \"MyRecordingConfiguration\",\n        DestinationConfiguration = new AwsNative.Ivs.Inputs.RecordingConfigurationDestinationConfigurationArgs\n        {\n            S3 = new AwsNative.Ivs.Inputs.RecordingConfigurationS3DestinationConfigurationArgs\n            {\n                BucketName = s3Bucket.Id,\n            },\n        },\n        ThumbnailConfiguration = new AwsNative.Ivs.Inputs.RecordingConfigurationThumbnailConfigurationArgs\n        {\n            RecordingMode = AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationRecordingMode.Interval,\n            TargetIntervalSeconds = 60,\n            Storage = new[]\n            {\n                AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Sequential,\n                AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Latest,\n            },\n            Resolution = AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationResolution.Hd,\n        },\n        RenditionConfiguration = new AwsNative.Ivs.Inputs.RecordingConfigurationRenditionConfigurationArgs\n        {\n            RenditionSelection = AwsNative.Ivs.RecordingConfigurationRenditionConfigurationRenditionSelection.Custom,\n            Renditions = new[]\n            {\n                AwsNative.Ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Hd,\n                AwsNative.Ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Sd,\n            },\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            s3Bucket,\n        },\n    });\n\n    var channel = new AwsNative.Ivs.Channel(\"channel\", new()\n    {\n        Name = \"MyRecordedChannel\",\n        RecordingConfigurationArn = recordingConfiguration.Id,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            recordingConfiguration,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivs\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/s3\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ts3Bucket, err := s3.NewBucket(ctx, \"s3Bucket\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\trecordingConfiguration, err := ivs.NewRecordingConfiguration(ctx, \"recordingConfiguration\", \u0026ivs.RecordingConfigurationArgs{\n\t\t\tName: pulumi.String(\"MyRecordingConfiguration\"),\n\t\t\tDestinationConfiguration: \u0026ivs.RecordingConfigurationDestinationConfigurationArgs{\n\t\t\t\tS3: \u0026ivs.RecordingConfigurationS3DestinationConfigurationArgs{\n\t\t\t\t\tBucketName: s3Bucket.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t\tThumbnailConfiguration: \u0026ivs.RecordingConfigurationThumbnailConfigurationArgs{\n\t\t\t\tRecordingMode:         ivs.RecordingConfigurationThumbnailConfigurationRecordingModeInterval,\n\t\t\t\tTargetIntervalSeconds: pulumi.Int(60),\n\t\t\t\tStorage: ivs.RecordingConfigurationThumbnailConfigurationStorageItemArray{\n\t\t\t\t\tivs.RecordingConfigurationThumbnailConfigurationStorageItemSequential,\n\t\t\t\t\tivs.RecordingConfigurationThumbnailConfigurationStorageItemLatest,\n\t\t\t\t},\n\t\t\t\tResolution: ivs.RecordingConfigurationThumbnailConfigurationResolutionHd,\n\t\t\t},\n\t\t\tRenditionConfiguration: \u0026ivs.RecordingConfigurationRenditionConfigurationArgs{\n\t\t\t\tRenditionSelection: ivs.RecordingConfigurationRenditionConfigurationRenditionSelectionCustom,\n\t\t\t\tRenditions: ivs.RecordingConfigurationRenditionConfigurationRenditionsItemArray{\n\t\t\t\t\tivs.RecordingConfigurationRenditionConfigurationRenditionsItemHd,\n\t\t\t\t\tivs.RecordingConfigurationRenditionConfigurationRenditionsItemSd,\n\t\t\t\t},\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\ts3Bucket,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ivs.NewChannel(ctx, \"channel\", \u0026ivs.ChannelArgs{\n\t\t\tName:                      pulumi.String(\"MyRecordedChannel\"),\n\t\t\tRecordingConfigurationArn: recordingConfiguration.ID(),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\trecordingConfiguration,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst s3Bucket = new aws_native.s3.Bucket(\"s3Bucket\", {});\nconst recordingConfiguration = new aws_native.ivs.RecordingConfiguration(\"recordingConfiguration\", {\n    name: \"MyRecordingConfiguration\",\n    destinationConfiguration: {\n        s3: {\n            bucketName: s3Bucket.id,\n        },\n    },\n    thumbnailConfiguration: {\n        recordingMode: aws_native.ivs.RecordingConfigurationThumbnailConfigurationRecordingMode.Interval,\n        targetIntervalSeconds: 60,\n        storage: [\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Sequential,\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Latest,\n        ],\n        resolution: aws_native.ivs.RecordingConfigurationThumbnailConfigurationResolution.Hd,\n    },\n    renditionConfiguration: {\n        renditionSelection: aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionSelection.Custom,\n        renditions: [\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Hd,\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Sd,\n        ],\n    },\n}, {\n    dependsOn: [s3Bucket],\n});\nconst channel = new aws_native.ivs.Channel(\"channel\", {\n    name: \"MyRecordedChannel\",\n    recordingConfigurationArn: recordingConfiguration.id,\n}, {\n    dependsOn: [recordingConfiguration],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ns3_bucket = aws_native.s3.Bucket(\"s3Bucket\")\nrecording_configuration = aws_native.ivs.RecordingConfiguration(\"recordingConfiguration\",\n    name=\"MyRecordingConfiguration\",\n    destination_configuration={\n        \"s3\": {\n            \"bucket_name\": s3_bucket.id,\n        },\n    },\n    thumbnail_configuration={\n        \"recording_mode\": aws_native.ivs.RecordingConfigurationThumbnailConfigurationRecordingMode.INTERVAL,\n        \"target_interval_seconds\": 60,\n        \"storage\": [\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.SEQUENTIAL,\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.LATEST,\n        ],\n        \"resolution\": aws_native.ivs.RecordingConfigurationThumbnailConfigurationResolution.HD,\n    },\n    rendition_configuration={\n        \"rendition_selection\": aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionSelection.CUSTOM,\n        \"renditions\": [\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.HD,\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.SD,\n        ],\n    },\n    opts = pulumi.ResourceOptions(depends_on=[s3_bucket]))\nchannel = aws_native.ivs.Channel(\"channel\",\n    name=\"MyRecordedChannel\",\n    recording_configuration_arn=recording_configuration.id,\n    opts = pulumi.ResourceOptions(depends_on=[recording_configuration]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var s3Bucket = new AwsNative.S3.Bucket(\"s3Bucket\");\n\n    var recordingConfiguration = new AwsNative.Ivs.RecordingConfiguration(\"recordingConfiguration\", new()\n    {\n        Name = \"MyRecordingConfiguration\",\n        DestinationConfiguration = new AwsNative.Ivs.Inputs.RecordingConfigurationDestinationConfigurationArgs\n        {\n            S3 = new AwsNative.Ivs.Inputs.RecordingConfigurationS3DestinationConfigurationArgs\n            {\n                BucketName = s3Bucket.Id,\n            },\n        },\n        ThumbnailConfiguration = new AwsNative.Ivs.Inputs.RecordingConfigurationThumbnailConfigurationArgs\n        {\n            RecordingMode = AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationRecordingMode.Interval,\n            TargetIntervalSeconds = 60,\n            Resolution = AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationResolution.Hd,\n            Storage = new[]\n            {\n                AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Sequential,\n                AwsNative.Ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Latest,\n            },\n        },\n        RenditionConfiguration = new AwsNative.Ivs.Inputs.RecordingConfigurationRenditionConfigurationArgs\n        {\n            RenditionSelection = AwsNative.Ivs.RecordingConfigurationRenditionConfigurationRenditionSelection.Custom,\n            Renditions = new[]\n            {\n                AwsNative.Ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Hd,\n                AwsNative.Ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Sd,\n            },\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            s3Bucket,\n        },\n    });\n\n    var channel = new AwsNative.Ivs.Channel(\"channel\", new()\n    {\n        Name = \"MyRecordedChannel\",\n        RecordingConfigurationArn = recordingConfiguration.Id,\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            recordingConfiguration,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ivs\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/s3\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ts3Bucket, err := s3.NewBucket(ctx, \"s3Bucket\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\trecordingConfiguration, err := ivs.NewRecordingConfiguration(ctx, \"recordingConfiguration\", \u0026ivs.RecordingConfigurationArgs{\n\t\t\tName: pulumi.String(\"MyRecordingConfiguration\"),\n\t\t\tDestinationConfiguration: \u0026ivs.RecordingConfigurationDestinationConfigurationArgs{\n\t\t\t\tS3: \u0026ivs.RecordingConfigurationS3DestinationConfigurationArgs{\n\t\t\t\t\tBucketName: s3Bucket.ID(),\n\t\t\t\t},\n\t\t\t},\n\t\t\tThumbnailConfiguration: \u0026ivs.RecordingConfigurationThumbnailConfigurationArgs{\n\t\t\t\tRecordingMode:         ivs.RecordingConfigurationThumbnailConfigurationRecordingModeInterval,\n\t\t\t\tTargetIntervalSeconds: pulumi.Int(60),\n\t\t\t\tResolution:            ivs.RecordingConfigurationThumbnailConfigurationResolutionHd,\n\t\t\t\tStorage: ivs.RecordingConfigurationThumbnailConfigurationStorageItemArray{\n\t\t\t\t\tivs.RecordingConfigurationThumbnailConfigurationStorageItemSequential,\n\t\t\t\t\tivs.RecordingConfigurationThumbnailConfigurationStorageItemLatest,\n\t\t\t\t},\n\t\t\t},\n\t\t\tRenditionConfiguration: \u0026ivs.RecordingConfigurationRenditionConfigurationArgs{\n\t\t\t\tRenditionSelection: ivs.RecordingConfigurationRenditionConfigurationRenditionSelectionCustom,\n\t\t\t\tRenditions: ivs.RecordingConfigurationRenditionConfigurationRenditionsItemArray{\n\t\t\t\t\tivs.RecordingConfigurationRenditionConfigurationRenditionsItemHd,\n\t\t\t\t\tivs.RecordingConfigurationRenditionConfigurationRenditionsItemSd,\n\t\t\t\t},\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\ts3Bucket,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ivs.NewChannel(ctx, \"channel\", \u0026ivs.ChannelArgs{\n\t\t\tName:                      pulumi.String(\"MyRecordedChannel\"),\n\t\t\tRecordingConfigurationArn: recordingConfiguration.ID(),\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\trecordingConfiguration,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst s3Bucket = new aws_native.s3.Bucket(\"s3Bucket\", {});\nconst recordingConfiguration = new aws_native.ivs.RecordingConfiguration(\"recordingConfiguration\", {\n    name: \"MyRecordingConfiguration\",\n    destinationConfiguration: {\n        s3: {\n            bucketName: s3Bucket.id,\n        },\n    },\n    thumbnailConfiguration: {\n        recordingMode: aws_native.ivs.RecordingConfigurationThumbnailConfigurationRecordingMode.Interval,\n        targetIntervalSeconds: 60,\n        resolution: aws_native.ivs.RecordingConfigurationThumbnailConfigurationResolution.Hd,\n        storage: [\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Sequential,\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.Latest,\n        ],\n    },\n    renditionConfiguration: {\n        renditionSelection: aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionSelection.Custom,\n        renditions: [\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Hd,\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.Sd,\n        ],\n    },\n}, {\n    dependsOn: [s3Bucket],\n});\nconst channel = new aws_native.ivs.Channel(\"channel\", {\n    name: \"MyRecordedChannel\",\n    recordingConfigurationArn: recordingConfiguration.id,\n}, {\n    dependsOn: [recordingConfiguration],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ns3_bucket = aws_native.s3.Bucket(\"s3Bucket\")\nrecording_configuration = aws_native.ivs.RecordingConfiguration(\"recordingConfiguration\",\n    name=\"MyRecordingConfiguration\",\n    destination_configuration={\n        \"s3\": {\n            \"bucket_name\": s3_bucket.id,\n        },\n    },\n    thumbnail_configuration={\n        \"recording_mode\": aws_native.ivs.RecordingConfigurationThumbnailConfigurationRecordingMode.INTERVAL,\n        \"target_interval_seconds\": 60,\n        \"resolution\": aws_native.ivs.RecordingConfigurationThumbnailConfigurationResolution.HD,\n        \"storage\": [\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.SEQUENTIAL,\n            aws_native.ivs.RecordingConfigurationThumbnailConfigurationStorageItem.LATEST,\n        ],\n    },\n    rendition_configuration={\n        \"rendition_selection\": aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionSelection.CUSTOM,\n        \"renditions\": [\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.HD,\n            aws_native.ivs.RecordingConfigurationRenditionConfigurationRenditionsItem.SD,\n        ],\n    },\n    opts = pulumi.ResourceOptions(depends_on=[s3_bucket]))\nchannel = aws_native.ivs.Channel(\"channel\",\n    name=\"MyRecordedChannel\",\n    recording_configuration_arn=recording_configuration.id,\n    opts = pulumi.ResourceOptions(depends_on=[recording_configuration]))\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var latestAmiId = config.Get(\"latestAmiId\") ?? \"\";\n    var latestAmiIdValue = latestAmiId == \"\" ? \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" : AwsNative.GetSsmParameterString.Invoke(new()\n    {\n        Name = latestAmiId,\n    }).Apply(invoke =\u003e invoke.Value);\n\n    var gitHubOwner = config.Require(\"gitHubOwner\");\n    var gitHubRepo = config.Require(\"gitHubRepo\");\n    var gitHubBranch = config.Require(\"gitHubBranch\");\n    var ssmAssocLogs = new AwsNative.S3.Bucket(\"ssmAssocLogs\");\n\n    var ssmInstanceRole = new AwsNative.Iam.Role(\"ssmInstanceRole\", new()\n    {\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                                \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                                \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                                \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                                \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                                \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                            },\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"ssm-custom-s3-policy\",\n            },\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                                \"s3:PutObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:ListBucket\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                                \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                            },\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"s3-instance-bucket-policy\",\n            },\n        },\n        Path = \"/\",\n        ManagedPolicyArns = new[]\n        {\n            \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n        },\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"ec2.amazonaws.com\",\n                            \"ssm.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n    });\n\n    var ssmInstanceProfile = new AwsNative.Iam.InstanceProfile(\"ssmInstanceProfile\", new()\n    {\n        Roles = new[]\n        {\n            \"SSMInstanceRole\",\n        },\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"LatestAmiId\",\n        InstanceType = \"t3.small\",\n        IamInstanceProfile = \"SSMInstanceProfile\",\n    });\n\n    var ansibleAssociation = new AwsNative.Ssm.Association(\"ansibleAssociation\", new()\n    {\n        Name = \"AWS-ApplyAnsiblePlaybooks\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"InstanceIds\",\n                Values = new[]\n                {\n                    \"EC2Instance\",\n                },\n            },\n        },\n        OutputLocation = new AwsNative.Ssm.Inputs.AssociationInstanceAssociationOutputLocationArgs\n        {\n            S3Location = new AwsNative.Ssm.Inputs.AssociationS3OutputLocationArgs\n            {\n                OutputS3BucketName = \"SSMAssocLogs\",\n                OutputS3KeyPrefix = \"logs/\",\n            },\n        },\n        Parameters = \n        {\n            { \"sourceType\", new[]\n            {\n                \"GitHub\",\n            } },\n            { \"sourceInfo\", new[]\n            {\n                @\"{\"\"owner\"\":\"\"${GitHubOwner}\"\",\n\"\"repository\"\":\"\"${GitHubRepo}\"\",\n\"\"path\"\":\"\"\"\",\n\"\"getOptions\"\":\"\"branch:${GitHubBranch}\"\"}\n\",\n            } },\n            { \"installDependencies\", new[]\n            {\n                \"True\",\n            } },\n            { \"playbookFile\", new[]\n            {\n                \"playbook.yml\",\n            } },\n            { \"extraVariables\", new[]\n            {\n                \"SSM=True\",\n            } },\n            { \"check\", new[]\n            {\n                \"False\",\n            } },\n            { \"verbose\", new[]\n            {\n                \"-v\",\n            } },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"webServerPublic\"] = \"EC2Instance.PublicDnsName\",\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/s3\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tlatestAmiId := \"\"\n\t\tif param := cfg.Get(\"latestAmiId\"); param != \"\" {\n\t\t\tlatestAmiId = param\n\t\t}\n\t\tvar tmp0 string\n\t\tif latestAmiId == \"\" {\n\t\t\ttmp0 = \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\"\n\t\t} else {\n\t\t\ttmp0 = awsnative.GetSsmParameterString(ctx, \u0026aws.GetSsmParameterStringArgs{\n\t\t\t\tName: latestAmiId,\n\t\t\t}, nil).Value\n\t\t}\n\t\t_ := tmp0\n\t\tgitHubOwner := cfg.Require(\"gitHubOwner\")\n\t\tgitHubRepo := cfg.Require(\"gitHubRepo\")\n\t\tgitHubBranch := cfg.Require(\"gitHubBranch\")\n\t\t_, err := s3.NewBucket(ctx, \"ssmAssocLogs\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewRole(ctx, \"ssmInstanceRole\", \u0026iam.RoleArgs{\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"ssm-custom-s3-policy\"),\n\t\t\t\t},\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t\t\"s3:PutObject\",\n\t\t\t\t\t\t\t\t\t\"s3:PutObjectAcl\",\n\t\t\t\t\t\t\t\t\t\"s3:ListBucket\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"s3-instance-bucket-policy\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\"),\n\t\t\t},\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"ec2.amazonaws.com\",\n\t\t\t\t\t\t\t\t\"ssm.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewInstanceProfile(ctx, \"ssmInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"SSMInstanceRole\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId:            pulumi.String(\"LatestAmiId\"),\n\t\t\tInstanceType:       pulumi.String(\"t3.small\"),\n\t\t\tIamInstanceProfile: pulumi.String(\"SSMInstanceProfile\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewAssociation(ctx, \"ansibleAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tName: pulumi.String(\"AWS-ApplyAnsiblePlaybooks\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"InstanceIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"EC2Instance\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tOutputLocation: \u0026ssm.AssociationInstanceAssociationOutputLocationArgs{\n\t\t\t\tS3Location: \u0026ssm.AssociationS3OutputLocationArgs{\n\t\t\t\t\tOutputS3BucketName: pulumi.String(\"SSMAssocLogs\"),\n\t\t\t\t\tOutputS3KeyPrefix:  pulumi.String(\"logs/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: pulumi.StringArrayMap{\n\t\t\t\t\"sourceType\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"GitHub\"),\n\t\t\t\t},\n\t\t\t\t\"sourceInfo\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"{\\\"owner\\\":\\\"${GitHubOwner}\\\",\\n\\\"repository\\\":\\\"${GitHubRepo}\\\",\\n\\\"path\\\":\\\"\\\",\\n\\\"getOptions\\\":\\\"branch:${GitHubBranch}\\\"}\\n\"),\n\t\t\t\t},\n\t\t\t\t\"installDependencies\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"True\"),\n\t\t\t\t},\n\t\t\t\t\"playbookFile\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"playbook.yml\"),\n\t\t\t\t},\n\t\t\t\t\"extraVariables\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"SSM=True\"),\n\t\t\t\t},\n\t\t\t\t\"check\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"False\"),\n\t\t\t\t},\n\t\t\t\t\"verbose\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"-v\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"webServerPublic\", pulumi.String(\"EC2Instance.PublicDnsName\"))\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst latestAmiId = config.get(\"latestAmiId\") || \"\";\nconst latestAmiIdValue = latestAmiId == \"\" ? \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" : aws_native.getSsmParameterString({\n    name: latestAmiId,\n}).then(invoke =\u003e invoke.value);\nconst gitHubOwner = config.require(\"gitHubOwner\");\nconst gitHubRepo = config.require(\"gitHubRepo\");\nconst gitHubBranch = config.require(\"gitHubBranch\");\nconst ssmAssocLogs = new aws_native.s3.Bucket(\"ssmAssocLogs\", {});\nconst ssmInstanceRole = new aws_native.iam.Role(\"ssmInstanceRole\", {\n    policies: [\n        {\n            policyDocument: {\n                version: \"2012-10-17\",\n                statement: [{\n                    action: [\"s3:GetObject\"],\n                    resource: [\n                        \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                        \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                        \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                    ],\n                    effect: \"Allow\",\n                }],\n            },\n            policyName: \"ssm-custom-s3-policy\",\n        },\n        {\n            policyDocument: {\n                version: \"2012-10-17\",\n                statement: [{\n                    action: [\n                        \"s3:GetObject\",\n                        \"s3:PutObject\",\n                        \"s3:PutObjectAcl\",\n                        \"s3:ListBucket\",\n                    ],\n                    resource: [\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                    ],\n                    effect: \"Allow\",\n                }],\n            },\n            policyName: \"s3-instance-bucket-policy\",\n        },\n    ],\n    path: \"/\",\n    managedPolicyArns: [\"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\"],\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n});\nconst ssmInstanceProfile = new aws_native.iam.InstanceProfile(\"ssmInstanceProfile\", {roles: [\"SSMInstanceRole\"]});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"LatestAmiId\",\n    instanceType: \"t3.small\",\n    iamInstanceProfile: \"SSMInstanceProfile\",\n});\nconst ansibleAssociation = new aws_native.ssm.Association(\"ansibleAssociation\", {\n    name: \"AWS-ApplyAnsiblePlaybooks\",\n    targets: [{\n        key: \"InstanceIds\",\n        values: [\"EC2Instance\"],\n    }],\n    outputLocation: {\n        s3Location: {\n            outputS3BucketName: \"SSMAssocLogs\",\n            outputS3KeyPrefix: \"logs/\",\n        },\n    },\n    parameters: {\n        sourceType: [\"GitHub\"],\n        sourceInfo: [`{\"owner\":\"\\${GitHubOwner}\",\n\"repository\":\"\\${GitHubRepo}\",\n\"path\":\"\",\n\"getOptions\":\"branch:\\${GitHubBranch}\"}\n`],\n        installDependencies: [\"True\"],\n        playbookFile: [\"playbook.yml\"],\n        extraVariables: [\"SSM=True\"],\n        check: [\"False\"],\n        verbose: [\"-v\"],\n    },\n});\nexport const webServerPublic = \"EC2Instance.PublicDnsName\";\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nlatest_ami_id = config.get(\"latestAmiId\")\nif latest_ami_id is None:\n    latest_ami_id = \"\"\nlatest_ami_id_value = \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" if latest_ami_id == \"\" else aws_native.get_ssm_parameter_string(name=latest_ami_id).value\ngit_hub_owner = config.require(\"gitHubOwner\")\ngit_hub_repo = config.require(\"gitHubRepo\")\ngit_hub_branch = config.require(\"gitHubBranch\")\nssm_assoc_logs = aws_native.s3.Bucket(\"ssmAssocLogs\")\nssm_instance_role = aws_native.iam.Role(\"ssmInstanceRole\",\n    policies=[\n        {\n            \"policy_document\": {\n                \"version\": \"2012-10-17\",\n                \"statement\": [{\n                    \"action\": [\"s3:GetObject\"],\n                    \"resource\": [\n                        \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                        \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                        \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                    ],\n                    \"effect\": \"Allow\",\n                }],\n            },\n            \"policy_name\": \"ssm-custom-s3-policy\",\n        },\n        {\n            \"policy_document\": {\n                \"version\": \"2012-10-17\",\n                \"statement\": [{\n                    \"action\": [\n                        \"s3:GetObject\",\n                        \"s3:PutObject\",\n                        \"s3:PutObjectAcl\",\n                        \"s3:ListBucket\",\n                    ],\n                    \"resource\": [\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                    ],\n                    \"effect\": \"Allow\",\n                }],\n            },\n            \"policy_name\": \"s3-instance-bucket-policy\",\n        },\n    ],\n    path=\"/\",\n    managed_policy_arns=[\"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\"],\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    })\nssm_instance_profile = aws_native.iam.InstanceProfile(\"ssmInstanceProfile\", roles=[\"SSMInstanceRole\"])\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"LatestAmiId\",\n    instance_type=\"t3.small\",\n    iam_instance_profile=\"SSMInstanceProfile\")\nansible_association = aws_native.ssm.Association(\"ansibleAssociation\",\n    name=\"AWS-ApplyAnsiblePlaybooks\",\n    targets=[{\n        \"key\": \"InstanceIds\",\n        \"values\": [\"EC2Instance\"],\n    }],\n    output_location={\n        \"s3_location\": {\n            \"output_s3_bucket_name\": \"SSMAssocLogs\",\n            \"output_s3_key_prefix\": \"logs/\",\n        },\n    },\n    parameters={\n        \"sourceType\": [\"GitHub\"],\n        \"sourceInfo\": [\"\"\"{\"owner\":\"${GitHubOwner}\",\n\"repository\":\"${GitHubRepo}\",\n\"path\":\"\",\n\"getOptions\":\"branch:${GitHubBranch}\"}\n\"\"\"],\n        \"installDependencies\": [\"True\"],\n        \"playbookFile\": [\"playbook.yml\"],\n        \"extraVariables\": [\"SSM=True\"],\n        \"check\": [\"False\"],\n        \"verbose\": [\"-v\"],\n    })\npulumi.export(\"webServerPublic\", \"EC2Instance.PublicDnsName\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var latestAmiId = config.Get(\"latestAmiId\") ?? \"\";\n    var latestAmiIdValue = latestAmiId == \"\" ? \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" : AwsNative.GetSsmParameterString.Invoke(new()\n    {\n        Name = latestAmiId,\n    }).Apply(invoke =\u003e invoke.Value);\n\n    var ssmAssocLogs = new AwsNative.S3.Bucket(\"ssmAssocLogs\");\n\n    var ssmInstanceRole = new AwsNative.Iam.Role(\"ssmInstanceRole\", new()\n    {\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                                \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                                \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                                \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                                \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                                \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                            },\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"ssm-custom-s3-policy\",\n            },\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                                \"s3:PutObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:ListBucket\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                                \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                            },\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"s3-instance-bucket-policy\",\n            },\n        },\n        Path = \"/\",\n        ManagedPolicyArns = new[]\n        {\n            \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n            \"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\",\n        },\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"ec2.amazonaws.com\",\n                            \"ssm.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n    });\n\n    var ssmInstanceProfile = new AwsNative.Iam.InstanceProfile(\"ssmInstanceProfile\", new()\n    {\n        Roles = new[]\n        {\n            \"SSMInstanceRole\",\n        },\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"LatestAmiId\",\n        InstanceType = \"t3.medium\",\n        IamInstanceProfile = \"SSMInstanceProfile\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"nginx\",\n                Value = \"yes\",\n            },\n        },\n    });\n\n    var nginxAssociation = new AwsNative.Ssm.Association(\"nginxAssociation\", new()\n    {\n        Name = \"AWS-RunShellScript\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"tag:nginx\",\n                Values = new[]\n                {\n                    \"yes\",\n                },\n            },\n        },\n        OutputLocation = new AwsNative.Ssm.Inputs.AssociationInstanceAssociationOutputLocationArgs\n        {\n            S3Location = new AwsNative.Ssm.Inputs.AssociationS3OutputLocationArgs\n            {\n                OutputS3BucketName = \"SSMAssocLogs\",\n                OutputS3KeyPrefix = \"logs/\",\n            },\n        },\n        Parameters = \n        {\n            { \"commands\", new[]\n            {\n                @\"sudo amazon-linux-extras install nginx1 -y\nsudo service nginx start\n\",\n            } },\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            ec2Instance,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"webServerPublic\"] = \"EC2Instance.PublicDnsName\",\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/s3\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tlatestAmiId := \"\"\n\t\tif param := cfg.Get(\"latestAmiId\"); param != \"\" {\n\t\t\tlatestAmiId = param\n\t\t}\n\t\tvar tmp0 string\n\t\tif latestAmiId == \"\" {\n\t\t\ttmp0 = \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\"\n\t\t} else {\n\t\t\ttmp0 = awsnative.GetSsmParameterString(ctx, \u0026aws.GetSsmParameterStringArgs{\n\t\t\t\tName: latestAmiId,\n\t\t\t}, nil).Value\n\t\t}\n\t\t_ := tmp0\n\t\t_, err := s3.NewBucket(ctx, \"ssmAssocLogs\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewRole(ctx, \"ssmInstanceRole\", \u0026iam.RoleArgs{\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"ssm-custom-s3-policy\"),\n\t\t\t\t},\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t\t\"s3:PutObject\",\n\t\t\t\t\t\t\t\t\t\"s3:PutObjectAcl\",\n\t\t\t\t\t\t\t\t\t\"s3:ListBucket\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"s3-instance-bucket-policy\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\"),\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\"),\n\t\t\t},\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"ec2.amazonaws.com\",\n\t\t\t\t\t\t\t\t\"ssm.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewInstanceProfile(ctx, \"ssmInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"SSMInstanceRole\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tec2Instance, err := ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId:            pulumi.String(\"LatestAmiId\"),\n\t\t\tInstanceType:       pulumi.String(\"t3.medium\"),\n\t\t\tIamInstanceProfile: pulumi.String(\"SSMInstanceProfile\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"nginx\"),\n\t\t\t\t\tValue: pulumi.String(\"yes\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewAssociation(ctx, \"nginxAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tName: pulumi.String(\"AWS-RunShellScript\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"tag:nginx\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"yes\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tOutputLocation: \u0026ssm.AssociationInstanceAssociationOutputLocationArgs{\n\t\t\t\tS3Location: \u0026ssm.AssociationS3OutputLocationArgs{\n\t\t\t\t\tOutputS3BucketName: pulumi.String(\"SSMAssocLogs\"),\n\t\t\t\t\tOutputS3KeyPrefix:  pulumi.String(\"logs/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: pulumi.StringArrayMap{\n\t\t\t\t\"commands\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"sudo amazon-linux-extras install nginx1 -y\\nsudo service nginx start\\n\"),\n\t\t\t\t},\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tec2Instance,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"webServerPublic\", pulumi.String(\"EC2Instance.PublicDnsName\"))\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst latestAmiId = config.get(\"latestAmiId\") || \"\";\nconst latestAmiIdValue = latestAmiId == \"\" ? \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" : aws_native.getSsmParameterString({\n    name: latestAmiId,\n}).then(invoke =\u003e invoke.value);\nconst ssmAssocLogs = new aws_native.s3.Bucket(\"ssmAssocLogs\", {});\nconst ssmInstanceRole = new aws_native.iam.Role(\"ssmInstanceRole\", {\n    policies: [\n        {\n            policyDocument: {\n                version: \"2012-10-17\",\n                statement: [{\n                    action: [\"s3:GetObject\"],\n                    resource: [\n                        \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                        \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                        \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                    ],\n                    effect: \"Allow\",\n                }],\n            },\n            policyName: \"ssm-custom-s3-policy\",\n        },\n        {\n            policyDocument: {\n                version: \"2012-10-17\",\n                statement: [{\n                    action: [\n                        \"s3:GetObject\",\n                        \"s3:PutObject\",\n                        \"s3:PutObjectAcl\",\n                        \"s3:ListBucket\",\n                    ],\n                    resource: [\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                    ],\n                    effect: \"Allow\",\n                }],\n            },\n            policyName: \"s3-instance-bucket-policy\",\n        },\n    ],\n    path: \"/\",\n    managedPolicyArns: [\n        \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n        \"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\",\n    ],\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n});\nconst ssmInstanceProfile = new aws_native.iam.InstanceProfile(\"ssmInstanceProfile\", {roles: [\"SSMInstanceRole\"]});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"LatestAmiId\",\n    instanceType: \"t3.medium\",\n    iamInstanceProfile: \"SSMInstanceProfile\",\n    tags: [{\n        key: \"nginx\",\n        value: \"yes\",\n    }],\n});\nconst nginxAssociation = new aws_native.ssm.Association(\"nginxAssociation\", {\n    name: \"AWS-RunShellScript\",\n    targets: [{\n        key: \"tag:nginx\",\n        values: [\"yes\"],\n    }],\n    outputLocation: {\n        s3Location: {\n            outputS3BucketName: \"SSMAssocLogs\",\n            outputS3KeyPrefix: \"logs/\",\n        },\n    },\n    parameters: {\n        commands: [`sudo amazon-linux-extras install nginx1 -y\nsudo service nginx start\n`],\n    },\n}, {\n    dependsOn: [ec2Instance],\n});\nexport const webServerPublic = \"EC2Instance.PublicDnsName\";\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nlatest_ami_id = config.get(\"latestAmiId\")\nif latest_ami_id is None:\n    latest_ami_id = \"\"\nlatest_ami_id_value = \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" if latest_ami_id == \"\" else aws_native.get_ssm_parameter_string(name=latest_ami_id).value\nssm_assoc_logs = aws_native.s3.Bucket(\"ssmAssocLogs\")\nssm_instance_role = aws_native.iam.Role(\"ssmInstanceRole\",\n    policies=[\n        {\n            \"policy_document\": {\n                \"version\": \"2012-10-17\",\n                \"statement\": [{\n                    \"action\": [\"s3:GetObject\"],\n                    \"resource\": [\n                        \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                        \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                        \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                    ],\n                    \"effect\": \"Allow\",\n                }],\n            },\n            \"policy_name\": \"ssm-custom-s3-policy\",\n        },\n        {\n            \"policy_document\": {\n                \"version\": \"2012-10-17\",\n                \"statement\": [{\n                    \"action\": [\n                        \"s3:GetObject\",\n                        \"s3:PutObject\",\n                        \"s3:PutObjectAcl\",\n                        \"s3:ListBucket\",\n                    ],\n                    \"resource\": [\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                    ],\n                    \"effect\": \"Allow\",\n                }],\n            },\n            \"policy_name\": \"s3-instance-bucket-policy\",\n        },\n    ],\n    path=\"/\",\n    managed_policy_arns=[\n        \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n        \"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\",\n    ],\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    })\nssm_instance_profile = aws_native.iam.InstanceProfile(\"ssmInstanceProfile\", roles=[\"SSMInstanceRole\"])\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"LatestAmiId\",\n    instance_type=\"t3.medium\",\n    iam_instance_profile=\"SSMInstanceProfile\",\n    tags=[{\n        \"key\": \"nginx\",\n        \"value\": \"yes\",\n    }])\nnginx_association = aws_native.ssm.Association(\"nginxAssociation\",\n    name=\"AWS-RunShellScript\",\n    targets=[{\n        \"key\": \"tag:nginx\",\n        \"values\": [\"yes\"],\n    }],\n    output_location={\n        \"s3_location\": {\n            \"output_s3_bucket_name\": \"SSMAssocLogs\",\n            \"output_s3_key_prefix\": \"logs/\",\n        },\n    },\n    parameters={\n        \"commands\": [\"\"\"sudo amazon-linux-extras install nginx1 -y\nsudo service nginx start\n\"\"\"],\n    },\n    opts = pulumi.ResourceOptions(depends_on=[ec2_instance]))\npulumi.export(\"webServerPublic\", \"EC2Instance.PublicDnsName\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var latestAmiId = config.Get(\"latestAmiId\") ?? \"\";\n    var latestAmiIdValue = latestAmiId == \"\" ? \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" : AwsNative.GetSsmParameterString.Invoke(new()\n    {\n        Name = latestAmiId,\n    }).Apply(invoke =\u003e invoke.Value);\n\n    var ssmAssocLogs = new AwsNative.S3.Bucket(\"ssmAssocLogs\");\n\n    var nginxInstallAutomation = new AwsNative.Ssm.Document(\"nginxInstallAutomation\", new()\n    {\n        DocumentType = AwsNative.Ssm.DocumentType.Automation,\n        Content = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"schemaVersion\"] = \"0.3\",\n            [\"description\"] = \"Updates AMI with Linux distribution packages and installs Nginx software\",\n            [\"assumeRole\"] = \"{{AutomationAssumeRole}}\",\n            [\"parameters\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"instanceId\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"description\"] = \"ID of the Instance.\",\n                    [\"type\"] = \"String\",\n                },\n                [\"automationAssumeRole\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"default\"] = \"\",\n                    [\"description\"] = \"(Optional) The ARN of the role that allows Automation to perform the actions on your behalf.\",\n                    [\"type\"] = \"String\",\n                },\n            },\n            [\"mainSteps\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"name\"] = \"updateOSSoftware\",\n                    [\"action\"] = \"aws:runCommand\",\n                    [\"maxAttempts\"] = 3,\n                    [\"timeoutSeconds\"] = 3600,\n                    [\"inputs\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"documentName\"] = \"AWS-RunShellScript\",\n                        [\"instanceIds\"] = new[]\n                        {\n                            \"{{InstanceId}}\",\n                        },\n                        [\"cloudWatchOutputConfig\"] = new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"cloudWatchOutputEnabled\"] = \"true\",\n                        },\n                        [\"parameters\"] = new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"commands\"] = new[]\n                            {\n                                @\"#!/bin/bash\nsudo yum update -y\nneeds-restarting -r\nif [ $? -eq 1 ]\nthen\n        exit 194\nelse\n        exit 0\nfi\n\",\n                            },\n                        },\n                    },\n                },\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"name\"] = \"InstallNginx\",\n                    [\"action\"] = \"aws:runCommand\",\n                    [\"inputs\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"documentName\"] = \"AWS-RunShellScript\",\n                        [\"instanceIds\"] = new[]\n                        {\n                            \"{{InstanceId}}\",\n                        },\n                        [\"cloudWatchOutputConfig\"] = new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"cloudWatchOutputEnabled\"] = \"true\",\n                        },\n                        [\"parameters\"] = new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"commands\"] = new[]\n                            {\n                                @\"sudo amazon-linux-extras install nginx1 -y\nsudo service nginx start\n\",\n                            },\n                        },\n                    },\n                },\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"name\"] = \"TestInstall\",\n                    [\"action\"] = \"aws:runCommand\",\n                    [\"maxAttempts\"] = 3,\n                    [\"timeoutSeconds\"] = 3600,\n                    [\"onFailure\"] = \"Abort\",\n                    [\"inputs\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"documentName\"] = \"AWS-RunShellScript\",\n                        [\"instanceIds\"] = new[]\n                        {\n                            \"{{InstanceId}}\",\n                        },\n                        [\"parameters\"] = new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"commands\"] = new[]\n                            {\n                                @\"curl localhost\n\",\n                            },\n                        },\n                    },\n                },\n            },\n        },\n    });\n\n    var ssmExecutionRole = new AwsNative.Iam.Role(\"ssmExecutionRole\", new()\n    {\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"ssm:StartAssociationsOnce\",\n                                \"ssm:CreateAssociation\",\n                                \"ssm:CreateAssociationBatch\",\n                                \"ssm:UpdateAssociation\",\n                            },\n                            [\"resource\"] = \"*\",\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"ssm-association\",\n            },\n        },\n        Path = \"/\",\n        ManagedPolicyArns = new[]\n        {\n            \"arn:${AWS::Partition}:iam::aws:policy/service-role/AmazonSSMAutomationRole\",\n        },\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"ec2.amazonaws.com\",\n                            \"ssm.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n    });\n\n    var ssmInstanceRole = new AwsNative.Iam.Role(\"ssmInstanceRole\", new()\n    {\n        Policies = new[]\n        {\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                                \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                                \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                                \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                                \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                                \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                            },\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"ssm-custom-s3-policy\",\n            },\n            new AwsNative.Iam.Inputs.RolePolicyArgs\n            {\n                PolicyDocument = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"version\"] = \"2012-10-17\",\n                    [\"statement\"] = new[]\n                    {\n                        new Dictionary\u003cstring, object?\u003e\n                        {\n                            [\"action\"] = new[]\n                            {\n                                \"s3:GetObject\",\n                                \"s3:PutObject\",\n                                \"s3:PutObjectAcl\",\n                                \"s3:ListBucket\",\n                            },\n                            [\"resource\"] = new[]\n                            {\n                                \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                                \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                            },\n                            [\"effect\"] = \"Allow\",\n                        },\n                    },\n                },\n                PolicyName = \"s3-instance-bucket-policy\",\n            },\n        },\n        Path = \"/\",\n        ManagedPolicyArns = new[]\n        {\n            \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n            \"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\",\n        },\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"ec2.amazonaws.com\",\n                            \"ssm.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = \"sts:AssumeRole\",\n                },\n            },\n        },\n    });\n\n    var ssmInstanceProfile = new AwsNative.Iam.InstanceProfile(\"ssmInstanceProfile\", new()\n    {\n        Roles = new[]\n        {\n            \"SSMInstanceRole\",\n        },\n    });\n\n    var ec2Instance = new AwsNative.Ec2.Instance(\"ec2Instance\", new()\n    {\n        ImageId = \"LatestAmiId\",\n        InstanceType = \"t3.medium\",\n        IamInstanceProfile = \"SSMInstanceProfile\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"nginx\",\n                Value = \"true\",\n            },\n        },\n    });\n\n    var nginxAssociation = new AwsNative.Ssm.Association(\"nginxAssociation\", new()\n    {\n        Name = \"nginxInstallAutomation\",\n        OutputLocation = new AwsNative.Ssm.Inputs.AssociationInstanceAssociationOutputLocationArgs\n        {\n            S3Location = new AwsNative.Ssm.Inputs.AssociationS3OutputLocationArgs\n            {\n                OutputS3BucketName = \"SSMAssocLogs\",\n                OutputS3KeyPrefix = \"logs/\",\n            },\n        },\n        AutomationTargetParameterName = \"InstanceId\",\n        Parameters = \n        {\n            { \"automationAssumeRole\", new[]\n            {\n                \"SSMExecutionRole.Arn\",\n            } },\n        },\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"tag:nginx\",\n                Values = new[]\n                {\n                    \"true\",\n                },\n            },\n        },\n    }, new CustomResourceOptions\n    {\n        DependsOn =\n        {\n            ec2Instance,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"webServerPublic\"] = \"EC2Instance.PublicDnsName\",\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ec2\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/s3\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tlatestAmiId := \"\"\n\t\tif param := cfg.Get(\"latestAmiId\"); param != \"\" {\n\t\t\tlatestAmiId = param\n\t\t}\n\t\tvar tmp0 string\n\t\tif latestAmiId == \"\" {\n\t\t\ttmp0 = \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\"\n\t\t} else {\n\t\t\ttmp0 = awsnative.GetSsmParameterString(ctx, \u0026aws.GetSsmParameterStringArgs{\n\t\t\t\tName: latestAmiId,\n\t\t\t}, nil).Value\n\t\t}\n\t\t_ := tmp0\n\t\t_, err := s3.NewBucket(ctx, \"ssmAssocLogs\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewDocument(ctx, \"nginxInstallAutomation\", \u0026ssm.DocumentArgs{\n\t\t\tDocumentType: ssm.DocumentTypeAutomation,\n\t\t\tContent: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"schemaVersion\": \"0.3\",\n\t\t\t\t\"description\":   \"Updates AMI with Linux distribution packages and installs Nginx software\",\n\t\t\t\t\"assumeRole\":    \"{{AutomationAssumeRole}}\",\n\t\t\t\t\"parameters\": map[string]interface{}{\n\t\t\t\t\t\"instanceId\": map[string]interface{}{\n\t\t\t\t\t\t\"description\": \"ID of the Instance.\",\n\t\t\t\t\t\t\"type\":        \"String\",\n\t\t\t\t\t},\n\t\t\t\t\t\"automationAssumeRole\": map[string]interface{}{\n\t\t\t\t\t\t\"default\":     \"\",\n\t\t\t\t\t\t\"description\": \"(Optional) The ARN of the role that allows Automation to perform the actions on your behalf.\",\n\t\t\t\t\t\t\"type\":        \"String\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\"mainSteps\": []interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"name\":           \"updateOSSoftware\",\n\t\t\t\t\t\t\"action\":         \"aws:runCommand\",\n\t\t\t\t\t\t\"maxAttempts\":    3,\n\t\t\t\t\t\t\"timeoutSeconds\": 3600,\n\t\t\t\t\t\t\"inputs\": map[string]interface{}{\n\t\t\t\t\t\t\t\"documentName\": \"AWS-RunShellScript\",\n\t\t\t\t\t\t\t\"instanceIds\": []string{\n\t\t\t\t\t\t\t\t\"{{InstanceId}}\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"cloudWatchOutputConfig\": map[string]interface{}{\n\t\t\t\t\t\t\t\t\"cloudWatchOutputEnabled\": \"true\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"parameters\": map[string]interface{}{\n\t\t\t\t\t\t\t\t\"commands\": []string{\n\t\t\t\t\t\t\t\t\t`#!/bin/bash\nsudo yum update -y\nneeds-restarting -r\nif [ $? -eq 1 ]\nthen\n        exit 194\nelse\n        exit 0\nfi\n`,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"name\":   \"InstallNginx\",\n\t\t\t\t\t\t\"action\": \"aws:runCommand\",\n\t\t\t\t\t\t\"inputs\": map[string]interface{}{\n\t\t\t\t\t\t\t\"documentName\": \"AWS-RunShellScript\",\n\t\t\t\t\t\t\t\"instanceIds\": []string{\n\t\t\t\t\t\t\t\t\"{{InstanceId}}\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"cloudWatchOutputConfig\": map[string]interface{}{\n\t\t\t\t\t\t\t\t\"cloudWatchOutputEnabled\": \"true\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"parameters\": map[string]interface{}{\n\t\t\t\t\t\t\t\t\"commands\": []string{\n\t\t\t\t\t\t\t\t\t\"sudo amazon-linux-extras install nginx1 -y\\nsudo service nginx start\\n\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"name\":           \"TestInstall\",\n\t\t\t\t\t\t\"action\":         \"aws:runCommand\",\n\t\t\t\t\t\t\"maxAttempts\":    3,\n\t\t\t\t\t\t\"timeoutSeconds\": 3600,\n\t\t\t\t\t\t\"onFailure\":      \"Abort\",\n\t\t\t\t\t\t\"inputs\": map[string]interface{}{\n\t\t\t\t\t\t\t\"documentName\": \"AWS-RunShellScript\",\n\t\t\t\t\t\t\t\"instanceIds\": []string{\n\t\t\t\t\t\t\t\t\"{{InstanceId}}\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"parameters\": map[string]interface{}{\n\t\t\t\t\t\t\t\t\"commands\": []string{\n\t\t\t\t\t\t\t\t\t\"curl localhost\\n\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewRole(ctx, \"ssmExecutionRole\", \u0026iam.RoleArgs{\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"ssm:StartAssociationsOnce\",\n\t\t\t\t\t\t\t\t\t\"ssm:CreateAssociation\",\n\t\t\t\t\t\t\t\t\t\"ssm:CreateAssociationBatch\",\n\t\t\t\t\t\t\t\t\t\"ssm:UpdateAssociation\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": \"*\",\n\t\t\t\t\t\t\t\t\"effect\":   \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"ssm-association\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/service-role/AmazonSSMAutomationRole\"),\n\t\t\t},\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"ec2.amazonaws.com\",\n\t\t\t\t\t\t\t\t\"ssm.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewRole(ctx, \"ssmInstanceRole\", \u0026iam.RoleArgs{\n\t\t\tPolicies: iam.RolePolicyTypeArray{\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n\t\t\t\t\t\t\t\t\t\"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"ssm-custom-s3-policy\"),\n\t\t\t\t},\n\t\t\t\t\u0026iam.RolePolicyTypeArgs{\n\t\t\t\t\tPolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\t\t\"s3:GetObject\",\n\t\t\t\t\t\t\t\t\t\"s3:PutObject\",\n\t\t\t\t\t\t\t\t\t\"s3:PutObjectAcl\",\n\t\t\t\t\t\t\t\t\t\"s3:ListBucket\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"resource\": []string{\n\t\t\t\t\t\t\t\t\t\"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n\t\t\t\t\t\t\t\t\t\"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t\tPolicyName: pulumi.String(\"s3-instance-bucket-policy\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPath: pulumi.String(\"/\"),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\"),\n\t\t\t\tpulumi.String(\"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\"),\n\t\t\t},\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"ec2.amazonaws.com\",\n\t\t\t\t\t\t\t\t\"ssm.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": \"sts:AssumeRole\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = iam.NewInstanceProfile(ctx, \"ssmInstanceProfile\", \u0026iam.InstanceProfileArgs{\n\t\t\tRoles: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"SSMInstanceRole\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tec2Instance, err := ec2.NewInstance(ctx, \"ec2Instance\", \u0026ec2.InstanceArgs{\n\t\t\tImageId:            pulumi.String(\"LatestAmiId\"),\n\t\t\tInstanceType:       pulumi.String(\"t3.medium\"),\n\t\t\tIamInstanceProfile: pulumi.String(\"SSMInstanceProfile\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"nginx\"),\n\t\t\t\t\tValue: pulumi.String(\"true\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewAssociation(ctx, \"nginxAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tName: pulumi.String(\"nginxInstallAutomation\"),\n\t\t\tOutputLocation: \u0026ssm.AssociationInstanceAssociationOutputLocationArgs{\n\t\t\t\tS3Location: \u0026ssm.AssociationS3OutputLocationArgs{\n\t\t\t\t\tOutputS3BucketName: pulumi.String(\"SSMAssocLogs\"),\n\t\t\t\t\tOutputS3KeyPrefix:  pulumi.String(\"logs/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tAutomationTargetParameterName: pulumi.String(\"InstanceId\"),\n\t\t\tParameters: pulumi.StringArrayMap{\n\t\t\t\t\"automationAssumeRole\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"SSMExecutionRole.Arn\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"tag:nginx\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"true\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t}, pulumi.DependsOn([]pulumi.Resource{\n\t\t\tec2Instance,\n\t\t}))\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"webServerPublic\", pulumi.String(\"EC2Instance.PublicDnsName\"))\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst latestAmiId = config.get(\"latestAmiId\") || \"\";\nconst latestAmiIdValue = latestAmiId == \"\" ? \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" : aws_native.getSsmParameterString({\n    name: latestAmiId,\n}).then(invoke =\u003e invoke.value);\nconst ssmAssocLogs = new aws_native.s3.Bucket(\"ssmAssocLogs\", {});\nconst nginxInstallAutomation = new aws_native.ssm.Document(\"nginxInstallAutomation\", {\n    documentType: aws_native.ssm.DocumentType.Automation,\n    content: {\n        schemaVersion: \"0.3\",\n        description: \"Updates AMI with Linux distribution packages and installs Nginx software\",\n        assumeRole: \"{{AutomationAssumeRole}}\",\n        parameters: {\n            instanceId: {\n                description: \"ID of the Instance.\",\n                type: \"String\",\n            },\n            automationAssumeRole: {\n                \"default\": \"\",\n                description: \"(Optional) The ARN of the role that allows Automation to perform the actions on your behalf.\",\n                type: \"String\",\n            },\n        },\n        mainSteps: [\n            {\n                name: \"updateOSSoftware\",\n                action: \"aws:runCommand\",\n                maxAttempts: 3,\n                timeoutSeconds: 3600,\n                inputs: {\n                    documentName: \"AWS-RunShellScript\",\n                    instanceIds: [\"{{InstanceId}}\"],\n                    cloudWatchOutputConfig: {\n                        cloudWatchOutputEnabled: \"true\",\n                    },\n                    parameters: {\n                        commands: [`#!/bin/bash\nsudo yum update -y\nneeds-restarting -r\nif [ ? -eq 1 ]\nthen\n        exit 194\nelse\n        exit 0\nfi\n`],\n                    },\n                },\n            },\n            {\n                name: \"InstallNginx\",\n                action: \"aws:runCommand\",\n                inputs: {\n                    documentName: \"AWS-RunShellScript\",\n                    instanceIds: [\"{{InstanceId}}\"],\n                    cloudWatchOutputConfig: {\n                        cloudWatchOutputEnabled: \"true\",\n                    },\n                    parameters: {\n                        commands: [`sudo amazon-linux-extras install nginx1 -y\nsudo service nginx start\n`],\n                    },\n                },\n            },\n            {\n                name: \"TestInstall\",\n                action: \"aws:runCommand\",\n                maxAttempts: 3,\n                timeoutSeconds: 3600,\n                onFailure: \"Abort\",\n                inputs: {\n                    documentName: \"AWS-RunShellScript\",\n                    instanceIds: [\"{{InstanceId}}\"],\n                    parameters: {\n                        commands: [\"curl localhost\\n\"],\n                    },\n                },\n            },\n        ],\n    },\n});\nconst ssmExecutionRole = new aws_native.iam.Role(\"ssmExecutionRole\", {\n    policies: [{\n        policyDocument: {\n            version: \"2012-10-17\",\n            statement: [{\n                action: [\n                    \"ssm:StartAssociationsOnce\",\n                    \"ssm:CreateAssociation\",\n                    \"ssm:CreateAssociationBatch\",\n                    \"ssm:UpdateAssociation\",\n                ],\n                resource: \"*\",\n                effect: \"Allow\",\n            }],\n        },\n        policyName: \"ssm-association\",\n    }],\n    path: \"/\",\n    managedPolicyArns: [\"arn:${AWS::Partition}:iam::aws:policy/service-role/AmazonSSMAutomationRole\"],\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n});\nconst ssmInstanceRole = new aws_native.iam.Role(\"ssmInstanceRole\", {\n    policies: [\n        {\n            policyDocument: {\n                version: \"2012-10-17\",\n                statement: [{\n                    action: [\"s3:GetObject\"],\n                    resource: [\n                        \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                        \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                        \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                    ],\n                    effect: \"Allow\",\n                }],\n            },\n            policyName: \"ssm-custom-s3-policy\",\n        },\n        {\n            policyDocument: {\n                version: \"2012-10-17\",\n                statement: [{\n                    action: [\n                        \"s3:GetObject\",\n                        \"s3:PutObject\",\n                        \"s3:PutObjectAcl\",\n                        \"s3:ListBucket\",\n                    ],\n                    resource: [\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                    ],\n                    effect: \"Allow\",\n                }],\n            },\n            policyName: \"s3-instance-bucket-policy\",\n        },\n    ],\n    path: \"/\",\n    managedPolicyArns: [\n        \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n        \"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\",\n    ],\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            action: \"sts:AssumeRole\",\n        }],\n    },\n});\nconst ssmInstanceProfile = new aws_native.iam.InstanceProfile(\"ssmInstanceProfile\", {roles: [\"SSMInstanceRole\"]});\nconst ec2Instance = new aws_native.ec2.Instance(\"ec2Instance\", {\n    imageId: \"LatestAmiId\",\n    instanceType: \"t3.medium\",\n    iamInstanceProfile: \"SSMInstanceProfile\",\n    tags: [{\n        key: \"nginx\",\n        value: \"true\",\n    }],\n});\nconst nginxAssociation = new aws_native.ssm.Association(\"nginxAssociation\", {\n    name: \"nginxInstallAutomation\",\n    outputLocation: {\n        s3Location: {\n            outputS3BucketName: \"SSMAssocLogs\",\n            outputS3KeyPrefix: \"logs/\",\n        },\n    },\n    automationTargetParameterName: \"InstanceId\",\n    parameters: {\n        automationAssumeRole: [\"SSMExecutionRole.Arn\"],\n    },\n    targets: [{\n        key: \"tag:nginx\",\n        values: [\"true\"],\n    }],\n}, {\n    dependsOn: [ec2Instance],\n});\nexport const webServerPublic = \"EC2Instance.PublicDnsName\";\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nlatest_ami_id = config.get(\"latestAmiId\")\nif latest_ami_id is None:\n    latest_ami_id = \"\"\nlatest_ami_id_value = \"/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2\" if latest_ami_id == \"\" else aws_native.get_ssm_parameter_string(name=latest_ami_id).value\nssm_assoc_logs = aws_native.s3.Bucket(\"ssmAssocLogs\")\nnginx_install_automation = aws_native.ssm.Document(\"nginxInstallAutomation\",\n    document_type=aws_native.ssm.DocumentType.AUTOMATION,\n    content={\n        \"schemaVersion\": \"0.3\",\n        \"description\": \"Updates AMI with Linux distribution packages and installs Nginx software\",\n        \"assumeRole\": \"{{AutomationAssumeRole}}\",\n        \"parameters\": {\n            \"instanceId\": {\n                \"description\": \"ID of the Instance.\",\n                \"type\": \"String\",\n            },\n            \"automationAssumeRole\": {\n                \"default\": \"\",\n                \"description\": \"(Optional) The ARN of the role that allows Automation to perform the actions on your behalf.\",\n                \"type\": \"String\",\n            },\n        },\n        \"mainSteps\": [\n            {\n                \"name\": \"updateOSSoftware\",\n                \"action\": \"aws:runCommand\",\n                \"maxAttempts\": 3,\n                \"timeoutSeconds\": 3600,\n                \"inputs\": {\n                    \"documentName\": \"AWS-RunShellScript\",\n                    \"instanceIds\": [\"{{InstanceId}}\"],\n                    \"cloudWatchOutputConfig\": {\n                        \"cloudWatchOutputEnabled\": \"true\",\n                    },\n                    \"parameters\": {\n                        \"commands\": [\"\"\"#!/bin/bash\nsudo yum update -y\nneeds-restarting -r\nif [ $? -eq 1 ]\nthen\n        exit 194\nelse\n        exit 0\nfi\n\"\"\"],\n                    },\n                },\n            },\n            {\n                \"name\": \"InstallNginx\",\n                \"action\": \"aws:runCommand\",\n                \"inputs\": {\n                    \"documentName\": \"AWS-RunShellScript\",\n                    \"instanceIds\": [\"{{InstanceId}}\"],\n                    \"cloudWatchOutputConfig\": {\n                        \"cloudWatchOutputEnabled\": \"true\",\n                    },\n                    \"parameters\": {\n                        \"commands\": [\"\"\"sudo amazon-linux-extras install nginx1 -y\nsudo service nginx start\n\"\"\"],\n                    },\n                },\n            },\n            {\n                \"name\": \"TestInstall\",\n                \"action\": \"aws:runCommand\",\n                \"maxAttempts\": 3,\n                \"timeoutSeconds\": 3600,\n                \"onFailure\": \"Abort\",\n                \"inputs\": {\n                    \"documentName\": \"AWS-RunShellScript\",\n                    \"instanceIds\": [\"{{InstanceId}}\"],\n                    \"parameters\": {\n                        \"commands\": [\"curl localhost\\n\"],\n                    },\n                },\n            },\n        ],\n    })\nssm_execution_role = aws_native.iam.Role(\"ssmExecutionRole\",\n    policies=[{\n        \"policy_document\": {\n            \"version\": \"2012-10-17\",\n            \"statement\": [{\n                \"action\": [\n                    \"ssm:StartAssociationsOnce\",\n                    \"ssm:CreateAssociation\",\n                    \"ssm:CreateAssociationBatch\",\n                    \"ssm:UpdateAssociation\",\n                ],\n                \"resource\": \"*\",\n                \"effect\": \"Allow\",\n            }],\n        },\n        \"policy_name\": \"ssm-association\",\n    }],\n    path=\"/\",\n    managed_policy_arns=[\"arn:${AWS::Partition}:iam::aws:policy/service-role/AmazonSSMAutomationRole\"],\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    })\nssm_instance_role = aws_native.iam.Role(\"ssmInstanceRole\",\n    policies=[\n        {\n            \"policy_document\": {\n                \"version\": \"2012-10-17\",\n                \"statement\": [{\n                    \"action\": [\"s3:GetObject\"],\n                    \"resource\": [\n                        \"arn:aws:s3:::aws-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::aws-windows-downloads-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-${AWS::Region}/*\",\n                        \"arn:aws:s3:::amazon-ssm-packages-${AWS::Region}/*\",\n                        \"arn:aws:s3:::${AWS::Region}-birdwatcher-prod/*\",\n                        \"arn:aws:s3:::patch-baseline-snapshot-${AWS::Region}/*\",\n                    ],\n                    \"effect\": \"Allow\",\n                }],\n            },\n            \"policy_name\": \"ssm-custom-s3-policy\",\n        },\n        {\n            \"policy_document\": {\n                \"version\": \"2012-10-17\",\n                \"statement\": [{\n                    \"action\": [\n                        \"s3:GetObject\",\n                        \"s3:PutObject\",\n                        \"s3:PutObjectAcl\",\n                        \"s3:ListBucket\",\n                    ],\n                    \"resource\": [\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}/*\",\n                        \"arn:${AWS::Partition}:s3:::${SSMAssocLogs}\",\n                    ],\n                    \"effect\": \"Allow\",\n                }],\n            },\n            \"policy_name\": \"s3-instance-bucket-policy\",\n        },\n    ],\n    path=\"/\",\n    managed_policy_arns=[\n        \"arn:${AWS::Partition}:iam::aws:policy/AmazonSSMManagedInstanceCore\",\n        \"arn:${AWS::Partition}:iam::aws:policy/CloudWatchAgentServerPolicy\",\n    ],\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\n                    \"ec2.amazonaws.com\",\n                    \"ssm.amazonaws.com\",\n                ],\n            },\n            \"action\": \"sts:AssumeRole\",\n        }],\n    })\nssm_instance_profile = aws_native.iam.InstanceProfile(\"ssmInstanceProfile\", roles=[\"SSMInstanceRole\"])\nec2_instance = aws_native.ec2.Instance(\"ec2Instance\",\n    image_id=\"LatestAmiId\",\n    instance_type=\"t3.medium\",\n    iam_instance_profile=\"SSMInstanceProfile\",\n    tags=[{\n        \"key\": \"nginx\",\n        \"value\": \"true\",\n    }])\nnginx_association = aws_native.ssm.Association(\"nginxAssociation\",\n    name=\"nginxInstallAutomation\",\n    output_location={\n        \"s3_location\": {\n            \"output_s3_bucket_name\": \"SSMAssocLogs\",\n            \"output_s3_key_prefix\": \"logs/\",\n        },\n    },\n    automation_target_parameter_name=\"InstanceId\",\n    parameters={\n        \"automationAssumeRole\": [\"SSMExecutionRole.Arn\"],\n    },\n    targets=[{\n        \"key\": \"tag:nginx\",\n        \"values\": [\"true\"],\n    }],\n    opts = pulumi.ResourceOptions(depends_on=[ec2_instance]))\npulumi.export(\"webServerPublic\", \"EC2Instance.PublicDnsName\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"abacStatus":{"$ref":"#/types/aws-native:s3:BucketAbacStatus","description":"The ABAC status of the general purpose bucket. When ABAC is enabled for the general purpose bucket, you can use tags to manage access to the general purpose buckets as well as for cost tracking purposes. When ABAC is disabled for the general purpose buckets, you can only use tags for cost tracking purposes. For more information, see [Using tags with S3 general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging.html)."},"accelerateConfiguration":{"$ref":"#/types/aws-native:s3:BucketAccelerateConfiguration","description":"Configures the transfer acceleration state for an Amazon S3 bucket. For more information, see [Amazon S3 Transfer Acceleration](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html) in the *Amazon S3 User Guide*."},"accessControl":{"$ref":"#/types/aws-native:s3:BucketAccessControl","description":"This is a legacy property, and it is not recommended for most use cases. A majority of modern use cases in Amazon S3 no longer require the use of ACLs, and we recommend that you keep ACLs disabled. For more information, see [Controlling object ownership](https://docs.aws.amazon.com//AmazonS3/latest/userguide/about-object-ownership.html) in the *Amazon S3 User Guide*.\n  A canned access control list (ACL) that grants predefined permissions to the bucket. For more information about canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl) in the *Amazon S3 User Guide*.\n  S3 buckets are created with ACLs disabled by default. Therefore, unless you explicitly set the [AWS::S3::OwnershipControls](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-ownershipcontrols.html) property to enable ACLs, your resource will fail to deploy with any value other than Private. Use cases requiring ACLs are uncommon.\n  The majority of access control configurations can be successfully and more easily achieved with bucket policies. For more information, see [AWS::S3::BucketPolicy](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-s3-policy.html). For examples of common policy configurations, including S3 Server Access Logs buckets and more, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html) in the *Amazon S3 User Guide*."},"analyticsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketAnalyticsConfiguration"},"description":"Specifies the configuration and any analyses for the analytics filter of an Amazon S3 bucket."},"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified bucket.\n\nExample: `arn:aws:s3:::DOC-EXAMPLE-BUCKET`"},"bucketEncryption":{"$ref":"#/types/aws-native:s3:BucketEncryption","description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3-managed keys (SSE-S3), AWS KMS-managed keys (SSE-KMS), or dual-layer server-side encryption with KMS-managed keys (DSSE-KMS). For information about the Amazon S3 default encryption feature, see [Amazon S3 Default Encryption for S3 Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html) in the *Amazon S3 User Guide*."},"bucketName":{"type":"string","description":"A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name. The bucket name must contain only lowercase letters, numbers, periods (.), and dashes (-) and must follow [Amazon S3 bucket restrictions and limitations](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html). For more information, see [Rules for naming Amazon S3 buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html) in the *Amazon S3 User Guide*. \n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.","replaceOnChanges":true},"bucketNamePrefix":{"type":"string","replaceOnChanges":true},"bucketNamespace":{"$ref":"#/types/aws-native:s3:BucketNamespace","replaceOnChanges":true},"corsConfiguration":{"$ref":"#/types/aws-native:s3:BucketCorsConfiguration","description":"Describes the cross-origin access configuration for objects in an Amazon S3 bucket. For more information, see [Enabling Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html) in the *Amazon S3 User Guide*."},"domainName":{"type":"string","description":"Returns the IPv4 DNS name of the specified bucket.\n\nExample: `DOC-EXAMPLE-BUCKET.s3.amazonaws.com`"},"dualStackDomainName":{"type":"string","description":"Returns the IPv6 DNS name of the specified bucket.\n\nExample: `DOC-EXAMPLE-BUCKET.s3.dualstack.us-east-2.amazonaws.com`\n\nFor more information about dual-stack endpoints, see [Using Amazon S3 Dual-Stack Endpoints](https://docs.aws.amazon.com/AmazonS3/latest/dev/dual-stack-endpoints.html) ."},"intelligentTieringConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketIntelligentTieringConfiguration"},"description":"Defines how Amazon S3 handles Intelligent-Tiering storage."},"inventoryConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketInventoryConfiguration"},"description":"Specifies the S3 Inventory configuration for an Amazon S3 bucket. For more information, see [GET Bucket inventory](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketGETInventoryConfig.html) in the *Amazon S3 API Reference*."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3:BucketLifecycleConfiguration","description":"Specifies the lifecycle configuration for objects in an Amazon S3 bucket. For more information, see [Object Lifecycle Management](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html) in the *Amazon S3 User Guide*."},"loggingConfiguration":{"$ref":"#/types/aws-native:s3:BucketLoggingConfiguration","description":"Settings that define where logs are stored."},"metadataConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataConfiguration","description":"The S3 Metadata configuration for a general purpose bucket."},"metadataTableConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataTableConfiguration","description":"The metadata table configuration of an S3 general purpose bucket."},"metricsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketMetricsConfiguration"},"description":"Specifies a metrics configuration for the CloudWatch request metrics (specified by the metrics configuration ID) from an Amazon S3 bucket. If you're updating an existing metrics configuration, note that this is a full replacement of the existing metrics configuration. If you don't include the elements you want to keep, they are erased. For more information, see [PutBucketMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTMetricConfiguration.html)."},"notificationConfiguration":{"$ref":"#/types/aws-native:s3:BucketNotificationConfiguration","description":"Configuration that defines how Amazon S3 handles bucket notifications."},"objectLockConfiguration":{"$ref":"#/types/aws-native:s3:BucketObjectLockConfiguration","description":"This operation is not supported for directory buckets.\n  Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see [Locking Objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html). \n   +  The ``DefaultRetention`` settings require both a mode and a period.\n  +  The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time.\n  +  You can enable Object Lock for new or existing buckets. For more information, see [Configuring Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html).\n  \n   You must URL encode any signed header values that contain spaces. For example, if your header value is ``my file.txt``, containing two spaces after ``my``, you must URL encode this value to ``my%20%20file.txt``."},"objectLockEnabled":{"type":"boolean","description":"Indicates whether this bucket has an Object Lock configuration enabled. Enable ``ObjectLockEnabled`` when you apply ``ObjectLockConfiguration`` to a bucket."},"ownershipControls":{"$ref":"#/types/aws-native:s3:BucketOwnershipControls","description":"Configuration that defines how Amazon S3 handles Object Ownership rules."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:BucketPublicAccessBlockConfiguration","description":"Configuration that defines how Amazon S3 handles public access."},"regionalDomainName":{"type":"string","description":"Returns the regional domain name of the specified bucket.\n\nExample: `DOC-EXAMPLE-BUCKET.s3.us-east-2.amazonaws.com`"},"replicationConfiguration":{"$ref":"#/types/aws-native:s3:BucketReplicationConfiguration","description":"Configuration for replicating objects in an S3 bucket. To enable replication, you must also enable versioning by using the ``VersioningConfiguration`` property.\n Amazon S3 can store replicated objects in a single destination bucket or multiple destination buckets. The destination bucket or buckets must already exist."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this S3 bucket."},"versioningConfiguration":{"$ref":"#/types/aws-native:s3:BucketVersioningConfiguration","description":"Enables multiple versions of all objects in this bucket. You might enable versioning to prevent objects from being deleted or overwritten by mistake or to archive objects so that you can retrieve previous versions of them.\n  When you enable versioning on a bucket for the first time, it might take a short amount of time for the change to be fully propagated. We recommend that you wait for 15 minutes after enabling versioning before issuing write operations (``PUT`` or ``DELETE``) on objects in the bucket."},"websiteConfiguration":{"$ref":"#/types/aws-native:s3:BucketWebsiteConfiguration","description":"Information used to configure the bucket as a static website. For more information, see [Hosting Websites on Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html)."},"websiteUrl":{"type":"string","description":"Returns the Amazon S3 website endpoint for the specified bucket.\n\nExample (IPv4): `http://DOC-EXAMPLE-BUCKET.s3-website.us-east-2.amazonaws.com`\n\nExample (IPv6): `http://DOC-EXAMPLE-BUCKET.s3.dualstack.us-east-2.amazonaws.com`"}},"type":"object","required":["arn","domainName","dualStackDomainName","regionalDomainName","websiteUrl"],"inputProperties":{"abacStatus":{"$ref":"#/types/aws-native:s3:BucketAbacStatus","description":"The ABAC status of the general purpose bucket. When ABAC is enabled for the general purpose bucket, you can use tags to manage access to the general purpose buckets as well as for cost tracking purposes. When ABAC is disabled for the general purpose buckets, you can only use tags for cost tracking purposes. For more information, see [Using tags with S3 general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging.html)."},"accelerateConfiguration":{"$ref":"#/types/aws-native:s3:BucketAccelerateConfiguration","description":"Configures the transfer acceleration state for an Amazon S3 bucket. For more information, see [Amazon S3 Transfer Acceleration](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html) in the *Amazon S3 User Guide*."},"accessControl":{"$ref":"#/types/aws-native:s3:BucketAccessControl","description":"This is a legacy property, and it is not recommended for most use cases. A majority of modern use cases in Amazon S3 no longer require the use of ACLs, and we recommend that you keep ACLs disabled. For more information, see [Controlling object ownership](https://docs.aws.amazon.com//AmazonS3/latest/userguide/about-object-ownership.html) in the *Amazon S3 User Guide*.\n  A canned access control list (ACL) that grants predefined permissions to the bucket. For more information about canned ACLs, see [Canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl) in the *Amazon S3 User Guide*.\n  S3 buckets are created with ACLs disabled by default. Therefore, unless you explicitly set the [AWS::S3::OwnershipControls](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-ownershipcontrols.html) property to enable ACLs, your resource will fail to deploy with any value other than Private. Use cases requiring ACLs are uncommon.\n  The majority of access control configurations can be successfully and more easily achieved with bucket policies. For more information, see [AWS::S3::BucketPolicy](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-s3-policy.html). For examples of common policy configurations, including S3 Server Access Logs buckets and more, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html) in the *Amazon S3 User Guide*."},"analyticsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketAnalyticsConfiguration"},"description":"Specifies the configuration and any analyses for the analytics filter of an Amazon S3 bucket."},"bucketEncryption":{"$ref":"#/types/aws-native:s3:BucketEncryption","description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3-managed keys (SSE-S3), AWS KMS-managed keys (SSE-KMS), or dual-layer server-side encryption with KMS-managed keys (DSSE-KMS). For information about the Amazon S3 default encryption feature, see [Amazon S3 Default Encryption for S3 Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html) in the *Amazon S3 User Guide*."},"bucketName":{"type":"string","description":"A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name. The bucket name must contain only lowercase letters, numbers, periods (.), and dashes (-) and must follow [Amazon S3 bucket restrictions and limitations](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html). For more information, see [Rules for naming Amazon S3 buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html) in the *Amazon S3 User Guide*. \n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name."},"bucketNamePrefix":{"type":"string"},"bucketNamespace":{"$ref":"#/types/aws-native:s3:BucketNamespace"},"corsConfiguration":{"$ref":"#/types/aws-native:s3:BucketCorsConfiguration","description":"Describes the cross-origin access configuration for objects in an Amazon S3 bucket. For more information, see [Enabling Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html) in the *Amazon S3 User Guide*."},"intelligentTieringConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketIntelligentTieringConfiguration"},"description":"Defines how Amazon S3 handles Intelligent-Tiering storage."},"inventoryConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketInventoryConfiguration"},"description":"Specifies the S3 Inventory configuration for an Amazon S3 bucket. For more information, see [GET Bucket inventory](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketGETInventoryConfig.html) in the *Amazon S3 API Reference*."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3:BucketLifecycleConfiguration","description":"Specifies the lifecycle configuration for objects in an Amazon S3 bucket. For more information, see [Object Lifecycle Management](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html) in the *Amazon S3 User Guide*."},"loggingConfiguration":{"$ref":"#/types/aws-native:s3:BucketLoggingConfiguration","description":"Settings that define where logs are stored."},"metadataConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataConfiguration","description":"The S3 Metadata configuration for a general purpose bucket."},"metadataTableConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataTableConfiguration","description":"The metadata table configuration of an S3 general purpose bucket."},"metricsConfigurations":{"type":"array","items":{"$ref":"#/types/aws-native:s3:BucketMetricsConfiguration"},"description":"Specifies a metrics configuration for the CloudWatch request metrics (specified by the metrics configuration ID) from an Amazon S3 bucket. If you're updating an existing metrics configuration, note that this is a full replacement of the existing metrics configuration. If you don't include the elements you want to keep, they are erased. For more information, see [PutBucketMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTMetricConfiguration.html)."},"notificationConfiguration":{"$ref":"#/types/aws-native:s3:BucketNotificationConfiguration","description":"Configuration that defines how Amazon S3 handles bucket notifications."},"objectLockConfiguration":{"$ref":"#/types/aws-native:s3:BucketObjectLockConfiguration","description":"This operation is not supported for directory buckets.\n  Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see [Locking Objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html). \n   +  The ``DefaultRetention`` settings require both a mode and a period.\n  +  The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time.\n  +  You can enable Object Lock for new or existing buckets. For more information, see [Configuring Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html).\n  \n   You must URL encode any signed header values that contain spaces. For example, if your header value is ``my file.txt``, containing two spaces after ``my``, you must URL encode this value to ``my%20%20file.txt``."},"objectLockEnabled":{"type":"boolean","description":"Indicates whether this bucket has an Object Lock configuration enabled. Enable ``ObjectLockEnabled`` when you apply ``ObjectLockConfiguration`` to a bucket."},"ownershipControls":{"$ref":"#/types/aws-native:s3:BucketOwnershipControls","description":"Configuration that defines how Amazon S3 handles Object Ownership rules."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:BucketPublicAccessBlockConfiguration","description":"Configuration that defines how Amazon S3 handles public access."},"replicationConfiguration":{"$ref":"#/types/aws-native:s3:BucketReplicationConfiguration","description":"Configuration for replicating objects in an S3 bucket. To enable replication, you must also enable versioning by using the ``VersioningConfiguration`` property.\n Amazon S3 can store replicated objects in a single destination bucket or multiple destination buckets. The destination bucket or buckets must already exist."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this S3 bucket."},"versioningConfiguration":{"$ref":"#/types/aws-native:s3:BucketVersioningConfiguration","description":"Enables multiple versions of all objects in this bucket. You might enable versioning to prevent objects from being deleted or overwritten by mistake or to archive objects so that you can retrieve previous versions of them.\n  When you enable versioning on a bucket for the first time, it might take a short amount of time for the change to be fully propagated. We recommend that you wait for 15 minutes after enabling versioning before issuing write operations (``PUT`` or ``DELETE``) on objects in the bucket."},"websiteConfiguration":{"$ref":"#/types/aws-native:s3:BucketWebsiteConfiguration","description":"Information used to configure the bucket as a static website. For more information, see [Hosting Websites on Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html)."}}},"aws-native:s3:BucketPolicy":{"description":"Applies an Amazon S3 bucket policy to an Amazon S3 bucket. If you are using an identity other than the root user of the AWS-account that owns the bucket, the calling identity must have the ``PutBucketPolicy`` permissions on the specified bucket and belong to the bucket owner's account in order to use this operation.\n If you don't have ``PutBucketPolicy`` permissions, Amazon S3 returns a ``403 Access Denied`` error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a ``405 Method Not Allowed`` error.\n   As a security precaution, the root user of the AWS-account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action. \n  When using the ``AWS::S3::BucketPolicy`` resource, you can create, update, and delete bucket policies for S3 buckets located in Regions that are different from the stack's Region. However, the CloudFormation stacks should be deployed in the US East (N. Virginia) or ``us-east-1`` Region. This cross-region bucket policy modification functionality is supported for backward compatibility with existing workflows.\n  If the [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) is not specified or set to ``Delete``, the bucket policy will be removed when the stack is deleted. If set to ``Retain``, the bucket policy will be preserved even after the stack is deleted.\n  For example, a CloudFormation stack in ``us-east-1`` can use the ``AWS::S3::BucketPolicy`` resource to manage the bucket policy for an S3 bucket in ``us-west-2``. The retention or removal of the bucket policy during the stack deletion is determined by the ``DeletionPolicy`` attribute specified in the stack template.\n For more information, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html).\n The following operations are related to ``PutBucketPolicy``:\n  +   [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html) \n  +   [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html)","properties":{"bucket":{"type":"string","description":"The name of the Amazon S3 bucket to which the policy applies.","replaceOnChanges":true},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM. For more information, see the AWS::IAM::Policy [PolicyDocument](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html#cfn-iam-policy-policydocument) resource description in this guide and [Access Policy Language Overview](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the *Amazon S3 User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::BucketPolicy` for more information about the expected schema for this property."}},"type":"object","required":["bucket","policyDocument"],"inputProperties":{"bucket":{"type":"string","description":"The name of the Amazon S3 bucket to which the policy applies."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM. For more information, see the AWS::IAM::Policy [PolicyDocument](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html#cfn-iam-policy-policydocument) resource description in this guide and [Access Policy Language Overview](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the *Amazon S3 User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::BucketPolicy` for more information about the expected schema for this property."}},"requiredInputs":["bucket","policyDocument"]},"aws-native:s3:MultiRegionAccessPoint":{"description":"AWS::S3::MultiRegionAccessPoint is an Amazon S3 resource type that dynamically routes S3 requests to easily satisfy geographic compliance requirements based on customer-defined routing policies.","properties":{"alias":{"type":"string","description":"The alias is a unique identifier to, and is part of the public DNS name for this Multi Region Access Point"},"createdAt":{"type":"string","description":"The timestamp of the when the Multi Region Access Point is created"},"name":{"type":"string","description":"The name you want to assign to this Multi Region Access Point.","replaceOnChanges":true},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:MultiRegionAccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Multi Region Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide.","replaceOnChanges":true},"regions":{"type":"array","items":{"$ref":"#/types/aws-native:s3:MultiRegionAccessPointRegion"},"description":"The list of buckets that you want to associate this Multi Region Access Point with.","replaceOnChanges":true}},"type":"object","required":["alias","createdAt","regions"],"inputProperties":{"name":{"type":"string","description":"The name you want to assign to this Multi Region Access Point."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:MultiRegionAccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Multi Region Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide."},"regions":{"type":"array","items":{"$ref":"#/types/aws-native:s3:MultiRegionAccessPointRegion"},"description":"The list of buckets that you want to associate this Multi Region Access Point with."}},"requiredInputs":["regions"]},"aws-native:s3:MultiRegionAccessPointPolicy":{"description":"The policy to be attached to a Multi Region Access Point","properties":{"mrapName":{"type":"string","description":"The name of the Multi Region Access Point to apply policy","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"Policy document to apply to a Multi Region Access Point\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::MultiRegionAccessPointPolicy` for more information about the expected schema for this property."},"policyStatus":{"$ref":"#/types/aws-native:s3:PolicyStatusProperties","description":"The Policy Status associated with this Multi Region Access Point"}},"type":"object","required":["mrapName","policy","policyStatus"],"inputProperties":{"mrapName":{"type":"string","description":"The name of the Multi Region Access Point to apply policy"},"policy":{"$ref":"pulumi.json#/Any","description":"Policy document to apply to a Multi Region Access Point\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::MultiRegionAccessPointPolicy` for more information about the expected schema for this property."}},"requiredInputs":["mrapName","policy"]},"aws-native:s3:StorageLens":{"description":"The AWS::S3::StorageLens resource is an Amazon S3 resource type that you can use to create Storage Lens configurations.","properties":{"storageLensConfiguration":{"$ref":"#/types/aws-native:s3:StorageLensConfiguration","description":"This resource contains the details Amazon S3 Storage Lens configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this Amazon S3 Storage Lens configuration."}},"type":"object","required":["storageLensConfiguration"],"inputProperties":{"storageLensConfiguration":{"$ref":"#/types/aws-native:s3:StorageLensConfiguration","description":"This resource contains the details Amazon S3 Storage Lens configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this Amazon S3 Storage Lens configuration."}},"requiredInputs":["storageLensConfiguration"]},"aws-native:s3:StorageLensGroup":{"description":"The AWS::S3::StorageLensGroup resource is an Amazon S3 resource type that you can use to create Storage Lens Group.","properties":{"filter":{"$ref":"#/types/aws-native:s3:StorageLensGroupFilter","description":"This property contains the criteria for the Storage Lens group data that is displayed"},"name":{"type":"string","description":"This property contains the Storage Lens group name.","replaceOnChanges":true},"storageLensGroupArn":{"type":"string","description":"The ARN for the Amazon S3 Storage Lens Group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this Amazon S3 Storage Lens Group."}},"type":"object","required":["filter","name","storageLensGroupArn"],"inputProperties":{"filter":{"$ref":"#/types/aws-native:s3:StorageLensGroupFilter","description":"This property contains the criteria for the Storage Lens group data that is displayed"},"name":{"type":"string","description":"This property contains the Storage Lens group name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A set of tags (key-value pairs) for this Amazon S3 Storage Lens Group."}},"requiredInputs":["filter"]},"aws-native:s3express:AccessPoint":{"description":"The AWS::S3Express::AccessPoint resource is an Amazon S3 resource type that you can use to access buckets.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified accesspoint."},"bucket":{"type":"string","description":"The name of the bucket that you want to associate this Access Point with.","replaceOnChanges":true},"bucketAccountId":{"type":"string","description":"The AWS account ID associated with the S3 bucket associated with this access point.","replaceOnChanges":true},"name":{"type":"string","description":"The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name. For directory buckets, the access point name must consist of a base name that you provide and suffix that includes the ZoneID (AWS Availability Zone or Local Zone) of your bucket location, followed by --xa-s3.","replaceOnChanges":true},"networkOrigin":{"$ref":"#/types/aws-native:s3express:AccessPointNetworkOrigin","description":"Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies."},"policy":{"$ref":"pulumi.json#/Any","description":"The Access Point Policy you want to apply to this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Express::AccessPoint` for more information about the expected schema for this property."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3express:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point."},"scope":{"$ref":"#/types/aws-native:s3express:AccessPointScope","description":"For directory buckets, you can filter access control to specific prefixes, API operations, or a combination of both."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of tags that you can apply to access points. Tags are key-value pairs of metadata used to categorize your access points and control access. For more information, see [Using tags for attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html#using-tags-for-abac) ."},"vpcConfiguration":{"$ref":"#/types/aws-native:s3express:AccessPointVpcConfiguration","description":"If you include this field, Amazon S3 restricts access to this Access Point to requests from the specified Virtual Private Cloud (VPC).","replaceOnChanges":true}},"type":"object","required":["arn","bucket","networkOrigin"],"inputProperties":{"bucket":{"type":"string","description":"The name of the bucket that you want to associate this Access Point with."},"bucketAccountId":{"type":"string","description":"The AWS account ID associated with the S3 bucket associated with this access point."},"name":{"type":"string","description":"The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name. For directory buckets, the access point name must consist of a base name that you provide and suffix that includes the ZoneID (AWS Availability Zone or Local Zone) of your bucket location, followed by --xa-s3."},"policy":{"$ref":"pulumi.json#/Any","description":"The Access Point Policy you want to apply to this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Express::AccessPoint` for more information about the expected schema for this property."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3express:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point."},"scope":{"$ref":"#/types/aws-native:s3express:AccessPointScope","description":"For directory buckets, you can filter access control to specific prefixes, API operations, or a combination of both."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of tags that you can apply to access points. Tags are key-value pairs of metadata used to categorize your access points and control access. For more information, see [Using tags for attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html#using-tags-for-abac) ."},"vpcConfiguration":{"$ref":"#/types/aws-native:s3express:AccessPointVpcConfiguration","description":"If you include this field, Amazon S3 restricts access to this Access Point to requests from the specified Virtual Private Cloud (VPC)."}},"requiredInputs":["bucket"]},"aws-native:s3express:BucketPolicy":{"description":"Resource Type definition for AWS::S3Express::BucketPolicy.","properties":{"bucket":{"type":"string","description":"The name of the S3 directory bucket to which the policy applies.","replaceOnChanges":true},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Express::BucketPolicy` for more information about the expected schema for this property."}},"type":"object","required":["bucket","policyDocument"],"inputProperties":{"bucket":{"type":"string","description":"The name of the S3 directory bucket to which the policy applies."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Express::BucketPolicy` for more information about the expected schema for this property."}},"requiredInputs":["bucket","policyDocument"]},"aws-native:s3express:DirectoryBucket":{"description":"Resource Type definition for AWS::S3Express::DirectoryBucket.","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified bucket."},"availabilityZoneName":{"type":"string","description":"Returns the code for the Availability Zone or Local Zone where the directory bucket was created. An example for the code of an Availability Zone is 'us-east-1f'."},"bucketEncryption":{"$ref":"#/types/aws-native:s3express:DirectoryBucketBucketEncryption","description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3 managed keys (SSE-S3) or AWS KMS keys (SSE-KMS). For information about default encryption for directory buckets, see [Setting and monitoring default encryption for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-bucket-encryption.html) in the *Amazon S3 User Guide* ."},"bucketName":{"type":"string","description":"Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name.","replaceOnChanges":true},"dataRedundancy":{"$ref":"#/types/aws-native:s3express:DirectoryBucketDataRedundancy","description":"Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket.","replaceOnChanges":true},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3express:DirectoryBucketLifecycleConfiguration","description":"Lifecycle rules that define how Amazon S3 Express manages objects during their lifetime."},"locationName":{"type":"string","description":"Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of tags that you can apply to the S3 directory bucket. Tags are key-value pairs of metadata used to categorize and organize your buckets, track costs, and control access. For more information, see [Using tags with directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) ."}},"type":"object","required":["arn","availabilityZoneName","dataRedundancy","locationName"],"inputProperties":{"bucketEncryption":{"$ref":"#/types/aws-native:s3express:DirectoryBucketBucketEncryption","description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3 managed keys (SSE-S3) or AWS KMS keys (SSE-KMS). For information about default encryption for directory buckets, see [Setting and monitoring default encryption for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-bucket-encryption.html) in the *Amazon S3 User Guide* ."},"bucketName":{"type":"string","description":"Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."},"dataRedundancy":{"$ref":"#/types/aws-native:s3express:DirectoryBucketDataRedundancy","description":"Specifies the number of Availability Zone or Local Zone that's used for redundancy for the bucket."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3express:DirectoryBucketLifecycleConfiguration","description":"Lifecycle rules that define how Amazon S3 Express manages objects during their lifetime."},"locationName":{"type":"string","description":"Specifies the Zone ID of the Availability Zone or Local Zone where the directory bucket will be created. An example Availability Zone ID value is 'use1-az5'."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of tags that you can apply to the S3 directory bucket. Tags are key-value pairs of metadata used to categorize and organize your buckets, track costs, and control access. For more information, see [Using tags with directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) ."}},"requiredInputs":["dataRedundancy","locationName"]},"aws-native:s3objectlambda:AccessPoint":{"description":"The AWS::S3ObjectLambda::AccessPoint resource is an Amazon S3ObjectLambda resource type that you can use to add computation to S3 actions","properties":{"alias":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointAlias"},"arn":{"type":"string","description":"Specifies the ARN for the Object Lambda Access Point."},"creationDate":{"type":"string","description":"The date and time when the Object lambda Access Point was created."},"name":{"type":"string","description":"The name you want to assign to this Object lambda Access Point.","replaceOnChanges":true},"objectLambdaConfiguration":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointObjectLambdaConfiguration","description":"The Object lambda Access Point Configuration that configures transformations to be applied on the objects on specified S3 Actions"},"policyStatus":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointPolicyStatus"},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide."}},"type":"object","required":["alias","arn","creationDate","objectLambdaConfiguration","policyStatus","publicAccessBlockConfiguration"],"inputProperties":{"name":{"type":"string","description":"The name you want to assign to this Object lambda Access Point."},"objectLambdaConfiguration":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointObjectLambdaConfiguration","description":"The Object lambda Access Point Configuration that configures transformations to be applied on the objects on specified S3 Actions"}},"requiredInputs":["objectLambdaConfiguration"]},"aws-native:s3objectlambda:AccessPointPolicy":{"description":"AWS::S3ObjectLambda::AccessPointPolicy resource is an Amazon S3ObjectLambda policy type that you can use to control permissions for your S3ObjectLambda","properties":{"objectLambdaAccessPoint":{"type":"string","description":"The name of the Amazon S3 ObjectLambdaAccessPoint to which the policy applies.","replaceOnChanges":true},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified ObjectLambdaAccessPoint. For more information, see Access Policy Language Overview (https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the Amazon Simple Storage Service Developer Guide. \n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3ObjectLambda::AccessPointPolicy` for more information about the expected schema for this property."}},"type":"object","required":["objectLambdaAccessPoint","policyDocument"],"inputProperties":{"objectLambdaAccessPoint":{"type":"string","description":"The name of the Amazon S3 ObjectLambdaAccessPoint to which the policy applies."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified ObjectLambdaAccessPoint. For more information, see Access Policy Language Overview (https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the Amazon Simple Storage Service Developer Guide. \n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3ObjectLambda::AccessPointPolicy` for more information about the expected schema for this property."}},"requiredInputs":["objectLambdaAccessPoint","policyDocument"]},"aws-native:s3outposts:AccessPoint":{"description":"Resource Type Definition for AWS::S3Outposts::AccessPoint","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified AccessPoint."},"bucket":{"type":"string","description":"The Amazon Resource Name (ARN) of the bucket you want to associate this AccessPoint with.","replaceOnChanges":true},"name":{"type":"string","description":"A name for the AccessPoint.","replaceOnChanges":true},"policy":{"$ref":"pulumi.json#/Any","description":"The access point policy associated with this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Outposts::AccessPoint` for more information about the expected schema for this property."},"vpcConfiguration":{"$ref":"#/types/aws-native:s3outposts:AccessPointVpcConfiguration","description":"Virtual Private Cloud (VPC) from which requests can be made to the AccessPoint.","replaceOnChanges":true}},"type":"object","required":["arn","bucket","name","vpcConfiguration"],"inputProperties":{"bucket":{"type":"string","description":"The Amazon Resource Name (ARN) of the bucket you want to associate this AccessPoint with."},"name":{"type":"string","description":"A name for the AccessPoint."},"policy":{"$ref":"pulumi.json#/Any","description":"The access point policy associated with this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Outposts::AccessPoint` for more information about the expected schema for this property."},"vpcConfiguration":{"$ref":"#/types/aws-native:s3outposts:AccessPointVpcConfiguration","description":"Virtual Private Cloud (VPC) from which requests can be made to the AccessPoint."}},"requiredInputs":["bucket","vpcConfiguration"]},"aws-native:s3outposts:Bucket":{"description":"Resource Type Definition for AWS::S3Outposts::Bucket","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified bucket."},"bucketName":{"type":"string","description":"A name for the bucket.","replaceOnChanges":true},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3outposts:BucketLifecycleConfiguration","description":"Rules that define how Amazon S3Outposts manages objects during their lifetime."},"outpostId":{"type":"string","description":"The id of the customer outpost on which the bucket resides.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this S3Outposts bucket."}},"type":"object","required":["arn","bucketName","outpostId"],"inputProperties":{"bucketName":{"type":"string","description":"A name for the bucket."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3outposts:BucketLifecycleConfiguration","description":"Rules that define how Amazon S3Outposts manages objects during their lifetime."},"outpostId":{"type":"string","description":"The id of the customer outpost on which the bucket resides."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this S3Outposts bucket."}},"requiredInputs":["outpostId"]},"aws-native:s3outposts:BucketPolicy":{"description":"Resource Type Definition for AWS::S3Outposts::BucketPolicy","properties":{"bucket":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified bucket.","replaceOnChanges":true},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Outposts::BucketPolicy` for more information about the expected schema for this property."}},"type":"object","required":["bucket","policyDocument"],"inputProperties":{"bucket":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified bucket."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Outposts::BucketPolicy` for more information about the expected schema for this property."}},"requiredInputs":["bucket","policyDocument"]},"aws-native:s3outposts:Endpoint":{"description":"Resource Type Definition for AWS::S3Outposts::Endpoint","properties":{"accessType":{"$ref":"#/types/aws-native:s3outposts:EndpointAccessType","description":"The type of access for the on-premise network connectivity for the Outpost endpoint. To access endpoint from an on-premises network, you must specify the access type and provide the customer owned Ipv4 pool.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint."},"awsId":{"type":"string","description":"The ID of the endpoint."},"cidrBlock":{"type":"string","description":"The VPC CIDR committed by this endpoint."},"creationTime":{"type":"string","description":"The time the endpoint was created."},"customerOwnedIpv4Pool":{"type":"string","description":"The ID of the customer-owned IPv4 pool for the Endpoint. IP addresses will be allocated from this pool for the endpoint.","replaceOnChanges":true},"failedReason":{"$ref":"#/types/aws-native:s3outposts:EndpointFailedReason","description":"The failure reason, if any, for a create or delete endpoint operation."},"networkInterfaces":{"type":"array","items":{"$ref":"#/types/aws-native:s3outposts:EndpointNetworkInterface"},"description":"The network interfaces of the endpoint."},"outpostId":{"type":"string","description":"The id of the customer outpost on which the bucket resides.","replaceOnChanges":true},"securityGroupId":{"type":"string","description":"The ID of the security group to use with the endpoint.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:s3outposts:EndpointStatus","description":"The status of the endpoint."},"subnetId":{"type":"string","description":"The ID of the subnet in the selected VPC. The subnet must belong to the Outpost.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","cidrBlock","creationTime","networkInterfaces","outpostId","securityGroupId","status","subnetId"],"inputProperties":{"accessType":{"$ref":"#/types/aws-native:s3outposts:EndpointAccessType","description":"The type of access for the on-premise network connectivity for the Outpost endpoint. To access endpoint from an on-premises network, you must specify the access type and provide the customer owned Ipv4 pool."},"customerOwnedIpv4Pool":{"type":"string","description":"The ID of the customer-owned IPv4 pool for the Endpoint. IP addresses will be allocated from this pool for the endpoint."},"failedReason":{"$ref":"#/types/aws-native:s3outposts:EndpointFailedReason","description":"The failure reason, if any, for a create or delete endpoint operation."},"outpostId":{"type":"string","description":"The id of the customer outpost on which the bucket resides."},"securityGroupId":{"type":"string","description":"The ID of the security group to use with the endpoint."},"subnetId":{"type":"string","description":"The ID of the subnet in the selected VPC. The subnet must belong to the Outpost."}},"requiredInputs":["outpostId","securityGroupId","subnetId"]},"aws-native:s3tables:Namespace":{"description":"Resource Type definition for AWS::S3Tables::Namespace","properties":{"namespace":{"type":"string","description":"The name of the namespace.","language":{"csharp":{"name":"NamespaceValue"}},"replaceOnChanges":true},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket to create the namespace in.","replaceOnChanges":true}},"type":"object","required":["namespace","tableBucketArn"],"inputProperties":{"namespace":{"type":"string","description":"The name of the namespace.","language":{"csharp":{"name":"NamespaceValue"}}},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket to create the namespace in."}},"requiredInputs":["namespace","tableBucketArn"]},"aws-native:s3tables:Table":{"description":"Resource Type definition for AWS::S3Tables::Table","properties":{"compaction":{"$ref":"#/types/aws-native:s3tables:TableCompaction","description":"Contains details about the compaction settings for an Iceberg table."},"icebergMetadata":{"$ref":"#/types/aws-native:s3tables:TableIcebergMetadata","description":"Contains details about the metadata for an Iceberg table.","replaceOnChanges":true},"namespace":{"type":"string","description":"The name of the namespace."},"openTableFormat":{"$ref":"#/types/aws-native:s3tables:TableOpenTableFormat","description":"The format of the table.","replaceOnChanges":true},"snapshotManagement":{"$ref":"#/types/aws-native:s3tables:TableSnapshotManagement","description":"Contains details about the Iceberg snapshot management settings for the table."},"storageClassConfiguration":{"$ref":"#/types/aws-native:s3tables:TableStorageClassConfiguration","description":"The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements.","replaceOnChanges":true},"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table."},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket to create the table in.","replaceOnChanges":true},"tableName":{"type":"string","description":"The name for the table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the table."},"versionToken":{"type":"string","description":"The version token of the table."},"warehouseLocation":{"type":"string","description":"The warehouse location of the table."},"withoutMetadata":{"$ref":"#/types/aws-native:s3tables:TableWithoutMetadata","description":"Indicates that you don't want to specify a schema for the table. This property is mutually exclusive to `IcebergMetadata` , and its only possible value is `Yes` .","replaceOnChanges":true}},"type":"object","required":["namespace","openTableFormat","tableArn","tableBucketArn","tableName","versionToken","warehouseLocation"],"inputProperties":{"compaction":{"$ref":"#/types/aws-native:s3tables:TableCompaction","description":"Contains details about the compaction settings for an Iceberg table."},"icebergMetadata":{"$ref":"#/types/aws-native:s3tables:TableIcebergMetadata","description":"Contains details about the metadata for an Iceberg table."},"namespace":{"type":"string","description":"The name of the namespace."},"openTableFormat":{"$ref":"#/types/aws-native:s3tables:TableOpenTableFormat","description":"The format of the table."},"snapshotManagement":{"$ref":"#/types/aws-native:s3tables:TableSnapshotManagement","description":"Contains details about the Iceberg snapshot management settings for the table."},"storageClassConfiguration":{"$ref":"#/types/aws-native:s3tables:TableStorageClassConfiguration","description":"The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements."},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket to create the table in."},"tableName":{"type":"string","description":"The name for the table."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the table."},"withoutMetadata":{"$ref":"#/types/aws-native:s3tables:TableWithoutMetadata","description":"Indicates that you don't want to specify a schema for the table. This property is mutually exclusive to `IcebergMetadata` , and its only possible value is `Yes` ."}},"requiredInputs":["namespace","openTableFormat","tableBucketArn"]},"aws-native:s3tables:TableBucket":{"description":"Creates an Amazon S3 Tables table bucket in the same AWS Region where you create the AWS CloudFormation stack.","properties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketEncryptionConfiguration","description":"Configuration specifying how data should be encrypted. This structure defines the encryption algorithm and optional KMS key to be used for server-side encryption."},"metricsConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketMetricsConfiguration"},"storageClassConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketStorageClassConfiguration","description":"The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements."},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket."},"tableBucketName":{"type":"string","description":"The name for the table bucket.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the table bucket."},"unreferencedFileRemoval":{"$ref":"#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval","description":"The unreferenced file removal settings for your table bucket. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots. For more information, see the [*Amazon S3 User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-table-buckets-maintenance.html) ."}},"type":"object","required":["tableBucketArn","tableBucketName"],"inputProperties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketEncryptionConfiguration","description":"Configuration specifying how data should be encrypted. This structure defines the encryption algorithm and optional KMS key to be used for server-side encryption."},"metricsConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketMetricsConfiguration"},"storageClassConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketStorageClassConfiguration","description":"The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements."},"tableBucketName":{"type":"string","description":"The name for the table bucket."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the table bucket."},"unreferencedFileRemoval":{"$ref":"#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval","description":"The unreferenced file removal settings for your table bucket. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots. For more information, see the [*Amazon S3 User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-table-buckets-maintenance.html) ."}}},"aws-native:s3tables:TableBucketPolicy":{"description":"Applies an IAM resource policy to a table bucket.","properties":{"resourcePolicy":{"$ref":"#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy","description":"The bucket policy JSON for the table bucket."},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket.","replaceOnChanges":true}},"type":"object","required":["resourcePolicy","tableBucketArn"],"inputProperties":{"resourcePolicy":{"$ref":"#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy","description":"The bucket policy JSON for the table bucket."},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket."}},"requiredInputs":["resourcePolicy","tableBucketArn"]},"aws-native:s3tables:TablePolicy":{"description":"Resource Type definition for AWS::S3Tables::TablePolicy","properties":{"namespace":{"type":"string","description":"The namespace to associated with the table."},"resourcePolicy":{"$ref":"#/types/aws-native:s3tables:TablePolicyResourcePolicy","description":"The `JSON` that defines the policy."},"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table.","replaceOnChanges":true},"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket that contains the table."},"tableName":{"type":"string","description":"The name of the table."}},"type":"object","required":["namespace","resourcePolicy","tableArn","tableBucketArn","tableName"],"inputProperties":{"resourcePolicy":{"$ref":"#/types/aws-native:s3tables:TablePolicyResourcePolicy","description":"The `JSON` that defines the policy."},"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table."}},"requiredInputs":["resourcePolicy","tableArn"]},"aws-native:s3vectors:Index":{"description":"Resource Type definition for AWS::S3Vectors::Index","properties":{"creationTime":{"type":"string","description":"Returns the date and time when the vector index was created.\n\nExample: `2024-12-21T10:30:00Z`"},"dataType":{"$ref":"#/types/aws-native:s3vectors:IndexDataType","description":"The data type of the vectors to be inserted into the vector index. Currently, only `float32` is supported, which represents 32-bit floating-point numbers.","replaceOnChanges":true},"dimension":{"type":"integer","description":"The dimensions of the vectors to be inserted into the vector index. This value must be between 1 and 4096, inclusive. All vectors stored in the index must have the same number of dimensions.\n\nThe dimension value affects the storage requirements and search performance. Higher dimensions require more storage space and may impact search latency.","replaceOnChanges":true},"distanceMetric":{"$ref":"#/types/aws-native:s3vectors:IndexDistanceMetric","description":"The distance metric to be used for similarity search. Valid values are:\n\n- `cosine` - Measures the cosine of the angle between two vectors.\n- `euclidean` - Measures the straight-line distance between two points in multi-dimensional space. Lower values indicate greater similarity.","replaceOnChanges":true},"encryptionConfiguration":{"$ref":"#/types/aws-native:s3vectors:IndexEncryptionConfiguration","description":"The encryption configuration for a vector index. By default, if you don't specify, all new vectors in the vector index will use the encryption configuration of the vector bucket.","replaceOnChanges":true},"indexArn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified index.\n\nExample: `arn:aws:s3vectors:us-east-1:123456789012:bucket/amzn-s3-demo-vector-bucket/index/my-index`"},"indexName":{"type":"string","description":"The name of the vector index to create. The index name must be between 3 and 63 characters long and can contain only lowercase letters, numbers, hyphens (-), and dots (.). The index name must be unique within the vector bucket.\n\nIf you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the index name.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.","replaceOnChanges":true},"metadataConfiguration":{"$ref":"#/types/aws-native:s3vectors:IndexMetadataConfiguration","description":"The metadata configuration for the vector index.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the index."},"vectorBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the vector bucket that contains the vector index.","replaceOnChanges":true},"vectorBucketName":{"type":"string","description":"The name of the vector bucket that contains the vector index.","replaceOnChanges":true}},"type":"object","required":["creationTime","dataType","dimension","distanceMetric","indexArn"],"inputProperties":{"dataType":{"$ref":"#/types/aws-native:s3vectors:IndexDataType","description":"The data type of the vectors to be inserted into the vector index. Currently, only `float32` is supported, which represents 32-bit floating-point numbers."},"dimension":{"type":"integer","description":"The dimensions of the vectors to be inserted into the vector index. This value must be between 1 and 4096, inclusive. All vectors stored in the index must have the same number of dimensions.\n\nThe dimension value affects the storage requirements and search performance. Higher dimensions require more storage space and may impact search latency."},"distanceMetric":{"$ref":"#/types/aws-native:s3vectors:IndexDistanceMetric","description":"The distance metric to be used for similarity search. Valid values are:\n\n- `cosine` - Measures the cosine of the angle between two vectors.\n- `euclidean` - Measures the straight-line distance between two points in multi-dimensional space. Lower values indicate greater similarity."},"encryptionConfiguration":{"$ref":"#/types/aws-native:s3vectors:IndexEncryptionConfiguration","description":"The encryption configuration for a vector index. By default, if you don't specify, all new vectors in the vector index will use the encryption configuration of the vector bucket."},"indexName":{"type":"string","description":"The name of the vector index to create. The index name must be between 3 and 63 characters long and can contain only lowercase letters, numbers, hyphens (-), and dots (.). The index name must be unique within the vector bucket.\n\nIf you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the index name.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name."},"metadataConfiguration":{"$ref":"#/types/aws-native:s3vectors:IndexMetadataConfiguration","description":"The metadata configuration for the vector index."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the index."},"vectorBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the vector bucket that contains the vector index."},"vectorBucketName":{"type":"string","description":"The name of the vector bucket that contains the vector index."}},"requiredInputs":["dataType","dimension","distanceMetric"]},"aws-native:s3vectors:VectorBucket":{"description":"Resource Type definition for AWS::S3Vectors::VectorBucket","properties":{"creationTime":{"type":"string","description":"Returns the date and time when the vector bucket was created.\n\nExample: `2024-12-21T10:30:00Z`"},"encryptionConfiguration":{"$ref":"#/types/aws-native:s3vectors:VectorBucketEncryptionConfiguration","description":"The encryption configuration for the vector bucket.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the vector bucket."},"vectorBucketArn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified vector bucket.\n\nExample: `arn:aws:s3vectors:us-east-1:123456789012:bucket/amzn-s3-demo-vector-bucket`"},"vectorBucketName":{"type":"string","description":"A name for the vector bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). The bucket name must be unique in the same AWS account for each AWS Region. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name.\n\nThe bucket name must be between 3 and 63 characters long and must not contain uppercase characters or underscores.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name.","replaceOnChanges":true}},"type":"object","required":["creationTime","vectorBucketArn"],"inputProperties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:s3vectors:VectorBucketEncryptionConfiguration","description":"The encryption configuration for the vector bucket."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"User tags (key-value pairs) to associate with the vector bucket."},"vectorBucketName":{"type":"string","description":"A name for the vector bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). The bucket name must be unique in the same AWS account for each AWS Region. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name.\n\nThe bucket name must be between 3 and 63 characters long and must not contain uppercase characters or underscores.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name."}}},"aws-native:s3vectors:VectorBucketPolicy":{"description":"Resource Type definition for AWS::S3Vectors::VectorBucketPolicy","properties":{"policy":{"$ref":"#/types/aws-native:s3vectors:VectorBucketPolicyPolicy","description":"A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM ."},"vectorBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies.","replaceOnChanges":true},"vectorBucketName":{"type":"string","description":"The name of the S3 vector bucket to which the policy applies.","replaceOnChanges":true}},"type":"object","required":["policy"],"inputProperties":{"policy":{"$ref":"#/types/aws-native:s3vectors:VectorBucketPolicyPolicy","description":"A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM ."},"vectorBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies."},"vectorBucketName":{"type":"string","description":"The name of the S3 vector bucket to which the policy applies."}},"requiredInputs":["policy"]},"aws-native:sagemaker:App":{"description":"Resource Type definition for AWS::SageMaker::App","properties":{"appArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the app."},"appName":{"type":"string","description":"The name of the app.","replaceOnChanges":true},"appType":{"$ref":"#/types/aws-native:sagemaker:AppType","description":"The type of app.","replaceOnChanges":true},"builtInLifecycleConfigArn":{"type":"string","description":"The lifecycle configuration that runs before the default lifecycle configuration."},"domainId":{"type":"string","description":"The domain ID.","replaceOnChanges":true},"recoveryMode":{"type":"boolean","description":"Indicates whether the application is launched in recovery mode."},"resourceSpec":{"$ref":"#/types/aws-native:sagemaker:AppResourceSpec","description":"The instance type and the Amazon Resource Name (ARN) of the SageMaker image created on the instance.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the app."},"userProfileName":{"type":"string","description":"The user profile name.","replaceOnChanges":true}},"type":"object","required":["appArn","appName","appType","builtInLifecycleConfigArn","domainId","userProfileName"],"inputProperties":{"appName":{"type":"string","description":"The name of the app."},"appType":{"$ref":"#/types/aws-native:sagemaker:AppType","description":"The type of app."},"domainId":{"type":"string","description":"The domain ID."},"recoveryMode":{"type":"boolean","description":"Indicates whether the application is launched in recovery mode."},"resourceSpec":{"$ref":"#/types/aws-native:sagemaker:AppResourceSpec","description":"The instance type and the Amazon Resource Name (ARN) of the SageMaker image created on the instance."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the app."},"userProfileName":{"type":"string","description":"The user profile name."}},"requiredInputs":["appType","domainId","userProfileName"]},"aws-native:sagemaker:AppImageConfig":{"description":"Resource Type definition for AWS::SageMaker::AppImageConfig","properties":{"appImageConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AppImageConfig."},"appImageConfigName":{"type":"string","description":"The Name of the AppImageConfig.","replaceOnChanges":true},"codeEditorAppImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigCodeEditorAppImageConfig","description":"The CodeEditorAppImageConfig."},"jupyterLabAppImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigJupyterLabAppImageConfig","description":"The JupyterLabAppImageConfig."},"kernelGatewayImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigKernelGatewayImageConfig","description":"The KernelGatewayImageConfig."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the AppImageConfig."}},"type":"object","required":["appImageConfigArn","appImageConfigName"],"inputProperties":{"appImageConfigName":{"type":"string","description":"The Name of the AppImageConfig."},"codeEditorAppImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigCodeEditorAppImageConfig","description":"The CodeEditorAppImageConfig."},"jupyterLabAppImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigJupyterLabAppImageConfig","description":"The JupyterLabAppImageConfig."},"kernelGatewayImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigKernelGatewayImageConfig","description":"The KernelGatewayImageConfig."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the AppImageConfig."}}},"aws-native:sagemaker:Cluster":{"description":"Resource Type definition for AWS::SageMaker::Cluster","properties":{"autoScaling":{"$ref":"#/types/aws-native:sagemaker:ClusterAutoScalingConfig"},"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the HyperPod Cluster."},"clusterName":{"type":"string","description":"The name of the HyperPod Cluster.","replaceOnChanges":true},"clusterRole":{"type":"string","description":"The cluster role for the autoscaler to assume."},"clusterStatus":{"$ref":"#/types/aws-native:sagemaker:ClusterStatus","description":"The status of the HyperPod Cluster."},"creationTime":{"type":"string","description":"The time at which the HyperPod cluster was created."},"failureMessage":{"type":"string","description":"The failure message of the HyperPod Cluster."},"instanceGroups":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterInstanceGroup"},"description":"The instance groups of the SageMaker HyperPod cluster. To delete an instance group, remove it from the array."},"nodeProvisioningMode":{"$ref":"#/types/aws-native:sagemaker:ClusterNodeProvisioningMode","description":"Determines the scaling strategy for the SageMaker HyperPod cluster. When set to 'Continuous', enables continuous scaling which dynamically manages node provisioning. If the parameter is omitted, uses the standard scaling approach in previous release."},"nodeRecovery":{"$ref":"#/types/aws-native:sagemaker:ClusterNodeRecovery","description":"If node auto-recovery is set to true, faulty nodes will be replaced or rebooted when a failure is detected. If set to false, nodes will be labelled when a fault is detected."},"orchestrator":{"$ref":"#/types/aws-native:sagemaker:ClusterOrchestrator","description":"The orchestrator type for the SageMaker HyperPod cluster. Currently, `'eks'` is the only available option."},"restrictedInstanceGroups":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterRestrictedInstanceGroup"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Custom tags for managing the SageMaker HyperPod cluster as an AWS resource. You can add tags to your cluster in the same way you add them in other AWS services that support tagging."},"tieredStorageConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterTieredStorageConfig"},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterVpcConfig","description":"Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC. For more information, see [Give SageMaker Access to Resources in your Amazon VPC](https://docs.aws.amazon.com/sagemaker/latest/dg/infrastructure-give-access.html) .","replaceOnChanges":true}},"type":"object","required":["clusterArn","clusterStatus","creationTime","failureMessage"],"inputProperties":{"autoScaling":{"$ref":"#/types/aws-native:sagemaker:ClusterAutoScalingConfig"},"clusterName":{"type":"string","description":"The name of the HyperPod Cluster."},"clusterRole":{"type":"string","description":"The cluster role for the autoscaler to assume."},"instanceGroups":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterInstanceGroup"},"description":"The instance groups of the SageMaker HyperPod cluster. To delete an instance group, remove it from the array."},"nodeProvisioningMode":{"$ref":"#/types/aws-native:sagemaker:ClusterNodeProvisioningMode","description":"Determines the scaling strategy for the SageMaker HyperPod cluster. When set to 'Continuous', enables continuous scaling which dynamically manages node provisioning. If the parameter is omitted, uses the standard scaling approach in previous release."},"nodeRecovery":{"$ref":"#/types/aws-native:sagemaker:ClusterNodeRecovery","description":"If node auto-recovery is set to true, faulty nodes will be replaced or rebooted when a failure is detected. If set to false, nodes will be labelled when a fault is detected."},"orchestrator":{"$ref":"#/types/aws-native:sagemaker:ClusterOrchestrator","description":"The orchestrator type for the SageMaker HyperPod cluster. Currently, `'eks'` is the only available option."},"restrictedInstanceGroups":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ClusterRestrictedInstanceGroup"}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Custom tags for managing the SageMaker HyperPod cluster as an AWS resource. You can add tags to your cluster in the same way you add them in other AWS services that support tagging."},"tieredStorageConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterTieredStorageConfig"},"vpcConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterVpcConfig","description":"Specifies an Amazon Virtual Private Cloud (VPC) that your SageMaker jobs, hosted models, and compute resources have access to. You can control access to and from your resources by configuring a VPC. For more information, see [Give SageMaker Access to Resources in your Amazon VPC](https://docs.aws.amazon.com/sagemaker/latest/dg/infrastructure-give-access.html) ."}}},"aws-native:sagemaker:DataQualityJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::DataQualityJobDefinition","properties":{"creationTime":{"type":"string","description":"The time at which the job definition was created."},"dataQualityAppSpecification":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDataQualityAppSpecification","description":"Specifies the container that runs the monitoring job.","replaceOnChanges":true},"dataQualityBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDataQualityBaselineConfig","description":"Configures the constraints and baselines for the monitoring job.","replaceOnChanges":true},"dataQualityJobInput":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDataQualityJobInput","description":"A list of inputs for the monitoring job. Currently endpoints are supported as monitoring inputs.","replaceOnChanges":true},"dataQualityJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs.","replaceOnChanges":true},"endpointName":{"type":"string","replaceOnChanges":true},"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."},"jobDefinitionName":{"type":"string","description":"The name for the monitoring job definition.","replaceOnChanges":true},"jobResources":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job.","replaceOnChanges":true},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionNetworkConfig","description":"Specifies networking configuration for the monitoring job.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf.","replaceOnChanges":true},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["creationTime","dataQualityAppSpecification","dataQualityJobInput","dataQualityJobOutputConfig","jobDefinitionArn","jobResources","roleArn"],"inputProperties":{"dataQualityAppSpecification":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDataQualityAppSpecification","description":"Specifies the container that runs the monitoring job."},"dataQualityBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDataQualityBaselineConfig","description":"Configures the constraints and baselines for the monitoring job."},"dataQualityJobInput":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionDataQualityJobInput","description":"A list of inputs for the monitoring job. Currently endpoints are supported as monitoring inputs."},"dataQualityJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs."},"endpointName":{"type":"string"},"jobDefinitionName":{"type":"string","description":"The name for the monitoring job definition."},"jobResources":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionNetworkConfig","description":"Specifies networking configuration for the monitoring job."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf."},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:DataQualityJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["dataQualityAppSpecification","dataQualityJobInput","dataQualityJobOutputConfig","jobResources","roleArn"]},"aws-native:sagemaker:Device":{"description":"Resource schema for AWS::SageMaker::Device","properties":{"device":{"$ref":"#/types/aws-native:sagemaker:Device","description":"The Edge Device you want to register against a device fleet","language":{"csharp":{"name":"DeviceValue"}}},"deviceFleetName":{"type":"string","description":"The name of the edge device fleet"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Associate tags with the resource"}},"type":"object","required":["deviceFleetName"],"inputProperties":{"device":{"$ref":"#/types/aws-native:sagemaker:Device","description":"The Edge Device you want to register against a device fleet","language":{"csharp":{"name":"DeviceValue"}}},"deviceFleetName":{"type":"string","description":"The name of the edge device fleet"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Associate tags with the resource"}},"requiredInputs":["deviceFleetName"]},"aws-native:sagemaker:DeviceFleet":{"description":"Resource schema for AWS::SageMaker::DeviceFleet","properties":{"description":{"type":"string","description":"Description for the edge device fleet"},"deviceFleetName":{"type":"string","description":"The name of the edge device fleet","replaceOnChanges":true},"outputConfig":{"$ref":"#/types/aws-native:sagemaker:DeviceFleetEdgeOutputConfig","description":"S3 bucket and an ecryption key id (if available) to store outputs for the fleet"},"roleArn":{"type":"string","description":"Role associated with the device fleet"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Associate tags with the resource"}},"type":"object","required":["deviceFleetName","outputConfig","roleArn"],"inputProperties":{"description":{"type":"string","description":"Description for the edge device fleet"},"deviceFleetName":{"type":"string","description":"The name of the edge device fleet"},"outputConfig":{"$ref":"#/types/aws-native:sagemaker:DeviceFleetEdgeOutputConfig","description":"S3 bucket and an ecryption key id (if available) to store outputs for the fleet"},"roleArn":{"type":"string","description":"Role associated with the device fleet"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Associate tags with the resource"}},"requiredInputs":["outputConfig","roleArn"]},"aws-native:sagemaker:Domain":{"description":"Resource Type definition for AWS::SageMaker::Domain","properties":{"appNetworkAccessType":{"$ref":"#/types/aws-native:sagemaker:DomainAppNetworkAccessType","description":"Specifies the VPC used for non-EFS traffic. The default value is PublicInternetOnly."},"appSecurityGroupManagement":{"$ref":"#/types/aws-native:sagemaker:DomainAppSecurityGroupManagement","description":"The entity that creates and manages the required security groups for inter-app communication in VPCOnly mode. Required when CreateDomain.AppNetworkAccessType is VPCOnly and DomainSettings.RStudioServerProDomainSettings.DomainExecutionRoleArn is provided."},"authMode":{"$ref":"#/types/aws-native:sagemaker:DomainAuthMode","description":"The mode of authentication that members use to access the domain.","replaceOnChanges":true},"defaultSpaceSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDefaultSpaceSettings","description":"The default space settings."},"defaultUserSettings":{"$ref":"#/types/aws-native:sagemaker:DomainUserSettings","description":"The default user settings."},"domainArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the created domain."},"domainId":{"type":"string","description":"The domain name."},"domainName":{"type":"string","description":"A name for the domain.","replaceOnChanges":true},"domainSettings":{"$ref":"#/types/aws-native:sagemaker:DomainSettings","description":"A collection of settings that apply to the `SageMaker Domain` . These settings are specified through the `CreateDomain` API call."},"homeEfsFileSystemId":{"type":"string","description":"The ID of the Amazon Elastic File System (EFS) managed by this Domain."},"kmsKeyId":{"type":"string","description":"SageMaker uses AWS KMS to encrypt the EFS volume attached to the domain with an AWS managed customer master key (CMK) by default.","replaceOnChanges":true},"securityGroupIdForDomainBoundary":{"type":"string","description":"The ID of the security group that authorizes traffic between the RSessionGateway apps and the RStudioServerPro app."},"singleSignOnApplicationArn":{"type":"string","description":"The ARN of the application managed by SageMaker in IAM Identity Center. This value is only returned for domains created after October 1, 2023."},"singleSignOnManagedApplicationInstanceId":{"type":"string","description":"The SSO managed application instance ID."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The VPC subnets that Studio uses for communication."},"tagPropagation":{"$ref":"#/types/aws-native:sagemaker:DomainTagPropagation","description":"Indicates whether the tags added to Domain, User Profile and Space entity is propagated to all SageMaker resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of tags to apply to the user profile.","replaceOnChanges":true},"url":{"type":"string","description":"The URL to the created domain."},"vpcId":{"type":"string","description":"The ID of the Amazon Virtual Private Cloud (VPC) that Studio uses for communication."}},"type":"object","required":["authMode","defaultUserSettings","domainArn","domainId","domainName","homeEfsFileSystemId","securityGroupIdForDomainBoundary","singleSignOnApplicationArn","singleSignOnManagedApplicationInstanceId","url"],"inputProperties":{"appNetworkAccessType":{"$ref":"#/types/aws-native:sagemaker:DomainAppNetworkAccessType","description":"Specifies the VPC used for non-EFS traffic. The default value is PublicInternetOnly."},"appSecurityGroupManagement":{"$ref":"#/types/aws-native:sagemaker:DomainAppSecurityGroupManagement","description":"The entity that creates and manages the required security groups for inter-app communication in VPCOnly mode. Required when CreateDomain.AppNetworkAccessType is VPCOnly and DomainSettings.RStudioServerProDomainSettings.DomainExecutionRoleArn is provided."},"authMode":{"$ref":"#/types/aws-native:sagemaker:DomainAuthMode","description":"The mode of authentication that members use to access the domain."},"defaultSpaceSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDefaultSpaceSettings","description":"The default space settings."},"defaultUserSettings":{"$ref":"#/types/aws-native:sagemaker:DomainUserSettings","description":"The default user settings."},"domainName":{"type":"string","description":"A name for the domain."},"domainSettings":{"$ref":"#/types/aws-native:sagemaker:DomainSettings","description":"A collection of settings that apply to the `SageMaker Domain` . These settings are specified through the `CreateDomain` API call."},"kmsKeyId":{"type":"string","description":"SageMaker uses AWS KMS to encrypt the EFS volume attached to the domain with an AWS managed customer master key (CMK) by default."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The VPC subnets that Studio uses for communication."},"tagPropagation":{"$ref":"#/types/aws-native:sagemaker:DomainTagPropagation","description":"Indicates whether the tags added to Domain, User Profile and Space entity is propagated to all SageMaker resources."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of tags to apply to the user profile."},"vpcId":{"type":"string","description":"The ID of the Amazon Virtual Private Cloud (VPC) that Studio uses for communication."}},"requiredInputs":["authMode","defaultUserSettings"]},"aws-native:sagemaker:Endpoint":{"description":"Resource Type definition for AWS::SageMaker::Endpoint","properties":{"deploymentConfig":{"$ref":"#/types/aws-native:sagemaker:EndpointDeploymentConfig","description":"Specifies deployment configuration for updating the SageMaker endpoint. Includes rollback and update policies."},"endpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint."},"endpointConfigName":{"type":"string","description":"The name of the endpoint configuration for the SageMaker endpoint. This is a required property."},"endpointName":{"type":"string","description":"The name of the SageMaker endpoint. This name must be unique within an AWS Region.","replaceOnChanges":true},"excludeRetainedVariantProperties":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:EndpointVariantProperty"},"description":"Specifies a list of variant properties that you want to exclude when updating an endpoint."},"retainAllVariantProperties":{"type":"boolean","description":"When set to true, retains all variant properties for an endpoint when it is updated."},"retainDeploymentConfig":{"type":"boolean","description":"When set to true, retains the deployment configuration during endpoint updates."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["endpointArn","endpointConfigName","endpointName"],"inputProperties":{"deploymentConfig":{"$ref":"#/types/aws-native:sagemaker:EndpointDeploymentConfig","description":"Specifies deployment configuration for updating the SageMaker endpoint. Includes rollback and update policies."},"endpointConfigName":{"type":"string","description":"The name of the endpoint configuration for the SageMaker endpoint. This is a required property."},"endpointName":{"type":"string","description":"The name of the SageMaker endpoint. This name must be unique within an AWS Region."},"excludeRetainedVariantProperties":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:EndpointVariantProperty"},"description":"Specifies a list of variant properties that you want to exclude when updating an endpoint."},"retainAllVariantProperties":{"type":"boolean","description":"When set to true, retains all variant properties for an endpoint when it is updated."},"retainDeploymentConfig":{"type":"boolean","description":"When set to true, retains the deployment configuration during endpoint updates."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["endpointConfigName"]},"aws-native:sagemaker:FeatureGroup":{"description":"Resource Type definition for AWS::SageMaker::FeatureGroup","properties":{"creationTime":{"type":"string","description":"A timestamp of FeatureGroup creation time."},"description":{"type":"string","description":"Description about the FeatureGroup.","replaceOnChanges":true},"eventTimeFeatureName":{"type":"string","description":"The Event Time Feature Name.","replaceOnChanges":true},"featureDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupFeatureDefinition"},"description":"An Array of Feature Definition"},"featureGroupName":{"type":"string","description":"The Name of the FeatureGroup.","replaceOnChanges":true},"featureGroupStatus":{"type":"string","description":"The status of the feature group."},"offlineStoreConfig":{"$ref":"#/types/aws-native:sagemaker:OfflineStoreConfigProperties","description":"The configuration of an `OfflineStore` .","replaceOnChanges":true},"onlineStoreConfig":{"$ref":"#/types/aws-native:sagemaker:OnlineStoreConfigProperties","description":"The configuration of an `OnlineStore` ."},"recordIdentifierFeatureName":{"type":"string","description":"The Record Identifier Feature Name.","replaceOnChanges":true},"roleArn":{"type":"string","description":"Role Arn","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pair to apply to this resource.","replaceOnChanges":true},"throughputConfig":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupThroughputConfig","description":"Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store."}},"type":"object","required":["creationTime","eventTimeFeatureName","featureDefinitions","featureGroupName","featureGroupStatus","recordIdentifierFeatureName"],"inputProperties":{"description":{"type":"string","description":"Description about the FeatureGroup."},"eventTimeFeatureName":{"type":"string","description":"The Event Time Feature Name."},"featureDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupFeatureDefinition"},"description":"An Array of Feature Definition"},"featureGroupName":{"type":"string","description":"The Name of the FeatureGroup."},"offlineStoreConfig":{"$ref":"#/types/aws-native:sagemaker:OfflineStoreConfigProperties","description":"The configuration of an `OfflineStore` ."},"onlineStoreConfig":{"$ref":"#/types/aws-native:sagemaker:OnlineStoreConfigProperties","description":"The configuration of an `OnlineStore` ."},"recordIdentifierFeatureName":{"type":"string","description":"The Record Identifier Feature Name."},"roleArn":{"type":"string","description":"Role Arn"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pair to apply to this resource."},"throughputConfig":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupThroughputConfig","description":"Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store."}},"requiredInputs":["eventTimeFeatureName","featureDefinitions","recordIdentifierFeatureName"]},"aws-native:sagemaker:Image":{"description":"Resource Type definition for AWS::SageMaker::Image","properties":{"imageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image.\n\n*Type* : String\n\n*Length Constraints* : Maximum length of 256.\n\n*Pattern* : `^arn:aws(-[\\w]+)*:sagemaker:.+:[0-9]{12}:image/[a-z0-9]([-.]?[a-z0-9])*$`"},"imageDescription":{"type":"string","description":"The description of the image."},"imageDisplayName":{"type":"string","description":"The display name of the image.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 128.\n\n*Pattern* : `^\\S(.*\\S)?$`"},"imageName":{"type":"string","description":"The name of the Image. Must be unique by region in your account.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 63.\n\n*Pattern* : `^[a-zA-Z0-9]([-.]?[a-zA-Z0-9]){0,62}$`","replaceOnChanges":true},"imageRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that enables Amazon SageMaker to perform tasks on your behalf.\n\n*Length Constraints* : Minimum length of 20. Maximum length of 2048.\n\n*Pattern* : `^arn:aws[a-z\\-]*:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+$`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["imageArn","imageName","imageRoleArn"],"inputProperties":{"imageDescription":{"type":"string","description":"The description of the image."},"imageDisplayName":{"type":"string","description":"The display name of the image.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 128.\n\n*Pattern* : `^\\S(.*\\S)?$`"},"imageName":{"type":"string","description":"The name of the Image. Must be unique by region in your account.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 63.\n\n*Pattern* : `^[a-zA-Z0-9]([-.]?[a-zA-Z0-9]){0,62}$`"},"imageRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that enables Amazon SageMaker to perform tasks on your behalf.\n\n*Length Constraints* : Minimum length of 20. Maximum length of 2048.\n\n*Pattern* : `^arn:aws[a-z\\-]*:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+$`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["imageRoleArn"]},"aws-native:sagemaker:ImageVersion":{"description":"Resource Type definition for AWS::SageMaker::ImageVersion","properties":{"alias":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"baseImage":{"type":"string","description":"The container image that the SageMaker image version is based on.","replaceOnChanges":true},"containerImage":{"type":"string","description":"The URI of the container image version referenced by ImageVersion."},"horovod":{"type":"boolean"},"imageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the parent Image."},"imageName":{"type":"string","description":"The name of the parent image.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 63.\n\n*Pattern* : `^[a-zA-Z0-9]([-.]?[a-zA-Z0-9]){0,62}$`","replaceOnChanges":true},"imageVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image version.\n\n*Type* : String\n\n*Length Constraints* : Maximum length of 256.\n\n*Pattern* : `^arn:aws(-[\\w]+)*:sagemaker:.+:[0-9]{12}:image-version/[a-z0-9]([-.]?[a-z0-9])*/[0-9]+$`"},"jobType":{"$ref":"#/types/aws-native:sagemaker:ImageVersionJobType"},"mlFramework":{"type":"string"},"processor":{"$ref":"#/types/aws-native:sagemaker:ImageVersionProcessor"},"programmingLang":{"type":"string"},"releaseNotes":{"type":"string"},"vendorGuidance":{"$ref":"#/types/aws-native:sagemaker:ImageVersionVendorGuidance"},"version":{"type":"integer","description":"The version of the image."}},"type":"object","required":["baseImage","containerImage","imageArn","imageName","imageVersionArn","version"],"inputProperties":{"alias":{"type":"string"},"aliases":{"type":"array","items":{"type":"string"}},"baseImage":{"type":"string","description":"The container image that the SageMaker image version is based on."},"horovod":{"type":"boolean"},"imageName":{"type":"string","description":"The name of the parent image.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 63.\n\n*Pattern* : `^[a-zA-Z0-9]([-.]?[a-zA-Z0-9]){0,62}$`"},"jobType":{"$ref":"#/types/aws-native:sagemaker:ImageVersionJobType"},"mlFramework":{"type":"string"},"processor":{"$ref":"#/types/aws-native:sagemaker:ImageVersionProcessor"},"programmingLang":{"type":"string"},"releaseNotes":{"type":"string"},"vendorGuidance":{"$ref":"#/types/aws-native:sagemaker:ImageVersionVendorGuidance"}},"requiredInputs":["baseImage","imageName"]},"aws-native:sagemaker:InferenceComponent":{"description":"Resource Type definition for AWS::SageMaker::InferenceComponent","properties":{"creationTime":{"type":"string","description":"The time when the inference component was created."},"deploymentConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentDeploymentConfig","description":"The deployment configuration for an endpoint, which contains the desired deployment strategy and rollback configurations."},"endpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint that hosts the inference component."},"endpointName":{"type":"string","description":"The name of the endpoint that hosts the inference component."},"failureReason":{"type":"string"},"inferenceComponentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the inference component."},"inferenceComponentName":{"type":"string","description":"The name of the inference component."},"inferenceComponentStatus":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentStatus","description":"The status of the inference component."},"lastModifiedTime":{"type":"string","description":"The time when the inference component was last updated."},"runtimeConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentRuntimeConfig"},"specification":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentSpecification"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"variantName":{"type":"string","description":"The name of the production variant that hosts the inference component."}},"type":"object","required":["creationTime","endpointName","failureReason","inferenceComponentArn","inferenceComponentStatus","lastModifiedTime","specification"],"inputProperties":{"deploymentConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentDeploymentConfig","description":"The deployment configuration for an endpoint, which contains the desired deployment strategy and rollback configurations."},"endpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint that hosts the inference component."},"endpointName":{"type":"string","description":"The name of the endpoint that hosts the inference component."},"inferenceComponentName":{"type":"string","description":"The name of the inference component."},"runtimeConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentRuntimeConfig"},"specification":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentSpecification"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"variantName":{"type":"string","description":"The name of the production variant that hosts the inference component."}},"requiredInputs":["endpointName","specification"]},"aws-native:sagemaker:InferenceExperiment":{"description":"Resource Type definition for AWS::SageMaker::InferenceExperiment","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the inference experiment."},"creationTime":{"type":"string","description":"The timestamp at which you created the inference experiment."},"dataStorageConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentDataStorageConfig","description":"The Amazon S3 location and configuration for storing inference request and response data."},"description":{"type":"string","description":"The description of the inference experiment."},"desiredState":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentDesiredState","description":"The desired state of the experiment after starting or stopping operation."},"endpointMetadata":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentEndpointMetadata"},"endpointName":{"type":"string","description":"The name of the endpoint.","replaceOnChanges":true},"kmsKey":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance that hosts the endpoint.","replaceOnChanges":true},"lastModifiedTime":{"type":"string","description":"The timestamp at which you last modified the inference experiment."},"modelVariants":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentModelVariantConfig"},"description":"An array of ModelVariantConfig objects. Each ModelVariantConfig object in the array describes the infrastructure configuration for the corresponding variant."},"name":{"type":"string","description":"The name for the inference experiment.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to access model artifacts and container images, and manage Amazon SageMaker Inference endpoints for model deployment.","replaceOnChanges":true},"schedule":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentSchedule","description":"The duration for which the inference experiment ran or will run.\n\nThe maximum duration that you can set for an inference experiment is 30 days."},"shadowModeConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentShadowModeConfig","description":"The configuration of `ShadowMode` inference experiment type, which shows the production variant that takes all the inference requests, and the shadow variant to which Amazon SageMaker replicates a percentage of the inference requests. For the shadow variant it also shows the percentage of requests that Amazon SageMaker replicates."},"status":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentStatus","description":"The status of the inference experiment."},"statusReason":{"type":"string","description":"The error message or client-specified reason from the StopInferenceExperiment API, that explains the status of the inference experiment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentType","description":"The type of the inference experiment that you want to run.","replaceOnChanges":true}},"type":"object","required":["arn","creationTime","endpointMetadata","endpointName","lastModifiedTime","modelVariants","name","roleArn","status","type"],"inputProperties":{"dataStorageConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentDataStorageConfig","description":"The Amazon S3 location and configuration for storing inference request and response data."},"description":{"type":"string","description":"The description of the inference experiment."},"desiredState":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentDesiredState","description":"The desired state of the experiment after starting or stopping operation."},"endpointName":{"type":"string","description":"The name of the endpoint."},"kmsKey":{"type":"string","description":"The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance that hosts the endpoint."},"modelVariants":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentModelVariantConfig"},"description":"An array of ModelVariantConfig objects. Each ModelVariantConfig object in the array describes the infrastructure configuration for the corresponding variant."},"name":{"type":"string","description":"The name for the inference experiment."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to access model artifacts and container images, and manage Amazon SageMaker Inference endpoints for model deployment."},"schedule":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentSchedule","description":"The duration for which the inference experiment ran or will run.\n\nThe maximum duration that you can set for an inference experiment is 30 days."},"shadowModeConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentShadowModeConfig","description":"The configuration of `ShadowMode` inference experiment type, which shows the production variant that takes all the inference requests, and the shadow variant to which Amazon SageMaker replicates a percentage of the inference requests. For the shadow variant it also shows the percentage of requests that Amazon SageMaker replicates."},"statusReason":{"type":"string","description":"The error message or client-specified reason from the StopInferenceExperiment API, that explains the status of the inference experiment."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"type":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentType","description":"The type of the inference experiment that you want to run."}},"requiredInputs":["endpointName","modelVariants","roleArn","type"]},"aws-native:sagemaker:MlflowTrackingServer":{"description":"Resource Type definition for AWS::SageMaker::MlflowTrackingServer","properties":{"artifactStoreUri":{"type":"string","description":"The Amazon S3 URI for MLFlow Tracking Server artifacts."},"automaticModelRegistration":{"type":"boolean","description":"A flag to enable Automatic SageMaker Model Registration."},"mlflowVersion":{"type":"string","description":"The MLFlow Version used on the MLFlow Tracking Server."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that enables Amazon SageMaker to perform tasks on behalf of the customer."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trackingServerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MLFlow Tracking Server."},"trackingServerName":{"type":"string","description":"The name of the MLFlow Tracking Server.","replaceOnChanges":true},"trackingServerSize":{"$ref":"#/types/aws-native:sagemaker:MlflowTrackingServerTrackingServerSize","description":"The size of the MLFlow Tracking Server."},"weeklyMaintenanceWindowStart":{"type":"string","description":"The start of the time window for maintenance of the MLFlow Tracking Server in UTC time."}},"type":"object","required":["artifactStoreUri","roleArn","trackingServerArn","trackingServerName"],"inputProperties":{"artifactStoreUri":{"type":"string","description":"The Amazon S3 URI for MLFlow Tracking Server artifacts."},"automaticModelRegistration":{"type":"boolean","description":"A flag to enable Automatic SageMaker Model Registration."},"mlflowVersion":{"type":"string","description":"The MLFlow Version used on the MLFlow Tracking Server."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that enables Amazon SageMaker to perform tasks on behalf of the customer."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"trackingServerName":{"type":"string","description":"The name of the MLFlow Tracking Server."},"trackingServerSize":{"$ref":"#/types/aws-native:sagemaker:MlflowTrackingServerTrackingServerSize","description":"The size of the MLFlow Tracking Server."},"weeklyMaintenanceWindowStart":{"type":"string","description":"The start of the time window for maintenance of the MLFlow Tracking Server in UTC time."}},"requiredInputs":["artifactStoreUri","roleArn"]},"aws-native:sagemaker:ModelBiasJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::ModelBiasJobDefinition","properties":{"creationTime":{"type":"string","description":"The time at which the job definition was created."},"endpointName":{"type":"string","replaceOnChanges":true},"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."},"jobDefinitionName":{"type":"string","description":"The name of the bias job definition. The name must be unique within an AWS Region in the AWS account.","replaceOnChanges":true},"jobResources":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job.","replaceOnChanges":true},"modelBiasAppSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionModelBiasAppSpecification","description":"Configures the model bias job to run a specified Docker container image.","replaceOnChanges":true},"modelBiasBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionModelBiasBaselineConfig","description":"The baseline configuration for a model bias job.","replaceOnChanges":true},"modelBiasJobInput":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionModelBiasJobInput","description":"Inputs for the model bias job.","replaceOnChanges":true},"modelBiasJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs.","replaceOnChanges":true},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionNetworkConfig","description":"Networking options for a model bias job.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf.","replaceOnChanges":true},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["creationTime","jobDefinitionArn","jobResources","modelBiasAppSpecification","modelBiasJobInput","modelBiasJobOutputConfig","roleArn"],"inputProperties":{"endpointName":{"type":"string"},"jobDefinitionName":{"type":"string","description":"The name of the bias job definition. The name must be unique within an AWS Region in the AWS account."},"jobResources":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job."},"modelBiasAppSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionModelBiasAppSpecification","description":"Configures the model bias job to run a specified Docker container image."},"modelBiasBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionModelBiasBaselineConfig","description":"The baseline configuration for a model bias job."},"modelBiasJobInput":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionModelBiasJobInput","description":"Inputs for the model bias job."},"modelBiasJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionNetworkConfig","description":"Networking options for a model bias job."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf."},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ModelBiasJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["jobResources","modelBiasAppSpecification","modelBiasJobInput","modelBiasJobOutputConfig","roleArn"]},"aws-native:sagemaker:ModelCard":{"description":"Resource Type definition for AWS::SageMaker::ModelCard.","properties":{"content":{"$ref":"#/types/aws-native:sagemaker:ModelCardContent","description":"The content of the model card. Content uses the [model card JSON schema](https://docs.aws.amazon.com/sagemaker/latest/dg/model-cards.html#model-cards-json-schema) ."},"createdBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardUserContext","description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card."},"creationTime":{"type":"string","description":"The date and time the model card was created."},"lastModifiedBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardUserContext","description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card."},"lastModifiedTime":{"type":"string","description":"The date and time the model card was last modified."},"modelCardArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the successfully created model card."},"modelCardName":{"type":"string","description":"The unique name of the model card.","replaceOnChanges":true},"modelCardProcessingStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardProcessingStatus","description":"The processing status of model card deletion. The ModelCardProcessingStatus updates throughout the different deletion steps."},"modelCardStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardStatus","description":"The approval status of the model card within your organization. Different organizations might have different criteria for model card review and approval."},"modelCardVersion":{"type":"integer","description":"A version of the model card."},"securityConfig":{"$ref":"#/types/aws-native:sagemaker:ModelCardSecurityConfig","description":"The security configuration used to protect model card data.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs used to manage metadata for model cards."}},"type":"object","required":["content","creationTime","lastModifiedTime","modelCardArn","modelCardName","modelCardProcessingStatus","modelCardStatus","modelCardVersion"],"inputProperties":{"content":{"$ref":"#/types/aws-native:sagemaker:ModelCardContent","description":"The content of the model card. Content uses the [model card JSON schema](https://docs.aws.amazon.com/sagemaker/latest/dg/model-cards.html#model-cards-json-schema) ."},"createdBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardUserContext","description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card."},"lastModifiedBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardUserContext","description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card."},"modelCardName":{"type":"string","description":"The unique name of the model card."},"modelCardStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardStatus","description":"The approval status of the model card within your organization. Different organizations might have different criteria for model card review and approval."},"securityConfig":{"$ref":"#/types/aws-native:sagemaker:ModelCardSecurityConfig","description":"The security configuration used to protect model card data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs used to manage metadata for model cards."}},"requiredInputs":["content","modelCardStatus"]},"aws-native:sagemaker:ModelExplainabilityJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::ModelExplainabilityJobDefinition","properties":{"creationTime":{"type":"string","description":"The time at which the job definition was created."},"endpointName":{"type":"string","replaceOnChanges":true},"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."},"jobDefinitionName":{"type":"string","description":"The name of the model explainability job definition. The name must be unique within an AWS Region in the AWS account.","replaceOnChanges":true},"jobResources":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job.","replaceOnChanges":true},"modelExplainabilityAppSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityAppSpecification","description":"Configures the model explainability job to run a specified Docker container image.","replaceOnChanges":true},"modelExplainabilityBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityBaselineConfig","description":"The baseline configuration for a model explainability job.","replaceOnChanges":true},"modelExplainabilityJobInput":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityJobInput","description":"Inputs for the model explainability job.","replaceOnChanges":true},"modelExplainabilityJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs.","replaceOnChanges":true},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionNetworkConfig","description":"Networking options for a model explainability job.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf.","replaceOnChanges":true},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["creationTime","jobDefinitionArn","jobResources","modelExplainabilityAppSpecification","modelExplainabilityJobInput","modelExplainabilityJobOutputConfig","roleArn"],"inputProperties":{"endpointName":{"type":"string"},"jobDefinitionName":{"type":"string","description":"The name of the model explainability job definition. The name must be unique within an AWS Region in the AWS account."},"jobResources":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job."},"modelExplainabilityAppSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityAppSpecification","description":"Configures the model explainability job to run a specified Docker container image."},"modelExplainabilityBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityBaselineConfig","description":"The baseline configuration for a model explainability job."},"modelExplainabilityJobInput":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionModelExplainabilityJobInput","description":"Inputs for the model explainability job."},"modelExplainabilityJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionNetworkConfig","description":"Networking options for a model explainability job."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf."},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ModelExplainabilityJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["jobResources","modelExplainabilityAppSpecification","modelExplainabilityJobInput","modelExplainabilityJobOutputConfig","roleArn"]},"aws-native:sagemaker:ModelPackage":{"description":"Resource Type definition for AWS::SageMaker::ModelPackage","properties":{"additionalInferenceSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageAdditionalInferenceSpecificationDefinition"},"description":"An array of additional Inference Specification objects."},"additionalInferenceSpecificationsToAdd":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageAdditionalInferenceSpecificationDefinition"},"description":"An array of additional Inference Specification objects to be added to the existing array. The total number of additional Inference Specification objects cannot exceed 15. Each additional Inference Specification object specifies artifacts based on this model package that can be used on inference endpoints. Generally used with SageMaker Neo to store the compiled artifacts."},"approvalDescription":{"type":"string","description":"A description provided when the model approval is set."},"certifyForMarketplace":{"type":"boolean","description":"Whether the model package is to be certified to be listed on AWS Marketplace. For information about listing model packages on AWS Marketplace, see [List Your Algorithm or Model Package on AWS Marketplace](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-mkt-list.html) ."},"clientToken":{"type":"string","description":"A unique token that guarantees that the call to this API is idempotent.","replaceOnChanges":true},"creationTime":{"type":"string","description":"The time that the model package was created."},"customerMetadataProperties":{"$ref":"#/types/aws-native:sagemaker:ModelPackageCustomerMetadataProperties","description":"The metadata properties for the model package."},"domain":{"type":"string","description":"The machine learning domain of your model package and its components. Common machine learning domains include computer vision and natural language processing.","replaceOnChanges":true},"driftCheckBaselines":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDriftCheckBaselines","description":"Represents the drift check baselines that can be used when the model monitor is set using the model package.","replaceOnChanges":true},"inferenceSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelPackageInferenceSpecification","description":"Defines how to perform inference generation after a training job is run.","replaceOnChanges":true},"lastModifiedTime":{"type":"string","description":"The last time the model package was modified."},"metadataProperties":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetadataProperties","description":"Metadata properties of the tracking entity, trial, or trial component.","replaceOnChanges":true},"modelApprovalStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelApprovalStatus","description":"The approval status of the model. This can be one of the following values.\n\n- `APPROVED` - The model is approved\n- `REJECTED` - The model is rejected.\n- `PENDING_MANUAL_APPROVAL` - The model is waiting for manual approval."},"modelCard":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelCard","description":"An Amazon SageMaker Model Card."},"modelMetrics":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelMetrics","description":"Metrics for the model.","replaceOnChanges":true},"modelPackageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the model package."},"modelPackageDescription":{"type":"string","description":"The description of the model package.","replaceOnChanges":true},"modelPackageGroupName":{"type":"string","description":"The model group to which the model belongs.","replaceOnChanges":true},"modelPackageName":{"type":"string","description":"The name of the model package. The name can be as follows:\n\n- For a versioned model, the name is automatically generated by SageMaker Model Registry and follows the format ' `ModelPackageGroupName/ModelPackageVersion` '.\n- For an unversioned model, you must provide the name."},"modelPackageStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatus","description":"The status of the model package. This can be one of the following values.\n\n- `PENDING` - The model package creation is pending.\n- `IN_PROGRESS` - The model package is in the process of being created.\n- `COMPLETED` - The model package was successfully created.\n- `FAILED` - The model package creation failed.\n- `DELETING` - The model package is in the process of being deleted."},"modelPackageStatusDetails":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatusDetails","description":"Specifies the validation and image scan statuses of the model package."},"modelPackageVersion":{"type":"integer","description":"The version number of a versioned model."},"samplePayloadUrl":{"type":"string","description":"The Amazon Simple Storage Service path where the sample payload are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix).","replaceOnChanges":true},"securityConfig":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSecurityConfig","replaceOnChanges":true},"skipModelValidation":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSkipModelValidation","description":"Indicates if you want to skip model validation."},"sourceAlgorithmSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSourceAlgorithmSpecification","description":"A list of algorithms that were used to create a model package.","replaceOnChanges":true},"sourceUri":{"type":"string","description":"The URI of the source for the model package."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"task":{"type":"string","description":"The machine learning task your model package accomplishes. Common machine learning tasks include object detection and image classification.","replaceOnChanges":true},"validationSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelPackageValidationSpecification","description":"Specifies batch transform jobs that SageMaker runs to validate your model package.","replaceOnChanges":true}},"type":"object","required":["creationTime","lastModifiedTime","modelPackageArn","modelPackageStatus"],"inputProperties":{"additionalInferenceSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageAdditionalInferenceSpecificationDefinition"},"description":"An array of additional Inference Specification objects."},"additionalInferenceSpecificationsToAdd":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageAdditionalInferenceSpecificationDefinition"},"description":"An array of additional Inference Specification objects to be added to the existing array. The total number of additional Inference Specification objects cannot exceed 15. Each additional Inference Specification object specifies artifacts based on this model package that can be used on inference endpoints. Generally used with SageMaker Neo to store the compiled artifacts."},"approvalDescription":{"type":"string","description":"A description provided when the model approval is set."},"certifyForMarketplace":{"type":"boolean","description":"Whether the model package is to be certified to be listed on AWS Marketplace. For information about listing model packages on AWS Marketplace, see [List Your Algorithm or Model Package on AWS Marketplace](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-mkt-list.html) ."},"clientToken":{"type":"string","description":"A unique token that guarantees that the call to this API is idempotent."},"customerMetadataProperties":{"$ref":"#/types/aws-native:sagemaker:ModelPackageCustomerMetadataProperties","description":"The metadata properties for the model package."},"domain":{"type":"string","description":"The machine learning domain of your model package and its components. Common machine learning domains include computer vision and natural language processing."},"driftCheckBaselines":{"$ref":"#/types/aws-native:sagemaker:ModelPackageDriftCheckBaselines","description":"Represents the drift check baselines that can be used when the model monitor is set using the model package."},"inferenceSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelPackageInferenceSpecification","description":"Defines how to perform inference generation after a training job is run."},"metadataProperties":{"$ref":"#/types/aws-native:sagemaker:ModelPackageMetadataProperties","description":"Metadata properties of the tracking entity, trial, or trial component."},"modelApprovalStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelApprovalStatus","description":"The approval status of the model. This can be one of the following values.\n\n- `APPROVED` - The model is approved\n- `REJECTED` - The model is rejected.\n- `PENDING_MANUAL_APPROVAL` - The model is waiting for manual approval."},"modelCard":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelCard","description":"An Amazon SageMaker Model Card."},"modelMetrics":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelMetrics","description":"Metrics for the model."},"modelPackageDescription":{"type":"string","description":"The description of the model package."},"modelPackageGroupName":{"type":"string","description":"The model group to which the model belongs."},"modelPackageName":{"type":"string","description":"The name of the model package. The name can be as follows:\n\n- For a versioned model, the name is automatically generated by SageMaker Model Registry and follows the format ' `ModelPackageGroupName/ModelPackageVersion` '.\n- For an unversioned model, you must provide the name."},"modelPackageStatusDetails":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatusDetails","description":"Specifies the validation and image scan statuses of the model package."},"modelPackageVersion":{"type":"integer","description":"The version number of a versioned model."},"samplePayloadUrl":{"type":"string","description":"The Amazon Simple Storage Service path where the sample payload are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix)."},"securityConfig":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSecurityConfig"},"skipModelValidation":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSkipModelValidation","description":"Indicates if you want to skip model validation."},"sourceAlgorithmSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSourceAlgorithmSpecification","description":"A list of algorithms that were used to create a model package."},"sourceUri":{"type":"string","description":"The URI of the source for the model package."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"task":{"type":"string","description":"The machine learning task your model package accomplishes. Common machine learning tasks include object detection and image classification."},"validationSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelPackageValidationSpecification","description":"Specifies batch transform jobs that SageMaker runs to validate your model package."}}},"aws-native:sagemaker:ModelPackageGroup":{"description":"Resource Type definition for AWS::SageMaker::ModelPackageGroup","properties":{"creationTime":{"type":"string","description":"The time at which the model package group was created."},"modelPackageGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the model group."},"modelPackageGroupDescription":{"type":"string","description":"The description for the model group.","replaceOnChanges":true},"modelPackageGroupName":{"type":"string","description":"The name of the model group.","replaceOnChanges":true},"modelPackageGroupPolicy":{"$ref":"pulumi.json#/Any","description":"A resouce policy to control access to a model group. For information about resoure policies, see [Identity-based policies and resource-based policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html) in the *AWS Identity and Access Management User Guide.* .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SageMaker::ModelPackageGroup` for more information about the expected schema for this property."},"modelPackageGroupStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageGroupStatus","description":"The status of a modelpackage group job."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["creationTime","modelPackageGroupArn","modelPackageGroupName","modelPackageGroupStatus"],"inputProperties":{"modelPackageGroupDescription":{"type":"string","description":"The description for the model group."},"modelPackageGroupName":{"type":"string","description":"The name of the model group."},"modelPackageGroupPolicy":{"$ref":"pulumi.json#/Any","description":"A resouce policy to control access to a model group. For information about resoure policies, see [Identity-based policies and resource-based policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html) in the *AWS Identity and Access Management User Guide.* .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SageMaker::ModelPackageGroup` for more information about the expected schema for this property."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:sagemaker:ModelQualityJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::ModelQualityJobDefinition","properties":{"creationTime":{"type":"string","description":"The time at which the job definition was created."},"endpointName":{"type":"string","replaceOnChanges":true},"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."},"jobDefinitionName":{"type":"string","description":"The name of the monitoring job definition.","replaceOnChanges":true},"jobResources":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job.","replaceOnChanges":true},"modelQualityAppSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionModelQualityAppSpecification","description":"Container image configuration object for the monitoring job.","replaceOnChanges":true},"modelQualityBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionModelQualityBaselineConfig","description":"Specifies the constraints and baselines for the monitoring job.","replaceOnChanges":true},"modelQualityJobInput":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionModelQualityJobInput","description":"A list of the inputs that are monitored. Currently endpoints are supported.","replaceOnChanges":true},"modelQualityJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs.","replaceOnChanges":true},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionNetworkConfig","description":"Specifies the network configuration for the monitoring job.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf.","replaceOnChanges":true},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true}},"type":"object","required":["creationTime","jobDefinitionArn","jobResources","modelQualityAppSpecification","modelQualityJobInput","modelQualityJobOutputConfig","roleArn"],"inputProperties":{"endpointName":{"type":"string"},"jobDefinitionName":{"type":"string","description":"The name of the monitoring job definition."},"jobResources":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionMonitoringResources","description":"Identifies the resources to deploy for a monitoring job."},"modelQualityAppSpecification":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionModelQualityAppSpecification","description":"Container image configuration object for the monitoring job."},"modelQualityBaselineConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionModelQualityBaselineConfig","description":"Specifies the constraints and baselines for the monitoring job."},"modelQualityJobInput":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionModelQualityJobInput","description":"A list of the inputs that are monitored. Currently endpoints are supported."},"modelQualityJobOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionMonitoringOutputConfig","description":"The output configuration for monitoring jobs."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionNetworkConfig","description":"Specifies the network configuration for the monitoring job."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf."},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ModelQualityJobDefinitionStoppingCondition","description":"A time limit for how long the monitoring job is allowed to run before stopping."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["jobResources","modelQualityAppSpecification","modelQualityJobInput","modelQualityJobOutputConfig","roleArn"]},"aws-native:sagemaker:MonitoringSchedule":{"description":"Resource Type definition for AWS::SageMaker::MonitoringSchedule","properties":{"creationTime":{"type":"string","description":"The time at which the schedule was created."},"endpointName":{"type":"string","description":"The name of the endpoint using the monitoring schedule."},"failureReason":{"type":"string","description":"Contains the reason a monitoring job failed, if it failed."},"lastModifiedTime":{"type":"string","description":"A timestamp that indicates the last time the monitoring job was modified."},"lastMonitoringExecutionSummary":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringExecutionSummary","description":"Describes metadata on the last execution to run, if there was one."},"monitoringScheduleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the monitoring schedule."},"monitoringScheduleConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleConfig","description":"The configuration object that specifies the monitoring schedule and defines the monitoring job."},"monitoringScheduleName":{"type":"string","description":"The name of the monitoring schedule.","replaceOnChanges":true},"monitoringScheduleStatus":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleStatus","description":"The status of a schedule job."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["creationTime","lastModifiedTime","monitoringScheduleArn","monitoringScheduleConfig","monitoringScheduleName"],"inputProperties":{"endpointName":{"type":"string","description":"The name of the endpoint using the monitoring schedule."},"failureReason":{"type":"string","description":"Contains the reason a monitoring job failed, if it failed."},"lastMonitoringExecutionSummary":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringExecutionSummary","description":"Describes metadata on the last execution to run, if there was one."},"monitoringScheduleConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleConfig","description":"The configuration object that specifies the monitoring schedule and defines the monitoring job."},"monitoringScheduleName":{"type":"string","description":"The name of the monitoring schedule."},"monitoringScheduleStatus":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleStatus","description":"The status of a schedule job."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["monitoringScheduleConfig"]},"aws-native:sagemaker:PartnerApp":{"description":"Resource Type definition for AWS::SageMaker::PartnerApp","properties":{"appVersion":{"type":"string","description":"The version of the PartnerApp."},"applicationConfig":{"$ref":"#/types/aws-native:sagemaker:PartnerAppConfig","description":"A collection of settings that specify the maintenance schedule for the PartnerApp."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the created PartnerApp."},"authType":{"$ref":"#/types/aws-native:sagemaker:PartnerAppAuthType","description":"The Auth type of PartnerApp.","replaceOnChanges":true},"baseUrl":{"type":"string","description":"The AppServerUrl based on app and account-info."},"clientToken":{"type":"string","description":"The client token for the PartnerApp."},"currentVersionEolDate":{"type":"string","description":"The end-of-life date for the current version of the PartnerApp."},"enableAutoMinorVersionUpgrade":{"type":"boolean","description":"Enables automatic minor version upgrades for the PartnerApp."},"enableIamSessionBasedIdentity":{"type":"boolean","description":"Enables IAM Session based Identity for PartnerApp."},"executionRoleArn":{"type":"string","description":"The execution role for the user.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The AWS KMS customer managed key used to encrypt the data associated with the PartnerApp.","replaceOnChanges":true},"maintenanceConfig":{"$ref":"#/types/aws-native:sagemaker:PartnerAppMaintenanceConfig","description":"A collection of settings that specify the maintenance schedule for the PartnerApp."},"name":{"type":"string","description":"A name for the PartnerApp.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the PartnerApp."},"tier":{"type":"string","description":"The tier of the PartnerApp."},"type":{"$ref":"#/types/aws-native:sagemaker:PartnerAppType","description":"The type of PartnerApp.","replaceOnChanges":true}},"type":"object","required":["arn","authType","baseUrl","currentVersionEolDate","executionRoleArn","name","tier","type"],"inputProperties":{"appVersion":{"type":"string","description":"The version of the PartnerApp."},"applicationConfig":{"$ref":"#/types/aws-native:sagemaker:PartnerAppConfig","description":"A collection of settings that specify the maintenance schedule for the PartnerApp."},"authType":{"$ref":"#/types/aws-native:sagemaker:PartnerAppAuthType","description":"The Auth type of PartnerApp."},"clientToken":{"type":"string","description":"The client token for the PartnerApp."},"enableAutoMinorVersionUpgrade":{"type":"boolean","description":"Enables automatic minor version upgrades for the PartnerApp."},"enableIamSessionBasedIdentity":{"type":"boolean","description":"Enables IAM Session based Identity for PartnerApp."},"executionRoleArn":{"type":"string","description":"The execution role for the user."},"kmsKeyId":{"type":"string","description":"The AWS KMS customer managed key used to encrypt the data associated with the PartnerApp."},"maintenanceConfig":{"$ref":"#/types/aws-native:sagemaker:PartnerAppMaintenanceConfig","description":"A collection of settings that specify the maintenance schedule for the PartnerApp."},"name":{"type":"string","description":"A name for the PartnerApp."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the PartnerApp."},"tier":{"type":"string","description":"The tier of the PartnerApp."},"type":{"$ref":"#/types/aws-native:sagemaker:PartnerAppType","description":"The type of PartnerApp."}},"requiredInputs":["authType","executionRoleArn","tier","type"]},"aws-native:sagemaker:Pipeline":{"description":"Resource Type definition for AWS::SageMaker::Pipeline\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myPipeline = new AwsNative.SageMaker.Pipeline(\"myPipeline\", new()\n    {\n        PipelineName = \"\u003cpipeline-name\u003e\",\n        PipelineDisplayName = \"\u003cpipeline-display-name\u003e\",\n        PipelineDescription = \"\u003cpipeline-description\u003e\",\n        PipelineDefinition = new AwsNative.SageMaker.Inputs.PipelineDefinition0PropertiesArgs\n        {\n            PipelineDefinitionS3Location = new AwsNative.SageMaker.Inputs.PipelineS3LocationArgs\n            {\n                Bucket = \"\u003cS3-bucket-location\u003e\",\n                Key = \"\u003cS3-bucket-key\u003e\",\n            },\n        },\n        RoleArn = \"arn:aws:iam::\u003caccount-id\u003e:root\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sagemaker\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sagemaker.NewPipeline(ctx, \"myPipeline\", \u0026sagemaker.PipelineArgs{\n\t\t\tPipelineName:        pulumi.String(\"\u003cpipeline-name\u003e\"),\n\t\t\tPipelineDisplayName: pulumi.String(\"\u003cpipeline-display-name\u003e\"),\n\t\t\tPipelineDescription: pulumi.String(\"\u003cpipeline-description\u003e\"),\n\t\t\tPipelineDefinition: \u0026sagemaker.PipelineDefinition0PropertiesArgs{\n\t\t\t\tPipelineDefinitionS3Location: \u0026sagemaker.PipelineS3LocationArgs{\n\t\t\t\t\tBucket: pulumi.String(\"\u003cS3-bucket-location\u003e\"),\n\t\t\t\t\tKey:    pulumi.String(\"\u003cS3-bucket-key\u003e\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::\u003caccount-id\u003e:root\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myPipeline = new aws_native.sagemaker.Pipeline(\"myPipeline\", {\n    pipelineName: \"\u003cpipeline-name\u003e\",\n    pipelineDisplayName: \"\u003cpipeline-display-name\u003e\",\n    pipelineDescription: \"\u003cpipeline-description\u003e\",\n    pipelineDefinition: {\n        pipelineDefinitionS3Location: {\n            bucket: \"\u003cS3-bucket-location\u003e\",\n            key: \"\u003cS3-bucket-key\u003e\",\n        },\n    },\n    roleArn: \"arn:aws:iam::\u003caccount-id\u003e:root\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_pipeline = aws_native.sagemaker.Pipeline(\"myPipeline\",\n    pipeline_name=\"\u003cpipeline-name\u003e\",\n    pipeline_display_name=\"\u003cpipeline-display-name\u003e\",\n    pipeline_description=\"\u003cpipeline-description\u003e\",\n    pipeline_definition={\n        \"pipeline_definition_s3_location\": {\n            \"bucket\": \"\u003cS3-bucket-location\u003e\",\n            \"key\": \"\u003cS3-bucket-key\u003e\",\n        },\n    },\n    role_arn=\"arn:aws:iam::\u003caccount-id\u003e:root\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myPipeline = new AwsNative.SageMaker.Pipeline(\"myPipeline\", new()\n    {\n        PipelineName = \"\u003cpipeline-name\u003e\",\n        PipelineDisplayName = \"\u003cpipeline-display-name\u003e\",\n        PipelineDescription = \"\u003cpipeline-description\u003e\",\n        PipelineDefinition = new AwsNative.SageMaker.Inputs.PipelineDefinition0PropertiesArgs\n        {\n            PipelineDefinitionBody = \"{\\\"Version\\\":\\\"2020-12-01\\\",\\\"Parameters\\\":[{\\\"Name\\\":\\\"InputDataSource\\\",\\\"DefaultValue\\\":\\\"\\\"},{\\\"Name\\\":\\\"InstanceCount\\\",\\\"Type\\\":\\\"Integer\\\",\\\"DefaultValue\\\":1}],\\\"Steps\\\":[{\\\"Name\\\":\\\"Training1\\\",\\\"Type\\\":\\\"Training\\\",\\\"Arguments\\\":{\\\"InputDataConfig\\\":[{\\\"DataSource\\\":{\\\"S3DataSource\\\":{\\\"S3Uri\\\":{\\\"Get\\\":\\\"Parameters.InputDataSource\\\"}}}}],\\\"OutputDataConfig\\\":{\\\"S3OutputPath\\\":\\\"s3://my-s3-bucket/\\\"},\\\"ResourceConfig\\\":{\\\"InstanceType\\\":\\\"ml.m5.large\\\",\\\"InstanceCount\\\":{\\\"Get\\\":\\\"Parameters.InstanceCount\\\"},\\\"VolumeSizeInGB\\\":1024}}}]}\",\n        },\n        RoleArn = \"arn:aws:iam::\u003caccount-id\u003e:root\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sagemaker\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sagemaker.NewPipeline(ctx, \"myPipeline\", \u0026sagemaker.PipelineArgs{\n\t\t\tPipelineName:        pulumi.String(\"\u003cpipeline-name\u003e\"),\n\t\t\tPipelineDisplayName: pulumi.String(\"\u003cpipeline-display-name\u003e\"),\n\t\t\tPipelineDescription: pulumi.String(\"\u003cpipeline-description\u003e\"),\n\t\t\tPipelineDefinition: \u0026sagemaker.PipelineDefinition0PropertiesArgs{\n\t\t\t\tPipelineDefinitionBody: pulumi.String(\"{\\\"Version\\\":\\\"2020-12-01\\\",\\\"Parameters\\\":[{\\\"Name\\\":\\\"InputDataSource\\\",\\\"DefaultValue\\\":\\\"\\\"},{\\\"Name\\\":\\\"InstanceCount\\\",\\\"Type\\\":\\\"Integer\\\",\\\"DefaultValue\\\":1}],\\\"Steps\\\":[{\\\"Name\\\":\\\"Training1\\\",\\\"Type\\\":\\\"Training\\\",\\\"Arguments\\\":{\\\"InputDataConfig\\\":[{\\\"DataSource\\\":{\\\"S3DataSource\\\":{\\\"S3Uri\\\":{\\\"Get\\\":\\\"Parameters.InputDataSource\\\"}}}}],\\\"OutputDataConfig\\\":{\\\"S3OutputPath\\\":\\\"s3://my-s3-bucket/\\\"},\\\"ResourceConfig\\\":{\\\"InstanceType\\\":\\\"ml.m5.large\\\",\\\"InstanceCount\\\":{\\\"Get\\\":\\\"Parameters.InstanceCount\\\"},\\\"VolumeSizeInGB\\\":1024}}}]}\"),\n\t\t\t},\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::\u003caccount-id\u003e:root\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myPipeline = new aws_native.sagemaker.Pipeline(\"myPipeline\", {\n    pipelineName: \"\u003cpipeline-name\u003e\",\n    pipelineDisplayName: \"\u003cpipeline-display-name\u003e\",\n    pipelineDescription: \"\u003cpipeline-description\u003e\",\n    pipelineDefinition: {\n        pipelineDefinitionBody: \"{\\\"Version\\\":\\\"2020-12-01\\\",\\\"Parameters\\\":[{\\\"Name\\\":\\\"InputDataSource\\\",\\\"DefaultValue\\\":\\\"\\\"},{\\\"Name\\\":\\\"InstanceCount\\\",\\\"Type\\\":\\\"Integer\\\",\\\"DefaultValue\\\":1}],\\\"Steps\\\":[{\\\"Name\\\":\\\"Training1\\\",\\\"Type\\\":\\\"Training\\\",\\\"Arguments\\\":{\\\"InputDataConfig\\\":[{\\\"DataSource\\\":{\\\"S3DataSource\\\":{\\\"S3Uri\\\":{\\\"Get\\\":\\\"Parameters.InputDataSource\\\"}}}}],\\\"OutputDataConfig\\\":{\\\"S3OutputPath\\\":\\\"s3://my-s3-bucket/\\\"},\\\"ResourceConfig\\\":{\\\"InstanceType\\\":\\\"ml.m5.large\\\",\\\"InstanceCount\\\":{\\\"Get\\\":\\\"Parameters.InstanceCount\\\"},\\\"VolumeSizeInGB\\\":1024}}}]}\",\n    },\n    roleArn: \"arn:aws:iam::\u003caccount-id\u003e:root\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_pipeline = aws_native.sagemaker.Pipeline(\"myPipeline\",\n    pipeline_name=\"\u003cpipeline-name\u003e\",\n    pipeline_display_name=\"\u003cpipeline-display-name\u003e\",\n    pipeline_description=\"\u003cpipeline-description\u003e\",\n    pipeline_definition={\n        \"pipeline_definition_body\": \"{\\\"Version\\\":\\\"2020-12-01\\\",\\\"Parameters\\\":[{\\\"Name\\\":\\\"InputDataSource\\\",\\\"DefaultValue\\\":\\\"\\\"},{\\\"Name\\\":\\\"InstanceCount\\\",\\\"Type\\\":\\\"Integer\\\",\\\"DefaultValue\\\":1}],\\\"Steps\\\":[{\\\"Name\\\":\\\"Training1\\\",\\\"Type\\\":\\\"Training\\\",\\\"Arguments\\\":{\\\"InputDataConfig\\\":[{\\\"DataSource\\\":{\\\"S3DataSource\\\":{\\\"S3Uri\\\":{\\\"Get\\\":\\\"Parameters.InputDataSource\\\"}}}}],\\\"OutputDataConfig\\\":{\\\"S3OutputPath\\\":\\\"s3://my-s3-bucket/\\\"},\\\"ResourceConfig\\\":{\\\"InstanceType\\\":\\\"ml.m5.large\\\",\\\"InstanceCount\\\":{\\\"Get\\\":\\\"Parameters.InstanceCount\\\"},\\\"VolumeSizeInGB\\\":1024}}}]}\",\n    },\n    role_arn=\"arn:aws:iam::\u003caccount-id\u003e:root\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"parallelismConfiguration":{"$ref":"#/types/aws-native:sagemaker:ParallelismConfigurationProperties","description":"The parallelism configuration applied to the pipeline."},"pipelineDefinition":{"oneOf":[{"$ref":"#/types/aws-native:sagemaker:PipelineDefinition0Properties"},{"$ref":"#/types/aws-native:sagemaker:PipelineDefinition1Properties"}],"description":"The definition of the pipeline. This can be either a JSON string or an Amazon S3 location."},"pipelineDescription":{"type":"string","description":"The description of the Pipeline."},"pipelineDisplayName":{"type":"string","description":"The display name of the Pipeline."},"pipelineName":{"type":"string","description":"The name of the Pipeline.","replaceOnChanges":true},"roleArn":{"type":"string","description":"Role Arn"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the pipeline."}},"type":"object","required":["pipelineDefinition","pipelineName","roleArn"],"inputProperties":{"parallelismConfiguration":{"$ref":"#/types/aws-native:sagemaker:ParallelismConfigurationProperties","description":"The parallelism configuration applied to the pipeline."},"pipelineDefinition":{"oneOf":[{"$ref":"#/types/aws-native:sagemaker:PipelineDefinition0Properties"},{"$ref":"#/types/aws-native:sagemaker:PipelineDefinition1Properties"}],"description":"The definition of the pipeline. This can be either a JSON string or an Amazon S3 location."},"pipelineDescription":{"type":"string","description":"The description of the Pipeline."},"pipelineDisplayName":{"type":"string","description":"The display name of the Pipeline."},"pipelineName":{"type":"string","description":"The name of the Pipeline."},"roleArn":{"type":"string","description":"Role Arn"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the pipeline."}},"requiredInputs":["pipelineDefinition","roleArn"]},"aws-native:sagemaker:ProcessingJob":{"description":"Resource Type definition for AWS::SageMaker::ProcessingJob","properties":{"appSpecification":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobAppSpecification","description":"Configuration to run a processing job in a specified container image.","replaceOnChanges":true},"autoMlJobArn":{"type":"string","description":"The ARN of an AutoML job associated with this processing job."},"creationTime":{"type":"string","description":"The time at which the processing job was created."},"environment":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobEnvironment","description":"Sets the environment variables in the Docker container.","replaceOnChanges":true},"exitMessage":{"type":"string","description":"An optional string, up to one KB in size, that contains metadata from the processing container when the processing job exits."},"experimentConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobExperimentConfig","description":"Associates a SageMaker job as a trial component with an experiment and trial. Specified when you call the [CreateProcessingJob](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProcessingJob.html) API.","replaceOnChanges":true},"failureReason":{"type":"string","description":"A string, up to one KB in size, that contains the reason a processing job failed, if it failed."},"lastModifiedTime":{"type":"string","description":"The time at which the processing job was last modified."},"monitoringScheduleArn":{"type":"string","description":"The ARN of a monitoring schedule for an endpoint associated with this processing job."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobNetworkConfig","description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs.","replaceOnChanges":true},"processingEndTime":{"type":"string","description":"The time at which the processing job completed."},"processingInputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingInputsObject"},"description":"An array of inputs configuring the data to download into the processing container.","replaceOnChanges":true},"processingJobArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the processing job."},"processingJobName":{"type":"string","description":"The name of the processing job. The name must be unique within an AWS Region in the AWS account.","replaceOnChanges":true},"processingJobStatus":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobStatus","description":"Provides the status of a processing job."},"processingOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingOutputConfig","description":"Contains information about the output location for the compiled model and the target device that the model runs on. `TargetDevice` and `TargetPlatform` are mutually exclusive, so you need to choose one between the two to specify your target device or platform. If you cannot find your device you want to use from the `TargetDevice` list, use `TargetPlatform` to describe the platform of your edge device and `CompilerOptions` if there are specific settings that are required or recommended to use for particular TargetPlatform.","replaceOnChanges":true},"processingResources":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingResources","description":"Identifies the resources, ML compute instances, and ML storage volumes to deploy for a processing job. In distributed training, you specify more than one instance.","replaceOnChanges":true},"processingStartTime":{"type":"string","description":"The time at which the processing job started."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf.","replaceOnChanges":true},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobStoppingCondition","description":"Configures conditions under which the processing job should be stopped, such as how long the processing job has been running. After the condition is met, the processing job is stopped.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"(Optional) An array of key-value pairs. For more information, see Using Cost Allocation Tags(https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html#allocation-whatURL) in the AWS Billing and Cost Management User Guide.","replaceOnChanges":true},"trainingJobArn":{"type":"string","description":"The ARN of a training job associated with this processing job"}},"type":"object","required":["appSpecification","autoMlJobArn","creationTime","exitMessage","failureReason","lastModifiedTime","monitoringScheduleArn","processingEndTime","processingJobArn","processingJobStatus","processingResources","processingStartTime","roleArn","trainingJobArn"],"inputProperties":{"appSpecification":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobAppSpecification","description":"Configuration to run a processing job in a specified container image."},"environment":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobEnvironment","description":"Sets the environment variables in the Docker container."},"experimentConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobExperimentConfig","description":"Associates a SageMaker job as a trial component with an experiment and trial. Specified when you call the [CreateProcessingJob](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProcessingJob.html) API."},"networkConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobNetworkConfig","description":"Networking options for a job, such as network traffic encryption between containers, whether to allow inbound and outbound network calls to and from containers, and the VPC subnets and security groups to use for VPC-enabled jobs."},"processingInputs":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingInputsObject"},"description":"An array of inputs configuring the data to download into the processing container."},"processingJobName":{"type":"string","description":"The name of the processing job. The name must be unique within an AWS Region in the AWS account."},"processingOutputConfig":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingOutputConfig","description":"Contains information about the output location for the compiled model and the target device that the model runs on. `TargetDevice` and `TargetPlatform` are mutually exclusive, so you need to choose one between the two to specify your target device or platform. If you cannot find your device you want to use from the `TargetDevice` list, use `TargetPlatform` to describe the platform of your edge device and `CompilerOptions` if there are specific settings that are required or recommended to use for particular TargetPlatform."},"processingResources":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobProcessingResources","description":"Identifies the resources, ML compute instances, and ML storage volumes to deploy for a processing job. In distributed training, you specify more than one instance."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that Amazon SageMaker can assume to perform tasks on your behalf."},"stoppingCondition":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobStoppingCondition","description":"Configures conditions under which the processing job should be stopped, such as how long the processing job has been running. After the condition is met, the processing job is stopped."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"(Optional) An array of key-value pairs. For more information, see Using Cost Allocation Tags(https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html#allocation-whatURL) in the AWS Billing and Cost Management User Guide."}},"requiredInputs":["appSpecification","processingResources","roleArn"]},"aws-native:sagemaker:Project":{"description":"Resource Type definition for AWS::SageMaker::Project\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleProject = new AwsNative.SageMaker.Project(\"sampleProject\", new()\n    {\n        ProjectName = \"project1\",\n        ProjectDescription = \"Project Description\",\n        ServiceCatalogProvisioningDetails = new AwsNative.SageMaker.Inputs.ServiceCatalogProvisioningDetailsPropertiesArgs\n        {\n            ProductId = \"prod-53ibyqbj2cgmo\",\n            ProvisioningArtifactId = \"pa-sm4pjfuzictpe\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sagemaker\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sagemaker.NewProject(ctx, \"sampleProject\", \u0026sagemaker.ProjectArgs{\n\t\t\tProjectName:        pulumi.String(\"project1\"),\n\t\t\tProjectDescription: pulumi.String(\"Project Description\"),\n\t\t\tServiceCatalogProvisioningDetails: \u0026sagemaker.ServiceCatalogProvisioningDetailsPropertiesArgs{\n\t\t\t\tProductId:              pulumi.String(\"prod-53ibyqbj2cgmo\"),\n\t\t\t\tProvisioningArtifactId: pulumi.String(\"pa-sm4pjfuzictpe\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleProject = new aws_native.sagemaker.Project(\"sampleProject\", {\n    projectName: \"project1\",\n    projectDescription: \"Project Description\",\n    serviceCatalogProvisioningDetails: {\n        productId: \"prod-53ibyqbj2cgmo\",\n        provisioningArtifactId: \"pa-sm4pjfuzictpe\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_project = aws_native.sagemaker.Project(\"sampleProject\",\n    project_name=\"project1\",\n    project_description=\"Project Description\",\n    service_catalog_provisioning_details={\n        \"product_id\": \"prod-53ibyqbj2cgmo\",\n        \"provisioning_artifact_id\": \"pa-sm4pjfuzictpe\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sampleProject = new AwsNative.SageMaker.Project(\"sampleProject\", new()\n    {\n        ProjectName = \"SampleProject\",\n        ProjectDescription = \"Project Description\",\n        ServiceCatalogProvisioningDetails = new AwsNative.SageMaker.Inputs.ServiceCatalogProvisioningDetailsPropertiesArgs\n        {\n            ProductId = \"prod-53ibyqbj2cgmo\",\n            ProvisioningArtifactId = \"pa-sm4pjfuzictpe\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sagemaker\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sagemaker.NewProject(ctx, \"sampleProject\", \u0026sagemaker.ProjectArgs{\n\t\t\tProjectName:        pulumi.String(\"SampleProject\"),\n\t\t\tProjectDescription: pulumi.String(\"Project Description\"),\n\t\t\tServiceCatalogProvisioningDetails: \u0026sagemaker.ServiceCatalogProvisioningDetailsPropertiesArgs{\n\t\t\t\tProductId:              pulumi.String(\"prod-53ibyqbj2cgmo\"),\n\t\t\t\tProvisioningArtifactId: pulumi.String(\"pa-sm4pjfuzictpe\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sampleProject = new aws_native.sagemaker.Project(\"sampleProject\", {\n    projectName: \"SampleProject\",\n    projectDescription: \"Project Description\",\n    serviceCatalogProvisioningDetails: {\n        productId: \"prod-53ibyqbj2cgmo\",\n        provisioningArtifactId: \"pa-sm4pjfuzictpe\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsample_project = aws_native.sagemaker.Project(\"sampleProject\",\n    project_name=\"SampleProject\",\n    project_description=\"Project Description\",\n    service_catalog_provisioning_details={\n        \"product_id\": \"prod-53ibyqbj2cgmo\",\n        \"provisioning_artifact_id\": \"pa-sm4pjfuzictpe\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"creationTime":{"type":"string","description":"The time at which the project was created."},"projectArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the project."},"projectDescription":{"type":"string","description":"The description of the project.","replaceOnChanges":true},"projectId":{"type":"string","description":"The ID of the project. This ID is prepended to all entities associated with this project."},"projectName":{"type":"string","description":"The name of the project.","replaceOnChanges":true},"projectStatus":{"$ref":"#/types/aws-native:sagemaker:ProjectStatus","description":"The status of a project."},"serviceCatalogProvisionedProductDetails":{"$ref":"#/types/aws-native:sagemaker:ServiceCatalogProvisionedProductDetailsProperties","description":"Provisioned ServiceCatalog  Details"},"serviceCatalogProvisioningDetails":{"$ref":"#/types/aws-native:sagemaker:ServiceCatalogProvisioningDetailsProperties","description":"Input ServiceCatalog Provisioning Details","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource.","replaceOnChanges":true},"templateProviderDetails":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProjectTemplateProviderDetail"},"description":"An array of template providers associated with the project.","replaceOnChanges":true}},"type":"object","required":["creationTime","projectArn","projectId","projectName","projectStatus"],"inputProperties":{"projectDescription":{"type":"string","description":"The description of the project."},"projectName":{"type":"string","description":"The name of the project."},"serviceCatalogProvisionedProductDetails":{"$ref":"#/types/aws-native:sagemaker:ServiceCatalogProvisionedProductDetailsProperties","description":"Provisioned ServiceCatalog  Details"},"serviceCatalogProvisioningDetails":{"$ref":"#/types/aws-native:sagemaker:ServiceCatalogProvisioningDetailsProperties","description":"Input ServiceCatalog Provisioning Details"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"An array of key-value pairs to apply to this resource."},"templateProviderDetails":{"type":"array","items":{"$ref":"#/types/aws-native:sagemaker:ProjectTemplateProviderDetail"},"description":"An array of template providers associated with the project."}}},"aws-native:sagemaker:Space":{"description":"Resource Type definition for AWS::SageMaker::Space","properties":{"domainId":{"type":"string","description":"The ID of the associated Domain.","replaceOnChanges":true},"ownershipSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceOwnershipSettings","description":"The collection of ownership settings for a space.","replaceOnChanges":true},"spaceArn":{"type":"string","description":"The space Amazon Resource Name (ARN)."},"spaceDisplayName":{"type":"string","description":"The name of the space that appears in the Studio UI."},"spaceName":{"type":"string","description":"A name for the Space.","replaceOnChanges":true},"spaceSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceSettings","description":"A collection of settings."},"spaceSharingSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceSharingSettings","description":"A collection of space sharing settings.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the space."},"url":{"type":"string","description":"Returns the URL of the space. If the space is created with AWS IAM Identity Center (Successor to AWS Single Sign-On) authentication, users can navigate to the URL after appending the respective redirect parameter for the application type to be federated through AWS IAM Identity Center.\n\nThe following application types are supported:\n\n- Studio Classic: `\u0026redirect=JupyterServer`\n- JupyterLab: `\u0026redirect=JupyterLab`\n- Code Editor, based on Code-OSS, Visual Studio Code - Open Source: `\u0026redirect=CodeEditor`"}},"type":"object","required":["domainId","spaceArn","spaceName","url"],"inputProperties":{"domainId":{"type":"string","description":"The ID of the associated Domain."},"ownershipSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceOwnershipSettings","description":"The collection of ownership settings for a space."},"spaceDisplayName":{"type":"string","description":"The name of the space that appears in the Studio UI."},"spaceName":{"type":"string","description":"A name for the Space."},"spaceSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceSettings","description":"A collection of settings."},"spaceSharingSettings":{"$ref":"#/types/aws-native:sagemaker:SpaceSharingSettings","description":"A collection of space sharing settings."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to apply to the space."}},"requiredInputs":["domainId"]},"aws-native:sagemaker:StudioLifecycleConfig":{"description":"Resource Type definition for AWS::SageMaker::StudioLifecycleConfig","properties":{"studioLifecycleConfigAppType":{"$ref":"#/types/aws-native:sagemaker:StudioLifecycleConfigAppType","description":"The App type that the Lifecycle Configuration is attached to.","replaceOnChanges":true},"studioLifecycleConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Lifecycle Configuration."},"studioLifecycleConfigContent":{"type":"string","description":"The content of your Amazon SageMaker Studio Lifecycle Configuration script. This content must be base64 encoded.","replaceOnChanges":true},"studioLifecycleConfigName":{"type":"string","description":"The name of the Amazon SageMaker Studio Lifecycle Configuration.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Tags to be associated with the Lifecycle Configuration. Each tag consists of a key and an optional value. Tag keys must be unique per resource. Tags are searchable using the Search API.","replaceOnChanges":true}},"type":"object","required":["studioLifecycleConfigAppType","studioLifecycleConfigArn","studioLifecycleConfigContent","studioLifecycleConfigName"],"inputProperties":{"studioLifecycleConfigAppType":{"$ref":"#/types/aws-native:sagemaker:StudioLifecycleConfigAppType","description":"The App type that the Lifecycle Configuration is attached to."},"studioLifecycleConfigContent":{"type":"string","description":"The content of your Amazon SageMaker Studio Lifecycle Configuration script. This content must be base64 encoded."},"studioLifecycleConfigName":{"type":"string","description":"The name of the Amazon SageMaker Studio Lifecycle Configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"Tags to be associated with the Lifecycle Configuration. Each tag consists of a key and an optional value. Tag keys must be unique per resource. Tags are searchable using the Search API."}},"requiredInputs":["studioLifecycleConfigAppType","studioLifecycleConfigContent"]},"aws-native:sagemaker:UserProfile":{"description":"Resource Type definition for AWS::SageMaker::UserProfile","properties":{"domainId":{"type":"string","description":"The ID of the associated Domain.","replaceOnChanges":true},"singleSignOnUserIdentifier":{"type":"string","description":"A specifier for the type of value specified in SingleSignOnUserValue. Currently, the only supported value is \"UserName\". If the Domain's AuthMode is SSO, this field is required. If the Domain's AuthMode is not SSO, this field cannot be specified.","replaceOnChanges":true},"singleSignOnUserValue":{"type":"string","description":"The username of the associated AWS Single Sign-On User for this UserProfile. If the Domain's AuthMode is SSO, this field is required, and must match a valid username of a user in your directory. If the Domain's AuthMode is not SSO, this field cannot be specified.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of tags to apply to the user profile.","replaceOnChanges":true},"userProfileArn":{"type":"string","description":"The user profile Amazon Resource Name (ARN)."},"userProfileName":{"type":"string","description":"A name for the UserProfile.","replaceOnChanges":true},"userSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileUserSettings","description":"A collection of settings."}},"type":"object","required":["domainId","userProfileArn","userProfileName"],"inputProperties":{"domainId":{"type":"string","description":"The ID of the associated Domain."},"singleSignOnUserIdentifier":{"type":"string","description":"A specifier for the type of value specified in SingleSignOnUserValue. Currently, the only supported value is \"UserName\". If the Domain's AuthMode is SSO, this field is required. If the Domain's AuthMode is not SSO, this field cannot be specified."},"singleSignOnUserValue":{"type":"string","description":"The username of the associated AWS Single Sign-On User for this UserProfile. If the Domain's AuthMode is SSO, this field is required, and must match a valid username of a user in your directory. If the Domain's AuthMode is not SSO, this field cannot be specified."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"A list of tags to apply to the user profile."},"userProfileName":{"type":"string","description":"A name for the UserProfile."},"userSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileUserSettings","description":"A collection of settings."}},"requiredInputs":["domainId"]},"aws-native:scheduler:Schedule":{"description":"Definition of AWS::Scheduler::Schedule Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the schedule."},"description":{"type":"string","description":"The description of the schedule."},"endDate":{"type":"string","description":"The date, in UTC, before which the schedule can invoke its target. Depending on the schedule's recurrence expression, invocations might stop on, or before, the EndDate you specify."},"flexibleTimeWindow":{"$ref":"#/types/aws-native:scheduler:ScheduleFlexibleTimeWindow","description":"Allows you to configure a time window during which EventBridge Scheduler invokes the schedule."},"groupName":{"type":"string","description":"The name of the schedule group to associate with this schedule. If you omit this, the default schedule group is used."},"kmsKeyArn":{"type":"string","description":"The ARN for a KMS Key that will be used to encrypt customer data."},"name":{"type":"string","description":"The name of the schedule.","replaceOnChanges":true},"scheduleExpression":{"type":"string","description":"The scheduling expression."},"scheduleExpressionTimezone":{"type":"string","description":"The timezone in which the scheduling expression is evaluated."},"startDate":{"type":"string","description":"The date, in UTC, after which the schedule can begin invoking its target. Depending on the schedule's recurrence expression, invocations might occur on, or after, the StartDate you specify."},"state":{"$ref":"#/types/aws-native:scheduler:ScheduleState","description":"Specifies whether the schedule is enabled or disabled.\n\n*Allowed Values* : `ENABLED` | `DISABLED`"},"target":{"$ref":"#/types/aws-native:scheduler:ScheduleTarget","description":"The schedule's target details."}},"type":"object","required":["arn","flexibleTimeWindow","scheduleExpression","target"],"inputProperties":{"description":{"type":"string","description":"The description of the schedule."},"endDate":{"type":"string","description":"The date, in UTC, before which the schedule can invoke its target. Depending on the schedule's recurrence expression, invocations might stop on, or before, the EndDate you specify."},"flexibleTimeWindow":{"$ref":"#/types/aws-native:scheduler:ScheduleFlexibleTimeWindow","description":"Allows you to configure a time window during which EventBridge Scheduler invokes the schedule."},"groupName":{"type":"string","description":"The name of the schedule group to associate with this schedule. If you omit this, the default schedule group is used."},"kmsKeyArn":{"type":"string","description":"The ARN for a KMS Key that will be used to encrypt customer data."},"name":{"type":"string","description":"The name of the schedule."},"scheduleExpression":{"type":"string","description":"The scheduling expression."},"scheduleExpressionTimezone":{"type":"string","description":"The timezone in which the scheduling expression is evaluated."},"startDate":{"type":"string","description":"The date, in UTC, after which the schedule can begin invoking its target. Depending on the schedule's recurrence expression, invocations might occur on, or after, the StartDate you specify."},"state":{"$ref":"#/types/aws-native:scheduler:ScheduleState","description":"Specifies whether the schedule is enabled or disabled.\n\n*Allowed Values* : `ENABLED` | `DISABLED`"},"target":{"$ref":"#/types/aws-native:scheduler:ScheduleTarget","description":"The schedule's target details."}},"requiredInputs":["flexibleTimeWindow","scheduleExpression","target"]},"aws-native:scheduler:ScheduleGroup":{"description":"Definition of AWS::Scheduler::ScheduleGroup Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the schedule group."},"creationDate":{"type":"string","description":"The time at which the schedule group was created."},"lastModificationDate":{"type":"string","description":"The time at which the schedule group was last modified."},"name":{"type":"string","description":"The name of the schedule group.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:scheduler:ScheduleGroupState","description":"Specifies the state of the schedule group.\n\n*Allowed Values* : `ACTIVE` | `DELETING`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to associate with the schedule group."}},"type":"object","required":["arn","creationDate","lastModificationDate","state"],"inputProperties":{"name":{"type":"string","description":"The name of the schedule group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to associate with the schedule group."}}},"aws-native:secretsmanager:ResourcePolicy":{"description":"Resource Type definition for AWS::SecretsManager::ResourcePolicy","properties":{"awsId":{"type":"string","description":"The Arn of the secret."},"blockPublicPolicy":{"type":"boolean","description":"Specifies whether to block resource-based policies that allow broad access to the secret."},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A JSON-formatted string for an AWS resource-based policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SecretsManager::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}},"secretId":{"type":"string","description":"The ARN or name of the secret to attach the resource-based policy.","replaceOnChanges":true}},"type":"object","required":["awsId","resourcePolicy","secretId"],"inputProperties":{"blockPublicPolicy":{"type":"boolean","description":"Specifies whether to block resource-based policies that allow broad access to the secret."},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A JSON-formatted string for an AWS resource-based policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SecretsManager::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}},"secretId":{"type":"string","description":"The ARN or name of the secret to attach the resource-based policy."}},"requiredInputs":["resourcePolicy","secretId"]},"aws-native:secretsmanager:RotationSchedule":{"description":"Resource Type definition for AWS::SecretsManager::RotationSchedule","properties":{"awsId":{"type":"string","description":"The ARN of the secret."},"externalSecretRotationMetadata":{"type":"array","items":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleExternalSecretRotationMetadataItem"},"description":"The list of metadata needed to successfully rotate a managed external secret."},"externalSecretRotationRoleArn":{"type":"string","description":"The ARN of the IAM role that is used by Secrets Manager to rotate a managed external secret."},"hostedRotationLambda":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleHostedRotationLambda","description":"Creates a new Lambda rotation function based on one of the Secrets Manager rotation function templates. To use a rotation function that already exists, specify RotationLambdaARN instead."},"rotateImmediatelyOnUpdate":{"type":"boolean","description":"Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window."},"rotationLambdaArn":{"type":"string","description":"The ARN of an existing Lambda rotation function. To specify a rotation function that is also defined in this template, use the Ref function."},"rotationRules":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleRotationRules","description":"A structure that defines the rotation configuration for this secret."},"secretId":{"type":"string","description":"The ARN or name of the secret to rotate.","replaceOnChanges":true}},"type":"object","required":["awsId","secretId"],"inputProperties":{"externalSecretRotationMetadata":{"type":"array","items":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleExternalSecretRotationMetadataItem"},"description":"The list of metadata needed to successfully rotate a managed external secret."},"externalSecretRotationRoleArn":{"type":"string","description":"The ARN of the IAM role that is used by Secrets Manager to rotate a managed external secret."},"hostedRotationLambda":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleHostedRotationLambda","description":"Creates a new Lambda rotation function based on one of the Secrets Manager rotation function templates. To use a rotation function that already exists, specify RotationLambdaARN instead."},"rotateImmediatelyOnUpdate":{"type":"boolean","description":"Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window."},"rotationLambdaArn":{"type":"string","description":"The ARN of an existing Lambda rotation function. To specify a rotation function that is also defined in this template, use the Ref function."},"rotationRules":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleRotationRules","description":"A structure that defines the rotation configuration for this secret."},"secretId":{"type":"string","description":"The ARN or name of the secret to rotate."}},"requiredInputs":["secretId"]},"aws-native:secretsmanager:Secret":{"description":"Creates a new secret. A *secret* can be a password, a set of credentials such as a user name and password, an OAuth token, or other secret information that you store in an encrypted form in Secrets Manager.\n For RDS master user credentials, see [AWS::RDS::DBCluster MasterUserSecret](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-masterusersecret.html).\n For RS admin user credentials, see [AWS::Redshift::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html).\n To retrieve a secret in a CFNshort template, use a *dynamic reference*. For more information, see [Retrieve a secret in an resource](https://docs.aws.amazon.com/secretsmanager/latest/userguide/cfn-example_reference-secret.html).\n For information about creating a secret in the console, see [Create a secret](https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_create-basic-secret.html). For information about creating a secret using the CLI or SDK, see [CreateSecret](https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html).\n For information about retrieving a secret in code, see [Retrieve secrets from Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets.html).\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRedshiftSecret = new AwsNative.SecretsManager.Secret(\"myRedshiftSecret\", new()\n    {\n        Description = \"This is a Secrets Manager secret for a Redshift cluster\",\n        GenerateSecretString = new AwsNative.SecretsManager.Inputs.SecretGenerateSecretStringArgs\n        {\n            SecretStringTemplate = \"{\\\"username\\\": \\\"admin\\\"}\",\n            GenerateStringKey = \"password\",\n            PasswordLength = 16,\n            ExcludeCharacters = \"\\\"'@/\\\\\",\n        },\n    });\n\n    var myRedshiftCluster = new AwsNative.Redshift.Cluster(\"myRedshiftCluster\", new()\n    {\n        DbName = \"myjsondb\",\n        MasterUsername = myRedshiftSecret.Id.Apply(id =\u003e $\"{{{{resolve:secretsmanager:{id}::username}}}}\"),\n        MasterUserPassword = myRedshiftSecret.Id.Apply(id =\u003e $\"{{{{resolve:secretsmanager:{id}::password}}}}\"),\n        NodeType = \"ds2.xlarge\",\n        ClusterType = \"single-node\",\n    });\n\n    var secretRedshiftAttachment = new AwsNative.SecretsManager.SecretTargetAttachment(\"secretRedshiftAttachment\", new()\n    {\n        SecretId = myRedshiftSecret.Id,\n        TargetId = myRedshiftCluster.Id,\n        TargetType = \"AWS::Redshift::Cluster\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/redshift\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/secretsmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyRedshiftSecret, err := secretsmanager.NewSecret(ctx, \"myRedshiftSecret\", \u0026secretsmanager.SecretArgs{\n\t\t\tDescription: pulumi.String(\"This is a Secrets Manager secret for a Redshift cluster\"),\n\t\t\tGenerateSecretString: \u0026secretsmanager.SecretGenerateSecretStringArgs{\n\t\t\t\tSecretStringTemplate: pulumi.String(\"{\\\"username\\\": \\\"admin\\\"}\"),\n\t\t\t\tGenerateStringKey:    pulumi.String(\"password\"),\n\t\t\t\tPasswordLength:       pulumi.Int(16),\n\t\t\t\tExcludeCharacters:    pulumi.String(\"\\\"'@/\\\\\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyRedshiftCluster, err := redshift.NewCluster(ctx, \"myRedshiftCluster\", \u0026redshift.ClusterArgs{\n\t\t\tDbName: pulumi.String(\"myjsondb\"),\n\t\t\tMasterUsername: myRedshiftSecret.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"{{resolve:secretsmanager:%v::username}}\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t\tMasterUserPassword: myRedshiftSecret.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"{{resolve:secretsmanager:%v::password}}\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t\tNodeType:    pulumi.String(\"ds2.xlarge\"),\n\t\t\tClusterType: pulumi.String(\"single-node\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretsmanager.NewSecretTargetAttachment(ctx, \"secretRedshiftAttachment\", \u0026secretsmanager.SecretTargetAttachmentArgs{\n\t\t\tSecretId:   myRedshiftSecret.ID(),\n\t\t\tTargetId:   myRedshiftCluster.ID(),\n\t\t\tTargetType: pulumi.String(\"AWS::Redshift::Cluster\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRedshiftSecret = new aws_native.secretsmanager.Secret(\"myRedshiftSecret\", {\n    description: \"This is a Secrets Manager secret for a Redshift cluster\",\n    generateSecretString: {\n        secretStringTemplate: \"{\\\"username\\\": \\\"admin\\\"}\",\n        generateStringKey: \"password\",\n        passwordLength: 16,\n        excludeCharacters: \"\\\"'@/\\\\\",\n    },\n});\nconst myRedshiftCluster = new aws_native.redshift.Cluster(\"myRedshiftCluster\", {\n    dbName: \"myjsondb\",\n    masterUsername: pulumi.interpolate`{{resolve:secretsmanager:${myRedshiftSecret.id}::username}}`,\n    masterUserPassword: pulumi.interpolate`{{resolve:secretsmanager:${myRedshiftSecret.id}::password}}`,\n    nodeType: \"ds2.xlarge\",\n    clusterType: \"single-node\",\n});\nconst secretRedshiftAttachment = new aws_native.secretsmanager.SecretTargetAttachment(\"secretRedshiftAttachment\", {\n    secretId: myRedshiftSecret.id,\n    targetId: myRedshiftCluster.id,\n    targetType: \"AWS::Redshift::Cluster\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_redshift_secret = aws_native.secretsmanager.Secret(\"myRedshiftSecret\",\n    description=\"This is a Secrets Manager secret for a Redshift cluster\",\n    generate_secret_string={\n        \"secret_string_template\": \"{\\\"username\\\": \\\"admin\\\"}\",\n        \"generate_string_key\": \"password\",\n        \"password_length\": 16,\n        \"exclude_characters\": \"\\\"'@/\\\\\",\n    })\nmy_redshift_cluster = aws_native.redshift.Cluster(\"myRedshiftCluster\",\n    db_name=\"myjsondb\",\n    master_username=my_redshift_secret.id.apply(lambda id: f\"{{{{resolve:secretsmanager:{id}::username}}}}\"),\n    master_user_password=my_redshift_secret.id.apply(lambda id: f\"{{{{resolve:secretsmanager:{id}::password}}}}\"),\n    node_type=\"ds2.xlarge\",\n    cluster_type=\"single-node\")\nsecret_redshift_attachment = aws_native.secretsmanager.SecretTargetAttachment(\"secretRedshiftAttachment\",\n    secret_id=my_redshift_secret.id,\n    target_id=my_redshift_cluster.id,\n    target_type=\"AWS::Redshift::Cluster\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myRedshiftSecret = new AwsNative.SecretsManager.Secret(\"myRedshiftSecret\", new()\n    {\n        Description = \"This is a Secrets Manager secret for a Redshift cluster\",\n        GenerateSecretString = new AwsNative.SecretsManager.Inputs.SecretGenerateSecretStringArgs\n        {\n            SecretStringTemplate = \"{\\\"username\\\": \\\"admin\\\"}\",\n            GenerateStringKey = \"password\",\n            PasswordLength = 16,\n            ExcludeCharacters = \"\\\"'@/\\\\\",\n        },\n    });\n\n    var myRedshiftCluster = new AwsNative.Redshift.Cluster(\"myRedshiftCluster\", new()\n    {\n        DbName = \"myjsondb\",\n        MasterUsername = myRedshiftSecret.Id.Apply(id =\u003e $\"{{{{resolve:secretsmanager:{id}::username}}}}\"),\n        MasterUserPassword = myRedshiftSecret.Id.Apply(id =\u003e $\"{{{{resolve:secretsmanager:{id}::password}}}}\"),\n        NodeType = \"ds2.xlarge\",\n        ClusterType = \"single-node\",\n    });\n\n    var secretRedshiftAttachment = new AwsNative.SecretsManager.SecretTargetAttachment(\"secretRedshiftAttachment\", new()\n    {\n        SecretId = myRedshiftSecret.Id,\n        TargetId = myRedshiftCluster.Id,\n        TargetType = \"AWS::Redshift::Cluster\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"fmt\"\n\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/redshift\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/secretsmanager\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyRedshiftSecret, err := secretsmanager.NewSecret(ctx, \"myRedshiftSecret\", \u0026secretsmanager.SecretArgs{\n\t\t\tDescription: pulumi.String(\"This is a Secrets Manager secret for a Redshift cluster\"),\n\t\t\tGenerateSecretString: \u0026secretsmanager.SecretGenerateSecretStringArgs{\n\t\t\t\tSecretStringTemplate: pulumi.String(\"{\\\"username\\\": \\\"admin\\\"}\"),\n\t\t\t\tGenerateStringKey:    pulumi.String(\"password\"),\n\t\t\t\tPasswordLength:       pulumi.Int(16),\n\t\t\t\tExcludeCharacters:    pulumi.String(\"\\\"'@/\\\\\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmyRedshiftCluster, err := redshift.NewCluster(ctx, \"myRedshiftCluster\", \u0026redshift.ClusterArgs{\n\t\t\tDbName: pulumi.String(\"myjsondb\"),\n\t\t\tMasterUsername: myRedshiftSecret.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"{{resolve:secretsmanager:%v::username}}\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t\tMasterUserPassword: myRedshiftSecret.ID().ApplyT(func(id string) (string, error) {\n\t\t\t\treturn fmt.Sprintf(\"{{resolve:secretsmanager:%v::password}}\", id), nil\n\t\t\t}).(pulumi.StringOutput),\n\t\t\tNodeType:    pulumi.String(\"ds2.xlarge\"),\n\t\t\tClusterType: pulumi.String(\"single-node\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = secretsmanager.NewSecretTargetAttachment(ctx, \"secretRedshiftAttachment\", \u0026secretsmanager.SecretTargetAttachmentArgs{\n\t\t\tSecretId:   myRedshiftSecret.ID(),\n\t\t\tTargetId:   myRedshiftCluster.ID(),\n\t\t\tTargetType: pulumi.String(\"AWS::Redshift::Cluster\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myRedshiftSecret = new aws_native.secretsmanager.Secret(\"myRedshiftSecret\", {\n    description: \"This is a Secrets Manager secret for a Redshift cluster\",\n    generateSecretString: {\n        secretStringTemplate: \"{\\\"username\\\": \\\"admin\\\"}\",\n        generateStringKey: \"password\",\n        passwordLength: 16,\n        excludeCharacters: \"\\\"'@/\\\\\",\n    },\n});\nconst myRedshiftCluster = new aws_native.redshift.Cluster(\"myRedshiftCluster\", {\n    dbName: \"myjsondb\",\n    masterUsername: pulumi.interpolate`{{resolve:secretsmanager:${myRedshiftSecret.id}::username}}`,\n    masterUserPassword: pulumi.interpolate`{{resolve:secretsmanager:${myRedshiftSecret.id}::password}}`,\n    nodeType: \"ds2.xlarge\",\n    clusterType: \"single-node\",\n});\nconst secretRedshiftAttachment = new aws_native.secretsmanager.SecretTargetAttachment(\"secretRedshiftAttachment\", {\n    secretId: myRedshiftSecret.id,\n    targetId: myRedshiftCluster.id,\n    targetType: \"AWS::Redshift::Cluster\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_redshift_secret = aws_native.secretsmanager.Secret(\"myRedshiftSecret\",\n    description=\"This is a Secrets Manager secret for a Redshift cluster\",\n    generate_secret_string={\n        \"secret_string_template\": \"{\\\"username\\\": \\\"admin\\\"}\",\n        \"generate_string_key\": \"password\",\n        \"password_length\": 16,\n        \"exclude_characters\": \"\\\"'@/\\\\\",\n    })\nmy_redshift_cluster = aws_native.redshift.Cluster(\"myRedshiftCluster\",\n    db_name=\"myjsondb\",\n    master_username=my_redshift_secret.id.apply(lambda id: f\"{{{{resolve:secretsmanager:{id}::username}}}}\"),\n    master_user_password=my_redshift_secret.id.apply(lambda id: f\"{{{{resolve:secretsmanager:{id}::password}}}}\"),\n    node_type=\"ds2.xlarge\",\n    cluster_type=\"single-node\")\nsecret_redshift_attachment = aws_native.secretsmanager.SecretTargetAttachment(\"secretRedshiftAttachment\",\n    secret_id=my_redshift_secret.id,\n    target_id=my_redshift_cluster.id,\n    target_type=\"AWS::Redshift::Cluster\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string","description":"The ARN of the secret."},"description":{"type":"string","description":"The description of the secret."},"generateSecretString":{"$ref":"#/types/aws-native:secretsmanager:SecretGenerateSecretString","description":"A structure that specifies how to generate a password to encrypt and store in the secret. To include a specific string in the secret, use ``SecretString`` instead. If you omit both ``GenerateSecretString`` and ``SecretString``, you create an empty secret. When you make a change to this property, a new secret version is created.\n We recommend that you specify the maximum length and include every character type that the system you are generating a password for can support."},"kmsKeyId":{"type":"string","description":"The ARN, key ID, or alias of the KMS key that Secrets Manager uses to encrypt the secret value in the secret. An alias is always prefixed by ``alias/``, for example ``alias/aws/secretsmanager``. For more information, see [About aliases](https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html).\n To use a KMS key in a different account, use the key ARN or the alias ARN.\n If you don't specify this value, then Secrets Manager uses the key ``aws/secretsmanager``. If that key doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value.\n If the secret is in a different AWS account from the credentials calling the API, then you can't use ``aws/secretsmanager`` to encrypt the secret, and you must create and use a customer managed KMS key."},"name":{"type":"string","description":"The name of the new secret.\n The secret name can contain ASCII letters, numbers, and the following characters: /_+=.@-\n Do not end your secret name with a hyphen followed by six characters. If you do so, you risk confusion and unexpected results when searching for a secret by partial ARN. Secrets Manager automatically adds a hyphen and six random characters after the secret name at the end of the ARN.","replaceOnChanges":true},"replicaRegions":{"type":"array","items":{"$ref":"#/types/aws-native:secretsmanager:SecretReplicaRegion"},"description":"A custom type that specifies a ``Region`` and the ``KmsKeyId`` for a replica secret."},"secretString":{"type":"string","description":"The text to encrypt and store in the secret. We recommend you use a JSON structure of key/value pairs for your secret value. To generate a random password, use ``GenerateSecretString`` instead. If you omit both ``GenerateSecretString`` and ``SecretString``, you create an empty secret. When you make a change to this property, a new secret version is created."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach to the secret. Each tag is a key and value pair of strings in a JSON text string, for example:\n  ``[{\"Key\":\"CostCenter\",\"Value\":\"12345\"},{\"Key\":\"environment\",\"Value\":\"production\"}]`` \n Secrets Manager tag key names are case sensitive. A tag with the key \"ABC\" is a different tag from one with key \"abc\".\n Stack-level tags, tags you apply to the CloudFormation stack, are also attached to the secret. \n If you check tags in permissions policies as part of your security strategy, then adding or removing a tag can change permissions. If the completion of this operation would result in you losing your permissions for this secret, then Secrets Manager blocks the operation and returns an ``Access Denied`` error. For more information, see [Control access to secrets using tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac) and [Limit access to identities with tags that match secrets' tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2).\n For information about how to format a JSON parameter for the various command line tool environments, see [Using JSON for Parameters](https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json). If your command-line tool or SDK requires quotation marks around the parameter, you should use single quotes to avoid confusion with the double quotes required in the JSON text.\n The following restrictions apply to tags:\n  +  Maximum number of tags per secret: 50\n  +  Maximum key length: 127 Unicode characters in UTF-8\n  +  Maximum value length: 255 Unicode characters in UTF-8\n  +  Tag keys and values are case sensitive.\n  +  Do not use the ``aws:`` prefix in your tag names or values because AWS reserves it for AWS use. You can't edit or delete tag names or values with this prefix. Tags with this prefix do not count against your tags per secret limit.\n  +  If you use your tagging schema across multiple services and resources, other services might have restrictions on allowed characters. Generally allowed characters: letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - = . _ : / @."},"type":{"type":"string","description":"The exact string that identifies the third-party partner that holds the external secret. For more information, see [Managed external secret partners](https://docs.aws.amazon.com/secretsmanager/latest/userguide/mes-partners.html)."}},"type":"object","required":["awsId"],"inputProperties":{"description":{"type":"string","description":"The description of the secret."},"generateSecretString":{"$ref":"#/types/aws-native:secretsmanager:SecretGenerateSecretString","description":"A structure that specifies how to generate a password to encrypt and store in the secret. To include a specific string in the secret, use ``SecretString`` instead. If you omit both ``GenerateSecretString`` and ``SecretString``, you create an empty secret. When you make a change to this property, a new secret version is created.\n We recommend that you specify the maximum length and include every character type that the system you are generating a password for can support."},"kmsKeyId":{"type":"string","description":"The ARN, key ID, or alias of the KMS key that Secrets Manager uses to encrypt the secret value in the secret. An alias is always prefixed by ``alias/``, for example ``alias/aws/secretsmanager``. For more information, see [About aliases](https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html).\n To use a KMS key in a different account, use the key ARN or the alias ARN.\n If you don't specify this value, then Secrets Manager uses the key ``aws/secretsmanager``. If that key doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value.\n If the secret is in a different AWS account from the credentials calling the API, then you can't use ``aws/secretsmanager`` to encrypt the secret, and you must create and use a customer managed KMS key."},"name":{"type":"string","description":"The name of the new secret.\n The secret name can contain ASCII letters, numbers, and the following characters: /_+=.@-\n Do not end your secret name with a hyphen followed by six characters. If you do so, you risk confusion and unexpected results when searching for a secret by partial ARN. Secrets Manager automatically adds a hyphen and six random characters after the secret name at the end of the ARN."},"replicaRegions":{"type":"array","items":{"$ref":"#/types/aws-native:secretsmanager:SecretReplicaRegion"},"description":"A custom type that specifies a ``Region`` and the ``KmsKeyId`` for a replica secret."},"secretString":{"type":"string","description":"The text to encrypt and store in the secret. We recommend you use a JSON structure of key/value pairs for your secret value. To generate a random password, use ``GenerateSecretString`` instead. If you omit both ``GenerateSecretString`` and ``SecretString``, you create an empty secret. When you make a change to this property, a new secret version is created."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags to attach to the secret. Each tag is a key and value pair of strings in a JSON text string, for example:\n  ``[{\"Key\":\"CostCenter\",\"Value\":\"12345\"},{\"Key\":\"environment\",\"Value\":\"production\"}]`` \n Secrets Manager tag key names are case sensitive. A tag with the key \"ABC\" is a different tag from one with key \"abc\".\n Stack-level tags, tags you apply to the CloudFormation stack, are also attached to the secret. \n If you check tags in permissions policies as part of your security strategy, then adding or removing a tag can change permissions. If the completion of this operation would result in you losing your permissions for this secret, then Secrets Manager blocks the operation and returns an ``Access Denied`` error. For more information, see [Control access to secrets using tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac) and [Limit access to identities with tags that match secrets' tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2).\n For information about how to format a JSON parameter for the various command line tool environments, see [Using JSON for Parameters](https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json). If your command-line tool or SDK requires quotation marks around the parameter, you should use single quotes to avoid confusion with the double quotes required in the JSON text.\n The following restrictions apply to tags:\n  +  Maximum number of tags per secret: 50\n  +  Maximum key length: 127 Unicode characters in UTF-8\n  +  Maximum value length: 255 Unicode characters in UTF-8\n  +  Tag keys and values are case sensitive.\n  +  Do not use the ``aws:`` prefix in your tag names or values because AWS reserves it for AWS use. You can't edit or delete tag names or values with this prefix. Tags with this prefix do not count against your tags per secret limit.\n  +  If you use your tagging schema across multiple services and resources, other services might have restrictions on allowed characters. Generally allowed characters: letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - = . _ : / @."},"type":{"type":"string","description":"The exact string that identifies the third-party partner that holds the external secret. For more information, see [Managed external secret partners](https://docs.aws.amazon.com/secretsmanager/latest/userguide/mes-partners.html)."}}},"aws-native:secretsmanager:SecretTargetAttachment":{"description":"Resource Type definition for AWS::SecretsManager::SecretTargetAttachment","properties":{"awsId":{"type":"string"},"secretId":{"type":"string","description":"The ARN or name of the secret. To reference a secret also created in this template, use the see [Ref](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ref.html) function with the secret's logical ID. This field is unique for each target attachment definition.","replaceOnChanges":true},"targetId":{"type":"string","description":"The ID of the database or cluster."},"targetType":{"type":"string","description":"A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following:\n\n- AWS::RDS::DBInstance\n- AWS::RDS::DBCluster\n- AWS::Redshift::Cluster\n- AWS::RedshiftServerless::Namespace\n- AWS::DocDB::DBInstance\n- AWS::DocDB::DBCluster\n- AWS::DocDBElastic::Cluster"}},"type":"object","required":["awsId","secretId","targetId","targetType"],"inputProperties":{"secretId":{"type":"string","description":"The ARN or name of the secret. To reference a secret also created in this template, use the see [Ref](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ref.html) function with the secret's logical ID. This field is unique for each target attachment definition."},"targetId":{"type":"string","description":"The ID of the database or cluster."},"targetType":{"type":"string","description":"A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following:\n\n- AWS::RDS::DBInstance\n- AWS::RDS::DBCluster\n- AWS::Redshift::Cluster\n- AWS::RedshiftServerless::Namespace\n- AWS::DocDB::DBInstance\n- AWS::DocDB::DBCluster\n- AWS::DocDBElastic::Cluster"}},"requiredInputs":["secretId","targetId","targetType"]},"aws-native:securityhub:AggregatorV2":{"description":"The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.","properties":{"aggregationRegion":{"type":"string","description":"The aggregation Region of the AggregatorV2"},"aggregatorV2Arn":{"type":"string","description":"The ARN of the AggregatorV2 being created and assigned as the unique identifier"},"linkedRegions":{"type":"array","items":{"type":"string"},"description":"The list of included Regions"},"regionLinkingMode":{"$ref":"#/types/aws-native:securityhub:AggregatorV2RegionLinkingMode","description":"Indicates to link a list of included Regions"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of key-value pairs to be applied to the AggregatorV2."}},"type":"object","required":["aggregationRegion","aggregatorV2Arn","linkedRegions","regionLinkingMode"],"inputProperties":{"linkedRegions":{"type":"array","items":{"type":"string"},"description":"The list of included Regions"},"regionLinkingMode":{"$ref":"#/types/aws-native:securityhub:AggregatorV2RegionLinkingMode","description":"Indicates to link a list of included Regions"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of key-value pairs to be applied to the AggregatorV2."}},"requiredInputs":["linkedRegions","regionLinkingMode"]},"aws-native:securityhub:AutomationRule":{"description":"The ``AWS::SecurityHub::AutomationRule`` resource specifies an automation rule based on input parameters. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *User Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var ruleWithCriteriaActionsTags = new AwsNative.SecurityHub.AutomationRule(\"ruleWithCriteriaActionsTags\", new()\n    {\n        RuleName = \"Example rule name\",\n        RuleOrder = 5,\n        Description = \"Example rule description.\",\n        IsTerminal = false,\n        RuleStatus = AwsNative.SecurityHub.AutomationRuleRuleStatus.Enabled,\n        Criteria = new AwsNative.SecurityHub.Inputs.AutomationRulesFindingFiltersArgs\n        {\n            ProductName = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"GuardDuty\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"SecurityHub\",\n                },\n            },\n            CompanyName = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"AWS\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"Private\",\n                },\n            },\n            ProductArn = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"arn:aws:securityhub:us-west-2:123456789012:product/aws\",\n                },\n            },\n            AwsAccountId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"123456789012\",\n                },\n            },\n            Id = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-finding-id\",\n                },\n            },\n            GeneratorId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-generator-id\",\n                },\n            },\n            Type = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"type-1\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"type-2\",\n                },\n            },\n            Description = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"description1\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"description2\",\n                },\n            },\n            SourceUrl = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"https\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"ftp\",\n                },\n            },\n            Title = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"title-1\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"title-2\",\n                },\n            },\n            SeverityLabel = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"LOW\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"HIGH\",\n                },\n            },\n            ResourceType = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"AwsEc2Instance\",\n                },\n            },\n            ResourcePartition = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"aws\",\n                },\n            },\n            ResourceId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"i-1234567890\",\n                },\n            },\n            ResourceRegion = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"us-west\",\n                },\n            },\n            ComplianceStatus = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"FAILED\",\n                },\n            },\n            ComplianceSecurityControlId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"EC2.3\",\n                },\n            },\n            ComplianceAssociatedStandardsId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"ruleset/cis-aws-foundations-benchmark/v/1.2.0\",\n                },\n            },\n            VerificationState = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"BENIGN_POSITIVE\",\n                },\n            },\n            RecordState = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"ACTIVE\",\n                },\n            },\n            RelatedFindingsProductArn = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"arn:aws:securityhub:eu-central-1::product/aws/securityhub\",\n                },\n            },\n            RelatedFindingsId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-finding-id-2\",\n                },\n            },\n            NoteText = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-note-text\",\n                },\n            },\n            NoteUpdatedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            NoteUpdatedBy = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"sechub\",\n                },\n            },\n            WorkflowStatus = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"NEW\",\n                },\n            },\n            FirstObservedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            LastObservedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            CreatedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            UpdatedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    Start = \"2023-04-25T17:05:54.832Z\",\n                    End = \"2023-05-25T17:05:54.832Z\",\n                },\n            },\n            ResourceTags = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"department\",\n                    Value = \"security\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"department\",\n                    Value = \"operations\",\n                },\n            },\n            UserDefinedFields = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.EqualsValue,\n                    Key = \"key1\",\n                    Value = \"security\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.EqualsValue,\n                    Key = \"key2\",\n                    Value = \"operations\",\n                },\n            },\n            ResourceDetailsOther = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"area\",\n                    Value = \"na\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"department\",\n                    Value = \"sales\",\n                },\n            },\n            Confidence = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleNumberFilterArgs\n                {\n                    Gte = 50,\n                    Lte = 95,\n                },\n            },\n            Criticality = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleNumberFilterArgs\n                {\n                    Gte = 50,\n                    Lte = 95,\n                },\n            },\n        },\n        Actions = new[]\n        {\n            new AwsNative.SecurityHub.Inputs.AutomationRulesActionArgs\n            {\n                Type = AwsNative.SecurityHub.AutomationRulesActionType.FindingFieldsUpdate,\n                FindingFieldsUpdate = new AwsNative.SecurityHub.Inputs.AutomationRulesFindingFieldsUpdateArgs\n                {\n                    Severity = new AwsNative.SecurityHub.Inputs.AutomationRuleSeverityUpdateArgs\n                    {\n                        Product = 50,\n                        Label = AwsNative.SecurityHub.AutomationRuleSeverityUpdateLabel.Medium,\n                        Normalized = 60,\n                    },\n                    Types = new[]\n                    {\n                        \"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\",\n                        \"Industry Compliance\",\n                    },\n                    Confidence = 98,\n                    Criticality = 95,\n                    UserDefinedFields = \n                    {\n                        { \"key1\", \"value1\" },\n                        { \"key2\", \"value2\" },\n                    },\n                    RelatedFindings = new[]\n                    {\n                        new AwsNative.SecurityHub.Inputs.AutomationRuleRelatedFindingArgs\n                        {\n                            ProductArn = \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                            Id = \"sample-finding-id-1\",\n                        },\n                        new AwsNative.SecurityHub.Inputs.AutomationRuleRelatedFindingArgs\n                        {\n                            ProductArn = \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                            Id = \"sample-finding-id-2\",\n                        },\n                    },\n                    Note = new AwsNative.SecurityHub.Inputs.AutomationRuleNoteUpdateArgs\n                    {\n                        Text = \"sample-note-text\",\n                        UpdatedBy = \"sechub\",\n                    },\n                    VerificationState = AwsNative.SecurityHub.AutomationRulesFindingFieldsUpdateVerificationState.TruePositive,\n                    Workflow = new AwsNative.SecurityHub.Inputs.AutomationRuleWorkflowUpdateArgs\n                    {\n                        Status = AwsNative.SecurityHub.AutomationRuleWorkflowUpdateStatus.Notified,\n                    },\n                },\n            },\n        },\n        Tags = \n        {\n            { \"sampleTag\", \"sampleValue\" },\n            { \"organizationUnit\", \"pnw\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := securityhub.NewAutomationRule(ctx, \"ruleWithCriteriaActionsTags\", \u0026securityhub.AutomationRuleArgs{\n\t\t\tRuleName:    pulumi.String(\"Example rule name\"),\n\t\t\tRuleOrder:   pulumi.Int(5),\n\t\t\tDescription: pulumi.String(\"Example rule description.\"),\n\t\t\tIsTerminal:  pulumi.Bool(false),\n\t\t\tRuleStatus:  securityhub.AutomationRuleRuleStatusEnabled,\n\t\t\tCriteria: \u0026securityhub.AutomationRulesFindingFiltersArgs{\n\t\t\t\tProductName: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"GuardDuty\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"SecurityHub\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tCompanyName: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"AWS\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"Private\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tProductArn: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/aws\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tAwsAccountId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"123456789012\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-finding-id\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tGeneratorId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-generator-id\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tType: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"type-1\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"type-2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tDescription: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"description1\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"description2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSourceUrl: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"https\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"ftp\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tTitle: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"title-1\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"title-2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSeverityLabel: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"LOW\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"HIGH\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceType: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"AwsEc2Instance\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourcePartition: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"aws\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"i-1234567890\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceRegion: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"us-west\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tComplianceStatus: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"FAILED\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tComplianceSecurityControlId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"EC2.3\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tComplianceAssociatedStandardsId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"ruleset/cis-aws-foundations-benchmark/v/1.2.0\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tVerificationState: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"BENIGN_POSITIVE\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRecordState: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"ACTIVE\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRelatedFindingsProductArn: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"arn:aws:securityhub:eu-central-1::product/aws/securityhub\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRelatedFindingsId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-finding-id-2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tNoteText: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-note-text\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tNoteUpdatedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tNoteUpdatedBy: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"sechub\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tWorkflowStatus: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"NEW\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tFirstObservedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tLastObservedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tCreatedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tUpdatedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tStart: pulumi.String(\"2023-04-25T17:05:54.832Z\"),\n\t\t\t\t\t\tEnd:   pulumi.String(\"2023-05-25T17:05:54.832Z\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceTags: securityhub.AutomationRuleMapFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"department\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"security\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"department\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"operations\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tUserDefinedFields: securityhub.AutomationRuleMapFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"key1\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"security\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"key2\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"operations\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceDetailsOther: securityhub.AutomationRuleMapFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"area\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"na\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"department\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"sales\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tConfidence: securityhub.AutomationRuleNumberFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleNumberFilterArgs{\n\t\t\t\t\t\tGte: pulumi.Float64(50),\n\t\t\t\t\t\tLte: pulumi.Float64(95),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tCriticality: securityhub.AutomationRuleNumberFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleNumberFilterArgs{\n\t\t\t\t\t\tGte: pulumi.Float64(50),\n\t\t\t\t\t\tLte: pulumi.Float64(95),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tActions: securityhub.AutomationRulesActionArray{\n\t\t\t\t\u0026securityhub.AutomationRulesActionArgs{\n\t\t\t\t\tType: securityhub.AutomationRulesActionTypeFindingFieldsUpdate,\n\t\t\t\t\tFindingFieldsUpdate: \u0026securityhub.AutomationRulesFindingFieldsUpdateArgs{\n\t\t\t\t\t\tSeverity: \u0026securityhub.AutomationRuleSeverityUpdateArgs{\n\t\t\t\t\t\t\tProduct:    pulumi.Float64(50),\n\t\t\t\t\t\t\tLabel:      securityhub.AutomationRuleSeverityUpdateLabelMedium,\n\t\t\t\t\t\t\tNormalized: pulumi.Int(60),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tTypes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\"),\n\t\t\t\t\t\t\tpulumi.String(\"Industry Compliance\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tConfidence:  pulumi.Int(98),\n\t\t\t\t\t\tCriticality: pulumi.Int(95),\n\t\t\t\t\t\tUserDefinedFields: pulumi.StringMap{\n\t\t\t\t\t\t\t\"key1\": pulumi.String(\"value1\"),\n\t\t\t\t\t\t\t\"key2\": pulumi.String(\"value2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tRelatedFindings: securityhub.AutomationRuleRelatedFindingArray{\n\t\t\t\t\t\t\t\u0026securityhub.AutomationRuleRelatedFindingArgs{\n\t\t\t\t\t\t\t\tProductArn: pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\"),\n\t\t\t\t\t\t\t\tId:         pulumi.String(\"sample-finding-id-1\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\u0026securityhub.AutomationRuleRelatedFindingArgs{\n\t\t\t\t\t\t\t\tProductArn: pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\"),\n\t\t\t\t\t\t\t\tId:         pulumi.String(\"sample-finding-id-2\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNote: \u0026securityhub.AutomationRuleNoteUpdateArgs{\n\t\t\t\t\t\t\tText:      pulumi.String(\"sample-note-text\"),\n\t\t\t\t\t\t\tUpdatedBy: pulumi.String(\"sechub\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tVerificationState: securityhub.AutomationRulesFindingFieldsUpdateVerificationStateTruePositive,\n\t\t\t\t\t\tWorkflow: \u0026securityhub.AutomationRuleWorkflowUpdateArgs{\n\t\t\t\t\t\t\tStatus: securityhub.AutomationRuleWorkflowUpdateStatusNotified,\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"sampleTag\":        pulumi.String(\"sampleValue\"),\n\t\t\t\t\"organizationUnit\": pulumi.String(\"pnw\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst ruleWithCriteriaActionsTags = new aws_native.securityhub.AutomationRule(\"ruleWithCriteriaActionsTags\", {\n    ruleName: \"Example rule name\",\n    ruleOrder: 5,\n    description: \"Example rule description.\",\n    isTerminal: false,\n    ruleStatus: aws_native.securityhub.AutomationRuleRuleStatus.Enabled,\n    criteria: {\n        productName: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"GuardDuty\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"SecurityHub\",\n            },\n        ],\n        companyName: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"AWS\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"Private\",\n            },\n        ],\n        productArn: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"arn:aws:securityhub:us-west-2:123456789012:product/aws\",\n            },\n        ],\n        awsAccountId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"123456789012\",\n        }],\n        id: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-finding-id\",\n        }],\n        generatorId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-generator-id\",\n        }],\n        type: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"type-1\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"type-2\",\n            },\n        ],\n        description: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"description1\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"description2\",\n            },\n        ],\n        sourceUrl: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"https\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"ftp\",\n            },\n        ],\n        title: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"title-1\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"title-2\",\n            },\n        ],\n        severityLabel: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"LOW\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"HIGH\",\n            },\n        ],\n        resourceType: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"AwsEc2Instance\",\n        }],\n        resourcePartition: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"aws\",\n        }],\n        resourceId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n            value: \"i-1234567890\",\n        }],\n        resourceRegion: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n            value: \"us-west\",\n        }],\n        complianceStatus: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"FAILED\",\n        }],\n        complianceSecurityControlId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"EC2.3\",\n        }],\n        complianceAssociatedStandardsId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"ruleset/cis-aws-foundations-benchmark/v/1.2.0\",\n        }],\n        verificationState: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"BENIGN_POSITIVE\",\n        }],\n        recordState: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"ACTIVE\",\n        }],\n        relatedFindingsProductArn: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"arn:aws:securityhub:eu-central-1::product/aws/securityhub\",\n        }],\n        relatedFindingsId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-finding-id-2\",\n        }],\n        noteText: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-note-text\",\n        }],\n        noteUpdatedAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        noteUpdatedBy: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n            value: \"sechub\",\n        }],\n        workflowStatus: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"NEW\",\n        }],\n        firstObservedAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        lastObservedAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        createdAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        updatedAt: [{\n            start: \"2023-04-25T17:05:54.832Z\",\n            end: \"2023-05-25T17:05:54.832Z\",\n        }],\n        resourceTags: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"department\",\n                value: \"security\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"department\",\n                value: \"operations\",\n            },\n        ],\n        userDefinedFields: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.Equals,\n                key: \"key1\",\n                value: \"security\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.Equals,\n                key: \"key2\",\n                value: \"operations\",\n            },\n        ],\n        resourceDetailsOther: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"area\",\n                value: \"na\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"department\",\n                value: \"sales\",\n            },\n        ],\n        confidence: [{\n            gte: 50,\n            lte: 95,\n        }],\n        criticality: [{\n            gte: 50,\n            lte: 95,\n        }],\n    },\n    actions: [{\n        type: aws_native.securityhub.AutomationRulesActionType.FindingFieldsUpdate,\n        findingFieldsUpdate: {\n            severity: {\n                product: 50,\n                label: aws_native.securityhub.AutomationRuleSeverityUpdateLabel.Medium,\n                normalized: 60,\n            },\n            types: [\n                \"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\",\n                \"Industry Compliance\",\n            ],\n            confidence: 98,\n            criticality: 95,\n            userDefinedFields: {\n                key1: \"value1\",\n                key2: \"value2\",\n            },\n            relatedFindings: [\n                {\n                    productArn: \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    id: \"sample-finding-id-1\",\n                },\n                {\n                    productArn: \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    id: \"sample-finding-id-2\",\n                },\n            ],\n            note: {\n                text: \"sample-note-text\",\n                updatedBy: \"sechub\",\n            },\n            verificationState: aws_native.securityhub.AutomationRulesFindingFieldsUpdateVerificationState.TruePositive,\n            workflow: {\n                status: aws_native.securityhub.AutomationRuleWorkflowUpdateStatus.Notified,\n            },\n        },\n    }],\n    tags: {\n        sampleTag: \"sampleValue\",\n        organizationUnit: \"pnw\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nrule_with_criteria_actions_tags = aws_native.securityhub.AutomationRule(\"ruleWithCriteriaActionsTags\",\n    rule_name=\"Example rule name\",\n    rule_order=5,\n    description=\"Example rule description.\",\n    is_terminal=False,\n    rule_status=aws_native.securityhub.AutomationRuleRuleStatus.ENABLED,\n    criteria={\n        \"product_name\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"GuardDuty\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"SecurityHub\",\n            },\n        ],\n        \"company_name\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"AWS\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"Private\",\n            },\n        ],\n        \"product_arn\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"arn:aws:securityhub:us-west-2:123456789012:product/aws\",\n            },\n        ],\n        \"aws_account_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"123456789012\",\n        }],\n        \"id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-finding-id\",\n        }],\n        \"generator_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-generator-id\",\n        }],\n        \"type\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"type-1\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"type-2\",\n            },\n        ],\n        \"description\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"description1\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"description2\",\n            },\n        ],\n        \"source_url\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"https\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"ftp\",\n            },\n        ],\n        \"title\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"title-1\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"title-2\",\n            },\n        ],\n        \"severity_label\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"LOW\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"HIGH\",\n            },\n        ],\n        \"resource_type\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"AwsEc2Instance\",\n        }],\n        \"resource_partition\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"aws\",\n        }],\n        \"resource_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n            \"value\": \"i-1234567890\",\n        }],\n        \"resource_region\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n            \"value\": \"us-west\",\n        }],\n        \"compliance_status\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"FAILED\",\n        }],\n        \"compliance_security_control_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"EC2.3\",\n        }],\n        \"compliance_associated_standards_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"ruleset/cis-aws-foundations-benchmark/v/1.2.0\",\n        }],\n        \"verification_state\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"BENIGN_POSITIVE\",\n        }],\n        \"record_state\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"ACTIVE\",\n        }],\n        \"related_findings_product_arn\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"arn:aws:securityhub:eu-central-1::product/aws/securityhub\",\n        }],\n        \"related_findings_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-finding-id-2\",\n        }],\n        \"note_text\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-note-text\",\n        }],\n        \"note_updated_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"note_updated_by\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n            \"value\": \"sechub\",\n        }],\n        \"workflow_status\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"NEW\",\n        }],\n        \"first_observed_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"last_observed_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"created_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"updated_at\": [{\n            \"start\": \"2023-04-25T17:05:54.832Z\",\n            \"end\": \"2023-05-25T17:05:54.832Z\",\n        }],\n        \"resource_tags\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"department\",\n                \"value\": \"security\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"department\",\n                \"value\": \"operations\",\n            },\n        ],\n        \"user_defined_fields\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.EQUALS,\n                \"key\": \"key1\",\n                \"value\": \"security\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.EQUALS,\n                \"key\": \"key2\",\n                \"value\": \"operations\",\n            },\n        ],\n        \"resource_details_other\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"area\",\n                \"value\": \"na\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"department\",\n                \"value\": \"sales\",\n            },\n        ],\n        \"confidence\": [{\n            \"gte\": 50,\n            \"lte\": 95,\n        }],\n        \"criticality\": [{\n            \"gte\": 50,\n            \"lte\": 95,\n        }],\n    },\n    actions=[{\n        \"type\": aws_native.securityhub.AutomationRulesActionType.FINDING_FIELDS_UPDATE,\n        \"finding_fields_update\": {\n            \"severity\": {\n                \"product\": 50,\n                \"label\": aws_native.securityhub.AutomationRuleSeverityUpdateLabel.MEDIUM,\n                \"normalized\": 60,\n            },\n            \"types\": [\n                \"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\",\n                \"Industry Compliance\",\n            ],\n            \"confidence\": 98,\n            \"criticality\": 95,\n            \"user_defined_fields\": {\n                \"key1\": \"value1\",\n                \"key2\": \"value2\",\n            },\n            \"related_findings\": [\n                {\n                    \"product_arn\": \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    \"id\": \"sample-finding-id-1\",\n                },\n                {\n                    \"product_arn\": \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    \"id\": \"sample-finding-id-2\",\n                },\n            ],\n            \"note\": {\n                \"text\": \"sample-note-text\",\n                \"updated_by\": \"sechub\",\n            },\n            \"verification_state\": aws_native.securityhub.AutomationRulesFindingFieldsUpdateVerificationState.TRUE_POSITIVE,\n            \"workflow\": {\n                \"status\": aws_native.securityhub.AutomationRuleWorkflowUpdateStatus.NOTIFIED,\n            },\n        },\n    }],\n    tags={\n        \"sampleTag\": \"sampleValue\",\n        \"organizationUnit\": \"pnw\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var ruleWithCriteriaActionsTags = new AwsNative.SecurityHub.AutomationRule(\"ruleWithCriteriaActionsTags\", new()\n    {\n        RuleName = \"Example rule name\",\n        RuleOrder = 5,\n        Description = \"Example rule description.\",\n        IsTerminal = false,\n        RuleStatus = AwsNative.SecurityHub.AutomationRuleRuleStatus.Enabled,\n        Criteria = new AwsNative.SecurityHub.Inputs.AutomationRulesFindingFiltersArgs\n        {\n            ProductName = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"GuardDuty\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"SecurityHub\",\n                },\n            },\n            CompanyName = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"AWS\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"Private\",\n                },\n            },\n            ProductArn = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"arn:aws:securityhub:us-west-2:123456789012:product/aws\",\n                },\n            },\n            AwsAccountId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"123456789012\",\n                },\n            },\n            Id = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-finding-id\",\n                },\n            },\n            GeneratorId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-generator-id\",\n                },\n            },\n            Type = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"type-1\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"type-2\",\n                },\n            },\n            Description = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"description1\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"description2\",\n                },\n            },\n            SourceUrl = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"https\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"ftp\",\n                },\n            },\n            Title = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"title-1\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"title-2\",\n                },\n            },\n            SeverityLabel = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"LOW\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"HIGH\",\n                },\n            },\n            ResourceType = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"AwsEc2Instance\",\n                },\n            },\n            ResourcePartition = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"aws\",\n                },\n            },\n            ResourceId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"i-1234567890\",\n                },\n            },\n            ResourceRegion = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"us-west\",\n                },\n            },\n            ComplianceStatus = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"FAILED\",\n                },\n            },\n            ComplianceSecurityControlId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"EC2.3\",\n                },\n            },\n            ComplianceAssociatedStandardsId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"ruleset/cis-aws-foundations-benchmark/v/1.2.0\",\n                },\n            },\n            VerificationState = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"BENIGN_POSITIVE\",\n                },\n            },\n            RecordState = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"ACTIVE\",\n                },\n            },\n            RelatedFindingsProductArn = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"arn:aws:securityhub:eu-central-1::product/aws/securityhub\",\n                },\n            },\n            RelatedFindingsId = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-finding-id-2\",\n                },\n            },\n            NoteText = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"example-note-text\",\n                },\n            },\n            NoteUpdatedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            NoteUpdatedBy = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.Prefix,\n                    Value = \"sechub\",\n                },\n            },\n            WorkflowStatus = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleStringFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleStringFilterComparison.EqualsValue,\n                    Value = \"NEW\",\n                },\n            },\n            FirstObservedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            LastObservedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            CreatedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    DateRange = new AwsNative.SecurityHub.Inputs.AutomationRuleDateRangeArgs\n                    {\n                        Unit = AwsNative.SecurityHub.AutomationRuleDateRangeUnit.Days,\n                        Value = 5,\n                    },\n                },\n            },\n            UpdatedAt = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleDateFilterArgs\n                {\n                    Start = \"2023-04-25T17:05:54.832Z\",\n                    End = \"2023-05-25T17:05:54.832Z\",\n                },\n            },\n            ResourceTags = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"department\",\n                    Value = \"security\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"department\",\n                    Value = \"operations\",\n                },\n            },\n            UserDefinedFields = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.EqualsValue,\n                    Key = \"key1\",\n                    Value = \"security\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.EqualsValue,\n                    Key = \"key2\",\n                    Value = \"operations\",\n                },\n            },\n            ResourceDetailsOther = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"area\",\n                    Value = \"na\",\n                },\n                new AwsNative.SecurityHub.Inputs.AutomationRuleMapFilterArgs\n                {\n                    Comparison = AwsNative.SecurityHub.AutomationRuleMapFilterComparison.NotEquals,\n                    Key = \"department\",\n                    Value = \"sales\",\n                },\n            },\n            Confidence = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleNumberFilterArgs\n                {\n                    Gte = 50,\n                    Lte = 95,\n                },\n            },\n            Criticality = new[]\n            {\n                new AwsNative.SecurityHub.Inputs.AutomationRuleNumberFilterArgs\n                {\n                    Gte = 50,\n                    Lte = 95,\n                },\n            },\n        },\n        Actions = new[]\n        {\n            new AwsNative.SecurityHub.Inputs.AutomationRulesActionArgs\n            {\n                Type = AwsNative.SecurityHub.AutomationRulesActionType.FindingFieldsUpdate,\n                FindingFieldsUpdate = new AwsNative.SecurityHub.Inputs.AutomationRulesFindingFieldsUpdateArgs\n                {\n                    Severity = new AwsNative.SecurityHub.Inputs.AutomationRuleSeverityUpdateArgs\n                    {\n                        Product = 50,\n                        Label = AwsNative.SecurityHub.AutomationRuleSeverityUpdateLabel.Medium,\n                        Normalized = 60,\n                    },\n                    Types = new[]\n                    {\n                        \"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\",\n                        \"Industry Compliance\",\n                    },\n                    Confidence = 98,\n                    Criticality = 95,\n                    UserDefinedFields = \n                    {\n                        { \"key1\", \"value1\" },\n                        { \"key2\", \"value2\" },\n                    },\n                    RelatedFindings = new[]\n                    {\n                        new AwsNative.SecurityHub.Inputs.AutomationRuleRelatedFindingArgs\n                        {\n                            ProductArn = \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                            Id = \"sample-finding-id-1\",\n                        },\n                        new AwsNative.SecurityHub.Inputs.AutomationRuleRelatedFindingArgs\n                        {\n                            ProductArn = \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                            Id = \"sample-finding-id-2\",\n                        },\n                    },\n                    Note = new AwsNative.SecurityHub.Inputs.AutomationRuleNoteUpdateArgs\n                    {\n                        Text = \"sample-note-text\",\n                        UpdatedBy = \"sechub\",\n                    },\n                    VerificationState = AwsNative.SecurityHub.AutomationRulesFindingFieldsUpdateVerificationState.TruePositive,\n                    Workflow = new AwsNative.SecurityHub.Inputs.AutomationRuleWorkflowUpdateArgs\n                    {\n                        Status = AwsNative.SecurityHub.AutomationRuleWorkflowUpdateStatus.Notified,\n                    },\n                },\n            },\n        },\n        Tags = \n        {\n            { \"sampleTag\", \"sampleValue\" },\n            { \"organizationUnit\", \"pnw\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := securityhub.NewAutomationRule(ctx, \"ruleWithCriteriaActionsTags\", \u0026securityhub.AutomationRuleArgs{\n\t\t\tRuleName:    pulumi.String(\"Example rule name\"),\n\t\t\tRuleOrder:   pulumi.Int(5),\n\t\t\tDescription: pulumi.String(\"Example rule description.\"),\n\t\t\tIsTerminal:  pulumi.Bool(false),\n\t\t\tRuleStatus:  securityhub.AutomationRuleRuleStatusEnabled,\n\t\t\tCriteria: \u0026securityhub.AutomationRulesFindingFiltersArgs{\n\t\t\t\tProductName: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"GuardDuty\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"SecurityHub\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tCompanyName: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"AWS\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"Private\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tProductArn: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/aws\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tAwsAccountId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"123456789012\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-finding-id\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tGeneratorId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-generator-id\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tType: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"type-1\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"type-2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tDescription: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"description1\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"description2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSourceUrl: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"https\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"ftp\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tTitle: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"title-1\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"title-2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSeverityLabel: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"LOW\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"HIGH\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceType: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"AwsEc2Instance\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourcePartition: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"aws\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"i-1234567890\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceRegion: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"us-west\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tComplianceStatus: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"FAILED\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tComplianceSecurityControlId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"EC2.3\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tComplianceAssociatedStandardsId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"ruleset/cis-aws-foundations-benchmark/v/1.2.0\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tVerificationState: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"BENIGN_POSITIVE\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRecordState: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"ACTIVE\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRelatedFindingsProductArn: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"arn:aws:securityhub:eu-central-1::product/aws/securityhub\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tRelatedFindingsId: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-finding-id-2\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tNoteText: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"example-note-text\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tNoteUpdatedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tNoteUpdatedBy: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonPrefix,\n\t\t\t\t\t\tValue:      pulumi.String(\"sechub\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tWorkflowStatus: securityhub.AutomationRuleStringFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleStringFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleStringFilterComparisonEquals,\n\t\t\t\t\t\tValue:      pulumi.String(\"NEW\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tFirstObservedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tLastObservedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tCreatedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tDateRange: \u0026securityhub.AutomationRuleDateRangeArgs{\n\t\t\t\t\t\t\tUnit:  securityhub.AutomationRuleDateRangeUnitDays,\n\t\t\t\t\t\t\tValue: pulumi.Float64(5),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tUpdatedAt: securityhub.AutomationRuleDateFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleDateFilterArgs{\n\t\t\t\t\t\tStart: pulumi.String(\"2023-04-25T17:05:54.832Z\"),\n\t\t\t\t\t\tEnd:   pulumi.String(\"2023-05-25T17:05:54.832Z\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceTags: securityhub.AutomationRuleMapFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"department\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"security\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"department\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"operations\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tUserDefinedFields: securityhub.AutomationRuleMapFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"key1\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"security\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"key2\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"operations\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tResourceDetailsOther: securityhub.AutomationRuleMapFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"area\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"na\"),\n\t\t\t\t\t},\n\t\t\t\t\t\u0026securityhub.AutomationRuleMapFilterArgs{\n\t\t\t\t\t\tComparison: securityhub.AutomationRuleMapFilterComparisonNotEquals,\n\t\t\t\t\t\tKey:        pulumi.String(\"department\"),\n\t\t\t\t\t\tValue:      pulumi.String(\"sales\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tConfidence: securityhub.AutomationRuleNumberFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleNumberFilterArgs{\n\t\t\t\t\t\tGte: pulumi.Float64(50),\n\t\t\t\t\t\tLte: pulumi.Float64(95),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tCriticality: securityhub.AutomationRuleNumberFilterArray{\n\t\t\t\t\t\u0026securityhub.AutomationRuleNumberFilterArgs{\n\t\t\t\t\t\tGte: pulumi.Float64(50),\n\t\t\t\t\t\tLte: pulumi.Float64(95),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tActions: securityhub.AutomationRulesActionArray{\n\t\t\t\t\u0026securityhub.AutomationRulesActionArgs{\n\t\t\t\t\tType: securityhub.AutomationRulesActionTypeFindingFieldsUpdate,\n\t\t\t\t\tFindingFieldsUpdate: \u0026securityhub.AutomationRulesFindingFieldsUpdateArgs{\n\t\t\t\t\t\tSeverity: \u0026securityhub.AutomationRuleSeverityUpdateArgs{\n\t\t\t\t\t\t\tProduct:    pulumi.Float64(50),\n\t\t\t\t\t\t\tLabel:      securityhub.AutomationRuleSeverityUpdateLabelMedium,\n\t\t\t\t\t\t\tNormalized: pulumi.Int(60),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tTypes: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\"),\n\t\t\t\t\t\t\tpulumi.String(\"Industry Compliance\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tConfidence:  pulumi.Int(98),\n\t\t\t\t\t\tCriticality: pulumi.Int(95),\n\t\t\t\t\t\tUserDefinedFields: pulumi.StringMap{\n\t\t\t\t\t\t\t\"key1\": pulumi.String(\"value1\"),\n\t\t\t\t\t\t\t\"key2\": pulumi.String(\"value2\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tRelatedFindings: securityhub.AutomationRuleRelatedFindingArray{\n\t\t\t\t\t\t\t\u0026securityhub.AutomationRuleRelatedFindingArgs{\n\t\t\t\t\t\t\t\tProductArn: pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\"),\n\t\t\t\t\t\t\t\tId:         pulumi.String(\"sample-finding-id-1\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\u0026securityhub.AutomationRuleRelatedFindingArgs{\n\t\t\t\t\t\t\t\tProductArn: pulumi.String(\"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\"),\n\t\t\t\t\t\t\t\tId:         pulumi.String(\"sample-finding-id-2\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tNote: \u0026securityhub.AutomationRuleNoteUpdateArgs{\n\t\t\t\t\t\t\tText:      pulumi.String(\"sample-note-text\"),\n\t\t\t\t\t\t\tUpdatedBy: pulumi.String(\"sechub\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t\tVerificationState: securityhub.AutomationRulesFindingFieldsUpdateVerificationStateTruePositive,\n\t\t\t\t\t\tWorkflow: \u0026securityhub.AutomationRuleWorkflowUpdateArgs{\n\t\t\t\t\t\t\tStatus: securityhub.AutomationRuleWorkflowUpdateStatusNotified,\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"sampleTag\":        pulumi.String(\"sampleValue\"),\n\t\t\t\t\"organizationUnit\": pulumi.String(\"pnw\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst ruleWithCriteriaActionsTags = new aws_native.securityhub.AutomationRule(\"ruleWithCriteriaActionsTags\", {\n    ruleName: \"Example rule name\",\n    ruleOrder: 5,\n    description: \"Example rule description.\",\n    isTerminal: false,\n    ruleStatus: aws_native.securityhub.AutomationRuleRuleStatus.Enabled,\n    criteria: {\n        productName: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"GuardDuty\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"SecurityHub\",\n            },\n        ],\n        companyName: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"AWS\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"Private\",\n            },\n        ],\n        productArn: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"arn:aws:securityhub:us-west-2:123456789012:product/aws\",\n            },\n        ],\n        awsAccountId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"123456789012\",\n        }],\n        id: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-finding-id\",\n        }],\n        generatorId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-generator-id\",\n        }],\n        type: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"type-1\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"type-2\",\n            },\n        ],\n        description: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"description1\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"description2\",\n            },\n        ],\n        sourceUrl: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"https\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"ftp\",\n            },\n        ],\n        title: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"title-1\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n                value: \"title-2\",\n            },\n        ],\n        severityLabel: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"LOW\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n                value: \"HIGH\",\n            },\n        ],\n        resourceType: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"AwsEc2Instance\",\n        }],\n        resourcePartition: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"aws\",\n        }],\n        resourceId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n            value: \"i-1234567890\",\n        }],\n        resourceRegion: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n            value: \"us-west\",\n        }],\n        complianceStatus: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"FAILED\",\n        }],\n        complianceSecurityControlId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"EC2.3\",\n        }],\n        complianceAssociatedStandardsId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"ruleset/cis-aws-foundations-benchmark/v/1.2.0\",\n        }],\n        verificationState: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"BENIGN_POSITIVE\",\n        }],\n        recordState: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"ACTIVE\",\n        }],\n        relatedFindingsProductArn: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"arn:aws:securityhub:eu-central-1::product/aws/securityhub\",\n        }],\n        relatedFindingsId: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-finding-id-2\",\n        }],\n        noteText: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"example-note-text\",\n        }],\n        noteUpdatedAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        noteUpdatedBy: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Prefix,\n            value: \"sechub\",\n        }],\n        workflowStatus: [{\n            comparison: aws_native.securityhub.AutomationRuleStringFilterComparison.Equals,\n            value: \"NEW\",\n        }],\n        firstObservedAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        lastObservedAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        createdAt: [{\n            dateRange: {\n                unit: aws_native.securityhub.AutomationRuleDateRangeUnit.Days,\n                value: 5,\n            },\n        }],\n        updatedAt: [{\n            start: \"2023-04-25T17:05:54.832Z\",\n            end: \"2023-05-25T17:05:54.832Z\",\n        }],\n        resourceTags: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"department\",\n                value: \"security\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"department\",\n                value: \"operations\",\n            },\n        ],\n        userDefinedFields: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.Equals,\n                key: \"key1\",\n                value: \"security\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.Equals,\n                key: \"key2\",\n                value: \"operations\",\n            },\n        ],\n        resourceDetailsOther: [\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"area\",\n                value: \"na\",\n            },\n            {\n                comparison: aws_native.securityhub.AutomationRuleMapFilterComparison.NotEquals,\n                key: \"department\",\n                value: \"sales\",\n            },\n        ],\n        confidence: [{\n            gte: 50,\n            lte: 95,\n        }],\n        criticality: [{\n            gte: 50,\n            lte: 95,\n        }],\n    },\n    actions: [{\n        type: aws_native.securityhub.AutomationRulesActionType.FindingFieldsUpdate,\n        findingFieldsUpdate: {\n            severity: {\n                product: 50,\n                label: aws_native.securityhub.AutomationRuleSeverityUpdateLabel.Medium,\n                normalized: 60,\n            },\n            types: [\n                \"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\",\n                \"Industry Compliance\",\n            ],\n            confidence: 98,\n            criticality: 95,\n            userDefinedFields: {\n                key1: \"value1\",\n                key2: \"value2\",\n            },\n            relatedFindings: [\n                {\n                    productArn: \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    id: \"sample-finding-id-1\",\n                },\n                {\n                    productArn: \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    id: \"sample-finding-id-2\",\n                },\n            ],\n            note: {\n                text: \"sample-note-text\",\n                updatedBy: \"sechub\",\n            },\n            verificationState: aws_native.securityhub.AutomationRulesFindingFieldsUpdateVerificationState.TruePositive,\n            workflow: {\n                status: aws_native.securityhub.AutomationRuleWorkflowUpdateStatus.Notified,\n            },\n        },\n    }],\n    tags: {\n        sampleTag: \"sampleValue\",\n        organizationUnit: \"pnw\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nrule_with_criteria_actions_tags = aws_native.securityhub.AutomationRule(\"ruleWithCriteriaActionsTags\",\n    rule_name=\"Example rule name\",\n    rule_order=5,\n    description=\"Example rule description.\",\n    is_terminal=False,\n    rule_status=aws_native.securityhub.AutomationRuleRuleStatus.ENABLED,\n    criteria={\n        \"product_name\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"GuardDuty\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"SecurityHub\",\n            },\n        ],\n        \"company_name\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"AWS\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"Private\",\n            },\n        ],\n        \"product_arn\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"arn:aws:securityhub:us-west-2:123456789012:product/aws\",\n            },\n        ],\n        \"aws_account_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"123456789012\",\n        }],\n        \"id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-finding-id\",\n        }],\n        \"generator_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-generator-id\",\n        }],\n        \"type\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"type-1\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"type-2\",\n            },\n        ],\n        \"description\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"description1\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"description2\",\n            },\n        ],\n        \"source_url\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"https\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"ftp\",\n            },\n        ],\n        \"title\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"title-1\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n                \"value\": \"title-2\",\n            },\n        ],\n        \"severity_label\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"LOW\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n                \"value\": \"HIGH\",\n            },\n        ],\n        \"resource_type\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"AwsEc2Instance\",\n        }],\n        \"resource_partition\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"aws\",\n        }],\n        \"resource_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n            \"value\": \"i-1234567890\",\n        }],\n        \"resource_region\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n            \"value\": \"us-west\",\n        }],\n        \"compliance_status\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"FAILED\",\n        }],\n        \"compliance_security_control_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"EC2.3\",\n        }],\n        \"compliance_associated_standards_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"ruleset/cis-aws-foundations-benchmark/v/1.2.0\",\n        }],\n        \"verification_state\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"BENIGN_POSITIVE\",\n        }],\n        \"record_state\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"ACTIVE\",\n        }],\n        \"related_findings_product_arn\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"arn:aws:securityhub:eu-central-1::product/aws/securityhub\",\n        }],\n        \"related_findings_id\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-finding-id-2\",\n        }],\n        \"note_text\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"example-note-text\",\n        }],\n        \"note_updated_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"note_updated_by\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.PREFIX,\n            \"value\": \"sechub\",\n        }],\n        \"workflow_status\": [{\n            \"comparison\": aws_native.securityhub.AutomationRuleStringFilterComparison.EQUALS,\n            \"value\": \"NEW\",\n        }],\n        \"first_observed_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"last_observed_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"created_at\": [{\n            \"date_range\": {\n                \"unit\": aws_native.securityhub.AutomationRuleDateRangeUnit.DAYS,\n                \"value\": 5,\n            },\n        }],\n        \"updated_at\": [{\n            \"start\": \"2023-04-25T17:05:54.832Z\",\n            \"end\": \"2023-05-25T17:05:54.832Z\",\n        }],\n        \"resource_tags\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"department\",\n                \"value\": \"security\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"department\",\n                \"value\": \"operations\",\n            },\n        ],\n        \"user_defined_fields\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.EQUALS,\n                \"key\": \"key1\",\n                \"value\": \"security\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.EQUALS,\n                \"key\": \"key2\",\n                \"value\": \"operations\",\n            },\n        ],\n        \"resource_details_other\": [\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"area\",\n                \"value\": \"na\",\n            },\n            {\n                \"comparison\": aws_native.securityhub.AutomationRuleMapFilterComparison.NOT_EQUALS,\n                \"key\": \"department\",\n                \"value\": \"sales\",\n            },\n        ],\n        \"confidence\": [{\n            \"gte\": 50,\n            \"lte\": 95,\n        }],\n        \"criticality\": [{\n            \"gte\": 50,\n            \"lte\": 95,\n        }],\n    },\n    actions=[{\n        \"type\": aws_native.securityhub.AutomationRulesActionType.FINDING_FIELDS_UPDATE,\n        \"finding_fields_update\": {\n            \"severity\": {\n                \"product\": 50,\n                \"label\": aws_native.securityhub.AutomationRuleSeverityUpdateLabel.MEDIUM,\n                \"normalized\": 60,\n            },\n            \"types\": [\n                \"Software and Configuration Checks/Industry and Regulatory Standards/AWS-Foundational-Security-Best-Practices\",\n                \"Industry Compliance\",\n            ],\n            \"confidence\": 98,\n            \"criticality\": 95,\n            \"user_defined_fields\": {\n                \"key1\": \"value1\",\n                \"key2\": \"value2\",\n            },\n            \"related_findings\": [\n                {\n                    \"product_arn\": \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    \"id\": \"sample-finding-id-1\",\n                },\n                {\n                    \"product_arn\": \"arn:aws:securityhub:us-west-2:123456789012:product/123456789012/default\",\n                    \"id\": \"sample-finding-id-2\",\n                },\n            ],\n            \"note\": {\n                \"text\": \"sample-note-text\",\n                \"updated_by\": \"sechub\",\n            },\n            \"verification_state\": aws_native.securityhub.AutomationRulesFindingFieldsUpdateVerificationState.TRUE_POSITIVE,\n            \"workflow\": {\n                \"status\": aws_native.securityhub.AutomationRuleWorkflowUpdateStatus.NOTIFIED,\n            },\n        },\n    }],\n    tags={\n        \"sampleTag\": \"sampleValue\",\n        \"organizationUnit\": \"pnw\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRulesAction"},"description":"One or more actions to update finding fields if a finding matches the conditions specified in ``Criteria``."},"createdAt":{"type":"string","description":"A timestamp that indicates when the rule was created.\n\nUses the `date-time` format specified in [RFC 3339 section 5.6, Internet Date/Time Format](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6) . The value cannot contain spaces. For example, `2020-03-22T13:22:13.933Z` ."},"createdBy":{"type":"string","description":"The principal that created the rule. For example, `arn:aws:sts::123456789012:assumed-role/Developer-Role/JaneDoe` ."},"criteria":{"$ref":"#/types/aws-native:securityhub:AutomationRulesFindingFilters","description":"A set of [Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that ASH uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, ASH applies the rule action to the finding."},"description":{"type":"string","description":"A description of the rule."},"isTerminal":{"type":"boolean","description":"Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub CSPM applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal."},"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the automation rule that you create. For example, `arn:aws:securityhub:us-east-1:123456789012:automation-rule/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111` ."},"ruleName":{"type":"string","description":"The name of the rule."},"ruleOrder":{"type":"integer","description":"An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub CSPM applies rules with lower values for this parameter first."},"ruleStatus":{"$ref":"#/types/aws-native:securityhub:AutomationRuleRuleStatus","description":"Whether the rule is active after it is created. If this parameter is equal to ``ENABLED``, ASH applies the rule to findings and finding updates after the rule is created."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"User-defined tags associated with an automation rule."},"updatedAt":{"type":"string","description":"A timestamp that indicates when the rule was most recently updated.\n\nUses the `date-time` format specified in [RFC 3339 section 5.6, Internet Date/Time Format](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6) . The value cannot contain spaces. For example, `2020-03-22T13:22:13.933Z` ."}},"type":"object","required":["actions","createdAt","createdBy","criteria","description","ruleArn","ruleName","ruleOrder","updatedAt"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRulesAction"},"description":"One or more actions to update finding fields if a finding matches the conditions specified in ``Criteria``."},"criteria":{"$ref":"#/types/aws-native:securityhub:AutomationRulesFindingFilters","description":"A set of [Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that ASH uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, ASH applies the rule action to the finding."},"description":{"type":"string","description":"A description of the rule."},"isTerminal":{"type":"boolean","description":"Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub CSPM applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal."},"ruleName":{"type":"string","description":"The name of the rule."},"ruleOrder":{"type":"integer","description":"An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub CSPM applies rules with lower values for this parameter first."},"ruleStatus":{"$ref":"#/types/aws-native:securityhub:AutomationRuleRuleStatus","description":"Whether the rule is active after it is created. If this parameter is equal to ``ENABLED``, ASH applies the rule to findings and finding updates after the rule is created."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"User-defined tags associated with an automation rule."}},"requiredInputs":["actions","criteria","description","ruleOrder"]},"aws-native:securityhub:AutomationRuleV2":{"description":"Resource schema for AWS::SecurityHub::AutomationRuleV2","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AutomationRulesActionV2"},"description":"A list of actions to be performed when the rule criteria is met"},"createdAt":{"type":"string","description":"The timestamp when the V2 automation rule was created."},"criteria":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2Criteria","description":"The filtering type and configuration of the automation rule."},"description":{"type":"string","description":"A description of the automation rule"},"ruleArn":{"type":"string","description":"The ARN of the automation rule"},"ruleId":{"type":"string","description":"The ID of the automation rule"},"ruleName":{"type":"string","description":"The name of the automation rule"},"ruleOrder":{"type":"number","description":"The value for the rule priority"},"ruleStatus":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2RuleStatus","description":"The status of the automation rule"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of key-value pairs associated with the V2 automation rule."},"updatedAt":{"type":"string","description":"The timestamp when the V2 automation rule was updated."}},"type":"object","required":["actions","createdAt","criteria","description","ruleArn","ruleId","ruleName","ruleOrder","updatedAt"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AutomationRulesActionV2"},"description":"A list of actions to be performed when the rule criteria is met"},"criteria":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2Criteria","description":"The filtering type and configuration of the automation rule."},"description":{"type":"string","description":"A description of the automation rule"},"ruleName":{"type":"string","description":"The name of the automation rule"},"ruleOrder":{"type":"number","description":"The value for the rule priority"},"ruleStatus":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2RuleStatus","description":"The status of the automation rule"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"A list of key-value pairs associated with the V2 automation rule."}},"requiredInputs":["actions","criteria","description","ruleName","ruleOrder"]},"aws-native:securityhub:ConfigurationPolicy":{"description":"The AWS::SecurityHub::ConfigurationPolicy resource represents the Central Configuration Policy in your account.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the configuration policy."},"awsId":{"type":"string","description":"The universally unique identifier (UUID) of the configuration policy."},"configurationPolicy":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicyPolicy","description":"An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).","language":{"csharp":{"name":"ConfigurationPolicyValue"}}},"createdAt":{"type":"string","description":"The date and time, in UTC and ISO 8601 format."},"description":{"type":"string","description":"The description of the configuration policy."},"name":{"type":"string","description":"The name of the configuration policy."},"serviceEnabled":{"type":"boolean","description":"Indicates whether the service that the configuration policy applies to is enabled in the policy."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"User-defined tags associated with a configuration policy. For more information, see [Tagging AWS Security Hub CSPM resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub CSPM user guide* ."},"updatedAt":{"type":"string","description":"The date and time, in UTC and ISO 8601 format."}},"type":"object","required":["arn","awsId","configurationPolicy","createdAt","name","serviceEnabled","updatedAt"],"inputProperties":{"configurationPolicy":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicyPolicy","description":"An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).","language":{"csharp":{"name":"ConfigurationPolicyValue"}}},"description":{"type":"string","description":"The description of the configuration policy."},"name":{"type":"string","description":"The name of the configuration policy."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"User-defined tags associated with a configuration policy. For more information, see [Tagging AWS Security Hub CSPM resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub CSPM user guide* ."}},"requiredInputs":["configurationPolicy"]},"aws-native:securityhub:ConnectorV2":{"description":"Resource schema for AWS::SecurityHub::ConnectorV2","properties":{"connectorArn":{"type":"string","description":"The ARN of the connector"},"connectorId":{"type":"string","description":"The ID of the connector"},"connectorStatus":{"$ref":"#/types/aws-native:securityhub:ConnectorV2ConnectorStatus","description":"The status of the connector"},"createdAt":{"type":"string","description":"The timestamp when the V2 connector was created."},"description":{"type":"string","description":"A description of the connector"},"kmsKeyArn":{"type":"string","description":"The ARN of KMS key used for the connector","replaceOnChanges":true},"lastCheckedAt":{"type":"string","description":"The most recent timestamp when the V2 connector was checked on health status."},"lastUpdatedAt":{"type":"string","description":"The most recent timestamp when the V2 connector was updated."},"message":{"type":"string","description":"The message of the connector status change"},"name":{"type":"string","description":"The name of the connector","replaceOnChanges":true},"provider":{"$ref":"#/types/aws-native:securityhub:ConnectorV2Provider","description":"The third-party provider detail for a service configuration."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to add to the connectorV2 when you create."}},"type":"object","required":["connectorArn","connectorId","connectorStatus","createdAt","lastCheckedAt","lastUpdatedAt","message","name","provider"],"inputProperties":{"description":{"type":"string","description":"A description of the connector"},"kmsKeyArn":{"type":"string","description":"The ARN of KMS key used for the connector"},"name":{"type":"string","description":"The name of the connector"},"provider":{"$ref":"#/types/aws-native:securityhub:ConnectorV2Provider","description":"The third-party provider detail for a service configuration."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to add to the connectorV2 when you create."}},"requiredInputs":["provider"]},"aws-native:securityhub:DelegatedAdmin":{"description":"The ``AWS::SecurityHub::DelegatedAdmin`` resource designates the delegated ASHlong administrator account for an organization. You must enable the integration between ASH and AOlong before you can designate a delegated ASH administrator. Only the management account for an organization can designate the delegated ASH administrator account. For more information, see [Designating the delegated administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *User Guide*.\n To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.\n To designate multiple delegated administrators in different organizations and AWS-Regions, we recommend using [mappings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/mappings-section-structure.html).\n Tags aren't supported for this resource.","properties":{"adminAccountId":{"type":"string","description":"The AWS-account identifier of the account to designate as the Security Hub CSPM administrator account.","replaceOnChanges":true},"delegatedAdminIdentifier":{"type":"string","description":"The ID of the delegated Security Hub CSPM administrator account, in the format of `accountID/Region` ."},"status":{"$ref":"#/types/aws-native:securityhub:DelegatedAdminStatus","description":"Whether the delegated Security Hub CSPM administrator is set for the organization."}},"type":"object","required":["adminAccountId","delegatedAdminIdentifier","status"],"inputProperties":{"adminAccountId":{"type":"string","description":"The AWS-account identifier of the account to designate as the Security Hub CSPM administrator account."}},"requiredInputs":["adminAccountId"]},"aws-native:securityhub:FindingAggregator":{"description":"The ``AWS::SecurityHub::FindingAggregator`` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *User Guide*\n This resource must be created in the Region that you want to designate as your aggregation Region.\n Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in ASH.","properties":{"findingAggregationRegion":{"type":"string","description":"The home Region. Findings generated in linked Regions are replicated and sent to the home Region."},"findingAggregatorArn":{"type":"string","description":"The ARN of the finding aggregator. You use the finding aggregator ARN to retrieve details for, update, and delete the finding aggregator."},"regionLinkingMode":{"$ref":"#/types/aws-native:securityhub:FindingAggregatorRegionLinkingMode","description":"Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them.\n The selected option also determines how to use the Regions provided in the Regions list.\n In CFN, the options for this property are as follows:\n  +  ``ALL_REGIONS`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``ALL_REGIONS_EXCEPT_SPECIFIED`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the ``Regions`` parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``SPECIFIED_REGIONS`` - Indicates to aggregate findings only from the Regions listed in the ``Regions`` parameter. Security Hub does not automatically aggregate findings from new Regions."},"regions":{"type":"array","items":{"type":"string"},"description":"If ``RegionLinkingMode`` is ``ALL_REGIONS_EXCEPT_SPECIFIED``, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region.\n If ``RegionLinkingMode`` is ``SPECIFIED_REGIONS``, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region."}},"type":"object","required":["findingAggregationRegion","findingAggregatorArn","regionLinkingMode"],"inputProperties":{"regionLinkingMode":{"$ref":"#/types/aws-native:securityhub:FindingAggregatorRegionLinkingMode","description":"Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them.\n The selected option also determines how to use the Regions provided in the Regions list.\n In CFN, the options for this property are as follows:\n  +  ``ALL_REGIONS`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``ALL_REGIONS_EXCEPT_SPECIFIED`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the ``Regions`` parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``SPECIFIED_REGIONS`` - Indicates to aggregate findings only from the Regions listed in the ``Regions`` parameter. Security Hub does not automatically aggregate findings from new Regions."},"regions":{"type":"array","items":{"type":"string"},"description":"If ``RegionLinkingMode`` is ``ALL_REGIONS_EXCEPT_SPECIFIED``, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region.\n If ``RegionLinkingMode`` is ``SPECIFIED_REGIONS``, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region."}},"requiredInputs":["regionLinkingMode"]},"aws-native:securityhub:Hub":{"description":"The AWS::SecurityHub::Hub resource represents the implementation of the AWS Security Hub service in your account. One hub resource is created for each Region in which you enable Security Hub.\n\n\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var exampleHubWithTags = new AwsNative.SecurityHub.Hub(\"exampleHubWithTags\", new()\n    {\n        Tags = \n        {\n            { \"key1\", \"value1\" },\n            { \"key2\", \"value2\" },\n        },\n        EnableDefaultStandards = true,\n        ControlFindingGenerator = \"SECURITY_CONTROL\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"hubArn\"] = exampleHubWithTags.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\texampleHubWithTags, err := securityhub.NewHub(ctx, \"exampleHubWithTags\", \u0026securityhub.HubArgs{\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"key1\": pulumi.String(\"value1\"),\n\t\t\t\t\"key2\": pulumi.String(\"value2\"),\n\t\t\t},\n\t\t\tEnableDefaultStandards:  pulumi.Bool(true),\n\t\t\tControlFindingGenerator: pulumi.String(\"SECURITY_CONTROL\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"hubArn\", exampleHubWithTags.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst exampleHubWithTags = new aws_native.securityhub.Hub(\"exampleHubWithTags\", {\n    tags: {\n        key1: \"value1\",\n        key2: \"value2\",\n    },\n    enableDefaultStandards: true,\n    controlFindingGenerator: \"SECURITY_CONTROL\",\n});\nexport const hubArn = exampleHubWithTags.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_hub_with_tags = aws_native.securityhub.Hub(\"exampleHubWithTags\",\n    tags={\n        \"key1\": \"value1\",\n        \"key2\": \"value2\",\n    },\n    enable_default_standards=True,\n    control_finding_generator=\"SECURITY_CONTROL\")\npulumi.export(\"hubArn\", example_hub_with_tags.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var exampleHubWithTags = new AwsNative.SecurityHub.Hub(\"exampleHubWithTags\", new()\n    {\n        Tags = \n        {\n            { \"key1\", \"value1\" },\n            { \"key2\", \"value2\" },\n        },\n        EnableDefaultStandards = true,\n        ControlFindingGenerator = \"SECURITY_CONTROL\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"hubArn\"] = exampleHubWithTags.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\texampleHubWithTags, err := securityhub.NewHub(ctx, \"exampleHubWithTags\", \u0026securityhub.HubArgs{\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"key1\": pulumi.String(\"value1\"),\n\t\t\t\t\"key2\": pulumi.String(\"value2\"),\n\t\t\t},\n\t\t\tEnableDefaultStandards:  pulumi.Bool(true),\n\t\t\tControlFindingGenerator: pulumi.String(\"SECURITY_CONTROL\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"hubArn\", exampleHubWithTags.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst exampleHubWithTags = new aws_native.securityhub.Hub(\"exampleHubWithTags\", {\n    tags: {\n        key1: \"value1\",\n        key2: \"value2\",\n    },\n    enableDefaultStandards: true,\n    controlFindingGenerator: \"SECURITY_CONTROL\",\n});\nexport const hubArn = exampleHubWithTags.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_hub_with_tags = aws_native.securityhub.Hub(\"exampleHubWithTags\",\n    tags={\n        \"key1\": \"value1\",\n        \"key2\": \"value2\",\n    },\n    enable_default_standards=True,\n    control_finding_generator=\"SECURITY_CONTROL\")\npulumi.export(\"hubArn\", example_hub_with_tags.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var exampleHubWithTags = new AwsNative.SecurityHub.Hub(\"exampleHubWithTags\", new()\n    {\n        Tags = \n        {\n            { \"key1\", \"value1\" },\n            { \"key2\", \"value2\" },\n        },\n        EnableDefaultStandards = false,\n        ControlFindingGenerator = \"STANDARD_CONTROL\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"hubArn\"] = exampleHubWithTags.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\texampleHubWithTags, err := securityhub.NewHub(ctx, \"exampleHubWithTags\", \u0026securityhub.HubArgs{\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"key1\": pulumi.String(\"value1\"),\n\t\t\t\t\"key2\": pulumi.String(\"value2\"),\n\t\t\t},\n\t\t\tEnableDefaultStandards:  pulumi.Bool(false),\n\t\t\tControlFindingGenerator: pulumi.String(\"STANDARD_CONTROL\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"hubArn\", exampleHubWithTags.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst exampleHubWithTags = new aws_native.securityhub.Hub(\"exampleHubWithTags\", {\n    tags: {\n        key1: \"value1\",\n        key2: \"value2\",\n    },\n    enableDefaultStandards: false,\n    controlFindingGenerator: \"STANDARD_CONTROL\",\n});\nexport const hubArn = exampleHubWithTags.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_hub_with_tags = aws_native.securityhub.Hub(\"exampleHubWithTags\",\n    tags={\n        \"key1\": \"value1\",\n        \"key2\": \"value2\",\n    },\n    enable_default_standards=False,\n    control_finding_generator=\"STANDARD_CONTROL\")\npulumi.export(\"hubArn\", example_hub_with_tags.id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var exampleHubWithTags = new AwsNative.SecurityHub.Hub(\"exampleHubWithTags\", new()\n    {\n        Tags = \n        {\n            { \"key1\", \"value1\" },\n            { \"key2\", \"value2\" },\n        },\n        EnableDefaultStandards = false,\n        ControlFindingGenerator = \"STANDARD_CONTROL\",\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"hubArn\"] = exampleHubWithTags.Id,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/securityhub\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\texampleHubWithTags, err := securityhub.NewHub(ctx, \"exampleHubWithTags\", \u0026securityhub.HubArgs{\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"key1\": pulumi.String(\"value1\"),\n\t\t\t\t\"key2\": pulumi.String(\"value2\"),\n\t\t\t},\n\t\t\tEnableDefaultStandards:  pulumi.Bool(false),\n\t\t\tControlFindingGenerator: pulumi.String(\"STANDARD_CONTROL\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"hubArn\", exampleHubWithTags.ID())\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst exampleHubWithTags = new aws_native.securityhub.Hub(\"exampleHubWithTags\", {\n    tags: {\n        key1: \"value1\",\n        key2: \"value2\",\n    },\n    enableDefaultStandards: false,\n    controlFindingGenerator: \"STANDARD_CONTROL\",\n});\nexport const hubArn = exampleHubWithTags.id;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_hub_with_tags = aws_native.securityhub.Hub(\"exampleHubWithTags\",\n    tags={\n        \"key1\": \"value1\",\n        \"key2\": \"value2\",\n    },\n    enable_default_standards=False,\n    control_finding_generator=\"STANDARD_CONTROL\")\npulumi.export(\"hubArn\", example_hub_with_tags.id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"An ARN is automatically created for the customer."},"autoEnableControls":{"type":"boolean","description":"Whether to automatically enable new controls when they are added to standards that are enabled"},"controlFindingGenerator":{"type":"string","description":"This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.  If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards."},"enableDefaultStandards":{"type":"boolean","description":"Whether to enable the security standards that Security Hub has designated as automatically enabled."},"subscribedAt":{"type":"string","description":"The date and time when Security Hub was enabled in the account."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}},"type":"object","required":["arn","subscribedAt"],"inputProperties":{"autoEnableControls":{"type":"boolean","description":"Whether to automatically enable new controls when they are added to standards that are enabled"},"controlFindingGenerator":{"type":"string","description":"This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.  If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards."},"enableDefaultStandards":{"type":"boolean","description":"Whether to enable the security standards that Security Hub has designated as automatically enabled."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) ."}}},"aws-native:securityhub:HubV2":{"description":"The AWS::SecurityHub::HubV2 resource represents the implementation of the AWS Security Hub V2 service in your account. Only one hubv2 resource can created in each region in which you enable Security Hub V2.","properties":{"hubV2Arn":{"type":"string","description":"The Amazon Resource Name of the Security Hub V2 resource."},"subscribedAt":{"type":"string","description":"The date and time when the service was enabled in the account."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to add to the hub V2 resource when you enable Security Hub CSPM."}},"type":"object","required":["hubV2Arn","subscribedAt"],"inputProperties":{"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags to add to the hub V2 resource when you enable Security Hub CSPM."}}},"aws-native:securityhub:Insight":{"description":"The AWS::SecurityHub::Insight resource represents the AWS Security Hub Insight in your account. An AWS Security Hub insight is a collection of related findings.","properties":{"filters":{"$ref":"#/types/aws-native:securityhub:InsightAwsSecurityFindingFilters","description":"One or more attributes used to filter the findings included in the insight"},"groupByAttribute":{"type":"string","description":"The grouping attribute for the insight's findings"},"insightArn":{"type":"string","description":"The ARN of a Security Hub insight"},"name":{"type":"string","description":"The name of a Security Hub insight"}},"type":"object","required":["filters","groupByAttribute","insightArn","name"],"inputProperties":{"filters":{"$ref":"#/types/aws-native:securityhub:InsightAwsSecurityFindingFilters","description":"One or more attributes used to filter the findings included in the insight"},"groupByAttribute":{"type":"string","description":"The grouping attribute for the insight's findings"},"name":{"type":"string","description":"The name of a Security Hub insight"}},"requiredInputs":["filters","groupByAttribute"]},"aws-native:securityhub:OrganizationConfiguration":{"description":"The AWS::SecurityHub::OrganizationConfiguration resource represents the configuration of your organization in Security Hub. Only the Security Hub administrator account can create Organization Configuration resource in each region and can opt-in to Central Configuration only in the aggregation region of FindingAggregator.","properties":{"autoEnable":{"type":"boolean","description":"Whether to automatically enable Security Hub in new member accounts when they join the organization."},"autoEnableStandards":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationAutoEnableStandards","description":"Whether to automatically enable Security Hub default standards in new member accounts when they join the organization."},"configurationType":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationConfigurationType","description":"Indicates whether the organization uses local or central configuration."},"memberAccountLimitReached":{"type":"boolean","description":"Whether the maximum number of allowed member accounts are already associated with the Security Hub administrator account."},"organizationConfigurationIdentifier":{"type":"string","description":"The identifier of the OrganizationConfiguration being created and assigned as the unique identifier."},"status":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationStatus","description":"Describes whether central configuration could be enabled as the ConfigurationType for the organization."},"statusMessage":{"type":"string","description":"Provides an explanation if the value of Status is equal to FAILED when ConfigurationType is equal to CENTRAL."}},"type":"object","required":["autoEnable","memberAccountLimitReached","organizationConfigurationIdentifier","status","statusMessage"],"inputProperties":{"autoEnable":{"type":"boolean","description":"Whether to automatically enable Security Hub in new member accounts when they join the organization."},"autoEnableStandards":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationAutoEnableStandards","description":"Whether to automatically enable Security Hub default standards in new member accounts when they join the organization."},"configurationType":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationConfigurationType","description":"Indicates whether the organization uses local or central configuration."}},"requiredInputs":["autoEnable"]},"aws-native:securityhub:PolicyAssociation":{"description":"The AWS::SecurityHub::PolicyAssociation resource represents the AWS Security Hub Central Configuration Policy associations in your Target. Only the AWS Security Hub delegated administrator can create the resouce from the home region.","properties":{"associationIdentifier":{"type":"string","description":"A unique identifier to indicates if the target has an association"},"associationStatus":{"$ref":"#/types/aws-native:securityhub:PolicyAssociationAssociationStatus","description":"The current status of the association between the specified target and the configuration"},"associationStatusMessage":{"type":"string","description":"An explanation for a FAILED value for AssociationStatus"},"associationType":{"$ref":"#/types/aws-native:securityhub:PolicyAssociationAssociationType","description":"Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent"},"configurationPolicyId":{"type":"string","description":"The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration"},"targetId":{"type":"string","description":"The identifier of the target account, organizational unit, or the root","replaceOnChanges":true},"targetType":{"$ref":"#/types/aws-native:securityhub:PolicyAssociationTargetType","description":"Indicates whether the target is an AWS account, organizational unit, or the organization root","replaceOnChanges":true},"updatedAt":{"type":"string","description":"The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated"}},"type":"object","required":["associationIdentifier","associationStatus","associationStatusMessage","associationType","configurationPolicyId","targetId","targetType","updatedAt"],"inputProperties":{"configurationPolicyId":{"type":"string","description":"The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration"},"targetId":{"type":"string","description":"The identifier of the target account, organizational unit, or the root"},"targetType":{"$ref":"#/types/aws-native:securityhub:PolicyAssociationTargetType","description":"Indicates whether the target is an AWS account, organizational unit, or the organization root"}},"requiredInputs":["configurationPolicyId","targetId","targetType"]},"aws-native:securityhub:ProductSubscription":{"description":"The AWS::SecurityHub::ProductSubscription resource represents a subscription to a service that is allowed to generate findings for your Security Hub account. One product subscription resource is created for each product enabled.","properties":{"productArn":{"type":"string","description":"The generic ARN of the product being subscribed to","replaceOnChanges":true},"productSubscriptionArn":{"type":"string","description":"The ARN of the product subscription for the account"}},"type":"object","required":["productArn","productSubscriptionArn"],"inputProperties":{"productArn":{"type":"string","description":"The generic ARN of the product being subscribed to"}},"requiredInputs":["productArn"]},"aws-native:securityhub:SecurityControl":{"description":"A security control in Security Hub describes a security best practice related to a specific resource.","properties":{"lastUpdateReason":{"type":"string","description":"The most recent reason for updating the customizable properties of a security control. This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores."},"parameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:securityhub:SecurityControlParameterConfiguration"},"description":"An object that identifies the name of a control parameter, its current value, and whether it has been customized."},"securityControlArn":{"type":"string","description":"The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1`. This parameter doesn't mention a specific standard."},"securityControlId":{"type":"string","description":"The unique identifier of a security control across standards. Values for this field typically consist of an AWS service name and a number, such as APIGateway.3.","replaceOnChanges":true}},"type":"object","required":["parameters"],"inputProperties":{"lastUpdateReason":{"type":"string","description":"The most recent reason for updating the customizable properties of a security control. This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores."},"parameters":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:securityhub:SecurityControlParameterConfiguration"},"description":"An object that identifies the name of a control parameter, its current value, and whether it has been customized."},"securityControlArn":{"type":"string","description":"The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1`. This parameter doesn't mention a specific standard."},"securityControlId":{"type":"string","description":"The unique identifier of a security control across standards. Values for this field typically consist of an AWS service name and a number, such as APIGateway.3."}},"requiredInputs":["parameters"]},"aws-native:securityhub:Standard":{"description":"The ``AWS::SecurityHub::Standard`` resource specifies the enablement of a security standard. The standard is identified by the ``StandardsArn`` property. To view a list of ASH standards and their Amazon Resource Names (ARNs), use the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.\n You must create a separate ``AWS::SecurityHub::Standard`` resource for each standard that you want to enable.\n For more information about ASH standards, see [standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *User Guide*.","properties":{"disabledStandardsControls":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:StandardsControl"},"description":"Specifies which controls are to be disabled in a standard. \n *Maximum*: ``100``"},"standardsArn":{"type":"string","description":"The ARN of the standard that you want to enable. To view a list of available ASH standards and their ARNs, use the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.","replaceOnChanges":true},"standardsSubscriptionArn":{"type":"string","description":"The ARN of a resource that represents your subscription to a supported standard."}},"type":"object","required":["standardsArn","standardsSubscriptionArn"],"inputProperties":{"disabledStandardsControls":{"type":"array","items":{"$ref":"#/types/aws-native:securityhub:StandardsControl"},"description":"Specifies which controls are to be disabled in a standard. \n *Maximum*: ``100``"},"standardsArn":{"type":"string","description":"The ARN of the standard that you want to enable. To view a list of available ASH standards and their ARNs, use the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation."}},"requiredInputs":["standardsArn"]},"aws-native:securitylake:AwsLogSource":{"description":"Resource Type definition for AWS::SecurityLake::AwsLogSource","properties":{"accounts":{"type":"array","items":{"type":"string"},"description":"AWS account where you want to collect logs from."},"dataLakeArn":{"type":"string","description":"The ARN for the data lake.","replaceOnChanges":true},"sourceName":{"type":"string","description":"The name for a AWS source. This must be a Regionally unique value.","replaceOnChanges":true},"sourceVersion":{"type":"string","description":"The version for a AWS source. This must be a Regionally unique value.","replaceOnChanges":true}},"type":"object","required":["dataLakeArn","sourceName","sourceVersion"],"inputProperties":{"accounts":{"type":"array","items":{"type":"string"},"description":"AWS account where you want to collect logs from."},"dataLakeArn":{"type":"string","description":"The ARN for the data lake."},"sourceName":{"type":"string","description":"The name for a AWS source. This must be a Regionally unique value."},"sourceVersion":{"type":"string","description":"The version for a AWS source. This must be a Regionally unique value."}},"requiredInputs":["dataLakeArn","sourceVersion"]},"aws-native:securitylake:DataLake":{"description":"Resource Type definition for AWS::SecurityLake::DataLake","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) created by you to provide to the subscriber."},"encryptionConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeEncryptionConfiguration","description":"Provides encryption details of the Amazon Security Lake object."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeLifecycleConfiguration","description":"You can customize Security Lake to store data in your preferred AWS Regions for your preferred amount of time. Lifecycle management can help you comply with different compliance requirements. For more details, see [Lifecycle management](https://docs.aws.amazon.com//security-lake/latest/userguide/lifecycle-management.html) in the Amazon Security Lake User Guide."},"metaStoreManagerRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) used to index AWS Glue table partitions that are generated by the ingestion and normalization of AWS log sources and custom sources."},"replicationConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeReplicationConfiguration","description":"Provides replication details of Amazon Security Lake object."},"s3BucketArn":{"type":"string","description":"The ARN for the Amazon Security Lake Amazon S3 bucket."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of objects, one for each tag to associate with the data lake configuration. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string."}},"type":"object","required":["arn","s3BucketArn"],"inputProperties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeEncryptionConfiguration","description":"Provides encryption details of the Amazon Security Lake object."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeLifecycleConfiguration","description":"You can customize Security Lake to store data in your preferred AWS Regions for your preferred amount of time. Lifecycle management can help you comply with different compliance requirements. For more details, see [Lifecycle management](https://docs.aws.amazon.com//security-lake/latest/userguide/lifecycle-management.html) in the Amazon Security Lake User Guide."},"metaStoreManagerRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) used to index AWS Glue table partitions that are generated by the ingestion and normalization of AWS log sources and custom sources."},"replicationConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeReplicationConfiguration","description":"Provides replication details of Amazon Security Lake object."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of objects, one for each tag to associate with the data lake configuration. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string."}}},"aws-native:securitylake:Subscriber":{"description":"Resource Type definition for AWS::SecurityLake::Subscriber","properties":{"accessTypes":{"type":"array","items":{"$ref":"#/types/aws-native:securitylake:SubscriberAccessTypesItem"},"description":"You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber.\n\nSubscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as `LAKEFORMATION` ."},"dataLakeArn":{"type":"string","description":"The ARN for the data lake.","replaceOnChanges":true},"resourceShareArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Security Lake subscriber."},"resourceShareName":{"type":"string","description":"The ARN name of the Amazon Security Lake subscriber."},"s3BucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the S3 bucket."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:securitylake:SubscriberSource"},"description":"The supported AWS services from which logs and events are collected."},"subscriberArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Security Lake subscriber."},"subscriberDescription":{"type":"string","description":"The description for your subscriber account in Security Lake."},"subscriberIdentity":{"$ref":"#/types/aws-native:securitylake:SubscriberIdentityProperties","description":"The AWS identity used to access your data."},"subscriberName":{"type":"string","description":"The name of your Security Lake subscriber account."},"subscriberRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role used to create the Security Lake subscriber."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string."}},"type":"object","required":["accessTypes","dataLakeArn","resourceShareArn","resourceShareName","s3BucketArn","sources","subscriberArn","subscriberIdentity","subscriberName","subscriberRoleArn"],"inputProperties":{"accessTypes":{"type":"array","items":{"$ref":"#/types/aws-native:securitylake:SubscriberAccessTypesItem"},"description":"You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber.\n\nSubscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as `LAKEFORMATION` ."},"dataLakeArn":{"type":"string","description":"The ARN for the data lake."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:securitylake:SubscriberSource"},"description":"The supported AWS services from which logs and events are collected."},"subscriberDescription":{"type":"string","description":"The description for your subscriber account in Security Lake."},"subscriberIdentity":{"$ref":"#/types/aws-native:securitylake:SubscriberIdentityProperties","description":"The AWS identity used to access your data."},"subscriberName":{"type":"string","description":"The name of your Security Lake subscriber account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string."}},"requiredInputs":["accessTypes","dataLakeArn","sources","subscriberIdentity"]},"aws-native:securitylake:SubscriberNotification":{"description":"Resource Type definition for AWS::SecurityLake::SubscriberNotification","properties":{"notificationConfiguration":{"$ref":"#/types/aws-native:securitylake:SubscriberNotificationNotificationConfiguration","description":"Specify the configurations you want to use for subscriber notification. The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake ."},"subscriberArn":{"type":"string","description":"The ARN for the subscriber","replaceOnChanges":true},"subscriberEndpoint":{"type":"string","description":"The endpoint the subscriber should listen to for notifications"}},"type":"object","required":["notificationConfiguration","subscriberArn","subscriberEndpoint"],"inputProperties":{"notificationConfiguration":{"$ref":"#/types/aws-native:securitylake:SubscriberNotificationNotificationConfiguration","description":"Specify the configurations you want to use for subscriber notification. The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake ."},"subscriberArn":{"type":"string","description":"The ARN for the subscriber"}},"requiredInputs":["notificationConfiguration","subscriberArn"]},"aws-native:servicecatalog:CloudFormationProduct":{"description":"Resource Type definition for AWS::ServiceCatalog::CloudFormationProduct","properties":{"acceptLanguage":{"type":"string","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"awsId":{"type":"string"},"description":{"type":"string","description":"The description of the product."},"distributor":{"type":"string","description":"The distributor of the product."},"name":{"type":"string","description":"The name of the product."},"owner":{"type":"string","description":"The owner of the product."},"productName":{"type":"string","description":"The name of the product."},"productType":{"type":"string","description":"The type of product."},"provisioningArtifactIds":{"type":"string","description":"The IDs of the provisioning artifacts."},"provisioningArtifactNames":{"type":"string","description":"The names of the provisioning artifacts."},"provisioningArtifactParameters":{"type":"array","items":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductProvisioningArtifactProperties"},"description":"The configuration of the provisioning artifact (also known as a version)."},"replaceProvisioningArtifacts":{"type":"boolean","description":"This property is turned off by default. If turned off, you can update provisioning artifacts or product attributes (such as description, distributor, name, owner, and more) and the associated provisioning artifacts will retain the same unique identifier. Provisioning artifacts are matched within the CloudFormationProduct resource, and only those that have been updated will be changed. Provisioning artifacts are matched by a combinaton of provisioning artifact template URL and name.\n\nIf turned on, provisioning artifacts will be given a new unique identifier when you update the product or provisioning artifacts."},"sourceConnection":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductSourceConnection","description":"A top level `ProductViewDetail` response containing details about the product’s connection. AWS Service Catalog returns this field for the `CreateProduct` , `UpdateProduct` , `DescribeProductAsAdmin` , and `SearchProductAsAdmin` APIs. This response contains the same fields as the `ConnectionParameters` request, with the addition of the `LastSync` response."},"supportDescription":{"type":"string","description":"The support information about the product."},"supportEmail":{"type":"string","description":"The contact email for product support."},"supportUrl":{"type":"string","description":"The contact URL for product support.\n\n`^https?:\\/\\//` / is the pattern used to validate SupportUrl."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["awsId","name","owner","productName","provisioningArtifactIds","provisioningArtifactNames"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"description":{"type":"string","description":"The description of the product."},"distributor":{"type":"string","description":"The distributor of the product."},"name":{"type":"string","description":"The name of the product."},"owner":{"type":"string","description":"The owner of the product."},"productType":{"type":"string","description":"The type of product."},"provisioningArtifactParameters":{"type":"array","items":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductProvisioningArtifactProperties"},"description":"The configuration of the provisioning artifact (also known as a version)."},"replaceProvisioningArtifacts":{"type":"boolean","description":"This property is turned off by default. If turned off, you can update provisioning artifacts or product attributes (such as description, distributor, name, owner, and more) and the associated provisioning artifacts will retain the same unique identifier. Provisioning artifacts are matched within the CloudFormationProduct resource, and only those that have been updated will be changed. Provisioning artifacts are matched by a combinaton of provisioning artifact template URL and name.\n\nIf turned on, provisioning artifacts will be given a new unique identifier when you update the product or provisioning artifacts."},"sourceConnection":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductSourceConnection","description":"A top level `ProductViewDetail` response containing details about the product’s connection. AWS Service Catalog returns this field for the `CreateProduct` , `UpdateProduct` , `DescribeProductAsAdmin` , and `SearchProductAsAdmin` APIs. This response contains the same fields as the `ConnectionParameters` request, with the addition of the `LastSync` response."},"supportDescription":{"type":"string","description":"The support information about the product."},"supportEmail":{"type":"string","description":"The contact email for product support."},"supportUrl":{"type":"string","description":"The contact URL for product support.\n\n`^https?:\\/\\//` / is the pattern used to validate SupportUrl."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["owner"]},"aws-native:servicecatalog:CloudFormationProvisionedProduct":{"description":"Resource Schema for AWS::ServiceCatalog::CloudFormationProvisionedProduct","properties":{"acceptLanguage":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductAcceptLanguage","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"cloudformationStackArn":{"type":"string"},"notificationArns":{"type":"array","items":{"type":"string"},"description":"Passed to AWS CloudFormation . The SNS topic ARNs to which to publish stack-related events.","replaceOnChanges":true},"outputs":{"type":"object","additionalProperties":{"type":"string"},"description":"List of key-value pair outputs."},"pathId":{"type":"string","description":"The path identifier of the product. This value is optional if the product has a default path, and required if the product has more than one path. To list the paths for a product, use [ListLaunchPaths](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html) .\n\n\u003e You must provide the name or ID, but not both."},"pathName":{"type":"string","description":"The name of the path. This value is optional if the product has a default path, and required if the product has more than one path. To list the paths for a product, use [ListLaunchPaths](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html) .\n\n\u003e You must provide the name or ID, but not both."},"productId":{"type":"string","description":"The product identifier.\n\n\u003e You must specify either the ID or the name of the product, but not both."},"productName":{"type":"string","description":"The name of the Service Catalog product.\n\nEach time a stack is created or updated, if `ProductName` is provided it will successfully resolve to `ProductId` as long as only one product exists in the account or Region with that `ProductName` .\n\n\u003e You must specify either the name or the ID of the product, but not both."},"provisionedProductId":{"type":"string","description":"The ID of the provisioned product."},"provisionedProductName":{"type":"string","description":"A user-friendly name for the provisioned product. This value must be unique for the AWS account and cannot be updated after the product is provisioned.","replaceOnChanges":true},"provisioningArtifactId":{"type":"string","description":"The identifier of the provisioning artifact (also known as a version).\n\n\u003e You must specify either the ID or the name of the provisioning artifact, but not both."},"provisioningArtifactName":{"type":"string","description":"The name of the provisioning artifact (also known as a version) for the product. This name must be unique for the product.\n\n\u003e You must specify either the name or the ID of the provisioning artifact, but not both. You must also specify either the name or the ID of the product, but not both."},"provisioningParameters":{"type":"array","items":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningParameter"},"description":"Parameters specified by the administrator that are required for provisioning the product."},"provisioningPreferences":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningPreferences","description":"StackSet preferences that are required for provisioning the product or updating a provisioned product."},"recordId":{"type":"string","description":"The ID of the record, such as `rec-rjeatvy434trk` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags.\n\n\u003e Requires the provisioned product to have an [ResourceUpdateConstraint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-resourceupdateconstraint.html) resource with `TagUpdatesOnProvisionedProduct` set to `ALLOWED` to allow tag updates. If `RESOURCE_UPDATE` constraint is not present, tags updates are ignored."}},"type":"object","required":["cloudformationStackArn","outputs","provisionedProductId","recordId"],"inputProperties":{"acceptLanguage":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductAcceptLanguage","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"notificationArns":{"type":"array","items":{"type":"string"},"description":"Passed to AWS CloudFormation . The SNS topic ARNs to which to publish stack-related events."},"pathId":{"type":"string","description":"The path identifier of the product. This value is optional if the product has a default path, and required if the product has more than one path. To list the paths for a product, use [ListLaunchPaths](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html) .\n\n\u003e You must provide the name or ID, but not both."},"pathName":{"type":"string","description":"The name of the path. This value is optional if the product has a default path, and required if the product has more than one path. To list the paths for a product, use [ListLaunchPaths](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html) .\n\n\u003e You must provide the name or ID, but not both."},"productId":{"type":"string","description":"The product identifier.\n\n\u003e You must specify either the ID or the name of the product, but not both."},"productName":{"type":"string","description":"The name of the Service Catalog product.\n\nEach time a stack is created or updated, if `ProductName` is provided it will successfully resolve to `ProductId` as long as only one product exists in the account or Region with that `ProductName` .\n\n\u003e You must specify either the name or the ID of the product, but not both."},"provisionedProductName":{"type":"string","description":"A user-friendly name for the provisioned product. This value must be unique for the AWS account and cannot be updated after the product is provisioned."},"provisioningArtifactId":{"type":"string","description":"The identifier of the provisioning artifact (also known as a version).\n\n\u003e You must specify either the ID or the name of the provisioning artifact, but not both."},"provisioningArtifactName":{"type":"string","description":"The name of the provisioning artifact (also known as a version) for the product. This name must be unique for the product.\n\n\u003e You must specify either the name or the ID of the provisioning artifact, but not both. You must also specify either the name or the ID of the product, but not both."},"provisioningParameters":{"type":"array","items":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningParameter"},"description":"Parameters specified by the administrator that are required for provisioning the product."},"provisioningPreferences":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningPreferences","description":"StackSet preferences that are required for provisioning the product or updating a provisioned product."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags.\n\n\u003e Requires the provisioned product to have an [ResourceUpdateConstraint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-resourceupdateconstraint.html) resource with `TagUpdatesOnProvisionedProduct` set to `ALLOWED` to allow tag updates. If `RESOURCE_UPDATE` constraint is not present, tags updates are ignored."}}},"aws-native:servicecatalog:LaunchNotificationConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::LaunchNotificationConstraint","properties":{"acceptLanguage":{"type":"string","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"awsId":{"type":"string","description":"Unique identifier for the constraint"},"description":{"type":"string","description":"The description of the constraint."},"notificationArns":{"type":"array","items":{"type":"string"},"description":"The notification ARNs."},"portfolioId":{"type":"string","description":"The portfolio identifier.","replaceOnChanges":true},"productId":{"type":"string","description":"The product identifier.","replaceOnChanges":true}},"type":"object","required":["awsId","notificationArns","portfolioId","productId"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"description":{"type":"string","description":"The description of the constraint."},"notificationArns":{"type":"array","items":{"type":"string"},"description":"The notification ARNs."},"portfolioId":{"type":"string","description":"The portfolio identifier."},"productId":{"type":"string","description":"The product identifier."}},"requiredInputs":["notificationArns","portfolioId","productId"]},"aws-native:servicecatalog:LaunchRoleConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::LaunchRoleConstraint","properties":{"acceptLanguage":{"type":"string","description":"The language code for the constraint."},"awsId":{"type":"string","description":"The unique identifier for the launch role constraint."},"description":{"type":"string","description":"The description of the launch role constraint."},"localRoleName":{"type":"string","description":"The local IAM role name to use in the launch constraint."},"portfolioId":{"type":"string","description":"The ID of the portfolio to which this launch role constraint applies.","replaceOnChanges":true},"productId":{"type":"string","description":"The ID of the product to which this launch role constraint applies.","replaceOnChanges":true},"roleArn":{"type":"string","description":"The ARN of the IAM role used for the launch constraint."}},"type":"object","required":["awsId","portfolioId","productId"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code for the constraint."},"description":{"type":"string","description":"The description of the launch role constraint."},"localRoleName":{"type":"string","description":"The local IAM role name to use in the launch constraint."},"portfolioId":{"type":"string","description":"The ID of the portfolio to which this launch role constraint applies."},"productId":{"type":"string","description":"The ID of the product to which this launch role constraint applies."},"roleArn":{"type":"string","description":"The ARN of the IAM role used for the launch constraint."}},"requiredInputs":["portfolioId","productId"]},"aws-native:servicecatalog:LaunchTemplateConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::LaunchTemplateConstraint","properties":{"acceptLanguage":{"type":"string","description":"The language code."},"awsId":{"type":"string","description":"Unique identifier for the constraint"},"description":{"type":"string","description":"The description of the constraint."},"portfolioId":{"type":"string","description":"The portfolio identifier.","replaceOnChanges":true},"productId":{"type":"string","description":"The product identifier.","replaceOnChanges":true},"rules":{"type":"string","description":"A json encoded string of the template constraint rules"}},"type":"object","required":["awsId","portfolioId","productId","rules"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code."},"description":{"type":"string","description":"The description of the constraint."},"portfolioId":{"type":"string","description":"The portfolio identifier."},"productId":{"type":"string","description":"The product identifier."},"rules":{"type":"string","description":"A json encoded string of the template constraint rules"}},"requiredInputs":["portfolioId","productId","rules"]},"aws-native:servicecatalog:Portfolio":{"description":"Resource type definition for AWS::ServiceCatalog::Portfolio","properties":{"acceptLanguage":{"type":"string","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"awsId":{"type":"string","description":"The portfolio identifier."},"description":{"type":"string","description":"The description of the portfolio."},"displayName":{"type":"string","description":"The name to use for display purposes."},"portfolioName":{"type":"string","description":"The name of the portfolio."},"providerName":{"type":"string","description":"The name of the portfolio provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"type":"object","required":["awsId","displayName","portfolioName","providerName"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"description":{"type":"string","description":"The description of the portfolio."},"displayName":{"type":"string","description":"The name to use for display purposes."},"providerName":{"type":"string","description":"The name of the portfolio provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tags."}},"requiredInputs":["displayName","providerName"]},"aws-native:servicecatalog:PortfolioPrincipalAssociation":{"description":"Resource Type definition for AWS::ServiceCatalog::PortfolioPrincipalAssociation","properties":{"acceptLanguage":{"type":"string","description":"The language code.","replaceOnChanges":true},"portfolioId":{"type":"string","description":"The portfolio identifier.","replaceOnChanges":true},"principalArn":{"type":"string","description":"The ARN of the principal (user, role, or group).","replaceOnChanges":true},"principalType":{"type":"string","description":"The principal type. The supported value is IAM if you use a fully defined Amazon Resource Name (ARN), or IAM_PATTERN if you use an ARN with no accountID, with or without wildcard characters.","replaceOnChanges":true}},"type":"object","required":["principalType"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code."},"portfolioId":{"type":"string","description":"The portfolio identifier."},"principalArn":{"type":"string","description":"The ARN of the principal (user, role, or group)."},"principalType":{"type":"string","description":"The principal type. The supported value is IAM if you use a fully defined Amazon Resource Name (ARN), or IAM_PATTERN if you use an ARN with no accountID, with or without wildcard characters."}},"requiredInputs":["principalType"]},"aws-native:servicecatalog:PortfolioProductAssociation":{"description":"Resource Type definition for AWS::ServiceCatalog::PortfolioProductAssociation","properties":{"acceptLanguage":{"type":"string","description":"The language code.","replaceOnChanges":true},"portfolioId":{"type":"string","description":"The portfolio identifier.","replaceOnChanges":true},"productId":{"type":"string","description":"The product identifier.","replaceOnChanges":true},"sourcePortfolioId":{"type":"string","description":"The identifier of the source portfolio. The source portfolio must be a portfolio imported from a different account than the one creating the association. This account must have previously shared this portfolio with the account creating the association.","replaceOnChanges":true}},"type":"object","inputProperties":{"acceptLanguage":{"type":"string","description":"The language code."},"portfolioId":{"type":"string","description":"The portfolio identifier."},"productId":{"type":"string","description":"The product identifier."},"sourcePortfolioId":{"type":"string","description":"The identifier of the source portfolio. The source portfolio must be a portfolio imported from a different account than the one creating the association. This account must have previously shared this portfolio with the account creating the association."}}},"aws-native:servicecatalog:PortfolioShare":{"description":"Resource Type definition for AWS::ServiceCatalog::PortfolioShare","properties":{"acceptLanguage":{"type":"string","description":"The language code."},"accountId":{"type":"string","description":"The AWS account ID.","replaceOnChanges":true},"portfolioId":{"type":"string","description":"The portfolio identifier.","replaceOnChanges":true},"shareTagOptions":{"type":"boolean","description":"Enables or disables TagOptions sharing when creating the portfolio share."}},"type":"object","required":["accountId","portfolioId"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code."},"accountId":{"type":"string","description":"The AWS account ID."},"portfolioId":{"type":"string","description":"The portfolio identifier."},"shareTagOptions":{"type":"boolean","description":"Enables or disables TagOptions sharing when creating the portfolio share."}},"requiredInputs":["accountId","portfolioId"]},"aws-native:servicecatalog:ResourceUpdateConstraint":{"description":"Resource type definition for AWS::ServiceCatalog::ResourceUpdateConstraint","properties":{"acceptLanguage":{"type":"string","description":"The language code"},"awsId":{"type":"string","description":"Unique identifier for the constraint"},"description":{"type":"string","description":"The description of the constraint"},"portfolioId":{"type":"string","description":"The portfolio identifier","replaceOnChanges":true},"productId":{"type":"string","description":"The product identifier","replaceOnChanges":true},"tagUpdateOnProvisionedProduct":{"type":"string","description":"ALLOWED or NOT_ALLOWED, to permit or prevent changes to the tags on provisioned instances of the specified portfolio / product combination"}},"type":"object","required":["awsId","portfolioId","productId","tagUpdateOnProvisionedProduct"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code"},"description":{"type":"string","description":"The description of the constraint"},"portfolioId":{"type":"string","description":"The portfolio identifier"},"productId":{"type":"string","description":"The product identifier"},"tagUpdateOnProvisionedProduct":{"type":"string","description":"ALLOWED or NOT_ALLOWED, to permit or prevent changes to the tags on provisioned instances of the specified portfolio / product combination"}},"requiredInputs":["portfolioId","productId","tagUpdateOnProvisionedProduct"]},"aws-native:servicecatalog:ServiceAction":{"description":"Resource Schema for AWS::ServiceCatalog::ServiceAction","properties":{"acceptLanguage":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionAcceptLanguage","description":"The language code.\n\n- `en` - English (default)\n- `jp` - Japanese\n- `zh` - Chinese"},"awsId":{"type":"string","description":"The self-service action identifier. For example, `act-fs7abcd89wxyz` ."},"definition":{"type":"array","items":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionDefinitionParameter"},"description":"A map that defines the self-service action."},"definitionType":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionDefinitionType","description":"The self-service action definition type. For example, `SSM_AUTOMATION` ."},"description":{"type":"string","description":"The self-service action description."},"name":{"type":"string","description":"The self-service action name."}},"type":"object","required":["awsId","definition","definitionType","name"],"inputProperties":{"acceptLanguage":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionAcceptLanguage","description":"The language code.\n\n- `en` - English (default)\n- `jp` - Japanese\n- `zh` - Chinese"},"definition":{"type":"array","items":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionDefinitionParameter"},"description":"A map that defines the self-service action."},"definitionType":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionDefinitionType","description":"The self-service action definition type. For example, `SSM_AUTOMATION` ."},"description":{"type":"string","description":"The self-service action description."},"name":{"type":"string","description":"The self-service action name."}},"requiredInputs":["definition","definitionType"]},"aws-native:servicecatalog:ServiceActionAssociation":{"description":"Resource Schema for AWS::ServiceCatalog::ServiceActionAssociation","properties":{"productId":{"type":"string","description":"The product identifier. For example, `prod-abcdzk7xy33qa` .","replaceOnChanges":true},"provisioningArtifactId":{"type":"string","description":"The identifier of the provisioning artifact. For example, `pa-4abcdjnxjj6ne` .","replaceOnChanges":true},"serviceActionId":{"type":"string","description":"The self-service action identifier. For example, `act-fs7abcd89wxyz` .","replaceOnChanges":true}},"type":"object","required":["productId","provisioningArtifactId","serviceActionId"],"inputProperties":{"productId":{"type":"string","description":"The product identifier. For example, `prod-abcdzk7xy33qa` ."},"provisioningArtifactId":{"type":"string","description":"The identifier of the provisioning artifact. For example, `pa-4abcdjnxjj6ne` ."},"serviceActionId":{"type":"string","description":"The self-service action identifier. For example, `act-fs7abcd89wxyz` ."}},"requiredInputs":["productId","provisioningArtifactId","serviceActionId"]},"aws-native:servicecatalog:StackSetConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::StackSetConstraint","properties":{"acceptLanguage":{"type":"string","description":"The language code."},"accountList":{"type":"array","items":{"type":"string"},"description":"One or more AWS accounts that will have access to the provisioned product."},"adminRole":{"type":"string","description":"AdminRole ARN."},"awsId":{"type":"string","description":"Unique identifier for the constraint"},"description":{"type":"string","description":"The description of the constraint."},"executionRole":{"type":"string","description":"ExecutionRole name."},"portfolioId":{"type":"string","description":"The portfolio identifier.","replaceOnChanges":true},"productId":{"type":"string","description":"The product identifier.","replaceOnChanges":true},"regionList":{"type":"array","items":{"type":"string"},"description":"One or more AWS Regions where the provisioned product will be available."},"stackInstanceControl":{"type":"string","description":"Permission to create, update, and delete stack instances. Choose from ALLOWED and NOT_ALLOWED."}},"type":"object","required":["accountList","adminRole","awsId","description","executionRole","portfolioId","productId","regionList","stackInstanceControl"],"inputProperties":{"acceptLanguage":{"type":"string","description":"The language code."},"accountList":{"type":"array","items":{"type":"string"},"description":"One or more AWS accounts that will have access to the provisioned product."},"adminRole":{"type":"string","description":"AdminRole ARN."},"description":{"type":"string","description":"The description of the constraint."},"executionRole":{"type":"string","description":"ExecutionRole name."},"portfolioId":{"type":"string","description":"The portfolio identifier."},"productId":{"type":"string","description":"The product identifier."},"regionList":{"type":"array","items":{"type":"string"},"description":"One or more AWS Regions where the provisioned product will be available."},"stackInstanceControl":{"type":"string","description":"Permission to create, update, and delete stack instances. Choose from ALLOWED and NOT_ALLOWED."}},"requiredInputs":["accountList","adminRole","description","executionRole","portfolioId","productId","regionList","stackInstanceControl"]},"aws-native:servicecatalog:TagOption":{"description":"Resource type definition for AWS::ServiceCatalog::TagOption","properties":{"active":{"type":"boolean","description":"The TagOption active state."},"awsId":{"type":"string","description":"The TagOption identifier."},"key":{"type":"string","description":"The TagOption key.","replaceOnChanges":true},"value":{"type":"string","description":"The TagOption value.","replaceOnChanges":true}},"type":"object","required":["awsId","key","value"],"inputProperties":{"active":{"type":"boolean","description":"The TagOption active state."},"key":{"type":"string","description":"The TagOption key."},"value":{"type":"string","description":"The TagOption value."}},"requiredInputs":["key","value"]},"aws-native:servicecatalog:TagOptionAssociation":{"description":"Resource Type definition for AWS::ServiceCatalog::TagOptionAssociation","properties":{"resourceId":{"type":"string","description":"The CloudformationProduct or Portfolio identifier.","replaceOnChanges":true},"tagOptionId":{"type":"string","description":"The TagOption identifier.","replaceOnChanges":true}},"type":"object","inputProperties":{"resourceId":{"type":"string","description":"The CloudformationProduct or Portfolio identifier."},"tagOptionId":{"type":"string","description":"The TagOption identifier."}}},"aws-native:servicecatalogappregistry:Application":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::Application","properties":{"applicationName":{"type":"string","description":"The name of the application. "},"applicationTagKey":{"type":"string","description":"The key of the AWS application tag, which is awsApplication. Applications created before 11/13/2023 or applications without the AWS application tag resource group return no value."},"applicationTagValue":{"type":"string","description":"The value of the AWS application tag, which is the identifier of an associated resource. Applications created before 11/13/2023 or applications without the AWS application tag resource group return no value. "},"arn":{"type":"string","description":"The Amazon resource name (ARN) that specifies the application across services."},"awsId":{"type":"string","description":"The identifier of the application."},"description":{"type":"string","description":"The description of the application. "},"name":{"type":"string","description":"The name of the application. "},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs you can use to associate with the application."}},"type":"object","required":["applicationName","applicationTagKey","applicationTagValue","arn","awsId","name"],"inputProperties":{"description":{"type":"string","description":"The description of the application. "},"name":{"type":"string","description":"The name of the application. "},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs you can use to associate with the application."}}},"aws-native:servicecatalogappregistry:AttributeGroup":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::AttributeGroup.","properties":{"arn":{"type":"string","description":"The Amazon resource name (ARN) that specifies the attribute group across services."},"attributes":{"$ref":"pulumi.json#/Any","description":"A nested object in a JSON or YAML template that supports arbitrary definitions. Represents the attributes in an attribute group that describes an application and its components.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ServiceCatalogAppRegistry::AttributeGroup` for more information about the expected schema for this property."},"awsId":{"type":"string","description":"The globally unique attribute group identifier of the attribute group."},"description":{"type":"string","description":"The description of the attribute group. "},"name":{"type":"string","description":"The name of the attribute group. "},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs you can use to associate with the attribute group."}},"type":"object","required":["arn","attributes","awsId","name"],"inputProperties":{"attributes":{"$ref":"pulumi.json#/Any","description":"A nested object in a JSON or YAML template that supports arbitrary definitions. Represents the attributes in an attribute group that describes an application and its components.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ServiceCatalogAppRegistry::AttributeGroup` for more information about the expected schema for this property."},"description":{"type":"string","description":"The description of the attribute group. "},"name":{"type":"string","description":"The name of the attribute group. "},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs you can use to associate with the attribute group."}},"requiredInputs":["attributes"]},"aws-native:servicecatalogappregistry:AttributeGroupAssociation":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation.","properties":{"application":{"type":"string","description":"The name or the Id of the Application.","replaceOnChanges":true},"applicationArn":{"type":"string","description":"The Amazon resource name (ARN) of the application that was augmented with attributes."},"attributeGroup":{"type":"string","description":"The name or the Id of the AttributeGroup.","replaceOnChanges":true},"attributeGroupArn":{"type":"string","description":"The Amazon resource name (ARN) of the attribute group which contains the application's new attributes."}},"type":"object","required":["application","applicationArn","attributeGroup","attributeGroupArn"],"inputProperties":{"application":{"type":"string","description":"The name or the Id of the Application."},"attributeGroup":{"type":"string","description":"The name or the Id of the AttributeGroup."}},"requiredInputs":["application","attributeGroup"]},"aws-native:servicecatalogappregistry:ResourceAssociation":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::ResourceAssociation","properties":{"application":{"type":"string","description":"The name or the Id of the Application.","replaceOnChanges":true},"applicationArn":{"type":"string","description":"The Amazon resource name (ARN) that specifies the application."},"resource":{"type":"string","description":"The name or the Id of the Resource.","replaceOnChanges":true},"resourceArn":{"type":"string","description":"The Amazon resource name (ARN) that specifies the resource."},"resourceType":{"$ref":"#/types/aws-native:servicecatalogappregistry:ResourceAssociationResourceType","description":"The type of the CFN Resource for now it's enum CFN_STACK.","replaceOnChanges":true}},"type":"object","required":["application","applicationArn","resource","resourceArn","resourceType"],"inputProperties":{"application":{"type":"string","description":"The name or the Id of the Application."},"resource":{"type":"string","description":"The name or the Id of the Resource."},"resourceType":{"$ref":"#/types/aws-native:servicecatalogappregistry:ResourceAssociationResourceType","description":"The type of the CFN Resource for now it's enum CFN_STACK."}},"requiredInputs":["application","resource","resourceType"]},"aws-native:servicediscovery:Service":{"description":"Resource Type definition for AWS::ServiceDiscovery::Service","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."},"awsId":{"type":"string","description":"The unique identifier for the service."},"description":{"type":"string","description":"A description for the service."},"dnsConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceDnsConfig","description":"DNS-related configurations for the service."},"healthCheckConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceHealthCheckConfig","description":"Settings for health checks. Used when routing is DNS-based."},"healthCheckCustomConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceHealthCheckCustomConfig","description":"Settings for custom health checks.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the service.","replaceOnChanges":true},"namespaceId":{"type":"string","description":"The ID of the namespace in which the service is created.","replaceOnChanges":true},"serviceAttributes":{"type":"object","additionalProperties":{"type":"string"},"description":"A string map that contains attributes and values for the service. You can specify a maximum of 30 key-value pairs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to associate with the service."},"type":{"type":"string","description":"The type of service. Supported values are HTTP or DNS.","replaceOnChanges":true}},"type":"object","required":["arn","awsId"],"inputProperties":{"description":{"type":"string","description":"A description for the service."},"dnsConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceDnsConfig","description":"DNS-related configurations for the service."},"healthCheckConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceHealthCheckConfig","description":"Settings for health checks. Used when routing is DNS-based."},"healthCheckCustomConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceHealthCheckCustomConfig","description":"Settings for custom health checks."},"name":{"type":"string","description":"The name of the service."},"namespaceId":{"type":"string","description":"The ID of the namespace in which the service is created."},"serviceAttributes":{"type":"object","additionalProperties":{"type":"string"},"description":"A string map that contains attributes and values for the service. You can specify a maximum of 30 key-value pairs."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to associate with the service."},"type":{"type":"string","description":"The type of service. Supported values are HTTP or DNS."}}},"aws-native:ses:ConfigurationSet":{"description":"Resource schema for AWS::SES::ConfigurationSet.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var configSetName = config.Require(\"configSetName\");\n    var configSet = new AwsNative.Ses.ConfigurationSet(\"configSet\", new()\n    {\n        Name = configSetName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ses\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tconfigSetName := cfg.Require(\"configSetName\")\n\t\t_, err := ses.NewConfigurationSet(ctx, \"configSet\", \u0026ses.ConfigurationSetArgs{\n\t\t\tName: pulumi.String(pulumi.String(configSetName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst configSetName = config.require(\"configSetName\");\nconst configSet = new aws_native.ses.ConfigurationSet(\"configSet\", {name: configSetName});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nconfig_set_name = config.require(\"configSetName\")\nconfig_set = aws_native.ses.ConfigurationSet(\"configSet\", name=config_set_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var configSetName = config.Require(\"configSetName\");\n    var configSet = new AwsNative.Ses.ConfigurationSet(\"configSet\", new()\n    {\n        Name = configSetName,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ses\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tconfigSetName := cfg.Require(\"configSetName\")\n\t\t_, err := ses.NewConfigurationSet(ctx, \"configSet\", \u0026ses.ConfigurationSetArgs{\n\t\t\tName: pulumi.String(pulumi.String(configSetName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst configSetName = config.require(\"configSetName\");\nconst configSet = new aws_native.ses.ConfigurationSet(\"configSet\", {name: configSetName});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nconfig_set_name = config.require(\"configSetName\")\nconfig_set = aws_native.ses.ConfigurationSet(\"configSet\", name=config_set_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var configSetName = config.Require(\"configSetName\");\n    var eventDestinationName = config.Require(\"eventDestinationName\");\n    var eventType1 = config.Require(\"eventType1\");\n    var eventType2 = config.Require(\"eventType2\");\n    var eventType3 = config.Require(\"eventType3\");\n    var dimensionName1 = config.Require(\"dimensionName1\");\n    var dimensionValueSource1 = config.Require(\"dimensionValueSource1\");\n    var defaultDimensionValue1 = config.Require(\"defaultDimensionValue1\");\n    var dimensionName2 = config.Require(\"dimensionName2\");\n    var dimensionValueSource2 = config.Require(\"dimensionValueSource2\");\n    var defaultDimensionValue2 = config.Require(\"defaultDimensionValue2\");\n    var configSet = new AwsNative.Ses.ConfigurationSet(\"configSet\", new()\n    {\n        Name = configSetName,\n    });\n\n    var cwEventDestination = new AwsNative.Ses.ConfigurationSetEventDestination(\"cwEventDestination\", new()\n    {\n        ConfigurationSetName = configSet.Id,\n        EventDestination = new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationEventDestinationArgs\n        {\n            Name = eventDestinationName,\n            Enabled = true,\n            MatchingEventTypes = new[]\n            {\n                eventType1,\n                eventType2,\n                eventType3,\n            },\n            CloudWatchDestination = new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationCloudWatchDestinationArgs\n            {\n                DimensionConfigurations = new[]\n                {\n                    new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationDimensionConfigurationArgs\n                    {\n                        DimensionName = dimensionName1,\n                        DimensionValueSource = dimensionValueSource1,\n                        DefaultDimensionValue = defaultDimensionValue1,\n                    },\n                    new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationDimensionConfigurationArgs\n                    {\n                        DimensionName = dimensionName2,\n                        DimensionValueSource = dimensionValueSource2,\n                        DefaultDimensionValue = defaultDimensionValue2,\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ses\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tconfigSetName := cfg.Require(\"configSetName\")\n\t\teventDestinationName := cfg.Require(\"eventDestinationName\")\n\t\teventType1 := cfg.Require(\"eventType1\")\n\t\teventType2 := cfg.Require(\"eventType2\")\n\t\teventType3 := cfg.Require(\"eventType3\")\n\t\tdimensionName1 := cfg.Require(\"dimensionName1\")\n\t\tdimensionValueSource1 := cfg.Require(\"dimensionValueSource1\")\n\t\tdefaultDimensionValue1 := cfg.Require(\"defaultDimensionValue1\")\n\t\tdimensionName2 := cfg.Require(\"dimensionName2\")\n\t\tdimensionValueSource2 := cfg.Require(\"dimensionValueSource2\")\n\t\tdefaultDimensionValue2 := cfg.Require(\"defaultDimensionValue2\")\n\t\tconfigSet, err := ses.NewConfigurationSet(ctx, \"configSet\", \u0026ses.ConfigurationSetArgs{\n\t\t\tName: pulumi.String(pulumi.String(configSetName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ses.NewConfigurationSetEventDestination(ctx, \"cwEventDestination\", \u0026ses.ConfigurationSetEventDestinationArgs{\n\t\t\tConfigurationSetName: configSet.ID(),\n\t\t\tEventDestination: \u0026ses.ConfigurationSetEventDestinationEventDestinationArgs{\n\t\t\t\tName:    pulumi.String(pulumi.String(eventDestinationName)),\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tMatchingEventTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(pulumi.String(eventType1)),\n\t\t\t\t\tpulumi.String(pulumi.String(eventType2)),\n\t\t\t\t\tpulumi.String(pulumi.String(eventType3)),\n\t\t\t\t},\n\t\t\t\tCloudWatchDestination: \u0026ses.ConfigurationSetEventDestinationCloudWatchDestinationArgs{\n\t\t\t\t\tDimensionConfigurations: ses.ConfigurationSetEventDestinationDimensionConfigurationArray{\n\t\t\t\t\t\t\u0026ses.ConfigurationSetEventDestinationDimensionConfigurationArgs{\n\t\t\t\t\t\t\tDimensionName:         pulumi.String(pulumi.String(dimensionName1)),\n\t\t\t\t\t\t\tDimensionValueSource:  pulumi.String(pulumi.String(dimensionValueSource1)),\n\t\t\t\t\t\t\tDefaultDimensionValue: pulumi.String(pulumi.String(defaultDimensionValue1)),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026ses.ConfigurationSetEventDestinationDimensionConfigurationArgs{\n\t\t\t\t\t\t\tDimensionName:         pulumi.String(pulumi.String(dimensionName2)),\n\t\t\t\t\t\t\tDimensionValueSource:  pulumi.String(pulumi.String(dimensionValueSource2)),\n\t\t\t\t\t\t\tDefaultDimensionValue: pulumi.String(pulumi.String(defaultDimensionValue2)),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst configSetName = config.require(\"configSetName\");\nconst eventDestinationName = config.require(\"eventDestinationName\");\nconst eventType1 = config.require(\"eventType1\");\nconst eventType2 = config.require(\"eventType2\");\nconst eventType3 = config.require(\"eventType3\");\nconst dimensionName1 = config.require(\"dimensionName1\");\nconst dimensionValueSource1 = config.require(\"dimensionValueSource1\");\nconst defaultDimensionValue1 = config.require(\"defaultDimensionValue1\");\nconst dimensionName2 = config.require(\"dimensionName2\");\nconst dimensionValueSource2 = config.require(\"dimensionValueSource2\");\nconst defaultDimensionValue2 = config.require(\"defaultDimensionValue2\");\nconst configSet = new aws_native.ses.ConfigurationSet(\"configSet\", {name: configSetName});\nconst cwEventDestination = new aws_native.ses.ConfigurationSetEventDestination(\"cwEventDestination\", {\n    configurationSetName: configSet.id,\n    eventDestination: {\n        name: eventDestinationName,\n        enabled: true,\n        matchingEventTypes: [\n            eventType1,\n            eventType2,\n            eventType3,\n        ],\n        cloudWatchDestination: {\n            dimensionConfigurations: [\n                {\n                    dimensionName: dimensionName1,\n                    dimensionValueSource: dimensionValueSource1,\n                    defaultDimensionValue: defaultDimensionValue1,\n                },\n                {\n                    dimensionName: dimensionName2,\n                    dimensionValueSource: dimensionValueSource2,\n                    defaultDimensionValue: defaultDimensionValue2,\n                },\n            ],\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nconfig_set_name = config.require(\"configSetName\")\nevent_destination_name = config.require(\"eventDestinationName\")\nevent_type1 = config.require(\"eventType1\")\nevent_type2 = config.require(\"eventType2\")\nevent_type3 = config.require(\"eventType3\")\ndimension_name1 = config.require(\"dimensionName1\")\ndimension_value_source1 = config.require(\"dimensionValueSource1\")\ndefault_dimension_value1 = config.require(\"defaultDimensionValue1\")\ndimension_name2 = config.require(\"dimensionName2\")\ndimension_value_source2 = config.require(\"dimensionValueSource2\")\ndefault_dimension_value2 = config.require(\"defaultDimensionValue2\")\nconfig_set = aws_native.ses.ConfigurationSet(\"configSet\", name=config_set_name)\ncw_event_destination = aws_native.ses.ConfigurationSetEventDestination(\"cwEventDestination\",\n    configuration_set_name=config_set.id,\n    event_destination={\n        \"name\": event_destination_name,\n        \"enabled\": True,\n        \"matching_event_types\": [\n            event_type1,\n            event_type2,\n            event_type3,\n        ],\n        \"cloud_watch_destination\": {\n            \"dimension_configurations\": [\n                {\n                    \"dimension_name\": dimension_name1,\n                    \"dimension_value_source\": dimension_value_source1,\n                    \"default_dimension_value\": default_dimension_value1,\n                },\n                {\n                    \"dimension_name\": dimension_name2,\n                    \"dimension_value_source\": dimension_value_source2,\n                    \"default_dimension_value\": default_dimension_value2,\n                },\n            ],\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var configSetName = config.Require(\"configSetName\");\n    var eventDestinationName = config.Require(\"eventDestinationName\");\n    var eventType1 = config.Require(\"eventType1\");\n    var eventType2 = config.Require(\"eventType2\");\n    var eventType3 = config.Require(\"eventType3\");\n    var dimensionName1 = config.Require(\"dimensionName1\");\n    var dimensionValueSource1 = config.Require(\"dimensionValueSource1\");\n    var defaultDimensionValue1 = config.Require(\"defaultDimensionValue1\");\n    var dimensionName2 = config.Require(\"dimensionName2\");\n    var dimensionValueSource2 = config.Require(\"dimensionValueSource2\");\n    var defaultDimensionValue2 = config.Require(\"defaultDimensionValue2\");\n    var configSet = new AwsNative.Ses.ConfigurationSet(\"configSet\", new()\n    {\n        Name = configSetName,\n    });\n\n    var cwEventDestination = new AwsNative.Ses.ConfigurationSetEventDestination(\"cwEventDestination\", new()\n    {\n        ConfigurationSetName = configSet.Id,\n        EventDestination = new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationEventDestinationArgs\n        {\n            Name = eventDestinationName,\n            Enabled = true,\n            MatchingEventTypes = new[]\n            {\n                eventType1,\n                eventType2,\n                eventType3,\n            },\n            CloudWatchDestination = new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationCloudWatchDestinationArgs\n            {\n                DimensionConfigurations = new[]\n                {\n                    new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationDimensionConfigurationArgs\n                    {\n                        DimensionName = dimensionName1,\n                        DimensionValueSource = dimensionValueSource1,\n                        DefaultDimensionValue = defaultDimensionValue1,\n                    },\n                    new AwsNative.Ses.Inputs.ConfigurationSetEventDestinationDimensionConfigurationArgs\n                    {\n                        DimensionName = dimensionName2,\n                        DimensionValueSource = dimensionValueSource2,\n                        DefaultDimensionValue = defaultDimensionValue2,\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ses\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tconfigSetName := cfg.Require(\"configSetName\")\n\t\teventDestinationName := cfg.Require(\"eventDestinationName\")\n\t\teventType1 := cfg.Require(\"eventType1\")\n\t\teventType2 := cfg.Require(\"eventType2\")\n\t\teventType3 := cfg.Require(\"eventType3\")\n\t\tdimensionName1 := cfg.Require(\"dimensionName1\")\n\t\tdimensionValueSource1 := cfg.Require(\"dimensionValueSource1\")\n\t\tdefaultDimensionValue1 := cfg.Require(\"defaultDimensionValue1\")\n\t\tdimensionName2 := cfg.Require(\"dimensionName2\")\n\t\tdimensionValueSource2 := cfg.Require(\"dimensionValueSource2\")\n\t\tdefaultDimensionValue2 := cfg.Require(\"defaultDimensionValue2\")\n\t\tconfigSet, err := ses.NewConfigurationSet(ctx, \"configSet\", \u0026ses.ConfigurationSetArgs{\n\t\t\tName: pulumi.String(pulumi.String(configSetName)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ses.NewConfigurationSetEventDestination(ctx, \"cwEventDestination\", \u0026ses.ConfigurationSetEventDestinationArgs{\n\t\t\tConfigurationSetName: configSet.ID(),\n\t\t\tEventDestination: \u0026ses.ConfigurationSetEventDestinationEventDestinationArgs{\n\t\t\t\tName:    pulumi.String(pulumi.String(eventDestinationName)),\n\t\t\t\tEnabled: pulumi.Bool(true),\n\t\t\t\tMatchingEventTypes: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(pulumi.String(eventType1)),\n\t\t\t\t\tpulumi.String(pulumi.String(eventType2)),\n\t\t\t\t\tpulumi.String(pulumi.String(eventType3)),\n\t\t\t\t},\n\t\t\t\tCloudWatchDestination: \u0026ses.ConfigurationSetEventDestinationCloudWatchDestinationArgs{\n\t\t\t\t\tDimensionConfigurations: ses.ConfigurationSetEventDestinationDimensionConfigurationArray{\n\t\t\t\t\t\t\u0026ses.ConfigurationSetEventDestinationDimensionConfigurationArgs{\n\t\t\t\t\t\t\tDimensionName:         pulumi.String(pulumi.String(dimensionName1)),\n\t\t\t\t\t\t\tDimensionValueSource:  pulumi.String(pulumi.String(dimensionValueSource1)),\n\t\t\t\t\t\t\tDefaultDimensionValue: pulumi.String(pulumi.String(defaultDimensionValue1)),\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\u0026ses.ConfigurationSetEventDestinationDimensionConfigurationArgs{\n\t\t\t\t\t\t\tDimensionName:         pulumi.String(pulumi.String(dimensionName2)),\n\t\t\t\t\t\t\tDimensionValueSource:  pulumi.String(pulumi.String(dimensionValueSource2)),\n\t\t\t\t\t\t\tDefaultDimensionValue: pulumi.String(pulumi.String(defaultDimensionValue2)),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst configSetName = config.require(\"configSetName\");\nconst eventDestinationName = config.require(\"eventDestinationName\");\nconst eventType1 = config.require(\"eventType1\");\nconst eventType2 = config.require(\"eventType2\");\nconst eventType3 = config.require(\"eventType3\");\nconst dimensionName1 = config.require(\"dimensionName1\");\nconst dimensionValueSource1 = config.require(\"dimensionValueSource1\");\nconst defaultDimensionValue1 = config.require(\"defaultDimensionValue1\");\nconst dimensionName2 = config.require(\"dimensionName2\");\nconst dimensionValueSource2 = config.require(\"dimensionValueSource2\");\nconst defaultDimensionValue2 = config.require(\"defaultDimensionValue2\");\nconst configSet = new aws_native.ses.ConfigurationSet(\"configSet\", {name: configSetName});\nconst cwEventDestination = new aws_native.ses.ConfigurationSetEventDestination(\"cwEventDestination\", {\n    configurationSetName: configSet.id,\n    eventDestination: {\n        name: eventDestinationName,\n        enabled: true,\n        matchingEventTypes: [\n            eventType1,\n            eventType2,\n            eventType3,\n        ],\n        cloudWatchDestination: {\n            dimensionConfigurations: [\n                {\n                    dimensionName: dimensionName1,\n                    dimensionValueSource: dimensionValueSource1,\n                    defaultDimensionValue: defaultDimensionValue1,\n                },\n                {\n                    dimensionName: dimensionName2,\n                    dimensionValueSource: dimensionValueSource2,\n                    defaultDimensionValue: defaultDimensionValue2,\n                },\n            ],\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nconfig_set_name = config.require(\"configSetName\")\nevent_destination_name = config.require(\"eventDestinationName\")\nevent_type1 = config.require(\"eventType1\")\nevent_type2 = config.require(\"eventType2\")\nevent_type3 = config.require(\"eventType3\")\ndimension_name1 = config.require(\"dimensionName1\")\ndimension_value_source1 = config.require(\"dimensionValueSource1\")\ndefault_dimension_value1 = config.require(\"defaultDimensionValue1\")\ndimension_name2 = config.require(\"dimensionName2\")\ndimension_value_source2 = config.require(\"dimensionValueSource2\")\ndefault_dimension_value2 = config.require(\"defaultDimensionValue2\")\nconfig_set = aws_native.ses.ConfigurationSet(\"configSet\", name=config_set_name)\ncw_event_destination = aws_native.ses.ConfigurationSetEventDestination(\"cwEventDestination\",\n    configuration_set_name=config_set.id,\n    event_destination={\n        \"name\": event_destination_name,\n        \"enabled\": True,\n        \"matching_event_types\": [\n            event_type1,\n            event_type2,\n            event_type3,\n        ],\n        \"cloud_watch_destination\": {\n            \"dimension_configurations\": [\n                {\n                    \"dimension_name\": dimension_name1,\n                    \"dimension_value_source\": dimension_value_source1,\n                    \"default_dimension_value\": default_dimension_value1,\n                },\n                {\n                    \"dimension_name\": dimension_name2,\n                    \"dimension_value_source\": dimension_value_source2,\n                    \"default_dimension_value\": default_dimension_value2,\n                },\n            ],\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"archivingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetArchivingOptions"},"deliveryOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetDeliveryOptions","description":"Specifies the name of the dedicated IP pool to associate with the configuration set and whether messages that use the configuration set are required to use Transport Layer Security (TLS)."},"name":{"type":"string","description":"The name of the configuration set.","replaceOnChanges":true},"reputationOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetReputationOptions","description":"An object that defines whether or not Amazon SES collects reputation metrics for the emails that you send that use the configuration set."},"sendingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSendingOptions","description":"An object that defines whether or not Amazon SES can send email that you send using the configuration set."},"suppressionOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSuppressionOptions","description":"An object that contains information about the suppression list preferences for your account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the contact list."},"trackingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetTrackingOptions","description":"An object that defines the open and click tracking options for emails that you send using the configuration set."},"vdmOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetVdmOptions","description":"The Virtual Deliverability Manager (VDM) options that apply to the configuration set."}},"type":"object","inputProperties":{"archivingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetArchivingOptions"},"deliveryOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetDeliveryOptions","description":"Specifies the name of the dedicated IP pool to associate with the configuration set and whether messages that use the configuration set are required to use Transport Layer Security (TLS)."},"name":{"type":"string","description":"The name of the configuration set."},"reputationOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetReputationOptions","description":"An object that defines whether or not Amazon SES collects reputation metrics for the emails that you send that use the configuration set."},"sendingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSendingOptions","description":"An object that defines whether or not Amazon SES can send email that you send using the configuration set."},"suppressionOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSuppressionOptions","description":"An object that contains information about the suppression list preferences for your account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the contact list."},"trackingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetTrackingOptions","description":"An object that defines the open and click tracking options for emails that you send using the configuration set."},"vdmOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetVdmOptions","description":"The Virtual Deliverability Manager (VDM) options that apply to the configuration set."}}},"aws-native:ses:ConfigurationSetEventDestination":{"description":"Resource Type definition for AWS::SES::ConfigurationSetEventDestination","properties":{"awsId":{"type":"string"},"configurationSetName":{"type":"string","description":"The name of the configuration set that contains the event destination.","replaceOnChanges":true},"eventDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationEventDestination","description":"The event destination object."}},"type":"object","required":["awsId","configurationSetName","eventDestination"],"inputProperties":{"configurationSetName":{"type":"string","description":"The name of the configuration set that contains the event destination."},"eventDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationEventDestination","description":"The event destination object."}},"requiredInputs":["configurationSetName","eventDestination"]},"aws-native:ses:ContactList":{"description":"Resource schema for AWS::SES::ContactList.","properties":{"contactListName":{"type":"string","description":"The name of the contact list.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the contact list."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the contact list."},"topics":{"type":"array","items":{"$ref":"#/types/aws-native:ses:ContactListTopic"},"description":"The topics associated with the contact list."}},"type":"object","inputProperties":{"contactListName":{"type":"string","description":"The name of the contact list."},"description":{"type":"string","description":"The description of the contact list."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the contact list."},"topics":{"type":"array","items":{"$ref":"#/types/aws-native:ses:ContactListTopic"},"description":"The topics associated with the contact list."}}},"aws-native:ses:CustomVerificationEmailTemplate":{"description":"Resource Type definition for AWS::SES::CustomVerificationEmailTemplate.","properties":{"failureRedirectionUrl":{"type":"string","description":"The URL that the recipient of the verification email is sent to if his or her address is not successfully verified."},"fromEmailAddress":{"type":"string","description":"The email address that the custom verification email is sent from."},"successRedirectionUrl":{"type":"string","description":"The URL that the recipient of the verification email is sent to if his or her address is successfully verified."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the tenant."},"templateContent":{"type":"string","description":"The content of the custom verification email. The total size of the email must be less than 10 MB. The message body may contain HTML, with some limitations."},"templateName":{"type":"string","description":"The name of the custom verification email template.","replaceOnChanges":true},"templateSubject":{"type":"string","description":"The subject line of the custom verification email."}},"type":"object","required":["failureRedirectionUrl","fromEmailAddress","successRedirectionUrl","templateContent","templateName","templateSubject"],"inputProperties":{"failureRedirectionUrl":{"type":"string","description":"The URL that the recipient of the verification email is sent to if his or her address is not successfully verified."},"fromEmailAddress":{"type":"string","description":"The email address that the custom verification email is sent from."},"successRedirectionUrl":{"type":"string","description":"The URL that the recipient of the verification email is sent to if his or her address is successfully verified."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the tenant."},"templateContent":{"type":"string","description":"The content of the custom verification email. The total size of the email must be less than 10 MB. The message body may contain HTML, with some limitations."},"templateName":{"type":"string","description":"The name of the custom verification email template."},"templateSubject":{"type":"string","description":"The subject line of the custom verification email."}},"requiredInputs":["failureRedirectionUrl","fromEmailAddress","successRedirectionUrl","templateContent","templateSubject"]},"aws-native:ses:DedicatedIpPool":{"description":"Resource Type definition for AWS::SES::DedicatedIpPool","properties":{"poolName":{"type":"string","description":"The name of the dedicated IP pool.","replaceOnChanges":true},"scalingMode":{"type":"string","description":"Specifies whether the dedicated IP pool is managed or not. The default value is STANDARD."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the dedicated IP pool."}},"type":"object","inputProperties":{"poolName":{"type":"string","description":"The name of the dedicated IP pool."},"scalingMode":{"type":"string","description":"Specifies whether the dedicated IP pool is managed or not. The default value is STANDARD."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the dedicated IP pool."}}},"aws-native:ses:EmailIdentity":{"description":"Resource Type definition for AWS::SES::EmailIdentity","properties":{"configurationSetAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityConfigurationSetAttributes","description":"Used to associate a configuration set with an email identity."},"dkimAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityDkimAttributes","description":"An object that contains information about the DKIM attributes for the identity."},"dkimDnsTokenName1":{"type":"string","description":"The host name for the first token that you have to add to the DNS configuration for your domain."},"dkimDnsTokenName2":{"type":"string","description":"The host name for the second token that you have to add to the DNS configuration for your domain."},"dkimDnsTokenName3":{"type":"string","description":"The host name for the third token that you have to add to the DNS configuration for your domain."},"dkimDnsTokenValue1":{"type":"string","description":"The record value for the first token that you have to add to the DNS configuration for your domain."},"dkimDnsTokenValue2":{"type":"string","description":"The record value for the second token that you have to add to the DNS configuration for your domain."},"dkimDnsTokenValue3":{"type":"string","description":"The record value for the third token that you have to add to the DNS configuration for your domain."},"dkimSigningAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityDkimSigningAttributes","description":"If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for [Easy DKIM](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html) .\n\nYou can only specify this object if the email identity is a domain, as opposed to an address."},"emailIdentity":{"type":"string","description":"The email address or domain to verify.","language":{"csharp":{"name":"EmailIdentityValue"}},"replaceOnChanges":true},"feedbackAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityFeedbackAttributes","description":"Used to enable or disable feedback forwarding for an identity."},"mailFromAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityMailFromAttributes","description":"Used to enable or disable the custom Mail-From domain configuration for an email identity."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the email identity."}},"type":"object","required":["dkimDnsTokenName1","dkimDnsTokenName2","dkimDnsTokenName3","dkimDnsTokenValue1","dkimDnsTokenValue2","dkimDnsTokenValue3","emailIdentity"],"inputProperties":{"configurationSetAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityConfigurationSetAttributes","description":"Used to associate a configuration set with an email identity."},"dkimAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityDkimAttributes","description":"An object that contains information about the DKIM attributes for the identity."},"dkimSigningAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityDkimSigningAttributes","description":"If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for [Easy DKIM](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html) .\n\nYou can only specify this object if the email identity is a domain, as opposed to an address."},"emailIdentity":{"type":"string","description":"The email address or domain to verify.","language":{"csharp":{"name":"EmailIdentityValue"}}},"feedbackAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityFeedbackAttributes","description":"Used to enable or disable feedback forwarding for an identity."},"mailFromAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityMailFromAttributes","description":"Used to enable or disable the custom Mail-From domain configuration for an email identity."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the email identity."}},"requiredInputs":["emailIdentity"]},"aws-native:ses:MailManagerAddonInstance":{"description":"Definition of AWS::SES::MailManagerAddonInstance Resource Type","properties":{"addonInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Add On instance."},"addonInstanceId":{"type":"string","description":"The unique ID of the Add On instance."},"addonName":{"type":"string","description":"The name of the Add On for the instance."},"addonSubscriptionId":{"type":"string","description":"The subscription ID for the instance.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["addonInstanceArn","addonInstanceId","addonName","addonSubscriptionId"],"inputProperties":{"addonSubscriptionId":{"type":"string","description":"The subscription ID for the instance."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"requiredInputs":["addonSubscriptionId"]},"aws-native:ses:MailManagerAddonSubscription":{"description":"Definition of AWS::SES::MailManagerAddonSubscription Resource Type","properties":{"addonName":{"type":"string","description":"The name of the Add On to subscribe to. You can only have one subscription for each Add On name.\n\nValid Values: `TRENDMICRO_VSAPI | SPAMHAUS_DBL | ABUSIX_MAIL_INTELLIGENCE | VADE_ADVANCED_EMAIL_SECURITY`","replaceOnChanges":true},"addonSubscriptionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Add On subscription."},"addonSubscriptionId":{"type":"string","description":"The unique ID of the Add On subscription."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["addonName","addonSubscriptionArn","addonSubscriptionId"],"inputProperties":{"addonName":{"type":"string","description":"The name of the Add On to subscribe to. You can only have one subscription for each Add On name.\n\nValid Values: `TRENDMICRO_VSAPI | SPAMHAUS_DBL | ABUSIX_MAIL_INTELLIGENCE | VADE_ADVANCED_EMAIL_SECURITY`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"requiredInputs":["addonName"]},"aws-native:ses:MailManagerAddressList":{"description":"Definition of AWS::SES::MailManagerAddressList Resource Type","properties":{"addressListArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the address list."},"addressListId":{"type":"string","description":"The identifier of the address list."},"addressListName":{"type":"string","description":"A user-friendly name for the address list.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["addressListArn","addressListId"],"inputProperties":{"addressListName":{"type":"string","description":"A user-friendly name for the address list."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}}},"aws-native:ses:MailManagerArchive":{"description":"Definition of AWS::SES::MailManagerArchive Resource Type","properties":{"archiveArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the archive."},"archiveId":{"type":"string","description":"The unique identifier of the archive."},"archiveName":{"type":"string","description":"A unique name for the new archive."},"archiveState":{"$ref":"#/types/aws-native:ses:MailManagerArchiveArchiveState","description":"The current state of the archive:\n\n- `ACTIVE` – The archive is ready and available for use.\n- `PENDING_DELETION` – The archive has been marked for deletion and will be permanently deleted in 30 days. No further modifications can be made in this state."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key for encrypting emails in the archive.","replaceOnChanges":true},"retention":{"$ref":"#/types/aws-native:ses:MailManagerArchiveArchiveRetentionProperties","description":"The period for retaining emails in the archive before automatic deletion."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["archiveArn","archiveId","archiveState"],"inputProperties":{"archiveName":{"type":"string","description":"A unique name for the new archive."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the KMS key for encrypting emails in the archive."},"retention":{"$ref":"#/types/aws-native:ses:MailManagerArchiveArchiveRetentionProperties","description":"The period for retaining emails in the archive before automatic deletion."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}}},"aws-native:ses:MailManagerIngressPoint":{"description":"Definition of AWS::SES::MailManagerIngressPoint Resource Type","properties":{"aRecord":{"type":"string","description":"The DNS A Record that identifies your ingress endpoint. Configure your DNS Mail Exchange (MX) record with this value to route emails to Mail Manager."},"ingressPointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ingress endpoint resource."},"ingressPointConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointConfiguration0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointConfiguration1Properties"}],"description":"The configuration of the ingress endpoint resource."},"ingressPointId":{"type":"string","description":"The identifier of the ingress endpoint resource."},"ingressPointName":{"type":"string","description":"A user friendly name for an ingress endpoint resource."},"networkConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerIngressPointNetworkConfiguration0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerIngressPointNetworkConfiguration1Properties"}],"description":"The network type (IPv4-only, Dual-Stack, PrivateLink) of the ingress endpoint resource.","replaceOnChanges":true},"ruleSetId":{"type":"string","description":"The identifier of an existing rule set that you attach to an ingress endpoint resource."},"status":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointStatus","description":"The status of the ingress endpoint resource."},"statusToUpdate":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointStatusToUpdate","description":"The update status of an ingress endpoint."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"trafficPolicyId":{"type":"string","description":"The identifier of an existing traffic policy that you attach to an ingress endpoint resource."},"type":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointType","description":"The type of the ingress endpoint to create.","replaceOnChanges":true}},"type":"object","required":["aRecord","ingressPointArn","ingressPointId","ruleSetId","status","trafficPolicyId","type"],"inputProperties":{"ingressPointConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointConfiguration0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointConfiguration1Properties"}],"description":"The configuration of the ingress endpoint resource."},"ingressPointName":{"type":"string","description":"A user friendly name for an ingress endpoint resource."},"networkConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerIngressPointNetworkConfiguration0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerIngressPointNetworkConfiguration1Properties"}],"description":"The network type (IPv4-only, Dual-Stack, PrivateLink) of the ingress endpoint resource."},"ruleSetId":{"type":"string","description":"The identifier of an existing rule set that you attach to an ingress endpoint resource."},"statusToUpdate":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointStatusToUpdate","description":"The update status of an ingress endpoint."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"trafficPolicyId":{"type":"string","description":"The identifier of an existing traffic policy that you attach to an ingress endpoint resource."},"type":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointType","description":"The type of the ingress endpoint to create."}},"requiredInputs":["ruleSetId","trafficPolicyId","type"]},"aws-native:ses:MailManagerRelay":{"description":"Definition of AWS::SES::MailManagerRelay Resource Type","properties":{"authentication":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRelayRelayAuthentication0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRelayRelayAuthentication1Properties"}],"description":"Authentication for the relay destination server—specify the secretARN where the SMTP credentials are stored."},"relayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the relay."},"relayId":{"type":"string","description":"The unique relay identifier."},"relayName":{"type":"string","description":"The unique relay name."},"serverName":{"type":"string","description":"The destination relay server address."},"serverPort":{"type":"number","description":"The destination relay server port."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["authentication","relayArn","relayId","serverName","serverPort"],"inputProperties":{"authentication":{"oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRelayRelayAuthentication0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRelayRelayAuthentication1Properties"}],"description":"Authentication for the relay destination server—specify the secretARN where the SMTP credentials are stored."},"relayName":{"type":"string","description":"The unique relay name."},"serverName":{"type":"string","description":"The destination relay server address."},"serverPort":{"type":"number","description":"The destination relay server port."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"requiredInputs":["authentication","serverName","serverPort"]},"aws-native:ses:MailManagerRuleSet":{"description":"Definition of AWS::SES::MailManagerRuleSet Resource Type","properties":{"ruleSetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule set resource."},"ruleSetId":{"type":"string","description":"The identifier of the rule set."},"ruleSetName":{"type":"string","description":"A user-friendly name for the rule set."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRule"},"description":"Conditional rules that are evaluated for determining actions on email."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["ruleSetArn","ruleSetId","rules"],"inputProperties":{"ruleSetName":{"type":"string","description":"A user-friendly name for the rule set."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRule"},"description":"Conditional rules that are evaluated for determining actions on email."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"requiredInputs":["rules"]},"aws-native:ses:MailManagerTrafficPolicy":{"description":"Definition of AWS::SES::MailManagerTrafficPolicy Resource Type","properties":{"defaultAction":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyAcceptAction","description":"Default action instructs the traffic policy to either Allow or Deny (block) messages that fall outside of (or not addressed by) the conditions of your policy statements"},"maxMessageSizeBytes":{"type":"number","description":"The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked."},"policyStatements":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyStatement"},"description":"Conditional statements for filtering email traffic."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"trafficPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the traffic policy resource."},"trafficPolicyId":{"type":"string","description":"The identifier of the traffic policy resource."},"trafficPolicyName":{"type":"string","description":"The name of the policy.\n\nThe policy name cannot exceed 64 characters and can only include alphanumeric characters, dashes, and underscores."}},"type":"object","required":["defaultAction","policyStatements","trafficPolicyArn","trafficPolicyId"],"inputProperties":{"defaultAction":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyAcceptAction","description":"Default action instructs the traffic policy to either Allow or Deny (block) messages that fall outside of (or not addressed by) the conditions of your policy statements"},"maxMessageSizeBytes":{"type":"number","description":"The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked."},"policyStatements":{"type":"array","items":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyStatement"},"description":"Conditional statements for filtering email traffic."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."},"trafficPolicyName":{"type":"string","description":"The name of the policy.\n\nThe policy name cannot exceed 64 characters and can only include alphanumeric characters, dashes, and underscores."}},"requiredInputs":["defaultAction","policyStatements"]},"aws-native:ses:MultiRegionEndpoint":{"description":"Resource Type definition for AWS::SES::MultiRegionEndpoint","properties":{"details":{"$ref":"#/types/aws-native:ses:MultiRegionEndpointDetails","description":"Contains details of a multi-region endpoint (global-endpoint) being created.","replaceOnChanges":true},"endpointName":{"type":"string","description":"The name of the multi-region endpoint (global-endpoint).","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of objects that define the tags (keys and values) to associate with the multi-region endpoint (global-endpoint)."}},"type":"object","required":["details","endpointName"],"inputProperties":{"details":{"$ref":"#/types/aws-native:ses:MultiRegionEndpointDetails","description":"Contains details of a multi-region endpoint (global-endpoint) being created."},"endpointName":{"type":"string","description":"The name of the multi-region endpoint (global-endpoint)."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of objects that define the tags (keys and values) to associate with the multi-region endpoint (global-endpoint)."}},"requiredInputs":["details"]},"aws-native:ses:Template":{"description":"Resource Type definition for AWS::SES::Template\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var templateName = config.Require(\"templateName\");\n    var subjectPart = config.Require(\"subjectPart\");\n    var textPart = config.Require(\"textPart\");\n    var htmlPart = config.Require(\"htmlPart\");\n    var template = new AwsNative.Ses.Template(\"template\", new()\n    {\n        TemplateValue = new AwsNative.Ses.Inputs.TemplateArgs\n        {\n            TemplateName = templateName,\n            SubjectPart = subjectPart,\n            TextPart = textPart,\n            HtmlPart = htmlPart,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ses\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\ttemplateName := cfg.Require(\"templateName\")\n\t\tsubjectPart := cfg.Require(\"subjectPart\")\n\t\ttextPart := cfg.Require(\"textPart\")\n\t\thtmlPart := cfg.Require(\"htmlPart\")\n\t\t_, err := ses.NewTemplate(ctx, \"template\", \u0026ses.TemplateArgs{\n\t\t\tTemplate: \u0026ses.TemplateTypeArgs{\n\t\t\t\tTemplateName: pulumi.String(pulumi.String(templateName)),\n\t\t\t\tSubjectPart:  pulumi.String(pulumi.String(subjectPart)),\n\t\t\t\tTextPart:     pulumi.String(pulumi.String(textPart)),\n\t\t\t\tHtmlPart:     pulumi.String(pulumi.String(htmlPart)),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst templateName = config.require(\"templateName\");\nconst subjectPart = config.require(\"subjectPart\");\nconst textPart = config.require(\"textPart\");\nconst htmlPart = config.require(\"htmlPart\");\nconst template = new aws_native.ses.Template(\"template\", {template: {\n    templateName: templateName,\n    subjectPart: subjectPart,\n    textPart: textPart,\n    htmlPart: htmlPart,\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ntemplate_name = config.require(\"templateName\")\nsubject_part = config.require(\"subjectPart\")\ntext_part = config.require(\"textPart\")\nhtml_part = config.require(\"htmlPart\")\ntemplate = aws_native.ses.Template(\"template\", template={\n    \"template_name\": template_name,\n    \"subject_part\": subject_part,\n    \"text_part\": text_part,\n    \"html_part\": html_part,\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var templateName = config.Require(\"templateName\");\n    var subjectPart = config.Require(\"subjectPart\");\n    var textPart = config.Require(\"textPart\");\n    var htmlPart = config.Require(\"htmlPart\");\n    var template = new AwsNative.Ses.Template(\"template\", new()\n    {\n        TemplateValue = new AwsNative.Ses.Inputs.TemplateArgs\n        {\n            TemplateName = templateName,\n            SubjectPart = subjectPart,\n            TextPart = textPart,\n            HtmlPart = htmlPart,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ses\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\ttemplateName := cfg.Require(\"templateName\")\n\t\tsubjectPart := cfg.Require(\"subjectPart\")\n\t\ttextPart := cfg.Require(\"textPart\")\n\t\thtmlPart := cfg.Require(\"htmlPart\")\n\t\t_, err := ses.NewTemplate(ctx, \"template\", \u0026ses.TemplateArgs{\n\t\t\tTemplate: \u0026ses.TemplateTypeArgs{\n\t\t\t\tTemplateName: pulumi.String(pulumi.String(templateName)),\n\t\t\t\tSubjectPart:  pulumi.String(pulumi.String(subjectPart)),\n\t\t\t\tTextPart:     pulumi.String(pulumi.String(textPart)),\n\t\t\t\tHtmlPart:     pulumi.String(pulumi.String(htmlPart)),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst templateName = config.require(\"templateName\");\nconst subjectPart = config.require(\"subjectPart\");\nconst textPart = config.require(\"textPart\");\nconst htmlPart = config.require(\"htmlPart\");\nconst template = new aws_native.ses.Template(\"template\", {template: {\n    templateName: templateName,\n    subjectPart: subjectPart,\n    textPart: textPart,\n    htmlPart: htmlPart,\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\ntemplate_name = config.require(\"templateName\")\nsubject_part = config.require(\"subjectPart\")\ntext_part = config.require(\"textPart\")\nhtml_part = config.require(\"htmlPart\")\ntemplate = aws_native.ses.Template(\"template\", template={\n    \"template_name\": template_name,\n    \"subject_part\": subject_part,\n    \"text_part\": text_part,\n    \"html_part\": html_part,\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"awsId":{"type":"string"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the email template."},"template":{"$ref":"#/types/aws-native:ses:Template","description":"The content of the email, composed of a subject line and either an HTML part or a text-only part.","language":{"csharp":{"name":"TemplateValue"}}}},"type":"object","required":["awsId"],"inputProperties":{"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the email template."},"template":{"$ref":"#/types/aws-native:ses:Template","description":"The content of the email, composed of a subject line and either an HTML part or a text-only part.","language":{"csharp":{"name":"TemplateValue"}}}}},"aws-native:ses:Tenant":{"description":"Resource Type definition for AWS::SES::Tenant","properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the tenant."},"resourceAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:ses:TenantResourceAssociation"},"description":"The list of resources to associate with the tenant."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the tenant."},"tenantName":{"type":"string","description":"The name of the tenant.","replaceOnChanges":true}},"type":"object","required":["arn","tenantName"],"inputProperties":{"resourceAssociations":{"type":"array","items":{"$ref":"#/types/aws-native:ses:TenantResourceAssociation"},"description":"The list of resources to associate with the tenant."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags (keys and values) associated with the tenant."},"tenantName":{"type":"string","description":"The name of the tenant."}}},"aws-native:ses:VdmAttributes":{"description":"Resource Type definition for AWS::SES::VdmAttributes","properties":{"dashboardAttributes":{"$ref":"#/types/aws-native:ses:VdmAttributesDashboardAttributes","description":"Specifies additional settings for your VDM configuration as applicable to the Dashboard."},"guardianAttributes":{"$ref":"#/types/aws-native:ses:VdmAttributesGuardianAttributes","description":"Specifies additional settings for your VDM configuration as applicable to the Guardian."},"vdmAttributesResourceId":{"type":"string","description":"Unique identifier for this resource"}},"type":"object","required":["vdmAttributesResourceId"],"inputProperties":{"dashboardAttributes":{"$ref":"#/types/aws-native:ses:VdmAttributesDashboardAttributes","description":"Specifies additional settings for your VDM configuration as applicable to the Dashboard."},"guardianAttributes":{"$ref":"#/types/aws-native:ses:VdmAttributesGuardianAttributes","description":"Specifies additional settings for your VDM configuration as applicable to the Guardian."}}},"aws-native:shield:DrtAccess":{"description":"Config the role and list of Amazon S3 log buckets used by the Shield Response Team (SRT) to access your AWS account while assisting with attack mitigation.","properties":{"accountId":{"type":"string","description":"The ID of the account that submitted the template."},"logBucketList":{"type":"array","items":{"type":"string"},"description":"Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources. You can associate up to 10 Amazon S3 buckets with your subscription."},"roleArn":{"type":"string","description":"Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the SRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs."}},"type":"object","required":["accountId","roleArn"],"inputProperties":{"logBucketList":{"type":"array","items":{"type":"string"},"description":"Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources. You can associate up to 10 Amazon S3 buckets with your subscription."},"roleArn":{"type":"string","description":"Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the SRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs."}},"requiredInputs":["roleArn"]},"aws-native:shield:ProactiveEngagement":{"description":"Authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.","properties":{"accountId":{"type":"string","description":"The ID of the account that submitted the template."},"emergencyContactList":{"type":"array","items":{"$ref":"#/types/aws-native:shield:ProactiveEngagementEmergencyContact"},"description":"A list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you for escalations to the SRT and to initiate proactive customer support.\nTo enable proactive engagement, the contact list must include at least one phone number."},"proactiveEngagementStatus":{"$ref":"#/types/aws-native:shield:ProactiveEngagementStatus","description":"If `ENABLED`, the Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.\nIf `DISABLED`, the SRT will not proactively notify contacts about escalations or to initiate proactive customer support."}},"type":"object","required":["accountId","emergencyContactList","proactiveEngagementStatus"],"inputProperties":{"emergencyContactList":{"type":"array","items":{"$ref":"#/types/aws-native:shield:ProactiveEngagementEmergencyContact"},"description":"A list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you for escalations to the SRT and to initiate proactive customer support.\nTo enable proactive engagement, the contact list must include at least one phone number."},"proactiveEngagementStatus":{"$ref":"#/types/aws-native:shield:ProactiveEngagementStatus","description":"If `ENABLED`, the Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.\nIf `DISABLED`, the SRT will not proactively notify contacts about escalations or to initiate proactive customer support."}},"requiredInputs":["emergencyContactList","proactiveEngagementStatus"]},"aws-native:shield:Protection":{"description":"Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.","properties":{"applicationLayerAutomaticResponseConfiguration":{"$ref":"#/types/aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfiguration","description":"The automatic application layer DDoS mitigation settings for the protection. This configuration determines whether Shield Advanced automatically manages rules in the web ACL in order to respond to application layer events that Shield Advanced determines to be DDoS attacks.\n\nIf you use CloudFormation to manage the web ACLs that you use with Shield Advanced automatic mitigation, see the additional guidance about web ACL management in the `AWS::WAFv2::WebACL` resource description."},"healthCheckArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the health check to associate with the protection."},"name":{"type":"string","description":"Friendly name for the Protection.","replaceOnChanges":true},"protectionArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the protection."},"protectionId":{"type":"string","description":"The unique identifier (ID) of the protection."},"resourceArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the resource to be protected.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tag key-value pairs for the Protection object."}},"type":"object","required":["name","protectionArn","protectionId","resourceArn"],"inputProperties":{"applicationLayerAutomaticResponseConfiguration":{"$ref":"#/types/aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfiguration","description":"The automatic application layer DDoS mitigation settings for the protection. This configuration determines whether Shield Advanced automatically manages rules in the web ACL in order to respond to application layer events that Shield Advanced determines to be DDoS attacks.\n\nIf you use CloudFormation to manage the web ACLs that you use with Shield Advanced automatic mitigation, see the additional guidance about web ACL management in the `AWS::WAFv2::WebACL` resource description."},"healthCheckArns":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the health check to associate with the protection."},"name":{"type":"string","description":"Friendly name for the Protection."},"resourceArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the resource to be protected."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tag key-value pairs for the Protection object."}},"requiredInputs":["resourceArn"]},"aws-native:shield:ProtectionGroup":{"description":"A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var protectionGroup = new AwsNative.Shield.ProtectionGroup(\"protectionGroup\", new()\n    {\n        ProtectionGroupId = \"ProtectionGroupForAllResources\",\n        Aggregation = AwsNative.Shield.ProtectionGroupAggregation.Sum,\n        Pattern = AwsNative.Shield.ProtectionGroupPattern.All,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/shield\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := shield.NewProtectionGroup(ctx, \"protectionGroup\", \u0026shield.ProtectionGroupArgs{\n\t\t\tProtectionGroupId: pulumi.String(\"ProtectionGroupForAllResources\"),\n\t\t\tAggregation:       shield.ProtectionGroupAggregationSum,\n\t\t\tPattern:           shield.ProtectionGroupPatternAll,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst protectionGroup = new aws_native.shield.ProtectionGroup(\"protectionGroup\", {\n    protectionGroupId: \"ProtectionGroupForAllResources\",\n    aggregation: aws_native.shield.ProtectionGroupAggregation.Sum,\n    pattern: aws_native.shield.ProtectionGroupPattern.All,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nprotection_group = aws_native.shield.ProtectionGroup(\"protectionGroup\",\n    protection_group_id=\"ProtectionGroupForAllResources\",\n    aggregation=aws_native.shield.ProtectionGroupAggregation.SUM,\n    pattern=aws_native.shield.ProtectionGroupPattern.ALL)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var protectionGroup = new AwsNative.Shield.ProtectionGroup(\"protectionGroup\", new()\n    {\n        ProtectionGroupId = \"ProtectionGroupForAllResources\",\n        Aggregation = AwsNative.Shield.ProtectionGroupAggregation.Sum,\n        Pattern = AwsNative.Shield.ProtectionGroupPattern.All,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/shield\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := shield.NewProtectionGroup(ctx, \"protectionGroup\", \u0026shield.ProtectionGroupArgs{\n\t\t\tProtectionGroupId: pulumi.String(\"ProtectionGroupForAllResources\"),\n\t\t\tAggregation:       shield.ProtectionGroupAggregationSum,\n\t\t\tPattern:           shield.ProtectionGroupPatternAll,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst protectionGroup = new aws_native.shield.ProtectionGroup(\"protectionGroup\", {\n    protectionGroupId: \"ProtectionGroupForAllResources\",\n    aggregation: aws_native.shield.ProtectionGroupAggregation.Sum,\n    pattern: aws_native.shield.ProtectionGroupPattern.All,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nprotection_group = aws_native.shield.ProtectionGroup(\"protectionGroup\",\n    protection_group_id=\"ProtectionGroupForAllResources\",\n    aggregation=aws_native.shield.ProtectionGroupAggregation.SUM,\n    pattern=aws_native.shield.ProtectionGroupPattern.ALL)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var protectionGroup = new AwsNative.Shield.ProtectionGroup(\"protectionGroup\", new()\n    {\n        ProtectionGroupId = \"ProtectionGroupForAllEIPResources\",\n        Aggregation = AwsNative.Shield.ProtectionGroupAggregation.Sum,\n        Pattern = AwsNative.Shield.ProtectionGroupPattern.ByResourceType,\n        ResourceType = AwsNative.Shield.ProtectionGroupResourceType.ElasticIpAllocation,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/shield\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := shield.NewProtectionGroup(ctx, \"protectionGroup\", \u0026shield.ProtectionGroupArgs{\n\t\t\tProtectionGroupId: pulumi.String(\"ProtectionGroupForAllEIPResources\"),\n\t\t\tAggregation:       shield.ProtectionGroupAggregationSum,\n\t\t\tPattern:           shield.ProtectionGroupPatternByResourceType,\n\t\t\tResourceType:      shield.ProtectionGroupResourceTypeElasticIpAllocation,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst protectionGroup = new aws_native.shield.ProtectionGroup(\"protectionGroup\", {\n    protectionGroupId: \"ProtectionGroupForAllEIPResources\",\n    aggregation: aws_native.shield.ProtectionGroupAggregation.Sum,\n    pattern: aws_native.shield.ProtectionGroupPattern.ByResourceType,\n    resourceType: aws_native.shield.ProtectionGroupResourceType.ElasticIpAllocation,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nprotection_group = aws_native.shield.ProtectionGroup(\"protectionGroup\",\n    protection_group_id=\"ProtectionGroupForAllEIPResources\",\n    aggregation=aws_native.shield.ProtectionGroupAggregation.SUM,\n    pattern=aws_native.shield.ProtectionGroupPattern.BY_RESOURCE_TYPE,\n    resource_type=aws_native.shield.ProtectionGroupResourceType.ELASTIC_IP_ALLOCATION)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var protectionGroup = new AwsNative.Shield.ProtectionGroup(\"protectionGroup\", new()\n    {\n        ProtectionGroupId = \"ProtectionGroupForAllEIPResources\",\n        Aggregation = AwsNative.Shield.ProtectionGroupAggregation.Sum,\n        Pattern = AwsNative.Shield.ProtectionGroupPattern.ByResourceType,\n        ResourceType = AwsNative.Shield.ProtectionGroupResourceType.ElasticIpAllocation,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/shield\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := shield.NewProtectionGroup(ctx, \"protectionGroup\", \u0026shield.ProtectionGroupArgs{\n\t\t\tProtectionGroupId: pulumi.String(\"ProtectionGroupForAllEIPResources\"),\n\t\t\tAggregation:       shield.ProtectionGroupAggregationSum,\n\t\t\tPattern:           shield.ProtectionGroupPatternByResourceType,\n\t\t\tResourceType:      shield.ProtectionGroupResourceTypeElasticIpAllocation,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst protectionGroup = new aws_native.shield.ProtectionGroup(\"protectionGroup\", {\n    protectionGroupId: \"ProtectionGroupForAllEIPResources\",\n    aggregation: aws_native.shield.ProtectionGroupAggregation.Sum,\n    pattern: aws_native.shield.ProtectionGroupPattern.ByResourceType,\n    resourceType: aws_native.shield.ProtectionGroupResourceType.ElasticIpAllocation,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nprotection_group = aws_native.shield.ProtectionGroup(\"protectionGroup\",\n    protection_group_id=\"ProtectionGroupForAllEIPResources\",\n    aggregation=aws_native.shield.ProtectionGroupAggregation.SUM,\n    pattern=aws_native.shield.ProtectionGroupPattern.BY_RESOURCE_TYPE,\n    resource_type=aws_native.shield.ProtectionGroupResourceType.ELASTIC_IP_ALLOCATION)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"aggregation":{"$ref":"#/types/aws-native:shield:ProtectionGroupAggregation","description":"Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.\n* Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.\n* Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.\n* Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions."},"members":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `Pattern` to `ARBITRARY` and you must not set it for any other `Pattern` setting."},"pattern":{"$ref":"#/types/aws-native:shield:ProtectionGroupPattern","description":"The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type."},"protectionGroupArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the protection group."},"protectionGroupId":{"type":"string","description":"The name of the protection group. You use this to identify the protection group in lists and to manage the protection group, for example to update, delete, or describe it.","replaceOnChanges":true},"resourceType":{"$ref":"#/types/aws-native:shield:ProtectionGroupResourceType","description":"The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tag key-value pairs for the Protection object."}},"type":"object","required":["aggregation","pattern","protectionGroupArn","protectionGroupId"],"inputProperties":{"aggregation":{"$ref":"#/types/aws-native:shield:ProtectionGroupAggregation","description":"Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.\n* Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.\n* Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.\n* Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions."},"members":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `Pattern` to `ARBITRARY` and you must not set it for any other `Pattern` setting."},"pattern":{"$ref":"#/types/aws-native:shield:ProtectionGroupPattern","description":"The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type."},"protectionGroupId":{"type":"string","description":"The name of the protection group. You use this to identify the protection group in lists and to manage the protection group, for example to update, delete, or describe it."},"resourceType":{"$ref":"#/types/aws-native:shield:ProtectionGroupResourceType","description":"The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"One or more tag key-value pairs for the Protection object."}},"requiredInputs":["aggregation","pattern","protectionGroupId"]},"aws-native:signer:ProfilePermission":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","properties":{"action":{"type":"string","description":"The AWS Signer action permitted as part of cross-account permissions.","replaceOnChanges":true},"principal":{"type":"string","description":"The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.","replaceOnChanges":true},"profileName":{"type":"string","description":"The human-readable name of the signing profile.","replaceOnChanges":true},"profileVersion":{"type":"string","description":"The version of the signing profile.","replaceOnChanges":true},"statementId":{"type":"string","description":"A unique identifier for the cross-account permission statement.","replaceOnChanges":true}},"type":"object","required":["action","principal","profileName","statementId"],"inputProperties":{"action":{"type":"string","description":"The AWS Signer action permitted as part of cross-account permissions."},"principal":{"type":"string","description":"The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID."},"profileName":{"type":"string","description":"The human-readable name of the signing profile."},"profileVersion":{"type":"string","description":"The version of the signing profile."},"statementId":{"type":"string","description":"A unique identifier for the cross-account permission statement."}},"requiredInputs":["action","principal","profileName","statementId"]},"aws-native:signer:SigningProfile":{"description":"A signing profile is a signing template that can be used to carry out a pre-defined signing job.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified signing profile."},"platformId":{"$ref":"#/types/aws-native:signer:SigningProfilePlatformId","description":"The ID of the target signing platform.","replaceOnChanges":true},"profileName":{"type":"string","description":"A name for the signing profile. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the signing profile name. ","replaceOnChanges":true},"profileVersion":{"type":"string","description":"A version for the signing profile. AWS Signer generates a unique version for each profile of the same profile name."},"profileVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified signing profile version."},"signatureValidityPeriod":{"$ref":"#/types/aws-native:signer:SigningProfileSignatureValidityPeriod","description":"Signature validity period of the profile.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags associated with the signing profile."}},"type":"object","required":["arn","platformId","profileName","profileVersion","profileVersionArn"],"inputProperties":{"platformId":{"$ref":"#/types/aws-native:signer:SigningProfilePlatformId","description":"The ID of the target signing platform."},"profileName":{"type":"string","description":"A name for the signing profile. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the signing profile name. "},"signatureValidityPeriod":{"$ref":"#/types/aws-native:signer:SigningProfileSignatureValidityPeriod","description":"Signature validity period of the profile."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of tags associated with the signing profile."}},"requiredInputs":["platformId"]},"aws-native:simspaceweaver:Simulation":{"description":"AWS::SimSpaceWeaver::Simulation resource creates an AWS Simulation.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        Name = \"MyTestSimulation\",\n        RoleArn = \"arn:aws:iam::111122223333:role/my-test-simulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"MyTestSimulationBucket\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tName:    pulumi.String(\"MyTestSimulation\"),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/my-test-simulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"MyTestSimulationBucket\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    name: \"MyTestSimulation\",\n    roleArn: \"arn:aws:iam::111122223333:role/my-test-simulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"MyTestSimulationBucket\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    name=\"MyTestSimulation\",\n    role_arn=\"arn:aws:iam::111122223333:role/my-test-simulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"MyTestSimulationBucket\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        Name = \"MyTestSimulation\",\n        RoleArn = \"arn:aws:iam::111122223333:role/my-test-simulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"MyTestSimulationBucket\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tName:    pulumi.String(\"MyTestSimulation\"),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/my-test-simulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"MyTestSimulationBucket\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    name: \"MyTestSimulation\",\n    roleArn: \"arn:aws:iam::111122223333:role/my-test-simulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"MyTestSimulationBucket\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    name=\"MyTestSimulation\",\n    role_arn=\"arn:aws:iam::111122223333:role/my-test-simulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"MyTestSimulationBucket\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        Name = \"MyTestSimulation_22-12-15_12_00_00\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-schemas-us-west-2\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tName:    pulumi.String(\"MyTestSimulation_22-12-15_12_00_00\"),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-schemas-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    name: \"MyTestSimulation_22-12-15_12_00_00\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-schemas-us-west-2\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    name=\"MyTestSimulation_22-12-15_12_00_00\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-schemas-us-west-2\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        Name = \"MyTestSimulation_22-12-15_12_00_00\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-schemas-us-west-2\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tName:    pulumi.String(\"MyTestSimulation_22-12-15_12_00_00\"),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-schemas-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    name: \"MyTestSimulation_22-12-15_12_00_00\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-schemas-us-west-2\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    name=\"MyTestSimulation_22-12-15_12_00_00\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-schemas-us-west-2\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        Name = \"MyTestSimulation_22-12-15_12_00_00\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tName:    pulumi.String(\"MyTestSimulation_22-12-15_12_00_00\"),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-artifacts-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    name: \"MyTestSimulation_22-12-15_12_00_00\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    name=\"MyTestSimulation_22-12-15_12_00_00\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        Name = \"MyTestSimulation_22-12-15_12_00_00\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tName:    pulumi.String(\"MyTestSimulation_22-12-15_12_00_00\"),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-artifacts-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    name: \"MyTestSimulation_22-12-15_12_00_00\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    name=\"MyTestSimulation_22-12-15_12_00_00\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        MaximumDuration = \"1H\",\n        Name = \"MyTestSimulation_22-12-15_12_00_00\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tMaximumDuration: pulumi.String(\"1H\"),\n\t\t\tName:            pulumi.String(\"MyTestSimulation_22-12-15_12_00_00\"),\n\t\t\tRoleArn:         pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-artifacts-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    maximumDuration: \"1H\",\n    name: \"MyTestSimulation_22-12-15_12_00_00\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    maximum_duration=\"1H\",\n    name=\"MyTestSimulation_22-12-15_12_00_00\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        MaximumDuration = \"1H\",\n        Name = \"MyTestSimulation_22-12-15_12_00_00\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n        SchemaS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n            ObjectKey = \"MyTestSimulation-schema.yaml\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tMaximumDuration: pulumi.String(\"1H\"),\n\t\t\tName:            pulumi.String(\"MyTestSimulation_22-12-15_12_00_00\"),\n\t\t\tRoleArn:         pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\"),\n\t\t\tSchemaS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-artifacts-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"MyTestSimulation-schema.yaml\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    maximumDuration: \"1H\",\n    name: \"MyTestSimulation_22-12-15_12_00_00\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schemaS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        objectKey: \"MyTestSimulation-schema.yaml\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    maximum_duration=\"1H\",\n    name=\"MyTestSimulation_22-12-15_12_00_00\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role\",\n    schema_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        \"object_key\": \"MyTestSimulation-schema.yaml\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        MaximumDuration = \"2D\",\n        Name = \"MyTestSimulation_from_snapshot\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\",\n        SnapshotS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n            ObjectKey = \"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tMaximumDuration: pulumi.String(\"2D\"),\n\t\t\tName:            pulumi.String(\"MyTestSimulation_from_snapshot\"),\n\t\t\tRoleArn:         pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\"),\n\t\t\tSnapshotS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-artifacts-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    maximumDuration: \"2D\",\n    name: \"MyTestSimulation_from_snapshot\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\",\n    snapshotS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        objectKey: \"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    maximum_duration=\"2D\",\n    name=\"MyTestSimulation_from_snapshot\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\",\n    snapshot_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        \"object_key\": \"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTestSimulation = new AwsNative.SimSpaceWeaver.Simulation(\"myTestSimulation\", new()\n    {\n        MaximumDuration = \"2D\",\n        Name = \"MyTestSimulation_from_snapshot\",\n        RoleArn = \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\",\n        SnapshotS3Location = new AwsNative.SimSpaceWeaver.Inputs.SimulationS3LocationArgs\n        {\n            BucketName = \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n            ObjectKey = \"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/simspaceweaver\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := simspaceweaver.NewSimulation(ctx, \"myTestSimulation\", \u0026simspaceweaver.SimulationArgs{\n\t\t\tMaximumDuration: pulumi.String(\"2D\"),\n\t\t\tName:            pulumi.String(\"MyTestSimulation_from_snapshot\"),\n\t\t\tRoleArn:         pulumi.String(\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\"),\n\t\t\tSnapshotS3Location: \u0026simspaceweaver.SimulationS3LocationArgs{\n\t\t\t\tBucketName: pulumi.String(\"weaver-mytestsimulation-111122223333-artifacts-us-west-2\"),\n\t\t\t\tObjectKey:  pulumi.String(\"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTestSimulation = new aws_native.simspaceweaver.Simulation(\"myTestSimulation\", {\n    maximumDuration: \"2D\",\n    name: \"MyTestSimulation_from_snapshot\",\n    roleArn: \"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\",\n    snapshotS3Location: {\n        bucketName: \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        objectKey: \"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_test_simulation = aws_native.simspaceweaver.Simulation(\"myTestSimulation\",\n    maximum_duration=\"2D\",\n    name=\"MyTestSimulation_from_snapshot\",\n    role_arn=\"arn:aws:iam::111122223333:role/weaver-MyTestSimulation-app-role-copy\",\n    snapshot_s3_location={\n        \"bucket_name\": \"weaver-mytestsimulation-111122223333-artifacts-us-west-2\",\n        \"object_key\": \"snapshot/MyTestSimulation_22-12-15_12_00_00-230428-1207-13.zip\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"describePayload":{"type":"string","description":"Json object with all simulation details"},"maximumDuration":{"type":"string","description":"The maximum running time of the simulation.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the simulation.","replaceOnChanges":true},"roleArn":{"type":"string","description":"Role ARN.","replaceOnChanges":true},"schemaS3Location":{"$ref":"#/types/aws-native:simspaceweaver:SimulationS3Location","description":"The location of the simulation schema in Amazon Simple Storage Service ( Amazon S3 ). For more information about Amazon S3 , see the [*Amazon Simple Storage Service User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html) .\n\nProvide a `SchemaS3Location` to start your simulation from a schema.\n\nIf you provide a `SchemaS3Location` then you can't provide a `SnapshotS3Location` .","replaceOnChanges":true},"snapshotS3Location":{"$ref":"#/types/aws-native:simspaceweaver:SimulationS3Location","description":"The location of the snapshot in Amazon Simple Storage Service ( Amazon S3 ). For more information about Amazon S3 , see the [*Amazon Simple Storage Service User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html) .\n\nProvide a `SnapshotS3Location` to start your simulation from a snapshot.\n\nIf you provide a `SnapshotS3Location` then you can't provide a `SchemaS3Location` .","replaceOnChanges":true}},"type":"object","required":["describePayload","name","roleArn"],"inputProperties":{"maximumDuration":{"type":"string","description":"The maximum running time of the simulation."},"name":{"type":"string","description":"The name of the simulation."},"roleArn":{"type":"string","description":"Role ARN."},"schemaS3Location":{"$ref":"#/types/aws-native:simspaceweaver:SimulationS3Location","description":"The location of the simulation schema in Amazon Simple Storage Service ( Amazon S3 ). For more information about Amazon S3 , see the [*Amazon Simple Storage Service User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html) .\n\nProvide a `SchemaS3Location` to start your simulation from a schema.\n\nIf you provide a `SchemaS3Location` then you can't provide a `SnapshotS3Location` ."},"snapshotS3Location":{"$ref":"#/types/aws-native:simspaceweaver:SimulationS3Location","description":"The location of the snapshot in Amazon Simple Storage Service ( Amazon S3 ). For more information about Amazon S3 , see the [*Amazon Simple Storage Service User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html) .\n\nProvide a `SnapshotS3Location` to start your simulation from a snapshot.\n\nIf you provide a `SnapshotS3Location` then you can't provide a `SchemaS3Location` ."}},"requiredInputs":["roleArn"]},"aws-native:smsvoice:ConfigurationSet":{"description":"Resource Type definition for AWS::SMSVOICE::ConfigurationSet","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ConfigurationSet."},"configurationSetName":{"type":"string","description":"The name to use for the configuration set.","replaceOnChanges":true},"defaultSenderId":{"type":"string","description":"The default sender ID to set for the ConfigurationSet."},"eventDestinations":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:ConfigurationSetEventDestination"},"description":"An event destination is a location where you send message events."},"messageFeedbackEnabled":{"type":"boolean","description":"Set to true to enable message feedback."},"protectConfigurationId":{"type":"string","description":"The unique identifier for the protect configuration to be associated to the configuration set."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn"],"inputProperties":{"configurationSetName":{"type":"string","description":"The name to use for the configuration set."},"defaultSenderId":{"type":"string","description":"The default sender ID to set for the ConfigurationSet."},"eventDestinations":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:ConfigurationSetEventDestination"},"description":"An event destination is a location where you send message events."},"messageFeedbackEnabled":{"type":"boolean","description":"Set to true to enable message feedback."},"protectConfigurationId":{"type":"string","description":"The unique identifier for the protect configuration to be associated to the configuration set."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:smsvoice:OptOutList":{"description":"Resource Type definition for AWS::SMSVOICE::OptOutList","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the OptOutList."},"optOutListName":{"type":"string","description":"The name of the new OptOutList.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn"],"inputProperties":{"optOutListName":{"type":"string","description":"The name of the new OptOutList."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:smsvoice:PhoneNumber":{"description":"Resource Type definition for AWS::SMSVOICE::PhoneNumber","properties":{"arn":{"type":"string","description":"The `PhoneNumber` 's Amazon Resource Name (ARN)"},"deletionProtectionEnabled":{"type":"boolean","description":"When set to true the sender ID can't be deleted. By default this is set to false."},"isoCountryCode":{"type":"string","description":"The two-character code, in ISO 3166-1 alpha-2 format, for the country or region.","replaceOnChanges":true},"mandatoryKeywords":{"$ref":"#/types/aws-native:smsvoice:MandatoryKeywordsProperties","description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords"},"numberCapabilities":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberNumberCapabilitiesItem"},"description":"Indicates if the phone number will be used for text messages, voice messages, or both.","replaceOnChanges":true},"numberType":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberNumberType","description":"The type of phone number to request.","replaceOnChanges":true},"optOutListName":{"type":"string","description":"The name of the OptOutList to associate with the phone number. You can use the OptOutListName or OptOutListArn."},"optionalKeywords":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberOptionalKeyword"},"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message."},"phoneNumber":{"type":"string","description":"The phone number in E.164 format.","language":{"csharp":{"name":"PhoneNumberValue"}}},"phoneNumberId":{"type":"string","description":"The unique identifier for the phone number."},"selfManagedOptOutsEnabled":{"type":"boolean","description":"By default this is set to false. When an end recipient sends a message that begins with HELP or STOP to one of your dedicated numbers, AWS End User Messaging SMS and Voice automatically replies with a customizable message and adds the end recipient to the OptOutList. When set to true you're responsible for responding to HELP and STOP requests. You're also responsible for tracking and honoring opt-out requests."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"twoWay":{"$ref":"#/types/aws-native:smsvoice:TwoWayProperties","description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing."}},"type":"object","required":["arn","isoCountryCode","mandatoryKeywords","numberCapabilities","numberType","phoneNumber","phoneNumberId"],"inputProperties":{"deletionProtectionEnabled":{"type":"boolean","description":"When set to true the sender ID can't be deleted. By default this is set to false."},"isoCountryCode":{"type":"string","description":"The two-character code, in ISO 3166-1 alpha-2 format, for the country or region."},"mandatoryKeywords":{"$ref":"#/types/aws-native:smsvoice:MandatoryKeywordsProperties","description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords"},"numberCapabilities":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberNumberCapabilitiesItem"},"description":"Indicates if the phone number will be used for text messages, voice messages, or both."},"numberType":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberNumberType","description":"The type of phone number to request."},"optOutListName":{"type":"string","description":"The name of the OptOutList to associate with the phone number. You can use the OptOutListName or OptOutListArn."},"optionalKeywords":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberOptionalKeyword"},"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message."},"selfManagedOptOutsEnabled":{"type":"boolean","description":"By default this is set to false. When an end recipient sends a message that begins with HELP or STOP to one of your dedicated numbers, AWS End User Messaging SMS and Voice automatically replies with a customizable message and adds the end recipient to the OptOutList. When set to true you're responsible for responding to HELP and STOP requests. You're also responsible for tracking and honoring opt-out requests."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"twoWay":{"$ref":"#/types/aws-native:smsvoice:TwoWayProperties","description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing."}},"requiredInputs":["isoCountryCode","mandatoryKeywords","numberCapabilities","numberType"]},"aws-native:smsvoice:Pool":{"description":"Resource Type definition for AWS::SMSVOICE::Pool","properties":{"arn":{"type":"string","description":"The Amazon Resource Name of the `Pool` ."},"deletionProtectionEnabled":{"type":"boolean","description":"When set to true the pool can't be deleted. By default this is set to false."},"mandatoryKeywords":{"$ref":"#/types/aws-native:smsvoice:MandatoryKeywordsProperties","description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords"},"optOutListName":{"type":"string","description":"The name of the OptOutList to associate with the pool. You can use the OptOutListName or OptOutListArn."},"optionalKeywords":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:PoolOptionalKeyword"},"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message."},"originationIdentities":{"type":"array","items":{"type":"string"},"description":"The origination identity to use such as a PhoneNumberId, PhoneNumberArn, SenderId or SenderIdArn and it's IsoCountryCode."},"poolId":{"type":"string","description":"The unique identifier for the pool."},"selfManagedOptOutsEnabled":{"type":"boolean","description":"By default this is set to false. When an end recipient sends a message that begins with HELP or STOP to one of your dedicated numbers, AWS End User Messaging SMS and Voice automatically replies with a customizable message and adds the end recipient to the OptOutList. When set to true you're responsible for responding to HELP and STOP requests. You're also responsible for tracking and honoring opt-out requests."},"sharedRoutesEnabled":{"type":"boolean","description":"Indicates whether shared routes are enabled for the pool."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"twoWay":{"$ref":"#/types/aws-native:smsvoice:TwoWayProperties","description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing."}},"type":"object","required":["arn","mandatoryKeywords","originationIdentities","poolId"],"inputProperties":{"deletionProtectionEnabled":{"type":"boolean","description":"When set to true the pool can't be deleted. By default this is set to false."},"mandatoryKeywords":{"$ref":"#/types/aws-native:smsvoice:MandatoryKeywordsProperties","description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords"},"optOutListName":{"type":"string","description":"The name of the OptOutList to associate with the pool. You can use the OptOutListName or OptOutListArn."},"optionalKeywords":{"type":"array","items":{"$ref":"#/types/aws-native:smsvoice:PoolOptionalKeyword"},"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message."},"originationIdentities":{"type":"array","items":{"type":"string"},"description":"The origination identity to use such as a PhoneNumberId, PhoneNumberArn, SenderId or SenderIdArn and it's IsoCountryCode."},"selfManagedOptOutsEnabled":{"type":"boolean","description":"By default this is set to false. When an end recipient sends a message that begins with HELP or STOP to one of your dedicated numbers, AWS End User Messaging SMS and Voice automatically replies with a customizable message and adds the end recipient to the OptOutList. When set to true you're responsible for responding to HELP and STOP requests. You're also responsible for tracking and honoring opt-out requests."},"sharedRoutesEnabled":{"type":"boolean","description":"Indicates whether shared routes are enabled for the pool."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"twoWay":{"$ref":"#/types/aws-native:smsvoice:TwoWayProperties","description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing."}},"requiredInputs":["mandatoryKeywords","originationIdentities"]},"aws-native:smsvoice:ProtectConfiguration":{"description":"Resource Type definition for AWS::SMSVOICE::ProtectConfiguration","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the protect configuration."},"countryRuleSet":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRuleSet","description":"An array of CountryRule containing the rules for the NumberCapability."},"deletionProtectionEnabled":{"type":"boolean","description":"When set to true deletion protection is enabled and protect configuration cannot be deleted. By default this is set to false."},"protectConfigurationId":{"type":"string","description":"The unique identifier for the protect configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","protectConfigurationId"],"inputProperties":{"countryRuleSet":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRuleSet","description":"An array of CountryRule containing the rules for the NumberCapability."},"deletionProtectionEnabled":{"type":"boolean","description":"When set to true deletion protection is enabled and protect configuration cannot be deleted. By default this is set to false."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:smsvoice:ResourcePolicy":{"description":"Resource Type definition for AWS::SMSVOICE::ResourcePolicy","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON formatted resource-based policy to attach.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SMSVOICE::ResourcePolicy` for more information about the expected schema for this property."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS End User Messaging SMS and Voice resource to attach the resource-based policy to.","replaceOnChanges":true}},"type":"object","required":["policyDocument","resourceArn"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON formatted resource-based policy to attach.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SMSVOICE::ResourcePolicy` for more information about the expected schema for this property."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS End User Messaging SMS and Voice resource to attach the resource-based policy to."}},"requiredInputs":["policyDocument","resourceArn"]},"aws-native:smsvoice:SenderId":{"description":"Resource Type definition for AWS::SMSVOICE::SenderId","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) associated with the SenderId."},"deletionProtectionEnabled":{"type":"boolean","description":"When set to true the sender ID can't be deleted. By default this is set to false."},"isoCountryCode":{"type":"string","description":"The two-character code, in ISO 3166-1 alpha-2 format, for the country or region.","replaceOnChanges":true},"senderId":{"type":"string","description":"The sender ID string to request.","language":{"csharp":{"name":"SenderIdValue"}},"replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","isoCountryCode","senderId"],"inputProperties":{"deletionProtectionEnabled":{"type":"boolean","description":"When set to true the sender ID can't be deleted. By default this is set to false."},"isoCountryCode":{"type":"string","description":"The two-character code, in ISO 3166-1 alpha-2 format, for the country or region."},"senderId":{"type":"string","description":"The sender ID string to request.","language":{"csharp":{"name":"SenderIdValue"}}},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["isoCountryCode","senderId"]},"aws-native:sns:Subscription":{"description":"Resource Type definition for AWS::SNS::Subscription","properties":{"arn":{"type":"string","description":"Arn of the subscription"},"deliveryPolicy":{"$ref":"pulumi.json#/Any","description":"The delivery policy JSON assigned to the subscription. Enables the subscriber to define the message delivery retry strategy in the case of an HTTP/S endpoint subscribed to the topic.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"endpoint":{"type":"string","description":"The subscription's endpoint. The endpoint value depends on the protocol that you specify. ","replaceOnChanges":true},"filterPolicy":{"$ref":"pulumi.json#/Any","description":"The filter policy JSON assigned to the subscription. Enables the subscriber to filter out unwanted messages.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"filterPolicyScope":{"type":"string","description":"This attribute lets you choose the filtering scope by using one of the following string value types: MessageAttributes (default) and MessageBody."},"protocol":{"type":"string","description":"The subscription's protocol.","replaceOnChanges":true},"rawMessageDelivery":{"type":"boolean","description":"When set to true, enables raw message delivery. Raw messages don't contain any JSON formatting and can be sent to Amazon SQS and HTTP/S endpoints."},"redrivePolicy":{"$ref":"pulumi.json#/Any","description":"When specified, sends undeliverable messages to the specified Amazon SQS dead-letter queue. Messages that can't be delivered due to client errors are held in the dead-letter queue for further analysis or reprocessing.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"region":{"type":"string","description":"For cross-region subscriptions, the region in which the topic resides.If no region is specified, AWS CloudFormation uses the region of the caller as the default."},"replayPolicy":{"$ref":"pulumi.json#/Any","description":"Specifies whether Amazon SNS resends the notification to the subscription when a message's attribute changes.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"subscriptionRoleArn":{"type":"string","description":"This property applies only to Amazon Data Firehose delivery stream subscriptions."},"topicArn":{"type":"string","description":"The ARN of the topic to subscribe to.","replaceOnChanges":true}},"type":"object","required":["arn","protocol","topicArn"],"inputProperties":{"deliveryPolicy":{"$ref":"pulumi.json#/Any","description":"The delivery policy JSON assigned to the subscription. Enables the subscriber to define the message delivery retry strategy in the case of an HTTP/S endpoint subscribed to the topic.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"endpoint":{"type":"string","description":"The subscription's endpoint. The endpoint value depends on the protocol that you specify. "},"filterPolicy":{"$ref":"pulumi.json#/Any","description":"The filter policy JSON assigned to the subscription. Enables the subscriber to filter out unwanted messages.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"filterPolicyScope":{"type":"string","description":"This attribute lets you choose the filtering scope by using one of the following string value types: MessageAttributes (default) and MessageBody."},"protocol":{"type":"string","description":"The subscription's protocol."},"rawMessageDelivery":{"type":"boolean","description":"When set to true, enables raw message delivery. Raw messages don't contain any JSON formatting and can be sent to Amazon SQS and HTTP/S endpoints."},"redrivePolicy":{"$ref":"pulumi.json#/Any","description":"When specified, sends undeliverable messages to the specified Amazon SQS dead-letter queue. Messages that can't be delivered due to client errors are held in the dead-letter queue for further analysis or reprocessing.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"region":{"type":"string","description":"For cross-region subscriptions, the region in which the topic resides.If no region is specified, AWS CloudFormation uses the region of the caller as the default."},"replayPolicy":{"$ref":"pulumi.json#/Any","description":"Specifies whether Amazon SNS resends the notification to the subscription when a message's attribute changes.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"subscriptionRoleArn":{"type":"string","description":"This property applies only to Amazon Data Firehose delivery stream subscriptions."},"topicArn":{"type":"string","description":"The ARN of the topic to subscribe to."}},"requiredInputs":["protocol","topicArn"]},"aws-native:sns:Topic":{"description":"The ``AWS::SNS::Topic`` resource creates a topic to which notifications can be published.\n  One account can create a maximum of 100,000 standard topics and 1,000 FIFO topics. For more information, see [endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sns.html) in the *General Reference*.\n   The structure of ``AUTHPARAMS`` depends on the .signature of the API request. For more information, see [Examples of the complete Signature Version 4 signing process](https://docs.aws.amazon.com/general/latest/gr/sigv4-signed-request-examples.html) in the *General Reference*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var carSalesTopic = new AwsNative.Sns.Topic(\"carSalesTopic\");\n\n    var erpIntegrationQueue = new AwsNative.Sqs.Queue(\"erpIntegrationQueue\");\n\n    var erpSubscription = new AwsNative.Sns.Subscription(\"erpSubscription\", new()\n    {\n        TopicArn = carSalesTopic.Id,\n        Endpoint = erpIntegrationQueue.Arn,\n        Protocol = \"sqs\",\n        RawMessageDelivery = true,\n    });\n\n    var crmIntegrationQueue = new AwsNative.Sqs.Queue(\"crmIntegrationQueue\");\n\n    var crmSubscription = new AwsNative.Sns.Subscription(\"crmSubscription\", new()\n    {\n        TopicArn = carSalesTopic.Id,\n        Endpoint = crmIntegrationQueue.Arn,\n        Protocol = \"sqs\",\n        RawMessageDelivery = true,\n        FilterPolicy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"buyer-class\"] = new[]\n            {\n                \"vip\",\n            },\n        },\n    });\n\n    var config = new Config();\n    var myHttpEndpoint = config.Require(\"myHttpEndpoint\");\n    var scmSubscription = new AwsNative.Sns.Subscription(\"scmSubscription\", new()\n    {\n        TopicArn = carSalesTopic.Id,\n        Endpoint = myHttpEndpoint,\n        Protocol = \"https\",\n        DeliveryPolicy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"healthyRetryPolicy\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"numRetries\"] = 20,\n                [\"minDelayTarget\"] = 10,\n                [\"maxDelayTarget\"] = 30,\n                [\"numMinDelayRetries\"] = 3,\n                [\"numMaxDelayRetries\"] = 17,\n                [\"numNoDelayRetries\"] = 0,\n                [\"backoffFunction\"] = \"exponential\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sns\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sqs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcarSalesTopic, err := sns.NewTopic(ctx, \"carSalesTopic\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\terpIntegrationQueue, err := sqs.NewQueue(ctx, \"erpIntegrationQueue\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = sns.NewSubscription(ctx, \"erpSubscription\", \u0026sns.SubscriptionArgs{\n\t\t\tTopicArn:           carSalesTopic.ID(),\n\t\t\tEndpoint:           erpIntegrationQueue.Arn,\n\t\t\tProtocol:           pulumi.String(\"sqs\"),\n\t\t\tRawMessageDelivery: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcrmIntegrationQueue, err := sqs.NewQueue(ctx, \"crmIntegrationQueue\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = sns.NewSubscription(ctx, \"crmSubscription\", \u0026sns.SubscriptionArgs{\n\t\t\tTopicArn:           carSalesTopic.ID(),\n\t\t\tEndpoint:           crmIntegrationQueue.Arn,\n\t\t\tProtocol:           pulumi.String(\"sqs\"),\n\t\t\tRawMessageDelivery: pulumi.Bool(true),\n\t\t\tFilterPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"buyer-class\": []string{\n\t\t\t\t\t\"vip\",\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcfg := config.New(ctx, \"\")\n\t\tmyHttpEndpoint := cfg.Require(\"myHttpEndpoint\")\n\t\t_, err = sns.NewSubscription(ctx, \"scmSubscription\", \u0026sns.SubscriptionArgs{\n\t\t\tTopicArn: carSalesTopic.ID(),\n\t\t\tEndpoint: pulumi.String(pulumi.String(myHttpEndpoint)),\n\t\t\tProtocol: pulumi.String(\"https\"),\n\t\t\tDeliveryPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"healthyRetryPolicy\": map[string]interface{}{\n\t\t\t\t\t\"numRetries\":         20,\n\t\t\t\t\t\"minDelayTarget\":     10,\n\t\t\t\t\t\"maxDelayTarget\":     30,\n\t\t\t\t\t\"numMinDelayRetries\": 3,\n\t\t\t\t\t\"numMaxDelayRetries\": 17,\n\t\t\t\t\t\"numNoDelayRetries\":  0,\n\t\t\t\t\t\"backoffFunction\":    \"exponential\",\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst carSalesTopic = new aws_native.sns.Topic(\"carSalesTopic\", {});\nconst erpIntegrationQueue = new aws_native.sqs.Queue(\"erpIntegrationQueue\", {});\nconst erpSubscription = new aws_native.sns.Subscription(\"erpSubscription\", {\n    topicArn: carSalesTopic.id,\n    endpoint: erpIntegrationQueue.arn,\n    protocol: \"sqs\",\n    rawMessageDelivery: true,\n});\nconst crmIntegrationQueue = new aws_native.sqs.Queue(\"crmIntegrationQueue\", {});\nconst crmSubscription = new aws_native.sns.Subscription(\"crmSubscription\", {\n    topicArn: carSalesTopic.id,\n    endpoint: crmIntegrationQueue.arn,\n    protocol: \"sqs\",\n    rawMessageDelivery: true,\n    filterPolicy: {\n        \"buyer-class\": [\"vip\"],\n    },\n});\nconst config = new pulumi.Config();\nconst myHttpEndpoint = config.require(\"myHttpEndpoint\");\nconst scmSubscription = new aws_native.sns.Subscription(\"scmSubscription\", {\n    topicArn: carSalesTopic.id,\n    endpoint: myHttpEndpoint,\n    protocol: \"https\",\n    deliveryPolicy: {\n        healthyRetryPolicy: {\n            numRetries: 20,\n            minDelayTarget: 10,\n            maxDelayTarget: 30,\n            numMinDelayRetries: 3,\n            numMaxDelayRetries: 17,\n            numNoDelayRetries: 0,\n            backoffFunction: \"exponential\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncar_sales_topic = aws_native.sns.Topic(\"carSalesTopic\")\nerp_integration_queue = aws_native.sqs.Queue(\"erpIntegrationQueue\")\nerp_subscription = aws_native.sns.Subscription(\"erpSubscription\",\n    topic_arn=car_sales_topic.id,\n    endpoint=erp_integration_queue.arn,\n    protocol=\"sqs\",\n    raw_message_delivery=True)\ncrm_integration_queue = aws_native.sqs.Queue(\"crmIntegrationQueue\")\ncrm_subscription = aws_native.sns.Subscription(\"crmSubscription\",\n    topic_arn=car_sales_topic.id,\n    endpoint=crm_integration_queue.arn,\n    protocol=\"sqs\",\n    raw_message_delivery=True,\n    filter_policy={\n        \"buyer-class\": [\"vip\"],\n    })\nconfig = pulumi.Config()\nmy_http_endpoint = config.require(\"myHttpEndpoint\")\nscm_subscription = aws_native.sns.Subscription(\"scmSubscription\",\n    topic_arn=car_sales_topic.id,\n    endpoint=my_http_endpoint,\n    protocol=\"https\",\n    delivery_policy={\n        \"healthyRetryPolicy\": {\n            \"numRetries\": 20,\n            \"minDelayTarget\": 10,\n            \"maxDelayTarget\": 30,\n            \"numMinDelayRetries\": 3,\n            \"numMaxDelayRetries\": 17,\n            \"numNoDelayRetries\": 0,\n            \"backoffFunction\": \"exponential\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var carSalesTopic = new AwsNative.Sns.Topic(\"carSalesTopic\");\n\n    var erpIntegrationQueue = new AwsNative.Sqs.Queue(\"erpIntegrationQueue\");\n\n    var erpSubscription = new AwsNative.Sns.Subscription(\"erpSubscription\", new()\n    {\n        TopicArn = carSalesTopic.Id,\n        Endpoint = erpIntegrationQueue.Arn,\n        Protocol = \"sqs\",\n        RawMessageDelivery = true,\n    });\n\n    var crmIntegrationQueue = new AwsNative.Sqs.Queue(\"crmIntegrationQueue\");\n\n    var crmSubscription = new AwsNative.Sns.Subscription(\"crmSubscription\", new()\n    {\n        TopicArn = carSalesTopic.Id,\n        Endpoint = crmIntegrationQueue.Arn,\n        Protocol = \"sqs\",\n        RawMessageDelivery = true,\n        FilterPolicy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"buyer-class\"] = new[]\n            {\n                \"vip\",\n            },\n        },\n    });\n\n    var config = new Config();\n    var myHttpEndpoint = config.Require(\"myHttpEndpoint\");\n    var scmSubscription = new AwsNative.Sns.Subscription(\"scmSubscription\", new()\n    {\n        TopicArn = carSalesTopic.Id,\n        Endpoint = myHttpEndpoint,\n        Protocol = \"https\",\n        DeliveryPolicy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"healthyRetryPolicy\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"numRetries\"] = 20,\n                [\"minDelayTarget\"] = 10,\n                [\"maxDelayTarget\"] = 30,\n                [\"numMinDelayRetries\"] = 3,\n                [\"numMaxDelayRetries\"] = 17,\n                [\"numNoDelayRetries\"] = 0,\n                [\"backoffFunction\"] = \"exponential\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sns\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sqs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcarSalesTopic, err := sns.NewTopic(ctx, \"carSalesTopic\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\terpIntegrationQueue, err := sqs.NewQueue(ctx, \"erpIntegrationQueue\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = sns.NewSubscription(ctx, \"erpSubscription\", \u0026sns.SubscriptionArgs{\n\t\t\tTopicArn:           carSalesTopic.ID(),\n\t\t\tEndpoint:           erpIntegrationQueue.Arn,\n\t\t\tProtocol:           pulumi.String(\"sqs\"),\n\t\t\tRawMessageDelivery: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcrmIntegrationQueue, err := sqs.NewQueue(ctx, \"crmIntegrationQueue\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = sns.NewSubscription(ctx, \"crmSubscription\", \u0026sns.SubscriptionArgs{\n\t\t\tTopicArn:           carSalesTopic.ID(),\n\t\t\tEndpoint:           crmIntegrationQueue.Arn,\n\t\t\tProtocol:           pulumi.String(\"sqs\"),\n\t\t\tRawMessageDelivery: pulumi.Bool(true),\n\t\t\tFilterPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"buyer-class\": []string{\n\t\t\t\t\t\"vip\",\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tcfg := config.New(ctx, \"\")\n\t\tmyHttpEndpoint := cfg.Require(\"myHttpEndpoint\")\n\t\t_, err = sns.NewSubscription(ctx, \"scmSubscription\", \u0026sns.SubscriptionArgs{\n\t\t\tTopicArn: carSalesTopic.ID(),\n\t\t\tEndpoint: pulumi.String(pulumi.String(myHttpEndpoint)),\n\t\t\tProtocol: pulumi.String(\"https\"),\n\t\t\tDeliveryPolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"healthyRetryPolicy\": map[string]interface{}{\n\t\t\t\t\t\"numRetries\":         20,\n\t\t\t\t\t\"minDelayTarget\":     10,\n\t\t\t\t\t\"maxDelayTarget\":     30,\n\t\t\t\t\t\"numMinDelayRetries\": 3,\n\t\t\t\t\t\"numMaxDelayRetries\": 17,\n\t\t\t\t\t\"numNoDelayRetries\":  0,\n\t\t\t\t\t\"backoffFunction\":    \"exponential\",\n\t\t\t\t},\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst carSalesTopic = new aws_native.sns.Topic(\"carSalesTopic\", {});\nconst erpIntegrationQueue = new aws_native.sqs.Queue(\"erpIntegrationQueue\", {});\nconst erpSubscription = new aws_native.sns.Subscription(\"erpSubscription\", {\n    topicArn: carSalesTopic.id,\n    endpoint: erpIntegrationQueue.arn,\n    protocol: \"sqs\",\n    rawMessageDelivery: true,\n});\nconst crmIntegrationQueue = new aws_native.sqs.Queue(\"crmIntegrationQueue\", {});\nconst crmSubscription = new aws_native.sns.Subscription(\"crmSubscription\", {\n    topicArn: carSalesTopic.id,\n    endpoint: crmIntegrationQueue.arn,\n    protocol: \"sqs\",\n    rawMessageDelivery: true,\n    filterPolicy: {\n        \"buyer-class\": [\"vip\"],\n    },\n});\nconst config = new pulumi.Config();\nconst myHttpEndpoint = config.require(\"myHttpEndpoint\");\nconst scmSubscription = new aws_native.sns.Subscription(\"scmSubscription\", {\n    topicArn: carSalesTopic.id,\n    endpoint: myHttpEndpoint,\n    protocol: \"https\",\n    deliveryPolicy: {\n        healthyRetryPolicy: {\n            numRetries: 20,\n            minDelayTarget: 10,\n            maxDelayTarget: 30,\n            numMinDelayRetries: 3,\n            numMaxDelayRetries: 17,\n            numNoDelayRetries: 0,\n            backoffFunction: \"exponential\",\n        },\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ncar_sales_topic = aws_native.sns.Topic(\"carSalesTopic\")\nerp_integration_queue = aws_native.sqs.Queue(\"erpIntegrationQueue\")\nerp_subscription = aws_native.sns.Subscription(\"erpSubscription\",\n    topic_arn=car_sales_topic.id,\n    endpoint=erp_integration_queue.arn,\n    protocol=\"sqs\",\n    raw_message_delivery=True)\ncrm_integration_queue = aws_native.sqs.Queue(\"crmIntegrationQueue\")\ncrm_subscription = aws_native.sns.Subscription(\"crmSubscription\",\n    topic_arn=car_sales_topic.id,\n    endpoint=crm_integration_queue.arn,\n    protocol=\"sqs\",\n    raw_message_delivery=True,\n    filter_policy={\n        \"buyer-class\": [\"vip\"],\n    })\nconfig = pulumi.Config()\nmy_http_endpoint = config.require(\"myHttpEndpoint\")\nscm_subscription = aws_native.sns.Subscription(\"scmSubscription\",\n    topic_arn=car_sales_topic.id,\n    endpoint=my_http_endpoint,\n    protocol=\"https\",\n    delivery_policy={\n        \"healthyRetryPolicy\": {\n            \"numRetries\": 20,\n            \"minDelayTarget\": 10,\n            \"maxDelayTarget\": 30,\n            \"numMinDelayRetries\": 3,\n            \"numMaxDelayRetries\": 17,\n            \"numNoDelayRetries\": 0,\n            \"backoffFunction\": \"exponential\",\n        },\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"archivePolicy":{"$ref":"pulumi.json#/Any","description":"The archive policy determines the number of days SNS retains messages. You can set a retention period from 1 to 365 days.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Topic` for more information about the expected schema for this property."},"contentBasedDeduplication":{"type":"boolean","description":"Enables content-based deduplication for FIFO topics.\n  +  By default, ``ContentBasedDeduplication`` is set to ``false``. If you create a FIFO topic and this attribute is ``false``, you must specify a value for the ``MessageDeduplicationId`` parameter for the [Publish](https://docs.aws.amazon.com/sns/latest/api/API_Publish.html) action. \n  +  When you set ``ContentBasedDeduplication`` to ``true``, SNS uses a SHA-256 hash to generate the ``MessageDeduplicationId`` using the body of the message (but not the attributes of the message).\n (Optional) To override the generated value, you can specify a value for the the ``MessageDeduplicationId`` parameter for the ``Publish`` action."},"dataProtectionPolicy":{"$ref":"pulumi.json#/Any","description":"The body of the policy document you want to use for this topic.\n You can only add one policy per topic.\n The policy must be in JSON string format.\n Length Constraints: Maximum length of 30,720.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Topic` for more information about the expected schema for this property."},"deliveryStatusLogging":{"type":"array","items":{"$ref":"#/types/aws-native:sns:TopicLoggingConfig"},"description":"The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:\n  +  HTTP \n  +  Amazon Kinesis Data Firehose\n  +   AWS Lambda\n  +  Platform application endpoint\n  +  Amazon Simple Queue Service\n  \n Once configured, log entries are sent to Amazon CloudWatch Logs."},"displayName":{"type":"string","description":"The display name to use for an SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs."},"fifoThroughputScope":{"type":"string","description":"Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. Valid values are `Topic` or `MessageGroup` ."},"fifoTopic":{"type":"boolean","description":"Set to true to create a FIFO topic.","replaceOnChanges":true},"kmsMasterKeyId":{"type":"string","description":"The ID of an AWS managed customer master key (CMK) for SNS or a custom CMK. For more information, see [Key terms](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms). For more examples, see ``KeyId`` in the *API Reference*.\n This property applies only to [server-side-encryption](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html)."},"signatureVersion":{"type":"string","description":"The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1``."},"subscription":{"type":"array","items":{"$ref":"#/types/aws-native:sns:TopicSubscription"},"description":"The SNS subscriptions (endpoints) for this topic.\n  If you specify the ``Subscription`` property in the ``AWS::SNS::Topic`` resource and it creates an associated subscription resource, the associated subscription is not deleted when the ``AWS::SNS::Topic`` resource is deleted."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to add to a new topic.\n  To be able to tag a topic on creation, you must have the ``sns:CreateTopic`` and ``sns:TagResource`` permissions."},"topicArn":{"type":"string","description":"Returns the ARN of an Amazon  topic."},"topicName":{"type":"string","description":"The name of the topic you want to create. Topic names must include only uppercase and lowercase ASCII letters, numbers, underscores, and hyphens, and must be between 1 and 256 characters long. FIFO topic names must end with ``.fifo``.\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the topic name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"tracingConfig":{"type":"string","description":"Tracing mode of an SNS topic. By default ``TracingConfig`` is set to ``PassThrough``, and the topic passes through the tracing header it receives from an SNS publisher to its subscriptions. If set to ``Active``, SNS will vend X-Ray segment data to topic owner account if the sampled flag in the tracing header is true."}},"type":"object","required":["topicArn"],"inputProperties":{"archivePolicy":{"$ref":"pulumi.json#/Any","description":"The archive policy determines the number of days SNS retains messages. You can set a retention period from 1 to 365 days.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Topic` for more information about the expected schema for this property."},"contentBasedDeduplication":{"type":"boolean","description":"Enables content-based deduplication for FIFO topics.\n  +  By default, ``ContentBasedDeduplication`` is set to ``false``. If you create a FIFO topic and this attribute is ``false``, you must specify a value for the ``MessageDeduplicationId`` parameter for the [Publish](https://docs.aws.amazon.com/sns/latest/api/API_Publish.html) action. \n  +  When you set ``ContentBasedDeduplication`` to ``true``, SNS uses a SHA-256 hash to generate the ``MessageDeduplicationId`` using the body of the message (but not the attributes of the message).\n (Optional) To override the generated value, you can specify a value for the the ``MessageDeduplicationId`` parameter for the ``Publish`` action."},"dataProtectionPolicy":{"$ref":"pulumi.json#/Any","description":"The body of the policy document you want to use for this topic.\n You can only add one policy per topic.\n The policy must be in JSON string format.\n Length Constraints: Maximum length of 30,720.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Topic` for more information about the expected schema for this property."},"deliveryStatusLogging":{"type":"array","items":{"$ref":"#/types/aws-native:sns:TopicLoggingConfig"},"description":"The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:\n  +  HTTP \n  +  Amazon Kinesis Data Firehose\n  +   AWS Lambda\n  +  Platform application endpoint\n  +  Amazon Simple Queue Service\n  \n Once configured, log entries are sent to Amazon CloudWatch Logs."},"displayName":{"type":"string","description":"The display name to use for an SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs."},"fifoThroughputScope":{"type":"string","description":"Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. Valid values are `Topic` or `MessageGroup` ."},"fifoTopic":{"type":"boolean","description":"Set to true to create a FIFO topic."},"kmsMasterKeyId":{"type":"string","description":"The ID of an AWS managed customer master key (CMK) for SNS or a custom CMK. For more information, see [Key terms](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms). For more examples, see ``KeyId`` in the *API Reference*.\n This property applies only to [server-side-encryption](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html)."},"signatureVersion":{"type":"string","description":"The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1``."},"subscription":{"type":"array","items":{"$ref":"#/types/aws-native:sns:TopicSubscription"},"description":"The SNS subscriptions (endpoints) for this topic.\n  If you specify the ``Subscription`` property in the ``AWS::SNS::Topic`` resource and it creates an associated subscription resource, the associated subscription is not deleted when the ``AWS::SNS::Topic`` resource is deleted."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to add to a new topic.\n  To be able to tag a topic on creation, you must have the ``sns:CreateTopic`` and ``sns:TagResource`` permissions."},"topicName":{"type":"string","description":"The name of the topic you want to create. Topic names must include only uppercase and lowercase ASCII letters, numbers, underscores, and hyphens, and must be between 1 and 256 characters long. FIFO topic names must end with ``.fifo``.\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the topic name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"tracingConfig":{"type":"string","description":"Tracing mode of an SNS topic. By default ``TracingConfig`` is set to ``PassThrough``, and the topic passes through the tracing header it receives from an SNS publisher to its subscriptions. If set to ``Active``, SNS will vend X-Ray segment data to topic owner account if the sampled flag in the tracing header is true."}}},"aws-native:sns:TopicInlinePolicy":{"description":"Schema for AWS::SNS::TopicInlinePolicy","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SNS topics.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::TopicInlinePolicy` for more information about the expected schema for this property."},"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the topic to which you want to add the policy.","replaceOnChanges":true}},"type":"object","required":["policyDocument","topicArn"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SNS topics.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::TopicInlinePolicy` for more information about the expected schema for this property."},"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the topic to which you want to add the policy."}},"requiredInputs":["policyDocument","topicArn"]},"aws-native:sns:TopicPolicy":{"description":"The ``AWS::SNS::TopicPolicy`` resource associates SNS topics with a policy. For an example snippet, see [Declaring an policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sns-policy) in the *User Guide*.","properties":{"awsId":{"type":"string","description":"The provider-assigned unique ID for this managed resource."},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SNS topics.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::TopicPolicy` for more information about the expected schema for this property."},"topics":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the topics to which you want to add the policy. You can use the ``Ref`` function to specify an ``AWS::SNS::Topic`` resource."}},"type":"object","required":["awsId","policyDocument","topics"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SNS topics.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::TopicPolicy` for more information about the expected schema for this property."},"topics":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARN) of the topics to which you want to add the policy. You can use the ``Ref`` function to specify an ``AWS::SNS::Topic`` resource."}},"requiredInputs":["policyDocument","topics"]},"aws-native:sqs:Queue":{"description":"The ``AWS::SQS::Queue`` resource creates an SQS standard or FIFO queue.\n Keep the following caveats in mind:\n  +  If you don't specify the ``FifoQueue`` property, SQS creates a standard queue.\n  You can't change the queue type after you create it and you can't convert an existing standard queue into a FIFO queue. You must either create a new FIFO queue for your application or delete your existing standard queue and recreate it as a FIFO queue. For more information, see [Moving from a standard queue to a FIFO queue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues-moving.html) in the *Developer Guide*. \n   +  If you don't provide a value for a property, the queue is created with the default value for the property.\n  +  If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.\n  +  To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.\n  \n For more information about creating FIFO (first-in-first-out) queues, see [Creating an queue ()](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/screate-queue-cloudformation.html) in the *Developer Guide*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var alarmEmail = config.Get(\"alarmEmail\") ?? \"jane.doe@example.com\";\n    var myQueue = new AwsNative.Sqs.Queue(\"myQueue\", new()\n    {\n        QueueName = \"SampleQueue\",\n    });\n\n    var alarmTopic = new AwsNative.Sns.Topic(\"alarmTopic\", new()\n    {\n        Subscription = new[]\n        {\n            new AwsNative.Sns.Inputs.TopicSubscriptionArgs\n            {\n                Endpoint = alarmEmail,\n                Protocol = \"email\",\n            },\n        },\n    });\n\n    var queueDepthAlarm = new AwsNative.CloudWatch.Alarm(\"queueDepthAlarm\", new()\n    {\n        AlarmDescription = \"Alarm if queue depth increases to more than 10 messages\",\n        Namespace = \"AWS/SQS\",\n        MetricName = \"ApproximateNumberOfMessagesVisible\",\n        Dimensions = new[]\n        {\n            new AwsNative.CloudWatch.Inputs.AlarmDimensionArgs\n            {\n                Name = \"QueueName\",\n                Value = myQueue.QueueName,\n            },\n        },\n        Statistic = \"Sum\",\n        Period = 300,\n        EvaluationPeriods = 1,\n        Threshold = 10,\n        ComparisonOperator = \"GreaterThanThreshold\",\n        AlarmActions = new[]\n        {\n            alarmTopic.Id,\n        },\n        InsufficientDataActions = new[]\n        {\n            alarmTopic.Id,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"queueURL\"] = myQueue.Id,\n        [\"queueARN\"] = myQueue.Arn,\n        [\"queueName\"] = myQueue.QueueName,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudwatch\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sns\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sqs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\talarmEmail := \"jane.doe@example.com\"\n\t\tif param := cfg.Get(\"alarmEmail\"); param != \"\" {\n\t\t\talarmEmail = param\n\t\t}\n\t\tmyQueue, err := sqs.NewQueue(ctx, \"myQueue\", \u0026sqs.QueueArgs{\n\t\t\tQueueName: pulumi.String(\"SampleQueue\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\talarmTopic, err := sns.NewTopic(ctx, \"alarmTopic\", \u0026sns.TopicArgs{\n\t\t\tSubscription: sns.TopicSubscriptionArray{\n\t\t\t\t\u0026sns.TopicSubscriptionArgs{\n\t\t\t\t\tEndpoint: pulumi.String(pulumi.String(alarmEmail)),\n\t\t\t\t\tProtocol: pulumi.String(\"email\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudwatch.NewAlarm(ctx, \"queueDepthAlarm\", \u0026cloudwatch.AlarmArgs{\n\t\t\tAlarmDescription: pulumi.String(\"Alarm if queue depth increases to more than 10 messages\"),\n\t\t\tNamespace:        pulumi.String(\"AWS/SQS\"),\n\t\t\tMetricName:       pulumi.String(\"ApproximateNumberOfMessagesVisible\"),\n\t\t\tDimensions: cloudwatch.AlarmDimensionArray{\n\t\t\t\t\u0026cloudwatch.AlarmDimensionArgs{\n\t\t\t\t\tName:  pulumi.String(\"QueueName\"),\n\t\t\t\t\tValue: myQueue.QueueName,\n\t\t\t\t},\n\t\t\t},\n\t\t\tStatistic:          pulumi.String(\"Sum\"),\n\t\t\tPeriod:             pulumi.Int(300),\n\t\t\tEvaluationPeriods:  pulumi.Int(1),\n\t\t\tThreshold:          pulumi.Float64(10),\n\t\t\tComparisonOperator: pulumi.String(\"GreaterThanThreshold\"),\n\t\t\tAlarmActions: pulumi.StringArray{\n\t\t\t\talarmTopic.ID(),\n\t\t\t},\n\t\t\tInsufficientDataActions: pulumi.StringArray{\n\t\t\t\talarmTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"queueURL\", myQueue.ID())\n\t\tctx.Export(\"queueARN\", myQueue.Arn)\n\t\tctx.Export(\"queueName\", myQueue.QueueName)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst alarmEmail = config.get(\"alarmEmail\") || \"jane.doe@example.com\";\nconst myQueue = new aws_native.sqs.Queue(\"myQueue\", {queueName: \"SampleQueue\"});\nconst alarmTopic = new aws_native.sns.Topic(\"alarmTopic\", {subscription: [{\n    endpoint: alarmEmail,\n    protocol: \"email\",\n}]});\nconst queueDepthAlarm = new aws_native.cloudwatch.Alarm(\"queueDepthAlarm\", {\n    alarmDescription: \"Alarm if queue depth increases to more than 10 messages\",\n    namespace: \"AWS/SQS\",\n    metricName: \"ApproximateNumberOfMessagesVisible\",\n    dimensions: [{\n        name: \"QueueName\",\n        value: myQueue.queueName,\n    }],\n    statistic: \"Sum\",\n    period: 300,\n    evaluationPeriods: 1,\n    threshold: 10,\n    comparisonOperator: \"GreaterThanThreshold\",\n    alarmActions: [alarmTopic.id],\n    insufficientDataActions: [alarmTopic.id],\n});\nexport const queueURL = myQueue.id;\nexport const queueARN = myQueue.arn;\nexport const queueName = myQueue.queueName;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nalarm_email = config.get(\"alarmEmail\")\nif alarm_email is None:\n    alarm_email = \"jane.doe@example.com\"\nmy_queue = aws_native.sqs.Queue(\"myQueue\", queue_name=\"SampleQueue\")\nalarm_topic = aws_native.sns.Topic(\"alarmTopic\", subscription=[{\n    \"endpoint\": alarm_email,\n    \"protocol\": \"email\",\n}])\nqueue_depth_alarm = aws_native.cloudwatch.Alarm(\"queueDepthAlarm\",\n    alarm_description=\"Alarm if queue depth increases to more than 10 messages\",\n    namespace=\"AWS/SQS\",\n    metric_name=\"ApproximateNumberOfMessagesVisible\",\n    dimensions=[{\n        \"name\": \"QueueName\",\n        \"value\": my_queue.queue_name,\n    }],\n    statistic=\"Sum\",\n    period=300,\n    evaluation_periods=1,\n    threshold=10,\n    comparison_operator=\"GreaterThanThreshold\",\n    alarm_actions=[alarm_topic.id],\n    insufficient_data_actions=[alarm_topic.id])\npulumi.export(\"queueURL\", my_queue.id)\npulumi.export(\"queueARN\", my_queue.arn)\npulumi.export(\"queueName\", my_queue.queue_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var alarmEmail = config.Get(\"alarmEmail\") ?? \"jane.doe@example.com\";\n    var myQueue = new AwsNative.Sqs.Queue(\"myQueue\", new()\n    {\n        QueueName = \"SampleQueue\",\n    });\n\n    var alarmTopic = new AwsNative.Sns.Topic(\"alarmTopic\", new()\n    {\n        Subscription = new[]\n        {\n            new AwsNative.Sns.Inputs.TopicSubscriptionArgs\n            {\n                Endpoint = alarmEmail,\n                Protocol = \"email\",\n            },\n        },\n    });\n\n    var queueDepthAlarm = new AwsNative.CloudWatch.Alarm(\"queueDepthAlarm\", new()\n    {\n        AlarmDescription = \"Alarm if queue depth increases to more than 10 messages\",\n        Namespace = \"AWS/SQS\",\n        MetricName = \"ApproximateNumberOfMessagesVisible\",\n        Dimensions = new[]\n        {\n            new AwsNative.CloudWatch.Inputs.AlarmDimensionArgs\n            {\n                Name = \"QueueName\",\n                Value = myQueue.QueueName,\n            },\n        },\n        Statistic = \"Sum\",\n        Period = 300,\n        EvaluationPeriods = 1,\n        Threshold = 10,\n        ComparisonOperator = \"GreaterThanThreshold\",\n        AlarmActions = new[]\n        {\n            alarmTopic.Id,\n        },\n        InsufficientDataActions = new[]\n        {\n            alarmTopic.Id,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"queueURL\"] = myQueue.Id,\n        [\"queueARN\"] = myQueue.Arn,\n        [\"queueName\"] = myQueue.QueueName,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/cloudwatch\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sns\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sqs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\talarmEmail := \"jane.doe@example.com\"\n\t\tif param := cfg.Get(\"alarmEmail\"); param != \"\" {\n\t\t\talarmEmail = param\n\t\t}\n\t\tmyQueue, err := sqs.NewQueue(ctx, \"myQueue\", \u0026sqs.QueueArgs{\n\t\t\tQueueName: pulumi.String(\"SampleQueue\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\talarmTopic, err := sns.NewTopic(ctx, \"alarmTopic\", \u0026sns.TopicArgs{\n\t\t\tSubscription: sns.TopicSubscriptionArray{\n\t\t\t\t\u0026sns.TopicSubscriptionArgs{\n\t\t\t\t\tEndpoint: pulumi.String(pulumi.String(alarmEmail)),\n\t\t\t\t\tProtocol: pulumi.String(\"email\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = cloudwatch.NewAlarm(ctx, \"queueDepthAlarm\", \u0026cloudwatch.AlarmArgs{\n\t\t\tAlarmDescription: pulumi.String(\"Alarm if queue depth increases to more than 10 messages\"),\n\t\t\tNamespace:        pulumi.String(\"AWS/SQS\"),\n\t\t\tMetricName:       pulumi.String(\"ApproximateNumberOfMessagesVisible\"),\n\t\t\tDimensions: cloudwatch.AlarmDimensionArray{\n\t\t\t\t\u0026cloudwatch.AlarmDimensionArgs{\n\t\t\t\t\tName:  pulumi.String(\"QueueName\"),\n\t\t\t\t\tValue: myQueue.QueueName,\n\t\t\t\t},\n\t\t\t},\n\t\t\tStatistic:          pulumi.String(\"Sum\"),\n\t\t\tPeriod:             pulumi.Int(300),\n\t\t\tEvaluationPeriods:  pulumi.Int(1),\n\t\t\tThreshold:          pulumi.Float64(10),\n\t\t\tComparisonOperator: pulumi.String(\"GreaterThanThreshold\"),\n\t\t\tAlarmActions: pulumi.StringArray{\n\t\t\t\talarmTopic.ID(),\n\t\t\t},\n\t\t\tInsufficientDataActions: pulumi.StringArray{\n\t\t\t\talarmTopic.ID(),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"queueURL\", myQueue.ID())\n\t\tctx.Export(\"queueARN\", myQueue.Arn)\n\t\tctx.Export(\"queueName\", myQueue.QueueName)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst alarmEmail = config.get(\"alarmEmail\") || \"jane.doe@example.com\";\nconst myQueue = new aws_native.sqs.Queue(\"myQueue\", {queueName: \"SampleQueue\"});\nconst alarmTopic = new aws_native.sns.Topic(\"alarmTopic\", {subscription: [{\n    endpoint: alarmEmail,\n    protocol: \"email\",\n}]});\nconst queueDepthAlarm = new aws_native.cloudwatch.Alarm(\"queueDepthAlarm\", {\n    alarmDescription: \"Alarm if queue depth increases to more than 10 messages\",\n    namespace: \"AWS/SQS\",\n    metricName: \"ApproximateNumberOfMessagesVisible\",\n    dimensions: [{\n        name: \"QueueName\",\n        value: myQueue.queueName,\n    }],\n    statistic: \"Sum\",\n    period: 300,\n    evaluationPeriods: 1,\n    threshold: 10,\n    comparisonOperator: \"GreaterThanThreshold\",\n    alarmActions: [alarmTopic.id],\n    insufficientDataActions: [alarmTopic.id],\n});\nexport const queueURL = myQueue.id;\nexport const queueARN = myQueue.arn;\nexport const queueName = myQueue.queueName;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\nalarm_email = config.get(\"alarmEmail\")\nif alarm_email is None:\n    alarm_email = \"jane.doe@example.com\"\nmy_queue = aws_native.sqs.Queue(\"myQueue\", queue_name=\"SampleQueue\")\nalarm_topic = aws_native.sns.Topic(\"alarmTopic\", subscription=[{\n    \"endpoint\": alarm_email,\n    \"protocol\": \"email\",\n}])\nqueue_depth_alarm = aws_native.cloudwatch.Alarm(\"queueDepthAlarm\",\n    alarm_description=\"Alarm if queue depth increases to more than 10 messages\",\n    namespace=\"AWS/SQS\",\n    metric_name=\"ApproximateNumberOfMessagesVisible\",\n    dimensions=[{\n        \"name\": \"QueueName\",\n        \"value\": my_queue.queue_name,\n    }],\n    statistic=\"Sum\",\n    period=300,\n    evaluation_periods=1,\n    threshold=10,\n    comparison_operator=\"GreaterThanThreshold\",\n    alarm_actions=[alarm_topic.id],\n    insufficient_data_actions=[alarm_topic.id])\npulumi.export(\"queueURL\", my_queue.id)\npulumi.export(\"queueARN\", my_queue.arn)\npulumi.export(\"queueName\", my_queue.queue_name)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDeadLetterQueue = new AwsNative.Sqs.Queue(\"myDeadLetterQueue\");\n\n    var mySourceQueue = new AwsNative.Sqs.Queue(\"mySourceQueue\", new()\n    {\n        RedrivePolicy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"deadLetterTargetArn\"] = myDeadLetterQueue.Arn,\n            [\"maxReceiveCount\"] = 5,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"sourceQueueURL\"] = mySourceQueue.Id,\n        [\"sourceQueueARN\"] = mySourceQueue.Arn,\n        [\"deadLetterQueueURL\"] = myDeadLetterQueue.Id,\n        [\"deadLetterQueueARN\"] = myDeadLetterQueue.Arn,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sqs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyDeadLetterQueue, err := sqs.NewQueue(ctx, \"myDeadLetterQueue\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmySourceQueue, err := sqs.NewQueue(ctx, \"mySourceQueue\", \u0026sqs.QueueArgs{\n\t\t\tRedrivePolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"deadLetterTargetArn\": myDeadLetterQueue.Arn,\n\t\t\t\t\"maxReceiveCount\":     5,\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"sourceQueueURL\", mySourceQueue.ID())\n\t\tctx.Export(\"sourceQueueARN\", mySourceQueue.Arn)\n\t\tctx.Export(\"deadLetterQueueURL\", myDeadLetterQueue.ID())\n\t\tctx.Export(\"deadLetterQueueARN\", myDeadLetterQueue.Arn)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDeadLetterQueue = new aws_native.sqs.Queue(\"myDeadLetterQueue\", {});\nconst mySourceQueue = new aws_native.sqs.Queue(\"mySourceQueue\", {redrivePolicy: {\n    deadLetterTargetArn: myDeadLetterQueue.arn,\n    maxReceiveCount: 5,\n}});\nexport const sourceQueueURL = mySourceQueue.id;\nexport const sourceQueueARN = mySourceQueue.arn;\nexport const deadLetterQueueURL = myDeadLetterQueue.id;\nexport const deadLetterQueueARN = myDeadLetterQueue.arn;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dead_letter_queue = aws_native.sqs.Queue(\"myDeadLetterQueue\")\nmy_source_queue = aws_native.sqs.Queue(\"mySourceQueue\", redrive_policy={\n    \"deadLetterTargetArn\": my_dead_letter_queue.arn,\n    \"maxReceiveCount\": 5,\n})\npulumi.export(\"sourceQueueURL\", my_source_queue.id)\npulumi.export(\"sourceQueueARN\", my_source_queue.arn)\npulumi.export(\"deadLetterQueueURL\", my_dead_letter_queue.id)\npulumi.export(\"deadLetterQueueARN\", my_dead_letter_queue.arn)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myDeadLetterQueue = new AwsNative.Sqs.Queue(\"myDeadLetterQueue\");\n\n    var mySourceQueue = new AwsNative.Sqs.Queue(\"mySourceQueue\", new()\n    {\n        RedrivePolicy = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"deadLetterTargetArn\"] = myDeadLetterQueue.Arn,\n            [\"maxReceiveCount\"] = 5,\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"sourceQueueURL\"] = mySourceQueue.Id,\n        [\"sourceQueueARN\"] = mySourceQueue.Arn,\n        [\"deadLetterQueueURL\"] = myDeadLetterQueue.Id,\n        [\"deadLetterQueueARN\"] = myDeadLetterQueue.Arn,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sqs\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmyDeadLetterQueue, err := sqs.NewQueue(ctx, \"myDeadLetterQueue\", nil)\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmySourceQueue, err := sqs.NewQueue(ctx, \"mySourceQueue\", \u0026sqs.QueueArgs{\n\t\t\tRedrivePolicy: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"deadLetterTargetArn\": myDeadLetterQueue.Arn,\n\t\t\t\t\"maxReceiveCount\":     5,\n\t\t\t}),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"sourceQueueURL\", mySourceQueue.ID())\n\t\tctx.Export(\"sourceQueueARN\", mySourceQueue.Arn)\n\t\tctx.Export(\"deadLetterQueueURL\", myDeadLetterQueue.ID())\n\t\tctx.Export(\"deadLetterQueueARN\", myDeadLetterQueue.Arn)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myDeadLetterQueue = new aws_native.sqs.Queue(\"myDeadLetterQueue\", {});\nconst mySourceQueue = new aws_native.sqs.Queue(\"mySourceQueue\", {redrivePolicy: {\n    deadLetterTargetArn: myDeadLetterQueue.arn,\n    maxReceiveCount: 5,\n}});\nexport const sourceQueueURL = mySourceQueue.id;\nexport const sourceQueueARN = mySourceQueue.arn;\nexport const deadLetterQueueURL = myDeadLetterQueue.id;\nexport const deadLetterQueueARN = myDeadLetterQueue.arn;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_dead_letter_queue = aws_native.sqs.Queue(\"myDeadLetterQueue\")\nmy_source_queue = aws_native.sqs.Queue(\"mySourceQueue\", redrive_policy={\n    \"deadLetterTargetArn\": my_dead_letter_queue.arn,\n    \"maxReceiveCount\": 5,\n})\npulumi.export(\"sourceQueueURL\", my_source_queue.id)\npulumi.export(\"sourceQueueARN\", my_source_queue.arn)\npulumi.export(\"deadLetterQueueURL\", my_dead_letter_queue.id)\npulumi.export(\"deadLetterQueueARN\", my_dead_letter_queue.arn)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the queue. For example: `arn:aws:sqs:us-east-2:123456789012:mystack-myqueue-15PG5C2FC1CW8` ."},"contentBasedDeduplication":{"type":"boolean","description":"For first-in-first-out (FIFO) queues, specifies whether to enable content-based deduplication. During the deduplication interval, SQS treats messages that are sent with identical content as duplicates and delivers only one copy of the message. For more information, see the ``ContentBasedDeduplication`` attribute for the ``CreateQueue`` action in the *API Reference*."},"deduplicationScope":{"type":"string","description":"For high throughput for FIFO queues, specifies whether message deduplication occurs at the message group or queue level. Valid values are ``messageGroup`` and ``queue``.\n To enable high throughput for a FIFO queue, set this attribute to ``messageGroup`` *and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*."},"delaySeconds":{"type":"integer","description":"The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0``."},"fifoQueue":{"type":"boolean","description":"If set to true, creates a FIFO queue. If you don't specify this property, SQS creates a standard queue. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*.","replaceOnChanges":true},"fifoThroughputLimit":{"type":"string","description":"For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId``.\n To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*."},"kmsDataKeyReusePeriodSeconds":{"type":"integer","description":"The length of time in seconds for which SQS can reuse a data key to encrypt or decrypt messages before calling KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes).\n  A shorter time period provides better security, but results in more calls to KMS, which might incur charges after Free Tier. For more information, see [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work) in the *Developer Guide*."},"kmsMasterKeyId":{"type":"string","description":"The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:\n  +   [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html) in the *Developer Guide* \n  +   [CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html) in the *API Reference* \n  +   [Request Parameters](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters) in the *Key Management Service API Reference* \n  +   The Key Management Service (KMS) section of the [Best Practices](https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf) whitepaper"},"maximumMessageSize":{"type":"integer","description":"The limit of how many bytes that a message can contain before SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB)."},"messageRetentionPeriod":{"type":"integer","description":"The number of seconds that SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days)."},"queueName":{"type":"string","description":"A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*.\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the queue name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) in the *User Guide*. \n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"queueUrl":{"type":"string","description":"Returns the URLs of the queues from the policy."},"receiveMessageWaitTimeSeconds":{"type":"integer","description":"Specifies the duration, in seconds, that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response, rather than returning an empty response if a message isn't yet available. You can specify an integer from 1 to 20. Short polling is used as the default or when you specify 0 for this property. For more information, see [Consuming messages using long polling](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-long-polling) in the *Developer Guide*."},"redriveAllowPolicy":{"$ref":"pulumi.json#/Any","description":"The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows:\n  +  ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:\n  +  ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.\n  +  ``denyAll``: No source queues can specify this queue as the dead-letter queue.\n  +  ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.\n  \n  +  ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::Queue` for more information about the expected schema for this property."},"redrivePolicy":{"$ref":"pulumi.json#/Any","description":"The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows:\n  +  ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.\n  +  ``maxReceiveCount``: The number of times a message is delivered to the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.\n  \n  The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue.\n   *JSON* \n  ``{ \"deadLetterTargetArn\" : String, \"maxReceiveCount\" : Integer }`` \n  *YAML* \n  ``deadLetterTargetArn : String`` \n  ``maxReceiveCount : Integer``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::Queue` for more information about the expected schema for this property."},"sqsManagedSseEnabled":{"type":"boolean","description":"Enables server-side queue encryption using SQS owned encryption keys. Only one server-side encryption option is supported per queue (for example, [SSE-KMS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html) or [SSE-SQS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)). When ``SqsManagedSseEnabled`` is not defined, ``SSE-SQS`` encryption is enabled by default."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this queue. For more information, see [Resource tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *User Guide*."},"visibilityTimeout":{"type":"integer","description":"The length of time during which a message will be unavailable after a message is delivered from the queue. This blocks other components from receiving the same message and gives the initial component time to process and delete the message from the queue.\n Values must be from 0 to 43,200 seconds (12 hours). If you don't specify a value, AWS CloudFormation uses the default value of 30 seconds.\n For more information about SQS queue visibility timeouts, see [Visibility timeout](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html) in the *Developer Guide*."}},"type":"object","required":["arn","queueUrl"],"inputProperties":{"contentBasedDeduplication":{"type":"boolean","description":"For first-in-first-out (FIFO) queues, specifies whether to enable content-based deduplication. During the deduplication interval, SQS treats messages that are sent with identical content as duplicates and delivers only one copy of the message. For more information, see the ``ContentBasedDeduplication`` attribute for the ``CreateQueue`` action in the *API Reference*."},"deduplicationScope":{"type":"string","description":"For high throughput for FIFO queues, specifies whether message deduplication occurs at the message group or queue level. Valid values are ``messageGroup`` and ``queue``.\n To enable high throughput for a FIFO queue, set this attribute to ``messageGroup`` *and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*."},"delaySeconds":{"type":"integer","description":"The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0``."},"fifoQueue":{"type":"boolean","description":"If set to true, creates a FIFO queue. If you don't specify this property, SQS creates a standard queue. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*."},"fifoThroughputLimit":{"type":"string","description":"For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId``.\n To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*."},"kmsDataKeyReusePeriodSeconds":{"type":"integer","description":"The length of time in seconds for which SQS can reuse a data key to encrypt or decrypt messages before calling KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes).\n  A shorter time period provides better security, but results in more calls to KMS, which might incur charges after Free Tier. For more information, see [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work) in the *Developer Guide*."},"kmsMasterKeyId":{"type":"string","description":"The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:\n  +   [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html) in the *Developer Guide* \n  +   [CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html) in the *API Reference* \n  +   [Request Parameters](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters) in the *Key Management Service API Reference* \n  +   The Key Management Service (KMS) section of the [Best Practices](https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf) whitepaper"},"maximumMessageSize":{"type":"integer","description":"The limit of how many bytes that a message can contain before SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB)."},"messageRetentionPeriod":{"type":"integer","description":"The number of seconds that SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days)."},"queueName":{"type":"string","description":"A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*.\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the queue name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) in the *User Guide*. \n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"receiveMessageWaitTimeSeconds":{"type":"integer","description":"Specifies the duration, in seconds, that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response, rather than returning an empty response if a message isn't yet available. You can specify an integer from 1 to 20. Short polling is used as the default or when you specify 0 for this property. For more information, see [Consuming messages using long polling](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-long-polling) in the *Developer Guide*."},"redriveAllowPolicy":{"$ref":"pulumi.json#/Any","description":"The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows:\n  +  ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:\n  +  ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.\n  +  ``denyAll``: No source queues can specify this queue as the dead-letter queue.\n  +  ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.\n  \n  +  ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::Queue` for more information about the expected schema for this property."},"redrivePolicy":{"$ref":"pulumi.json#/Any","description":"The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows:\n  +  ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.\n  +  ``maxReceiveCount``: The number of times a message is delivered to the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.\n  \n  The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue.\n   *JSON* \n  ``{ \"deadLetterTargetArn\" : String, \"maxReceiveCount\" : Integer }`` \n  *YAML* \n  ``deadLetterTargetArn : String`` \n  ``maxReceiveCount : Integer``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::Queue` for more information about the expected schema for this property."},"sqsManagedSseEnabled":{"type":"boolean","description":"Enables server-side queue encryption using SQS owned encryption keys. Only one server-side encryption option is supported per queue (for example, [SSE-KMS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html) or [SSE-SQS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)). When ``SqsManagedSseEnabled`` is not defined, ``SSE-SQS`` encryption is enabled by default."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags that you attach to this queue. For more information, see [Resource tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *User Guide*."},"visibilityTimeout":{"type":"integer","description":"The length of time during which a message will be unavailable after a message is delivered from the queue. This blocks other components from receiving the same message and gives the initial component time to process and delete the message from the queue.\n Values must be from 0 to 43,200 seconds (12 hours). If you don't specify a value, AWS CloudFormation uses the default value of 30 seconds.\n For more information about SQS queue visibility timeouts, see [Visibility timeout](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html) in the *Developer Guide*."}}},"aws-native:sqs:QueueInlinePolicy":{"description":"Schema for SQS QueueInlinePolicy","properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SQS queue\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::QueueInlinePolicy` for more information about the expected schema for this property."},"queue":{"type":"string","description":"The URL of the SQS queue.","replaceOnChanges":true}},"type":"object","required":["policyDocument","queue"],"inputProperties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SQS queue\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::QueueInlinePolicy` for more information about the expected schema for this property."},"queue":{"type":"string","description":"The URL of the SQS queue."}},"requiredInputs":["policyDocument","queue"]},"aws-native:ssm:Association":{"description":"The AWS::SSM::Association resource associates an SSM document in AWS Systems Manager with EC2 instances that contain a configuration agent to process the document.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var specificInstanceIdAssociation = new AwsNative.Ssm.Association(\"specificInstanceIdAssociation\", new()\n    {\n        Name = \"AWS-RunShellScript\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"InstanceIds\",\n                Values = new[]\n                {\n                    \"i-1234567890abcdef0\",\n                },\n            },\n        },\n        Parameters = \n        {\n            { \"commands\", new[]\n            {\n                \"ls\",\n            } },\n            { \"workingDirectory\", new[]\n            {\n                \"/\",\n            } },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewAssociation(ctx, \"specificInstanceIdAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tName: pulumi.String(\"AWS-RunShellScript\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"InstanceIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"i-1234567890abcdef0\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: pulumi.StringArrayMap{\n\t\t\t\t\"commands\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"ls\"),\n\t\t\t\t},\n\t\t\t\t\"workingDirectory\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst specificInstanceIdAssociation = new aws_native.ssm.Association(\"specificInstanceIdAssociation\", {\n    name: \"AWS-RunShellScript\",\n    targets: [{\n        key: \"InstanceIds\",\n        values: [\"i-1234567890abcdef0\"],\n    }],\n    parameters: {\n        commands: [\"ls\"],\n        workingDirectory: [\"/\"],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nspecific_instance_id_association = aws_native.ssm.Association(\"specificInstanceIdAssociation\",\n    name=\"AWS-RunShellScript\",\n    targets=[{\n        \"key\": \"InstanceIds\",\n        \"values\": [\"i-1234567890abcdef0\"],\n    }],\n    parameters={\n        \"commands\": [\"ls\"],\n        \"workingDirectory\": [\"/\"],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var specificInstanceIdAssociation = new AwsNative.Ssm.Association(\"specificInstanceIdAssociation\", new()\n    {\n        Name = \"AWS-RunShellScript\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"InstanceIds\",\n                Values = new[]\n                {\n                    \"i-1234567890abcdef0\",\n                },\n            },\n        },\n        Parameters = \n        {\n            { \"commands\", new[]\n            {\n                \"ls\",\n            } },\n            { \"workingDirectory\", new[]\n            {\n                \"/\",\n            } },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewAssociation(ctx, \"specificInstanceIdAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tName: pulumi.String(\"AWS-RunShellScript\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"InstanceIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"i-1234567890abcdef0\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tParameters: pulumi.StringArrayMap{\n\t\t\t\t\"commands\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"ls\"),\n\t\t\t\t},\n\t\t\t\t\"workingDirectory\": pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"/\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst specificInstanceIdAssociation = new aws_native.ssm.Association(\"specificInstanceIdAssociation\", {\n    name: \"AWS-RunShellScript\",\n    targets: [{\n        key: \"InstanceIds\",\n        values: [\"i-1234567890abcdef0\"],\n    }],\n    parameters: {\n        commands: [\"ls\"],\n        workingDirectory: [\"/\"],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nspecific_instance_id_association = aws_native.ssm.Association(\"specificInstanceIdAssociation\",\n    name=\"AWS-RunShellScript\",\n    targets=[{\n        \"key\": \"InstanceIds\",\n        \"values\": [\"i-1234567890abcdef0\"],\n    }],\n    parameters={\n        \"commands\": [\"ls\"],\n        \"workingDirectory\": [\"/\"],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var allInstanceIdsAssociation = new AwsNative.Ssm.Association(\"allInstanceIdsAssociation\", new()\n    {\n        AssociationName = \"UpdateSSMAgent\",\n        Name = \"AWS-UpdateSSMAgent\",\n        ScheduleExpression = \"cron(0 2 ? * SUN *)\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"InstanceIds\",\n                Values = new[]\n                {\n                    \"*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewAssociation(ctx, \"allInstanceIdsAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tAssociationName:    pulumi.String(\"UpdateSSMAgent\"),\n\t\t\tName:               pulumi.String(\"AWS-UpdateSSMAgent\"),\n\t\t\tScheduleExpression: pulumi.String(\"cron(0 2 ? * SUN *)\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"InstanceIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"*\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst allInstanceIdsAssociation = new aws_native.ssm.Association(\"allInstanceIdsAssociation\", {\n    associationName: \"UpdateSSMAgent\",\n    name: \"AWS-UpdateSSMAgent\",\n    scheduleExpression: \"cron(0 2 ? * SUN *)\",\n    targets: [{\n        key: \"InstanceIds\",\n        values: [\"*\"],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nall_instance_ids_association = aws_native.ssm.Association(\"allInstanceIdsAssociation\",\n    association_name=\"UpdateSSMAgent\",\n    name=\"AWS-UpdateSSMAgent\",\n    schedule_expression=\"cron(0 2 ? * SUN *)\",\n    targets=[{\n        \"key\": \"InstanceIds\",\n        \"values\": [\"*\"],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var allInstanceIdsAssociation = new AwsNative.Ssm.Association(\"allInstanceIdsAssociation\", new()\n    {\n        AssociationName = \"UpdateSSMAgent\",\n        Name = \"AWS-UpdateSSMAgent\",\n        ScheduleExpression = \"cron(0 2 ? * SUN *)\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"InstanceIds\",\n                Values = new[]\n                {\n                    \"*\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewAssociation(ctx, \"allInstanceIdsAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tAssociationName:    pulumi.String(\"UpdateSSMAgent\"),\n\t\t\tName:               pulumi.String(\"AWS-UpdateSSMAgent\"),\n\t\t\tScheduleExpression: pulumi.String(\"cron(0 2 ? * SUN *)\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"InstanceIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"*\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst allInstanceIdsAssociation = new aws_native.ssm.Association(\"allInstanceIdsAssociation\", {\n    associationName: \"UpdateSSMAgent\",\n    name: \"AWS-UpdateSSMAgent\",\n    scheduleExpression: \"cron(0 2 ? * SUN *)\",\n    targets: [{\n        key: \"InstanceIds\",\n        values: [\"*\"],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nall_instance_ids_association = aws_native.ssm.Association(\"allInstanceIdsAssociation\",\n    association_name=\"UpdateSSMAgent\",\n    name=\"AWS-UpdateSSMAgent\",\n    schedule_expression=\"cron(0 2 ? * SUN *)\",\n    targets=[{\n        \"key\": \"InstanceIds\",\n        \"values\": [\"*\"],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var taggedInstancesAssociation = new AwsNative.Ssm.Association(\"taggedInstancesAssociation\", new()\n    {\n        AssociationName = \"UpdateSSMAgent\",\n        Name = \"AWS-UpdateSSMAgent\",\n        ScheduleExpression = \"rate(7 days)\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"tag:Environment\",\n                Values = new[]\n                {\n                    \"Production\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewAssociation(ctx, \"taggedInstancesAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tAssociationName:    pulumi.String(\"UpdateSSMAgent\"),\n\t\t\tName:               pulumi.String(\"AWS-UpdateSSMAgent\"),\n\t\t\tScheduleExpression: pulumi.String(\"rate(7 days)\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"tag:Environment\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Production\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst taggedInstancesAssociation = new aws_native.ssm.Association(\"taggedInstancesAssociation\", {\n    associationName: \"UpdateSSMAgent\",\n    name: \"AWS-UpdateSSMAgent\",\n    scheduleExpression: \"rate(7 days)\",\n    targets: [{\n        key: \"tag:Environment\",\n        values: [\"Production\"],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntagged_instances_association = aws_native.ssm.Association(\"taggedInstancesAssociation\",\n    association_name=\"UpdateSSMAgent\",\n    name=\"AWS-UpdateSSMAgent\",\n    schedule_expression=\"rate(7 days)\",\n    targets=[{\n        \"key\": \"tag:Environment\",\n        \"values\": [\"Production\"],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var taggedInstancesAssociation = new AwsNative.Ssm.Association(\"taggedInstancesAssociation\", new()\n    {\n        AssociationName = \"UpdateSSMAgent\",\n        Name = \"AWS-UpdateSSMAgent\",\n        ScheduleExpression = \"rate(7 days)\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.AssociationTargetArgs\n            {\n                Key = \"tag:Environment\",\n                Values = new[]\n                {\n                    \"Production\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewAssociation(ctx, \"taggedInstancesAssociation\", \u0026ssm.AssociationArgs{\n\t\t\tAssociationName:    pulumi.String(\"UpdateSSMAgent\"),\n\t\t\tName:               pulumi.String(\"AWS-UpdateSSMAgent\"),\n\t\t\tScheduleExpression: pulumi.String(\"rate(7 days)\"),\n\t\t\tTargets: ssm.AssociationTargetArray{\n\t\t\t\t\u0026ssm.AssociationTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"tag:Environment\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"Production\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst taggedInstancesAssociation = new aws_native.ssm.Association(\"taggedInstancesAssociation\", {\n    associationName: \"UpdateSSMAgent\",\n    name: \"AWS-UpdateSSMAgent\",\n    scheduleExpression: \"rate(7 days)\",\n    targets: [{\n        key: \"tag:Environment\",\n        values: [\"Production\"],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntagged_instances_association = aws_native.ssm.Association(\"taggedInstancesAssociation\",\n    association_name=\"UpdateSSMAgent\",\n    name=\"AWS-UpdateSSMAgent\",\n    schedule_expression=\"rate(7 days)\",\n    targets=[{\n        \"key\": \"tag:Environment\",\n        \"values\": [\"Production\"],\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"applyOnlyAtCronInterval":{"type":"boolean","description":"By default, when you create a new association, the system runs it immediately after it is created and then according to the schedule you specified. Specify this option if you don't want an association to run immediately after you create it. This parameter is not supported for rate expressions."},"associationId":{"type":"string","description":"Unique identifier of the association."},"associationName":{"type":"string","description":"The name of the association."},"automationTargetParameterName":{"type":"string","description":"Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a tool in AWS Systems Manager ."},"calendarNames":{"type":"array","items":{"type":"string"},"description":"The names or Amazon Resource Names (ARNs) of the Change Calendar type documents your associations are gated under. The associations only run when that Change Calendar is open. For more information, see [AWS Systems Manager Change Calendar](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar) in the *AWS Systems Manager User Guide* ."},"complianceSeverity":{"$ref":"#/types/aws-native:ssm:AssociationComplianceSeverity","description":"The severity level that is assigned to the association."},"documentVersion":{"type":"string","description":"The version of the SSM document to associate with the target."},"instanceId":{"type":"string","description":"The ID of the instance that the SSM document is associated with."},"maxConcurrency":{"type":"string","description":"The maximum number of targets allowed to run the association at the same time. You can specify a number, for example 10, or a percentage of the target set, for example 10%. The default value is 100%, which means all targets run the association at the same time.\n\nIf a new managed node starts and attempts to run an association while Systems Manager is running `MaxConcurrency` associations, the association is allowed to run. During the next association interval, the new managed node will process its association within the limit specified for `MaxConcurrency` ."},"maxErrors":{"type":"string","description":"The number of errors that are allowed before the system stops sending requests to run the association on additional targets. You can specify either an absolute number of errors, for example 10, or a percentage of the target set, for example 10%. If you specify 3, for example, the system stops sending requests when the fourth error is received. If you specify 0, then the system stops sending requests after the first error is returned. If you run an association on 50 managed nodes and set `MaxError` to 10%, then the system stops sending the request when the sixth error is received.\n\nExecutions that are already running an association when `MaxErrors` is reached are allowed to complete, but some of these executions may fail as well. If you need to ensure that there won't be more than max-errors failed executions, set `MaxConcurrency` to 1 so that executions proceed one at a time."},"name":{"type":"string","description":"The name of the SSM document."},"outputLocation":{"$ref":"#/types/aws-native:ssm:AssociationInstanceAssociationOutputLocation","description":"An Amazon Simple Storage Service (Amazon S3) bucket where you want to store the output details of the request."},"parameters":{"type":"object","additionalProperties":{"type":"array","items":{"type":"string"}},"description":"Parameter values that the SSM document uses at runtime."},"scheduleExpression":{"type":"string","description":"A Cron or Rate expression that specifies when the association is applied to the target."},"scheduleOffset":{"type":"integer","description":"Number of days to wait after the scheduled day to run an association."},"syncCompliance":{"$ref":"#/types/aws-native:ssm:AssociationSyncCompliance","description":"The mode for generating association compliance. You can specify `AUTO` or `MANUAL` . In `AUTO` mode, the system uses the status of the association execution to determine the compliance status. If the association execution runs successfully, then the association is `COMPLIANT` . If the association execution doesn't run successfully, the association is `NON-COMPLIANT` .\n\nIn `MANUAL` mode, you must specify the `AssociationId` as a parameter for the `PutComplianceItems` API action. In this case, compliance data is not managed by State Manager. It is managed by your direct call to the `PutComplianceItems` API action.\n\nBy default, all associations use `AUTO` mode."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:AssociationTarget"},"description":"The targets that the SSM document sends commands to."},"waitForSuccessTimeoutSeconds":{"type":"integer","description":"The number of seconds the service should wait for the association status to show \"Success\" before proceeding with the stack execution. If the association status doesn't show \"Success\" after the specified number of seconds, then stack creation fails.\n\n\u003e When you specify a value for the `WaitForSuccessTimeoutSeconds` , [drift detection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html) for your CloudFormation stack’s configuration might yield inaccurate results. If drift detection is important in your scenario, we recommend that you don’t include `WaitForSuccessTimeoutSeconds` in your template."}},"type":"object","required":["associationId","name"],"inputProperties":{"applyOnlyAtCronInterval":{"type":"boolean","description":"By default, when you create a new association, the system runs it immediately after it is created and then according to the schedule you specified. Specify this option if you don't want an association to run immediately after you create it. This parameter is not supported for rate expressions."},"associationName":{"type":"string","description":"The name of the association."},"automationTargetParameterName":{"type":"string","description":"Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a tool in AWS Systems Manager ."},"calendarNames":{"type":"array","items":{"type":"string"},"description":"The names or Amazon Resource Names (ARNs) of the Change Calendar type documents your associations are gated under. The associations only run when that Change Calendar is open. For more information, see [AWS Systems Manager Change Calendar](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar) in the *AWS Systems Manager User Guide* ."},"complianceSeverity":{"$ref":"#/types/aws-native:ssm:AssociationComplianceSeverity","description":"The severity level that is assigned to the association."},"documentVersion":{"type":"string","description":"The version of the SSM document to associate with the target."},"instanceId":{"type":"string","description":"The ID of the instance that the SSM document is associated with."},"maxConcurrency":{"type":"string","description":"The maximum number of targets allowed to run the association at the same time. You can specify a number, for example 10, or a percentage of the target set, for example 10%. The default value is 100%, which means all targets run the association at the same time.\n\nIf a new managed node starts and attempts to run an association while Systems Manager is running `MaxConcurrency` associations, the association is allowed to run. During the next association interval, the new managed node will process its association within the limit specified for `MaxConcurrency` ."},"maxErrors":{"type":"string","description":"The number of errors that are allowed before the system stops sending requests to run the association on additional targets. You can specify either an absolute number of errors, for example 10, or a percentage of the target set, for example 10%. If you specify 3, for example, the system stops sending requests when the fourth error is received. If you specify 0, then the system stops sending requests after the first error is returned. If you run an association on 50 managed nodes and set `MaxError` to 10%, then the system stops sending the request when the sixth error is received.\n\nExecutions that are already running an association when `MaxErrors` is reached are allowed to complete, but some of these executions may fail as well. If you need to ensure that there won't be more than max-errors failed executions, set `MaxConcurrency` to 1 so that executions proceed one at a time."},"name":{"type":"string","description":"The name of the SSM document."},"outputLocation":{"$ref":"#/types/aws-native:ssm:AssociationInstanceAssociationOutputLocation","description":"An Amazon Simple Storage Service (Amazon S3) bucket where you want to store the output details of the request."},"parameters":{"type":"object","additionalProperties":{"type":"array","items":{"type":"string"}},"description":"Parameter values that the SSM document uses at runtime."},"scheduleExpression":{"type":"string","description":"A Cron or Rate expression that specifies when the association is applied to the target."},"scheduleOffset":{"type":"integer","description":"Number of days to wait after the scheduled day to run an association."},"syncCompliance":{"$ref":"#/types/aws-native:ssm:AssociationSyncCompliance","description":"The mode for generating association compliance. You can specify `AUTO` or `MANUAL` . In `AUTO` mode, the system uses the status of the association execution to determine the compliance status. If the association execution runs successfully, then the association is `COMPLIANT` . If the association execution doesn't run successfully, the association is `NON-COMPLIANT` .\n\nIn `MANUAL` mode, you must specify the `AssociationId` as a parameter for the `PutComplianceItems` API action. In this case, compliance data is not managed by State Manager. It is managed by your direct call to the `PutComplianceItems` API action.\n\nBy default, all associations use `AUTO` mode."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:AssociationTarget"},"description":"The targets that the SSM document sends commands to."},"waitForSuccessTimeoutSeconds":{"type":"integer","description":"The number of seconds the service should wait for the association status to show \"Success\" before proceeding with the stack execution. If the association status doesn't show \"Success\" after the specified number of seconds, then stack creation fails.\n\n\u003e When you specify a value for the `WaitForSuccessTimeoutSeconds` , [drift detection](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html) for your CloudFormation stack’s configuration might yield inaccurate results. If drift detection is important in your scenario, we recommend that you don’t include `WaitForSuccessTimeoutSeconds` in your template."}}},"aws-native:ssm:Document":{"description":"The AWS::SSM::Document resource is an SSM document in AWS Systems Manager that defines the actions that Systems Manager performs, which can be used to set up and run commands on your instances.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sessionPreferencesDocument = new AwsNative.Ssm.Document(\"sessionPreferencesDocument\", new()\n    {\n        Name = \"SSM-SessionManagerRunShell\",\n        Content = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"schemaVersion\"] = \"1.0\",\n            [\"description\"] = \"Document to hold regional settings for Session Manager\",\n            [\"sessionType\"] = \"Standard_Stream\",\n            [\"inputs\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"s3BucketName\"] = \"DOC-EXAMPLE-BUCKET\",\n                [\"s3KeyPrefix\"] = \"MyBucketPrefix\",\n                [\"s3EncryptionEnabled\"] = true,\n                [\"cloudWatchLogGroupName\"] = \"MyLogGroupName\",\n                [\"cloudWatchEncryptionEnabled\"] = true,\n                [\"cloudWatchStreamingEnabled\"] = false,\n                [\"kmsKeyId\"] = \"MyKMSKeyID\",\n                [\"runAsEnabled\"] = false,\n                [\"runAsDefaultUser\"] = \"MyDefaultRunAsUser\",\n                [\"idleSessionTimeout\"] = \"20\",\n                [\"shellProfile\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"windows\"] = \"example commands\",\n                    [\"linux\"] = \"example commands\",\n                },\n            },\n        },\n        DocumentType = AwsNative.Ssm.DocumentType.Session,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"documentName\"] = \"SSM-SessionManagerRunShell\",\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewDocument(ctx, \"sessionPreferencesDocument\", \u0026ssm.DocumentArgs{\n\t\t\tName: pulumi.String(\"SSM-SessionManagerRunShell\"),\n\t\t\tContent: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"schemaVersion\": \"1.0\",\n\t\t\t\t\"description\":   \"Document to hold regional settings for Session Manager\",\n\t\t\t\t\"sessionType\":   \"Standard_Stream\",\n\t\t\t\t\"inputs\": map[string]interface{}{\n\t\t\t\t\t\"s3BucketName\":                \"DOC-EXAMPLE-BUCKET\",\n\t\t\t\t\t\"s3KeyPrefix\":                 \"MyBucketPrefix\",\n\t\t\t\t\t\"s3EncryptionEnabled\":         true,\n\t\t\t\t\t\"cloudWatchLogGroupName\":      \"MyLogGroupName\",\n\t\t\t\t\t\"cloudWatchEncryptionEnabled\": true,\n\t\t\t\t\t\"cloudWatchStreamingEnabled\":  false,\n\t\t\t\t\t\"kmsKeyId\":                    \"MyKMSKeyID\",\n\t\t\t\t\t\"runAsEnabled\":                false,\n\t\t\t\t\t\"runAsDefaultUser\":            \"MyDefaultRunAsUser\",\n\t\t\t\t\t\"idleSessionTimeout\":          \"20\",\n\t\t\t\t\t\"shellProfile\": map[string]interface{}{\n\t\t\t\t\t\t\"windows\": \"example commands\",\n\t\t\t\t\t\t\"linux\":   \"example commands\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tDocumentType: ssm.DocumentTypeSession,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"documentName\", pulumi.String(\"SSM-SessionManagerRunShell\"))\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sessionPreferencesDocument = new aws_native.ssm.Document(\"sessionPreferencesDocument\", {\n    name: \"SSM-SessionManagerRunShell\",\n    content: {\n        schemaVersion: \"1.0\",\n        description: \"Document to hold regional settings for Session Manager\",\n        sessionType: \"Standard_Stream\",\n        inputs: {\n            s3BucketName: \"DOC-EXAMPLE-BUCKET\",\n            s3KeyPrefix: \"MyBucketPrefix\",\n            s3EncryptionEnabled: true,\n            cloudWatchLogGroupName: \"MyLogGroupName\",\n            cloudWatchEncryptionEnabled: true,\n            cloudWatchStreamingEnabled: false,\n            kmsKeyId: \"MyKMSKeyID\",\n            runAsEnabled: false,\n            runAsDefaultUser: \"MyDefaultRunAsUser\",\n            idleSessionTimeout: \"20\",\n            shellProfile: {\n                windows: \"example commands\",\n                linux: \"example commands\",\n            },\n        },\n    },\n    documentType: aws_native.ssm.DocumentType.Session,\n});\nexport const documentName = \"SSM-SessionManagerRunShell\";\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsession_preferences_document = aws_native.ssm.Document(\"sessionPreferencesDocument\",\n    name=\"SSM-SessionManagerRunShell\",\n    content={\n        \"schemaVersion\": \"1.0\",\n        \"description\": \"Document to hold regional settings for Session Manager\",\n        \"sessionType\": \"Standard_Stream\",\n        \"inputs\": {\n            \"s3BucketName\": \"DOC-EXAMPLE-BUCKET\",\n            \"s3KeyPrefix\": \"MyBucketPrefix\",\n            \"s3EncryptionEnabled\": True,\n            \"cloudWatchLogGroupName\": \"MyLogGroupName\",\n            \"cloudWatchEncryptionEnabled\": True,\n            \"cloudWatchStreamingEnabled\": False,\n            \"kmsKeyId\": \"MyKMSKeyID\",\n            \"runAsEnabled\": False,\n            \"runAsDefaultUser\": \"MyDefaultRunAsUser\",\n            \"idleSessionTimeout\": \"20\",\n            \"shellProfile\": {\n                \"windows\": \"example commands\",\n                \"linux\": \"example commands\",\n            },\n        },\n    },\n    document_type=aws_native.ssm.DocumentType.SESSION)\npulumi.export(\"documentName\", \"SSM-SessionManagerRunShell\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var sessionPreferencesDocument = new AwsNative.Ssm.Document(\"sessionPreferencesDocument\", new()\n    {\n        Name = \"SSM-SessionManagerRunShell\",\n        Content = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"schemaVersion\"] = \"1.0\",\n            [\"description\"] = \"Document to hold regional settings for Session Manager\",\n            [\"sessionType\"] = \"Standard_Stream\",\n            [\"inputs\"] = new Dictionary\u003cstring, object?\u003e\n            {\n                [\"s3BucketName\"] = \"DOC-EXAMPLE-BUCKET\",\n                [\"s3KeyPrefix\"] = \"MyBucketPrefix\",\n                [\"s3EncryptionEnabled\"] = true,\n                [\"cloudWatchLogGroupName\"] = \"MyLogGroupName\",\n                [\"cloudWatchEncryptionEnabled\"] = true,\n                [\"cloudWatchStreamingEnabled\"] = false,\n                [\"kmsKeyId\"] = \"MyKMSKeyID\",\n                [\"runAsEnabled\"] = false,\n                [\"runAsDefaultUser\"] = \"MyDefaultRunAsUser\",\n                [\"idleSessionTimeout\"] = \"20\",\n                [\"shellProfile\"] = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"windows\"] = \"example commands\",\n                    [\"linux\"] = \"example commands\",\n                },\n            },\n        },\n        DocumentFormat = AwsNative.Ssm.DocumentFormat.Yaml,\n        DocumentType = AwsNative.Ssm.DocumentType.Session,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"documentName\"] = \"SSM-SessionManagerRunShell\",\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewDocument(ctx, \"sessionPreferencesDocument\", \u0026ssm.DocumentArgs{\n\t\t\tName: pulumi.String(\"SSM-SessionManagerRunShell\"),\n\t\t\tContent: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"schemaVersion\": \"1.0\",\n\t\t\t\t\"description\":   \"Document to hold regional settings for Session Manager\",\n\t\t\t\t\"sessionType\":   \"Standard_Stream\",\n\t\t\t\t\"inputs\": map[string]interface{}{\n\t\t\t\t\t\"s3BucketName\":                \"DOC-EXAMPLE-BUCKET\",\n\t\t\t\t\t\"s3KeyPrefix\":                 \"MyBucketPrefix\",\n\t\t\t\t\t\"s3EncryptionEnabled\":         true,\n\t\t\t\t\t\"cloudWatchLogGroupName\":      \"MyLogGroupName\",\n\t\t\t\t\t\"cloudWatchEncryptionEnabled\": true,\n\t\t\t\t\t\"cloudWatchStreamingEnabled\":  false,\n\t\t\t\t\t\"kmsKeyId\":                    \"MyKMSKeyID\",\n\t\t\t\t\t\"runAsEnabled\":                false,\n\t\t\t\t\t\"runAsDefaultUser\":            \"MyDefaultRunAsUser\",\n\t\t\t\t\t\"idleSessionTimeout\":          \"20\",\n\t\t\t\t\t\"shellProfile\": map[string]interface{}{\n\t\t\t\t\t\t\"windows\": \"example commands\",\n\t\t\t\t\t\t\"linux\":   \"example commands\",\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tDocumentFormat: ssm.DocumentFormatYaml,\n\t\t\tDocumentType:   ssm.DocumentTypeSession,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"documentName\", pulumi.String(\"SSM-SessionManagerRunShell\"))\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst sessionPreferencesDocument = new aws_native.ssm.Document(\"sessionPreferencesDocument\", {\n    name: \"SSM-SessionManagerRunShell\",\n    content: {\n        schemaVersion: \"1.0\",\n        description: \"Document to hold regional settings for Session Manager\",\n        sessionType: \"Standard_Stream\",\n        inputs: {\n            s3BucketName: \"DOC-EXAMPLE-BUCKET\",\n            s3KeyPrefix: \"MyBucketPrefix\",\n            s3EncryptionEnabled: true,\n            cloudWatchLogGroupName: \"MyLogGroupName\",\n            cloudWatchEncryptionEnabled: true,\n            cloudWatchStreamingEnabled: false,\n            kmsKeyId: \"MyKMSKeyID\",\n            runAsEnabled: false,\n            runAsDefaultUser: \"MyDefaultRunAsUser\",\n            idleSessionTimeout: \"20\",\n            shellProfile: {\n                windows: \"example commands\",\n                linux: \"example commands\",\n            },\n        },\n    },\n    documentFormat: aws_native.ssm.DocumentFormat.Yaml,\n    documentType: aws_native.ssm.DocumentType.Session,\n});\nexport const documentName = \"SSM-SessionManagerRunShell\";\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsession_preferences_document = aws_native.ssm.Document(\"sessionPreferencesDocument\",\n    name=\"SSM-SessionManagerRunShell\",\n    content={\n        \"schemaVersion\": \"1.0\",\n        \"description\": \"Document to hold regional settings for Session Manager\",\n        \"sessionType\": \"Standard_Stream\",\n        \"inputs\": {\n            \"s3BucketName\": \"DOC-EXAMPLE-BUCKET\",\n            \"s3KeyPrefix\": \"MyBucketPrefix\",\n            \"s3EncryptionEnabled\": True,\n            \"cloudWatchLogGroupName\": \"MyLogGroupName\",\n            \"cloudWatchEncryptionEnabled\": True,\n            \"cloudWatchStreamingEnabled\": False,\n            \"kmsKeyId\": \"MyKMSKeyID\",\n            \"runAsEnabled\": False,\n            \"runAsDefaultUser\": \"MyDefaultRunAsUser\",\n            \"idleSessionTimeout\": \"20\",\n            \"shellProfile\": {\n                \"windows\": \"example commands\",\n                \"linux\": \"example commands\",\n            },\n        },\n    },\n    document_format=aws_native.ssm.DocumentFormat.YAML,\n    document_type=aws_native.ssm.DocumentType.SESSION)\npulumi.export(\"documentName\", \"SSM-SessionManagerRunShell\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var examplePackageDocument = new AwsNative.Ssm.Document(\"examplePackageDocument\", new()\n    {\n        Content = \"{\\\"files\\\": {\\\"NewPackage_WINDOWS.zip\\\": {\\\"checksums\\\": {\\\"sha256\\\": \\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\"}}}, \\\"publisher\\\": \\\"publisherName\\\", \\\"schemaVersion\\\": \\\"2.0\\\", \\\"packages\\\": {\\\"_any\\\": {\\\"_any\\\": {\\\"x86_64\\\": {\\\"file\\\": \\\"NewPackage_WINDOWS.zip\\\"}}}}, \\\"version\\\": \\\"1.0\\\"}\",\n        DocumentType = AwsNative.Ssm.DocumentType.Package,\n        Attachments = new[]\n        {\n            new AwsNative.Ssm.Inputs.DocumentAttachmentsSourceArgs\n            {\n                Key = AwsNative.Ssm.DocumentAttachmentsSourceKey.SourceUrl,\n                Values = new[]\n                {\n                    \"s3://example-package-path/valid-package\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewDocument(ctx, \"examplePackageDocument\", \u0026ssm.DocumentArgs{\n\t\t\tContent:      pulumi.Any(\"{\\\"files\\\": {\\\"NewPackage_WINDOWS.zip\\\": {\\\"checksums\\\": {\\\"sha256\\\": \\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\"}}}, \\\"publisher\\\": \\\"publisherName\\\", \\\"schemaVersion\\\": \\\"2.0\\\", \\\"packages\\\": {\\\"_any\\\": {\\\"_any\\\": {\\\"x86_64\\\": {\\\"file\\\": \\\"NewPackage_WINDOWS.zip\\\"}}}}, \\\"version\\\": \\\"1.0\\\"}\"),\n\t\t\tDocumentType: ssm.DocumentTypePackage,\n\t\t\tAttachments: ssm.DocumentAttachmentsSourceArray{\n\t\t\t\t\u0026ssm.DocumentAttachmentsSourceArgs{\n\t\t\t\t\tKey: ssm.DocumentAttachmentsSourceKeySourceUrl,\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"s3://example-package-path/valid-package\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst examplePackageDocument = new aws_native.ssm.Document(\"examplePackageDocument\", {\n    content: \"{\\\"files\\\": {\\\"NewPackage_WINDOWS.zip\\\": {\\\"checksums\\\": {\\\"sha256\\\": \\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\"}}}, \\\"publisher\\\": \\\"publisherName\\\", \\\"schemaVersion\\\": \\\"2.0\\\", \\\"packages\\\": {\\\"_any\\\": {\\\"_any\\\": {\\\"x86_64\\\": {\\\"file\\\": \\\"NewPackage_WINDOWS.zip\\\"}}}}, \\\"version\\\": \\\"1.0\\\"}\",\n    documentType: aws_native.ssm.DocumentType.Package,\n    attachments: [{\n        key: aws_native.ssm.DocumentAttachmentsSourceKey.SourceUrl,\n        values: [\"s3://example-package-path/valid-package\"],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_package_document = aws_native.ssm.Document(\"examplePackageDocument\",\n    content=\"{\\\"files\\\": {\\\"NewPackage_WINDOWS.zip\\\": {\\\"checksums\\\": {\\\"sha256\\\": \\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\"}}}, \\\"publisher\\\": \\\"publisherName\\\", \\\"schemaVersion\\\": \\\"2.0\\\", \\\"packages\\\": {\\\"_any\\\": {\\\"_any\\\": {\\\"x86_64\\\": {\\\"file\\\": \\\"NewPackage_WINDOWS.zip\\\"}}}}, \\\"version\\\": \\\"1.0\\\"}\",\n    document_type=aws_native.ssm.DocumentType.PACKAGE,\n    attachments=[{\n        \"key\": aws_native.ssm.DocumentAttachmentsSourceKey.SOURCE_URL,\n        \"values\": [\"s3://example-package-path/valid-package\"],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var examplePackageDocument = new AwsNative.Ssm.Document(\"examplePackageDocument\", new()\n    {\n        Content = \"{\\\\\\\"files\\\\\\\": {\\\\\\\"NewPackage_WINDOWS.zip\\\\\\\": {\\\\\\\"checksums\\\\\\\": {\\\\\\\"sha256\\\\\\\": \\\\\\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\\\\\"}}}, \\\\\\\"publisher\\\\\\\": \\\\\\\"publisherName\\\\\\\", \\\\\\\"schemaVersion\\\\\\\": \\\\\\\"2.0\\\\\\\", \\\\\\\"packages\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"x86_64\\\\\\\": {\\\\\\\"file\\\\\\\": \\\\\\\"NewPackage_WINDOWS.zip\\\\\\\"}}}}, \\\\\\\"version\\\\\\\": \\\\\\\"1.0\\\\\\\"}\",\n        DocumentType = AwsNative.Ssm.DocumentType.Package,\n        Attachments = new[]\n        {\n            new AwsNative.Ssm.Inputs.DocumentAttachmentsSourceArgs\n            {\n                Key = AwsNative.Ssm.DocumentAttachmentsSourceKey.SourceUrl,\n                Values = new[]\n                {\n                    \"s3://example-package-path/valid-package\",\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewDocument(ctx, \"examplePackageDocument\", \u0026ssm.DocumentArgs{\n\t\t\tContent:      pulumi.Any(\"{\\\\\\\"files\\\\\\\": {\\\\\\\"NewPackage_WINDOWS.zip\\\\\\\": {\\\\\\\"checksums\\\\\\\": {\\\\\\\"sha256\\\\\\\": \\\\\\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\\\\\"}}}, \\\\\\\"publisher\\\\\\\": \\\\\\\"publisherName\\\\\\\", \\\\\\\"schemaVersion\\\\\\\": \\\\\\\"2.0\\\\\\\", \\\\\\\"packages\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"x86_64\\\\\\\": {\\\\\\\"file\\\\\\\": \\\\\\\"NewPackage_WINDOWS.zip\\\\\\\"}}}}, \\\\\\\"version\\\\\\\": \\\\\\\"1.0\\\\\\\"}\"),\n\t\t\tDocumentType: ssm.DocumentTypePackage,\n\t\t\tAttachments: ssm.DocumentAttachmentsSourceArray{\n\t\t\t\t\u0026ssm.DocumentAttachmentsSourceArgs{\n\t\t\t\t\tKey: ssm.DocumentAttachmentsSourceKeySourceUrl,\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"s3://example-package-path/valid-package\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst examplePackageDocument = new aws_native.ssm.Document(\"examplePackageDocument\", {\n    content: \"{\\\\\\\"files\\\\\\\": {\\\\\\\"NewPackage_WINDOWS.zip\\\\\\\": {\\\\\\\"checksums\\\\\\\": {\\\\\\\"sha256\\\\\\\": \\\\\\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\\\\\"}}}, \\\\\\\"publisher\\\\\\\": \\\\\\\"publisherName\\\\\\\", \\\\\\\"schemaVersion\\\\\\\": \\\\\\\"2.0\\\\\\\", \\\\\\\"packages\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"x86_64\\\\\\\": {\\\\\\\"file\\\\\\\": \\\\\\\"NewPackage_WINDOWS.zip\\\\\\\"}}}}, \\\\\\\"version\\\\\\\": \\\\\\\"1.0\\\\\\\"}\",\n    documentType: aws_native.ssm.DocumentType.Package,\n    attachments: [{\n        key: aws_native.ssm.DocumentAttachmentsSourceKey.SourceUrl,\n        values: [\"s3://example-package-path/valid-package\"],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_package_document = aws_native.ssm.Document(\"examplePackageDocument\",\n    content=\"{\\\\\\\"files\\\\\\\": {\\\\\\\"NewPackage_WINDOWS.zip\\\\\\\": {\\\\\\\"checksums\\\\\\\": {\\\\\\\"sha256\\\\\\\": \\\\\\\"36aeb0ec2c706013cf8c68163459678f7f6daa9489cd3f91d52799331EXAMPLE\\\\\\\"}}}, \\\\\\\"publisher\\\\\\\": \\\\\\\"publisherName\\\\\\\", \\\\\\\"schemaVersion\\\\\\\": \\\\\\\"2.0\\\\\\\", \\\\\\\"packages\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"_any\\\\\\\": {\\\\\\\"x86_64\\\\\\\": {\\\\\\\"file\\\\\\\": \\\\\\\"NewPackage_WINDOWS.zip\\\\\\\"}}}}, \\\\\\\"version\\\\\\\": \\\\\\\"1.0\\\\\\\"}\",\n    document_type=aws_native.ssm.DocumentType.PACKAGE,\n    attachments=[{\n        \"key\": aws_native.ssm.DocumentAttachmentsSourceKey.SOURCE_URL,\n        \"values\": [\"s3://example-package-path/valid-package\"],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var exampleChangeCalendarDocument = new AwsNative.Ssm.Document(\"exampleChangeCalendarDocument\", new()\n    {\n        Content = @\"BEGIN:VCALENDAR\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\r\nVERSION:2.0\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\r\nX-WR-CALDESC:test\\r\nBEGIN:VTODO\\r\nDTSTAMP:20200320T004207Z\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\r\nSUMMARY:Add events to this calendar.\\r\nEND:VTODO\\r\nEND:VCALENDAR\\r\n\",\n        DocumentType = AwsNative.Ssm.DocumentType.ChangeCalendar,\n        DocumentFormat = AwsNative.Ssm.DocumentFormat.Text,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewDocument(ctx, \"exampleChangeCalendarDocument\", \u0026ssm.DocumentArgs{\n\t\t\tContent: pulumi.Any(`BEGIN:VCALENDAR\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\r\nVERSION:2.0\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\r\nX-WR-CALDESC:test\\r\nBEGIN:VTODO\\r\nDTSTAMP:20200320T004207Z\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\r\nSUMMARY:Add events to this calendar.\\r\nEND:VTODO\\r\nEND:VCALENDAR\\r\n`),\n\t\t\tDocumentType:   ssm.DocumentTypeChangeCalendar,\n\t\t\tDocumentFormat: ssm.DocumentFormatText,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst exampleChangeCalendarDocument = new aws_native.ssm.Document(\"exampleChangeCalendarDocument\", {\n    content: `BEGIN:VCALENDAR\\\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\\\r\nVERSION:2.0\\\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\\\r\nX-WR-CALDESC:test\\\\r\nBEGIN:VTODO\\\\r\nDTSTAMP:20200320T004207Z\\\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\\\r\nSUMMARY:Add events to this calendar.\\\\r\nEND:VTODO\\\\r\nEND:VCALENDAR\\\\r\n`,\n    documentType: aws_native.ssm.DocumentType.ChangeCalendar,\n    documentFormat: aws_native.ssm.DocumentFormat.Text,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_change_calendar_document = aws_native.ssm.Document(\"exampleChangeCalendarDocument\",\n    content=\"\"\"BEGIN:VCALENDAR\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\r\nVERSION:2.0\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\r\nX-WR-CALDESC:test\\r\nBEGIN:VTODO\\r\nDTSTAMP:20200320T004207Z\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\r\nSUMMARY:Add events to this calendar.\\r\nEND:VTODO\\r\nEND:VCALENDAR\\r\n\"\"\",\n    document_type=aws_native.ssm.DocumentType.CHANGE_CALENDAR,\n    document_format=aws_native.ssm.DocumentFormat.TEXT)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var exampleChangeCalendarDocument = new AwsNative.Ssm.Document(\"exampleChangeCalendarDocument\", new()\n    {\n        Content = @\"BEGIN:VCALENDAR\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\r\nVERSION:2.0\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\r\nX-WR-CALDESC:test\\r\nBEGIN:VTODO\\r\nDTSTAMP:20200320T004207Z\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\r\nSUMMARY:Add events to this calendar.\\r\nEND:VTODO\\r\nEND:VCALENDAR\\r\n\",\n        DocumentType = AwsNative.Ssm.DocumentType.ChangeCalendar,\n        DocumentFormat = AwsNative.Ssm.DocumentFormat.Text,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewDocument(ctx, \"exampleChangeCalendarDocument\", \u0026ssm.DocumentArgs{\n\t\t\tContent: pulumi.Any(`BEGIN:VCALENDAR\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\r\nVERSION:2.0\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\r\nX-WR-CALDESC:test\\r\nBEGIN:VTODO\\r\nDTSTAMP:20200320T004207Z\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\r\nSUMMARY:Add events to this calendar.\\r\nEND:VTODO\\r\nEND:VCALENDAR\\r\n`),\n\t\t\tDocumentType:   ssm.DocumentTypeChangeCalendar,\n\t\t\tDocumentFormat: ssm.DocumentFormatText,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst exampleChangeCalendarDocument = new aws_native.ssm.Document(\"exampleChangeCalendarDocument\", {\n    content: `BEGIN:VCALENDAR\\\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\\\r\nVERSION:2.0\\\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\\\r\nX-WR-CALDESC:test\\\\r\nBEGIN:VTODO\\\\r\nDTSTAMP:20200320T004207Z\\\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\\\r\nSUMMARY:Add events to this calendar.\\\\r\nEND:VTODO\\\\r\nEND:VCALENDAR\\\\r\n`,\n    documentType: aws_native.ssm.DocumentType.ChangeCalendar,\n    documentFormat: aws_native.ssm.DocumentFormat.Text,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nexample_change_calendar_document = aws_native.ssm.Document(\"exampleChangeCalendarDocument\",\n    content=\"\"\"BEGIN:VCALENDAR\\r\nPRODID:-//AWS//Change Calendar 1.0//EN\\r\nVERSION:2.0\\r\nX-CALENDAR-TYPE:DEFAULT_OPEN\\r\nX-WR-CALDESC:test\\r\nBEGIN:VTODO\\r\nDTSTAMP:20200320T004207Z\\r\nUID:3b5af39a-d0b3-4049-a839-d7bb8af01f92\\r\nSUMMARY:Add events to this calendar.\\r\nEND:VTODO\\r\nEND:VCALENDAR\\r\n\"\"\",\n    document_type=aws_native.ssm.DocumentType.CHANGE_CALENDAR,\n    document_format=aws_native.ssm.DocumentFormat.TEXT)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"attachments":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:DocumentAttachmentsSource"},"description":"A list of key and value pairs that describe attachments to a version of a document."},"content":{"$ref":"pulumi.json#/Any","description":"The content for the Systems Manager document in JSON, YAML or String format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::Document` for more information about the expected schema for this property."},"documentFormat":{"$ref":"#/types/aws-native:ssm:DocumentFormat","description":"Specify the document format for the request. The document format can be either JSON or YAML. JSON is the default format."},"documentType":{"$ref":"#/types/aws-native:ssm:DocumentType","description":"The type of document to create.","replaceOnChanges":true},"name":{"type":"string","description":"A name for the Systems Manager document.","replaceOnChanges":true},"requires":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:DocumentRequires"},"description":"A list of SSM documents required by a document. For example, an ApplicationConfiguration document requires an ApplicationConfigurationSchema document."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment."},"targetType":{"type":"string","description":"Specify a target type to define the kinds of resources the document can run on."},"updateMethod":{"$ref":"#/types/aws-native:ssm:DocumentUpdateMethod","description":"Update method - when set to 'Replace', the update will replace the existing document; when set to 'NewVersion', the update will create a new version."},"versionName":{"type":"string","description":"An optional field specifying the version of the artifact you are creating with the document. This value is unique across all versions of a document, and cannot be changed."}},"type":"object","required":["content"],"inputProperties":{"attachments":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:DocumentAttachmentsSource"},"description":"A list of key and value pairs that describe attachments to a version of a document."},"content":{"$ref":"pulumi.json#/Any","description":"The content for the Systems Manager document in JSON, YAML or String format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::Document` for more information about the expected schema for this property."},"documentFormat":{"$ref":"#/types/aws-native:ssm:DocumentFormat","description":"Specify the document format for the request. The document format can be either JSON or YAML. JSON is the default format."},"documentType":{"$ref":"#/types/aws-native:ssm:DocumentType","description":"The type of document to create."},"name":{"type":"string","description":"A name for the Systems Manager document."},"requires":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:DocumentRequires"},"description":"A list of SSM documents required by a document. For example, an ApplicationConfiguration document requires an ApplicationConfigurationSchema document."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment."},"targetType":{"type":"string","description":"Specify a target type to define the kinds of resources the document can run on."},"updateMethod":{"$ref":"#/types/aws-native:ssm:DocumentUpdateMethod","description":"Update method - when set to 'Replace', the update will replace the existing document; when set to 'NewVersion', the update will create a new version."},"versionName":{"type":"string","description":"An optional field specifying the version of the artifact you are creating with the document. This value is unique across all versions of a document, and cannot be changed."}},"requiredInputs":["content"]},"aws-native:ssm:MaintenanceWindow":{"description":"Resource type definition for AWS::SSM::MaintenanceWindow\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var maintenanceWindow = new AwsNative.Ssm.MaintenanceWindow(\"maintenanceWindow\", new()\n    {\n        AllowUnassociatedTargets = false,\n        Cutoff = 1,\n        Description = \"Maintenance Window to update SSM Agent\",\n        Duration = 2,\n        Name = \"UpdateSSMAgentMaintenanceWindow\",\n        Schedule = \"cron(0 4 ? * SUN *)\",\n        ScheduleTimezone = \"US/Eastern\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewMaintenanceWindow(ctx, \"maintenanceWindow\", \u0026ssm.MaintenanceWindowArgs{\n\t\t\tAllowUnassociatedTargets: pulumi.Bool(false),\n\t\t\tCutoff:                   pulumi.Int(1),\n\t\t\tDescription:              pulumi.String(\"Maintenance Window to update SSM Agent\"),\n\t\t\tDuration:                 pulumi.Int(2),\n\t\t\tName:                     pulumi.String(\"UpdateSSMAgentMaintenanceWindow\"),\n\t\t\tSchedule:                 pulumi.String(\"cron(0 4 ? * SUN *)\"),\n\t\t\tScheduleTimezone:         pulumi.String(\"US/Eastern\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst maintenanceWindow = new aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\", {\n    allowUnassociatedTargets: false,\n    cutoff: 1,\n    description: \"Maintenance Window to update SSM Agent\",\n    duration: 2,\n    name: \"UpdateSSMAgentMaintenanceWindow\",\n    schedule: \"cron(0 4 ? * SUN *)\",\n    scheduleTimezone: \"US/Eastern\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmaintenance_window = aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\",\n    allow_unassociated_targets=False,\n    cutoff=1,\n    description=\"Maintenance Window to update SSM Agent\",\n    duration=2,\n    name=\"UpdateSSMAgentMaintenanceWindow\",\n    schedule=\"cron(0 4 ? * SUN *)\",\n    schedule_timezone=\"US/Eastern\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var maintenanceWindow = new AwsNative.Ssm.MaintenanceWindow(\"maintenanceWindow\", new()\n    {\n        AllowUnassociatedTargets = false,\n        Cutoff = 1,\n        Description = \"Maintenance Window to update SSM Agent\",\n        Duration = 2,\n        Name = \"UpdateSSMAgentMaintenanceWindow\",\n        Schedule = \"cron(0 4 ? * SUN *)\",\n        ScheduleTimezone = \"US/Eastern\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewMaintenanceWindow(ctx, \"maintenanceWindow\", \u0026ssm.MaintenanceWindowArgs{\n\t\t\tAllowUnassociatedTargets: pulumi.Bool(false),\n\t\t\tCutoff:                   pulumi.Int(1),\n\t\t\tDescription:              pulumi.String(\"Maintenance Window to update SSM Agent\"),\n\t\t\tDuration:                 pulumi.Int(2),\n\t\t\tName:                     pulumi.String(\"UpdateSSMAgentMaintenanceWindow\"),\n\t\t\tSchedule:                 pulumi.String(\"cron(0 4 ? * SUN *)\"),\n\t\t\tScheduleTimezone:         pulumi.String(\"US/Eastern\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst maintenanceWindow = new aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\", {\n    allowUnassociatedTargets: false,\n    cutoff: 1,\n    description: \"Maintenance Window to update SSM Agent\",\n    duration: 2,\n    name: \"UpdateSSMAgentMaintenanceWindow\",\n    schedule: \"cron(0 4 ? * SUN *)\",\n    scheduleTimezone: \"US/Eastern\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmaintenance_window = aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\",\n    allow_unassociated_targets=False,\n    cutoff=1,\n    description=\"Maintenance Window to update SSM Agent\",\n    duration=2,\n    name=\"UpdateSSMAgentMaintenanceWindow\",\n    schedule=\"cron(0 4 ? * SUN *)\",\n    schedule_timezone=\"US/Eastern\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"allowUnassociatedTargets":{"type":"boolean","description":"Enables a maintenance window task to run on managed instances, even if you have not registered those instances as targets. If enabled, then you must specify the unregistered instances (by instance ID) when you register a task with the maintenance window."},"cutoff":{"type":"integer","description":"The number of hours before the end of the maintenance window that AWS Systems Manager stops scheduling new tasks for execution."},"description":{"type":"string","description":"A description of the maintenance window."},"duration":{"type":"integer","description":"The duration of the maintenance window in hours."},"endDate":{"type":"string","description":"The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become inactive."},"name":{"type":"string","description":"The name of the maintenance window."},"schedule":{"type":"string","description":"The schedule of the maintenance window in the form of a cron or rate expression."},"scheduleOffset":{"type":"integer","description":"The number of days to wait to run a maintenance window after the scheduled cron expression date and time."},"scheduleTimezone":{"type":"string","description":"The time zone that the scheduled maintenance window executions are based on, in Internet Assigned Numbers Authority (IANA) format."},"startDate":{"type":"string","description":"The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become active. StartDate allows you to delay activation of the maintenance window until the specified future date."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata that you assign to a resource in the form of an arbitrary set of tags (key-value pairs). Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a maintenance window to identify the type of tasks it will run, the types of targets, and the environment it will run in."},"windowId":{"type":"string","description":"The ID of the maintenance window."}},"type":"object","required":["allowUnassociatedTargets","cutoff","duration","name","schedule","windowId"],"inputProperties":{"allowUnassociatedTargets":{"type":"boolean","description":"Enables a maintenance window task to run on managed instances, even if you have not registered those instances as targets. If enabled, then you must specify the unregistered instances (by instance ID) when you register a task with the maintenance window."},"cutoff":{"type":"integer","description":"The number of hours before the end of the maintenance window that AWS Systems Manager stops scheduling new tasks for execution."},"description":{"type":"string","description":"A description of the maintenance window."},"duration":{"type":"integer","description":"The duration of the maintenance window in hours."},"endDate":{"type":"string","description":"The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become inactive."},"name":{"type":"string","description":"The name of the maintenance window."},"schedule":{"type":"string","description":"The schedule of the maintenance window in the form of a cron or rate expression."},"scheduleOffset":{"type":"integer","description":"The number of days to wait to run a maintenance window after the scheduled cron expression date and time."},"scheduleTimezone":{"type":"string","description":"The time zone that the scheduled maintenance window executions are based on, in Internet Assigned Numbers Authority (IANA) format."},"startDate":{"type":"string","description":"The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become active. StartDate allows you to delay activation of the maintenance window until the specified future date."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata that you assign to a resource in the form of an arbitrary set of tags (key-value pairs). Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a maintenance window to identify the type of tasks it will run, the types of targets, and the environment it will run in."}},"requiredInputs":["allowUnassociatedTargets","cutoff","duration","schedule"]},"aws-native:ssm:MaintenanceWindowTarget":{"description":"Resource type definition for AWS::SSM::MaintenanceWindowTarget","properties":{"description":{"type":"string","description":"A description for the target."},"name":{"type":"string","description":"The name for the maintenance window target."},"ownerInformation":{"type":"string","description":"A user-provided value that will be included in any Amazon CloudWatch Events events that are raised while running tasks for these targets in this maintenance window."},"resourceType":{"type":"string","description":"The type of target that is being registered with the maintenance window."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTargetTargets"},"description":"The targets to register with the maintenance window."},"windowId":{"type":"string","description":"The ID of the maintenance window to register the target with.","replaceOnChanges":true},"windowTargetId":{"type":"string","description":"The ID of the target."}},"type":"object","required":["resourceType","targets","windowId","windowTargetId"],"inputProperties":{"description":{"type":"string","description":"A description for the target."},"name":{"type":"string","description":"The name for the maintenance window target."},"ownerInformation":{"type":"string","description":"A user-provided value that will be included in any Amazon CloudWatch Events events that are raised while running tasks for these targets in this maintenance window."},"resourceType":{"type":"string","description":"The type of target that is being registered with the maintenance window."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTargetTargets"},"description":"The targets to register with the maintenance window."},"windowId":{"type":"string","description":"The ID of the maintenance window to register the target with."}},"requiredInputs":["resourceType","targets","windowId"]},"aws-native:ssm:MaintenanceWindowTask":{"description":"Resource Type definition for AWS::SSM::MaintenanceWindowTask\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var maintenanceWindow = new AwsNative.Ssm.MaintenanceWindow(\"maintenanceWindow\", new()\n    {\n        Name = \"MaintenanceWindow\",\n        AllowUnassociatedTargets = true,\n        Cutoff = 0,\n        Description = \"Maintenance window for instances\",\n        Duration = 1,\n        Schedule = \"cron(20 17 ? * MON-FRI *)\",\n    });\n\n    var maintenanceWindowTarget = new AwsNative.Ssm.MaintenanceWindowTarget(\"maintenanceWindowTarget\", new()\n    {\n        ResourceType = \"RESOURCE_GROUP\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.MaintenanceWindowTargetTargetsArgs\n            {\n                Key = \"resource-groups:Name\",\n                Values = new[]\n                {\n                    \"TestResourceGroup\",\n                },\n            },\n        },\n        WindowId = maintenanceWindow.Id,\n    });\n\n    var patchTask = new AwsNative.Ssm.MaintenanceWindowTask(\"patchTask\", new()\n    {\n        Description = \"Apply OS patches on instances in target\",\n        MaxConcurrency = \"1\",\n        MaxErrors = \"1\",\n        Priority = 0,\n        TaskType = \"RUN_COMMAND\",\n        WindowId = maintenanceWindow.Id,\n        TaskArn = \"AWS-RunPatchBaseline\",\n        TaskInvocationParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskTaskInvocationParametersArgs\n        {\n            MaintenanceWindowRunCommandParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskMaintenanceWindowRunCommandParametersArgs\n            {\n                Parameters = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"operation\"] = new[]\n                    {\n                        \"Install\",\n                    },\n                    [\"rebootOption\"] = new[]\n                    {\n                        \"NoReboot\",\n                    },\n                },\n            },\n        },\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.MaintenanceWindowTaskTargetArgs\n            {\n                Key = \"WindowTargetIds\",\n                Values = new[]\n                {\n                    maintenanceWindowTarget.Id,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmaintenanceWindow, err := ssm.NewMaintenanceWindow(ctx, \"maintenanceWindow\", \u0026ssm.MaintenanceWindowArgs{\n\t\t\tName:                     pulumi.String(\"MaintenanceWindow\"),\n\t\t\tAllowUnassociatedTargets: pulumi.Bool(true),\n\t\t\tCutoff:                   pulumi.Int(0),\n\t\t\tDescription:              pulumi.String(\"Maintenance window for instances\"),\n\t\t\tDuration:                 pulumi.Int(1),\n\t\t\tSchedule:                 pulumi.String(\"cron(20 17 ? * MON-FRI *)\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmaintenanceWindowTarget, err := ssm.NewMaintenanceWindowTarget(ctx, \"maintenanceWindowTarget\", \u0026ssm.MaintenanceWindowTargetArgs{\n\t\t\tResourceType: pulumi.String(\"RESOURCE_GROUP\"),\n\t\t\tTargets: ssm.MaintenanceWindowTargetTargetsArray{\n\t\t\t\t\u0026ssm.MaintenanceWindowTargetTargetsArgs{\n\t\t\t\t\tKey: pulumi.String(\"resource-groups:Name\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"TestResourceGroup\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tWindowId: maintenanceWindow.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewMaintenanceWindowTask(ctx, \"patchTask\", \u0026ssm.MaintenanceWindowTaskArgs{\n\t\t\tDescription:    pulumi.String(\"Apply OS patches on instances in target\"),\n\t\t\tMaxConcurrency: pulumi.String(\"1\"),\n\t\t\tMaxErrors:      pulumi.String(\"1\"),\n\t\t\tPriority:       pulumi.Int(0),\n\t\t\tTaskType:       pulumi.String(\"RUN_COMMAND\"),\n\t\t\tWindowId:       maintenanceWindow.ID(),\n\t\t\tTaskArn:        pulumi.String(\"AWS-RunPatchBaseline\"),\n\t\t\tTaskInvocationParameters: \u0026ssm.MaintenanceWindowTaskTaskInvocationParametersArgs{\n\t\t\t\tMaintenanceWindowRunCommandParameters: \u0026ssm.MaintenanceWindowTaskMaintenanceWindowRunCommandParametersArgs{\n\t\t\t\t\tParameters: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"operation\": []string{\n\t\t\t\t\t\t\t\"Install\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rebootOption\": []string{\n\t\t\t\t\t\t\t\"NoReboot\",\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTargets: ssm.MaintenanceWindowTaskTargetArray{\n\t\t\t\t\u0026ssm.MaintenanceWindowTaskTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"WindowTargetIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tmaintenanceWindowTarget.ID(),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst maintenanceWindow = new aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\", {\n    name: \"MaintenanceWindow\",\n    allowUnassociatedTargets: true,\n    cutoff: 0,\n    description: \"Maintenance window for instances\",\n    duration: 1,\n    schedule: \"cron(20 17 ? * MON-FRI *)\",\n});\nconst maintenanceWindowTarget = new aws_native.ssm.MaintenanceWindowTarget(\"maintenanceWindowTarget\", {\n    resourceType: \"RESOURCE_GROUP\",\n    targets: [{\n        key: \"resource-groups:Name\",\n        values: [\"TestResourceGroup\"],\n    }],\n    windowId: maintenanceWindow.id,\n});\nconst patchTask = new aws_native.ssm.MaintenanceWindowTask(\"patchTask\", {\n    description: \"Apply OS patches on instances in target\",\n    maxConcurrency: \"1\",\n    maxErrors: \"1\",\n    priority: 0,\n    taskType: \"RUN_COMMAND\",\n    windowId: maintenanceWindow.id,\n    taskArn: \"AWS-RunPatchBaseline\",\n    taskInvocationParameters: {\n        maintenanceWindowRunCommandParameters: {\n            parameters: {\n                operation: [\"Install\"],\n                rebootOption: [\"NoReboot\"],\n            },\n        },\n    },\n    targets: [{\n        key: \"WindowTargetIds\",\n        values: [maintenanceWindowTarget.id],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmaintenance_window = aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\",\n    name=\"MaintenanceWindow\",\n    allow_unassociated_targets=True,\n    cutoff=0,\n    description=\"Maintenance window for instances\",\n    duration=1,\n    schedule=\"cron(20 17 ? * MON-FRI *)\")\nmaintenance_window_target = aws_native.ssm.MaintenanceWindowTarget(\"maintenanceWindowTarget\",\n    resource_type=\"RESOURCE_GROUP\",\n    targets=[{\n        \"key\": \"resource-groups:Name\",\n        \"values\": [\"TestResourceGroup\"],\n    }],\n    window_id=maintenance_window.id)\npatch_task = aws_native.ssm.MaintenanceWindowTask(\"patchTask\",\n    description=\"Apply OS patches on instances in target\",\n    max_concurrency=\"1\",\n    max_errors=\"1\",\n    priority=0,\n    task_type=\"RUN_COMMAND\",\n    window_id=maintenance_window.id,\n    task_arn=\"AWS-RunPatchBaseline\",\n    task_invocation_parameters={\n        \"maintenance_window_run_command_parameters\": {\n            \"parameters\": {\n                \"operation\": [\"Install\"],\n                \"rebootOption\": [\"NoReboot\"],\n            },\n        },\n    },\n    targets=[{\n        \"key\": \"WindowTargetIds\",\n        \"values\": [maintenance_window_target.id],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var maintenanceWindow = new AwsNative.Ssm.MaintenanceWindow(\"maintenanceWindow\", new()\n    {\n        Name = \"MaintenanceWindow\",\n        AllowUnassociatedTargets = true,\n        Cutoff = 0,\n        Description = \"Maintenance window for instances\",\n        Duration = 1,\n        Schedule = \"cron(20 17 ? * MON-FRI *)\",\n    });\n\n    var maintenanceWindowTarget = new AwsNative.Ssm.MaintenanceWindowTarget(\"maintenanceWindowTarget\", new()\n    {\n        ResourceType = \"RESOURCE_GROUP\",\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.MaintenanceWindowTargetTargetsArgs\n            {\n                Key = \"resource-groups:Name\",\n                Values = new[]\n                {\n                    \"TestResourceGroup\",\n                },\n            },\n        },\n        WindowId = maintenanceWindow.Id,\n    });\n\n    var patchTask = new AwsNative.Ssm.MaintenanceWindowTask(\"patchTask\", new()\n    {\n        Description = \"Apply OS patches on instances in target\",\n        MaxConcurrency = \"1\",\n        MaxErrors = \"1\",\n        Priority = 0,\n        TaskType = \"RUN_COMMAND\",\n        WindowId = maintenanceWindow.Id,\n        TaskArn = \"AWS-RunPatchBaseline\",\n        TaskInvocationParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskTaskInvocationParametersArgs\n        {\n            MaintenanceWindowRunCommandParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskMaintenanceWindowRunCommandParametersArgs\n            {\n                Parameters = new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"operation\"] = new[]\n                    {\n                        \"Install\",\n                    },\n                    [\"rebootOption\"] = new[]\n                    {\n                        \"NoReboot\",\n                    },\n                },\n            },\n        },\n        Targets = new[]\n        {\n            new AwsNative.Ssm.Inputs.MaintenanceWindowTaskTargetArgs\n            {\n                Key = \"WindowTargetIds\",\n                Values = new[]\n                {\n                    maintenanceWindowTarget.Id,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tmaintenanceWindow, err := ssm.NewMaintenanceWindow(ctx, \"maintenanceWindow\", \u0026ssm.MaintenanceWindowArgs{\n\t\t\tName:                     pulumi.String(\"MaintenanceWindow\"),\n\t\t\tAllowUnassociatedTargets: pulumi.Bool(true),\n\t\t\tCutoff:                   pulumi.Int(0),\n\t\t\tDescription:              pulumi.String(\"Maintenance window for instances\"),\n\t\t\tDuration:                 pulumi.Int(1),\n\t\t\tSchedule:                 pulumi.String(\"cron(20 17 ? * MON-FRI *)\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tmaintenanceWindowTarget, err := ssm.NewMaintenanceWindowTarget(ctx, \"maintenanceWindowTarget\", \u0026ssm.MaintenanceWindowTargetArgs{\n\t\t\tResourceType: pulumi.String(\"RESOURCE_GROUP\"),\n\t\t\tTargets: ssm.MaintenanceWindowTargetTargetsArray{\n\t\t\t\t\u0026ssm.MaintenanceWindowTargetTargetsArgs{\n\t\t\t\t\tKey: pulumi.String(\"resource-groups:Name\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"TestResourceGroup\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tWindowId: maintenanceWindow.ID(),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = ssm.NewMaintenanceWindowTask(ctx, \"patchTask\", \u0026ssm.MaintenanceWindowTaskArgs{\n\t\t\tDescription:    pulumi.String(\"Apply OS patches on instances in target\"),\n\t\t\tMaxConcurrency: pulumi.String(\"1\"),\n\t\t\tMaxErrors:      pulumi.String(\"1\"),\n\t\t\tPriority:       pulumi.Int(0),\n\t\t\tTaskType:       pulumi.String(\"RUN_COMMAND\"),\n\t\t\tWindowId:       maintenanceWindow.ID(),\n\t\t\tTaskArn:        pulumi.String(\"AWS-RunPatchBaseline\"),\n\t\t\tTaskInvocationParameters: \u0026ssm.MaintenanceWindowTaskTaskInvocationParametersArgs{\n\t\t\t\tMaintenanceWindowRunCommandParameters: \u0026ssm.MaintenanceWindowTaskMaintenanceWindowRunCommandParametersArgs{\n\t\t\t\t\tParameters: pulumi.Any(map[string]interface{}{\n\t\t\t\t\t\t\"operation\": []string{\n\t\t\t\t\t\t\t\"Install\",\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rebootOption\": []string{\n\t\t\t\t\t\t\t\"NoReboot\",\n\t\t\t\t\t\t},\n\t\t\t\t\t}),\n\t\t\t\t},\n\t\t\t},\n\t\t\tTargets: ssm.MaintenanceWindowTaskTargetArray{\n\t\t\t\t\u0026ssm.MaintenanceWindowTaskTargetArgs{\n\t\t\t\t\tKey: pulumi.String(\"WindowTargetIds\"),\n\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\tmaintenanceWindowTarget.ID(),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst maintenanceWindow = new aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\", {\n    name: \"MaintenanceWindow\",\n    allowUnassociatedTargets: true,\n    cutoff: 0,\n    description: \"Maintenance window for instances\",\n    duration: 1,\n    schedule: \"cron(20 17 ? * MON-FRI *)\",\n});\nconst maintenanceWindowTarget = new aws_native.ssm.MaintenanceWindowTarget(\"maintenanceWindowTarget\", {\n    resourceType: \"RESOURCE_GROUP\",\n    targets: [{\n        key: \"resource-groups:Name\",\n        values: [\"TestResourceGroup\"],\n    }],\n    windowId: maintenanceWindow.id,\n});\nconst patchTask = new aws_native.ssm.MaintenanceWindowTask(\"patchTask\", {\n    description: \"Apply OS patches on instances in target\",\n    maxConcurrency: \"1\",\n    maxErrors: \"1\",\n    priority: 0,\n    taskType: \"RUN_COMMAND\",\n    windowId: maintenanceWindow.id,\n    taskArn: \"AWS-RunPatchBaseline\",\n    taskInvocationParameters: {\n        maintenanceWindowRunCommandParameters: {\n            parameters: {\n                operation: [\"Install\"],\n                rebootOption: [\"NoReboot\"],\n            },\n        },\n    },\n    targets: [{\n        key: \"WindowTargetIds\",\n        values: [maintenanceWindowTarget.id],\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmaintenance_window = aws_native.ssm.MaintenanceWindow(\"maintenanceWindow\",\n    name=\"MaintenanceWindow\",\n    allow_unassociated_targets=True,\n    cutoff=0,\n    description=\"Maintenance window for instances\",\n    duration=1,\n    schedule=\"cron(20 17 ? * MON-FRI *)\")\nmaintenance_window_target = aws_native.ssm.MaintenanceWindowTarget(\"maintenanceWindowTarget\",\n    resource_type=\"RESOURCE_GROUP\",\n    targets=[{\n        \"key\": \"resource-groups:Name\",\n        \"values\": [\"TestResourceGroup\"],\n    }],\n    window_id=maintenance_window.id)\npatch_task = aws_native.ssm.MaintenanceWindowTask(\"patchTask\",\n    description=\"Apply OS patches on instances in target\",\n    max_concurrency=\"1\",\n    max_errors=\"1\",\n    priority=0,\n    task_type=\"RUN_COMMAND\",\n    window_id=maintenance_window.id,\n    task_arn=\"AWS-RunPatchBaseline\",\n    task_invocation_parameters={\n        \"maintenance_window_run_command_parameters\": {\n            \"parameters\": {\n                \"operation\": [\"Install\"],\n                \"rebootOption\": [\"NoReboot\"],\n            },\n        },\n    },\n    targets=[{\n        \"key\": \"WindowTargetIds\",\n        \"values\": [maintenance_window_target.id],\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var lambdaTask = new AwsNative.Ssm.MaintenanceWindowTask(\"lambdaTask\", new()\n    {\n        WindowId = \"mw-04fd6f19dfEXAMPLE\",\n        TaskArn = \"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\",\n        ServiceRoleArn = \"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\",\n        TaskType = \"LAMBDA\",\n        TaskInvocationParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskTaskInvocationParametersArgs\n        {\n            MaintenanceWindowLambdaParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskMaintenanceWindowLambdaParametersArgs\n            {\n                ClientContext = \"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\",\n                Qualifier = \"$LATEST\",\n                Payload = \"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\",\n            },\n        },\n        Priority = 1,\n        Name = \"UpdateLambdaTaskEXAMPLE\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewMaintenanceWindowTask(ctx, \"lambdaTask\", \u0026ssm.MaintenanceWindowTaskArgs{\n\t\t\tWindowId:       pulumi.String(\"mw-04fd6f19dfEXAMPLE\"),\n\t\t\tTaskArn:        pulumi.String(\"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\"),\n\t\t\tServiceRoleArn: pulumi.String(\"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\"),\n\t\t\tTaskType:       pulumi.String(\"LAMBDA\"),\n\t\t\tTaskInvocationParameters: \u0026ssm.MaintenanceWindowTaskTaskInvocationParametersArgs{\n\t\t\t\tMaintenanceWindowLambdaParameters: \u0026ssm.MaintenanceWindowTaskMaintenanceWindowLambdaParametersArgs{\n\t\t\t\t\tClientContext: pulumi.String(\"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\"),\n\t\t\t\t\tQualifier:     pulumi.String(\"$LATEST\"),\n\t\t\t\t\tPayload:       pulumi.String(\"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPriority: pulumi.Int(1),\n\t\t\tName:     pulumi.String(\"UpdateLambdaTaskEXAMPLE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst lambdaTask = new aws_native.ssm.MaintenanceWindowTask(\"lambdaTask\", {\n    windowId: \"mw-04fd6f19dfEXAMPLE\",\n    taskArn: \"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\",\n    serviceRoleArn: \"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\",\n    taskType: \"LAMBDA\",\n    taskInvocationParameters: {\n        maintenanceWindowLambdaParameters: {\n            clientContext: \"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\",\n            qualifier: \"$LATEST\",\n            payload: \"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\",\n        },\n    },\n    priority: 1,\n    name: \"UpdateLambdaTaskEXAMPLE\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlambda_task = aws_native.ssm.MaintenanceWindowTask(\"lambdaTask\",\n    window_id=\"mw-04fd6f19dfEXAMPLE\",\n    task_arn=\"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\",\n    service_role_arn=\"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\",\n    task_type=\"LAMBDA\",\n    task_invocation_parameters={\n        \"maintenance_window_lambda_parameters\": {\n            \"client_context\": \"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\",\n            \"qualifier\": \"$LATEST\",\n            \"payload\": \"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\",\n        },\n    },\n    priority=1,\n    name=\"UpdateLambdaTaskEXAMPLE\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var lambdaTask = new AwsNative.Ssm.MaintenanceWindowTask(\"lambdaTask\", new()\n    {\n        WindowId = \"mw-04fd6f19dfEXAMPLE\",\n        TaskArn = \"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\",\n        ServiceRoleArn = \"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\",\n        TaskType = \"LAMBDA\",\n        TaskInvocationParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskTaskInvocationParametersArgs\n        {\n            MaintenanceWindowLambdaParameters = new AwsNative.Ssm.Inputs.MaintenanceWindowTaskMaintenanceWindowLambdaParametersArgs\n            {\n                ClientContext = \"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\",\n                Qualifier = \"$LATEST\",\n                Payload = \"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\",\n            },\n        },\n        Priority = 1,\n        Name = \"UpdateLambdaTaskEXAMPLE\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewMaintenanceWindowTask(ctx, \"lambdaTask\", \u0026ssm.MaintenanceWindowTaskArgs{\n\t\t\tWindowId:       pulumi.String(\"mw-04fd6f19dfEXAMPLE\"),\n\t\t\tTaskArn:        pulumi.String(\"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\"),\n\t\t\tServiceRoleArn: pulumi.String(\"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\"),\n\t\t\tTaskType:       pulumi.String(\"LAMBDA\"),\n\t\t\tTaskInvocationParameters: \u0026ssm.MaintenanceWindowTaskTaskInvocationParametersArgs{\n\t\t\t\tMaintenanceWindowLambdaParameters: \u0026ssm.MaintenanceWindowTaskMaintenanceWindowLambdaParametersArgs{\n\t\t\t\t\tClientContext: pulumi.String(\"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\"),\n\t\t\t\t\tQualifier:     pulumi.String(\"$LATEST\"),\n\t\t\t\t\tPayload:       pulumi.String(\"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tPriority: pulumi.Int(1),\n\t\t\tName:     pulumi.String(\"UpdateLambdaTaskEXAMPLE\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst lambdaTask = new aws_native.ssm.MaintenanceWindowTask(\"lambdaTask\", {\n    windowId: \"mw-04fd6f19dfEXAMPLE\",\n    taskArn: \"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\",\n    serviceRoleArn: \"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\",\n    taskType: \"LAMBDA\",\n    taskInvocationParameters: {\n        maintenanceWindowLambdaParameters: {\n            clientContext: \"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\",\n            qualifier: \"$LATEST\",\n            payload: \"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\",\n        },\n    },\n    priority: 1,\n    name: \"UpdateLambdaTaskEXAMPLE\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nlambda_task = aws_native.ssm.MaintenanceWindowTask(\"lambdaTask\",\n    window_id=\"mw-04fd6f19dfEXAMPLE\",\n    task_arn=\"arn:aws:lambda:us-east-2:111222333444:function:MyLambdaTaskArn\",\n    service_role_arn=\"arn:aws:iam::111222333444:role/aws-service-role/ssm.amazonaws.com/AWSServiceRoleForAmazonSSM\",\n    task_type=\"LAMBDA\",\n    task_invocation_parameters={\n        \"maintenance_window_lambda_parameters\": {\n            \"client_context\": \"eyJ0ZXN0Q29udGV4dCI6Ik5vdGhp==trucated==EXAMPLE\",\n            \"qualifier\": \"$LATEST\",\n            \"payload\": \"eyJJbnN0YW5jZUlkIjoie3tSRVNPVVJDRV9JRH19IiwidGFyZ2V0VHlwZSI6Int7VEFSR0VUX1RZUEV9fSJ9\",\n        },\n    },\n    priority=1,\n    name=\"UpdateLambdaTaskEXAMPLE\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"cutoffBehavior":{"type":"string","description":"The specification for whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached."},"description":{"type":"string","description":"A description of the task."},"loggingInfo":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskLoggingInfo","description":"Information about an Amazon S3 bucket to write Run Command task-level logs to."},"maxConcurrency":{"type":"string","description":"The maximum number of targets this task can be run for, in parallel."},"maxErrors":{"type":"string","description":"The maximum number of errors allowed before this task stops being scheduled."},"name":{"type":"string","description":"The task name."},"priority":{"type":"integer","description":"The priority of the task in the maintenance window. The lower the number, the higher the priority. Tasks that have the same priority are scheduled in parallel."},"serviceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskTarget"},"description":"The targets (either instances or window target ids)."},"taskArn":{"type":"string","description":"The resource that the task uses during execution."},"taskInvocationParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskTaskInvocationParameters","description":"The parameters to pass to the task when it runs. Populate only the fields that match the task type. All other fields should be empty."},"taskParameters":{"$ref":"pulumi.json#/Any","description":"The parameters to pass to the task when it runs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::MaintenanceWindowTask` for more information about the expected schema for this property."},"taskType":{"type":"string","description":"The type of task.","replaceOnChanges":true},"windowId":{"type":"string","description":"The ID of the maintenance window where the task is registered.","replaceOnChanges":true},"windowTaskId":{"type":"string","description":"Unique identifier of the maintenance window task."}},"type":"object","required":["priority","taskArn","taskType","windowId","windowTaskId"],"inputProperties":{"cutoffBehavior":{"type":"string","description":"The specification for whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached."},"description":{"type":"string","description":"A description of the task."},"loggingInfo":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskLoggingInfo","description":"Information about an Amazon S3 bucket to write Run Command task-level logs to."},"maxConcurrency":{"type":"string","description":"The maximum number of targets this task can be run for, in parallel."},"maxErrors":{"type":"string","description":"The maximum number of errors allowed before this task stops being scheduled."},"name":{"type":"string","description":"The task name."},"priority":{"type":"integer","description":"The priority of the task in the maintenance window. The lower the number, the higher the priority. Tasks that have the same priority are scheduled in parallel."},"serviceRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskTarget"},"description":"The targets (either instances or window target ids)."},"taskArn":{"type":"string","description":"The resource that the task uses during execution."},"taskInvocationParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskTaskInvocationParameters","description":"The parameters to pass to the task when it runs. Populate only the fields that match the task type. All other fields should be empty."},"taskParameters":{"$ref":"pulumi.json#/Any","description":"The parameters to pass to the task when it runs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::MaintenanceWindowTask` for more information about the expected schema for this property."},"taskType":{"type":"string","description":"The type of task."},"windowId":{"type":"string","description":"The ID of the maintenance window where the task is registered."}},"requiredInputs":["priority","taskArn","taskType","windowId"]},"aws-native:ssm:Parameter":{"description":"The ``AWS::SSM::Parameter`` resource creates an SSM parameter in SYSlong Parameter Store.\n  To create an SSM parameter, you must have the IAMlong (IAM) permissions ``ssm:PutParameter`` and ``ssm:AddTagsToResource``. On stack creation, CFNlong adds the following three tags to the parameter: ``aws:cloudformation:stack-name``, ``aws:cloudformation:logical-id``, and ``aws:cloudformation:stack-id``, in addition to any custom tags you specify.\n To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource``. For more information, see [Managing access using policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the *User Guide*.\n  For information about valid values for parameters, see [About requirements and constraints for parameter names](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints) in the *User Guide* and [PutParameter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html) in the *API Reference*.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicParameter = new AwsNative.Ssm.Parameter(\"basicParameter\", new()\n    {\n        Name = \"command\",\n        Type = AwsNative.Ssm.ParameterType.String,\n        Value = \"date\",\n        Description = \"SSM Parameter for running date command.\",\n        AllowedPattern = \"^[a-zA-Z]{1,10}$\",\n        Tags = \n        {\n            { \"environment\", \"DEV\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewParameter(ctx, \"basicParameter\", \u0026ssm.ParameterArgs{\n\t\t\tName:           pulumi.String(\"command\"),\n\t\t\tType:           ssm.ParameterTypeString,\n\t\t\tValue:          pulumi.String(\"date\"),\n\t\t\tDescription:    pulumi.String(\"SSM Parameter for running date command.\"),\n\t\t\tAllowedPattern: pulumi.String(\"^[a-zA-Z]{1,10}$\"),\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"environment\": pulumi.String(\"DEV\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicParameter = new aws_native.ssm.Parameter(\"basicParameter\", {\n    name: \"command\",\n    type: aws_native.ssm.ParameterType.String,\n    value: \"date\",\n    description: \"SSM Parameter for running date command.\",\n    allowedPattern: \"^[a-zA-Z]{1,10}$\",\n    tags: {\n        environment: \"DEV\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_parameter = aws_native.ssm.Parameter(\"basicParameter\",\n    name=\"command\",\n    type=aws_native.ssm.ParameterType.STRING,\n    value=\"date\",\n    description=\"SSM Parameter for running date command.\",\n    allowed_pattern=\"^[a-zA-Z]{1,10}$\",\n    tags={\n        \"environment\": \"DEV\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicParameter = new AwsNative.Ssm.Parameter(\"basicParameter\", new()\n    {\n        Name = \"command\",\n        Type = AwsNative.Ssm.ParameterType.String,\n        Value = \"date\",\n        Description = \"SSM Parameter for running date command.\",\n        AllowedPattern = \"^[a-zA-Z]{1,10}$\",\n        Tags = \n        {\n            { \"environment\", \"DEV\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewParameter(ctx, \"basicParameter\", \u0026ssm.ParameterArgs{\n\t\t\tName:           pulumi.String(\"command\"),\n\t\t\tType:           ssm.ParameterTypeString,\n\t\t\tValue:          pulumi.String(\"date\"),\n\t\t\tDescription:    pulumi.String(\"SSM Parameter for running date command.\"),\n\t\t\tAllowedPattern: pulumi.String(\"^[a-zA-Z]{1,10}$\"),\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"environment\": pulumi.String(\"DEV\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicParameter = new aws_native.ssm.Parameter(\"basicParameter\", {\n    name: \"command\",\n    type: aws_native.ssm.ParameterType.String,\n    value: \"date\",\n    description: \"SSM Parameter for running date command.\",\n    allowedPattern: \"^[a-zA-Z]{1,10}$\",\n    tags: {\n        environment: \"DEV\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_parameter = aws_native.ssm.Parameter(\"basicParameter\",\n    name=\"command\",\n    type=aws_native.ssm.ParameterType.STRING,\n    value=\"date\",\n    description=\"SSM Parameter for running date command.\",\n    allowed_pattern=\"^[a-zA-Z]{1,10}$\",\n    tags={\n        \"environment\": \"DEV\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicParameter = new AwsNative.Ssm.Parameter(\"basicParameter\", new()\n    {\n        Name = \"commands\",\n        Type = AwsNative.Ssm.ParameterType.StringList,\n        Value = \"date,ls\",\n        Description = \"SSM Parameter of type StringList.\",\n        AllowedPattern = \"^[a-zA-Z]{1,10}$\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewParameter(ctx, \"basicParameter\", \u0026ssm.ParameterArgs{\n\t\t\tName:           pulumi.String(\"commands\"),\n\t\t\tType:           ssm.ParameterTypeStringList,\n\t\t\tValue:          pulumi.String(\"date,ls\"),\n\t\t\tDescription:    pulumi.String(\"SSM Parameter of type StringList.\"),\n\t\t\tAllowedPattern: pulumi.String(\"^[a-zA-Z]{1,10}$\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicParameter = new aws_native.ssm.Parameter(\"basicParameter\", {\n    name: \"commands\",\n    type: aws_native.ssm.ParameterType.StringList,\n    value: \"date,ls\",\n    description: \"SSM Parameter of type StringList.\",\n    allowedPattern: \"^[a-zA-Z]{1,10}$\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_parameter = aws_native.ssm.Parameter(\"basicParameter\",\n    name=\"commands\",\n    type=aws_native.ssm.ParameterType.STRING_LIST,\n    value=\"date,ls\",\n    description=\"SSM Parameter of type StringList.\",\n    allowed_pattern=\"^[a-zA-Z]{1,10}$\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicParameter = new AwsNative.Ssm.Parameter(\"basicParameter\", new()\n    {\n        Name = \"commands\",\n        Type = AwsNative.Ssm.ParameterType.StringList,\n        Value = \"date,ls\",\n        Description = \"SSM Parameter of type StringList.\",\n        AllowedPattern = \"^[a-zA-Z]{1,10}$\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewParameter(ctx, \"basicParameter\", \u0026ssm.ParameterArgs{\n\t\t\tName:           pulumi.String(\"commands\"),\n\t\t\tType:           ssm.ParameterTypeStringList,\n\t\t\tValue:          pulumi.String(\"date,ls\"),\n\t\t\tDescription:    pulumi.String(\"SSM Parameter of type StringList.\"),\n\t\t\tAllowedPattern: pulumi.String(\"^[a-zA-Z]{1,10}$\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicParameter = new aws_native.ssm.Parameter(\"basicParameter\", {\n    name: \"commands\",\n    type: aws_native.ssm.ParameterType.StringList,\n    value: \"date,ls\",\n    description: \"SSM Parameter of type StringList.\",\n    allowedPattern: \"^[a-zA-Z]{1,10}$\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_parameter = aws_native.ssm.Parameter(\"basicParameter\",\n    name=\"commands\",\n    type=aws_native.ssm.ParameterType.STRING_LIST,\n    value=\"date,ls\",\n    description=\"SSM Parameter of type StringList.\",\n    allowed_pattern=\"^[a-zA-Z]{1,10}$\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicParameter = new AwsNative.Ssm.Parameter(\"basicParameter\", new()\n    {\n        Name = \"command\",\n        Type = AwsNative.Ssm.ParameterType.String,\n        Value = \"date\",\n        Tier = AwsNative.Ssm.ParameterTier.Advanced,\n        Policies = \"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\",\n        Description = \"SSM Parameter for running date command.\",\n        AllowedPattern = \"^[a-zA-Z]{1,10}$\",\n        Tags = \n        {\n            { \"environment\", \"DEV\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewParameter(ctx, \"basicParameter\", \u0026ssm.ParameterArgs{\n\t\t\tName:           pulumi.String(\"command\"),\n\t\t\tType:           ssm.ParameterTypeString,\n\t\t\tValue:          pulumi.String(\"date\"),\n\t\t\tTier:           ssm.ParameterTierAdvanced,\n\t\t\tPolicies:       pulumi.String(\"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\"),\n\t\t\tDescription:    pulumi.String(\"SSM Parameter for running date command.\"),\n\t\t\tAllowedPattern: pulumi.String(\"^[a-zA-Z]{1,10}$\"),\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"environment\": pulumi.String(\"DEV\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicParameter = new aws_native.ssm.Parameter(\"basicParameter\", {\n    name: \"command\",\n    type: aws_native.ssm.ParameterType.String,\n    value: \"date\",\n    tier: aws_native.ssm.ParameterTier.Advanced,\n    policies: \"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\",\n    description: \"SSM Parameter for running date command.\",\n    allowedPattern: \"^[a-zA-Z]{1,10}$\",\n    tags: {\n        environment: \"DEV\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_parameter = aws_native.ssm.Parameter(\"basicParameter\",\n    name=\"command\",\n    type=aws_native.ssm.ParameterType.STRING,\n    value=\"date\",\n    tier=aws_native.ssm.ParameterTier.ADVANCED,\n    policies=\"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\",\n    description=\"SSM Parameter for running date command.\",\n    allowed_pattern=\"^[a-zA-Z]{1,10}$\",\n    tags={\n        \"environment\": \"DEV\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicParameter = new AwsNative.Ssm.Parameter(\"basicParameter\", new()\n    {\n        Name = \"command\",\n        Type = AwsNative.Ssm.ParameterType.String,\n        Value = \"date\",\n        Tier = AwsNative.Ssm.ParameterTier.Advanced,\n        Policies = \"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\",\n        Description = \"SSM Parameter for running date command.\",\n        AllowedPattern = \"^[a-zA-Z]{1,10}$\",\n        Tags = \n        {\n            { \"environment\", \"DEV\" },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewParameter(ctx, \"basicParameter\", \u0026ssm.ParameterArgs{\n\t\t\tName:           pulumi.String(\"command\"),\n\t\t\tType:           ssm.ParameterTypeString,\n\t\t\tValue:          pulumi.String(\"date\"),\n\t\t\tTier:           ssm.ParameterTierAdvanced,\n\t\t\tPolicies:       pulumi.String(\"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\"),\n\t\t\tDescription:    pulumi.String(\"SSM Parameter for running date command.\"),\n\t\t\tAllowedPattern: pulumi.String(\"^[a-zA-Z]{1,10}$\"),\n\t\t\tTags: pulumi.StringMap{\n\t\t\t\t\"environment\": pulumi.String(\"DEV\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicParameter = new aws_native.ssm.Parameter(\"basicParameter\", {\n    name: \"command\",\n    type: aws_native.ssm.ParameterType.String,\n    value: \"date\",\n    tier: aws_native.ssm.ParameterTier.Advanced,\n    policies: \"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\",\n    description: \"SSM Parameter for running date command.\",\n    allowedPattern: \"^[a-zA-Z]{1,10}$\",\n    tags: {\n        environment: \"DEV\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_parameter = aws_native.ssm.Parameter(\"basicParameter\",\n    name=\"command\",\n    type=aws_native.ssm.ParameterType.STRING,\n    value=\"date\",\n    tier=aws_native.ssm.ParameterTier.ADVANCED,\n    policies=\"[{\\\"Type\\\":\\\"Expiration\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Timestamp\\\":\\\"2020-05-13T00:00:00.000Z\\\"}},{\\\"Type\\\":\\\"ExpirationNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"Before\\\":\\\"5\\\",\\\"Unit\\\":\\\"Days\\\"}},{\\\"Type\\\":\\\"NoChangeNotification\\\",\\\"Version\\\":\\\"1.0\\\",\\\"Attributes\\\":{\\\"After\\\":\\\"60\\\",\\\"Unit\\\":\\\"Days\\\"}}]\",\n    description=\"SSM Parameter for running date command.\",\n    allowed_pattern=\"^[a-zA-Z]{1,10}$\",\n    tags={\n        \"environment\": \"DEV\",\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"allowedPattern":{"type":"string","description":"A regular expression used to validate the parameter value. For example, for ``String`` types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``"},"dataType":{"$ref":"#/types/aws-native:ssm:ParameterDataType","description":"The data type of the parameter, such as ``text`` or ``aws:ec2:image``. The default is ``text``."},"description":{"type":"string","description":"Information about the parameter."},"name":{"type":"string","description":"The name of the parameter.\n  The reported maximum length of 2048 characters for a parameter name includes 1037 characters that are reserved for internal use by SYS. The maximum length for a parameter name that you specify is 1011 characters.\n This count of 1011 characters includes the characters in the ARN that precede the name you specify. This ARN length will vary depending on your partition and Region. For example, the following 45 characters count toward the 1011 character maximum for a parameter created in the US East (Ohio) Region: ``arn:aws:ssm:us-east-2:111122223333:parameter/``.","replaceOnChanges":true},"policies":{"type":"string","description":"Information about the policies assigned to a parameter.\n [Assigning parameter policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-policies.html) in the *User Guide*."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Optional metadata that you assign to a resource in the form of an arbitrary set of tags (key-value pairs). Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a SYS parameter to identify the type of resource to which it applies, the environment, or the type of configuration data referenced by the parameter."},"tier":{"$ref":"#/types/aws-native:ssm:ParameterTier","description":"The parameter tier."},"type":{"$ref":"#/types/aws-native:ssm:ParameterType","description":"The type of parameter.\n  Parameters of type ``SecureString`` are not supported by CFNlong."},"value":{"type":"string","description":"The parameter value.\n  If type is ``StringList``, the system returns a comma-separated string with no spaces between commas in the ``Value`` field."}},"type":"object","required":["type","value"],"inputProperties":{"allowedPattern":{"type":"string","description":"A regular expression used to validate the parameter value. For example, for ``String`` types with values restricted to numbers, you can specify the following: ``AllowedPattern=^\\d+$``"},"dataType":{"$ref":"#/types/aws-native:ssm:ParameterDataType","description":"The data type of the parameter, such as ``text`` or ``aws:ec2:image``. The default is ``text``."},"description":{"type":"string","description":"Information about the parameter."},"name":{"type":"string","description":"The name of the parameter.\n  The reported maximum length of 2048 characters for a parameter name includes 1037 characters that are reserved for internal use by SYS. The maximum length for a parameter name that you specify is 1011 characters.\n This count of 1011 characters includes the characters in the ARN that precede the name you specify. This ARN length will vary depending on your partition and Region. For example, the following 45 characters count toward the 1011 character maximum for a parameter created in the US East (Ohio) Region: ``arn:aws:ssm:us-east-2:111122223333:parameter/``."},"policies":{"type":"string","description":"Information about the policies assigned to a parameter.\n [Assigning parameter policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-policies.html) in the *User Guide*."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Optional metadata that you assign to a resource in the form of an arbitrary set of tags (key-value pairs). Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a SYS parameter to identify the type of resource to which it applies, the environment, or the type of configuration data referenced by the parameter."},"tier":{"$ref":"#/types/aws-native:ssm:ParameterTier","description":"The parameter tier."},"type":{"$ref":"#/types/aws-native:ssm:ParameterType","description":"The type of parameter.\n  Parameters of type ``SecureString`` are not supported by CFNlong."},"value":{"type":"string","description":"The parameter value.\n  If type is ``StringList``, the system returns a comma-separated string with no spaces between commas in the ``Value`` field."}},"requiredInputs":["type","value"]},"aws-native:ssm:PatchBaseline":{"description":"Resource Type definition for AWS::SSM::PatchBaseline\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myPatchBaseline = new AwsNative.Ssm.PatchBaseline(\"myPatchBaseline\", new()\n    {\n        Name = \"myPatchBaseline\",\n        Description = \"Baseline containing all updates approved for Windows instances\",\n        OperatingSystem = AwsNative.Ssm.PatchBaselineOperatingSystem.Windows,\n        PatchGroups = new[]\n        {\n            \"myPatchGroup\",\n        },\n        ApprovalRules = new AwsNative.Ssm.Inputs.PatchBaselineRuleGroupArgs\n        {\n            PatchRules = new[]\n            {\n                new AwsNative.Ssm.Inputs.PatchBaselineRuleArgs\n                {\n                    PatchFilterGroup = new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterGroupArgs\n                    {\n                        PatchFilters = new[]\n                        {\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Critical\",\n                                    \"Important\",\n                                    \"Moderate\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"SecurityUpdates\",\n                                    \"CriticalUpdates\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Classification,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"WindowsServer2019\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Product,\n                            },\n                        },\n                    },\n                    ApproveAfterDays = 7,\n                    ComplianceLevel = AwsNative.Ssm.PatchBaselineRuleComplianceLevel.Critical,\n                },\n                new AwsNative.Ssm.Inputs.PatchBaselineRuleArgs\n                {\n                    PatchFilterGroup = new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterGroupArgs\n                    {\n                        PatchFilters = new[]\n                        {\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Critical\",\n                                    \"Important\",\n                                    \"Moderate\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"*\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Classification,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"APPLICATION\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.PatchSet,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Active Directory Rights Management Services Client 2.0\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Product,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Active Directory\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.ProductFamily,\n                            },\n                        },\n                    },\n                    ApproveAfterDays = 7,\n                    ComplianceLevel = AwsNative.Ssm.PatchBaselineRuleComplianceLevel.Critical,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewPatchBaseline(ctx, \"myPatchBaseline\", \u0026ssm.PatchBaselineArgs{\n\t\t\tName:            pulumi.String(\"myPatchBaseline\"),\n\t\t\tDescription:     pulumi.String(\"Baseline containing all updates approved for Windows instances\"),\n\t\t\tOperatingSystem: ssm.PatchBaselineOperatingSystemWindows,\n\t\t\tPatchGroups: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"myPatchGroup\"),\n\t\t\t},\n\t\t\tApprovalRules: \u0026ssm.PatchBaselineRuleGroupArgs{\n\t\t\t\tPatchRules: ssm.PatchBaselineRuleArray{\n\t\t\t\t\t\u0026ssm.PatchBaselineRuleArgs{\n\t\t\t\t\t\tPatchFilterGroup: \u0026ssm.PatchBaselinePatchFilterGroupArgs{\n\t\t\t\t\t\t\tPatchFilters: ssm.PatchBaselinePatchFilterArray{\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Critical\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Important\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Moderate\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyMsrcSeverity,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"SecurityUpdates\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"CriticalUpdates\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyClassification,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"WindowsServer2019\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyProduct,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tApproveAfterDays: pulumi.Int(7),\n\t\t\t\t\t\tComplianceLevel:  ssm.PatchBaselineRuleComplianceLevelCritical,\n\t\t\t\t\t},\n\t\t\t\t\t\u0026ssm.PatchBaselineRuleArgs{\n\t\t\t\t\t\tPatchFilterGroup: \u0026ssm.PatchBaselinePatchFilterGroupArgs{\n\t\t\t\t\t\t\tPatchFilters: ssm.PatchBaselinePatchFilterArray{\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Critical\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Important\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Moderate\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyMsrcSeverity,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"*\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyClassification,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"APPLICATION\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyPatchSet,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Active Directory Rights Management Services Client 2.0\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyProduct,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Active Directory\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyProductFamily,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tApproveAfterDays: pulumi.Int(7),\n\t\t\t\t\t\tComplianceLevel:  ssm.PatchBaselineRuleComplianceLevelCritical,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myPatchBaseline = new aws_native.ssm.PatchBaseline(\"myPatchBaseline\", {\n    name: \"myPatchBaseline\",\n    description: \"Baseline containing all updates approved for Windows instances\",\n    operatingSystem: aws_native.ssm.PatchBaselineOperatingSystem.Windows,\n    patchGroups: [\"myPatchGroup\"],\n    approvalRules: {\n        patchRules: [\n            {\n                patchFilterGroup: {\n                    patchFilters: [\n                        {\n                            values: [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                        },\n                        {\n                            values: [\n                                \"SecurityUpdates\",\n                                \"CriticalUpdates\",\n                            ],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Classification,\n                        },\n                        {\n                            values: [\"WindowsServer2019\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Product,\n                        },\n                    ],\n                },\n                approveAfterDays: 7,\n                complianceLevel: aws_native.ssm.PatchBaselineRuleComplianceLevel.Critical,\n            },\n            {\n                patchFilterGroup: {\n                    patchFilters: [\n                        {\n                            values: [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                        },\n                        {\n                            values: [\"*\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Classification,\n                        },\n                        {\n                            values: [\"APPLICATION\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.PatchSet,\n                        },\n                        {\n                            values: [\"Active Directory Rights Management Services Client 2.0\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Product,\n                        },\n                        {\n                            values: [\"Active Directory\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.ProductFamily,\n                        },\n                    ],\n                },\n                approveAfterDays: 7,\n                complianceLevel: aws_native.ssm.PatchBaselineRuleComplianceLevel.Critical,\n            },\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_patch_baseline = aws_native.ssm.PatchBaseline(\"myPatchBaseline\",\n    name=\"myPatchBaseline\",\n    description=\"Baseline containing all updates approved for Windows instances\",\n    operating_system=aws_native.ssm.PatchBaselineOperatingSystem.WINDOWS,\n    patch_groups=[\"myPatchGroup\"],\n    approval_rules={\n        \"patch_rules\": [\n            {\n                \"patch_filter_group\": {\n                    \"patch_filters\": [\n                        {\n                            \"values\": [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.MSRC_SEVERITY,\n                        },\n                        {\n                            \"values\": [\n                                \"SecurityUpdates\",\n                                \"CriticalUpdates\",\n                            ],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.CLASSIFICATION,\n                        },\n                        {\n                            \"values\": [\"WindowsServer2019\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PRODUCT,\n                        },\n                    ],\n                },\n                \"approve_after_days\": 7,\n                \"compliance_level\": aws_native.ssm.PatchBaselineRuleComplianceLevel.CRITICAL,\n            },\n            {\n                \"patch_filter_group\": {\n                    \"patch_filters\": [\n                        {\n                            \"values\": [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.MSRC_SEVERITY,\n                        },\n                        {\n                            \"values\": [\"*\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.CLASSIFICATION,\n                        },\n                        {\n                            \"values\": [\"APPLICATION\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PATCH_SET,\n                        },\n                        {\n                            \"values\": [\"Active Directory Rights Management Services Client 2.0\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PRODUCT,\n                        },\n                        {\n                            \"values\": [\"Active Directory\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PRODUCT_FAMILY,\n                        },\n                    ],\n                },\n                \"approve_after_days\": 7,\n                \"compliance_level\": aws_native.ssm.PatchBaselineRuleComplianceLevel.CRITICAL,\n            },\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myPatchBaseline = new AwsNative.Ssm.PatchBaseline(\"myPatchBaseline\", new()\n    {\n        Name = \"myPatchBaseline\",\n        Description = \"Baseline containing all updates approved for Windows instances\",\n        OperatingSystem = AwsNative.Ssm.PatchBaselineOperatingSystem.Windows,\n        PatchGroups = new[]\n        {\n            \"myPatchGroup\",\n        },\n        ApprovalRules = new AwsNative.Ssm.Inputs.PatchBaselineRuleGroupArgs\n        {\n            PatchRules = new[]\n            {\n                new AwsNative.Ssm.Inputs.PatchBaselineRuleArgs\n                {\n                    PatchFilterGroup = new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterGroupArgs\n                    {\n                        PatchFilters = new[]\n                        {\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Critical\",\n                                    \"Important\",\n                                    \"Moderate\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"SecurityUpdates\",\n                                    \"CriticalUpdates\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Classification,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"WindowsServer2019\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Product,\n                            },\n                        },\n                    },\n                    ApproveAfterDays = 7,\n                    ComplianceLevel = AwsNative.Ssm.PatchBaselineRuleComplianceLevel.Critical,\n                },\n                new AwsNative.Ssm.Inputs.PatchBaselineRuleArgs\n                {\n                    PatchFilterGroup = new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterGroupArgs\n                    {\n                        PatchFilters = new[]\n                        {\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Critical\",\n                                    \"Important\",\n                                    \"Moderate\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"*\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Classification,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"APPLICATION\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.PatchSet,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Active Directory Rights Management Services Client 2.0\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.Product,\n                            },\n                            new AwsNative.Ssm.Inputs.PatchBaselinePatchFilterArgs\n                            {\n                                Values = new[]\n                                {\n                                    \"Active Directory\",\n                                },\n                                Key = AwsNative.Ssm.PatchBaselinePatchFilterKey.ProductFamily,\n                            },\n                        },\n                    },\n                    ApproveAfterDays = 7,\n                    ComplianceLevel = AwsNative.Ssm.PatchBaselineRuleComplianceLevel.Critical,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewPatchBaseline(ctx, \"myPatchBaseline\", \u0026ssm.PatchBaselineArgs{\n\t\t\tName:            pulumi.String(\"myPatchBaseline\"),\n\t\t\tDescription:     pulumi.String(\"Baseline containing all updates approved for Windows instances\"),\n\t\t\tOperatingSystem: ssm.PatchBaselineOperatingSystemWindows,\n\t\t\tPatchGroups: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"myPatchGroup\"),\n\t\t\t},\n\t\t\tApprovalRules: \u0026ssm.PatchBaselineRuleGroupArgs{\n\t\t\t\tPatchRules: ssm.PatchBaselineRuleArray{\n\t\t\t\t\t\u0026ssm.PatchBaselineRuleArgs{\n\t\t\t\t\t\tPatchFilterGroup: \u0026ssm.PatchBaselinePatchFilterGroupArgs{\n\t\t\t\t\t\t\tPatchFilters: ssm.PatchBaselinePatchFilterArray{\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Critical\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Important\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Moderate\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyMsrcSeverity,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"SecurityUpdates\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"CriticalUpdates\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyClassification,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"WindowsServer2019\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyProduct,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tApproveAfterDays: pulumi.Int(7),\n\t\t\t\t\t\tComplianceLevel:  ssm.PatchBaselineRuleComplianceLevelCritical,\n\t\t\t\t\t},\n\t\t\t\t\t\u0026ssm.PatchBaselineRuleArgs{\n\t\t\t\t\t\tPatchFilterGroup: \u0026ssm.PatchBaselinePatchFilterGroupArgs{\n\t\t\t\t\t\t\tPatchFilters: ssm.PatchBaselinePatchFilterArray{\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Critical\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Important\"),\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Moderate\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyMsrcSeverity,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"*\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyClassification,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"APPLICATION\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyPatchSet,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Active Directory Rights Management Services Client 2.0\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyProduct,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\u0026ssm.PatchBaselinePatchFilterArgs{\n\t\t\t\t\t\t\t\t\tValues: pulumi.StringArray{\n\t\t\t\t\t\t\t\t\t\tpulumi.String(\"Active Directory\"),\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\tKey: ssm.PatchBaselinePatchFilterKeyProductFamily,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tApproveAfterDays: pulumi.Int(7),\n\t\t\t\t\t\tComplianceLevel:  ssm.PatchBaselineRuleComplianceLevelCritical,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myPatchBaseline = new aws_native.ssm.PatchBaseline(\"myPatchBaseline\", {\n    name: \"myPatchBaseline\",\n    description: \"Baseline containing all updates approved for Windows instances\",\n    operatingSystem: aws_native.ssm.PatchBaselineOperatingSystem.Windows,\n    patchGroups: [\"myPatchGroup\"],\n    approvalRules: {\n        patchRules: [\n            {\n                patchFilterGroup: {\n                    patchFilters: [\n                        {\n                            values: [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                        },\n                        {\n                            values: [\n                                \"SecurityUpdates\",\n                                \"CriticalUpdates\",\n                            ],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Classification,\n                        },\n                        {\n                            values: [\"WindowsServer2019\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Product,\n                        },\n                    ],\n                },\n                approveAfterDays: 7,\n                complianceLevel: aws_native.ssm.PatchBaselineRuleComplianceLevel.Critical,\n            },\n            {\n                patchFilterGroup: {\n                    patchFilters: [\n                        {\n                            values: [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.MsrcSeverity,\n                        },\n                        {\n                            values: [\"*\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Classification,\n                        },\n                        {\n                            values: [\"APPLICATION\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.PatchSet,\n                        },\n                        {\n                            values: [\"Active Directory Rights Management Services Client 2.0\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.Product,\n                        },\n                        {\n                            values: [\"Active Directory\"],\n                            key: aws_native.ssm.PatchBaselinePatchFilterKey.ProductFamily,\n                        },\n                    ],\n                },\n                approveAfterDays: 7,\n                complianceLevel: aws_native.ssm.PatchBaselineRuleComplianceLevel.Critical,\n            },\n        ],\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_patch_baseline = aws_native.ssm.PatchBaseline(\"myPatchBaseline\",\n    name=\"myPatchBaseline\",\n    description=\"Baseline containing all updates approved for Windows instances\",\n    operating_system=aws_native.ssm.PatchBaselineOperatingSystem.WINDOWS,\n    patch_groups=[\"myPatchGroup\"],\n    approval_rules={\n        \"patch_rules\": [\n            {\n                \"patch_filter_group\": {\n                    \"patch_filters\": [\n                        {\n                            \"values\": [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.MSRC_SEVERITY,\n                        },\n                        {\n                            \"values\": [\n                                \"SecurityUpdates\",\n                                \"CriticalUpdates\",\n                            ],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.CLASSIFICATION,\n                        },\n                        {\n                            \"values\": [\"WindowsServer2019\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PRODUCT,\n                        },\n                    ],\n                },\n                \"approve_after_days\": 7,\n                \"compliance_level\": aws_native.ssm.PatchBaselineRuleComplianceLevel.CRITICAL,\n            },\n            {\n                \"patch_filter_group\": {\n                    \"patch_filters\": [\n                        {\n                            \"values\": [\n                                \"Critical\",\n                                \"Important\",\n                                \"Moderate\",\n                            ],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.MSRC_SEVERITY,\n                        },\n                        {\n                            \"values\": [\"*\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.CLASSIFICATION,\n                        },\n                        {\n                            \"values\": [\"APPLICATION\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PATCH_SET,\n                        },\n                        {\n                            \"values\": [\"Active Directory Rights Management Services Client 2.0\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PRODUCT,\n                        },\n                        {\n                            \"values\": [\"Active Directory\"],\n                            \"key\": aws_native.ssm.PatchBaselinePatchFilterKey.PRODUCT_FAMILY,\n                        },\n                    ],\n                },\n                \"approve_after_days\": 7,\n                \"compliance_level\": aws_native.ssm.PatchBaselineRuleComplianceLevel.CRITICAL,\n            },\n        ],\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"approvalRules":{"$ref":"#/types/aws-native:ssm:PatchBaselineRuleGroup","description":"A set of rules used to include patches in the baseline."},"approvedPatches":{"type":"array","items":{"type":"string"},"description":"A list of explicitly approved patches for the baseline."},"approvedPatchesComplianceLevel":{"$ref":"#/types/aws-native:ssm:PatchBaselineApprovedPatchesComplianceLevel","description":"Defines the compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. The default value is UNSPECIFIED."},"approvedPatchesEnableNonSecurity":{"type":"boolean","description":"Indicates whether the list of approved patches includes non-security updates that should be applied to the instances. The default value is 'false'. Applies to Linux instances only."},"availableSecurityUpdatesComplianceStatus":{"$ref":"#/types/aws-native:ssm:PatchBaselineAvailableSecurityUpdatesComplianceStatus","description":"The compliance status for vendor recommended security updates that are not approved by this patch baseline."},"awsId":{"type":"string","description":"The ID of the patch baseline."},"defaultBaseline":{"type":"boolean","description":"Set the baseline as default baseline. Only registering to default patch baseline is allowed."},"description":{"type":"string","description":"The description of the patch baseline."},"globalFilters":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchFilterGroup","description":"A set of global filters used to include patches in the baseline."},"name":{"type":"string","description":"The name of the patch baseline."},"operatingSystem":{"$ref":"#/types/aws-native:ssm:PatchBaselineOperatingSystem","description":"Defines the operating system the patch baseline applies to. The Default value is WINDOWS.","replaceOnChanges":true},"patchGroups":{"type":"array","items":{"type":"string"},"description":"PatchGroups is used to associate instances with a specific patch baseline"},"rejectedPatches":{"type":"array","items":{"type":"string"},"description":"A list of explicitly rejected patches for the baseline."},"rejectedPatchesAction":{"$ref":"#/types/aws-native:ssm:PatchBaselineRejectedPatchesAction","description":"The action for Patch Manager to take on patches included in the RejectedPackages list."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchSource"},"description":"Information about the patches to use to update the instances, including target operating systems and source repository. Applies to Linux instances only."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways."}},"type":"object","required":["awsId","name"],"inputProperties":{"approvalRules":{"$ref":"#/types/aws-native:ssm:PatchBaselineRuleGroup","description":"A set of rules used to include patches in the baseline."},"approvedPatches":{"type":"array","items":{"type":"string"},"description":"A list of explicitly approved patches for the baseline."},"approvedPatchesComplianceLevel":{"$ref":"#/types/aws-native:ssm:PatchBaselineApprovedPatchesComplianceLevel","description":"Defines the compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. The default value is UNSPECIFIED."},"approvedPatchesEnableNonSecurity":{"type":"boolean","description":"Indicates whether the list of approved patches includes non-security updates that should be applied to the instances. The default value is 'false'. Applies to Linux instances only."},"availableSecurityUpdatesComplianceStatus":{"$ref":"#/types/aws-native:ssm:PatchBaselineAvailableSecurityUpdatesComplianceStatus","description":"The compliance status for vendor recommended security updates that are not approved by this patch baseline."},"defaultBaseline":{"type":"boolean","description":"Set the baseline as default baseline. Only registering to default patch baseline is allowed."},"description":{"type":"string","description":"The description of the patch baseline."},"globalFilters":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchFilterGroup","description":"A set of global filters used to include patches in the baseline."},"name":{"type":"string","description":"The name of the patch baseline."},"operatingSystem":{"$ref":"#/types/aws-native:ssm:PatchBaselineOperatingSystem","description":"Defines the operating system the patch baseline applies to. The Default value is WINDOWS."},"patchGroups":{"type":"array","items":{"type":"string"},"description":"PatchGroups is used to associate instances with a specific patch baseline"},"rejectedPatches":{"type":"array","items":{"type":"string"},"description":"A list of explicitly rejected patches for the baseline."},"rejectedPatchesAction":{"$ref":"#/types/aws-native:ssm:PatchBaselineRejectedPatchesAction","description":"The action for Patch Manager to take on patches included in the RejectedPackages list."},"sources":{"type":"array","items":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchSource"},"description":"Information about the patches to use to update the instances, including target operating systems and source repository. Applies to Linux instances only."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways."}}},"aws-native:ssm:ResourceDataSync":{"description":"Resource Type definition for AWS::SSM::ResourceDataSync\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncToDestination\",\n        S3Destination = new AwsNative.Ssm.Inputs.ResourceDataSyncS3DestinationArgs\n        {\n            BucketName = \"test-bucket\",\n            BucketRegion = \"us-east-2\",\n            SyncFormat = \"JsonSerDe\",\n            BucketPrefix = \"cfn\",\n            KmsKeyArn = \"kmsKeyARN\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncToDestination\"),\n\t\t\tS3Destination: \u0026ssm.ResourceDataSyncS3DestinationArgs{\n\t\t\t\tBucketName:   pulumi.String(\"test-bucket\"),\n\t\t\t\tBucketRegion: pulumi.String(\"us-east-2\"),\n\t\t\t\tSyncFormat:   pulumi.String(\"JsonSerDe\"),\n\t\t\t\tBucketPrefix: pulumi.String(\"cfn\"),\n\t\t\t\tKmsKeyArn:    pulumi.String(\"kmsKeyARN\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncToDestination\",\n    s3Destination: {\n        bucketName: \"test-bucket\",\n        bucketRegion: \"us-east-2\",\n        syncFormat: \"JsonSerDe\",\n        bucketPrefix: \"cfn\",\n        kmsKeyArn: \"kmsKeyARN\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncToDestination\",\n    s3_destination={\n        \"bucket_name\": \"test-bucket\",\n        \"bucket_region\": \"us-east-2\",\n        \"sync_format\": \"JsonSerDe\",\n        \"bucket_prefix\": \"cfn\",\n        \"kms_key_arn\": \"kmsKeyARN\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncToDestination\",\n        S3Destination = new AwsNative.Ssm.Inputs.ResourceDataSyncS3DestinationArgs\n        {\n            BucketName = \"test-bucket\",\n            BucketRegion = \"us-east-2\",\n            SyncFormat = \"JsonSerDe\",\n            BucketPrefix = \"cfn\",\n            KmsKeyArn = \"kmsKeyARN\",\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncToDestination\"),\n\t\t\tS3Destination: \u0026ssm.ResourceDataSyncS3DestinationArgs{\n\t\t\t\tBucketName:   pulumi.String(\"test-bucket\"),\n\t\t\t\tBucketRegion: pulumi.String(\"us-east-2\"),\n\t\t\t\tSyncFormat:   pulumi.String(\"JsonSerDe\"),\n\t\t\t\tBucketPrefix: pulumi.String(\"cfn\"),\n\t\t\t\tKmsKeyArn:    pulumi.String(\"kmsKeyARN\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncToDestination\",\n    s3Destination: {\n        bucketName: \"test-bucket\",\n        bucketRegion: \"us-east-2\",\n        syncFormat: \"JsonSerDe\",\n        bucketPrefix: \"cfn\",\n        kmsKeyArn: \"kmsKeyARN\",\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncToDestination\",\n    s3_destination={\n        \"bucket_name\": \"test-bucket\",\n        \"bucket_region\": \"us-east-2\",\n        \"sync_format\": \"JsonSerDe\",\n        \"bucket_prefix\": \"cfn\",\n        \"kms_key_arn\": \"kmsKeyARN\",\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncFromSource\",\n        SyncSource = new AwsNative.Ssm.Inputs.ResourceDataSyncSyncSourceArgs\n        {\n            SourceType = \"SingleAccountMultiRegions\",\n            SourceRegions = new[]\n            {\n                \"us-east-1\",\n                \"us-west-1\",\n                \"us-west-2\",\n            },\n            IncludeFutureRegions = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncFromSource\"),\n\t\t\tSyncSource: \u0026ssm.ResourceDataSyncSyncSourceArgs{\n\t\t\t\tSourceType: pulumi.String(\"SingleAccountMultiRegions\"),\n\t\t\t\tSourceRegions: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-east-1\"),\n\t\t\t\t\tpulumi.String(\"us-west-1\"),\n\t\t\t\t\tpulumi.String(\"us-west-2\"),\n\t\t\t\t},\n\t\t\t\tIncludeFutureRegions: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncFromSource\",\n    syncSource: {\n        sourceType: \"SingleAccountMultiRegions\",\n        sourceRegions: [\n            \"us-east-1\",\n            \"us-west-1\",\n            \"us-west-2\",\n        ],\n        includeFutureRegions: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncFromSource\",\n    sync_source={\n        \"source_type\": \"SingleAccountMultiRegions\",\n        \"source_regions\": [\n            \"us-east-1\",\n            \"us-west-1\",\n            \"us-west-2\",\n        ],\n        \"include_future_regions\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncFromSource\",\n        SyncSource = new AwsNative.Ssm.Inputs.ResourceDataSyncSyncSourceArgs\n        {\n            SourceType = \"SingleAccountMultiRegions\",\n            SourceRegions = new[]\n            {\n                \"us-east-1\",\n                \"us-west-1\",\n                \"us-west-2\",\n            },\n            IncludeFutureRegions = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncFromSource\"),\n\t\t\tSyncSource: \u0026ssm.ResourceDataSyncSyncSourceArgs{\n\t\t\t\tSourceType: pulumi.String(\"SingleAccountMultiRegions\"),\n\t\t\t\tSourceRegions: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-east-1\"),\n\t\t\t\t\tpulumi.String(\"us-west-1\"),\n\t\t\t\t\tpulumi.String(\"us-west-2\"),\n\t\t\t\t},\n\t\t\t\tIncludeFutureRegions: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncFromSource\",\n    syncSource: {\n        sourceType: \"SingleAccountMultiRegions\",\n        sourceRegions: [\n            \"us-east-1\",\n            \"us-west-1\",\n            \"us-west-2\",\n        ],\n        includeFutureRegions: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncFromSource\",\n    sync_source={\n        \"source_type\": \"SingleAccountMultiRegions\",\n        \"source_regions\": [\n            \"us-east-1\",\n            \"us-west-1\",\n            \"us-west-2\",\n        ],\n        \"include_future_regions\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncFromSource\",\n        SyncSource = new AwsNative.Ssm.Inputs.ResourceDataSyncSyncSourceArgs\n        {\n            SourceType = \"AwsOrganizations\",\n            AwsOrganizationsSource = new AwsNative.Ssm.Inputs.ResourceDataSyncAwsOrganizationsSourceArgs\n            {\n                OrganizationSourceType = \"EntireOrganization\",\n            },\n            SourceRegions = new[]\n            {\n                \"us-west-1\",\n            },\n            IncludeFutureRegions = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncFromSource\"),\n\t\t\tSyncSource: \u0026ssm.ResourceDataSyncSyncSourceArgs{\n\t\t\t\tSourceType: pulumi.String(\"AwsOrganizations\"),\n\t\t\t\tAwsOrganizationsSource: \u0026ssm.ResourceDataSyncAwsOrganizationsSourceArgs{\n\t\t\t\t\tOrganizationSourceType: pulumi.String(\"EntireOrganization\"),\n\t\t\t\t},\n\t\t\t\tSourceRegions: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-west-1\"),\n\t\t\t\t},\n\t\t\t\tIncludeFutureRegions: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncFromSource\",\n    syncSource: {\n        sourceType: \"AwsOrganizations\",\n        awsOrganizationsSource: {\n            organizationSourceType: \"EntireOrganization\",\n        },\n        sourceRegions: [\"us-west-1\"],\n        includeFutureRegions: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncFromSource\",\n    sync_source={\n        \"source_type\": \"AwsOrganizations\",\n        \"aws_organizations_source\": {\n            \"organization_source_type\": \"EntireOrganization\",\n        },\n        \"source_regions\": [\"us-west-1\"],\n        \"include_future_regions\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncFromSource\",\n        SyncSource = new AwsNative.Ssm.Inputs.ResourceDataSyncSyncSourceArgs\n        {\n            SourceType = \"AwsOrganizations\",\n            AwsOrganizationsSource = new AwsNative.Ssm.Inputs.ResourceDataSyncAwsOrganizationsSourceArgs\n            {\n                OrganizationSourceType = \"EntireOrganization\",\n            },\n            SourceRegions = new[]\n            {\n                \"us-west-1\",\n            },\n            IncludeFutureRegions = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncFromSource\"),\n\t\t\tSyncSource: \u0026ssm.ResourceDataSyncSyncSourceArgs{\n\t\t\t\tSourceType: pulumi.String(\"AwsOrganizations\"),\n\t\t\t\tAwsOrganizationsSource: \u0026ssm.ResourceDataSyncAwsOrganizationsSourceArgs{\n\t\t\t\t\tOrganizationSourceType: pulumi.String(\"EntireOrganization\"),\n\t\t\t\t},\n\t\t\t\tSourceRegions: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-west-1\"),\n\t\t\t\t},\n\t\t\t\tIncludeFutureRegions: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncFromSource\",\n    syncSource: {\n        sourceType: \"AwsOrganizations\",\n        awsOrganizationsSource: {\n            organizationSourceType: \"EntireOrganization\",\n        },\n        sourceRegions: [\"us-west-1\"],\n        includeFutureRegions: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncFromSource\",\n    sync_source={\n        \"source_type\": \"AwsOrganizations\",\n        \"aws_organizations_source\": {\n            \"organization_source_type\": \"EntireOrganization\",\n        },\n        \"source_regions\": [\"us-west-1\"],\n        \"include_future_regions\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncFromSource\",\n        SyncSource = new AwsNative.Ssm.Inputs.ResourceDataSyncSyncSourceArgs\n        {\n            SourceType = \"AwsOrganizations\",\n            AwsOrganizationsSource = new AwsNative.Ssm.Inputs.ResourceDataSyncAwsOrganizationsSourceArgs\n            {\n                OrganizationSourceType = \"OrganizationalUnits\",\n                OrganizationalUnits = new[]\n                {\n                    \"ou-12345\",\n                },\n            },\n            SourceRegions = new[]\n            {\n                \"us-west-1\",\n            },\n            IncludeFutureRegions = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncFromSource\"),\n\t\t\tSyncSource: \u0026ssm.ResourceDataSyncSyncSourceArgs{\n\t\t\t\tSourceType: pulumi.String(\"AwsOrganizations\"),\n\t\t\t\tAwsOrganizationsSource: \u0026ssm.ResourceDataSyncAwsOrganizationsSourceArgs{\n\t\t\t\t\tOrganizationSourceType: pulumi.String(\"OrganizationalUnits\"),\n\t\t\t\t\tOrganizationalUnits: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"ou-12345\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSourceRegions: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-west-1\"),\n\t\t\t\t},\n\t\t\t\tIncludeFutureRegions: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncFromSource\",\n    syncSource: {\n        sourceType: \"AwsOrganizations\",\n        awsOrganizationsSource: {\n            organizationSourceType: \"OrganizationalUnits\",\n            organizationalUnits: [\"ou-12345\"],\n        },\n        sourceRegions: [\"us-west-1\"],\n        includeFutureRegions: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncFromSource\",\n    sync_source={\n        \"source_type\": \"AwsOrganizations\",\n        \"aws_organizations_source\": {\n            \"organization_source_type\": \"OrganizationalUnits\",\n            \"organizational_units\": [\"ou-12345\"],\n        },\n        \"source_regions\": [\"us-west-1\"],\n        \"include_future_regions\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var basicResourceDataSync = new AwsNative.Ssm.ResourceDataSync(\"basicResourceDataSync\", new()\n    {\n        SyncName = \"test-sync\",\n        SyncType = \"SyncFromSource\",\n        SyncSource = new AwsNative.Ssm.Inputs.ResourceDataSyncSyncSourceArgs\n        {\n            SourceType = \"AwsOrganizations\",\n            AwsOrganizationsSource = new AwsNative.Ssm.Inputs.ResourceDataSyncAwsOrganizationsSourceArgs\n            {\n                OrganizationSourceType = \"OrganizationalUnits\",\n                OrganizationalUnits = new[]\n                {\n                    \"ou-12345\",\n                },\n            },\n            SourceRegions = new[]\n            {\n                \"us-west-1\",\n            },\n            IncludeFutureRegions = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/ssm\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := ssm.NewResourceDataSync(ctx, \"basicResourceDataSync\", \u0026ssm.ResourceDataSyncArgs{\n\t\t\tSyncName: pulumi.String(\"test-sync\"),\n\t\t\tSyncType: pulumi.String(\"SyncFromSource\"),\n\t\t\tSyncSource: \u0026ssm.ResourceDataSyncSyncSourceArgs{\n\t\t\t\tSourceType: pulumi.String(\"AwsOrganizations\"),\n\t\t\t\tAwsOrganizationsSource: \u0026ssm.ResourceDataSyncAwsOrganizationsSourceArgs{\n\t\t\t\t\tOrganizationSourceType: pulumi.String(\"OrganizationalUnits\"),\n\t\t\t\t\tOrganizationalUnits: pulumi.StringArray{\n\t\t\t\t\t\tpulumi.String(\"ou-12345\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tSourceRegions: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"us-west-1\"),\n\t\t\t\t},\n\t\t\t\tIncludeFutureRegions: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst basicResourceDataSync = new aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\", {\n    syncName: \"test-sync\",\n    syncType: \"SyncFromSource\",\n    syncSource: {\n        sourceType: \"AwsOrganizations\",\n        awsOrganizationsSource: {\n            organizationSourceType: \"OrganizationalUnits\",\n            organizationalUnits: [\"ou-12345\"],\n        },\n        sourceRegions: [\"us-west-1\"],\n        includeFutureRegions: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nbasic_resource_data_sync = aws_native.ssm.ResourceDataSync(\"basicResourceDataSync\",\n    sync_name=\"test-sync\",\n    sync_type=\"SyncFromSource\",\n    sync_source={\n        \"source_type\": \"AwsOrganizations\",\n        \"aws_organizations_source\": {\n            \"organization_source_type\": \"OrganizationalUnits\",\n            \"organizational_units\": [\"ou-12345\"],\n        },\n        \"source_regions\": [\"us-west-1\"],\n        \"include_future_regions\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"bucketName":{"type":"string","description":"The name of the S3 bucket where the aggregated data is stored.","replaceOnChanges":true},"bucketPrefix":{"type":"string","description":"An Amazon S3 prefix for the bucket.","replaceOnChanges":true},"bucketRegion":{"type":"string","description":"The AWS Region with the S3 bucket targeted by the resource data sync.","replaceOnChanges":true},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an encryption key for a destination in Amazon S3 . You can use a KMS key to encrypt inventory data in Amazon S3 . You must specify a key that exist in the same AWS Region as the destination Amazon S3 bucket.","replaceOnChanges":true},"s3Destination":{"$ref":"#/types/aws-native:ssm:ResourceDataSyncS3Destination","description":"Configuration information for the target S3 bucket.","replaceOnChanges":true},"syncFormat":{"type":"string","description":"A supported sync format. The following format is currently supported: JsonSerDe","replaceOnChanges":true},"syncName":{"type":"string","description":"A name for the resource data sync.","replaceOnChanges":true},"syncSource":{"$ref":"#/types/aws-native:ssm:ResourceDataSyncSyncSource","description":"Information about the source where the data was synchronized."},"syncType":{"type":"string","description":"The type of resource data sync. If `SyncType` is `SyncToDestination` , then the resource data sync synchronizes data to an S3 bucket. If the `SyncType` is `SyncFromSource` then the resource data sync synchronizes data from AWS Organizations or from multiple AWS Regions .","replaceOnChanges":true}},"type":"object","required":["syncName"],"inputProperties":{"bucketName":{"type":"string","description":"The name of the S3 bucket where the aggregated data is stored."},"bucketPrefix":{"type":"string","description":"An Amazon S3 prefix for the bucket."},"bucketRegion":{"type":"string","description":"The AWS Region with the S3 bucket targeted by the resource data sync."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an encryption key for a destination in Amazon S3 . You can use a KMS key to encrypt inventory data in Amazon S3 . You must specify a key that exist in the same AWS Region as the destination Amazon S3 bucket."},"s3Destination":{"$ref":"#/types/aws-native:ssm:ResourceDataSyncS3Destination","description":"Configuration information for the target S3 bucket."},"syncFormat":{"type":"string","description":"A supported sync format. The following format is currently supported: JsonSerDe"},"syncName":{"type":"string","description":"A name for the resource data sync."},"syncSource":{"$ref":"#/types/aws-native:ssm:ResourceDataSyncSyncSource","description":"Information about the source where the data was synchronized."},"syncType":{"type":"string","description":"The type of resource data sync. If `SyncType` is `SyncToDestination` , then the resource data sync synchronizes data to an S3 bucket. If the `SyncType` is `SyncFromSource` then the resource data sync synchronizes data from AWS Organizations or from multiple AWS Regions ."}}},"aws-native:ssm:ResourcePolicy":{"description":"Resource Type definition for AWS::SSM::ResourcePolicy","properties":{"policy":{"$ref":"pulumi.json#/Any","description":"Actual policy statement.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::ResourcePolicy` for more information about the expected schema for this property."},"policyHash":{"type":"string","description":"A snapshot identifier for the policy over time."},"policyId":{"type":"string","description":"An unique identifier within the policies of a resource. "},"resourceArn":{"type":"string","description":"Arn of OpsItemGroup etc.","replaceOnChanges":true}},"type":"object","required":["policy","policyHash","policyId","resourceArn"],"inputProperties":{"policy":{"$ref":"pulumi.json#/Any","description":"Actual policy statement.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::ResourcePolicy` for more information about the expected schema for this property."},"resourceArn":{"type":"string","description":"Arn of OpsItemGroup etc."}},"requiredInputs":["policy","resourceArn"]},"aws-native:ssmcontacts:Contact":{"description":"Resource Type definition for AWS::SSMContacts::Contact","properties":{"alias":{"type":"string","description":"Alias of the contact. String value with 20 to 256 characters. Only alphabetical, numeric characters, dash, or underscore allowed.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact."},"displayName":{"type":"string","description":"Name of the contact. String value with 3 to 256 characters. Only alphabetical, space, numeric characters, dash, or underscore allowed."},"plan":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:ContactStage"},"description":"The stages that an escalation plan or engagement plan engages contacts and contact methods in."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"type":{"$ref":"#/types/aws-native:ssmcontacts:ContactType","description":"Contact type, which specify type of contact. Currently supported values: \"PERSONAL\", \"SHARED\", \"OTHER\".","replaceOnChanges":true}},"type":"object","required":["alias","arn","displayName","type"],"inputProperties":{"alias":{"type":"string","description":"Alias of the contact. String value with 20 to 256 characters. Only alphabetical, numeric characters, dash, or underscore allowed."},"displayName":{"type":"string","description":"Name of the contact. String value with 3 to 256 characters. Only alphabetical, space, numeric characters, dash, or underscore allowed."},"plan":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:ContactStage"},"description":"The stages that an escalation plan or engagement plan engages contacts and contact methods in."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"type":{"$ref":"#/types/aws-native:ssmcontacts:ContactType","description":"Contact type, which specify type of contact. Currently supported values: \"PERSONAL\", \"SHARED\", \"OTHER\"."}},"requiredInputs":["alias","displayName","type"]},"aws-native:ssmcontacts:ContactChannel":{"description":"Resource Type definition for AWS::SSMContacts::ContactChannel","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the engagement to a contact channel."},"channelAddress":{"type":"string","description":"The details that SSM Incident Manager uses when trying to engage the contact channel."},"channelName":{"type":"string","description":"The device name. String of 6 to 50 alphabetical, numeric, dash, and underscore characters."},"channelType":{"$ref":"#/types/aws-native:ssmcontacts:ContactChannelChannelType","description":"Device type, which specify notification channel. Currently supported values: \"SMS\", \"VOICE\", \"EMAIL\", \"CHATBOT.","replaceOnChanges":true},"contactId":{"type":"string","description":"ARN of the contact resource","replaceOnChanges":true},"deferActivation":{"type":"boolean","description":"If you want to activate the channel at a later time, you can choose to defer activation. SSM Incident Manager can't engage your contact channel until it has been activated."}},"type":"object","required":["arn"],"inputProperties":{"channelAddress":{"type":"string","description":"The details that SSM Incident Manager uses when trying to engage the contact channel."},"channelName":{"type":"string","description":"The device name. String of 6 to 50 alphabetical, numeric, dash, and underscore characters."},"channelType":{"$ref":"#/types/aws-native:ssmcontacts:ContactChannelChannelType","description":"Device type, which specify notification channel. Currently supported values: \"SMS\", \"VOICE\", \"EMAIL\", \"CHATBOT."},"contactId":{"type":"string","description":"ARN of the contact resource"},"deferActivation":{"type":"boolean","description":"If you want to activate the channel at a later time, you can choose to defer activation. SSM Incident Manager can't engage your contact channel until it has been activated."}}},"aws-native:ssmcontacts:Plan":{"description":"Engagement Plan for a SSM Incident Manager Contact.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact."},"contactId":{"type":"string","description":"Contact ID for the AWS SSM Incident Manager Contact to associate the plan.","replaceOnChanges":true},"rotationIds":{"type":"array","items":{"type":"string"},"description":"Rotation Ids to associate with Oncall Contact for engagement."},"stages":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:PlanStage"},"description":"The stages that an escalation plan or engagement plan engages contacts and contact methods in."}},"type":"object","required":["arn"],"inputProperties":{"contactId":{"type":"string","description":"Contact ID for the AWS SSM Incident Manager Contact to associate the plan."},"rotationIds":{"type":"array","items":{"type":"string"},"description":"Rotation Ids to associate with Oncall Contact for engagement."},"stages":{"type":"array","items":{"$ref":"#/types/aws-native:ssmcontacts:PlanStage"},"description":"The stages that an escalation plan or engagement plan engages contacts and contact methods in."}}},"aws-native:ssmcontacts:Rotation":{"description":"Resource Type definition for AWS::SSMContacts::Rotation.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rotation."},"contactIds":{"type":"array","items":{"type":"string"},"description":"Members of the rotation"},"name":{"type":"string","description":"Name of the Rotation"},"recurrence":{"$ref":"#/types/aws-native:ssmcontacts:RotationRecurrenceSettings","description":"Information about the rule that specifies when shift team members rotate."},"startTime":{"type":"string","description":"Start time of the first shift of Oncall Schedule"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata to assign to the rotation. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For more information, see [Tagging Incident Manager resources](https://docs.aws.amazon.com/incident-manager/latest/userguide/tagging.html) in the *Incident Manager User Guide* ."},"timeZoneId":{"type":"string","description":"TimeZone Identifier for the Oncall Schedule"}},"type":"object","required":["arn","contactIds","name","recurrence","startTime","timeZoneId"],"inputProperties":{"contactIds":{"type":"array","items":{"type":"string"},"description":"Members of the rotation"},"name":{"type":"string","description":"Name of the Rotation"},"recurrence":{"$ref":"#/types/aws-native:ssmcontacts:RotationRecurrenceSettings","description":"Information about the rule that specifies when shift team members rotate."},"startTime":{"type":"string","description":"Start time of the first shift of Oncall Schedule"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Optional metadata to assign to the rotation. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For more information, see [Tagging Incident Manager resources](https://docs.aws.amazon.com/incident-manager/latest/userguide/tagging.html) in the *Incident Manager User Guide* ."},"timeZoneId":{"type":"string","description":"TimeZone Identifier for the Oncall Schedule"}},"requiredInputs":["contactIds","recurrence","startTime","timeZoneId"]},"aws-native:ssmguiconnect:Preferences":{"description":"Definition of AWS::SSMGuiConnect::Preferences Resource Type","properties":{"accountId":{"type":"string","description":"The AWS Account Id that the preference is associated with, used as the unique identifier for this resource."},"connectionRecordingPreferences":{"$ref":"#/types/aws-native:ssmguiconnect:ConnectionRecordingPreferencesProperties","description":"The set of preferences used for recording RDP connections in the requesting AWS account and AWS Region. This includes details such as which S3 bucket recordings are stored in."}},"type":"object","required":["accountId"],"inputProperties":{"connectionRecordingPreferences":{"$ref":"#/types/aws-native:ssmguiconnect:ConnectionRecordingPreferencesProperties","description":"The set of preferences used for recording RDP connections in the requesting AWS account and AWS Region. This includes details such as which S3 bucket recordings are stored in."}}},"aws-native:ssmincidents:ReplicationSet":{"description":"Resource type definition for AWS::SSMIncidents::ReplicationSet","properties":{"arn":{"type":"string","description":"The ARN of the ReplicationSet."},"deletionProtected":{"type":"boolean","description":"Determines if the replication set deletion protection is enabled or not. If deletion protection is enabled, you can't delete the last Region in the replication set."},"regions":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ReplicationSetReplicationRegion"},"description":"The ReplicationSet configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the replication set."}},"type":"object","required":["arn","regions"],"inputProperties":{"deletionProtected":{"type":"boolean","description":"Determines if the replication set deletion protection is enabled or not. If deletion protection is enabled, you can't delete the last Region in the replication set."},"regions":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ReplicationSetReplicationRegion"},"description":"The ReplicationSet configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the replication set."}},"requiredInputs":["regions"]},"aws-native:ssmincidents:ResponsePlan":{"description":"Resource type definition for AWS::SSMIncidents::ResponsePlan","properties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanAction"},"description":"The list of actions."},"arn":{"type":"string","description":"The ARN of the response plan."},"chatChannel":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanChatChannel","description":"The  chat channel used for collaboration during an incident."},"displayName":{"type":"string","description":"The display name of the response plan."},"engagements":{"type":"array","items":{"type":"string"},"description":"The list of engagements to use."},"incidentTemplate":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanIncidentTemplate","description":"Details used to create an incident when using this response plan."},"integrations":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanIntegration"},"description":"The list of integrations."},"name":{"type":"string","description":"The name of the response plan.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the response plan."}},"type":"object","required":["arn","incidentTemplate","name"],"inputProperties":{"actions":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanAction"},"description":"The list of actions."},"chatChannel":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanChatChannel","description":"The  chat channel used for collaboration during an incident."},"displayName":{"type":"string","description":"The display name of the response plan."},"engagements":{"type":"array","items":{"type":"string"},"description":"The list of engagements to use."},"incidentTemplate":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanIncidentTemplate","description":"Details used to create an incident when using this response plan."},"integrations":{"type":"array","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanIntegration"},"description":"The list of integrations."},"name":{"type":"string","description":"The name of the response plan."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to apply to the response plan."}},"requiredInputs":["incidentTemplate"]},"aws-native:ssmquicksetup:ConfigurationManager":{"description":"Definition of AWS::SSMQuickSetup::ConfigurationManager Resource Type","properties":{"configurationDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerConfigurationDefinition"},"description":"The definition of the Quick Setup configuration that the configuration manager deploys."},"createdAt":{"type":"string","description":"The datetime stamp when the configuration manager was created."},"description":{"type":"string","description":"The description of the configuration."},"lastModifiedAt":{"type":"string","description":"The datetime stamp when the configuration manager was last updated."},"managerArn":{"type":"string","description":"The ARN of the Quick Setup configuration."},"name":{"type":"string","description":"The name of the configuration"},"statusSummaries":{"type":"array","items":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerStatusSummary"},"description":"Summaries of the state of the configuration manager. These summaries include an aggregate of the statuses from the configuration definition associated with the configuration manager. This includes deployment statuses, association statuses, drift statuses, health checks, and more."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs of metadata to assign to the configuration manager."}},"type":"object","required":["configurationDefinitions","createdAt","lastModifiedAt","managerArn","statusSummaries"],"inputProperties":{"configurationDefinitions":{"type":"array","items":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerConfigurationDefinition"},"description":"The definition of the Quick Setup configuration that the configuration manager deploys."},"description":{"type":"string","description":"The description of the configuration."},"name":{"type":"string","description":"The name of the configuration"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Key-value pairs of metadata to assign to the configuration manager."}},"requiredInputs":["configurationDefinitions"]},"aws-native:ssmquicksetup:LifecycleAutomation":{"description":"Resource Type definition for AWS::SSMQuickSetup::LifecycleAutomation that executes SSM Automation documents in response to CloudFormation lifecycle events.","properties":{"associationId":{"type":"string","description":"The id from the association that is returned when creating the association"},"automationDocument":{"type":"string","description":"The name of the Automation document to execute"},"automationParameters":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"A map of key-value parameters passed to the Automation document during execution. Each parameter name maps to a list of values, even for single values. Parameters can include configuration-specific values for your automation workflow."},"resourceKey":{"type":"string","description":"A unique identifier used for generating a unique logical ID for the custom resource","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags applied to the underlying SSM Association created by this resource. Tags help identify and organize automation executions."}},"type":"object","required":["associationId","automationDocument","automationParameters","resourceKey"],"inputProperties":{"automationDocument":{"type":"string","description":"The name of the Automation document to execute"},"automationParameters":{"type":"object","additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"A map of key-value parameters passed to the Automation document during execution. Each parameter name maps to a list of values, even for single values. Parameters can include configuration-specific values for your automation workflow."},"resourceKey":{"type":"string","description":"A unique identifier used for generating a unique logical ID for the custom resource"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"Tags applied to the underlying SSM Association created by this resource. Tags help identify and organize automation executions."}},"requiredInputs":["automationDocument","automationParameters","resourceKey"]},"aws-native:sso:Application":{"description":"Resource Type definition for Identity Center (SSO) Application","properties":{"applicationArn":{"type":"string","description":"The Application ARN that is returned upon creation of the Identity Center (SSO) Application"},"applicationProviderArn":{"type":"string","description":"The ARN of the application provider under which the operation will run","replaceOnChanges":true},"description":{"type":"string","description":"The description information for the Identity Center (SSO) Application"},"instanceArn":{"type":"string","description":"The ARN of the instance of IAM Identity Center under which the operation will run","replaceOnChanges":true},"name":{"type":"string","description":"The name you want to assign to this Identity Center (SSO) Application"},"portalOptions":{"$ref":"#/types/aws-native:sso:ApplicationPortalOptionsConfiguration","description":"A structure that describes the options for the portal associated with an application"},"status":{"$ref":"#/types/aws-native:sso:ApplicationStatus","description":"Specifies whether the application is enabled or disabled"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies tags to be attached to the application"}},"type":"object","required":["applicationArn","applicationProviderArn","instanceArn","name"],"inputProperties":{"applicationProviderArn":{"type":"string","description":"The ARN of the application provider under which the operation will run"},"description":{"type":"string","description":"The description information for the Identity Center (SSO) Application"},"instanceArn":{"type":"string","description":"The ARN of the instance of IAM Identity Center under which the operation will run"},"name":{"type":"string","description":"The name you want to assign to this Identity Center (SSO) Application"},"portalOptions":{"$ref":"#/types/aws-native:sso:ApplicationPortalOptionsConfiguration","description":"A structure that describes the options for the portal associated with an application"},"status":{"$ref":"#/types/aws-native:sso:ApplicationStatus","description":"Specifies whether the application is enabled or disabled"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies tags to be attached to the application"}},"requiredInputs":["applicationProviderArn","instanceArn"]},"aws-native:sso:ApplicationAssignment":{"description":"Resource Type definition for SSO application access grant to a user or group.","properties":{"applicationArn":{"type":"string","description":"The ARN of the application.","replaceOnChanges":true},"principalId":{"type":"string","description":"An identifier for an object in IAM Identity Center, such as a user or group","replaceOnChanges":true},"principalType":{"$ref":"#/types/aws-native:sso:ApplicationAssignmentPrincipalType","description":"The entity type for which the assignment will be created.","replaceOnChanges":true}},"type":"object","required":["applicationArn","principalId","principalType"],"inputProperties":{"applicationArn":{"type":"string","description":"The ARN of the application."},"principalId":{"type":"string","description":"An identifier for an object in IAM Identity Center, such as a user or group"},"principalType":{"$ref":"#/types/aws-native:sso:ApplicationAssignmentPrincipalType","description":"The entity type for which the assignment will be created."}},"requiredInputs":["applicationArn","principalId","principalType"]},"aws-native:sso:Assignment":{"description":"Resource Type definition for SSO assignmet","properties":{"instanceArn":{"type":"string","description":"The sso instance that the permission set is owned.","replaceOnChanges":true},"permissionSetArn":{"type":"string","description":"The permission set that the assignment will be assigned","replaceOnChanges":true},"principalId":{"type":"string","description":"The assignee's identifier, user id/group id","replaceOnChanges":true},"principalType":{"$ref":"#/types/aws-native:sso:AssignmentPrincipalType","description":"The assignee's type, user/group","replaceOnChanges":true},"targetId":{"type":"string","description":"The account id to be provisioned.","replaceOnChanges":true},"targetType":{"$ref":"#/types/aws-native:sso:AssignmentTargetType","description":"The type of resource to be provisioned to, only aws account now","replaceOnChanges":true}},"type":"object","required":["instanceArn","permissionSetArn","principalId","principalType","targetId","targetType"],"inputProperties":{"instanceArn":{"type":"string","description":"The sso instance that the permission set is owned."},"permissionSetArn":{"type":"string","description":"The permission set that the assignment will be assigned"},"principalId":{"type":"string","description":"The assignee's identifier, user id/group id"},"principalType":{"$ref":"#/types/aws-native:sso:AssignmentPrincipalType","description":"The assignee's type, user/group"},"targetId":{"type":"string","description":"The account id to be provisioned."},"targetType":{"$ref":"#/types/aws-native:sso:AssignmentTargetType","description":"The type of resource to be provisioned to, only aws account now"}},"requiredInputs":["instanceArn","permissionSetArn","principalId","principalType","targetId","targetType"]},"aws-native:sso:Instance":{"description":"Resource Type definition for Identity Center (SSO) Instance","properties":{"identityStoreId":{"type":"string","description":"The ID of the identity store associated with the created Identity Center (SSO) Instance"},"instanceArn":{"type":"string","description":"The SSO Instance ARN that is returned upon creation of the Identity Center (SSO) Instance"},"name":{"type":"string","description":"The name you want to assign to this Identity Center (SSO) Instance"},"ownerAccountId":{"type":"string","description":"The AWS accountId of the owner of the Identity Center (SSO) Instance"},"status":{"$ref":"#/types/aws-native:sso:InstanceStatus","description":"The status of the Identity Center (SSO) Instance, create_in_progress/delete_in_progress/active"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies tags to be attached to the instance of IAM Identity Center."}},"type":"object","required":["identityStoreId","instanceArn","ownerAccountId","status"],"inputProperties":{"name":{"type":"string","description":"The name you want to assign to this Identity Center (SSO) Instance"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Specifies tags to be attached to the instance of IAM Identity Center."}}},"aws-native:sso:InstanceAccessControlAttributeConfiguration":{"description":"Resource Type definition for SSO InstanceAccessControlAttributeConfiguration\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var abac = new AwsNative.Sso.InstanceAccessControlAttributeConfiguration(\"abac\", new()\n    {\n        InstanceArn = \"arn:aws:sso:::instance/ssoins-instanceId\",\n        AccessControlAttributes = new[]\n        {\n            new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs\n            {\n                Key = \"CostCenter\",\n                Value = new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs\n                {\n                    Source = new[]\n                    {\n                        \"${path:enterprise.costCenter}\",\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sso\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sso.NewInstanceAccessControlAttributeConfiguration(ctx, \"abac\", \u0026sso.InstanceAccessControlAttributeConfigurationArgs{\n\t\t\tInstanceArn: pulumi.String(\"arn:aws:sso:::instance/ssoins-instanceId\"),\n\t\t\tAccessControlAttributes: sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArray{\n\t\t\t\t\u0026sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs{\n\t\t\t\t\tKey: pulumi.String(\"CostCenter\"),\n\t\t\t\t\tValue: \u0026sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs{\n\t\t\t\t\t\tSource: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"${path:enterprise.costCenter}\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst abac = new aws_native.sso.InstanceAccessControlAttributeConfiguration(\"abac\", {\n    instanceArn: \"arn:aws:sso:::instance/ssoins-instanceId\",\n    accessControlAttributes: [{\n        key: \"CostCenter\",\n        value: {\n            source: [\"${path:enterprise.costCenter}\"],\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nabac = aws_native.sso.InstanceAccessControlAttributeConfiguration(\"abac\",\n    instance_arn=\"arn:aws:sso:::instance/ssoins-instanceId\",\n    access_control_attributes=[{\n        \"key\": \"CostCenter\",\n        \"value\": {\n            \"source\": [\"${path:enterprise.costCenter}\"],\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var abac = new AwsNative.Sso.InstanceAccessControlAttributeConfiguration(\"abac\", new()\n    {\n        InstanceArn = \"arn:aws:sso:::instance/ssoins-instanceId\",\n        AccessControlAttributes = new[]\n        {\n            new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs\n            {\n                Key = \"CostCenter\",\n                Value = new AwsNative.Sso.Inputs.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs\n                {\n                    Source = new[]\n                    {\n                        \"${path:enterprise.costCenter}\",\n                    },\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/sso\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := sso.NewInstanceAccessControlAttributeConfiguration(ctx, \"abac\", \u0026sso.InstanceAccessControlAttributeConfigurationArgs{\n\t\t\tInstanceArn: pulumi.String(\"arn:aws:sso:::instance/ssoins-instanceId\"),\n\t\t\tAccessControlAttributes: sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArray{\n\t\t\t\t\u0026sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs{\n\t\t\t\t\tKey: pulumi.String(\"CostCenter\"),\n\t\t\t\t\tValue: \u0026sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeValueArgs{\n\t\t\t\t\t\tSource: pulumi.StringArray{\n\t\t\t\t\t\t\tpulumi.String(\"${path:enterprise.costCenter}\"),\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst abac = new aws_native.sso.InstanceAccessControlAttributeConfiguration(\"abac\", {\n    instanceArn: \"arn:aws:sso:::instance/ssoins-instanceId\",\n    accessControlAttributes: [{\n        key: \"CostCenter\",\n        value: {\n            source: [\"${path:enterprise.costCenter}\"],\n        },\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nabac = aws_native.sso.InstanceAccessControlAttributeConfiguration(\"abac\",\n    instance_arn=\"arn:aws:sso:::instance/ssoins-instanceId\",\n    access_control_attributes=[{\n        \"key\": \"CostCenter\",\n        \"value\": {\n            \"source\": [\"${path:enterprise.costCenter}\"],\n        },\n    }])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"accessControlAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttribute"},"description":"Lists the attributes that are configured for ABAC in the specified  instance."},"instanceAccessControlAttributeConfiguration":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationProperties","description":"The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use  AccessControlAttributes property instead.","language":{"csharp":{"name":"InstanceAccessControlAttributeConfigurationValue"}}},"instanceArn":{"type":"string","description":"The ARN of the AWS SSO instance under which the operation will be executed.","replaceOnChanges":true}},"type":"object","required":["instanceArn"],"inputProperties":{"accessControlAttributes":{"type":"array","items":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttribute"},"description":"Lists the attributes that are configured for ABAC in the specified  instance."},"instanceAccessControlAttributeConfiguration":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationProperties","description":"The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use  AccessControlAttributes property instead.","language":{"csharp":{"name":"InstanceAccessControlAttributeConfigurationValue"}}},"instanceArn":{"type":"string","description":"The ARN of the AWS SSO instance under which the operation will be executed."}},"requiredInputs":["instanceArn"]},"aws-native:sso:PermissionSet":{"description":"Resource Type definition for SSO PermissionSet","properties":{"customerManagedPolicyReferences":{"type":"array","items":{"$ref":"#/types/aws-native:sso:PermissionSetCustomerManagedPolicyReference"},"description":"Specifies the names and paths of the customer managed policies that you have attached to your permission set."},"description":{"type":"string","description":"The permission set description."},"inlinePolicy":{"$ref":"pulumi.json#/Any","description":"The inline policy to put in permission set.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSO::PermissionSet` for more information about the expected schema for this property."},"instanceArn":{"type":"string","description":"The sso instance arn that the permission set is owned.","replaceOnChanges":true},"managedPolicies":{"type":"array","items":{"type":"string"},"description":"A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy."},"name":{"type":"string","description":"The name you want to assign to this permission set.","replaceOnChanges":true},"permissionSetArn":{"type":"string","description":"The permission set that the policy will be attached to"},"permissionsBoundary":{"$ref":"#/types/aws-native:sso:PermissionSetPermissionsBoundary","description":"Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n\u003e Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* ."},"relayStateType":{"type":"string","description":"The relay state URL that redirect links to any service in the AWS Management Console."},"sessionDuration":{"type":"string","description":"The length of time that a user can be signed in to an AWS account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to attach to the new `PermissionSet` ."}},"type":"object","required":["instanceArn","name","permissionSetArn"],"inputProperties":{"customerManagedPolicyReferences":{"type":"array","items":{"$ref":"#/types/aws-native:sso:PermissionSetCustomerManagedPolicyReference"},"description":"Specifies the names and paths of the customer managed policies that you have attached to your permission set."},"description":{"type":"string","description":"The permission set description."},"inlinePolicy":{"$ref":"pulumi.json#/Any","description":"The inline policy to put in permission set.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSO::PermissionSet` for more information about the expected schema for this property."},"instanceArn":{"type":"string","description":"The sso instance arn that the permission set is owned."},"managedPolicies":{"type":"array","items":{"type":"string"},"description":"A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy."},"name":{"type":"string","description":"The name you want to assign to this permission set."},"permissionsBoundary":{"$ref":"#/types/aws-native:sso:PermissionSetPermissionsBoundary","description":"Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n\u003e Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* ."},"relayStateType":{"type":"string","description":"The relay state URL that redirect links to any service in the AWS Management Console."},"sessionDuration":{"type":"string","description":"The length of time that a user can be signed in to an AWS account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to attach to the new `PermissionSet` ."}},"requiredInputs":["instanceArn"]},"aws-native:stepfunctions:Activity":{"description":"Resource schema for Activity\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myActivity = new AwsNative.StepFunctions.Activity(\"myActivity\", new()\n    {\n        Name = \"myActivity\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/stepfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := stepfunctions.NewActivity(ctx, \"myActivity\", \u0026stepfunctions.ActivityArgs{\n\t\t\tName: pulumi.String(\"myActivity\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myActivity = new aws_native.stepfunctions.Activity(\"myActivity\", {\n    name: \"myActivity\",\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_activity = aws_native.stepfunctions.Activity(\"myActivity\",\n    name=\"myActivity\",\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myActivity = new AwsNative.StepFunctions.Activity(\"myActivity\", new()\n    {\n        Name = \"myActivity\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/stepfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := stepfunctions.NewActivity(ctx, \"myActivity\", \u0026stepfunctions.ActivityArgs{\n\t\t\tName: pulumi.String(\"myActivity\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myActivity = new aws_native.stepfunctions.Activity(\"myActivity\", {\n    name: \"myActivity\",\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_activity = aws_native.stepfunctions.Activity(\"myActivity\",\n    name=\"myActivity\",\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Returns the ARN of the resource."},"encryptionConfiguration":{"$ref":"#/types/aws-native:stepfunctions:ActivityEncryptionConfiguration","description":"Encryption configuration for the activity.\n\nActivity configuration is immutable, and resource names must be unique. To set customer managed keys for encryption, you must create a *new Activity* . If you attempt to change the configuration in your CFN template for an existing activity, you will receive an `ActivityAlreadyExists` exception.\n\nTo update your activity to include customer managed keys, set a new activity name within your CloudFormation template.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the activity.\n\nA name must *not* contain:\n\n- white space\n- brackets `\u003c \u003e { } [ ]`\n- wildcard characters `? *`\n- special characters `\" # % \\ ^ | ~ ` $ \u0026 , ; : /`\n- control characters ( `U+0000-001F` , `U+007F-009F` , `U+FFFE-FFFF` )\n- surrogates ( `U+D800-DFFF` )\n- invalid characters ( `U+10FFFF` )\n\nTo enable logging with CloudWatch Logs, the name should only contain 0-9, A-Z, a-z, - and _.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to add to a resource.\n\nTags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + - @` ."}},"type":"object","required":["arn","name"],"inputProperties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:stepfunctions:ActivityEncryptionConfiguration","description":"Encryption configuration for the activity.\n\nActivity configuration is immutable, and resource names must be unique. To set customer managed keys for encryption, you must create a *new Activity* . If you attempt to change the configuration in your CFN template for an existing activity, you will receive an `ActivityAlreadyExists` exception.\n\nTo update your activity to include customer managed keys, set a new activity name within your CloudFormation template."},"name":{"type":"string","description":"The name of the activity.\n\nA name must *not* contain:\n\n- white space\n- brackets `\u003c \u003e { } [ ]`\n- wildcard characters `? *`\n- special characters `\" # % \\ ^ | ~ ` $ \u0026 , ; : /`\n- control characters ( `U+0000-001F` , `U+007F-009F` , `U+FFFE-FFFF` )\n- surrogates ( `U+D800-DFFF` )\n- invalid characters ( `U+10FFFF` )\n\nTo enable logging with CloudWatch Logs, the name should only contain 0-9, A-Z, a-z, - and _."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to add to a resource.\n\nTags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + - @` ."}}},"aws-native:stepfunctions:StateMachine":{"description":"Resource schema for StateMachine\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myStateMachine = new AwsNative.StepFunctions.StateMachine(\"myStateMachine\", new()\n    {\n        StateMachineName = \"HelloWorld-StateMachine\",\n        StateMachineType = AwsNative.StepFunctions.StateMachineType.Standard,\n        DefinitionString = \"{\\\"StartAt\\\": \\\"HelloWorld\\\",  \\\"States\\\": {\\\"HelloWorld\\\": {\\\"Type\\\": \\\"Task\\\", \\\"Resource\\\":  \\\"arn:aws:lambda:us-east-1:111122223333;:function:HelloFunction\\\", \\\"End\\\": true}}}\",\n        RoleArn = \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1;\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/stepfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := stepfunctions.NewStateMachine(ctx, \"myStateMachine\", \u0026stepfunctions.StateMachineArgs{\n\t\t\tStateMachineName: pulumi.String(\"HelloWorld-StateMachine\"),\n\t\t\tStateMachineType: stepfunctions.StateMachineTypeStandard,\n\t\t\tDefinitionString: pulumi.String(\"{\\\"StartAt\\\": \\\"HelloWorld\\\",  \\\"States\\\": {\\\"HelloWorld\\\": {\\\"Type\\\": \\\"Task\\\", \\\"Resource\\\":  \\\"arn:aws:lambda:us-east-1:111122223333;:function:HelloFunction\\\", \\\"End\\\": true}}}\"),\n\t\t\tRoleArn:          pulumi.String(\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1;\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myStateMachine = new aws_native.stepfunctions.StateMachine(\"myStateMachine\", {\n    stateMachineName: \"HelloWorld-StateMachine\",\n    stateMachineType: aws_native.stepfunctions.StateMachineType.Standard,\n    definitionString: \"{\\\"StartAt\\\": \\\"HelloWorld\\\",  \\\"States\\\": {\\\"HelloWorld\\\": {\\\"Type\\\": \\\"Task\\\", \\\"Resource\\\":  \\\"arn:aws:lambda:us-east-1:111122223333;:function:HelloFunction\\\", \\\"End\\\": true}}}\",\n    roleArn: \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1;\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_state_machine = aws_native.stepfunctions.StateMachine(\"myStateMachine\",\n    state_machine_name=\"HelloWorld-StateMachine\",\n    state_machine_type=aws_native.stepfunctions.StateMachineType.STANDARD,\n    definition_string=\"{\\\"StartAt\\\": \\\"HelloWorld\\\",  \\\"States\\\": {\\\"HelloWorld\\\": {\\\"Type\\\": \\\"Task\\\", \\\"Resource\\\":  \\\"arn:aws:lambda:us-east-1:111122223333;:function:HelloFunction\\\", \\\"End\\\": true}}}\",\n    role_arn=\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1;\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myStateMachine = new AwsNative.StepFunctions.StateMachine(\"myStateMachine\", new()\n    {\n        StateMachineName = \"HelloWorld-StateMachine\",\n        StateMachineType = AwsNative.StepFunctions.StateMachineType.Standard,\n        DefinitionString = @\"{\n    \"\"StartAt\"\": \"\"HelloWorld\"\",\n    \"\"States\"\" : {\n        \"\"HelloWorld\"\" : {\n            \"\"Type\"\" : \"\"Task\"\", \n            \"\"Resource\"\" : \"\"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\"\",\n            \"\"End\"\" : true\n        }\n    }\n}\",\n        RoleArn = \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/stepfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := stepfunctions.NewStateMachine(ctx, \"myStateMachine\", \u0026stepfunctions.StateMachineArgs{\n\t\t\tStateMachineName: pulumi.String(\"HelloWorld-StateMachine\"),\n\t\t\tStateMachineType: stepfunctions.StateMachineTypeStandard,\n\t\t\tDefinitionString: pulumi.String(`{\n    \"StartAt\": \"HelloWorld\",\n    \"States\" : {\n        \"HelloWorld\" : {\n            \"Type\" : \"Task\", \n            \"Resource\" : \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n            \"End\" : true\n        }\n    }\n}`),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myStateMachine = new aws_native.stepfunctions.StateMachine(\"myStateMachine\", {\n    stateMachineName: \"HelloWorld-StateMachine\",\n    stateMachineType: aws_native.stepfunctions.StateMachineType.Standard,\n    definitionString: `{\n    \"StartAt\": \"HelloWorld\",\n    \"States\" : {\n        \"HelloWorld\" : {\n            \"Type\" : \"Task\", \n            \"Resource\" : \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n            \"End\" : true\n        }\n    }\n}`,\n    roleArn: \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_state_machine = aws_native.stepfunctions.StateMachine(\"myStateMachine\",\n    state_machine_name=\"HelloWorld-StateMachine\",\n    state_machine_type=aws_native.stepfunctions.StateMachineType.STANDARD,\n    definition_string=\"\"\"{\n    \"StartAt\": \"HelloWorld\",\n    \"States\" : {\n        \"HelloWorld\" : {\n            \"Type\" : \"Task\", \n            \"Resource\" : \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n            \"End\" : true\n        }\n    }\n}\"\"\",\n    role_arn=\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myStateMachine = new AwsNative.StepFunctions.StateMachine(\"myStateMachine\", new()\n    {\n        StateMachineName = \"HelloWorld-StateMachine\",\n        DefinitionString = @\"{\n  \"\"StartAt\"\": \"\"HelloWorld\"\",\n  \"\"States\"\": {\n    \"\"HelloWorld\"\": {\n      \"\"Type\"\": \"\"Task\"\",\n      \"\"Resource\"\": \"\"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\"\",\n      \"\"End\"\": true\n    }\n  }\n}\",\n        RoleArn = \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname1\",\n                Value = \"value1\",\n            },\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"keyname2\",\n                Value = \"value2\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/stepfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := stepfunctions.NewStateMachine(ctx, \"myStateMachine\", \u0026stepfunctions.StateMachineArgs{\n\t\t\tStateMachineName: pulumi.String(\"HelloWorld-StateMachine\"),\n\t\t\tDefinitionString: pulumi.String(`{\n  \"StartAt\": \"HelloWorld\",\n  \"States\": {\n    \"HelloWorld\": {\n      \"Type\": \"Task\",\n      \"Resource\": \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n      \"End\": true\n    }\n  }\n}`),\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\"),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname1\"),\n\t\t\t\t\tValue: pulumi.String(\"value1\"),\n\t\t\t\t},\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"keyname2\"),\n\t\t\t\t\tValue: pulumi.String(\"value2\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myStateMachine = new aws_native.stepfunctions.StateMachine(\"myStateMachine\", {\n    stateMachineName: \"HelloWorld-StateMachine\",\n    definitionString: `{\n  \"StartAt\": \"HelloWorld\",\n  \"States\": {\n    \"HelloWorld\": {\n      \"Type\": \"Task\",\n      \"Resource\": \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n      \"End\": true\n    }\n  }\n}`,\n    roleArn: \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n    tags: [\n        {\n            key: \"keyname1\",\n            value: \"value1\",\n        },\n        {\n            key: \"keyname2\",\n            value: \"value2\",\n        },\n    ],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_state_machine = aws_native.stepfunctions.StateMachine(\"myStateMachine\",\n    state_machine_name=\"HelloWorld-StateMachine\",\n    definition_string=\"\"\"{\n  \"StartAt\": \"HelloWorld\",\n  \"States\": {\n    \"HelloWorld\": {\n      \"Type\": \"Task\",\n      \"Resource\": \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n      \"End\": true\n    }\n  }\n}\"\"\",\n    role_arn=\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n    tags=[\n        {\n            \"key\": \"keyname1\",\n            \"value\": \"value1\",\n        },\n        {\n            \"key\": \"keyname2\",\n            \"value\": \"value2\",\n        },\n    ])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myStateMachine = new AwsNative.StepFunctions.StateMachine(\"myStateMachine\", new()\n    {\n        StateMachineName = \"HelloWorld-StateMachine\",\n        DefinitionS3Location = new AwsNative.StepFunctions.Inputs.StateMachineS3LocationArgs\n        {\n            Bucket = \"example_bucket\",\n            Key = \"hello_world.json\",\n        },\n        DefinitionSubstitutions = \n        {\n            { \"helloFunction\", \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\" },\n        },\n        RoleArn = \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/stepfunctions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := stepfunctions.NewStateMachine(ctx, \"myStateMachine\", \u0026stepfunctions.StateMachineArgs{\n\t\t\tStateMachineName: pulumi.String(\"HelloWorld-StateMachine\"),\n\t\t\tDefinitionS3Location: \u0026stepfunctions.StateMachineS3LocationArgs{\n\t\t\t\tBucket: pulumi.String(\"example_bucket\"),\n\t\t\t\tKey:    pulumi.String(\"hello_world.json\"),\n\t\t\t},\n\t\t\tDefinitionSubstitutions: pulumi.Map{\n\t\t\t\t\"helloFunction\": pulumi.Any(\"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\"),\n\t\t\t},\n\t\t\tRoleArn: pulumi.String(\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myStateMachine = new aws_native.stepfunctions.StateMachine(\"myStateMachine\", {\n    stateMachineName: \"HelloWorld-StateMachine\",\n    definitionS3Location: {\n        bucket: \"example_bucket\",\n        key: \"hello_world.json\",\n    },\n    definitionSubstitutions: {\n        helloFunction: \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n    },\n    roleArn: \"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_state_machine = aws_native.stepfunctions.StateMachine(\"myStateMachine\",\n    state_machine_name=\"HelloWorld-StateMachine\",\n    definition_s3_location={\n        \"bucket\": \"example_bucket\",\n        \"key\": \"hello_world.json\",\n    },\n    definition_substitutions={\n        \"helloFunction\": \"arn:aws:lambda:us-east-1:111122223333:function:HelloFunction\",\n    },\n    role_arn=\"arn:aws:iam::111122223333:role/service-role/StatesExecutionRole-us-east-1\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Returns the ARN of the resource."},"definition":{"$ref":"#/types/aws-native:stepfunctions:StateMachineDefinition","description":"The Amazon States Language definition of the state machine. The state machine definition must be in JSON or YAML, and the format of the object must match the format of your CloudFormation template file. See [Amazon States Language](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html) ."},"definitionS3Location":{"$ref":"#/types/aws-native:stepfunctions:StateMachineS3Location","description":"The name of the S3 bucket where the state machine definition is stored. The state machine definition must be a JSON or YAML file."},"definitionString":{"type":"string","description":"The Amazon States Language definition of the state machine. The state machine definition must be in JSON. See [Amazon States Language](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html) ."},"definitionSubstitutions":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"integer"},{"type":"boolean"}]},"description":"A map (string to string) that specifies the mappings for placeholder variables in the state machine definition. This enables the customer to inject values obtained at runtime, for example from intrinsic functions, in the state machine definition. Variables can be template parameter names, resource logical IDs, resource attributes, or a variable in a key-value map.\n\nSubstitutions must follow the syntax: `${key_name}` or `${variable_1,variable_2,...}` ."},"encryptionConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineEncryptionConfiguration","description":"Encryption configuration for the state machine."},"loggingConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineLoggingConfiguration","description":"Defines what execution history events are logged and where they are logged.\n\n\u003e By default, the `level` is set to `OFF` . For more information see [Log Levels](https://docs.aws.amazon.com/step-functions/latest/dg/cloudwatch-log-level.html) in the AWS Step Functions User Guide."},"name":{"type":"string","description":"Returns the name of the state machine. For example:\n\n`{ \"Fn::GetAtt\": [\"MyStateMachine\", \"Name\"] }`\n\nReturns the name of your state machine:\n\n`HelloWorld-StateMachine`\n\nIf you did not specify the name it will be similar to the following:\n\n`MyStateMachine-1234abcdefgh`\n\nFor more information about using `Fn::GetAtt` , see [Fn::GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html) ."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to use for this state machine."},"stateMachineName":{"type":"string","description":"The name of the state machine.\n\nA name must *not* contain:\n\n- white space\n- brackets `\u003c \u003e { } [ ]`\n- wildcard characters `? *`\n- special characters `\" # % \\ ^ | ~ ` $ \u0026 , ; : /`\n- control characters ( `U+0000-001F` , `U+007F-009F` )\n\n\u003e If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.","replaceOnChanges":true},"stateMachineRevisionId":{"type":"string","description":"Identifier for a state machine revision, which is an immutable, read-only snapshot of a state machine’s definition and configuration."},"stateMachineType":{"$ref":"#/types/aws-native:stepfunctions:StateMachineType","description":"Determines whether a `STANDARD` or `EXPRESS` state machine is created. The default is `STANDARD` . You cannot update the `type` of a state machine once it has been created. For more information on `STANDARD` and `EXPRESS` workflows, see [Standard Versus Express Workflows](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-standard-vs-express.html) in the AWS Step Functions Developer Guide.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to add to a resource.\n\nTags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + - @` ."},"tracingConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineTracingConfiguration","description":"Selects whether or not the state machine's AWS X-Ray tracing is enabled."}},"type":"object","required":["arn","name","roleArn","stateMachineRevisionId"],"inputProperties":{"definition":{"$ref":"#/types/aws-native:stepfunctions:StateMachineDefinition","description":"The Amazon States Language definition of the state machine. The state machine definition must be in JSON or YAML, and the format of the object must match the format of your CloudFormation template file. See [Amazon States Language](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html) ."},"definitionS3Location":{"$ref":"#/types/aws-native:stepfunctions:StateMachineS3Location","description":"The name of the S3 bucket where the state machine definition is stored. The state machine definition must be a JSON or YAML file."},"definitionString":{"type":"string","description":"The Amazon States Language definition of the state machine. The state machine definition must be in JSON. See [Amazon States Language](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html) ."},"definitionSubstitutions":{"type":"object","additionalProperties":{"oneOf":[{"type":"string"},{"type":"integer"},{"type":"boolean"}]},"description":"A map (string to string) that specifies the mappings for placeholder variables in the state machine definition. This enables the customer to inject values obtained at runtime, for example from intrinsic functions, in the state machine definition. Variables can be template parameter names, resource logical IDs, resource attributes, or a variable in a key-value map.\n\nSubstitutions must follow the syntax: `${key_name}` or `${variable_1,variable_2,...}` ."},"encryptionConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineEncryptionConfiguration","description":"Encryption configuration for the state machine."},"loggingConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineLoggingConfiguration","description":"Defines what execution history events are logged and where they are logged.\n\n\u003e By default, the `level` is set to `OFF` . For more information see [Log Levels](https://docs.aws.amazon.com/step-functions/latest/dg/cloudwatch-log-level.html) in the AWS Step Functions User Guide."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to use for this state machine."},"stateMachineName":{"type":"string","description":"The name of the state machine.\n\nA name must *not* contain:\n\n- white space\n- brackets `\u003c \u003e { } [ ]`\n- wildcard characters `? *`\n- special characters `\" # % \\ ^ | ~ ` $ \u0026 , ; : /`\n- control characters ( `U+0000-001F` , `U+007F-009F` )\n\n\u003e If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"stateMachineType":{"$ref":"#/types/aws-native:stepfunctions:StateMachineType","description":"Determines whether a `STANDARD` or `EXPRESS` state machine is created. The default is `STANDARD` . You cannot update the `type` of a state machine once it has been created. For more information on `STANDARD` and `EXPRESS` workflows, see [Standard Versus Express Workflows](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-standard-vs-express.html) in the AWS Step Functions Developer Guide."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of tags to add to a resource.\n\nTags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + - @` ."},"tracingConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineTracingConfiguration","description":"Selects whether or not the state machine's AWS X-Ray tracing is enabled."}},"requiredInputs":["roleArn"]},"aws-native:stepfunctions:StateMachineAlias":{"description":"Resource schema for StateMachineAlias","properties":{"arn":{"type":"string","description":"The ARN of the alias."},"deploymentPreference":{"$ref":"#/types/aws-native:stepfunctions:StateMachineAliasDeploymentPreference","description":"The settings that enable gradual state machine deployments. These settings include [Alarms](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-alarms) , [Interval](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-interval) , [Percentage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-percentage) , [StateMachineVersionArn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-statemachineversionarn) , and [Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-type) .\n\nCloudFormation automatically shifts traffic from the version an alias currently points to, to a new state machine version that you specify.\n\n\u003e `RoutingConfiguration` and `DeploymentPreference` are mutually exclusive properties. You must define only one of these properties. \n\nBased on the type of deployment you want to perform, you can specify one of the following settings:\n\n- `LINEAR` - Shifts traffic to the new version in equal increments with an equal number of minutes between each increment.\n\nFor example, if you specify the increment percent as `20` with an interval of `600` minutes, this deployment increases traffic by 20 percent every 600 minutes until the new version receives 100 percent of the traffic. This deployment immediately rolls back the new version if any Amazon CloudWatch alarms are triggered.\n- `ALL_AT_ONCE` - Shifts 100 percent of traffic to the new version immediately. CloudFormation monitors the new version and rolls it back automatically to the previous version if any CloudWatch alarms are triggered.\n- `CANARY` - Shifts traffic in two increments.\n\nIn the first increment, a small percentage of traffic, for example, 10 percent is shifted to the new version. In the second increment, before a specified time interval in seconds gets over, the remaining traffic is shifted to the new version. The shift to the new version for the remaining traffic takes place only if no CloudWatch alarms are triggered during the specified time interval."},"description":{"type":"string","description":"An optional description of the alias."},"name":{"type":"string","description":"The alias name.","replaceOnChanges":true},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:stepfunctions:StateMachineAliasRoutingConfigurationVersion"},"description":"The routing configuration of an alias. Routing configuration splits [StartExecution](https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html) requests between one or two versions of the same state machine.\n\nUse `RoutingConfiguration` if you want to explicitly set the alias [weights](https://docs.aws.amazon.com/step-functions/latest/apireference/API_RoutingConfigurationListItem.html#StepFunctions-Type-RoutingConfigurationListItem-weight) . Weight is the percentage of traffic you want to route to a state machine version.\n\n\u003e `RoutingConfiguration` and `DeploymentPreference` are mutually exclusive properties. You must define only one of these properties."}},"type":"object","required":["arn"],"inputProperties":{"deploymentPreference":{"$ref":"#/types/aws-native:stepfunctions:StateMachineAliasDeploymentPreference","description":"The settings that enable gradual state machine deployments. These settings include [Alarms](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-alarms) , [Interval](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-interval) , [Percentage](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-percentage) , [StateMachineVersionArn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-statemachineversionarn) , and [Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stepfunctions-statemachinealias-deploymentpreference.html#cfn-stepfunctions-statemachinealias-deploymentpreference-type) .\n\nCloudFormation automatically shifts traffic from the version an alias currently points to, to a new state machine version that you specify.\n\n\u003e `RoutingConfiguration` and `DeploymentPreference` are mutually exclusive properties. You must define only one of these properties. \n\nBased on the type of deployment you want to perform, you can specify one of the following settings:\n\n- `LINEAR` - Shifts traffic to the new version in equal increments with an equal number of minutes between each increment.\n\nFor example, if you specify the increment percent as `20` with an interval of `600` minutes, this deployment increases traffic by 20 percent every 600 minutes until the new version receives 100 percent of the traffic. This deployment immediately rolls back the new version if any Amazon CloudWatch alarms are triggered.\n- `ALL_AT_ONCE` - Shifts 100 percent of traffic to the new version immediately. CloudFormation monitors the new version and rolls it back automatically to the previous version if any CloudWatch alarms are triggered.\n- `CANARY` - Shifts traffic in two increments.\n\nIn the first increment, a small percentage of traffic, for example, 10 percent is shifted to the new version. In the second increment, before a specified time interval in seconds gets over, the remaining traffic is shifted to the new version. The shift to the new version for the remaining traffic takes place only if no CloudWatch alarms are triggered during the specified time interval."},"description":{"type":"string","description":"An optional description of the alias."},"name":{"type":"string","description":"The alias name."},"routingConfiguration":{"type":"array","items":{"$ref":"#/types/aws-native:stepfunctions:StateMachineAliasRoutingConfigurationVersion"},"description":"The routing configuration of an alias. Routing configuration splits [StartExecution](https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html) requests between one or two versions of the same state machine.\n\nUse `RoutingConfiguration` if you want to explicitly set the alias [weights](https://docs.aws.amazon.com/step-functions/latest/apireference/API_RoutingConfigurationListItem.html#StepFunctions-Type-RoutingConfigurationListItem-weight) . Weight is the percentage of traffic you want to route to a state machine version.\n\n\u003e `RoutingConfiguration` and `DeploymentPreference` are mutually exclusive properties. You must define only one of these properties."}}},"aws-native:stepfunctions:StateMachineVersion":{"description":"Resource schema for StateMachineVersion","properties":{"arn":{"type":"string","description":"Returns the ARN of the state machine version. For example, `arn:aws:states:us-east-1:123456789012:stateMachine:myStateMachine:1` ."},"description":{"type":"string","description":"An optional description of the state machine version.","replaceOnChanges":true},"stateMachineArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the state machine.","replaceOnChanges":true},"stateMachineRevisionId":{"type":"string","description":"Identifier for a state machine revision, which is an immutable, read-only snapshot of a state machine’s definition and configuration.\n\nOnly publish the state machine version if the current state machine's revision ID matches the specified ID. Use this option to avoid publishing a version if the state machine has changed since you last updated it.\n\nTo specify the initial state machine revision, set the value as `INITIAL` .","replaceOnChanges":true}},"type":"object","required":["arn","stateMachineArn"],"inputProperties":{"description":{"type":"string","description":"An optional description of the state machine version."},"stateMachineArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the state machine."},"stateMachineRevisionId":{"type":"string","description":"Identifier for a state machine revision, which is an immutable, read-only snapshot of a state machine’s definition and configuration.\n\nOnly publish the state machine version if the current state machine's revision ID matches the specified ID. Use this option to avoid publishing a version if the state machine has changed since you last updated it.\n\nTo specify the initial state machine revision, set the value as `INITIAL` ."}},"requiredInputs":["stateMachineArn"]},"aws-native:supportapp:AccountAlias":{"description":"An AWS Support App resource that creates, updates, reads, and deletes a customer's account alias.","properties":{"accountAlias":{"type":"string","description":"An account alias associated with a customer's account.","language":{"csharp":{"name":"AccountAliasValue"}}},"accountAliasResourceId":{"type":"string","description":"Unique identifier representing an alias tied to an account"}},"type":"object","required":["accountAlias","accountAliasResourceId"],"inputProperties":{"accountAlias":{"type":"string","description":"An account alias associated with a customer's account.","language":{"csharp":{"name":"AccountAliasValue"}}}},"requiredInputs":["accountAlias"]},"aws-native:supportapp:SlackChannelConfiguration":{"description":"An AWS Support App resource that creates, updates, lists and deletes Slack channel configurations.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var awsSupportSlackAppCFNRole = new AwsNative.Iam.Role(\"awsSupportSlackAppCFNRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"supportapp.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        ManagedPolicyArns = new[]\n        {\n            \"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\",\n        },\n    });\n\n    var slackChannelConfiguration = new AwsNative.SupportApp.SlackChannelConfiguration(\"slackChannelConfiguration\", new()\n    {\n        TeamId = \"T012ABCDEFG\",\n        ChannelId = \"C01234A5BCD\",\n        ChannelName = \"cloudformationtemplatechannel\",\n        NotifyOnCreateOrReopenCase = true,\n        NotifyOnAddCorrespondenceToCase = false,\n        NotifyOnResolveCase = true,\n        NotifyOnCaseSeverity = AwsNative.SupportApp.SlackChannelConfigurationNotifyOnCaseSeverity.High,\n        ChannelRoleArn = awsSupportSlackAppCFNRole.Arn,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/supportapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tawsSupportSlackAppCFNRole, err := iam.NewRole(ctx, \"awsSupportSlackAppCFNRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"supportapp.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = supportapp.NewSlackChannelConfiguration(ctx, \"slackChannelConfiguration\", \u0026supportapp.SlackChannelConfigurationArgs{\n\t\t\tTeamId:                          pulumi.String(\"T012ABCDEFG\"),\n\t\t\tChannelId:                       pulumi.String(\"C01234A5BCD\"),\n\t\t\tChannelName:                     pulumi.String(\"cloudformationtemplatechannel\"),\n\t\t\tNotifyOnCreateOrReopenCase:      pulumi.Bool(true),\n\t\t\tNotifyOnAddCorrespondenceToCase: pulumi.Bool(false),\n\t\t\tNotifyOnResolveCase:             pulumi.Bool(true),\n\t\t\tNotifyOnCaseSeverity:            supportapp.SlackChannelConfigurationNotifyOnCaseSeverityHigh,\n\t\t\tChannelRoleArn:                  awsSupportSlackAppCFNRole.Arn,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst awsSupportSlackAppCFNRole = new aws_native.iam.Role(\"awsSupportSlackAppCFNRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"supportapp.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    managedPolicyArns: [\"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\"],\n});\nconst slackChannelConfiguration = new aws_native.supportapp.SlackChannelConfiguration(\"slackChannelConfiguration\", {\n    teamId: \"T012ABCDEFG\",\n    channelId: \"C01234A5BCD\",\n    channelName: \"cloudformationtemplatechannel\",\n    notifyOnCreateOrReopenCase: true,\n    notifyOnAddCorrespondenceToCase: false,\n    notifyOnResolveCase: true,\n    notifyOnCaseSeverity: aws_native.supportapp.SlackChannelConfigurationNotifyOnCaseSeverity.High,\n    channelRoleArn: awsSupportSlackAppCFNRole.arn,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naws_support_slack_app_cfn_role = aws_native.iam.Role(\"awsSupportSlackAppCFNRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"supportapp.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    managed_policy_arns=[\"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\"])\nslack_channel_configuration = aws_native.supportapp.SlackChannelConfiguration(\"slackChannelConfiguration\",\n    team_id=\"T012ABCDEFG\",\n    channel_id=\"C01234A5BCD\",\n    channel_name=\"cloudformationtemplatechannel\",\n    notify_on_create_or_reopen_case=True,\n    notify_on_add_correspondence_to_case=False,\n    notify_on_resolve_case=True,\n    notify_on_case_severity=aws_native.supportapp.SlackChannelConfigurationNotifyOnCaseSeverity.HIGH,\n    channel_role_arn=aws_support_slack_app_cfn_role.arn)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var awsSupportSlackAppCFNRole = new AwsNative.Iam.Role(\"awsSupportSlackAppCFNRole\", new()\n    {\n        AssumeRolePolicyDocument = new Dictionary\u003cstring, object?\u003e\n        {\n            [\"version\"] = \"2012-10-17\",\n            [\"statement\"] = new[]\n            {\n                new Dictionary\u003cstring, object?\u003e\n                {\n                    [\"effect\"] = \"Allow\",\n                    [\"principal\"] = new Dictionary\u003cstring, object?\u003e\n                    {\n                        [\"service\"] = new[]\n                        {\n                            \"supportapp.amazonaws.com\",\n                        },\n                    },\n                    [\"action\"] = new[]\n                    {\n                        \"sts:AssumeRole\",\n                    },\n                },\n            },\n        },\n        ManagedPolicyArns = new[]\n        {\n            \"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\",\n        },\n    });\n\n    var slackChannelConfiguration = new AwsNative.SupportApp.SlackChannelConfiguration(\"slackChannelConfiguration\", new()\n    {\n        TeamId = \"T012ABCDEFG\",\n        ChannelId = \"C01234A5BCD\",\n        ChannelName = \"cfntemplatechannel\",\n        NotifyOnCreateOrReopenCase = true,\n        NotifyOnAddCorrespondenceToCase = false,\n        NotifyOnResolveCase = true,\n        NotifyOnCaseSeverity = AwsNative.SupportApp.SlackChannelConfigurationNotifyOnCaseSeverity.High,\n        ChannelRoleArn = awsSupportSlackAppCFNRole.Arn,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/iam\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/supportapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tawsSupportSlackAppCFNRole, err := iam.NewRole(ctx, \"awsSupportSlackAppCFNRole\", \u0026iam.RoleArgs{\n\t\t\tAssumeRolePolicyDocument: pulumi.Any(map[string]interface{}{\n\t\t\t\t\"version\": \"2012-10-17\",\n\t\t\t\t\"statement\": []map[string]interface{}{\n\t\t\t\t\tmap[string]interface{}{\n\t\t\t\t\t\t\"effect\": \"Allow\",\n\t\t\t\t\t\t\"principal\": map[string]interface{}{\n\t\t\t\t\t\t\t\"service\": []string{\n\t\t\t\t\t\t\t\t\"supportapp.amazonaws.com\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"action\": []string{\n\t\t\t\t\t\t\t\"sts:AssumeRole\",\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t}),\n\t\t\tManagedPolicyArns: pulumi.StringArray{\n\t\t\t\tpulumi.String(\"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\"),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = supportapp.NewSlackChannelConfiguration(ctx, \"slackChannelConfiguration\", \u0026supportapp.SlackChannelConfigurationArgs{\n\t\t\tTeamId:                          pulumi.String(\"T012ABCDEFG\"),\n\t\t\tChannelId:                       pulumi.String(\"C01234A5BCD\"),\n\t\t\tChannelName:                     pulumi.String(\"cfntemplatechannel\"),\n\t\t\tNotifyOnCreateOrReopenCase:      pulumi.Bool(true),\n\t\t\tNotifyOnAddCorrespondenceToCase: pulumi.Bool(false),\n\t\t\tNotifyOnResolveCase:             pulumi.Bool(true),\n\t\t\tNotifyOnCaseSeverity:            supportapp.SlackChannelConfigurationNotifyOnCaseSeverityHigh,\n\t\t\tChannelRoleArn:                  awsSupportSlackAppCFNRole.Arn,\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst awsSupportSlackAppCFNRole = new aws_native.iam.Role(\"awsSupportSlackAppCFNRole\", {\n    assumeRolePolicyDocument: {\n        version: \"2012-10-17\",\n        statement: [{\n            effect: \"Allow\",\n            principal: {\n                service: [\"supportapp.amazonaws.com\"],\n            },\n            action: [\"sts:AssumeRole\"],\n        }],\n    },\n    managedPolicyArns: [\"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\"],\n});\nconst slackChannelConfiguration = new aws_native.supportapp.SlackChannelConfiguration(\"slackChannelConfiguration\", {\n    teamId: \"T012ABCDEFG\",\n    channelId: \"C01234A5BCD\",\n    channelName: \"cfntemplatechannel\",\n    notifyOnCreateOrReopenCase: true,\n    notifyOnAddCorrespondenceToCase: false,\n    notifyOnResolveCase: true,\n    notifyOnCaseSeverity: aws_native.supportapp.SlackChannelConfigurationNotifyOnCaseSeverity.High,\n    channelRoleArn: awsSupportSlackAppCFNRole.arn,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\naws_support_slack_app_cfn_role = aws_native.iam.Role(\"awsSupportSlackAppCFNRole\",\n    assume_role_policy_document={\n        \"version\": \"2012-10-17\",\n        \"statement\": [{\n            \"effect\": \"Allow\",\n            \"principal\": {\n                \"service\": [\"supportapp.amazonaws.com\"],\n            },\n            \"action\": [\"sts:AssumeRole\"],\n        }],\n    },\n    managed_policy_arns=[\"arn:aws:iam::aws:policy/AWSSupportAppFullAccess\"])\nslack_channel_configuration = aws_native.supportapp.SlackChannelConfiguration(\"slackChannelConfiguration\",\n    team_id=\"T012ABCDEFG\",\n    channel_id=\"C01234A5BCD\",\n    channel_name=\"cfntemplatechannel\",\n    notify_on_create_or_reopen_case=True,\n    notify_on_add_correspondence_to_case=False,\n    notify_on_resolve_case=True,\n    notify_on_case_severity=aws_native.supportapp.SlackChannelConfigurationNotifyOnCaseSeverity.HIGH,\n    channel_role_arn=aws_support_slack_app_cfn_role.arn)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"channelId":{"type":"string","description":"The channel ID in Slack, which identifies a channel within a workspace.","replaceOnChanges":true},"channelName":{"type":"string","description":"The channel name in Slack."},"channelRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that grants the AWS Support App access to perform operations for AWS services."},"notifyOnAddCorrespondenceToCase":{"type":"boolean","description":"Whether to notify when a correspondence is added to a case."},"notifyOnCaseSeverity":{"$ref":"#/types/aws-native:supportapp:SlackChannelConfigurationNotifyOnCaseSeverity","description":"The severity level of a support case that a customer wants to get notified for."},"notifyOnCreateOrReopenCase":{"type":"boolean","description":"Whether to notify when a case is created or reopened."},"notifyOnResolveCase":{"type":"boolean","description":"Whether to notify when a case is resolved."},"teamId":{"type":"string","description":"The team ID in Slack, which uniquely identifies a workspace.","replaceOnChanges":true}},"type":"object","required":["channelId","channelRoleArn","notifyOnCaseSeverity","teamId"],"inputProperties":{"channelId":{"type":"string","description":"The channel ID in Slack, which identifies a channel within a workspace."},"channelName":{"type":"string","description":"The channel name in Slack."},"channelRoleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of an IAM role that grants the AWS Support App access to perform operations for AWS services."},"notifyOnAddCorrespondenceToCase":{"type":"boolean","description":"Whether to notify when a correspondence is added to a case."},"notifyOnCaseSeverity":{"$ref":"#/types/aws-native:supportapp:SlackChannelConfigurationNotifyOnCaseSeverity","description":"The severity level of a support case that a customer wants to get notified for."},"notifyOnCreateOrReopenCase":{"type":"boolean","description":"Whether to notify when a case is created or reopened."},"notifyOnResolveCase":{"type":"boolean","description":"Whether to notify when a case is resolved."},"teamId":{"type":"string","description":"The team ID in Slack, which uniquely identifies a workspace."}},"requiredInputs":["channelId","channelRoleArn","notifyOnCaseSeverity","teamId"]},"aws-native:supportapp:SlackWorkspaceConfiguration":{"description":"An AWS Support App resource that creates, updates, lists, and deletes Slack workspace configurations.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var slackWorkspaceConfiguration = new AwsNative.SupportApp.SlackWorkspaceConfiguration(\"slackWorkspaceConfiguration\", new()\n    {\n        TeamId = \"T012ABCDEFG\",\n        VersionId = \"1\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/supportapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := supportapp.NewSlackWorkspaceConfiguration(ctx, \"slackWorkspaceConfiguration\", \u0026supportapp.SlackWorkspaceConfigurationArgs{\n\t\t\tTeamId:    pulumi.String(\"T012ABCDEFG\"),\n\t\t\tVersionId: pulumi.String(\"1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst slackWorkspaceConfiguration = new aws_native.supportapp.SlackWorkspaceConfiguration(\"slackWorkspaceConfiguration\", {\n    teamId: \"T012ABCDEFG\",\n    versionId: \"1\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nslack_workspace_configuration = aws_native.supportapp.SlackWorkspaceConfiguration(\"slackWorkspaceConfiguration\",\n    team_id=\"T012ABCDEFG\",\n    version_id=\"1\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var slackWorkspaceConfiguration = new AwsNative.SupportApp.SlackWorkspaceConfiguration(\"slackWorkspaceConfiguration\", new()\n    {\n        TeamId = \"T012ABCDEFG\",\n        VersionId = \"1\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/supportapp\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := supportapp.NewSlackWorkspaceConfiguration(ctx, \"slackWorkspaceConfiguration\", \u0026supportapp.SlackWorkspaceConfigurationArgs{\n\t\t\tTeamId:    pulumi.String(\"T012ABCDEFG\"),\n\t\t\tVersionId: pulumi.String(\"1\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst slackWorkspaceConfiguration = new aws_native.supportapp.SlackWorkspaceConfiguration(\"slackWorkspaceConfiguration\", {\n    teamId: \"T012ABCDEFG\",\n    versionId: \"1\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nslack_workspace_configuration = aws_native.supportapp.SlackWorkspaceConfiguration(\"slackWorkspaceConfiguration\",\n    team_id=\"T012ABCDEFG\",\n    version_id=\"1\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"teamId":{"type":"string","description":"The team ID in Slack, which uniquely identifies a workspace.","replaceOnChanges":true},"versionId":{"type":"string","description":"An identifier used to update an existing Slack workspace configuration in AWS CloudFormation."}},"type":"object","required":["teamId"],"inputProperties":{"teamId":{"type":"string","description":"The team ID in Slack, which uniquely identifies a workspace."},"versionId":{"type":"string","description":"An identifier used to update an existing Slack workspace configuration in AWS CloudFormation."}},"requiredInputs":["teamId"]},"aws-native:synthetics:Canary":{"description":"Resource Type definition for AWS::Synthetics::Canary\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var syntheticsCanary = new AwsNative.Synthetics.Canary(\"syntheticsCanary\", new()\n    {\n        Name = \"samplecanary\",\n        ExecutionRoleArn = \"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\",\n        Code = new AwsNative.Synthetics.Inputs.CanaryCodeArgs\n        {\n            Handler = \"pageLoadBlueprint.handler\",\n            S3Bucket = \"aws-synthetics-code-myaccount-canary1\",\n            S3Key = \"my-script-location\",\n        },\n        ArtifactS3Location = \"s3://my-results-bucket\",\n        RuntimeVersion = \"syn-nodejs-puppeteer-3.3\",\n        Schedule = new AwsNative.Synthetics.Inputs.CanaryScheduleArgs\n        {\n            Expression = \"rate(1 minute)\",\n            DurationInSeconds = \"3600\",\n        },\n        RunConfig = new AwsNative.Synthetics.Inputs.CanaryRunConfigArgs\n        {\n            TimeoutInSeconds = 60,\n        },\n        FailureRetentionPeriod = 30,\n        SuccessRetentionPeriod = 30,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n        StartCanaryAfterCreation = true,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/synthetics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := synthetics.NewCanary(ctx, \"syntheticsCanary\", \u0026synthetics.CanaryArgs{\n\t\t\tName:             pulumi.String(\"samplecanary\"),\n\t\t\tExecutionRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\"),\n\t\t\tCode: \u0026synthetics.CanaryCodeArgs{\n\t\t\t\tHandler:  pulumi.String(\"pageLoadBlueprint.handler\"),\n\t\t\t\tS3Bucket: pulumi.String(\"aws-synthetics-code-myaccount-canary1\"),\n\t\t\t\tS3Key:    pulumi.String(\"my-script-location\"),\n\t\t\t},\n\t\t\tArtifactS3Location: pulumi.String(\"s3://my-results-bucket\"),\n\t\t\tRuntimeVersion:     pulumi.String(\"syn-nodejs-puppeteer-3.3\"),\n\t\t\tSchedule: \u0026synthetics.CanaryScheduleArgs{\n\t\t\t\tExpression:        pulumi.String(\"rate(1 minute)\"),\n\t\t\t\tDurationInSeconds: pulumi.String(\"3600\"),\n\t\t\t},\n\t\t\tRunConfig: \u0026synthetics.CanaryRunConfigArgs{\n\t\t\t\tTimeoutInSeconds: pulumi.Int(60),\n\t\t\t},\n\t\t\tFailureRetentionPeriod: pulumi.Int(30),\n\t\t\tSuccessRetentionPeriod: pulumi.Int(30),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tStartCanaryAfterCreation: pulumi.Bool(true),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst syntheticsCanary = new aws_native.synthetics.Canary(\"syntheticsCanary\", {\n    name: \"samplecanary\",\n    executionRoleArn: \"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\",\n    code: {\n        handler: \"pageLoadBlueprint.handler\",\n        s3Bucket: \"aws-synthetics-code-myaccount-canary1\",\n        s3Key: \"my-script-location\",\n    },\n    artifactS3Location: \"s3://my-results-bucket\",\n    runtimeVersion: \"syn-nodejs-puppeteer-3.3\",\n    schedule: {\n        expression: \"rate(1 minute)\",\n        durationInSeconds: \"3600\",\n    },\n    runConfig: {\n        timeoutInSeconds: 60,\n    },\n    failureRetentionPeriod: 30,\n    successRetentionPeriod: 30,\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n    startCanaryAfterCreation: true,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsynthetics_canary = aws_native.synthetics.Canary(\"syntheticsCanary\",\n    name=\"samplecanary\",\n    execution_role_arn=\"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\",\n    code={\n        \"handler\": \"pageLoadBlueprint.handler\",\n        \"s3_bucket\": \"aws-synthetics-code-myaccount-canary1\",\n        \"s3_key\": \"my-script-location\",\n    },\n    artifact_s3_location=\"s3://my-results-bucket\",\n    runtime_version=\"syn-nodejs-puppeteer-3.3\",\n    schedule={\n        \"expression\": \"rate(1 minute)\",\n        \"duration_in_seconds\": \"3600\",\n    },\n    run_config={\n        \"timeout_in_seconds\": 60,\n    },\n    failure_retention_period=30,\n    success_retention_period=30,\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }],\n    start_canary_after_creation=True)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var syntheticsCanary = new AwsNative.Synthetics.Canary(\"syntheticsCanary\", new()\n    {\n        Name = \"samplecanary\",\n        ExecutionRoleArn = \"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\",\n        Code = new AwsNative.Synthetics.Inputs.CanaryCodeArgs\n        {\n            Handler = \"pageLoadBlueprint.handler\",\n            Script = @\"var synthetics = require('Synthetics');\nconst log = require('SyntheticsLogger');\nconst pageLoadBlueprint = async function () {\n// INSERT URL here\nconst URL = \"\"https://amazon.com\"\";\n\nlet page = await synthetics.getPage();\nconst response = await page.goto(URL, {waitUntil: 'domcontentloaded', timeout: 30000});\n//Wait for page to render.\n//Increase or decrease wait time based on endpoint being monitored.\nawait page.waitFor(15000);\nawait synthetics.takeScreenshot('loaded', 'loaded');\nlet pageTitle = await page.title();\nlog.info('Page title: ' + pageTitle);\nif (response.status() !== 200) {\n     throw \"\"Failed to load page!\"\";\n}\n};\n\nexports.handler = async () =\u003e {\nreturn await pageLoadBlueprint();\n};\n\",\n        },\n        ArtifactS3Location = \"s3://my-results-bucket\",\n        RuntimeVersion = \"syn-nodejs-puppeteer-3.3\",\n        Schedule = new AwsNative.Synthetics.Inputs.CanaryScheduleArgs\n        {\n            Expression = \"rate(1 minute)\",\n            DurationInSeconds = \"3600\",\n        },\n        RunConfig = new AwsNative.Synthetics.Inputs.CanaryRunConfigArgs\n        {\n            TimeoutInSeconds = 60,\n        },\n        FailureRetentionPeriod = 30,\n        SuccessRetentionPeriod = 30,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"key00AtCreate\",\n                Value = \"value001AtCreate\",\n            },\n        },\n        StartCanaryAfterCreation = false,\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/synthetics\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := synthetics.NewCanary(ctx, \"syntheticsCanary\", \u0026synthetics.CanaryArgs{\n\t\t\tName:             pulumi.String(\"samplecanary\"),\n\t\t\tExecutionRoleArn: pulumi.String(\"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\"),\n\t\t\tCode: \u0026synthetics.CanaryCodeArgs{\n\t\t\t\tHandler: pulumi.String(\"pageLoadBlueprint.handler\"),\n\t\t\t\tScript: pulumi.String(`var synthetics = require('Synthetics');\nconst log = require('SyntheticsLogger');\nconst pageLoadBlueprint = async function () {\n// INSERT URL here\nconst URL = \"https://amazon.com\";\n\nlet page = await synthetics.getPage();\nconst response = await page.goto(URL, {waitUntil: 'domcontentloaded', timeout: 30000});\n//Wait for page to render.\n//Increase or decrease wait time based on endpoint being monitored.\nawait page.waitFor(15000);\nawait synthetics.takeScreenshot('loaded', 'loaded');\nlet pageTitle = await page.title();\nlog.info('Page title: ' + pageTitle);\nif (response.status() !== 200) {\n     throw \"Failed to load page!\";\n}\n};\n\nexports.handler = async () =\u003e {\nreturn await pageLoadBlueprint();\n};\n`),\n\t\t\t},\n\t\t\tArtifactS3Location: pulumi.String(\"s3://my-results-bucket\"),\n\t\t\tRuntimeVersion:     pulumi.String(\"syn-nodejs-puppeteer-3.3\"),\n\t\t\tSchedule: \u0026synthetics.CanaryScheduleArgs{\n\t\t\t\tExpression:        pulumi.String(\"rate(1 minute)\"),\n\t\t\t\tDurationInSeconds: pulumi.String(\"3600\"),\n\t\t\t},\n\t\t\tRunConfig: \u0026synthetics.CanaryRunConfigArgs{\n\t\t\t\tTimeoutInSeconds: pulumi.Int(60),\n\t\t\t},\n\t\t\tFailureRetentionPeriod: pulumi.Int(30),\n\t\t\tSuccessRetentionPeriod: pulumi.Int(30),\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"key00AtCreate\"),\n\t\t\t\t\tValue: pulumi.String(\"value001AtCreate\"),\n\t\t\t\t},\n\t\t\t},\n\t\t\tStartCanaryAfterCreation: pulumi.Bool(false),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst syntheticsCanary = new aws_native.synthetics.Canary(\"syntheticsCanary\", {\n    name: \"samplecanary\",\n    executionRoleArn: \"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\",\n    code: {\n        handler: \"pageLoadBlueprint.handler\",\n        script: `var synthetics = require('Synthetics');\nconst log = require('SyntheticsLogger');\nconst pageLoadBlueprint = async function () {\n// INSERT URL here\nconst URL = \"https://amazon.com\";\n\nlet page = await synthetics.getPage();\nconst response = await page.goto(URL, {waitUntil: 'domcontentloaded', timeout: 30000});\n//Wait for page to render.\n//Increase or decrease wait time based on endpoint being monitored.\nawait page.waitFor(15000);\nawait synthetics.takeScreenshot('loaded', 'loaded');\nlet pageTitle = await page.title();\nlog.info('Page title: ' + pageTitle);\nif (response.status() !== 200) {\n     throw \"Failed to load page!\";\n}\n};\n\nexports.handler = async () =\u003e {\nreturn await pageLoadBlueprint();\n};\n`,\n    },\n    artifactS3Location: \"s3://my-results-bucket\",\n    runtimeVersion: \"syn-nodejs-puppeteer-3.3\",\n    schedule: {\n        expression: \"rate(1 minute)\",\n        durationInSeconds: \"3600\",\n    },\n    runConfig: {\n        timeoutInSeconds: 60,\n    },\n    failureRetentionPeriod: 30,\n    successRetentionPeriod: 30,\n    tags: [{\n        key: \"key00AtCreate\",\n        value: \"value001AtCreate\",\n    }],\n    startCanaryAfterCreation: false,\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nsynthetics_canary = aws_native.synthetics.Canary(\"syntheticsCanary\",\n    name=\"samplecanary\",\n    execution_role_arn=\"arn:aws:iam::123456789012:role/my-lambda-execution-role-to-run-canary\",\n    code={\n        \"handler\": \"pageLoadBlueprint.handler\",\n        \"script\": \"\"\"var synthetics = require('Synthetics');\nconst log = require('SyntheticsLogger');\nconst pageLoadBlueprint = async function () {\n// INSERT URL here\nconst URL = \"https://amazon.com\";\n\nlet page = await synthetics.getPage();\nconst response = await page.goto(URL, {waitUntil: 'domcontentloaded', timeout: 30000});\n//Wait for page to render.\n//Increase or decrease wait time based on endpoint being monitored.\nawait page.waitFor(15000);\nawait synthetics.takeScreenshot('loaded', 'loaded');\nlet pageTitle = await page.title();\nlog.info('Page title: ' + pageTitle);\nif (response.status() !== 200) {\n     throw \"Failed to load page!\";\n}\n};\n\nexports.handler = async () =\u003e {\nreturn await pageLoadBlueprint();\n};\n\"\"\",\n    },\n    artifact_s3_location=\"s3://my-results-bucket\",\n    runtime_version=\"syn-nodejs-puppeteer-3.3\",\n    schedule={\n        \"expression\": \"rate(1 minute)\",\n        \"duration_in_seconds\": \"3600\",\n    },\n    run_config={\n        \"timeout_in_seconds\": 60,\n    },\n    failure_retention_period=30,\n    success_retention_period=30,\n    tags=[{\n        \"key\": \"key00AtCreate\",\n        \"value\": \"value001AtCreate\",\n    }],\n    start_canary_after_creation=False)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"artifactConfig":{"$ref":"#/types/aws-native:synthetics:CanaryArtifactConfig","description":"Provide artifact configuration"},"artifactS3Location":{"type":"string","description":"Provide the s3 bucket output location for test results"},"awsId":{"type":"string","description":"Id of the canary"},"browserConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryBrowserConfig"},"description":"List of browser configurations for the canary"},"code":{"$ref":"#/types/aws-native:synthetics:CanaryCode","description":"Provide the canary script source"},"deleteLambdaResourcesOnCanaryDeletion":{"type":"boolean","description":"Deletes associated lambda resources created by Synthetics if set to True. Default is False"},"dryRunAndUpdate":{"type":"boolean","description":"Setting to control if UpdateCanary will perform a DryRun and validate it is PASSING before performing the Update. Default is FALSE."},"executionRoleArn":{"type":"string","description":"Lambda Execution role used to run your canaries"},"failureRetentionPeriod":{"type":"integer","description":"Retention period of failed canary runs represented in number of days"},"name":{"type":"string","description":"Name of the canary.","replaceOnChanges":true},"provisionedResourceCleanup":{"$ref":"#/types/aws-native:synthetics:CanaryProvisionedResourceCleanup","description":"Setting to control if provisioned resources created by Synthetics are deleted alongside the canary. Default is AUTOMATIC."},"resourcesToReplicateTags":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryResourceToTag"},"description":"List of resources which canary tags should be replicated to."},"runConfig":{"$ref":"#/types/aws-native:synthetics:CanaryRunConfig","description":"Provide canary run configuration"},"runtimeVersion":{"type":"string","description":"Runtime version of Synthetics Library"},"schedule":{"$ref":"#/types/aws-native:synthetics:CanarySchedule","description":"Frequency to run your canaries"},"startCanaryAfterCreation":{"type":"boolean","description":"Runs canary if set to True. Default is False"},"state":{"type":"string","description":"State of the canary"},"successRetentionPeriod":{"type":"integer","description":"Retention period of successful canary runs represented in number of days"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of key-value pairs that are associated with the canary."},"visualReference":{"$ref":"#/types/aws-native:synthetics:CanaryVisualReference","description":"Visual reference configuration for visual testing"},"visualReferences":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryVisualReference"},"description":"List of visual references for the canary"},"vpcConfig":{"$ref":"#/types/aws-native:synthetics:CanaryVpcConfig","description":"Provide VPC Configuration if enabled."}},"type":"object","required":["artifactS3Location","awsId","code","executionRoleArn","name","runtimeVersion","schedule","state"],"inputProperties":{"artifactConfig":{"$ref":"#/types/aws-native:synthetics:CanaryArtifactConfig","description":"Provide artifact configuration"},"artifactS3Location":{"type":"string","description":"Provide the s3 bucket output location for test results"},"browserConfigs":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryBrowserConfig"},"description":"List of browser configurations for the canary"},"code":{"$ref":"#/types/aws-native:synthetics:CanaryCode","description":"Provide the canary script source"},"deleteLambdaResourcesOnCanaryDeletion":{"type":"boolean","description":"Deletes associated lambda resources created by Synthetics if set to True. Default is False"},"dryRunAndUpdate":{"type":"boolean","description":"Setting to control if UpdateCanary will perform a DryRun and validate it is PASSING before performing the Update. Default is FALSE."},"executionRoleArn":{"type":"string","description":"Lambda Execution role used to run your canaries"},"failureRetentionPeriod":{"type":"integer","description":"Retention period of failed canary runs represented in number of days"},"name":{"type":"string","description":"Name of the canary."},"provisionedResourceCleanup":{"$ref":"#/types/aws-native:synthetics:CanaryProvisionedResourceCleanup","description":"Setting to control if provisioned resources created by Synthetics are deleted alongside the canary. Default is AUTOMATIC."},"resourcesToReplicateTags":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryResourceToTag"},"description":"List of resources which canary tags should be replicated to."},"runConfig":{"$ref":"#/types/aws-native:synthetics:CanaryRunConfig","description":"Provide canary run configuration"},"runtimeVersion":{"type":"string","description":"Runtime version of Synthetics Library"},"schedule":{"$ref":"#/types/aws-native:synthetics:CanarySchedule","description":"Frequency to run your canaries"},"startCanaryAfterCreation":{"type":"boolean","description":"Runs canary if set to True. Default is False"},"successRetentionPeriod":{"type":"integer","description":"Retention period of successful canary runs represented in number of days"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of key-value pairs that are associated with the canary."},"visualReference":{"$ref":"#/types/aws-native:synthetics:CanaryVisualReference","description":"Visual reference configuration for visual testing"},"visualReferences":{"type":"array","items":{"$ref":"#/types/aws-native:synthetics:CanaryVisualReference"},"description":"List of visual references for the canary"},"vpcConfig":{"$ref":"#/types/aws-native:synthetics:CanaryVpcConfig","description":"Provide VPC Configuration if enabled."}},"requiredInputs":["artifactS3Location","code","executionRoleArn","runtimeVersion","schedule"]},"aws-native:synthetics:Group":{"description":"Resource Type definition for AWS::Synthetics::Group","properties":{"awsId":{"type":"string","description":"Id of the group."},"name":{"type":"string","description":"Name of the group.","replaceOnChanges":true},"resourceArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the canaries that you want to associate with this group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of key-value pairs that are associated with the group."}},"type":"object","required":["awsId","name"],"inputProperties":{"name":{"type":"string","description":"Name of the group."},"resourceArns":{"type":"array","items":{"type":"string"},"description":"The ARNs of the canaries that you want to associate with this group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The list of key-value pairs that are associated with the group."}}},"aws-native:systemsmanagersap:Application":{"description":"Resource schema for AWS::SystemsManagerSAP::Application","properties":{"applicationId":{"type":"string","description":"The ID of the application."},"applicationType":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationType","description":"The type of the application."},"arn":{"type":"string","description":"The ARN of the SSM-SAP application"},"componentsInfo":{"type":"array","items":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationComponentInfo"},"description":"This is an optional parameter for component details to which the SAP ABAP application is attached, such as Web Dispatcher.","replaceOnChanges":true},"credentials":{"type":"array","items":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationCredential"},"description":"The credentials of the SAP application.","replaceOnChanges":true},"databaseArn":{"type":"string","description":"The ARN of the SAP HANA database","replaceOnChanges":true},"instances":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 instances on which your SAP application is running.","replaceOnChanges":true},"sapInstanceNumber":{"type":"string","description":"The SAP instance number of the application.","replaceOnChanges":true},"sid":{"type":"string","description":"The System ID of the application.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of a SystemsManagerSAP application."}},"type":"object","required":["applicationId","applicationType","arn"],"inputProperties":{"applicationId":{"type":"string","description":"The ID of the application."},"applicationType":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationType","description":"The type of the application."},"componentsInfo":{"type":"array","items":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationComponentInfo"},"description":"This is an optional parameter for component details to which the SAP ABAP application is attached, such as Web Dispatcher."},"credentials":{"type":"array","items":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationCredential"},"description":"The credentials of the SAP application."},"databaseArn":{"type":"string","description":"The ARN of the SAP HANA database"},"instances":{"type":"array","items":{"type":"string"},"description":"The Amazon EC2 instances on which your SAP application is running."},"sapInstanceNumber":{"type":"string","description":"The SAP instance number of the application."},"sid":{"type":"string","description":"The System ID of the application."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of a SystemsManagerSAP application."}},"requiredInputs":["applicationId","applicationType"]},"aws-native:timestream:Database":{"description":"The AWS::Timestream::Database resource creates a Timestream database.","properties":{"arn":{"type":"string","description":"The `arn` of the database."},"databaseName":{"type":"string","description":"The name for the database. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the database name.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The KMS key for the database. If the KMS key is not specified, the database will be encrypted with a Timestream managed KMS key located in your account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn"],"inputProperties":{"databaseName":{"type":"string","description":"The name for the database. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the database name."},"kmsKeyId":{"type":"string","description":"The KMS key for the database. If the KMS key is not specified, the database will be encrypted with a Timestream managed KMS key located in your account."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:timestream:InfluxDbCluster":{"description":"The AWS::Timestream::InfluxDBCluster resource creates an InfluxDB cluster.","properties":{"allocatedStorage":{"type":"integer","description":"The allocated storage for the InfluxDB cluster.","replaceOnChanges":true},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that is associated with the InfluxDB cluster."},"awsId":{"type":"string","description":"The service generated unique identifier for InfluxDB cluster."},"bucket":{"type":"string","description":"The bucket for the InfluxDB cluster.","replaceOnChanges":true},"dbInstanceType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDbInstanceType","description":"The compute instance of the InfluxDB cluster."},"dbParameterGroupIdentifier":{"type":"string","description":"The name of an existing InfluxDB parameter group."},"dbStorageType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDbStorageType","description":"The storage type of the InfluxDB cluster.","replaceOnChanges":true},"deploymentType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDeploymentType","description":"Deployment type of the InfluxDB cluster.","replaceOnChanges":true},"endpoint":{"type":"string","description":"The connection endpoint for the InfluxDB cluster."},"engineType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterEngineType","description":"The engine type for the InfluxDB cluster."},"failoverMode":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterFailoverMode","description":"Failover mode of the InfluxDB cluster."},"influxAuthParametersSecretArn":{"type":"string","description":"The Auth parameters secret Amazon Resource name (ARN) that is associated with the InfluxDB cluster."},"logDeliveryConfiguration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationProperties","description":"Configuration for sending logs to customer account from the InfluxDB cluster."},"name":{"type":"string","description":"The unique name that is associated with the InfluxDB cluster.","replaceOnChanges":true},"networkType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterNetworkType","description":"Network type of the InfluxDB cluster.","replaceOnChanges":true},"organization":{"type":"string","description":"The organization for the InfluxDB cluster.","replaceOnChanges":true},"password":{"type":"string","description":"The password for the InfluxDB cluster.","replaceOnChanges":true},"port":{"type":"integer","description":"The port number on which InfluxDB accepts connections."},"publiclyAccessible":{"type":"boolean","description":"Attach a public IP to the customer ENI.","replaceOnChanges":true},"readerEndpoint":{"type":"string","description":"The reader endpoint for the InfluxDB cluster."},"status":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterStatus","description":"Status of the InfluxDB cluster."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this DB cluster."},"username":{"type":"string","description":"The username for the InfluxDB cluster.","replaceOnChanges":true},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of Amazon EC2 VPC security groups to associate with this InfluxDB cluster.","replaceOnChanges":true},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 subnet IDs for this InfluxDB cluster.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","endpoint","engineType","influxAuthParametersSecretArn","readerEndpoint","status"],"inputProperties":{"allocatedStorage":{"type":"integer","description":"The allocated storage for the InfluxDB cluster."},"bucket":{"type":"string","description":"The bucket for the InfluxDB cluster."},"dbInstanceType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDbInstanceType","description":"The compute instance of the InfluxDB cluster."},"dbParameterGroupIdentifier":{"type":"string","description":"The name of an existing InfluxDB parameter group."},"dbStorageType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDbStorageType","description":"The storage type of the InfluxDB cluster."},"deploymentType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDeploymentType","description":"Deployment type of the InfluxDB cluster."},"failoverMode":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterFailoverMode","description":"Failover mode of the InfluxDB cluster."},"logDeliveryConfiguration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationProperties","description":"Configuration for sending logs to customer account from the InfluxDB cluster."},"name":{"type":"string","description":"The unique name that is associated with the InfluxDB cluster."},"networkType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterNetworkType","description":"Network type of the InfluxDB cluster."},"organization":{"type":"string","description":"The organization for the InfluxDB cluster."},"password":{"type":"string","description":"The password for the InfluxDB cluster."},"port":{"type":"integer","description":"The port number on which InfluxDB accepts connections."},"publiclyAccessible":{"type":"boolean","description":"Attach a public IP to the customer ENI."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this DB cluster."},"username":{"type":"string","description":"The username for the InfluxDB cluster."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of Amazon EC2 VPC security groups to associate with this InfluxDB cluster."},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 subnet IDs for this InfluxDB cluster."}}},"aws-native:timestream:InfluxDbInstance":{"description":"The AWS::Timestream::InfluxDBInstance resource creates an InfluxDB instance.","properties":{"allocatedStorage":{"type":"integer","description":"The allocated storage for the InfluxDB instance."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that is associated with the InfluxDB instance."},"availabilityZone":{"type":"string","description":"The Availability Zone (AZ) where the InfluxDB instance is created."},"awsId":{"type":"string","description":"The service generated unique identifier for InfluxDB instance."},"bucket":{"type":"string","description":"The bucket for the InfluxDB instance.","replaceOnChanges":true},"dbInstanceType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDbInstanceType","description":"The compute instance of the InfluxDB instance."},"dbParameterGroupIdentifier":{"type":"string","description":"The name of an existing InfluxDB parameter group."},"dbStorageType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDbStorageType","description":"The storage type of the InfluxDB instance."},"deploymentType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDeploymentType","description":"Deployment type of the InfluxDB Instance."},"endpoint":{"type":"string","description":"The connection endpoint for the InfluxDB instance."},"influxAuthParametersSecretArn":{"type":"string","description":"The Auth parameters secret Amazon Resource name (ARN) that is associated with the InfluxDB instance."},"logDeliveryConfiguration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationProperties","description":"Configuration for sending logs to customer account from the InfluxDB instance."},"name":{"type":"string","description":"The unique name that is associated with the InfluxDB instance.","replaceOnChanges":true},"networkType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceNetworkType","description":"Network type of the InfluxDB Instance.","replaceOnChanges":true},"organization":{"type":"string","description":"The organization for the InfluxDB instance.","replaceOnChanges":true},"password":{"type":"string","description":"The password for the InfluxDB instance.","replaceOnChanges":true},"port":{"type":"integer","description":"The port number on which InfluxDB accepts connections."},"publiclyAccessible":{"type":"boolean","description":"Attach a public IP to the customer ENI.","replaceOnChanges":true},"secondaryAvailabilityZone":{"type":"string","description":"The Secondary Availability Zone (AZ) where the InfluxDB instance is created, if DeploymentType is set as WITH_MULTIAZ_STANDBY."},"status":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceStatus","description":"Status of the InfluxDB Instance."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this DB instance."},"username":{"type":"string","description":"The username for the InfluxDB instance.","replaceOnChanges":true},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of Amazon EC2 VPC security groups to associate with this InfluxDB instance.","replaceOnChanges":true},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 subnet IDs for this InfluxDB instance.","replaceOnChanges":true}},"type":"object","required":["arn","availabilityZone","awsId","endpoint","influxAuthParametersSecretArn","secondaryAvailabilityZone","status"],"inputProperties":{"allocatedStorage":{"type":"integer","description":"The allocated storage for the InfluxDB instance."},"bucket":{"type":"string","description":"The bucket for the InfluxDB instance."},"dbInstanceType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDbInstanceType","description":"The compute instance of the InfluxDB instance."},"dbParameterGroupIdentifier":{"type":"string","description":"The name of an existing InfluxDB parameter group."},"dbStorageType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDbStorageType","description":"The storage type of the InfluxDB instance."},"deploymentType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDeploymentType","description":"Deployment type of the InfluxDB Instance."},"logDeliveryConfiguration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationProperties","description":"Configuration for sending logs to customer account from the InfluxDB instance."},"name":{"type":"string","description":"The unique name that is associated with the InfluxDB instance."},"networkType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceNetworkType","description":"Network type of the InfluxDB Instance."},"organization":{"type":"string","description":"The organization for the InfluxDB instance."},"password":{"type":"string","description":"The password for the InfluxDB instance."},"port":{"type":"integer","description":"The port number on which InfluxDB accepts connections."},"publiclyAccessible":{"type":"boolean","description":"Attach a public IP to the customer ENI."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An arbitrary set of tags (key-value pairs) for this DB instance."},"username":{"type":"string","description":"The username for the InfluxDB instance."},"vpcSecurityGroupIds":{"type":"array","items":{"type":"string"},"description":"A list of Amazon EC2 VPC security groups to associate with this InfluxDB instance."},"vpcSubnetIds":{"type":"array","items":{"type":"string"},"description":"A list of EC2 subnet IDs for this InfluxDB instance."}}},"aws-native:timestream:ScheduledQuery":{"description":"The AWS::Timestream::ScheduledQuery resource creates a Timestream Scheduled Query.","properties":{"arn":{"type":"string","description":"The `ARN` of the scheduled query."},"clientToken":{"type":"string","description":"Using a ClientToken makes the call to CreateScheduledQuery idempotent, in other words, making the same request repeatedly will produce the same result. Making multiple identical CreateScheduledQuery requests has the same effect as making a single request.\n\n- If CreateScheduledQuery is called without a `ClientToken` , the Query SDK generates a `ClientToken` on your behalf.\n- After 8 hours, any request with the same `ClientToken` is treated as a new request."},"errorReportConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryErrorReportConfiguration","description":"Configuration for error reporting. Error reports will be generated when a problem is encountered when writing the query results.","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The Amazon KMS key used to encrypt the scheduled query resource, at-rest. If the Amazon KMS key is not specified, the scheduled query resource will be encrypted with a Timestream owned Amazon KMS key. To specify a KMS key, use the key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix the name with *alias/*\n\nIf ErrorReportConfiguration uses `SSE_KMS` as encryption type, the same KmsKeyId is used to encrypt the error report at rest.","replaceOnChanges":true},"notificationConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryNotificationConfiguration","description":"Notification configuration for the scheduled query. A notification is sent by Timestream when a query run finishes, when the state is updated or when you delete it.","replaceOnChanges":true},"queryString":{"type":"string","description":"The query string to run. Parameter names can be specified in the query string `@` character followed by an identifier. The named Parameter `@scheduled_runtime` is reserved and can be used in the query to get the time at which the query is scheduled to run.\n\nThe timestamp calculated according to the ScheduleConfiguration parameter, will be the value of `@scheduled_runtime` paramater for each query run. For example, consider an instance of a scheduled query executing on 2021-12-01 00:00:00. For this instance, the `@scheduled_runtime` parameter is initialized to the timestamp 2021-12-01 00:00:00 when invoking the query.","replaceOnChanges":true},"scheduleConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryScheduleConfiguration","description":"Schedule configuration.","replaceOnChanges":true},"scheduledQueryExecutionRoleArn":{"type":"string","description":"The ARN for the IAM role that Timestream will assume when running the scheduled query.","replaceOnChanges":true},"scheduledQueryName":{"type":"string","description":"A name for the query. Scheduled query names must be unique within each Region.","replaceOnChanges":true},"sqErrorReportConfiguration":{"type":"string","description":"Configuration for error reporting. Error reports will be generated when a problem is encountered when writing the query results."},"sqKmsKeyId":{"type":"string","description":"The Amazon KMS key used to encrypt the scheduled query resource, at-rest. If the Amazon KMS key is not specified, the scheduled query resource will be encrypted with a Timestream owned Amazon KMS key. To specify a KMS key, use the key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix the name with alias/. If ErrorReportConfiguration uses SSE_KMS as encryption type, the same KmsKeyId is used to encrypt the error report at rest."},"sqName":{"type":"string","description":"The name of the scheduled query. Scheduled query names must be unique within each Region."},"sqNotificationConfiguration":{"type":"string","description":"Notification configuration for the scheduled query. A notification is sent by Timestream when a query run finishes, when the state is updated or when you delete it."},"sqQueryString":{"type":"string","description":"The query string to run. Parameter names can be specified in the query string @ character followed by an identifier. The named Parameter @scheduled_runtime is reserved and can be used in the query to get the time at which the query is scheduled to run. The timestamp calculated according to the ScheduleConfiguration parameter, will be the value of @scheduled_runtime paramater for each query run. For example, consider an instance of a scheduled query executing on 2021-12-01 00:00:00. For this instance, the @scheduled_runtime parameter is initialized to the timestamp 2021-12-01 00:00:00 when invoking the query."},"sqScheduleConfiguration":{"type":"string","description":"Configuration for when the scheduled query is executed."},"sqScheduledQueryExecutionRoleArn":{"type":"string","description":"The ARN for the IAM role that Timestream will assume when running the scheduled query."},"sqTargetConfiguration":{"type":"string","description":"Configuration of target store where scheduled query results are written to."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to label the scheduled query."},"targetConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryTargetConfiguration","description":"Scheduled query target store configuration.","replaceOnChanges":true}},"type":"object","required":["arn","errorReportConfiguration","notificationConfiguration","queryString","scheduleConfiguration","scheduledQueryExecutionRoleArn","sqErrorReportConfiguration","sqKmsKeyId","sqName","sqNotificationConfiguration","sqQueryString","sqScheduleConfiguration","sqScheduledQueryExecutionRoleArn","sqTargetConfiguration"],"inputProperties":{"clientToken":{"type":"string","description":"Using a ClientToken makes the call to CreateScheduledQuery idempotent, in other words, making the same request repeatedly will produce the same result. Making multiple identical CreateScheduledQuery requests has the same effect as making a single request.\n\n- If CreateScheduledQuery is called without a `ClientToken` , the Query SDK generates a `ClientToken` on your behalf.\n- After 8 hours, any request with the same `ClientToken` is treated as a new request."},"errorReportConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryErrorReportConfiguration","description":"Configuration for error reporting. Error reports will be generated when a problem is encountered when writing the query results."},"kmsKeyId":{"type":"string","description":"The Amazon KMS key used to encrypt the scheduled query resource, at-rest. If the Amazon KMS key is not specified, the scheduled query resource will be encrypted with a Timestream owned Amazon KMS key. To specify a KMS key, use the key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix the name with *alias/*\n\nIf ErrorReportConfiguration uses `SSE_KMS` as encryption type, the same KmsKeyId is used to encrypt the error report at rest."},"notificationConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryNotificationConfiguration","description":"Notification configuration for the scheduled query. A notification is sent by Timestream when a query run finishes, when the state is updated or when you delete it."},"queryString":{"type":"string","description":"The query string to run. Parameter names can be specified in the query string `@` character followed by an identifier. The named Parameter `@scheduled_runtime` is reserved and can be used in the query to get the time at which the query is scheduled to run.\n\nThe timestamp calculated according to the ScheduleConfiguration parameter, will be the value of `@scheduled_runtime` paramater for each query run. For example, consider an instance of a scheduled query executing on 2021-12-01 00:00:00. For this instance, the `@scheduled_runtime` parameter is initialized to the timestamp 2021-12-01 00:00:00 when invoking the query."},"scheduleConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryScheduleConfiguration","description":"Schedule configuration."},"scheduledQueryExecutionRoleArn":{"type":"string","description":"The ARN for the IAM role that Timestream will assume when running the scheduled query."},"scheduledQueryName":{"type":"string","description":"A name for the query. Scheduled query names must be unique within each Region."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A list of key-value pairs to label the scheduled query."},"targetConfiguration":{"$ref":"#/types/aws-native:timestream:ScheduledQueryTargetConfiguration","description":"Scheduled query target store configuration."}},"requiredInputs":["errorReportConfiguration","notificationConfiguration","queryString","scheduleConfiguration","scheduledQueryExecutionRoleArn"]},"aws-native:timestream:Table":{"description":"The AWS::Timestream::Table resource creates a Timestream Table.","properties":{"arn":{"type":"string","description":"The `arn` of the table."},"databaseName":{"type":"string","description":"The name for the database which the table to be created belongs to.","replaceOnChanges":true},"magneticStoreWriteProperties":{"$ref":"#/types/aws-native:timestream:MagneticStoreWritePropertiesProperties","description":"The properties that determine whether magnetic store writes are enabled."},"name":{"type":"string","description":"The table name exposed as a read-only attribute."},"retentionProperties":{"$ref":"#/types/aws-native:timestream:RetentionPropertiesProperties","description":"The retention duration of the memory store and the magnetic store."},"schema":{"$ref":"#/types/aws-native:timestream:SchemaProperties","description":"A Schema specifies the expected data model of the table."},"tableName":{"type":"string","description":"The name for the table. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the table name.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","databaseName","name"],"inputProperties":{"databaseName":{"type":"string","description":"The name for the database which the table to be created belongs to."},"magneticStoreWriteProperties":{"$ref":"#/types/aws-native:timestream:MagneticStoreWritePropertiesProperties","description":"The properties that determine whether magnetic store writes are enabled."},"retentionProperties":{"$ref":"#/types/aws-native:timestream:RetentionPropertiesProperties","description":"The retention duration of the memory store and the magnetic store."},"schema":{"$ref":"#/types/aws-native:timestream:SchemaProperties","description":"A Schema specifies the expected data model of the table."},"tableName":{"type":"string","description":"The name for the table. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the table name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["databaseName"]},"aws-native:transfer:Agreement":{"description":"Resource Type definition for AWS::Transfer::Agreement","properties":{"accessRole":{"type":"string","description":"Specifies the access role for the agreement."},"agreementId":{"type":"string","description":"A unique identifier for the agreement."},"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the agreement."},"baseDirectory":{"type":"string","description":"Specifies the base directory for the agreement."},"customDirectories":{"$ref":"#/types/aws-native:transfer:CustomDirectoriesProperties","description":"Specifies a separate directory for each type of file to store for an AS2 message."},"description":{"type":"string","description":"A textual description for the agreement."},"enforceMessageSigning":{"$ref":"#/types/aws-native:transfer:AgreementEnforceMessageSigning","description":"Specifies whether to enforce an AS2 message is signed for this agreement."},"localProfileId":{"type":"string","description":"A unique identifier for the local profile."},"partnerProfileId":{"type":"string","description":"A unique identifier for the partner profile."},"preserveFilename":{"$ref":"#/types/aws-native:transfer:AgreementPreserveFilename","description":"Specifies whether to preserve the filename received for this agreement."},"serverId":{"type":"string","description":"A unique identifier for the server.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:transfer:AgreementStatus","description":"Specifies the status of the agreement."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for agreements. Tags are metadata attached to agreements for any purpose."}},"type":"object","required":["accessRole","agreementId","arn","localProfileId","partnerProfileId","serverId"],"inputProperties":{"accessRole":{"type":"string","description":"Specifies the access role for the agreement."},"baseDirectory":{"type":"string","description":"Specifies the base directory for the agreement."},"customDirectories":{"$ref":"#/types/aws-native:transfer:CustomDirectoriesProperties","description":"Specifies a separate directory for each type of file to store for an AS2 message."},"description":{"type":"string","description":"A textual description for the agreement."},"enforceMessageSigning":{"$ref":"#/types/aws-native:transfer:AgreementEnforceMessageSigning","description":"Specifies whether to enforce an AS2 message is signed for this agreement."},"localProfileId":{"type":"string","description":"A unique identifier for the local profile."},"partnerProfileId":{"type":"string","description":"A unique identifier for the partner profile."},"preserveFilename":{"$ref":"#/types/aws-native:transfer:AgreementPreserveFilename","description":"Specifies whether to preserve the filename received for this agreement."},"serverId":{"type":"string","description":"A unique identifier for the server."},"status":{"$ref":"#/types/aws-native:transfer:AgreementStatus","description":"Specifies the status of the agreement."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for agreements. Tags are metadata attached to agreements for any purpose."}},"requiredInputs":["accessRole","localProfileId","partnerProfileId","serverId"]},"aws-native:transfer:Certificate":{"description":"Resource Type definition for AWS::Transfer::Certificate","properties":{"activeDate":{"type":"string","description":"Specifies the active date for the certificate."},"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the agreement."},"certificate":{"type":"string","description":"Specifies the certificate body to be imported.","language":{"csharp":{"name":"CertificateValue"}},"replaceOnChanges":true},"certificateChain":{"type":"string","description":"Specifies the certificate chain to be imported.","replaceOnChanges":true},"certificateId":{"type":"string","description":"A unique identifier for the certificate."},"description":{"type":"string","description":"A textual description for the certificate."},"inactiveDate":{"type":"string","description":"Specifies the inactive date for the certificate."},"notAfterDate":{"type":"string","description":"Specifies the not after date for the certificate."},"notBeforeDate":{"type":"string","description":"Specifies the not before date for the certificate."},"privateKey":{"type":"string","description":"Specifies the private key for the certificate.","replaceOnChanges":true},"serial":{"type":"string","description":"Specifies Certificate's serial."},"status":{"$ref":"#/types/aws-native:transfer:CertificateStatus","description":"A status description for the certificate."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for certificates. Tags are metadata attached to certificates for any purpose."},"type":{"$ref":"#/types/aws-native:transfer:CertificateType","description":"Describing the type of certificate. With or without a private key."},"usage":{"$ref":"#/types/aws-native:transfer:CertificateUsage","description":"Specifies the usage type for the certificate."}},"type":"object","required":["arn","certificate","certificateId","notAfterDate","notBeforeDate","serial","status","type","usage"],"inputProperties":{"activeDate":{"type":"string","description":"Specifies the active date for the certificate."},"certificate":{"type":"string","description":"Specifies the certificate body to be imported.","language":{"csharp":{"name":"CertificateValue"}}},"certificateChain":{"type":"string","description":"Specifies the certificate chain to be imported."},"description":{"type":"string","description":"A textual description for the certificate."},"inactiveDate":{"type":"string","description":"Specifies the inactive date for the certificate."},"privateKey":{"type":"string","description":"Specifies the private key for the certificate."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for certificates. Tags are metadata attached to certificates for any purpose."},"usage":{"$ref":"#/types/aws-native:transfer:CertificateUsage","description":"Specifies the usage type for the certificate."}},"requiredInputs":["certificate","usage"]},"aws-native:transfer:Connector":{"description":"Resource Type definition for AWS::Transfer::Connector","properties":{"accessRole":{"type":"string","description":"Specifies the access role for the connector."},"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the connector."},"as2Config":{"$ref":"#/types/aws-native:transfer:As2ConfigProperties","description":"Configuration for an AS2 connector."},"connectorId":{"type":"string","description":"A unique identifier for the connector."},"egressConfig":{"$ref":"#/types/aws-native:transfer:ConnectorEgressConfig","description":"Egress configuration for the connector."},"egressType":{"$ref":"#/types/aws-native:transfer:ConnectorEgressType","description":"Specifies the egress type for the connector."},"errorMessage":{"type":"string","description":"Detailed error message when Connector in ERRORED status"},"loggingRole":{"type":"string","description":"Specifies the logging role for the connector."},"securityPolicyName":{"type":"string","description":"Security policy for SFTP Connector"},"serviceManagedEgressIpAddresses":{"type":"array","items":{"type":"string"},"description":"The list of egress IP addresses of this connector. These IP addresses are assigned automatically when you create the connector."},"sftpConfig":{"$ref":"#/types/aws-native:transfer:SftpConfigProperties","description":"Configuration for an SFTP connector."},"status":{"$ref":"#/types/aws-native:transfer:ConnectorStatus","description":"Current status of the connector. PENDING indicates creation/update in progress, ACTIVE means ready for operations, and ERRORED indicates a failure requiring attention."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for connectors. Tags are metadata attached to connectors for any purpose."},"url":{"type":"string","description":"URL for Connector"}},"type":"object","required":["accessRole","arn","connectorId","errorMessage","serviceManagedEgressIpAddresses","status"],"inputProperties":{"accessRole":{"type":"string","description":"Specifies the access role for the connector."},"as2Config":{"$ref":"#/types/aws-native:transfer:As2ConfigProperties","description":"Configuration for an AS2 connector."},"egressConfig":{"$ref":"#/types/aws-native:transfer:ConnectorEgressConfig","description":"Egress configuration for the connector."},"egressType":{"$ref":"#/types/aws-native:transfer:ConnectorEgressType","description":"Specifies the egress type for the connector."},"loggingRole":{"type":"string","description":"Specifies the logging role for the connector."},"securityPolicyName":{"type":"string","description":"Security policy for SFTP Connector"},"sftpConfig":{"$ref":"#/types/aws-native:transfer:SftpConfigProperties","description":"Configuration for an SFTP connector."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for connectors. Tags are metadata attached to connectors for any purpose."},"url":{"type":"string","description":"URL for Connector"}},"requiredInputs":["accessRole"]},"aws-native:transfer:Profile":{"description":"Resource Type definition for AWS::Transfer::Profile","properties":{"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the profile."},"as2Id":{"type":"string","description":"AS2 identifier agreed with a trading partner."},"certificateIds":{"type":"array","items":{"type":"string"},"description":"List of the certificate IDs associated with this profile to be used for encryption and signing of AS2 messages."},"profileId":{"type":"string","description":"A unique identifier for the profile"},"profileType":{"$ref":"#/types/aws-native:transfer:ProfileType","description":"Enum specifying whether the profile is local or associated with a trading partner.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["arn","as2Id","profileId","profileType"],"inputProperties":{"as2Id":{"type":"string","description":"AS2 identifier agreed with a trading partner."},"certificateIds":{"type":"array","items":{"type":"string"},"description":"List of the certificate IDs associated with this profile to be used for encryption and signing of AS2 messages."},"profileType":{"$ref":"#/types/aws-native:transfer:ProfileType","description":"Enum specifying whether the profile is local or associated with a trading partner."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["as2Id","profileType"]},"aws-native:transfer:Server":{"description":"Definition of AWS::Transfer::Server Resource Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTransferServer = new AwsNative.Transfer.Server(\"myTransferServer\", new()\n    {\n        EndpointDetails = new AwsNative.Transfer.Inputs.ServerEndpointDetailsArgs\n        {\n            AddressAllocationIds = new[]\n            {\n                \"AddressAllocationId-1\",\n                \"AddressAllocationId-2\",\n            },\n            SubnetIds = new[]\n            {\n                \"SubnetId-1\",\n                \"SubnetId-2\",\n            },\n            VpcId = \"VpcId\",\n        },\n        EndpointType = AwsNative.Transfer.ServerEndpointType.Vpc,\n        LoggingRole = \"Logging-Role-ARN\",\n        Protocols = new[]\n        {\n            AwsNative.Transfer.ServerProtocol.Sftp,\n        },\n        SecurityPolicyName = \"Security-Policy-Name\",\n        IdentityProviderDetails = new AwsNative.Transfer.Inputs.ServerIdentityProviderDetailsArgs\n        {\n            InvocationRole = \"Invocation-Role-ARN\",\n            Url = \"API_GATEWAY-Invocation-URL\",\n        },\n        IdentityProviderType = AwsNative.Transfer.ServerIdentityProviderType.ApiGateway,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"KeyName\",\n                Value = \"ValueName\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/transfer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := transfer.NewServer(ctx, \"myTransferServer\", \u0026transfer.ServerArgs{\n\t\t\tEndpointDetails: \u0026transfer.ServerEndpointDetailsArgs{\n\t\t\t\tAddressAllocationIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"AddressAllocationId-1\"),\n\t\t\t\t\tpulumi.String(\"AddressAllocationId-2\"),\n\t\t\t\t},\n\t\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"SubnetId-1\"),\n\t\t\t\t\tpulumi.String(\"SubnetId-2\"),\n\t\t\t\t},\n\t\t\t\tVpcId: pulumi.String(\"VpcId\"),\n\t\t\t},\n\t\t\tEndpointType: transfer.ServerEndpointTypeVpc,\n\t\t\tLoggingRole:  pulumi.String(\"Logging-Role-ARN\"),\n\t\t\tProtocols: transfer.ServerProtocolArray{\n\t\t\t\ttransfer.ServerProtocolSftp,\n\t\t\t},\n\t\t\tSecurityPolicyName: pulumi.String(\"Security-Policy-Name\"),\n\t\t\tIdentityProviderDetails: \u0026transfer.ServerIdentityProviderDetailsArgs{\n\t\t\t\tInvocationRole: pulumi.String(\"Invocation-Role-ARN\"),\n\t\t\t\tUrl:            pulumi.String(\"API_GATEWAY-Invocation-URL\"),\n\t\t\t},\n\t\t\tIdentityProviderType: transfer.ServerIdentityProviderTypeApiGateway,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"KeyName\"),\n\t\t\t\t\tValue: pulumi.String(\"ValueName\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTransferServer = new aws_native.transfer.Server(\"myTransferServer\", {\n    endpointDetails: {\n        addressAllocationIds: [\n            \"AddressAllocationId-1\",\n            \"AddressAllocationId-2\",\n        ],\n        subnetIds: [\n            \"SubnetId-1\",\n            \"SubnetId-2\",\n        ],\n        vpcId: \"VpcId\",\n    },\n    endpointType: aws_native.transfer.ServerEndpointType.Vpc,\n    loggingRole: \"Logging-Role-ARN\",\n    protocols: [aws_native.transfer.ServerProtocol.Sftp],\n    securityPolicyName: \"Security-Policy-Name\",\n    identityProviderDetails: {\n        invocationRole: \"Invocation-Role-ARN\",\n        url: \"API_GATEWAY-Invocation-URL\",\n    },\n    identityProviderType: aws_native.transfer.ServerIdentityProviderType.ApiGateway,\n    tags: [{\n        key: \"KeyName\",\n        value: \"ValueName\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_transfer_server = aws_native.transfer.Server(\"myTransferServer\",\n    endpoint_details={\n        \"address_allocation_ids\": [\n            \"AddressAllocationId-1\",\n            \"AddressAllocationId-2\",\n        ],\n        \"subnet_ids\": [\n            \"SubnetId-1\",\n            \"SubnetId-2\",\n        ],\n        \"vpc_id\": \"VpcId\",\n    },\n    endpoint_type=aws_native.transfer.ServerEndpointType.VPC,\n    logging_role=\"Logging-Role-ARN\",\n    protocols=[aws_native.transfer.ServerProtocol.SFTP],\n    security_policy_name=\"Security-Policy-Name\",\n    identity_provider_details={\n        \"invocation_role\": \"Invocation-Role-ARN\",\n        \"url\": \"API_GATEWAY-Invocation-URL\",\n    },\n    identity_provider_type=aws_native.transfer.ServerIdentityProviderType.API_GATEWAY,\n    tags=[{\n        \"key\": \"KeyName\",\n        \"value\": \"ValueName\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myTransferServer = new AwsNative.Transfer.Server(\"myTransferServer\", new()\n    {\n        EndpointDetails = new AwsNative.Transfer.Inputs.ServerEndpointDetailsArgs\n        {\n            AddressAllocationIds = new[]\n            {\n                \"AddressAllocationId-1\",\n                \"AddressAllocationId-2\",\n            },\n            SubnetIds = new[]\n            {\n                \"SubnetId-1\",\n                \"SubnetId-2\",\n            },\n            VpcId = \"VpcId\",\n        },\n        EndpointType = AwsNative.Transfer.ServerEndpointType.Vpc,\n        LoggingRole = \"Logging-Role-ARN\",\n        Protocols = new[]\n        {\n            AwsNative.Transfer.ServerProtocol.Sftp,\n        },\n        SecurityPolicyName = \"Security-Policy-Name\",\n        IdentityProviderDetails = new AwsNative.Transfer.Inputs.ServerIdentityProviderDetailsArgs\n        {\n            InvocationRole = \"Invocation-Role-ARN\",\n            Url = \"API_GATEWAY-Invocation-URL\",\n        },\n        IdentityProviderType = AwsNative.Transfer.ServerIdentityProviderType.ApiGateway,\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"KeyName\",\n                Value = \"ValueName\",\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/transfer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := transfer.NewServer(ctx, \"myTransferServer\", \u0026transfer.ServerArgs{\n\t\t\tEndpointDetails: \u0026transfer.ServerEndpointDetailsArgs{\n\t\t\t\tAddressAllocationIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"AddressAllocationId-1\"),\n\t\t\t\t\tpulumi.String(\"AddressAllocationId-2\"),\n\t\t\t\t},\n\t\t\t\tSubnetIds: pulumi.StringArray{\n\t\t\t\t\tpulumi.String(\"SubnetId-1\"),\n\t\t\t\t\tpulumi.String(\"SubnetId-2\"),\n\t\t\t\t},\n\t\t\t\tVpcId: pulumi.String(\"VpcId\"),\n\t\t\t},\n\t\t\tEndpointType: transfer.ServerEndpointTypeVpc,\n\t\t\tLoggingRole:  pulumi.String(\"Logging-Role-ARN\"),\n\t\t\tProtocols: transfer.ServerProtocolArray{\n\t\t\t\ttransfer.ServerProtocolSftp,\n\t\t\t},\n\t\t\tSecurityPolicyName: pulumi.String(\"Security-Policy-Name\"),\n\t\t\tIdentityProviderDetails: \u0026transfer.ServerIdentityProviderDetailsArgs{\n\t\t\t\tInvocationRole: pulumi.String(\"Invocation-Role-ARN\"),\n\t\t\t\tUrl:            pulumi.String(\"API_GATEWAY-Invocation-URL\"),\n\t\t\t},\n\t\t\tIdentityProviderType: transfer.ServerIdentityProviderTypeApiGateway,\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"KeyName\"),\n\t\t\t\t\tValue: pulumi.String(\"ValueName\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myTransferServer = new aws_native.transfer.Server(\"myTransferServer\", {\n    endpointDetails: {\n        addressAllocationIds: [\n            \"AddressAllocationId-1\",\n            \"AddressAllocationId-2\",\n        ],\n        subnetIds: [\n            \"SubnetId-1\",\n            \"SubnetId-2\",\n        ],\n        vpcId: \"VpcId\",\n    },\n    endpointType: aws_native.transfer.ServerEndpointType.Vpc,\n    loggingRole: \"Logging-Role-ARN\",\n    protocols: [aws_native.transfer.ServerProtocol.Sftp],\n    securityPolicyName: \"Security-Policy-Name\",\n    identityProviderDetails: {\n        invocationRole: \"Invocation-Role-ARN\",\n        url: \"API_GATEWAY-Invocation-URL\",\n    },\n    identityProviderType: aws_native.transfer.ServerIdentityProviderType.ApiGateway,\n    tags: [{\n        key: \"KeyName\",\n        value: \"ValueName\",\n    }],\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_transfer_server = aws_native.transfer.Server(\"myTransferServer\",\n    endpoint_details={\n        \"address_allocation_ids\": [\n            \"AddressAllocationId-1\",\n            \"AddressAllocationId-2\",\n        ],\n        \"subnet_ids\": [\n            \"SubnetId-1\",\n            \"SubnetId-2\",\n        ],\n        \"vpc_id\": \"VpcId\",\n    },\n    endpoint_type=aws_native.transfer.ServerEndpointType.VPC,\n    logging_role=\"Logging-Role-ARN\",\n    protocols=[aws_native.transfer.ServerProtocol.SFTP],\n    security_policy_name=\"Security-Policy-Name\",\n    identity_provider_details={\n        \"invocation_role\": \"Invocation-Role-ARN\",\n        \"url\": \"API_GATEWAY-Invocation-URL\",\n    },\n    identity_provider_type=aws_native.transfer.ServerIdentityProviderType.API_GATEWAY,\n    tags=[{\n        \"key\": \"KeyName\",\n        \"value\": \"ValueName\",\n    }])\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var transferWorkflow = new AwsNative.Transfer.Workflow(\"transferWorkflow\", new()\n    {\n        Description = \"Transfer Family Workflows Blog\",\n        Steps = new[]\n        {\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Copy,\n                CopyStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepCopyStepDetailsPropertiesArgs\n                {\n                    Name = \"copyToUserKey\",\n                    DestinationFileLocation = new AwsNative.Transfer.Inputs.WorkflowS3FileLocationArgs\n                    {\n                        S3FileLocation = new AwsNative.Transfer.Inputs.WorkflowS3InputFileLocationArgs\n                        {\n                            Bucket = \"archived-records\",\n                            Key = \"${transfer:UserName}/\",\n                        },\n                    },\n                    OverwriteExisting = AwsNative.Transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExisting.True,\n                },\n            },\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Tag,\n                TagStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepTagStepDetailsPropertiesArgs\n                {\n                    Name = \"tagFileForArchive\",\n                    Tags = new[]\n                    {\n                        new AwsNative.Transfer.Inputs.WorkflowS3TagArgs\n                        {\n                            Key = \"Archive\",\n                            Value = \"yes\",\n                        },\n                    },\n                },\n            },\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Custom,\n                CustomStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepCustomStepDetailsPropertiesArgs\n                {\n                    Name = \"transferExtract\",\n                    Target = \"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\",\n                    TimeoutSeconds = 60,\n                },\n            },\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Delete,\n                DeleteStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepDeleteStepDetailsPropertiesArgs\n                {\n                    Name = \"DeleteInputFile\",\n                    SourceFileLocation = \"${original.file}\",\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"TransferFamilyWorkflows\",\n            },\n        },\n    });\n\n    var sftpServer = new AwsNative.Transfer.Server(\"sftpServer\", new()\n    {\n        WorkflowDetails = new AwsNative.Transfer.Inputs.ServerWorkflowDetailsArgs\n        {\n            OnUpload = new[]\n            {\n                new AwsNative.Transfer.Inputs.ServerWorkflowDetailArgs\n                {\n                    ExecutionRole = \"your-workflow-execution-role-arn\",\n                    WorkflowId = transferWorkflow.WorkflowId,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/transfer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttransferWorkflow, err := transfer.NewWorkflow(ctx, \"transferWorkflow\", \u0026transfer.WorkflowArgs{\n\t\t\tDescription: pulumi.String(\"Transfer Family Workflows Blog\"),\n\t\t\tSteps: transfer.WorkflowStepArray{\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeCopy,\n\t\t\t\t\tCopyStepDetails: \u0026transfer.WorkflowStepCopyStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"copyToUserKey\"),\n\t\t\t\t\t\tDestinationFileLocation: \u0026transfer.WorkflowS3FileLocationArgs{\n\t\t\t\t\t\t\tS3FileLocation: \u0026transfer.WorkflowS3InputFileLocationArgs{\n\t\t\t\t\t\t\t\tBucket: pulumi.String(\"archived-records\"),\n\t\t\t\t\t\t\t\tKey:    pulumi.String(\"${transfer:UserName}/\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tOverwriteExisting: transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExistingTrue,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeTag,\n\t\t\t\t\tTagStepDetails: \u0026transfer.WorkflowStepTagStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"tagFileForArchive\"),\n\t\t\t\t\t\tTags: transfer.WorkflowS3TagArray{\n\t\t\t\t\t\t\t\u0026transfer.WorkflowS3TagArgs{\n\t\t\t\t\t\t\t\tKey:   pulumi.String(\"Archive\"),\n\t\t\t\t\t\t\t\tValue: pulumi.String(\"yes\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeCustom,\n\t\t\t\t\tCustomStepDetails: \u0026transfer.WorkflowStepCustomStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName:           pulumi.String(\"transferExtract\"),\n\t\t\t\t\t\tTarget:         pulumi.String(\"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\"),\n\t\t\t\t\t\tTimeoutSeconds: pulumi.Int(60),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeDelete,\n\t\t\t\t\tDeleteStepDetails: \u0026transfer.WorkflowStepDeleteStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName:               pulumi.String(\"DeleteInputFile\"),\n\t\t\t\t\t\tSourceFileLocation: pulumi.String(\"${original.file}\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"TransferFamilyWorkflows\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = transfer.NewServer(ctx, \"sftpServer\", \u0026transfer.ServerArgs{\n\t\t\tWorkflowDetails: \u0026transfer.ServerWorkflowDetailsArgs{\n\t\t\t\tOnUpload: transfer.ServerWorkflowDetailArray{\n\t\t\t\t\t\u0026transfer.ServerWorkflowDetailArgs{\n\t\t\t\t\t\tExecutionRole: pulumi.String(\"your-workflow-execution-role-arn\"),\n\t\t\t\t\t\tWorkflowId:    transferWorkflow.WorkflowId,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst transferWorkflow = new aws_native.transfer.Workflow(\"transferWorkflow\", {\n    description: \"Transfer Family Workflows Blog\",\n    steps: [\n        {\n            type: aws_native.transfer.WorkflowStepType.Copy,\n            copyStepDetails: {\n                name: \"copyToUserKey\",\n                destinationFileLocation: {\n                    s3FileLocation: {\n                        bucket: \"archived-records\",\n                        key: \"${transfer:UserName}/\",\n                    },\n                },\n                overwriteExisting: aws_native.transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExisting.True,\n            },\n        },\n        {\n            type: aws_native.transfer.WorkflowStepType.Tag,\n            tagStepDetails: {\n                name: \"tagFileForArchive\",\n                tags: [{\n                    key: \"Archive\",\n                    value: \"yes\",\n                }],\n            },\n        },\n        {\n            type: aws_native.transfer.WorkflowStepType.Custom,\n            customStepDetails: {\n                name: \"transferExtract\",\n                target: \"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\",\n                timeoutSeconds: 60,\n            },\n        },\n        {\n            type: aws_native.transfer.WorkflowStepType.Delete,\n            deleteStepDetails: {\n                name: \"DeleteInputFile\",\n                sourceFileLocation: \"${original.file}\",\n            },\n        },\n    ],\n    tags: [{\n        key: \"Name\",\n        value: \"TransferFamilyWorkflows\",\n    }],\n});\nconst sftpServer = new aws_native.transfer.Server(\"sftpServer\", {workflowDetails: {\n    onUpload: [{\n        executionRole: \"your-workflow-execution-role-arn\",\n        workflowId: transferWorkflow.workflowId,\n    }],\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntransfer_workflow = aws_native.transfer.Workflow(\"transferWorkflow\",\n    description=\"Transfer Family Workflows Blog\",\n    steps=[\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.COPY,\n            \"copy_step_details\": {\n                \"name\": \"copyToUserKey\",\n                \"destination_file_location\": {\n                    \"s3_file_location\": {\n                        \"bucket\": \"archived-records\",\n                        \"key\": \"${transfer:UserName}/\",\n                    },\n                },\n                \"overwrite_existing\": aws_native.transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExisting.TRUE,\n            },\n        },\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.TAG,\n            \"tag_step_details\": {\n                \"name\": \"tagFileForArchive\",\n                \"tags\": [{\n                    \"key\": \"Archive\",\n                    \"value\": \"yes\",\n                }],\n            },\n        },\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.CUSTOM,\n            \"custom_step_details\": {\n                \"name\": \"transferExtract\",\n                \"target\": \"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\",\n                \"timeout_seconds\": 60,\n            },\n        },\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.DELETE,\n            \"delete_step_details\": {\n                \"name\": \"DeleteInputFile\",\n                \"source_file_location\": \"${original.file}\",\n            },\n        },\n    ],\n    tags=[{\n        \"key\": \"Name\",\n        \"value\": \"TransferFamilyWorkflows\",\n    }])\nsftp_server = aws_native.transfer.Server(\"sftpServer\", workflow_details={\n    \"on_upload\": [{\n        \"execution_role\": \"your-workflow-execution-role-arn\",\n        \"workflow_id\": transfer_workflow.workflow_id,\n    }],\n})\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var transferWorkflow = new AwsNative.Transfer.Workflow(\"transferWorkflow\", new()\n    {\n        Description = \"Transfer Family Workflows Blog\",\n        Steps = new[]\n        {\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Copy,\n                CopyStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepCopyStepDetailsPropertiesArgs\n                {\n                    Name = \"copyToUserKey\",\n                    DestinationFileLocation = new AwsNative.Transfer.Inputs.WorkflowS3FileLocationArgs\n                    {\n                        S3FileLocation = new AwsNative.Transfer.Inputs.WorkflowS3InputFileLocationArgs\n                        {\n                            Bucket = \"archived-records\",\n                            Key = \"${transfer:UserName}/\",\n                        },\n                    },\n                    OverwriteExisting = AwsNative.Transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExisting.True,\n                },\n            },\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Tag,\n                TagStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepTagStepDetailsPropertiesArgs\n                {\n                    Name = \"tagFileForArchive\",\n                    Tags = new[]\n                    {\n                        new AwsNative.Transfer.Inputs.WorkflowS3TagArgs\n                        {\n                            Key = \"Archive\",\n                            Value = \"yes\",\n                        },\n                    },\n                },\n            },\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Custom,\n                CustomStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepCustomStepDetailsPropertiesArgs\n                {\n                    Name = \"transferExtract\",\n                    Target = \"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\",\n                    TimeoutSeconds = 60,\n                },\n            },\n            new AwsNative.Transfer.Inputs.WorkflowStepArgs\n            {\n                Type = AwsNative.Transfer.WorkflowStepType.Delete,\n                DeleteStepDetails = new AwsNative.Transfer.Inputs.WorkflowStepDeleteStepDetailsPropertiesArgs\n                {\n                    Name = \"DeleteInputFile\",\n                    SourceFileLocation = \"${original.file}\",\n                },\n            },\n        },\n        Tags = new[]\n        {\n            new AwsNative.Inputs.TagArgs\n            {\n                Key = \"Name\",\n                Value = \"TransferFamilyWorkflows\",\n            },\n        },\n    });\n\n    var sftpServer = new AwsNative.Transfer.Server(\"sftpServer\", new()\n    {\n        WorkflowDetails = new AwsNative.Transfer.Inputs.ServerWorkflowDetailsArgs\n        {\n            OnUpload = new[]\n            {\n                new AwsNative.Transfer.Inputs.ServerWorkflowDetailArgs\n                {\n                    ExecutionRole = \"your-workflow-execution-role-arn\",\n                    WorkflowId = transferWorkflow.WorkflowId,\n                },\n            },\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\tawsnative \"github.com/pulumi/pulumi-aws-native/sdk/go/aws\"\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/transfer\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\ttransferWorkflow, err := transfer.NewWorkflow(ctx, \"transferWorkflow\", \u0026transfer.WorkflowArgs{\n\t\t\tDescription: pulumi.String(\"Transfer Family Workflows Blog\"),\n\t\t\tSteps: transfer.WorkflowStepArray{\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeCopy,\n\t\t\t\t\tCopyStepDetails: \u0026transfer.WorkflowStepCopyStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"copyToUserKey\"),\n\t\t\t\t\t\tDestinationFileLocation: \u0026transfer.WorkflowS3FileLocationArgs{\n\t\t\t\t\t\t\tS3FileLocation: \u0026transfer.WorkflowS3InputFileLocationArgs{\n\t\t\t\t\t\t\t\tBucket: pulumi.String(\"archived-records\"),\n\t\t\t\t\t\t\t\tKey:    pulumi.String(\"${transfer:UserName}/\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tOverwriteExisting: transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExistingTrue,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeTag,\n\t\t\t\t\tTagStepDetails: \u0026transfer.WorkflowStepTagStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName: pulumi.String(\"tagFileForArchive\"),\n\t\t\t\t\t\tTags: transfer.WorkflowS3TagArray{\n\t\t\t\t\t\t\t\u0026transfer.WorkflowS3TagArgs{\n\t\t\t\t\t\t\t\tKey:   pulumi.String(\"Archive\"),\n\t\t\t\t\t\t\t\tValue: pulumi.String(\"yes\"),\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeCustom,\n\t\t\t\t\tCustomStepDetails: \u0026transfer.WorkflowStepCustomStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName:           pulumi.String(\"transferExtract\"),\n\t\t\t\t\t\tTarget:         pulumi.String(\"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\"),\n\t\t\t\t\t\tTimeoutSeconds: pulumi.Int(60),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t\u0026transfer.WorkflowStepArgs{\n\t\t\t\t\tType: transfer.WorkflowStepTypeDelete,\n\t\t\t\t\tDeleteStepDetails: \u0026transfer.WorkflowStepDeleteStepDetailsPropertiesArgs{\n\t\t\t\t\t\tName:               pulumi.String(\"DeleteInputFile\"),\n\t\t\t\t\t\tSourceFileLocation: pulumi.String(\"${original.file}\"),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t\tTags: aws.TagArray{\n\t\t\t\t\u0026aws.TagArgs{\n\t\t\t\t\tKey:   pulumi.String(\"Name\"),\n\t\t\t\t\tValue: pulumi.String(\"TransferFamilyWorkflows\"),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\t_, err = transfer.NewServer(ctx, \"sftpServer\", \u0026transfer.ServerArgs{\n\t\t\tWorkflowDetails: \u0026transfer.ServerWorkflowDetailsArgs{\n\t\t\t\tOnUpload: transfer.ServerWorkflowDetailArray{\n\t\t\t\t\t\u0026transfer.ServerWorkflowDetailArgs{\n\t\t\t\t\t\tExecutionRole: pulumi.String(\"your-workflow-execution-role-arn\"),\n\t\t\t\t\t\tWorkflowId:    transferWorkflow.WorkflowId,\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst transferWorkflow = new aws_native.transfer.Workflow(\"transferWorkflow\", {\n    description: \"Transfer Family Workflows Blog\",\n    steps: [\n        {\n            type: aws_native.transfer.WorkflowStepType.Copy,\n            copyStepDetails: {\n                name: \"copyToUserKey\",\n                destinationFileLocation: {\n                    s3FileLocation: {\n                        bucket: \"archived-records\",\n                        key: \"${transfer:UserName}/\",\n                    },\n                },\n                overwriteExisting: aws_native.transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExisting.True,\n            },\n        },\n        {\n            type: aws_native.transfer.WorkflowStepType.Tag,\n            tagStepDetails: {\n                name: \"tagFileForArchive\",\n                tags: [{\n                    key: \"Archive\",\n                    value: \"yes\",\n                }],\n            },\n        },\n        {\n            type: aws_native.transfer.WorkflowStepType.Custom,\n            customStepDetails: {\n                name: \"transferExtract\",\n                target: \"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\",\n                timeoutSeconds: 60,\n            },\n        },\n        {\n            type: aws_native.transfer.WorkflowStepType.Delete,\n            deleteStepDetails: {\n                name: \"DeleteInputFile\",\n                sourceFileLocation: \"${original.file}\",\n            },\n        },\n    ],\n    tags: [{\n        key: \"Name\",\n        value: \"TransferFamilyWorkflows\",\n    }],\n});\nconst sftpServer = new aws_native.transfer.Server(\"sftpServer\", {workflowDetails: {\n    onUpload: [{\n        executionRole: \"your-workflow-execution-role-arn\",\n        workflowId: transferWorkflow.workflowId,\n    }],\n}});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\ntransfer_workflow = aws_native.transfer.Workflow(\"transferWorkflow\",\n    description=\"Transfer Family Workflows Blog\",\n    steps=[\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.COPY,\n            \"copy_step_details\": {\n                \"name\": \"copyToUserKey\",\n                \"destination_file_location\": {\n                    \"s3_file_location\": {\n                        \"bucket\": \"archived-records\",\n                        \"key\": \"${transfer:UserName}/\",\n                    },\n                },\n                \"overwrite_existing\": aws_native.transfer.WorkflowStepCopyStepDetailsPropertiesOverwriteExisting.TRUE,\n            },\n        },\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.TAG,\n            \"tag_step_details\": {\n                \"name\": \"tagFileForArchive\",\n                \"tags\": [{\n                    \"key\": \"Archive\",\n                    \"value\": \"yes\",\n                }],\n            },\n        },\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.CUSTOM,\n            \"custom_step_details\": {\n                \"name\": \"transferExtract\",\n                \"target\": \"arn:${AWS::Partition}:lambda:${AWS::Region}:${AWS::AccountId}:function:my-function-name\",\n                \"timeout_seconds\": 60,\n            },\n        },\n        {\n            \"type\": aws_native.transfer.WorkflowStepType.DELETE,\n            \"delete_step_details\": {\n                \"name\": \"DeleteInputFile\",\n                \"source_file_location\": \"${original.file}\",\n            },\n        },\n    ],\n    tags=[{\n        \"key\": \"Name\",\n        \"value\": \"TransferFamilyWorkflows\",\n    }])\nsftp_server = aws_native.transfer.Server(\"sftpServer\", workflow_details={\n    \"on_upload\": [{\n        \"execution_role\": \"your-workflow-execution-role-arn\",\n        \"workflow_id\": transfer_workflow.workflow_id,\n    }],\n})\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) of the server."},"as2ServiceManagedEgressIpAddresses":{"type":"array","items":{"type":"string"},"description":"The list of egress IP addresses of this server. These IP addresses are only relevant for servers that use the AS2 protocol. They are used for sending asynchronous MDNs. These IP addresses are assigned automatically when you create an AS2 server. Additionally, if you update an existing server and add the AS2 protocol, static IP addresses are assigned as well."},"certificate":{"type":"string","description":"The Amazon Resource Name (ARN) of the Certificate Manager (ACM) certificate. Required when `Protocols` is set to `FTPS` .\n\nTo request a new public certificate, see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) in the *Certificate Manager User Guide* .\n\nTo import an existing certificate into ACM, see [Importing certificates into ACM](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *Certificate Manager User Guide* .\n\nTo request a private certificate to use FTPS through private IP addresses, see [Request a private certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-private.html) in the *Certificate Manager User Guide* .\n\nCertificates with the following cryptographic algorithms and key sizes are supported:\n\n- 2048-bit RSA (RSA_2048)\n- 4096-bit RSA (RSA_4096)\n- Elliptic Prime Curve 256 bit (EC_prime256v1)\n- Elliptic Prime Curve 384 bit (EC_secp384r1)\n- Elliptic Prime Curve 521 bit (EC_secp521r1)\n\n\u003e The certificate must be a valid SSL/TLS X.509 version 3 certificate with FQDN or IP address specified and information about the issuer."},"domain":{"$ref":"#/types/aws-native:transfer:ServerDomain","description":"Specifies the domain of the storage system that is used for file transfers. There are two domains available: Amazon Simple Storage Service (Amazon S3) and Amazon Elastic File System (Amazon EFS). The default value is S3.","replaceOnChanges":true},"endpointDetails":{"$ref":"#/types/aws-native:transfer:ServerEndpointDetails","description":"The virtual private cloud (VPC) endpoint settings that are configured for your server. When you host your endpoint within your VPC, you can make your endpoint accessible only to resources within your VPC, or you can attach Elastic IP addresses and make your endpoint accessible to clients over the internet. Your VPC's default security groups are automatically assigned to your endpoint."},"endpointType":{"$ref":"#/types/aws-native:transfer:ServerEndpointType","description":"The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it.\n\n\u003e After May 19, 2021, you won't be able to create a server using `EndpointType=VPC_ENDPOINT` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with `EndpointType=VPC_ENDPOINT` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use `EndpointType` = `VPC` .\n\u003e \n\u003e For more information, see [Discontinuing the use of VPC_ENDPOINT](https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint) .\n\u003e \n\u003e It is recommended that you use `VPC` as the `EndpointType` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with `EndpointType` set to `VPC_ENDPOINT` ."},"identityProviderDetails":{"$ref":"#/types/aws-native:transfer:ServerIdentityProviderDetails","description":"Required when `IdentityProviderType` is set to `AWS_DIRECTORY_SERVICE` , `AWS _LAMBDA` or `API_GATEWAY` . Accepts an array containing all of the information required to use a directory in `AWS_DIRECTORY_SERVICE` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when `IdentityProviderType` is set to `SERVICE_MANAGED` ."},"identityProviderType":{"$ref":"#/types/aws-native:transfer:ServerIdentityProviderType","description":"The mode of authentication for a server. The default value is `SERVICE_MANAGED` , which allows you to store and access user credentials within the AWS Transfer Family service.\n\nUse `AWS_DIRECTORY_SERVICE` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the `IdentityProviderDetails` parameter.\n\nUse the `API_GATEWAY` value to integrate with an identity provider of your choosing. The `API_GATEWAY` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the `IdentityProviderDetails` parameter.\n\nUse the `AWS_LAMBDA` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the `Function` parameter for the `IdentityProviderDetails` data type."},"ipAddressType":{"$ref":"#/types/aws-native:transfer:ServerIpAddressType","description":"Specifies whether to use IPv4 only, or to use dual-stack (IPv4 and IPv6) for your AWS Transfer Family endpoint. The default value is `IPV4` .\n\n\u003e The `IpAddressType` parameter has the following limitations:\n\u003e \n\u003e - It cannot be changed while the server is online. You must stop the server before modifying this parameter.\n\u003e - It cannot be updated to `DUALSTACK` if the server has `AddressAllocationIds` specified. \u003e When using `DUALSTACK` as the `IpAddressType` , you cannot set the `AddressAllocationIds` parameter for the [EndpointDetails](https://docs.aws.amazon.com/transfer/latest/APIReference/API_EndpointDetails.html) for the server."},"loggingRole":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs."},"postAuthenticationLoginBanner":{"type":"string","description":"Specifies a string to display when users connect to a server. This string is displayed after the user authenticates.\n\n\u003e The SFTP protocol does not support post-authentication display banners."},"preAuthenticationLoginBanner":{"type":"string","description":"Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system:\n\n`This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.`"},"protocolDetails":{"$ref":"#/types/aws-native:transfer:ServerProtocolDetails","description":"The protocol settings that are configured for your server.\n\n- To indicate passive mode (for FTP and FTPS protocols), use the `PassiveIp` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer.\n- To ignore the error that is generated when the client attempts to use the `SETSTAT` command on a file that you are uploading to an Amazon S3 bucket, use the `SetStatOption` parameter. To have the AWS Transfer Family server ignore the `SETSTAT` command and upload files without needing to make any changes to your SFTP client, set the value to `ENABLE_NO_OP` . If you set the `SetStatOption` parameter to `ENABLE_NO_OP` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a `SETSTAT` call.\n- To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the `TlsSessionResumptionMode` parameter.\n- `As2Transports` indicates the transport method for the AS2 messages. Currently, only HTTP is supported.\n\nThe `Protocols` parameter is an array of strings.\n\n*Allowed values* : One or more of `SFTP` , `FTPS` , `FTP` , `AS2`"},"protocols":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:ServerProtocol"},"description":"Specifies the file transfer protocol or protocols over which your file transfer protocol client can connect to your server's endpoint. The available protocols are:\n\n- `SFTP` (Secure Shell (SSH) File Transfer Protocol): File transfer over SSH\n- `FTPS` (File Transfer Protocol Secure): File transfer with TLS encryption\n- `FTP` (File Transfer Protocol): Unencrypted file transfer\n- `AS2` (Applicability Statement 2): used for transporting structured business-to-business data\n\n\u003e - If you select `FTPS` , you must choose a certificate stored in Certificate Manager (ACM) which is used to identify your server when clients connect to it over FTPS.\n\u003e - If `Protocol` includes either `FTP` or `FTPS` , then the `EndpointType` must be `VPC` and the `IdentityProviderType` must be either `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .\n\u003e - If `Protocol` includes `FTP` , then `AddressAllocationIds` cannot be associated.\n\u003e - If `Protocol` is set only to `SFTP` , the `EndpointType` can be set to `PUBLIC` and the `IdentityProviderType` can be set any of the supported identity types: `SERVICE_MANAGED` , `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .\n\u003e - If `Protocol` includes `AS2` , then the `EndpointType` must be `VPC` , and domain must be Amazon S3. \n\nThe `Protocols` parameter is an array of strings.\n\n*Allowed values* : One or more of `SFTP` , `FTPS` , `FTP` , `AS2`"},"s3StorageOptions":{"$ref":"#/types/aws-native:transfer:ServerS3StorageOptions","description":"Specifies whether or not performance for your Amazon S3 directories is optimized.\n\n- If using the console, this is enabled by default.\n- If using the API or CLI, this is disabled by default.\n\nBy default, home directory mappings have a `TYPE` of `DIRECTORY` . If you enable this option, you would then need to explicitly set the `HomeDirectoryMapEntry` `Type` to `FILE` if you want a mapping to have a file target."},"securityPolicyName":{"type":"string","description":"Specifies the name of the security policy for the server."},"serverId":{"type":"string","description":"Specifies the unique system-assigned identifier for a server that you instantiate."},"state":{"$ref":"#/types/aws-native:transfer:ServerState","description":"The condition of the server that was described. A value of `ONLINE` indicates that the server can accept jobs and transfer files. A `State` value of `OFFLINE` means that the server cannot perform file transfer operations.\n\nThe states of `STARTING` and `STOPPING` indicate that the server is in an intermediate state, either not fully able to respond, or not fully offline. The values of `START_FAILED` or `STOP_FAILED` can indicate an error condition."},"structuredLogDestinations":{"type":"array","items":{"type":"string"},"description":"Specifies the log groups to which your server logs are sent.\n\nTo specify a log group, you must provide the ARN for an existing log group. In this case, the format of the log group is as follows:\n\n`arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`\n\nFor example, `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`\n\nIf you have previously specified a log group for a server, you can clear it, and in effect turn off structured logging, by providing an empty value for this parameter in an `update-server` call. For example:\n\n`update-server --server-id s-1234567890abcdef0 --structured-log-destinations`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for servers."},"workflowDetails":{"$ref":"#/types/aws-native:transfer:ServerWorkflowDetails","description":"Specifies the workflow ID for the workflow to assign and the execution role that's used for executing the workflow.\n\nIn addition to a workflow to execute when a file is uploaded completely, `WorkflowDetails` can also contain a workflow ID (and execution role) for a workflow to execute on partial upload. A partial upload occurs when a file is open when the session disconnects."}},"type":"object","required":["arn","as2ServiceManagedEgressIpAddresses","serverId","state"],"inputProperties":{"certificate":{"type":"string","description":"The Amazon Resource Name (ARN) of the Certificate Manager (ACM) certificate. Required when `Protocols` is set to `FTPS` .\n\nTo request a new public certificate, see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) in the *Certificate Manager User Guide* .\n\nTo import an existing certificate into ACM, see [Importing certificates into ACM](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *Certificate Manager User Guide* .\n\nTo request a private certificate to use FTPS through private IP addresses, see [Request a private certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-private.html) in the *Certificate Manager User Guide* .\n\nCertificates with the following cryptographic algorithms and key sizes are supported:\n\n- 2048-bit RSA (RSA_2048)\n- 4096-bit RSA (RSA_4096)\n- Elliptic Prime Curve 256 bit (EC_prime256v1)\n- Elliptic Prime Curve 384 bit (EC_secp384r1)\n- Elliptic Prime Curve 521 bit (EC_secp521r1)\n\n\u003e The certificate must be a valid SSL/TLS X.509 version 3 certificate with FQDN or IP address specified and information about the issuer."},"domain":{"$ref":"#/types/aws-native:transfer:ServerDomain","description":"Specifies the domain of the storage system that is used for file transfers. There are two domains available: Amazon Simple Storage Service (Amazon S3) and Amazon Elastic File System (Amazon EFS). The default value is S3."},"endpointDetails":{"$ref":"#/types/aws-native:transfer:ServerEndpointDetails","description":"The virtual private cloud (VPC) endpoint settings that are configured for your server. When you host your endpoint within your VPC, you can make your endpoint accessible only to resources within your VPC, or you can attach Elastic IP addresses and make your endpoint accessible to clients over the internet. Your VPC's default security groups are automatically assigned to your endpoint."},"endpointType":{"$ref":"#/types/aws-native:transfer:ServerEndpointType","description":"The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it.\n\n\u003e After May 19, 2021, you won't be able to create a server using `EndpointType=VPC_ENDPOINT` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with `EndpointType=VPC_ENDPOINT` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use `EndpointType` = `VPC` .\n\u003e \n\u003e For more information, see [Discontinuing the use of VPC_ENDPOINT](https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint) .\n\u003e \n\u003e It is recommended that you use `VPC` as the `EndpointType` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with `EndpointType` set to `VPC_ENDPOINT` ."},"identityProviderDetails":{"$ref":"#/types/aws-native:transfer:ServerIdentityProviderDetails","description":"Required when `IdentityProviderType` is set to `AWS_DIRECTORY_SERVICE` , `AWS _LAMBDA` or `API_GATEWAY` . Accepts an array containing all of the information required to use a directory in `AWS_DIRECTORY_SERVICE` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when `IdentityProviderType` is set to `SERVICE_MANAGED` ."},"identityProviderType":{"$ref":"#/types/aws-native:transfer:ServerIdentityProviderType","description":"The mode of authentication for a server. The default value is `SERVICE_MANAGED` , which allows you to store and access user credentials within the AWS Transfer Family service.\n\nUse `AWS_DIRECTORY_SERVICE` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the `IdentityProviderDetails` parameter.\n\nUse the `API_GATEWAY` value to integrate with an identity provider of your choosing. The `API_GATEWAY` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the `IdentityProviderDetails` parameter.\n\nUse the `AWS_LAMBDA` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the `Function` parameter for the `IdentityProviderDetails` data type."},"ipAddressType":{"$ref":"#/types/aws-native:transfer:ServerIpAddressType","description":"Specifies whether to use IPv4 only, or to use dual-stack (IPv4 and IPv6) for your AWS Transfer Family endpoint. The default value is `IPV4` .\n\n\u003e The `IpAddressType` parameter has the following limitations:\n\u003e \n\u003e - It cannot be changed while the server is online. You must stop the server before modifying this parameter.\n\u003e - It cannot be updated to `DUALSTACK` if the server has `AddressAllocationIds` specified. \u003e When using `DUALSTACK` as the `IpAddressType` , you cannot set the `AddressAllocationIds` parameter for the [EndpointDetails](https://docs.aws.amazon.com/transfer/latest/APIReference/API_EndpointDetails.html) for the server."},"loggingRole":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs."},"postAuthenticationLoginBanner":{"type":"string","description":"Specifies a string to display when users connect to a server. This string is displayed after the user authenticates.\n\n\u003e The SFTP protocol does not support post-authentication display banners."},"preAuthenticationLoginBanner":{"type":"string","description":"Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system:\n\n`This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.`"},"protocolDetails":{"$ref":"#/types/aws-native:transfer:ServerProtocolDetails","description":"The protocol settings that are configured for your server.\n\n- To indicate passive mode (for FTP and FTPS protocols), use the `PassiveIp` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer.\n- To ignore the error that is generated when the client attempts to use the `SETSTAT` command on a file that you are uploading to an Amazon S3 bucket, use the `SetStatOption` parameter. To have the AWS Transfer Family server ignore the `SETSTAT` command and upload files without needing to make any changes to your SFTP client, set the value to `ENABLE_NO_OP` . If you set the `SetStatOption` parameter to `ENABLE_NO_OP` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a `SETSTAT` call.\n- To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the `TlsSessionResumptionMode` parameter.\n- `As2Transports` indicates the transport method for the AS2 messages. Currently, only HTTP is supported.\n\nThe `Protocols` parameter is an array of strings.\n\n*Allowed values* : One or more of `SFTP` , `FTPS` , `FTP` , `AS2`"},"protocols":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:ServerProtocol"},"description":"Specifies the file transfer protocol or protocols over which your file transfer protocol client can connect to your server's endpoint. The available protocols are:\n\n- `SFTP` (Secure Shell (SSH) File Transfer Protocol): File transfer over SSH\n- `FTPS` (File Transfer Protocol Secure): File transfer with TLS encryption\n- `FTP` (File Transfer Protocol): Unencrypted file transfer\n- `AS2` (Applicability Statement 2): used for transporting structured business-to-business data\n\n\u003e - If you select `FTPS` , you must choose a certificate stored in Certificate Manager (ACM) which is used to identify your server when clients connect to it over FTPS.\n\u003e - If `Protocol` includes either `FTP` or `FTPS` , then the `EndpointType` must be `VPC` and the `IdentityProviderType` must be either `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .\n\u003e - If `Protocol` includes `FTP` , then `AddressAllocationIds` cannot be associated.\n\u003e - If `Protocol` is set only to `SFTP` , the `EndpointType` can be set to `PUBLIC` and the `IdentityProviderType` can be set any of the supported identity types: `SERVICE_MANAGED` , `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .\n\u003e - If `Protocol` includes `AS2` , then the `EndpointType` must be `VPC` , and domain must be Amazon S3. \n\nThe `Protocols` parameter is an array of strings.\n\n*Allowed values* : One or more of `SFTP` , `FTPS` , `FTP` , `AS2`"},"s3StorageOptions":{"$ref":"#/types/aws-native:transfer:ServerS3StorageOptions","description":"Specifies whether or not performance for your Amazon S3 directories is optimized.\n\n- If using the console, this is enabled by default.\n- If using the API or CLI, this is disabled by default.\n\nBy default, home directory mappings have a `TYPE` of `DIRECTORY` . If you enable this option, you would then need to explicitly set the `HomeDirectoryMapEntry` `Type` to `FILE` if you want a mapping to have a file target."},"securityPolicyName":{"type":"string","description":"Specifies the name of the security policy for the server."},"structuredLogDestinations":{"type":"array","items":{"type":"string"},"description":"Specifies the log groups to which your server logs are sent.\n\nTo specify a log group, you must provide the ARN for an existing log group. In this case, the format of the log group is as follows:\n\n`arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`\n\nFor example, `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`\n\nIf you have previously specified a log group for a server, you can clear it, and in effect turn off structured logging, by providing an empty value for this parameter in an `update-server` call. For example:\n\n`update-server --server-id s-1234567890abcdef0 --structured-log-destinations`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for servers."},"workflowDetails":{"$ref":"#/types/aws-native:transfer:ServerWorkflowDetails","description":"Specifies the workflow ID for the workflow to assign and the execution role that's used for executing the workflow.\n\nIn addition to a workflow to execute when a file is uploaded completely, `WorkflowDetails` can also contain a workflow ID (and execution role) for a workflow to execute on partial upload. A partial upload occurs when a file is open when the session disconnects."}}},"aws-native:transfer:User":{"description":"Definition of AWS::Transfer::User Resource Type","properties":{"arn":{"type":"string","description":"The Amazon Resource Name associated with the user, in the form `arn:aws:transfer:region: *account-id* :user/ *server-id* / *username*` .\n\nAn example of a user ARN is: `arn:aws:transfer:us-east-1:123456789012:user/user1` ."},"homeDirectory":{"type":"string","description":"The landing directory (folder) for a user when they log in to the server using the client.\n\nA `HomeDirectory` example is `/bucket_name/home/mydirectory` .\n\n\u003e You can use the `HomeDirectory` parameter for `HomeDirectoryType` when it is set to either `PATH` or `LOGICAL` ."},"homeDirectoryMappings":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:UserHomeDirectoryMapEntry"},"description":"Logical directory mappings that specify what Amazon S3 or Amazon EFS paths and keys should be visible to your user and how you want to make them visible. You must specify the `Entry` and `Target` pair, where `Entry` shows how the path is made visible and `Target` is the actual Amazon S3 or Amazon EFS path. If you only specify a target, it is displayed as is. You also must ensure that your AWS Identity and Access Management (IAM) role provides access to paths in `Target` . This value can be set only when `HomeDirectoryType` is set to *LOGICAL* .\n\nThe following is an `Entry` and `Target` pair example.\n\n`[ { \"Entry\": \"/directory1\", \"Target\": \"/bucket_name/home/mydirectory\" } ]`\n\nIn most cases, you can use this value instead of the session policy to lock your user down to the designated home directory (\" `chroot` \"). To do this, you can set `Entry` to `/` and set `Target` to the value the user should see for their home directory when they log in.\n\nThe following is an `Entry` and `Target` pair example for `chroot` .\n\n`[ { \"Entry\": \"/\", \"Target\": \"/bucket_name/home/mydirectory\" } ]`"},"homeDirectoryType":{"$ref":"#/types/aws-native:transfer:UserHomeDirectoryType","description":"The type of landing directory (folder) that you want your users' home directory to be when they log in to the server. If you set it to `PATH` , the user will see the absolute Amazon S3 bucket or Amazon EFS path as is in their file transfer protocol clients. If you set it to `LOGICAL` , you need to provide mappings in the `HomeDirectoryMappings` for how you want to make Amazon S3 or Amazon EFS paths visible to your users.\n\n\u003e If `HomeDirectoryType` is `LOGICAL` , you must provide mappings, using the `HomeDirectoryMappings` parameter. If, on the other hand, `HomeDirectoryType` is `PATH` , you provide an absolute path using the `HomeDirectory` parameter. You cannot have both `HomeDirectory` and `HomeDirectoryMappings` in your template."},"policy":{"type":"string","description":"A session policy for your user so you can use the same IAM role across multiple users. This policy restricts user access to portions of their Amazon S3 bucket. Variables that you can use inside this policy include `${Transfer:UserName}` , `${Transfer:HomeDirectory}` , and `${Transfer:HomeBucket}` .\n\n\u003e For session policies, AWS Transfer Family stores the policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the policy. You save the policy as a JSON blob and pass it in the `Policy` argument.\n\u003e \n\u003e For an example of a session policy, see [Example session policy](https://docs.aws.amazon.com/transfer/latest/userguide/session-policy.html) .\n\u003e \n\u003e For more information, see [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) in the *AWS Security Token Service API Reference* ."},"posixProfile":{"$ref":"#/types/aws-native:transfer:UserPosixProfile","description":"Specifies the full POSIX identity, including user ID ( `Uid` ), group ID ( `Gid` ), and any secondary groups IDs ( `SecondaryGids` ), that controls your users' access to your Amazon Elastic File System (Amazon EFS) file systems. The POSIX permissions that are set on files and directories in your file system determine the level of access your users get when transferring files into and out of your Amazon EFS file systems."},"role":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that controls your users' access to your Amazon S3 bucket or Amazon EFS file system. The policies attached to this role determine the level of access that you want to provide your users when transferring files into and out of your Amazon S3 bucket or Amazon EFS file system. The IAM role should also contain a trust relationship that allows the server to access your resources when servicing your users' transfer requests."},"serverId":{"type":"string","description":"A system-assigned unique identifier for a server instance. This is the specific server that you added your user to.","replaceOnChanges":true},"sshPublicKeys":{"type":"array","items":{"type":"string"},"description":"This represents the SSH User Public Keys for CloudFormation resource"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for users. Tags are metadata attached to users for any purpose."},"userName":{"type":"string","description":"A unique string that identifies a user and is associated with a `ServerId` . This user name must be a minimum of 3 and a maximum of 100 characters long. The following are valid characters: a-z, A-Z, 0-9, underscore '_', hyphen '-', period '.', and at sign '@'. The user name can't start with a hyphen, period, or at sign.","replaceOnChanges":true}},"type":"object","required":["arn","role","serverId","userName"],"inputProperties":{"homeDirectory":{"type":"string","description":"The landing directory (folder) for a user when they log in to the server using the client.\n\nA `HomeDirectory` example is `/bucket_name/home/mydirectory` .\n\n\u003e You can use the `HomeDirectory` parameter for `HomeDirectoryType` when it is set to either `PATH` or `LOGICAL` ."},"homeDirectoryMappings":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:UserHomeDirectoryMapEntry"},"description":"Logical directory mappings that specify what Amazon S3 or Amazon EFS paths and keys should be visible to your user and how you want to make them visible. You must specify the `Entry` and `Target` pair, where `Entry` shows how the path is made visible and `Target` is the actual Amazon S3 or Amazon EFS path. If you only specify a target, it is displayed as is. You also must ensure that your AWS Identity and Access Management (IAM) role provides access to paths in `Target` . This value can be set only when `HomeDirectoryType` is set to *LOGICAL* .\n\nThe following is an `Entry` and `Target` pair example.\n\n`[ { \"Entry\": \"/directory1\", \"Target\": \"/bucket_name/home/mydirectory\" } ]`\n\nIn most cases, you can use this value instead of the session policy to lock your user down to the designated home directory (\" `chroot` \"). To do this, you can set `Entry` to `/` and set `Target` to the value the user should see for their home directory when they log in.\n\nThe following is an `Entry` and `Target` pair example for `chroot` .\n\n`[ { \"Entry\": \"/\", \"Target\": \"/bucket_name/home/mydirectory\" } ]`"},"homeDirectoryType":{"$ref":"#/types/aws-native:transfer:UserHomeDirectoryType","description":"The type of landing directory (folder) that you want your users' home directory to be when they log in to the server. If you set it to `PATH` , the user will see the absolute Amazon S3 bucket or Amazon EFS path as is in their file transfer protocol clients. If you set it to `LOGICAL` , you need to provide mappings in the `HomeDirectoryMappings` for how you want to make Amazon S3 or Amazon EFS paths visible to your users.\n\n\u003e If `HomeDirectoryType` is `LOGICAL` , you must provide mappings, using the `HomeDirectoryMappings` parameter. If, on the other hand, `HomeDirectoryType` is `PATH` , you provide an absolute path using the `HomeDirectory` parameter. You cannot have both `HomeDirectory` and `HomeDirectoryMappings` in your template."},"policy":{"type":"string","description":"A session policy for your user so you can use the same IAM role across multiple users. This policy restricts user access to portions of their Amazon S3 bucket. Variables that you can use inside this policy include `${Transfer:UserName}` , `${Transfer:HomeDirectory}` , and `${Transfer:HomeBucket}` .\n\n\u003e For session policies, AWS Transfer Family stores the policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the policy. You save the policy as a JSON blob and pass it in the `Policy` argument.\n\u003e \n\u003e For an example of a session policy, see [Example session policy](https://docs.aws.amazon.com/transfer/latest/userguide/session-policy.html) .\n\u003e \n\u003e For more information, see [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) in the *AWS Security Token Service API Reference* ."},"posixProfile":{"$ref":"#/types/aws-native:transfer:UserPosixProfile","description":"Specifies the full POSIX identity, including user ID ( `Uid` ), group ID ( `Gid` ), and any secondary groups IDs ( `SecondaryGids` ), that controls your users' access to your Amazon Elastic File System (Amazon EFS) file systems. The POSIX permissions that are set on files and directories in your file system determine the level of access your users get when transferring files into and out of your Amazon EFS file systems."},"role":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that controls your users' access to your Amazon S3 bucket or Amazon EFS file system. The policies attached to this role determine the level of access that you want to provide your users when transferring files into and out of your Amazon S3 bucket or Amazon EFS file system. The IAM role should also contain a trust relationship that allows the server to access your resources when servicing your users' transfer requests."},"serverId":{"type":"string","description":"A system-assigned unique identifier for a server instance. This is the specific server that you added your user to."},"sshPublicKeys":{"type":"array","items":{"type":"string"},"description":"This represents the SSH User Public Keys for CloudFormation resource"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for users. Tags are metadata attached to users for any purpose."},"userName":{"type":"string","description":"A unique string that identifies a user and is associated with a `ServerId` . This user name must be a minimum of 3 and a maximum of 100 characters long. The following are valid characters: a-z, A-Z, 0-9, underscore '_', hyphen '-', period '.', and at sign '@'. The user name can't start with a hyphen, period, or at sign."}},"requiredInputs":["role","serverId"]},"aws-native:transfer:WebApp":{"description":"Resource Type definition for AWS::Transfer::WebApp","properties":{"accessEndpoint":{"type":"string","description":"The AccessEndpoint is the URL that you provide to your users for them to interact with the Transfer Family web app. You can specify a custom URL or use the default value."},"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the web app."},"endpointDetails":{"$ref":"#/types/aws-native:transfer:WebAppEndpointDetails"},"identityProviderDetails":{"$ref":"#/types/aws-native:transfer:WebAppIdentityProviderDetails","description":"You can provide a structure that contains the details for the identity provider to use with your web app.\n\nFor more details about this parameter, see [Configure your identity provider for Transfer Family web apps](https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for web apps."},"vpcEndpointId":{"type":"string"},"webAppCustomization":{"$ref":"#/types/aws-native:transfer:WebAppCustomization","description":"A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app."},"webAppEndpointPolicy":{"$ref":"#/types/aws-native:transfer:WebAppEndpointPolicy","description":"Setting for the type of endpoint policy for the web app. The default value is `STANDARD` .\n\nIf your web app was created in an AWS GovCloud (US) Region , the value of this parameter can be `FIPS` , which indicates the web app endpoint is FIPS-compliant.","replaceOnChanges":true},"webAppId":{"type":"string","description":"A unique identifier for the web app."},"webAppUnits":{"$ref":"#/types/aws-native:transfer:WebAppUnitsProperties","description":"A union that contains the value for number of concurrent connections or the user sessions on your web app."}},"type":"object","required":["arn","identityProviderDetails","vpcEndpointId","webAppId"],"inputProperties":{"accessEndpoint":{"type":"string","description":"The AccessEndpoint is the URL that you provide to your users for them to interact with the Transfer Family web app. You can specify a custom URL or use the default value."},"endpointDetails":{"$ref":"#/types/aws-native:transfer:WebAppEndpointDetails"},"identityProviderDetails":{"$ref":"#/types/aws-native:transfer:WebAppIdentityProviderDetails","description":"You can provide a structure that contains the details for the identity provider to use with your web app.\n\nFor more details about this parameter, see [Configure your identity provider for Transfer Family web apps](https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for web apps."},"webAppCustomization":{"$ref":"#/types/aws-native:transfer:WebAppCustomization","description":"A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app."},"webAppEndpointPolicy":{"$ref":"#/types/aws-native:transfer:WebAppEndpointPolicy","description":"Setting for the type of endpoint policy for the web app. The default value is `STANDARD` .\n\nIf your web app was created in an AWS GovCloud (US) Region , the value of this parameter can be `FIPS` , which indicates the web app endpoint is FIPS-compliant."},"webAppUnits":{"$ref":"#/types/aws-native:transfer:WebAppUnitsProperties","description":"A union that contains the value for number of concurrent connections or the user sessions on your web app."}},"requiredInputs":["identityProviderDetails"]},"aws-native:transfer:Workflow":{"description":"Resource Type definition for AWS::Transfer::Workflow","properties":{"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the workflow."},"description":{"type":"string","description":"A textual description for the workflow.","replaceOnChanges":true},"onExceptionSteps":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:WorkflowStep"},"description":"Specifies the steps (actions) to take if any errors are encountered during execution of the workflow.","replaceOnChanges":true},"steps":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:WorkflowStep"},"description":"Specifies the details for the steps that are in the specified workflow.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for workflows. Tags are metadata attached to workflows for any purpose."},"workflowId":{"type":"string","description":"A unique identifier for the workflow."}},"type":"object","required":["arn","steps","workflowId"],"inputProperties":{"description":{"type":"string","description":"A textual description for the workflow."},"onExceptionSteps":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:WorkflowStep"},"description":"Specifies the steps (actions) to take if any errors are encountered during execution of the workflow."},"steps":{"type":"array","items":{"$ref":"#/types/aws-native:transfer:WorkflowStep"},"description":"Specifies the details for the steps that are in the specified workflow."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key-value pairs that can be used to group and search for workflows. Tags are metadata attached to workflows for any purpose."}},"requiredInputs":["steps"]},"aws-native:verifiedpermissions:IdentitySource":{"description":"Definition of AWS::VerifiedPermissions::IdentitySource Resource Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var policyStoreId = config.Require(\"policyStoreId\");\n    var userPoolArn = config.Require(\"userPoolArn\");\n    var clientIds = config.RequireObject\u003cstring[]\u003e(\"clientIds\");\n    var principalEntityType = config.Require(\"principalEntityType\");\n    var identitySource = new AwsNative.VerifiedPermissions.IdentitySource(\"identitySource\", new()\n    {\n        PolicyStoreId = policyStoreId,\n        Configuration = new AwsNative.VerifiedPermissions.Inputs.IdentitySourceConfiguration0PropertiesArgs\n        {\n            CognitoUserPoolConfiguration = new AwsNative.VerifiedPermissions.Inputs.IdentitySourceCognitoUserPoolConfigurationArgs\n            {\n                UserPoolArn = userPoolArn,\n                ClientIds = clientIds,\n            },\n        },\n        PrincipalEntityType = principalEntityType,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"identitySourceId\"] = identitySource.IdentitySourceId,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/verifiedpermissions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tpolicyStoreId := cfg.Require(\"policyStoreId\")\n\t\tuserPoolArn := cfg.Require(\"userPoolArn\")\n\t\tclientIds := cfg.Require(\"clientIds\")\n\t\tprincipalEntityType := cfg.Require(\"principalEntityType\")\n\t\tidentitySource, err := verifiedpermissions.NewIdentitySource(ctx, \"identitySource\", \u0026verifiedpermissions.IdentitySourceArgs{\n\t\t\tPolicyStoreId: pulumi.String(pulumi.String(policyStoreId)),\n\t\t\tConfiguration: \u0026verifiedpermissions.IdentitySourceConfiguration0PropertiesArgs{\n\t\t\t\tCognitoUserPoolConfiguration: \u0026verifiedpermissions.IdentitySourceCognitoUserPoolConfigurationArgs{\n\t\t\t\t\tUserPoolArn: pulumi.String(pulumi.String(userPoolArn)),\n\t\t\t\t\tClientIds:   clientIds,\n\t\t\t\t},\n\t\t\t},\n\t\t\tPrincipalEntityType: pulumi.String(pulumi.String(principalEntityType)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"identitySourceId\", identitySource.IdentitySourceId)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst policyStoreId = config.require(\"policyStoreId\");\nconst userPoolArn = config.require(\"userPoolArn\");\nconst clientIds = config.requireObject\u003cArray\u003cstring\u003e\u003e(\"clientIds\");\nconst principalEntityType = config.require(\"principalEntityType\");\nconst identitySource = new aws_native.verifiedpermissions.IdentitySource(\"identitySource\", {\n    policyStoreId: policyStoreId,\n    configuration: {\n        cognitoUserPoolConfiguration: {\n            userPoolArn: userPoolArn,\n            clientIds: clientIds,\n        },\n    },\n    principalEntityType: principalEntityType,\n});\nexport const identitySourceId = identitySource.identitySourceId;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\npolicy_store_id = config.require(\"policyStoreId\")\nuser_pool_arn = config.require(\"userPoolArn\")\nclient_ids = config.require_object(\"clientIds\")\nprincipal_entity_type = config.require(\"principalEntityType\")\nidentity_source = aws_native.verifiedpermissions.IdentitySource(\"identitySource\",\n    policy_store_id=policy_store_id,\n    configuration={\n        \"cognito_user_pool_configuration\": {\n            \"user_pool_arn\": user_pool_arn,\n            \"client_ids\": client_ids,\n        },\n    },\n    principal_entity_type=principal_entity_type)\npulumi.export(\"identitySourceId\", identity_source.identity_source_id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceConfiguration0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceConfiguration1Properties"}],"description":"Contains configuration information used when creating a new identity source."},"details":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceDetails"},"identitySourceId":{"type":"string","description":"The unique ID of the new or updated identity store."},"policyStoreId":{"type":"string","description":"Specifies the ID of the policy store in which you want to store this identity source. Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source.","replaceOnChanges":true},"principalEntityType":{"type":"string","description":"Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source."}},"type":"object","required":["configuration","details","identitySourceId","policyStoreId"],"inputProperties":{"configuration":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceConfiguration0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceConfiguration1Properties"}],"description":"Contains configuration information used when creating a new identity source."},"policyStoreId":{"type":"string","description":"Specifies the ID of the policy store in which you want to store this identity source. Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source."},"principalEntityType":{"type":"string","description":"Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source."}},"requiredInputs":["configuration","policyStoreId"]},"aws-native:verifiedpermissions:Policy":{"description":"Definition of AWS::VerifiedPermissions::Policy Resource Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var policyStoreId = config.Require(\"policyStoreId\");\n    var description = config.Require(\"description\");\n    var statement = config.Require(\"statement\");\n    var staticPolicy = new AwsNative.VerifiedPermissions.Policy(\"staticPolicy\", new()\n    {\n        PolicyStoreId = policyStoreId,\n        Definition = new AwsNative.VerifiedPermissions.Inputs.PolicyDefinition0PropertiesArgs\n        {\n            Static = new AwsNative.VerifiedPermissions.Inputs.PolicyStaticPolicyDefinitionArgs\n            {\n                Description = description,\n                Statement = statement,\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"policyId\"] = staticPolicy.PolicyId,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/verifiedpermissions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tpolicyStoreId := cfg.Require(\"policyStoreId\")\n\t\tdescription := cfg.Require(\"description\")\n\t\tstatement := cfg.Require(\"statement\")\n\t\tstaticPolicy, err := verifiedpermissions.NewPolicy(ctx, \"staticPolicy\", \u0026verifiedpermissions.PolicyArgs{\n\t\t\tPolicyStoreId: pulumi.String(pulumi.String(policyStoreId)),\n\t\t\tDefinition: \u0026verifiedpermissions.PolicyDefinition0PropertiesArgs{\n\t\t\t\tStatic: \u0026verifiedpermissions.PolicyStaticPolicyDefinitionArgs{\n\t\t\t\t\tDescription: pulumi.String(pulumi.String(description)),\n\t\t\t\t\tStatement:   pulumi.String(pulumi.String(statement)),\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"policyId\", staticPolicy.PolicyId)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst policyStoreId = config.require(\"policyStoreId\");\nconst description = config.require(\"description\");\nconst statement = config.require(\"statement\");\nconst staticPolicy = new aws_native.verifiedpermissions.Policy(\"staticPolicy\", {\n    policyStoreId: policyStoreId,\n    definition: {\n        static: {\n            description: description,\n            statement: statement,\n        },\n    },\n});\nexport const policyId = staticPolicy.policyId;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\npolicy_store_id = config.require(\"policyStoreId\")\ndescription = config.require(\"description\")\nstatement = config.require(\"statement\")\nstatic_policy = aws_native.verifiedpermissions.Policy(\"staticPolicy\",\n    policy_store_id=policy_store_id,\n    definition={\n        \"static\": {\n            \"description\": description,\n            \"statement\": statement,\n        },\n    })\npulumi.export(\"policyId\", static_policy.policy_id)\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var policyStoreId = config.Require(\"policyStoreId\");\n    var policyTemplateId = config.Require(\"policyTemplateId\");\n    var principalType = config.Require(\"principalType\");\n    var principalId = config.Require(\"principalId\");\n    var resourceType = config.Require(\"resourceType\");\n    var resourceId = config.Require(\"resourceId\");\n    var templateLinkedPolicy = new AwsNative.VerifiedPermissions.Policy(\"templateLinkedPolicy\", new()\n    {\n        PolicyStoreId = policyStoreId,\n        Definition = new AwsNative.VerifiedPermissions.Inputs.PolicyDefinition0PropertiesArgs\n        {\n            TemplateLinked = new AwsNative.VerifiedPermissions.Inputs.PolicyTemplateLinkedPolicyDefinitionArgs\n            {\n                PolicyTemplateId = policyTemplateId,\n                Principal = new AwsNative.VerifiedPermissions.Inputs.PolicyEntityIdentifierArgs\n                {\n                    EntityType = principalType,\n                    EntityId = principalId,\n                },\n                Resource = new AwsNative.VerifiedPermissions.Inputs.PolicyEntityIdentifierArgs\n                {\n                    EntityType = resourceType,\n                    EntityId = resourceId,\n                },\n            },\n        },\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"policyId\"] = templateLinkedPolicy.PolicyId,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/verifiedpermissions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tpolicyStoreId := cfg.Require(\"policyStoreId\")\n\t\tpolicyTemplateId := cfg.Require(\"policyTemplateId\")\n\t\tprincipalType := cfg.Require(\"principalType\")\n\t\tprincipalId := cfg.Require(\"principalId\")\n\t\tresourceType := cfg.Require(\"resourceType\")\n\t\tresourceId := cfg.Require(\"resourceId\")\n\t\ttemplateLinkedPolicy, err := verifiedpermissions.NewPolicy(ctx, \"templateLinkedPolicy\", \u0026verifiedpermissions.PolicyArgs{\n\t\t\tPolicyStoreId: pulumi.String(pulumi.String(policyStoreId)),\n\t\t\tDefinition: \u0026verifiedpermissions.PolicyDefinition0PropertiesArgs{\n\t\t\t\tTemplateLinked: \u0026verifiedpermissions.PolicyTemplateLinkedPolicyDefinitionArgs{\n\t\t\t\t\tPolicyTemplateId: pulumi.String(pulumi.String(policyTemplateId)),\n\t\t\t\t\tPrincipal: \u0026verifiedpermissions.PolicyEntityIdentifierArgs{\n\t\t\t\t\t\tEntityType: pulumi.String(pulumi.String(principalType)),\n\t\t\t\t\t\tEntityId:   pulumi.String(pulumi.String(principalId)),\n\t\t\t\t\t},\n\t\t\t\t\tResource: \u0026verifiedpermissions.PolicyEntityIdentifierArgs{\n\t\t\t\t\t\tEntityType: pulumi.String(pulumi.String(resourceType)),\n\t\t\t\t\t\tEntityId:   pulumi.String(pulumi.String(resourceId)),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"policyId\", templateLinkedPolicy.PolicyId)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst policyStoreId = config.require(\"policyStoreId\");\nconst policyTemplateId = config.require(\"policyTemplateId\");\nconst principalType = config.require(\"principalType\");\nconst principalId = config.require(\"principalId\");\nconst resourceType = config.require(\"resourceType\");\nconst resourceId = config.require(\"resourceId\");\nconst templateLinkedPolicy = new aws_native.verifiedpermissions.Policy(\"templateLinkedPolicy\", {\n    policyStoreId: policyStoreId,\n    definition: {\n        templateLinked: {\n            policyTemplateId: policyTemplateId,\n            principal: {\n                entityType: principalType,\n                entityId: principalId,\n            },\n            resource: {\n                entityType: resourceType,\n                entityId: resourceId,\n            },\n        },\n    },\n});\nexport const policyId = templateLinkedPolicy.policyId;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\npolicy_store_id = config.require(\"policyStoreId\")\npolicy_template_id = config.require(\"policyTemplateId\")\nprincipal_type = config.require(\"principalType\")\nprincipal_id = config.require(\"principalId\")\nresource_type = config.require(\"resourceType\")\nresource_id = config.require(\"resourceId\")\ntemplate_linked_policy = aws_native.verifiedpermissions.Policy(\"templateLinkedPolicy\",\n    policy_store_id=policy_store_id,\n    definition={\n        \"template_linked\": {\n            \"policy_template_id\": policy_template_id,\n            \"principal\": {\n                \"entity_type\": principal_type,\n                \"entity_id\": principal_id,\n            },\n            \"resource\": {\n                \"entity_type\": resource_type,\n                \"entity_id\": resource_id,\n            },\n        },\n    })\npulumi.export(\"policyId\", template_linked_policy.policy_id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"definition":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:PolicyDefinition0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:PolicyDefinition1Properties"}],"description":"Specifies the policy type and content to use for the new or updated policy. The definition structure must include either a `Static` or a `TemplateLinked` element."},"policyId":{"type":"string","description":"The unique ID of the new or updated policy."},"policyStoreId":{"type":"string","description":"Specifies the `PolicyStoreId` of the policy store you want to store the policy in.","replaceOnChanges":true},"policyType":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyType","description":"The type of the policy. This is one of the following values:\n\n- Static\n- TemplateLinked"}},"type":"object","required":["definition","policyId","policyStoreId","policyType"],"inputProperties":{"definition":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:PolicyDefinition0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:PolicyDefinition1Properties"}],"description":"Specifies the policy type and content to use for the new or updated policy. The definition structure must include either a `Static` or a `TemplateLinked` element."},"policyStoreId":{"type":"string","description":"Specifies the `PolicyStoreId` of the policy store you want to store the policy in."}},"requiredInputs":["definition","policyStoreId"]},"aws-native:verifiedpermissions:PolicyStore":{"description":"Represents a policy store that you can place schema, policies, and policy templates in to validate authorization requests\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myPolicyStore = new AwsNative.VerifiedPermissions.PolicyStore(\"myPolicyStore\", new()\n    {\n        Schema = new AwsNative.VerifiedPermissions.Inputs.PolicyStoreSchemaDefinitionArgs\n        {\n            CedarJson = \"{\\\"PhotoApp\\\":{\\\"commonTypes\\\":{\\\"PersonType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"age\\\":{\\\"type\\\":\\\"Long\\\"},\\\"name\\\":{\\\"type\\\":\\\"String\\\"}}},\\\"ContextType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"ip\\\":{\\\"type\\\":\\\"Extension\\\",\\\"name\\\":\\\"ipaddr\\\",\\\"required\\\":false},\\\"authenticated\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}}},\\\"entityTypes\\\":{\\\"User\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"userId\\\":{\\\"type\\\":\\\"String\\\"},\\\"personInformation\\\":{\\\"type\\\":\\\"PersonType\\\"}}},\\\"memberOfTypes\\\":[\\\"UserGroup\\\"]},\\\"UserGroup\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Photo\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"account\\\":{\\\"type\\\":\\\"Entity\\\",\\\"name\\\":\\\"Account\\\",\\\"required\\\":true},\\\"private\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}},\\\"memberOfTypes\\\":[\\\"Album\\\",\\\"Account\\\"]},\\\"Album\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Account\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}}},\\\"actions\\\":{\\\"viewPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"createPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"listPhotos\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}}}}}\",\n        },\n        ValidationSettings = new AwsNative.VerifiedPermissions.Inputs.PolicyStoreValidationSettingsArgs\n        {\n            Mode = AwsNative.VerifiedPermissions.PolicyStoreValidationMode.Strict,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/verifiedpermissions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := verifiedpermissions.NewPolicyStore(ctx, \"myPolicyStore\", \u0026verifiedpermissions.PolicyStoreArgs{\n\t\t\tSchema: \u0026verifiedpermissions.PolicyStoreSchemaDefinitionArgs{\n\t\t\t\tCedarJson: pulumi.String(\"{\\\"PhotoApp\\\":{\\\"commonTypes\\\":{\\\"PersonType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"age\\\":{\\\"type\\\":\\\"Long\\\"},\\\"name\\\":{\\\"type\\\":\\\"String\\\"}}},\\\"ContextType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"ip\\\":{\\\"type\\\":\\\"Extension\\\",\\\"name\\\":\\\"ipaddr\\\",\\\"required\\\":false},\\\"authenticated\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}}},\\\"entityTypes\\\":{\\\"User\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"userId\\\":{\\\"type\\\":\\\"String\\\"},\\\"personInformation\\\":{\\\"type\\\":\\\"PersonType\\\"}}},\\\"memberOfTypes\\\":[\\\"UserGroup\\\"]},\\\"UserGroup\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Photo\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"account\\\":{\\\"type\\\":\\\"Entity\\\",\\\"name\\\":\\\"Account\\\",\\\"required\\\":true},\\\"private\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}},\\\"memberOfTypes\\\":[\\\"Album\\\",\\\"Account\\\"]},\\\"Album\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Account\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}}},\\\"actions\\\":{\\\"viewPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"createPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"listPhotos\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}}}}}\"),\n\t\t\t},\n\t\t\tValidationSettings: \u0026verifiedpermissions.PolicyStoreValidationSettingsArgs{\n\t\t\t\tMode: verifiedpermissions.PolicyStoreValidationModeStrict,\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myPolicyStore = new aws_native.verifiedpermissions.PolicyStore(\"myPolicyStore\", {\n    schema: {\n        cedarJson: \"{\\\"PhotoApp\\\":{\\\"commonTypes\\\":{\\\"PersonType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"age\\\":{\\\"type\\\":\\\"Long\\\"},\\\"name\\\":{\\\"type\\\":\\\"String\\\"}}},\\\"ContextType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"ip\\\":{\\\"type\\\":\\\"Extension\\\",\\\"name\\\":\\\"ipaddr\\\",\\\"required\\\":false},\\\"authenticated\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}}},\\\"entityTypes\\\":{\\\"User\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"userId\\\":{\\\"type\\\":\\\"String\\\"},\\\"personInformation\\\":{\\\"type\\\":\\\"PersonType\\\"}}},\\\"memberOfTypes\\\":[\\\"UserGroup\\\"]},\\\"UserGroup\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Photo\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"account\\\":{\\\"type\\\":\\\"Entity\\\",\\\"name\\\":\\\"Account\\\",\\\"required\\\":true},\\\"private\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}},\\\"memberOfTypes\\\":[\\\"Album\\\",\\\"Account\\\"]},\\\"Album\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Account\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}}},\\\"actions\\\":{\\\"viewPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"createPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"listPhotos\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}}}}}\",\n    },\n    validationSettings: {\n        mode: aws_native.verifiedpermissions.PolicyStoreValidationMode.Strict,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_policy_store = aws_native.verifiedpermissions.PolicyStore(\"myPolicyStore\",\n    schema={\n        \"cedar_json\": \"{\\\"PhotoApp\\\":{\\\"commonTypes\\\":{\\\"PersonType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"age\\\":{\\\"type\\\":\\\"Long\\\"},\\\"name\\\":{\\\"type\\\":\\\"String\\\"}}},\\\"ContextType\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"ip\\\":{\\\"type\\\":\\\"Extension\\\",\\\"name\\\":\\\"ipaddr\\\",\\\"required\\\":false},\\\"authenticated\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}}},\\\"entityTypes\\\":{\\\"User\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"userId\\\":{\\\"type\\\":\\\"String\\\"},\\\"personInformation\\\":{\\\"type\\\":\\\"PersonType\\\"}}},\\\"memberOfTypes\\\":[\\\"UserGroup\\\"]},\\\"UserGroup\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Photo\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{\\\"account\\\":{\\\"type\\\":\\\"Entity\\\",\\\"name\\\":\\\"Account\\\",\\\"required\\\":true},\\\"private\\\":{\\\"type\\\":\\\"Boolean\\\",\\\"required\\\":true}}},\\\"memberOfTypes\\\":[\\\"Album\\\",\\\"Account\\\"]},\\\"Album\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}},\\\"Account\\\":{\\\"shape\\\":{\\\"type\\\":\\\"Record\\\",\\\"attributes\\\":{}}}},\\\"actions\\\":{\\\"viewPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"createPhoto\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}},\\\"listPhotos\\\":{\\\"appliesTo\\\":{\\\"principalTypes\\\":[\\\"User\\\",\\\"UserGroup\\\"],\\\"resourceTypes\\\":[\\\"Photo\\\"],\\\"context\\\":{\\\"type\\\":\\\"ContextType\\\"}}}}}}\",\n    },\n    validation_settings={\n        \"mode\": aws_native.verifiedpermissions.PolicyStoreValidationMode.STRICT,\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"arn":{"type":"string","description":"The [Amazon Resource Name (ARN)](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) of the new or updated policy store."},"deletionProtection":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreDeletionProtection","description":"Specifies whether the policy store can be deleted. If enabled, the policy store can't be deleted.\n\nThe default state is `DISABLED` ."},"description":{"type":"string","description":"Descriptive text that you can provide to help with identification of the current policy store."},"encryptionSettings":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreEncryptionSettings"},"encryptionState":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:EncryptionState0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:EncryptionState1Properties"}]},"policyStoreId":{"type":"string","description":"The unique ID of the new or updated policy store."},"schema":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreSchemaDefinition","description":"Creates or updates the policy schema in a policy store. Cedar can use the schema to validate any Cedar policies and policy templates submitted to the policy store. Any changes to the schema validate only policies and templates submitted after the schema change. Existing policies and templates are not re-evaluated against the changed schema. If you later update a policy, then it is evaluated against the new schema at that time."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the policy store"},"validationSettings":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreValidationSettings","description":"Specifies the validation setting for this policy store.\n\nCurrently, the only valid and required value is `Mode` .\n\n\u003e We recommend that you turn on `STRICT` mode only after you define a schema. If a schema doesn't exist, then `STRICT` mode causes any policy to fail validation, and Verified Permissions rejects the policy. You can turn off validation by using the [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) . Then, when you have a schema defined, use [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) again to turn validation back on."}},"type":"object","required":["arn","encryptionState","policyStoreId","validationSettings"],"inputProperties":{"deletionProtection":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreDeletionProtection","description":"Specifies whether the policy store can be deleted. If enabled, the policy store can't be deleted.\n\nThe default state is `DISABLED` ."},"description":{"type":"string","description":"Descriptive text that you can provide to help with identification of the current policy store."},"encryptionSettings":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreEncryptionSettings"},"schema":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreSchemaDefinition","description":"Creates or updates the policy schema in a policy store. Cedar can use the schema to validate any Cedar policies and policy templates submitted to the policy store. Any changes to the schema validate only policies and templates submitted after the schema change. Existing policies and templates are not re-evaluated against the changed schema. If you later update a policy, then it is evaluated against the new schema at that time."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the policy store"},"validationSettings":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreValidationSettings","description":"Specifies the validation setting for this policy store.\n\nCurrently, the only valid and required value is `Mode` .\n\n\u003e We recommend that you turn on `STRICT` mode only after you define a schema. If a schema doesn't exist, then `STRICT` mode causes any policy to fail validation, and Verified Permissions rejects the policy. You can turn off validation by using the [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) . Then, when you have a schema defined, use [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) again to turn validation back on."}},"requiredInputs":["validationSettings"]},"aws-native:verifiedpermissions:PolicyTemplate":{"description":"Definition of AWS::VerifiedPermissions::PolicyTemplate Resource Type\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var config = new Config();\n    var policyStoreId = config.Require(\"policyStoreId\");\n    var description = config.Require(\"description\");\n    var statement = config.Require(\"statement\");\n    var policyTemplate = new AwsNative.VerifiedPermissions.PolicyTemplate(\"policyTemplate\", new()\n    {\n        PolicyStoreId = policyStoreId,\n        Description = description,\n        Statement = statement,\n    });\n\n    return new Dictionary\u003cstring, object?\u003e\n    {\n        [\"policyTemplateId\"] = policyTemplate.PolicyTemplateId,\n    };\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/verifiedpermissions\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\tcfg := config.New(ctx, \"\")\n\t\tpolicyStoreId := cfg.Require(\"policyStoreId\")\n\t\tdescription := cfg.Require(\"description\")\n\t\tstatement := cfg.Require(\"statement\")\n\t\tpolicyTemplate, err := verifiedpermissions.NewPolicyTemplate(ctx, \"policyTemplate\", \u0026verifiedpermissions.PolicyTemplateArgs{\n\t\t\tPolicyStoreId: pulumi.String(pulumi.String(policyStoreId)),\n\t\t\tDescription:   pulumi.String(pulumi.String(description)),\n\t\t\tStatement:     pulumi.String(pulumi.String(statement)),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\tctx.Export(\"policyTemplateId\", policyTemplate.PolicyTemplateId)\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst config = new pulumi.Config();\nconst policyStoreId = config.require(\"policyStoreId\");\nconst description = config.require(\"description\");\nconst statement = config.require(\"statement\");\nconst policyTemplate = new aws_native.verifiedpermissions.PolicyTemplate(\"policyTemplate\", {\n    policyStoreId: policyStoreId,\n    description: description,\n    statement: statement,\n});\nexport const policyTemplateId = policyTemplate.policyTemplateId;\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nconfig = pulumi.Config()\npolicy_store_id = config.require(\"policyStoreId\")\ndescription = config.require(\"description\")\nstatement = config.require(\"statement\")\npolicy_template = aws_native.verifiedpermissions.PolicyTemplate(\"policyTemplate\",\n    policy_store_id=policy_store_id,\n    description=description,\n    statement=statement)\npulumi.export(\"policyTemplateId\", policy_template.policy_template_id)\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"description":{"type":"string","description":"The description to attach to the new or updated policy template."},"policyStoreId":{"type":"string","description":"The unique identifier of the policy store that contains the template.","replaceOnChanges":true},"policyTemplateId":{"type":"string","description":"The unique identifier of the new or modified policy template."},"statement":{"type":"string","description":"Specifies the content that you want to use for the new policy template, written in the Cedar policy language."}},"type":"object","required":["policyStoreId","policyTemplateId","statement"],"inputProperties":{"description":{"type":"string","description":"The description to attach to the new or updated policy template."},"policyStoreId":{"type":"string","description":"The unique identifier of the policy store that contains the template."},"statement":{"type":"string","description":"Specifies the content that you want to use for the new policy template, written in the Cedar policy language."}},"requiredInputs":["policyStoreId","statement"]},"aws-native:voiceid:Domain":{"description":"The AWS::VoiceID::Domain resource specifies an Amazon VoiceID Domain.","properties":{"description":{"type":"string","description":"The description of the domain."},"domainId":{"type":"string","description":"The identifier of the domain."},"name":{"type":"string","description":"The name for the domain."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:voiceid:DomainServerSideEncryptionConfiguration","description":"The server-side encryption configuration containing the KMS key identifier you want Voice ID to use to encrypt your data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"type":"object","required":["domainId","name","serverSideEncryptionConfiguration"],"inputProperties":{"description":{"type":"string","description":"The description of the domain."},"name":{"type":"string","description":"The name for the domain."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:voiceid:DomainServerSideEncryptionConfiguration","description":"The server-side encryption configuration containing the KMS key identifier you want Voice ID to use to encrypt your data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource."}},"requiredInputs":["serverSideEncryptionConfiguration"]},"aws-native:vpclattice:AccessLogSubscription":{"description":"Enables access logs to be sent to Amazon CloudWatch, Amazon S3, and Amazon Kinesis Data Firehose. The service network owner can use the access logs to audit the services in the network. The service network owner will only see access logs from clients and services that are associated with their service network. Access log entries represent traffic originated from VPCs associated with that network.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the access log subscription."},"awsId":{"type":"string","description":"The ID of the access log subscription."},"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination. The supported destination types are CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the access log subscription."},"resourceId":{"type":"string","description":"The ID of the service network or service."},"resourceIdentifier":{"type":"string","description":"The ID or ARN of the service network or service.","replaceOnChanges":true},"serviceNetworkLogType":{"$ref":"#/types/aws-native:vpclattice:AccessLogSubscriptionServiceNetworkLogType","description":"Log type of the service network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the access log subscription."}},"type":"object","required":["arn","awsId","destinationArn","resourceArn","resourceId"],"inputProperties":{"destinationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the destination. The supported destination types are CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets."},"resourceIdentifier":{"type":"string","description":"The ID or ARN of the service network or service."},"serviceNetworkLogType":{"$ref":"#/types/aws-native:vpclattice:AccessLogSubscriptionServiceNetworkLogType","description":"Log type of the service network."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the access log subscription."}},"requiredInputs":["destinationArn"]},"aws-native:vpclattice:AuthPolicy":{"description":"Creates or updates the auth policy.","properties":{"policy":{"$ref":"pulumi.json#/Any","description":"The auth policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::VpcLattice::AuthPolicy` for more information about the expected schema for this property."},"resourceIdentifier":{"type":"string","description":"The ID or ARN of the service network or service for which the policy is created.","replaceOnChanges":true},"state":{"$ref":"#/types/aws-native:vpclattice:AuthPolicyState","description":"The state of the auth policy. The auth policy is only active when the auth type is set to `AWS _IAM` . If you provide a policy, then authentication and authorization decisions are made based on this policy and the client's IAM policy. If the auth type is `NONE` , then any auth policy you provide will remain inactive."}},"type":"object","required":["policy","resourceIdentifier","state"],"inputProperties":{"policy":{"$ref":"pulumi.json#/Any","description":"The auth policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::VpcLattice::AuthPolicy` for more information about the expected schema for this property."},"resourceIdentifier":{"type":"string","description":"The ID or ARN of the service network or service for which the policy is created."}},"requiredInputs":["policy","resourceIdentifier"]},"aws-native:vpclattice:DomainVerification":{"description":"Creates a Lattice Domain Verification","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the domain verification."},"awsId":{"type":"string","description":"The ID of the domain verification."},"domainName":{"type":"string","description":"The domain name being verified.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:vpclattice:DomainVerificationStatus","description":"The current status of the domain verification process."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the domain verification."},"txtMethodConfig":{"$ref":"#/types/aws-native:vpclattice:TxtMethodConfigProperties"}},"type":"object","required":["arn","awsId","domainName","status","txtMethodConfig"],"inputProperties":{"domainName":{"type":"string","description":"The domain name being verified."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags associated with the domain verification."}},"requiredInputs":["domainName"]},"aws-native:vpclattice:Listener":{"description":"Creates a listener for a service. Before you start using your Amazon VPC Lattice service, you must add one or more listeners. A listener is a process that checks for connection requests to your services.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."},"awsId":{"type":"string","description":"The ID of the listener."},"defaultAction":{"$ref":"#/types/aws-native:vpclattice:ListenerDefaultAction","description":"The action for the default rule. Each listener has a default rule. The default rule is used if no other rules match."},"name":{"type":"string","description":"The name of the listener. A listener name must be unique within a service. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.","replaceOnChanges":true},"port":{"type":"integer","description":"The listener port. You can specify a value from 1 to 65535. For HTTP, the default is 80. For HTTPS, the default is 443.","replaceOnChanges":true},"protocol":{"$ref":"#/types/aws-native:vpclattice:ListenerProtocol","description":"The listener protocol.","replaceOnChanges":true},"serviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."},"serviceId":{"type":"string","description":"The ID of the service."},"serviceIdentifier":{"type":"string","description":"The ID or ARN of the service.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the listener."}},"type":"object","required":["arn","awsId","defaultAction","protocol","serviceArn","serviceId"],"inputProperties":{"defaultAction":{"$ref":"#/types/aws-native:vpclattice:ListenerDefaultAction","description":"The action for the default rule. Each listener has a default rule. The default rule is used if no other rules match."},"name":{"type":"string","description":"The name of the listener. A listener name must be unique within a service. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name."},"port":{"type":"integer","description":"The listener port. You can specify a value from 1 to 65535. For HTTP, the default is 80. For HTTPS, the default is 443."},"protocol":{"$ref":"#/types/aws-native:vpclattice:ListenerProtocol","description":"The listener protocol."},"serviceIdentifier":{"type":"string","description":"The ID or ARN of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the listener."}},"requiredInputs":["defaultAction","protocol"]},"aws-native:vpclattice:ResourceConfiguration":{"description":"VpcLattice ResourceConfiguration CFN resource","properties":{"allowAssociationToSharableServiceNetwork":{"type":"boolean","description":"Specifies whether the resource configuration can be associated with a sharable service network."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource configuration."},"awsId":{"type":"string","description":"The ID of the resource configuration."},"customDomainName":{"type":"string","description":"The custom domain name.","replaceOnChanges":true},"domainVerificationId":{"type":"string","description":"The domain verification ID.","replaceOnChanges":true},"groupDomain":{"type":"string","description":"(GROUP) The group domain for a group resource configuration. Any domains that you create for the child resource are subdomains of the group domain. Child resources inherit the verification status of the domain.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the resource configuration."},"portRanges":{"type":"array","items":{"type":"string"},"description":"(SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to access a resource configuration (for example: 1-65535). You can separate port ranges using commas (for example: 1,2,22-30)."},"protocolType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationProtocolType","description":"(SINGLE, GROUP) The protocol accepted by the resource configuration.","replaceOnChanges":true},"resourceConfigurationAuthType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationAuthType","description":"The auth type for the resource configuration.","replaceOnChanges":true},"resourceConfigurationDefinition":{"oneOf":[{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition0Properties"},{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition1Properties"},{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition2Properties"}],"description":"Identifies the resource configuration in one of the following ways:\n\n- *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN.\n- *Domain name* - Any domain name that is publicly resolvable.\n- *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported."},"resourceConfigurationGroupId":{"type":"string","description":"The ID of the group resource configuration."},"resourceConfigurationType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationType","description":"The type of resource configuration. A resource configuration can be one of the following types:\n\n- *SINGLE* - A single resource.\n- *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration.\n- *CHILD* - A single resource that is part of a group resource configuration.\n- *ARN* - An AWS resource.","replaceOnChanges":true},"resourceGatewayId":{"type":"string","description":"The ID of the resource gateway.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the resource configuration."}},"type":"object","required":["arn","awsId","name","resourceConfigurationType"],"inputProperties":{"allowAssociationToSharableServiceNetwork":{"type":"boolean","description":"Specifies whether the resource configuration can be associated with a sharable service network."},"customDomainName":{"type":"string","description":"The custom domain name."},"domainVerificationId":{"type":"string","description":"The domain verification ID."},"groupDomain":{"type":"string","description":"(GROUP) The group domain for a group resource configuration. Any domains that you create for the child resource are subdomains of the group domain. Child resources inherit the verification status of the domain."},"name":{"type":"string","description":"The name of the resource configuration."},"portRanges":{"type":"array","items":{"type":"string"},"description":"(SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to access a resource configuration (for example: 1-65535). You can separate port ranges using commas (for example: 1,2,22-30)."},"protocolType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationProtocolType","description":"(SINGLE, GROUP) The protocol accepted by the resource configuration."},"resourceConfigurationAuthType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationAuthType","description":"The auth type for the resource configuration."},"resourceConfigurationDefinition":{"oneOf":[{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition0Properties"},{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition1Properties"},{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition2Properties"}],"description":"Identifies the resource configuration in one of the following ways:\n\n- *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN.\n- *Domain name* - Any domain name that is publicly resolvable.\n- *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported."},"resourceConfigurationGroupId":{"type":"string","description":"The ID of the group resource configuration."},"resourceConfigurationType":{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationType","description":"The type of resource configuration. A resource configuration can be one of the following types:\n\n- *SINGLE* - A single resource.\n- *GROUP* - A group of resources. You must create a group resource configuration before you create a child resource configuration.\n- *CHILD* - A single resource that is part of a group resource configuration.\n- *ARN* - An AWS resource."},"resourceGatewayId":{"type":"string","description":"The ID of the resource gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the resource configuration."}},"requiredInputs":["resourceConfigurationType"]},"aws-native:vpclattice:ResourceGateway":{"description":"Creates a resource gateway for a service.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource gateway."},"awsId":{"type":"string","description":"The ID of the resource gateway."},"ipAddressType":{"$ref":"#/types/aws-native:vpclattice:ResourceGatewayIpAddressType","description":"The type of IP address used by the resource gateway.","replaceOnChanges":true},"ipv4AddressesPerEni":{"type":"integer","description":"The number of IPv4 addresses to allocate per ENI for the resource gateway"},"name":{"type":"string","description":"The name of the resource gateway.","replaceOnChanges":true},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more security groups to associate with the endpoint network interface."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more subnets in which to create an endpoint network interface.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the resource gateway."},"vpcIdentifier":{"type":"string","description":"The ID of the VPC for the resource gateway.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","name","subnetIds","vpcIdentifier"],"inputProperties":{"ipAddressType":{"$ref":"#/types/aws-native:vpclattice:ResourceGatewayIpAddressType","description":"The type of IP address used by the resource gateway."},"ipv4AddressesPerEni":{"type":"integer","description":"The number of IPv4 addresses to allocate per ENI for the resource gateway"},"name":{"type":"string","description":"The name of the resource gateway."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more security groups to associate with the endpoint network interface."},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The ID of one or more subnets in which to create an endpoint network interface."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the resource gateway."},"vpcIdentifier":{"type":"string","description":"The ID of the VPC for the resource gateway."}},"requiredInputs":["subnetIds","vpcIdentifier"]},"aws-native:vpclattice:ResourcePolicy":{"description":"Retrieves information about the resource policy. The resource policy is an IAM policy created by AWS RAM on behalf of the resource owner when they share a resource.","properties":{"policy":{"$ref":"pulumi.json#/Any","description":"The Amazon Resource Name (ARN) of the service network or service.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::VpcLattice::ResourcePolicy` for more information about the expected schema for this property."},"resourceArn":{"type":"string","description":"An IAM policy.","replaceOnChanges":true}},"type":"object","required":["policy","resourceArn"],"inputProperties":{"policy":{"$ref":"pulumi.json#/Any","description":"The Amazon Resource Name (ARN) of the service network or service.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::VpcLattice::ResourcePolicy` for more information about the expected schema for this property."},"resourceArn":{"type":"string","description":"An IAM policy."}},"requiredInputs":["policy","resourceArn"]},"aws-native:vpclattice:Rule":{"description":"Creates a listener rule. Each listener has a default rule for checking connection requests, but you can define additional rules. Each rule consists of a priority, one or more actions, and one or more conditions.","properties":{"action":{"$ref":"#/types/aws-native:vpclattice:RuleAction","description":"Describes the action for a rule."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule."},"awsId":{"type":"string","description":"The ID of the listener."},"listenerIdentifier":{"type":"string","description":"The ID or ARN of the listener.","replaceOnChanges":true},"match":{"$ref":"#/types/aws-native:vpclattice:RuleMatch","description":"The rule match."},"name":{"type":"string","description":"The name of the rule. The name must be unique within the listener. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.","replaceOnChanges":true},"priority":{"type":"integer","description":"The priority assigned to the rule. Each rule for a specific listener must have a unique priority. The lower the priority number the higher the priority."},"serviceIdentifier":{"type":"string","description":"The ID or ARN of the service.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the rule."}},"type":"object","required":["action","arn","awsId","match","priority"],"inputProperties":{"action":{"$ref":"#/types/aws-native:vpclattice:RuleAction","description":"Describes the action for a rule."},"listenerIdentifier":{"type":"string","description":"The ID or ARN of the listener."},"match":{"$ref":"#/types/aws-native:vpclattice:RuleMatch","description":"The rule match."},"name":{"type":"string","description":"The name of the rule. The name must be unique within the listener. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name."},"priority":{"type":"integer","description":"The priority assigned to the rule. Each rule for a specific listener must have a unique priority. The lower the priority number the higher the priority."},"serviceIdentifier":{"type":"string","description":"The ID or ARN of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the rule."}},"requiredInputs":["action","match","priority"]},"aws-native:vpclattice:Service":{"description":"A service is any software application that can run on instances containers, or serverless functions within an account or virtual private cloud (VPC).","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."},"authType":{"$ref":"#/types/aws-native:vpclattice:ServiceAuthType","description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required."},"awsId":{"type":"string","description":"The ID of the service."},"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate."},"createdAt":{"type":"string","description":"The date and time that the service was created, specified in ISO-8601 format."},"customDomainName":{"type":"string","description":"The custom domain name of the service.","replaceOnChanges":true},"dnsEntry":{"$ref":"#/types/aws-native:vpclattice:ServiceDnsEntry","description":"Describes the DNS information of the service. This field is read-only."},"lastUpdatedAt":{"type":"string","description":"The date and time that the service was last updated, specified in ISO-8601 format."},"name":{"type":"string","description":"The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:vpclattice:ServiceStatus","description":"The status of the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the service."}},"type":"object","required":["arn","awsId","createdAt","lastUpdatedAt","status"],"inputProperties":{"authType":{"$ref":"#/types/aws-native:vpclattice:ServiceAuthType","description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required."},"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate."},"customDomainName":{"type":"string","description":"The custom domain name of the service."},"dnsEntry":{"$ref":"#/types/aws-native:vpclattice:ServiceDnsEntry","description":"Describes the DNS information of the service. This field is read-only."},"name":{"type":"string","description":"The name of the service. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the service."}}},"aws-native:vpclattice:ServiceNetwork":{"description":"A service network is a logical boundary for a collection of services. You can associate services and VPCs with a service network.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network."},"authType":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkAuthType","description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required."},"awsId":{"type":"string","description":"The ID of the service network."},"createdAt":{"type":"string","description":"The date and time that the service network was created, specified in ISO-8601 format."},"lastUpdatedAt":{"type":"string","description":"The date and time of the last update, specified in ISO-8601 format."},"name":{"type":"string","description":"The name of the service network. The name must be unique to the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.","replaceOnChanges":true},"sharingConfig":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkSharingConfig","description":"Specify if the service network should be enabled for sharing."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the service network."}},"type":"object","required":["arn","awsId","createdAt","lastUpdatedAt"],"inputProperties":{"authType":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkAuthType","description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required."},"name":{"type":"string","description":"The name of the service network. The name must be unique to the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name."},"sharingConfig":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkSharingConfig","description":"Specify if the service network should be enabled for sharing."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the service network."}}},"aws-native:vpclattice:ServiceNetworkResourceAssociation":{"description":"VpcLattice ServiceNetworkResourceAssociation CFN resource","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the association."},"awsId":{"type":"string","description":"The ID of the association between the service network and resource configuration."},"privateDnsEnabled":{"type":"boolean","description":"Indicates if private DNS is enabled for the service network resource association.","replaceOnChanges":true},"resourceConfigurationId":{"type":"string","description":"The ID of the resource configuration associated with the service network.","replaceOnChanges":true},"serviceNetworkId":{"type":"string","description":"The ID of the service network associated with the resource configuration.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair to associate with a resource."}},"type":"object","required":["arn","awsId"],"inputProperties":{"privateDnsEnabled":{"type":"boolean","description":"Indicates if private DNS is enabled for the service network resource association."},"resourceConfigurationId":{"type":"string","description":"The ID of the resource configuration associated with the service network."},"serviceNetworkId":{"type":"string","description":"The ID of the service network associated with the resource configuration."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"A key-value pair to associate with a resource."}}},"aws-native:vpclattice:ServiceNetworkServiceAssociation":{"description":"Associates a service with a service network.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the association between the service network and the service."},"awsId":{"type":"string","description":"The ID of the of the association between the service network and the service."},"createdAt":{"type":"string","description":"The date and time that the association was created, specified in ISO-8601 format."},"dnsEntry":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkServiceAssociationDnsEntry","description":"The DNS information of the service."},"serviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."},"serviceId":{"type":"string","description":"The ID of the service."},"serviceIdentifier":{"type":"string","description":"The ID or ARN of the service.","replaceOnChanges":true},"serviceName":{"type":"string","description":"The name of the service."},"serviceNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network"},"serviceNetworkId":{"type":"string","description":"The ID of the service network."},"serviceNetworkIdentifier":{"type":"string","description":"The ID or ARN of the service network. You must use an ARN if the resources are in different accounts.","replaceOnChanges":true},"serviceNetworkName":{"type":"string","description":"The name of the service network."},"status":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkServiceAssociationStatus","description":"The status of the association between the service network and the service."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the association."}},"type":"object","required":["arn","awsId","createdAt","serviceArn","serviceId","serviceName","serviceNetworkArn","serviceNetworkId","serviceNetworkName","status"],"inputProperties":{"dnsEntry":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkServiceAssociationDnsEntry","description":"The DNS information of the service."},"serviceIdentifier":{"type":"string","description":"The ID or ARN of the service."},"serviceNetworkIdentifier":{"type":"string","description":"The ID or ARN of the service network. You must use an ARN if the resources are in different accounts."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the association."}}},"aws-native:vpclattice:ServiceNetworkVpcAssociation":{"description":"Associates a VPC with a service network.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the association between the service network and the VPC."},"awsId":{"type":"string","description":"The ID of the specified association between the service network and the VPC."},"createdAt":{"type":"string","description":"The date and time that the association was created, specified in ISO-8601 format."},"dnsOptions":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkVpcAssociationDnsOptions","description":"The DNS options for the service network VPC association.","replaceOnChanges":true},"privateDnsEnabled":{"type":"boolean","description":"Indicates if private DNS is enabled for the service network VPC association.","replaceOnChanges":true},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see [Control traffic to resources using security groups](https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon VPC User Guide* ."},"serviceNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network."},"serviceNetworkId":{"type":"string","description":"The ID of the service network."},"serviceNetworkIdentifier":{"type":"string","description":"The ID or ARN of the service network. You must use an ARN if the resources are in different accounts.","replaceOnChanges":true},"serviceNetworkName":{"type":"string","description":"The name of the service network."},"status":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkVpcAssociationStatus","description":"The status of the association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the association."},"vpcId":{"type":"string","description":"The ID of the VPC."},"vpcIdentifier":{"type":"string","description":"The ID of the VPC.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","createdAt","serviceNetworkArn","serviceNetworkId","serviceNetworkName","status","vpcId"],"inputProperties":{"dnsOptions":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkVpcAssociationDnsOptions","description":"The DNS options for the service network VPC association."},"privateDnsEnabled":{"type":"boolean","description":"Indicates if private DNS is enabled for the service network VPC association."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see [Control traffic to resources using security groups](https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon VPC User Guide* ."},"serviceNetworkIdentifier":{"type":"string","description":"The ID or ARN of the service network. You must use an ARN if the resources are in different accounts."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the association."},"vpcIdentifier":{"type":"string","description":"The ID of the VPC."}}},"aws-native:vpclattice:TargetGroup":{"description":"A target group is a collection of targets, or compute resources, that run your application or service. A target group can only be used by a single service.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group."},"awsId":{"type":"string","description":"The ID of the target group."},"config":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfig","description":"The target group configuration."},"createdAt":{"type":"string","description":"The date and time that the target group was created, specified in ISO-8601 format."},"lastUpdatedAt":{"type":"string","description":"The date and time that the target group was last updated, specified in ISO-8601 format."},"name":{"type":"string","description":"The name of the target group. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name.","replaceOnChanges":true},"status":{"$ref":"#/types/aws-native:vpclattice:TargetGroupStatus","description":"The operation's status. You can retry the operation if the status is `CREATE_FAILED` . However, if you retry it while the status is `CREATE_IN_PROGRESS` , there is no change in the status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the target group."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:vpclattice:TargetGroupTarget"},"description":"Describes a target."},"type":{"$ref":"#/types/aws-native:vpclattice:TargetGroupType","description":"The type of target group.","replaceOnChanges":true}},"type":"object","required":["arn","awsId","createdAt","lastUpdatedAt","status","type"],"inputProperties":{"config":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfig","description":"The target group configuration."},"name":{"type":"string","description":"The name of the target group. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another hyphen.\n\nIf you don't specify a name, CloudFormation generates one. However, if you specify a name, and later want to replace the resource, you must specify a new name."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the target group."},"targets":{"type":"array","items":{"$ref":"#/types/aws-native:vpclattice:TargetGroupTarget"},"description":"Describes a target."},"type":{"$ref":"#/types/aws-native:vpclattice:TargetGroupType","description":"The type of target group."}},"requiredInputs":["type"]},"aws-native:wafv2:IpSet":{"description":"Contains a list of IP addresses. This can be either IPV4 or IPV6. The list will be mutually","properties":{"addresses":{"type":"array","items":{"type":"string"},"description":"List of IPAddresses."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IP set."},"awsId":{"type":"string","description":"The ID of the IP set."},"description":{"type":"string","description":"A description of the IP set that helps with identification."},"ipAddressVersion":{"$ref":"#/types/aws-native:wafv2:IpSetIpAddressVersion","description":"The version of the IP addresses, either `IPV4` or `IPV6` ."},"name":{"type":"string","description":"The name of the IP set. You cannot change the name of an `IPSet` after you create it.","replaceOnChanges":true},"scope":{"$ref":"#/types/aws-native:wafv2:IpSetScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."}},"type":"object","required":["addresses","arn","awsId","ipAddressVersion","scope"],"inputProperties":{"addresses":{"type":"array","items":{"type":"string"},"description":"List of IPAddresses."},"description":{"type":"string","description":"A description of the IP set that helps with identification."},"ipAddressVersion":{"$ref":"#/types/aws-native:wafv2:IpSetIpAddressVersion","description":"The version of the IP addresses, either `IPV4` or `IPV6` ."},"name":{"type":"string","description":"The name of the IP set. You cannot change the name of an `IPSet` after you create it."},"scope":{"$ref":"#/types/aws-native:wafv2:IpSetScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."}},"requiredInputs":["addresses","ipAddressVersion","scope"]},"aws-native:wafv2:LoggingConfiguration":{"description":"A WAFv2 Logging Configuration Resource Provider","properties":{"logDestinationConfigs":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL."},"loggingFilter":{"$ref":"#/types/aws-native:wafv2:LoggingFilterProperties","description":"Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation."},"managedByFirewallManager":{"type":"boolean","description":"Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration."},"redactedFields":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFieldToMatch"},"description":"The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs.","replaceOnChanges":true}},"type":"object","required":["logDestinationConfigs","managedByFirewallManager","resourceArn"],"inputProperties":{"logDestinationConfigs":{"type":"array","items":{"type":"string"},"description":"The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL."},"loggingFilter":{"$ref":"#/types/aws-native:wafv2:LoggingFilterProperties","description":"Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation."},"redactedFields":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFieldToMatch"},"description":"The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx."},"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs."}},"requiredInputs":["logDestinationConfigs","resourceArn"]},"aws-native:wafv2:RegexPatternSet":{"description":"Contains a list of Regular expressions based on the provided inputs. RegexPatternSet can be used with other WAF entities with RegexPatternSetReferenceStatement to perform other actions .","properties":{"arn":{"type":"string","description":"ARN of the WAF entity."},"awsId":{"type":"string","description":"Id of the RegexPatternSet"},"description":{"type":"string","description":"Description of the entity."},"name":{"type":"string","description":"Name of the RegexPatternSet.","replaceOnChanges":true},"regularExpressionList":{"type":"array","items":{"type":"string"},"description":"The regular expression patterns in the set."},"scope":{"$ref":"#/types/aws-native:wafv2:RegexPatternSetScope","description":"Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."}},"type":"object","required":["arn","awsId","regularExpressionList","scope"],"inputProperties":{"description":{"type":"string","description":"Description of the entity."},"name":{"type":"string","description":"Name of the RegexPatternSet."},"regularExpressionList":{"type":"array","items":{"type":"string"},"description":"The regular expression patterns in the set."},"scope":{"$ref":"#/types/aws-native:wafv2:RegexPatternSetScope","description":"Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."}},"requiredInputs":["regularExpressionList","scope"]},"aws-native:wafv2:RuleGroup":{"description":"Contains the Rules that identify the requests that you want to allow, block, or count. In a RuleGroup, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a RuleGroup, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the RuleGroup with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a RuleGroup, a request needs to match only one of the specifications to be allowed, blocked, or counted.","properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule group."},"availableLabels":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelSummary"},"description":"Collection of Available Labels."},"awsId":{"type":"string","description":"The ID of the rule group."},"capacity":{"type":"integer","description":"The web ACL capacity units (WCUs) required for this rule group.\n\nWhen you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.\n\nAWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500."},"consumedLabels":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelSummary"},"description":"Collection of Consumed Labels."},"customResponseBodies":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomResponseBody"},"description":"A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* ."},"description":{"type":"string","description":"A description of the rule group that helps with identification."},"labelNamespace":{"type":"string","description":"The label namespace prefix for this rule group. All labels added by rules in this rule group have this prefix.\n\nThe syntax for the label namespace prefix for a rule group is the following: `awswaf:\u003caccount ID\u003e:rule group:\u003crule group name\u003e:`\n\nWhen a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon."},"name":{"type":"string","description":"The name of the rule group. You cannot change the name of a rule group after you create it.","replaceOnChanges":true},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupRule"},"description":"Collection of Rules."},"scope":{"$ref":"#/types/aws-native:wafv2:RuleGroupScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection."}},"type":"object","required":["arn","awsId","capacity","labelNamespace","scope","visibilityConfig"],"inputProperties":{"availableLabels":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelSummary"},"description":"Collection of Available Labels."},"capacity":{"type":"integer","description":"The web ACL capacity units (WCUs) required for this rule group.\n\nWhen you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.\n\nAWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500."},"consumedLabels":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelSummary"},"description":"Collection of Consumed Labels."},"customResponseBodies":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomResponseBody"},"description":"A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* ."},"description":{"type":"string","description":"A description of the rule group that helps with identification."},"name":{"type":"string","description":"The name of the rule group. You cannot change the name of a rule group after you create it."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupRule"},"description":"Collection of Rules."},"scope":{"$ref":"#/types/aws-native:wafv2:RuleGroupScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection."}},"requiredInputs":["capacity","scope","visibilityConfig"]},"aws-native:wafv2:WebAcl":{"description":"Contains the Rules that identify the requests that you want to allow, block, or count. In a WebACL, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a WebACL, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the WebACL with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.","properties":{"applicationConfig":{"$ref":"#/types/aws-native:wafv2:WebAclApplicationConfig","description":"Collection of application attributes."},"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the web ACL."},"associationConfig":{"$ref":"#/types/aws-native:wafv2:WebAclAssociationConfig","description":"Specifies custom configurations for the associations between the web ACL and protected resources.\n\nUse this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).\n\n\u003e You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) . \n\nFor Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes)."},"awsId":{"type":"string","description":"The ID of the web ACL."},"capacity":{"type":"integer","description":"The web ACL capacity units (WCUs) currently being used by this web ACL.\n\nAWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500."},"captchaConfig":{"$ref":"#/types/aws-native:wafv2:WebAclCaptchaConfig","description":"Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` ."},"challengeConfig":{"$ref":"#/types/aws-native:wafv2:WebAclChallengeConfig","description":"Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` ."},"customResponseBodies":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:wafv2:WebAclCustomResponseBody"},"description":"A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* ."},"dataProtectionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclDataProtectionConfig","description":"Collection of dataProtects."},"defaultAction":{"$ref":"#/types/aws-native:wafv2:WebAclDefaultAction","description":"The action to perform if none of the `Rules` contained in the `WebACL` match."},"description":{"type":"string","description":"A description of the web ACL that helps with identification."},"labelNamespace":{"type":"string","description":"The label namespace prefix for this web ACL. All labels added by rules in this web ACL have this prefix.\n\nThe syntax for the label namespace prefix for a web ACL is the following: `awswaf:\u003caccount ID\u003e:webacl:\u003cweb ACL name\u003e:`\n\nWhen a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon."},"name":{"type":"string","description":"The name of the web ACL. You cannot change the name of a web ACL after you create it.","replaceOnChanges":true},"onSourceDDoSProtectionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclOnSourceDDoSProtectionConfig","description":"Configures the level of DDoS protection that applies to web ACLs associated with Application Load Balancers."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclRule"},"description":"Collection of Rules."},"scope":{"$ref":"#/types/aws-native:wafv2:WebAclScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` . \n\nFor information about how to define the association of the web ACL with your resource, see `WebACLAssociation` .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."},"tokenDomains":{"type":"array","items":{"type":"string"},"description":"Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains."},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:WebAclVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection."}},"type":"object","required":["arn","awsId","capacity","defaultAction","labelNamespace","scope","visibilityConfig"],"inputProperties":{"applicationConfig":{"$ref":"#/types/aws-native:wafv2:WebAclApplicationConfig","description":"Collection of application attributes."},"associationConfig":{"$ref":"#/types/aws-native:wafv2:WebAclAssociationConfig","description":"Specifies custom configurations for the associations between the web ACL and protected resources.\n\nUse this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).\n\n\u003e You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) . \n\nFor Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes)."},"captchaConfig":{"$ref":"#/types/aws-native:wafv2:WebAclCaptchaConfig","description":"Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` ."},"challengeConfig":{"$ref":"#/types/aws-native:wafv2:WebAclChallengeConfig","description":"Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` ."},"customResponseBodies":{"type":"object","additionalProperties":{"$ref":"#/types/aws-native:wafv2:WebAclCustomResponseBody"},"description":"A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* ."},"dataProtectionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclDataProtectionConfig","description":"Collection of dataProtects."},"defaultAction":{"$ref":"#/types/aws-native:wafv2:WebAclDefaultAction","description":"The action to perform if none of the `Rules` contained in the `WebACL` match."},"description":{"type":"string","description":"A description of the web ACL that helps with identification."},"name":{"type":"string","description":"The name of the web ACL. You cannot change the name of a web ACL after you create it."},"onSourceDDoSProtectionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclOnSourceDDoSProtectionConfig","description":"Configures the level of DDoS protection that applies to web ACLs associated with Application Load Balancers."},"rules":{"type":"array","items":{"$ref":"#/types/aws-native:wafv2:WebAclRule"},"description":"Collection of Rules."},"scope":{"$ref":"#/types/aws-native:wafv2:WebAclScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` . \n\nFor information about how to define the association of the web ACL with your resource, see `WebACLAssociation` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation."},"tokenDomains":{"type":"array","items":{"type":"string"},"description":"Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains."},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:WebAclVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection."}},"requiredInputs":["defaultAction","scope","visibilityConfig"]},"aws-native:wafv2:WebAclAssociation":{"description":"Associates WebACL to Application Load Balancer, CloudFront or API Gateway.","properties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource to associate with the web ACL.\n\nThe ARN must be in one of the following formats:\n\n- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`\n- For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`\n- For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`\n- For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`\n- For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`\n- For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`\n- For an AWS Amplify instance: `arn: *partition* :amplify: *region* : *account-id* :apps/ *app-id*`","replaceOnChanges":true},"webAclArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.","replaceOnChanges":true}},"type":"object","required":["resourceArn","webAclArn"],"inputProperties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource to associate with the web ACL.\n\nThe ARN must be in one of the following formats:\n\n- For an Application Load Balancer: `arn: *partition* :elasticloadbalancing: *region* : *account-id* :loadbalancer/app/ *load-balancer-name* / *load-balancer-id*`\n- For an Amazon API Gateway REST API: `arn: *partition* :apigateway: *region* ::/restapis/ *api-id* /stages/ *stage-name*`\n- For an AWS AppSync GraphQL API: `arn: *partition* :appsync: *region* : *account-id* :apis/ *GraphQLApiId*`\n- For an Amazon Cognito user pool: `arn: *partition* :cognito-idp: *region* : *account-id* :userpool/ *user-pool-id*`\n- For an AWS App Runner service: `arn: *partition* :apprunner: *region* : *account-id* :service/ *apprunner-service-name* / *apprunner-service-id*`\n- For an AWS Verified Access instance: `arn: *partition* :ec2: *region* : *account-id* :verified-access-instance/ *instance-id*`\n- For an AWS Amplify instance: `arn: *partition* :amplify: *region* : *account-id* :apps/ *app-id*`"},"webAclArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource."}},"requiredInputs":["resourceArn","webAclArn"]},"aws-native:wisdom:AiAgent":{"description":"Definition of AWS::Wisdom::AIAgent Resource Type","properties":{"aiAgentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AI agent."},"aiAgentId":{"type":"string","description":"The identifier of the AI Agent."},"assistantArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect assistant."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN.","replaceOnChanges":true},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration0Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration1Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration2Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration3Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration4Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration5Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration6Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration7Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration8Properties"}],"description":"Configuration for the AI Agent."},"description":{"type":"string","description":"The description of the AI Agent."},"modifiedTimeSeconds":{"type":"number"},"name":{"type":"string","description":"The name of the AI Agent.","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentType","description":"The type of the AI Agent.","replaceOnChanges":true}},"type":"object","required":["aiAgentArn","aiAgentId","assistantArn","assistantId","configuration","modifiedTimeSeconds","type"],"inputProperties":{"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration0Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration1Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration2Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration3Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration4Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration5Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration6Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration7Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration8Properties"}],"description":"Configuration for the AI Agent."},"description":{"type":"string","description":"The description of the AI Agent."},"name":{"type":"string","description":"The name of the AI Agent."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource."},"type":{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentType","description":"The type of the AI Agent."}},"requiredInputs":["assistantId","configuration","type"]},"aws-native:wisdom:AiAgentVersion":{"description":"Definition of AWS::Wisdom::AIAgentVersion Resource Type","properties":{"aiAgentArn":{"type":"string"},"aiAgentId":{"type":"string","description":"The identifier of the AI Agent.","replaceOnChanges":true},"aiAgentVersionId":{"type":"string"},"assistantArn":{"type":"string"},"assistantId":{"type":"string","replaceOnChanges":true},"modifiedTimeSeconds":{"type":"number","description":"The time the AI Agent version was last modified in seconds.","replaceOnChanges":true},"versionNumber":{"type":"number","description":"The version number for this AI Agent version."}},"type":"object","required":["aiAgentArn","aiAgentId","aiAgentVersionId","assistantArn","assistantId","versionNumber"],"inputProperties":{"aiAgentId":{"type":"string","description":"The identifier of the AI Agent."},"assistantId":{"type":"string"},"modifiedTimeSeconds":{"type":"number","description":"The time the AI Agent version was last modified in seconds."}},"requiredInputs":["aiAgentId","assistantId"]},"aws-native:wisdom:AiGuardrail":{"description":"Definition of AWS::Wisdom::AIGuardrail Resource Type","properties":{"aiGuardrailArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AI Guardrail."},"aiGuardrailId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI Guardrail."},"assistantArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect assistant."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN.","replaceOnChanges":true},"blockedInputMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"blockedOutputsMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"contentPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailContentPolicyConfig","description":"Contains details about how to handle harmful content."},"contextualGroundingPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailContextualGroundingPolicyConfig","description":"The policy configuration details for the AI Guardrail's contextual grounding policy."},"description":{"type":"string","description":"Description of the guardrail or its version"},"name":{"type":"string","description":"The name of the AI Guardrail.","replaceOnChanges":true},"sensitiveInformationPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailSensitiveInformationPolicyConfig","description":"Contains details about PII entities and regular expressions to configure for the AI Guardrail."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource.","replaceOnChanges":true},"topicPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailTopicPolicyConfig","description":"Contains details about topics that the AI Guardrail should identify and deny."},"wordPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailWordPolicyConfig","description":"Contains details about the word policy to configured for the AI Guardrail."}},"type":"object","required":["aiGuardrailArn","aiGuardrailId","assistantArn","assistantId","blockedInputMessaging","blockedOutputsMessaging"],"inputProperties":{"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."},"blockedInputMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"blockedOutputsMessaging":{"type":"string","description":"Messaging for when violations are detected in text"},"contentPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailContentPolicyConfig","description":"Contains details about how to handle harmful content."},"contextualGroundingPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailContextualGroundingPolicyConfig","description":"The policy configuration details for the AI Guardrail's contextual grounding policy."},"description":{"type":"string","description":"Description of the guardrail or its version"},"name":{"type":"string","description":"The name of the AI Guardrail."},"sensitiveInformationPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailSensitiveInformationPolicyConfig","description":"Contains details about PII entities and regular expressions to configure for the AI Guardrail."},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource."},"topicPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailTopicPolicyConfig","description":"Contains details about topics that the AI Guardrail should identify and deny."},"wordPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailWordPolicyConfig","description":"Contains details about the word policy to configured for the AI Guardrail."}},"requiredInputs":["assistantId","blockedInputMessaging","blockedOutputsMessaging"]},"aws-native:wisdom:AiGuardrailVersion":{"description":"Definition of AWS::Wisdom::AIGuardrailVersion Resource Type","properties":{"aiGuardrailArn":{"type":"string","description":"The ARN of the AI guardrail version."},"aiGuardrailId":{"type":"string","description":"The ID of the AI guardrail version.","replaceOnChanges":true},"aiGuardrailVersionId":{"type":"string","description":"The ID of the AI guardrail version."},"assistantArn":{"type":"string","description":"The ARN of the AI guardrail version assistant."},"assistantId":{"type":"string","description":"The ID of the AI guardrail version assistant.","replaceOnChanges":true},"modifiedTimeSeconds":{"type":"number","description":"The modified time of the AI guardrail version in seconds.","replaceOnChanges":true},"versionNumber":{"type":"number","description":"The version number for this AI Guardrail version."}},"type":"object","required":["aiGuardrailArn","aiGuardrailId","aiGuardrailVersionId","assistantArn","assistantId","versionNumber"],"inputProperties":{"aiGuardrailId":{"type":"string","description":"The ID of the AI guardrail version."},"assistantId":{"type":"string","description":"The ID of the AI guardrail version assistant."},"modifiedTimeSeconds":{"type":"number","description":"The modified time of the AI guardrail version in seconds."}},"requiredInputs":["aiGuardrailId","assistantId"]},"aws-native:wisdom:AiPrompt":{"description":"Definition of AWS::Wisdom::AIPrompt Resource Type","properties":{"aiPromptArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AI Prompt."},"aiPromptId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI prompt."},"apiFormat":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptApiFormat","description":"The API format used for this AI Prompt.","replaceOnChanges":true},"assistantArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect assistant."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN.","replaceOnChanges":true},"description":{"type":"string","description":"The description of the AI Prompt."},"modelId":{"type":"string","description":"The identifier of the model used for this AI Prompt. The following model Ids are supported:\n\n- `anthropic.claude-3-haiku--v1:0`\n- `apac.amazon.nova-lite-v1:0`\n- `apac.amazon.nova-micro-v1:0`\n- `apac.amazon.nova-pro-v1:0`\n- `apac.anthropic.claude-3-5-sonnet--v2:0`\n- `apac.anthropic.claude-3-haiku-20240307-v1:0`\n- `eu.amazon.nova-lite-v1:0`\n- `eu.amazon.nova-micro-v1:0`\n- `eu.amazon.nova-pro-v1:0`\n- `eu.anthropic.claude-3-7-sonnet-20250219-v1:0`\n- `eu.anthropic.claude-3-haiku-20240307-v1:0`\n- `us.amazon.nova-lite-v1:0`\n- `us.amazon.nova-micro-v1:0`\n- `us.amazon.nova-pro-v1:0`\n- `us.anthropic.claude-3-5-haiku-20241022-v1:0`\n- `us.anthropic.claude-3-7-sonnet-20250219-v1:0`\n- `us.anthropic.claude-3-haiku-20240307-v1:0`"},"modifiedTimeSeconds":{"type":"number"},"name":{"type":"string","description":"The name of the AI Prompt","replaceOnChanges":true},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource.","replaceOnChanges":true},"templateConfiguration":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptTemplateConfiguration","description":"The configuration of the prompt template for this AI Prompt."},"templateType":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptTemplateType","description":"The type of the prompt template for this AI Prompt.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptType","description":"The type of this AI Prompt.","replaceOnChanges":true}},"type":"object","required":["aiPromptArn","aiPromptId","apiFormat","assistantArn","modelId","modifiedTimeSeconds","templateConfiguration","templateType","type"],"inputProperties":{"apiFormat":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptApiFormat","description":"The API format used for this AI Prompt."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."},"description":{"type":"string","description":"The description of the AI Prompt."},"modelId":{"type":"string","description":"The identifier of the model used for this AI Prompt. The following model Ids are supported:\n\n- `anthropic.claude-3-haiku--v1:0`\n- `apac.amazon.nova-lite-v1:0`\n- `apac.amazon.nova-micro-v1:0`\n- `apac.amazon.nova-pro-v1:0`\n- `apac.anthropic.claude-3-5-sonnet--v2:0`\n- `apac.anthropic.claude-3-haiku-20240307-v1:0`\n- `eu.amazon.nova-lite-v1:0`\n- `eu.amazon.nova-micro-v1:0`\n- `eu.amazon.nova-pro-v1:0`\n- `eu.anthropic.claude-3-7-sonnet-20250219-v1:0`\n- `eu.anthropic.claude-3-haiku-20240307-v1:0`\n- `us.amazon.nova-lite-v1:0`\n- `us.amazon.nova-micro-v1:0`\n- `us.amazon.nova-pro-v1:0`\n- `us.anthropic.claude-3-5-haiku-20241022-v1:0`\n- `us.anthropic.claude-3-7-sonnet-20250219-v1:0`\n- `us.anthropic.claude-3-haiku-20240307-v1:0`"},"name":{"type":"string","description":"The name of the AI Prompt"},"tags":{"type":"object","additionalProperties":{"type":"string"},"description":"The tags used to organize, track, or control access for this resource."},"templateConfiguration":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptTemplateConfiguration","description":"The configuration of the prompt template for this AI Prompt."},"templateType":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptTemplateType","description":"The type of the prompt template for this AI Prompt."},"type":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptType","description":"The type of this AI Prompt."}},"requiredInputs":["apiFormat","modelId","templateConfiguration","templateType","type"]},"aws-native:wisdom:AiPromptVersion":{"description":"Definition of AWS::Wisdom::AIPromptVersion Resource Type","properties":{"aiPromptArn":{"type":"string","description":"The ARN of the AI prompt."},"aiPromptId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI prompt.","replaceOnChanges":true},"aiPromptVersionId":{"type":"string"},"assistantArn":{"type":"string"},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN.","replaceOnChanges":true},"modifiedTimeSeconds":{"type":"number","description":"The time the AI Prompt version was last modified in seconds.","replaceOnChanges":true},"versionNumber":{"type":"number","description":"The version number for this AI Prompt version."}},"type":"object","required":["aiPromptArn","aiPromptId","aiPromptVersionId","assistantArn","assistantId","versionNumber"],"inputProperties":{"aiPromptId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI prompt."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."},"modifiedTimeSeconds":{"type":"number","description":"The time the AI Prompt version was last modified in seconds."}},"requiredInputs":["aiPromptId","assistantId"]},"aws-native:wisdom:Assistant":{"description":"Definition of AWS::Wisdom::Assistant Resource Type","properties":{"assistantArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the assistant."},"assistantId":{"type":"string","description":"The ID of the Wisdom assistant."},"description":{"type":"string","description":"The description of the assistant.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the assistant.","replaceOnChanges":true},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:wisdom:AssistantServerSideEncryptionConfiguration","description":"The configuration information for the customer managed key used for encryption. The customer managed key must have a policy that allows `kms:CreateGrant` and `kms:DescribeKey` permissions to the IAM identity using the key to invoke Wisdom. To use Wisdom with chat, the key policy must also allow `kms:Decrypt` , `kms:GenerateDataKey*` , and `kms:DescribeKey` permissions to the `connect.amazonaws.com` service principal. For more information about setting up a customer managed key for Wisdom, see [Enable Amazon Connect Wisdom for your instance](https://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.html) .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags used to organize, track, or control access for this resource.","replaceOnChanges":true},"type":{"$ref":"#/types/aws-native:wisdom:AssistantType","description":"The type of assistant.","replaceOnChanges":true}},"type":"object","required":["assistantArn","assistantId","name","type"],"inputProperties":{"description":{"type":"string","description":"The description of the assistant."},"name":{"type":"string","description":"The name of the assistant."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:wisdom:AssistantServerSideEncryptionConfiguration","description":"The configuration information for the customer managed key used for encryption. The customer managed key must have a policy that allows `kms:CreateGrant` and `kms:DescribeKey` permissions to the IAM identity using the key to invoke Wisdom. To use Wisdom with chat, the key policy must also allow `kms:Decrypt` , `kms:GenerateDataKey*` , and `kms:DescribeKey` permissions to the `connect.amazonaws.com` service principal. For more information about setting up a customer managed key for Wisdom, see [Enable Amazon Connect Wisdom for your instance](https://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.html) ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags used to organize, track, or control access for this resource."},"type":{"$ref":"#/types/aws-native:wisdom:AssistantType","description":"The type of assistant."}},"requiredInputs":["type"]},"aws-native:wisdom:AssistantAssociation":{"description":"Definition of AWS::Wisdom::AssistantAssociation Resource Type","properties":{"assistantArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Wisdom assistant."},"assistantAssociationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the assistant association."},"assistantAssociationId":{"type":"string","description":"The ID of the association."},"assistantId":{"type":"string","description":"The identifier of the Wisdom assistant.","replaceOnChanges":true},"association":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:AssistantAssociationAssociationData0Properties"},{"$ref":"#/types/aws-native:wisdom:AssistantAssociationAssociationData1Properties"}],"description":"The identifier of the associated resource.","replaceOnChanges":true},"associationType":{"$ref":"#/types/aws-native:wisdom:AssistantAssociationAssociationType","description":"The type of association.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags used to organize, track, or control access for this resource.","replaceOnChanges":true}},"type":"object","required":["assistantArn","assistantAssociationArn","assistantAssociationId","assistantId","association","associationType"],"inputProperties":{"assistantId":{"type":"string","description":"The identifier of the Wisdom assistant."},"association":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:AssistantAssociationAssociationData0Properties"},{"$ref":"#/types/aws-native:wisdom:AssistantAssociationAssociationData1Properties"}],"description":"The identifier of the associated resource."},"associationType":{"$ref":"#/types/aws-native:wisdom:AssistantAssociationAssociationType","description":"The type of association."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags used to organize, track, or control access for this resource."}},"requiredInputs":["assistantId","association","associationType"]},"aws-native:wisdom:KnowledgeBase":{"description":"Definition of AWS::Wisdom::KnowledgeBase Resource Type","properties":{"description":{"type":"string","description":"The description.","replaceOnChanges":true},"knowledgeBaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the knowledge base."},"knowledgeBaseId":{"type":"string","description":"The ID of the knowledge base."},"knowledgeBaseType":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseType","description":"The type of knowledge base. Only CUSTOM knowledge bases allow you to upload your own content. EXTERNAL knowledge bases support integrations with third-party systems whose content is synchronized automatically.","replaceOnChanges":true},"name":{"type":"string","description":"The name of the knowledge base.","replaceOnChanges":true},"renderingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseRenderingConfiguration","description":"Information about how to render the content."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseServerSideEncryptionConfiguration","description":"This customer managed key must have a policy that allows `kms:CreateGrant` and `kms:DescribeKey` permissions to the IAM identity using the key to invoke Wisdom. For more information about setting up a customer managed key for Wisdom, see [Enable Amazon Connect Wisdom for your instance](https://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.html) . For information about valid ID values, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id) in the *AWS Key Management Service Developer Guide* .","replaceOnChanges":true},"sourceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseSourceConfiguration0Properties"},{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseSourceConfiguration1Properties"}],"description":"The source of the knowledge base content. Only set this argument for EXTERNAL or Managed knowledge bases.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags used to organize, track, or control access for this resource.","replaceOnChanges":true},"vectorIngestionConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfiguration","description":"Contains details about how to ingest the documents in a data source."}},"type":"object","required":["knowledgeBaseArn","knowledgeBaseId","knowledgeBaseType","name"],"inputProperties":{"description":{"type":"string","description":"The description."},"knowledgeBaseType":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseType","description":"The type of knowledge base. Only CUSTOM knowledge bases allow you to upload your own content. EXTERNAL knowledge bases support integrations with third-party systems whose content is synchronized automatically."},"name":{"type":"string","description":"The name of the knowledge base."},"renderingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseRenderingConfiguration","description":"Information about how to render the content."},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseServerSideEncryptionConfiguration","description":"This customer managed key must have a policy that allows `kms:CreateGrant` and `kms:DescribeKey` permissions to the IAM identity using the key to invoke Wisdom. For more information about setting up a customer managed key for Wisdom, see [Enable Amazon Connect Wisdom for your instance](https://docs.aws.amazon.com/connect/latest/adminguide/enable-wisdom.html) . For information about valid ID values, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id) in the *AWS Key Management Service Developer Guide* ."},"sourceConfiguration":{"oneOf":[{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseSourceConfiguration0Properties"},{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseSourceConfiguration1Properties"}],"description":"The source of the knowledge base content. Only set this argument for EXTERNAL or Managed knowledge bases."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags used to organize, track, or control access for this resource."},"vectorIngestionConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfiguration","description":"Contains details about how to ingest the documents in a data source."}},"requiredInputs":["knowledgeBaseType"]},"aws-native:wisdom:MessageTemplate":{"description":"Definition of AWS::Wisdom::MessageTemplate Resource Type","properties":{"channelSubtype":{"$ref":"#/types/aws-native:wisdom:MessageTemplateChannelSubtype","description":"The channel subtype this message template applies to.","replaceOnChanges":true},"content":{"$ref":"#/types/aws-native:wisdom:MessageTemplateContent","description":"The content of the message template."},"defaultAttributes":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAttributes","description":"An object that specifies the default values to use for variables in the message template. This object contains different categories of key-value pairs. Each key defines a variable or placeholder in the message template. The corresponding value defines the default value for that variable."},"description":{"type":"string","description":"The description of the message template."},"groupingConfiguration":{"$ref":"#/types/aws-native:wisdom:MessageTemplateGroupingConfiguration","description":"The configuration information of the external data source."},"knowledgeBaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the knowledge base to which the message template belongs.","replaceOnChanges":true},"language":{"type":"string","description":"The language code value for the language in which the message template is written. The supported language codes include de_DE, en_US, es_ES, fr_FR, id_ID, it_IT, ja_JP, ko_KR, pt_BR, zh_CN, zh_TW"},"messageTemplateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the message template."},"messageTemplateAttachments":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAttachment"},"description":"List of message template attachments"},"messageTemplateContentSha256":{"type":"string","description":"The content SHA256 of the message template."},"messageTemplateId":{"type":"string","description":"The unique identifier of the message template."},"name":{"type":"string","description":"The name of the message template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"type":"object","required":["channelSubtype","content","knowledgeBaseArn","messageTemplateArn","messageTemplateContentSha256","messageTemplateId","name"],"inputProperties":{"channelSubtype":{"$ref":"#/types/aws-native:wisdom:MessageTemplateChannelSubtype","description":"The channel subtype this message template applies to."},"content":{"$ref":"#/types/aws-native:wisdom:MessageTemplateContent","description":"The content of the message template."},"defaultAttributes":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAttributes","description":"An object that specifies the default values to use for variables in the message template. This object contains different categories of key-value pairs. Each key defines a variable or placeholder in the message template. The corresponding value defines the default value for that variable."},"description":{"type":"string","description":"The description of the message template."},"groupingConfiguration":{"$ref":"#/types/aws-native:wisdom:MessageTemplateGroupingConfiguration","description":"The configuration information of the external data source."},"knowledgeBaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the knowledge base to which the message template belongs."},"language":{"type":"string","description":"The language code value for the language in which the message template is written. The supported language codes include de_DE, en_US, es_ES, fr_FR, id_ID, it_IT, ja_JP, ko_KR, pt_BR, zh_CN, zh_TW"},"messageTemplateAttachments":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAttachment"},"description":"List of message template attachments"},"name":{"type":"string","description":"The name of the message template."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }."}},"requiredInputs":["channelSubtype","content","knowledgeBaseArn"]},"aws-native:wisdom:MessageTemplateVersion":{"description":"A version for the specified customer-managed message template within the specified knowledge base.","properties":{"messageTemplateArn":{"type":"string","description":"The unqualified Amazon Resource Name (ARN) of the message template.","replaceOnChanges":true},"messageTemplateContentSha256":{"type":"string","description":"The content SHA256 of the message template."},"messageTemplateVersionArn":{"type":"string","description":"The unqualified Amazon Resource Name (ARN) of the message template version."},"messageTemplateVersionNumber":{"type":"number","description":"Current version number of the message template."}},"type":"object","required":["messageTemplateArn","messageTemplateVersionArn","messageTemplateVersionNumber"],"inputProperties":{"messageTemplateArn":{"type":"string","description":"The unqualified Amazon Resource Name (ARN) of the message template."},"messageTemplateContentSha256":{"type":"string","description":"The content SHA256 of the message template."}},"requiredInputs":["messageTemplateArn"]},"aws-native:wisdom:QuickResponse":{"description":"Definition of AWS::Wisdom::QuickResponse Resource Type.","properties":{"channels":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:QuickResponseChannelType"},"description":"The Amazon Connect contact channels this quick response applies to."},"content":{"$ref":"#/types/aws-native:wisdom:QuickResponseContentProvider","description":"The content of the quick response."},"contentType":{"type":"string","description":"The media type of the quick response content.\n- Use application/x.quickresponse;format=plain for quick response written in plain text.\n- Use application/x.quickresponse;format=markdown for quick response written in richtext."},"contents":{"$ref":"#/types/aws-native:wisdom:QuickResponseContents"},"description":{"type":"string","description":"The description of the quick response."},"groupingConfiguration":{"$ref":"#/types/aws-native:wisdom:QuickResponseGroupingConfiguration","description":"The configuration information of the user groups that the quick response is accessible to."},"isActive":{"type":"boolean","description":"Whether the quick response is active."},"knowledgeBaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the knowledge base.","replaceOnChanges":true},"language":{"type":"string","description":"The language code value for the language in which the quick response is written. The supported language codes include de_DE, en_US, es_ES, fr_FR, id_ID, it_IT, ja_JP, ko_KR, pt_BR, zh_CN, zh_TW"},"name":{"type":"string","description":"The name of the quick response."},"quickResponseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the quick response."},"quickResponseId":{"type":"string","description":"The identifier of the quick response."},"shortcutKey":{"type":"string","description":"The shortcut key of the quick response. The value should be unique across the knowledge base."},"status":{"$ref":"#/types/aws-native:wisdom:QuickResponseStatus","description":"The status of the quick response data."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["content","contents","knowledgeBaseArn","name","quickResponseArn","quickResponseId","status"],"inputProperties":{"channels":{"type":"array","items":{"$ref":"#/types/aws-native:wisdom:QuickResponseChannelType"},"description":"The Amazon Connect contact channels this quick response applies to."},"content":{"$ref":"#/types/aws-native:wisdom:QuickResponseContentProvider","description":"The content of the quick response."},"contentType":{"type":"string","description":"The media type of the quick response content.\n- Use application/x.quickresponse;format=plain for quick response written in plain text.\n- Use application/x.quickresponse;format=markdown for quick response written in richtext."},"description":{"type":"string","description":"The description of the quick response."},"groupingConfiguration":{"$ref":"#/types/aws-native:wisdom:QuickResponseGroupingConfiguration","description":"The configuration information of the user groups that the quick response is accessible to."},"isActive":{"type":"boolean","description":"Whether the quick response is active."},"knowledgeBaseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the knowledge base."},"language":{"type":"string","description":"The language code value for the language in which the quick response is written. The supported language codes include de_DE, en_US, es_ES, fr_FR, id_ID, it_IT, ja_JP, ko_KR, pt_BR, zh_CN, zh_TW"},"name":{"type":"string","description":"The name of the quick response."},"shortcutKey":{"type":"string","description":"The shortcut key of the quick response. The value should be unique across the knowledge base."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["content","knowledgeBaseArn"]},"aws-native:workspaces:ConnectionAlias":{"description":"Resource Type definition for AWS::WorkSpaces::ConnectionAlias","properties":{"aliasId":{"type":"string","description":"The identifier of the connection alias, returned as a string."},"associations":{"type":"array","items":{"$ref":"#/types/aws-native:workspaces:ConnectionAliasAssociation"},"description":"The association status of the connection alias."},"connectionAliasState":{"$ref":"#/types/aws-native:workspaces:ConnectionAliasState","description":"The current state of the connection alias, returned as a string."},"connectionString":{"type":"string","description":"The connection string specified for the connection alias. The connection string must be in the form of a fully qualified domain name (FQDN), such as `www.example.com` .","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags to associate with the connection alias.","replaceOnChanges":true}},"type":"object","required":["aliasId","associations","connectionAliasState","connectionString"],"inputProperties":{"connectionString":{"type":"string","description":"The connection string specified for the connection alias. The connection string must be in the form of a fully qualified domain name (FQDN), such as `www.example.com` ."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:CreateOnlyTag"},"description":"The tags to associate with the connection alias."}},"requiredInputs":["connectionString"]},"aws-native:workspaces:Workspace":{"description":"Resource Type definition for AWS::WorkSpaces::Workspace","properties":{"awsId":{"type":"string","description":"The identifier of the WorkSpace, returned as a string."},"bundleId":{"type":"string","description":"The identifier of the bundle for the WorkSpace."},"directoryId":{"type":"string","description":"The identifier of the Directory Service directory for the WorkSpace.","replaceOnChanges":true},"rootVolumeEncryptionEnabled":{"type":"boolean","description":"Indicates whether the data stored on the root volume is encrypted."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the WorkSpace."},"userName":{"type":"string","description":"The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.","replaceOnChanges":true},"userVolumeEncryptionEnabled":{"type":"boolean","description":"Indicates whether the data stored on the user volume is encrypted."},"volumeEncryptionKey":{"type":"string","description":"The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys."},"workspaceId":{"type":"string"},"workspaceProperties":{"$ref":"#/types/aws-native:workspaces:WorkspaceProperties","description":"The WorkSpace properties."}},"type":"object","required":["awsId","bundleId","directoryId","userName","workspaceId"],"inputProperties":{"bundleId":{"type":"string","description":"The identifier of the bundle for the WorkSpace."},"directoryId":{"type":"string","description":"The identifier of the Directory Service directory for the WorkSpace."},"rootVolumeEncryptionEnabled":{"type":"boolean","description":"Indicates whether the data stored on the root volume is encrypted."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags for the WorkSpace."},"userName":{"type":"string","description":"The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace."},"userVolumeEncryptionEnabled":{"type":"boolean","description":"Indicates whether the data stored on the user volume is encrypted."},"volumeEncryptionKey":{"type":"string","description":"The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys."},"workspaceProperties":{"$ref":"#/types/aws-native:workspaces:WorkspaceProperties","description":"The WorkSpace properties."}},"requiredInputs":["bundleId","directoryId","userName"]},"aws-native:workspaces:WorkspacesPool":{"description":"Resource Type definition for AWS::WorkSpaces::WorkspacesPool","properties":{"applicationSettings":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolApplicationSettings","description":"The persistent application settings for users of the pool."},"bundleId":{"type":"string","description":"The identifier of the bundle used by the pool."},"capacity":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolCapacity","description":"Describes the user capacity for the pool."},"createdAt":{"type":"string","description":"The time the pool was created."},"description":{"type":"string","description":"The description of the pool."},"directoryId":{"type":"string","description":"The identifier of the directory used by the pool."},"poolArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the pool."},"poolId":{"type":"string","description":"The identifier of the pool."},"poolName":{"type":"string","description":"The name of the pool.","replaceOnChanges":true},"runningMode":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolRunningMode","description":"The running mode of the pool."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"timeoutSettings":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolTimeoutSettings","description":"The amount of time that a pool session remains active after users disconnect. If they try to reconnect to the pool session after a disconnection or network interruption within this time interval, they are connected to their previous session. Otherwise, they are connected to a new session with a new pool instance."}},"type":"object","required":["bundleId","capacity","createdAt","directoryId","poolArn","poolId","poolName"],"inputProperties":{"applicationSettings":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolApplicationSettings","description":"The persistent application settings for users of the pool."},"bundleId":{"type":"string","description":"The identifier of the bundle used by the pool."},"capacity":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolCapacity","description":"Describes the user capacity for the pool."},"description":{"type":"string","description":"The description of the pool."},"directoryId":{"type":"string","description":"The identifier of the directory used by the pool."},"poolName":{"type":"string","description":"The name of the pool."},"runningMode":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolRunningMode","description":"The running mode of the pool."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"timeoutSettings":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolTimeoutSettings","description":"The amount of time that a pool session remains active after users disconnect. If they try to reconnect to the pool session after a disconnection or network interruption within this time interval, they are connected to their previous session. Otherwise, they are connected to a new session with a new pool instance."}},"requiredInputs":["bundleId","capacity","directoryId"]},"aws-native:workspacesinstances:Volume":{"description":"Resource Type definition for AWS::WorkspacesInstances::Volume - Manages WorkSpaces Volume resources","properties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create the volume","replaceOnChanges":true},"encrypted":{"type":"boolean","description":"Indicates whether the volume should be encrypted","replaceOnChanges":true},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS)","replaceOnChanges":true},"kmsKeyId":{"type":"string","description":"The identifier of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use for Amazon EBS encryption","replaceOnChanges":true},"sizeInGb":{"type":"integer","description":"The size of the volume, in GiBs","replaceOnChanges":true},"snapshotId":{"type":"string","description":"The snapshot from which to create the volume","replaceOnChanges":true},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:VolumeTagSpecification"},"description":"The tags passed to EBS volume","replaceOnChanges":true},"throughput":{"type":"integer","description":"The throughput to provision for a volume, with a maximum of 1,000 MiB/s","replaceOnChanges":true},"volumeId":{"type":"string","description":"Unique identifier for the volume"},"volumeType":{"$ref":"#/types/aws-native:workspacesinstances:VolumeType","description":"The volume type","replaceOnChanges":true}},"type":"object","required":["availabilityZone","volumeId"],"inputProperties":{"availabilityZone":{"type":"string","description":"The Availability Zone in which to create the volume"},"encrypted":{"type":"boolean","description":"Indicates whether the volume should be encrypted"},"iops":{"type":"integer","description":"The number of I/O operations per second (IOPS)"},"kmsKeyId":{"type":"string","description":"The identifier of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use for Amazon EBS encryption"},"sizeInGb":{"type":"integer","description":"The size of the volume, in GiBs"},"snapshotId":{"type":"string","description":"The snapshot from which to create the volume"},"tagSpecifications":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesinstances:VolumeTagSpecification"},"description":"The tags passed to EBS volume"},"throughput":{"type":"integer","description":"The throughput to provision for a volume, with a maximum of 1,000 MiB/s"},"volumeType":{"$ref":"#/types/aws-native:workspacesinstances:VolumeType","description":"The volume type"}},"requiredInputs":["availabilityZone"]},"aws-native:workspacesinstances:VolumeAssociation":{"description":"Resource Type definition for AWS::WorkspacesInstances::VolumeAssociation","properties":{"device":{"type":"string","description":"The device name for the volume attachment","replaceOnChanges":true},"disassociateMode":{"$ref":"#/types/aws-native:workspacesinstances:VolumeAssociationDisassociateMode","description":"Mode to use when disassociating the volume"},"volumeId":{"type":"string","description":"ID of the volume to attach to the workspace instance","replaceOnChanges":true},"workspaceInstanceId":{"type":"string","description":"ID of the workspace instance to associate with the volume","replaceOnChanges":true}},"type":"object","required":["device","volumeId","workspaceInstanceId"],"inputProperties":{"device":{"type":"string","description":"The device name for the volume attachment"},"disassociateMode":{"$ref":"#/types/aws-native:workspacesinstances:VolumeAssociationDisassociateMode","description":"Mode to use when disassociating the volume"},"volumeId":{"type":"string","description":"ID of the volume to attach to the workspace instance"},"workspaceInstanceId":{"type":"string","description":"ID of the workspace instance to associate with the volume"}},"requiredInputs":["device","volumeId","workspaceInstanceId"]},"aws-native:workspacesinstances:WorkspaceInstance":{"description":"Resource Type definition for AWS::WorkspacesInstances::WorkspaceInstance","properties":{"ec2ManagedInstance":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceEc2ManagedInstance"},"managedInstance":{"$ref":"#/types/aws-native:workspacesinstances:ManagedInstanceProperties","replaceOnChanges":true},"provisionState":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceProvisionState","description":"The current state of the workspace instance"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}},"workspaceInstanceId":{"type":"string","description":"Unique identifier for the workspace instance"}},"type":"object","required":["ec2ManagedInstance","provisionState","workspaceInstanceId"],"inputProperties":{"managedInstance":{"$ref":"#/types/aws-native:workspacesinstances:ManagedInstanceProperties"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}}},"aws-native:workspacesthinclient:Environment":{"description":"Resource type definition for AWS::WorkSpacesThinClient::Environment.","properties":{"activationCode":{"type":"string","description":"Activation code for devices associated with environment."},"arn":{"type":"string","description":"The environment ARN."},"awsId":{"type":"string","description":"Unique identifier of the environment."},"createdAt":{"type":"string","description":"The timestamp in unix epoch format when environment was created."},"desiredSoftwareSetId":{"type":"string","description":"The ID of the software set to apply."},"desktopArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the desktop to stream from Amazon WorkSpaces, WorkSpaces Web, or AppStream 2.0.","replaceOnChanges":true},"desktopEndpoint":{"type":"string","description":"The URL for the identity provider login (only for environments that use AppStream 2.0)."},"desktopType":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentDesktopType","description":"The type of VDI."},"deviceCreationTags":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentTag"},"description":"An array of key-value pairs to apply to the newly created devices for this environment."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Key Management Service key used to encrypt the environment.","replaceOnChanges":true},"maintenanceWindow":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentMaintenanceWindow","description":"A specification for a time window to apply software updates."},"name":{"type":"string","description":"The name of the environment."},"pendingSoftwareSetId":{"type":"string","description":"The ID of the software set that is pending to be installed."},"pendingSoftwareSetVersion":{"type":"string","description":"The version of the software set that is pending to be installed."},"registeredDevicesCount":{"type":"integer","description":"Number of devices registered to the environment."},"softwareSetComplianceStatus":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetComplianceStatus","description":"Describes if the software currently installed on all devices in the environment is a supported version."},"softwareSetUpdateMode":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateMode","description":"An option to define which software updates to apply."},"softwareSetUpdateSchedule":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateSchedule","description":"An option to define if software updates should be applied within a maintenance window."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."},"updatedAt":{"type":"string","description":"The timestamp in unix epoch format when environment was last updated."}},"type":"object","required":["activationCode","arn","awsId","createdAt","desktopArn","desktopType","pendingSoftwareSetId","pendingSoftwareSetVersion","registeredDevicesCount","softwareSetComplianceStatus","updatedAt"],"inputProperties":{"desiredSoftwareSetId":{"type":"string","description":"The ID of the software set to apply."},"desktopArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the desktop to stream from Amazon WorkSpaces, WorkSpaces Web, or AppStream 2.0."},"desktopEndpoint":{"type":"string","description":"The URL for the identity provider login (only for environments that use AppStream 2.0)."},"deviceCreationTags":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentTag"},"description":"An array of key-value pairs to apply to the newly created devices for this environment."},"kmsKeyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS Key Management Service key used to encrypt the environment."},"maintenanceWindow":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentMaintenanceWindow","description":"A specification for a time window to apply software updates."},"name":{"type":"string","description":"The name of the environment."},"softwareSetUpdateMode":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateMode","description":"An option to define which software updates to apply."},"softwareSetUpdateSchedule":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateSchedule","description":"An option to define if software updates should be applied within a maintenance window."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"requiredInputs":["desktopArn"]},"aws-native:workspacesweb:BrowserSettings":{"description":"Definition of AWS::WorkSpacesWeb::BrowserSettings Resource Type","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional encryption context of the browser settings.","replaceOnChanges":true},"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that the browser settings resource is associated with."},"browserPolicy":{"type":"string","description":"A JSON string containing Chrome Enterprise policies that will be applied to all streaming sessions."},"browserSettingsArn":{"type":"string","description":"The ARN of the browser settings."},"customerManagedKey":{"type":"string","description":"The custom managed key of the browser settings.\n\n*Pattern* : `^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$`","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the browser settings resource. A tag is a key-value pair."},"webContentFilteringPolicy":{"$ref":"#/types/aws-native:workspacesweb:BrowserSettingsWebContentFilteringPolicy","description":"The policy that specifies which URLs end users are allowed to access or which URLs or domain categories they are restricted from accessing for enhanced security."}},"type":"object","required":["associatedPortalArns","browserSettingsArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional encryption context of the browser settings."},"browserPolicy":{"type":"string","description":"A JSON string containing Chrome Enterprise policies that will be applied to all streaming sessions."},"customerManagedKey":{"type":"string","description":"The custom managed key of the browser settings.\n\n*Pattern* : `^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the browser settings resource. A tag is a key-value pair."},"webContentFilteringPolicy":{"$ref":"#/types/aws-native:workspacesweb:BrowserSettingsWebContentFilteringPolicy","description":"The policy that specifies which URLs end users are allowed to access or which URLs or domain categories they are restricted from accessing for enhanced security."}}},"aws-native:workspacesweb:DataProtectionSettings":{"description":"Definition of AWS::WorkSpacesWeb::DataProtectionSettings Resource Type","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the data protection settings.","replaceOnChanges":true},"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that this data protection settings resource is associated with."},"creationDate":{"type":"string","description":"The creation date timestamp of the data protection settings."},"customerManagedKey":{"type":"string","description":"The customer managed key used to encrypt sensitive information in the data protection settings.","replaceOnChanges":true},"dataProtectionSettingsArn":{"type":"string","description":"The ARN of the data protection settings resource."},"description":{"type":"string","description":"The description of the data protection settings."},"displayName":{"type":"string","description":"The display name of the data protection settings."},"inlineRedactionConfiguration":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsInlineRedactionConfiguration","description":"The inline redaction configuration for the data protection settings."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the data protection settings."}},"type":"object","required":["associatedPortalArns","creationDate","dataProtectionSettingsArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the data protection settings."},"customerManagedKey":{"type":"string","description":"The customer managed key used to encrypt sensitive information in the data protection settings."},"description":{"type":"string","description":"The description of the data protection settings."},"displayName":{"type":"string","description":"The display name of the data protection settings."},"inlineRedactionConfiguration":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsInlineRedactionConfiguration","description":"The inline redaction configuration for the data protection settings."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the data protection settings."}}},"aws-native:workspacesweb:IdentityProvider":{"description":"Definition of AWS::WorkSpacesWeb::IdentityProvider Resource Type","properties":{"identityProviderArn":{"type":"string","description":"The ARN of the identity provider."},"identityProviderDetails":{"type":"object","additionalProperties":{"type":"string"},"description":"The identity provider details. The following list describes the provider detail keys for each identity provider type.\n\n- For Google and Login with Amazon:\n\n- `client_id`\n- `client_secret`\n- `authorize_scopes`\n- For Facebook:\n\n- `client_id`\n- `client_secret`\n- `authorize_scopes`\n- `api_version`\n- For Sign in with Apple:\n\n- `client_id`\n- `team_id`\n- `key_id`\n- `private_key`\n- `authorize_scopes`\n- For OIDC providers:\n\n- `client_id`\n- `client_secret`\n- `attributes_request_method`\n- `oidc_issuer`\n- `authorize_scopes`\n- `authorize_url` *if not available from discovery URL specified by oidc_issuer key*\n- `token_url` *if not available from discovery URL specified by oidc_issuer key*\n- `attributes_url` *if not available from discovery URL specified by oidc_issuer key*\n- `jwks_uri` *if not available from discovery URL specified by oidc_issuer key*\n- For SAML providers:\n\n- `MetadataFile` OR `MetadataURL`\n- `IDPSignout` (boolean) *optional*\n- `IDPInit` (boolean) *optional*\n- `RequestSigningAlgorithm` (string) *optional* - Only accepts `rsa-sha256`\n- `EncryptedResponses` (boolean) *optional*"},"identityProviderName":{"type":"string","description":"The identity provider name."},"identityProviderType":{"$ref":"#/types/aws-native:workspacesweb:IdentityProviderType","description":"The identity provider type."},"portalArn":{"type":"string","description":"The ARN of the identity provider.","replaceOnChanges":true},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"type":"object","required":["identityProviderArn","identityProviderDetails","identityProviderName","identityProviderType"],"inputProperties":{"identityProviderDetails":{"type":"object","additionalProperties":{"type":"string"},"description":"The identity provider details. The following list describes the provider detail keys for each identity provider type.\n\n- For Google and Login with Amazon:\n\n- `client_id`\n- `client_secret`\n- `authorize_scopes`\n- For Facebook:\n\n- `client_id`\n- `client_secret`\n- `authorize_scopes`\n- `api_version`\n- For Sign in with Apple:\n\n- `client_id`\n- `team_id`\n- `key_id`\n- `private_key`\n- `authorize_scopes`\n- For OIDC providers:\n\n- `client_id`\n- `client_secret`\n- `attributes_request_method`\n- `oidc_issuer`\n- `authorize_scopes`\n- `authorize_url` *if not available from discovery URL specified by oidc_issuer key*\n- `token_url` *if not available from discovery URL specified by oidc_issuer key*\n- `attributes_url` *if not available from discovery URL specified by oidc_issuer key*\n- `jwks_uri` *if not available from discovery URL specified by oidc_issuer key*\n- For SAML providers:\n\n- `MetadataFile` OR `MetadataURL`\n- `IDPSignout` (boolean) *optional*\n- `IDPInit` (boolean) *optional*\n- `RequestSigningAlgorithm` (string) *optional* - Only accepts `rsa-sha256`\n- `EncryptedResponses` (boolean) *optional*"},"identityProviderName":{"type":"string","description":"The identity provider name."},"identityProviderType":{"$ref":"#/types/aws-native:workspacesweb:IdentityProviderType","description":"The identity provider type."},"portalArn":{"type":"string","description":"The ARN of the identity provider."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"}}},"requiredInputs":["identityProviderDetails","identityProviderType"]},"aws-native:workspacesweb:IpAccessSettings":{"description":"Definition of AWS::WorkSpacesWeb::IpAccessSettings Resource Type","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional encryption context of the IP access settings.","replaceOnChanges":true},"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that this IP access settings resource is associated with."},"creationDate":{"type":"string","description":"The creation date timestamp of the IP access settings."},"customerManagedKey":{"type":"string","description":"The custom managed key of the IP access settings.\n\n*Pattern* : `^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$`","replaceOnChanges":true},"description":{"type":"string","description":"The description of the IP access settings."},"displayName":{"type":"string","description":"The display name of the IP access settings."},"ipAccessSettingsArn":{"type":"string","description":"The ARN of the IP access settings resource."},"ipRules":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:IpAccessSettingsIpRule"},"description":"The IP rules of the IP access settings."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the IP access settings resource. A tag is a key-value pair."}},"type":"object","required":["associatedPortalArns","creationDate","ipAccessSettingsArn","ipRules"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"Additional encryption context of the IP access settings."},"customerManagedKey":{"type":"string","description":"The custom managed key of the IP access settings.\n\n*Pattern* : `^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$`"},"description":{"type":"string","description":"The description of the IP access settings."},"displayName":{"type":"string","description":"The display name of the IP access settings."},"ipRules":{"type":"array","items":{"$ref":"#/types/aws-native:workspacesweb:IpAccessSettingsIpRule"},"description":"The IP rules of the IP access settings."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the IP access settings resource. A tag is a key-value pair."}},"requiredInputs":["ipRules"]},"aws-native:workspacesweb:NetworkSettings":{"description":"Definition of AWS::WorkSpacesWeb::NetworkSettings Resource Type","properties":{"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that this network settings is associated with."},"networkSettingsArn":{"type":"string","description":"The ARN of the network settings."},"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more security groups used to control access from streaming instances to your VPC.\n\n*Pattern* : `^[\\w+\\-]+$`"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnets in which network interfaces are created to connect streaming instances to your VPC. At least two of these subnets must be in different availability zones.\n\n*Pattern* : `^subnet-([0-9a-f]{8}|[0-9a-f]{17})$`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the network settings resource. A tag is a key-value pair."},"vpcId":{"type":"string","description":"The VPC that streaming instances will connect to.\n\n*Pattern* : `^vpc-[0-9a-z]*$`"}},"type":"object","required":["associatedPortalArns","networkSettingsArn","securityGroupIds","subnetIds","vpcId"],"inputProperties":{"securityGroupIds":{"type":"array","items":{"type":"string"},"description":"One or more security groups used to control access from streaming instances to your VPC.\n\n*Pattern* : `^[\\w+\\-]+$`"},"subnetIds":{"type":"array","items":{"type":"string"},"description":"The subnets in which network interfaces are created to connect streaming instances to your VPC. At least two of these subnets must be in different availability zones.\n\n*Pattern* : `^subnet-([0-9a-f]{8}|[0-9a-f]{17})$`"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the network settings resource. A tag is a key-value pair."},"vpcId":{"type":"string","description":"The VPC that streaming instances will connect to.\n\n*Pattern* : `^vpc-[0-9a-z]*$`"}},"requiredInputs":["securityGroupIds","subnetIds","vpcId"]},"aws-native:workspacesweb:Portal":{"description":"Definition of AWS::WorkSpacesWeb::Portal Resource Type","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the portal.","replaceOnChanges":true},"authenticationType":{"$ref":"#/types/aws-native:workspacesweb:PortalAuthenticationType","description":"The type of authentication integration points used when signing into the web portal. Defaults to `Standard` .\n\n`Standard` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps:\n\n1. Create and deploy a CloudFormation template with a `Standard` portal with no `IdentityProvider` resource.\n\n2. Retrieve the SP metadata using `Fn:GetAtt` , the WorkSpaces Secure Browser console, or by the calling the `GetPortalServiceProviderMetadata` API.\n\n3. Submit the data to your IdP.\n\n4. Add an `IdentityProvider` resource to your CloudFormation template.\n\n`SSO` web portals are authenticated through SSOlong . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in SSO . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation."},"browserSettingsArn":{"type":"string","description":"The ARN of the browser settings that is associated with this web portal."},"browserType":{"$ref":"#/types/aws-native:workspacesweb:PortalBrowserType","description":"The browser that users see when using a streaming session."},"creationDate":{"type":"string","description":"The creation date of the web portal."},"customerManagedKey":{"type":"string","description":"The customer managed key of the web portal.\n\n*Pattern* : `^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$`","replaceOnChanges":true},"dataProtectionSettingsArn":{"type":"string","description":"The ARN of the data protection settings."},"displayName":{"type":"string","description":"The name of the web portal."},"instanceType":{"$ref":"#/types/aws-native:workspacesweb:PortalInstanceType","description":"The type and resources of the underlying instance."},"ipAccessSettingsArn":{"type":"string","description":"The ARN of the IP access settings that is associated with the web portal."},"maxConcurrentSessions":{"type":"number","description":"The maximum number of concurrent sessions for the portal."},"networkSettingsArn":{"type":"string","description":"The ARN of the network settings that is associated with the web portal."},"portalArn":{"type":"string","description":"The ARN of the web portal."},"portalCustomDomain":{"type":"string"},"portalEndpoint":{"type":"string","description":"The endpoint URL of the web portal that users access in order to start streaming sessions."},"portalStatus":{"$ref":"#/types/aws-native:workspacesweb:PortalStatus","description":"The status of the web portal."},"rendererType":{"$ref":"#/types/aws-native:workspacesweb:PortalRendererType","description":"The renderer that is used in streaming sessions."},"serviceProviderSamlMetadata":{"type":"string","description":"The SAML metadata of the service provider."},"sessionLoggerArn":{"type":"string","description":"The ARN of the session logger that is associated with the portal."},"statusReason":{"type":"string","description":"A message that explains why the web portal is in its current status."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the web portal. A tag is a key-value pair."},"trustStoreArn":{"type":"string","description":"The ARN of the trust store that is associated with the web portal."},"userAccessLoggingSettingsArn":{"type":"string","description":"The ARN of the user access logging settings that is associated with the web portal."},"userSettingsArn":{"type":"string","description":"The ARN of the user settings that is associated with the web portal."}},"type":"object","required":["browserType","creationDate","portalArn","portalEndpoint","portalStatus","rendererType","serviceProviderSamlMetadata","statusReason"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the portal."},"authenticationType":{"$ref":"#/types/aws-native:workspacesweb:PortalAuthenticationType","description":"The type of authentication integration points used when signing into the web portal. Defaults to `Standard` .\n\n`Standard` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps:\n\n1. Create and deploy a CloudFormation template with a `Standard` portal with no `IdentityProvider` resource.\n\n2. Retrieve the SP metadata using `Fn:GetAtt` , the WorkSpaces Secure Browser console, or by the calling the `GetPortalServiceProviderMetadata` API.\n\n3. Submit the data to your IdP.\n\n4. Add an `IdentityProvider` resource to your CloudFormation template.\n\n`SSO` web portals are authenticated through SSOlong . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in SSO . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation."},"browserSettingsArn":{"type":"string","description":"The ARN of the browser settings that is associated with this web portal."},"customerManagedKey":{"type":"string","description":"The customer managed key of the web portal.\n\n*Pattern* : `^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$`"},"dataProtectionSettingsArn":{"type":"string","description":"The ARN of the data protection settings."},"displayName":{"type":"string","description":"The name of the web portal."},"instanceType":{"$ref":"#/types/aws-native:workspacesweb:PortalInstanceType","description":"The type and resources of the underlying instance."},"ipAccessSettingsArn":{"type":"string","description":"The ARN of the IP access settings that is associated with the web portal."},"maxConcurrentSessions":{"type":"number","description":"The maximum number of concurrent sessions for the portal."},"networkSettingsArn":{"type":"string","description":"The ARN of the network settings that is associated with the web portal."},"portalCustomDomain":{"type":"string"},"sessionLoggerArn":{"type":"string","description":"The ARN of the session logger that is associated with the portal."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the web portal. A tag is a key-value pair."},"trustStoreArn":{"type":"string","description":"The ARN of the trust store that is associated with the web portal."},"userAccessLoggingSettingsArn":{"type":"string","description":"The ARN of the user access logging settings that is associated with the web portal."},"userSettingsArn":{"type":"string","description":"The ARN of the user settings that is associated with the web portal."}}},"aws-native:workspacesweb:SessionLogger":{"description":"Definition of AWS::WorkSpacesWeb::SessionLogger Resource Type","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the session logger.","replaceOnChanges":true},"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"The associated portal ARN."},"creationDate":{"type":"string","description":"The date the session logger resource was created."},"customerManagedKey":{"type":"string","description":"The custom managed key of the session logger.","replaceOnChanges":true},"displayName":{"type":"string","description":"The human-readable display name."},"eventFilter":{"oneOf":[{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEventFilter0Properties"},{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEventFilter1Properties"}],"description":"The filter that specifies which events to monitor."},"logConfiguration":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerLogConfiguration","description":"The configuration that specifies where logs are fowarded."},"sessionLoggerArn":{"type":"string","description":"The ARN of the session logger resource."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the session logger."}},"type":"object","required":["associatedPortalArns","creationDate","eventFilter","logConfiguration","sessionLoggerArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the session logger."},"customerManagedKey":{"type":"string","description":"The custom managed key of the session logger."},"displayName":{"type":"string","description":"The human-readable display name."},"eventFilter":{"oneOf":[{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEventFilter0Properties"},{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEventFilter1Properties"}],"description":"The filter that specifies which events to monitor."},"logConfiguration":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerLogConfiguration","description":"The configuration that specifies where logs are fowarded."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags of the session logger."}},"requiredInputs":["eventFilter","logConfiguration"]},"aws-native:workspacesweb:TrustStore":{"description":"Definition of AWS::WorkSpacesWeb::TrustStore Resource Type","properties":{"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that this trust store is associated with."},"certificateList":{"type":"array","items":{"type":"string"},"description":"A list of CA certificates to be added to the trust store."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the trust store. A tag is a key-value pair."},"trustStoreArn":{"type":"string","description":"The ARN of the trust store."}},"type":"object","required":["associatedPortalArns","certificateList","trustStoreArn"],"inputProperties":{"certificateList":{"type":"array","items":{"type":"string"},"description":"A list of CA certificates to be added to the trust store."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the trust store. A tag is a key-value pair."}},"requiredInputs":["certificateList"]},"aws-native:workspacesweb:UserAccessLoggingSettings":{"description":"Definition of AWS::WorkSpacesWeb::UserAccessLoggingSettings Resource Type","properties":{"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that this user access logging settings is associated with."},"kinesisStreamArn":{"type":"string","description":"Kinesis stream ARN to which log events are published."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the user access logging settings resource. A tag is a key-value pair."},"userAccessLoggingSettingsArn":{"type":"string","description":"The ARN of the user access logging settings."}},"type":"object","required":["associatedPortalArns","kinesisStreamArn","userAccessLoggingSettingsArn"],"inputProperties":{"kinesisStreamArn":{"type":"string","description":"Kinesis stream ARN to which log events are published."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the user access logging settings resource. A tag is a key-value pair."}},"requiredInputs":["kinesisStreamArn"]},"aws-native:workspacesweb:UserSettings":{"description":"Definition of AWS::WorkSpacesWeb::UserSettings Resource Type","properties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the user settings."},"associatedPortalArns":{"type":"array","items":{"type":"string"},"description":"A list of web portal ARNs that this user settings resource is associated with."},"brandingConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsBrandingConfiguration","description":"The branding configuration that customizes the appearance of the web portal for end users. This includes a custom logo, favicon, wallpaper, localized strings, color theme, and an optional terms of service."},"cookieSynchronizationConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsCookieSynchronizationConfiguration","description":"The configuration that specifies which cookies should be synchronized from the end user's local browser to the remote browser."},"copyAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can copy text from the streaming session to the local device."},"customerManagedKey":{"type":"string","description":"The customer managed key used to encrypt sensitive information in the user settings."},"deepLinkAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can use deep links that open automatically when connecting to a session."},"disconnectTimeoutInMinutes":{"type":"number","description":"The amount of time that a streaming session remains active after users disconnect."},"downloadAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can download files from the streaming session to the local device."},"idleDisconnectTimeoutInMinutes":{"type":"number","description":"The amount of time that users can be idle (inactive) before they are disconnected from their streaming session and the disconnect timeout interval begins."},"pasteAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can paste text from the local device to the streaming session."},"printAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can print to the local device."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the user settings resource. A tag is a key-value pair."},"toolbarConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsToolbarConfiguration","description":"The configuration of the toolbar. This allows administrators to select the toolbar type and visual mode, set maximum display resolution for sessions, and choose which items are visible to end users during their sessions. If administrators do not modify these settings, end users retain control over their toolbar preferences."},"uploadAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can upload files from the local device to the streaming session."},"userSettingsArn":{"type":"string","description":"The ARN of the user settings."},"webAuthnAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can use WebAuthn redirection for passwordless login to websites within the streaming session."}},"type":"object","required":["associatedPortalArns","copyAllowed","downloadAllowed","pasteAllowed","printAllowed","uploadAllowed","userSettingsArn"],"inputProperties":{"additionalEncryptionContext":{"type":"object","additionalProperties":{"type":"string"},"description":"The additional encryption context of the user settings."},"brandingConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsBrandingConfiguration","description":"The branding configuration that customizes the appearance of the web portal for end users. This includes a custom logo, favicon, wallpaper, localized strings, color theme, and an optional terms of service."},"cookieSynchronizationConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsCookieSynchronizationConfiguration","description":"The configuration that specifies which cookies should be synchronized from the end user's local browser to the remote browser."},"copyAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can copy text from the streaming session to the local device."},"customerManagedKey":{"type":"string","description":"The customer managed key used to encrypt sensitive information in the user settings."},"deepLinkAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can use deep links that open automatically when connecting to a session."},"disconnectTimeoutInMinutes":{"type":"number","description":"The amount of time that a streaming session remains active after users disconnect."},"downloadAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can download files from the streaming session to the local device."},"idleDisconnectTimeoutInMinutes":{"type":"number","description":"The amount of time that users can be idle (inactive) before they are disconnected from their streaming session and the disconnect timeout interval begins."},"pasteAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can paste text from the local device to the streaming session."},"printAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can print to the local device."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"The tags to add to the user settings resource. A tag is a key-value pair."},"toolbarConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsToolbarConfiguration","description":"The configuration of the toolbar. This allows administrators to select the toolbar type and visual mode, set maximum display resolution for sessions, and choose which items are visible to end users during their sessions. If administrators do not modify these settings, end users retain control over their toolbar preferences."},"uploadAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can upload files from the local device to the streaming session."},"webAuthnAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can use WebAuthn redirection for passwordless login to websites within the streaming session."}},"requiredInputs":["copyAllowed","downloadAllowed","pasteAllowed","printAllowed","uploadAllowed"]},"aws-native:xray:Group":{"description":"This schema provides construct and validation rules for AWS-XRay Group resource parameters.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myGroupResource = new AwsNative.XRay.Group(\"myGroupResource\", new()\n    {\n        GroupName = \"MyGroup\",\n        FilterExpression = \"duration \u003e 10\",\n        InsightsConfiguration = new AwsNative.XRay.Inputs.GroupInsightsConfigurationArgs\n        {\n            InsightsEnabled = false,\n            NotificationsEnabled = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/xray\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := xray.NewGroup(ctx, \"myGroupResource\", \u0026xray.GroupArgs{\n\t\t\tGroupName:        pulumi.String(\"MyGroup\"),\n\t\t\tFilterExpression: pulumi.String(\"duration \u003e 10\"),\n\t\t\tInsightsConfiguration: \u0026xray.GroupInsightsConfigurationArgs{\n\t\t\t\tInsightsEnabled:      pulumi.Bool(false),\n\t\t\t\tNotificationsEnabled: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myGroupResource = new aws_native.xray.Group(\"myGroupResource\", {\n    groupName: \"MyGroup\",\n    filterExpression: \"duration \u003e 10\",\n    insightsConfiguration: {\n        insightsEnabled: false,\n        notificationsEnabled: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_group_resource = aws_native.xray.Group(\"myGroupResource\",\n    group_name=\"MyGroup\",\n    filter_expression=\"duration \u003e 10\",\n    insights_configuration={\n        \"insights_enabled\": False,\n        \"notifications_enabled\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myGroupResource = new AwsNative.XRay.Group(\"myGroupResource\", new()\n    {\n        GroupName = \"MyGroup\",\n        FilterExpression = \"duration \u003e 10\",\n        InsightsConfiguration = new AwsNative.XRay.Inputs.GroupInsightsConfigurationArgs\n        {\n            InsightsEnabled = false,\n            NotificationsEnabled = false,\n        },\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/xray\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := xray.NewGroup(ctx, \"myGroupResource\", \u0026xray.GroupArgs{\n\t\t\tGroupName:        pulumi.String(\"MyGroup\"),\n\t\t\tFilterExpression: pulumi.String(\"duration \u003e 10\"),\n\t\t\tInsightsConfiguration: \u0026xray.GroupInsightsConfigurationArgs{\n\t\t\t\tInsightsEnabled:      pulumi.Bool(false),\n\t\t\t\tNotificationsEnabled: pulumi.Bool(false),\n\t\t\t},\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myGroupResource = new aws_native.xray.Group(\"myGroupResource\", {\n    groupName: \"MyGroup\",\n    filterExpression: \"duration \u003e 10\",\n    insightsConfiguration: {\n        insightsEnabled: false,\n        notificationsEnabled: false,\n    },\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_group_resource = aws_native.xray.Group(\"myGroupResource\",\n    group_name=\"MyGroup\",\n    filter_expression=\"duration \u003e 10\",\n    insights_configuration={\n        \"insights_enabled\": False,\n        \"notifications_enabled\": False,\n    })\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"filterExpression":{"type":"string","description":"The filter expression defining criteria by which to group traces."},"groupArn":{"type":"string","description":"The ARN of the group that was generated on creation."},"groupName":{"type":"string","description":"The case-sensitive name of the new group. Names must be unique."},"insightsConfiguration":{"$ref":"#/types/aws-native:xray:GroupInsightsConfiguration","description":"The structure containing configurations related to insights.\n\n- The InsightsEnabled boolean can be set to true to enable insights for the group or false to disable insights for the group.\n- The NotificationsEnabled boolean can be set to true to enable insights notifications through Amazon EventBridge for the group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["groupArn","groupName"],"inputProperties":{"filterExpression":{"type":"string","description":"The filter expression defining criteria by which to group traces."},"groupName":{"type":"string","description":"The case-sensitive name of the new group. Names must be unique."},"insightsConfiguration":{"$ref":"#/types/aws-native:xray:GroupInsightsConfiguration","description":"The structure containing configurations related to insights.\n\n- The InsightsEnabled boolean can be set to true to enable insights for the group or false to disable insights for the group.\n- The NotificationsEnabled boolean can be set to true to enable insights notifications through Amazon EventBridge for the group."},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:xray:ResourcePolicy":{"description":"This schema provides construct and validation rules for AWS-XRay Resource Policy resource parameters.\n\n{{% examples %}}\n## Example Usage\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myResourcePolicy = new AwsNative.XRay.ResourcePolicy(\"myResourcePolicy\", new()\n    {\n        BypassPolicyLockoutCheck = false,\n        PolicyDocument = \"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\",\n        PolicyName = \"MySnsActiveTracingPolicy\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/xray\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := xray.NewResourcePolicy(ctx, \"myResourcePolicy\", \u0026xray.ResourcePolicyArgs{\n\t\t\tBypassPolicyLockoutCheck: pulumi.Bool(false),\n\t\t\tPolicyDocument:           pulumi.String(\"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\"),\n\t\t\tPolicyName:               pulumi.String(\"MySnsActiveTracingPolicy\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myResourcePolicy = new aws_native.xray.ResourcePolicy(\"myResourcePolicy\", {\n    bypassPolicyLockoutCheck: false,\n    policyDocument: \"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\",\n    policyName: \"MySnsActiveTracingPolicy\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_resource_policy = aws_native.xray.ResourcePolicy(\"myResourcePolicy\",\n    bypass_policy_lockout_check=False,\n    policy_document=\"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\",\n    policy_name=\"MySnsActiveTracingPolicy\")\n\n```\n\n{{% /example %}}\n{{% example %}}\n### Example\n```csharp\nusing System.Collections.Generic;\nusing System.Linq;\nusing Pulumi;\nusing AwsNative = Pulumi.AwsNative;\n\nreturn await Deployment.RunAsync(() =\u003e \n{\n    var myResourcePolicy = new AwsNative.XRay.ResourcePolicy(\"myResourcePolicy\", new()\n    {\n        BypassPolicyLockoutCheck = false,\n        PolicyDocument = \"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\",\n        PolicyName = \"MySNSActiveTracingPolicy\",\n    });\n\n});\n\n\n```\n\n```go\npackage main\n\nimport (\n\t\"github.com/pulumi/pulumi-aws-native/sdk/go/aws/xray\"\n\t\"github.com/pulumi/pulumi/sdk/v3/go/pulumi\"\n)\n\nfunc main() {\n\tpulumi.Run(func(ctx *pulumi.Context) error {\n\t\t_, err := xray.NewResourcePolicy(ctx, \"myResourcePolicy\", \u0026xray.ResourcePolicyArgs{\n\t\t\tBypassPolicyLockoutCheck: pulumi.Bool(false),\n\t\t\tPolicyDocument:           pulumi.String(\"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\"),\n\t\t\tPolicyName:               pulumi.String(\"MySNSActiveTracingPolicy\"),\n\t\t})\n\t\tif err != nil {\n\t\t\treturn err\n\t\t}\n\t\treturn nil\n\t})\n}\n\n```\n\n```typescript\nimport * as pulumi from \"@pulumi/pulumi\";\nimport * as aws_native from \"@pulumi/aws-native\";\n\nconst myResourcePolicy = new aws_native.xray.ResourcePolicy(\"myResourcePolicy\", {\n    bypassPolicyLockoutCheck: false,\n    policyDocument: \"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\",\n    policyName: \"MySNSActiveTracingPolicy\",\n});\n\n```\n\n```python\nimport pulumi\nimport pulumi_aws_native as aws_native\n\nmy_resource_policy = aws_native.xray.ResourcePolicy(\"myResourcePolicy\",\n    bypass_policy_lockout_check=False,\n    policy_document=\"{ \\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [ { \\\"Sid\\\": \\\"SNSAccess\\\", \\\"Effect\\\": \\\"Allow\\\", \\\"Principal\\\": { \\\"Service\\\": \\\"sns.amazonaws.com\\\" }, \\\"Action\\\": [ \\\"xray:PutTraceSegments\\\", \\\"xray:GetSamplingRules\\\", \\\"xray:GetSamplingTargets\\\" ], \\\"Resource\\\": \\\"*\\\", \\\"Condition\\\": { \\\"StringEquals\\\": { \\\"aws:SourceAccount\\\": \\\"my-account-id\\\" }, \\\"StringLike\\\": { \\\"aws:SourceArn\\\": \\\"arn:$my-partition:sns:$my-region:$my-account-id:my-topic-name\\\" } } } ] }\",\n    policy_name=\"MySNSActiveTracingPolicy\")\n\n```\n\n{{% /example %}}\n{{% /examples %}}\n","properties":{"bypassPolicyLockoutCheck":{"type":"boolean","description":"A flag to indicate whether to bypass the resource policy lockout safety check"},"policyDocument":{"type":"string","description":"The resource policy document, which can be up to 5kb in size."},"policyName":{"type":"string","description":"The name of the resource policy. Must be unique within a specific AWS account.","replaceOnChanges":true}},"type":"object","required":["policyDocument","policyName"],"inputProperties":{"bypassPolicyLockoutCheck":{"type":"boolean","description":"A flag to indicate whether to bypass the resource policy lockout safety check"},"policyDocument":{"type":"string","description":"The resource policy document, which can be up to 5kb in size."},"policyName":{"type":"string","description":"The name of the resource policy. Must be unique within a specific AWS account."}},"requiredInputs":["policyDocument"]},"aws-native:xray:SamplingRule":{"description":"This schema provides construct and validation rules for AWS-XRay SamplingRule resource parameters.","properties":{"ruleArn":{"type":"string","description":"The sampling rule ARN that was created or updated."},"ruleName":{"type":"string"},"samplingRule":{"$ref":"#/types/aws-native:xray:SamplingRule","description":"The sampling rule to be created or updated.","language":{"csharp":{"name":"SamplingRuleValue"}}},"samplingRuleRecord":{"$ref":"#/types/aws-native:xray:SamplingRuleRecord"},"samplingRuleUpdate":{"$ref":"#/types/aws-native:xray:SamplingRuleUpdate"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}},"type":"object","required":["ruleArn"],"inputProperties":{"ruleName":{"type":"string"},"samplingRule":{"$ref":"#/types/aws-native:xray:SamplingRule","description":"The sampling rule to be created or updated.","language":{"csharp":{"name":"SamplingRuleValue"}}},"samplingRuleRecord":{"$ref":"#/types/aws-native:xray:SamplingRuleRecord"},"samplingRuleUpdate":{"$ref":"#/types/aws-native:xray:SamplingRuleUpdate"},"tags":{"type":"array","items":{"$ref":"#/types/aws-native:index:Tag"},"description":"An array of key-value pairs to apply to this resource."}}},"aws-native:xray:TransactionSearchConfig":{"description":"This schema provides construct and validation rules for AWS-XRay TransactionSearchConfig resource parameters.","properties":{"accountId":{"type":"string"},"indexingPercentage":{"type":"number"}},"type":"object","required":["accountId"],"inputProperties":{"indexingPercentage":{"type":"number"}}}},"functions":{"aws-native:accessanalyzer:getAnalyzer":{"description":"The AWS::AccessAnalyzer::Analyzer type specifies an analyzer of the user's account","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the analyzer"}},"required":["arn"]},"outputs":{"properties":{"analyzerConfiguration":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerConfigurationProperties","description":"The configuration for the analyzer"},"archiveRules":{"description":"Specifies the archive rules to add for the analyzer. Archive rules automatically archive findings that meet the criteria you define for the rule.","items":{"$ref":"#/types/aws-native:accessanalyzer:AnalyzerArchiveRule"},"type":"array"},"arn":{"description":"Amazon Resource Name (ARN) of the analyzer","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:acmpca:getCertificate":{"description":"The ``AWS::ACMPCA::Certificate`` resource is used to issue a certificate using your private certificate authority. For more information, see the [IssueCertificate](https://docs.aws.amazon.com/privateca/latest/APIReference/API_IssueCertificate.html) action.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the issued certificate."},"certificateAuthorityArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the private CA issues the certificate."}},"required":["arn","certificateAuthorityArn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the issued certificate.","type":"string"},"certificate":{"description":"The issued Base64 PEM-encoded certificate.","language":{"csharp":{"name":"CertificateValue"}},"type":"string"}}}},"aws-native:acmpca:getCertificateAuthority":{"description":"Private certificate authority.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the certificate authority."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the certificate authority.","type":"string"},"certificateSigningRequest":{"description":"The base64 PEM-encoded certificate signing request (CSR) for your certificate authority certificate.","type":"string"},"tags":{"description":"Key-value pairs that will be attached to the new private CA. You can associate up to 50 tags with a private CA. For information using tags with IAM to manage permissions, see [Controlling Access Using IAM Tags](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_iam-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:acmpca:getCertificateAuthorityActivation":{"description":"Used to install the certificate authority certificate and update the certificate authority status.","inputs":{"properties":{"certificateAuthorityArn":{"type":"string","description":"Arn of the Certificate Authority."}},"required":["certificateAuthorityArn"]},"outputs":{"properties":{"completeCertificateChain":{"description":"The complete certificate chain, including the Certificate Authority certificate.","type":"string"},"status":{"description":"The status of the Certificate Authority.","type":"string"}}}},"aws-native:aiops:getInvestigationGroup":{"description":"Definition of AWS::AIOps::InvestigationGroup Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the investigation group."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the investigation group.","type":"string"},"chatbotNotificationChannels":{"description":"An array of key-value pairs of notification channels to apply to this resource.","items":{"$ref":"#/types/aws-native:aiops:InvestigationGroupChatbotNotificationChannel"},"type":"array"},"createdAt":{"description":"The date and time that the investigation group was created.","type":"string"},"createdBy":{"description":"The name of the user who created the investigation group.","type":"string"},"crossAccountConfigurations":{"description":"An array of cross account configurations.","items":{"$ref":"#/types/aws-native:aiops:InvestigationGroupCrossAccountConfiguration"},"type":"array"},"encryptionConfig":{"$ref":"#/types/aws-native:aiops:InvestigationGroupEncryptionConfigMap","description":"Specifies the customer managed AWS  key that the investigation group uses to encrypt data, if there is one. If not, the investigation group uses an AWS key to encrypt the data."},"investigationGroupPolicy":{"description":"Investigation Group policy","type":"string"},"isCloudTrailEventHistoryEnabled":{"description":"Flag to enable cloud trail history","type":"boolean"},"lastModifiedAt":{"description":"The date and time that the investigation group was most recently modified.","type":"string"},"lastModifiedBy":{"description":"The name of the user who created the investigation group.","type":"string"},"roleArn":{"description":"The ARN of the IAM role that the investigation group uses for permissions to gather data.","type":"string"},"tagKeyBoundaries":{"description":"Displays the custom tag keys for custom applications in your system that you have specified in the investigation group. Resource tags help CloudWatch investigations narrow the search space when it is unable to discover definite relationships between resources.","items":{"type":"string"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:amazonmq:getBroker":{"description":"Resource type definition for AWS::AmazonMQ::Broker","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"amqpEndpoints":{"description":"The AMQP endpoints of each broker instance as a list of strings.\n\n`amqp+ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:5671`","items":{"type":"string"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the Amazon MQ broker.\n\n`arn:aws:mq:us-east-2:123456789012:broker:MyBroker:b-1234a5b6-78cd-901e-2fgh-3i45j6k178l9`","type":"string"},"autoMinorVersionUpgrade":{"description":"Enables automatic upgrades to new patch versions for brokers as new versions are released and supported by Amazon MQ. Automatic upgrades occur during the scheduled maintenance window or after a manual broker reboot. Set to `true` by default, if no value is specified.\n\n\u003e Must be set to `true` for ActiveMQ brokers version 5.18 and above and for RabbitMQ brokers version 3.13 and above.","type":"boolean"},"configurationId":{"description":"The ID of the current actual configuration.","type":"string"},"configurationRevision":{"description":"The revision of the current actual configuration.","type":"string"},"consoleUrls":{"items":{"type":"string"},"type":"array"},"dataReplicationMode":{"description":"Defines whether this broker is a part of a data replication pair.","oneOf":[{"$ref":"#/types/aws-native:amazonmq:BrokerDataReplicationMode"},{"type":"string"}]},"engineVersionCurrent":{"description":"The version in use. This may have more precision than the specified EngineVersion.","type":"string"},"hostInstanceType":{"description":"Required. The broker's instance type.","type":"string"},"id":{"type":"string"},"ipAddresses":{"description":"The IP addresses of each broker instance as a list of strings. Does not apply to RabbitMQ brokers.\n\n`['198.51.100.2', '203.0.113.9']`","items":{"type":"string"},"type":"array"},"ldapServerMetadata":{"$ref":"#/types/aws-native:amazonmq:BrokerLdapServerMetadata","description":"Optional. The metadata of the LDAP server used to authenticate and authorize connections to the broker. Does not apply to RabbitMQ brokers."},"logs":{"$ref":"#/types/aws-native:amazonmq:BrokerLogList","description":"Enables Amazon CloudWatch logging for brokers."},"maintenanceWindowStartTime":{"$ref":"#/types/aws-native:amazonmq:BrokerMaintenanceWindow","description":"The parameters that determine the WeeklyStartTime."},"mqttEndpoints":{"description":"The MQTT endpoints of each broker instance as a list of strings.\n\n`mqtt+ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:8883`","items":{"type":"string"},"type":"array"},"openWireEndpoints":{"description":"The OpenWire endpoints of each broker instance as a list of strings.\n\n`ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:61617`","items":{"type":"string"},"type":"array"},"securityGroups":{"description":"The list of rules (1 minimum, 125 maximum) that authorize connections to brokers.","items":{"type":"string"},"type":"array"},"stompEndpoints":{"description":"The STOMP endpoints of each broker instance as a list of strings.\n\n`stomp+ssl://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:61614`","items":{"type":"string"},"type":"array"},"tags":{"description":"Create tags when creating the broker.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"wssEndpoints":{"description":"The WSS endpoints of each broker instance as a list of strings.\n\n`wss://b-4aada85d-a80c-4be0-9d30-e344a01b921e-1.mq.eu-central-amazonaws.com:61619`","items":{"type":"string"},"type":"array"}}}},"aws-native:amazonmq:getConfiguration":{"description":"Resource Type definition for AWS::AmazonMQ::Configuration","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Amazon MQ configuration."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Amazon MQ configuration.","type":"string"},"description":{"description":"The description of the configuration.","type":"string"},"id":{"description":"The ID of the Amazon MQ configuration.","type":"string"},"revision":{"description":"The revision number of the configuration.","type":"string"},"tags":{"description":"Create tags when creating the configuration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:amplify:getApp":{"description":"The AWS::Amplify::App resource creates Apps in the Amplify Console. An App is a collection of branches.","inputs":{"properties":{"arn":{"type":"string","description":"ARN for the Amplify App."}},"required":["arn"]},"outputs":{"properties":{"appId":{"description":"Unique Id for the Amplify App.","type":"string"},"appName":{"description":"Name for the Amplify App.","type":"string"},"arn":{"description":"ARN for the Amplify App.","type":"string"},"buildSpec":{"description":"The build specification (build spec) for an Amplify app.","type":"string"},"cacheConfig":{"$ref":"#/types/aws-native:amplify:AppCacheConfig","description":"The cache configuration for the Amplify app. If you don't specify the cache configuration `type` , Amplify uses the default `AMPLIFY_MANAGED` setting."},"computeRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role for an SSR app. The Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the *Amplify User Guide* .","type":"string"},"customHeaders":{"description":"The custom HTTP headers for an Amplify app.","type":"string"},"customRules":{"description":"The custom rewrite and redirect rules for an Amplify app.","items":{"$ref":"#/types/aws-native:amplify:AppCustomRule"},"type":"array"},"defaultDomain":{"description":"Default domain for the Amplify App.","type":"string"},"description":{"description":"The description of the Amplify app.","type":"string"},"enableBranchAutoDeletion":{"description":"Automatically disconnect a branch in Amplify Hosting when you delete a branch from your Git repository.","type":"boolean"},"environmentVariables":{"description":"The environment variables for the Amplify app.\n\nFor a list of the environment variables that are accessible to Amplify by default, see [Amplify Environment variables](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-console-environment-variables.html) in the *Amplify Hosting User Guide* .","items":{"$ref":"#/types/aws-native:amplify:AppEnvironmentVariable"},"type":"array"},"iamServiceRole":{"description":"AWS Identity and Access Management ( IAM ) service role for the Amazon Resource Name (ARN) of the Amplify app.","type":"string"},"jobConfig":{"$ref":"#/types/aws-native:amplify:AppJobConfig","description":"The configuration details that apply to the jobs for an Amplify app."},"name":{"description":"The name of the Amplify app.","type":"string"},"platform":{"$ref":"#/types/aws-native:amplify:AppPlatform","description":"The platform for the Amplify app. For a static app, set the platform type to `WEB` . For a dynamic server-side rendered (SSR) app, set the platform type to `WEB_COMPUTE` . For an app requiring Amplify Hosting's original SSR support only, set the platform type to `WEB_DYNAMIC` .\n\nIf you are deploying an SSG only app with Next.js version 14 or later, you must set the platform type to `WEB_COMPUTE` and set the artifacts `baseDirectory` to `.next` in the application's build settings. For an example of the build specification settings, see [Amplify build settings for a Next.js 14 SSG application](https://docs.aws.amazon.com/amplify/latest/userguide/deploy-nextjs-app.html#build-setting-detection-ssg-14) in the *Amplify Hosting User Guide* ."},"repository":{"description":"The Git repository for the Amplify app.","type":"string"},"tags":{"description":"The tag for an Amplify app.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:amplify:getBranch":{"description":"The AWS::Amplify::Branch resource creates a new branch within an app.","inputs":{"properties":{"arn":{"type":"string","description":"ARN for a branch, part of an Amplify App."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"ARN for a branch, part of an Amplify App.","type":"string"},"backend":{"$ref":"#/types/aws-native:amplify:BranchBackend","description":"The backend for a `Branch` of an Amplify app. Use for a backend created from an CloudFormation stack.\n\nThis field is available to Amplify Gen 2 apps only. When you deploy an application with Amplify Gen 2, you provision the app's backend infrastructure using Typescript code."},"buildSpec":{"description":"The build specification (build spec) for the branch.","type":"string"},"computeRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role to assign to a branch of an SSR app. The SSR Compute role allows the Amplify Hosting compute service to securely access specific AWS resources based on the role's permissions. For more information about the SSR Compute role, see [Adding an SSR Compute role](https://docs.aws.amazon.com/amplify/latest/userguide/amplify-SSR-compute-role.html) in the *Amplify User Guide* .","type":"string"},"description":{"description":"The description for the branch that is part of an Amplify app.","type":"string"},"enableAutoBuild":{"description":"Enables auto building for the branch.","type":"boolean"},"enablePerformanceMode":{"description":"Enables performance mode for the branch.\n\nPerformance mode optimizes for faster hosting performance by keeping content cached at the edge for a longer interval. When performance mode is enabled, hosting configuration or code changes can take up to 10 minutes to roll out.","type":"boolean"},"enablePullRequestPreview":{"description":"Specifies whether Amplify Hosting creates a preview for each pull request that is made for this branch. If this property is enabled, Amplify deploys your app to a unique preview URL after each pull request is opened. Development and QA teams can use this preview to test the pull request before it's merged into a production or integration branch.\n\nTo provide backend support for your preview, Amplify automatically provisions a temporary backend environment that it deletes when the pull request is closed. If you want to specify a dedicated backend environment for your previews, use the `PullRequestEnvironmentName` property.\n\nFor more information, see [Web Previews](https://docs.aws.amazon.com/amplify/latest/userguide/pr-previews.html) in the *AWS Amplify Hosting User Guide* .","type":"boolean"},"enableSkewProtection":{"description":"Specifies whether the skew protection feature is enabled for the branch.\n\nDeployment skew protection is available to Amplify applications to eliminate version skew issues between client and servers in web applications. When you apply skew protection to a branch, you can ensure that your clients always interact with the correct version of server-side assets, regardless of when a deployment occurs. For more information about skew protection, see [Skew protection for Amplify deployments](https://docs.aws.amazon.com/amplify/latest/userguide/skew-protection.html) in the *Amplify User Guide* .","type":"boolean"},"environmentVariables":{"description":"The environment variables for the branch.","items":{"$ref":"#/types/aws-native:amplify:BranchEnvironmentVariable"},"type":"array"},"framework":{"description":"The framework for the branch.","type":"string"},"pullRequestEnvironmentName":{"description":"If pull request previews are enabled for this branch, you can use this property to specify a dedicated backend environment for your previews. For example, you could specify an environment named `prod` , `test` , or `dev` that you initialized with the Amplify CLI and mapped to this branch.\n\nTo enable pull request previews, set the `EnablePullRequestPreview` property to `true` .\n\nIf you don't specify an environment, Amplify Hosting provides backend support for each preview by automatically provisioning a temporary backend environment. Amplify Hosting deletes this environment when the pull request is closed.\n\nFor more information about creating backend environments, see [Feature Branch Deployments and Team Workflows](https://docs.aws.amazon.com/amplify/latest/userguide/multi-environments.html) in the *AWS Amplify Hosting User Guide* .","type":"string"},"stage":{"$ref":"#/types/aws-native:amplify:BranchStage","description":"Describes the current stage for the branch."},"tags":{"description":"The tag for the branch.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:amplify:getDomain":{"description":"The AWS::Amplify::Domain resource allows you to connect a custom domain to your app.","inputs":{"properties":{"arn":{"type":"string","description":"ARN for the Domain Association."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"ARN for the Domain Association.","type":"string"},"autoSubDomainCreationPatterns":{"description":"Sets the branch patterns for automatic subdomain creation.","items":{"type":"string"},"type":"array"},"autoSubDomainIamRole":{"description":"The required AWS Identity and Access Management (IAMlong) service role for the Amazon Resource Name (ARN) for automatically creating subdomains.","type":"string"},"certificate":{"$ref":"#/types/aws-native:amplify:DomainCertificate"},"certificateRecord":{"description":"DNS Record for certificate verification.","type":"string"},"domainStatus":{"description":"Status for the Domain Association.","type":"string"},"enableAutoSubDomain":{"description":"Enables the automated creation of subdomains for branches.","type":"boolean"},"statusReason":{"description":"Reason for the current status of the domain.","type":"string"},"subDomainSettings":{"description":"The setting for the subdomain.","items":{"$ref":"#/types/aws-native:amplify:DomainSubDomainSetting"},"type":"array"},"updateStatus":{"description":"The status of the domain update operation that is currently in progress. The following list describes the valid update states.\n\n- **REQUESTING_CERTIFICATE** - The certificate is in the process of being updated.\n- **PENDING_VERIFICATION** - Indicates that an Amplify managed certificate is in the process of being verified. This occurs during the creation of a custom domain or when a custom domain is updated to use a managed certificate.\n- **IMPORTING_CUSTOM_CERTIFICATE** - Indicates that an Amplify custom certificate is in the process of being imported. This occurs during the creation of a custom domain or when a custom domain is updated to use a custom certificate.\n- **PENDING_DEPLOYMENT** - Indicates that the subdomain or certificate changes are being propagated.\n- **AWAITING_APP_CNAME** - Amplify is waiting for CNAME records corresponding to subdomains to be propagated. If your custom domain is on Route 53, Amplify handles this for you automatically. For more information about custom domains, see [Setting up custom domains](https://docs.aws.amazon.com/amplify/latest/userguide/custom-domains.html) in the *Amplify Hosting User Guide* .\n- **UPDATE_COMPLETE** - The certificate has been associated with a domain.\n- **UPDATE_FAILED** - The certificate has failed to be provisioned or associated, and there is no existing active certificate to roll back to.","type":"string"}}}},"aws-native:amplifyuibuilder:getComponent":{"description":"Definition of AWS::AmplifyUIBuilder::Component Resource Type","inputs":{"properties":{"appId":{"type":"string","description":"The unique ID of the Amplify app associated with the component."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app."},"id":{"type":"string","description":"The unique ID of the component."}},"required":["appId","environmentName","id"]},"outputs":{"properties":{"bindingProperties":{"additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentBindingPropertiesValue"},"description":"The information to connect a component's properties to data at runtime. You can't specify `tags` as a valid property for `bindingProperties` .","type":"object"},"children":{"description":"A list of the component's `ComponentChild` instances.","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentChild"},"type":"array"},"collectionProperties":{"additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentDataConfiguration"},"description":"The data binding configuration for the component's properties. Use this for a collection component. You can't specify `tags` as a valid property for `collectionProperties` .","type":"object"},"componentType":{"description":"The type of the component. This can be an Amplify custom UI component or another custom component.","type":"string"},"createdAt":{"description":"The time that the component was created.","type":"string"},"events":{"additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentEvent"},"description":"Describes the events that can be raised on the component. Use for the workflow feature in Amplify Studio that allows you to bind events and actions to components.","type":"object"},"id":{"description":"The unique ID of the component.","type":"string"},"modifiedAt":{"description":"The time that the component was modified.","type":"string"},"name":{"description":"The name of the component.","type":"string"},"overrides":{"additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"Describes the component's properties that can be overriden in a customized instance of the component. You can't specify `tags` as a valid property for `overrides` .","type":"object"},"properties":{"additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentProperty"},"description":"Describes the component's properties. You can't specify `tags` as a valid property for `properties` .","type":"object"},"schemaVersion":{"description":"The schema version of the component when it was imported.","type":"string"},"sourceId":{"description":"The unique ID of the component in its original source system, such as Figma.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the component.","type":"object"},"variants":{"description":"A list of the component's variants. A variant is a unique style configuration of a main component.","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ComponentVariant"},"type":"array"}}}},"aws-native:amplifyuibuilder:getForm":{"description":"Definition of AWS::AmplifyUIBuilder::Form Resource Type","inputs":{"properties":{"appId":{"type":"string","description":"The unique ID of the Amplify app associated with the form."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app."},"id":{"type":"string","description":"The ID for the form."}},"required":["appId","environmentName","id"]},"outputs":{"properties":{"cta":{"$ref":"#/types/aws-native:amplifyuibuilder:FormCta","description":"The `FormCTA` object that stores the call to action configuration for the form."},"dataType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormDataTypeConfig","description":"The type of data source to use to create the form."},"fields":{"additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormFieldConfig"},"description":"The configuration information for the form's fields.","type":"object"},"formActionType":{"$ref":"#/types/aws-native:amplifyuibuilder:FormActionType","description":"Specifies whether to perform a create or update action on the form."},"id":{"description":"The ID for the form.","type":"string"},"labelDecorator":{"$ref":"#/types/aws-native:amplifyuibuilder:FormLabelDecorator","description":"Specifies an icon or decoration to display on the form."},"name":{"description":"The name of the form.","type":"string"},"schemaVersion":{"description":"The schema version of the form.","type":"string"},"sectionalElements":{"additionalProperties":{"$ref":"#/types/aws-native:amplifyuibuilder:FormSectionalElement"},"description":"The configuration information for the visual helper elements for the form. These elements are not associated with any data.","type":"object"},"style":{"$ref":"#/types/aws-native:amplifyuibuilder:FormStyle","description":"The configuration for the form's style."},"tags":{"additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the form data.","type":"object"}}}},"aws-native:amplifyuibuilder:getTheme":{"description":"Definition of AWS::AmplifyUIBuilder::Theme Resource Type","inputs":{"properties":{"appId":{"type":"string","description":"The unique ID for the Amplify app associated with the theme."},"environmentName":{"type":"string","description":"The name of the backend environment that is a part of the Amplify app."},"id":{"type":"string","description":"The ID for the theme."}},"required":["appId","environmentName","id"]},"outputs":{"properties":{"createdAt":{"description":"The time that the theme was created.","type":"string"},"id":{"description":"The ID for the theme.","type":"string"},"modifiedAt":{"description":"The time that the theme was modified.","type":"string"},"name":{"description":"The name of the theme.","type":"string"},"overrides":{"description":"Describes the properties that can be overriden to customize a theme.","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"One or more key-value pairs to use when tagging the theme.","type":"object"},"values":{"description":"A list of key-value pairs that defines the properties of the theme.","items":{"$ref":"#/types/aws-native:amplifyuibuilder:ThemeValues"},"type":"array"}}}},"aws-native:apigateway:getAccount":{"description":"The ``AWS::ApiGateway::Account`` resource specifies the IAM role that Amazon API Gateway uses to write API logs to Amazon CloudWatch Logs. To avoid overwriting other roles, you should only have one ``AWS::ApiGateway::Account`` resource per region per account. \n When you delete a stack containing this resource, API Gateway can still assume the provided IAM role to write API logs to CloudWatch Logs. To deny API Gateway access to write API logs to CloudWatch logs, update the permissions policies or change the IAM role to deny access.","inputs":{"properties":{"id":{"type":"string","description":"The ID for the account. For example: `abc123` ."}},"required":["id"]},"outputs":{"properties":{"cloudWatchRoleArn":{"description":"The ARN of an Amazon CloudWatch role for the current Account.","type":"string"},"id":{"description":"The ID for the account. For example: `abc123` .","type":"string"}}}},"aws-native:apigateway:getApiKey":{"description":"The ``AWS::ApiGateway::ApiKey`` resource creates a unique key that you can distribute to clients who are executing API Gateway ``Method`` resources that require an API key. To specify which API key clients must use, map the API key with the ``RestApi`` and ``Stage`` resources that include the methods that require a key.","inputs":{"properties":{"apiKeyId":{"type":"string","description":"The ID for the API key. For example: `abc123` ."}},"required":["apiKeyId"]},"outputs":{"properties":{"apiKeyId":{"description":"The ID for the API key. For example: `abc123` .","type":"string"},"customerId":{"description":"An AWS Marketplace customer identifier, when integrating with the AWS SaaS Marketplace.","type":"string"},"description":{"description":"The description of the ApiKey.","type":"string"},"enabled":{"description":"Specifies whether the ApiKey can be used by callers.","type":"boolean"},"stageKeys":{"description":"DEPRECATED FOR USAGE PLANS - Specifies stages associated with the API key.","items":{"$ref":"#/types/aws-native:apigateway:ApiKeyStageKey"},"type":"array"},"tags":{"description":"The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with `aws:` . The tag value can be up to 256 characters.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:apigateway:getAuthorizer":{"description":"The ``AWS::ApiGateway::Authorizer`` resource creates an authorization layer that API Gateway activates for methods that have authorization enabled. API Gateway activates the authorizer when a client calls those methods.","inputs":{"properties":{"authorizerId":{"type":"string","description":"The ID for the authorizer. For example: `abc123` ."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["restApiId","authorizerId"]},"outputs":{"properties":{"authType":{"description":"Optional customer-defined field, used in OpenAPI imports and exports without functional impact.","type":"string"},"authorizerCredentials":{"description":"Specifies the required credentials as an IAM role for API Gateway to invoke the authorizer. To specify an IAM role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To use resource-based permissions on the Lambda function, specify null.","type":"string"},"authorizerId":{"description":"The ID for the authorizer. For example: `abc123` .","type":"string"},"authorizerResultTtlInSeconds":{"description":"The TTL in seconds of cached authorizer results. If it equals 0, authorization caching is disabled. If it is greater than 0, API Gateway will cache authorizer responses. If this field is not set, the default value is 300. The maximum value is 3600, or 1 hour.","type":"integer"},"authorizerUri":{"description":"Specifies the authorizer's Uniform Resource Identifier (URI). For `TOKEN` or `REQUEST` authorizers, this must be a well-formed Lambda function URI, for example, `arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:{account_id}:function:{lambda_function_name}/invocations` . In general, the URI has this form `arn:aws:apigateway:{region}:lambda:path/{service_api}` , where `{region}` is the same as the region hosting the Lambda function, `path` indicates that the remaining substring in the URI should be treated as the path to the resource, including the initial `/` . For Lambda functions, this is usually of the form `/2015-03-31/functions/[FunctionARN]/invocations` .","type":"string"},"identitySource":{"description":"The identity source for which authorization is requested. For a `TOKEN` or `COGNITO_USER_POOLS` authorizer, this is required and specifies the request header mapping expression for the custom header holding the authorization token submitted by the client. For example, if the token header name is `Auth` , the header mapping expression is `method.request.header.Auth` . For the `REQUEST` authorizer, this is required when authorization caching is enabled. The value is a comma-separated string of one or more mapping expressions of the specified request parameters. For example, if an `Auth` header, a `Name` query string parameter are defined as identity sources, this value is `method.request.header.Auth, method.request.querystring.Name` . These parameters will be used to derive the authorization caching key and to perform runtime validation of the `REQUEST` authorizer by verifying all of the identity-related request parameters are present, not null and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function, otherwise, it returns a 401 Unauthorized response without calling the Lambda function. The valid value is a string of comma-separated mapping expressions of the specified request parameters. When the authorization caching is not enabled, this property is optional.","type":"string"},"identityValidationExpression":{"description":"A validation expression for the incoming identity token. For `TOKEN` authorizers, this value is a regular expression. For `COGNITO_USER_POOLS` authorizers, API Gateway will match the `aud` field of the incoming token from the client against the specified regular expression. It will invoke the authorizer's Lambda function when there is a match. Otherwise, it will return a 401 Unauthorized response without calling the Lambda function. The validation expression does not apply to the `REQUEST` authorizer.","type":"string"},"name":{"description":"The name of the authorizer.","type":"string"},"providerArns":{"description":"A list of the Amazon Cognito user pool ARNs for the `COGNITO_USER_POOLS` authorizer. Each element is of this format: `arn:aws:cognito-idp:{region}:{account_id}:userpool/{user_pool_id}` . For a `TOKEN` or `REQUEST` authorizer, this is not defined.","items":{"type":"string"},"type":"array"},"type":{"description":"The authorizer type. Valid values are `TOKEN` for a Lambda function using a single authorization token submitted in a custom header, `REQUEST` for a Lambda function using incoming request parameters, and `COGNITO_USER_POOLS` for using an Amazon Cognito user pool.","type":"string"}}}},"aws-native:apigateway:getBasePathMapping":{"description":"The ``AWS::ApiGateway::BasePathMapping`` resource creates a base path that clients who call your API must use in the invocation URL. Supported only for public custom domain names.","inputs":{"properties":{"basePath":{"type":"string","description":"The base path name that callers of the API must provide as part of the URL after the domain name."},"domainName":{"type":"string","description":"The domain name of the BasePathMapping resource to be described."}},"required":["domainName","basePath"]},"outputs":{"properties":{"restApiId":{"description":"The string identifier of the associated RestApi.","type":"string"},"stage":{"description":"The name of the associated stage.","type":"string"}}}},"aws-native:apigateway:getBasePathMappingV2":{"description":"Resource Type definition for AWS::ApiGateway::BasePathMappingV2","inputs":{"properties":{"basePathMappingArn":{"type":"string","description":"Amazon Resource Name (ARN) of the resource."}},"required":["basePathMappingArn"]},"outputs":{"properties":{"basePathMappingArn":{"description":"Amazon Resource Name (ARN) of the resource.","type":"string"},"restApiId":{"description":"The ID of the API.","type":"string"},"stage":{"description":"The name of the API's stage.","type":"string"}}}},"aws-native:apigateway:getClientCertificate":{"description":"The ``AWS::ApiGateway::ClientCertificate`` resource creates a client certificate that API Gateway uses to configure client-side SSL authentication for sending requests to the integration endpoint.","inputs":{"properties":{"clientCertificateId":{"type":"string","description":"The ID for the client certificate. For example: `abc123` ."}},"required":["clientCertificateId"]},"outputs":{"properties":{"clientCertificateId":{"description":"The ID for the client certificate. For example: `abc123` .","type":"string"},"description":{"description":"The description of the client certificate.","type":"string"},"tags":{"description":"The collection of tags. Each tag element is associated with a given resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:apigateway:getDeployment":{"description":"The ``AWS::ApiGateway::Deployment`` resource deploys an API Gateway ``RestApi`` resource to a stage so that clients can call the API over the internet. The stage acts as an environment.","inputs":{"properties":{"deploymentId":{"type":"string","description":"The ID for the deployment. For example: `abc123` ."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["deploymentId","restApiId"]},"outputs":{"properties":{"deploymentId":{"description":"The ID for the deployment. For example: `abc123` .","type":"string"},"description":{"description":"The description for the Deployment resource to create.","type":"string"}}}},"aws-native:apigateway:getDocumentationPart":{"description":"The ``AWS::ApiGateway::DocumentationPart`` resource creates a documentation part for an API. For more information, see [Representation of API Documentation in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-documenting-api-content-representation.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"documentationPartId":{"type":"string","description":"The ID for the documentation part."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["documentationPartId","restApiId"]},"outputs":{"properties":{"documentationPartId":{"description":"The ID for the documentation part.","type":"string"},"properties":{"description":"The new documentation content map of the targeted API entity. Enclosed key-value pairs are API-specific, but only OpenAPI-compliant key-value pairs can be exported and, hence, published.","type":"string"}}}},"aws-native:apigateway:getDocumentationVersion":{"description":"The ``AWS::ApiGateway::DocumentationVersion`` resource creates a snapshot of the documentation for an API. For more information, see [Representation of API Documentation in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-documenting-api-content-representation.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"documentationVersion":{"type":"string","description":"The version identifier of the to-be-updated documentation version.","language":{"csharp":{"name":"DocumentationVersionValue"}}},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["documentationVersion","restApiId"]},"outputs":{"properties":{"description":{"description":"A description about the new documentation snapshot.","type":"string"}}}},"aws-native:apigateway:getDomainName":{"description":"The ``AWS::ApiGateway::DomainName`` resource specifies a public custom domain name for your API in API Gateway.\n To create a custom domain name for private APIs, use [AWS::ApiGateway::DomainNameV2](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainnamev2.html).\n You can use a custom domain name to provide a URL that's more intuitive and easier to recall. For more information about using custom domain names, see [Set up Custom Domain Name for an API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"domainName":{"type":"string","description":"The custom domain name as an API host name, for example, `my-api.example.com` .","language":{"csharp":{"name":"DomainNameValue"}}}},"required":["domainName"]},"outputs":{"properties":{"certificateArn":{"description":"The reference to an AWS -managed certificate that will be used by edge-optimized endpoint or private endpoint for this domain name. Certificate Manager is the only supported source.","type":"string"},"distributionDomainName":{"description":"The Amazon CloudFront distribution domain name that's mapped to the custom domain name. This is only applicable for endpoints whose type is `EDGE` .\n\nExample: `d111111abcdef8.cloudfront.net`","type":"string"},"distributionHostedZoneId":{"description":"The region-agnostic Amazon Route 53 Hosted Zone ID of the edge-optimized endpoint. The only valid value is `Z2FDTNDATAQYW2` for all regions.","type":"string"},"domainNameArn":{"description":"The ARN of the domain name.","type":"string"},"endpointAccessMode":{"description":"The endpoint access mode for your DomainName.","type":"string"},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:DomainNameEndpointConfiguration","description":"The endpoint configuration of this DomainName showing the endpoint types and IP address types of the domain name."},"mutualTlsAuthentication":{"$ref":"#/types/aws-native:apigateway:DomainNameMutualTlsAuthentication","description":"The mutual TLS authentication configuration for a custom domain name. If specified, API Gateway performs two-way authentication between the client and the server. Clients must present a trusted certificate to access your API."},"ownershipVerificationCertificateArn":{"description":"The ARN of the public certificate issued by ACM to validate ownership of your custom domain. Only required when configuring mutual TLS and using an ACM imported or private CA certificate ARN as the RegionalCertificateArn.","type":"string"},"regionalCertificateArn":{"description":"The reference to an AWS -managed certificate that will be used for validating the regional domain name. Certificate Manager is the only supported source.","type":"string"},"regionalDomainName":{"description":"The domain name associated with the regional endpoint for this custom domain name. You set up this association by adding a DNS record that points the custom domain name to this regional domain name.","type":"string"},"regionalHostedZoneId":{"description":"The region-specific Amazon Route 53 Hosted Zone ID of the regional endpoint.","type":"string"},"routingMode":{"$ref":"#/types/aws-native:apigateway:DomainNameRoutingMode","description":"The routing mode for this domain name. The routing mode determines how API Gateway sends traffic from your custom domain name to your public APIs."},"securityPolicy":{"description":"The Transport Layer Security (TLS) version + cipher suite for this DomainName.","type":"string"},"tags":{"description":"The collection of tags. Each tag element is associated with a given resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:apigateway:getDomainNameAccessAssociation":{"description":"Resource Type definition for AWS::ApiGateway::DomainNameAccessAssociation.","inputs":{"properties":{"domainNameAccessAssociationArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name access association resource."}},"required":["domainNameAccessAssociationArn"]},"outputs":{"properties":{"domainNameAccessAssociationArn":{"description":"The amazon resource name (ARN) of the domain name access association resource.","type":"string"}}}},"aws-native:apigateway:getDomainNameV2":{"description":"Resource Type definition for AWS::ApiGateway::DomainNameV2.","inputs":{"properties":{"domainNameArn":{"type":"string","description":"The amazon resource name (ARN) of the domain name resource."}},"required":["domainNameArn"]},"outputs":{"properties":{"certificateArn":{"description":"The reference to an AWS -managed certificate that will be used by the private endpoint for this domain name. AWS Certificate Manager is the only supported source.","type":"string"},"domainNameArn":{"description":"The amazon resource name (ARN) of the domain name resource.","type":"string"},"domainNameId":{"description":"The domain name ID.","type":"string"},"endpointAccessMode":{"description":"The endpoint access mode for your DomainName.","type":"string"},"policy":{"$ref":"pulumi.json#/Any","description":"A stringified JSON policy document that applies to the `execute-api` service for this DomainName regardless of the caller and Method configuration. You can use `Fn::ToJsonString` to enter your `policy` . For more information, see [Fn::ToJsonString](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-ToJsonString.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::DomainNameV2` for more information about the expected schema for this property."},"routingMode":{"$ref":"#/types/aws-native:apigateway:DomainNameV2RoutingMode","description":"The valid routing modes are [BASE_PATH_MAPPING_ONLY], [ROUTING_RULE_THEN_BASE_PATH_MAPPING] and [ROUTING_RULE_ONLY]. All other inputs are invalid."},"tags":{"description":"The collection of tags. Each tag element is associated with a given resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:apigateway:getGatewayResponse":{"description":"The ``AWS::ApiGateway::GatewayResponse`` resource creates a gateway response for your API. When you delete a stack containing this resource, your custom gateway responses are reset. For more information, see [API Gateway Responses](https://docs.aws.amazon.com/apigateway/latest/developerguide/customize-gateway-responses.html#api-gateway-gatewayResponse-definition) in the *API Gateway Developer Guide*.","inputs":{"properties":{"id":{"type":"string","description":"The ID for the gateway response. For example: `abc123` ."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID for the gateway response. For example: `abc123` .","type":"string"},"responseParameters":{"additionalProperties":{"type":"string"},"description":"Response parameters (paths, query strings and headers) of the GatewayResponse as a string-to-string map of key-value pairs.","type":"object"},"responseTemplates":{"additionalProperties":{"type":"string"},"description":"Response templates of the GatewayResponse as a string-to-string map of key-value pairs.","type":"object"},"statusCode":{"description":"The HTTP status code for this GatewayResponse.","type":"string"}}}},"aws-native:apigateway:getMethod":{"description":"The ``AWS::ApiGateway::Method`` resource creates API Gateway methods that define the parameters and body that clients must send in their requests.","inputs":{"properties":{"httpMethod":{"type":"string","description":"The method's HTTP verb."},"resourceId":{"type":"string","description":"The Resource identifier for the MethodResponse resource."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["restApiId","resourceId","httpMethod"]},"outputs":{"properties":{"apiKeyRequired":{"description":"A boolean flag specifying whether a valid ApiKey is required to invoke this method.","type":"boolean"},"authorizationScopes":{"description":"A list of authorization scopes configured on the method. The scopes are used with a `COGNITO_USER_POOLS` authorizer to authorize the method invocation. The authorization works by matching the method scopes against the scopes parsed from the access token in the incoming request. The method invocation is authorized if any method scopes matches a claimed scope in the access token. Otherwise, the invocation is not authorized. When the method scope is configured, the client must provide an access token instead of an identity token for authorization purposes.","items":{"type":"string"},"type":"array"},"authorizationType":{"description":"The method's authorization type. This parameter is required. For valid values, see [Method](https://docs.aws.amazon.com/apigateway/latest/api/API_Method.html) in the *API Gateway API Reference*.\n  If you specify the ``AuthorizerId`` property, specify ``CUSTOM`` or ``COGNITO_USER_POOLS`` for this property.","type":"string"},"authorizerId":{"description":"The identifier of an authorizer to use on this method. The method's authorization type must be `CUSTOM` or `COGNITO_USER_POOLS` .","type":"string"},"integration":{"$ref":"#/types/aws-native:apigateway:MethodIntegration","description":"Represents an `HTTP` , `HTTP_PROXY` , `AWS` , `AWS_PROXY` , or Mock integration."},"methodResponses":{"description":"Gets a method response associated with a given HTTP status code.","items":{"$ref":"#/types/aws-native:apigateway:MethodResponse"},"type":"array"},"operationName":{"description":"A human-friendly operation identifier for the method. For example, you can assign the `operationName` of `ListPets` for the `GET /pets` method in the `PetStore` example.","type":"string"},"requestModels":{"additionalProperties":{"type":"string"},"description":"A key-value map specifying data schemas, represented by Model resources, (as the mapped value) of the request payloads of given content types (as the mapping key).","type":"object"},"requestParameters":{"additionalProperties":{"oneOf":[{"type":"boolean"},{"type":"string"}]},"description":"A key-value map defining required or optional method request parameters that can be accepted by API Gateway. A key is a method request parameter name matching the pattern of `method.request.{location}.{name}` , where `location` is `querystring` , `path` , or `header` and `name` is a valid and unique parameter name. The value associated with the key is a Boolean flag indicating whether the parameter is required ( `true` ) or optional ( `false` ). The method request parameter names defined here are available in Integration to be mapped to integration request parameters or templates.","type":"object"},"requestValidatorId":{"description":"The identifier of a RequestValidator for request validation.","type":"string"}}}},"aws-native:apigateway:getModel":{"description":"The ``AWS::ApiGateway::Model`` resource defines the structure of a request or response payload for an API method.","inputs":{"properties":{"name":{"type":"string","description":"A name for the model. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the model name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["restApiId","name"]},"outputs":{"properties":{"description":{"description":"The description of the model.","type":"string"},"schema":{"$ref":"pulumi.json#/Any","description":"The schema for the model. For `application/json` models, this should be JSON schema draft 4 model. Do not include \"\\*/\" characters in the description of any properties because such \"\\*/\" characters may be interpreted as the closing marker for comments in some languages, such as Java or JavaScript, causing the installation of your API's SDK generated by API Gateway to fail.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::Model` for more information about the expected schema for this property."}}}},"aws-native:apigateway:getRequestValidator":{"description":"The ``AWS::ApiGateway::RequestValidator`` resource sets up basic validation rules for incoming requests to your API. For more information, see [Enable Basic Request Validation for an API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-method-request-validation.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"requestValidatorId":{"type":"string","description":"The ID for the request validator. For example: `abc123` ."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["restApiId","requestValidatorId"]},"outputs":{"properties":{"requestValidatorId":{"description":"The ID for the request validator. For example: `abc123` .","type":"string"},"validateRequestBody":{"description":"A Boolean flag to indicate whether to validate a request body according to the configured Model schema.","type":"boolean"},"validateRequestParameters":{"description":"A Boolean flag to indicate whether to validate request parameters ( `true` ) or not ( `false` ).","type":"boolean"}}}},"aws-native:apigateway:getResource":{"description":"The ``AWS::ApiGateway::Resource`` resource creates a resource in an API.","inputs":{"properties":{"resourceId":{"type":"string","description":"The ID for the resource. For example: `abc123` ."},"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["restApiId","resourceId"]},"outputs":{"properties":{"resourceId":{"description":"The ID for the resource. For example: `abc123` .","type":"string"}}}},"aws-native:apigateway:getRestApi":{"description":"The ``AWS::ApiGateway::RestApi`` resource creates a REST API. For more information, see [restapi:create](https://docs.aws.amazon.com/apigateway/latest/api/API_CreateRestApi.html) in the *Amazon API Gateway REST API Reference*.\n  On January 1, 2016, the Swagger Specification was donated to the [OpenAPI initiative](https://docs.aws.amazon.com/https://www.openapis.org/), becoming the foundation of the OpenAPI Specification.","inputs":{"properties":{"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."}},"required":["restApiId"]},"outputs":{"properties":{"apiKeySourceType":{"description":"The source of the API key for metering requests according to a usage plan. Valid values are: `HEADER` to read the API key from the `X-API-Key` header of a request. `AUTHORIZER` to read the API key from the `UsageIdentifierKey` from a custom authorizer.","type":"string"},"binaryMediaTypes":{"description":"The list of binary media types supported by the RestApi. By default, the RestApi supports only UTF-8-encoded text payloads.","items":{"type":"string"},"type":"array"},"description":{"description":"The description of the RestApi.","type":"string"},"disableExecuteApiEndpoint":{"description":"Specifies whether clients can invoke your API by using the default `execute-api` endpoint. By default, clients can invoke your API with the default `https://{api_id}.execute-api.{region}.amazonaws.com` endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint","type":"boolean"},"endpointAccessMode":{"description":"The endpoint access mode for your RestApi.","type":"string"},"endpointConfiguration":{"$ref":"#/types/aws-native:apigateway:RestApiEndpointConfiguration","description":"A list of the endpoint types and IP address types of the API. Use this property when creating an API. When importing an existing API, specify the endpoint configuration types using the ``Parameters`` property."},"minimumCompressionSize":{"description":"A nullable integer that is used to enable compression (with non-negative between 0 and 10485760 (10M) bytes, inclusive) or disable compression (with a null value) on an API. When compression is enabled, compression or decompression is not applied on the payload if the payload size is smaller than this value. Setting it to zero allows compression for any payload size.","type":"integer"},"name":{"description":"The name of the RestApi. A name is required if the REST API is not based on an OpenAPI specification.","type":"string"},"policy":{"$ref":"pulumi.json#/Any","description":"A policy document that contains the permissions for the ``RestApi`` resource. To set the ARN for the policy, use the ``!Join`` intrinsic function with ``\"\"`` as delimiter and values of ``\"execute-api:/\"`` and ``\"*\"``.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGateway::RestApi` for more information about the expected schema for this property."},"restApiId":{"description":"The string identifier of the associated RestApi.","type":"string"},"rootResourceId":{"description":"The root resource ID for a `RestApi` resource, such as `a0bc123d4e` .","type":"string"},"securityPolicy":{"description":"The Transport Layer Security (TLS) version + cipher suite for this RestApi.","type":"string"},"tags":{"description":"The key-value map of strings. The valid character set is [a-zA-Z+-=._:/]. The tag key can be up to 128 characters and must not start with `aws:` . The tag value can be up to 256 characters.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:apigateway:getStage":{"description":"The ``AWS::ApiGateway::Stage`` resource creates a stage for a deployment.","inputs":{"properties":{"restApiId":{"type":"string","description":"The string identifier of the associated RestApi."},"stageName":{"type":"string","description":"The name of the stage is the first path segment in the Uniform Resource Identifier (URI) of a call to API Gateway. Stage names can only contain alphanumeric characters, hyphens, and underscores. Maximum length is 128 characters."}},"required":["restApiId","stageName"]},"outputs":{"properties":{"accessLogSetting":{"$ref":"#/types/aws-native:apigateway:StageAccessLogSetting","description":"Access log settings, including the access log format and access log destination ARN."},"cacheClusterEnabled":{"description":"Specifies whether a cache cluster is enabled for the stage. To activate a method-level cache, set `CachingEnabled` to `true` for a method.","type":"boolean"},"cacheClusterSize":{"description":"The stage's cache capacity in GB. For more information about choosing a cache size, see [Enabling API caching to enhance responsiveness](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html) .","type":"string"},"canarySetting":{"$ref":"#/types/aws-native:apigateway:StageCanarySetting","description":"Settings for the canary deployment in this stage."},"clientCertificateId":{"description":"The identifier of a client certificate for an API stage.","type":"string"},"deploymentId":{"description":"The identifier of the Deployment that the stage points to.","type":"string"},"description":{"description":"The stage's description.","type":"string"},"documentationVersion":{"description":"The version of the associated API documentation.","type":"string"},"methodSettings":{"description":"A map that defines the method settings for a Stage resource. Keys (designated as `/{method_setting_key` below) are method paths defined as `{resource_path}/{http_method}` for an individual method override, or `/\\*/\\*` for overriding all methods in the stage.","items":{"$ref":"#/types/aws-native:apigateway:StageMethodSetting"},"type":"array"},"tags":{"description":"The collection of tags. Each tag element is associated with a given resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tracingEnabled":{"description":"Specifies whether active tracing with X-ray is enabled for the Stage.","type":"boolean"},"variables":{"additionalProperties":{"type":"string"},"description":"A map (string-to-string map) that defines the stage variables, where the variable name is the key and the variable value is the value. Variable names are limited to alphanumeric characters. Values must match the following regular expression: ``[A-Za-z0-9-._~:/?#\u0026=,]+``.","type":"object"}}}},"aws-native:apigateway:getUsagePlan":{"description":"The ``AWS::ApiGateway::UsagePlan`` resource creates a usage plan for deployed APIs. A usage plan sets a target for the throttling and quota limits on individual client API keys. For more information, see [Creating and Using API Usage Plans in Amazon API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-api-usage-plans.html) in the *API Gateway Developer Guide*.\n In some cases clients can exceed the targets that you set. Don’t rely on usage plans to control costs. Consider using [](https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html) to monitor costs and [](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) to manage API requests.","inputs":{"properties":{"id":{"type":"string","description":"The ID for the usage plan. For example: `abc123` ."}},"required":["id"]},"outputs":{"properties":{"apiStages":{"description":"The associated API stages of a usage plan.","items":{"$ref":"#/types/aws-native:apigateway:UsagePlanApiStage"},"type":"array"},"description":{"description":"The description of a usage plan.","type":"string"},"id":{"description":"The ID for the usage plan. For example: `abc123` .","type":"string"},"quota":{"$ref":"#/types/aws-native:apigateway:UsagePlanQuotaSettings","description":"The target maximum number of permitted requests per a given unit time interval."},"tags":{"description":"The collection of tags. Each tag element is associated with a given resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"throttle":{"$ref":"#/types/aws-native:apigateway:UsagePlanThrottleSettings","description":"A map containing method level throttling information for API stage in a usage plan."},"usagePlanName":{"description":"The name of a usage plan.","type":"string"}}}},"aws-native:apigateway:getUsagePlanKey":{"description":"The ``AWS::ApiGateway::UsagePlanKey`` resource associates an API key with a usage plan. This association determines which users the usage plan is applied to.","inputs":{"properties":{"id":{"type":"string","description":"The ID for the usage plan key. For example: `abc123` ."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID for the usage plan key. For example: `abc123` .","type":"string"}}}},"aws-native:apigateway:getVpcLink":{"description":"The ``AWS::ApiGateway::VpcLink`` resource creates an API Gateway VPC link for a REST API to access resources in an Amazon Virtual Private Cloud (VPC). For more information, see [vpclink:create](https://docs.aws.amazon.com/apigateway/latest/api/API_CreateVpcLink.html) in the ``Amazon API Gateway REST API Reference``.","inputs":{"properties":{"vpcLinkId":{"type":"string","description":"The ID for the VPC link. For example: `abc123` ."}},"required":["vpcLinkId"]},"outputs":{"properties":{"description":{"description":"The description of the VPC link.","type":"string"},"name":{"description":"The name used to label and identify the VPC link.","type":"string"},"tags":{"description":"An array of arbitrary tags (key-value pairs) to associate with the VPC link.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcLinkId":{"description":"The ID for the VPC link. For example: `abc123` .","type":"string"}}}},"aws-native:apigatewayv2:getApi":{"description":"The ``AWS::ApiGatewayV2::Api`` resource creates an API. WebSocket APIs and HTTP APIs are supported. For more information about WebSocket APIs, see [About WebSocket APIs in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-overview.html) in the *API Gateway Developer Guide*. For more information about HTTP APIs, see [HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api.html) in the *API Gateway Developer Guide.*","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."}},"required":["apiId"]},"outputs":{"properties":{"apiEndpoint":{"description":"The default endpoint for an API. For example: `https://abcdef.execute-api.us-west-2.amazonaws.com` .","type":"string"},"apiId":{"description":"The API identifier.","type":"string"},"apiKeySelectionExpression":{"description":"An API key selection expression. Supported only for WebSocket APIs. See [API Key Selection Expressions](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-selection-expressions.html#apigateway-websocket-api-apikey-selection-expressions).","type":"string"},"corsConfiguration":{"$ref":"#/types/aws-native:apigatewayv2:ApiCors","description":"A CORS configuration. Supported only for HTTP APIs. See [Configuring CORS](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-cors.html) for more information."},"description":{"description":"The description of the API.","type":"string"},"disableExecuteApiEndpoint":{"description":"Specifies whether clients can invoke your API by using the default ``execute-api`` endpoint. By default, clients can invoke your API with the default https://{api_id}.execute-api.{region}.amazonaws.com endpoint. To require that clients use a custom domain name to invoke your API, disable the default endpoint.","type":"boolean"},"ipAddressType":{"description":"The IP address types that can invoke the API. Use `ipv4` to allow only IPv4 addresses to invoke your API, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke your API.\n\nDon’t use IP address type for an HTTP API based on an OpenAPI specification. Instead, specify the IP address type in the OpenAPI specification.","type":"string"},"name":{"description":"The name of the API. Required unless you specify an OpenAPI definition for ``Body`` or ``S3BodyLocation``.","type":"string"},"routeSelectionExpression":{"description":"The route selection expression for the API. For HTTP APIs, the ``routeSelectionExpression`` must be ``${request.method} ${request.path}``. If not provided, this will be the default for HTTP APIs. This property is required for WebSocket APIs.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The collection of tags. Each tag element is associated with a given resource.","type":"object"},"version":{"description":"A version identifier for the API.","type":"string"}}}},"aws-native:apigatewayv2:getApiMapping":{"description":"The ``AWS::ApiGatewayV2::ApiMapping`` resource contains an API mapping. An API mapping relates a path of your custom domain name to a stage of your API. A custom domain name can have multiple API mappings, but the paths can't overlap. A custom domain can map only to APIs of the same protocol type. For more information, see [CreateApiMapping](https://docs.aws.amazon.com/apigatewayv2/latest/api-reference/domainnames-domainname-apimappings.html#CreateApiMapping) in the *Amazon API Gateway V2 API Reference*.","inputs":{"properties":{"apiMappingId":{"type":"string","description":"The API mapping resource ID."},"domainName":{"type":"string","description":"The domain name."}},"required":["apiMappingId","domainName"]},"outputs":{"properties":{"apiId":{"description":"The identifier of the API.","type":"string"},"apiMappingId":{"description":"The API mapping resource ID.","type":"string"},"apiMappingKey":{"description":"The API mapping key.","type":"string"},"stage":{"description":"The API stage.","type":"string"}}}},"aws-native:apigatewayv2:getAuthorizer":{"description":"The ``AWS::ApiGatewayV2::Authorizer`` resource creates an authorizer for a WebSocket API or an HTTP API. To learn more, see [Controlling and managing access to a WebSocket API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-control-access.html) and [Controlling and managing access to an HTTP API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-access-control.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"authorizerId":{"type":"string","description":"The authorizer ID."}},"required":["authorizerId","apiId"]},"outputs":{"properties":{"authorizerId":{"description":"The authorizer ID.","type":"string"},"authorizerType":{"description":"The authorizer type. Specify ``REQUEST`` for a Lambda function using incoming request parameters. Specify ``JWT`` to use JSON Web Tokens (supported only for HTTP APIs).","type":"string"},"identitySource":{"description":"The identity source for which authorization is requested.\n For a ``REQUEST`` authorizer, this is optional. The value is a set of one or more mapping expressions of the specified request parameters. The identity source can be headers, query string parameters, stage variables, and context parameters. For example, if an Auth header and a Name query string parameter are defined as identity sources, this value is route.request.header.Auth, route.request.querystring.Name for WebSocket APIs. For HTTP APIs, use selection expressions prefixed with ``$``, for example, ``$request.header.Auth``, ``$request.querystring.Name``. These parameters are used to perform runtime validation for Lambda-based authorizers by verifying all of the identity-related request parameters are present in the request, not null, and non-empty. Only when this is true does the authorizer invoke the authorizer Lambda function. Otherwise, it returns a 401 Unauthorized response without calling the Lambda function. For HTTP APIs, identity sources are also used as the cache key when caching is enabled. To learn more, see [Working with Lambda authorizers for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html).\n For ``JWT``, a single entry that specifies where to extract the JSON Web Token (JWT) from inbound requests. Currently only header-based and query parameter-based selections are supported, for example ``$request.header.Authorization``.","items":{"type":"string"},"type":"array"},"identityValidationExpression":{"description":"This parameter is not used.","type":"string"},"jwtConfiguration":{"$ref":"#/types/aws-native:apigatewayv2:AuthorizerJwtConfiguration","description":"The ``JWTConfiguration`` property specifies the configuration of a JWT authorizer. Required for the ``JWT`` authorizer type. Supported only for HTTP APIs."},"name":{"description":"The name of the authorizer.","type":"string"}}}},"aws-native:apigatewayv2:getDeployment":{"description":"The ``AWS::ApiGatewayV2::Deployment`` resource creates a deployment for an API.","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"deploymentId":{"type":"string","description":"The deployment ID."}},"required":["apiId","deploymentId"]},"outputs":{"properties":{"deploymentId":{"description":"The deployment ID.","type":"string"},"description":{"description":"The description for the deployment resource.","type":"string"}}}},"aws-native:apigatewayv2:getDomainName":{"description":"The ``AWS::ApiGatewayV2::DomainName`` resource specifies a custom domain name for your API in Amazon API Gateway (API Gateway). \n You can use a custom domain name to provide a URL that's more intuitive and easier to recall. For more information about using custom domain names, see [Set up Custom Domain Name for an API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-custom-domains.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"domainName":{"type":"string","description":"The custom domain name for your API in Amazon API Gateway. Uppercase letters and the underscore (``_``) character are not supported.","language":{"csharp":{"name":"DomainNameValue"}}}},"required":["domainName"]},"outputs":{"properties":{"domainNameArn":{"description":"Represents an Amazon Resource Name (ARN).","type":"string"},"domainNameConfigurations":{"description":"The domain name configurations.","items":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameConfiguration"},"type":"array"},"mutualTlsAuthentication":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameMutualTlsAuthentication","description":"The mutual TLS authentication configuration for a custom domain name."},"regionalDomainName":{"description":"The domain name associated with the regional endpoint for this custom domain name. You set up this association by adding a DNS record that points the custom domain name to this regional domain name.","type":"string"},"regionalHostedZoneId":{"description":"The region-specific Amazon Route 53 Hosted Zone ID of the regional endpoint.","type":"string"},"routingMode":{"$ref":"#/types/aws-native:apigatewayv2:DomainNameRoutingMode","description":"The routing mode API Gateway uses to route traffic to your APIs."},"tags":{"additionalProperties":{"type":"string"},"description":"The collection of tags associated with a domain name.","type":"object"}}}},"aws-native:apigatewayv2:getIntegration":{"description":"Resource Type definition for AWS::ApiGatewayV2::Integration","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"integrationId":{"type":"string","description":"The integration ID."}},"required":["apiId","integrationId"]},"outputs":{"properties":{"connectionId":{"description":"The ID of the VPC link for a private integration. Supported only for HTTP APIs.","type":"string"},"connectionType":{"description":"The type of the network connection to the integration endpoint. Specify INTERNET for connections through the public routable internet or VPC_LINK for private connections between API Gateway and resources in a VPC. The default value is INTERNET.","type":"string"},"contentHandlingStrategy":{"description":"Supported only for WebSocket APIs. Specifies how to handle response payload content type conversions. Supported values are CONVERT_TO_BINARY and CONVERT_TO_TEXT.","type":"string"},"credentialsArn":{"description":"Specifies the credentials required for the integration, if any. For AWS integrations, three options are available. To specify an IAM Role for API Gateway to assume, use the role's Amazon Resource Name (ARN). To require that the caller's identity be passed through from the request, specify the string arn:aws:iam::*:user/*. To use resource-based permissions on supported AWS services, don't specify this parameter.","type":"string"},"description":{"description":"The description of the integration.","type":"string"},"integrationId":{"description":"The integration ID.","type":"string"},"integrationMethod":{"description":"Specifies the integration's HTTP method type.","type":"string"},"integrationSubtype":{"description":"Supported only for HTTP API AWS_PROXY integrations. Specifies the AWS service action to invoke.","type":"string"},"integrationType":{"description":"The integration type of an integration.","type":"string"},"integrationUri":{"description":"For a Lambda integration, specify the URI of a Lambda function. For an HTTP integration, specify a fully-qualified URL. For an HTTP API private integration, specify the ARN of an Application Load Balancer listener, Network Load Balancer listener, or AWS Cloud Map service.","type":"string"},"passthroughBehavior":{"description":"Specifies the pass-through behavior for incoming requests based on the Content-Type header in the request, and the available mapping templates specified as the requestTemplates property on the Integration resource. There are three valid values: WHEN_NO_MATCH, WHEN_NO_TEMPLATES, and NEVER. Supported only for WebSocket APIs.","type":"string"},"payloadFormatVersion":{"description":"Specifies the format of the payload sent to an integration. Required for HTTP APIs. For HTTP APIs, supported values for Lambda proxy integrations are 1.0 and 2.0 For all other integrations, 1.0 is the only supported value.","type":"string"},"requestParameters":{"additionalProperties":{"type":"string"},"description":"A key-value map specifying parameters.","type":"object"},"requestTemplates":{"additionalProperties":{"type":"string"},"description":"A map of Velocity templates that are applied on the request payload based on the value of the Content-Type header sent by the client.","type":"object"},"responseParameters":{"additionalProperties":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationResponseParameterMap"},"description":"Parameters that transform the HTTP response from a backend integration before returning the response to clients. Supported only for HTTP APIs.","type":"object"},"templateSelectionExpression":{"description":"The template selection expression for the integration. Supported only for WebSocket APIs.","type":"string"},"timeoutInMillis":{"description":"Custom timeout between 50 and 29000 milliseconds for WebSocket APIs and between 50 and 30000 milliseconds for HTTP APIs. The default timeout is 29 seconds for WebSocket APIs and 30 seconds for HTTP APIs.","type":"integer"},"tlsConfig":{"$ref":"#/types/aws-native:apigatewayv2:IntegrationTlsConfig","description":"The TLS configuration for a private integration. If you specify a TLS configuration, private integration traffic uses the HTTPS protocol. Supported only for HTTP APIs."}}}},"aws-native:apigatewayv2:getIntegrationResponse":{"description":"The ``AWS::ApiGatewayV2::IntegrationResponse`` resource updates an integration response for an WebSocket API. For more information, see [Set up WebSocket API Integration Responses in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-integration-responses.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"integrationId":{"type":"string","description":"The integration ID."},"integrationResponseId":{"type":"string","description":"The integration response ID."}},"required":["apiId","integrationId","integrationResponseId"]},"outputs":{"properties":{"contentHandlingStrategy":{"description":"Supported only for WebSocket APIs. Specifies how to handle response payload content type conversions. Supported values are ``CONVERT_TO_BINARY`` and ``CONVERT_TO_TEXT``, with the following behaviors:\n  ``CONVERT_TO_BINARY``: Converts a response payload from a Base64-encoded string to the corresponding binary blob.\n  ``CONVERT_TO_TEXT``: Converts a response payload from a binary blob to a Base64-encoded string.\n If this property is not defined, the response payload will be passed through from the integration response to the route response or method response without modification.","type":"string"},"integrationResponseId":{"description":"The integration response ID.","type":"string"},"integrationResponseKey":{"description":"The integration response key.","type":"string"},"responseParameters":{"$ref":"pulumi.json#/Any","description":"A key-value map specifying response parameters that are passed to the method response from the backend. The key is a method response header parameter name and the mapped value is an integration response header value, a static value enclosed within a pair of single quotes, or a JSON expression from the integration response body. The mapping key must match the pattern of ``method.response.header.{name}``, where name is a valid and unique header name. The mapped non-static value must match the pattern of ``integration.response.header.{name}`` or ``integration.response.body.{JSON-expression}``, where ``{name}`` is a valid and unique response header name and ``{JSON-expression}`` is a valid JSON expression without the ``$`` prefix.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::IntegrationResponse` for more information about the expected schema for this property."},"responseTemplates":{"$ref":"pulumi.json#/Any","description":"The collection of response templates for the integration response as a string-to-string map of key-value pairs. Response templates are represented as a key/value map, with a content-type as the key and a template as the value.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::IntegrationResponse` for more information about the expected schema for this property."},"templateSelectionExpression":{"description":"The template selection expression for the integration response. Supported only for WebSocket APIs.","type":"string"}}}},"aws-native:apigatewayv2:getModel":{"description":"The ``AWS::ApiGatewayV2::Model`` resource updates data model for a WebSocket API. For more information, see [Model Selection Expressions](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-selection-expressions.html#apigateway-websocket-api-model-selection-expressions) in the *API Gateway Developer Guide*.","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"modelId":{"type":"string","description":"The model ID."}},"required":["apiId","modelId"]},"outputs":{"properties":{"contentType":{"description":"The content-type for the model, for example, \"application/json\".","type":"string"},"description":{"description":"The description of the model.","type":"string"},"modelId":{"description":"The model ID.","type":"string"},"name":{"description":"The name of the model.","type":"string"},"schema":{"$ref":"pulumi.json#/Any","description":"The schema for the model. For application/json models, this should be JSON schema draft 4 model.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Model` for more information about the expected schema for this property."}}}},"aws-native:apigatewayv2:getRoute":{"description":"The ``AWS::ApiGatewayV2::Route`` resource creates a route for an API.","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"routeId":{"type":"string","description":"The route ID."}},"required":["apiId","routeId"]},"outputs":{"properties":{"apiKeyRequired":{"description":"Specifies whether an API key is required for the route. Supported only for WebSocket APIs.","type":"boolean"},"authorizationScopes":{"description":"The authorization scopes supported by this route.","items":{"type":"string"},"type":"array"},"authorizationType":{"description":"The authorization type for the route. For WebSocket APIs, valid values are ``NONE`` for open access, ``AWS_IAM`` for using AWS IAM permissions, and ``CUSTOM`` for using a Lambda authorizer. For HTTP APIs, valid values are ``NONE`` for open access, ``JWT`` for using JSON Web Tokens, ``AWS_IAM`` for using AWS IAM permissions, and ``CUSTOM`` for using a Lambda authorizer.","type":"string"},"modelSelectionExpression":{"description":"The model selection expression for the route. Supported only for WebSocket APIs.","type":"string"},"operationName":{"description":"The operation name for the route.","type":"string"},"requestModels":{"$ref":"pulumi.json#/Any","description":"The request models for the route. Supported only for WebSocket APIs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::Route` for more information about the expected schema for this property."},"routeId":{"description":"The route ID.","type":"string"},"routeKey":{"description":"The route key for the route. For HTTP APIs, the route key can be either ``$default``, or a combination of an HTTP method and resource path, for example, ``GET /pets``.","type":"string"},"routeResponseSelectionExpression":{"description":"The route response selection expression for the route. Supported only for WebSocket APIs.","type":"string"},"target":{"description":"The target for the route.","type":"string"}}}},"aws-native:apigatewayv2:getRouteResponse":{"description":"The ``AWS::ApiGatewayV2::RouteResponse`` resource creates a route response for a WebSocket API. For more information, see [Set up Route Responses for a WebSocket API in API Gateway](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-route-response.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"apiId":{"type":"string","description":"The API identifier."},"routeId":{"type":"string","description":"The route ID."},"routeResponseId":{"type":"string","description":"The route response ID."}},"required":["apiId","routeId","routeResponseId"]},"outputs":{"properties":{"modelSelectionExpression":{"description":"The model selection expression for the route response. Supported only for WebSocket APIs.","type":"string"},"responseModels":{"$ref":"pulumi.json#/Any","description":"The response models for the route response.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ApiGatewayV2::RouteResponse` for more information about the expected schema for this property."},"responseParameters":{"additionalProperties":{"$ref":"#/types/aws-native:apigatewayv2:RouteResponseParameterConstraints"},"description":"The route response parameters.","type":"object"},"routeResponseId":{"description":"The route response ID.","type":"string"},"routeResponseKey":{"description":"The route response key.","type":"string"}}}},"aws-native:apigatewayv2:getRoutingRule":{"description":"Schema for AWS::ApiGatewayV2::RoutingRule","inputs":{"properties":{"routingRuleArn":{"type":"string","description":"Amazon Resource Name (ARN) of the resource."}},"required":["routingRuleArn"]},"outputs":{"properties":{"actions":{"description":"The resulting action based on matching a routing rules condition. Only InvokeApi is supported.","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleAction"},"type":"array"},"conditions":{"description":"The conditions of the routing rule.","items":{"$ref":"#/types/aws-native:apigatewayv2:RoutingRuleCondition"},"type":"array"},"priority":{"description":"The order in which API Gateway evaluates a rule. Priority is evaluated from the lowest value to the highest value. Rules can't have the same priority. Priority values 1-1,000,000 are supported.","type":"integer"},"routingRuleArn":{"description":"Amazon Resource Name (ARN) of the resource.","type":"string"},"routingRuleId":{"description":"RoutingRule Id generated by service","type":"string"}}}},"aws-native:apigatewayv2:getVpcLink":{"description":"The ``AWS::ApiGatewayV2::VpcLink`` resource creates a VPC link. Supported only for HTTP APIs. The VPC link status must transition from ``PENDING`` to ``AVAILABLE`` to successfully create a VPC link, which can take up to 10 minutes. To learn more, see [Working with VPC Links for HTTP APIs](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-vpc-links.html) in the *API Gateway Developer Guide*.","inputs":{"properties":{"vpcLinkId":{"type":"string","description":"The VPC link ID."}},"required":["vpcLinkId"]},"outputs":{"properties":{"name":{"description":"The name of the VPC link.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The collection of tags. Each tag element is associated with a given resource.","type":"object"},"vpcLinkId":{"description":"The VPC link ID.","type":"string"}}}},"aws-native:appconfig:getApplication":{"description":"Resource Type definition for AWS::AppConfig::Application","inputs":{"properties":{"applicationId":{"type":"string","description":"The application Id"}},"required":["applicationId"]},"outputs":{"properties":{"applicationId":{"description":"The application Id","type":"string"},"description":{"description":"A description of the application.","type":"string"},"name":{"description":"A name for the application.","type":"string"},"tags":{"description":"Metadata to assign to the application. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appconfig:getConfigurationProfile":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"applicationId":{"type":"string","description":"The application ID."},"configurationProfileId":{"type":"string","description":"The configuration profile ID"}},"required":["applicationId","configurationProfileId"]},"outputs":{"properties":{"configurationProfileId":{"description":"The configuration profile ID","type":"string"},"description":{"description":"A description of the configuration profile.","type":"string"},"kmsKeyArn":{"description":"The Amazon Resource Name of the AWS Key Management Service key to encrypt new configuration data versions in the AWS AppConfig hosted configuration store. This attribute is only used for hosted configuration types. To encrypt data managed in other configuration stores, see the documentation for how to specify an AWS KMS key for that particular service.","type":"string"},"kmsKeyIdentifier":{"description":"The AWS Key Management Service key identifier (key ID, key alias, or key ARN) provided when the resource was created or updated.","type":"string"},"name":{"description":"A name for the configuration profile.","type":"string"},"retrievalRoleArn":{"description":"The ARN of an IAM role with permission to access the configuration at the specified LocationUri.","type":"string"},"tags":{"description":"Metadata to assign to the configuration profile. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"validators":{"description":"A list of methods for validating the configuration.","items":{"$ref":"#/types/aws-native:appconfig:ConfigurationProfileValidators"},"type":"array"}}}},"aws-native:appconfig:getDeployment":{"description":"Resource Type definition for AWS::AppConfig::Deployment","inputs":{"properties":{"applicationId":{"type":"string","description":"The application ID."},"deploymentNumber":{"type":"string","description":"The sequence number of the deployment."},"environmentId":{"type":"string","description":"The environment ID."}},"required":["applicationId","environmentId","deploymentNumber"]},"outputs":{"properties":{"deploymentNumber":{"description":"The sequence number of the deployment.","type":"string"},"state":{"$ref":"#/types/aws-native:appconfig:DeploymentState","description":"The state of the deployment."}}}},"aws-native:appconfig:getDeploymentStrategy":{"description":"Resource Type definition for AWS::AppConfig::DeploymentStrategy","inputs":{"properties":{"id":{"type":"string","description":"The deployment strategy ID."}},"required":["id"]},"outputs":{"properties":{"deploymentDurationInMinutes":{"description":"Total amount of time for a deployment to last.","type":"number"},"description":{"description":"A description of the deployment strategy.","type":"string"},"finalBakeTimeInMinutes":{"description":"Specifies the amount of time AWS AppConfig monitors for Amazon CloudWatch alarms after the configuration has been deployed to 100% of its targets, before considering the deployment to be complete. If an alarm is triggered during this time, AWS AppConfig rolls back the deployment. You must configure permissions for AWS AppConfig to roll back based on CloudWatch alarms. For more information, see Configuring permissions for rollback based on Amazon CloudWatch alarms in the AWS AppConfig User Guide.","type":"number"},"growthFactor":{"description":"The percentage of targets to receive a deployed configuration during each interval.","type":"number"},"growthType":{"$ref":"#/types/aws-native:appconfig:DeploymentStrategyGrowthType","description":"The algorithm used to define how percentage grows over time. AWS AppConfig supports the following growth types:\n\nLinear: For this type, AWS AppConfig processes the deployment by dividing the total number of targets by the value specified for Step percentage. For example, a linear deployment that uses a Step percentage of 10 deploys the configuration to 10 percent of the hosts. After those deployments are complete, the system deploys the configuration to the next 10 percent. This continues until 100% of the targets have successfully received the configuration.\n\nExponential: For this type, AWS AppConfig processes the deployment exponentially using the following formula: G*(2^N). In this formula, G is the growth factor specified by the user and N is the number of steps until the configuration is deployed to all targets. For example, if you specify a growth factor of 2, then the system rolls out the configuration as follows:\n\n2*(2^0)\n\n2*(2^1)\n\n2*(2^2)\n\nExpressed numerically, the deployment rolls out as follows: 2% of the targets, 4% of the targets, 8% of the targets, and continues until the configuration has been deployed to all targets."},"id":{"description":"The deployment strategy ID.","type":"string"},"tags":{"description":"Assigns metadata to an AWS AppConfig resource. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define. You can specify a maximum of 50 tags for a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appconfig:getEnvironment":{"description":"Resource Type definition for AWS::AppConfig::Environment","inputs":{"properties":{"applicationId":{"type":"string","description":"The application ID."},"environmentId":{"type":"string","description":"The environment ID."}},"required":["applicationId","environmentId"]},"outputs":{"properties":{"description":{"description":"A description of the environment.","type":"string"},"environmentId":{"description":"The environment ID.","type":"string"},"monitors":{"description":"Amazon CloudWatch alarms to monitor during the deployment process.","items":{"$ref":"#/types/aws-native:appconfig:EnvironmentMonitor"},"type":"array"},"name":{"description":"A name for the environment.","type":"string"},"tags":{"description":"Metadata to assign to the environment. Tags help organize and categorize your AWS AppConfig resources. Each tag consists of a key and an optional value, both of which you define.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appconfig:getExtension":{"description":"Resource Type definition for AWS::AppConfig::Extension","inputs":{"properties":{"id":{"type":"string","description":"The system-generated ID of the extension."}},"required":["id"]},"outputs":{"properties":{"actions":{"additionalProperties":{"items":{"$ref":"#/types/aws-native:appconfig:ExtensionAction"},"type":"array"},"description":"The actions defined in the extension.","type":"object"},"arn":{"description":"The system-generated Amazon Resource Name (ARN) for the extension.","type":"string"},"description":{"description":"Description of the extension.","type":"string"},"id":{"description":"The system-generated ID of the extension.","type":"string"},"parameters":{"additionalProperties":{"$ref":"#/types/aws-native:appconfig:ExtensionParameter"},"description":"The parameters accepted by the extension. You specify parameter values when you associate the extension to an AWS AppConfig resource by using the `CreateExtensionAssociation` API action. For AWS Lambda extension actions, these parameters are included in the Lambda request object.","type":"object"},"tags":{"description":"An array of key-value tags to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"versionNumber":{"description":"The extension version number.","type":"integer"}}}},"aws-native:appconfig:getExtensionAssociation":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"id":{"type":"string","description":"The system-generated ID for the association."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the extension defined in the association.","type":"string"},"extensionArn":{"description":"The ARN of the extension defined in the association.","type":"string"},"id":{"description":"The system-generated ID for the association.","type":"string"},"parameters":{"additionalProperties":{"type":"string"},"description":"The parameter names and values defined in the extensions. Extension parameters marked `Required` must be entered for this field.","type":"object"},"resourceArn":{"description":"The ARNs of applications, configuration profiles, or environments defined in the association.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appconfig:getHostedConfigurationVersion":{"description":"Resource Type definition for AWS::AppConfig::HostedConfigurationVersion","inputs":{"properties":{"applicationId":{"type":"string","description":"The application ID."},"configurationProfileId":{"type":"string","description":"The configuration profile ID."},"versionNumber":{"type":"string","description":"Current version number of hosted configuration version."}},"required":["applicationId","configurationProfileId","versionNumber"]},"outputs":{"properties":{"versionNumber":{"description":"Current version number of hosted configuration version.","type":"string"}}}},"aws-native:appflow:getConnector":{"description":"Resource schema for AWS::AppFlow::Connector","inputs":{"properties":{"connectorLabel":{"type":"string","description":" The name of the connector. The name is unique for each ConnectorRegistration in your AWS account."}},"required":["connectorLabel"]},"outputs":{"properties":{"connectorArn":{"description":" The arn of the connector. The arn is unique for each ConnectorRegistration in your AWS account.","type":"string"},"connectorProvisioningConfig":{"$ref":"#/types/aws-native:appflow:ConnectorProvisioningConfig","description":"Contains information about the configuration of the connector being registered."},"connectorProvisioningType":{"description":"The provisioning type of the connector. Currently the only supported value is LAMBDA. ","type":"string"},"description":{"description":"A description about the connector that's being registered.","type":"string"}}}},"aws-native:appflow:getConnectorProfile":{"description":"Resource Type definition for AWS::AppFlow::ConnectorProfile","inputs":{"properties":{"connectorProfileName":{"type":"string","description":"The maximum number of items to retrieve in a single batch."}},"required":["connectorProfileName"]},"outputs":{"properties":{"connectionMode":{"$ref":"#/types/aws-native:appflow:ConnectorProfileConnectionMode","description":"Mode in which data transfer should be enabled. Private connection mode is currently enabled for Salesforce, Snowflake, Trendmicro and Singular"},"connectorProfileArn":{"description":"Unique identifier for connector profile resources","type":"string"},"credentialsArn":{"description":"A unique Arn for Connector-Profile resource","type":"string"}}}},"aws-native:appflow:getFlow":{"description":"Resource schema for AWS::AppFlow::Flow.","inputs":{"properties":{"flowName":{"type":"string","description":"Name of the flow."}},"required":["flowName"]},"outputs":{"properties":{"description":{"description":"Description of the flow.","type":"string"},"destinationFlowConfigList":{"description":"List of Destination connectors of the flow.","items":{"$ref":"#/types/aws-native:appflow:FlowDestinationFlowConfig"},"type":"array"},"flowArn":{"description":"ARN identifier of the flow.","type":"string"},"flowStatus":{"$ref":"#/types/aws-native:appflow:FlowStatus","description":"Flow activation status for Scheduled- and Event-triggered flows"},"metadataCatalogConfig":{"$ref":"#/types/aws-native:appflow:FlowMetadataCatalogConfig","description":"Configurations of metadata catalog of the flow."},"sourceFlowConfig":{"$ref":"#/types/aws-native:appflow:FlowSourceFlowConfig","description":"Configurations of Source connector of the flow."},"tags":{"description":"List of Tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tasks":{"description":"List of tasks for the flow.","items":{"$ref":"#/types/aws-native:appflow:FlowTask"},"type":"array"},"triggerConfig":{"$ref":"#/types/aws-native:appflow:FlowTriggerConfig","description":"Trigger settings of the flow."}}}},"aws-native:appintegrations:getApplication":{"description":"Resource Type definition for AWS:AppIntegrations::Application","inputs":{"properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the application."}},"required":["applicationArn"]},"outputs":{"properties":{"applicationArn":{"description":"The Amazon Resource Name (ARN) of the application.","type":"string"},"applicationConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationConfig","description":"The application configuration. Cannot be used when IsService is true."},"applicationSourceConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationSourceConfigProperties","description":"Application source config"},"description":{"description":"The application description.","type":"string"},"id":{"description":"The id of the application.","type":"string"},"iframeConfig":{"$ref":"#/types/aws-native:appintegrations:ApplicationIframeConfig","description":"The iframe configuration"},"initializationTimeout":{"description":"The initialization timeout in milliseconds. Required when IsService is true.","type":"integer"},"isService":{"description":"Indicates if the application is a service","type":"boolean"},"name":{"description":"The name of the application.","type":"string"},"namespace":{"description":"The namespace of the application.","type":"string"},"permissions":{"description":"The configuration of events or requests that the application has access to.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags (keys and values) associated with the application.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appintegrations:getDataIntegration":{"description":"Resource Type definition for AWS::AppIntegrations::DataIntegration","inputs":{"properties":{"id":{"type":"string","description":"The unique identifer of the data integration."}},"required":["id"]},"outputs":{"properties":{"dataIntegrationArn":{"description":"The Amazon Resource Name (ARN) of the data integration.","type":"string"},"description":{"description":"The data integration description.","type":"string"},"fileConfiguration":{"$ref":"#/types/aws-native:appintegrations:DataIntegrationFileConfiguration","description":"The configuration for what files should be pulled from the source."},"id":{"description":"The unique identifer of the data integration.","type":"string"},"name":{"description":"The name of the data integration.","type":"string"},"objectConfiguration":{"additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The configuration for what data should be pulled from the source.","type":"object"},"tags":{"description":"The tags (keys and values) associated with the data integration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appintegrations:getEventIntegration":{"description":"Resource Type definition for AWS::AppIntegrations::EventIntegration","inputs":{"properties":{"name":{"type":"string","description":"The name of the event integration."}},"required":["name"]},"outputs":{"properties":{"description":{"description":"The event integration description.","type":"string"},"eventIntegrationArn":{"description":"The Amazon Resource Name (ARN) of the event integration.","type":"string"},"tags":{"description":"The tags (keys and values) associated with the event integration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:applicationautoscaling:getScalableTarget":{"description":"The ``AWS::ApplicationAutoScaling::ScalableTarget`` resource specifies a resource that Application Auto Scaling can scale, such as an AWS::DynamoDB::Table or AWS::ECS::Service resource.\n For more information, see [Getting started](https://docs.aws.amazon.com/autoscaling/application/userguide/getting-started.html) in the *Application Auto Scaling User Guide*.\n  If the resource that you want Application Auto Scaling to scale is not yet created in your account, add a dependency on the resource when registering it as a scalable target using the [DependsOn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) attribute.","inputs":{"properties":{"resourceId":{"type":"string","description":"The identifier of the resource associated with the scalable target. This string consists of the resource type and unique identifier.\n  +  ECS service - The resource type is ``service`` and the unique identifier is the cluster name and service name. Example: ``service/my-cluster/my-service``.\n  +  Spot Fleet - The resource type is ``spot-fleet-request`` and the unique identifier is the Spot Fleet request ID. Example: ``spot-fleet-request/sfr-73fbd2ce-aa30-494c-8788-1cee4EXAMPLE``.\n  +  EMR cluster - The resource type is ``instancegroup`` and the unique identifier is the cluster ID and instance group ID. Example: ``instancegroup/j-2EEZNYKUA1NTV/ig-1791Y4E1L8YI0``.\n  +  AppStream 2.0 fleet - The resource type is ``fleet`` and the unique identifier is the fleet name. Example: ``fleet/sample-fleet``.\n  +  DynamoDB table - The resource type is ``table`` and the unique identifier is the table name. Example: ``table/my-table``.\n  +  DynamoDB global secondary index - The resource type is ``index`` and the unique identifier is the index name. Example: ``table/my-table/index/my-table-index``.\n  +  Aurora DB cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:my-db-cluster``.\n  +  SageMaker endpoint variant - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  Custom resources are not supported with a resource type. This parameter must specify the ``OutputValue`` from the CloudFormation template stack used to access the resources. The unique identifier is defined by the service provider. More information is available in our [GitHub repository](https://docs.aws.amazon.com/https://github.com/aws/aws-auto-scaling-custom-resource).\n  +  Amazon Comprehend document classification endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:document-classifier-endpoint/EXAMPLE``.\n  +  Amazon Comprehend entity recognizer endpoint - The resource type and unique identifier are specified using the endpoint ARN. Example: ``arn:aws:comprehend:us-west-2:123456789012:entity-recognizer-endpoint/EXAMPLE``.\n  +  Lambda provisioned concurrency - The resource type is ``function`` and the unique identifier is the function name with a function version or alias name suffix that is not ``$LATEST``. Example: ``function:my-function:prod`` or ``function:my-function:1``.\n  +  Amazon Keyspaces table - The resource type is ``table`` and the unique identifier is the table name. Example: ``keyspace/mykeyspace/table/mytable``.\n  +  Amazon MSK cluster - The resource type and unique identifier are specified using the cluster ARN. Example: ``arn:aws:kafka:us-east-1:123456789012:cluster/demo-cluster-1/6357e0b2-0e6a-4b86-a0b4-70df934c2e31-5``.\n  +  Amazon ElastiCache replication group - The resource type is ``replication-group`` and the unique identifier is the replication group name. Example: ``replication-group/mycluster``.\n  +  Amazon ElastiCache cache cluster - The resource type is ``cache-cluster`` and the unique identifier is the cache cluster name. Example: ``cache-cluster/mycluster``.\n  +  Neptune cluster - The resource type is ``cluster`` and the unique identifier is the cluster name. Example: ``cluster:mycluster``.\n  +  SageMaker serverless endpoint - The resource type is ``variant`` and the unique identifier is the resource ID. Example: ``endpoint/my-end-point/variant/KMeansClustering``.\n  +  SageMaker inference component - The resource type is ``inference-component`` and the unique identifier is the resource ID. Example: ``inference-component/my-inference-component``.\n  +  Pool of WorkSpaces - The resource type is ``workspacespool`` and the unique identifier is the pool ID. Example: ``workspacespool/wspool-123456``."},"scalableDimension":{"type":"string","description":"The scalable dimension associated with the scalable target. This string consists of the service namespace, resource type, and scaling property.\n  +  ``ecs:service:DesiredCount`` - The task count of an ECS service.\n  +  ``elasticmapreduce:instancegroup:InstanceCount`` - The instance count of an EMR Instance Group.\n  +  ``ec2:spot-fleet-request:TargetCapacity`` - The target capacity of a Spot Fleet.\n  +  ``appstream:fleet:DesiredCapacity`` - The capacity of an AppStream 2.0 fleet.\n  +  ``dynamodb:table:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB table.\n  +  ``dynamodb:table:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB table.\n  +  ``dynamodb:index:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB global secondary index.\n  +  ``dynamodb:index:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB global secondary index.\n  +  ``rds:cluster:ReadReplicaCount`` - The count of Aurora Replicas in an Aurora DB cluster. Available for Aurora MySQL-compatible edition and Aurora PostgreSQL-compatible edition.\n  +  ``sagemaker:variant:DesiredInstanceCount`` - The number of EC2 instances for a SageMaker model endpoint variant.\n  +  ``custom-resource:ResourceType:Property`` - The scalable dimension for a custom resource provided by your own application or service.\n  +  ``comprehend:document-classifier-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend document classification endpoint.\n  +  ``comprehend:entity-recognizer-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend entity recognizer endpoint.\n  +  ``lambda:function:ProvisionedConcurrency`` - The provisioned concurrency for a Lambda function.\n  +  ``cassandra:table:ReadCapacityUnits`` - The provisioned read capacity for an Amazon Keyspaces table.\n  +  ``cassandra:table:WriteCapacityUnits`` - The provisioned write capacity for an Amazon Keyspaces table.\n  +  ``kafka:broker-storage:VolumeSize`` - The provisioned volume size (in GiB) for brokers in an Amazon MSK cluster.\n  +  ``elasticache:cache-cluster:Nodes`` - The number of nodes for an Amazon ElastiCache cache cluster.\n  +  ``elasticache:replication-group:NodeGroups`` - The number of node groups for an Amazon ElastiCache replication group.\n  +  ``elasticache:replication-group:Replicas`` - The number of replicas per node group for an Amazon ElastiCache replication group.\n  +  ``neptune:cluster:ReadReplicaCount`` - The count of read replicas in an Amazon Neptune DB cluster.\n  +  ``sagemaker:variant:DesiredProvisionedConcurrency`` - The provisioned concurrency for a SageMaker serverless endpoint.\n  +  ``sagemaker:inference-component:DesiredCopyCount`` - The number of copies across an endpoint for a SageMaker inference component.\n  +  ``workspaces:workspacespool:DesiredUserSessions`` - The number of user sessions for the WorkSpaces in the pool."},"serviceNamespace":{"type":"string","description":"The namespace of the AWS service that provides the resource, or a ``custom-resource``."}},"required":["resourceId","scalableDimension","serviceNamespace"]},"outputs":{"properties":{"id":{"type":"string"},"maxCapacity":{"description":"The maximum value that you plan to scale out to. When a scaling policy is in effect, Application Auto Scaling can scale out (expand) as needed to the maximum capacity limit in response to changing demand.","type":"integer"},"minCapacity":{"description":"The minimum value that you plan to scale in to. When a scaling policy is in effect, Application Auto Scaling can scale in (contract) as needed to the minimum capacity limit in response to changing demand.","type":"integer"},"scheduledActions":{"description":"The scheduled actions for the scalable target. Duplicates aren't allowed.","items":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetScheduledAction"},"type":"array"},"suspendedState":{"$ref":"#/types/aws-native:applicationautoscaling:ScalableTargetSuspendedState","description":"An embedded object that contains attributes and attribute values that are used to suspend and resume automatic scaling. Setting the value of an attribute to ``true`` suspends the specified scaling activities. Setting it to ``false`` (default) resumes the specified scaling activities. \n  *Suspension Outcomes* \n  +  For ``DynamicScalingInSuspended``, while a suspension is in effect, all scale-in activities that are triggered by a scaling policy are suspended.\n  +  For ``DynamicScalingOutSuspended``, while a suspension is in effect, all scale-out activities that are triggered by a scaling policy are suspended.\n  +  For ``ScheduledScalingSuspended``, while a suspension is in effect, all scaling activities that involve scheduled actions are suspended."}}}},"aws-native:applicationautoscaling:getScalingPolicy":{"description":"The ``AWS::ApplicationAutoScaling::ScalingPolicy`` resource defines a scaling policy that Application Auto Scaling uses to adjust the capacity of a scalable target. \n For more information, see [Target tracking scaling policies](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-target-tracking.html) and [Step scaling policies](https://docs.aws.amazon.com/autoscaling/application/userguide/application-auto-scaling-step-scaling-policies.html) in the *Application Auto Scaling User Guide*.","inputs":{"properties":{"arn":{"type":"string","description":"Returns the ARN of a scaling policy."},"scalableDimension":{"type":"string","description":"The scalable dimension. This string consists of the service namespace, resource type, and scaling property.\n  +  ``ecs:service:DesiredCount`` - The task count of an ECS service.\n  +  ``elasticmapreduce:instancegroup:InstanceCount`` - The instance count of an EMR Instance Group.\n  +  ``ec2:spot-fleet-request:TargetCapacity`` - The target capacity of a Spot Fleet.\n  +  ``appstream:fleet:DesiredCapacity`` - The capacity of an AppStream 2.0 fleet.\n  +  ``dynamodb:table:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB table.\n  +  ``dynamodb:table:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB table.\n  +  ``dynamodb:index:ReadCapacityUnits`` - The provisioned read capacity for a DynamoDB global secondary index.\n  +  ``dynamodb:index:WriteCapacityUnits`` - The provisioned write capacity for a DynamoDB global secondary index.\n  +  ``rds:cluster:ReadReplicaCount`` - The count of Aurora Replicas in an Aurora DB cluster. Available for Aurora MySQL-compatible edition and Aurora PostgreSQL-compatible edition.\n  +  ``sagemaker:variant:DesiredInstanceCount`` - The number of EC2 instances for a SageMaker model endpoint variant.\n  +  ``custom-resource:ResourceType:Property`` - The scalable dimension for a custom resource provided by your own application or service.\n  +  ``comprehend:document-classifier-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend document classification endpoint.\n  +  ``comprehend:entity-recognizer-endpoint:DesiredInferenceUnits`` - The number of inference units for an Amazon Comprehend entity recognizer endpoint.\n  +  ``lambda:function:ProvisionedConcurrency`` - The provisioned concurrency for a Lambda function.\n  +  ``cassandra:table:ReadCapacityUnits`` - The provisioned read capacity for an Amazon Keyspaces table.\n  +  ``cassandra:table:WriteCapacityUnits`` - The provisioned write capacity for an Amazon Keyspaces table.\n  +  ``kafka:broker-storage:VolumeSize`` - The provisioned volume size (in GiB) for brokers in an Amazon MSK cluster.\n  +  ``elasticache:cache-cluster:Nodes`` - The number of nodes for an Amazon ElastiCache cache cluster.\n  +  ``elasticache:replication-group:NodeGroups`` - The number of node groups for an Amazon ElastiCache replication group.\n  +  ``elasticache:replication-group:Replicas`` - The number of replicas per node group for an Amazon ElastiCache replication group.\n  +  ``neptune:cluster:ReadReplicaCount`` - The count of read replicas in an Amazon Neptune DB cluster.\n  +  ``sagemaker:variant:DesiredProvisionedConcurrency`` - The provisioned concurrency for a SageMaker serverless endpoint.\n  +  ``sagemaker:inference-component:DesiredCopyCount`` - The number of copies across an endpoint for a SageMaker inference component.\n  +  ``workspaces:workspacespool:DesiredUserSessions`` - The number of user sessions for the WorkSpaces in the pool."}},"required":["arn","scalableDimension"]},"outputs":{"properties":{"arn":{"description":"Returns the ARN of a scaling policy.","type":"string"},"policyType":{"description":"The scaling policy type.\n The following policy types are supported: \n ``TargetTrackingScaling``—Not supported for Amazon EMR\n ``StepScaling``—Not supported for DynamoDB, Amazon Comprehend, Lambda, Amazon Keyspaces, Amazon MSK, Amazon ElastiCache, or Neptune.\n ``PredictiveScaling``—Only supported for Amazon ECS","type":"string"},"predictiveScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyPredictiveScalingPolicyConfiguration","description":"The predictive scaling policy configuration."},"stepScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyStepScalingPolicyConfiguration","description":"A step scaling policy."},"targetTrackingScalingPolicyConfiguration":{"$ref":"#/types/aws-native:applicationautoscaling:ScalingPolicyTargetTrackingScalingPolicyConfiguration","description":"A target tracking scaling policy."}}}},"aws-native:applicationinsights:getApplication":{"description":"Resource Type definition for AWS::ApplicationInsights::Application","inputs":{"properties":{"applicationArn":{"type":"string","description":"The ARN of the ApplicationInsights application."}},"required":["applicationArn"]},"outputs":{"properties":{"applicationArn":{"description":"The ARN of the ApplicationInsights application.","type":"string"},"autoConfigurationEnabled":{"description":"If set to true, application will be configured with recommended monitoring configuration.","type":"boolean"},"cweMonitorEnabled":{"description":"Indicates whether Application Insights can listen to CloudWatch events for the application resources.","type":"boolean"},"opsCenterEnabled":{"description":"When set to true, creates opsItems for any problems detected on an application.","type":"boolean"},"tags":{"description":"The tags of Application Insights application.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:applicationsignals:getDiscovery":{"description":"Resource Type definition for AWS::ApplicationSignals::Discovery","inputs":{"properties":{"accountId":{"type":"string","description":"The 12 digit AWS Account ID for the account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The 12 digit AWS Account ID for the account.","type":"string"}}}},"aws-native:applicationsignals:getGroupingConfiguration":{"description":"Resource Type definition for AWS::ApplicationSignals::GroupingConfiguration","inputs":{"properties":{"accountId":{"type":"string","description":"The 12 digit AWS Account ID for the account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The 12 digit AWS Account ID for the account.","type":"string"},"groupingAttributeDefinitions":{"description":"An array of grouping attribute definitions that specify how services should be grouped based on various attributes and source keys.","items":{"$ref":"#/types/aws-native:applicationsignals:GroupingConfigurationGroupingAttributeDefinition"},"type":"array"},"updatedAt":{"description":"The timestamp when this grouping configuration was last updated. When used in a raw HTTP Query API, it is formatted as epoch time in seconds.","type":"string"}}}},"aws-native:applicationsignals:getServiceLevelObjective":{"description":"Resource Type definition for AWS::ApplicationSignals::ServiceLevelObjective","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of this SLO."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of this SLO.","type":"string"},"burnRateConfigurations":{"description":"Each object in this array defines the length of the look-back window used to calculate one burn rate metric for this SLO. The burn rate measures how fast the service is consuming the error budget, relative to the attainment goal of the SLO.","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveBurnRateConfiguration"},"type":"array"},"createdTime":{"description":"Epoch time in seconds of the time that this SLO was created","type":"integer"},"description":{"description":"An optional description for this SLO. Default is 'No description'","type":"string"},"evaluationType":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveEvaluationType","description":"Displays whether this is a period-based SLO or a request-based SLO."},"exclusionWindows":{"description":"The time window to be excluded from the SLO performance metrics.","items":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveExclusionWindow"},"type":"array"},"goal":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveGoal","description":"This structure contains the attributes that determine the goal of an SLO. This includes the time period for evaluation and the attainment threshold."},"lastUpdatedTime":{"description":"Epoch time in seconds of the time that this SLO was most recently updated","type":"integer"},"requestBasedSli":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveRequestBasedSli","description":"A structure containing information about the performance metric that this SLO monitors, if this is a request-based SLO."},"sli":{"$ref":"#/types/aws-native:applicationsignals:ServiceLevelObjectiveSli","description":"A structure containing information about the performance metric that this SLO monitors, if this is a period-based SLO."},"tags":{"description":"A list of key-value pairs to associate with the SLO. You can associate as many as 50 tags with an SLO. To be able to associate tags with the SLO when you create the SLO, you must have the cloudwatch:TagResource permission.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:apprunner:getAutoScalingConfiguration":{"description":"Describes an AWS App Runner automatic configuration resource that enables automatic scaling of instances used to process web requests. You can share an auto scaling configuration across multiple services.","inputs":{"properties":{"autoScalingConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of this auto scaling configuration."}},"required":["autoScalingConfigurationArn"]},"outputs":{"properties":{"autoScalingConfigurationArn":{"description":"The Amazon Resource Name (ARN) of this auto scaling configuration.","type":"string"},"autoScalingConfigurationRevision":{"description":"The revision of this auto scaling configuration. It's unique among all the active configurations (\"Status\": \"ACTIVE\") that share the same AutoScalingConfigurationName.","type":"integer"},"latest":{"description":"It's set to true for the configuration with the highest Revision among all configurations that share the same AutoScalingConfigurationName. It's set to false otherwise. App Runner temporarily doubles the number of provisioned instances during deployments, to maintain the same capacity for both old and new code.","type":"boolean"}}}},"aws-native:apprunner:getObservabilityConfiguration":{"description":"The AWS::AppRunner::ObservabilityConfiguration resource  is an AWS App Runner resource type that specifies an App Runner observability configuration","inputs":{"properties":{"observabilityConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of this ObservabilityConfiguration"}},"required":["observabilityConfigurationArn"]},"outputs":{"properties":{"latest":{"description":"It's set to true for the configuration with the highest Revision among all configurations that share the same Name. It's set to false otherwise.","type":"boolean"},"observabilityConfigurationArn":{"description":"The Amazon Resource Name (ARN) of this ObservabilityConfiguration","type":"string"},"observabilityConfigurationRevision":{"description":"The revision of this observability configuration. It's unique among all the active configurations ('Status': 'ACTIVE') that share the same ObservabilityConfigurationName.","type":"integer"}}}},"aws-native:apprunner:getService":{"description":"The AWS::AppRunner::Service resource specifies an AppRunner Service.","inputs":{"properties":{"serviceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AppRunner Service."}},"required":["serviceArn"]},"outputs":{"properties":{"healthCheckConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceHealthCheckConfiguration","description":"The settings for the health check that AWS App Runner performs to monitor the health of the App Runner service."},"instanceConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceInstanceConfiguration","description":"The runtime configuration of instances (scaling units) of your service."},"networkConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceNetworkConfiguration","description":"Configuration settings related to network traffic of the web application that the App Runner service runs."},"observabilityConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceObservabilityConfiguration","description":"The observability configuration of your service."},"serviceArn":{"description":"The Amazon Resource Name (ARN) of the AppRunner Service.","type":"string"},"serviceId":{"description":"The AppRunner Service Id","type":"string"},"serviceUrl":{"description":"The Service Url of the AppRunner Service.","type":"string"},"sourceConfiguration":{"$ref":"#/types/aws-native:apprunner:ServiceSourceConfiguration","description":"The source to deploy to the App Runner service. It can be a code or an image repository."},"status":{"description":"AppRunner Service status.","type":"string"}}}},"aws-native:apprunner:getVpcConnector":{"description":"The AWS::AppRunner::VpcConnector resource specifies an App Runner VpcConnector.","inputs":{"properties":{"vpcConnectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of this VPC connector."}},"required":["vpcConnectorArn"]},"outputs":{"properties":{"vpcConnectorArn":{"description":"The Amazon Resource Name (ARN) of this VPC connector.","type":"string"},"vpcConnectorRevision":{"description":"The revision of this VPC connector. It's unique among all the active connectors (\"Status\": \"ACTIVE\") that share the same Name.","type":"integer"}}}},"aws-native:apprunner:getVpcIngressConnection":{"description":"The AWS::AppRunner::VpcIngressConnection resource is an App Runner resource that specifies an App Runner VpcIngressConnection.","inputs":{"properties":{"vpcIngressConnectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VpcIngressConnection."}},"required":["vpcIngressConnectionArn"]},"outputs":{"properties":{"domainName":{"description":"The Domain name associated with the VPC Ingress Connection.","type":"string"},"ingressVpcConfiguration":{"$ref":"#/types/aws-native:apprunner:VpcIngressConnectionIngressVpcConfiguration","description":"Specifications for the customer’s Amazon VPC and the related AWS PrivateLink VPC endpoint that are used to create the VPC Ingress Connection resource."},"status":{"$ref":"#/types/aws-native:apprunner:VpcIngressConnectionStatus","description":"The current status of the VpcIngressConnection."},"vpcIngressConnectionArn":{"description":"The Amazon Resource Name (ARN) of the VpcIngressConnection.","type":"string"}}}},"aws-native:appstream:getAppBlock":{"description":"Resource Type definition for AWS::AppStream::AppBlock","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the app block."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the app block.","type":"string"},"createdTime":{"description":"The time when the app block was created.","type":"string"},"tags":{"description":"The tags of the app block.","items":{"oneOf":[{"$ref":"#/types/aws-native:appstream:AppBlockTag0Properties"},{"$ref":"#/types/aws-native:appstream:AppBlockTag1Properties"}]},"type":"array"}}}},"aws-native:appstream:getAppBlockBuilder":{"description":"Resource Type definition for AWS::AppStream::AppBlockBuilder.","inputs":{"properties":{"name":{"type":"string","description":"The name of the app block builder."}},"required":["name"]},"outputs":{"properties":{"accessEndpoints":{"description":"The access endpoints of the app block builder.","items":{"$ref":"#/types/aws-native:appstream:AppBlockBuilderAccessEndpoint"},"type":"array"},"arn":{"description":"The ARN of the app block builder.","type":"string"},"createdTime":{"description":"The time when the app block builder was created.","type":"string"},"description":{"description":"The description of the app block builder.","type":"string"},"displayName":{"description":"The display name of the app block builder.","type":"string"},"enableDefaultInternetAccess":{"description":"Indicates whether default internet access is enabled for the app block builder.","type":"boolean"},"iamRoleArn":{"description":"The ARN of the IAM role that is applied to the app block builder.","type":"string"},"instanceType":{"description":"The instance type of the app block builder.","type":"string"},"platform":{"description":"The platform of the app block builder.\n\n*Allowed values* : `WINDOWS_SERVER_2019`","type":"string"},"tags":{"description":"The tags of the app block builder.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcConfig":{"$ref":"#/types/aws-native:appstream:AppBlockBuilderVpcConfig","description":"The VPC configuration for the app block builder."}}}},"aws-native:appstream:getApplication":{"description":"Resource Type definition for AWS::AppStream::Application","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the application."}},"required":["arn"]},"outputs":{"properties":{"appBlockArn":{"description":"The app block ARN with which the application should be associated.","type":"string"},"arn":{"description":"The ARN of the application.","type":"string"},"createdTime":{"description":"The time when the application was created.","type":"string"},"description":{"description":"The description of the application.","type":"string"},"displayName":{"description":"The display name of the application. This name is visible to users in the application catalog.","type":"string"},"iconS3Location":{"$ref":"#/types/aws-native:appstream:ApplicationS3Location","description":"The icon S3 location of the application."},"launchParameters":{"description":"The launch parameters of the application.","type":"string"},"launchPath":{"description":"The launch path of the application.","type":"string"},"tags":{"description":"The tags of the application.","items":{"oneOf":[{"$ref":"#/types/aws-native:appstream:ApplicationTag0Properties"},{"$ref":"#/types/aws-native:appstream:ApplicationTag1Properties"}]},"type":"array"},"workingDirectory":{"description":"The working directory of the application.","type":"string"}}}},"aws-native:appstream:getDirectoryConfig":{"description":"Resource Type definition for AWS::AppStream::DirectoryConfig","inputs":{"properties":{"directoryName":{"type":"string","description":"The fully qualified name of the directory (for example, corp.example.com)."}},"required":["directoryName"]},"outputs":{"properties":{"certificateBasedAuthProperties":{"$ref":"#/types/aws-native:appstream:DirectoryConfigCertificateBasedAuthProperties","description":"The certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances."},"organizationalUnitDistinguishedNames":{"description":"The distinguished names of the organizational units for computer accounts.","items":{"type":"string"},"type":"array"},"serviceAccountCredentials":{"$ref":"#/types/aws-native:appstream:DirectoryConfigServiceAccountCredentials","description":"The credentials for the service account used by the streaming instance to connect to the directory. Do not use this parameter directly. Use `ServiceAccountCredentials` as an input parameter with `noEcho` as shown in the [Parameters](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html) . For best practices information, see [Do Not Embed Credentials in Your Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/best-practices.html#creds) ."}}}},"aws-native:appstream:getEntitlement":{"description":"Resource Type definition for AWS::AppStream::Entitlement","inputs":{"properties":{"name":{"type":"string","description":"The name of the entitlement."},"stackName":{"type":"string","description":"The name of the stack."}},"required":["stackName","name"]},"outputs":{"properties":{"appVisibility":{"description":"Specifies whether to entitle all apps or only selected apps.","type":"string"},"attributes":{"description":"The attributes of the entitlement.","items":{"$ref":"#/types/aws-native:appstream:EntitlementAttribute"},"type":"array"},"createdTime":{"description":"The time when the entitlement was created.","type":"string"},"description":{"description":"The description of the entitlement.","type":"string"},"lastModifiedTime":{"description":"The time when the entitlement was last modified.","type":"string"}}}},"aws-native:appstream:getImageBuilder":{"description":"Resource Type definition for AWS::AppStream::ImageBuilder","inputs":{"properties":{"name":{"type":"string","description":"A unique name for the image builder."}},"required":["name"]},"outputs":{"properties":{"accessEndpoints":{"description":"The list of virtual private cloud (VPC) interface endpoint objects. Administrators can connect to the image builder only through the specified endpoints.","items":{"$ref":"#/types/aws-native:appstream:ImageBuilderAccessEndpoint"},"type":"array"},"appstreamAgentVersion":{"description":"The version of the WorkSpaces Applications agent to use for this image builder. To use the latest version of the WorkSpaces Applications agent, specify [LATEST].","type":"string"},"description":{"description":"The description to display.","type":"string"},"displayName":{"description":"The image builder name to display.","type":"string"},"domainJoinInfo":{"$ref":"#/types/aws-native:appstream:ImageBuilderDomainJoinInfo","description":"The name of the directory and organizational unit (OU) to use to join the image builder to a Microsoft Active Directory domain."},"enableDefaultInternetAccess":{"description":"Enables or disables default internet access for the image builder.","type":"boolean"},"iamRoleArn":{"description":"The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the Security Token Service `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the *appstream_machine_role* credential profile on the instance.\n\nFor more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the *Amazon AppStream 2.0 Administration Guide* .","type":"string"},"imageArn":{"description":"The ARN of the public, private, or shared image to use.","type":"string"},"instanceType":{"description":"The instance type to use when launching the image builder. The following instance types are available:\n\n- stream.standard.small\n- stream.standard.medium\n- stream.standard.large\n- stream.compute.large\n- stream.compute.xlarge\n- stream.compute.2xlarge\n- stream.compute.4xlarge\n- stream.compute.8xlarge\n- stream.memory.large\n- stream.memory.xlarge\n- stream.memory.2xlarge\n- stream.memory.4xlarge\n- stream.memory.8xlarge\n- stream.memory.z1d.large\n- stream.memory.z1d.xlarge\n- stream.memory.z1d.2xlarge\n- stream.memory.z1d.3xlarge\n- stream.memory.z1d.6xlarge\n- stream.memory.z1d.12xlarge\n- stream.graphics-design.large\n- stream.graphics-design.xlarge\n- stream.graphics-design.2xlarge\n- stream.graphics-design.4xlarge\n- stream.graphics.g4dn.xlarge\n- stream.graphics.g4dn.2xlarge\n- stream.graphics.g4dn.4xlarge\n- stream.graphics.g4dn.8xlarge\n- stream.graphics.g4dn.12xlarge\n- stream.graphics.g4dn.16xlarge\n- stream.graphics.g5.xlarge\n- stream.graphics.g5.2xlarge\n- stream.graphics.g5.4xlarge\n- stream.graphics.g5.8xlarge\n- stream.graphics.g5.16xlarge\n- stream.graphics.g5.12xlarge\n- stream.graphics.g5.24xlarge\n- stream.graphics.g6.xlarge\n- stream.graphics.g6.2xlarge\n- stream.graphics.g6.4xlarge\n- stream.graphics.g6.8xlarge\n- stream.graphics.g6.16xlarge\n- stream.graphics.g6.12xlarge\n- stream.graphics.g6.24xlarge\n- stream.graphics.gr6.4xlarge\n- stream.graphics.gr6.8xlarge\n- stream.graphics.g6f.large\n- stream.graphics.g6f.xlarge\n- stream.graphics.g6f.2xlarge\n- stream.graphics.g6f.4xlarge\n- stream.graphics.gr6f.4xlarge","type":"string"},"rootVolumeConfig":{"$ref":"#/types/aws-native:appstream:ImageBuilderVolumeConfig"},"streamingUrl":{"description":"The URL to start an image builder streaming session, returned as a string.","type":"string"},"tags":{"description":"An array of key-value pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcConfig":{"$ref":"#/types/aws-native:appstream:ImageBuilderVpcConfig","description":"The VPC configuration for the image builder. You can specify only one subnet."}}}},"aws-native:appsync:getApi":{"description":"Resource schema for AppSync Api","inputs":{"properties":{"apiArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AppSync Api"}},"required":["apiArn"]},"outputs":{"properties":{"apiArn":{"description":"The Amazon Resource Name (ARN) of the AppSync Api","type":"string"},"apiId":{"description":"The unique identifier for the AppSync Api generated by the service","type":"string"},"dns":{"$ref":"#/types/aws-native:appsync:ApiDnsMap"},"eventConfig":{"$ref":"#/types/aws-native:appsync:ApiEventConfig","description":"Describes the authorization configuration for connections, message publishing, message subscriptions, and logging for an Event API."},"name":{"description":"The name of the `Api` .","type":"string"},"ownerContact":{"description":"The owner contact information for an API resource.\n\nThis field accepts any string input with a length of 0 - 256 characters.","type":"string"},"tags":{"description":"A set of tags (key-value pairs) for this API.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appsync:getChannelNamespace":{"description":"Resource schema for AppSync ChannelNamespace","inputs":{"properties":{"channelNamespaceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the channel namespace."}},"required":["channelNamespaceArn"]},"outputs":{"properties":{"channelNamespaceArn":{"description":"The Amazon Resource Name (ARN) of the channel namespace.","type":"string"},"codeHandlers":{"description":"The event handler functions that run custom business logic to process published events and subscribe requests.","type":"string"},"handlerConfigs":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceHandlerConfigs","description":"The configuration for the `OnPublish` and `OnSubscribe` handlers."},"publishAuthModes":{"description":"List of AuthModes supported for Publish operations.","items":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthMode"},"type":"array"},"subscribeAuthModes":{"description":"List of AuthModes supported for Subscribe operations.","items":{"$ref":"#/types/aws-native:appsync:ChannelNamespaceAuthMode"},"type":"array"},"tags":{"description":"A set of tags (key-value pairs) for this channel namespace.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appsync:getDataSource":{"description":"Resource Type definition for AWS::AppSync::DataSource","inputs":{"properties":{"dataSourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the API key, such as arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/datasources/datasourcename."}},"required":["dataSourceArn"]},"outputs":{"properties":{"dataSourceArn":{"description":"The Amazon Resource Name (ARN) of the API key, such as arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/datasources/datasourcename.","type":"string"},"description":{"description":"The description of the data source.","type":"string"},"dynamoDbConfig":{"$ref":"#/types/aws-native:appsync:DataSourceDynamoDbConfig","description":"AWS Region and TableName for an Amazon DynamoDB table in your account."},"elasticsearchConfig":{"$ref":"#/types/aws-native:appsync:DataSourceElasticsearchConfig","description":"AWS Region and Endpoints for an Amazon OpenSearch Service domain in your account.\nAs of September 2021, Amazon Elasticsearch Service is Amazon OpenSearch Service. This property is deprecated. For new data sources, use OpenSearchServiceConfig to specify an OpenSearch Service data source."},"eventBridgeConfig":{"$ref":"#/types/aws-native:appsync:DataSourceEventBridgeConfig","description":"ARN for the EventBridge bus."},"httpConfig":{"$ref":"#/types/aws-native:appsync:DataSourceHttpConfig","description":"Endpoints for an HTTP data source."},"lambdaConfig":{"$ref":"#/types/aws-native:appsync:DataSourceLambdaConfig","description":"An ARN of a Lambda function in valid ARN format. This can be the ARN of a Lambda function that exists in the current account or in another account."},"metricsConfig":{"$ref":"#/types/aws-native:appsync:DataSourceMetricsConfig","description":"Enables or disables enhanced data source metrics for specified data sources. Note that `MetricsConfig` won't be used unless the `dataSourceLevelMetricsBehavior` value is set to `PER_DATA_SOURCE_METRICS` . If the `dataSourceLevelMetricsBehavior` is set to `FULL_REQUEST_DATA_SOURCE_METRICS` instead, `MetricsConfig` will be ignored. However, you can still set its value.\n\n`MetricsConfig` can be `ENABLED` or `DISABLED` ."},"openSearchServiceConfig":{"$ref":"#/types/aws-native:appsync:DataSourceOpenSearchServiceConfig","description":"AWS Region and Endpoints for an Amazon OpenSearch Service domain in your account."},"relationalDatabaseConfig":{"$ref":"#/types/aws-native:appsync:DataSourceRelationalDatabaseConfig","description":"Relational Database configuration of the relational database data source."},"serviceRoleArn":{"description":"The AWS Identity and Access Management service role ARN for the data source. The system assumes this role when accessing the data source.","type":"string"},"type":{"description":"The type of the data source.","type":"string"}}}},"aws-native:appsync:getDomainName":{"description":"Resource Type definition for AWS::AppSync::DomainName","inputs":{"properties":{"domainName":{"type":"string","description":"The domain name.","language":{"csharp":{"name":"DomainNameValue"}}}},"required":["domainName"]},"outputs":{"properties":{"appSyncDomainName":{"description":"The domain name provided by AWS AppSync .","type":"string"},"description":{"description":"The decription for your domain name.","type":"string"},"domainNameArn":{"description":"The Amazon Resource Name (ARN) for the Domain Name.","type":"string"},"hostedZoneId":{"description":"The ID of your Amazon Route 53 hosted zone.","type":"string"},"tags":{"description":"A set of tags (key-value pairs) for this domain name.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:appsync:getDomainNameApiAssociation":{"description":"Resource Type definition for AWS::AppSync::DomainNameApiAssociation","inputs":{"properties":{"apiAssociationIdentifier":{"type":"string"}},"required":["apiAssociationIdentifier"]},"outputs":{"properties":{"apiAssociationIdentifier":{"type":"string"},"apiId":{"description":"The API ID.","type":"string"}}}},"aws-native:appsync:getFunctionConfiguration":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"functionArn":{"type":"string","description":"The ARN for the function generated by the service"}},"required":["functionArn"]},"outputs":{"properties":{"code":{"description":"The resolver code that contains the request and response functions. When code is used, the runtime is required. The runtime value must be APPSYNC_JS.","type":"string"},"dataSourceName":{"description":"The name of data source this function will attach.","type":"string"},"description":{"description":"The function description.","type":"string"},"functionArn":{"description":"The ARN for the function generated by the service","type":"string"},"functionId":{"description":"The unique identifier for the function generated by the service","type":"string"},"functionVersion":{"description":"The version of the request mapping template. Currently, only the 2018-05-29 version of the template is supported.","type":"string"},"maxBatchSize":{"description":"The maximum number of resolver request inputs that will be sent to a single AWS Lambda function in a BatchInvoke operation.","type":"integer"},"name":{"description":"The name of the function.","type":"string"},"requestMappingTemplate":{"description":"The Function request mapping template. Functions support only the 2018-05-29 version of the request mapping template.","type":"string"},"responseMappingTemplate":{"description":"The Function response mapping template.","type":"string"},"runtime":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationAppSyncRuntime","description":"Describes a runtime used by an AWS AppSync pipeline resolver or AWS AppSync function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified."},"syncConfig":{"$ref":"#/types/aws-native:appsync:FunctionConfigurationSyncConfig","description":"Describes a Sync configuration for a resolver. Specifies which Conflict Detection strategy and Resolution strategy to use when the resolver is invoked."}}}},"aws-native:appsync:getGraphQlApi":{"description":"Resource Type definition for AWS::AppSync::GraphQLApi","inputs":{"properties":{"apiId":{"type":"string","description":"Unique AWS AppSync GraphQL API identifier."}},"required":["apiId"]},"outputs":{"properties":{"additionalAuthenticationProviders":{"description":"A list of additional authentication providers for the GraphqlApi API.","items":{"$ref":"#/types/aws-native:appsync:GraphQlApiAdditionalAuthenticationProvider"},"type":"array"},"apiId":{"description":"Unique AWS AppSync GraphQL API identifier.","type":"string"},"apiType":{"description":"The value that indicates whether the GraphQL API is a standard API (GRAPHQL) or merged API (MERGED).","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the API key","type":"string"},"authenticationType":{"description":"Security configuration for your GraphQL API","type":"string"},"enhancedMetricsConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiEnhancedMetricsConfig","description":"Enables and controls the enhanced metrics feature. Enhanced metrics emit granular data on API usage and performance such as AppSync request and error counts, latency, and cache hits/misses. All enhanced metric data is sent to your CloudWatch account, and you can configure the types of data that will be sent."},"environmentVariables":{"additionalProperties":{"type":"string"},"description":"A map containing the list of resources with their properties and environment variables.","type":"object"},"graphQlDns":{"description":"The fully qualified domain name (FQDN) of the endpoint URL of your GraphQL API.","type":"string"},"graphQlEndpointArn":{"description":"The GraphQL endpoint ARN.","type":"string"},"graphQlUrl":{"description":"The Endpoint URL of your GraphQL API.","type":"string"},"introspectionConfig":{"description":"Sets the value of the GraphQL API to enable (ENABLED) or disable (DISABLED) introspection. If no value is provided, the introspection configuration will be set to ENABLED by default. This field will produce an error if the operation attempts to use the introspection feature while this field is disabled.","type":"string"},"lambdaAuthorizerConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLambdaAuthorizerConfig","description":"A LambdaAuthorizerConfig holds configuration on how to authorize AWS AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AWS AppSync API may have only one Lambda authorizer configured at a time."},"logConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiLogConfig","description":"The Amazon CloudWatch Logs configuration."},"mergedApiExecutionRoleArn":{"description":"The AWS Identity and Access Management service role ARN for a merged API. ","type":"string"},"name":{"description":"The API name","type":"string"},"openIdConnectConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiOpenIdConnectConfig","description":"The OpenID Connect configuration."},"ownerContact":{"description":"The owner contact information for an API resource.","type":"string"},"queryDepthLimit":{"description":"The maximum depth a query can have in a single request. Depth refers to the amount of nested levels allowed in the body of query.","type":"integer"},"realtimeDns":{"description":"The fully qualified domain name (FQDN) of the real-time endpoint URL of your GraphQL API.","type":"string"},"realtimeUrl":{"description":"The GraphQL API real-time endpoint URL.","type":"string"},"resolverCountLimit":{"description":"The maximum number of resolvers that can be invoked in a single request.","type":"integer"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this GraphQL API.\n\n","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userPoolConfig":{"$ref":"#/types/aws-native:appsync:GraphQlApiUserPoolConfig","description":"Optional authorization configuration for using Amazon Cognito user pools with your GraphQL endpoint.\n\n"},"visibility":{"description":"Sets the scope of the GraphQL API to public (GLOBAL) or private (PRIVATE). By default, the scope is set to Global if no value is provided.","type":"string"},"xrayEnabled":{"description":"A flag indicating whether to use AWS X-Ray tracing for this GraphqlApi.\n\n","type":"boolean"}}}},"aws-native:appsync:getResolver":{"description":"The ``AWS::AppSync::Resolver`` resource defines the logical GraphQL resolver that you attach to fields in a schema. Request and response templates for resolvers are written in Apache Velocity Template Language (VTL) format. For more information about resolvers, see [Resolver Mapping Template Reference](https://docs.aws.amazon.com/appsync/latest/devguide/resolver-mapping-template-reference.html).\n  When you submit an update, CFNLong updates resources based on differences between what you submit and the stack's current template. To cause this resource to be updated you must change a property value for this resource in the CFNshort template. Changing the S3 file content without changing a property value will not result in an update operation.\n See [Update Behaviors of Stack Resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html) in the *User Guide*.","inputs":{"properties":{"resolverArn":{"type":"string","description":"ARN of the resolver, such as `arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/types/typename/resolvers/resolvername` ."}},"required":["resolverArn"]},"outputs":{"properties":{"cachingConfig":{"$ref":"#/types/aws-native:appsync:ResolverCachingConfig","description":"The caching configuration for the resolver."},"code":{"description":"The ``resolver`` code that contains the request and response functions. When code is used, the ``runtime`` is required. The runtime value must be ``APPSYNC_JS``.","type":"string"},"dataSourceName":{"description":"The resolver data source name.","type":"string"},"kind":{"description":"The resolver type.\n  +  *UNIT*: A UNIT resolver type. A UNIT resolver is the default resolver type. You can use a UNIT resolver to run a GraphQL query against a single data source.\n  +  *PIPELINE*: A PIPELINE resolver type. You can use a PIPELINE resolver to invoke a series of ``Function`` objects in a serial manner. You can use a pipeline resolver to run a GraphQL query against multiple data sources.","type":"string"},"maxBatchSize":{"description":"The maximum number of resolver request inputs that will be sent to a single LAMlong function in a ``BatchInvoke`` operation.","type":"integer"},"metricsConfig":{"$ref":"#/types/aws-native:appsync:ResolverMetricsConfig","description":"Enables or disables enhanced resolver metrics for specified resolvers. Note that ``MetricsConfig`` won't be used unless the ``resolverLevelMetricsBehavior`` value is set to ``PER_RESOLVER_METRICS``. If the ``resolverLevelMetricsBehavior`` is set to ``FULL_REQUEST_RESOLVER_METRICS`` instead, ``MetricsConfig`` will be ignored. However, you can still set its value."},"pipelineConfig":{"$ref":"#/types/aws-native:appsync:ResolverPipelineConfig","description":"Functions linked with the pipeline resolver."},"requestMappingTemplate":{"description":"The request mapping template.\n Request mapping templates are optional when using a Lambda data source. For all other data sources, a request mapping template is required.","type":"string"},"resolverArn":{"description":"ARN of the resolver, such as `arn:aws:appsync:us-east-1:123456789012:apis/graphqlapiid/types/typename/resolvers/resolvername` .","type":"string"},"responseMappingTemplate":{"description":"The response mapping template.","type":"string"},"runtime":{"$ref":"#/types/aws-native:appsync:ResolverAppSyncRuntime","description":"Describes a runtime used by an APSYlong resolver or APSYlong function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified."},"syncConfig":{"$ref":"#/types/aws-native:appsync:ResolverSyncConfig","description":"The ``SyncConfig`` for a resolver attached to a versioned data source."}}}},"aws-native:appsync:getSourceApiAssociation":{"description":"Resource Type definition for AWS::AppSync::SourceApiAssociation","inputs":{"properties":{"associationArn":{"type":"string","description":"ARN of the SourceApiAssociation."}},"required":["associationArn"]},"outputs":{"properties":{"associationArn":{"description":"ARN of the SourceApiAssociation.","type":"string"},"associationId":{"description":"Id of the SourceApiAssociation.","type":"string"},"description":{"description":"Description of the SourceApiAssociation.","type":"string"},"lastSuccessfulMergeDate":{"description":"Date of last schema successful merge.","type":"string"},"mergedApiArn":{"description":"ARN of the Merged API in the association.","type":"string"},"mergedApiId":{"description":"GraphQLApiId of the Merged API in the association.","type":"string"},"sourceApiArn":{"description":"ARN of the source API in the association.","type":"string"},"sourceApiAssociationConfig":{"$ref":"#/types/aws-native:appsync:SourceApiAssociationConfig","description":"Customized configuration for SourceApiAssociation."},"sourceApiAssociationStatus":{"$ref":"#/types/aws-native:appsync:SourceApiAssociationStatus","description":"Current status of SourceApiAssociation."},"sourceApiAssociationStatusDetail":{"description":"Current SourceApiAssociation status details.","type":"string"},"sourceApiId":{"description":"GraphQLApiId of the source API in the association.","type":"string"}}}},"aws-native:aps:getAnomalyDetector":{"description":"AnomalyDetector schema for cloudformation.","inputs":{"properties":{"arn":{"type":"string","description":"The AnomalyDetector ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The AnomalyDetector ARN.","type":"string"},"configuration":{"$ref":"#/types/aws-native:aps:AnomalyDetectorConfiguration","description":"Determines the anomaly detector's algorithm and its configuration."},"evaluationIntervalInSeconds":{"description":"The AnomalyDetector period of detection and metric generation.","type":"integer"},"labels":{"description":"An array of key-value pairs to provide meta-data.","items":{"$ref":"#/types/aws-native:aps:AnomalyDetectorLabel"},"type":"array"},"missingDataAction":{"$ref":"#/types/aws-native:aps:AnomalyDetectorMissingDataAction","description":"The action to perform when running the expression returns no data."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:aps:getResourcePolicy":{"description":"Resource Type definition for AWS::APS::ResourcePolicy","inputs":{"properties":{"workspaceArn":{"type":"string","description":"The Arn of an APS Workspace that the PolicyDocument will be attached to."}},"required":["workspaceArn"]},"outputs":{"properties":{"policyDocument":{"description":"The JSON to use as the Resource-based Policy.","type":"string"}}}},"aws-native:aps:getRuleGroupsNamespace":{"description":"RuleGroupsNamespace schema for cloudformation.","inputs":{"properties":{"arn":{"type":"string","description":"The RuleGroupsNamespace ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The RuleGroupsNamespace ARN.","type":"string"},"data":{"description":"The RuleGroupsNamespace data.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:aps:getScraper":{"description":"Resource Type definition for AWS::APS::Scraper","inputs":{"properties":{"arn":{"type":"string","description":"Scraper ARN."}},"required":["arn"]},"outputs":{"properties":{"alias":{"description":"Scraper alias.","type":"string"},"arn":{"description":"Scraper ARN.","type":"string"},"destination":{"$ref":"#/types/aws-native:aps:ScraperDestination","description":"The Amazon Managed Service for Prometheus workspace the scraper sends metrics to."},"roleArn":{"description":"IAM role ARN for the scraper.","type":"string"},"roleConfiguration":{"$ref":"#/types/aws-native:aps:ScraperRoleConfiguration","description":"The role configuration in an Amazon Managed Service for Prometheus scraper."},"scrapeConfiguration":{"$ref":"#/types/aws-native:aps:ScraperScrapeConfiguration","description":"The configuration in use by the scraper."},"scraperId":{"description":"Required to identify a specific scraper.","type":"string"},"scraperLoggingConfiguration":{"$ref":"#/types/aws-native:aps:ScraperLoggingConfiguration","description":"The definition of logging configuration in an Amazon Managed Service for Prometheus workspace."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:aps:getWorkspace":{"description":"Resource Type definition for AWS::APS::Workspace","inputs":{"properties":{"arn":{"type":"string","description":"Workspace arn."}},"required":["arn"]},"outputs":{"properties":{"alertManagerDefinition":{"description":"The AMP Workspace alert manager definition data","type":"string"},"alias":{"description":"AMP Workspace alias.","type":"string"},"arn":{"description":"Workspace arn.","type":"string"},"loggingConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceLoggingConfiguration","description":"Contains information about the logging configuration for the workspace."},"prometheusEndpoint":{"description":"AMP Workspace prometheus endpoint","type":"string"},"queryLoggingConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceQueryLoggingConfiguration","description":"The definition of logging configuration in an Amazon Managed Service for Prometheus workspace."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workspaceConfiguration":{"$ref":"#/types/aws-native:aps:WorkspaceConfiguration","description":"Use this structure to define label sets and the ingestion limits for time series that match label sets, and to specify the retention period of the workspace."},"workspaceId":{"description":"Required to identify a specific APS Workspace.","type":"string"}}}},"aws-native:arcregionswitch:getPlan":{"description":"Represents a plan that specifies Regions, IAM roles, and workflows of logic required to perform the desired change to your multi-Region application","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the plan."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the plan.","type":"string"},"associatedAlarms":{"additionalProperties":{"$ref":"#/types/aws-native:arcregionswitch:PlanAssociatedAlarm"},"description":"The associated application health alarms for a plan.","type":"object"},"description":{"description":"The description for a plan.","type":"string"},"executionRole":{"description":"The execution role for a plan.","type":"string"},"healthChecksForPlan":{"additionalProperties":{"items":{"$ref":"#/types/aws-native:arcregionswitch:PlanHealthCheckState"},"type":"array"},"type":"object"},"owner":{"description":"The owner of a plan.","type":"string"},"planHealthChecks":{"items":{"type":"string"},"type":"array"},"recoveryTimeObjectiveMinutes":{"description":"The recovery time objective for a plan.","type":"number"},"reportConfiguration":{"$ref":"#/types/aws-native:arcregionswitch:PlanReportConfiguration","description":"The report configuration for a plan."},"route53HealthChecks":{"$ref":"#/types/aws-native:arcregionswitch:Route53HealthChecksProperties"},"tags":{"additionalProperties":{"type":"string"},"type":"object"},"triggers":{"description":"The triggers for a plan.","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanTrigger"},"type":"array"},"version":{"description":"The version for the plan.","type":"string"},"workflows":{"description":"The workflows for a plan.","items":{"$ref":"#/types/aws-native:arcregionswitch:PlanWorkflow"},"type":"array"}}}},"aws-native:arczonalshift:getAutoshiftObserverNotificationStatus":{"description":"Definition of AWS::ARCZonalShift::AutoshiftObserverNotificationStatus Resource Type","inputs":{"properties":{"accountId":{"type":"string"},"region":{"type":"string"}},"required":["accountId","region"]},"outputs":{"properties":{"accountId":{"type":"string"},"region":{"type":"string"}}}},"aws-native:arczonalshift:getZonalAutoshiftConfiguration":{"description":"Definition of AWS::ARCZonalShift::ZonalAutoshiftConfiguration Resource Type","inputs":{"properties":{"resourceIdentifier":{"type":"string","description":"The identifier for the resource that AWS shifts traffic for. The identifier is the Amazon Resource Name (ARN) for the resource.\n\nAt this time, supported resources are Network Load Balancers and Application Load Balancers."}},"required":["resourceIdentifier"]},"outputs":{"properties":{"practiceRunConfiguration":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationPracticeRunConfiguration","description":"A practice run configuration for a resource includes the Amazon CloudWatch alarms that you've specified for a practice run, as well as any blocked dates or blocked windows for the practice run. When a resource has a practice run configuration, ARC shifts traffic for the resource weekly for practice runs.\n\nPractice runs are required for zonal autoshift. The zonal shifts that ARC starts for practice runs help you to ensure that shifting away traffic from an Availability Zone during an autoshift is safe for your application.\n\nYou can update or delete a practice run configuration. Before you delete a practice run configuration, you must disable zonal autoshift for the resource. A practice run configuration is required when zonal autoshift is enabled."},"zonalAutoshiftStatus":{"$ref":"#/types/aws-native:arczonalshift:ZonalAutoshiftConfigurationZonalAutoshiftStatus","description":"When zonal autoshift is `ENABLED` , you authorize AWS to shift away resource traffic for an application from an Availability Zone during events, on your behalf, to help reduce time to recovery. Traffic is also shifted away for the required weekly practice runs."}}}},"aws-native:athena:getCapacityReservation":{"description":"Resource schema for AWS::Athena::CapacityReservation","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the capacity reservation."}},"required":["arn"]},"outputs":{"properties":{"allocatedDpus":{"description":"The number of DPUs Athena has provisioned and allocated for the reservation","type":"integer"},"arn":{"description":"The ARN of the capacity reservation.","type":"string"},"capacityAssignmentConfiguration":{"$ref":"#/types/aws-native:athena:CapacityReservationCapacityAssignmentConfiguration","description":"Assigns Athena workgroups (and hence their queries) to capacity reservations. A capacity reservation can have only one capacity assignment configuration, but the capacity assignment configuration can be made up of multiple individual assignments. Each assignment specifies how Athena queries can consume capacity from the capacity reservation that their workgroup is mapped to."},"creationTime":{"description":"The date and time the reservation was created.","type":"string"},"lastSuccessfulAllocationTime":{"description":"The timestamp when the last successful allocated was made","type":"string"},"status":{"$ref":"#/types/aws-native:athena:CapacityReservationStatus","description":"The status of the reservation."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetDpus":{"description":"The number of DPUs to request to be allocated to the reservation.","type":"integer"}}}},"aws-native:athena:getDataCatalog":{"description":"Resource schema for AWS::Athena::DataCatalog","inputs":{"properties":{"name":{"type":"string","description":"The name of the data catalog to create. The catalog name must be unique for the AWS account and can use a maximum of 128 alphanumeric, underscore, at sign, or hyphen characters. "}},"required":["name"]},"outputs":{"properties":{"connectionType":{"description":"The type of connection for a FEDERATED data catalog","type":"string"},"description":{"description":"A description of the data catalog to be created. ","type":"string"},"error":{"description":"Text of the error that occurred during data catalog creation or deletion.","type":"string"},"parameters":{"additionalProperties":{"type":"string"},"description":"Specifies the Lambda function or functions to use for creating the data catalog. This is a mapping whose values depend on the catalog type. ","type":"object"},"status":{"$ref":"#/types/aws-native:athena:DataCatalogStatus","description":"The status of the creation or deletion of the data catalog. LAMBDA, GLUE, and HIVE data catalog types are created synchronously. Their status is either CREATE_COMPLETE or CREATE_FAILED. The FEDERATED data catalog type is created asynchronously."},"tags":{"description":"A list of comma separated tags to add to the data catalog that is created. ","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:athena:DataCatalogType","description":"The type of data catalog to create: LAMBDA for a federated catalog, GLUE for AWS Glue Catalog, or HIVE for an external hive metastore. FEDERATED is a federated catalog for which Athena creates the connection and the Lambda function for you based on the parameters that you pass."}}}},"aws-native:athena:getNamedQuery":{"description":"Resource schema for AWS::Athena::NamedQuery","inputs":{"properties":{"namedQueryId":{"type":"string","description":"The unique ID of the query."}},"required":["namedQueryId"]},"outputs":{"properties":{"namedQueryId":{"description":"The unique ID of the query.","type":"string"}}}},"aws-native:athena:getPreparedStatement":{"description":"Resource schema for AWS::Athena::PreparedStatement","inputs":{"properties":{"statementName":{"type":"string","description":"The name of the prepared statement."},"workGroup":{"type":"string","description":"The name of the workgroup to which the prepared statement belongs."}},"required":["statementName","workGroup"]},"outputs":{"properties":{"description":{"description":"The description of the prepared statement.","type":"string"},"queryStatement":{"description":"The query string for the prepared statement.","type":"string"}}}},"aws-native:athena:getWorkGroup":{"description":"Resource schema for AWS::Athena::WorkGroup","inputs":{"properties":{"name":{"type":"string","description":"The workGroup name."}},"required":["name"]},"outputs":{"properties":{"creationTime":{"description":"The date and time the workgroup was created.","type":"string"},"description":{"description":"The workgroup description.","type":"string"},"state":{"$ref":"#/types/aws-native:athena:WorkGroupState","description":"The state of the workgroup: ENABLED or DISABLED."},"tags":{"description":"One or more tags, separated by commas, that you want to attach to the workgroup as you create it","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workGroupConfiguration":{"$ref":"#/types/aws-native:athena:WorkGroupConfiguration","description":"The workgroup configuration"}}}},"aws-native:auditmanager:getAssessment":{"description":"An entity that defines the scope of audit evidence collected by AWS Audit Manager.","inputs":{"properties":{"assessmentId":{"type":"string","description":"The unique identifier for the assessment."}},"required":["assessmentId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the assessment.","type":"string"},"assessmentId":{"description":"The unique identifier for the assessment.","type":"string"},"assessmentReportsDestination":{"$ref":"#/types/aws-native:auditmanager:AssessmentReportsDestination","description":"The destination that evidence reports are stored in for the assessment."},"creationTime":{"description":"Specifies when the assessment was created.","type":"number"},"delegations":{"description":"The list of delegations.","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentDelegation"},"type":"array"},"roles":{"description":"The list of roles for the specified assessment.","items":{"$ref":"#/types/aws-native:auditmanager:AssessmentRole"},"type":"array"},"scope":{"$ref":"#/types/aws-native:auditmanager:AssessmentScope","description":"The wrapper of AWS accounts and services that are in scope for the assessment."},"status":{"$ref":"#/types/aws-native:auditmanager:AssessmentStatus","description":"The overall status of the assessment.\n\nWhen you create a new assessment, the initial `Status` value is always `ACTIVE` . When you create an assessment, even if you specify the value as `INACTIVE` , the value overrides to `ACTIVE` .\n\nAfter you create an assessment, you can change the value of the `Status` property at any time. For example, when you want to stop collecting evidence for your assessment, you can change the assessment status to `INACTIVE` ."},"tags":{"description":"The tags associated with the assessment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:autoscaling:getAutoScalingGroup":{"description":"The ``AWS::AutoScaling::AutoScalingGroup`` resource defines an Amazon EC2 Auto Scaling group, which is a collection of Amazon EC2 instances that are treated as a logical grouping for the purposes of automatic scaling and management. \n For more information about Amazon EC2 Auto Scaling, see the [Amazon EC2 Auto Scaling User Guide](https://docs.aws.amazon.com/autoscaling/ec2/userguide/what-is-amazon-ec2-auto-scaling.html). \n  Amazon EC2 Auto Scaling configures instances launched as part of an Auto Scaling group using either a [launch template](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-launchtemplate.html) or a launch configuration. We strongly recommend that you do not use launch configurations. For more information, see [Launch configurations](https://docs.aws.amazon.com/autoscaling/ec2/userguide/launch-configurations.html) in the *Amazon EC2 Auto Scaling User Guide*.\n For help migrating from launch configurations to launch templates, see [Migrate CloudFormation stacks from launch configurations to launch templates](https://docs.aws.amazon.com/autoscaling/ec2/userguide/migrate-launch-configurations-with-cloudformation.html) in the *Amazon EC2 Auto Scaling User Guide*.","inputs":{"properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group. This name must be unique per Region per account.\n The name can contain any ASCII character 33 to 126 including most punctuation characters, digits, and upper and lowercased letters.\n  You cannot use a colon (:) in the name."}},"required":["autoScalingGroupName"]},"outputs":{"properties":{"autoScalingGroupArn":{"description":"The Amazon Resource Name (ARN) of the Auto Scaling group.","type":"string"},"availabilityZoneDistribution":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneDistribution","description":"The EC2 instance capacity distribution across Availability Zones for the Auto Scaling group."},"availabilityZoneImpairmentPolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupAvailabilityZoneImpairmentPolicy","description":"The Availability Zone impairment policy for the Auto Scaling group."},"availabilityZones":{"description":"A list of Availability Zones where instances in the Auto Scaling group can be created. Used for launching into the default VPC subnet in each Availability Zone when not using the ``VPCZoneIdentifier`` property, or for attaching a network interface when an existing network interface ID is specified in a launch template.","items":{"type":"string"},"type":"array"},"capacityRebalance":{"description":"Indicates whether Capacity Rebalancing is enabled. Otherwise, Capacity Rebalancing is disabled. When you turn on Capacity Rebalancing, Amazon EC2 Auto Scaling attempts to launch a Spot Instance whenever Amazon EC2 notifies that a Spot Instance is at an elevated risk of interruption. After launching a new instance, it then terminates an old instance. For more information, see [Use Capacity Rebalancing to handle Amazon EC2 Spot Interruptions](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-capacity-rebalancing.html) in the in the *Amazon EC2 Auto Scaling User Guide*.","type":"boolean"},"capacityReservationSpecification":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupCapacityReservationSpecification","description":"The capacity reservation specification for the Auto Scaling group."},"context":{"description":"Reserved.","type":"string"},"cooldown":{"description":"*Only needed if you use simple scaling policies.* \n The amount of time, in seconds, between one scaling activity ending and another one starting due to simple scaling policies. For more information, see [Scaling cooldowns for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-scaling-cooldowns.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Default: ``300`` seconds","type":"string"},"defaultInstanceWarmup":{"description":"The amount of time, in seconds, until a new instance is considered to have finished initializing and resource consumption to become stable after it enters the ``InService`` state. \n During an instance refresh, Amazon EC2 Auto Scaling waits for the warm-up period after it replaces an instance before it moves on to replacing the next instance. Amazon EC2 Auto Scaling also waits for the warm-up period before aggregating the metrics for new instances with existing instances in the Amazon CloudWatch metrics that are used for scaling, resulting in more reliable usage data. For more information, see [Set the default instance warmup for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-default-instance-warmup.html) in the *Amazon EC2 Auto Scaling User Guide*.\n  To manage various warm-up settings at the group level, we recommend that you set the default instance warmup, *even if it is set to 0 seconds*. To remove a value that you previously set, include the property but specify ``-1`` for the value. However, we strongly recommend keeping the default instance warmup enabled by specifying a value of ``0`` or other nominal value.\n  Default: None","type":"integer"},"deletionProtection":{"description":"The deletion protection setting for the Auto Scaling group.","type":"string"},"desiredCapacity":{"description":"The desired capacity is the initial capacity of the Auto Scaling group at the time of its creation and the capacity it attempts to maintain. It can scale beyond this capacity if you configure automatic scaling.\n The number must be greater than or equal to the minimum size of the group and less than or equal to the maximum size of the group. If you do not specify a desired capacity when creating the stack, the default is the minimum size of the group.\n CloudFormation marks the Auto Scaling group as successful (by setting its status to CREATE_COMPLETE) when the desired capacity is reached. However, if a maximum Spot price is set in the launch template or launch configuration that you specified, then desired capacity is not used as a criteria for success. Whether your request is fulfilled depends on Spot Instance capacity and your maximum price.","type":"string"},"desiredCapacityType":{"description":"The unit of measurement for the value specified for desired capacity. Amazon EC2 Auto Scaling supports ``DesiredCapacityType`` for attribute-based instance type selection only. For more information, see [Create a mixed instances group using attribute-based instance type selection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-mixed-instances-group-attribute-based-instance-type-selection.html) in the *Amazon EC2 Auto Scaling User Guide*.\n By default, Amazon EC2 Auto Scaling specifies ``units``, which translates into number of instances.\n Valid values: ``units`` | ``vcpu`` | ``memory-mib``","type":"string"},"healthCheckGracePeriod":{"description":"The amount of time, in seconds, that Amazon EC2 Auto Scaling waits before checking the health status of an EC2 instance that has come into service and marking it unhealthy due to a failed health check. This is useful if your instances do not immediately pass their health checks after they enter the ``InService`` state. For more information, see [Set the health check grace period for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/health-check-grace-period.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Default: ``0`` seconds","type":"integer"},"healthCheckType":{"description":"A comma-separated value string of one or more health check types.\n The valid values are ``EC2``, ``EBS``, ``ELB``, and ``VPC_LATTICE``. ``EC2`` is the default health check and cannot be disabled. For more information, see [Health checks for instances in an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-health-checks.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Only specify ``EC2`` if you must clear a value that was previously set.","type":"string"},"instanceLifecyclePolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceLifecyclePolicy","description":"The instance lifecycle policy for the Auto Scaling group."},"instanceMaintenancePolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupInstanceMaintenancePolicy","description":"An instance maintenance policy. For more information, see [Set instance maintenance policy](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-maintenance-policy.html) in the *Amazon EC2 Auto Scaling User Guide*."},"launchConfigurationName":{"description":"The name of the launch configuration to use to launch instances.\n Required only if you don't specify ``LaunchTemplate``, ``MixedInstancesPolicy``, or ``InstanceId``.","type":"string"},"launchTemplate":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLaunchTemplateSpecification","description":"Information used to specify the launch template and version to use to launch instances. You can alternatively associate a launch template to the Auto Scaling group by specifying a ``MixedInstancesPolicy``. For more information about creating launch templates, see [Create a launch template for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-launch-template.html) in the *Amazon EC2 Auto Scaling User Guide*.\n If you omit this property, you must specify ``MixedInstancesPolicy``, ``LaunchConfigurationName``, or ``InstanceId``."},"lifecycleHookSpecificationList":{"description":"One or more lifecycle hooks to add to the Auto Scaling group before instances are launched.","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupLifecycleHookSpecification"},"type":"array"},"loadBalancerNames":{"description":"A list of Classic Load Balancers associated with this Auto Scaling group. For Application Load Balancers, Network Load Balancers, and Gateway Load Balancers, specify the ``TargetGroupARNs`` property instead.","items":{"type":"string"},"type":"array"},"maxInstanceLifetime":{"description":"The maximum amount of time, in seconds, that an instance can be in service. The default is null. If specified, the value must be either 0 or a number equal to or greater than 86,400 seconds (1 day). For more information, see [Replace Auto Scaling instances based on maximum instance lifetime](https://docs.aws.amazon.com/autoscaling/ec2/userguide/asg-max-instance-lifetime.html) in the *Amazon EC2 Auto Scaling User Guide*.","type":"integer"},"maxSize":{"description":"The maximum size of the group.\n  With a mixed instances policy that uses instance weighting, Amazon EC2 Auto Scaling may need to go above ``MaxSize`` to meet your capacity requirements. In this event, Amazon EC2 Auto Scaling will never go above ``MaxSize`` by more than your largest instance weight (weights that define how many units each instance contributes to the desired capacity of the group).","type":"string"},"metricsCollection":{"description":"Enables the monitoring of group metrics of an Auto Scaling group. By default, these metrics are disabled.","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMetricsCollection"},"type":"array"},"minSize":{"description":"The minimum size of the group.","type":"string"},"mixedInstancesPolicy":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupMixedInstancesPolicy","description":"An embedded object that specifies a mixed instances policy.\n The policy includes properties that not only define the distribution of On-Demand Instances and Spot Instances, the maximum price to pay for Spot Instances (optional), and how the Auto Scaling group allocates instance types to fulfill On-Demand and Spot capacities, but also the properties that specify the instance configuration information—the launch template and instance types. The policy can also include a weight for each instance type and different launch templates for individual instance types.\n For more information, see [Auto Scaling groups with multiple instance types and purchase options](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-mixed-instances-groups.html) in the *Amazon EC2 Auto Scaling User Guide*."},"newInstancesProtectedFromScaleIn":{"description":"Indicates whether newly launched instances are protected from termination by Amazon EC2 Auto Scaling when scaling in. For more information about preventing instances from terminating on scale in, see [Use instance scale-in protection](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-instance-protection.html) in the *Amazon EC2 Auto Scaling User Guide*.","type":"boolean"},"notificationConfiguration":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNotificationConfiguration"},"notificationConfigurations":{"description":"Configures an Auto Scaling group to send notifications when specified events take place.","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupNotificationConfiguration"},"type":"array"},"placementGroup":{"description":"The name of the placement group into which to launch your instances. For more information, see [Placement groups](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html) in the *Amazon EC2 User Guide*.\n  A *cluster* placement group is a logical grouping of instances within a single Availability Zone. You cannot specify multiple Availability Zones and a cluster placement group.","type":"string"},"serviceLinkedRoleArn":{"description":"The Amazon Resource Name (ARN) of the service-linked role that the Auto Scaling group uses to call other AWS service on your behalf. By default, Amazon EC2 Auto Scaling uses a service-linked role named ``AWSServiceRoleForAutoScaling``, which it creates if it does not exist. For more information, see [Service-linked roles](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-service-linked-role.html) in the *Amazon EC2 Auto Scaling User Guide*.","type":"string"},"tags":{"description":"One or more tags. You can tag your Auto Scaling group and propagate the tags to the Amazon EC2 instances it launches. Tags are not propagated to Amazon EBS volumes. To add tags to Amazon EBS volumes, specify the tags in a launch template but use caution. If the launch template specifies an instance tag with a key that is also specified for the Auto Scaling group, Amazon EC2 Auto Scaling overrides the value of that instance tag with the value specified by the Auto Scaling group. For more information, see [Tag Auto Scaling groups and instances](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-tagging.html) in the *Amazon EC2 Auto Scaling User Guide*.","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTagProperty"},"type":"array"},"targetGroupArns":{"description":"The Amazon Resource Names (ARN) of the Elastic Load Balancing target groups to associate with the Auto Scaling group. Instances are registered as targets with the target groups. The target groups receive incoming traffic and route requests to one or more registered targets. For more information, see [Use Elastic Load Balancing to distribute traffic across the instances in your Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/autoscaling-load-balancer.html) in the *Amazon EC2 Auto Scaling User Guide*.","items":{"type":"string"},"type":"array"},"terminationPolicies":{"description":"A policy or a list of policies that are used to select the instance to terminate. These policies are executed in the order that you list them. For more information, see [Configure termination policies for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-termination-policies.html) in the *Amazon EC2 Auto Scaling User Guide*.\n Valid values: ``Default`` | ``AllocationStrategy`` | ``ClosestToNextInstanceHour`` | ``NewestInstance`` | ``OldestInstance`` | ``OldestLaunchConfiguration`` | ``OldestLaunchTemplate`` | ``arn:aws:lambda:region:account-id:function:my-function:my-alias``","items":{"type":"string"},"type":"array"},"trafficSources":{"description":"The traffic sources associated with this Auto Scaling group.","items":{"$ref":"#/types/aws-native:autoscaling:AutoScalingGroupTrafficSourceIdentifier"},"type":"array"},"vpcZoneIdentifier":{"description":"A list of subnet IDs for a virtual private cloud (VPC) where instances in the Auto Scaling group can be created.\n If this resource specifies public subnets and is also in a VPC that is defined in the same stack template, you must use the [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) to declare a dependency on the [VPC-gateway attachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc-gateway-attachment.html).\n  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. You can optionally specify how CloudFormation handles these updates by using an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html).\n  Required to launch instances into a nondefault VPC. If you specify ``VPCZoneIdentifier`` with ``AvailabilityZones``, the subnets that you specify for this property must reside in those Availability Zones.","items":{"type":"string"},"type":"array"}}}},"aws-native:autoscaling:getLifecycleHook":{"description":"Resource Type definition for AWS::AutoScaling::LifecycleHook","inputs":{"properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group for the lifecycle hook."},"lifecycleHookName":{"type":"string","description":"The name of the lifecycle hook."}},"required":["autoScalingGroupName","lifecycleHookName"]},"outputs":{"properties":{"defaultResult":{"description":"The action the Auto Scaling group takes when the lifecycle hook timeout elapses or if an unexpected failure occurs. The valid values are CONTINUE and ABANDON (default).","type":"string"},"heartbeatTimeout":{"description":"The maximum time, in seconds, that can elapse before the lifecycle hook times out. The range is from 30 to 7200 seconds. The default value is 3600 seconds (1 hour). If the lifecycle hook times out, Amazon EC2 Auto Scaling performs the action that you specified in the DefaultResult property.","type":"integer"},"lifecycleTransition":{"description":"The instance state to which you want to attach the lifecycle hook.","type":"string"},"notificationMetadata":{"description":"Additional information that is included any time Amazon EC2 Auto Scaling sends a message to the notification target.","type":"string"},"notificationTargetArn":{"description":"The Amazon Resource Name (ARN) of the notification target that Amazon EC2 Auto Scaling uses to notify you when an instance is in the transition state for the lifecycle hook. You can specify an Amazon SQS queue or an Amazon SNS topic. The notification message includes the following information: lifecycle action token, user account ID, Auto Scaling group name, lifecycle hook name, instance ID, lifecycle transition, and notification metadata.","type":"string"},"roleArn":{"description":"The ARN of the IAM role that allows the Auto Scaling group to publish to the specified notification target, for example, an Amazon SNS topic or an Amazon SQS queue.","type":"string"}}}},"aws-native:autoscaling:getScalingPolicy":{"description":"The AWS::AutoScaling::ScalingPolicy resource specifies an Amazon EC2 Auto Scaling scaling policy so that the Auto Scaling group can scale the number of instances available for your application.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the AutoScaling scaling policy"}},"required":["arn"]},"outputs":{"properties":{"adjustmentType":{"description":"Specifies how the scaling adjustment is interpreted. The valid values are ChangeInCapacity, ExactCapacity, and PercentChangeInCapacity.","type":"string"},"arn":{"description":"The ARN of the AutoScaling scaling policy","type":"string"},"cooldown":{"description":"The duration of the policy's cooldown period, in seconds. When a cooldown period is specified here, it overrides the default cooldown period defined for the Auto Scaling group.","type":"string"},"estimatedInstanceWarmup":{"description":"The estimated time, in seconds, until a newly launched instance can contribute to the CloudWatch metrics. If not provided, the default is to use the value from the default cooldown period for the Auto Scaling group. Valid only if the policy type is TargetTrackingScaling or StepScaling.","type":"integer"},"metricAggregationType":{"description":"The aggregation type for the CloudWatch metrics. The valid values are Minimum, Maximum, and Average. If the aggregation type is null, the value is treated as Average. Valid only if the policy type is StepScaling.","type":"string"},"minAdjustmentMagnitude":{"description":"The minimum value to scale by when the adjustment type is PercentChangeInCapacity. For example, suppose that you create a step scaling policy to scale out an Auto Scaling group by 25 percent and you specify a MinAdjustmentMagnitude of 2. If the group has 4 instances and the scaling policy is performed, 25 percent of 4 is 1. However, because you specified a MinAdjustmentMagnitude of 2, Amazon EC2 Auto Scaling scales out the group by 2 instances.","type":"integer"},"policyName":{"description":"Returns the name of a scaling policy.","type":"string"},"policyType":{"description":"One of the following policy types: TargetTrackingScaling, StepScaling, SimpleScaling (default), PredictiveScaling","type":"string"},"predictiveScalingConfiguration":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyPredictiveScalingConfiguration","description":"A predictive scaling policy. Includes support for predefined metrics only."},"scalingAdjustment":{"description":"The amount by which to scale, based on the specified adjustment type. A positive value adds to the current capacity while a negative number removes from the current capacity. For exact capacity, you must specify a positive value. Required if the policy type is SimpleScaling. (Not used with any other policy type.)","type":"integer"},"stepAdjustments":{"description":"A set of adjustments that enable you to scale based on the size of the alarm breach. Required if the policy type is StepScaling. (Not used with any other policy type.)","items":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyStepAdjustment"},"type":"array"},"targetTrackingConfiguration":{"$ref":"#/types/aws-native:autoscaling:ScalingPolicyTargetTrackingConfiguration","description":"A target tracking scaling policy. Includes support for predefined or customized metrics."}}}},"aws-native:autoscaling:getScheduledAction":{"description":"The AWS::AutoScaling::ScheduledAction resource specifies an Amazon EC2 Auto Scaling scheduled action so that the Auto Scaling group can change the number of instances available for your application in response to predictable load changes.","inputs":{"properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group."},"scheduledActionName":{"type":"string","description":"Auto-generated unique identifier"}},"required":["scheduledActionName","autoScalingGroupName"]},"outputs":{"properties":{"desiredCapacity":{"description":"The desired capacity is the initial capacity of the Auto Scaling group after the scheduled action runs and the capacity it attempts to maintain.","type":"integer"},"endTime":{"description":"The latest scheduled start time to return. If scheduled action names are provided, this parameter is ignored.","type":"string"},"maxSize":{"description":"The minimum size of the Auto Scaling group.","type":"integer"},"minSize":{"description":"The minimum size of the Auto Scaling group.","type":"integer"},"recurrence":{"description":"The recurring schedule for the action, in Unix cron syntax format. When StartTime and EndTime are specified with Recurrence , they form the boundaries of when the recurring action starts and stops.","type":"string"},"scheduledActionName":{"description":"Auto-generated unique identifier","type":"string"},"startTime":{"description":"The earliest scheduled start time to return. If scheduled action names are provided, this parameter is ignored.","type":"string"},"timeZone":{"description":"The time zone for the cron expression.","type":"string"}}}},"aws-native:autoscaling:getWarmPool":{"description":"Resource schema for AWS::AutoScaling::WarmPool.","inputs":{"properties":{"autoScalingGroupName":{"type":"string","description":"The name of the Auto Scaling group."}},"required":["autoScalingGroupName"]},"outputs":{"properties":{"instanceReusePolicy":{"$ref":"#/types/aws-native:autoscaling:WarmPoolInstanceReusePolicy","description":"Indicates whether instances in the Auto Scaling group can be returned to the warm pool on scale in. The default is to terminate instances in the Auto Scaling group when the group scales in."},"maxGroupPreparedCapacity":{"description":"Specifies the maximum number of instances that are allowed to be in the warm pool or in any state except `Terminated` for the Auto Scaling group. This is an optional property. Specify it only if you do not want the warm pool size to be determined by the difference between the group's maximum capacity and its desired capacity.\n\n\u003e If a value for `MaxGroupPreparedCapacity` is not specified, Amazon EC2 Auto Scaling launches and maintains the difference between the group's maximum capacity and its desired capacity. If you specify a value for `MaxGroupPreparedCapacity` , Amazon EC2 Auto Scaling uses the difference between the `MaxGroupPreparedCapacity` and the desired capacity instead.\n\u003e \n\u003e The size of the warm pool is dynamic. Only when `MaxGroupPreparedCapacity` and `MinSize` are set to the same value does the warm pool have an absolute size. \n\nIf the desired capacity of the Auto Scaling group is higher than the `MaxGroupPreparedCapacity` , the capacity of the warm pool is 0, unless you specify a value for `MinSize` . To remove a value that you previously set, include the property but specify -1 for the value.","type":"integer"},"minSize":{"description":"Specifies the minimum number of instances to maintain in the warm pool. This helps you to ensure that there is always a certain number of warmed instances available to handle traffic spikes. Defaults to 0 if not specified.","type":"integer"},"poolState":{"description":"Sets the instance state to transition to after the lifecycle actions are complete. Default is `Stopped` .","type":"string"}}}},"aws-native:b2bi:getCapability":{"description":"Definition of AWS::B2BI::Capability Resource Type","inputs":{"properties":{"capabilityId":{"type":"string","description":"Returns a system-assigned unique identifier for the capability."}},"required":["capabilityId"]},"outputs":{"properties":{"capabilityArn":{"description":"Returns an Amazon Resource Name (ARN) for a specific AWS resource, such as a capability, partnership, profile, or transformer.","type":"string"},"capabilityId":{"description":"Returns a system-assigned unique identifier for the capability.","type":"string"},"configuration":{"$ref":"#/types/aws-native:b2bi:CapabilityConfigurationProperties","description":"Specifies a structure that contains the details for a capability."},"createdAt":{"description":"Returns a timestamp for creation date and time of the capability.","type":"string"},"instructionsDocuments":{"description":"Specifies one or more locations in Amazon S3, each specifying an EDI document that can be used with this capability. Each item contains the name of the bucket and the key, to identify the document's location.","items":{"$ref":"#/types/aws-native:b2bi:CapabilityS3Location"},"type":"array"},"modifiedAt":{"description":"Returns a timestamp that identifies the most recent date and time that the capability was modified.","type":"string"},"name":{"description":"The display name of the capability.","type":"string"},"tags":{"description":"Specifies the key-value pairs assigned to ARNs that you can use to group and search for resources by type. You can attach this metadata to resources (capabilities, partnerships, and so on) for any purpose.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:b2bi:getPartnership":{"description":"Definition of AWS::B2BI::Partnership Resource Type","inputs":{"properties":{"partnershipId":{"type":"string","description":"Returns the unique, system-generated identifier for a partnership."}},"required":["partnershipId"]},"outputs":{"properties":{"capabilities":{"description":"Returns one or more capabilities associated with this partnership.","items":{"type":"string"},"type":"array"},"capabilityOptions":{"$ref":"#/types/aws-native:b2bi:PartnershipCapabilityOptions","description":"Contains the details for an Outbound EDI capability."},"createdAt":{"description":"Returns a timestamp for creation date and time of the partnership.","type":"string"},"modifiedAt":{"description":"Returns a timestamp that identifies the most recent date and time that the partnership was modified.","type":"string"},"name":{"description":"Returns the name of the partnership.","type":"string"},"partnershipArn":{"description":"Returns an Amazon Resource Name (ARN) for a specific AWS resource, such as a capability, partnership, profile, or transformer.","type":"string"},"partnershipId":{"description":"Returns the unique, system-generated identifier for a partnership.","type":"string"},"tags":{"description":"A key-value pair for a specific partnership. Tags are metadata that you can use to search for and group capabilities for various purposes.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tradingPartnerId":{"description":"Returns the unique, system-generated identifier for a trading partner.","type":"string"}}}},"aws-native:b2bi:getProfile":{"description":"Definition of AWS::B2BI::Profile Resource Type","inputs":{"properties":{"profileId":{"type":"string"}},"required":["profileId"]},"outputs":{"properties":{"businessName":{"description":"Returns the name for the business associated with this profile.","type":"string"},"createdAt":{"description":"Returns the timestamp for creation date and time of the profile.","type":"string"},"email":{"type":"string"},"logGroupName":{"description":"Returns the name of the logging group.","type":"string"},"modifiedAt":{"description":"Returns the timestamp that identifies the most recent date and time that the profile was modified.","type":"string"},"name":{"description":"Returns the display name for profile.","type":"string"},"phone":{"description":"Specifies the phone number associated with the profile.","type":"string"},"profileArn":{"description":"Returns an Amazon Resource Name (ARN) for the profile.","type":"string"},"profileId":{"type":"string"},"tags":{"description":"A key-value pair for a specific profile. Tags are metadata that you can use to search for and group capabilities for various purposes.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:b2bi:getTransformer":{"description":"Definition of AWS::B2BI::Transformer Resource Type","inputs":{"properties":{"transformerId":{"type":"string","description":"The system-assigned unique identifier for the transformer."}},"required":["transformerId"]},"outputs":{"properties":{"createdAt":{"description":"Returns a timestamp indicating when the transformer was created. For example, `2023-07-20T19:58:44.624Z` .","type":"string"},"ediType":{"$ref":"#/types/aws-native:b2bi:TransformerEdiTypeProperties"},"fileFormat":{"$ref":"#/types/aws-native:b2bi:TransformerFileFormat"},"inputConversion":{"$ref":"#/types/aws-native:b2bi:TransformerInputConversion","description":"Returns a structure that contains the format options for the transformation."},"mapping":{"$ref":"#/types/aws-native:b2bi:TransformerMapping","description":"Returns the structure that contains the mapping template and its language (either XSLT or JSONATA)."},"mappingTemplate":{"description":"This shape is deprecated: This is a legacy trait. Please use input-conversion or output-conversion.","type":"string"},"modifiedAt":{"description":"Returns a timestamp representing the date and time for the most recent change for the transformer object.","type":"string"},"name":{"description":"Returns the descriptive name for the transformer.","type":"string"},"outputConversion":{"$ref":"#/types/aws-native:b2bi:TransformerOutputConversion","description":"Returns the `OutputConversion` object, which contains the format options for the outbound transformation."},"sampleDocument":{"description":"This shape is deprecated: This is a legacy trait. Please use input-conversion or output-conversion.","type":"string"},"sampleDocuments":{"$ref":"#/types/aws-native:b2bi:TransformerSampleDocuments","description":"Returns a structure that contains the Amazon S3 bucket and an array of the corresponding keys used to identify the location for your sample documents."},"status":{"$ref":"#/types/aws-native:b2bi:TransformerStatus","description":"Returns the state of the newly created transformer. The transformer can be either `active` or `inactive` . For the transformer to be used in a capability, its status must `active` ."},"tags":{"description":"A key-value pair for a specific transformer. Tags are metadata that you can use to search for and group capabilities for various purposes.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transformerArn":{"description":"Returns an Amazon Resource Name (ARN) for a specific transformer.","type":"string"},"transformerId":{"description":"The system-assigned unique identifier for the transformer.","type":"string"}}}},"aws-native:backup:getBackupPlan":{"description":"Resource Type definition for AWS::Backup::BackupPlan","inputs":{"properties":{"backupPlanId":{"type":"string","description":"Uniquely identifies a backup plan."}},"required":["backupPlanId"]},"outputs":{"properties":{"backupPlan":{"$ref":"#/types/aws-native:backup:BackupPlanResourceType","description":"Uniquely identifies the backup plan to be associated with the selection of resources.","language":{"csharp":{"name":"BackupPlanValue"}}},"backupPlanArn":{"description":"An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example, `arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50` .","type":"string"},"backupPlanId":{"description":"Uniquely identifies a backup plan.","type":"string"},"backupPlanTags":{"additionalProperties":{"type":"string"},"description":"The tags to assign to the backup plan.","type":"object"},"versionId":{"description":"Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes long. Version Ids cannot be edited.","type":"string"}}}},"aws-native:backup:getBackupSelection":{"description":"Resource Type definition for AWS::Backup::BackupSelection","inputs":{"properties":{"id":{"type":"string","description":"Uniquely identifies the backup selection."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"Uniquely identifies the backup selection.","type":"string"},"selectionId":{"description":"Uniquely identifies a request to assign a set of resources to a backup plan.","type":"string"}}}},"aws-native:backup:getBackupVault":{"description":"Resource Type definition for AWS::Backup::BackupVault","inputs":{"properties":{"backupVaultName":{"type":"string","description":"The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created."}},"required":["backupVaultName"]},"outputs":{"properties":{"accessPolicy":{"$ref":"pulumi.json#/Any","description":"A resource-based policy that is used to manage access permissions on the target backup vault.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Backup::BackupVault` for more information about the expected schema for this property."},"backupVaultArn":{"description":"An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example, `arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault` .","type":"string"},"backupVaultTags":{"additionalProperties":{"type":"string"},"description":"The tags to assign to the backup vault.","type":"object"},"lockConfiguration":{"$ref":"#/types/aws-native:backup:BackupVaultLockConfigurationType","description":"Configuration for [AWS Backup Vault Lock](https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html) ."},"notifications":{"$ref":"#/types/aws-native:backup:BackupVaultNotificationObjectType","description":"The SNS event notifications for the specified backup vault."}}}},"aws-native:backup:getFramework":{"description":"Contains detailed information about a framework. Frameworks contain controls, which evaluate and report on your backup events and resources. Frameworks generate daily compliance results.","inputs":{"properties":{"frameworkArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies Framework as a resource"}},"required":["frameworkArn"]},"outputs":{"properties":{"creationTime":{"description":"The date and time that a framework is created, in ISO 8601 representation. The value of CreationTime is accurate to milliseconds. For example, 2020-07-10T15:00:00.000-08:00 represents the 10th of July 2020 at 3:00 PM 8 hours behind UTC.","type":"string"},"deploymentStatus":{"description":"The deployment status of a framework. The statuses are: `CREATE_IN_PROGRESS | UPDATE_IN_PROGRESS | DELETE_IN_PROGRESS | COMPLETED | FAILED`","type":"string"},"frameworkArn":{"description":"An Amazon Resource Name (ARN) that uniquely identifies Framework as a resource","type":"string"},"frameworkControls":{"description":"Contains detailed information about all of the controls of a framework. Each framework must contain at least one control.","items":{"$ref":"#/types/aws-native:backup:FrameworkControl"},"type":"array"},"frameworkDescription":{"description":"An optional description of the framework with a maximum 1,024 characters.","type":"string"},"frameworkStatus":{"description":"A framework consists of one or more controls. Each control governs a resource, such as backup plans, backup selections, backup vaults, or recovery points. You can also turn AWS Config recording on or off for each resource. The statuses are:\n\n`ACTIVE` when recording is turned on for all resources governed by the framework.\n\n`PARTIALLY_ACTIVE` when recording is turned off for at least one resource governed by the framework.\n\n`INACTIVE` when recording is turned off for all resources governed by the framework.\n\n`UNAVAILABLE` when AWS Backup is unable to validate recording status at this time.","type":"string"},"frameworkTags":{"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:backup:getLogicallyAirGappedBackupVault":{"description":"Resource Type definition for AWS::Backup::LogicallyAirGappedBackupVault","inputs":{"properties":{"backupVaultName":{"type":"string","description":"The name of a logical container where backups are stored. Logically air-gapped backup vaults are identified by names that are unique to the account used to create them and the Region where they are created."}},"required":["backupVaultName"]},"outputs":{"properties":{"accessPolicy":{"$ref":"pulumi.json#/Any","description":"The backup vault access policy document in JSON format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Backup::LogicallyAirGappedBackupVault` for more information about the expected schema for this property."},"backupVaultArn":{"description":"The ARN of the backup vault.","type":"string"},"backupVaultTags":{"additionalProperties":{"type":"string"},"description":"The tags to assign to the vault.","type":"object"},"mpaApprovalTeamArn":{"description":"The Amazon Resource Name (ARN) of the MPA approval team to associate with the backup vault. This cannot be changed after it is set from the CloudFormation template.","type":"string"},"notifications":{"$ref":"#/types/aws-native:backup:LogicallyAirGappedBackupVaultNotificationObjectType","description":"Returns event notifications for the specified backup vault."},"vaultState":{"description":"The vault state. The possible values are `CREATING` , `AVAILABLE` , and `FAILED` .","type":"string"},"vaultType":{"description":"The vault type. The possible values are `BACKUP_VAULT` and `LOGICALLY_AIR_GAPPED_BACKUP_VAULT` .","type":"string"}}}},"aws-native:backup:getReportPlan":{"description":"Contains detailed information about a report plan in AWS Backup Audit Manager.","inputs":{"properties":{"reportPlanArn":{"type":"string","description":"An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN depends on the resource type."}},"required":["reportPlanArn"]},"outputs":{"properties":{"reportDeliveryChannel":{"$ref":"#/types/aws-native:backup:ReportDeliveryChannelProperties","description":"A structure that contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports."},"reportPlanArn":{"description":"An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN depends on the resource type.","type":"string"},"reportPlanDescription":{"description":"An optional description of the report plan with a maximum of 1,024 characters.","type":"string"},"reportPlanTags":{"description":"Metadata that you can assign to help organize the report plans that you create. Each tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"reportSetting":{"$ref":"#/types/aws-native:backup:ReportSettingProperties","description":"Identifies the report template for the report. Reports are built using a report template."}}}},"aws-native:backup:getRestoreTestingPlan":{"description":"Definition of AWS::Backup::RestoreTestingPlan Resource Type","inputs":{"properties":{"restoreTestingPlanName":{"type":"string","description":"The RestoreTestingPlanName is a unique string that is the name of the restore testing plan. This cannot be changed after creation, and it must consist of only alphanumeric characters and underscores."}},"required":["restoreTestingPlanName"]},"outputs":{"properties":{"recoveryPointSelection":{"$ref":"#/types/aws-native:backup:RestoreTestingPlanRestoreTestingRecoveryPointSelection","description":"The specified criteria to assign a set of resources, such as recovery point types or backup vaults."},"restoreTestingPlanArn":{"description":"An Amazon Resource Name (ARN) that uniquely identifies a restore testing plan.","type":"string"},"scheduleExpression":{"description":"A CRON expression in specified timezone when a restore testing plan is executed. When no CRON expression is provided, AWS Backup will use the default expression `cron(0 5 ? * * *)` .","type":"string"},"scheduleExpressionTimezone":{"description":"Optional. This is the timezone in which the schedule expression is set. By default, ScheduleExpressions are in UTC. You can modify this to a specified timezone.","type":"string"},"startWindowHours":{"description":"Defaults to 24 hours.\n\nA value in hours after a restore test is scheduled before a job will be canceled if it doesn't start successfully. This value is optional. If this value is included, this parameter has a maximum value of 168 hours (one week).","type":"integer"},"tags":{"description":"Optional tags to include. A tag is a key-value pair you can use to manage, filter, and search for your resources. Allowed characters include UTF-8 letters,numbers, spaces, and the following characters: `+ - = . _ : /.`","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:backup:getRestoreTestingSelection":{"description":"Resource Type definition for AWS::Backup::RestoreTestingSelection","inputs":{"properties":{"restoreTestingPlanName":{"type":"string","description":"Unique string that is the name of the restore testing plan.\n\nThe name cannot be changed after creation. The name must consist of only alphanumeric characters and underscores. Maximum length is 50."},"restoreTestingSelectionName":{"type":"string","description":"The unique name of the restore testing selection that belongs to the related restore testing plan.\n\nThe name consists of only alphanumeric characters and underscores. Maximum length is 50."}},"required":["restoreTestingPlanName","restoreTestingSelectionName"]},"outputs":{"properties":{"iamRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role that AWS Backup uses to create the target resource; for example: `arn:aws:iam::123456789012:role/S3Access` .","type":"string"},"protectedResourceArns":{"description":"You can include specific ARNs, such as `ProtectedResourceArns: [\"arn:aws:...\", \"arn:aws:...\"]` or you can include a wildcard: `ProtectedResourceArns: [\"*\"]` , but not both.","items":{"type":"string"},"type":"array"},"protectedResourceConditions":{"$ref":"#/types/aws-native:backup:RestoreTestingSelectionProtectedResourceConditions","description":"In a resource testing selection, this parameter filters by specific conditions such as `StringEquals` or `StringNotEquals` ."},"restoreMetadataOverrides":{"additionalProperties":{"type":"string"},"description":"You can override certain restore metadata keys by including the parameter `RestoreMetadataOverrides` in the body of `RestoreTestingSelection` . Key values are not case sensitive.\n\nSee the complete list of [restore testing inferred metadata](https://docs.aws.amazon.com/aws-backup/latest/devguide/restore-testing-inferred-metadata.html) .","type":"object"},"validationWindowHours":{"description":"This is amount of hours (1 to 168) available to run a validation script on the data. The data will be deleted upon the completion of the validation script or the end of the specified retention period, whichever comes first.","type":"integer"}}}},"aws-native:backup:getTieringConfiguration":{"description":"Resource Type definition for AWS::Backup::TieringConfiguration","inputs":{"properties":{"tieringConfigurationName":{"type":"string"}},"required":["tieringConfigurationName"]},"outputs":{"properties":{"backupVaultName":{"type":"string"},"creationTime":{"type":"string"},"lastUpdatedTime":{"type":"string"},"resourceSelection":{"items":{"$ref":"#/types/aws-native:backup:TieringConfigurationResourceSelection"},"type":"array"},"tieringConfigurationArn":{"type":"string"},"tieringConfigurationTags":{"additionalProperties":{"type":"string"},"type":"object"}}}},"aws-native:backupgateway:getHypervisor":{"description":"Definition of AWS::BackupGateway::Hypervisor Resource Type","inputs":{"properties":{"hypervisorArn":{"type":"string","description":"Returns `HypervisorArn` , an Amazon Resource Name (ARN) that uniquely identifies a Hypervisor. For example: `arn:aws:backup-gateway:us-east-1:123456789012:hypervisor/hype-1234D67D`"}},"required":["hypervisorArn"]},"outputs":{"properties":{"host":{"description":"The server host of the hypervisor. This can be either an IP address or a fully-qualified domain name (FQDN).","type":"string"},"hypervisorArn":{"description":"Returns `HypervisorArn` , an Amazon Resource Name (ARN) that uniquely identifies a Hypervisor. For example: `arn:aws:backup-gateway:us-east-1:123456789012:hypervisor/hype-1234D67D`","type":"string"}}}},"aws-native:batch:getComputeEnvironment":{"description":"Resource Type definition for AWS::Batch::ComputeEnvironment","inputs":{"properties":{"computeEnvironmentArn":{"type":"string","description":"Returns the compute environment ARN, such as `batch: *us-east-1* : *111122223333* :compute-environment/ *ComputeEnvironmentName*` ."}},"required":["computeEnvironmentArn"]},"outputs":{"properties":{"computeEnvironmentArn":{"description":"Returns the compute environment ARN, such as `batch: *us-east-1* : *111122223333* :compute-environment/ *ComputeEnvironmentName*` .","type":"string"},"computeResources":{"$ref":"#/types/aws-native:batch:ComputeEnvironmentComputeResources","description":"The ComputeResources property type specifies details of the compute resources managed by the compute environment. This parameter is required for managed compute environments. For more information, see [Compute Environments](https://docs.aws.amazon.com/batch/latest/userguide/compute_environments.html) in the ** ."},"context":{"description":"Reserved.","type":"string"},"serviceRole":{"description":"The full Amazon Resource Name (ARN) of the IAM role that allows AWS Batch to make calls to other AWS services on your behalf. For more information, see [AWS Batch service IAM role](https://docs.aws.amazon.com/batch/latest/userguide/service_IAM_role.html) in the *AWS Batch User Guide* .\n\n\u003e If your account already created the AWS Batch service-linked role, that role is used by default for your compute environment unless you specify a different role here. If the AWS Batch service-linked role doesn't exist in your account, and no role is specified here, the service attempts to create the AWS Batch service-linked role in your account. \n\nIf your specified role has a path other than `/` , then you must specify either the full role ARN (recommended) or prefix the role name with the path. For example, if a role with the name `bar` has a path of `/foo/` , specify `/foo/bar` as the role name. For more information, see [Friendly names and paths](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names) in the *IAM User Guide* .\n\n\u003e Depending on how you created your AWS Batch service role, its ARN might contain the `service-role` path prefix. When you only specify the name of the service role, AWS Batch assumes that your ARN doesn't use the `service-role` path prefix. Because of this, we recommend that you specify the full ARN of your service role when you create compute environments.","type":"string"},"state":{"description":"The state of the compute environment. If the state is `ENABLED` , then the compute environment accepts jobs from a queue and can scale out automatically based on queues.\n\nIf the state is `ENABLED` , then the AWS Batch scheduler can attempt to place jobs from an associated job queue on the compute resources within the environment. If the compute environment is managed, then it can scale its instances out or in automatically, based on the job queue demand.\n\nIf the state is `DISABLED` , then the AWS Batch scheduler doesn't attempt to place jobs within the environment. Jobs in a `STARTING` or `RUNNING` state continue to progress normally. Managed compute environments in the `DISABLED` state don't scale out.\n\n\u003e Compute environments in a `DISABLED` state may continue to incur billing charges. To prevent additional charges, turn off and then delete the compute environment. For more information, see [State](https://docs.aws.amazon.com/batch/latest/userguide/compute_environment_parameters.html#compute_environment_state) in the *AWS Batch User Guide* . \n\nWhen an instance is idle, the instance scales down to the `minvCpus` value. However, the instance size doesn't change. For example, consider a `c5.8xlarge` instance with a `minvCpus` value of `4` and a `desiredvCpus` value of `36` . This instance doesn't scale down to a `c5.large` instance.","type":"string"},"unmanagedvCpus":{"description":"The maximum number of vCPUs for an unmanaged compute environment. This parameter is only used for fair-share scheduling to reserve vCPU capacity for new share identifiers. If this parameter isn't provided for a fair-share job queue, no vCPU capacity is reserved.\n\n\u003e This parameter is only supported when the `type` parameter is set to `UNMANAGED` .","type":"integer"}}}},"aws-native:batch:getConsumableResource":{"description":"Resource Type definition for AWS::Batch::ConsumableResource","inputs":{"properties":{"consumableResourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the consumable resource."}},"required":["consumableResourceArn"]},"outputs":{"properties":{"availableQuantity":{"description":"Available Quantity of ConsumableResource.","type":"integer"},"consumableResourceArn":{"description":"The Amazon Resource Name (ARN) of the consumable resource.","type":"string"},"createdAt":{"description":"The Unix timestamp (in milliseconds) for when the consumable resource was created.","type":"integer"},"inUseQuantity":{"description":"In-use Quantity of ConsumableResource.","type":"integer"},"totalQuantity":{"description":"Total Quantity of ConsumableResource.","type":"integer"}}}},"aws-native:batch:getJobDefinition":{"description":"Resource Type definition for AWS::Batch::JobDefinition","inputs":{"properties":{"jobDefinitionName":{"type":"string","description":"The name of the job definition."}},"required":["jobDefinitionName"]},"outputs":{"properties":{"consumableResourceProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionConsumableResourceProperties","description":"Contains a list of consumable resources required by the job."},"containerProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionContainerProperties","description":"An object with properties specific to Amazon ECS-based jobs. When `containerProperties` is used in the job definition, it can't be used in addition to `eksProperties` , `ecsProperties` , or `nodeProperties` ."},"ecsProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEcsProperties","description":"An object that contains the properties for the Amazon ECS resources of a job.When `ecsProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `eksProperties` , or `nodeProperties` ."},"eksProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionEksProperties","description":"An object with properties that are specific to Amazon EKS-based jobs. When `eksProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `ecsProperties` , or `nodeProperties` ."},"jobDefinitionArn":{"description":"The job definition ARN, such as `batch: *us-east-1* : *111122223333* :job-definition/ *test-gpu* : *2*` .","type":"string"},"nodeProperties":{"$ref":"#/types/aws-native:batch:JobDefinitionNodeProperties","description":"An object with properties that are specific to multi-node parallel jobs. When `nodeProperties` is used in the job definition, it can't be used in addition to `containerProperties` , `ecsProperties` , or `eksProperties` .\n\n\u003e If the job runs on Fargate resources, don't specify `nodeProperties` . Use `containerProperties` instead."},"parameters":{"additionalProperties":{"type":"string"},"description":"Default parameters or parameter substitution placeholders that are set in the job definition. Parameters are specified as a key-value pair mapping. Parameters in a `SubmitJob` request override any corresponding parameter defaults from the job definition. For more information about specifying parameters, see [Job definition parameters](https://docs.aws.amazon.com/batch/latest/userguide/job_definition_parameters.html) in the *AWS Batch User Guide* .","type":"object"},"platformCapabilities":{"description":"The platform capabilities required by the job definition. If no value is specified, it defaults to `EC2` . Jobs run on Fargate resources specify `FARGATE` .","items":{"type":"string"},"type":"array"},"propagateTags":{"description":"Specifies whether to propagate the tags from the job or job definition to the corresponding Amazon ECS task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the tasks when the tasks are created. For tags with the same name, job tags are given priority over job definitions tags. If the total number of combined tags from the job and job definition is over 50, the job is moved to the `FAILED` state.","type":"boolean"},"retryStrategy":{"$ref":"#/types/aws-native:batch:JobDefinitionRetryStrategy","description":"The retry strategy to use for failed jobs that are submitted with this job definition."},"schedulingPriority":{"description":"The scheduling priority of the job definition. This only affects jobs in job queues with a fair-share policy. Jobs with a higher scheduling priority are scheduled before jobs with a lower scheduling priority.","type":"integer"},"tags":{"additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","type":"object"},"timeout":{"$ref":"#/types/aws-native:batch:JobDefinitionJobTimeout","description":"The timeout time for jobs that are submitted with this job definition. After the amount of time you specify passes, AWS Batch terminates your jobs if they aren't finished."},"type":{"description":"The type of job definition. For more information about multi-node parallel jobs, see [Creating a multi-node parallel job definition](https://docs.aws.amazon.com/batch/latest/userguide/multi-node-job-def.html) in the *AWS Batch User Guide* .\n\n- If the value is `container` , then one of the following is required: `containerProperties` , `ecsProperties` , or `eksProperties` .\n- If the value is `multinode` , then `nodeProperties` is required.\n\n\u003e If the job is run on Fargate resources, then `multinode` isn't supported.","type":"string"}}}},"aws-native:batch:getJobQueue":{"description":"Resource Type definition for AWS::Batch::JobQueue","inputs":{"properties":{"jobQueueArn":{"type":"string","description":"Returns the job queue ARN, such as `batch: *us-east-1* : *111122223333* :job-queue/ *JobQueueName*` ."}},"required":["jobQueueArn"]},"outputs":{"properties":{"computeEnvironmentOrder":{"description":"The set of compute environments mapped to a job queue and their order relative to each other. The job scheduler uses this parameter to determine which compute environment runs a specific job. Compute environments must be in the `VALID` state before you can associate them with a job queue. You can associate up to three compute environments with a job queue. All of the compute environments must be either EC2 ( `EC2` or `SPOT` ) or Fargate ( `FARGATE` or `FARGATE_SPOT` ); EC2 and Fargate compute environments can't be mixed.\n\n\u003e All compute environments that are associated with a job queue must share the same architecture. AWS Batch doesn't support mixing compute environment architecture types in a single job queue.","items":{"$ref":"#/types/aws-native:batch:JobQueueComputeEnvironmentOrder"},"type":"array"},"jobQueueArn":{"description":"Returns the job queue ARN, such as `batch: *us-east-1* : *111122223333* :job-queue/ *JobQueueName*` .","type":"string"},"jobStateTimeLimitActions":{"description":"The set of actions that AWS Batch perform on jobs that remain at the head of the job queue in the specified state longer than specified times. AWS Batch will perform each action after `maxTimeSeconds` has passed.","items":{"$ref":"#/types/aws-native:batch:JobQueueJobStateTimeLimitAction"},"type":"array"},"priority":{"description":"The priority of the job queue. Job queues with a higher priority (or a higher integer value for the `priority` parameter) are evaluated first when associated with the same compute environment. Priority is determined in descending order. For example, a job queue with a priority value of `10` is given scheduling preference over a job queue with a priority value of `1` . All of the compute environments must be either EC2 ( `EC2` or `SPOT` ) or Fargate ( `FARGATE` or `FARGATE_SPOT` ); EC2 and Fargate compute environments can't be mixed.","type":"integer"},"schedulingPolicyArn":{"description":"The Amazon Resource Name (ARN) of the scheduling policy. The format is `aws: *Partition* :batch: *Region* : *Account* :scheduling-policy/ *Name*` . For example, `aws:aws:batch:us-west-2:123456789012:scheduling-policy/MySchedulingPolicy` .","type":"string"},"serviceEnvironmentOrder":{"description":"The order of the service environment associated with the job queue. Job queues with a higher priority are evaluated first when associated with the same service environment.","items":{"$ref":"#/types/aws-native:batch:JobQueueServiceEnvironmentOrder"},"type":"array"},"state":{"$ref":"#/types/aws-native:batch:JobQueueState","description":"The state of the job queue. If the job queue state is `ENABLED` , it is able to accept jobs. If the job queue state is `DISABLED` , new jobs can't be added to the queue, but jobs already in the queue can finish."}}}},"aws-native:batch:getQuotaShare":{"description":"Resource Type definition for AWS::Batch::QuotaShare","inputs":{"properties":{"quotaShareArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the quota share."}},"required":["quotaShareArn"]},"outputs":{"properties":{"capacityLimits":{"description":"The capacity limits for the quota share.","items":{"$ref":"#/types/aws-native:batch:QuotaShareCapacityLimit"},"type":"array"},"preemptionConfiguration":{"$ref":"#/types/aws-native:batch:QuotaSharePreemptionConfiguration","description":"The preemption configuration for the quota share."},"quotaShareArn":{"description":"The Amazon Resource Name (ARN) of the quota share.","type":"string"},"resourceSharingConfiguration":{"$ref":"#/types/aws-native:batch:QuotaShareResourceSharingConfiguration","description":"The resource sharing configuration for the quota share."},"state":{"$ref":"#/types/aws-native:batch:QuotaShareState","description":"The state of the quota share."},"tags":{"additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","type":"object"}}}},"aws-native:batch:getSchedulingPolicy":{"description":"Resource Type definition for AWS::Batch::SchedulingPolicy","inputs":{"properties":{"arn":{"type":"string","description":"Returns the scheduling policy ARN, such as `batch: *us-east-1* : *111122223333* :scheduling-policy/ *HighPriority*` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Returns the scheduling policy ARN, such as `batch: *us-east-1* : *111122223333* :scheduling-policy/ *HighPriority*` .","type":"string"},"fairsharePolicy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyFairsharePolicy","description":"The fair-share scheduling policy details."},"quotaSharePolicy":{"$ref":"#/types/aws-native:batch:SchedulingPolicyQuotaSharePolicy"}}}},"aws-native:batch:getServiceEnvironment":{"description":"Resource Type definition for AWS::Batch::ServiceEnvironment","inputs":{"properties":{"serviceEnvironmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service environment."}},"required":["serviceEnvironmentArn"]},"outputs":{"properties":{"capacityLimits":{"description":"The capacity limits for the service environment. This defines the maximum resources that can be used by service jobs in this environment.","items":{"$ref":"#/types/aws-native:batch:ServiceEnvironmentCapacityLimit"},"type":"array"},"serviceEnvironmentArn":{"description":"The Amazon Resource Name (ARN) of the service environment.","type":"string"},"state":{"description":"The state of the service environment. Valid values are `ENABLED` and `DISABLED` .","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","type":"object"}}}},"aws-native:bedrock:getAgent":{"description":"Definition of AWS::Bedrock::Agent Resource Type","inputs":{"properties":{"agentId":{"type":"string","description":"Identifier for a resource."}},"required":["agentId"]},"outputs":{"properties":{"actionGroups":{"description":"List of ActionGroups","items":{"$ref":"#/types/aws-native:bedrock:AgentActionGroup"},"type":"array"},"agentArn":{"description":"Arn representation of the Agent.","type":"string"},"agentCollaboration":{"$ref":"#/types/aws-native:bedrock:AgentCollaboration","description":"The agent's collaboration settings."},"agentCollaborators":{"description":"List of Agent Collaborators","items":{"$ref":"#/types/aws-native:bedrock:AgentCollaborator"},"type":"array"},"agentId":{"description":"Identifier for a resource.","type":"string"},"agentName":{"description":"Name for a resource.","type":"string"},"agentResourceRoleArn":{"description":"ARN of a IAM role.","type":"string"},"agentStatus":{"$ref":"#/types/aws-native:bedrock:AgentStatus","description":"The status of the agent and whether it is ready for use. The following statuses are possible:\n\n- CREATING – The agent is being created.\n- PREPARING – The agent is being prepared.\n- PREPARED – The agent is prepared and ready to be invoked.\n- NOT_PREPARED – The agent has been created but not yet prepared.\n- FAILED – The agent API operation failed.\n- UPDATING – The agent is being updated.\n- DELETING – The agent is being deleted."},"agentVersion":{"description":"Draft Agent Version.","type":"string"},"createdAt":{"description":"Time Stamp.","type":"string"},"customOrchestration":{"$ref":"#/types/aws-native:bedrock:AgentCustomOrchestration","description":"Contains custom orchestration configurations for the agent."},"customerEncryptionKeyArn":{"description":"A KMS key ARN","type":"string"},"description":{"description":"Description of the Resource.","type":"string"},"failureReasons":{"description":"Failure Reasons for Error.","items":{"type":"string"},"type":"array"},"foundationModel":{"description":"The foundation model used for orchestration by the agent.","type":"string"},"guardrailConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentGuardrailConfiguration","description":"Details about the guardrail associated with the agent."},"idleSessionTtlInSeconds":{"description":"Max Session Time.","type":"number"},"instruction":{"description":"Instruction for the agent.","type":"string"},"knowledgeBases":{"description":"List of Agent Knowledge Bases","items":{"$ref":"#/types/aws-native:bedrock:AgentKnowledgeBase"},"type":"array"},"memoryConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentMemoryConfiguration","description":"Contains memory configuration for the agent."},"orchestrationType":{"$ref":"#/types/aws-native:bedrock:AgentOrchestrationType","description":"Specifies the orchestration strategy for the agent."},"preparedAt":{"description":"Time Stamp.","type":"string"},"promptOverrideConfiguration":{"$ref":"#/types/aws-native:bedrock:AgentPromptOverrideConfiguration","description":"Contains configurations to override prompt templates in different parts of an agent sequence. For more information, see [Advanced prompts](https://docs.aws.amazon.com/bedrock/latest/userguide/advanced-prompts.html) ."},"recommendedActions":{"description":"The recommended actions users can take to resolve an error in failureReasons.","items":{"type":"string"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"testAliasTags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"updatedAt":{"description":"Time Stamp.","type":"string"}}}},"aws-native:bedrock:getAgentAlias":{"description":"Definition of AWS::Bedrock::AgentAlias Resource Type","inputs":{"properties":{"agentAliasId":{"type":"string","description":"Id for an Agent Alias generated at the server side."},"agentId":{"type":"string","description":"Identifier for a resource."}},"required":["agentId","agentAliasId"]},"outputs":{"properties":{"agentAliasArn":{"description":"Arn representation of the Agent Alias.","type":"string"},"agentAliasHistoryEvents":{"description":"The list of history events for an alias for an Agent.","items":{"$ref":"#/types/aws-native:bedrock:AgentAliasHistoryEvent"},"type":"array"},"agentAliasId":{"description":"Id for an Agent Alias generated at the server side.","type":"string"},"agentAliasName":{"description":"Name for a resource.","type":"string"},"agentAliasStatus":{"$ref":"#/types/aws-native:bedrock:AgentAliasStatus","description":"The status of the alias of the agent and whether it is ready for use. The following statuses are possible:\n\n- CREATING – The agent alias is being created.\n- PREPARED – The agent alias is finished being created or updated and is ready to be invoked.\n- FAILED – The agent alias API operation failed.\n- UPDATING – The agent alias is being updated.\n- DELETING – The agent alias is being deleted.\n- DISSOCIATED - The agent alias has no version associated with it."},"createdAt":{"description":"Time Stamp.","type":"string"},"description":{"description":"Description of the Resource.","type":"string"},"routingConfiguration":{"description":"Routing configuration for an Agent alias.","items":{"$ref":"#/types/aws-native:bedrock:AgentAliasRoutingConfigurationListItem"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"updatedAt":{"description":"Time Stamp.","type":"string"}}}},"aws-native:bedrock:getApplicationInferenceProfile":{"description":"Definition of AWS::Bedrock::ApplicationInferenceProfile Resource Type","inputs":{"properties":{"inferenceProfileIdentifier":{"type":"string","description":"Inference profile identifier. Supports both system-defined inference profile ids, and inference profile ARNs."}},"required":["inferenceProfileIdentifier"]},"outputs":{"properties":{"createdAt":{"description":"Time Stamp","type":"string"},"inferenceProfileArn":{"description":"The Amazon Resource Name (ARN) of the inference profile.","type":"string"},"inferenceProfileId":{"description":"The unique identifier of the inference profile.","type":"string"},"inferenceProfileIdentifier":{"description":"Inference profile identifier. Supports both system-defined inference profile ids, and inference profile ARNs.","type":"string"},"models":{"description":"List of model configuration","items":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileModel"},"type":"array"},"status":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileStatus","description":"The status of the inference profile. `ACTIVE` means that the inference profile is ready to be used."},"tags":{"description":"List of Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:bedrock:ApplicationInferenceProfileInferenceProfileType","description":"The type of the inference profile. The following types are possible:\n\n- `SYSTEM_DEFINED` – The inference profile is defined by Amazon Bedrock. You can route inference requests across regions with these inference profiles.\n- `APPLICATION` – The inference profile was created by a user. This type of inference profile can track metrics and costs when invoking the model in it. The inference profile may route requests to one or multiple regions."},"updatedAt":{"description":"Time Stamp","type":"string"}}}},"aws-native:bedrock:getAutomatedReasoningPolicy":{"description":"Definition of AWS::Bedrock::AutomatedReasoningPolicy Resource Type","inputs":{"properties":{"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."}},"required":["policyArn"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the policy was created.","type":"string"},"definitionHash":{"description":"A hash of the policy definition used to identify the version.","type":"string"},"description":{"description":"The description of the policy.","type":"string"},"kmsKeyArn":{"type":"string"},"name":{"description":"The name of the policy.","type":"string"},"policyArn":{"description":"The Amazon Resource Name (ARN) of the policy.","type":"string"},"policyDefinition":{"$ref":"#/types/aws-native:bedrock:AutomatedReasoningPolicyPolicyDefinition","description":"The complete policy definition generated by the build workflow, containing all rules, variables, and custom types extracted from the source documents."},"policyId":{"description":"The unique identifier of the policy.","type":"string"},"tags":{"description":"The tags associated with the Automated Reasoning policy.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the policy was last updated.","type":"string"},"version":{"description":"The version of the policy.","type":"string"}}}},"aws-native:bedrock:getAutomatedReasoningPolicyVersion":{"description":"Definition of AWS::Bedrock::AutomatedReasoningPolicyVersion Resource Type","inputs":{"properties":{"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."},"version":{"type":"string","description":"The version number of the policy version."}},"required":["policyArn","version"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the policy version was created.","type":"string"},"definitionHash":{"description":"A hash of the policy definition used to identify the version.","type":"string"},"description":{"description":"The description of the policy version.","type":"string"},"name":{"description":"The name of the policy version.","type":"string"},"policyId":{"description":"The unique identifier of the policy.","type":"string"},"updatedAt":{"description":"The timestamp when the policy version was last updated.","type":"string"},"version":{"description":"The version number of the policy version.","type":"string"}}}},"aws-native:bedrock:getBlueprint":{"description":"Definition of AWS::Bedrock::Blueprint Resource Type","inputs":{"properties":{"blueprintArn":{"type":"string","description":"ARN of a Blueprint"}},"required":["blueprintArn"]},"outputs":{"properties":{"blueprintArn":{"description":"ARN of a Blueprint","type":"string"},"blueprintStage":{"$ref":"#/types/aws-native:bedrock:BlueprintStage","description":"Stage of the Blueprint"},"creationTime":{"description":"Creation timestamp","type":"string"},"kmsEncryptionContext":{"additionalProperties":{"type":"string"},"description":"KMS encryption context","type":"object"},"kmsKeyId":{"description":"KMS key identifier","type":"string"},"lastModifiedTime":{"description":"Last modified timestamp","type":"string"},"schema":{"$ref":"pulumi.json#/Any","description":"Schema of the blueprint\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Bedrock::Blueprint` for more information about the expected schema for this property."},"tags":{"description":"List of Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:bedrock:getDataAutomationProject":{"description":"Definition of AWS::Bedrock::DataAutomationProject Resource Type","inputs":{"properties":{"projectArn":{"type":"string","description":"ARN of a DataAutomationProject"}},"required":["projectArn"]},"outputs":{"properties":{"creationTime":{"description":"Time Stamp","type":"string"},"customOutputConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectCustomOutputConfiguration","description":"Blueprints to apply to objects processed by the project."},"kmsEncryptionContext":{"additionalProperties":{"type":"string"},"description":"KMS encryption context","type":"object"},"kmsKeyId":{"description":"KMS key identifier","type":"string"},"lastModifiedTime":{"description":"Time Stamp","type":"string"},"overrideConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectOverrideConfiguration","description":"Additional settings for the project."},"projectArn":{"description":"ARN of a DataAutomationProject","type":"string"},"projectDescription":{"description":"Description of the DataAutomationProject","type":"string"},"projectStage":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStage","description":"The project's stage."},"standardOutputConfiguration":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStandardOutputConfiguration","description":"The project's standard output configuration."},"status":{"$ref":"#/types/aws-native:bedrock:DataAutomationProjectStatus","description":"The project's status."},"tags":{"description":"List of Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:bedrock:getDataSource":{"description":"Definition of AWS::Bedrock::DataSource Resource Type","inputs":{"properties":{"dataSourceId":{"type":"string","description":"Identifier for a resource."},"knowledgeBaseId":{"type":"string","description":"The unique identifier of the knowledge base to which to add the data source."}},"required":["knowledgeBaseId","dataSourceId"]},"outputs":{"properties":{"createdAt":{"description":"The time at which the data source was created.","type":"string"},"dataDeletionPolicy":{"$ref":"#/types/aws-native:bedrock:DataSourceDataDeletionPolicy","description":"The data deletion policy for the data source."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceConfiguration","description":"The connection configuration for the data source."},"dataSourceId":{"description":"Identifier for a resource.","type":"string"},"dataSourceStatus":{"$ref":"#/types/aws-native:bedrock:DataSourceStatus","description":"The status of the data source. The following statuses are possible:\n\n- Available – The data source has been created and is ready for ingestion into the knowledge base.\n- Deleting – The data source is being deleted."},"description":{"description":"Description of the Resource.","type":"string"},"failureReasons":{"description":"The details of the failure reasons related to the data source.","items":{"type":"string"},"type":"array"},"name":{"description":"The name of the data source.","type":"string"},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceServerSideEncryptionConfiguration","description":"Contains details about the configuration of the server-side encryption."},"updatedAt":{"description":"The time at which the knowledge base was last updated.","type":"string"},"vectorIngestionConfiguration":{"$ref":"#/types/aws-native:bedrock:DataSourceVectorIngestionConfiguration","description":"Contains details about how to ingest the documents in the data source."}}}},"aws-native:bedrock:getFlow":{"description":"Definition of AWS::Bedrock::Flow Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"Arn representation of the Flow"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Arn representation of the Flow","type":"string"},"createdAt":{"description":"Time Stamp.","type":"string"},"customerEncryptionKeyArn":{"description":"A KMS key ARN","type":"string"},"definition":{"$ref":"#/types/aws-native:bedrock:FlowDefinition","description":"The definition of the nodes and connections between the nodes in the flow."},"description":{"description":"Description of the flow","type":"string"},"executionRoleArn":{"description":"ARN of a IAM role","type":"string"},"id":{"description":"Identifier for a Flow","type":"string"},"name":{"description":"Name for the flow","type":"string"},"status":{"$ref":"#/types/aws-native:bedrock:FlowStatus","description":"The status of the flow. The following statuses are possible:\n\n- NotPrepared – The flow has been created or updated, but hasn't been prepared. If you just created the flow, you can't test it. If you updated the flow, the `DRAFT` version won't contain the latest changes for testing. Send a [PrepareFlow](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PrepareFlow.html) request to package the latest changes into the `DRAFT` version.\n- Preparing – The flow is being prepared so that the `DRAFT` version contains the latest changes for testing.\n- Prepared – The flow is prepared and the `DRAFT` version contains the latest changes for testing.\n- Failed – The last API operation that you invoked on the flow failed. Send a [GetFlow](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlow.html) request and check the error message in the `validations` field."},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"testAliasTags":{"additionalProperties":{"type":"string"},"type":"object"},"updatedAt":{"description":"Time Stamp.","type":"string"},"validations":{"items":{"$ref":"#/types/aws-native:bedrock:FlowValidation"},"type":"array"},"version":{"description":"Draft Version.","type":"string"}}}},"aws-native:bedrock:getFlowAlias":{"description":"Definition of AWS::Bedrock::FlowAlias Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"Arn of the Flow Alias"},"flowArn":{"type":"string","description":"Arn representation of the Flow"}},"required":["arn","flowArn"]},"outputs":{"properties":{"arn":{"description":"Arn of the Flow Alias","type":"string"},"concurrencyConfiguration":{"$ref":"#/types/aws-native:bedrock:FlowAliasConcurrencyConfiguration","description":"The configuration that specifies how nodes in the flow are executed concurrently."},"createdAt":{"description":"Time Stamp.","type":"string"},"description":{"description":"Description of the Resource.","type":"string"},"flowId":{"description":"Identifier for a flow resource.","type":"string"},"id":{"description":"Id for a Flow Alias generated at the server side.","type":"string"},"name":{"description":"Name for a resource.","type":"string"},"routingConfiguration":{"description":"Routing configuration for a Flow alias.","items":{"$ref":"#/types/aws-native:bedrock:FlowAliasRoutingConfigurationListItem"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"updatedAt":{"description":"Time Stamp.","type":"string"}}}},"aws-native:bedrock:getFlowVersion":{"description":"Definition of AWS::Bedrock::FlowVersion Resource Type","inputs":{"properties":{"flowArn":{"type":"string","description":"Arn representation of the Flow"},"version":{"type":"string","description":"Numerical Version."}},"required":["flowArn","version"]},"outputs":{"properties":{"createdAt":{"description":"Time Stamp.","type":"string"},"customerEncryptionKeyArn":{"description":"A KMS key ARN","type":"string"},"definition":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowDefinition"},"executionRoleArn":{"description":"ARN of a IAM role","type":"string"},"flowId":{"description":"Identifier for a Flow","type":"string"},"name":{"description":"Name for the flow","type":"string"},"status":{"$ref":"#/types/aws-native:bedrock:FlowVersionFlowStatus","description":"The status of the flow."},"version":{"description":"Numerical Version.","type":"string"}}}},"aws-native:bedrock:getGuardrail":{"description":"Definition of AWS::Bedrock::Guardrail Resource Type","inputs":{"properties":{"guardrailArn":{"type":"string","description":"Arn representation for the guardrail"}},"required":["guardrailArn"]},"outputs":{"properties":{"automatedReasoningPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailAutomatedReasoningPolicyConfig","description":"Configuration settings for integrating Automated Reasoning policies with Amazon Bedrock Guardrails."},"blockedInputMessaging":{"description":"Messaging for when violations are detected in text","type":"string"},"blockedOutputsMessaging":{"description":"Messaging for when violations are detected in text","type":"string"},"contentPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContentPolicyConfig","description":"The content filter policies to configure for the guardrail."},"contextualGroundingPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailContextualGroundingPolicyConfig"},"createdAt":{"description":"Time Stamp","type":"string"},"crossRegionConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailCrossRegionConfig","description":"The system-defined guardrail profile that you're using with your guardrail. Guardrail profiles define the destination AWS Regions where guardrail inference requests can be automatically routed. Using guardrail profiles helps maintain guardrail performance and reliability when demand increases.\n\nFor more information, see the [Amazon Bedrock User Guide](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-cross-region.html) ."},"description":{"description":"Description of the guardrail or its version","type":"string"},"failureRecommendations":{"description":"List of failure recommendations","items":{"type":"string"},"type":"array"},"guardrailArn":{"description":"Arn representation for the guardrail","type":"string"},"guardrailId":{"description":"Unique id for the guardrail","type":"string"},"kmsKeyArn":{"description":"The KMS key with which the guardrail was encrypted at rest","type":"string"},"name":{"description":"Name of the guardrail","type":"string"},"sensitiveInformationPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailSensitiveInformationPolicyConfig","description":"The sensitive information policy to configure for the guardrail."},"status":{"$ref":"#/types/aws-native:bedrock:GuardrailStatus","description":"The status of the guardrail."},"statusReasons":{"description":"List of status reasons","items":{"type":"string"},"type":"array"},"tags":{"description":"List of Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"topicPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailTopicPolicyConfig","description":"The topic policies to configure for the guardrail."},"updatedAt":{"description":"Time Stamp","type":"string"},"version":{"description":"Guardrail version","type":"string"},"wordPolicyConfig":{"$ref":"#/types/aws-native:bedrock:GuardrailWordPolicyConfig","description":"The word policy you configure for the guardrail."}}}},"aws-native:bedrock:getGuardrailVersion":{"description":"Definition of AWS::Bedrock::GuardrailVersion Resource Type","inputs":{"properties":{"guardrailId":{"type":"string","description":"Unique id for the guardrail"},"version":{"type":"string","description":"Guardrail version"}},"required":["guardrailId","version"]},"outputs":{"properties":{"guardrailArn":{"description":"Arn representation for the guardrail","type":"string"},"guardrailId":{"description":"Unique id for the guardrail","type":"string"},"version":{"description":"Guardrail version","type":"string"}}}},"aws-native:bedrock:getIntelligentPromptRouter":{"description":"Definition of AWS::Bedrock::IntelligentPromptRouter Resource Type","inputs":{"properties":{"promptRouterArn":{"type":"string","description":"Arn of the Prompt Router."}},"required":["promptRouterArn"]},"outputs":{"properties":{"createdAt":{"description":"Time Stamp","type":"string"},"promptRouterArn":{"description":"Arn of the Prompt Router.","type":"string"},"status":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterStatus","description":"The router's status."},"tags":{"description":"List of Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:bedrock:IntelligentPromptRouterPromptRouterType","description":"The router's type."},"updatedAt":{"description":"Time Stamp","type":"string"}}}},"aws-native:bedrock:getKnowledgeBase":{"description":"Definition of AWS::Bedrock::KnowledgeBase Resource Type","inputs":{"properties":{"knowledgeBaseId":{"type":"string","description":"The unique identifier of the knowledge base."}},"required":["knowledgeBaseId"]},"outputs":{"properties":{"createdAt":{"description":"The time at which the knowledge base was created.","type":"string"},"description":{"description":"Description of the Resource.","type":"string"},"failureReasons":{"description":"A list of reasons that the API operation on the knowledge base failed.","items":{"type":"string"},"type":"array"},"knowledgeBaseArn":{"description":"The ARN of the knowledge base.","type":"string"},"knowledgeBaseConfiguration":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseConfiguration","description":"Contains details about the embeddings configuration of the knowledge base."},"knowledgeBaseId":{"description":"The unique identifier of the knowledge base.","type":"string"},"name":{"description":"The name of the knowledge base.","type":"string"},"roleArn":{"description":"The ARN of the IAM role with permissions to invoke API operations on the knowledge base. The ARN must begin with AmazonBedrockExecutionRoleForKnowledgeBase_","type":"string"},"status":{"$ref":"#/types/aws-native:bedrock:KnowledgeBaseStatus","description":"The status of the knowledge base."},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"updatedAt":{"description":"The time at which the knowledge base was last updated.","type":"string"}}}},"aws-native:bedrock:getPrompt":{"description":"Definition of AWS::Bedrock::Prompt Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"ARN of a prompt resource possibly with a version"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"ARN of a prompt resource possibly with a version","type":"string"},"createdAt":{"description":"Time Stamp.","type":"string"},"customerEncryptionKeyArn":{"description":"A KMS key ARN","type":"string"},"defaultVariant":{"description":"Name for a variant.","type":"string"},"description":{"description":"Name for a prompt resource.","type":"string"},"id":{"description":"Identifier for a Prompt","type":"string"},"name":{"description":"Name for a prompt resource.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata that you can assign to a resource as key-value pairs. For more information, see the following resources:\n\n- [Tag naming limits and requirements](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-conventions)\n- [Tagging best practices](https://docs.aws.amazon.com/tag-editor/latest/userguide/tagging.html#tag-best-practices)","type":"object"},"updatedAt":{"description":"Time Stamp.","type":"string"},"variants":{"description":"List of prompt variants","items":{"$ref":"#/types/aws-native:bedrock:PromptVariant"},"type":"array"},"version":{"description":"Draft Version.","type":"string"}}}},"aws-native:bedrock:getPromptVersion":{"description":"Definition of AWS::Bedrock::PromptVersion Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"ARN of a prompt version resource"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"ARN of a prompt version resource","type":"string"},"createdAt":{"description":"Time Stamp.","type":"string"},"customerEncryptionKeyArn":{"description":"A KMS key ARN","type":"string"},"defaultVariant":{"description":"Name for a variant.","type":"string"},"name":{"description":"Name for a prompt resource.","type":"string"},"promptId":{"description":"Identifier for a Prompt","type":"string"},"updatedAt":{"description":"Time Stamp.","type":"string"},"variants":{"description":"List of prompt variants","items":{"$ref":"#/types/aws-native:bedrock:PromptVersionPromptVariant"},"type":"array"},"version":{"description":"Version.","type":"string"}}}},"aws-native:bedrockagentcore:getBrowserCustom":{"description":"Resource definition for AWS::BedrockAgentCore::BrowserCustom","inputs":{"properties":{"browserId":{"type":"string","description":"The id of the browser."}},"required":["browserId"]},"outputs":{"properties":{"browserArn":{"description":"The ARN of a Browser resource.","type":"string"},"browserId":{"description":"The id of the browser.","type":"string"},"createdAt":{"description":"Timestamp when the browser was created.","type":"string"},"failureReason":{"description":"The reason for failure if the browser creation or operation failed.","type":"string"},"lastUpdatedAt":{"description":"Timestamp when the browser was last updated.","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserCustomBrowserStatus","description":"Status of browser."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the custom browser.","type":"object"}}}},"aws-native:bedrockagentcore:getBrowserProfile":{"description":"Resource definition for AWS::BedrockAgentCore::BrowserProfile","inputs":{"properties":{"profileId":{"type":"string"}},"required":["profileId"]},"outputs":{"properties":{"createdAt":{"type":"string"},"lastSavedAt":{"type":"string"},"lastSavedBrowserId":{"type":"string"},"lastSavedBrowserSessionId":{"type":"string"},"lastUpdatedAt":{"type":"string"},"profileArn":{"type":"string"},"profileId":{"type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:BrowserProfileStatus"},"tags":{"additionalProperties":{"type":"string"},"description":"A map of tag keys and values.","type":"object"}}}},"aws-native:bedrockagentcore:getCodeInterpreterCustom":{"description":"Resource definition for AWS::BedrockAgentCore::CodeInterpreterCustom","inputs":{"properties":{"codeInterpreterId":{"type":"string","description":"The id of the code interpreter."}},"required":["codeInterpreterId"]},"outputs":{"properties":{"codeInterpreterArn":{"description":"The ARN of a CodeInterpreter resource.","type":"string"},"codeInterpreterId":{"description":"The id of the code interpreter.","type":"string"},"createdAt":{"description":"Timestamp when the code interpreter was created.","type":"string"},"failureReason":{"description":"The reason for failure if the code interpreter creation or operation failed.","type":"string"},"lastUpdatedAt":{"description":"Timestamp when the code interpreter was last updated.","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:CodeInterpreterCustomCodeInterpreterStatus","description":"Status of code interpreter."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the code interpreter.","type":"object"}}}},"aws-native:bedrockagentcore:getEvaluator":{"description":"Resource Type definition for AWS::BedrockAgentCore::Evaluator - Creates a custom evaluator for agent quality assessment using LLM-as-a-Judge configurations.","inputs":{"properties":{"evaluatorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the evaluator."}},"required":["evaluatorArn"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the evaluator was created.","type":"string"},"description":{"description":"The description of the evaluator.","type":"string"},"evaluatorArn":{"description":"The Amazon Resource Name (ARN) of the evaluator.","type":"string"},"evaluatorConfig":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorConfig","description":"The configuration for the evaluator."},"evaluatorId":{"description":"The unique identifier of the evaluator.","type":"string"},"level":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorLevel","description":"The evaluation level that determines the scope of evaluation."},"status":{"$ref":"#/types/aws-native:bedrockagentcore:EvaluatorStatus","description":"The current status of the evaluator."},"tags":{"description":"A list of tags to assign to the evaluator.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the evaluator was last updated.","type":"string"}}}},"aws-native:bedrockagentcore:getGateway":{"description":"Definition of AWS::BedrockAgentCore::Gateway Resource Type","inputs":{"properties":{"gatewayIdentifier":{"type":"string"}},"required":["gatewayIdentifier"]},"outputs":{"properties":{"authorizerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizerConfigurationProperties"},"authorizerType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayAuthorizerType","description":"The authorizer type for the gateway."},"createdAt":{"description":"The date and time at which the gateway was created.","type":"string"},"description":{"description":"The description for the gateway.","type":"string"},"exceptionLevel":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayExceptionLevel","description":"The exception level for the gateway."},"gatewayArn":{"description":"The ARN for the gateway.","type":"string"},"gatewayIdentifier":{"type":"string"},"gatewayUrl":{"description":"The gateway URL for the gateway.","type":"string"},"interceptorConfigurations":{"items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayInterceptorConfiguration"},"type":"array"},"kmsKeyArn":{"description":"The KMS key ARN for the gateway.","type":"string"},"name":{"description":"The name for the gateway.","type":"string"},"policyEngineConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayPolicyEngineConfiguration"},"protocolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayProtocolConfigurationProperties","description":"The protocol configuration for the gateway target."},"protocolType":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayProtocolType","description":"The protocol type for the gateway target."},"roleArn":{"type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayStatus","description":"The status for the gateway."},"statusReasons":{"description":"The status reasons for the gateway.","items":{"type":"string"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the gateway.","type":"object"},"updatedAt":{"type":"string"},"workloadIdentityDetails":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayWorkloadIdentityDetails"}}}},"aws-native:bedrockagentcore:getGatewayTarget":{"description":"Resource Type definition for AWS::BedrockAgentCore::GatewayTarget","inputs":{"properties":{"gatewayIdentifier":{"type":"string","description":"The gateway ID for the gateway target."},"targetId":{"type":"string","description":"The target ID for the gateway target."}},"required":["gatewayIdentifier","targetId"]},"outputs":{"properties":{"createdAt":{"description":"The date and time at which the gateway target was created.","type":"string"},"credentialProviderConfigurations":{"description":"The OAuth credential provider configuration.","items":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetCredentialProviderConfiguration"},"type":"array"},"description":{"description":"The description for the gateway target.","type":"string"},"gatewayArn":{"type":"string"},"lastSynchronizedAt":{"type":"string"},"metadataConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetMetadataConfiguration"},"name":{"description":"The name for the gateway target.","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetTargetStatus","description":"The status for the gateway target."},"statusReasons":{"description":"The status reasons for the gateway target.","items":{"type":"string"},"type":"array"},"targetConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:GatewayTargetTargetConfigurationProperties","description":"The target configuration for the Smithy model target."},"targetId":{"description":"The target ID for the gateway target.","type":"string"},"updatedAt":{"description":"The time at which the resource was updated.","type":"string"}}}},"aws-native:bedrockagentcore:getMemory":{"description":"Resource Type definition for AWS::BedrockAgentCore::Memory","inputs":{"properties":{"memoryArn":{"type":"string"}},"required":["memoryArn"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the memory record was created.","type":"string"},"description":{"type":"string"},"eventExpiryDuration":{"description":"Duration in days until memory events expire","type":"integer"},"failureReason":{"type":"string"},"memoryArn":{"type":"string"},"memoryExecutionRoleArn":{"description":"The memory role ARN.","type":"string"},"memoryId":{"description":"The memory ID.","type":"string"},"memoryStrategies":{"description":"The memory strategies.","items":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStrategy"},"type":"array"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStatus","description":"The memory status."},"streamDeliveryResources":{"$ref":"#/types/aws-native:bedrockagentcore:MemoryStreamDeliveryResources"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the resources.","type":"object"},"updatedAt":{"type":"string"}}}},"aws-native:bedrockagentcore:getOnlineEvaluationConfig":{"description":"Resource Type definition for AWS::BedrockAgentCore::OnlineEvaluationConfig - Creates an online evaluation configuration for continuous monitoring of agent performance.","inputs":{"properties":{"onlineEvaluationConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the online evaluation configuration."}},"required":["onlineEvaluationConfigArn"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the online evaluation configuration was created.","type":"string"},"dataSourceConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigDataSourceConfig","description":"The data source configuration that specifies CloudWatch log groups and service names to monitor."},"description":{"description":"The description of the online evaluation configuration.","type":"string"},"evaluationExecutionRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role that grants permissions for evaluation.","type":"string"},"evaluators":{"description":"The list of evaluators to apply during online evaluation.","items":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigEvaluatorReference"},"type":"array"},"executionStatus":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigExecutionStatus","description":"The execution status indicating whether the online evaluation is currently running."},"onlineEvaluationConfigArn":{"description":"The Amazon Resource Name (ARN) of the online evaluation configuration.","type":"string"},"onlineEvaluationConfigId":{"description":"The unique identifier of the online evaluation configuration.","type":"string"},"outputConfig":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigOutputConfig","description":"The configuration that specifies where evaluation results should be written."},"rule":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigRule","description":"The evaluation rule that defines sampling configuration, filters, and session detection settings."},"status":{"$ref":"#/types/aws-native:bedrockagentcore:OnlineEvaluationConfigStatus","description":"The status of the online evaluation configuration."},"tags":{"description":"A list of tags to assign to the online evaluation configuration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the online evaluation configuration was last updated.","type":"string"}}}},"aws-native:bedrockagentcore:getPolicy":{"description":"Resource Type definition for AWS::BedrockAgentCore::Policy","inputs":{"properties":{"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy."}},"required":["policyArn"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the policy was created.","type":"string"},"definition":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyDefinition"},"description":{"description":"A human-readable description of the policy's purpose and functionality.","type":"string"},"policyArn":{"description":"The Amazon Resource Name (ARN) of the policy.","type":"string"},"policyId":{"description":"The unique identifier for the policy.","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyStatus","description":"The current status of the policy."},"statusReasons":{"description":"Additional information about the policy status.","items":{"type":"string"},"type":"array"},"updatedAt":{"description":"The timestamp when the policy was last updated.","type":"string"}}}},"aws-native:bedrockagentcore:getPolicyEngine":{"description":"Resource Type definition for AWS::BedrockAgentCore::PolicyEngine","inputs":{"properties":{"policyEngineArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the policy engine"}},"required":["policyEngineArn"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the policy engine was created","type":"string"},"description":{"description":"A human-readable description of the policy engine's purpose and scope","type":"string"},"policyEngineArn":{"description":"The Amazon Resource Name (ARN) of the policy engine","type":"string"},"policyEngineId":{"description":"The unique identifier for the policy engine","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:PolicyEngineStatus","description":"The current status of the policy engine"},"statusReasons":{"description":"Additional information about the policy engine status","items":{"type":"string"},"type":"array"},"tags":{"description":"A list of tags to assign to the policy engine.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the policy engine was last updated","type":"string"}}}},"aws-native:bedrockagentcore:getRuntime":{"description":"Resource Type definition for AWS::BedrockAgentCore::Runtime","inputs":{"properties":{"agentRuntimeId":{"type":"string","description":"Identifier for a resource"}},"required":["agentRuntimeId"]},"outputs":{"properties":{"agentRuntimeArn":{"description":"The Amazon Resource Name(ARN) that uniquely identifies the Agent","type":"string"},"agentRuntimeArtifact":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAgentRuntimeArtifact","description":"The artifact of the agent"},"agentRuntimeId":{"description":"Identifier for a resource","type":"string"},"agentRuntimeVersion":{"description":"Version of the Agent","type":"string"},"authorizerConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAuthorizerConfiguration","description":"Authorizer configuration for the agent runtime"},"createdAt":{"description":"Timestamp when the Agent was created","type":"string"},"description":{"description":"Description of the resource","type":"string"},"environmentVariables":{"additionalProperties":{"type":"string"},"description":"Environment variables for the agent runtime","type":"object"},"failureReason":{"description":"The reason for failure if the agent is in a failed state.","type":"string"},"lastUpdatedAt":{"description":"When resource was last updated","type":"string"},"lifecycleConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeLifecycleConfiguration","description":"Lifecycle configuration for managing runtime sessions"},"networkConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeNetworkConfiguration","description":"Network access configuration for the Agent"},"protocolConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeProtocolConfiguration","description":"Protocol configuration for the agent runtime"},"requestHeaderConfiguration":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeRequestHeaderConfiguration","description":"Configuration for HTTP request headers"},"roleArn":{"description":"Amazon Resource Name (ARN) of an IAM role","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeAgentStatus","description":"Current status of the agent"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the agent.","type":"object"},"workloadIdentityDetails":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeWorkloadIdentityDetails","description":"Workload identity details for the agent"}}}},"aws-native:bedrockagentcore:getRuntimeEndpoint":{"description":"Resource definition for AWS::BedrockAgentCore::RuntimeEndpoint","inputs":{"properties":{"agentRuntimeEndpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AgentCore Runtime."}},"required":["agentRuntimeEndpointArn"]},"outputs":{"properties":{"agentRuntimeArn":{"description":"The ARN of the Agent Runtime","type":"string"},"agentRuntimeEndpointArn":{"description":"The Amazon Resource Name (ARN) of the AgentCore Runtime.","type":"string"},"agentRuntimeVersion":{"description":"The version of the AgentCore Runtime to use for the endpoint.","type":"string"},"createdAt":{"description":"The timestamp when the Agent Runtime Endpoint was created","type":"string"},"description":{"description":"The description of the AgentCore Runtime endpoint.","type":"string"},"failureReason":{"description":"The reason for failure if the endpoint is in a failed state","type":"string"},"id":{"description":"The unique identifier of the AgentCore Runtime endpoint.","type":"string"},"lastUpdatedAt":{"description":"The timestamp when the Agent Runtime Endpoint was last updated","type":"string"},"liveVersion":{"description":"The Live version of the Agent Runtime","type":"string"},"status":{"$ref":"#/types/aws-native:bedrockagentcore:RuntimeEndpointAgentRuntimeEndpointStatus","description":"The status of the Agent Runtime Endpoint"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the AgentCore Runtime endpoint.","type":"object"},"targetVersion":{"description":"The target version of the AgentCore Runtime for the endpoint.","type":"string"}}}},"aws-native:bedrockagentcore:getWorkloadIdentity":{"description":"Definition of AWS::BedrockAgentCore::WorkloadIdentity Resource Type","inputs":{"properties":{"name":{"type":"string","description":"The name of the workload identity. The name must be unique within your account."}},"required":["name"]},"outputs":{"properties":{"allowedResourceOauth2ReturnUrls":{"description":"The list of allowed OAuth2 return URLs for resources associated with this workload identity.","items":{"type":"string"},"type":"array"},"createdTime":{"description":"The timestamp when the workload identity was created.","type":"number"},"lastUpdatedTime":{"description":"The timestamp when the workload identity was last updated.","type":"number"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workloadIdentityArn":{"description":"The Amazon Resource Name (ARN) of the workload identity.","type":"string"}}}},"aws-native:bedrockmantle:getProject":{"description":"Resource type definition for AWS::BedrockMantle::Project","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the project."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the project.","type":"string"},"createdAt":{"description":"The timestamp when the project was created.","type":"string"},"id":{"description":"The unique identifier of the project.","type":"string"},"name":{"description":"The name of the project.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:billing:getBillingView":{"description":"A billing view is a container of cost \u0026 usage metadata.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that can be used to uniquely identify the billing view."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that can be used to uniquely identify the billing view.","type":"string"},"billingViewType":{"$ref":"#/types/aws-native:billing:BillingViewType","description":"The type of billing group."},"createdAt":{"description":"The time when the billing view was created.","type":"number"},"dataFilterExpression":{"$ref":"#/types/aws-native:billing:DataFilterExpressionProperties","description":"See [Expression](https://docs.aws.amazon.com/aws-cost-management/latest/APIReference/API_billing_Expression.html) . Billing view only supports `LINKED_ACCOUNT` and `Tags` ."},"ownerAccountId":{"description":"The account owner of the billing view.","type":"string"},"sourceViews":{"description":"An array of strings that define the billing view's source.","items":{"type":"string"},"type":"array"},"tags":{"description":"An array of key-value pairs associated to the billing view being created.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The time when the billing view was last updated.","type":"number"}}}},"aws-native:budgets:getBudgetsAction":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"actionId":{"type":"string","description":"A system-generated universally unique identifier (UUID) for the action."},"budgetName":{"type":"string","description":"A string that represents the budget name. \":\" and \"\\\" characters aren't allowed."}},"required":["actionId","budgetName"]},"outputs":{"properties":{"actionId":{"description":"A system-generated universally unique identifier (UUID) for the action.","type":"string"},"actionThreshold":{"$ref":"#/types/aws-native:budgets:BudgetsActionActionThreshold","description":"The trigger threshold of the action."},"approvalModel":{"$ref":"#/types/aws-native:budgets:BudgetsActionApprovalModel","description":"This specifies if the action needs manual or automatic approval."},"definition":{"$ref":"#/types/aws-native:budgets:BudgetsActionDefinition","description":"Specifies all of the type-specific parameters."},"executionRoleArn":{"description":"The role passed for action execution and reversion. Roles and actions must be in the same account.","type":"string"},"notificationType":{"$ref":"#/types/aws-native:budgets:BudgetsActionNotificationType","description":"The type of a notification."},"resourceTags":{"description":"An optional list of tags to associate with the specified budget action. Each tag consists of a key and a value, and each key must be unique for the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"subscribers":{"description":"A list of subscribers.","items":{"$ref":"#/types/aws-native:budgets:BudgetsActionSubscriber"},"type":"array"}}}},"aws-native:cases:getCaseRule":{"description":"A case rule. In the Amazon Connect admin website, case rules are known as case field conditions. Case rules are used to define the situations under which fields should have certain effects (such as required).","inputs":{"properties":{"caseRuleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a case rule."}},"required":["caseRuleArn"]},"outputs":{"properties":{"caseRuleArn":{"description":"The Amazon Resource Name (ARN) of a case rule.","type":"string"},"caseRuleId":{"description":"The unique identifier of a case rule.","type":"string"},"createdTime":{"description":"The time at which the case rule was created.","type":"string"},"description":{"description":"A description explaining the purpose and behavior of this case rule. Helps administrators understand when and why this rule applies to case fields.","type":"string"},"lastModifiedTime":{"description":"The time at which the case rule was created or last modified.","type":"string"},"name":{"description":"A descriptive name for the case rule. Must be unique within the domain and should clearly indicate the rule's purpose (e.g., 'Priority Field Required for Urgent Cases').","type":"string"},"rule":{"description":"Represents what rule type should take place, under what conditions.","oneOf":[{"$ref":"#/types/aws-native:cases:CaseRuleDetails0Properties"},{"$ref":"#/types/aws-native:cases:CaseRuleDetails1Properties"}]},"tags":{"description":"The tags that you attach to this case rule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cases:getDomain":{"description":"A domain, which is a container for all case data, such as cases, fields, templates and layouts. Each Amazon Connect instance can be associated with only one Cases domain.","inputs":{"properties":{"domainArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Cases domain."}},"required":["domainArn"]},"outputs":{"properties":{"createdTime":{"description":"The time at which the domain was created.","type":"string"},"domainArn":{"description":"The Amazon Resource Name (ARN) for the Cases domain.","type":"string"},"domainId":{"description":"The unique identifier of the Cases domain.","type":"string"},"domainStatus":{"$ref":"#/types/aws-native:cases:DomainStatus","description":"The status of the Cases domain."},"tags":{"description":"The tags that you attach to this domain.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cases:getField":{"description":"A field in the Cases domain. This field is used to define the case object model (that is, defines what data can be captured on cases) in a Cases domain.","inputs":{"properties":{"fieldArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the field."}},"required":["fieldArn"]},"outputs":{"properties":{"attributes":{"$ref":"#/types/aws-native:cases:FieldAttributes","description":"Field-type specific attributes that control rendering and validation behavior"},"createdTime":{"description":"The time at which the field was created.","type":"string"},"description":{"description":"A description explaining the purpose and usage of this field in cases. Helps agents and administrators understand what information should be captured in this field.","type":"string"},"fieldArn":{"description":"The Amazon Resource Name (ARN) of the field.","type":"string"},"fieldId":{"description":"The unique identifier of a field.","type":"string"},"lastModifiedTime":{"description":"The time at which the field was created or last modified.","type":"string"},"name":{"description":"The display name of the field as it appears to agents in the case interface. Should be descriptive and user-friendly (e.g., 'Customer Priority Level', 'Issue Category').","type":"string"},"namespace":{"$ref":"#/types/aws-native:cases:FieldNamespace","description":"Indicates whether this is a System field (predefined by AWS) or a Custom field (created by your organization). System fields cannot be modified or deleted."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cases:getLayout":{"description":"A layout in the Cases domain. Layouts define the following configuration in the top section and More Info tab of the Cases user interface: Fields to display to the users and Field ordering.","inputs":{"properties":{"layoutArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the layout."}},"required":["layoutArn"]},"outputs":{"properties":{"content":{"$ref":"#/types/aws-native:cases:LayoutContentProperties","description":"Object to store union of different versions of layout content."},"createdTime":{"description":"The time at which the layout was created.","type":"string"},"lastModifiedTime":{"description":"The time at which the layout was created or last modified.","type":"string"},"layoutArn":{"description":"The Amazon Resource Name (ARN) of the layout.","type":"string"},"layoutId":{"description":"The unique identifier of the layout.","type":"string"},"name":{"description":"A descriptive name for the layout. Must be unique within the Cases domain and should clearly indicate the layout's purpose and field organization.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cases:getTemplate":{"description":"A template in the Cases domain. This template is used to define the case object model (that is, to define what data can be captured on cases) in a Cases domain. A template must have a unique name within a domain, and it must reference existing field IDs and layout IDs.","inputs":{"properties":{"templateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the template."}},"required":["templateArn"]},"outputs":{"properties":{"createdTime":{"description":"The time at which the template was created.","type":"string"},"description":{"description":"A description explaining the purpose and use case for this template. Should indicate what types of cases this template is designed for and any specific workflow it supports.","type":"string"},"lastModifiedTime":{"description":"The time at which the template was created or last modified.","type":"string"},"layoutConfiguration":{"$ref":"#/types/aws-native:cases:TemplateLayoutConfiguration","description":"Object to store configuration of layouts associated to the template."},"name":{"description":"A name for the template. It must be unique per domain.","type":"string"},"requiredFields":{"description":"A list of fields that must contain a value for a case to be successfully created with this template.","items":{"$ref":"#/types/aws-native:cases:TemplateRequiredField"},"type":"array"},"rules":{"description":"A list of case rules (also known as case field conditions) on a template.","items":{"$ref":"#/types/aws-native:cases:TemplateRule"},"type":"array"},"status":{"$ref":"#/types/aws-native:cases:TemplateStatus","description":"The status of the template."},"tags":{"description":"The tags that you attach to this template.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"templateArn":{"description":"The Amazon Resource Name (ARN) of the template.","type":"string"},"templateId":{"description":"The unique identifier of a template.","type":"string"}}}},"aws-native:cassandra:getKeyspace":{"description":"Resource schema for AWS::Cassandra::Keyspace","inputs":{"properties":{"keyspaceName":{"type":"string","description":"Name for Cassandra keyspace"}},"required":["keyspaceName"]},"outputs":{"properties":{"clientSideTimestampsEnabled":{"description":"Indicates whether client-side timestamps are enabled (true) or disabled (false) for all tables in the keyspace. To add a Region to a single-Region keyspace with at least one table, the value must be set to true. After you enabled client-side timestamps for a table, you can’t disable it again.","type":"boolean"},"replicationSpecification":{"$ref":"#/types/aws-native:cassandra:KeyspaceReplicationSpecification","description":"Specifies the `ReplicationStrategy` of a keyspace. The options are:\n\n- `SINGLE_REGION` for a single Region keyspace (optional) or\n- `MULTI_REGION` for a multi-Region keyspace\n\nIf no `ReplicationStrategy` is provided, the default is `SINGLE_REGION` . If you choose `MULTI_REGION` , you must also provide a `RegionList` with the AWS Regions that the keyspace is replicated in."},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cassandra:getTable":{"description":"Resource schema for AWS::Cassandra::Table","inputs":{"properties":{"keyspaceName":{"type":"string","description":"Name for Cassandra keyspace"},"tableName":{"type":"string","description":"Name for Cassandra table"}},"required":["keyspaceName","tableName"]},"outputs":{"properties":{"billingMode":{"$ref":"#/types/aws-native:cassandra:TableBillingMode","description":"The billing mode for the table, which determines how you'll be charged for reads and writes:\n\n- *On-demand mode* (default) - You pay based on the actual reads and writes your application performs.\n- *Provisioned mode* - Lets you specify the number of reads and writes per second that you need for your application.\n\nIf you don't specify a value for this property, then the table will use on-demand mode."},"cdcSpecification":{"$ref":"#/types/aws-native:cassandra:TableCdcSpecification","description":"The settings for the CDC stream of a table. For more information about CDC streams, see [Working with change data capture (CDC) streams in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/cdc.html) in the *Amazon Keyspaces Developer Guide* ."},"defaultTimeToLive":{"description":"Default TTL (Time To Live) in seconds, where zero is disabled. If the value is greater than zero, TTL is enabled for the entire table and an expiration timestamp is added to each column.","type":"integer"},"encryptionSpecification":{"$ref":"#/types/aws-native:cassandra:TableEncryptionSpecification","description":"The encryption at rest options for the table.\n\n- *AWS owned key* (default) - The key is owned by Amazon Keyspaces .\n- *Customer managed key* - The key is stored in your account and is created, owned, and managed by you.\n\n\u003e If you choose encryption with a customer managed key, you must specify a valid customer managed KMS key with permissions granted to Amazon Keyspaces.\n\nFor more information, see [Encryption at rest in Amazon Keyspaces](https://docs.aws.amazon.com/keyspaces/latest/devguide/EncryptionAtRest.html) in the *Amazon Keyspaces Developer Guide* ."},"pointInTimeRecoveryEnabled":{"description":"Indicates whether point in time recovery is enabled (true) or disabled (false) on the table","type":"boolean"},"regularColumns":{"description":"Non-key columns of the table","items":{"$ref":"#/types/aws-native:cassandra:TableColumn"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"warmThroughput":{"$ref":"#/types/aws-native:cassandra:TableWarmThroughput"}}}},"aws-native:cassandra:getType":{"description":"Resource schema for AWS::Cassandra::Type","inputs":{"properties":{"keyspaceName":{"type":"string","description":"Name of the Keyspace which contains the User-Defined Type."},"typeName":{"type":"string","description":"Name of the User-Defined Type."}},"required":["keyspaceName","typeName"]},"outputs":{"properties":{"directParentTypes":{"description":"List of parent User-Defined Types that directly reference the User-Defined Type in their fields.","items":{"type":"string"},"type":"array"},"directReferringTables":{"description":"List of Tables that directly reference the User-Defined Type in their columns.","items":{"type":"string"},"type":"array"},"keyspaceArn":{"description":"ARN of the Keyspace which contains the User-Defined Type.","type":"string"},"lastModifiedTimestamp":{"description":"Timestamp of the last time the User-Defined Type's meta data was modified.","type":"number"},"maxNestingDepth":{"description":"Maximum nesting depth of the User-Defined Type across the field types.","type":"integer"}}}},"aws-native:ce:getAnomalyMonitor":{"description":"AWS Cost Anomaly Detection leverages advanced Machine Learning technologies to identify anomalous spend and root causes, so you can quickly take action. You can use Cost Anomaly Detection by creating monitor.","inputs":{"properties":{"monitorArn":{"type":"string","description":"The Amazon Resource Name (ARN) value for the monitor."}},"required":["monitorArn"]},"outputs":{"properties":{"creationDate":{"description":"The date when the monitor was created. ","type":"string"},"dimensionalValueCount":{"description":"The value for evaluated dimensions.","type":"integer"},"lastEvaluatedDate":{"description":"The date when the monitor last evaluated for anomalies.","type":"string"},"lastUpdatedDate":{"description":"The date when the monitor was last updated.","type":"string"},"monitorArn":{"description":"The Amazon Resource Name (ARN) value for the monitor.","type":"string"},"monitorName":{"description":"The name of the monitor.","type":"string"}}}},"aws-native:ce:getAnomalySubscription":{"description":"AWS Cost Anomaly Detection leverages advanced Machine Learning technologies to identify anomalous spend and root causes, so you can quickly take action. Create subscription to be notified","inputs":{"properties":{"subscriptionArn":{"type":"string","description":"The `AnomalySubscription` Amazon Resource Name (ARN)."}},"required":["subscriptionArn"]},"outputs":{"properties":{"accountId":{"description":"The accountId","type":"string"},"frequency":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionFrequency","description":"The frequency at which anomaly reports are sent over email. "},"monitorArnList":{"description":"A list of cost anomaly monitors.","items":{"type":"string"},"type":"array"},"subscribers":{"description":"A list of subscriber","items":{"$ref":"#/types/aws-native:ce:AnomalySubscriptionSubscriber"},"type":"array"},"subscriptionArn":{"description":"The `AnomalySubscription` Amazon Resource Name (ARN).","type":"string"},"subscriptionName":{"description":"The name of the subscription.","type":"string"},"threshold":{"description":"The dollar value that triggers a notification if the threshold is exceeded. ","type":"number"},"thresholdExpression":{"description":"An Expression object in JSON String format used to specify the anomalies that you want to generate alerts for.","type":"string"}}}},"aws-native:ce:getCostCategory":{"description":"Resource Type definition for AWS::CE::CostCategory. Cost Category enables you to map your cost and usage into meaningful categories. You can use Cost Category to organize your costs using a rule-based engine.","inputs":{"properties":{"arn":{"type":"string","description":"Cost category ARN"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Cost category ARN","type":"string"},"defaultValue":{"description":"The default value for the cost category","type":"string"},"effectiveStart":{"description":"The Cost Category's effective start date.","type":"string"},"ruleVersion":{"$ref":"#/types/aws-native:ce:CostCategoryRuleVersion","description":"The rule schema version in this particular Cost Category."},"rules":{"description":"JSON array format of Expression in Billing and Cost Management API","type":"string"},"splitChargeRules":{"description":"Json array format of CostCategorySplitChargeRule in Billing and Cost Management API","type":"string"},"tags":{"description":"Tags to assign to the cost category.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:certificatemanager:getAccount":{"description":"Resource schema for AWS::CertificateManager::Account.","inputs":{"properties":{"accountId":{"type":"string","description":"ID of the AWS account that owns the certificate."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"ID of the AWS account that owns the certificate.","type":"string"},"expiryEventsConfiguration":{"$ref":"#/types/aws-native:certificatemanager:AccountExpiryEventsConfiguration","description":"Object containing expiration events options associated with an AWS account . For more information, see [ExpiryEventsConfiguration](https://docs.aws.amazon.com/acm/latest/APIReference/API_ExpiryEventsConfiguration.html) in the API reference."}}}},"aws-native:chatbot:getCustomAction":{"description":"Definition of AWS::Chatbot::CustomAction Resource Type","inputs":{"properties":{"customActionArn":{"type":"string","description":"The fully defined ARN of the custom action."}},"required":["customActionArn"]},"outputs":{"properties":{"aliasName":{"description":"The name used to invoke this action in a chat channel. For example, `@Amazon Q run my-alias` .","type":"string"},"attachments":{"description":"Defines when this custom action button should be attached to a notification.","items":{"$ref":"#/types/aws-native:chatbot:CustomActionAttachment"},"type":"array"},"customActionArn":{"description":"The fully defined ARN of the custom action.","type":"string"},"definition":{"$ref":"#/types/aws-native:chatbot:CustomActionDefinition","description":"The definition of the command to run when invoked as an alias or as an action button."},"tags":{"description":"The tags to add to the configuration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:chatbot:getMicrosoftTeamsChannelConfiguration":{"description":"Resource schema for AWS::Chatbot::MicrosoftTeamsChannelConfiguration.","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the configuration"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the configuration","type":"string"},"customizationResourceArns":{"description":"ARNs of Custom Actions to associate with notifications in the provided chat channel.","items":{"type":"string"},"type":"array"},"guardrailPolicies":{"description":"The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set.","items":{"type":"string"},"type":"array"},"iamRoleArn":{"description":"The ARN of the IAM role that defines the permissions for AWS Chatbot","type":"string"},"loggingLevel":{"description":"Specifies the logging level for this configuration:ERROR,INFO or NONE. This property affects the log entries pushed to Amazon CloudWatch logs","type":"string"},"snsTopicArns":{"description":"ARNs of SNS topics which delivers notifications to AWS Chatbot, for example CloudWatch alarm notifications.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to add to the configuration","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"teamsChannelId":{"description":"The id of the Microsoft Teams channel","type":"string"},"teamsChannelName":{"description":"The name of the Microsoft Teams channel","type":"string"},"userRoleRequired":{"description":"Enables use of a user role requirement in your chat configuration","type":"boolean"}}}},"aws-native:chatbot:getSlackChannelConfiguration":{"description":"Resource schema for AWS::Chatbot::SlackChannelConfiguration.","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the configuration"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the configuration","type":"string"},"customizationResourceArns":{"description":"ARNs of Custom Actions to associate with notifications in the provided chat channel.","items":{"type":"string"},"type":"array"},"guardrailPolicies":{"description":"The list of IAM policy ARNs that are applied as channel guardrails. The AWS managed 'AdministratorAccess' policy is applied as a default if this is not set.","items":{"type":"string"},"type":"array"},"iamRoleArn":{"description":"The ARN of the IAM role that defines the permissions for AWS Chatbot","type":"string"},"loggingLevel":{"description":"Specifies the logging level for this configuration:ERROR,INFO or NONE. This property affects the log entries pushed to Amazon CloudWatch logs","type":"string"},"slackChannelId":{"description":"The id of the Slack channel","type":"string"},"snsTopicArns":{"description":"ARNs of SNS topics which delivers notifications to AWS Chatbot, for example CloudWatch alarm notifications.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to add to the configuration","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userRoleRequired":{"description":"Enables use of a user role requirement in your chat configuration","type":"boolean"}}}},"aws-native:cleanrooms:getAnalysisTemplate":{"description":"Represents a stored analysis within a collaboration","inputs":{"properties":{"analysisTemplateIdentifier":{"type":"string","description":"Returns the identifier for the analysis template.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE2222`"},"membershipIdentifier":{"type":"string","description":"The identifier for a membership resource."}},"required":["analysisTemplateIdentifier","membershipIdentifier"]},"outputs":{"properties":{"analysisTemplateIdentifier":{"description":"Returns the identifier for the analysis template.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE2222`","type":"string"},"arn":{"description":"Returns the Amazon Resource Name (ARN) of the analysis template.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:membership/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111/analysistemplates/a1b2c3d4-5678-90ab-cdef-EXAMPLE2222`","type":"string"},"collaborationArn":{"description":"Returns the unique ARN for the analysis template’s associated collaboration.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:collaboration/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`","type":"string"},"collaborationIdentifier":{"description":"Returns the unique ID for the associated collaboration of the analysis template.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`","type":"string"},"description":{"description":"The description of the analysis template.","type":"string"},"membershipArn":{"description":"Returns the Amazon Resource Name (ARN) of the member who created the analysis template.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:membership/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"sourceMetadata":{"$ref":"#/types/aws-native:cleanrooms:AnalysisTemplateAnalysisSourceMetadataProperties","description":"The source metadata for the analysis template."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms analysis template.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getCollaboration":{"description":"Represents a collaboration between AWS accounts that allows for secure data collaboration","inputs":{"properties":{"collaborationIdentifier":{"type":"string","description":"Returns the unique identifier of the specified collaboration.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`"}},"required":["collaborationIdentifier"]},"outputs":{"properties":{"analyticsEngine":{"$ref":"#/types/aws-native:cleanrooms:CollaborationAnalyticsEngine","description":"The analytics engine for the collaboration.\n\n\u003e After July 16, 2025, the `CLEAN_ROOMS_SQL` parameter will no longer be available."},"arn":{"description":"Returns the Amazon Resource Name (ARN) of the specified collaboration.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:collaboration/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"collaborationIdentifier":{"description":"Returns the unique identifier of the specified collaboration.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"description":{"description":"A description of the collaboration provided by the collaboration owner.","type":"string"},"isMetricsEnabled":{"type":"boolean"},"name":{"description":"A human-readable identifier provided by the collaboration owner. Display names are not unique.","type":"string"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getConfiguredTable":{"description":"Represents a table that can be associated with collaborations","inputs":{"properties":{"configuredTableIdentifier":{"type":"string","description":"Returns the unique identifier of the specified configured table.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"}},"required":["configuredTableIdentifier"]},"outputs":{"properties":{"allowedColumns":{"description":"The columns within the underlying AWS Glue table that can be used within collaborations.","items":{"type":"string"},"type":"array"},"analysisMethod":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisMethod","description":"The analysis method for the configured table.\n\n`DIRECT_QUERY` allows SQL queries to be run directly on this table.\n\n`DIRECT_JOB` allows PySpark jobs to be run directly on this table.\n\n`MULTIPLE` allows both SQL queries and PySpark jobs to be run directly on this table."},"analysisRules":{"description":"The analysis rule that was created for the configured table.","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAnalysisRule"},"type":"array"},"arn":{"description":"Returns the Amazon Resource Name (ARN) of the specified configured table.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:configuredtable/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"configuredTableIdentifier":{"description":"Returns the unique identifier of the specified configured table.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`","type":"string"},"description":{"description":"A description for the configured table.","type":"string"},"name":{"description":"A name for the configured table.","type":"string"},"selectedAnalysisMethods":{"description":"The selected analysis methods for the configured table.","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableSelectedAnalysisMethod"},"type":"array"},"tableReference":{"description":"The table that this configured table represents.","oneOf":[{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference0Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference1Properties"},{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableTableReference2Properties"}]},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getConfiguredTableAssociation":{"description":"Represents a table that can be queried within a collaboration","inputs":{"properties":{"configuredTableAssociationIdentifier":{"type":"string","description":"Returns the unique identifier of the specified configured table association.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`"},"membershipIdentifier":{"type":"string","description":"The unique ID for the membership this configured table association belongs to."}},"required":["configuredTableAssociationIdentifier","membershipIdentifier"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) of the specified configured table association.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:configuredtable/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`","type":"string"},"configuredTableAssociationAnalysisRules":{"description":"An analysis rule for a configured table association. This analysis rule specifies how data from the table can be used within its associated collaboration. In the console, the `ConfiguredTableAssociationAnalysisRule` is referred to as the *collaboration analysis rule* .","items":{"$ref":"#/types/aws-native:cleanrooms:ConfiguredTableAssociationAnalysisRule"},"type":"array"},"configuredTableAssociationIdentifier":{"description":"Returns the unique identifier of the specified configured table association.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE33333`","type":"string"},"description":{"description":"A description of the configured table association.","type":"string"},"roleArn":{"description":"The service will assume this role to access catalog metadata and query the table.","type":"string"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms collaboration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getIdMappingTable":{"description":"Represents an association between an ID mapping workflow and a collaboration","inputs":{"properties":{"idMappingTableIdentifier":{"type":"string","description":"The unique identifier of the ID mapping table identifier that you want to retrieve."},"membershipIdentifier":{"type":"string","description":"The unique identifier of the membership resource for the ID mapping table."}},"required":["idMappingTableIdentifier","membershipIdentifier"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the ID mapping table.","type":"string"},"collaborationArn":{"description":"The Amazon Resource Name (ARN) of the collaboration that contains this ID mapping table.","type":"string"},"collaborationIdentifier":{"description":"The unique identifier of the collaboration that contains this ID mapping table.","type":"string"},"description":{"description":"The description of the ID mapping table.","type":"string"},"idMappingTableIdentifier":{"description":"The unique identifier of the ID mapping table identifier that you want to retrieve.","type":"string"},"inputReferenceProperties":{"$ref":"#/types/aws-native:cleanrooms:IdMappingTableInputReferenceProperties"},"kmsKeyArn":{"description":"The Amazon Resource Name (ARN) of the AWS KMS key.","type":"string"},"membershipArn":{"description":"The Amazon Resource Name (ARN) of the membership resource for the ID mapping table.","type":"string"},"tags":{"description":"An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getIdNamespaceAssociation":{"description":"Represents an association between an ID namespace and a collaboration","inputs":{"properties":{"idNamespaceAssociationIdentifier":{"type":"string","description":"The unique identifier of the ID namespace association that you want to retrieve."},"membershipIdentifier":{"type":"string","description":"The unique identifier of the membership that contains the ID namespace association."}},"required":["idNamespaceAssociationIdentifier","membershipIdentifier"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the ID namespace association.","type":"string"},"collaborationArn":{"description":"The Amazon Resource Name (ARN) of the collaboration that contains this ID namespace association.","type":"string"},"collaborationIdentifier":{"description":"The unique identifier of the collaboration that contains this ID namespace association.","type":"string"},"description":{"description":"The description of the ID namespace association.","type":"string"},"idMappingConfig":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationIdMappingConfig","description":"The configuration settings for the ID mapping table."},"idNamespaceAssociationIdentifier":{"description":"The unique identifier of the ID namespace association that you want to retrieve.","type":"string"},"inputReferenceProperties":{"$ref":"#/types/aws-native:cleanrooms:IdNamespaceAssociationInputReferenceProperties"},"membershipArn":{"description":"The Amazon Resource Name (ARN) of the membership resource for this ID namespace association.","type":"string"},"name":{"description":"The name of this ID namespace association.","type":"string"},"tags":{"description":"An optional label that you can assign to a resource when you create it. Each tag consists of a key and an optional value, both of which you define. When you use tagging, you can also use tag-based access control in IAM policies to control access to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getMembership":{"description":"Represents an AWS account that is a part of a collaboration","inputs":{"properties":{"membershipIdentifier":{"type":"string","description":"Returns the unique identifier of the specified membership.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE22222`"}},"required":["membershipIdentifier"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) of the specified membership.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:membership/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"collaborationArn":{"description":"Returns the Amazon Resource Name (ARN) of the specified collaboration.\n\nExample: `arn:aws:cleanrooms:us-east-1:111122223333:collaboration/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"collaborationCreatorAccountId":{"description":"Returns the unique identifier of the specified collaboration creator account.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE11111`","type":"string"},"defaultJobResultConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedJobResultConfiguration","description":"The default job result configuration for the membership."},"defaultResultConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipProtectedQueryResultConfiguration","description":"The default protected query result configuration as specified by the member who can receive results."},"isMetricsEnabled":{"type":"boolean"},"jobLogStatus":{"$ref":"#/types/aws-native:cleanrooms:MembershipJobLogStatus","description":"An indicator as to whether job logging has been enabled or disabled for the collaboration.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about jobs run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"membershipIdentifier":{"description":"Returns the unique identifier of the specified membership.\n\nExample: `a1b2c3d4-5678-90ab-cdef-EXAMPLE22222`","type":"string"},"paymentConfiguration":{"$ref":"#/types/aws-native:cleanrooms:MembershipPaymentConfiguration","description":"The payment responsibilities accepted by the collaboration member."},"queryLogStatus":{"$ref":"#/types/aws-native:cleanrooms:MembershipQueryLogStatus","description":"An indicator as to whether query logging has been enabled or disabled for the membership.\n\nWhen `ENABLED` , AWS Clean Rooms logs details about queries run within this collaboration and those logs can be viewed in Amazon CloudWatch Logs. The default value is `DISABLED` ."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms membership.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanrooms:getPrivacyBudgetTemplate":{"description":"Represents a privacy budget within a collaboration","inputs":{"properties":{"membershipIdentifier":{"type":"string","description":"The identifier for a membership resource."},"privacyBudgetTemplateIdentifier":{"type":"string","description":"A unique identifier for one of your memberships for a collaboration. The privacy budget template is created in the collaboration that this membership belongs to. Accepts a membership ID."}},"required":["privacyBudgetTemplateIdentifier","membershipIdentifier"]},"outputs":{"properties":{"arn":{"description":"The ARN of the privacy budget template.","type":"string"},"collaborationArn":{"description":"The ARN of the collaboration that contains this privacy budget template.","type":"string"},"collaborationIdentifier":{"description":"The unique ID of the collaboration that contains this privacy budget template.","type":"string"},"membershipArn":{"description":"The Amazon Resource Name (ARN) of the member who created the privacy budget template.","type":"string"},"parameters":{"$ref":"#/types/aws-native:cleanrooms:ParametersProperties","description":"Specifies the epsilon and noise parameters for the privacy budget template."},"privacyBudgetTemplateIdentifier":{"description":"A unique identifier for one of your memberships for a collaboration. The privacy budget template is created in the collaboration that this membership belongs to. Accepts a membership ID.","type":"string"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms privacy budget template.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanroomsml:getConfiguredModelAlgorithm":{"description":"Definition of AWS::CleanRoomsML::ConfiguredModelAlgorithm Resource Type","inputs":{"properties":{"configuredModelAlgorithmArn":{"type":"string"}},"required":["configuredModelAlgorithmArn"]},"outputs":{"properties":{"configuredModelAlgorithmArn":{"type":"string"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanroomsml:getConfiguredModelAlgorithmAssociation":{"description":"Definition of AWS::CleanRoomsML::ConfiguredModelAlgorithmAssociation Resource Type","inputs":{"properties":{"configuredModelAlgorithmAssociationArn":{"type":"string"}},"required":["configuredModelAlgorithmAssociationArn"]},"outputs":{"properties":{"collaborationIdentifier":{"type":"string"},"configuredModelAlgorithmAssociationArn":{"type":"string"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm association.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cleanroomsml:getTrainingDataset":{"description":"Definition of AWS::CleanRoomsML::TrainingDataset Resource Type","inputs":{"properties":{"trainingDatasetArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the training dataset."}},"required":["trainingDatasetArn"]},"outputs":{"properties":{"status":{"$ref":"#/types/aws-native:cleanroomsml:TrainingDatasetStatus","description":"The status of the training dataset."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this cleanrooms-ml training dataset.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trainingDatasetArn":{"description":"The Amazon Resource Name (ARN) of the training dataset.","type":"string"}}}},"aws-native:cloudformation:getGuardHook":{"description":"This is a CloudFormation resource for activating the first-party AWS::Hooks::GuardHook.","inputs":{"properties":{"hookArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the activated hook"}},"required":["hookArn"]},"outputs":{"properties":{"failureMode":{"$ref":"#/types/aws-native:cloudformation:GuardHookFailureMode","description":"Attribute to specify CloudFormation behavior on hook failure."},"hookArn":{"description":"The Amazon Resource Name (ARN) of the activated hook","type":"string"},"hookStatus":{"$ref":"#/types/aws-native:cloudformation:GuardHookHookStatus","description":"Attribute to specify which stacks this hook applies to or should get invoked for"},"logBucket":{"description":"S3 Bucket where the guard validate report will be uploaded to","type":"string"},"options":{"$ref":"#/types/aws-native:cloudformation:OptionsProperties","description":"Specifies the S3 location of your input parameters."},"ruleLocation":{"$ref":"#/types/aws-native:cloudformation:GuardHookS3Location","description":"Specifies the S3 location of your Guard rules."},"stackFilters":{"$ref":"#/types/aws-native:cloudformation:StackFiltersProperties","description":"Filters to allow hooks to target specific stack attributes"},"targetFilters":{"description":"Attribute to specify which targets should invoke the hook","oneOf":[{"$ref":"#/types/aws-native:cloudformation:TargetFilters0Properties"},{"$ref":"#/types/aws-native:cloudformation:TargetFilters1Properties"}]},"targetOperations":{"description":"Which operations should this Hook run against? Resource changes, stacks or change sets.","items":{"$ref":"#/types/aws-native:cloudformation:GuardHookTargetOperation"},"type":"array"}}}},"aws-native:cloudformation:getHookDefaultVersion":{"description":"Set a version as default version for a hook in CloudFormation Registry.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type. This is used to uniquely identify a HookDefaultVersion"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the type. This is used to uniquely identify a HookDefaultVersion","type":"string"},"typeName":{"description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","type":"string"},"typeVersionArn":{"description":"The Amazon Resource Name (ARN) of the type version.","type":"string"},"versionId":{"description":"The ID of an existing version of the hook to set as the default.","type":"string"}}}},"aws-native:cloudformation:getHookTypeConfig":{"description":"Specifies the configuration data for a registered hook in CloudFormation Registry.","inputs":{"properties":{"configurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the configuration data, in this account and region."}},"required":["configurationArn"]},"outputs":{"properties":{"configuration":{"description":"The configuration data for the extension, in this account and region.","type":"string"},"configurationArn":{"description":"The Amazon Resource Name (ARN) for the configuration data, in this account and region.","type":"string"},"typeArn":{"description":"The Amazon Resource Name (ARN) of the type without version number.","type":"string"},"typeName":{"description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","type":"string"}}}},"aws-native:cloudformation:getHookVersion":{"description":"Publishes new or first hook version to AWS CloudFormation Registry.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type, here the HookVersion. This is used to uniquely identify a HookVersion resource"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the type, here the HookVersion. This is used to uniquely identify a HookVersion resource","type":"string"},"isDefaultVersion":{"description":"Indicates if this type version is the current default version","type":"boolean"},"typeArn":{"description":"The Amazon Resource Name (ARN) of the type without the versionID.","type":"string"},"versionId":{"description":"The ID of the version of the type represented by this hook instance.","type":"string"},"visibility":{"$ref":"#/types/aws-native:cloudformation:HookVersionVisibility","description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nValid values include:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.\n\nPUBLIC: The type is publically visible and usable within any Amazon account."}}}},"aws-native:cloudformation:getLambdaHook":{"description":"This is a CloudFormation resource for the first-party AWS::Hooks::LambdaHook.","inputs":{"properties":{"hookArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the activated hook"}},"required":["hookArn"]},"outputs":{"properties":{"executionRole":{"description":"The execution role ARN assumed by Hooks to invoke Lambda.","type":"string"},"failureMode":{"$ref":"#/types/aws-native:cloudformation:LambdaHookFailureMode","description":"Attribute to specify CloudFormation behavior on hook failure."},"hookArn":{"description":"The Amazon Resource Name (ARN) of the activated hook","type":"string"},"hookStatus":{"$ref":"#/types/aws-native:cloudformation:LambdaHookHookStatus","description":"Attribute to specify which stacks this hook applies to or should get invoked for"},"lambdaFunction":{"description":"Amazon Resource Name (ARN), Partial ARN, name, version, or alias of the Lambda function to invoke with this hook.","type":"string"},"stackFilters":{"$ref":"#/types/aws-native:cloudformation:StackFiltersProperties","description":"Filters to allow hooks to target specific stack attributes"},"targetFilters":{"description":"Attribute to specify which targets should invoke the hook","oneOf":[{"$ref":"#/types/aws-native:cloudformation:TargetFilters0Properties"},{"$ref":"#/types/aws-native:cloudformation:TargetFilters1Properties"}]},"targetOperations":{"description":"Which operations should this Hook run against? Resource changes, stacks or change sets.","items":{"$ref":"#/types/aws-native:cloudformation:LambdaHookTargetOperation"},"type":"array"}}}},"aws-native:cloudformation:getModuleVersion":{"description":"A module that has been registered in the CloudFormation registry.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the module."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the module.","type":"string"},"description":{"description":"The description of the registered module.","type":"string"},"documentationUrl":{"description":"The URL of a page providing detailed documentation for this module.","type":"string"},"isDefaultVersion":{"description":"Indicator of whether this module version is the current default version","type":"boolean"},"schema":{"description":"The schema defining input parameters to and resources generated by the module.","type":"string"},"timeCreated":{"description":"The time that the specified module version was registered.","type":"string"},"versionId":{"description":"The version ID of the module represented by this module instance.","type":"string"},"visibility":{"$ref":"#/types/aws-native:cloudformation:ModuleVersionVisibility","description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nThe only allowed value at present is:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE."}}}},"aws-native:cloudformation:getPublicTypeVersion":{"description":"Test and Publish a resource that has been registered in the CloudFormation Registry.","inputs":{"properties":{"publicTypeArn":{"type":"string","description":"The Amazon Resource Number (ARN) assigned to the public extension upon publication"}},"required":["publicTypeArn"]},"outputs":{"properties":{"publicTypeArn":{"description":"The Amazon Resource Number (ARN) assigned to the public extension upon publication","type":"string"},"publisherId":{"description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region.","type":"string"},"typeVersionArn":{"description":"The Amazon Resource Number (ARN) of the extension with the versionId.","type":"string"}}}},"aws-native:cloudformation:getPublisher":{"description":"Register as a publisher in the CloudFormation Registry.","inputs":{"properties":{"publisherId":{"type":"string","description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region."}},"required":["publisherId"]},"outputs":{"properties":{"identityProvider":{"$ref":"#/types/aws-native:cloudformation:PublisherIdentityProvider","description":"The type of account used as the identity provider when registering this publisher with CloudFormation."},"publisherId":{"description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region.","type":"string"},"publisherProfile":{"description":"The URL to the publisher's profile with the identity provider.","type":"string"},"publisherStatus":{"$ref":"#/types/aws-native:cloudformation:PublisherStatus","description":"Whether the publisher is verified."}}}},"aws-native:cloudformation:getResourceDefaultVersion":{"description":"The default version of a resource that has been registered in the CloudFormation Registry.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type. This is used to uniquely identify a ResourceDefaultVersion"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the type. This is used to uniquely identify a ResourceDefaultVersion","type":"string"},"typeName":{"description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","type":"string"},"typeVersionArn":{"description":"The Amazon Resource Name (ARN) of the type version.","type":"string"},"versionId":{"description":"The ID of an existing version of the resource to set as the default.","type":"string"}}}},"aws-native:cloudformation:getResourceVersion":{"description":"A resource that has been registered in the CloudFormation Registry.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the type, here the ResourceVersion. This is used to uniquely identify a ResourceVersion resource"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the type, here the ResourceVersion. This is used to uniquely identify a ResourceVersion resource","type":"string"},"isDefaultVersion":{"description":"Indicates if this type version is the current default version","type":"boolean"},"provisioningType":{"$ref":"#/types/aws-native:cloudformation:ResourceVersionProvisioningType","description":"The provisioning behavior of the type. AWS CloudFormation determines the provisioning type during registration, based on the types of handlers in the schema handler package submitted."},"typeArn":{"description":"The Amazon Resource Name (ARN) of the type without the versionID.","type":"string"},"versionId":{"description":"The ID of the version of the type represented by this resource instance.","type":"string"},"visibility":{"$ref":"#/types/aws-native:cloudformation:ResourceVersionVisibility","description":"The scope at which the type is visible and usable in CloudFormation operations.\n\nValid values include:\n\nPRIVATE: The type is only visible and usable within the account in which it is registered. Currently, AWS CloudFormation marks any types you register as PRIVATE.\n\nPUBLIC: The type is publically visible and usable within any Amazon account."}}}},"aws-native:cloudformation:getStack":{"description":"The AWS::CloudFormation::Stack resource nests a stack as a resource in a top-level template.","inputs":{"properties":{"stackId":{"type":"string","description":"Returns the unique identifier of the stack."}},"required":["stackId"]},"outputs":{"properties":{"capabilities":{"description":"In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.\n\n- `CAPABILITY_IAM` and `CAPABILITY_NAMED_IAM`\n\nSome stack templates might include resources that can affect permissions in your AWS account ; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.\n\nThe following IAM resources require you to specify either the `CAPABILITY_IAM` or `CAPABILITY_NAMED_IAM` capability.\n\n- If you have IAM resources, you can specify either capability.\n- If you have IAM resources with custom names, you *must* specify `CAPABILITY_NAMED_IAM` .\n- If you don't specify either of these capabilities, CloudFormation returns an `InsufficientCapabilities` error.\n\nIf your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.\n\n- [AWS::IAM::AccessKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html)\n- [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html)\n- [AWS::IAM::InstanceProfile](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html)\n- [AWS::IAM::Policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html)\n- [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html)\n- [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html)\n- [AWS::IAM::UserToGroupAddition](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html)\n\nFor more information, see [Acknowledging IAM resources in CloudFormation templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities) in the *CloudFormation User Guide* .\n- `CAPABILITY_AUTO_EXPAND`\n\nSome template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the [AWS::Include](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-include.html) and [AWS::Serverless](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/transform-aws-serverless.html) transforms, which are macros hosted by CloudFormation .\n\nIf you want to create a stack from a stack template that contains macros *and* nested stacks, you must create the stack directly from the template using this capability.\n\n\u003e You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.\n\u003e \n\u003e Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified. \n\nFor more information, see [Perform custom processing on CloudFormation templates with template macros](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html) in the *CloudFormation User Guide* .","items":{"$ref":"#/types/aws-native:cloudformation:StackCapabilitiesItem"},"type":"array"},"changeSetId":{"description":"Returns the unique identifier of the change set.","type":"string"},"creationTime":{"description":"Returns the time the stack was created.","type":"string"},"description":{"description":"A user-defined description associated with the stack.","type":"string"},"disableRollback":{"description":"Set to `true` to disable rollback of the stack if stack creation failed. You can specify either `DisableRollback` or `OnFailure` , but not both.\n\nDefault: `false`","type":"boolean"},"enableTerminationProtection":{"description":"Whether to enable termination protection on the specified stack. If a user attempts to delete a stack with termination protection enabled, the operation fails and the stack remains unchanged. For more information, see [Protect CloudFormation stacks from being deleted](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-protect-stacks.html) in the *CloudFormation User Guide* . Termination protection is deactivated on stacks by default.\n\nFor nested stacks, termination protection is set on the root stack and can't be changed directly on the nested stack.","type":"boolean"},"lastUpdateTime":{"description":"Returns the time the stack was last updated. This will only be returned if the stack has been updated at least once.","type":"string"},"notificationArns":{"description":"The Amazon SNS topic ARNs to publish stack related events. You can find your Amazon SNS topic ARNs using the Amazon SNS console or your Command Line Interface (CLI).","items":{"type":"string"},"type":"array"},"outputs":{"description":"Returns a list of output structures.","items":{"$ref":"#/types/aws-native:cloudformation:StackOutput"},"type":"array"},"parameters":{"additionalProperties":{"type":"string"},"description":"The set value pairs that represent the parameters passed to CloudFormation when this nested stack is created. Each parameter has a name corresponding to a parameter defined in the embedded template and a value representing the value that you want to set for the parameter.\n\n\u003e If you use the `Ref` function to pass a parameter value to a nested stack, comma-delimited list parameters must be of type `String` . In other words, you can't pass values that are of type `CommaDelimitedList` to nested stacks. \n\nRequired if the nested stack requires input parameters.\n\nWhether an update causes interruptions depends on the resources that are being updated. An update never causes a nested stack to be replaced.","type":"object"},"parentId":{"description":"For nested stacks, returns the stack ID of the direct parent of this stack. For the first level of nested stacks, the root stack is also the parent stack.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role that CloudFormation assumes to create the stack. CloudFormation uses the role's credentials to make calls on your behalf. CloudFormation always uses this role for all future operations on the stack. Provided that users have permission to operate on the stack, CloudFormation uses this role even if the users don't have permission to pass it. Ensure that the role grants least privilege.\n\nIf you don't specify a value, CloudFormation uses the role that was previously associated with the stack. If no role is available, CloudFormation uses a temporary session that's generated from your user credentials.","type":"string"},"rootId":{"description":"For nested stacks, returns the stack ID of the top-level stack to which the nested stack ultimately belongs.","type":"string"},"stackId":{"description":"Returns the unique identifier of the stack.","type":"string"},"stackPolicyBody":{"$ref":"pulumi.json#/Any","description":"Structure that contains the stack policy body. For more information, see [Prevent updates to stack resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html) in the *CloudFormation User Guide* . You can specify either the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudFormation::Stack` for more information about the expected schema for this property."},"stackStatus":{"$ref":"#/types/aws-native:cloudformation:StackStatus","description":"Returns a success or failure message associated with the stack status."},"stackStatusReason":{"description":"Success/failure message associated with the stack status.","type":"string"},"tags":{"description":"Key-value pairs to associate with this stack. CloudFormation also propagates these tags to the resources created in the stack. A maximum number of 50 tags can be specified.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"templateBody":{"$ref":"pulumi.json#/Any","description":"Structure that contains the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.\n\nConditional: You must specify either the `TemplateBody` or the `TemplateURL` parameter, but not both.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudFormation::Stack` for more information about the expected schema for this property."},"timeoutInMinutes":{"description":"The length of time, in minutes, that CloudFormation waits for the nested stack to reach the `CREATE_COMPLETE` state. The default is no timeout. When CloudFormation detects that the nested stack has reached the `CREATE_COMPLETE` state, it marks the nested stack resource as `CREATE_COMPLETE` in the parent stack and resumes creating the parent stack. If the timeout period expires before the nested stack reaches `CREATE_COMPLETE` , CloudFormation marks the nested stack as failed and rolls back both the nested stack and parent stack.\n\nUpdates aren't supported.","type":"integer"}}}},"aws-native:cloudformation:getStackSet":{"description":"StackSet as a resource provides one-click experience for provisioning a StackSet and StackInstances","inputs":{"properties":{"stackSetId":{"type":"string","description":"The ID of the stack set that you're creating."}},"required":["stackSetId"]},"outputs":{"properties":{"administrationRoleArn":{"description":"The Amazon Resource Number (ARN) of the IAM role to use to create this stack set. Specify an IAM role only if you are using customized administrator roles to control which users or groups can manage specific stack sets within the same administrator account.","type":"string"},"autoDeployment":{"$ref":"#/types/aws-native:cloudformation:StackSetAutoDeployment","description":"Describes whether StackSets automatically deploys to AWS Organizations accounts that are added to the target organization or organizational unit (OU). Specify only if PermissionModel is SERVICE_MANAGED."},"capabilities":{"description":"In some cases, you must explicitly acknowledge that your stack set template contains certain capabilities in order for AWS CloudFormation to create the stack set and related stack instances.","items":{"$ref":"#/types/aws-native:cloudformation:StackSetCapability"},"type":"array"},"description":{"description":"A description of the stack set. You can use the description to identify the stack set's purpose or other important information.","type":"string"},"executionRoleName":{"description":"The name of the IAM execution role to use to create the stack set. If you do not specify an execution role, AWS CloudFormation uses the AWSCloudFormationStackSetExecutionRole role for the stack set operation.","type":"string"},"managedExecution":{"$ref":"#/types/aws-native:cloudformation:ManagedExecutionProperties","description":"Describes whether StackSets performs non-conflicting operations concurrently and queues conflicting operations."},"parameters":{"description":"The input parameters for the stack set template.","items":{"$ref":"#/types/aws-native:cloudformation:StackSetParameter"},"type":"array"},"stackSetId":{"description":"The ID of the stack set that you're creating.","type":"string"},"tags":{"description":"The key-value pairs to associate with this stack set and the stacks created from it. AWS CloudFormation also propagates these tags to supported resources that are created in the stacks. A maximum number of 50 tags can be specified.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"templateBody":{"description":"The structure that contains the template body, with a minimum length of 1 byte and a maximum length of 51,200 bytes.","type":"string"}}}},"aws-native:cloudformation:getTypeActivation":{"description":"Enable a resource that has been published in the CloudFormation Registry.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the extension."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the extension.","type":"string"},"publicTypeArn":{"description":"The Amazon Resource Number (ARN) assigned to the public extension upon publication","type":"string"},"publisherId":{"description":"The reserved publisher id for this type, or the publisher id assigned by CloudFormation for publishing in this region.","type":"string"},"typeName":{"description":"The name of the type being registered.\n\nWe recommend that type names adhere to the following pattern: company_or_organization::service::type.","type":"string"},"typeNameAlias":{"description":"An alias to assign to the public extension in this account and region. If you specify an alias for the extension, you must then use the alias to refer to the extension in your templates.","type":"string"}}}},"aws-native:cloudfront:getCachePolicy":{"description":"A cache policy.\n When it's attached to a cache behavior, the cache policy determines the following:\n  +  The values that CloudFront includes in the cache key. These values can include HTTP headers, cookies, and URL query strings. CloudFront uses the cache key to find an object in its cache that it can return to the viewer.\n  +  The default, minimum, and maximum time to live (TTL) values that you want objects to stay in the CloudFront cache.\n  \n The headers, cookies, and query strings that are included in the cache key are also included in requests that CloudFront sends to the origin. CloudFront sends a request when it can't find a valid object in its cache that matches the request's cache key. If you want to send values to the origin but *not* include them in the cache key, use ``OriginRequestPolicy``.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier for the cache policy. For example: `2766f7b2-75c5-41c6-8f06-bf4303a2f2f5` ."}},"required":["id"]},"outputs":{"properties":{"cachePolicyConfig":{"$ref":"#/types/aws-native:cloudfront:CachePolicyConfig","description":"The cache policy configuration."},"id":{"description":"The unique identifier for the cache policy. For example: `2766f7b2-75c5-41c6-8f06-bf4303a2f2f5` .","type":"string"},"lastModifiedTime":{"description":"The date and time when the cache policy was last modified.","type":"string"}}}},"aws-native:cloudfront:getCloudFrontOriginAccessIdentity":{"description":"The request to create a new origin access identity (OAI). An origin access identity is a special CloudFront user that you can associate with Amazon S3 origins, so that you can secure all or just some of your Amazon S3 content. For more information, see [Restricting Access to Amazon S3 Content by Using an Origin Access Identity](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) in the *Amazon CloudFront Developer Guide*.","inputs":{"properties":{"id":{"type":"string","description":"The ID for the origin access identity, for example, `E74FTE3AJFJ256A` ."}},"required":["id"]},"outputs":{"properties":{"cloudFrontOriginAccessIdentityConfig":{"$ref":"#/types/aws-native:cloudfront:CloudFrontOriginAccessIdentityConfig","description":"The current configuration information for the identity."},"id":{"description":"The ID for the origin access identity, for example, `E74FTE3AJFJ256A` .","type":"string"},"s3CanonicalUserId":{"description":"The Amazon S3 canonical user ID for the origin access identity, used when giving the origin access identity read permission to an object in Amazon S3. For example: `b970b42360b81c8ddbd79d2f5df0069ba9033c8a79655752abe380cd6d63ba8bcf23384d568fcf89fc49700b5e11a0fd` .","type":"string"}}}},"aws-native:cloudfront:getConnectionFunction":{"description":"A connection function.","inputs":{"properties":{"id":{"type":"string","description":"The connection function ID."}},"required":["id"]},"outputs":{"properties":{"connectionFunctionArn":{"description":"The connection function Amazon Resource Name (ARN).","type":"string"},"connectionFunctionCode":{"description":"The code for the connection function.","type":"string"},"connectionFunctionConfig":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionConfig","description":"Contains configuration information about a CloudFront function."},"createdTime":{"description":"The connection function created time.","type":"string"},"eTag":{"description":"A complex type that contains `Tag` key and `Tag` value.","type":"string"},"id":{"description":"The connection function ID.","type":"string"},"lastModifiedTime":{"description":"The connection function last modified time.","type":"string"},"stage":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionStage","description":"The connection function stage."},"status":{"$ref":"#/types/aws-native:cloudfront:ConnectionFunctionStatus","description":"The connection function status."},"tags":{"description":"A complex type that contains zero or more ``Tag`` elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudfront:getConnectionGroup":{"description":"The connection group for your distribution tenants. When you first create a distribution tenant and you don't specify a connection group, CloudFront will automatically create a default connection group for you. When you create a new distribution tenant and don't specify a connection group, the default one will be associated with your distribution tenant.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the connection group."}},"required":["id"]},"outputs":{"properties":{"anycastIpListId":{"description":"The ID of the Anycast static IP list.","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the connection group.","type":"string"},"createdTime":{"description":"The date and time when the connection group was created.","type":"string"},"eTag":{"description":"The current version of the connection group.","type":"string"},"enabled":{"description":"Whether the connection group is enabled.","type":"boolean"},"id":{"description":"The ID of the connection group.","type":"string"},"ipv6Enabled":{"description":"IPv6 is enabled for the connection group.","type":"boolean"},"isDefault":{"description":"Whether the connection group is the default connection group for the distribution tenants.","type":"boolean"},"lastModifiedTime":{"description":"The date and time when the connection group was updated.","type":"string"},"routingEndpoint":{"description":"The routing endpoint (also known as the DNS name) that is assigned to the connection group, such as d111111abcdef8.cloudfront.net.","type":"string"},"status":{"description":"The status of the connection group.","type":"string"},"tags":{"description":"A complex type that contains zero or more ``Tag`` elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudfront:getContinuousDeploymentPolicy":{"description":"Creates a continuous deployment policy that routes a subset of production traffic from a primary distribution to a staging distribution.\n After you create and update a staging distribution, you can use a continuous deployment policy to incrementally move traffic to the staging distribution. This enables you to test changes to a distribution's configuration before moving all of your production traffic to the new configuration.\n For more information, see [Using CloudFront continuous deployment to safely test CDN configuration changes](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/continuous-deployment.html) in the *Amazon CloudFront Developer Guide*.","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the cotinuous deployment policy."}},"required":["id"]},"outputs":{"properties":{"continuousDeploymentPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ContinuousDeploymentPolicyConfig","description":"Contains the configuration for a continuous deployment policy."},"id":{"description":"The identifier of the cotinuous deployment policy.","type":"string"},"lastModifiedTime":{"description":"The date and time when the continuous deployment policy was last modified.","type":"string"}}}},"aws-native:cloudfront:getDistribution":{"description":"A distribution tells CloudFront where you want content to be delivered from, and the details about how to track and manage content delivery.","inputs":{"properties":{"id":{"type":"string","description":"The distribution's identifier. For example: `E1U5RQF7T870K0` ."}},"required":["id"]},"outputs":{"properties":{"distributionConfig":{"$ref":"#/types/aws-native:cloudfront:DistributionConfig","description":"The distribution's configuration."},"domainName":{"description":"The domain name of the resource, such as `d111111abcdef8.cloudfront.net` .","type":"string"},"id":{"description":"The distribution's identifier. For example: `E1U5RQF7T870K0` .","type":"string"},"tags":{"description":"A complex type that contains zero or more ``Tag`` elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudfront:getDistributionTenant":{"description":"The distribution tenant.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the distribution tenant."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the distribution tenant.","type":"string"},"connectionGroupId":{"description":"The ID of the connection group for the distribution tenant. If you don't specify a connection group, CloudFront uses the default connection group.","type":"string"},"createdTime":{"description":"The date and time when the distribution tenant was created.","type":"string"},"customizations":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantCustomizations","description":"Customizations for the distribution tenant. For each distribution tenant, you can specify the geographic restrictions, and the Amazon Resource Names (ARNs) for the ACM certificate and WAF web ACL. These are specific values that you can override or disable from the multi-tenant distribution that was used to create the distribution tenant."},"distributionId":{"description":"The ID of the multi-tenant distribution.","type":"string"},"domainResults":{"items":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantDomainResult"},"type":"array"},"domains":{"description":"The domains associated with the distribution tenant.","items":{"type":"string"},"type":"array"},"eTag":{"description":"The current version of the distribution tenant.","type":"string"},"enabled":{"description":"Indicates whether the distribution tenant is in an enabled state. If disabled, the distribution tenant won't serve traffic.","type":"boolean"},"id":{"description":"The ID of the distribution tenant.","type":"string"},"lastModifiedTime":{"description":"The date and time when the distribution tenant was updated.","type":"string"},"parameters":{"description":"A list of parameter values to add to the resource. A parameter is specified as a key-value pair. A valid parameter value must exist for any parameter that is marked as required in the multi-tenant distribution.","items":{"$ref":"#/types/aws-native:cloudfront:DistributionTenantParameter"},"type":"array"},"status":{"description":"The status of the distribution tenant.","type":"string"},"tags":{"description":"A complex type that contains zero or more ``Tag`` elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudfront:getFunction":{"description":"Creates a CF function.\n To create a function, you provide the function code and some configuration information about the function. The response contains an Amazon Resource Name (ARN) that uniquely identifies the function, and the function’s stage.\n By default, when you create a function, it’s in the ``DEVELOPMENT`` stage. In this stage, you can [test the function](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/test-function.html) in the CF console (or with ``TestFunction`` in the CF API).\n When you’re ready to use your function with a CF distribution, publish the function to the ``LIVE`` stage. You can do this in the CF console, with ``PublishFunction`` in the CF API, or by updating the ``AWS::CloudFront::Function`` resource with the ``AutoPublish`` property set to ``true``. When the function is published to the ``LIVE`` stage, you can attach it to a distribution’s cache behavior, using the function’s ARN.\n To automatically publish the function to the ``LIVE`` stage when it’s created, set the ``AutoPublish`` property to ``true``.","inputs":{"properties":{"functionArn":{"type":"string","description":"The ARN of the function. For example:\n\n`arn:aws:cloudfront::123456789012:function/ExampleFunction` .\n\nTo get the function ARN, use the following syntax:\n\n`!GetAtt *Function_Logical_ID* .FunctionMetadata.FunctionARN`"}},"required":["functionArn"]},"outputs":{"properties":{"functionArn":{"description":"The ARN of the function. For example:\n\n`arn:aws:cloudfront::123456789012:function/ExampleFunction` .\n\nTo get the function ARN, use the following syntax:\n\n`!GetAtt *Function_Logical_ID* .FunctionMetadata.FunctionARN`","type":"string"},"functionCode":{"description":"The function code. For more information about writing a CloudFront function, see [Writing function code for CloudFront Functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/writing-function-code.html) in the *Amazon CloudFront Developer Guide*.","type":"string"},"functionConfig":{"$ref":"#/types/aws-native:cloudfront:FunctionConfig","description":"Contains configuration information about a CloudFront function."},"functionMetadata":{"$ref":"#/types/aws-native:cloudfront:FunctionMetadata","description":"Contains metadata about a CloudFront function."},"stage":{"type":"string"}}}},"aws-native:cloudfront:getKeyGroup":{"description":"A key group.\n A key group contains a list of public keys that you can use with [CloudFront signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html).","inputs":{"properties":{"id":{"type":"string","description":"The identifier for the key group."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The identifier for the key group.","type":"string"},"keyGroupConfig":{"$ref":"#/types/aws-native:cloudfront:KeyGroupConfig","description":"The key group configuration."},"lastModifiedTime":{"description":"The date and time when the key group was last modified.","type":"string"}}}},"aws-native:cloudfront:getKeyValueStore":{"description":"The key value store. Use this to separate data from function code, allowing you to update data without having to publish a new version of a function. The key value store holds keys and their corresponding values.","inputs":{"properties":{"name":{"type":"string","description":"The name of the key value store."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the key value store.","type":"string"},"comment":{"description":"A comment for the key value store.","type":"string"},"id":{"description":"The unique Id for the key value store.","type":"string"},"status":{"description":"The current status of the key value store. For more information, see [Key value store statuses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/kvs-with-functions-create.html#key-value-store-status) in the *.*","type":"string"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudfront:getMonitoringSubscription":{"description":"A monitoring subscription. This structure contains information about whether additional CloudWatch metrics are enabled for a given CloudFront distribution.","inputs":{"properties":{"distributionId":{"type":"string","description":"The ID of the distribution that you are enabling metrics for."}},"required":["distributionId"]},"outputs":{"properties":{"monitoringSubscription":{"$ref":"#/types/aws-native:cloudfront:MonitoringSubscription","description":"A subscription configuration for additional CloudWatch metrics.","language":{"csharp":{"name":"MonitoringSubscriptionValue"}}}}}},"aws-native:cloudfront:getOriginAccessControl":{"description":"Creates a new origin access control in CloudFront. After you create an origin access control, you can add it to an origin in a CloudFront distribution so that CloudFront sends authenticated (signed) requests to the origin.\n This makes it possible to block public access to the origin, allowing viewers (users) to access the origin's content only through CloudFront.\n For more information about using a CloudFront origin access control, see [Restricting access to an origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-origin.html) in the *Amazon CloudFront Developer Guide*.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier of the origin access control."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The unique identifier of the origin access control.","type":"string"},"originAccessControlConfig":{"$ref":"#/types/aws-native:cloudfront:OriginAccessControlConfig","description":"The origin access control."}}}},"aws-native:cloudfront:getOriginRequestPolicy":{"description":"An origin request policy.\n When it's attached to a cache behavior, the origin request policy determines the values that CloudFront includes in requests that it sends to the origin. Each request that CloudFront sends to the origin includes the following:\n  +  The request body and the URL path (without the domain name) from the viewer request.\n  +  The headers that CloudFront automatically includes in every origin request, including ``Host``, ``User-Agent``, and ``X-Amz-Cf-Id``.\n  +  All HTTP headers, cookies, and URL query strings that are specified in the cache policy or the origin request policy. These can include items from the viewer request and, in the case of headers, additional ones that are added by CloudFront.\n  \n CloudFront sends a request when it can't find an object in its cache that matches the request. If you want to send values to the origin and also include them in the cache key, use ``CachePolicy``.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier for the origin request policy. For example: `befd7079-9bbc-4ebf-8ade-498a3694176c` ."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The unique identifier for the origin request policy. For example: `befd7079-9bbc-4ebf-8ade-498a3694176c` .","type":"string"},"lastModifiedTime":{"description":"The date and time when the origin request policy was last modified.","type":"string"},"originRequestPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:OriginRequestPolicyConfig","description":"The origin request policy configuration."}}}},"aws-native:cloudfront:getPublicKey":{"description":"A public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html).\n CloudFront supports signed URLs and signed cookies with RSA 2048 or ECDSA 256 key signatures. Field-level encryption is only compatible with RSA 2048 key signatures.","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the public key."}},"required":["id"]},"outputs":{"properties":{"createdTime":{"description":"The date and time when the public key was uploaded.","type":"string"},"id":{"description":"The identifier of the public key.","type":"string"},"publicKeyConfig":{"$ref":"#/types/aws-native:cloudfront:PublicKeyConfig","description":"Configuration information about a public key that you can use with [signed URLs and signed cookies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/PrivateContent.html), or with [field-level encryption](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/field-level-encryption.html)."}}}},"aws-native:cloudfront:getRealtimeLogConfig":{"description":"A real-time log configuration.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the real-time log configuration. For example: `arn:aws:cloudfront::111122223333:realtime-log-config/ExampleNameForRealtimeLogConfig` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the real-time log configuration. For example: `arn:aws:cloudfront::111122223333:realtime-log-config/ExampleNameForRealtimeLogConfig` .","type":"string"},"endPoints":{"description":"Contains information about the Amazon Kinesis data stream where you are sending real-time log data for this real-time log configuration.","items":{"$ref":"#/types/aws-native:cloudfront:RealtimeLogConfigEndPoint"},"type":"array"},"fields":{"description":"A list of fields that are included in each real-time log record. In an API response, the fields are provided in the same order in which they are sent to the Amazon Kinesis data stream.\n For more information about fields, see [Real-time log configuration fields](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/real-time-logs.html#understand-real-time-log-config-fields) in the *Amazon CloudFront Developer Guide*.","items":{"type":"string"},"type":"array"},"samplingRate":{"description":"The sampling rate for this real-time log configuration. The sampling rate determines the percentage of viewer requests that are represented in the real-time log data. The sampling rate is an integer between 1 and 100, inclusive.","type":"number"}}}},"aws-native:cloudfront:getResponseHeadersPolicy":{"description":"A response headers policy.\n A response headers policy contains information about a set of HTTP response headers.\n After you create a response headers policy, you can use its ID to attach it to one or more cache behaviors in a CloudFront distribution. When it's attached to a cache behavior, the response headers policy affects the HTTP headers that CloudFront includes in HTTP responses to requests that match the cache behavior. CloudFront adds or removes response headers according to the configuration of the response headers policy.\n For more information, see [Adding or removing HTTP headers in CloudFront responses](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/modifying-response-headers.html) in the *Amazon CloudFront Developer Guide*.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier for the response headers policy. For example: `57f99797-3b20-4e1b-a728-27972a74082a` ."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The unique identifier for the response headers policy. For example: `57f99797-3b20-4e1b-a728-27972a74082a` .","type":"string"},"lastModifiedTime":{"description":"The date and time when the response headers policy was last modified.","type":"string"},"responseHeadersPolicyConfig":{"$ref":"#/types/aws-native:cloudfront:ResponseHeadersPolicyConfig","description":"A response headers policy configuration."}}}},"aws-native:cloudfront:getTrustStore":{"description":"A trust store.","inputs":{"properties":{"id":{"type":"string","description":"The trust store's ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The trust store's Amazon Resource Name (ARN).","type":"string"},"eTag":{"description":"The version identifier for the current version of the trust store.","type":"string"},"id":{"description":"The trust store's ID.","type":"string"},"lastModifiedTime":{"description":"The trust store's last modified time.","type":"string"},"numberOfCaCertificates":{"description":"The trust store's number of CA certificates.","type":"integer"},"status":{"$ref":"#/types/aws-native:cloudfront:TrustStoreStatus","description":"The trust store's status."},"tags":{"description":"A complex type that contains zero or more ``Tag`` elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudfront:getVpcOrigin":{"description":"An Amazon CloudFront VPC origin.","inputs":{"properties":{"id":{"type":"string","description":"The VPC origin ID."}},"required":["id"]},"outputs":{"properties":{"accountId":{"description":"The account ID of the AWS account that owns the VPC origin.","type":"string"},"arn":{"description":"The VPC origin ARN.","type":"string"},"createdTime":{"description":"The VPC origin created time.","type":"string"},"id":{"description":"The VPC origin ID.","type":"string"},"lastModifiedTime":{"description":"The VPC origin last modified time.","type":"string"},"status":{"description":"The VPC origin status.","type":"string"},"tags":{"description":"A complex type that contains zero or more ``Tag`` elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcOriginEndpointConfig":{"$ref":"#/types/aws-native:cloudfront:VpcOriginEndpointConfig","description":"The VPC origin endpoint configuration."}}}},"aws-native:cloudtrail:getChannel":{"description":"A channel receives events from a specific source (such as an on-premises storage solution or application, or a partner event data source), and delivers the events to one or more event data stores. You use channels to ingest events into CloudTrail from sources outside AWS.","inputs":{"properties":{"channelArn":{"type":"string","description":"`Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` ."}},"required":["channelArn"]},"outputs":{"properties":{"channelArn":{"description":"`Ref` returns the ARN of the CloudTrail channel, such as `arn:aws:cloudtrail:us-east-2:123456789012:channel/01234567890` .","type":"string"},"destinations":{"description":"One or more resources to which events arriving through a channel are logged and stored.","items":{"$ref":"#/types/aws-native:cloudtrail:ChannelDestination"},"type":"array"},"name":{"description":"The name of the channel.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudtrail:getDashboard":{"description":"The Amazon CloudTrail dashboard resource allows customers to manage managed dashboards and create custom dashboards. You can manually refresh custom and managed dashboards. For custom dashboards, you can also set up an automatic refresh schedule and modify dashboard widgets.","inputs":{"properties":{"dashboardArn":{"type":"string","description":"The ARN of the dashboard."}},"required":["dashboardArn"]},"outputs":{"properties":{"createdTimestamp":{"description":"The timestamp of the dashboard creation.","type":"string"},"dashboardArn":{"description":"The ARN of the dashboard.","type":"string"},"name":{"description":"The name of the dashboard.","type":"string"},"refreshSchedule":{"$ref":"#/types/aws-native:cloudtrail:DashboardRefreshSchedule","description":"Configures the automatic refresh schedule for the dashboard. Includes the frequency unit (DAYS or HOURS) and value, as well as the status (ENABLED or DISABLED) of the refresh schedule."},"status":{"$ref":"#/types/aws-native:cloudtrail:DashboardStatus","description":"The status of the dashboard. Values are CREATING, CREATED, UPDATING, UPDATED and DELETING."},"tags":{"description":"A list of tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"terminationProtectionEnabled":{"description":"Indicates whether the dashboard is protected from termination.","type":"boolean"},"type":{"$ref":"#/types/aws-native:cloudtrail:DashboardType","description":"The type of the dashboard. Values are CUSTOM and MANAGED."},"updatedTimestamp":{"description":"The timestamp showing when the dashboard was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.","type":"string"},"widgets":{"description":"List of widgets on the dashboard","items":{"$ref":"#/types/aws-native:cloudtrail:DashboardWidget"},"type":"array"}}}},"aws-native:cloudtrail:getEventDataStore":{"description":"A storage lake of event data against which you can run complex SQL-based queries. An event data store can include events that you have logged on your account from the last 7 to 2557 or 3653 days (about seven or ten years) depending on the selected BillingMode.","inputs":{"properties":{"eventDataStoreArn":{"type":"string","description":"The ARN of the event data store."}},"required":["eventDataStoreArn"]},"outputs":{"properties":{"advancedEventSelectors":{"description":"The advanced event selectors that were used to select events for the data store.","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreAdvancedEventSelector"},"type":"array"},"billingMode":{"description":"The mode that the event data store will use to charge for event storage.","type":"string"},"contextKeySelectors":{"description":"An array that enriches event records in an existing event data store by including additional information specified in individual ContexKeySelector entries. If you add ContextKeySelectors, you must set MaxEventSize to Large.","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreContextKeySelector"},"type":"array"},"createdTimestamp":{"description":"The timestamp of the event data store's creation.","type":"string"},"eventDataStoreArn":{"description":"The ARN of the event data store.","type":"string"},"federationEnabled":{"description":"Indicates whether federation is enabled on an event data store.","type":"boolean"},"federationRoleArn":{"description":"The ARN of the role used for event data store federation.","type":"string"},"ingestionEnabled":{"description":"Indicates whether the event data store is ingesting events.","type":"boolean"},"insightSelectors":{"description":"Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing event data store. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store.","items":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreInsightSelector"},"type":"array"},"insightsDestination":{"description":"Specifies the ARN of the event data store that will collect Insights events. Both InsightSelectors and InsightsDestination need to have a value in order to enable Insights events on an event data store","type":"string"},"kmsKeyId":{"description":"Specifies the KMS key ID to use to encrypt the events delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.","type":"string"},"maxEventSize":{"$ref":"#/types/aws-native:cloudtrail:EventDataStoreMaxEventSize","description":"Specifies the maximum size allowed for the event. Valid values are Standard and Large. If you add ContextKeySelectors, this value must be set to Large."},"multiRegionEnabled":{"description":"Indicates whether the event data store includes events from all regions, or only from the region in which it was created.","type":"boolean"},"name":{"description":"The name of the event data store.","type":"string"},"organizationEnabled":{"description":"Indicates that an event data store is collecting logged events for an organization.","type":"boolean"},"retentionPeriod":{"description":"The retention period, in days.","type":"integer"},"status":{"description":"The status of an event data store. Values are STARTING_INGESTION, ENABLED, STOPPING_INGESTION, STOPPED_INGESTION and PENDING_DELETION.","type":"string"},"tags":{"description":"A list of tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"terminationProtectionEnabled":{"description":"Indicates whether the event data store is protected from termination.","type":"boolean"},"updatedTimestamp":{"description":"The timestamp showing when an event data store was updated, if applicable. UpdatedTimestamp is always either the same or newer than the time shown in CreatedTimestamp.","type":"string"}}}},"aws-native:cloudtrail:getResourcePolicy":{"description":"Resource Type definition for AWS::CloudTrail::ResourcePolicy","inputs":{"properties":{"resourceArn":{"type":"string","description":"The ARN of the AWS CloudTrail resource to which the policy applies."}},"required":["resourceArn"]},"outputs":{"properties":{"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CloudTrail::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}}}},"aws-native:cloudtrail:getTrail":{"description":"Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket. A maximum of five trails can exist in a region, irrespective of the region in which they were created.","inputs":{"properties":{"trailName":{"type":"string","description":"Specifies the name of the trail. The name must meet the following requirements:\n\n- Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)\n- Start with a letter or number, and end with a letter or number\n- Be between 3 and 128 characters\n- Have no adjacent periods, underscores or dashes. Names like `my-_namespace` and `my--namespace` are not valid.\n- Not be in IP address format (for example, 192.168.5.4)"}},"required":["trailName"]},"outputs":{"properties":{"advancedEventSelectors":{"description":"The advanced event selectors that were used to select events for the data store.","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAdvancedEventSelector"},"type":"array"},"aggregationConfigurations":{"description":"Specifies the aggregation configuration to aggregate CloudTrail Events. A maximum of 1 aggregation configuration is allowed.","items":{"$ref":"#/types/aws-native:cloudtrail:TrailAggregationConfiguration"},"type":"array"},"arn":{"description":"`Ref` returns the ARN of the CloudTrail trail, such as `arn:aws:cloudtrail:us-east-2:123456789012:trail/myCloudTrail` .","type":"string"},"cloudWatchLogsLogGroupArn":{"description":"Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. Not required unless you specify CloudWatchLogsRoleArn.","type":"string"},"cloudWatchLogsRoleArn":{"description":"Specifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.","type":"string"},"enableLogFileValidation":{"description":"Specifies whether log file validation is enabled. The default is false.","type":"boolean"},"eventSelectors":{"description":"Use event selectors to further specify the management and data event settings for your trail. By default, trails created without specific event selectors will be configured to log all read and write management events, and no data events. When an event occurs in your account, CloudTrail evaluates the event selector for all trails. For each trail, if the event matches any event selector, the trail processes and logs the event. If the event doesn't match any event selector, the trail doesn't log the event. You can configure up to five event selectors for a trail.","items":{"$ref":"#/types/aws-native:cloudtrail:TrailEventSelector"},"type":"array"},"includeGlobalServiceEvents":{"description":"Specifies whether the trail is publishing events from global services such as IAM to the log files.","type":"boolean"},"insightSelectors":{"description":"Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail.","items":{"$ref":"#/types/aws-native:cloudtrail:TrailInsightSelector"},"type":"array"},"isLogging":{"description":"Whether the CloudTrail is currently logging AWS API calls.","type":"boolean"},"isMultiRegionTrail":{"description":"Specifies whether the trail applies only to the current region or to all regions. The default is false. If the trail exists only in the current region and this value is set to true, shadow trails (replications of the trail) will be created in the other regions. If the trail exists in all regions and this value is set to false, the trail will remain in the region where it was created, and its shadow trails in other regions will be deleted. As a best practice, consider using trails that log events in all regions.","type":"boolean"},"isOrganizationTrail":{"description":"Specifies whether the trail is created for all accounts in an organization in AWS Organizations, or only for the current AWS account. The default is false, and cannot be true unless the call is made on behalf of an AWS account that is the master account for an organization in AWS Organizations.","type":"boolean"},"kmsKeyId":{"description":"Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by 'alias/', a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.","type":"string"},"s3BucketName":{"description":"Specifies the name of the Amazon S3 bucket designated for publishing log files. See Amazon S3 Bucket Naming Requirements.","type":"string"},"s3KeyPrefix":{"description":"Specifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery. For more information, see Finding Your CloudTrail Log Files. The maximum length is 200 characters.","type":"string"},"snsTopicArn":{"description":"`Ref` returns the ARN of the Amazon  topic that's associated with the CloudTrail trail, such as `arn:aws:sns:us-east-2:123456789012:mySNSTopic` .","type":"string"},"snsTopicName":{"description":"Specifies the name of the Amazon SNS topic defined for notification of log file delivery. The maximum length is 256 characters.","type":"string"},"tags":{"description":"A custom set of tags (key-value pairs) for this trail.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudwatch:getAlarm":{"description":"The ``AWS::CloudWatch::Alarm`` type specifies an alarm and associates it with the specified metric or metric math expression.\n When this operation creates an alarm, the alarm state is immediately set to ``INSUFFICIENT_DATA``. The alarm is then evaluated and its state is set appropriately. Any actions associated with the new state are then executed.\n When you update an existing alarm, its state is left unchanged, but the update completely overwrites the previous configuration of the alarm.","inputs":{"properties":{"alarmName":{"type":"string","description":"The name of the alarm. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the alarm name. \n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["alarmName"]},"outputs":{"properties":{"actionsEnabled":{"description":"Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE.","type":"boolean"},"alarmActions":{"description":"The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN). For more information about creating alarms and the actions that you can specify, see [PutMetricAlarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_PutMetricAlarm.html) in the *API Reference*.","items":{"type":"string"},"type":"array"},"alarmDescription":{"description":"The description of the alarm.","type":"string"},"arn":{"description":"The ARN of the CloudWatch alarm, such as `arn:aws:cloudwatch:us-west-2:123456789012:alarm:myCloudWatchAlarm-CPUAlarm-UXMMZK36R55Z` .","type":"string"},"comparisonOperator":{"description":"The arithmetic operation to use when comparing the specified statistic and threshold. The specified statistic value is used as the first operand.","type":"string"},"datapointsToAlarm":{"description":"The number of datapoints that must be breaching to trigger the alarm. This is used only if you are setting an \"M out of N\" alarm. In that case, this value is the M, and the value that you set for ``EvaluationPeriods`` is the N value. For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*.\n If you omit this parameter, CW uses the same value here that you set for ``EvaluationPeriods``, and the alarm goes to alarm state if that many consecutive periods are breaching.","type":"integer"},"dimensions":{"description":"The dimensions for the metric associated with the alarm. For an alarm based on a math expression, you can't specify ``Dimensions``. Instead, you use ``Metrics``.","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmDimension"},"type":"array"},"evaluateLowSampleCountPercentile":{"description":"Used only for alarms based on percentiles. If ``ignore``, the alarm state does not change during periods with too few data points to be statistically significant. If ``evaluate`` or this parameter is not used, the alarm is always evaluated and possibly changes state no matter how many data points are available.","type":"string"},"evaluationPeriods":{"description":"The number of periods over which data is compared to the specified threshold. If you are setting an alarm that requires that a number of consecutive data points be breaching to trigger the alarm, this value specifies that number. If you are setting an \"M out of N\" alarm, this value is the N, and ``DatapointsToAlarm`` is the M.\n For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*.","type":"integer"},"extendedStatistic":{"description":"The percentile statistic for the metric associated with the alarm. Specify a value between p0.0 and p100.\n For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.\n For an alarm based on a math expression, you can't specify ``ExtendedStatistic``. Instead, you use ``Metrics``.","type":"string"},"insufficientDataActions":{"description":"The actions to execute when this alarm transitions to the ``INSUFFICIENT_DATA`` state from any other state. Each action is specified as an Amazon Resource Name (ARN).","items":{"type":"string"},"type":"array"},"metricName":{"description":"The name of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you use ``Metrics`` instead and you can't specify ``MetricName``.","type":"string"},"metrics":{"description":"An array that enables you to create an alarm based on the result of a metric math expression. Each item in the array either retrieves a metric or performs a math expression.\n If you specify the ``Metrics`` parameter, you cannot specify ``MetricName``, ``Dimensions``, ``Period``, ``Namespace``, ``Statistic``, ``ExtendedStatistic``, or ``Unit``.","items":{"$ref":"#/types/aws-native:cloudwatch:AlarmMetricDataQuery"},"type":"array"},"namespace":{"description":"The namespace of the metric associated with the alarm. This is required for an alarm based on a metric. For an alarm based on a math expression, you can't specify ``Namespace`` and you use ``Metrics`` instead.\n For a list of namespaces for metrics from AWS services, see [Services That Publish Metrics.](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html)","type":"string"},"okActions":{"description":"The actions to execute when this alarm transitions to the ``OK`` state from any other state. Each action is specified as an Amazon Resource Name (ARN).","items":{"type":"string"},"type":"array"},"period":{"description":"The period, in seconds, over which the statistic is applied. This is required for an alarm based on a metric. Valid values are 10, 20, 30, 60, and any multiple of 60.\n For an alarm based on a math expression, you can't specify ``Period``, and instead you use the ``Metrics`` parameter.\n *Minimum:* 10","type":"integer"},"statistic":{"description":"The statistic for the metric associated with the alarm, other than percentile. For percentile statistics, use ``ExtendedStatistic``.\n For an alarm based on a metric, you must specify either ``Statistic`` or ``ExtendedStatistic`` but not both.\n For an alarm based on a math expression, you can't specify ``Statistic``. Instead, you use ``Metrics``.","type":"string"},"tags":{"description":"A list of key-value pairs to associate with the alarm. You can associate as many as 50 tags with an alarm. To be able to associate tags with the alarm when you create the alarm, you must have the ``cloudwatch:TagResource`` permission.\n Tags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"threshold":{"description":"The value to compare with the specified statistic.","type":"number"},"thresholdMetricId":{"description":"In an alarm based on an anomaly detection model, this is the ID of the ``ANOMALY_DETECTION_BAND`` function used as the threshold for the alarm.","type":"string"},"treatMissingData":{"description":"Sets how this alarm is to handle missing data points. Valid values are ``breaching``, ``notBreaching``, ``ignore``, and ``missing``. For more information, see [Configuring How Alarms Treat Missing Data](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarms-and-missing-data) in the *Amazon User Guide*.\n If you omit this parameter, the default behavior of ``missing`` is used.","type":"string"},"unit":{"description":"The unit of the metric associated with the alarm. Specify this only if you are creating an alarm based on a single metric. Do not specify this if you are specifying a ``Metrics`` array.\n  You can specify the following values: Seconds, Microseconds, Milliseconds, Bytes, Kilobytes, Megabytes, Gigabytes, Terabytes, Bits, Kilobits, Megabits, Gigabits, Terabits, Percent, Count, Bytes/Second, Kilobytes/Second, Megabytes/Second, Gigabytes/Second, Terabytes/Second, Bits/Second, Kilobits/Second, Megabits/Second, Gigabits/Second, Terabits/Second, Count/Second, or None.","type":"string"}}}},"aws-native:cloudwatch:getAlarmMuteRule":{"description":"Resource Type definition for AWS::CloudWatch::AlarmMuteRule that allows defining a rule and targeting alarms to mute their actions during the specified window.","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the AlarmMuteRule"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the AlarmMuteRule","type":"string"},"description":{"description":"The description of the AlarmMuteRule","type":"string"},"expireDate":{"description":"The date, with the same timezone offset as \"ScheduleTimezone\" after which the alarm mute rule will be expired.","type":"string"},"lastUpdatedTimestamp":{"description":"The last update timestamp of the alarm mute schedule","type":"string"},"muteTargets":{"$ref":"#/types/aws-native:cloudwatch:MuteTargetsProperties","description":"Targets to be muted"},"muteType":{"description":"The mute type of the alarm mute ","type":"string"},"rule":{"$ref":"#/types/aws-native:cloudwatch:RuleProperties","description":"The rule for the mute"},"startDate":{"description":"The date, with the same timezone offset as \"ScheduleTimezone\", after which the alarm mute rule will become active.","type":"string"},"status":{"$ref":"#/types/aws-native:cloudwatch:AlarmMuteRuleStatus","description":"The current status of the AlarmMuteRule"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudwatch:getCompositeAlarm":{"description":"The AWS::CloudWatch::CompositeAlarm type specifies an alarm which aggregates the states of other Alarms (Metric or Composite Alarms) as defined by the AlarmRule expression","inputs":{"properties":{"alarmName":{"type":"string","description":"The name of the Composite Alarm"}},"required":["alarmName"]},"outputs":{"properties":{"actionsEnabled":{"description":"Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE.","type":"boolean"},"actionsSuppressor":{"description":"Actions will be suppressed if the suppressor alarm is in the ALARM state. ActionsSuppressor can be an AlarmName or an Amazon Resource Name (ARN) from an existing alarm. ","type":"string"},"actionsSuppressorExtensionPeriod":{"description":"Actions will be suppressed if WaitPeriod is active. The length of time that actions are suppressed is in seconds.","type":"integer"},"actionsSuppressorWaitPeriod":{"description":"Actions will be suppressed if ExtensionPeriod is active. The length of time that actions are suppressed is in seconds.","type":"integer"},"alarmActions":{"description":"The list of actions to execute when this alarm transitions into an ALARM state from any other state. Specify each action as an Amazon Resource Name (ARN).","items":{"type":"string"},"type":"array"},"alarmDescription":{"description":"The description of the alarm","type":"string"},"alarmRule":{"description":"Expression which aggregates the state of other Alarms (Metric or Composite Alarms)","type":"string"},"arn":{"description":"Amazon Resource Name (ARN) of the alarm","type":"string"},"insufficientDataActions":{"description":"The actions to execute when this alarm transitions to the INSUFFICIENT_DATA state from any other state. Each action is specified as an Amazon Resource Name (ARN).","items":{"type":"string"},"type":"array"},"okActions":{"description":"The actions to execute when this alarm transitions to the OK state from any other state. Each action is specified as an Amazon Resource Name (ARN).","items":{"type":"string"},"type":"array"},"tags":{"description":"A list of key-value pairs to associate with the composite alarm. You can associate as many as 50 tags with an alarm.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:cloudwatch:getDashboard":{"description":"Resource Type definition for AWS::CloudWatch::Dashboard","inputs":{"properties":{"dashboardName":{"type":"string","description":"The name of the dashboard. The name must be between 1 and 255 characters. If you do not specify a name, one will be generated automatically."}},"required":["dashboardName"]},"outputs":{"properties":{"dashboardBody":{"description":"The detailed information about the dashboard in JSON format, including the widgets to include and their location on the dashboard","type":"string"}}}},"aws-native:cloudwatch:getMetricStream":{"description":"Resource Type definition for Metric Stream","inputs":{"properties":{"name":{"type":"string","description":"Name of the metric stream."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name of the metric stream.","type":"string"},"creationDate":{"description":"The date of creation of the metric stream.","type":"string"},"excludeFilters":{"description":"Define which metrics will be not streamed. Metrics matched by multiple instances of MetricStreamFilter are joined with an OR operation by default. If both IncludeFilters and ExcludeFilters are omitted, all metrics in the account will be streamed. IncludeFilters and ExcludeFilters are mutually exclusive. Default to null.","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamFilter"},"type":"array"},"firehoseArn":{"description":"The ARN of the Kinesis Firehose where to stream the data.","type":"string"},"includeFilters":{"description":"Define which metrics will be streamed. Metrics matched by multiple instances of MetricStreamFilter are joined with an OR operation by default. If both IncludeFilters and ExcludeFilters are omitted, all metrics in the account will be streamed. IncludeFilters and ExcludeFilters are mutually exclusive. Default to null.","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamFilter"},"type":"array"},"includeLinkedAccountsMetrics":{"description":"If you are creating a metric stream in a monitoring account, specify true to include metrics from source accounts that are linked to this monitoring account, in the metric stream. The default is false.","type":"boolean"},"lastUpdateDate":{"description":"The date of the last update of the metric stream.","type":"string"},"outputFormat":{"description":"The output format of the data streamed to the Kinesis Firehose.","type":"string"},"roleArn":{"description":"The ARN of the role that provides access to the Kinesis Firehose.","type":"string"},"state":{"description":"Displays the state of the Metric Stream.","type":"string"},"statisticsConfigurations":{"description":"By default, a metric stream always sends the MAX, MIN, SUM, and SAMPLECOUNT statistics for each metric that is streamed. You can use this parameter to have the metric stream also send additional statistics in the stream. This array can have up to 100 members.","items":{"$ref":"#/types/aws-native:cloudwatch:MetricStreamStatisticsConfiguration"},"type":"array"},"tags":{"description":"A set of tags to assign to the delivery stream.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codeartifact:getDomain":{"description":"The resource schema to create a CodeArtifact domain.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the domain."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the domain.","type":"string"},"name":{"description":"The name of the domain. This field is used for GetAtt","type":"string"},"owner":{"description":"The 12-digit account ID of the AWS account that owns the domain. This field is used for GetAtt","type":"string"},"permissionsPolicyDocument":{"$ref":"pulumi.json#/Any","description":"The access control resource policy on the provided domain.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CodeArtifact::Domain` for more information about the expected schema for this property."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codeartifact:getPackageGroup":{"description":"The resource schema to create a CodeArtifact package group.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the package group."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the package group.","type":"string"},"contactInfo":{"description":"The contact info of the package group.","type":"string"},"description":{"description":"The text description of the package group.","type":"string"},"domainOwner":{"description":"The 12-digit account ID of the AWS account that owns the domain.","type":"string"},"originConfiguration":{"$ref":"#/types/aws-native:codeartifact:PackageGroupOriginConfiguration","description":"The package origin configuration of the package group."},"tags":{"description":"An array of key-value pairs to apply to the package group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codeartifact:getRepository":{"description":"The resource schema to create a CodeArtifact repository.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the repository."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the repository.","type":"string"},"description":{"description":"A text description of the repository.","type":"string"},"externalConnections":{"description":"A list of external connections associated with the repository.","items":{"type":"string"},"type":"array"},"name":{"description":"The name of the repository. This is used for GetAtt","type":"string"},"permissionsPolicyDocument":{"$ref":"pulumi.json#/Any","description":"The access control resource policy on the provided repository.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::CodeArtifact::Repository` for more information about the expected schema for this property."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"upstreams":{"description":"A list of upstream repositories associated with the repository.","items":{"type":"string"},"type":"array"}}}},"aws-native:codebuild:getFleet":{"description":"Resource Type definition for AWS::CodeBuild::Fleet","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the compute fleet."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the compute fleet.","type":"string"},"baseCapacity":{"description":"The initial number of machines allocated to the compute fleet, which defines the number of builds that can run in parallel.","type":"integer"},"computeConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetComputeConfiguration","description":"The compute configuration of the compute fleet. This is only required if `computeType` is set to `ATTRIBUTE_BASED_COMPUTE` or `CUSTOM_INSTANCE_TYPE` ."},"computeType":{"$ref":"#/types/aws-native:codebuild:FleetComputeType","description":"Information about the compute resources the compute fleet uses. Available values include:\n\n- `ATTRIBUTE_BASED_COMPUTE` : Specify the amount of vCPUs, memory, disk space, and the type of machine.\n\n\u003e If you use `ATTRIBUTE_BASED_COMPUTE` , you must define your attributes by using `computeConfiguration` . AWS CodeBuild will select the cheapest instance that satisfies your specified attributes. For more information, see [Reserved capacity environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment-reserved-capacity.types) in the *AWS CodeBuild User Guide* .\n- `BUILD_GENERAL1_SMALL` : Use up to 4 GiB memory and 2 vCPUs for builds.\n- `BUILD_GENERAL1_MEDIUM` : Use up to 8 GiB memory and 4 vCPUs for builds.\n- `BUILD_GENERAL1_LARGE` : Use up to 16 GiB memory and 8 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_XLARGE` : Use up to 72 GiB memory and 36 vCPUs for builds, depending on your environment type.\n- `BUILD_GENERAL1_2XLARGE` : Use up to 144 GiB memory, 72 vCPUs, and 824 GB of SSD storage for builds. This compute type supports Docker images up to 100 GB uncompressed.\n- `BUILD_LAMBDA_1GB` : Use up to 1 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_2GB` : Use up to 2 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_4GB` : Use up to 4 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_8GB` : Use up to 8 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n- `BUILD_LAMBDA_10GB` : Use up to 10 GiB memory for builds. Only available for environment type `LINUX_LAMBDA_CONTAINER` and `ARM_LAMBDA_CONTAINER` .\n\nIf you use `BUILD_GENERAL1_SMALL` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 16 GiB memory, 4 vCPUs, and 1 NVIDIA A10G Tensor Core GPU for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 4 GiB memory and 2 vCPUs on ARM-based processors for builds.\n\nIf you use `BUILD_GENERAL1_LARGE` :\n\n- For environment type `LINUX_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs for builds.\n- For environment type `LINUX_GPU_CONTAINER` , you can use up to 255 GiB memory, 32 vCPUs, and 4 NVIDIA Tesla V100 GPUs for builds.\n- For environment type `ARM_CONTAINER` , you can use up to 16 GiB memory and 8 vCPUs on ARM-based processors for builds.\n\nFor more information, see [On-demand environment types](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html#environment.types) in the *AWS CodeBuild User Guide.*"},"environmentType":{"$ref":"#/types/aws-native:codebuild:FleetEnvironmentType","description":"The environment type of the compute fleet.\n\n- The environment type `ARM_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), EU (Frankfurt), and South America (São Paulo).\n- The environment type `ARM_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `LINUX_GPU_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), and Asia Pacific (Sydney).\n- The environment type `MAC_ARM` is available only in regions US East (Ohio), US East (N. Virginia), US West (Oregon), Europe (Frankfurt), and Asia Pacific (Sydney).\n- The environment type `WINDOWS_EC2` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), South America (São Paulo), and Asia Pacific (Mumbai).\n- The environment type `WINDOWS_SERVER_2019_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Mumbai) and EU (Ireland).\n- The environment type `WINDOWS_SERVER_2022_CONTAINER` is available only in regions US East (N. Virginia), US East (Ohio), US West (Oregon), EU (Ireland), EU (Frankfurt), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Tokyo), South America (São Paulo) and Asia Pacific (Mumbai).\n\nFor more information, see [Build environment compute types](https://docs.aws.amazon.com//codebuild/latest/userguide/build-env-ref-compute-types.html) in the *AWS CodeBuild user guide* ."},"fleetProxyConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetProxyConfiguration","description":"Information about the proxy configurations that apply network access control to your reserved capacity instances."},"fleetServiceRole":{"description":"The service role associated with the compute fleet. For more information, see [Allow a user to add a permission policy for a fleet service role](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-permission-policy-fleet-service-role.html) in the *AWS CodeBuild User Guide* .","type":"string"},"fleetVpcConfig":{"$ref":"#/types/aws-native:codebuild:FleetVpcConfig","description":"Information about the VPC configuration that AWS CodeBuild accesses."},"imageId":{"description":"The Amazon Machine Image (AMI) of the compute fleet.","type":"string"},"name":{"description":"The name of the compute fleet.","type":"string"},"overflowBehavior":{"$ref":"#/types/aws-native:codebuild:FleetOverflowBehavior","description":"The compute fleet overflow behavior.\n\n- For overflow behavior `QUEUE` , your overflow builds need to wait on the existing fleet instance to become available.\n- For overflow behavior `ON_DEMAND` , your overflow builds run on CodeBuild on-demand.\n\n\u003e If you choose to set your overflow behavior to on-demand while creating a VPC-connected fleet, make sure that you add the required VPC permissions to your project service role. For more information, see [Example policy statement to allow CodeBuild access to AWS services required to create a VPC network interface](https://docs.aws.amazon.com/codebuild/latest/userguide/auth-and-access-control-iam-identity-based-access-control.html#customer-managed-policies-example-create-vpc-network-interface) ."},"scalingConfiguration":{"$ref":"#/types/aws-native:codebuild:FleetScalingConfigurationInput","description":"The scaling configuration of the compute fleet."},"tags":{"description":"A list of tag key and value pairs associated with this compute fleet.\n\nThese tags are available for use by AWS services that support AWS CodeBuild compute fleet tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codeconnections:getConnection":{"description":"Schema for AWS::CodeConnections::Connection resource which can be used to connect external source providers with other AWS services (i.e. AWS CodePipeline)","inputs":{"properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the  connection. The ARN is used as the connection reference when the connection is shared between AWS services."}},"required":["connectionArn"]},"outputs":{"properties":{"connectionArn":{"description":"The Amazon Resource Name (ARN) of the  connection. The ARN is used as the connection reference when the connection is shared between AWS services.","type":"string"},"connectionStatus":{"description":"The current status of the connection.","type":"string"},"ownerAccountId":{"description":"The name of the external provider where your third-party code repository is configured. For Bitbucket, this is the account ID of the owner of the Bitbucket repository.","type":"string"},"tags":{"description":"Specifies the tags applied to a connection.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codedeploy:getApplication":{"description":"The AWS::CodeDeploy::Application resource creates an AWS CodeDeploy application","inputs":{"properties":{"applicationName":{"type":"string","description":"A name for the application. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the application name."}},"required":["applicationName"]},"outputs":{"properties":{"tags":{"description":"The metadata that you apply to CodeDeploy applications to help you organize and categorize them. Each tag consists of a key and an optional value, both of which you define. ","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codedeploy:getDeploymentGroup":{"description":"Resource type definition for AWS::CodeDeploy::DeploymentGroup","inputs":{"properties":{"applicationName":{"type":"string","description":"The name of an existing CodeDeploy application to associate this deployment group with."},"deploymentGroupName":{"type":"string","description":"A name for the deployment group. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the deployment group name."}},"required":["applicationName","deploymentGroupName"]},"outputs":{"properties":{"alarmConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAlarmConfiguration","description":"Information about the Amazon CloudWatch alarms that are associated with the deployment group."},"autoRollbackConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupAutoRollbackConfiguration","description":"Information about the automatic rollback configuration that is associated with the deployment group. If you specify this property, don't specify the Deployment property."},"autoScalingGroups":{"description":"A list of associated Auto Scaling groups that CodeDeploy automatically deploys revisions to when new instances are created. Duplicates are not allowed.","items":{"type":"string"},"type":"array"},"blueGreenDeploymentConfiguration":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupBlueGreenDeploymentConfiguration","description":"Information about blue/green deployment options for a deployment group."},"deployment":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeployment","description":"The application revision to deploy to this deployment group. If you specify this property, your target application revision is deployed as soon as the provisioning process is complete. If you specify this property, don't specify the AutoRollbackConfiguration property."},"deploymentConfigName":{"description":"A deployment configuration name or a predefined configuration name. With predefined configurations, you can deploy application revisions to one instance at a time (CodeDeployDefault.OneAtATime), half of the instances at a time (CodeDeployDefault.HalfAtATime), or all the instances at once (CodeDeployDefault.AllAtOnce).","type":"string"},"deploymentStyle":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupDeploymentStyle","description":"Attributes that determine the type of deployment to run and whether to route deployment traffic behind a load balancer. If you specify this property with a blue/green deployment type, don't specify the AutoScalingGroups, LoadBalancerInfo, or Deployment properties."},"ec2TagFilters":{"description":"The Amazon EC2 tags that are already applied to Amazon EC2 instances that you want to include in the deployment group. CodeDeploy includes all Amazon EC2 instances identified by any of the tags you specify in this deployment group. Duplicates are not allowed. You can specify EC2TagFilters or Ec2TagSet, but not both.","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagFilter"},"type":"array"},"ec2TagSet":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEc2TagSet","description":"Information about groups of tags applied to Amazon EC2 instances. Use when the deployment group includes only Amazon EC2 instances identified by all the tag groups. Cannot be used in the same call as ec2TagFilter."},"ecsServices":{"description":"The target Amazon ECS services in the deployment group. This applies only to deployment groups that use the Amazon ECS compute platform. A target Amazon ECS service is specified as an Amazon ECS cluster and service name pair using the format \u003cclustername\u003e:\u003cservicename\u003e.","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupEcsService"},"type":"array"},"loadBalancerInfo":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupLoadBalancerInfo","description":"Information about the load balancer to use in a deployment."},"onPremisesInstanceTagFilters":{"description":"The on-premises instance tags already applied to on-premises instances that you want to include in the deployment group. CodeDeploy includes all on-premises instances identified by any of the tags you specify in this deployment group. Duplicates are not allowed. You can specify OnPremisesInstanceTagFilters or OnPremisesInstanceTagSet, but not both.","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTagFilter"},"type":"array"},"onPremisesTagSet":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupOnPremisesTagSet","description":"Information about groups of tags applied to on-premises instances. The deployment group includes only on-premises instances identified by all the tag groups. You can specify OnPremisesInstanceTagFilters or OnPremisesInstanceTagSet, but not both."},"outdatedInstancesStrategy":{"description":"Indicates what happens when new Amazon EC2 instances are launched mid-deployment and do not receive the deployed application revision. If this option is set to UPDATE or is unspecified, CodeDeploy initiates one or more 'auto-update outdated instances' deployments to apply the deployed application revision to the new Amazon EC2 instances. If this option is set to IGNORE, CodeDeploy does not initiate a deployment to update the new Amazon EC2 instances. This may result in instances having different revisions.","type":"string"},"serviceRoleArn":{"description":"A service role Amazon Resource Name (ARN) that grants CodeDeploy permission to make calls to AWS services on your behalf. For more information, see 'Create a Service Role for AWS CodeDeploy' in the AWS CodeDeploy User Guide.","type":"string"},"tags":{"description":"The metadata that you apply to CodeDeploy deployment groups to help you organize and categorize them. Each tag consists of a key and an optional value, both of which you define.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"terminationHookEnabled":{"description":"Indicates whether the deployment group was configured to have CodeDeploy install a termination hook into an Auto Scaling group.","type":"boolean"},"triggerConfigurations":{"description":"Information about triggers associated with the deployment group. Duplicates are not allowed.","items":{"$ref":"#/types/aws-native:codedeploy:DeploymentGroupTriggerConfig"},"type":"array"}}}},"aws-native:codeguruprofiler:getProfilingGroup":{"description":"This resource schema represents the Profiling Group resource in the Amazon CodeGuru Profiler service.","inputs":{"properties":{"profilingGroupName":{"type":"string","description":"The name of the profiling group."}},"required":["profilingGroupName"]},"outputs":{"properties":{"agentPermissions":{"$ref":"#/types/aws-native:codeguruprofiler:AgentPermissionsProperties","description":"The agent permissions attached to this profiling group."},"anomalyDetectionNotificationConfiguration":{"description":"Configuration for Notification Channels for Anomaly Detection feature in CodeGuru Profiler which enables customers to detect anomalies in the application profile for those methods that represent the highest proportion of CPU time or latency","items":{"$ref":"#/types/aws-native:codeguruprofiler:ProfilingGroupChannel"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the specified profiling group.","type":"string"},"tags":{"description":"The tags associated with a profiling group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codegurureviewer:getRepositoryAssociation":{"description":"This resource schema represents the RepositoryAssociation resource in the Amazon CodeGuru Reviewer service.","inputs":{"properties":{"associationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the repository association."}},"required":["associationArn"]},"outputs":{"properties":{"associationArn":{"description":"The Amazon Resource Name (ARN) of the repository association.","type":"string"}}}},"aws-native:codepipeline:getCustomActionType":{"description":"The AWS::CodePipeline::CustomActionType resource creates a custom action for activities that aren't included in the CodePipeline default actions, such as running an internally developed build process or a test suite. You can use these custom actions in the stage of a pipeline.","inputs":{"properties":{"category":{"type":"string","description":"The category of the custom action, such as a build action or a test action."},"provider":{"type":"string","description":"The provider of the service used in the custom action, such as AWS CodeDeploy."},"version":{"type":"string","description":"The version identifier of the custom action."}},"required":["category","provider","version"]},"outputs":{"properties":{"id":{"type":"string"},"tags":{"description":"Any tags assigned to the custom action.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codepipeline:getPipeline":{"description":"The AWS::CodePipeline::Pipeline resource creates a CodePipeline pipeline that describes how software changes go through a release process.","inputs":{"properties":{"name":{"type":"string","description":"The name of the pipeline."}},"required":["name"]},"outputs":{"properties":{"artifactStore":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStore","description":"The S3 bucket where artifacts for the pipeline are stored."},"artifactStores":{"description":"A mapping of artifactStore objects and their corresponding AWS Regions. There must be an artifact store for the pipeline Region and for each cross-region action in the pipeline.","items":{"$ref":"#/types/aws-native:codepipeline:PipelineArtifactStoreMap"},"type":"array"},"disableInboundStageTransitions":{"description":"Represents the input of a DisableStageTransition action.","items":{"$ref":"#/types/aws-native:codepipeline:PipelineStageTransition"},"type":"array"},"executionMode":{"$ref":"#/types/aws-native:codepipeline:PipelineExecutionMode","description":"The method that the pipeline will use to handle multiple executions. The default mode is SUPERSEDED."},"pipelineType":{"$ref":"#/types/aws-native:codepipeline:PipelineType","description":"CodePipeline provides the following pipeline types, which differ in characteristics and price, so that you can tailor your pipeline features and cost to the needs of your applications."},"roleArn":{"description":"The Amazon Resource Name (ARN) for CodePipeline to use to either perform actions with no actionRoleArn, or to use to assume roles for actions with an actionRoleArn","type":"string"},"stages":{"description":"Represents information about a stage and its definition.","items":{"$ref":"#/types/aws-native:codepipeline:PipelineStageDeclaration"},"type":"array"},"tags":{"description":"Specifies the tags applied to the pipeline.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"triggers":{"description":"The trigger configuration specifying a type of event, such as Git tags, that starts the pipeline.","items":{"$ref":"#/types/aws-native:codepipeline:PipelineTriggerDeclaration"},"type":"array"},"variables":{"description":"A list that defines the pipeline variables for a pipeline resource. Variable names can have alphanumeric and underscore characters, and the values must match [A-Za-z0-9@\\-_]+.","items":{"$ref":"#/types/aws-native:codepipeline:PipelineVariableDeclaration"},"type":"array"},"version":{"description":"The version of the pipeline.","type":"string"}}}},"aws-native:codepipeline:getWebhook":{"description":"Resource Type definition for AWS::CodePipeline::Webhook","inputs":{"properties":{"id":{"type":"string","description":"logical id of the webhook"}},"required":["id"]},"outputs":{"properties":{"authentication":{"$ref":"#/types/aws-native:codepipeline:WebhookAuthentication","description":"Supported options are GITHUB_HMAC, IP, and UNAUTHENTICATED."},"authenticationConfiguration":{"$ref":"#/types/aws-native:codepipeline:WebhookAuthConfiguration","description":"Properties that configure the authentication applied to incoming webhook trigger requests"},"filters":{"description":"A list of rules applied to the body/payload sent in the POST request to a webhook URL","items":{"$ref":"#/types/aws-native:codepipeline:WebhookFilterRule"},"type":"array"},"id":{"description":"logical id of the webhook","type":"string"},"targetAction":{"description":"The name of the action in a pipeline you want to connect to the webhook.","type":"string"},"targetPipeline":{"description":"The name of the pipeline you want to connect to the webhook.","type":"string"},"url":{"description":"The webhook URL generated by AWS CodePipeline","type":"string"}}}},"aws-native:codestarconnections:getConnection":{"description":"Schema for AWS::CodeStarConnections::Connection resource which can be used to connect external source providers with AWS CodePipeline","inputs":{"properties":{"connectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the  connection. The ARN is used as the connection reference when the connection is shared between AWS services."}},"required":["connectionArn"]},"outputs":{"properties":{"connectionArn":{"description":"The Amazon Resource Name (ARN) of the  connection. The ARN is used as the connection reference when the connection is shared between AWS services.","type":"string"},"connectionStatus":{"description":"The current status of the connection.","type":"string"},"ownerAccountId":{"description":"The name of the external provider where your third-party code repository is configured. For Bitbucket, this is the account ID of the owner of the Bitbucket repository.","type":"string"},"tags":{"description":"Specifies the tags applied to a connection.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codestarconnections:getRepositoryLink":{"description":"Schema for AWS::CodeStarConnections::RepositoryLink resource which is used to aggregate repository metadata relevant to synchronizing source provider content to AWS Resources.","inputs":{"properties":{"repositoryLinkArn":{"type":"string","description":"A unique Amazon Resource Name (ARN) to designate the repository link."}},"required":["repositoryLinkArn"]},"outputs":{"properties":{"connectionArn":{"description":"The Amazon Resource Name (ARN) of the CodeStarConnection. The ARN is used as the connection reference when the connection is shared between AWS services.","type":"string"},"encryptionKeyArn":{"description":"The ARN of the KMS key that the customer can optionally specify to use to encrypt RepositoryLink properties. If not specified, a default key will be used.","type":"string"},"providerType":{"$ref":"#/types/aws-native:codestarconnections:RepositoryLinkProviderType","description":"The name of the external provider where your third-party code repository is configured."},"repositoryLinkArn":{"description":"A unique Amazon Resource Name (ARN) to designate the repository link.","type":"string"},"repositoryLinkId":{"description":"A UUID that uniquely identifies the RepositoryLink.","type":"string"},"tags":{"description":"Specifies the tags applied to a RepositoryLink.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:codestarconnections:getSyncConfiguration":{"description":"Schema for AWS::CodeStarConnections::SyncConfiguration resource which is used to enables an AWS resource to be synchronized from a source-provider.","inputs":{"properties":{"resourceName":{"type":"string","description":"The name of the resource that is being synchronized to the repository."},"syncType":{"type":"string","description":"The type of resource synchronization service that is to be configured, for example, CFN_STACK_SYNC."}},"required":["resourceName","syncType"]},"outputs":{"properties":{"branch":{"description":"The name of the branch of the repository from which resources are to be synchronized,","type":"string"},"configFile":{"description":"The source provider repository path of the sync configuration file of the respective SyncType.","type":"string"},"ownerId":{"description":"the ID of the entity that owns the repository.","type":"string"},"providerType":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationProviderType","description":"The name of the external provider where your third-party code repository is configured."},"publishDeploymentStatus":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationPublishDeploymentStatus","description":"Whether to enable or disable publishing of deployment status to source providers."},"repositoryLinkId":{"description":"A UUID that uniquely identifies the RepositoryLink that the SyncConfig is associated with.","type":"string"},"repositoryName":{"description":"The name of the repository that is being synced to.","type":"string"},"roleArn":{"description":"The IAM Role that allows AWS to update CloudFormation stacks based on content in the specified repository.","type":"string"},"triggerResourceUpdateOn":{"$ref":"#/types/aws-native:codestarconnections:SyncConfigurationTriggerResourceUpdateOn","description":"When to trigger Git sync to begin the stack update."}}}},"aws-native:codestarnotifications:getNotificationRule":{"description":"Resource Type definition for AWS::CodeStarNotifications::NotificationRule","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the notification rule."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the notification rule.","type":"string"},"createdBy":{"description":"The name or email alias of the person who created the notification rule.","type":"string"},"detailType":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleDetailType","description":"The level of detail to include in the notifications for this resource. `BASIC` will include only the contents of the event as it would appear in Amazon CloudWatch. `FULL` will include any supplemental information provided by AWS CodeStar Notifications and/or the service for the resource for which the notification is created."},"eventTypeIds":{"description":"A list of event types associated with this notification rule. For a complete list of event types and IDs, see [Notification concepts](https://docs.aws.amazon.com/dtconsole/latest/userguide/concepts.html#concepts-api) in the *Developer Tools Console User Guide* .","items":{"type":"string"},"type":"array"},"name":{"description":"The name for the notification rule. Notification rule names must be unique in your AWS account .","type":"string"},"status":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleStatus","description":"The status of the notification rule. The default value is `ENABLED` . If the status is set to `DISABLED` , notifications aren't sent for the notification rule."},"tags":{"additionalProperties":{"type":"string"},"description":"A list of tags to apply to this notification rule. Key names cannot start with \" `aws` \".","type":"object"},"targets":{"description":"A list of Amazon Resource Names (ARNs) of Amazon  topics and  clients to associate with the notification rule.","items":{"$ref":"#/types/aws-native:codestarnotifications:NotificationRuleTarget"},"type":"array"}}}},"aws-native:cognito:getIdentityPool":{"description":"Resource Type definition for AWS::Cognito::IdentityPool","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"allowClassicFlow":{"description":"Enables the Basic (Classic) authentication flow.","type":"boolean"},"allowUnauthenticatedIdentities":{"description":"Specifies whether the identity pool supports unauthenticated logins.","type":"boolean"},"cognitoIdentityProviders":{"description":"The Amazon Cognito user pools and their client IDs.","items":{"$ref":"#/types/aws-native:cognito:IdentityPoolCognitoIdentityProvider"},"type":"array"},"developerProviderName":{"description":"The \"domain\" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).\n\n*Minimum length* : 1\n\n*Maximum length* : 100","type":"string"},"id":{"type":"string"},"identityPoolName":{"description":"The name of your Amazon Cognito identity pool.\n\n*Minimum length* : 1\n\n*Maximum length* : 128\n\n*Pattern* : `[\\w\\s+=,.@-]+`","type":"string"},"identityPoolTags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"name":{"description":"The name of the Amazon Cognito identity pool, returned as a string.","type":"string"},"openIdConnectProviderArns":{"description":"The Amazon Resource Names (ARNs) of the OpenID connect providers.","items":{"type":"string"},"type":"array"},"samlProviderArns":{"description":"The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.","items":{"type":"string"},"type":"array"},"supportedLoginProviders":{"$ref":"pulumi.json#/Any","description":"Key-value pairs that map provider names to provider app IDs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property."}}}},"aws-native:cognito:getIdentityPoolPrincipalTag":{"description":"Resource Type definition for AWS::Cognito::IdentityPoolPrincipalTag","inputs":{"properties":{"identityPoolId":{"type":"string","description":"The identity pool that you want to associate with this principal tag map."},"identityProviderName":{"type":"string","description":"The identity pool identity provider (IdP) that you want to associate with this principal tag map."}},"required":["identityPoolId","identityProviderName"]},"outputs":{"properties":{"principalTags":{"$ref":"pulumi.json#/Any","description":"A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property."},"useDefaults":{"description":"Use a default set of mappings between claims and tags for this provider, instead of a custom map.","type":"boolean"}}}},"aws-native:cognito:getIdentityPoolRoleAttachment":{"description":"Resource Type definition for AWS::Cognito::IdentityPoolRoleAttachment","inputs":{"properties":{"id":{"type":"string","description":"The resource ID."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The resource ID.","type":"string"},"roleMappings":{"additionalProperties":{"$ref":"#/types/aws-native:cognito:IdentityPoolRoleAttachmentRoleMapping"},"description":"How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .\n\nIf the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.\n\nFor more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .","type":"object"},"roles":{"additionalProperties":{"type":"string"},"description":"The map of the roles associated with this pool. For a given role, the key is either \"authenticated\" or \"unauthenticated\". The value is the role ARN.","type":"object"}}}},"aws-native:cognito:getLogDeliveryConfiguration":{"description":"Resource Type definition for AWS::Cognito::LogDeliveryConfiguration","inputs":{"properties":{"id":{"type":"string","description":"A user pool ID, for example `us-east-1_EXAMPLE` ."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"A user pool ID, for example `us-east-1_EXAMPLE` .","type":"string"},"logConfigurations":{"description":"A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.","items":{"$ref":"#/types/aws-native:cognito:LogDeliveryConfigurationLogConfiguration"},"type":"array"}}}},"aws-native:cognito:getManagedLoginBranding":{"description":"Resource Type definition for AWS::Cognito::ManagedLoginBranding","inputs":{"properties":{"managedLoginBrandingId":{"type":"string","description":"The ID of the managed login branding style."},"userPoolId":{"type":"string","description":"The user pool where the branding style is assigned."}},"required":["userPoolId","managedLoginBrandingId"]},"outputs":{"properties":{"assets":{"description":"An array of image files that you want to apply to roles like backgrounds, logos, and icons. Each object must also indicate whether it is for dark mode, light mode, or browser-adaptive mode.","items":{"$ref":"#/types/aws-native:cognito:ManagedLoginBrandingAssetType"},"type":"array"},"managedLoginBrandingId":{"description":"The ID of the managed login branding style.","type":"string"},"settings":{"$ref":"pulumi.json#/Any","description":"A JSON file, encoded as a `Document` type, with the the settings that you want to apply to your style.\n\nThe following components are not currently implemented and reserved for future use:\n\n- `signUp`\n- `instructions`\n- `sessionTimerDisplay`\n- `languageSelector` (for localization, see [Managed login localization)](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html#managed-login-localization)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::ManagedLoginBranding` for more information about the expected schema for this property."},"useCognitoProvidedValues":{"description":"When true, applies the default branding style options. This option reverts to default style options that are managed by Amazon Cognito. You can modify them later in the branding editor.\n\nWhen you specify `true` for this option, you must also omit values for `Settings` and `Assets` in the request.","type":"boolean"}}}},"aws-native:cognito:getTerms":{"description":"Resource Type definition for AWS::Cognito::Terms","inputs":{"properties":{"termsId":{"type":"string","description":"The ID of the terms documents."},"userPoolId":{"type":"string","description":"The ID of the user pool that contains the terms documents."}},"required":["userPoolId","termsId"]},"outputs":{"properties":{"enforcement":{"$ref":"#/types/aws-native:cognito:TermsEnforcementType","description":"This parameter is reserved for future use and currently accepts one value."},"links":{"additionalProperties":{"type":"string"},"description":"A map of URLs to languages. For each localized language that will view the requested `TermsName` , assign a URL. A selection of `cognito:default` displays for all languages that don't have a language-specific URL.\n\nFor example, `\"cognito:default\": \"https://terms.example.com\", \"cognito:spanish\": \"https://terms.example.com/es\"` .","type":"object"},"termsId":{"description":"The ID of the terms documents.","type":"string"},"termsName":{"description":"The type and friendly name of the terms documents.","type":"string"},"termsSource":{"$ref":"#/types/aws-native:cognito:TermsSourceType","description":"This parameter is reserved for future use and currently accepts one value."}}}},"aws-native:cognito:getUserPool":{"description":"Definition of AWS::Cognito::UserPool Resource Type","inputs":{"properties":{"userPoolId":{"type":"string","description":"The ID of the user pool."}},"required":["userPoolId"]},"outputs":{"properties":{"accountRecoverySetting":{"$ref":"#/types/aws-native:cognito:UserPoolAccountRecoverySetting","description":"The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email."},"adminCreateUserConfig":{"$ref":"#/types/aws-native:cognito:UserPoolAdminCreateUserConfig","description":"The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire."},"aliasAttributes":{"description":"Attributes supported as an alias for this user pool. For more information about alias attributes, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) .","items":{"type":"string"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the user pool, such as `arn:aws:cognito-idp:us-east-1:123412341234:userpool/us-east-1_123412341` .","type":"string"},"autoVerifiedAttributes":{"description":"The attributes that you want your user pool to automatically verify. For more information, see [Verifying contact information at sign-up](https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#allowing-users-to-sign-up-and-confirm-themselves) .","items":{"type":"string"},"type":"array"},"deletionProtection":{"description":"When active, `DeletionProtection` prevents accidental deletion of your user\npool. Before you can delete a user pool that you have protected against deletion, you\nmust deactivate this feature.\n\nWhen you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request.","type":"string"},"deviceConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolDeviceConfiguration","description":"The device-remembering configuration for a user pool. Device remembering or device tracking is a \"Remember me on this device\" option for user pools that perform authentication with the device key of a trusted device in the back end, instead of a user-provided MFA code. For more information about device authentication, see [Working with user devices in your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) . A null value indicates that you have deactivated device remembering in your user pool.\n\n\u003e When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature. For more information, see [Working with devices](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html) ."},"emailAuthenticationMessage":{"type":"string"},"emailAuthenticationSubject":{"type":"string"},"emailConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolEmailConfiguration","description":"The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool."},"emailVerificationMessage":{"description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .","type":"string"},"emailVerificationSubject":{"description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .","type":"string"},"lambdaConfig":{"$ref":"#/types/aws-native:cognito:UserPoolLambdaConfig","description":"A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them."},"mfaConfiguration":{"description":"Displays the state of multi-factor authentication (MFA) as on, off, or optional. When `ON` , all users must set up MFA before they can sign in. When `OPTIONAL` , your application must make a client-side determination of whether a user wants to register an MFA device. For user pools with adaptive authentication with threat protection, choose `OPTIONAL` .\n\nWhen `MfaConfiguration` is `OPTIONAL` , managed login doesn't automatically prompt users to set up MFA. Amazon Cognito generates MFA prompts in API responses and in managed login for users who have chosen and configured a preferred MFA factor.","type":"string"},"policies":{"$ref":"#/types/aws-native:cognito:UserPoolPolicies","description":"A list of user pool policies. Contains the policy that sets password-complexity requirements."},"providerName":{"description":"A friendly name for the IdP.","type":"string"},"providerUrl":{"description":"The URL of the provider of the Amazon Cognito user pool, specified as a `String` .","type":"string"},"schema":{"description":"An array of attributes for the new user pool. You can add custom attributes and modify the properties of default attributes. The specifications in this parameter set the required attributes in your user pool. For more information, see [Working with user attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html) .","items":{"$ref":"#/types/aws-native:cognito:UserPoolSchemaAttribute"},"type":"array"},"smsAuthenticationMessage":{"description":"The contents of the SMS authentication message.","type":"string"},"smsConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolSmsConfiguration","description":"The settings for your Amazon Cognito user pool to send SMS messages with Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account . For more information see [SMS message settings](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) ."},"smsVerificationMessage":{"description":"This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .","type":"string"},"userAttributeUpdateSettings":{"$ref":"#/types/aws-native:cognito:UserPoolUserAttributeUpdateSettings","description":"The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` ,\na user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For\nmore information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) ."},"userPoolAddOns":{"$ref":"#/types/aws-native:cognito:UserPoolAddOns","description":"Contains settings for activation of threat protection, including the operating mode and additional authentication types. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to potentially unwanted traffic to your user pool, set to `ENFORCED` .\n\nFor more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . To activate this setting, your user pool must be on the [Plus tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-plus.html) ."},"userPoolId":{"description":"The ID of the user pool.","type":"string"},"userPoolName":{"description":"A friendly name for your user pool.","type":"string"},"userPoolTags":{"additionalProperties":{"type":"string"},"description":"The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.","type":"object"},"userPoolTier":{"$ref":"#/types/aws-native:cognito:UserPoolTier","description":"The user pool [feature plan](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-sign-in-feature-plans.html) , or tier. This parameter determines the eligibility of the user pool for features like managed login, access-token customization, and threat protection. Defaults to `ESSENTIALS` ."},"usernameAttributes":{"description":"Specifies whether a user can use an email address or phone number as a username when they sign up.","items":{"type":"string"},"type":"array"},"usernameConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolUsernameConfiguration","description":"Sets the case sensitivity option for sign-in usernames. When `CaseSensitive` is `false` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `false` as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.\n\nWhen `CaseSensitive` is `true` (case sensitive), Amazon Cognito interprets `USERNAME` and `UserName` as distinct users.\n\nThis configuration is immutable after you set it."},"verificationMessageTemplate":{"$ref":"#/types/aws-native:cognito:UserPoolVerificationMessageTemplate","description":"The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error."},"webAuthnRelyingPartyId":{"description":"Sets or displays the authentication domain, typically your user pool domain, that passkey providers must use as a relying party (RP) in their configuration.\n\nUnder the following conditions, the passkey relying party ID must be the fully-qualified domain name of your custom domain:\n\n- The user pool is configured for passkey authentication.\n- The user pool has a custom domain, whether or not it also has a prefix domain.\n- Your application performs authentication with managed login or the classic hosted UI.","type":"string"},"webAuthnUserVerification":{"description":"When `required` , users can only register and sign in users with passkeys that are capable of [user verification](https://docs.aws.amazon.com/https://www.w3.org/TR/webauthn-2/#enum-userVerificationRequirement) . When `preferred` , your user pool doesn't require the use of authenticators with user verification but encourages it.","type":"string"}}}},"aws-native:cognito:getUserPoolClient":{"description":"Resource Type definition for AWS::Cognito::UserPoolClient","inputs":{"properties":{"clientId":{"type":"string","description":"The ID of the app client, for example `1example23456789` ."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create an app client."}},"required":["userPoolId","clientId"]},"outputs":{"properties":{"accessTokenValidity":{"description":"The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with\ntheir access token for 10 hours.\n\nThe default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your access\ntokens are valid for one hour.","type":"integer"},"allowedOAuthFlows":{"description":"The OAuth grant types that you want your app client to generate for clients in managed login authentication. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.\n\n- **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint.\n- **implicit** - Issue the access token, and the ID token when scopes like `openid` and `profile` are requested, directly to your user.\n- **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user, authorized by a combination of the client ID and client secret.","items":{"type":"string"},"type":"array"},"allowedOAuthFlowsUserPoolClient":{"description":"Set to `true` to use OAuth 2.0 authorization server features in your app client.\n\nThis parameter must have a value of `true` before you can configure the following features in your app client.\n\n- `CallBackURLs` : Callback URLs.\n- `LogoutURLs` : Sign-out redirect URLs.\n- `AllowedOAuthScopes` : OAuth 2.0 scopes.\n- `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.\n\nTo use authorization server features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` . When `false` , only SDK-based API sign-in is permitted.","type":"boolean"},"allowedOAuthScopes":{"description":"The OAuth, OpenID Connect (OIDC), and custom scopes that you want to permit your app client to authorize access with. Scopes govern access control to user pool self-service API operations, user data from the `userInfo` endpoint, and third-party APIs. Scope values include `phone` , `email` , `openid` , and `profile` . The `aws.cognito.signin.user.admin` scope authorizes user self-service operations. Custom scopes with resource servers authorize access to external APIs.","items":{"type":"string"},"type":"array"},"analyticsConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolClientAnalyticsConfiguration","description":"The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.\n\nIn AWS Regions where Amazon Pinpoint isn't available, user pools might not have access to analytics or might be configurable with campaigns in the US East (N. Virginia) Region. For more information, see [Using Amazon Pinpoint analytics](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-pinpoint-integration.html) ."},"authSessionValidity":{"description":"Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.","type":"integer"},"callbackUrls":{"description":"A list of allowed redirect, or callback, URLs for managed login authentication. These URLs are the paths where you want to send your users' browsers after they complete authentication with managed login or a third-party IdP. Typically, callback URLs are the home of an application that uses OAuth or OIDC libraries to process authentication outcomes.\n\nA redirect URI must meet the following requirements:\n\n- Be an absolute URI.\n- Be registered with the authorization server. Amazon Cognito doesn't accept authorization requests with `redirect_uri` values that aren't in the list of `CallbackURLs` that you provide in this parameter.\n- Not include a fragment component.\n\nSee [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .\n\nAmazon Cognito requires HTTPS over HTTP except for callback URLs to `http://localhost` , `http://127.0.0.1` and `http://[::1]` . These callback URLs are for testing purposes only. You can specify custom TCP ports for your callback URLs.\n\nApp callback URLs such as `myapp://example` are also supported.","items":{"type":"string"},"type":"array"},"clientId":{"description":"The ID of the app client, for example `1example23456789` .","type":"string"},"clientName":{"description":"A friendly name for the app client that you want to create.","type":"string"},"clientSecret":{"type":"string"},"defaultRedirectUri":{"description":"The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.","type":"string"},"enablePropagateAdditionalUserContextData":{"description":"When `true` , your application can include additional `UserContextData` in authentication requests. This data includes the IP address, and contributes to analysis by threat protection features. For more information about propagation of user context data, see [Adding session data to API requests](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint) . If you don’t include this parameter, you can't send the source IP address to Amazon Cognito threat protection features. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret.","type":"boolean"},"enableTokenRevocation":{"description":"Activates or deactivates token revocation.\n\nIf you don't include this parameter, token revocation is automatically activated for the new user pool client.","type":"boolean"},"explicitAuthFlows":{"description":"The [authentication flows](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow-methods.html) that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.\n\n\u003e If you don't specify a value for `ExplicitAuthFlows` , your app client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` . \n\nThe values for authentication flow options include the following.\n\n- `ALLOW_USER_AUTH` : Enable selection-based sign-in with `USER_AUTH` . This setting covers username-password, secure remote password (SRP), passwordless, and passkey authentication. This authentiation flow can do username-password and SRP authentication without other `ExplicitAuthFlows` permitting them. For example users can complete an SRP challenge through `USER_AUTH` without the flow `USER_SRP_AUTH` being active for the app client. This flow doesn't include `CUSTOM_AUTH` .\n\nTo activate this setting, your user pool must be in the [Essentials tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-essentials.html) or higher.\n- `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password.\n- `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication.\n- `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords.\n- `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication.\n- `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.\n\nIn some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` ,\nlike `ALLOW_USER_SRP_AUTH` .","items":{"type":"string"},"type":"array"},"idTokenValidity":{"description":"The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.\n\nThe default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your ID\ntokens are valid for one hour.","type":"integer"},"logoutUrls":{"description":"A list of allowed logout URLs for managed login authentication. When you pass `logout_uri` and `client_id` parameters to `/logout` , Amazon Cognito signs out your user and redirects them to the logout URL. This parameter describes the URLs that you want to be the permitted targets of `logout_uri` . A typical use of these URLs is when a user selects \"Sign out\" and you redirect them to your public homepage. For more information, see [Logout endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/logout-endpoint.html) .","items":{"type":"string"},"type":"array"},"name":{"type":"string"},"preventUserExistenceErrors":{"description":"Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.\n\nValid values include:\n\n- `ENABLED` - This prevents user existence-related errors.\n- `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.\n\nDefaults to `LEGACY` when you don't provide a value.","type":"string"},"readAttributes":{"description":"The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information.\n\nWhen you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes.","items":{"type":"string"},"type":"array"},"refreshTokenRotation":{"$ref":"#/types/aws-native:cognito:UserPoolClientRefreshTokenRotation","description":"The configuration of your app client for refresh token rotation. When enabled, your app client issues new ID, access, and refresh tokens when users renew their sessions with refresh tokens. When disabled, token refresh issues only ID and access tokens."},"refreshTokenValidity":{"description":"The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.\n\nFor example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session\nand retrieve new access and ID tokens for 10 days.\n\nThe default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.\n\nIf you don't specify otherwise in the configuration of your app client, your refresh\ntokens are valid for 30 days.","type":"integer"},"supportedIdentityProviders":{"description":"A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .\n\nThis parameter sets the IdPs that [managed login](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managed-login.html) will display on the login page for your app client. The removal of `COGNITO` from this list doesn't prevent authentication operations for local users with the user pools API in an AWS SDK. The only way to prevent SDK-based authentication is to block access with a [AWS WAF rule](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-waf.html) .","items":{"type":"string"},"type":"array"},"tokenValidityUnits":{"$ref":"#/types/aws-native:cognito:UserPoolClientTokenValidityUnits","description":"The units that validity times are represented in. The default unit for refresh tokens is days, and the default for ID and access tokens are hours."},"writeAttributes":{"description":"The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list.\n\nWhen you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.\n\nIf your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .","items":{"type":"string"},"type":"array"}}}},"aws-native:cognito:getUserPoolDomain":{"description":"Resource Type definition for AWS::Cognito::UserPoolDomain","inputs":{"properties":{"domain":{"type":"string","description":"The name of the domain that you want to update. For custom domains, this is the fully-qualified domain name, for example `auth.example.com` . For prefix domains, this is the prefix alone, such as `myprefix` ."},"userPoolId":{"type":"string","description":"The ID of the user pool that is associated with the domain you're updating."}},"required":["userPoolId","domain"]},"outputs":{"properties":{"cloudFrontDistribution":{"description":"The Amazon CloudFront endpoint that you use as the target of the alias that you set up with your Domain Name Service (DNS) provider.","type":"string"},"customDomainConfig":{"$ref":"#/types/aws-native:cognito:UserPoolDomainCustomDomainConfigType","description":"The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.\n\nWhen you create a custom domain, the passkey RP ID defaults to the custom domain. If you had a prefix domain active, this will cause passkey integration for your prefix domain to stop working due to a mismatch in RP ID. To keep the prefix domain passkey integration working, you can explicitly set RP ID to the prefix domain."}}}},"aws-native:cognito:getUserPoolGroup":{"description":"Resource Type definition for AWS::Cognito::UserPoolGroup","inputs":{"properties":{"groupName":{"type":"string","description":"A name for the group. This name must be unique in your user pool."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a user group."}},"required":["userPoolId","groupName"]},"outputs":{"properties":{"description":{"description":"A description of the group that you're creating.","type":"string"},"precedence":{"description":"A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.\n\nTwo groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.\n\nThe default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .","type":"integer"},"roleArn":{"description":"The Amazon Resource Name (ARN) for the IAM role that you want to associate with the group. A group role primarily declares a preferred role for the credentials that you get from an identity pool. Amazon Cognito ID tokens have a `cognito:preferred_role` claim that presents the highest-precedence group that a user belongs to. Both ID and access tokens also contain a `cognito:groups` claim that list all the groups that a user is a member of.","type":"string"}}}},"aws-native:cognito:getUserPoolIdentityProvider":{"description":"Resource Type definition for AWS::Cognito::UserPoolIdentityProvider","inputs":{"properties":{"providerName":{"type":"string","description":"The name that you want to assign to the IdP. You can pass the identity provider name in the `identity_provider` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP."},"userPoolId":{"type":"string","description":"The Id of the user pool where you want to create an IdP."}},"required":["userPoolId","providerName"]},"outputs":{"properties":{"attributeMapping":{"additionalProperties":{"type":"string"},"description":"A mapping of IdP attributes to standard and custom user pool attributes. Specify a user pool attribute as the key of the key-value pair, and the IdP attribute claim name as the value.","type":"object"},"idpIdentifiers":{"description":"An array of IdP identifiers, for example `\"IdPIdentifiers\": [ \"MyIdP\", \"MyIdP2\" ]` . Identifiers are friendly names that you can pass in the `idp_identifier` query parameter of requests to the [Authorize endpoint](https://docs.aws.amazon.com/cognito/latest/developerguide/authorization-endpoint.html) to silently redirect to sign-in with the associated IdP. Identifiers in a domain format also enable the use of [email-address matching with SAML providers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-managing-saml-idp-naming.html) .","items":{"type":"string"},"type":"array"},"providerDetails":{"additionalProperties":{"type":"string"},"description":"The scopes, URLs, and identifiers for your external identity provider. The following\nexamples describe the provider detail keys for each IdP type. These values and their\nschema are subject to change. Social IdP `authorize_scopes` values must match\nthe values listed here.\n\n- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .\n\nCreate or update request: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_request_method\": \"GET\", \"attributes_url\": \"https://auth.example.com/userInfo\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"openid profile email\", \"authorize_url\": \"https://auth.example.com/authorize\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"jwks_uri\": \"https://auth.example.com/.well-known/jwks.json\", \"oidc_issuer\": \"https://auth.example.com\", \"token_url\": \"https://example.com/token\" }`\n- **SAML** - Create or update request with Metadata URL: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nCreate or update request with Metadata file: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"MetadataFile\": \"[metadata XML]\", \"RequestSigningAlgorithm\": \"rsa-sha256\" }`\n\nThe value of `MetadataFile` must be the plaintext metadata document with all quote (\") characters escaped by backslashes.\n\nDescribe response: `\"ProviderDetails\": { \"IDPInit\": \"true\", \"IDPSignout\": \"true\", \"EncryptedResponses\" : \"true\", \"ActiveEncryptionCertificate\": \"[certificate]\", \"MetadataURL\": \"https://auth.example.com/sso/saml/metadata\", \"RequestSigningAlgorithm\": \"rsa-sha256\", \"SLORedirectBindingURI\": \"https://auth.example.com/slo/saml\", \"SSORedirectBindingURI\": \"https://auth.example.com/sso/saml\" }`\n- **LoginWithAmazon** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"profile postal_code\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\"`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://api.amazon.com/user/profile\", \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"profile postal_code\", \"authorize_url\": \"https://www.amazon.com/ap/oa\", \"client_id\": \"amzn1.application-oa2-client.1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"POST\", \"token_url\": \"https://api.amazon.com/auth/o2/token\" }`\n- **Google** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email profile openid\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url\": \"https://people.googleapis.com/v1/people/me?personFields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"email profile openid\", \"authorize_url\": \"https://accounts.google.com/o/oauth2/v2/auth\", \"client_id\": \"1example23456789.apps.googleusercontent.com\", \"client_secret\": \"provider-app-client-secret\", \"oidc_issuer\": \"https://accounts.google.com\", \"token_request_method\": \"POST\", \"token_url\": \"https://www.googleapis.com/oauth2/v4/token\" }`\n- **SignInWithApple** - Create or update request: `\"ProviderDetails\": { \"authorize_scopes\": \"email name\", \"client_id\": \"com.example.cognito\", \"private_key\": \"1EXAMPLE\", \"key_id\": \"2EXAMPLE\", \"team_id\": \"3EXAMPLE\" }`\n\nDescribe response: `\"ProviderDetails\": { \"attributes_url_add_attributes\": \"false\", \"authorize_scopes\": \"email name\", \"authorize_url\": \"https://appleid.apple.com/auth/authorize\", \"client_id\": \"com.example.cognito\", \"key_id\": \"1EXAMPLE\", \"oidc_issuer\": \"https://appleid.apple.com\", \"team_id\": \"2EXAMPLE\", \"token_request_method\": \"POST\", \"token_url\": \"https://appleid.apple.com/auth/token\" }`\n- **Facebook** - Create or update request: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"authorize_scopes\": \"public_profile, email\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\" }`\n\nDescribe response: `\"ProviderDetails\": { \"api_version\": \"v17.0\", \"attributes_url\": \"https://graph.facebook.com/v17.0/me?fields=\", \"attributes_url_add_attributes\": \"true\", \"authorize_scopes\": \"public_profile, email\", \"authorize_url\": \"https://www.facebook.com/v17.0/dialog/oauth\", \"client_id\": \"1example23456789\", \"client_secret\": \"provider-app-client-secret\", \"token_request_method\": \"GET\", \"token_url\": \"https://graph.facebook.com/v17.0/oauth/access_token\" }`","type":"object"}}}},"aws-native:cognito:getUserPoolResourceServer":{"description":"Resource Type definition for AWS::Cognito::UserPoolResourceServer","inputs":{"properties":{"identifier":{"type":"string","description":"A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.\n\nAmazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to create a resource server."}},"required":["userPoolId","identifier"]},"outputs":{"properties":{"name":{"description":"A friendly name for the resource server.","type":"string"},"scopes":{"description":"A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` .","items":{"$ref":"#/types/aws-native:cognito:UserPoolResourceServerResourceServerScopeType"},"type":"array"}}}},"aws-native:cognito:getUserPoolRiskConfigurationAttachment":{"description":"Resource Type definition for AWS::Cognito::UserPoolRiskConfigurationAttachment","inputs":{"properties":{"clientId":{"type":"string","description":"The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings."},"userPoolId":{"type":"string","description":"The ID of the user pool that has the risk configuration applied."}},"required":["userPoolId","clientId"]},"outputs":{"properties":{"accountTakeoverRiskConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType","description":"The settings for automated responses and notification templates for adaptive authentication with threat protection."},"compromisedCredentialsRiskConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType","description":"Settings for compromised-credentials actions and authentication types with threat protection in full-function `ENFORCED` mode."},"riskExceptionConfiguration":{"$ref":"#/types/aws-native:cognito:UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType","description":"Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges."}}}},"aws-native:cognito:getUserPoolUiCustomizationAttachment":{"description":"Resource Type definition for AWS::Cognito::UserPoolUICustomizationAttachment","inputs":{"properties":{"clientId":{"type":"string","description":"The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings.."},"userPoolId":{"type":"string","description":"The ID of the user pool where you want to apply branding to the classic hosted UI."}},"required":["userPoolId","clientId"]},"outputs":{"properties":{"css":{"description":"A plaintext CSS file that contains the custom fields that you want to apply to your user pool or app client. To download a template, go to the Amazon Cognito console. Navigate to your user pool *App clients* tab, select *Login pages* , edit *Hosted UI (classic) style* , and select the link to `CSS template.css` .","type":"string"}}}},"aws-native:comprehend:getDocumentClassifier":{"description":"Document Classifier enables training document classifier models.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the document classifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the document classifier.","type":"string"},"modelPolicy":{"description":"The resource-based policy to attach to your custom document classifier model. You can use this policy to allow another AWS account to import your custom model.\n\nProvide your policy as a JSON body that you enter as a UTF-8 encoded string without line breaks. To provide valid JSON, enclose the attribute names and values in double quotes. If the JSON body is also enclosed in double quotes, then you must escape the double quotes that are inside the policy:\n\n`\"{\\\"attribute\\\": \\\"value\\\", \\\"attribute\\\": [\\\"value\\\"]}\"`\n\nTo avoid escaping quotes, you can use single quotes to enclose the policy and double quotes to enclose the JSON names and values:\n\n`'{\"attribute\": \"value\", \"attribute\": [\"value\"]}'`","type":"string"},"tags":{"description":"Tags to associate with the document classifier. A tag is a key-value pair that adds as a metadata to a resource used by Amazon Comprehend. For example, a tag with \"Sales\" as the key might be added to a resource to indicate its use by the sales department.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:comprehend:getFlywheel":{"description":"The AWS::Comprehend::Flywheel resource creates an Amazon Comprehend Flywheel that enables customer to train their model.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the flywheel."}},"required":["arn"]},"outputs":{"properties":{"activeModelArn":{"description":"The Amazon Resource Number (ARN) of the active model version.","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the flywheel.","type":"string"},"dataAccessRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend permission to access the flywheel data.","type":"string"},"dataSecurityConfig":{"$ref":"#/types/aws-native:comprehend:FlywheelDataSecurityConfig","description":"Data security configuration."},"tags":{"description":"Tags associated with the endpoint being created. A tag is a key-value pair that adds metadata to the endpoint. For example, a tag with \"Sales\" as the key might be added to an endpoint to indicate its use by the sales department.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:computeoptimizer:getAutomationRule":{"description":"Creates an AWS Compute Optimizer automation rule that automatically implements recommended actions based on your defined criteria and schedule. Automation rules are global resources that manage automated actions across all AWS Regions where Compute Optimizer Automation is available. Organization-level rules can only be created by the management account or delegated administrator.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the automation rule."}},"required":["ruleArn"]},"outputs":{"properties":{"accountId":{"description":"The AWS account ID that owns the automation rule.","type":"string"},"createdTimestamp":{"description":"The timestamp when the automation rule was created.","type":"string"},"criteria":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleCriteria","description":"Filter criteria that specify which recommended actions qualify for implementation."},"description":{"description":"The description of the automation rule.","type":"string"},"lastUpdatedTimestamp":{"description":"The timestamp when the automation rule was last updated.","type":"string"},"name":{"description":"The name of the automation rule.","type":"string"},"organizationConfiguration":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleOrganizationConfiguration","description":"Organization configuration for organization rules, including rule apply order and account scope."},"priority":{"description":"Rule priority within its group","type":"string"},"recommendedActionTypes":{"description":"The types of recommended actions this rule will implement.","items":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleRecommendedActionTypesItem"},"type":"array"},"ruleArn":{"description":"The Amazon Resource Name (ARN) of the automation rule.","type":"string"},"ruleId":{"description":"The unique identifier of the automation rule.","type":"string"},"ruleRevision":{"description":"The revision number of the automation rule.","type":"string"},"ruleType":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleRuleType","description":"The type of automation rule."},"schedule":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleSchedule","description":"The schedule configuration for when the rule runs."},"status":{"$ref":"#/types/aws-native:computeoptimizer:AutomationRuleStatus","description":"The status of the automation rule."},"tags":{"description":"Tags associated with the automation rule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:configuration:getAggregationAuthorization":{"description":"Resource Type definition for AWS::Config::AggregationAuthorization","inputs":{"properties":{"authorizedAccountId":{"type":"string","description":"The 12-digit account ID of the account authorized to aggregate data."},"authorizedAwsRegion":{"type":"string","description":"The region authorized to collect aggregated data."}},"required":["authorizedAccountId","authorizedAwsRegion"]},"outputs":{"properties":{"aggregationAuthorizationArn":{"description":"The ARN of the AggregationAuthorization.","type":"string"},"tags":{"description":"The tags for the AggregationAuthorization.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:configuration:getConfigRule":{"description":"You must first create and start the CC configuration recorder in order to create CC managed rules with CFNlong. For more information, see [Managing the Configuration Recorder](https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html).\n  Adds or updates an CC rule to evaluate if your AWS resources comply with your desired configurations. For information on how many CC rules you can have per account, see [Service Limits](https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html) in the *Developer Guide*.\n There are two types of rules: *Managed Rules* and *Custom Rules*. You can use the ``ConfigRule`` resource to create both CC Managed Rules and CC Custom Rules.\n  CC Managed Rules are predefined, customizable rules created by CC. For a list of managed rules, see [List of Managed Rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an CC managed rule, you must specify the rule's identifier for the ``SourceIdentifier`` key.\n  CC Custom Rules are rules that you create from scratch. There are two ways to create CC custom rules: with Lambda functions ([Developer Guide](https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with CFNGUARDshort ([Guard GitHub Repository](https://docs.aws.amazon.com/https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. CC custom rules created with LAMlong are called *Custom Lambda Rules* and CC custom rules created with CFNGUARDshort are called *Custom Policy Rules*.\n If you are adding a new CC Custom LAM rule, you first need to create an LAMlong function that the rule invokes to evaluate your resources. When you use the ``ConfigRule`` resource to add a Custom LAM rule to CC, you must specify the Amazon Resource Name (ARN) that LAMlong assigns to the function. You specify the ARN in the ``SourceIdentifier`` key. This key is part of the ``Source`` object, which is part of the ``ConfigRule`` object. \n For any new CC rule that you add, specify the ``ConfigRuleName`` in the ``ConfigRule`` object. Do not specify the ``ConfigRuleArn`` or the ``ConfigRuleId``. These values are generated by CC for new rules.\n If you are updating a rule that you added previously, you can specify the rule by ``ConfigRuleName``, ``ConfigRuleId``, or ``ConfigRuleArn`` in the ``ConfigRule`` data type that you use in this request.\n For more information about developing and using CC rules, see [Evaluating Resources with Rules](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html) in the *Developer Guide*.","inputs":{"properties":{"configRuleName":{"type":"string","description":"A name for the CC rule. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the rule name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html)."}},"required":["configRuleName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the AWS Config rule, such as `arn:aws:config:us-east-1:123456789012:config-rule/config-rule-a1bzhi` .","type":"string"},"compliance":{"$ref":"#/types/aws-native:configuration:ComplianceProperties","description":"Indicates whether an AWS resource or CC rule is compliant and provides the number of contributors that affect the compliance."},"configRuleId":{"description":"The ID of the AWS Config rule, such as `config-rule-a1bzhi` .","type":"string"},"description":{"description":"The description that you provide for the CC rule.","type":"string"},"evaluationModes":{"description":"The modes the CC rule can be evaluated in. The valid values are distinct objects. By default, the value is Detective evaluation mode only.","items":{"$ref":"#/types/aws-native:configuration:ConfigRuleEvaluationModeConfiguration"},"type":"array"},"inputParameters":{"$ref":"pulumi.json#/Any","description":"A string, in JSON format, that is passed to the CC rule Lambda function.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Config::ConfigRule` for more information about the expected schema for this property."},"maximumExecutionFrequency":{"description":"The maximum frequency with which CC runs evaluations for a rule. You can specify a value for ``MaximumExecutionFrequency`` when:\n  +  You are using an AWS managed rule that is triggered at a periodic frequency.\n  +  Your custom rule is triggered when CC delivers the configuration snapshot. For more information, see [ConfigSnapshotDeliveryProperties](https://docs.aws.amazon.com/config/latest/APIReference/API_ConfigSnapshotDeliveryProperties.html).\n  \n  By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the ``MaximumExecutionFrequency`` parameter.","type":"string"},"scope":{"$ref":"#/types/aws-native:configuration:ConfigRuleScope","description":"Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.\n  The scope can be empty."},"source":{"$ref":"#/types/aws-native:configuration:ConfigRuleSource","description":"Provides the rule owner (```` for managed rules, ``CUSTOM_POLICY`` for Custom Policy rules, and ``CUSTOM_LAMBDA`` for Custom Lambda rules), the rule identifier, and the notifications that cause the function to evaluate your AWS resources."}}}},"aws-native:configuration:getConfigurationAggregator":{"description":"Resource Type definition for AWS::Config::ConfigurationAggregator","inputs":{"properties":{"configurationAggregatorName":{"type":"string","description":"The name of the aggregator."}},"required":["configurationAggregatorName"]},"outputs":{"properties":{"accountAggregationSources":{"description":"Provides a list of source accounts and regions to be aggregated.","items":{"$ref":"#/types/aws-native:configuration:ConfigurationAggregatorAccountAggregationSource"},"type":"array"},"configurationAggregatorArn":{"description":"The Amazon Resource Name (ARN) of the aggregator.","type":"string"},"organizationAggregationSource":{"$ref":"#/types/aws-native:configuration:ConfigurationAggregatorOrganizationAggregationSource","description":"Provides an organization and list of regions to be aggregated."},"tags":{"description":"The tags for the configuration aggregator.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:configuration:getConformancePack":{"description":"A conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed as a single entity in an account and a region or across an entire AWS Organization.","inputs":{"properties":{"conformancePackName":{"type":"string","description":"Name of the conformance pack which will be assigned as the unique identifier."}},"required":["conformancePackName"]},"outputs":{"properties":{"conformancePackInputParameters":{"description":"A list of ConformancePackInputParameter objects.","items":{"$ref":"#/types/aws-native:configuration:ConformancePackInputParameter"},"type":"array"},"deliveryS3Bucket":{"description":"AWS Config stores intermediate files while processing conformance pack template.","type":"string"},"deliveryS3KeyPrefix":{"description":"The prefix for delivery S3 bucket.","type":"string"}}}},"aws-native:configuration:getOrganizationConformancePack":{"description":"Resource Type definition for AWS::Config::OrganizationConformancePack.","inputs":{"properties":{"organizationConformancePackName":{"type":"string","description":"The name of the organization conformance pack."}},"required":["organizationConformancePackName"]},"outputs":{"properties":{"conformancePackInputParameters":{"description":"A list of ConformancePackInputParameter objects.","items":{"$ref":"#/types/aws-native:configuration:OrganizationConformancePackConformancePackInputParameter"},"type":"array"},"deliveryS3Bucket":{"description":"AWS Config stores intermediate files while processing conformance pack template.","type":"string"},"deliveryS3KeyPrefix":{"description":"The prefix for the delivery S3 bucket.","type":"string"},"excludedAccounts":{"description":"A list of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack.","items":{"type":"string"},"type":"array"}}}},"aws-native:configuration:getStoredQuery":{"description":"Resource Type definition for AWS::Config::StoredQuery","inputs":{"properties":{"queryName":{"type":"string","description":"The name of the query."}},"required":["queryName"]},"outputs":{"properties":{"queryArn":{"description":"Amazon Resource Name (ARN) of the query. For example, arn:partition:service:region:account-id:resource-type/resource-name/resource-id.","type":"string"},"queryDescription":{"description":"A unique description for the query.","type":"string"},"queryExpression":{"description":"The expression of the query. For example, `SELECT resourceId, resourceType, supplementaryConfiguration.BucketVersioningConfiguration.status WHERE resourceType = 'AWS::S3::Bucket' AND supplementaryConfiguration.BucketVersioningConfiguration.status = 'Off'.`","type":"string"},"queryId":{"description":"The ID of the query.","type":"string"},"tags":{"description":"The tags for the stored query.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getAgentStatus":{"description":"Resource Type definition for AWS::Connect::AgentStatus","inputs":{"properties":{"agentStatusArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the agent status."}},"required":["agentStatusArn"]},"outputs":{"properties":{"agentStatusArn":{"description":"The Amazon Resource Name (ARN) of the agent status.","type":"string"},"description":{"description":"The description of the status.","type":"string"},"displayOrder":{"description":"The display order of the status.","type":"integer"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"lastModifiedRegion":{"description":"Last modified region.","type":"string"},"lastModifiedTime":{"description":"Last modified time.","type":"number"},"name":{"description":"The name of the status.","type":"string"},"resetOrderNumber":{"description":"A number indicating the reset order of the agent status.","type":"boolean"},"state":{"$ref":"#/types/aws-native:connect:AgentStatusState","description":"The state of the status."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:connect:AgentStatusType","description":"The type of agent status."}}}},"aws-native:connect:getContactFlow":{"description":"Resource Type definition for AWS::Connect::ContactFlow","inputs":{"properties":{"contactFlowArn":{"type":"string","description":"The identifier of the contact flow (ARN)."}},"required":["contactFlowArn"]},"outputs":{"properties":{"contactFlowArn":{"description":"The identifier of the contact flow (ARN).","type":"string"},"content":{"description":"The content of the contact flow in JSON format.","type":"string"},"description":{"description":"The description of the contact flow.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance (ARN).","type":"string"},"name":{"description":"The name of the contact flow.","type":"string"},"state":{"$ref":"#/types/aws-native:connect:ContactFlowState","description":"The state of the contact flow."},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getContactFlowModule":{"description":"Resource Type definition for AWS::Connect::ContactFlowModule.","inputs":{"properties":{"contactFlowModuleArn":{"type":"string","description":"The identifier of the contact flow module (ARN)."}},"required":["contactFlowModuleArn"]},"outputs":{"properties":{"contactFlowModuleArn":{"description":"The identifier of the contact flow module (ARN).","type":"string"},"content":{"description":"The content of the contact flow module in JSON format.","type":"string"},"description":{"description":"The description of the contact flow module.","type":"string"},"externalInvocationConfiguration":{"$ref":"#/types/aws-native:connect:ExternalInvocationConfigurationProperties","description":"Defines the external invocation configuration of the flow module resource"},"instanceArn":{"description":"The identifier of the Amazon Connect instance (ARN).","type":"string"},"name":{"description":"The name of the contact flow module.","type":"string"},"settings":{"description":"The schema of the settings for contact flow module in JSON Schema V4 format.","type":"string"},"state":{"description":"The state of the contact flow module.","type":"string"},"status":{"description":"The status of the contact flow module.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getContactFlowModuleAlias":{"description":"Resource Type definition for ContactFlowModuleAlias","inputs":{"properties":{"contactFlowModuleAliasArn":{"type":"string","description":"The identifier of the contact flow module alias (ARN). This is constructed from the ContactFlowModuleArn and AliasId."}},"required":["contactFlowModuleAliasArn"]},"outputs":{"properties":{"aliasId":{"description":"The unique identifier of the alias.","type":"string"},"contactFlowModuleAliasArn":{"description":"The identifier of the contact flow module alias (ARN). This is constructed from the ContactFlowModuleArn and AliasId.","type":"string"},"contactFlowModuleVersion":{"description":"The version number of the contact flow module this alias points to.","type":"integer"},"description":{"description":"The description of the alias.","type":"string"},"name":{"description":"The name of the alias.","type":"string"}}}},"aws-native:connect:getContactFlowModuleVersion":{"description":"Resource Type definition for ContactFlowModuleVersion","inputs":{"properties":{"contactFlowModuleVersionArn":{"type":"string","description":"The identifier of the contact flow module version (ARN)."}},"required":["contactFlowModuleVersionArn"]},"outputs":{"properties":{"contactFlowModuleVersionArn":{"description":"The identifier of the contact flow module version (ARN).","type":"string"},"flowModuleContentSha256":{"description":"Indicates the checksum value of the latest published flow module content","type":"string"},"version":{"description":"The version number of this revision","type":"integer"}}}},"aws-native:connect:getContactFlowVersion":{"description":"Resource Type Definition for ContactFlowVersion","inputs":{"properties":{"contactFlowVersionArn":{"type":"string","description":"The identifier of the contact flow version (ARN)."}},"required":["contactFlowVersionArn"]},"outputs":{"properties":{"contactFlowVersionArn":{"description":"The identifier of the contact flow version (ARN).","type":"string"},"flowContentSha256":{"description":"Indicates the checksum value of the latest published flow content","type":"string"},"version":{"description":"The version number of this revision","type":"integer"}}}},"aws-native:connect:getDataTable":{"description":"Resource Type definition for AWS::Connect::DataTable","inputs":{"properties":{"arn":{"type":"string","description":"The arn of the Data Table"},"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."}},"required":["instanceArn","arn"]},"outputs":{"properties":{"arn":{"description":"The arn of the Data Table","type":"string"},"createdTime":{"description":"The creation time of the Data Table","type":"number"},"description":{"description":"The description of the Data Table.","type":"string"},"lastModifiedRegion":{"description":"Last modified region.","type":"string"},"lastModifiedTime":{"description":"Last modified time.","type":"number"},"lockVersion":{"$ref":"#/types/aws-native:connect:LockVersionProperties","description":"The lock version of the Data Table"},"name":{"description":"The name of the Data Table","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeZone":{"description":"The time zone of the Data Table","type":"string"},"valueLockLevel":{"$ref":"#/types/aws-native:connect:DataTableValueLockLevel","description":"The value lock level of the Data Table"}}}},"aws-native:connect:getDataTableAttribute":{"description":"Resource Type definition for AWS::Connect::DataTableAttribute","inputs":{"properties":{"attributeId":{"type":"string","description":"The unique identifier for the attribute within the data table."},"dataTableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the data table that contains this attribute."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."}},"required":["instanceArn","dataTableArn","attributeId"]},"outputs":{"properties":{"attributeId":{"description":"The unique identifier for the attribute within the data table.","type":"string"},"description":{"description":"An optional description explaining the purpose and usage of this attribute.","type":"string"},"lastModifiedRegion":{"description":"The AWS Region where this attribute was last modified, used for region replication.","type":"string"},"lastModifiedTime":{"description":"The timestamp when this attribute was last modified.","type":"number"},"lockVersion":{"$ref":"#/types/aws-native:connect:LockVersionProperties"},"name":{"description":"The human-readable name of the attribute. Must be unique within the data table and conform to Connect naming standards.","type":"string"},"primary":{"description":"Boolean indicating whether this attribute is used as a primary key for record identification. Primary attributes must have unique value combinations and cannot contain expressions.","type":"boolean"},"validation":{"$ref":"#/types/aws-native:connect:ValidationProperties","description":"The validation rules applied to values of this attribute. Based on JSON Schema Draft 2020-12 with additional Connect-specific validations for data integrity."},"valueType":{"$ref":"#/types/aws-native:connect:DataTableAttributeValueType","description":"The type of value allowed for this attribute. Must be one of TEXT, TEXT_LIST, NUMBER, NUMBER_LIST, or BOOLEAN. Determines how values are validated and processed."}}}},"aws-native:connect:getDataTableRecord":{"description":"Resource Type definition for AWS::Connect::DataTableRecord","inputs":{"properties":{"dataTableArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the data table. Does not include version aliases."},"instanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance."},"recordId":{"type":"string"}},"required":["instanceArn","dataTableArn","recordId"]},"outputs":{"properties":{"dataTableRecord":{"$ref":"#/types/aws-native:connect:DataTableRecordProperties","language":{"csharp":{"name":"DataTableRecordValue"}}},"recordId":{"type":"string"}}}},"aws-native:connect:getEmailAddress":{"description":"Resource Type definition for AWS::Connect::EmailAddress","inputs":{"properties":{"emailAddressArn":{"type":"string","description":"The identifier of the email address."}},"required":["emailAddressArn"]},"outputs":{"properties":{"aliasConfigurations":{"description":"List of alias configurations for the email address","items":{"$ref":"#/types/aws-native:connect:EmailAddressAliasConfiguration"},"type":"array"},"description":{"description":"A description for the email address.","type":"string"},"displayName":{"description":"The display name for the email address.","type":"string"},"emailAddressArn":{"description":"The identifier of the email address.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getEvaluationForm":{"description":"Creates an evaluation form for the specified CON instance.","inputs":{"properties":{"evaluationFormArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the evaluation form."}},"required":["evaluationFormArn"]},"outputs":{"properties":{"autoEvaluationConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormAutoEvaluationConfiguration","description":"The automatic evaluation configuration of an evaluation form."},"description":{"description":"The description of the evaluation form.\n *Length Constraints*: Minimum length of 0. Maximum length of 1024.","type":"string"},"evaluationFormArn":{"description":"The Amazon Resource Name (ARN) of the evaluation form.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"items":{"description":"Items that are part of the evaluation form. The total number of sections and questions must not exceed 100 each. Questions must be contained in a section.\n *Minimum size*: 1\n *Maximum size*: 100","items":{"$ref":"#/types/aws-native:connect:EvaluationFormBaseItem"},"type":"array"},"languageConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormLanguageConfiguration","description":"Configuration for language settings of this evaluation form."},"reviewConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormEvaluationReviewConfiguration","description":"Configuration for evaluation review settings of this evaluation form."},"scoringStrategy":{"$ref":"#/types/aws-native:connect:EvaluationFormScoringStrategy","description":"A scoring strategy of the evaluation form."},"status":{"$ref":"#/types/aws-native:connect:EvaluationFormStatus","description":"The status of the evaluation form.\n *Allowed values*: ``DRAFT`` | ``ACTIVE``"},"tags":{"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetConfiguration":{"$ref":"#/types/aws-native:connect:EvaluationFormTargetConfiguration","description":"Configuration that specifies the target for this evaluation form."},"title":{"description":"A title of the evaluation form.","type":"string"}}}},"aws-native:connect:getHoursOfOperation":{"description":"Resource Type definition for AWS::Connect::HoursOfOperation","inputs":{"properties":{"hoursOfOperationArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the hours of operation."}},"required":["hoursOfOperationArn"]},"outputs":{"properties":{"childHoursOfOperations":{"description":"List of child hours of operations.","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationsIdentifier"},"type":"array"},"config":{"description":"Configuration information for the hours of operation: day, start time, and end time.","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationConfig"},"type":"array"},"description":{"description":"The description of the hours of operation.","type":"string"},"hoursOfOperationArn":{"description":"The Amazon Resource Name (ARN) for the hours of operation.","type":"string"},"hoursOfOperationOverrides":{"description":"One or more hours of operation overrides assigned to an hour of operation.","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationOverride"},"type":"array"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"name":{"description":"The name of the hours of operation.","type":"string"},"parentHoursOfOperations":{"description":"List of parent hours of operations.","items":{"$ref":"#/types/aws-native:connect:HoursOfOperationsIdentifier"},"type":"array"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeZone":{"description":"The time zone of the hours of operation.","type":"string"}}}},"aws-native:connect:getInstance":{"description":"Resource Type definition for AWS::Connect::Instance","inputs":{"properties":{"arn":{"type":"string","description":"An instanceArn is automatically generated on creation based on instanceId."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"An instanceArn is automatically generated on creation based on instanceId.","type":"string"},"attributes":{"$ref":"#/types/aws-native:connect:InstanceAttributes","description":"The attributes for the instance."},"createdTime":{"description":"Timestamp of instance creation logged as part of instance creation.","type":"string"},"id":{"description":"An instanceId is automatically generated on creation and assigned as the unique identifier.","type":"string"},"instanceStatus":{"$ref":"#/types/aws-native:connect:InstanceStatus","description":"Specifies the creation status of new instance."},"serviceRole":{"description":"Service linked role created as part of instance creation.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getInstanceStorageConfig":{"description":"Resource Type definition for AWS::Connect::InstanceStorageConfig","inputs":{"properties":{"associationId":{"type":"string","description":"The existing association identifier that uniquely identifies the resource type and storage config for the given instance ID."},"instanceArn":{"type":"string","description":"Connect Instance ID with which the storage config will be associated"},"resourceType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigInstanceStorageResourceType","description":"A valid resource type. Following are the valid resource types: `CHAT_TRANSCRIPTS` | `CALL_RECORDINGS` | `SCHEDULED_REPORTS` | `MEDIA_STREAMS` | `CONTACT_TRACE_RECORDS` | `AGENT_EVENTS`"}},"required":["instanceArn","associationId","resourceType"]},"outputs":{"properties":{"associationId":{"description":"The existing association identifier that uniquely identifies the resource type and storage config for the given instance ID.","type":"string"},"kinesisFirehoseConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisFirehoseConfig","description":"The configuration of the Kinesis Firehose delivery stream."},"kinesisStreamConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisStreamConfig","description":"The configuration of the Kinesis data stream."},"kinesisVideoStreamConfig":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigKinesisVideoStreamConfig","description":"The configuration of the Kinesis video stream."},"s3Config":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigS3Config","description":"The S3 bucket configuration."},"storageType":{"$ref":"#/types/aws-native:connect:InstanceStorageConfigStorageType","description":"A valid storage type."}}}},"aws-native:connect:getIntegrationAssociation":{"description":"Resource Type definition for AWS::Connect::IntegrationAssociation","inputs":{"properties":{"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`"},"integrationArn":{"type":"string","description":"ARN of the integration being associated with the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `140`"},"integrationType":{"$ref":"#/types/aws-native:connect:IntegrationAssociationIntegrationType","description":"Specifies the integration type to be associated with the instance.\n\n*Allowed Values* : `LEX_BOT` | `LAMBDA_FUNCTION`"}},"required":["instanceId","integrationType","integrationArn"]},"outputs":{"properties":{"integrationAssociationId":{"description":"Identifier of the association with an Amazon Connect instance.","type":"string"}}}},"aws-native:connect:getNotification":{"description":"Resource Type definition for AWS::Connect::Notification","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the notification."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the notification.","type":"string"},"content":{"$ref":"#/types/aws-native:connect:NotificationContent","description":"The content of the notification."},"createdAt":{"description":"The time a notification was created","type":"string"},"id":{"description":"The identifier of the notification.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getPhoneNumber":{"description":"Resource Type definition for AWS::Connect::PhoneNumber","inputs":{"properties":{"phoneNumberArn":{"type":"string","description":"The phone number ARN"}},"required":["phoneNumberArn"]},"outputs":{"properties":{"address":{"description":"The phone number e164 address.","type":"string"},"description":{"description":"The description of the phone number.","type":"string"},"phoneNumberArn":{"description":"The phone number ARN","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetArn":{"description":"The ARN of the target the phone number is claimed to.","type":"string"}}}},"aws-native:connect:getPredefinedAttribute":{"description":"Resource Type definition for AWS::Connect::PredefinedAttribute","inputs":{"properties":{"instanceArn":{"type":"string","description":"The identifier of the Amazon Connect instance."},"name":{"type":"string","description":"The name of the predefined attribute."}},"required":["instanceArn","name"]},"outputs":{"properties":{"attributeConfiguration":{"$ref":"#/types/aws-native:connect:AttributeConfigurationProperties","description":"Custom metadata associated to a Predefined attribute that controls how the attribute behaves when used by upstream services."},"lastModifiedRegion":{"description":"Last modified region.","type":"string"},"lastModifiedTime":{"description":"Last modified time.","type":"number"},"purposes":{"description":"The assigned purposes of the predefined attribute.","items":{"type":"string"},"type":"array"},"values":{"$ref":"#/types/aws-native:connect:ValuesProperties","description":"The values of a predefined attribute."}}}},"aws-native:connect:getPrompt":{"description":"Resource Type definition for AWS::Connect::Prompt","inputs":{"properties":{"promptArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the prompt."}},"required":["promptArn"]},"outputs":{"properties":{"description":{"description":"The description of the prompt.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"name":{"description":"The name of the prompt.","type":"string"},"promptArn":{"description":"The Amazon Resource Name (ARN) for the prompt.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getQueue":{"description":"Resource Type definition for AWS::Connect::Queue","inputs":{"properties":{"queueArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the queue."}},"required":["queueArn"]},"outputs":{"properties":{"additionalEmailAddresses":{"description":"The email addresses that agents can use when replying to or initiating email contacts","items":{"$ref":"#/types/aws-native:connect:QueueEmailAddress"},"type":"array"},"description":{"description":"The description of the queue.","type":"string"},"hoursOfOperationArn":{"description":"The identifier for the hours of operation.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"maxContacts":{"description":"The maximum number of contacts that can be in the queue before it is considered full.","type":"integer"},"name":{"description":"The name of the queue.","type":"string"},"outboundCallerConfig":{"$ref":"#/types/aws-native:connect:QueueOutboundCallerConfig","description":"The outbound caller ID name, number, and outbound whisper flow."},"outboundEmailConfig":{"$ref":"#/types/aws-native:connect:QueueOutboundEmailConfig","description":"The outbound email address ID."},"queueArn":{"description":"The Amazon Resource Name (ARN) for the queue.","type":"string"},"quickConnectArns":{"description":"The quick connects available to agents who are working the queue.","items":{"type":"string"},"type":"array"},"status":{"$ref":"#/types/aws-native:connect:QueueStatus","description":"The status of the queue."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:connect:QueueType","description":"The type of queue."}}}},"aws-native:connect:getQuickConnect":{"description":"Resource Type definition for AWS::Connect::QuickConnect","inputs":{"properties":{"quickConnectArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the quick connect."}},"required":["quickConnectArn"]},"outputs":{"properties":{"description":{"description":"The description of the quick connect.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"name":{"description":"The name of the quick connect.","type":"string"},"quickConnectArn":{"description":"The Amazon Resource Name (ARN) for the quick connect.","type":"string"},"quickConnectConfig":{"$ref":"#/types/aws-native:connect:QuickConnectConfig","description":"Configuration settings for the quick connect."},"quickConnectType":{"$ref":"#/types/aws-native:connect:QuickConnectType","description":"The type of quick connect. In the Amazon Connect console, when you create a quick connect, you are prompted to assign one of the following types: Agent (USER), External (PHONE_NUMBER), or Queue (QUEUE)."},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getRoutingProfile":{"description":"Resource Type definition for AWS::Connect::RoutingProfile","inputs":{"properties":{"routingProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the routing profile."}},"required":["routingProfileArn"]},"outputs":{"properties":{"agentAvailabilityTimer":{"$ref":"#/types/aws-native:connect:RoutingProfileAgentAvailabilityTimer","description":"Whether agents with this routing profile will have their routing order calculated based on longest idle time or time since their last inbound contact."},"defaultOutboundQueueArn":{"description":"The identifier of the default outbound queue for this routing profile.","type":"string"},"description":{"description":"The description of the routing profile.","type":"string"},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"manualAssignmentQueueConfigs":{"description":"The manual assignment queues to associate with this routing profile.","items":{"$ref":"#/types/aws-native:connect:RoutingProfileManualAssignmentQueueConfig"},"type":"array"},"mediaConcurrencies":{"description":"The channels agents can handle in the Contact Control Panel (CCP) for this routing profile.","items":{"$ref":"#/types/aws-native:connect:RoutingProfileMediaConcurrency"},"type":"array"},"name":{"description":"The name of the routing profile.","type":"string"},"queueConfigs":{"description":"The queues to associate with this routing profile.","items":{"$ref":"#/types/aws-native:connect:RoutingProfileQueueConfig"},"type":"array"},"routingProfileArn":{"description":"The Amazon Resource Name (ARN) of the routing profile.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getRule":{"description":"Creates a rule for the specified CON instance.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule."}},"required":["ruleArn"]},"outputs":{"properties":{"actions":{"$ref":"#/types/aws-native:connect:RuleActions","description":"A list of actions to be run when the rule is triggered."},"function":{"description":"The conditions of the rule.","type":"string"},"name":{"description":"The name of the rule.","type":"string"},"publishStatus":{"$ref":"#/types/aws-native:connect:RulePublishStatus","description":"The publish status of the rule.\n *Allowed values*: ``DRAFT`` | ``PUBLISHED``"},"ruleArn":{"description":"The Amazon Resource Name (ARN) of the rule.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getSecurityKey":{"description":"Resource Type definition for AWS::Connect::SecurityKey","inputs":{"properties":{"associationId":{"type":"string","description":"An `AssociationId` is automatically generated when a storage config is associated with an instance."},"instanceId":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance.\n\n*Minimum* : `1`\n\n*Maximum* : `100`"}},"required":["instanceId","associationId"]},"outputs":{"properties":{"associationId":{"description":"An `AssociationId` is automatically generated when a storage config is associated with an instance.","type":"string"}}}},"aws-native:connect:getSecurityProfile":{"description":"Resource Type definition for AWS::Connect::SecurityProfile","inputs":{"properties":{"securityProfileArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the security profile."}},"required":["securityProfileArn"]},"outputs":{"properties":{"allowedAccessControlHierarchyGroupId":{"description":"The identifier of the hierarchy group that a security profile uses to restrict access to resources in Amazon Connect.","type":"string"},"allowedAccessControlTags":{"description":"The list of tags that a security profile uses to restrict access to resources in Amazon Connect.","items":{"$ref":"#/types/aws-native:connect:SecurityProfileTag"},"type":"array"},"allowedFlowModules":{"description":"The list of flow-module resources to be linked to a security profile in Amazon Connect.","items":{"$ref":"#/types/aws-native:connect:SecurityProfileFlowModule"},"type":"array"},"applications":{"description":"A list of third-party applications that the security profile will give access to.","items":{"$ref":"#/types/aws-native:connect:SecurityProfileApplication"},"type":"array"},"description":{"description":"The description of the security profile.","type":"string"},"granularAccessControlConfiguration":{"$ref":"#/types/aws-native:connect:GranularAccessControlConfigurationProperties","description":"The granular access control configuration for the security profile, including data table permissions."},"hierarchyRestrictedResources":{"description":"The list of resources that a security profile applies hierarchy restrictions to in Amazon Connect.","items":{"type":"string"},"type":"array"},"lastModifiedRegion":{"description":"The AWS Region where this resource was last modified.","type":"string"},"lastModifiedTime":{"description":"The timestamp when this resource was last modified.","type":"number"},"permissions":{"description":"Permissions assigned to the security profile.","items":{"type":"string"},"type":"array"},"securityProfileArn":{"description":"The Amazon Resource Name (ARN) for the security profile.","type":"string"},"tagRestrictedResources":{"description":"The list of resources that a security profile applies tag restrictions to in Amazon Connect.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getTaskTemplate":{"description":"Resource Type definition for AWS::Connect::TaskTemplate.","inputs":{"properties":{"arn":{"type":"string","description":"The identifier (arn) of the task template."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The identifier (arn) of the task template.","type":"string"},"clientToken":{"description":"A unique, case-sensitive identifier that you provide to ensure the idempotency of the request.","type":"string"},"constraints":{"$ref":"#/types/aws-native:connect:ConstraintsProperties","description":"The constraints for the task template"},"contactFlowArn":{"description":"The identifier of the contact flow.","type":"string"},"defaults":{"description":"The default values for fields when a task is created by referencing this template.","items":{"$ref":"#/types/aws-native:connect:TaskTemplateDefaultFieldValue"},"type":"array"},"description":{"description":"The description of the task template.","type":"string"},"fields":{"description":"The list of task template's fields","items":{"$ref":"#/types/aws-native:connect:TaskTemplateField"},"type":"array"},"instanceArn":{"description":"The identifier (arn) of the instance.","type":"string"},"name":{"description":"The name of the task template.","type":"string"},"selfAssignContactFlowArn":{"description":"The identifier of the contact flow.","type":"string"},"status":{"$ref":"#/types/aws-native:connect:TaskTemplateStatus","description":"The status of the task template."},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connect:getTrafficDistributionGroup":{"description":"Resource Type definition for AWS::Connect::TrafficDistributionGroup","inputs":{"properties":{"trafficDistributionGroupArn":{"type":"string","description":"The identifier of the traffic distribution group."}},"required":["trafficDistributionGroupArn"]},"outputs":{"properties":{"instanceArn":{"description":"The identifier of the Amazon Connect instance that has been replicated.","type":"string"},"isDefault":{"description":"If this is the default traffic distribution group.","type":"boolean"},"status":{"$ref":"#/types/aws-native:connect:TrafficDistributionGroupStatus","description":"The status of the traffic distribution group."},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trafficDistributionGroupArn":{"description":"The identifier of the traffic distribution group.","type":"string"}}}},"aws-native:connect:getUser":{"description":"Resource Type definition for AWS::Connect::User","inputs":{"properties":{"userArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the user."}},"required":["userArn"]},"outputs":{"properties":{"afterContactWorkConfigs":{"description":"After Contact Work configurations of a user.","items":{"$ref":"#/types/aws-native:connect:UserAfterContactWorkConfigPerChannel"},"type":"array"},"autoAcceptConfigs":{"description":"Auto-accept configurations of a user.","items":{"$ref":"#/types/aws-native:connect:UserAutoAcceptConfig"},"type":"array"},"directoryUserId":{"description":"The identifier of the user account in the directory used for identity management.","type":"string"},"hierarchyGroupArn":{"description":"The identifier of the hierarchy group for the user.","type":"string"},"identityInfo":{"$ref":"#/types/aws-native:connect:UserIdentityInfo","description":"The information about the identity of the user."},"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"persistentConnectionConfigs":{"description":"Persistent Connection configurations of a user.","items":{"$ref":"#/types/aws-native:connect:UserPersistentConnectionConfig"},"type":"array"},"phoneConfig":{"$ref":"#/types/aws-native:connect:UserPhoneConfig","description":"The phone settings for the user."},"phoneNumberConfigs":{"description":"Phone Number configurations of a user.","items":{"$ref":"#/types/aws-native:connect:UserPhoneNumberConfig"},"type":"array"},"routingProfileArn":{"description":"The identifier of the routing profile for the user.","type":"string"},"securityProfileArns":{"description":"One or more security profile arns for the user","items":{"type":"string"},"type":"array"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userArn":{"description":"The Amazon Resource Name (ARN) for the user.","type":"string"},"userProficiencies":{"description":"One or more predefined attributes assigned to a user, with a level that indicates how skilled they are.","items":{"$ref":"#/types/aws-native:connect:UserProficiency"},"type":"array"},"username":{"description":"The user name for the account.","type":"string"},"voiceEnhancementConfigs":{"description":"Voice Enhancement configurations of a user.","items":{"$ref":"#/types/aws-native:connect:UserVoiceEnhancementConfig"},"type":"array"}}}},"aws-native:connect:getUserHierarchyGroup":{"description":"Resource Type definition for AWS::Connect::UserHierarchyGroup","inputs":{"properties":{"userHierarchyGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the user hierarchy group."}},"required":["userHierarchyGroupArn"]},"outputs":{"properties":{"instanceArn":{"description":"The identifier of the Amazon Connect instance.","type":"string"},"name":{"description":"The name of the user hierarchy group.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userHierarchyGroupArn":{"description":"The Amazon Resource Name (ARN) for the user hierarchy group.","type":"string"}}}},"aws-native:connect:getUserHierarchyStructure":{"description":"Resource Type definition for AWS::Connect::UserHierarchyStructure","inputs":{"properties":{"userHierarchyStructureArn":{"type":"string","description":"The identifier of the User Hierarchy Structure."}},"required":["userHierarchyStructureArn"]},"outputs":{"properties":{"userHierarchyStructure":{"$ref":"#/types/aws-native:connect:UserHierarchyStructureProperties","description":"Information about the hierarchy structure.","language":{"csharp":{"name":"UserHierarchyStructureValue"}}},"userHierarchyStructureArn":{"description":"The identifier of the User Hierarchy Structure.","type":"string"}}}},"aws-native:connect:getView":{"description":"Resource Type definition for AWS::Connect::View","inputs":{"properties":{"viewArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the view."}},"required":["viewArn"]},"outputs":{"properties":{"actions":{"description":"The actions of the view in an array.","items":{"type":"string"},"type":"array"},"description":{"description":"The description of the view.","type":"string"},"instanceArn":{"description":"The Amazon Resource Name (ARN) of the instance.","type":"string"},"name":{"description":"The name of the view.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"template":{"$ref":"pulumi.json#/Any","description":"The template of the view as JSON.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Connect::View` for more information about the expected schema for this property."},"viewArn":{"description":"The Amazon Resource Name (ARN) of the view.","type":"string"},"viewContentSha256":{"description":"The view content hash.","type":"string"},"viewId":{"description":"The view id of the view.","type":"string"}}}},"aws-native:connect:getViewVersion":{"description":"Resource Type definition for AWS::Connect::ViewVersion","inputs":{"properties":{"viewVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the created view version."}},"required":["viewVersionArn"]},"outputs":{"properties":{"version":{"description":"The version of the view.","type":"integer"},"versionDescription":{"description":"The description for the view version.","type":"string"},"viewVersionArn":{"description":"The Amazon Resource Name (ARN) of the created view version.","type":"string"}}}},"aws-native:connect:getWorkspace":{"description":"Resource Type definition for AWS::Connect::Workspace","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) for the workspace."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the workspace.","type":"string"},"associations":{"description":"The resource ARNs associated with the workspace","items":{"type":"string"},"type":"array"},"description":{"description":"The description of the workspace","type":"string"},"id":{"description":"The identifier of the workspace.","type":"string"},"media":{"description":"The media items for the workspace","items":{"$ref":"#/types/aws-native:connect:WorkspaceMediaItem"},"type":"array"},"name":{"description":"The name of the workspace.","type":"string"},"pages":{"description":"The pages associated with the workspace","items":{"$ref":"#/types/aws-native:connect:WorkspacePage"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"theme":{"$ref":"#/types/aws-native:connect:WorkspaceTheme","description":"The theme configuration for the workspace"},"title":{"description":"The title of the workspace","type":"string"},"visibility":{"$ref":"#/types/aws-native:connect:WorkspaceVisibility","description":"The visibility of the workspace. Will always be set to ASSIGNED oninitial creation."}}}},"aws-native:connectcampaigns:getCampaign":{"description":"Definition of AWS::ConnectCampaigns::Campaign Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Connect Campaign Arn"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Connect Campaign Arn","type":"string"},"dialerConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignDialerConfig","description":"Contains information about the dialer configuration."},"name":{"description":"Amazon Connect Campaign Name","type":"string"},"outboundCallConfig":{"$ref":"#/types/aws-native:connectcampaigns:CampaignOutboundCallConfig","description":"Contains information about the outbound call configuration."},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:connectcampaignsv2:getCampaign":{"description":"Definition of AWS::ConnectCampaignsV2::Campaign Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Connect Campaign Arn"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Connect Campaign Arn","type":"string"},"channelSubtypeConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignChannelSubtypeConfig","description":"Contains channel subtype configuration for an outbound campaign."},"communicationLimitsOverride":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationLimitsConfig","description":"Communication limits configuration for an outbound campaign."},"communicationTimeConfig":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignCommunicationTimeConfig","description":"Contains communication time configuration for an outbound campaign."},"connectCampaignFlowArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Connect campaign flow associated with the outbound campaign.","type":"string"},"name":{"description":"The name of the outbound campaign.","type":"string"},"schedule":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSchedule","description":"Contains the schedule configuration."},"source":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignSource","description":"Contains source configuration."},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:connectcampaignsv2:CampaignType","description":"The type of campaign."}}}},"aws-native:controltower:getEnabledBaseline":{"description":"Definition of AWS::ControlTower::EnabledBaseline Resource Type","inputs":{"properties":{"enabledBaselineIdentifier":{"type":"string"}},"required":["enabledBaselineIdentifier"]},"outputs":{"properties":{"baselineVersion":{"description":"The enabled version of the `Baseline` .","type":"string"},"enabledBaselineIdentifier":{"type":"string"},"parameters":{"description":"Shows the parameters that are applied when enabling this `Baseline` .","items":{"$ref":"#/types/aws-native:controltower:EnabledBaselineParameter"},"type":"array"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:controltower:getEnabledControl":{"description":"Enables a control on a specified target.","inputs":{"properties":{"controlIdentifier":{"type":"string","description":"Arn of the control."},"targetIdentifier":{"type":"string","description":"Arn for Organizational unit to which the control needs to be applied"}},"required":["targetIdentifier","controlIdentifier"]},"outputs":{"properties":{"parameters":{"description":"Parameters to configure the enabled control behavior.","items":{"$ref":"#/types/aws-native:controltower:EnabledControlParameter"},"type":"array"},"tags":{"description":"A set of tags to assign to the enabled control.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:controltower:getLandingZone":{"description":"Definition of AWS::ControlTower::LandingZone Resource Type","inputs":{"properties":{"landingZoneIdentifier":{"type":"string","description":"The unique identifier of the landing zone."}},"required":["landingZoneIdentifier"]},"outputs":{"properties":{"arn":{"description":"The ARN of the landing zone.","type":"string"},"driftStatus":{"$ref":"#/types/aws-native:controltower:LandingZoneDriftStatus","description":"The drift status of the landing zone."},"landingZoneIdentifier":{"description":"The unique identifier of the landing zone.","type":"string"},"latestAvailableVersion":{"description":"The latest available version of the landing zone.","type":"string"},"manifest":{"$ref":"pulumi.json#/Any","description":"The landing zone manifest JSON text file that specifies the landing zone configurations.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ControlTower::LandingZone` for more information about the expected schema for this property."},"remediationTypes":{"description":"The types of remediation actions configured for the landing zone, such as automatic drift correction or compliance enforcement.","items":{"$ref":"#/types/aws-native:controltower:LandingZoneRemediationTypesItem"},"type":"array"},"status":{"$ref":"#/types/aws-native:controltower:LandingZoneStatus","description":"The landing zone deployment status. One of `ACTIVE` , `PROCESSING` , `FAILED` ."},"tags":{"description":"Tags to be applied to the landing zone.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"The landing zone's current deployed version.","type":"string"}}}},"aws-native:customerprofiles:getCalculatedAttributeDefinition":{"description":"A calculated attribute definition for Customer Profiles","inputs":{"properties":{"calculatedAttributeName":{"type":"string","description":"The name of an attribute defined in a profile object type."},"domainName":{"type":"string","description":"The unique name of the domain."}},"required":["domainName","calculatedAttributeName"]},"outputs":{"properties":{"attributeDetails":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionAttributeDetails","description":"Mathematical expression and a list of attribute items specified in that expression."},"conditions":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionConditions","description":"The conditions including range, object count, and threshold for the calculated attribute."},"createdAt":{"description":"The timestamp of when the calculated attribute definition was created.","type":"string"},"description":{"description":"The description of the calculated attribute.","type":"string"},"displayName":{"description":"The display name of the calculated attribute.","type":"string"},"lastUpdatedAt":{"description":"The timestamp of when the calculated attribute definition was most recently edited.","type":"string"},"readiness":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionReadiness"},"statistic":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionStatistic","description":"The aggregation operation to perform for the calculated attribute."},"status":{"$ref":"#/types/aws-native:customerprofiles:CalculatedAttributeDefinitionStatus","description":"The status of the calculated attribute definition."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:customerprofiles:getDomain":{"description":"A domain defined for 3rd party data source in Profile Service","inputs":{"properties":{"domainName":{"type":"string","description":"The unique name of the domain."}},"required":["domainName"]},"outputs":{"properties":{"createdAt":{"description":"The time of this integration got created","type":"string"},"dataStore":{"$ref":"#/types/aws-native:customerprofiles:DomainDataStore"},"deadLetterQueueUrl":{"description":"The URL of the SQS dead letter queue","type":"string"},"defaultEncryptionKey":{"description":"The default encryption key","type":"string"},"defaultExpirationDays":{"description":"The default number of days until the data within the domain expires.","type":"integer"},"lastUpdatedAt":{"description":"The time of this integration got last updated at","type":"string"},"matching":{"$ref":"#/types/aws-native:customerprofiles:DomainMatching","description":"The process of matching duplicate profiles."},"ruleBasedMatching":{"$ref":"#/types/aws-native:customerprofiles:DomainRuleBasedMatching","description":"The process of matching duplicate profiles using Rule-Based matching."},"stats":{"$ref":"#/types/aws-native:customerprofiles:DomainStats"},"tags":{"description":"The tags (keys and values) associated with the domain","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:customerprofiles:getEventStream":{"description":"An Event Stream resource of Amazon Connect Customer Profiles","inputs":{"properties":{"domainName":{"type":"string","description":"The unique name of the domain."},"eventStreamName":{"type":"string","description":"The name of the event stream."}},"required":["domainName","eventStreamName"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp of when the export was created.","type":"string"},"destinationDetails":{"$ref":"#/types/aws-native:customerprofiles:DestinationDetailsProperties","description":"Details regarding the Kinesis stream."},"eventStreamArn":{"description":"A unique identifier for the event stream.","type":"string"},"state":{"$ref":"#/types/aws-native:customerprofiles:EventStreamState","description":"The operational state of destination stream for export."},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:customerprofiles:getEventTrigger":{"description":"An event trigger resource of Amazon Connect Customer Profiles","inputs":{"properties":{"domainName":{"type":"string","description":"The unique name of the domain."},"eventTriggerName":{"type":"string","description":"The unique name of the event trigger."}},"required":["domainName","eventTriggerName"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp of when the event trigger was created.","type":"string"},"description":{"description":"The description of the event trigger.","type":"string"},"eventTriggerConditions":{"description":"A list of conditions that determine when an event should trigger the destination.","items":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerCondition"},"type":"array"},"eventTriggerLimits":{"$ref":"#/types/aws-native:customerprofiles:EventTriggerLimits","description":"Defines limits controlling whether an event triggers the destination, based on ingestion latency and the number of invocations per profile over specific time periods."},"lastUpdatedAt":{"description":"The timestamp of when the event trigger was most recently updated.","type":"string"},"objectTypeName":{"description":"The unique name of the object type.","type":"string"},"segmentFilter":{"description":"The destination is triggered only for profiles that meet the criteria of a segment definition.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:customerprofiles:getIntegration":{"description":"The resource schema for creating an Amazon Connect Customer Profiles Integration.","inputs":{"properties":{"domainName":{"type":"string","description":"The unique name of the domain."},"uri":{"type":"string","description":"The URI of the S3 bucket or any other type of data source."}},"required":["domainName","uri"]},"outputs":{"properties":{"createdAt":{"description":"The time of this integration got created","type":"string"},"eventTriggerNames":{"description":"A list of unique names for active event triggers associated with the integration.","items":{"type":"string"},"type":"array"},"lastUpdatedAt":{"description":"The time of this integration got last updated at","type":"string"},"objectTypeName":{"description":"The name of the ObjectType defined for the 3rd party data in Profile Service","type":"string"},"objectTypeNames":{"description":"The mapping between 3rd party event types and ObjectType names","items":{"$ref":"#/types/aws-native:customerprofiles:IntegrationObjectTypeMapping"},"type":"array"},"scope":{"$ref":"#/types/aws-native:customerprofiles:IntegrationScope","description":"Scope of the integration, such as 'PROFILE' or 'DOMAIN'"},"tags":{"description":"The tags (keys and values) associated with the integration","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:customerprofiles:getObjectType":{"description":"An ObjectType resource of Amazon Connect Customer Profiles","inputs":{"properties":{"domainName":{"type":"string","description":"The unique name of the domain."},"objectTypeName":{"type":"string","description":"The name of the profile object type."}},"required":["domainName","objectTypeName"]},"outputs":{"properties":{"allowProfileCreation":{"description":"Indicates whether a profile should be created when data is received.","type":"boolean"},"createdAt":{"description":"The time of this integration got created.","type":"string"},"description":{"description":"Description of the profile object type.","type":"string"},"encryptionKey":{"description":"The default encryption key","type":"string"},"expirationDays":{"description":"The default number of days until the data within the domain expires.","type":"integer"},"fields":{"description":"A list of the name and ObjectType field.","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeFieldMap"},"type":"array"},"keys":{"description":"A list of unique keys that can be used to map data to the profile.","items":{"$ref":"#/types/aws-native:customerprofiles:ObjectTypeKeyMap"},"type":"array"},"lastUpdatedAt":{"description":"The time of this integration got last updated at.","type":"string"},"maxAvailableProfileObjectCount":{"description":"The maximum available number of profile objects","type":"integer"},"maxProfileObjectCount":{"description":"The maximum number of profile objects for this object type","type":"integer"},"sourceLastUpdatedTimestampFormat":{"description":"The format of your sourceLastUpdatedTimestamp that was previously set up.","type":"string"},"sourcePriority":{"description":"Defines the priority order of object types. Lower value indicates higher priority.","type":"integer"},"tags":{"description":"The tags (keys and values) associated with the integration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"templateId":{"description":"A unique identifier for the object template.","type":"string"}}}},"aws-native:customerprofiles:getSegmentDefinition":{"description":"A segment definition resource of Amazon Connect Customer Profiles","inputs":{"properties":{"domainName":{"type":"string","description":"The unique name of the domain."},"segmentDefinitionName":{"type":"string","description":"The unique name of the segment definition."}},"required":["domainName","segmentDefinitionName"]},"outputs":{"properties":{"createdAt":{"description":"The time of this segment definition got created.","type":"string"},"description":{"description":"The description of the segment definition.","type":"string"},"segmentDefinitionArn":{"description":"The Amazon Resource Name (ARN) of the segment definition.","type":"string"},"segmentType":{"$ref":"#/types/aws-native:customerprofiles:SegmentDefinitionSegmentType","description":"The SQL query that defines the segment criteria."},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:databrew:getDataset":{"description":"Resource schema for AWS::DataBrew::Dataset.","inputs":{"properties":{"name":{"type":"string","description":"Dataset name"}},"required":["name"]},"outputs":{"properties":{"format":{"$ref":"#/types/aws-native:databrew:DatasetFormat","description":"Dataset format"},"formatOptions":{"$ref":"#/types/aws-native:databrew:DatasetFormatOptions","description":"Format options for dataset"},"input":{"$ref":"#/types/aws-native:databrew:DatasetInput","description":"Input"},"pathOptions":{"$ref":"#/types/aws-native:databrew:DatasetPathOptions","description":"PathOptions"},"source":{"$ref":"#/types/aws-native:databrew:DatasetSource","description":"Source type of the dataset"},"tags":{"description":"Metadata tags that have been applied to the dataset.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:databrew:getJob":{"description":"Resource schema for AWS::DataBrew::Job.","inputs":{"properties":{"name":{"type":"string","description":"Job name"}},"required":["name"]},"outputs":{"properties":{"dataCatalogOutputs":{"description":"One or more artifacts that represent the AWS Glue Data Catalog output from running the job.","items":{"$ref":"#/types/aws-native:databrew:JobDataCatalogOutput"},"type":"array"},"databaseOutputs":{"description":"Represents a list of JDBC database output objects which defines the output destination for a DataBrew recipe job to write into.","items":{"$ref":"#/types/aws-native:databrew:JobDatabaseOutput"},"type":"array"},"datasetName":{"description":"Dataset name","type":"string"},"encryptionKeyArn":{"description":"Encryption Key Arn","type":"string"},"encryptionMode":{"$ref":"#/types/aws-native:databrew:JobEncryptionMode","description":"Encryption mode"},"jobSample":{"$ref":"#/types/aws-native:databrew:JobSample","description":"Job Sample"},"logSubscription":{"$ref":"#/types/aws-native:databrew:JobLogSubscription","description":"Log subscription"},"maxCapacity":{"description":"Max capacity","type":"integer"},"maxRetries":{"description":"Max retries","type":"integer"},"outputLocation":{"$ref":"#/types/aws-native:databrew:JobOutputLocation","description":"Output location"},"outputs":{"description":"One or more artifacts that represent output from running the job.","items":{"$ref":"#/types/aws-native:databrew:JobOutput"},"type":"array"},"profileConfiguration":{"$ref":"#/types/aws-native:databrew:JobProfileConfiguration","description":"Profile Job configuration"},"projectName":{"description":"Project name","type":"string"},"recipe":{"$ref":"#/types/aws-native:databrew:JobRecipe","description":"A series of data transformation steps that the job runs."},"roleArn":{"description":"Role arn","type":"string"},"tags":{"description":"Metadata tags that have been applied to the job.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeout":{"description":"Timeout","type":"integer"},"validationConfigurations":{"description":"Data quality rules configuration","items":{"$ref":"#/types/aws-native:databrew:JobValidationConfiguration"},"type":"array"}}}},"aws-native:databrew:getProject":{"description":"Resource schema for AWS::DataBrew::Project.","inputs":{"properties":{"name":{"type":"string","description":"Project name"}},"required":["name"]},"outputs":{"properties":{"datasetName":{"description":"Dataset name","type":"string"},"recipeName":{"description":"Recipe name","type":"string"},"roleArn":{"description":"Role arn","type":"string"},"sample":{"$ref":"#/types/aws-native:databrew:ProjectSample","description":"Sample"},"tags":{"description":"Metadata tags that have been applied to the project.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:databrew:getRecipe":{"description":"Resource schema for AWS::DataBrew::Recipe.","inputs":{"properties":{"name":{"type":"string","description":"Recipe name"}},"required":["name"]},"outputs":{"properties":{"description":{"description":"Description of the recipe","type":"string"},"steps":{"description":"A list of steps that are defined by the recipe.","items":{"$ref":"#/types/aws-native:databrew:RecipeStep"},"type":"array"},"tags":{"description":"Metadata tags that have been applied to the recipe.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:databrew:getRuleset":{"description":"Resource schema for AWS::DataBrew::Ruleset.","inputs":{"properties":{"name":{"type":"string","description":"Name of the Ruleset"}},"required":["name"]},"outputs":{"properties":{"description":{"description":"Description of the Ruleset","type":"string"},"rules":{"description":"List of the data quality rules in the ruleset","items":{"$ref":"#/types/aws-native:databrew:RulesetRule"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:databrew:getSchedule":{"description":"Resource schema for AWS::DataBrew::Schedule.","inputs":{"properties":{"name":{"type":"string","description":"Schedule Name"}},"required":["name"]},"outputs":{"properties":{"cronExpression":{"description":"Schedule cron","type":"string"},"jobNames":{"description":"A list of jobs to be run, according to the schedule.","items":{"type":"string"},"type":"array"},"tags":{"description":"Metadata tags that have been applied to the schedule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datapipeline:getPipeline":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"pipelineId":{"type":"string","description":"The ID of the pipeline."}},"required":["pipelineId"]},"outputs":{"properties":{"activate":{"description":"Indicates whether to validate and start the pipeline or stop an active pipeline. By default, the value is set to true.","type":"boolean"},"parameterObjects":{"description":"The parameter objects used with the pipeline.","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterObject"},"type":"array"},"parameterValues":{"description":"The parameter values used with the pipeline.","items":{"$ref":"#/types/aws-native:datapipeline:PipelineParameterValue"},"type":"array"},"pipelineId":{"description":"The ID of the pipeline.","type":"string"},"pipelineObjects":{"description":"The objects that define the pipeline. These objects overwrite the existing pipeline definition. Not all objects, fields, and values can be updated. For information about restrictions, see Editing Your Pipeline in the AWS Data Pipeline Developer Guide.","items":{"$ref":"#/types/aws-native:datapipeline:PipelineObject"},"type":"array"},"pipelineTags":{"description":"A list of arbitrary tags (key-value pairs) to associate with the pipeline, which you can use to control permissions. For more information, see Controlling Access to Pipelines and Resources in the AWS Data Pipeline Developer Guide.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getAgent":{"description":"Resource schema for AWS::DataSync::Agent.","inputs":{"properties":{"agentArn":{"type":"string","description":"The DataSync Agent ARN."}},"required":["agentArn"]},"outputs":{"properties":{"agentArn":{"description":"The DataSync Agent ARN.","type":"string"},"agentName":{"description":"The name configured for the agent. Text reference used to identify the agent in the console.","type":"string"},"endpointType":{"$ref":"#/types/aws-native:datasync:AgentEndpointType","description":"The service endpoints that the agent will connect to."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationAzureBlob":{"description":"Resource Type definition for AWS::DataSync::LocationAzureBlob.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Azure Blob Location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"agentArns":{"description":"Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect with your Azure Blob Storage container. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter.","items":{"type":"string"},"type":"array"},"azureAccessTier":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureAccessTier","description":"Specifies an access tier for the objects you're transferring into your Azure Blob Storage container."},"azureBlobAuthenticationType":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobAuthenticationType","description":"The specific authentication type that you want DataSync to use to access your Azure Blob Container."},"azureBlobType":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobAzureBlobType","description":"Specifies a blob type for the objects you're transferring into your Azure Blob Storage container."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"locationArn":{"description":"The Amazon Resource Name (ARN) of the Azure Blob Location that is created.","type":"string"},"locationUri":{"description":"The URL of the Azure Blob Location that was described.","type":"string"},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationAzureBlobManagedSecretConfig"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationEfs":{"description":"Resource schema for AWS::DataSync::LocationEFS.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon EFS file system location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"accessPointArn":{"description":"The Amazon Resource Name (ARN) for the Amazon EFS Access point that DataSync uses when accessing the EFS file system.","type":"string"},"fileSystemAccessRoleArn":{"description":"The Amazon Resource Name (ARN) of the AWS IAM role that the DataSync will assume when mounting the EFS file system.","type":"string"},"inTransitEncryption":{"$ref":"#/types/aws-native:datasync:LocationEfsInTransitEncryption","description":"Protocol that is used for encrypting the traffic exchanged between the DataSync Agent and the EFS file system."},"locationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon EFS file system location that is created.","type":"string"},"locationUri":{"description":"The URL of the EFS location that was described.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationFSxLustre":{"description":"Resource schema for AWS::DataSync::LocationFSxLustre.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx for Lustre file system location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"locationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon FSx for Lustre file system location that is created.","type":"string"},"locationUri":{"description":"The URL of the FSx for Lustre location that was described.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationFSxOntap":{"description":"Resource Type definition for AWS::DataSync::LocationFSxONTAP.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx ONTAP file system location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"fsxFilesystemArn":{"description":"The Amazon Resource Name (ARN) for the FSx ONAP file system.","type":"string"},"locationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon FSx ONTAP file system location that is created.","type":"string"},"locationUri":{"description":"The URL of the FSx ONTAP file system that was described.","type":"string"},"protocol":{"$ref":"#/types/aws-native:datasync:LocationFSxOntapProtocol","description":"Specifies the data transfer protocol that DataSync uses to access your Amazon FSx file system."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationFSxOpenZfs":{"description":"Resource schema for AWS::DataSync::LocationFSxOpenZFS.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx OpenZFS file system location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"locationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon FSx OpenZFS file system location that is created.","type":"string"},"locationUri":{"description":"The URL of the FSx OpenZFS that was described.","type":"string"},"protocol":{"$ref":"#/types/aws-native:datasync:LocationFSxOpenZfsProtocol","description":"The type of protocol that AWS DataSync uses to access your file system."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationFSxWindows":{"description":"Resource Type definition for AWS::DataSync::LocationFSxWindows.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon FSx for Windows file system location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsCustomSecretConfig"},"domain":{"description":"The name of the Windows domain that the FSx for Windows server belongs to.","type":"string"},"locationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon FSx for Windows file system location that is created.","type":"string"},"locationUri":{"description":"The URL of the FSx for Windows location that was described.","type":"string"},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationFSxWindowsManagedSecretConfig"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"user":{"description":"The user who has the permissions to access files and folders in the FSx for Windows file system.","type":"string"}}}},"aws-native:datasync:getLocationHdfs":{"description":"Resource Type definition for AWS::DataSync::LocationHDFS.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the HDFS location."}},"required":["locationArn"]},"outputs":{"properties":{"agentArns":{"description":"ARN(s) of the agent(s) to use for an HDFS location.","items":{"type":"string"},"type":"array"},"authenticationType":{"$ref":"#/types/aws-native:datasync:LocationHdfsAuthenticationType","description":"The authentication mode used to determine identity of user."},"blockSize":{"description":"Size of chunks (blocks) in bytes that the data is divided into when stored in the HDFS cluster.","type":"integer"},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsCmkSecretConfig"},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsCustomSecretConfig"},"kerberosPrincipal":{"description":"The unique identity, or principal, to which Kerberos can assign tickets.","type":"string"},"kmsKeyProviderUri":{"description":"The identifier for the Key Management Server where the encryption keys that encrypt data inside HDFS clusters are stored.","type":"string"},"locationArn":{"description":"The Amazon Resource Name (ARN) of the HDFS location.","type":"string"},"locationUri":{"description":"The URL of the HDFS location that was described.","type":"string"},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationHdfsManagedSecretConfig"},"nameNodes":{"description":"An array of Name Node(s) of the HDFS location.","items":{"$ref":"#/types/aws-native:datasync:LocationHdfsNameNode"},"type":"array"},"qopConfiguration":{"$ref":"#/types/aws-native:datasync:LocationHdfsQopConfiguration","description":"The Quality of Protection (QOP) configuration specifies the Remote Procedure Call (RPC) and data transfer protection settings configured on the Hadoop Distributed File System (HDFS) cluster. If `QopConfiguration` isn't specified, `RpcProtection` and `DataTransferProtection` default to `PRIVACY` . If you set `RpcProtection` or `DataTransferProtection` , the other parameter assumes the same value."},"replicationFactor":{"description":"Number of copies of each block that exists inside the HDFS cluster.","type":"integer"},"simpleUser":{"description":"The user name that has read and write permissions on the specified HDFS cluster.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationNfs":{"description":"Resource schema for AWS::DataSync::LocationNFS","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the NFS location."}},"required":["locationArn"]},"outputs":{"properties":{"locationArn":{"description":"The Amazon Resource Name (ARN) of the NFS location.","type":"string"},"locationUri":{"description":"The URL of the NFS location that was described.","type":"string"},"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationNfsMountOptions","description":"Specifies the options that DataSync can use to mount your NFS file server."},"onPremConfig":{"$ref":"#/types/aws-native:datasync:LocationNfsOnPremConfig","description":"Specifies the Amazon Resource Name (ARN) of the DataSync agent that can connect to your NFS file server.\n\nYou can specify more than one agent. For more information, see [Using multiple DataSync agents](https://docs.aws.amazon.com/datasync/latest/userguide/do-i-need-datasync-agent.html#multiple-agents) ."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationObjectStorage":{"description":"Resource Type definition for AWS::DataSync::LocationObjectStorage.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"accessKey":{"description":"Optional. The access key is used if credentials are required to access the self-managed object storage server.","type":"string"},"agentArns":{"description":"Specifies the Amazon Resource Names (ARNs) of the DataSync agents that can connect with your object storage system. If you are setting up an agentless cross-cloud transfer, you do not need to specify a value for this parameter.","items":{"type":"string"},"type":"array"},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, which includes the `SecretKey` that DataSync uses to access a specific object storage location, with a customer-managed AWS KMS key .\n\nWhen you include this parameter as part of a `CreateLocationObjectStorage` request, you provide only the KMS key ARN. DataSync uses this KMS key together with the value you specify for the `SecretKey` parameter to create a DataSync-managed secret to store the location access credentials.\n\nMake sure that DataSync has permission to access the KMS key that you specify.\n\n\u003e You can use either `CmkSecretConfig` (with `SecretKey` ) or `CustomSecretConfig` (without `SecretKey` ) to provide credentials for a `CreateLocationObjectStorage` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where the secret key for a specific object storage location is stored in plain text, in Secrets Manager. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` (with `SecretKey` ) or `CustomSecretConfig` (without `SecretKey` ) to provide credentials for a `CreateLocationObjectStorage` request. Do not provide both parameters for the same request."},"locationArn":{"description":"The Amazon Resource Name (ARN) of the location that is created.","type":"string"},"locationUri":{"description":"The URL of the object storage location that was described.","type":"string"},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageManagedSecretConfig"},"serverCertificate":{"description":"X.509 PEM content containing a certificate authority or chain to trust.","type":"string"},"serverPort":{"description":"The port that your self-managed server accepts inbound network traffic on.","type":"integer"},"serverProtocol":{"$ref":"#/types/aws-native:datasync:LocationObjectStorageServerProtocol","description":"The protocol that the object storage server uses to communicate."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationS3":{"description":"Resource schema for AWS::DataSync::LocationS3","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket location."}},"required":["locationArn"]},"outputs":{"properties":{"locationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket location.","type":"string"},"locationUri":{"description":"The URL of the S3 location that was described.","type":"string"},"s3Config":{"$ref":"#/types/aws-native:datasync:LocationS3s3Config","description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that is used to access an Amazon S3 bucket.\n\nFor detailed information about using such a role, see [Creating a Location for Amazon S3](https://docs.aws.amazon.com/datasync/latest/userguide/working-with-locations.html#create-s3-location) in the *AWS DataSync User Guide* ."},"s3StorageClass":{"$ref":"#/types/aws-native:datasync:LocationS3S3StorageClass","description":"The Amazon S3 storage class you want to store your files in when this location is used as a task destination."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getLocationSmb":{"description":"Resource Type definition for AWS::DataSync::LocationSMB.","inputs":{"properties":{"locationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SMB location that is created."}},"required":["locationArn"]},"outputs":{"properties":{"agentArns":{"description":"The Amazon Resource Names (ARNs) of agents to use for a Simple Message Block (SMB) location.","items":{"type":"string"},"type":"array"},"authenticationType":{"$ref":"#/types/aws-native:datasync:LocationSmbAuthenticationType","description":"The authentication mode used to determine identity of user."},"cmkSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbCmkSecretConfig","description":"Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key .\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"customSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbCustomSecretConfig","description":"Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret.\n\n\u003e You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request."},"dnsIpAddresses":{"description":"Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if AuthenticationType is set to KERBEROS. If you have multiple domains in your environment, configuring this parameter makes sure that DataSync connects to the right SMB file server.","items":{"type":"string"},"type":"array"},"domain":{"description":"The name of the Windows domain that the SMB server belongs to.","type":"string"},"kerberosPrincipal":{"description":"Specifies a service principal name (SPN), which is an identity in your Kerberos realm that has permission to access the files, folders, and file metadata in your SMB file server. SPNs are case sensitive and must include a prepended cifs/. For example, an SPN might look like cifs/kerberosuser@EXAMPLE.COM. Your task execution will fail if the SPN that you provide for this parameter doesn't match exactly what's in your keytab or krb5.conf files.","type":"string"},"locationArn":{"description":"The Amazon Resource Name (ARN) of the SMB location that is created.","type":"string"},"locationUri":{"description":"The URL of the SMB location that was described.","type":"string"},"managedSecretConfig":{"$ref":"#/types/aws-native:datasync:LocationSmbManagedSecretConfig"},"mountOptions":{"$ref":"#/types/aws-native:datasync:LocationSmbMountOptions","description":"Specifies the version of the SMB protocol that DataSync uses to access your SMB file server."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"user":{"description":"The user who can mount the share, has the permissions to access files and folders in the SMB share.","type":"string"}}}},"aws-native:datasync:getStorageSystem":{"description":"Resource schema for AWS::DataSync::StorageSystem.","inputs":{"properties":{"storageSystemArn":{"type":"string","description":"The ARN of the on-premises storage system added to DataSync Discovery."}},"required":["storageSystemArn"]},"outputs":{"properties":{"agentArns":{"description":"The ARN of the DataSync agent that connects to and reads from the on-premises storage system's management interface.","items":{"type":"string"},"type":"array"},"cloudWatchLogGroupArn":{"description":"The ARN of the Amazon CloudWatch log group used to monitor and log discovery job events.","type":"string"},"connectivityStatus":{"$ref":"#/types/aws-native:datasync:StorageSystemConnectivityStatus","description":"Indicates whether the DataSync agent can access the on-premises storage system."},"name":{"description":"A familiar name for the on-premises storage system.","type":"string"},"secretsManagerArn":{"description":"The ARN of a secret stored by AWS Secrets Manager.","type":"string"},"serverConfiguration":{"$ref":"#/types/aws-native:datasync:StorageSystemServerConfiguration"},"storageSystemArn":{"description":"The ARN of the on-premises storage system added to DataSync Discovery.","type":"string"},"systemType":{"$ref":"#/types/aws-native:datasync:StorageSystemSystemType","description":"The type of on-premises storage system that DataSync Discovery will analyze."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datasync:getTask":{"description":"Resource schema for AWS::DataSync::Task.","inputs":{"properties":{"taskArn":{"type":"string","description":"The ARN of the task."}},"required":["taskArn"]},"outputs":{"properties":{"cloudWatchLogGroupArn":{"description":"The ARN of the Amazon CloudWatch log group that is used to monitor and log events in the task.","type":"string"},"destinationNetworkInterfaceArns":{"description":"The ARNs of the destination elastic network interfaces (ENIs) that were created for your subnet.","items":{"type":"string"},"type":"array"},"excludes":{"description":"Specifies exclude filters that define the files, objects, and folders in your source location that you don't want DataSync to transfer. For more information and examples, see [Specifying what DataSync transfers by using filters](https://docs.aws.amazon.com/datasync/latest/userguide/filtering.html) .","items":{"$ref":"#/types/aws-native:datasync:TaskFilterRule"},"type":"array"},"includes":{"description":"Specifies include filters that define the files, objects, and folders in your source location that you want DataSync to transfer. For more information and examples, see [Specifying what DataSync transfers by using filters](https://docs.aws.amazon.com/datasync/latest/userguide/filtering.html) .","items":{"$ref":"#/types/aws-native:datasync:TaskFilterRule"},"type":"array"},"manifestConfig":{"$ref":"#/types/aws-native:datasync:TaskManifestConfig","description":"The configuration of the manifest that lists the files or objects that you want DataSync to transfer. For more information, see [Specifying what DataSync transfers by using a manifest](https://docs.aws.amazon.com/datasync/latest/userguide/transferring-with-manifest.html) ."},"name":{"description":"The name of a task. This value is a text reference that is used to identify the task in the console.","type":"string"},"options":{"$ref":"#/types/aws-native:datasync:TaskOptions","description":"Specifies your task's settings, such as preserving file metadata, verifying data integrity, among other options."},"schedule":{"$ref":"#/types/aws-native:datasync:TaskSchedule","description":"Specifies a schedule for when you want your task to run. For more information, see [Scheduling your task](https://docs.aws.amazon.com/datasync/latest/userguide/task-scheduling.html) ."},"sourceNetworkInterfaceArns":{"description":"The ARNs of the source ENIs that were created for your subnet.","items":{"type":"string"},"type":"array"},"status":{"$ref":"#/types/aws-native:datasync:TaskStatus","description":"The status of the task that was described."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"taskArn":{"description":"The ARN of the task.","type":"string"},"taskReportConfig":{"$ref":"#/types/aws-native:datasync:TaskReportConfig","description":"The configuration of your task report, which provides detailed information about your DataSync transfer. For more information, see [Monitoring your DataSync transfers with task reports](https://docs.aws.amazon.com/datasync/latest/userguide/task-reports.html) ."}}}},"aws-native:datazone:getConnection":{"description":"Connections enables users to connect their DataZone resources (domains, projects, and environments) to external resources/services (data, compute, etc)","inputs":{"properties":{"connectionId":{"type":"string","description":"The ID of the connection."},"domainId":{"type":"string","description":"The ID of the domain in which the connection is created."}},"required":["domainId","connectionId"]},"outputs":{"properties":{"connectionId":{"description":"The ID of the connection.","type":"string"},"description":{"description":"The description of the connection.","type":"string"},"domainId":{"description":"The ID of the domain in which the connection is created.","type":"string"},"domainUnitId":{"description":"The ID of the domain unit in which the connection is created.","type":"string"},"environmentId":{"description":"The ID of the environment in which the connection is created.","type":"string"},"environmentUserRole":{"description":"The role of the user in the environment.","type":"string"},"projectId":{"description":"The ID of the project in which the connection is created.","type":"string"},"type":{"description":"The type of the connection.","type":"string"}}}},"aws-native:datazone:getDataSource":{"description":"A data source is used to import technical metadata of assets (data) from the source databases or data warehouses into Amazon DataZone. ","inputs":{"properties":{"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain where the data source is created."},"id":{"type":"string","description":"The unique identifier of the data source."}},"required":["domainId","id"]},"outputs":{"properties":{"connectionId":{"description":"The unique identifier of a connection used to fetch relevant parameters from connection during Datasource run","type":"string"},"createdAt":{"description":"The timestamp of when the data source was created.","type":"string"},"description":{"description":"The description of the data source.","type":"string"},"domainId":{"description":"The ID of the Amazon DataZone domain where the data source is created.","type":"string"},"enableSetting":{"$ref":"#/types/aws-native:datazone:DataSourceEnableSetting","description":"Specifies whether the data source is enabled."},"environmentId":{"description":"The unique identifier of the Amazon DataZone environment to which the data source publishes assets.","type":"string"},"id":{"description":"The unique identifier of the data source.","type":"string"},"lastRunAssetCount":{"description":"The number of assets created by the data source during its last run.","type":"number"},"lastRunAt":{"description":"The timestamp that specifies when the data source was last run.","type":"string"},"lastRunStatus":{"description":"The status of the last run of this data source.","type":"string"},"name":{"description":"The name of the data source.","type":"string"},"projectId":{"description":"The ID of the Amazon DataZone project to which the data source is added.","type":"string"},"publishOnImport":{"description":"Specifies whether the assets that this data source creates in the inventory are to be also automatically published to the catalog.","type":"boolean"},"recommendation":{"$ref":"#/types/aws-native:datazone:DataSourceRecommendationConfiguration","description":"Specifies whether the business name generation is to be enabled for this data source."},"schedule":{"$ref":"#/types/aws-native:datazone:DataSourceScheduleConfiguration","description":"The schedule of the data source runs."},"status":{"$ref":"#/types/aws-native:datazone:DataSourceStatus","description":"The status of the data source."},"updatedAt":{"description":"The timestamp of when this data source was updated.","type":"string"}}}},"aws-native:datazone:getDomain":{"description":"A domain is an organizing entity for connecting together assets, users, and their projects","inputs":{"properties":{"id":{"type":"string","description":"The id of the Amazon DataZone domain."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the Amazon DataZone domain.","type":"string"},"createdAt":{"description":"The timestamp of when the Amazon DataZone domain was last updated.","type":"string"},"description":{"description":"The description of the Amazon DataZone domain.","type":"string"},"domainExecutionRole":{"description":"The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the AWS account that houses the Amazon DataZone domain.","type":"string"},"id":{"description":"The id of the Amazon DataZone domain.","type":"string"},"lastUpdatedAt":{"description":"The timestamp of when the Amazon DataZone domain was last updated.","type":"string"},"managedAccountId":{"description":"The identifier of the AWS account that manages the domain.","type":"string"},"name":{"description":"The name of the Amazon DataZone domain.","type":"string"},"portalUrl":{"description":"The URL of the data portal for this Amazon DataZone domain.","type":"string"},"rootDomainUnitId":{"description":"The ID of the root domain in Amazon Datazone.","type":"string"},"singleSignOn":{"$ref":"#/types/aws-native:datazone:DomainSingleSignOn","description":"The single-sign on configuration of the Amazon DataZone domain."},"status":{"$ref":"#/types/aws-native:datazone:DomainStatus","description":"The status of the Amazon DataZone domain."},"tags":{"description":"The tags specified for the Amazon DataZone domain.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:datazone:getDomainUnit":{"description":"A domain unit enables you to easily organize your assets and other domain entities under specific business units and teams.","inputs":{"properties":{"domainId":{"type":"string","description":"The ID of the domain where the domain unit was created."},"id":{"type":"string","description":"The ID of the domain unit."}},"required":["domainId","id"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp at which the domain unit was created.","type":"string"},"description":{"description":"The description of the domain unit.","type":"string"},"domainId":{"description":"The ID of the domain where the domain unit was created.","type":"string"},"id":{"description":"The ID of the domain unit.","type":"string"},"identifier":{"description":"The identifier of the domain unit that you want to get.","type":"string"},"lastUpdatedAt":{"description":"The timestamp at which the domain unit was last updated.","type":"string"},"name":{"description":"The name of the domain unit.","type":"string"},"parentDomainUnitId":{"description":"The ID of the parent domain unit.","type":"string"}}}},"aws-native:datazone:getEnvironment":{"description":"Definition of AWS::DataZone::Environment Resource Type","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment is created."},"id":{"type":"string","description":"The ID of the Amazon DataZone environment."}},"required":["domainId","id"]},"outputs":{"properties":{"awsAccountId":{"description":"The AWS account in which the Amazon DataZone environment is created.","type":"string"},"awsAccountRegion":{"description":"The AWS region in which the Amazon DataZone environment is created.","type":"string"},"createdAt":{"description":"The timestamp of when the environment was created.","type":"string"},"createdBy":{"description":"The Amazon DataZone user who created the environment.","type":"string"},"description":{"description":"The description of the Amazon DataZone environment.","type":"string"},"domainId":{"description":"The identifier of the Amazon DataZone domain in which the environment is created.","type":"string"},"environmentBlueprintId":{"description":"The ID of the blueprint with which the Amazon DataZone environment was created.","type":"string"},"environmentProfileId":{"description":"The ID of the environment profile with which the Amazon DataZone environment was created.","type":"string"},"glossaryTerms":{"description":"The glossary terms that can be used in the Amazon DataZone environment.","items":{"type":"string"},"type":"array"},"id":{"description":"The ID of the Amazon DataZone environment.","type":"string"},"name":{"description":"The name of the environment.","type":"string"},"projectId":{"description":"The ID of the Amazon DataZone project in which the environment is created.","type":"string"},"provider":{"description":"The provider of the Amazon DataZone environment.","type":"string"},"status":{"$ref":"#/types/aws-native:datazone:EnvironmentStatus","description":"The status of the Amazon DataZone environment."},"updatedAt":{"description":"The timestamp of when the environment was updated.","type":"string"}}}},"aws-native:datazone:getEnvironmentActions":{"description":"Definition of AWS::DataZone::EnvironmentActions Resource Type","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the environment is created."},"environmentId":{"type":"string","description":"The identifier of the Amazon DataZone environment in which the action is taking place"},"id":{"type":"string","description":"The ID of the Amazon DataZone environment action."}},"required":["domainId","environmentId","id"]},"outputs":{"properties":{"description":{"description":"The description of the Amazon DataZone environment action.","type":"string"},"domainId":{"description":"The identifier of the Amazon DataZone domain in which the environment is created.","type":"string"},"environmentId":{"description":"The identifier of the Amazon DataZone environment in which the action is taking place","type":"string"},"id":{"description":"The ID of the Amazon DataZone environment action.","type":"string"},"name":{"description":"The name of the environment action.","type":"string"},"parameters":{"$ref":"#/types/aws-native:datazone:EnvironmentActionsAwsConsoleLinkParameters","description":"The parameters of the environment action."}}}},"aws-native:datazone:getEnvironmentBlueprintConfiguration":{"description":"Definition of AWS::DataZone::EnvironmentBlueprintConfiguration Resource Type","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which an environment blueprint exists."},"environmentBlueprintId":{"type":"string","description":"The identifier of the environment blueprint. This identifier should be used when creating environment profiles."}},"required":["domainId","environmentBlueprintId"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp of when an environment blueprint was created.","type":"string"},"domainId":{"description":"The identifier of the Amazon DataZone domain in which an environment blueprint exists.","type":"string"},"enabledRegions":{"description":"The enabled AWS Regions specified in a blueprint configuration.","items":{"type":"string"},"type":"array"},"environmentBlueprintId":{"description":"The identifier of the environment blueprint. This identifier should be used when creating environment profiles.","type":"string"},"manageAccessRoleArn":{"description":"The ARN of the manage access role.","type":"string"},"provisioningRoleArn":{"description":"The ARN of the provisioning role.","type":"string"},"regionalParameters":{"description":"The regional parameters of the environment blueprint.","items":{"$ref":"#/types/aws-native:datazone:EnvironmentBlueprintConfigurationRegionalParameter"},"type":"array"},"updatedAt":{"description":"The timestamp of when the environment blueprint was updated.","type":"string"}}}},"aws-native:datazone:getEnvironmentProfile":{"description":"AWS Datazone Environment Profile is pre-configured set of resources and blueprints that provide reusable templates for creating environments.","inputs":{"properties":{"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain in which this environment profile is created."},"id":{"type":"string","description":"The ID of this Amazon DataZone environment profile."}},"required":["domainId","id"]},"outputs":{"properties":{"awsAccountId":{"description":"The AWS account in which the Amazon DataZone environment is created.","type":"string"},"awsAccountRegion":{"description":"The AWS region in which this environment profile is created.","type":"string"},"createdAt":{"description":"The timestamp of when this environment profile was created.","type":"string"},"createdBy":{"description":"The Amazon DataZone user who created this environment profile.","type":"string"},"description":{"description":"The description of this Amazon DataZone environment profile.","type":"string"},"domainId":{"description":"The ID of the Amazon DataZone domain in which this environment profile is created.","type":"string"},"environmentBlueprintId":{"description":"The ID of the blueprint with which this environment profile is created.","type":"string"},"id":{"description":"The ID of this Amazon DataZone environment profile.","type":"string"},"name":{"description":"The name of this Amazon DataZone environment profile.","type":"string"},"projectId":{"description":"The identifier of the project in which to create the environment profile.","type":"string"},"updatedAt":{"description":"The timestamp of when this environment profile was updated.","type":"string"},"userParameters":{"description":"The user parameters of this Amazon DataZone environment profile.","items":{"$ref":"#/types/aws-native:datazone:EnvironmentProfileEnvironmentParameter"},"type":"array"}}}},"aws-native:datazone:getFormType":{"description":"Create and manage form types in Amazon Datazone","inputs":{"properties":{"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which this metadata form type is created."},"formTypeIdentifier":{"type":"string","description":"The ID of this Amazon DataZone metadata form type."}},"required":["domainIdentifier","formTypeIdentifier"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp of when this Amazon DataZone metadata form type was created.","type":"string"},"createdBy":{"description":"The user who created this Amazon DataZone metadata form type.","type":"string"},"description":{"description":"The description of this Amazon DataZone metadata form type.","type":"string"},"domainId":{"description":"The ID of the Amazon DataZone domain in which this metadata form type is created.","type":"string"},"formTypeIdentifier":{"description":"The ID of this Amazon DataZone metadata form type.","type":"string"},"model":{"$ref":"#/types/aws-native:datazone:FormTypeModel","description":"The model of this Amazon DataZone metadata form type."},"owningProjectId":{"description":"The ID of the project that owns this Amazon DataZone metadata form type.","type":"string"},"owningProjectIdentifier":{"description":"The ID of the Amazon DataZone project that owns this metadata form type.","type":"string"},"revision":{"description":"The revision of this Amazon DataZone metadata form type.","type":"string"},"status":{"$ref":"#/types/aws-native:datazone:FormTypeStatus","description":"The status of this Amazon DataZone metadata form type."}}}},"aws-native:datazone:getGroupProfile":{"description":"Group profiles represent groups of Amazon DataZone users. Groups can be manually created, or mapped to Active Directory groups of enterprise customers. In Amazon DataZone, groups serve two purposes. First, a group can map to a team of users in the organizational chart, and thus reduce the administrative work of a Amazon DataZone project owner when there are new employees joining or leaving a team. Second, corporate administrators use Active Directory groups to manage and update user statuses and so Amazon DataZone domain administrators can use these group memberships to implement Amazon DataZone domain policies.","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the group profile is created."},"id":{"type":"string","description":"The ID of the Amazon DataZone group profile."}},"required":["domainId","id"]},"outputs":{"properties":{"domainId":{"description":"The identifier of the Amazon DataZone domain in which the group profile is created.","type":"string"},"groupName":{"description":"The group-name of the Group Profile.","type":"string"},"id":{"description":"The ID of the Amazon DataZone group profile.","type":"string"},"status":{"$ref":"#/types/aws-native:datazone:GroupProfileStatus","description":"The status of a group profile."}}}},"aws-native:datazone:getOwner":{"description":"A owner can set up authorization permissions on their resources.","inputs":{"properties":{"domainIdentifier":{"type":"string","description":"The ID of the domain in which you want to add the entity owner."},"entityIdentifier":{"type":"string","description":"The ID of the entity to which you want to add an owner."},"entityType":{"$ref":"#/types/aws-native:datazone:OwnerEntityType","description":"The type of an entity."},"ownerIdentifier":{"type":"string","description":"The ID of the entity to which you want to add an owner."},"ownerType":{"$ref":"#/types/aws-native:datazone:OwnerType","description":"The owner that you want to add to the entity."}},"required":["domainIdentifier","entityType","entityIdentifier","ownerType","ownerIdentifier"]},"outputs":{"properties":{"ownerIdentifier":{"description":"The ID of the entity to which you want to add an owner.","type":"string"},"ownerType":{"$ref":"#/types/aws-native:datazone:OwnerType","description":"The owner that you want to add to the entity."}}}},"aws-native:datazone:getPolicyGrant":{"description":"Policy Grant in AWS DataZone is an explicit authorization assignment that allows a specific principal (user, group, or project) to perform particular actions (such as creating glossary terms, managing projects, or accessing resources) on governed resources within a certain scope (like a Domain Unit or Project). Policy Grants are essentially the mechanism by which DataZone enforces fine-grained, role-based access control beyond what is possible through AWS IAM alone.","inputs":{"properties":{"domainIdentifier":{"type":"string","description":"The ID of the domain where you want to add a policy grant."},"entityIdentifier":{"type":"string","description":"The ID of the entity (resource) to which you want to add a policy grant."},"entityType":{"$ref":"#/types/aws-native:datazone:PolicyGrantTargetEntityType","description":"The type of entity (resource) to which the grant is added."},"grantId":{"type":"string","description":"The unique identifier of the policy grant returned by the AddPolicyGrant API"},"policyType":{"$ref":"#/types/aws-native:datazone:PolicyGrantManagedPolicyType","description":"The type of policy that you want to grant."}},"required":["domainIdentifier","grantId","entityIdentifier","entityType","policyType"]},"outputs":{"properties":{"createdAt":{"description":"Specifies the timestamp at which policy grant member was created.","type":"string"},"createdBy":{"description":"Specifies the user who created the policy grant member.","type":"string"},"grantId":{"description":"The unique identifier of the policy grant returned by the AddPolicyGrant API","type":"string"}}}},"aws-native:datazone:getProject":{"description":"Amazon DataZone projects are business use case–based groupings of people, assets (data), and tools used to simplify access to the AWS analytics.","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the project was created."},"id":{"type":"string","description":"The ID of the Amazon DataZone project."}},"required":["domainId","id"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp of when the project was created.","type":"string"},"createdBy":{"description":"The Amazon DataZone user who created the project.","type":"string"},"description":{"description":"The description of the Amazon DataZone project.","type":"string"},"domainId":{"description":"The identifier of the Amazon DataZone domain in which the project was created.","type":"string"},"domainUnitId":{"description":"The ID of the domain unit.","type":"string"},"glossaryTerms":{"description":"The glossary terms that can be used in this Amazon DataZone project.","items":{"type":"string"},"type":"array"},"id":{"description":"The ID of the Amazon DataZone project.","type":"string"},"lastUpdatedAt":{"description":"The timestamp of when the project was last updated.","type":"string"},"name":{"description":"The name of the Amazon DataZone project.","type":"string"},"projectStatus":{"$ref":"#/types/aws-native:datazone:ProjectStatus","description":"The status of the project."}}}},"aws-native:datazone:getProjectMembership":{"description":"Definition of AWS::DataZone::ProjectMembership Resource Type","inputs":{"properties":{"domainIdentifier":{"type":"string","description":"The ID of the Amazon DataZone domain in which project membership is created."},"memberIdentifier":{"type":"string"},"memberIdentifierType":{"$ref":"#/types/aws-native:datazone:ProjectMembershipMemberIdentifierType"},"projectIdentifier":{"type":"string","description":"The ID of the project for which this project membership was created."}},"required":["domainIdentifier","memberIdentifier","memberIdentifierType","projectIdentifier"]},"outputs":{"properties":{"memberIdentifier":{"type":"string"},"memberIdentifierType":{"$ref":"#/types/aws-native:datazone:ProjectMembershipMemberIdentifierType"}}}},"aws-native:datazone:getProjectProfile":{"description":"Definition of AWS::DataZone::ProjectProfile Resource Type","inputs":{"properties":{"domainIdentifier":{"type":"string","description":"A domain ID of the project profile."},"identifier":{"type":"string","description":"Project profile ID."}},"required":["domainIdentifier","identifier"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp of when the project profile was created.","type":"string"},"createdBy":{"description":"The user who created the project profile.","type":"string"},"description":{"description":"The description of the project profile.","type":"string"},"domainId":{"description":"The domain ID of the project profile.","type":"string"},"domainUnitId":{"description":"The domain unit ID of the project profile.","type":"string"},"environmentConfigurations":{"description":"Environment configurations of a project profile.","items":{"$ref":"#/types/aws-native:datazone:ProjectProfileEnvironmentConfiguration"},"type":"array"},"id":{"description":"The ID of the project profile.","type":"string"},"identifier":{"description":"Project profile ID.","type":"string"},"lastUpdatedAt":{"description":"The timestamp at which a project profile was last updated.","type":"string"},"name":{"description":"The name of a project profile.","type":"string"},"status":{"$ref":"#/types/aws-native:datazone:ProjectProfileStatus","description":"The status of a project profile."}}}},"aws-native:datazone:getSubscriptionTarget":{"description":"Subscription targets enables one to access the data to which you have subscribed in your projects.","inputs":{"properties":{"domainId":{"type":"string","description":"The ID of the Amazon DataZone domain in which subscription target is created."},"environmentId":{"type":"string","description":"The ID of the environment in which subscription target is created."},"id":{"type":"string","description":"The ID of the subscription target."}},"required":["domainId","environmentId","id"]},"outputs":{"properties":{"applicableAssetTypes":{"description":"The asset types that can be included in the subscription target.","items":{"type":"string"},"type":"array"},"authorizedPrincipals":{"description":"The authorized principals of the subscription target.","items":{"type":"string"},"type":"array"},"createdAt":{"description":"The timestamp of when the subscription target was created.","type":"string"},"createdBy":{"description":"The Amazon DataZone user who created the subscription target.","type":"string"},"domainId":{"description":"The ID of the Amazon DataZone domain in which subscription target is created.","type":"string"},"environmentId":{"description":"The ID of the environment in which subscription target is created.","type":"string"},"id":{"description":"The ID of the subscription target.","type":"string"},"manageAccessRole":{"description":"The manage access role that is used to create the subscription target.","type":"string"},"name":{"description":"The name of the subscription target.","type":"string"},"projectId":{"description":"The identifier of the project specified in the subscription target.","type":"string"},"provider":{"description":"The provider of the subscription target.","type":"string"},"subscriptionTargetConfig":{"description":"The configuration of the subscription target.","items":{"$ref":"#/types/aws-native:datazone:SubscriptionTargetForm"},"type":"array"},"updatedAt":{"description":"The timestamp of when the subscription target was updated.","type":"string"},"updatedBy":{"description":"The Amazon DataZone user who updated the subscription target.","type":"string"}}}},"aws-native:datazone:getUserProfile":{"description":"A user profile represents Amazon DataZone users. Amazon DataZone supports both IAM roles and SSO identities to interact with the Amazon DataZone Management Console and the data portal for different purposes. Domain administrators use IAM roles to perform the initial administrative domain-related work in the Amazon DataZone Management Console, including creating new Amazon DataZone domains, configuring metadata form types, and implementing policies. Data workers use their SSO corporate identities via Identity Center to log into the Amazon DataZone Data Portal and access projects where they have memberships.","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the Amazon DataZone domain in which the user profile is created."},"id":{"type":"string","description":"The ID of the Amazon DataZone user profile."}},"required":["domainId","id"]},"outputs":{"properties":{"details":{"oneOf":[{"$ref":"#/types/aws-native:datazone:UserProfileDetails0Properties"},{"$ref":"#/types/aws-native:datazone:UserProfileDetails1Properties"}]},"domainId":{"description":"The identifier of the Amazon DataZone domain in which the user profile is created.","type":"string"},"id":{"description":"The ID of the Amazon DataZone user profile.","type":"string"},"status":{"$ref":"#/types/aws-native:datazone:UserProfileStatus","description":"The status of the user profile."},"type":{"$ref":"#/types/aws-native:datazone:UserProfileType","description":"The type of the user profile."}}}},"aws-native:dax:getSubnetGroup":{"description":"Resource Type definition for AWS::DAX::SubnetGroup","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the subnet group.","type":"string"},"id":{"type":"string"},"subnetIds":{"description":"A list of VPC subnet IDs for the subnet group.","items":{"type":"string"},"type":"array"}}}},"aws-native:deadline:getFarm":{"description":"Definition of AWS::Deadline::Farm Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the farm."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) assigned to the farm.","type":"string"},"costScaleFactor":{"type":"number"},"description":{"description":"A description of the farm that helps identify what the farm is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"displayName":{"description":"The display name of the farm.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"farmId":{"description":"The farm ID.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:deadline:getFleet":{"description":"Definition of AWS::Deadline::Fleet Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) assigned to the fleet."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) assigned to the fleet.","type":"string"},"capabilities":{"$ref":"#/types/aws-native:deadline:FleetCapabilities"},"configuration":{"description":"The configuration details for the fleet.","oneOf":[{"$ref":"#/types/aws-native:deadline:FleetConfiguration0Properties"},{"$ref":"#/types/aws-native:deadline:FleetConfiguration1Properties"}]},"description":{"description":"A description that helps identify what the fleet is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"displayName":{"description":"The display name of the fleet summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"fleetId":{"description":"The fleet ID.","type":"string"},"hostConfiguration":{"$ref":"#/types/aws-native:deadline:FleetHostConfiguration","description":"Provides a script that runs as a worker is starting up that you can use to provide additional configuration for workers in your fleet.\n\nTo remove a script from a fleet, use the [UpdateFleet](https://docs.aws.amazon.com/deadline-cloud/latest/APIReference/API_UpdateFleet.html) operation with the `hostConfiguration` `scriptBody` parameter set to an empty string (\"\")."},"maxWorkerCount":{"description":"The maximum number of workers specified in the fleet.","type":"integer"},"minWorkerCount":{"description":"The minimum number of workers in the fleet.","type":"integer"},"roleArn":{"description":"The IAM role that workers in the fleet use when processing jobs.","type":"string"},"status":{"$ref":"#/types/aws-native:deadline:FleetStatus","description":"The status of the fleet."},"statusMessage":{"description":"A message that communicates a suspended status of the fleet.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workerCount":{"description":"The number of workers in the fleet summary.","type":"integer"}}}},"aws-native:deadline:getLicenseEndpoint":{"description":"Definition of AWS::Deadline::LicenseEndpoint Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the license endpoint."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the license endpoint.","type":"string"},"dnsName":{"description":"The DNS name of the license server endpoint.","type":"string"},"licenseEndpointId":{"description":"The license endpoint ID.","type":"string"},"status":{"$ref":"#/types/aws-native:deadline:LicenseEndpointStatus","description":"The status of the license endpoint."},"statusMessage":{"description":"The status message of the license endpoint.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:deadline:getLimit":{"description":"Definition of AWS::Deadline::Limit Resource Type","inputs":{"properties":{"farmId":{"type":"string","description":"The unique identifier of the farm that contains the limit."},"limitId":{"type":"string","description":"The unique identifier of the limit."}},"required":["farmId","limitId"]},"outputs":{"properties":{"currentCount":{"description":"The number of resources from the limit that are being used by jobs. The result is delayed and may not be the count at the time that you called the operation.","type":"integer"},"description":{"description":"A description of the limit. A clear description helps you identify the purpose of the limit.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"displayName":{"description":"The name of the limit used in lists to identify the limit.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"limitId":{"description":"The unique identifier of the limit.","type":"string"},"maxCount":{"description":"The maximum number of resources constrained by this limit. When all of the resources are in use, steps that require the limit won't be scheduled until the resource is available.\n\nThe `maxValue` must not be 0. If the value is -1, there is no restriction on the number of resources that can be acquired for this limit.","type":"integer"}}}},"aws-native:deadline:getMeteredProduct":{"description":"Definition of AWS::Deadline::MeteredProduct Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the metered product."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the metered product.","type":"string"},"family":{"description":"The family to which the metered product belongs.","type":"string"},"port":{"description":"The port on which the metered product should run.","type":"integer"},"vendor":{"description":"The vendor.","type":"string"}}}},"aws-native:deadline:getMonitor":{"description":"Definition of AWS::Deadline::Monitor Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the monitor."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the monitor.","type":"string"},"displayName":{"description":"The name of the monitor that displays on the Deadline Cloud console.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"identityCenterApplicationArn":{"description":"The Amazon Resource Name that the IAM Identity Center assigned to the monitor when it was created.","type":"string"},"monitorId":{"description":"The unique identifier for the monitor.","type":"string"},"roleArn":{"description":"The Amazon Resource Name of the IAM role for the monitor. Users of the monitor use this role to access Deadline Cloud resources.","type":"string"},"subdomain":{"description":"The subdomain used for the monitor URL. The full URL of the monitor is subdomain.Region.deadlinecloud.amazonaws.com.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"url":{"description":"The complete URL of the monitor. The full URL of the monitor is subdomain.Region.deadlinecloud.amazonaws.com.","type":"string"}}}},"aws-native:deadline:getQueue":{"description":"Definition of AWS::Deadline::Queue Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the queue."}},"required":["arn"]},"outputs":{"properties":{"allowedStorageProfileIds":{"description":"The identifiers of the storage profiles that this queue can use to share assets between workers using different operating systems.","items":{"type":"string"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the queue.","type":"string"},"defaultBudgetAction":{"$ref":"#/types/aws-native:deadline:QueueDefaultQueueBudgetAction","description":"The default action taken on a queue summary if a budget wasn't configured."},"description":{"description":"A description of the queue that helps identify what the queue is used for.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"displayName":{"description":"The display name of the queue summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"jobAttachmentSettings":{"$ref":"#/types/aws-native:deadline:QueueJobAttachmentSettings","description":"The job attachment settings. These are the Amazon S3 bucket name and the Amazon S3 prefix."},"jobRunAsUser":{"$ref":"#/types/aws-native:deadline:QueueJobRunAsUser","description":"Identifies the user for a job."},"queueId":{"description":"The queue ID.","type":"string"},"requiredFileSystemLocationNames":{"description":"The file system location that the queue uses.","items":{"type":"string"},"type":"array"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role that workers use when running jobs in this queue.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:deadline:getQueueEnvironment":{"description":"Definition of AWS::Deadline::QueueEnvironment Resource Type","inputs":{"properties":{"farmId":{"type":"string","description":"The identifier assigned to the farm that contains the queue."},"queueEnvironmentId":{"type":"string","description":"The queue environment ID."},"queueId":{"type":"string","description":"The unique identifier of the queue that contains the environment."}},"required":["farmId","queueId","queueEnvironmentId"]},"outputs":{"properties":{"name":{"description":"The name of the queue environment.","type":"string"},"priority":{"description":"The queue environment's priority.","type":"integer"},"queueEnvironmentId":{"description":"The queue environment ID.","type":"string"},"template":{"description":"A JSON or YAML template that describes the processing environment for the queue.","type":"string"},"templateType":{"$ref":"#/types/aws-native:deadline:QueueEnvironmentEnvironmentTemplateType","description":"Specifies whether the template for the queue environment is JSON or YAML."}}}},"aws-native:deadline:getStorageProfile":{"description":"Definition of AWS::Deadline::StorageProfile Resource Type","inputs":{"properties":{"farmId":{"type":"string","description":"The unique identifier of the farm that contains the storage profile."},"storageProfileId":{"type":"string","description":"The storage profile ID."}},"required":["farmId","storageProfileId"]},"outputs":{"properties":{"displayName":{"description":"The display name of the storage profile summary to update.\n\n\u003e This field can store any content. Escape or encode this content before displaying it on a webpage or any other system that might interpret the content of this field.","type":"string"},"fileSystemLocations":{"description":"Operating system specific file system path to the storage location.","items":{"$ref":"#/types/aws-native:deadline:StorageProfileFileSystemLocation"},"type":"array"},"osFamily":{"$ref":"#/types/aws-native:deadline:StorageProfileOperatingSystemFamily","description":"The operating system (OS) family."},"storageProfileId":{"description":"The storage profile ID.","type":"string"}}}},"aws-native:detective:getGraph":{"description":"Resource schema for AWS::Detective::Graph","inputs":{"properties":{"arn":{"type":"string","description":"The Detective graph ARN"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Detective graph ARN","type":"string"},"autoEnableMembers":{"description":"Indicates whether to automatically enable new organization accounts as member accounts in the organization behavior graph.","type":"boolean"},"tags":{"description":"The tag values to assign to the new behavior graph.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:detective:getMemberInvitation":{"description":"Resource schema for AWS::Detective::MemberInvitation","inputs":{"properties":{"graphArn":{"type":"string","description":"The ARN of the graph to which the member account will be invited"},"memberId":{"type":"string","description":"The AWS account ID to be invited to join the graph as a member"}},"required":["graphArn","memberId"]},"outputs":{"properties":{"memberEmailAddress":{"description":"The root email address for the account to be invited, for validation. Updating this field has no effect.","type":"string"}}}},"aws-native:detective:getOrganizationAdmin":{"description":"Resource schema for AWS::Detective::OrganizationAdmin","inputs":{"properties":{"accountId":{"type":"string","description":"The account ID of the account that should be registered as your Organization's delegated administrator for Detective"}},"required":["accountId"]},"outputs":{"properties":{"graphArn":{"description":"The Detective graph ARN","type":"string"}}}},"aws-native:devicefarm:getDevicePool":{"description":"Resource Type definition for a Device Pool for a given Device Farm Project","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the device pool. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the device pool. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* .","type":"string"},"description":{"description":"The device pool's description.","type":"string"},"maxDevices":{"description":"The number of devices that Device Farm can add to your device pool. Device Farm adds devices that are available and meet the criteria that you assign for the `rules` parameter. Depending on how many devices meet these constraints, your device pool might contain fewer devices than the value for this parameter.\n\nBy specifying the maximum number of devices, you can control the costs that you incur by running tests.","type":"integer"},"name":{"description":"The device pool's name.","type":"string"},"rules":{"description":"The device pool's rules.","items":{"$ref":"#/types/aws-native:devicefarm:DevicePoolRule"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:devicefarm:getInstanceProfile":{"description":"Resource Type definition for a Device Farm Instance Profile","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the instance profile. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the instance profile. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* .","type":"string"},"description":{"description":"The description of the instance profile.","type":"string"},"excludeAppPackagesFromCleanup":{"description":"An array of strings containing the list of app packages that should not be cleaned up from the device after a test run completes.\n\nThe list of packages is considered only if you set `packageCleanup` to `true` .","items":{"type":"string"},"type":"array"},"name":{"description":"The name of the instance profile.","type":"string"},"packageCleanup":{"description":"When set to `true` , Device Farm removes app packages after a test run. The default value is `false` for private devices.","type":"boolean"},"rebootAfterUse":{"description":"When set to `true` , Device Farm reboots the instance after a test run. The default value is `true` .","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:devicefarm:getNetworkProfile":{"description":"Resource Type definition for a Device Farm Network Profile","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the network profile. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the network profile. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* .","type":"string"},"description":{"description":"The description of the network profile.","type":"string"},"downlinkBandwidthBits":{"description":"The data throughput rate in bits per second, as an integer from 0 to 104857600.","type":"integer"},"downlinkDelayMs":{"description":"Delay time for all packets to destination in milliseconds as an integer from 0 to 2000.","type":"integer"},"downlinkJitterMs":{"description":"Time variation in the delay of received packets in milliseconds as an integer from 0 to 2000.","type":"integer"},"downlinkLossPercent":{"description":"Proportion of received packets that fail to arrive from 0 to 100 percent.","type":"integer"},"name":{"description":"The name of the network profile.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"uplinkBandwidthBits":{"description":"The data throughput rate in bits per second, as an integer from 0 to 104857600.","type":"integer"},"uplinkDelayMs":{"description":"Delay time for all packets to destination in milliseconds as an integer from 0 to 2000.","type":"integer"},"uplinkJitterMs":{"description":"Time variation in the delay of received packets in milliseconds as an integer from 0 to 2000.","type":"integer"},"uplinkLossPercent":{"description":"Proportion of transmitted packets that fail to arrive from 0 to 100 percent.","type":"integer"}}}},"aws-native:devicefarm:getProject":{"description":"Resource Type definition for a Device Farm Project","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the project. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the project. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* .","type":"string"},"defaultJobTimeoutMinutes":{"description":"Sets the execution timeout value (in minutes) for a project. All test runs in this project use the specified execution timeout value unless overridden when scheduling a run.","type":"integer"},"environmentVariables":{"items":{"$ref":"#/types/aws-native:devicefarm:ProjectEnvironmentVariable"},"type":"array"},"executionRoleArn":{"type":"string"},"name":{"description":"The project's name.","type":"string"},"tags":{"description":"The tags to add to the resource. A tag is an array of key-value pairs. Tag keys can have a maximum character length of 128 characters. Tag values can have a maximum length of 256 characters.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcConfig":{"$ref":"#/types/aws-native:devicefarm:ProjectVpcConfig","description":"The VPC security groups and subnets that are attached to a project."}}}},"aws-native:devicefarm:getTestGridProject":{"description":"Resource Type definition for a Device Farm TestGrid Project","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the `TestGrid` project. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the `TestGrid` project. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* .","type":"string"},"description":{"description":"A human-readable description for the project.","type":"string"},"name":{"description":"A human-readable name for the project.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:devicefarm:getVpceConfiguration":{"description":"Resource Type definition for a Device Farm VPCE Configuration","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VPC endpoint. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the VPC endpoint. See [Amazon resource names](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference guide* .","type":"string"},"serviceDnsName":{"description":"The DNS name that Device Farm will use to map to the private service you want to access.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpceConfigurationDescription":{"description":"An optional description that provides details about your VPC endpoint configuration.","type":"string"},"vpceConfigurationName":{"description":"The friendly name you give to your VPC endpoint configuration to manage your configurations more easily.","type":"string"},"vpceServiceName":{"description":"The name of the VPC endpoint service that you want to access from Device Farm.\n\nThe name follows the format `com.amazonaws.vpce.us-west-2.vpce-svc-id` .","type":"string"}}}},"aws-native:devopsguru:getLogAnomalyDetectionIntegration":{"description":"This resource schema represents the LogAnomalyDetectionIntegration resource in the Amazon DevOps Guru.","inputs":{"properties":{"accountId":{"type":"string","description":"The account ID associated with the integration of DevOps Guru with CloudWatch log groups for log anomaly detection."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The account ID associated with the integration of DevOps Guru with CloudWatch log groups for log anomaly detection.","type":"string"}}}},"aws-native:devopsguru:getNotificationChannel":{"description":"This resource schema represents the NotificationChannel resource in the Amazon DevOps Guru.","inputs":{"properties":{"id":{"type":"string","description":"The ID of a notification channel."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of a notification channel.","type":"string"}}}},"aws-native:devopsguru:getResourceCollection":{"description":"This resource schema represents the ResourceCollection resource in the Amazon DevOps Guru.","inputs":{"properties":{"resourceCollectionType":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionType","description":"The type of ResourceCollection"}},"required":["resourceCollectionType"]},"outputs":{"properties":{"resourceCollectionFilter":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionFilter","description":"Information about a filter used to specify which AWS resources are analyzed for anomalous behavior by DevOps Guru."},"resourceCollectionType":{"$ref":"#/types/aws-native:devopsguru:ResourceCollectionType","description":"The type of ResourceCollection"}}}},"aws-native:directconnect:getConnection":{"description":"Resource Type definition for AWS::DirectConnect::Connection","inputs":{"properties":{"connectionArn":{"type":"string","description":"The ARN of the connection."}},"required":["connectionArn"]},"outputs":{"properties":{"connectionArn":{"description":"The ARN of the connection.","type":"string"},"connectionId":{"description":"The ID of the connection.","type":"string"},"connectionName":{"description":"The name of the connection.","type":"string"},"connectionState":{"description":"The state of the connection.","type":"string"},"lagId":{"description":"The ID or ARN of the LAG to associate the connection with.","type":"string"},"tags":{"description":"The tags associated with the connection.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:directconnect:getDirectConnectGateway":{"description":"Resource Type definition for AWS::DirectConnect::DirectConnectGateway","inputs":{"properties":{"directConnectGatewayArn":{"type":"string","description":"The ARN of the Direct Connect gateway."}},"required":["directConnectGatewayArn"]},"outputs":{"properties":{"directConnectGatewayArn":{"description":"The ARN of the Direct Connect gateway.","type":"string"},"directConnectGatewayId":{"description":"The ID of the Direct Connect gateway.","type":"string"},"directConnectGatewayName":{"description":"The name of the Direct Connect gateway.","type":"string"},"tags":{"description":"The tags associated with the Direct Connect gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:directconnect:getDirectConnectGatewayAssociation":{"description":"Resource Type definition for AWS::DirectConnect::DirectConnectGatewayAssociation","inputs":{"properties":{"associationId":{"type":"string","description":"The ID of the Direct Connect gateway association."}},"required":["associationId"]},"outputs":{"properties":{"allowedPrefixesToDirectConnectGateway":{"description":"The Amazon VPC prefixes to advertise to the Direct Connect gateway. This parameter is required when you create an association to a transit gateway.","items":{"type":"string"},"type":"array"},"associationId":{"description":"The ID of the Direct Connect gateway association.","type":"string"}}}},"aws-native:directconnect:getLag":{"description":"Resource Type definition for AWS::DirectConnect::Lag","inputs":{"properties":{"lagArn":{"type":"string","description":"The ARN of the LAG."}},"required":["lagArn"]},"outputs":{"properties":{"lagArn":{"description":"The ARN of the LAG.","type":"string"},"lagId":{"description":"The ID of the LAG.","type":"string"},"lagName":{"description":"The name of the LAG.","type":"string"},"lagState":{"description":"The state of the LAG.","type":"string"},"minimumLinks":{"description":"The minimum number of physical dedicated connections that must be operational for the LAG itself to be operational.","type":"integer"},"tags":{"description":"The tags associated with the LAG.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:directconnect:getPrivateVirtualInterface":{"description":"Resource Type definition for AWS::DirectConnect::PrivateVirtualInterface","inputs":{"properties":{"virtualInterfaceArn":{"type":"string","description":"The ID of the virtual interface."}},"required":["virtualInterfaceArn"]},"outputs":{"properties":{"bgpPeers":{"description":"The BGP peers configured on this virtual interface.","items":{"$ref":"#/types/aws-native:directconnect:PrivateVirtualInterfaceBgpPeer"},"type":"array"},"connectionId":{"description":"The ID or ARN of the connection or LAG.","type":"string"},"enableSiteLink":{"description":"Indicates whether to enable or disable SiteLink.","type":"boolean"},"mtu":{"description":"The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 9001. The default value is 1500.","type":"integer"},"tags":{"description":"The tags associated with the private virtual interface.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"virtualInterfaceArn":{"description":"The ID of the virtual interface.","type":"string"},"virtualInterfaceId":{"description":"The ID of the virtual interface.","type":"string"},"virtualInterfaceName":{"description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-).","type":"string"}}}},"aws-native:directconnect:getPublicVirtualInterface":{"description":"Resource Type definition for AWS::DirectConnect::PublicVirtualInterface","inputs":{"properties":{"virtualInterfaceArn":{"type":"string","description":"The ARN of the virtual interface."}},"required":["virtualInterfaceArn"]},"outputs":{"properties":{"bgpPeers":{"description":"The BGP peers configured on this virtual interface.","items":{"$ref":"#/types/aws-native:directconnect:PublicVirtualInterfaceBgpPeer"},"type":"array"},"connectionId":{"description":"The ID or ARN of the connection or LAG.","type":"string"},"tags":{"description":"The tags associated with the public virtual interface.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"virtualInterfaceArn":{"description":"The ARN of the virtual interface.","type":"string"},"virtualInterfaceId":{"description":"The ID of the virtual interface.","type":"string"},"virtualInterfaceName":{"description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-).","type":"string"}}}},"aws-native:directconnect:getTransitVirtualInterface":{"description":"Resource Type definition for AWS::DirectConnect::TransitVirtualInterface","inputs":{"properties":{"virtualInterfaceArn":{"type":"string","description":"The ARN of the virtual interface."}},"required":["virtualInterfaceArn"]},"outputs":{"properties":{"bgpPeers":{"description":"The BGP peers configured on this virtual interface..","items":{"$ref":"#/types/aws-native:directconnect:TransitVirtualInterfaceBgpPeer"},"type":"array"},"connectionId":{"description":"The ID or ARN of the connection or LAG.","type":"string"},"enableSiteLink":{"description":"Indicates whether to enable or disable SiteLink.","type":"boolean"},"mtu":{"description":"The maximum transmission unit (MTU), in bytes. The supported values are 1500 and 9001. The default value is 1500.","type":"integer"},"tags":{"description":"The tags associated with the private virtual interface.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"virtualInterfaceArn":{"description":"The ARN of the virtual interface.","type":"string"},"virtualInterfaceId":{"description":"The ID of the virtual interface.","type":"string"},"virtualInterfaceName":{"description":"The name of the virtual interface assigned by the customer network. The name has a maximum of 100 characters. The following are valid characters: a-z, 0-9 and a hyphen (-).","type":"string"}}}},"aws-native:directoryservice:getSimpleAd":{"description":"Resource Type definition for AWS::DirectoryService::SimpleAD","inputs":{"properties":{"directoryId":{"type":"string","description":"The unique identifier for a directory."}},"required":["directoryId"]},"outputs":{"properties":{"alias":{"description":"The alias for a directory.","type":"string"},"directoryId":{"description":"The unique identifier for a directory.","type":"string"},"dnsIpAddresses":{"description":"The IP addresses of the DNS servers for the directory, such as [ \"172.31.3.154\", \"172.31.63.203\" ].","items":{"type":"string"},"type":"array"},"enableSso":{"description":"Whether to enable single sign-on for a Simple Active Directory in AWS.","type":"boolean"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:dms:getDataMigration":{"description":"Resource schema for AWS::DMS::DataMigration.","inputs":{"properties":{"dataMigrationArn":{"type":"string","description":"The property describes an ARN of the data migration."}},"required":["dataMigrationArn"]},"outputs":{"properties":{"dataMigrationArn":{"description":"The property describes an ARN of the data migration.","type":"string"},"dataMigrationCreateTime":{"description":"The property describes the create time of the data migration.","type":"string"},"dataMigrationName":{"description":"The property describes a name to identify the data migration.","type":"string"},"dataMigrationSettings":{"$ref":"#/types/aws-native:dms:DataMigrationSettings","description":"The property describes the settings for the data migration."},"dataMigrationType":{"$ref":"#/types/aws-native:dms:DataMigrationType","description":"The property describes the type of migration."},"migrationProjectIdentifier":{"description":"The property describes an identifier for the migration project. It is used for describing/deleting/modifying can be name/arn","type":"string"},"serviceAccessRoleArn":{"description":"The property describes Amazon Resource Name (ARN) of the service access role.","type":"string"},"sourceDataSettings":{"description":"The property describes the settings for the data migration.","items":{"$ref":"#/types/aws-native:dms:DataMigrationSourceDataSettings"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:dms:getDataProvider":{"description":"Resource schema for AWS::DMS::DataProvider","inputs":{"properties":{"dataProviderArn":{"type":"string","description":"The data provider ARN."}},"required":["dataProviderArn"]},"outputs":{"properties":{"dataProviderArn":{"description":"The data provider ARN.","type":"string"},"dataProviderCreationTime":{"description":"The data provider creation time.","type":"string"},"dataProviderName":{"description":"The property describes a name to identify the data provider.","type":"string"},"description":{"description":"The optional description of the data provider.","type":"string"},"engine":{"$ref":"#/types/aws-native:dms:DataProviderEngine","description":"The property describes a data engine for the data provider."},"settings":{"$ref":"#/types/aws-native:dms:SettingsProperties","description":"The property identifies the exact type of settings for the data provider."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:dms:getInstanceProfile":{"description":"Resource schema for AWS::DMS::InstanceProfile.","inputs":{"properties":{"instanceProfileArn":{"type":"string","description":"The property describes an ARN of the instance profile."}},"required":["instanceProfileArn"]},"outputs":{"properties":{"availabilityZone":{"description":"The property describes an availability zone of the instance profile.","type":"string"},"description":{"description":"The optional description of the instance profile.","type":"string"},"instanceProfileArn":{"description":"The property describes an ARN of the instance profile.","type":"string"},"instanceProfileCreationTime":{"description":"The property describes a creating time of the instance profile.","type":"string"},"instanceProfileName":{"description":"The property describes a name for the instance profile.","type":"string"},"kmsKeyArn":{"description":"The property describes kms key arn for the instance profile.","type":"string"},"networkType":{"$ref":"#/types/aws-native:dms:InstanceProfileNetworkType","description":"The property describes a network type for the instance profile."},"publiclyAccessible":{"description":"The property describes the publicly accessible of the instance profile","type":"boolean"},"subnetGroupIdentifier":{"description":"The property describes a subnet group identifier for the instance profile.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcSecurityGroups":{"description":"The property describes vps security groups for the instance profile.","items":{"type":"string"},"type":"array"}}}},"aws-native:dms:getMigrationProject":{"description":"Resource schema for AWS::DMS::MigrationProject","inputs":{"properties":{"migrationProjectArn":{"type":"string","description":"The property describes an ARN of the migration project."}},"required":["migrationProjectArn"]},"outputs":{"properties":{"description":{"description":"The optional description of the migration project.","type":"string"},"instanceProfileArn":{"description":"The property describes an instance profile arn for the migration project. For read","type":"string"},"instanceProfileName":{"description":"The property describes an instance profile name for the migration project. For read","type":"string"},"migrationProjectArn":{"description":"The property describes an ARN of the migration project.","type":"string"},"migrationProjectCreationTime":{"description":"The property describes a creating time of the migration project.","type":"string"},"migrationProjectName":{"description":"The property describes a name to identify the migration project.","type":"string"},"schemaConversionApplicationAttributes":{"$ref":"#/types/aws-native:dms:SchemaConversionApplicationAttributesProperties","description":"The property describes schema conversion application attributes for the migration project."},"sourceDataProviderDescriptors":{"description":"The property describes source data provider descriptors for the migration project.","items":{"$ref":"#/types/aws-native:dms:MigrationProjectDataProviderDescriptor"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetDataProviderDescriptors":{"description":"The property describes target data provider descriptors for the migration project.","items":{"$ref":"#/types/aws-native:dms:MigrationProjectDataProviderDescriptor"},"type":"array"},"transformationRules":{"description":"The property describes transformation rules for the migration project.","type":"string"}}}},"aws-native:dms:getReplicationConfig":{"description":"A replication configuration that you later provide to configure and start a AWS DMS Serverless replication","inputs":{"properties":{"replicationConfigArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Replication Config"}},"required":["replicationConfigArn"]},"outputs":{"properties":{"computeConfig":{"$ref":"#/types/aws-native:dms:ReplicationConfigComputeConfig","description":"Configuration parameters for provisioning an AWS DMS Serverless replication."},"replicationConfigArn":{"description":"The Amazon Resource Name (ARN) of the Replication Config","type":"string"},"replicationConfigIdentifier":{"description":"A unique identifier of replication configuration","type":"string"},"replicationSettings":{"$ref":"pulumi.json#/Any","description":"JSON settings for Servereless replications that are provisioned using this replication configuration\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"replicationType":{"$ref":"#/types/aws-native:dms:ReplicationConfigReplicationType","description":"The type of AWS DMS Serverless replication to provision using this replication configuration"},"sourceEndpointArn":{"description":"The Amazon Resource Name (ARN) of the source endpoint for this AWS DMS Serverless replication configuration","type":"string"},"supplementalSettings":{"$ref":"pulumi.json#/Any","description":"JSON settings for specifying supplemental data\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"tableMappings":{"$ref":"pulumi.json#/Any","description":"JSON table mappings for AWS DMS Serverless replications that are provisioned using this replication configuration\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::DMS::ReplicationConfig` for more information about the expected schema for this property."},"tags":{"description":"\u003cp\u003eContains a map of the key-value pairs for the resource tag or tags assigned to the dataset.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetEndpointArn":{"description":"The Amazon Resource Name (ARN) of the target endpoint for this AWS DMS Serverless replication configuration","type":"string"}}}},"aws-native:docdb:getGlobalCluster":{"description":"The AWS::DocDB::GlobalCluster resource represents an Amazon DocumentDB Global Cluster.","inputs":{"properties":{"globalClusterIdentifier":{"type":"string","description":"The cluster identifier of the global cluster."}},"required":["globalClusterIdentifier"]},"outputs":{"properties":{"deletionProtection":{"description":"Indicates whether the global cluster has deletion protection enabled. The global cluster can't be deleted when deletion protection is enabled.","type":"boolean"},"globalClusterArn":{"description":"The Amazon Resource Name (ARN) for the global cluster.","type":"string"},"globalClusterResourceId":{"description":"The AWS Region-unique, immutable identifier for the global database cluster. This identifier is found in AWS CloudTrail log entries whenever the AWS KMS key for the DB cluster is accessed.","type":"string"},"tags":{"description":"The tags to be assigned to the Amazon DocumentDB resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:docdbelastic:getCluster":{"description":"The AWS::DocDBElastic::Cluster Amazon DocumentDB (with MongoDB compatibility) Elastic Scale resource describes a Cluster","inputs":{"properties":{"clusterArn":{"type":"string"}},"required":["clusterArn"]},"outputs":{"properties":{"backupRetentionPeriod":{"description":"The number of days for which automatic snapshots are retained.","type":"integer"},"clusterArn":{"type":"string"},"clusterEndpoint":{"description":"The URL used to connect to the elastic cluster.","type":"string"},"preferredBackupWindow":{"description":"The daily time range during which automated backups are created if automated backups are enabled, as determined by `backupRetentionPeriod` .","type":"string"},"preferredMaintenanceWindow":{"description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n\n*Format* : `ddd:hh24:mi-ddd:hh24:mi`\n\n*Default* : a 30-minute window selected at random from an 8-hour block of time for each AWS Region , occurring on a random day of the week.\n\n*Valid days* : Mon, Tue, Wed, Thu, Fri, Sat, Sun\n\n*Constraints* : Minimum 30-minute window.","type":"string"},"shardCapacity":{"description":"The number of vCPUs assigned to each elastic cluster shard. Maximum is 64. Allowed values are 2, 4, 8, 16, 32, 64.","type":"integer"},"shardCount":{"description":"The number of shards assigned to the elastic cluster. Maximum is 32.","type":"integer"},"shardInstanceCount":{"description":"The number of replica instances applying to all shards in the cluster. A `shardInstanceCount` value of 1 means there is one writer instance, and any additional instances are replicas that can be used for reads and to improve availability.","type":"integer"},"subnetIds":{"description":"The Amazon EC2 subnet IDs for the new elastic cluster.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to be assigned to the new elastic cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcSecurityGroupIds":{"description":"A list of EC2 VPC security groups to associate with the new elastic cluster.","items":{"type":"string"},"type":"array"}}}},"aws-native:dsql:getCluster":{"description":"Resource Type definition for AWS::DSQL::Cluster","inputs":{"properties":{"identifier":{"type":"string","description":"The ID of the created cluster."}},"required":["identifier"]},"outputs":{"properties":{"creationTime":{"description":"The time of when the cluster was created in ISO-8601 format.","type":"string"},"deletionProtectionEnabled":{"description":"Whether deletion protection is enabled in this cluster.","type":"boolean"},"encryptionDetails":{"$ref":"#/types/aws-native:dsql:EncryptionDetailsProperties","description":"The encryption configuration details for the cluster."},"endpoint":{"description":"The DSQL cluster endpoint.","type":"string"},"identifier":{"description":"The ID of the created cluster.","type":"string"},"multiRegionProperties":{"$ref":"#/types/aws-native:dsql:MultiRegionPropertiesProperties","description":"The Multi-region properties associated to this cluster."},"policyDocument":{"description":"The IAM policy applied to the cluster resource.","type":"string"},"policyVersion":{"description":"The version number of the cluster's resource based policy","type":"string"},"resourceArn":{"description":"The Amazon Resource Name (ARN) for the cluster.","type":"string"},"status":{"description":"The status of the cluster.","type":"string"},"tags":{"description":"A map of key and value pairs this cluster is tagged with.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcEndpoint":{"description":"The DSQL cluster VPC endpoint.","type":"string"},"vpcEndpointServiceName":{"description":"The VPC endpoint service name.","type":"string"}}}},"aws-native:dynamodb:getGlobalTable":{"description":"Version: None. Resource Type definition for AWS::DynamoDB::GlobalTable","inputs":{"properties":{"tableName":{"type":"string","description":"A name for the global table. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID as the table name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .\n\n\u003e If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["tableName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the DynamoDB table, such as `arn:aws:dynamodb:us-east-2:123456789012:table/myDynamoDBTable` . The ARN returned is that of the replica in the region the stack is deployed to.","type":"string"},"attributeDefinitions":{"description":"A list of attributes that describe the key schema for the global table and indexes.","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableAttributeDefinition"},"type":"array"},"billingMode":{"description":"Specifies how you are charged for read and write throughput and how you manage capacity. Valid values are:\n\n- `PAY_PER_REQUEST`\n- `PROVISIONED`\n\nAll replicas in your global table will have the same billing mode. If you use `PROVISIONED` billing mode, you must provide an auto scaling configuration via the `WriteProvisionedThroughputSettings` property. The default value of this property is `PROVISIONED` .","type":"string"},"globalSecondaryIndexes":{"description":"Global secondary indexes to be created on the global table. You can create up to 20 global secondary indexes. Each replica in your global table will have the same global secondary index settings. You can only create or delete one global secondary index in a single stack operation.\n\nSince the backfilling of an index could take a long time, CloudFormation does not wait for the index to become active. If a stack operation rolls back, CloudFormation might not delete an index that has been added. In that case, you will need to delete the index manually.","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalSecondaryIndex"},"type":"array"},"globalTableWitnesses":{"description":"The list of witnesses of the MRSC global table. Only one witness Region can be configured per MRSC global table.","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWitness"},"type":"array"},"keySchema":{"description":"Specifies the attributes that make up the primary key for the table. The attributes in the `KeySchema` property must also be defined in the `AttributeDefinitions` property.","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableKeySchema"},"type":"array"},"localSecondaryIndexes":{"description":"Local secondary indexes to be created on the table. You can create up to five local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes. Each replica in your global table will have the same local secondary index settings.","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableLocalSecondaryIndex"},"type":"array"},"multiRegionConsistency":{"$ref":"#/types/aws-native:dynamodb:GlobalTableMultiRegionConsistency","description":"Specifies the consistency mode for a new global table.\n\nYou can specify one of the following consistency modes:\n\n- `EVENTUAL` : Configures a new global table for multi-Region eventual consistency (MREC).\n- `STRONG` : Configures a new global table for multi-Region strong consistency (MRSC).\n\nIf you don't specify this field, the global table consistency mode defaults to `EVENTUAL` . For more information about global tables consistency modes, see [Consistency modes](https://docs.aws.amazon.com/V2globaltables_HowItWorks.html#V2globaltables_HowItWorks.consistency-modes) in DynamoDB developer guide."},"readOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReadOnDemandThroughputSettings"},"readProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableGlobalReadProvisionedThroughputSettings"},"replicas":{"description":"Specifies the list of replicas for your global table. The list must contain at least one element, the region where the stack defining the global table is deployed. For example, if you define your table in a stack deployed to us-east-1, you must have an entry in `Replicas` with the region us-east-1. You cannot remove the replica in the stack region.\n\n\u003e Adding a replica might take a few minutes for an empty table, or up to several hours for large tables. If you want to add or remove a replica, we recommend submitting an `UpdateStack` operation containing only that change.\n\u003e \n\u003e If you add or delete a replica during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new replica, you might need to manually delete the replica. \n\nYou can create a new global table with as many replicas as needed. You can add or remove replicas after table creation, but you can only add or remove a single replica in each update. For Multi-Region Strong Consistency (MRSC), you can add or remove up to 3 replicas, or 2 replicas plus a witness Region.","items":{"$ref":"#/types/aws-native:dynamodb:GlobalTableReplicaSpecification"},"type":"array"},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableSseSpecification","description":"Specifies the settings to enable server-side encryption. These settings will be applied to all replicas. If you plan to use customer-managed KMS keys, you must provide a key for each replica using the `ReplicaSpecification.ReplicaSSESpecification` property."},"streamArn":{"description":"The ARN of the DynamoDB stream, such as `arn:aws:dynamodb:us-east-1:123456789012:table/testddbstack-myDynamoDBTable-012A1SL7SMP5Q/stream/2015-11-30T20:10:00.000` . The `StreamArn` returned is that of the replica in the region the stack is deployed to.\n\n\u003e You must specify the `StreamSpecification` property to use this attribute.","type":"string"},"streamSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableStreamSpecification","description":"Specifies the streams settings on your global table. You must provide a value for this property if your global table contains more than one replica. You can only change the streams settings if your global table has only one replica. For Multi-Region Strong Consistency (MRSC), you do not need to provide a value for this property and can change the settings at any time."},"tableId":{"description":"Unique identifier for the table, such as `a123b456-01ab-23cd-123a-111222aaabbb` . The `TableId` returned is that of the replica in the region the stack is deployed to.","type":"string"},"timeToLiveSpecification":{"$ref":"#/types/aws-native:dynamodb:GlobalTableTimeToLiveSpecification","description":"Specifies the time to live (TTL) settings for the table. This setting will be applied to all replicas."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWarmThroughput","description":"Provides visibility into the number of read and write operations your table or secondary index can instantaneously support. The settings can be modified using the `UpdateTable` operation to meet the throughput requirements of an upcoming peak event."},"writeOnDemandThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteOnDemandThroughputSettings","description":"Sets the write request settings for a global table or a global secondary index. You can only specify this setting if your resource uses the `PAY_PER_REQUEST` `BillingMode` ."},"writeProvisionedThroughputSettings":{"$ref":"#/types/aws-native:dynamodb:GlobalTableWriteProvisionedThroughputSettings","description":"Specifies an auto scaling policy for write capacity. This policy will be applied to all replicas. This setting must be specified if `BillingMode` is set to `PROVISIONED` ."}}}},"aws-native:dynamodb:getTable":{"description":"The ``AWS::DynamoDB::Table`` resource creates a DDB table. For more information, see [CreateTable](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_CreateTable.html) in the *API Reference*.\n You should be aware of the following behaviors when working with DDB tables:\n  +  CFNlong typically creates DDB tables in parallel. However, if your template includes multiple DDB tables with indexes, you must declare dependencies so that the tables are created sequentially. DDBlong limits the number of tables with secondary indexes that are in the creating state. If you create multiple tables with indexes at the same time, DDB returns an error and the stack operation fails. For an example, see [DynamoDB Table with a DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html#aws-resource-dynamodb-table--examples--DynamoDB_Table_with_a_DependsOn_Attribute).\n  \n   Our guidance is to use the latest schema documented for your CFNlong templates. This schema supports the provisioning of all table settings below. When using this schema in your CFNlong templates, please ensure that your Identity and Access Management (IAM) policies are updated with appropriate permissions to allow for the authorization of these setting changes.","inputs":{"properties":{"tableName":{"type":"string","description":"A name for the table. If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the table name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["tableName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the DynamoDB table, such as `arn:aws:dynamodb:us-east-2:123456789012:table/myDynamoDBTable` .","type":"string"},"attributeDefinitions":{"description":"A list of attributes that describe the key schema for the table and indexes.\n This property is required to create a DDB table.\n Update requires: [Some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt). Replacement if you edit an existing AttributeDefinition.","items":{"$ref":"#/types/aws-native:dynamodb:TableAttributeDefinition"},"type":"array"},"billingMode":{"description":"Specify how you are charged for read and write throughput and how you manage capacity.\n Valid values include:\n  +  ``PAY_PER_REQUEST`` - We recommend using ``PAY_PER_REQUEST`` for most DynamoDB workloads. ``PAY_PER_REQUEST`` sets the billing mode to [On-demand capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/on-demand-capacity-mode.html). \n  +  ``PROVISIONED`` - We recommend using ``PROVISIONED`` for steady workloads with predictable growth where capacity requirements can be reliably forecasted. ``PROVISIONED`` sets the billing mode to [Provisioned capacity mode](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/provisioned-capacity-mode.html).\n  \n If not specified, the default is ``PROVISIONED``.","type":"string"},"contributorInsightsSpecification":{"$ref":"#/types/aws-native:dynamodb:TableContributorInsightsSpecification","description":"The settings used to specify whether to enable CloudWatch Contributor Insights for the table and define which events to monitor."},"deletionProtectionEnabled":{"description":"Determines if a table is protected from deletion. When enabled, the table cannot be deleted by any user or process. This setting is disabled by default. For more information, see [Using deletion protection](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/WorkingWithTables.Basics.html#WorkingWithTables.Basics.DeletionProtection) in the *Developer Guide*.","type":"boolean"},"globalSecondaryIndexes":{"description":"Global secondary indexes to be created on the table. You can create up to 20 global secondary indexes.\n  If you update a table to include a new global secondary index, CFNlong initiates the index creation and then proceeds with the stack update. CFNlong doesn't wait for the index to complete creation because the backfilling phase can take a long time, depending on the size of the table. You can't use the index or update the table until the index's status is ``ACTIVE``. You can track its status by using the DynamoDB [DescribeTable](https://docs.aws.amazon.com/cli/latest/reference/dynamodb/describe-table.html) command.\n If you add or delete an index during an update, we recommend that you don't update any other resources. If your stack fails to update and is rolled back while adding a new index, you must manually delete the index. \n Updates are not supported. The following are exceptions:\n  +  If you update either the contributor insights specification or the provisioned throughput values of global secondary indexes, you can update the table without interruption.\n  +  You can delete or add one global secondary index without interruption. If you do both in the same update (for example, by changing the index's logical ID), the update fails.","items":{"$ref":"#/types/aws-native:dynamodb:TableGlobalSecondaryIndex"},"type":"array"},"keySchema":{"description":"Specifies the attributes that make up the primary key for the table. The attributes in the ``KeySchema`` property must also be defined in the ``AttributeDefinitions`` property.","oneOf":[{"items":{"$ref":"#/types/aws-native:dynamodb:TableKeySchema"},"type":"array"},{"$ref":"pulumi.json#/Any"}]},"kinesisStreamSpecification":{"$ref":"#/types/aws-native:dynamodb:TableKinesisStreamSpecification","description":"The Kinesis Data Streams configuration for the specified table."},"localSecondaryIndexes":{"description":"Local secondary indexes to be created on the table. You can create up to 5 local secondary indexes. Each index is scoped to a given hash key value. The size of each hash key can be up to 10 gigabytes.","items":{"$ref":"#/types/aws-native:dynamodb:TableLocalSecondaryIndex"},"type":"array"},"onDemandThroughput":{"$ref":"#/types/aws-native:dynamodb:TableOnDemandThroughput","description":"Sets the maximum number of read and write units for the specified on-demand table. If you use this property, you must specify ``MaxReadRequestUnits``, ``MaxWriteRequestUnits``, or both."},"pointInTimeRecoverySpecification":{"$ref":"#/types/aws-native:dynamodb:TablePointInTimeRecoverySpecification","description":"The settings used to enable point in time recovery."},"provisionedThroughput":{"$ref":"#/types/aws-native:dynamodb:TableProvisionedThroughput","description":"Throughput for the specified table, which consists of values for ``ReadCapacityUnits`` and ``WriteCapacityUnits``. For more information about the contents of a provisioned throughput structure, see [Amazon DynamoDB Table ProvisionedThroughput](https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_ProvisionedThroughput.html). \n If you set ``BillingMode`` as ``PROVISIONED``, you must specify this property. If you set ``BillingMode`` as ``PAY_PER_REQUEST``, you cannot specify this property."},"resourcePolicy":{"$ref":"#/types/aws-native:dynamodb:TableResourcePolicy","description":"An AWS resource-based policy document in JSON format that will be attached to the table.\n When you attach a resource-based policy while creating a table, the policy application is *strongly consistent*.\n The maximum size supported for a resource-based policy document is 20 KB. DynamoDB counts whitespaces when calculating the size of a policy against this limit. For a full list of all considerations that apply for resource-based policies, see [Resource-based policy considerations](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/rbac-considerations.html).\n  You need to specify the ``CreateTable`` and ``PutResourcePolicy`` IAM actions for authorizing a user to create a table with a resource-based policy."},"sseSpecification":{"$ref":"#/types/aws-native:dynamodb:TableSseSpecification","description":"Specifies the settings to enable server-side encryption."},"streamArn":{"description":"The ARN of the DynamoDB stream, such as `arn:aws:dynamodb:us-east-1:123456789012:table/testddbstack-myDynamoDBTable-012A1SL7SMP5Q/stream/2015-11-30T20:10:00.000` .\n\n\u003e You must specify the `StreamSpecification` property to use this attribute.","type":"string"},"streamSpecification":{"$ref":"#/types/aws-native:dynamodb:TableStreamSpecification","description":"The settings for the DDB table stream, which captures changes to items stored in the table. Including this property in your CFNlong template automatically enables streaming."},"tableClass":{"description":"The table class of the new table. Valid values are ``STANDARD`` and ``STANDARD_INFREQUENT_ACCESS``.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeToLiveSpecification":{"$ref":"#/types/aws-native:dynamodb:TableTimeToLiveSpecification","description":"Specifies the Time to Live (TTL) settings for the table.\n  For detailed information about the limits in DynamoDB, see [Limits in Amazon DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Limits.html) in the Amazon DynamoDB Developer Guide."},"warmThroughput":{"$ref":"#/types/aws-native:dynamodb:TableWarmThroughput","description":"Represents the warm throughput (in read units per second and write units per second) for creating a table."}}}},"aws-native:ec2:getCapacityManagerDataExport":{"description":"Resource Type definition for AWS::EC2::CapacityManagerDataExport","inputs":{"properties":{"capacityManagerDataExportId":{"type":"string","description":"The unique identifier of the capacity manager data export."}},"required":["capacityManagerDataExportId"]},"outputs":{"properties":{"capacityManagerDataExportId":{"description":"The unique identifier of the capacity manager data export.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to the capacity manager data export.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getCapacityReservation":{"description":"Resource Type definition for AWS::EC2::CapacityReservation","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Capacity Reservation."}},"required":["id"]},"outputs":{"properties":{"availableInstanceCount":{"description":"Returns the remaining capacity, which indicates the number of instances that can be launched in the Capacity Reservation. For example: `9` .","type":"integer"},"capacityAllocationSet":{"items":{"$ref":"#/types/aws-native:ec2:CapacityReservationCapacityAllocation"},"type":"array"},"capacityReservationArn":{"description":"The Amazon Resource Name (ARN) of the Capacity Reservation.","type":"string"},"capacityReservationFleetId":{"description":"The ID of the Capacity Reservation Fleet to which the Capacity Reservation belongs. Only valid for Capacity Reservations that were created by a Capacity Reservation Fleet.","type":"string"},"commitmentInfo":{"$ref":"#/types/aws-native:ec2:CommitmentInfoProperties"},"createDate":{"description":"The date and time the Capacity Reservation was created.","type":"string"},"deliveryPreference":{"description":"The delivery method for a future-dated Capacity Reservation. `incremental` indicates that the requested capacity is delivered in addition to any running instances and reserved capacity that you have in your account at the requested date and time.","type":"string"},"endDate":{"description":"The date and time at which the Capacity Reservation expires. When a Capacity Reservation expires, the reserved capacity is released and you can no longer launch instances into it. The Capacity Reservation's state changes to `expired` when it reaches its end date and time.\n\nYou must provide an `EndDate` value if `EndDateType` is `limited` . Omit `EndDate` if `EndDateType` is `unlimited` .\n\nIf the `EndDateType` is `limited` , the Capacity Reservation is cancelled within an hour from the specified time. For example, if you specify 5/31/2019, 13:30:55, the Capacity Reservation is guaranteed to end between 13:30:55 and 14:30:55 on 5/31/2019.\n\nIf you are requesting a future-dated Capacity Reservation, you can't specify an end date and time that is within the commitment duration.","type":"string"},"endDateType":{"description":"Indicates the way in which the Capacity Reservation ends. A Capacity Reservation can have one of the following end types:\n\n- `unlimited` - The Capacity Reservation remains active until you explicitly cancel it. Do not provide an `EndDate` if the `EndDateType` is `unlimited` .\n- `limited` - The Capacity Reservation expires automatically at a specified date and time. You must provide an `EndDate` value if the `EndDateType` value is `limited` .","type":"string"},"id":{"description":"The ID of the Capacity Reservation.","type":"string"},"instanceCount":{"description":"The number of instances for which to reserve capacity.\n\n\u003e You can request future-dated Capacity Reservations for an instance count with a minimum of 32 vCPUs. For example, if you request a future-dated Capacity Reservation for `m5.xlarge` instances, you must request at least 8 instances ( *8 * m5.xlarge = 32 vCPUs* ). \n\nValid range: 1 - 1000","type":"integer"},"instanceMatchCriteria":{"description":"Indicates the type of instance launches that the Capacity Reservation accepts. The options include:\n\n- `open` - The Capacity Reservation automatically matches all instances that have matching attributes (instance type, platform, and Availability Zone). Instances that have matching attributes run in the Capacity Reservation automatically without specifying any additional parameters.\n- `targeted` - The Capacity Reservation only accepts instances that have matching attributes (instance type, platform, and Availability Zone), and explicitly target the Capacity Reservation. This ensures that only permitted instances can use the reserved capacity.\n\n\u003e If you are requesting a future-dated Capacity Reservation, you must specify `targeted` . \n\nDefault: `open`","type":"string"},"ownerId":{"description":"The ID of the AWS account that owns the Capacity Reservation.","type":"string"},"reservationType":{"description":"The type of Capacity Reservation.","type":"string"},"startDate":{"description":"The date and time the Capacity Reservation was started.","type":"string"},"state":{"description":"The current state of the Capacity Reservation. A Capacity Reservation can be in one of the following states:\n\n- `active` - The capacity is available for use.\n- `expired` - The Capacity Reservation expired automatically at the date and time specified in your reservation request. The reserved capacity is no longer available for your use.\n- `cancelled` - The Capacity Reservation was canceled. The reserved capacity is no longer available for your use.\n- `pending` - The Capacity Reservation request was successful but the capacity provisioning is still pending.\n- `failed` - The Capacity Reservation request has failed. A request can fail due to request parameters that are not valid, capacity constraints, or instance limit constraints. You can view a failed request for 60 minutes.\n- `scheduled` - ( *Future-dated Capacity Reservations* ) The future-dated Capacity Reservation request was approved and the Capacity Reservation is scheduled for delivery on the requested start date.\n- `payment-pending` - ( *Capacity Blocks* ) The upfront payment has not been processed yet.\n- `payment-failed` - ( *Capacity Blocks* ) The upfront payment was not processed in the 12-hour time frame. Your Capacity Block was released.\n- `assessing` - ( *Future-dated Capacity Reservations* ) Amazon EC2 is assessing your request for a future-dated Capacity Reservation.\n- `delayed` - ( *Future-dated Capacity Reservations* ) Amazon EC2 encountered a delay in provisioning the requested future-dated Capacity Reservation. Amazon EC2 is unable to deliver the requested capacity by the requested start date and time.\n- `unsupported` - ( *Future-dated Capacity Reservations* ) Amazon EC2 can't support the future-dated Capacity Reservation request due to capacity constraints. You can view unsupported requests for 30 days. The Capacity Reservation will not be delivered.","type":"string"},"totalInstanceCount":{"description":"Returns the total number of instances for which the Capacity Reservation reserves capacity. For example: `15` .","type":"integer"}}}},"aws-native:ec2:getCapacityReservationFleet":{"description":"Resource Type definition for AWS::EC2::CapacityReservationFleet","inputs":{"properties":{"capacityReservationFleetId":{"type":"string","description":"The ID of the Capacity Reservation Fleet."}},"required":["capacityReservationFleetId"]},"outputs":{"properties":{"capacityReservationFleetId":{"description":"The ID of the Capacity Reservation Fleet.","type":"string"},"noRemoveEndDate":{"description":"Used to add an end date to a Capacity Reservation Fleet that has no end date and time. To add an end date to a Capacity Reservation Fleet, specify `true` for this paramater and specify the end date and time (in UTC time format) for the *EndDate* parameter.","type":"boolean"},"removeEndDate":{"description":"Used to remove an end date from a Capacity Reservation Fleet that is configured to end automatically at a specific date and time. To remove the end date from a Capacity Reservation Fleet, specify `true` for this paramater and omit the *EndDate* parameter.","type":"boolean"},"totalTargetCapacity":{"description":"The total number of capacity units to be reserved by the Capacity Reservation Fleet. This value, together with the instance type weights that you assign to each instance type used by the Fleet determine the number of instances for which the Fleet reserves capacity. Both values are based on units that make sense for your workload. For more information, see [Total target capacity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/crfleet-concepts.html#target-capacity) in the *Amazon EC2 User Guide* .","type":"integer"}}}},"aws-native:ec2:getCarrierGateway":{"description":"Resource Type definition for Carrier Gateway which describes the Carrier Gateway resource","inputs":{"properties":{"carrierGatewayId":{"type":"string","description":"The ID of the carrier gateway."}},"required":["carrierGatewayId"]},"outputs":{"properties":{"carrierGatewayId":{"description":"The ID of the carrier gateway.","type":"string"},"ownerId":{"description":"The ID of the owner.","type":"string"},"state":{"description":"The state of the carrier gateway.","type":"string"},"tags":{"description":"The tags for the carrier gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getCustomerGateway":{"description":"Specifies a customer gateway.","inputs":{"properties":{"customerGatewayId":{"type":"string","description":"The ID of the customer gateway."}},"required":["customerGatewayId"]},"outputs":{"properties":{"customerGatewayId":{"description":"The ID of the customer gateway.","type":"string"},"tags":{"description":"One or more tags for the customer gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getDhcpOptions":{"description":"Resource Type definition for AWS::EC2::DHCPOptions","inputs":{"properties":{"dhcpOptionsId":{"type":"string","description":"The ID of the DHCP options set."}},"required":["dhcpOptionsId"]},"outputs":{"properties":{"dhcpOptionsId":{"description":"The ID of the DHCP options set.","type":"string"},"tags":{"description":"Any tags assigned to the DHCP options set.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getEc2Fleet":{"description":"Resource Type definition for AWS::EC2::EC2Fleet","inputs":{"properties":{"fleetId":{"type":"string","description":"The ID of the EC2 Fleet."}},"required":["fleetId"]},"outputs":{"properties":{"context":{"description":"Reserved.","type":"string"},"excessCapacityTerminationPolicy":{"$ref":"#/types/aws-native:ec2:Ec2FleetExcessCapacityTerminationPolicy","description":"Indicates whether running instances should be terminated if the total target capacity of the EC2 Fleet is decreased below the current size of the EC2 Fleet.\n\nSupported only for fleets of type `maintain` ."},"fleetId":{"description":"The ID of the EC2 Fleet.","type":"string"},"targetCapacitySpecification":{"$ref":"#/types/aws-native:ec2:Ec2FleetTargetCapacitySpecificationRequest","description":"The number of units to request."}}}},"aws-native:ec2:getEgressOnlyInternetGateway":{"description":"Resource Type definition for AWS::EC2::EgressOnlyInternetGateway","inputs":{"properties":{"id":{"type":"string","description":"Service Generated ID of the EgressOnlyInternetGateway"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"Service Generated ID of the EgressOnlyInternetGateway","type":"string"},"tags":{"description":"Any tags assigned to the egress only internet gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getEip":{"description":"Specifies an Elastic IP (EIP) address and can, optionally, associate it with an Amazon EC2 instance.\n You can allocate an Elastic IP address from an address pool owned by AWS or from an address pool created from a public IPv4 address range that you have brought to AWS for use with your AWS resources using bring your own IP addresses (BYOIP). For more information, see [Bring Your Own IP Addresses (BYOIP)](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html) in the *Amazon EC2 User Guide*.\n For more information, see [Elastic IP Addresses](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html) in the *Amazon EC2 User Guide*.","inputs":{"properties":{"allocationId":{"type":"string","description":"The ID that AWS assigns to represent the allocation of the address for use with Amazon VPC. This is returned only for VPC elastic IP addresses. For example, `eipalloc-5723d13e` ."},"publicIp":{"type":"string","description":"The Elastic IP address."}},"required":["publicIp","allocationId"]},"outputs":{"properties":{"allocationId":{"description":"The ID that AWS assigns to represent the allocation of the address for use with Amazon VPC. This is returned only for VPC elastic IP addresses. For example, `eipalloc-5723d13e` .","type":"string"},"domain":{"description":"The network (``vpc``).\n If you define an Elastic IP address and associate it with a VPC that is defined in the same template, you must declare a dependency on the VPC-gateway attachment by using the [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) on this resource.","type":"string"},"instanceId":{"description":"The ID of the instance.\n  Updates to the ``InstanceId`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource.","type":"string"},"publicIp":{"description":"The Elastic IP address.","type":"string"},"publicIpv4Pool":{"description":"The ID of an address pool that you own. Use this parameter to let Amazon EC2 select an address from the address pool.\n  Updates to the ``PublicIpv4Pool`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource.","type":"string"},"tags":{"description":"Any tags assigned to the Elastic IP address.\n  Updates to the ``Tags`` property may require *some interruptions*. Updates on an EIP reassociates the address on its associated resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getEipAssociation":{"description":"Associates an Elastic IP address with an instance or a network interface. Before you can use an Elastic IP address, you must allocate it to your account. For more information about working with Elastic IP addresses, see [Elastic IP address concepts and rules](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#vpc-eip-overview).\n You must specify ``AllocationId`` and either ``InstanceId``, ``NetworkInterfaceId``, or ``PrivateIpAddress``.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the association."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the association.","type":"string"}}}},"aws-native:ec2:getEnclaveCertificateIamRoleAssociation":{"description":"Associates an AWS Identity and Access Management (IAM) role with an AWS Certificate Manager (ACM) certificate. This association is based on Amazon Resource Names and it enables the certificate to be used by the ACM for Nitro Enclaves application inside an enclave.","inputs":{"properties":{"certificateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ACM certificate with which to associate the IAM role."},"roleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the IAM role to associate with the ACM certificate. You can associate up to 16 IAM roles with an ACM certificate."}},"required":["certificateArn","roleArn"]},"outputs":{"properties":{"certificateS3BucketName":{"description":"The name of the Amazon S3 bucket to which the certificate was uploaded.","type":"string"},"certificateS3ObjectKey":{"description":"The Amazon S3 object key where the certificate, certificate chain, and encrypted private key bundle are stored.","type":"string"},"encryptionKmsKeyId":{"description":"The ID of the AWS KMS CMK used to encrypt the private key of the certificate.","type":"string"}}}},"aws-native:ec2:getFlowLog":{"description":"Specifies a VPC flow log, which enables you to capture IP traffic for a specific network interface, subnet, or VPC.","inputs":{"properties":{"id":{"type":"string","description":"The Flow Log ID"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The Flow Log ID","type":"string"},"tags":{"description":"The tags to apply to the flow logs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getGatewayRouteTableAssociation":{"description":"Associates a gateway with a route table. The gateway and route table must be in the same VPC. This association causes the incoming traffic to the gateway to be routed according to the routes in the route table.","inputs":{"properties":{"gatewayId":{"type":"string","description":"The ID of the gateway."}},"required":["gatewayId"]},"outputs":{"properties":{"associationId":{"description":"The route table association ID.","type":"string"},"routeTableId":{"description":"The ID of the route table.","type":"string"}}}},"aws-native:ec2:getHost":{"description":"Resource Type definition for AWS::EC2::Host","inputs":{"properties":{"hostId":{"type":"string","description":"ID of the host created."}},"required":["hostId"]},"outputs":{"properties":{"autoPlacement":{"$ref":"#/types/aws-native:ec2:HostAutoPlacement","description":"Indicates whether the host accepts any untargeted instance launches that match its instance type configuration, or if it only accepts Host tenancy instance launches that specify its unique host ID."},"hostId":{"description":"ID of the host created.","type":"string"},"hostMaintenance":{"$ref":"#/types/aws-native:ec2:HostMaintenance","description":"Automatically allocates a new dedicated host and moves your instances on to it if a degradation is detected on your current host."},"hostRecovery":{"$ref":"#/types/aws-native:ec2:HostRecovery","description":"Indicates whether to enable or disable host recovery for the Dedicated Host. Host recovery is disabled by default."},"tags":{"description":"Any tags assigned to the Host.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getInstance":{"description":"Resource Type definition for AWS::EC2::Instance","inputs":{"properties":{"instanceId":{"type":"string","description":"The EC2 Instance ID."}},"required":["instanceId"]},"outputs":{"properties":{"affinity":{"$ref":"#/types/aws-native:ec2:InstanceAffinity","description":"Indicates whether the instance is associated with a dedicated host. If you want the instance to always restart on the same host on which it was launched, specify host. If you want the instance to restart on any available host, but try to launch onto the last host it ran on (on a best-effort basis), specify default."},"blockDeviceMappings":{"description":"The block device mapping entries that defines the block devices to attach to the instance at launch.","items":{"$ref":"#/types/aws-native:ec2:InstanceBlockDeviceMapping"},"type":"array"},"creditSpecification":{"$ref":"#/types/aws-native:ec2:CreditSpecificationProperties","description":"The credit option for CPU usage of the burstable performance instance. Valid values are standard and unlimited."},"disableApiTermination":{"description":"If you set this parameter to true, you can't terminate the instance using the Amazon EC2 console, CLI, or API; otherwise, you can.","type":"boolean"},"ebsOptimized":{"description":"Indicates whether the instance is optimized for Amazon EBS I/O.","type":"boolean"},"hostId":{"description":"If you specify host for the Affinity property, the ID of a dedicated host that the instance is associated with. If you don't specify an ID, Amazon EC2 launches the instance onto any available, compatible dedicated host in your account.","type":"string"},"iamInstanceProfile":{"description":"The IAM instance profile.","type":"string"},"instanceId":{"description":"The EC2 Instance ID.","type":"string"},"instanceInitiatedShutdownBehavior":{"description":"Indicates whether an instance stops or terminates when you initiate shutdown from the instance (using the operating system command for system shutdown).","type":"string"},"instanceType":{"description":"The instance type.","type":"string"},"kernelId":{"description":"The ID of the kernel.","type":"string"},"metadataOptions":{"$ref":"#/types/aws-native:ec2:InstanceMetadataOptions","description":"The metadata options for the instance"},"monitoring":{"description":"Specifies whether detailed monitoring is enabled for the instance.","type":"boolean"},"privateDnsName":{"description":"The private DNS name of the specified instance. For example: ip-10-24-34-0.ec2.internal.","type":"string"},"privateDnsNameOptions":{"$ref":"#/types/aws-native:ec2:InstancePrivateDnsNameOptions","description":"The options for the instance hostname."},"privateIp":{"description":"The private IP address of the specified instance. For example: 10.24.34.0.","type":"string"},"publicDnsName":{"description":"The public DNS name of the specified instance. For example: ec2-107-20-50-45.compute-1.amazonaws.com.","type":"string"},"publicIp":{"description":"The public IP address of the specified instance. For example: 192.0.2.0.","type":"string"},"ramdiskId":{"description":"The ID of the RAM disk to select.","type":"string"},"securityGroupIds":{"description":"The IDs of the security groups.","items":{"type":"string"},"type":"array"},"sourceDestCheck":{"description":"Specifies whether to enable an instance launched in a VPC to perform NAT.","type":"boolean"},"ssmAssociations":{"description":"The SSM document and parameter values in AWS Systems Manager to associate with this instance.","items":{"$ref":"#/types/aws-native:ec2:InstanceSsmAssociation"},"type":"array"},"state":{"$ref":"#/types/aws-native:ec2:InstanceState","description":"The current state of the instance."},"tags":{"description":"The tags to add to the instance.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tenancy":{"description":"The tenancy of the instance (if the instance is running in a VPC). An instance with a tenancy of dedicated runs on single-tenant hardware.","type":"string"},"userData":{"description":"The user data to make available to the instance.","type":"string"},"volumes":{"description":"The volumes to attach to the instance.","items":{"$ref":"#/types/aws-native:ec2:InstanceVolume"},"type":"array"},"vpcId":{"description":"The ID of the VPC that the instance is running in.","type":"string"}}}},"aws-native:ec2:getInstanceConnectEndpoint":{"description":"Resource Type definition for AWS::EC2::InstanceConnectEndpoint","inputs":{"properties":{"id":{"type":"string","description":"The ID of the EC2 Instance Connect Endpoint."}},"required":["id"]},"outputs":{"properties":{"availabilityZone":{"description":"The Availability Zone of the EC2 Instance Connect Endpoint","type":"string"},"availabilityZoneId":{"description":"The ID of the Availability Zone of the EC2 Instance Connect Endpoint","type":"string"},"createdAt":{"description":"The date and time that the EC2 Instance Connect Endpoint was created","type":"string"},"id":{"description":"The ID of the EC2 Instance Connect Endpoint.","type":"string"},"instanceConnectEndpointArn":{"description":"The Amazon Resource Name (ARN) of the EC2 Instance Connect Endpoint","type":"string"},"networkInterfaceIds":{"description":"The ID of the elastic network interface that Amazon EC2 automatically created when creating the EC2 Instance Connect Endpoint","items":{"type":"string"},"type":"array"},"ownerId":{"description":"The ID of the AWS account that created the EC2 Instance Connect Endpoint","type":"string"},"publicDnsNames":{"$ref":"#/types/aws-native:ec2:InstanceConnectEndpointPublicDnsNames","description":"The public DNS names of the endpoint"},"state":{"$ref":"#/types/aws-native:ec2:InstanceConnectEndpointState","description":"The current state of the EC2 Instance Connect Endpoint"},"stateMessage":{"description":"The message for the current state of the EC2 Instance Connect Endpoint. Can include a failure message","type":"string"},"tags":{"description":"The tags assigned to the EC2 Instance Connect Endpoint.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"The ID of the VPC in which the EC2 Instance Connect Endpoint was created","type":"string"}}}},"aws-native:ec2:getInternetGateway":{"description":"Allocates an internet gateway for use with a VPC. After creating the Internet gateway, you then attach it to a VPC.","inputs":{"properties":{"internetGatewayId":{"type":"string","description":"The ID of the internet gateway."}},"required":["internetGatewayId"]},"outputs":{"properties":{"internetGatewayId":{"description":"The ID of the internet gateway.","type":"string"},"tags":{"description":"Any tags to assign to the internet gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getIpPoolRouteTableAssociation":{"description":"Resource Type definition for AWS::EC2::IpPoolRouteTableAssociation","inputs":{"properties":{"associationId":{"type":"string","description":"The route table association ID."}},"required":["associationId"]},"outputs":{"properties":{"associationId":{"description":"The route table association ID.","type":"string"}}}},"aws-native:ec2:getIpam":{"description":"Resource Schema of AWS::EC2::IPAM Type","inputs":{"properties":{"ipamId":{"type":"string","description":"Id of the IPAM."}},"required":["ipamId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the IPAM.","type":"string"},"defaultResourceDiscoveryAssociationId":{"description":"The Id of the default association to the default resource discovery, created with this IPAM.","type":"string"},"defaultResourceDiscoveryId":{"description":"The Id of the default resource discovery, created with this IPAM.","type":"string"},"defaultResourceDiscoveryOrganizationalUnitExclusions":{"description":"A set of organizational unit (OU) exclusions for the default resource discovery, created with this IPAM.","items":{"$ref":"#/types/aws-native:ec2:IpamOrganizationalUnitExclusion"},"type":"array"},"description":{"description":"The description for the IPAM.","type":"string"},"enablePrivateGua":{"description":"Enable provisioning of GUA space in private pools.","type":"boolean"},"ipamId":{"description":"Id of the IPAM.","type":"string"},"meteredAccount":{"$ref":"#/types/aws-native:ec2:IpamMeteredAccount","description":"A metered account is an account that is charged for active IP addresses managed in IPAM"},"operatingRegions":{"description":"The regions IPAM is enabled for. Allows pools to be created in these regions, as well as enabling monitoring","items":{"$ref":"#/types/aws-native:ec2:IpamOperatingRegion"},"type":"array"},"privateDefaultScopeId":{"description":"The Id of the default scope for publicly routable IP space, created with this IPAM.","type":"string"},"publicDefaultScopeId":{"description":"The Id of the default scope for publicly routable IP space, created with this IPAM.","type":"string"},"resourceDiscoveryAssociationCount":{"description":"The count of resource discoveries associated with this IPAM.","type":"integer"},"scopeCount":{"description":"The number of scopes that currently exist in this IPAM.","type":"integer"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tier":{"$ref":"#/types/aws-native:ec2:IpamTier","description":"The tier of the IPAM."}}}},"aws-native:ec2:getIpamAllocation":{"description":"Resource Schema of AWS::EC2::IPAMAllocation Type","inputs":{"properties":{"cidr":{"type":"string","description":"The CIDR you would like to allocate from the IPAM pool. Note the following:\n\n- If there is no DefaultNetmaskLength allocation rule set on the pool, you must specify either the NetmaskLength or the CIDR.\n- If the DefaultNetmaskLength allocation rule is set on the pool, you can specify either the NetmaskLength or the CIDR and the DefaultNetmaskLength allocation rule will be ignored.\n\nPossible values: Any available IPv4 or IPv6 CIDR."},"ipamPoolAllocationId":{"type":"string","description":"Id of the allocation."},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool."}},"required":["ipamPoolId","ipamPoolAllocationId","cidr"]},"outputs":{"properties":{"ipamPoolAllocationId":{"description":"Id of the allocation.","type":"string"}}}},"aws-native:ec2:getIpamPool":{"description":"Resource Schema of AWS::EC2::IPAMPool Type","inputs":{"properties":{"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool."}},"required":["ipamPoolId"]},"outputs":{"properties":{"allocationDefaultNetmaskLength":{"description":"The default netmask length for allocations made from this pool. This value is used when the netmask length of an allocation isn't specified.","type":"integer"},"allocationMaxNetmaskLength":{"description":"The maximum allowed netmask length for allocations made from this pool.","type":"integer"},"allocationMinNetmaskLength":{"description":"The minimum allowed netmask length for allocations made from this pool.","type":"integer"},"allocationResourceTags":{"description":"When specified, an allocation will not be allowed unless a resource has a matching set of tags.","items":{"$ref":"#/types/aws-native:ec2:IpamPoolTag"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the IPAM Pool.","type":"string"},"autoImport":{"description":"Determines what to do if IPAM discovers resources that haven't been assigned an allocation. If set to true, an allocation will be made automatically.","type":"boolean"},"description":{"description":"The description of the IPAM pool.","type":"string"},"ipamArn":{"description":"The Amazon Resource Name (ARN) of the IPAM this pool is a part of.","type":"string"},"ipamPoolId":{"description":"Id of the IPAM Pool.","type":"string"},"ipamScopeArn":{"description":"The Amazon Resource Name (ARN) of the scope this pool is a part of.","type":"string"},"ipamScopeType":{"$ref":"#/types/aws-native:ec2:IpamPoolIpamScopeType","description":"Determines whether this scope contains publicly routable space or space for a private network"},"poolDepth":{"description":"The depth of this pool in the source pool hierarchy.","type":"integer"},"provisionedCidrs":{"description":"A list of cidrs representing the address space available for allocation in this pool.","items":{"$ref":"#/types/aws-native:ec2:IpamPoolProvisionedCidr"},"type":"array"},"state":{"$ref":"#/types/aws-native:ec2:IpamPoolState","description":"The state of this pool. This can be one of the following values: \"create-in-progress\", \"create-complete\", \"modify-in-progress\", \"modify-complete\", \"delete-in-progress\", or \"delete-complete\""},"stateMessage":{"description":"An explanation of how the pool arrived at it current state.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getIpamPoolCidr":{"description":"Resource Schema of AWS::EC2::IPAMPoolCidr Type","inputs":{"properties":{"ipamPoolCidrId":{"type":"string","description":"Id of the IPAM Pool Cidr."},"ipamPoolId":{"type":"string","description":"Id of the IPAM Pool."}},"required":["ipamPoolId","ipamPoolCidrId"]},"outputs":{"properties":{"ipamPoolCidrId":{"description":"Id of the IPAM Pool Cidr.","type":"string"},"state":{"description":"Provisioned state of the cidr.","type":"string"}}}},"aws-native:ec2:getIpamPrefixListResolver":{"description":"Resource Type definition for AWS::EC2::IPAMPrefixListResolver","inputs":{"properties":{"ipamPrefixListResolverId":{"type":"string","description":"Id of the IPAM Prefix List Resolver."}},"required":["ipamPrefixListResolverId"]},"outputs":{"properties":{"description":{"type":"string"},"ipamArn":{"description":"The Amazon Resource Name (ARN) of the IPAM this Prefix List Resolver is a part of.","type":"string"},"ipamPrefixListResolverArn":{"description":"The Amazon Resource Name (ARN) of the IPAM Prefix List Resolver","type":"string"},"ipamPrefixListResolverId":{"description":"Id of the IPAM Prefix List Resolver.","type":"string"},"rules":{"description":"Rules define the business logic for selecting CIDRs from IPAM.","items":{"$ref":"#/types/aws-native:ec2:IpamPrefixListResolverRule"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getIpamPrefixListResolverTarget":{"description":"Resource Type definition for AWS::EC2::IPAMPrefixListResolverTarget","inputs":{"properties":{"ipamPrefixListResolverTargetId":{"type":"string","description":"Id of the IPAM Prefix List Resolver Target."}},"required":["ipamPrefixListResolverTargetId"]},"outputs":{"properties":{"desiredVersion":{"description":"The desired version of the Prefix List Resolver that this Target should synchronize with.","type":"integer"},"ipamPrefixListResolverTargetArn":{"description":"Id of the IPAM Prefix List Resolver Target.","type":"string"},"ipamPrefixListResolverTargetId":{"description":"Id of the IPAM Prefix List Resolver Target.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trackLatestVersion":{"description":"Indicates whether this Target automatically tracks the latest version of the Prefix List Resolver.","type":"boolean"}}}},"aws-native:ec2:getIpamResourceDiscovery":{"description":"Resource Schema of AWS::EC2::IPAMResourceDiscovery Type","inputs":{"properties":{"ipamResourceDiscoveryId":{"type":"string","description":"Id of the IPAM Pool."}},"required":["ipamResourceDiscoveryId"]},"outputs":{"properties":{"description":{"description":"The resource discovery description.","type":"string"},"ipamResourceDiscoveryArn":{"description":"Amazon Resource Name (Arn) for the Resource Discovery.","type":"string"},"ipamResourceDiscoveryId":{"description":"Id of the IPAM Pool.","type":"string"},"ipamResourceDiscoveryRegion":{"description":"The region the resource discovery is setup in. ","type":"string"},"isDefault":{"description":"Determines whether or not address space from this pool is publicly advertised. Must be set if and only if the pool is IPv6.","type":"boolean"},"operatingRegions":{"description":"The regions Resource Discovery is enabled for. Allows resource discoveries to be created in these regions, as well as enabling monitoring","items":{"$ref":"#/types/aws-native:ec2:IpamResourceDiscoveryIpamOperatingRegion"},"type":"array"},"organizationalUnitExclusions":{"description":"A set of organizational unit (OU) exclusions for this resource.","items":{"$ref":"#/types/aws-native:ec2:IpamResourceDiscoveryOrganizationalUnitExclusion"},"type":"array"},"ownerId":{"description":"Owner Account ID of the Resource Discovery","type":"string"},"state":{"description":"The state of this Resource Discovery.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getIpamResourceDiscoveryAssociation":{"description":"Resource Schema of AWS::EC2::IPAMResourceDiscoveryAssociation Type","inputs":{"properties":{"ipamResourceDiscoveryAssociationId":{"type":"string","description":"Id of the IPAM Resource Discovery Association."}},"required":["ipamResourceDiscoveryAssociationId"]},"outputs":{"properties":{"ipamArn":{"description":"Arn of the IPAM.","type":"string"},"ipamRegion":{"description":"The home region of the IPAM.","type":"string"},"ipamResourceDiscoveryAssociationArn":{"description":"The Amazon Resource Name (ARN) of the resource discovery association is a part of.","type":"string"},"ipamResourceDiscoveryAssociationId":{"description":"Id of the IPAM Resource Discovery Association.","type":"string"},"isDefault":{"description":"If the Resource Discovery Association exists due as part of CreateIpam.","type":"boolean"},"ownerId":{"description":"The AWS Account ID for the account where the shared IPAM exists.","type":"string"},"resourceDiscoveryStatus":{"description":"The status of the resource discovery.","type":"string"},"state":{"description":"The operational state of the Resource Discovery Association. Related to Create/Delete activities.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getIpamScope":{"description":"Resource Schema of AWS::EC2::IPAMScope Type","inputs":{"properties":{"ipamScopeId":{"type":"string","description":"Id of the IPAM scope."}},"required":["ipamScopeId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the IPAM scope.","type":"string"},"description":{"description":"The description of the scope.","type":"string"},"externalAuthorityConfiguration":{"$ref":"#/types/aws-native:ec2:IpamScopeExternalAuthorityConfiguration","description":"The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system.\n\nFor more information, see [Integrate VPC IPAM with Infoblox infrastructure](https://docs.aws.amazon.com/vpc/latest/ipam/integrate-infoblox-ipam.html) in the *Amazon VPC IPAM User Guide* ."},"ipamArn":{"description":"The Amazon Resource Name (ARN) of the IPAM this scope is a part of.","type":"string"},"ipamScopeId":{"description":"Id of the IPAM scope.","type":"string"},"ipamScopeType":{"$ref":"#/types/aws-native:ec2:IpamScopeType","description":"Determines whether this scope contains publicly routable space or space for a private network"},"isDefault":{"description":"Is this one of the default scopes created with the IPAM.","type":"boolean"},"poolCount":{"description":"The number of pools that currently exist in this scope.","type":"integer"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getKeyPair":{"description":"Specifies a key pair for use with an EC2long instance as follows:\n  +  To import an existing key pair, include the ``PublicKeyMaterial`` property.\n  +  To create a new key pair, omit the ``PublicKeyMaterial`` property.\n  \n When you import an existing key pair, you specify the public key material for the key. We assume that you have the private key material for the key. CFNlong does not create or return the private key material when you import a key pair.\n When you create a new key pair, the private key is saved to SYSlong Parameter Store, using a parameter with the following name: ``/ec2/keypair/{key_pair_id}``. For more information about retrieving private key, and the required permissions, see [Create a key pair using](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-key-pairs.html#create-key-pair-cloudformation) in the *User Guide*.\n When CFN deletes a key pair that was created or imported by a stack, it also deletes the parameter that was used to store the private key material in Parameter Store.","inputs":{"properties":{"keyName":{"type":"string","description":"A unique name for the key pair.\n Constraints: Up to 255 ASCII characters"}},"required":["keyName"]},"outputs":{"properties":{"keyFingerprint":{"description":"If you created the key pair using Amazon EC2:\n\n- For RSA key pairs, the key fingerprint is the SHA-1 digest of the DER encoded private key.\n- For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which is the default for OpenSSH, starting with [OpenSSH 6.8](https://docs.aws.amazon.com/http://www.openssh.com/txt/release-6.8) .\n\nIf you imported the key pair to Amazon EC2:\n\n- For RSA key pairs, the key fingerprint is the MD5 public key fingerprint as specified in section 4 of RFC 4716.\n- For ED25519 key pairs, the key fingerprint is the base64-encoded SHA-256 digest, which is the default for OpenSSH, starting with [OpenSSH 6.8](https://docs.aws.amazon.com/http://www.openssh.com/txt/release-6.8) .","type":"string"},"keyPairId":{"description":"The ID of the key pair.","type":"string"}}}},"aws-native:ec2:getLaunchTemplate":{"description":"Specifies the properties for creating a launch template.\n The minimum required properties for specifying a launch template are as follows:\n  +  You must specify at least one property for the launch template data.\n  +  You can optionally specify a name for the launch template. If you do not specify a name, CFN creates a name for you.\n  \n A launch template can contain some or all of the configuration information to launch an instance. When you launch an instance using a launch template, instance properties that are not specified in the launch template use default values, except the ``ImageId`` property, which has no default value. If you do not specify an AMI ID for the launch template ``ImageId`` property, you must specify an AMI ID for the instance ``ImageId`` property.\n For more information, see [Launch an instance from a launch template](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-templates.html) in the *Amazon EC2 User Guide*.","inputs":{"properties":{"launchTemplateId":{"type":"string","description":"The ID of the launch template."}},"required":["launchTemplateId"]},"outputs":{"properties":{"defaultVersionNumber":{"description":"The default version of the launch template, such as 2.\n\nThe default version of a launch template cannot be specified in AWS CloudFormation . The default version can be set in the Amazon EC2 console or by using the `modify-launch-template` AWS CLI command.","type":"string"},"latestVersionNumber":{"description":"The latest version of the launch template, such as `5` .","type":"string"},"launchTemplateId":{"description":"The ID of the launch template.","type":"string"}}}},"aws-native:ec2:getLocalGatewayRoute":{"description":"Resource Type definition for Local Gateway Route which describes a route for a local gateway route table.","inputs":{"properties":{"destinationCidrBlock":{"type":"string","description":"The CIDR block used for destination matches."},"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table."}},"required":["destinationCidrBlock","localGatewayRouteTableId"]},"outputs":{"properties":{"localGatewayVirtualInterfaceGroupId":{"description":"The ID of the virtual interface group.","type":"string"},"networkInterfaceId":{"description":"The ID of the network interface.","type":"string"},"state":{"description":"The state of the route.","type":"string"},"type":{"description":"The route type.","type":"string"}}}},"aws-native:ec2:getLocalGatewayRouteTable":{"description":"Resource Type definition for Local Gateway Route Table which describes a route table for a local gateway.","inputs":{"properties":{"localGatewayRouteTableId":{"type":"string","description":"The ID of the local gateway route table."}},"required":["localGatewayRouteTableId"]},"outputs":{"properties":{"localGatewayRouteTableArn":{"description":"The ARN of the local gateway route table.","type":"string"},"localGatewayRouteTableId":{"description":"The ID of the local gateway route table.","type":"string"},"outpostArn":{"description":"The ARN of the outpost.","type":"string"},"ownerId":{"description":"The owner of the local gateway route table.","type":"string"},"state":{"description":"The state of the local gateway route table.","type":"string"},"tags":{"description":"The tags for the local gateway route table.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getLocalGatewayRouteTableVirtualInterfaceGroupAssociation":{"description":"Resource Type definition for Local Gateway Route Table Virtual Interface Group Association which describes a local gateway route table virtual interface group association for a local gateway.","inputs":{"properties":{"localGatewayRouteTableVirtualInterfaceGroupAssociationId":{"type":"string","description":"The ID of the local gateway route table virtual interface group association."}},"required":["localGatewayRouteTableVirtualInterfaceGroupAssociationId"]},"outputs":{"properties":{"localGatewayId":{"description":"The ID of the local gateway.","type":"string"},"localGatewayRouteTableArn":{"description":"The ARN of the local gateway route table.","type":"string"},"localGatewayRouteTableVirtualInterfaceGroupAssociationId":{"description":"The ID of the local gateway route table virtual interface group association.","type":"string"},"ownerId":{"description":"The owner of the local gateway route table virtual interface group association.","type":"string"},"state":{"description":"The state of the local gateway route table virtual interface group association.","type":"string"},"tags":{"description":"The tags for the local gateway route table virtual interface group association.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getLocalGatewayRouteTableVpcAssociation":{"description":"Resource Type definition for Local Gateway Route Table VPC Association which describes an association between a local gateway route table and a VPC.","inputs":{"properties":{"localGatewayRouteTableVpcAssociationId":{"type":"string","description":"The ID of the association."}},"required":["localGatewayRouteTableVpcAssociationId"]},"outputs":{"properties":{"localGatewayId":{"description":"The ID of the local gateway.","type":"string"},"localGatewayRouteTableVpcAssociationId":{"description":"The ID of the association.","type":"string"},"state":{"description":"The state of the association.","type":"string"},"tags":{"description":"The tags for the association.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getLocalGatewayVirtualInterface":{"description":"Resource Type definition for Local Gateway Virtual Interface which describes a virtual interface for AWS Outposts local gateways.","inputs":{"properties":{"localGatewayVirtualInterfaceId":{"type":"string","description":"The ID of the virtual interface"}},"required":["localGatewayVirtualInterfaceId"]},"outputs":{"properties":{"configurationState":{"description":"The current state of the local gateway virtual interface","type":"string"},"localBgpAsn":{"description":"The Autonomous System Number(ASN) for the local Border Gateway Protocol (BGP)","type":"integer"},"localGatewayId":{"description":"The ID of the local gateway","type":"string"},"localGatewayVirtualInterfaceId":{"description":"The ID of the virtual interface","type":"string"},"ownerId":{"description":"The ID of the Amazon Web Services account that owns the local gateway virtual interface group","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getLocalGatewayVirtualInterfaceGroup":{"description":"Resource Type definition for LocalGatewayVirtualInterfaceGroup which describes a group of LocalGateway VirtualInterfaces","inputs":{"properties":{"localGatewayVirtualInterfaceGroupId":{"type":"string","description":"The ID of the virtual interface group"}},"required":["localGatewayVirtualInterfaceGroupId"]},"outputs":{"properties":{"configurationState":{"description":"The current state of the local gateway virtual interface group","type":"string"},"localGatewayVirtualInterfaceGroupArn":{"description":"The Amazon Resource Number (ARN) of the local gateway virtual interface group","type":"string"},"localGatewayVirtualInterfaceGroupId":{"description":"The ID of the virtual interface group","type":"string"},"localGatewayVirtualInterfaceIds":{"description":"The IDs of the virtual interfaces","items":{"type":"string"},"type":"array"},"ownerId":{"description":"The ID of the Amazon Web Services account that owns the local gateway virtual interface group","type":"string"},"tags":{"description":"The tags assigned to the virtual interface group","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getNatGateway":{"description":"Specifies a network address translation (NAT) gateway in the specified subnet. You can create either a public NAT gateway or a private NAT gateway. The default is a public NAT gateway. If you create a public NAT gateway, you must specify an elastic IP address.\n With a NAT gateway, instances in a private subnet can connect to the internet, other AWS services, or an on-premises network using the IP address of the NAT gateway. For more information, see [NAT gateways](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html) in the *Amazon VPC User Guide*.\n If you add a default route (``AWS::EC2::Route`` resource) that points to a NAT gateway, specify the NAT gateway ID for the route's ``NatGatewayId`` property.\n  When you associate an Elastic IP address or secondary Elastic IP address with a public NAT gateway, the network border group of the Elastic IP address must match the network border group of the Availability Zone (AZ) that the public NAT gateway is in. Otherwise, the NAT gateway fails to launch. You can see the network border group for the AZ by viewing the details of the subnet. Similarly, you can view the network border group for the Elastic IP address by viewing its details. For more information, see [Allocate an Elastic IP address](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-eips.html#allocate-eip) in the *Amazon VPC User Guide*.","inputs":{"properties":{"natGatewayId":{"type":"string","description":"The ID of the NAT gateway."}},"required":["natGatewayId"]},"outputs":{"properties":{"autoProvisionZones":{"description":"For regional NAT gateways only: Indicates whether AWS automatically manages AZ coverage. When enabled, the NAT gateway associates EIPs in all AZs where your VPC has subnets to handle outbound NAT traffic, expands to new AZs when you create subnets there, and retracts from AZs where you've removed all subnets. When disabled, you must manually manage which AZs the NAT gateway supports and their corresponding EIPs.\n\nA regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n\nFor more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide* .","type":"string"},"autoScalingIps":{"description":"For regional NAT gateways only: Indicates whether AWS automatically allocates additional Elastic IP addresses (EIPs) in an AZ when the NAT gateway needs more ports due to increased concurrent connections to a single destination from that AZ.\n\nFor more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide* .","type":"string"},"availabilityZoneAddresses":{"description":"For regional NAT gateways only: Specifies which Availability Zones you want the NAT gateway to support and the Elastic IP addresses (EIPs) to use in each AZ. The regional NAT gateway uses these EIPs to handle outbound NAT traffic from their respective AZs. If not specified, the NAT gateway will automatically expand to new AZs and associate EIPs upon detection of an elastic network interface. If you specify this parameter, auto-expansion is disabled and you must manually manage AZ coverage.\n A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region.\n For more information, see [Regional NAT gateways for automatic multi-AZ expansion](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html) in the *Amazon VPC User Guide*.","items":{"$ref":"#/types/aws-native:ec2:NatGatewayAvailabilityZoneAddress"},"type":"array"},"eniId":{"description":"The ID of the network interface.","type":"string"},"natGatewayId":{"description":"The ID of the NAT gateway.","type":"string"},"routeTableId":{"description":"For regional NAT gateways only, this is the ID of the NAT gateway.","type":"string"},"secondaryAllocationIds":{"description":"Secondary EIP allocation IDs. For more information, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html) in the *Amazon VPC User Guide*.","items":{"type":"string"},"type":"array"},"secondaryPrivateIpAddressCount":{"description":"[Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway. For more information about secondary addresses, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating) in the *Amazon Virtual Private Cloud User Guide*.\n ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.","type":"integer"},"secondaryPrivateIpAddresses":{"description":"Secondary private IPv4 addresses. For more information about secondary addresses, see [Create a NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating) in the *Amazon Virtual Private Cloud User Guide*.\n ``SecondaryPrivateIpAddressCount`` and ``SecondaryPrivateIpAddresses`` cannot be set at the same time.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags for the NAT gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getNetworkAcl":{"description":"Specifies a network ACL for your VPC.\n To add a network ACL entry, see [AWS::EC2::NetworkAclEntry](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html).","inputs":{"properties":{"id":{"type":"string","description":"The ID of the network ACL."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the network ACL.","type":"string"},"tags":{"description":"The tags for the network ACL.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getNetworkInsightsAccessScope":{"description":"Resource schema for AWS::EC2::NetworkInsightsAccessScope","inputs":{"properties":{"networkInsightsAccessScopeId":{"type":"string","description":"The ID of the Network Access Scope."}},"required":["networkInsightsAccessScopeId"]},"outputs":{"properties":{"createdDate":{"description":"The creation date.","type":"string"},"networkInsightsAccessScopeArn":{"description":"The ARN of the Network Access Scope.","type":"string"},"networkInsightsAccessScopeId":{"description":"The ID of the Network Access Scope.","type":"string"},"tags":{"description":"The tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedDate":{"description":"The last updated date.","type":"string"}}}},"aws-native:ec2:getNetworkInsightsAccessScopeAnalysis":{"description":"Resource schema for AWS::EC2::NetworkInsightsAccessScopeAnalysis","inputs":{"properties":{"networkInsightsAccessScopeAnalysisId":{"type":"string","description":"The ID of the Network Access Scope analysis."}},"required":["networkInsightsAccessScopeAnalysisId"]},"outputs":{"properties":{"analyzedEniCount":{"description":"The number of network interfaces analyzed.","type":"integer"},"endDate":{"description":"The end date of the analysis.","type":"string"},"findingsFound":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAnalysisFindingsFound","description":"Indicates whether there are findings (true | false | unknown)."},"networkInsightsAccessScopeAnalysisArn":{"description":"The ARN of the Network Access Scope analysis.","type":"string"},"networkInsightsAccessScopeAnalysisId":{"description":"The ID of the Network Access Scope analysis.","type":"string"},"startDate":{"description":"The start date of the analysis.","type":"string"},"status":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAccessScopeAnalysisStatus","description":"The status of the analysis (running | succeeded | failed)."},"statusMessage":{"description":"The status message.","type":"string"},"tags":{"description":"The tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getNetworkInsightsAnalysis":{"description":"Resource schema for AWS::EC2::NetworkInsightsAnalysis","inputs":{"properties":{"networkInsightsAnalysisId":{"type":"string","description":"The ID of the network insights analysis."}},"required":["networkInsightsAnalysisId"]},"outputs":{"properties":{"additionalAccounts":{"description":"The member accounts that contain resources that the path can traverse.","items":{"type":"string"},"type":"array"},"alternatePathHints":{"description":"Potential intermediate components.","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisAlternatePathHint"},"type":"array"},"explanations":{"description":"The explanations. For more information, see [Reachability Analyzer explanation codes](https://docs.aws.amazon.com/vpc/latest/reachability/explanation-codes.html) .","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisExplanation"},"type":"array"},"forwardPathComponents":{"description":"The components in the path from source to destination.","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPathComponent"},"type":"array"},"networkInsightsAnalysisArn":{"description":"The Amazon Resource Name (ARN) of the network insights analysis.","type":"string"},"networkInsightsAnalysisId":{"description":"The ID of the network insights analysis.","type":"string"},"networkPathFound":{"description":"Indicates whether the destination is reachable from the source.","type":"boolean"},"returnPathComponents":{"description":"The components in the path from destination to source.","items":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisPathComponent"},"type":"array"},"startDate":{"description":"The time the analysis started.","type":"string"},"status":{"$ref":"#/types/aws-native:ec2:NetworkInsightsAnalysisStatus","description":"The status of the network insights analysis."},"statusMessage":{"description":"The status message, if the status is `failed` .","type":"string"},"suggestedAccounts":{"description":"The IDs of potential intermediate accounts.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to apply.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getNetworkInsightsPath":{"description":"Resource schema for AWS::EC2::NetworkInsightsPath","inputs":{"properties":{"networkInsightsPathId":{"type":"string","description":"The ID of the path."}},"required":["networkInsightsPathId"]},"outputs":{"properties":{"createdDate":{"description":"The time stamp when the path was created.","type":"string"},"destinationArn":{"description":"The Amazon Resource Name (ARN) of the destination.","type":"string"},"networkInsightsPathArn":{"description":"The Amazon Resource Name (ARN) of the path.","type":"string"},"networkInsightsPathId":{"description":"The ID of the path.","type":"string"},"sourceArn":{"description":"The Amazon Resource Name (ARN) of the source.","type":"string"},"tags":{"description":"The tags to add to the path.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getNetworkInterface":{"description":"The AWS::EC2::NetworkInterface resource creates network interface","inputs":{"properties":{"id":{"type":"string","description":"Network interface id."}},"required":["id"]},"outputs":{"properties":{"connectionTrackingSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceConnectionTrackingSpecification","description":"A connection tracking specification for the network interface."},"description":{"description":"A description for the network interface.","type":"string"},"enablePrimaryIpv6":{"description":"If you have instances or ENIs that rely on the IPv6 address not changing, to avoid disrupting traffic to instances or ENIs, you can enable a primary IPv6 address. Enable this option to automatically assign an IPv6 associated with the ENI attached to your instance to be the primary IPv6 address. When you enable an IPv6 address to be a primary IPv6, you cannot disable it. Traffic will be routed to the primary IPv6 address until the instance is terminated or the ENI is detached. If you have multiple IPv6 addresses associated with an ENI and you enable a primary IPv6 address, the first IPv6 address associated with the ENI becomes the primary IPv6 address.","type":"boolean"},"groupSet":{"description":"A list of security group IDs associated with this network interface.","items":{"type":"string"},"type":"array"},"id":{"description":"Network interface id.","type":"string"},"ipv4PrefixCount":{"description":"The number of IPv4 prefixes to assign to a network interface. When you specify a number of IPv4 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /28 prefixes. You can't specify a count of IPv4 prefixes if you've specified one of the following: specific IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses.","type":"integer"},"ipv4Prefixes":{"description":"Assigns a list of IPv4 prefixes to the network interface. If you want EC2 to automatically assign IPv4 prefixes, use the Ipv4PrefixCount property and do not specify this property. Presently, only /28 prefixes are supported. You can't specify IPv4 prefixes if you've specified one of the following: a count of IPv4 prefixes, specific private IPv4 addresses, or a count of private IPv4 addresses.","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceIpv4PrefixSpecification"},"type":"array"},"ipv6AddressCount":{"description":"The number of IPv6 addresses to assign to a network interface. Amazon EC2 automatically selects the IPv6 addresses from the subnet range. To specify specific IPv6 addresses, use the Ipv6Addresses property and don't specify this property.","type":"integer"},"ipv6Addresses":{"description":"One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet to associate with the network interface. If you're specifying a number of IPv6 addresses, use the Ipv6AddressCount property and don't specify this property.","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceInstanceIpv6Address"},"type":"array"},"ipv6PrefixCount":{"description":"The number of IPv6 prefixes to assign to a network interface. When you specify a number of IPv6 prefixes, Amazon EC2 selects these prefixes from your existing subnet CIDR reservations, if available, or from free spaces in the subnet. By default, these will be /80 prefixes. You can't specify a count of IPv6 prefixes if you've specified one of the following: specific IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses.","type":"integer"},"ipv6Prefixes":{"description":"Assigns a list of IPv6 prefixes to the network interface. If you want EC2 to automatically assign IPv6 prefixes, use the Ipv6PrefixCount property and do not specify this property. Presently, only /80 prefixes are supported. You can't specify IPv6 prefixes if you've specified one of the following: a count of IPv6 prefixes, specific IPv6 addresses, or a count of IPv6 addresses.","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceIpv6PrefixSpecification"},"type":"array"},"primaryIpv6Address":{"description":"The primary IPv6 address","type":"string"},"primaryPrivateIpAddress":{"description":"Returns the primary private IP address of the network interface.","type":"string"},"privateIpAddresses":{"description":"Assigns a list of private IP addresses to the network interface. You can specify a primary private IP address by setting the value of the Primary property to true in the PrivateIpAddressSpecification property. If you want EC2 to automatically assign private IP addresses, use the SecondaryPrivateIpAddressCount property and do not specify this property.","items":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePrivateIpAddressSpecification"},"type":"array"},"publicIpDnsNameOptions":{"$ref":"#/types/aws-native:ec2:NetworkInterfacePublicIpDnsNameOptions"},"secondaryPrivateIpAddressCount":{"description":"The number of secondary private IPv4 addresses to assign to a network interface. When you specify a number of secondary IPv4 addresses, Amazon EC2 selects these IP addresses within the subnet's IPv4 CIDR range. You can't specify this option and specify more than one private IP address using privateIpAddresses","type":"integer"},"secondaryPrivateIpAddresses":{"description":"Returns the secondary private IP addresses of the network interface.","items":{"type":"string"},"type":"array"},"sourceDestCheck":{"description":"Indicates whether traffic to or from the instance is validated.","type":"boolean"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this network interface.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"The ID of the VPC","type":"string"}}}},"aws-native:ec2:getNetworkInterfaceAttachment":{"description":"Attaches an elastic network interface (ENI) to an Amazon EC2 instance. You can use this resource type to attach additional network interfaces to an instance without interruption.","inputs":{"properties":{"attachmentId":{"type":"string","description":"The ID of the network interface attachment."}},"required":["attachmentId"]},"outputs":{"properties":{"attachmentId":{"description":"The ID of the network interface attachment.","type":"string"},"deleteOnTermination":{"description":"Whether to delete the network interface when the instance terminates. By default, this value is set to ``true``.","type":"boolean"},"enaQueueCount":{"description":"The number of ENA queues created with the instance.","type":"integer"},"enaSrdSpecification":{"$ref":"#/types/aws-native:ec2:NetworkInterfaceAttachmentEnaSrdSpecification","description":"Configures ENA Express for the network interface that this action attaches to the instance."}}}},"aws-native:ec2:getPlacementGroup":{"description":"Resource Type definition for AWS::EC2::PlacementGroup","inputs":{"properties":{"groupName":{"type":"string","description":"The Group Name of Placement Group."}},"required":["groupName"]},"outputs":{"properties":{"groupName":{"description":"The Group Name of Placement Group.","type":"string"}}}},"aws-native:ec2:getPrefixList":{"description":"Resource schema of AWS::EC2::PrefixList Type","inputs":{"properties":{"prefixListId":{"type":"string","description":"Id of Prefix List."}},"required":["prefixListId"]},"outputs":{"properties":{"addressFamily":{"$ref":"#/types/aws-native:ec2:PrefixListAddressFamily","description":"Ip Version of Prefix List."},"arn":{"description":"The Amazon Resource Name (ARN) of the Prefix List.","type":"string"},"entries":{"description":"Entries of Prefix List.","items":{"$ref":"#/types/aws-native:ec2:PrefixListEntry"},"type":"array"},"maxEntries":{"description":"Max Entries of Prefix List.","type":"integer"},"ownerId":{"description":"Owner Id of Prefix List.","type":"string"},"prefixListId":{"description":"Id of Prefix List.","type":"string"},"prefixListName":{"description":"Name of Prefix List.","type":"string"},"tags":{"description":"Tags for Prefix List","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"Version of Prefix List.","type":"integer"}}}},"aws-native:ec2:getRoute":{"description":"Specifies a route in a route table. For more information, see [Routes](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html#route-table-routes) in the *Amazon VPC User Guide*.\n You must specify either a destination CIDR block or prefix list ID. You must also specify exactly one of the resources as the target.\n If you create a route that references a transit gateway in the same template where you create the transit gateway, you must declare a dependency on the transit gateway attachment. The route table cannot use the transit gateway until it has successfully attached to the VPC. Add a [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) in the ``AWS::EC2::Route`` resource to explicitly declare a dependency on the ``AWS::EC2::TransitGatewayAttachment`` resource.","inputs":{"properties":{"cidrBlock":{"type":"string","description":"The IPv4 CIDR block."},"routeTableId":{"type":"string","description":"The ID of the route table for the route."}},"required":["routeTableId","cidrBlock"]},"outputs":{"properties":{"carrierGatewayId":{"description":"The ID of the carrier gateway.\n You can only use this option when the VPC contains a subnet which is associated with a Wavelength Zone.","type":"string"},"cidrBlock":{"description":"The IPv4 CIDR block.","type":"string"},"coreNetworkArn":{"description":"The Amazon Resource Name (ARN) of the core network.","type":"string"},"egressOnlyInternetGatewayId":{"description":"[IPv6 traffic only] The ID of an egress-only internet gateway.","type":"string"},"gatewayId":{"description":"The ID of an internet gateway or virtual private gateway attached to your VPC.","type":"string"},"instanceId":{"description":"The ID of a NAT instance in your VPC. The operation fails if you specify an instance ID unless exactly one network interface is attached.","type":"string"},"localGatewayId":{"description":"The ID of the local gateway.","type":"string"},"natGatewayId":{"description":"[IPv4 traffic only] The ID of a NAT gateway.","type":"string"},"networkInterfaceId":{"description":"The ID of a network interface.","type":"string"},"transitGatewayId":{"description":"The ID of a transit gateway.","type":"string"},"vpcEndpointId":{"description":"The ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only.","type":"string"},"vpcPeeringConnectionId":{"description":"The ID of a VPC peering connection.","type":"string"}}}},"aws-native:ec2:getRouteServer":{"description":"VPC Route Server","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Route Server."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Route Server.","type":"string"},"id":{"description":"The ID of the Route Server.","type":"string"},"persistRoutes":{"$ref":"#/types/aws-native:ec2:RouteServerPersistRoutes","description":"Whether to enable persistent routes"},"snsNotificationsEnabled":{"description":"Whether to enable SNS notifications","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getRouteServerEndpoint":{"description":"VPC Route Server Endpoint","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Route Server Endpoint."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Route Server Endpoint.","type":"string"},"eniAddress":{"description":"Elastic Network Interface IP address owned by the Route Server Endpoint","type":"string"},"eniId":{"description":"Elastic Network Interface ID owned by the Route Server Endpoint","type":"string"},"id":{"description":"The ID of the Route Server Endpoint.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"VPC ID","type":"string"}}}},"aws-native:ec2:getRouteServerPeer":{"description":"VPC Route Server Peer","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Route Server Peer."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Route Server Peer.","type":"string"},"endpointEniAddress":{"description":"Elastic Network Interface IP address owned by the Route Server Endpoint","type":"string"},"endpointEniId":{"description":"Elastic Network Interface ID owned by the Route Server Endpoint","type":"string"},"id":{"description":"The ID of the Route Server Peer.","type":"string"},"routeServerId":{"description":"Route Server ID","type":"string"},"subnetId":{"description":"Subnet ID","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"VPC ID","type":"string"}}}},"aws-native:ec2:getRouteTable":{"description":"Specifies a route table for the specified VPC. After you create a route table, you can add routes and associate the table with a subnet.\n For more information, see [Route tables](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html) in the *Amazon VPC User Guide*.","inputs":{"properties":{"routeTableId":{"type":"string","description":"The ID of the route table."}},"required":["routeTableId"]},"outputs":{"properties":{"routeTableId":{"description":"The ID of the route table.","type":"string"},"tags":{"description":"Any tags assigned to the route table.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getSecurityGroup":{"description":"Resource Type definition for AWS::EC2::SecurityGroup","inputs":{"properties":{"id":{"type":"string","description":"The group name or group ID depending on whether the SG is created in default or specific VPC"}},"required":["id"]},"outputs":{"properties":{"groupId":{"description":"The group ID of the specified security group.","type":"string"},"id":{"description":"The group name or group ID depending on whether the SG is created in default or specific VPC","type":"string"},"securityGroupEgress":{"description":"[VPC only] The outbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group.","items":{"$ref":"#/types/aws-native:ec2:SecurityGroupEgress"},"type":"array"},"securityGroupIngress":{"description":"The inbound rules associated with the security group. There is a short interruption during which you cannot connect to the security group.","items":{"$ref":"#/types/aws-native:ec2:SecurityGroupIngress"},"type":"array"},"tags":{"description":"Any tags assigned to the security group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getSecurityGroupEgress":{"description":"Adds the specified outbound (egress) rule to a security group.\n An outbound rule permits instances to send traffic to the specified IPv4 or IPv6 address range, the IP addresses that are specified by a prefix list, or the instances that are associated with a destination security group. For more information, see [Security group rules](https://docs.aws.amazon.com/vpc/latest/userguide/security-group-rules.html).\n You must specify exactly one of the following destinations: an IPv4 address range, an IPv6 address range, a prefix list, or a security group.\n You must specify a protocol for each rule (for example, TCP). If the protocol is TCP or UDP, you must also specify a port or port range. If the protocol is ICMP or ICMPv6, you must also specify the ICMP/ICMPv6 type and code. To specify all types or all codes, use -1.\n Rule changes are propagated to instances associated with the security group as quickly as possible. However, a small delay might occur.","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of an egress (outbound) security group rule.\n Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*","type":"string"},"id":{"type":"string"}}}},"aws-native:ec2:getSecurityGroupIngress":{"description":"Resource Type definition for AWS::EC2::SecurityGroupIngress","inputs":{"properties":{"id":{"type":"string","description":"The Security Group Rule Id"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"Updates the description of an ingress (inbound) security group rule. You can replace an existing description, or add a description to a rule that did not have one previously","type":"string"},"id":{"description":"The Security Group Rule Id","type":"string"}}}},"aws-native:ec2:getSecurityGroupVpcAssociation":{"description":"Resource type definition for the AWS::EC2::SecurityGroupVpcAssociation resource","inputs":{"properties":{"groupId":{"type":"string","description":"The group ID of the specified security group."},"vpcId":{"type":"string","description":"The ID of the VPC in the security group vpc association."}},"required":["groupId","vpcId"]},"outputs":{"properties":{"state":{"$ref":"#/types/aws-native:ec2:SecurityGroupVpcAssociationState","description":"The state of the security group vpc association."},"stateReason":{"description":"The reason for the state of the security group vpc association.","type":"string"},"vpcOwnerId":{"description":"The owner of the VPC in the security group vpc association.","type":"string"}}}},"aws-native:ec2:getSnapshotBlockPublicAccess":{"description":"Resource Type definition for AWS::EC2::SnapshotBlockPublicAccess","inputs":{"properties":{"accountId":{"type":"string","description":"The identifier for the specified AWS account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The identifier for the specified AWS account.","type":"string"},"state":{"$ref":"#/types/aws-native:ec2:SnapshotBlockPublicAccessState","description":"The state of EBS Snapshot Block Public Access."}}}},"aws-native:ec2:getSpotFleet":{"description":"Resource Type definition for AWS::EC2::SpotFleet","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Spot Fleet."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the Spot Fleet.","type":"string"},"spotFleetRequestConfigData":{"$ref":"#/types/aws-native:ec2:SpotFleetRequestConfigData","description":"Describes the configuration of a Spot Fleet request."},"tags":{"description":"The tags to specify in SpotFleetRequestConfigData","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getSqlHaStandbyDetectedInstance":{"description":"Resource Type definition for AWS::EC2::SqlHaStandbyDetectedInstance","inputs":{"properties":{"instanceId":{"type":"string"}},"required":["instanceId"]},"outputs":{"properties":{"haStatus":{"$ref":"#/types/aws-native:ec2:SqlHaStandbyDetectedInstanceHaStatus"},"lastUpdatedTime":{"type":"string"},"sqlServerCredentials":{"type":"string"},"sqlServerLicenseUsage":{"$ref":"#/types/aws-native:ec2:SqlHaStandbyDetectedInstanceSqlServerLicenseUsage"}}}},"aws-native:ec2:getSubnet":{"description":"Specifies a subnet for the specified VPC.\n For an IPv4 only subnet, specify an IPv4 CIDR block. If the VPC has an IPv6 CIDR block, you can create an IPv6 only subnet or a dual stack subnet instead. For an IPv6 only subnet, specify an IPv6 CIDR block. For a dual stack subnet, specify both an IPv4 CIDR block and an IPv6 CIDR block.\n For more information, see [Subnets for your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/configure-subnets.html) in the *Amazon VPC User Guide*.","inputs":{"properties":{"subnetId":{"type":"string","description":"The ID of the subnet."}},"required":["subnetId"]},"outputs":{"properties":{"assignIpv6AddressOnCreation":{"description":"Indicates whether a network interface created in this subnet receives an IPv6 address. The default value is ``false``.\n If you specify ``AssignIpv6AddressOnCreation``, you must also specify an IPv6 CIDR block.","type":"boolean"},"blockPublicAccessStates":{"$ref":"#/types/aws-native:ec2:BlockPublicAccessStatesProperties"},"enableDns64":{"description":"Indicates whether DNS queries made to the Amazon-provided DNS Resolver in this subnet should return synthetic IPv6 addresses for IPv4-only destinations.\n  You must first configure a NAT gateway in a public subnet (separate from the subnet containing the IPv6-only workloads). For example, the subnet containing the NAT gateway should have a ``0.0.0.0/0`` route pointing to the internet gateway. For more information, see [Configure DNS64 and NAT64](https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-nat64-dns64.html#nat-gateway-nat64-dns64-walkthrough) in the *User Guide*.","type":"boolean"},"ipv6CidrBlock":{"description":"The IPv6 CIDR block.\n If you specify ``AssignIpv6AddressOnCreation``, you must also specify an IPv6 CIDR block.","type":"string"},"ipv6CidrBlocks":{"description":"The IPv6 CIDR blocks that are associated with the subnet.","items":{"type":"string"},"type":"array"},"mapPublicIpOnLaunch":{"description":"Indicates whether instances launched in this subnet receive a public IPv4 address. The default value is ``false``.\n AWS charges for all public IPv4 addresses, including public IPv4 addresses associated with running instances and Elastic IP addresses. For more information, see the *Public IPv4 Address* tab on the [VPC pricing page](https://docs.aws.amazon.com/vpc/pricing/).","type":"boolean"},"networkAclAssociationId":{"description":"The ID of the network ACL that is associated with the subnet's VPC, such as `acl-5fb85d36` .","type":"string"},"privateDnsNameOptionsOnLaunch":{"$ref":"#/types/aws-native:ec2:PrivateDnsNameOptionsOnLaunchProperties","description":"The hostname type for EC2 instances launched into this subnet and how DNS A and AAAA record queries to the instances should be handled. For more information, see [Amazon EC2 instance hostname types](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html) in the *User Guide*.\n Available options:\n  +  EnableResourceNameDnsAAAARecord (true | false)\n  +  EnableResourceNameDnsARecord (true | false)\n  +  HostnameType (ip-name | resource-name)"},"subnetId":{"description":"The ID of the subnet.","type":"string"},"tags":{"description":"Any tags assigned to the subnet.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getSubnetCidrBlock":{"description":"The AWS::EC2::SubnetCidrBlock resource creates association between subnet and IPv6 CIDR","inputs":{"properties":{"id":{"type":"string","description":"Information about the IPv6 association."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"Information about the IPv6 association.","type":"string"},"ipSource":{"description":"The IP Source of an IPv6 Subnet CIDR Block.","type":"string"},"ipv6AddressAttribute":{"description":"The value denoting whether an IPv6 Subnet CIDR Block is public or private.","type":"string"}}}},"aws-native:ec2:getSubnetNetworkAclAssociation":{"description":"Resource Type definition for AWS::EC2::SubnetNetworkAclAssociation","inputs":{"properties":{"associationId":{"type":"string","description":"Returns the value of this object's AssociationId property."}},"required":["associationId"]},"outputs":{"properties":{"associationId":{"description":"Returns the value of this object's AssociationId property.","type":"string"}}}},"aws-native:ec2:getSubnetRouteTableAssociation":{"description":"Associates a subnet with a route table. The subnet and route table must be in the same VPC. This association causes traffic originating from the subnet to be routed according to the routes in the route table. A route table can be associated with multiple subnets. To create a route table, see [AWS::EC2::RouteTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-routetable.html).","inputs":{"properties":{"id":{"type":"string","description":"The ID of the subnet route table association."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the subnet route table association.","type":"string"}}}},"aws-native:ec2:getTrafficMirrorFilter":{"description":"Resource schema for AWS::EC2::TrafficMirrorFilter","inputs":{"properties":{"id":{"type":"string","description":"The ID of a traffic mirror filter."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of a traffic mirror filter.","type":"string"},"networkServices":{"description":"The network service that is associated with the traffic mirror filter.","items":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterTrafficMirrorNetworkService"},"type":"array"},"tags":{"description":"The tags for a traffic mirror filter.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getTrafficMirrorFilterRule":{"description":"Resource Type definition for for AWS::EC2::TrafficMirrorFilterRule","inputs":{"properties":{"trafficMirrorFilterRuleId":{"type":"string","description":"The ID of the Traffic Mirror Filter rule."}},"required":["trafficMirrorFilterRuleId"]},"outputs":{"properties":{"description":{"description":"The description of the Traffic Mirror Filter rule.","type":"string"},"destinationCidrBlock":{"description":"The destination CIDR block to assign to the Traffic Mirror rule.","type":"string"},"destinationPortRange":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange","description":"The destination port range."},"protocol":{"description":"The number of protocol, for example 17 (UDP), to assign to the Traffic Mirror rule.","type":"integer"},"ruleAction":{"description":"The action to take on the filtered traffic (accept/reject).","type":"string"},"ruleNumber":{"description":"The number of the Traffic Mirror rule.","type":"integer"},"sourceCidrBlock":{"description":"The source CIDR block to assign to the Traffic Mirror Filter rule.","type":"string"},"sourcePortRange":{"$ref":"#/types/aws-native:ec2:TrafficMirrorFilterRuleTrafficMirrorPortRange","description":"The source port range."},"tags":{"description":"Any tags assigned to the Traffic Mirror Filter rule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trafficDirection":{"description":"The direction of traffic (ingress/egress).","type":"string"},"trafficMirrorFilterRuleId":{"description":"The ID of the Traffic Mirror Filter rule.","type":"string"}}}},"aws-native:ec2:getTrafficMirrorSession":{"description":"Resource schema for AWS::EC2::TrafficMirrorSession","inputs":{"properties":{"id":{"type":"string","description":"The ID of a Traffic Mirror session."}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the Traffic Mirror session.","type":"string"},"id":{"description":"The ID of a Traffic Mirror session.","type":"string"},"networkInterfaceId":{"description":"The ID of the source network interface.","type":"string"},"ownerId":{"description":"The ID of the account that owns the Traffic Mirror session.","type":"string"},"packetLength":{"description":"The number of bytes in each packet to mirror.","type":"integer"},"sessionNumber":{"description":"The session number determines the order in which sessions are evaluated when an interface is used by multiple sessions. The first session with a matching filter is the one that mirrors the packets.","type":"integer"},"tags":{"description":"The tags assigned to the Traffic Mirror session.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trafficMirrorFilterId":{"description":"The ID of a Traffic Mirror filter.","type":"string"},"trafficMirrorTargetId":{"description":"The ID of a Traffic Mirror target.","type":"string"},"virtualNetworkId":{"description":"The VXLAN ID for the Traffic Mirror session.","type":"integer"}}}},"aws-native:ec2:getTrafficMirrorTarget":{"description":"The description of the Traffic Mirror target.","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"id":{"type":"string"},"tags":{"description":" The tags to assign to the Traffic Mirror target.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getTransitGateway":{"description":"Resource Type definition for AWS::EC2::TransitGateway","inputs":{"properties":{"id":{"type":"string","description":"The ID of the transit gateway."}},"required":["id"]},"outputs":{"properties":{"associationDefaultRouteTableId":{"description":"The ID of the default association route table.","type":"string"},"autoAcceptSharedAttachments":{"description":"Enable or disable automatic acceptance of attachment requests. Disabled by default.","type":"string"},"defaultRouteTableAssociation":{"description":"Enable or disable automatic association with the default association route table. Enabled by default. If `DefaultRouteTableAssociation` is set to enable, AWS Transit Gateway will create the default transit gateway route table.","type":"string"},"defaultRouteTablePropagation":{"description":"Enable or disable automatic propagation of routes to the default propagation route table. Enabled by default. If `DefaultRouteTablePropagation` is set to enable, AWS Transit Gateway will create the default transit gateway route table.","type":"string"},"description":{"description":"The description of the transit gateway.","type":"string"},"dnsSupport":{"description":"Enable or disable DNS support. Enabled by default.","type":"string"},"encryptionSupportState":{"description":"The encryption support state of the transit gateway.","type":"string"},"id":{"description":"The ID of the transit gateway.","type":"string"},"propagationDefaultRouteTableId":{"description":"The ID of the default propagation route table.","type":"string"},"securityGroupReferencingSupport":{"description":"Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.\n\nFor important information about this feature, see [Create a transit gateway](https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw) in the *AWS Transit Gateway Guide* .","type":"string"},"tags":{"description":"The tags for the transit gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayArn":{"type":"string"},"transitGatewayCidrBlocks":{"description":"The transit gateway CIDR blocks.","items":{"type":"string"},"type":"array"},"vpnEcmpSupport":{"description":"Enable or disable Equal Cost Multipath Protocol support. Enabled by default.","type":"string"}}}},"aws-native:ec2:getTransitGatewayAttachment":{"description":"Resource Type definition for AWS::EC2::TransitGatewayAttachment","inputs":{"properties":{"id":{"type":"string","description":"The ID of the attachment."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the attachment.","type":"string"},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway vpc attachment."},"subnetIds":{"description":"The IDs of one or more subnets. You can specify only one subnet per Availability Zone. You must specify at least one subnet, but we recommend that you specify two subnets for better availability. The transit gateway uses one IP address from each specified subnet.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags for the attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getTransitGatewayConnect":{"description":"The AWS::EC2::TransitGatewayConnect type","inputs":{"properties":{"transitGatewayAttachmentId":{"type":"string","description":"The ID of the Connect attachment."}},"required":["transitGatewayAttachmentId"]},"outputs":{"properties":{"creationTime":{"description":"The creation time.","type":"string"},"state":{"description":"The state of the attachment.","type":"string"},"tags":{"description":"The tags for the attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayAttachmentId":{"description":"The ID of the Connect attachment.","type":"string"},"transitGatewayId":{"description":"The ID of the transit gateway.","type":"string"}}}},"aws-native:ec2:getTransitGatewayConnectPeer":{"description":"Resource Type definition for AWS::EC2::TransitGatewayConnectPeer","inputs":{"properties":{"transitGatewayConnectPeerId":{"type":"string","description":"The ID of the Connect peer."}},"required":["transitGatewayConnectPeerId"]},"outputs":{"properties":{"creationTime":{"description":"The creation time.","type":"string"},"state":{"description":"The state of the Connect peer.","type":"string"},"tags":{"description":"The tags for the Connect Peer.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayConnectPeerId":{"description":"The ID of the Connect peer.","type":"string"}}}},"aws-native:ec2:getTransitGatewayMeteringPolicy":{"description":"AWS::EC2::TransitGatewayMeteringPolicy Resource Definition","inputs":{"properties":{"transitGatewayMeteringPolicyId":{"type":"string","description":"The Id of the transit gateway metering policy"}},"required":["transitGatewayMeteringPolicyId"]},"outputs":{"properties":{"middleboxAttachmentIds":{"description":"Middle box attachment Ids","items":{"type":"string"},"type":"array"},"state":{"description":"State of the transit gateway metering policy","type":"string"},"tags":{"description":"The tags assigned to the transit gateway metering policy.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayMeteringPolicyId":{"description":"The Id of the transit gateway metering policy","type":"string"},"updateEffectiveAt":{"description":"The timestamp at which the latest action performed on the metering policy will become effective","type":"string"}}}},"aws-native:ec2:getTransitGatewayMeteringPolicyEntry":{"description":"AWS::EC2::TransitGatewayMeteringPolicyEntry Resource Definition","inputs":{"properties":{"policyRuleNumber":{"type":"integer","description":"The rule number of the metering policy entry"},"transitGatewayMeteringPolicyId":{"type":"string","description":"The ID of the transit gateway metering policy for which the entry is being created"}},"required":["transitGatewayMeteringPolicyId","policyRuleNumber"]},"outputs":{"properties":{"state":{"description":"State of the transit gateway metering policy","type":"string"},"updateEffectiveAt":{"description":"The timestamp at which the latest action performed on the metering policy entry will become effective","type":"string"}}}},"aws-native:ec2:getTransitGatewayMulticastDomain":{"description":"The AWS::EC2::TransitGatewayMulticastDomain type","inputs":{"properties":{"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"required":["transitGatewayMulticastDomainId"]},"outputs":{"properties":{"creationTime":{"description":"The time the transit gateway multicast domain was created.","type":"string"},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway multicast domain."},"state":{"description":"The state of the transit gateway multicast domain.","type":"string"},"tags":{"description":"The tags for the transit gateway multicast domain.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayMulticastDomainArn":{"description":"The Amazon Resource Name (ARN) of the transit gateway multicast domain.","type":"string"},"transitGatewayMulticastDomainId":{"description":"The ID of the transit gateway multicast domain.","type":"string"}}}},"aws-native:ec2:getTransitGatewayMulticastDomainAssociation":{"description":"The AWS::EC2::TransitGatewayMulticastDomainAssociation type","inputs":{"properties":{"subnetId":{"type":"string","description":"The IDs of the subnets to associate with the transit gateway multicast domain."},"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"required":["transitGatewayMulticastDomainId","transitGatewayAttachmentId","subnetId"]},"outputs":{"properties":{"resourceId":{"description":"The ID of the resource.","type":"string"},"resourceType":{"description":"The type of resource, for example a VPC attachment.","type":"string"},"state":{"description":"The state of the subnet association.","type":"string"}}}},"aws-native:ec2:getTransitGatewayMulticastGroupMember":{"description":"The AWS::EC2::TransitGatewayMulticastGroupMember registers and deregisters members and sources (network interfaces) with the transit gateway multicast group","inputs":{"properties":{"groupIpAddress":{"type":"string","description":"The IP address assigned to the transit gateway multicast group."},"networkInterfaceId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"required":["transitGatewayMulticastDomainId","groupIpAddress","networkInterfaceId"]},"outputs":{"properties":{"groupMember":{"description":"Indicates that the resource is a transit gateway multicast group member.","type":"boolean"},"groupSource":{"description":"Indicates that the resource is a transit gateway multicast group member.","type":"boolean"},"memberType":{"description":"The member type (for example, static).","type":"string"},"resourceId":{"description":"The ID of the resource.","type":"string"},"resourceType":{"description":"The type of resource, for example a VPC attachment.","type":"string"},"subnetId":{"description":"The ID of the subnet.","type":"string"},"transitGatewayAttachmentId":{"description":"The ID of the transit gateway attachment.","type":"string"}}}},"aws-native:ec2:getTransitGatewayMulticastGroupSource":{"description":"The AWS::EC2::TransitGatewayMulticastGroupSource registers and deregisters members and sources (network interfaces) with the transit gateway multicast group","inputs":{"properties":{"groupIpAddress":{"type":"string","description":"The IP address assigned to the transit gateway multicast group."},"networkInterfaceId":{"type":"string","description":"The ID of the transit gateway attachment."},"transitGatewayMulticastDomainId":{"type":"string","description":"The ID of the transit gateway multicast domain."}},"required":["transitGatewayMulticastDomainId","groupIpAddress","networkInterfaceId"]},"outputs":{"properties":{"groupMember":{"description":"Indicates that the resource is a transit gateway multicast group member.","type":"boolean"},"groupSource":{"description":"Indicates that the resource is a transit gateway multicast group member.","type":"boolean"},"resourceId":{"description":"The ID of the resource.","type":"string"},"resourceType":{"description":"The type of resource, for example a VPC attachment.","type":"string"},"sourceType":{"description":"The source type.","type":"string"},"subnetId":{"description":"The ID of the subnet.","type":"string"},"transitGatewayAttachmentId":{"description":"The ID of the transit gateway attachment.","type":"string"}}}},"aws-native:ec2:getTransitGatewayPeeringAttachment":{"description":"The AWS::EC2::TransitGatewayPeeringAttachment type","inputs":{"properties":{"transitGatewayAttachmentId":{"type":"string","description":"The ID of the transit gateway peering attachment."}},"required":["transitGatewayAttachmentId"]},"outputs":{"properties":{"creationTime":{"description":"The time the transit gateway peering attachment was created.","type":"string"},"state":{"description":"The state of the transit gateway peering attachment. Note that the initiating state has been deprecated.","type":"string"},"status":{"$ref":"#/types/aws-native:ec2:TransitGatewayPeeringAttachmentPeeringAttachmentStatus","description":"The status of the transit gateway peering attachment."},"tags":{"description":"The tags for the transit gateway peering attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayAttachmentId":{"description":"The ID of the transit gateway peering attachment.","type":"string"}}}},"aws-native:ec2:getTransitGatewayRouteTable":{"description":"Resource Type definition for AWS::EC2::TransitGatewayRouteTable","inputs":{"properties":{"transitGatewayRouteTableId":{"type":"string","description":"Transit Gateway Route Table primary identifier"}},"required":["transitGatewayRouteTableId"]},"outputs":{"properties":{"tags":{"description":"Tags are composed of a Key/Value pair. You can use tags to categorize and track each parameter group. The tag value null is permitted.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayRouteTableId":{"description":"Transit Gateway Route Table primary identifier","type":"string"}}}},"aws-native:ec2:getTransitGatewayVpcAttachment":{"description":"Resource Type definition for AWS::EC2::TransitGatewayVpcAttachment","inputs":{"properties":{"id":{"type":"string","description":"The ID of the attachment."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the attachment.","type":"string"},"options":{"$ref":"#/types/aws-native:ec2:OptionsProperties","description":"The options for the transit gateway vpc attachment."},"tags":{"description":"The tags for the VPC attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getVerifiedAccessEndpoint":{"description":"The AWS::EC2::VerifiedAccessEndpoint resource creates an AWS EC2 Verified Access Endpoint.","inputs":{"properties":{"verifiedAccessEndpointId":{"type":"string","description":"The ID of the AWS Verified Access endpoint."}},"required":["verifiedAccessEndpointId"]},"outputs":{"properties":{"cidrOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointCidrOptions","description":"The options for cidr type endpoint."},"creationTime":{"description":"The creation time.","type":"string"},"description":{"description":"A description for the AWS Verified Access endpoint.","type":"string"},"deviceValidationDomain":{"description":"Returned if endpoint has a device trust provider attached.","type":"string"},"endpointDomain":{"description":"A DNS name that is generated for the endpoint.","type":"string"},"lastUpdatedTime":{"description":"The last updated time.","type":"string"},"loadBalancerOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointLoadBalancerOptions","description":"The load balancer details if creating the AWS Verified Access endpoint as load-balancer type."},"networkInterfaceOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointNetworkInterfaceOptions","description":"The options for network-interface type endpoint."},"policyDocument":{"description":"The AWS Verified Access policy document.","type":"string"},"policyEnabled":{"description":"The status of the Verified Access policy.","type":"boolean"},"rdsOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointRdsOptions","description":"The options for rds type endpoint."},"sseSpecification":{"$ref":"#/types/aws-native:ec2:VerifiedAccessEndpointSseSpecification","description":"The configuration options for customer provided KMS encryption."},"status":{"description":"The endpoint status.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"verifiedAccessEndpointId":{"description":"The ID of the AWS Verified Access endpoint.","type":"string"},"verifiedAccessGroupId":{"description":"The ID of the AWS Verified Access group.","type":"string"},"verifiedAccessInstanceId":{"description":"The ID of the AWS Verified Access instance.","type":"string"}}}},"aws-native:ec2:getVerifiedAccessGroup":{"description":"The AWS::EC2::VerifiedAccessGroup resource creates an AWS EC2 Verified Access Group.","inputs":{"properties":{"verifiedAccessGroupId":{"type":"string","description":"The ID of the AWS Verified Access group."}},"required":["verifiedAccessGroupId"]},"outputs":{"properties":{"creationTime":{"description":"Time this Verified Access Group was created.","type":"string"},"description":{"description":"A description for the AWS Verified Access group.","type":"string"},"lastUpdatedTime":{"description":"Time this Verified Access Group was last updated.","type":"string"},"owner":{"description":"The AWS account number that owns the group.","type":"string"},"policyDocument":{"description":"The AWS Verified Access policy document.","type":"string"},"policyEnabled":{"description":"The status of the Verified Access policy.","type":"boolean"},"sseSpecification":{"$ref":"#/types/aws-native:ec2:VerifiedAccessGroupSseSpecification","description":"The configuration options for customer provided KMS encryption."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"verifiedAccessGroupArn":{"description":"The ARN of the Verified Access group.","type":"string"},"verifiedAccessGroupId":{"description":"The ID of the AWS Verified Access group.","type":"string"},"verifiedAccessInstanceId":{"description":"The ID of the AWS Verified Access instance.","type":"string"}}}},"aws-native:ec2:getVerifiedAccessInstance":{"description":"The AWS::EC2::VerifiedAccessInstance resource creates an AWS EC2 Verified Access Instance.","inputs":{"properties":{"verifiedAccessInstanceId":{"type":"string","description":"The ID of the AWS Verified Access instance."}},"required":["verifiedAccessInstanceId"]},"outputs":{"properties":{"cidrEndpointsCustomSubDomain":{"description":"Introduce CidrEndpointsCustomSubDomain property to represent the domain (say, ava.my-company.com)","type":"string"},"cidrEndpointsCustomSubDomainNameServers":{"description":"Property to represent the name servers assoicated with the domain that AVA manages (say, ['ns1.amazonaws.com', 'ns2.amazonaws.com', 'ns3.amazonaws.com', 'ns4.amazonaws.com']).","items":{"type":"string"},"type":"array"},"creationTime":{"description":"Time this Verified Access Instance was created.","type":"string"},"description":{"description":"A description for the AWS Verified Access instance.","type":"string"},"fipsEnabled":{"description":"Indicates whether FIPS is enabled","type":"boolean"},"lastUpdatedTime":{"description":"Time this Verified Access Instance was last updated.","type":"string"},"loggingConfigurations":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessLogs","description":"The configuration options for AWS Verified Access instances."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"verifiedAccessInstanceId":{"description":"The ID of the AWS Verified Access instance.","type":"string"},"verifiedAccessTrustProviderIds":{"description":"The IDs of the AWS Verified Access trust providers.","items":{"type":"string"},"type":"array"},"verifiedAccessTrustProviders":{"description":"AWS Verified Access trust providers.","items":{"$ref":"#/types/aws-native:ec2:VerifiedAccessInstanceVerifiedAccessTrustProvider"},"type":"array"}}}},"aws-native:ec2:getVerifiedAccessTrustProvider":{"description":"The AWS::EC2::VerifiedAccessTrustProvider type describes a verified access trust provider","inputs":{"properties":{"verifiedAccessTrustProviderId":{"type":"string","description":"The ID of the Amazon Web Services Verified Access trust provider."}},"required":["verifiedAccessTrustProviderId"]},"outputs":{"properties":{"creationTime":{"description":"The creation time.","type":"string"},"description":{"description":"A description for the Amazon Web Services Verified Access trust provider.","type":"string"},"lastUpdatedTime":{"description":"The last updated time.","type":"string"},"nativeApplicationOidcOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderNativeApplicationOidcOptions","description":"The OpenID Connect (OIDC) options."},"oidcOptions":{"$ref":"#/types/aws-native:ec2:VerifiedAccessTrustProviderOidcOptions","description":"The options for an OpenID Connect-compatible user-identity trust provider."},"sseSpecification":{"$ref":"#/types/aws-native:ec2:SseSpecificationProperties","description":"The configuration options for customer provided KMS encryption."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"verifiedAccessTrustProviderId":{"description":"The ID of the Amazon Web Services Verified Access trust provider.","type":"string"}}}},"aws-native:ec2:getVolume":{"description":"Specifies an Amazon Elastic Block Store (Amazon EBS) volume. You can create an empty volume, a volume from a snapshot, or a volume copy from an existing source volume.\n\n\u003e - When you use AWS CloudFormation to update an Amazon EBS volume that modifies `Iops` , `Size` , or `VolumeType` , there is a cooldown period before another operation can occur. This can cause your stack to report being in `UPDATE_IN_PROGRESS` or `UPDATE_ROLLBACK_IN_PROGRESS` for long periods of time. Some common scenarios when you might encounter a cooldown period for Amazon EBS include:\n\u003e \n\u003e - You successfully update an Amazon EBS volume and the update succeeds. When you attempt another update within the cooldown window, that update will be subject to a cooldown period.\n\u003e - You successfully update an Amazon EBS volume and the update succeeds but another change in your `update-stack` call fails. The rollback will be subject to a cooldown period.\n\u003e \n\u003e For more information, see [Requirements for EBS volume modifications](https://docs.aws.amazon.com/ebs/latest/userguide/modify-volume-requirements.html) .\n\u003e - Amazon EBS does not support sizing down an Amazon EBS volume. AWS CloudFormation does not attempt to modify an Amazon EBS volume to a smaller size on rollback. \n\n*DeletionPolicy attribute*\n\nTo control how AWS CloudFormation handles the volume when the stack is deleted, set a deletion policy for your volume. You can choose to retain the volume, to delete the volume, or to create a snapshot of the volume. For more information, see [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) .\n\n\u003e If you set a deletion policy that creates a snapshot, all tags on the volume are included in the snapshot.","inputs":{"properties":{"volumeId":{"type":"string","description":"The ID of the volume."}},"required":["volumeId"]},"outputs":{"properties":{"autoEnableIo":{"description":"Indicates whether the volume is auto-enabled for I/O operations. By default, EBS disables I/O to the volume from attached EC2 instances when it determines that a volume's data is potentially inconsistent. If the consistency of the volume is not a concern, and you prefer that the volume be made available immediately if it's impaired, you can configure the volume to automatically enable I/O.","type":"boolean"},"availabilityZone":{"description":"The ID of the Availability Zone in which to create the volume. For example, ``us-east-1a``.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.\n If you are creating a volume copy, omit this parameter. The volume copy is created in the same Availability Zone as the source volume.","type":"string"},"availabilityZoneId":{"description":"The ID of the Availability Zone in which to create the volume. For example, ``use1-az1``.\n Either ``AvailabilityZone`` or ``AvailabilityZoneId`` must be specified, but not both.\n If you are creating a volume copy, omit this parameter. The volume copy is created in the same Availability Zone as the source volume.","type":"string"},"encrypted":{"description":"Indicates whether the volume should be encrypted. The effect of setting the encryption state to ``true`` depends on the volume origin (new, from a snapshot, or from an existing volume), starting encryption state, ownership, and whether encryption by default is enabled. For more information, see [Encryption by default](https://docs.aws.amazon.com/ebs/latest/userguide/work-with-ebs-encr.html#encryption-by-default) in the *Amazon EBS User Guide*.\n If you are creating a volume copy, omit this parameter. The volume is automatically encrypted with the same KMS key as the source volume. You can't copy unencrypted volumes.","type":"boolean"},"iops":{"description":"The number of I/O operations per second (IOPS) to provision for the volume. Required for ``io1`` and ``io2`` volumes. Optional for ``gp3`` volumes. Omit for all other volume types. \n Valid ranges:\n  +  gp3: ``3,000``(*default*)``- 80,000`` IOPS\n  +  io1: ``100 - 64,000`` IOPS\n  +  io2: ``100 - 256,000`` IOPS\n  \n  [Instances built on the Nitro System](https://docs.aws.amazon.com/ec2/latest/instancetypes/ec2-nitro-instances.html) can support up to 256,000 IOPS. Other instances can support up to 32,000 IOPS.","type":"integer"},"kmsKeyId":{"description":"The identifier of the kms-key-long to use for Amazon EBS encryption. If ``KmsKeyId`` is specified, the encrypted state must be ``true``.\n If you omit this property and your account is enabled for encryption by default, or *Encrypted* is set to ``true``, then the volume is encrypted using the default key specified for your account. If your account does not have a default key, then the volume is encrypted using the aws-managed-key.\n Alternatively, if you want to specify a different key, you can specify one of the following:\n  +  Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.\n  +  Key alias. Specify the alias for the key, prefixed with ``alias/``. For example, for a key with the alias ``my_cmk``, use ``alias/my_cmk``. Or to specify the aws-managed-key, use ``alias/aws/ebs``.\n  +  Key ARN. For example, arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.\n  +  Alias ARN. For example, arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.\n  \n If you are creating a volume copy, omit this parameter. The volume is automatically encrypted with the same KMS key as the source volume. You can't copy unencrypted volumes.","type":"string"},"multiAttachEnabled":{"description":"Indicates whether Amazon EBS Multi-Attach is enabled.\n CFNlong does not currently support updating a single-attach volume to be multi-attach enabled, updating a multi-attach enabled volume to be single-attach, or updating the size or number of I/O operations per second (IOPS) of a multi-attach enabled volume.","type":"boolean"},"outpostArn":{"description":"The Amazon Resource Name (ARN) of the Outpost on which to create the volume.\n If you intend to use a volume with an instance running on an outpost, then you must create the volume on the same outpost as the instance. You can't use a volume created in an AWS Region with an instance on an AWS outpost, or the other way around.","type":"string"},"size":{"description":"The size of the volume, in GiBs.\n  +  Required for new empty volumes.\n  +  Optional for volumes created from snapshots and volume copies. In this case, the size defaults to the size of the snapshot or source volume. You can optionally specify a size that is equal to or larger than the size of the source snapshot or volume.\n  \n Supported volume sizes:\n  +  gp2: ``1 - 16,384`` GiB\n  +  gp3: ``1 - 65,536`` GiB\n  +  io1: ``4 - 16,384`` GiB\n  +  io2: ``4 - 65,536`` GiB\n  +  st1 and sc1: ``125 - 16,384`` GiB\n  +  standard: ``1 - 1024`` GiB","type":"integer"},"snapshotId":{"description":"The snapshot from which to create the volume. Only specify to create a volume from a snapshot. To create a new empty volume, omit this parameter and specify a value for ``Size`` instead. To create a volume copy, omit this parameter and specify ``SourceVolumeId`` instead.","type":"string"},"sourceVolumeId":{"description":"The ID of the source EBS volume to copy. When specified, the volume is created as an exact copy of the specified volume. Only specify to create a volume copy. To create a new empty volume or to create a volume from a snapshot, omit this parameter,","type":"string"},"tags":{"description":"The tags to apply to the volume during creation.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"throughput":{"description":"The throughput to provision for a volume, with a maximum of 2,000 MiB/s.\n This parameter is valid only for ``gp3`` volumes. The default value is 125.\n Valid Range: Minimum value of 125. Maximum value of 2000.\n The maximum ratio of throughput to IOPS is 0.25 MiB/s per IOPS. For example, a volume with 3,000 IOPS can have a maximum throughput of 750 MiB/s (3,000 x 0.25).","type":"integer"},"volumeId":{"description":"The ID of the volume.","type":"string"},"volumeInitializationRate":{"description":"Specifies the Amazon EBS Provisioned Rate for Volume Initialization (volume initialization rate), in MiB/s, at which to download the snapshot blocks from Amazon S3 to the volume. This is also known as *volume initialization*. Specifying a volume initialization rate ensures that the volume is initialized at a predictable and consistent rate after creation.\n This parameter is supported only for volumes created from snapshots. Omit this parameter if:\n  +  You want to create the volume using fast snapshot restore. You must specify a snapshot that is enabled for fast snapshot restore. In this case, the volume is fully initialized at creation.\n  If you specify a snapshot that is enabled for fast snapshot restore and a volume initialization rate, the volume will be initialized at the specified rate instead of fast snapshot restore.\n   +  You want to create a volume that is initialized at the default rate.\n  \n For more information, see [Initialize Amazon EBS volumes](https://docs.aws.amazon.com/ebs/latest/userguide/initalize-volume.html) in the *Amazon EC2 User Guide*.\n Valid range: 100 - 300 MiB/s","type":"integer"},"volumeType":{"description":"The volume type. This parameter can be one of the following values:\n  +  General Purpose SSD: ``gp2`` | ``gp3``\n  +  Provisioned IOPS SSD: ``io1`` | ``io2``\n  +  Throughput Optimized HDD: ``st1``\n  +  Cold HDD: ``sc1``\n  +  Magnetic: ``standard``\n  \n  Throughput Optimized HDD (``st1``) and Cold HDD (``sc1``) volumes can't be used as boot volumes.\n  For more information, see [Amazon EBS volume types](https://docs.aws.amazon.com/ebs/latest/userguide/ebs-volume-types.html) in the *Amazon EBS User Guide*.\n Default: ``gp2``","type":"string"}}}},"aws-native:ec2:getVpc":{"description":"Specifies a virtual private cloud (VPC).\n To add an IPv6 CIDR block to the VPC, see [AWS::EC2::VPCCidrBlock](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpccidrblock.html).\n For more information, see [Virtual private clouds (VPC)](https://docs.aws.amazon.com/vpc/latest/userguide/configure-your-vpc.html) in the *Amazon VPC User Guide*.","inputs":{"properties":{"vpcId":{"type":"string","description":"The ID of the VPC."}},"required":["vpcId"]},"outputs":{"properties":{"cidrBlockAssociations":{"description":"The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].","items":{"type":"string"},"type":"array"},"defaultNetworkAcl":{"description":"The ID of the default network ACL for the VPC. For example, acl-814dafe3.","type":"string"},"defaultSecurityGroup":{"description":"The ID of the default security group for the VPC. For example, sg-b178e0d3.","type":"string"},"enableDnsHostnames":{"description":"Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support).\n You can only enable DNS hostnames if you've enabled DNS support.","type":"boolean"},"enableDnsSupport":{"description":"Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range \"plus two\" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see [DNS attributes in your VPC](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-dns.html#vpc-dns-support).","type":"boolean"},"instanceTenancy":{"description":"The allowed tenancy of instances launched into the VPC.\n  +  ``default``: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.\n  +  ``dedicated``: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of ``host`` during instance launch. You cannot specify a tenancy of ``default`` during instance launch.\n  \n Updating ``InstanceTenancy`` requires no replacement only if you are updating its value from ``dedicated`` to ``default``. Updating ``InstanceTenancy`` from ``default`` to ``dedicated`` requires replacement.","type":"string"},"ipv6CidrBlocks":{"description":"The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags for the VPC.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"The ID of the VPC.","type":"string"}}}},"aws-native:ec2:getVpcBlockPublicAccessExclusion":{"description":"Resource Type definition for AWS::EC2::VPCBlockPublicAccessExclusion.","inputs":{"properties":{"exclusionId":{"type":"string","description":"The ID of the exclusion"}},"required":["exclusionId"]},"outputs":{"properties":{"exclusionId":{"description":"The ID of the exclusion","type":"string"},"internetGatewayExclusionMode":{"$ref":"#/types/aws-native:ec2:VpcBlockPublicAccessExclusionInternetGatewayExclusionMode","description":"The desired Block Public Access Exclusion Mode for a specific VPC/Subnet."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getVpcBlockPublicAccessOptions":{"description":"Resource Type definition for AWS::EC2::VPCBlockPublicAccessOptions","inputs":{"properties":{"accountId":{"type":"string","description":"The identifier for the specified AWS account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The identifier for the specified AWS account.","type":"string"},"exclusionsAllowed":{"description":"Determines if exclusions are allowed. If you have enabled VPC BPA at the Organization level, exclusions may be not-allowed. Otherwise, they are allowed.","type":"string"},"internetGatewayBlockMode":{"$ref":"#/types/aws-native:ec2:VpcBlockPublicAccessOptionsInternetGatewayBlockMode","description":"The desired Block Public Access mode for Internet Gateways in your account. We do not allow to create in a off mode as this is the default value"}}}},"aws-native:ec2:getVpcCidrBlock":{"description":"Resource Type definition for AWS::EC2::VPCCidrBlock","inputs":{"properties":{"id":{"type":"string","description":"The Id of the VPC associated CIDR Block."},"vpcId":{"type":"string","description":"The ID of the VPC."}},"required":["id","vpcId"]},"outputs":{"properties":{"id":{"description":"The Id of the VPC associated CIDR Block.","type":"string"},"ipSource":{"description":"The IP Source of an IPv6 VPC CIDR Block.","type":"string"},"ipv6AddressAttribute":{"description":"The value denoting whether an IPv6 VPC CIDR Block is public or private.","type":"string"}}}},"aws-native:ec2:getVpcEncryptionControl":{"description":"Resource Type definition for AWS::EC2::VPCEncryptionControl","inputs":{"properties":{"vpcEncryptionControlId":{"type":"string","description":"The VPC encryption control resource id."}},"required":["vpcEncryptionControlId"]},"outputs":{"properties":{"mode":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlMode","description":"The VPC encryption control mode, either monitor or enforce."},"resourceExclusions":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlResourceExclusions","description":"Enumerates the states of all the VPC encryption control resource exclusions"},"state":{"$ref":"#/types/aws-native:ec2:VpcEncryptionControlState","description":"The current state of the VPC encryption control."},"stateMessage":{"description":"Provides additional context on the state of the VPC encryption control.","type":"string"},"tags":{"description":"The tags to assign to the VPC encryption control.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcEncryptionControlId":{"description":"The VPC encryption control resource id.","type":"string"}}}},"aws-native:ec2:getVpcEndpoint":{"description":"Specifies a VPC endpoint. A VPC endpoint provides a private connection between your VPC and an endpoint service. You can use an endpoint service provided by AWS , an AWS Marketplace Partner, or another AWS accounts in your organization. For more information, see the [AWS PrivateLink User Guide](https://docs.aws.amazon.com/vpc/latest/privatelink/) .\n\nAn endpoint of type `Interface` establishes connections between the subnets in your VPC and an AWS service , your own service, or a service hosted by another AWS account . With an interface VPC endpoint, you specify the subnets in which to create the endpoint and the security groups to associate with the endpoint network interfaces.\n\nAn endpoint of type `gateway` serves as a target for a route in your route table for traffic destined for Amazon S3 or DynamoDB . You can specify an endpoint policy for the endpoint, which controls access to the service from your VPC. You can also specify the VPC route tables that use the endpoint. For more information about connectivity to Amazon S3 , see [Why can't I connect to an S3 bucket using a gateway VPC endpoint?](https://docs.aws.amazon.com/premiumsupport/knowledge-center/connect-s3-vpc-endpoint)\n\nAn endpoint of type `GatewayLoadBalancer` provides private connectivity between your VPC and virtual appliances from a service provider.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the VPC endpoint."}},"required":["id"]},"outputs":{"properties":{"creationTimestamp":{"description":"The date and time the VPC endpoint was created. For example: `Fri Sep 28 23:34:36 UTC 2018.`","type":"string"},"dnsEntries":{"description":"(Interface endpoints) The DNS entries for the endpoint. Each entry is a combination of the hosted zone ID and the DNS name. The entries are ordered as follows: regional public DNS, zonal public DNS, private DNS, and wildcard DNS. This order is not enforced for AWS Marketplace services.\n\nThe following is an example. In the first entry, the hosted zone ID is Z1HUB23UULQXV and the DNS name is vpce-01abc23456de78f9g-12abccd3.ec2.us-east-1.vpce.amazonaws.com.\n\n[\"Z1HUB23UULQXV:vpce-01abc23456de78f9g-12abccd3.ec2.us-east-1.vpce.amazonaws.com\", \"Z1HUB23UULQXV:vpce-01abc23456de78f9g-12abccd3-us-east-1a.ec2.us-east-1.vpce.amazonaws.com\", \"Z1C12344VYDITB0:ec2.us-east-1.amazonaws.com\"]\n\nIf you update the `PrivateDnsEnabled` or `SubnetIds` properties, the DNS entries in the list will change.","items":{"type":"string"},"type":"array"},"dnsOptions":{"$ref":"#/types/aws-native:ec2:VpcEndpointDnsOptionsSpecification","description":"Describes the DNS options for an endpoint."},"id":{"description":"The ID of the VPC endpoint.","type":"string"},"ipAddressType":{"$ref":"#/types/aws-native:ec2:VpcEndpointIpAddressType","description":"The supported IP address types."},"networkInterfaceIds":{"description":"(Interface endpoints) The network interface IDs. If you update the `PrivateDnsEnabled` or `SubnetIds` properties, the items in this list might change.","items":{"type":"string"},"type":"array"},"policyDocument":{"$ref":"pulumi.json#/Any","description":"An endpoint policy, which controls access to the service from the VPC. The default endpoint policy allows full access to the service. Endpoint policies are supported only for gateway and interface endpoints.\n For CloudFormation templates in YAML, you can provide the policy in JSON or YAML format. For example, if you have a JSON policy, you can convert it to YAML before including it in the YAML template, and CFNlong converts the policy to JSON format before calling the API actions for privatelink. Alternatively, you can include the JSON directly in the YAML, as shown in the following ``Properties`` section:\n ``Properties: VpcEndpointType: 'Interface' ServiceName: !Sub 'com.amazonaws.${AWS::Region}.logs' PolicyDocument: '{ \"Version\":\"2012-10-17\", \"Statement\": [{ \"Effect\":\"Allow\", \"Principal\":\"*\", \"Action\":[\"logs:Describe*\",\"logs:Get*\",\"logs:List*\",\"logs:FilterLogEvents\"], \"Resource\":\"*\" }] }'``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EC2::VPCEndpoint` for more information about the expected schema for this property."},"privateDnsEnabled":{"description":"Indicate whether to associate a private hosted zone with the specified VPC. The private hosted zone contains a record set for the default public DNS name for the service for the Region (for example, ``kinesis.us-east-1.amazonaws.com``), which resolves to the private IP addresses of the endpoint network interfaces in the VPC. This enables you to make requests to the default public DNS name for the service instead of the public DNS names that are automatically generated by the VPC endpoint service.\n To use a private hosted zone, you must set the following VPC attributes to ``true``: ``enableDnsHostnames`` and ``enableDnsSupport``.\n This property is supported only for interface endpoints.\n Default: ``false``","type":"boolean"},"routeTableIds":{"description":"The IDs of the route tables. Routing is supported only for gateway endpoints.","items":{"type":"string"},"type":"array"},"securityGroupIds":{"description":"The IDs of the security groups to associate with the endpoint network interfaces. If this parameter is not specified, we use the default security group for the VPC. Security groups are supported only for interface endpoints.","items":{"type":"string"},"type":"array"},"subnetIds":{"description":"The IDs of the subnets in which to create endpoint network interfaces. You must specify this property for an interface endpoint or a Gateway Load Balancer endpoint. You can't specify this property for a gateway endpoint. For a Gateway Load Balancer endpoint, you can specify only one subnet.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to associate with the endpoint.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getVpcEndpointConnectionNotification":{"description":"Resource Type definition for AWS::EC2::VPCEndpointConnectionNotification","inputs":{"properties":{"vpcEndpointConnectionNotificationId":{"type":"string","description":"VPC Endpoint Connection ID generated by service"}},"required":["vpcEndpointConnectionNotificationId"]},"outputs":{"properties":{"connectionEvents":{"description":"The endpoint events for which to receive notifications.","items":{"type":"string"},"type":"array"},"connectionNotificationArn":{"description":"The ARN of the SNS topic for the notifications.","type":"string"},"vpcEndpointConnectionNotificationId":{"description":"VPC Endpoint Connection ID generated by service","type":"string"}}}},"aws-native:ec2:getVpcEndpointService":{"description":"Resource Type definition for AWS::EC2::VPCEndpointService","inputs":{"properties":{"serviceId":{"type":"string","description":"The ID of the endpoint service."}},"required":["serviceId"]},"outputs":{"properties":{"acceptanceRequired":{"description":"Indicates whether requests from service consumers to create an endpoint to your service must be accepted.","type":"boolean"},"gatewayLoadBalancerArns":{"description":"The Amazon Resource Names (ARNs) of the Gateway Load Balancers.","items":{"type":"string"},"type":"array"},"networkLoadBalancerArns":{"description":"The Amazon Resource Names (ARNs) of the Network Load Balancers.","items":{"type":"string"},"type":"array"},"payerResponsibility":{"description":"The entity that is responsible for the endpoint costs. The default is the endpoint owner. If you set the payer responsibility to the service owner, you cannot set it back to the endpoint owner.","type":"string"},"serviceId":{"description":"The ID of the endpoint service.","type":"string"},"supportedIpAddressTypes":{"description":"Specify which Ip Address types are supported for VPC endpoint service.","items":{"$ref":"#/types/aws-native:ec2:VpcEndpointServiceIpAddressType"},"type":"array"},"supportedRegions":{"description":"The Regions from which service consumers can access the service.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to add to the VPC endpoint service.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getVpcEndpointServicePermissions":{"description":"Resource Type definition for AWS::EC2::VPCEndpointServicePermissions","inputs":{"properties":{"serviceId":{"type":"string","description":"The ID of the service."}},"required":["serviceId"]},"outputs":{"properties":{"allowedPrincipals":{"description":"The Amazon Resource Names (ARN) of one or more principals (for example, users, IAM roles, and AWS accounts ). Permissions are granted to the principals in this list. To grant permissions to all principals, specify an asterisk (*). Permissions are revoked for principals not in this list. If the list is empty, then all permissions are revoked.","items":{"type":"string"},"type":"array"}}}},"aws-native:ec2:getVpcGatewayAttachment":{"description":"Resource Type definition for AWS::EC2::VPCGatewayAttachment","inputs":{"properties":{"attachmentType":{"type":"string","description":"Used to identify if this resource is an Internet Gateway or Vpn Gateway Attachment "},"vpcId":{"type":"string","description":"The ID of the VPC."}},"required":["attachmentType","vpcId"]},"outputs":{"properties":{"attachmentType":{"description":"Used to identify if this resource is an Internet Gateway or Vpn Gateway Attachment ","type":"string"},"internetGatewayId":{"description":"The ID of the internet gateway. You must specify either InternetGatewayId or VpnGatewayId, but not both.","type":"string"},"vpnGatewayId":{"description":"The ID of the virtual private gateway. You must specify either InternetGatewayId or VpnGatewayId, but not both.","type":"string"}}}},"aws-native:ec2:getVpcPeeringConnection":{"description":"Resource Type definition for AWS::EC2::VPCPeeringConnection","inputs":{"properties":{"id":{"type":"string","description":"The ID of the peering connection."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the peering connection.","type":"string"},"tags":{"description":"Any tags assigned to the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ec2:getVpnConcentrator":{"description":"Describes a VPN concentrator.","inputs":{"properties":{"vpnConcentratorId":{"type":"string","description":"The ID of the VPN concentrator to associate with the VPN connection."}},"required":["vpnConcentratorId"]},"outputs":{"properties":{"tags":{"description":"Any tags assigned to the VPN concentrator.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayAttachmentId":{"description":"The ID of the transit gateway attachment for the VPN concentrator.","type":"string"},"vpnConcentratorId":{"description":"The ID of the VPN concentrator to associate with the VPN connection.","type":"string"}}}},"aws-native:ec2:getVpnConnection":{"description":"Specifies a VPN connection between a virtual private gateway and a VPN customer gateway or a transit gateway and a VPN customer gateway.\n To specify a VPN connection between a transit gateway and customer gateway, use the ``TransitGatewayId`` and ``CustomerGatewayId`` properties.\n To specify a VPN connection between a virtual private gateway and customer gateway, use the ``VpnGatewayId`` and ``CustomerGatewayId`` properties.\n For more information, see [](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html) in the *User Guide*.","inputs":{"properties":{"vpnConnectionId":{"type":"string","description":"The ID of the VPN connection."}},"required":["vpnConnectionId"]},"outputs":{"properties":{"customerGatewayId":{"description":"The ID of the customer gateway at your end of the VPN connection.","type":"string"},"tags":{"description":"Any tags assigned to the VPN connection.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayId":{"description":"The ID of the transit gateway associated with the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both.","type":"string"},"vpnConnectionId":{"description":"The ID of the VPN connection.","type":"string"},"vpnGatewayId":{"description":"The ID of the virtual private gateway at the AWS side of the VPN connection.\n You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both.","type":"string"},"vpnTunnelOptionsSpecifications":{"description":"The tunnel options for the VPN connection.","items":{"$ref":"#/types/aws-native:ec2:VpnConnectionVpnTunnelOptionsSpecification"},"type":"array"}}}},"aws-native:ec2:getVpnGateway":{"description":"Specifies a virtual private gateway. A virtual private gateway is the endpoint on the VPC side of your VPN connection. You can create a virtual private gateway before creating the VPC itself.\n For more information, see [](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html) in the *User Guide*.","inputs":{"properties":{"vpnGatewayId":{"type":"string","description":"The ID of the VPN gateway."}},"required":["vpnGatewayId"]},"outputs":{"properties":{"tags":{"description":"Any tags assigned to the virtual private gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpnGatewayId":{"description":"The ID of the VPN gateway.","type":"string"}}}},"aws-native:ecr:getRegistryPolicy":{"description":"The ``AWS::ECR::RegistryPolicy`` resource creates or updates the permissions policy for a private registry.\n A private registry policy is used to specify permissions for another AWS-account and is used when configuring cross-account replication. For more information, see [Registry permissions](https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry-permissions.html) in the *Amazon Elastic Container Registry User Guide*.","inputs":{"properties":{"registryId":{"type":"string","description":"The account ID of the private registry the policy is associated with."}},"required":["registryId"]},"outputs":{"properties":{"policyText":{"$ref":"pulumi.json#/Any","description":"The JSON policy text for your registry.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ECR::RegistryPolicy` for more information about the expected schema for this property."},"registryId":{"description":"The account ID of the private registry the policy is associated with.","type":"string"}}}},"aws-native:ecr:getRegistryScanningConfiguration":{"description":"The scanning configuration for a private registry.","inputs":{"properties":{"registryId":{"type":"string","description":"The account ID of the destination registry."}},"required":["registryId"]},"outputs":{"properties":{"registryId":{"description":"The account ID of the destination registry.","type":"string"},"rules":{"description":"The scanning rules associated with the registry.","items":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanningRule"},"type":"array"},"scanType":{"$ref":"#/types/aws-native:ecr:RegistryScanningConfigurationScanType","description":"The type of scanning configured for the registry."}}}},"aws-native:ecr:getReplicationConfiguration":{"description":"The ``AWS::ECR::ReplicationConfiguration`` resource creates or updates the replication configuration for a private registry. The first time a replication configuration is applied to a private registry, a service-linked IAM role is created in your account for the replication process. For more information, see [Using Service-Linked Roles for Amazon ECR](https://docs.aws.amazon.com/AmazonECR/latest/userguide/using-service-linked-roles.html) in the *Amazon Elastic Container Registry User Guide*.\n  When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a private registry permissions policy. For more information, see ``AWS::ECR::RegistryPolicy``.","inputs":{"properties":{"registryId":{"type":"string","description":"The account ID of the destination registry."}},"required":["registryId"]},"outputs":{"properties":{"registryId":{"description":"The account ID of the destination registry.","type":"string"},"replicationConfiguration":{"$ref":"#/types/aws-native:ecr:ReplicationConfiguration","description":"The replication configuration for a registry.","language":{"csharp":{"name":"ReplicationConfigurationValue"}}}}}},"aws-native:ecr:getRepository":{"description":"The ``AWS::ECR::Repository`` resource specifies an Amazon Elastic Container Registry (Amazon ECR) repository, where users can push and pull Docker images, Open Container Initiative (OCI) images, and OCI compatible artifacts. For more information, see [Amazon ECR private repositories](https://docs.aws.amazon.com/AmazonECR/latest/userguide/Repositories.html) in the *Amazon ECR User Guide*.","inputs":{"properties":{"repositoryName":{"type":"string","description":"The name to use for the repository. The repository name may be specified on its own (such as ``nginx-web-app``) or it can be prepended with a namespace to group the repository into a category (such as ``project-a/nginx-web-app``). If you don't specify a name, CFNlong generates a unique physical ID and uses that ID for the repository name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n The repository name must start with a letter and can only contain lowercase letters, numbers, hyphens, underscores, and forward slashes.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["repositoryName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the specified `AWS::ECR::Repository` resource. For example, `arn:aws:ecr: *eu-west-1* : *123456789012* :repository/ *test-repository*` .","type":"string"},"imageScanningConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryImageScanningConfiguration","description":"The ``imageScanningConfiguration`` parameter is being deprecated, in favor of specifying the image scanning configuration at the registry level. For more information, see ``PutRegistryScanningConfiguration``.\n  The image scanning configuration for the repository. This determines whether images are scanned for known vulnerabilities after being pushed to the repository."},"imageTagMutability":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutability","description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten."},"imageTagMutabilityExclusionFilters":{"description":"A list of filters that specify which image tags are excluded from the repository's image tag mutability setting.","items":{"$ref":"#/types/aws-native:ecr:RepositoryImageTagMutabilityExclusionFilter"},"type":"array"},"lifecyclePolicy":{"$ref":"#/types/aws-native:ecr:RepositoryLifecyclePolicy","description":"Creates or updates a lifecycle policy. For information about lifecycle policy syntax, see [Lifecycle policy template](https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html)."},"repositoryPolicyText":{"$ref":"pulumi.json#/Any","description":"The JSON repository policy text to apply to the repository. For more information, see [Amazon ECR repository policies](https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html) in the *Amazon Elastic Container Registry User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ECR::Repository` for more information about the expected schema for this property."},"repositoryUri":{"description":"Returns the URI for the specified `AWS::ECR::Repository` resource. For example, `*123456789012* .dkr.ecr. *us-west-2* .amazonaws.com/repository` .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ecr:getRepositoryCreationTemplate":{"description":"The details of the repository creation template associated with the request.","inputs":{"properties":{"prefix":{"type":"string","description":"The repository namespace prefix associated with the repository creation template."}},"required":["prefix"]},"outputs":{"properties":{"appliedFor":{"description":"A list of enumerable Strings representing the repository creation scenarios that this template will apply towards. The supported scenarios are PULL_THROUGH_CACHE, REPLICATION, and CREATE_ON_PUSH","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateAppliedForItem"},"type":"array"},"createdAt":{"description":"The date and time, in JavaScript date format, when the repository creation template was created.","type":"string"},"customRoleArn":{"description":"The ARN of the role to be assumed by Amazon ECR. Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.","type":"string"},"description":{"description":"The description associated with the repository creation template.","type":"string"},"encryptionConfiguration":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateEncryptionConfiguration","description":"The encryption configuration associated with the repository creation template."},"imageTagMutability":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutability","description":"The tag mutability setting for the repository. If this parameter is omitted, the default setting of ``MUTABLE`` will be used which will allow image tags to be overwritten. If ``IMMUTABLE`` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten."},"imageTagMutabilityExclusionFilters":{"description":"A list of filters that specify which image tags are excluded from the repository creation template's image tag mutability setting.","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateImageTagMutabilityExclusionFilter"},"type":"array"},"lifecyclePolicy":{"description":"The lifecycle policy to use for repositories created using the template.","type":"string"},"repositoryPolicy":{"description":"The repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions.","type":"string"},"resourceTags":{"description":"The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.","items":{"$ref":"#/types/aws-native:ecr:RepositoryCreationTemplateTag"},"type":"array"},"updatedAt":{"description":"The date and time, in JavaScript date format, when the repository creation template was last updated.","type":"string"}}}},"aws-native:ecr:getSigningConfiguration":{"description":"The AWS::ECR::SigningConfiguration resource creates or updates the signing configuration for an Amazon ECR registry.","inputs":{"properties":{"registryId":{"type":"string","description":"12-digit AWS account ID of the ECR registry."}},"required":["registryId"]},"outputs":{"properties":{"registryId":{"description":"12-digit AWS account ID of the ECR registry.","type":"string"},"rules":{"description":"Array of signing rules that define which repositories should be signed and with which signing profiles.","items":{"$ref":"#/types/aws-native:ecr:SigningConfigurationRule"},"type":"array"}}}},"aws-native:ecs:getCapacityProvider":{"description":"Resource Type definition for AWS::ECS::CapacityProvider.","inputs":{"properties":{"name":{"type":"string","description":"The name of the capacity provider. If a name is specified, it cannot start with `aws` , `ecs` , or `fargate` . If no name is specified, a default name in the `CFNStackName-CFNResourceName-RandomString` format is used."}},"required":["name"]},"outputs":{"properties":{"autoScalingGroupProvider":{"$ref":"#/types/aws-native:ecs:CapacityProviderAutoScalingGroupProvider","description":"The Auto Scaling group settings for the capacity provider."},"managedInstancesProvider":{"$ref":"#/types/aws-native:ecs:CapacityProviderManagedInstancesProvider","description":"The configuration for the Amazon ECS Managed Instances provider. This includes the infrastructure role, the launch template configuration, and tag propagation settings."},"tags":{"description":"The metadata that you apply to the capacity provider to help you categorize and organize it. Each tag consists of a key and an optional value. You define both.\n\nThe following basic restrictions apply to tags:\n\n- Maximum number of tags per resource - 50\n- For each resource, each tag key must be unique, and each tag key can have only one value.\n- Maximum key length - 128 Unicode characters in UTF-8\n- Maximum value length - 256 Unicode characters in UTF-8\n- If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n- Tag keys and values are case-sensitive.\n- Do not use `aws:` , `AWS:` , or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ecs:getCluster":{"description":"The ``AWS::ECS::Cluster`` resource creates an Amazon Elastic Container Service (Amazon ECS) cluster.","inputs":{"properties":{"clusterName":{"type":"string","description":"A user-generated string that you use to identify your cluster. If you don't specify a name, CFNlong generates a unique physical ID for the name."}},"required":["clusterName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Amazon ECS cluster, such as `arn:aws:ecs:us-east-2:123456789012:cluster/MyECSCluster` .","type":"string"},"capacityProviders":{"description":"The short name of one or more capacity providers to associate with the cluster. A capacity provider must be associated with a cluster before it can be included as part of the default capacity provider strategy of the cluster or used in a capacity provider strategy when calling the [CreateService](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateService.html) or [RunTask](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_RunTask.html) actions.\n If specifying a capacity provider that uses an Auto Scaling group, the capacity provider must be created but not associated with another cluster. New Auto Scaling group capacity providers can be created with the [CreateCapacityProvider](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_CreateCapacityProvider.html) API operation.\n To use a FARGATElong capacity provider, specify either the ``FARGATE`` or ``FARGATE_SPOT`` capacity providers. The FARGATElong capacity providers are available to all accounts and only need to be associated with a cluster to be used.\n The [PutCapacityProvider](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PutCapacityProvider.html) API operation is used to update the list of available capacity providers for a cluster after the cluster is created.","items":{"type":"string"},"type":"array"},"clusterSettings":{"description":"The settings to use when creating a cluster. This parameter is used to turn on CloudWatch Container Insights with enhanced observability or CloudWatch Container Insights for a cluster.\n Container Insights with enhanced observability provides all the Container Insights metrics, plus additional task and container metrics. This version supports enhanced observability for Amazon ECS clusters using the Amazon EC2 and Fargate launch types. After you configure Container Insights with enhanced observability on Amazon ECS, Container Insights auto-collects detailed infrastructure telemetry from the cluster level down to the container level in your environment and displays these critical performance data in curated dashboards removing the heavy lifting in observability set-up. \n For more information, see [Monitor Amazon ECS containers using Container Insights with enhanced observability](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/cloudwatch-container-insights.html) in the *Amazon Elastic Container Service Developer Guide*.","items":{"$ref":"#/types/aws-native:ecs:ClusterSettings"},"type":"array"},"configuration":{"$ref":"#/types/aws-native:ecs:ClusterConfiguration","description":"The execute command and managed storage configuration for the cluster."},"defaultCapacityProviderStrategy":{"description":"The default capacity provider strategy for the cluster. When services or tasks are run in the cluster with no launch type or capacity provider strategy specified, the default capacity provider strategy is used.","items":{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderStrategyItem"},"type":"array"},"tags":{"description":"The metadata that you apply to the cluster to help you categorize and organize them. Each tag consists of a key and an optional value. You define both.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ecs:getClusterCapacityProviderAssociations":{"description":"Associate a set of ECS Capacity Providers with a specified ECS Cluster","inputs":{"properties":{"cluster":{"type":"string","description":"The cluster the capacity provider association is the target of."}},"required":["cluster"]},"outputs":{"properties":{"capacityProviders":{"description":"The capacity providers to associate with the cluster.","items":{"oneOf":[{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProvider"},{"type":"string"}]},"type":"array"},"defaultCapacityProviderStrategy":{"description":"The default capacity provider strategy to associate with the cluster.","items":{"$ref":"#/types/aws-native:ecs:ClusterCapacityProviderAssociationsCapacityProviderStrategy"},"type":"array"}}}},"aws-native:ecs:getExpressGatewayService":{"description":"Resource Type definition for AWS::ECS::ExpressGatewayService","inputs":{"properties":{"serviceArn":{"type":"string","description":"The ARN that identifies the Express service."}},"required":["serviceArn"]},"outputs":{"properties":{"activeConfigurations":{"description":"The list of active service configurations for the Express service.","items":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceConfiguration"},"type":"array"},"createdAt":{"description":"The Unix timestamp for when the Express service was created.","type":"string"},"ecsManagedResourceArns":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceEcsManagedResourceArns"},"endpoint":{"description":"The Endpoint of the express service.","type":"string"},"serviceArn":{"description":"The ARN that identifies the Express service.","type":"string"},"status":{"$ref":"#/types/aws-native:ecs:ExpressGatewayServiceStatus"},"updatedAt":{"description":"The Unix timestamp for when the Express service was last updated.","type":"string"}}}},"aws-native:ecs:getPrimaryTaskSet":{"description":"A pseudo-resource that manages which of your ECS task sets is primary.","inputs":{"properties":{"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that hosts the service to create the task set in."},"service":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the service to create the task set in."}},"required":["cluster","service"]},"outputs":{"properties":{"taskSetId":{"description":"The ID or full Amazon Resource Name (ARN) of the task set.","type":"string"}}}},"aws-native:ecs:getService":{"description":"The ``AWS::ECS::Service`` resource creates an Amazon Elastic Container Service (Amazon ECS) service that runs and maintains the requested number of tasks and associated load balancers.\n  The stack update fails if you change any properties that require replacement and at least one ECS Service Connect ``ServiceConnectConfiguration`` property is configured. This is because AWS CloudFormation creates the replacement service first, but each ``ServiceConnectService`` must have a name that is unique in the namespace.\n   Starting April 15, 2023, AWS; will not onboard new customers to Amazon Elastic Inference (EI), and will help current customers migrate their workloads to options that offer better price and performance. After April 15, 2023, new customers will not be able to launch instances with Amazon EI accelerators in Amazon SageMaker, ECS, or EC2. However, customers who have used Amazon EI at least once during the past 30-day period are considered current customers and will be able to continue using the service. \n   On June 12, 2025, Amazon ECS launched support for updating capacity provider configuration for ECS services. With this launch, ECS also aligned the CFN update behavior for ``CapacityProviderStrategy`` parameter with the standard practice. For more information, see [adds support for updating capacity provider configuration for ECS services](https://docs.aws.amazon.com/about-aws/whats-new/2025/05/amazon-ecs-capacity-provider-configuration-ecs/). Previously ECS ignored the ``CapacityProviderStrategy`` property if it was set to an empty list for example, ``[]`` in CFN, because updating capacity provider configuration was not supported. Now, with support for capacity provider updates, customers can remove capacity providers from a service by passing an empty list. When you specify an empty list (``[]``) for the ``CapacityProviderStrategy`` property in your CFN template, ECS will remove any capacity providers associated with the service, as follows:\n  +  For services created with a capacity provider strategy after the launch:\n  +  If there's a cluster default strategy set, the service will revert to using that default strategy.\n  +  If no cluster default strategy exists, you will receive the following error:\n No launch type to fall back to for empty capacity provider strategy. Your service was not created with a launch type.\n  \n  +  For services created with a capacity provider strategy prior to the launch:\n  +  If ``CapacityProviderStrategy`` had ``FARGATE_SPOT`` or ``FARGATE`` capacity providers, the launch type will be updated to ``FARGATE`` and the capacity provider will be removed.\n  +  If the strategy included Auto Scaling group capacity providers, the service will revert to EC2 launch type, and the Auto Scaling group capacity providers will not be used.\n  \n  \n Recommended Actions\n If you are currently using ``CapacityProviderStrategy: []`` in your CFN templates, you should take one of the following actions:\n  +  If you do not intend to update the Capacity Provider Strategy:\n  +  Remove the ``CapacityProviderStrategy`` property entirely from your CFN template\n  +  Alternatively, use ``!Ref ::NoValue`` for the ``CapacityProviderStrategy`` property in your template\n  \n  +  If you intend to maintain or update the Capacity Provider Strategy, specify the actual Capacity Provider Strategy for the service in your CFN template.\n  \n If your CFN template had an empty list ([]) for ``CapacityProviderStrategy`` prior to the aforementioned launch on June 12, and you are using the same template with ``CapacityProviderStrategy: []``, you might encounter the following error:\n  Invalid request provided: When switching from launch type to capacity provider strategy on an existing service, or making a change to a capacity provider strategy on a service that is already using one, you must force a new deployment. (Service: Ecs, Status Code: 400, Request ID: xxx) (SDK Attempt Count: 1)\" (RequestToken: xxx HandlerErrorCode: InvalidRequest) \n Note that CFN automatically initiates a new deployment when it detects a parameter change, but customers cannot choose to force a deployment through CFN. This is an invalid input scenario that requires one of the remediation actions listed above.\n If you are experiencing active production issues related to this change, contact AWS Support or your Technical Account Manager.","inputs":{"properties":{"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that you run your service on. If you do not specify a cluster, the default cluster is assumed."},"serviceArn":{"type":"string","description":"The ARN that identifies the service. For more information about the ARN format, see [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#ecs-resource-ids) in the *Amazon ECS Developer Guide* ."}},"required":["serviceArn","cluster"]},"outputs":{"properties":{"availabilityZoneRebalancing":{"$ref":"#/types/aws-native:ecs:ServiceAvailabilityZoneRebalancing","description":"Indicates whether to use Availability Zone rebalancing for the service.\n For more information, see [Balancing an Amazon ECS service across Availability Zones](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-rebalancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default behavior of ``AvailabilityZoneRebalancing`` differs between create and update requests:\n  +  For create service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults the value to ``ENABLED``.\n  +  For update service requests, when no value is specified for ``AvailabilityZoneRebalancing``, Amazon ECS defaults to the existing service’s ``AvailabilityZoneRebalancing`` value. If the service never had an ``AvailabilityZoneRebalancing`` value set, Amazon ECS treats this as ``DISABLED``."},"capacityProviderStrategy":{"description":"The capacity provider strategy to use for the service.\n If a ``capacityProviderStrategy`` is specified, the ``launchType`` parameter must be omitted. If no ``capacityProviderStrategy`` or ``launchType`` is specified, the ``defaultCapacityProviderStrategy`` for the cluster is used.\n A capacity provider strategy can contain a maximum of 20 capacity providers.\n  To remove this property from your service resource, specify an empty ``CapacityProviderStrategyItem`` array.","items":{"$ref":"#/types/aws-native:ecs:ServiceCapacityProviderStrategyItem"},"type":"array"},"deploymentConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentConfiguration","description":"Optional deployment parameters that control how many tasks run during the deployment and the ordering of stopping and starting tasks."},"deploymentController":{"$ref":"#/types/aws-native:ecs:ServiceDeploymentController","description":"The deployment controller to use for the service."},"desiredCount":{"description":"The number of instantiations of the specified task definition to place and keep running in your service.\n For new services, if a desired count is not specified, a default value of ``1`` is used. When using the ``DAEMON`` scheduling strategy, the desired count is not required.\n For existing services, if a desired count is not specified, it is omitted from the operation.","type":"integer"},"enableEcsManagedTags":{"description":"Specifies whether to turn on Amazon ECS managed tags for the tasks within the service. For more information, see [Tagging your Amazon ECS resources](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html) in the *Amazon Elastic Container Service Developer Guide*.\n When you use Amazon ECS managed tags, you must set the ``propagateTags`` request parameter.","type":"boolean"},"enableExecuteCommand":{"description":"Determines whether the execute command functionality is turned on for the service. If ``true``, the execute command functionality is turned on for all containers in tasks as part of the service.","type":"boolean"},"healthCheckGracePeriodSeconds":{"description":"The period of time, in seconds, that the Amazon ECS service scheduler ignores unhealthy Elastic Load Balancing, VPC Lattice, and container health checks after a task has first started. If you do not specify a health check grace period value, the default value of 0 is used. If you do not use any of the health checks, then ``healthCheckGracePeriodSeconds`` is unused.\n If your service has more running tasks than desired, unhealthy tasks in the grace period might be stopped to reach the desired count.","type":"integer"},"launchType":{"$ref":"#/types/aws-native:ecs:ServiceLaunchType","description":"The launch type on which to run your service. For more information, see [Amazon ECS Launch Types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/launch_types.html) in the *Amazon Elastic Container Service Developer Guide*.\n  If you want to use Managed Instances, you must use the ``capacityProviderStrategy`` request parameter"},"loadBalancers":{"description":"A list of load balancer objects to associate with the service. If you specify the ``Role`` property, ``LoadBalancers`` must be specified as well. For information about the number of load balancers that you can specify per service, see [Service Load Balancing](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-load-balancing.html) in the *Amazon Elastic Container Service Developer Guide*.\n  To remove this property from your service resource, specify an empty ``LoadBalancer`` array.","items":{"$ref":"#/types/aws-native:ecs:ServiceLoadBalancer"},"type":"array"},"name":{"description":"The name of the Amazon ECS service, such as `sample-webapp` .","type":"string"},"networkConfiguration":{"$ref":"#/types/aws-native:ecs:ServiceNetworkConfiguration","description":"The network configuration for the service. This parameter is required for task definitions that use the ``awsvpc`` network mode to receive their own elastic network interface, and it is not supported for other network modes. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*."},"placementConstraints":{"description":"An array of placement constraint objects to use for tasks in your service. You can specify a maximum of 10 constraints for each task. This limit includes constraints in the task definition and those specified at runtime.\n  To remove this property from your service resource, specify an empty ``PlacementConstraint`` array.","items":{"$ref":"#/types/aws-native:ecs:ServicePlacementConstraint"},"type":"array"},"placementStrategies":{"description":"The placement strategy objects to use for tasks in your service. You can specify a maximum of 5 strategy rules for each service.\n  To remove this property from your service resource, specify an empty ``PlacementStrategy`` array.","items":{"$ref":"#/types/aws-native:ecs:ServicePlacementStrategy"},"type":"array"},"platformVersion":{"description":"The platform version that your tasks in the service are running on. A platform version is specified only for tasks using the Fargate launch type. If one isn't specified, the ``LATEST`` platform version is used. For more information, see [platform versions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html) in the *Amazon Elastic Container Service Developer Guide*.","type":"string"},"propagateTags":{"$ref":"#/types/aws-native:ecs:ServicePropagateTags","description":"Specifies whether to propagate the tags from the task definition to the task. If no value is specified, the tags aren't propagated. Tags can only be propagated to the task during task creation. To add tags to a task after task creation, use the [TagResource](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_TagResource.html) API action.\n You must set this to a value other than ``NONE`` when you use Cost Explorer. For more information, see [Amazon ECS usage reports](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/usage-reports.html) in the *Amazon Elastic Container Service Developer Guide*.\n The default is ``NONE``."},"serviceArn":{"description":"The ARN that identifies the service. For more information about the ARN format, see [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-account-settings.html#ecs-resource-ids) in the *Amazon ECS Developer Guide* .","type":"string"},"serviceRegistries":{"description":"The details of the service discovery registry to associate with this service. For more information, see [Service discovery](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html).\n  Each service may be associated with one service registry. Multiple service registries for each service isn't supported.\n   To remove this property from your service resource, specify an empty ``ServiceRegistry`` array.","items":{"$ref":"#/types/aws-native:ecs:ServiceRegistry"},"type":"array"},"tags":{"description":"The metadata that you apply to the service to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. When a service is deleted, the tags are deleted as well.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"taskDefinition":{"description":"The ``family`` and ``revision`` (``family:revision``) or full ARN of the task definition to run in your service. If a ``revision`` isn't specified, the latest ``ACTIVE`` revision is used.\n A task definition must be specified if the service uses either the ``ECS`` or ``CODE_DEPLOY`` deployment controllers.\n For more information about deployment types, see [Amazon ECS deployment types](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html).","type":"string"},"vpcLatticeConfigurations":{"description":"The VPC Lattice configuration for the service being created.","items":{"$ref":"#/types/aws-native:ecs:ServiceVpcLatticeConfiguration"},"type":"array"}}}},"aws-native:ecs:getTaskDefinition":{"description":"Registers a new task definition from the supplied ``family`` and ``containerDefinitions``. Optionally, you can add data volumes to your containers with the ``volumes`` parameter. For more information about task definition parameters and defaults, see [Amazon ECS Task Definitions](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_defintions.html) in the *Amazon Elastic Container Service Developer Guide*.\n You can specify a role for your task with the ``taskRoleArn`` parameter. When you specify a role for a task, its containers can then use the latest versions of the CLI or SDKs to make API requests to the AWS services that are specified in the policy that's associated with the role. For more information, see [IAM Roles for Tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) in the *Amazon Elastic Container Service Developer Guide*.\n You can specify a Docker networking mode for the containers in your task definition with the ``networkMode`` parameter. If you specify the ``awsvpc`` network mode, the task is allocated an elastic network interface, and you must specify a [NetworkConfiguration](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_NetworkConfiguration.html) when you create a service or run a task with the task definition. For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html) in the *Amazon Elastic Container Service Developer Guide*.\n  In the following example or examples, the Authorization header contents (``AUTHPARAMS``) must be replaced with an AWS Signature Version 4 signature. For more information, see [Signature Version 4 Signing Process](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) in the *General Reference*.\n You only need to learn how to sign HTTP requests if you intend to create them manually. When you use the [](https://docs.aws.amazon.com/cli/) or one of the [SDKs](https://docs.aws.amazon.com/tools/) to make requests to AWS, these tools automatically sign the requests for you, with the access key that you specify when you configure the tools. When you use these tools, you don't have to sign requests yourself.","inputs":{"properties":{"taskDefinitionArn":{"type":"string","description":"The ARN of the task definition."}},"required":["taskDefinitionArn"]},"outputs":{"properties":{"tags":{"description":"The metadata that you apply to the task definition to help you categorize and organize them. Each tag consists of a key and an optional value. You define both of them.\n The following basic restrictions apply to tags:\n  +  Maximum number of tags per resource - 50\n  +  For each resource, each tag key must be unique, and each tag key can have only one value.\n  +  Maximum key length - 128 Unicode characters in UTF-8\n  +  Maximum value length - 256 Unicode characters in UTF-8\n  +  If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n  +  Tag keys and values are case-sensitive.\n  +  Do not use ``aws:``, ``AWS:``, or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"taskDefinitionArn":{"description":"The ARN of the task definition.","type":"string"}}}},"aws-native:ecs:getTaskSet":{"description":"Create a task set in the specified cluster and service. This is used when a service uses the EXTERNAL deployment controller type. For more information, see https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.htmlin the Amazon Elastic Container Service Developer Guide.","inputs":{"properties":{"cluster":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the cluster that hosts the service to create the task set in."},"id":{"type":"string","description":"The ID of the task set."},"service":{"type":"string","description":"The short name or full Amazon Resource Name (ARN) of the service to create the task set in."}},"required":["cluster","service","id"]},"outputs":{"properties":{"id":{"description":"The ID of the task set.","type":"string"},"scale":{"$ref":"#/types/aws-native:ecs:TaskSetScale","description":"A floating-point percentage of the desired number of tasks to place and keep running in the task set."},"tags":{"description":"The metadata that you apply to the task set to help you categorize and organize them. Each tag consists of a key and an optional value. You define both.\n\nThe following basic restrictions apply to tags:\n\n- Maximum number of tags per resource - 50\n- For each resource, each tag key must be unique, and each tag key can have only one value.\n- Maximum key length - 128 Unicode characters in UTF-8\n- Maximum value length - 256 Unicode characters in UTF-8\n- If your tagging schema is used across multiple services and resources, remember that other services may have restrictions on allowed characters. Generally allowed characters are: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @.\n- Tag keys and values are case-sensitive.\n- Do not use `aws:` , `AWS:` , or any upper or lowercase combination of such as a prefix for either keys or values as it is reserved for AWS use. You cannot edit or delete tag keys or values with this prefix. Tags with this prefix do not count against your tags per resource limit.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:efs:getAccessPoint":{"description":"The ``AWS::EFS::AccessPoint`` resource creates an EFS access point. An access point is an application-specific view into an EFS file system that applies an operating system user and group, and a file system path, to any file system request made through the access point. The operating system user and group override any identity information provided by the NFS client. The file system path is exposed as the access point's root directory. Applications using the access point can only access data in its own directory and below. To learn more, see [Mounting a file system using EFS access points](https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html).\n This operation requires permissions for the ``elasticfilesystem:CreateAccessPoint`` action.","inputs":{"properties":{"accessPointId":{"type":"string","description":"The ID of the EFS access point."}},"required":["accessPointId"]},"outputs":{"properties":{"accessPointId":{"description":"The ID of the EFS access point.","type":"string"},"accessPointTags":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the access point.","type":"string"}}}},"aws-native:efs:getFileSystem":{"description":"The ``AWS::EFS::FileSystem`` resource creates a new, empty file system in EFSlong (EFS). You must create a mount target ([AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html)) to mount your EFS file system on an EC2 or other AWS cloud compute resource.","inputs":{"properties":{"fileSystemId":{"type":"string","description":"The ID of the EFS file system. For example: `fs-abcdef0123456789a`"}},"required":["fileSystemId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the EFS file system.\n\nExample: `arn:aws:elasticfilesystem:us-west-2:1111333322228888:file-system/fs-0123456789abcdef8`","type":"string"},"backupPolicy":{"$ref":"#/types/aws-native:efs:FileSystemBackupPolicy","description":"Use the ``BackupPolicy`` to turn automatic backups on or off for the file system."},"fileSystemId":{"description":"The ID of the EFS file system. For example: `fs-abcdef0123456789a`","type":"string"},"fileSystemPolicy":{"$ref":"pulumi.json#/Any","description":"The ``FileSystemPolicy`` for the EFS file system. A file system policy is an IAM resource policy used to control NFS access to an EFS file system. For more information, see [Using to control NFS access to Amazon EFS](https://docs.aws.amazon.com/efs/latest/ug/iam-access-control-nfs-efs.html) in the *Amazon EFS User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EFS::FileSystem` for more information about the expected schema for this property."},"fileSystemProtection":{"$ref":"#/types/aws-native:efs:FileSystemProtection","description":"Describes the protection on the file system."},"fileSystemTags":{"description":"Use to create one or more tags associated with the file system. Each tag is a user-defined key-value pair. Name your file system on creation by including a ``\"Key\":\"Name\",\"Value\":\"{value}\"`` key-value pair. Each key must be unique. For more information, see [Tagging resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *General Reference Guide*.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"lifecyclePolicies":{"description":"An array of ``LifecyclePolicy`` objects that define the file system's ``LifecycleConfiguration`` object. A ``LifecycleConfiguration`` object informs Lifecycle management of the following:\n  +  When to move files in the file system from primary storage to IA storage.\n  +  When to move files in the file system from primary storage or IA storage to Archive storage.\n  +  When to move files that are in IA or Archive storage to primary storage.\n  \n  EFS requires that each ``LifecyclePolicy`` object have only a single transition. This means that in a request body, ``LifecyclePolicies`` needs to be structured as an array of ``LifecyclePolicy`` objects, one object for each transition, ``TransitionToIA``, ``TransitionToArchive````TransitionToPrimaryStorageClass``. See the example requests in the following section for more information.","items":{"$ref":"#/types/aws-native:efs:FileSystemLifecyclePolicy"},"type":"array"},"provisionedThroughputInMibps":{"description":"The throughput, measured in mebibytes per second (MiBps), that you want to provision for a file system that you're creating. Required if ``ThroughputMode`` is set to ``provisioned``. Valid values are 1-3414 MiBps, with the upper limit depending on Region. To increase this limit, contact SUP. For more information, see [Amazon EFS quotas that you can increase](https://docs.aws.amazon.com/efs/latest/ug/limits.html#soft-limits) in the *Amazon EFS User Guide*.","type":"number"},"replicationConfiguration":{"$ref":"#/types/aws-native:efs:FileSystemReplicationConfiguration","description":"Describes the replication configuration for a specific file system."},"throughputMode":{"description":"Specifies the throughput mode for the file system. The mode can be ``bursting``, ``provisioned``, or ``elastic``. If you set ``ThroughputMode`` to ``provisioned``, you must also set a value for ``ProvisionedThroughputInMibps``. After you create the file system, you can decrease your file system's Provisioned throughput or change between the throughput modes, with certain time restrictions. For more information, see [Specifying throughput with provisioned mode](https://docs.aws.amazon.com/efs/latest/ug/performance.html#provisioned-throughput) in the *Amazon EFS User Guide*. \n Default is ``bursting``.","type":"string"}}}},"aws-native:efs:getMountTarget":{"description":"The ``AWS::EFS::MountTarget`` resource is an Amazon EFS resource that creates a mount target for an EFS file system. You can then mount the file system on Amazon EC2 instances or other resources by using the mount target.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Amazon EFS file system that the mount target provides access to.\n\nExample: `fs-0123456789111222a`"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the Amazon EFS file system that the mount target provides access to.\n\nExample: `fs-0123456789111222a`","type":"string"},"securityGroups":{"description":"VPC security group IDs, of the form ``sg-xxxxxxxx``. These must be for the same VPC as the subnet specified. The maximum number of security groups depends on account quota. For more information, see [Amazon VPC Quotas](https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html) in the *Amazon VPC User Guide* (see the *Security Groups* table). If you don't specify a security group, then Amazon EFS uses the default security group for the subnet's VPC.","items":{"type":"string"},"type":"array"}}}},"aws-native:eks:getAccessEntry":{"description":"An object representing an Amazon EKS AccessEntry.","inputs":{"properties":{"clusterName":{"type":"string","description":"The cluster that the access entry is created for."},"principalArn":{"type":"string","description":"The principal ARN that the access entry is created for."}},"required":["principalArn","clusterName"]},"outputs":{"properties":{"accessEntryArn":{"description":"The ARN of the access entry.","type":"string"},"accessPolicies":{"description":"An array of access policies that are associated with the access entry.","items":{"$ref":"#/types/aws-native:eks:AccessEntryAccessPolicy"},"type":"array"},"kubernetesGroups":{"description":"The Kubernetes groups that the access entry is associated with.","items":{"type":"string"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"username":{"description":"The Kubernetes user that the access entry is associated with.","type":"string"}}}},"aws-native:eks:getAddon":{"description":"Resource Schema for AWS::EKS::Addon","inputs":{"properties":{"addonName":{"type":"string","description":"Name of Addon"},"clusterName":{"type":"string","description":"Name of Cluster"}},"required":["clusterName","addonName"]},"outputs":{"properties":{"addonVersion":{"description":"Version of Addon","type":"string"},"arn":{"description":"Amazon Resource Name (ARN) of the add-on","type":"string"},"configurationValues":{"description":"The configuration values to use with the add-on","type":"string"},"serviceAccountRoleArn":{"description":"IAM role to bind to the add-on's service account","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:eks:getCapability":{"description":"Resource Type definition for EKS Capability.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the capability."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the capability.","type":"string"},"configuration":{"$ref":"#/types/aws-native:eks:CapabilityConfiguration","description":"The configuration settings for the capability. The structure of this object varies depending on the capability type. For Argo CD capabilities, you can configure IAM Identity Center integration, RBAC role mappings, and network access settings."},"createdAt":{"description":"The Unix epoch timestamp in seconds for when the capability was created.","type":"string"},"deletePropagationPolicy":{"$ref":"#/types/aws-native:eks:CapabilityDeletePropagationPolicy","description":"Specifies how Kubernetes resources managed by the capability should be handled when the capability is deleted. Currently, the only supported value is RETAIN which retains all Kubernetes resources managed by the capability when the capability is deleted."},"modifiedAt":{"description":"The Unix epoch timestamp in seconds for when the capability was last modified.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role that the capability uses to interact with AWS services. This role must have a trust policy that allows the EKS service principal to assume it, and it must have the necessary permissions for the capability type you're creating.","type":"string"},"status":{"description":"The current status of the capability. Valid values include: CREATING (the capability is being created), ACTIVE (the capability is running and available), UPDATING (the capability is being updated), DELETING (the capability is being deleted), CREATE_FAILED (the capability creation failed), UPDATE_FAILED (the capability update failed), or DELETE_FAILED (the capability deletion failed).","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"The version of the capability software that is currently running.","type":"string"}}}},"aws-native:eks:getCluster":{"description":"An object representing an Amazon EKS cluster.","inputs":{"properties":{"name":{"type":"string","description":"The unique name to give to your cluster."}},"required":["name"]},"outputs":{"properties":{"accessConfig":{"$ref":"#/types/aws-native:eks:ClusterAccessConfig","description":"The access configuration for the cluster."},"arn":{"description":"The ARN of the cluster, such as arn:aws:eks:us-west-2:666666666666:cluster/prod.","type":"string"},"certificateAuthorityData":{"description":"The certificate-authority-data for your cluster.","type":"string"},"clusterSecurityGroupId":{"description":"The cluster security group that was created by Amazon EKS for the cluster. Managed node groups use this security group for control plane to data plane communication.","type":"string"},"computeConfig":{"$ref":"#/types/aws-native:eks:ClusterComputeConfig","description":"Indicates the current configuration of the compute capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the compute capability is enabled, EKS Auto Mode will create and delete EC2 Managed Instances in your AWS account. For more information, see EKS Auto Mode compute capability in the *Amazon EKS User Guide* ."},"controlPlaneScalingConfig":{"$ref":"#/types/aws-native:eks:ClusterControlPlaneScalingConfig","description":"The control plane scaling tier configuration. For more information, see EKS Provisioned Control Plane in the Amazon EKS User Guide."},"deletionProtection":{"description":"Set this value to true to enable deletion protection for the cluster.","type":"boolean"},"encryptionConfigKeyArn":{"description":"Amazon Resource Name (ARN) or alias of the customer master key (CMK).","type":"string"},"endpoint":{"description":"The endpoint for your Kubernetes API server, such as https://5E1D0CEXAMPLEA591B746AFC5AB30262.yl4.us-west-2.eks.amazonaws.com.","type":"string"},"id":{"description":"The unique ID given to your cluster.","type":"string"},"kubernetesNetworkConfig":{"$ref":"#/types/aws-native:eks:ClusterKubernetesNetworkConfig","description":"The Kubernetes network configuration for the cluster."},"logging":{"$ref":"#/types/aws-native:eks:Logging","description":"The logging configuration for your cluster."},"openIdConnectIssuerUrl":{"description":"The issuer URL for the cluster's OIDC identity provider, such as https://oidc.eks.us-west-2.amazonaws.com/id/EXAMPLED539D4633E53DE1B716D3041E. If you need to remove https:// from this output value, you can include the following code in your template.","type":"string"},"remoteNetworkConfig":{"$ref":"#/types/aws-native:eks:ClusterRemoteNetworkConfig","description":"The configuration in the cluster for EKS Hybrid Nodes. You can add, change, or remove this configuration after the cluster is created."},"resourcesVpcConfig":{"$ref":"#/types/aws-native:eks:ClusterResourcesVpcConfig","description":"The VPC configuration that's used by the cluster control plane. Amazon EKS VPC resources have specific requirements to work properly with Kubernetes. For more information, see [Cluster VPC Considerations](https://docs.aws.amazon.com/eks/latest/userguide/network_reqs.html) and [Cluster Security Group Considerations](https://docs.aws.amazon.com/eks/latest/userguide/sec-group-reqs.html) in the *Amazon EKS User Guide* . You must specify at least two subnets. You can specify up to five security groups, but we recommend that you use a dedicated security group for your cluster control plane."},"storageConfig":{"$ref":"#/types/aws-native:eks:ClusterStorageConfig","description":"Indicates the current configuration of the block storage capability on your EKS Auto Mode cluster. For example, if the capability is enabled or disabled. If the block storage capability is enabled, EKS Auto Mode will create and delete EBS volumes in your AWS account. For more information, see EKS Auto Mode block storage capability in the *Amazon EKS User Guide* ."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"upgradePolicy":{"$ref":"#/types/aws-native:eks:ClusterUpgradePolicy","description":"This value indicates if extended support is enabled or disabled for the cluster.\n\n[Learn more about EKS Extended Support in the *Amazon EKS User Guide* .](https://docs.aws.amazon.com/eks/latest/userguide/extended-support-control.html)"},"version":{"description":"The desired Kubernetes version for your cluster. If you don't specify a value here, the latest version available in Amazon EKS is used.","type":"string"},"zonalShiftConfig":{"$ref":"#/types/aws-native:eks:ClusterZonalShiftConfig","description":"The configuration for zonal shift for the cluster."}}}},"aws-native:eks:getFargateProfile":{"description":"Resource Schema for AWS::EKS::FargateProfile","inputs":{"properties":{"clusterName":{"type":"string","description":"Name of the Cluster"},"fargateProfileName":{"type":"string","description":"Name of FargateProfile"}},"required":["clusterName","fargateProfileName"]},"outputs":{"properties":{"arn":{"description":"The ARN of the cluster, such as `arn:aws:eks:us-west-2:666666666666:fargateprofile/myCluster/myFargateProfile/1cb1a11a-1dc1-1d11-cf11-1111f11fa111` .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:eks:getIdentityProviderConfig":{"description":"An object representing an Amazon EKS IdentityProviderConfig.","inputs":{"properties":{"clusterName":{"type":"string","description":"The name of the identity provider configuration."},"identityProviderConfigName":{"type":"string","description":"The name of the OIDC provider configuration."},"type":{"$ref":"#/types/aws-native:eks:IdentityProviderConfigType","description":"The type of the identity provider configuration."}},"required":["identityProviderConfigName","clusterName","type"]},"outputs":{"properties":{"identityProviderConfigArn":{"description":"The ARN of the configuration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:eks:getNodegroup":{"description":"Resource schema for AWS::EKS::Nodegroup","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) associated with the managed node group.","type":"string"},"id":{"type":"string"},"labels":{"additionalProperties":{"type":"string"},"description":"The Kubernetes labels to be applied to the nodes in the node group when they are created.","type":"object"},"launchTemplate":{"$ref":"#/types/aws-native:eks:NodegroupLaunchTemplateSpecification","description":"An object representing a node group's launch template specification."},"nodeRepairConfig":{"$ref":"#/types/aws-native:eks:NodegroupNodeRepairConfig","description":"The node auto repair configuration for node group."},"releaseVersion":{"description":"The AMI version of the Amazon EKS-optimized AMI to use with your node group.","type":"string"},"scalingConfig":{"$ref":"#/types/aws-native:eks:NodegroupScalingConfig","description":"The scaling configuration details for the Auto Scaling group that is created for your node group."},"tags":{"additionalProperties":{"type":"string"},"description":"The metadata, as key-value pairs, to apply to the node group to assist with categorization and organization. Follows same schema as Labels for consistency.","type":"object"},"taints":{"description":"The Kubernetes taints to be applied to the nodes in the node group when they are created.","items":{"$ref":"#/types/aws-native:eks:NodegroupTaint"},"type":"array"},"updateConfig":{"$ref":"#/types/aws-native:eks:NodegroupUpdateConfig","description":"The node group update configuration."},"version":{"description":"The Kubernetes version to use for your managed nodes.","type":"string"}}}},"aws-native:eks:getPodIdentityAssociation":{"description":"An object representing an Amazon EKS PodIdentityAssociation.","inputs":{"properties":{"associationArn":{"type":"string","description":"The ARN of the pod identity association."}},"required":["associationArn"]},"outputs":{"properties":{"associationArn":{"description":"The ARN of the pod identity association.","type":"string"},"associationId":{"description":"The ID of the pod identity association.","type":"string"},"disableSessionTags":{"description":"The Disable Session Tags of the pod identity association.","type":"boolean"},"externalId":{"description":"The External Id of the pod identity association.","type":"string"},"policy":{"description":"The policy of the pod identity association.","type":"string"},"roleArn":{"description":"The IAM role ARN that the pod identity association is created for.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetRoleArn":{"description":"The Target Role Arn of the pod identity association.","type":"string"}}}},"aws-native:elasticache:getGlobalReplicationGroup":{"description":"The AWS::ElastiCache::GlobalReplicationGroup resource creates an Amazon ElastiCache Global Replication Group.","inputs":{"properties":{"globalReplicationGroupId":{"type":"string","description":"The name of the Global Datastore, it is generated by ElastiCache adding a prefix to GlobalReplicationGroupIdSuffix."}},"required":["globalReplicationGroupId"]},"outputs":{"properties":{"cacheParameterGroupName":{"description":"Cache parameter group name to use for the new engine version. This parameter cannot be modified independently.","type":"string"},"engine":{"description":"The engine of the Global Datastore.","type":"string"},"globalReplicationGroupDescription":{"description":"The optional description of the Global Datastore","type":"string"},"globalReplicationGroupId":{"description":"The name of the Global Datastore, it is generated by ElastiCache adding a prefix to GlobalReplicationGroupIdSuffix.","type":"string"},"members":{"description":"The replication groups that comprise the Global Datastore.","items":{"$ref":"#/types/aws-native:elasticache:GlobalReplicationGroupMember"},"type":"array"},"status":{"description":"The status of the Global Datastore","type":"string"}}}},"aws-native:elasticache:getParameterGroup":{"description":"Resource Type definition for AWS::ElastiCache::ParameterGroup","inputs":{"properties":{"cacheParameterGroupName":{"type":"string","description":"The name of the Cache Parameter Group."}},"required":["cacheParameterGroupName"]},"outputs":{"properties":{"cacheParameterGroupName":{"description":"The name of the Cache Parameter Group.","type":"string"},"description":{"description":"The description for this cache parameter group.","type":"string"},"properties":{"additionalProperties":{"type":"string"},"description":"A comma-delimited list of parameter name/value pairs. For more information see ModifyCacheParameterGroup in the Amazon ElastiCache API Reference Guide.","type":"object"},"tags":{"description":"Tags are composed of a Key/Value pair. You can use tags to categorize and track each parameter group. The tag value null is permitted.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:elasticache:getReplicationGroup":{"description":"Resource type definition for AWS::ElastiCache::ReplicationGroup","inputs":{"properties":{"replicationGroupId":{"type":"string","description":"The replication group identifier. This parameter is stored as a lowercase string."}},"required":["replicationGroupId"]},"outputs":{"properties":{"autoMinorVersionUpgrade":{"description":"This parameter is currently disabled.","type":"boolean"},"automaticFailoverEnabled":{"description":"Specifies whether a read-only replica is automatically promoted to read/write primary if the existing primary fails. AutomaticFailoverEnabled must be enabled for Redis (cluster mode enabled) replication groups.","type":"boolean"},"cacheNodeType":{"description":"The compute and memory capacity of the nodes in the node group (shard).","type":"string"},"clusterMode":{"description":"Enabled or Disabled. To modify cluster mode from Disabled to Enabled, you must first set the cluster mode to Compatible. Compatible mode allows your Redis OSS clients to connect using both cluster mode enabled and cluster mode disabled. After you migrate all Redis OSS clients to use cluster mode enabled, you can then complete cluster mode configuration and set the cluster mode to Enabled. For more information, see Modify cluster mode.","type":"string"},"configurationEndPoint":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupEndpoint","description":"The configuration details of the replication group."},"engine":{"description":"The name of the cache engine to be used for the clusters in this replication group.","type":"string"},"ipDiscovery":{"description":"The network type you choose when creating a replication group, either ipv4 | ipv6. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system.","type":"string"},"logDeliveryConfigurations":{"description":"Specifies the destination, format and type of the logs.","items":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupLogDeliveryConfigurationRequest"},"type":"array"},"multiAzEnabled":{"description":"A flag indicating if you have Multi-AZ enabled to enhance fault tolerance. For more information, see Minimizing Downtime: Multi-AZ.","type":"boolean"},"numCacheClusters":{"description":"The number of clusters this replication group initially has.This parameter is not used if there is more than one node group (shard). You should use ReplicasPerNodeGroup instead.","type":"integer"},"primaryEndPoint":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupEndpoint","description":"The primary endpoint configuration"},"readEndPoint":{"$ref":"#/types/aws-native:elasticache:ReadEndPointProperties"},"readerEndPoint":{"$ref":"#/types/aws-native:elasticache:ReplicationGroupEndpoint","description":"The endpoint of the reader node in the replication group."},"replicationGroupDescription":{"description":"A user-created description for the replication group.","type":"string"},"snapshotRetentionLimit":{"description":"The number of days for which ElastiCache retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted.","type":"integer"},"snapshotWindow":{"description":"The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of your node group (shard).","type":"string"},"snapshottingClusterId":{"description":"The cluster ID that is used as the daily snapshot source for the replication group. This parameter cannot be set for Redis (cluster mode enabled) replication groups.","type":"string"},"tags":{"description":"A list of cost allocation tags to be added to this resource. Tags are comma-separated key,value pairs (e.g. Key=myKey, Value=myKeyValue. You can include multiple tags as shown following: Key=myKey, Value=myKeyValue Key=mySecondKey, Value=mySecondKeyValue.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitEncryptionEnabled":{"description":"A flag that enables in-transit encryption when set to true.","type":"boolean"},"transitEncryptionMode":{"description":"A setting that allows you to migrate your clients to use in-transit encryption, with no downtime. When setting TransitEncryptionEnabled to true, you can set your TransitEncryptionMode to preferred in the same request, to allow both encrypted and unencrypted connections at the same time. Once you migrate all your Redis OSS clients to use encrypted connections you can modify the value to required to allow encrypted connections only. Setting TransitEncryptionMode to required is a two-step process that requires you to first set the TransitEncryptionMode to preferred, after that you can set TransitEncryptionMode to required. This process will not trigger the replacement of the replication group.","type":"string"},"userGroupIds":{"description":"The ID of user group to associate with the replication group.","items":{"type":"string"},"type":"array"}}}},"aws-native:elasticache:getServerlessCache":{"description":"The AWS::ElastiCache::ServerlessCache resource creates an Amazon ElastiCache Serverless Cache.","inputs":{"properties":{"serverlessCacheName":{"type":"string","description":"The name of the Serverless Cache. This value must be unique."}},"required":["serverlessCacheName"]},"outputs":{"properties":{"arn":{"description":"The ARN of the Serverless Cache.","type":"string"},"cacheUsageLimits":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheCacheUsageLimits","description":"The cache usage limit for the serverless cache."},"createTime":{"description":"The creation time of the Serverless Cache.","type":"string"},"dailySnapshotTime":{"description":"The daily time range (in UTC) during which the service takes automatic snapshot of the Serverless Cache.","type":"string"},"description":{"description":"The description of the Serverless Cache.","type":"string"},"endpoint":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEndpoint","description":"Represents the information required for client programs to connect to a cache node. This value is read-only."},"engine":{"description":"The engine name of the Serverless Cache.","type":"string"},"fullEngineVersion":{"description":"The full engine version of the Serverless Cache.","type":"string"},"majorEngineVersion":{"description":"The major engine version of the Serverless Cache.","type":"string"},"readerEndpoint":{"$ref":"#/types/aws-native:elasticache:ServerlessCacheEndpoint","description":"Represents the information required for client programs to connect to a cache node. This value is read-only."},"securityGroupIds":{"description":"One or more Amazon VPC security groups associated with this Serverless Cache.","items":{"type":"string"},"type":"array"},"snapshotRetentionLimit":{"description":"The snapshot retention limit of the Serverless Cache.","type":"integer"},"status":{"description":"The status of the Serverless Cache.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this Serverless Cache.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userGroupId":{"description":"The ID of the user group.","type":"string"}}}},"aws-native:elasticache:getSubnetGroup":{"description":"Resource Type definition for AWS::ElastiCache::SubnetGroup","inputs":{"properties":{"cacheSubnetGroupName":{"type":"string","description":"The name for the cache subnet group. This value is stored as a lowercase string."}},"required":["cacheSubnetGroupName"]},"outputs":{"properties":{"description":{"description":"The description for the cache subnet group.","type":"string"},"subnetIds":{"description":"The EC2 subnet IDs for the cache subnet group.","items":{"type":"string"},"type":"array"},"tags":{"description":"A tag that can be added to an ElastiCache subnet group. Tags are composed of a Key/Value pair. You can use tags to categorize and track all your subnet groups. A tag with a null Value is permitted.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:elasticache:getUser":{"description":"Resource Type definition for AWS::ElastiCache::User","inputs":{"properties":{"userId":{"type":"string","description":"The ID of the user."}},"required":["userId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the user account.","type":"string"},"engine":{"$ref":"#/types/aws-native:elasticache:UserEngine","description":"The target cache engine for the user."},"status":{"description":"Indicates the user status. Can be \"active\", \"modifying\" or \"deleting\".","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this user.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:elasticache:getUserGroup":{"description":"Resource Type definition for AWS::ElastiCache::UserGroup","inputs":{"properties":{"userGroupId":{"type":"string","description":"The ID of the user group."}},"required":["userGroupId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the user account.","type":"string"},"engine":{"$ref":"#/types/aws-native:elasticache:UserGroupEngine","description":"The target cache engine for the user group."},"status":{"description":"Indicates user group status. Can be \"creating\", \"active\", \"modifying\", \"deleting\".","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this user.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userIds":{"description":"List of users associated to this user group.","items":{"type":"string"},"type":"array"}}}},"aws-native:elasticbeanstalk:getApplication":{"description":"The AWS::ElasticBeanstalk::Application resource specifies an Elastic Beanstalk application.","inputs":{"properties":{"applicationName":{"type":"string","description":"A name for the Elastic Beanstalk application. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the application name."}},"required":["applicationName"]},"outputs":{"properties":{"description":{"description":"Your description of the application.","type":"string"},"resourceLifecycleConfig":{"$ref":"#/types/aws-native:elasticbeanstalk:ApplicationResourceLifecycleConfig","description":"Specifies an application resource lifecycle configuration to prevent your application from accumulating too many versions."}}}},"aws-native:elasticbeanstalk:getApplicationVersion":{"description":"Resource Type definition for AWS::ElasticBeanstalk::ApplicationVersion","inputs":{"properties":{"applicationName":{"type":"string","description":"The name of the Elastic Beanstalk application that is associated with this application version. "},"id":{"type":"string"}},"required":["applicationName","id"]},"outputs":{"properties":{"description":{"description":"A description of this application version.","type":"string"},"id":{"type":"string"}}}},"aws-native:elasticbeanstalk:getConfigurationTemplate":{"description":"Resource Type definition for AWS::ElasticBeanstalk::ConfigurationTemplate","inputs":{"properties":{"applicationName":{"type":"string","description":"The name of the Elastic Beanstalk application to associate with this configuration template. "},"templateName":{"type":"string","description":"The name of the configuration template"}},"required":["applicationName","templateName"]},"outputs":{"properties":{"description":{"description":"An optional description for this configuration.","type":"string"},"optionSettings":{"description":"Option values for the Elastic Beanstalk configuration, such as the instance type. If specified, these values override the values obtained from the solution stack or the source configuration template. For a complete list of Elastic Beanstalk configuration options, see [Option Values](https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options.html) in the AWS Elastic Beanstalk Developer Guide. ","items":{"$ref":"#/types/aws-native:elasticbeanstalk:ConfigurationTemplateConfigurationOptionSetting"},"type":"array"},"templateName":{"description":"The name of the configuration template","type":"string"}}}},"aws-native:elasticbeanstalk:getEnvironment":{"description":"Resource Type definition for AWS::ElasticBeanstalk::Environment","inputs":{"properties":{"environmentName":{"type":"string","description":"A unique name for the environment."}},"required":["environmentName"]},"outputs":{"properties":{"description":{"description":"Your description for this environment.","type":"string"},"endpointUrl":{"description":"For load-balanced, autoscaling environments, the URL to the load balancer. For single-instance environments, the IP address of the instance.\n\nExample load balancer URL:\n\nExample instance IP address:\n\n`192.0.2.0`","type":"string"},"operationsRole":{"description":"The Amazon Resource Name (ARN) of an existing IAM role to be used as the environment's operations role.","type":"string"},"platformArn":{"description":"The Amazon Resource Name (ARN) of the custom platform to use with the environment.","type":"string"},"tags":{"description":"Specifies the tags applied to resources in the environment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tier":{"$ref":"#/types/aws-native:elasticbeanstalk:EnvironmentTier","description":"Specifies the tier to use in creating this environment. The environment tier that you choose determines whether Elastic Beanstalk provisions resources to support a web application that handles HTTP(S) requests or a web application that handles background-processing tasks."},"versionLabel":{"description":"The name of the application version to deploy.","type":"string"}}}},"aws-native:elasticloadbalancingv2:getListener":{"description":"Specifies a listener for an Application Load Balancer, Network Load Balancer, or Gateway Load Balancer.","inputs":{"properties":{"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."}},"required":["listenerArn"]},"outputs":{"properties":{"alpnPolicy":{"description":"[TLS listener] The name of the Application-Layer Protocol Negotiation (ALPN) policy.","items":{"type":"string"},"type":"array"},"certificates":{"description":"The default SSL server certificate for a secure listener. You must provide exactly one certificate if the listener protocol is HTTPS or TLS.\n For an HTTPS listener, update requires some interruptions. For a TLS listener, update requires no interruption.\n To create a certificate list for a secure listener, use [AWS::ElasticLoadBalancingV2::ListenerCertificate](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenercertificate.html).","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerCertificate"},"type":"array"},"defaultActions":{"description":"The actions for the default rule. You cannot define a condition for a default rule.\n To create additional rules for an Application Load Balancer, use [AWS::ElasticLoadBalancingV2::ListenerRule](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-listenerrule.html).","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAction"},"type":"array"},"listenerArn":{"description":"The Amazon Resource Name (ARN) of the listener.","type":"string"},"listenerAttributes":{"description":"The listener attributes. Attributes that you do not modify retain their current values.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerAttribute"},"type":"array"},"mutualAuthentication":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerMutualAuthentication","description":"The mutual authentication configuration information."},"port":{"description":"The port on which the load balancer is listening. You can't specify a port for a Gateway Load Balancer.","type":"integer"},"protocol":{"description":"The protocol for connections from clients to the load balancer. For Application Load Balancers, the supported protocols are HTTP and HTTPS. For Network Load Balancers, the supported protocols are TCP, TLS, UDP, TCP_UDP, QUIC, and TCP_QUIC. You can’t specify the UDP, TCP_UDP, QUIC, or TCP_QUIC protocol if dual-stack mode is enabled. You can't specify a protocol for a Gateway Load Balancer.","type":"string"},"sslPolicy":{"description":"[HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide*.\n [HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation.","type":"string"}}}},"aws-native:elasticloadbalancingv2:getListenerRule":{"description":"Specifies a listener rule. The listener must be associated with an Application Load Balancer. Each rule consists of a priority, one or more actions, and one or more conditions.\n For more information, see [Quotas for your Application Load Balancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-limits.html) in the *User Guide for Application Load Balancers*.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule."}},"required":["ruleArn"]},"outputs":{"properties":{"actions":{"description":"The actions.\n The rule must include exactly one of the following types of actions: ``forward``, ``fixed-response``, or ``redirect``, and it must be the last action to be performed. If the rule is for an HTTPS listener, it can also optionally include an authentication action.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleAction"},"type":"array"},"conditions":{"description":"The conditions.\n The rule can optionally include up to one of each of the following conditions: ``http-request-method``, ``host-header``, ``path-pattern``, and ``source-ip``. A rule can also optionally include one or more of each of the following conditions: ``http-header`` and ``query-string``.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleRuleCondition"},"type":"array"},"isDefault":{"description":"Indicates whether this is the default rule.","type":"boolean"},"priority":{"description":"The rule priority. A listener can't have multiple rules with the same priority.\n If you try to reorder rules by updating their priorities, do not specify a new priority if an existing rule already uses this priority, as this can cause an error. If you need to reuse a priority with a different rule, you must remove it as a priority first, and then specify it in a subsequent update.","type":"integer"},"ruleArn":{"description":"The Amazon Resource Name (ARN) of the rule.","type":"string"},"transforms":{"items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:ListenerRuleTransform"},"type":"array"}}}},"aws-native:elasticloadbalancingv2:getLoadBalancer":{"description":"Specifies an Application Load Balancer, a Network Load Balancer, or a Gateway Load Balancer.","inputs":{"properties":{"loadBalancerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the load balancer."}},"required":["loadBalancerArn"]},"outputs":{"properties":{"canonicalHostedZoneId":{"description":"The ID of the Amazon Route 53 hosted zone associated with the load balancer. For example, `Z2P70J7EXAMPLE` .","type":"string"},"dnsName":{"description":"The DNS name for the load balancer. For example, `my-load-balancer-424835706.us-west-2.elb.amazonaws.com` .","type":"string"},"enablePrefixForIpv6SourceNat":{"description":"[Network Load Balancers with UDP listeners] Indicates whether to use an IPv6 prefix from each subnet for source NAT. The IP address type must be ``dualstack``. The default value is ``off``.","type":"string"},"enforceSecurityGroupInboundRulesOnPrivateLinkTraffic":{"description":"Indicates whether to evaluate inbound security group rules for traffic sent to a Network Load Balancer through privatelink. The default is ``on``.\n You can't configure this property on a Network Load Balancer unless you associated a security group with the load balancer when you created it.","type":"string"},"ipAddressType":{"description":"The IP address type. Internal load balancers must use ``ipv4``.\n [Application Load Balancers] The possible values are ``ipv4`` (IPv4 addresses), ``dualstack`` (IPv4 and IPv6 addresses), and ``dualstack-without-public-ipv4`` (public IPv6 addresses and private IPv4 and IPv6 addresses).\n Application Load Balancer authentication supports IPv4 addresses only when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer can't complete the authentication process, resulting in HTTP 500 errors.\n [Network Load Balancers and Gateway Load Balancers] The possible values are ``ipv4`` (IPv4 addresses) and ``dualstack`` (IPv4 and IPv6 addresses).","type":"string"},"ipv4IpamPoolId":{"description":"The ID of the IPv4 IPAM pool.","type":"string"},"loadBalancerArn":{"description":"The Amazon Resource Name (ARN) of the load balancer.","type":"string"},"loadBalancerAttributes":{"description":"The load balancer attributes. Attributes that you do not modify retain their current values.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerAttribute"},"type":"array"},"loadBalancerFullName":{"description":"The full name of the load balancer. For example, `app/my-load-balancer/50dc6c495c0c9188` .","type":"string"},"loadBalancerName":{"description":"The name of the load balancer. For example, `my-load-balancer` .","type":"string"},"minimumLoadBalancerCapacity":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerMinimumLoadBalancerCapacity","description":"The minimum capacity for a load balancer."},"securityGroups":{"description":"[Application Load Balancers and Network Load Balancers] The IDs of the security groups for the load balancer.","items":{"type":"string"},"type":"array"},"subnetMappings":{"description":"The IDs of the subnets. You can specify only one subnet per Availability Zone. You must specify either subnets or subnet mappings, but not both.\n [Application Load Balancers] You must specify subnets from at least two Availability Zones. You can't specify Elastic IP addresses for your subnets.\n [Application Load Balancers on Outposts] You must specify one Outpost subnet.\n [Application Load Balancers on Local Zones] You can specify subnets from one or more Local Zones.\n [Network Load Balancers] You can specify subnets from one or more Availability Zones. You can specify one Elastic IP address per subnet if you need static IP addresses for your internet-facing load balancer. For internal load balancers, you can specify one private IP address per subnet from the IPv4 range of the subnet. For internet-facing load balancer, you can specify one IPv6 address per subnet.\n [Gateway Load Balancers] You can specify subnets from one or more Availability Zones. You can't specify Elastic IP addresses for your subnets.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:LoadBalancerSubnetMapping"},"type":"array"},"subnets":{"description":"The IDs of the subnets. You can specify only one subnet per Availability Zone. You must specify either subnets or subnet mappings, but not both. To specify an Elastic IP address, specify subnet mappings instead of subnets.\n [Application Load Balancers] You must specify subnets from at least two Availability Zones.\n [Application Load Balancers on Outposts] You must specify one Outpost subnet.\n [Application Load Balancers on Local Zones] You can specify subnets from one or more Local Zones.\n [Network Load Balancers and Gateway Load Balancers] You can specify subnets from one or more Availability Zones.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to assign to the load balancer.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:elasticloadbalancingv2:getTargetGroup":{"description":"Resource Type definition for AWS::ElasticLoadBalancingV2::TargetGroup","inputs":{"properties":{"targetGroupArn":{"type":"string","description":"The ARN of the Target Group"}},"required":["targetGroupArn"]},"outputs":{"properties":{"healthCheckEnabled":{"description":"Indicates whether health checks are enabled. If the target type is lambda, health checks are disabled by default but can be enabled. If the target type is instance, ip, or alb, health checks are always enabled and cannot be disabled.","type":"boolean"},"healthCheckIntervalSeconds":{"description":"The approximate amount of time, in seconds, between health checks of an individual target.","type":"integer"},"healthCheckPath":{"description":"[HTTP/HTTPS health checks] The destination for health checks on the targets. [HTTP1 or HTTP2 protocol version] The ping path. The default is /. [GRPC protocol version] The path of a custom health check method with the format /package.service/method. The default is /AWS.ALB/healthcheck.","type":"string"},"healthCheckPort":{"description":"The port the load balancer uses when performing health checks on targets. ","type":"string"},"healthCheckProtocol":{"description":"The protocol the load balancer uses when performing health checks on targets. ","type":"string"},"healthCheckTimeoutSeconds":{"description":"The amount of time, in seconds, during which no response from a target means a failed health check.","type":"integer"},"healthyThresholdCount":{"description":"The number of consecutive health checks successes required before considering an unhealthy target healthy. ","type":"integer"},"loadBalancerArns":{"description":"The Amazon Resource Names (ARNs) of the load balancers that route traffic to this target group.","items":{"type":"string"},"type":"array"},"matcher":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupMatcher","description":"[HTTP/HTTPS health checks] The HTTP or gRPC codes to use when checking for a successful response from a target."},"tags":{"description":"The tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetControlPort":{"description":"The port that the target control agent uses to communicate the available capacity of targets to the load balancer.","type":"integer"},"targetGroupArn":{"description":"The ARN of the Target Group","type":"string"},"targetGroupAttributes":{"description":"The attributes.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupAttribute"},"type":"array"},"targetGroupFullName":{"description":"The full name of the target group.","type":"string"},"targetGroupName":{"description":"The name of the target group.","type":"string"},"targets":{"description":"The targets.","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TargetGroupTargetDescription"},"type":"array"},"unhealthyThresholdCount":{"description":"The number of consecutive health check failures required before considering a target unhealthy.","type":"integer"}}}},"aws-native:elasticloadbalancingv2:getTrustStore":{"description":"Resource Type definition for AWS::ElasticLoadBalancingV2::TrustStore","inputs":{"properties":{"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store."}},"required":["trustStoreArn"]},"outputs":{"properties":{"numberOfCaCertificates":{"description":"The number of certificates associated with the trust store.","type":"integer"},"status":{"description":"The status of the trust store, could be either of ACTIVE or CREATING.","type":"string"},"tags":{"description":"The tags to assign to the trust store.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trustStoreArn":{"description":"The Amazon Resource Name (ARN) of the trust store.","type":"string"}}}},"aws-native:elasticloadbalancingv2:getTrustStoreRevocation":{"description":"Resource Type definition for AWS::ElasticLoadBalancingV2::TrustStoreRevocation","inputs":{"properties":{"revocationId":{"type":"integer","description":"The ID associated with the revocation."},"trustStoreArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the trust store."}},"required":["revocationId","trustStoreArn"]},"outputs":{"properties":{"revocationId":{"description":"The ID associated with the revocation.","type":"integer"},"trustStoreRevocations":{"description":"The data associated with a trust store revocation","items":{"$ref":"#/types/aws-native:elasticloadbalancingv2:TrustStoreRevocation"},"type":"array"}}}},"aws-native:elementalinference:getFeed":{"description":"Represents a feed that receives media for inference processing","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"arn":{"type":"string"},"dataEndpoints":{"items":{"type":"string"},"type":"array"},"id":{"type":"string"},"name":{"type":"string"},"outputs":{"items":{"$ref":"#/types/aws-native:elementalinference:FeedGetOutput"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"type":"object"}}}},"aws-native:emr:getStep":{"description":"Schema for AWS::EMR::Step","inputs":{"properties":{"id":{"type":"string","description":"ID generated by service"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"ID generated by service","type":"string"}}}},"aws-native:emr:getStudio":{"description":"Resource schema for AWS::EMR::Studio","inputs":{"properties":{"studioId":{"type":"string","description":"The ID of the EMR Studio."}},"required":["studioId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the EMR Studio.","type":"string"},"defaultS3Location":{"description":"The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.","type":"string"},"description":{"description":"A detailed description of the Studio.","type":"string"},"idpAuthUrl":{"description":"Your identity provider's authentication endpoint. Amazon EMR Studio redirects federated users to this endpoint for authentication when logging in to a Studio with the Studio URL.","type":"string"},"idpRelayStateParameterName":{"description":"The name of relay state parameter for external Identity Provider.","type":"string"},"name":{"description":"A descriptive name for the Amazon EMR Studio.","type":"string"},"studioId":{"description":"The ID of the EMR Studio.","type":"string"},"subnetIds":{"description":"A list of up to 5 subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.","items":{"type":"string"},"type":"array"},"tags":{"description":"A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"url":{"description":"The unique Studio access URL.","type":"string"}}}},"aws-native:emr:getStudioSessionMapping":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"identityName":{"type":"string","description":"The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified."},"identityType":{"$ref":"#/types/aws-native:emr:StudioSessionMappingIdentityType","description":"Specifies whether the identity to map to the Studio is a user or a group."},"studioId":{"type":"string","description":"The ID of the Amazon EMR Studio to which the user or group will be mapped."}},"required":["studioId","identityType","identityName"]},"outputs":{"properties":{"sessionPolicyArn":{"description":"The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles.","type":"string"}}}},"aws-native:emr:getWalWorkspace":{"description":"Resource schema for AWS::EMR::WALWorkspace Type","inputs":{"properties":{"walWorkspaceName":{"type":"string","description":"The name of the emrwal container"}},"required":["walWorkspaceName"]},"outputs":{"properties":{"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:emrcontainers:getEndpoint":{"description":"Resource Schema of AWS::EMRContainers::Endpoint Type","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the managed endpoint."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the managed endpoint.","type":"string"},"certificateAuthority":{"$ref":"#/types/aws-native:emrcontainers:EndpointCertificate","description":"The certificate authority for the managed endpoint."},"createdAt":{"description":"The date and time when the managed endpoint was created.","type":"string"},"failureReason":{"description":"The reason for a failed managed endpoint.","type":"string"},"id":{"description":"The ID of the managed endpoint.","type":"string"},"securityGroup":{"description":"The security group associated with the managed endpoint.","type":"string"},"serverUrl":{"description":"The server URL of the managed endpoint.","type":"string"},"state":{"description":"The state of the managed endpoint.","type":"string"},"stateDetails":{"description":"Additional details about the state of the managed endpoint.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this managed endpoint.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:emrcontainers:getSecurityConfiguration":{"description":"Resource Schema of AWS::EMRContainers::SecurityConfiguration Type","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the security configuration."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the security configuration.","type":"string"},"id":{"description":"The ID of the security configuration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this security configuration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:emrcontainers:getVirtualCluster":{"description":"Resource Schema of AWS::EMRContainers::VirtualCluster Type","inputs":{"properties":{"id":{"type":"string","description":"Id of the virtual cluster."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the project, such as `arn:aws:emr-containers:us-east-1:123456789012:/virtualclusters/ab4rp1abcs8xz47n3x0example` .","type":"string"},"id":{"description":"Id of the virtual cluster.","type":"string"},"securityConfigurationId":{"description":"The ID of the security configuration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this virtual cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:emrserverless:getApplication":{"description":"Resource schema for AWS::EMRServerless::Application Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The ID of the EMR Serverless Application."}},"required":["applicationId"]},"outputs":{"properties":{"applicationId":{"description":"The ID of the EMR Serverless Application.","type":"string"},"architecture":{"$ref":"#/types/aws-native:emrserverless:ApplicationArchitecture","description":"The CPU architecture of an application."},"arn":{"description":"The Amazon Resource Name (ARN) of the EMR Serverless Application.","type":"string"},"autoStartConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationAutoStartConfiguration","description":"Configuration for Auto Start of Application."},"autoStopConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationAutoStopConfiguration","description":"Configuration for Auto Stop of Application."},"identityCenterConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationIdentityCenterConfiguration","description":"The IAM IdentityCenter configuration for trusted-identity-propagation on this application. Supported with release labels emr-7.8.0 and above."},"imageConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationImageConfigurationInput","description":"The image configuration applied to all worker types."},"initialCapacity":{"description":"Initial capacity initialized when an Application is started.","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationInitialCapacityConfigKeyValuePair"},"type":"array"},"interactiveConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationInteractiveConfiguration","description":"The interactive configuration object that enables the interactive use cases for an application."},"maximumCapacity":{"$ref":"#/types/aws-native:emrserverless:ApplicationMaximumAllowedResources","description":"Maximum allowed cumulative resources for an Application. No new resources will be created once the limit is hit."},"monitoringConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationMonitoringConfiguration","description":"A configuration specification to be used when provisioning an application. A configuration consists of a classification, properties, and optional nested configurations. A classification refers to an application-specific configuration file. Properties are the settings you want to change in that file."},"networkConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationNetworkConfiguration","description":"Network Configuration for customer VPC connectivity."},"releaseLabel":{"description":"EMR release label.","type":"string"},"runtimeConfiguration":{"description":"The [Configuration](https://docs.aws.amazon.com/emr-serverless/latest/APIReference/API_Configuration.html) specifications of an application. Each configuration consists of a classification and properties. You use this parameter when creating or updating an application. To see the runtimeConfiguration object of an application, run the [GetApplication](https://docs.aws.amazon.com/emr-serverless/latest/APIReference/API_GetApplication.html) API operation.","items":{"$ref":"#/types/aws-native:emrserverless:ApplicationConfigurationObject"},"type":"array"},"schedulerConfiguration":{"$ref":"#/types/aws-native:emrserverless:ApplicationSchedulerConfiguration","description":"The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above."},"tags":{"description":"Tag map with key and value","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workerTypeSpecifications":{"additionalProperties":{"$ref":"#/types/aws-native:emrserverless:ApplicationWorkerTypeSpecificationInput"},"description":"The key-value pairs that specify worker type to WorkerTypeSpecificationInput. This parameter must contain all valid worker types for a Spark or Hive application. Valid worker types include Driver and Executor for Spark applications and HiveDriver and TezTask for Hive applications. You can either set image details in this parameter for each worker type, or in imageConfiguration for all worker types.","type":"object"}}}},"aws-native:entityresolution:getIdMappingWorkflow":{"description":"IdMappingWorkflow defined in AWS Entity Resolution service","inputs":{"properties":{"workflowName":{"type":"string","description":"The name of the IdMappingWorkflow"}},"required":["workflowName"]},"outputs":{"properties":{"createdAt":{"type":"string"},"description":{"description":"The description of the IdMappingWorkflow","type":"string"},"idMappingIncrementalRunConfig":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingIncrementalRunConfig"},"idMappingTechniques":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowIdMappingTechniques","description":"An object which defines the ID mapping technique and any additional configurations."},"inputSourceConfig":{"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` .","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowInputSource"},"type":"array"},"outputSourceConfig":{"description":"A list of `IdMappingWorkflowOutputSource` objects, each of which contains fields `outputS3Path` and `KMSArn` .","items":{"$ref":"#/types/aws-native:entityresolution:IdMappingWorkflowOutputSource"},"type":"array"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"},"workflowArn":{"type":"string"}}}},"aws-native:entityresolution:getIdNamespace":{"description":"IdNamespace defined in AWS Entity Resolution service","inputs":{"properties":{"idNamespaceName":{"type":"string","description":"The name of the ID namespace."}},"required":["idNamespaceName"]},"outputs":{"properties":{"createdAt":{"description":"The date and time when the IdNamespace was created","type":"string"},"description":{"description":"The description of the ID namespace.","type":"string"},"idMappingWorkflowProperties":{"description":"Determines the properties of `IdMappingWorflow` where this `IdNamespace` can be used as a `Source` or a `Target` .","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceIdMappingWorkflowProperties"},"type":"array"},"idNamespaceArn":{"description":"The arn associated with the IdNamespace","type":"string"},"inputSourceConfig":{"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` .","items":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceInputSource"},"type":"array"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to access the resources defined in this `IdNamespace` on your behalf as part of the workflow run.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:entityresolution:IdNamespaceType","description":"The type of ID namespace. There are two types: `SOURCE` and `TARGET` .\n\nThe `SOURCE` contains configurations for `sourceId` data that will be processed in an ID mapping workflow.\n\nThe `TARGET` contains a configuration of `targetId` which all `sourceIds` will resolve to."},"updatedAt":{"description":"The date and time when the IdNamespace was updated","type":"string"}}}},"aws-native:entityresolution:getMatchingWorkflow":{"description":"MatchingWorkflow defined in AWS Entity Resolution service","inputs":{"properties":{"workflowName":{"type":"string","description":"The name of the MatchingWorkflow"}},"required":["workflowName"]},"outputs":{"properties":{"createdAt":{"type":"string"},"description":{"description":"The description of the MatchingWorkflow","type":"string"},"incrementalRunConfig":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowIncrementalRunConfig","description":"Optional. An object that defines the incremental run type. This object contains only the `incrementalRunType` field, which appears as \"Automatic\" in the console.\n\n\u003e For workflows where `resolutionType` is `ML_MATCHING` or `PROVIDER` , incremental processing is not supported."},"inputSourceConfig":{"description":"A list of `InputSource` objects, which have the fields `InputSourceARN` and `SchemaName` .","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowInputSource"},"type":"array"},"outputSourceConfig":{"description":"A list of `OutputSource` objects, each of which contains fields `outputS3Path` , `applyNormalization` , `KMSArn` , and `output` .","items":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowOutputSource"},"type":"array"},"resolutionTechniques":{"$ref":"#/types/aws-native:entityresolution:MatchingWorkflowResolutionTechniques","description":"An object which defines the `resolutionType` and the `ruleBasedProperties` ."},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role. AWS Entity Resolution assumes this role to create resources on your behalf as part of workflow execution.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"},"workflowArn":{"type":"string"}}}},"aws-native:entityresolution:getPolicyStatement":{"description":"Policy Statement defined in AWS Entity Resolution Service","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource that will be accessed by the principal."},"statementId":{"type":"string","description":"A statement identifier that differentiates the statement from others in the same policy."}},"required":["arn","statementId"]},"outputs":{"properties":{"action":{"description":"The action that the principal can use on the resource.\n\nFor example, `entityresolution:GetIdMappingJob` , `entityresolution:GetMatchingJob` .","items":{"type":"string"},"type":"array"},"condition":{"description":"A set of condition keys that you can use in key policies.","type":"string"},"effect":{"$ref":"#/types/aws-native:entityresolution:PolicyStatementStatementEffect","description":"Determines whether the permissions specified in the policy are to be allowed ( `Allow` ) or denied ( `Deny` ).\n\n\u003e If you set the value of the `effect` parameter to `Deny` for the `AddPolicyStatement` operation, you must also set the value of the `effect` parameter in the `policy` to `Deny` for the `PutPolicy` operation."},"principal":{"description":"The AWS service or AWS account that can access the resource defined as ARN.","items":{"type":"string"},"type":"array"}}}},"aws-native:entityresolution:getSchemaMapping":{"description":"SchemaMapping defined in AWS Entity Resolution service","inputs":{"properties":{"schemaName":{"type":"string","description":"The name of the SchemaMapping"}},"required":["schemaName"]},"outputs":{"properties":{"createdAt":{"type":"string"},"description":{"description":"The description of the SchemaMapping","type":"string"},"hasWorkflows":{"type":"boolean"},"mappedInputFields":{"description":"The SchemaMapping attributes input","items":{"$ref":"#/types/aws-native:entityresolution:SchemaMappingSchemaInputAttribute"},"type":"array"},"schemaArn":{"type":"string"},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"}}}},"aws-native:events:getApiDestination":{"description":"Resource Type definition for AWS::Events::ApiDestination.","inputs":{"properties":{"name":{"type":"string","description":"Name of the apiDestination."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The arn of the api destination.","type":"string"},"arnForPolicy":{"description":"The arn of the api destination to be used in IAM policies.","type":"string"},"connectionArn":{"description":"The arn of the connection.","type":"string"},"description":{"description":"A description for the API destination to create.","type":"string"},"httpMethod":{"$ref":"#/types/aws-native:events:ApiDestinationHttpMethod","description":"The method to use for the request to the HTTP invocation endpoint."},"invocationEndpoint":{"description":"Url endpoint to invoke.","type":"string"},"invocationRateLimitPerSecond":{"description":"The maximum number of requests per second to send to the HTTP invocation endpoint.","type":"integer"}}}},"aws-native:events:getArchive":{"description":"Resource Type definition for AWS::Events::Archive","inputs":{"properties":{"archiveName":{"type":"string","description":"The name for the archive to create."}},"required":["archiveName"]},"outputs":{"properties":{"arn":{"description":"The ARN of the archive created.","type":"string"},"description":{"description":"A description for the archive.","type":"string"},"eventPattern":{"$ref":"pulumi.json#/Any","description":"An event pattern to use to filter events sent to the archive.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::Archive` for more information about the expected schema for this property."},"kmsKeyIdentifier":{"description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this archive. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nIf you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt the archive.\n\nFor more information, see [Identify and view keys](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html) in the *AWS Key Management Service Developer Guide* .\n\n\u003e If you have specified that EventBridge use a customer managed key for encrypting the source event bus, we strongly recommend you also specify a customer managed key for any archives for the event bus as well.\n\u003e \n\u003e For more information, see [Encrypting archives](https://docs.aws.amazon.com/eventbridge/latest/userguide/encryption-archives.html) in the *Amazon EventBridge User Guide* .","type":"string"},"retentionDays":{"description":"The number of days to retain events for. Default value is 0. If set to 0, events are retained indefinitely","type":"integer"}}}},"aws-native:events:getConnection":{"description":"Resource Type definition for AWS::Events::Connection.","inputs":{"properties":{"name":{"type":"string","description":"Name of the connection."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The arn of the connection resource.","type":"string"},"arnForPolicy":{"description":"The arn of the connection resource to be used in IAM policies.","type":"string"},"authParameters":{"$ref":"#/types/aws-native:events:ConnectionAuthParameters","description":"The authorization parameters to use to authorize with the endpoint.\n\nYou must include only authorization parameters for the `AuthorizationType` you specify."},"authorizationType":{"$ref":"#/types/aws-native:events:ConnectionAuthorizationType","description":"The type of authorization to use for the connection.\n\n\u003e OAUTH tokens are refreshed when a 401 or 407 response is returned."},"description":{"description":"Description of the connection.","type":"string"},"invocationConnectivityParameters":{"$ref":"#/types/aws-native:events:InvocationConnectivityParametersProperties","description":"The private resource the HTTP request will be sent to."},"kmsKeyIdentifier":{"description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt this connection. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nIf you do not specify a customer managed key identifier, EventBridge uses an AWS owned key to encrypt the connection.\n\nFor more information, see [Identify and view keys](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html) in the *AWS Key Management Service Developer Guide* .","type":"string"},"secretArn":{"description":"The arn of the secrets manager secret created in the customer account.","type":"string"}}}},"aws-native:events:getEndpoint":{"description":"Resource Type definition for AWS::Events::Endpoint.","inputs":{"properties":{"name":{"type":"string","description":"The name of the endpoint."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The ARN of the endpoint.","type":"string"},"description":{"description":"A description for the endpoint.","type":"string"},"endpointId":{"description":"The ID of the endpoint.","type":"string"},"endpointUrl":{"description":"The URL of the endpoint.","type":"string"},"eventBuses":{"description":"The event buses being used by the endpoint.\n\n*Exactly* : `2`","items":{"$ref":"#/types/aws-native:events:EndpointEventBus"},"type":"array"},"replicationConfig":{"$ref":"#/types/aws-native:events:EndpointReplicationConfig","description":"Whether event replication was enabled or disabled for this endpoint. The default state is `ENABLED` which means you must supply a `RoleArn` . If you don't have a `RoleArn` or you don't want event replication enabled, set the state to `DISABLED` ."},"roleArn":{"description":"The ARN of the role used by event replication for the endpoint.","type":"string"},"routingConfig":{"$ref":"#/types/aws-native:events:EndpointRoutingConfig","description":"The routing configuration of the endpoint."},"state":{"$ref":"#/types/aws-native:events:EndpointState","description":"The main Region of the endpoint."},"stateReason":{"description":"The reason the endpoint is in its current state.","type":"string"}}}},"aws-native:events:getEventBus":{"description":"Resource type definition for AWS::Events::EventBus","inputs":{"properties":{"name":{"type":"string","description":"The name of the event bus."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the event bus.","type":"string"},"deadLetterConfig":{"$ref":"#/types/aws-native:events:DeadLetterConfigProperties","description":"Dead Letter Queue for the event bus."},"description":{"description":"The description of the event bus.","type":"string"},"kmsKeyIdentifier":{"description":"Kms Key Identifier used to encrypt events at rest in the event bus.","type":"string"},"logConfig":{"$ref":"#/types/aws-native:events:LogConfigProperties","description":"The logging configuration settings for vended logs."},"policy":{"$ref":"pulumi.json#/Any","description":"A JSON string that describes the permission policy statement for the event bus.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::EventBus` for more information about the expected schema for this property."},"tags":{"description":"Any tags assigned to the event bus.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:events:getEventBusPolicy":{"description":"Resource Type definition for AWS::Events::EventBusPolicy","inputs":{"properties":{"eventBusName":{"type":"string","description":"The name of the event bus associated with the rule. If you omit this, the default event bus is used."},"statementId":{"type":"string","description":"An identifier string for the external account that you are granting permissions to"}},"required":["eventBusName","statementId"]},"outputs":{"properties":{"statement":{"$ref":"pulumi.json#/Any","description":"A JSON string that describes the permission policy statement. You can include a Policy parameter in the request instead of using the StatementId, Action, Principal, or Condition parameters.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::EventBusPolicy` for more information about the expected schema for this property."}}}},"aws-native:events:getRule":{"description":"Resource Type definition for AWS::Events::Rule","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the rule, such as arn:aws:events:us-east-2:123456789012:rule/example."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the rule, such as arn:aws:events:us-east-2:123456789012:rule/example.","type":"string"},"description":{"description":"The description of the rule.","type":"string"},"eventBusName":{"description":"The name or ARN of the event bus associated with the rule. If you omit this, the default event bus is used.","type":"string"},"eventPattern":{"$ref":"pulumi.json#/Any","description":"The event pattern of the rule. For more information, see Events and Event Patterns in the Amazon EventBridge User Guide.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Events::Rule` for more information about the expected schema for this property."},"roleArn":{"description":"The Amazon Resource Name (ARN) of the role that is used for target invocation.","type":"string"},"scheduleExpression":{"description":"The scheduling expression. For example, \"cron(0 20 * * ? *)\", \"rate(5 minutes)\". For more information, see Creating an Amazon EventBridge rule that runs on a schedule.","type":"string"},"state":{"$ref":"#/types/aws-native:events:RuleState","description":"The state of the rule."},"tags":{"description":"Any tags assigned to the event rule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targets":{"description":"Adds the specified targets to the specified rule, or updates the targets if they are already associated with the rule.\nTargets are the resources that are invoked when a rule is triggered.","items":{"$ref":"#/types/aws-native:events:RuleTarget"},"type":"array"}}}},"aws-native:eventschemas:getDiscoverer":{"description":"Resource Type definition for AWS::EventSchemas::Discoverer","inputs":{"properties":{"discovererArn":{"type":"string","description":"The ARN of the discoverer."}},"required":["discovererArn"]},"outputs":{"properties":{"crossAccount":{"description":"Defines whether event schemas from other accounts are discovered. Default is True.","type":"boolean"},"description":{"description":"A description for the discoverer.","type":"string"},"discovererArn":{"description":"The ARN of the discoverer.","type":"string"},"discovererId":{"description":"The Id of the discoverer.","type":"string"},"state":{"description":"Defines the current state of the discoverer.","type":"string"},"tags":{"description":"Tags associated with the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:eventschemas:getRegistry":{"description":"Resource Type definition for AWS::EventSchemas::Registry","inputs":{"properties":{"registryArn":{"type":"string","description":"The ARN of the registry."}},"required":["registryArn"]},"outputs":{"properties":{"description":{"description":"A description of the registry to be created.","type":"string"},"registryArn":{"description":"The ARN of the registry.","type":"string"},"tags":{"description":"Tags associated with the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:eventschemas:getRegistryPolicy":{"description":"Resource Type definition for AWS::EventSchemas::RegistryPolicy","inputs":{"properties":{"id":{"type":"string","description":"The ID of the policy."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The ID of the policy.","type":"string"},"policy":{"$ref":"pulumi.json#/Any","description":"A resource-based policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::EventSchemas::RegistryPolicy` for more information about the expected schema for this property."},"registryName":{"description":"The name of the registry.","type":"string"},"revisionId":{"description":"The revision ID of the policy.","type":"string"}}}},"aws-native:eventschemas:getSchema":{"description":"Resource Type definition for AWS::EventSchemas::Schema","inputs":{"properties":{"schemaArn":{"type":"string","description":"The ARN of the schema."}},"required":["schemaArn"]},"outputs":{"properties":{"content":{"description":"The source of the schema definition.","type":"string"},"description":{"description":"A description of the schema.","type":"string"},"lastModified":{"description":"The last modified time of the schema.","type":"string"},"schemaArn":{"description":"The ARN of the schema.","type":"string"},"schemaVersion":{"description":"The version number of the schema.","type":"string"},"tags":{"description":"Tags associated with the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"description":"The type of schema. Valid types include OpenApi3 and JSONSchemaDraft4.","type":"string"},"versionCreatedDate":{"description":"The date the schema version was created.","type":"string"}}}},"aws-native:evidently:getExperiment":{"description":"Resource Type definition for AWS::Evidently::Experiment.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the experiment. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/experiment/myExperiment`"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the experiment. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/experiment/myExperiment`","type":"string"},"description":{"description":"An optional description of the experiment.","type":"string"},"metricGoals":{"description":"An array of structures that defines the metrics used for the experiment, and whether a higher or lower value for each metric is the goal. You can use up to three metrics in an experiment.","items":{"$ref":"#/types/aws-native:evidently:ExperimentMetricGoalObject"},"type":"array"},"onlineAbConfig":{"$ref":"#/types/aws-native:evidently:ExperimentOnlineAbConfigObject","description":"A structure that contains the configuration of which variation to use as the \"control\" version. The \"control\" version is used for comparison with other variations. This structure also specifies how much experiment traffic is allocated to each variation."},"randomizationSalt":{"description":"When Evidently assigns a particular user session to an experiment, it must use a randomization ID to determine which variation the user session is served. This randomization ID is a combination of the entity ID and `randomizationSalt` . If you omit `randomizationSalt` , Evidently uses the experiment name as the `randomizationSalt` .","type":"string"},"removeSegment":{"description":"Set this to `true` to remove the segment that is associated with this experiment. You can't use this parameter if the experiment is currently running.","type":"boolean"},"runningStatus":{"$ref":"#/types/aws-native:evidently:ExperimentRunningStatusObject","description":"Start Experiment. Default is False"},"samplingRate":{"description":"The portion of the available audience that you want to allocate to this experiment, in thousandths of a percent. The available audience is the total audience minus the audience that you have allocated to overrides or current launches of this feature.\n\nThis is represented in thousandths of a percent. For example, specify 10,000 to allocate 10% of the available audience.","type":"integer"},"segment":{"description":"Specifies an audience *segment* to use in the experiment. When a segment is used in an experiment, only user sessions that match the segment pattern are used in the experiment.\n\nFor more information, see [Segment rule pattern syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html#CloudWatch-Evidently-segments-syntax) .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"treatments":{"description":"An array of structures that describe the configuration of each feature variation used in the experiment.","items":{"$ref":"#/types/aws-native:evidently:ExperimentTreatmentObject"},"type":"array"}}}},"aws-native:evidently:getFeature":{"description":"Resource Type definition for AWS::Evidently::Feature.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the feature. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/feature/myFeature` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the feature. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/feature/myFeature` .","type":"string"},"defaultVariation":{"description":"The name of the variation to use as the default variation. The default variation is served to users who are not allocated to any ongoing launches or experiments of this feature.\n\nThis variation must also be listed in the `Variations` structure.\n\nIf you omit `DefaultVariation` , the first variation listed in the `Variations` structure is used as the default variation.","type":"string"},"description":{"description":"An optional description of the feature.","type":"string"},"entityOverrides":{"description":"Specify users that should always be served a specific variation of a feature. Each user is specified by a key-value pair . For each key, specify a user by entering their user ID, account ID, or some other identifier. For the value, specify the name of the variation that they are to be served.","items":{"$ref":"#/types/aws-native:evidently:FeatureEntityOverride"},"type":"array"},"evaluationStrategy":{"$ref":"#/types/aws-native:evidently:FeatureEvaluationStrategy","description":"Specify `ALL_RULES` to activate the traffic allocation specified by any ongoing launches or experiments. Specify `DEFAULT_VARIATION` to serve the default variation to all users instead."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"variations":{"description":"An array of structures that contain the configuration of the feature's different variations.\n\nEach `VariationObject` in the `Variations` array for a feature must have the same type of value ( `BooleanValue` , `DoubleValue` , `LongValue` or `StringValue` ).","items":{"$ref":"#/types/aws-native:evidently:FeatureVariationObject"},"type":"array"}}}},"aws-native:evidently:getLaunch":{"description":"Resource Type definition for AWS::Evidently::Launch.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the launch. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/launch/myLaunch`"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the launch. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject/launch/myLaunch`","type":"string"},"description":{"description":"An optional description for the launch.","type":"string"},"executionStatus":{"$ref":"#/types/aws-native:evidently:LaunchExecutionStatusObject","description":"Start or Stop Launch Launch. Default is not started."},"groups":{"description":"An array of structures that contains the feature and variations that are to be used for the launch. You can up to five launch groups in a launch.","items":{"$ref":"#/types/aws-native:evidently:LaunchGroupObject"},"type":"array"},"metricMonitors":{"description":"An array of structures that define the metrics that will be used to monitor the launch performance. You can have up to three metric monitors in the array.","items":{"$ref":"#/types/aws-native:evidently:LaunchMetricDefinitionObject"},"type":"array"},"randomizationSalt":{"description":"When Evidently assigns a particular user session to a launch, it must use a randomization ID to determine which variation the user session is served. This randomization ID is a combination of the entity ID and `randomizationSalt` . If you omit `randomizationSalt` , Evidently uses the launch name as the `randomizationsSalt` .","type":"string"},"scheduledSplitsConfig":{"description":"An array of structures that define the traffic allocation percentages among the feature variations during each step of the launch.","items":{"$ref":"#/types/aws-native:evidently:LaunchStepConfig"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:evidently:getProject":{"description":"Resource Type definition for AWS::Evidently::Project","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the project. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject`"}},"required":["arn"]},"outputs":{"properties":{"appConfigResource":{"$ref":"#/types/aws-native:evidently:ProjectAppConfigResourceObject","description":"Use this parameter if the project will use *client-side evaluation powered by AWS AppConfig* . Client-side evaluation allows your application to assign variations to user sessions locally instead of by calling the [EvaluateFeature](https://docs.aws.amazon.com/cloudwatchevidently/latest/APIReference/API_EvaluateFeature.html) operation. This mitigates the latency and availability risks that come with an API call. For more information, see [Use client-side evaluation - powered by AWS AppConfig .](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-client-side-evaluation.html)\n\nThis parameter is a structure that contains information about the AWS AppConfig application that will be used as for client-side evaluation.\n\nTo create a project that uses client-side evaluation, you must have the `evidently:ExportProjectAsConfiguration` permission."},"arn":{"description":"The ARN of the project. For example, `arn:aws:evidently:us-west-2:0123455678912:project/myProject`","type":"string"},"dataDelivery":{"$ref":"#/types/aws-native:evidently:ProjectDataDeliveryObject","description":"A structure that contains information about where Evidently is to store evaluation events for longer term storage, if you choose to do so. If you choose not to store these events, Evidently deletes them after using them to produce metrics and other experiment results that you can view.\n\nYou can't specify both `CloudWatchLogs` and `S3Destination` in the same operation."},"description":{"description":"An optional description of the project.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:evidently:getSegment":{"description":"Resource Type definition for AWS::Evidently::Segment","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the segment. For example, `arn:aws:evidently:us-west-2:123456789012:segment/australiaSegment`"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the segment. For example, `arn:aws:evidently:us-west-2:123456789012:segment/australiaSegment`","type":"string"},"description":{"description":"An optional description for this segment.","type":"string"},"name":{"description":"A name for the segment.","type":"string"},"pattern":{"description":"The pattern to use for the segment. For more information about pattern syntax, see [Segment rule pattern syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Evidently-segments.html#CloudWatch-Evidently-segments-syntax) .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:evs:getEnvironment":{"description":"An environment created within the EVS service","inputs":{"properties":{"environmentId":{"type":"string","description":"The unique ID for the environment. For example: `env-1234567890` ."}},"required":["environmentId"]},"outputs":{"properties":{"checks":{"description":"A check on the environment to identify instance health and VMware VCF licensing issues. For example:\n\n`{ \"checks\": [ { \"type\": \"KEY_REUSE\", \"result\": \"PASSED\" }, { \"type\": \"KEY_COVERAGE\", \"result\": \"PASSED\" }, { \"type\": \"REACHABILITY\", \"result\": \"PASSED\" }, { \"type\": \"HOST_COUNT\", \"result\": \"PASSED\" } ] }`","items":{"$ref":"#/types/aws-native:evs:EnvironmentCheck"},"type":"array"},"createdAt":{"description":"The date and time that the environment was created. For example: `1749081600.000` .","type":"string"},"credentials":{"description":"The VCF credentials that are stored as Amazon EVS managed secrets in AWS Secrets Manager. Amazon EVS stores credentials that are needed to install vCenter Server, NSX, and SDDC Manager. For example:\n\n`{ [ { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_vCenterAdmin-MnTMEi\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_vCenterRoot-87VyCF\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_NSXRoot-SR3k43\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_NSXAdmin-L5LUiD\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_NSXAudit-Q2oW46\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_SDDCManagerRoot-bFulOq\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_SDDCManagerVCF-Ec3gES\" }, { \"secretArn\": \"arn:aws:secretsmanager:us-east-1:000000000000:secret:evs!env-1234567890_SDDCManagerAdmin-JMTAAb\" } ] }`","items":{"$ref":"#/types/aws-native:evs:EnvironmentSecret"},"type":"array"},"environmentArn":{"description":"The Amazon Resource Name (ARN) that is associated with the environment. For example: `arn:aws:evs:us-east-1:000000000000:environment/env-1234567890` .","type":"string"},"environmentId":{"description":"The unique ID for the environment. For example: `env-1234567890` .","type":"string"},"environmentState":{"$ref":"#/types/aws-native:evs:EnvironmentState","description":"The state of an environment. For example: `CREATED` ."},"modifiedAt":{"description":"The date and time that the environment was modified. For example: `1749081600.000` .","type":"string"},"stateDetails":{"description":"A detailed description of the `environmentState` of an environment. For example: `Environment successfully created` .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:finspace:getEnvironment":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"environmentId":{"type":"string","description":"Unique identifier for representing FinSpace Environment"}},"required":["environmentId"]},"outputs":{"properties":{"awsAccountId":{"description":"AWS account ID associated with the Environment","type":"string"},"dedicatedServiceAccountId":{"description":"ID for FinSpace created account used to store Environment artifacts","type":"string"},"description":{"description":"Description of the Environment","type":"string"},"environmentArn":{"description":"ARN of the Environment","type":"string"},"environmentId":{"description":"Unique identifier for representing FinSpace Environment","type":"string"},"environmentUrl":{"description":"URL used to login to the Environment","type":"string"},"federationMode":{"$ref":"#/types/aws-native:finspace:EnvironmentFederationMode","description":"Federation mode used with the Environment"},"name":{"description":"Name of the Environment","type":"string"},"sageMakerStudioDomainUrl":{"description":"SageMaker Studio Domain URL associated with the Environment","type":"string"},"status":{"$ref":"#/types/aws-native:finspace:EnvironmentStatus","description":"State of the Environment"}}}},"aws-native:fis:getExperimentTemplate":{"description":"Resource schema for AWS::FIS::ExperimentTemplate","inputs":{"properties":{"id":{"type":"string","description":"The ID of the experiment template."}},"required":["id"]},"outputs":{"properties":{"actions":{"additionalProperties":{"$ref":"#/types/aws-native:fis:ExperimentTemplateAction"},"description":"The actions for the experiment.","type":"object"},"description":{"description":"The description for the experiment template.","type":"string"},"experimentOptions":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentOptions","description":"The experiment options for an experiment template."},"experimentReportConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateExperimentReportConfiguration","description":"Describes the report configuration for the experiment template."},"id":{"description":"The ID of the experiment template.","type":"string"},"logConfiguration":{"$ref":"#/types/aws-native:fis:ExperimentTemplateLogConfiguration","description":"The configuration for experiment logging."},"roleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role.","type":"string"},"stopConditions":{"description":"The stop conditions for the experiment.","items":{"$ref":"#/types/aws-native:fis:ExperimentTemplateStopCondition"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags for the experiment template.","type":"object"},"targets":{"additionalProperties":{"$ref":"#/types/aws-native:fis:ExperimentTemplateTarget"},"description":"The targets for the experiment.","type":"object"}}}},"aws-native:fis:getTargetAccountConfiguration":{"description":"Resource schema for AWS::FIS::TargetAccountConfiguration","inputs":{"properties":{"accountId":{"type":"string","description":"The AWS account ID of the target account."},"experimentTemplateId":{"type":"string","description":"The ID of the experiment template."}},"required":["experimentTemplateId","accountId"]},"outputs":{"properties":{"description":{"description":"The description of the target account.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role for the target account.","type":"string"}}}},"aws-native:fms:getNotificationChannel":{"description":"Designates the IAM role and Amazon Simple Notification Service (SNS) topic that AWS Firewall Manager uses to record SNS logs.","inputs":{"properties":{"snsTopicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the SNS topic that collects notifications from AWS Firewall Manager ."}},"required":["snsTopicArn"]},"outputs":{"properties":{"snsRoleName":{"description":"The Amazon Resource Name (ARN) of the IAM role that allows Amazon  to record AWS Firewall Manager activity.","type":"string"}}}},"aws-native:fms:getPolicy":{"description":"Creates an AWS Firewall Manager policy.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the policy."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the policy.","type":"string"},"excludeMap":{"$ref":"#/types/aws-native:fms:PolicyIeMap","description":"Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to exclude from the policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.\n\nYou can specify inclusions or exclusions, but not both. If you specify an `IncludeMap` , AWS Firewall Manager applies the policy to all accounts specified by the `IncludeMap` , and does not evaluate any `ExcludeMap` specifications. If you do not specify an `IncludeMap` , then Firewall Manager applies the policy to all accounts except for those specified by the `ExcludeMap` .\n\nYou can specify account IDs, OUs, or a combination:\n\n- Specify account IDs by setting the key to `ACCOUNT` . For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"]}` .\n- Specify OUs by setting the key to `ORGUNIT` . For example, the following is a valid map: `{\"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` .\n- Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"], \"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` ."},"excludeResourceTags":{"description":"Used only when tags are specified in the `ResourceTags` property. If this property is `True` , resources with the specified tags are not in scope of the policy. If it's `False` , only resources with the specified tags are in scope of the policy.","type":"boolean"},"id":{"description":"The ID of the policy.","type":"string"},"includeMap":{"$ref":"#/types/aws-native:fms:PolicyIeMap","description":"Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to include in the policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.\n\nYou can specify inclusions or exclusions, but not both. If you specify an `IncludeMap` , AWS Firewall Manager applies the policy to all accounts specified by the `IncludeMap` , and does not evaluate any `ExcludeMap` specifications. If you do not specify an `IncludeMap` , then Firewall Manager applies the policy to all accounts except for those specified by the `ExcludeMap` .\n\nYou can specify account IDs, OUs, or a combination:\n\n- Specify account IDs by setting the key to `ACCOUNT` . For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"]}` .\n- Specify OUs by setting the key to `ORGUNIT` . For example, the following is a valid map: `{\"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` .\n- Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: `{\"ACCOUNT\" : [\"accountID1\", \"accountID2\"], \"ORGUNIT\" : [\"ouid111\", \"ouid112\"]}` ."},"policyDescription":{"description":"Your description of the AWS Firewall Manager policy.","type":"string"},"policyName":{"description":"The name of the AWS Firewall Manager policy.","type":"string"},"remediationEnabled":{"description":"Indicates if the policy should be automatically applied to new resources.","type":"boolean"},"resourceSetIds":{"description":"The unique identifiers of the resource sets used by the policy.","items":{"type":"string"},"type":"array"},"resourceTagLogicalOperator":{"$ref":"#/types/aws-native:fms:PolicyResourceTagLogicalOperator","description":"Specifies whether to combine multiple resource tags with AND, so that a resource must have all tags to be included or excluded, or OR, so that a resource must have at least one tag.\n\nDefault: `AND`"},"resourceTags":{"description":"An array of `ResourceTag` objects, used to explicitly include resources in the policy scope or explicitly exclude them. If this isn't set, then tags aren't used to modify policy scope. See also `ExcludeResourceTags` .","items":{"$ref":"#/types/aws-native:fms:PolicyResourceTag"},"type":"array"},"resourceType":{"description":"The type of resource protected by or in scope of the policy. This is in the format shown in the [AWS Resource Types Reference](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html) . To apply this policy to multiple resource types, specify a resource type of `ResourceTypeList` and then specify the resource types in a `ResourceTypeList` .\n\nThe following are valid resource types for each Firewall Manager policy type:\n\n- AWS WAF Classic - `AWS::ApiGateway::Stage` , `AWS::CloudFront::Distribution` , and `AWS::ElasticLoadBalancingV2::LoadBalancer` .\n- AWS WAF - `AWS::ApiGateway::Stage` , `AWS::ElasticLoadBalancingV2::LoadBalancer` , and `AWS::CloudFront::Distribution` .\n- Shield Advanced - `AWS::ElasticLoadBalancingV2::LoadBalancer` , `AWS::ElasticLoadBalancing::LoadBalancer` , `AWS::EC2::EIP` , and `AWS::CloudFront::Distribution` .\n- Network ACL - `AWS::EC2::Subnet` .\n- Security group usage audit - `AWS::EC2::SecurityGroup` .\n- Security group content audit - `AWS::EC2::SecurityGroup` , `AWS::EC2::NetworkInterface` , and `AWS::EC2::Instance` .\n- DNS Firewall, AWS Network Firewall , and third-party firewall - `AWS::EC2::VPC` .","type":"string"},"resourceTypeList":{"description":"An array of `ResourceType` objects. Use this only to specify multiple resource types. To specify a single resource type, use `ResourceType` .","items":{"type":"string"},"type":"array"},"resourcesCleanUp":{"description":"Indicates whether AWS Firewall Manager should automatically remove protections from resources that leave the policy scope and clean up resources that Firewall Manager is managing for accounts when those accounts leave policy scope. For example, Firewall Manager will disassociate a Firewall Manager managed web ACL from a protected customer resource when the customer resource leaves policy scope.\n\nBy default, Firewall Manager doesn't remove protections or delete Firewall Manager managed resources.\n\nThis option is not available for Shield Advanced or AWS WAF Classic policies.","type":"boolean"},"securityServicePolicyData":{"$ref":"#/types/aws-native:fms:PolicySecurityServicePolicyData","description":"Details about the security service that is being used to protect the resources.\n\nThis contains the following settings:\n\n- Type - Indicates the service type that the policy uses to protect the resource. For security group policies, Firewall Manager supports one security group for each common policy and for each content audit policy. This is an adjustable limit that you can increase by contacting  .\n\nValid values: `DNS_FIREWALL` | `NETWORK_FIREWALL` | `SECURITY_GROUPS_COMMON` | `SECURITY_GROUPS_CONTENT_AUDIT` | `SECURITY_GROUPS_USAGE_AUDIT` | `SHIELD_ADVANCED` | `THIRD_PARTY_FIREWALL` | `WAFV2` | `WAF`\n- ManagedServiceData - Details about the service that are specific to the service type, in JSON format.\n\n- Example: `DNS_FIREWALL`\n\n`\"{\\\"type\\\":\\\"DNS_FIREWALL\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-1\\\",\\\"priority\\\":10}],\\\"postProcessRuleGroups\\\":[{\\\"ruleGroupId\\\":\\\"rslvr-frg-2\\\",\\\"priority\\\":9911}]}\"`\n\n\u003e Valid values for `preProcessRuleGroups` are between 1 and 99. Valid values for `postProcessRuleGroups` are between 9901 and 10000.\n- Example: `NETWORK_FIREWALL` - Centralized deployment model\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"awsNetworkFirewallConfig\\\":{\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}},\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"OFF\\\"},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nWith automatic Availbility Zone configuration, Firewall Manager chooses which Availability Zones to create the endpoints in. To use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with automatic Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\",\\\"192.168.0.0/28\\\"],\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"]},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\": \\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":true}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\", \\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{ \\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[ \\\"10.0.0.0/28\\\"]}]} },\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"OFF\\\",\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nWith custom Availability Zone configuration, you define which specific Availability Zones to create endpoints in by configuring `firewallCreationConfig` . To configure the Availability Zones in `firewallCreationConfig` , specify either the `availabilityZoneName` or `availabilityZoneId` parameter, not both parameters.\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `NETWORK_FIREWALL` - Distributed deployment model with custom Availability Zone configuration and route management\n\n`\"{\\\"type\\\":\\\"NETWORK_FIREWALL\\\",\\\"networkFirewallStatelessRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\\\",\\\"priority\\\":1}],\\\"networkFirewallStatelessDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"customActionName\\\"],\\\"networkFirewallStatelessFragmentDefaultActions\\\":[\\\"aws:forward_to_sfe\\\",\\\"fragmentcustomactionname\\\"],\\\"networkFirewallStatelessCustomActions\\\":[{\\\"actionName\\\":\\\"customActionName\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"metricdimensionvalue\\\"}]}}},{\\\"actionName\\\":\\\"fragmentcustomactionname\\\",\\\"actionDefinition\\\":{\\\"publishMetricAction\\\":{\\\"dimensions\\\":[{\\\"value\\\":\\\"fragmentmetricdimensionvalue\\\"}]}}}],\\\"networkFirewallStatefulRuleGroupReferences\\\":[{\\\"resourceARN\\\":\\\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\\\"}],\\\"networkFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]},{\\\"availabilityZoneName\\\":\\\"us-east-1b\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"singleFirewallEndpointPerVPC\\\":false,\\\"allowedIPV4CidrList\\\":null,\\\"routeManagementAction\\\":\\\"MONITOR\\\",\\\"routeManagementTargetTypes\\\":[\\\"InternetGateway\\\"],\\\"routeManagementConfig\\\":{\\\"allowCrossAZTrafficIfNoEndpoint\\\":true}},\\\"networkFirewallLoggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"ALERT\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}},{\\\"logDestinationType\\\":\\\"S3\\\",\\\"logType\\\":\\\"FLOW\\\",\\\"logDestination\\\":{\\\"bucketName\\\":\\\"s3-bucket-name\\\"}}],\\\"overrideExistingConfig\\\":boolean}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkfirewallpolicy.html) to `DISTRIBUTED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall centralized deployment model\n\n`\"{ \\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\", \\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\", \\\"thirdPartyFirewallConfig\\\":{ \\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{\\\"centralizedFirewallDeploymentModel\\\":{\\\"centralizedFirewallOrchestrationConfig\\\":{\\\"inspectionVpcIds\\\":[{\\\"resourceId\\\":\\\"vpc-1234\\\",\\\"accountId\\\":\\\"123456789011\\\"}],\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{\\\"availabilityZoneConfigList\\\":[{\\\"availabilityZoneId\\\":null,\\\"availabilityZoneName\\\":\\\"us-east-1a\\\",\\\"allowedIPV4CidrList\\\":[\\\"10.0.0.0/28\\\"]}]}},\\\"allowedIPV4CidrList\\\":[]}}}}\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `CENTRALIZED` .\n- Example: `THIRD_PARTY_FIREWALL` - Palo Alto Networks Cloud Next-Generation Firewall distributed deployment model\n\n`\"{\\\"type\\\":\\\"THIRD_PARTY_FIREWALL\\\",\\\"thirdPartyFirewall\\\":\\\"PALO_ALTO_NETWORKS_CLOUD_NGFW\\\",\\\"thirdPartyFirewallConfig\\\":{\\\"thirdPartyFirewallPolicyList\\\":[\\\"global-1\\\"] },\\\"firewallDeploymentModel\\\":{ \\\"distributedFirewallDeploymentModel\\\":{ \\\"distributedFirewallOrchestrationConfig\\\":{\\\"firewallCreationConfig\\\":{\\\"endpointLocation\\\":{ \\\"availabilityZoneConfigList\\\":[ {\\\"availabilityZoneName\\\":\\\"${AvailabilityZone}\\\" } ] } }, \\\"allowedIPV4CidrList\\\":[ ] } } } }\"`\n\nTo use the distributed deployment model, you must set [FirewallDeploymentModel](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-thirdpartyfirewallpolicy.html) to `DISTRIBUTED` .\n- Specification for `SHIELD_ADVANCED` for Amazon CloudFront distributions\n\n`\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED|IGNORED|DISABLED\\\", \\\"automaticResponseAction\\\":\\\"BLOCK|COUNT\\\"}, \\\"overrideCustomerWebaclClassic\\\":true|false}\"`\n\nFor example: `\"{\\\"type\\\":\\\"SHIELD_ADVANCED\\\",\\\"automaticResponseConfiguration\\\": {\\\"automaticResponseStatus\\\":\\\"ENABLED\\\", \\\"automaticResponseAction\\\":\\\"COUNT\\\"}}\"`\n\nThe default value for `automaticResponseStatus` is `IGNORED` . The value for `automaticResponseAction` is only required when `automaticResponseStatus` is set to `ENABLED` . The default value for `overrideCustomerWebaclClassic` is `false` .\n\nFor other resource types that you can protect with a Shield Advanced policy, this `ManagedServiceData` configuration is an empty string.\n- Example: `WAFV2`\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"version\\\":null,\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesAmazonIpReputationList\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nIn the `loggingConfiguration` , you can specify one `logDestinationConfigs` , you can optionally provide up to 20 `redactedFields` , and the `RedactedFieldType` must be one of `URI` , `QUERY_STRING` , `HEADER` , or `METHOD` .\n- Example: `AWS WAF Classic`\n\n`\"{\\\"type\\\": \\\"WAF\\\", \\\"ruleGroups\\\": [{\\\"id\\\":\\\"12345678-1bcd-9012-efga-0987654321ab\\\", \\\"overrideAction\\\" : {\\\"type\\\": \\\"COUNT\\\"}}], \\\"defaultAction\\\": {\\\"type\\\": \\\"BLOCK\\\"}}\"`\n- Example: `WAFV2` - AWS Firewall Manager support for AWS WAF managed rule group versioning\n\n`\"{\\\"type\\\":\\\"WAFV2\\\",\\\"preProcessRuleGroups\\\":[{\\\"ruleGroupArn\\\":null,\\\"overrideAction\\\":{\\\"type\\\":\\\"NONE\\\"},\\\"managedRuleGroupIdentifier\\\":{\\\"versionEnabled\\\":true,\\\"version\\\":\\\"Version_2.0\\\",\\\"vendorName\\\":\\\"AWS\\\",\\\"managedRuleGroupName\\\":\\\"AWSManagedRulesCommonRuleSet\\\"},\\\"ruleGroupType\\\":\\\"ManagedRuleGroup\\\",\\\"excludeRules\\\":[{\\\"name\\\":\\\"NoUserAgent_HEADER\\\"}]}],\\\"postProcessRuleGroups\\\":[],\\\"defaultAction\\\":{\\\"type\\\":\\\"ALLOW\\\"},\\\"overrideCustomerWebACLAssociation\\\":false,\\\"loggingConfiguration\\\":{\\\"logDestinationConfigs\\\":[\\\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\\\"],\\\"redactedFields\\\":[{\\\"redactedFieldType\\\":\\\"SingleHeader\\\",\\\"redactedFieldValue\\\":\\\"Cookies\\\"},{\\\"redactedFieldType\\\":\\\"Method\\\"}]}}\"`\n\nTo use a specific version of a AWS WAF managed rule group in your Firewall Manager policy, you must set `versionEnabled` to `true` , and set `version` to the version you'd like to use. If you don't set `versionEnabled` to `true` , or if you omit `versionEnabled` , then Firewall Manager uses the default version of the AWS WAF managed rule group.\n- Example: `SECURITY_GROUPS_COMMON`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: Shared VPCs. Apply the preceding policy to resources in shared VPCs as well as to those in VPCs that the account owns\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_COMMON\\\",\\\"revertManualSecurityGroupChanges\\\":false,\\\"exclusiveResourceSecurityGroupManagement\\\":false, \\\"applyToAllEC2InstanceENIs\\\":false,\\\"includeSharedVPC\\\":true,\\\"securityGroups\\\":[{\\\"id\\\":\\\" sg-000e55995d61a06bd\\\"}]}\"`\n- Example: `SECURITY_GROUPS_CONTENT_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_CONTENT_AUDIT\\\",\\\"securityGroups\\\":[{\\\"id\\\":\\\"sg-000e55995d61a06bd\\\"}],\\\"securityGroupAction\\\":{\\\"type\\\":\\\"ALLOW\\\"}}\"`\n\nThe security group action for content audit can be `ALLOW` or `DENY` . For `ALLOW` , all in-scope security group rules must be within the allowed range of the policy's security group rules. For `DENY` , all in-scope security group rules must not contain a value or a range that matches a rule value or range in the policy security group.\n- Example: `SECURITY_GROUPS_USAGE_AUDIT`\n\n`\"{\\\"type\\\":\\\"SECURITY_GROUPS_USAGE_AUDIT\\\",\\\"deleteUnusedSecurityGroups\\\":true,\\\"coalesceRedundantSecurityGroups\\\":true}\"`"},"tags":{"description":"A collection of key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:fms:getResourceSet":{"description":"Creates an AWS Firewall Manager resource set.","inputs":{"properties":{"id":{"type":"string","description":"A unique identifier for the resource set. This ID is returned in the responses to create and list commands. You provide it to operations like update and delete."}},"required":["id"]},"outputs":{"properties":{"description":{"description":"A description of the resource set.","type":"string"},"id":{"description":"A unique identifier for the resource set. This ID is returned in the responses to create and list commands. You provide it to operations like update and delete.","type":"string"},"name":{"description":"The descriptive name of the resource set. You can't change the name of a resource set after you create it.","type":"string"},"resourceTypeList":{"description":"Determines the resources that can be associated to the resource set. Depending on your setting for max results and the number of resource sets, a single call might not return the full list.","items":{"type":"string"},"type":"array"},"resources":{"items":{"type":"string"},"type":"array"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:forecast:getDataset":{"description":"Resource Type Definition for AWS::Forecast::Dataset","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the dataset.","type":"string"},"dataFrequency":{"description":"Frequency of data collection. This parameter is required for RELATED_TIME_SERIES","type":"string"},"datasetType":{"$ref":"#/types/aws-native:forecast:DatasetType","description":"The dataset type"},"domain":{"$ref":"#/types/aws-native:forecast:DatasetDomain","description":"The domain associated with the dataset"},"encryptionConfig":{"$ref":"#/types/aws-native:forecast:EncryptionConfigProperties","description":"A Key Management Service (KMS) key and the Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key."},"schema":{"$ref":"#/types/aws-native:forecast:SchemaProperties","description":"The schema for the dataset. The schema attributes and their order must match the fields in your data. The dataset `Domain` and `DatasetType` that you choose determine the minimum required fields in your training data. For information about the required fields for a specific dataset domain and type, see [Dataset Domains and Dataset Types](https://docs.aws.amazon.com/forecast/latest/dg/howitworks-domains-ds-types.html) ."},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:forecast:getDatasetGroup":{"description":"Represents a dataset group that holds a collection of related datasets","inputs":{"properties":{"datasetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset group to delete."}},"required":["datasetGroupArn"]},"outputs":{"properties":{"datasetArns":{"description":"An array of Amazon Resource Names (ARNs) of the datasets that you want to include in the dataset group.","items":{"type":"string"},"type":"array"},"datasetGroupArn":{"description":"The Amazon Resource Name (ARN) of the dataset group to delete.","type":"string"},"domain":{"$ref":"#/types/aws-native:forecast:DatasetGroupDomain","description":"The domain associated with the dataset group. When you add a dataset to a dataset group, this value and the value specified for the Domain parameter of the CreateDataset operation must match."},"tags":{"description":"The tags of Application Insights application.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:frauddetector:getDetector":{"description":"A resource schema for a Detector in Amazon Fraud Detector.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the detector."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the detector.","type":"string"},"associatedModels":{"description":"The models to associate with this detector.","items":{"$ref":"#/types/aws-native:frauddetector:DetectorModel"},"type":"array"},"createdTime":{"description":"The time when the detector was created.","type":"string"},"description":{"description":"The description of the detector.","type":"string"},"detectorVersionId":{"description":"The active version ID of the detector","type":"string"},"detectorVersionStatus":{"$ref":"#/types/aws-native:frauddetector:DetectorVersionStatus","description":"The desired detector version status for the detector"},"eventType":{"$ref":"#/types/aws-native:frauddetector:DetectorEventType","description":"The event type to associate this detector with."},"lastUpdatedTime":{"description":"The time when the detector was last updated.","type":"string"},"ruleExecutionMode":{"$ref":"#/types/aws-native:frauddetector:DetectorRuleExecutionMode","description":"The rule execution mode for the rules included in the detector version.\n\nValid values: `FIRST_MATCHED | ALL_MATCHED` Default value: `FIRST_MATCHED`\n\nYou can define and edit the rule mode at the detector version level, when it is in draft status.\n\nIf you specify `FIRST_MATCHED` , Amazon Fraud Detector evaluates rules sequentially, first to last, stopping at the first matched rule. Amazon Fraud dectector then provides the outcomes for that single rule.\n\nIf you specifiy `ALL_MATCHED` , Amazon Fraud Detector evaluates all rules and returns the outcomes for all matched rules."},"rules":{"description":"The rules to include in the detector version.","items":{"$ref":"#/types/aws-native:frauddetector:DetectorRule"},"type":"array"},"tags":{"description":"Tags associated with this detector.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:frauddetector:getEntityType":{"description":"An entity type for fraud detector.","inputs":{"properties":{"arn":{"type":"string","description":"The entity type ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The entity type ARN.","type":"string"},"createdTime":{"description":"The timestamp when the entity type was created.","type":"string"},"description":{"description":"The entity type description.","type":"string"},"lastUpdatedTime":{"description":"The timestamp when the entity type was last updated.","type":"string"},"tags":{"description":"Tags associated with this entity type.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:frauddetector:getEventType":{"description":"A resource schema for an EventType in Amazon Fraud Detector.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the event type."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the event type.","type":"string"},"createdTime":{"description":"The time when the event type was created.","type":"string"},"description":{"description":"The description of the event type.","type":"string"},"entityTypes":{"description":"The event type entity types.","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeEntityType"},"type":"array"},"eventVariables":{"description":"The event type event variables.","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeEventVariable"},"type":"array"},"labels":{"description":"The event type labels.","items":{"$ref":"#/types/aws-native:frauddetector:EventTypeLabel"},"type":"array"},"lastUpdatedTime":{"description":"The time when the event type was last updated.","type":"string"},"tags":{"description":"Tags associated with this event type.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:frauddetector:getLabel":{"description":"An label for fraud detector.","inputs":{"properties":{"arn":{"type":"string","description":"The label ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The label ARN.","type":"string"},"createdTime":{"description":"The timestamp when the label was created.","type":"string"},"description":{"description":"The label description.","type":"string"},"lastUpdatedTime":{"description":"The timestamp when the label was last updated.","type":"string"},"tags":{"description":"Tags associated with this label.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:frauddetector:getList":{"description":"A resource schema for a List in Amazon Fraud Detector.","inputs":{"properties":{"arn":{"type":"string","description":"The list ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The list ARN.","type":"string"},"createdTime":{"description":"The time when the list was created.","type":"string"},"description":{"description":"The description of the list.","type":"string"},"elements":{"description":"The elements in this list.","items":{"type":"string"},"type":"array"},"lastUpdatedTime":{"description":"The time when the list was last updated.","type":"string"},"tags":{"description":"Tags associated with this list.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"variableType":{"description":"The variable type of the list.","type":"string"}}}},"aws-native:frauddetector:getOutcome":{"description":"An outcome for rule evaluation.","inputs":{"properties":{"arn":{"type":"string","description":"The outcome ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The outcome ARN.","type":"string"},"createdTime":{"description":"The timestamp when the outcome was created.","type":"string"},"description":{"description":"The outcome description.","type":"string"},"lastUpdatedTime":{"description":"The timestamp when the outcome was last updated.","type":"string"},"tags":{"description":"Tags associated with this outcome.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:frauddetector:getVariable":{"description":"A resource schema for a Variable in Amazon Fraud Detector.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the variable."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the variable.","type":"string"},"createdTime":{"description":"The time when the variable was created.","type":"string"},"dataSource":{"$ref":"#/types/aws-native:frauddetector:VariableDataSource","description":"The source of the data."},"dataType":{"$ref":"#/types/aws-native:frauddetector:VariableDataType","description":"The data type."},"defaultValue":{"description":"The default value for the variable when no value is received.","type":"string"},"description":{"description":"The description.","type":"string"},"lastUpdatedTime":{"description":"The time when the variable was last updated.","type":"string"},"tags":{"description":"Tags associated with this variable.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"variableType":{"$ref":"#/types/aws-native:frauddetector:VariableType","description":"The variable type. For more information see https://docs.aws.amazon.com/frauddetector/latest/ug/create-a-variable.html#variable-types"}}}},"aws-native:fsx:getDataRepositoryAssociation":{"description":"Resource Type definition for AWS::FSx::DataRepositoryAssociation","inputs":{"properties":{"associationId":{"type":"string","description":"The system-generated, unique ID of the data repository association."}},"required":["associationId"]},"outputs":{"properties":{"associationId":{"description":"The system-generated, unique ID of the data repository association.","type":"string"},"importedFileChunkSize":{"description":"For files imported from a data repository, this value determines the stripe count and maximum amount of data per file (in MiB) stored on a single physical disk. The maximum number of disks that a single file can be striped across is limited by the total number of disks that make up the file system.","type":"integer"},"resourceArn":{"description":"The Amazon Resource Name (ARN) for a given resource. ARNs uniquely identify Amazon Web Services resources. We require an ARN when you need to specify a resource unambiguously across all of Amazon Web Services. For more information, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference.","type":"string"},"s3":{"$ref":"#/types/aws-native:fsx:DataRepositoryAssociationS3","description":"The configuration for an Amazon S3 data repository linked to an Amazon FSx Lustre file system with a data repository association. The configuration defines which file events (new, changed, or deleted files or directories) are automatically imported from the linked data repository to the file system or automatically exported from the file system to the data repository."},"tags":{"description":"A list of Tag values, with a maximum of 50 elements.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getAlias":{"description":"The AWS::GameLift::Alias resource creates an alias for an Amazon GameLift (GameLift) fleet destination.","inputs":{"properties":{"aliasId":{"type":"string","description":"Unique alias ID"}},"required":["aliasId"]},"outputs":{"properties":{"aliasArn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift Alias resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift Alias ARN, the resource ID matches the AliasId value.","type":"string"},"aliasId":{"description":"Unique alias ID","type":"string"},"description":{"description":"A human-readable description of the alias.","type":"string"},"name":{"description":"A descriptive label that is associated with an alias. Alias names do not need to be unique.","type":"string"},"routingStrategy":{"$ref":"#/types/aws-native:gamelift:AliasRoutingStrategy","description":"A routing configuration that specifies where traffic is directed for this alias, such as to a fleet or to a message."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getBuild":{"description":"Resource Type definition for AWS::GameLift::Build","inputs":{"properties":{"buildId":{"type":"string","description":"A unique identifier for a build to be deployed on the new fleet. If you are deploying the fleet with a custom game build, you must specify this property. The build must have been successfully uploaded to Amazon GameLift and be in a READY status. This fleet setting cannot be changed once the fleet is created."}},"required":["buildId"]},"outputs":{"properties":{"buildArn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift build resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift build ARN, the resource ID matches the BuildId value.","type":"string"},"buildId":{"description":"A unique identifier for a build to be deployed on the new fleet. If you are deploying the fleet with a custom game build, you must specify this property. The build must have been successfully uploaded to Amazon GameLift and be in a READY status. This fleet setting cannot be changed once the fleet is created.","type":"string"},"name":{"description":"A descriptive label that is associated with a build. Build names do not need to be unique.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"Version information that is associated with this build. Version strings do not need to be unique.","type":"string"}}}},"aws-native:gamelift:getContainerFleet":{"description":"The AWS::GameLift::ContainerFleet resource creates an Amazon GameLift (GameLift) container fleet to host game servers.","inputs":{"properties":{"fleetId":{"type":"string","description":"Unique fleet ID"}},"required":["fleetId"]},"outputs":{"properties":{"creationTime":{"description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example \"1469498468.057\").","type":"string"},"deploymentDetails":{"$ref":"#/types/aws-native:gamelift:ContainerFleetDeploymentDetails"},"description":{"description":"A human-readable description of a fleet.","type":"string"},"fleetArn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift container fleet resource and uniquely identifies it across all AWS Regions.","type":"string"},"fleetId":{"description":"Unique fleet ID","type":"string"},"fleetRoleArn":{"description":"A unique identifier for an AWS IAM role that manages access to your AWS services. Create a role or look up a role's ARN from the IAM dashboard in the AWS Management Console.","type":"string"},"gameServerContainerGroupDefinitionArn":{"description":"The Amazon Resource Name (ARN) of the game server container group definition. This field will be empty if GameServerContainerGroupDefinitionName is not specified.","type":"string"},"gameServerContainerGroupsPerInstance":{"description":"The number of desired game server container groups per instance, a number between 1-5000.","type":"integer"},"gameSessionCreationLimitPolicy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetGameSessionCreationLimitPolicy","description":"A policy that limits the number of game sessions an individual player can create over a span of time for this fleet."},"instanceConnectionPortRange":{"$ref":"#/types/aws-native:gamelift:ContainerFleetConnectionPortRange","description":"The set of port numbers to open on each instance in a container fleet. Connection ports are used by inbound traffic to connect with processes that are running in containers on the fleet."},"instanceInboundPermissions":{"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift server.","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetIpPermission"},"type":"array"},"locations":{"items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLocationConfiguration"},"type":"array"},"logConfiguration":{"$ref":"#/types/aws-native:gamelift:ContainerFleetLogConfiguration","description":"The method that is used to collect container logs for the fleet. Amazon GameLift Servers saves all standard output for each container in logs, including game session logs.\n\n- `CLOUDWATCH` -- Send logs to an Amazon CloudWatch log group that you define. Each container emits a log stream, which is organized in the log group.\n- `S3` -- Store logs in an Amazon S3 bucket that you define.\n- `NONE` -- Don't collect container logs."},"maximumGameServerContainerGroupsPerInstance":{"description":"The maximum number of game server container groups per instance, a number between 1-5000.","type":"integer"},"metricGroups":{"description":"The name of an Amazon CloudWatch metric group. A metric group aggregates the metrics for all fleets in the group. Specify a string containing the metric group name. You can use an existing name or use a new name to create a new metric group. Currently, this parameter can have only one string.","items":{"type":"string"},"type":"array"},"newGameSessionProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:ContainerFleetNewGameSessionProtectionPolicy","description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions."},"perInstanceContainerGroupDefinitionArn":{"description":"The Amazon Resource Name (ARN) of the per instance container group definition. This field will be empty if PerInstanceContainerGroupDefinitionName is not specified.","type":"string"},"scalingPolicies":{"description":"A list of rules that control how a fleet is scaled.","items":{"$ref":"#/types/aws-native:gamelift:ContainerFleetScalingPolicy"},"type":"array"},"status":{"$ref":"#/types/aws-native:gamelift:ContainerFleetStatus","description":"The current status of the container fleet."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getContainerGroupDefinition":{"description":"The AWS::GameLift::ContainerGroupDefinition resource creates an Amazon GameLift container group definition.","inputs":{"properties":{"name":{"type":"string","description":"A descriptive label for the container group definition."}},"required":["name"]},"outputs":{"properties":{"containerGroupDefinitionArn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift container group resource and uniquely identifies it across all AWS Regions.","type":"string"},"creationTime":{"description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example \"1469498468.057\").","type":"string"},"gameServerContainerDefinition":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionGameServerContainerDefinition","description":"The definition for the game server container in this group. This property is used only when the container group type is `GAME_SERVER` . This container definition specifies a container image with the game server build."},"operatingSystem":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionOperatingSystem","description":"The operating system of the container group"},"status":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionStatus","description":"A string indicating ContainerGroupDefinition status."},"statusReason":{"description":"A string indicating the reason for ContainerGroupDefinition status.","type":"string"},"supportContainerDefinitions":{"description":"A collection of support container definitions that define the containers in this group.","items":{"$ref":"#/types/aws-native:gamelift:ContainerGroupDefinitionSupportContainerDefinition"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"totalMemoryLimitMebibytes":{"description":"The total memory limit of container groups following this definition in MiB","type":"integer"},"totalVcpuLimit":{"description":"The total amount of virtual CPUs on the container group definition","type":"number"},"versionDescription":{"description":"The description of this version","type":"string"},"versionNumber":{"description":"The version of this ContainerGroupDefinition","type":"integer"}}}},"aws-native:gamelift:getFleet":{"description":"The AWS::GameLift::Fleet resource creates an Amazon GameLift (GameLift) fleet to host game servers. A fleet is a set of EC2 or Anywhere instances, each of which can host multiple game sessions.","inputs":{"properties":{"fleetId":{"type":"string","description":"Unique fleet ID"}},"required":["fleetId"]},"outputs":{"properties":{"anywhereConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetAnywhereConfiguration","description":"Configuration for Anywhere fleet."},"description":{"description":"A human-readable description of a fleet.","type":"string"},"desiredEc2Instances":{"description":"[DEPRECATED] The number of EC2 instances that you want this fleet to host. When creating a new fleet, GameLift automatically sets this value to \"1\" and initiates a single instance. Once the fleet is active, update this value to trigger GameLift to add or remove instances from the fleet.","type":"integer"},"ec2InboundPermissions":{"description":"A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an Amazon GameLift server.","items":{"$ref":"#/types/aws-native:gamelift:FleetIpPermission"},"type":"array"},"fleetArn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift Servers Fleet resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift Fleet ARN, the resource ID matches the FleetId value.","type":"string"},"fleetId":{"description":"Unique fleet ID","type":"string"},"locations":{"description":"A set of remote locations to deploy additional instances to and manage as a multi-location fleet. Use this parameter when creating a fleet in AWS Regions that support multiple locations. You can add any AWS Region or Local Zone that's supported by Amazon GameLift Servers. Provide a list of one or more AWS Region codes, such as `us-west-2` , or Local Zone names. When using this parameter, Amazon GameLift Servers requires you to include your home location in the request. For a list of supported Regions and Local Zones, see [Amazon GameLift Servers service locations](https://docs.aws.amazon.com/gamelift/latest/developerguide/gamelift-regions.html) for managed hosting.","items":{"$ref":"#/types/aws-native:gamelift:FleetLocationConfiguration"},"type":"array"},"maxSize":{"description":"[DEPRECATED] The maximum value that is allowed for the fleet's instance count. When creating a new fleet, GameLift automatically sets this value to \"1\". Once the fleet is active, you can change this value.","type":"integer"},"metricGroups":{"description":"The name of an Amazon CloudWatch metric group. A metric group aggregates the metrics for all fleets in the group. Specify a string containing the metric group name. You can use an existing name or use a new name to create a new metric group. Currently, this parameter can have only one string.","items":{"type":"string"},"type":"array"},"minSize":{"description":"[DEPRECATED] The minimum value allowed for the fleet's instance count. When creating a new fleet, GameLift automatically sets this value to \"0\". After the fleet is active, you can change this value.","type":"integer"},"name":{"description":"A descriptive label that is associated with a fleet. Fleet names do not need to be unique.","type":"string"},"newGameSessionProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:FleetNewGameSessionProtectionPolicy","description":"A game session protection policy to apply to all game sessions hosted on instances in this fleet. When protected, active game sessions cannot be terminated during a scale-down event. If this parameter is not set, instances in this fleet default to no protection. You can change a fleet's protection policy to affect future game sessions on the fleet. You can also set protection for individual game sessions."},"resourceCreationLimitPolicy":{"$ref":"#/types/aws-native:gamelift:FleetResourceCreationLimitPolicy","description":"A policy that limits the number of game sessions an individual player can create over a span of time for this fleet."},"runtimeConfiguration":{"$ref":"#/types/aws-native:gamelift:FleetRuntimeConfiguration","description":"Instructions for launching server processes on each instance in the fleet. Server processes run either a custom game build executable or a Realtime script. The runtime configuration defines the server executables or launch script file, launch parameters, and the number of processes to run concurrently on each instance. When creating a fleet, the runtime configuration must have at least one server process configuration; otherwise the request fails with an invalid request exception.\n\nThis parameter is required unless the parameters ServerLaunchPath and ServerLaunchParameters are defined. Runtime configuration has replaced these parameters, but fleets that use them will continue to work."},"scalingPolicies":{"description":"A list of rules that control how a fleet is scaled.","items":{"$ref":"#/types/aws-native:gamelift:FleetScalingPolicy"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getGameServerGroup":{"description":"The AWS::GameLift::GameServerGroup resource creates an Amazon GameLift (GameLift) GameServerGroup.","inputs":{"properties":{"gameServerGroupArn":{"type":"string","description":"A generated unique ID for the game server group."}},"required":["gameServerGroupArn"]},"outputs":{"properties":{"autoScalingGroupArn":{"description":"A generated unique ID for the EC2 Auto Scaling group that is associated with this game server group.","type":"string"},"balancingStrategy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupBalancingStrategy","description":"The fallback balancing method to use for the game server group when Spot Instances in a Region become unavailable or are not viable for game hosting."},"gameServerGroupArn":{"description":"A generated unique ID for the game server group.","type":"string"},"gameServerGroupName":{"description":"An identifier for the new game server group.","type":"string"},"gameServerProtectionPolicy":{"$ref":"#/types/aws-native:gamelift:GameServerGroupGameServerProtectionPolicy","description":"A flag that indicates whether instances in the game server group are protected from early termination."},"instanceDefinitions":{"description":"A set of EC2 instance types to use when creating instances in the group.","items":{"$ref":"#/types/aws-native:gamelift:GameServerGroupInstanceDefinition"},"type":"array"},"roleArn":{"description":"The Amazon Resource Name (ARN) for an IAM role that allows Amazon GameLift to access your EC2 Auto Scaling groups.","type":"string"},"tags":{"description":"A list of labels to assign to the new game server group resource. Updating game server group tags with CloudFormation will not take effect. Please update this property using AWS GameLift APIs instead.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getGameSessionQueue":{"description":"The AWS::GameLift::GameSessionQueue resource creates an Amazon GameLift (GameLift) game session queue.","inputs":{"properties":{"name":{"type":"string","description":"A descriptive label that is associated with game session queue. Queue names must be unique within each Region."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift game session queue resource and uniquely identifies it.","type":"string"},"customEventData":{"description":"Information that is added to all events that are related to this game session queue.","type":"string"},"destinations":{"description":"A list of fleets and/or fleet aliases that can be used to fulfill game session placement requests in the queue.","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueueDestination"},"type":"array"},"filterConfiguration":{"$ref":"#/types/aws-native:gamelift:GameSessionQueueFilterConfiguration","description":"A list of locations where a queue is allowed to place new game sessions."},"notificationTarget":{"description":"An SNS topic ARN that is set up to receive game session placement notifications.","type":"string"},"playerLatencyPolicies":{"description":"A set of policies that act as a sliding cap on player latency.","items":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePlayerLatencyPolicy"},"type":"array"},"priorityConfiguration":{"$ref":"#/types/aws-native:gamelift:GameSessionQueuePriorityConfiguration","description":"Custom settings to use when prioritizing destinations and locations for game session placements."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeoutInSeconds":{"description":"The maximum time, in seconds, that a new game session placement request remains in the queue.","type":"integer"}}}},"aws-native:gamelift:getLocation":{"description":"The AWS::GameLift::Location resource creates an Amazon GameLift (GameLift) custom location.","inputs":{"properties":{"locationName":{"type":"string","description":"A descriptive name for the custom location."}},"required":["locationName"]},"outputs":{"properties":{"locationArn":{"description":"A unique identifier for the custom location. For example, `arn:aws:gamelift:[region]::location/location-a1234567-b8c9-0d1e-2fa3-b45c6d7e8912` .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getMatchmakingConfiguration":{"description":"The AWS::GameLift::MatchmakingConfiguration resource creates an Amazon GameLift (GameLift) matchmaking configuration.","inputs":{"properties":{"name":{"type":"string","description":"A unique identifier for the matchmaking configuration."}},"required":["name"]},"outputs":{"properties":{"acceptanceRequired":{"description":"A flag that indicates whether a match that was created with this configuration must be accepted by the matched players","type":"boolean"},"acceptanceTimeoutSeconds":{"description":"The length of time (in seconds) to wait for players to accept a proposed match, if acceptance is required.","type":"integer"},"additionalPlayerCount":{"description":"The number of player slots in a match to keep open for future players.","type":"integer"},"arn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift matchmaking configuration resource and uniquely identifies it.","type":"string"},"backfillMode":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationBackfillMode","description":"The method used to backfill game sessions created with this matchmaking configuration."},"creationTime":{"description":"A time stamp indicating when this data object was created.","type":"string"},"customEventData":{"description":"Information to attach to all events related to the matchmaking configuration.","type":"string"},"description":{"description":"A descriptive label that is associated with matchmaking configuration.","type":"string"},"flexMatchMode":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationFlexMatchMode","description":"Indicates whether this matchmaking configuration is being used with Amazon GameLift hosting or as a standalone matchmaking solution."},"gameProperties":{"description":"A set of custom properties for a game session, formatted as key:value pairs.","items":{"$ref":"#/types/aws-native:gamelift:MatchmakingConfigurationGameProperty"},"type":"array"},"gameSessionData":{"description":"A set of custom game session properties, formatted as a single string value.","type":"string"},"gameSessionQueueArns":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift game session queue resource and uniquely identifies it.","items":{"type":"string"},"type":"array"},"notificationTarget":{"description":"An SNS topic ARN that is set up to receive matchmaking notifications.","type":"string"},"requestTimeoutSeconds":{"description":"The maximum duration, in seconds, that a matchmaking ticket can remain in process before timing out.","type":"integer"},"ruleSetArn":{"description":"The Amazon Resource Name (ARN) associated with the GameLift matchmaking rule set resource that this configuration uses.","type":"string"},"ruleSetName":{"description":"A unique identifier for the matchmaking rule set to use with this configuration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getMatchmakingRuleSet":{"description":"The AWS::GameLift::MatchmakingRuleSet resource creates an Amazon GameLift (GameLift) matchmaking rule set.","inputs":{"properties":{"name":{"type":"string","description":"A unique identifier for the matchmaking rule set."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift matchmaking rule set resource and uniquely identifies it.","type":"string"},"creationTime":{"description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:gamelift:getScript":{"description":"The AWS::GameLift::Script resource creates a new script record for your Realtime Servers script. Realtime scripts are JavaScript that provide configuration settings and optional custom game logic for your game. The script is deployed when you create a Realtime Servers fleet to host your game sessions. Script logic is executed during an active game session.","inputs":{"properties":{"id":{"type":"string","description":"A unique identifier for the Realtime script"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that is assigned to a Amazon GameLift script resource and uniquely identifies it. ARNs are unique across all Regions. In a GameLift script ARN, the resource ID matches the Id value.","type":"string"},"creationTime":{"description":"A time stamp indicating when this data object was created. Format is a number expressed in Unix time as milliseconds (for example \"1469498468.057\").","type":"string"},"id":{"description":"A unique identifier for the Realtime script","type":"string"},"name":{"description":"A descriptive label that is associated with a script. Script names do not need to be unique.","type":"string"},"sizeOnDisk":{"description":"The file size of the uploaded Realtime script, expressed in bytes. When files are uploaded from an S3 location, this value remains at \"0\".","type":"integer"},"storageLocation":{"$ref":"#/types/aws-native:gamelift:ScriptS3Location","description":"The location of the Amazon S3 bucket where a zipped file containing your Realtime scripts is stored. The storage location must specify the Amazon S3 bucket name, the zip file name (the \"key\"), and a role ARN that allows Amazon GameLift to access the Amazon S3 storage location. The S3 bucket must be in the same Region where you want to create a new script. By default, Amazon GameLift uploads the latest version of the zip file; if you have S3 object versioning turned on, you can use the ObjectVersion parameter to specify an earlier version."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"The version that is associated with a script. Version strings do not need to be unique.","type":"string"}}}},"aws-native:gameliftstreams:getApplication":{"description":"Definition of AWS::GameLiftStreams::Application Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the application resource across all AWS Regions. For example:\n\n`arn:aws:gameliftstreams:us-west-2:123456789012:application/a-9ZY8X7Wv6` ."}},"required":["arn"]},"outputs":{"properties":{"applicationLogOutputUri":{"description":"An Amazon S3 URI to a bucket where you would like Amazon GameLift Streams to save application logs. Required if you specify one or more `ApplicationLogPaths` .","type":"string"},"applicationLogPaths":{"description":"Locations of log files that your content generates during a stream session. Enter path values that are relative to the `ApplicationSourceUri` location. You can specify up to 10 log paths. Amazon GameLift Streams uploads designated log files to the Amazon S3 bucket that you specify in `ApplicationLogOutputUri` at the end of a stream session. To retrieve stored log files, call [GetStreamSession](https://docs.aws.amazon.com/gameliftstreams/latest/apireference/API_GetStreamSession.html) and get the `LogFileLocationUri` .","items":{"type":"string"},"type":"array"},"arn":{"description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the application resource across all AWS Regions. For example:\n\n`arn:aws:gameliftstreams:us-west-2:123456789012:application/a-9ZY8X7Wv6` .","type":"string"},"description":{"description":"A human-readable label for the application. You can update this value later.","type":"string"},"id":{"description":"An ID that uniquely identifies the application resource. For example: `a-9ZY8X7Wv6` .","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"A list of labels to assign to the new application resource. Tags are developer-defined key-value pairs. Tagging AWS resources is useful for resource management, access management and cost allocation. See [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *AWS General Reference* .","type":"object"}}}},"aws-native:gameliftstreams:getStreamGroup":{"description":"Definition of AWS::GameLiftStreams::StreamGroup Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the stream group resource. For example: `arn:aws:gameliftstreams:us-west-2:123456789012:streamgroup/sg-1AB2C3De4` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"An [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html) that uniquely identifies the stream group resource. For example: `arn:aws:gameliftstreams:us-west-2:123456789012:streamgroup/sg-1AB2C3De4` .","type":"string"},"defaultApplication":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupDefaultApplication","description":"Object that identifies the Amazon GameLift Streams application to stream with this stream group."},"description":{"description":"A descriptive label for the stream group.","type":"string"},"id":{"description":"An ID that uniquely identifies the stream group resource. For example: `sg-1AB2C3De4` .","type":"string"},"locationConfigurations":{"description":"A set of one or more locations and the streaming capacity for each location. One of the locations MUST be your primary location, which is the AWS Region where you are specifying this resource.","items":{"$ref":"#/types/aws-native:gameliftstreams:StreamGroupLocationConfiguration"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"A list of labels to assign to the new stream group resource. Tags are developer-defined key-value pairs. Tagging AWS resources is useful for resource management, access management and cost allocation. See [Tagging AWS Resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) in the *AWS General Reference* .","type":"object"}}}},"aws-native:globalaccelerator:getAccelerator":{"description":"Resource Type definition for AWS::GlobalAccelerator::Accelerator","inputs":{"properties":{"acceleratorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the accelerator."}},"required":["acceleratorArn"]},"outputs":{"properties":{"acceleratorArn":{"description":"The Amazon Resource Name (ARN) of the accelerator.","type":"string"},"dnsName":{"description":"The Domain Name System (DNS) name that Global Accelerator creates that points to your accelerator's static IPv4 addresses.","type":"string"},"dualStackDnsName":{"description":"The Domain Name System (DNS) name that Global Accelerator creates that points to your accelerator's static IPv4 and IPv6 addresses.","type":"string"},"enabled":{"description":"Indicates whether an accelerator is enabled. The value is true or false.","type":"boolean"},"ipAddressType":{"$ref":"#/types/aws-native:globalaccelerator:AcceleratorIpAddressType","description":"IP Address type."},"ipAddresses":{"description":"The IP addresses from BYOIP Prefix pool.","items":{"type":"string"},"type":"array"},"ipv4Addresses":{"description":"The IPv4 addresses assigned to the accelerator.","items":{"type":"string"},"type":"array"},"ipv6Addresses":{"description":"The IPv6 addresses assigned if the accelerator is dualstack","items":{"type":"string"},"type":"array"},"name":{"description":"Name of accelerator.","type":"string"},"tags":{"description":"Create tags for an accelerator.\n\nFor more information, see [Tagging](https://docs.aws.amazon.com/global-accelerator/latest/dg/tagging-in-global-accelerator.html) in the *AWS Global Accelerator Developer Guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:globalaccelerator:getCrossAccountAttachment":{"description":"Resource Type definition for AWS::GlobalAccelerator::CrossAccountAttachment","inputs":{"properties":{"attachmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the attachment."}},"required":["attachmentArn"]},"outputs":{"properties":{"attachmentArn":{"description":"The Amazon Resource Name (ARN) of the attachment.","type":"string"},"name":{"description":"The Friendly identifier of the attachment.","type":"string"},"principals":{"description":"Principals to share the resources with.","items":{"type":"string"},"type":"array"},"resources":{"description":"Resources shared using the attachment.","items":{"$ref":"#/types/aws-native:globalaccelerator:CrossAccountAttachmentResource"},"type":"array"},"tags":{"description":"Add tags for a cross-account attachment.\n\nFor more information, see [Tagging in AWS Global Accelerator](https://docs.aws.amazon.com/global-accelerator/latest/dg/tagging-in-global-accelerator.html) in the *AWS Global Accelerator Developer Guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:globalaccelerator:getEndpointGroup":{"description":"Resource Type definition for AWS::GlobalAccelerator::EndpointGroup","inputs":{"properties":{"endpointGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint group"}},"required":["endpointGroupArn"]},"outputs":{"properties":{"endpointConfigurations":{"description":"The list of endpoint objects.","items":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupEndpointConfiguration"},"type":"array"},"endpointGroupArn":{"description":"The Amazon Resource Name (ARN) of the endpoint group","type":"string"},"healthCheckIntervalSeconds":{"description":"The time in seconds between each health check for an endpoint. Must be a value of 10 or 30","type":"integer"},"healthCheckPath":{"description":"If the protocol is HTTP/S, then this value provides the ping path that Global Accelerator uses for the destination on the endpoints for health checks. The default is slash (/).","type":"string"},"healthCheckPort":{"description":"The port that AWS Global Accelerator uses to check the health of endpoints in this endpoint group.","type":"integer"},"healthCheckProtocol":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupHealthCheckProtocol","description":"The protocol that AWS Global Accelerator uses to check the health of endpoints in this endpoint group."},"portOverrides":{"description":"Allows you to override the destination ports used to route traffic to an endpoint. Using a port override lets you map a list of external destination ports (that your users send traffic to) to a list of internal destination ports that you want an application endpoint to receive traffic on.","items":{"$ref":"#/types/aws-native:globalaccelerator:EndpointGroupPortOverride"},"type":"array"},"thresholdCount":{"description":"The number of consecutive health checks required to set the state of the endpoint to unhealthy.","type":"integer"},"trafficDialPercentage":{"description":"The percentage of traffic to sent to an AWS Region","type":"number"}}}},"aws-native:globalaccelerator:getListener":{"description":"Resource Type definition for AWS::GlobalAccelerator::Listener","inputs":{"properties":{"listenerArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."}},"required":["listenerArn"]},"outputs":{"properties":{"clientAffinity":{"$ref":"#/types/aws-native:globalaccelerator:ListenerClientAffinity","description":"Client affinity lets you direct all requests from a user to the same endpoint."},"listenerArn":{"description":"The Amazon Resource Name (ARN) of the listener.","type":"string"},"portRanges":{"description":"The list of port ranges for the connections from clients to the accelerator.","items":{"$ref":"#/types/aws-native:globalaccelerator:ListenerPortRange"},"type":"array"},"protocol":{"$ref":"#/types/aws-native:globalaccelerator:ListenerProtocol","description":"The protocol for the listener."}}}},"aws-native:glue:getCatalog":{"description":"Creates a catalog in the Glue Data Catalog.","inputs":{"properties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the catalog."}},"required":["resourceArn"]},"outputs":{"properties":{"allowFullTableExternalDataAccess":{"$ref":"#/types/aws-native:glue:CatalogAllowFullTableExternalDataAccess","description":"Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation."},"catalogId":{"description":"The ID of the catalog.","type":"string"},"catalogProperties":{"$ref":"#/types/aws-native:glue:CatalogProperties"},"createDatabaseDefaultPermissions":{"description":"An array of PrincipalPermissions objects for default database permissions.","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissions"},"type":"array"},"createTableDefaultPermissions":{"description":"An array of PrincipalPermissions objects for default table permissions.","items":{"$ref":"#/types/aws-native:glue:CatalogPrincipalPermissions"},"type":"array"},"createTime":{"description":"The time at which the catalog was created.","type":"integer"},"description":{"description":"A description of the catalog.","type":"string"},"federatedCatalog":{"$ref":"#/types/aws-native:glue:CatalogFederatedCatalog"},"parameters":{"additionalProperties":{"type":"string"},"description":"A map of key-value pairs that define parameters and properties of the catalog.","type":"object"},"resourceArn":{"description":"The Amazon Resource Name (ARN) of the catalog.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetRedshiftCatalog":{"$ref":"#/types/aws-native:glue:CatalogTargetRedshiftCatalog"},"updateTime":{"description":"The time at which the catalog was last updated.","type":"integer"}}}},"aws-native:glue:getCrawler":{"description":"Resource Type definition for AWS::Glue::Crawler","inputs":{"properties":{"name":{"type":"string","description":"The name of the crawler."}},"required":["name"]},"outputs":{"properties":{"classifiers":{"description":"A list of UTF-8 strings that specify the names of custom classifiers that are associated with the crawler.","items":{"type":"string"},"type":"array"},"configuration":{"description":"Crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior.","type":"string"},"crawlerSecurityConfiguration":{"description":"The name of the SecurityConfiguration structure to be used by this crawler.","type":"string"},"databaseName":{"description":"The name of the database in which the crawler's output is stored.","type":"string"},"description":{"description":"A description of the crawler.","type":"string"},"lakeFormationConfiguration":{"$ref":"#/types/aws-native:glue:CrawlerLakeFormationConfiguration","description":"Specifies whether the crawler should use AWS Lake Formation credentials for the crawler instead of the IAM role credentials."},"recrawlPolicy":{"$ref":"#/types/aws-native:glue:CrawlerRecrawlPolicy","description":"A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run."},"role":{"description":"The Amazon Resource Name (ARN) of an IAM role that's used to access customer resources, such as Amazon Simple Storage Service (Amazon S3) data.","type":"string"},"schedule":{"$ref":"#/types/aws-native:glue:CrawlerSchedule","description":"For scheduled crawlers, the schedule when the crawler runs."},"schemaChangePolicy":{"$ref":"#/types/aws-native:glue:CrawlerSchemaChangePolicy","description":"The policy that specifies update and delete behaviors for the crawler. The policy tells the crawler what to do in the event that it detects a change in a table that already exists in the customer's database at the time of the crawl. The `SchemaChangePolicy` does not affect whether or how new tables and partitions are added. New tables and partitions are always created regardless of the `SchemaChangePolicy` on a crawler.\n\nThe SchemaChangePolicy consists of two components, `UpdateBehavior` and `DeleteBehavior` ."},"tablePrefix":{"description":"The prefix added to the names of tables that are created.","type":"string"},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this crawler.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Crawler` for more information about the expected schema for this property."},"targets":{"$ref":"#/types/aws-native:glue:CrawlerTargets","description":"A collection of targets to crawl."}}}},"aws-native:glue:getDatabase":{"description":"Resource Type definition for AWS::Glue::Database","inputs":{"properties":{"databaseName":{"type":"string","description":"The name of the database. For hive compatibility, this is folded to lowercase when it is store."}},"required":["databaseName"]},"outputs":{"properties":{"catalogId":{"description":"The AWS account ID for the account in which to create the catalog object.","type":"string"},"databaseInput":{"$ref":"#/types/aws-native:glue:DatabaseInput","description":"The metadata for the database."}}}},"aws-native:glue:getIdentityCenterConfiguration":{"description":"Resource Type definition for AWS::Glue::IdentityCenterConfiguration","inputs":{"properties":{"accountId":{"type":"string","description":"The identifier for the specified AWS account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The identifier for the specified AWS account.","type":"string"},"applicationArn":{"description":"The Glue IAM identity center application arn","type":"string"},"scopes":{"description":"The downstream scopes that Glue identity center configuration can access","items":{"type":"string"},"type":"array"},"userBackgroundSessionsEnabled":{"description":"Enable or disable user background sessions for Glue Identity Center","type":"boolean"}}}},"aws-native:glue:getIntegration":{"description":"Resource Type definition for AWS::Glue::Integration","inputs":{"properties":{"integrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the integration."},"integrationName":{"type":"string","description":"The name of the integration."}},"required":["integrationArn","integrationName"]},"outputs":{"properties":{"createTime":{"description":"The time (UTC) when the integration was created.","type":"string"},"dataFilter":{"description":"Selects source tables for the integration using Maxwell filter syntax.","type":"string"},"description":{"description":"A description for the integration.","type":"string"},"integrationArn":{"description":"The Amazon Resource Name (ARN) of the integration.","type":"string"},"status":{"description":"The status of the integration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:glue:getIntegrationResourceProperty":{"description":"Resource Type definition for AWS::Glue::IntegrationResourceProperty","inputs":{"properties":{"resourceArn":{"type":"string","description":"The connection ARN of the source, or the database ARN of the target."},"resourcePropertyArn":{"type":"string","description":"The integration resource property ARN."}},"required":["resourceArn","resourcePropertyArn"]},"outputs":{"properties":{"resourcePropertyArn":{"description":"The integration resource property ARN.","type":"string"},"sourceProcessingProperties":{"$ref":"#/types/aws-native:glue:SourceProcessingPropertiesProperties","description":"The resource properties associated with the integration source."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetProcessingProperties":{"$ref":"#/types/aws-native:glue:TargetProcessingPropertiesProperties","description":"The resource properties associated with the integration target."}}}},"aws-native:glue:getJob":{"description":"Resource Type definition for AWS::Glue::Job","inputs":{"properties":{"name":{"type":"string","description":"The name you assign to the job definition"}},"required":["name"]},"outputs":{"properties":{"allocatedCapacity":{"description":"The number of capacity units that are allocated to this job.","type":"number"},"command":{"$ref":"#/types/aws-native:glue:JobCommand","description":"The code that executes a job."},"connections":{"$ref":"#/types/aws-native:glue:JobConnectionsList","description":"Specifies the connections used by a job"},"defaultArguments":{"$ref":"pulumi.json#/Any","description":"The default arguments for this job, specified as name-value pairs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"description":{"description":"A description of the job.","type":"string"},"executionClass":{"description":"Indicates whether the job is run with a standard or flexible execution class.","type":"string"},"executionProperty":{"$ref":"#/types/aws-native:glue:JobExecutionProperty","description":"The maximum number of concurrent runs that are allowed for this job."},"glueVersion":{"description":"Glue version determines the versions of Apache Spark and Python that AWS Glue supports.","type":"string"},"jobMode":{"description":"Property description not available.","type":"string"},"jobRunQueuingEnabled":{"description":"Property description not available.","type":"boolean"},"logUri":{"description":"This field is reserved for future use.","type":"string"},"maintenanceWindow":{"description":"Property description not available.","type":"string"},"maxCapacity":{"description":"The number of AWS Glue data processing units (DPUs) that can be allocated when this job runs.","type":"number"},"maxRetries":{"description":"The maximum number of times to retry this job after a JobRun fails","type":"number"},"nonOverridableArguments":{"$ref":"pulumi.json#/Any","description":"Non-overridable arguments for this job, specified as name-value pairs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"notificationProperty":{"$ref":"#/types/aws-native:glue:JobNotificationProperty","description":"Specifies configuration properties of a notification."},"numberOfWorkers":{"description":"The number of workers of a defined workerType that are allocated when a job runs.","type":"integer"},"role":{"description":"The name or Amazon Resource Name (ARN) of the IAM role associated with this job.","type":"string"},"securityConfiguration":{"description":"The name of the SecurityConfiguration structure to be used with this job.","type":"string"},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this job.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Job` for more information about the expected schema for this property."},"timeout":{"description":"The maximum time that a job run can consume resources before it is terminated and enters TIMEOUT status.","type":"integer"},"workerType":{"$ref":"#/types/aws-native:glue:JobWorkerType","description":"TThe type of predefined worker that is allocated when a job runs."}}}},"aws-native:glue:getRegistry":{"description":"This resource creates a Registry for authoring schemas as part of Glue Schema Registry.","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name for the created Registry."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name for the created Registry.","type":"string"},"description":{"description":"A description of the registry. If description is not provided, there will not be any default value for this.","type":"string"},"tags":{"description":"List of tags to tag the Registry","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:glue:getSchema":{"description":"This resource represents a schema of Glue Schema Registry.","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name for the Schema."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name for the Schema.","type":"string"},"checkpointVersion":{"$ref":"#/types/aws-native:glue:SchemaVersion","description":"Specify the `VersionNumber` or the `IsLatest` for setting the checkpoint for the schema. This is only required for updating a checkpoint."},"compatibility":{"$ref":"#/types/aws-native:glue:SchemaCompatibility","description":"Compatibility setting for the schema."},"description":{"description":"A description of the schema. If description is not provided, there will not be any default value for this.","type":"string"},"initialSchemaVersionId":{"description":"Represents the version ID associated with the initial schema version.","type":"string"},"tags":{"description":"List of tags to tag the schema","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:glue:getSchemaVersion":{"description":"This resource represents an individual schema version of a schema defined in Glue Schema Registry.","inputs":{"properties":{"versionId":{"type":"string","description":"Represents the version ID associated with the schema version."}},"required":["versionId"]},"outputs":{"properties":{"versionId":{"description":"Represents the version ID associated with the schema version.","type":"string"}}}},"aws-native:glue:getTrigger":{"description":"Resource Type definition for AWS::Glue::Trigger","inputs":{"properties":{"name":{"type":"string","description":"The name of the trigger."}},"required":["name"]},"outputs":{"properties":{"actions":{"description":"The actions initiated by this trigger.","items":{"$ref":"#/types/aws-native:glue:TriggerAction"},"type":"array"},"description":{"description":"A description of this trigger.","type":"string"},"eventBatchingCondition":{"$ref":"#/types/aws-native:glue:TriggerEventBatchingCondition","description":"Batch condition that must be met (specified number of events received or batch time window expired) before EventBridge event trigger fires."},"predicate":{"$ref":"#/types/aws-native:glue:TriggerPredicate","description":"The predicate of this trigger, which defines when it will fire."},"schedule":{"description":"A cron expression used to specify the schedule.","type":"string"},"tags":{"$ref":"pulumi.json#/Any","description":"The tags to use with this trigger.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Glue::Trigger` for more information about the expected schema for this property."}}}},"aws-native:glue:getUsageProfile":{"description":"This creates a Resource of UsageProfile type.","inputs":{"properties":{"name":{"type":"string","description":"The name of the UsageProfile."}},"required":["name"]},"outputs":{"properties":{"configuration":{"$ref":"#/types/aws-native:glue:UsageProfileProfileConfiguration","description":"UsageProfile configuration for supported service ex: (Jobs, Sessions)."},"createdOn":{"description":"Creation time.","type":"string"},"description":{"description":"The description of the UsageProfile.","type":"string"},"tags":{"description":"The tags to be applied to this UsageProfiles.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:grafana:getWorkspace":{"description":"Definition of AWS::Grafana::Workspace Resource Type","inputs":{"properties":{"id":{"type":"string","description":"The id that uniquely identifies a Grafana workspace."}},"required":["id"]},"outputs":{"properties":{"accountAccessType":{"$ref":"#/types/aws-native:grafana:WorkspaceAccountAccessType","description":"Specifies whether the workspace can access AWS resources in this AWS account only, or whether it can also access AWS resources in other accounts in the same organization. If this is `ORGANIZATION` , the `OrganizationalUnits` parameter specifies which organizational units the workspace can access."},"authenticationProviders":{"description":"List of authentication providers to enable.","items":{"$ref":"#/types/aws-native:grafana:WorkspaceAuthenticationProviderTypes"},"type":"array"},"creationTimestamp":{"description":"Timestamp when the workspace was created.","type":"string"},"dataSources":{"description":"List of data sources on the service managed IAM role.","items":{"$ref":"#/types/aws-native:grafana:WorkspaceDataSourceType"},"type":"array"},"description":{"description":"Description of a workspace.","type":"string"},"endpoint":{"description":"Endpoint for the Grafana workspace.","type":"string"},"grafanaVersion":{"description":"The version of Grafana to support in your workspace.","type":"string"},"id":{"description":"The id that uniquely identifies a Grafana workspace.","type":"string"},"modificationTimestamp":{"description":"Timestamp when the workspace was last modified","type":"string"},"name":{"description":"The user friendly name of a workspace.","type":"string"},"networkAccessControl":{"$ref":"#/types/aws-native:grafana:WorkspaceNetworkAccessControl","description":"The configuration settings for network access to your workspace."},"notificationDestinations":{"description":"List of notification destinations on the customers service managed IAM role that the Grafana workspace can query.","items":{"$ref":"#/types/aws-native:grafana:WorkspaceNotificationDestinationType"},"type":"array"},"organizationRoleName":{"description":"The name of an IAM role that already exists to use with AWS Organizations to access AWS data sources and notification channels in other accounts in an organization.","type":"string"},"organizationalUnits":{"description":"List of Organizational Units containing AWS accounts the Grafana workspace can pull data from.","items":{"type":"string"},"type":"array"},"permissionType":{"$ref":"#/types/aws-native:grafana:WorkspacePermissionType","description":"If this is `SERVICE_MANAGED` , and the workplace was created through the Amazon Managed Grafana console, then Amazon Managed Grafana automatically creates the IAM roles and provisions the permissions that the workspace needs to use AWS data sources and notification channels.\n\nIf this is `CUSTOMER_MANAGED` , you must manage those roles and permissions yourself.\n\nIf you are working with a workspace in a member account of an organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other AWS accounts in the organization, this parameter must be set to `CUSTOMER_MANAGED` .\n\nFor more information about converting between customer and service managed, see [Managing permissions for data sources and notification channels](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-datasource-and-notification.html) . For more information about the roles and permissions that must be managed for customer managed workspaces, see [Amazon Managed Grafana permissions and policies for AWS data sources and notification channels](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html)"},"pluginAdminEnabled":{"description":"Allow workspace admins to install plugins","type":"boolean"},"roleArn":{"description":"IAM Role that will be used to grant the Grafana workspace access to a customers AWS resources.","type":"string"},"samlConfiguration":{"$ref":"#/types/aws-native:grafana:WorkspaceSamlConfiguration","description":"If the workspace uses SAML, use this structure to map SAML assertion attributes to workspace user information and define which groups in the assertion attribute are to have the `Admin` and `Editor` roles in the workspace."},"samlConfigurationStatus":{"$ref":"#/types/aws-native:grafana:WorkspaceSamlConfigurationStatus","description":"Specifies whether the workspace's SAML configuration is complete.\n\nValid values: `CONFIGURED | NOT_CONFIGURED`\n\nType: String"},"ssoClientId":{"description":"The client ID of the AWS SSO Managed Application.","type":"string"},"stackSetName":{"description":"The name of the AWS CloudFormation stack set to use to generate IAM roles to be used for this workspace.","type":"string"},"status":{"$ref":"#/types/aws-native:grafana:WorkspaceStatus","description":"The current status of the workspace.\n\nValid values: `ACTIVE | CREATING | DELETING | FAILED | UPDATING | UPGRADING | DELETION_FAILED | CREATION_FAILED | UPDATE_FAILED | UPGRADE_FAILED | LICENSE_REMOVAL_FAILED`\n\nType: String"},"vpcConfiguration":{"$ref":"#/types/aws-native:grafana:WorkspaceVpcConfiguration","description":"The configuration settings for an Amazon VPC that contains data sources for your Grafana workspace to connect to.\n\n\u003e Connecting to a private VPC is not yet available in the Asia Pacific (Seoul) Region (ap-northeast-2)."}}}},"aws-native:greengrassv2:getComponentVersion":{"description":"Resource for Greengrass component version.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the component version."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the component version.","type":"string"},"componentName":{"description":"The name of the component.","type":"string"},"componentVersion":{"description":"The version of the component.","language":{"csharp":{"name":"ComponentVersionValue"}},"type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Application-specific metadata to attach to the component version. You can use tags in IAM policies to control access to AWS IoT Greengrass resources. You can also use tags to categorize your resources. For more information, see [Tag your AWS IoT Greengrass Version 2 resources](https://docs.aws.amazon.com/greengrass/v2/developerguide/tag-resources.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n\nThis `Json` property type is processed as a map of key-value pairs. It uses the following format, which is different from most `Tags` implementations in CloudFormation templates.\n\n```json\n\"Tags\": { \"KeyName0\": \"value\", \"KeyName1\": \"value\", \"KeyName2\": \"value\"\n}\n```","type":"object"}}}},"aws-native:greengrassv2:getDeployment":{"description":"Resource for Greengrass V2 deployment.","inputs":{"properties":{"deploymentId":{"type":"string","description":"The ID of the deployment."}},"required":["deploymentId"]},"outputs":{"properties":{"deploymentId":{"description":"The ID of the deployment.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Application-specific metadata to attach to the deployment. You can use tags in IAM policies to control access to AWS IoT Greengrass resources. You can also use tags to categorize your resources. For more information, see [Tag your AWS IoT Greengrass Version 2 resources](https://docs.aws.amazon.com/greengrass/v2/developerguide/tag-resources.html) in the *AWS IoT Greengrass V2 Developer Guide* .\n\nThis `Json` property type is processed as a map of key-value pairs. It uses the following format, which is different from most `Tags` implementations in CloudFormation templates.\n\n```json\n\"Tags\": { \"KeyName0\": \"value\", \"KeyName1\": \"value\", \"KeyName2\": \"value\"\n}\n```","type":"object"}}}},"aws-native:groundstation:getConfig":{"description":"AWS Ground Station config resource type for CloudFormation.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the config, such as `arn:aws:groundstation:us-east-2:1234567890:config/tracking/9940bf3b-d2ba-427e-9906-842b5e5d2296` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the config, such as `arn:aws:groundstation:us-east-2:1234567890:config/tracking/9940bf3b-d2ba-427e-9906-842b5e5d2296` .","type":"string"},"configData":{"$ref":"#/types/aws-native:groundstation:ConfigData","description":"Object containing the parameters of a config. Only one subtype may be specified per config. See the subtype definitions for a description of each config subtype."},"id":{"description":"The ID of the config, such as `9940bf3b-d2ba-427e-9906-842b5e5d2296` .","type":"string"},"name":{"description":"The name of the config object.","type":"string"},"tags":{"description":"Tags assigned to a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"description":"The type of the config, such as `tracking` .","type":"string"}}}},"aws-native:groundstation:getDataflowEndpointGroup":{"description":"AWS Ground Station DataflowEndpointGroup schema for CloudFormation","inputs":{"properties":{"id":{"type":"string","description":"UUID of a dataflow endpoint group."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the dataflow endpoint group, such as `arn:aws:groundstation:us-east-2:1234567890:dataflow-endpoint-group/9940bf3b-d2ba-427e-9906-842b5e5d2296` .","type":"string"},"id":{"description":"UUID of a dataflow endpoint group.","type":"string"},"tags":{"description":"Tags assigned to a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:groundstation:getDataflowEndpointGroupV2":{"description":"Resource Type definition for AWS Ground Station DataflowEndpointGroupV2","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"arn":{"type":"string"},"endpointDetails":{"description":"Information about the endpoint details.","items":{"$ref":"#/types/aws-native:groundstation:DataflowEndpointGroupV2EndpointDetails"},"type":"array"},"id":{"type":"string"},"tags":{"description":"Tags assigned to a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:groundstation:getMissionProfile":{"description":"AWS Ground Station Mission Profile resource type for CloudFormation.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the mission profile, such as `arn:aws:groundstation:us-east-2:1234567890:mission-profile/9940bf3b-d2ba-427e-9906-842b5e5d2296` ."},"id":{"type":"string","description":"The ID of the mission profile, such as `9940bf3b-d2ba-427e-9906-842b5e5d2296` ."}},"required":["id","arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the mission profile, such as `arn:aws:groundstation:us-east-2:1234567890:mission-profile/9940bf3b-d2ba-427e-9906-842b5e5d2296` .","type":"string"},"contactPostPassDurationSeconds":{"description":"Post-pass time needed after the contact.","type":"integer"},"contactPrePassDurationSeconds":{"description":"Pre-pass time needed before the contact.","type":"integer"},"dataflowEdges":{"description":"A list containing lists of config ARNs. Each list of config ARNs is an edge, with a \"from\" config and a \"to\" config.","items":{"$ref":"#/types/aws-native:groundstation:MissionProfileDataflowEdge"},"type":"array"},"id":{"description":"The ID of the mission profile, such as `9940bf3b-d2ba-427e-9906-842b5e5d2296` .","type":"string"},"minimumViableContactDurationSeconds":{"description":"Visibilities with shorter duration than the specified minimum viable contact duration will be ignored when searching for available contacts.","type":"integer"},"name":{"description":"A name used to identify a mission profile.","type":"string"},"region":{"description":"The region of the mission profile.","type":"string"},"streamsKmsKey":{"$ref":"#/types/aws-native:groundstation:MissionProfileStreamsKmsKey","description":"The ARN of a KMS Key used for encrypting data during transmission from the source to destination locations."},"streamsKmsRole":{"description":"The ARN of the KMS Key or Alias Key role used to define permissions on KMS Key usage.","type":"string"},"tags":{"description":"Tags assigned to the mission profile.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"telemetrySinkConfigArn":{"description":"ARN of a Config resource of type TelemetrySinkConfig used for telemetry data sink configuration.","type":"string"},"trackingConfigArn":{"description":"The ARN of a tracking config objects that defines how to track the satellite through the sky during a contact.","type":"string"}}}},"aws-native:guardduty:getDetector":{"description":"Resource Type definition for AWS::GuardDuty::Detector","inputs":{"properties":{"id":{"type":"string","description":"The unique ID of the detector."}},"required":["id"]},"outputs":{"properties":{"dataSources":{"$ref":"#/types/aws-native:guardduty:DetectorCfnDataSourceConfigurations","description":"Describes which data sources will be enabled for the detector."},"enable":{"description":"Specifies whether the detector is to be enabled on creation.","type":"boolean"},"features":{"description":"A list of features that will be configured for the detector.","items":{"$ref":"#/types/aws-native:guardduty:DetectorCfnFeatureConfiguration"},"type":"array"},"findingPublishingFrequency":{"description":"Specifies how frequently updated findings are exported.","type":"string"},"id":{"description":"The unique ID of the detector.","type":"string"},"tags":{"description":"Specifies tags added to a new detector resource. Each tag consists of a key and an optional value, both of which you define.\n\nCurrently, support is available only for creating and deleting a tag. No support exists for updating the tags.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:guardduty:getFilter":{"description":"Resource Type definition for AWS::GuardDuty::Filter","inputs":{"properties":{"detectorId":{"type":"string","description":"The detector ID associated with the GuardDuty account for which you want to create a filter.\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"name":{"type":"string","description":"The name of the filter. Valid characters include period (.), underscore (_), dash (-), and alphanumeric characters. A whitespace is considered to be an invalid character."}},"required":["detectorId","name"]},"outputs":{"properties":{"action":{"description":"Specifies the action that is to be applied to the findings that match the filter.","type":"string"},"description":{"description":"The description of the filter. Valid characters include alphanumeric characters, and special characters such as hyphen, period, colon, underscore, parentheses ( `{ }` , `[ ]` , and `( )` ), forward slash, horizontal tab, vertical tab, newline, form feed, return, and whitespace.","type":"string"},"findingCriteria":{"$ref":"#/types/aws-native:guardduty:FilterFindingCriteria","description":"Represents the criteria to be used in the filter for querying findings."},"rank":{"description":"Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings. The minimum value for this property is 1 and the maximum is 100.\n\nBy default, filters may not be created in the same order as they are ranked. To ensure that the filters are created in the expected order, you can use an optional attribute, [DependsOn](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , with the following syntax: `\"DependsOn\":[ \"ObjectName\" ]` .","type":"integer"},"tags":{"description":"The tags to be added to a new filter resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:guardduty:getIpSet":{"description":"Resource Type definition for AWS::GuardDuty::IPSet","inputs":{"properties":{"detectorId":{"type":"string","description":"The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"id":{"type":"string"}},"required":["id","detectorId"]},"outputs":{"properties":{"expectedBucketOwner":{"description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhen you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.","type":"string"},"id":{"type":"string"},"location":{"description":"The URI of the file that contains the IPSet.","type":"string"},"name":{"description":"The user-friendly name to identify the IPSet.\n\nThe name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).","type":"string"},"tags":{"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:guardduty:getMalwareProtectionPlan":{"description":"Resource Type definition for AWS::GuardDuty::MalwareProtectionPlan","inputs":{"properties":{"malwareProtectionPlanId":{"type":"string","description":"A unique identifier associated with Malware Protection plan resource."}},"required":["malwareProtectionPlanId"]},"outputs":{"properties":{"actions":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnActions","description":"Specifies the action that is to be applied to the Malware Protection plan resource."},"arn":{"description":"Amazon Resource Name (ARN) of the protected resource.","type":"string"},"createdAt":{"description":"The timestamp when the Malware Protection plan resource was created.","type":"string"},"malwareProtectionPlanId":{"description":"A unique identifier associated with Malware Protection plan resource.","type":"string"},"protectedResource":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnProtectedResource","description":"Information about the protected resource. Presently, S3Bucket is the only supported protected resource."},"role":{"description":"IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource.","type":"string"},"status":{"description":"Status of the Malware Protection plan resource.","type":"string"},"statusReasons":{"description":"Status details associated with the Malware Protection plan resource status.","items":{"$ref":"#/types/aws-native:guardduty:MalwareProtectionPlanCfnStatusReasons"},"type":"array"},"tags":{"description":"The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:guardduty:getMember":{"description":"Resource Type definition for AWS::GuardDuty::Member","inputs":{"properties":{"detectorId":{"type":"string","description":"The ID of the detector associated with the GuardDuty service to add the member to."},"memberId":{"type":"string","description":"The AWS account ID of the account to designate as a member."}},"required":["detectorId","memberId"]},"outputs":{"properties":{"email":{"description":"The email address associated with the member account.","type":"string"},"status":{"description":"You can use the `Status` property to update the status of the relationship between the member account and its administrator account. Valid values are `Created` and `Invited` when using an `AWS::GuardDuty::Member` resource. If the value for this property is not provided or set to `Created` , a member account is created but not invited. If the value of this property is set to `Invited` , a member account is created and invited.","type":"string"}}}},"aws-native:guardduty:getPublishingDestination":{"description":"Resource Type definition for AWS::GuardDuty::PublishingDestination.","inputs":{"properties":{"detectorId":{"type":"string","description":"The ID of the GuardDuty detector associated with the publishing destination."},"id":{"type":"string","description":"The ID of the publishing destination."}},"required":["detectorId","id"]},"outputs":{"properties":{"destinationProperties":{"$ref":"#/types/aws-native:guardduty:PublishingDestinationCfnDestinationProperties","description":"Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings."},"destinationType":{"description":"The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported.","type":"string"},"id":{"description":"The ID of the publishing destination.","type":"string"},"publishingFailureStartTimestamp":{"description":"The time, in epoch millisecond format, at which GuardDuty was first unable to publish findings to the destination.","type":"string"},"status":{"description":"The status of the publishing destination.","type":"string"},"tags":{"description":"Describes a tag.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:guardduty:getThreatEntitySet":{"description":"Resource Type definition for AWS::GuardDuty::ThreatEntitySet","inputs":{"properties":{"detectorId":{"type":"string","description":"The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.\n\nTo find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"id":{"type":"string","description":"Returns the unique ID associated with the newly created threat entity set."}},"required":["id","detectorId"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the threat entity set was created.","type":"string"},"errorDetails":{"description":"The details associated with the *Error* status of your threat entity list.","type":"string"},"expectedBucketOwner":{"description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.","type":"string"},"id":{"description":"Returns the unique ID associated with the newly created threat entity set.","type":"string"},"location":{"description":"The URI of the file that contains the threat entity set.","type":"string"},"name":{"description":"The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).","type":"string"},"status":{"$ref":"#/types/aws-native:guardduty:ThreatEntitySetStatus","description":"The status of your `ThreatEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* ."},"tags":{"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the threat entity set was updated.","type":"string"}}}},"aws-native:guardduty:getThreatIntelSet":{"description":"Resource Type definition for AWS::GuardDuty::ThreatIntelSet","inputs":{"properties":{"detectorId":{"type":"string","description":"The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .\n\nTo find the `detectorId` in the current Region, see the\nSettings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"id":{"type":"string","description":"The unique ID of the `threatIntelSet` ."}},"required":["id","detectorId"]},"outputs":{"properties":{"expectedBucketOwner":{"description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhen you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.","type":"string"},"id":{"description":"The unique ID of the `threatIntelSet` .","type":"string"},"location":{"description":"The URI of the file that contains the ThreatIntelSet.","type":"string"},"name":{"description":"The user-friendly name to identify the ThreatIntelSet.\n\nThe name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).","type":"string"},"tags":{"description":"The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:guardduty:getTrustedEntitySet":{"description":"Resource Type definition for AWS::GuardDuty::TrustedEntitySet","inputs":{"properties":{"detectorId":{"type":"string","description":"The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.\n\nTo find the `detectorId` in the current Region, see the Settings page in the GuardDuty console, or run the [ListDetectors](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html) API."},"id":{"type":"string"}},"required":["id","detectorId"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the trusted entity set was created.","type":"string"},"errorDetails":{"description":"Specifies the error details when the status of the trusted entity set shows as *Error* .","type":"string"},"expectedBucketOwner":{"description":"The AWS account ID that owns the Amazon S3 bucket specified in the *Location* field.\n\nWhether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the `DetectorId` value owns the S3 bucket in the `Location` field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.","type":"string"},"id":{"type":"string"},"location":{"description":"The URI of the file that contains the trusted entity set.","type":"string"},"name":{"description":"A user-friendly name to identify the trusted entity set. Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_).","type":"string"},"status":{"$ref":"#/types/aws-native:guardduty:TrustedEntitySetStatus","description":"The status of your `TrustedEntitySet` . For information about valid status values, see [Understanding list statuses](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_upload-lists.html#guardduty-entity-list-statuses) in the *Amazon GuardDuty User Guide* ."},"tags":{"description":"The tags to be added to a new trusted entity set resource. Each tag consists of a key and an optional value, both of which you define.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the trusted entity set was updated.","type":"string"}}}},"aws-native:healthimaging:getDatastore":{"description":"Definition of AWS::HealthImaging::Datastore Resource Type","inputs":{"properties":{"datastoreId":{"type":"string","description":"The data store identifier."}},"required":["datastoreId"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the data store was created.","type":"string"},"datastoreArn":{"description":"The Amazon Resource Name (ARN) for the data store.","type":"string"},"datastoreId":{"description":"The data store identifier.","type":"string"},"datastoreStatus":{"$ref":"#/types/aws-native:healthimaging:DatastoreStatus","description":"The data store status."},"updatedAt":{"description":"The timestamp when the data store was last updated.","type":"string"}}}},"aws-native:healthlake:getFhirDatastore":{"description":"HealthLake FHIR Datastore","inputs":{"properties":{"datastoreId":{"type":"string","description":"The Amazon generated Data Store id. This id is in the output from the initial Data Store creation call."}},"required":["datastoreId"]},"outputs":{"properties":{"createdAt":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreCreatedAt"},"datastoreArn":{"description":"The Data Store ARN is generated during the creation of the Data Store and can be found in the output from the initial Data Store creation request.","type":"string"},"datastoreEndpoint":{"description":"The endpoint for the created Data Store.","type":"string"},"datastoreId":{"description":"The Amazon generated Data Store id. This id is in the output from the initial Data Store creation call.","type":"string"},"datastoreStatus":{"$ref":"#/types/aws-native:healthlake:FhirDatastoreDatastoreStatus","description":"The status of the FHIR Data Store. Possible statuses are ‘CREATING’, ‘ACTIVE’, ‘DELETING’, ‘DELETED’."},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iam:getGroup":{"description":"Creates a new group.\n  For information about the number of groups you can create, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*.","inputs":{"properties":{"groupName":{"type":"string","description":"The name of the group to create. Do not include the path in this value.\n The group name must be unique within the account. Group names are not distinguished by case. For example, you cannot create groups named both \"ADMINS\" and \"admins\". If you don't specify a name, CFN generates a unique physical ID and uses that ID for the group name.\n  If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.\n  If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``."}},"required":["groupName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the specified `AWS::IAM::Group` resource. For example: `arn:aws:iam::123456789012:group/mystack-mygroup-1DZETITOWEKVO` .","type":"string"},"managedPolicyArns":{"description":"The Amazon Resource Name (ARN) of the IAM policy you want to attach.\n For more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.","items":{"type":"string"},"type":"array"},"path":{"description":"The path to the group. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters.","type":"string"},"policies":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM group. To view AWS::IAM::Group snippets, see [Declaring an Group Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-group).\n  The name of each inline policy for a role, user, or group must be unique. If you don't choose unique names, updates to the IAM identity will fail. \n  For information about limits on the number of inline policies that you can embed in a group, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*.","items":{"$ref":"#/types/aws-native:iam:GroupPolicy"},"type":"array"}}}},"aws-native:iam:getGroupPolicy":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM group.\n A group can also have managed policies attached to it. To attach a managed policy to a group, use [AWS::IAM::Group](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.\n For information about the maximum number of inline policies that you can embed in a group, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","inputs":{"properties":{"groupName":{"type":"string","description":"The name of the group to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-."},"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"required":["policyName","groupName"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::GroupPolicy` for more information about the expected schema for this property."}}}},"aws-native:iam:getInstanceProfile":{"description":"Creates a new instance profile. For information about instance profiles, see [Using instance profiles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html).\n  For information about the number of instance profiles you can create, see [object quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *User Guide*.","inputs":{"properties":{"instanceProfileName":{"type":"string","description":"The name of the instance profile to create.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"required":["instanceProfileName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the instance profile. For example:\n\n`{\"Fn::GetAtt\" : [\"MyProfile\", \"Arn\"] }`\n\nThis returns a value such as `arn:aws:iam::1234567890:instance-profile/MyProfile-ASDNSDLKJ` .","type":"string"},"roles":{"description":"The name of the role to associate with the instance profile. Only one role can be assigned to an EC2 instance at a time, and all applications on the instance share the same role and permissions.","items":{"type":"string"},"type":"array"}}}},"aws-native:iam:getManagedPolicy":{"description":"Creates a new managed policy for your AWS-account.\n This operation creates a policy version with a version identifier of ``v1`` and sets v1 as the policy's default version. For more information about policy versions, see [Versioning for managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html) in the *IAM User Guide*.\n As a best practice, you can validate your IAM policies. To learn more, see [Validating IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html) in the *IAM User Guide*.\n For more information about managed policies in general, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.","inputs":{"properties":{"policyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the managed policy that you want information about.\n\nFor more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* ."}},"required":["policyArn"]},"outputs":{"properties":{"attachmentCount":{"description":"The number of principal entities (users, groups, and roles) that the policy is attached to.","type":"integer"},"createDate":{"description":"The date and time, in [ISO 8601 date-time format](https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601) , when the policy was created.","type":"string"},"defaultVersionId":{"description":"The identifier for the version of the policy that is set as the default (operative) version.\n\nFor more information about policy versions, see [Versioning for managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-versions.html) in the *IAM User Guide* .","type":"string"},"groups":{"description":"The name (friendly name, not ARN) of the group to attach the policy to.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","items":{"type":"string"},"type":"array"},"isAttachable":{"description":"Specifies whether the policy can be attached to an IAM user, group, or role.","type":"boolean"},"permissionsBoundaryUsageCount":{"description":"The number of entities (users and roles) for which the policy is used as the permissions boundary.\n\nFor more information about permissions boundaries, see [Permissions boundaries for IAM identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .","type":"integer"},"policyArn":{"description":"The Amazon Resource Name (ARN) of the managed policy that you want information about.\n\nFor more information about ARNs, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *AWS General Reference* .","type":"string"},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON policy document that you want to use as the content for the new policy.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The maximum length of the policy document that you can pass in this operation, including whitespace, is listed below. To view the maximum character counts of a managed policy with no whitespaces, see [IAM and character quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-quotas-entity-length).\n To learn more about JSON policy grammar, see [Grammar of the IAM JSON policy language](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html) in the *IAM User Guide*. \n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::ManagedPolicy` for more information about the expected schema for this property."},"policyId":{"description":"The stable and unique string identifying the policy.\n\nFor more information about IDs, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* .","type":"string"},"roles":{"description":"The name (friendly name, not ARN) of the role to attach the policy to.\n This parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-\n  If an external policy (such as ``AWS::IAM::Policy`` or ``AWS::IAM::ManagedPolicy``) has a ``Ref`` to a role and if a resource (such as ``AWS::ECS::Service``) also has a ``Ref`` to the same role, add a ``DependsOn`` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an ``AWS::ECS::Service`` resource, the ``DependsOn`` attribute ensures that CFN deletes the ``AWS::ECS::Service`` resource before deleting its role's policy.","items":{"type":"string"},"type":"array"},"updateDate":{"description":"The date and time, in [ISO 8601 date-time format](https://docs.aws.amazon.com/http://www.iso.org/iso/iso8601) , when the policy was last updated.\n\nWhen a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.","type":"string"},"users":{"description":"The name (friendly name, not ARN) of the IAM user to attach the policy to.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","items":{"type":"string"},"type":"array"}}}},"aws-native:iam:getOidcProvider":{"description":"Resource Type definition for AWS::IAM::OIDCProvider","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the OIDC provider"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the OIDC provider","type":"string"},"clientIdList":{"description":"A list of client IDs (also known as audiences) that are associated with the specified IAM OIDC provider resource object. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) .","items":{"type":"string"},"type":"array"},"tags":{"description":"A list of tags that are attached to the specified IAM OIDC provider. The returned list of tags is sorted by tag key. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"thumbprintList":{"description":"A list of certificate thumbprints that are associated with the specified IAM OIDC provider resource object. For more information, see [CreateOpenIDConnectProvider](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateOpenIDConnectProvider.html) .\n\nThis property is optional. If it is not included, IAM will retrieve and use the top intermediate certificate authority (CA) thumbprint of the OpenID Connect identity provider server certificate.","items":{"type":"string"},"type":"array"}}}},"aws-native:iam:getRole":{"description":"Creates a new role for your AWS-account.\n  For more information about roles, see [IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) in the *IAM User Guide*. For information about quotas for role names and the number of roles you can create, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","inputs":{"properties":{"roleName":{"type":"string","description":"A name for the IAM role, up to 64 characters in length. For valid values, see the `RoleName` parameter for the [`CreateRole`](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html) action in the *IAM User Guide* .\n\nThis parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-. The role name must be unique within the account. Role names are not distinguished by case. For example, you cannot create roles named both \"Role1\" and \"role1\".\n\nIf you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the role name.\n\nIf you specify a name, you must specify the `CAPABILITY_NAMED_IAM` value to acknowledge your template's capabilities. For more information, see [Acknowledging IAM Resources in CloudFormation Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities) .\n\n\u003e Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using `Fn::Join` and `AWS::Region` to create a Region-specific name, as in the following example: `{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}` ."}},"required":["roleName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the role. For example:\n\n`{\"Fn::GetAtt\" : [\"MyRole\", \"Arn\"] }`\n\nThis will return a value such as `arn:aws:iam::1234567890:role/MyRole-AJJHDSKSDF` .","type":"string"},"assumeRolePolicyDocument":{"$ref":"pulumi.json#/Any","description":"The trust policy that is associated with this role. Trust policies define which entities can assume the role. You can associate only one trust policy with a role. For an example of a policy that can be used to assume a role, see [Template Examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#aws-resource-iam-role--examples). For more information about the elements that you can use in an IAM policy, see [Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the *User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::Role` for more information about the expected schema for this property."},"description":{"description":"A description of the role that you provide.","type":"string"},"managedPolicyArns":{"description":"A list of Amazon Resource Names (ARNs) of the IAM managed policies that you want to attach to the role.\n For more information about ARNs, see [Amazon Resource Names (ARNs) and Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.","items":{"type":"string"},"type":"array"},"maxSessionDuration":{"description":"The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default value of one hour is applied. This setting can have a value from 1 hour to 12 hours.\n Anyone who assumes the role from the CLI or API can use the ``DurationSeconds`` API parameter or the ``duration-seconds``CLI parameter to request a longer session. The ``MaxSessionDuration`` setting determines the maximum duration that can be requested using the ``DurationSeconds`` parameter. If users don't specify a value for the ``DurationSeconds`` parameter, their security credentials are valid for one hour by default. This applies when you use the ``AssumeRole*`` API operations or the ``assume-role*``CLI operations but does not apply when you use those operations to create a console URL. For more information, see [Using IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html) in the *IAM User Guide*.","type":"integer"},"permissionsBoundary":{"description":"The ARN of the policy used to set the permissions boundary for the role.\n For more information about permissions boundaries, see [Permissions boundaries for IAM identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide*.","type":"string"},"policies":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM role.\n\nWhen you embed an inline policy in a role, the inline policy is used as part of the role's access (permissions) policy. The role's trust policy is created at the same time as the role. You can update a role's trust policy later. For more information about IAM roles, go to [Using Roles to Delegate Permissions and Federate Identities](https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html) .\n\nA role can also have an attached managed policy. For information about policies, see [Managed Policies and Inline Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide* .\n\nFor information about limits on the number of inline policies that you can embed with a role, see [Limitations on IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *IAM User Guide* .\n\n\u003e If an external policy (such as `AWS::IAM::Policy` or `AWS::IAM::ManagedPolicy` ) has a `Ref` to a role and if a resource (such as `AWS::ECS::Service` ) also has a `Ref` to the same role, add a `DependsOn` attribute to the resource to make the resource depend on the external policy. This dependency ensures that the role's policy is available throughout the resource's lifecycle. For example, when you delete a stack with an `AWS::ECS::Service` resource, the `DependsOn` attribute ensures that CloudFormation deletes the `AWS::ECS::Service` resource before deleting its role's policy.","items":{"$ref":"#/types/aws-native:iam:RolePolicy"},"type":"array"},"roleId":{"description":"Returns the stable and unique string identifying the role. For example, `AIDAJQABLZS4A3QDU576Q` .\n\nFor more information about IDs, see [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html) in the *IAM User Guide* .","type":"string"},"tags":{"description":"A list of tags that are attached to the role. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iam:getRolePolicy":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM role.\n When you embed an inline policy in a role, the inline policy is used as part of the role's access (permissions) policy. The role's trust policy is created at the same time as the role, using [CreateRole](https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html). You can update a role's trust policy using [UpdateAssumeRolePolicy](https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateAssumeRolePolicy.html). For information about roles, see [roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html) in the *IAM User Guide*.\n A role can also have a managed policy attached to it. To attach a managed policy to a role, use [AWS::IAM::Role](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.\n For information about the maximum number of inline policies that you can embed with a role, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","inputs":{"properties":{"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"roleName":{"type":"string","description":"The name of the role to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"required":["policyName","roleName"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::RolePolicy` for more information about the expected schema for this property."}}}},"aws-native:iam:getSamlProvider":{"description":"Resource Type definition for AWS::IAM::SAMLProvider","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN) of the SAML provider"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the SAML provider","type":"string"},"assertionEncryptionMode":{"$ref":"#/types/aws-native:iam:SamlProviderAssertionEncryptionMode","description":"The encryption setting for the SAML provider"},"privateKeyList":{"description":"The private key metadata for the SAML provider.","items":{"$ref":"#/types/aws-native:iam:SamlProviderSamlPrivateKey"},"type":"array"},"samlMetadataDocument":{"description":"An XML document generated by an identity provider (IdP) that supports SAML 2.0. The document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP.\n\nFor more information, see [About SAML 2.0-based federation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html) in the *IAM User Guide*","type":"string"},"samlProviderUuid":{"description":"The unique identifier assigned to the SAML provider","type":"string"},"tags":{"description":"A list of tags that you want to attach to the new IAM SAML provider. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .\n\n\u003e If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iam:getServerCertificate":{"description":"Resource Type definition for AWS::IAM::ServerCertificate","inputs":{"properties":{"serverCertificateName":{"type":"string","description":"The name for the server certificate. Do not include the path in this value. The name of the certificate cannot contain any spaces.\n\nThis parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"required":["serverCertificateName"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the server certificate","type":"string"},"path":{"description":"The path for the server certificate. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide* .\n\nThis parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) ) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! ( `\\u0021` ) through the DEL character ( `\\u007F` ), including most punctuation characters, digits, and upper and lowercased letters.\n\n\u003e If you are uploading a server certificate specifically for use with Amazon CloudFront distributions, you must specify a path using the `path` parameter. The path must begin with `/cloudfront` and must include a trailing slash (for example, `/cloudfront/test/` ).","type":"string"},"tags":{"description":"A list of tags that are attached to the server certificate. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iam:getServiceLinkedRole":{"description":"Resource Type definition for AWS::IAM::ServiceLinkedRole","inputs":{"properties":{"roleName":{"type":"string","description":"The name of the role."}},"required":["roleName"]},"outputs":{"properties":{"description":{"description":"The description of the role.","type":"string"},"roleName":{"description":"The name of the role.","type":"string"}}}},"aws-native:iam:getUser":{"description":"Creates a new IAM user for your AWS-account.\n  For information about quotas for the number of IAM users you can create, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","inputs":{"properties":{"userName":{"type":"string","description":"The name of the user to create. Do not include the path in this value.\n This parameter allows (per its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-. The user name must be unique within the account. User names are not distinguished by case. For example, you cannot create users named both \"John\" and \"john\".\n If you don't specify a name, CFN generates a unique physical ID and uses that ID for the user name.\n If you specify a name, you must specify the ``CAPABILITY_NAMED_IAM`` value to acknowledge your template's capabilities. For more information, see [Acknowledging Resources in Templates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#using-iam-capabilities).\n  Naming an IAM resource can cause an unrecoverable error if you reuse the same template in multiple Regions. To prevent this, we recommend using ``Fn::Join`` and ``AWS::Region`` to create a Region-specific name, as in the following example: ``{\"Fn::Join\": [\"\", [{\"Ref\": \"AWS::Region\"}, {\"Ref\": \"MyResourceName\"}]]}``."}},"required":["userName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the specified `AWS::IAM::User` resource. For example: `arn:aws:iam::123456789012:user/mystack-myuser-1CCXAFG2H2U4D` .","type":"string"},"groups":{"description":"A list of group names to which you want to add the user.","items":{"type":"string"},"type":"array"},"loginProfile":{"$ref":"#/types/aws-native:iam:UserLoginProfile","description":"Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the console.\n You can use the CLI, the AWS API, or the *Users* page in the IAM console to create a password for any IAM user. Use [ChangePassword](https://docs.aws.amazon.com/IAM/latest/APIReference/API_ChangePassword.html) to update your own existing password in the *My Security Credentials* page in the console.\n For more information about managing passwords, see [Managing passwords](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html) in the *User Guide*."},"managedPolicyArns":{"description":"A list of Amazon Resource Names (ARNs) of the IAM managed policies that you want to attach to the user.\n For more information about ARNs, see [Amazon Resource Names (ARNs) and Service Namespaces](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.","items":{"type":"string"},"type":"array"},"path":{"description":"The path for the user name. For more information about paths, see [IAM identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) in the *IAM User Guide*.\n This parameter is optional. If it is not included, it defaults to a slash (/).\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (``\\u0021``) through the DEL character (``\\u007F``), including most punctuation characters, digits, and upper and lowercased letters.","type":"string"},"permissionsBoundary":{"description":"The ARN of the managed policy that is used to set the permissions boundary for the user.\n A permissions boundary policy defines the maximum permissions that identity-based policies can grant to an entity, but does not grant permissions. Permissions boundaries do not define the maximum permissions that a resource-based policy can grant to an entity. To learn more, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide*.\n For more information about policy types, see [Policy types](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#access_policy-types) in the *IAM User Guide*.","type":"string"},"policies":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM user. To view AWS::IAM::User snippets, see [Declaring an User Resource](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-user).\n  The name of each policy for a role, user, or group must be unique. If you don't choose unique names, updates to the IAM identity will fail. \n  For information about limits on the number of inline policies that you can embed in a user, see [Limitations on Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html) in the *User Guide*.","items":{"$ref":"#/types/aws-native:iam:UserPolicy"},"type":"array"},"tags":{"description":"A list of tags that you want to attach to the new user. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide*.\n  If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iam:getUserPolicy":{"description":"Adds or updates an inline policy document that is embedded in the specified IAM user.\n An IAM user can also have a managed policy attached to it. To attach a managed policy to a user, use [AWS::IAM::User](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html). To create a new managed policy, use [AWS::IAM::ManagedPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html). For information about policies, see [Managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html) in the *IAM User Guide*.\n For information about the maximum number of inline policies that you can embed in a user, see [IAM and quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html) in the *IAM User Guide*.","inputs":{"properties":{"policyName":{"type":"string","description":"The name of the policy document.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"},"userName":{"type":"string","description":"The name of the user to associate the policy with.\n This parameter allows (through its [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex)) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-"}},"required":["policyName","userName"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The policy document.\n You must provide policies in JSON format in IAM. However, for CFN templates formatted in YAML, you can provide the policy in JSON or YAML format. CFN always converts a YAML policy to JSON format before submitting it to IAM.\n The [regex pattern](https://docs.aws.amazon.com/http://wikipedia.org/wiki/regex) used to validate this parameter is a string of characters consisting of the following:\n  +  Any printable ASCII character ranging from the space character (``\\u0020``) through the end of the ASCII character range\n  +  The printable characters in the Basic Latin and Latin-1 Supplement character set (through ``\\u00FF``)\n  +  The special characters tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``)\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IAM::UserPolicy` for more information about the expected schema for this property."}}}},"aws-native:iam:getVirtualMfaDevice":{"description":"Resource Type definition for AWS::IAM::VirtualMFADevice","inputs":{"properties":{"serialNumber":{"type":"string","description":"Returns the serial number for the specified `AWS::IAM::VirtualMFADevice` resource."}},"required":["serialNumber"]},"outputs":{"properties":{"serialNumber":{"description":"Returns the serial number for the specified `AWS::IAM::VirtualMFADevice` resource.","type":"string"},"tags":{"description":"A list of tags that you want to attach to the new IAM virtual MFA device. Each tag consists of a key name and an associated value. For more information about tagging, see [Tagging IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the *IAM User Guide* .\n\n\u003e If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request fails and the resource is not created.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"users":{"description":"The IAM user associated with this virtual MFA device.","items":{"type":"string"},"type":"array"}}}},"aws-native:identitystore:getGroup":{"description":"Resource Type definition for AWS::IdentityStore::Group","inputs":{"properties":{"groupId":{"type":"string","description":"The unique identifier for a group in the identity store."},"identityStoreId":{"type":"string","description":"The globally unique identifier for the identity store."}},"required":["groupId","identityStoreId"]},"outputs":{"properties":{"description":{"description":"A string containing the description of the group.","type":"string"},"displayName":{"description":"A string containing the name of the group. This value is commonly displayed when the group is referenced.","type":"string"},"groupId":{"description":"The unique identifier for a group in the identity store.","type":"string"}}}},"aws-native:identitystore:getGroupMembership":{"description":"Resource Type Definition for AWS:IdentityStore::GroupMembership","inputs":{"properties":{"identityStoreId":{"type":"string","description":"The globally unique identifier for the identity store."},"membershipId":{"type":"string","description":"The identifier for a GroupMembership in the identity store."}},"required":["membershipId","identityStoreId"]},"outputs":{"properties":{"membershipId":{"description":"The identifier for a GroupMembership in the identity store.","type":"string"}}}},"aws-native:imagebuilder:getComponent":{"description":"Resource schema for AWS::ImageBuilder::Component","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the component."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the component.","type":"string"},"encrypted":{"description":"The encryption status of the component.","type":"boolean"},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ComponentLatestVersion","description":"The latest version references of the component."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags associated with the component.","type":"object"},"type":{"$ref":"#/types/aws-native:imagebuilder:ComponentType","description":"The type of the component denotes whether the component is used to build the image or only to test it. "}}}},"aws-native:imagebuilder:getContainerRecipe":{"description":"Resource schema for AWS::ImageBuilder::ContainerRecipe","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the container recipe."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the container recipe.","type":"string"},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ContainerRecipeLatestVersion","description":"The latest version references of the container recipe."},"tags":{"additionalProperties":{"type":"string"},"description":"Tags that are attached to the container recipe.","type":"object"}}}},"aws-native:imagebuilder:getDistributionConfiguration":{"description":"Resource schema for AWS::ImageBuilder::DistributionConfiguration","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the distribution configuration."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the distribution configuration.","type":"string"},"description":{"description":"The description of the distribution configuration.","type":"string"},"distributions":{"description":"The distributions of the distribution configuration.","items":{"$ref":"#/types/aws-native:imagebuilder:DistributionConfigurationDistribution"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags associated with the component.","type":"object"}}}},"aws-native:imagebuilder:getImage":{"description":"Resource schema for AWS::ImageBuilder::Image","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the image.","type":"string"},"executionRole":{"description":"The execution role name/ARN for the image build, if provided","type":"string"},"imageId":{"description":"The AMI ID of the EC2 AMI in current region.","type":"string"},"imageUri":{"description":"URI for containers created in current Region with default ECR image tag","type":"string"},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ImageLatestVersion","description":"The latest version references of the image."},"loggingConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageLoggingConfiguration","description":"The logging configuration settings for the image."},"name":{"description":"The name of the image.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags associated with the image.","type":"object"}}}},"aws-native:imagebuilder:getImagePipeline":{"description":"Resource schema for AWS::ImageBuilder::ImagePipeline","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image pipeline."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the image pipeline.","type":"string"},"containerRecipeArn":{"description":"The Amazon Resource Name (ARN) of the container recipe that defines how images are configured and tested.","type":"string"},"deploymentId":{"description":"The deployment ID of the pipeline, used for resource create/update triggers.","type":"string"},"description":{"description":"The description of the image pipeline.","type":"string"},"distributionConfigurationArn":{"description":"The Amazon Resource Name (ARN) of the distribution configuration associated with this image pipeline.","type":"string"},"enhancedImageMetadataEnabled":{"description":"Collects additional information about the image being created, including the operating system (OS) version and package list.","type":"boolean"},"executionRole":{"description":"The execution role name/ARN for the image build, if provided","type":"string"},"imageRecipeArn":{"description":"The Amazon Resource Name (ARN) of the image recipe that defines how images are configured, tested, and assessed.","type":"string"},"imageScanningConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineImageScanningConfiguration","description":"Contains settings for vulnerability scans."},"imageTestsConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineImageTestsConfiguration","description":"The image tests configuration of the image pipeline."},"infrastructureConfigurationArn":{"description":"The Amazon Resource Name (ARN) of the infrastructure configuration associated with this image pipeline.","type":"string"},"loggingConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelinePipelineLoggingConfiguration","description":"The logging configuration settings for the image pipeline."},"schedule":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineSchedule","description":"The schedule of the image pipeline."},"status":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineStatus","description":"The status of the image pipeline."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags of this image pipeline.","type":"object"},"workflows":{"description":"Workflows to define the image build process","items":{"$ref":"#/types/aws-native:imagebuilder:ImagePipelineWorkflowConfiguration"},"type":"array"}}}},"aws-native:imagebuilder:getImageRecipe":{"description":"Resource schema for AWS::ImageBuilder::ImageRecipe","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image recipe."}},"required":["arn"]},"outputs":{"properties":{"additionalInstanceConfiguration":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeAdditionalInstanceConfiguration","description":"Specify additional settings and launch scripts for your build instances."},"amiTags":{"additionalProperties":{"type":"string"},"description":"The tags to apply to the AMI created by this image recipe.","type":"object"},"arn":{"description":"The Amazon Resource Name (ARN) of the image recipe.","type":"string"},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:ImageRecipeLatestVersion","description":"The latest version references of the image recipe."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags of the image recipe.","type":"object"}}}},"aws-native:imagebuilder:getInfrastructureConfiguration":{"description":"Resource schema for AWS::ImageBuilder::InfrastructureConfiguration","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the infrastructure configuration."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the infrastructure configuration.","type":"string"},"description":{"description":"The description of the infrastructure configuration.","type":"string"},"instanceMetadataOptions":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationInstanceMetadataOptions","description":"The instance metadata option settings for the infrastructure configuration."},"instanceProfileName":{"description":"The instance profile of the infrastructure configuration.","type":"string"},"instanceTypes":{"description":"The instance types of the infrastructure configuration.","items":{"type":"string"},"type":"array"},"keyPair":{"description":"The EC2 key pair of the infrastructure configuration..","type":"string"},"logging":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationLogging","description":"The logging configuration of the infrastructure configuration."},"placement":{"$ref":"#/types/aws-native:imagebuilder:InfrastructureConfigurationPlacement","description":"The placement option settings for the infrastructure configuration."},"resourceTags":{"additionalProperties":{"type":"string"},"description":"The tags attached to the resource created by Image Builder.","type":"object"},"securityGroupIds":{"description":"The security group IDs of the infrastructure configuration.","items":{"type":"string"},"type":"array"},"snsTopicArn":{"description":"The SNS Topic Amazon Resource Name (ARN) of the infrastructure configuration.","type":"string"},"subnetId":{"description":"The subnet ID of the infrastructure configuration.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags associated with the component.","type":"object"},"terminateInstanceOnFailure":{"description":"The terminate instance on failure configuration of the infrastructure configuration.","type":"boolean"}}}},"aws-native:imagebuilder:getLifecyclePolicy":{"description":"Resource schema for AWS::ImageBuilder::LifecyclePolicy","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the lifecycle policy."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the lifecycle policy.","type":"string"},"description":{"description":"The description of the lifecycle policy.","type":"string"},"executionRole":{"description":"The execution role of the lifecycle policy.","type":"string"},"policyDetails":{"description":"The policy details of the lifecycle policy.","items":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyPolicyDetail"},"type":"array"},"resourceSelection":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyResourceSelection","description":"The resource selection of the lifecycle policy."},"resourceType":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyResourceType","description":"The resource type of the lifecycle policy."},"status":{"$ref":"#/types/aws-native:imagebuilder:LifecyclePolicyStatus","description":"The status of the lifecycle policy."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags associated with the lifecycle policy.","type":"object"}}}},"aws-native:imagebuilder:getWorkflow":{"description":"Resource schema for AWS::ImageBuilder::Workflow","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the workflow."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the workflow.","type":"string"},"latestVersion":{"$ref":"#/types/aws-native:imagebuilder:WorkflowLatestVersion","description":"The latest version references of the workflow."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags associated with the workflow.","type":"object"}}}},"aws-native:index:cidr":{"inputs":{"properties":{"cidrBits":{"type":"integer"},"count":{"type":"integer"},"ipBlock":{"type":"string"}},"required":["ipBlock","count","cidrBits"]},"outputs":{"properties":{"subnets":{"items":{"type":"string"},"type":"array"}},"required":["subnets"]}},"aws-native:index:getAccountId":{"outputs":{"properties":{"accountId":{"type":"string"}},"required":["accountId"]}},"aws-native:index:getAzs":{"inputs":{"properties":{"region":{"type":"string"}}},"outputs":{"properties":{"azs":{"items":{"type":"string"},"type":"array"}},"required":["azs"]}},"aws-native:index:getPartition":{"outputs":{"properties":{"dnsSuffix":{"description":"Base DNS domain name for the current partition (e.g., `amazonaws.com` in AWS Commercial, `amazonaws.com.cn` in AWS China).","type":"string"},"partition":{"description":"Identifier of the current partition (e.g., `aws` in AWS Commercial, `aws-cn` in AWS China).","type":"string"}},"required":["partition","dnsSuffix"]}},"aws-native:index:getRegion":{"outputs":{"properties":{"region":{"type":"string"}},"required":["region"]}},"aws-native:index:getSsmParameterList":{"inputs":{"properties":{"name":{"type":"string"}},"required":["name"]},"outputs":{"properties":{"value":{"items":{"type":"string"},"type":"array"}},"required":["value"]}},"aws-native:index:getSsmParameterString":{"inputs":{"properties":{"name":{"type":"string"}},"required":["name"]},"outputs":{"properties":{"value":{"type":"string"}},"required":["value"]}},"aws-native:index:getUrlSuffix":{"outputs":{"properties":{"urlSuffix":{"type":"string"}},"required":["urlSuffix"]}},"aws-native:index:importValue":{"inputs":{"properties":{"name":{"type":"string"}},"required":["name"]},"outputs":{"properties":{"value":{"$ref":"pulumi.json#/Any"}}}},"aws-native:inspector:getAssessmentTarget":{"description":"Resource Type definition for AWS::Inspector::AssessmentTarget","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the assessment target that is created."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that specifies the assessment target that is created.","type":"string"},"resourceGroupArn":{"description":"The ARN that specifies the resource group that is used to create the assessment target. If `resourceGroupArn` is not specified, all EC2 instances in the current AWS account and Region are included in the assessment target.","type":"string"}}}},"aws-native:inspector:getAssessmentTemplate":{"description":"Resource Type definition for AWS::Inspector::AssessmentTemplate","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the assessment template that is created."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that specifies the assessment template that is created.","type":"string"}}}},"aws-native:inspector:getResourceGroup":{"description":"Resource Type definition for AWS::Inspector::ResourceGroup","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) that specifies the resource group that is created."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that specifies the resource group that is created.","type":"string"}}}},"aws-native:inspectorv2:getCisScanConfiguration":{"description":"CIS Scan Configuration resource schema","inputs":{"properties":{"arn":{"type":"string","description":"CIS Scan configuration unique identifier"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"CIS Scan configuration unique identifier","type":"string"},"scanName":{"description":"Name of the scan","type":"string"},"schedule":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationSchedule","description":"The CIS scan configuration's schedule."},"securityLevel":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationCisSecurityLevel","description":"The CIS scan configuration's CIS Benchmark level."},"tags":{"additionalProperties":{"type":"string"},"description":"The CIS scan configuration's tags.","type":"object"},"targets":{"$ref":"#/types/aws-native:inspectorv2:CisScanConfigurationCisTargets","description":"The CIS scan configuration's targets."}}}},"aws-native:inspectorv2:getCodeSecurityIntegration":{"description":"Inspector CodeSecurityIntegration resource schema","inputs":{"properties":{"arn":{"type":"string","description":"Code Security Integration ARN"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Code Security Integration ARN","type":"string"},"authorizationUrl":{"description":"Authorization URL for OAuth flow","type":"string"},"createdAt":{"description":"Creation timestamp","type":"string"},"lastUpdatedAt":{"description":"Last update timestamp","type":"string"},"name":{"description":"Code Security Integration name","type":"string"},"status":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationIntegrationStatus","description":"Integration Status"},"statusReason":{"description":"Reason for the current status","type":"string"},"type":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityIntegrationIntegrationType","description":"Integration Type"}}}},"aws-native:inspectorv2:getCodeSecurityScanConfiguration":{"description":"Inspector CodeSecurityScanConfiguration resource schema","inputs":{"properties":{"arn":{"type":"string","description":"Code Security Scan Configuration ARN"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Code Security Scan Configuration ARN","type":"string"},"configuration":{"$ref":"#/types/aws-native:inspectorv2:CodeSecurityScanConfiguration","description":"Code Security Scan Configuration"}}}},"aws-native:inspectorv2:getFilter":{"description":"Inspector Filter resource schema","inputs":{"properties":{"arn":{"type":"string","description":"Findings filter ARN."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Findings filter ARN.","type":"string"},"description":{"description":"Findings filter description.","type":"string"},"filterAction":{"$ref":"#/types/aws-native:inspectorv2:FilterAction","description":"Findings filter action."},"filterCriteria":{"$ref":"#/types/aws-native:inspectorv2:FilterCriteria","description":"Findings filter criteria."},"name":{"description":"Findings filter name.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags attached to the filter.","type":"object"}}}},"aws-native:internetmonitor:getMonitor":{"description":"Represents a monitor, which defines the monitoring boundaries for measurements that Internet Monitor publishes information about for an application","inputs":{"properties":{"monitorName":{"type":"string","description":"The name of the monitor. A monitor name can contain only alphanumeric characters, dashes (-), periods (.), and underscores (_)."}},"required":["monitorName"]},"outputs":{"properties":{"createdAt":{"description":"The time when the monitor was created.","type":"string"},"healthEventsConfig":{"$ref":"#/types/aws-native:internetmonitor:MonitorHealthEventsConfig","description":"A complex type with the configuration information that determines the threshold and other conditions for when Internet Monitor creates a health event for an overall performance or availability issue, across an application's geographies.\n\nDefines the percentages, for overall performance scores and availability scores for an application, that are the thresholds for when Internet Monitor creates a health event. You can override the defaults to set a custom threshold for overall performance or availability scores, or both.\n\nYou can also set thresholds for local health scores,, where Internet Monitor creates a health event when scores cross a threshold for one or more city-networks, in addition to creating an event when an overall score crosses a threshold.\n\nIf you don't set a health event threshold, the default value is 95%.\n\nFor local thresholds, you also set a minimum percentage of overall traffic that is impacted by an issue before Internet Monitor creates an event. In addition, you can disable local thresholds, for performance scores, availability scores, or both.\n\nFor more information, see [Change health event thresholds](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-IM-overview.html#IMUpdateThresholdFromOverview) in the Internet Monitor section of the *CloudWatch User Guide* ."},"internetMeasurementsLogDelivery":{"$ref":"#/types/aws-native:internetmonitor:MonitorInternetMeasurementsLogDelivery","description":"Publish internet measurements for a monitor for all city-networks (up to the 500,000 service limit) to another location, such as an Amazon S3 bucket. Measurements are also published to Amazon CloudWatch Logs for the first 500 (by traffic volume) city-networks (client locations and ASNs, typically internet service providers or ISPs)."},"maxCityNetworksToMonitor":{"description":"The maximum number of city-networks to monitor for your resources. A city-network is the location (city) where clients access your application resources from and the network, such as an internet service provider, that clients access the resources through.\n\nFor more information, see [Choosing a city-network maximum value](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/IMCityNetworksMaximum.html) in *Using Amazon CloudWatch Internet Monitor* .","type":"integer"},"modifiedAt":{"description":"The last time that the monitor was modified.","type":"string"},"monitorArn":{"description":"The Amazon Resource Name (ARN) of the monitor.","type":"string"},"processingStatus":{"$ref":"#/types/aws-native:internetmonitor:MonitorProcessingStatusCode","description":"The health of data processing for the monitor. For more information, see `ProcessingStatus` under [MonitorListMember](https://docs.aws.amazon.com/internet-monitor/latest/api/API_MonitorListMember.html) in the *Amazon CloudWatch Internet Monitor API Reference* ."},"processingStatusInfo":{"description":"Additional information about the health of the data processing for the monitor.","type":"string"},"resources":{"description":"The resources that have been added for the monitor, listed by their Amazon Resource Names (ARNs). Use this option to add or remove resources when making an update.\n\n\u003e Be aware that if you include content in the `Resources` field when you update a monitor, the `ResourcesToAdd` and `ResourcesToRemove` fields must be empty.","items":{"type":"string"},"type":"array"},"status":{"$ref":"#/types/aws-native:internetmonitor:MonitorConfigState","description":"The status of a monitor. The accepted values that you can specify for `Status` are `ACTIVE` and `INACTIVE` ."},"tags":{"description":"The tags for a monitor, listed as a set of *key:value* pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trafficPercentageToMonitor":{"description":"The percentage of the internet-facing traffic for your application that you want to monitor. You can also, optionally, set a limit for the number of city-networks (client locations and ASNs, typically internet service providers) that Internet Monitor will monitor traffic for. The city-networks maximum limit caps the number of city-networks that Internet Monitor monitors for your application, regardless of the percentage of traffic that you choose to monitor.","type":"integer"}}}},"aws-native:invoicing:getInvoiceUnit":{"description":"An invoice unit is a set of mutually exclusive accounts that correspond to your business entity. Invoice units allow you to separate AWS account costs and configures your invoice for each business entity.","inputs":{"properties":{"invoiceUnitArn":{"type":"string","description":"The ARN to identify an invoice unit. This information can't be modified or deleted."}},"required":["invoiceUnitArn"]},"outputs":{"properties":{"description":{"description":"The assigned description for an invoice unit. This information can't be modified or deleted.","type":"string"},"invoiceUnitArn":{"description":"The ARN to identify an invoice unit. This information can't be modified or deleted.","type":"string"},"lastModified":{"description":"The last time the invoice unit was updated. This is important to determine the version of invoice unit configuration used to create the invoices. Any invoice created after this modified time will use this invoice unit configuration.","type":"number"},"resourceTags":{"description":"The tag structure that contains a tag key and value.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"rule":{"$ref":"#/types/aws-native:invoicing:InvoiceUnitRule","description":"An `InvoiceUnitRule` object used the categorize invoice units."},"taxInheritanceDisabled":{"description":"Whether the invoice unit based tax inheritance is/ should be enabled or disabled.","type":"boolean"}}}},"aws-native:iot:getAccountAuditConfiguration":{"description":"Configures the Device Defender audit settings for this account. Settings include how audit notifications are sent and which audit checks are enabled or disabled.","inputs":{"properties":{"accountId":{"type":"string","description":"Your 12-digit account ID (used as the primary identifier for the CloudFormation resource)."}},"required":["accountId"]},"outputs":{"properties":{"auditCheckConfigurations":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditCheckConfigurations","description":"Specifies which audit checks are enabled and disabled for this account.\n\nSome data collection might start immediately when certain checks are enabled. When a check is disabled, any data collected so far in relation to the check is deleted. To disable a check, set the value of the `Enabled:` key to `false` .\n\nIf an enabled check is removed from the template, it will also be disabled.\n\nYou can't disable a check if it's used by any scheduled audit. You must delete the check from the scheduled audit or delete the scheduled audit itself to disable the check.\n\nFor more information on available audit checks see [AWS::IoT::AccountAuditConfiguration AuditCheckConfigurations](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iot-accountauditconfiguration-auditcheckconfigurations.html)"},"auditNotificationTargetConfigurations":{"$ref":"#/types/aws-native:iot:AccountAuditConfigurationAuditNotificationTargetConfigurations","description":"Information about the targets to which audit notifications are sent."},"roleArn":{"description":"The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.","type":"string"}}}},"aws-native:iot:getAuthorizer":{"description":"Creates an authorizer.","inputs":{"properties":{"authorizerName":{"type":"string","description":"The authorizer name."}},"required":["authorizerName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the authorizer.","type":"string"},"authorizerFunctionArn":{"description":"The authorizer's Lambda function ARN.","type":"string"},"enableCachingForHttp":{"description":"When `true` , the result from the authorizer's Lambda function is cached for clients that use persistent HTTP connections. The results are cached for the time specified by the Lambda function in `refreshAfterInSeconds` . This value doesn't affect authorization of clients that use MQTT connections.","type":"boolean"},"status":{"$ref":"#/types/aws-native:iot:AuthorizerStatus","description":"The status of the authorizer.\n\nValid values: `ACTIVE` | `INACTIVE`"},"tags":{"description":"Metadata which can be used to manage the custom authorizer.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: \u0026\u0026tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\"","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tokenKeyName":{"description":"The key used to extract the token from the HTTP headers.","type":"string"},"tokenSigningPublicKeys":{"additionalProperties":{"type":"string"},"description":"The public keys used to validate the token signature returned by your custom authentication service.","type":"object"}}}},"aws-native:iot:getBillingGroup":{"description":"Resource Type definition for AWS::IoT::BillingGroup","inputs":{"properties":{"billingGroupName":{"type":"string","description":"The name of the billing group."}},"required":["billingGroupName"]},"outputs":{"properties":{"arn":{"description":"The ARN of the billing group.","type":"string"},"billingGroupProperties":{"$ref":"#/types/aws-native:iot:BillingGroupPropertiesProperties","description":"The properties of the billing group."},"id":{"description":"The ID of the billing group.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getCaCertificate":{"description":"Registers a CA Certificate in IoT.","inputs":{"properties":{"id":{"type":"string","description":"The CA certificate ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the CA certificate. For example:\n\n`{ \"Fn::GetAtt\": [\"MyCACertificate\", \"Arn\"] }`\n\nA value similar to the following is returned:\n\n`arn:aws:iot:us-east-1:123456789012:cacert/a6be6b84559801927e35a8f901fae08b5971d78d1562e29504ff9663b276a5f5`","type":"string"},"autoRegistrationStatus":{"$ref":"#/types/aws-native:iot:CaCertificateAutoRegistrationStatus","description":"Whether the CA certificate is configured for auto registration of device certificates. Valid values are \"ENABLE\" and \"DISABLE\"."},"id":{"description":"The CA certificate ID.","type":"string"},"registrationConfig":{"$ref":"#/types/aws-native:iot:CaCertificateRegistrationConfig","description":"Information about the registration configuration."},"status":{"$ref":"#/types/aws-native:iot:CaCertificateStatus","description":"The status of the CA certificate.\n\nValid values are \"ACTIVE\" and \"INACTIVE\"."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getCertificate":{"description":"Use the AWS::IoT::Certificate resource to declare an AWS IoT X.509 certificate.","inputs":{"properties":{"id":{"type":"string","description":"The certificate ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) for the certificate. For example:\n\n`{ \"Fn::GetAtt\": [\"MyCertificate\", \"Arn\"] }`\n\nA value similar to the following is returned:\n\n`arn:aws:iot:ap-southeast-2:123456789012:cert/a1234567b89c012d3e4fg567hij8k9l01mno1p23q45678901rs234567890t1u2`","type":"string"},"id":{"description":"The certificate ID.","type":"string"},"status":{"$ref":"#/types/aws-native:iot:CertificateStatus","description":"The status of the certificate.\n\nValid values are ACTIVE, INACTIVE, REVOKED, PENDING_TRANSFER, and PENDING_ACTIVATION.\n\nThe status value REGISTER_INACTIVE is deprecated and should not be used."}}}},"aws-native:iot:getCertificateProvider":{"description":"Use the AWS::IoT::CertificateProvider resource to declare an AWS IoT Certificate Provider.","inputs":{"properties":{"certificateProviderName":{"type":"string","description":"The name of the certificate provider."}},"required":["certificateProviderName"]},"outputs":{"properties":{"accountDefaultForOperations":{"description":"A list of the operations that the certificate provider will use to generate certificates. Valid value: `CreateCertificateFromCsr` .","items":{"$ref":"#/types/aws-native:iot:CertificateProviderOperation"},"type":"array"},"arn":{"description":"Returns the Amazon Resource Name (ARN) for the certificate. For example:\n\n`{ \"Fn::GetAtt\": [\"MyCertificateProvider\", \"Arn\"] }`\n\nA value similar to the following is returned:\n\n`arn:aws:iot:ap-southeast-2:123456789012:certprovider/my-certificate-provider`","type":"string"},"lambdaFunctionArn":{"description":"The ARN of the Lambda function.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getCommand":{"description":"Represents the resource definition of AWS IoT Command.","inputs":{"properties":{"commandId":{"type":"string","description":"The unique identifier for the command."}},"required":["commandId"]},"outputs":{"properties":{"commandArn":{"description":"The Amazon Resource Name (ARN) of the command.","type":"string"},"createdAt":{"description":"The date and time when the command was created.","type":"string"},"deprecated":{"description":"A flag indicating whether the command is deprecated.","type":"boolean"},"description":{"description":"The description of the command.","type":"string"},"displayName":{"description":"The display name for the command.","type":"string"},"mandatoryParameters":{"description":"The list of mandatory parameters for the command.","items":{"$ref":"#/types/aws-native:iot:CommandParameter"},"type":"array"},"namespace":{"$ref":"#/types/aws-native:iot:CommandNamespace","description":"The namespace to which the command belongs."},"payload":{"$ref":"#/types/aws-native:iot:CommandPayload","description":"The payload associated with the command."},"pendingDeletion":{"description":"A flag indicating whether the command is pending deletion.","type":"boolean"},"roleArn":{"description":"The customer role associated with the command.","type":"string"},"tags":{"description":"The tags to be associated with the command.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getCustomMetric":{"description":"A custom metric published by your devices to Device Defender.","inputs":{"properties":{"metricName":{"type":"string","description":"The name of the custom metric. This will be used in the metric report submitted from the device/thing. Shouldn't begin with aws: . Cannot be updated once defined."}},"required":["metricName"]},"outputs":{"properties":{"displayName":{"description":"Field represents a friendly name in the console for the custom metric; it doesn't have to be unique. Don't use this name as the metric identifier in the device metric report. Can be updated once defined.","type":"string"},"metricArn":{"description":"The Amazon Resource Number (ARN) of the custom metric.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getDimension":{"description":"A dimension can be used to limit the scope of a metric used in a security profile for AWS IoT Device Defender.","inputs":{"properties":{"name":{"type":"string","description":"A unique identifier for the dimension."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The ARN (Amazon resource name) of the created dimension.","type":"string"},"stringValues":{"description":"Specifies the value or list of values for the dimension.","items":{"type":"string"},"type":"array"},"tags":{"description":"Metadata that can be used to manage the dimension.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getDomainConfiguration":{"description":"Create and manage a Domain Configuration","inputs":{"properties":{"domainConfigurationName":{"type":"string","description":"The name of the domain configuration. This value must be unique to a region."}},"required":["domainConfigurationName"]},"outputs":{"properties":{"applicationProtocol":{"$ref":"#/types/aws-native:iot:DomainConfigurationApplicationProtocol","description":"An enumerated string that specifies the application-layer protocol."},"arn":{"description":"The Amazon Resource Name (ARN) of the domain configuration.","type":"string"},"authenticationType":{"$ref":"#/types/aws-native:iot:DomainConfigurationAuthenticationType","description":"An enumerated string that specifies the authentication type."},"authorizerConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationAuthorizerConfig","description":"An object that specifies the authorization service for a domain."},"clientCertificateConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationClientCertificateConfig","description":"An object that specifies the client certificate configuration for a domain."},"domainConfigurationStatus":{"$ref":"#/types/aws-native:iot:DomainConfigurationStatus","description":"The status to which the domain configuration should be updated.\n\nValid values: `ENABLED` | `DISABLED`"},"domainType":{"$ref":"#/types/aws-native:iot:DomainConfigurationDomainType","description":"The type of service delivered by the domain."},"serverCertificateConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationServerCertificateConfig","description":"The server certificate configuration.\n\nFor more information, see [Configurable endpoints](https://docs.aws.amazon.com//iot/latest/developerguide/iot-custom-endpoints-configurable.html) from the AWS IoT Core Developer Guide."},"serverCertificates":{"description":"The ARNs of the certificates that AWS IoT passes to the device during the TLS handshake. Currently you can specify only one certificate ARN. This value is not required for AWS -managed domains.","items":{"$ref":"#/types/aws-native:iot:DomainConfigurationServerCertificateSummary"},"type":"array"},"tags":{"description":"Metadata which can be used to manage the domain configuration.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: \u0026\u0026tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\"","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tlsConfig":{"$ref":"#/types/aws-native:iot:DomainConfigurationTlsConfig","description":"An object that specifies the TLS configuration for a domain."}}}},"aws-native:iot:getEncryptionConfiguration":{"description":"Resource Type definition for AWS::IoT::EncryptionConfiguration","inputs":{"properties":{"accountId":{"type":"string","description":"The unique identifier (ID) of an AWS account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The unique identifier (ID) of an AWS account.","type":"string"},"configurationDetails":{"$ref":"#/types/aws-native:iot:ConfigurationDetailsProperties"},"encryptionType":{"$ref":"#/types/aws-native:iot:EncryptionConfigurationEncryptionType","description":"The type of the KMS key."},"kmsAccessRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role assumed by AWS IoT Core to call AWS  on behalf of the customer.","type":"string"},"kmsKeyArn":{"description":"The ARN of the customer managed KMS key.","type":"string"},"lastModifiedDate":{"description":"The date when encryption configuration is last updated.","type":"string"}}}},"aws-native:iot:getFleetMetric":{"description":"An aggregated metric of certain devices in your fleet","inputs":{"properties":{"metricName":{"type":"string","description":"The name of the fleet metric"}},"required":["metricName"]},"outputs":{"properties":{"aggregationField":{"description":"The aggregation field to perform aggregation and metric emission","type":"string"},"aggregationType":{"$ref":"#/types/aws-native:iot:FleetMetricAggregationType","description":"The type of the aggregation query."},"creationDate":{"description":"The creation date of a fleet metric","type":"string"},"description":{"description":"The description of a fleet metric","type":"string"},"indexName":{"description":"The index name of a fleet metric","type":"string"},"lastModifiedDate":{"description":"The last modified date of a fleet metric","type":"string"},"metricArn":{"description":"The Amazon Resource Number (ARN) of a fleet metric metric","type":"string"},"period":{"description":"The period of metric emission in seconds","type":"integer"},"queryString":{"description":"The Fleet Indexing query used by a fleet metric","type":"string"},"queryVersion":{"description":"The version of a Fleet Indexing query used by a fleet metric","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"unit":{"description":"The unit of data points emitted by a fleet metric","type":"string"},"version":{"description":"The version of a fleet metric","type":"number"}}}},"aws-native:iot:getJobTemplate":{"description":"Resource Type definition for AWS::IoT::JobTemplate. Job templates enable you to preconfigure jobs so that you can deploy them to multiple sets of target devices.","inputs":{"properties":{"jobTemplateId":{"type":"string","description":"A unique identifier for the job template. We recommend using a UUID. Alpha-numeric characters, \"-\", and \"_\" are valid for use here."}},"required":["jobTemplateId"]},"outputs":{"properties":{"arn":{"description":"The ARN of the job to use as the basis for the job template.","type":"string"}}}},"aws-native:iot:getLogging":{"description":"Logging Options enable you to configure your IoT V2 logging role and default logging level so that you can monitor progress events logs as it passes from your devices through Iot core service.","inputs":{"properties":{"accountId":{"type":"string","description":"Your 12-digit account ID (used as the primary identifier for the CloudFormation resource)."}},"required":["accountId"]},"outputs":{"properties":{"defaultLogLevel":{"$ref":"#/types/aws-native:iot:LoggingDefaultLogLevel","description":"The log level to use. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED."},"eventConfigurations":{"description":"Configurations for event-based logging that specifies which event types to log and their logging settings. Overrides account-level logging for the specified event","items":{"$ref":"#/types/aws-native:iot:LoggingEventConfiguration"},"type":"array"},"roleArn":{"description":"The ARN of the role that allows IoT to write to Cloudwatch logs.","type":"string"}}}},"aws-native:iot:getMitigationAction":{"description":"Mitigation actions can be used to take actions to mitigate issues that were found in an Audit finding or Detect violation.","inputs":{"properties":{"actionName":{"type":"string","description":"A unique identifier for the mitigation action."}},"required":["actionName"]},"outputs":{"properties":{"actionParams":{"$ref":"#/types/aws-native:iot:MitigationActionActionParams","description":"The set of parameters for this mitigation action. The parameters vary, depending on the kind of action you apply."},"mitigationActionArn":{"description":"The Amazon Resource Name (ARN) of the mitigation action.","type":"string"},"mitigationActionId":{"description":"The ID of the mitigation action.","type":"string"},"roleArn":{"description":"The IAM role ARN used to apply this mitigation action.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getPolicy":{"description":"Resource Type definition for AWS::IoT::Policy","inputs":{"properties":{"id":{"type":"string","description":"The name of this policy."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the AWS IoT policy, such as `arn:aws:iot:us-east-2:123456789012:policy/MyPolicy` .","type":"string"},"id":{"description":"The name of this policy.","type":"string"},"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON document that describes the policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::IoT::Policy` for more information about the expected schema for this property."},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getProvisioningTemplate":{"description":"Creates a fleet provisioning template.","inputs":{"properties":{"templateName":{"type":"string","description":"The name of the fleet provisioning template."}},"required":["templateName"]},"outputs":{"properties":{"description":{"description":"The description of the fleet provisioning template.","type":"string"},"enabled":{"description":"True to enable the fleet provisioning template, otherwise false.","type":"boolean"},"preProvisioningHook":{"$ref":"#/types/aws-native:iot:ProvisioningTemplateProvisioningHook","description":"Creates a pre-provisioning hook template."},"provisioningRoleArn":{"description":"The role ARN for the role associated with the fleet provisioning template. This IoT role grants permission to provision a device.","type":"string"},"tags":{"description":"Metadata that can be used to manage the fleet provisioning template.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"templateArn":{"description":"The ARN that identifies the provisioning template.","type":"string"},"templateBody":{"description":"The JSON formatted contents of the fleet provisioning template version.","type":"string"}}}},"aws-native:iot:getResourceSpecificLogging":{"description":"Resource-specific logging allows you to specify a logging level for a specific thing group.","inputs":{"properties":{"targetId":{"type":"string","description":"Unique Id for a Target (TargetType:TargetName), this will be internally built to serve as primary identifier for a log target."}},"required":["targetId"]},"outputs":{"properties":{"logLevel":{"$ref":"#/types/aws-native:iot:ResourceSpecificLoggingLogLevel","description":"The log level for a specific target. Valid values are: ERROR, WARN, INFO, DEBUG, or DISABLED."},"targetId":{"description":"Unique Id for a Target (TargetType:TargetName), this will be internally built to serve as primary identifier for a log target.","type":"string"}}}},"aws-native:iot:getRoleAlias":{"description":"Use the AWS::IoT::RoleAlias resource to declare an AWS IoT RoleAlias.","inputs":{"properties":{"roleAlias":{"type":"string","description":"The role alias.","language":{"csharp":{"name":"RoleAliasValue"}}}},"required":["roleAlias"]},"outputs":{"properties":{"credentialDurationSeconds":{"description":"The number of seconds for which the credential is valid.","type":"integer"},"roleAliasArn":{"description":"The role alias ARN.","type":"string"},"roleArn":{"description":"The role ARN.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getScheduledAudit":{"description":"Scheduled audits can be used to specify the checks you want to perform during an audit and how often the audit should be run.","inputs":{"properties":{"scheduledAuditName":{"type":"string","description":"The name you want to give to the scheduled audit."}},"required":["scheduledAuditName"]},"outputs":{"properties":{"dayOfMonth":{"description":"The day of the month on which the scheduled audit takes place. Can be 1 through 31 or LAST. This field is required if the frequency parameter is set to MONTHLY.","type":"string"},"dayOfWeek":{"$ref":"#/types/aws-native:iot:ScheduledAuditDayOfWeek","description":"The day of the week on which the scheduled audit takes place. Can be one of SUN, MON, TUE,WED, THU, FRI, or SAT. This field is required if the frequency parameter is set to WEEKLY or BIWEEKLY."},"frequency":{"$ref":"#/types/aws-native:iot:ScheduledAuditFrequency","description":"How often the scheduled audit takes place. Can be one of DAILY, WEEKLY, BIWEEKLY, or MONTHLY."},"scheduledAuditArn":{"description":"The ARN (Amazon resource name) of the scheduled audit.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetCheckNames":{"description":"Which checks are performed during the scheduled audit. Checks must be enabled for your account.","items":{"type":"string"},"type":"array"}}}},"aws-native:iot:getSecurityProfile":{"description":"A security profile defines a set of expected behaviors for devices in your account.","inputs":{"properties":{"securityProfileName":{"type":"string","description":"A unique identifier for the security profile."}},"required":["securityProfileName"]},"outputs":{"properties":{"additionalMetricsToRetainV2":{"description":"A list of metrics whose data is retained (stored). By default, data is retained for any metric used in the profile's behaviors, but it is also retained for any metric specified here.","items":{"$ref":"#/types/aws-native:iot:SecurityProfileMetricToRetain"},"type":"array"},"alertTargets":{"additionalProperties":{"$ref":"#/types/aws-native:iot:SecurityProfileAlertTarget"},"description":"Specifies the destinations to which alerts are sent.","type":"object"},"behaviors":{"description":"Specifies the behaviors that, when violated by a device (thing), cause an alert.","items":{"$ref":"#/types/aws-native:iot:SecurityProfileBehavior"},"type":"array"},"metricsExportConfig":{"$ref":"#/types/aws-native:iot:MetricsExportConfigProperties","description":"A structure containing the mqtt topic for metrics export."},"securityProfileArn":{"description":"The ARN (Amazon resource name) of the created security profile.","type":"string"},"securityProfileDescription":{"description":"A description of the security profile.","type":"string"},"tags":{"description":"Metadata that can be used to manage the security profile.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetArns":{"description":"A set of target ARNs that the security profile is attached to.","items":{"type":"string"},"type":"array"}}}},"aws-native:iot:getSoftwarePackage":{"description":"resource definition","inputs":{"properties":{"packageName":{"type":"string","description":"The name of the new software package."}},"required":["packageName"]},"outputs":{"properties":{"description":{"description":"A summary of the package being created. This can be used to outline the package's contents or purpose.","type":"string"},"packageArn":{"description":"The Amazon Resource Name (ARN) for the package.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getSoftwarePackageVersion":{"description":"resource definition","inputs":{"properties":{"packageName":{"type":"string","description":"The name of the associated software package."},"versionName":{"type":"string","description":"The name of the new package version."}},"required":["packageName","versionName"]},"outputs":{"properties":{"artifact":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionPackageVersionArtifact"},"attributes":{"additionalProperties":{"type":"string"},"description":"Metadata that can be used to define a package version’s configuration. For example, the S3 file location, configuration options that are being sent to the device or fleet.\n\nThe combined size of all the attributes on a package version is limited to 3KB.","type":"object"},"description":{"description":"A summary of the package version being created. This can be used to outline the package's contents or purpose.","type":"string"},"errorReason":{"description":"Error reason for a package version failure during creation or update.","type":"string"},"packageVersionArn":{"description":"The Amazon Resource Name (ARN) for the package.","type":"string"},"recipe":{"description":"The inline json job document associated with a software package version","type":"string"},"sbom":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionSbom"},"sbomValidationStatus":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionSbomValidationStatus"},"status":{"$ref":"#/types/aws-native:iot:SoftwarePackageVersionPackageVersionStatus","description":"The status of the package version. For more information, see [Package version lifecycle](https://docs.aws.amazon.com/iot/latest/developerguide/preparing-to-use-software-package-catalog.html#package-version-lifecycle) ."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iot:getThing":{"description":"Resource Type definition for AWS::IoT::Thing","inputs":{"properties":{"thingName":{"type":"string","description":"The name of the thing to update.\n\nYou can't change a thing's name. To change a thing's name, you must create a new thing, give it the new name, and then delete the old thing."}},"required":["thingName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the AWS IoT thing, such as `arn:aws:iot:us-east-2:123456789012:thing/MyThing` .","type":"string"},"attributePayload":{"$ref":"#/types/aws-native:iot:ThingAttributePayload","description":"A string that contains up to three key value pairs. Maximum length of 800. Duplicates not allowed."},"id":{"description":"The Id of this thing.","type":"string"}}}},"aws-native:iot:getThingGroup":{"description":"Resource Type definition for AWS::IoT::ThingGroup","inputs":{"properties":{"thingGroupName":{"type":"string","description":"The thing group name."}},"required":["thingGroupName"]},"outputs":{"properties":{"arn":{"description":"The thing group ARN.","type":"string"},"id":{"description":"The thing group ID.","type":"string"},"queryString":{"description":"The dynamic thing group search query string.\n\nThe `queryString` attribute *is* required for `CreateDynamicThingGroup` . The `queryString` attribute *is not* required for `CreateThingGroup` .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"thingGroupProperties":{"$ref":"#/types/aws-native:iot:ThingGroupPropertiesProperties","description":"Thing group properties."}}}},"aws-native:iot:getThingType":{"description":"Resource Type definition for AWS::IoT::ThingType","inputs":{"properties":{"thingTypeName":{"type":"string","description":"The name of the thing type."}},"required":["thingTypeName"]},"outputs":{"properties":{"arn":{"description":"The thing type arn.","type":"string"},"deprecateThingType":{"description":"Deprecates a thing type. You can not associate new things with deprecated thing type.\n\nRequires permission to access the [DeprecateThingType](https://docs.aws.amazon.com//service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.","type":"boolean"},"id":{"description":"The thing type id.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"thingTypeProperties":{"$ref":"#/types/aws-native:iot:ThingTypePropertiesProperties","description":"The thing type properties for the thing type to create. It contains information about the new thing type including a description, a list of searchable thing attribute names, and a list of propagating attributes. After a thing type is created, you can only update `Mqtt5Configuration` ."}}}},"aws-native:iot:getTopicRule":{"description":"Resource Type definition for AWS::IoT::TopicRule","inputs":{"properties":{"ruleName":{"type":"string","description":"The name of the rule."}},"required":["ruleName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the AWS IoT rule, such as `arn:aws:iot:us-east-2:123456789012:rule/MyIoTRule` .","type":"string"},"tags":{"description":"Metadata which can be used to manage the topic rule.\n\n\u003e For URI Request parameters use format: ...key1=value1\u0026key2=value2...\n\u003e \n\u003e For the CLI command-line parameter use format: --tags \"key1=value1\u0026key2=value2...\"\n\u003e \n\u003e For the cli-input-json file use format: \"tags\": \"key1=value1\u0026key2=value2...\"","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"topicRulePayload":{"$ref":"#/types/aws-native:iot:TopicRulePayload","description":"The rule payload."}}}},"aws-native:iot:getTopicRuleDestination":{"description":"Resource Type definition for AWS::IoT::TopicRuleDestination","inputs":{"properties":{"arn":{"type":"string","description":"Amazon Resource Name (ARN)."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN).","type":"string"},"status":{"$ref":"#/types/aws-native:iot:TopicRuleDestinationStatus","description":"The status of the TopicRuleDestination."},"statusReason":{"description":"The reasoning for the current status of the TopicRuleDestination.","type":"string"}}}},"aws-native:iotanalytics:getChannel":{"description":"Resource Type definition for AWS::IoTAnalytics::Channel","inputs":{"properties":{"channelName":{"type":"string","description":"The name of the channel."}},"required":["channelName"]},"outputs":{"properties":{"channelStorage":{"$ref":"#/types/aws-native:iotanalytics:ChannelStorage","description":"Where channel data is stored."},"id":{"type":"string"},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:ChannelRetentionPeriod","description":"How long, in days, message data is kept for the channel."},"tags":{"description":"Metadata which can be used to manage the channel.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotanalytics:getDataset":{"description":"Resource Type definition for AWS::IoTAnalytics::Dataset","inputs":{"properties":{"datasetName":{"type":"string","description":"The name of the dataset."}},"required":["datasetName"]},"outputs":{"properties":{"actions":{"description":"The `DatasetAction` objects that automatically create the dataset contents.","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetAction"},"type":"array"},"contentDeliveryRules":{"description":"When dataset contents are created they are delivered to destinations specified here.","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetContentDeliveryRule"},"type":"array"},"id":{"type":"string"},"lateDataRules":{"description":"A list of data rules that send notifications to CloudWatch, when data arrives late. To specify `lateDataRules` , the dataset must use a [DeltaTimer](https://docs.aws.amazon.com/iotanalytics/latest/APIReference/API_DeltaTime.html) filter.","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetLateDataRule"},"type":"array"},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:DatasetRetentionPeriod","description":"Optional. How long, in days, message data is kept for the dataset."},"tags":{"description":"Metadata which can be used to manage the data set.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"triggers":{"description":"The `DatasetTrigger` objects that specify when the dataset is automatically updated.","items":{"$ref":"#/types/aws-native:iotanalytics:DatasetTrigger"},"type":"array"},"versioningConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatasetVersioningConfiguration","description":"Optional. How many versions of dataset contents are kept. If not specified or set to null, only the latest version plus the latest succeeded version (if they are different) are kept for the time period specified by the `retentionPeriod` parameter. For more information, see [Keeping Multiple Versions of ITA datasets](https://docs.aws.amazon.com/iotanalytics/latest/userguide/getting-started.html#aws-iot-analytics-dataset-versions) in the *ITA User Guide* ."}}}},"aws-native:iotanalytics:getDatastore":{"description":"Resource Type definition for AWS::IoTAnalytics::Datastore","inputs":{"properties":{"datastoreName":{"type":"string","description":"The name of the data store."}},"required":["datastoreName"]},"outputs":{"properties":{"datastorePartitions":{"$ref":"#/types/aws-native:iotanalytics:DatastorePartitions","description":"Information about the partition dimensions in a data store."},"datastoreStorage":{"$ref":"#/types/aws-native:iotanalytics:DatastoreStorage","description":"Where data store data is stored."},"fileFormatConfiguration":{"$ref":"#/types/aws-native:iotanalytics:DatastoreFileFormatConfiguration","description":"Contains the configuration information of file formats. ITA data stores support JSON and [Parquet](https://docs.aws.amazon.com/https://parquet.apache.org/) .\n\nThe default file format is JSON. You can specify only one format.\n\nYou can't change the file format after you create the data store."},"id":{"type":"string"},"retentionPeriod":{"$ref":"#/types/aws-native:iotanalytics:DatastoreRetentionPeriod","description":"How long, in days, message data is kept for the data store. When `customerManagedS3` storage is selected, this parameter is ignored."},"tags":{"description":"Metadata which can be used to manage the data store.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotanalytics:getPipeline":{"description":"Resource Type definition for AWS::IoTAnalytics::Pipeline","inputs":{"properties":{"pipelineName":{"type":"string","description":"The name of the pipeline."}},"required":["pipelineName"]},"outputs":{"properties":{"id":{"type":"string"},"pipelineActivities":{"description":"A list of \"PipelineActivity\" objects. Activities perform transformations on your messages, such as removing, renaming or adding message attributes; filtering messages based on attribute values; invoking your Lambda functions on messages for advanced processing; or performing mathematical transformations to normalize device data.\n\nThe list can be 2-25 *PipelineActivity* objects and must contain both a `channel` and a `datastore` activity. Each entry in the list must contain only one activity, for example:\n\n`pipelineActivities = [ { \"channel\": { ... } }, { \"lambda\": { ... } }, ... ]`","items":{"$ref":"#/types/aws-native:iotanalytics:PipelineActivity"},"type":"array"},"tags":{"description":"Metadata which can be used to manage the pipeline.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotcoredeviceadvisor:getSuiteDefinition":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"suiteDefinitionId":{"type":"string","description":"The unique identifier for the suite definition."}},"required":["suiteDefinitionId"]},"outputs":{"properties":{"suiteDefinitionArn":{"description":"The Amazon Resource name for the suite definition.","type":"string"},"suiteDefinitionConfiguration":{"$ref":"#/types/aws-native:iotcoredeviceadvisor:SuiteDefinitionConfigurationProperties","description":"Gets the suite definition configuration."},"suiteDefinitionId":{"description":"The unique identifier for the suite definition.","type":"string"},"suiteDefinitionVersion":{"description":"The suite definition version of a test suite.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotevents:getAlarmModel":{"description":"Represents an alarm model to monitor an ITE input attribute. You can use the alarm to get notified when the value is outside a specified range. For more information, see [Create an alarm model](https://docs.aws.amazon.com/iotevents/latest/developerguide/create-alarms.html) in the *Developer Guide*.","inputs":{"properties":{"alarmModelName":{"type":"string","description":"The name of the alarm model."}},"required":["alarmModelName"]},"outputs":{"properties":{"alarmCapabilities":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmCapabilities","description":"Contains the configuration information of alarm state changes."},"alarmEventActions":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmEventActions","description":"Contains information about one or more alarm actions."},"alarmModelDescription":{"description":"The description of the alarm model.","type":"string"},"alarmRule":{"$ref":"#/types/aws-native:iotevents:AlarmModelAlarmRule","description":"Defines when your alarm is invoked."},"roleArn":{"description":"The ARN of the IAM role that allows the alarm to perform actions and access AWS resources. For more information, see [Amazon Resource Names (ARNs)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.","type":"string"},"severity":{"description":"A non-negative integer that reflects the severity level of the alarm.","type":"integer"},"tags":{"description":"A list of key-value pairs that contain metadata for the alarm model. The tags help you manage the alarm model. For more information, see [Tagging your resources](https://docs.aws.amazon.com/iotevents/latest/developerguide/tagging-iotevents.html) in the *Developer Guide*.\n You can create up to 50 tags for one alarm model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotevents:getDetectorModel":{"description":"The AWS::IoTEvents::DetectorModel resource creates a detector model. You create a *detector model* (a model of your equipment or process) using *states*. For each state, you define conditional (Boolean) logic that evaluates the incoming inputs to detect significant events. When an event is detected, it can change the state or trigger custom-built or predefined actions using other AWS services. You can define additional events that trigger actions when entering or exiting a state and, optionally, when a condition is met. For more information, see [How to Use](https://docs.aws.amazon.com/iotevents/latest/developerguide/how-to-use-iotevents.html) in the *Developer Guide*.\n  When you successfully update a detector model (using the ITE console, ITE API or CLI commands, or CFN) all detector instances created by the model are reset to their initial states. (The detector's ``state``, and the values of any variables and timers are reset.)\n When you successfully update a detector model (using the ITE console, ITE API or CLI commands, or CFN) the version number of the detector model is incremented. (A detector model with version number 1 before the update has version number 2 after the update succeeds.)\n If you attempt to update a detector model using CFN and the update does not succeed, the system may, in some cases, restore the original detector model. When this occurs, the detector model's version is incremented twice (for example, from version 1 to version 3) and the detector instances are reset.\n Also, be aware that if you attempt to update several detector models at once using CFN, some updates may succeed and others fail. In this case, the effects on each detector model's detector instances and version number depend on whether the update succeeded or failed, with the results as stated.","inputs":{"properties":{"detectorModelName":{"type":"string","description":"The name of the detector model."}},"required":["detectorModelName"]},"outputs":{"properties":{"detectorModelDefinition":{"$ref":"#/types/aws-native:iotevents:DetectorModelDefinition","description":"Information that defines how a detector operates."},"detectorModelDescription":{"description":"A brief description of the detector model.","type":"string"},"evaluationMethod":{"$ref":"#/types/aws-native:iotevents:DetectorModelEvaluationMethod","description":"Information about the order in which events are evaluated and how actions are executed."},"roleArn":{"description":"The ARN of the role that grants permission to ITE to perform its operations.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotevents:getInput":{"description":"The AWS::IoTEvents::Input resource creates an input. To monitor your devices and processes, they must have a way to get telemetry data into ITE. This is done by sending messages as *inputs* to ITE. For more information, see [How to Use](https://docs.aws.amazon.com/iotevents/latest/developerguide/how-to-use-iotevents.html) in the *Developer Guide*.","inputs":{"properties":{"inputName":{"type":"string","description":"The name of the input."}},"required":["inputName"]},"outputs":{"properties":{"inputDefinition":{"$ref":"#/types/aws-native:iotevents:InputDefinition","description":"The definition of the input."},"inputDescription":{"description":"A brief description of the input.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotfleethub:getApplication":{"description":"Resource schema for AWS::IoTFleetHub::Application","inputs":{"properties":{"applicationId":{"type":"string","description":"The ID of the application."}},"required":["applicationId"]},"outputs":{"properties":{"applicationArn":{"description":"The ARN of the application.","type":"string"},"applicationCreationDate":{"description":"When the Application was created","type":"integer"},"applicationDescription":{"description":"Application Description, should be between 1 and 2048 characters.","type":"string"},"applicationId":{"description":"The ID of the application.","type":"string"},"applicationLastUpdateDate":{"description":"When the Application was last updated","type":"integer"},"applicationName":{"description":"Application Name, should be between 1 and 256 characters.","type":"string"},"applicationState":{"description":"The current state of the application.","type":"string"},"applicationUrl":{"description":"The URL of the application.","type":"string"},"errorMessage":{"description":"A message indicating why Create or Delete Application failed.","type":"string"},"roleArn":{"description":"The ARN of the role that the web application assumes when it interacts with AWS IoT Core. For more info on configuring this attribute, see https://docs.aws.amazon.com/iot/latest/apireference/API_iotfleethub_CreateApplication.html#API_iotfleethub_CreateApplication_RequestSyntax","type":"string"},"ssoClientId":{"description":"The AWS SSO application generated client ID (used with AWS SSO APIs).","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the application.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getAccessPolicy":{"description":"Resource schema for AWS::IoTSiteWise::AccessPolicy","inputs":{"properties":{"accessPolicyId":{"type":"string","description":"The ID of the access policy."}},"required":["accessPolicyId"]},"outputs":{"properties":{"accessPolicyArn":{"description":"The ARN of the access policy.","type":"string"},"accessPolicyId":{"description":"The ID of the access policy.","type":"string"},"accessPolicyIdentity":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyIdentity","description":"The identity for this access policy. Choose either a user or a group but not both."},"accessPolicyPermission":{"description":"The permission level for this access policy. Valid values are ADMINISTRATOR or VIEWER.","type":"string"},"accessPolicyResource":{"$ref":"#/types/aws-native:iotsitewise:AccessPolicyResource","description":"The AWS IoT SiteWise Monitor resource for this access policy. Choose either portal or project but not both."}}}},"aws-native:iotsitewise:getAsset":{"description":"Resource schema for AWS::IoTSiteWise::Asset","inputs":{"properties":{"assetId":{"type":"string","description":"The ID of the asset"}},"required":["assetId"]},"outputs":{"properties":{"assetArn":{"description":"The ARN of the asset","type":"string"},"assetDescription":{"description":"A description for the asset","type":"string"},"assetExternalId":{"description":"The External ID of the asset","type":"string"},"assetHierarchies":{"description":"A list of asset hierarchies that each contain a `hierarchyId` . A hierarchy specifies allowed parent/child asset relationships.","items":{"$ref":"#/types/aws-native:iotsitewise:AssetHierarchy"},"type":"array"},"assetId":{"description":"The ID of the asset","type":"string"},"assetModelId":{"description":"The ID of the asset model from which to create the asset.","type":"string"},"assetName":{"description":"A unique, friendly name for the asset.","type":"string"},"assetProperties":{"description":"The list of asset properties for the asset.\n\nThis object doesn't include properties that you define in composite models. You can find composite model properties in the `assetCompositeModels` object.","items":{"$ref":"#/types/aws-native:iotsitewise:AssetProperty"},"type":"array"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getAssetModel":{"description":"Resource schema for AWS::IoTSiteWise::AssetModel","inputs":{"properties":{"assetModelId":{"type":"string","description":"The ID of the asset model."}},"required":["assetModelId"]},"outputs":{"properties":{"assetModelArn":{"description":"The ARN of the asset model, which has the following format.","type":"string"},"assetModelCompositeModels":{"description":"The composite asset models that are part of this asset model. Composite asset models are asset models that contain specific properties.","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelCompositeModel"},"type":"array"},"assetModelDescription":{"description":"A description for the asset model.","type":"string"},"assetModelExternalId":{"description":"The external ID of the asset model.","type":"string"},"assetModelHierarchies":{"description":"The hierarchy definitions of the asset model. Each hierarchy specifies an asset model whose assets can be children of any other assets created from this asset model. You can specify up to 10 hierarchies per asset model.","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelHierarchy"},"type":"array"},"assetModelId":{"description":"The ID of the asset model.","type":"string"},"assetModelName":{"description":"A unique, friendly name for the asset model.","type":"string"},"assetModelProperties":{"description":"The property definitions of the asset model. You can specify up to 200 properties per asset model.","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelProperty"},"type":"array"},"enforcedAssetModelInterfaceRelationships":{"description":"a list of asset model and interface relationships","items":{"$ref":"#/types/aws-native:iotsitewise:AssetModelEnforcedAssetModelInterfaceRelationship"},"type":"array"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getDashboard":{"description":"Resource schema for AWS::IoTSiteWise::Dashboard","inputs":{"properties":{"dashboardId":{"type":"string","description":"The ID of the dashboard."}},"required":["dashboardId"]},"outputs":{"properties":{"dashboardArn":{"description":"The ARN of the dashboard.","type":"string"},"dashboardDefinition":{"description":"The dashboard definition specified in a JSON literal.","type":"string"},"dashboardDescription":{"description":"A description for the dashboard.","type":"string"},"dashboardId":{"description":"The ID of the dashboard.","type":"string"},"dashboardName":{"description":"A friendly name for the dashboard.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the dashboard.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getDataset":{"description":"Resource schema for AWS::IoTSiteWise::Dataset.","inputs":{"properties":{"datasetId":{"type":"string","description":"The ID of the dataset."}},"required":["datasetId"]},"outputs":{"properties":{"datasetArn":{"description":"The ARN of the dataset.","type":"string"},"datasetDescription":{"description":"A description about the dataset, and its functionality.","type":"string"},"datasetId":{"description":"The ID of the dataset.","type":"string"},"datasetName":{"description":"The name of the dataset.","type":"string"},"datasetSource":{"$ref":"#/types/aws-native:iotsitewise:DatasetSource","description":"The data source for the dataset."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getGateway":{"description":"Resource schema for AWS::IoTSiteWise::Gateway","inputs":{"properties":{"gatewayId":{"type":"string","description":"The ID of the gateway device."}},"required":["gatewayId"]},"outputs":{"properties":{"gatewayCapabilitySummaries":{"description":"A list of gateway capability summaries that each contain a namespace and status.","items":{"$ref":"#/types/aws-native:iotsitewise:GatewayCapabilitySummary"},"type":"array"},"gatewayId":{"description":"The ID of the gateway device.","type":"string"},"gatewayName":{"description":"A unique, friendly name for the gateway.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getPortal":{"description":"Resource schema for AWS::IoTSiteWise::Portal","inputs":{"properties":{"portalId":{"type":"string","description":"The ID of the portal."}},"required":["portalId"]},"outputs":{"properties":{"alarms":{"$ref":"#/types/aws-native:iotsitewise:AlarmsProperties","description":"Contains the configuration information of an alarm created in an AWS IoT SiteWise Monitor portal. You can use the alarm to monitor an asset property and get notified when the asset property value is outside a specified range."},"notificationSenderEmail":{"description":"The email address that sends alarm notifications.","type":"string"},"portalArn":{"description":"The ARN of the portal, which has the following format.","type":"string"},"portalClientId":{"description":"The AWS SSO application generated client ID (used with AWS SSO APIs).","type":"string"},"portalContactEmail":{"description":"The AWS administrator's contact email address.","type":"string"},"portalDescription":{"description":"A description for the portal.","type":"string"},"portalId":{"description":"The ID of the portal.","type":"string"},"portalName":{"description":"A friendly name for the portal.","type":"string"},"portalStartUrl":{"description":"The public root URL for the AWS IoT AWS IoT SiteWise Monitor application portal.","type":"string"},"portalTypeConfiguration":{"additionalProperties":{"$ref":"#/types/aws-native:iotsitewise:PortalTypeEntry"},"type":"object"},"roleArn":{"description":"The ARN of a service role that allows the portal's users to access your AWS IoT SiteWise resources on your behalf.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the portal.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotsitewise:getProject":{"description":"Resource schema for AWS::IoTSiteWise::Project","inputs":{"properties":{"projectId":{"type":"string","description":"The ID of the project."}},"required":["projectId"]},"outputs":{"properties":{"assetIds":{"description":"The IDs of the assets to be associated to the project.","items":{"type":"string"},"type":"array"},"projectArn":{"description":"The ARN of the project.","type":"string"},"projectDescription":{"description":"A description for the project.","type":"string"},"projectId":{"description":"The ID of the project.","type":"string"},"projectName":{"description":"A friendly name for the project.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the project.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iottwinmaker:getComponentType":{"description":"Resource schema for AWS::IoTTwinMaker::ComponentType","inputs":{"properties":{"componentTypeId":{"type":"string","description":"The ID of the component type."},"workspaceId":{"type":"string","description":"The ID of the workspace that contains the component type."}},"required":["workspaceId","componentTypeId"]},"outputs":{"properties":{"arn":{"description":"The ARN of the component type.","type":"string"},"compositeComponentTypes":{"additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeCompositeComponentType"},"description":"An map of the composite component types in the component type. Each composite component type's key must be unique to this map.","type":"object"},"creationDateTime":{"description":"The date and time when the component type was created.","type":"string"},"description":{"description":"The description of the component type.","type":"string"},"extendsFrom":{"description":"Specifies the parent component type to extend.","items":{"type":"string"},"type":"array"},"functions":{"additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeFunction"},"description":"a Map of functions in the component type. Each function's key must be unique to this map.","type":"object"},"isAbstract":{"description":"A Boolean value that specifies whether the component type is abstract.","type":"boolean"},"isSchemaInitialized":{"description":"A Boolean value that specifies whether the component type has a schema initializer and that the schema initializer has run.","type":"boolean"},"isSingleton":{"description":"A Boolean value that specifies whether an entity can have more than one component of this type.","type":"boolean"},"propertyDefinitions":{"additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyDefinition"},"description":"An map of the property definitions in the component type. Each property definition's key must be unique to this map.","type":"object"},"propertyGroups":{"additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypePropertyGroup"},"description":"An map of the property groups in the component type. Each property group's key must be unique to this map.","type":"object"},"status":{"$ref":"#/types/aws-native:iottwinmaker:ComponentTypeStatus","description":"The current status of the component type."},"tags":{"additionalProperties":{"type":"string"},"description":"A map of key-value pairs to associate with a resource.","type":"object"},"updateDateTime":{"description":"The last date and time when the component type was updated.","type":"string"}}}},"aws-native:iottwinmaker:getEntity":{"description":"Resource schema for AWS::IoTTwinMaker::Entity","inputs":{"properties":{"entityId":{"type":"string","description":"The ID of the entity."},"workspaceId":{"type":"string","description":"The ID of the workspace."}},"required":["workspaceId","entityId"]},"outputs":{"properties":{"arn":{"description":"The ARN of the entity.","type":"string"},"components":{"additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityComponent"},"description":"A map that sets information about a component type.","type":"object"},"compositeComponents":{"additionalProperties":{"$ref":"#/types/aws-native:iottwinmaker:EntityCompositeComponent"},"description":"A map that sets information about a composite component.","type":"object"},"creationDateTime":{"description":"The date and time when the entity was created.","type":"string"},"description":{"description":"The description of the entity.","type":"string"},"entityName":{"description":"The name of the entity.","type":"string"},"hasChildEntities":{"description":"A Boolean value that specifies whether the entity has child entities or not.","type":"boolean"},"parentEntityId":{"description":"The ID of the parent entity.","type":"string"},"status":{"$ref":"#/types/aws-native:iottwinmaker:EntityStatus","description":"The current status of the entity."},"tags":{"additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","type":"object"},"updateDateTime":{"description":"The last date and time when the entity was updated.","type":"string"}}}},"aws-native:iottwinmaker:getScene":{"description":"Resource schema for AWS::IoTTwinMaker::Scene","inputs":{"properties":{"sceneId":{"type":"string","description":"The ID of the scene."},"workspaceId":{"type":"string","description":"The ID of the scene."}},"required":["workspaceId","sceneId"]},"outputs":{"properties":{"arn":{"description":"The ARN of the scene.","type":"string"},"capabilities":{"description":"A list of capabilities that the scene uses to render.","items":{"type":"string"},"type":"array"},"contentLocation":{"description":"The relative path that specifies the location of the content definition file.","type":"string"},"creationDateTime":{"description":"The date and time when the scene was created.","type":"string"},"description":{"description":"The description of the scene.","type":"string"},"generatedSceneMetadata":{"additionalProperties":{"type":"string"},"description":"A key-value pair of generated scene metadata for the scene.","type":"object"},"sceneMetadata":{"additionalProperties":{"type":"string"},"description":"A key-value pair of scene metadata for the scene.","type":"object"},"tags":{"additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","type":"object"},"updateDateTime":{"description":"The date and time of the current update.","type":"string"}}}},"aws-native:iottwinmaker:getSyncJob":{"description":"Resource schema for AWS::IoTTwinMaker::SyncJob","inputs":{"properties":{"syncSource":{"type":"string","description":"The source of the SyncJob."},"workspaceId":{"type":"string","description":"The ID of the workspace."}},"required":["workspaceId","syncSource"]},"outputs":{"properties":{"arn":{"description":"The ARN of the SyncJob.","type":"string"},"creationDateTime":{"description":"The date and time when the sync job was created.","type":"string"},"state":{"description":"The state of SyncJob.","type":"string"},"updateDateTime":{"description":"The date and time when the sync job was updated.","type":"string"}}}},"aws-native:iottwinmaker:getWorkspace":{"description":"Resource schema for AWS::IoTTwinMaker::Workspace","inputs":{"properties":{"workspaceId":{"type":"string","description":"The ID of the workspace."}},"required":["workspaceId"]},"outputs":{"properties":{"arn":{"description":"The ARN of the workspace.","type":"string"},"creationDateTime":{"description":"The date and time when the workspace was created.","type":"string"},"description":{"description":"The description of the workspace.","type":"string"},"role":{"description":"The ARN of the execution role associated with the workspace.","type":"string"},"s3Location":{"description":"The ARN of the S3 bucket where resources associated with the workspace are stored.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"A map of key-value pairs to associate with a resource.","type":"object"},"updateDateTime":{"description":"The date and time of the current update.","type":"string"}}}},"aws-native:iotwireless:getDestination":{"description":"Destination's resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"name":{"type":"string","description":"Unique name of destination"}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"Destination arn. Returned after successful create.","type":"string"},"description":{"description":"Destination description","type":"string"},"expression":{"description":"Destination expression","type":"string"},"expressionType":{"$ref":"#/types/aws-native:iotwireless:DestinationExpressionType","description":"Must be RuleName"},"roleArn":{"description":"AWS role ARN that grants access","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the destination.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotwireless:getDeviceProfile":{"description":"Device Profile's resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"id":{"type":"string","description":"Service profile Id. Returned after successful create."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Service profile Arn. Returned after successful create.","type":"string"},"id":{"description":"Service profile Id. Returned after successful create.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the device profile.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotwireless:getFuotaTask":{"description":"Create and manage FUOTA tasks.","inputs":{"properties":{"id":{"type":"string","description":"FUOTA task id. Returned after successful create."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"FUOTA task arn. Returned after successful create.","type":"string"},"associateMulticastGroup":{"description":"Multicast group to associate. Only for update request.","type":"string"},"associateWirelessDevice":{"description":"Wireless device to associate. Only for update request.","type":"string"},"description":{"description":"FUOTA task description","type":"string"},"disassociateMulticastGroup":{"description":"Multicast group to disassociate. Only for update request.","type":"string"},"disassociateWirelessDevice":{"description":"Wireless device to disassociate. Only for update request.","type":"string"},"firmwareUpdateImage":{"description":"FUOTA task firmware update image binary S3 link","type":"string"},"firmwareUpdateRole":{"description":"FUOTA task firmware IAM role for reading S3","type":"string"},"fuotaTaskStatus":{"description":"FUOTA task status. Returned after successful read.","type":"string"},"id":{"description":"FUOTA task id. Returned after successful create.","type":"string"},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:FuotaTaskLoRaWan","description":"FUOTA task LoRaWAN"},"name":{"description":"Name of FUOTA task","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the FUOTA task.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotwireless:getMulticastGroup":{"description":"Create and manage Multicast groups.","inputs":{"properties":{"id":{"type":"string","description":"Multicast group id. Returned after successful create."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Multicast group arn. Returned after successful create.","type":"string"},"associateWirelessDevice":{"description":"Wireless device to associate. Only for update request.","type":"string"},"description":{"description":"Multicast group description","type":"string"},"disassociateWirelessDevice":{"description":"Wireless device to disassociate. Only for update request.","type":"string"},"id":{"description":"Multicast group id. Returned after successful create.","type":"string"},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:MulticastGroupLoRaWan","description":"Multicast group LoRaWAN"},"name":{"description":"Name of Multicast group","type":"string"},"status":{"description":"Multicast group status. Returned after successful read.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the Multicast group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotwireless:getNetworkAnalyzerConfiguration":{"description":"Create and manage NetworkAnalyzerConfiguration resource.","inputs":{"properties":{"name":{"type":"string","description":"Name of the network analyzer configuration"}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"Arn for network analyzer configuration, Returned upon successful create.","type":"string"},"description":{"description":"The description of the new resource","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"traceContent":{"$ref":"#/types/aws-native:iotwireless:TraceContentProperties","description":"Trace content for your wireless gateway and wireless device resources"},"wirelessDevices":{"description":"List of wireless gateway resources that have been added to the network analyzer configuration","items":{"type":"string"},"type":"array"},"wirelessGateways":{"description":"List of wireless gateway resources that have been added to the network analyzer configuration","items":{"type":"string"},"type":"array"}}}},"aws-native:iotwireless:getServiceProfile":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"id":{"type":"string","description":"Service profile Id. Returned after successful create."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Service profile Arn. Returned after successful create.","type":"string"},"id":{"description":"Service profile Id. Returned after successful create.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the service profile.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:iotwireless:getTaskDefinition":{"description":"Creates a gateway task definition.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the new wireless gateway task definition"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"TaskDefinition arn. Returned after successful create.","type":"string"},"autoCreateTasks":{"description":"Whether to automatically create tasks using this task definition for all gateways with the specified current version. If false, the task must me created by calling CreateWirelessGatewayTask.","type":"boolean"},"id":{"description":"The ID of the new wireless gateway task definition","type":"string"},"loRaWanUpdateGatewayTaskEntry":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionLoRaWanUpdateGatewayTaskEntry","description":"The list of task definitions."},"name":{"description":"The name of the new resource.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the destination.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"taskDefinitionType":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionType","description":"A filter to list only the wireless gateway task definitions that use this task definition type"},"update":{"$ref":"#/types/aws-native:iotwireless:TaskDefinitionUpdateWirelessGatewayTaskCreate","description":"Information about the gateways to update."}}}},"aws-native:iotwireless:getWirelessDevice":{"description":"Create and manage wireless gateways, including LoRa gateways.","inputs":{"properties":{"id":{"type":"string","description":"Wireless device Id. Returned after successful create."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Wireless device arn. Returned after successful create.","type":"string"},"description":{"description":"Wireless device description","type":"string"},"destinationName":{"description":"Wireless device destination name","type":"string"},"id":{"description":"Wireless device Id. Returned after successful create.","type":"string"},"lastUplinkReceivedAt":{"description":"The date and time when the most recent uplink was received.","type":"string"},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceLoRaWanDevice","description":"The combination of Package, Station and Model which represents the version of the LoRaWAN Wireless Device."},"name":{"description":"Wireless device name","type":"string"},"positioning":{"$ref":"#/types/aws-native:iotwireless:WirelessDevicePositioning","description":"FPort values for the GNSS, stream, and ClockSync functions of the positioning information."},"tags":{"description":"A list of key-value pairs that contain metadata for the device. Currently not supported, will not create if tags are passed.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"thingArn":{"description":"Thing arn. Passed into update to associate Thing with Wireless device.","type":"string"},"thingName":{"description":"Thing Arn. If there is a Thing created, this can be returned with a Get call.","type":"string"},"type":{"$ref":"#/types/aws-native:iotwireless:WirelessDeviceType","description":"Wireless device type, currently only Sidewalk and LoRa"}}}},"aws-native:iotwireless:getWirelessGateway":{"description":"Create and manage wireless gateways, including LoRa gateways.","inputs":{"properties":{"id":{"type":"string","description":"Id for Wireless Gateway. Returned upon successful create."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Arn for Wireless Gateway. Returned upon successful create.","type":"string"},"description":{"description":"Description of Wireless Gateway.","type":"string"},"id":{"description":"Id for Wireless Gateway. Returned upon successful create.","type":"string"},"lastUplinkReceivedAt":{"description":"The date and time when the most recent uplink was received.","type":"string"},"loRaWan":{"$ref":"#/types/aws-native:iotwireless:WirelessGatewayLoRaWanGateway","description":"The combination of Package, Station and Model which represents the version of the LoRaWAN Wireless Gateway."},"name":{"description":"Name of Wireless Gateway.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"thingArn":{"description":"Thing Arn. Passed into Update to associate a Thing with the Wireless Gateway.","type":"string"},"thingName":{"description":"Thing Name. If there is a Thing created, this can be returned with a Get call.","type":"string"}}}},"aws-native:ivs:getChannel":{"description":"Resource Type definition for AWS::IVS::Channel","inputs":{"properties":{"arn":{"type":"string","description":"Channel ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Channel ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"authorized":{"description":"Whether the channel is authorized.","type":"boolean"},"containerFormat":{"$ref":"#/types/aws-native:ivs:ChannelContainerFormat","description":"Indicates which content-packaging format is used (MPEG-TS or fMP4). If multitrackInputConfiguration is specified and enabled is true, then containerFormat is required and must be set to FRAGMENTED_MP4. Otherwise, containerFormat may be set to TS or FRAGMENTED_MP4. Default: TS."},"ingestEndpoint":{"description":"Channel ingest endpoint, part of the definition of an ingest server, used when you set up streaming software.","type":"string"},"insecureIngest":{"description":"Whether the channel allows insecure ingest.","type":"boolean"},"latencyMode":{"$ref":"#/types/aws-native:ivs:ChannelLatencyMode","description":"Channel latency mode."},"multitrackInputConfiguration":{"$ref":"#/types/aws-native:ivs:ChannelMultitrackInputConfiguration","description":"Object specifying multitrack input configuration. Default: no multitrack input configuration is specified."},"name":{"description":"Channel","type":"string"},"playbackUrl":{"description":"Channel Playback URL.","type":"string"},"preset":{"$ref":"#/types/aws-native:ivs:ChannelPreset","description":"Optional transcode preset for the channel. This is selectable only for ADVANCED_HD and ADVANCED_SD channel types. For those channel types, the default preset is HIGHER_BANDWIDTH_DELIVERY. For other channel types (BASIC and STANDARD), preset is the empty string (\"\")."},"recordingConfigurationArn":{"description":"Recording Configuration ARN. A value other than an empty string indicates that recording is enabled. Default: \"\" (recording is disabled).","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:ivs:ChannelType","description":"Channel type, which determines the allowable resolution and bitrate. If you exceed the allowable resolution or bitrate, the stream probably will disconnect immediately."}}}},"aws-native:ivs:getEncoderConfiguration":{"description":"Resource Type definition for AWS::IVS::EncoderConfiguration.","inputs":{"properties":{"arn":{"type":"string","description":"Encoder configuration identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Encoder configuration identifier.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getIngestConfiguration":{"description":"Resource Type definition for AWS::IVS::IngestConfiguration","inputs":{"properties":{"arn":{"type":"string","description":"IngestConfiguration ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"IngestConfiguration ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"participantId":{"description":"Participant Id is automatically generated on creation and assigned.","type":"string"},"stageArn":{"description":"Stage ARN. A value other than an empty string indicates that stage is linked to IngestConfiguration. Default: \"\" (recording is disabled).","type":"string"},"state":{"$ref":"#/types/aws-native:ivs:IngestConfigurationState","description":"State of IngestConfiguration which determines whether IngestConfiguration is in use or not."},"streamKey":{"description":"Stream-key value.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getPlaybackKeyPair":{"description":"Resource Type definition for AWS::IVS::PlaybackKeyPair","inputs":{"properties":{"arn":{"type":"string","description":"Key-pair identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Key-pair identifier.","type":"string"},"fingerprint":{"description":"Key-pair identifier.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getPlaybackRestrictionPolicy":{"description":"Resource Type definition for AWS::IVS::PlaybackRestrictionPolicy.","inputs":{"properties":{"arn":{"type":"string","description":"Playback-restriction-policy identifier."}},"required":["arn"]},"outputs":{"properties":{"allowedCountries":{"description":"A list of country codes that control geoblocking restriction. Allowed values are the officially assigned ISO 3166-1 alpha-2 codes. Default: All countries (an empty array).","items":{"type":"string"},"type":"array"},"allowedOrigins":{"description":"A list of origin sites that control CORS restriction. Allowed values are the same as valid values of the Origin header defined at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin","items":{"type":"string"},"type":"array"},"arn":{"description":"Playback-restriction-policy identifier.","type":"string"},"enableStrictOriginEnforcement":{"description":"Whether channel playback is constrained by origin site.","type":"boolean"},"name":{"description":"Playback-restriction-policy name.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getPublicKey":{"description":"Resource Type definition for AWS::IVS::PublicKey","inputs":{"properties":{"arn":{"type":"string","description":"Key-pair identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Key-pair identifier.","type":"string"},"fingerprint":{"description":"Key-pair identifier.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getRecordingConfiguration":{"description":"Resource Type definition for AWS::IVS::RecordingConfiguration","inputs":{"properties":{"arn":{"type":"string","description":"Recording Configuration ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Recording Configuration ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"state":{"$ref":"#/types/aws-native:ivs:RecordingConfigurationState","description":"Recording Configuration State."},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getStage":{"description":"Resource Type definition for AWS::IVS::Stage.","inputs":{"properties":{"arn":{"type":"string","description":"Stage ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"activeSessionId":{"description":"ID of the active session within the stage.","type":"string"},"arn":{"description":"Stage ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"autoParticipantRecordingConfiguration":{"$ref":"#/types/aws-native:ivs:StageAutoParticipantRecordingConfiguration","description":"Configuration object for individual participant recording."},"name":{"description":"Stage name","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getStorageConfiguration":{"description":"Resource Type definition for AWS::IVS::StorageConfiguration","inputs":{"properties":{"arn":{"type":"string","description":"Storage Configuration ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Storage Configuration ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivs:getStreamKey":{"description":"Resource Type definition for AWS::IVS::StreamKey","inputs":{"properties":{"arn":{"type":"string","description":"Stream Key ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Stream Key ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"tags":{"description":"A list of key-value pairs that contain metadata for the asset model.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"value":{"description":"Stream-key value.","type":"string"}}}},"aws-native:ivschat:getLoggingConfiguration":{"description":"Resource type definition for AWS::IVSChat::LoggingConfiguration.","inputs":{"properties":{"arn":{"type":"string","description":"LoggingConfiguration ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"LoggingConfiguration ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"destinationConfiguration":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationDestinationConfiguration","description":"The DestinationConfiguration is a complex type that contains information about where chat content will be logged."},"id":{"description":"The system-generated ID of the logging configuration.","type":"string"},"name":{"description":"The name of the logging configuration. The value does not need to be unique.","type":"string"},"state":{"$ref":"#/types/aws-native:ivschat:LoggingConfigurationState","description":"The state of the logging configuration. When the state is ACTIVE, the configuration is ready to log chat content."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ivschat:getRoom":{"description":"Resource type definition for AWS::IVSChat::Room.","inputs":{"properties":{"arn":{"type":"string","description":"Room ARN is automatically generated on creation and assigned as the unique identifier."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Room ARN is automatically generated on creation and assigned as the unique identifier.","type":"string"},"id":{"description":"The system-generated ID of the room.","type":"string"},"loggingConfigurationIdentifiers":{"description":"Array of logging configuration identifiers attached to the room.","items":{"type":"string"},"type":"array"},"maximumMessageLength":{"description":"The maximum number of characters in a single message.","type":"integer"},"maximumMessageRatePerSecond":{"description":"The maximum number of messages per second that can be sent to the room.","type":"integer"},"messageReviewHandler":{"$ref":"#/types/aws-native:ivschat:RoomMessageReviewHandler","description":"Configuration information for optional review of messages."},"name":{"description":"The name of the room. The value does not need to be unique.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kafkaconnect:getConnector":{"description":"Resource Type definition for AWS::KafkaConnect::Connector","inputs":{"properties":{"connectorArn":{"type":"string","description":"Amazon Resource Name for the created Connector."}},"required":["connectorArn"]},"outputs":{"properties":{"capacity":{"$ref":"#/types/aws-native:kafkaconnect:ConnectorCapacity","description":"The connector's compute capacity settings."},"connectorArn":{"description":"Amazon Resource Name for the created Connector.","type":"string"},"connectorConfiguration":{"additionalProperties":{"type":"string"},"description":"The configuration for the connector.","type":"object"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kafkaconnect:getCustomPlugin":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"customPluginArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom plugin to use."}},"required":["customPluginArn"]},"outputs":{"properties":{"customPluginArn":{"description":"The Amazon Resource Name (ARN) of the custom plugin to use.","type":"string"},"fileDescription":{"$ref":"#/types/aws-native:kafkaconnect:CustomPluginFileDescription"},"revision":{"description":"The revision of the custom plugin.","type":"integer"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kafkaconnect:getWorkerConfiguration":{"description":"The configuration of the workers, which are the processes that run the connector logic.","inputs":{"properties":{"workerConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the custom configuration."}},"required":["workerConfigurationArn"]},"outputs":{"properties":{"revision":{"description":"The description of a revision of the worker configuration.","type":"integer"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workerConfigurationArn":{"description":"The Amazon Resource Name (ARN) of the custom configuration.","type":"string"}}}},"aws-native:kendra:getDataSource":{"description":"Kendra DataSource","inputs":{"properties":{"id":{"type":"string","description":"The identifier for the data source. For example:\n\n`b8cae438-6787-4091-8897-684a652bbb0a` ."},"indexId":{"type":"string","description":"The identifier of the index you want to use with the data source connector."}},"required":["id","indexId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the data source. For example:\n\n`arn:aws:kendra:us-west-2:111122223333:index/335c3741-41df-46a6-b5d3-61f85b787884/data-source/b8cae438-6787-4091-8897-684a652bbb0a`","type":"string"},"customDocumentEnrichmentConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceCustomDocumentEnrichmentConfiguration","description":"Configuration information for altering document metadata and content during the document ingestion process."},"dataSourceConfiguration":{"$ref":"#/types/aws-native:kendra:DataSourceConfiguration","description":"Configuration information for an Amazon Kendra data source. The contents of the configuration depend on the type of data source. You can only specify one type of data source in the configuration.\n\nYou can't specify the `Configuration` parameter when the `Type` parameter is set to `CUSTOM` .\n\nThe `Configuration` parameter is required for all other data sources."},"description":{"description":"A description for the data source connector.","type":"string"},"id":{"description":"The identifier for the data source. For example:\n\n`b8cae438-6787-4091-8897-684a652bbb0a` .","type":"string"},"languageCode":{"description":"The code for a language. This shows a supported language for all documents in the data source. English is supported by default. For more information on supported languages, including their codes, see [Adding documents in languages other than English](https://docs.aws.amazon.com/kendra/latest/dg/in-adding-languages.html) .","type":"string"},"name":{"description":"The name of the data source.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of a role with permission to access the data source.\n\nYou can't specify the `RoleArn` parameter when the `Type` parameter is set to `CUSTOM` .\n\nThe `RoleArn` parameter is required for all other data sources.","type":"string"},"schedule":{"description":"Sets the frequency that Amazon Kendra checks the documents in your data source and updates the index. If you don't set a schedule, Amazon Kendra doesn't periodically update the index.","type":"string"},"tags":{"description":"Tags for labeling the data source","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kendra:getFaq":{"description":"A Kendra FAQ resource","inputs":{"properties":{"id":{"type":"string","description":"The identifier for the FAQ. For example:\n\n`f61995a6-cd5c-4e99-9cfc-58816d8bfaa7`"},"indexId":{"type":"string","description":"Index ID"}},"required":["id","indexId"]},"outputs":{"properties":{"arn":{"description":"`arn:aws:kendra:us-west-2:111122223333:index/335c3741-41df-46a6-b5d3-61f85b787884/faq/f61995a6-cd5c-4e99-9cfc-58816d8bfaa7`","type":"string"},"id":{"description":"The identifier for the FAQ. For example:\n\n`f61995a6-cd5c-4e99-9cfc-58816d8bfaa7`","type":"string"},"languageCode":{"description":"The code for a language. This shows a supported language for the FAQ document as part of the summary information for FAQs. English is supported by default. For more information on supported languages, including their codes, see [Adding documents in languages other than English](https://docs.aws.amazon.com/kendra/latest/dg/in-adding-languages.html) .","type":"string"},"tags":{"description":"Tags for labeling the FAQ","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kendra:getIndex":{"description":"A Kendra index","inputs":{"properties":{"id":{"type":"string","description":"The identifier for the index. For example: `f4aeaa10-8056-4b2c-a343-522ca0f41234` ."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the index. For example: `arn:aws:kendra:us-west-2:111122223333:index/0123456789abcdef` .","type":"string"},"capacityUnits":{"$ref":"#/types/aws-native:kendra:IndexCapacityUnitsConfiguration","description":"Capacity units"},"description":{"description":"A description for the index","type":"string"},"documentMetadataConfigurations":{"description":"Document metadata configurations","items":{"$ref":"#/types/aws-native:kendra:IndexDocumentMetadataConfiguration"},"type":"array"},"id":{"description":"The identifier for the index. For example: `f4aeaa10-8056-4b2c-a343-522ca0f41234` .","type":"string"},"name":{"description":"The name of the index.","type":"string"},"roleArn":{"description":"An IAM role that gives Amazon Kendra permissions to access your Amazon CloudWatch logs and metrics. This is also the role used when you use the [BatchPutDocument](https://docs.aws.amazon.com/kendra/latest/dg/BatchPutDocument.html) operation to index documents from an Amazon S3 bucket.","type":"string"},"tags":{"description":"Tags for labeling the index","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userContextPolicy":{"$ref":"#/types/aws-native:kendra:IndexUserContextPolicy","description":"The user context policy.\n\nATTRIBUTE_FILTER\n\n- All indexed content is searchable and displayable for all users. If you want to filter search results on user context, you can use the attribute filters of `_user_id` and `_group_ids` or you can provide user and group information in `UserContext` .\n\nUSER_TOKEN\n\n- Enables token-based user access control to filter search results on user context. All documents with no access control and all documents accessible to the user will be searchable and displayable."},"userTokenConfigurations":{"description":"Defines the type of user token used for the index.","items":{"$ref":"#/types/aws-native:kendra:IndexUserTokenConfiguration"},"type":"array"}}}},"aws-native:kendraranking:getExecutionPlan":{"description":"A KendraRanking Rescore execution plan","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the rescore execution plan."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the rescore execution plan.","type":"string"},"capacityUnits":{"$ref":"#/types/aws-native:kendraranking:ExecutionPlanCapacityUnitsConfiguration","description":"Capacity units"},"description":{"description":"A description for the execution plan","type":"string"},"id":{"description":"The identifier of the rescore execution plan.","type":"string"},"name":{"description":"A name for the rescore execution plan.","type":"string"},"tags":{"description":"Tags for labeling the execution plan","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kinesis:getResourcePolicy":{"description":"Resource Type definition for AWS::Kinesis::ResourcePolicy","inputs":{"properties":{"resourceArn":{"type":"string","description":"The ARN of the AWS Kinesis resource to which the policy applies."}},"required":["resourceArn"]},"outputs":{"properties":{"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified resource. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Kinesis::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}}}},"aws-native:kinesis:getStream":{"description":"Resource Type definition for AWS::Kinesis::Stream","inputs":{"properties":{"name":{"type":"string","description":"The name of the Kinesis stream."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon resource name (ARN) of the Kinesis stream","type":"string"},"desiredShardLevelMetrics":{"description":"The final list of shard-level metrics","items":{"$ref":"#/types/aws-native:kinesis:StreamEnhancedMetric"},"type":"array"},"maxRecordSizeInKiB":{"description":"Maximum size of a data record in KiB allowed to be put into Kinesis stream.","type":"integer"},"retentionPeriodHours":{"description":"The number of hours for the data records that are stored in shards to remain accessible.","type":"integer"},"shardCount":{"description":"The number of shards that the stream uses. Required when StreamMode = PROVISIONED is passed.","type":"integer"},"streamEncryption":{"$ref":"#/types/aws-native:kinesis:StreamEncryption","description":"When specified, enables or updates server-side encryption using an AWS KMS key for a specified stream."},"streamModeDetails":{"$ref":"#/types/aws-native:kinesis:StreamModeDetails","description":"The mode in which the stream is running."},"tags":{"description":"An arbitrary set of tags (key-value pairs) to associate with the Kinesis stream.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"warmThroughputObject":{"$ref":"#/types/aws-native:kinesis:StreamWarmThroughputObject","description":"Warm throughput configuration details for the stream. Only present for ON_DEMAND streams."}}}},"aws-native:kinesis:getStreamConsumer":{"description":"Resource Type definition for AWS::Kinesis::StreamConsumer","inputs":{"properties":{"consumerArn":{"type":"string","description":"The ARN returned by Kinesis Data Streams when you registered the consumer. If you don't know the ARN of the consumer that you want to deregister, you can use the ListStreamConsumers operation to get a list of the descriptions of all the consumers that are currently registered with a given data stream. The description of a consumer contains its ARN."}},"required":["consumerArn"]},"outputs":{"properties":{"consumerArn":{"description":"The ARN returned by Kinesis Data Streams when you registered the consumer. If you don't know the ARN of the consumer that you want to deregister, you can use the ListStreamConsumers operation to get a list of the descriptions of all the consumers that are currently registered with a given data stream. The description of a consumer contains its ARN.","type":"string"},"consumerCreationTimestamp":{"description":"Timestamp when the consumer was created.","type":"string"},"consumerStatus":{"description":"A consumer can't read data while in the CREATING or DELETING states. Valid Values: CREATING | DELETING | ACTIVE","type":"string"}}}},"aws-native:kinesisanalyticsv2:getApplication":{"description":"Creates an Amazon Kinesis Data Analytics application. For information about creating a Kinesis Data Analytics application, see [Creating an Application](https://docs.aws.amazon.com/kinesisanalytics/latest/java/getting-started.html).","inputs":{"properties":{"applicationName":{"type":"string","description":"The name of the application."}},"required":["applicationName"]},"outputs":{"properties":{"applicationConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationConfiguration","description":"Use this parameter to configure the application."},"applicationDescription":{"description":"The description of the application.","type":"string"},"applicationMaintenanceConfiguration":{"$ref":"#/types/aws-native:kinesisanalyticsv2:ApplicationMaintenanceConfiguration","description":"Used to configure start of maintenance window."},"runtimeEnvironment":{"description":"The runtime environment for the application.","type":"string"},"serviceExecutionRole":{"description":"Specifies the IAM role that the application uses to access external resources.","type":"string"},"tags":{"description":"A list of one or more tags to assign to the application. A tag is a key-value pair that identifies an application. Note that the maximum number of application tags includes system tags. The maximum number of user-defined application tags is 50.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kinesisfirehose:getDeliveryStream":{"description":"Resource Type definition for AWS::KinesisFirehose::DeliveryStream","inputs":{"properties":{"deliveryStreamName":{"type":"string","description":"The name of the Firehose stream."}},"required":["deliveryStreamName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the delivery stream, such as `arn:aws:firehose:us-east-2:123456789012:deliverystream/delivery-stream-name` .","type":"string"},"deliveryStreamEncryptionConfigurationInput":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamEncryptionConfigurationInput","description":"Specifies the type and Amazon Resource Name (ARN) of the CMK to use for Server-Side Encryption (SSE)."},"extendedS3DestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamExtendedS3DestinationConfiguration","description":"An Amazon S3 destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon Extended S3 destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"httpEndpointDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamHttpEndpointDestinationConfiguration","description":"Enables configuring Kinesis Firehose to deliver data to any HTTP endpoint destination. You can specify only one destination."},"redshiftDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamRedshiftDestinationConfiguration","description":"An Amazon Redshift destination for the delivery stream.\n\nConditional. You must specify only one destination configuration.\n\nIf you change the delivery stream destination from an Amazon Redshift destination to an Amazon ES destination, update requires [some interruptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-some-interrupt) ."},"splunkDestinationConfiguration":{"$ref":"#/types/aws-native:kinesisfirehose:DeliveryStreamSplunkDestinationConfiguration","description":"The configuration of a destination in Splunk for the delivery stream."},"tags":{"description":"A set of tags to assign to the Firehose stream. A tag is a key-value pair that you can define and assign to AWS resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the Firehose stream. For more information about tags, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the AWS Billing and Cost Management User Guide.\n\nYou can specify up to 50 tags when creating a Firehose stream.\n\nIf you specify tags in the `CreateDeliveryStream` action, Amazon Data Firehose performs an additional authorization on the `firehose:TagDeliveryStream` action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose streams with IAM resource tags will fail with an `AccessDeniedException` such as following.\n\n*AccessDeniedException*\n\nUser: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy.\n\nFor an example IAM policy, see [Tag example.](https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples)","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kinesisvideo:getSignalingChannel":{"description":"Resource Type Definition for AWS::KinesisVideo::SignalingChannel","inputs":{"properties":{"name":{"type":"string","description":"The name of the Kinesis Video Signaling Channel."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Kinesis Video Signaling Channel.","type":"string"},"messageTtlSeconds":{"description":"The period of time a signaling channel retains undelivered messages before they are discarded.","type":"integer"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:kinesisvideo:SignalingChannelType","description":"The type of the Kinesis Video Signaling Channel to create. Currently, SINGLE_MASTER is the only supported channel type."}}}},"aws-native:kinesisvideo:getStream":{"description":"Resource Type Definition for AWS::KinesisVideo::Stream","inputs":{"properties":{"name":{"type":"string","description":"The name of the Kinesis Video stream."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the Kinesis Video stream.","type":"string"},"dataRetentionInHours":{"description":"The number of hours till which Kinesis Video will retain the data in the stream","type":"integer"},"deviceName":{"description":"The name of the device that is writing to the stream.","type":"string"},"kmsKeyId":{"description":"AWS KMS key ID that Kinesis Video Streams uses to encrypt stream data.","type":"string"},"mediaType":{"description":"The media type of the stream. Consumers of the stream can use this information when processing the stream.","type":"string"},"streamStorageConfiguration":{"$ref":"#/types/aws-native:kinesisvideo:StreamStorageConfiguration","description":"Configuration for the storage tier of the Kinesis Video Stream."},"tags":{"description":"An array of key-value pairs associated with the Kinesis Video Stream.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kms:getAlias":{"description":"The ``AWS::KMS::Alias`` resource specifies a display name for a [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys). You can use an alias to identify a KMS key in the KMS console, in the [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) operation, and in [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations), such as [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) and [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html).\n  Adding, deleting, or updating an alias can allow or deny permission to the KMS key. For details, see [ABAC for](https://docs.aws.amazon.com/kms/latest/developerguide/abac.html) in the *Developer Guide*.\n  Using an alias to refer to a KMS key can help you simplify key management. For example, an alias in your code can be associated with different KMS keys in different AWS-Regions. For more information, see [Using aliases](https://docs.aws.amazon.com/kms/latest/developerguide/kms-alias.html) in the *Developer Guide*.\n When specifying an alias, observe the following rules.\n  +  Each alias is associated with one KMS key, but multiple aliases can be associated with the same KMS key.\n  +  The alias and its associated KMS key must be in the same AWS-account and Region.\n  +  The alias name must be unique in the AWS-account and Region. However, you can create aliases with the same name in different AWS-Regions. For example, you can have an ``alias/projectKey`` in multiple Regions, each of which is associated with a KMS key in its Region.\n  +  Each alias name must begin with ``alias/`` followed by a name, such as ``alias/exampleKey``. The alias name can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-). Alias names cannot begin with ``alias/aws/``. That alias name prefix is reserved for [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk).\n  \n  *Regions* \n KMS CloudFormation resources are available in all AWS-Regions in which KMS and CFN are supported.","inputs":{"properties":{"aliasName":{"type":"string","description":"Specifies the alias name. This value must begin with ``alias/`` followed by a name, such as ``alias/ExampleAlias``. \n  If you change the value of the ``AliasName`` property, the existing alias is deleted and a new alias is created for the specified KMS key. This change can disrupt applications that use the alias. It can also allow or deny access to a KMS key affected by attribute-based access control (ABAC).\n  The alias must be string of 1-256 characters. It can contain only alphanumeric characters, forward slashes (/), underscores (_), and dashes (-). The alias name cannot begin with ``alias/aws/``. The ``alias/aws/`` prefix is reserved for [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk)."}},"required":["aliasName"]},"outputs":{"properties":{"targetKeyId":{"description":"Associates the alias with the specified [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk). The KMS key must be in the same AWS-account and Region.\n A valid key ID is required. If you supply a null or empty string value, this operation returns an error.\n For help finding the key ID and ARN, see [Finding the key ID and ARN](https://docs.aws.amazon.com/kms/latest/developerguide/viewing-keys.html#find-cmk-id-arn) in the *Developer Guide*.\n Specify the key ID or the key ARN of the KMS key.\n For example:\n  +  Key ID: ``1234abcd-12ab-34cd-56ef-1234567890ab``\n  +  Key ARN: ``arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab``\n  \n To get the key ID and key ARN for a KMS key, use [ListKeys](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeys.html) or [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html).","type":"string"}}}},"aws-native:kms:getKey":{"description":"The ``AWS::KMS::Key`` resource specifies an [KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys) in KMSlong. You can use this resource to create symmetric encryption KMS keys, asymmetric KMS keys for encryption or signing, and symmetric HMAC KMS keys. You can use ``AWS::KMS::Key`` to create [multi-Region primary keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-primary-key) of all supported types. To replicate a multi-Region key, use the ``AWS::KMS::ReplicaKey`` resource.\n  If you change the value of the ``KeySpec``, ``KeyUsage``, ``Origin``, or ``MultiRegion`` properties of an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing any of its immutable property values.\n   KMS replaced the term *customer master key (CMK)* with ** and *KMS key*. The concept has not changed. To prevent breaking changes, KMS is keeping some variations of this term.\n  You can use symmetric encryption KMS keys to encrypt and decrypt small amounts of data, but they are more commonly used to generate data keys and data key pairs. You can also use a symmetric encryption KMS key to encrypt data stored in AWS services that are [integrated with](https://docs.aws.amazon.com//kms/features/#AWS_Service_Integration). For more information, see [Symmetric encryption KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#symmetric-cmks) in the *Developer Guide*.\n You can use asymmetric KMS keys to encrypt and decrypt data or sign messages and verify signatures. To create an asymmetric key, you must specify an asymmetric ``KeySpec`` value and a ``KeyUsage`` value. For details, see [Asymmetric keys in](https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html) in the *Developer Guide*.\n You can use HMAC KMS keys (which are also symmetric keys) to generate and verify hash-based message authentication codes. To create an HMAC key, you must specify an HMAC ``KeySpec`` value and a ``KeyUsage`` value of ``GENERATE_VERIFY_MAC``. For details, see [HMAC keys in](https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html) in the *Developer Guide*.\n You can also create symmetric encryption, asymmetric, and HMAC multi-Region primary keys. To create a multi-Region primary key, set the ``MultiRegion`` property to ``true``. For information about multi-Region keys, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.\n You cannot use the ``AWS::KMS::Key`` resource to specify a KMS key with [imported key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) or a KMS key in a [custom key store](https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html).\n  *Regions* \n KMS CloudFormation resources are available in all Regions in which KMS and CFN are supported. You can use the ``AWS::KMS::Key`` resource to create and manage all KMS key types that are supported in a Region.","inputs":{"properties":{"keyId":{"type":"string","description":"The key ID of the KMS key, such as `1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nFor information about the key ID of a KMS key, see [Key ID](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-id) in the *AWS Key Management Service Developer Guide* ."}},"required":["keyId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the KMS key, such as `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nFor information about the key ARN of a KMS key, see [Key ARN](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the *AWS Key Management Service Developer Guide* .","type":"string"},"description":{"description":"A description of the KMS key. Use a description that helps you to distinguish this KMS key from others in the account, such as its intended use.","type":"string"},"enableKeyRotation":{"description":"Enables automatic rotation of the key material for the specified KMS key. By default, automatic key rotation is not enabled.\n KMS supports automatic rotation only for symmetric encryption KMS keys (``KeySpec`` = ``SYMMETRIC_DEFAULT``). For asymmetric KMS keys, HMAC KMS keys, and KMS keys with Origin ``EXTERNAL``, omit the ``EnableKeyRotation`` property or set it to ``false``.\n To enable automatic key rotation of the key material for a multi-Region KMS key, set ``EnableKeyRotation`` to ``true`` on the primary key (created by using ``AWS::KMS::Key``). KMS copies the rotation status to all replica keys. For details, see [Rotating multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-manage.html#multi-region-rotate) in the *Developer Guide*.\n When you enable automatic rotation, KMS automatically creates new key material for the KMS key one year after the enable date and every year thereafter. KMS retains all key material until you delete the KMS key. For detailed information about automatic key rotation, see [Rotating KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html) in the *Developer Guide*.","type":"boolean"},"enabled":{"description":"Specifies whether the KMS key is enabled. Disabled KMS keys cannot be used in cryptographic operations.\n When ``Enabled`` is ``true``, the *key state* of the KMS key is ``Enabled``. When ``Enabled`` is ``false``, the key state of the KMS key is ``Disabled``. The default value is ``true``.\n The actual key state of the KMS key might be affected by actions taken outside of CloudFormation, such as running the [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html), [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html), or [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) operations.\n For information about the key states of a KMS key, see [Key state: Effect on your KMS key](https://docs.aws.amazon.com/kms/latest/developerguide/key-state.html) in the *Developer Guide*.","type":"boolean"},"keyId":{"description":"The key ID of the KMS key, such as `1234abcd-12ab-34cd-56ef-1234567890ab` .\n\nFor information about the key ID of a KMS key, see [Key ID](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-id) in the *AWS Key Management Service Developer Guide* .","type":"string"},"keyPolicy":{"$ref":"pulumi.json#/Any","description":"The key policy to attach to the KMS key.\n If you provide a key policy, it must meet the following criteria:\n  +  The key policy must allow the caller to make a subsequent [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) request on the KMS key. This reduces the risk that the KMS key becomes unmanageable. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) in the *Developer Guide*. (To omit this condition, set ``BypassPolicyLockoutSafetyCheck`` to true.)\n  +  Each statement in the key policy must contain one or more principals. The principals in the key policy must exist and be visible to KMS. When you create a new AWS principal (for example, an IAM user or role), you might need to enforce a delay before including the new principal in a key policy because the new principal might not be immediately visible to KMS. For more information, see [Changes that I make are not always immediately visible](https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_general.html#troubleshoot_general_eventual-consistency) in the *User Guide*.\n  \n If you do not provide a key policy, KMS attaches a default key policy to the KMS key. For more information, see [Default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) in the *Developer Guide*.\n A key policy document can include only the following characters:\n  +  Printable ASCII characters\n  +  Printable characters in the Basic Latin and Latin-1 Supplement character set\n  +  The tab (``\\u0009``), line feed (``\\u000A``), and carriage return (``\\u000D``) special characters\n  \n *Minimum*: ``1``\n *Maximum*: ``32768``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::KMS::Key` for more information about the expected schema for this property."},"keySpec":{"$ref":"#/types/aws-native:kms:KeySpec","description":"Specifies the type of KMS key to create. The default value, ``SYMMETRIC_DEFAULT``, creates a KMS key with a 256-bit symmetric key for encryption and decryption. In China Regions, ``SYMMETRIC_DEFAULT`` creates a 128-bit symmetric key that uses SM4 encryption. You can't change the ``KeySpec`` value after the KMS key is created. For help choosing a key spec for your KMS key, see [Choosing a KMS key type](https://docs.aws.amazon.com/kms/latest/developerguide/symm-asymm-choose.html) in the *Developer Guide*.\n The ``KeySpec`` property determines the type of key material in the KMS key and the algorithms that the KMS key supports. To further restrict the algorithms that can be used with the KMS key, use a condition key in its key policy or IAM policy. For more information, see [condition keys](https://docs.aws.amazon.com/kms/latest/developerguide/policy-conditions.html#conditions-kms) in the *Developer Guide*.\n  If you change the value of the ``KeySpec`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n   [services that are integrated with](https://docs.aws.amazon.com/kms/features/#AWS_Service_Integration) use symmetric encryption KMS keys to protect your data. These services do not support encryption with asymmetric KMS keys. For help determining whether a KMS key is asymmetric, see [Identifying asymmetric KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/find-symm-asymm.html) in the *Developer Guide*.\n  KMS supports the following key specs for KMS keys:\n  +  Symmetric encryption key (default)\n  +  ``SYMMETRIC_DEFAULT`` (AES-256-GCM)\n  \n  +  HMAC keys (symmetric)\n  +   ``HMAC_224`` \n  +   ``HMAC_256`` \n  +   ``HMAC_384`` \n  +   ``HMAC_512`` \n  \n  +  Asymmetric RSA key pairs (encryption and decryption *or* signing and verification)\n  +   ``RSA_2048`` \n  +   ``RSA_3072`` \n  +   ``RSA_4096`` \n  \n  +  Asymmetric NIST-recommended elliptic curve key pairs (signing and verification *or* deriving shared secrets)\n  +  ``ECC_NIST_P256`` (secp256r1)\n  +  ``ECC_NIST_P384`` (secp384r1)\n  +  ``ECC_NIST_P521`` (secp521r1)\n  +  ``ECC_NIST_EDWARDS25519`` (ed25519) - signing and verification only\n  +  *Note:* For ECC_NIST_EDWARDS25519 KMS keys, the ED25519_SHA_512 signing algorithm requires [MessageType:RAW](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType), while ED25519_PH_SHA_512 requires [MessageType:DIGEST](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html#KMS-Sign-request-MessageType). These message types cannot be used interchangeably.\n  \n  \n  +  Other asymmetric elliptic curve key pairs (signing and verification)\n  +  ``ECC_SECG_P256K1`` (secp256k1), commonly used for cryptocurrencies.\n  \n  +  Asymmetric ML-DSA key pairs (signing and verification)\n  +   ``ML_DSA_44`` \n  +   ``ML_DSA_65`` \n  +   ``ML_DSA_87`` \n  \n  +  SM2 key pairs (encryption and decryption *or* signing and verification *or* deriving shared secrets)\n  +  ``SM2`` (China Regions only)"},"keyUsage":{"$ref":"#/types/aws-native:kms:KeyUsage","description":"Determines the [cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. The default value is ``ENCRYPT_DECRYPT``. This property is required for asymmetric KMS keys and HMAC KMS keys. You can't change the ``KeyUsage`` value after the KMS key is created.\n  If you change the value of the ``KeyUsage`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  Select only one valid value.\n  +  For symmetric encryption KMS keys, omit the parameter or specify ``ENCRYPT_DECRYPT``.\n  +  For HMAC KMS keys (symmetric), specify ``GENERATE_VERIFY_MAC``.\n  +  For asymmetric KMS keys with RSA key pairs, specify ``ENCRYPT_DECRYPT`` or ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with NIST-recommended elliptic curve key pairs, specify ``SIGN_VERIFY`` or ``KEY_AGREEMENT``.\n  +  For asymmetric KMS keys with ``ECC_SECG_P256K1`` key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with ML-DSA key pairs, specify ``SIGN_VERIFY``.\n  +  For asymmetric KMS keys with SM2 key pairs (China Regions only), specify ``ENCRYPT_DECRYPT``, ``SIGN_VERIFY``, or ``KEY_AGREEMENT``."},"multiRegion":{"description":"Creates a multi-Region primary key that you can replicate in other AWS-Regions. You can't change the ``MultiRegion`` value after the KMS key is created.\n For a list of AWS-Regions in which multi-Region keys are supported, see [Multi-Region keys in](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the **.\n  If you change the value of the ``MultiRegion`` property on an existing KMS key, the update request fails, regardless of the value of the [UpdateReplacePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatereplacepolicy.html). This prevents you from accidentally deleting a KMS key by changing an immutable property value.\n  For a multi-Region key, set to this property to ``true``. For a single-Region key, omit this property or set it to ``false``. The default value is ``false``.\n *Multi-Region keys* are an KMS feature that lets you create multiple interoperable KMS keys in different AWS-Regions. Because these KMS keys have the same key ID, key material, and other metadata, you can use them to encrypt data in one AWS-Region and decrypt it in a different AWS-Region without making a cross-Region call or exposing the plaintext data. For more information, see [Multi-Region keys](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html) in the *Developer Guide*.\n You can create a symmetric encryption, HMAC, or asymmetric multi-Region KMS key, and you can create a multi-Region key with imported key material. However, you cannot create a multi-Region key in a custom key store.\n To create a replica of this primary key in a different AWS-Region , create an [AWS::KMS::ReplicaKey](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-replicakey.html) resource in a CloudFormation stack in the replica Region. Specify the key ARN of this primary key.","type":"boolean"},"origin":{"$ref":"#/types/aws-native:kms:KeyOrigin","description":"The source of the key material for the KMS key. You cannot change the origin after you create the KMS key. The default is ``AWS_KMS``, which means that KMS creates the key material.\n To [create a KMS key with no key material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-create-cmk.html) (for imported key material), set this value to ``EXTERNAL``. For more information about importing key material into KMS, see [Importing Key Material](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html) in the *Developer Guide*.\n You can ignore ``ENABLED`` when Origin is ``EXTERNAL``. When a KMS key with Origin ``EXTERNAL`` is created, the key state is ``PENDING_IMPORT`` and ``ENABLED`` is ``false``. After you import the key material, ``ENABLED`` updated to ``true``. The KMS key can then be used for Cryptographic Operations. \n   +  CFN doesn't support creating an ``Origin`` parameter of the ``AWS_CLOUDHSM`` or ``EXTERNAL_KEY_STORE`` values.\n  +  ``EXTERNAL`` is not supported for ML-DSA keys."},"tags":{"description":"Assigns one or more tags to the replica key.\n  Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see [ABAC for](https://docs.aws.amazon.com/kms/latest/developerguide/abac.html) in the *Developer Guide*.\n  For information about tags in KMS, see [Tagging keys](https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html) in the *Developer Guide*. For information about tags in CloudFormation, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:kms:getReplicaKey":{"description":"The AWS::KMS::ReplicaKey resource specifies a multi-region replica AWS KMS key in AWS Key Management Service (AWS KMS).","inputs":{"properties":{"keyId":{"type":"string","description":"The key ID of the replica key, such as `mrk-1234abcd12ab34cd56ef1234567890ab` .\n\nRelated multi-Region keys have the same key ID. For information about the key IDs of multi-Region keys, see [How multi-Region keys work](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-how-it-works) in the *AWS Key Management Service Developer Guide* ."}},"required":["keyId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the replica key, such as `arn:aws:kms:us-west-2:111122223333:key/mrk-1234abcd12ab34cd56ef1234567890ab` .\n\nThe key ARNs of related multi-Region keys differ only in the Region value. For information about the key ARNs of multi-Region keys, see [How multi-Region keys work](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-how-it-works) in the *AWS Key Management Service Developer Guide* .","type":"string"},"description":{"description":"A description of the AWS KMS key. Use a description that helps you to distinguish this AWS KMS key from others in the account, such as its intended use.","type":"string"},"enabled":{"description":"Specifies whether the AWS KMS key is enabled. Disabled AWS KMS keys cannot be used in cryptographic operations.","type":"boolean"},"keyId":{"description":"The key ID of the replica key, such as `mrk-1234abcd12ab34cd56ef1234567890ab` .\n\nRelated multi-Region keys have the same key ID. For information about the key IDs of multi-Region keys, see [How multi-Region keys work](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-overview.html#mrk-how-it-works) in the *AWS Key Management Service Developer Guide* .","type":"string"},"keyPolicy":{"$ref":"pulumi.json#/Any","description":"The key policy that authorizes use of the AWS KMS key. The key policy must observe the following rules.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::KMS::ReplicaKey` for more information about the expected schema for this property."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lakeformation:getPrincipalPermissions":{"description":"The ``AWS::LakeFormation::PrincipalPermissions`` resource represents the permissions that a principal has on a GLUDC resource (such as GLUlong databases or GLUlong tables). When you create a ``PrincipalPermissions`` resource, the permissions are granted via the LFlong``GrantPermissions`` API operation. When you delete a ``PrincipalPermissions`` resource, the permissions on principal-resource pair are revoked via the LFlong``RevokePermissions`` API operation.","inputs":{"properties":{"principalIdentifier":{"type":"string","description":"Json encoding of the input principal. For example: `{\"DataLakePrincipalIdentifier\":\"arn:aws:iam::123456789012:role/ExampleRole\"}`"},"resourceIdentifier":{"type":"string","description":"Json encoding of the input resource. For example: `{\"Catalog\":null,\"Database\":null,\"Table\":null,\"TableWithColumns\":null,\"DataLocation\":null,\"DataCellsFilter\":{\"TableCatalogId\":\"123456789012\",\"DatabaseName\":\"ExampleDatabase\",\"TableName\":\"ExampleTable\",\"Name\":\"ExampleFilter\"},\"LFTag\":null,\"LFTagPolicy\":null}`"}},"required":["principalIdentifier","resourceIdentifier"]},"outputs":{"properties":{"principalIdentifier":{"description":"Json encoding of the input principal. For example: `{\"DataLakePrincipalIdentifier\":\"arn:aws:iam::123456789012:role/ExampleRole\"}`","type":"string"},"resourceIdentifier":{"description":"Json encoding of the input resource. For example: `{\"Catalog\":null,\"Database\":null,\"Table\":null,\"TableWithColumns\":null,\"DataLocation\":null,\"DataCellsFilter\":{\"TableCatalogId\":\"123456789012\",\"DatabaseName\":\"ExampleDatabase\",\"TableName\":\"ExampleTable\",\"Name\":\"ExampleFilter\"},\"LFTag\":null,\"LFTagPolicy\":null}`","type":"string"}}}},"aws-native:lakeformation:getTag":{"description":"A resource schema representing a Lake Formation Tag.","inputs":{"properties":{"tagKey":{"type":"string","description":"The key-name for the LF-tag."}},"required":["tagKey"]},"outputs":{"properties":{"tagValues":{"description":"A list of possible values an attribute can take.","items":{"type":"string"},"type":"array"}}}},"aws-native:lakeformation:getTagAssociation":{"description":"A resource schema representing a Lake Formation Tag Association. While tag associations are not explicit Lake Formation resources, this CloudFormation resource can be used to associate tags with Lake Formation entities.","inputs":{"properties":{"resourceIdentifier":{"type":"string","description":"Unique string identifying the resource. Used as primary identifier, which ideally should be a string"},"tagsIdentifier":{"type":"string","description":"Unique string identifying the resource's tags. Used as primary identifier, which ideally should be a string"}},"required":["resourceIdentifier","tagsIdentifier"]},"outputs":{"properties":{"resourceIdentifier":{"description":"Unique string identifying the resource. Used as primary identifier, which ideally should be a string","type":"string"},"tagsIdentifier":{"description":"Unique string identifying the resource's tags. Used as primary identifier, which ideally should be a string","type":"string"}}}},"aws-native:lambda:getAlias":{"description":"Resource Type definition for AWS::Lambda::Alias","inputs":{"properties":{"aliasArn":{"type":"string","description":"Lambda Alias ARN generated by the service."}},"required":["aliasArn"]},"outputs":{"properties":{"aliasArn":{"description":"Lambda Alias ARN generated by the service.","type":"string"},"description":{"description":"A description of the alias.","type":"string"},"functionVersion":{"description":"The function version that the alias invokes.","type":"string"},"provisionedConcurrencyConfig":{"$ref":"#/types/aws-native:lambda:AliasProvisionedConcurrencyConfiguration","description":"Specifies a provisioned concurrency configuration for a function's alias."},"routingConfig":{"$ref":"#/types/aws-native:lambda:AliasRoutingConfiguration","description":"The routing configuration of the alias."}}}},"aws-native:lambda:getCapacityProvider":{"description":"Creates a capacity provider that manages compute resources for Lambda functions","inputs":{"properties":{"capacityProviderName":{"type":"string"}},"required":["capacityProviderName"]},"outputs":{"properties":{"arn":{"type":"string"},"capacityProviderScalingConfig":{"$ref":"#/types/aws-native:lambda:CapacityProviderScalingConfig","description":"The scaling configuration for the capacity provider."},"state":{"$ref":"#/types/aws-native:lambda:CapacityProviderState","description":"The current state of the capacity provider."},"tags":{"description":"A key-value pair that provides metadata for the capacity provider.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lambda:getCodeSigningConfig":{"description":"Resource Type definition for AWS::Lambda::CodeSigningConfig.","inputs":{"properties":{"codeSigningConfigArn":{"type":"string","description":"A unique Arn for CodeSigningConfig resource"}},"required":["codeSigningConfigArn"]},"outputs":{"properties":{"allowedPublishers":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigAllowedPublishers","description":"When the CodeSigningConfig is later on attached to a function, the function code will be expected to be signed by profiles from this list"},"codeSigningConfigArn":{"description":"A unique Arn for CodeSigningConfig resource","type":"string"},"codeSigningConfigId":{"description":"A unique identifier for CodeSigningConfig resource","type":"string"},"codeSigningPolicies":{"$ref":"#/types/aws-native:lambda:CodeSigningConfigCodeSigningPolicies","description":"Policies to control how to act if a signature is invalid"},"description":{"description":"A description of the CodeSigningConfig","type":"string"},"tags":{"description":"A list of tags to apply to CodeSigningConfig resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lambda:getEventInvokeConfig":{"description":"The AWS::Lambda::EventInvokeConfig resource configures options for asynchronous invocation on a version or an alias.","inputs":{"properties":{"functionName":{"type":"string","description":"The name of the Lambda function."},"qualifier":{"type":"string","description":"The identifier of a version or alias."}},"required":["functionName","qualifier"]},"outputs":{"properties":{"destinationConfig":{"$ref":"#/types/aws-native:lambda:EventInvokeConfigDestinationConfig","description":"A destination for events after they have been sent to a function for processing.\n\n**Destinations** - *Function* - The Amazon Resource Name (ARN) of a Lambda function.\n- *Queue* - The ARN of a standard SQS queue.\n- *Bucket* - The ARN of an Amazon S3 bucket.\n- *Topic* - The ARN of a standard SNS topic.\n- *Event Bus* - The ARN of an Amazon EventBridge event bus.\n\n\u003e S3 buckets are supported only for on-failure destinations. To retain records of successful invocations, use another destination type."},"maximumEventAgeInSeconds":{"description":"The maximum age of a request that Lambda sends to a function for processing.","type":"integer"},"maximumRetryAttempts":{"description":"The maximum number of times to retry when the function returns an error.","type":"integer"}}}},"aws-native:lambda:getEventSourceMapping":{"description":"The ``AWS::Lambda::EventSourceMapping`` resource creates a mapping between an event source and an LAMlong function. LAM reads items from the event source and triggers the function.\n For details about each event source type, see the following topics. In particular, each of the topics describes the required and optional parameters for the specific event source. \n  +   [Configuring a Dynamo DB stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html#services-dynamodb-eventsourcemapping) \n  +   [Configuring a Kinesis stream as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html#services-kinesis-eventsourcemapping) \n  +   [Configuring an SQS queue as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-eventsource) \n  +   [Configuring an MQ broker as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-mq.html#services-mq-eventsourcemapping) \n  +   [Configuring MSK as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html) \n  +   [Configuring Self-Managed Apache Kafka as an event source](https://docs.aws.amazon.com/lambda/latest/dg/kafka-smaa.html) \n  +   [Configuring Amazon DocumentDB as an event source](https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html)","inputs":{"properties":{"id":{"type":"string","description":"The event source mapping's ID."}},"required":["id"]},"outputs":{"properties":{"amazonManagedKafkaEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingAmazonManagedKafkaEventSourceConfig","description":"Specific configuration settings for an Amazon Managed Streaming for Apache Kafka (Amazon MSK) event source."},"batchSize":{"description":"The maximum number of records in each batch that Lambda pulls from your stream or queue and sends to your function. Lambda passes all of the records in the batch to the function in a single call, up to the payload limit for synchronous invocation (6 MB).\n  +  *Amazon Kinesis* – Default 100. Max 10,000.\n  +  *Amazon DynamoDB Streams* – Default 100. Max 10,000.\n  +  *Amazon Simple Queue Service* – Default 10. For standard queues the max is 10,000. For FIFO queues the max is 10.\n  +  *Amazon Managed Streaming for Apache Kafka* – Default 100. Max 10,000.\n  +  *Self-managed Apache Kafka* – Default 100. Max 10,000.\n  +  *Amazon MQ (ActiveMQ and RabbitMQ)* – Default 100. Max 10,000.\n  +  *DocumentDB* – Default 100. Max 10,000.","type":"integer"},"bisectBatchOnFunctionError":{"description":"(Kinesis and DynamoDB Streams only) If the function returns an error, split the batch in two and retry. The default value is false.\n  When using ``BisectBatchOnFunctionError``, check the ``BatchSize`` parameter in the ``OnFailure`` destination message's metadata. The ``BatchSize`` could be greater than 1 since LAM consolidates failed messages metadata when writing to the ``OnFailure`` destination.","type":"boolean"},"destinationConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDestinationConfig","description":"(Kinesis, DynamoDB Streams, Amazon MSK, and self-managed Apache Kafka event sources only) A configuration object that specifies the destination of an event after Lambda processes it."},"documentDbEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingDocumentDbEventSourceConfig","description":"Specific configuration settings for a DocumentDB event source."},"enabled":{"description":"When true, the event source mapping is active. When false, Lambda pauses polling and invocation.\n Default: True","type":"boolean"},"eventSourceMappingArn":{"description":"The Amazon Resource Name (ARN) of the event source mapping.","type":"string"},"filterCriteria":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFilterCriteria","description":"An object that defines the filter criteria that determine whether Lambda should process an event. For more information, see [Lambda event filtering](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html)."},"functionName":{"description":"The name or ARN of the Lambda function.\n  **Name formats**\n +  *Function name* – ``MyFunction``.\n  +  *Function ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction``.\n  +  *Version or Alias ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:MyFunction:PROD``.\n  +  *Partial ARN* – ``123456789012:function:MyFunction``.\n  \n The length constraint applies only to the full ARN. If you specify only the function name, it's limited to 64 characters in length.","type":"string"},"functionResponseTypes":{"description":"(Kinesis, DynamoDB Streams, and SQS) A list of current response type enums applied to the event source mapping.\n Valid Values: ``ReportBatchItemFailures``","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingFunctionResponseTypesItem"},"type":"array"},"id":{"description":"The event source mapping's ID.","type":"string"},"kmsKeyArn":{"description":"The ARN of the KMSlong (KMS) customer managed key that Lambda uses to encrypt your function's [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics).","type":"string"},"loggingConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingLoggingConfig","description":"The function's Amazon CloudWatch Logs configuration settings."},"maximumBatchingWindowInSeconds":{"description":"The maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function.\n *Default (, , event sources)*: 0\n *Default (, Kafka, , event sources)*: 500 ms\n *Related setting:* For SQS event sources, when you set ``BatchSize`` to a value greater than 10, you must set ``MaximumBatchingWindowInSeconds`` to at least 1.","type":"integer"},"maximumRecordAgeInSeconds":{"description":"(Kinesis and DynamoDB Streams only) Discard records older than the specified age. The default value is -1, which sets the maximum age to infinite. When the value is set to infinite, Lambda never discards old records.\n  The minimum valid value for maximum record age is 60s. Although values less than 60 and greater than -1 fall within the parameter's absolute range, they are not allowed","type":"integer"},"maximumRetryAttempts":{"description":"(Kinesis and DynamoDB Streams only) Discard records after the specified number of retries. The default value is -1, which sets the maximum number of retries to infinite. When MaximumRetryAttempts is infinite, Lambda retries failed records until the record expires in the event source.","type":"integer"},"metricsConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingMetricsConfig","description":"The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics)."},"parallelizationFactor":{"description":"(Kinesis and DynamoDB Streams only) The number of batches to process concurrently from each shard. The default value is 1.","type":"integer"},"provisionedPollerConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingProvisionedPollerConfig","description":"(Amazon SQS, Amazon MSK, and self-managed Apache Kafka only) The provisioned mode configuration for the event source. For more information, see [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode)."},"queues":{"description":"(Amazon MQ) The name of the Amazon MQ broker destination queue to consume.","items":{"type":"string"},"type":"array"},"scalingConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingScalingConfig","description":"This property is for Amazon SQS event sources only. You cannot use ``ProvisionedPollerConfig`` while using ``ScalingConfig``. These options are mutually exclusive. To remove the scaling configuration, pass an empty value."},"selfManagedKafkaEventSourceConfig":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSelfManagedKafkaEventSourceConfig","description":"Specific configuration settings for a self-managed Apache Kafka event source."},"sourceAccessConfigurations":{"description":"An array of the authentication protocol, VPC components, or virtual host to secure and define your event source.","items":{"$ref":"#/types/aws-native:lambda:EventSourceMappingSourceAccessConfiguration"},"type":"array"},"tags":{"description":"A list of tags to add to the event source mapping.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"topics":{"description":"The name of the Kafka topic.","items":{"type":"string"},"type":"array"},"tumblingWindowInSeconds":{"description":"(Kinesis and DynamoDB Streams only) The duration in seconds of a processing window for DynamoDB and Kinesis Streams event sources. A value of 0 seconds indicates no tumbling window.","type":"integer"}}}},"aws-native:lambda:getFunction":{"description":"The ``AWS::Lambda::Function`` resource creates a Lambda function. To create a function, you need a [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) and an [execution role](https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html). The deployment package is a .zip file archive or container image that contains your function code. The execution role grants the function permission to use AWS services, such as Amazon CloudWatch Logs for log streaming and AWS X-Ray for request tracing.\n You set the package type to ``Image`` if the deployment package is a [container image](https://docs.aws.amazon.com/lambda/latest/dg/lambda-images.html). For these functions, include the URI of the container image in the ECR registry in the [ImageUri property of the Code property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-imageuri). You do not need to specify the handler and runtime properties. \n You set the package type to ``Zip`` if the deployment package is a [.zip file archive](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html#gettingstarted-package-zip). For these functions, specify the S3 location of your .zip file in the ``Code`` property. Alternatively, for Node.js and Python functions, you can define your function inline in the [ZipFile property of the Code property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-code.html#cfn-lambda-function-code-zipfile). In both cases, you must also specify the handler and runtime properties.\n You can use [code signing](https://docs.aws.amazon.com/lambda/latest/dg/configuration-codesigning.html) if your deployment package is a .zip file archive. To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with ``UpdateFunctionCode``, Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.\n When you update a ``AWS::Lambda::Function`` resource, CFNshort calls the [UpdateFunctionConfiguration](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionConfiguration.html) and [UpdateFunctionCode](https://docs.aws.amazon.com/lambda/latest/api/API_UpdateFunctionCode.html)LAM APIs under the hood. Because these calls happen sequentially, and invocations can happen between these calls, your function may encounter errors in the time between the calls. For example, if you remove an environment variable, and the code that references that environment variable in the same CFNshort update, you may see invocation errors related to a missing environment variable. To work around this, you can invoke your function against a version or alias by default, rather than the ``$LATEST`` version.\n Note that you configure [provisioned concurrency](https://docs.aws.amazon.com/lambda/latest/dg/provisioned-concurrency.html) on a ``AWS::Lambda::Version`` or a ``AWS::Lambda::Alias``.\n For a complete introduction to Lambda functions, see [What is Lambda?](https://docs.aws.amazon.com/lambda/latest/dg/lambda-welcome.html) in the *Lambda developer guide.*","inputs":{"properties":{"functionName":{"type":"string","description":"The name of the Lambda function, up to 64 characters in length. If you don't specify a name, CFN generates one.\n If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["functionName"]},"outputs":{"properties":{"architectures":{"description":"The instruction set architecture that the function supports. Enter a string array with one of the valid values (arm64 or x86_64). The default value is ``x86_64``.","items":{"$ref":"#/types/aws-native:lambda:FunctionArchitecturesItem"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the function.","type":"string"},"capacityProviderConfig":{"$ref":"#/types/aws-native:lambda:FunctionCapacityProviderConfig","description":"Configuration for the capacity provider that manages compute resources for Lambda functions."},"code":{"$ref":"#/types/aws-native:lambda:FunctionCode","description":"The code for the function. You can define your function code in multiple ways:\n  +  For .zip deployment packages, you can specify the S3 location of the .zip file in the ``S3Bucket``, ``S3Key``, and ``S3ObjectVersion`` properties.\n  +  For .zip deployment packages, you can alternatively define the function code inline in the ``ZipFile`` property. This method works only for Node.js and Python functions.\n  +  For container images, specify the URI of your container image in the ECR registry in the ``ImageUri`` property."},"codeSigningConfigArn":{"description":"To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes a set of signing profiles, which define the trusted publishers for this function.","type":"string"},"deadLetterConfig":{"$ref":"#/types/aws-native:lambda:FunctionDeadLetterConfig","description":"A dead-letter queue configuration that specifies the queue or topic where Lambda sends asynchronous events when they fail processing. For more information, see [Dead-letter queues](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-dlq)."},"description":{"description":"A description of the function.","type":"string"},"durableConfig":{"$ref":"#/types/aws-native:lambda:FunctionDurableConfig","description":"Configuration settings for [durable functions](https://docs.aws.amazon.com/lambda/latest/dg/durable-functions.html), including execution timeout and retention period for execution history."},"environment":{"$ref":"#/types/aws-native:lambda:FunctionEnvironment","description":"Environment variables that are accessible from function code during execution."},"ephemeralStorage":{"$ref":"#/types/aws-native:lambda:FunctionEphemeralStorage","description":"The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB."},"fileSystemConfigs":{"description":"Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function.\n For more information about using the ``DependsOn`` attribute, see [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html).","items":{"$ref":"#/types/aws-native:lambda:FunctionFileSystemConfig"},"type":"array"},"functionScalingConfig":{"$ref":"#/types/aws-native:lambda:FunctionScalingConfig","description":"Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned."},"handler":{"description":"The name of the method within your code that Lambda calls to run your function. Handler is required if the deployment package is a .zip file archive. The format includes the file name. It can also include namespaces and other qualifiers, depending on the runtime. For more information, see [Lambda programming model](https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html).","type":"string"},"imageConfig":{"$ref":"#/types/aws-native:lambda:FunctionImageConfig","description":"Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms)."},"kmsKeyArn":{"description":"The ARN of the KMSlong (KMS) customer managed key that's used to encrypt the following resources:\n  +  The function's [environment variables](https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-encryption).\n  +  The function's [Lambda SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart-security.html) snapshots.\n  +  When used with ``SourceKMSKeyArn``, the unzipped version of the .zip deployment package that's used for function invocations. For more information, see [Specifying a customer managed key for Lambda](https://docs.aws.amazon.com/lambda/latest/dg/encrypt-zip-package.html#enable-zip-custom-encryption).\n  +  The optimized version of the container image that's used for function invocations. Note that this is not the same key that's used to protect your container image in the Amazon Elastic Container Registry (Amazon ECR). For more information, see [Function lifecycle](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-lifecycle).\n  \n If you don't provide a customer managed key, Lambda uses an [owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk) or an [](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk).","type":"string"},"layers":{"description":"A list of [function layers](https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html) to add to the function's execution environment. Specify each layer by its ARN, including the version.","items":{"type":"string"},"type":"array"},"loggingConfig":{"$ref":"#/types/aws-native:lambda:FunctionLoggingConfig","description":"The function's Amazon CloudWatch Logs configuration settings."},"memorySize":{"description":"The amount of [memory available to the function](https://docs.aws.amazon.com/lambda/latest/dg/configuration-function-common.html#configuration-memory-console) at runtime. Increasing the function memory also increases its CPU allocation. The default value is 128 MB. The value can be any multiple of 1 MB. Note that new AWS accounts have reduced concurrency and memory quotas. AWS raises these quotas automatically based on your usage. You can also request a quota increase.","type":"integer"},"recursiveLoop":{"$ref":"#/types/aws-native:lambda:FunctionRecursiveLoop","description":"The status of your function's recursive loop detection configuration.\n When this value is set to ``Allow``and Lambda detects your function being invoked as part of a recursive loop, it doesn't take any action.\n When this value is set to ``Terminate`` and Lambda detects your function being invoked as part of a recursive loop, it stops your function being invoked and notifies you."},"reservedConcurrentExecutions":{"description":"The number of simultaneous executions to reserve for the function.","type":"integer"},"role":{"description":"The Amazon Resource Name (ARN) of the function's execution role.","type":"string"},"runtime":{"description":"The identifier of the function's [runtime](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html). Runtime is required if the deployment package is a .zip file archive. Specifying a runtime results in an error if you're deploying a function using a container image.\n The following list includes deprecated runtimes. Lambda blocks creating new functions and updating existing functions shortly after each runtime is deprecated. For more information, see [Runtime use after deprecation](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtime-deprecation-levels).\n For a list of all currently supported runtimes, see [Supported runtimes](https://docs.aws.amazon.com/lambda/latest/dg/lambda-runtimes.html#runtimes-supported).","type":"string"},"runtimeManagementConfig":{"$ref":"#/types/aws-native:lambda:FunctionRuntimeManagementConfig","description":"Sets the runtime management configuration for a function's version. For more information, see [Runtime updates](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-update.html)."},"snapStartResponse":{"$ref":"#/types/aws-native:lambda:FunctionSnapStartResponse"},"tags":{"description":"A list of [tags](https://docs.aws.amazon.com/lambda/latest/dg/tagging.html) to apply to the function.\n  You must have the ``lambda:TagResource``, ``lambda:UntagResource``, and ``lambda:ListTags`` permissions for your [principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html) to manage the CFN stack. If you don't have these permissions, there might be unexpected behavior with stack-level tags propagating to the resource during resource creation and update.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeout":{"description":"The amount of time (in seconds) that Lambda allows a function to run before stopping it. The default is 3 seconds. The maximum allowed value is 900 seconds. For more information, see [Lambda execution environment](https://docs.aws.amazon.com/lambda/latest/dg/runtimes-context.html).","type":"integer"},"tracingConfig":{"$ref":"#/types/aws-native:lambda:FunctionTracingConfig","description":"Set ``Mode`` to ``Active`` to sample and trace a subset of incoming requests with [X-Ray](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html)."},"vpcConfig":{"$ref":"#/types/aws-native:lambda:FunctionVpcConfig","description":"For network connectivity to AWS resources in a VPC, specify a list of security groups and subnets in the VPC. When you connect a function to a VPC, it can access resources and the internet only through that VPC. For more information, see [Configuring a Lambda function to access resources in a VPC](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html)."}}}},"aws-native:lambda:getLayerVersion":{"description":"Resource Type definition for AWS::Lambda::LayerVersion","inputs":{"properties":{"layerVersionArn":{"type":"string","description":"The ARN of the layer version."}},"required":["layerVersionArn"]},"outputs":{"properties":{"layerVersionArn":{"description":"The ARN of the layer version.","type":"string"}}}},"aws-native:lambda:getLayerVersionPermission":{"description":"Schema for Lambda LayerVersionPermission","inputs":{"properties":{"id":{"type":"string","description":"ID generated by service"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"ID generated by service","type":"string"}}}},"aws-native:lambda:getPermission":{"description":"The ``AWS::Lambda::Permission`` resource grants an AWS service or another account permission to use a function. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias. If you use a qualifier, the invoker must use the full Amazon Resource Name (ARN) of that version or alias to invoke the function.\n To grant permission to another account, specify the account ID as the ``Principal``. To grant permission to an organization defined in AOlong, specify the organization ID as the ``PrincipalOrgID``. For AWS services, the principal is a domain-style identifier defined by the service, like ``s3.amazonaws.com`` or ``sns.amazonaws.com``. For AWS services, you can also specify the ARN of the associated resource as the ``SourceArn``. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function.\n If your function has a function URL, you can specify the ``FunctionUrlAuthType`` parameter. This adds a condition to your permission that only applies when your function URL's ``AuthType`` matches the specified ``FunctionUrlAuthType``. For more information about the ``AuthType`` parameter, see [Control access to function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html).\n This resource adds a statement to a resource-based permission policy for the function. For more information about function policies, see [Lambda Function Policies](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html).","inputs":{"properties":{"functionName":{"type":"string","description":"The name or ARN of the Lambda function, version, or alias.\n  **Name formats**\n +  *Function name* – ``my-function`` (name-only), ``my-function:v1`` (with alias).\n  +  *Function ARN* – ``arn:aws:lambda:us-west-2:123456789012:function:my-function``.\n  +  *Partial ARN* – ``123456789012:function:my-function``.\n  \n You can append a version number or alias to any of the formats. The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length."},"id":{"type":"string"}},"required":["functionName","id"]},"outputs":{"properties":{"id":{"type":"string"}}}},"aws-native:lambda:getUrl":{"description":"Resource Type definition for AWS::Lambda::Url","inputs":{"properties":{"functionArn":{"type":"string","description":"The full Amazon Resource Name (ARN) of the function associated with the Function URL."}},"required":["functionArn"]},"outputs":{"properties":{"authType":{"$ref":"#/types/aws-native:lambda:UrlAuthType","description":"Can be either AWS_IAM if the requests are authorized via IAM, or NONE if no authorization is configured on the Function URL."},"cors":{"$ref":"#/types/aws-native:lambda:UrlCors","description":"The [Cross-Origin Resource Sharing (CORS)](https://docs.aws.amazon.com/https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS) settings for your function URL."},"functionArn":{"description":"The full Amazon Resource Name (ARN) of the function associated with the Function URL.","type":"string"},"functionUrl":{"description":"The generated url for this resource.","type":"string"},"invokeMode":{"$ref":"#/types/aws-native:lambda:UrlInvokeMode","description":"The invocation mode for the function's URL. Set to BUFFERED if you want to buffer responses before returning them to the client. Set to RESPONSE_STREAM if you want to stream responses, allowing faster time to first byte and larger response payload sizes. If not set, defaults to BUFFERED."}}}},"aws-native:lambda:getVersion":{"description":"Resource Type definition for AWS::Lambda::Version","inputs":{"properties":{"functionArn":{"type":"string","description":"The ARN of the version."}},"required":["functionArn"]},"outputs":{"properties":{"functionArn":{"description":"The ARN of the version.","type":"string"},"functionScalingConfig":{"$ref":"#/types/aws-native:lambda:VersionFunctionScalingConfig","description":"The scaling configuration to apply to the function, including minimum and maximum execution environment limits."},"version":{"description":"The version number.","language":{"csharp":{"name":"VersionValue"}},"type":"string"}}}},"aws-native:launchwizard:getDeployment":{"description":"Definition of AWS::LaunchWizard::Deployment Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"ARN of the LaunchWizard deployment"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"ARN of the LaunchWizard deployment","type":"string"},"createdAt":{"description":"Timestamp of LaunchWizard deployment creation","type":"string"},"deletedAt":{"description":"Timestamp of LaunchWizard deployment deletion","type":"string"},"deploymentId":{"description":"Deployment ID of the LaunchWizard deployment","type":"string"},"resourceGroup":{"description":"Resource Group Name created for LaunchWizard deployment","type":"string"},"status":{"$ref":"#/types/aws-native:launchwizard:DeploymentStatus","description":"Status of LaunchWizard deployment"},"tags":{"description":"Tags for LaunchWizard deployment","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lex:getBot":{"description":"Resource Type definition for an Amazon Lex conversational bot performing automated tasks such as ordering a pizza, booking a hotel, and so on.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier of the bot."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the bot.","type":"string"},"botTags":{"description":"A list of tags to add to the bot. You can only add tags when you import a bot. You can't use the `UpdateBot` operation to update tags. To update tags, use the `TagResource` operation.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"dataPrivacy":{"$ref":"#/types/aws-native:lex:DataPrivacyProperties","description":"By default, data stored by Amazon Lex is encrypted. The `DataPrivacy` structure provides settings that determine how Amazon Lex handles special cases of securing the data for your bot."},"description":{"description":"The description of the version.","type":"string"},"errorLogSettings":{"$ref":"#/types/aws-native:lex:ErrorLogSettingsProperties"},"id":{"description":"The unique identifier of the bot.","type":"string"},"idleSessionTtlInSeconds":{"description":"The time, in seconds, that Amazon Lex should keep information about a user's conversation with the bot.\n\nA user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Lex deletes any data provided before the timeout.\n\nYou can specify between 60 (1 minute) and 86,400 (24 hours) seconds.","type":"integer"},"name":{"description":"The name of the bot locale.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role used to build and run the bot.","type":"string"}}}},"aws-native:lex:getBotAlias":{"description":"Resource Type definition for a Bot Alias, which enables you to change the version of a bot without updating applications that use the bot","inputs":{"properties":{"botAliasId":{"type":"string","description":"The unique identifier of the bot alias."},"botId":{"type":"string","description":"The unique identifier of the bot."}},"required":["botAliasId","botId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the bot alias.","type":"string"},"botAliasId":{"description":"The unique identifier of the bot alias.","type":"string"},"botAliasLocaleSettings":{"description":"Specifies settings that are unique to a locale. For example, you can use different Lambda function depending on the bot's locale.","items":{"$ref":"#/types/aws-native:lex:BotAliasLocaleSettingsItem"},"type":"array"},"botAliasName":{"description":"The name of the bot alias.","type":"string"},"botAliasStatus":{"$ref":"#/types/aws-native:lex:BotAliasStatus","description":"The current status of the bot alias. When the status is Available the alias is ready for use with your bot."},"botAliasTags":{"description":"A list of tags to add to the bot alias.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"botVersion":{"description":"The version of the bot that the bot alias references.","type":"string"},"conversationLogSettings":{"$ref":"#/types/aws-native:lex:BotAliasConversationLogSettings","description":"Specifies whether Amazon Lex logs text and audio for conversations with the bot. When you enable conversation logs, text logs store text input, transcripts of audio input, and associated metadata in Amazon CloudWatch logs. Audio logs store input in Amazon S3 ."},"description":{"description":"The description of the bot alias.","type":"string"},"sentimentAnalysisSettings":{"$ref":"#/types/aws-native:lex:SentimentAnalysisSettingsProperties","description":"Determines whether Amazon Lex will use Amazon Comprehend to detect the sentiment of user utterances."}}}},"aws-native:lex:getBotVersion":{"description":"Resource Type definition for bot versions, a numbered snapshot of your work that you can publish for use in different parts of your workflow, such as development, beta deployment, and production.","inputs":{"properties":{"botId":{"type":"string","description":"The unique identifier of the bot."},"botVersion":{"type":"string","description":"The version of the bot.","language":{"csharp":{"name":"BotVersionValue"}}}},"required":["botId","botVersion"]},"outputs":{"properties":{"botVersion":{"description":"The version of the bot.","language":{"csharp":{"name":"BotVersionValue"}},"type":"string"},"description":{"description":"The description of the version.","type":"string"}}}},"aws-native:lex:getResourcePolicy":{"description":"Resource Type definition for a resource policy with specified policy statements that attaches to a Lex bot or bot alias.","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the resource policy."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The identifier of the resource policy.","type":"string"},"policy":{"$ref":"#/types/aws-native:lex:ResourcePolicyPolicy","description":"A resource policy to add to the resource. The policy is a JSON structure that contains one or more statements that define the policy. The policy must follow IAM syntax. If the policy isn't valid, Amazon Lex returns a validation exception."},"revisionId":{"description":"Specifies the current revision of a resource policy.","type":"string"}}}},"aws-native:licensemanager:getGrant":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"grantArn":{"type":"string","description":"Arn of the grant."}},"required":["grantArn"]},"outputs":{"properties":{"grantArn":{"description":"Arn of the grant.","type":"string"},"grantName":{"description":"Name for the created Grant.","type":"string"},"homeRegion":{"description":"Home region for the created grant.","type":"string"},"licenseArn":{"description":"License Arn for the grant.","type":"string"},"tags":{"description":"A list of tags to attach.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"The version of the grant.","type":"string"}}}},"aws-native:licensemanager:getLicense":{"description":"Resource Type definition for AWS::LicenseManager::License","inputs":{"properties":{"licenseArn":{"type":"string","description":"Amazon Resource Name is a unique name for each resource."}},"required":["licenseArn"]},"outputs":{"properties":{"beneficiary":{"description":"Beneficiary of the license.","type":"string"},"consumptionConfiguration":{"$ref":"#/types/aws-native:licensemanager:LicenseConsumptionConfiguration","description":"Configuration for consumption of the license."},"entitlements":{"description":"License entitlements.","items":{"$ref":"#/types/aws-native:licensemanager:LicenseEntitlement"},"type":"array"},"homeRegion":{"description":"Home region for the created license.","type":"string"},"issuer":{"$ref":"#/types/aws-native:licensemanager:LicenseIssuerData","description":"License issuer."},"licenseArn":{"description":"Amazon Resource Name is a unique name for each resource.","type":"string"},"licenseMetadata":{"description":"License metadata.","items":{"$ref":"#/types/aws-native:licensemanager:LicenseMetadata"},"type":"array"},"licenseName":{"description":"Name for the created license.","type":"string"},"productName":{"description":"Product name for the created license.","type":"string"},"productSku":{"description":"ProductSKU of the license.","type":"string"},"status":{"description":"License status.","type":"string"},"tags":{"description":"A list of tags to attach.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"validity":{"$ref":"#/types/aws-native:licensemanager:LicenseValidityDateFormat","description":"Date and time range during which the license is valid, in ISO8601-UTC format."},"version":{"description":"The version of the license.","type":"string"}}}},"aws-native:lightsail:getAlarm":{"description":"Resource Type definition for AWS::Lightsail::Alarm","inputs":{"properties":{"alarmName":{"type":"string","description":"The name for the alarm. Specify the name of an existing alarm to update, and overwrite the previous configuration of the alarm."}},"required":["alarmName"]},"outputs":{"properties":{"alarmArn":{"description":"The Amazon Resource Name (ARN) of the alarm.","type":"string"},"comparisonOperator":{"description":"The arithmetic operation to use when comparing the specified statistic to the threshold. The specified statistic value is used as the first operand.","type":"string"},"contactProtocols":{"description":"The contact protocols to use for the alarm, such as Email, SMS (text messaging), or both.","items":{"type":"string"},"type":"array"},"datapointsToAlarm":{"description":"The number of data points that must be not within the specified threshold to trigger the alarm. If you are setting an \"M out of N\" alarm, this value (datapointsToAlarm) is the M.","type":"integer"},"evaluationPeriods":{"description":"The number of most recent periods over which data is compared to the specified threshold. If you are setting an \"M out of N\" alarm, this value (evaluationPeriods) is the N.","type":"integer"},"notificationEnabled":{"description":"Indicates whether the alarm is enabled. Notifications are enabled by default if you don't specify this parameter.","type":"boolean"},"notificationTriggers":{"description":"The alarm states that trigger a notification.","items":{"type":"string"},"type":"array"},"state":{"description":"The current state of the alarm.","type":"string"},"threshold":{"description":"The value against which the specified statistic is compared.","type":"number"},"treatMissingData":{"description":"Sets how this alarm will handle missing data points.","type":"string"}}}},"aws-native:lightsail:getBucket":{"description":"Resource Type definition for AWS::Lightsail::Bucket","inputs":{"properties":{"bucketName":{"type":"string","description":"The name for the bucket."}},"required":["bucketName"]},"outputs":{"properties":{"ableToUpdateBundle":{"description":"Indicates whether the bundle that is currently applied to a bucket can be changed to another bundle. You can update a bucket's bundle only one time within a monthly AWS billing cycle.","type":"boolean"},"accessRules":{"$ref":"#/types/aws-native:lightsail:BucketAccessRules","description":"An object that describes the access rules for the bucket."},"bucketArn":{"description":"The Amazon Resource Name (ARN) of the bucket.","type":"string"},"bundleId":{"description":"The ID of the bundle to use for the bucket.","type":"string"},"objectVersioning":{"description":"Specifies whether to enable or disable versioning of objects in the bucket.","type":"boolean"},"readOnlyAccessAccounts":{"description":"An array of strings to specify the AWS account IDs that can access the bucket.","items":{"type":"string"},"type":"array"},"resourcesReceivingAccess":{"description":"The names of the Lightsail resources for which to set bucket access.","items":{"type":"string"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"url":{"description":"The URL of the bucket.","type":"string"}}}},"aws-native:lightsail:getCertificate":{"description":"Resource Type definition for AWS::Lightsail::Certificate.","inputs":{"properties":{"certificateName":{"type":"string","description":"The name for the certificate."}},"required":["certificateName"]},"outputs":{"properties":{"certificateArn":{"description":"The Amazon Resource Name (ARN) of the certificate.","type":"string"},"status":{"description":"The validation status of the certificate.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lightsail:getContainer":{"description":"Resource Type definition for AWS::Lightsail::Container","inputs":{"properties":{"serviceName":{"type":"string","description":"The name for the container service."}},"required":["serviceName"]},"outputs":{"properties":{"containerArn":{"description":"The Amazon Resource Name (ARN) of the container.","type":"string"},"containerServiceDeployment":{"$ref":"#/types/aws-native:lightsail:ContainerServiceDeployment","description":"Describes a container deployment configuration of an Amazon Lightsail container service."},"isDisabled":{"description":"A Boolean value to indicate whether the container service is disabled.","type":"boolean"},"power":{"description":"The power specification for the container service.","type":"string"},"principalArn":{"description":"The principal ARN of the container service.","type":"string"},"privateRegistryAccess":{"$ref":"#/types/aws-native:lightsail:ContainerPrivateRegistryAccess","description":"A Boolean value to indicate whether the container service has access to private container image repositories, such as Amazon Elastic Container Registry (Amazon ECR) private repositories."},"publicDomainNames":{"description":"The public domain names to use with the container service, such as example.com and www.example.com.","items":{"$ref":"#/types/aws-native:lightsail:ContainerPublicDomainName"},"type":"array"},"scale":{"description":"The scale specification for the container service.","type":"integer"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"url":{"description":"The publicly accessible URL of the container service.","type":"string"}}}},"aws-native:lightsail:getDatabase":{"description":"Resource Type definition for AWS::Lightsail::Database","inputs":{"properties":{"relationalDatabaseName":{"type":"string","description":"The name to use for your new Lightsail database resource."}},"required":["relationalDatabaseName"]},"outputs":{"properties":{"backupRetention":{"description":"When true, enables automated backup retention for your database. Updates are applied during the next maintenance window because this can result in an outage.","type":"boolean"},"caCertificateIdentifier":{"description":"Indicates the certificate that needs to be associated with the database.","type":"string"},"databaseArn":{"description":"The Amazon Resource Name (ARN) of the database (for example, `arn:aws:lightsail:us-east-2:123456789101:RelationalDatabase/244ad76f-8aad-4741-809f-12345EXAMPLE` ).","type":"string"},"preferredBackupWindow":{"description":"The daily time range during which automated backups are created for your new database if automated backups are enabled.","type":"string"},"preferredMaintenanceWindow":{"description":"The weekly time range during which system maintenance can occur on your new database.","type":"string"},"publiclyAccessible":{"description":"Specifies the accessibility options for your new database. A value of true specifies a database that is available to resources outside of your Lightsail account. A value of false specifies a database that is available only to your Lightsail resources in the same region as your database.","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lightsail:getDatabaseSnapshot":{"description":"Resource Type definition for AWS::Lightsail::DatabaseSnapshot","inputs":{"properties":{"relationalDatabaseSnapshotName":{"type":"string","description":"The name for your new database snapshot."}},"required":["relationalDatabaseSnapshotName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the database snapshot.","type":"string"},"createdAt":{"description":"The timestamp when the database snapshot was created.","type":"string"},"engine":{"description":"The software of the database snapshot (for example, MySQL).","type":"string"},"engineVersion":{"description":"The database engine version for the database snapshot (for example, 5.7.23).","type":"string"},"fromRelationalDatabaseArn":{"description":"The Amazon Resource Name (ARN) of the database from which the database snapshot was created.","type":"string"},"fromRelationalDatabaseBlueprintId":{"description":"The blueprint ID of the database from which the database snapshot was created. A blueprint describes the major engine version of a database.","type":"string"},"fromRelationalDatabaseBundleId":{"description":"The bundle ID of the database from which the database snapshot was created.","type":"string"},"fromRelationalDatabaseName":{"description":"The name of the source database from which the database snapshot was created.","type":"string"},"location":{"$ref":"#/types/aws-native:lightsail:LocationProperties","description":"The Region name and Availability Zone where the database snapshot is located."},"name":{"description":"The name of the database snapshot.","type":"string"},"resourceType":{"$ref":"#/types/aws-native:lightsail:DatabaseSnapshotResourceType","description":"The Lightsail resource type."},"sizeInGb":{"description":"The size of the disk in GB (for example, 32) for the database snapshot.","type":"integer"},"state":{"description":"The state of the database snapshot.","type":"string"},"supportCode":{"description":"The support code for the database snapshot. Include this code in your email to support when you have questions about a database snapshot in Lightsail. This code enables our support team to look up your Lightsail information more easily.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lightsail:getDisk":{"description":"Resource Type definition for AWS::Lightsail::Disk","inputs":{"properties":{"diskName":{"type":"string","description":"The names to use for your new Lightsail disk."}},"required":["diskName"]},"outputs":{"properties":{"addOns":{"description":"An array of objects representing the add-ons to enable for the new instance.","items":{"$ref":"#/types/aws-native:lightsail:DiskAddOn"},"type":"array"},"attachedTo":{"description":"Name of the attached Lightsail Instance","type":"string"},"attachmentState":{"description":"Attachment State of the Lightsail disk","type":"string"},"diskArn":{"description":"The Amazon Resource Name (ARN) of the disk.","type":"string"},"iops":{"description":"Iops of the Lightsail disk","type":"integer"},"isAttached":{"description":"Check is Disk is attached state","type":"boolean"},"location":{"$ref":"#/types/aws-native:lightsail:DiskLocation","description":"The AWS Region and Availability Zone where the disk is located."},"path":{"description":"Path of the  attached Disk","type":"string"},"resourceType":{"description":"Resource type of Lightsail instance.","type":"string"},"state":{"description":"State of the Lightsail disk","type":"string"},"supportCode":{"description":"Support code to help identify any issues","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lightsail:getDiskSnapshot":{"description":"Resource Type definition for AWS::Lightsail::DiskSnapshot","inputs":{"properties":{"diskSnapshotName":{"type":"string","description":"The name of the disk snapshot (e.g., my-disk-snapshot)."}},"required":["diskSnapshotName"]},"outputs":{"properties":{"createdAt":{"description":"The timestamp when the disk snapshot was created.","type":"string"},"diskSnapshotArn":{"description":"The Amazon Resource Name (ARN) of the disk snapshot.","type":"string"},"fromDiskName":{"description":"The name of the source disk from which the disk snapshot was created.","type":"string"},"isFromAutoSnapshot":{"description":"A Boolean value indicating whether the snapshot was created from an automatic snapshot.","type":"boolean"},"location":{"$ref":"#/types/aws-native:lightsail:LocationProperties","description":"The AWS Region and Availability Zone where the disk snapshot was created."},"progress":{"description":"The progress of the disk snapshot creation operation.","type":"string"},"resourceType":{"$ref":"#/types/aws-native:lightsail:DiskSnapshotResourceType","description":"The Lightsail resource type (DiskSnapshot)."},"sizeInGb":{"description":"The size of the disk snapshot in GB.","type":"integer"},"state":{"$ref":"#/types/aws-native:lightsail:DiskSnapshotState","description":"The status of the disk snapshot operation."},"supportCode":{"description":"The support code. Include this code in your email to support when you have questions about an instance or another resource in Lightsail.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lightsail:getInstance":{"description":"Resource Type definition for AWS::Lightsail::Instance","inputs":{"properties":{"instanceName":{"type":"string","description":"The names to use for your new Lightsail instance."}},"required":["instanceName"]},"outputs":{"properties":{"addOns":{"description":"An array of objects representing the add-ons to enable for the new instance.","items":{"$ref":"#/types/aws-native:lightsail:InstanceAddOn"},"type":"array"},"hardware":{"$ref":"#/types/aws-native:lightsail:InstanceHardware","description":"The hardware properties for the instance, such as the vCPU count, attached disks, and amount of RAM.\n\n\u003e The instance restarts when performing an attach disk or detach disk request. This resets the public IP address of your instance if a static IP isn't attached to it."},"instanceArn":{"description":"The Amazon Resource Name (ARN) of the instance (for example, `arn:aws:lightsail:us-east-2:123456789101:Instance/244ad76f-8aad-4741-809f-12345EXAMPLE` ).","type":"string"},"ipv6Addresses":{"description":"IPv6 addresses of the instance","items":{"type":"string"},"type":"array"},"isStaticIp":{"description":"Is the IP Address of the Instance is the static IP","type":"boolean"},"keyPairName":{"description":"The name of your key pair.","type":"string"},"location":{"$ref":"#/types/aws-native:lightsail:InstanceLocation","description":"The location for the instance, such as the AWS Region and Availability Zone.\n\n\u003e The `Location` property is read-only and should not be specified in a create instance or update instance request."},"networking":{"$ref":"#/types/aws-native:lightsail:InstanceNetworking","description":"The public ports and the monthly amount of data transfer allocated for the instance."},"privateIpAddress":{"description":"Private IP Address of the Instance","type":"string"},"publicIpAddress":{"description":"Public IP Address of the Instance","type":"string"},"resourceType":{"description":"Resource type of Lightsail instance.","type":"string"},"sshKeyName":{"description":"SSH Key Name of the  Lightsail instance.","type":"string"},"state":{"$ref":"#/types/aws-native:lightsail:InstanceState","description":"The status code and the state (for example, `running` ) of the instance.\n\n\u003e The `State` property is read-only and should not be specified in a create instance or update instance request."},"supportCode":{"description":"Support code to help identify any issues","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userName":{"description":"Username of the  Lightsail instance.","type":"string"}}}},"aws-native:lightsail:getInstanceSnapshot":{"description":"Resource Type definition for AWS::Lightsail::InstanceSnapshot","inputs":{"properties":{"instanceSnapshotName":{"type":"string","description":"The name of the snapshot."}},"required":["instanceSnapshotName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the snapshot.","type":"string"},"fromInstanceArn":{"description":"The Amazon Resource Name (ARN) of the instance from which the snapshot was created.","type":"string"},"fromInstanceName":{"description":"The instance from which the snapshot was created.","type":"string"},"isFromAutoSnapshot":{"description":"A Boolean value indicating whether the snapshot was created from an automatic snapshot.","type":"boolean"},"location":{"$ref":"#/types/aws-native:lightsail:InstanceSnapshotLocation"},"resourceType":{"description":"The type of resource (usually InstanceSnapshot).","type":"string"},"sizeInGb":{"description":"The size in GB of the SSD","type":"integer"},"state":{"description":"The state the snapshot is in.","type":"string"},"supportCode":{"description":"Support code to help identify any issues","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:lightsail:getLoadBalancer":{"description":"Resource Type definition for AWS::Lightsail::LoadBalancer","inputs":{"properties":{"loadBalancerName":{"type":"string","description":"The name of your load balancer."}},"required":["loadBalancerName"]},"outputs":{"properties":{"attachedInstances":{"description":"The names of the instances attached to the load balancer.","items":{"type":"string"},"type":"array"},"healthCheckPath":{"description":"The path you provided to perform the load balancer health check. If you didn't specify a health check path, Lightsail uses the root path of your website (e.g., \"/\").","type":"string"},"loadBalancerArn":{"description":"The Amazon Resource Name (ARN) of the load balancer.","type":"string"},"sessionStickinessEnabled":{"description":"Configuration option to enable session stickiness.","type":"boolean"},"sessionStickinessLbCookieDurationSeconds":{"description":"Configuration option to adjust session stickiness cookie duration parameter.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tlsPolicyName":{"description":"The name of the TLS policy to apply to the load balancer.","type":"string"}}}},"aws-native:lightsail:getLoadBalancerTlsCertificate":{"description":"Resource Type definition for AWS::Lightsail::LoadBalancerTlsCertificate","inputs":{"properties":{"certificateName":{"type":"string","description":"The SSL/TLS certificate name."},"loadBalancerName":{"type":"string","description":"The name of your load balancer."}},"required":["certificateName","loadBalancerName"]},"outputs":{"properties":{"httpsRedirectionEnabled":{"description":"A Boolean value that indicates whether HTTPS redirection is enabled for the load balancer.","type":"boolean"},"isAttached":{"description":"When true, the SSL/TLS certificate is attached to the Lightsail load balancer.","type":"boolean"},"loadBalancerTlsCertificateArn":{"description":"The Amazon Resource Name (ARN) of the SSL/TLS certificate.","type":"string"},"status":{"description":"The validation status of the SSL/TLS certificate.","type":"string"}}}},"aws-native:lightsail:getStaticIp":{"description":"Resource Type definition for AWS::Lightsail::StaticIp","inputs":{"properties":{"staticIpName":{"type":"string","description":"The name of the static IP address."}},"required":["staticIpName"]},"outputs":{"properties":{"attachedTo":{"description":"The instance where the static IP is attached.","type":"string"},"ipAddress":{"description":"The static IP address.","type":"string"},"isAttached":{"description":"A Boolean value indicating whether the static IP is attached.","type":"boolean"},"staticIpArn":{"description":"The Amazon Resource Name (ARN) of the static IP (for example, `arn:aws:lightsail:us-east-2:123456789101:StaticIp/244ad76f-8aad-4741-809f-12345EXAMPLE` ).","type":"string"}}}},"aws-native:location:getApiKey":{"description":"Definition of AWS::Location::APIKey Resource Type","inputs":{"properties":{"keyName":{"type":"string","description":"A custom name for the API key resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique API key name.\n- No spaces allowed. For example, `ExampleAPIKey` ."}},"required":["keyName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the resource. Used when you need to specify a resource across all AWS .","type":"string"},"createTime":{"description":"The timestamp for when the API key resource was created in ISO 8601 format: YYYY-MM-DDThh:mm:ss.sssZ.","type":"string"},"description":{"description":"Updates the description for the API key resource.","type":"string"},"expireTime":{"description":"The optional timestamp for when the API key resource will expire in [ISO 8601 format](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) .","type":"string"},"keyArn":{"description":"The Amazon Resource Name (ARN) for the API key resource. Used when you need to specify a resource across all AWS .","type":"string"},"restrictions":{"$ref":"#/types/aws-native:location:ApiKeyRestrictions","description":"The API key restrictions for the API key resource."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updateTime":{"description":"The timestamp for when the API key resource was last updated in ISO 8601 format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"}}}},"aws-native:location:getGeofenceCollection":{"description":"Definition of AWS::Location::GeofenceCollection Resource Type","inputs":{"properties":{"collectionName":{"type":"string","description":"A custom name for the geofence collection.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique geofence collection name.\n- No spaces allowed. For example, `ExampleGeofenceCollection` ."}},"required":["collectionName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the geofence collection resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:geofence-collection/ExampleGeofenceCollection`","type":"string"},"collectionArn":{"description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the geofence collection resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:geofence-collection/ExampleGeofenceCollection`","type":"string"},"createTime":{"description":"The timestamp for when the geofence collection resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"},"description":{"description":"An optional description for the geofence collection.","type":"string"},"pricingPlan":{"$ref":"#/types/aws-native:location:GeofenceCollectionPricingPlan"},"pricingPlanDataSource":{"description":"This shape is deprecated since 2022-02-01: Deprecated. No longer allowed.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updateTime":{"description":"The timestamp for when the geofence collection resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"}}}},"aws-native:location:getMap":{"description":"Definition of AWS::Location::Map Resource Type","inputs":{"properties":{"mapName":{"type":"string","description":"The name for the map resource.\n\nRequirements:\n\n- Must contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique map resource name.\n- No spaces allowed. For example, `ExampleMap` ."}},"required":["mapName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the map resource. Used to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:maps/ExampleMap`","type":"string"},"createTime":{"description":"The timestamp for when the map resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"},"description":{"description":"An optional description for the map resource.","type":"string"},"mapArn":{"description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the map resource. Used to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:maps/ExampleMap`","type":"string"},"pricingPlan":{"$ref":"#/types/aws-native:location:MapPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updateTime":{"description":"The timestamp for when the map resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"}}}},"aws-native:location:getPlaceIndex":{"description":"Definition of AWS::Location::PlaceIndex Resource Type","inputs":{"properties":{"indexName":{"type":"string","description":"The name of the place index resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A–Z, a–z, 0–9), hyphens (-), periods (.), and underscores (_).\n- Must be a unique place index resource name.\n- No spaces allowed. For example, `ExamplePlaceIndex` ."}},"required":["indexName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the place index resource. Used to specify a resource across AWS .\n\n- Format example: `arn:aws:geo:region:account-id:place-index/ExamplePlaceIndex`","type":"string"},"createTime":{"description":"The timestamp for when the place index resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"},"dataSourceConfiguration":{"$ref":"#/types/aws-native:location:PlaceIndexDataSourceConfiguration","description":"Specifies the data storage option requesting Places."},"description":{"description":"The optional description for the place index resource.","type":"string"},"indexArn":{"description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the place index resource. Used to specify a resource across AWS .\n\n- Format example: `arn:aws:geo:region:account-id:place-index/ExamplePlaceIndex`","type":"string"},"pricingPlan":{"$ref":"#/types/aws-native:location:PlaceIndexPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updateTime":{"description":"The timestamp for when the place index resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"}}}},"aws-native:location:getRouteCalculator":{"description":"Definition of AWS::Location::RouteCalculator Resource Type","inputs":{"properties":{"calculatorName":{"type":"string","description":"The name of the route calculator resource.\n\nRequirements:\n\n- Can use alphanumeric characters (A–Z, a–z, 0–9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique Route calculator resource name.\n- No spaces allowed. For example, `ExampleRouteCalculator` ."}},"required":["calculatorName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the route calculator resource. Use the ARN when you specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:route-calculator/ExampleCalculator`","type":"string"},"calculatorArn":{"description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the route calculator resource. Use the ARN when you specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:route-calculator/ExampleCalculator`","type":"string"},"createTime":{"description":"The timestamp for when the route calculator resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"},"description":{"description":"The optional description for the route calculator resource.","type":"string"},"pricingPlan":{"$ref":"#/types/aws-native:location:RouteCalculatorPricingPlan","description":"No longer used. If included, the only allowed value is `RequestBasedUsage` .\n\n*Allowed Values* : `RequestBasedUsage`"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updateTime":{"description":"The timestamp for when the route calculator resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"}}}},"aws-native:location:getTracker":{"description":"Definition of AWS::Location::Tracker Resource Type","inputs":{"properties":{"trackerName":{"type":"string","description":"The name for the tracker resource.\n\nRequirements:\n\n- Contain only alphanumeric characters (A-Z, a-z, 0-9) , hyphens (-), periods (.), and underscores (_).\n- Must be a unique tracker resource name.\n- No spaces allowed. For example, `ExampleTracker` ."}},"required":["trackerName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the tracker resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:tracker/ExampleTracker`","type":"string"},"createTime":{"description":"The timestamp for when the tracker resource was created in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"},"description":{"description":"An optional description for the tracker resource.","type":"string"},"eventBridgeEnabled":{"type":"boolean"},"kmsKeyEnableGeospatialQueries":{"type":"boolean"},"positionFiltering":{"$ref":"#/types/aws-native:location:TrackerPositionFiltering","description":"Specifies the position filtering for the tracker resource.\n\nValid values:\n\n- `TimeBased` - Location updates are evaluated against linked geofence collections, but not every location update is stored. If your update frequency is more often than 30 seconds, only one update per 30 seconds is stored for each unique device ID.\n- `DistanceBased` - If the device has moved less than 30 m (98.4 ft), location updates are ignored. Location updates within this area are neither evaluated against linked geofence collections, nor stored. This helps control costs by reducing the number of geofence evaluations and historical device positions to paginate through. Distance-based filtering can also reduce the effects of GPS noise when displaying device trajectories on a map.\n- `AccuracyBased` - If the device has moved less than the measured accuracy, location updates are ignored. For example, if two consecutive updates from a device have a horizontal accuracy of 5 m and 10 m, the second update is ignored if the device has moved less than 15 m. Ignored location updates are neither evaluated against linked geofence collections, nor stored. This can reduce the effects of GPS noise when displaying device trajectories on a map, and can help control your costs by reducing the number of geofence evaluations.\n\nThis field is optional. If not specified, the default value is `TimeBased` ."},"pricingPlan":{"$ref":"#/types/aws-native:location:TrackerPricingPlan"},"pricingPlanDataSource":{"description":"This shape is deprecated since 2022-02-01: Deprecated. No longer allowed.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trackerArn":{"description":"Synonym for `Arn` . The Amazon Resource Name (ARN) for the tracker resource. Used when you need to specify a resource across all AWS .\n\n- Format example: `arn:aws:geo:region:account-id:tracker/ExampleTracker`","type":"string"},"updateTime":{"description":"The timestamp for when the tracker resource was last updated in [ISO 8601](https://docs.aws.amazon.com/https://www.iso.org/iso-8601-date-and-time-format.html) format: `YYYY-MM-DDThh:mm:ss.sssZ` .","type":"string"}}}},"aws-native:logs:getAccountPolicy":{"description":"The AWS::Logs::AccountPolicy resource specifies a CloudWatch Logs AccountPolicy.","inputs":{"properties":{"accountId":{"type":"string","description":"User account id"},"policyName":{"type":"string","description":"The name of the account policy"},"policyType":{"$ref":"#/types/aws-native:logs:AccountPolicyPolicyType","description":"Type of the policy."}},"required":["accountId","policyType","policyName"]},"outputs":{"properties":{"accountId":{"description":"User account id","type":"string"},"policyDocument":{"description":"The body of the policy document you want to use for this topic.\n\nYou can only add one policy per PolicyType.\n\nThe policy must be in JSON string format.\n\nLength Constraints: Maximum length of 30720","type":"string"},"scope":{"$ref":"#/types/aws-native:logs:AccountPolicyScope","description":"Scope for policy application"},"selectionCriteria":{"description":"Log group  selection criteria to apply policy only to a subset of log groups. SelectionCriteria string can be up to 25KB and cloudwatchlogs determines the length of selectionCriteria by using its UTF-8 bytes","type":"string"}}}},"aws-native:logs:getDelivery":{"description":"This structure contains information about one delivery in your account.\n\nA delivery is a connection between a logical delivery source and a logical delivery destination.\n\nFor more information, see [CreateDelivery](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_CreateDelivery.html).","inputs":{"properties":{"deliveryId":{"type":"string","description":"The unique ID that identifies this delivery in your account."}},"required":["deliveryId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that uniquely identifies this delivery.","type":"string"},"deliveryDestinationType":{"description":"Displays whether the delivery destination associated with this delivery is CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.","type":"string"},"deliveryId":{"description":"The unique ID that identifies this delivery in your account.","type":"string"},"fieldDelimiter":{"description":"The field delimiter to use between record fields when the final output format of a delivery is in Plain , W3C , or Raw format.","type":"string"},"recordFields":{"description":"The list of record fields to be delivered to the destination, in order. If the delivery's log source has mandatory fields, they must be included in this list.","items":{"type":"string"},"type":"array"},"s3EnableHiveCompatiblePath":{"description":"This parameter causes the S3 objects that contain delivered logs to use a prefix structure that allows for integration with Apache Hive.","type":"boolean"},"s3SuffixPath":{"description":"This string allows re-configuring the S3 object prefix to contain either static or variable sections. The valid variables to use in the suffix path will vary by each log source. See ConfigurationTemplate$allowedSuffixPathFields for more info on what values are supported in the suffix path for each log source.","type":"string"},"tags":{"description":"The tags that have been assigned to this delivery.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:logs:getDeliveryDestination":{"description":"This structure contains information about one delivery destination in your account.\n\nA delivery destination is an AWS resource that represents an AWS service that logs can be sent to CloudWatch Logs, Amazon S3, are supported as Kinesis Data Firehose delivery destinations.","inputs":{"properties":{"name":{"type":"string","description":"The name of this delivery destination."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that uniquely identifies this delivery destination.","type":"string"},"deliveryDestinationPolicy":{"$ref":"#/types/aws-native:logs:DeliveryDestinationDestinationPolicy","description":"IAM policy that grants permissions to CloudWatch Logs to deliver logs cross-account to a specified destination in this account.\n\nThe policy must be in JSON string format.\n\nLength Constraints: Maximum length of 51200"},"tags":{"description":"The tags that have been assigned to this delivery destination.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:logs:getDeliverySource":{"description":" A delivery source is an AWS resource that sends logs to an AWS destination. The destination can be CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.\n\nOnly some AWS services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at [Enabling logging from AWS services](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.html).","inputs":{"properties":{"name":{"type":"string","description":"The unique name of the Log source."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that uniquely identifies this delivery source.","type":"string"},"logType":{"description":"The type of logs being delivered. Only mandatory when the resourceArn could match more than one. In such a case, the error message will contain all the possible options.","type":"string"},"resourceArns":{"description":"This array contains the ARN of the AWS resource that sends logs and is represented by this delivery source. Currently, only one ARN can be in the array.","items":{"type":"string"},"type":"array"},"service":{"description":"The AWS service that is sending logs.","type":"string"},"tags":{"description":"The tags that have been assigned to this delivery source.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:logs:getDestination":{"description":"The AWS::Logs::Destination resource specifies a CloudWatch Logs destination. A destination encapsulates a physical resource (such as an Amazon Kinesis data stream) and enables you to subscribe that resource to a stream of log events.","inputs":{"properties":{"destinationName":{"type":"string","description":"The name of the destination resource"}},"required":["destinationName"]},"outputs":{"properties":{"arn":{"description":"The ARN of the CloudWatch Logs destination, such as `arn:aws:logs:us-west-1:123456789012:destination:MyDestination` .","type":"string"},"destinationPolicy":{"description":"An IAM policy document that governs which AWS accounts can create subscription filters against this destination.","type":"string"},"roleArn":{"description":"The ARN of an IAM role that permits CloudWatch Logs to send data to the specified AWS resource","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetArn":{"description":"The ARN of the physical target where the log events are delivered (for example, a Kinesis stream)","type":"string"}}}},"aws-native:logs:getIntegration":{"description":"Resource Schema for Logs Integration Resource","inputs":{"properties":{"integrationName":{"type":"string","description":"User provided identifier for integration, unique to the user account."}},"required":["integrationName"]},"outputs":{"properties":{"integrationStatus":{"$ref":"#/types/aws-native:logs:IntegrationStatus","description":"Status of creation for the Integration and its resources"}}}},"aws-native:logs:getLogAnomalyDetector":{"description":"The AWS::Logs::LogAnomalyDetector resource specifies a CloudWatch Logs LogAnomalyDetector.","inputs":{"properties":{"anomalyDetectorArn":{"type":"string","description":"ARN of LogAnomalyDetector"}},"required":["anomalyDetectorArn"]},"outputs":{"properties":{"anomalyDetectorArn":{"description":"ARN of LogAnomalyDetector","type":"string"},"anomalyDetectorStatus":{"description":"Current status of detector.","type":"string"},"anomalyVisibilityTime":{"description":"The number of days to have visibility on an anomaly. After this time period has elapsed for an anomaly, it will be automatically baselined and the anomaly detector will treat new occurrences of a similar anomaly as normal. Therefore, if you do not correct the cause of an anomaly during the time period specified in `AnomalyVisibilityTime` , it will be considered normal going forward and will not be detected as an anomaly.","type":"number"},"creationTimeStamp":{"description":"When detector was created.","type":"number"},"detectorName":{"description":"Name of detector","type":"string"},"evaluationFrequency":{"$ref":"#/types/aws-native:logs:LogAnomalyDetectorEvaluationFrequency","description":"How often log group is evaluated"},"filterPattern":{"description":"You can use this parameter to limit the anomaly detection model to examine only log events that match the pattern you specify here. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html) .","type":"string"},"kmsKeyId":{"description":"The Amazon Resource Name (ARN) of the CMK to use when encrypting log data.","type":"string"},"lastModifiedTimeStamp":{"description":"When detector was lsat modified.","type":"number"},"logGroupArnList":{"description":"List of Arns for the given log group","items":{"type":"string"},"type":"array"}}}},"aws-native:logs:getLogGroup":{"description":"The ``AWS::Logs::LogGroup`` resource specifies a log group. A log group defines common properties for log streams, such as their retention and access control rules. Each log stream must belong to one log group.\n You can create up to 1,000,000 log groups per Region per account. You must use the following guidelines when naming a log group:\n  +  Log group names must be unique within a Region for an AWS account.\n  +  Log group names can be between 1 and 512 characters long.\n  +  Log group names consist of the following characters: a-z, A-Z, 0-9, '_' (underscore), '-' (hyphen), '/' (forward slash), and '.' (period).","inputs":{"properties":{"logGroupName":{"type":"string","description":"The name of the log group. If you don't specify a name, CFNlong generates a unique ID for the log group."}},"required":["logGroupName"]},"outputs":{"properties":{"arn":{"description":"The ARN of the log group, such as `arn:aws:logs:us-west-1:123456789012:log-group:/mystack-testgroup-12ABC1AB12A1:*`","type":"string"},"dataProtectionPolicy":{"$ref":"pulumi.json#/Any","description":"Creates a data protection policy and assigns it to the log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Logs::LogGroup` for more information about the expected schema for this property."},"deletionProtectionEnabled":{"description":"Indicates whether deletion protection is enabled for this log group. When enabled, deletion protection blocks all deletion operations until it is explicitly disabled.","type":"boolean"},"fieldIndexPolicies":{"description":"Creates or updates a *field index policy* for the specified log group. Only log groups in the Standard log class support field index policies. For more information about log classes, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html).\n You can use field index policies to create *field indexes* on fields found in log events in the log group. Creating field indexes lowers the costs for CWL Insights queries that reference those field indexes, because these queries attempt to skip the processing of log events that are known to not match the indexed field. Good fields to index are fields that you often need to query for and fields that have high cardinality of values Common examples of indexes include request ID, session ID, userID, and instance IDs. For more information, see [Create field indexes to improve query performance and reduce costs](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatchLogs-Field-Indexing.html).\n Currently, this array supports only one field index policy object.","items":{"$ref":"pulumi.json#/Any"},"type":"array"},"kmsKeyId":{"description":"The Amazon Resource Name (ARN) of the KMS key to use when encrypting log data.\n To associate an KMS key with the log group, specify the ARN of that KMS key here. If you do so, ingested data is encrypted using this key. This association is stored as long as the data encrypted with the KMS key is still within CWL. This enables CWL to decrypt this data whenever it is requested.\n If you attempt to associate a KMS key with the log group but the KMS key doesn't exist or is deactivated, you will receive an ``InvalidParameterException`` error.\n Log group data is always encrypted in CWL. If you omit this key, the encryption does not use KMS. For more information, see [Encrypt log data in using](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/encrypt-log-data-kms.html)","type":"string"},"logGroupClass":{"$ref":"#/types/aws-native:logs:LogGroupClass","description":"Specifies the log group class for this log group. There are two classes:\n  +  The ``Standard`` log class supports all CWL features.\n  +  The ``Infrequent Access`` log class supports a subset of CWL features and incurs lower costs.\n  \n For details about the features supported by each class, see [Log classes](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CloudWatch_Logs_Log_Classes.html)"},"resourcePolicyDocument":{"$ref":"pulumi.json#/Any","description":"Creates or updates a resource policy for the specified log group that allows other services to put log events to this account. A LogGroup can have 1 resource policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Logs::LogGroup` for more information about the expected schema for this property."},"retentionInDays":{"description":"The number of days to retain the log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, and 3653.\n To set a log group so that its log events do not expire, do not specify this property.","type":"integer"},"tags":{"description":"An array of key-value pairs to apply to the log group.\n For more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:logs:getMetricFilter":{"description":"The ``AWS::Logs::MetricFilter`` resource specifies a metric filter that describes how CWL extracts information from logs and transforms it into Amazon CloudWatch metrics. If you have multiple metric filters that are associated with a log group, all the filters are applied to the log streams in that group.\n The maximum number of metric filters that can be associated with a log group is 100.","inputs":{"properties":{"filterName":{"type":"string","description":"The name of the metric filter."},"logGroupName":{"type":"string","description":"The name of an existing log group that you want to associate with this metric filter."}},"required":["logGroupName","filterName"]},"outputs":{"properties":{"applyOnTransformedLogs":{"description":"This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html).\n If this value is ``true``, the metric filter is applied on the transformed version of the log events instead of the original ingested log events.","type":"boolean"},"emitSystemFieldDimensions":{"description":"The list of system fields that are emitted as additional dimensions in the generated metrics. Returns the ``emitSystemFieldDimensions`` value if it was specified when the metric filter was created.","items":{"type":"string"},"type":"array"},"fieldSelectionCriteria":{"description":"The filter expression that specifies which log events are processed by this metric filter based on system fields. Returns the ``fieldSelectionCriteria`` value if it was specified when the metric filter was created.","type":"string"},"filterPattern":{"description":"A filter pattern for extracting metric data out of ingested log events. For more information, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html).","type":"string"},"metricTransformations":{"description":"The metric transformations.","items":{"$ref":"#/types/aws-native:logs:MetricFilterMetricTransformation"},"type":"array"}}}},"aws-native:logs:getQueryDefinition":{"description":"The resource schema for AWSLogs QueryDefinition","inputs":{"properties":{"queryDefinitionId":{"type":"string","description":"Unique identifier of a query definition"}},"required":["queryDefinitionId"]},"outputs":{"properties":{"logGroupNames":{"description":"Optionally define specific log groups as part of your query definition","items":{"type":"string"},"type":"array"},"name":{"description":"A name for the saved query definition","type":"string"},"queryDefinitionId":{"description":"Unique identifier of a query definition","type":"string"},"queryLanguage":{"$ref":"#/types/aws-native:logs:QueryDefinitionQueryLanguage","description":"Query language of the query string. Possible values are CWLI, SQL, PPL, with CWLI being the default."},"queryString":{"description":"The query string to use for this definition","type":"string"}}}},"aws-native:logs:getResourcePolicy":{"description":"The resource schema for AWSLogs ResourcePolicy","inputs":{"properties":{"policyName":{"type":"string","description":"A name for resource policy"}},"required":["policyName"]},"outputs":{"properties":{"policyDocument":{"description":"The policy document","type":"string"}}}},"aws-native:logs:getScheduledQuery":{"description":"Creates a new Scheduled Query that allows you to define a Logs Insights query that will run on a schedule and configure actions to take with the query results.","inputs":{"properties":{"scheduledQueryArn":{"type":"string"}},"required":["scheduledQueryArn"]},"outputs":{"properties":{"creationTime":{"type":"number"},"description":{"type":"string"},"destinationConfiguration":{"$ref":"#/types/aws-native:logs:ScheduledQueryDestinationConfiguration"},"executionRoleArn":{"type":"string"},"lastExecutionStatus":{"$ref":"#/types/aws-native:logs:ScheduledQueryLastExecutionStatus"},"lastTriggeredTime":{"type":"number"},"lastUpdatedTime":{"type":"number"},"logGroupIdentifiers":{"items":{"type":"string"},"type":"array"},"queryLanguage":{"type":"string"},"queryString":{"type":"string"},"scheduleEndTime":{"type":"number"},"scheduleExpression":{"type":"string"},"scheduleStartTime":{"type":"number"},"scheduledQueryArn":{"type":"string"},"startTimeOffset":{"type":"integer"},"state":{"$ref":"#/types/aws-native:logs:ScheduledQueryState"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timezone":{"type":"string"}}}},"aws-native:logs:getSubscriptionFilter":{"description":"The ``AWS::Logs::SubscriptionFilter`` resource specifies a subscription filter and associates it with the specified log group. Subscription filters allow you to subscribe to a real-time stream of log events and have them delivered to a specific destination. Currently, the supported destinations are:\n  +  An Amazon Kinesis data stream belonging to the same account as the subscription filter, for same-account delivery.\n  +  A logical destination that belongs to a different account, for cross-account delivery.\n  +  An Amazon Kinesis Firehose delivery stream that belongs to the same account as the subscription filter, for same-account delivery.\n  +  An LAMlong function that belongs to the same account as the subscription filter, for same-account delivery.\n  \n There can be as many as two subscription filters associated with a log group.","inputs":{"properties":{"filterName":{"type":"string","description":"The name of the subscription filter."},"logGroupName":{"type":"string","description":"The log group to associate with the subscription filter. All log events that are uploaded to this log group are filtered and delivered to the specified AWS resource if the filter pattern matches the log events."}},"required":["filterName","logGroupName"]},"outputs":{"properties":{"applyOnTransformedLogs":{"description":"This parameter is valid only for log groups that have an active log transformer. For more information about log transformers, see [PutTransformer](https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutTransformer.html).\n If this value is ``true``, the subscription filter is applied on the transformed version of the log events instead of the original ingested log events.","type":"boolean"},"destinationArn":{"description":"The Amazon Resource Name (ARN) of the destination.","type":"string"},"distribution":{"$ref":"#/types/aws-native:logs:SubscriptionFilterDistribution","description":"The method used to distribute log data to the destination, which can be either random or grouped by log stream."},"emitSystemFields":{"description":"The list of system fields that are included in the log events sent to the subscription destination. Returns the ``emitSystemFields`` value if it was specified when the subscription filter was created.","items":{"type":"string"},"type":"array"},"fieldSelectionCriteria":{"description":"The filter expression that specifies which log events are processed by this subscription filter based on system fields. Returns the ``fieldSelectionCriteria`` value if it was specified when the subscription filter was created.","type":"string"},"filterPattern":{"description":"The filtering expressions that restrict what gets delivered to the destination AWS resource. For more information about the filter pattern syntax, see [Filter and Pattern Syntax](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/FilterAndPatternSyntax.html).","type":"string"},"roleArn":{"description":"The ARN of an IAM role that grants CWL permissions to deliver ingested log events to the destination stream. You don't need to provide the ARN when you are working with a logical destination for cross-account delivery.","type":"string"}}}},"aws-native:logs:getTransformer":{"description":"Specifies a transformer on the log group to transform logs into consistent structured and information rich format.","inputs":{"properties":{"logGroupIdentifier":{"type":"string","description":"Existing log group that you want to associate with this transformer."}},"required":["logGroupIdentifier"]},"outputs":{"properties":{"transformerConfig":{"description":"List of processors in a transformer","items":{"$ref":"#/types/aws-native:logs:TransformerProcessor"},"type":"array"}}}},"aws-native:lookoutvision:getProject":{"description":"The AWS::LookoutVision::Project type creates an Amazon Lookout for Vision project. A project is a grouping of the resources needed to create and manage a Lookout for Vision model.","inputs":{"properties":{"projectName":{"type":"string","description":"The name of the project."}},"required":["projectName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name of the project.","type":"string"}}}},"aws-native:m2:getApplication":{"description":"Represents an application that runs on an AWS Mainframe Modernization Environment","inputs":{"properties":{"applicationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the application."}},"required":["applicationArn"]},"outputs":{"properties":{"applicationArn":{"description":"The Amazon Resource Name (ARN) of the application.","type":"string"},"applicationId":{"description":"The identifier of the application.","type":"string"},"description":{"description":"The description of the application.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","type":"object"}}}},"aws-native:m2:getDeployment":{"description":"Represents a deployment resource of an AWS Mainframe Modernization (M2) application to a specified environment","inputs":{"properties":{"applicationId":{"type":"string","description":"The application ID."}},"required":["applicationId"]},"outputs":{"properties":{"applicationVersion":{"description":"The version number of the application to deploy","type":"integer"},"deploymentId":{"description":"The deployment ID.","type":"string"},"status":{"description":"The status of the deployment.","type":"string"}}}},"aws-native:m2:getEnvironment":{"description":"Represents a runtime environment that can run migrated mainframe applications.","inputs":{"properties":{"environmentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the runtime environment."}},"required":["environmentArn"]},"outputs":{"properties":{"engineVersion":{"description":"The version of the runtime engine for the environment.","type":"string"},"environmentArn":{"description":"The Amazon Resource Name (ARN) of the runtime environment.","type":"string"},"environmentId":{"description":"The unique identifier of the environment.","type":"string"},"highAvailabilityConfig":{"$ref":"#/types/aws-native:m2:EnvironmentHighAvailabilityConfig","description":"\u003e AWS Mainframe Modernization Service (Managed Runtime Environment experience) will no longer be open to new customers starting on November 7, 2025. If you would like to use the service, please sign up prior to November 7, 2025. For capabilities similar to AWS Mainframe Modernization Service (Managed Runtime Environment experience) explore AWS Mainframe Modernization Service (Self-Managed Experience). Existing customers can continue to use the service as normal. For more information, see [AWS Mainframe Modernization availability change](https://docs.aws.amazon.com/m2/latest/userguide/mainframe-modernization-availability-change.html) . \n\nDefines the details of a high availability configuration."},"instanceType":{"description":"The type of instance underlying the environment.","type":"string"},"preferredMaintenanceWindow":{"description":"Configures a desired maintenance window for the environment. If you do not provide a value, a random system-generated value will be assigned.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags associated to this environment.","type":"object"}}}},"aws-native:macie:getAllowList":{"description":"Macie AllowList resource schema","inputs":{"properties":{"id":{"type":"string","description":"AllowList ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"AllowList ARN.","type":"string"},"criteria":{"$ref":"#/types/aws-native:macie:AllowListCriteria","description":"AllowList criteria."},"description":{"description":"Description of AllowList.","type":"string"},"id":{"description":"AllowList ID.","type":"string"},"name":{"description":"Name of AllowList.","type":"string"},"status":{"$ref":"#/types/aws-native:macie:AllowListStatus","description":"AllowList status."},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:macie:getCustomDataIdentifier":{"description":"Macie CustomDataIdentifier resource schema","inputs":{"properties":{"id":{"type":"string","description":"Custom data identifier ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Custom data identifier ARN.","type":"string"},"id":{"description":"Custom data identifier ID.","type":"string"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:macie:getFindingsFilter":{"description":"Macie FindingsFilter resource schema.","inputs":{"properties":{"id":{"type":"string","description":"Findings filter ID."}},"required":["id"]},"outputs":{"properties":{"action":{"$ref":"#/types/aws-native:macie:FindingsFilterFindingFilterAction","description":"Findings filter action."},"arn":{"description":"Findings filter ARN.","type":"string"},"description":{"description":"Findings filter description","type":"string"},"findingCriteria":{"$ref":"#/types/aws-native:macie:FindingsFilterFindingCriteria","description":"Findings filter criteria."},"id":{"description":"Findings filter ID.","type":"string"},"name":{"description":"Findings filter name","type":"string"},"position":{"description":"Findings filter position.","type":"integer"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:macie:getSession":{"description":"The AWS::Macie::Session resource specifies a new Amazon Macie session. A session is an object that represents the Amazon Macie service. A session is required for Amazon Macie to become operational.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"AWS account ID of customer"}},"required":["awsAccountId"]},"outputs":{"properties":{"automatedDiscoveryStatus":{"$ref":"#/types/aws-native:macie:SessionAutomatedDiscoveryStatus","description":"The status of automated sensitive data discovery for the Macie session."},"awsAccountId":{"description":"AWS account ID of customer","type":"string"},"findingPublishingFrequency":{"$ref":"#/types/aws-native:macie:SessionFindingPublishingFrequency","description":"A enumeration value that specifies how frequently finding updates are published."},"serviceRole":{"description":"Service role used by Macie","type":"string"},"status":{"$ref":"#/types/aws-native:macie:SessionStatus","description":"A enumeration value that specifies the status of the Macie Session."}}}},"aws-native:mediaconnect:getBridge":{"description":"Resource schema for AWS::MediaConnect::Bridge","inputs":{"properties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge."}},"required":["bridgeArn"]},"outputs":{"properties":{"bridgeArn":{"description":"The Amazon Resource Number (ARN) of the bridge.","type":"string"},"bridgeState":{"$ref":"#/types/aws-native:mediaconnect:BridgeStateEnum","description":"The current status of the bridge. Possible values are: ACTIVE or STANDBY."},"egressGatewayBridge":{"$ref":"#/types/aws-native:mediaconnect:BridgeEgressGatewayBridge","description":"An egress bridge is a cloud-to-ground bridge. The content comes from an existing MediaConnect flow and is delivered to your premises."},"ingressGatewayBridge":{"$ref":"#/types/aws-native:mediaconnect:BridgeIngressGatewayBridge","description":"An ingress bridge is a ground-to-cloud bridge. The content originates at your premises and is delivered to the cloud."},"name":{"description":"The name of the bridge.","type":"string"},"outputs":{"description":"The outputs on this bridge.","items":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutput"},"type":"array"},"placementArn":{"description":"The placement Amazon Resource Number (ARN) of the bridge.","type":"string"},"sourceFailoverConfig":{"$ref":"#/types/aws-native:mediaconnect:BridgeFailoverConfig","description":"The settings for source failover."},"sources":{"description":"The sources on this bridge.","items":{"$ref":"#/types/aws-native:mediaconnect:BridgeSource"},"type":"array"}}}},"aws-native:mediaconnect:getBridgeOutputResource":{"description":"Resource schema for AWS::MediaConnect::BridgeOutput","inputs":{"properties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge."},"name":{"type":"string","description":"The network output name."}},"required":["bridgeArn","name"]},"outputs":{"properties":{"networkOutput":{"$ref":"#/types/aws-native:mediaconnect:BridgeOutputResourceBridgeNetworkOutput","description":"The output of the bridge."}}}},"aws-native:mediaconnect:getBridgeSource":{"description":"Resource schema for AWS::MediaConnect::BridgeSource","inputs":{"properties":{"bridgeArn":{"type":"string","description":"The Amazon Resource Number (ARN) of the bridge."},"name":{"type":"string","description":"The name of the source."}},"required":["bridgeArn","name"]},"outputs":{"properties":{"flowSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceBridgeFlowSource","description":"The source of the flow."},"networkSource":{"$ref":"#/types/aws-native:mediaconnect:BridgeSourceBridgeNetworkSource","description":"The source of the network."}}}},"aws-native:mediaconnect:getFlow":{"description":"Resource Type definition for AWS::MediaConnect::Flow","inputs":{"properties":{"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow."}},"required":["flowArn"]},"outputs":{"properties":{"egressIp":{"description":"The IP address from which video will be sent to output destinations.","type":"string"},"encodingConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowEncodingConfig","description":"The encoding configuration to apply to the NDI source content when transcoding it to a transport stream (TS) for downstream distribution. You can choose between several predefined encoding profiles based on common use cases."},"flowArn":{"description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow.","type":"string"},"flowAvailabilityZone":{"description":"The Availability Zone that you want to create the flow in. These options are limited to the Availability Zones within the current AWS.(ReadOnly)","type":"string"},"flowNdiMachineName":{"description":"A prefix for the names of the NDI sources that the flow creates.(ReadOnly)","type":"string"},"flowSize":{"$ref":"#/types/aws-native:mediaconnect:FlowSize","description":"Determines the processing capacity and feature set of the flow. Set this optional parameter to LARGE if you want to enable NDI sources or outputs on the flow."},"maintenance":{"$ref":"#/types/aws-native:mediaconnect:FlowMaintenance","description":"The maintenance settings you want to use for the flow."},"mediaStreams":{"description":"The media streams associated with the flow. You can associate any of these media streams with sources and outputs on the flow.","items":{"$ref":"#/types/aws-native:mediaconnect:FlowMediaStream"},"type":"array"},"ndiConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowNdiConfig","description":"Specifies the configuration settings for NDI sources and outputs. Required when the flow includes NDI sources or outputs."},"source":{"$ref":"#/types/aws-native:mediaconnect:FlowSource","description":"The source of the flow."},"sourceFailoverConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowFailoverConfig","description":"The source failover config of the flow."},"sourceMonitoringConfig":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceMonitoringConfig","description":"The source monitoring config of the flow."},"tags":{"description":"Key-value pairs that can be used to tag this flow.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcInterfaces":{"description":"The VPC interfaces that you added to this flow.","items":{"$ref":"#/types/aws-native:mediaconnect:FlowVpcInterface"},"type":"array"}}}},"aws-native:mediaconnect:getFlowEntitlement":{"description":"Resource schema for AWS::MediaConnect::FlowEntitlement","inputs":{"properties":{"entitlementArn":{"type":"string","description":"The ARN of the entitlement."}},"required":["entitlementArn"]},"outputs":{"properties":{"description":{"description":"A description of the entitlement.","type":"string"},"encryption":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEncryption","description":"The type of encryption that will be used on the output that is associated with this entitlement."},"entitlementArn":{"description":"The ARN of the entitlement.","type":"string"},"entitlementStatus":{"$ref":"#/types/aws-native:mediaconnect:FlowEntitlementEntitlementStatus","description":" An indication of whether the entitlement is enabled."},"subscribers":{"description":"The AWS account IDs that you want to share your content with. The receiving accounts (subscribers) will be allowed to create their own flow using your content as the source.","items":{"type":"string"},"type":"array"},"tags":{"description":"Key-value pairs that can be used to tag and organize this flow entitlement.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediaconnect:getFlowSource":{"description":"Resource Type definition for AWS::MediaConnect::FlowSource","inputs":{"properties":{"sourceArn":{"type":"string","description":"The ARN of the source."}},"required":["sourceArn"]},"outputs":{"properties":{"decryption":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceEncryption","description":"The type of encryption that is used on the content ingested from this source."},"description":{"description":"A description for the source. This value is not used or seen outside of the current AWS Elemental MediaConnect account.","type":"string"},"entitlementArn":{"description":"The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator's flow.","type":"string"},"gatewayBridgeSource":{"$ref":"#/types/aws-native:mediaconnect:FlowSourceGatewayBridgeSource","description":"The source configuration for cloud flows receiving a stream from a bridge."},"ingestIp":{"description":"The IP address that the flow will be listening on for incoming content.","type":"string"},"ingestPort":{"description":"The port that the flow will be listening on for incoming content.","type":"integer"},"maxBitrate":{"description":"The smoothing max bitrate for RIST, RTP, and RTP-FEC streams.","type":"integer"},"maxLatency":{"description":"The maximum latency in milliseconds. This parameter applies only to RIST-based and Zixi-based streams.","type":"integer"},"minLatency":{"description":"The minimum latency in milliseconds.","type":"integer"},"senderControlPort":{"description":"The port that the flow uses to send outbound requests to initiate connection with the sender for fujitsu-qos protocol.","type":"integer"},"senderIpAddress":{"description":"The IP address that the flow communicates with to initiate connection with the sender for fujitsu-qos protocol.","type":"string"},"sourceArn":{"description":"The ARN of the source.","type":"string"},"sourceIngestPort":{"description":"The port that the flow will be listening on for incoming content.(ReadOnly)","type":"string"},"sourceListenerAddress":{"description":"Source IP or domain name for SRT-caller protocol.","type":"string"},"sourceListenerPort":{"description":"Source port for SRT-caller protocol.","type":"integer"},"streamId":{"description":"The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams.","type":"string"},"tags":{"description":"Key-value pairs that can be used to tag and organize this flow source.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcInterfaceName":{"description":"The name of the VPC Interface this Source is configured with.","type":"string"},"whitelistCidr":{"description":"The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16.","type":"string"}}}},"aws-native:mediaconnect:getFlowVpcInterface":{"description":"Resource schema for AWS::MediaConnect::FlowVpcInterface","inputs":{"properties":{"flowArn":{"type":"string","description":"The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow."},"name":{"type":"string","description":"Immutable and has to be a unique against other VpcInterfaces in this Flow."}},"required":["flowArn","name"]},"outputs":{"properties":{"networkInterfaceIds":{"description":"IDs of the network interfaces created in customer's account by MediaConnect.","items":{"type":"string"},"type":"array"},"roleArn":{"description":"Role Arn MediaConnect can assume to create ENIs in customer's account.","type":"string"},"securityGroupIds":{"description":"Security Group IDs to be used on ENI.","items":{"type":"string"},"type":"array"},"subnetId":{"description":"Subnet must be in the AZ of the Flow","type":"string"}}}},"aws-native:mediaconnect:getGateway":{"description":"Resource schema for AWS::MediaConnect::Gateway","inputs":{"properties":{"gatewayArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the gateway."}},"required":["gatewayArn"]},"outputs":{"properties":{"gatewayArn":{"description":"The Amazon Resource Name (ARN) of the gateway.","type":"string"},"gatewayState":{"$ref":"#/types/aws-native:mediaconnect:GatewayState","description":"The current status of the gateway."}}}},"aws-native:mediaconnect:getRouterInput":{"description":"Represents a router input in AWS Elemental MediaConnect that is used to ingest content to be transmitted to router outputs","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the router input."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the router input.","type":"string"},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration2Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputConfiguration3Properties"}]},"createdAt":{"description":"The timestamp when the router input was created.","type":"string"},"id":{"description":"The unique identifier of the router input.","type":"string"},"inputType":{"$ref":"#/types/aws-native:mediaconnect:RouterInputType","description":"The type of the router input."},"ipAddress":{"description":"The IP address of the router input.","type":"string"},"maintenanceConfiguration":{"description":"The maintenance configuration settings applied to this router input.","oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceConfiguration1Properties"}]},"maintenanceType":{"$ref":"#/types/aws-native:mediaconnect:RouterInputMaintenanceType","description":"The type of maintenance configuration applied to this router input."},"maximumBitrate":{"description":"The maximum bitrate for the router input.","type":"integer"},"name":{"description":"The name of the router input.","type":"string"},"routedOutputs":{"description":"The number of router outputs associated with the router input.","type":"integer"},"routingScope":{"$ref":"#/types/aws-native:mediaconnect:RouterInputRoutingScope","description":"Indicates whether the router input is configured for Regional or global routing."},"state":{"$ref":"#/types/aws-native:mediaconnect:RouterInputState","description":"The current state of the router input."},"tags":{"description":"Key-value pairs that can be used to tag and organize this router input.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tier":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTier","description":"The tier level of the router input."},"transitEncryption":{"$ref":"#/types/aws-native:mediaconnect:RouterInputTransitEncryption","description":"Encryption information."},"updatedAt":{"description":"The timestamp when the router input was last updated.","type":"string"}}}},"aws-native:mediaconnect:getRouterNetworkInterface":{"description":"Represents a router network interface in AWS Elemental MediaConnect that is used to define a network boundary for router resources","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the router network interface."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the router network interface.","type":"string"},"associatedInputCount":{"description":"The number of router inputs associated with the network interface.","type":"integer"},"associatedOutputCount":{"description":"The number of router outputs associated with the network interface.","type":"integer"},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceConfiguration1Properties"}]},"createdAt":{"description":"The timestamp when the router network interface was created.","type":"string"},"id":{"description":"The unique identifier of the router network interface.","type":"string"},"name":{"description":"The name of the router network interface.","type":"string"},"networkInterfaceType":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceType","description":"The type of the router network interface."},"state":{"$ref":"#/types/aws-native:mediaconnect:RouterNetworkInterfaceState","description":"The current state of the router network interface."},"tags":{"description":"Key-value pairs that can be used to tag and organize this router network interface.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the router network interface was last updated.","type":"string"}}}},"aws-native:mediaconnect:getRouterOutputResource":{"description":"Represents a router input in AWS Elemental MediaConnect that can be used to egress content transmitted from router inputs","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the router output."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the router output.","type":"string"},"configuration":{"oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration1Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputConfiguration2Properties"}]},"createdAt":{"description":"The timestamp when the router output was created.","type":"string"},"id":{"description":"The unique identifier of the router output.","type":"string"},"ipAddress":{"description":"The IP address of the router output.","type":"string"},"maintenanceConfiguration":{"description":"The maintenance configuration settings applied to this router output.","oneOf":[{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration0Properties"},{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceConfiguration1Properties"}]},"maintenanceType":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceMaintenanceType","description":"The type of maintenance configuration applied to this router output."},"maximumBitrate":{"description":"The maximum bitrate for the router output.","type":"integer"},"name":{"description":"The name of the router output.","type":"string"},"outputType":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputType","description":"The type of the router output."},"routedState":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputRoutedState","description":"The current state of the association between the router output and its input."},"routingScope":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRoutingScope","description":"Indicates whether the router output is configured for Regional or global routing."},"state":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputState","description":"The overall state of the router output."},"tags":{"description":"Key-value pairs that can be used to tag this router output.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tier":{"$ref":"#/types/aws-native:mediaconnect:RouterOutputResourceRouterOutputTier","description":"The tier level of the router output."},"updatedAt":{"description":"The timestamp when the router output was last updated.","type":"string"}}}},"aws-native:medialive:getChannelPlacementGroup":{"description":"Definition of AWS::MediaLive::ChannelPlacementGroup Resource Type","inputs":{"properties":{"clusterId":{"type":"string","description":"The ID of the cluster the node is on."},"id":{"type":"string","description":"Unique internal identifier."}},"required":["id","clusterId"]},"outputs":{"properties":{"arn":{"description":"The ARN of the channel placement group.","type":"string"},"channels":{"description":"List of channel IDs added to the channel placement group.","items":{"type":"string"},"type":"array"},"id":{"description":"Unique internal identifier.","type":"string"},"name":{"description":"The name of the channel placement group.","type":"string"},"nodes":{"description":"List of nodes added to the channel placement group","items":{"type":"string"},"type":"array"},"state":{"$ref":"#/types/aws-native:medialive:ChannelPlacementGroupState"},"tags":{"description":"A collection of key-value pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:medialive:getCloudWatchAlarmTemplate":{"description":"Definition of AWS::MediaLive::CloudWatchAlarmTemplate Resource Type","inputs":{"properties":{"identifier":{"type":"string"}},"required":["identifier"]},"outputs":{"properties":{"arn":{"description":"A cloudwatch alarm template's ARN (Amazon Resource Name)","type":"string"},"comparisonOperator":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateComparisonOperator","description":"The comparison operator used to compare the specified statistic and the threshold."},"createdAt":{"description":"The date and time of resource creation.","type":"string"},"datapointsToAlarm":{"description":"The number of datapoints within the evaluation period that must be breaching to trigger the alarm.","type":"number"},"description":{"description":"A resource's optional description.","type":"string"},"evaluationPeriods":{"description":"The number of periods over which data is compared to the specified threshold.","type":"number"},"groupId":{"description":"A cloudwatch alarm template group's id. AWS provided template groups have ids that start with `aws-`","type":"string"},"id":{"description":"A cloudwatch alarm template's id. AWS provided templates have ids that start with `aws-`","type":"string"},"identifier":{"type":"string"},"metricName":{"description":"The name of the metric associated with the alarm. Must be compatible with targetResourceType.","type":"string"},"modifiedAt":{"description":"The date and time of latest resource modification.","type":"string"},"name":{"description":"A resource's name. Names must be unique within the scope of a resource type in a specific region.","type":"string"},"period":{"description":"The period, in seconds, over which the specified statistic is applied.","type":"number"},"statistic":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateStatistic","description":"The statistic to apply to the alarm's metric data."},"targetResourceType":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateTargetResourceType","description":"The resource type this template should dynamically generate CloudWatch metric alarms for."},"threshold":{"description":"The threshold value to compare with the specified statistic.","type":"number"},"treatMissingData":{"$ref":"#/types/aws-native:medialive:CloudWatchAlarmTemplateTreatMissingData","description":"Specifies how missing data points are treated when evaluating the alarm's condition."}}}},"aws-native:medialive:getCloudWatchAlarmTemplateGroup":{"description":"Definition of AWS::MediaLive::CloudWatchAlarmTemplateGroup Resource Type","inputs":{"properties":{"identifier":{"type":"string"}},"required":["identifier"]},"outputs":{"properties":{"arn":{"description":"A cloudwatch alarm template group's ARN (Amazon Resource Name)","type":"string"},"createdAt":{"description":"The date and time of resource creation.","type":"string"},"description":{"description":"A resource's optional description.","type":"string"},"id":{"description":"A cloudwatch alarm template group's id. AWS provided template groups have ids that start with `aws-`","type":"string"},"identifier":{"type":"string"},"modifiedAt":{"description":"The date and time of latest resource modification.","type":"string"}}}},"aws-native:medialive:getCluster":{"description":"Definition of AWS::MediaLive::Cluster Resource Type","inputs":{"properties":{"id":{"type":"string","description":"The unique ID of the Cluster."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the Cluster.","type":"string"},"channelIds":{"description":"The MediaLive Channels that are currently running on Nodes in this Cluster.","items":{"type":"string"},"type":"array"},"id":{"description":"The unique ID of the Cluster.","type":"string"},"name":{"description":"The user-specified name of the Cluster to be created.","type":"string"},"networkSettings":{"$ref":"#/types/aws-native:medialive:ClusterNetworkSettings"},"state":{"$ref":"#/types/aws-native:medialive:ClusterState"},"tags":{"description":"A collection of key-value pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:medialive:getEventBridgeRuleTemplate":{"description":"Definition of AWS::MediaLive::EventBridgeRuleTemplate Resource Type","inputs":{"properties":{"identifier":{"type":"string","description":"Placeholder documentation for __string"}},"required":["identifier"]},"outputs":{"properties":{"arn":{"description":"An eventbridge rule template's ARN (Amazon Resource Name)","type":"string"},"createdAt":{"description":"Placeholder documentation for __timestampIso8601","type":"string"},"description":{"description":"A resource's optional description.","type":"string"},"eventTargets":{"description":"Placeholder documentation for __listOfEventBridgeRuleTemplateTarget","items":{"$ref":"#/types/aws-native:medialive:EventBridgeRuleTemplateTarget"},"type":"array"},"eventType":{"$ref":"#/types/aws-native:medialive:EventBridgeRuleTemplateEventType","description":"The type of event to match with the rule."},"groupId":{"description":"An eventbridge rule template group's id. AWS provided template groups have ids that start with `aws-`","type":"string"},"id":{"description":"An eventbridge rule template's id. AWS provided templates have ids that start with `aws-`","type":"string"},"identifier":{"description":"Placeholder documentation for __string","type":"string"},"modifiedAt":{"description":"Placeholder documentation for __timestampIso8601","type":"string"},"name":{"description":"A resource's name. Names must be unique within the scope of a resource type in a specific region.","type":"string"}}}},"aws-native:medialive:getEventBridgeRuleTemplateGroup":{"description":"Definition of AWS::MediaLive::EventBridgeRuleTemplateGroup Resource Type","inputs":{"properties":{"identifier":{"type":"string"}},"required":["identifier"]},"outputs":{"properties":{"arn":{"description":"An eventbridge rule template group's ARN (Amazon Resource Name)","type":"string"},"createdAt":{"description":"The date and time of resource creation.","type":"string"},"description":{"description":"A resource's optional description.","type":"string"},"id":{"description":"An eventbridge rule template group's id. AWS provided template groups have ids that start with `aws-`","type":"string"},"identifier":{"type":"string"},"modifiedAt":{"description":"The date and time of latest resource modification.","type":"string"}}}},"aws-native:medialive:getMultiplex":{"description":"Resource schema for AWS::MediaLive::Multiplex","inputs":{"properties":{"id":{"type":"string","description":"The unique id of the multiplex."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The unique arn of the multiplex.","type":"string"},"destinations":{"description":"A list of the multiplex output destinations.","items":{"$ref":"#/types/aws-native:medialive:MultiplexOutputDestination"},"type":"array"},"id":{"description":"The unique id of the multiplex.","type":"string"},"multiplexSettings":{"$ref":"#/types/aws-native:medialive:MultiplexSettings","description":"Configuration for a multiplex event."},"name":{"description":"Name of multiplex.","type":"string"},"pipelinesRunningCount":{"description":"The number of currently healthy pipelines.","type":"integer"},"programCount":{"description":"The number of programs in the multiplex.","type":"integer"},"state":{"$ref":"#/types/aws-native:medialive:MultiplexState","description":"The current state of the multiplex."},"tags":{"description":"A collection of key-value pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:medialive:getMultiplexprogram":{"description":"Resource schema for AWS::MediaLive::Multiplexprogram","inputs":{"properties":{"multiplexId":{"type":"string","description":"The ID of the multiplex that the program belongs to."},"programName":{"type":"string","description":"The name of the multiplex program."}},"required":["programName","multiplexId"]},"outputs":{"properties":{"channelId":{"description":"The MediaLive channel associated with the program.","type":"string"},"multiplexProgramSettings":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramSettings","description":"The settings for this multiplex program."},"packetIdentifiersMap":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramPacketIdentifiersMap","description":"The packet identifier map for this multiplex program."},"pipelineDetails":{"description":"Contains information about the current sources for the specified program in the specified multiplex. Keep in mind that each multiplex pipeline connects to both pipelines in a given source channel (the channel identified by the program). But only one of those channel pipelines is ever active at one time.","items":{"$ref":"#/types/aws-native:medialive:MultiplexprogramMultiplexProgramPipelineDetail"},"type":"array"}}}},"aws-native:medialive:getNetwork":{"description":"Resource schema for AWS::MediaLive::Network.","inputs":{"properties":{"id":{"type":"string","description":"The unique ID of the Network."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the Network.","type":"string"},"associatedClusterIds":{"items":{"type":"string"},"type":"array"},"id":{"description":"The unique ID of the Network.","type":"string"},"ipPools":{"description":"The list of IP address cidr pools for the network","items":{"$ref":"#/types/aws-native:medialive:NetworkIpPool"},"type":"array"},"name":{"description":"The user-specified name of the Network to be created.","type":"string"},"routes":{"description":"The routes for the network","items":{"$ref":"#/types/aws-native:medialive:NetworkRoute"},"type":"array"},"state":{"$ref":"#/types/aws-native:medialive:NetworkState","description":"The current state of the Network."},"tags":{"description":"A collection of key-value pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:medialive:getSdiSource":{"description":"Definition of AWS::MediaLive::SdiSource Resource Type","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier of the SdiSource."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The unique arn of the SdiSource.","type":"string"},"id":{"description":"The unique identifier of the SdiSource.","type":"string"},"inputs":{"description":"The list of inputs currently using this SDI source.","items":{"type":"string"},"type":"array"},"mode":{"$ref":"#/types/aws-native:medialive:SdiSourceMode"},"name":{"description":"The name of the SdiSource.","type":"string"},"state":{"$ref":"#/types/aws-native:medialive:SdiSourceState"},"tags":{"description":"A collection of key-value pairs.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:medialive:SdiSourceType"}}}},"aws-native:medialive:getSignalMap":{"description":"Definition of AWS::MediaLive::SignalMap Resource Type","inputs":{"properties":{"identifier":{"type":"string"}},"required":["identifier"]},"outputs":{"properties":{"arn":{"description":"A signal map's ARN (Amazon Resource Name)","type":"string"},"cloudWatchAlarmTemplateGroupIds":{"description":"An alarm template group's id.","items":{"type":"string"},"type":"array"},"createdAt":{"description":"The date and time of resource creation.","type":"string"},"description":{"description":"A resource's optional description.","type":"string"},"discoveryEntryPointArn":{"description":"A top-level supported AWS resource ARN to discovery a signal map from.","type":"string"},"errorMessage":{"description":"Error message associated with a failed creation or failed update attempt of a signal map.","type":"string"},"eventBridgeRuleTemplateGroupIds":{"description":"An eventbridge rule template group's id.","items":{"type":"string"},"type":"array"},"failedMediaResourceMap":{"additionalProperties":{"$ref":"#/types/aws-native:medialive:SignalMapMediaResource"},"type":"object"},"id":{"description":"A signal map's id.","type":"string"},"identifier":{"type":"string"},"lastDiscoveredAt":{"description":"The date and time of latest discovery.","type":"string"},"lastSuccessfulMonitorDeployment":{"$ref":"#/types/aws-native:medialive:SignalMapSuccessfulMonitorDeployment"},"mediaResourceMap":{"additionalProperties":{"$ref":"#/types/aws-native:medialive:SignalMapMediaResource"},"type":"object"},"modifiedAt":{"description":"The date and time of latest resource modification.","type":"string"},"monitorChangesPendingDeployment":{"description":"If true, there are pending monitor changes for this signal map that can be deployed.","type":"boolean"},"monitorDeployment":{"$ref":"#/types/aws-native:medialive:SignalMapMonitorDeployment"},"name":{"description":"A resource's name. Names must be unique within the scope of a resource type in a specific region.","type":"string"},"status":{"$ref":"#/types/aws-native:medialive:SignalMapStatus","description":"A signal map's current status, which is dependent on its lifecycle actions or associated jobs."}}}},"aws-native:mediapackage:getAsset":{"description":"Resource schema for AWS::MediaPackage::Asset","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier for the Asset."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the Asset.","type":"string"},"createdAt":{"description":"The time the Asset was initially submitted for Ingest.","type":"string"},"egressEndpoints":{"description":"The list of egress endpoints available for the Asset.","items":{"$ref":"#/types/aws-native:mediapackage:AssetEgressEndpoint"},"type":"array"},"packagingGroupId":{"description":"The ID of the PackagingGroup for the Asset.","type":"string"},"resourceId":{"description":"The resource ID to include in SPEKE key requests.","type":"string"},"sourceArn":{"description":"ARN of the source object in S3.","type":"string"},"sourceRoleArn":{"description":"The IAM role_arn used to access the source S3 bucket.","type":"string"}}}},"aws-native:mediapackage:getChannel":{"description":"Resource schema for AWS::MediaPackage::Channel","inputs":{"properties":{"id":{"type":"string","description":"The ID of the Channel."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) assigned to the Channel.","type":"string"},"description":{"description":"A short text description of the Channel.","type":"string"},"egressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:ChannelLogConfiguration","description":"The configuration parameters for egress access logging."},"hlsIngest":{"$ref":"#/types/aws-native:mediapackage:ChannelHlsIngest","description":"An HTTP Live Streaming (HLS) ingest resource configuration."},"ingressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:ChannelLogConfiguration","description":"The configuration parameters for egress access logging."}}}},"aws-native:mediapackage:getOriginEndpoint":{"description":"Resource schema for AWS::MediaPackage::OriginEndpoint","inputs":{"properties":{"id":{"type":"string","description":"The ID of the OriginEndpoint."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) assigned to the OriginEndpoint.","type":"string"},"authorization":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointAuthorization","description":"Parameters for CDN authorization."},"channelId":{"description":"The ID of the Channel the OriginEndpoint is associated with.","type":"string"},"cmafPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointCmafPackage","description":"Parameters for Common Media Application Format (CMAF) packaging."},"dashPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointDashPackage","description":"Parameters for DASH packaging."},"description":{"description":"A short text description of the OriginEndpoint.","type":"string"},"hlsPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointHlsPackage","description":"Parameters for Apple HLS packaging."},"manifestName":{"description":"A short string appended to the end of the OriginEndpoint URL.","type":"string"},"mssPackage":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointMssPackage","description":"Parameters for Microsoft Smooth Streaming packaging."},"origination":{"$ref":"#/types/aws-native:mediapackage:OriginEndpointOrigination","description":"Control whether origination of video is allowed for this OriginEndpoint. If set to ALLOW, the OriginEndpoint may by requested, pursuant to any other form of access control. If set to DENY, the OriginEndpoint may not be requested. This can be helpful for Live to VOD harvesting, or for temporarily disabling origination"},"startoverWindowSeconds":{"description":"Maximum duration (seconds) of content to retain for startover playback. If not specified, startover playback will be disabled for the OriginEndpoint.","type":"integer"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeDelaySeconds":{"description":"Amount of delay (seconds) to enforce on the playback of live content. If not specified, there will be no time delay in effect for the OriginEndpoint.","type":"integer"},"url":{"description":"The URL of the packaged OriginEndpoint for consumption.","type":"string"},"whitelist":{"description":"A list of source IP CIDR blocks that will be allowed to access the OriginEndpoint.","items":{"type":"string"},"type":"array"}}}},"aws-native:mediapackage:getPackagingConfiguration":{"description":"Resource schema for AWS::MediaPackage::PackagingConfiguration","inputs":{"properties":{"id":{"type":"string","description":"The ID of the PackagingConfiguration."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the PackagingConfiguration.","type":"string"},"cmafPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationCmafPackage","description":"A CMAF packaging configuration."},"dashPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationDashPackage","description":"A Dynamic Adaptive Streaming over HTTP (DASH) packaging configuration."},"hlsPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationHlsPackage","description":"An HTTP Live Streaming (HLS) packaging configuration."},"mssPackage":{"$ref":"#/types/aws-native:mediapackage:PackagingConfigurationMssPackage","description":"A Microsoft Smooth Streaming (MSS) PackagingConfiguration."},"packagingGroupId":{"description":"The ID of a PackagingGroup.","type":"string"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediapackage:getPackagingGroup":{"description":"Resource schema for AWS::MediaPackage::PackagingGroup","inputs":{"properties":{"id":{"type":"string","description":"The ID of the PackagingGroup."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN of the PackagingGroup.","type":"string"},"authorization":{"$ref":"#/types/aws-native:mediapackage:PackagingGroupAuthorization","description":"CDN Authorization"},"domainName":{"description":"The fully qualified domain name for Assets in the PackagingGroup.","type":"string"},"egressAccessLogs":{"$ref":"#/types/aws-native:mediapackage:PackagingGroupLogConfiguration","description":"The configuration parameters for egress access logging."}}}},"aws-native:mediapackagev2:getChannel":{"description":"\u003cp\u003eRepresents an entry point into AWS Elemental MediaPackage for an ABR video content stream sent from an upstream encoder such as AWS Elemental MediaLive. The channel continuously analyzes the content that it receives and prepares it to be distributed to consumers via one or more origin endpoints.\u003c/p\u003e","inputs":{"properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e","type":"string"},"createdAt":{"description":"\u003cp\u003eThe date and time the channel was created.\u003c/p\u003e","type":"string"},"description":{"description":"\u003cp\u003eEnter any descriptive text that helps you to identify the channel.\u003c/p\u003e","type":"string"},"ingestEndpointUrls":{"description":"The ingest domain URL where the source stream should be sent.","items":{"type":"string"},"type":"array"},"ingestEndpoints":{"description":"\u003cp\u003eThe list of ingest endpoints.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediapackagev2:ChannelIngestEndpoint"},"type":"array"},"inputSwitchConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:ChannelInputSwitchConfiguration","description":"The configuration for input switching based on the media quality confidence score (MQCS) as provided from AWS Elemental MediaLive."},"modifiedAt":{"description":"\u003cp\u003eThe date and time the channel was modified.\u003c/p\u003e","type":"string"},"outputHeaderConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:ChannelOutputHeaderConfiguration","description":"The settings for what common media server data (CMSD) headers AWS Elemental MediaPackage includes in responses to the CDN."},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediapackagev2:getChannelGroup":{"description":"\u003cp\u003eRepresents a channel group that facilitates the grouping of multiple channels.\u003c/p\u003e","inputs":{"properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e","type":"string"},"createdAt":{"description":"\u003cp\u003eThe date and time the channel group was created.\u003c/p\u003e","type":"string"},"description":{"description":"\u003cp\u003eEnter any descriptive text that helps you to identify the channel group.\u003c/p\u003e","type":"string"},"egressDomain":{"description":"\u003cp\u003eThe output domain where the source stream should be sent. Integrate the domain with a downstream CDN (such as Amazon CloudFront) or playback device.\u003c/p\u003e","type":"string"},"modifiedAt":{"description":"\u003cp\u003eThe date and time the channel group was modified.\u003c/p\u003e","type":"string"},"tags":{"description":"The tags associated with the channel group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediapackagev2:getChannelPolicy":{"description":"\u003cp\u003eRepresents a resource-based policy that allows or denies access to a channel.\u003c/p\u003e","inputs":{"properties":{"channelGroupName":{"type":"string","description":"The name of the channel group associated with the channel policy."},"channelName":{"type":"string","description":"The name of the channel associated with the channel policy."}},"required":["channelGroupName","channelName"]},"outputs":{"properties":{"policy":{"$ref":"pulumi.json#/Any","description":"The policy associated with the channel.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaPackageV2::ChannelPolicy` for more information about the expected schema for this property."}}}},"aws-native:mediapackagev2:getOriginEndpoint":{"description":"\u003cp\u003eRepresents an origin endpoint that is associated with a channel, offering a dynamically repackaged version of its content through various streaming media protocols. The content can be efficiently disseminated to end-users via a Content Delivery Network (CDN), like Amazon CloudFront.\u003c/p\u003e","inputs":{"properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) associated with the resource.\u003c/p\u003e","type":"string"},"containerType":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointContainerType","description":"The container type associated with the origin endpoint configuration."},"createdAt":{"description":"\u003cp\u003eThe date and time the origin endpoint was created.\u003c/p\u003e","type":"string"},"dashManifestUrls":{"description":"The egress domain URL for stream delivery from MediaPackage.","items":{"type":"string"},"type":"array"},"dashManifests":{"description":"\u003cp\u003eA DASH manifest configuration.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointDashManifestConfiguration"},"type":"array"},"description":{"description":"\u003cp\u003eEnter any descriptive text that helps you to identify the origin endpoint.\u003c/p\u003e","type":"string"},"forceEndpointErrorConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointForceEndpointErrorConfiguration","description":"The failover settings for the endpoint."},"hlsManifestUrls":{"description":"The egress domain URL for stream delivery from MediaPackage.","items":{"type":"string"},"type":"array"},"hlsManifests":{"description":"\u003cp\u003eAn HTTP live streaming (HLS) manifest configuration.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointHlsManifestConfiguration"},"type":"array"},"lowLatencyHlsManifestUrls":{"description":"The egress domain URL for stream delivery from MediaPackage.","items":{"type":"string"},"type":"array"},"lowLatencyHlsManifests":{"description":"\u003cp\u003eA low-latency HLS manifest configuration.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointLowLatencyHlsManifestConfiguration"},"type":"array"},"modifiedAt":{"description":"\u003cp\u003eThe date and time the origin endpoint was modified.\u003c/p\u003e","type":"string"},"mssManifestUrls":{"items":{"type":"string"},"type":"array"},"mssManifests":{"description":"\u003cp\u003eThe Microsoft Smooth Streaming (MSS) manifest configurations associated with this origin endpoint.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointMssManifestConfiguration"},"type":"array"},"segment":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointSegment","description":"The segment associated with the origin endpoint."},"startoverWindowSeconds":{"description":"\u003cp\u003eThe size of the window (in seconds) to create a window of the live stream that's available for on-demand viewing. Viewers can start-over or catch-up on content that falls within the window. The maximum startover window is 1,209,600 seconds (14 days).\u003c/p\u003e","type":"integer"},"tags":{"description":"The tags associated with the origin endpoint.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediapackagev2:getOriginEndpointPolicy":{"description":"\u003cp\u003eRepresents a resource policy that allows or denies access to an origin endpoint.\u003c/p\u003e","inputs":{"properties":{"channelGroupName":{"type":"string","description":"The name of the channel group associated with the origin endpoint policy."},"channelName":{"type":"string","description":"The channel name associated with the origin endpoint policy."},"originEndpointName":{"type":"string","description":"The name of the origin endpoint associated with the origin endpoint policy."}},"required":["channelGroupName","channelName","originEndpointName"]},"outputs":{"properties":{"cdnAuthConfiguration":{"$ref":"#/types/aws-native:mediapackagev2:OriginEndpointPolicyCdnAuthConfiguration","description":"The settings to enable CDN authorization headers in MediaPackage."},"policy":{"$ref":"pulumi.json#/Any","description":"The policy associated with the origin endpoint.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaPackageV2::OriginEndpointPolicy` for more information about the expected schema for this property."}}}},"aws-native:mediatailor:getChannel":{"description":"Definition of AWS::MediaTailor::Channel Resource Type","inputs":{"properties":{"channelName":{"type":"string","description":"The name of the channel."}},"required":["channelName"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe ARN of the channel.\u003c/p\u003e","type":"string"},"audiences":{"description":"\u003cp\u003eThe list of audiences defined in channel.\u003c/p\u003e","items":{"type":"string"},"type":"array"},"fillerSlate":{"$ref":"#/types/aws-native:mediatailor:ChannelSlateSource","description":"The slate used to fill gaps between programs in the schedule. You must configure filler slate if your channel uses the `LINEAR` `PlaybackMode` . MediaTailor doesn't support filler slate for channels using the `LOOP` `PlaybackMode` ."},"logConfiguration":{"$ref":"#/types/aws-native:mediatailor:ChannelLogConfigurationForChannel","description":"The log configuration."},"outputs":{"description":"\u003cp\u003eThe channel's output properties.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediatailor:ChannelRequestOutputItem"},"type":"array"},"playbackMode":{"$ref":"#/types/aws-native:mediatailor:ChannelPlaybackMode","description":"The type of playback mode for this channel.\n\n`LINEAR` - Programs play back-to-back only once.\n\n`LOOP` - Programs play back-to-back in an endless loop. When the last program in the schedule plays, playback loops back to the first program in the schedule."},"tags":{"description":"The tags to assign to the channel.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeShiftConfiguration":{"$ref":"#/types/aws-native:mediatailor:ChannelTimeShiftConfiguration","description":"The configuration for time-shifted viewing."}}}},"aws-native:mediatailor:getChannelPolicy":{"description":"Definition of AWS::MediaTailor::ChannelPolicy Resource Type","inputs":{"properties":{"channelName":{"type":"string","description":"The name of the channel associated with this Channel Policy."}},"required":["channelName"]},"outputs":{"properties":{"policy":{"$ref":"pulumi.json#/Any","description":"\u003cp\u003eThe IAM policy for the channel. IAM policies are used to control access to your channel.\u003c/p\u003e\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MediaTailor::ChannelPolicy` for more information about the expected schema for this property."}}}},"aws-native:mediatailor:getLiveSource":{"description":"Definition of AWS::MediaTailor::LiveSource Resource Type","inputs":{"properties":{"liveSourceName":{"type":"string","description":"The name that's used to refer to a live source."},"sourceLocationName":{"type":"string","description":"The name of the source location."}},"required":["liveSourceName","sourceLocationName"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe ARN of the live source.\u003c/p\u003e","type":"string"},"httpPackageConfigurations":{"description":"\u003cp\u003eA list of HTTP package configuration parameters for this live source.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediatailor:LiveSourceHttpPackageConfiguration"},"type":"array"},"tags":{"description":"The tags to assign to the live source.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediatailor:getPlaybackConfiguration":{"description":"Resource schema for AWS::MediaTailor::PlaybackConfiguration","inputs":{"properties":{"name":{"type":"string","description":"The identifier for the playback configuration."}},"required":["name"]},"outputs":{"properties":{"adConditioningConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdConditioningConfiguration","description":"The setting that indicates what conditioning MediaTailor will perform on ads that the ad decision server (ADS) returns, and what priority MediaTailor uses when inserting ads."},"adDecisionServerConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAdDecisionServerConfiguration"},"adDecisionServerUrl":{"description":"The URL for the ad decision server (ADS). This includes the specification of static parameters and placeholders for dynamic parameters. AWS Elemental MediaTailor substitutes player-specific and session-specific parameters as needed when calling the ADS. Alternately, for testing you can provide a static VAST URL. The maximum length is 25,000 characters.","type":"string"},"availSuppression":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationAvailSuppression","description":"The configuration for avail suppression, also known as ad suppression. For more information about ad suppression, see Ad Suppression (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html)."},"bumper":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationBumper","description":"The configuration for bumpers. Bumpers are short audio or video clips that play at the start or before the end of an ad break. To learn more about bumpers, see Bumpers (https://docs.aws.amazon.com/mediatailor/latest/ug/bumpers.html)."},"cdnConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationCdnConfiguration","description":"The configuration for using a content delivery network (CDN), like Amazon CloudFront, for content and ad segment management."},"configurationAliases":{"additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"The player parameters and aliases used as dynamic variables during session initialization. For more information, see Domain Variables. ","type":"object"},"dashConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationDashConfiguration","description":"The configuration for DASH content."},"hlsConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationHlsConfiguration","description":"The configuration for HLS content."},"insertionMode":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationInsertionMode","description":"The setting that controls whether players can use stitched or guided ad insertion. The default, STITCHED_ONLY, forces all player sessions to use stitched (server-side) ad insertion. Choosing PLAYER_SELECT allows players to select either stitched or guided ad insertion at session-initialization time. The default for players that do not specify an insertion mode is stitched."},"livePreRollConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationLivePreRollConfiguration","description":"The configuration for pre-roll ad insertion."},"logConfiguration":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationLogConfiguration","description":"The configuration that defines where AWS Elemental MediaTailor sends logs for the playback configuration."},"manifestProcessingRules":{"$ref":"#/types/aws-native:mediatailor:PlaybackConfigurationManifestProcessingRules","description":"The configuration for manifest processing rules. Manifest processing rules enable customization of the personalized manifests created by MediaTailor."},"personalizationThresholdSeconds":{"description":"Defines the maximum duration of underfilled ad time (in seconds) allowed in an ad break. If the duration of underfilled ad time exceeds the personalization threshold, then the personalization of the ad break is abandoned and the underlying content is shown. This feature applies to ad replacement in live and VOD streams, rather than ad insertion, because it relies on an underlying content stream. For more information about ad break behavior, including ad replacement and insertion, see Ad Behavior in AWS Elemental MediaTailor (https://docs.aws.amazon.com/mediatailor/latest/ug/ad-behavior.html).","type":"integer"},"playbackConfigurationArn":{"description":"The Amazon Resource Name (ARN) for the playback configuration.","type":"string"},"playbackEndpointPrefix":{"description":"The URL that the player accesses to get a manifest from MediaTailor. This session will use server-side reporting.","type":"string"},"sessionInitializationEndpointPrefix":{"description":"The URL that the player uses to initialize a session that uses client-side reporting.","type":"string"},"slateAdUrl":{"description":"The URL for a high-quality video asset to transcode and use to fill in time that's not used by ads. AWS Elemental MediaTailor shows the slate to fill in gaps in media content. Configuring the slate is optional for non-VPAID configurations. For VPAID, the slate is required because MediaTailor provides it in the slots that are designated for dynamic ad content. The slate must be a high-quality asset that contains both audio and video.","type":"string"},"tags":{"description":"The tags to assign to the playback configuration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transcodeProfileName":{"description":"The name that is used to associate this playback configuration with a custom transcode profile. This overrides the dynamic transcoding defaults of MediaTailor. Use this only if you have already set up custom profiles with the help of AWS Support.","type":"string"},"videoContentSourceUrl":{"description":"The URL prefix for the parent manifest for the stream, minus the asset ID. The maximum length is 512 characters.","type":"string"}}}},"aws-native:mediatailor:getSourceLocation":{"description":"Definition of AWS::MediaTailor::SourceLocation Resource Type","inputs":{"properties":{"sourceLocationName":{"type":"string","description":"The name of the source location."}},"required":["sourceLocationName"]},"outputs":{"properties":{"accessConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationAccessConfiguration","description":"The access configuration for the source location."},"arn":{"description":"\u003cp\u003eThe ARN of the source location.\u003c/p\u003e","type":"string"},"defaultSegmentDeliveryConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationDefaultSegmentDeliveryConfiguration","description":"The default segment delivery configuration."},"httpConfiguration":{"$ref":"#/types/aws-native:mediatailor:SourceLocationHttpConfiguration","description":"The HTTP configuration for the source location."},"segmentDeliveryConfigurations":{"description":"\u003cp\u003eA list of the segment delivery configurations associated with this resource.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediatailor:SourceLocationSegmentDeliveryConfiguration"},"type":"array"},"tags":{"description":"The tags to assign to the source location.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:mediatailor:getVodSource":{"description":"Definition of AWS::MediaTailor::VodSource Resource Type","inputs":{"properties":{"sourceLocationName":{"type":"string","description":"The name of the source location that the VOD source is associated with."},"vodSourceName":{"type":"string","description":"The name of the VOD source."}},"required":["sourceLocationName","vodSourceName"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe ARN of the VOD source.\u003c/p\u003e","type":"string"},"httpPackageConfigurations":{"description":"\u003cp\u003eA list of HTTP package configuration parameters for this VOD source.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:mediatailor:VodSourceHttpPackageConfiguration"},"type":"array"},"tags":{"description":"The tags to assign to the VOD source.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:memorydb:getAcl":{"description":"Resource Type definition for AWS::MemoryDB::ACL","inputs":{"properties":{"aclName":{"type":"string","description":"The name of the acl."}},"required":["aclName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the acl.","type":"string"},"status":{"description":"Indicates acl status. Can be \"creating\", \"active\", \"modifying\", \"deleting\".","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userNames":{"description":"List of users associated to this acl.","items":{"type":"string"},"type":"array"}}}},"aws-native:memorydb:getCluster":{"description":"The AWS::MemoryDB::Cluster resource creates an Amazon MemoryDB Cluster.","inputs":{"properties":{"clusterName":{"type":"string","description":"The name of the cluster. This value must be unique as it also serves as the cluster identifier."}},"required":["clusterName"]},"outputs":{"properties":{"aclName":{"description":"The name of the Access Control List to associate with the cluster.","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the cluster.","type":"string"},"autoMinorVersionUpgrade":{"description":"A flag that enables automatic minor version upgrade when set to true.\n\nYou cannot modify the value of AutoMinorVersionUpgrade after the cluster is created. To enable AutoMinorVersionUpgrade on a cluster you must set AutoMinorVersionUpgrade to true when you create a cluster.","type":"boolean"},"clusterEndpoint":{"$ref":"#/types/aws-native:memorydb:ClusterEndpoint","description":"The cluster endpoint."},"description":{"description":"An optional description of the cluster.","type":"string"},"engine":{"description":"The engine type used by the cluster.","type":"string"},"engineVersion":{"description":"The Redis engine version used by the cluster.","type":"string"},"ipDiscovery":{"$ref":"#/types/aws-native:memorydb:ClusterSupportedIpDiscoveryTypes","description":"For clusters wth dual stack NetworkType, IpDiscovery controls the Ip protocol (ipv4 or ipv6) returned by the engine commands such as `cluster info` and `cluster nodes` which are used by clients to connect to the nodes in the cluster."},"maintenanceWindow":{"description":"Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum maintenance window is a 60 minute period.","type":"string"},"nodeType":{"description":"The compute and memory capacity of the nodes in the cluster.","type":"string"},"numReplicasPerShard":{"description":"The number of replicas to apply to each shard. The limit is 5.","type":"integer"},"numShards":{"description":"The number of shards the cluster will contain.","type":"integer"},"parameterGroupName":{"description":"The name of the parameter group associated with the cluster.","type":"string"},"parameterGroupStatus":{"description":"The status of the parameter group used by the cluster.","type":"string"},"securityGroupIds":{"description":"One or more Amazon VPC security groups associated with this cluster.","items":{"type":"string"},"type":"array"},"snapshotRetentionLimit":{"description":"The number of days for which MemoryDB retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted.","type":"integer"},"snapshotWindow":{"description":"The daily time range (in UTC) during which MemoryDB begins taking a daily snapshot of your cluster.","type":"string"},"snsTopicArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) topic to which notifications are sent.","type":"string"},"snsTopicStatus":{"description":"The status of the Amazon SNS notification topic. Notifications are sent only if the status is enabled.","type":"string"},"status":{"description":"The status of the cluster. For example, Available, Updating, Creating.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:memorydb:getMultiRegionCluster":{"description":"The AWS::MemoryDB::Multi Region Cluster resource creates an Amazon MemoryDB Multi Region Cluster.","inputs":{"properties":{"multiRegionClusterName":{"type":"string","description":"The name of the Global Datastore, it is generated by MemoryDB adding a prefix to MultiRegionClusterNameSuffix."}},"required":["multiRegionClusterName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the multi region cluster.","type":"string"},"description":{"description":"Description of the multi region cluster.","type":"string"},"engine":{"description":"The engine type used by the multi region cluster.","type":"string"},"multiRegionClusterName":{"description":"The name of the Global Datastore, it is generated by MemoryDB adding a prefix to MultiRegionClusterNameSuffix.","type":"string"},"nodeType":{"description":"The compute and memory capacity of the nodes in the multi region cluster.","type":"string"},"numShards":{"description":"The number of shards the multi region cluster will contain.","type":"integer"},"status":{"description":"The status of the multi region cluster. For example, Available, Updating, Creating.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this multi region cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:memorydb:getParameterGroup":{"description":"The AWS::MemoryDB::ParameterGroup resource creates an Amazon MemoryDB ParameterGroup.","inputs":{"properties":{"parameterGroupName":{"type":"string","description":"The name of the parameter group."}},"required":["parameterGroupName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the parameter group.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:memorydb:getSubnetGroup":{"description":"The AWS::MemoryDB::SubnetGroup resource creates an Amazon MemoryDB Subnet Group.","inputs":{"properties":{"subnetGroupName":{"type":"string","description":"The name of the subnet group. This value must be unique as it also serves as the subnet group identifier."}},"required":["subnetGroupName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the subnet group.","type":"string"},"description":{"description":"An optional description of the subnet group.","type":"string"},"subnetIds":{"description":"A list of VPC subnet IDs for the subnet group.","items":{"type":"string"},"type":"array"},"supportedNetworkTypes":{"description":"Supported network types would be a list of network types supported by subnet group and can be either [ipv4] or [ipv4, dual_stack] or [ipv6].","items":{"type":"string"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this subnet group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:memorydb:getUser":{"description":"Resource Type definition for AWS::MemoryDB::User","inputs":{"properties":{"userName":{"type":"string","description":"The name of the user."}},"required":["userName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the user account.","type":"string"},"status":{"description":"Indicates the user status. Can be \"active\", \"modifying\" or \"deleting\".","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this user.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:msk:getBatchScramSecret":{"description":"Resource Type definition for AWS::MSK::BatchScramSecret","inputs":{"properties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) that uniquely identifies the cluster."}},"required":["clusterArn"]},"outputs":{"properties":{"secretArnList":{"description":"List of Amazon Resource Name (ARN)s of Secrets Manager secrets.","items":{"type":"string"},"type":"array"}}}},"aws-native:msk:getCluster":{"description":"Resource Type definition for AWS::MSK::Cluster","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MSK cluster."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the MSK cluster.","type":"string"},"brokerNodeGroupInfo":{"$ref":"#/types/aws-native:msk:ClusterBrokerNodeGroupInfo","description":"Information about the broker nodes in the cluster."},"clientAuthentication":{"$ref":"#/types/aws-native:msk:ClusterClientAuthentication","description":"Includes all client authentication related information."},"configurationInfo":{"$ref":"#/types/aws-native:msk:ClusterConfigurationInfo","description":"Represents the configuration that you want MSK to use for the cluster."},"currentVersion":{"description":"The current version of the MSK cluster","type":"string"},"encryptionInfo":{"$ref":"#/types/aws-native:msk:ClusterEncryptionInfo","description":"Includes all encryption-related information."},"enhancedMonitoring":{"$ref":"#/types/aws-native:msk:ClusterEnhancedMonitoring","description":"Specifies the level of monitoring for the MSK cluster."},"kafkaVersion":{"description":"The version of Apache Kafka. You can use Amazon MSK to create clusters that use [supported Apache Kafka versions](https://docs.aws.amazon.com/msk/latest/developerguide/supported-kafka-versions.html) .","type":"string"},"loggingInfo":{"$ref":"#/types/aws-native:msk:ClusterLoggingInfo","description":"Logging info details for the cluster."},"numberOfBrokerNodes":{"description":"The number of broker nodes in the cluster.","type":"integer"},"openMonitoring":{"$ref":"#/types/aws-native:msk:ClusterOpenMonitoring","description":"The settings for open monitoring."},"rebalancing":{"$ref":"#/types/aws-native:msk:ClusterRebalancing"},"storageMode":{"$ref":"#/types/aws-native:msk:ClusterStorageMode","description":"This controls storage mode for supported storage tiers."},"tags":{"additionalProperties":{"type":"string"},"description":"A key-value pair to associate with a resource.","type":"object"}}}},"aws-native:msk:getClusterPolicy":{"description":"Resource Type definition for AWS::MSK::ClusterPolicy","inputs":{"properties":{"clusterArn":{"type":"string","description":"The arn of the cluster for the resource policy."}},"required":["clusterArn"]},"outputs":{"properties":{"currentVersion":{"description":"The current version of the policy attached to the specified cluster","type":"string"},"policy":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified cluster.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MSK::ClusterPolicy` for more information about the expected schema for this property."}}}},"aws-native:msk:getConfiguration":{"description":"Resource Type definition for AWS::MSK::Configuration","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the configuration."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the configuration.","type":"string"},"description":{"description":"The description of the configuration.","type":"string"},"latestRevision":{"$ref":"#/types/aws-native:msk:ConfigurationLatestRevision","description":"Latest revision of the MSK configuration."}}}},"aws-native:msk:getReplicator":{"description":"Resource Type definition for AWS::MSK::Replicator","inputs":{"properties":{"replicatorArn":{"type":"string","description":"Amazon Resource Name for the created replicator."}},"required":["replicatorArn"]},"outputs":{"properties":{"currentVersion":{"description":"The current version of the MSK replicator.","type":"string"},"replicationInfoList":{"description":"A list of replication configurations, where each configuration targets a given source cluster to target cluster replication flow.","items":{"$ref":"#/types/aws-native:msk:ReplicatorReplicationInfo"},"type":"array"},"replicatorArn":{"description":"Amazon Resource Name for the created replicator.","type":"string"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:msk:getServerlessCluster":{"description":"Resource Type definition for AWS::MSK::ServerlessCluster","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the MSK cluster."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the MSK cluster.","type":"string"}}}},"aws-native:msk:getTopic":{"description":"Resource Type definition for AWS::MSK::Topic","inputs":{"properties":{"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the topic"}},"required":["topicArn"]},"outputs":{"properties":{"partitionCount":{"description":"The number of partitions for the topic","type":"integer"},"topicArn":{"description":"The Amazon Resource Name (ARN) of the topic","type":"string"}}}},"aws-native:msk:getVpcConnection":{"description":"Resource Type definition for AWS::MSK::VpcConnection","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the VPC connection."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the VPC connection.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"An arbitrary set of tags (key-value pairs) you specify while creating the VPC connection.","type":"object"}}}},"aws-native:mwaa:getEnvironment":{"description":"Resource schema for AWS::MWAA::Environment","inputs":{"properties":{"name":{"type":"string","description":"The name of your Amazon MWAA environment."}},"required":["name"]},"outputs":{"properties":{"airflowConfigurationOptions":{"$ref":"pulumi.json#/Any","description":"Key/value pairs representing Airflow configuration variables.\n    Keys are prefixed by their section:\n\n    [core]\n    dags_folder={AIRFLOW_HOME}/dags\n\n    Would be represented as\n\n    \"core.dags_folder\": \"{AIRFLOW_HOME}/dags\"\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MWAA::Environment` for more information about the expected schema for this property."},"airflowVersion":{"description":"The version of Apache Airflow to use for the environment. If no value is specified, defaults to the latest version.\n\nIf you specify a newer version number for an existing environment, the version update requires some service interruption before taking effect.\n\n*Allowed Values* : `2.7.2` | `2.8.1` | `2.9.2` | `2.10.1` | `2.10.3` | `3.0.6` (latest)","type":"string"},"arn":{"description":"The ARN for the Amazon MWAA environment.","type":"string"},"celeryExecutorQueue":{"description":"The queue ARN for the environment's [Celery Executor](https://docs.aws.amazon.com/https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/executor/celery.html) . Amazon MWAA uses a Celery Executor to distribute tasks across multiple workers. When you create an environment in a shared VPC, you must provide access to the Celery Executor queue from your VPC.","type":"string"},"dagS3Path":{"description":"The relative path to the DAGs folder on your Amazon S3 bucket. For example, `dags` . To learn more, see [Adding or updating DAGs](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-folder.html) .","type":"string"},"databaseVpcEndpointService":{"description":"The VPC endpoint for the environment's Amazon RDS database.","type":"string"},"environmentClass":{"description":"The environment class type. Valid values: `mw1.micro` , `mw1.small` , `mw1.medium` , `mw1.large` , `mw1.1large` , and `mw1.2large` . To learn more, see [Amazon MWAA environment class](https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html) .","type":"string"},"executionRoleArn":{"description":"The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access AWS resources in your environment. For example, `arn:aws:iam::123456789:role/my-execution-role` . To learn more, see [Amazon MWAA Execution role](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-create-role.html) .","type":"string"},"loggingConfiguration":{"$ref":"#/types/aws-native:mwaa:EnvironmentLoggingConfiguration","description":"The Apache Airflow logs being sent to CloudWatch Logs: `DagProcessingLogs` , `SchedulerLogs` , `TaskLogs` , `WebserverLogs` , `WorkerLogs` ."},"maxWebservers":{"description":"The maximum number of web servers that you want to run in your environment. Amazon MWAA scales the number of Apache Airflow web servers up to the number you specify for `MaxWebservers` when you interact with your Apache Airflow environment using Apache Airflow REST API, or the Apache Airflow CLI. For example, in scenarios where your workload requires network calls to the Apache Airflow REST API with a high transaction-per-second (TPS) rate, Amazon MWAA will increase the number of web servers up to the number set in `MaxWebserers` . As TPS rates decrease Amazon MWAA disposes of the additional web servers, and scales down to the number set in `MinxWebserers` .\n\nValid values: For environments larger than mw1.micro, accepts values from `2` to `5` . Defaults to `2` for all environment sizes except mw1.micro, which defaults to `1` .","type":"integer"},"maxWorkers":{"description":"The maximum number of workers that you want to run in your environment. MWAA scales the number of Apache Airflow workers up to the number you specify in the `MaxWorkers` field. For example, `20` . When there are no more tasks running, and no more in the queue, MWAA disposes of the extra workers leaving the one worker that is included with your environment, or the number you specify in `MinWorkers` .","type":"integer"},"minWebservers":{"description":"The minimum number of web servers that you want to run in your environment. Amazon MWAA scales the number of Apache Airflow web servers up to the number you specify for `MaxWebservers` when you interact with your Apache Airflow environment using Apache Airflow REST API, or the Apache Airflow CLI. As the transaction-per-second rate, and the network load, decrease, Amazon MWAA disposes of the additional web servers, and scales down to the number set in `MinxWebserers` .\n\nValid values: For environments larger than mw1.micro, accepts values from `2` to `5` . Defaults to `2` for all environment sizes except mw1.micro, which defaults to `1` .","type":"integer"},"minWorkers":{"description":"The minimum number of workers that you want to run in your environment. MWAA scales the number of Apache Airflow workers up to the number you specify in the `MaxWorkers` field. When there are no more tasks running, and no more in the queue, MWAA disposes of the extra workers leaving the worker count you specify in the `MinWorkers` field. For example, `2` .","type":"integer"},"networkConfiguration":{"$ref":"#/types/aws-native:mwaa:EnvironmentNetworkConfiguration","description":"The VPC networking components used to secure and enable network traffic between the AWS resources for your environment. To learn more, see [About networking on Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/networking-about.html) ."},"pluginsS3ObjectVersion":{"description":"The version of the plugins.zip file on your Amazon S3 bucket. To learn more, see [Installing custom plugins](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-import-plugins.html) .","type":"string"},"pluginsS3Path":{"description":"The relative path to the `plugins.zip` file on your Amazon S3 bucket. For example, `plugins.zip` . To learn more, see [Installing custom plugins](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-dag-import-plugins.html) .","type":"string"},"requirementsS3ObjectVersion":{"description":"The version of the requirements.txt file on your Amazon S3 bucket. To learn more, see [Installing Python dependencies](https://docs.aws.amazon.com/mwaa/latest/userguide/working-dags-dependencies.html) .","type":"string"},"requirementsS3Path":{"description":"The relative path to the `requirements.txt` file on your Amazon S3 bucket. For example, `requirements.txt` . To learn more, see [Installing Python dependencies](https://docs.aws.amazon.com/mwaa/latest/userguide/working-dags-dependencies.html) .","type":"string"},"schedulers":{"description":"The number of schedulers that you want to run in your environment. Valid values:\n\n- *v2* - For environments larger than mw1.micro, accepts values from 2 to 5. Defaults to 2 for all environment sizes except mw1.micro, which defaults to 1.\n- *v1* - Accepts 1.","type":"integer"},"sourceBucketArn":{"description":"The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, `arn:aws:s3:::my-airflow-bucket-unique-name` . To learn more, see [Create an Amazon S3 bucket for Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-s3-bucket.html) .","type":"string"},"startupScriptS3ObjectVersion":{"description":"The version of the startup shell script in your Amazon S3 bucket. You must specify the [version ID](https://docs.aws.amazon.com/AmazonS3/latest/userguide/versioning-workflows.html) that Amazon S3 assigns to the file every time you update the script.\n\nVersion IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:\n\n`3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo`\n\nFor more information, see [Using a startup script](https://docs.aws.amazon.com/mwaa/latest/userguide/using-startup-script.html) .","type":"string"},"startupScriptS3Path":{"description":"The relative path to the startup shell script in your Amazon S3 bucket. For example, `s3://mwaa-environment/startup.sh` .\n\nAmazon MWAA runs the script as your environment starts, and before running the Apache Airflow process. You can use this script to install dependencies, modify Apache Airflow configuration options, and set environment variables. For more information, see [Using a startup script](https://docs.aws.amazon.com/mwaa/latest/userguide/using-startup-script.html) .","type":"string"},"tags":{"$ref":"pulumi.json#/Any","description":"A map of tags for the environment.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::MWAA::Environment` for more information about the expected schema for this property."},"webserverAccessMode":{"$ref":"#/types/aws-native:mwaa:EnvironmentWebserverAccessMode","description":"The Apache Airflow *Web server* access mode. To learn more, see [Apache Airflow access modes](https://docs.aws.amazon.com/mwaa/latest/userguide/configuring-networking.html) . Valid values: `PRIVATE_ONLY` or `PUBLIC_ONLY` ."},"webserverUrl":{"description":"The URL of your Apache Airflow UI.","type":"string"},"webserverVpcEndpointService":{"description":"The VPC endpoint for the environment's web server.","type":"string"},"weeklyMaintenanceWindowStart":{"description":"The day and time of the week to start weekly maintenance updates of your environment in the following format: `DAY:HH:MM` . For example: `TUE:03:30` . You can specify a start time in 30 minute increments only. Supported input includes the following:\n\n- MON|TUE|WED|THU|FRI|SAT|SUN:([01]\\\\d|2[0-3]):(00|30)","type":"string"}}}},"aws-native:mwaaserverless:getWorkflow":{"description":"Resource Type definition for AWS::MWAAServerless::Workflow resource","inputs":{"properties":{"workflowArn":{"type":"string"}},"required":["workflowArn"]},"outputs":{"properties":{"createdAt":{"type":"string"},"definitionS3Location":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowS3Location"},"description":{"type":"string"},"loggingConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowLoggingConfiguration"},"modifiedAt":{"type":"string"},"networkConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowNetworkConfiguration"},"roleArn":{"type":"string"},"scheduleConfiguration":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowScheduleConfiguration"},"tags":{"additionalProperties":{"type":"string"},"type":"object"},"triggerMode":{"type":"string"},"workflowArn":{"type":"string"},"workflowStatus":{"$ref":"#/types/aws-native:mwaaserverless:WorkflowStatus"},"workflowVersion":{"type":"string"}}}},"aws-native:neptune:getDbCluster":{"description":"The AWS::Neptune::DBCluster resource creates an Amazon Neptune DB cluster.","inputs":{"properties":{"dbClusterIdentifier":{"type":"string","description":"The DB cluster identifier. Contains a user-supplied DB cluster identifier. This identifier is the unique key that identifies a DB cluster stored as a lowercase string."}},"required":["dbClusterIdentifier"]},"outputs":{"properties":{"associatedRoles":{"description":"Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other AWS services on your behalf.","items":{"$ref":"#/types/aws-native:neptune:DbClusterDbClusterRole"},"type":"array"},"backupRetentionPeriod":{"description":"Specifies the number of days for which automatic DB snapshots are retained.","type":"integer"},"clusterResourceId":{"description":"The resource id for the DB cluster. For example: `cluster-ABCD1234EFGH5678IJKL90MNOP`. The cluster ID uniquely identifies the cluster and is used in things like IAM authentication policies.","type":"string"},"copyTagsToSnapshot":{"description":"A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default behaviour is not to copy them.","type":"boolean"},"dbClusterParameterGroupName":{"description":"Provides the name of the DB cluster parameter group.","type":"string"},"dbPort":{"description":"The port number on which the DB instances in the DB cluster accept connections. \n\nIf not specified, the default port used is `8182`. \n\nNote: `Port` property will soon be deprecated from this resource. Please update existing templates to rename it with new property `DBPort` having same functionalities.","type":"integer"},"deletionProtection":{"description":"Indicates whether or not the DB cluster has deletion protection enabled. The database can't be deleted when deletion protection is enabled.","type":"boolean"},"enableCloudwatchLogsExports":{"description":"Specifies a list of log types that are enabled for export to CloudWatch Logs.","items":{"type":"string"},"type":"array"},"endpoint":{"description":"The connection endpoint for the DB cluster. For example: `mystack-mydbcluster-1apw1j4phylrk.cg034hpkmmjt.us-east-2.rds.amazonaws.com`","type":"string"},"engineVersion":{"description":"Indicates the database engine version.","type":"string"},"iamAuthEnabled":{"description":"True if mapping of Amazon Identity and Access Management (IAM) accounts to database accounts is enabled, and otherwise false.","type":"boolean"},"port":{"description":"The port number on which the DB cluster accepts connections. For example: `8182`.","type":"string"},"preferredBackupWindow":{"description":"Specifies the daily time range during which automated backups are created if automated backups are enabled, as determined by the BackupRetentionPeriod.","type":"string"},"preferredMaintenanceWindow":{"description":"Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).","type":"string"},"readEndpoint":{"description":"The reader endpoint for the DB cluster. For example: `mystack-mydbcluster-ro-1apw1j4phylrk.cg034hpkmmjt.us-east-2.rds.amazonaws.com`","type":"string"},"serverlessScalingConfiguration":{"$ref":"#/types/aws-native:neptune:DbClusterServerlessScalingConfiguration","description":"Contains the scaling configuration used by the Neptune Serverless Instances within this DB cluster."},"tags":{"description":"The tags assigned to this cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcSecurityGroupIds":{"description":"Provides a list of VPC security groups that the DB cluster belongs to.","items":{"type":"string"},"type":"array"}}}},"aws-native:neptune:getDbClusterParameterGroup":{"description":"The AWS::Neptune::DBClusterParameterGroup resource creates a new Amazon Neptune DB cluster parameter group","inputs":{"properties":{"name":{"type":"string","description":"Provides the name of the DB cluster parameter group."}},"required":["name"]},"outputs":{"properties":{"parameters":{"$ref":"pulumi.json#/Any","description":"An array of parameters to be modified. A maximum of 20 parameters can be modified in a single request.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Neptune::DBClusterParameterGroup` for more information about the expected schema for this property."},"tags":{"description":"The list of tags for the cluster parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:neptune:getDbInstance":{"description":"The AWS::Neptune::DBInstance resource creates an Amazon Neptune DB instance.","inputs":{"properties":{"dbInstanceIdentifier":{"type":"string","description":"Contains a user-supplied database identifier. This identifier is the unique key that identifies a DB instance."}},"required":["dbInstanceIdentifier"]},"outputs":{"properties":{"autoMinorVersionUpgrade":{"description":"Indicates that minor version patches are applied automatically.\n\nWhen updating this property, some interruptions may occur.","type":"boolean"},"dbInstanceClass":{"description":"Contains the name of the compute and memory capacity class of the DB instance.\n\nIf you update this property, some interruptions may occur.","type":"string"},"dbParameterGroupName":{"description":"The name of an existing DB parameter group or a reference to an AWS::Neptune::DBParameterGroup resource created in the template. If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot.","type":"string"},"endpoint":{"description":"The connection endpoint for the database. For example: `mystack-mydb-1apw1j4phylrk.cg034hpkmmjt.us-east-2.rds.amazonaws.com`.","type":"string"},"port":{"description":"The port number on which the database accepts connections. For example: `8182`.","type":"string"},"preferredMaintenanceWindow":{"description":"Specifies the weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).","type":"string"},"publiclyAccessible":{"description":"Indicates that public accessibility is enabled. This should be enabled in combination with IAM Auth enabled on the DBCluster","type":"boolean"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this DB instance.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:neptune:getDbParameterGroup":{"description":"AWS::Neptune::DBParameterGroup creates a new DB parameter group. This type can be declared in a template and referenced in the DBParameterGroupName parameter of AWS::Neptune::DBInstance","inputs":{"properties":{"name":{"type":"string","description":"Provides the name of the DB parameter group."}},"required":["name"]},"outputs":{"properties":{"parameters":{"$ref":"pulumi.json#/Any","description":"The parameters to set for this DB parameter group.\n\nThe parameters are expressed as a JSON object consisting of key-value pairs.\n\nChanges to dynamic parameters are applied immediately. During an update, if you have static parameters (whether they were changed or not), it triggers AWS CloudFormation to reboot the associated DB instance without failover.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Neptune::DBParameterGroup` for more information about the expected schema for this property."},"tags":{"description":"An optional array of key-value pairs to apply to this DB parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:neptune:getDbSubnetGroup":{"description":"The AWS::Neptune::DBSubnetGroup type creates an Amazon Neptune DB subnet group. Subnet groups must contain at least two subnets in two different Availability Zones in the same AWS Region.","inputs":{"properties":{"dbSubnetGroupName":{"type":"string","description":"The name for the DB subnet group. This value is stored as a lowercase string.\n\nConstraints: Must contain no more than 255 lowercase alphanumeric characters or hyphens. Must not be \"Default\".\n\nExample: mysubnetgroup\n\n"}},"required":["dbSubnetGroupName"]},"outputs":{"properties":{"dbSubnetGroupDescription":{"description":"The description for the DB subnet group.","type":"string"},"subnetIds":{"description":"The Amazon EC2 subnet IDs for the DB subnet group.","items":{"type":"string"},"type":"array"},"tags":{"description":"An optional array of key-value pairs to apply to this DB subnet group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:neptune:getEventSubscription":{"description":"Resource Type definition for AWS::Neptune::EventSubscription","inputs":{"properties":{"subscriptionName":{"type":"string","description":"The name of the subscription."}},"required":["subscriptionName"]},"outputs":{"properties":{"enabled":{"description":"A Boolean value; set to true to activate the subscription, set to false to create the subscription but not active it.","type":"boolean"},"eventCategories":{"description":"A list of event categories for a SourceType that you want to subscribe to. You can see a list of the categories for a given SourceType in the Events topic in the Amazon Neptune User Guide or by using the DescribeEventCategories action.","items":{"type":"string"},"type":"array"},"sourceIds":{"description":"The list of identifiers of the event sources for which events will be returned. If not specified, then all sources are included in the response. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens; it cannot end with a hyphen or contain two consecutive hyphens.","items":{"type":"string"},"type":"array"},"sourceType":{"description":"The type of source that will be generating the events. For example, if you want to be notified of events generated by a DB instance, you would set this parameter to db-instance. if this value is not specified, all events are returned.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:neptunegraph:getGraph":{"description":"The AWS::NeptuneGraph::Graph resource creates an Amazon NeptuneGraph Graph.","inputs":{"properties":{"graphId":{"type":"string","description":"The auto-generated id assigned by the service."}},"required":["graphId"]},"outputs":{"properties":{"deletionProtection":{"description":"Value that indicates whether the Graph has deletion protection enabled. The graph can't be deleted when deletion protection is enabled.\n\n_Default_: If not specified, the default value is true.","type":"boolean"},"endpoint":{"description":"The connection endpoint for the graph. For example: `g-12a3bcdef4.us-east-1.neptune-graph.amazonaws.com`","type":"string"},"graphArn":{"description":"Graph resource ARN","type":"string"},"graphId":{"description":"The auto-generated id assigned by the service.","type":"string"},"provisionedMemory":{"description":"Memory for the Graph.","type":"integer"},"publicConnectivity":{"description":"Specifies whether the Graph can be reached over the internet. Access to all graphs requires IAM authentication.\n\nWhen the Graph is publicly reachable, its Domain Name System (DNS) endpoint resolves to the public IP address from the internet.\n\nWhen the Graph isn't publicly reachable, you need to create a PrivateGraphEndpoint in a given VPC to ensure the DNS name resolves to a private IP address that is reachable from the VPC.\n\n_Default_: If not specified, the default value is false.","type":"boolean"},"tags":{"description":"The tags associated with this graph.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:neptunegraph:getPrivateGraphEndpoint":{"description":"The AWS::NeptuneGraph::PrivateGraphEndpoint resource creates an Amazon NeptuneGraph PrivateGraphEndpoint.","inputs":{"properties":{"privateGraphEndpointIdentifier":{"type":"string","description":"PrivateGraphEndpoint resource identifier generated by concatenating the associated GraphIdentifier and VpcId with an underscore separator.\n\n For example, if GraphIdentifier is `g-12a3bcdef4` and VpcId is `vpc-0a12bc34567de8f90`, the generated PrivateGraphEndpointIdentifier will be `g-12a3bcdef4_vpc-0a12bc34567de8f90`"}},"required":["privateGraphEndpointIdentifier"]},"outputs":{"properties":{"privateGraphEndpointIdentifier":{"description":"PrivateGraphEndpoint resource identifier generated by concatenating the associated GraphIdentifier and VpcId with an underscore separator.\n\n For example, if GraphIdentifier is `g-12a3bcdef4` and VpcId is `vpc-0a12bc34567de8f90`, the generated PrivateGraphEndpointIdentifier will be `g-12a3bcdef4_vpc-0a12bc34567de8f90`","type":"string"},"vpcEndpointId":{"description":"VPC endpoint that provides a private connection between the Graph and specified VPC.","type":"string"}}}},"aws-native:networkfirewall:getFirewall":{"description":"Resource type definition for AWS::NetworkFirewall::Firewall","inputs":{"properties":{"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall."}},"required":["firewallArn"]},"outputs":{"properties":{"availabilityZoneChangeProtection":{"description":"A setting indicating whether the firewall is protected against changes to its Availability Zone configuration. When set to `TRUE` , you must first disable this protection before adding or removing Availability Zones.","type":"boolean"},"availabilityZoneMappings":{"description":"The Availability Zones where the firewall endpoints are created for a transit gateway-attached firewall. Each mapping specifies an Availability Zone where the firewall processes traffic.","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallAvailabilityZoneMapping"},"type":"array"},"deleteProtection":{"description":"A flag indicating whether it is possible to delete the firewall. A setting of `TRUE` indicates that the firewall is protected against deletion. Use this setting to protect against accidentally deleting a firewall that is in use. When you create a firewall, the operation initializes this flag to `TRUE` .","type":"boolean"},"description":{"description":"A description of the firewall.","type":"string"},"enabledAnalysisTypes":{"description":"The types of analysis to enable for the firewall. Can be TLS_SNI, HTTP_HOST, or both.","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallEnabledAnalysisType"},"type":"array"},"endpointIds":{"description":"The unique IDs of the firewall endpoints for all of the subnets that you attached to the firewall. The subnets are not listed in any particular order. For example: `[\"us-west-2c:vpce-111122223333\", \"us-west-2a:vpce-987654321098\", \"us-west-2b:vpce-012345678901\"]` .","items":{"type":"string"},"type":"array"},"firewallArn":{"description":"The Amazon Resource Name (ARN) of the firewall.","type":"string"},"firewallId":{"description":"The name of the firewallresource.","type":"string"},"firewallPolicyArn":{"description":"The Amazon Resource Name (ARN) of the firewall policy.\n\nThe relationship of firewall to firewall policy is many to one. Each firewall requires one firewall policy association, and you can use the same firewall policy for multiple firewalls.","type":"string"},"firewallPolicyChangeProtection":{"description":"A setting indicating whether the firewall is protected against a change to the firewall policy association. Use this setting to protect against accidentally modifying the firewall policy for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .","type":"boolean"},"subnetChangeProtection":{"description":"A setting indicating whether the firewall is protected against changes to the subnet associations. Use this setting to protect against accidentally modifying the subnet associations for a firewall that is in use. When you create a firewall, the operation initializes this setting to `TRUE` .","type":"boolean"},"subnetMappings":{"description":"The primary public subnets that Network Firewall is using for the firewall. Network Firewall creates a firewall endpoint in each subnet. Create a subnet mapping for each Availability Zone where you want to use the firewall.\n\nThese subnets are all defined for a single, primary VPC, and each must belong to a different Availability Zone. Each of these subnets establishes the availability of the firewall in its Availability Zone.\n\nIn addition to these subnets, you can define other endpoints for the firewall in `VpcEndpointAssociation` resources. You can define these additional endpoints for any VPC, and for any of the Availability Zones where the firewall resource already has a subnet mapping. VPC endpoint associations give you the ability to protect multiple VPCs using a single firewall, and to define multiple firewall endpoints for a VPC in a single Availability Zone.","items":{"$ref":"#/types/aws-native:networkfirewall:FirewallSubnetMapping"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayAttachmentId":{"description":"The unique identifier of the transit gateway attachment associated with this firewall. This field is only present for transit gateway-attached firewalls.","type":"string"},"transitGatewayId":{"description":"The unique identifier of the transit gateway associated with this firewall. This field is only present for transit gateway-attached firewalls.","type":"string"}}}},"aws-native:networkfirewall:getFirewallPolicy":{"description":"Resource type definition for AWS::NetworkFirewall::FirewallPolicy","inputs":{"properties":{"firewallPolicyArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewall policy."}},"required":["firewallPolicyArn"]},"outputs":{"properties":{"description":{"description":"A description of the firewall policy.","type":"string"},"firewallPolicy":{"$ref":"#/types/aws-native:networkfirewall:FirewallPolicy","description":"The traffic filtering behavior of a firewall policy, defined in a collection of stateless and stateful rule groups and other settings.","language":{"csharp":{"name":"FirewallPolicyValue"}}},"firewallPolicyArn":{"description":"The Amazon Resource Name (ARN) of the firewall policy.","type":"string"},"firewallPolicyId":{"description":"The unique ID of the firewall policy resource.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:networkfirewall:getLoggingConfiguration":{"description":"Resource type definition for AWS::NetworkFirewall::LoggingConfiguration","inputs":{"properties":{"firewallArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the firewallthat the logging configuration is associated with. You can't change the firewall specification after you create the logging configuration."}},"required":["firewallArn"]},"outputs":{"properties":{"enableMonitoringDashboard":{"type":"boolean"},"loggingConfiguration":{"$ref":"#/types/aws-native:networkfirewall:LoggingConfiguration","description":"Defines how AWS Network Firewall performs logging for a firewall.","language":{"csharp":{"name":"LoggingConfigurationValue"}}}}}},"aws-native:networkfirewall:getRuleGroup":{"description":"Resource type definition for AWS::NetworkFirewall::RuleGroup","inputs":{"properties":{"ruleGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule group."}},"required":["ruleGroupArn"]},"outputs":{"properties":{"description":{"description":"A description of the rule group.","type":"string"},"ruleGroup":{"$ref":"#/types/aws-native:networkfirewall:RuleGroup","description":"An object that defines the rule group rules.","language":{"csharp":{"name":"RuleGroupValue"}}},"ruleGroupArn":{"description":"The Amazon Resource Name (ARN) of the rule group.","type":"string"},"ruleGroupId":{"description":"The unique ID of the rule group resource.","type":"string"},"summaryConfiguration":{"$ref":"#/types/aws-native:networkfirewall:SummaryConfigurationProperties","description":"A complex type containing the currently selected rule option fields that will be displayed for rule summarization returned by `DescribeRuleGroupSummary` .\n\n- The `RuleOptions` specified in `SummaryConfiguration`\n- Rule metadata organization preferences"},"tags":{"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:networkfirewall:getTlsInspectionConfiguration":{"description":"Resource type definition for AWS::NetworkFirewall::TLSInspectionConfiguration","inputs":{"properties":{"tlsInspectionConfigurationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the TLS inspection configuration."}},"required":["tlsInspectionConfigurationArn"]},"outputs":{"properties":{"description":{"description":"A description of the TLS inspection configuration.","type":"string"},"tags":{"description":"The key:value pairs to associate with the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tlsInspectionConfiguration":{"$ref":"#/types/aws-native:networkfirewall:TlsInspectionConfigurationTlsInspectionConfiguration","description":"The object that defines a TLS inspection configuration. AWS Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, AWS Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using Certificate Manager , create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall. For more information about using TLS inspection configurations, see [Inspecting SSL/TLS traffic with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection.html) in the *AWS Network Firewall Developer Guide* .","language":{"csharp":{"name":"TLSInspectionConfigurationValue"}}},"tlsInspectionConfigurationArn":{"description":"The Amazon Resource Name (ARN) of the TLS inspection configuration.","type":"string"},"tlsInspectionConfigurationId":{"description":"A unique identifier for the TLS inspection configuration. This ID is returned in the responses to create and list commands. You provide it to operations such as update and delete.","type":"string"}}}},"aws-native:networkfirewall:getVpcEndpointAssociation":{"description":"Resource type definition for AWS::NetworkFirewall::VpcEndpointAssociation","inputs":{"properties":{"vpcEndpointAssociationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of a VPC endpoint association."}},"required":["vpcEndpointAssociationArn"]},"outputs":{"properties":{"endpointId":{"description":"The unique ID of the firewall endpoint for the subnet that you attached to the firewall.For example: \"vpce-111122223333\"","type":"string"},"tags":{"description":"The key:value pairs to associate with the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcEndpointAssociationArn":{"description":"The Amazon Resource Name (ARN) of a VPC endpoint association.","type":"string"},"vpcEndpointAssociationId":{"description":"The unique identifier of the VPC endpoint association.","type":"string"}}}},"aws-native:networkmanager:getConnectAttachment":{"description":"AWS::NetworkManager::ConnectAttachment Resource Type Definition","inputs":{"properties":{"attachmentId":{"type":"string","description":"The ID of the attachment."}},"required":["attachmentId"]},"outputs":{"properties":{"attachmentId":{"description":"The ID of the attachment.","type":"string"},"attachmentPolicyRuleNumber":{"description":"The policy rule number associated with the attachment.","type":"integer"},"attachmentType":{"description":"The type of attachment.","type":"string"},"coreNetworkArn":{"description":"The ARN of a core network.","type":"string"},"createdAt":{"description":"Creation time of the attachment.","type":"string"},"lastModificationErrors":{"description":"Errors from the last modification of the attachment.","items":{"type":"string"},"type":"array"},"networkFunctionGroupName":{"description":"The name of the network function group attachment.","type":"string"},"ownerAccountId":{"description":"The ID of the attachment account owner.","type":"string"},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:ConnectAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"description":"The attachment resource ARN.","type":"string"},"segmentName":{"description":"The name of the segment attachment.","type":"string"},"state":{"description":"State of the attachment.","type":"string"},"tags":{"description":"Tags for the attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"Last update time of the attachment.","type":"string"}}}},"aws-native:networkmanager:getConnectPeer":{"description":"AWS::NetworkManager::ConnectPeer Resource Type Definition.","inputs":{"properties":{"connectPeerId":{"type":"string","description":"The ID of the Connect peer."}},"required":["connectPeerId"]},"outputs":{"properties":{"configuration":{"$ref":"#/types/aws-native:networkmanager:ConnectPeerConfiguration","description":"Configuration of the connect peer."},"connectPeerId":{"description":"The ID of the Connect peer.","type":"string"},"coreNetworkId":{"description":"The ID of the core network.","type":"string"},"createdAt":{"description":"Connect peer creation time.","type":"string"},"edgeLocation":{"description":"The Connect peer Regions where edges are located.","type":"string"},"lastModificationErrors":{"description":"Errors from the last modification of the connect peer.","items":{"type":"string"},"type":"array"},"state":{"description":"State of the connect peer.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:networkmanager:getCoreNetwork":{"description":"AWS::NetworkManager::CoreNetwork Resource Type Definition.","inputs":{"properties":{"coreNetworkId":{"type":"string","description":"The Id of core network"}},"required":["coreNetworkId"]},"outputs":{"properties":{"coreNetworkArn":{"description":"The ARN (Amazon resource name) of core network","type":"string"},"coreNetworkId":{"description":"The Id of core network","type":"string"},"createdAt":{"description":"The creation time of core network","type":"string"},"description":{"description":"The description of core network","type":"string"},"edges":{"description":"The edges within a core network.","items":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkEdge"},"type":"array"},"networkFunctionGroups":{"description":"The network function groups within a core network.","items":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkNetworkFunctionGroup"},"type":"array"},"ownerAccount":{"description":"Owner of the core network","type":"string"},"policyDocument":{"$ref":"pulumi.json#/Any","description":"Live policy document for the core network, you must provide PolicyDocument in Json Format\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::NetworkManager::CoreNetwork` for more information about the expected schema for this property."},"segments":{"description":"The segments within a core network.","items":{"$ref":"#/types/aws-native:networkmanager:CoreNetworkSegment"},"type":"array"},"state":{"description":"The state of core network","type":"string"},"tags":{"description":"The tags for the global network.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:networkmanager:getDevice":{"description":"The AWS::NetworkManager::Device type describes a device.","inputs":{"properties":{"deviceId":{"type":"string","description":"The ID of the device."},"globalNetworkId":{"type":"string","description":"The ID of the global network."}},"required":["globalNetworkId","deviceId"]},"outputs":{"properties":{"awsLocation":{"$ref":"#/types/aws-native:networkmanager:DeviceAwsLocation","description":"The Amazon Web Services location of the device, if applicable."},"createdAt":{"description":"The date and time that the device was created.","type":"string"},"description":{"description":"The description of the device.","type":"string"},"deviceArn":{"description":"The Amazon Resource Name (ARN) of the device.","type":"string"},"deviceId":{"description":"The ID of the device.","type":"string"},"location":{"$ref":"#/types/aws-native:networkmanager:DeviceLocation","description":"The site location."},"model":{"description":"The device model","type":"string"},"serialNumber":{"description":"The device serial number.","type":"string"},"siteId":{"description":"The site ID.","type":"string"},"state":{"description":"The state of the device.","type":"string"},"tags":{"description":"The tags for the device.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"description":"The device type.","type":"string"},"vendor":{"description":"The device vendor.","type":"string"}}}},"aws-native:networkmanager:getDirectConnectGatewayAttachment":{"description":"AWS::NetworkManager::DirectConnectGatewayAttachment Resource Type","inputs":{"properties":{"attachmentId":{"type":"string","description":"Id of the attachment."}},"required":["attachmentId"]},"outputs":{"properties":{"attachmentId":{"description":"Id of the attachment.","type":"string"},"attachmentPolicyRuleNumber":{"description":"The policy rule number associated with the attachment.","type":"integer"},"attachmentType":{"description":"Attachment type.","type":"string"},"coreNetworkArn":{"description":"The ARN of a core network for the Direct Connect Gateway attachment.","type":"string"},"createdAt":{"description":"Creation time of the attachment.","type":"string"},"edgeLocations":{"description":"The Regions where the edges are located.","items":{"type":"string"},"type":"array"},"lastModificationErrors":{"description":"Errors from the last modification of the attachment.","items":{"type":"string"},"type":"array"},"networkFunctionGroupName":{"description":"The name of the network function group attachment.","type":"string"},"ownerAccountId":{"description":"Owner account of the attachment.","type":"string"},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:DirectConnectGatewayAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"description":"The ARN of the Resource.","type":"string"},"segmentName":{"description":"The name of the segment attachment..","type":"string"},"state":{"description":"State of the attachment.","type":"string"},"tags":{"description":"Tags for the attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"Last update time of the attachment.","type":"string"}}}},"aws-native:networkmanager:getGlobalNetwork":{"description":"The AWS::NetworkManager::GlobalNetwork type specifies a global network of the user's account","inputs":{"properties":{"id":{"type":"string","description":"The ID of the global network."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the global network.","type":"string"},"createdAt":{"description":"The date and time that the global network was created.","type":"string"},"description":{"description":"The description of the global network.","type":"string"},"id":{"description":"The ID of the global network.","type":"string"},"state":{"description":"The state of the global network.","type":"string"},"tags":{"description":"The tags for the global network.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:networkmanager:getLink":{"description":"The AWS::NetworkManager::Link type describes a link.","inputs":{"properties":{"globalNetworkId":{"type":"string","description":"The ID of the global network."},"linkId":{"type":"string","description":"The ID of the link."}},"required":["globalNetworkId","linkId"]},"outputs":{"properties":{"bandwidth":{"$ref":"#/types/aws-native:networkmanager:LinkBandwidth","description":"The Bandwidth for the link."},"createdAt":{"description":"The date and time that the device was created.","type":"string"},"description":{"description":"The description of the link.","type":"string"},"linkArn":{"description":"The Amazon Resource Name (ARN) of the link.","type":"string"},"linkId":{"description":"The ID of the link.","type":"string"},"provider":{"description":"The provider of the link.","type":"string"},"state":{"description":"The state of the link.","type":"string"},"tags":{"description":"The tags for the link.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"description":"The type of the link.","type":"string"}}}},"aws-native:networkmanager:getSite":{"description":"The AWS::NetworkManager::Site type describes a site.","inputs":{"properties":{"globalNetworkId":{"type":"string","description":"The ID of the global network."},"siteId":{"type":"string","description":"The ID of the site."}},"required":["globalNetworkId","siteId"]},"outputs":{"properties":{"createdAt":{"description":"The date and time that the device was created.","type":"string"},"description":{"description":"The description of the site.","type":"string"},"location":{"$ref":"#/types/aws-native:networkmanager:SiteLocation","description":"The location of the site."},"siteArn":{"description":"The Amazon Resource Name (ARN) of the site.","type":"string"},"siteId":{"description":"The ID of the site.","type":"string"},"state":{"description":"The state of the site.","type":"string"},"tags":{"description":"The tags for the site.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:networkmanager:getSiteToSiteVpnAttachment":{"description":"AWS::NetworkManager::SiteToSiteVpnAttachment Resource Type definition.","inputs":{"properties":{"attachmentId":{"type":"string","description":"The ID of the attachment."}},"required":["attachmentId"]},"outputs":{"properties":{"attachmentId":{"description":"The ID of the attachment.","type":"string"},"attachmentPolicyRuleNumber":{"description":"The policy rule number associated with the attachment.","type":"integer"},"attachmentType":{"description":"The type of attachment.","type":"string"},"coreNetworkArn":{"description":"The ARN of a core network for the VPC attachment.","type":"string"},"createdAt":{"description":"Creation time of the attachment.","type":"string"},"edgeLocation":{"description":"The Region where the edge is located.","type":"string"},"lastModificationErrors":{"description":"Errors from the last modification of the attachment.","items":{"type":"string"},"type":"array"},"networkFunctionGroupName":{"description":"The name of the network function group attachment.","type":"string"},"ownerAccountId":{"description":"Owner account of the attachment.","type":"string"},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:SiteToSiteVpnAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"description":"The ARN of the Resource.","type":"string"},"segmentName":{"description":"The name of the segment that attachment is in.","type":"string"},"state":{"description":"The state of the attachment.","type":"string"},"tags":{"description":"Tags for the attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"Last update time of the attachment.","type":"string"}}}},"aws-native:networkmanager:getTransitGatewayPeering":{"description":"AWS::NetworkManager::TransitGatewayPeering Resoruce Type.","inputs":{"properties":{"peeringId":{"type":"string","description":"The Id of the transit gateway peering"}},"required":["peeringId"]},"outputs":{"properties":{"coreNetworkArn":{"description":"The ARN (Amazon Resource Name) of the core network that you want to peer a transit gateway to.","type":"string"},"createdAt":{"description":"The creation time of the transit gateway peering","type":"string"},"edgeLocation":{"description":"The location of the transit gateway peering","type":"string"},"lastModificationErrors":{"description":"Errors from the last modification of the transit gateway peering.","items":{"type":"string"},"type":"array"},"ownerAccountId":{"description":"Peering owner account Id","type":"string"},"peeringId":{"description":"The Id of the transit gateway peering","type":"string"},"peeringType":{"description":"Peering type (TransitGatewayPeering)","type":"string"},"resourceArn":{"description":"The ARN (Amazon Resource Name) of the resource that you will peer to a core network","type":"string"},"state":{"description":"The state of the transit gateway peering","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayPeeringAttachmentId":{"description":"The ID of the TransitGatewayPeeringAttachment","type":"string"}}}},"aws-native:networkmanager:getTransitGatewayRouteTableAttachment":{"description":"AWS::NetworkManager::TransitGatewayRouteTableAttachment Resource Type definition.","inputs":{"properties":{"attachmentId":{"type":"string","description":"The ID of the attachment."}},"required":["attachmentId"]},"outputs":{"properties":{"attachmentId":{"description":"The ID of the attachment.","type":"string"},"attachmentPolicyRuleNumber":{"description":"The policy rule number associated with the attachment.","type":"integer"},"attachmentType":{"description":"The type of attachment.","type":"string"},"coreNetworkArn":{"description":"The ARN of a core network for the VPC attachment.","type":"string"},"coreNetworkId":{"description":"The ID of a core network where you're creating a site-to-site VPN attachment.","type":"string"},"createdAt":{"description":"Creation time of the attachment.","type":"string"},"edgeLocation":{"description":"The Region where the edge is located.","type":"string"},"lastModificationErrors":{"description":"Errors from the last modification of the attachment.","items":{"type":"string"},"type":"array"},"networkFunctionGroupName":{"description":"The name of the network function group attachment.","type":"string"},"ownerAccountId":{"description":"Owner account of the attachment.","type":"string"},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:TransitGatewayRouteTableAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"description":"The ARN of the Resource.","type":"string"},"segmentName":{"description":"The name of the segment that attachment is in.","type":"string"},"state":{"description":"The state of the attachment.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"Last update time of the attachment.","type":"string"}}}},"aws-native:networkmanager:getVpcAttachment":{"description":"AWS::NetworkManager::VpcAttachment Resoruce Type","inputs":{"properties":{"attachmentId":{"type":"string","description":"Id of the attachment."}},"required":["attachmentId"]},"outputs":{"properties":{"attachmentId":{"description":"Id of the attachment.","type":"string"},"attachmentPolicyRuleNumber":{"description":"The policy rule number associated with the attachment.","type":"integer"},"attachmentType":{"description":"Attachment type.","type":"string"},"coreNetworkArn":{"description":"The ARN of a core network for the VPC attachment.","type":"string"},"createdAt":{"description":"Creation time of the attachment.","type":"string"},"edgeLocation":{"description":"The Region where the edge is located.","type":"string"},"lastModificationErrors":{"description":"Errors from the last modification of the attachment.","items":{"type":"string"},"type":"array"},"networkFunctionGroupName":{"description":"The name of the network function group attachment.","type":"string"},"options":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentVpcOptions","description":"Vpc options of the attachment."},"ownerAccountId":{"description":"Owner account of the attachment.","type":"string"},"proposedNetworkFunctionGroupChange":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentProposedNetworkFunctionGroupChange","description":"The attachment to move from one network function group to another."},"proposedSegmentChange":{"$ref":"#/types/aws-native:networkmanager:VpcAttachmentProposedSegmentChange","description":"The attachment to move from one segment to another."},"resourceArn":{"description":"The ARN of the Resource.","type":"string"},"segmentName":{"description":"The name of the segment attachment..","type":"string"},"state":{"description":"State of the attachment.","type":"string"},"subnetArns":{"description":"Subnet Arn list","items":{"type":"string"},"type":"array"},"tags":{"description":"Tags for the attachment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"Last update time of the attachment.","type":"string"}}}},"aws-native:nimblestudio:getLaunchProfile":{"description":"Resource Type definition for AWS::NimbleStudio::LaunchProfile","inputs":{"properties":{"launchProfileId":{"type":"string"}},"required":["launchProfileId"]},"outputs":{"properties":{"description":{"type":"string"},"launchProfileId":{"type":"string"},"launchProfileProtocolVersions":{"items":{"type":"string"},"type":"array"},"name":{"type":"string"},"streamConfiguration":{"$ref":"#/types/aws-native:nimblestudio:LaunchProfileStreamConfiguration"},"studioComponentIds":{"items":{"type":"string"},"type":"array"}}}},"aws-native:nimblestudio:getStreamingImage":{"description":"Resource Type definition for AWS::NimbleStudio::StreamingImage","inputs":{"properties":{"streamingImageId":{"type":"string"}},"required":["streamingImageId"]},"outputs":{"properties":{"description":{"type":"string"},"encryptionConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StreamingImageEncryptionConfiguration"},"encryptionConfigurationKeyArn":{"type":"string"},"encryptionConfigurationKeyType":{"type":"string"},"eulaIds":{"items":{"type":"string"},"type":"array"},"name":{"type":"string"},"owner":{"type":"string"},"platform":{"type":"string"},"streamingImageId":{"type":"string"}}}},"aws-native:nimblestudio:getStudio":{"description":"Resource Type definition for AWS::NimbleStudio::Studio","inputs":{"properties":{"studioId":{"type":"string"}},"required":["studioId"]},"outputs":{"properties":{"adminRoleArn":{"type":"string"},"displayName":{"type":"string"},"homeRegion":{"type":"string"},"ssoClientId":{"type":"string"},"studioEncryptionConfiguration":{"$ref":"#/types/aws-native:nimblestudio:StudioEncryptionConfiguration"},"studioId":{"type":"string"},"studioUrl":{"type":"string"},"userRoleArn":{"type":"string"}}}},"aws-native:nimblestudio:getStudioComponent":{"description":"Resource Type definition for AWS::NimbleStudio::StudioComponent","inputs":{"properties":{"studioComponentId":{"type":"string"}},"required":["studioComponentId"]},"outputs":{"properties":{"configuration":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentConfiguration"},"description":{"type":"string"},"ec2SecurityGroupIds":{"items":{"type":"string"},"type":"array"},"initializationScripts":{"items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentInitializationScript"},"type":"array"},"name":{"type":"string"},"scriptParameters":{"items":{"$ref":"#/types/aws-native:nimblestudio:StudioComponentScriptParameterKeyValue"},"type":"array"},"studioComponentId":{"type":"string"},"type":{"type":"string"}}}},"aws-native:oam:getLink":{"description":"Definition of AWS::Oam::Link Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the link. For example, `arn:aws:oam:us-west-1:111111111111:link:abcd1234-a123-456a-a12b-a123b456c789`"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the link. For example, `arn:aws:oam:us-west-1:111111111111:link:abcd1234-a123-456a-a12b-a123b456c789`","type":"string"},"label":{"description":"The friendly human-readable name used to identify this source account when it is viewed from the monitoring account. For example, `my-account1` .","type":"string"},"linkConfiguration":{"$ref":"#/types/aws-native:oam:LinkConfiguration","description":"Use this structure to optionally create filters that specify that only some metric namespaces or log groups are to be shared from the source account to the monitoring account."},"resourceTypes":{"description":"An array of strings that define which types of data that the source account shares with the monitoring account. Valid values are `AWS::CloudWatch::Metric | AWS::Logs::LogGroup | AWS::XRay::Trace | AWS::ApplicationInsights::Application | AWS::InternetMonitor::Monitor` .","items":{"$ref":"#/types/aws-native:oam:LinkResourceType"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags to apply to the link","type":"object"}}}},"aws-native:oam:getSink":{"description":"Resource Type definition for AWS::Oam::Sink","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon resource name (ARN) of the ObservabilityAccessManager Sink"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon resource name (ARN) of the ObservabilityAccessManager Sink","type":"string"},"policy":{"$ref":"pulumi.json#/Any","description":"The policy of this ObservabilityAccessManager Sink.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Oam::Sink` for more information about the expected schema for this property."},"tags":{"additionalProperties":{"type":"string"},"description":"Tags to apply to the sink","type":"object"}}}},"aws-native:observabilityadmin:getOrganizationCentralizationRule":{"description":"Resource schema for AWS:ObservabilityAdmin:OrganizationCentralizationRule","inputs":{"properties":{"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the organization centralization rule."}},"required":["ruleArn"]},"outputs":{"properties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationCentralizationRuleCentralizationRule"},"ruleArn":{"description":"The Amazon Resource Name (ARN) of the organization centralization rule.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:observabilityadmin:getOrganizationTelemetryRule":{"description":"The AWS::ObservabilityAdmin::OrganizationTelemetryRule resource defines a CloudWatch Observability Admin Organization Telemetry Rule.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The arn of the organization telemetry rule"}},"required":["ruleArn"]},"outputs":{"properties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:OrganizationTelemetryRuleTelemetryRule","description":"The name of the organization telemetry rule."},"ruleArn":{"description":"The arn of the organization telemetry rule","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:observabilityadmin:getS3TableIntegration":{"description":"Resource Type definition for a CloudWatch Observability Admin S3 Table Integration.","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the S3 Table Integration"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the S3 Table Integration","type":"string"},"logSources":{"description":"The CloudWatch Logs data sources to associate with the S3 Table Integration","items":{"$ref":"#/types/aws-native:observabilityadmin:S3TableIntegrationLogSource"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:observabilityadmin:getTelemetryEnrichment":{"description":"AWS::ObservabilityAdmin::TelemetryEnrichment cloudformation resource enables the resource tags for telemetry feature in CloudWatch to enrich infrastructure metrics with AWS resource tags. For more details: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/resource-tags-for-telemetry.html","inputs":{"properties":{"scope":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryEnrichmentScope"}},"required":["scope"]},"outputs":{"properties":{"status":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryEnrichmentStatus"}}}},"aws-native:observabilityadmin:getTelemetryPipelines":{"description":"Resource Type definition for AWS::ObservabilityAdmin::TelemetryPipelines","inputs":{"properties":{"pipelineIdentifier":{"type":"string","description":"The Amazon Resource Name (ARN) of the telemetry pipeline."}},"required":["pipelineIdentifier"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the created telemetry pipeline.","type":"string"},"configuration":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineConfiguration","description":"The configuration that defines how the telemetry pipeline processes data, including sources, processors, and destinations. For more information, see the [Amazon CloudWatch User Guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Creating-pipelines.html) ."},"pipeline":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipeline"},"pipelineIdentifier":{"description":"The Amazon Resource Name (ARN) of the telemetry pipeline.","type":"string"},"status":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatus","description":"The current status of the telemetry pipeline."},"statusReason":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryPipelinesTelemetryPipelineStatusReason"},"tags":{"description":"An array of key-value pairs to apply to this resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:observabilityadmin:getTelemetryRule":{"description":"The AWS::ObservabilityAdmin::TelemetryRule resource defines a CloudWatch Observability Admin Telemetry Rule.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The arn of the telemetry rule"}},"required":["ruleArn"]},"outputs":{"properties":{"rule":{"$ref":"#/types/aws-native:observabilityadmin:TelemetryRule","description":"Retrieves the details of a specific telemetry rule in your account."},"ruleArn":{"description":"The arn of the telemetry rule","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:odb:getCloudAutonomousVmCluster":{"description":"The AWS::ODB::CloudAutonomousVmCluster resource creates a Cloud Autonomous VM Cluster","inputs":{"properties":{"cloudAutonomousVmClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Autonomous VM cluster."}},"required":["cloudAutonomousVmClusterArn"]},"outputs":{"properties":{"autonomousDataStoragePercentage":{"description":"The percentage of data storage currently in use for Autonomous Databases in the Autonomous VM cluster.","type":"number"},"availableAutonomousDataStorageSizeInTbs":{"description":"The available data storage space for Autonomous Databases in the Autonomous VM cluster, in TB.","type":"number"},"availableContainerDatabases":{"description":"The number of Autonomous CDBs that you can create with the currently available storage.","type":"integer"},"availableCpus":{"description":"The number of CPU cores available for allocation to Autonomous Databases.","type":"number"},"cloudAutonomousVmClusterArn":{"description":"The Amazon Resource Name (ARN) for the Autonomous VM cluster.","type":"string"},"cloudAutonomousVmClusterId":{"description":"The unique identifier of the Autonomous VM cluster.","type":"string"},"computeModel":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterComputeModel","description":"The compute model of the Autonomous VM cluster: ECPU or OCPU."},"cpuCoreCount":{"description":"The total number of CPU cores in the Autonomous VM cluster.","type":"integer"},"cpuPercentage":{"description":"The percentage of total CPU cores currently in use in the Autonomous VM cluster.","type":"number"},"dataStorageSizeInGbs":{"description":"The total data storage allocated to the Autonomous VM cluster, in GB.","type":"number"},"dataStorageSizeInTbs":{"description":"The total data storage allocated to the Autonomous VM cluster, in TB.","type":"number"},"dbNodeStorageSizeInGbs":{"description":"The local node storage allocated to the Autonomous VM cluster, in gigabytes (GB).","type":"integer"},"domain":{"description":"The domain name for the Autonomous VM cluster.","type":"string"},"exadataStorageInTbsLowestScaledValue":{"description":"The minimum value to which you can scale down the Exadata storage, in TB.","type":"number"},"hostname":{"description":"The hostname for the Autonomous VM cluster.","type":"string"},"iamRoles":{"description":"The AWS Identity and Access Management (IAM) service roles associated with the Autonomous VM cluster.","items":{"$ref":"#/types/aws-native:odb:CloudAutonomousVmClusterIamRole"},"type":"array"},"maxAcdsLowestScaledValue":{"description":"The minimum value to which you can scale down the maximum number of Autonomous CDBs.","type":"integer"},"memorySizeInGbs":{"description":"The total amount of memory allocated to the Autonomous VM cluster, in gigabytes (GB).","type":"integer"},"nodeCount":{"description":"The number of database server nodes in the Autonomous VM cluster.","type":"integer"},"nonProvisionableAutonomousContainerDatabases":{"description":"The number of Autonomous CDBs that can't be provisioned because of resource constraints.","type":"integer"},"ociResourceAnchorName":{"description":"The name of the OCI resource anchor associated with this Autonomous VM cluster.","type":"string"},"ociUrl":{"description":"The URL for accessing the OCI console page for this Autonomous VM cluster.","type":"string"},"ocid":{"description":"The Oracle Cloud Identifier (OCID) of the Autonomous VM cluster.","type":"string"},"provisionableAutonomousContainerDatabases":{"description":"The number of Autonomous CDBs that can be provisioned in the Autonomous VM cluster.","type":"integer"},"provisionedAutonomousContainerDatabases":{"description":"The number of Autonomous CDBs currently provisioned in the Autonomous VM cluster.","type":"integer"},"provisionedCpus":{"description":"The number of CPU cores currently provisioned in the Autonomous VM cluster.","type":"number"},"reclaimableCpus":{"description":"The number of CPU cores that can be reclaimed from terminated or scaled-down Autonomous Databases.","type":"number"},"reservedCpus":{"description":"The number of CPU cores reserved for system operations and redundancy.","type":"number"},"shape":{"description":"The shape of the Exadata infrastructure for the Autonomous VM cluster.","type":"string"},"tags":{"description":"The tags associated with the Autonomous VM cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:odb:getCloudExadataInfrastructure":{"description":"The AWS::ODB::CloudExadataInfrastructure resource creates an Exadata Infrastructure","inputs":{"properties":{"cloudExadataInfrastructureArn":{"type":"string","description":"The Amazon Resource Name (ARN) for the Exadata infrastructure."}},"required":["cloudExadataInfrastructureArn"]},"outputs":{"properties":{"activatedStorageCount":{"description":"The number of storage servers requested for the Exadata infrastructure.","type":"integer"},"additionalStorageCount":{"description":"The number of storage servers requested for the Exadata infrastructure.","type":"integer"},"availableStorageSizeInGbs":{"description":"The amount of available storage, in gigabytes (GB), for the Exadata infrastructure.","type":"integer"},"cloudExadataInfrastructureArn":{"description":"The Amazon Resource Name (ARN) for the Exadata infrastructure.","type":"string"},"cloudExadataInfrastructureId":{"description":"The unique identifier for the Exadata infrastructure.","type":"string"},"computeModel":{"description":"The OCI model compute model used when you create or clone an instance: ECPU or OCPU. An ECPU is an abstracted measure of compute resources. ECPUs are based on the number of cores elastically allocated from a pool of compute and storage servers. An OCPU is a legacy physical measure of compute resources. OCPUs are based on the physical core of a processor with hyper-threading enabled.","type":"string"},"cpuCount":{"description":"The total number of CPU cores that are allocated to the Exadata infrastructure.","type":"integer"},"dataStorageSizeInTbs":{"description":"The size of the Exadata infrastructure's data disk group, in terabytes (TB).","type":"number"},"dbNodeStorageSizeInGbs":{"description":"The size of the Exadata infrastructure's local node storage, in gigabytes (GB).","type":"integer"},"dbServerIds":{"description":"The list of database server identifiers for the Exadata infrastructure.","items":{"type":"string"},"type":"array"},"dbServerVersion":{"description":"The software version of the database servers (dom0) in the Exadata infrastructure.","type":"string"},"maintenanceWindow":{"$ref":"#/types/aws-native:odb:CloudExadataInfrastructureMaintenanceWindow","description":"The scheduling details for the maintenance window. Patching and system updates take place during the maintenance window."},"maxCpuCount":{"description":"The total number of CPU cores available on the Exadata infrastructure.","type":"integer"},"maxDataStorageInTbs":{"description":"The total amount of data disk group storage, in terabytes (TB), that's available on the Exadata infrastructure.","type":"number"},"maxDbNodeStorageSizeInGbs":{"description":"The total amount of local node storage, in gigabytes (GB), that's available on the Exadata infrastructure.","type":"integer"},"maxMemoryInGbs":{"description":"The total amount of memory, in gigabytes (GB), that's available on the Exadata infrastructure.","type":"integer"},"memorySizeInGbs":{"description":"The amount of memory, in gigabytes (GB), that's allocated on the Exadata infrastructure.","type":"integer"},"ociResourceAnchorName":{"description":"The name of the OCI resource anchor for the Exadata infrastructure.","type":"string"},"ociUrl":{"description":"The HTTPS link to the Exadata infrastructure in OCI.","type":"string"},"ocid":{"description":"The OCID of the Exadata infrastructure.","type":"string"},"storageServerVersion":{"description":"The software version of the storage servers on the Exadata infrastructure.","type":"string"},"tags":{"description":"Tags to assign to the Exadata Infrastructure.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"totalStorageSizeInGbs":{"description":"The total amount of storage, in gigabytes (GB), on the the Exadata infrastructure.","type":"integer"}}}},"aws-native:odb:getCloudVmCluster":{"description":"The AWS::ODB::CloudVmCluster resource creates a Cloud VM Cluster","inputs":{"properties":{"cloudVmClusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the VM cluster."}},"required":["cloudVmClusterArn"]},"outputs":{"properties":{"cloudVmClusterArn":{"description":"The Amazon Resource Name (ARN) of the VM cluster.","type":"string"},"cloudVmClusterId":{"description":"The unique identifier of the VM cluster.","type":"string"},"computeModel":{"description":"The OCI model compute model used when you create or clone an instance: ECPU or OCPU. An ECPU is an abstracted measure of compute resources. ECPUs are based on the number of cores elastically allocated from a pool of compute and storage servers. An OCPU is a legacy physical measure of compute resources. OCPUs are based on the physical core of a processor with hyper-threading enabled.","type":"string"},"dbNodes":{"description":"The DB nodes that are implicitly created and managed as part of this VM Cluster.","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterDbNode"},"type":"array"},"diskRedundancy":{"description":"The type of redundancy configured for the VM cluster. NORMAL is 2-way redundancy. HIGH is 3-way redundancy.","type":"string"},"domain":{"description":"The domain of the VM cluster.","type":"string"},"iamRoles":{"description":"The AWS Identity and Access Management (IAM) service roles associated with the VM cluster.","items":{"$ref":"#/types/aws-native:odb:CloudVmClusterIamRole"},"type":"array"},"listenerPort":{"description":"The port number configured for the listener on the VM cluster.","type":"integer"},"nodeCount":{"description":"The number of nodes in the VM cluster.","type":"integer"},"ociResourceAnchorName":{"description":"The name of the OCI resource anchor for the VM cluster.","type":"string"},"ociUrl":{"description":"The HTTPS link to the VM cluster in OCI.","type":"string"},"ocid":{"description":"The OCID of the VM cluster.","type":"string"},"scanDnsName":{"description":"The FQDN of the DNS record for the Single Client Access Name (SCAN) IP addresses that are associated with the VM cluster.","type":"string"},"scanIpIds":{"description":"The OCID of the SCAN IP addresses that are associated with the VM cluster.","items":{"type":"string"},"type":"array"},"shape":{"description":"The hardware model name of the Exadata infrastructure that's running the VM cluster.","type":"string"},"storageSizeInGbs":{"description":"The amount of local node storage, in gigabytes (GB), that's allocated to the VM cluster.","type":"integer"},"tags":{"description":"Tags to assign to the Vm Cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vipIds":{"description":"The virtual IP (VIP) addresses that are associated with the VM cluster. Oracle's Cluster Ready Services (CRS) creates and maintains one VIP address for each node in the VM cluster to enable failover. If one node fails, the VIP is reassigned to another active node in the cluster.","items":{"type":"string"},"type":"array"}}}},"aws-native:odb:getOdbNetwork":{"description":"The AWS::ODB::OdbNetwork resource creates an ODB Network","inputs":{"properties":{"odbNetworkArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ODB network."}},"required":["odbNetworkArn"]},"outputs":{"properties":{"displayName":{"description":"The user-friendly name of the ODB network.","type":"string"},"managedServices":{"$ref":"#/types/aws-native:odb:OdbNetworkManagedServices"},"ociNetworkAnchorId":{"description":"The unique identifier of the OCI network anchor for the ODB network.","type":"string"},"ociResourceAnchorName":{"description":"The name of the OCI resource anchor that's associated with the ODB network.","type":"string"},"ociVcnUrl":{"description":"The URL for the VCN that's associated with the ODB network.","type":"string"},"odbNetworkArn":{"description":"The Amazon Resource Name (ARN) of the ODB network.","type":"string"},"odbNetworkId":{"description":"The unique identifier of the ODB network.","type":"string"},"tags":{"description":"Tags to assign to the Odb Network.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:odb:getOdbPeeringConnection":{"description":"Resource Type definition for AWS::ODB::OdbPeeringConnection.","inputs":{"properties":{"odbPeeringConnectionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the ODB peering connection."}},"required":["odbPeeringConnectionArn"]},"outputs":{"properties":{"displayName":{"description":"The name of the ODB peering connection.","type":"string"},"odbNetworkArn":{"description":"The Amazon Resource Name (ARN) of the ODB network.","type":"string"},"odbPeeringConnectionArn":{"description":"The Amazon Resource Name (ARN) of the ODB peering connection.","type":"string"},"odbPeeringConnectionId":{"description":"The unique identifier of the ODB peering connection.","type":"string"},"peerNetworkArn":{"description":"The Amazon Resource Name (ARN) of the peer network.","type":"string"},"peerNetworkCidrs":{"description":"The CIDR blocks for the ODB peering connection.","items":{"type":"string"},"type":"array"},"tags":{"description":"Tags to assign to the Odb peering connection.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:omics:getAnnotationStore":{"description":"Definition of AWS::Omics::AnnotationStore Resource Type","inputs":{"properties":{"name":{"type":"string","description":"The name of the Annotation Store."}},"required":["name"]},"outputs":{"properties":{"creationTime":{"description":"When the store was created.","type":"string"},"description":{"description":"A description for the store.","type":"string"},"id":{"description":"The store's ID.","type":"string"},"status":{"$ref":"#/types/aws-native:omics:AnnotationStoreStoreStatus","description":"The store's status."},"statusMessage":{"description":"The store's status message.","type":"string"},"storeArn":{"description":"The store's ARN.","type":"string"},"storeSizeBytes":{"description":"The store's size in bytes.","type":"number"},"updateTime":{"description":"When the store was updated.","type":"string"}}}},"aws-native:omics:getReferenceStore":{"description":"Definition of AWS::Omics::ReferenceStore Resource Type","inputs":{"properties":{"referenceStoreId":{"type":"string","description":"The store's ID."}},"required":["referenceStoreId"]},"outputs":{"properties":{"arn":{"description":"The store's ARN.","type":"string"},"creationTime":{"description":"When the store was created.","type":"string"},"referenceStoreId":{"description":"The store's ID.","type":"string"}}}},"aws-native:omics:getRunGroup":{"description":"Definition of AWS::Omics::RunGroup Resource Type","inputs":{"properties":{"id":{"type":"string","description":"The run group's ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The run group's ARN.","type":"string"},"creationTime":{"description":"When the run group was created.","type":"string"},"id":{"description":"The run group's ID.","type":"string"},"maxCpus":{"description":"The group's maximum CPU count setting.","type":"number"},"maxDuration":{"description":"The group's maximum duration setting in minutes.","type":"number"},"maxGpus":{"description":"The maximum GPUs that can be used by a run group.","type":"number"},"maxRuns":{"description":"The group's maximum concurrent run setting.","type":"number"},"name":{"description":"The group's name.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags for the group.","type":"object"}}}},"aws-native:omics:getSequenceStore":{"description":"Resource Type definition for AWS::Omics::SequenceStore","inputs":{"properties":{"sequenceStoreId":{"type":"string","description":"The store's ID."}},"required":["sequenceStoreId"]},"outputs":{"properties":{"accessLogLocation":{"description":"Location of the access logs.","type":"string"},"arn":{"description":"The store's ARN.","type":"string"},"creationTime":{"description":"When the store was created.","type":"string"},"description":{"description":"A description for the store.","type":"string"},"fallbackLocation":{"description":"An S3 location that is used to store files that have failed a direct upload.","type":"string"},"name":{"description":"A name for the store.","type":"string"},"propagatedSetLevelTags":{"description":"The tags keys to propagate to the S3 objects associated with read sets in the sequence store.","items":{"type":"string"},"type":"array"},"s3AccessPointArn":{"description":"This is ARN of the access point associated with the S3 bucket storing read sets.","type":"string"},"s3AccessPolicy":{"$ref":"pulumi.json#/Any","description":"The resource policy that controls S3 access on the store\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Omics::SequenceStore` for more information about the expected schema for this property."},"s3Uri":{"description":"The S3 URI of the sequence store.","type":"string"},"sequenceStoreId":{"description":"The store's ID.","type":"string"},"status":{"$ref":"#/types/aws-native:omics:SequenceStoreStatus","description":"Status of the sequence store."},"statusMessage":{"description":"The status message of the sequence store.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags for the store.","type":"object"},"updateTime":{"description":"The last-updated time of the sequence store.","type":"string"}}}},"aws-native:omics:getVariantStore":{"description":"Definition of AWS::Omics::VariantStore Resource Type","inputs":{"properties":{"name":{"type":"string","description":"A name for the store."}},"required":["name"]},"outputs":{"properties":{"creationTime":{"description":"When the store was created.","type":"string"},"description":{"description":"A description for the store.","type":"string"},"id":{"description":"The store's ID.","type":"string"},"status":{"$ref":"#/types/aws-native:omics:VariantStoreStoreStatus","description":"The store's status."},"statusMessage":{"description":"The store's status message.","type":"string"},"storeArn":{"description":"The store's ARN.","type":"string"},"storeSizeBytes":{"description":"The store's size in bytes.","type":"number"},"updateTime":{"description":"When the store was updated.","type":"string"}}}},"aws-native:omics:getWorkflow":{"description":"Definition of AWS::Omics::Workflow Resource Type","inputs":{"properties":{"id":{"type":"string","description":"The workflow's ID."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The ARN for the workflow.","type":"string"},"creationTime":{"description":"When the workflow was created.","type":"string"},"description":{"description":"The parameter's description.","type":"string"},"id":{"description":"The workflow's ID.","type":"string"},"name":{"description":"The workflow's name.","type":"string"},"status":{"$ref":"#/types/aws-native:omics:WorkflowStatus","description":"The workflow's status."},"storageType":{"$ref":"#/types/aws-native:omics:WorkflowStorageType"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags for the workflow.","type":"object"},"type":{"$ref":"#/types/aws-native:omics:WorkflowType","description":"The workflow's type."},"uuid":{"type":"string"}}}},"aws-native:omics:getWorkflowVersion":{"description":"Definition of AWS::Omics::WorkflowVersion Resource Type.","inputs":{"properties":{"arn":{"type":"string","description":"ARN of the workflow version."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"ARN of the workflow version.","type":"string"},"creationTime":{"description":"The creation time of the workflow version.","type":"string"},"description":{"description":"The description of the workflow version.","type":"string"},"status":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowStatus","description":"The status of the workflow version."},"storageCapacity":{"type":"number"},"storageType":{"$ref":"#/types/aws-native:omics:WorkflowVersionStorageType"},"tags":{"additionalProperties":{"type":"string"},"type":"object"},"type":{"$ref":"#/types/aws-native:omics:WorkflowVersionWorkflowType","description":"The type of the workflow version."},"uuid":{"type":"string"}}}},"aws-native:opensearchserverless:getAccessPolicy":{"description":"Amazon OpenSearchServerless access policy resource","inputs":{"properties":{"name":{"type":"string","description":"The name of the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:AccessPolicyType","description":"The type of access policy. Currently the only option is `data` ."}},"required":["type","name"]},"outputs":{"properties":{"description":{"description":"The description of the policy","type":"string"},"policy":{"description":"The JSON policy document that is the content for the policy","type":"string"}}}},"aws-native:opensearchserverless:getCollection":{"description":"Amazon OpenSearchServerless collection resource","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the collection"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the collection.","type":"string"},"collectionEndpoint":{"description":"The endpoint for the collection.","type":"string"},"dashboardEndpoint":{"description":"The OpenSearch Dashboards endpoint for the collection.","type":"string"},"description":{"description":"The description of the collection","type":"string"},"id":{"description":"The identifier of the collection","type":"string"},"kmsKeyArn":{"description":"Key Management Service key used to encrypt the collection.","type":"string"}}}},"aws-native:opensearchserverless:getCollectionGroup":{"description":"Resource Type definition for AWS::OpenSearchServerless::CollectionGroup","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier of the collection group."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the collection group.","type":"string"},"capacityLimits":{"$ref":"#/types/aws-native:opensearchserverless:CollectionGroupCapacityLimits"},"description":{"description":"The description of the collection group.","type":"string"},"id":{"description":"The unique identifier of the collection group.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:opensearchserverless:getIndex":{"description":"An OpenSearch Serverless index resource","inputs":{"properties":{"collectionEndpoint":{"type":"string","description":"The endpoint for the collection."},"indexName":{"type":"string","description":"The name of the OpenSearch Serverless index."}},"required":["indexName","collectionEndpoint"]},"outputs":{"properties":{"mappings":{"$ref":"#/types/aws-native:opensearchserverless:MappingsProperties","description":"Index Mappings"},"settings":{"$ref":"#/types/aws-native:opensearchserverless:IndexSettings","description":"Index settings"},"uuid":{"description":"The unique identifier for the index.","type":"string"}}}},"aws-native:opensearchserverless:getLifecyclePolicy":{"description":"Amazon OpenSearchServerless lifecycle policy resource","inputs":{"properties":{"name":{"type":"string","description":"The name of the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:LifecyclePolicyType","description":"The type of lifecycle policy."}},"required":["type","name"]},"outputs":{"properties":{"description":{"description":"The description of the policy","type":"string"},"policy":{"description":"The JSON policy document that is the content for the policy","type":"string"}}}},"aws-native:opensearchserverless:getSecurityConfig":{"description":"Amazon OpenSearchServerless security config resource","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the security config"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"Security config description","type":"string"},"iamFederationOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigIamFederationConfigOptions","description":"Describes IAM federation options in the form of a key-value map. Contains configuration details about how OpenSearch Serverless integrates with external identity providers through federation."},"iamIdentityCenterOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigIamIdentityCenterConfigOptions","description":"Describes IAM Identity Center options in the form of a key-value map."},"id":{"description":"The identifier of the security config","type":"string"},"samlOptions":{"$ref":"#/types/aws-native:opensearchserverless:SecurityConfigSamlConfigOptions","description":"SAML options for the security configuration in the form of a key-value map."}}}},"aws-native:opensearchserverless:getSecurityPolicy":{"description":"Amazon OpenSearchServerless security policy resource","inputs":{"properties":{"name":{"type":"string","description":"The name of the policy"},"type":{"$ref":"#/types/aws-native:opensearchserverless:SecurityPolicyType","description":"The type of security policy. Can be either `encryption` or `network` ."}},"required":["type","name"]},"outputs":{"properties":{"description":{"description":"The description of the policy","type":"string"},"policy":{"description":"The JSON policy document that is the content for the policy","type":"string"}}}},"aws-native:opensearchserverless:getVpcEndpoint":{"description":"Amazon OpenSearchServerless vpc endpoint resource","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the VPC Endpoint"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The identifier of the VPC Endpoint","type":"string"},"securityGroupIds":{"description":"The ID of one or more security groups to associate with the endpoint network interface","items":{"type":"string"},"type":"array"},"subnetIds":{"description":"The ID of one or more subnets in which to create an endpoint network interface","items":{"type":"string"},"type":"array"}}}},"aws-native:opensearchservice:getApplication":{"description":"Amazon OpenSearchService application resource","inputs":{"properties":{"name":{"type":"string","description":"The name of the application."}},"required":["name"]},"outputs":{"properties":{"appConfigs":{"description":"List of application configurations.","items":{"$ref":"#/types/aws-native:opensearchservice:ApplicationAppConfig"},"type":"array"},"arn":{"description":"Amazon Resource Name (ARN) format.","type":"string"},"dataSources":{"description":"List of data sources.","items":{"$ref":"#/types/aws-native:opensearchservice:ApplicationDataSource"},"type":"array"},"endpoint":{"description":"The endpoint for the application.","type":"string"},"iamIdentityCenterOptions":{"$ref":"#/types/aws-native:opensearchservice:IamIdentityCenterOptionsProperties","description":"Options for configuring IAM Identity Center"},"id":{"description":"The identifier of the application.","type":"string"},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this application.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:opensearchservice:getDomain":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"domainName":{"type":"string","description":"A name for the OpenSearch Service domain. The name must have a minimum length of 3 and a maximum length of 28. If you don't specify a name, CloudFormation generates a unique physical ID and uses that ID for the domain name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .\n\nRequired when creating a new domain.\n\n\u003e If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["domainName"]},"outputs":{"properties":{"accessPolicies":{"$ref":"pulumi.json#/Any","description":"An AWS Identity and Access Management ( IAM ) policy document that specifies who can access the OpenSearch Service domain and their permissions. For more information, see [Configuring access policies](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html#ac-creating) in the *Amazon OpenSearch Service Developer Guide* .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::OpenSearchService::Domain` for more information about the expected schema for this property."},"advancedOptions":{"additionalProperties":{"type":"string"},"description":"Additional options to specify for the OpenSearch Service domain. For more information, see [AdvancedOptions](https://docs.aws.amazon.com/opensearch-service/latest/APIReference/API_CreateDomain.html#API_CreateDomain_RequestBody) in the OpenSearch Service API reference.","type":"object"},"advancedSecurityOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainAdvancedSecurityOptionsInput","description":"Specifies options for fine-grained access control and SAML authentication.\n\nIf you specify advanced security options, you must also enable node-to-node encryption ( [NodeToNodeEncryptionOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-nodetonodeencryptionoptions.html) ) and encryption at rest ( [EncryptionAtRestOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-encryptionatrestoptions.html) ). You must also enable `EnforceHTTPS` within [DomainEndpointOptions](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-domainendpointoptions.html) , which requires HTTPS for all traffic to the domain."},"aimlOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainAimlOptions","description":"Container for parameters required to enable all machine learning features."},"arn":{"description":"The Amazon Resource Name (ARN) of the CloudFormation stack.","type":"string"},"clusterConfig":{"$ref":"#/types/aws-native:opensearchservice:DomainClusterConfig","description":"Container for the cluster configuration of a domain."},"cognitoOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainCognitoOptions","description":"Configures OpenSearch Service to use Amazon Cognito authentication for OpenSearch Dashboards."},"deploymentStrategyOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainDeploymentStrategyOptions"},"domainArn":{"description":"The Amazon Resource Name (ARN) of the domain. See [Identifiers for IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/index.html) in *Using AWS Identity and Access Management* for more information.","type":"string"},"domainEndpoint":{"description":"The domain-specific endpoint used for requests to the OpenSearch APIs, such as `search-mystack-1ab2cdefghij-ab1c2deckoyb3hofw7wpqa3cm.us-west-1.es.amazonaws.com` .","type":"string"},"domainEndpointOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEndpointOptions","description":"Specifies additional options for the domain endpoint, such as whether to require HTTPS for all traffic or whether to use a custom endpoint rather than the default endpoint."},"domainEndpointV2":{"description":"If `IPAddressType` to set to `dualstack` , a version 2 domain endpoint is provisioned. This endpoint functions like a normal endpoint, except that it works with both IPv4 and IPv6 IP addresses. Normal endpoints work only with IPv4 IP addresses.","type":"string"},"domainEndpoints":{"additionalProperties":{"type":"string"},"type":"object"},"ebsOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEbsOptions","description":"The configurations of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to data nodes in the OpenSearch Service domain. For more information, see [EBS volume size limits](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/limits.html#ebsresource) in the *Amazon OpenSearch Service Developer Guide* ."},"encryptionAtRestOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainEncryptionAtRestOptions","description":"Whether the domain should encrypt data at rest, and if so, the AWS  key to use. See [Encryption of data at rest for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html) .\n\nIf no encryption at rest options were initially specified in the template, updating this property by adding it causes no interruption. However, if you change this property after it's already been set within a template, the domain is deleted and recreated in order to modify the property."},"engineVersion":{"description":"The version of OpenSearch to use. The value must be in the format `OpenSearch_X.Y` or `Elasticsearch_X.Y` . If not specified, the latest version of OpenSearch is used. For information about the versions that OpenSearch Service supports, see [Supported versions of OpenSearch and Elasticsearch](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html#choosing-version) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you set the [EnableVersionUpgrade](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-upgradeopensearchdomain) update policy to `true` , you can update `EngineVersion` without interruption. When `EnableVersionUpgrade` is set to `false` , or is not specified, updating `EngineVersion` results in [replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) .","type":"string"},"id":{"description":"The resource ID. For example, `123456789012/my-domain` .","type":"string"},"identityCenterOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainIdentityCenterOptions","description":"Configuration options for controlling IAM Identity Center integration within a domain."},"ipAddressType":{"description":"Choose either dual stack or IPv4 as your IP address type. Dual stack allows you to share domain resources across IPv4 and IPv6 address types, and is the recommended option. If you set your IP address type to dual stack, you can't change your address type later.","type":"string"},"logPublishingOptions":{"additionalProperties":{"$ref":"#/types/aws-native:opensearchservice:DomainLogPublishingOption"},"description":"An object with one or more of the following keys: `SEARCH_SLOW_LOGS` , `ES_APPLICATION_LOGS` , `INDEX_SLOW_LOGS` , `AUDIT_LOGS` , depending on the types of logs you want to publish. Each key needs a valid `LogPublishingOption` value. For the full syntax, see the [examples](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-opensearchservice-domain.html#aws-resource-opensearchservice-domain--examples) .","type":"object"},"nodeToNodeEncryptionOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainNodeToNodeEncryptionOptions","description":"Specifies whether node-to-node encryption is enabled. See [Node-to-node encryption for Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ntn.html) ."},"offPeakWindowOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainOffPeakWindowOptions","description":"Options for a domain's off-peak window, during which OpenSearch Service can perform mandatory configuration changes on the domain."},"serviceSoftwareOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainServiceSoftwareOptions"},"skipShardMigrationWait":{"type":"boolean"},"snapshotOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSnapshotOptions","description":"*DEPRECATED* . The automated snapshot configuration for the OpenSearch Service domain indexes."},"softwareUpdateOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainSoftwareUpdateOptions","description":"Service software update options for the domain."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this Domain.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcOptions":{"$ref":"#/types/aws-native:opensearchservice:DomainVpcOptions","description":"The virtual private cloud (VPC) configuration for the OpenSearch Service domain. For more information, see [Launching your Amazon OpenSearch Service domains within a VPC](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/vpc.html) in the *Amazon OpenSearch Service Developer Guide* .\n\nIf you remove this entity altogether, along with its associated properties, it causes a replacement. You might encounter this scenario if you're updating your security configuration from a VPC to a public endpoint."}}}},"aws-native:opsworkscm:getServer":{"description":"Resource Type definition for AWS::OpsWorksCM::Server","inputs":{"properties":{"id":{"type":"string","description":"The ID of the server."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the server, such as `arn:aws:OpsWorksCM:us-east-1:123456789012:server/server-a1bzhi` .","type":"string"},"backupRetentionCount":{"description":"The number of automated backups that you want to keep. Whenever a new backup is created, AWS OpsWorks CM deletes the oldest backups if this number is exceeded. The default value is `1` .","type":"integer"},"disableAutomatedBackup":{"description":"Enable or disable scheduled backups. Valid values are `true` or `false` . The default value is `true` .","type":"boolean"},"endpoint":{"description":"A DNS name that can be used to access the engine. Example: `myserver-asdfghjkl.us-east-1.opsworks.io` .","type":"string"},"engineAttributes":{"description":"Optional engine attributes on a specified server.\n\n**Attributes accepted in a Chef createServer request:** - `CHEF_AUTOMATE_PIVOTAL_KEY` : A base64-encoded RSA public key. The corresponding private key is required to access the Chef API. When no CHEF_AUTOMATE_PIVOTAL_KEY is set, a private key is generated and returned in the response. When you are specifying the value of CHEF_AUTOMATE_PIVOTAL_KEY as a parameter in the CloudFormation console, you must add newline ( `\\n` ) characters at the end of each line of the pivotal key value.\n- `CHEF_AUTOMATE_ADMIN_PASSWORD` : The password for the administrative user in the Chef Automate web-based dashboard. The password length is a minimum of eight characters, and a maximum of 32. The password can contain letters, numbers, and special characters (!/@#$%^\u0026+=_). The password must contain at least one lower case letter, one upper case letter, one number, and one special character. When no CHEF_AUTOMATE_ADMIN_PASSWORD is set, one is generated and returned in the response.\n\n**Attributes accepted in a Puppet createServer request:** - `PUPPET_ADMIN_PASSWORD` : To work with the Puppet Enterprise console, a password must use ASCII characters.\n- `PUPPET_R10K_REMOTE` : The r10k remote is the URL of your control repository (for example, ssh://git@your.git-repo.com:user/control-repo.git). Specifying an r10k remote opens TCP port 8170.\n- `PUPPET_R10K_PRIVATE_KEY` : If you are using a private Git repository, add PUPPET_R10K_PRIVATE_KEY to specify a PEM-encoded private SSH key.","items":{"$ref":"#/types/aws-native:opsworkscm:ServerEngineAttribute"},"type":"array"},"id":{"description":"The ID of the server.","type":"string"},"preferredBackupWindow":{"description":"The start time for a one-hour period during which AWS OpsWorks CM backs up application-level data on your server if automated backups are enabled. Valid values must be specified in one of the following formats:\n\n- `HH:MM` for daily backups\n- `DDD:HH:MM` for weekly backups\n\n`MM` must be specified as `00` . The specified time is in coordinated universal time (UTC). The default value is a random, daily start time.\n\n*Example:* `08:00` , which represents a daily start time of 08:00 UTC.\n\n*Example:* `Mon:08:00` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)","type":"string"},"preferredMaintenanceWindow":{"description":"The start time for a one-hour period each week during which AWS OpsWorks CM performs maintenance on the instance. Valid values must be specified in the following format: `DDD:HH:MM` . `MM` must be specified as `00` . The specified time is in coordinated universal time (UTC). The default value is a random one-hour period on Tuesday, Wednesday, or Friday. See `TimeWindowDefinition` for more information.\n\n*Example:* `Mon:08:00` , which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)","type":"string"},"tags":{"description":"A map that contains tag keys and tag values to attach to an AWS OpsWorks for Chef Automate or OpsWorks for Puppet Enterprise server.\n\n- The key cannot be empty.\n- The key can be a maximum of 127 characters, and can contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : / @`\n- The value can be a maximum 255 characters, and contain only Unicode letters, numbers, or separators, or the following special characters: `+ - = . _ : / @`\n- Leading and trailing spaces are trimmed from both the key and value.\n- A maximum of 50 user-applied tags is allowed for any AWS OpsWorks CM server.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:organizations:getAccount":{"description":"You can use AWS::Organizations::Account to manage accounts in organization.","inputs":{"properties":{"accountId":{"type":"string","description":"If the account was created successfully, the unique identifier (ID) of the new account."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"If the account was created successfully, the unique identifier (ID) of the new account.","type":"string"},"accountName":{"description":"The friendly name of the member account.","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the account.","type":"string"},"email":{"description":"The email address of the owner to assign to the new member account.","type":"string"},"joinedMethod":{"$ref":"#/types/aws-native:organizations:AccountJoinedMethod","description":"The method by which the account joined the organization."},"joinedTimestamp":{"description":"The date the account became a part of the organization.","type":"string"},"parentIds":{"description":"List of parent nodes for the member account. Currently only one parent at a time is supported. Default is root.","items":{"type":"string"},"type":"array"},"state":{"$ref":"#/types/aws-native:organizations:AccountState","description":"The state of the account in the organization."},"status":{"$ref":"#/types/aws-native:organizations:AccountStatus","description":"The status of the account in the organization."},"tags":{"description":"A list of tags that you want to attach to the newly created account. For each tag in the list, you must specify both a tag key and a value.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:organizations:getOrganization":{"description":"Resource schema for AWS::Organizations::Organization","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier (ID) of an organization."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of an organization.","type":"string"},"featureSet":{"$ref":"#/types/aws-native:organizations:OrganizationFeatureSet","description":"Specifies the feature set supported by the new organization. Each feature set supports different levels of functionality."},"id":{"description":"The unique identifier (ID) of an organization.","type":"string"},"managementAccountArn":{"description":"The Amazon Resource Name (ARN) of the account that is designated as the management account for the organization.","type":"string"},"managementAccountEmail":{"description":"The email address that is associated with the AWS account that is designated as the management account for the organization.","type":"string"},"managementAccountId":{"description":"The unique identifier (ID) of the management account of an organization.","type":"string"},"rootId":{"description":"The unique identifier (ID) for the root.","type":"string"}}}},"aws-native:organizations:getOrganizationalUnit":{"description":"You can use organizational units (OUs) to group accounts together to administer as a single unit. This greatly simplifies the management of your accounts. For example, you can attach a policy-based control to an OU, and all accounts within the OU automatically inherit the policy. You can create multiple OUs within a single organization, and you can create OUs within other OUs. Each OU can contain multiple accounts, and you can move accounts from one OU to another. However, OU names must be unique within a parent OU or root.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier (ID) associated with this OU."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of this OU.","type":"string"},"id":{"description":"The unique identifier (ID) associated with this OU.","type":"string"},"name":{"description":"The friendly name of this OU.","type":"string"},"tags":{"description":"A list of tags that you want to attach to the newly created OU.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:organizations:getPolicy":{"description":"Policies in AWS Organizations enable you to manage different features of the AWS accounts in your organization.  You can use policies when all features are enabled in your organization.","inputs":{"properties":{"id":{"type":"string","description":"Id of the Policy"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"ARN of the Policy","type":"string"},"awsManaged":{"description":"A boolean value that indicates whether the specified policy is an AWS managed policy. If true, then you can attach the policy to roots, OUs, or accounts, but you cannot edit it.","type":"boolean"},"content":{"$ref":"pulumi.json#/Any","description":"The Policy text content. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Organizations::Policy` for more information about the expected schema for this property."},"description":{"description":"Human readable description of the policy","type":"string"},"id":{"description":"Id of the Policy","type":"string"},"name":{"description":"Name of the Policy","type":"string"},"tags":{"description":"A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to null.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetIds":{"description":"List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to","items":{"type":"string"},"type":"array"}}}},"aws-native:organizations:getResourcePolicy":{"description":"You can use AWS::Organizations::ResourcePolicy to delegate policy management for AWS Organizations to specified member accounts to perform policy actions that are by default available only to the management account.","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier (ID) associated with this resource policy."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the resource policy.","type":"string"},"content":{"$ref":"pulumi.json#/Any","description":"The policy document. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Organizations::ResourcePolicy` for more information about the expected schema for this property."},"id":{"description":"The unique identifier (ID) associated with this resource policy.","type":"string"},"tags":{"description":"A list of tags that you want to attach to the resource policy","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:osis:getPipeline":{"description":"An OpenSearch Ingestion Service Data Prepper pipeline running Data Prepper.","inputs":{"properties":{"pipelineArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the pipeline."}},"required":["pipelineArn"]},"outputs":{"properties":{"bufferOptions":{"$ref":"#/types/aws-native:osis:PipelineBufferOptions","description":"Options that specify the configuration of a persistent buffer. To configure how OpenSearch Ingestion encrypts this data, set the `EncryptionAtRestOptions` . For more information, see [Persistent buffering](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/osis-features-overview.html#persistent-buffering) ."},"encryptionAtRestOptions":{"$ref":"#/types/aws-native:osis:PipelineEncryptionAtRestOptions","description":"Options to control how OpenSearch encrypts buffer data."},"ingestEndpointUrls":{"description":"A list of endpoints that can be used for ingesting data into a pipeline","items":{"type":"string"},"type":"array"},"logPublishingOptions":{"$ref":"#/types/aws-native:osis:PipelineLogPublishingOptions","description":"Key-value pairs that represent log publishing settings."},"maxUnits":{"description":"The maximum pipeline capacity, in Ingestion OpenSearch Compute Units (OCUs).","type":"integer"},"minUnits":{"description":"The minimum pipeline capacity, in Ingestion OpenSearch Compute Units (OCUs).","type":"integer"},"pipelineArn":{"description":"The Amazon Resource Name (ARN) of the pipeline.","type":"string"},"pipelineConfigurationBody":{"description":"The Data Prepper pipeline configuration.","type":"string"},"pipelineRoleArn":{"description":"The Pipeline Role (ARN) for the pipeline.","type":"string"},"resourcePolicy":{"$ref":"#/types/aws-native:osis:PipelineResourcePolicy"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcEndpointService":{"description":"The VPC endpoint service name for the pipeline.","type":"string"},"vpcEndpoints":{"description":"The VPC interface endpoints that have access to the pipeline.","items":{"$ref":"#/types/aws-native:osis:PipelineVpcEndpoint"},"type":"array"}}}},"aws-native:panorama:getApplicationInstance":{"description":"Creates an application instance and deploys it to a device.","inputs":{"properties":{"applicationInstanceId":{"type":"string","description":"The application instance's ID."}},"required":["applicationInstanceId"]},"outputs":{"properties":{"applicationInstanceId":{"description":"The application instance's ID.","type":"string"},"arn":{"description":"The application instance's ARN.","type":"string"},"createdTime":{"description":"The application instance's created time.","type":"integer"},"defaultRuntimeContextDeviceName":{"description":"The application instance's default runtime context device name.","type":"string"},"healthStatus":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceHealthStatus","description":"The application instance's health status."},"lastUpdatedTime":{"description":"The application instance's last updated time.","type":"integer"},"status":{"$ref":"#/types/aws-native:panorama:ApplicationInstanceStatus","description":"The application instance's status."},"statusDescription":{"description":"The application instance's status description.","type":"string"},"tags":{"description":"Tags for the application instance.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:panorama:getPackage":{"description":"Creates a package and storage location in an Amazon S3 access point.","inputs":{"properties":{"packageId":{"type":"string","description":"The package's ID."}},"required":["packageId"]},"outputs":{"properties":{"arn":{"description":"The package's ARN.","type":"string"},"createdTime":{"description":"When the package was created.","type":"integer"},"packageId":{"description":"The package's ID.","type":"string"},"storageLocation":{"$ref":"#/types/aws-native:panorama:PackageStorageLocation","description":"A storage location."},"tags":{"description":"Tags for the package.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:panorama:getPackageVersion":{"description":"Registers a package version.","inputs":{"properties":{"packageId":{"type":"string","description":"A package ID."},"packageVersion":{"type":"string","description":"A package version.","language":{"csharp":{"name":"PackageVersionValue"}}},"patchVersion":{"type":"string","description":"A patch version."}},"required":["packageId","packageVersion","patchVersion"]},"outputs":{"properties":{"isLatestPatch":{"description":"Whether the package version is the latest version.","type":"boolean"},"markLatest":{"description":"Whether to mark the new version as the latest version.","type":"boolean"},"packageArn":{"description":"The package version's ARN.","type":"string"},"packageName":{"description":"The package version's name.","type":"string"},"registeredTime":{"description":"The package version's registered time.","type":"integer"},"status":{"$ref":"#/types/aws-native:panorama:PackageVersionStatus","description":"The package version's status."},"statusDescription":{"description":"The package version's status description.","type":"string"}}}},"aws-native:paymentcryptography:getAlias":{"description":"Definition of AWS::PaymentCryptography::Alias Resource Type","inputs":{"properties":{"aliasName":{"type":"string","description":"A friendly name that you can use to refer to a key. The value must begin with `alias/` .\n\n\u003e Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in AWS CloudTrail logs and other output."}},"required":["aliasName"]},"outputs":{"properties":{"keyArn":{"description":"The `KeyARN` of the key associated with the alias.","type":"string"}}}},"aws-native:paymentcryptography:getKey":{"description":"Definition of AWS::PaymentCryptography::Key Resource Type","inputs":{"properties":{"keyIdentifier":{"type":"string"}},"required":["keyIdentifier"]},"outputs":{"properties":{"deriveKeyUsage":{"$ref":"#/types/aws-native:paymentcryptography:KeyDeriveKeyUsage","description":"The cryptographic usage of an ECDH derived key as defined in section A.5.2 of the TR-31 spec."},"enabled":{"description":"Specifies whether the key is enabled.","type":"boolean"},"exportable":{"description":"Specifies whether the key is exportable. This data is immutable after the key is created.","type":"boolean"},"keyAttributes":{"$ref":"#/types/aws-native:paymentcryptography:KeyAttributes","description":"The role of the key, the algorithm it supports, and the cryptographic operations allowed with the key. This data is immutable after the key is created."},"keyCheckValueAlgorithm":{"$ref":"#/types/aws-native:paymentcryptography:KeyCheckValueAlgorithm","description":"The algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV). It is used to validate the key integrity.\n\nFor TDES keys, the KCV is computed by encrypting 8 bytes, each with value of zero, with the key to be checked and retaining the 3 highest order bytes of the encrypted result. For AES keys, the KCV is computed using a CMAC algorithm where the input data is 16 bytes of zero and retaining the 3 highest order bytes of the encrypted result."},"keyIdentifier":{"type":"string"},"keyOrigin":{"$ref":"#/types/aws-native:paymentcryptography:KeyOrigin","description":"The source of the key material. For keys created within AWS Payment Cryptography, the value is `AWS_PAYMENT_CRYPTOGRAPHY` . For keys imported into AWS Payment Cryptography, the value is `EXTERNAL` ."},"keyState":{"$ref":"#/types/aws-native:paymentcryptography:KeyState","description":"The state of key that is being created or deleted."},"replicationStatus":{"additionalProperties":{"$ref":"#/types/aws-native:paymentcryptography:KeyReplicationStatusType"},"type":"object"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:pcaconnectorad:getConnector":{"description":"Represents a Connector that connects AWS PrivateCA and your directory","inputs":{"properties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) ."}},"required":["connectorArn"]},"outputs":{"properties":{"connectorArn":{"description":"The Amazon Resource Name (ARN) that was returned when you called [CreateConnector](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateConnector.html) .","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata assigned to a connector consisting of a key-value pair.","type":"object"}}}},"aws-native:pcaconnectorad:getDirectoryRegistration":{"description":"Definition of AWS::PCAConnectorAD::DirectoryRegistration Resource Type","inputs":{"properties":{"directoryRegistrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateDirectoryRegistration](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateDirectoryRegistration.html) ."}},"required":["directoryRegistrationArn"]},"outputs":{"properties":{"directoryRegistrationArn":{"description":"The Amazon Resource Name (ARN) that was returned when you called [CreateDirectoryRegistration](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateDirectoryRegistration.html) .","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata assigned to a directory registration consisting of a key-value pair.","type":"object"}}}},"aws-native:pcaconnectorad:getTemplate":{"description":"Represents a template that defines certificate configurations, both for issuance and client handling","inputs":{"properties":{"templateArn":{"type":"string","description":"The Amazon Resource Name (ARN) that was returned when you called [CreateTemplate](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html) ."}},"required":["templateArn"]},"outputs":{"properties":{"definition":{"description":"Template configuration to define the information included in certificates. Define certificate validity and renewal periods, certificate request handling and enrollment options, key usage extensions, application policies, and cryptography settings.","oneOf":[{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition0Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition1Properties"},{"$ref":"#/types/aws-native:pcaconnectorad:TemplateDefinition2Properties"}]},"tags":{"additionalProperties":{"type":"string"},"description":"Metadata assigned to a template consisting of a key-value pair.","type":"object"},"templateArn":{"description":"The Amazon Resource Name (ARN) that was returned when you called [CreateTemplate](https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html) .","type":"string"}}}},"aws-native:pcaconnectorscep:getChallenge":{"description":"Represents a SCEP Challenge that is used for certificate enrollment","inputs":{"properties":{"challengeArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the challenge."}},"required":["challengeArn"]},"outputs":{"properties":{"challengeArn":{"description":"The Amazon Resource Name (ARN) of the challenge.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"type":"object"}}}},"aws-native:pcaconnectorscep:getConnector":{"description":"Represents a Connector that allows certificate issuance through Simple Certificate Enrollment Protocol (SCEP)","inputs":{"properties":{"connectorArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the connector."}},"required":["connectorArn"]},"outputs":{"properties":{"connectorArn":{"description":"The Amazon Resource Name (ARN) of the connector.","type":"string"},"endpoint":{"description":"The connector's HTTPS public SCEP URL.","type":"string"},"openIdConfiguration":{"$ref":"#/types/aws-native:pcaconnectorscep:ConnectorOpenIdConfiguration"},"tags":{"additionalProperties":{"type":"string"},"type":"object"},"type":{"$ref":"#/types/aws-native:pcaconnectorscep:ConnectorType","description":"The connector type."}}}},"aws-native:pcs:getCluster":{"description":"AWS::PCS::Cluster resource creates an AWS PCS cluster.","inputs":{"properties":{"arn":{"type":"string","description":"The unique Amazon Resource Name (ARN) of the cluster."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The unique Amazon Resource Name (ARN) of the cluster.","type":"string"},"endpoints":{"description":"The list of endpoints available for interaction with the scheduler.","items":{"$ref":"#/types/aws-native:pcs:ClusterEndpoint"},"type":"array"},"errorInfo":{"description":"The list of errors that occurred during cluster provisioning.","items":{"$ref":"#/types/aws-native:pcs:ClusterErrorInfo"},"type":"array"},"id":{"description":"The generated unique ID of the cluster.","type":"string"},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"Additional options related to the Slurm scheduler."},"status":{"$ref":"#/types/aws-native:pcs:ClusterStatus","description":"The provisioning status of the cluster. The provisioning status doesn't indicate the overall health of the cluster."},"tags":{"additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string.","type":"object"}}}},"aws-native:pcs:getComputeNodeGroup":{"description":"AWS::PCS::ComputeNodeGroup resource creates an AWS PCS compute node group.","inputs":{"properties":{"arn":{"type":"string","description":"The unique Amazon Resource Name (ARN) of the compute node group."}},"required":["arn"]},"outputs":{"properties":{"amiId":{"description":"The ID of the Amazon Machine Image (AMI) that AWS PCS uses to launch instances. If not provided, AWS PCS uses the AMI ID specified in the custom launch template.","type":"string"},"arn":{"description":"The unique Amazon Resource Name (ARN) of the compute node group.","type":"string"},"customLaunchTemplate":{"$ref":"#/types/aws-native:pcs:CustomLaunchTemplateProperties","description":"An Amazon EC2 launch template AWS PCS uses to launch compute nodes."},"errorInfo":{"description":"The list of errors that occurred during compute node group provisioning.","items":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupErrorInfo"},"type":"array"},"iamInstanceProfileArn":{"description":"The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have pcs:RegisterComputeNodeGroupInstance permissions attached to provision instances correctly.","type":"string"},"id":{"description":"The generated unique ID of the compute node group.","type":"string"},"purchaseOption":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupPurchaseOption","description":"Specifies how EC2 instances are purchased on your behalf. AWS PCS supports On-Demand, Spot and Capacity Block instances. For more information, see Instance purchasing options in the Amazon Elastic Compute Cloud User Guide. If you don't provide this option, it defaults to On-Demand."},"scalingConfiguration":{"$ref":"#/types/aws-native:pcs:ScalingConfigurationProperties","description":"Specifies the boundaries of the compute node group auto scaling."},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"Additional options related to the Slurm scheduler."},"spotOptions":{"$ref":"#/types/aws-native:pcs:SpotOptionsProperties","description":"Additional configuration when you specify SPOT as the purchase option."},"status":{"$ref":"#/types/aws-native:pcs:ComputeNodeGroupStatus","description":"The provisioning status of the compute node group. The provisioning status doesn't indicate the overall health of the compute node group."},"subnetIds":{"description":"The list of subnet IDs where instances are provisioned by the compute node group. The subnets must be in the same VPC as the cluster.","items":{"type":"string"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string.","type":"object"}}}},"aws-native:pcs:getQueue":{"description":"AWS::PCS::Queue resource creates an AWS PCS queue.","inputs":{"properties":{"arn":{"type":"string","description":"The unique Amazon Resource Name (ARN) of the queue."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The unique Amazon Resource Name (ARN) of the queue.","type":"string"},"computeNodeGroupConfigurations":{"description":"The list of compute node group configurations associated with the queue. Queues assign jobs to associated compute node groups.","items":{"$ref":"#/types/aws-native:pcs:QueueComputeNodeGroupConfiguration"},"type":"array"},"errorInfo":{"description":"The list of errors that occurred during queue provisioning.","items":{"$ref":"#/types/aws-native:pcs:QueueErrorInfo"},"type":"array"},"id":{"description":"The generated unique ID of the queue.","type":"string"},"slurmConfiguration":{"$ref":"#/types/aws-native:pcs:SlurmConfigurationProperties","description":"The Slurm configuration for the queue."},"status":{"$ref":"#/types/aws-native:pcs:QueueStatus","description":"The provisioning status of the queue. The provisioning status doesn't indicate the overall health of the queue."},"tags":{"additionalProperties":{"type":"string"},"description":"1 or more tags added to the resource. Each tag consists of a tag key and tag value. The tag value is optional and can be an empty string.","type":"object"}}}},"aws-native:personalize:getDataset":{"description":"Resource schema for AWS::Personalize::Dataset.","inputs":{"properties":{"datasetArn":{"type":"string","description":"The ARN of the dataset"}},"required":["datasetArn"]},"outputs":{"properties":{"datasetArn":{"description":"The ARN of the dataset","type":"string"},"datasetImportJob":{"$ref":"#/types/aws-native:personalize:DatasetImportJob","description":"Describes a job that imports training data from a data source (Amazon S3 bucket) to an Amazon Personalize dataset. If you specify a dataset import job as part of a dataset, all dataset import job fields are required."}}}},"aws-native:personalize:getDatasetGroup":{"description":"Resource Schema for AWS::Personalize::DatasetGroup.","inputs":{"properties":{"datasetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the dataset group."}},"required":["datasetGroupArn"]},"outputs":{"properties":{"datasetGroupArn":{"description":"The Amazon Resource Name (ARN) of the dataset group.","type":"string"}}}},"aws-native:personalize:getSchema":{"description":"Resource schema for AWS::Personalize::Schema.","inputs":{"properties":{"schemaArn":{"type":"string","description":"Arn for the schema."}},"required":["schemaArn"]},"outputs":{"properties":{"schemaArn":{"description":"Arn for the schema.","type":"string"}}}},"aws-native:personalize:getSolution":{"description":"Resource schema for AWS::Personalize::Solution.","inputs":{"properties":{"solutionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the solution."}},"required":["solutionArn"]},"outputs":{"properties":{"solutionArn":{"description":"The Amazon Resource Name (ARN) of the solution.","type":"string"}}}},"aws-native:pinpoint:getInAppTemplate":{"description":"Resource Type definition for AWS::Pinpoint::InAppTemplate","inputs":{"properties":{"templateName":{"type":"string","description":"The name of the in-app message template."}},"required":["templateName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the message template.","type":"string"},"content":{"description":"An object that contains information about the content of an in-app message, including its title and body text, text colors, background colors, images, buttons, and behaviors.","items":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateInAppMessageContent"},"type":"array"},"customConfig":{"$ref":"pulumi.json#/Any","description":"Custom data, in the form of key-value pairs, that is included in an in-app messaging payload.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Pinpoint::InAppTemplate` for more information about the expected schema for this property."},"layout":{"$ref":"#/types/aws-native:pinpoint:InAppTemplateLayout","description":"A string that determines the appearance of the in-app message. You can specify one of the following:\n\n- `BOTTOM_BANNER` – a message that appears as a banner at the bottom of the page.\n- `TOP_BANNER` – a message that appears as a banner at the top of the page.\n- `OVERLAYS` – a message that covers entire screen.\n- `MOBILE_FEED` – a message that appears in a window in front of the page.\n- `MIDDLE_BANNER` – a message that appears as a banner in the middle of the page.\n- `CAROUSEL` – a scrollable layout of up to five unique messages."},"tags":{"$ref":"pulumi.json#/Any","description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Pinpoint::InAppTemplate` for more information about the expected schema for this property."},"templateDescription":{"description":"An optional description of the in-app template.","type":"string"}}}},"aws-native:pipes:getPipe":{"description":"Definition of AWS::Pipes::Pipe Resource Type","inputs":{"properties":{"name":{"type":"string","description":"The name of the pipe."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The ARN of the pipe.","type":"string"},"creationTime":{"description":"The time the pipe was created.","type":"string"},"currentState":{"$ref":"#/types/aws-native:pipes:PipeState","description":"The state the pipe is in."},"description":{"description":"A description of the pipe.","type":"string"},"desiredState":{"$ref":"#/types/aws-native:pipes:PipeRequestedPipeState","description":"The state the pipe should be in."},"enrichment":{"description":"The ARN of the enrichment resource.","type":"string"},"enrichmentParameters":{"$ref":"#/types/aws-native:pipes:PipeEnrichmentParameters","description":"The parameters required to set up enrichment on your pipe."},"kmsKeyIdentifier":{"description":"The identifier of the AWS  customer managed key for EventBridge to use, if you choose to use a customer managed key to encrypt pipe data. The identifier can be the key Amazon Resource Name (ARN), KeyId, key alias, or key alias ARN.\n\nTo update a pipe that is using the default AWS owned key to use a customer managed key instead, or update a pipe that is using a customer managed key to use a different customer managed key, specify a customer managed key identifier.\n\nTo update a pipe that is using a customer managed key to use the default AWS owned key , specify an empty string.\n\nFor more information, see [Managing keys](https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html) in the *AWS Key Management Service Developer Guide* .","type":"string"},"lastModifiedTime":{"description":"When the pipe was last updated, in [ISO-8601 format](https://docs.aws.amazon.com/https://www.w3.org/TR/NOTE-datetime) (YYYY-MM-DDThh:mm:ss.sTZD).","type":"string"},"logConfiguration":{"$ref":"#/types/aws-native:pipes:PipeLogConfiguration","description":"The logging configuration settings for the pipe."},"roleArn":{"description":"The ARN of the role that allows the pipe to send data to the target.","type":"string"},"stateReason":{"description":"The reason the pipe is in its current state.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The list of key-value pairs to associate with the pipe.","type":"object"},"target":{"description":"The ARN of the target resource.","type":"string"}}}},"aws-native:proton:getEnvironmentAccountConnection":{"description":"Resource Schema describing various properties for AWS Proton Environment Account Connections resources.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the environment account connection."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the environment account connection.","type":"string"},"codebuildRoleArn":{"description":"The Amazon Resource Name (ARN) of an IAM service role in the environment account. AWS Proton uses this role to provision infrastructure resources using CodeBuild-based provisioning in the associated environment account.","type":"string"},"componentRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM service role that AWS Proton uses when provisioning directly defined components in the associated environment account. It determines the scope of infrastructure that a component can provision in the account.","type":"string"},"environmentAccountId":{"description":"The environment account that's connected to the environment account connection.","type":"string"},"environmentName":{"description":"The name of the AWS Proton environment that's created in the associated management account.","type":"string"},"id":{"description":"The ID of the environment account connection.","type":"string"},"managementAccountId":{"description":"The ID of the management account that accepts or rejects the environment account connection. You create an manage the AWS Proton environment in this account. If the management account accepts the environment account connection, AWS Proton can use the associated IAM role to provision environment infrastructure resources in the associated environment account.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM service role that's created in the environment account. AWS Proton uses this role to provision infrastructure resources in the associated environment account.","type":"string"},"status":{"$ref":"#/types/aws-native:proton:EnvironmentAccountConnectionStatus","description":"The status of the environment account connection."},"tags":{"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton environment account connection. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:proton:getEnvironmentTemplate":{"description":"Definition of AWS::Proton::EnvironmentTemplate Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the environment template.\u003c/p\u003e"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the environment template.\u003c/p\u003e","type":"string"},"description":{"description":"\u003cp\u003eA description of the environment template.\u003c/p\u003e","type":"string"},"displayName":{"description":"\u003cp\u003eThe environment template name as displayed in the developer interface.\u003c/p\u003e","type":"string"},"tags":{"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton environment template. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:proton:getServiceTemplate":{"description":"Definition of AWS::Proton::ServiceTemplate Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the service template.\u003c/p\u003e"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the service template.\u003c/p\u003e","type":"string"},"description":{"description":"\u003cp\u003eA description of the service template.\u003c/p\u003e","type":"string"},"displayName":{"description":"\u003cp\u003eThe name of the service template as displayed in the developer interface.\u003c/p\u003e","type":"string"},"tags":{"description":"\u003cp\u003eAn optional list of metadata items that you can associate with the Proton service template. A tag is a key-value pair.\u003c/p\u003e\n         \u003cp\u003eFor more information, see \u003ca href=\"https://docs.aws.amazon.com/proton/latest/userguide/resources.html\"\u003eProton resources and tagging\u003c/a\u003e in the\n        \u003ci\u003eProton User Guide\u003c/i\u003e.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:qbusiness:getApplication":{"description":"Definition of AWS::QBusiness::Application Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The identifier for the Amazon Q Business application."}},"required":["applicationId"]},"outputs":{"properties":{"applicationArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Q Business application.","type":"string"},"applicationId":{"description":"The identifier for the Amazon Q Business application.","type":"string"},"attachmentsConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationAttachmentsConfiguration","description":"Configuration information for the file upload during chat feature."},"autoSubscriptionConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationAutoSubscriptionConfiguration","description":"Subscription configuration information for an Amazon Q Business application using IAM identity federation for user management."},"createdAt":{"description":"The Unix timestamp when the Amazon Q Business application was created.","type":"string"},"description":{"description":"A description for the Amazon Q Business application.","type":"string"},"displayName":{"description":"The name of the Amazon Q Business application.","type":"string"},"identityCenterApplicationArn":{"description":"The Amazon Resource Name (ARN) of the AWS SSO instance attached to your Amazon Q Business application.","type":"string"},"personalizationConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationPersonalizationConfiguration","description":"Configuration information about chat response personalization. For more information, see [Personalizing chat responses](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html) ."},"qAppsConfiguration":{"$ref":"#/types/aws-native:qbusiness:ApplicationQAppsConfiguration","description":"Configuration information about Amazon Q Apps."},"roleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role with permissions to access your Amazon CloudWatch logs and metrics. If this property is not specified, Amazon Q Business will create a [service linked role (SLR)](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/using-service-linked-roles.html#slr-permissions) and use it as the application's role.","type":"string"},"status":{"$ref":"#/types/aws-native:qbusiness:ApplicationStatus","description":"The status of the Amazon Q Business application. The application is ready to use when the status is `ACTIVE` ."},"tags":{"description":"A list of key-value pairs that identify or categorize your Amazon Q Business application. You can also use tags to help control access to the application. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The Unix timestamp when the Amazon Q Business application was last updated.","type":"string"}}}},"aws-native:qbusiness:getDataAccessor":{"description":"Definition of AWS::QBusiness::DataAccessor Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The unique identifier of the Amazon Q Business application."},"dataAccessorId":{"type":"string","description":"The unique identifier of the data accessor."}},"required":["applicationId","dataAccessorId"]},"outputs":{"properties":{"actionConfigurations":{"description":"A list of action configurations specifying the allowed actions and any associated filters.","items":{"$ref":"#/types/aws-native:qbusiness:DataAccessorActionConfiguration"},"type":"array"},"authenticationDetail":{"$ref":"#/types/aws-native:qbusiness:DataAccessorAuthenticationDetail","description":"The authentication configuration details for the data accessor. This specifies how the ISV authenticates when accessing data through this data accessor."},"createdAt":{"description":"The timestamp when the data accessor was created.","type":"string"},"dataAccessorArn":{"description":"The Amazon Resource Name (ARN) of the data accessor.","type":"string"},"dataAccessorId":{"description":"The unique identifier of the data accessor.","type":"string"},"displayName":{"description":"The friendly name of the data accessor.","type":"string"},"idcApplicationArn":{"description":"The Amazon Resource Name (ARN) of the associated IAM Identity Center application.","type":"string"},"tags":{"description":"The tags to associate with the data accessor.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp when the data accessor was last updated.","type":"string"}}}},"aws-native:qbusiness:getDataSource":{"description":"Definition of AWS::QBusiness::DataSource Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application the data source will be attached to."},"dataSourceId":{"type":"string","description":"The identifier of the Amazon Q Business data source."},"indexId":{"type":"string","description":"The identifier of the index the data source is attached to."}},"required":["applicationId","dataSourceId","indexId"]},"outputs":{"properties":{"configuration":{"$ref":"pulumi.json#/Any","description":"Use this property to specify a JSON or YAML schema with configuration properties specific to your data source connector to connect your data source repository to Amazon Q Business . You must use the JSON or YAML schema provided by Amazon Q .\n\nThe following links have the configuration properties and schemas for AWS CloudFormation for the following connectors:\n\n- [Amazon Simple Storage Service](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/s3-cfn.html)\n- [Amazon Q Web Crawler](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/web-crawler-cfn.html)\n\nSimilarly, you can find configuration templates and properties for your specific data source using the following steps:\n\n- Navigate to the [Supported connectors](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connectors-list.html) page in the Amazon Q Business User Guide, and select the data source connector of your choice.\n- Then, from that specific data source connector's page, choose the topic containing *Using CloudFormation* to find the schemas for your data source connector, including configuration parameter descriptions and examples.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::QBusiness::DataSource` for more information about the expected schema for this property."},"createdAt":{"description":"The Unix timestamp when the Amazon Q Business data source was created.","type":"string"},"dataSourceArn":{"description":"The Amazon Resource Name (ARN) of a data source in an Amazon Q Business application.","type":"string"},"dataSourceId":{"description":"The identifier of the Amazon Q Business data source.","type":"string"},"description":{"description":"A description for the data source connector.","type":"string"},"displayName":{"description":"The name of the Amazon Q Business data source.","type":"string"},"documentEnrichmentConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceDocumentEnrichmentConfiguration","description":"Provides the configuration information for altering document metadata and content during the document ingestion process.\n\nFor more information, see [Custom document enrichment](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/custom-document-enrichment.html) ."},"mediaExtractionConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceMediaExtractionConfiguration","description":"The configuration for extracting information from media in documents."},"roleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role with permission to access the data source and required resources. This field is required for all connector types except custom connectors, where it is optional.","type":"string"},"status":{"$ref":"#/types/aws-native:qbusiness:DataSourceStatus","description":"The status of the Amazon Q Business data source."},"syncSchedule":{"description":"Sets the frequency for Amazon Q Business to check the documents in your data source repository and update your index. If you don't set a schedule, Amazon Q Business won't periodically update the index.\n\nSpecify a `cron-` format schedule string or an empty string to indicate that the index is updated on demand. You can't specify the `Schedule` parameter when the `Type` parameter is set to `CUSTOM` . If you do, you receive a `ValidationException` exception.","type":"string"},"tags":{"description":"A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"description":"The type of the Amazon Q Business data source.","type":"string"},"updatedAt":{"description":"The Unix timestamp when the Amazon Q Business data source was last updated.","type":"string"},"vpcConfiguration":{"$ref":"#/types/aws-native:qbusiness:DataSourceVpcConfiguration","description":"Configuration information for an Amazon VPC (Virtual Private Cloud) to connect to your data source. For more information, see [Using Amazon VPC with Amazon Q Business connectors](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/connector-vpc.html) ."}}}},"aws-native:qbusiness:getIndex":{"description":"Definition of AWS::QBusiness::Index Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application using the index."},"indexId":{"type":"string","description":"The identifier for the index."}},"required":["applicationId","indexId"]},"outputs":{"properties":{"capacityConfiguration":{"$ref":"#/types/aws-native:qbusiness:IndexCapacityConfiguration","description":"The capacity units you want to provision for your index. You can add and remove capacity to fit your usage needs."},"createdAt":{"description":"The Unix timestamp when the index was created.","type":"string"},"description":{"description":"A description for the Amazon Q Business index.","type":"string"},"displayName":{"description":"The name of the index.","type":"string"},"documentAttributeConfigurations":{"description":"Configuration information for document attributes. Document attributes are metadata or fields associated with your documents. For example, the company department name associated with each document.\n\nFor more information, see [Understanding document attributes](https://docs.aws.amazon.com/amazonq/latest/business-use-dg/doc-attributes.html) .","items":{"$ref":"#/types/aws-native:qbusiness:IndexDocumentAttributeConfiguration"},"type":"array"},"indexArn":{"description":"The Amazon Resource Name (ARN) of an Amazon Q Business index.","type":"string"},"indexId":{"description":"The identifier for the index.","type":"string"},"indexStatistics":{"$ref":"#/types/aws-native:qbusiness:IndexStatistics"},"status":{"$ref":"#/types/aws-native:qbusiness:IndexStatus","description":"The current status of the index. When the status is `ACTIVE` , the index is ready."},"tags":{"description":"A list of key-value pairs that identify or categorize the index. You can also use tags to help control access to the index. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The Unix timestamp when the index was last updated.","type":"string"}}}},"aws-native:qbusiness:getPlugin":{"description":"Definition of AWS::QBusiness::Plugin Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The identifier of the application that will contain the plugin."},"pluginId":{"type":"string","description":"The identifier of the plugin."}},"required":["applicationId","pluginId"]},"outputs":{"properties":{"authConfiguration":{"description":"Authentication configuration information for an Amazon Q Business plugin.","oneOf":[{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration1Properties"},{"$ref":"#/types/aws-native:qbusiness:PluginAuthConfiguration2Properties"}]},"buildStatus":{"$ref":"#/types/aws-native:qbusiness:PluginBuildStatus","description":"The current status of a plugin. A plugin is modified asynchronously."},"createdAt":{"description":"The timestamp for when the plugin was created.","type":"string"},"customPluginConfiguration":{"$ref":"#/types/aws-native:qbusiness:PluginCustomPluginConfiguration","description":"Configuration information required to create a custom plugin."},"displayName":{"description":"The name of the plugin.","type":"string"},"pluginArn":{"description":"The Amazon Resource Name (ARN) of a plugin.","type":"string"},"pluginId":{"description":"The identifier of the plugin.","type":"string"},"serverUrl":{"description":"The plugin server URL used for configuration.","type":"string"},"state":{"$ref":"#/types/aws-native:qbusiness:PluginState","description":"The current status of the plugin."},"tags":{"description":"A list of key-value pairs that identify or categorize the data source connector. You can also use tags to help control access to the data source connector. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp for when the plugin was last updated.","type":"string"}}}},"aws-native:qbusiness:getRetriever":{"description":"Definition of AWS::QBusiness::Retriever Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business application using the retriever."},"retrieverId":{"type":"string","description":"The identifier of the retriever used by your Amazon Q Business application."}},"required":["applicationId","retrieverId"]},"outputs":{"properties":{"configuration":{"description":"Provides information on how the retriever used for your Amazon Q Business application is configured.","oneOf":[{"$ref":"#/types/aws-native:qbusiness:RetrieverConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:RetrieverConfiguration1Properties"}]},"createdAt":{"description":"The Unix timestamp when the retriever was created.","type":"string"},"displayName":{"description":"The name of your retriever.","type":"string"},"retrieverArn":{"description":"The Amazon Resource Name (ARN) of the IAM role associated with the retriever.","type":"string"},"retrieverId":{"description":"The identifier of the retriever used by your Amazon Q Business application.","type":"string"},"roleArn":{"description":"The ARN of an IAM role used by Amazon Q Business to access the basic authentication credentials stored in a Secrets Manager secret.","type":"string"},"status":{"$ref":"#/types/aws-native:qbusiness:RetrieverStatus","description":"The status of your retriever."},"tags":{"description":"A list of key-value pairs that identify or categorize the retriever. You can also use tags to help control access to the retriever. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The Unix timestamp when the retriever was last updated.","type":"string"}}}},"aws-native:qbusiness:getWebExperience":{"description":"Definition of AWS::QBusiness::WebExperience Resource Type","inputs":{"properties":{"applicationId":{"type":"string","description":"The identifier of the Amazon Q Business web experience."},"webExperienceId":{"type":"string","description":"The identifier of your Amazon Q Business web experience."}},"required":["applicationId","webExperienceId"]},"outputs":{"properties":{"browserExtensionConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceBrowserExtensionConfiguration","description":"The container for browser extension configuration for an Amazon Q Business web experience."},"createdAt":{"description":"The Unix timestamp when the Amazon Q Business application was last updated.","type":"string"},"customizationConfiguration":{"$ref":"#/types/aws-native:qbusiness:WebExperienceCustomizationConfiguration","description":"Contains the configuration information to customize the logo, font, and color of an Amazon Q Business web experience with individual files for each property or a CSS file for them all."},"defaultEndpoint":{"description":"The endpoint URLs for your Amazon Q Business web experience. The URLs are unique and fully hosted by AWS .","type":"string"},"identityProviderConfiguration":{"description":"Provides information about the identity provider (IdP) used to authenticate end users of an Amazon Q Business web experience.","oneOf":[{"$ref":"#/types/aws-native:qbusiness:WebExperienceIdentityProviderConfiguration0Properties"},{"$ref":"#/types/aws-native:qbusiness:WebExperienceIdentityProviderConfiguration1Properties"}]},"origins":{"description":"Sets the website domain origins that are allowed to embed the Amazon Q Business web experience. The *domain origin* refers to the base URL for accessing a website including the protocol ( `http/https` ), the domain name, and the port number (if specified).\n\n\u003e You must only submit a *base URL* and not a full path. For example, `https://docs.aws.amazon.com` .","items":{"type":"string"},"type":"array"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the service role attached to your web experience.\n\n\u003e The `roleArn` parameter is required when your Amazon Q Business application is created with IAM Identity Center. It is not required for SAML-based applications.","type":"string"},"samplePromptsControlMode":{"$ref":"#/types/aws-native:qbusiness:WebExperienceSamplePromptsControlMode","description":"Determines whether sample prompts are enabled in the web experience for an end user."},"status":{"$ref":"#/types/aws-native:qbusiness:WebExperienceStatus","description":"The status of your Amazon Q Business web experience."},"subtitle":{"description":"A subtitle to personalize your Amazon Q Business web experience.","type":"string"},"tags":{"description":"A list of key-value pairs that identify or categorize your Amazon Q Business web experience. You can also use tags to help control access to the web experience. Tag keys and values can consist of Unicode letters, digits, white space, and any of the following symbols: _ . : / = + - @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"title":{"description":"The title for your Amazon Q Business web experience.","type":"string"},"updatedAt":{"description":"The Unix timestamp when your Amazon Q Business web experience was updated.","type":"string"},"webExperienceArn":{"description":"The Amazon Resource Name (ARN) of an Amazon Q Business web experience.","type":"string"},"webExperienceId":{"description":"The identifier of your Amazon Q Business web experience.","type":"string"},"welcomeMessage":{"description":"A message in an Amazon Q Business web experience.","type":"string"}}}},"aws-native:qldb:getStream":{"description":"Resource schema for AWS::QLDB::Stream.","inputs":{"properties":{"id":{"type":"string","description":"The unique ID that QLDB assigns to each QLDB journal stream. For example: `IiPT4brpZCqCq3f4MTHbYy` ."},"ledgerName":{"type":"string","description":"The name of the ledger."}},"required":["ledgerName","id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the QLDB journal stream. For example: `arn:aws:qldb:us-east-1:123456789012:stream/exampleLedger/IiPT4brpZCqCq3f4MTHbYy` .","type":"string"},"id":{"description":"The unique ID that QLDB assigns to each QLDB journal stream. For example: `IiPT4brpZCqCq3f4MTHbYy` .","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:quicksight:getActionConnector":{"description":"Definition of the AWS::QuickSight::ActionConnector Resource Type.","inputs":{"properties":{"actionConnectorId":{"type":"string"},"awsAccountId":{"type":"string"}},"required":["actionConnectorId","awsAccountId"]},"outputs":{"properties":{"arn":{"type":"string"},"createdTime":{"type":"string"},"description":{"type":"string"},"enabledActions":{"items":{"type":"string"},"type":"array"},"lastUpdatedTime":{"type":"string"},"name":{"type":"string"},"permissions":{"items":{"$ref":"#/types/aws-native:quicksight:ActionConnectorResourcePermission"},"type":"array"},"status":{"$ref":"#/types/aws-native:quicksight:ActionConnectorResourceStatus"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:quicksight:getAnalysis":{"description":"Definition of the AWS::QuickSight::Analysis Resource Type.","inputs":{"properties":{"analysisId":{"type":"string","description":"The ID for the analysis that you're creating. This ID displays in the URL of the analysis."},"awsAccountId":{"type":"string","description":"The ID of the AWS account where you are creating an analysis."}},"required":["analysisId","awsAccountId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the analysis.\u003c/p\u003e","type":"string"},"createdTime":{"description":"\u003cp\u003eThe time that the analysis was created.\u003c/p\u003e","type":"string"},"dataSetArns":{"description":"\u003cp\u003eThe ARNs of the datasets of the analysis.\u003c/p\u003e","items":{"type":"string"},"type":"array"},"errors":{"description":"\u003cp\u003eErrors associated with the analysis.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:AnalysisError"},"type":"array"},"lastUpdatedTime":{"description":"\u003cp\u003eThe time that the analysis was last updated.\u003c/p\u003e","type":"string"},"name":{"description":"\u003cp\u003eThe descriptive name of the analysis.\u003c/p\u003e","type":"string"},"permissions":{"description":"A structure that describes the principals and the resource-level permissions on an analysis. You can use the `Permissions` structure to grant permissions by providing a list of AWS Identity and Access Management (IAM) action information for each principal listed by Amazon Resource Name (ARN).\n\nTo specify no permissions, omit `Permissions` .","items":{"$ref":"#/types/aws-native:quicksight:AnalysisResourcePermission"},"type":"array"},"sheets":{"description":"\u003cp\u003eA list of the associated sheets with the unique identifier and name of each sheet.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:AnalysisSheet"},"type":"array"},"tags":{"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the analysis.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"themeArn":{"description":"\u003cp\u003eThe ARN of the theme of the analysis.\u003c/p\u003e","type":"string"}}}},"aws-native:quicksight:getCustomPermissions":{"description":"Definition of the AWS::QuickSight::CustomPermissions Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account that contains the custom permission configuration that you want to update."},"customPermissionsName":{"type":"string","description":"The name of the custom permissions profile."}},"required":["awsAccountId","customPermissionsName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the custom permissions profile.","type":"string"},"capabilities":{"$ref":"#/types/aws-native:quicksight:CustomPermissionsCapabilities","description":"A set of actions in the custom permissions profile."},"tags":{"description":"The tags to associate with the custom permissions profile.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:quicksight:getDashboard":{"description":"Definition of the AWS::QuickSight::Dashboard Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account where you want to create the dashboard."},"dashboardId":{"type":"string","description":"The ID for the dashboard, also added to the IAM policy."}},"required":["awsAccountId","dashboardId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e","type":"string"},"createdTime":{"description":"\u003cp\u003eThe time that this dashboard was created.\u003c/p\u003e","type":"string"},"lastPublishedTime":{"description":"\u003cp\u003eThe last time that this dashboard was published.\u003c/p\u003e","type":"string"},"lastUpdatedTime":{"description":"\u003cp\u003eThe last time that this dashboard was updated.\u003c/p\u003e","type":"string"},"linkEntities":{"description":"A list of analysis Amazon Resource Names (ARNs) to be linked to the dashboard.","items":{"type":"string"},"type":"array"},"name":{"description":"The display name of the dashboard.","type":"string"},"permissions":{"description":"A structure that contains the permissions of the dashboard. You can use this structure for granting permissions by providing a list of IAM action information for each principal ARN.\n\nTo specify no permissions, omit the permissions list.","items":{"$ref":"#/types/aws-native:quicksight:DashboardResourcePermission"},"type":"array"},"tags":{"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the dashboard.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"$ref":"#/types/aws-native:quicksight:DashboardVersion"}}}},"aws-native:quicksight:getDataSet":{"description":"Definition of the AWS::QuickSight::DataSet Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The AWS account ID."},"dataSetId":{"type":"string","description":"An ID for the dataset that you want to create. This ID is unique per AWS Region for each AWS account."}},"required":["awsAccountId","dataSetId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the resource.\u003c/p\u003e","type":"string"},"columnGroups":{"description":"\u003cp\u003eGroupings of columns that work together in certain Quick Suite features. Currently, only geospatial hierarchy is supported.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnGroup"},"type":"array"},"columnLevelPermissionRules":{"description":"\u003cp\u003eA set of one or more definitions of a \u003ccode\u003e\n               \u003ca href=\"https://docs.aws.amazon.com/quicksight/latest/APIReference/API_ColumnLevelPermissionRule.html\"\u003eColumnLevelPermissionRule\u003c/a\u003e\n            \u003c/code\u003e.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:DataSetColumnLevelPermissionRule"},"type":"array"},"consumedSpiceCapacityInBytes":{"description":"\u003cp\u003eThe amount of SPICE capacity used by this dataset. This is 0 if the dataset isn't\n            imported into SPICE.\u003c/p\u003e","type":"number"},"createdTime":{"description":"\u003cp\u003eThe time that this dataset was created.\u003c/p\u003e","type":"string"},"dataPrepConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetDataPrepConfiguration","description":"The data preparation configuration associated with this dataset."},"dataSetRefreshProperties":{"$ref":"#/types/aws-native:quicksight:DataSetRefreshProperties","description":"The refresh properties of a dataset."},"dataSetUsageConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetUsageConfiguration","description":"The usage configuration to apply to child datasets that reference this dataset as a source."},"datasetParameters":{"description":"\u003cp\u003eThe parameter declarations of the dataset.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:DataSetDatasetParameter"},"type":"array"},"importMode":{"$ref":"#/types/aws-native:quicksight:DataSetImportMode","description":"Indicates whether you want to import the data into SPICE."},"lastUpdatedTime":{"description":"\u003cp\u003eThe last time that this dataset was updated.\u003c/p\u003e","type":"string"},"logicalTableMap":{"additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetLogicalTable"},"type":"object"},"name":{"description":"\u003cp\u003eThe display name for the dataset.\u003c/p\u003e","type":"string"},"outputColumns":{"description":"\u003cp\u003eThe list of columns after all transforms. These columns are available in templates,\n            analyses, and dashboards.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:DataSetOutputColumn"},"type":"array"},"performanceConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetPerformanceConfiguration","description":"The performance optimization configuration of a dataset."},"permissions":{"description":"\u003cp\u003eA list of resource permissions on the dataset.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:DataSetResourcePermission"},"type":"array"},"physicalTableMap":{"additionalProperties":{"$ref":"#/types/aws-native:quicksight:DataSetPhysicalTable"},"description":"Declares the physical tables that are available in the underlying data sources.","type":"object"},"rowLevelPermissionDataSet":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionDataSet"},"rowLevelPermissionTagConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetRowLevelPermissionTagConfiguration"},"semanticModelConfiguration":{"$ref":"#/types/aws-native:quicksight:DataSetSemanticModelConfiguration","description":"The semantic model configuration associated with this dataset."},"tags":{"description":"\u003cp\u003eContains a map of the key-value pairs for the resource tag or tags assigned to the dataset.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"useAs":{"$ref":"#/types/aws-native:quicksight:DataSetUseAs","description":"The usage of the dataset."}}}},"aws-native:quicksight:getDataSource":{"description":"Definition of the AWS::QuickSight::DataSource Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The AWS account ID."},"dataSourceId":{"type":"string","description":"An ID for the data source. This ID is unique per AWS Region for each AWS account."}},"required":["awsAccountId","dataSourceId"]},"outputs":{"properties":{"alternateDataSourceParameters":{"description":"\u003cp\u003eA set of alternate data source parameters that you want to share for the credentials\n            stored with this data source. The credentials are applied in tandem with the data source\n            parameters when you copy a data source by using a create or update request. The API\n            operation compares the \u003ccode\u003eDataSourceParameters\u003c/code\u003e structure that's in the request\n            with the structures in the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e allow list. If the\n            structures are an exact match, the request is allowed to use the credentials from this\n            existing data source. If the \u003ccode\u003eAlternateDataSourceParameters\u003c/code\u003e list is null,\n            the \u003ccode\u003eCredentials\u003c/code\u003e originally used with this \u003ccode\u003eDataSourceParameters\u003c/code\u003e\n            are automatically allowed.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters"},"type":"array"},"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the data source.\u003c/p\u003e","type":"string"},"createdTime":{"description":"\u003cp\u003eThe time that this data source was created.\u003c/p\u003e","type":"string"},"dataSourceParameters":{"$ref":"#/types/aws-native:quicksight:DataSourceParameters","description":"The parameters that Amazon Quick Sight uses to connect to your underlying source."},"errorInfo":{"$ref":"#/types/aws-native:quicksight:DataSourceErrorInfo","description":"Error information from the last update or the creation of the data source."},"lastUpdatedTime":{"description":"\u003cp\u003eThe last time that this data source was updated.\u003c/p\u003e","type":"string"},"name":{"description":"A display name for the data source.","type":"string"},"permissions":{"description":"A list of resource permissions on the data source.","items":{"$ref":"#/types/aws-native:quicksight:DataSourceResourcePermission"},"type":"array"},"sslProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceSslProperties","description":"Secure Socket Layer (SSL) properties that apply when Amazon Quick Sight connects to your underlying source."},"status":{"$ref":"#/types/aws-native:quicksight:DataSourceResourceStatus","description":"The HTTP status of the request."},"tags":{"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the data source.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcConnectionProperties":{"$ref":"#/types/aws-native:quicksight:DataSourceVpcConnectionProperties","description":"Use this parameter only when you want Amazon Quick Sight to use a VPC connection when connecting to your underlying source."}}}},"aws-native:quicksight:getFolder":{"description":"Definition of the AWS::QuickSight::Folder Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The ID for the AWS account where you want to create the folder."},"folderId":{"type":"string","description":"The ID of the folder."}},"required":["awsAccountId","folderId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) for the folder.\u003c/p\u003e","type":"string"},"createdTime":{"description":"\u003cp\u003eThe time that the folder was created.\u003c/p\u003e","type":"string"},"lastUpdatedTime":{"description":"\u003cp\u003eThe time that the folder was last updated.\u003c/p\u003e","type":"string"},"name":{"description":"A display name for the folder.","type":"string"},"permissions":{"description":"A structure that describes the principals and the resource-level permissions of a folder.\n\nTo specify no permissions, omit `Permissions` .","items":{"$ref":"#/types/aws-native:quicksight:FolderResourcePermission"},"type":"array"},"tags":{"description":"A list of tags for the folders that you want to apply overrides to.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:quicksight:getTemplate":{"description":"Definition of the AWS::QuickSight::Template Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The ID for the AWS account that the group is in. You use the ID for the AWS account that contains your Amazon Quick Sight account."},"templateId":{"type":"string","description":"An ID for the template that you want to create. This template is unique per AWS Region ; in each AWS account."}},"required":["awsAccountId","templateId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the template.\u003c/p\u003e","type":"string"},"createdTime":{"description":"\u003cp\u003eTime when this was created.\u003c/p\u003e","type":"string"},"lastUpdatedTime":{"description":"\u003cp\u003eTime when this was last updated.\u003c/p\u003e","type":"string"},"name":{"description":"A display name for the template.","type":"string"},"permissions":{"description":"A list of resource permissions to be set on the template.","items":{"$ref":"#/types/aws-native:quicksight:TemplateResourcePermission"},"type":"array"},"tags":{"description":"Contains a map of the key-value pairs for the resource tag or tags assigned to the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"$ref":"#/types/aws-native:quicksight:TemplateVersion"}}}},"aws-native:quicksight:getTheme":{"description":"Definition of the AWS::QuickSight::Theme Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account where you want to store the new theme."},"themeId":{"type":"string","description":"An ID for the theme that you want to create. The theme ID is unique per AWS Region in each AWS account."}},"required":["themeId","awsAccountId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the theme.\u003c/p\u003e","type":"string"},"baseThemeId":{"description":"The ID of the theme that a custom theme will inherit from. All themes inherit from one of the starting themes defined by Amazon Quick Sight. For a list of the starting themes, use `ListThemes` or choose *Themes* from within an analysis.","type":"string"},"configuration":{"$ref":"#/types/aws-native:quicksight:ThemeConfiguration","description":"The theme configuration, which contains the theme display properties."},"createdTime":{"description":"\u003cp\u003eThe date and time that the theme was created.\u003c/p\u003e","type":"string"},"lastUpdatedTime":{"description":"\u003cp\u003eThe date and time that the theme was last updated.\u003c/p\u003e","type":"string"},"name":{"description":"A display name for the theme.","type":"string"},"permissions":{"description":"A valid grouping of resource permissions to apply to the new theme.","items":{"$ref":"#/types/aws-native:quicksight:ThemeResourcePermission"},"type":"array"},"tags":{"description":"A map of the key-value pairs for the resource tag or tags that you want to add to the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:quicksight:ThemeType","description":"Theme type."},"version":{"$ref":"#/types/aws-native:quicksight:ThemeVersion"},"versionDescription":{"description":"A description of the first version of the theme that you're creating. Every time `UpdateTheme` is called, a new version is created. Each version of the theme has a description of the version in the `VersionDescription` field.","type":"string"}}}},"aws-native:quicksight:getTopic":{"description":"Definition of the AWS::QuickSight::Topic Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The ID of the AWS account that you want to create a topic in."},"topicId":{"type":"string","description":"The ID for the topic. This ID is unique per AWS Region for each AWS account."}},"required":["awsAccountId","topicId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the topic.","type":"string"},"configOptions":{"$ref":"#/types/aws-native:quicksight:TopicConfigOptions","description":"Configuration options for a `Topic` ."},"customInstructions":{"$ref":"#/types/aws-native:quicksight:TopicCustomInstructions"},"dataSets":{"description":"The data sets that the topic is associated with.","items":{"$ref":"#/types/aws-native:quicksight:TopicDatasetMetadata"},"type":"array"},"description":{"description":"The description of the topic.","type":"string"},"name":{"description":"The name of the topic.","type":"string"},"userExperienceVersion":{"$ref":"#/types/aws-native:quicksight:TopicUserExperienceVersion","description":"The user experience version of the topic."}}}},"aws-native:quicksight:getVpcConnection":{"description":"Definition of the AWS::QuickSight::VPCConnection Resource Type.","inputs":{"properties":{"awsAccountId":{"type":"string","description":"The AWS account ID of the account where you want to create a new VPC connection."},"vpcConnectionId":{"type":"string","description":"The ID of the VPC connection that you're creating. This ID is a unique identifier for each AWS Region in an AWS account."}},"required":["awsAccountId","vpcConnectionId"]},"outputs":{"properties":{"arn":{"description":"\u003cp\u003eThe Amazon Resource Name (ARN) of the VPC connection.\u003c/p\u003e","type":"string"},"availabilityStatus":{"$ref":"#/types/aws-native:quicksight:VpcConnectionVpcConnectionAvailabilityStatus","description":"The availability status of the VPC connection."},"createdTime":{"description":"\u003cp\u003eThe time that the VPC connection was created.\u003c/p\u003e","type":"string"},"dnsResolvers":{"description":"A list of IP addresses of DNS resolver endpoints for the VPC connection.","items":{"type":"string"},"type":"array"},"lastUpdatedTime":{"description":"\u003cp\u003eThe time that the VPC connection was last updated.\u003c/p\u003e","type":"string"},"name":{"description":"The display name for the VPC connection.","type":"string"},"networkInterfaces":{"description":"\u003cp\u003eA list of network interfaces.\u003c/p\u003e","items":{"$ref":"#/types/aws-native:quicksight:VpcConnectionNetworkInterface"},"type":"array"},"roleArn":{"description":"The ARN of the IAM role associated with the VPC connection.","type":"string"},"securityGroupIds":{"description":"The Amazon EC2 security group IDs associated with the VPC connection.","items":{"type":"string"},"type":"array"},"status":{"$ref":"#/types/aws-native:quicksight:VpcConnectionVpcConnectionResourceStatus","description":"The HTTP status of the request."},"tags":{"description":"A map of the key-value pairs for the resource tag or tags assigned to the VPC connection.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"\u003cp\u003eThe Amazon EC2 VPC ID associated with the VPC connection.\u003c/p\u003e","type":"string"}}}},"aws-native:ram:getPermission":{"description":"Resource type definition for AWS::RAM::Permission","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the new permission."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the new permission.","type":"string"},"isResourceTypeDefault":{"description":"Set to true to use this as the default permission.","type":"boolean"},"permissionType":{"description":"The type of managed permission. This can be one of the following values:\n\n- *AWS_MANAGED_PERMISSION* – AWS created and manages this managed permission. You can associate it with your resource shares, but you can't modify it.\n- *CUSTOMER_MANAGED_PERMISSION* – You, or another principal in your account created this managed permission. You can associate it with your resource shares and create new versions that have different permissions.","type":"string"},"tags":{"description":"Specifies a list of one or more tag key and value pairs to attach to the permission.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"version":{"description":"Version of the permission.","type":"string"}}}},"aws-native:ram:getResourceShare":{"description":"Resource type definition for AWS::RAM::ResourceShare","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource share."}},"required":["arn"]},"outputs":{"properties":{"allowExternalPrincipals":{"description":"Specifies whether principals outside your organization in AWS Organizations can be associated with a resource share. A value of `true` lets you share with individual AWS accounts that are not in your organization. A value of `false` only has meaning if your account is a member of an AWS Organization. The default value is `true`.","type":"boolean"},"arn":{"description":"The Amazon Resource Name (ARN) of the resource share.","type":"string"},"creationTime":{"description":"The date and time when the resource share was created.","type":"string"},"featureSet":{"$ref":"#/types/aws-native:ram:ResourceShareFeatureSet","description":"The feature set of the resource share."},"lastUpdatedTime":{"description":"The date and time when the resource share was last updated.","type":"string"},"name":{"description":"Specifies the name of the resource share.","type":"string"},"owningAccountId":{"description":"The ID of the AWS account that owns the resource share.","type":"string"},"status":{"$ref":"#/types/aws-native:ram:ResourceShareStatus","description":"The current status of the resource share."},"tags":{"description":"Specifies one or more tags to attach to the resource share itself. It doesn't attach the tags to the resources associated with the resource share.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rbin:getRule":{"description":"Resource Type definition for AWS::Rbin::Rule","inputs":{"properties":{"arn":{"type":"string","description":"Rule Arn is unique for each rule."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Rule Arn is unique for each rule.","type":"string"},"description":{"description":"The description of the retention rule.","type":"string"},"excludeResourceTags":{"description":"Information about the exclude resource tags used to identify resources that are excluded by the retention rule.","items":{"$ref":"#/types/aws-native:rbin:RuleResourceTag"},"type":"array"},"identifier":{"description":"The unique ID of the retention rule.","type":"string"},"lockState":{"description":"The lock state for the retention rule.","type":"string"},"resourceTags":{"description":"Information about the resource tags used to identify resources that are retained by the retention rule.","items":{"$ref":"#/types/aws-native:rbin:RuleResourceTag"},"type":"array"},"retentionPeriod":{"$ref":"#/types/aws-native:rbin:RuleRetentionPeriod","description":"Information about the retention period for which the retention rule is to retain resources."},"status":{"description":"The state of the retention rule. Only retention rules that are in the available state retain resources.","type":"string"},"tags":{"description":"Information about the tags assigned to the retention rule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getCustomDbEngineVersion":{"description":"Creates a custom DB engine version (CEV).","inputs":{"properties":{"engine":{"type":"string","description":"The database engine to use for your custom engine version (CEV).\n Valid values:\n  +   ``custom-oracle-ee`` \n  +   ``custom-oracle-ee-cdb``"},"engineVersion":{"type":"string","description":"The name of your CEV. The name format is ``major version.customized_string``. For example, a valid CEV name is ``19.my_cev1``. This setting is required for RDS Custom for Oracle, but optional for Amazon RDS. The combination of ``Engine`` and ``EngineVersion`` is unique per customer per Region.\n *Constraints:* Minimum length is 1. Maximum length is 60.\n *Pattern:*``^[a-z0-9_.-]{1,60$``}"}},"required":["engine","engineVersion"]},"outputs":{"properties":{"dbEngineVersionArn":{"description":"The ARN of the custom engine version.","type":"string"},"description":{"description":"An optional description of your CEV.","type":"string"},"status":{"$ref":"#/types/aws-native:rds:CustomDbEngineVersionStatus","description":"A value that indicates the status of a custom engine version (CEV)."},"tags":{"description":"A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getDbCluster":{"description":"The ``AWS::RDS::DBCluster`` resource creates an Amazon Aurora DB cluster or Multi-AZ DB cluster.\n For more information about creating an Aurora DB cluster, see [Creating an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.CreateInstance.html) in the *Amazon Aurora User Guide*.\n For more information about creating a Multi-AZ DB cluster, see [Creating a Multi-AZ DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/create-multi-az-db-cluster.html) in the *Amazon RDS User Guide*.\n  You can only create this resource in AWS Regions where Amazon Aurora or Multi-AZ DB clusters are supported.\n   *Updating DB clusters* \n When properties labeled \"*Update requires:*[Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\" are updated, AWS CloudFormation first creates a replacement DB cluster, then changes references from other dependent resources to point to the replacement DB cluster, and finally deletes the old DB cluster.\n  We highly recommend that you take a snapshot of the database before updating the stack. If you don't, you lose the data when AWS CloudFormation replaces your DB cluster. To preserve your data, perform the following procedure:\n  1.  Deactivate any applications that are using the DB cluster so that there's no activity on the DB instance.\n  1.  Create a snapshot of the DB cluster. For more information, see [Creating a DB cluster snapshot](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_CreateSnapshotCluster.html).\n  1.  If you want to restore your DB cluster using a DB cluster snapshot, modify the updated template with your DB cluster changes and add the ``SnapshotIdentifier`` property with the ID of the DB cluster snapshot that you want to use.\n After you restore a DB cluster with a ``SnapshotIdentifier`` property, you must specify the same ``SnapshotIdentifier`` property for any future updates to the DB cluster. When you specify this property for an update, the DB cluster is not restored from the DB cluster snapshot again, and the data in the database is not changed. However, if you don't specify the ``SnapshotIdentifier`` property, an empty DB cluster is created, and the original DB cluster is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB cluster is restored from the specified ``SnapshotIdentifier`` property, and the original DB cluster is deleted.\n  1.  Update the stack.\n  \n  Currently, when you are updating the stack for an Aurora Serverless DB cluster, you can't include changes to any other properties when you specify one of the following properties: ``PreferredBackupWindow``, ``PreferredMaintenanceWindow``, and ``Port``. This limitation doesn't apply to provisioned DB clusters.\n For more information about updating other properties of this resource, see ``ModifyDBCluster``. For more information about updating stacks, see [CloudFormation Stacks Updates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html).\n  *Deleting DB clusters* \n The default ``DeletionPolicy`` for ``AWS::RDS::DBCluster`` resources is ``Snapshot``. For more information about how AWS CloudFormation deletes resources, see [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html).","inputs":{"properties":{"dbClusterIdentifier":{"type":"string","description":"The DB cluster identifier. This parameter is stored as a lowercase string.\n Constraints:\n  +  Must contain from 1 to 63 letters, numbers, or hyphens.\n  +  First character must be a letter.\n  +  Can't end with a hyphen or contain two consecutive hyphens.\n  \n Example: ``my-cluster1``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters"}},"required":["dbClusterIdentifier"]},"outputs":{"properties":{"allocatedStorage":{"description":"The amount of storage in gibibytes (GiB) to allocate to each DB instance in the Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only\n This setting is required to create a Multi-AZ DB cluster.","type":"integer"},"associatedRoles":{"description":"Provides a list of the AWS Identity and Access Management (IAM) roles that are associated with the DB cluster. IAM roles that are associated with a DB cluster grant permission for the DB cluster to access other Amazon Web Services on your behalf.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","items":{"$ref":"#/types/aws-native:rds:DbClusterDbClusterRole"},"type":"array"},"autoMinorVersionUpgrade":{"description":"Specifies whether minor engine upgrades are applied automatically to the DB cluster during the maintenance window. By default, minor engine upgrades are applied automatically.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster.\n For more information about automatic minor version upgrades, see [Automatically upgrading the minor engine version](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades).","type":"boolean"},"backtrackWindow":{"description":"The target backtrack window, in seconds. To disable backtracking, set this value to ``0``.\n Valid for Cluster Type: Aurora MySQL DB clusters only\n Default: ``0``\n Constraints:\n  +  If specified, this value must be set to a number from 0 to 259,200 (72 hours).","type":"integer"},"backupRetentionPeriod":{"description":"The number of days for which automated backups are retained.\n Default: 1\n Constraints:\n  +  Must be a value from 1 to 35\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"integer"},"copyTagsToSnapshot":{"description":"A value that indicates whether to copy all tags from the DB cluster to snapshots of the DB cluster. The default is not to copy them.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"boolean"},"databaseInsightsMode":{"description":"The mode of Database Insights to enable for the DB cluster.\n If you set this value to ``advanced``, you must also set the ``PerformanceInsightsEnabled`` parameter to ``true`` and the ``PerformanceInsightsRetentionPeriod`` parameter to 465.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"dbClusterArn":{"description":"The Amazon Resource Name (ARN) for the DB cluster.","type":"string"},"dbClusterInstanceClass":{"description":"The compute and memory capacity of each DB instance in the Multi-AZ DB cluster, for example ``db.m6gd.xlarge``. Not all DB instance classes are available in all AWS-Regions, or for all database engines.\n For the full list of DB instance classes and availability for your engine, see [DB instance class](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html) in the *Amazon RDS User Guide*.\n This setting is required to create a Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only","type":"string"},"dbClusterParameterGroupName":{"description":"The name of the DB cluster parameter group to associate with this DB cluster.\n  If you apply a parameter group to an existing DB cluster, then its DB instances might need to reboot. This can result in an outage while the DB instances are rebooting.\n If you apply a change to parameter group associated with a stopped DB cluster, then the update stack waits until the DB cluster is started.\n  To list all of the available DB cluster parameter group names, use the following command:\n  ``aws rds describe-db-cluster-parameter-groups --query \"DBClusterParameterGroups[].DBClusterParameterGroupName\" --output text`` \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"dbClusterResourceId":{"description":"The AWS Region -unique, immutable identifier for the DB cluster. This identifier is found in AWS CloudTrail log entries whenever the KMS key for the DB cluster is accessed.","type":"string"},"deletionProtection":{"description":"A value that indicates whether the DB cluster has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection is disabled.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"boolean"},"domain":{"description":"Indicates the directory ID of the Active Directory to create the DB cluster.\n For Amazon Aurora DB clusters, Amazon RDS can use Kerberos authentication to authenticate users that connect to the DB cluster.\n For more information, see [Kerberos authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/kerberos-authentication.html) in the *Amazon Aurora User Guide*.\n Valid for: Aurora DB clusters only","type":"string"},"domainIamRoleName":{"description":"Specifies the name of the IAM role to use when making API calls to the Directory Service.\n Valid for: Aurora DB clusters only","type":"string"},"enableCloudwatchLogsExports":{"description":"The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see [Publishing Database Logs to Amazon CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch) in the *Amazon Aurora User Guide*.\n  *Aurora MySQL* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Aurora PostgreSQL* \n Valid values: ``postgresql``\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","items":{"type":"string"},"type":"array"},"enableGlobalWriteForwarding":{"description":"Specifies whether to enable this DB cluster to forward write operations to the primary cluster of a global cluster (Aurora global database). By default, write operations are not allowed on Aurora DB clusters that are secondary clusters in an Aurora global database.\n You can set this value only on Aurora DB clusters that are members of an Aurora global database. With this parameter enabled, a secondary cluster can forward writes to the current primary cluster, and the resulting changes are replicated back to this cluster. For the primary DB cluster of an Aurora global database, this value is used immediately if the primary is demoted by a global cluster API operation, but it does nothing until then.\n Valid for Cluster Type: Aurora DB clusters only","type":"boolean"},"enableHttpEndpoint":{"description":"Specifies whether to enable the HTTP endpoint for the DB cluster. By default, the HTTP endpoint isn't enabled.\n When enabled, the HTTP endpoint provides a connectionless web service API (RDS Data API) for running SQL queries on the DB cluster. You can also query your database from inside the RDS console with the RDS query editor.\n For more information, see [Using RDS Data API](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/data-api.html) in the *Amazon Aurora User Guide*.\n Valid for Cluster Type: Aurora DB clusters only","type":"boolean"},"enableIamDatabaseAuthentication":{"description":"A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled.\n For more information, see [IAM Database Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.html) in the *Amazon Aurora User Guide.*\n Valid for: Aurora DB clusters only","type":"boolean"},"enableLocalWriteForwarding":{"description":"Specifies whether read replicas can forward write operations to the writer DB instance in the DB cluster. By default, write operations aren't allowed on reader DB instances.\n Valid for: Aurora DB clusters only","type":"boolean"},"endpoint":{"$ref":"#/types/aws-native:rds:DbClusterEndpoint"},"engine":{"description":"The name of the database engine to be used for this DB cluster.\n Valid Values:\n  +   ``aurora-mysql`` \n  +   ``aurora-postgresql`` \n  +   ``mysql`` \n  +   ``postgres`` \n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"engineLifecycleSupport":{"description":"The life cycle type for this DB cluster.\n  By default, this value is set to ``open-source-rds-extended-support``, which enrolls your DB cluster into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled``. In this case, creating the DB cluster will fail if the DB major version is past its end of standard support date.\n  You can use this setting to enroll your DB cluster into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB cluster past the end of standard support for that engine version. For more information, see the following sections:\n  +  Amazon Aurora - [Amazon RDS Extended Support with Amazon Aurora](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/extended-support.html) in the *Amazon Aurora User Guide*\n  +  Amazon RDS - [Amazon RDS Extended Support with Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html) in the *Amazon RDS User Guide*\n  \n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled``\n Default: ``open-source-rds-extended-support``","type":"string"},"engineVersion":{"description":"The version number of the database engine to use.\n  Don't use this property if your DB cluster is a member of a global database cluster. Instead, specify the ``EngineVersion`` property on the [AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html) resource. Major version upgrades aren't supported for individual members of a global cluster. Use ``ModifyGlobalCluster`` to upgrade all members of the global cluster.\n  To list all of the available engine versions for Aurora MySQL version 2 (5.7-compatible) and version 3 (8.0-compatible), use the following command:\n  ``aws rds describe-db-engine-versions --engine aurora-mysql --query \"DBEngineVersions[].EngineVersion\"`` \n You can supply either ``5.7`` or ``8.0`` to use the default engine version for Aurora MySQL version 2 or version 3, respectively.\n To list all of the available engine versions for Aurora PostgreSQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine aurora-postgresql --query \"DBEngineVersions[].EngineVersion\"`` \n To list all of the available engine versions for RDS for MySQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine mysql --query \"DBEngineVersions[].EngineVersion\"`` \n To list all of the available engine versions for RDS for PostgreSQL, use the following command:\n  ``aws rds describe-db-engine-versions --engine postgres --query \"DBEngineVersions[].EngineVersion\"`` \n  *Aurora MySQL* \n For information, see [Database engine updates for Amazon Aurora MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Updates.html) in the *Amazon Aurora User Guide*.\n  *Aurora PostgreSQL* \n For information, see [Amazon Aurora PostgreSQL releases and engine versions](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Updates.20180305.html) in the *Amazon Aurora User Guide*.\n  *MySQL* \n For information, see [Amazon RDS for MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt) in the *Amazon RDS User Guide*.\n  *PostgreSQL* \n For information, see [Amazon RDS for PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts) in the *Amazon RDS User Guide*.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"globalClusterIdentifier":{"description":"If you are configuring an Aurora global database cluster and want your Aurora DB cluster to be a secondary member in the global database cluster, specify the global cluster ID of the global database cluster. To define the primary database cluster of the global cluster, use the [AWS::RDS::GlobalCluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-globalcluster.html) resource. \n  If you aren't configuring a global database cluster, don't specify this property. \n  To remove the DB cluster from a global database cluster, specify an empty value for the ``GlobalClusterIdentifier`` property.\n  For information about Aurora global databases, see [Working with Amazon Aurora Global Databases](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-global-database.html) in the *Amazon Aurora User Guide*.\n Valid for: Aurora DB clusters only","type":"string"},"iops":{"description":"The amount of Provisioned IOPS (input/output operations per second) to be initially allocated for each DB instance in the Multi-AZ DB cluster.\n For information about valid IOPS values, see [Provisioned IOPS storage](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html#USER_PIOPS) in the *Amazon RDS User Guide*.\n This setting is required to create a Multi-AZ DB cluster.\n Valid for Cluster Type: Multi-AZ DB clusters only\n Constraints:\n  +  Must be a multiple between .5 and 50 of the storage amount for the DB cluster.","type":"integer"},"manageMasterUserPassword":{"description":"Specifies whether to manage the master user password with AWS Secrets Manager.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Constraints:\n  +  Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified.","type":"boolean"},"masterUserSecret":{"$ref":"#/types/aws-native:rds:DbClusterMasterUserSecret","description":"The secret managed by RDS in AWS Secrets Manager for the master user password.\n  When you restore a DB cluster from a snapshot, Amazon RDS generates a new secret instead of reusing the secret specified in the ``SecretArn`` property. This ensures that the restored DB cluster is securely managed with a dedicated secret. To maintain consistent integration with your application, you might need to update resource configurations to reference the newly created secret.\n  For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*"},"masterUsername":{"description":"The name of the master user for the DB cluster.\n  If you specify the ``SourceDBClusterIdentifier``, ``SnapshotIdentifier``, or ``GlobalClusterIdentifier`` property, don't specify this property. The value is inherited from the source DB cluster, the snapshot, or the primary DB cluster for the global database cluster, respectively.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"monitoringInterval":{"description":"The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB cluster. To turn off collecting Enhanced Monitoring metrics, specify ``0``.\n If ``MonitoringRoleArn`` is specified, also set ``MonitoringInterval`` to a value other than ``0``.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``\n Default: ``0``","type":"integer"},"monitoringRoleArn":{"description":"The Amazon Resource Name (ARN) for the IAM role that permits RDS to send Enhanced Monitoring metrics to Amazon CloudWatch Logs. An example is ``arn:aws:iam:123456789012:role/emaccess``. For information on creating a monitoring role, see [Setting up and enabling Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling) in the *Amazon RDS User Guide*.\n If ``MonitoringInterval`` is set to a value other than ``0``, supply a ``MonitoringRoleArn`` value.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"networkType":{"description":"The network type of the DB cluster.\n Valid values:\n  +   ``IPV4`` \n  +   ``DUAL`` \n  \n The network type is determined by the ``DBSubnetGroup`` specified for the DB cluster. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols (``DUAL``).\n For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the *Amazon Aurora User Guide.*\n Valid for: Aurora DB clusters only","type":"string"},"performanceInsightsEnabled":{"description":"Specifies whether to turn on Performance Insights for the DB cluster.\n For more information, see [Using Amazon Performance Insights](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html) in the *Amazon RDS User Guide*.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters","type":"boolean"},"performanceInsightsKmsKeyId":{"description":"The AWS KMS key identifier for encryption of Performance Insights data.\n The AWS KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.\n If you don't specify a value for ``PerformanceInsightsKMSKeyId``, then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS-account. Your AWS-account has a different default KMS key for each AWS-Region.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"performanceInsightsRetentionPeriod":{"description":"The number of days to retain Performance Insights data. When creating a DB cluster without enabling Performance Insights, you can't specify the parameter ``PerformanceInsightsRetentionPeriod``.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values:\n  +   ``7`` \n  +  *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31)\n  +   ``731`` \n  \n Default: ``7`` days\n If you specify a retention period that isn't valid, such as ``94``, Amazon RDS issues an error.","type":"integer"},"port":{"description":"The port number on which the DB instances in the DB cluster accept connections.\n Default:\n  +  RDS for MySQL and Aurora MySQL - ``3306``\n  +  RDS for PostgreSQL and Aurora PostgreSQL - ``5432``\n  \n  The ``No interruption`` on update behavior only applies to DB clusters. If you are updating a DB instance, see [Port](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port) for the AWS::RDS::DBInstance resource.\n  Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"integer"},"preferredBackupWindow":{"description":"The daily time range during which automated backups are created. For more information, see [Backup Window](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Managing.Backups.html#Aurora.Managing.Backups.BackupWindow) in the *Amazon Aurora User Guide.*\n Constraints:\n  +  Must be in the format ``hh24:mi-hh24:mi``.\n  +  Must be in Universal Coordinated Time (UTC).\n  +  Must not conflict with the preferred maintenance window.\n  +  Must be at least 30 minutes.\n  \n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"preferredMaintenanceWindow":{"description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n Format: ``ddd:hh24:mi-ddd:hh24:mi``\n The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see [Maintaining an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow.Aurora) in the *Amazon Aurora User Guide.*\n Valid Days: Mon, Tue, Wed, Thu, Fri, Sat, Sun.\n Constraints: Minimum 30-minute window.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","type":"string"},"readEndpoint":{"$ref":"#/types/aws-native:rds:DbClusterReadEndpoint"},"replicationSourceIdentifier":{"description":"The Amazon Resource Name (ARN) of the source DB instance or DB cluster if this DB cluster is created as a read replica.\n Valid for: Aurora DB clusters only","type":"string"},"scalingConfiguration":{"$ref":"#/types/aws-native:rds:DbClusterScalingConfiguration","description":"The scaling configuration of an Aurora Serverless v1 DB cluster.\n This property is only supported for Aurora Serverless v1. For Aurora Serverless v2, Use the ``ServerlessV2ScalingConfiguration`` property.\n Valid for: Aurora Serverless v1 DB clusters only"},"serverlessV2ScalingConfiguration":{"$ref":"#/types/aws-native:rds:DbClusterServerlessV2ScalingConfiguration","description":"The scaling configuration of an Aurora Serverless V2 DB cluster. \n This property is only supported for Aurora Serverless v2. For Aurora Serverless v1, Use the ``ScalingConfiguration`` property.\n Valid for: Aurora Serverless v2 DB clusters only"},"storageThroughput":{"description":"The storage throughput for the DB cluster. The throughput is automatically set based on the IOPS that you provision, and is not configurable.\n\nThis setting is only for non-Aurora Multi-AZ DB clusters.","type":"integer"},"storageType":{"description":"The storage type to associate with the DB cluster.\n For information on storage types for Aurora DB clusters, see [Storage configurations for Amazon Aurora DB clusters](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.StorageReliability.html#aurora-storage-type). For information on storage types for Multi-AZ DB clusters, see [Settings for creating Multi-AZ DB clusters](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/create-multi-az-db-cluster.html#create-multi-az-db-cluster-settings).\n This setting is required to create a Multi-AZ DB cluster.\n When specified for a Multi-AZ DB cluster, a value for the ``Iops`` parameter is required.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters\n Valid Values:\n  +  Aurora DB clusters - ``aurora | aurora-iopt1``\n  +  Multi-AZ DB clusters - ``io1 | io2 | gp3``\n  \n Default:\n  +  Aurora DB clusters - ``aurora``\n  +  Multi-AZ DB clusters - ``io1``\n  \n  When you create an Aurora DB cluster with the storage type set to ``aurora-iopt1``, the storage type is returned in the response. The storage type isn't returned when you set it to ``aurora``.","type":"string"},"tags":{"description":"Tags to assign to the DB cluster.\n Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcSecurityGroupIds":{"description":"A list of EC2 VPC security groups to associate with this DB cluster.\n If you plan to update the resource, don't specify VPC security groups in a shared VPC.\n Valid for: Aurora DB clusters and Multi-AZ DB clusters","items":{"type":"string"},"type":"array"}}}},"aws-native:rds:getDbClusterParameterGroup":{"description":"The ``AWS::RDS::DBClusterParameterGroup`` resource creates a new Amazon RDS DB cluster parameter group.\n For information about configuring parameters for Amazon Aurora DB clusters, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  If you apply a parameter group to a DB cluster, then its DB instances might need to reboot. This can result in an outage while the DB instances are rebooting.\n If you apply a change to parameter group associated with a stopped DB cluster, then the updated stack waits until the DB cluster is started.","inputs":{"properties":{"dbClusterParameterGroupName":{"type":"string","description":"The name of the DB cluster parameter group.\n Constraints:\n  +  Must not match the name of an existing DB cluster parameter group.\n  \n  This value is stored as a lowercase string."}},"required":["dbClusterParameterGroupName"]},"outputs":{"properties":{"parameters":{"$ref":"pulumi.json#/Any","description":"Provides a list of parameters for the DB cluster parameter group.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RDS::DBClusterParameterGroup` for more information about the expected schema for this property."},"tags":{"description":"Tags to assign to the DB cluster parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getDbInstance":{"description":"The ``AWS::RDS::DBInstance`` resource creates an Amazon DB instance. The new DB instance can be an RDS DB instance, or it can be a DB instance in an Aurora DB cluster.\n For more information about creating an RDS DB instance, see [Creating an Amazon RDS DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_CreateDBInstance.html) in the *Amazon RDS User Guide*.\n For more information about creating a DB instance in an Aurora DB cluster, see [Creating an Amazon Aurora DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.CreateInstance.html) in the *Amazon Aurora User Guide*.\n If you import an existing DB instance, and the template configuration doesn't match the actual configuration of the DB instance, AWS CloudFormation applies the changes in the template during the import operation.\n  If a DB instance is deleted or replaced during an update, AWS CloudFormation deletes all automated snapshots. However, it retains manual DB snapshots. During an update that requires replacement, you can apply a stack policy to prevent DB instances from being replaced. For more information, see [Prevent Updates to Stack Resources](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html).\n   *Updating DB instances* \n When properties labeled \"*Update requires:*[Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)\" are updated, AWS CloudFormation first creates a replacement DB instance, then changes references from other dependent resources to point to the replacement DB instance, and finally deletes the old DB instance.\n  We highly recommend that you take a snapshot of the database before updating the stack. If you don't, you lose the data when AWS CloudFormation replaces your DB instance. To preserve your data, perform the following procedure:\n  1.  Deactivate any applications that are using the DB instance so that there's no activity on the DB instance.\n  1.  Create a snapshot of the DB instance. For more information, see [Creating a DB Snapshot](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_CreateSnapshot.html).\n  1.  If you want to restore your instance using a DB snapshot, modify the updated template with your DB instance changes and add the ``DBSnapshotIdentifier`` property with the ID of the DB snapshot that you want to use.\n After you restore a DB instance with a ``DBSnapshotIdentifier`` property, you can delete the ``DBSnapshotIdentifier`` property. When you specify this property for an update, the DB instance is not restored from the DB snapshot again, and the data in the database is not changed. However, if you don't specify the ``DBSnapshotIdentifier`` property, an empty DB instance is created, and the original DB instance is deleted. If you specify a property that is different from the previous snapshot restore property, a new DB instance is restored from the specified ``DBSnapshotIdentifier`` property, and the original DB instance is deleted.\n  1.  Update the stack.\n  \n  For more information about updating other properties of this resource, see ``ModifyDBInstance``. For more information about updating stacks, see [CloudFormation Stacks Updates](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks.html).\n  *Deleting DB instances* \n For DB instances that are part of an Aurora DB cluster, you can set a deletion policy for your DB instance to control how AWS CloudFormation handles the DB instance when the stack is deleted. For Amazon RDS DB instances, you can choose to *retain* the DB instance, to *delete* the DB instance, or to *create a snapshot* of the DB instance. The default AWS CloudFormation behavior depends on the ``DBClusterIdentifier`` property:\n  1.  For ``AWS::RDS::DBInstance`` resources that don't specify the ``DBClusterIdentifier`` property, AWS CloudFormation saves a snapshot of the DB instance.\n  1.   For ``AWS::RDS::DBInstance`` resources that do specify the ``DBClusterIdentifier`` property, AWS CloudFormation deletes the DB instance.\n  \n  For more information, see [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html).","inputs":{"properties":{"dbInstanceIdentifier":{"type":"string","description":"A name for the DB instance. If you specify a name, AWS CloudFormation converts it to lowercase. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the DB instance. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).\n For information about constraints that apply to DB instance identifiers, see [Naming constraints in Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Limits.html#RDS_Limits.Constraints) in the *Amazon RDS User Guide*.\n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name."}},"required":["dbInstanceIdentifier"]},"outputs":{"properties":{"additionalStorageVolumes":{"description":"The additional storage volumes associated with the DB instance. RDS supports additional storage volumes for RDS for Oracle and RDS for SQL Server.","items":{"$ref":"#/types/aws-native:rds:DbInstanceAdditionalStorageVolume"},"type":"array"},"allocatedStorage":{"description":"The amount of storage in gibibytes (GiB) to be initially allocated for the database instance.\n  If any value is set in the ``Iops`` parameter, ``AllocatedStorage`` must be at least 100 GiB, which corresponds to the minimum Iops value of 1,000. If you increase the ``Iops`` value (in 1,000 IOPS increments), then you must also increase the ``AllocatedStorage`` value (in 100-GiB increments). \n   *Amazon Aurora* \n Not applicable. Aurora cluster volumes automatically grow as the amount of data in your database increases, though you are only charged for the space that you use in an Aurora cluster volume.\n  *Db2* \n Constraints to the amount of storage for each storage type are the following:\n  +  General Purpose (SSD) storage (gp3): Must be an integer from 20 to 64000.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 64000.\n  \n  *MySQL* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *MariaDB* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *PostgreSQL* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 5 to 3072.\n  \n  *Oracle* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2): Must be an integer from 20 to 65536.\n  +  Provisioned IOPS storage (io1): Must be an integer from 100 to 65536.\n  +  Magnetic storage (standard): Must be an integer from 10 to 3072.\n  \n  *SQL Server* \n Constraints to the amount of storage for each storage type are the following: \n  +  General Purpose (SSD) storage (gp2):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 16384.\n  +  Web and Express editions: Must be an integer from 20 to 16384.\n  \n  +  Provisioned IOPS storage (io1):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 16384.\n  +  Web and Express editions: Must be an integer from 20 to 16384.\n  \n  +  Magnetic storage (standard):\n  +  Enterprise and Standard editions: Must be an integer from 20 to 1024.\n  +  Web and Express editions: Must be an integer from 20 to 1024.","type":"string"},"associatedRoles":{"description":"The IAMlong (IAM) roles associated with the DB instance. \n  *Amazon Aurora* \n Not applicable. The associated roles are managed by the DB cluster.","items":{"$ref":"#/types/aws-native:rds:DbInstanceDbInstanceRole"},"type":"array"},"autoMinorVersionUpgrade":{"description":"A value that indicates whether minor engine upgrades are applied automatically to the DB instance during the maintenance window. By default, minor engine upgrades are applied automatically.","type":"boolean"},"automaticBackupReplicationRegion":{"description":"The AWS-Region associated with the automated backup.","type":"string"},"automaticBackupReplicationRetentionPeriod":{"description":"The retention period for automated backups in a different AWS Region. Use this parameter to set a unique retention period that only applies to cross-Region automated backups. To enable automated backups in a different Region, specify a positive value for the ``AutomaticBackupReplicationRegion`` parameter. \n If not specified, this parameter defaults to the value of the ``BackupRetentionPeriod`` parameter. The maximum allowed value is 35.","type":"integer"},"automaticRestartTime":{"description":"The time when a stopped DB instance is restarted automatically.","type":"string"},"availabilityZone":{"description":"The Availability Zone (AZ) where the database will be created. For information on AWS-Regions and Availability Zones, see [Regions and Availability Zones](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html).\n For Amazon Aurora, each Aurora DB cluster hosts copies of its storage in three separate Availability Zones. Specify one of these Availability Zones. Aurora automatically chooses an appropriate Availability Zone if you don't specify one.\n Default: A random, system-chosen Availability Zone in the endpoint's AWS-Region.\n Constraints:\n  +  The ``AvailabilityZone`` parameter can't be specified if the DB instance is a Multi-AZ deployment.\n  +  The specified Availability Zone must be in the same AWS-Region as the current endpoint.\n  \n Example: ``us-east-1d``","type":"string"},"backupRetentionPeriod":{"description":"The number of days for which automated backups are retained. Setting this parameter to a positive number enables backups. Setting this parameter to 0 disables automated backups.\n  *Amazon Aurora* \n Not applicable. The retention period for automated backups is managed by the DB cluster.\n Default: 1\n Constraints:\n  +  Must be a value from 0 to 35\n  +  Can't be set to 0 if the DB instance is a source to read replicas","type":"integer"},"caCertificateIdentifier":{"description":"The identifier of the CA certificate for this DB instance.\n For more information, see [Using SSL/TLS to encrypt a connection to a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html) in the *Amazon RDS User Guide* and [Using SSL/TLS to encrypt a connection to a DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html) in the *Amazon Aurora User Guide*.","type":"string"},"certificateDetails":{"$ref":"#/types/aws-native:rds:DbInstanceCertificateDetails"},"copyTagsToSnapshot":{"description":"Specifies whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied.\n This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting.","type":"boolean"},"databaseInsightsMode":{"description":"The mode of Database Insights to enable for the DB instance.\n  Aurora DB instances inherit this value from the DB cluster, so you can't change this value.","type":"string"},"dbClusterSnapshotIdentifier":{"description":"The identifier for the Multi-AZ DB cluster snapshot to restore from.\n For more information on Multi-AZ DB clusters, see [Multi-AZ DB cluster deployments](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/multi-az-db-clusters-concepts.html) in the *Amazon RDS User Guide*.\n Constraints:\n  +  Must match the identifier of an existing Multi-AZ DB cluster snapshot.\n  +  Can't be specified when ``DBSnapshotIdentifier`` is specified.\n  +  Must be specified when ``DBSnapshotIdentifier`` isn't specified.\n  +  If you are restoring from a shared manual Multi-AZ DB cluster snapshot, the ``DBClusterSnapshotIdentifier`` must be the ARN of the shared snapshot.\n  +  Can't be the identifier of an Aurora DB cluster snapshot.","type":"string"},"dbInstanceArn":{"description":"The Amazon Resource Name (ARN) for the DB instance.","type":"string"},"dbInstanceClass":{"description":"The compute and memory capacity of the DB instance, for example ``db.m5.large``. Not all DB instance classes are available in all AWS-Regions, or for all database engines. For the full list of DB instance classes, and availability for your engine, see [DB instance classes](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBInstanceClass.html) in the *Amazon RDS User Guide* or [Aurora DB instance classes](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.DBInstanceClass.html) in the *Amazon Aurora User Guide*.","type":"string"},"dbInstanceStatus":{"description":"The current state of this DB instance.","type":"string"},"dbParameterGroupName":{"description":"The name of an existing DB parameter group or a reference to an [AWS::RDS::DBParameterGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbparametergroup.html) resource created in the template.\n To list all of the available DB parameter group names, use the following command:\n  ``aws rds describe-db-parameter-groups --query \"DBParameterGroups[].DBParameterGroupName\" --output text`` \n  If any of the data members of the referenced parameter group are changed during an update, the DB instance might need to be restarted, which causes some interruption. If the parameter group contains static parameters, whether they were changed or not, an update triggers a reboot.\n  If you don't specify a value for ``DBParameterGroupName`` property, the default DB parameter group for the specified engine and engine version is used.","type":"string"},"dbSecurityGroups":{"description":"A list of the DB security groups to assign to the DB instance. The list can include both the name of existing DB security groups or references to AWS::RDS::DBSecurityGroup resources created in the template.\n  If you set DBSecurityGroups, you must not set VPCSecurityGroups, and vice versa. Also, note that the DBSecurityGroups property exists only for backwards compatibility with older regions and is no longer recommended for providing security information to an RDS DB instance. Instead, use VPCSecurityGroups.\n  If you specify this property, AWS CloudFormation sends only the following properties (if specified) to Amazon RDS during create operations:\n  +   ``AllocatedStorage`` \n  +   ``AutoMinorVersionUpgrade`` \n  +   ``AvailabilityZone`` \n  +   ``BackupRetentionPeriod`` \n  +   ``CharacterSetName`` \n  +   ``DBInstanceClass`` \n  +   ``DBName`` \n  +   ``DBParameterGroupName`` \n  +   ``DBSecurityGroups`` \n  +   ``DBSubnetGroupName`` \n  +   ``Engine`` \n  +   ``EngineVersion`` \n  +   ``Iops`` \n  +   ``LicenseModel`` \n  +   ``MasterUsername`` \n  +   ``MasterUserPassword`` \n  +   ``MultiAZ`` \n  +   ``OptionGroupName`` \n  +   ``PreferredBackupWindow`` \n  +   ``PreferredMaintenanceWindow`` \n  \n All other properties are ignored. Specify a virtual private cloud (VPC) security group if you want to submit other properties, such as ``StorageType``, ``StorageEncrypted``, or ``KmsKeyId``. If you're already using the ``DBSecurityGroups`` property, you can't use these other properties by updating your DB instance to use a VPC security group. You must recreate the DB instance.","items":{"type":"string"},"type":"array"},"dbiResourceId":{"description":"The AWS Region-unique, immutable identifier for the DB instance. This identifier is found in AWS CloudTrail log entries whenever the AWS KMS key for the DB instance is accessed.","type":"string"},"dedicatedLogVolume":{"description":"Indicates whether the DB instance has a dedicated log volume (DLV) enabled.","type":"boolean"},"deletionProtection":{"description":"Specifies whether the DB instance has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection isn't enabled. For more information, see [Deleting a DB Instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html).\n This setting doesn't apply to Amazon Aurora DB instances. You can enable or disable deletion protection for the DB cluster. For more information, see ``CreateDBCluster``. DB instances in a DB cluster can be deleted even when deletion protection is enabled for the DB cluster.","type":"boolean"},"domain":{"description":"The Active Directory directory ID to create the DB instance in. Currently, only Db2, MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances can be created in an Active Directory Domain.\n For more information, see [Kerberos Authentication](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html) in the *Amazon RDS User Guide*.","type":"string"},"domainAuthSecretArn":{"description":"The ARN for the Secrets Manager secret with the credentials for the user joining the domain.\n Example: ``arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456``","type":"string"},"domainDnsIps":{"description":"The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers.\n Constraints:\n  +  Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list.\n  \n Example: ``123.124.125.126,234.235.236.237``","items":{"type":"string"},"type":"array"},"domainFqdn":{"description":"The fully qualified domain name (FQDN) of an Active Directory domain.\n Constraints:\n  +  Can't be longer than 64 characters.\n  \n Example: ``mymanagedADtest.mymanagedAD.mydomain``","type":"string"},"domainIamRoleName":{"description":"The name of the IAM role to use when making API calls to the Directory Service.\n This setting doesn't apply to the following DB instances:\n  +  Amazon Aurora (The domain is managed by the DB cluster.)\n  +  RDS Custom","type":"string"},"domainOu":{"description":"The Active Directory organizational unit for your DB instance to join.\n Constraints:\n  +  Must be in the distinguished name format.\n  +  Can't be longer than 64 characters.\n  \n Example: ``OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain``","type":"string"},"enableCloudwatchLogsExports":{"description":"The list of log types that need to be enabled for exporting to CloudWatch Logs. The values in the list depend on the DB engine being used. For more information, see [Publishing Database Logs to Amazon CloudWatch Logs](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch) in the *Amazon Relational Database Service User Guide*.\n  *Amazon Aurora* \n Not applicable. CloudWatch Logs exports are managed by the DB cluster. \n  *Db2* \n Valid values: ``diag.log``, ``notify.log``\n  *MariaDB* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Microsoft SQL Server* \n Valid values: ``agent``, ``error``\n  *MySQL* \n Valid values: ``audit``, ``error``, ``general``, ``slowquery``\n  *Oracle* \n Valid values: ``alert``, ``audit``, ``listener``, ``trace``, ``oemagent``\n  *PostgreSQL* \n Valid values: ``postgresql``, ``upgrade``","items":{"type":"string"},"type":"array"},"enableIamDatabaseAuthentication":{"description":"A value that indicates whether to enable mapping of AWS Identity and Access Management (IAM) accounts to database accounts. By default, mapping is disabled.\n This property is supported for RDS for MariaDB, RDS for MySQL, and RDS for PostgreSQL. For more information, see [IAM Database Authentication for MariaDB, MySQL, and PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.IAMDBAuth.html) in the *Amazon RDS User Guide.*\n  *Amazon Aurora* \n Not applicable. Mapping AWS IAM accounts to database accounts is managed by the DB cluster.","type":"boolean"},"enablePerformanceInsights":{"description":"Specifies whether to enable Performance Insights for the DB instance. For more information, see [Using Amazon Performance Insights](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html) in the *Amazon RDS User Guide*.\n This setting doesn't apply to RDS Custom DB instances.","type":"boolean"},"endpoint":{"$ref":"#/types/aws-native:rds:DbInstanceEndpoint"},"engine":{"description":"The name of the database engine to use for this DB instance. Not every database engine is available in every AWS Region.\n This property is required when creating a DB instance.\n  You can convert an Oracle database from the non-CDB architecture to the container database (CDB) architecture by updating the ``Engine`` value in your templates from ``oracle-ee`` to ``oracle-ee-cdb`` or from ``oracle-se2`` to ``oracle-se2-cdb``. Converting to the CDB architecture requires an interruption.\n  Valid Values:\n  +  ``aurora-mysql`` (for Aurora MySQL DB instances)\n  +  ``aurora-postgresql`` (for Aurora PostgreSQL DB instances)\n  +  ``custom-oracle-ee`` (for RDS Custom for Oracle DB instances)\n  +  ``custom-oracle-ee-cdb`` (for RDS Custom for Oracle DB instances)\n  +  ``custom-sqlserver-ee`` (for RDS Custom for SQL Server DB instances)\n  +  ``custom-sqlserver-se`` (for RDS Custom for SQL Server DB instances)\n  +  ``custom-sqlserver-web`` (for RDS Custom for SQL Server DB instances)\n  +   ``db2-ae`` \n  +   ``db2-se`` \n  +   ``mariadb`` \n  +   ``mysql`` \n  +   ``oracle-ee`` \n  +   ``oracle-ee-cdb`` \n  +   ``oracle-se2`` \n  +   ``oracle-se2-cdb`` \n  +   ``postgres`` \n  +   ``sqlserver-ee`` \n  +   ``sqlserver-se`` \n  +   ``sqlserver-ex`` \n  +   ``sqlserver-web``","type":"string"},"engineLifecycleSupport":{"description":"The life cycle type for this DB instance.\n  By default, this value is set to ``open-source-rds-extended-support``, which enrolls your DB instance into Amazon RDS Extended Support. At the end of standard support, you can avoid charges for Extended Support by setting the value to ``open-source-rds-extended-support-disabled``. In this case, creating the DB instance will fail if the DB major version is past its end of standard support date.\n  This setting applies only to RDS for MySQL and RDS for PostgreSQL. For Amazon Aurora DB instances, the life cycle type is managed by the DB cluster.\n You can use this setting to enroll your DB instance into Amazon RDS Extended Support. With RDS Extended Support, you can run the selected major engine version on your DB instance past the end of standard support for that engine version. For more information, see [Amazon RDS Extended Support with Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html) in the *Amazon RDS User Guide*.\n Valid Values: ``open-source-rds-extended-support | open-source-rds-extended-support-disabled``\n Default: ``open-source-rds-extended-support``","type":"string"},"engineVersion":{"description":"The version number of the database engine to use.\n For a list of valid engine versions, use the ``DescribeDBEngineVersions`` action.\n The following are the database engines and links to information about the major and minor versions that are available with Amazon RDS. Not every database engine is available for every AWS Region.\n  *Amazon Aurora* \n Not applicable. The version number of the database engine to be used by the DB instance is managed by the DB cluster.\n  *Db2* \n See [Amazon RDS for Db2](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Db2.html#Db2.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *MariaDB* \n See [MariaDB on Amazon RDS Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MariaDB.html#MariaDB.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *Microsoft SQL Server* \n See [Microsoft SQL Server Versions on Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_SQLServer.html#SQLServer.Concepts.General.VersionSupport) in the *Amazon RDS User Guide.*\n  *MySQL* \n See [MySQL on Amazon RDS Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_MySQL.html#MySQL.Concepts.VersionMgmt) in the *Amazon RDS User Guide.*\n  *Oracle* \n See [Oracle Database Engine Release Notes](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.PatchComposition.html) in the *Amazon RDS User Guide.*\n  *PostgreSQL* \n See [Supported PostgreSQL Database Versions](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.DBVersions) in the *Amazon RDS User Guide.*","type":"string"},"instanceCreateTime":{"description":"The date and time when the DB instance was created.","type":"string"},"iops":{"description":"The number of I/O operations per second (IOPS) that the database provisions. The value must be equal to or greater than 1000. \n If you specify this property, you must follow the range of allowed ratios of your requested IOPS rate to the amount of storage that you allocate (IOPS to allocated storage). For example, you can provision an Oracle database instance with 1000 IOPS and 200 GiB of storage (a ratio of 5:1), or specify 2000 IOPS with 200 GiB of storage (a ratio of 10:1). For more information, see [Amazon RDS Provisioned IOPS Storage to Improve Performance](https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/CHAP_Storage.html#USER_PIOPS) in the *Amazon RDS User Guide*.\n  If you specify ``io1`` for the ``StorageType`` property, then you must also specify the ``Iops`` property.\n  Constraints:\n  +  For RDS for Db2, MariaDB, MySQL, Oracle, and PostgreSQL - Must be a multiple between .5 and 50 of the storage amount for the DB instance.\n  +  For RDS for SQL Server - Must be a multiple between 1 and 50 of the storage amount for the DB instance.","type":"integer"},"isStorageConfigUpgradeAvailable":{"description":"Indicates whether an upgrade is recommended for the storage file system configuration on the DB instance.","type":"boolean"},"latestRestorableTime":{"description":"The latest time to which a database in this DB instance can be restored with point-in-time restore.","type":"string"},"licenseModel":{"description":"License model information for this DB instance.\n  Valid Values:\n  +  Aurora MySQL - ``general-public-license``\n  +  Aurora PostgreSQL - ``postgresql-license``\n  +  RDS for Db2 - ``bring-your-own-license``. For more information about RDS for Db2 licensing, see [](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/db2-licensing.html) in the *Amazon RDS User Guide.*\n  +  RDS for MariaDB - ``general-public-license``\n  +  RDS for Microsoft SQL Server - ``license-included``\n  +  RDS for MySQL - ``general-public-license``\n  +  RDS for Oracle - ``bring-your-own-license`` or ``license-included``\n  +  RDS for PostgreSQL - ``postgresql-license``\n  \n  If you've specified ``DBSecurityGroups`` and then you update the license model, AWS CloudFormation replaces the underlying DB instance. This will incur some interruptions to database availability.","type":"string"},"listenerEndpoint":{"$ref":"#/types/aws-native:rds:DbInstanceEndpoint"},"manageMasterUserPassword":{"description":"Specifies whether to manage the master user password with AWS Secrets Manager.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide.*\n Constraints:\n  +  Can't manage the master user password with AWS Secrets Manager if ``MasterUserPassword`` is specified.","type":"boolean"},"masterUserSecret":{"$ref":"#/types/aws-native:rds:DbInstanceMasterUserSecret","description":"The secret managed by RDS in AWS Secrets Manager for the master user password.\n For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide.*"},"maxAllocatedStorage":{"description":"The upper limit in gibibytes (GiB) to which Amazon RDS can automatically scale the storage of the DB instance.\n For more information about this setting, including limitations that apply to it, see [Managing capacity automatically with Amazon RDS storage autoscaling](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.StorageTypes.html#USER_PIOPS.Autoscaling) in the *Amazon RDS User Guide*.\n This setting doesn't apply to the following DB instances:\n  +  Amazon Aurora (Storage is managed by the DB cluster.)\n  +  RDS Custom","type":"integer"},"monitoringInterval":{"description":"The interval, in seconds, between points when Enhanced Monitoring metrics are collected for the DB instance. To disable collection of Enhanced Monitoring metrics, specify ``0``.\n If ``MonitoringRoleArn`` is specified, then you must set ``MonitoringInterval`` to a value other than ``0``.\n This setting doesn't apply to RDS Custom DB instances.\n Valid Values: ``0 | 1 | 5 | 10 | 15 | 30 | 60``\n Default: ``0``","type":"integer"},"monitoringRoleArn":{"description":"The ARN for the IAM role that permits RDS to send enhanced monitoring metrics to Amazon CloudWatch Logs. For example, ``arn:aws:iam:123456789012:role/emaccess``. For information on creating a monitoring role, see [Setting Up and Enabling Enhanced Monitoring](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.html#USER_Monitoring.OS.Enabling) in the *Amazon RDS User Guide*.\n If ``MonitoringInterval`` is set to a value other than ``0``, then you must supply a ``MonitoringRoleArn`` value.\n This setting doesn't apply to RDS Custom DB instances.","type":"string"},"multiAz":{"description":"Specifies whether the DB instance is a Multi-AZ deployment. You can't set the ``AvailabilityZone`` parameter if the DB instance is a Multi-AZ deployment.\n This setting doesn't apply to Amazon Aurora because the DB instance Availability Zones (AZs) are managed by the DB cluster.","type":"boolean"},"networkType":{"description":"The network type of the DB instance.\n Valid values:\n  +   ``IPV4`` \n  +   ``DUAL`` \n  \n The network type is determined by the ``DBSubnetGroup`` specified for the DB instance. A ``DBSubnetGroup`` can support only the IPv4 protocol or the IPv4 and IPv6 protocols (``DUAL``).\n For more information, see [Working with a DB instance in a VPC](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html) in the *Amazon RDS User Guide.*","type":"string"},"optionGroupName":{"description":"Indicates that the DB instance should be associated with the specified option group.\n Permanent options, such as the TDE option for Oracle Advanced Security TDE, can't be removed from an option group. Also, that option group can't be removed from a DB instance once it is associated with a DB instance.","type":"string"},"percentProgress":{"description":"The progress of the storage optimization operation as a percentage.","type":"string"},"performanceInsightsKmsKeyId":{"description":"The AWS KMS key identifier for encryption of Performance Insights data.\n The KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key.\n If you do not specify a value for ``PerformanceInsightsKMSKeyId``, then Amazon RDS uses your default KMS key. There is a default KMS key for your AWS account. Your AWS account has a different default KMS key for each AWS Region.\n  *Update behavior:* Once Performance Insights is enabled with a KMS key, you cannot change to a different physical KMS key without replacing the DB instance. However, the following updates do not require replacement:\n  +  Enabling or disabling Performance Insights using the ``EnablePerformanceInsights`` property\n  +  Changing between different identifier formats (key ARN, key ID, alias ARN, alias name) of the same physical KMS key\n  +  Removing the ``PerformanceInsightsKMSKeyId`` property from your template\n  \n   *Drift behavior:* If you specify ``PerformanceInsightsKMSKeyId`` while ``EnablePerformanceInsights`` is set to ``false``, CloudFormation will report drift. This occurs because the RDS API does not allow setting a KMS key when Performance Insights is disabled. CloudFormation ignores the ``PerformanceInsightsKMSKeyId`` value during instance creation to avoid API errors, resulting in a mismatch between your template and the actual instance configuration.\n To avoid drift, omit both ``EnablePerformanceInsights`` and ``PerformanceInsightsKMSKeyId`` during initial instance creation, then set both properties together when you're ready to enable Performance Insights.\n  For information about enabling Performance Insights, see [EnablePerformanceInsights](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-enableperformanceinsights).","type":"string"},"performanceInsightsRetentionPeriod":{"description":"The number of days to retain Performance Insights data. When creating a DB instance without enabling Performance Insights, you can't specify the parameter ``PerformanceInsightsRetentionPeriod``.\n This setting doesn't apply to RDS Custom DB instances.\n Valid Values:\n  +   ``7`` \n  +  *month* * 31, where *month* is a number of months from 1-23. Examples: ``93`` (3 months * 31), ``341`` (11 months * 31), ``589`` (19 months * 31)\n  +   ``731`` \n  \n Default: ``7`` days\n If you specify a retention period that isn't valid, such as ``94``, Amazon RDS returns an error.","type":"integer"},"port":{"description":"The port number on which the database accepts connections.\n This setting doesn't apply to Aurora DB instances. The port number is managed by the cluster.\n Valid Values: ``1150-65535``\n Default:\n  +  RDS for Db2 - ``50000``\n  +  RDS for MariaDB - ``3306``\n  +  RDS for Microsoft SQL Server - ``1433``\n  +  RDS for MySQL - ``3306``\n  +  RDS for Oracle - ``1521``\n  +  RDS for PostgreSQL - ``5432``\n  \n Constraints:\n  +  For RDS for Microsoft SQL Server, the value can't be ``1234``, ``1434``, ``3260``, ``3343``, ``3389``, ``47001``, or ``49152-49156``.","type":"string"},"preferredBackupWindow":{"description":"The daily time range during which automated backups are created if automated backups are enabled, using the ``BackupRetentionPeriod`` parameter. For more information, see [Backup Window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithAutomatedBackups.html#USER_WorkingWithAutomatedBackups.BackupWindow) in the *Amazon RDS User Guide.*\n Constraints:\n  +  Must be in the format ``hh24:mi-hh24:mi``.\n  +  Must be in Universal Coordinated Time (UTC).\n  +  Must not conflict with the preferred maintenance window.\n  +  Must be at least 30 minutes.\n  \n  *Amazon Aurora* \n Not applicable. The daily time range for creating automated backups is managed by the DB cluster.","type":"string"},"preferredMaintenanceWindow":{"description":"The weekly time range during which system maintenance can occur, in Universal Coordinated Time (UTC).\n Format: ``ddd:hh24:mi-ddd:hh24:mi``\n The default is a 30-minute window selected at random from an 8-hour block of time for each AWS Region, occurring on a random day of the week. To see the time blocks available, see [Maintaining a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Maintenance.html#AdjustingTheMaintenanceWindow) in the *Amazon RDS User Guide.*\n  This property applies when AWS CloudFormation initially creates the DB instance. If you use AWS CloudFormation to update the DB instance, those updates are applied immediately.\n  Constraints: Minimum 30-minute window.","type":"string"},"processorFeatures":{"description":"The number of CPU cores and the number of threads per core for the DB instance class of the DB instance.\n This setting doesn't apply to Amazon Aurora or RDS Custom DB instances.","items":{"$ref":"#/types/aws-native:rds:DbInstanceProcessorFeature"},"type":"array"},"promotionTier":{"description":"The order of priority in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance. For more information, see [Fault Tolerance for an Aurora DB Cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Concepts.AuroraHighAvailability.html#Aurora.Managing.FaultTolerance) in the *Amazon Aurora User Guide*.\n This setting doesn't apply to RDS Custom DB instances.\n Default: ``1``\n Valid Values: ``0 - 15``","type":"integer"},"publiclyAccessible":{"description":"Indicates whether the DB instance is an internet-facing instance. If you specify true, AWS CloudFormation creates an instance with a publicly resolvable DNS name, which resolves to a public IP address. If you specify false, AWS CloudFormation creates an internal instance with a DNS name that resolves to a private IP address. \n The default behavior value depends on your VPC setup and the database subnet group. For more information, see the ``PubliclyAccessible`` parameter in the [CreateDBInstance](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html) in the *Amazon RDS API Reference*.","type":"boolean"},"readReplicaDbClusterIdentifiers":{"description":"The identifiers of Aurora DB clusters to which the RDS DB instance is replicated as a read replica.","items":{"type":"string"},"type":"array"},"readReplicaDbInstanceIdentifiers":{"description":"The identifiers of the read replicas associated with this DB instance.","items":{"type":"string"},"type":"array"},"replicaMode":{"description":"The open mode of an Oracle read replica. For more information, see [Working with Oracle Read Replicas for Amazon RDS](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html) in the *Amazon RDS User Guide*.\n This setting is only supported in RDS for Oracle.\n Default: ``open-read-only``\n Valid Values: ``open-read-only`` or ``mounted``","type":"string"},"resumeFullAutomationModeTime":{"description":"The number of minutes to pause the automation. When the time period ends, RDS Custom resumes full automation. The minimum value is 60 (default). The maximum value is 1,440.","type":"string"},"secondaryAvailabilityZone":{"description":"If present, specifies the name of the secondary Availability Zone for a DB instance with multi-AZ support.","type":"string"},"sourceDbClusterIdentifier":{"description":"The identifier of the Multi-AZ DB cluster that will act as the source for the read replica. Each DB cluster can have up to 15 read replicas.\n Constraints:\n  +  Must be the identifier of an existing Multi-AZ DB cluster.\n  +  Can't be specified if the ``SourceDBInstanceIdentifier`` parameter is also specified.\n  +  The specified DB cluster must have automatic backups enabled, that is, its backup retention period must be greater than 0.\n  +  The source DB cluster must be in the same AWS-Region as the read replica. Cross-Region replication isn't supported.","type":"string"},"statusInfos":{"description":"The status of a read replica. If the DB instance isn't a read replica, the value is blank.","items":{"$ref":"#/types/aws-native:rds:DbInstanceDbInstanceStatusInfo"},"type":"array"},"storageThroughput":{"description":"Specifies the storage throughput value, in mebibyte per second (MiBps), for the DB instance. This setting applies only to the ``gp3`` storage type. \n This setting doesn't apply to RDS Custom or Amazon Aurora.","type":"integer"},"storageType":{"description":"The storage type to associate with the DB instance.\n If you specify ``io1``, ``io2``, or ``gp3``, you must also include a value for the ``Iops`` parameter.\n This setting doesn't apply to Amazon Aurora DB instances. Storage is managed by the DB cluster.\n Valid Values: ``gp2 | gp3 | io1 | io2 | standard``\n Default: ``io1``, if the ``Iops`` parameter is specified. Otherwise, ``gp3``.","type":"string"},"tags":{"description":"Tags to assign to the DB instance.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tdeCredentialArn":{"type":"string"},"vpcSecurityGroups":{"description":"A list of the VPC security group IDs to assign to the DB instance. The list can include both the physical IDs of existing VPC security groups and references to [AWS::EC2::SecurityGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html) resources created in the template.\n If you plan to update the resource, don't specify VPC security groups in a shared VPC.\n  If you set ``VPCSecurityGroups``, you must not set [DBSecurityGroups](https://docs.aws.amazon.com//AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsecuritygroups), and vice versa.\n  You can migrate a DB instance in your stack from an RDS DB security group to a VPC security group, but keep the following in mind:\n  +  You can't revert to using an RDS security group after you establish a VPC security group membership.\n  +  When you migrate your DB instance to VPC security groups, if your stack update rolls back because the DB instance update fails or because an update fails in another AWS CloudFormation resource, the rollback fails because it can't revert to an RDS security group.\n  +  To use the properties that are available when you use a VPC security group, you must recreate the DB instance. If you don't, AWS CloudFormation submits only the property values that are listed in the [DBSecurityGroups](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsecuritygroups) property.\n  \n  To avoid this situation, migrate your DB instance to using VPC security groups only when that is the only change in your stack template. \n  *Amazon Aurora* \n Not applicable. The associated list of EC2 VPC security groups is managed by the DB cluster. If specified, the setting must match the DB cluster setting.","items":{"type":"string"},"type":"array"}}}},"aws-native:rds:getDbParameterGroup":{"description":"The ``AWS::RDS::DBParameterGroup`` resource creates a custom parameter group for an RDS database family.\n This type can be declared in a template and referenced in the ``DBParameterGroupName`` property of an ``AWS::RDS::DBInstance`` resource.\n For information about configuring parameters for Amazon RDS DB instances, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide*.\n For information about configuring parameters for Amazon Aurora DB instances, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  Applying a parameter group to a DB instance may require the DB instance to reboot, resulting in a database outage for the duration of the reboot.","inputs":{"properties":{"dbParameterGroupName":{"type":"string","description":"The name of the DB parameter group.\n Constraints:\n  +  Must be 1 to 255 letters, numbers, or hyphens.\n  +  First character must be a letter\n  +  Can't end with a hyphen or contain two consecutive hyphens\n  \n If you don't specify a value for ``DBParameterGroupName`` property, a name is automatically created for the DB parameter group.\n  This value is stored as a lowercase string."}},"required":["dbParameterGroupName"]},"outputs":{"properties":{"parameters":{"$ref":"pulumi.json#/Any","description":"A mapping of parameter names and values for the parameter update. You must specify at least one parameter name and value.\n For more information about parameter groups, see [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithParamGroups.html) in the *Amazon RDS User Guide*, or [Working with parameter groups](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_WorkingWithParamGroups.html) in the *Amazon Aurora User Guide*.\n  AWS CloudFormation doesn't support specifying an apply method for each individual parameter. The default apply method for each parameter is used.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RDS::DBParameterGroup` for more information about the expected schema for this property."},"tags":{"description":"Tags to assign to the DB parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getDbProxy":{"description":"Resource schema for AWS::RDS::DBProxy","inputs":{"properties":{"dbProxyName":{"type":"string","description":"The identifier for the proxy. This name must be unique for all proxies owned by your AWS account in the specified AWS Region."}},"required":["dbProxyName"]},"outputs":{"properties":{"auth":{"description":"The authorization mechanism that the proxy uses.","items":{"$ref":"#/types/aws-native:rds:DbProxyAuthFormat"},"type":"array"},"dbProxyArn":{"description":"The Amazon Resource Name (ARN) for the proxy.","type":"string"},"debugLogging":{"description":"Whether the proxy includes detailed information about SQL statements in its logs.","type":"boolean"},"defaultAuthScheme":{"$ref":"#/types/aws-native:rds:DbProxyDefaultAuthScheme","description":"The default authentication scheme that the proxy uses for client connections to the proxy and connections from the proxy to the underlying database."},"endpoint":{"description":"The endpoint that you can use to connect to the proxy. You include the endpoint value in the connection string for a database client application.","type":"string"},"idleClientTimeout":{"description":"The number of seconds that a connection to the proxy can be inactive before the proxy disconnects it.","type":"integer"},"requireTls":{"description":"A Boolean parameter that specifies whether Transport Layer Security (TLS) encryption is required for connections to the proxy.","type":"boolean"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role that the proxy uses to access secrets in AWS Secrets Manager.","type":"string"},"tags":{"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the proxy.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"VPC ID to associate with the new DB proxy.","type":"string"},"vpcSecurityGroupIds":{"description":"VPC security group IDs to associate with the new proxy.","items":{"type":"string"},"type":"array"}}}},"aws-native:rds:getDbProxyEndpoint":{"description":"Resource schema for AWS::RDS::DBProxyEndpoint.","inputs":{"properties":{"dbProxyEndpointName":{"type":"string","description":"The identifier for the DB proxy endpoint. This name must be unique for all DB proxy endpoints owned by your AWS account in the specified AWS Region."}},"required":["dbProxyEndpointName"]},"outputs":{"properties":{"dbProxyEndpointArn":{"description":"The Amazon Resource Name (ARN) for the DB proxy endpoint.","type":"string"},"endpoint":{"description":"The endpoint that you can use to connect to the DB proxy. You include the endpoint value in the connection string for a database client application.","type":"string"},"isDefault":{"description":"A value that indicates whether this endpoint is the default endpoint for the associated DB proxy. Default DB proxy endpoints always have read/write capability. Other endpoints that you associate with the DB proxy can be either read/write or read-only.","type":"boolean"},"tags":{"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the DB proxy endpoint.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetRole":{"$ref":"#/types/aws-native:rds:DbProxyEndpointTargetRole","description":"A value that indicates whether the DB proxy endpoint can be used for read/write or read-only operations."},"vpcId":{"description":"VPC ID to associate with the new DB proxy endpoint.","type":"string"},"vpcSecurityGroupIds":{"description":"VPC security group IDs to associate with the new DB proxy endpoint.","items":{"type":"string"},"type":"array"}}}},"aws-native:rds:getDbProxyTargetGroup":{"description":"Resource schema for AWS::RDS::DBProxyTargetGroup","inputs":{"properties":{"targetGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) representing the target group."}},"required":["targetGroupArn"]},"outputs":{"properties":{"connectionPoolConfigurationInfo":{"$ref":"#/types/aws-native:rds:DbProxyTargetGroupConnectionPoolConfigurationInfoFormat","description":"Displays the settings that control the size and behavior of the connection pool associated with a `DBProxyTarget` ."},"dbClusterIdentifiers":{"description":"One or more DB cluster identifiers.","items":{"type":"string"},"type":"array"},"dbInstanceIdentifiers":{"description":"One or more DB instance identifiers.","items":{"type":"string"},"type":"array"},"targetGroupArn":{"description":"The Amazon Resource Name (ARN) representing the target group.","type":"string"}}}},"aws-native:rds:getDbShardGroup":{"description":"Creates a new DB shard group for Aurora Limitless Database. You must enable Aurora Limitless Database to create a DB shard group.\n Valid for: Aurora DB clusters only","inputs":{"properties":{"dbShardGroupIdentifier":{"type":"string","description":"The name of the DB shard group."}},"required":["dbShardGroupIdentifier"]},"outputs":{"properties":{"computeRedundancy":{"description":"Specifies whether to create standby standby DB data access shard for the DB shard group. Valid values are the following:\n  +  0 - Creates a DB shard group without a standby DB data access shard. This is the default value.\n  +  1 - Creates a DB shard group with a standby DB data access shard in a different Availability Zone (AZ).\n  +  2 - Creates a DB shard group with two standby DB data access shard in two different AZs.","type":"integer"},"dbShardGroupResourceId":{"description":"The AWS Region -unique, immutable identifier for the DB shard group.","type":"string"},"endpoint":{"description":"This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions:\n\n- `CreateDBInstance`\n- `DescribeDBInstances`\n- `DeleteDBInstance`\n\nFor the data structure that represents Amazon Aurora DB cluster endpoints, see `DBClusterEndpoint` .","type":"string"},"maxAcu":{"description":"The maximum capacity of the DB shard group in Aurora capacity units (ACUs).","type":"number"},"tags":{"description":"An optional set of key-value pairs to associate arbitrary data of your choosing with the DB shard group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getDbSubnetGroup":{"description":"The ``AWS::RDS::DBSubnetGroup`` resource creates a database subnet group. Subnet groups must contain at least two subnets in two different Availability Zones in the same region. \n For more information, see [Working with DB subnet groups](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html#USER_VPC.Subnets) in the *Amazon RDS User Guide*.","inputs":{"properties":{"dbSubnetGroupName":{"type":"string","description":"The name for the DB subnet group. This value is stored as a lowercase string.\n Constraints:\n  +  Must contain no more than 255 letters, numbers, periods, underscores, spaces, or hyphens.\n  +  Must not be default.\n  +  First character must be a letter.\n  \n Example: ``mydbsubnetgroup``"}},"required":["dbSubnetGroupName"]},"outputs":{"properties":{"dbSubnetGroupDescription":{"description":"The description for the DB subnet group.","type":"string"},"subnetIds":{"description":"The EC2 Subnet IDs for the DB subnet group.","items":{"type":"string"},"type":"array"},"tags":{"description":"Tags to assign to the DB subnet group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getEventSubscription":{"description":"The ``AWS::RDS::EventSubscription`` resource allows you to receive notifications for Amazon Relational Database Service events through the Amazon Simple Notification Service (Amazon SNS). For more information, see [Using Amazon RDS Event Notification](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html) in the *Amazon RDS User Guide*.","inputs":{"properties":{"subscriptionName":{"type":"string","description":"The name of the subscription.\n Constraints: The name must be less than 255 characters."}},"required":["subscriptionName"]},"outputs":{"properties":{"enabled":{"description":"Specifies whether to activate the subscription. If the event notification subscription isn't activated, the subscription is created but not active.","type":"boolean"},"eventCategories":{"description":"A list of event categories for a particular source type (``SourceType``) that you want to subscribe to. You can see a list of the categories for a given source type in the \"Amazon RDS event categories and event messages\" section of the [Amazon RDS User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.Messages.html) or the [Amazon Aurora User Guide](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_Events.Messages.html). You can also see this list by using the ``DescribeEventCategories`` operation.","items":{"type":"string"},"type":"array"},"sourceIds":{"description":"The list of identifiers of the event sources for which events are returned. If not specified, then all sources are included in the response. An identifier must begin with a letter and must contain only ASCII letters, digits, and hyphens. It can't end with a hyphen or contain two consecutive hyphens.\n Constraints:\n  +  If ``SourceIds`` are supplied, ``SourceType`` must also be provided.\n  +  If the source type is a DB instance, a ``DBInstanceIdentifier`` value must be supplied.\n  +  If the source type is a DB cluster, a ``DBClusterIdentifier`` value must be supplied.\n  +  If the source type is a DB parameter group, a ``DBParameterGroupName`` value must be supplied.\n  +  If the source type is a DB security group, a ``DBSecurityGroupName`` value must be supplied.\n  +  If the source type is a DB snapshot, a ``DBSnapshotIdentifier`` value must be supplied.\n  +  If the source type is a DB cluster snapshot, a ``DBClusterSnapshotIdentifier`` value must be supplied.\n  +  If the source type is an RDS Proxy, a ``DBProxyName`` value must be supplied.","items":{"type":"string"},"type":"array"},"sourceType":{"description":"The type of source that is generating the events. For example, if you want to be notified of events generated by a DB instance, you set this parameter to ``db-instance``. For RDS Proxy events, specify ``db-proxy``. If this value isn't specified, all events are returned.\n Valid Values:``db-instance | db-cluster | db-parameter-group | db-security-group | db-snapshot | db-cluster-snapshot | db-proxy | zero-etl | custom-engine-version | blue-green-deployment``","type":"string"},"tags":{"description":"An optional array of key-value pairs to apply to this subscription.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getGlobalCluster":{"description":"Resource Type definition for AWS::RDS::GlobalCluster","inputs":{"properties":{"globalClusterIdentifier":{"type":"string","description":"The cluster identifier of the new global database cluster. This parameter is stored as a lowercase string."}},"required":["globalClusterIdentifier"]},"outputs":{"properties":{"deletionProtection":{"description":"The deletion protection setting for the new global database. The global database can't be deleted when deletion protection is enabled.","type":"boolean"},"engineLifecycleSupport":{"description":"The life cycle type of the global cluster. You can use this setting to enroll your global cluster into Amazon RDS Extended Support.","type":"string"},"engineVersion":{"description":"The version number of the database engine to use. If you specify the SourceDBClusterIdentifier property, don't specify this property. The value is inherited from the cluster.","type":"string"},"globalEndpoint":{"$ref":"#/types/aws-native:rds:GlobalClusterGlobalEndpoint"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getIntegration":{"description":"A zero-ETL integration with Amazon Redshift.","inputs":{"properties":{"integrationArn":{"type":"string","description":"The ARN of the integration."}},"required":["integrationArn"]},"outputs":{"properties":{"createTime":{"description":"The time when the integration was created, in Universal Coordinated Time (UTC).","type":"string"},"dataFilter":{"description":"Data filters for the integration. These filters determine which tables from the source database are sent to the target Amazon Redshift data warehouse.","type":"string"},"description":{"description":"A description of the integration.","type":"string"},"integrationArn":{"description":"The ARN of the integration.","type":"string"},"integrationName":{"description":"The name of the integration.","type":"string"},"tags":{"description":"A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.*.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rds:getOptionGroup":{"description":"The ``AWS::RDS::OptionGroup`` resource creates or updates an option group, to enable and configure features that are specific to a particular DB engine.","inputs":{"properties":{"optionGroupName":{"type":"string","description":"The name of the option group to be created.\n Constraints:\n  +  Must be 1 to 255 letters, numbers, or hyphens\n  +  First character must be a letter\n  +  Can't end with a hyphen or contain two consecutive hyphens\n  \n Example: ``myoptiongroup``\n If you don't specify a value for ``OptionGroupName`` property, a name is automatically created for the option group.\n  This value is stored as a lowercase string."}},"required":["optionGroupName"]},"outputs":{"properties":{"optionConfigurations":{"description":"A list of all available options for an option group.","items":{"$ref":"#/types/aws-native:rds:OptionGroupOptionConfiguration"},"type":"array"},"tags":{"description":"Tags to assign to the option group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:redshift:getCluster":{"description":"An example resource schema demonstrating some basic constructs and validation rules.","inputs":{"properties":{"clusterIdentifier":{"type":"string","description":"A unique identifier for the cluster. You use this identifier to refer to the cluster for any subsequent cluster operations such as deleting or modifying. All alphabetical characters must be lower case, no hypens at the end, no two consecutive hyphens. Cluster name should be unique for all clusters within an AWS account"}},"required":["clusterIdentifier"]},"outputs":{"properties":{"allowVersionUpgrade":{"description":"Major version upgrades can be applied during the maintenance window to the Amazon Redshift engine that is running on the cluster. Default value is True","type":"boolean"},"aquaConfigurationStatus":{"description":"The value represents how the cluster is configured to use AQUA (Advanced Query Accelerator) after the cluster is restored. Possible values include the following.\n\nenabled - Use AQUA if it is available for the current Region and Amazon Redshift node type.\ndisabled - Don't use AQUA.\nauto - Amazon Redshift determines whether to use AQUA.\n","type":"string"},"automatedSnapshotRetentionPeriod":{"description":"The number of days that automated snapshots are retained. If the value is 0, automated snapshots are disabled. Default value is 1","type":"integer"},"availabilityZone":{"description":"The EC2 Availability Zone (AZ) in which you want Amazon Redshift to provision the cluster. Default: A random, system-chosen Availability Zone in the region that is specified by the endpoint","type":"string"},"availabilityZoneRelocation":{"description":"The option to enable relocation for an Amazon Redshift cluster between Availability Zones after the cluster modification is complete.","type":"boolean"},"availabilityZoneRelocationStatus":{"description":"The availability zone relocation status of the cluster","type":"string"},"clusterNamespaceArn":{"description":"The Amazon Resource Name (ARN) of the cluster namespace.","type":"string"},"clusterParameterGroupName":{"description":"The name of the parameter group to be associated with this cluster.","type":"string"},"clusterSecurityGroups":{"description":"A list of security groups to be associated with this cluster.","items":{"type":"string"},"type":"array"},"clusterType":{"description":"The type of the cluster. When cluster type is specified as single-node, the NumberOfNodes parameter is not required and if multi-node, the NumberOfNodes parameter is required","type":"string"},"clusterVersion":{"description":"The version of the Amazon Redshift engine software that you want to deploy on the cluster.The version selected runs on all the nodes in the cluster.","type":"string"},"deferMaintenanceEndTime":{"description":"A timestamp indicating end time for the deferred maintenance window. If you specify an end time, you can't specify a duration.","type":"string"},"deferMaintenanceIdentifier":{"description":"A unique identifier for the deferred maintenance window.","type":"string"},"deferMaintenanceStartTime":{"description":"A timestamp indicating the start time for the deferred maintenance window.","type":"string"},"destinationRegion":{"description":"The destination AWS Region that you want to copy snapshots to. Constraints: Must be the name of a valid AWS Region. For more information, see Regions and Endpoints in the Amazon Web Services [https://docs.aws.amazon.com/general/latest/gr/rande.html#redshift_region] General Reference","type":"string"},"elasticIp":{"description":"The Elastic IP (EIP) address for the cluster.","type":"string"},"encrypted":{"description":"If true, the data in the cluster is encrypted at rest.","type":"boolean"},"endpoint":{"$ref":"#/types/aws-native:redshift:ClusterEndpoint","description":"The connection endpoint."},"enhancedVpcRouting":{"description":"An option that specifies whether to create the cluster with enhanced VPC routing enabled. To create a cluster that uses enhanced VPC routing, the cluster must be in a VPC. For more information, see Enhanced VPC Routing in the Amazon Redshift Cluster Management Guide.\n\nIf this option is true , enhanced VPC routing is enabled.\n\nDefault: false","type":"boolean"},"hsmClientCertificateIdentifier":{"description":"Specifies the name of the HSM client certificate the Amazon Redshift cluster uses to retrieve the data encryption keys stored in an HSM","type":"string"},"hsmConfigurationIdentifier":{"description":"Specifies the name of the HSM configuration that contains the information the Amazon Redshift cluster can use to retrieve and store keys in an HSM.","type":"string"},"iamRoles":{"description":"A list of AWS Identity and Access Management (IAM) roles that can be used by the cluster to access other AWS services. You must supply the IAM roles in their Amazon Resource Name (ARN) format. You can supply up to 50 IAM roles in a single request","items":{"type":"string"},"type":"array"},"kmsKeyId":{"description":"The AWS Key Management Service (KMS) key ID of the encryption key that you want to use to encrypt data in the cluster.","type":"string"},"loggingProperties":{"$ref":"#/types/aws-native:redshift:ClusterLoggingProperties","description":"Specifies logging information, such as queries and connection attempts, for the specified Amazon Redshift cluster."},"maintenanceTrackName":{"description":"The name for the maintenance track that you want to assign for the cluster. This name change is asynchronous. The new track name stays in the PendingModifiedValues for the cluster until the next maintenance window. When the maintenance track changes, the cluster is switched to the latest cluster release available for the maintenance track. At this point, the maintenance track name is applied.","type":"string"},"manualSnapshotRetentionPeriod":{"description":"The number of days to retain newly copied snapshots in the destination AWS Region after they are copied from the source AWS Region. If the value is -1, the manual snapshot is retained indefinitely.\n\nThe value must be either -1 or an integer between 1 and 3,653.","type":"integer"},"masterPasswordSecretArn":{"description":"The Amazon Resource Name (ARN) for the cluster's admin user credentials secret.","type":"string"},"masterPasswordSecretKmsKeyId":{"description":"The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin user credentials secret.","type":"string"},"multiAz":{"description":"A boolean indicating if the redshift cluster is multi-az or not. If you don't provide this parameter or set the value to false, the redshift cluster will be single-az.","type":"boolean"},"namespaceResourcePolicy":{"$ref":"pulumi.json#/Any","description":"The namespace resource policy document that will be attached to a Redshift cluster.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Redshift::Cluster` for more information about the expected schema for this property."},"nodeType":{"description":"The node type to be provisioned for the cluster.Valid Values: ds2.xlarge | ds2.8xlarge | dc1.large | dc1.8xlarge | dc2.large | dc2.8xlarge | ra3.large | ra3.4xlarge | ra3.16xlarge","type":"string"},"numberOfNodes":{"description":"The number of compute nodes in the cluster. This parameter is required when the ClusterType parameter is specified as multi-node.","type":"integer"},"port":{"description":"The port number on which the cluster accepts incoming connections. The cluster is accessible only via the JDBC and ODBC connection strings","type":"integer"},"preferredMaintenanceWindow":{"description":"The weekly time range (in UTC) during which automated cluster maintenance can occur.","type":"string"},"publiclyAccessible":{"description":"If true, the cluster can be accessed from a public network.","type":"boolean"},"resourceAction":{"description":"The Redshift operation to be performed. Resource Action supports pause-cluster, resume-cluster, failover-primary-compute APIs","type":"string"},"revisionTarget":{"description":"The identifier of the database revision. You can retrieve this value from the response to the DescribeClusterDbRevisions request.","type":"string"},"rotateEncryptionKey":{"description":"A boolean indicating if we want to rotate Encryption Keys.","type":"boolean"},"snapshotCopyGrantName":{"description":"The name of the snapshot copy grant to use when snapshots of an AWS KMS-encrypted cluster are copied to the destination region.","type":"string"},"snapshotCopyManual":{"description":"Indicates whether to apply the snapshot retention period to newly copied manual snapshots instead of automated snapshots.","type":"boolean"},"snapshotCopyRetentionPeriod":{"description":"The number of days to retain automated snapshots in the destination region after they are copied from the source region. \n\n Default is 7. \n\n Constraints: Must be at least 1 and no more than 35.","type":"integer"},"tags":{"description":"The list of tags for the cluster parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcSecurityGroupIds":{"description":"A list of Virtual Private Cloud (VPC) security groups to be associated with the cluster.","items":{"type":"string"},"type":"array"}}}},"aws-native:redshift:getClusterParameterGroup":{"description":"Resource Type definition for AWS::Redshift::ClusterParameterGroup","inputs":{"properties":{"parameterGroupName":{"type":"string","description":"The name of the cluster parameter group."}},"required":["parameterGroupName"]},"outputs":{"properties":{"parameters":{"description":"An array of parameters to be modified. A maximum of 20 parameters can be modified in a single request.","items":{"$ref":"#/types/aws-native:redshift:ClusterParameterGroupParameter"},"type":"array"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:redshift:getClusterSubnetGroup":{"description":"Resource Type definition for AWS::Redshift::ClusterSubnetGroup. Specifies an Amazon Redshift subnet group.","inputs":{"properties":{"clusterSubnetGroupName":{"type":"string","description":"This name must be unique for all subnet groups that are created by your AWS account. If costumer do not provide it, cloudformation will generate it. Must not be \"Default\". "}},"required":["clusterSubnetGroupName"]},"outputs":{"properties":{"clusterSubnetGroupName":{"description":"This name must be unique for all subnet groups that are created by your AWS account. If costumer do not provide it, cloudformation will generate it. Must not be \"Default\". ","type":"string"},"description":{"description":"The description of the parameter group.","type":"string"},"subnetIds":{"description":"The list of VPC subnet IDs","items":{"type":"string"},"type":"array"},"tags":{"description":"The list of tags for the cluster parameter group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:redshift:getEndpointAccess":{"description":"Resource schema for a Redshift-managed VPC endpoint.","inputs":{"properties":{"endpointName":{"type":"string","description":"The name of the endpoint."}},"required":["endpointName"]},"outputs":{"properties":{"address":{"description":"The DNS address of the endpoint.","type":"string"},"endpointCreateTime":{"description":"The time (UTC) that the endpoint was created.","type":"string"},"endpointStatus":{"description":"The status of the endpoint.","type":"string"},"port":{"description":"The port number on which the cluster accepts incoming connections.","type":"integer"},"vpcEndpoint":{"$ref":"#/types/aws-native:redshift:VpcEndpointProperties","description":"The connection endpoint for connecting to an Amazon Redshift cluster through the proxy."},"vpcSecurityGroupIds":{"description":"A list of vpc security group ids to apply to the created endpoint access.","items":{"type":"string"},"type":"array"},"vpcSecurityGroups":{"description":"A list of Virtual Private Cloud (VPC) security groups to be associated with the endpoint.","items":{"$ref":"#/types/aws-native:redshift:EndpointAccessVpcSecurityGroup"},"type":"array"}}}},"aws-native:redshift:getEndpointAuthorization":{"description":"Describes an endpoint authorization for authorizing Redshift-managed VPC endpoint access to a cluster across AWS accounts.","inputs":{"properties":{"account":{"type":"string","description":"The target AWS account ID to grant or revoke access for."},"clusterIdentifier":{"type":"string","description":"The cluster identifier."}},"required":["clusterIdentifier","account"]},"outputs":{"properties":{"allowedAllVpcs":{"description":"Indicates whether all VPCs in the grantee account are allowed access to the cluster.","type":"boolean"},"allowedVpcs":{"description":"The VPCs allowed access to the cluster.","items":{"type":"string"},"type":"array"},"authorizeTime":{"description":"The time (UTC) when the authorization was created.","type":"string"},"clusterStatus":{"description":"The status of the cluster.","type":"string"},"endpointCount":{"description":"The number of Redshift-managed VPC endpoints created for the authorization.","type":"integer"},"grantee":{"description":"The AWS account ID of the grantee of the cluster.","type":"string"},"grantor":{"description":"The AWS account ID of the cluster owner.","type":"string"},"status":{"description":"The status of the authorization action.","type":"string"},"vpcIds":{"description":"The virtual private cloud (VPC) identifiers to grant or revoke access to.","items":{"type":"string"},"type":"array"}}}},"aws-native:redshift:getEventSubscription":{"description":"The `AWS::Redshift::EventSubscription` resource creates an Amazon Redshift Event Subscription.","inputs":{"properties":{"subscriptionName":{"type":"string","description":"The name of the Amazon Redshift event notification subscription"}},"required":["subscriptionName"]},"outputs":{"properties":{"custSubscriptionId":{"description":"The name of the Amazon Redshift event notification subscription.","type":"string"},"customerAwsId":{"description":"The AWS account associated with the Amazon Redshift event notification subscription.","type":"string"},"enabled":{"description":"A boolean value; set to true to activate the subscription, and set to false to create the subscription but not activate it.","type":"boolean"},"eventCategories":{"description":"Specifies the Amazon Redshift event categories to be published by the event notification subscription.","items":{"$ref":"#/types/aws-native:redshift:EventSubscriptionEventCategoriesItem"},"type":"array"},"eventCategoriesList":{"description":"The list of Amazon Redshift event categories specified in the event notification subscription.","items":{"type":"string"},"type":"array"},"severity":{"$ref":"#/types/aws-native:redshift:EventSubscriptionSeverity","description":"Specifies the Amazon Redshift event severity to be published by the event notification subscription."},"snsTopicArn":{"description":"The Amazon Resource Name (ARN) of the Amazon SNS topic used to transmit the event notifications.","type":"string"},"sourceIds":{"description":"A list of one or more identifiers of Amazon Redshift source objects.","items":{"type":"string"},"type":"array"},"sourceIdsList":{"description":"A list of the sources that publish events to the Amazon Redshift event notification subscription.","items":{"type":"string"},"type":"array"},"sourceType":{"$ref":"#/types/aws-native:redshift:EventSubscriptionSourceType","description":"The type of source that will be generating the events."},"status":{"$ref":"#/types/aws-native:redshift:EventSubscriptionStatus","description":"The status of the Amazon Redshift event notification subscription."},"subscriptionCreationTime":{"description":"The date and time the Amazon Redshift event notification subscription was created.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:redshift:getIntegration":{"description":"Integration from a source AWS service to a Redshift cluster","inputs":{"properties":{"integrationArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the integration."}},"required":["integrationArn"]},"outputs":{"properties":{"createTime":{"description":"The time (UTC) when the integration was created.","type":"string"},"integrationArn":{"description":"The Amazon Resource Name (ARN) of the integration.","type":"string"},"integrationName":{"description":"The name of the integration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:redshift:getScheduledAction":{"description":"The `AWS::Redshift::ScheduledAction` resource creates an Amazon Redshift Scheduled Action.","inputs":{"properties":{"scheduledActionName":{"type":"string","description":"The name of the scheduled action. The name must be unique within an account."}},"required":["scheduledActionName"]},"outputs":{"properties":{"enable":{"description":"If true, the schedule is enabled. If false, the scheduled action does not trigger.","type":"boolean"},"endTime":{"description":"The end time in UTC of the scheduled action. After this time, the scheduled action does not trigger.","type":"string"},"iamRole":{"description":"The IAM role to assume to run the target action.","type":"string"},"nextInvocations":{"description":"List of times when the scheduled action will run.","items":{"type":"string"},"type":"array"},"schedule":{"description":"The schedule in `at( )` or `cron( )` format.","type":"string"},"scheduledActionDescription":{"description":"The description of the scheduled action.","type":"string"},"startTime":{"description":"The start time in UTC of the scheduled action. Before this time, the scheduled action does not trigger.","type":"string"},"state":{"$ref":"#/types/aws-native:redshift:ScheduledActionState","description":"The state of the scheduled action."},"targetAction":{"$ref":"#/types/aws-native:redshift:ScheduledActionType","description":"A JSON format string of the Amazon Redshift API operation with input parameters."}}}},"aws-native:redshiftserverless:getNamespace":{"description":"Definition of AWS::RedshiftServerless::Namespace Resource Type","inputs":{"properties":{"namespaceName":{"type":"string","description":"A unique identifier for the namespace. You use this identifier to refer to the namespace for any subsequent namespace operations such as deleting or modifying. All alphabetical characters must be lower case. Namespace name should be unique for all namespaces within an AWS account."}},"required":["namespaceName"]},"outputs":{"properties":{"adminPasswordSecretKmsKeyId":{"description":"The ID of the AWS Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.","type":"string"},"adminUsername":{"description":"The user name associated with the admin user for the namespace that is being created. Only alphanumeric characters and underscores are allowed. It should start with an alphabet.","type":"string"},"dbName":{"description":"The database name associated for the namespace that is being created. Only alphanumeric characters and underscores are allowed. It should start with an alphabet.","type":"string"},"defaultIamRoleArn":{"description":"The default IAM role ARN for the namespace that is being created.","type":"string"},"iamRoles":{"description":"A list of AWS Identity and Access Management (IAM) roles that can be used by the namespace to access other AWS services. You must supply the IAM roles in their Amazon Resource Name (ARN) format. The Default role limit for each request is 10.","items":{"type":"string"},"type":"array"},"kmsKeyId":{"description":"The AWS Key Management Service (KMS) key ID of the encryption key that you want to use to encrypt data in the namespace.","type":"string"},"logExports":{"description":"The collection of log types to be exported provided by the customer. Should only be one of the three supported log types: userlog, useractivitylog and connectionlog","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceLogExport"},"type":"array"},"namespace":{"$ref":"#/types/aws-native:redshiftserverless:Namespace","description":"Definition of Namespace resource.","language":{"csharp":{"name":"NamespaceValue"}}},"namespaceResourcePolicy":{"$ref":"pulumi.json#/Any","description":"The resource policy document that will be attached to the namespace.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::RedshiftServerless::Namespace` for more information about the expected schema for this property."},"snapshotCopyConfigurations":{"description":"The snapshot copy configurations for the namespace.","items":{"$ref":"#/types/aws-native:redshiftserverless:NamespaceSnapshotCopyConfiguration"},"type":"array"},"tags":{"description":"The list of tags for the namespace.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:redshiftserverless:getSnapshot":{"description":"Resource Type definition for AWS::RedshiftServerless::Snapshot Resource Type.","inputs":{"properties":{"snapshotName":{"type":"string","description":"The name of the snapshot."}},"required":["snapshotName"]},"outputs":{"properties":{"ownerAccount":{"description":"The owner account of the snapshot.","type":"string"},"retentionPeriod":{"description":"The retention period of the snapshot.","type":"integer"},"snapshot":{"$ref":"#/types/aws-native:redshiftserverless:Snapshot","description":"Definition for snapshot resource","language":{"csharp":{"name":"SnapshotValue"}}}}}},"aws-native:redshiftserverless:getWorkgroup":{"description":"Definition of AWS::RedshiftServerless::Workgroup Resource Type","inputs":{"properties":{"workgroupName":{"type":"string","description":"The name of the workgroup."}},"required":["workgroupName"]},"outputs":{"properties":{"baseCapacity":{"description":"The base compute capacity of the workgroup in Redshift Processing Units (RPUs).","type":"integer"},"enhancedVpcRouting":{"description":"The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC.","type":"boolean"},"maxCapacity":{"description":"The max compute capacity of the workgroup in Redshift Processing Units (RPUs).","type":"integer"},"port":{"description":"The custom port to use when connecting to a workgroup. Valid port ranges are 5431-5455 and 8191-8215. The default is 5439.","type":"integer"},"pricePerformanceTarget":{"$ref":"#/types/aws-native:redshiftserverless:WorkgroupPerformanceTarget","description":"A property that represents the price performance target settings for the workgroup."},"publiclyAccessible":{"description":"A value that specifies whether the workgroup can be accessible from a public network.","type":"boolean"},"tags":{"description":"The map of the key-value pairs used to tag the workgroup.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trackName":{"description":"An optional parameter for the name of the track for the workgroup. If you don't provide a track name, the workgroup is assigned to the current track.","type":"string"},"workgroup":{"$ref":"#/types/aws-native:redshiftserverless:Workgroup","description":"Definition for workgroup resource","language":{"csharp":{"name":"WorkgroupValue"}}}}}},"aws-native:refactorspaces:getApplication":{"description":"Definition of AWS::RefactorSpaces::Application Resource Type","inputs":{"properties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."}},"required":["environmentIdentifier","applicationIdentifier"]},"outputs":{"properties":{"apiGatewayId":{"description":"The resource ID of the ABP for the proxy.","type":"string"},"applicationIdentifier":{"description":"The unique identifier of the application.","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the application.","type":"string"},"nlbArn":{"description":"The Amazon Resource Name (ARN) of the Network Load Balancer .","type":"string"},"nlbName":{"description":"The name of the Network Load Balancer configured by the API Gateway proxy.","type":"string"},"proxyUrl":{"description":"The endpoint URL of the ABPlong proxy.","type":"string"},"stageName":{"description":"The name of the ABP stage. The name defaults to `prod` .","type":"string"},"tags":{"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcLinkId":{"description":"The `VpcLink` ID of the ABP proxy.","type":"string"}}}},"aws-native:refactorspaces:getEnvironment":{"description":"Definition of AWS::RefactorSpaces::Environment Resource Type","inputs":{"properties":{"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."}},"required":["environmentIdentifier"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the environment.","type":"string"},"environmentIdentifier":{"description":"The unique identifier of the environment.","type":"string"},"tags":{"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"transitGatewayId":{"description":"The ID of the AWS Transit Gateway set up by the environment.","type":"string"}}}},"aws-native:refactorspaces:getRoute":{"description":"Definition of AWS::RefactorSpaces::Route Resource Type","inputs":{"properties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."},"routeIdentifier":{"type":"string","description":"The unique identifier of the route."}},"required":["environmentIdentifier","applicationIdentifier","routeIdentifier"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the route.","type":"string"},"pathResourceToId":{"description":"A mapping of ABPlong path resources to resource IDs.","type":"string"},"routeIdentifier":{"description":"The unique identifier of the route.","type":"string"},"tags":{"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:refactorspaces:getService":{"description":"Definition of AWS::RefactorSpaces::Service Resource Type","inputs":{"properties":{"applicationIdentifier":{"type":"string","description":"The unique identifier of the application."},"environmentIdentifier":{"type":"string","description":"The unique identifier of the environment."},"serviceIdentifier":{"type":"string","description":"The unique identifier of the service."}},"required":["environmentIdentifier","applicationIdentifier","serviceIdentifier"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the service.","type":"string"},"serviceIdentifier":{"description":"The unique identifier of the service.","type":"string"},"tags":{"description":"Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rekognition:getCollection":{"description":"The AWS::Rekognition::Collection type creates an Amazon Rekognition Collection. A collection is a logical grouping of information about detected faces which can later be referenced for searches on the group","inputs":{"properties":{"collectionId":{"type":"string","description":"ID for the collection that you are creating."}},"required":["collectionId"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name of the collection.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rekognition:getProject":{"description":"The AWS::Rekognition::Project type creates an Amazon Rekognition CustomLabels Project. A project is a grouping of the resources needed to create and manage Dataset and ProjectVersions.","inputs":{"properties":{"projectName":{"type":"string","description":"The name of the project to create."}},"required":["projectName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name of the project.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rekognition:getStreamProcessor":{"description":"The AWS::Rekognition::StreamProcessor type is used to create an Amazon Rekognition StreamProcessor that you can use to analyze streaming videos.\n\n","inputs":{"properties":{"name":{"type":"string","description":"Name of the stream processor. It's an identifier you assign to the stream processor. You can use it to manage the stream processor."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name for the newly created stream processor.","type":"string"},"status":{"description":"Current status of the stream processor.","type":"string"},"statusMessage":{"description":"Detailed status message about the stream processor.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:resiliencehub:getApp":{"description":"Resource Type Definition for AWS::ResilienceHub::App.","inputs":{"properties":{"appArn":{"type":"string","description":"Amazon Resource Name (ARN) of the App."}},"required":["appArn"]},"outputs":{"properties":{"appArn":{"description":"Amazon Resource Name (ARN) of the App.","type":"string"},"appAssessmentSchedule":{"$ref":"#/types/aws-native:resiliencehub:AppAssessmentSchedule","description":"Assessment execution schedule."},"appTemplateBody":{"description":"A string containing full ResilienceHub app template body.","type":"string"},"description":{"description":"App description.","type":"string"},"driftStatus":{"$ref":"#/types/aws-native:resiliencehub:AppDriftStatus","description":"Indicates if compliance drifts (deviations) were detected while running an assessment for your application."},"eventSubscriptions":{"description":"The list of events you would like to subscribe and get notification for.","items":{"$ref":"#/types/aws-native:resiliencehub:AppEventSubscription"},"type":"array"},"permissionModel":{"$ref":"#/types/aws-native:resiliencehub:AppPermissionModel","description":"Defines the roles and credentials that AWS Resilience Hub would use while creating the application, importing its resources, and running an assessment."},"resiliencyPolicyArn":{"description":"Amazon Resource Name (ARN) of the Resiliency Policy.","type":"string"},"resourceMappings":{"description":"An array of ResourceMapping objects.","items":{"$ref":"#/types/aws-native:resiliencehub:AppResourceMapping"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair.","type":"object"}}}},"aws-native:resiliencehub:getResiliencyPolicy":{"description":"Resource Type Definition for Resiliency Policy.","inputs":{"properties":{"policyArn":{"type":"string","description":"Amazon Resource Name (ARN) of the Resiliency Policy."}},"required":["policyArn"]},"outputs":{"properties":{"dataLocationConstraint":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyDataLocationConstraint","description":"Data Location Constraint of the Policy."},"policy":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyPolicyMap","description":"The resiliency policy."},"policyArn":{"description":"Amazon Resource Name (ARN) of the Resiliency Policy.","type":"string"},"policyDescription":{"description":"Description of Resiliency Policy.","type":"string"},"policyName":{"description":"Name of Resiliency Policy.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags assigned to the resource. A tag is a label that you assign to an AWS resource. Each tag consists of a key/value pair.","type":"object"},"tier":{"$ref":"#/types/aws-native:resiliencehub:ResiliencyPolicyTier","description":"Resiliency Policy Tier."}}}},"aws-native:resourceexplorer2:getDefaultViewAssociation":{"description":"Definition of AWS::ResourceExplorer2::DefaultViewAssociation Resource Type","inputs":{"properties":{"associatedAwsPrincipal":{"type":"string","description":"The AWS principal that the default view is associated with, used as the unique identifier for this resource."}},"required":["associatedAwsPrincipal"]},"outputs":{"properties":{"associatedAwsPrincipal":{"description":"The AWS principal that the default view is associated with, used as the unique identifier for this resource.","type":"string"},"viewArn":{"description":"The ARN of the view to set as the default for the AWS Region and AWS account in which you call this operation. The specified view must already exist in the specified Region.","type":"string"}}}},"aws-native:resourceexplorer2:getIndex":{"description":"Definition of AWS::ResourceExplorer2::Index Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the new index for the AWS Region . For example:\n\n`arn:aws:resource-explorer-2:us-east-1:123456789012:index/EXAMPLE8-90ab-cdef-fedc-EXAMPLE22222`"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the new index for the AWS Region . For example:\n\n`arn:aws:resource-explorer-2:us-east-1:123456789012:index/EXAMPLE8-90ab-cdef-fedc-EXAMPLE22222`","type":"string"},"indexState":{"$ref":"#/types/aws-native:resourceexplorer2:IndexState","description":"Indicates the current state of the index. For example:\n\n`CREATING`"},"tags":{"additionalProperties":{"type":"string"},"description":"The specified tags are attached to only the index created in this AWS Region . The tags don't attach to any of the resources listed in the index.","type":"object"},"type":{"$ref":"#/types/aws-native:resourceexplorer2:IndexType","description":"Specifies the type of the index in this Region. For information about the aggregator index and how it differs from a local index, see [Turning on cross-Region search by creating an aggregator index](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-aggregator-region.html) in the *AWS Resource Explorer User Guide.* ."}}}},"aws-native:resourceexplorer2:getView":{"description":"Definition of AWS::ResourceExplorer2::View Resource Type","inputs":{"properties":{"viewArn":{"type":"string","description":"The ARN of the new view. For example:\n\n`arn:aws:resource-explorer-2:us-east-1:123456789012:view/MyView/EXAMPLE8-90ab-cdef-fedc-EXAMPLE22222`"}},"required":["viewArn"]},"outputs":{"properties":{"filters":{"$ref":"#/types/aws-native:resourceexplorer2:ViewSearchFilter","description":"An array of strings that include search keywords, prefixes, and operators that filter the results that are returned for queries made using this view. When you use this view in a [Search](https://docs.aws.amazon.com/resource-explorer/latest/apireference/API_Search.html) operation, the filter string is combined with the search's `QueryString` parameter using a logical `AND` operator.\n\nFor information about the supported syntax, see [Search query reference for Resource Explorer](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html) in the *AWS Resource Explorer User Guide* .\n\n\u003e This query string in the context of this operation supports only [filter prefixes](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-filters) with optional [operators](https://docs.aws.amazon.com/resource-explorer/latest/userguide/using-search-query-syntax.html#query-syntax-operators) . It doesn't support free-form text. For example, the string `region:us* service:ec2 -tag:stage=prod` includes all Amazon EC2 resources in any AWS Region that begin with the letters `us` and are *not* tagged with a key `Stage` that has the value `prod` ."},"includedProperties":{"description":"A list of fields that provide additional information about the view.","items":{"$ref":"#/types/aws-native:resourceexplorer2:ViewIncludedProperty"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Tag key and value pairs that are attached to the view.","type":"object"},"viewArn":{"description":"The ARN of the new view. For example:\n\n`arn:aws:resource-explorer-2:us-east-1:123456789012:view/MyView/EXAMPLE8-90ab-cdef-fedc-EXAMPLE22222`","type":"string"}}}},"aws-native:resourcegroups:getGroup":{"description":"Schema for ResourceGroups::Group","inputs":{"properties":{"name":{"type":"string","description":"The name of the resource group"}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Resource Group ARN.","type":"string"},"configuration":{"description":"The service configuration currently associated with the resource group and in effect for the members of the resource group. A `Configuration` consists of one or more `ConfigurationItem` entries. For information about service configurations for resource groups and how to construct them, see [Service configurations for resource groups](https://docs.aws.amazon.com//ARG/latest/APIReference/about-slg.html) in the *Resource Groups User Guide* .\n\n\u003e You can include either a `Configuration` or a `ResourceQuery` , but not both.","items":{"$ref":"#/types/aws-native:resourcegroups:GroupConfigurationItem"},"type":"array"},"description":{"description":"The description of the resource group","type":"string"},"resourceQuery":{"$ref":"#/types/aws-native:resourcegroups:GroupResourceQuery","description":"The resource query structure that is used to dynamically determine which AWS resources are members of the associated resource group. For more information about queries and how to construct them, see [Build queries and groups in Resource Groups](https://docs.aws.amazon.com//ARG/latest/userguide/gettingstarted-query.html) in the *Resource Groups User Guide*\n\n\u003e - You can include either a `ResourceQuery` or a `Configuration` , but not both.\n\u003e - You can specify the group's membership either by using a `ResourceQuery` or by using a list of `Resources` , but not both."},"resources":{"description":"A list of the Amazon Resource Names (ARNs) of AWS resources that you want to add to the specified group.\n\n\u003e - You can specify the group membership either by using a list of `Resources` or by using a `ResourceQuery` , but not both.\n\u003e - You can include a `Resources` property only if you also specify a `Configuration` property.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tag key and value pairs that are attached to the resource group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:resourcegroups:getTagSyncTask":{"description":"Schema for ResourceGroups::TagSyncTask","inputs":{"properties":{"taskArn":{"type":"string","description":"The ARN of the TagSyncTask resource"}},"required":["taskArn"]},"outputs":{"properties":{"groupArn":{"description":"The Amazon resource name (ARN) of the ApplicationGroup for which the TagSyncTask is created","type":"string"},"groupName":{"description":"The Name of the application group for which the TagSyncTask is created","type":"string"},"status":{"$ref":"#/types/aws-native:resourcegroups:TagSyncTaskStatus","description":"The status of the TagSyncTask"},"taskArn":{"description":"The ARN of the TagSyncTask resource","type":"string"}}}},"aws-native:rolesanywhere:getCrl":{"description":"Definition of AWS::RolesAnywhere::CRL Resource Type","inputs":{"properties":{"crlId":{"type":"string","description":"The unique primary identifier of the Crl"}},"required":["crlId"]},"outputs":{"properties":{"crlData":{"description":"The x509 v3 specified certificate revocation list (CRL).","type":"string"},"crlId":{"description":"The unique primary identifier of the Crl","type":"string"},"enabled":{"description":"Specifies whether the certificate revocation list (CRL) is enabled.","type":"boolean"},"name":{"description":"The name of the certificate revocation list (CRL).","type":"string"},"tags":{"description":"A list of tags to attach to the certificate revocation list (CRL).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trustAnchorArn":{"description":"The ARN of the TrustAnchor the certificate revocation list (CRL) will provide revocation for.","type":"string"}}}},"aws-native:rolesanywhere:getProfile":{"description":"Definition of AWS::RolesAnywhere::Profile Resource Type","inputs":{"properties":{"profileId":{"type":"string","description":"The unique primary identifier of the Profile"}},"required":["profileId"]},"outputs":{"properties":{"acceptRoleSessionName":{"description":"Used to determine if a custom role session name will be accepted in a temporary credential request.","type":"boolean"},"attributeMappings":{"description":"A mapping applied to the authenticating end-entity certificate.","items":{"$ref":"#/types/aws-native:rolesanywhere:ProfileAttributeMapping"},"type":"array"},"durationSeconds":{"description":"The number of seconds vended session credentials will be valid for","type":"number"},"enabled":{"description":"The enabled status of the resource.","type":"boolean"},"managedPolicyArns":{"description":"A list of managed policy ARNs. Managed policies identified by this list will be applied to the vended session credentials.","items":{"type":"string"},"type":"array"},"name":{"description":"The customer specified name of the resource.","type":"string"},"profileArn":{"description":"The ARN of the profile.","type":"string"},"profileId":{"description":"The unique primary identifier of the Profile","type":"string"},"roleArns":{"description":"A list of IAM role ARNs that can be assumed when this profile is specified in a CreateSession request.","items":{"type":"string"},"type":"array"},"sessionPolicy":{"description":"A session policy that will applied to the trust boundary of the vended session credentials.","type":"string"},"tags":{"description":"A list of Tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:rolesanywhere:getTrustAnchor":{"description":"Definition of AWS::RolesAnywhere::TrustAnchor Resource Type.","inputs":{"properties":{"trustAnchorId":{"type":"string","description":"The unique identifier of the trust anchor."}},"required":["trustAnchorId"]},"outputs":{"properties":{"enabled":{"description":"Indicates whether the trust anchor is enabled.","type":"boolean"},"name":{"description":"The name of the trust anchor.","type":"string"},"notificationSettings":{"description":"A list of notification settings to be associated to the trust anchor.","items":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorNotificationSetting"},"type":"array"},"source":{"$ref":"#/types/aws-native:rolesanywhere:TrustAnchorSource","description":"The trust anchor type and its related certificate data."},"tags":{"description":"The tags to attach to the trust anchor.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trustAnchorArn":{"description":"The ARN of the trust anchor.","type":"string"},"trustAnchorId":{"description":"The unique identifier of the trust anchor.","type":"string"}}}},"aws-native:route53:getCidrCollection":{"description":"Resource Type definition for AWS::Route53::CidrCollection.","inputs":{"properties":{"id":{"type":"string","description":"UUID of the CIDR collection."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon resource name (ARN) to uniquely identify the AWS resource.","type":"string"},"id":{"description":"UUID of the CIDR collection.","type":"string"},"locations":{"description":"A complex type that contains information about the list of CIDR locations.","items":{"$ref":"#/types/aws-native:route53:CidrCollectionLocation"},"type":"array"}}}},"aws-native:route53:getHealthCheck":{"description":"Resource schema for AWS::Route53::HealthCheck.","inputs":{"properties":{"healthCheckId":{"type":"string","description":"The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long."}},"required":["healthCheckId"]},"outputs":{"properties":{"healthCheckConfig":{"$ref":"#/types/aws-native:route53:HealthCheckConfigProperties","description":"A complex type that contains information about the health check."},"healthCheckId":{"description":"The identifier that Amazon Route 53 assigned to the health check when you created it. When you add or update a resource record set, you use this value to specify which health check to use. The value can be up to 64 characters long.","type":"string"},"healthCheckTags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53:getHostedZone":{"description":"Creates a new public or private hosted zone. You create records in a public hosted zone to define how you want to route traffic on the internet for a domain, such as example.com, and its subdomains (apex.example.com, acme.example.com). You create records in a private hosted zone to define how you want to route traffic for a domain and its subdomains within one or more Amazon Virtual Private Clouds (Amazon VPCs). \n  You can't convert a public hosted zone to a private hosted zone or vice versa. Instead, you must create a new hosted zone with the same name and create new resource record sets.\n  For more information about charges for hosted zones, see [Amazon Route 53 Pricing](https://docs.aws.amazon.com/route53/pricing/).\n Note the following:\n  +  You can't create a hosted zone for a top-level domain (TLD) such as .com.\n  +  If your domain is registered with a registrar other than Route 53, you must update the name servers with your registrar to make Route 53 the DNS service for the domain. For more information, see [Migrating DNS Service for an Existing Domain to Amazon Route 53](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/MigratingDNS.html) in the *Amazon Route 53 Developer Guide*. \n  \n When you submit a ``CreateHostedZone`` request, the initial status of the hosted zone is ``PENDING``. For public hosted zones, this means that the NS and SOA records are not yet available on all Route 53 DNS servers. When the NS and SOA records are available, the status of the zone changes to ``INSYNC``.\n The ``CreateHostedZone`` request requires the caller to have an ``ec2:DescribeVpcs`` permission.\n  When creating private hosted zones, the Amazon VPC must belong to the same partition where the hosted zone is created. A partition is a group of AWS-Regions. Each AWS-account is scoped to one partition.\n The following are the supported partitions:\n  +  ``aws`` - AWS-Regions\n  +  ``aws-cn`` - China Regions\n  +  ``aws-us-gov`` - govcloud-us-region\n  \n For more information, see [Access Management](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) in the *General Reference*.","inputs":{"properties":{"id":{"type":"string","description":"The ID that Amazon Route 53 assigned to the hosted zone when you created it."}},"required":["id"]},"outputs":{"properties":{"hostedZoneConfig":{"$ref":"#/types/aws-native:route53:HostedZoneConfig","description":"A complex type that contains an optional comment.\n If you don't want to specify a comment, omit the ``HostedZoneConfig`` and ``Comment`` elements."},"hostedZoneFeatures":{"$ref":"#/types/aws-native:route53:HostedZoneFeatures","description":"The features configuration for the hosted zone, including accelerated recovery settings and status information."},"hostedZoneTags":{"description":"Adds, edits, or deletes tags for a health check or a hosted zone.\n For information about using tags for cost allocation, see [Using Cost Allocation Tags](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html) in the *User Guide*.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"id":{"description":"The ID that Amazon Route 53 assigned to the hosted zone when you created it.","type":"string"},"nameServers":{"description":"Returns the set of name servers for the specific hosted zone. For example: `ns1.example.com` .\n\nThis attribute is not supported for private hosted zones.","items":{"type":"string"},"type":"array"},"queryLoggingConfig":{"$ref":"#/types/aws-native:route53:HostedZoneQueryLoggingConfig","description":"Creates a configuration for DNS query logging. After you create a query logging configuration, Amazon Route 53 begins to publish log data to an Amazon CloudWatch Logs log group.\n DNS query logs contain information about the queries that Route 53 receives for a specified public hosted zone, such as the following:\n  +  Route 53 edge location that responded to the DNS query\n  +  Domain or subdomain that was requested\n  +  DNS record type, such as A or AAAA\n  +  DNS response code, such as ``NoError`` or ``ServFail``\n  \n  + Log Group and Resource Policy Before you create a query logging configuration, perform the following operations. If you create a query logging configuration using the Route 53 console, Route 53 performs these operations automatically. Create a CloudWatch Logs log group, and make note of the ARN, which you specify when you create a query logging configuration. Note the following: You must create the log group in the us-east-1 region. You must use the same to create the log group and the hosted zone that you want to configure query logging for. When you create log groups for query logging, we recommend that you use a consistent prefix, for example: /aws/route53/hosted zone name In the next step, you'll create a resource policy, which controls access to one or more log groups and the associated resources, such as Route 53 hosted zones. There's a limit on the number of resource policies that you can create, so we recommend that you use a consistent prefix so you can use the same resource policy for all the log groups that you create for query logging. Create a CloudWatch Logs resource policy, and give it the permissions that Route 53 needs to create log streams and to send query logs to log streams. You must create the CloudWatch Logs resource policy in the us-east-1 region. For the value of Resource, specify the ARN for the log group that you created in the previous step. To use the same resource policy for all the CloudWatch Logs log groups that you created for query logging configurations, replace the hosted zone name with *, for example: arn:aws:logs:us-east-1:123412341234:log-group:/aws/route53/* To avoid the confused deputy problem, a security issue where an entity without a permission for an action can coerce a more-privileged entity to perform it, you can optionally limit the permissions that a service has to a resource in a resource-based policy by supplying the following values: For aws:SourceArn, supply the hosted zone ARN used in creating the query logging configuration. For example, aws:SourceArn: arn:aws:route53:::hostedzone/hosted zone ID. For aws:SourceAccount, supply the account ID for the account that creates the query logging configuration. For example, aws:SourceAccount:111111111111. For more information, see The confused deputy problem in the IAM User Guide. You can't use the CloudWatch console to create or edit a resource policy. You must use the CloudWatch API, one of the SDKs, or the . + Log Streams and Edge Locations When Route 53 finishes creating the configuration for DNS query logging, it does the following: Creates a log stream for an edge location the first time that the edge location responds to DNS queries for the specified hosted zone. That log stream is used to log all queries that Route 53 responds to for that edge location. Begins to send query logs to the applicable log stream. The name of each log stream is in the following format: hosted zone ID/edge location code The edge location code is a three-letter code and an arbitrarily assigned number, for example, DFW3. The three-letter code typically corresponds with the International Air Transport Association airport code for an airport near the edge location. (These abbreviations might change in the future.) For a list of edge locations, see \"The Route 53 Global Network\" on the Route 53 Product Details page. + Queries That Are Logged Query logs contain only the queries that DNS resolvers forward to Route 53. If a DNS resolver has already cached the response to a query (such as the IP address for a load balancer for example.com), the resolver will continue to return the cached response. It doesn't forward another query to Route 53 until the TTL for the corresponding resource record set expires. Depending on how many DNS queries are submitted for a resource record set, and depending on the TTL for that resource record set, query logs might contain information about only one query out of every several thousand queries that are submitted to DNS. For more information about how DNS works, see Routing Internet Traffic to Your Website or Web Application in the Amazon Route 53 Developer Guide. + Log File Format For a list of the values in each query log and the format of each value, see Logging DNS Queries in the Amazon Route 53 Developer Guide. + Pricing For information about charges for query logs, see Amazon CloudWatch Pricing. + How to Stop Logging If you want Route 53 to stop sending query logs to CloudWatch Logs, delete the query logging configuration. For more information, see DeleteQueryLoggingConfig."},"vpcs":{"description":"*Private hosted zones:* A complex type that contains information about the VPCs that are associated with the specified hosted zone.\n  For public hosted zones, omit ``VPCs``, ``VPCId``, and ``VPCRegion``.","items":{"$ref":"#/types/aws-native:route53:HostedZoneVpc"},"type":"array"}}}},"aws-native:route53:getKeySigningKey":{"description":"Represents a key signing key (KSK) associated with a hosted zone. You can only have two KSKs per hosted zone.","inputs":{"properties":{"hostedZoneId":{"type":"string","description":"The unique string (ID) used to identify a hosted zone."},"name":{"type":"string","description":"An alphanumeric string used to identify a key signing key (KSK). Name must be unique for each key signing key in the same hosted zone."}},"required":["hostedZoneId","name"]},"outputs":{"properties":{"status":{"$ref":"#/types/aws-native:route53:KeySigningKeyStatus","description":"A string specifying the initial status of the key signing key (KSK). You can set the value to ACTIVE or INACTIVE."}}}},"aws-native:route53globalresolver:getAccessSource":{"description":"Resource schema for AWS::Route53GlobalResolver::AccessSource","inputs":{"properties":{"accessSourceId":{"type":"string"}},"required":["accessSourceId"]},"outputs":{"properties":{"accessSourceId":{"type":"string"},"arn":{"type":"string"},"cidr":{"type":"string"},"createdAt":{"type":"string"},"ipAddressType":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceIpAddressType"},"name":{"type":"string"},"protocol":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceDnsProtocol"},"status":{"$ref":"#/types/aws-native:route53globalresolver:AccessSourceCrResourceStatus"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"}}}},"aws-native:route53globalresolver:getAccessToken":{"description":"Resource schema for AWS::Route53GlobalResolver::AccessToken","inputs":{"properties":{"accessTokenId":{"type":"string"}},"required":["accessTokenId"]},"outputs":{"properties":{"accessTokenId":{"type":"string"},"arn":{"type":"string"},"createdAt":{"type":"string"},"globalResolverId":{"type":"string"},"name":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:AccessTokenTokenStatus"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"},"value":{"type":"string"}}}},"aws-native:route53globalresolver:getDnsView":{"description":"Resource schema for AWS::Route53GlobalResolver::DnsView","inputs":{"properties":{"dnsViewId":{"type":"string"}},"required":["dnsViewId"]},"outputs":{"properties":{"arn":{"type":"string"},"createdAt":{"type":"string"},"description":{"type":"string"},"dnsViewId":{"type":"string"},"dnssecValidation":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewDnsSecValidationType"},"ednsClientSubnet":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewEdnsClientSubnetType"},"firewallRulesFailOpen":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewFirewallRulesFailOpenType"},"name":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:DnsViewProfileResourceStatus"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"}}}},"aws-native:route53globalresolver:getFirewallDomainList":{"description":"Resource schema for AWS::Route53GlobalResolver::FirewallDomainList","inputs":{"properties":{"firewallDomainListId":{"type":"string"}},"required":["firewallDomainListId"]},"outputs":{"properties":{"arn":{"type":"string"},"createdAt":{"type":"string"},"domainCount":{"type":"integer"},"firewallDomainListId":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:FirewallDomainListCrResourceStatus"},"statusMessage":{"type":"string"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"}}}},"aws-native:route53globalresolver:getFirewallRule":{"description":"Resource schema for AWS::Route53GlobalResolver::FirewallRule","inputs":{"properties":{"firewallRuleId":{"type":"string"}},"required":["firewallRuleId"]},"outputs":{"properties":{"action":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleAction"},"blockOverrideDnsType":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleBlockOverrideDnsQueryType"},"blockOverrideDomain":{"type":"string"},"blockOverrideTtl":{"type":"integer"},"blockResponse":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleFirewallBlockResponse"},"confidenceThreshold":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleConfidenceThreshold"},"createdAt":{"type":"string"},"description":{"type":"string"},"dnsAdvancedProtection":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleDnsAdvancedProtection"},"firewallRuleId":{"type":"string"},"name":{"type":"string"},"priority":{"type":"integer"},"queryType":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:FirewallRuleCrResourceStatus"},"updatedAt":{"type":"string"}}}},"aws-native:route53globalresolver:getGlobalResolver":{"description":"Resource schema for AWS::Route53GlobalResolver::GlobalResolver","inputs":{"properties":{"globalResolverId":{"type":"string"}},"required":["globalResolverId"]},"outputs":{"properties":{"arn":{"type":"string"},"createdAt":{"type":"string"},"description":{"type":"string"},"dnsName":{"type":"string"},"globalResolverId":{"type":"string"},"iPv4Addresses":{"items":{"type":"string"},"type":"array"},"iPv6Addresses":{"items":{"type":"string"},"type":"array"},"ipAddressType":{"$ref":"#/types/aws-native:route53globalresolver:GlobalResolverIpAddressType"},"name":{"type":"string"},"observabilityRegion":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:GlobalResolverCrResourceStatus"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"type":"string"}}}},"aws-native:route53globalresolver:getHostedZoneAssociation":{"description":"Resource schema for AWS::Route53GlobalResolver::HostedZoneAssociation","inputs":{"properties":{"hostedZoneAssociationId":{"type":"string"}},"required":["hostedZoneAssociationId"]},"outputs":{"properties":{"createdAt":{"type":"string"},"hostedZoneAssociationId":{"type":"string"},"hostedZoneName":{"type":"string"},"name":{"type":"string"},"status":{"$ref":"#/types/aws-native:route53globalresolver:HostedZoneAssociationStatus"},"updatedAt":{"type":"string"}}}},"aws-native:route53profiles:getProfile":{"description":"Resource Type definition for AWS::Route53Profiles::Profile","inputs":{"properties":{"id":{"type":"string","description":"The ID of the profile."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the resolver profile.","type":"string"},"clientToken":{"description":"The id of the creator request","type":"string"},"id":{"description":"The ID of the profile.","type":"string"},"shareStatus":{"$ref":"#/types/aws-native:route53profiles:ProfileShareStatus","description":"The sharing status of the profile."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53profiles:getProfileAssociation":{"description":"Resource Type definition for AWS::Route53Profiles::ProfileAssociation","inputs":{"properties":{"id":{"type":"string","description":"Primary Identifier for  Profile Association"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"Primary Identifier for  Profile Association","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53profiles:getProfileResourceAssociation":{"description":"Resource Type definition for AWS::Route53Profiles::ProfileResourceAssociation","inputs":{"properties":{"id":{"type":"string","description":"Primary Identifier for  Profile Resource Association"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"Primary Identifier for  Profile Resource Association","type":"string"},"resourceProperties":{"description":"A JSON-formatted string with key-value pairs specifying the properties of the associated resource.","type":"string"},"resourceType":{"description":"The type of the resource associated to the  Profile.","type":"string"}}}},"aws-native:route53recoverycontrol:getCluster":{"description":"AWS Route53 Recovery Control Cluster resource schema","inputs":{"properties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cluster."}},"required":["clusterArn"]},"outputs":{"properties":{"clusterArn":{"description":"The Amazon Resource Name (ARN) of the cluster.","type":"string"},"clusterEndpoints":{"description":"Endpoints for the cluster.","items":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterEndpoint"},"type":"array"},"networkType":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterNetworkType","description":"Cluster supports IPv4 endpoints and Dual-stack IPv4 and IPv6 endpoints. NetworkType can be IPV4 or DUALSTACK."},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:ClusterStatus","description":"Deployment status of a resource. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."}}}},"aws-native:route53recoverycontrol:getControlPanel":{"description":"AWS Route53 Recovery Control Control Panel resource schema .","inputs":{"properties":{"controlPanelArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the cluster."}},"required":["controlPanelArn"]},"outputs":{"properties":{"controlPanelArn":{"description":"The Amazon Resource Name (ARN) of the cluster.","type":"string"},"defaultControlPanel":{"description":"A flag that Amazon Route 53 Application Recovery Controller sets to true to designate the default control panel for a cluster. When you create a cluster, Amazon Route 53 Application Recovery Controller creates a control panel, and sets this flag for that control panel. If you create a control panel yourself, this flag is set to false.","type":"boolean"},"name":{"description":"The name of the control panel. You can use any non-white space character in the name.","type":"string"},"routingControlCount":{"description":"Count of associated routing controls","type":"integer"},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:ControlPanelStatus","description":"The deployment status of control panel. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."}}}},"aws-native:route53recoverycontrol:getRoutingControl":{"description":"AWS Route53 Recovery Control Routing Control resource schema .","inputs":{"properties":{"routingControlArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the routing control."}},"required":["routingControlArn"]},"outputs":{"properties":{"name":{"description":"The name of the routing control. You can use any non-white space character in the name.","type":"string"},"routingControlArn":{"description":"The Amazon Resource Name (ARN) of the routing control.","type":"string"},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:RoutingControlStatus","description":"The deployment status of the routing control. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."}}}},"aws-native:route53recoverycontrol:getSafetyRule":{"description":"Resource schema for AWS Route53 Recovery Control basic constructs and validation rules.","inputs":{"properties":{"safetyRuleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the safety rule."}},"required":["safetyRuleArn"]},"outputs":{"properties":{"assertionRule":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleAssertionRule","description":"An assertion rule enforces that, when you change a routing control state, that the criteria that you set in the rule configuration is met. Otherwise, the change to the routing control is not accepted. For example, the criteria might be that at least one routing control state is `On` after the transaction so that traffic continues to flow to at least one cell for the application. This ensures that you avoid a fail-open scenario."},"controlPanelArn":{"description":"The Amazon Resource Name (ARN) of the control panel.","type":"string"},"gatingRule":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleGatingRule","description":"A gating rule verifies that a gating routing control or set of gating routing controls, evaluates as true, based on a rule configuration that you specify, which allows a set of routing control state changes to complete.\n\nFor example, if you specify one gating routing control and you set the `Type` in the rule configuration to `OR` , that indicates that you must set the gating routing control to `On` for the rule to evaluate as true; that is, for the gating control switch to be On. When you do that, then you can update the routing control states for the target routing controls that you specify in the gating rule."},"name":{"description":"The name of the assertion rule. The name must be unique within a control panel. You can use any non-white space character in the name except the following: \u0026 \u003e \u003c ' (single quote) \" (double quote) ; (semicolon)","type":"string"},"ruleConfig":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleRuleConfig","description":"The criteria that you set for specific assertion controls (routing controls) that designate how many control states must be `ON` as the result of a transaction. For example, if you have three assertion controls, you might specify `ATLEAST 2` for your rule configuration. This means that at least two assertion controls must be `ON` , so that at least two AWS Regions have traffic flowing to them."},"safetyRuleArn":{"description":"The Amazon Resource Name (ARN) of the safety rule.","type":"string"},"status":{"$ref":"#/types/aws-native:route53recoverycontrol:SafetyRuleStatus","description":"The deployment status of the routing control. Status can be one of the following: PENDING, DEPLOYED, PENDING_DELETION."},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53recoveryreadiness:getCell":{"description":"The API Schema for AWS Route53 Recovery Readiness Cells.","inputs":{"properties":{"cellName":{"type":"string","description":"The name of the cell to create."}},"required":["cellName"]},"outputs":{"properties":{"cellArn":{"description":"The Amazon Resource Name (ARN) of the cell.","type":"string"},"cells":{"description":"A list of cell Amazon Resource Names (ARNs) contained within this cell, for use in nested cells. For example, Availability Zones within specific Regions.","items":{"type":"string"},"type":"array"},"parentReadinessScopes":{"description":"The readiness scope for the cell, which can be a cell Amazon Resource Name (ARN) or a recovery group ARN. This is a list but currently can have only one element.","items":{"type":"string"},"type":"array"},"tags":{"description":"A collection of tags associated with a resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53recoveryreadiness:getReadinessCheck":{"description":"Aws Route53 Recovery Readiness Check Schema and API specification.","inputs":{"properties":{"readinessCheckName":{"type":"string","description":"Name of the ReadinessCheck to create."}},"required":["readinessCheckName"]},"outputs":{"properties":{"readinessCheckArn":{"description":"The Amazon Resource Name (ARN) of the readiness check.","type":"string"},"resourceSetName":{"description":"The name of the resource set to check.","type":"string"},"tags":{"description":"A collection of tags associated with a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53recoveryreadiness:getRecoveryGroup":{"description":"AWS Route53 Recovery Readiness Recovery Group Schema and API specifications.","inputs":{"properties":{"recoveryGroupName":{"type":"string","description":"The name of the recovery group to create."}},"required":["recoveryGroupName"]},"outputs":{"properties":{"cells":{"description":"A list of the cell Amazon Resource Names (ARNs) in the recovery group.","items":{"type":"string"},"type":"array"},"recoveryGroupArn":{"description":"A collection of tags associated with a resource.","type":"string"},"tags":{"description":"A collection of tags associated with a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53recoveryreadiness:getResourceSet":{"description":"Schema for the AWS Route53 Recovery Readiness ResourceSet Resource and API.","inputs":{"properties":{"resourceSetName":{"type":"string","description":"The name of the resource set to create."}},"required":["resourceSetName"]},"outputs":{"properties":{"resourceSetArn":{"description":"The Amazon Resource Name (ARN) of the resource set.","type":"string"},"resources":{"description":"A list of resource objects in the resource set.","items":{"$ref":"#/types/aws-native:route53recoveryreadiness:ResourceSetResource"},"type":"array"},"tags":{"description":"A tag to associate with the parameters for a resource set.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53resolver:getFirewallDomainList":{"description":"Resource schema for AWS::Route53Resolver::FirewallDomainList.","inputs":{"properties":{"id":{"type":"string","description":"ResourceId"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Arn","type":"string"},"creationTime":{"description":"Rfc3339TimeString","type":"string"},"creatorRequestId":{"description":"The id of the creator request.","type":"string"},"domainCount":{"description":"Count","type":"integer"},"id":{"description":"ResourceId","type":"string"},"managedOwnerName":{"description":"ServicePrincipal","type":"string"},"modificationTime":{"description":"Rfc3339TimeString","type":"string"},"status":{"$ref":"#/types/aws-native:route53resolver:FirewallDomainListStatus","description":"ResolverFirewallDomainList, possible values are COMPLETE, DELETING, UPDATING, COMPLETE_IMPORT_FAILED, IMPORTING, and INACTIVE_OWNER_ACCOUNT_CLOSED."},"statusMessage":{"description":"FirewallDomainListAssociationStatus","type":"string"},"tags":{"description":"Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53resolver:getFirewallRuleGroup":{"description":"Resource schema for AWS::Route53Resolver::FirewallRuleGroup.","inputs":{"properties":{"id":{"type":"string","description":"ResourceId"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Arn","type":"string"},"creationTime":{"description":"Rfc3339TimeString","type":"string"},"creatorRequestId":{"description":"The id of the creator request.","type":"string"},"firewallRules":{"description":"FirewallRules","items":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupFirewallRule"},"type":"array"},"id":{"description":"ResourceId","type":"string"},"modificationTime":{"description":"Rfc3339TimeString","type":"string"},"ownerId":{"description":"AccountId","type":"string"},"ruleCount":{"description":"Count","type":"integer"},"shareStatus":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupShareStatus","description":"ShareStatus, possible values are NOT_SHARED, SHARED_WITH_ME, SHARED_BY_ME."},"status":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupStatus","description":"ResolverFirewallRuleGroupAssociation, possible values are COMPLETE, DELETING, UPDATING, and INACTIVE_OWNER_ACCOUNT_CLOSED."},"statusMessage":{"description":"FirewallRuleGroupStatus","type":"string"},"tags":{"description":"Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53resolver:getFirewallRuleGroupAssociation":{"description":"Resource schema for AWS::Route53Resolver::FirewallRuleGroupAssociation.","inputs":{"properties":{"id":{"type":"string","description":"Id"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Arn","type":"string"},"creationTime":{"description":"Rfc3339TimeString","type":"string"},"creatorRequestId":{"description":"The id of the creator request.","type":"string"},"id":{"description":"Id","type":"string"},"managedOwnerName":{"description":"ServicePrincipal","type":"string"},"modificationTime":{"description":"Rfc3339TimeString","type":"string"},"mutationProtection":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupAssociationMutationProtection","description":"MutationProtectionStatus"},"name":{"description":"FirewallRuleGroupAssociationName","type":"string"},"priority":{"description":"Priority","type":"integer"},"status":{"$ref":"#/types/aws-native:route53resolver:FirewallRuleGroupAssociationStatus","description":"ResolverFirewallRuleGroupAssociation, possible values are COMPLETE, DELETING, UPDATING, and INACTIVE_OWNER_ACCOUNT_CLOSED."},"statusMessage":{"description":"FirewallDomainListAssociationStatus","type":"string"},"tags":{"description":"Tags","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53resolver:getOutpostResolver":{"description":"Resource schema for AWS::Route53Resolver::OutpostResolver.","inputs":{"properties":{"id":{"type":"string","description":"Id"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The OutpostResolver ARN.","type":"string"},"creationTime":{"description":"The OutpostResolver creation time","type":"string"},"creatorRequestId":{"description":"The id of the creator request.","type":"string"},"id":{"description":"Id","type":"string"},"instanceCount":{"description":"The number of OutpostResolvers.","type":"integer"},"modificationTime":{"description":"The OutpostResolver last modified time","type":"string"},"name":{"description":"The OutpostResolver name.","type":"string"},"preferredInstanceType":{"description":"The OutpostResolver instance type.","type":"string"},"status":{"$ref":"#/types/aws-native:route53resolver:OutpostResolverStatus","description":"The OutpostResolver status, possible values are CREATING, OPERATIONAL, UPDATING, DELETING, ACTION_NEEDED, FAILED_CREATION and FAILED_DELETION."},"statusMessage":{"description":"The OutpostResolver status message.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:route53resolver:getResolverConfig":{"description":"Resource schema for AWS::Route53Resolver::ResolverConfig.","inputs":{"properties":{"resourceId":{"type":"string","description":"ResourceId"}},"required":["resourceId"]},"outputs":{"properties":{"autodefinedReverse":{"$ref":"#/types/aws-native:route53resolver:ResolverConfigAutodefinedReverse","description":"ResolverAutodefinedReverseStatus, possible values are ENABLING, ENABLED, DISABLING AND DISABLED."},"id":{"description":"Id","type":"string"},"ownerId":{"description":"AccountId","type":"string"}}}},"aws-native:route53resolver:getResolverDnssecConfig":{"description":"Resource schema for AWS::Route53Resolver::ResolverDNSSECConfig.","inputs":{"properties":{"id":{"type":"string","description":"Id"}},"required":["id"]},"outputs":{"properties":{"id":{"description":"Id","type":"string"},"ownerId":{"description":"AccountId","type":"string"},"validationStatus":{"$ref":"#/types/aws-native:route53resolver:ResolverDnssecConfigValidationStatus","description":"ResolverDNSSECValidationStatus, possible values are ENABLING, ENABLED, DISABLING AND DISABLED."}}}},"aws-native:route53resolver:getResolverEndpoint":{"description":"Resource type definition for AWS::Route53Resolver::ResolverEndpoint","inputs":{"properties":{"resolverEndpointId":{"type":"string","description":"The ID of the resolver endpoint."}},"required":["resolverEndpointId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the resolver endpoint, such as arn:aws:route53resolver:us-east-1:123456789012:resolver-endpoint/resolver-endpoint-a1bzhi.","type":"string"},"hostVpcId":{"description":"The ID of the VPC that you want to create the resolver endpoint in.","type":"string"},"ipAddressCount":{"description":"The number of IP addresses that the resolver endpoint can use for DNS queries.","type":"string"},"ipAddresses":{"description":"The subnets and IP addresses in your VPC that DNS queries originate from (for outbound endpoints) or that you forward DNS queries to (for inbound endpoints). The subnet ID uniquely identifies a VPC.","items":{"$ref":"#/types/aws-native:route53resolver:ResolverEndpointIpAddressRequest"},"type":"array"},"name":{"description":"A friendly name that lets you easily find a configuration in the Resolver dashboard in the Route 53 console.","type":"string"},"protocols":{"description":"Protocols used for the endpoint. DoH-FIPS is applicable for inbound endpoints only.","items":{"type":"string"},"type":"array"},"resolverEndpointId":{"description":"The ID of the resolver endpoint.","type":"string"},"resolverEndpointType":{"$ref":"#/types/aws-native:route53resolver:ResolverEndpointType","description":"The Resolver endpoint IP address type."},"rniEnhancedMetricsEnabled":{"description":"Specifies whether RNI enhanced metrics are enabled for the Resolver Endpoints. When set to true, one-minute granular metrics are published in CloudWatch for each RNI associated with this endpoint. When set to false, metrics are not published. Default is false.","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetNameServerMetricsEnabled":{"description":"Specifies whether target name server metrics are enabled for the Outbound Resolver Endpoint. When set to true, one-minute granular metrics are published in CloudWatch for each target name server associated with this endpoint. When set to false, metrics are not published. Default is false.","type":"boolean"}}}},"aws-native:route53resolver:getResolverQueryLoggingConfig":{"description":"Resource schema for AWS::Route53Resolver::ResolverQueryLoggingConfig.","inputs":{"properties":{"id":{"type":"string","description":"ResourceId"}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"Arn","type":"string"},"associationCount":{"description":"Count","type":"integer"},"creationTime":{"description":"Rfc3339TimeString","type":"string"},"creatorRequestId":{"description":"The id of the creator request.","type":"string"},"id":{"description":"ResourceId","type":"string"},"ownerId":{"description":"AccountId","type":"string"},"shareStatus":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigShareStatus","description":"ShareStatus, possible values are NOT_SHARED, SHARED_WITH_ME, SHARED_BY_ME."},"status":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigStatus","description":"ResolverQueryLogConfigStatus, possible values are CREATING, CREATED, DELETED AND FAILED."}}}},"aws-native:route53resolver:getResolverQueryLoggingConfigAssociation":{"description":"Resource schema for AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation.","inputs":{"properties":{"id":{"type":"string","description":"Id"}},"required":["id"]},"outputs":{"properties":{"creationTime":{"description":"Rfc3339TimeString","type":"string"},"error":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigAssociationError","description":"ResolverQueryLogConfigAssociationError"},"errorMessage":{"description":"ResolverQueryLogConfigAssociationErrorMessage","type":"string"},"id":{"description":"Id","type":"string"},"status":{"$ref":"#/types/aws-native:route53resolver:ResolverQueryLoggingConfigAssociationStatus","description":"ResolverQueryLogConfigAssociationStatus"}}}},"aws-native:route53resolver:getResolverRule":{"description":"Resource Type definition for AWS::Route53Resolver::ResolverRule","inputs":{"properties":{"resolverRuleId":{"type":"string","description":"The ID of the endpoint that the rule is associated with."}},"required":["resolverRuleId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the resolver rule.","type":"string"},"delegationRecord":{"description":"The name server domain for queries to be delegated to if a query matches the delegation record.","type":"string"},"domainName":{"description":"DNS queries for this domain name are forwarded to the IP addresses that are specified in TargetIps","type":"string"},"name":{"description":"The name for the Resolver rule","type":"string"},"resolverEndpointId":{"description":"The ID of the endpoint that the rule is associated with.","type":"string"},"resolverRuleId":{"description":"The ID of the endpoint that the rule is associated with.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetIps":{"description":"An array that contains the IP addresses and ports that an outbound endpoint forwards DNS queries to. Typically, these are the IP addresses of DNS resolvers on your network. Specify IPv4 addresses. IPv6 is not supported.","items":{"$ref":"#/types/aws-native:route53resolver:ResolverRuleTargetAddress"},"type":"array"}}}},"aws-native:route53resolver:getResolverRuleAssociation":{"description":"In the response to an [AssociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_AssociateResolverRule.html), [DisassociateResolverRule](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_DisassociateResolverRule.html), or [ListResolverRuleAssociations](https://docs.aws.amazon.com/Route53/latest/APIReference/API_route53resolver_ListResolverRuleAssociations.html) request, provides information about an association between a resolver rule and a VPC. The association determines which DNS queries that originate in the VPC are forwarded to your network.","inputs":{"properties":{"resolverRuleAssociationId":{"type":"string","description":"The ID of the resolver rule association that you want to get information about, such as `rslvr-rrassoc-97242eaf88example` ."}},"required":["resolverRuleAssociationId"]},"outputs":{"properties":{"resolverRuleAssociationId":{"description":"The ID of the resolver rule association that you want to get information about, such as `rslvr-rrassoc-97242eaf88example` .","type":"string"}}}},"aws-native:rtbfabric:getInboundExternalLink":{"description":"Resource Type definition for AWS::RTBFabric::InboundExternalLink Resource Type","inputs":{"properties":{"arn":{"type":"string"}},"required":["arn"]},"outputs":{"properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"domainName":{"type":"string"},"gatewayId":{"type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkAttributes"},"linkId":{"type":"string"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkLogSettings"},"linkStatus":{"$ref":"#/types/aws-native:rtbfabric:InboundExternalLinkLinkStatus"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedTimestamp":{"type":"string"}}}},"aws-native:rtbfabric:getLink":{"description":"Resource Type definition for AWS::RTBFabric::Link Resource Type","inputs":{"properties":{"arn":{"type":"string"}},"required":["arn"]},"outputs":{"properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"gatewayId":{"description":"The unique identifier of the gateway.","type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:LinkAttributes","description":"Attributes of the link."},"linkDirection":{"$ref":"#/types/aws-native:rtbfabric:LinkDirection"},"linkId":{"description":"The unique identifier of the link.","type":"string"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:LinkLogSettings","description":"Settings for the application logs."},"linkStatus":{"$ref":"#/types/aws-native:rtbfabric:LinkStatus"},"peerGatewayId":{"description":"The unique identifier of the peer gateway.","type":"string"},"tags":{"description":"A map of the key-value pairs of the tag or tags to assign to the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedTimestamp":{"type":"string"}}}},"aws-native:rtbfabric:getOutboundExternalLink":{"description":"Resource Type definition for AWS::RTBFabric::OutboundExternalLink Resource Type","inputs":{"properties":{"arn":{"type":"string"}},"required":["arn"]},"outputs":{"properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"gatewayId":{"type":"string"},"linkAttributes":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkAttributes"},"linkId":{"type":"string"},"linkLogSettings":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkLogSettings"},"linkStatus":{"$ref":"#/types/aws-native:rtbfabric:OutboundExternalLinkLinkStatus"},"publicEndpoint":{"type":"string"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedTimestamp":{"type":"string"}}}},"aws-native:rtbfabric:getRequesterGateway":{"description":"Resource Type definition for AWS::RTBFabric::RequesterGateway Resource Type.","inputs":{"properties":{"arn":{"type":"string"}},"required":["arn"]},"outputs":{"properties":{"activeLinksCount":{"type":"integer"},"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"description":{"description":"An optional description for the requester gateway.","type":"string"},"domainName":{"type":"string"},"gatewayId":{"type":"string"},"requesterGatewayStatus":{"$ref":"#/types/aws-native:rtbfabric:RequesterGatewayStatus"},"securityGroupIds":{"description":"The unique identifiers of the security groups.","items":{"type":"string"},"type":"array"},"subnetIds":{"description":"The unique identifiers of the subnets.","items":{"type":"string"},"type":"array"},"tags":{"description":"A map of the key-value pairs of the tag or tags to assign to the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"totalLinksCount":{"type":"integer"},"updatedTimestamp":{"type":"string"},"vpcId":{"description":"The unique identifier of the Virtual Private Cloud (VPC).","type":"string"}}}},"aws-native:rtbfabric:getResponderGateway":{"description":"Resource Type definition for AWS::RTBFabric::ResponderGateway Resource Type","inputs":{"properties":{"arn":{"type":"string"}},"required":["arn"]},"outputs":{"properties":{"arn":{"type":"string"},"createdTimestamp":{"type":"string"},"description":{"description":"An optional description for the responder gateway.","type":"string"},"domainName":{"description":"The domain name for the responder gateway.","type":"string"},"gatewayId":{"type":"string"},"managedEndpointConfiguration":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayManagedEndpointConfiguration","description":"The configuration for the managed endpoint."},"port":{"description":"The networking port to use.","type":"integer"},"protocol":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayProtocol","description":"The networking protocol to use."},"responderGatewayStatus":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayStatus"},"securityGroupIds":{"description":"The unique identifiers of the security groups.","items":{"type":"string"},"type":"array"},"subnetIds":{"description":"The unique identifiers of the subnets.","items":{"type":"string"},"type":"array"},"tags":{"description":"A map of the key-value pairs of the tag or tags to assign to the resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trustStoreConfiguration":{"$ref":"#/types/aws-native:rtbfabric:ResponderGatewayTrustStoreConfiguration","description":"The configuration of the trust store."},"updatedTimestamp":{"type":"string"},"vpcId":{"description":"The unique identifier of the Virtual Private Cloud (VPC).","type":"string"}}}},"aws-native:rum:getAppMonitor":{"description":"Resource Type definition for AWS::RUM::AppMonitor","inputs":{"properties":{"name":{"type":"string","description":"A name for the app monitor"}},"required":["name"]},"outputs":{"properties":{"appMonitorConfiguration":{"$ref":"#/types/aws-native:rum:AppMonitorConfiguration","description":"A structure that contains much of the configuration data for the app monitor. If you are using Amazon Cognito for authorization, you must include this structure in your request, and it must include the ID of the Amazon Cognito identity pool to use for authorization. If you don't include `AppMonitorConfiguration` , you must set up your own authorization method. For more information, see [Authorize your application to send data to AWS](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-get-started-authorization.html) .\n\nIf you omit this argument, the sample rate used for CloudWatch RUM is set to 10% of the user sessions."},"customEvents":{"$ref":"#/types/aws-native:rum:AppMonitorCustomEvents","description":"Specifies whether this app monitor allows the web client to define and send custom events. If you omit this parameter, custom events are `DISABLED` ."},"cwLogEnabled":{"description":"Data collected by RUM is kept by RUM for 30 days and then deleted. This parameter specifies whether RUM sends a copy of this telemetry data to CWLlong in your account. This enables you to keep the telemetry data for more than 30 days, but it does incur CWLlong charges. If you omit this parameter, the default is false","type":"boolean"},"deobfuscationConfiguration":{"$ref":"#/types/aws-native:rum:AppMonitorDeobfuscationConfiguration","description":"A structure that contains the configuration for how an app monitor can deobfuscate stack traces."},"domain":{"description":"The top-level internet domain name for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list.","type":"string"},"domainList":{"description":"The top-level internet domain names for which your application has administrative authority. The CreateAppMonitor requires either the domain or the domain list.","items":{"type":"string"},"type":"array"},"id":{"description":"The unique ID of the new app monitor.","type":"string"},"resourcePolicy":{"$ref":"#/types/aws-native:rum:AppMonitorResourcePolicy","description":"Use this structure to assign a resource-based policy to a CloudWatch RUM app monitor to control access to it. Each app monitor can have one resource-based policy. The maximum size of the policy is 4 KB. To learn more about using resource policies with RUM, see [Using resource-based policies with CloudWatch RUM](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-RUM-resource-policies.html) ."},"tags":{"description":"Assigns one or more tags (key-value pairs) to the app monitor.\n\nTags can help you organize and categorize your resources. You can also use them to scope user permissions by granting a user permission to access or change only resources with certain tag values.\n\nTags don't have any semantic meaning to AWS and are interpreted strictly as strings of characters.\n\nYou can associate as many as 50 tags with an app monitor.\n\nFor more information, see [Tagging AWS resources](https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3:getAccessGrant":{"description":"The AWS::S3::AccessGrant resource is an Amazon S3 resource type representing permissions to a specific S3 bucket or prefix hosted in an S3 Access Grants instance. ","inputs":{"properties":{"accessGrantId":{"type":"string","description":"The ID assigned to this access grant."}},"required":["accessGrantId"]},"outputs":{"properties":{"accessGrantArn":{"description":"The Amazon Resource Name (ARN) of the specified access grant.","type":"string"},"accessGrantId":{"description":"The ID assigned to this access grant.","type":"string"},"accessGrantsLocationConfiguration":{"$ref":"#/types/aws-native:s3:AccessGrantsLocationConfiguration","description":"The configuration options of the grant location, which is the S3 path to the data to which you are granting access."},"accessGrantsLocationId":{"description":"The custom S3 location to be accessed by the grantee","type":"string"},"applicationArn":{"description":"The ARN of the application grantees will use to access the location","type":"string"},"grantScope":{"description":"The S3 path of the data to which you are granting access. It is a combination of the S3 path of the registered location and the subprefix.","type":"string"},"grantee":{"$ref":"#/types/aws-native:s3:AccessGrantGrantee","description":"The principal who will be granted permission to access S3."},"permission":{"$ref":"#/types/aws-native:s3:AccessGrantPermission","description":"The level of access to be afforded to the grantee"}}}},"aws-native:s3:getAccessGrantsInstance":{"description":"The AWS::S3::AccessGrantsInstance resource is an Amazon S3 resource type that hosts Access Grants and their associated locations","inputs":{"properties":{"accessGrantsInstanceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified Access Grants instance."}},"required":["accessGrantsInstanceArn"]},"outputs":{"properties":{"accessGrantsInstanceArn":{"description":"The Amazon Resource Name (ARN) of the specified Access Grants instance.","type":"string"},"accessGrantsInstanceId":{"description":"A unique identifier for the specified access grants instance.","type":"string"},"identityCenterArn":{"description":"The Amazon Resource Name (ARN) of the specified AWS Identity Center.","type":"string"}}}},"aws-native:s3:getAccessGrantsLocation":{"description":"The AWS::S3::AccessGrantsLocation resource is an Amazon S3 resource type hosted in an access grants instance which can be the target of S3 access grants.","inputs":{"properties":{"accessGrantsLocationId":{"type":"string","description":"The unique identifier for the specified Access Grants location."}},"required":["accessGrantsLocationId"]},"outputs":{"properties":{"accessGrantsLocationArn":{"description":"The Amazon Resource Name (ARN) of the specified Access Grants location.","type":"string"},"accessGrantsLocationId":{"description":"The unique identifier for the specified Access Grants location.","type":"string"},"iamRoleArn":{"description":"The Amazon Resource Name (ARN) of the access grant location's associated IAM role.","type":"string"},"locationScope":{"description":"Descriptor for where the location actually points","type":"string"}}}},"aws-native:s3:getAccessPoint":{"description":"The AWS::S3::AccessPoint resource is an Amazon S3 resource type that you can use to access buckets.","inputs":{"properties":{"name":{"type":"string","description":"The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name."}},"required":["name"]},"outputs":{"properties":{"alias":{"description":"The alias of this Access Point. This alias can be used for compatibility purposes with other AWS services and third-party applications.","type":"string"},"arn":{"description":"The Amazon Resource Name (ARN) of the specified accesspoint.","type":"string"},"networkOrigin":{"$ref":"#/types/aws-native:s3:AccessPointNetworkOrigin","description":"Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies."},"policy":{"$ref":"pulumi.json#/Any","description":"The Access Point Policy you want to apply to this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::AccessPoint` for more information about the expected schema for this property."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this S3 Access Point.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3:getBucket":{"description":"The ``AWS::S3::Bucket`` resource creates an Amazon S3 bucket in the same AWS Region where you create the AWS CloudFormation stack.\n To control how AWS CloudFormation handles the bucket when the stack is deleted, you can set a deletion policy for your bucket. You can choose to *retain* the bucket or to *delete* the bucket. For more information, see [DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html).\n  You can only delete empty buckets. Deletion fails for buckets that have contents.","inputs":{"properties":{"bucketName":{"type":"string","description":"A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name. The bucket name must contain only lowercase letters, numbers, periods (.), and dashes (-) and must follow [Amazon S3 bucket restrictions and limitations](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html). For more information, see [Rules for naming Amazon S3 buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html) in the *Amazon S3 User Guide*. \n  If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name."}},"required":["bucketName"]},"outputs":{"properties":{"abacStatus":{"$ref":"#/types/aws-native:s3:BucketAbacStatus","description":"The ABAC status of the general purpose bucket. When ABAC is enabled for the general purpose bucket, you can use tags to manage access to the general purpose buckets as well as for cost tracking purposes. When ABAC is disabled for the general purpose buckets, you can only use tags for cost tracking purposes. For more information, see [Using tags with S3 general purpose buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging.html)."},"accelerateConfiguration":{"$ref":"#/types/aws-native:s3:BucketAccelerateConfiguration","description":"Configures the transfer acceleration state for an Amazon S3 bucket. For more information, see [Amazon S3 Transfer Acceleration](https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html) in the *Amazon S3 User Guide*."},"analyticsConfigurations":{"description":"Specifies the configuration and any analyses for the analytics filter of an Amazon S3 bucket.","items":{"$ref":"#/types/aws-native:s3:BucketAnalyticsConfiguration"},"type":"array"},"arn":{"description":"Returns the Amazon Resource Name (ARN) of the specified bucket.\n\nExample: `arn:aws:s3:::DOC-EXAMPLE-BUCKET`","type":"string"},"bucketEncryption":{"$ref":"#/types/aws-native:s3:BucketEncryption","description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3-managed keys (SSE-S3), AWS KMS-managed keys (SSE-KMS), or dual-layer server-side encryption with KMS-managed keys (DSSE-KMS). For information about the Amazon S3 default encryption feature, see [Amazon S3 Default Encryption for S3 Buckets](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html) in the *Amazon S3 User Guide*."},"corsConfiguration":{"$ref":"#/types/aws-native:s3:BucketCorsConfiguration","description":"Describes the cross-origin access configuration for objects in an Amazon S3 bucket. For more information, see [Enabling Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html) in the *Amazon S3 User Guide*."},"domainName":{"description":"Returns the IPv4 DNS name of the specified bucket.\n\nExample: `DOC-EXAMPLE-BUCKET.s3.amazonaws.com`","type":"string"},"dualStackDomainName":{"description":"Returns the IPv6 DNS name of the specified bucket.\n\nExample: `DOC-EXAMPLE-BUCKET.s3.dualstack.us-east-2.amazonaws.com`\n\nFor more information about dual-stack endpoints, see [Using Amazon S3 Dual-Stack Endpoints](https://docs.aws.amazon.com/AmazonS3/latest/dev/dual-stack-endpoints.html) .","type":"string"},"intelligentTieringConfigurations":{"description":"Defines how Amazon S3 handles Intelligent-Tiering storage.","items":{"$ref":"#/types/aws-native:s3:BucketIntelligentTieringConfiguration"},"type":"array"},"inventoryConfigurations":{"description":"Specifies the S3 Inventory configuration for an Amazon S3 bucket. For more information, see [GET Bucket inventory](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketGETInventoryConfig.html) in the *Amazon S3 API Reference*.","items":{"$ref":"#/types/aws-native:s3:BucketInventoryConfiguration"},"type":"array"},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3:BucketLifecycleConfiguration","description":"Specifies the lifecycle configuration for objects in an Amazon S3 bucket. For more information, see [Object Lifecycle Management](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html) in the *Amazon S3 User Guide*."},"loggingConfiguration":{"$ref":"#/types/aws-native:s3:BucketLoggingConfiguration","description":"Settings that define where logs are stored."},"metadataConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataConfiguration","description":"The S3 Metadata configuration for a general purpose bucket."},"metadataTableConfiguration":{"$ref":"#/types/aws-native:s3:BucketMetadataTableConfiguration","description":"The metadata table configuration of an S3 general purpose bucket."},"metricsConfigurations":{"description":"Specifies a metrics configuration for the CloudWatch request metrics (specified by the metrics configuration ID) from an Amazon S3 bucket. If you're updating an existing metrics configuration, note that this is a full replacement of the existing metrics configuration. If you don't include the elements you want to keep, they are erased. For more information, see [PutBucketMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketPUTMetricConfiguration.html).","items":{"$ref":"#/types/aws-native:s3:BucketMetricsConfiguration"},"type":"array"},"notificationConfiguration":{"$ref":"#/types/aws-native:s3:BucketNotificationConfiguration","description":"Configuration that defines how Amazon S3 handles bucket notifications."},"objectLockConfiguration":{"$ref":"#/types/aws-native:s3:BucketObjectLockConfiguration","description":"This operation is not supported for directory buckets.\n  Places an Object Lock configuration on the specified bucket. The rule specified in the Object Lock configuration will be applied by default to every new object placed in the specified bucket. For more information, see [Locking Objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html). \n   +  The ``DefaultRetention`` settings require both a mode and a period.\n  +  The ``DefaultRetention`` period can be either ``Days`` or ``Years`` but you must select one. You cannot specify ``Days`` and ``Years`` at the same time.\n  +  You can enable Object Lock for new or existing buckets. For more information, see [Configuring Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html).\n  \n   You must URL encode any signed header values that contain spaces. For example, if your header value is ``my file.txt``, containing two spaces after ``my``, you must URL encode this value to ``my%20%20file.txt``."},"objectLockEnabled":{"description":"Indicates whether this bucket has an Object Lock configuration enabled. Enable ``ObjectLockEnabled`` when you apply ``ObjectLockConfiguration`` to a bucket.","type":"boolean"},"ownershipControls":{"$ref":"#/types/aws-native:s3:BucketOwnershipControls","description":"Configuration that defines how Amazon S3 handles Object Ownership rules."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3:BucketPublicAccessBlockConfiguration","description":"Configuration that defines how Amazon S3 handles public access."},"regionalDomainName":{"description":"Returns the regional domain name of the specified bucket.\n\nExample: `DOC-EXAMPLE-BUCKET.s3.us-east-2.amazonaws.com`","type":"string"},"replicationConfiguration":{"$ref":"#/types/aws-native:s3:BucketReplicationConfiguration","description":"Configuration for replicating objects in an S3 bucket. To enable replication, you must also enable versioning by using the ``VersioningConfiguration`` property.\n Amazon S3 can store replicated objects in a single destination bucket or multiple destination buckets. The destination bucket or buckets must already exist."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this S3 bucket.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"versioningConfiguration":{"$ref":"#/types/aws-native:s3:BucketVersioningConfiguration","description":"Enables multiple versions of all objects in this bucket. You might enable versioning to prevent objects from being deleted or overwritten by mistake or to archive objects so that you can retrieve previous versions of them.\n  When you enable versioning on a bucket for the first time, it might take a short amount of time for the change to be fully propagated. We recommend that you wait for 15 minutes after enabling versioning before issuing write operations (``PUT`` or ``DELETE``) on objects in the bucket."},"websiteConfiguration":{"$ref":"#/types/aws-native:s3:BucketWebsiteConfiguration","description":"Information used to configure the bucket as a static website. For more information, see [Hosting Websites on Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.html)."},"websiteUrl":{"description":"Returns the Amazon S3 website endpoint for the specified bucket.\n\nExample (IPv4): `http://DOC-EXAMPLE-BUCKET.s3-website.us-east-2.amazonaws.com`\n\nExample (IPv6): `http://DOC-EXAMPLE-BUCKET.s3.dualstack.us-east-2.amazonaws.com`","type":"string"}}}},"aws-native:s3:getBucketPolicy":{"description":"Applies an Amazon S3 bucket policy to an Amazon S3 bucket. If you are using an identity other than the root user of the AWS-account that owns the bucket, the calling identity must have the ``PutBucketPolicy`` permissions on the specified bucket and belong to the bucket owner's account in order to use this operation.\n If you don't have ``PutBucketPolicy`` permissions, Amazon S3 returns a ``403 Access Denied`` error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a ``405 Method Not Allowed`` error.\n   As a security precaution, the root user of the AWS-account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action. \n  When using the ``AWS::S3::BucketPolicy`` resource, you can create, update, and delete bucket policies for S3 buckets located in Regions that are different from the stack's Region. However, the CloudFormation stacks should be deployed in the US East (N. Virginia) or ``us-east-1`` Region. This cross-region bucket policy modification functionality is supported for backward compatibility with existing workflows.\n  If the [DeletionPolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html) is not specified or set to ``Delete``, the bucket policy will be removed when the stack is deleted. If set to ``Retain``, the bucket policy will be preserved even after the stack is deleted.\n  For example, a CloudFormation stack in ``us-east-1`` can use the ``AWS::S3::BucketPolicy`` resource to manage the bucket policy for an S3 bucket in ``us-west-2``. The retention or removal of the bucket policy during the stack deletion is determined by the ``DeletionPolicy`` attribute specified in the stack template.\n For more information, see [Bucket policy examples](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html).\n The following operations are related to ``PutBucketPolicy``:\n  +   [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html) \n  +   [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html)","inputs":{"properties":{"bucket":{"type":"string","description":"The name of the Amazon S3 bucket to which the policy applies."}},"required":["bucket"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM. For more information, see the AWS::IAM::Policy [PolicyDocument](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html#cfn-iam-policy-policydocument) resource description in this guide and [Access Policy Language Overview](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the *Amazon S3 User Guide*.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::BucketPolicy` for more information about the expected schema for this property."}}}},"aws-native:s3:getMultiRegionAccessPoint":{"description":"AWS::S3::MultiRegionAccessPoint is an Amazon S3 resource type that dynamically routes S3 requests to easily satisfy geographic compliance requirements based on customer-defined routing policies.","inputs":{"properties":{"name":{"type":"string","description":"The name you want to assign to this Multi Region Access Point."}},"required":["name"]},"outputs":{"properties":{"alias":{"description":"The alias is a unique identifier to, and is part of the public DNS name for this Multi Region Access Point","type":"string"},"createdAt":{"description":"The timestamp of the when the Multi Region Access Point is created","type":"string"}}}},"aws-native:s3:getMultiRegionAccessPointPolicy":{"description":"The policy to be attached to a Multi Region Access Point","inputs":{"properties":{"mrapName":{"type":"string","description":"The name of the Multi Region Access Point to apply policy"}},"required":["mrapName"]},"outputs":{"properties":{"policy":{"$ref":"pulumi.json#/Any","description":"Policy document to apply to a Multi Region Access Point\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3::MultiRegionAccessPointPolicy` for more information about the expected schema for this property."},"policyStatus":{"$ref":"#/types/aws-native:s3:PolicyStatusProperties","description":"The Policy Status associated with this Multi Region Access Point"}}}},"aws-native:s3:getStorageLensGroup":{"description":"The AWS::S3::StorageLensGroup resource is an Amazon S3 resource type that you can use to create Storage Lens Group.","inputs":{"properties":{"name":{"type":"string","description":"This property contains the Storage Lens group name."}},"required":["name"]},"outputs":{"properties":{"filter":{"$ref":"#/types/aws-native:s3:StorageLensGroupFilter","description":"This property contains the criteria for the Storage Lens group data that is displayed"},"storageLensGroupArn":{"description":"The ARN for the Amazon S3 Storage Lens Group.","type":"string"},"tags":{"description":"A set of tags (key-value pairs) for this Amazon S3 Storage Lens Group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3express:getAccessPoint":{"description":"The AWS::S3Express::AccessPoint resource is an Amazon S3 resource type that you can use to access buckets.","inputs":{"properties":{"name":{"type":"string","description":"The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name. For directory buckets, the access point name must consist of a base name that you provide and suffix that includes the ZoneID (AWS Availability Zone or Local Zone) of your bucket location, followed by --xa-s3."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the specified accesspoint.","type":"string"},"networkOrigin":{"$ref":"#/types/aws-native:s3express:AccessPointNetworkOrigin","description":"Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies."},"policy":{"$ref":"pulumi.json#/Any","description":"The Access Point Policy you want to apply to this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Express::AccessPoint` for more information about the expected schema for this property."},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3express:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point."},"scope":{"$ref":"#/types/aws-native:s3express:AccessPointScope","description":"For directory buckets, you can filter access control to specific prefixes, API operations, or a combination of both."},"tags":{"description":"An array of tags that you can apply to access points. Tags are key-value pairs of metadata used to categorize your access points and control access. For more information, see [Using tags for attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html#using-tags-for-abac) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3express:getBucketPolicy":{"description":"Resource Type definition for AWS::S3Express::BucketPolicy.","inputs":{"properties":{"bucket":{"type":"string","description":"The name of the S3 directory bucket to which the policy applies."}},"required":["bucket"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Express::BucketPolicy` for more information about the expected schema for this property."}}}},"aws-native:s3express:getDirectoryBucket":{"description":"Resource Type definition for AWS::S3Express::DirectoryBucket.","inputs":{"properties":{"bucketName":{"type":"string","description":"Specifies a name for the bucket. The bucket name must contain only lowercase letters, numbers, and hyphens (-). A directory bucket name must be unique in the chosen Availability Zone or Local Zone. The bucket name must also follow the format 'bucket_base_name--zone_id--x-s3'. The zone_id can be the ID of an Availability Zone or a Local Zone. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the bucket name."}},"required":["bucketName"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) of the specified bucket.","type":"string"},"availabilityZoneName":{"description":"Returns the code for the Availability Zone or Local Zone where the directory bucket was created. An example for the code of an Availability Zone is 'us-east-1f'.","type":"string"},"bucketEncryption":{"$ref":"#/types/aws-native:s3express:DirectoryBucketBucketEncryption","description":"Specifies default encryption for a bucket using server-side encryption with Amazon S3 managed keys (SSE-S3) or AWS KMS keys (SSE-KMS). For information about default encryption for directory buckets, see [Setting and monitoring default encryption for directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-bucket-encryption.html) in the *Amazon S3 User Guide* ."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3express:DirectoryBucketLifecycleConfiguration","description":"Lifecycle rules that define how Amazon S3 Express manages objects during their lifetime."},"tags":{"description":"An array of tags that you can apply to the S3 directory bucket. Tags are key-value pairs of metadata used to categorize and organize your buckets, track costs, and control access. For more information, see [Using tags with directory buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/directory-buckets-tagging.html) .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3objectlambda:getAccessPoint":{"description":"The AWS::S3ObjectLambda::AccessPoint resource is an Amazon S3ObjectLambda resource type that you can use to add computation to S3 actions","inputs":{"properties":{"name":{"type":"string","description":"The name you want to assign to this Object lambda Access Point."}},"required":["name"]},"outputs":{"properties":{"alias":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointAlias"},"arn":{"description":"Specifies the ARN for the Object Lambda Access Point.","type":"string"},"creationDate":{"description":"The date and time when the Object lambda Access Point was created.","type":"string"},"objectLambdaConfiguration":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointObjectLambdaConfiguration","description":"The Object lambda Access Point Configuration that configures transformations to be applied on the objects on specified S3 Actions"},"policyStatus":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointPolicyStatus"},"publicAccessBlockConfiguration":{"$ref":"#/types/aws-native:s3objectlambda:AccessPointPublicAccessBlockConfiguration","description":"The PublicAccessBlock configuration that you want to apply to this Access Point. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status 'The Meaning of Public' in the Amazon Simple Storage Service Developer Guide."}}}},"aws-native:s3objectlambda:getAccessPointPolicy":{"description":"AWS::S3ObjectLambda::AccessPointPolicy resource is an Amazon S3ObjectLambda policy type that you can use to control permissions for your S3ObjectLambda","inputs":{"properties":{"objectLambdaAccessPoint":{"type":"string","description":"The name of the Amazon S3 ObjectLambdaAccessPoint to which the policy applies."}},"required":["objectLambdaAccessPoint"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified ObjectLambdaAccessPoint. For more information, see Access Policy Language Overview (https://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-language-overview.html) in the Amazon Simple Storage Service Developer Guide. \n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3ObjectLambda::AccessPointPolicy` for more information about the expected schema for this property."}}}},"aws-native:s3outposts:getAccessPoint":{"description":"Resource Type Definition for AWS::S3Outposts::AccessPoint","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified AccessPoint."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the specified AccessPoint.","type":"string"},"policy":{"$ref":"pulumi.json#/Any","description":"The access point policy associated with this access point.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Outposts::AccessPoint` for more information about the expected schema for this property."}}}},"aws-native:s3outposts:getBucket":{"description":"Resource Type Definition for AWS::S3Outposts::Bucket","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified bucket."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the specified bucket.","type":"string"},"lifecycleConfiguration":{"$ref":"#/types/aws-native:s3outposts:BucketLifecycleConfiguration","description":"Rules that define how Amazon S3Outposts manages objects during their lifetime."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this S3Outposts bucket.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3outposts:getBucketPolicy":{"description":"Resource Type Definition for AWS::S3Outposts::BucketPolicy","inputs":{"properties":{"bucket":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified bucket."}},"required":["bucket"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document containing permissions to add to the specified bucket.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::S3Outposts::BucketPolicy` for more information about the expected schema for this property."}}}},"aws-native:s3outposts:getEndpoint":{"description":"Resource Type Definition for AWS::S3Outposts::Endpoint","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the endpoint.","type":"string"},"cidrBlock":{"description":"The VPC CIDR committed by this endpoint.","type":"string"},"creationTime":{"description":"The time the endpoint was created.","type":"string"},"failedReason":{"$ref":"#/types/aws-native:s3outposts:EndpointFailedReason","description":"The failure reason, if any, for a create or delete endpoint operation."},"id":{"description":"The ID of the endpoint.","type":"string"},"networkInterfaces":{"description":"The network interfaces of the endpoint.","items":{"$ref":"#/types/aws-native:s3outposts:EndpointNetworkInterface"},"type":"array"},"status":{"$ref":"#/types/aws-native:s3outposts:EndpointStatus","description":"The status of the endpoint."}}}},"aws-native:s3tables:getTable":{"description":"Resource Type definition for AWS::S3Tables::Table","inputs":{"properties":{"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table."}},"required":["tableArn"]},"outputs":{"properties":{"compaction":{"$ref":"#/types/aws-native:s3tables:TableCompaction","description":"Contains details about the compaction settings for an Iceberg table."},"namespace":{"description":"The name of the namespace.","type":"string"},"snapshotManagement":{"$ref":"#/types/aws-native:s3tables:TableSnapshotManagement","description":"Contains details about the Iceberg snapshot management settings for the table."},"tableArn":{"description":"The Amazon Resource Name (ARN) of the table.","type":"string"},"tableName":{"description":"The name for the table.","type":"string"},"tags":{"description":"User tags (key-value pairs) to associate with the table.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"versionToken":{"description":"The version token of the table.","type":"string"},"warehouseLocation":{"description":"The warehouse location of the table.","type":"string"}}}},"aws-native:s3tables:getTableBucket":{"description":"Creates an Amazon S3 Tables table bucket in the same AWS Region where you create the AWS CloudFormation stack.","inputs":{"properties":{"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket."}},"required":["tableBucketArn"]},"outputs":{"properties":{"encryptionConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketEncryptionConfiguration","description":"Configuration specifying how data should be encrypted. This structure defines the encryption algorithm and optional KMS key to be used for server-side encryption."},"metricsConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketMetricsConfiguration"},"storageClassConfiguration":{"$ref":"#/types/aws-native:s3tables:TableBucketStorageClassConfiguration","description":"The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements."},"tableBucketArn":{"description":"The Amazon Resource Name (ARN) of the table bucket.","type":"string"},"tags":{"description":"User tags (key-value pairs) to associate with the table bucket.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"unreferencedFileRemoval":{"$ref":"#/types/aws-native:s3tables:TableBucketUnreferencedFileRemoval","description":"The unreferenced file removal settings for your table bucket. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots. For more information, see the [*Amazon S3 User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-table-buckets-maintenance.html) ."}}}},"aws-native:s3tables:getTableBucketPolicy":{"description":"Applies an IAM resource policy to a table bucket.","inputs":{"properties":{"tableBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table bucket."}},"required":["tableBucketArn"]},"outputs":{"properties":{"resourcePolicy":{"$ref":"#/types/aws-native:s3tables:TableBucketPolicyResourcePolicy","description":"The bucket policy JSON for the table bucket."}}}},"aws-native:s3tables:getTablePolicy":{"description":"Resource Type definition for AWS::S3Tables::TablePolicy","inputs":{"properties":{"tableArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the table."}},"required":["tableArn"]},"outputs":{"properties":{"namespace":{"description":"The namespace to associated with the table.","type":"string"},"resourcePolicy":{"$ref":"#/types/aws-native:s3tables:TablePolicyResourcePolicy","description":"The `JSON` that defines the policy."},"tableBucketArn":{"description":"The Amazon Resource Name (ARN) of the table bucket that contains the table.","type":"string"},"tableName":{"description":"The name of the table.","type":"string"}}}},"aws-native:s3vectors:getIndex":{"description":"Resource Type definition for AWS::S3Vectors::Index","inputs":{"properties":{"indexArn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified index.\n\nExample: `arn:aws:s3vectors:us-east-1:123456789012:bucket/amzn-s3-demo-vector-bucket/index/my-index`"}},"required":["indexArn"]},"outputs":{"properties":{"creationTime":{"description":"Returns the date and time when the vector index was created.\n\nExample: `2024-12-21T10:30:00Z`","type":"string"},"indexArn":{"description":"Returns the Amazon Resource Name (ARN) of the specified index.\n\nExample: `arn:aws:s3vectors:us-east-1:123456789012:bucket/amzn-s3-demo-vector-bucket/index/my-index`","type":"string"},"tags":{"description":"User tags (key-value pairs) to associate with the index.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:s3vectors:getVectorBucket":{"description":"Resource Type definition for AWS::S3Vectors::VectorBucket","inputs":{"properties":{"vectorBucketArn":{"type":"string","description":"Returns the Amazon Resource Name (ARN) of the specified vector bucket.\n\nExample: `arn:aws:s3vectors:us-east-1:123456789012:bucket/amzn-s3-demo-vector-bucket`"}},"required":["vectorBucketArn"]},"outputs":{"properties":{"creationTime":{"description":"Returns the date and time when the vector bucket was created.\n\nExample: `2024-12-21T10:30:00Z`","type":"string"},"tags":{"description":"User tags (key-value pairs) to associate with the vector bucket.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vectorBucketArn":{"description":"Returns the Amazon Resource Name (ARN) of the specified vector bucket.\n\nExample: `arn:aws:s3vectors:us-east-1:123456789012:bucket/amzn-s3-demo-vector-bucket`","type":"string"}}}},"aws-native:s3vectors:getVectorBucketPolicy":{"description":"Resource Type definition for AWS::S3Vectors::VectorBucketPolicy","inputs":{"properties":{"vectorBucketArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the S3 vector bucket to which the policy applies."}},"required":["vectorBucketArn"]},"outputs":{"properties":{"policy":{"$ref":"#/types/aws-native:s3vectors:VectorBucketPolicyPolicy","description":"A policy document containing permissions to add to the specified vector bucket. In IAM , you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM ."}}}},"aws-native:sagemaker:getApp":{"description":"Resource Type definition for AWS::SageMaker::App","inputs":{"properties":{"appName":{"type":"string","description":"The name of the app."},"appType":{"$ref":"#/types/aws-native:sagemaker:AppType","description":"The type of app."},"domainId":{"type":"string","description":"The domain ID."},"userProfileName":{"type":"string","description":"The user profile name."}},"required":["appName","appType","domainId","userProfileName"]},"outputs":{"properties":{"appArn":{"description":"The Amazon Resource Name (ARN) of the app.","type":"string"},"builtInLifecycleConfigArn":{"description":"The lifecycle configuration that runs before the default lifecycle configuration.","type":"string"},"recoveryMode":{"description":"Indicates whether the application is launched in recovery mode.","type":"boolean"},"tags":{"description":"A list of tags to apply to the app.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getAppImageConfig":{"description":"Resource Type definition for AWS::SageMaker::AppImageConfig","inputs":{"properties":{"appImageConfigName":{"type":"string","description":"The Name of the AppImageConfig."}},"required":["appImageConfigName"]},"outputs":{"properties":{"appImageConfigArn":{"description":"The Amazon Resource Name (ARN) of the AppImageConfig.","type":"string"},"codeEditorAppImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigCodeEditorAppImageConfig","description":"The CodeEditorAppImageConfig."},"jupyterLabAppImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigJupyterLabAppImageConfig","description":"The JupyterLabAppImageConfig."},"kernelGatewayImageConfig":{"$ref":"#/types/aws-native:sagemaker:AppImageConfigKernelGatewayImageConfig","description":"The KernelGatewayImageConfig."},"tags":{"description":"A list of tags to apply to the AppImageConfig.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getCluster":{"description":"Resource Type definition for AWS::SageMaker::Cluster","inputs":{"properties":{"clusterArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the HyperPod Cluster."}},"required":["clusterArn"]},"outputs":{"properties":{"autoScaling":{"$ref":"#/types/aws-native:sagemaker:ClusterAutoScalingConfig"},"clusterArn":{"description":"The Amazon Resource Name (ARN) of the HyperPod Cluster.","type":"string"},"clusterRole":{"description":"The cluster role for the autoscaler to assume.","type":"string"},"clusterStatus":{"$ref":"#/types/aws-native:sagemaker:ClusterStatus","description":"The status of the HyperPod Cluster."},"creationTime":{"description":"The time at which the HyperPod cluster was created.","type":"string"},"failureMessage":{"description":"The failure message of the HyperPod Cluster.","type":"string"},"instanceGroups":{"description":"The instance groups of the SageMaker HyperPod cluster. To delete an instance group, remove it from the array.","items":{"$ref":"#/types/aws-native:sagemaker:ClusterInstanceGroup"},"type":"array"},"nodeProvisioningMode":{"$ref":"#/types/aws-native:sagemaker:ClusterNodeProvisioningMode","description":"Determines the scaling strategy for the SageMaker HyperPod cluster. When set to 'Continuous', enables continuous scaling which dynamically manages node provisioning. If the parameter is omitted, uses the standard scaling approach in previous release."},"nodeRecovery":{"$ref":"#/types/aws-native:sagemaker:ClusterNodeRecovery","description":"If node auto-recovery is set to true, faulty nodes will be replaced or rebooted when a failure is detected. If set to false, nodes will be labelled when a fault is detected."},"orchestrator":{"$ref":"#/types/aws-native:sagemaker:ClusterOrchestrator","description":"The orchestrator type for the SageMaker HyperPod cluster. Currently, `'eks'` is the only available option."},"restrictedInstanceGroups":{"items":{"$ref":"#/types/aws-native:sagemaker:ClusterRestrictedInstanceGroup"},"type":"array"},"tags":{"description":"Custom tags for managing the SageMaker HyperPod cluster as an AWS resource. You can add tags to your cluster in the same way you add them in other AWS services that support tagging.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tieredStorageConfig":{"$ref":"#/types/aws-native:sagemaker:ClusterTieredStorageConfig"}}}},"aws-native:sagemaker:getDataQualityJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::DataQualityJobDefinition","inputs":{"properties":{"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."}},"required":["jobDefinitionArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the job definition was created.","type":"string"},"jobDefinitionArn":{"description":"The Amazon Resource Name (ARN) of job definition.","type":"string"}}}},"aws-native:sagemaker:getDeviceFleet":{"description":"Resource schema for AWS::SageMaker::DeviceFleet","inputs":{"properties":{"deviceFleetName":{"type":"string","description":"The name of the edge device fleet"}},"required":["deviceFleetName"]},"outputs":{"properties":{"description":{"description":"Description for the edge device fleet","type":"string"},"outputConfig":{"$ref":"#/types/aws-native:sagemaker:DeviceFleetEdgeOutputConfig","description":"S3 bucket and an ecryption key id (if available) to store outputs for the fleet"},"roleArn":{"description":"Role associated with the device fleet","type":"string"},"tags":{"description":"Associate tags with the resource","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getDomain":{"description":"Resource Type definition for AWS::SageMaker::Domain","inputs":{"properties":{"domainId":{"type":"string","description":"The domain name."}},"required":["domainId"]},"outputs":{"properties":{"appNetworkAccessType":{"$ref":"#/types/aws-native:sagemaker:DomainAppNetworkAccessType","description":"Specifies the VPC used for non-EFS traffic. The default value is PublicInternetOnly."},"appSecurityGroupManagement":{"$ref":"#/types/aws-native:sagemaker:DomainAppSecurityGroupManagement","description":"The entity that creates and manages the required security groups for inter-app communication in VPCOnly mode. Required when CreateDomain.AppNetworkAccessType is VPCOnly and DomainSettings.RStudioServerProDomainSettings.DomainExecutionRoleArn is provided."},"defaultSpaceSettings":{"$ref":"#/types/aws-native:sagemaker:DomainDefaultSpaceSettings","description":"The default space settings."},"defaultUserSettings":{"$ref":"#/types/aws-native:sagemaker:DomainUserSettings","description":"The default user settings."},"domainArn":{"description":"The Amazon Resource Name (ARN) of the created domain.","type":"string"},"domainId":{"description":"The domain name.","type":"string"},"domainSettings":{"$ref":"#/types/aws-native:sagemaker:DomainSettings","description":"A collection of settings that apply to the `SageMaker Domain` . These settings are specified through the `CreateDomain` API call."},"homeEfsFileSystemId":{"description":"The ID of the Amazon Elastic File System (EFS) managed by this Domain.","type":"string"},"securityGroupIdForDomainBoundary":{"description":"The ID of the security group that authorizes traffic between the RSessionGateway apps and the RStudioServerPro app.","type":"string"},"singleSignOnApplicationArn":{"description":"The ARN of the application managed by SageMaker in IAM Identity Center. This value is only returned for domains created after October 1, 2023.","type":"string"},"singleSignOnManagedApplicationInstanceId":{"description":"The SSO managed application instance ID.","type":"string"},"subnetIds":{"description":"The VPC subnets that Studio uses for communication.","items":{"type":"string"},"type":"array"},"tagPropagation":{"$ref":"#/types/aws-native:sagemaker:DomainTagPropagation","description":"Indicates whether the tags added to Domain, User Profile and Space entity is propagated to all SageMaker resources."},"url":{"description":"The URL to the created domain.","type":"string"},"vpcId":{"description":"The ID of the Amazon Virtual Private Cloud (VPC) that Studio uses for communication.","type":"string"}}}},"aws-native:sagemaker:getEndpoint":{"description":"Resource Type definition for AWS::SageMaker::Endpoint","inputs":{"properties":{"endpointArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the endpoint."}},"required":["endpointArn"]},"outputs":{"properties":{"deploymentConfig":{"$ref":"#/types/aws-native:sagemaker:EndpointDeploymentConfig","description":"Specifies deployment configuration for updating the SageMaker endpoint. Includes rollback and update policies."},"endpointArn":{"description":"The Amazon Resource Name (ARN) of the endpoint.","type":"string"},"endpointConfigName":{"description":"The name of the endpoint configuration for the SageMaker endpoint. This is a required property.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getFeatureGroup":{"description":"Resource Type definition for AWS::SageMaker::FeatureGroup","inputs":{"properties":{"featureGroupName":{"type":"string","description":"The Name of the FeatureGroup."}},"required":["featureGroupName"]},"outputs":{"properties":{"creationTime":{"description":"A timestamp of FeatureGroup creation time.","type":"string"},"featureDefinitions":{"description":"An Array of Feature Definition","items":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupFeatureDefinition"},"type":"array"},"featureGroupStatus":{"description":"The status of the feature group.","type":"string"},"onlineStoreConfig":{"$ref":"#/types/aws-native:sagemaker:OnlineStoreConfigProperties","description":"The configuration of an `OnlineStore` ."},"throughputConfig":{"$ref":"#/types/aws-native:sagemaker:FeatureGroupThroughputConfig","description":"Used to set feature group throughput configuration. There are two modes: `ON_DEMAND` and `PROVISIONED` . With on-demand mode, you are charged for data reads and writes that your application performs on your feature group. You do not need to specify read and write throughput because Feature Store accommodates your workloads as they ramp up and down. You can switch a feature group to on-demand only once in a 24 hour period. With provisioned throughput mode, you specify the read and write capacity per second that you expect your application to require, and you are billed based on those limits. Exceeding provisioned throughput will result in your requests being throttled.\n\nNote: `PROVISIONED` throughput mode is supported only for feature groups that are offline-only, or use the [`Standard`](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_OnlineStoreConfig.html#sagemaker-Type-OnlineStoreConfig-StorageType) tier online store."}}}},"aws-native:sagemaker:getImage":{"description":"Resource Type definition for AWS::SageMaker::Image","inputs":{"properties":{"imageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image.\n\n*Type* : String\n\n*Length Constraints* : Maximum length of 256.\n\n*Pattern* : `^arn:aws(-[\\w]+)*:sagemaker:.+:[0-9]{12}:image/[a-z0-9]([-.]?[a-z0-9])*$`"}},"required":["imageArn"]},"outputs":{"properties":{"imageArn":{"description":"The Amazon Resource Name (ARN) of the image.\n\n*Type* : String\n\n*Length Constraints* : Maximum length of 256.\n\n*Pattern* : `^arn:aws(-[\\w]+)*:sagemaker:.+:[0-9]{12}:image/[a-z0-9]([-.]?[a-z0-9])*$`","type":"string"},"imageDescription":{"description":"The description of the image.","type":"string"},"imageDisplayName":{"description":"The display name of the image.\n\n*Length Constraints* : Minimum length of 1. Maximum length of 128.\n\n*Pattern* : `^\\S(.*\\S)?$`","type":"string"},"imageRoleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role that enables Amazon SageMaker to perform tasks on your behalf.\n\n*Length Constraints* : Minimum length of 20. Maximum length of 2048.\n\n*Pattern* : `^arn:aws[a-z\\-]*:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+$`","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getImageVersion":{"description":"Resource Type definition for AWS::SageMaker::ImageVersion","inputs":{"properties":{"imageVersionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the image version.\n\n*Type* : String\n\n*Length Constraints* : Maximum length of 256.\n\n*Pattern* : `^arn:aws(-[\\w]+)*:sagemaker:.+:[0-9]{12}:image-version/[a-z0-9]([-.]?[a-z0-9])*/[0-9]+$`"}},"required":["imageVersionArn"]},"outputs":{"properties":{"containerImage":{"description":"The URI of the container image version referenced by ImageVersion.","type":"string"},"horovod":{"type":"boolean"},"imageArn":{"description":"The Amazon Resource Name (ARN) of the parent Image.","type":"string"},"imageVersionArn":{"description":"The Amazon Resource Name (ARN) of the image version.\n\n*Type* : String\n\n*Length Constraints* : Maximum length of 256.\n\n*Pattern* : `^arn:aws(-[\\w]+)*:sagemaker:.+:[0-9]{12}:image-version/[a-z0-9]([-.]?[a-z0-9])*/[0-9]+$`","type":"string"},"jobType":{"$ref":"#/types/aws-native:sagemaker:ImageVersionJobType"},"mlFramework":{"type":"string"},"processor":{"$ref":"#/types/aws-native:sagemaker:ImageVersionProcessor"},"programmingLang":{"type":"string"},"releaseNotes":{"type":"string"},"vendorGuidance":{"$ref":"#/types/aws-native:sagemaker:ImageVersionVendorGuidance"},"version":{"description":"The version of the image.","type":"integer"}}}},"aws-native:sagemaker:getInferenceComponent":{"description":"Resource Type definition for AWS::SageMaker::InferenceComponent","inputs":{"properties":{"inferenceComponentArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the inference component."}},"required":["inferenceComponentArn"]},"outputs":{"properties":{"creationTime":{"description":"The time when the inference component was created.","type":"string"},"endpointArn":{"description":"The Amazon Resource Name (ARN) of the endpoint that hosts the inference component.","type":"string"},"endpointName":{"description":"The name of the endpoint that hosts the inference component.","type":"string"},"failureReason":{"type":"string"},"inferenceComponentArn":{"description":"The Amazon Resource Name (ARN) of the inference component.","type":"string"},"inferenceComponentName":{"description":"The name of the inference component.","type":"string"},"inferenceComponentStatus":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentStatus","description":"The status of the inference component."},"lastModifiedTime":{"description":"The time when the inference component was last updated.","type":"string"},"runtimeConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentRuntimeConfig"},"specification":{"$ref":"#/types/aws-native:sagemaker:InferenceComponentSpecification"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"variantName":{"description":"The name of the production variant that hosts the inference component.","type":"string"}}}},"aws-native:sagemaker:getInferenceExperiment":{"description":"Resource Type definition for AWS::SageMaker::InferenceExperiment","inputs":{"properties":{"name":{"type":"string","description":"The name for the inference experiment."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the inference experiment.","type":"string"},"creationTime":{"description":"The timestamp at which you created the inference experiment.","type":"string"},"dataStorageConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentDataStorageConfig","description":"The Amazon S3 location and configuration for storing inference request and response data."},"description":{"description":"The description of the inference experiment.","type":"string"},"endpointMetadata":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentEndpointMetadata"},"lastModifiedTime":{"description":"The timestamp at which you last modified the inference experiment.","type":"string"},"modelVariants":{"description":"An array of ModelVariantConfig objects. Each ModelVariantConfig object in the array describes the infrastructure configuration for the corresponding variant.","items":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentModelVariantConfig"},"type":"array"},"shadowModeConfig":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentShadowModeConfig","description":"The configuration of `ShadowMode` inference experiment type, which shows the production variant that takes all the inference requests, and the shadow variant to which Amazon SageMaker replicates a percentage of the inference requests. For the shadow variant it also shows the percentage of requests that Amazon SageMaker replicates."},"status":{"$ref":"#/types/aws-native:sagemaker:InferenceExperimentStatus","description":"The status of the inference experiment."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getMlflowTrackingServer":{"description":"Resource Type definition for AWS::SageMaker::MlflowTrackingServer","inputs":{"properties":{"trackingServerName":{"type":"string","description":"The name of the MLFlow Tracking Server."}},"required":["trackingServerName"]},"outputs":{"properties":{"artifactStoreUri":{"description":"The Amazon S3 URI for MLFlow Tracking Server artifacts.","type":"string"},"automaticModelRegistration":{"description":"A flag to enable Automatic SageMaker Model Registration.","type":"boolean"},"mlflowVersion":{"description":"The MLFlow Version used on the MLFlow Tracking Server.","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role that enables Amazon SageMaker to perform tasks on behalf of the customer.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trackingServerArn":{"description":"The Amazon Resource Name (ARN) of the MLFlow Tracking Server.","type":"string"},"trackingServerSize":{"$ref":"#/types/aws-native:sagemaker:MlflowTrackingServerTrackingServerSize","description":"The size of the MLFlow Tracking Server."},"weeklyMaintenanceWindowStart":{"description":"The start of the time window for maintenance of the MLFlow Tracking Server in UTC time.","type":"string"}}}},"aws-native:sagemaker:getModelBiasJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::ModelBiasJobDefinition","inputs":{"properties":{"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."}},"required":["jobDefinitionArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the job definition was created.","type":"string"},"jobDefinitionArn":{"description":"The Amazon Resource Name (ARN) of job definition.","type":"string"}}}},"aws-native:sagemaker:getModelCard":{"description":"Resource Type definition for AWS::SageMaker::ModelCard.","inputs":{"properties":{"modelCardName":{"type":"string","description":"The unique name of the model card."}},"required":["modelCardName"]},"outputs":{"properties":{"content":{"$ref":"#/types/aws-native:sagemaker:ModelCardContent","description":"The content of the model card. Content uses the [model card JSON schema](https://docs.aws.amazon.com/sagemaker/latest/dg/model-cards.html#model-cards-json-schema) ."},"createdBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardUserContext","description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card."},"creationTime":{"description":"The date and time the model card was created.","type":"string"},"lastModifiedBy":{"$ref":"#/types/aws-native:sagemaker:ModelCardUserContext","description":"Information about the user who created or modified an experiment, trial, trial component, lineage group, project, or model card."},"lastModifiedTime":{"description":"The date and time the model card was last modified.","type":"string"},"modelCardArn":{"description":"The Amazon Resource Name (ARN) of the successfully created model card.","type":"string"},"modelCardProcessingStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardProcessingStatus","description":"The processing status of model card deletion. The ModelCardProcessingStatus updates throughout the different deletion steps."},"modelCardStatus":{"$ref":"#/types/aws-native:sagemaker:ModelCardStatus","description":"The approval status of the model card within your organization. Different organizations might have different criteria for model card review and approval."},"modelCardVersion":{"description":"A version of the model card.","type":"integer"},"tags":{"description":"Key-value pairs used to manage metadata for model cards.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getModelExplainabilityJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::ModelExplainabilityJobDefinition","inputs":{"properties":{"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."}},"required":["jobDefinitionArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the job definition was created.","type":"string"},"jobDefinitionArn":{"description":"The Amazon Resource Name (ARN) of job definition.","type":"string"}}}},"aws-native:sagemaker:getModelPackage":{"description":"Resource Type definition for AWS::SageMaker::ModelPackage","inputs":{"properties":{"modelPackageArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the model package."}},"required":["modelPackageArn"]},"outputs":{"properties":{"additionalInferenceSpecifications":{"description":"An array of additional Inference Specification objects.","items":{"$ref":"#/types/aws-native:sagemaker:ModelPackageAdditionalInferenceSpecificationDefinition"},"type":"array"},"approvalDescription":{"description":"A description provided when the model approval is set.","type":"string"},"certifyForMarketplace":{"description":"Whether the model package is to be certified to be listed on AWS Marketplace. For information about listing model packages on AWS Marketplace, see [List Your Algorithm or Model Package on AWS Marketplace](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-mkt-list.html) .","type":"boolean"},"creationTime":{"description":"The time that the model package was created.","type":"string"},"customerMetadataProperties":{"$ref":"#/types/aws-native:sagemaker:ModelPackageCustomerMetadataProperties","description":"The metadata properties for the model package."},"lastModifiedTime":{"description":"The last time the model package was modified.","type":"string"},"modelApprovalStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelApprovalStatus","description":"The approval status of the model. This can be one of the following values.\n\n- `APPROVED` - The model is approved\n- `REJECTED` - The model is rejected.\n- `PENDING_MANUAL_APPROVAL` - The model is waiting for manual approval."},"modelCard":{"$ref":"#/types/aws-native:sagemaker:ModelPackageModelCard","description":"An Amazon SageMaker Model Card."},"modelPackageArn":{"description":"The Amazon Resource Name (ARN) of the model package.","type":"string"},"modelPackageName":{"description":"The name of the model package. The name can be as follows:\n\n- For a versioned model, the name is automatically generated by SageMaker Model Registry and follows the format ' `ModelPackageGroupName/ModelPackageVersion` '.\n- For an unversioned model, you must provide the name.","type":"string"},"modelPackageStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatus","description":"The status of the model package. This can be one of the following values.\n\n- `PENDING` - The model package creation is pending.\n- `IN_PROGRESS` - The model package is in the process of being created.\n- `COMPLETED` - The model package was successfully created.\n- `FAILED` - The model package creation failed.\n- `DELETING` - The model package is in the process of being deleted."},"modelPackageStatusDetails":{"$ref":"#/types/aws-native:sagemaker:ModelPackageStatusDetails","description":"Specifies the validation and image scan statuses of the model package."},"modelPackageVersion":{"description":"The version number of a versioned model.","type":"integer"},"skipModelValidation":{"$ref":"#/types/aws-native:sagemaker:ModelPackageSkipModelValidation","description":"Indicates if you want to skip model validation."},"sourceUri":{"description":"The URI of the source for the model package.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getModelPackageGroup":{"description":"Resource Type definition for AWS::SageMaker::ModelPackageGroup","inputs":{"properties":{"modelPackageGroupArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the model group."}},"required":["modelPackageGroupArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the model package group was created.","type":"string"},"modelPackageGroupArn":{"description":"The Amazon Resource Name (ARN) of the model group.","type":"string"},"modelPackageGroupPolicy":{"$ref":"pulumi.json#/Any","description":"A resouce policy to control access to a model group. For information about resoure policies, see [Identity-based policies and resource-based policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html) in the *AWS Identity and Access Management User Guide.* .\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SageMaker::ModelPackageGroup` for more information about the expected schema for this property."},"modelPackageGroupStatus":{"$ref":"#/types/aws-native:sagemaker:ModelPackageGroupStatus","description":"The status of a modelpackage group job."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getModelQualityJobDefinition":{"description":"Resource Type definition for AWS::SageMaker::ModelQualityJobDefinition","inputs":{"properties":{"jobDefinitionArn":{"type":"string","description":"The Amazon Resource Name (ARN) of job definition."}},"required":["jobDefinitionArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the job definition was created.","type":"string"},"jobDefinitionArn":{"description":"The Amazon Resource Name (ARN) of job definition.","type":"string"}}}},"aws-native:sagemaker:getMonitoringSchedule":{"description":"Resource Type definition for AWS::SageMaker::MonitoringSchedule","inputs":{"properties":{"monitoringScheduleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the monitoring schedule."}},"required":["monitoringScheduleArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the schedule was created.","type":"string"},"endpointName":{"description":"The name of the endpoint using the monitoring schedule.","type":"string"},"failureReason":{"description":"Contains the reason a monitoring job failed, if it failed.","type":"string"},"lastModifiedTime":{"description":"A timestamp that indicates the last time the monitoring job was modified.","type":"string"},"lastMonitoringExecutionSummary":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleMonitoringExecutionSummary","description":"Describes metadata on the last execution to run, if there was one."},"monitoringScheduleArn":{"description":"The Amazon Resource Name (ARN) of the monitoring schedule.","type":"string"},"monitoringScheduleConfig":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleConfig","description":"The configuration object that specifies the monitoring schedule and defines the monitoring job."},"monitoringScheduleStatus":{"$ref":"#/types/aws-native:sagemaker:MonitoringScheduleStatus","description":"The status of a schedule job."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getPartnerApp":{"description":"Resource Type definition for AWS::SageMaker::PartnerApp","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the created PartnerApp."}},"required":["arn"]},"outputs":{"properties":{"appVersion":{"description":"The version of the PartnerApp.","type":"string"},"applicationConfig":{"$ref":"#/types/aws-native:sagemaker:PartnerAppConfig","description":"A collection of settings that specify the maintenance schedule for the PartnerApp."},"arn":{"description":"The Amazon Resource Name (ARN) of the created PartnerApp.","type":"string"},"baseUrl":{"description":"The AppServerUrl based on app and account-info.","type":"string"},"currentVersionEolDate":{"description":"The end-of-life date for the current version of the PartnerApp.","type":"string"},"enableAutoMinorVersionUpgrade":{"description":"Enables automatic minor version upgrades for the PartnerApp.","type":"boolean"},"enableIamSessionBasedIdentity":{"description":"Enables IAM Session based Identity for PartnerApp.","type":"boolean"},"maintenanceConfig":{"$ref":"#/types/aws-native:sagemaker:PartnerAppMaintenanceConfig","description":"A collection of settings that specify the maintenance schedule for the PartnerApp."},"tags":{"description":"A list of tags to apply to the PartnerApp.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tier":{"description":"The tier of the PartnerApp.","type":"string"}}}},"aws-native:sagemaker:getPipeline":{"description":"Resource Type definition for AWS::SageMaker::Pipeline","inputs":{"properties":{"pipelineName":{"type":"string","description":"The name of the Pipeline."}},"required":["pipelineName"]},"outputs":{"properties":{"parallelismConfiguration":{"$ref":"#/types/aws-native:sagemaker:ParallelismConfigurationProperties","description":"The parallelism configuration applied to the pipeline."},"pipelineDefinition":{"description":"The definition of the pipeline. This can be either a JSON string or an Amazon S3 location.","oneOf":[{"$ref":"#/types/aws-native:sagemaker:PipelineDefinition0Properties"},{"$ref":"#/types/aws-native:sagemaker:PipelineDefinition1Properties"}]},"pipelineDescription":{"description":"The description of the Pipeline.","type":"string"},"pipelineDisplayName":{"description":"The display name of the Pipeline.","type":"string"},"roleArn":{"description":"Role Arn","type":"string"},"tags":{"description":"The tags of the pipeline.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sagemaker:getProcessingJob":{"description":"Resource Type definition for AWS::SageMaker::ProcessingJob","inputs":{"properties":{"processingJobArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the processing job."}},"required":["processingJobArn"]},"outputs":{"properties":{"autoMlJobArn":{"description":"The ARN of an AutoML job associated with this processing job.","type":"string"},"creationTime":{"description":"The time at which the processing job was created.","type":"string"},"exitMessage":{"description":"An optional string, up to one KB in size, that contains metadata from the processing container when the processing job exits.","type":"string"},"failureReason":{"description":"A string, up to one KB in size, that contains the reason a processing job failed, if it failed.","type":"string"},"lastModifiedTime":{"description":"The time at which the processing job was last modified.","type":"string"},"monitoringScheduleArn":{"description":"The ARN of a monitoring schedule for an endpoint associated with this processing job.","type":"string"},"processingEndTime":{"description":"The time at which the processing job completed.","type":"string"},"processingJobArn":{"description":"The Amazon Resource Name (ARN) of the processing job.","type":"string"},"processingJobStatus":{"$ref":"#/types/aws-native:sagemaker:ProcessingJobStatus","description":"Provides the status of a processing job."},"processingStartTime":{"description":"The time at which the processing job started.","type":"string"},"trainingJobArn":{"description":"The ARN of a training job associated with this processing job","type":"string"}}}},"aws-native:sagemaker:getProject":{"description":"Resource Type definition for AWS::SageMaker::Project","inputs":{"properties":{"projectArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the project."}},"required":["projectArn"]},"outputs":{"properties":{"creationTime":{"description":"The time at which the project was created.","type":"string"},"projectArn":{"description":"The Amazon Resource Name (ARN) of the project.","type":"string"},"projectId":{"description":"The ID of the project. This ID is prepended to all entities associated with this project.","type":"string"},"projectStatus":{"$ref":"#/types/aws-native:sagemaker:ProjectStatus","description":"The status of a project."},"serviceCatalogProvisionedProductDetails":{"$ref":"#/types/aws-native:sagemaker:ServiceCatalogProvisionedProductDetailsProperties","description":"Provisioned ServiceCatalog  Details"}}}},"aws-native:sagemaker:getSpace":{"description":"Resource Type definition for AWS::SageMaker::Space","inputs":{"properties":{"domainId":{"type":"string","description":"The ID of the associated Domain."},"spaceName":{"type":"string","description":"A name for the Space."}},"required":["domainId","spaceName"]},"outputs":{"properties":{"spaceArn":{"description":"The space Amazon Resource Name (ARN).","type":"string"},"spaceDisplayName":{"description":"The name of the space that appears in the Studio UI.","type":"string"},"tags":{"description":"A list of tags to apply to the space.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"url":{"description":"Returns the URL of the space. If the space is created with AWS IAM Identity Center (Successor to AWS Single Sign-On) authentication, users can navigate to the URL after appending the respective redirect parameter for the application type to be federated through AWS IAM Identity Center.\n\nThe following application types are supported:\n\n- Studio Classic: `\u0026redirect=JupyterServer`\n- JupyterLab: `\u0026redirect=JupyterLab`\n- Code Editor, based on Code-OSS, Visual Studio Code - Open Source: `\u0026redirect=CodeEditor`","type":"string"}}}},"aws-native:sagemaker:getStudioLifecycleConfig":{"description":"Resource Type definition for AWS::SageMaker::StudioLifecycleConfig","inputs":{"properties":{"studioLifecycleConfigName":{"type":"string","description":"The name of the Amazon SageMaker Studio Lifecycle Configuration."}},"required":["studioLifecycleConfigName"]},"outputs":{"properties":{"studioLifecycleConfigArn":{"description":"The Amazon Resource Name (ARN) of the Lifecycle Configuration.","type":"string"}}}},"aws-native:sagemaker:getUserProfile":{"description":"Resource Type definition for AWS::SageMaker::UserProfile","inputs":{"properties":{"domainId":{"type":"string","description":"The ID of the associated Domain."},"userProfileName":{"type":"string","description":"A name for the UserProfile."}},"required":["userProfileName","domainId"]},"outputs":{"properties":{"userProfileArn":{"description":"The user profile Amazon Resource Name (ARN).","type":"string"},"userSettings":{"$ref":"#/types/aws-native:sagemaker:UserProfileUserSettings","description":"A collection of settings."}}}},"aws-native:scheduler:getSchedule":{"description":"Definition of AWS::Scheduler::Schedule Resource Type","inputs":{"properties":{"name":{"type":"string","description":"The name of the schedule."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the schedule.","type":"string"},"description":{"description":"The description of the schedule.","type":"string"},"endDate":{"description":"The date, in UTC, before which the schedule can invoke its target. Depending on the schedule's recurrence expression, invocations might stop on, or before, the EndDate you specify.","type":"string"},"flexibleTimeWindow":{"$ref":"#/types/aws-native:scheduler:ScheduleFlexibleTimeWindow","description":"Allows you to configure a time window during which EventBridge Scheduler invokes the schedule."},"groupName":{"description":"The name of the schedule group to associate with this schedule. If you omit this, the default schedule group is used.","type":"string"},"kmsKeyArn":{"description":"The ARN for a KMS Key that will be used to encrypt customer data.","type":"string"},"scheduleExpression":{"description":"The scheduling expression.","type":"string"},"scheduleExpressionTimezone":{"description":"The timezone in which the scheduling expression is evaluated.","type":"string"},"startDate":{"description":"The date, in UTC, after which the schedule can begin invoking its target. Depending on the schedule's recurrence expression, invocations might occur on, or after, the StartDate you specify.","type":"string"},"state":{"$ref":"#/types/aws-native:scheduler:ScheduleState","description":"Specifies whether the schedule is enabled or disabled.\n\n*Allowed Values* : `ENABLED` | `DISABLED`"},"target":{"$ref":"#/types/aws-native:scheduler:ScheduleTarget","description":"The schedule's target details."}}}},"aws-native:scheduler:getScheduleGroup":{"description":"Definition of AWS::Scheduler::ScheduleGroup Resource Type","inputs":{"properties":{"name":{"type":"string","description":"The name of the schedule group."}},"required":["name"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the schedule group.","type":"string"},"creationDate":{"description":"The time at which the schedule group was created.","type":"string"},"lastModificationDate":{"description":"The time at which the schedule group was last modified.","type":"string"},"state":{"$ref":"#/types/aws-native:scheduler:ScheduleGroupState","description":"Specifies the state of the schedule group.\n\n*Allowed Values* : `ACTIVE` | `DELETING`"},"tags":{"description":"The list of tags to associate with the schedule group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:secretsmanager:getResourcePolicy":{"description":"Resource Type definition for AWS::SecretsManager::ResourcePolicy","inputs":{"properties":{"id":{"type":"string","description":"The Arn of the secret."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The Arn of the secret.","type":"string"},"resourcePolicy":{"$ref":"pulumi.json#/Any","description":"A JSON-formatted string for an AWS resource-based policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SecretsManager::ResourcePolicy` for more information about the expected schema for this property.","language":{"csharp":{"name":"ResourcePolicyValue"}}}}}},"aws-native:secretsmanager:getRotationSchedule":{"description":"Resource Type definition for AWS::SecretsManager::RotationSchedule","inputs":{"properties":{"id":{"type":"string","description":"The ARN of the secret."}},"required":["id"]},"outputs":{"properties":{"externalSecretRotationMetadata":{"description":"The list of metadata needed to successfully rotate a managed external secret.","items":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleExternalSecretRotationMetadataItem"},"type":"array"},"externalSecretRotationRoleArn":{"description":"The ARN of the IAM role that is used by Secrets Manager to rotate a managed external secret.","type":"string"},"id":{"description":"The ARN of the secret.","type":"string"},"rotationLambdaArn":{"description":"The ARN of an existing Lambda rotation function. To specify a rotation function that is also defined in this template, use the Ref function.","type":"string"},"rotationRules":{"$ref":"#/types/aws-native:secretsmanager:RotationScheduleRotationRules","description":"A structure that defines the rotation configuration for this secret."}}}},"aws-native:secretsmanager:getSecret":{"description":"Creates a new secret. A *secret* can be a password, a set of credentials such as a user name and password, an OAuth token, or other secret information that you store in an encrypted form in Secrets Manager.\n For RDS master user credentials, see [AWS::RDS::DBCluster MasterUserSecret](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-dbcluster-masterusersecret.html).\n For RS admin user credentials, see [AWS::Redshift::Cluster](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html).\n To retrieve a secret in a CFNshort template, use a *dynamic reference*. For more information, see [Retrieve a secret in an resource](https://docs.aws.amazon.com/secretsmanager/latest/userguide/cfn-example_reference-secret.html).\n For information about creating a secret in the console, see [Create a secret](https://docs.aws.amazon.com/secretsmanager/latest/userguide/manage_create-basic-secret.html). For information about creating a secret using the CLI or SDK, see [CreateSecret](https://docs.aws.amazon.com/secretsmanager/latest/apireference/API_CreateSecret.html).\n For information about retrieving a secret in code, see [Retrieve secrets from Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/retrieving-secrets.html).","inputs":{"properties":{"id":{"type":"string","description":"The ARN of the secret."}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the secret.","type":"string"},"id":{"description":"The ARN of the secret.","type":"string"},"kmsKeyId":{"description":"The ARN, key ID, or alias of the KMS key that Secrets Manager uses to encrypt the secret value in the secret. An alias is always prefixed by ``alias/``, for example ``alias/aws/secretsmanager``. For more information, see [About aliases](https://docs.aws.amazon.com/kms/latest/developerguide/alias-about.html).\n To use a KMS key in a different account, use the key ARN or the alias ARN.\n If you don't specify this value, then Secrets Manager uses the key ``aws/secretsmanager``. If that key doesn't yet exist, then Secrets Manager creates it for you automatically the first time it encrypts the secret value.\n If the secret is in a different AWS account from the credentials calling the API, then you can't use ``aws/secretsmanager`` to encrypt the secret, and you must create and use a customer managed KMS key.","type":"string"},"replicaRegions":{"description":"A custom type that specifies a ``Region`` and the ``KmsKeyId`` for a replica secret.","items":{"$ref":"#/types/aws-native:secretsmanager:SecretReplicaRegion"},"type":"array"},"tags":{"description":"A list of tags to attach to the secret. Each tag is a key and value pair of strings in a JSON text string, for example:\n  ``[{\"Key\":\"CostCenter\",\"Value\":\"12345\"},{\"Key\":\"environment\",\"Value\":\"production\"}]`` \n Secrets Manager tag key names are case sensitive. A tag with the key \"ABC\" is a different tag from one with key \"abc\".\n Stack-level tags, tags you apply to the CloudFormation stack, are also attached to the secret. \n If you check tags in permissions policies as part of your security strategy, then adding or removing a tag can change permissions. If the completion of this operation would result in you losing your permissions for this secret, then Secrets Manager blocks the operation and returns an ``Access Denied`` error. For more information, see [Control access to secrets using tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#tag-secrets-abac) and [Limit access to identities with tags that match secrets' tags](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-access_examples.html#auth-and-access_tags2).\n For information about how to format a JSON parameter for the various command line tool environments, see [Using JSON for Parameters](https://docs.aws.amazon.com/cli/latest/userguide/cli-using-param.html#cli-using-param-json). If your command-line tool or SDK requires quotation marks around the parameter, you should use single quotes to avoid confusion with the double quotes required in the JSON text.\n The following restrictions apply to tags:\n  +  Maximum number of tags per secret: 50\n  +  Maximum key length: 127 Unicode characters in UTF-8\n  +  Maximum value length: 255 Unicode characters in UTF-8\n  +  Tag keys and values are case sensitive.\n  +  Do not use the ``aws:`` prefix in your tag names or values because AWS reserves it for AWS use. You can't edit or delete tag names or values with this prefix. Tags with this prefix do not count against your tags per secret limit.\n  +  If you use your tagging schema across multiple services and resources, other services might have restrictions on allowed characters. Generally allowed characters: letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - = . _ : / @.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"description":"The exact string that identifies the third-party partner that holds the external secret. For more information, see [Managed external secret partners](https://docs.aws.amazon.com/secretsmanager/latest/userguide/mes-partners.html).","type":"string"}}}},"aws-native:secretsmanager:getSecretTargetAttachment":{"description":"Resource Type definition for AWS::SecretsManager::SecretTargetAttachment","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"id":{"type":"string"},"targetId":{"description":"The ID of the database or cluster.","type":"string"},"targetType":{"description":"A string that defines the type of service or database associated with the secret. This value instructs Secrets Manager how to update the secret with the details of the service or database. This value must be one of the following:\n\n- AWS::RDS::DBInstance\n- AWS::RDS::DBCluster\n- AWS::Redshift::Cluster\n- AWS::RedshiftServerless::Namespace\n- AWS::DocDB::DBInstance\n- AWS::DocDB::DBCluster\n- AWS::DocDBElastic::Cluster","type":"string"}}}},"aws-native:securityhub:getAggregatorV2":{"description":"The AWS::SecurityHub::AggregatorV2 resource represents the AWS Security Hub AggregatorV2 in your account. One aggregatorv2 resource is created for each account in non opt-in region in which you configure region linking mode.","inputs":{"properties":{"aggregatorV2Arn":{"type":"string","description":"The ARN of the AggregatorV2 being created and assigned as the unique identifier"}},"required":["aggregatorV2Arn"]},"outputs":{"properties":{"aggregationRegion":{"description":"The aggregation Region of the AggregatorV2","type":"string"},"aggregatorV2Arn":{"description":"The ARN of the AggregatorV2 being created and assigned as the unique identifier","type":"string"},"linkedRegions":{"description":"The list of included Regions","items":{"type":"string"},"type":"array"},"regionLinkingMode":{"$ref":"#/types/aws-native:securityhub:AggregatorV2RegionLinkingMode","description":"Indicates to link a list of included Regions"},"tags":{"additionalProperties":{"type":"string"},"description":"A list of key-value pairs to be applied to the AggregatorV2.","type":"object"}}}},"aws-native:securityhub:getAutomationRule":{"description":"The ``AWS::SecurityHub::AutomationRule`` resource specifies an automation rule based on input parameters. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *User Guide*.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the automation rule that you create. For example, `arn:aws:securityhub:us-east-1:123456789012:automation-rule/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111` ."}},"required":["ruleArn"]},"outputs":{"properties":{"actions":{"description":"One or more actions to update finding fields if a finding matches the conditions specified in ``Criteria``.","items":{"$ref":"#/types/aws-native:securityhub:AutomationRulesAction"},"type":"array"},"createdAt":{"description":"A timestamp that indicates when the rule was created.\n\nUses the `date-time` format specified in [RFC 3339 section 5.6, Internet Date/Time Format](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6) . The value cannot contain spaces. For example, `2020-03-22T13:22:13.933Z` .","type":"string"},"createdBy":{"description":"The principal that created the rule. For example, `arn:aws:sts::123456789012:assumed-role/Developer-Role/JaneDoe` .","type":"string"},"criteria":{"$ref":"#/types/aws-native:securityhub:AutomationRulesFindingFilters","description":"A set of [Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that ASH uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, ASH applies the rule action to the finding."},"description":{"description":"A description of the rule.","type":"string"},"isTerminal":{"description":"Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub CSPM applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal.","type":"boolean"},"ruleArn":{"description":"The Amazon Resource Name (ARN) of the automation rule that you create. For example, `arn:aws:securityhub:us-east-1:123456789012:automation-rule/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111` .","type":"string"},"ruleName":{"description":"The name of the rule.","type":"string"},"ruleOrder":{"description":"An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub CSPM applies rules with lower values for this parameter first.","type":"integer"},"ruleStatus":{"$ref":"#/types/aws-native:securityhub:AutomationRuleRuleStatus","description":"Whether the rule is active after it is created. If this parameter is equal to ``ENABLED``, ASH applies the rule to findings and finding updates after the rule is created."},"tags":{"additionalProperties":{"type":"string"},"description":"User-defined tags associated with an automation rule.","type":"object"},"updatedAt":{"description":"A timestamp that indicates when the rule was most recently updated.\n\nUses the `date-time` format specified in [RFC 3339 section 5.6, Internet Date/Time Format](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc3339#section-5.6) . The value cannot contain spaces. For example, `2020-03-22T13:22:13.933Z` .","type":"string"}}}},"aws-native:securityhub:getAutomationRuleV2":{"description":"Resource schema for AWS::SecurityHub::AutomationRuleV2","inputs":{"properties":{"ruleArn":{"type":"string","description":"The ARN of the automation rule"}},"required":["ruleArn"]},"outputs":{"properties":{"actions":{"description":"A list of actions to be performed when the rule criteria is met","items":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2AutomationRulesActionV2"},"type":"array"},"createdAt":{"description":"The timestamp when the V2 automation rule was created.","type":"string"},"criteria":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2Criteria","description":"The filtering type and configuration of the automation rule."},"description":{"description":"A description of the automation rule","type":"string"},"ruleArn":{"description":"The ARN of the automation rule","type":"string"},"ruleId":{"description":"The ID of the automation rule","type":"string"},"ruleName":{"description":"The name of the automation rule","type":"string"},"ruleOrder":{"description":"The value for the rule priority","type":"number"},"ruleStatus":{"$ref":"#/types/aws-native:securityhub:AutomationRuleV2RuleStatus","description":"The status of the automation rule"},"tags":{"additionalProperties":{"type":"string"},"description":"A list of key-value pairs associated with the V2 automation rule.","type":"object"},"updatedAt":{"description":"The timestamp when the V2 automation rule was updated.","type":"string"}}}},"aws-native:securityhub:getConfigurationPolicy":{"description":"The AWS::SecurityHub::ConfigurationPolicy resource represents the Central Configuration Policy in your account.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the configuration policy."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the configuration policy.","type":"string"},"configurationPolicy":{"$ref":"#/types/aws-native:securityhub:ConfigurationPolicyPolicy","description":"An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).","language":{"csharp":{"name":"ConfigurationPolicyValue"}}},"createdAt":{"description":"The date and time, in UTC and ISO 8601 format.","type":"string"},"description":{"description":"The description of the configuration policy.","type":"string"},"id":{"description":"The universally unique identifier (UUID) of the configuration policy.","type":"string"},"name":{"description":"The name of the configuration policy.","type":"string"},"serviceEnabled":{"description":"Indicates whether the service that the configuration policy applies to is enabled in the policy.","type":"boolean"},"tags":{"additionalProperties":{"type":"string"},"description":"User-defined tags associated with a configuration policy. For more information, see [Tagging AWS Security Hub CSPM resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub CSPM user guide* .","type":"object"},"updatedAt":{"description":"The date and time, in UTC and ISO 8601 format.","type":"string"}}}},"aws-native:securityhub:getConnectorV2":{"description":"Resource schema for AWS::SecurityHub::ConnectorV2","inputs":{"properties":{"connectorArn":{"type":"string","description":"The ARN of the connector"}},"required":["connectorArn"]},"outputs":{"properties":{"connectorArn":{"description":"The ARN of the connector","type":"string"},"connectorId":{"description":"The ID of the connector","type":"string"},"connectorStatus":{"$ref":"#/types/aws-native:securityhub:ConnectorV2ConnectorStatus","description":"The status of the connector"},"createdAt":{"description":"The timestamp when the V2 connector was created.","type":"string"},"description":{"description":"A description of the connector","type":"string"},"lastCheckedAt":{"description":"The most recent timestamp when the V2 connector was checked on health status.","type":"string"},"lastUpdatedAt":{"description":"The most recent timestamp when the V2 connector was updated.","type":"string"},"message":{"description":"The message of the connector status change","type":"string"},"provider":{"$ref":"#/types/aws-native:securityhub:ConnectorV2Provider","description":"The third-party provider detail for a service configuration."},"tags":{"additionalProperties":{"type":"string"},"description":"The tags to add to the connectorV2 when you create.","type":"object"}}}},"aws-native:securityhub:getDelegatedAdmin":{"description":"The ``AWS::SecurityHub::DelegatedAdmin`` resource designates the delegated ASHlong administrator account for an organization. You must enable the integration between ASH and AOlong before you can designate a delegated ASH administrator. Only the management account for an organization can designate the delegated ASH administrator account. For more information, see [Designating the delegated administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *User Guide*.\n To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.\n To designate multiple delegated administrators in different organizations and AWS-Regions, we recommend using [mappings](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/mappings-section-structure.html).\n Tags aren't supported for this resource.","inputs":{"properties":{"delegatedAdminIdentifier":{"type":"string","description":"The ID of the delegated Security Hub CSPM administrator account, in the format of `accountID/Region` ."}},"required":["delegatedAdminIdentifier"]},"outputs":{"properties":{"delegatedAdminIdentifier":{"description":"The ID of the delegated Security Hub CSPM administrator account, in the format of `accountID/Region` .","type":"string"},"status":{"$ref":"#/types/aws-native:securityhub:DelegatedAdminStatus","description":"Whether the delegated Security Hub CSPM administrator is set for the organization."}}}},"aws-native:securityhub:getFindingAggregator":{"description":"The ``AWS::SecurityHub::FindingAggregator`` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *User Guide*\n This resource must be created in the Region that you want to designate as your aggregation Region.\n Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in ASH.","inputs":{"properties":{"findingAggregatorArn":{"type":"string","description":"The ARN of the finding aggregator. You use the finding aggregator ARN to retrieve details for, update, and delete the finding aggregator."}},"required":["findingAggregatorArn"]},"outputs":{"properties":{"findingAggregationRegion":{"description":"The home Region. Findings generated in linked Regions are replicated and sent to the home Region.","type":"string"},"findingAggregatorArn":{"description":"The ARN of the finding aggregator. You use the finding aggregator ARN to retrieve details for, update, and delete the finding aggregator.","type":"string"},"regionLinkingMode":{"$ref":"#/types/aws-native:securityhub:FindingAggregatorRegionLinkingMode","description":"Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them.\n The selected option also determines how to use the Regions provided in the Regions list.\n In CFN, the options for this property are as follows:\n  +  ``ALL_REGIONS`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``ALL_REGIONS_EXCEPT_SPECIFIED`` - Indicates to aggregate findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the ``Regions`` parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. \n  +  ``SPECIFIED_REGIONS`` - Indicates to aggregate findings only from the Regions listed in the ``Regions`` parameter. Security Hub does not automatically aggregate findings from new Regions."},"regions":{"description":"If ``RegionLinkingMode`` is ``ALL_REGIONS_EXCEPT_SPECIFIED``, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region.\n If ``RegionLinkingMode`` is ``SPECIFIED_REGIONS``, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region.","items":{"type":"string"},"type":"array"}}}},"aws-native:securityhub:getHub":{"description":"The AWS::SecurityHub::Hub resource represents the implementation of the AWS Security Hub service in your account. One hub resource is created for each Region in which you enable Security Hub.\n\n","inputs":{"properties":{"arn":{"type":"string","description":"An ARN is automatically created for the customer."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"An ARN is automatically created for the customer.","type":"string"},"autoEnableControls":{"description":"Whether to automatically enable new controls when they are added to standards that are enabled","type":"boolean"},"controlFindingGenerator":{"description":"This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.  If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.","type":"string"},"subscribedAt":{"description":"The date and time when Security Hub was enabled in the account.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"An array of key-value pairs to apply to this resource.\n\nFor more information, see [Tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) .","type":"object"}}}},"aws-native:securityhub:getHubV2":{"description":"The AWS::SecurityHub::HubV2 resource represents the implementation of the AWS Security Hub V2 service in your account. Only one hubv2 resource can created in each region in which you enable Security Hub V2.","inputs":{"properties":{"hubV2Arn":{"type":"string","description":"The Amazon Resource Name of the Security Hub V2 resource."}},"required":["hubV2Arn"]},"outputs":{"properties":{"hubV2Arn":{"description":"The Amazon Resource Name of the Security Hub V2 resource.","type":"string"},"subscribedAt":{"description":"The date and time when the service was enabled in the account.","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"The tags to add to the hub V2 resource when you enable Security Hub CSPM.","type":"object"}}}},"aws-native:securityhub:getInsight":{"description":"The AWS::SecurityHub::Insight resource represents the AWS Security Hub Insight in your account. An AWS Security Hub insight is a collection of related findings.","inputs":{"properties":{"insightArn":{"type":"string","description":"The ARN of a Security Hub insight"}},"required":["insightArn"]},"outputs":{"properties":{"filters":{"$ref":"#/types/aws-native:securityhub:InsightAwsSecurityFindingFilters","description":"One or more attributes used to filter the findings included in the insight"},"groupByAttribute":{"description":"The grouping attribute for the insight's findings","type":"string"},"insightArn":{"description":"The ARN of a Security Hub insight","type":"string"},"name":{"description":"The name of a Security Hub insight","type":"string"}}}},"aws-native:securityhub:getOrganizationConfiguration":{"description":"The AWS::SecurityHub::OrganizationConfiguration resource represents the configuration of your organization in Security Hub. Only the Security Hub administrator account can create Organization Configuration resource in each region and can opt-in to Central Configuration only in the aggregation region of FindingAggregator.","inputs":{"properties":{"organizationConfigurationIdentifier":{"type":"string","description":"The identifier of the OrganizationConfiguration being created and assigned as the unique identifier."}},"required":["organizationConfigurationIdentifier"]},"outputs":{"properties":{"autoEnable":{"description":"Whether to automatically enable Security Hub in new member accounts when they join the organization.","type":"boolean"},"autoEnableStandards":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationAutoEnableStandards","description":"Whether to automatically enable Security Hub default standards in new member accounts when they join the organization."},"configurationType":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationConfigurationType","description":"Indicates whether the organization uses local or central configuration."},"memberAccountLimitReached":{"description":"Whether the maximum number of allowed member accounts are already associated with the Security Hub administrator account.","type":"boolean"},"organizationConfigurationIdentifier":{"description":"The identifier of the OrganizationConfiguration being created and assigned as the unique identifier.","type":"string"},"status":{"$ref":"#/types/aws-native:securityhub:OrganizationConfigurationStatus","description":"Describes whether central configuration could be enabled as the ConfigurationType for the organization."},"statusMessage":{"description":"Provides an explanation if the value of Status is equal to FAILED when ConfigurationType is equal to CENTRAL.","type":"string"}}}},"aws-native:securityhub:getPolicyAssociation":{"description":"The AWS::SecurityHub::PolicyAssociation resource represents the AWS Security Hub Central Configuration Policy associations in your Target. Only the AWS Security Hub delegated administrator can create the resouce from the home region.","inputs":{"properties":{"associationIdentifier":{"type":"string","description":"A unique identifier to indicates if the target has an association"}},"required":["associationIdentifier"]},"outputs":{"properties":{"associationIdentifier":{"description":"A unique identifier to indicates if the target has an association","type":"string"},"associationStatus":{"$ref":"#/types/aws-native:securityhub:PolicyAssociationAssociationStatus","description":"The current status of the association between the specified target and the configuration"},"associationStatusMessage":{"description":"An explanation for a FAILED value for AssociationStatus","type":"string"},"associationType":{"$ref":"#/types/aws-native:securityhub:PolicyAssociationAssociationType","description":"Indicates whether the association between the specified target and the configuration was directly applied by the Security Hub delegated administrator or inherited from a parent"},"configurationPolicyId":{"description":"The universally unique identifier (UUID) of the configuration policy or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration","type":"string"},"updatedAt":{"description":"The date and time, in UTC and ISO 8601 format, that the configuration policy association was last updated","type":"string"}}}},"aws-native:securityhub:getProductSubscription":{"description":"The AWS::SecurityHub::ProductSubscription resource represents a subscription to a service that is allowed to generate findings for your Security Hub account. One product subscription resource is created for each product enabled.","inputs":{"properties":{"productSubscriptionArn":{"type":"string","description":"The ARN of the product subscription for the account"}},"required":["productSubscriptionArn"]},"outputs":{"properties":{"productSubscriptionArn":{"description":"The ARN of the product subscription for the account","type":"string"}}}},"aws-native:securityhub:getSecurityControl":{"description":"A security control in Security Hub describes a security best practice related to a specific resource.","inputs":{"properties":{"securityControlId":{"type":"string","description":"The unique identifier of a security control across standards. Values for this field typically consist of an AWS service name and a number, such as APIGateway.3."}},"required":["securityControlId"]},"outputs":{"properties":{"lastUpdateReason":{"description":"The most recent reason for updating the customizable properties of a security control. This differs from the UpdateReason field of the BatchUpdateStandardsControlAssociations API, which tracks the reason for updating the enablement status of a control. This field accepts alphanumeric characters in addition to white spaces, dashes, and underscores.","type":"string"},"parameters":{"additionalProperties":{"$ref":"#/types/aws-native:securityhub:SecurityControlParameterConfiguration"},"description":"An object that identifies the name of a control parameter, its current value, and whether it has been customized.","type":"object"},"securityControlArn":{"description":"The Amazon Resource Name (ARN) for a security control across standards, such as `arn:aws:securityhub:eu-central-1:123456789012:security-control/S3.1`. This parameter doesn't mention a specific standard.","type":"string"}}}},"aws-native:securityhub:getStandard":{"description":"The ``AWS::SecurityHub::Standard`` resource specifies the enablement of a security standard. The standard is identified by the ``StandardsArn`` property. To view a list of ASH standards and their Amazon Resource Names (ARNs), use the [DescribeStandards](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html) API operation.\n You must create a separate ``AWS::SecurityHub::Standard`` resource for each standard that you want to enable.\n For more information about ASH standards, see [standards reference](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-reference.html) in the *User Guide*.","inputs":{"properties":{"standardsSubscriptionArn":{"type":"string","description":"The ARN of a resource that represents your subscription to a supported standard."}},"required":["standardsSubscriptionArn"]},"outputs":{"properties":{"disabledStandardsControls":{"description":"Specifies which controls are to be disabled in a standard. \n *Maximum*: ``100``","items":{"$ref":"#/types/aws-native:securityhub:StandardsControl"},"type":"array"},"standardsSubscriptionArn":{"description":"The ARN of a resource that represents your subscription to a supported standard.","type":"string"}}}},"aws-native:securitylake:getAwsLogSource":{"description":"Resource Type definition for AWS::SecurityLake::AwsLogSource","inputs":{"properties":{"sourceName":{"type":"string","description":"The name for a AWS source. This must be a Regionally unique value."},"sourceVersion":{"type":"string","description":"The version for a AWS source. This must be a Regionally unique value."}},"required":["sourceName","sourceVersion"]},"outputs":{"properties":{"accounts":{"description":"AWS account where you want to collect logs from.","items":{"type":"string"},"type":"array"}}}},"aws-native:securitylake:getDataLake":{"description":"Resource Type definition for AWS::SecurityLake::DataLake","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) created by you to provide to the subscriber."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) created by you to provide to the subscriber.","type":"string"},"encryptionConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeEncryptionConfiguration","description":"Provides encryption details of the Amazon Security Lake object."},"lifecycleConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeLifecycleConfiguration","description":"You can customize Security Lake to store data in your preferred AWS Regions for your preferred amount of time. Lifecycle management can help you comply with different compliance requirements. For more details, see [Lifecycle management](https://docs.aws.amazon.com//security-lake/latest/userguide/lifecycle-management.html) in the Amazon Security Lake User Guide."},"replicationConfiguration":{"$ref":"#/types/aws-native:securitylake:DataLakeReplicationConfiguration","description":"Provides replication details of Amazon Security Lake object."},"s3BucketArn":{"description":"The ARN for the Amazon Security Lake Amazon S3 bucket.","type":"string"},"tags":{"description":"An array of objects, one for each tag to associate with the data lake configuration. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:securitylake:getSubscriber":{"description":"Resource Type definition for AWS::SecurityLake::Subscriber","inputs":{"properties":{"subscriberArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the Security Lake subscriber."}},"required":["subscriberArn"]},"outputs":{"properties":{"accessTypes":{"description":"You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber.\n\nSubscribers can consume data by directly querying AWS Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as `LAKEFORMATION` .","items":{"$ref":"#/types/aws-native:securitylake:SubscriberAccessTypesItem"},"type":"array"},"resourceShareArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Security Lake subscriber.","type":"string"},"resourceShareName":{"description":"The ARN name of the Amazon Security Lake subscriber.","type":"string"},"s3BucketArn":{"description":"The Amazon Resource Name (ARN) of the S3 bucket.","type":"string"},"sources":{"description":"The supported AWS services from which logs and events are collected.","items":{"$ref":"#/types/aws-native:securitylake:SubscriberSource"},"type":"array"},"subscriberArn":{"description":"The Amazon Resource Name (ARN) of the Security Lake subscriber.","type":"string"},"subscriberDescription":{"description":"The description for your subscriber account in Security Lake.","type":"string"},"subscriberIdentity":{"$ref":"#/types/aws-native:securitylake:SubscriberIdentityProperties","description":"The AWS identity used to access your data."},"subscriberName":{"description":"The name of your Security Lake subscriber account.","type":"string"},"subscriberRoleArn":{"description":"The Amazon Resource Name (ARN) of the role used to create the Security Lake subscriber.","type":"string"},"tags":{"description":"An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:securitylake:getSubscriberNotification":{"description":"Resource Type definition for AWS::SecurityLake::SubscriberNotification","inputs":{"properties":{"subscriberArn":{"type":"string","description":"The ARN for the subscriber"}},"required":["subscriberArn"]},"outputs":{"properties":{"notificationConfiguration":{"$ref":"#/types/aws-native:securitylake:SubscriberNotificationNotificationConfiguration","description":"Specify the configurations you want to use for subscriber notification. The subscriber is notified when new data is written to the data lake for sources that the subscriber consumes in Security Lake ."},"subscriberEndpoint":{"description":"The endpoint the subscriber should listen to for notifications","type":"string"}}}},"aws-native:servicecatalog:getCloudFormationProduct":{"description":"Resource Type definition for AWS::ServiceCatalog::CloudFormationProduct","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"acceptLanguage":{"description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese","type":"string"},"description":{"description":"The description of the product.","type":"string"},"distributor":{"description":"The distributor of the product.","type":"string"},"id":{"type":"string"},"name":{"description":"The name of the product.","type":"string"},"owner":{"description":"The owner of the product.","type":"string"},"productName":{"description":"The name of the product.","type":"string"},"productType":{"description":"The type of product.","type":"string"},"provisioningArtifactIds":{"description":"The IDs of the provisioning artifacts.","type":"string"},"provisioningArtifactNames":{"description":"The names of the provisioning artifacts.","type":"string"},"provisioningArtifactParameters":{"description":"The configuration of the provisioning artifact (also known as a version).","items":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductProvisioningArtifactProperties"},"type":"array"},"replaceProvisioningArtifacts":{"description":"This property is turned off by default. If turned off, you can update provisioning artifacts or product attributes (such as description, distributor, name, owner, and more) and the associated provisioning artifacts will retain the same unique identifier. Provisioning artifacts are matched within the CloudFormationProduct resource, and only those that have been updated will be changed. Provisioning artifacts are matched by a combinaton of provisioning artifact template URL and name.\n\nIf turned on, provisioning artifacts will be given a new unique identifier when you update the product or provisioning artifacts.","type":"boolean"},"sourceConnection":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProductSourceConnection","description":"A top level `ProductViewDetail` response containing details about the product’s connection. AWS Service Catalog returns this field for the `CreateProduct` , `UpdateProduct` , `DescribeProductAsAdmin` , and `SearchProductAsAdmin` APIs. This response contains the same fields as the `ConnectionParameters` request, with the addition of the `LastSync` response."},"supportDescription":{"description":"The support information about the product.","type":"string"},"supportEmail":{"description":"The contact email for product support.","type":"string"},"supportUrl":{"description":"The contact URL for product support.\n\n`^https?:\\/\\//` / is the pattern used to validate SupportUrl.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:servicecatalog:getCloudFormationProvisionedProduct":{"description":"Resource Schema for AWS::ServiceCatalog::CloudFormationProvisionedProduct","inputs":{"properties":{"provisionedProductId":{"type":"string","description":"The ID of the provisioned product."}},"required":["provisionedProductId"]},"outputs":{"properties":{"acceptLanguage":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductAcceptLanguage","description":"The language code.\n\n- `jp` - Japanese\n- `zh` - Chinese"},"cloudformationStackArn":{"type":"string"},"outputs":{"additionalProperties":{"type":"string"},"description":"List of key-value pair outputs.","type":"object"},"pathId":{"description":"The path identifier of the product. This value is optional if the product has a default path, and required if the product has more than one path. To list the paths for a product, use [ListLaunchPaths](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html) .\n\n\u003e You must provide the name or ID, but not both.","type":"string"},"pathName":{"description":"The name of the path. This value is optional if the product has a default path, and required if the product has more than one path. To list the paths for a product, use [ListLaunchPaths](https://docs.aws.amazon.com/servicecatalog/latest/dg/API_ListLaunchPaths.html) .\n\n\u003e You must provide the name or ID, but not both.","type":"string"},"productId":{"description":"The product identifier.\n\n\u003e You must specify either the ID or the name of the product, but not both.","type":"string"},"productName":{"description":"The name of the Service Catalog product.\n\nEach time a stack is created or updated, if `ProductName` is provided it will successfully resolve to `ProductId` as long as only one product exists in the account or Region with that `ProductName` .\n\n\u003e You must specify either the name or the ID of the product, but not both.","type":"string"},"provisionedProductId":{"description":"The ID of the provisioned product.","type":"string"},"provisioningArtifactId":{"description":"The identifier of the provisioning artifact (also known as a version).\n\n\u003e You must specify either the ID or the name of the provisioning artifact, but not both.","type":"string"},"provisioningArtifactName":{"description":"The name of the provisioning artifact (also known as a version) for the product. This name must be unique for the product.\n\n\u003e You must specify either the name or the ID of the provisioning artifact, but not both. You must also specify either the name or the ID of the product, but not both.","type":"string"},"provisioningParameters":{"description":"Parameters specified by the administrator that are required for provisioning the product.","items":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningParameter"},"type":"array"},"provisioningPreferences":{"$ref":"#/types/aws-native:servicecatalog:CloudFormationProvisionedProductProvisioningPreferences","description":"StackSet preferences that are required for provisioning the product or updating a provisioned product."},"recordId":{"description":"The ID of the record, such as `rec-rjeatvy434trk` .","type":"string"},"tags":{"description":"One or more tags.\n\n\u003e Requires the provisioned product to have an [ResourceUpdateConstraint](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-servicecatalog-resourceupdateconstraint.html) resource with `TagUpdatesOnProvisionedProduct` set to `ALLOWED` to allow tag updates. If `RESOURCE_UPDATE` constraint is not present, tags updates are ignored.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:servicecatalog:getLaunchNotificationConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::LaunchNotificationConstraint","inputs":{"properties":{"id":{"type":"string","description":"Unique identifier for the constraint"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the constraint.","type":"string"},"id":{"description":"Unique identifier for the constraint","type":"string"},"notificationArns":{"description":"The notification ARNs.","items":{"type":"string"},"type":"array"}}}},"aws-native:servicecatalog:getLaunchRoleConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::LaunchRoleConstraint","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier for the launch role constraint."}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the launch role constraint.","type":"string"},"id":{"description":"The unique identifier for the launch role constraint.","type":"string"},"localRoleName":{"description":"The local IAM role name to use in the launch constraint.","type":"string"},"roleArn":{"description":"The ARN of the IAM role used for the launch constraint.","type":"string"}}}},"aws-native:servicecatalog:getLaunchTemplateConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::LaunchTemplateConstraint","inputs":{"properties":{"id":{"type":"string","description":"Unique identifier for the constraint"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the constraint.","type":"string"},"id":{"description":"Unique identifier for the constraint","type":"string"},"rules":{"description":"A json encoded string of the template constraint rules","type":"string"}}}},"aws-native:servicecatalog:getPortfolio":{"description":"Resource type definition for AWS::ServiceCatalog::Portfolio","inputs":{"properties":{"id":{"type":"string","description":"The portfolio identifier."}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the portfolio.","type":"string"},"displayName":{"description":"The name to use for display purposes.","type":"string"},"id":{"description":"The portfolio identifier.","type":"string"},"portfolioName":{"description":"The name of the portfolio.","type":"string"},"providerName":{"description":"The name of the portfolio provider.","type":"string"},"tags":{"description":"One or more tags.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:servicecatalog:getPortfolioShare":{"description":"Resource Type definition for AWS::ServiceCatalog::PortfolioShare","inputs":{"properties":{"accountId":{"type":"string","description":"The AWS account ID."},"portfolioId":{"type":"string","description":"The portfolio identifier."}},"required":["portfolioId","accountId"]},"outputs":{"properties":{"shareTagOptions":{"description":"Enables or disables TagOptions sharing when creating the portfolio share.","type":"boolean"}}}},"aws-native:servicecatalog:getResourceUpdateConstraint":{"description":"Resource type definition for AWS::ServiceCatalog::ResourceUpdateConstraint","inputs":{"properties":{"id":{"type":"string","description":"Unique identifier for the constraint"}},"required":["id"]},"outputs":{"properties":{"description":{"description":"The description of the constraint","type":"string"},"id":{"description":"Unique identifier for the constraint","type":"string"},"tagUpdateOnProvisionedProduct":{"description":"ALLOWED or NOT_ALLOWED, to permit or prevent changes to the tags on provisioned instances of the specified portfolio / product combination","type":"string"}}}},"aws-native:servicecatalog:getServiceAction":{"description":"Resource Schema for AWS::ServiceCatalog::ServiceAction","inputs":{"properties":{"id":{"type":"string","description":"The self-service action identifier. For example, `act-fs7abcd89wxyz` ."}},"required":["id"]},"outputs":{"properties":{"definition":{"description":"A map that defines the self-service action.","items":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionDefinitionParameter"},"type":"array"},"definitionType":{"$ref":"#/types/aws-native:servicecatalog:ServiceActionDefinitionType","description":"The self-service action definition type. For example, `SSM_AUTOMATION` ."},"description":{"description":"The self-service action description.","type":"string"},"id":{"description":"The self-service action identifier. For example, `act-fs7abcd89wxyz` .","type":"string"},"name":{"description":"The self-service action name.","type":"string"}}}},"aws-native:servicecatalog:getStackSetConstraint":{"description":"Resource Type definition for AWS::ServiceCatalog::StackSetConstraint","inputs":{"properties":{"id":{"type":"string","description":"Unique identifier for the constraint"}},"required":["id"]},"outputs":{"properties":{"accountList":{"description":"One or more AWS accounts that will have access to the provisioned product.","items":{"type":"string"},"type":"array"},"adminRole":{"description":"AdminRole ARN.","type":"string"},"description":{"description":"The description of the constraint.","type":"string"},"executionRole":{"description":"ExecutionRole name.","type":"string"},"id":{"description":"Unique identifier for the constraint","type":"string"},"regionList":{"description":"One or more AWS Regions where the provisioned product will be available.","items":{"type":"string"},"type":"array"},"stackInstanceControl":{"description":"Permission to create, update, and delete stack instances. Choose from ALLOWED and NOT_ALLOWED.","type":"string"}}}},"aws-native:servicecatalog:getTagOption":{"description":"Resource type definition for AWS::ServiceCatalog::TagOption","inputs":{"properties":{"id":{"type":"string","description":"The TagOption identifier."}},"required":["id"]},"outputs":{"properties":{"active":{"description":"The TagOption active state.","type":"boolean"},"id":{"description":"The TagOption identifier.","type":"string"}}}},"aws-native:servicecatalogappregistry:getApplication":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::Application","inputs":{"properties":{"id":{"type":"string","description":"The identifier of the application."}},"required":["id"]},"outputs":{"properties":{"applicationName":{"description":"The name of the application. ","type":"string"},"applicationTagKey":{"description":"The key of the AWS application tag, which is awsApplication. Applications created before 11/13/2023 or applications without the AWS application tag resource group return no value.","type":"string"},"applicationTagValue":{"description":"The value of the AWS application tag, which is the identifier of an associated resource. Applications created before 11/13/2023 or applications without the AWS application tag resource group return no value. ","type":"string"},"arn":{"description":"The Amazon resource name (ARN) that specifies the application across services.","type":"string"},"description":{"description":"The description of the application. ","type":"string"},"id":{"description":"The identifier of the application.","type":"string"},"name":{"description":"The name of the application. ","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Key-value pairs you can use to associate with the application.","type":"object"}}}},"aws-native:servicecatalogappregistry:getAttributeGroup":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::AttributeGroup.","inputs":{"properties":{"id":{"type":"string","description":"The globally unique attribute group identifier of the attribute group."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon resource name (ARN) that specifies the attribute group across services.","type":"string"},"attributes":{"$ref":"pulumi.json#/Any","description":"A nested object in a JSON or YAML template that supports arbitrary definitions. Represents the attributes in an attribute group that describes an application and its components.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::ServiceCatalogAppRegistry::AttributeGroup` for more information about the expected schema for this property."},"description":{"description":"The description of the attribute group. ","type":"string"},"id":{"description":"The globally unique attribute group identifier of the attribute group.","type":"string"},"name":{"description":"The name of the attribute group. ","type":"string"},"tags":{"additionalProperties":{"type":"string"},"description":"Key-value pairs you can use to associate with the attribute group.","type":"object"}}}},"aws-native:servicecatalogappregistry:getAttributeGroupAssociation":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::AttributeGroupAssociation.","inputs":{"properties":{"applicationArn":{"type":"string","description":"The Amazon resource name (ARN) of the application that was augmented with attributes."},"attributeGroupArn":{"type":"string","description":"The Amazon resource name (ARN) of the attribute group which contains the application's new attributes."}},"required":["applicationArn","attributeGroupArn"]},"outputs":{"properties":{"applicationArn":{"description":"The Amazon resource name (ARN) of the application that was augmented with attributes.","type":"string"},"attributeGroupArn":{"description":"The Amazon resource name (ARN) of the attribute group which contains the application's new attributes.","type":"string"}}}},"aws-native:servicecatalogappregistry:getResourceAssociation":{"description":"Resource Schema for AWS::ServiceCatalogAppRegistry::ResourceAssociation","inputs":{"properties":{"applicationArn":{"type":"string","description":"The Amazon resource name (ARN) that specifies the application."},"resourceArn":{"type":"string","description":"The Amazon resource name (ARN) that specifies the resource."},"resourceType":{"$ref":"#/types/aws-native:servicecatalogappregistry:ResourceAssociationResourceType","description":"The type of the CFN Resource for now it's enum CFN_STACK."}},"required":["applicationArn","resourceArn","resourceType"]},"outputs":{"properties":{"applicationArn":{"description":"The Amazon resource name (ARN) that specifies the application.","type":"string"},"resourceArn":{"description":"The Amazon resource name (ARN) that specifies the resource.","type":"string"}}}},"aws-native:servicediscovery:getService":{"description":"Resource Type definition for AWS::ServiceDiscovery::Service","inputs":{"properties":{"id":{"type":"string","description":"The unique identifier for the service."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the service.","type":"string"},"description":{"description":"A description for the service.","type":"string"},"dnsConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceDnsConfig","description":"DNS-related configurations for the service."},"healthCheckConfig":{"$ref":"#/types/aws-native:servicediscovery:ServiceHealthCheckConfig","description":"Settings for health checks. Used when routing is DNS-based."},"id":{"description":"The unique identifier for the service.","type":"string"},"serviceAttributes":{"additionalProperties":{"type":"string"},"description":"A string map that contains attributes and values for the service. You can specify a maximum of 30 key-value pairs.","type":"object"},"tags":{"description":"An array of key-value pairs to associate with the service.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getConfigurationSet":{"description":"Resource schema for AWS::SES::ConfigurationSet.","inputs":{"properties":{"name":{"type":"string","description":"The name of the configuration set."}},"required":["name"]},"outputs":{"properties":{"archivingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetArchivingOptions"},"deliveryOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetDeliveryOptions","description":"Specifies the name of the dedicated IP pool to associate with the configuration set and whether messages that use the configuration set are required to use Transport Layer Security (TLS)."},"reputationOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetReputationOptions","description":"An object that defines whether or not Amazon SES collects reputation metrics for the emails that you send that use the configuration set."},"sendingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSendingOptions","description":"An object that defines whether or not Amazon SES can send email that you send using the configuration set."},"suppressionOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetSuppressionOptions","description":"An object that contains information about the suppression list preferences for your account."},"tags":{"description":"The tags (keys and values) associated with the contact list.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trackingOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetTrackingOptions","description":"An object that defines the open and click tracking options for emails that you send using the configuration set."},"vdmOptions":{"$ref":"#/types/aws-native:ses:ConfigurationSetVdmOptions","description":"The Virtual Deliverability Manager (VDM) options that apply to the configuration set."}}}},"aws-native:ses:getConfigurationSetEventDestination":{"description":"Resource Type definition for AWS::SES::ConfigurationSetEventDestination","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"eventDestination":{"$ref":"#/types/aws-native:ses:ConfigurationSetEventDestinationEventDestination","description":"The event destination object."},"id":{"type":"string"}}}},"aws-native:ses:getContactList":{"description":"Resource schema for AWS::SES::ContactList.","inputs":{"properties":{"contactListName":{"type":"string","description":"The name of the contact list."}},"required":["contactListName"]},"outputs":{"properties":{"description":{"description":"The description of the contact list.","type":"string"},"tags":{"description":"The tags (keys and values) associated with the contact list.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"topics":{"description":"The topics associated with the contact list.","items":{"$ref":"#/types/aws-native:ses:ContactListTopic"},"type":"array"}}}},"aws-native:ses:getCustomVerificationEmailTemplate":{"description":"Resource Type definition for AWS::SES::CustomVerificationEmailTemplate.","inputs":{"properties":{"templateName":{"type":"string","description":"The name of the custom verification email template."}},"required":["templateName"]},"outputs":{"properties":{"failureRedirectionUrl":{"description":"The URL that the recipient of the verification email is sent to if his or her address is not successfully verified.","type":"string"},"fromEmailAddress":{"description":"The email address that the custom verification email is sent from.","type":"string"},"successRedirectionUrl":{"description":"The URL that the recipient of the verification email is sent to if his or her address is successfully verified.","type":"string"},"tags":{"description":"The tags (keys and values) associated with the tenant.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"templateContent":{"description":"The content of the custom verification email. The total size of the email must be less than 10 MB. The message body may contain HTML, with some limitations.","type":"string"},"templateSubject":{"description":"The subject line of the custom verification email.","type":"string"}}}},"aws-native:ses:getDedicatedIpPool":{"description":"Resource Type definition for AWS::SES::DedicatedIpPool","inputs":{"properties":{"poolName":{"type":"string","description":"The name of the dedicated IP pool."}},"required":["poolName"]},"outputs":{"properties":{"scalingMode":{"description":"Specifies whether the dedicated IP pool is managed or not. The default value is STANDARD.","type":"string"},"tags":{"description":"The tags (keys and values) associated with the dedicated IP pool.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getEmailIdentity":{"description":"Resource Type definition for AWS::SES::EmailIdentity","inputs":{"properties":{"emailIdentity":{"type":"string","description":"The email address or domain to verify.","language":{"csharp":{"name":"EmailIdentityValue"}}}},"required":["emailIdentity"]},"outputs":{"properties":{"configurationSetAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityConfigurationSetAttributes","description":"Used to associate a configuration set with an email identity."},"dkimAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityDkimAttributes","description":"An object that contains information about the DKIM attributes for the identity."},"dkimDnsTokenName1":{"description":"The host name for the first token that you have to add to the DNS configuration for your domain.","type":"string"},"dkimDnsTokenName2":{"description":"The host name for the second token that you have to add to the DNS configuration for your domain.","type":"string"},"dkimDnsTokenName3":{"description":"The host name for the third token that you have to add to the DNS configuration for your domain.","type":"string"},"dkimDnsTokenValue1":{"description":"The record value for the first token that you have to add to the DNS configuration for your domain.","type":"string"},"dkimDnsTokenValue2":{"description":"The record value for the second token that you have to add to the DNS configuration for your domain.","type":"string"},"dkimDnsTokenValue3":{"description":"The record value for the third token that you have to add to the DNS configuration for your domain.","type":"string"},"dkimSigningAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityDkimSigningAttributes","description":"If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for [Easy DKIM](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html) .\n\nYou can only specify this object if the email identity is a domain, as opposed to an address."},"feedbackAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityFeedbackAttributes","description":"Used to enable or disable feedback forwarding for an identity."},"mailFromAttributes":{"$ref":"#/types/aws-native:ses:EmailIdentityMailFromAttributes","description":"Used to enable or disable the custom Mail-From domain configuration for an email identity."},"tags":{"description":"The tags (keys and values) associated with the email identity.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerAddonInstance":{"description":"Definition of AWS::SES::MailManagerAddonInstance Resource Type","inputs":{"properties":{"addonInstanceId":{"type":"string","description":"The unique ID of the Add On instance."}},"required":["addonInstanceId"]},"outputs":{"properties":{"addonInstanceArn":{"description":"The Amazon Resource Name (ARN) of the Add On instance.","type":"string"},"addonInstanceId":{"description":"The unique ID of the Add On instance.","type":"string"},"addonName":{"description":"The name of the Add On for the instance.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerAddonSubscription":{"description":"Definition of AWS::SES::MailManagerAddonSubscription Resource Type","inputs":{"properties":{"addonSubscriptionId":{"type":"string","description":"The unique ID of the Add On subscription."}},"required":["addonSubscriptionId"]},"outputs":{"properties":{"addonSubscriptionArn":{"description":"The Amazon Resource Name (ARN) of the Add On subscription.","type":"string"},"addonSubscriptionId":{"description":"The unique ID of the Add On subscription.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerAddressList":{"description":"Definition of AWS::SES::MailManagerAddressList Resource Type","inputs":{"properties":{"addressListId":{"type":"string","description":"The identifier of the address list."}},"required":["addressListId"]},"outputs":{"properties":{"addressListArn":{"description":"The Amazon Resource Name (ARN) of the address list.","type":"string"},"addressListId":{"description":"The identifier of the address list.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerArchive":{"description":"Definition of AWS::SES::MailManagerArchive Resource Type","inputs":{"properties":{"archiveId":{"type":"string","description":"The unique identifier of the archive."}},"required":["archiveId"]},"outputs":{"properties":{"archiveArn":{"description":"The Amazon Resource Name (ARN) of the archive.","type":"string"},"archiveId":{"description":"The unique identifier of the archive.","type":"string"},"archiveName":{"description":"A unique name for the new archive.","type":"string"},"archiveState":{"$ref":"#/types/aws-native:ses:MailManagerArchiveArchiveState","description":"The current state of the archive:\n\n- `ACTIVE` – The archive is ready and available for use.\n- `PENDING_DELETION` – The archive has been marked for deletion and will be permanently deleted in 30 days. No further modifications can be made in this state."},"retention":{"$ref":"#/types/aws-native:ses:MailManagerArchiveArchiveRetentionProperties","description":"The period for retaining emails in the archive before automatic deletion."},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerIngressPoint":{"description":"Definition of AWS::SES::MailManagerIngressPoint Resource Type","inputs":{"properties":{"ingressPointId":{"type":"string","description":"The identifier of the ingress endpoint resource."}},"required":["ingressPointId"]},"outputs":{"properties":{"aRecord":{"description":"The DNS A Record that identifies your ingress endpoint. Configure your DNS Mail Exchange (MX) record with this value to route emails to Mail Manager.","type":"string"},"ingressPointArn":{"description":"The Amazon Resource Name (ARN) of the ingress endpoint resource.","type":"string"},"ingressPointId":{"description":"The identifier of the ingress endpoint resource.","type":"string"},"ingressPointName":{"description":"A user friendly name for an ingress endpoint resource.","type":"string"},"ruleSetId":{"description":"The identifier of an existing rule set that you attach to an ingress endpoint resource.","type":"string"},"status":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointStatus","description":"The status of the ingress endpoint resource."},"statusToUpdate":{"$ref":"#/types/aws-native:ses:MailManagerIngressPointIngressPointStatusToUpdate","description":"The update status of an ingress endpoint."},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trafficPolicyId":{"description":"The identifier of an existing traffic policy that you attach to an ingress endpoint resource.","type":"string"}}}},"aws-native:ses:getMailManagerRelay":{"description":"Definition of AWS::SES::MailManagerRelay Resource Type","inputs":{"properties":{"relayId":{"type":"string","description":"The unique relay identifier."}},"required":["relayId"]},"outputs":{"properties":{"authentication":{"description":"Authentication for the relay destination server—specify the secretARN where the SMTP credentials are stored.","oneOf":[{"$ref":"#/types/aws-native:ses:MailManagerRelayRelayAuthentication0Properties"},{"$ref":"#/types/aws-native:ses:MailManagerRelayRelayAuthentication1Properties"}]},"relayArn":{"description":"The Amazon Resource Name (ARN) of the relay.","type":"string"},"relayId":{"description":"The unique relay identifier.","type":"string"},"relayName":{"description":"The unique relay name.","type":"string"},"serverName":{"description":"The destination relay server address.","type":"string"},"serverPort":{"description":"The destination relay server port.","type":"number"},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerRuleSet":{"description":"Definition of AWS::SES::MailManagerRuleSet Resource Type","inputs":{"properties":{"ruleSetId":{"type":"string","description":"The identifier of the rule set."}},"required":["ruleSetId"]},"outputs":{"properties":{"ruleSetArn":{"description":"The Amazon Resource Name (ARN) of the rule set resource.","type":"string"},"ruleSetId":{"description":"The identifier of the rule set.","type":"string"},"ruleSetName":{"description":"A user-friendly name for the rule set.","type":"string"},"rules":{"description":"Conditional rules that are evaluated for determining actions on email.","items":{"$ref":"#/types/aws-native:ses:MailManagerRuleSetRule"},"type":"array"},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getMailManagerTrafficPolicy":{"description":"Definition of AWS::SES::MailManagerTrafficPolicy Resource Type","inputs":{"properties":{"trafficPolicyId":{"type":"string","description":"The identifier of the traffic policy resource."}},"required":["trafficPolicyId"]},"outputs":{"properties":{"defaultAction":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyAcceptAction","description":"Default action instructs the traffic policy to either Allow or Deny (block) messages that fall outside of (or not addressed by) the conditions of your policy statements"},"maxMessageSizeBytes":{"description":"The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked.","type":"number"},"policyStatements":{"description":"Conditional statements for filtering email traffic.","items":{"$ref":"#/types/aws-native:ses:MailManagerTrafficPolicyPolicyStatement"},"type":"array"},"tags":{"description":"The tags used to organize, track, or control access for the resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trafficPolicyArn":{"description":"The Amazon Resource Name (ARN) of the traffic policy resource.","type":"string"},"trafficPolicyId":{"description":"The identifier of the traffic policy resource.","type":"string"},"trafficPolicyName":{"description":"The name of the policy.\n\nThe policy name cannot exceed 64 characters and can only include alphanumeric characters, dashes, and underscores.","type":"string"}}}},"aws-native:ses:getMultiRegionEndpoint":{"description":"Resource Type definition for AWS::SES::MultiRegionEndpoint","inputs":{"properties":{"endpointName":{"type":"string","description":"The name of the multi-region endpoint (global-endpoint)."}},"required":["endpointName"]},"outputs":{"properties":{"tags":{"description":"An array of objects that define the tags (keys and values) to associate with the multi-region endpoint (global-endpoint).","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getTemplate":{"description":"Resource Type definition for AWS::SES::Template","inputs":{"properties":{"id":{"type":"string"}},"required":["id"]},"outputs":{"properties":{"id":{"type":"string"},"tags":{"description":"The tags (keys and values) associated with the email template.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"template":{"$ref":"#/types/aws-native:ses:Template","description":"The content of the email, composed of a subject line and either an HTML part or a text-only part.","language":{"csharp":{"name":"TemplateValue"}}}}}},"aws-native:ses:getTenant":{"description":"Resource Type definition for AWS::SES::Tenant","inputs":{"properties":{"tenantName":{"type":"string","description":"The name of the tenant."}},"required":["tenantName"]},"outputs":{"properties":{"arn":{"description":"Amazon Resource Name (ARN) of the tenant.","type":"string"},"resourceAssociations":{"description":"The list of resources to associate with the tenant.","items":{"$ref":"#/types/aws-native:ses:TenantResourceAssociation"},"type":"array"},"tags":{"description":"The tags (keys and values) associated with the tenant.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ses:getVdmAttributes":{"description":"Resource Type definition for AWS::SES::VdmAttributes","inputs":{"properties":{"vdmAttributesResourceId":{"type":"string","description":"Unique identifier for this resource"}},"required":["vdmAttributesResourceId"]},"outputs":{"properties":{"dashboardAttributes":{"$ref":"#/types/aws-native:ses:VdmAttributesDashboardAttributes","description":"Specifies additional settings for your VDM configuration as applicable to the Dashboard."},"guardianAttributes":{"$ref":"#/types/aws-native:ses:VdmAttributesGuardianAttributes","description":"Specifies additional settings for your VDM configuration as applicable to the Guardian."},"vdmAttributesResourceId":{"description":"Unique identifier for this resource","type":"string"}}}},"aws-native:shield:getDrtAccess":{"description":"Config the role and list of Amazon S3 log buckets used by the Shield Response Team (SRT) to access your AWS account while assisting with attack mitigation.","inputs":{"properties":{"accountId":{"type":"string","description":"The ID of the account that submitted the template."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The ID of the account that submitted the template.","type":"string"},"logBucketList":{"description":"Authorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources. You can associate up to 10 Amazon S3 buckets with your subscription.","items":{"type":"string"},"type":"array"},"roleArn":{"description":"Authorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the SRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs.","type":"string"}}}},"aws-native:shield:getProactiveEngagement":{"description":"Authorizes the Shield Response Team (SRT) to use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.","inputs":{"properties":{"accountId":{"type":"string","description":"The ID of the account that submitted the template."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The ID of the account that submitted the template.","type":"string"},"emergencyContactList":{"description":"A list of email addresses and phone numbers that the Shield Response Team (SRT) can use to contact you for escalations to the SRT and to initiate proactive customer support.\nTo enable proactive engagement, the contact list must include at least one phone number.","items":{"$ref":"#/types/aws-native:shield:ProactiveEngagementEmergencyContact"},"type":"array"},"proactiveEngagementStatus":{"$ref":"#/types/aws-native:shield:ProactiveEngagementStatus","description":"If `ENABLED`, the Shield Response Team (SRT) will use email and phone to notify contacts about escalations to the SRT and to initiate proactive customer support.\nIf `DISABLED`, the SRT will not proactively notify contacts about escalations or to initiate proactive customer support."}}}},"aws-native:shield:getProtection":{"description":"Enables AWS Shield Advanced for a specific AWS resource. The resource can be an Amazon CloudFront distribution, Amazon Route 53 hosted zone, AWS Global Accelerator standard accelerator, Elastic IP Address, Application Load Balancer, or a Classic Load Balancer. You can protect Amazon EC2 instances and Network Load Balancers by association with protected Amazon EC2 Elastic IP addresses.","inputs":{"properties":{"protectionArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the protection."}},"required":["protectionArn"]},"outputs":{"properties":{"applicationLayerAutomaticResponseConfiguration":{"$ref":"#/types/aws-native:shield:ProtectionApplicationLayerAutomaticResponseConfiguration","description":"The automatic application layer DDoS mitigation settings for the protection. This configuration determines whether Shield Advanced automatically manages rules in the web ACL in order to respond to application layer events that Shield Advanced determines to be DDoS attacks.\n\nIf you use CloudFormation to manage the web ACLs that you use with Shield Advanced automatic mitigation, see the additional guidance about web ACL management in the `AWS::WAFv2::WebACL` resource description."},"healthCheckArns":{"description":"The Amazon Resource Names (ARNs) of the health check to associate with the protection.","items":{"type":"string"},"type":"array"},"protectionArn":{"description":"The ARN (Amazon Resource Name) of the protection.","type":"string"},"protectionId":{"description":"The unique identifier (ID) of the protection.","type":"string"},"tags":{"description":"One or more tag key-value pairs for the Protection object.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:shield:getProtectionGroup":{"description":"A grouping of protected resources so they can be handled as a collective. This resource grouping improves the accuracy of detection and reduces false positives.","inputs":{"properties":{"protectionGroupArn":{"type":"string","description":"The ARN (Amazon Resource Name) of the protection group."}},"required":["protectionGroupArn"]},"outputs":{"properties":{"aggregation":{"$ref":"#/types/aws-native:shield:ProtectionGroupAggregation","description":"Defines how AWS Shield combines resource data for the group in order to detect, mitigate, and report events.\n* Sum - Use the total traffic across the group. This is a good choice for most cases. Examples include Elastic IP addresses for EC2 instances that scale manually or automatically.\n* Mean - Use the average of the traffic across the group. This is a good choice for resources that share traffic uniformly. Examples include accelerators and load balancers.\n* Max - Use the highest traffic from each resource. This is useful for resources that don't share traffic and for resources that share that traffic in a non-uniform way. Examples include Amazon CloudFront and origin resources for CloudFront distributions."},"members":{"description":"The Amazon Resource Names (ARNs) of the resources to include in the protection group. You must set this when you set `Pattern` to `ARBITRARY` and you must not set it for any other `Pattern` setting.","items":{"type":"string"},"type":"array"},"pattern":{"$ref":"#/types/aws-native:shield:ProtectionGroupPattern","description":"The criteria to use to choose the protected resources for inclusion in the group. You can include all resources that have protections, provide a list of resource Amazon Resource Names (ARNs), or include all resources of a specified resource type."},"protectionGroupArn":{"description":"The ARN (Amazon Resource Name) of the protection group.","type":"string"},"resourceType":{"$ref":"#/types/aws-native:shield:ProtectionGroupResourceType","description":"The resource type to include in the protection group. All protected resources of this type are included in the protection group. Newly protected resources of this type are automatically added to the group. You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not set it for any other `Pattern` setting."},"tags":{"description":"One or more tag key-value pairs for the Protection object.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:signer:getSigningProfile":{"description":"A signing profile is a signing template that can be used to carry out a pre-defined signing job.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the specified signing profile."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the specified signing profile.","type":"string"},"profileVersion":{"description":"A version for the signing profile. AWS Signer generates a unique version for each profile of the same profile name.","type":"string"},"profileVersionArn":{"description":"The Amazon Resource Name (ARN) of the specified signing profile version.","type":"string"},"tags":{"description":"A list of tags associated with the signing profile.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:simspaceweaver:getSimulation":{"description":"AWS::SimSpaceWeaver::Simulation resource creates an AWS Simulation.","inputs":{"properties":{"name":{"type":"string","description":"The name of the simulation."}},"required":["name"]},"outputs":{"properties":{"describePayload":{"description":"Json object with all simulation details","type":"string"}}}},"aws-native:smsvoice:getConfigurationSet":{"description":"Resource Type definition for AWS::SMSVOICE::ConfigurationSet","inputs":{"properties":{"configurationSetName":{"type":"string","description":"The name to use for the configuration set."}},"required":["configurationSetName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the ConfigurationSet.","type":"string"},"defaultSenderId":{"description":"The default sender ID to set for the ConfigurationSet.","type":"string"},"eventDestinations":{"description":"An event destination is a location where you send message events.","items":{"$ref":"#/types/aws-native:smsvoice:ConfigurationSetEventDestination"},"type":"array"},"messageFeedbackEnabled":{"description":"Set to true to enable message feedback.","type":"boolean"},"protectConfigurationId":{"description":"The unique identifier for the protect configuration to be associated to the configuration set.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:smsvoice:getOptOutList":{"description":"Resource Type definition for AWS::SMSVOICE::OptOutList","inputs":{"properties":{"optOutListName":{"type":"string","description":"The name of the new OptOutList."}},"required":["optOutListName"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) for the OptOutList.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:smsvoice:getPhoneNumber":{"description":"Resource Type definition for AWS::SMSVOICE::PhoneNumber","inputs":{"properties":{"phoneNumberId":{"type":"string","description":"The unique identifier for the phone number."}},"required":["phoneNumberId"]},"outputs":{"properties":{"arn":{"description":"The `PhoneNumber` 's Amazon Resource Name (ARN)","type":"string"},"deletionProtectionEnabled":{"description":"When set to true the sender ID can't be deleted. By default this is set to false.","type":"boolean"},"mandatoryKeywords":{"$ref":"#/types/aws-native:smsvoice:MandatoryKeywordsProperties","description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords"},"optOutListName":{"description":"The name of the OptOutList to associate with the phone number. You can use the OptOutListName or OptOutListArn.","type":"string"},"optionalKeywords":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message.","items":{"$ref":"#/types/aws-native:smsvoice:PhoneNumberOptionalKeyword"},"type":"array"},"phoneNumber":{"description":"The phone number in E.164 format.","language":{"csharp":{"name":"PhoneNumberValue"}},"type":"string"},"phoneNumberId":{"description":"The unique identifier for the phone number.","type":"string"},"selfManagedOptOutsEnabled":{"description":"By default this is set to false. When an end recipient sends a message that begins with HELP or STOP to one of your dedicated numbers, AWS End User Messaging SMS and Voice automatically replies with a customizable message and adds the end recipient to the OptOutList. When set to true you're responsible for responding to HELP and STOP requests. You're also responsible for tracking and honoring opt-out requests.","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"twoWay":{"$ref":"#/types/aws-native:smsvoice:TwoWayProperties","description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing."}}}},"aws-native:smsvoice:getPool":{"description":"Resource Type definition for AWS::SMSVOICE::Pool","inputs":{"properties":{"poolId":{"type":"string","description":"The unique identifier for the pool."}},"required":["poolId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name of the `Pool` .","type":"string"},"deletionProtectionEnabled":{"description":"When set to true the pool can't be deleted. By default this is set to false.","type":"boolean"},"mandatoryKeywords":{"$ref":"#/types/aws-native:smsvoice:MandatoryKeywordsProperties","description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message. Keywords \"HELP\" and \"STOP\" are mandatory keywords"},"optOutListName":{"description":"The name of the OptOutList to associate with the pool. You can use the OptOutListName or OptOutListArn.","type":"string"},"optionalKeywords":{"description":"A keyword is a word that you can search for on a particular phone number or pool. It is also a specific word or phrase that an end user can send to your number to elicit a response, such as an informational message or a special offer. When your number receives a message that begins with a keyword, AWS End User Messaging SMS and Voice responds with a customizable message.","items":{"$ref":"#/types/aws-native:smsvoice:PoolOptionalKeyword"},"type":"array"},"originationIdentities":{"description":"The origination identity to use such as a PhoneNumberId, PhoneNumberArn, SenderId or SenderIdArn and it's IsoCountryCode.","items":{"type":"string"},"type":"array"},"poolId":{"description":"The unique identifier for the pool.","type":"string"},"selfManagedOptOutsEnabled":{"description":"By default this is set to false. When an end recipient sends a message that begins with HELP or STOP to one of your dedicated numbers, AWS End User Messaging SMS and Voice automatically replies with a customizable message and adds the end recipient to the OptOutList. When set to true you're responsible for responding to HELP and STOP requests. You're also responsible for tracking and honoring opt-out requests.","type":"boolean"},"sharedRoutesEnabled":{"description":"Indicates whether shared routes are enabled for the pool.","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"twoWay":{"$ref":"#/types/aws-native:smsvoice:TwoWayProperties","description":"When you set up two-way SMS, you can receive incoming messages from your customers. When one of your customers sends a message to your phone number, the message body is sent to an Amazon SNS topic or Amazon Connect for processing."}}}},"aws-native:smsvoice:getProtectConfiguration":{"description":"Resource Type definition for AWS::SMSVOICE::ProtectConfiguration","inputs":{"properties":{"protectConfigurationId":{"type":"string","description":"The unique identifier for the protect configuration."}},"required":["protectConfigurationId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the protect configuration.","type":"string"},"countryRuleSet":{"$ref":"#/types/aws-native:smsvoice:ProtectConfigurationCountryRuleSet","description":"An array of CountryRule containing the rules for the NumberCapability."},"deletionProtectionEnabled":{"description":"When set to true deletion protection is enabled and protect configuration cannot be deleted. By default this is set to false.","type":"boolean"},"protectConfigurationId":{"description":"The unique identifier for the protect configuration.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:smsvoice:getResourcePolicy":{"description":"Resource Type definition for AWS::SMSVOICE::ResourcePolicy","inputs":{"properties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the AWS End User Messaging SMS and Voice resource to attach the resource-based policy to."}},"required":["resourceArn"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"The JSON formatted resource-based policy to attach.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SMSVOICE::ResourcePolicy` for more information about the expected schema for this property."}}}},"aws-native:smsvoice:getSenderId":{"description":"Resource Type definition for AWS::SMSVOICE::SenderId","inputs":{"properties":{"isoCountryCode":{"type":"string","description":"The two-character code, in ISO 3166-1 alpha-2 format, for the country or region."},"senderId":{"type":"string","description":"The sender ID string to request.","language":{"csharp":{"name":"SenderIdValue"}}}},"required":["isoCountryCode","senderId"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) associated with the SenderId.","type":"string"},"deletionProtectionEnabled":{"description":"When set to true the sender ID can't be deleted. By default this is set to false.","type":"boolean"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sns:getSubscription":{"description":"Resource Type definition for AWS::SNS::Subscription","inputs":{"properties":{"arn":{"type":"string","description":"Arn of the subscription"}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Arn of the subscription","type":"string"},"deliveryPolicy":{"$ref":"pulumi.json#/Any","description":"The delivery policy JSON assigned to the subscription. Enables the subscriber to define the message delivery retry strategy in the case of an HTTP/S endpoint subscribed to the topic.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"filterPolicy":{"$ref":"pulumi.json#/Any","description":"The filter policy JSON assigned to the subscription. Enables the subscriber to filter out unwanted messages.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"filterPolicyScope":{"description":"This attribute lets you choose the filtering scope by using one of the following string value types: MessageAttributes (default) and MessageBody.","type":"string"},"rawMessageDelivery":{"description":"When set to true, enables raw message delivery. Raw messages don't contain any JSON formatting and can be sent to Amazon SQS and HTTP/S endpoints.","type":"boolean"},"redrivePolicy":{"$ref":"pulumi.json#/Any","description":"When specified, sends undeliverable messages to the specified Amazon SQS dead-letter queue. Messages that can't be delivered due to client errors are held in the dead-letter queue for further analysis or reprocessing.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"replayPolicy":{"$ref":"pulumi.json#/Any","description":"Specifies whether Amazon SNS resends the notification to the subscription when a message's attribute changes.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Subscription` for more information about the expected schema for this property."},"subscriptionRoleArn":{"description":"This property applies only to Amazon Data Firehose delivery stream subscriptions.","type":"string"}}}},"aws-native:sns:getTopic":{"description":"The ``AWS::SNS::Topic`` resource creates a topic to which notifications can be published.\n  One account can create a maximum of 100,000 standard topics and 1,000 FIFO topics. For more information, see [endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sns.html) in the *General Reference*.\n   The structure of ``AUTHPARAMS`` depends on the .signature of the API request. For more information, see [Examples of the complete Signature Version 4 signing process](https://docs.aws.amazon.com/general/latest/gr/sigv4-signed-request-examples.html) in the *General Reference*.","inputs":{"properties":{"topicArn":{"type":"string","description":"Returns the ARN of an Amazon  topic."}},"required":["topicArn"]},"outputs":{"properties":{"archivePolicy":{"$ref":"pulumi.json#/Any","description":"The archive policy determines the number of days SNS retains messages. You can set a retention period from 1 to 365 days.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Topic` for more information about the expected schema for this property."},"contentBasedDeduplication":{"description":"Enables content-based deduplication for FIFO topics.\n  +  By default, ``ContentBasedDeduplication`` is set to ``false``. If you create a FIFO topic and this attribute is ``false``, you must specify a value for the ``MessageDeduplicationId`` parameter for the [Publish](https://docs.aws.amazon.com/sns/latest/api/API_Publish.html) action. \n  +  When you set ``ContentBasedDeduplication`` to ``true``, SNS uses a SHA-256 hash to generate the ``MessageDeduplicationId`` using the body of the message (but not the attributes of the message).\n (Optional) To override the generated value, you can specify a value for the the ``MessageDeduplicationId`` parameter for the ``Publish`` action.","type":"boolean"},"dataProtectionPolicy":{"$ref":"pulumi.json#/Any","description":"The body of the policy document you want to use for this topic.\n You can only add one policy per topic.\n The policy must be in JSON string format.\n Length Constraints: Maximum length of 30,720.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::Topic` for more information about the expected schema for this property."},"deliveryStatusLogging":{"description":"The ``DeliveryStatusLogging`` configuration enables you to log the delivery status of messages sent from your Amazon SNS topic to subscribed endpoints with the following supported delivery protocols:\n  +  HTTP \n  +  Amazon Kinesis Data Firehose\n  +   AWS Lambda\n  +  Platform application endpoint\n  +  Amazon Simple Queue Service\n  \n Once configured, log entries are sent to Amazon CloudWatch Logs.","items":{"$ref":"#/types/aws-native:sns:TopicLoggingConfig"},"type":"array"},"displayName":{"description":"The display name to use for an SNS topic with SMS subscriptions. The display name must be maximum 100 characters long, including hyphens (-), underscores (_), spaces, and tabs.","type":"string"},"fifoThroughputScope":{"description":"Specifies the throughput quota and deduplication behavior to apply for the FIFO topic. Valid values are `Topic` or `MessageGroup` .","type":"string"},"kmsMasterKeyId":{"description":"The ID of an AWS managed customer master key (CMK) for SNS or a custom CMK. For more information, see [Key terms](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html#sse-key-terms). For more examples, see ``KeyId`` in the *API Reference*.\n This property applies only to [server-side-encryption](https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html).","type":"string"},"signatureVersion":{"description":"The signature version corresponds to the hashing algorithm used while creating the signature of the notifications, subscription confirmations, or unsubscribe confirmation messages sent by Amazon SNS. By default, ``SignatureVersion`` is set to ``1``.","type":"string"},"subscription":{"description":"The SNS subscriptions (endpoints) for this topic.\n  If you specify the ``Subscription`` property in the ``AWS::SNS::Topic`` resource and it creates an associated subscription resource, the associated subscription is not deleted when the ``AWS::SNS::Topic`` resource is deleted.","items":{"$ref":"#/types/aws-native:sns:TopicSubscription"},"type":"array"},"tags":{"description":"The list of tags to add to a new topic.\n  To be able to tag a topic on creation, you must have the ``sns:CreateTopic`` and ``sns:TagResource`` permissions.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"topicArn":{"description":"Returns the ARN of an Amazon  topic.","type":"string"},"tracingConfig":{"description":"Tracing mode of an SNS topic. By default ``TracingConfig`` is set to ``PassThrough``, and the topic passes through the tracing header it receives from an SNS publisher to its subscriptions. If set to ``Active``, SNS will vend X-Ray segment data to topic owner account if the sampled flag in the tracing header is true.","type":"string"}}}},"aws-native:sns:getTopicInlinePolicy":{"description":"Schema for AWS::SNS::TopicInlinePolicy","inputs":{"properties":{"topicArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the topic to which you want to add the policy."}},"required":["topicArn"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SNS topics.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::TopicInlinePolicy` for more information about the expected schema for this property."}}}},"aws-native:sns:getTopicPolicy":{"description":"The ``AWS::SNS::TopicPolicy`` resource associates SNS topics with a policy. For an example snippet, see [Declaring an policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sns-policy) in the *User Guide*.","inputs":{"properties":{"id":{"type":"string","description":"The provider-assigned unique ID for this managed resource."}},"required":["id"]},"outputs":{"properties":{"id":{"description":"The provider-assigned unique ID for this managed resource.","type":"string"},"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SNS topics.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SNS::TopicPolicy` for more information about the expected schema for this property."},"topics":{"description":"The Amazon Resource Names (ARN) of the topics to which you want to add the policy. You can use the ``Ref`` function to specify an ``AWS::SNS::Topic`` resource.","items":{"type":"string"},"type":"array"}}}},"aws-native:sqs:getQueue":{"description":"The ``AWS::SQS::Queue`` resource creates an SQS standard or FIFO queue.\n Keep the following caveats in mind:\n  +  If you don't specify the ``FifoQueue`` property, SQS creates a standard queue.\n  You can't change the queue type after you create it and you can't convert an existing standard queue into a FIFO queue. You must either create a new FIFO queue for your application or delete your existing standard queue and recreate it as a FIFO queue. For more information, see [Moving from a standard queue to a FIFO queue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues-moving.html) in the *Developer Guide*. \n   +  If you don't provide a value for a property, the queue is created with the default value for the property.\n  +  If you delete a queue, you must wait at least 60 seconds before creating a queue with the same name.\n  +  To successfully create a new queue, you must provide a queue name that adheres to the [limits related to queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/limits-queues.html) and is unique within the scope of your queues.\n  \n For more information about creating FIFO (first-in-first-out) queues, see [Creating an queue ()](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/screate-queue-cloudformation.html) in the *Developer Guide*.","inputs":{"properties":{"queueUrl":{"type":"string","description":"Returns the URLs of the queues from the policy."}},"required":["queueUrl"]},"outputs":{"properties":{"arn":{"description":"Returns the Amazon Resource Name (ARN) of the queue. For example: `arn:aws:sqs:us-east-2:123456789012:mystack-myqueue-15PG5C2FC1CW8` .","type":"string"},"contentBasedDeduplication":{"description":"For first-in-first-out (FIFO) queues, specifies whether to enable content-based deduplication. During the deduplication interval, SQS treats messages that are sent with identical content as duplicates and delivers only one copy of the message. For more information, see the ``ContentBasedDeduplication`` attribute for the ``CreateQueue`` action in the *API Reference*.","type":"boolean"},"deduplicationScope":{"description":"For high throughput for FIFO queues, specifies whether message deduplication occurs at the message group or queue level. Valid values are ``messageGroup`` and ``queue``.\n To enable high throughput for a FIFO queue, set this attribute to ``messageGroup`` *and* set the ``FifoThroughputLimit`` attribute to ``perMessageGroupId``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*.","type":"string"},"delaySeconds":{"description":"The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0``.","type":"integer"},"fifoThroughputLimit":{"description":"For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId``.\n To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*.","type":"string"},"kmsDataKeyReusePeriodSeconds":{"description":"The length of time in seconds for which SQS can reuse a data key to encrypt or decrypt messages before calling KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes).\n  A shorter time period provides better security, but results in more calls to KMS, which might incur charges after Free Tier. For more information, see [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work) in the *Developer Guide*.","type":"integer"},"kmsMasterKeyId":{"description":"The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:\n  +   [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html) in the *Developer Guide* \n  +   [CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html) in the *API Reference* \n  +   [Request Parameters](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters) in the *Key Management Service API Reference* \n  +   The Key Management Service (KMS) section of the [Best Practices](https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf) whitepaper","type":"string"},"maximumMessageSize":{"description":"The limit of how many bytes that a message can contain before SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB).","type":"integer"},"messageRetentionPeriod":{"description":"The number of seconds that SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days).","type":"integer"},"queueUrl":{"description":"Returns the URLs of the queues from the policy.","type":"string"},"receiveMessageWaitTimeSeconds":{"description":"Specifies the duration, in seconds, that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response, rather than returning an empty response if a message isn't yet available. You can specify an integer from 1 to 20. Short polling is used as the default or when you specify 0 for this property. For more information, see [Consuming messages using long polling](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-long-polling) in the *Developer Guide*.","type":"integer"},"redriveAllowPolicy":{"$ref":"pulumi.json#/Any","description":"The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows:\n  +  ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:\n  +  ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.\n  +  ``denyAll``: No source queues can specify this queue as the dead-letter queue.\n  +  ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.\n  \n  +  ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::Queue` for more information about the expected schema for this property."},"redrivePolicy":{"$ref":"pulumi.json#/Any","description":"The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows:\n  +  ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.\n  +  ``maxReceiveCount``: The number of times a message is delivered to the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.\n  \n  The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue.\n   *JSON* \n  ``{ \"deadLetterTargetArn\" : String, \"maxReceiveCount\" : Integer }`` \n  *YAML* \n  ``deadLetterTargetArn : String`` \n  ``maxReceiveCount : Integer``\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::Queue` for more information about the expected schema for this property."},"sqsManagedSseEnabled":{"description":"Enables server-side queue encryption using SQS owned encryption keys. Only one server-side encryption option is supported per queue (for example, [SSE-KMS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html) or [SSE-SQS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)). When ``SqsManagedSseEnabled`` is not defined, ``SSE-SQS`` encryption is enabled by default.","type":"boolean"},"tags":{"description":"The tags that you attach to this queue. For more information, see [Resource tag](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html) in the *User Guide*.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"visibilityTimeout":{"description":"The length of time during which a message will be unavailable after a message is delivered from the queue. This blocks other components from receiving the same message and gives the initial component time to process and delete the message from the queue.\n Values must be from 0 to 43,200 seconds (12 hours). If you don't specify a value, AWS CloudFormation uses the default value of 30 seconds.\n For more information about SQS queue visibility timeouts, see [Visibility timeout](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html) in the *Developer Guide*.","type":"integer"}}}},"aws-native:sqs:getQueueInlinePolicy":{"description":"Schema for SQS QueueInlinePolicy","inputs":{"properties":{"queue":{"type":"string","description":"The URL of the SQS queue."}},"required":["queue"]},"outputs":{"properties":{"policyDocument":{"$ref":"pulumi.json#/Any","description":"A policy document that contains permissions to add to the specified SQS queue\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SQS::QueueInlinePolicy` for more information about the expected schema for this property."}}}},"aws-native:ssm:getAssociation":{"description":"The AWS::SSM::Association resource associates an SSM document in AWS Systems Manager with EC2 instances that contain a configuration agent to process the document.","inputs":{"properties":{"associationId":{"type":"string","description":"Unique identifier of the association."}},"required":["associationId"]},"outputs":{"properties":{"applyOnlyAtCronInterval":{"description":"By default, when you create a new association, the system runs it immediately after it is created and then according to the schedule you specified. Specify this option if you don't want an association to run immediately after you create it. This parameter is not supported for rate expressions.","type":"boolean"},"associationId":{"description":"Unique identifier of the association.","type":"string"},"associationName":{"description":"The name of the association.","type":"string"},"automationTargetParameterName":{"description":"Choose the parameter that will define how your automation will branch out. This target is required for associations that use an Automation runbook and target resources by using rate controls. Automation is a tool in AWS Systems Manager .","type":"string"},"calendarNames":{"description":"The names or Amazon Resource Names (ARNs) of the Change Calendar type documents your associations are gated under. The associations only run when that Change Calendar is open. For more information, see [AWS Systems Manager Change Calendar](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar) in the *AWS Systems Manager User Guide* .","items":{"type":"string"},"type":"array"},"complianceSeverity":{"$ref":"#/types/aws-native:ssm:AssociationComplianceSeverity","description":"The severity level that is assigned to the association."},"documentVersion":{"description":"The version of the SSM document to associate with the target.","type":"string"},"instanceId":{"description":"The ID of the instance that the SSM document is associated with.","type":"string"},"maxConcurrency":{"description":"The maximum number of targets allowed to run the association at the same time. You can specify a number, for example 10, or a percentage of the target set, for example 10%. The default value is 100%, which means all targets run the association at the same time.\n\nIf a new managed node starts and attempts to run an association while Systems Manager is running `MaxConcurrency` associations, the association is allowed to run. During the next association interval, the new managed node will process its association within the limit specified for `MaxConcurrency` .","type":"string"},"maxErrors":{"description":"The number of errors that are allowed before the system stops sending requests to run the association on additional targets. You can specify either an absolute number of errors, for example 10, or a percentage of the target set, for example 10%. If you specify 3, for example, the system stops sending requests when the fourth error is received. If you specify 0, then the system stops sending requests after the first error is returned. If you run an association on 50 managed nodes and set `MaxError` to 10%, then the system stops sending the request when the sixth error is received.\n\nExecutions that are already running an association when `MaxErrors` is reached are allowed to complete, but some of these executions may fail as well. If you need to ensure that there won't be more than max-errors failed executions, set `MaxConcurrency` to 1 so that executions proceed one at a time.","type":"string"},"name":{"description":"The name of the SSM document.","type":"string"},"outputLocation":{"$ref":"#/types/aws-native:ssm:AssociationInstanceAssociationOutputLocation","description":"An Amazon Simple Storage Service (Amazon S3) bucket where you want to store the output details of the request."},"parameters":{"additionalProperties":{"items":{"type":"string"},"type":"array"},"description":"Parameter values that the SSM document uses at runtime.","type":"object"},"scheduleExpression":{"description":"A Cron or Rate expression that specifies when the association is applied to the target.","type":"string"},"scheduleOffset":{"description":"Number of days to wait after the scheduled day to run an association.","type":"integer"},"syncCompliance":{"$ref":"#/types/aws-native:ssm:AssociationSyncCompliance","description":"The mode for generating association compliance. You can specify `AUTO` or `MANUAL` . In `AUTO` mode, the system uses the status of the association execution to determine the compliance status. If the association execution runs successfully, then the association is `COMPLIANT` . If the association execution doesn't run successfully, the association is `NON-COMPLIANT` .\n\nIn `MANUAL` mode, you must specify the `AssociationId` as a parameter for the `PutComplianceItems` API action. In this case, compliance data is not managed by State Manager. It is managed by your direct call to the `PutComplianceItems` API action.\n\nBy default, all associations use `AUTO` mode."},"targets":{"description":"The targets that the SSM document sends commands to.","items":{"$ref":"#/types/aws-native:ssm:AssociationTarget"},"type":"array"}}}},"aws-native:ssm:getDocument":{"description":"The AWS::SSM::Document resource is an SSM document in AWS Systems Manager that defines the actions that Systems Manager performs, which can be used to set up and run commands on your instances.","inputs":{"properties":{"name":{"type":"string","description":"A name for the Systems Manager document."}},"required":["name"]},"outputs":{"properties":{"content":{"$ref":"pulumi.json#/Any","description":"The content for the Systems Manager document in JSON, YAML or String format.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::Document` for more information about the expected schema for this property."},"documentFormat":{"$ref":"#/types/aws-native:ssm:DocumentFormat","description":"Specify the document format for the request. The document format can be either JSON or YAML. JSON is the default format."},"requires":{"description":"A list of SSM documents required by a document. For example, an ApplicationConfiguration document requires an ApplicationConfigurationSchema document.","items":{"$ref":"#/types/aws-native:ssm:DocumentRequires"},"type":"array"},"tags":{"description":"Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targetType":{"description":"Specify a target type to define the kinds of resources the document can run on.","type":"string"},"versionName":{"description":"An optional field specifying the version of the artifact you are creating with the document. This value is unique across all versions of a document, and cannot be changed.","type":"string"}}}},"aws-native:ssm:getMaintenanceWindow":{"description":"Resource type definition for AWS::SSM::MaintenanceWindow","inputs":{"properties":{"windowId":{"type":"string","description":"The ID of the maintenance window."}},"required":["windowId"]},"outputs":{"properties":{"allowUnassociatedTargets":{"description":"Enables a maintenance window task to run on managed instances, even if you have not registered those instances as targets. If enabled, then you must specify the unregistered instances (by instance ID) when you register a task with the maintenance window.","type":"boolean"},"cutoff":{"description":"The number of hours before the end of the maintenance window that AWS Systems Manager stops scheduling new tasks for execution.","type":"integer"},"description":{"description":"A description of the maintenance window.","type":"string"},"duration":{"description":"The duration of the maintenance window in hours.","type":"integer"},"endDate":{"description":"The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become inactive.","type":"string"},"name":{"description":"The name of the maintenance window.","type":"string"},"schedule":{"description":"The schedule of the maintenance window in the form of a cron or rate expression.","type":"string"},"scheduleOffset":{"description":"The number of days to wait to run a maintenance window after the scheduled cron expression date and time.","type":"integer"},"scheduleTimezone":{"description":"The time zone that the scheduled maintenance window executions are based on, in Internet Assigned Numbers Authority (IANA) format.","type":"string"},"startDate":{"description":"The date and time, in ISO-8601 Extended format, for when the maintenance window is scheduled to become active. StartDate allows you to delay activation of the maintenance window until the specified future date.","type":"string"},"tags":{"description":"Optional metadata that you assign to a resource in the form of an arbitrary set of tags (key-value pairs). Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a maintenance window to identify the type of tasks it will run, the types of targets, and the environment it will run in.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"windowId":{"description":"The ID of the maintenance window.","type":"string"}}}},"aws-native:ssm:getMaintenanceWindowTarget":{"description":"Resource type definition for AWS::SSM::MaintenanceWindowTarget","inputs":{"properties":{"windowId":{"type":"string","description":"The ID of the maintenance window to register the target with."},"windowTargetId":{"type":"string","description":"The ID of the target."}},"required":["windowId","windowTargetId"]},"outputs":{"properties":{"description":{"description":"A description for the target.","type":"string"},"name":{"description":"The name for the maintenance window target.","type":"string"},"ownerInformation":{"description":"A user-provided value that will be included in any Amazon CloudWatch Events events that are raised while running tasks for these targets in this maintenance window.","type":"string"},"resourceType":{"description":"The type of target that is being registered with the maintenance window.","type":"string"},"targets":{"description":"The targets to register with the maintenance window.","items":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTargetTargets"},"type":"array"},"windowTargetId":{"description":"The ID of the target.","type":"string"}}}},"aws-native:ssm:getMaintenanceWindowTask":{"description":"Resource Type definition for AWS::SSM::MaintenanceWindowTask","inputs":{"properties":{"windowId":{"type":"string","description":"The ID of the maintenance window where the task is registered."},"windowTaskId":{"type":"string","description":"Unique identifier of the maintenance window task."}},"required":["windowId","windowTaskId"]},"outputs":{"properties":{"cutoffBehavior":{"description":"The specification for whether tasks should continue to run after the cutoff time specified in the maintenance windows is reached.","type":"string"},"description":{"description":"A description of the task.","type":"string"},"loggingInfo":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskLoggingInfo","description":"Information about an Amazon S3 bucket to write Run Command task-level logs to."},"maxConcurrency":{"description":"The maximum number of targets this task can be run for, in parallel.","type":"string"},"maxErrors":{"description":"The maximum number of errors allowed before this task stops being scheduled.","type":"string"},"name":{"description":"The task name.","type":"string"},"priority":{"description":"The priority of the task in the maintenance window. The lower the number, the higher the priority. Tasks that have the same priority are scheduled in parallel.","type":"integer"},"serviceRoleArn":{"description":"The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task.","type":"string"},"targets":{"description":"The targets (either instances or window target ids).","items":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskTarget"},"type":"array"},"taskArn":{"description":"The resource that the task uses during execution.","type":"string"},"taskInvocationParameters":{"$ref":"#/types/aws-native:ssm:MaintenanceWindowTaskTaskInvocationParameters","description":"The parameters to pass to the task when it runs. Populate only the fields that match the task type. All other fields should be empty."},"taskParameters":{"$ref":"pulumi.json#/Any","description":"The parameters to pass to the task when it runs.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::MaintenanceWindowTask` for more information about the expected schema for this property."},"windowTaskId":{"description":"Unique identifier of the maintenance window task.","type":"string"}}}},"aws-native:ssm:getParameter":{"description":"The ``AWS::SSM::Parameter`` resource creates an SSM parameter in SYSlong Parameter Store.\n  To create an SSM parameter, you must have the IAMlong (IAM) permissions ``ssm:PutParameter`` and ``ssm:AddTagsToResource``. On stack creation, CFNlong adds the following three tags to the parameter: ``aws:cloudformation:stack-name``, ``aws:cloudformation:logical-id``, and ``aws:cloudformation:stack-id``, in addition to any custom tags you specify.\n To add, update, or remove tags during stack update, you must have IAM permissions for both ``ssm:AddTagsToResource`` and ``ssm:RemoveTagsFromResource``. For more information, see [Managing access using policies](https://docs.aws.amazon.com/systems-manager/latest/userguide/security-iam.html#security_iam_access-manage) in the *User Guide*.\n  For information about valid values for parameters, see [About requirements and constraints for parameter names](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html#sysman-parameter-name-constraints) in the *User Guide* and [PutParameter](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_PutParameter.html) in the *API Reference*.","inputs":{"properties":{"name":{"type":"string","description":"The name of the parameter.\n  The reported maximum length of 2048 characters for a parameter name includes 1037 characters that are reserved for internal use by SYS. The maximum length for a parameter name that you specify is 1011 characters.\n This count of 1011 characters includes the characters in the ARN that precede the name you specify. This ARN length will vary depending on your partition and Region. For example, the following 45 characters count toward the 1011 character maximum for a parameter created in the US East (Ohio) Region: ``arn:aws:ssm:us-east-2:111122223333:parameter/``."}},"required":["name"]},"outputs":{"properties":{"dataType":{"$ref":"#/types/aws-native:ssm:ParameterDataType","description":"The data type of the parameter, such as ``text`` or ``aws:ec2:image``. The default is ``text``."},"tags":{"additionalProperties":{"type":"string"},"description":"Optional metadata that you assign to a resource in the form of an arbitrary set of tags (key-value pairs). Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For example, you might want to tag a SYS parameter to identify the type of resource to which it applies, the environment, or the type of configuration data referenced by the parameter.","type":"object"},"type":{"$ref":"#/types/aws-native:ssm:ParameterType","description":"The type of parameter.\n  Parameters of type ``SecureString`` are not supported by CFNlong."},"value":{"description":"The parameter value.\n  If type is ``StringList``, the system returns a comma-separated string with no spaces between commas in the ``Value`` field.","type":"string"}}}},"aws-native:ssm:getPatchBaseline":{"description":"Resource Type definition for AWS::SSM::PatchBaseline","inputs":{"properties":{"id":{"type":"string","description":"The ID of the patch baseline."}},"required":["id"]},"outputs":{"properties":{"approvalRules":{"$ref":"#/types/aws-native:ssm:PatchBaselineRuleGroup","description":"A set of rules used to include patches in the baseline."},"approvedPatches":{"description":"A list of explicitly approved patches for the baseline.","items":{"type":"string"},"type":"array"},"approvedPatchesComplianceLevel":{"$ref":"#/types/aws-native:ssm:PatchBaselineApprovedPatchesComplianceLevel","description":"Defines the compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. The default value is UNSPECIFIED."},"approvedPatchesEnableNonSecurity":{"description":"Indicates whether the list of approved patches includes non-security updates that should be applied to the instances. The default value is 'false'. Applies to Linux instances only.","type":"boolean"},"availableSecurityUpdatesComplianceStatus":{"$ref":"#/types/aws-native:ssm:PatchBaselineAvailableSecurityUpdatesComplianceStatus","description":"The compliance status for vendor recommended security updates that are not approved by this patch baseline."},"defaultBaseline":{"description":"Set the baseline as default baseline. Only registering to default patch baseline is allowed.","type":"boolean"},"description":{"description":"The description of the patch baseline.","type":"string"},"globalFilters":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchFilterGroup","description":"A set of global filters used to include patches in the baseline."},"id":{"description":"The ID of the patch baseline.","type":"string"},"name":{"description":"The name of the patch baseline.","type":"string"},"patchGroups":{"description":"PatchGroups is used to associate instances with a specific patch baseline","items":{"type":"string"},"type":"array"},"rejectedPatches":{"description":"A list of explicitly rejected patches for the baseline.","items":{"type":"string"},"type":"array"},"rejectedPatchesAction":{"$ref":"#/types/aws-native:ssm:PatchBaselineRejectedPatchesAction","description":"The action for Patch Manager to take on patches included in the RejectedPackages list."},"sources":{"description":"Information about the patches to use to update the instances, including target operating systems and source repository. Applies to Linux instances only.","items":{"$ref":"#/types/aws-native:ssm:PatchBaselinePatchSource"},"type":"array"},"tags":{"description":"Optional metadata that you assign to a resource. Tags enable you to categorize a resource in different ways.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ssm:getResourceDataSync":{"description":"Resource Type definition for AWS::SSM::ResourceDataSync","inputs":{"properties":{"syncName":{"type":"string","description":"A name for the resource data sync."}},"required":["syncName"]},"outputs":{"properties":{"syncSource":{"$ref":"#/types/aws-native:ssm:ResourceDataSyncSyncSource","description":"Information about the source where the data was synchronized."}}}},"aws-native:ssm:getResourcePolicy":{"description":"Resource Type definition for AWS::SSM::ResourcePolicy","inputs":{"properties":{"policyId":{"type":"string","description":"An unique identifier within the policies of a resource. "},"resourceArn":{"type":"string","description":"Arn of OpsItemGroup etc."}},"required":["policyId","resourceArn"]},"outputs":{"properties":{"policy":{"$ref":"pulumi.json#/Any","description":"Actual policy statement.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSM::ResourcePolicy` for more information about the expected schema for this property."},"policyHash":{"description":"A snapshot identifier for the policy over time.","type":"string"},"policyId":{"description":"An unique identifier within the policies of a resource. ","type":"string"}}}},"aws-native:ssmcontacts:getContact":{"description":"Resource Type definition for AWS::SSMContacts::Contact","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the contact.","type":"string"},"displayName":{"description":"Name of the contact. String value with 3 to 256 characters. Only alphabetical, space, numeric characters, dash, or underscore allowed.","type":"string"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ssmcontacts:getContactChannel":{"description":"Resource Type definition for AWS::SSMContacts::ContactChannel","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the engagement to a contact channel."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the engagement to a contact channel.","type":"string"},"channelAddress":{"description":"The details that SSM Incident Manager uses when trying to engage the contact channel.","type":"string"},"channelName":{"description":"The device name. String of 6 to 50 alphabetical, numeric, dash, and underscore characters.","type":"string"}}}},"aws-native:ssmcontacts:getPlan":{"description":"Engagement Plan for a SSM Incident Manager Contact.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the contact."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the contact.","type":"string"},"stages":{"description":"The stages that an escalation plan or engagement plan engages contacts and contact methods in.","items":{"$ref":"#/types/aws-native:ssmcontacts:PlanStage"},"type":"array"}}}},"aws-native:ssmcontacts:getRotation":{"description":"Resource Type definition for AWS::SSMContacts::Rotation.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rotation."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the rotation.","type":"string"},"contactIds":{"description":"Members of the rotation","items":{"type":"string"},"type":"array"},"name":{"description":"Name of the Rotation","type":"string"},"recurrence":{"$ref":"#/types/aws-native:ssmcontacts:RotationRecurrenceSettings","description":"Information about the rule that specifies when shift team members rotate."},"startTime":{"description":"Start time of the first shift of Oncall Schedule","type":"string"},"tags":{"description":"Optional metadata to assign to the rotation. Tags enable you to categorize a resource in different ways, such as by purpose, owner, or environment. For more information, see [Tagging Incident Manager resources](https://docs.aws.amazon.com/incident-manager/latest/userguide/tagging.html) in the *Incident Manager User Guide* .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeZoneId":{"description":"TimeZone Identifier for the Oncall Schedule","type":"string"}}}},"aws-native:ssmguiconnect:getPreferences":{"description":"Definition of AWS::SSMGuiConnect::Preferences Resource Type","inputs":{"properties":{"accountId":{"type":"string","description":"The AWS Account Id that the preference is associated with, used as the unique identifier for this resource."}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"description":"The AWS Account Id that the preference is associated with, used as the unique identifier for this resource.","type":"string"},"connectionRecordingPreferences":{"$ref":"#/types/aws-native:ssmguiconnect:ConnectionRecordingPreferencesProperties","description":"The set of preferences used for recording RDP connections in the requesting AWS account and AWS Region. This includes details such as which S3 bucket recordings are stored in."}}}},"aws-native:ssmincidents:getReplicationSet":{"description":"Resource type definition for AWS::SSMIncidents::ReplicationSet","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the ReplicationSet."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the ReplicationSet.","type":"string"},"deletionProtected":{"description":"Determines if the replication set deletion protection is enabled or not. If deletion protection is enabled, you can't delete the last Region in the replication set.","type":"boolean"},"regions":{"description":"The ReplicationSet configuration.","items":{"$ref":"#/types/aws-native:ssmincidents:ReplicationSetReplicationRegion"},"type":"array"},"tags":{"description":"The tags to apply to the replication set.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ssmincidents:getResponsePlan":{"description":"Resource type definition for AWS::SSMIncidents::ResponsePlan","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the response plan."}},"required":["arn"]},"outputs":{"properties":{"actions":{"description":"The list of actions.","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanAction"},"type":"array"},"arn":{"description":"The ARN of the response plan.","type":"string"},"chatChannel":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanChatChannel","description":"The  chat channel used for collaboration during an incident."},"displayName":{"description":"The display name of the response plan.","type":"string"},"engagements":{"description":"The list of engagements to use.","items":{"type":"string"},"type":"array"},"incidentTemplate":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanIncidentTemplate","description":"Details used to create an incident when using this response plan."},"integrations":{"description":"The list of integrations.","items":{"$ref":"#/types/aws-native:ssmincidents:ResponsePlanIntegration"},"type":"array"},"tags":{"description":"The tags to apply to the response plan.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:ssmquicksetup:getConfigurationManager":{"description":"Definition of AWS::SSMQuickSetup::ConfigurationManager Resource Type","inputs":{"properties":{"managerArn":{"type":"string","description":"The ARN of the Quick Setup configuration."}},"required":["managerArn"]},"outputs":{"properties":{"configurationDefinitions":{"description":"The definition of the Quick Setup configuration that the configuration manager deploys.","items":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerConfigurationDefinition"},"type":"array"},"createdAt":{"description":"The datetime stamp when the configuration manager was created.","type":"string"},"description":{"description":"The description of the configuration.","type":"string"},"lastModifiedAt":{"description":"The datetime stamp when the configuration manager was last updated.","type":"string"},"managerArn":{"description":"The ARN of the Quick Setup configuration.","type":"string"},"name":{"description":"The name of the configuration","type":"string"},"statusSummaries":{"description":"Summaries of the state of the configuration manager. These summaries include an aggregate of the statuses from the configuration definition associated with the configuration manager. This includes deployment statuses, association statuses, drift statuses, health checks, and more.","items":{"$ref":"#/types/aws-native:ssmquicksetup:ConfigurationManagerStatusSummary"},"type":"array"},"tags":{"additionalProperties":{"type":"string"},"description":"Key-value pairs of metadata to assign to the configuration manager.","type":"object"}}}},"aws-native:ssmquicksetup:getLifecycleAutomation":{"description":"Resource Type definition for AWS::SSMQuickSetup::LifecycleAutomation that executes SSM Automation documents in response to CloudFormation lifecycle events.","inputs":{"properties":{"associationId":{"type":"string","description":"The id from the association that is returned when creating the association"}},"required":["associationId"]},"outputs":{"properties":{"associationId":{"description":"The id from the association that is returned when creating the association","type":"string"},"automationDocument":{"description":"The name of the Automation document to execute","type":"string"},"automationParameters":{"additionalProperties":{"$ref":"pulumi.json#/Any"},"description":"A map of key-value parameters passed to the Automation document during execution. Each parameter name maps to a list of values, even for single values. Parameters can include configuration-specific values for your automation workflow.","type":"object"},"tags":{"additionalProperties":{"type":"string"},"description":"Tags applied to the underlying SSM Association created by this resource. Tags help identify and organize automation executions.","type":"object"}}}},"aws-native:sso:getApplication":{"description":"Resource Type definition for Identity Center (SSO) Application","inputs":{"properties":{"applicationArn":{"type":"string","description":"The Application ARN that is returned upon creation of the Identity Center (SSO) Application"}},"required":["applicationArn"]},"outputs":{"properties":{"applicationArn":{"description":"The Application ARN that is returned upon creation of the Identity Center (SSO) Application","type":"string"},"description":{"description":"The description information for the Identity Center (SSO) Application","type":"string"},"name":{"description":"The name you want to assign to this Identity Center (SSO) Application","type":"string"},"portalOptions":{"$ref":"#/types/aws-native:sso:ApplicationPortalOptionsConfiguration","description":"A structure that describes the options for the portal associated with an application"},"status":{"$ref":"#/types/aws-native:sso:ApplicationStatus","description":"Specifies whether the application is enabled or disabled"},"tags":{"description":"Specifies tags to be attached to the application","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sso:getInstance":{"description":"Resource Type definition for Identity Center (SSO) Instance","inputs":{"properties":{"instanceArn":{"type":"string","description":"The SSO Instance ARN that is returned upon creation of the Identity Center (SSO) Instance"}},"required":["instanceArn"]},"outputs":{"properties":{"identityStoreId":{"description":"The ID of the identity store associated with the created Identity Center (SSO) Instance","type":"string"},"instanceArn":{"description":"The SSO Instance ARN that is returned upon creation of the Identity Center (SSO) Instance","type":"string"},"name":{"description":"The name you want to assign to this Identity Center (SSO) Instance","type":"string"},"ownerAccountId":{"description":"The AWS accountId of the owner of the Identity Center (SSO) Instance","type":"string"},"status":{"$ref":"#/types/aws-native:sso:InstanceStatus","description":"The status of the Identity Center (SSO) Instance, create_in_progress/delete_in_progress/active"},"tags":{"description":"Specifies tags to be attached to the instance of IAM Identity Center.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:sso:getInstanceAccessControlAttributeConfiguration":{"description":"Resource Type definition for SSO InstanceAccessControlAttributeConfiguration","inputs":{"properties":{"instanceArn":{"type":"string","description":"The ARN of the AWS SSO instance under which the operation will be executed."}},"required":["instanceArn"]},"outputs":{"properties":{"accessControlAttributes":{"description":"Lists the attributes that are configured for ABAC in the specified  instance.","items":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationAccessControlAttribute"},"type":"array"},"instanceAccessControlAttributeConfiguration":{"$ref":"#/types/aws-native:sso:InstanceAccessControlAttributeConfigurationProperties","description":"The InstanceAccessControlAttributeConfiguration property has been deprecated but is still supported for backwards compatibility purposes. We recomend that you use  AccessControlAttributes property instead.","language":{"csharp":{"name":"InstanceAccessControlAttributeConfigurationValue"}}}}}},"aws-native:sso:getPermissionSet":{"description":"Resource Type definition for SSO PermissionSet","inputs":{"properties":{"instanceArn":{"type":"string","description":"The sso instance arn that the permission set is owned."},"permissionSetArn":{"type":"string","description":"The permission set that the policy will be attached to"}},"required":["instanceArn","permissionSetArn"]},"outputs":{"properties":{"customerManagedPolicyReferences":{"description":"Specifies the names and paths of the customer managed policies that you have attached to your permission set.","items":{"$ref":"#/types/aws-native:sso:PermissionSetCustomerManagedPolicyReference"},"type":"array"},"description":{"description":"The permission set description.","type":"string"},"inlinePolicy":{"$ref":"pulumi.json#/Any","description":"The inline policy to put in permission set.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::SSO::PermissionSet` for more information about the expected schema for this property."},"managedPolicies":{"description":"A structure that stores a list of managed policy ARNs that describe the associated AWS managed policy.","items":{"type":"string"},"type":"array"},"permissionSetArn":{"description":"The permission set that the policy will be attached to","type":"string"},"permissionsBoundary":{"$ref":"#/types/aws-native:sso:PermissionSetPermissionsBoundary","description":"Specifies the configuration of the AWS managed or customer managed policy that you want to set as a permissions boundary. Specify either `CustomerManagedPolicyReference` to use the name and path of a customer managed policy, or `ManagedPolicyArn` to use the ARN of an AWS managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the *IAM User Guide* .\n\n\u003e Policies used as permissions boundaries don't provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see [IAM JSON policy evaluation logic](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html) in the *IAM User Guide* ."},"relayStateType":{"description":"The relay state URL that redirect links to any service in the AWS Management Console.","type":"string"},"sessionDuration":{"description":"The length of time that a user can be signed in to an AWS account.","type":"string"},"tags":{"description":"The tags to attach to the new `PermissionSet` .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:stepfunctions:getActivity":{"description":"Resource schema for Activity","inputs":{"properties":{"arn":{"type":"string","description":"Returns the ARN of the resource."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Returns the ARN of the resource.","type":"string"},"tags":{"description":"The list of tags to add to a resource.\n\nTags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + - @` .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:stepfunctions:getStateMachine":{"description":"Resource schema for StateMachine","inputs":{"properties":{"arn":{"type":"string","description":"Returns the ARN of the resource."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Returns the ARN of the resource.","type":"string"},"definitionString":{"description":"The Amazon States Language definition of the state machine. The state machine definition must be in JSON. See [Amazon States Language](https://docs.aws.amazon.com/step-functions/latest/dg/concepts-amazon-states-language.html) .","type":"string"},"encryptionConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineEncryptionConfiguration","description":"Encryption configuration for the state machine."},"loggingConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineLoggingConfiguration","description":"Defines what execution history events are logged and where they are logged.\n\n\u003e By default, the `level` is set to `OFF` . For more information see [Log Levels](https://docs.aws.amazon.com/step-functions/latest/dg/cloudwatch-log-level.html) in the AWS Step Functions User Guide."},"name":{"description":"Returns the name of the state machine. For example:\n\n`{ \"Fn::GetAtt\": [\"MyStateMachine\", \"Name\"] }`\n\nReturns the name of your state machine:\n\n`HelloWorld-StateMachine`\n\nIf you did not specify the name it will be similar to the following:\n\n`MyStateMachine-1234abcdefgh`\n\nFor more information about using `Fn::GetAtt` , see [Fn::GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html) .","type":"string"},"roleArn":{"description":"The Amazon Resource Name (ARN) of the IAM role to use for this state machine.","type":"string"},"stateMachineRevisionId":{"description":"Identifier for a state machine revision, which is an immutable, read-only snapshot of a state machine’s definition and configuration.","type":"string"},"tags":{"description":"The list of tags to add to a resource.\n\nTags may only contain Unicode letters, digits, white space, or these symbols: `_ . : / = + - @` .","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tracingConfiguration":{"$ref":"#/types/aws-native:stepfunctions:StateMachineTracingConfiguration","description":"Selects whether or not the state machine's AWS X-Ray tracing is enabled."}}}},"aws-native:stepfunctions:getStateMachineAlias":{"description":"Resource schema for StateMachineAlias","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the alias."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The ARN of the alias.","type":"string"},"description":{"description":"An optional description of the alias.","type":"string"},"routingConfiguration":{"description":"The routing configuration of an alias. Routing configuration splits [StartExecution](https://docs.aws.amazon.com/step-functions/latest/apireference/API_StartExecution.html) requests between one or two versions of the same state machine.\n\nUse `RoutingConfiguration` if you want to explicitly set the alias [weights](https://docs.aws.amazon.com/step-functions/latest/apireference/API_RoutingConfigurationListItem.html#StepFunctions-Type-RoutingConfigurationListItem-weight) . Weight is the percentage of traffic you want to route to a state machine version.\n\n\u003e `RoutingConfiguration` and `DeploymentPreference` are mutually exclusive properties. You must define only one of these properties.","items":{"$ref":"#/types/aws-native:stepfunctions:StateMachineAliasRoutingConfigurationVersion"},"type":"array"}}}},"aws-native:stepfunctions:getStateMachineVersion":{"description":"Resource schema for StateMachineVersion","inputs":{"properties":{"arn":{"type":"string","description":"Returns the ARN of the state machine version. For example, `arn:aws:states:us-east-1:123456789012:stateMachine:myStateMachine:1` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Returns the ARN of the state machine version. For example, `arn:aws:states:us-east-1:123456789012:stateMachine:myStateMachine:1` .","type":"string"}}}},"aws-native:supportapp:getAccountAlias":{"description":"An AWS Support App resource that creates, updates, reads, and deletes a customer's account alias.","inputs":{"properties":{"accountAliasResourceId":{"type":"string","description":"Unique identifier representing an alias tied to an account"}},"required":["accountAliasResourceId"]},"outputs":{"properties":{"accountAlias":{"description":"An account alias associated with a customer's account.","language":{"csharp":{"name":"AccountAliasValue"}},"type":"string"},"accountAliasResourceId":{"description":"Unique identifier representing an alias tied to an account","type":"string"}}}},"aws-native:supportapp:getSlackChannelConfiguration":{"description":"An AWS Support App resource that creates, updates, lists and deletes Slack channel configurations.","inputs":{"properties":{"channelId":{"type":"string","description":"The channel ID in Slack, which identifies a channel within a workspace."},"teamId":{"type":"string","description":"The team ID in Slack, which uniquely identifies a workspace."}},"required":["teamId","channelId"]},"outputs":{"properties":{"channelName":{"description":"The channel name in Slack.","type":"string"},"channelRoleArn":{"description":"The Amazon Resource Name (ARN) of an IAM role that grants the AWS Support App access to perform operations for AWS services.","type":"string"},"notifyOnAddCorrespondenceToCase":{"description":"Whether to notify when a correspondence is added to a case.","type":"boolean"},"notifyOnCaseSeverity":{"$ref":"#/types/aws-native:supportapp:SlackChannelConfigurationNotifyOnCaseSeverity","description":"The severity level of a support case that a customer wants to get notified for."},"notifyOnCreateOrReopenCase":{"description":"Whether to notify when a case is created or reopened.","type":"boolean"},"notifyOnResolveCase":{"description":"Whether to notify when a case is resolved.","type":"boolean"}}}},"aws-native:synthetics:getCanary":{"description":"Resource Type definition for AWS::Synthetics::Canary","inputs":{"properties":{"name":{"type":"string","description":"Name of the canary."}},"required":["name"]},"outputs":{"properties":{"artifactConfig":{"$ref":"#/types/aws-native:synthetics:CanaryArtifactConfig","description":"Provide artifact configuration"},"artifactS3Location":{"description":"Provide the s3 bucket output location for test results","type":"string"},"browserConfigs":{"description":"List of browser configurations for the canary","items":{"$ref":"#/types/aws-native:synthetics:CanaryBrowserConfig"},"type":"array"},"code":{"$ref":"#/types/aws-native:synthetics:CanaryCode","description":"Provide the canary script source"},"executionRoleArn":{"description":"Lambda Execution role used to run your canaries","type":"string"},"failureRetentionPeriod":{"description":"Retention period of failed canary runs represented in number of days","type":"integer"},"id":{"description":"Id of the canary","type":"string"},"provisionedResourceCleanup":{"$ref":"#/types/aws-native:synthetics:CanaryProvisionedResourceCleanup","description":"Setting to control if provisioned resources created by Synthetics are deleted alongside the canary. Default is AUTOMATIC."},"runConfig":{"$ref":"#/types/aws-native:synthetics:CanaryRunConfig","description":"Provide canary run configuration"},"runtimeVersion":{"description":"Runtime version of Synthetics Library","type":"string"},"schedule":{"$ref":"#/types/aws-native:synthetics:CanarySchedule","description":"Frequency to run your canaries"},"state":{"description":"State of the canary","type":"string"},"successRetentionPeriod":{"description":"Retention period of successful canary runs represented in number of days","type":"integer"},"tags":{"description":"The list of key-value pairs that are associated with the canary.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcConfig":{"$ref":"#/types/aws-native:synthetics:CanaryVpcConfig","description":"Provide VPC Configuration if enabled."}}}},"aws-native:synthetics:getGroup":{"description":"Resource Type definition for AWS::Synthetics::Group","inputs":{"properties":{"name":{"type":"string","description":"Name of the group."}},"required":["name"]},"outputs":{"properties":{"id":{"description":"Id of the group.","type":"string"},"resourceArns":{"description":"The ARNs of the canaries that you want to associate with this group.","items":{"type":"string"},"type":"array"},"tags":{"description":"The list of key-value pairs that are associated with the group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:systemsmanagersap:getApplication":{"description":"Resource schema for AWS::SystemsManagerSAP::Application","inputs":{"properties":{"arn":{"type":"string","description":"The ARN of the SSM-SAP application"}},"required":["arn"]},"outputs":{"properties":{"applicationId":{"description":"The ID of the application.","type":"string"},"applicationType":{"$ref":"#/types/aws-native:systemsmanagersap:ApplicationType","description":"The type of the application."},"arn":{"description":"The ARN of the SSM-SAP application","type":"string"},"tags":{"description":"The tags of a SystemsManagerSAP application.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:timestream:getDatabase":{"description":"The AWS::Timestream::Database resource creates a Timestream database.","inputs":{"properties":{"databaseName":{"type":"string","description":"The name for the database. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the database name."}},"required":["databaseName"]},"outputs":{"properties":{"arn":{"description":"The `arn` of the database.","type":"string"},"kmsKeyId":{"description":"The KMS key for the database. If the KMS key is not specified, the database will be encrypted with a Timestream managed KMS key located in your account.","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:timestream:getInfluxDbCluster":{"description":"The AWS::Timestream::InfluxDBCluster resource creates an InfluxDB cluster.","inputs":{"properties":{"id":{"type":"string","description":"The service generated unique identifier for InfluxDB cluster."}},"required":["id"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) that is associated with the InfluxDB cluster.","type":"string"},"dbInstanceType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterDbInstanceType","description":"The compute instance of the InfluxDB cluster."},"dbParameterGroupIdentifier":{"description":"The name of an existing InfluxDB parameter group.","type":"string"},"endpoint":{"description":"The connection endpoint for the InfluxDB cluster.","type":"string"},"engineType":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterEngineType","description":"The engine type for the InfluxDB cluster."},"failoverMode":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterFailoverMode","description":"Failover mode of the InfluxDB cluster."},"id":{"description":"The service generated unique identifier for InfluxDB cluster.","type":"string"},"influxAuthParametersSecretArn":{"description":"The Auth parameters secret Amazon Resource name (ARN) that is associated with the InfluxDB cluster.","type":"string"},"logDeliveryConfiguration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationProperties","description":"Configuration for sending logs to customer account from the InfluxDB cluster."},"port":{"description":"The port number on which InfluxDB accepts connections.","type":"integer"},"readerEndpoint":{"description":"The reader endpoint for the InfluxDB cluster.","type":"string"},"status":{"$ref":"#/types/aws-native:timestream:InfluxDbClusterStatus","description":"Status of the InfluxDB cluster."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this DB cluster.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:timestream:getInfluxDbInstance":{"description":"The AWS::Timestream::InfluxDBInstance resource creates an InfluxDB instance.","inputs":{"properties":{"id":{"type":"string","description":"The service generated unique identifier for InfluxDB instance."}},"required":["id"]},"outputs":{"properties":{"allocatedStorage":{"description":"The allocated storage for the InfluxDB instance.","type":"integer"},"arn":{"description":"The Amazon Resource Name (ARN) that is associated with the InfluxDB instance.","type":"string"},"availabilityZone":{"description":"The Availability Zone (AZ) where the InfluxDB instance is created.","type":"string"},"dbInstanceType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDbInstanceType","description":"The compute instance of the InfluxDB instance."},"dbParameterGroupIdentifier":{"description":"The name of an existing InfluxDB parameter group.","type":"string"},"dbStorageType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDbStorageType","description":"The storage type of the InfluxDB instance."},"deploymentType":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceDeploymentType","description":"Deployment type of the InfluxDB Instance."},"endpoint":{"description":"The connection endpoint for the InfluxDB instance.","type":"string"},"id":{"description":"The service generated unique identifier for InfluxDB instance.","type":"string"},"influxAuthParametersSecretArn":{"description":"The Auth parameters secret Amazon Resource name (ARN) that is associated with the InfluxDB instance.","type":"string"},"logDeliveryConfiguration":{"$ref":"#/types/aws-native:timestream:LogDeliveryConfigurationProperties","description":"Configuration for sending logs to customer account from the InfluxDB instance."},"port":{"description":"The port number on which InfluxDB accepts connections.","type":"integer"},"secondaryAvailabilityZone":{"description":"The Secondary Availability Zone (AZ) where the InfluxDB instance is created, if DeploymentType is set as WITH_MULTIAZ_STANDBY.","type":"string"},"status":{"$ref":"#/types/aws-native:timestream:InfluxDbInstanceStatus","description":"Status of the InfluxDB Instance."},"tags":{"description":"An arbitrary set of tags (key-value pairs) for this DB instance.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:timestream:getScheduledQuery":{"description":"The AWS::Timestream::ScheduledQuery resource creates a Timestream Scheduled Query.","inputs":{"properties":{"arn":{"type":"string","description":"The `ARN` of the scheduled query."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The `ARN` of the scheduled query.","type":"string"},"sqErrorReportConfiguration":{"description":"Configuration for error reporting. Error reports will be generated when a problem is encountered when writing the query results.","type":"string"},"sqKmsKeyId":{"description":"The Amazon KMS key used to encrypt the scheduled query resource, at-rest. If the Amazon KMS key is not specified, the scheduled query resource will be encrypted with a Timestream owned Amazon KMS key. To specify a KMS key, use the key ID, key ARN, alias name, or alias ARN. When using an alias name, prefix the name with alias/. If ErrorReportConfiguration uses SSE_KMS as encryption type, the same KmsKeyId is used to encrypt the error report at rest.","type":"string"},"sqName":{"description":"The name of the scheduled query. Scheduled query names must be unique within each Region.","type":"string"},"sqNotificationConfiguration":{"description":"Notification configuration for the scheduled query. A notification is sent by Timestream when a query run finishes, when the state is updated or when you delete it.","type":"string"},"sqQueryString":{"description":"The query string to run. Parameter names can be specified in the query string @ character followed by an identifier. The named Parameter @scheduled_runtime is reserved and can be used in the query to get the time at which the query is scheduled to run. The timestamp calculated according to the ScheduleConfiguration parameter, will be the value of @scheduled_runtime paramater for each query run. For example, consider an instance of a scheduled query executing on 2021-12-01 00:00:00. For this instance, the @scheduled_runtime parameter is initialized to the timestamp 2021-12-01 00:00:00 when invoking the query.","type":"string"},"sqScheduleConfiguration":{"description":"Configuration for when the scheduled query is executed.","type":"string"},"sqScheduledQueryExecutionRoleArn":{"description":"The ARN for the IAM role that Timestream will assume when running the scheduled query.","type":"string"},"sqTargetConfiguration":{"description":"Configuration of target store where scheduled query results are written to.","type":"string"},"tags":{"description":"A list of key-value pairs to label the scheduled query.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:timestream:getTable":{"description":"The AWS::Timestream::Table resource creates a Timestream Table.","inputs":{"properties":{"databaseName":{"type":"string","description":"The name for the database which the table to be created belongs to."},"tableName":{"type":"string","description":"The name for the table. If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the table name."}},"required":["databaseName","tableName"]},"outputs":{"properties":{"arn":{"description":"The `arn` of the table.","type":"string"},"magneticStoreWriteProperties":{"$ref":"#/types/aws-native:timestream:MagneticStoreWritePropertiesProperties","description":"The properties that determine whether magnetic store writes are enabled."},"name":{"description":"The table name exposed as a read-only attribute.","type":"string"},"retentionProperties":{"$ref":"#/types/aws-native:timestream:RetentionPropertiesProperties","description":"The retention duration of the memory store and the magnetic store."},"schema":{"$ref":"#/types/aws-native:timestream:SchemaProperties","description":"A Schema specifies the expected data model of the table."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:transfer:getAgreement":{"description":"Resource Type definition for AWS::Transfer::Agreement","inputs":{"properties":{"agreementId":{"type":"string","description":"A unique identifier for the agreement."},"serverId":{"type":"string","description":"A unique identifier for the server."}},"required":["agreementId","serverId"]},"outputs":{"properties":{"accessRole":{"description":"Specifies the access role for the agreement.","type":"string"},"agreementId":{"description":"A unique identifier for the agreement.","type":"string"},"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) for the agreement.","type":"string"},"baseDirectory":{"description":"Specifies the base directory for the agreement.","type":"string"},"customDirectories":{"$ref":"#/types/aws-native:transfer:CustomDirectoriesProperties","description":"Specifies a separate directory for each type of file to store for an AS2 message."},"description":{"description":"A textual description for the agreement.","type":"string"},"enforceMessageSigning":{"$ref":"#/types/aws-native:transfer:AgreementEnforceMessageSigning","description":"Specifies whether to enforce an AS2 message is signed for this agreement."},"localProfileId":{"description":"A unique identifier for the local profile.","type":"string"},"partnerProfileId":{"description":"A unique identifier for the partner profile.","type":"string"},"preserveFilename":{"$ref":"#/types/aws-native:transfer:AgreementPreserveFilename","description":"Specifies whether to preserve the filename received for this agreement."},"status":{"$ref":"#/types/aws-native:transfer:AgreementStatus","description":"Specifies the status of the agreement."},"tags":{"description":"Key-value pairs that can be used to group and search for agreements. Tags are metadata attached to agreements for any purpose.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:transfer:getCertificate":{"description":"Resource Type definition for AWS::Transfer::Certificate","inputs":{"properties":{"certificateId":{"type":"string","description":"A unique identifier for the certificate."}},"required":["certificateId"]},"outputs":{"properties":{"activeDate":{"description":"Specifies the active date for the certificate.","type":"string"},"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) for the agreement.","type":"string"},"certificateId":{"description":"A unique identifier for the certificate.","type":"string"},"description":{"description":"A textual description for the certificate.","type":"string"},"inactiveDate":{"description":"Specifies the inactive date for the certificate.","type":"string"},"notAfterDate":{"description":"Specifies the not after date for the certificate.","type":"string"},"notBeforeDate":{"description":"Specifies the not before date for the certificate.","type":"string"},"serial":{"description":"Specifies Certificate's serial.","type":"string"},"status":{"$ref":"#/types/aws-native:transfer:CertificateStatus","description":"A status description for the certificate."},"tags":{"description":"Key-value pairs that can be used to group and search for certificates. Tags are metadata attached to certificates for any purpose.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"type":{"$ref":"#/types/aws-native:transfer:CertificateType","description":"Describing the type of certificate. With or without a private key."},"usage":{"$ref":"#/types/aws-native:transfer:CertificateUsage","description":"Specifies the usage type for the certificate."}}}},"aws-native:transfer:getConnector":{"description":"Resource Type definition for AWS::Transfer::Connector","inputs":{"properties":{"connectorId":{"type":"string","description":"A unique identifier for the connector."}},"required":["connectorId"]},"outputs":{"properties":{"accessRole":{"description":"Specifies the access role for the connector.","type":"string"},"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) for the connector.","type":"string"},"as2Config":{"$ref":"#/types/aws-native:transfer:As2ConfigProperties","description":"Configuration for an AS2 connector."},"connectorId":{"description":"A unique identifier for the connector.","type":"string"},"egressConfig":{"$ref":"#/types/aws-native:transfer:ConnectorEgressConfig","description":"Egress configuration for the connector."},"egressType":{"$ref":"#/types/aws-native:transfer:ConnectorEgressType","description":"Specifies the egress type for the connector."},"errorMessage":{"description":"Detailed error message when Connector in ERRORED status","type":"string"},"loggingRole":{"description":"Specifies the logging role for the connector.","type":"string"},"securityPolicyName":{"description":"Security policy for SFTP Connector","type":"string"},"serviceManagedEgressIpAddresses":{"description":"The list of egress IP addresses of this connector. These IP addresses are assigned automatically when you create the connector.","items":{"type":"string"},"type":"array"},"sftpConfig":{"$ref":"#/types/aws-native:transfer:SftpConfigProperties","description":"Configuration for an SFTP connector."},"status":{"$ref":"#/types/aws-native:transfer:ConnectorStatus","description":"Current status of the connector. PENDING indicates creation/update in progress, ACTIVE means ready for operations, and ERRORED indicates a failure requiring attention."},"tags":{"description":"Key-value pairs that can be used to group and search for connectors. Tags are metadata attached to connectors for any purpose.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"url":{"description":"URL for Connector","type":"string"}}}},"aws-native:transfer:getProfile":{"description":"Resource Type definition for AWS::Transfer::Profile","inputs":{"properties":{"profileId":{"type":"string","description":"A unique identifier for the profile"}},"required":["profileId"]},"outputs":{"properties":{"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) for the profile.","type":"string"},"as2Id":{"description":"AS2 identifier agreed with a trading partner.","type":"string"},"certificateIds":{"description":"List of the certificate IDs associated with this profile to be used for encryption and signing of AS2 messages.","items":{"type":"string"},"type":"array"},"profileId":{"description":"A unique identifier for the profile","type":"string"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:transfer:getServer":{"description":"Definition of AWS::Transfer::Server Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) of the server."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) of the server.","type":"string"},"as2ServiceManagedEgressIpAddresses":{"description":"The list of egress IP addresses of this server. These IP addresses are only relevant for servers that use the AS2 protocol. They are used for sending asynchronous MDNs. These IP addresses are assigned automatically when you create an AS2 server. Additionally, if you update an existing server and add the AS2 protocol, static IP addresses are assigned as well.","items":{"type":"string"},"type":"array"},"certificate":{"description":"The Amazon Resource Name (ARN) of the Certificate Manager (ACM) certificate. Required when `Protocols` is set to `FTPS` .\n\nTo request a new public certificate, see [Request a public certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html) in the *Certificate Manager User Guide* .\n\nTo import an existing certificate into ACM, see [Importing certificates into ACM](https://docs.aws.amazon.com/acm/latest/userguide/import-certificate.html) in the *Certificate Manager User Guide* .\n\nTo request a private certificate to use FTPS through private IP addresses, see [Request a private certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-private.html) in the *Certificate Manager User Guide* .\n\nCertificates with the following cryptographic algorithms and key sizes are supported:\n\n- 2048-bit RSA (RSA_2048)\n- 4096-bit RSA (RSA_4096)\n- Elliptic Prime Curve 256 bit (EC_prime256v1)\n- Elliptic Prime Curve 384 bit (EC_secp384r1)\n- Elliptic Prime Curve 521 bit (EC_secp521r1)\n\n\u003e The certificate must be a valid SSL/TLS X.509 version 3 certificate with FQDN or IP address specified and information about the issuer.","type":"string"},"endpointDetails":{"$ref":"#/types/aws-native:transfer:ServerEndpointDetails","description":"The virtual private cloud (VPC) endpoint settings that are configured for your server. When you host your endpoint within your VPC, you can make your endpoint accessible only to resources within your VPC, or you can attach Elastic IP addresses and make your endpoint accessible to clients over the internet. Your VPC's default security groups are automatically assigned to your endpoint."},"endpointType":{"$ref":"#/types/aws-native:transfer:ServerEndpointType","description":"The type of endpoint that you want your server to use. You can choose to make your server's endpoint publicly accessible (PUBLIC) or host it inside your VPC. With an endpoint that is hosted in a VPC, you can restrict access to your server and resources only within your VPC or choose to make it internet facing by attaching Elastic IP addresses directly to it.\n\n\u003e After May 19, 2021, you won't be able to create a server using `EndpointType=VPC_ENDPOINT` in your AWS account if your account hasn't already done so before May 19, 2021. If you have already created servers with `EndpointType=VPC_ENDPOINT` in your AWS account on or before May 19, 2021, you will not be affected. After this date, use `EndpointType` = `VPC` .\n\u003e \n\u003e For more information, see [Discontinuing the use of VPC_ENDPOINT](https://docs.aws.amazon.com//transfer/latest/userguide/create-server-in-vpc.html#deprecate-vpc-endpoint) .\n\u003e \n\u003e It is recommended that you use `VPC` as the `EndpointType` . With this endpoint type, you have the option to directly associate up to three Elastic IPv4 addresses (BYO IP included) with your server's endpoint and use VPC security groups to restrict traffic by the client's public IP address. This is not possible with `EndpointType` set to `VPC_ENDPOINT` ."},"identityProviderDetails":{"$ref":"#/types/aws-native:transfer:ServerIdentityProviderDetails","description":"Required when `IdentityProviderType` is set to `AWS_DIRECTORY_SERVICE` , `AWS _LAMBDA` or `API_GATEWAY` . Accepts an array containing all of the information required to use a directory in `AWS_DIRECTORY_SERVICE` or invoke a customer-supplied authentication API, including the API Gateway URL. Cannot be specified when `IdentityProviderType` is set to `SERVICE_MANAGED` ."},"identityProviderType":{"$ref":"#/types/aws-native:transfer:ServerIdentityProviderType","description":"The mode of authentication for a server. The default value is `SERVICE_MANAGED` , which allows you to store and access user credentials within the AWS Transfer Family service.\n\nUse `AWS_DIRECTORY_SERVICE` to provide access to Active Directory groups in AWS Directory Service for Microsoft Active Directory or Microsoft Active Directory in your on-premises environment or in AWS using AD Connector. This option also requires you to provide a Directory ID by using the `IdentityProviderDetails` parameter.\n\nUse the `API_GATEWAY` value to integrate with an identity provider of your choosing. The `API_GATEWAY` setting requires you to provide an Amazon API Gateway endpoint URL to call for authentication by using the `IdentityProviderDetails` parameter.\n\nUse the `AWS_LAMBDA` value to directly use an AWS Lambda function as your identity provider. If you choose this value, you must specify the ARN for the Lambda function in the `Function` parameter for the `IdentityProviderDetails` data type."},"ipAddressType":{"$ref":"#/types/aws-native:transfer:ServerIpAddressType","description":"Specifies whether to use IPv4 only, or to use dual-stack (IPv4 and IPv6) for your AWS Transfer Family endpoint. The default value is `IPV4` .\n\n\u003e The `IpAddressType` parameter has the following limitations:\n\u003e \n\u003e - It cannot be changed while the server is online. You must stop the server before modifying this parameter.\n\u003e - It cannot be updated to `DUALSTACK` if the server has `AddressAllocationIds` specified. \u003e When using `DUALSTACK` as the `IpAddressType` , you cannot set the `AddressAllocationIds` parameter for the [EndpointDetails](https://docs.aws.amazon.com/transfer/latest/APIReference/API_EndpointDetails.html) for the server."},"loggingRole":{"description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that allows a server to turn on Amazon CloudWatch logging for Amazon S3 or Amazon EFS events. When set, you can view user activity in your CloudWatch logs.","type":"string"},"postAuthenticationLoginBanner":{"description":"Specifies a string to display when users connect to a server. This string is displayed after the user authenticates.\n\n\u003e The SFTP protocol does not support post-authentication display banners.","type":"string"},"preAuthenticationLoginBanner":{"description":"Specifies a string to display when users connect to a server. This string is displayed before the user authenticates. For example, the following banner displays details about using the system:\n\n`This system is for the use of authorized users only. Individuals using this computer system without authority, or in excess of their authority, are subject to having all of their activities on this system monitored and recorded by system personnel.`","type":"string"},"protocolDetails":{"$ref":"#/types/aws-native:transfer:ServerProtocolDetails","description":"The protocol settings that are configured for your server.\n\n- To indicate passive mode (for FTP and FTPS protocols), use the `PassiveIp` parameter. Enter a single dotted-quad IPv4 address, such as the external IP address of a firewall, router, or load balancer.\n- To ignore the error that is generated when the client attempts to use the `SETSTAT` command on a file that you are uploading to an Amazon S3 bucket, use the `SetStatOption` parameter. To have the AWS Transfer Family server ignore the `SETSTAT` command and upload files without needing to make any changes to your SFTP client, set the value to `ENABLE_NO_OP` . If you set the `SetStatOption` parameter to `ENABLE_NO_OP` , Transfer Family generates a log entry to Amazon CloudWatch Logs, so that you can determine when the client is making a `SETSTAT` call.\n- To determine whether your AWS Transfer Family server resumes recent, negotiated sessions through a unique session ID, use the `TlsSessionResumptionMode` parameter.\n- `As2Transports` indicates the transport method for the AS2 messages. Currently, only HTTP is supported.\n\nThe `Protocols` parameter is an array of strings.\n\n*Allowed values* : One or more of `SFTP` , `FTPS` , `FTP` , `AS2`"},"protocols":{"description":"Specifies the file transfer protocol or protocols over which your file transfer protocol client can connect to your server's endpoint. The available protocols are:\n\n- `SFTP` (Secure Shell (SSH) File Transfer Protocol): File transfer over SSH\n- `FTPS` (File Transfer Protocol Secure): File transfer with TLS encryption\n- `FTP` (File Transfer Protocol): Unencrypted file transfer\n- `AS2` (Applicability Statement 2): used for transporting structured business-to-business data\n\n\u003e - If you select `FTPS` , you must choose a certificate stored in Certificate Manager (ACM) which is used to identify your server when clients connect to it over FTPS.\n\u003e - If `Protocol` includes either `FTP` or `FTPS` , then the `EndpointType` must be `VPC` and the `IdentityProviderType` must be either `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .\n\u003e - If `Protocol` includes `FTP` , then `AddressAllocationIds` cannot be associated.\n\u003e - If `Protocol` is set only to `SFTP` , the `EndpointType` can be set to `PUBLIC` and the `IdentityProviderType` can be set any of the supported identity types: `SERVICE_MANAGED` , `AWS_DIRECTORY_SERVICE` , `AWS_LAMBDA` , or `API_GATEWAY` .\n\u003e - If `Protocol` includes `AS2` , then the `EndpointType` must be `VPC` , and domain must be Amazon S3. \n\nThe `Protocols` parameter is an array of strings.\n\n*Allowed values* : One or more of `SFTP` , `FTPS` , `FTP` , `AS2`","items":{"$ref":"#/types/aws-native:transfer:ServerProtocol"},"type":"array"},"s3StorageOptions":{"$ref":"#/types/aws-native:transfer:ServerS3StorageOptions","description":"Specifies whether or not performance for your Amazon S3 directories is optimized.\n\n- If using the console, this is enabled by default.\n- If using the API or CLI, this is disabled by default.\n\nBy default, home directory mappings have a `TYPE` of `DIRECTORY` . If you enable this option, you would then need to explicitly set the `HomeDirectoryMapEntry` `Type` to `FILE` if you want a mapping to have a file target."},"securityPolicyName":{"description":"Specifies the name of the security policy for the server.","type":"string"},"serverId":{"description":"Specifies the unique system-assigned identifier for a server that you instantiate.","type":"string"},"state":{"$ref":"#/types/aws-native:transfer:ServerState","description":"The condition of the server that was described. A value of `ONLINE` indicates that the server can accept jobs and transfer files. A `State` value of `OFFLINE` means that the server cannot perform file transfer operations.\n\nThe states of `STARTING` and `STOPPING` indicate that the server is in an intermediate state, either not fully able to respond, or not fully offline. The values of `START_FAILED` or `STOP_FAILED` can indicate an error condition."},"structuredLogDestinations":{"description":"Specifies the log groups to which your server logs are sent.\n\nTo specify a log group, you must provide the ARN for an existing log group. In this case, the format of the log group is as follows:\n\n`arn:aws:logs:region-name:amazon-account-id:log-group:log-group-name:*`\n\nFor example, `arn:aws:logs:us-east-1:111122223333:log-group:mytestgroup:*`\n\nIf you have previously specified a log group for a server, you can clear it, and in effect turn off structured logging, by providing an empty value for this parameter in an `update-server` call. For example:\n\n`update-server --server-id s-1234567890abcdef0 --structured-log-destinations`","items":{"type":"string"},"type":"array"},"tags":{"description":"Key-value pairs that can be used to group and search for servers.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workflowDetails":{"$ref":"#/types/aws-native:transfer:ServerWorkflowDetails","description":"Specifies the workflow ID for the workflow to assign and the execution role that's used for executing the workflow.\n\nIn addition to a workflow to execute when a file is uploaded completely, `WorkflowDetails` can also contain a workflow ID (and execution role) for a workflow to execute on partial upload. A partial upload occurs when a file is open when the session disconnects."}}}},"aws-native:transfer:getUser":{"description":"Definition of AWS::Transfer::User Resource Type","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name associated with the user, in the form `arn:aws:transfer:region: *account-id* :user/ *server-id* / *username*` .\n\nAn example of a user ARN is: `arn:aws:transfer:us-east-1:123456789012:user/user1` ."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name associated with the user, in the form `arn:aws:transfer:region: *account-id* :user/ *server-id* / *username*` .\n\nAn example of a user ARN is: `arn:aws:transfer:us-east-1:123456789012:user/user1` .","type":"string"},"homeDirectory":{"description":"The landing directory (folder) for a user when they log in to the server using the client.\n\nA `HomeDirectory` example is `/bucket_name/home/mydirectory` .\n\n\u003e You can use the `HomeDirectory` parameter for `HomeDirectoryType` when it is set to either `PATH` or `LOGICAL` .","type":"string"},"homeDirectoryMappings":{"description":"Logical directory mappings that specify what Amazon S3 or Amazon EFS paths and keys should be visible to your user and how you want to make them visible. You must specify the `Entry` and `Target` pair, where `Entry` shows how the path is made visible and `Target` is the actual Amazon S3 or Amazon EFS path. If you only specify a target, it is displayed as is. You also must ensure that your AWS Identity and Access Management (IAM) role provides access to paths in `Target` . This value can be set only when `HomeDirectoryType` is set to *LOGICAL* .\n\nThe following is an `Entry` and `Target` pair example.\n\n`[ { \"Entry\": \"/directory1\", \"Target\": \"/bucket_name/home/mydirectory\" } ]`\n\nIn most cases, you can use this value instead of the session policy to lock your user down to the designated home directory (\" `chroot` \"). To do this, you can set `Entry` to `/` and set `Target` to the value the user should see for their home directory when they log in.\n\nThe following is an `Entry` and `Target` pair example for `chroot` .\n\n`[ { \"Entry\": \"/\", \"Target\": \"/bucket_name/home/mydirectory\" } ]`","items":{"$ref":"#/types/aws-native:transfer:UserHomeDirectoryMapEntry"},"type":"array"},"homeDirectoryType":{"$ref":"#/types/aws-native:transfer:UserHomeDirectoryType","description":"The type of landing directory (folder) that you want your users' home directory to be when they log in to the server. If you set it to `PATH` , the user will see the absolute Amazon S3 bucket or Amazon EFS path as is in their file transfer protocol clients. If you set it to `LOGICAL` , you need to provide mappings in the `HomeDirectoryMappings` for how you want to make Amazon S3 or Amazon EFS paths visible to your users.\n\n\u003e If `HomeDirectoryType` is `LOGICAL` , you must provide mappings, using the `HomeDirectoryMappings` parameter. If, on the other hand, `HomeDirectoryType` is `PATH` , you provide an absolute path using the `HomeDirectory` parameter. You cannot have both `HomeDirectory` and `HomeDirectoryMappings` in your template."},"policy":{"description":"A session policy for your user so you can use the same IAM role across multiple users. This policy restricts user access to portions of their Amazon S3 bucket. Variables that you can use inside this policy include `${Transfer:UserName}` , `${Transfer:HomeDirectory}` , and `${Transfer:HomeBucket}` .\n\n\u003e For session policies, AWS Transfer Family stores the policy as a JSON blob, instead of the Amazon Resource Name (ARN) of the policy. You save the policy as a JSON blob and pass it in the `Policy` argument.\n\u003e \n\u003e For an example of a session policy, see [Example session policy](https://docs.aws.amazon.com/transfer/latest/userguide/session-policy.html) .\n\u003e \n\u003e For more information, see [AssumeRole](https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html) in the *AWS Security Token Service API Reference* .","type":"string"},"posixProfile":{"$ref":"#/types/aws-native:transfer:UserPosixProfile","description":"Specifies the full POSIX identity, including user ID ( `Uid` ), group ID ( `Gid` ), and any secondary groups IDs ( `SecondaryGids` ), that controls your users' access to your Amazon Elastic File System (Amazon EFS) file systems. The POSIX permissions that are set on files and directories in your file system determine the level of access your users get when transferring files into and out of your Amazon EFS file systems."},"role":{"description":"The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role that controls your users' access to your Amazon S3 bucket or Amazon EFS file system. The policies attached to this role determine the level of access that you want to provide your users when transferring files into and out of your Amazon S3 bucket or Amazon EFS file system. The IAM role should also contain a trust relationship that allows the server to access your resources when servicing your users' transfer requests.","type":"string"},"sshPublicKeys":{"description":"This represents the SSH User Public Keys for CloudFormation resource","items":{"type":"string"},"type":"array"},"tags":{"description":"Key-value pairs that can be used to group and search for users. Tags are metadata attached to users for any purpose.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:transfer:getWebApp":{"description":"Resource Type definition for AWS::Transfer::WebApp","inputs":{"properties":{"arn":{"type":"string","description":"Specifies the unique Amazon Resource Name (ARN) for the web app."}},"required":["arn"]},"outputs":{"properties":{"accessEndpoint":{"description":"The AccessEndpoint is the URL that you provide to your users for them to interact with the Transfer Family web app. You can specify a custom URL or use the default value.","type":"string"},"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) for the web app.","type":"string"},"endpointDetails":{"$ref":"#/types/aws-native:transfer:WebAppEndpointDetails"},"identityProviderDetails":{"$ref":"#/types/aws-native:transfer:WebAppIdentityProviderDetails","description":"You can provide a structure that contains the details for the identity provider to use with your web app.\n\nFor more details about this parameter, see [Configure your identity provider for Transfer Family web apps](https://docs.aws.amazon.com//transfer/latest/userguide/webapp-identity-center.html) ."},"tags":{"description":"Key-value pairs that can be used to group and search for web apps.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcEndpointId":{"type":"string"},"webAppCustomization":{"$ref":"#/types/aws-native:transfer:WebAppCustomization","description":"A structure that contains the customization fields for the web app. You can provide a title, logo, and icon to customize the appearance of your web app."},"webAppId":{"description":"A unique identifier for the web app.","type":"string"},"webAppUnits":{"$ref":"#/types/aws-native:transfer:WebAppUnitsProperties","description":"A union that contains the value for number of concurrent connections or the user sessions on your web app."}}}},"aws-native:transfer:getWorkflow":{"description":"Resource Type definition for AWS::Transfer::Workflow","inputs":{"properties":{"workflowId":{"type":"string","description":"A unique identifier for the workflow."}},"required":["workflowId"]},"outputs":{"properties":{"arn":{"description":"Specifies the unique Amazon Resource Name (ARN) for the workflow.","type":"string"},"tags":{"description":"Key-value pairs that can be used to group and search for workflows. Tags are metadata attached to workflows for any purpose.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workflowId":{"description":"A unique identifier for the workflow.","type":"string"}}}},"aws-native:verifiedpermissions:getIdentitySource":{"description":"Definition of AWS::VerifiedPermissions::IdentitySource Resource Type","inputs":{"properties":{"identitySourceId":{"type":"string","description":"The unique ID of the new or updated identity store."},"policyStoreId":{"type":"string","description":"Specifies the ID of the policy store in which you want to store this identity source. Only policies and requests made using this policy store can reference identities from the identity provider configured in the new identity source."}},"required":["identitySourceId","policyStoreId"]},"outputs":{"properties":{"configuration":{"description":"Contains configuration information used when creating a new identity source.","oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceConfiguration0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceConfiguration1Properties"}]},"details":{"$ref":"#/types/aws-native:verifiedpermissions:IdentitySourceDetails"},"identitySourceId":{"description":"The unique ID of the new or updated identity store.","type":"string"},"principalEntityType":{"description":"Specifies the namespace and data type of the principals generated for identities authenticated by the new identity source.","type":"string"}}}},"aws-native:verifiedpermissions:getPolicy":{"description":"Definition of AWS::VerifiedPermissions::Policy Resource Type","inputs":{"properties":{"policyId":{"type":"string","description":"The unique ID of the new or updated policy."},"policyStoreId":{"type":"string","description":"Specifies the `PolicyStoreId` of the policy store you want to store the policy in."}},"required":["policyId","policyStoreId"]},"outputs":{"properties":{"definition":{"description":"Specifies the policy type and content to use for the new or updated policy. The definition structure must include either a `Static` or a `TemplateLinked` element.","oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:PolicyDefinition0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:PolicyDefinition1Properties"}]},"policyId":{"description":"The unique ID of the new or updated policy.","type":"string"},"policyType":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyType","description":"The type of the policy. This is one of the following values:\n\n- Static\n- TemplateLinked"}}}},"aws-native:verifiedpermissions:getPolicyStore":{"description":"Represents a policy store that you can place schema, policies, and policy templates in to validate authorization requests","inputs":{"properties":{"policyStoreId":{"type":"string","description":"The unique ID of the new or updated policy store."}},"required":["policyStoreId"]},"outputs":{"properties":{"arn":{"description":"The [Amazon Resource Name (ARN)](https://docs.aws.amazon.com//general/latest/gr/aws-arns-and-namespaces.html) of the new or updated policy store.","type":"string"},"deletionProtection":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreDeletionProtection","description":"Specifies whether the policy store can be deleted. If enabled, the policy store can't be deleted.\n\nThe default state is `DISABLED` ."},"description":{"description":"Descriptive text that you can provide to help with identification of the current policy store.","type":"string"},"encryptionState":{"oneOf":[{"$ref":"#/types/aws-native:verifiedpermissions:EncryptionState0Properties"},{"$ref":"#/types/aws-native:verifiedpermissions:EncryptionState1Properties"}]},"policyStoreId":{"description":"The unique ID of the new or updated policy store.","type":"string"},"schema":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreSchemaDefinition","description":"Creates or updates the policy schema in a policy store. Cedar can use the schema to validate any Cedar policies and policy templates submitted to the policy store. Any changes to the schema validate only policies and templates submitted after the schema change. Existing policies and templates are not re-evaluated against the changed schema. If you later update a policy, then it is evaluated against the new schema at that time."},"tags":{"description":"The tags to add to the policy store","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"validationSettings":{"$ref":"#/types/aws-native:verifiedpermissions:PolicyStoreValidationSettings","description":"Specifies the validation setting for this policy store.\n\nCurrently, the only valid and required value is `Mode` .\n\n\u003e We recommend that you turn on `STRICT` mode only after you define a schema. If a schema doesn't exist, then `STRICT` mode causes any policy to fail validation, and Verified Permissions rejects the policy. You can turn off validation by using the [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) . Then, when you have a schema defined, use [UpdatePolicyStore](https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_UpdatePolicyStore) again to turn validation back on."}}}},"aws-native:verifiedpermissions:getPolicyTemplate":{"description":"Definition of AWS::VerifiedPermissions::PolicyTemplate Resource Type","inputs":{"properties":{"policyStoreId":{"type":"string","description":"The unique identifier of the policy store that contains the template."},"policyTemplateId":{"type":"string","description":"The unique identifier of the new or modified policy template."}},"required":["policyStoreId","policyTemplateId"]},"outputs":{"properties":{"description":{"description":"The description to attach to the new or updated policy template.","type":"string"},"policyTemplateId":{"description":"The unique identifier of the new or modified policy template.","type":"string"},"statement":{"description":"Specifies the content that you want to use for the new policy template, written in the Cedar policy language.","type":"string"}}}},"aws-native:voiceid:getDomain":{"description":"The AWS::VoiceID::Domain resource specifies an Amazon VoiceID Domain.","inputs":{"properties":{"domainId":{"type":"string","description":"The identifier of the domain."}},"required":["domainId"]},"outputs":{"properties":{"description":{"description":"The description of the domain.","type":"string"},"domainId":{"description":"The identifier of the domain.","type":"string"},"name":{"description":"The name for the domain.","type":"string"},"serverSideEncryptionConfiguration":{"$ref":"#/types/aws-native:voiceid:DomainServerSideEncryptionConfiguration","description":"The server-side encryption configuration containing the KMS key identifier you want Voice ID to use to encrypt your data."},"tags":{"description":"The tags used to organize, track, or control access for this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getAccessLogSubscription":{"description":"Enables access logs to be sent to Amazon CloudWatch, Amazon S3, and Amazon Kinesis Data Firehose. The service network owner can use the access logs to audit the services in the network. The service network owner will only see access logs from clients and services that are associated with their service network. Access log entries represent traffic originated from VPCs associated with that network.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the access log subscription."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the access log subscription.","type":"string"},"destinationArn":{"description":"The Amazon Resource Name (ARN) of the destination. The supported destination types are CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets.","type":"string"},"id":{"description":"The ID of the access log subscription.","type":"string"},"resourceArn":{"description":"The Amazon Resource Name (ARN) of the access log subscription.","type":"string"},"resourceId":{"description":"The ID of the service network or service.","type":"string"},"serviceNetworkLogType":{"$ref":"#/types/aws-native:vpclattice:AccessLogSubscriptionServiceNetworkLogType","description":"Log type of the service network."},"tags":{"description":"The tags for the access log subscription.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getAuthPolicy":{"description":"Creates or updates the auth policy.","inputs":{"properties":{"resourceIdentifier":{"type":"string","description":"The ID or ARN of the service network or service for which the policy is created."}},"required":["resourceIdentifier"]},"outputs":{"properties":{"policy":{"$ref":"pulumi.json#/Any","description":"The auth policy.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::VpcLattice::AuthPolicy` for more information about the expected schema for this property."},"state":{"$ref":"#/types/aws-native:vpclattice:AuthPolicyState","description":"The state of the auth policy. The auth policy is only active when the auth type is set to `AWS _IAM` . If you provide a policy, then authentication and authorization decisions are made based on this policy and the client's IAM policy. If the auth type is `NONE` , then any auth policy you provide will remain inactive."}}}},"aws-native:vpclattice:getDomainVerification":{"description":"Creates a Lattice Domain Verification","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the domain verification."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the domain verification.","type":"string"},"id":{"description":"The ID of the domain verification.","type":"string"},"status":{"$ref":"#/types/aws-native:vpclattice:DomainVerificationStatus","description":"The current status of the domain verification process."},"tags":{"description":"The tags associated with the domain verification.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"txtMethodConfig":{"$ref":"#/types/aws-native:vpclattice:TxtMethodConfigProperties"}}}},"aws-native:vpclattice:getListener":{"description":"Creates a listener for a service. Before you start using your Amazon VPC Lattice service, you must add one or more listeners. A listener is a process that checks for connection requests to your services.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the listener."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the listener.","type":"string"},"defaultAction":{"$ref":"#/types/aws-native:vpclattice:ListenerDefaultAction","description":"The action for the default rule. Each listener has a default rule. The default rule is used if no other rules match."},"id":{"description":"The ID of the listener.","type":"string"},"serviceArn":{"description":"The Amazon Resource Name (ARN) of the service.","type":"string"},"serviceId":{"description":"The ID of the service.","type":"string"},"tags":{"description":"The tags for the listener.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getResourceConfiguration":{"description":"VpcLattice ResourceConfiguration CFN resource","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource configuration."}},"required":["arn"]},"outputs":{"properties":{"allowAssociationToSharableServiceNetwork":{"description":"Specifies whether the resource configuration can be associated with a sharable service network.","type":"boolean"},"arn":{"description":"The Amazon Resource Name (ARN) of the resource configuration.","type":"string"},"id":{"description":"The ID of the resource configuration.","type":"string"},"name":{"description":"The name of the resource configuration.","type":"string"},"portRanges":{"description":"(SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to access a resource configuration (for example: 1-65535). You can separate port ranges using commas (for example: 1,2,22-30).","items":{"type":"string"},"type":"array"},"resourceConfigurationDefinition":{"description":"Identifies the resource configuration in one of the following ways:\n\n- *Amazon Resource Name (ARN)* - Supported resource-types that are provisioned by AWS services, such as RDS databases, can be identified by their ARN.\n- *Domain name* - Any domain name that is publicly resolvable.\n- *IP address* - For IPv4 and IPv6, only IP addresses in the VPC are supported.","oneOf":[{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition0Properties"},{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition1Properties"},{"$ref":"#/types/aws-native:vpclattice:ResourceConfigurationDefinition2Properties"}]},"tags":{"description":"The tags for the resource configuration.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getResourceGateway":{"description":"Creates a resource gateway for a service.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the resource gateway."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the resource gateway.","type":"string"},"id":{"description":"The ID of the resource gateway.","type":"string"},"ipv4AddressesPerEni":{"description":"The number of IPv4 addresses to allocate per ENI for the resource gateway","type":"integer"},"securityGroupIds":{"description":"The ID of one or more security groups to associate with the endpoint network interface.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags for the resource gateway.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getResourcePolicy":{"description":"Retrieves information about the resource policy. The resource policy is an IAM policy created by AWS RAM on behalf of the resource owner when they share a resource.","inputs":{"properties":{"resourceArn":{"type":"string","description":"An IAM policy."}},"required":["resourceArn"]},"outputs":{"properties":{"policy":{"$ref":"pulumi.json#/Any","description":"The Amazon Resource Name (ARN) of the service network or service.\n\nSearch the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::VpcLattice::ResourcePolicy` for more information about the expected schema for this property."}}}},"aws-native:vpclattice:getRule":{"description":"Creates a listener rule. Each listener has a default rule for checking connection requests, but you can define additional rules. Each rule consists of a priority, one or more actions, and one or more conditions.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the rule."}},"required":["arn"]},"outputs":{"properties":{"action":{"$ref":"#/types/aws-native:vpclattice:RuleAction","description":"Describes the action for a rule."},"arn":{"description":"The Amazon Resource Name (ARN) of the rule.","type":"string"},"id":{"description":"The ID of the listener.","type":"string"},"match":{"$ref":"#/types/aws-native:vpclattice:RuleMatch","description":"The rule match."},"priority":{"description":"The priority assigned to the rule. Each rule for a specific listener must have a unique priority. The lower the priority number the higher the priority.","type":"integer"},"tags":{"description":"The tags for the rule.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getService":{"description":"A service is any software application that can run on instances containers, or serverless functions within an account or virtual private cloud (VPC).","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the service.","type":"string"},"authType":{"$ref":"#/types/aws-native:vpclattice:ServiceAuthType","description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required."},"certificateArn":{"description":"The Amazon Resource Name (ARN) of the certificate.","type":"string"},"createdAt":{"description":"The date and time that the service was created, specified in ISO-8601 format.","type":"string"},"dnsEntry":{"$ref":"#/types/aws-native:vpclattice:ServiceDnsEntry","description":"Describes the DNS information of the service. This field is read-only."},"id":{"description":"The ID of the service.","type":"string"},"lastUpdatedAt":{"description":"The date and time that the service was last updated, specified in ISO-8601 format.","type":"string"},"status":{"$ref":"#/types/aws-native:vpclattice:ServiceStatus","description":"The status of the service."},"tags":{"description":"The tags for the service.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getServiceNetwork":{"description":"A service network is a logical boundary for a collection of services. You can associate services and VPCs with a service network.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the service network."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the service network.","type":"string"},"authType":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkAuthType","description":"The type of IAM policy.\n\n- `NONE` : The resource does not use an IAM policy. This is the default.\n- `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required."},"createdAt":{"description":"The date and time that the service network was created, specified in ISO-8601 format.","type":"string"},"id":{"description":"The ID of the service network.","type":"string"},"lastUpdatedAt":{"description":"The date and time of the last update, specified in ISO-8601 format.","type":"string"},"sharingConfig":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkSharingConfig","description":"Specify if the service network should be enabled for sharing."},"tags":{"description":"The tags for the service network.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getServiceNetworkResourceAssociation":{"description":"VpcLattice ServiceNetworkResourceAssociation CFN resource","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the association."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the association.","type":"string"},"id":{"description":"The ID of the association between the service network and resource configuration.","type":"string"},"tags":{"description":"A key-value pair to associate with a resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getServiceNetworkServiceAssociation":{"description":"Associates a service with a service network.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the association between the service network and the service."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the association between the service network and the service.","type":"string"},"createdAt":{"description":"The date and time that the association was created, specified in ISO-8601 format.","type":"string"},"dnsEntry":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkServiceAssociationDnsEntry","description":"The DNS information of the service."},"id":{"description":"The ID of the of the association between the service network and the service.","type":"string"},"serviceArn":{"description":"The Amazon Resource Name (ARN) of the service.","type":"string"},"serviceId":{"description":"The ID of the service.","type":"string"},"serviceName":{"description":"The name of the service.","type":"string"},"serviceNetworkArn":{"description":"The Amazon Resource Name (ARN) of the service network","type":"string"},"serviceNetworkId":{"description":"The ID of the service network.","type":"string"},"serviceNetworkName":{"description":"The name of the service network.","type":"string"},"status":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkServiceAssociationStatus","description":"The status of the association between the service network and the service."},"tags":{"description":"The tags for the association.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:vpclattice:getServiceNetworkVpcAssociation":{"description":"Associates a VPC with a service network.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the association between the service network and the VPC."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the association between the service network and the VPC.","type":"string"},"createdAt":{"description":"The date and time that the association was created, specified in ISO-8601 format.","type":"string"},"id":{"description":"The ID of the specified association between the service network and the VPC.","type":"string"},"securityGroupIds":{"description":"The IDs of the security groups. Security groups aren't added by default. You can add a security group to apply network level controls to control which resources in a VPC are allowed to access the service network and its services. For more information, see [Control traffic to resources using security groups](https://docs.aws.amazon.com//vpc/latest/userguide/VPC_SecurityGroups.html) in the *Amazon VPC User Guide* .","items":{"type":"string"},"type":"array"},"serviceNetworkArn":{"description":"The Amazon Resource Name (ARN) of the service network.","type":"string"},"serviceNetworkId":{"description":"The ID of the service network.","type":"string"},"serviceNetworkName":{"description":"The name of the service network.","type":"string"},"status":{"$ref":"#/types/aws-native:vpclattice:ServiceNetworkVpcAssociationStatus","description":"The status of the association."},"tags":{"description":"The tags for the association.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"The ID of the VPC.","type":"string"}}}},"aws-native:vpclattice:getTargetGroup":{"description":"A target group is a collection of targets, or compute resources, that run your application or service. A target group can only be used by a single service.","inputs":{"properties":{"arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the target group."}},"required":["arn"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the target group.","type":"string"},"config":{"$ref":"#/types/aws-native:vpclattice:TargetGroupConfig","description":"The target group configuration."},"createdAt":{"description":"The date and time that the target group was created, specified in ISO-8601 format.","type":"string"},"id":{"description":"The ID of the target group.","type":"string"},"lastUpdatedAt":{"description":"The date and time that the target group was last updated, specified in ISO-8601 format.","type":"string"},"status":{"$ref":"#/types/aws-native:vpclattice:TargetGroupStatus","description":"The operation's status. You can retry the operation if the status is `CREATE_FAILED` . However, if you retry it while the status is `CREATE_IN_PROGRESS` , there is no change in the status."},"tags":{"description":"The tags for the target group.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"targets":{"description":"Describes a target.","items":{"$ref":"#/types/aws-native:vpclattice:TargetGroupTarget"},"type":"array"}}}},"aws-native:wafv2:getIpSet":{"description":"Contains a list of IP addresses. This can be either IPV4 or IPV6. The list will be mutually","inputs":{"properties":{"id":{"type":"string","description":"The ID of the IP set."},"name":{"type":"string","description":"The name of the IP set. You cannot change the name of an `IPSet` after you create it."},"scope":{"$ref":"#/types/aws-native:wafv2:IpSetScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` ."}},"required":["name","id","scope"]},"outputs":{"properties":{"addresses":{"description":"List of IPAddresses.","items":{"type":"string"},"type":"array"},"arn":{"description":"The Amazon Resource Name (ARN) of the IP set.","type":"string"},"description":{"description":"A description of the IP set that helps with identification.","type":"string"},"id":{"description":"The ID of the IP set.","type":"string"},"ipAddressVersion":{"$ref":"#/types/aws-native:wafv2:IpSetIpAddressVersion","description":"The version of the IP addresses, either `IPV4` or `IPV6` ."},"tags":{"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:wafv2:getLoggingConfiguration":{"description":"A WAFv2 Logging Configuration Resource Provider","inputs":{"properties":{"resourceArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the web ACL that you want to associate with LogDestinationConfigs."}},"required":["resourceArn"]},"outputs":{"properties":{"logDestinationConfigs":{"description":"The Amazon Resource Names (ARNs) of the logging destinations that you want to associate with the web ACL.","items":{"type":"string"},"type":"array"},"loggingFilter":{"$ref":"#/types/aws-native:wafv2:LoggingFilterProperties","description":"Filtering that specifies which web requests are kept in the logs and which are dropped. You can filter on the rule action and on the web request labels that were applied by matching rules during web ACL evaluation."},"managedByFirewallManager":{"description":"Indicates whether the logging configuration was created by AWS Firewall Manager, as part of an AWS WAF policy configuration. If true, only Firewall Manager can modify or delete the configuration.","type":"boolean"},"redactedFields":{"description":"The parts of the request that you want to keep out of the logs. For example, if you redact the HEADER field, the HEADER field in the firehose will be xxx.","items":{"$ref":"#/types/aws-native:wafv2:LoggingConfigurationFieldToMatch"},"type":"array"}}}},"aws-native:wafv2:getRegexPatternSet":{"description":"Contains a list of Regular expressions based on the provided inputs. RegexPatternSet can be used with other WAF entities with RegexPatternSetReferenceStatement to perform other actions .","inputs":{"properties":{"id":{"type":"string","description":"Id of the RegexPatternSet"},"name":{"type":"string","description":"Name of the RegexPatternSet."},"scope":{"$ref":"#/types/aws-native:wafv2:RegexPatternSetScope","description":"Use CLOUDFRONT for CloudFront RegexPatternSet, use REGIONAL for Application Load Balancer and API Gateway."}},"required":["name","id","scope"]},"outputs":{"properties":{"arn":{"description":"ARN of the WAF entity.","type":"string"},"description":{"description":"Description of the entity.","type":"string"},"id":{"description":"Id of the RegexPatternSet","type":"string"},"regularExpressionList":{"description":"The regular expression patterns in the set.","items":{"type":"string"},"type":"array"},"tags":{"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:wafv2:getRuleGroup":{"description":"Contains the Rules that identify the requests that you want to allow, block, or count. In a RuleGroup, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a RuleGroup, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the RuleGroup with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a RuleGroup, a request needs to match only one of the specifications to be allowed, blocked, or counted.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the rule group."},"name":{"type":"string","description":"The name of the rule group. You cannot change the name of a rule group after you create it."},"scope":{"$ref":"#/types/aws-native:wafv2:RuleGroupScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` ."}},"required":["name","id","scope"]},"outputs":{"properties":{"arn":{"description":"The Amazon Resource Name (ARN) of the rule group.","type":"string"},"availableLabels":{"description":"Collection of Available Labels.","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelSummary"},"type":"array"},"capacity":{"description":"The web ACL capacity units (WCUs) required for this rule group.\n\nWhen you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, AWS WAF enforces this limit.\n\nAWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.","type":"integer"},"consumedLabels":{"description":"Collection of Consumed Labels.","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupLabelSummary"},"type":"array"},"customResponseBodies":{"additionalProperties":{"$ref":"#/types/aws-native:wafv2:RuleGroupCustomResponseBody"},"description":"A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .","type":"object"},"description":{"description":"A description of the rule group that helps with identification.","type":"string"},"id":{"description":"The ID of the rule group.","type":"string"},"labelNamespace":{"description":"The label namespace prefix for this rule group. All labels added by rules in this rule group have this prefix.\n\nThe syntax for the label namespace prefix for a rule group is the following: `awswaf:\u003caccount ID\u003e:rule group:\u003crule group name\u003e:`\n\nWhen a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.","type":"string"},"rules":{"description":"Collection of Rules.","items":{"$ref":"#/types/aws-native:wafv2:RuleGroupRule"},"type":"array"},"tags":{"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:RuleGroupVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection."}}}},"aws-native:wafv2:getWebAcl":{"description":"Contains the Rules that identify the requests that you want to allow, block, or count. In a WebACL, you also specify a default action (ALLOW or BLOCK), and the action for each Rule that you add to a WebACL, for example, block requests from specified IP addresses or block requests from specified referrers. You also associate the WebACL with a CloudFront distribution to identify the requests that you want AWS WAF to filter. If you add more than one Rule to a WebACL, a request needs to match only one of the specifications to be allowed, blocked, or counted.","inputs":{"properties":{"id":{"type":"string","description":"The ID of the web ACL."},"name":{"type":"string","description":"The name of the web ACL. You cannot change the name of a web ACL after you create it."},"scope":{"$ref":"#/types/aws-native:wafv2:WebAclScope","description":"Specifies whether this is for an Amazon CloudFront distribution or for a regional application. For an AWS Amplify application, use `CLOUDFRONT` . A regional application can be an Application Load Balancer (ALB), an  REST API, an AWS AppSync GraphQL API, an Amazon Cognito user pool, an AWS App Runner service, or an AWS Verified Access instance. Valid Values are `CLOUDFRONT` and `REGIONAL` .\n\n\u003e For `CLOUDFRONT` , you must create your WAFv2 resources in the US East (N. Virginia) Region, `us-east-1` . \n\nFor information about how to define the association of the web ACL with your resource, see `WebACLAssociation` ."}},"required":["name","id","scope"]},"outputs":{"properties":{"applicationConfig":{"$ref":"#/types/aws-native:wafv2:WebAclApplicationConfig","description":"Collection of application attributes."},"arn":{"description":"The Amazon Resource Name (ARN) of the web ACL.","type":"string"},"associationConfig":{"$ref":"#/types/aws-native:wafv2:WebAclAssociationConfig","description":"Specifies custom configurations for the associations between the web ACL and protected resources.\n\nUse this to customize the maximum size of the request body that your protected resources forward to AWS WAF for inspection. You can customize this setting for CloudFront, API Gateway, Amazon Cognito, App Runner, or Verified Access resources. The default setting is 16 KB (16,384 bytes).\n\n\u003e You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see [AWS WAF Pricing](https://docs.aws.amazon.com/waf/pricing/) . \n\nFor Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes)."},"capacity":{"description":"The web ACL capacity units (WCUs) currently being used by this web ACL.\n\nAWS WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. AWS WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.","type":"integer"},"captchaConfig":{"$ref":"#/types/aws-native:wafv2:WebAclCaptchaConfig","description":"Specifies how AWS WAF should handle `CAPTCHA` evaluations for rules that don't have their own `CaptchaConfig` settings. If you don't specify this, AWS WAF uses its default settings for `CaptchaConfig` ."},"challengeConfig":{"$ref":"#/types/aws-native:wafv2:WebAclChallengeConfig","description":"Specifies how AWS WAF should handle challenge evaluations for rules that don't have their own `ChallengeConfig` settings. If you don't specify this, AWS WAF uses its default settings for `ChallengeConfig` ."},"customResponseBodies":{"additionalProperties":{"$ref":"#/types/aws-native:wafv2:WebAclCustomResponseBody"},"description":"A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.\n\nFor information about customizing web requests and responses, see [Customizing web requests and responses in AWS WAF](https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html) in the *AWS WAF Developer Guide* .\n\nFor information about the limits on count and size for custom request and response settings, see [AWS WAF quotas](https://docs.aws.amazon.com/waf/latest/developerguide/limits.html) in the *AWS WAF Developer Guide* .","type":"object"},"dataProtectionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclDataProtectionConfig","description":"Collection of dataProtects."},"defaultAction":{"$ref":"#/types/aws-native:wafv2:WebAclDefaultAction","description":"The action to perform if none of the `Rules` contained in the `WebACL` match."},"description":{"description":"A description of the web ACL that helps with identification.","type":"string"},"id":{"description":"The ID of the web ACL.","type":"string"},"labelNamespace":{"description":"The label namespace prefix for this web ACL. All labels added by rules in this web ACL have this prefix.\n\nThe syntax for the label namespace prefix for a web ACL is the following: `awswaf:\u003caccount ID\u003e:webacl:\u003cweb ACL name\u003e:`\n\nWhen a rule with a label matches a web request, AWS WAF adds the fully qualified label to the request. A fully qualified label is made up of the label namespace from the rule group or web ACL where the rule is defined and the label from the rule, separated by a colon.","type":"string"},"onSourceDDoSProtectionConfig":{"$ref":"#/types/aws-native:wafv2:WebAclOnSourceDDoSProtectionConfig","description":"Configures the level of DDoS protection that applies to web ACLs associated with Application Load Balancers."},"rules":{"description":"Collection of Rules.","items":{"$ref":"#/types/aws-native:wafv2:WebAclRule"},"type":"array"},"tags":{"description":"Key:value pairs associated with an AWS resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as \"environment\") and the tag value represents a specific value within that category (such as \"test,\" \"development,\" or \"production\"). You can add up to 50 tags to each AWS resource.\n\n\u003e To modify tags on existing resources, use the AWS WAF APIs or command line interface. With AWS CloudFormation , you can only add tags to AWS WAF resources during resource creation.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"tokenDomains":{"description":"Specifies the domains that AWS WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When AWS WAF provides a token, it uses the domain of the AWS resource that the web ACL is protecting. If you don't specify a list of token domains, AWS WAF accepts tokens only for the domain of the protected resource. With a token domain list, AWS WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.","items":{"type":"string"},"type":"array"},"visibilityConfig":{"$ref":"#/types/aws-native:wafv2:WebAclVisibilityConfig","description":"Defines and enables Amazon CloudWatch metrics and web request sample collection."}}}},"aws-native:wisdom:getAiAgent":{"description":"Definition of AWS::Wisdom::AIAgent Resource Type","inputs":{"properties":{"aiAgentId":{"type":"string","description":"The identifier of the AI Agent."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."}},"required":["aiAgentId","assistantId"]},"outputs":{"properties":{"aiAgentArn":{"description":"The Amazon Resource Name (ARN) of the AI agent.","type":"string"},"aiAgentId":{"description":"The identifier of the AI Agent.","type":"string"},"assistantArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect assistant.","type":"string"},"configuration":{"description":"Configuration for the AI Agent.","oneOf":[{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration0Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration1Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration2Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration3Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration4Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration5Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration6Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration7Properties"},{"$ref":"#/types/aws-native:wisdom:AiAgentAiAgentConfiguration8Properties"}]},"description":{"description":"The description of the AI Agent.","type":"string"},"modifiedTimeSeconds":{"type":"number"}}}},"aws-native:wisdom:getAiAgentVersion":{"description":"Definition of AWS::Wisdom::AIAgentVersion Resource Type","inputs":{"properties":{"aiAgentId":{"type":"string","description":"The identifier of the AI Agent."},"assistantId":{"type":"string"},"versionNumber":{"type":"number","description":"The version number for this AI Agent version."}},"required":["assistantId","aiAgentId","versionNumber"]},"outputs":{"properties":{"aiAgentArn":{"type":"string"},"aiAgentVersionId":{"type":"string"},"assistantArn":{"type":"string"},"versionNumber":{"description":"The version number for this AI Agent version.","type":"number"}}}},"aws-native:wisdom:getAiGuardrail":{"description":"Definition of AWS::Wisdom::AIGuardrail Resource Type","inputs":{"properties":{"aiGuardrailId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI Guardrail."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."}},"required":["aiGuardrailId","assistantId"]},"outputs":{"properties":{"aiGuardrailArn":{"description":"The Amazon Resource Name (ARN) of the AI Guardrail.","type":"string"},"aiGuardrailId":{"description":"The identifier of the Amazon Q in Connect AI Guardrail.","type":"string"},"assistantArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect assistant.","type":"string"},"blockedInputMessaging":{"description":"Messaging for when violations are detected in text","type":"string"},"blockedOutputsMessaging":{"description":"Messaging for when violations are detected in text","type":"string"},"contentPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailContentPolicyConfig","description":"Contains details about how to handle harmful content."},"contextualGroundingPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailContextualGroundingPolicyConfig","description":"The policy configuration details for the AI Guardrail's contextual grounding policy."},"description":{"description":"Description of the guardrail or its version","type":"string"},"sensitiveInformationPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailSensitiveInformationPolicyConfig","description":"Contains details about PII entities and regular expressions to configure for the AI Guardrail."},"topicPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailTopicPolicyConfig","description":"Contains details about topics that the AI Guardrail should identify and deny."},"wordPolicyConfig":{"$ref":"#/types/aws-native:wisdom:AiGuardrailAiGuardrailWordPolicyConfig","description":"Contains details about the word policy to configured for the AI Guardrail."}}}},"aws-native:wisdom:getAiGuardrailVersion":{"description":"Definition of AWS::Wisdom::AIGuardrailVersion Resource Type","inputs":{"properties":{"aiGuardrailId":{"type":"string","description":"The ID of the AI guardrail version."},"assistantId":{"type":"string","description":"The ID of the AI guardrail version assistant."},"versionNumber":{"type":"number","description":"The version number for this AI Guardrail version."}},"required":["assistantId","aiGuardrailId","versionNumber"]},"outputs":{"properties":{"aiGuardrailArn":{"description":"The ARN of the AI guardrail version.","type":"string"},"aiGuardrailVersionId":{"description":"The ID of the AI guardrail version.","type":"string"},"assistantArn":{"description":"The ARN of the AI guardrail version assistant.","type":"string"},"versionNumber":{"description":"The version number for this AI Guardrail version.","type":"number"}}}},"aws-native:wisdom:getAiPrompt":{"description":"Definition of AWS::Wisdom::AIPrompt Resource Type","inputs":{"properties":{"aiPromptId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI prompt."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."}},"required":["aiPromptId","assistantId"]},"outputs":{"properties":{"aiPromptArn":{"description":"The Amazon Resource Name (ARN) of the AI Prompt.","type":"string"},"aiPromptId":{"description":"The identifier of the Amazon Q in Connect AI prompt.","type":"string"},"assistantArn":{"description":"The Amazon Resource Name (ARN) of the Amazon Q in Connect assistant.","type":"string"},"description":{"description":"The description of the AI Prompt.","type":"string"},"modelId":{"description":"The identifier of the model used for this AI Prompt. The following model Ids are supported:\n\n- `anthropic.claude-3-haiku--v1:0`\n- `apac.amazon.nova-lite-v1:0`\n- `apac.amazon.nova-micro-v1:0`\n- `apac.amazon.nova-pro-v1:0`\n- `apac.anthropic.claude-3-5-sonnet--v2:0`\n- `apac.anthropic.claude-3-haiku-20240307-v1:0`\n- `eu.amazon.nova-lite-v1:0`\n- `eu.amazon.nova-micro-v1:0`\n- `eu.amazon.nova-pro-v1:0`\n- `eu.anthropic.claude-3-7-sonnet-20250219-v1:0`\n- `eu.anthropic.claude-3-haiku-20240307-v1:0`\n- `us.amazon.nova-lite-v1:0`\n- `us.amazon.nova-micro-v1:0`\n- `us.amazon.nova-pro-v1:0`\n- `us.anthropic.claude-3-5-haiku-20241022-v1:0`\n- `us.anthropic.claude-3-7-sonnet-20250219-v1:0`\n- `us.anthropic.claude-3-haiku-20240307-v1:0`","type":"string"},"modifiedTimeSeconds":{"type":"number"},"templateConfiguration":{"$ref":"#/types/aws-native:wisdom:AiPromptAiPromptTemplateConfiguration","description":"The configuration of the prompt template for this AI Prompt."}}}},"aws-native:wisdom:getAiPromptVersion":{"description":"Definition of AWS::Wisdom::AIPromptVersion Resource Type","inputs":{"properties":{"aiPromptId":{"type":"string","description":"The identifier of the Amazon Q in Connect AI prompt."},"assistantId":{"type":"string","description":"The identifier of the Amazon Q in Connect assistant. Can be either the ID or the ARN. URLs cannot contain the ARN."},"versionNumber":{"type":"number","description":"The version number for this AI Prompt version."}},"required":["assistantId","aiPromptId","versionNumber"]},"outputs":{"properties":{"aiPromptArn":{"description":"The ARN of the AI prompt.","type":"string"},"aiPromptVersionId":{"type":"string"},"assistantArn":{"type":"string"},"versionNumber":{"description":"The version number for this AI Prompt version.","type":"number"}}}},"aws-native:wisdom:getAssistant":{"description":"Definition of AWS::Wisdom::Assistant Resource Type","inputs":{"properties":{"assistantId":{"type":"string","description":"The ID of the Wisdom assistant."}},"required":["assistantId"]},"outputs":{"properties":{"assistantArn":{"description":"The Amazon Resource Name (ARN) of the assistant.","type":"string"},"assistantId":{"description":"The ID of the Wisdom assistant.","type":"string"}}}},"aws-native:wisdom:getAssistantAssociation":{"description":"Definition of AWS::Wisdom::AssistantAssociation Resource Type","inputs":{"properties":{"assistantAssociationId":{"type":"string","description":"The ID of the association."},"assistantId":{"type":"string","description":"The identifier of the Wisdom assistant."}},"required":["assistantAssociationId","assistantId"]},"outputs":{"properties":{"assistantArn":{"description":"The Amazon Resource Name (ARN) of the Wisdom assistant.","type":"string"},"assistantAssociationArn":{"description":"The Amazon Resource Name (ARN) of the assistant association.","type":"string"},"assistantAssociationId":{"description":"The ID of the association.","type":"string"}}}},"aws-native:wisdom:getKnowledgeBase":{"description":"Definition of AWS::Wisdom::KnowledgeBase Resource Type","inputs":{"properties":{"knowledgeBaseId":{"type":"string","description":"The ID of the knowledge base."}},"required":["knowledgeBaseId"]},"outputs":{"properties":{"knowledgeBaseArn":{"description":"The Amazon Resource Name (ARN) of the knowledge base.","type":"string"},"knowledgeBaseId":{"description":"The ID of the knowledge base.","type":"string"},"renderingConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseRenderingConfiguration","description":"Information about how to render the content."},"vectorIngestionConfiguration":{"$ref":"#/types/aws-native:wisdom:KnowledgeBaseVectorIngestionConfiguration","description":"Contains details about how to ingest the documents in a data source."}}}},"aws-native:wisdom:getMessageTemplate":{"description":"Definition of AWS::Wisdom::MessageTemplate Resource Type","inputs":{"properties":{"messageTemplateArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the message template."}},"required":["messageTemplateArn"]},"outputs":{"properties":{"content":{"$ref":"#/types/aws-native:wisdom:MessageTemplateContent","description":"The content of the message template."},"defaultAttributes":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAttributes","description":"An object that specifies the default values to use for variables in the message template. This object contains different categories of key-value pairs. Each key defines a variable or placeholder in the message template. The corresponding value defines the default value for that variable."},"description":{"description":"The description of the message template.","type":"string"},"groupingConfiguration":{"$ref":"#/types/aws-native:wisdom:MessageTemplateGroupingConfiguration","description":"The configuration information of the external data source."},"language":{"description":"The language code value for the language in which the message template is written. The supported language codes include de_DE, en_US, es_ES, fr_FR, id_ID, it_IT, ja_JP, ko_KR, pt_BR, zh_CN, zh_TW","type":"string"},"messageTemplateArn":{"description":"The Amazon Resource Name (ARN) of the message template.","type":"string"},"messageTemplateAttachments":{"description":"List of message template attachments","items":{"$ref":"#/types/aws-native:wisdom:MessageTemplateAttachment"},"type":"array"},"messageTemplateContentSha256":{"description":"The content SHA256 of the message template.","type":"string"},"messageTemplateId":{"description":"The unique identifier of the message template.","type":"string"},"name":{"description":"The name of the message template.","type":"string"},"tags":{"description":"The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:wisdom:getMessageTemplateVersion":{"description":"A version for the specified customer-managed message template within the specified knowledge base.","inputs":{"properties":{"messageTemplateVersionArn":{"type":"string","description":"The unqualified Amazon Resource Name (ARN) of the message template version."}},"required":["messageTemplateVersionArn"]},"outputs":{"properties":{"messageTemplateContentSha256":{"description":"The content SHA256 of the message template.","type":"string"},"messageTemplateVersionArn":{"description":"The unqualified Amazon Resource Name (ARN) of the message template version.","type":"string"},"messageTemplateVersionNumber":{"description":"Current version number of the message template.","type":"number"}}}},"aws-native:wisdom:getQuickResponse":{"description":"Definition of AWS::Wisdom::QuickResponse Resource Type.","inputs":{"properties":{"quickResponseArn":{"type":"string","description":"The Amazon Resource Name (ARN) of the quick response."}},"required":["quickResponseArn"]},"outputs":{"properties":{"channels":{"description":"The Amazon Connect contact channels this quick response applies to.","items":{"$ref":"#/types/aws-native:wisdom:QuickResponseChannelType"},"type":"array"},"content":{"$ref":"#/types/aws-native:wisdom:QuickResponseContentProvider","description":"The content of the quick response."},"contentType":{"description":"The media type of the quick response content.\n- Use application/x.quickresponse;format=plain for quick response written in plain text.\n- Use application/x.quickresponse;format=markdown for quick response written in richtext.","type":"string"},"contents":{"$ref":"#/types/aws-native:wisdom:QuickResponseContents"},"description":{"description":"The description of the quick response.","type":"string"},"groupingConfiguration":{"$ref":"#/types/aws-native:wisdom:QuickResponseGroupingConfiguration","description":"The configuration information of the user groups that the quick response is accessible to."},"isActive":{"description":"Whether the quick response is active.","type":"boolean"},"language":{"description":"The language code value for the language in which the quick response is written. The supported language codes include de_DE, en_US, es_ES, fr_FR, id_ID, it_IT, ja_JP, ko_KR, pt_BR, zh_CN, zh_TW","type":"string"},"name":{"description":"The name of the quick response.","type":"string"},"quickResponseArn":{"description":"The Amazon Resource Name (ARN) of the quick response.","type":"string"},"quickResponseId":{"description":"The identifier of the quick response.","type":"string"},"shortcutKey":{"description":"The shortcut key of the quick response. The value should be unique across the knowledge base.","type":"string"},"status":{"$ref":"#/types/aws-native:wisdom:QuickResponseStatus","description":"The status of the quick response data."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:workspaces:getConnectionAlias":{"description":"Resource Type definition for AWS::WorkSpaces::ConnectionAlias","inputs":{"properties":{"aliasId":{"type":"string","description":"The identifier of the connection alias, returned as a string."}},"required":["aliasId"]},"outputs":{"properties":{"aliasId":{"description":"The identifier of the connection alias, returned as a string.","type":"string"},"associations":{"description":"The association status of the connection alias.","items":{"$ref":"#/types/aws-native:workspaces:ConnectionAliasAssociation"},"type":"array"},"connectionAliasState":{"$ref":"#/types/aws-native:workspaces:ConnectionAliasState","description":"The current state of the connection alias, returned as a string."}}}},"aws-native:workspaces:getWorkspace":{"description":"Resource Type definition for AWS::WorkSpaces::Workspace","inputs":{"properties":{"workspaceId":{"type":"string"}},"required":["workspaceId"]},"outputs":{"properties":{"bundleId":{"description":"The identifier of the bundle for the WorkSpace.","type":"string"},"id":{"description":"The identifier of the WorkSpace, returned as a string.","type":"string"},"rootVolumeEncryptionEnabled":{"description":"Indicates whether the data stored on the root volume is encrypted.","type":"boolean"},"tags":{"description":"The tags for the WorkSpace.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userVolumeEncryptionEnabled":{"description":"Indicates whether the data stored on the user volume is encrypted.","type":"boolean"},"volumeEncryptionKey":{"description":"The symmetric AWS KMS key used to encrypt data stored on your WorkSpace. Amazon WorkSpaces does not support asymmetric KMS keys.","type":"string"},"workspaceId":{"type":"string"},"workspaceProperties":{"$ref":"#/types/aws-native:workspaces:WorkspaceProperties","description":"The WorkSpace properties."}}}},"aws-native:workspaces:getWorkspacesPool":{"description":"Resource Type definition for AWS::WorkSpaces::WorkspacesPool","inputs":{"properties":{"poolId":{"type":"string","description":"The identifier of the pool."}},"required":["poolId"]},"outputs":{"properties":{"applicationSettings":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolApplicationSettings","description":"The persistent application settings for users of the pool."},"bundleId":{"description":"The identifier of the bundle used by the pool.","type":"string"},"capacity":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolCapacity","description":"Describes the user capacity for the pool."},"createdAt":{"description":"The time the pool was created.","type":"string"},"description":{"description":"The description of the pool.","type":"string"},"directoryId":{"description":"The identifier of the directory used by the pool.","type":"string"},"poolArn":{"description":"The Amazon Resource Name (ARN) for the pool.","type":"string"},"poolId":{"description":"The identifier of the pool.","type":"string"},"runningMode":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolRunningMode","description":"The running mode of the pool."},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"timeoutSettings":{"$ref":"#/types/aws-native:workspaces:WorkspacesPoolTimeoutSettings","description":"The amount of time that a pool session remains active after users disconnect. If they try to reconnect to the pool session after a disconnection or network interruption within this time interval, they are connected to their previous session. Otherwise, they are connected to a new session with a new pool instance."}}}},"aws-native:workspacesinstances:getVolume":{"description":"Resource Type definition for AWS::WorkspacesInstances::Volume - Manages WorkSpaces Volume resources","inputs":{"properties":{"volumeId":{"type":"string","description":"Unique identifier for the volume"}},"required":["volumeId"]},"outputs":{"properties":{"volumeId":{"description":"Unique identifier for the volume","type":"string"}}}},"aws-native:workspacesinstances:getWorkspaceInstance":{"description":"Resource Type definition for AWS::WorkspacesInstances::WorkspaceInstance","inputs":{"properties":{"workspaceInstanceId":{"type":"string","description":"Unique identifier for the workspace instance"}},"required":["workspaceInstanceId"]},"outputs":{"properties":{"ec2ManagedInstance":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceEc2ManagedInstance"},"provisionState":{"$ref":"#/types/aws-native:workspacesinstances:WorkspaceInstanceProvisionState","description":"The current state of the workspace instance"},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"workspaceInstanceId":{"description":"Unique identifier for the workspace instance","type":"string"}}}},"aws-native:workspacesthinclient:getEnvironment":{"description":"Resource type definition for AWS::WorkSpacesThinClient::Environment.","inputs":{"properties":{"id":{"type":"string","description":"Unique identifier of the environment."}},"required":["id"]},"outputs":{"properties":{"activationCode":{"description":"Activation code for devices associated with environment.","type":"string"},"arn":{"description":"The environment ARN.","type":"string"},"createdAt":{"description":"The timestamp in unix epoch format when environment was created.","type":"string"},"desiredSoftwareSetId":{"description":"The ID of the software set to apply.","type":"string"},"desktopEndpoint":{"description":"The URL for the identity provider login (only for environments that use AppStream 2.0).","type":"string"},"desktopType":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentDesktopType","description":"The type of VDI."},"deviceCreationTags":{"description":"An array of key-value pairs to apply to the newly created devices for this environment.","items":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentTag"},"type":"array"},"id":{"description":"Unique identifier of the environment.","type":"string"},"maintenanceWindow":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentMaintenanceWindow","description":"A specification for a time window to apply software updates."},"name":{"description":"The name of the environment.","type":"string"},"pendingSoftwareSetId":{"description":"The ID of the software set that is pending to be installed.","type":"string"},"pendingSoftwareSetVersion":{"description":"The version of the software set that is pending to be installed.","type":"string"},"registeredDevicesCount":{"description":"Number of devices registered to the environment.","type":"integer"},"softwareSetComplianceStatus":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetComplianceStatus","description":"Describes if the software currently installed on all devices in the environment is a supported version."},"softwareSetUpdateMode":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateMode","description":"An option to define which software updates to apply."},"softwareSetUpdateSchedule":{"$ref":"#/types/aws-native:workspacesthinclient:EnvironmentSoftwareSetUpdateSchedule","description":"An option to define if software updates should be applied within a maintenance window."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"updatedAt":{"description":"The timestamp in unix epoch format when environment was last updated.","type":"string"}}}},"aws-native:workspacesweb:getBrowserSettings":{"description":"Definition of AWS::WorkSpacesWeb::BrowserSettings Resource Type","inputs":{"properties":{"browserSettingsArn":{"type":"string","description":"The ARN of the browser settings."}},"required":["browserSettingsArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"A list of web portal ARNs that the browser settings resource is associated with.","items":{"type":"string"},"type":"array"},"browserPolicy":{"description":"A JSON string containing Chrome Enterprise policies that will be applied to all streaming sessions.","type":"string"},"browserSettingsArn":{"description":"The ARN of the browser settings.","type":"string"},"tags":{"description":"The tags to add to the browser settings resource. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"webContentFilteringPolicy":{"$ref":"#/types/aws-native:workspacesweb:BrowserSettingsWebContentFilteringPolicy","description":"The policy that specifies which URLs end users are allowed to access or which URLs or domain categories they are restricted from accessing for enhanced security."}}}},"aws-native:workspacesweb:getDataProtectionSettings":{"description":"Definition of AWS::WorkSpacesWeb::DataProtectionSettings Resource Type","inputs":{"properties":{"dataProtectionSettingsArn":{"type":"string","description":"The ARN of the data protection settings resource."}},"required":["dataProtectionSettingsArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"A list of web portal ARNs that this data protection settings resource is associated with.","items":{"type":"string"},"type":"array"},"creationDate":{"description":"The creation date timestamp of the data protection settings.","type":"string"},"dataProtectionSettingsArn":{"description":"The ARN of the data protection settings resource.","type":"string"},"description":{"description":"The description of the data protection settings.","type":"string"},"displayName":{"description":"The display name of the data protection settings.","type":"string"},"inlineRedactionConfiguration":{"$ref":"#/types/aws-native:workspacesweb:DataProtectionSettingsInlineRedactionConfiguration","description":"The inline redaction configuration for the data protection settings."},"tags":{"description":"The tags of the data protection settings.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:workspacesweb:getIdentityProvider":{"description":"Definition of AWS::WorkSpacesWeb::IdentityProvider Resource Type","inputs":{"properties":{"identityProviderArn":{"type":"string","description":"The ARN of the identity provider."}},"required":["identityProviderArn"]},"outputs":{"properties":{"identityProviderArn":{"description":"The ARN of the identity provider.","type":"string"},"identityProviderDetails":{"additionalProperties":{"type":"string"},"description":"The identity provider details. The following list describes the provider detail keys for each identity provider type.\n\n- For Google and Login with Amazon:\n\n- `client_id`\n- `client_secret`\n- `authorize_scopes`\n- For Facebook:\n\n- `client_id`\n- `client_secret`\n- `authorize_scopes`\n- `api_version`\n- For Sign in with Apple:\n\n- `client_id`\n- `team_id`\n- `key_id`\n- `private_key`\n- `authorize_scopes`\n- For OIDC providers:\n\n- `client_id`\n- `client_secret`\n- `attributes_request_method`\n- `oidc_issuer`\n- `authorize_scopes`\n- `authorize_url` *if not available from discovery URL specified by oidc_issuer key*\n- `token_url` *if not available from discovery URL specified by oidc_issuer key*\n- `attributes_url` *if not available from discovery URL specified by oidc_issuer key*\n- `jwks_uri` *if not available from discovery URL specified by oidc_issuer key*\n- For SAML providers:\n\n- `MetadataFile` OR `MetadataURL`\n- `IDPSignout` (boolean) *optional*\n- `IDPInit` (boolean) *optional*\n- `RequestSigningAlgorithm` (string) *optional* - Only accepts `rsa-sha256`\n- `EncryptedResponses` (boolean) *optional*","type":"object"},"identityProviderName":{"description":"The identity provider name.","type":"string"},"identityProviderType":{"$ref":"#/types/aws-native:workspacesweb:IdentityProviderType","description":"The identity provider type."},"tags":{"items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:workspacesweb:getIpAccessSettings":{"description":"Definition of AWS::WorkSpacesWeb::IpAccessSettings Resource Type","inputs":{"properties":{"ipAccessSettingsArn":{"type":"string","description":"The ARN of the IP access settings resource."}},"required":["ipAccessSettingsArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"A list of web portal ARNs that this IP access settings resource is associated with.","items":{"type":"string"},"type":"array"},"creationDate":{"description":"The creation date timestamp of the IP access settings.","type":"string"},"description":{"description":"The description of the IP access settings.","type":"string"},"displayName":{"description":"The display name of the IP access settings.","type":"string"},"ipAccessSettingsArn":{"description":"The ARN of the IP access settings resource.","type":"string"},"ipRules":{"description":"The IP rules of the IP access settings.","items":{"$ref":"#/types/aws-native:workspacesweb:IpAccessSettingsIpRule"},"type":"array"},"tags":{"description":"The tags to add to the IP access settings resource. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:workspacesweb:getNetworkSettings":{"description":"Definition of AWS::WorkSpacesWeb::NetworkSettings Resource Type","inputs":{"properties":{"networkSettingsArn":{"type":"string","description":"The ARN of the network settings."}},"required":["networkSettingsArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"A list of web portal ARNs that this network settings is associated with.","items":{"type":"string"},"type":"array"},"networkSettingsArn":{"description":"The ARN of the network settings.","type":"string"},"securityGroupIds":{"description":"One or more security groups used to control access from streaming instances to your VPC.\n\n*Pattern* : `^[\\w+\\-]+$`","items":{"type":"string"},"type":"array"},"subnetIds":{"description":"The subnets in which network interfaces are created to connect streaming instances to your VPC. At least two of these subnets must be in different availability zones.\n\n*Pattern* : `^subnet-([0-9a-f]{8}|[0-9a-f]{17})$`","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to add to the network settings resource. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"vpcId":{"description":"The VPC that streaming instances will connect to.\n\n*Pattern* : `^vpc-[0-9a-z]*$`","type":"string"}}}},"aws-native:workspacesweb:getPortal":{"description":"Definition of AWS::WorkSpacesWeb::Portal Resource Type","inputs":{"properties":{"portalArn":{"type":"string","description":"The ARN of the web portal."}},"required":["portalArn"]},"outputs":{"properties":{"authenticationType":{"$ref":"#/types/aws-native:workspacesweb:PortalAuthenticationType","description":"The type of authentication integration points used when signing into the web portal. Defaults to `Standard` .\n\n`Standard` web portals are authenticated directly through your identity provider (IdP). User and group access to your web portal is controlled through your IdP. You need to include an IdP resource in your template to integrate your IdP with your web portal. Completing the configuration for your IdP requires exchanging WorkSpaces Secure Browser’s SP metadata with your IdP’s IdP metadata. If your IdP requires the SP metadata first before returning the IdP metadata, you should follow these steps:\n\n1. Create and deploy a CloudFormation template with a `Standard` portal with no `IdentityProvider` resource.\n\n2. Retrieve the SP metadata using `Fn:GetAtt` , the WorkSpaces Secure Browser console, or by the calling the `GetPortalServiceProviderMetadata` API.\n\n3. Submit the data to your IdP.\n\n4. Add an `IdentityProvider` resource to your CloudFormation template.\n\n`SSO` web portals are authenticated through SSOlong . They provide additional features, such as IdP-initiated authentication. Identity sources (including external identity provider integration) and other identity provider information must be configured in SSO . User and group assignment must be done through the WorkSpaces Secure Browser console. These cannot be configured in CloudFormation."},"browserSettingsArn":{"description":"The ARN of the browser settings that is associated with this web portal.","type":"string"},"browserType":{"$ref":"#/types/aws-native:workspacesweb:PortalBrowserType","description":"The browser that users see when using a streaming session."},"creationDate":{"description":"The creation date of the web portal.","type":"string"},"dataProtectionSettingsArn":{"description":"The ARN of the data protection settings.","type":"string"},"displayName":{"description":"The name of the web portal.","type":"string"},"instanceType":{"$ref":"#/types/aws-native:workspacesweb:PortalInstanceType","description":"The type and resources of the underlying instance."},"ipAccessSettingsArn":{"description":"The ARN of the IP access settings that is associated with the web portal.","type":"string"},"maxConcurrentSessions":{"description":"The maximum number of concurrent sessions for the portal.","type":"number"},"networkSettingsArn":{"description":"The ARN of the network settings that is associated with the web portal.","type":"string"},"portalArn":{"description":"The ARN of the web portal.","type":"string"},"portalCustomDomain":{"type":"string"},"portalEndpoint":{"description":"The endpoint URL of the web portal that users access in order to start streaming sessions.","type":"string"},"portalStatus":{"$ref":"#/types/aws-native:workspacesweb:PortalStatus","description":"The status of the web portal."},"rendererType":{"$ref":"#/types/aws-native:workspacesweb:PortalRendererType","description":"The renderer that is used in streaming sessions."},"serviceProviderSamlMetadata":{"description":"The SAML metadata of the service provider.","type":"string"},"sessionLoggerArn":{"description":"The ARN of the session logger that is associated with the portal.","type":"string"},"statusReason":{"description":"A message that explains why the web portal is in its current status.","type":"string"},"tags":{"description":"The tags to add to the web portal. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trustStoreArn":{"description":"The ARN of the trust store that is associated with the web portal.","type":"string"},"userAccessLoggingSettingsArn":{"description":"The ARN of the user access logging settings that is associated with the web portal.","type":"string"},"userSettingsArn":{"description":"The ARN of the user settings that is associated with the web portal.","type":"string"}}}},"aws-native:workspacesweb:getSessionLogger":{"description":"Definition of AWS::WorkSpacesWeb::SessionLogger Resource Type","inputs":{"properties":{"sessionLoggerArn":{"type":"string","description":"The ARN of the session logger resource."}},"required":["sessionLoggerArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"The associated portal ARN.","items":{"type":"string"},"type":"array"},"creationDate":{"description":"The date the session logger resource was created.","type":"string"},"displayName":{"description":"The human-readable display name.","type":"string"},"eventFilter":{"description":"The filter that specifies which events to monitor.","oneOf":[{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEventFilter0Properties"},{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerEventFilter1Properties"}]},"logConfiguration":{"$ref":"#/types/aws-native:workspacesweb:SessionLoggerLogConfiguration","description":"The configuration that specifies where logs are fowarded."},"sessionLoggerArn":{"description":"The ARN of the session logger resource.","type":"string"},"tags":{"description":"The tags of the session logger.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:workspacesweb:getTrustStore":{"description":"Definition of AWS::WorkSpacesWeb::TrustStore Resource Type","inputs":{"properties":{"trustStoreArn":{"type":"string","description":"The ARN of the trust store."}},"required":["trustStoreArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"A list of web portal ARNs that this trust store is associated with.","items":{"type":"string"},"type":"array"},"certificateList":{"description":"A list of CA certificates to be added to the trust store.","items":{"type":"string"},"type":"array"},"tags":{"description":"The tags to add to the trust store. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"trustStoreArn":{"description":"The ARN of the trust store.","type":"string"}}}},"aws-native:workspacesweb:getUserAccessLoggingSettings":{"description":"Definition of AWS::WorkSpacesWeb::UserAccessLoggingSettings Resource Type","inputs":{"properties":{"userAccessLoggingSettingsArn":{"type":"string","description":"The ARN of the user access logging settings."}},"required":["userAccessLoggingSettingsArn"]},"outputs":{"properties":{"associatedPortalArns":{"description":"A list of web portal ARNs that this user access logging settings is associated with.","items":{"type":"string"},"type":"array"},"kinesisStreamArn":{"description":"Kinesis stream ARN to which log events are published.","type":"string"},"tags":{"description":"The tags to add to the user access logging settings resource. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"userAccessLoggingSettingsArn":{"description":"The ARN of the user access logging settings.","type":"string"}}}},"aws-native:workspacesweb:getUserSettings":{"description":"Definition of AWS::WorkSpacesWeb::UserSettings Resource Type","inputs":{"properties":{"userSettingsArn":{"type":"string","description":"The ARN of the user settings."}},"required":["userSettingsArn"]},"outputs":{"properties":{"additionalEncryptionContext":{"additionalProperties":{"type":"string"},"description":"The additional encryption context of the user settings.","type":"object"},"associatedPortalArns":{"description":"A list of web portal ARNs that this user settings resource is associated with.","items":{"type":"string"},"type":"array"},"brandingConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsBrandingConfiguration","description":"The branding configuration that customizes the appearance of the web portal for end users. This includes a custom logo, favicon, wallpaper, localized strings, color theme, and an optional terms of service."},"cookieSynchronizationConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsCookieSynchronizationConfiguration","description":"The configuration that specifies which cookies should be synchronized from the end user's local browser to the remote browser."},"copyAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can copy text from the streaming session to the local device."},"customerManagedKey":{"description":"The customer managed key used to encrypt sensitive information in the user settings.","type":"string"},"deepLinkAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can use deep links that open automatically when connecting to a session."},"disconnectTimeoutInMinutes":{"description":"The amount of time that a streaming session remains active after users disconnect.","type":"number"},"downloadAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can download files from the streaming session to the local device."},"idleDisconnectTimeoutInMinutes":{"description":"The amount of time that users can be idle (inactive) before they are disconnected from their streaming session and the disconnect timeout interval begins.","type":"number"},"pasteAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can paste text from the local device to the streaming session."},"printAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can print to the local device."},"tags":{"description":"The tags to add to the user settings resource. A tag is a key-value pair.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"},"toolbarConfiguration":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsToolbarConfiguration","description":"The configuration of the toolbar. This allows administrators to select the toolbar type and visual mode, set maximum display resolution for sessions, and choose which items are visible to end users during their sessions. If administrators do not modify these settings, end users retain control over their toolbar preferences."},"uploadAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can upload files from the local device to the streaming session."},"userSettingsArn":{"description":"The ARN of the user settings.","type":"string"},"webAuthnAllowed":{"$ref":"#/types/aws-native:workspacesweb:UserSettingsEnabledType","description":"Specifies whether the user can use WebAuthn redirection for passwordless login to websites within the streaming session."}}}},"aws-native:xray:getGroup":{"description":"This schema provides construct and validation rules for AWS-XRay Group resource parameters.","inputs":{"properties":{"groupArn":{"type":"string","description":"The ARN of the group that was generated on creation."}},"required":["groupArn"]},"outputs":{"properties":{"filterExpression":{"description":"The filter expression defining criteria by which to group traces.","type":"string"},"groupArn":{"description":"The ARN of the group that was generated on creation.","type":"string"},"groupName":{"description":"The case-sensitive name of the new group. Names must be unique.","type":"string"},"insightsConfiguration":{"$ref":"#/types/aws-native:xray:GroupInsightsConfiguration","description":"The structure containing configurations related to insights.\n\n- The InsightsEnabled boolean can be set to true to enable insights for the group or false to disable insights for the group.\n- The NotificationsEnabled boolean can be set to true to enable insights notifications through Amazon EventBridge for the group."},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:xray:getResourcePolicy":{"description":"This schema provides construct and validation rules for AWS-XRay Resource Policy resource parameters.","inputs":{"properties":{"policyName":{"type":"string","description":"The name of the resource policy. Must be unique within a specific AWS account."}},"required":["policyName"]},"outputs":{"properties":{"policyDocument":{"description":"The resource policy document, which can be up to 5kb in size.","type":"string"}}}},"aws-native:xray:getSamplingRule":{"description":"This schema provides construct and validation rules for AWS-XRay SamplingRule resource parameters.","inputs":{"properties":{"ruleArn":{"type":"string","description":"The sampling rule ARN that was created or updated."}},"required":["ruleArn"]},"outputs":{"properties":{"ruleArn":{"description":"The sampling rule ARN that was created or updated.","type":"string"},"ruleName":{"type":"string"},"samplingRule":{"$ref":"#/types/aws-native:xray:SamplingRule","description":"The sampling rule to be created or updated.","language":{"csharp":{"name":"SamplingRuleValue"}}},"samplingRuleRecord":{"$ref":"#/types/aws-native:xray:SamplingRuleRecord"},"samplingRuleUpdate":{"$ref":"#/types/aws-native:xray:SamplingRuleUpdate"},"tags":{"description":"An array of key-value pairs to apply to this resource.","items":{"$ref":"#/types/aws-native:index:Tag"},"type":"array"}}}},"aws-native:xray:getTransactionSearchConfig":{"description":"This schema provides construct and validation rules for AWS-XRay TransactionSearchConfig resource parameters.","inputs":{"properties":{"accountId":{"type":"string"}},"required":["accountId"]},"outputs":{"properties":{"accountId":{"type":"string"},"indexingPercentage":{"type":"number"}}}}}}